@dfx.swiss/wallet 0.0.0-stage → 0.1.1-beta.1

package/dist/derivation/spark-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spark-keys.d.ts","sourceRoot":"","sources":["../../src/derivation/spark-keys.ts"],"names":[],"mappings":"AAKA;;;GAGG;AACH,eAAO,MAAM,mBAAmB,EAAG,kBAA2B,CAAC;AAW/D,yGAAyG;AACzG,wBAAgB,kBAAkB,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAGhE;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,UAAU,CA0B9D"}

package/dist/derivation/spark-keys.js

@@ -0,0 +1,64 @@
+import { secp256k1 } from '@noble/curves/secp256k1';
+import { bech32m } from '@scure/base';
+import { concatBytes, isBytes } from '../util/bytes';
+import { WalletError } from '../util/errors';
+/**
+ * Spark identity key: Spark SDK default derivation on the main mnemonic, mainnet account 1 (Breez SDK Spark
+ * `defaultExternalSigners(mnemonic, null, 'mainnet', 1)`). Pinned by the known-answer vectors.
+ */
+export const SPARK_IDENTITY_PATH = "m/8797555'/1'/0'";
+const SPARK_HRP = 'spark';
+// Protobuf `SparkAddress { bytes identity_public_key = 1; }` with a 33-byte key: tag 0x0a, length 0x21.
+const PAYLOAD_PREFIX = new Uint8Array([0x0a, 0x21]);
+const PAYLOAD_BYTES = PAYLOAD_PREFIX.length + 33;
+// Longer than any bech32m string we accept; the payload length check below is the real limit.
+const BECH32_LIMIT = 1024;
+/** Plain mainnet Spark address: bech32m(`spark`, 0x0a 0x21 ‖ identity public key), no invoice fields. */
+export function encodeSparkAddress(publicKey) {
+    checkIdentityPublicKey(publicKey);
+    return bech32m.encode(SPARK_HRP, bech32m.toWords(concatBytes(PAYLOAD_PREFIX, publicKey)), BECH32_LIMIT);
+}
+/**
+ * Strict decoder for plain mainnet Spark addresses: lowercase, HRP `spark`, payload exactly 0x0a 0x21 followed by
+ * a valid compressed secp256k1 point. Invoice addresses, other networks and raw-key payloads are refused.
+ * Returns the 33-byte identity public key.
+ */
+export function decodeSparkAddress(address) {
+    if (typeof address !== 'string' || address !== address.toLowerCase()) {
+        throw invalid('Spark address must be lowercase');
+    }
+    let decoded;
+    try {
+        decoded = bech32m.decode(address, BECH32_LIMIT);
+    }
+    catch (error) {
+        throw invalid('Spark address is not valid bech32m', error);
+    }
+    if (decoded.prefix !== SPARK_HRP)
+        throw invalid(`Spark address prefix must be "${SPARK_HRP}"`);
+    const payload = bech32m.fromWordsUnsafe(decoded.words);
+    if (!payload ||
+        payload.length !== PAYLOAD_BYTES ||
+        payload[0] !== PAYLOAD_PREFIX[0] ||
+        payload[1] !== PAYLOAD_PREFIX[1]) {
+        throw invalid('Spark address payload must be a plain identity public key');
+    }
+    const publicKey = payload.slice(PAYLOAD_PREFIX.length);
+    checkIdentityPublicKey(publicKey);
+    return publicKey;
+}
+function checkIdentityPublicKey(publicKey) {
+    if (!isBytes(publicKey) || publicKey.length !== 33 || (publicKey[0] !== 0x02 && publicKey[0] !== 0x03)) {
+        throw invalid('Spark identity public key must be a 33-byte compressed key');
+    }
+    try {
+        secp256k1.ProjectivePoint.fromHex(publicKey).assertValidity();
+    }
+    catch (error) {
+        throw invalid('Spark identity public key is not a secp256k1 point', error);
+    }
+}
+function invalid(message, cause) {
+    return new WalletError('invalid-spark-address', message, cause === undefined ? undefined : { cause });
+}
+//# sourceMappingURL=spark-keys.js.map

package/dist/derivation/spark-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spark-keys.js","sourceRoot":"","sources":["../../src/derivation/spark-keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC;AACtC,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,eAAe,CAAC;AACrD,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG,kBAA2B,CAAC;AAE/D,MAAM,SAAS,GAAG,OAAO,CAAC;AAE1B,wGAAwG;AACxG,MAAM,cAAc,GAAG,IAAI,UAAU,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AACpD,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,GAAG,EAAE,CAAC;AAEjD,8FAA8F;AAC9F,MAAM,YAAY,GAAG,IAAI,CAAC;AAE1B,yGAAyG;AACzG,MAAM,UAAU,kBAAkB,CAAC,SAAqB;IACtD,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAClC,OAAO,OAAO,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC;AAC1G,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QACrE,MAAM,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACnD,CAAC;IAED,IAAI,OAA4C,CAAC;IACjD,IAAI,CAAC;QACH,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,OAAgC,EAAE,YAAY,CAAC,CAAC;IAC3E,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,CAAC,oCAAoC,EAAE,KAAK,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS;QAAE,MAAM,OAAO,CAAC,iCAAiC,SAAS,GAAG,CAAC,CAAC;IAE/F,MAAM,OAAO,GAAG,OAAO,CAAC,eAAe,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvD,IACE,CAAC,OAAO;QACR,OAAO,CAAC,MAAM,KAAK,aAAa;QAChC,OAAO,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC;QAChC,OAAO,CAAC,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC,CAAC,EAChC,CAAC;QACD,MAAM,OAAO,CAAC,2DAA2D,CAAC,CAAC;IAC7E,CAAC;IAED,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;IACvD,sBAAsB,CAAC,SAAS,CAAC,CAAC;IAClC,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,sBAAsB,CAAC,SAAqB;IACnD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,EAAE,CAAC;QACvG,MAAM,OAAO,CAAC,4DAA4D,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,CAAC;QACH,SAAS,CAAC,eAAe,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,cAAc,EAAE,CAAC;IAChE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,CAAC,oDAAoD,EAAE,KAAK,CAAC,CAAC;IAC7E,CAAC;AACH,CAAC;AAED,SAAS,OAAO,CAAC,OAAe,EAAE,KAAe;IAC/C,OAAO,IAAI,WAAW,CAAC,uBAAuB,EAAE,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;AACxG,CAAC"}

package/dist/derivation/v1.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Derivation version v1: PRF output → BIP-39 mnemonic. These values are frozen forever; changing any of them
+ * changes every wallet. They are pinned by the known-answer vectors in `__tests__/fixtures/derivation-v1.json`.
+ */
+export declare const DERIVATION_V1: Readonly<{
+    readonly version: "v1";
+    /** PRF input (`prf.eval.first`) = SHA-256 of this UTF-8 label. */
+    readonly prfInputLabel: "dfx.swiss/passkey-seed/prf/v1";
+    /** HKDF-SHA-256 salt (UTF-8). */
+    readonly hkdfSalt: "dfx.swiss/passkey-seed/hkdf/v1";
+    /** HKDF-SHA-256 info (UTF-8). */
+    readonly hkdfInfo: "bip39-entropy-128";
+    /** BIP-39 entropy length: 16 bytes = 12 English words. */
+    readonly entropyBytes: 16;
+    /** BIP-39 passphrase. */
+    readonly passphrase: "";
+}>;
+/** Length of a WebAuthn PRF output. */
+export declare const PRF_OUTPUT_BYTES = 32;
+/** The PRF input of every v1 ceremony: SHA-256(UTF-8 label), 32 bytes. */
+export declare function prfInputV1(): Uint8Array;
+/** HKDF-SHA-256 over the PRF output → 16 bytes of BIP-39 entropy. */
+export declare function entropyFromPrfV1(prfOutput: Uint8Array): Uint8Array;
+/** BIP-39 English mnemonic of the given entropy. */
+export declare function mnemonicFromEntropy(entropy: Uint8Array): string;
+/** PRF output → 12-word English mnemonic (derivation v1). */
+export declare function mnemonicFromPrfV1(prfOutput: Uint8Array): string;
+/** Collapses whitespace and checks that the mnemonic is a valid 12-word English BIP-39 phrase. */
+export declare function normalizeMnemonicV1(mnemonic: string): string;
+/** BIP-39 seed (64 bytes). v1 always uses the empty passphrase; other values exist for the BIP-39 test vectors. */
+export declare function seedFromMnemonic(mnemonic: string, passphrase?: string): Uint8Array;
+//# sourceMappingURL=v1.d.ts.map

package/dist/derivation/v1.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"v1.d.ts","sourceRoot":"","sources":["../../src/derivation/v1.ts"],"names":[],"mappings":"AAOA;;;GAGG;AACH,eAAO,MAAM,aAAa;;IAExB,kEAAkE;;IAElE,iCAAiC;;IAEjC,iCAAiC;;IAEjC,0DAA0D;;IAE1D,yBAAyB;;EAEhB,CAAC;AAEZ,uCAAuC;AACvC,eAAO,MAAM,gBAAgB,KAAK,CAAC;AAInC,0EAA0E;AAC1E,wBAAgB,UAAU,IAAI,UAAU,CAEvC;AAED,qEAAqE;AACrE,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,UAAU,GAAG,UAAU,CAWlE;AAED,oDAAoD;AACpD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,UAAU,GAAG,MAAM,CAE/D;AAED,6DAA6D;AAC7D,wBAAgB,iBAAiB,CAAC,SAAS,EAAE,UAAU,GAAG,MAAM,CAO/D;AAED,kGAAkG;AAClG,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAM5D;AAED,mHAAmH;AACnH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,GAAE,MAAiC,GAAG,UAAU,CAE5G"}

package/dist/derivation/v1.js

@@ -0,0 +1,64 @@
+import { hkdf } from '@noble/hashes/hkdf';
+import { sha256 } from '@noble/hashes/sha2';
+import { entropyToMnemonic, mnemonicToSeedSync, validateMnemonic } from '@scure/bip39';
+import { wordlist } from '@scure/bip39/wordlists/english';
+import { isBytes, utf8ToBytes, wipeBytes } from '../util/bytes';
+import { WalletError } from '../util/errors';
+/**
+ * Derivation version v1: PRF output → BIP-39 mnemonic. These values are frozen forever; changing any of them
+ * changes every wallet. They are pinned by the known-answer vectors in `__tests__/fixtures/derivation-v1.json`.
+ */
+export const DERIVATION_V1 = Object.freeze({
+    version: 'v1',
+    /** PRF input (`prf.eval.first`) = SHA-256 of this UTF-8 label. */
+    prfInputLabel: 'dfx.swiss/passkey-seed/prf/v1',
+    /** HKDF-SHA-256 salt (UTF-8). */
+    hkdfSalt: 'dfx.swiss/passkey-seed/hkdf/v1',
+    /** HKDF-SHA-256 info (UTF-8). */
+    hkdfInfo: 'bip39-entropy-128',
+    /** BIP-39 entropy length: 16 bytes = 12 English words. */
+    entropyBytes: 16,
+    /** BIP-39 passphrase. */
+    passphrase: '',
+});
+/** Length of a WebAuthn PRF output. */
+export const PRF_OUTPUT_BYTES = 32;
+const MNEMONIC_WORDS = 12;
+/** The PRF input of every v1 ceremony: SHA-256(UTF-8 label), 32 bytes. */
+export function prfInputV1() {
+    return sha256(utf8ToBytes(DERIVATION_V1.prfInputLabel));
+}
+/** HKDF-SHA-256 over the PRF output → 16 bytes of BIP-39 entropy. */
+export function entropyFromPrfV1(prfOutput) {
+    if (!isBytes(prfOutput) || prfOutput.length !== PRF_OUTPUT_BYTES) {
+        throw new WalletError('invalid-prf-output', `PRF output must be ${PRF_OUTPUT_BYTES} bytes`);
+    }
+    return hkdf(sha256, prfOutput, utf8ToBytes(DERIVATION_V1.hkdfSalt), utf8ToBytes(DERIVATION_V1.hkdfInfo), DERIVATION_V1.entropyBytes);
+}
+/** BIP-39 English mnemonic of the given entropy. */
+export function mnemonicFromEntropy(entropy) {
+    return entropyToMnemonic(entropy, wordlist);
+}
+/** PRF output → 12-word English mnemonic (derivation v1). */
+export function mnemonicFromPrfV1(prfOutput) {
+    const entropy = entropyFromPrfV1(prfOutput);
+    try {
+        return mnemonicFromEntropy(entropy);
+    }
+    finally {
+        wipeBytes(entropy);
+    }
+}
+/** Collapses whitespace and checks that the mnemonic is a valid 12-word English BIP-39 phrase. */
+export function normalizeMnemonicV1(mnemonic) {
+    const normalized = typeof mnemonic === 'string' ? mnemonic.trim().split(/\s+/).join(' ') : '';
+    if (normalized.split(' ').length !== MNEMONIC_WORDS || !validateMnemonic(normalized, wordlist)) {
+        throw new WalletError('invalid-mnemonic', `Expected a valid ${MNEMONIC_WORDS}-word English BIP-39 mnemonic`);
+    }
+    return normalized;
+}
+/** BIP-39 seed (64 bytes). v1 always uses the empty passphrase; other values exist for the BIP-39 test vectors. */
+export function seedFromMnemonic(mnemonic, passphrase = DERIVATION_V1.passphrase) {
+    return mnemonicToSeedSync(mnemonic, passphrase);
+}
+//# sourceMappingURL=v1.js.map

package/dist/derivation/v1.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"v1.js","sourceRoot":"","sources":["../../src/derivation/v1.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,oBAAoB,CAAC;AAC1C,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AACvF,OAAO,EAAE,QAAQ,EAAE,MAAM,gCAAgC,CAAC;AAC1D,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAC;IACzC,OAAO,EAAE,IAAI;IACb,kEAAkE;IAClE,aAAa,EAAE,+BAA+B;IAC9C,iCAAiC;IACjC,QAAQ,EAAE,gCAAgC;IAC1C,iCAAiC;IACjC,QAAQ,EAAE,mBAAmB;IAC7B,0DAA0D;IAC1D,YAAY,EAAE,EAAE;IAChB,yBAAyB;IACzB,UAAU,EAAE,EAAE;CACN,CAAC,CAAC;AAEZ,uCAAuC;AACvC,MAAM,CAAC,MAAM,gBAAgB,GAAG,EAAE,CAAC;AAEnC,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,0EAA0E;AAC1E,MAAM,UAAU,UAAU;IACxB,OAAO,MAAM,CAAC,WAAW,CAAC,aAAa,CAAC,aAAa,CAAC,CAAC,CAAC;AAC1D,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,SAAqB;IACpD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,SAAS,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QACjE,MAAM,IAAI,WAAW,CAAC,oBAAoB,EAAE,sBAAsB,gBAAgB,QAAQ,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,IAAI,CACT,MAAM,EACN,SAAS,EACT,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,EACnC,WAAW,CAAC,aAAa,CAAC,QAAQ,CAAC,EACnC,aAAa,CAAC,YAAY,CAC3B,CAAC;AACJ,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,mBAAmB,CAAC,OAAmB;IACrD,OAAO,iBAAiB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;AAC9C,CAAC;AAED,6DAA6D;AAC7D,MAAM,UAAU,iBAAiB,CAAC,SAAqB;IACrD,MAAM,OAAO,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC;QACH,OAAO,mBAAmB,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;YAAS,CAAC;QACT,SAAS,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,mBAAmB,CAAC,QAAgB;IAClD,MAAM,UAAU,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9F,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,KAAK,cAAc,IAAI,CAAC,gBAAgB,CAAC,UAAU,EAAE,QAAQ,CAAC,EAAE,CAAC;QAC/F,MAAM,IAAI,WAAW,CAAC,kBAAkB,EAAE,oBAAoB,cAAc,+BAA+B,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,mHAAmH;AACnH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,aAAqB,aAAa,CAAC,UAAU;IAC9F,OAAO,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;AAClD,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,46 @@
+export { WALLET_ENVS, isWalletEnv, RP_IDS, SIGN_MESSAGE_PREFIX, WALLET_NETWORKS } from './config/environment';
+export type { WalletEnv, BitcoinNetwork, SparkNetwork, EvmNetworkKind, WalletNetworks } from './config/environment';
+export { WalletError, isWalletError } from './util/errors';
+export { WALLET_DB_NAME, MemoryKeyValueStore, IndexedDbKeyValueStore, createDefaultKeyValueStore, } from './util/kv-store';
+export type { KeyValueStore, IndexedDbKeyValueStoreOptions } from './util/kv-store';
+export { DERIVATION_V1, PRF_OUTPUT_BYTES, prfInputV1, mnemonicFromPrfV1, normalizeMnemonicV1 } from './derivation/v1';
+export { KeyRing } from './derivation/keyring';
+export type { KeyRingOptions, BitcoinAccountInfo, BitcoinAddressInfo, SparkIdentityInfo } from './derivation/keyring';
+export type { BitcoinChain } from './derivation/bitcoin-keys';
+export { seedPublicData } from './derivation/public-data';
+export type { SeedPublicData } from './derivation/public-data';
+export { encodeSparkAddress, decodeSparkAddress } from './derivation/spark-keys';
+export { seedCheck } from './derivation/seed-check';
+export type { EvmAddress } from './derivation/evm-keys';
+export { LOGIN_TEMPLATES, buildLoginMessage } from './signing/login-messages';
+export type { LoginTemplate } from './signing/login-messages';
+export { LoginAutoSigner, LoginMessageMismatchError, eip191MessageHash } from './signing/auto-signer';
+export { SPARK_LOGIN_TAG, sparkLoginDigestV1, verifySparkLogin } from './signing/spark-login';
+export { bitcoinMessageMagicHash, verifyBitcoinMessage } from './signing/bitcoin-message';
+export { isDfxLoginText } from './signing/login-text-guard';
+export { checkPasskeyPlatform, isInAppBrowser, openInSystemBrowser, iosInstalledVersion, androidInstalledVersion, } from './passkey/platform';
+export type { PlatformReport, PlatformHost } from './passkey/platform';
+export { PasskeyCeremonies } from './passkey/ceremonies';
+export type { CeremonyCredentials, CeremonyWindow, PendingSeedPasskey, CreatedSeedPasskey, SeedAssertion, } from './passkey/ceremonies';
+export { PasskeyError, EmbeddedContextError, WrongOriginError, PlatformUnsupportedError, InAppBrowserError, CrossDeviceRegistrationError, PrfMismatchError, PrfUnavailableError, CeremonySupersededError, CeremonyCancelledError, UserActivationMissingError, classifyWebAuthnError, } from './passkey/errors';
+export type { WebAuthnErrorKind } from './passkey/errors';
+export { CredentialCache } from './passkey/credential-cache';
+export type { CachedPasskeyCredential, CredentialStorage } from './passkey/credential-cache';
+export { passkeyDiagnostic } from './passkey/diagnostics';
+export type { PasskeyDiagnostic, PasskeyDiagnosticInput } from './passkey/diagnostics';
+export { credentialToJSON } from './passkey/webauthn-json';
+export type { WebAuthnJson } from './passkey/webauthn-json';
+export { ChainRegistry } from './providers/chain-registry';
+export { DfxData, ProviderUnavailableError } from './providers/dfx-data';
+export type { DfxDataOptions } from './providers/dfx-data';
+export { PricePolicy, PRICE_STALE_MS } from './providers/price';
+export type { PricePolicyOptions } from './providers/price';
+export { Blocklists } from './providers/blocklist';
+export type { WalletSnapshot, SnapshotAsset, SnapshotBlocklists } from './providers/snapshot';
+export { PasskeyAuth, PasskeyRefusedError } from './session/passkey-auth';
+export type { WalletState, AuthResult, PasskeyRefusal, RegisterExtras, PasskeyAuthDeps } from './session/passkey-auth';
+export { IdleLock } from './session/idle-lock';
+export type { IdleDelay, IdleLockOptions } from './session/idle-lock';
+export { TabLock } from './session/tab-lock';
+export type { LockManagerLike } from './session/tab-lock';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAC9G,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAGpH,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAG3D,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC;AACzB,YAAY,EAAE,aAAa,EAAE,6BAA6B,EAAE,MAAM,iBAAiB,CAAC;AAGpF,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtH,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAC/C,YAAY,EAAE,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACtH,YAAY,EAAE,YAAY,EAAE,MAAM,2BAA2B,CAAC;AAC9D,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC1D,YAAY,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAC/D,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AACpD,YAAY,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGxD,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAC9E,YAAY,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACtG,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC1F,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAG5D,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAC5B,YAAY,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AACzD,YAAY,EACV,mBAAmB,EACnB,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,aAAa,GACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,EACxB,iBAAiB,EACjB,4BAA4B,EAC5B,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAC1D,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAC7D,YAAY,EAAE,uBAAuB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC7F,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,YAAY,EAAE,iBAAiB,EAAE,sBAAsB,EAAE,MAAM,uBAAuB,CAAC;AACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAC3D,YAAY,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAG5D,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACzE,YAAY,EAAE,cAAc,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAChE,YAAY,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACnD,YAAY,EAAE,cAAc,EAAE,aAAa,EAAE,kBAAkB,EAAE,MAAM,sBAAsB,CAAC;AAG9F,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAC1E,YAAY,EAAE,WAAW,EAAE,UAAU,EAAE,cAAc,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAC;AACvH,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAC/C,YAAY,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtE,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,YAAY,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/index.js

@@ -0,0 +1,36 @@
+// Public API. This package does not depend on the Breez or WalletConnect SDKs.
+// Environment
+export { WALLET_ENVS, isWalletEnv, RP_IDS, SIGN_MESSAGE_PREFIX, WALLET_NETWORKS } from './config/environment';
+// Errors
+export { WalletError, isWalletError } from './util/errors';
+// Storage
+export { WALLET_DB_NAME, MemoryKeyValueStore, IndexedDbKeyValueStore, createDefaultKeyValueStore, } from './util/kv-store';
+// Derivation v1 (§7.1, §7.2)
+export { DERIVATION_V1, PRF_OUTPUT_BYTES, prfInputV1, mnemonicFromPrfV1, normalizeMnemonicV1 } from './derivation/v1';
+export { KeyRing } from './derivation/keyring';
+export { seedPublicData } from './derivation/public-data';
+export { encodeSparkAddress, decodeSparkAddress } from './derivation/spark-keys';
+export { seedCheck } from './derivation/seed-check';
+// Signing (§8.5, §9.3, D31)
+export { LOGIN_TEMPLATES, buildLoginMessage } from './signing/login-messages';
+export { LoginAutoSigner, LoginMessageMismatchError, eip191MessageHash } from './signing/auto-signer';
+export { SPARK_LOGIN_TAG, sparkLoginDigestV1, verifySparkLogin } from './signing/spark-login';
+export { bitcoinMessageMagicHash, verifyBitcoinMessage } from './signing/bitcoin-message';
+export { isDfxLoginText } from './signing/login-text-guard';
+// Passkey (§6, §8.3, §8.4, §11.4)
+export { checkPasskeyPlatform, isInAppBrowser, openInSystemBrowser, iosInstalledVersion, androidInstalledVersion, } from './passkey/platform';
+export { PasskeyCeremonies } from './passkey/ceremonies';
+export { PasskeyError, EmbeddedContextError, WrongOriginError, PlatformUnsupportedError, InAppBrowserError, CrossDeviceRegistrationError, PrfMismatchError, PrfUnavailableError, CeremonySupersededError, CeremonyCancelledError, UserActivationMissingError, classifyWebAuthnError, } from './passkey/errors';
+export { CredentialCache } from './passkey/credential-cache';
+export { passkeyDiagnostic } from './passkey/diagnostics';
+export { credentialToJSON } from './passkey/webauthn-json';
+// Providers (D8, D23, D32, §9.2)
+export { ChainRegistry } from './providers/chain-registry';
+export { DfxData, ProviderUnavailableError } from './providers/dfx-data';
+export { PricePolicy, PRICE_STALE_MS } from './providers/price';
+export { Blocklists } from './providers/blocklist';
+// Session and flows (§8, D5, X24)
+export { PasskeyAuth, PasskeyRefusedError } from './session/passkey-auth';
+export { IdleLock } from './session/idle-lock';
+export { TabLock } from './session/tab-lock';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,+EAA+E;AAE/E,cAAc;AACd,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG9G,SAAS;AACT,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE3D,UAAU;AACV,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,sBAAsB,EACtB,0BAA0B,GAC3B,MAAM,iBAAiB,CAAC;AAGzB,6BAA6B;AAC7B,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,UAAU,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtH,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAG/C,OAAO,EAAE,cAAc,EAAE,MAAM,0BAA0B,CAAC;AAE1D,OAAO,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AACjF,OAAO,EAAE,SAAS,EAAE,MAAM,yBAAyB,CAAC;AAGpD,4BAA4B;AAC5B,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AAE9E,OAAO,EAAE,eAAe,EAAE,yBAAyB,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AACtG,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAC9F,OAAO,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,MAAM,2BAA2B,CAAC;AAC1F,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAE5D,kCAAkC;AAClC,OAAO,EACL,oBAAoB,EACpB,cAAc,EACd,mBAAmB,EACnB,mBAAmB,EACnB,uBAAuB,GACxB,MAAM,oBAAoB,CAAC;AAE5B,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAQzD,OAAO,EACL,YAAY,EACZ,oBAAoB,EACpB,gBAAgB,EAChB,wBAAwB,EACxB,iBAAiB,EACjB,4BAA4B,EAC5B,gBAAgB,EAChB,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,0BAA0B,EAC1B,qBAAqB,GACtB,MAAM,kBAAkB,CAAC;AAE1B,OAAO,EAAE,eAAe,EAAE,MAAM,4BAA4B,CAAC;AAE7D,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAE1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAC;AAG3D,iCAAiC;AACjC,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAC3D,OAAO,EAAE,OAAO,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AAEzE,OAAO,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAC;AAEhE,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AAGnD,kCAAkC;AAClC,OAAO,EAAE,WAAW,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAC;AAE1E,OAAO,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAE/C,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/passkey/ceremonies.d.ts

@@ -0,0 +1,91 @@
+import type { WalletEnv } from '../config/environment';
+import { WebAuthnJson } from './webauthn-json';
+/** Credentials surface the ceremonies drive (the browser's, or a fake in tests). */
+export interface CeremonyCredentials {
+    create(options: CredentialCreationOptions): Promise<PublicKeyCredential | null>;
+    get(options: CredentialRequestOptions): Promise<PublicKeyCredential | null>;
+}
+/** Window surface the ceremonies inspect. */
+export interface CeremonyWindow {
+    location: {
+        hostname: string;
+    };
+    navigator: {
+        userAgent: string;
+        userActivation?: {
+            isActive: boolean;
+        };
+        platform?: string;
+        maxTouchPoints?: number;
+    };
+    PublicKeyCredential?: {
+        signalUnknownCredential?: (input: {
+            credentialId: string;
+            rpId: string;
+        }) => Promise<void>;
+    };
+}
+/** A created passkey that still needs its confirming second tap (§6.3). */
+export interface PendingSeedPasskey {
+    readonly credentialId: Uint8Array;
+    /** Tap 2: the confirming `get()` that proves the credential and yields the PRF output. */
+    confirm(): Promise<CreatedSeedPasskey>;
+    /** Drops the aborted registration and tells the platform the credential is unknown. */
+    abort(): Promise<void>;
+}
+export interface CreatedSeedPasskey {
+    credentialId: Uint8Array;
+    userHandle: Uint8Array;
+    /** The `create()` result serialized for the API (PRF results stripped). */
+    attestation: WebAuthnJson;
+    /** The confirming `get()` result serialized for the API (PRF results stripped). */
+    assertion: WebAuthnJson;
+    prfOutput: Uint8Array;
+    attachment: AuthenticatorAttachment | null;
+    transports: string[];
+}
+export interface SeedAssertion {
+    credentialId: Uint8Array;
+    /** The `get()` result serialized for the API (PRF results stripped). */
+    assertion: WebAuthnJson;
+    prfOutput?: Uint8Array;
+    backupEligible: boolean;
+    backedUp: boolean;
+}
+/**
+ * The wallet's passkey ceremonies. Every option is built locally — only the challenge comes from the
+ * server — and exactly one ceremony runs at a time; a newer call or `cancel()` supersedes the running one.
+ * No AbortSignal is passed on iOS/iPadOS WebKit (it breaks ceremonies there); superseding still applies.
+ */
+export declare class PasskeyCeremonies {
+    private readonly env;
+    private readonly credentials;
+    private readonly win;
+    private readonly gate;
+    constructor(env: WalletEnv, credentials?: CeremonyCredentials, win?: CeremonyWindow);
+    /** Tap 1 of the registration: creates the credential with the PRF extension and returns the pending passkey. */
+    createCredential(input: {
+        challenge: Uint8Array;
+        excludeCredentialIds?: Uint8Array[];
+    }): Promise<PendingSeedPasskey>;
+    /** A login assertion with PRF output when the authenticator provides it.
+     * `continueCeremony` is only for a retry inside a ceremony that already ran create(). */
+    assert(input: {
+        challenge?: Uint8Array;
+        credentialId?: Uint8Array;
+        continueCeremony?: boolean;
+    }): Promise<SeedAssertion>;
+    /** Best-effort `signalUnknownCredential` for aborted registrations (§4.2); never throws. */
+    signalUnknownCredential(credentialId: Uint8Array): Promise<void>;
+    /** Supersedes the running ceremony without starting a new one. */
+    cancel(): void;
+    /** Tap 2 helper: the confirming `get()` restricted to the new credential; PRF output is mandatory.
+     * The gesture that opened tap 1 does not survive that dialog, so this prompt is not gated on it. */
+    private derivePrf;
+    /** Runs one gated WebAuthn call: user gesture, superseding, and the platform-appropriate signal. */
+    private call;
+    private withSignal;
+    private requireTopLevelOrigin;
+    private requireActivation;
+}
+//# sourceMappingURL=ceremonies.d.ts.map

package/dist/passkey/ceremonies.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ceremonies.d.ts","sourceRoot":"","sources":["../../src/passkey/ceremonies.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAiBvD,OAAO,EAAqC,YAAY,EAAsC,MAAM,iBAAiB,CAAC;AAEtH,oFAAoF;AACpF,MAAM,WAAW,mBAAmB;IAClC,MAAM,CAAC,OAAO,EAAE,yBAAyB,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;IAChF,GAAG,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,mBAAmB,GAAG,IAAI,CAAC,CAAC;CAC7E;AAED,6CAA6C;AAC7C,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,SAAS,EAAE;QACT,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE;YAAE,QAAQ,EAAE,OAAO,CAAA;SAAE,CAAC;QACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,cAAc,CAAC,EAAE,MAAM,CAAC;KACzB,CAAC;IACF,mBAAmB,CAAC,EAAE;QACpB,uBAAuB,CAAC,EAAE,CAAC,KAAK,EAAE;YAAE,YAAY,EAAE,MAAM,CAAC;YAAC,IAAI,EAAE,MAAM,CAAA;SAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;KAC5F,CAAC;CACH;AAED,2EAA2E;AAC3E,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,YAAY,EAAE,UAAU,CAAC;IAClC,0FAA0F;IAC1F,OAAO,IAAI,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACvC,uFAAuF;IACvF,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,MAAM,WAAW,kBAAkB;IACjC,YAAY,EAAE,UAAU,CAAC;IACzB,UAAU,EAAE,UAAU,CAAC;IACvB,2EAA2E;IAC3E,WAAW,EAAE,YAAY,CAAC;IAC1B,mFAAmF;IACnF,SAAS,EAAE,YAAY,CAAC;IACxB,SAAS,EAAE,UAAU,CAAC;IACtB,UAAU,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAC3C,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,UAAU,CAAC;IACzB,wEAAwE;IACxE,SAAS,EAAE,YAAY,CAAC;IACxB,SAAS,CAAC,EAAE,UAAU,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAuDD;;;;GAIG;AACH,qBAAa,iBAAiB;IAI1B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,OAAO,CAAC,QAAQ,CAAC,WAAW;IAC5B,OAAO,CAAC,QAAQ,CAAC,GAAG;IALtB,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAsB;gBAGxB,GAAG,EAAE,SAAS,EACd,WAAW,GAAE,mBAA0C,EACvD,GAAG,GAAE,cAGrB;IAGH,gHAAgH;IAC1G,gBAAgB,CAAC,KAAK,EAAE;QAC5B,SAAS,EAAE,UAAU,CAAC;QACtB,oBAAoB,CAAC,EAAE,UAAU,EAAE,CAAC;KACrC,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA2E/B;6FACyF;IACnF,MAAM,CAAC,KAAK,EAAE;QAClB,SAAS,CAAC,EAAE,UAAU,CAAC;QACvB,YAAY,CAAC,EAAE,UAAU,CAAC;QAC1B,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,GAAG,OAAO,CAAC,aAAa,CAAC;IA8B1B,4FAA4F;IACtF,uBAAuB,CAAC,YAAY,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAWtE,kEAAkE;IAClE,MAAM,IAAI,IAAI;IAId;wGACoG;YACtF,SAAS;IAwBvB,oGAAoG;YACtF,IAAI;IAiBlB,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,qBAAqB;IAc7B,OAAO,CAAC,iBAAiB;CAI1B"}

package/dist/passkey/ceremonies.js

@@ -0,0 +1,250 @@
+import { RP_IDS } from '../config/environment';
+import { prfInputV1 } from '../derivation/v1';
+import { equalBytes } from '../util/bytes';
+import { randomBytes } from '../util/random';
+import { CeremonyGate } from './ceremony-gate';
+import { CeremonySupersededError, CrossDeviceRegistrationError, EmbeddedContextError, PasskeyError, PrfMismatchError, PrfUnavailableError, UserActivationMissingError, WrongOriginError, } from './errors';
+import { isIpadDesktopMode } from './platform';
+import { bytesToBase64Url, credentialToJSON } from './webauthn-json';
+const TIMEOUT_MS = 300000;
+const CRED_PARAMS = [
+    { type: 'public-key', alg: -7 },
+    { type: 'public-key', alg: -257 },
+];
+function copy(input) {
+    if (!input)
+        return new Uint8Array(0);
+    const out = new Uint8Array(input.byteLength);
+    out.set(input instanceof ArrayBuffer
+        ? new Uint8Array(input)
+        : new Uint8Array(input.buffer, input.byteOffset, input.byteLength));
+    return out;
+}
+/** Copies caller bytes into a plain ArrayBuffer-backed view, the WebAuthn `BufferSource` shape. */
+function source(bytes) {
+    const out = new Uint8Array(bytes.length);
+    out.set(bytes);
+    return out;
+}
+function readPrfFirst(credential) {
+    const results = credential.getClientExtensionResults();
+    const first = results.prf?.results?.first;
+    if (first === undefined || first === null)
+        return undefined;
+    const bytes = copy(first);
+    return bytes.length > 0 ? bytes : undefined;
+}
+function backupFlags(authenticatorData) {
+    const bytes = authenticatorData ? new Uint8Array(authenticatorData) : new Uint8Array();
+    const flags = bytes.length > 32 ? bytes[32] : 0;
+    return { backupEligible: (flags & 0x08) !== 0, backedUp: (flags & 0x10) !== 0 };
+}
+function userHandleLabel(now = new Date()) {
+    const pad = (value) => String(value).padStart(2, '0');
+    return `DFX Wallet ${now.getFullYear()}-${pad(now.getMonth() + 1)}-${pad(now.getDate())} ${pad(now.getHours())}:${pad(now.getMinutes())}`;
+}
+/** Browser `navigator.credentials` when both `create` and `get` exist; otherwise a dummy that resolves null. */
+function defaultCredentials() {
+    const credentials = globalThis.navigator
+        ?.credentials;
+    if (typeof credentials?.create === 'function' && typeof credentials?.get === 'function') {
+        return credentials;
+    }
+    return { create: async () => null, get: async () => null };
+}
+/**
+ * The wallet's passkey ceremonies. Every option is built locally — only the challenge comes from the
+ * server — and exactly one ceremony runs at a time; a newer call or `cancel()` supersedes the running one.
+ * No AbortSignal is passed on iOS/iPadOS WebKit (it breaks ceremonies there); superseding still applies.
+ */
+export class PasskeyCeremonies {
+    constructor(env, credentials = defaultCredentials(), win = globalThis ?? {
+        location: { hostname: '' },
+        navigator: { userAgent: '' },
+    }) {
+        this.env = env;
+        this.credentials = credentials;
+        this.win = win;
+        this.gate = new CeremonyGate();
+    }
+    /** Tap 1 of the registration: creates the credential with the PRF extension and returns the pending passkey. */
+    async createCredential(input) {
+        this.requireTopLevelOrigin();
+        this.requireActivation();
+        const label = userHandleLabel();
+        const userId = source(randomBytes(32));
+        const options = {
+            publicKey: {
+                challenge: source(input.challenge),
+                rp: { id: RP_IDS[this.env], name: 'DFX' },
+                user: { id: userId, name: label, displayName: label },
+                pubKeyCredParams: CRED_PARAMS,
+                authenticatorSelection: { residentKey: 'required', requireResidentKey: true, userVerification: 'required' },
+                attestation: 'none',
+                timeout: TIMEOUT_MS,
+                excludeCredentials: (input.excludeCredentialIds ?? []).map((id) => ({
+                    type: 'public-key',
+                    id: source(id),
+                })),
+                extensions: { prf: { eval: { first: prfInputV1() } } },
+            },
+        };
+        const { result, run } = await this.call((signal) => this.credentials.create(this.withSignal(options, signal)));
+        const credential = result;
+        try {
+            run.checkCurrent();
+        }
+        catch (error) {
+            if (credential)
+                await this.signalUnknownCredential(copy(credential.rawId));
+            throw error;
+        }
+        if (!credential)
+            throw new PasskeyError('no-credential', 'The authenticator returned no credential');
+        const rawAttachment = credential.authenticatorAttachment;
+        const attachment = rawAttachment === 'platform' || rawAttachment === 'cross-platform' ? rawAttachment : null;
+        const transports = credential.response.getTransports?.() ?? [];
+        if (attachment === 'cross-platform' || transports.includes('hybrid')) {
+            await this.signalUnknownCredential(copy(credential.rawId));
+            throw new CrossDeviceRegistrationError();
+        }
+        const credentialId = copy(credential.rawId);
+        // The attestation response carries no user handle; the server gets the id this wallet generated.
+        const userHandle = userId;
+        const attestation = credentialToJSON(credential);
+        const prfFromCreate = readPrfFirst(credential);
+        const derivePrf = (id) => this.derivePrf(id, input.challenge);
+        const signalUnknown = (id) => this.signalUnknownCredential(id);
+        return {
+            credentialId,
+            async confirm() {
+                const { prfOutput, credential: assertionCredential } = await derivePrf(credentialId);
+                if (prfFromCreate && !equalBytes(prfOutput, prfFromCreate)) {
+                    await signalUnknown(credentialId);
+                    throw new PrfMismatchError();
+                }
+                return {
+                    credentialId,
+                    userHandle,
+                    attestation,
+                    assertion: credentialToJSON(assertionCredential),
+                    prfOutput,
+                    attachment,
+                    transports,
+                };
+            },
+            async abort() {
+                await signalUnknown(credentialId);
+            },
+        };
+    }
+    /** A login assertion with PRF output when the authenticator provides it.
+     * `continueCeremony` is only for a retry inside a ceremony that already ran create(). */
+    async assert(input) {
+        this.requireTopLevelOrigin();
+        if (!input.continueCeremony)
+            this.requireActivation();
+        const options = {
+            publicKey: {
+                challenge: source(input.challenge ?? randomBytes(32)),
+                rpId: RP_IDS[this.env],
+                userVerification: 'required',
+                timeout: TIMEOUT_MS,
+                ...(input.credentialId
+                    ? { allowCredentials: [{ type: 'public-key', id: source(input.credentialId) }] }
+                    : {}),
+                extensions: { prf: { eval: { first: prfInputV1() } } },
+            },
+        };
+        const { result, run } = await this.call((signal) => this.credentials.get(this.withSignal(options, signal)));
+        run.checkCurrent();
+        const credential = result;
+        if (!credential)
+            throw new PasskeyError('no-credential', 'The authenticator returned no assertion');
+        return {
+            credentialId: copy(credential.rawId),
+            assertion: credentialToJSON(credential),
+            prfOutput: readPrfFirst(credential),
+            ...backupFlags(credential.response.authenticatorData),
+        };
+    }
+    /** Best-effort `signalUnknownCredential` for aborted registrations (§4.2); never throws. */
+    async signalUnknownCredential(credentialId) {
+        try {
+            await this.win.PublicKeyCredential?.signalUnknownCredential?.({
+                credentialId: bytesToBase64Url(credentialId),
+                rpId: RP_IDS[this.env],
+            });
+        }
+        catch {
+            // signalling is advisory; a rejection must never break the ceremony
+        }
+    }
+    /** Supersedes the running ceremony without starting a new one. */
+    cancel() {
+        this.gate.cancelActive();
+    }
+    /** Tap 2 helper: the confirming `get()` restricted to the new credential; PRF output is mandatory.
+     * The gesture that opened tap 1 does not survive that dialog, so this prompt is not gated on it. */
+    async derivePrf(credentialId, challenge) {
+        const options = {
+            publicKey: {
+                challenge: source(challenge),
+                rpId: RP_IDS[this.env],
+                allowCredentials: [{ type: 'public-key', id: source(credentialId) }],
+                userVerification: 'required',
+                timeout: TIMEOUT_MS,
+                extensions: { prf: { eval: { first: prfInputV1() } } },
+            },
+        };
+        const { result, run } = await this.call((signal) => this.credentials.get(this.withSignal(options, signal)));
+        run.checkCurrent();
+        const prfOutput = result ? readPrfFirst(result) : undefined;
+        if (!prfOutput || !result) {
+            await this.signalUnknownCredential(credentialId);
+            throw new PrfUnavailableError();
+        }
+        return { prfOutput, credential: result };
+    }
+    /** Runs one gated WebAuthn call: user gesture, superseding, and the platform-appropriate signal. */
+    async call(action) {
+        const nav = this.win.navigator;
+        const allowSignal = !isIpadDesktopMode(nav) && !/iPhone|iPad|iPod/i.test(nav.userAgent);
+        const controller = allowSignal ? new AbortController() : undefined;
+        const run = this.gate.begin(() => controller?.abort());
+        try {
+            const result = await action(controller?.signal);
+            return { result, run };
+        }
+        catch (error) {
+            if (!run.isCurrent())
+                throw new CeremonySupersededError();
+            throw error;
+        }
+    }
+    withSignal(options, signal) {
+        return signal ? { ...options, signal } : options;
+    }
+    requireTopLevelOrigin() {
+        if (this.win.location.hostname !== RP_IDS[this.env]) {
+            throw new WrongOriginError(this.win.location.hostname, RP_IDS[this.env]);
+        }
+        // `top` is only readable on same-origin pages; a cross-origin access throws and means embedded (NG3).
+        try {
+            const top = this.win.top;
+            if (top !== undefined && top !== this.win)
+                throw new EmbeddedContextError();
+        }
+        catch (error) {
+            if (error instanceof EmbeddedContextError)
+                throw error;
+            throw new EmbeddedContextError();
+        }
+    }
+    requireActivation() {
+        const activation = this.win.navigator.userActivation;
+        if (activation && !activation.isActive)
+            throw new UserActivationMissingError();
+    }
+}
+//# sourceMappingURL=ceremonies.js.map