@drakkar.software/octobot-client 0.4.0

package/dist/identity/bip39-wordlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bip39-wordlist.js","sourceRoot":"","sources":["../../src/identity/bip39-wordlist.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,cAAc,GAAsB;IAC/C,SAAS;IACT,SAAS;IACT,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,UAAU;IACV,SAAS;IACT,QAAQ;IACR,SAAS;IACT,MAAM;IACN,UAAU;IACV,SAAS;IACT,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,KAAK;IACL,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,OAAO;IACP,OAAO;IACP,SAAS;IACT,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,KAAK;IACL,OAAO;IACP,OAAO;IACP,OAAO;IACP,KAAK;IACL,KAAK;IACL,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,KAAK;IACL,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,SAAS;IACT,MAAM;IACN,OAAO;IACP,QAAQ;IACR,SAAS;IACT,SAAS;IACT,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,KAAK;IACL,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,SAAS;IACT,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,OAAO;IACP,KAAK;IACL,OAAO;IACP,OAAO;IACP,MAAM;IACN,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,KAAK;IACL,UAAU;IACV,QAAQ;IACR,SAAS;IACT,KAAK;IACL,QAAQ;IACR,SAAS;IACT,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,SAAS;IACT,SAAS;IACT,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;IACT,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,SAAS;IACT,OAAO;IACP,SAAS;IACT,MAAM;IACN,MAAM;IACN,UAAU;IACV,OAAO;IACP,OAAO;IACP,KAAK;IACL,SAAS;IACT,SAAS;IACT,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,SAAS;IACT,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,KAAK;IACL,MAAM;IACN,MAAM;IACN,SAAS;IACT,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,SAAS;IACT,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,KAAK;IACL,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,KAAK;IACL,UAAU;IACV,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,SAAS;IACT,OAAO;IACP,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,SAAS;IACT,OAAO;IACP,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,SAAS;IACT,MAAM;IACN,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,OAAO;IACP,OAAO;IACP,UAAU;IACV,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,OAAO;IACP,SAAS;IACT,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,QAAQ;IACR,SAAS;IACT,MAAM;IACN,SAAS;IACT,OAAO;IACP,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,UAAU;IACV,SAAS;IACT,UAAU;IACV,SAAS;IACT,UAAU;IACV,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,SAAS;IACT,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;IACN,SAAS;IACT,OAAO;IACP,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,SAAS;IACT,OAAO;IACP,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,OAAO;IACP,KAAK;IACL,SAAS;IACT,MAAM;IACN,SAAS;IACT,KAAK;IACL,UAAU;IACV,SAAS;IACT,SAAS;IACT,SAAS;IACT,OAAO;IACP,SAAS;IACT,QAAQ;IACR,MAAM;IACN,OAAO;IACP,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,UAAU;IACV,MAAM;IACN,KAAK;IACL,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,UAAU;IACV,UAAU;IACV,MAAM;IACN,SAAS;IACT,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,SAAS;IACT,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,MAAM;IACN,UAAU;IACV,UAAU;IACV,SAAS;IACT,MAAM;IACN,SAAS;IACT,UAAU;IACV,SAAS;IACT,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;IACP,QAAQ;IACR,UAAU;IACV,KAAK;IACL,MAAM;IACN,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,SAAS;IACT,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,SAAS;IACT,MAAM;IACN,MAAM;IACN,SAAS;IACT,QAAQ;IACR,KAAK;IACL,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,UAAU;IACV,SAAS;IACT,SAAS;IACT,UAAU;IACV,UAAU;IACV,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,OAAO;IACP,QAAQ;IACR,OAAO;IACP,KAAK;IACL,SAAS;IACT,SAAS;IACT,OAAO;IACP,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,UAAU;IACV,SAAS;IACT,OAAO;IACP,OAAO;IACP,KAAK;IACL,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,UAAU;IACV,SAAS;IACT,SAAS;IACT,OAAO;IACP,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,OAAO;IACP,KAAK;IACL,SAAS;IACT,QAAQ;IACR,MAAM;IACN,SAAS;IACT,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,OAAO;IACP,SAAS;IACT,MAAM;IACN,SAAS;IACT,KAAK;IACL,OAAO;IACP,QAAQ;IACR,SAAS;IACT,OAAO;IACP,UAAU;IACV,SAAS;IACT,UAAU;IACV,SAAS;IACT,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,UAAU;IACV,OAAO;IACP,OAAO;IACP,KAAK;IACL,OAAO;IACP,SAAS;IACT,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,KAAK;IACL,SAAS;IACT,KAAK;IACL,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,KAAK;IACL,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,SAAS;IACT,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,KAAK;IACL,SAAS;IACT,OAAO;IACP,UAAU;IACV,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;IACN,KAAK;IACL,OAAO;IACP,SAAS;IACT,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;IACT,MAAM;IACN,KAAK;IACL,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,SAAS;IACT,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,SAAS;IACT,OAAO;IACP,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,KAAK;IACL,KAAK;IACL,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,SAAS;IACT,KAAK;IACL,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;IACP,UAAU;IACV,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,MAAM;IACN,KAAK;IACL,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,MAAM;IACN,SAAS;IACT,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,SAAS;IACT,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,UAAU;IACV,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,SAAS;IACT,QAAQ;IACR,KAAK;IACL,MAAM;IACN,MAAM;IACN,UAAU;IACV,MAAM;IACN,QAAQ;IACR,KAAK;IACL,SAAS;IACT,SAAS;IACT,OAAO;IACP,SAAS;IACT,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,MAAM;IACN,SAAS;IACT,QAAQ;IACR,UAAU;IACV,OAAO;IACP,UAAU;IACV,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,UAAU;IACV,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,UAAU;IACV,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,MAAM;IACN,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,KAAK;IACL,MAAM;IACN,MAAM;IACN,SAAS;IACT,KAAK;IACL,OAAO;IACP,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,UAAU;IACV,MAAM;IACN,MAAM;IACN,SAAS;IACT,KAAK;IACL,MAAM;IACN,KAAK;IACL,QAAQ;IACR,MAAM;IACN,SAAS;IACT,MAAM;IACN,KAAK;IACL,SAAS;IACT,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,KAAK;IACL,OAAO;IACP,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,UAAU;IACV,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,SAAS;IACT,MAAM;IACN,KAAK;IACL,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,OAAO;IACP,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,SAAS;IACT,SAAS;IACT,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,SAAS;IACT,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,SAAS;IACT,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,UAAU;IACV,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,MAAM;IACN,SAAS;IACT,MAAM;IACN,UAAU;IACV,OAAO;IACP,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,SAAS;IACT,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,MAAM;IACN,SAAS;IACT,OAAO;IACP,MAAM;IACN,SAAS;IACT,OAAO;IACP,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,SAAS;IACT,KAAK;IACL,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;IACT,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,UAAU;IACV,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,UAAU;IACV,SAAS;IACT,SAAS;IACT,QAAQ;IACR,OAAO;IACP,MAAM;IACN,KAAK;IACL,SAAS;IACT,SAAS;IACT,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,SAAS;IACT,MAAM;IACN,SAAS;IACT,QAAQ;IACR,OAAO;IACP,KAAK;IACL,SAAS;IACT,QAAQ;IACR,OAAO;IACP,KAAK;IACL,KAAK;IACL,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,SAAS;IACT,OAAO;IACP,OAAO;IACP,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,OAAO;IACP,KAAK;IACL,MAAM;IACN,KAAK;IACL,OAAO;IACP,SAAS;IACT,MAAM;IACN,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,SAAS;IACT,OAAO;IACP,UAAU;IACV,OAAO;IACP,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,SAAS;IACT,OAAO;IACP,SAAS;IACT,OAAO;IACP,QAAQ;IACR,SAAS;IACT,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;IACT,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,SAAS;IACT,OAAO;IACP,QAAQ;IACR,MAAM;IACN,SAAS;IACT,SAAS;IACT,KAAK;IACL,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,OAAO;IACP,OAAO;IACP,QAAQ;IACR,UAAU;IACV,OAAO;IACP,QAAQ;IACR,SAAS;IACT,OAAO;IACP,KAAK;IACL,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;IACT,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,SAAS;IACT,SAAS;IACT,UAAU;IACV,UAAU;IACV,MAAM;IACN,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,SAAS;IACT,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,OAAO;IACP,SAAS;IACT,SAAS;IACT,SAAS;IACT,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,OAAO;IACP,UAAU;IACV,SAAS;IACT,SAAS;IACT,OAAO;IACP,SAAS;IACT,QAAQ;IACR,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,KAAK;IACL,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,SAAS;IACT,UAAU;IACV,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,KAAK;IACL,OAAO;IACP,OAAO;IACP,MAAM;IACN,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,UAAU;IACV,QAAQ;IACR,UAAU;IACV,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,MAAM;IACN,KAAK;IACL,MAAM;IACN,KAAK;IACL,QAAQ;IACR,OAAO;IACP,KAAK;IACL,QAAQ;IACR,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,SAAS;IACT,SAAS;IACT,OAAO;IACP,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,MAAM;IACN,OAAO;IACP,SAAS;IACT,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,UAAU;IACV,UAAU;IACV,OAAO;IACP,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,UAAU;IACV,MAAM;IACN,MAAM;IACN,SAAS;IACT,QAAQ;IACR,MAAM;IACN,SAAS;IACT,QAAQ;IACR,OAAO;IACP,UAAU;IACV,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,OAAO;IACP,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,UAAU;IACV,OAAO;IACP,QAAQ;IACR,OAAO;IACP,SAAS;IACT,KAAK;IACL,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,SAAS;IACT,KAAK;IACL,MAAM;IACN,OAAO;IACP,QAAQ;IACR,KAAK;IACL,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,SAAS;IACT,OAAO;IACP,UAAU;IACV,OAAO;IACP,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,OAAO;IACP,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,QAAQ;IACR,KAAK;IACL,QAAQ;IACR,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,UAAU;IACV,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,UAAU;IACV,SAAS;IACT,OAAO;IACP,SAAS;IACT,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,SAAS;IACT,MAAM;IACN,QAAQ;IACR,KAAK;IACL,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,MAAM;IACN,SAAS;IACT,OAAO;IACP,UAAU;IACV,UAAU;IACV,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,SAAS;IACT,OAAO;IACP,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,KAAK;IACL,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;IACT,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,SAAS;IACT,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,KAAK;IACL,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,SAAS;IACT,OAAO;IACP,SAAS;IACT,KAAK;IACL,UAAU;IACV,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,UAAU;IACV,MAAM;IACN,QAAQ;IACR,SAAS;IACT,MAAM;IACN,OAAO;IACP,KAAK;IACL,OAAO;IACP,QAAQ;IACR,OAAO;IACP,SAAS;IACT,UAAU;IACV,MAAM;IACN,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,MAAM;IACN,KAAK;IACL,OAAO;IACP,OAAO;IACP,SAAS;IACT,QAAQ;IACR,OAAO;IACP,UAAU;IACV,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,SAAS;IACT,MAAM;IACN,MAAM;IACN,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,KAAK;IACL,MAAM;IACN,SAAS;IACT,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,SAAS;IACT,MAAM;IACN,UAAU;IACV,QAAQ;IACR,SAAS;IACT,OAAO;IACP,SAAS;IACT,OAAO;IACP,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,SAAS;IACT,QAAQ;IACR,MAAM;IACN,UAAU;IACV,SAAS;IACT,QAAQ;IACR,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,KAAK;IACL,MAAM;IACN,QAAQ;IACR,SAAS;IACT,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,OAAO;IACP,OAAO;IACP,QAAQ;IACR,OAAO;IACP,KAAK;IACL,QAAQ;IACR,OAAO;IACP,SAAS;IACT,MAAM;IACN,OAAO;IACP,SAAS;IACT,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,QAAQ;IACR,SAAS;IACT,MAAM;IACN,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,SAAS;IACT,SAAS;IACT,SAAS;IACT,OAAO;IACP,MAAM;IACN,SAAS;IACT,SAAS;IACT,QAAQ;IACR,SAAS;IACT,OAAO;IACP,MAAM;IACN,OAAO;IACP,QAAQ;IACR,OAAO;IACP,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,SAAS;IACT,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,MAAM;IACN,SAAS;IACT,MAAM;IACN,SAAS;IACT,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,KAAK;IACL,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,SAAS;IACT,KAAK;IACL,SAAS;IACT,SAAS;IACT,OAAO;IACP,SAAS;IACT,MAAM;IACN,KAAK;IACL,OAAO;IACP,MAAM;IACN,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,MAAM;IACN,SAAS;IACT,MAAM;IACN,OAAO;IACP,MAAM;IACN,MAAM;IACN,MAAM;IACN,KAAK;IACL,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,QAAQ;IACR,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,MAAM;IACN,MAAM;IACN,SAAS;IACT,MAAM;IACN,OAAO;IACP,QAAQ;IACR,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,OAAO;IACP,SAAS;IACT,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,QAAQ;IACR,KAAK;IACL,OAAO;IACP,OAAO;IACP,OAAO;IACP,MAAM;IACN,MAAM;IACN,KAAK;CACG,CAAA"}

package/dist/identity/capProvider.d.ts

@@ -0,0 +1,45 @@
+import type { RootIdentity } from '@drakkar.software/starfish-identities';
+import type { StarfishCapProvider } from '@drakkar.software/starfish-client';
+/** Which derivation scheme identifies the wallet — a `DerivationScheme.id`
+ *  from `derivationSchemes.ts`. `'bip44'` (the standard `m/44'/60'/0'/0/0`
+ *  path) is the only one this package ships, and the default; a consumer
+ *  needing another wallet type registers one via `registerDerivationScheme`
+ *  and passes its id here. An unknown id throws rather than silently
+ *  deriving under the wrong scheme. */
+export type KeyDerivation = string;
+export declare const BOOTSTRAP_CHALLENGE = "octobot:sync-bootstrap";
+/**
+ * Derive the wallet's Starfish root identity (userId + Ed25519/X25519 device
+ * keys) from a BIP39 seed. Exported so a caller under the same wallet (e.g. a
+ * strategy-marketplace or third-party client) can build a session under the
+ * SAME identity as this package's sync stack — one wallet → one Starfish
+ * userId across every namespace.
+ *
+ * `derivation` defaults to `'bip44'` — picking the wrong scheme derives a
+ * DIFFERENT identity, which looks exactly like "pairing worked" followed by
+ * an empty account (nothing was ever synced under that identity).
+ */
+export declare function deriveRoot(seed: string, derivation?: KeyDerivation): Promise<RootIdentity>;
+/**
+ * Starfish v3 cap-cert provider derived from a BIP39 mnemonic seed.
+ *
+ * Mirrors octobot_sync/auth/provider.py WalletCapProvider: the EVM wallet
+ * deterministically signs BOOTSTRAP_CHALLENGE (EIP-191), the 65-byte
+ * signature is HKDF-expanded into a root Ed25519+X25519 identity, and a
+ * fresh short-lived device cap-cert is minted per request.
+ *
+ * userId = sha256(rootEdPub)[:32] hex — used as the {identity} URL segment
+ * instead of the raw EVM address.
+ *
+ * @see packages/sync/octobot_sync/auth/provider.py — WalletCapProvider
+ */
+export declare class WalletCapProvider implements StarfishCapProvider {
+    private readonly rootPromise;
+    constructor(seed: string, derivation?: KeyDerivation);
+    getCap(): Promise<{
+        cap: import("@drakkar.software/starfish-protocol").CapCert;
+        devEdPrivHex: string;
+    }>;
+    getUserId(): Promise<string>;
+}
+//# sourceMappingURL=capProvider.d.ts.map

package/dist/identity/capProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capProvider.d.ts","sourceRoot":"","sources":["../../src/identity/capProvider.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uCAAuC,CAAA;AACzE,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,mCAAmC,CAAA;AAO5E;;;;;uCAKuC;AACvC,MAAM,MAAM,aAAa,GAAG,MAAM,CAAA;AAOlC,eAAO,MAAM,mBAAmB,2BAA2B,CAAA;AAwB3D;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,IAAI,EAAE,MAAM,EACZ,UAAU,GAAE,aAA4C,GACvD,OAAO,CAAC,YAAY,CAAC,CAMvB;AAED;;;;;;;;;;;;GAYG;AACH,qBAAa,iBAAkB,YAAW,mBAAmB;IAC3D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAuB;gBAEvC,IAAI,EAAE,MAAM,EAAE,UAAU,GAAE,aAA4C;IAI5E,MAAM;;;;IAYN,SAAS,IAAI,OAAO,CAAC,MAAM,CAAC;CAGnC"}

package/dist/identity/capProvider.js

@@ -0,0 +1,80 @@
+import { deriveRootIdentityFromEvmSignature, mintDeviceCap, scopes, } from '@drakkar.software/starfish-identities';
+import { secp256k1 } from '@noble/curves/secp256k1.js';
+import { keccak_256 } from '@noble/hashes/sha3.js';
+import { deriveEvmAddress } from './address.js';
+import { hexToBytes } from '../internal/bytes.js';
+import { getDerivationScheme, DEFAULT_DERIVATION_SCHEME_ID } from './derivationSchemes.js';
+// The EVM wallet signs this challenge (EIP-191 personal_sign) to derive its
+// Starfish root identity. Must match octobot_sync/constants.py SYNC_BOOTSTRAP_CHALLENGE.
+// @see packages/sync/octobot_sync/constants.py — SYNC_BOOTSTRAP_CHALLENGE
+// @remarks Changing this breaks sync silently: the client and node would derive
+// different root identities from the same wallet.
+export const BOOTSTRAP_CHALLENGE = 'octobot:sync-bootstrap';
+/**
+ * Sign challenge text with EIP-191 personal_sign.
+ * Returns 65-byte r‖s‖v signature where v = recoveryBit + 27.
+ * Matches Python web3.Account.sign_message(encode_defunct(text=challenge)).signature.
+ */
+function signBootstrap(privateKey, challenge) {
+    const enc = new TextEncoder();
+    const msgBytes = enc.encode(challenge);
+    const prefix = enc.encode(`\x19Ethereum Signed Message:\n${msgBytes.length}`);
+    const combined = new Uint8Array(prefix.length + msgBytes.length);
+    combined.set(prefix, 0);
+    combined.set(msgBytes, prefix.length);
+    const hash = keccak_256(combined);
+    // noble v2: format:'recovered' → recovery_bit(1) ‖ r(32) ‖ s(32)
+    const sig = secp256k1.sign(hash, privateKey, { format: 'recovered', lowS: true, prehash: false });
+    const out = new Uint8Array(65);
+    out.set(sig.slice(1, 33), 0); // r
+    out.set(sig.slice(33, 65), 32); // s
+    out[64] = sig[0] + 27; // v (Ethereum: 27/28)
+    return out;
+}
+/**
+ * Derive the wallet's Starfish root identity (userId + Ed25519/X25519 device
+ * keys) from a BIP39 seed. Exported so a caller under the same wallet (e.g. a
+ * strategy-marketplace or third-party client) can build a session under the
+ * SAME identity as this package's sync stack — one wallet → one Starfish
+ * userId across every namespace.
+ *
+ * `derivation` defaults to `'bip44'` — picking the wrong scheme derives a
+ * DIFFERENT identity, which looks exactly like "pairing worked" followed by
+ * an empty account (nothing was ever synced under that identity).
+ */
+export async function deriveRoot(seed, derivation = DEFAULT_DERIVATION_SCHEME_ID) {
+    const privateKeyHex = await getDerivationScheme(derivation).derive(seed);
+    const privateKey = hexToBytes(privateKeyHex);
+    const address = deriveEvmAddress(privateKey);
+    const signature = signBootstrap(privateKey, BOOTSTRAP_CHALLENGE);
+    return deriveRootIdentityFromEvmSignature({ address, signature, challenge: BOOTSTRAP_CHALLENGE });
+}
+/**
+ * Starfish v3 cap-cert provider derived from a BIP39 mnemonic seed.
+ *
+ * Mirrors octobot_sync/auth/provider.py WalletCapProvider: the EVM wallet
+ * deterministically signs BOOTSTRAP_CHALLENGE (EIP-191), the 65-byte
+ * signature is HKDF-expanded into a root Ed25519+X25519 identity, and a
+ * fresh short-lived device cap-cert is minted per request.
+ *
+ * userId = sha256(rootEdPub)[:32] hex — used as the {identity} URL segment
+ * instead of the raw EVM address.
+ *
+ * @see packages/sync/octobot_sync/auth/provider.py — WalletCapProvider
+ */
+export class WalletCapProvider {
+    rootPromise;
+    constructor(seed, derivation = DEFAULT_DERIVATION_SCHEME_ID) {
+        this.rootPromise = deriveRoot(seed, derivation);
+    }
+    async getCap() {
+        const root = await this.rootPromise;
+        const cap = await mintDeviceCap(root.keys.edPriv, root.keys.edPub, { edPubHex: root.keys.edPub, kemPubHex: root.keys.kemPub }, scopes.rootAll());
+        // pubHex omitted: device caps bind the identity via cap.sub, not audience
+        return { cap, devEdPrivHex: root.keys.edPriv };
+    }
+    async getUserId() {
+        return (await this.rootPromise).userId;
+    }
+}
+//# sourceMappingURL=capProvider.js.map

package/dist/identity/capProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capProvider.js","sourceRoot":"","sources":["../../src/identity/capProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,kCAAkC,EAClC,aAAa,EACb,MAAM,GACP,MAAM,uCAAuC,CAAA;AAG9C,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AACjD,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAA;AAU1F,4EAA4E;AAC5E,yFAAyF;AACzF,0EAA0E;AAC1E,gFAAgF;AAChF,kDAAkD;AAClD,MAAM,CAAC,MAAM,mBAAmB,GAAG,wBAAwB,CAAA;AAE3D;;;;GAIG;AACH,SAAS,aAAa,CAAC,UAAsB,EAAE,SAAiB;IAC9D,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;IAC7B,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IACtC,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,CAAC,iCAAiC,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAA;IAC7E,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAA;IAChE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACvB,QAAQ,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAA;IACrC,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAA;IACjC,iEAAiE;IACjE,MAAM,GAAG,GAAG,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,WAAW,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAA;IACjG,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAC9B,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA,CAAG,IAAI;IACnC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC,CAAA,CAAC,IAAI;IACnC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAA,CAAU,sBAAsB;IACrD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,IAAY,EACZ,aAA4B,4BAA4B;IAExD,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IACxE,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAA;IAC5C,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;IAC5C,MAAM,SAAS,GAAG,aAAa,CAAC,UAAU,EAAE,mBAAmB,CAAC,CAAA;IAChE,OAAO,kCAAkC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,CAAC,CAAA;AACnG,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,iBAAiB;IACX,WAAW,CAAuB;IAEnD,YAAY,IAAY,EAAE,aAA4B,4BAA4B;QAChF,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;IACjD,CAAC;IAED,KAAK,CAAC,MAAM;QACV,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,WAAW,CAAA;QACnC,MAAM,GAAG,GAAG,MAAM,aAAa,CAC7B,IAAI,CAAC,IAAI,CAAC,MAAM,EAChB,IAAI,CAAC,IAAI,CAAC,KAAK,EACf,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,EAC1D,MAAM,CAAC,OAAO,EAAE,CACjB,CAAA;QACD,0EAA0E;QAC1E,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAA;IAChD,CAAC;IAED,KAAK,CAAC,SAAS;QACb,OAAO,CAAC,MAAM,IAAI,CAAC,WAAW,CAAC,CAAC,MAAM,CAAA;IACxC,CAAC;CACF"}

package/dist/identity/derivationSchemes.d.ts

@@ -0,0 +1,25 @@
+/** Turns a mnemonic into a private key hex string. Every scheme must pass a
+ *  raw private key through unchanged (via `isEvmPrivateKey`/
+ *  `normalizeEvmPrivateKey`) — a raw key has no derivation, it IS the key. */
+export type DeriveKeyFn = (mnemonicOrKey: string) => Promise<string>;
+export type DerivationScheme = {
+    /** Stable identifier persisted alongside a wallet — e.g. in `Wallet.derivation`
+     *  on the consumer side. Never reuse an id for a different derivation once
+     *  anything may have been minted under it. */
+    id: string;
+    derive: DeriveKeyFn;
+};
+/** The scheme used when a caller doesn't pass one explicitly. */
+export declare const DEFAULT_DERIVATION_SCHEME_ID = "bip44";
+/** Registers a new derivation scheme (e.g. for a future wallet type this
+ *  package doesn't ship natively) so `deriveRoot`/`WalletCapProvider`/
+ *  `createKeyCache()` can address it by id. Throws if `id` is already
+ *  registered — schemes are identity-bearing, so silently replacing one
+ *  would re-derive every wallet that used it under a different key. */
+export declare function registerDerivationScheme(scheme: DerivationScheme): void;
+/** Throws for an unknown id — there is no silent fallback, since deriving
+ *  under the wrong scheme silently produces a DIFFERENT identity rather than
+ *  an error a caller could catch. */
+export declare function getDerivationScheme(id: string): DerivationScheme;
+export declare function listDerivationSchemeIds(): string[];
+//# sourceMappingURL=derivationSchemes.d.ts.map

package/dist/identity/derivationSchemes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"derivationSchemes.d.ts","sourceRoot":"","sources":["../../src/identity/derivationSchemes.ts"],"names":[],"mappings":"AAEA;;8EAE8E;AAC9E,MAAM,MAAM,WAAW,GAAG,CAAC,aAAa,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;AAEpE,MAAM,MAAM,gBAAgB,GAAG;IAC7B;;kDAE8C;IAC9C,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,WAAW,CAAA;CACpB,CAAA;AAWD,iEAAiE;AACjE,eAAO,MAAM,4BAA4B,UAAU,CAAA;AAEnD;;;;uEAIuE;AACvE,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAGvE;AAED;;qCAEqC;AACrC,wBAAgB,mBAAmB,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,CAIhE;AAED,wBAAgB,uBAAuB,IAAI,MAAM,EAAE,CAElD"}

package/dist/identity/derivationSchemes.js

@@ -0,0 +1,34 @@
+import { isEvmPrivateKey, normalizeEvmPrivateKey, deriveBip44PrivateKey } from './evm.js';
+function bip44Derive(mnemonicOrKey) {
+    if (isEvmPrivateKey(mnemonicOrKey))
+        return Promise.resolve(normalizeEvmPrivateKey(mnemonicOrKey));
+    return deriveBip44PrivateKey(mnemonicOrKey);
+}
+const schemes = new Map([
+    ['bip44', { id: 'bip44', derive: bip44Derive }],
+]);
+/** The scheme used when a caller doesn't pass one explicitly. */
+export const DEFAULT_DERIVATION_SCHEME_ID = 'bip44';
+/** Registers a new derivation scheme (e.g. for a future wallet type this
+ *  package doesn't ship natively) so `deriveRoot`/`WalletCapProvider`/
+ *  `createKeyCache()` can address it by id. Throws if `id` is already
+ *  registered — schemes are identity-bearing, so silently replacing one
+ *  would re-derive every wallet that used it under a different key. */
+export function registerDerivationScheme(scheme) {
+    if (schemes.has(scheme.id))
+        throw new Error(`derivation scheme "${scheme.id}" is already registered`);
+    schemes.set(scheme.id, scheme);
+}
+/** Throws for an unknown id — there is no silent fallback, since deriving
+ *  under the wrong scheme silently produces a DIFFERENT identity rather than
+ *  an error a caller could catch. */
+export function getDerivationScheme(id) {
+    const scheme = schemes.get(id);
+    if (!scheme)
+        throw new Error(`unknown derivation scheme: "${id}"`);
+    return scheme;
+}
+export function listDerivationSchemeIds() {
+    return [...schemes.keys()];
+}
+//# sourceMappingURL=derivationSchemes.js.map

package/dist/identity/derivationSchemes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"derivationSchemes.js","sourceRoot":"","sources":["../../src/identity/derivationSchemes.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAA;AAezF,SAAS,WAAW,CAAC,aAAqB;IACxC,IAAI,eAAe,CAAC,aAAa,CAAC;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,sBAAsB,CAAC,aAAa,CAAC,CAAC,CAAA;IACjG,OAAO,qBAAqB,CAAC,aAAa,CAAC,CAAA;AAC7C,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,GAAG,CAA2B;IAChD,CAAC,OAAO,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;CAChD,CAAC,CAAA;AAEF,iEAAiE;AACjE,MAAM,CAAC,MAAM,4BAA4B,GAAG,OAAO,CAAA;AAEnD;;;;uEAIuE;AACvE,MAAM,UAAU,wBAAwB,CAAC,MAAwB;IAC/D,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,MAAM,CAAC,EAAE,yBAAyB,CAAC,CAAA;IACrG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAA;AAChC,CAAC;AAED;;qCAEqC;AACrC,MAAM,UAAU,mBAAmB,CAAC,EAAU;IAC5C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAA;IAC9B,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,EAAE,GAAG,CAAC,CAAA;IAClE,OAAO,MAAM,CAAA;AACf,CAAC;AAED,MAAM,UAAU,uBAAuB;IACrC,OAAO,CAAC,GAAG,OAAO,CAAC,IAAI,EAAE,CAAC,CAAA;AAC5B,CAAC"}

package/dist/identity/evm.d.ts

@@ -0,0 +1,8 @@
+/** True if `s` is a valid secp256k1 EVM private key (0x-prefixed or bare 64-hex, in range [1, n-1]). */
+export declare function isEvmPrivateKey(s: string): boolean;
+/** Normalises a private key string to lowercase, 0x-prefixed hex. */
+export declare function normalizeEvmPrivateKey(s: string): string;
+/** Derives the standard BIP44 EVM private key (m/44'/60'/0'/0/0) from a BIP39
+ *  mnemonic — the derivation web3.py, ethers and MetaMask all agree on. */
+export declare function deriveBip44PrivateKey(mnemonic: string): Promise<string>;
+//# sourceMappingURL=evm.d.ts.map

package/dist/identity/evm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm.d.ts","sourceRoot":"","sources":["../../src/identity/evm.ts"],"names":[],"mappings":"AAkDA,wGAAwG;AACxG,wBAAgB,eAAe,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAKlD;AAED,qEAAqE;AACrE,wBAAgB,sBAAsB,CAAC,CAAC,EAAE,MAAM,GAAG,MAAM,CAGxD;AAyBD;2EAC2E;AAC3E,wBAAsB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAG7E"}

package/dist/identity/evm.js

@@ -0,0 +1,78 @@
+import { secp256k1 } from '@noble/curves/secp256k1.js';
+const HARDENED = 0x80_000_000;
+// secp256k1 curve order — mathematical constant, used for BIP32 child key modular reduction
+const CURVE_N = BigInt('0xFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFEBAAEDCE6AF48A03BBFD25E8CD0364141');
+// TS 5.x: Uint8Array<ArrayBufferLike> doesn't satisfy BufferSource; slice gives ArrayBuffer
+function buf(u) {
+    return u.buffer.slice(u.byteOffset, u.byteOffset + u.byteLength);
+}
+async function hmacSha512(key, data) {
+    const cryptoKey = await globalThis.crypto.subtle.importKey('raw', buf(key), { name: 'HMAC', hash: 'SHA-512' }, false, ['sign']);
+    return new Uint8Array(await globalThis.crypto.subtle.sign('HMAC', cryptoKey, buf(data)));
+}
+function bytesToBigInt(b) {
+    let n = 0n;
+    for (const byte of b)
+        n = (n << 8n) | BigInt(byte);
+    return n;
+}
+function bigIntTo32Bytes(n) {
+    const out = new Uint8Array(32);
+    for (let i = 31; i >= 0; i--) {
+        out[i] = Number(n & 0xffn);
+        n >>= 8n;
+    }
+    return out;
+}
+async function deriveChild(key, chain, index) {
+    const data = new Uint8Array(37);
+    if (index >= HARDENED) {
+        data[0] = 0x00;
+        data.set(key, 1);
+    }
+    else {
+        data.set(secp256k1.getPublicKey(key, true), 0);
+    }
+    new DataView(data.buffer).setUint32(33, index, false);
+    const I = await hmacSha512(chain, data);
+    const childKey = (bytesToBigInt(I.slice(0, 32)) + bytesToBigInt(key)) % CURVE_N;
+    return { key: bigIntTo32Bytes(childKey), chain: I.slice(32) };
+}
+const EVM_PRIVATE_KEY_PATTERN = /^(0x)?[0-9a-fA-F]{64}$/;
+/** True if `s` is a valid secp256k1 EVM private key (0x-prefixed or bare 64-hex, in range [1, n-1]). */
+export function isEvmPrivateKey(s) {
+    if (!EVM_PRIVATE_KEY_PATTERN.test(s))
+        return false;
+    const hex = s.startsWith('0x') ? s.slice(2) : s;
+    const n = BigInt('0x' + hex);
+    return n > 0n && n < CURVE_N;
+}
+/** Normalises a private key string to lowercase, 0x-prefixed hex. */
+export function normalizeEvmPrivateKey(s) {
+    const trimmed = s.trim().toLowerCase();
+    return trimmed.startsWith('0x') ? trimmed : '0x' + trimmed;
+}
+// Real m/44'/60'/0'/0/0.
+const BIP44_PATH = [44 + HARDENED, 60 + HARDENED, 0 + HARDENED, 0, 0];
+async function derivePath(mnemonic, path) {
+    const enc = new TextEncoder();
+    const keyMaterial = await globalThis.crypto.subtle.importKey('raw', enc.encode(mnemonic), 'PBKDF2', false, ['deriveBits']);
+    const seedBits = await globalThis.crypto.subtle.deriveBits({ name: 'PBKDF2', hash: 'SHA-512', salt: enc.encode('mnemonic'), iterations: 2048 }, keyMaterial, 512);
+    const seed = new Uint8Array(seedBits);
+    const I = await hmacSha512(enc.encode('Bitcoin seed'), seed);
+    let key = I.slice(0, 32);
+    let chain = I.slice(32);
+    for (const idx of path) {
+        ;
+        ({ key, chain } = await deriveChild(key, chain, idx));
+    }
+    return '0x' + Array.from(key, (b) => b.toString(16).padStart(2, '0')).join('');
+}
+/** Derives the standard BIP44 EVM private key (m/44'/60'/0'/0/0) from a BIP39
+ *  mnemonic — the derivation web3.py, ethers and MetaMask all agree on. */
+export async function deriveBip44PrivateKey(mnemonic) {
+    if (isEvmPrivateKey(mnemonic))
+        return normalizeEvmPrivateKey(mnemonic);
+    return derivePath(mnemonic, BIP44_PATH);
+}
+//# sourceMappingURL=evm.js.map

package/dist/identity/evm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"evm.js","sourceRoot":"","sources":["../../src/identity/evm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,4BAA4B,CAAA;AAEtD,MAAM,QAAQ,GAAG,YAAY,CAAA;AAC7B,4FAA4F;AAC5F,MAAM,OAAO,GAAG,MAAM,CAAC,oEAAoE,CAAC,CAAA;AAE5F,4FAA4F;AAC5F,SAAS,GAAG,CAAC,CAAa;IACxB,OAAO,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAgB,CAAA;AACjF,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAe,EAAE,IAAgB;IACzD,MAAM,SAAS,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CACxD,KAAK,EAAE,GAAG,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,KAAK,EAAE,CAAC,MAAM,CAAC,CACpE,CAAA;IACD,OAAO,IAAI,UAAU,CAAC,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAA;AAC1F,CAAC;AAED,SAAS,aAAa,CAAC,CAAa;IAClC,IAAI,CAAC,GAAG,EAAE,CAAA;IACV,KAAK,MAAM,IAAI,IAAI,CAAC;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAClD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,SAAS,eAAe,CAAC,CAAS;IAChC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAC9B,KAAK,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAAC,GAAG,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC;QAAC,CAAC,KAAK,EAAE,CAAA;IAAC,CAAC;IACtE,OAAO,GAAG,CAAA;AACZ,CAAC;AAED,KAAK,UAAU,WAAW,CACxB,GAAe,EACf,KAAiB,EACjB,KAAa;IAEb,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAC/B,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAA;QACd,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAA;IAClB,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC,CAAA;IAChD,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,CAAA;IACrD,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IACvC,MAAM,QAAQ,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,aAAa,CAAC,GAAG,CAAC,CAAC,GAAG,OAAO,CAAA;IAC/E,OAAO,EAAE,GAAG,EAAE,eAAe,CAAC,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAA;AAC/D,CAAC;AAED,MAAM,uBAAuB,GAAG,wBAAwB,CAAA;AAExD,wGAAwG;AACxG,MAAM,UAAU,eAAe,CAAC,CAAS;IACvC,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAClD,MAAM,GAAG,GAAG,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/C,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,CAAA;IAC5B,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,GAAG,OAAO,CAAA;AAC9B,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,sBAAsB,CAAC,CAAS;IAC9C,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACtC,OAAO,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,GAAG,OAAO,CAAA;AAC5D,CAAC;AAED,yBAAyB;AACzB,MAAM,UAAU,GAAG,CAAC,EAAE,GAAG,QAAQ,EAAE,EAAE,GAAG,QAAQ,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;AAErE,KAAK,UAAU,UAAU,CAAC,QAAgB,EAAE,IAAc;IACxD,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAA;IAC7B,MAAM,WAAW,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAC1D,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,YAAY,CAAC,CAC7D,CAAA;IACD,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CACxD,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,UAAU,EAAE,IAAI,EAAE,EACnF,WAAW,EACX,GAAG,CACJ,CAAA;IACD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAA;IACrC,MAAM,CAAC,GAAG,MAAM,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAA;IAC5D,IAAI,GAAG,GAAe,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACpC,IAAI,KAAK,GAAe,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACnC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,CAAC;QAAA,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,MAAM,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,CAAC,CAAA;IACxD,CAAC;IACD,OAAO,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAChF,CAAC;AAED;2EAC2E;AAC3E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,QAAgB;IAC1D,IAAI,eAAe,CAAC,QAAQ,CAAC;QAAE,OAAO,sBAAsB,CAAC,QAAQ,CAAC,CAAA;IACtE,OAAO,UAAU,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;AACzC,CAAC"}

package/dist/identity/index.d.ts

@@ -0,0 +1,10 @@
+export { deriveBip44PrivateKey, isEvmPrivateKey, normalizeEvmPrivateKey, } from './evm.js';
+export { deriveEvmAddress } from './address.js';
+export { entropyToMnemonic, generateSeedPhrase, validateSeedPhrase, } from './mnemonic.js';
+export { classifySecret, classifyBareSecret, readSecretEnvelope, type ClassifiedSecret, } from './secret.js';
+export { WalletCapProvider, deriveRoot, BOOTSTRAP_CHALLENGE, type KeyDerivation } from './capProvider.js';
+export { createReadOnlyPairing, parseReadOnlyPairing, type ReadOnlyPairingPayload } from './pairing.js';
+export { createPairingRequest, parsePairingRequest, type PairingRequestPayload } from './pairingRequest.js';
+export { createKeyCache, type KeyCache } from './keys.js';
+export { registerDerivationScheme, getDerivationScheme, listDerivationSchemeIds, DEFAULT_DERIVATION_SCHEME_ID, type DerivationScheme, type DeriveKeyFn, } from './derivationSchemes.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/identity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,sBAAsB,GACvB,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,kBAAkB,EAClB,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,mBAAmB,EAAE,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAA;AACzG,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAAE,KAAK,sBAAsB,EAAE,MAAM,cAAc,CAAA;AACvG,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAA;AAC3G,OAAO,EAAE,cAAc,EAAE,KAAK,QAAQ,EAAE,MAAM,WAAW,CAAA;AACzD,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,4BAA4B,EAC5B,KAAK,gBAAgB,EACrB,KAAK,WAAW,GACjB,MAAM,wBAAwB,CAAA"}

package/dist/identity/index.js

@@ -0,0 +1,10 @@
+export { deriveBip44PrivateKey, isEvmPrivateKey, normalizeEvmPrivateKey, } from './evm.js';
+export { deriveEvmAddress } from './address.js';
+export { entropyToMnemonic, generateSeedPhrase, validateSeedPhrase, } from './mnemonic.js';
+export { classifySecret, classifyBareSecret, readSecretEnvelope, } from './secret.js';
+export { WalletCapProvider, deriveRoot, BOOTSTRAP_CHALLENGE } from './capProvider.js';
+export { createReadOnlyPairing, parseReadOnlyPairing } from './pairing.js';
+export { createPairingRequest, parsePairingRequest } from './pairingRequest.js';
+export { createKeyCache } from './keys.js';
+export { registerDerivationScheme, getDerivationScheme, listDerivationSchemeIds, DEFAULT_DERIVATION_SCHEME_ID, } from './derivationSchemes.js';
+//# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,qBAAqB,EACrB,eAAe,EACf,sBAAsB,GACvB,MAAM,UAAU,CAAA;AACjB,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,GACnB,MAAM,eAAe,CAAA;AACtB,OAAO,EACL,cAAc,EACd,kBAAkB,EAClB,kBAAkB,GAEnB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,mBAAmB,EAAsB,MAAM,kBAAkB,CAAA;AACzG,OAAO,EAAE,qBAAqB,EAAE,oBAAoB,EAA+B,MAAM,cAAc,CAAA;AACvG,OAAO,EAAE,oBAAoB,EAAE,mBAAmB,EAA8B,MAAM,qBAAqB,CAAA;AAC3G,OAAO,EAAE,cAAc,EAAiB,MAAM,WAAW,CAAA;AACzD,OAAO,EACL,wBAAwB,EACxB,mBAAmB,EACnB,uBAAuB,EACvB,4BAA4B,GAG7B,MAAM,wBAAwB,CAAA"}

package/dist/identity/keys.d.ts

@@ -0,0 +1,17 @@
+import type { KeyDerivation } from './capProvider.js';
+/** One session's worth of derived key material, keyed off the seed so a
+ *  caller can hold several independently (unlike the module-level singleton
+ *  cache octobot-sdk uses internally). */
+export type KeyCache = {
+    getWalletAddress(seed: string, derivation?: KeyDerivation): Promise<string>;
+    getEncryptionKey(seed: string, derivation?: KeyDerivation): Promise<string>;
+    clear(): void;
+};
+/** Creates an isolated single-entry key-derivation cache: avoids re-deriving
+ *  PBKDF2 + BIP32 on every call for the same (seed, derivation) pair. Keyed
+ *  by a hash of both so the raw seed isn't held as a map key. Each
+ *  `connectOctoBot()` session gets its own — this is the ONE piece of state
+ *  this package keeps beyond a single call, and it's dropped by
+ *  `close()`/`clear()`. */
+export declare function createKeyCache(): KeyCache;
+//# sourceMappingURL=keys.d.ts.map

package/dist/identity/keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.d.ts","sourceRoot":"","sources":["../../src/identity/keys.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAGrD;;0CAE0C;AAC1C,MAAM,MAAM,QAAQ,GAAG;IACrB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3E,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;IAC3E,KAAK,IAAI,IAAI,CAAA;CACd,CAAA;AAQD;;;;;2BAK2B;AAC3B,wBAAgB,cAAc,IAAI,QAAQ,CAuBzC"}

package/dist/identity/keys.js

@@ -0,0 +1,36 @@
+import { keccak_256 } from '@noble/hashes/sha3.js';
+import { deriveEvmAddress } from './address.js';
+import { toHex, hexToBytes } from '../internal/bytes.js';
+import { getDerivationScheme, DEFAULT_DERIVATION_SCHEME_ID } from './derivationSchemes.js';
+function fingerprintOf(seed, derivation) {
+    return toHex(keccak_256(new TextEncoder().encode(`${derivation}:${seed}`)));
+}
+/** Creates an isolated single-entry key-derivation cache: avoids re-deriving
+ *  PBKDF2 + BIP32 on every call for the same (seed, derivation) pair. Keyed
+ *  by a hash of both so the raw seed isn't held as a map key. Each
+ *  `connectOctoBot()` session gets its own — this is the ONE piece of state
+ *  this package keeps beyond a single call, and it's dropped by
+ *  `close()`/`clear()`. */
+export function createKeyCache() {
+    let cached = null;
+    async function getKey(seed, derivation) {
+        const fingerprint = fingerprintOf(seed, derivation);
+        if (cached?.fingerprint === fingerprint)
+            return cached;
+        const privateKeyHex = await getDerivationScheme(derivation).derive(seed);
+        const privateKey = hexToBytes(privateKeyHex);
+        const address = deriveEvmAddress(privateKey);
+        cached = { fingerprint, privateKey, address };
+        return cached;
+    }
+    return {
+        /** EIP-55 checksummed EVM address the seed derives to. `derivation`
+         *  defaults to `'bip44'`. */
+        getWalletAddress: async (seed, derivation = DEFAULT_DERIVATION_SCHEME_ID) => (await getKey(seed, derivation)).address,
+        /** The private key hex used as the HKDF secret for payload encryption
+         *  (see crypto/secretEncryptor.ts). `derivation` defaults to `'bip44'`. */
+        getEncryptionKey: async (seed, derivation = DEFAULT_DERIVATION_SCHEME_ID) => '0x' + toHex((await getKey(seed, derivation)).privateKey),
+        clear: () => { cached = null; },
+    };
+}
+//# sourceMappingURL=keys.js.map

package/dist/identity/keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keys.js","sourceRoot":"","sources":["../../src/identity/keys.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAA;AAExD,OAAO,EAAE,mBAAmB,EAAE,4BAA4B,EAAE,MAAM,wBAAwB,CAAA;AAa1F,SAAS,aAAa,CAAC,IAAY,EAAE,UAAyB;IAC5D,OAAO,KAAK,CAAC,UAAU,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,UAAU,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,CAAA;AAC7E,CAAC;AAED;;;;;2BAK2B;AAC3B,MAAM,UAAU,cAAc;IAC5B,IAAI,MAAM,GAAqB,IAAI,CAAA;IAEnC,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,UAAyB;QAC3D,MAAM,WAAW,GAAG,aAAa,CAAC,IAAI,EAAE,UAAU,CAAC,CAAA;QACnD,IAAI,MAAM,EAAE,WAAW,KAAK,WAAW;YAAE,OAAO,MAAM,CAAA;QACtD,MAAM,aAAa,GAAG,MAAM,mBAAmB,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACxE,MAAM,UAAU,GAAG,UAAU,CAAC,aAAa,CAAC,CAAA;QAC5C,MAAM,OAAO,GAAG,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAC5C,MAAM,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,OAAO,EAAE,CAAA;QAC7C,OAAO,MAAM,CAAA;IACf,CAAC;IAED,OAAO;QACL;qCAC6B;QAC7B,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,GAAG,4BAA4B,EAAE,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO;QACrH;mFAC2E;QAC3E,gBAAgB,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,GAAG,4BAA4B,EAAE,EAAE,CAC1E,IAAI,GAAG,KAAK,CAAC,CAAC,MAAM,MAAM,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;QAC3D,KAAK,EAAE,GAAG,EAAE,GAAG,MAAM,GAAG,IAAI,CAAA,CAAC,CAAC;KAC/B,CAAA;AACH,CAAC"}

package/dist/identity/mnemonic.d.ts

@@ -0,0 +1,4 @@
+export declare function entropyToMnemonic(entropy: Uint8Array): Promise<string[]>;
+export declare function generateSeedPhrase(count?: number): Promise<string[]>;
+export declare function validateSeedPhrase(phrase: string): Promise<boolean>;
+//# sourceMappingURL=mnemonic.d.ts.map

package/dist/identity/mnemonic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mnemonic.d.ts","sourceRoot":"","sources":["../../src/identity/mnemonic.ts"],"names":[],"mappings":"AAkBA,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAyB9E;AAED,wBAAsB,kBAAkB,CAAC,KAAK,SAAK,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAOtE;AAED,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CA0CzE"}

package/dist/identity/mnemonic.js

@@ -0,0 +1,93 @@
+import { BIP39_WORDLIST } from './bip39-wordlist.js';
+const STRENGTH_BY_COUNT = {
+    12: 128,
+    15: 160,
+    18: 192,
+    21: 224,
+    24: 256,
+};
+function getCrypto() {
+    const c = globalThis.crypto;
+    if (!c?.getRandomValues || !c?.subtle?.digest) {
+        throw new Error('Crypto polyfill not ready: cannot generate a secure seed phrase');
+    }
+    return c;
+}
+export async function entropyToMnemonic(entropy) {
+    const c = getCrypto();
+    // TS 5.7+ makes Uint8Array generic over ArrayBufferLike; WebCrypto wants the
+    // concrete ArrayBuffer variant (not SharedArrayBuffer).
+    const hashBuf = await c.subtle.digest('SHA-256', entropy);
+    const hash = new Uint8Array(hashBuf);
+    const checksumBits = (entropy.length * 8) / 32;
+    const wordCount = (entropy.length * 8 + checksumBits) / 11;
+    // combined = entropy bytes + one byte holding the checksum (only top checksumBits are read)
+    const combined = new Uint8Array(entropy.length + 1);
+    combined.set(entropy);
+    combined[entropy.length] = hash[0];
+    const words = [];
+    for (let wi = 0; wi < wordCount; wi++) {
+        let index = 0;
+        const startBit = wi * 11;
+        for (let b = 0; b < 11; b++) {
+            const bit = startBit + b;
+            const byteIdx = bit >> 3;
+            const bitInByte = 7 - (bit & 7);
+            index = (index << 1) | ((combined[byteIdx] >> bitInByte) & 1);
+        }
+        words.push(BIP39_WORDLIST[index]);
+    }
+    return words;
+}
+export async function generateSeedPhrase(count = 12) {
+    const strength = STRENGTH_BY_COUNT[count];
+    if (strength === undefined)
+        throw new Error(`Unsupported word count: ${count}. Use 12, 15, 18, 21, or 24.`);
+    const c = getCrypto();
+    const entropy = new Uint8Array(strength / 8);
+    c.getRandomValues(entropy);
+    return entropyToMnemonic(entropy);
+}
+export async function validateSeedPhrase(phrase) {
+    const words = phrase.trim().split(/\s+/);
+    const strength = STRENGTH_BY_COUNT[words.length];
+    if (strength === undefined)
+        return false;
+    const indices = words.map((w) => BIP39_WORDLIST.indexOf(w));
+    if (indices.some((i) => i === -1))
+        return false;
+    const entropyBits = strength;
+    const checksumBits = strength / 32;
+    const totalBits = words.length * 11;
+    // Rebuild the full bit array from word indices
+    const bits = new Uint8Array(totalBits);
+    for (let i = 0; i < words.length; i++) {
+        const idx = indices[i];
+        for (let b = 0; b < 11; b++) {
+            bits[i * 11 + b] = (idx >> (10 - b)) & 1;
+        }
+    }
+    // Extract entropy bytes
+    const entropy = new Uint8Array(entropyBits / 8);
+    for (let byte = 0; byte < entropy.length; byte++) {
+        let v = 0;
+        for (let bit = 0; bit < 8; bit++) {
+            v = (v << 1) | bits[byte * 8 + bit];
+        }
+        entropy[byte] = v;
+    }
+    // Compare given checksum bits vs recomputed SHA-256 checksum
+    const c = globalThis.crypto;
+    if (!c?.subtle?.digest)
+        return false;
+    const hashBuf = await c.subtle.digest('SHA-256', entropy);
+    const hash = new Uint8Array(hashBuf);
+    for (let i = 0; i < checksumBits; i++) {
+        const given = bits[entropyBits + i];
+        const expected = (hash[0] >> (7 - i)) & 1;
+        if (given !== expected)
+            return false;
+    }
+    return true;
+}
+//# sourceMappingURL=mnemonic.js.map

package/dist/identity/mnemonic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mnemonic.js","sourceRoot":"","sources":["../../src/identity/mnemonic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AAEpD,MAAM,iBAAiB,GAA2B;IAChD,EAAE,EAAE,GAAG;IACP,EAAE,EAAE,GAAG;IACP,EAAE,EAAE,GAAG;IACP,EAAE,EAAE,GAAG;IACP,EAAE,EAAE,GAAG;CACR,CAAA;AAED,SAAS,SAAS;IAChB,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAA;IAC3B,IAAI,CAAC,CAAC,EAAE,eAAe,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAA;IACpF,CAAC;IACD,OAAO,CAAC,CAAA;AACV,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAmB;IACzD,MAAM,CAAC,GAAG,SAAS,EAAE,CAAA;IACrB,6EAA6E;IAC7E,wDAAwD;IACxD,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAkC,CAAC,CAAA;IACpF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,YAAY,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,EAAE,CAAA;IAC9C,MAAM,SAAS,GAAG,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,GAAG,YAAY,CAAC,GAAG,EAAE,CAAA;IAC1D,4FAA4F;IAC5F,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IACnD,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACrB,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAA;IAClC,MAAM,KAAK,GAAa,EAAE,CAAA;IAC1B,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,SAAS,EAAE,EAAE,EAAE,EAAE,CAAC;QACtC,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,MAAM,QAAQ,GAAG,EAAE,GAAG,EAAE,CAAA;QACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC,CAAA;YACxB,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,CAAA;YACxB,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAA;YAC/B,KAAK,GAAG,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC,CAAA;QAC/D,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAA;IACnC,CAAC;IACD,OAAO,KAAK,CAAA;AACd,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,KAAK,GAAG,EAAE;IACjD,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,CAAA;IACzC,IAAI,QAAQ,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,2BAA2B,KAAK,8BAA8B,CAAC,CAAA;IAC3G,MAAM,CAAC,GAAG,SAAS,EAAE,CAAA;IACrB,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,QAAQ,GAAG,CAAC,CAAC,CAAA;IAC5C,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAA;IAC1B,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAA;AACnC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc;IACrD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;IACxC,MAAM,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;IAChD,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,KAAK,CAAA;IAExC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAA;IAC3D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;QAAE,OAAO,KAAK,CAAA;IAE/C,MAAM,WAAW,GAAG,QAAQ,CAAA;IAC5B,MAAM,YAAY,GAAG,QAAQ,GAAG,EAAE,CAAA;IAClC,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,GAAG,EAAE,CAAA;IAEnC,+CAA+C;IAC/C,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAA;IACtC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,GAAG,GAAG,OAAO,CAAC,CAAC,CAAC,CAAA;QACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5B,IAAI,CAAC,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QAC1C,CAAC;IACH,CAAC;IAED,wBAAwB;IACxB,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,WAAW,GAAG,CAAC,CAAC,CAAA;IAC/C,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,GAAG,CAAC,CAAA;QACT,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,GAAG,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC;YACjC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,IAAI,GAAG,CAAC,GAAG,GAAG,CAAC,CAAA;QACrC,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IACnB,CAAC;IAED,6DAA6D;IAC7D,MAAM,CAAC,GAAG,UAAU,CAAC,MAAM,CAAA;IAC3B,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM;QAAE,OAAO,KAAK,CAAA;IACpC,MAAM,OAAO,GAAG,MAAM,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,OAAkC,CAAC,CAAA;IACpF,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,OAAO,CAAC,CAAA;IACpC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,YAAY,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC,CAAA;QACnC,MAAM,QAAQ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAA;QACzC,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAA;IACtC,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC"}

package/dist/identity/pairing.d.ts

@@ -0,0 +1,45 @@
+import { type GeneratedDeviceKeys, type ScopePreset } from '@drakkar.software/starfish-identities';
+import type { CapCert } from '@drakkar.software/starfish-protocol';
+import { type KeyDerivation } from './capProvider.js';
+import type { NodeEndpoint } from '../transport/urls.js';
+import { type NodeCollectionKey } from '../collections/nodeCollections.js';
+/** A read-only device's bearer credential: an ephemeral keypair this device
+ *  generated itself, plus a cap-cert the wallet's root key signed for it,
+ *  plus one derived AES-256 key per granted collection (`collectionKeys`) —
+ *  each `HKDF-SHA256(secret, salt, collection.encryptionInfo)`, the same
+ *  derivation `createSecretEncryptor` performs internally, stopped one step
+ *  early so the raw bytes can travel here. That derivation is one-way and
+ *  collection-independent: holding `collectionKeys.userData` reveals nothing
+ *  about `collectionKeys.accounts`, and neither reveals the wallet's
+ *  derived secret, let alone the wallet's private key. A device holding
+ *  this payload can decrypt exactly the granted collections and nothing
+ *  else, and can never widen its own grant (it never touches the root
+ *  private key). See `crypto/collectionKeys.ts`. */
+export interface ReadOnlyPairingPayload {
+    v: 2;
+    kind: 'octobot-read-only-pairing';
+    node: NodeEndpoint;
+    rootEdPub: string;
+    userId: string;
+    device: GeneratedDeviceKeys;
+    cap: CapCert;
+    scope: ScopePreset;
+    collectionKeys: Partial<Record<NodeCollectionKey, string>>;
+}
+/** Mint a read-only pairing payload from the wallet's seed. The caller (e.g.
+ *  mobile2) renders the returned string as a QR code for another device to
+ *  scan — this package never renders QR images itself. The payload is fully
+ *  self-contained (it carries the node's endpoint), so
+ *  `connectReadOnlyDevice()` needs nothing else to connect. */
+export declare function createReadOnlyPairing(seed: string, derivation: KeyDerivation, node: NodeEndpoint, opts?: {
+    collections?: string[];
+    ttlSec?: number;
+}): Promise<{
+    payload: string;
+}>;
+/** Parse and structurally validate a scanned/pasted read-only pairing
+ *  payload. Throws on anything that isn't shaped like one — callers doing QR
+ *  classification (e.g. `classifyScannedCode`) should catch and fall through
+ *  to the next candidate parser rather than propagate. */
+export declare function parseReadOnlyPairing(payload: string): ReadOnlyPairingPayload;
+//# sourceMappingURL=pairing.d.ts.map

package/dist/identity/pairing.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pairing.d.ts","sourceRoot":"","sources":["../../src/identity/pairing.ts"],"names":[],"mappings":"AAAA,OAAO,EAAqC,KAAK,mBAAmB,EAAE,KAAK,WAAW,EAAE,MAAM,uCAAuC,CAAA;AACrI,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qCAAqC,CAAA;AAClE,OAAO,EAAc,KAAK,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAEjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,sBAAsB,CAAA;AAExD,OAAO,EAAoB,KAAK,iBAAiB,EAAE,MAAM,mCAAmC,CAAA;AAgB5F;;;;;;;;;;;oDAWoD;AACpD,MAAM,WAAW,sBAAsB;IACrC,CAAC,EAAE,CAAC,CAAA;IACJ,IAAI,EAAE,2BAA2B,CAAA;IACjC,IAAI,EAAE,YAAY,CAAA;IAClB,SAAS,EAAE,MAAM,CAAA;IACjB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,mBAAmB,CAAA;IAC3B,GAAG,EAAE,OAAO,CAAA;IACZ,KAAK,EAAE,WAAW,CAAA;IAClB,cAAc,EAAE,OAAO,CAAC,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC,CAAA;CAC3D;AAED;;;;+DAI+D;AAC/D,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,aAAa,EACzB,IAAI,EAAE,YAAY,EAClB,IAAI,CAAC,EAAE;IAAE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GACjD,OAAO,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,CA8B9B;AAED;;;0DAG0D;AAC1D,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,sBAAsB,CAmC5E"}