@dynamic-labs-wallet/sui 0.0.0-beta-191.1

package/index.cjs.d.ts

@@ -0,0 +1 @@
+export * from "./src/index";

package/index.cjs.js

@@ -0,0 +1,392 @@
+'use strict';
+
+var browser = require('@dynamic-labs-wallet/browser');
+var ed25519 = require('@mysten/sui/keypairs/ed25519');
+var cryptography = require('@mysten/sui/cryptography');
+var converter = require('bech32-converting');
+var verify = require('@mysten/sui/verify');
+var bcs = require('@mysten/sui/bcs');
+var blake2b = require('@noble/hashes/blake2b');
+
+function _extends() {
+    _extends = Object.assign || function assign(target) {
+        for(var i = 1; i < arguments.length; i++){
+            var source = arguments[i];
+            for(var key in source)if (Object.prototype.hasOwnProperty.call(source, key)) target[key] = source[key];
+        }
+        return target;
+    };
+    return _extends.apply(this, arguments);
+}
+
+const formatMessage = (message, intentScope)=>{
+    if (intentScope === 'TransactionData') {
+        const txBytes = Uint8Array.from(Buffer.from(message, 'hex'));
+        const intentMessage = cryptography.messageWithIntent(intentScope, txBytes);
+        return blake2b.blake2b(intentMessage, {
+            dkLen: 32
+        });
+    } else {
+        const encodedMessage = new TextEncoder().encode(message);
+        const serializedMessage = bcs.bcs.vector(bcs.bcs.u8()).serialize(encodedMessage).toBytes();
+        const intentMessage = cryptography.messageWithIntent(intentScope, serializedMessage);
+        return blake2b.blake2b(intentMessage, {
+            dkLen: 32
+        });
+    }
+};
+
+class DynamicSuiWalletClient extends browser.DynamicWalletClient {
+    async createWalletAccount({ thresholdSignatureScheme, password = undefined, onError, signedSessionId }) {
+        try {
+            let ceremonyCeremonyCompleteResolver;
+            const ceremonyCompletePromise = new Promise((resolve)=>{
+                ceremonyCeremonyCompleteResolver = resolve;
+            });
+            // Generate key shares for given threshold signature scheme (TSS)
+            const { rawPublicKey, clientKeyShares } = await this.keyGen({
+                chainName: this.chainName,
+                thresholdSignatureScheme,
+                onError,
+                onCeremonyComplete: (accountAddress, walletId)=>{
+                    // update wallet map
+                    this.walletMap[accountAddress] = _extends({}, this.walletMap[accountAddress] || {}, {
+                        accountAddress: accountAddress,
+                        walletId,
+                        chainName: this.chainName,
+                        thresholdSignatureScheme,
+                        clientKeySharesBackupInfo: browser.getClientKeyShareBackupInfo()
+                    });
+                    this.logger.debug('walletMap updated for wallet', {
+                        context: {
+                            accountAddress,
+                            walletId,
+                            walletMap: this.walletMap
+                        }
+                    });
+                    ceremonyCeremonyCompleteResolver(undefined);
+                }
+            });
+            // Wait for the ceremony to complete before proceeding
+            await ceremonyCompletePromise;
+            if (!rawPublicKey || !clientKeyShares) {
+                throw new Error(browser.ERROR_KEYGEN_FAILED);
+            }
+            const { accountAddress, publicKeyHex } = this.deriveAccountAddress({
+                rawPublicKey: rawPublicKey
+            });
+            // Update client key shares in wallet map
+            // warning: this might result in race condition if `onCeremonyComplete` executes at the same time
+            await this.setClientKeySharesToLocalStorage({
+                accountAddress,
+                clientKeyShares,
+                overwriteOrMerge: 'overwrite'
+            });
+            await this.storeEncryptedBackupByWalletWithRetry({
+                accountAddress,
+                clientKeyShares,
+                password,
+                signedSessionId
+            });
+            return {
+                accountAddress,
+                rawPublicKey: rawPublicKey,
+                publicKeyHex
+            };
+        } catch (error) {
+            this.logger.error(browser.ERROR_CREATE_WALLET_ACCOUNT, error);
+            throw new Error(browser.ERROR_CREATE_WALLET_ACCOUNT);
+        }
+    }
+    async getRawPublicKeyFromClientKeyShares({ chainName, clientKeyShare }) {
+        const chainConfig = browser.getMPCChainConfig(chainName);
+        const derivationPath = new Uint32Array(chainConfig.derivationPath);
+        const rawPublicKey = await this.derivePublicKey({
+            chainName,
+            keyShare: clientKeyShare,
+            derivationPath
+        });
+        return rawPublicKey;
+    }
+    /**
+   * Format Ed25519 signature to string that satisfies Sui signature standard
+   */ async formatSignature(signatureEd25519, accountAddress) {
+        try {
+            // get public key from keyshare
+            // TODO: handle this more gracefully from the client key shares if possible
+            const clientKeyShares = await this.getClientKeySharesFromLocalStorage({
+                accountAddress
+            });
+            const rawPublicKey = await this.getRawPublicKeyFromClientKeyShares({
+                chainName: this.chainName,
+                clientKeyShare: clientKeyShares[0]
+            });
+            const rawPublicKeyBytes = Uint8Array.from(Buffer.from(rawPublicKey, 'hex'));
+            const suiPublicKey = new ed25519.Ed25519PublicKey(rawPublicKeyBytes);
+            const serializedSignature = cryptography.toSerializedSignature({
+                signature: signatureEd25519,
+                signatureScheme: 'ED25519',
+                publicKey: suiPublicKey
+            });
+            return serializedSignature;
+        } catch (error) {
+            this.logger.error('Error formatting signature:', error);
+            throw error;
+        }
+    }
+    async verifyMessageSignature({ message, signature, accountAddress }) {
+        try {
+            const messageBytes = new TextEncoder().encode(message);
+            const verifiedPublicKey = await verify.verifyPersonalMessageSignature(messageBytes, signature);
+            const isVerified = verifiedPublicKey.toSuiAddress().toLowerCase() === accountAddress.toLowerCase();
+            if (!isVerified) {
+                throw new Error(browser.ERROR_VERIFY_MESSAGE_SIGNATURE);
+            }
+        } catch (error) {
+            this.logger.error('Error verifying signature:', error);
+            throw error;
+        }
+    }
+    async verifyTransactionSignature({ transaction, signature, senderAddress }) {
+        try {
+            const txBytes = Uint8Array.from(Buffer.from(transaction, 'hex'));
+            const verifiedPublicKey = await verify.verifyTransactionSignature(txBytes, signature);
+            const isVerified = verifiedPublicKey.toSuiAddress().toLowerCase() === senderAddress.toLowerCase();
+            if (!isVerified) {
+                throw new Error(browser.ERROR_VERIFY_TRANSACTION_SIGNATURE);
+            }
+        } catch (error) {
+            this.logger.error('Error verifying signature:', error);
+            throw error;
+        }
+    }
+    async signMessage({ message, accountAddress, password = undefined, signedSessionId }) {
+        if (!accountAddress) {
+            throw new Error(browser.ERROR_ACCOUNT_ADDRESS_REQUIRED);
+        }
+        try {
+            const formattedMessage = formatMessage(message, 'PersonalMessage');
+            const signatureEd25519 = await this.sign({
+                message: formattedMessage,
+                accountAddress: accountAddress,
+                chainName: this.chainName,
+                password,
+                signedSessionId
+            });
+            const formattedSignature = await this.formatSignature(signatureEd25519, accountAddress);
+            await this.verifyMessageSignature({
+                message,
+                signature: formattedSignature,
+                accountAddress
+            });
+            return formattedSignature;
+        } catch (error) {
+            this.logger.error(browser.ERROR_SIGN_MESSAGE, error);
+            throw new Error(browser.ERROR_SIGN_MESSAGE);
+        }
+    }
+    async signTransaction({ transaction, senderAddress, password = undefined, signedSessionId }) {
+        if (!senderAddress) {
+            throw new Error(browser.ERROR_ACCOUNT_ADDRESS_REQUIRED);
+        }
+        try {
+            const formattedMessage = formatMessage(transaction, 'TransactionData');
+            const signatureEd25519 = await this.sign({
+                message: formattedMessage,
+                accountAddress: senderAddress,
+                chainName: this.chainName,
+                password,
+                signedSessionId
+            });
+            const formattedSignature = await this.formatSignature(signatureEd25519, senderAddress);
+            await this.verifyTransactionSignature({
+                transaction,
+                signature: formattedSignature,
+                senderAddress
+            });
+            return formattedSignature;
+        } catch (error) {
+            this.logger.error('Error signing message:', error);
+            throw error;
+        }
+    }
+    deriveAccountAddress({ rawPublicKey }) {
+        const pubKeyBytes = Buffer.from(rawPublicKey, 'hex');
+        const publicKey = new ed25519.Ed25519PublicKey(pubKeyBytes);
+        const accountAddress = publicKey.toSuiAddress();
+        return {
+            accountAddress,
+            publicKeyHex: rawPublicKey
+        };
+    }
+    /**
+   * Converts a Sui private key from Bech32 format to a 64-character hex string.
+   * The output is compatible with RFC8032 Ed25519 private key format.
+   *
+   * @param suiPrivateKey - The Sui private key in Bech32 format starting with "suiprivkey1"
+   * @returns An object containing the private key and the private key bytes
+   * @throws Error if the input is not a valid Sui private key format
+   */ convertSuiPrivateKey(suiPrivateKey) {
+        if (!suiPrivateKey.startsWith('suiprivkey1')) {
+            this.logger.debug('Sui private key not in Bech32 format');
+            return {
+                privateKey: suiPrivateKey,
+                privateKeyBytes: Buffer.from(suiPrivateKey, 'hex')
+            };
+        }
+        try {
+            const suiConverter = converter('suiprivkey');
+            const hexKey = suiConverter.toHex(suiPrivateKey);
+            let cleanHex = hexKey.startsWith('0x00') ? hexKey.slice(4) : hexKey.startsWith('0x') ? hexKey.slice(2) : hexKey;
+            if (cleanHex.length > 64) {
+                cleanHex = cleanHex.slice(cleanHex.length - 64);
+            }
+            if (cleanHex.length !== 64) {
+                throw new Error(`Invalid output: Expected 64 characters, got ${cleanHex.length}`);
+            }
+            return {
+                privateKey: cleanHex.toLowerCase(),
+                privateKeyBytes: Buffer.from(cleanHex, 'hex')
+            };
+        } catch (error) {
+            if (error instanceof Error) {
+                throw new Error(`Failed to convert Sui private key: ${error.message}`);
+            }
+            throw new Error('Failed to convert Sui private key: Unknown error');
+        }
+    }
+    /**
+   * Gets the public key for a given private key
+   * @param privateKeyBytes A Buffer containing the Ed25519 private key bytes
+   * @returns The public key (Sui address) derived from the private key
+   */ getPublicKeyFromPrivateKey(privateKeyBytes) {
+        try {
+            const keypair = ed25519.Ed25519Keypair.fromSecretKey(privateKeyBytes);
+            const publicKey = keypair.getPublicKey();
+            const publicKeyBase58 = publicKey.toSuiAddress();
+            return publicKeyBase58;
+        } catch (error) {
+            this.logger.error('Unable to derive public key from private key. Check private key format', error instanceof Error ? error.message : 'Unknown error');
+            throw error;
+        }
+    }
+    /**
+   * Imports the private key for a given account address
+   *
+   * @param privateKey The private key to import, accepts both Bech32 and hex formats
+   * @param chainName The chain name to import the private key for
+   * @param thresholdSignatureScheme The threshold signature scheme to use
+   * @param password The password for encrypted backup shares
+   * @returns The account address, raw public key, and client key shares
+   */ async importPrivateKey({ privateKey, chainName, thresholdSignatureScheme, password = undefined, onError, signedSessionId }) {
+        try {
+            let ceremonyCeremonyCompleteResolver;
+            const ceremonyCompletePromise = new Promise((resolve)=>{
+                ceremonyCeremonyCompleteResolver = resolve;
+            });
+            const { privateKey: formattedPrivateKey, privateKeyBytes } = await this.convertSuiPrivateKey(privateKey);
+            const publicKey = this.getPublicKeyFromPrivateKey(privateKeyBytes);
+            const { rawPublicKey, clientKeyShares } = await this.importRawPrivateKey({
+                chainName,
+                privateKey: formattedPrivateKey,
+                thresholdSignatureScheme,
+                onError: (error)=>{
+                    this.logger.error(browser.ERROR_IMPORT_PRIVATE_KEY, error);
+                    onError == null ? void 0 : onError(error);
+                },
+                onCeremonyComplete: (accountAddress, walletId)=>{
+                    // update wallet map
+                    this.walletMap[accountAddress] = _extends({}, this.walletMap[accountAddress] || {}, {
+                        accountAddress,
+                        walletId,
+                        chainName: this.chainName,
+                        thresholdSignatureScheme,
+                        clientKeySharesBackupInfo: browser.getClientKeyShareBackupInfo()
+                    });
+                    this.logger.debug('walletMap updated for wallet', {
+                        context: {
+                            accountAddress,
+                            walletId,
+                            walletMap: this.walletMap
+                        }
+                    });
+                    ceremonyCeremonyCompleteResolver(undefined);
+                }
+            });
+            // Wait for the ceremony to complete before proceeding
+            await ceremonyCompletePromise;
+            if (!rawPublicKey || !clientKeyShares) {
+                throw new Error(browser.ERROR_IMPORT_PRIVATE_KEY);
+            }
+            const { accountAddress } = await this.deriveAccountAddress({
+                rawPublicKey: rawPublicKey
+            });
+            if (accountAddress !== publicKey) {
+                throw new Error(`Public key mismatch: derived address ${accountAddress} !== public key ${publicKey}`);
+            }
+            // Update client key shares in wallet map
+            // warning: this might result in race condition if `onCeremonyComplete` executes at the same time
+            await this.setClientKeySharesToLocalStorage({
+                accountAddress,
+                clientKeyShares,
+                overwriteOrMerge: 'overwrite'
+            });
+            await this.storeEncryptedBackupByWalletWithRetry({
+                accountAddress,
+                clientKeyShares,
+                password,
+                signedSessionId
+            });
+            return {
+                accountAddress,
+                rawPublicKey: rawPublicKey,
+                clientKeyShares
+            };
+        } catch (error) {
+            this.logger.error(browser.ERROR_IMPORT_PRIVATE_KEY, error);
+            throw new Error(browser.ERROR_IMPORT_PRIVATE_KEY);
+        }
+    }
+    /**
+   * Exports the private key for a given account address
+   *
+   * @param accountAddress The account address to export the private key for
+   * @param password The password for encrypted backup shares
+   * @returns The private key in hex format
+   */ async exportPrivateKey({ accountAddress, password = undefined, signedSessionId }) {
+        try {
+            const { derivedPrivateKey } = await this.exportKey({
+                accountAddress,
+                chainName: this.chainName,
+                password,
+                signedSessionId
+            });
+            if (!derivedPrivateKey) {
+                throw new Error('Derived private key is undefined');
+            }
+            const privateScalarHex = derivedPrivateKey.slice(0, 64);
+            return privateScalarHex;
+        } catch (error) {
+            this.logger.error(browser.ERROR_EXPORT_PRIVATE_KEY, error);
+            throw new Error(browser.ERROR_EXPORT_PRIVATE_KEY);
+        }
+    }
+    async getSuiWallets() {
+        const wallets = await this.getWallets();
+        const suiWallets = wallets.filter((wallet)=>wallet.chainName === 'sui');
+        return suiWallets;
+    }
+    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, baseClientRelayApiUrl, storageKey, debug }){
+        super({
+            environmentId,
+            authToken,
+            baseApiUrl,
+            baseMPCRelayApiUrl,
+            storageKey,
+            debug,
+            baseClientRelayApiUrl
+        }), this.chainName = 'SUI';
+    }
+}
+
+exports.DynamicSuiWalletClient = DynamicSuiWalletClient;

package/index.esm.d.ts

@@ -0,0 +1 @@
+export * from "./src/index";

package/index.esm.js

@@ -0,0 +1,390 @@
+import { DynamicWalletClient, getClientKeyShareBackupInfo, ERROR_KEYGEN_FAILED, ERROR_CREATE_WALLET_ACCOUNT, getMPCChainConfig, ERROR_VERIFY_MESSAGE_SIGNATURE, ERROR_VERIFY_TRANSACTION_SIGNATURE, ERROR_ACCOUNT_ADDRESS_REQUIRED, ERROR_SIGN_MESSAGE, ERROR_IMPORT_PRIVATE_KEY, ERROR_EXPORT_PRIVATE_KEY } from '@dynamic-labs-wallet/browser';
+import { Ed25519PublicKey, Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
+import { messageWithIntent, toSerializedSignature } from '@mysten/sui/cryptography';
+import converter from 'bech32-converting';
+import { verifyPersonalMessageSignature, verifyTransactionSignature } from '@mysten/sui/verify';
+import { bcs } from '@mysten/sui/bcs';
+import { blake2b } from '@noble/hashes/blake2b';
+
+function _extends() {
+    _extends = Object.assign || function assign(target) {
+        for(var i = 1; i < arguments.length; i++){
+            var source = arguments[i];
+            for(var key in source)if (Object.prototype.hasOwnProperty.call(source, key)) target[key] = source[key];
+        }
+        return target;
+    };
+    return _extends.apply(this, arguments);
+}
+
+const formatMessage = (message, intentScope)=>{
+    if (intentScope === 'TransactionData') {
+        const txBytes = Uint8Array.from(Buffer.from(message, 'hex'));
+        const intentMessage = messageWithIntent(intentScope, txBytes);
+        return blake2b(intentMessage, {
+            dkLen: 32
+        });
+    } else {
+        const encodedMessage = new TextEncoder().encode(message);
+        const serializedMessage = bcs.vector(bcs.u8()).serialize(encodedMessage).toBytes();
+        const intentMessage = messageWithIntent(intentScope, serializedMessage);
+        return blake2b(intentMessage, {
+            dkLen: 32
+        });
+    }
+};
+
+class DynamicSuiWalletClient extends DynamicWalletClient {
+    async createWalletAccount({ thresholdSignatureScheme, password = undefined, onError, signedSessionId }) {
+        try {
+            let ceremonyCeremonyCompleteResolver;
+            const ceremonyCompletePromise = new Promise((resolve)=>{
+                ceremonyCeremonyCompleteResolver = resolve;
+            });
+            // Generate key shares for given threshold signature scheme (TSS)
+            const { rawPublicKey, clientKeyShares } = await this.keyGen({
+                chainName: this.chainName,
+                thresholdSignatureScheme,
+                onError,
+                onCeremonyComplete: (accountAddress, walletId)=>{
+                    // update wallet map
+                    this.walletMap[accountAddress] = _extends({}, this.walletMap[accountAddress] || {}, {
+                        accountAddress: accountAddress,
+                        walletId,
+                        chainName: this.chainName,
+                        thresholdSignatureScheme,
+                        clientKeySharesBackupInfo: getClientKeyShareBackupInfo()
+                    });
+                    this.logger.debug('walletMap updated for wallet', {
+                        context: {
+                            accountAddress,
+                            walletId,
+                            walletMap: this.walletMap
+                        }
+                    });
+                    ceremonyCeremonyCompleteResolver(undefined);
+                }
+            });
+            // Wait for the ceremony to complete before proceeding
+            await ceremonyCompletePromise;
+            if (!rawPublicKey || !clientKeyShares) {
+                throw new Error(ERROR_KEYGEN_FAILED);
+            }
+            const { accountAddress, publicKeyHex } = this.deriveAccountAddress({
+                rawPublicKey: rawPublicKey
+            });
+            // Update client key shares in wallet map
+            // warning: this might result in race condition if `onCeremonyComplete` executes at the same time
+            await this.setClientKeySharesToLocalStorage({
+                accountAddress,
+                clientKeyShares,
+                overwriteOrMerge: 'overwrite'
+            });
+            await this.storeEncryptedBackupByWalletWithRetry({
+                accountAddress,
+                clientKeyShares,
+                password,
+                signedSessionId
+            });
+            return {
+                accountAddress,
+                rawPublicKey: rawPublicKey,
+                publicKeyHex
+            };
+        } catch (error) {
+            this.logger.error(ERROR_CREATE_WALLET_ACCOUNT, error);
+            throw new Error(ERROR_CREATE_WALLET_ACCOUNT);
+        }
+    }
+    async getRawPublicKeyFromClientKeyShares({ chainName, clientKeyShare }) {
+        const chainConfig = getMPCChainConfig(chainName);
+        const derivationPath = new Uint32Array(chainConfig.derivationPath);
+        const rawPublicKey = await this.derivePublicKey({
+            chainName,
+            keyShare: clientKeyShare,
+            derivationPath
+        });
+        return rawPublicKey;
+    }
+    /**
+   * Format Ed25519 signature to string that satisfies Sui signature standard
+   */ async formatSignature(signatureEd25519, accountAddress) {
+        try {
+            // get public key from keyshare
+            // TODO: handle this more gracefully from the client key shares if possible
+            const clientKeyShares = await this.getClientKeySharesFromLocalStorage({
+                accountAddress
+            });
+            const rawPublicKey = await this.getRawPublicKeyFromClientKeyShares({
+                chainName: this.chainName,
+                clientKeyShare: clientKeyShares[0]
+            });
+            const rawPublicKeyBytes = Uint8Array.from(Buffer.from(rawPublicKey, 'hex'));
+            const suiPublicKey = new Ed25519PublicKey(rawPublicKeyBytes);
+            const serializedSignature = toSerializedSignature({
+                signature: signatureEd25519,
+                signatureScheme: 'ED25519',
+                publicKey: suiPublicKey
+            });
+            return serializedSignature;
+        } catch (error) {
+            this.logger.error('Error formatting signature:', error);
+            throw error;
+        }
+    }
+    async verifyMessageSignature({ message, signature, accountAddress }) {
+        try {
+            const messageBytes = new TextEncoder().encode(message);
+            const verifiedPublicKey = await verifyPersonalMessageSignature(messageBytes, signature);
+            const isVerified = verifiedPublicKey.toSuiAddress().toLowerCase() === accountAddress.toLowerCase();
+            if (!isVerified) {
+                throw new Error(ERROR_VERIFY_MESSAGE_SIGNATURE);
+            }
+        } catch (error) {
+            this.logger.error('Error verifying signature:', error);
+            throw error;
+        }
+    }
+    async verifyTransactionSignature({ transaction, signature, senderAddress }) {
+        try {
+            const txBytes = Uint8Array.from(Buffer.from(transaction, 'hex'));
+            const verifiedPublicKey = await verifyTransactionSignature(txBytes, signature);
+            const isVerified = verifiedPublicKey.toSuiAddress().toLowerCase() === senderAddress.toLowerCase();
+            if (!isVerified) {
+                throw new Error(ERROR_VERIFY_TRANSACTION_SIGNATURE);
+            }
+        } catch (error) {
+            this.logger.error('Error verifying signature:', error);
+            throw error;
+        }
+    }
+    async signMessage({ message, accountAddress, password = undefined, signedSessionId }) {
+        if (!accountAddress) {
+            throw new Error(ERROR_ACCOUNT_ADDRESS_REQUIRED);
+        }
+        try {
+            const formattedMessage = formatMessage(message, 'PersonalMessage');
+            const signatureEd25519 = await this.sign({
+                message: formattedMessage,
+                accountAddress: accountAddress,
+                chainName: this.chainName,
+                password,
+                signedSessionId
+            });
+            const formattedSignature = await this.formatSignature(signatureEd25519, accountAddress);
+            await this.verifyMessageSignature({
+                message,
+                signature: formattedSignature,
+                accountAddress
+            });
+            return formattedSignature;
+        } catch (error) {
+            this.logger.error(ERROR_SIGN_MESSAGE, error);
+            throw new Error(ERROR_SIGN_MESSAGE);
+        }
+    }
+    async signTransaction({ transaction, senderAddress, password = undefined, signedSessionId }) {
+        if (!senderAddress) {
+            throw new Error(ERROR_ACCOUNT_ADDRESS_REQUIRED);
+        }
+        try {
+            const formattedMessage = formatMessage(transaction, 'TransactionData');
+            const signatureEd25519 = await this.sign({
+                message: formattedMessage,
+                accountAddress: senderAddress,
+                chainName: this.chainName,
+                password,
+                signedSessionId
+            });
+            const formattedSignature = await this.formatSignature(signatureEd25519, senderAddress);
+            await this.verifyTransactionSignature({
+                transaction,
+                signature: formattedSignature,
+                senderAddress
+            });
+            return formattedSignature;
+        } catch (error) {
+            this.logger.error('Error signing message:', error);
+            throw error;
+        }
+    }
+    deriveAccountAddress({ rawPublicKey }) {
+        const pubKeyBytes = Buffer.from(rawPublicKey, 'hex');
+        const publicKey = new Ed25519PublicKey(pubKeyBytes);
+        const accountAddress = publicKey.toSuiAddress();
+        return {
+            accountAddress,
+            publicKeyHex: rawPublicKey
+        };
+    }
+    /**
+   * Converts a Sui private key from Bech32 format to a 64-character hex string.
+   * The output is compatible with RFC8032 Ed25519 private key format.
+   *
+   * @param suiPrivateKey - The Sui private key in Bech32 format starting with "suiprivkey1"
+   * @returns An object containing the private key and the private key bytes
+   * @throws Error if the input is not a valid Sui private key format
+   */ convertSuiPrivateKey(suiPrivateKey) {
+        if (!suiPrivateKey.startsWith('suiprivkey1')) {
+            this.logger.debug('Sui private key not in Bech32 format');
+            return {
+                privateKey: suiPrivateKey,
+                privateKeyBytes: Buffer.from(suiPrivateKey, 'hex')
+            };
+        }
+        try {
+            const suiConverter = converter('suiprivkey');
+            const hexKey = suiConverter.toHex(suiPrivateKey);
+            let cleanHex = hexKey.startsWith('0x00') ? hexKey.slice(4) : hexKey.startsWith('0x') ? hexKey.slice(2) : hexKey;
+            if (cleanHex.length > 64) {
+                cleanHex = cleanHex.slice(cleanHex.length - 64);
+            }
+            if (cleanHex.length !== 64) {
+                throw new Error(`Invalid output: Expected 64 characters, got ${cleanHex.length}`);
+            }
+            return {
+                privateKey: cleanHex.toLowerCase(),
+                privateKeyBytes: Buffer.from(cleanHex, 'hex')
+            };
+        } catch (error) {
+            if (error instanceof Error) {
+                throw new Error(`Failed to convert Sui private key: ${error.message}`);
+            }
+            throw new Error('Failed to convert Sui private key: Unknown error');
+        }
+    }
+    /**
+   * Gets the public key for a given private key
+   * @param privateKeyBytes A Buffer containing the Ed25519 private key bytes
+   * @returns The public key (Sui address) derived from the private key
+   */ getPublicKeyFromPrivateKey(privateKeyBytes) {
+        try {
+            const keypair = Ed25519Keypair.fromSecretKey(privateKeyBytes);
+            const publicKey = keypair.getPublicKey();
+            const publicKeyBase58 = publicKey.toSuiAddress();
+            return publicKeyBase58;
+        } catch (error) {
+            this.logger.error('Unable to derive public key from private key. Check private key format', error instanceof Error ? error.message : 'Unknown error');
+            throw error;
+        }
+    }
+    /**
+   * Imports the private key for a given account address
+   *
+   * @param privateKey The private key to import, accepts both Bech32 and hex formats
+   * @param chainName The chain name to import the private key for
+   * @param thresholdSignatureScheme The threshold signature scheme to use
+   * @param password The password for encrypted backup shares
+   * @returns The account address, raw public key, and client key shares
+   */ async importPrivateKey({ privateKey, chainName, thresholdSignatureScheme, password = undefined, onError, signedSessionId }) {
+        try {
+            let ceremonyCeremonyCompleteResolver;
+            const ceremonyCompletePromise = new Promise((resolve)=>{
+                ceremonyCeremonyCompleteResolver = resolve;
+            });
+            const { privateKey: formattedPrivateKey, privateKeyBytes } = await this.convertSuiPrivateKey(privateKey);
+            const publicKey = this.getPublicKeyFromPrivateKey(privateKeyBytes);
+            const { rawPublicKey, clientKeyShares } = await this.importRawPrivateKey({
+                chainName,
+                privateKey: formattedPrivateKey,
+                thresholdSignatureScheme,
+                onError: (error)=>{
+                    this.logger.error(ERROR_IMPORT_PRIVATE_KEY, error);
+                    onError == null ? void 0 : onError(error);
+                },
+                onCeremonyComplete: (accountAddress, walletId)=>{
+                    // update wallet map
+                    this.walletMap[accountAddress] = _extends({}, this.walletMap[accountAddress] || {}, {
+                        accountAddress,
+                        walletId,
+                        chainName: this.chainName,
+                        thresholdSignatureScheme,
+                        clientKeySharesBackupInfo: getClientKeyShareBackupInfo()
+                    });
+                    this.logger.debug('walletMap updated for wallet', {
+                        context: {
+                            accountAddress,
+                            walletId,
+                            walletMap: this.walletMap
+                        }
+                    });
+                    ceremonyCeremonyCompleteResolver(undefined);
+                }
+            });
+            // Wait for the ceremony to complete before proceeding
+            await ceremonyCompletePromise;
+            if (!rawPublicKey || !clientKeyShares) {
+                throw new Error(ERROR_IMPORT_PRIVATE_KEY);
+            }
+            const { accountAddress } = await this.deriveAccountAddress({
+                rawPublicKey: rawPublicKey
+            });
+            if (accountAddress !== publicKey) {
+                throw new Error(`Public key mismatch: derived address ${accountAddress} !== public key ${publicKey}`);
+            }
+            // Update client key shares in wallet map
+            // warning: this might result in race condition if `onCeremonyComplete` executes at the same time
+            await this.setClientKeySharesToLocalStorage({
+                accountAddress,
+                clientKeyShares,
+                overwriteOrMerge: 'overwrite'
+            });
+            await this.storeEncryptedBackupByWalletWithRetry({
+                accountAddress,
+                clientKeyShares,
+                password,
+                signedSessionId
+            });
+            return {
+                accountAddress,
+                rawPublicKey: rawPublicKey,
+                clientKeyShares
+            };
+        } catch (error) {
+            this.logger.error(ERROR_IMPORT_PRIVATE_KEY, error);
+            throw new Error(ERROR_IMPORT_PRIVATE_KEY);
+        }
+    }
+    /**
+   * Exports the private key for a given account address
+   *
+   * @param accountAddress The account address to export the private key for
+   * @param password The password for encrypted backup shares
+   * @returns The private key in hex format
+   */ async exportPrivateKey({ accountAddress, password = undefined, signedSessionId }) {
+        try {
+            const { derivedPrivateKey } = await this.exportKey({
+                accountAddress,
+                chainName: this.chainName,
+                password,
+                signedSessionId
+            });
+            if (!derivedPrivateKey) {
+                throw new Error('Derived private key is undefined');
+            }
+            const privateScalarHex = derivedPrivateKey.slice(0, 64);
+            return privateScalarHex;
+        } catch (error) {
+            this.logger.error(ERROR_EXPORT_PRIVATE_KEY, error);
+            throw new Error(ERROR_EXPORT_PRIVATE_KEY);
+        }
+    }
+    async getSuiWallets() {
+        const wallets = await this.getWallets();
+        const suiWallets = wallets.filter((wallet)=>wallet.chainName === 'sui');
+        return suiWallets;
+    }
+    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, baseClientRelayApiUrl, storageKey, debug }){
+        super({
+            environmentId,
+            authToken,
+            baseApiUrl,
+            baseMPCRelayApiUrl,
+            storageKey,
+            debug,
+            baseClientRelayApiUrl
+        }), this.chainName = 'SUI';
+    }
+}
+
+export { DynamicSuiWalletClient };

package/package.json

@@ -0,0 +1,34 @@
+{
+  "name": "@dynamic-labs-wallet/sui",
+  "version": "0.0.0-beta-191.1",
+  "license": "MIT",
+  "dependencies": {
+    "@dynamic-labs-wallet/browser": "0.0.0-beta-191.1",
+    "@mysten/sui": "1.26.0",
+    "@noble/hashes": "1.7.1",
+    "bech32-converting": "^1.0.9"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "nx": {
+    "sourceRoot": "packages/sui/src",
+    "projectType": "library",
+    "name": "sui",
+    "targets": {
+      "build": {}
+    }
+  },
+  "main": "./index.cjs.js",
+  "module": "./index.esm.js",
+  "types": "./index.esm.d.ts",
+  "exports": {
+    "./package.json": "./package.json",
+    ".": {
+      "types": "./index.esm.d.ts",
+      "import": "./index.esm.js",
+      "require": "./index.cjs.js",
+      "default": "./index.cjs.js"
+    }
+  }
+}

package/src/client/client.d.ts

@@ -0,0 +1,96 @@
+import { ClientKeyShare, DynamicWalletClient, ThresholdSignatureScheme, DynamicWalletClientProps } from '@dynamic-labs-wallet/browser';
+export declare class DynamicSuiWalletClient extends DynamicWalletClient {
+    readonly chainName = "SUI";
+    constructor({ environmentId, authToken, baseApiUrl, baseMPCRelayApiUrl, baseClientRelayApiUrl, storageKey, debug, }: DynamicWalletClientProps);
+    createWalletAccount({ thresholdSignatureScheme, password, onError, signedSessionId, }: {
+        thresholdSignatureScheme: ThresholdSignatureScheme;
+        password?: string;
+        onError?: (error: Error) => void;
+        signedSessionId?: string;
+    }): Promise<{
+        accountAddress: string;
+        publicKeyHex: string;
+        rawPublicKey: string | undefined;
+    }>;
+    getRawPublicKeyFromClientKeyShares({ chainName, clientKeyShare, }: {
+        chainName: string;
+        clientKeyShare: ClientKeyShare;
+    }): Promise<any>;
+    /**
+     * Format Ed25519 signature to string that satisfies Sui signature standard
+     */
+    private formatSignature;
+    private verifyMessageSignature;
+    private verifyTransactionSignature;
+    signMessage({ message, accountAddress, password, signedSessionId, }: {
+        message: string;
+        accountAddress: string;
+        password?: string;
+        signedSessionId?: string;
+    }): Promise<string>;
+    signTransaction({ transaction, senderAddress, password, signedSessionId, }: {
+        transaction: string;
+        senderAddress: string;
+        password?: string;
+        signedSessionId?: string;
+    }): Promise<string>;
+    deriveAccountAddress({ rawPublicKey }: {
+        rawPublicKey: string;
+    }): {
+        accountAddress: string;
+        publicKeyHex: string;
+    };
+    /**
+     * Converts a Sui private key from Bech32 format to a 64-character hex string.
+     * The output is compatible with RFC8032 Ed25519 private key format.
+     *
+     * @param suiPrivateKey - The Sui private key in Bech32 format starting with "suiprivkey1"
+     * @returns An object containing the private key and the private key bytes
+     * @throws Error if the input is not a valid Sui private key format
+     */
+    convertSuiPrivateKey(suiPrivateKey: string): {
+        privateKey: string;
+        privateKeyBytes: Buffer;
+    };
+    /**
+     * Gets the public key for a given private key
+     * @param privateKeyBytes A Buffer containing the Ed25519 private key bytes
+     * @returns The public key (Sui address) derived from the private key
+     */
+    getPublicKeyFromPrivateKey(privateKeyBytes: Buffer): string;
+    /**
+     * Imports the private key for a given account address
+     *
+     * @param privateKey The private key to import, accepts both Bech32 and hex formats
+     * @param chainName The chain name to import the private key for
+     * @param thresholdSignatureScheme The threshold signature scheme to use
+     * @param password The password for encrypted backup shares
+     * @returns The account address, raw public key, and client key shares
+     */
+    importPrivateKey({ privateKey, chainName, thresholdSignatureScheme, password, onError, signedSessionId, }: {
+        privateKey: string;
+        chainName: string;
+        thresholdSignatureScheme: ThresholdSignatureScheme;
+        password?: string;
+        onError?: (error: Error) => void;
+        signedSessionId?: string;
+    }): Promise<{
+        accountAddress: string;
+        rawPublicKey: string | undefined;
+        clientKeyShares: ClientKeyShare[];
+    }>;
+    /**
+     * Exports the private key for a given account address
+     *
+     * @param accountAddress The account address to export the private key for
+     * @param password The password for encrypted backup shares
+     * @returns The private key in hex format
+     */
+    exportPrivateKey({ accountAddress, password, signedSessionId, }: {
+        accountAddress: string;
+        password?: string;
+        signedSessionId?: string;
+    }): Promise<string>;
+    getSuiWallets(): Promise<any>;
+}
+//# sourceMappingURL=client.d.ts.map

package/src/client/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../src/client/client.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,EACd,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EAWzB,MAAM,8BAA8B,CAAC;AAWtC,qBAAa,sBAAuB,SAAQ,mBAAmB;IAC7D,QAAQ,CAAC,SAAS,SAAS;gBAEf,EACV,aAAa,EACb,SAAS,EACT,UAAU,EACV,kBAAkB,EAClB,qBAAqB,EACrB,UAAU,EACV,KAAK,GACN,EAAE,wBAAwB;IAYrB,mBAAmB,CAAC,EACxB,wBAAwB,EACxB,QAAoB,EACpB,OAAO,EACP,eAAe,GAChB,EAAE;QACD,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC;QACV,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,CAAC;QACrB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;KAClC,CAAC;IAsEI,kCAAkC,CAAC,EACvC,SAAS,EACT,cAAc,GACf,EAAE;QACD,SAAS,EAAE,MAAM,CAAC;QAClB,cAAc,EAAE,cAAc,CAAC;KAChC;IAYD;;OAEG;YACW,eAAe;YAoCf,sBAAsB;YA6BtB,0BAA0B;IA6BlC,WAAW,CAAC,EAChB,OAAO,EACP,cAAc,EACd,QAAoB,EACpB,eAAe,GAChB,EAAE;QACD,OAAO,EAAE,MAAM,CAAC;QAChB,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,MAAM,CAAC;IAkCb,eAAe,CAAC,EACpB,WAAW,EACX,aAAa,EACb,QAAoB,EACpB,eAAe,GAChB,EAAE;QACD,WAAW,EAAE,MAAM,CAAC;QACpB,aAAa,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC,MAAM,CAAC;IAiCnB,oBAAoB,CAAC,EAAE,YAAY,EAAE,EAAE;QAAE,YAAY,EAAE,MAAM,CAAA;KAAE;;;;IAW/D;;;;;;;OAOG;IACH,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG;QAC3C,UAAU,EAAE,MAAM,CAAC;QACnB,eAAe,EAAE,MAAM,CAAC;KACzB;IAqCD;;;;OAIG;IACH,0BAA0B,CAAC,eAAe,EAAE,MAAM;IAelD;;;;;;;;OAQG;IACG,gBAAgB,CAAC,EACrB,UAAU,EACV,SAAS,EACT,wBAAwB,EACxB,QAAoB,EACpB,OAAO,EACP,eAAe,GAChB,EAAE;QACD,UAAU,EAAE,MAAM,CAAC;QACnB,SAAS,EAAE,MAAM,CAAC;QAClB,wBAAwB,EAAE,wBAAwB,CAAC;QACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;QACjC,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,GAAG,OAAO,CAAC;QACV,cAAc,EAAE,MAAM,CAAC;QACvB,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;QACjC,eAAe,EAAE,cAAc,EAAE,CAAC;KACnC,CAAC;IAmFF;;;;;;OAMG;IACG,gBAAgB,CAAC,EACrB,cAAc,EACd,QAAoB,EACpB,eAAe,GAChB,EAAE;QACD,cAAc,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,EAAE,MAAM,CAAC;QAClB,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B;IAmBK,aAAa;CAOpB"}

package/src/client/constants.d.ts

@@ -0,0 +1,9 @@
+export declare const ERROR_KEYGEN_FAILED = "Error with keygen";
+export declare const ERROR_CREATE_WALLET_ACCOUNT = "Error creating sui wallet account";
+export declare const ERROR_IMPORT_PRIVATE_KEY = "Error importing private key";
+export declare const ERROR_EXPORT_PRIVATE_KEY = "Error exporting private key";
+export declare const ERROR_SIGN_MESSAGE = "Error signing message";
+export declare const ERROR_ACCOUNT_ADDRESS_REQUIRED = "Account address is required";
+export declare const ERROR_VERIFY_MESSAGE_SIGNATURE = "Error verifying message signature";
+export declare const ERROR_VERIFY_TRANSACTION_SIGNATURE = "Error verifying transaction signature";
+//# sourceMappingURL=constants.d.ts.map

package/src/client/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../../src/client/constants.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,mBAAmB,sBAAsB,CAAC;AAEvD,eAAO,MAAM,2BAA2B,sCAAsC,CAAC;AAE/E,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AAEtE,eAAO,MAAM,wBAAwB,gCAAgC,CAAC;AAEtE,eAAO,MAAM,kBAAkB,0BAA0B,CAAC;AAE1D,eAAO,MAAM,8BAA8B,gCAAgC,CAAC;AAE5E,eAAO,MAAM,8BAA8B,sCACN,CAAC;AAEtC,eAAO,MAAM,kCAAkC,0CACN,CAAC"}

package/src/client/index.d.ts

@@ -0,0 +1,2 @@
+export * from './client';
+//# sourceMappingURL=index.d.ts.map

package/src/client/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/client/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC"}

package/src/index.d.ts

@@ -0,0 +1,2 @@
+export * from './client';
+//# sourceMappingURL=index.d.ts.map

package/src/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../packages/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC"}

package/src/utils.d.ts

@@ -0,0 +1,3 @@
+import { IntentScope } from '@mysten/sui/cryptography';
+export declare const formatMessage: (message: string, intentScope: IntentScope) => Uint8Array;
+//# sourceMappingURL=utils.d.ts.map

package/src/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../packages/src/utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAqB,MAAM,0BAA0B,CAAC;AAG1E,eAAO,MAAM,aAAa,YACf,MAAM,eACF,WAAW,KACvB,UAeF,CAAC"}