@haneullabs/haneul 0.1.0 → 2.5.0

package/dist/zklogin/jwt-decode.mjs

@@ -0,0 +1,50 @@
+//#region src/zklogin/jwt-decode.ts
+var InvalidTokenError = class extends Error {};
+InvalidTokenError.prototype.name = "InvalidTokenError";
+function b64DecodeUnicode(str) {
+	return decodeURIComponent(atob(str).replace(/(.)/g, (_m, p) => {
+		let code = p.charCodeAt(0).toString(16).toUpperCase();
+		if (code.length < 2) code = "0" + code;
+		return "%" + code;
+	}));
+}
+function base64UrlDecode(str) {
+	let output = str.replace(/-/g, "+").replace(/_/g, "/");
+	switch (output.length % 4) {
+		case 0: break;
+		case 2:
+			output += "==";
+			break;
+		case 3:
+			output += "=";
+			break;
+		default: throw new Error("base64 string is not of the correct length");
+	}
+	try {
+		return b64DecodeUnicode(output);
+	} catch {
+		return atob(output);
+	}
+}
+function jwtDecode(token, options) {
+	if (typeof token !== "string") throw new InvalidTokenError("Invalid token specified: must be a string");
+	options ||= {};
+	const pos = options.header === true ? 0 : 1;
+	const part = token.split(".")[pos];
+	if (typeof part !== "string") throw new InvalidTokenError(`Invalid token specified: missing part #${pos + 1}`);
+	let decoded;
+	try {
+		decoded = base64UrlDecode(part);
+	} catch (e) {
+		throw new InvalidTokenError(`Invalid token specified: invalid base64 for part #${pos + 1} (${e.message})`);
+	}
+	try {
+		return JSON.parse(decoded);
+	} catch (e) {
+		throw new InvalidTokenError(`Invalid token specified: invalid json for part #${pos + 1} (${e.message})`);
+	}
+}
+
+//#endregion
+export { jwtDecode };
+//# sourceMappingURL=jwt-decode.mjs.map

package/dist/zklogin/jwt-decode.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-decode.mjs","names":[],"sources":["../../src/zklogin/jwt-decode.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n// oxlint-disable check-tag-names\n\n/** Copied from https://github.com/auth0/jwt-decode/blob/3d372e9875ff673228a9f2d9df74e84690842a9c/lib/index.ts */\n\n/**\nThe MIT License (MIT)\n\nCopyright (c) 2015 Auth0, Inc. <support@auth0.com> (http://auth0.com)\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n */\n\nexport interface JwtDecodeOptions {\n\theader?: boolean;\n}\n\nexport interface JwtHeader {\n\ttyp?: string;\n\talg?: string;\n\tkid?: string;\n}\n\nexport interface JwtPayload {\n\tiss?: string;\n\tsub?: string;\n\taud?: string[] | string;\n\texp?: number;\n\tnbf?: number;\n\tiat?: number;\n\tjti?: string;\n}\n\nexport class InvalidTokenError extends Error {}\n\nInvalidTokenError.prototype.name = 'InvalidTokenError';\n\nfunction b64DecodeUnicode(str: string) {\n\treturn decodeURIComponent(\n\t\tatob(str).replace(/(.)/g, (_m, p) => {\n\t\t\tlet code = (p as string).charCodeAt(0).toString(16).toUpperCase();\n\t\t\tif (code.length < 2) {\n\t\t\t\tcode = '0' + code;\n\t\t\t}\n\t\t\treturn '%' + code;\n\t\t}),\n\t);\n}\n\nfunction base64UrlDecode(str: string) {\n\tlet output = str.replace(/-/g, '+').replace(/_/g, '/');\n\tswitch (output.length % 4) {\n\t\tcase 0:\n\t\t\tbreak;\n\t\tcase 2:\n\t\t\toutput += '==';\n\t\t\tbreak;\n\t\tcase 3:\n\t\t\toutput += '=';\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tthrow new Error('base64 string is not of the correct length');\n\t}\n\n\ttry {\n\t\treturn b64DecodeUnicode(output);\n\t} catch {\n\t\treturn atob(output);\n\t}\n}\n\nexport function jwtDecode<T = JwtHeader>(\n\ttoken: string,\n\toptions: JwtDecodeOptions & { header: true },\n): T;\nexport function jwtDecode<T = JwtPayload>(token: string, options?: JwtDecodeOptions): T;\nexport function jwtDecode<T = JwtHeader | JwtPayload>(\n\ttoken: string,\n\toptions?: JwtDecodeOptions,\n): T {\n\tif (typeof token !== 'string') {\n\t\tthrow new InvalidTokenError('Invalid token specified: must be a string');\n\t}\n\n\toptions ||= {};\n\n\tconst pos = options.header === true ? 0 : 1;\n\tconst part = token.split('.')[pos];\n\n\tif (typeof part !== 'string') {\n\t\tthrow new InvalidTokenError(`Invalid token specified: missing part #${pos + 1}`);\n\t}\n\n\tlet decoded: string;\n\ttry {\n\t\tdecoded = base64UrlDecode(part);\n\t} catch (e) {\n\t\tthrow new InvalidTokenError(\n\t\t\t`Invalid token specified: invalid base64 for part #${pos + 1} (${(e as Error).message})`,\n\t\t);\n\t}\n\n\ttry {\n\t\treturn JSON.parse(decoded) as T;\n\t} catch (e) {\n\t\tthrow new InvalidTokenError(\n\t\t\t`Invalid token specified: invalid json for part #${pos + 1} (${(e as Error).message})`,\n\t\t);\n\t}\n}\n"],"mappings":";AAkDA,IAAa,oBAAb,cAAuC,MAAM;AAE7C,kBAAkB,UAAU,OAAO;AAEnC,SAAS,iBAAiB,KAAa;AACtC,QAAO,mBACN,KAAK,IAAI,CAAC,QAAQ,SAAS,IAAI,MAAM;EACpC,IAAI,OAAQ,EAAa,WAAW,EAAE,CAAC,SAAS,GAAG,CAAC,aAAa;AACjE,MAAI,KAAK,SAAS,EACjB,QAAO,MAAM;AAEd,SAAO,MAAM;GACZ,CACF;;AAGF,SAAS,gBAAgB,KAAa;CACrC,IAAI,SAAS,IAAI,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI;AACtD,SAAQ,OAAO,SAAS,GAAxB;EACC,KAAK,EACJ;EACD,KAAK;AACJ,aAAU;AACV;EACD,KAAK;AACJ,aAAU;AACV;EACD,QACC,OAAM,IAAI,MAAM,6CAA6C;;AAG/D,KAAI;AACH,SAAO,iBAAiB,OAAO;SACxB;AACP,SAAO,KAAK,OAAO;;;AASrB,SAAgB,UACf,OACA,SACI;AACJ,KAAI,OAAO,UAAU,SACpB,OAAM,IAAI,kBAAkB,4CAA4C;AAGzE,aAAY,EAAE;CAEd,MAAM,MAAM,QAAQ,WAAW,OAAO,IAAI;CAC1C,MAAM,OAAO,MAAM,MAAM,IAAI,CAAC;AAE9B,KAAI,OAAO,SAAS,SACnB,OAAM,IAAI,kBAAkB,0CAA0C,MAAM,IAAI;CAGjF,IAAI;AACJ,KAAI;AACH,YAAU,gBAAgB,KAAK;UACvB,GAAG;AACX,QAAM,IAAI,kBACT,qDAAqD,MAAM,EAAE,IAAK,EAAY,QAAQ,GACtF;;AAGF,KAAI;AACH,SAAO,KAAK,MAAM,QAAQ;UAClB,GAAG;AACX,QAAM,IAAI,kBACT,mDAAmD,MAAM,EAAE,IAAK,EAAY,QAAQ,GACpF"}

package/dist/zklogin/jwt-utils.d.mts

@@ -0,0 +1,13 @@
+import { JwtPayload } from "./jwt-decode.mjs";
+
+//#region src/zklogin/jwt-utils.d.ts
+
+declare function decodeJwt(jwt: string): Omit<JwtPayload, 'iss' | 'aud' | 'sub'> & {
+  iss: string;
+  aud: string;
+  sub: string;
+  rawIss: string;
+};
+//#endregion
+export { decodeJwt };
+//# sourceMappingURL=jwt-utils.d.mts.map

package/dist/zklogin/jwt-utils.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-utils.d.mts","names":[],"sources":["../../src/zklogin/jwt-utils.ts"],"sourcesContent":[],"mappings":";;;;iBAsHgB,SAAA,eAAwB,KAAK"}

package/dist/zklogin/jwt-utils.mjs

@@ -0,0 +1,68 @@
+import { jwtDecode } from "./jwt-decode.mjs";
+import { normalizeZkLoginIssuer } from "./utils.mjs";
+
+//#region src/zklogin/jwt-utils.ts
+function base64UrlCharTo6Bits(base64UrlChar) {
+	if (base64UrlChar.length !== 1) throw new Error("Invalid base64Url character: " + base64UrlChar);
+	const index = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_".indexOf(base64UrlChar);
+	if (index === -1) throw new Error("Invalid base64Url character: " + base64UrlChar);
+	const binaryString = index.toString(2).padStart(6, "0");
+	return Array.from(binaryString).map(Number);
+}
+function base64UrlStringToBitVector(base64UrlString) {
+	let bitVector = [];
+	for (let i = 0; i < base64UrlString.length; i++) {
+		const bits = base64UrlCharTo6Bits(base64UrlString.charAt(i));
+		bitVector = bitVector.concat(bits);
+	}
+	return bitVector;
+}
+function decodeBase64URL(s, i) {
+	if (s.length < 2) throw new Error(`Input (s = ${s}) is not tightly packed because s.length < 2`);
+	let bits = base64UrlStringToBitVector(s);
+	const firstCharOffset = i % 4;
+	if (firstCharOffset === 0) {} else if (firstCharOffset === 1) bits = bits.slice(2);
+	else if (firstCharOffset === 2) bits = bits.slice(4);
+	else throw new Error(`Input (s = ${s}) is not tightly packed because i%4 = 3 (i = ${i}))`);
+	const lastCharOffset = (i + s.length - 1) % 4;
+	if (lastCharOffset === 3) {} else if (lastCharOffset === 2) bits = bits.slice(0, bits.length - 2);
+	else if (lastCharOffset === 1) bits = bits.slice(0, bits.length - 4);
+	else throw new Error(`Input (s = ${s}) is not tightly packed because (i + s.length - 1)%4 = 0 (i = ${i}))`);
+	if (bits.length % 8 !== 0) throw new Error(`We should never reach here...`);
+	const bytes = new Uint8Array(Math.floor(bits.length / 8));
+	let currentByteIndex = 0;
+	for (let i$1 = 0; i$1 < bits.length; i$1 += 8) {
+		const bitChunk = bits.slice(i$1, i$1 + 8);
+		const byte = parseInt(bitChunk.join(""), 2);
+		bytes[currentByteIndex++] = byte;
+	}
+	return new TextDecoder().decode(bytes);
+}
+function verifyExtendedClaim(claim) {
+	if (!(claim.slice(-1) === "}" || claim.slice(-1) === ",")) throw new Error("Invalid claim");
+	const json = JSON.parse("{" + claim.slice(0, -1) + "}");
+	if (Object.keys(json).length !== 1) throw new Error("Invalid claim");
+	const key = Object.keys(json)[0];
+	return [key, json[key]];
+}
+function extractClaimValue(claim, claimName) {
+	const [name, value] = verifyExtendedClaim(decodeBase64URL(claim.value, claim.indexMod4));
+	if (name !== claimName) throw new Error(`Invalid field name: found ${name} expected ${claimName}`);
+	return value;
+}
+function decodeJwt(jwt) {
+	const { iss, aud, sub, ...decodedJWT } = jwtDecode(jwt);
+	if (!sub || !iss || !aud) throw new Error("Missing jwt data");
+	if (Array.isArray(aud)) throw new Error("Not supported aud. Aud is an array, string was expected.");
+	return {
+		...decodedJWT,
+		iss: normalizeZkLoginIssuer(iss),
+		rawIss: iss,
+		aud,
+		sub
+	};
+}
+
+//#endregion
+export { decodeJwt, extractClaimValue };
+//# sourceMappingURL=jwt-utils.mjs.map

package/dist/zklogin/jwt-utils.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-utils.mjs","names":["i"],"sources":["../../src/zklogin/jwt-utils.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport type { JwtPayload } from './jwt-decode.js';\nimport { jwtDecode } from './jwt-decode.js';\nimport { normalizeZkLoginIssuer } from './utils.js';\n\nfunction base64UrlCharTo6Bits(base64UrlChar: string): number[] {\n\tif (base64UrlChar.length !== 1) {\n\t\tthrow new Error('Invalid base64Url character: ' + base64UrlChar);\n\t}\n\n\t// Define the base64URL character set\n\tconst base64UrlCharacterSet = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_';\n\n\t// Find the index of the input character in the base64URL character set\n\tconst index = base64UrlCharacterSet.indexOf(base64UrlChar);\n\n\tif (index === -1) {\n\t\tthrow new Error('Invalid base64Url character: ' + base64UrlChar);\n\t}\n\n\t// Convert the index to a 6-bit binary string\n\tconst binaryString = index.toString(2).padStart(6, '0');\n\n\t// Convert the binary string to an array of bits\n\tconst bits = Array.from(binaryString).map(Number);\n\n\treturn bits;\n}\n\nfunction base64UrlStringToBitVector(base64UrlString: string) {\n\tlet bitVector: number[] = [];\n\tfor (let i = 0; i < base64UrlString.length; i++) {\n\t\tconst base64UrlChar = base64UrlString.charAt(i);\n\t\tconst bits = base64UrlCharTo6Bits(base64UrlChar);\n\t\tbitVector = bitVector.concat(bits);\n\t}\n\treturn bitVector;\n}\n\nfunction decodeBase64URL(s: string, i: number): string {\n\tif (s.length < 2) {\n\t\tthrow new Error(`Input (s = ${s}) is not tightly packed because s.length < 2`);\n\t}\n\tlet bits = base64UrlStringToBitVector(s);\n\n\tconst firstCharOffset = i % 4;\n\tif (firstCharOffset === 0) {\n\t\t// skip\n\t} else if (firstCharOffset === 1) {\n\t\tbits = bits.slice(2);\n\t} else if (firstCharOffset === 2) {\n\t\tbits = bits.slice(4);\n\t} else {\n\t\t// (offset == 3)\n\t\tthrow new Error(`Input (s = ${s}) is not tightly packed because i%4 = 3 (i = ${i}))`);\n\t}\n\n\tconst lastCharOffset = (i + s.length - 1) % 4;\n\tif (lastCharOffset === 3) {\n\t\t// skip\n\t} else if (lastCharOffset === 2) {\n\t\tbits = bits.slice(0, bits.length - 2);\n\t} else if (lastCharOffset === 1) {\n\t\tbits = bits.slice(0, bits.length - 4);\n\t} else {\n\t\t// (offset == 0)\n\t\tthrow new Error(\n\t\t\t`Input (s = ${s}) is not tightly packed because (i + s.length - 1)%4 = 0 (i = ${i}))`,\n\t\t);\n\t}\n\n\tif (bits.length % 8 !== 0) {\n\t\tthrow new Error(`We should never reach here...`);\n\t}\n\n\tconst bytes = new Uint8Array(Math.floor(bits.length / 8));\n\tlet currentByteIndex = 0;\n\tfor (let i = 0; i < bits.length; i += 8) {\n\t\tconst bitChunk = bits.slice(i, i + 8);\n\n\t\t// Convert the 8-bit chunk to a byte and add it to the bytes array\n\t\tconst byte = parseInt(bitChunk.join(''), 2);\n\t\tbytes[currentByteIndex++] = byte;\n\t}\n\treturn new TextDecoder().decode(bytes);\n}\n\nfunction verifyExtendedClaim(claim: string) {\n\t// Last character of each extracted_claim must be '}' or ','\n\tif (!(claim.slice(-1) === '}' || claim.slice(-1) === ',')) {\n\t\tthrow new Error('Invalid claim');\n\t}\n\n\t// A hack to parse the JSON key-value pair.. but it should work\n\tconst json = JSON.parse('{' + claim.slice(0, -1) + '}');\n\tif (Object.keys(json).length !== 1) {\n\t\tthrow new Error('Invalid claim');\n\t}\n\tconst key = Object.keys(json)[0];\n\treturn [key, json[key]];\n}\n\nexport type Claim = {\n\tvalue: string;\n\tindexMod4: number;\n};\n\nexport function extractClaimValue<R>(claim: Claim, claimName: string): R {\n\tconst extendedClaim = decodeBase64URL(claim.value, claim.indexMod4);\n\tconst [name, value] = verifyExtendedClaim(extendedClaim);\n\tif (name !== claimName) {\n\t\tthrow new Error(`Invalid field name: found ${name} expected ${claimName}`);\n\t}\n\treturn value;\n}\n\nexport function decodeJwt(jwt: string): Omit<JwtPayload, 'iss' | 'aud' | 'sub'> & {\n\tiss: string;\n\taud: string;\n\tsub: string;\n\trawIss: string;\n} {\n\tconst { iss, aud, sub, ...decodedJWT } = jwtDecode(jwt);\n\n\tif (!sub || !iss || !aud) {\n\t\tthrow new Error('Missing jwt data');\n\t}\n\n\tif (Array.isArray(aud)) {\n\t\tthrow new Error('Not supported aud. Aud is an array, string was expected.');\n\t}\n\n\treturn {\n\t\t...decodedJWT,\n\t\tiss: normalizeZkLoginIssuer(iss),\n\t\trawIss: iss,\n\t\taud,\n\t\tsub,\n\t};\n}\n"],"mappings":";;;;AAOA,SAAS,qBAAqB,eAAiC;AAC9D,KAAI,cAAc,WAAW,EAC5B,OAAM,IAAI,MAAM,kCAAkC,cAAc;CAOjE,MAAM,QAHwB,mEAGM,QAAQ,cAAc;AAE1D,KAAI,UAAU,GACb,OAAM,IAAI,MAAM,kCAAkC,cAAc;CAIjE,MAAM,eAAe,MAAM,SAAS,EAAE,CAAC,SAAS,GAAG,IAAI;AAKvD,QAFa,MAAM,KAAK,aAAa,CAAC,IAAI,OAAO;;AAKlD,SAAS,2BAA2B,iBAAyB;CAC5D,IAAI,YAAsB,EAAE;AAC5B,MAAK,IAAI,IAAI,GAAG,IAAI,gBAAgB,QAAQ,KAAK;EAEhD,MAAM,OAAO,qBADS,gBAAgB,OAAO,EAAE,CACC;AAChD,cAAY,UAAU,OAAO,KAAK;;AAEnC,QAAO;;AAGR,SAAS,gBAAgB,GAAW,GAAmB;AACtD,KAAI,EAAE,SAAS,EACd,OAAM,IAAI,MAAM,cAAc,EAAE,8CAA8C;CAE/E,IAAI,OAAO,2BAA2B,EAAE;CAExC,MAAM,kBAAkB,IAAI;AAC5B,KAAI,oBAAoB,GAAG,YAEhB,oBAAoB,EAC9B,QAAO,KAAK,MAAM,EAAE;UACV,oBAAoB,EAC9B,QAAO,KAAK,MAAM,EAAE;KAGpB,OAAM,IAAI,MAAM,cAAc,EAAE,+CAA+C,EAAE,IAAI;CAGtF,MAAM,kBAAkB,IAAI,EAAE,SAAS,KAAK;AAC5C,KAAI,mBAAmB,GAAG,YAEf,mBAAmB,EAC7B,QAAO,KAAK,MAAM,GAAG,KAAK,SAAS,EAAE;UAC3B,mBAAmB,EAC7B,QAAO,KAAK,MAAM,GAAG,KAAK,SAAS,EAAE;KAGrC,OAAM,IAAI,MACT,cAAc,EAAE,gEAAgE,EAAE,IAClF;AAGF,KAAI,KAAK,SAAS,MAAM,EACvB,OAAM,IAAI,MAAM,gCAAgC;CAGjD,MAAM,QAAQ,IAAI,WAAW,KAAK,MAAM,KAAK,SAAS,EAAE,CAAC;CACzD,IAAI,mBAAmB;AACvB,MAAK,IAAIA,MAAI,GAAGA,MAAI,KAAK,QAAQ,OAAK,GAAG;EACxC,MAAM,WAAW,KAAK,MAAMA,KAAGA,MAAI,EAAE;EAGrC,MAAM,OAAO,SAAS,SAAS,KAAK,GAAG,EAAE,EAAE;AAC3C,QAAM,sBAAsB;;AAE7B,QAAO,IAAI,aAAa,CAAC,OAAO,MAAM;;AAGvC,SAAS,oBAAoB,OAAe;AAE3C,KAAI,EAAE,MAAM,MAAM,GAAG,KAAK,OAAO,MAAM,MAAM,GAAG,KAAK,KACpD,OAAM,IAAI,MAAM,gBAAgB;CAIjC,MAAM,OAAO,KAAK,MAAM,MAAM,MAAM,MAAM,GAAG,GAAG,GAAG,IAAI;AACvD,KAAI,OAAO,KAAK,KAAK,CAAC,WAAW,EAChC,OAAM,IAAI,MAAM,gBAAgB;CAEjC,MAAM,MAAM,OAAO,KAAK,KAAK,CAAC;AAC9B,QAAO,CAAC,KAAK,KAAK,KAAK;;AAQxB,SAAgB,kBAAqB,OAAc,WAAsB;CAExE,MAAM,CAAC,MAAM,SAAS,oBADA,gBAAgB,MAAM,OAAO,MAAM,UAAU,CACX;AACxD,KAAI,SAAS,UACZ,OAAM,IAAI,MAAM,6BAA6B,KAAK,YAAY,YAAY;AAE3E,QAAO;;AAGR,SAAgB,UAAU,KAKxB;CACD,MAAM,EAAE,KAAK,KAAK,KAAK,GAAG,eAAe,UAAU,IAAI;AAEvD,KAAI,CAAC,OAAO,CAAC,OAAO,CAAC,IACpB,OAAM,IAAI,MAAM,mBAAmB;AAGpC,KAAI,MAAM,QAAQ,IAAI,CACrB,OAAM,IAAI,MAAM,2DAA2D;AAG5E,QAAO;EACN,GAAG;EACH,KAAK,uBAAuB,IAAI;EAChC,QAAQ;EACR;EACA;EACA"}

package/dist/zklogin/nonce.d.mts

@@ -0,0 +1,8 @@
+import { PublicKey } from "../cryptography/publickey.mjs";
+
+//#region src/zklogin/nonce.d.ts
+declare function generateRandomness(): string;
+declare function generateNonce(publicKey: PublicKey, maxEpoch: number, randomness: bigint | string): string;
+//#endregion
+export { generateNonce, generateRandomness };
+//# sourceMappingURL=nonce.d.mts.map

package/dist/zklogin/nonce.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce.d.mts","names":[],"sources":["../../src/zklogin/nonce.ts"],"sourcesContent":[],"mappings":";;;iBAqBgB,kBAAA,CAAA;AAAA,iBAKA,aAAA,CALkB,SAAA,EAKO,SALP,EAAA,QAAA,EAAA,MAAA,EAAA,UAAA,EAAA,MAAA,GAAA,MAAA,CAAA,EAAA,MAAA"}

package/dist/zklogin/nonce.mjs

@@ -0,0 +1,32 @@
+import { poseidonHash } from "./poseidon.mjs";
+import { toPaddedBigEndianBytes } from "./utils.mjs";
+import { toHex } from "@haneullabs/bcs";
+import { randomBytes } from "@noble/hashes/utils.js";
+import { base64urlnopad } from "@scure/base";
+
+//#region src/zklogin/nonce.ts
+const NONCE_LENGTH = 27;
+function toBigIntBE(bytes) {
+	const hex = toHex(bytes);
+	if (hex.length === 0) return BigInt(0);
+	return BigInt(`0x${hex}`);
+}
+function generateRandomness() {
+	return String(toBigIntBE(randomBytes(16)));
+}
+function generateNonce(publicKey, maxEpoch, randomness) {
+	const publicKeyBytes = toBigIntBE(publicKey.toSuiBytes());
+	const Z = toPaddedBigEndianBytes(poseidonHash([
+		publicKeyBytes / 2n ** 128n,
+		publicKeyBytes % 2n ** 128n,
+		maxEpoch,
+		BigInt(randomness)
+	]), 20);
+	const nonce = base64urlnopad.encode(Z);
+	if (nonce.length !== NONCE_LENGTH) throw new Error(`Length of nonce ${nonce} (${nonce.length}) is not equal to ${NONCE_LENGTH}`);
+	return nonce;
+}
+
+//#endregion
+export { generateNonce, generateRandomness };
+//# sourceMappingURL=nonce.mjs.map

package/dist/zklogin/nonce.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce.mjs","names":[],"sources":["../../src/zklogin/nonce.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { toHex } from '@haneullabs/bcs';\nimport { randomBytes } from '@noble/hashes/utils.js';\nimport { base64urlnopad } from '@scure/base';\n\nimport type { PublicKey } from '../cryptography/publickey.js';\nimport { poseidonHash } from './poseidon.js';\nimport { toPaddedBigEndianBytes } from './utils.js';\n\nexport const NONCE_LENGTH = 27;\n\nfunction toBigIntBE(bytes: Uint8Array) {\n\tconst hex = toHex(bytes);\n\tif (hex.length === 0) {\n\t\treturn BigInt(0);\n\t}\n\treturn BigInt(`0x${hex}`);\n}\n\nexport function generateRandomness() {\n\t// Once Node 20 enters LTS, we can just use crypto.getRandomValues(new Uint8Array(16)), but until then we use `randomBytes` to improve compatibility:\n\treturn String(toBigIntBE(randomBytes(16)));\n}\n\nexport function generateNonce(publicKey: PublicKey, maxEpoch: number, randomness: bigint | string) {\n\tconst publicKeyBytes = toBigIntBE(publicKey.toSuiBytes());\n\tconst eph_public_key_0 = publicKeyBytes / 2n ** 128n;\n\tconst eph_public_key_1 = publicKeyBytes % 2n ** 128n;\n\tconst bigNum = poseidonHash([eph_public_key_0, eph_public_key_1, maxEpoch, BigInt(randomness)]);\n\tconst Z = toPaddedBigEndianBytes(bigNum, 20);\n\tconst nonce = base64urlnopad.encode(Z);\n\n\tif (nonce.length !== NONCE_LENGTH) {\n\t\tthrow new Error(`Length of nonce ${nonce} (${nonce.length}) is not equal to ${NONCE_LENGTH}`);\n\t}\n\treturn nonce;\n}\n"],"mappings":";;;;;;;AAWA,MAAa,eAAe;AAE5B,SAAS,WAAW,OAAmB;CACtC,MAAM,MAAM,MAAM,MAAM;AACxB,KAAI,IAAI,WAAW,EAClB,QAAO,OAAO,EAAE;AAEjB,QAAO,OAAO,KAAK,MAAM;;AAG1B,SAAgB,qBAAqB;AAEpC,QAAO,OAAO,WAAW,YAAY,GAAG,CAAC,CAAC;;AAG3C,SAAgB,cAAc,WAAsB,UAAkB,YAA6B;CAClG,MAAM,iBAAiB,WAAW,UAAU,YAAY,CAAC;CAIzD,MAAM,IAAI,uBADK,aAAa;EAFH,iBAAiB,MAAM;EACvB,iBAAiB,MAAM;EACiB;EAAU,OAAO,WAAW;EAAC,CAAC,EACtD,GAAG;CAC5C,MAAM,QAAQ,eAAe,OAAO,EAAE;AAEtC,KAAI,MAAM,WAAW,aACpB,OAAM,IAAI,MAAM,mBAAmB,MAAM,IAAI,MAAM,OAAO,oBAAoB,eAAe;AAE9F,QAAO"}

package/dist/zklogin/poseidon.d.mts

@@ -0,0 +1,5 @@
+//#region src/zklogin/poseidon.d.ts
+declare function poseidonHash(inputs: (number | bigint | string)[]): bigint;
+//#endregion
+export { poseidonHash };
+//# sourceMappingURL=poseidon.d.mts.map

package/dist/zklogin/poseidon.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"poseidon.d.mts","names":[],"sources":["../../src/zklogin/poseidon.ts"],"sourcesContent":[],"mappings":";AA4CgB,iBAAA,YAAA,CAAY,MAAA,EAAA,CAAA,MAAA,GAAA,MAAA,GAAA,MAAA,CAAA,EAAA,CAAA,EAAA,MAAA"}

package/dist/zklogin/poseidon.mjs

@@ -0,0 +1,36 @@
+import { poseidon1, poseidon10, poseidon11, poseidon12, poseidon13, poseidon14, poseidon15, poseidon16, poseidon2, poseidon3, poseidon4, poseidon5, poseidon6, poseidon7, poseidon8, poseidon9 } from "poseidon-lite";
+
+//#region src/zklogin/poseidon.ts
+const poseidonNumToHashFN = [
+	poseidon1,
+	poseidon2,
+	poseidon3,
+	poseidon4,
+	poseidon5,
+	poseidon6,
+	poseidon7,
+	poseidon8,
+	poseidon9,
+	poseidon10,
+	poseidon11,
+	poseidon12,
+	poseidon13,
+	poseidon14,
+	poseidon15,
+	poseidon16
+];
+const BN254_FIELD_SIZE = 21888242871839275222246405745257275088548364400416034343698204186575808495617n;
+function poseidonHash(inputs) {
+	inputs.forEach((x) => {
+		const b = BigInt(x);
+		if (b < 0 || b >= BN254_FIELD_SIZE) throw new Error(`Element ${b} not in the BN254 field`);
+	});
+	const hashFN = poseidonNumToHashFN[inputs.length - 1];
+	if (hashFN) return hashFN(inputs);
+	else if (inputs.length <= 32) return poseidonHash([poseidonHash(inputs.slice(0, 16)), poseidonHash(inputs.slice(16))]);
+	else throw new Error(`Yet to implement: Unable to hash a vector of length ${inputs.length}`);
+}
+
+//#endregion
+export { poseidonHash };
+//# sourceMappingURL=poseidon.mjs.map

package/dist/zklogin/poseidon.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"poseidon.mjs","names":[],"sources":["../../src/zklogin/poseidon.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport {\n\tposeidon1,\n\tposeidon2,\n\tposeidon3,\n\tposeidon4,\n\tposeidon5,\n\tposeidon6,\n\tposeidon7,\n\tposeidon8,\n\tposeidon9,\n\tposeidon10,\n\tposeidon11,\n\tposeidon12,\n\tposeidon13,\n\tposeidon14,\n\tposeidon15,\n\tposeidon16,\n} from 'poseidon-lite';\n\nconst poseidonNumToHashFN = [\n\tposeidon1,\n\tposeidon2,\n\tposeidon3,\n\tposeidon4,\n\tposeidon5,\n\tposeidon6,\n\tposeidon7,\n\tposeidon8,\n\tposeidon9,\n\tposeidon10,\n\tposeidon11,\n\tposeidon12,\n\tposeidon13,\n\tposeidon14,\n\tposeidon15,\n\tposeidon16,\n];\n\nexport const BN254_FIELD_SIZE =\n\t21888242871839275222246405745257275088548364400416034343698204186575808495617n;\n\nexport function poseidonHash(inputs: (number | bigint | string)[]): bigint {\n\tinputs.forEach((x) => {\n\t\tconst b = BigInt(x);\n\t\tif (b < 0 || b >= BN254_FIELD_SIZE) {\n\t\t\tthrow new Error(`Element ${b} not in the BN254 field`);\n\t\t}\n\t});\n\n\tconst hashFN = poseidonNumToHashFN[inputs.length - 1];\n\n\tif (hashFN) {\n\t\treturn hashFN(inputs);\n\t} else if (inputs.length <= 32) {\n\t\tconst hash1 = poseidonHash(inputs.slice(0, 16));\n\t\tconst hash2 = poseidonHash(inputs.slice(16));\n\t\treturn poseidonHash([hash1, hash2]);\n\t} else {\n\t\tthrow new Error(`Yet to implement: Unable to hash a vector of length ${inputs.length}`);\n\t}\n}\n"],"mappings":";;;AAsBA,MAAM,sBAAsB;CAC3B;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;AAED,MAAa,mBACZ;AAED,SAAgB,aAAa,QAA8C;AAC1E,QAAO,SAAS,MAAM;EACrB,MAAM,IAAI,OAAO,EAAE;AACnB,MAAI,IAAI,KAAK,KAAK,iBACjB,OAAM,IAAI,MAAM,WAAW,EAAE,yBAAyB;GAEtD;CAEF,MAAM,SAAS,oBAAoB,OAAO,SAAS;AAEnD,KAAI,OACH,QAAO,OAAO,OAAO;UACX,OAAO,UAAU,GAG3B,QAAO,aAAa,CAFN,aAAa,OAAO,MAAM,GAAG,GAAG,CAAC,EACjC,aAAa,OAAO,MAAM,GAAG,CAAC,CACV,CAAC;KAEnC,OAAM,IAAI,MAAM,uDAAuD,OAAO,SAAS"}

package/dist/zklogin/publickey.d.mts

@@ -0,0 +1,67 @@
+import { PublicKey, PublicKeyInitData } from "../cryptography/publickey.mjs";
+import { ClientWithCoreApi } from "../client/core.mjs";
+import { ZkLoginSignatureInputs } from "./bcs.mjs";
+
+//#region src/zklogin/publickey.d.ts
+
+/**
+ * A zkLogin public identifier
+ */
+declare class ZkLoginPublicIdentifier extends PublicKey {
+  #private;
+  /**
+   * Create a new ZkLoginPublicIdentifier object
+   * @param value zkLogin public identifier as buffer or base-64 encoded string
+   */
+  constructor(value: PublicKeyInitData, {
+    client
+  }?: {
+    client?: ClientWithCoreApi;
+  });
+  static fromBytes(bytes: Uint8Array, {
+    client,
+    address,
+    legacyAddress
+  }?: {
+    client?: ClientWithCoreApi;
+    address?: string;
+    legacyAddress?: boolean;
+  }): ZkLoginPublicIdentifier;
+  static fromProof(address: string, proof: ZkLoginSignatureInputs): ZkLoginPublicIdentifier;
+  /**
+   * Checks if two zkLogin public identifiers are equal
+   */
+  equals(publicKey: ZkLoginPublicIdentifier): boolean;
+  toHaneulAddress(): string;
+  /**
+   * Return the byte array representation of the zkLogin public identifier
+   */
+  toRawBytes(): Uint8Array<ArrayBuffer>;
+  /**
+   * Return the Haneul address associated with this ZkLogin public identifier
+   */
+  flag(): number;
+  /**
+   * Verifies that the signature is valid for for the provided message
+   */
+  verify(_message: Uint8Array, _signature: Uint8Array | string): Promise<boolean>;
+  /**
+   * Verifies that the signature is valid for for the provided PersonalMessage
+   */
+  verifyPersonalMessage(message: Uint8Array, signature: Uint8Array | string): Promise<boolean>;
+  /**
+   * Verifies that the signature is valid for for the provided Transaction
+   */
+  verifyTransaction(transaction: Uint8Array, signature: Uint8Array | string): Promise<boolean>;
+  /**
+   * Verifies that the public key is associated with the provided address
+   */
+  verifyAddress(address: string): boolean;
+}
+declare function toZkLoginPublicIdentifier(addressSeed: bigint, iss: string, options: {
+  client?: ClientWithCoreApi;
+  legacyAddress: boolean;
+}): ZkLoginPublicIdentifier;
+//#endregion
+export { ZkLoginPublicIdentifier, toZkLoginPublicIdentifier };
+//# sourceMappingURL=publickey.d.mts.map

package/dist/zklogin/publickey.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"publickey.d.mts","names":[],"sources":["../../src/zklogin/publickey.ts"],"sourcesContent":[],"mappings":";;;;;;;AAoBA;;AASyC,cAT5B,uBAAA,SAAgC,SAAA,CASJ;EAAqB,CAAA,OAAA;EAoBrD;;;;EAKO,WAAA,CAAA,KAAA,EAzBI,iBAyBJ,EAAA;IAAA;EAmC0B,CAAA,CAnC1B,EAAA;IAAmE,MAAA,CAAA,EAzBrB,iBAyBqB;EAmCzC,CAAA;EAAsB,OAAA,SAAA,CAAA,KAAA,EAxCvD,UAwCuD,EAAA;IAAA,MAAA;IAAA,OAAA;IAAA;EAiExC,CAAA,CAjEwC,EAAA;IA0BpC,MAAA,CAAA,EA7DZ,iBA6DY;IAyBF,OAAA,CAAA,EAAA,MAAA;IAAX,aAAA,CAAA,EAAA,OAAA;EAcS,CAAA,CAAA,EApG2D,uBAoG3D;EAAwB,OAAA,SAAA,CAAA,OAAA,EAAA,MAAA,EAAA,KAAA,EAjEN,sBAiEM,CAAA,EAjEgB,uBAiEhB;EAAsB;;;EAOO,MAAA,CAAA,SAAA,EA9CjD,uBA8CiD,CAAA,EAAA,OAAA;EAgB7C,eAAA,CAAA,CAAA,EAAA,MAAA;EAAuB;;;EA7JD,UAAA,CAAA,CAAA,EAwHvC,UAxHuC,CAwH5B,WAxH4B,CAAA;EAkLtC;;;;;;;mBA5CQ,wBAAwB,sBAAsB;;;;iCAOtC,uBAAuB,sBAAsB;;;;iCAgB7C,uBAAuB,sBAAsB;;;;;;iBAqB7D,yBAAA;WAGK;;IAClB"}

package/dist/zklogin/publickey.mjs

@@ -0,0 +1,173 @@
+import { HANEUL_ADDRESS_LENGTH, normalizeHaneulAddress } from "../utils/haneul-types.mjs";
+import { SIGNATURE_SCHEME_TO_FLAG } from "../cryptography/signature-scheme.mjs";
+import { PublicKey } from "../cryptography/publickey.mjs";
+import { normalizeZkLoginIssuer, toBigEndianBytes, toPaddedBigEndianBytes } from "./utils.mjs";
+import { extractClaimValue } from "./jwt-utils.mjs";
+import { parseZkLoginSignature } from "./signature.mjs";
+import { fromBase64, toBase64, toHex } from "@haneullabs/bcs";
+import { blake2b } from "@noble/hashes/blake2.js";
+import { bytesToHex } from "@noble/hashes/utils.js";
+
+//#region src/zklogin/publickey.ts
+/**
+* A zkLogin public identifier
+*/
+var ZkLoginPublicIdentifier = class ZkLoginPublicIdentifier extends PublicKey {
+	#data;
+	#client;
+	#legacyAddress;
+	/**
+	* Create a new ZkLoginPublicIdentifier object
+	* @param value zkLogin public identifier as buffer or base-64 encoded string
+	*/
+	constructor(value, { client } = {}) {
+		super();
+		this.#client = client;
+		if (typeof value === "string") this.#data = fromBase64(value);
+		else if (value instanceof Uint8Array) this.#data = value;
+		else this.#data = Uint8Array.from(value);
+		this.#legacyAddress = this.#data.length !== this.#data[0] + 1 + 32;
+		if (this.#legacyAddress) this.#data = normalizeZkLoginPublicKeyBytes(this.#data, false);
+	}
+	static fromBytes(bytes, { client, address, legacyAddress } = {}) {
+		let publicKey;
+		if (legacyAddress === true) publicKey = new ZkLoginPublicIdentifier(normalizeZkLoginPublicKeyBytes(bytes, true), { client });
+		else if (legacyAddress === false) publicKey = new ZkLoginPublicIdentifier(normalizeZkLoginPublicKeyBytes(bytes, false), { client });
+		else if (address) {
+			publicKey = new ZkLoginPublicIdentifier(normalizeZkLoginPublicKeyBytes(bytes, false), { client });
+			if (publicKey.toHaneulAddress() !== address) publicKey = new ZkLoginPublicIdentifier(normalizeZkLoginPublicKeyBytes(bytes, true), { client });
+		} else publicKey = new ZkLoginPublicIdentifier(bytes, { client });
+		if (address && publicKey.toHaneulAddress() !== address) throw new Error("Public key bytes do not match the provided address");
+		return publicKey;
+	}
+	static fromProof(address, proof) {
+		const { issBase64Details, addressSeed } = proof;
+		const iss = extractClaimValue(issBase64Details, "iss");
+		const legacyPublicKey = toZkLoginPublicIdentifier(BigInt(addressSeed), iss, { legacyAddress: true });
+		if (legacyPublicKey.toHaneulAddress() === address) return legacyPublicKey;
+		const publicKey = toZkLoginPublicIdentifier(BigInt(addressSeed), iss, { legacyAddress: false });
+		if (publicKey.toHaneulAddress() !== address) throw new Error("Proof does not match address");
+		return publicKey;
+	}
+	/**
+	* Checks if two zkLogin public identifiers are equal
+	*/
+	equals(publicKey) {
+		return super.equals(publicKey);
+	}
+	toHaneulAddress() {
+		if (this.#legacyAddress) return this.#toLegacyAddress();
+		return super.toHaneulAddress();
+	}
+	#toLegacyAddress() {
+		const legacyBytes = normalizeZkLoginPublicKeyBytes(this.#data, true);
+		const addressBytes = new Uint8Array(legacyBytes.length + 1);
+		addressBytes[0] = this.flag();
+		addressBytes.set(legacyBytes, 1);
+		return normalizeHaneulAddress(bytesToHex(blake2b(addressBytes, { dkLen: 32 })).slice(0, HANEUL_ADDRESS_LENGTH * 2));
+	}
+	/**
+	* Return the byte array representation of the zkLogin public identifier
+	*/
+	toRawBytes() {
+		return this.#data;
+	}
+	/**
+	* Return the Haneul address associated with this ZkLogin public identifier
+	*/
+	flag() {
+		return SIGNATURE_SCHEME_TO_FLAG["ZkLogin"];
+	}
+	/**
+	* Verifies that the signature is valid for for the provided message
+	*/
+	async verify(_message, _signature) {
+		throw Error("does not support");
+	}
+	/**
+	* Verifies that the signature is valid for for the provided PersonalMessage
+	*/
+	verifyPersonalMessage(message, signature) {
+		const parsedSignature = parseSerializedZkLoginSignature(signature);
+		return graphqlVerifyZkLoginSignature({
+			address: new ZkLoginPublicIdentifier(parsedSignature.publicKey).toHaneulAddress(),
+			bytes: toBase64(message),
+			signature: parsedSignature.serializedSignature,
+			intentScope: "PersonalMessage",
+			client: this.#client
+		});
+	}
+	/**
+	* Verifies that the signature is valid for for the provided Transaction
+	*/
+	verifyTransaction(transaction, signature) {
+		const parsedSignature = parseSerializedZkLoginSignature(signature);
+		return graphqlVerifyZkLoginSignature({
+			address: new ZkLoginPublicIdentifier(parsedSignature.publicKey).toHaneulAddress(),
+			bytes: toBase64(transaction),
+			signature: parsedSignature.serializedSignature,
+			intentScope: "TransactionData",
+			client: this.#client
+		});
+	}
+	/**
+	* Verifies that the public key is associated with the provided address
+	*/
+	verifyAddress(address) {
+		return address === super.toHaneulAddress() || address === this.#toLegacyAddress();
+	}
+};
+function toZkLoginPublicIdentifier(addressSeed, iss, options) {
+	if (options.legacyAddress === void 0) throw new Error("legacyAddress parameter must be specified");
+	const addressSeedBytesBigEndian = options.legacyAddress ? toBigEndianBytes(addressSeed, 32) : toPaddedBigEndianBytes(addressSeed, 32);
+	const issBytes = new TextEncoder().encode(normalizeZkLoginIssuer(iss));
+	const tmp = new Uint8Array(1 + issBytes.length + addressSeedBytesBigEndian.length);
+	tmp.set([issBytes.length], 0);
+	tmp.set(issBytes, 1);
+	tmp.set(addressSeedBytesBigEndian, 1 + issBytes.length);
+	return new ZkLoginPublicIdentifier(tmp, options);
+}
+function normalizeZkLoginPublicKeyBytes(bytes, legacyAddress) {
+	const issByteLength = bytes[0] + 1;
+	const addressSeed = BigInt(`0x${toHex(bytes.slice(issByteLength))}`);
+	const seedBytes = legacyAddress ? toBigEndianBytes(addressSeed, 32) : toPaddedBigEndianBytes(addressSeed, 32);
+	const data = new Uint8Array(issByteLength + seedBytes.length);
+	data.set(bytes.slice(0, issByteLength), 0);
+	data.set(seedBytes, issByteLength);
+	return data;
+}
+async function graphqlVerifyZkLoginSignature({ address, bytes, signature, intentScope, client }) {
+	if (!client) throw new Error("A Haneul Client (GRPC, GraphQL, or JSON RPC) is required to verify zkLogin signatures");
+	const resp = await client.core.verifyZkLoginSignature({
+		bytes,
+		signature,
+		intentScope,
+		address
+	});
+	return resp.success === true && resp.errors.length === 0;
+}
+function parseSerializedZkLoginSignature(signature) {
+	const bytes = typeof signature === "string" ? fromBase64(signature) : signature;
+	if (bytes[0] !== SIGNATURE_SCHEME_TO_FLAG.ZkLogin) throw new Error("Invalid signature scheme");
+	const { inputs, maxEpoch, userSignature } = parseZkLoginSignature(bytes.slice(1));
+	const { issBase64Details, addressSeed } = inputs;
+	const iss = extractClaimValue(issBase64Details, "iss");
+	const publicIdentifier = toZkLoginPublicIdentifier(BigInt(addressSeed), iss, { legacyAddress: false });
+	return {
+		serializedSignature: toBase64(bytes),
+		signatureScheme: "ZkLogin",
+		zkLogin: {
+			inputs,
+			maxEpoch,
+			userSignature,
+			iss,
+			addressSeed: BigInt(addressSeed)
+		},
+		signature: bytes,
+		publicKey: publicIdentifier.toRawBytes()
+	};
+}
+
+//#endregion
+export { ZkLoginPublicIdentifier, parseSerializedZkLoginSignature, toZkLoginPublicIdentifier };
+//# sourceMappingURL=publickey.mjs.map

package/dist/zklogin/publickey.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"publickey.mjs","names":["#client","#data","#legacyAddress","#toLegacyAddress"],"sources":["../../src/zklogin/publickey.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { fromBase64, toBase64, toHex } from '@haneullabs/bcs';\nimport { blake2b } from '@noble/hashes/blake2.js';\nimport { bytesToHex } from '@noble/hashes/utils.js';\n\nimport { PublicKey } from '../cryptography/publickey.js';\nimport type { PublicKeyInitData } from '../cryptography/publickey.js';\nimport { SIGNATURE_SCHEME_TO_FLAG } from '../cryptography/signature-scheme.js';\nimport { normalizeHaneulAddress, HANEUL_ADDRESS_LENGTH } from '../utils/haneul-types.js';\nimport type { ZkLoginSignatureInputs } from './bcs.js';\nimport { extractClaimValue } from './jwt-utils.js';\nimport { parseZkLoginSignature } from './signature.js';\nimport { normalizeZkLoginIssuer, toBigEndianBytes, toPaddedBigEndianBytes } from './utils.js';\nimport type { ClientWithCoreApi } from '../client/core.js';\n\n/**\n * A zkLogin public identifier\n */\nexport class ZkLoginPublicIdentifier extends PublicKey {\n\t#data: Uint8Array<ArrayBuffer>;\n\t#client?: ClientWithCoreApi;\n\t#legacyAddress: boolean;\n\n\t/**\n\t * Create a new ZkLoginPublicIdentifier object\n\t * @param value zkLogin public identifier as buffer or base-64 encoded string\n\t */\n\tconstructor(value: PublicKeyInitData, { client }: { client?: ClientWithCoreApi } = {}) {\n\t\tsuper();\n\n\t\tthis.#client = client;\n\n\t\tif (typeof value === 'string') {\n\t\t\tthis.#data = fromBase64(value);\n\t\t} else if (value instanceof Uint8Array) {\n\t\t\tthis.#data = value as Uint8Array<ArrayBuffer>;\n\t\t} else {\n\t\t\tthis.#data = Uint8Array.from(value);\n\t\t}\n\t\tthis.#legacyAddress = this.#data.length !== this.#data[0] + 1 + 32;\n\n\t\tif (this.#legacyAddress) {\n\t\t\tthis.#data = normalizeZkLoginPublicKeyBytes(this.#data, false);\n\t\t}\n\t}\n\n\tstatic fromBytes(\n\t\tbytes: Uint8Array,\n\t\t{\n\t\t\tclient,\n\t\t\taddress,\n\t\t\tlegacyAddress,\n\t\t}: { client?: ClientWithCoreApi; address?: string; legacyAddress?: boolean } = {},\n\t) {\n\t\tlet publicKey: ZkLoginPublicIdentifier;\n\n\t\tif (legacyAddress === true) {\n\t\t\tpublicKey = new ZkLoginPublicIdentifier(normalizeZkLoginPublicKeyBytes(bytes, true), {\n\t\t\t\tclient,\n\t\t\t});\n\t\t} else if (legacyAddress === false) {\n\t\t\tpublicKey = new ZkLoginPublicIdentifier(normalizeZkLoginPublicKeyBytes(bytes, false), {\n\t\t\t\tclient,\n\t\t\t});\n\t\t} else if (address) {\n\t\t\tpublicKey = new ZkLoginPublicIdentifier(normalizeZkLoginPublicKeyBytes(bytes, false), {\n\t\t\t\tclient,\n\t\t\t});\n\n\t\t\tif (publicKey.toHaneulAddress() !== address) {\n\t\t\t\tpublicKey = new ZkLoginPublicIdentifier(normalizeZkLoginPublicKeyBytes(bytes, true), {\n\t\t\t\t\tclient,\n\t\t\t\t});\n\t\t\t}\n\t\t} else {\n\t\t\tpublicKey = new ZkLoginPublicIdentifier(bytes, {\n\t\t\t\tclient,\n\t\t\t});\n\t\t}\n\n\t\tif (address && publicKey.toHaneulAddress() !== address) {\n\t\t\tthrow new Error('Public key bytes do not match the provided address');\n\t\t}\n\n\t\treturn publicKey;\n\t}\n\n\tstatic fromProof(address: string, proof: ZkLoginSignatureInputs) {\n\t\tconst { issBase64Details, addressSeed } = proof;\n\t\tconst iss = extractClaimValue<string>(issBase64Details, 'iss');\n\n\t\tconst legacyPublicKey = toZkLoginPublicIdentifier(BigInt(addressSeed), iss, {\n\t\t\tlegacyAddress: true,\n\t\t});\n\n\t\tif (legacyPublicKey.toHaneulAddress() === address) {\n\t\t\treturn legacyPublicKey;\n\t\t}\n\n\t\tconst publicKey = toZkLoginPublicIdentifier(BigInt(addressSeed), iss, {\n\t\t\tlegacyAddress: false,\n\t\t});\n\n\t\tif (publicKey.toHaneulAddress() !== address) {\n\t\t\tthrow new Error('Proof does not match address');\n\t\t}\n\n\t\treturn publicKey;\n\t}\n\n\t/**\n\t * Checks if two zkLogin public identifiers are equal\n\t */\n\toverride equals(publicKey: ZkLoginPublicIdentifier): boolean {\n\t\treturn super.equals(publicKey);\n\t}\n\n\toverride toHaneulAddress(): string {\n\t\tif (this.#legacyAddress) {\n\t\t\treturn this.#toLegacyAddress();\n\t\t}\n\n\t\treturn super.toHaneulAddress();\n\t}\n\n\t#toLegacyAddress() {\n\t\tconst legacyBytes = normalizeZkLoginPublicKeyBytes(this.#data, true);\n\t\tconst addressBytes = new Uint8Array(legacyBytes.length + 1);\n\t\taddressBytes[0] = this.flag();\n\t\taddressBytes.set(legacyBytes, 1);\n\t\treturn normalizeHaneulAddress(\n\t\t\tbytesToHex(blake2b(addressBytes, { dkLen: 32 })).slice(0, HANEUL_ADDRESS_LENGTH * 2),\n\t\t);\n\t}\n\n\t/**\n\t * Return the byte array representation of the zkLogin public identifier\n\t */\n\ttoRawBytes(): Uint8Array<ArrayBuffer> {\n\t\treturn this.#data;\n\t}\n\n\t/**\n\t * Return the Haneul address associated with this ZkLogin public identifier\n\t */\n\tflag(): number {\n\t\treturn SIGNATURE_SCHEME_TO_FLAG['ZkLogin'];\n\t}\n\n\t/**\n\t * Verifies that the signature is valid for for the provided message\n\t */\n\tasync verify(_message: Uint8Array, _signature: Uint8Array | string): Promise<boolean> {\n\t\tthrow Error('does not support');\n\t}\n\n\t/**\n\t * Verifies that the signature is valid for for the provided PersonalMessage\n\t */\n\tverifyPersonalMessage(message: Uint8Array, signature: Uint8Array | string): Promise<boolean> {\n\t\tconst parsedSignature = parseSerializedZkLoginSignature(signature);\n\t\tconst address = new ZkLoginPublicIdentifier(parsedSignature.publicKey).toHaneulAddress();\n\n\t\treturn graphqlVerifyZkLoginSignature({\n\t\t\taddress: address,\n\t\t\tbytes: toBase64(message),\n\t\t\tsignature: parsedSignature.serializedSignature,\n\t\t\tintentScope: 'PersonalMessage',\n\t\t\tclient: this.#client,\n\t\t});\n\t}\n\n\t/**\n\t * Verifies that the signature is valid for for the provided Transaction\n\t */\n\tverifyTransaction(transaction: Uint8Array, signature: Uint8Array | string): Promise<boolean> {\n\t\tconst parsedSignature = parseSerializedZkLoginSignature(signature);\n\t\tconst address = new ZkLoginPublicIdentifier(parsedSignature.publicKey).toHaneulAddress();\n\t\treturn graphqlVerifyZkLoginSignature({\n\t\t\taddress: address,\n\t\t\tbytes: toBase64(transaction),\n\t\t\tsignature: parsedSignature.serializedSignature,\n\t\t\tintentScope: 'TransactionData',\n\t\t\tclient: this.#client,\n\t\t});\n\t}\n\n\t/**\n\t * Verifies that the public key is associated with the provided address\n\t */\n\toverride verifyAddress(address: string): boolean {\n\t\treturn address === super.toHaneulAddress() || address === this.#toLegacyAddress();\n\t}\n}\n\n// Derive the public identifier for zklogin based on address seed and iss.\nexport function toZkLoginPublicIdentifier(\n\taddressSeed: bigint,\n\tiss: string,\n\toptions: { client?: ClientWithCoreApi; legacyAddress: boolean },\n): ZkLoginPublicIdentifier {\n\tif (options.legacyAddress === undefined) {\n\t\tthrow new Error('legacyAddress parameter must be specified');\n\t}\n\t// Consists of iss_bytes_len || iss_bytes || padded_32_byte_address_seed.\n\tconst addressSeedBytesBigEndian = options.legacyAddress\n\t\t? toBigEndianBytes(addressSeed, 32)\n\t\t: toPaddedBigEndianBytes(addressSeed, 32);\n\n\tconst issBytes = new TextEncoder().encode(normalizeZkLoginIssuer(iss));\n\tconst tmp = new Uint8Array(1 + issBytes.length + addressSeedBytesBigEndian.length);\n\ttmp.set([issBytes.length], 0);\n\ttmp.set(issBytes, 1);\n\ttmp.set(addressSeedBytesBigEndian, 1 + issBytes.length);\n\treturn new ZkLoginPublicIdentifier(tmp, options);\n}\n\nfunction normalizeZkLoginPublicKeyBytes(bytes: Uint8Array, legacyAddress: boolean) {\n\tconst issByteLength = bytes[0] + 1;\n\tconst addressSeed = BigInt(`0x${toHex(bytes.slice(issByteLength))}`);\n\tconst seedBytes = legacyAddress\n\t\t? toBigEndianBytes(addressSeed, 32)\n\t\t: toPaddedBigEndianBytes(addressSeed, 32);\n\tconst data = new Uint8Array(issByteLength + seedBytes.length);\n\tdata.set(bytes.slice(0, issByteLength), 0);\n\tdata.set(seedBytes, issByteLength);\n\treturn data;\n}\n\nasync function graphqlVerifyZkLoginSignature({\n\taddress,\n\tbytes,\n\tsignature,\n\tintentScope,\n\tclient,\n}: {\n\taddress: string;\n\tbytes: string;\n\tsignature: string;\n\tintentScope: 'PersonalMessage' | 'TransactionData';\n\tclient?: ClientWithCoreApi;\n}) {\n\tif (!client) {\n\t\tthrow new Error(\n\t\t\t'A Haneul Client (GRPC, GraphQL, or JSON RPC) is required to verify zkLogin signatures',\n\t\t);\n\t}\n\tconst resp = await client.core.verifyZkLoginSignature({\n\t\tbytes,\n\t\tsignature,\n\t\tintentScope,\n\t\taddress: address,\n\t});\n\n\treturn resp.success === true && resp.errors.length === 0;\n}\n\nexport function parseSerializedZkLoginSignature(signature: Uint8Array | string) {\n\tconst bytes = typeof signature === 'string' ? fromBase64(signature) : signature;\n\n\tif (bytes[0] !== SIGNATURE_SCHEME_TO_FLAG.ZkLogin) {\n\t\tthrow new Error('Invalid signature scheme');\n\t}\n\n\tconst signatureBytes = bytes.slice(1);\n\tconst { inputs, maxEpoch, userSignature } = parseZkLoginSignature(signatureBytes);\n\tconst { issBase64Details, addressSeed } = inputs;\n\tconst iss = extractClaimValue<string>(issBase64Details, 'iss');\n\tconst publicIdentifier = toZkLoginPublicIdentifier(BigInt(addressSeed), iss, {\n\t\tlegacyAddress: false,\n\t});\n\treturn {\n\t\tserializedSignature: toBase64(bytes),\n\t\tsignatureScheme: 'ZkLogin' as const,\n\t\tzkLogin: {\n\t\t\tinputs,\n\t\t\tmaxEpoch,\n\t\t\tuserSignature,\n\t\t\tiss,\n\t\t\taddressSeed: BigInt(addressSeed),\n\t\t},\n\t\tsignature: bytes,\n\t\tpublicKey: publicIdentifier.toRawBytes(),\n\t};\n}\n"],"mappings":";;;;;;;;;;;;;;AAoBA,IAAa,0BAAb,MAAa,gCAAgC,UAAU;CACtD;CACA;CACA;;;;;CAMA,YAAY,OAA0B,EAAE,WAA2C,EAAE,EAAE;AACtF,SAAO;AAEP,QAAKA,SAAU;AAEf,MAAI,OAAO,UAAU,SACpB,OAAKC,OAAQ,WAAW,MAAM;WACpB,iBAAiB,WAC3B,OAAKA,OAAQ;MAEb,OAAKA,OAAQ,WAAW,KAAK,MAAM;AAEpC,QAAKC,gBAAiB,MAAKD,KAAM,WAAW,MAAKA,KAAM,KAAK,IAAI;AAEhE,MAAI,MAAKC,cACR,OAAKD,OAAQ,+BAA+B,MAAKA,MAAO,MAAM;;CAIhE,OAAO,UACN,OACA,EACC,QACA,SACA,kBAC8E,EAAE,EAChF;EACD,IAAI;AAEJ,MAAI,kBAAkB,KACrB,aAAY,IAAI,wBAAwB,+BAA+B,OAAO,KAAK,EAAE,EACpF,QACA,CAAC;WACQ,kBAAkB,MAC5B,aAAY,IAAI,wBAAwB,+BAA+B,OAAO,MAAM,EAAE,EACrF,QACA,CAAC;WACQ,SAAS;AACnB,eAAY,IAAI,wBAAwB,+BAA+B,OAAO,MAAM,EAAE,EACrF,QACA,CAAC;AAEF,OAAI,UAAU,iBAAiB,KAAK,QACnC,aAAY,IAAI,wBAAwB,+BAA+B,OAAO,KAAK,EAAE,EACpF,QACA,CAAC;QAGH,aAAY,IAAI,wBAAwB,OAAO,EAC9C,QACA,CAAC;AAGH,MAAI,WAAW,UAAU,iBAAiB,KAAK,QAC9C,OAAM,IAAI,MAAM,qDAAqD;AAGtE,SAAO;;CAGR,OAAO,UAAU,SAAiB,OAA+B;EAChE,MAAM,EAAE,kBAAkB,gBAAgB;EAC1C,MAAM,MAAM,kBAA0B,kBAAkB,MAAM;EAE9D,MAAM,kBAAkB,0BAA0B,OAAO,YAAY,EAAE,KAAK,EAC3E,eAAe,MACf,CAAC;AAEF,MAAI,gBAAgB,iBAAiB,KAAK,QACzC,QAAO;EAGR,MAAM,YAAY,0BAA0B,OAAO,YAAY,EAAE,KAAK,EACrE,eAAe,OACf,CAAC;AAEF,MAAI,UAAU,iBAAiB,KAAK,QACnC,OAAM,IAAI,MAAM,+BAA+B;AAGhD,SAAO;;;;;CAMR,AAAS,OAAO,WAA6C;AAC5D,SAAO,MAAM,OAAO,UAAU;;CAG/B,AAAS,kBAA0B;AAClC,MAAI,MAAKC,cACR,QAAO,MAAKC,iBAAkB;AAG/B,SAAO,MAAM,iBAAiB;;CAG/B,mBAAmB;EAClB,MAAM,cAAc,+BAA+B,MAAKF,MAAO,KAAK;EACpE,MAAM,eAAe,IAAI,WAAW,YAAY,SAAS,EAAE;AAC3D,eAAa,KAAK,KAAK,MAAM;AAC7B,eAAa,IAAI,aAAa,EAAE;AAChC,SAAO,uBACN,WAAW,QAAQ,cAAc,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,wBAAwB,EAAE,CACpF;;;;;CAMF,aAAsC;AACrC,SAAO,MAAKA;;;;;CAMb,OAAe;AACd,SAAO,yBAAyB;;;;;CAMjC,MAAM,OAAO,UAAsB,YAAmD;AACrF,QAAM,MAAM,mBAAmB;;;;;CAMhC,sBAAsB,SAAqB,WAAkD;EAC5F,MAAM,kBAAkB,gCAAgC,UAAU;AAGlE,SAAO,8BAA8B;GACpC,SAHe,IAAI,wBAAwB,gBAAgB,UAAU,CAAC,iBAAiB;GAIvF,OAAO,SAAS,QAAQ;GACxB,WAAW,gBAAgB;GAC3B,aAAa;GACb,QAAQ,MAAKD;GACb,CAAC;;;;;CAMH,kBAAkB,aAAyB,WAAkD;EAC5F,MAAM,kBAAkB,gCAAgC,UAAU;AAElE,SAAO,8BAA8B;GACpC,SAFe,IAAI,wBAAwB,gBAAgB,UAAU,CAAC,iBAAiB;GAGvF,OAAO,SAAS,YAAY;GAC5B,WAAW,gBAAgB;GAC3B,aAAa;GACb,QAAQ,MAAKA;GACb,CAAC;;;;;CAMH,AAAS,cAAc,SAA0B;AAChD,SAAO,YAAY,MAAM,iBAAiB,IAAI,YAAY,MAAKG,iBAAkB;;;AAKnF,SAAgB,0BACf,aACA,KACA,SAC0B;AAC1B,KAAI,QAAQ,kBAAkB,OAC7B,OAAM,IAAI,MAAM,4CAA4C;CAG7D,MAAM,4BAA4B,QAAQ,gBACvC,iBAAiB,aAAa,GAAG,GACjC,uBAAuB,aAAa,GAAG;CAE1C,MAAM,WAAW,IAAI,aAAa,CAAC,OAAO,uBAAuB,IAAI,CAAC;CACtE,MAAM,MAAM,IAAI,WAAW,IAAI,SAAS,SAAS,0BAA0B,OAAO;AAClF,KAAI,IAAI,CAAC,SAAS,OAAO,EAAE,EAAE;AAC7B,KAAI,IAAI,UAAU,EAAE;AACpB,KAAI,IAAI,2BAA2B,IAAI,SAAS,OAAO;AACvD,QAAO,IAAI,wBAAwB,KAAK,QAAQ;;AAGjD,SAAS,+BAA+B,OAAmB,eAAwB;CAClF,MAAM,gBAAgB,MAAM,KAAK;CACjC,MAAM,cAAc,OAAO,KAAK,MAAM,MAAM,MAAM,cAAc,CAAC,GAAG;CACpE,MAAM,YAAY,gBACf,iBAAiB,aAAa,GAAG,GACjC,uBAAuB,aAAa,GAAG;CAC1C,MAAM,OAAO,IAAI,WAAW,gBAAgB,UAAU,OAAO;AAC7D,MAAK,IAAI,MAAM,MAAM,GAAG,cAAc,EAAE,EAAE;AAC1C,MAAK,IAAI,WAAW,cAAc;AAClC,QAAO;;AAGR,eAAe,8BAA8B,EAC5C,SACA,OACA,WACA,aACA,UAOE;AACF,KAAI,CAAC,OACJ,OAAM,IAAI,MACT,wFACA;CAEF,MAAM,OAAO,MAAM,OAAO,KAAK,uBAAuB;EACrD;EACA;EACA;EACS;EACT,CAAC;AAEF,QAAO,KAAK,YAAY,QAAQ,KAAK,OAAO,WAAW;;AAGxD,SAAgB,gCAAgC,WAAgC;CAC/E,MAAM,QAAQ,OAAO,cAAc,WAAW,WAAW,UAAU,GAAG;AAEtE,KAAI,MAAM,OAAO,yBAAyB,QACzC,OAAM,IAAI,MAAM,2BAA2B;CAI5C,MAAM,EAAE,QAAQ,UAAU,kBAAkB,sBADrB,MAAM,MAAM,EAAE,CAC4C;CACjF,MAAM,EAAE,kBAAkB,gBAAgB;CAC1C,MAAM,MAAM,kBAA0B,kBAAkB,MAAM;CAC9D,MAAM,mBAAmB,0BAA0B,OAAO,YAAY,EAAE,KAAK,EAC5E,eAAe,OACf,CAAC;AACF,QAAO;EACN,qBAAqB,SAAS,MAAM;EACpC,iBAAiB;EACjB,SAAS;GACR;GACA;GACA;GACA;GACA,aAAa,OAAO,YAAY;GAChC;EACD,WAAW;EACX,WAAW,iBAAiB,YAAY;EACxC"}

package/dist/zklogin/signature.d.mts

@@ -0,0 +1,31 @@
+import { ZkLoginSignature } from "./bcs.mjs";
+
+//#region src/zklogin/signature.d.ts
+interface ZkLoginSignatureExtended extends Omit<ZkLoginSignature, 'userSignature'> {
+  userSignature: string | ZkLoginSignature['userSignature'];
+}
+declare function getZkLoginSignature({
+  inputs,
+  maxEpoch,
+  userSignature
+}: ZkLoginSignatureExtended): string;
+declare function parseZkLoginSignature(signature: string | Uint8Array): {
+  inputs: {
+    proofPoints: {
+      a: string[];
+      b: string[][];
+      c: string[];
+    };
+    issBase64Details: {
+      value: string;
+      indexMod4: number;
+    };
+    headerBase64: string;
+    addressSeed: string;
+  };
+  maxEpoch: string;
+  userSignature: Uint8Array<ArrayBufferLike>;
+};
+//#endregion
+export { getZkLoginSignature, parseZkLoginSignature };
+//# sourceMappingURL=signature.d.mts.map

package/dist/zklogin/signature.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.d.mts","names":[],"sources":["../../src/zklogin/signature.ts"],"sourcesContent":[],"mappings":";;;UASU,wBAAA,SAAiC,KAAK;0BACvB;AAJwB;AAGD,iBAkBhC,mBAAA,CAlBgC;EAAA,MAAA;EAAA,QAAA;EAAA;AAAA,CAAA,EAkByB,wBAlBzB,CAAA,EAAA,MAAA;AACvB,iBAyBT,qBAAA,CAzBS,SAAA,EAAA,MAAA,GAyBiC,UAzBjC,CAAA,EAAA;EADkB,MAAA,EAAA;IAAI,WAAA,EAAA;MAkB/B,CAAA,EAAA,MAAA,EAAA;MAAsB,CAAA,EAAA,MAAA,EAAA,EAAA;MAAQ,CAAA,EAAA,MAAA,EAAA;IAAU,CAAA;IAAiB,gBAAA,EAAA;MAAwB,KAAA,EAAA,MAAA;MAQjF,SAAA,EAAA,MAAqB;IAAqB,CAAA"}

package/dist/zklogin/signature.mjs

@@ -0,0 +1,30 @@
+import { SIGNATURE_SCHEME_TO_FLAG } from "../cryptography/signature-scheme.mjs";
+import { zkLoginSignature } from "./bcs.mjs";
+import { fromBase64, toBase64 } from "@haneullabs/bcs";
+
+//#region src/zklogin/signature.ts
+function getZkLoginSignatureBytes({ inputs, maxEpoch, userSignature }) {
+	return zkLoginSignature.serialize({
+		inputs,
+		maxEpoch,
+		userSignature: typeof userSignature === "string" ? fromBase64(userSignature) : userSignature
+	}, { maxSize: 2048 }).toBytes();
+}
+function getZkLoginSignature({ inputs, maxEpoch, userSignature }) {
+	const bytes = getZkLoginSignatureBytes({
+		inputs,
+		maxEpoch,
+		userSignature
+	});
+	const signatureBytes = new Uint8Array(bytes.length + 1);
+	signatureBytes.set([SIGNATURE_SCHEME_TO_FLAG.ZkLogin]);
+	signatureBytes.set(bytes, 1);
+	return toBase64(signatureBytes);
+}
+function parseZkLoginSignature(signature) {
+	return zkLoginSignature.parse(typeof signature === "string" ? fromBase64(signature) : signature);
+}
+
+//#endregion
+export { getZkLoginSignature, parseZkLoginSignature };
+//# sourceMappingURL=signature.mjs.map

package/dist/zklogin/signature.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"signature.mjs","names":[],"sources":["../../src/zklogin/signature.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { fromBase64, toBase64 } from '@haneullabs/bcs';\n\nimport { SIGNATURE_SCHEME_TO_FLAG } from '../cryptography/signature-scheme.js';\nimport type { ZkLoginSignature } from './bcs.js';\nimport { zkLoginSignature } from './bcs.js';\n\ninterface ZkLoginSignatureExtended extends Omit<ZkLoginSignature, 'userSignature'> {\n\tuserSignature: string | ZkLoginSignature['userSignature'];\n}\n\nfunction getZkLoginSignatureBytes({ inputs, maxEpoch, userSignature }: ZkLoginSignatureExtended) {\n\treturn zkLoginSignature\n\t\t.serialize(\n\t\t\t{\n\t\t\t\tinputs,\n\t\t\t\tmaxEpoch,\n\t\t\t\tuserSignature:\n\t\t\t\t\ttypeof userSignature === 'string' ? fromBase64(userSignature) : userSignature,\n\t\t\t},\n\t\t\t{ maxSize: 2048 },\n\t\t)\n\t\t.toBytes();\n}\n\nexport function getZkLoginSignature({ inputs, maxEpoch, userSignature }: ZkLoginSignatureExtended) {\n\tconst bytes = getZkLoginSignatureBytes({ inputs, maxEpoch, userSignature });\n\tconst signatureBytes = new Uint8Array(bytes.length + 1);\n\tsignatureBytes.set([SIGNATURE_SCHEME_TO_FLAG.ZkLogin]);\n\tsignatureBytes.set(bytes, 1);\n\treturn toBase64(signatureBytes);\n}\n\nexport function parseZkLoginSignature(signature: string | Uint8Array) {\n\treturn zkLoginSignature.parse(typeof signature === 'string' ? fromBase64(signature) : signature);\n}\n"],"mappings":";;;;;AAaA,SAAS,yBAAyB,EAAE,QAAQ,UAAU,iBAA2C;AAChG,QAAO,iBACL,UACA;EACC;EACA;EACA,eACC,OAAO,kBAAkB,WAAW,WAAW,cAAc,GAAG;EACjE,EACD,EAAE,SAAS,MAAM,CACjB,CACA,SAAS;;AAGZ,SAAgB,oBAAoB,EAAE,QAAQ,UAAU,iBAA2C;CAClG,MAAM,QAAQ,yBAAyB;EAAE;EAAQ;EAAU;EAAe,CAAC;CAC3E,MAAM,iBAAiB,IAAI,WAAW,MAAM,SAAS,EAAE;AACvD,gBAAe,IAAI,CAAC,yBAAyB,QAAQ,CAAC;AACtD,gBAAe,IAAI,OAAO,EAAE;AAC5B,QAAO,SAAS,eAAe;;AAGhC,SAAgB,sBAAsB,WAAgC;AACrE,QAAO,iBAAiB,MAAM,OAAO,cAAc,WAAW,WAAW,UAAU,GAAG,UAAU"}

package/dist/zklogin/utils.d.mts

@@ -0,0 +1,11 @@
+import { PublicKey } from "../cryptography/publickey.mjs";
+
+//#region src/zklogin/utils.d.ts
+declare function toPaddedBigEndianBytes(num: bigint, width: number): Uint8Array;
+declare function toBigEndianBytes(num: bigint, width: number): Uint8Array;
+declare function getExtendedEphemeralPublicKey(publicKey: PublicKey): string;
+declare function hashASCIIStrToField(str: string, maxSize: number): bigint;
+declare function genAddressSeed(salt: string | bigint, name: string, value: string, aud: string, max_name_length?: number, max_value_length?: number, max_aud_length?: number): bigint;
+//#endregion
+export { genAddressSeed, getExtendedEphemeralPublicKey, hashASCIIStrToField, toBigEndianBytes, toPaddedBigEndianBytes };
+//# sourceMappingURL=utils.d.mts.map

package/dist/zklogin/utils.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.mts","names":[],"sources":["../../src/zklogin/utils.ts"],"sourcesContent":[],"mappings":";;;iBAwBgB,sBAAA,8BAAoD;iBAMpD,gBAAA,8BAA8C;AAN9C,iBAkBA,6BAAA,CAlB8D,SAAA,EAkBrB,SAlBqB,CAAA,EAAA,MAAA;iBAgD9D,mBAAA;iBAiBA,cAAA"}