@haneullabs/haneul 2.5.1 → 2.13.0

package/dist/keypairs/ed25519/keypair.mjs

@@ -1,11 +1,12 @@
 import { isValidHardenedPath, mnemonicToSeedHex } from "../../cryptography/mnemonics.mjs";
-import { Keypair, PRIVATE_KEY_SIZE, decodeSuiPrivateKey, encodeSuiPrivateKey } from "../../cryptography/keypair.mjs";
+import { Keypair, PRIVATE_KEY_SIZE, decodeHaneulPrivateKey, encodeHaneulPrivateKey } from "../../cryptography/keypair.mjs";
 import { derivePath } from "./ed25519-hd-key.mjs";
 import { Ed25519PublicKey } from "./publickey.mjs";
+import { toHex } from "@haneullabs/bcs";
 import { ed25519 } from "@noble/curves/ed25519.js";
 
 //#region src/keypairs/ed25519/keypair.ts
-const DEFAULT_ED25519_DERIVATION_PATH = "m/44'/784'/0'/0'/0'";
+const DEFAULT_ED25519_DERIVATION_PATH = "m/44'/8282'/0'/0'/0'";
 /**
 * An Ed25519 Keypair used for signing transactions.
 */
@@ -58,7 +59,7 @@ var Ed25519Keypair = class Ed25519Keypair extends Keypair {
 	*/
 	static fromSecretKey(secretKey, options) {
 		if (typeof secretKey === "string") {
-			const decoded = decodeSuiPrivateKey(secretKey);
+			const decoded = decodeHaneulPrivateKey(secretKey);
 			if (decoded.scheme !== "ED25519") throw new Error(`Expected a ED25519 keypair, got ${decoded.scheme}`);
 			return this.fromSecretKey(decoded.secretKey, options);
 		}
@@ -85,7 +86,7 @@ var Ed25519Keypair = class Ed25519Keypair extends Keypair {
 	* The Bech32 secret key string for this Ed25519 keypair
 	*/
 	getSecretKey() {
-		return encodeSuiPrivateKey(this.keypair.secretKey.slice(0, PRIVATE_KEY_SIZE), this.getKeyScheme());
+		return encodeHaneulPrivateKey(this.keypair.secretKey.slice(0, PRIVATE_KEY_SIZE), this.getKeyScheme());
 	}
 	/**
 	* Return the signature for the provided data using Ed25519.
@@ -97,8 +98,8 @@ var Ed25519Keypair = class Ed25519Keypair extends Keypair {
 	* Derive Ed25519 keypair from mnemonics and path. The mnemonics must be normalized
 	* and validated against the english wordlist.
 	*
-	* If path is none, it will default to m/44'/784'/0'/0'/0', otherwise the path must
-	* be compliant to SLIP-0010 in form m/44'/784'/{account_index}'/{change_index}'/{address_index}'.
+	* If path is none, it will default to m/44'/8282'/0'/0'/0', otherwise the path must
+	* be compliant to SLIP-0010 in form m/44'/8282'/{account_index}'/{change_index}'/{address_index}'.
 	*/
 	static deriveKeypair(mnemonics, path) {
 		if (path == null) path = DEFAULT_ED25519_DERIVATION_PATH;
@@ -109,12 +110,15 @@ var Ed25519Keypair = class Ed25519Keypair extends Keypair {
 	/**
 	* Derive Ed25519 keypair from mnemonicSeed and path.
 	*
-	* If path is none, it will default to m/44'/784'/0'/0'/0', otherwise the path must
-	* be compliant to SLIP-0010 in form m/44'/784'/{account_index}'/{change_index}'/{address_index}'.
+	* If path is none, it will default to m/44'/8282'/0'/0'/0', otherwise the path must
+	* be compliant to SLIP-0010 in form m/44'/8282'/{account_index}'/{change_index}'/{address_index}'.
+	*
+	* @param seed - The seed as a hex string or Uint8Array.
 	*/
-	static deriveKeypairFromSeed(seedHex, path) {
+	static deriveKeypairFromSeed(seed, path) {
 		if (path == null) path = DEFAULT_ED25519_DERIVATION_PATH;
 		if (!isValidHardenedPath(path)) throw new Error("Invalid derivation path");
+		const seedHex = typeof seed === "string" ? seed : toHex(seed);
 		const { key } = derivePath(path, seedHex);
 		return Ed25519Keypair.fromSecretKey(key);
 	}

package/dist/keypairs/ed25519/keypair.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"keypair.mjs","names":[],"sources":["../../../src/keypairs/ed25519/keypair.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { ed25519 } from '@noble/curves/ed25519.js';\n\nimport {\n\tdecodeSuiPrivateKey,\n\tencodeSuiPrivateKey,\n\tKeypair,\n\tPRIVATE_KEY_SIZE,\n} from '../../cryptography/keypair.js';\nimport { isValidHardenedPath, mnemonicToSeedHex } from '../../cryptography/mnemonics.js';\nimport type { SignatureScheme } from '../../cryptography/signature-scheme.js';\nimport { derivePath } from './ed25519-hd-key.js';\nimport { Ed25519PublicKey } from './publickey.js';\n\nexport const DEFAULT_ED25519_DERIVATION_PATH = \"m/44'/784'/0'/0'/0'\";\n\n/**\n * Ed25519 Keypair data. The publickey is the 32-byte public key and\n * the secretkey is 64-byte, where the first 32 bytes is the secret\n * key and the last 32 bytes is the public key.\n */\nexport interface Ed25519KeypairData {\n\tpublicKey: Uint8Array;\n\tsecretKey: Uint8Array;\n}\n\n/**\n * An Ed25519 Keypair used for signing transactions.\n */\nexport class Ed25519Keypair extends Keypair {\n\tprivate keypair: Ed25519KeypairData;\n\n\t/**\n\t * Create a new Ed25519 keypair instance.\n\t * Generate random keypair if no {@link Ed25519Keypair} is provided.\n\t *\n\t * @param keypair Ed25519 keypair\n\t */\n\tconstructor(keypair?: Ed25519KeypairData) {\n\t\tsuper();\n\t\tif (keypair) {\n\t\t\tthis.keypair = {\n\t\t\t\tpublicKey: keypair.publicKey,\n\t\t\t\tsecretKey: keypair.secretKey.slice(0, 32),\n\t\t\t};\n\t\t} else {\n\t\t\tconst privateKey = ed25519.utils.randomSecretKey();\n\t\t\tthis.keypair = {\n\t\t\t\tpublicKey: ed25519.getPublicKey(privateKey),\n\t\t\t\tsecretKey: privateKey,\n\t\t\t};\n\t\t}\n\t}\n\n\t/**\n\t * Get the key scheme of the keypair ED25519\n\t */\n\tgetKeyScheme(): SignatureScheme {\n\t\treturn 'ED25519';\n\t}\n\n\t/**\n\t * Generate a new random Ed25519 keypair\n\t */\n\tstatic generate(): Ed25519Keypair {\n\t\tconst secretKey = ed25519.utils.randomSecretKey();\n\t\treturn new Ed25519Keypair({\n\t\t\tpublicKey: ed25519.getPublicKey(secretKey),\n\t\t\tsecretKey,\n\t\t});\n\t}\n\n\t/**\n\t * Create a Ed25519 keypair from a raw secret key byte array, also known as seed.\n\t * This is NOT the private scalar which is result of hashing and bit clamping of\n\t * the raw secret key.\n\t *\n\t * @throws error if the provided secret key is invalid and validation is not skipped.\n\t *\n\t * @param secretKey secret key as a byte array or Bech32 secret key string\n\t * @param options: skip secret key validation\n\t */\n\tstatic fromSecretKey(\n\t\tsecretKey: Uint8Array | string,\n\t\toptions?: { skipValidation?: boolean },\n\t): Ed25519Keypair {\n\t\tif (typeof secretKey === 'string') {\n\t\t\tconst decoded = decodeSuiPrivateKey(secretKey);\n\n\t\t\tif (decoded.scheme !== 'ED25519') {\n\t\t\t\tthrow new Error(`Expected a ED25519 keypair, got ${decoded.scheme}`);\n\t\t\t}\n\n\t\t\treturn this.fromSecretKey(decoded.secretKey, options);\n\t\t}\n\n\t\tconst secretKeyLength = secretKey.length;\n\t\tif (secretKeyLength !== PRIVATE_KEY_SIZE) {\n\t\t\tthrow new Error(\n\t\t\t\t`Wrong secretKey size. Expected ${PRIVATE_KEY_SIZE} bytes, got ${secretKeyLength}.`,\n\t\t\t);\n\t\t}\n\t\tconst keypair = {\n\t\t\tpublicKey: ed25519.getPublicKey(secretKey),\n\t\t\tsecretKey,\n\t\t};\n\n\t\tif (!options || !options.skipValidation) {\n\t\t\tconst encoder = new TextEncoder();\n\t\t\tconst signData = encoder.encode('haneul validation');\n\t\t\tconst signature = ed25519.sign(signData, secretKey);\n\t\t\tif (!ed25519.verify(signature, signData, keypair.publicKey)) {\n\t\t\t\tthrow new Error('provided secretKey is invalid');\n\t\t\t}\n\t\t}\n\t\treturn new Ed25519Keypair(keypair);\n\t}\n\n\t/**\n\t * The public key for this Ed25519 keypair\n\t */\n\tgetPublicKey(): Ed25519PublicKey {\n\t\treturn new Ed25519PublicKey(this.keypair.publicKey);\n\t}\n\n\t/**\n\t * The Bech32 secret key string for this Ed25519 keypair\n\t */\n\tgetSecretKey(): string {\n\t\treturn encodeSuiPrivateKey(\n\t\t\tthis.keypair.secretKey.slice(0, PRIVATE_KEY_SIZE),\n\t\t\tthis.getKeyScheme(),\n\t\t);\n\t}\n\n\t/**\n\t * Return the signature for the provided data using Ed25519.\n\t */\n\tasync sign(data: Uint8Array) {\n\t\treturn ed25519.sign(data, this.keypair.secretKey) as Uint8Array<ArrayBuffer>;\n\t}\n\n\t/**\n\t * Derive Ed25519 keypair from mnemonics and path. The mnemonics must be normalized\n\t * and validated against the english wordlist.\n\t *\n\t * If path is none, it will default to m/44'/784'/0'/0'/0', otherwise the path must\n\t * be compliant to SLIP-0010 in form m/44'/784'/{account_index}'/{change_index}'/{address_index}'.\n\t */\n\tstatic deriveKeypair(mnemonics: string, path?: string): Ed25519Keypair {\n\t\tif (path == null) {\n\t\t\tpath = DEFAULT_ED25519_DERIVATION_PATH;\n\t\t}\n\t\tif (!isValidHardenedPath(path)) {\n\t\t\tthrow new Error('Invalid derivation path');\n\t\t}\n\t\tconst { key } = derivePath(path, mnemonicToSeedHex(mnemonics));\n\n\t\treturn Ed25519Keypair.fromSecretKey(key);\n\t}\n\n\t/**\n\t * Derive Ed25519 keypair from mnemonicSeed and path.\n\t *\n\t * If path is none, it will default to m/44'/784'/0'/0'/0', otherwise the path must\n\t * be compliant to SLIP-0010 in form m/44'/784'/{account_index}'/{change_index}'/{address_index}'.\n\t */\n\tstatic deriveKeypairFromSeed(seedHex: string, path?: string): Ed25519Keypair {\n\t\tif (path == null) {\n\t\t\tpath = DEFAULT_ED25519_DERIVATION_PATH;\n\t\t}\n\t\tif (!isValidHardenedPath(path)) {\n\t\t\tthrow new Error('Invalid derivation path');\n\t\t}\n\t\tconst { key } = derivePath(path, seedHex);\n\n\t\treturn Ed25519Keypair.fromSecretKey(key);\n\t}\n}\n"],"mappings":";;;;;;;AAgBA,MAAa,kCAAkC;;;;AAe/C,IAAa,iBAAb,MAAa,uBAAuB,QAAQ;;;;;;;CAS3C,YAAY,SAA8B;AACzC,SAAO;AACP,MAAI,QACH,MAAK,UAAU;GACd,WAAW,QAAQ;GACnB,WAAW,QAAQ,UAAU,MAAM,GAAG,GAAG;GACzC;OACK;GACN,MAAM,aAAa,QAAQ,MAAM,iBAAiB;AAClD,QAAK,UAAU;IACd,WAAW,QAAQ,aAAa,WAAW;IAC3C,WAAW;IACX;;;;;;CAOH,eAAgC;AAC/B,SAAO;;;;;CAMR,OAAO,WAA2B;EACjC,MAAM,YAAY,QAAQ,MAAM,iBAAiB;AACjD,SAAO,IAAI,eAAe;GACzB,WAAW,QAAQ,aAAa,UAAU;GAC1C;GACA,CAAC;;;;;;;;;;;;CAaH,OAAO,cACN,WACA,SACiB;AACjB,MAAI,OAAO,cAAc,UAAU;GAClC,MAAM,UAAU,oBAAoB,UAAU;AAE9C,OAAI,QAAQ,WAAW,UACtB,OAAM,IAAI,MAAM,mCAAmC,QAAQ,SAAS;AAGrE,UAAO,KAAK,cAAc,QAAQ,WAAW,QAAQ;;EAGtD,MAAM,kBAAkB,UAAU;AAClC,MAAI,oBAAoB,iBACvB,OAAM,IAAI,MACT,kCAAkC,iBAAiB,cAAc,gBAAgB,GACjF;EAEF,MAAM,UAAU;GACf,WAAW,QAAQ,aAAa,UAAU;GAC1C;GACA;AAED,MAAI,CAAC,WAAW,CAAC,QAAQ,gBAAgB;GAExC,MAAM,WADU,IAAI,aAAa,CACR,OAAO,oBAAoB;GACpD,MAAM,YAAY,QAAQ,KAAK,UAAU,UAAU;AACnD,OAAI,CAAC,QAAQ,OAAO,WAAW,UAAU,QAAQ,UAAU,CAC1D,OAAM,IAAI,MAAM,gCAAgC;;AAGlD,SAAO,IAAI,eAAe,QAAQ;;;;;CAMnC,eAAiC;AAChC,SAAO,IAAI,iBAAiB,KAAK,QAAQ,UAAU;;;;;CAMpD,eAAuB;AACtB,SAAO,oBACN,KAAK,QAAQ,UAAU,MAAM,GAAG,iBAAiB,EACjD,KAAK,cAAc,CACnB;;;;;CAMF,MAAM,KAAK,MAAkB;AAC5B,SAAO,QAAQ,KAAK,MAAM,KAAK,QAAQ,UAAU;;;;;;;;;CAUlD,OAAO,cAAc,WAAmB,MAA+B;AACtE,MAAI,QAAQ,KACX,QAAO;AAER,MAAI,CAAC,oBAAoB,KAAK,CAC7B,OAAM,IAAI,MAAM,0BAA0B;EAE3C,MAAM,EAAE,QAAQ,WAAW,MAAM,kBAAkB,UAAU,CAAC;AAE9D,SAAO,eAAe,cAAc,IAAI;;;;;;;;CASzC,OAAO,sBAAsB,SAAiB,MAA+B;AAC5E,MAAI,QAAQ,KACX,QAAO;AAER,MAAI,CAAC,oBAAoB,KAAK,CAC7B,OAAM,IAAI,MAAM,0BAA0B;EAE3C,MAAM,EAAE,QAAQ,WAAW,MAAM,QAAQ;AAEzC,SAAO,eAAe,cAAc,IAAI"}
+{"version":3,"file":"keypair.mjs","names":[],"sources":["../../../src/keypairs/ed25519/keypair.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { toHex } from '@haneullabs/bcs';\nimport { ed25519 } from '@noble/curves/ed25519.js';\n\nimport {\n\tdecodeHaneulPrivateKey,\n\tencodeHaneulPrivateKey,\n\tKeypair,\n\tPRIVATE_KEY_SIZE,\n} from '../../cryptography/keypair.js';\nimport { isValidHardenedPath, mnemonicToSeedHex } from '../../cryptography/mnemonics.js';\nimport type { SignatureScheme } from '../../cryptography/signature-scheme.js';\nimport { derivePath } from './ed25519-hd-key.js';\nimport { Ed25519PublicKey } from './publickey.js';\n\nexport const DEFAULT_ED25519_DERIVATION_PATH = \"m/44'/8282'/0'/0'/0'\";\n\n/**\n * Ed25519 Keypair data. The publickey is the 32-byte public key and\n * the secretkey is 64-byte, where the first 32 bytes is the secret\n * key and the last 32 bytes is the public key.\n */\nexport interface Ed25519KeypairData {\n\tpublicKey: Uint8Array;\n\tsecretKey: Uint8Array;\n}\n\n/**\n * An Ed25519 Keypair used for signing transactions.\n */\nexport class Ed25519Keypair extends Keypair {\n\tprivate keypair: Ed25519KeypairData;\n\n\t/**\n\t * Create a new Ed25519 keypair instance.\n\t * Generate random keypair if no {@link Ed25519Keypair} is provided.\n\t *\n\t * @param keypair Ed25519 keypair\n\t */\n\tconstructor(keypair?: Ed25519KeypairData) {\n\t\tsuper();\n\t\tif (keypair) {\n\t\t\tthis.keypair = {\n\t\t\t\tpublicKey: keypair.publicKey,\n\t\t\t\tsecretKey: keypair.secretKey.slice(0, 32),\n\t\t\t};\n\t\t} else {\n\t\t\tconst privateKey = ed25519.utils.randomSecretKey();\n\t\t\tthis.keypair = {\n\t\t\t\tpublicKey: ed25519.getPublicKey(privateKey),\n\t\t\t\tsecretKey: privateKey,\n\t\t\t};\n\t\t}\n\t}\n\n\t/**\n\t * Get the key scheme of the keypair ED25519\n\t */\n\tgetKeyScheme(): SignatureScheme {\n\t\treturn 'ED25519';\n\t}\n\n\t/**\n\t * Generate a new random Ed25519 keypair\n\t */\n\tstatic generate(): Ed25519Keypair {\n\t\tconst secretKey = ed25519.utils.randomSecretKey();\n\t\treturn new Ed25519Keypair({\n\t\t\tpublicKey: ed25519.getPublicKey(secretKey),\n\t\t\tsecretKey,\n\t\t});\n\t}\n\n\t/**\n\t * Create a Ed25519 keypair from a raw secret key byte array, also known as seed.\n\t * This is NOT the private scalar which is result of hashing and bit clamping of\n\t * the raw secret key.\n\t *\n\t * @throws error if the provided secret key is invalid and validation is not skipped.\n\t *\n\t * @param secretKey secret key as a byte array or Bech32 secret key string\n\t * @param options: skip secret key validation\n\t */\n\tstatic fromSecretKey(\n\t\tsecretKey: Uint8Array | string,\n\t\toptions?: { skipValidation?: boolean },\n\t): Ed25519Keypair {\n\t\tif (typeof secretKey === 'string') {\n\t\t\tconst decoded = decodeHaneulPrivateKey(secretKey);\n\n\t\t\tif (decoded.scheme !== 'ED25519') {\n\t\t\t\tthrow new Error(`Expected a ED25519 keypair, got ${decoded.scheme}`);\n\t\t\t}\n\n\t\t\treturn this.fromSecretKey(decoded.secretKey, options);\n\t\t}\n\n\t\tconst secretKeyLength = secretKey.length;\n\t\tif (secretKeyLength !== PRIVATE_KEY_SIZE) {\n\t\t\tthrow new Error(\n\t\t\t\t`Wrong secretKey size. Expected ${PRIVATE_KEY_SIZE} bytes, got ${secretKeyLength}.`,\n\t\t\t);\n\t\t}\n\t\tconst keypair = {\n\t\t\tpublicKey: ed25519.getPublicKey(secretKey),\n\t\t\tsecretKey,\n\t\t};\n\n\t\tif (!options || !options.skipValidation) {\n\t\t\tconst encoder = new TextEncoder();\n\t\t\tconst signData = encoder.encode('haneul validation');\n\t\t\tconst signature = ed25519.sign(signData, secretKey);\n\t\t\tif (!ed25519.verify(signature, signData, keypair.publicKey)) {\n\t\t\t\tthrow new Error('provided secretKey is invalid');\n\t\t\t}\n\t\t}\n\t\treturn new Ed25519Keypair(keypair);\n\t}\n\n\t/**\n\t * The public key for this Ed25519 keypair\n\t */\n\tgetPublicKey(): Ed25519PublicKey {\n\t\treturn new Ed25519PublicKey(this.keypair.publicKey);\n\t}\n\n\t/**\n\t * The Bech32 secret key string for this Ed25519 keypair\n\t */\n\tgetSecretKey(): string {\n\t\treturn encodeHaneulPrivateKey(\n\t\t\tthis.keypair.secretKey.slice(0, PRIVATE_KEY_SIZE),\n\t\t\tthis.getKeyScheme(),\n\t\t);\n\t}\n\n\t/**\n\t * Return the signature for the provided data using Ed25519.\n\t */\n\tasync sign(data: Uint8Array) {\n\t\treturn ed25519.sign(data, this.keypair.secretKey) as Uint8Array<ArrayBuffer>;\n\t}\n\n\t/**\n\t * Derive Ed25519 keypair from mnemonics and path. The mnemonics must be normalized\n\t * and validated against the english wordlist.\n\t *\n\t * If path is none, it will default to m/44'/8282'/0'/0'/0', otherwise the path must\n\t * be compliant to SLIP-0010 in form m/44'/8282'/{account_index}'/{change_index}'/{address_index}'.\n\t */\n\tstatic deriveKeypair(mnemonics: string, path?: string): Ed25519Keypair {\n\t\tif (path == null) {\n\t\t\tpath = DEFAULT_ED25519_DERIVATION_PATH;\n\t\t}\n\t\tif (!isValidHardenedPath(path)) {\n\t\t\tthrow new Error('Invalid derivation path');\n\t\t}\n\t\tconst { key } = derivePath(path, mnemonicToSeedHex(mnemonics));\n\n\t\treturn Ed25519Keypair.fromSecretKey(key);\n\t}\n\n\t/**\n\t * Derive Ed25519 keypair from mnemonicSeed and path.\n\t *\n\t * If path is none, it will default to m/44'/8282'/0'/0'/0', otherwise the path must\n\t * be compliant to SLIP-0010 in form m/44'/8282'/{account_index}'/{change_index}'/{address_index}'.\n\t *\n\t * @param seed - The seed as a hex string or Uint8Array.\n\t */\n\tstatic deriveKeypairFromSeed(seed: string | Uint8Array, path?: string): Ed25519Keypair {\n\t\tif (path == null) {\n\t\t\tpath = DEFAULT_ED25519_DERIVATION_PATH;\n\t\t}\n\t\tif (!isValidHardenedPath(path)) {\n\t\t\tthrow new Error('Invalid derivation path');\n\t\t}\n\t\tconst seedHex = typeof seed === 'string' ? seed : toHex(seed);\n\t\tconst { key } = derivePath(path, seedHex);\n\n\t\treturn Ed25519Keypair.fromSecretKey(key);\n\t}\n}\n"],"mappings":";;;;;;;;AAiBA,MAAa,kCAAkC;;;;AAe/C,IAAa,iBAAb,MAAa,uBAAuB,QAAQ;;;;;;;CAS3C,YAAY,SAA8B;AACzC,SAAO;AACP,MAAI,QACH,MAAK,UAAU;GACd,WAAW,QAAQ;GACnB,WAAW,QAAQ,UAAU,MAAM,GAAG,GAAG;GACzC;OACK;GACN,MAAM,aAAa,QAAQ,MAAM,iBAAiB;AAClD,QAAK,UAAU;IACd,WAAW,QAAQ,aAAa,WAAW;IAC3C,WAAW;IACX;;;;;;CAOH,eAAgC;AAC/B,SAAO;;;;;CAMR,OAAO,WAA2B;EACjC,MAAM,YAAY,QAAQ,MAAM,iBAAiB;AACjD,SAAO,IAAI,eAAe;GACzB,WAAW,QAAQ,aAAa,UAAU;GAC1C;GACA,CAAC;;;;;;;;;;;;CAaH,OAAO,cACN,WACA,SACiB;AACjB,MAAI,OAAO,cAAc,UAAU;GAClC,MAAM,UAAU,uBAAuB,UAAU;AAEjD,OAAI,QAAQ,WAAW,UACtB,OAAM,IAAI,MAAM,mCAAmC,QAAQ,SAAS;AAGrE,UAAO,KAAK,cAAc,QAAQ,WAAW,QAAQ;;EAGtD,MAAM,kBAAkB,UAAU;AAClC,MAAI,oBAAoB,iBACvB,OAAM,IAAI,MACT,kCAAkC,iBAAiB,cAAc,gBAAgB,GACjF;EAEF,MAAM,UAAU;GACf,WAAW,QAAQ,aAAa,UAAU;GAC1C;GACA;AAED,MAAI,CAAC,WAAW,CAAC,QAAQ,gBAAgB;GAExC,MAAM,WADU,IAAI,aAAa,CACR,OAAO,oBAAoB;GACpD,MAAM,YAAY,QAAQ,KAAK,UAAU,UAAU;AACnD,OAAI,CAAC,QAAQ,OAAO,WAAW,UAAU,QAAQ,UAAU,CAC1D,OAAM,IAAI,MAAM,gCAAgC;;AAGlD,SAAO,IAAI,eAAe,QAAQ;;;;;CAMnC,eAAiC;AAChC,SAAO,IAAI,iBAAiB,KAAK,QAAQ,UAAU;;;;;CAMpD,eAAuB;AACtB,SAAO,uBACN,KAAK,QAAQ,UAAU,MAAM,GAAG,iBAAiB,EACjD,KAAK,cAAc,CACnB;;;;;CAMF,MAAM,KAAK,MAAkB;AAC5B,SAAO,QAAQ,KAAK,MAAM,KAAK,QAAQ,UAAU;;;;;;;;;CAUlD,OAAO,cAAc,WAAmB,MAA+B;AACtE,MAAI,QAAQ,KACX,QAAO;AAER,MAAI,CAAC,oBAAoB,KAAK,CAC7B,OAAM,IAAI,MAAM,0BAA0B;EAE3C,MAAM,EAAE,QAAQ,WAAW,MAAM,kBAAkB,UAAU,CAAC;AAE9D,SAAO,eAAe,cAAc,IAAI;;;;;;;;;;CAWzC,OAAO,sBAAsB,MAA2B,MAA+B;AACtF,MAAI,QAAQ,KACX,QAAO;AAER,MAAI,CAAC,oBAAoB,KAAK,CAC7B,OAAM,IAAI,MAAM,0BAA0B;EAE3C,MAAM,UAAU,OAAO,SAAS,WAAW,OAAO,MAAM,KAAK;EAC7D,MAAM,EAAE,QAAQ,WAAW,MAAM,QAAQ;AAEzC,SAAO,eAAe,cAAc,IAAI"}

package/dist/keypairs/ed25519/publickey.d.mts

@@ -1,7 +1,6 @@
 import { PublicKey, PublicKeyInitData } from "../../cryptography/publickey.mjs";
 
 //#region src/keypairs/ed25519/publickey.d.ts
-
 /**
  * An Ed25519 public key
  */

package/dist/keypairs/ed25519/publickey.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"publickey.d.mts","names":[],"sources":["../../../src/keypairs/ed25519/publickey.ts"],"sourcesContent":[],"mappings":";;;;;AAmBA;;AA6B4B,cA7Bf,gBAAA,SAAyB,SAAA,CA6BV;EAOF,OAAA,IAAA,EAAA,MAAA;EAAX,QAAA,IAAA;EAcQ;;;;EAlDwB,WAAA,CAAA,KAAA,EAQ3B,iBAR2B;;;;oBA6BnB;;;;gBAOb,WAAW;;;;;;;;kBAcH,uBAAuB,sBAAsB"}
+{"version":3,"file":"publickey.d.mts","names":[],"sources":["../../../src/keypairs/ed25519/publickey.ts"],"mappings":";;;;AAmBA;;cAAa,gBAAA,SAAyB,SAAA;EAAA,OAC9B,IAAA;EAAA,QACC,IAAA;EAkCiB;;;;cA5Bb,KAAA,EAAO,iBAAA;EARkB;;;EA6B5B,MAAA,CAAO,SAAA,EAAW,gBAAA;EA5BpB;;;EAmCP,UAAA,CAAA,GAAc,UAAA,CAAW,WAAA;EA5Bb;;;EAmCZ,IAAA,CAAA;EAPA;;;EAcM,MAAA,CAAO,OAAA,EAAS,UAAA,EAAY,SAAA,EAAW,UAAA,YAAsB,OAAA;AAAA"}

package/dist/keypairs/passkey/keypair.d.mts

@@ -11,21 +11,22 @@ type DeepPartial<T> = T extends object ? { [P in keyof T]?: DeepPartial<T[P]> }
 type BrowserPasswordProviderOptions = Pick<DeepPartial<PublicKeyCredentialCreationOptions>, DeepPartialConfigKeys> & Omit<Partial<PublicKeyCredentialCreationOptions>, DeepPartialConfigKeys | 'pubKeyCredParams' | 'challenge'>;
 interface PasskeyProvider {
   create(): Promise<RegistrationCredential>;
-  get(challenge: Uint8Array): Promise<AuthenticationCredential>;
+  get(challenge: Uint8Array, credentialId?: Uint8Array): Promise<AuthenticationCredential>;
 }
 declare class BrowserPasskeyProvider implements PasskeyProvider {
   #private;
   constructor(name: string, options: BrowserPasswordProviderOptions);
   create(): Promise<RegistrationCredential>;
-  get(challenge: Uint8Array): Promise<AuthenticationCredential>;
+  get(challenge: Uint8Array, credentialId?: Uint8Array): Promise<AuthenticationCredential>;
 }
 /**
  * @experimental
- * A passkey signer used for signing transactions. This is a client side implementation for [SIP-9](https://github.co./haneul-foundation/sips/blob/main/sips/sip-9.md).
+ * A passkey signer used for signing transactions. This is a client side implementation for [SIP-9](https://github.com/haneul-foundation/sips/blob/main/sips/sip-9.md).
  */
 declare class PasskeyKeypair extends Signer {
   private publicKey;
   private provider;
+  private credentialId?;
   /**
    * Get the key scheme of passkey,
    */
@@ -44,7 +45,13 @@ declare class PasskeyKeypair extends Signer {
    * If there are existing passkey wallet, use `signAndRecover` to identify the correct
    * public key and then initialize the instance. See usage in `signAndRecover`.
    */
-  constructor(publicKey: Uint8Array, provider: PasskeyProvider);
+  constructor(publicKey: Uint8Array, provider: PasskeyProvider, credentialId?: Uint8Array);
+  /**
+   * Return the credential ID for this passkey, if available.
+   * The credential ID is captured when creating a new passkey via `getPasskeyInstance`
+   * and can be used to constrain which credential the browser selects during signing.
+   */
+  getCredentialId(): Uint8Array | undefined;
   /**
    * Creates an instance of Passkey signer invoking the passkey from navigator.
    * Note that this will invoke the passkey device to create a fresh credential.
@@ -93,7 +100,7 @@ declare class PasskeyKeypair extends Signer {
    * const testMessage2 = new TextEncoder().encode('Hello world 2!');
    * const possiblePks2 = await PasskeyKeypair.signAndRecover(provider, testMessage2);
    * const commonPk = findCommonPublicKey(possiblePks, possiblePks2);
-   * const signer = new PasskeyKeypair(provider, commonPk.toRawBytes());
+   * const signer = new PasskeyKeypair(commonPk.toRawBytes(), provider);
    * ```
    *
    * @param provider - the passkey provider.

package/dist/keypairs/passkey/keypair.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"keypair.d.mts","names":[],"sources":["../../../src/keypairs/passkey/keypair.ts"],"sourcesContent":[],"mappings":";;;;;;;;KAsBK,qBAAA;KAEA,iBAAiB,iCAEP,KAAK,YAAY,EAAE,KANiD,GAQhF,CANE;AAEA,KAMO,8BAAA,GAAiC,IAN7B,CAOf,WAPe,CAOH,kCAPG,CAAA,EAQf,qBARe,CAAA,GAUf,IAVe,CAWd,OAXc,CAWN,kCAXM,CAAA,EAYd,qBAZc,GAAA,kBAAA,GAAA,WAAA,CAAA;AAAM,UAeL,eAAA,CAfK;EAEP,MAAA,EAAA,EAcJ,OAdI,CAcI,sBAdJ,CAAA;EAAiB,GAAA,CAAA,SAAA,EAehB,UAfgB,CAAA,EAeH,OAfG,CAeK,wBAfL,CAAA;;AAAZ,cAmBP,sBAAA,YAAkC,eAnB3B,CAAA;EAEjB,CAAA,OAAA;EAAC,WAAA,CAAA,IAAA,EAAA,MAAA,EAAA,OAAA,EAqBgC,8BArBhC;EAEQ,MAAA,CAAA,CAAA,EAwBK,OAxBL,CAwBa,sBAxBiB,CAAA;EAC7B,GAAA,CAAA,SAAA,EAmDS,UAnDT,CAAA,EAmDsB,OAnDtB,CAmD8B,wBAnD9B,CAAA;;;;;;AAKX,cA6DW,cAAA,SAAuB,MAAA,CA7DlC;EAFD,QAAA,SAAA;EAAI,QAAA,QAAA;EAKY;;;EAED,YAAA,CAAA,CAAA,EA+DC,eA/DD;EAAqB;;;AAIrC;;;;;;;;;AAoDA;;EAyBwB,WAAA,CAAA,SAAA,EAAA,UAAA,EAAA,QAAA,EAAsB,eAAtB;EAAsB;;;;;;;;EAwClB,OAAA,kBAAA,CAAA,QAAA,EA1Be,eA0Bf,CAAA,EA1BiC,OA0BjC,CA1ByC,cA0BzC,CAAA;EA0CC;;;EAAkC,YAAA,CAAA,CAAA,EAlD9C,SAkD8C;EAmDnD;;;;EA9JwB,IAAA,CAAA,IAAA,EAiElB,UAjEkB,CAAA,EAiER,OAjEQ,CAiER,UAjEQ,CAiER,WAjEQ,CAAA,CAAA;EAAM;AA6L1C;;;EAA2E,cAAA,CAAA,KAAA,EAlF9C,UAkF8C,EAAA,MAAA,EAlF1B,WAkF0B,CAAA,EAlFZ,OAkFY,CAlFJ,kBAkFI,CAAA;EAAS;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCA/BxE,0BACD,aACP,QAAQ;;;;;;;;;;iBA6BI,mBAAA,OAA0B,mBAAmB,cAAc"}
+{"version":3,"file":"keypair.d.mts","names":[],"sources":["../../../src/keypairs/passkey/keypair.ts"],"mappings":";;;;;;;;KAsBK,qBAAA;AAAA,KAEA,WAAA,MAAiB,CAAA,gCAEP,CAAA,IAAK,WAAA,CAAY,CAAA,CAAE,CAAA,OAE/B,CAAA;AAAA,KAES,8BAAA,GAAiC,IAAA,CAC5C,WAAA,CAAY,kCAAA,GACZ,qBAAA,IAEA,IAAA,CACC,OAAA,CAAQ,kCAAA,GACR,qBAAA;AAAA,UAGe,eAAA;EAChB,MAAA,IAAU,OAAA,CAAQ,sBAAA;EAClB,GAAA,CAAI,SAAA,EAAW,UAAA,EAAY,YAAA,GAAe,UAAA,GAAa,OAAA,CAAQ,wBAAA;AAAA;AAAA,cAInD,sBAAA,YAAkC,eAAA;EAAA;cAIlC,IAAA,UAAc,OAAA,EAAS,8BAAA;EAK7B,MAAA,CAAA,GAAU,OAAA,CAAQ,sBAAA;EA4BlB,GAAA,CAAI,SAAA,EAAW,UAAA,EAAY,YAAA,GAAe,UAAA,GAAa,OAAA,CAAQ,wBAAA;AAAA;;;;;cAkBzD,cAAA,SAAuB,MAAA;EAAA,QAC3B,SAAA;EAAA,QACA,QAAA;EAAA,QACA,YAAA;EA7EW;;;EAkFnB,YAAA,CAAA,GAAgB,eAAA;EAhFb;;AAEJ;;;;;;;;;;;;cAgGa,SAAA,EAAW,UAAA,EAAY,QAAA,EAAU,eAAA,EAAiB,YAAA,GAAe,UAAA;EAhGjC;;;;;EA4G5C,eAAA,CAAA,GAAmB,UAAA;EAvGV;;;;AAIV;;;;EAJU,OAmHI,kBAAA,CAAmB,QAAA,EAAU,eAAA,GAAkB,OAAA,CAAQ,cAAA;EA7GrD;;;EA+Hf,YAAA,CAAA,GAAgB,SAAA;EA/H8C;;;;EAuIxD,IAAA,CAAK,IAAA,EAAM,UAAA,GAAU,OAAA,CAAA,UAAA,CAAA,WAAA;EAvI3B;;;;EAiLM,cAAA,CAAe,KAAA,EAAO,UAAA,EAAY,MAAA,EAAQ,WAAA,GAAc,OAAA,CAAQ,kBAAA;EAjLf;;;;AAIxD;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAJwD,OAmO1C,cAAA,CACZ,QAAA,EAAU,eAAA,EACV,OAAA,EAAS,UAAA,GACP,OAAA,CAAQ,SAAA;AAAA;;AA3KZ;;;;;;;iBAwMgB,mBAAA,CAAoB,IAAA,EAAM,SAAA,IAAa,IAAA,EAAM,SAAA,KAAc,SAAA"}

package/dist/keypairs/passkey/keypair.mjs

@@ -45,17 +45,21 @@ var BrowserPasskeyProvider = class {
 			}
 		} });
 	}
-	async get(challenge) {
+	async get(challenge, credentialId) {
 		return await navigator.credentials.get({ publicKey: {
 			challenge,
 			userVerification: this.#options.authenticatorSelection?.userVerification || "required",
-			timeout: this.#options.timeout ?? 6e4
+			timeout: this.#options.timeout ?? 6e4,
+			...credentialId && { allowCredentials: [{
+				type: "public-key",
+				id: credentialId
+			}] }
 		} });
 	}
 };
 /**
 * @experimental
-* A passkey signer used for signing transactions. This is a client side implementation for [SIP-9](https://github.co./haneul-foundation/sips/blob/main/sips/sip-9.md).
+* A passkey signer used for signing transactions. This is a client side implementation for [SIP-9](https://github.com/haneul-foundation/sips/blob/main/sips/sip-9.md).
 */
 var PasskeyKeypair = class PasskeyKeypair extends Signer {
 	/**
@@ -78,10 +82,19 @@ var PasskeyKeypair = class PasskeyKeypair extends Signer {
 	* If there are existing passkey wallet, use `signAndRecover` to identify the correct
 	* public key and then initialize the instance. See usage in `signAndRecover`.
 	*/
-	constructor(publicKey, provider) {
+	constructor(publicKey, provider, credentialId) {
 		super();
 		this.publicKey = publicKey;
 		this.provider = provider;
+		this.credentialId = credentialId;
+	}
+	/**
+	* Return the credential ID for this passkey, if available.
+	* The credential ID is captured when creating a new passkey via `getPasskeyInstance`
+	* and can be used to constrain which credential the browser selects during signing.
+	*/
+	getCredentialId() {
+		return this.credentialId;
 	}
 	/**
 	* Creates an instance of Passkey signer invoking the passkey from navigator.
@@ -97,7 +110,7 @@ var PasskeyKeypair = class PasskeyKeypair extends Signer {
 		else {
 			const derSPKI = credential.response.getPublicKey();
 			const pubkeyUncompressed = parseDerSPKI(new Uint8Array(derSPKI));
-			return new PasskeyKeypair(p256.Point.fromBytes(pubkeyUncompressed).toBytes(true), provider);
+			return new PasskeyKeypair(p256.Point.fromBytes(pubkeyUncompressed).toBytes(true), provider, new Uint8Array(credential.rawId));
 		}
 	}
 	/**
@@ -111,7 +124,7 @@ var PasskeyKeypair = class PasskeyKeypair extends Signer {
 	* This is sent to passkey as the challenge field.
 	*/
 	async sign(data) {
-		const credential = await this.provider.get(data);
+		const credential = await this.provider.get(data, this.credentialId);
 		const authenticatorData = new Uint8Array(credential.response.authenticatorData);
 		const clientDataJSON = new Uint8Array(credential.response.clientDataJSON);
 		const clientDataJSONString = new TextDecoder().decode(clientDataJSON);
@@ -168,7 +181,7 @@ var PasskeyKeypair = class PasskeyKeypair extends Signer {
 	* const testMessage2 = new TextEncoder().encode('Hello world 2!');
 	* const possiblePks2 = await PasskeyKeypair.signAndRecover(provider, testMessage2);
 	* const commonPk = findCommonPublicKey(possiblePks, possiblePks2);
-	* const signer = new PasskeyKeypair(provider, commonPk.toRawBytes());
+	* const signer = new PasskeyKeypair(commonPk.toRawBytes(), provider);
 	* ```
 	*
 	* @param provider - the passkey provider.

package/dist/keypairs/passkey/keypair.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"keypair.mjs","names":["#name","#options","secp256r1"],"sources":["../../../src/keypairs/passkey/keypair.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { toBase64 } from '@haneullabs/bcs';\nimport { p256 as secp256r1 } from '@noble/curves/nist.js';\nimport { blake2b } from '@noble/hashes/blake2.js';\nimport { sha256 } from '@noble/hashes/sha2.js';\nimport { randomBytes } from '@noble/hashes/utils.js';\n\nimport { PasskeyAuthenticator } from '../../bcs/bcs.js';\nimport type { IntentScope, SignatureWithBytes } from '../../cryptography/index.js';\nimport { messageWithIntent, SIGNATURE_SCHEME_TO_FLAG, Signer } from '../../cryptography/index.js';\nimport type { PublicKey } from '../../cryptography/publickey.js';\nimport type { SignatureScheme } from '../../cryptography/signature-scheme.js';\nimport {\n\tparseDerSPKI,\n\tPASSKEY_PUBLIC_KEY_SIZE,\n\tPASSKEY_SIGNATURE_SIZE,\n\tPasskeyPublicKey,\n} from './publickey.js';\nimport type { AuthenticationCredential, RegistrationCredential } from './types.js';\n\ntype DeepPartialConfigKeys = 'rp' | 'user' | 'authenticatorSelection';\n\ntype DeepPartial<T> = T extends object\n\t? {\n\t\t\t[P in keyof T]?: DeepPartial<T[P]>;\n\t\t}\n\t: T;\n\nexport type BrowserPasswordProviderOptions = Pick<\n\tDeepPartial<PublicKeyCredentialCreationOptions>,\n\tDeepPartialConfigKeys\n> &\n\tOmit<\n\t\tPartial<PublicKeyCredentialCreationOptions>,\n\t\tDeepPartialConfigKeys | 'pubKeyCredParams' | 'challenge'\n\t>;\n\nexport interface PasskeyProvider {\n\tcreate(): Promise<RegistrationCredential>;\n\tget(challenge: Uint8Array): Promise<AuthenticationCredential>;\n}\n\n// Default browser implementation\nexport class BrowserPasskeyProvider implements PasskeyProvider {\n\t#name: string;\n\t#options: BrowserPasswordProviderOptions;\n\n\tconstructor(name: string, options: BrowserPasswordProviderOptions) {\n\t\tthis.#name = name;\n\t\tthis.#options = options;\n\t}\n\n\tasync create(): Promise<RegistrationCredential> {\n\t\treturn (await navigator.credentials.create({\n\t\t\tpublicKey: {\n\t\t\t\ttimeout: this.#options.timeout ?? 60000,\n\t\t\t\t...this.#options,\n\t\t\t\trp: {\n\t\t\t\t\tname: this.#name,\n\t\t\t\t\t...this.#options.rp,\n\t\t\t\t},\n\t\t\t\tuser: {\n\t\t\t\t\tname: this.#name,\n\t\t\t\t\tdisplayName: this.#name,\n\t\t\t\t\t...this.#options.user,\n\t\t\t\t\tid: randomBytes(10) as BufferSource,\n\t\t\t\t},\n\t\t\t\tchallenge: new TextEncoder().encode('Create passkey wallet on Haneul'),\n\t\t\t\tpubKeyCredParams: [{ alg: -7, type: 'public-key' }],\n\t\t\t\tauthenticatorSelection: {\n\t\t\t\t\tauthenticatorAttachment: 'cross-platform',\n\t\t\t\t\tresidentKey: 'required',\n\t\t\t\t\trequireResidentKey: true,\n\t\t\t\t\tuserVerification: 'required',\n\t\t\t\t\t...this.#options.authenticatorSelection,\n\t\t\t\t},\n\t\t\t},\n\t\t})) as RegistrationCredential;\n\t}\n\n\tasync get(challenge: Uint8Array): Promise<AuthenticationCredential> {\n\t\treturn (await navigator.credentials.get({\n\t\t\tpublicKey: {\n\t\t\t\tchallenge: challenge as BufferSource,\n\t\t\t\tuserVerification: this.#options.authenticatorSelection?.userVerification || 'required',\n\t\t\t\ttimeout: this.#options.timeout ?? 60000,\n\t\t\t},\n\t\t})) as AuthenticationCredential;\n\t}\n}\n\n/**\n * @experimental\n * A passkey signer used for signing transactions. This is a client side implementation for [SIP-9](https://github.co./haneul-foundation/sips/blob/main/sips/sip-9.md).\n */\nexport class PasskeyKeypair extends Signer {\n\tprivate publicKey: Uint8Array;\n\tprivate provider: PasskeyProvider;\n\n\t/**\n\t * Get the key scheme of passkey,\n\t */\n\tgetKeyScheme(): SignatureScheme {\n\t\treturn 'Passkey';\n\t}\n\n\t/**\n\t * Creates an instance of Passkey signer. If no passkey wallet had created before,\n\t * use `getPasskeyInstance`. For example:\n\t * ```\n\t * let provider = new BrowserPasskeyProvider('Haneul Passkey Example',{\n\t * \t  rpName: 'Haneul Passkey Example',\n\t * \t  rpId: window.location.hostname,\n\t * } as BrowserPasswordProviderOptions);\n\t * const signer = await PasskeyKeypair.getPasskeyInstance(provider);\n\t * ```\n\t *\n\t * If there are existing passkey wallet, use `signAndRecover` to identify the correct\n\t * public key and then initialize the instance. See usage in `signAndRecover`.\n\t */\n\tconstructor(publicKey: Uint8Array, provider: PasskeyProvider) {\n\t\tsuper();\n\t\tthis.publicKey = publicKey;\n\t\tthis.provider = provider;\n\t}\n\n\t/**\n\t * Creates an instance of Passkey signer invoking the passkey from navigator.\n\t * Note that this will invoke the passkey device to create a fresh credential.\n\t * Should only be called if passkey wallet is created for the first time.\n\t *\n\t * @param provider - the passkey provider.\n\t * @returns the passkey instance.\n\t */\n\tstatic async getPasskeyInstance(provider: PasskeyProvider): Promise<PasskeyKeypair> {\n\t\t// create a passkey secp256r1 with the provider.\n\t\tconst credential = await provider.create();\n\n\t\tif (!credential.response.getPublicKey()) {\n\t\t\tthrow new Error('Invalid credential create response');\n\t\t} else {\n\t\t\tconst derSPKI = credential.response.getPublicKey()!;\n\t\t\tconst pubkeyUncompressed = parseDerSPKI(new Uint8Array(derSPKI));\n\t\t\tconst pubkey = secp256r1.Point.fromBytes(pubkeyUncompressed);\n\t\t\tconst pubkeyCompressed = pubkey.toBytes(true);\n\t\t\treturn new PasskeyKeypair(pubkeyCompressed, provider);\n\t\t}\n\t}\n\n\t/**\n\t * Return the public key for this passkey.\n\t */\n\tgetPublicKey(): PublicKey {\n\t\treturn new PasskeyPublicKey(this.publicKey);\n\t}\n\n\t/**\n\t * Return the signature for the provided data (i.e. blake2b(intent_message)).\n\t * This is sent to passkey as the challenge field.\n\t */\n\tasync sign(data: Uint8Array) {\n\t\t// asks the passkey to sign over challenge as the data.\n\t\tconst credential = await this.provider.get(data);\n\n\t\t// parse authenticatorData (as bytes), clientDataJSON (decoded as string).\n\t\tconst authenticatorData = new Uint8Array(credential.response.authenticatorData);\n\t\tconst clientDataJSON = new Uint8Array(credential.response.clientDataJSON); // response.clientDataJSON is already UTF-8 encoded JSON\n\t\tconst decoder = new TextDecoder();\n\t\tconst clientDataJSONString: string = decoder.decode(clientDataJSON);\n\n\t\tconst sig = secp256r1.Signature.fromBytes(new Uint8Array(credential.response.signature), 'der');\n\t\tconst normalizedSig = sig.hasHighS()\n\t\t\t? new secp256r1.Signature(sig.r, secp256r1.Point.Fn.neg(sig.s))\n\t\t\t: sig;\n\n\t\tconst normalized = normalizedSig.toBytes('compact');\n\n\t\tif (\n\t\t\tnormalized.length !== PASSKEY_SIGNATURE_SIZE ||\n\t\t\tthis.publicKey.length !== PASSKEY_PUBLIC_KEY_SIZE\n\t\t) {\n\t\t\tthrow new Error('Invalid signature or public key length');\n\t\t}\n\n\t\t// construct userSignature as flag || sig || pubkey for the secp256r1 signature.\n\t\tconst arr = new Uint8Array(1 + normalized.length + this.publicKey.length);\n\t\tarr.set([SIGNATURE_SCHEME_TO_FLAG['Secp256r1']]);\n\t\tarr.set(normalized, 1);\n\t\tarr.set(this.publicKey, 1 + normalized.length);\n\n\t\t// serialize all fields into a passkey signature according to https://github.co./haneul-foundation/sips/blob/main/sips/sip-9.md#signature-encoding\n\t\treturn PasskeyAuthenticator.serialize({\n\t\t\tauthenticatorData: authenticatorData,\n\t\t\tclientDataJson: clientDataJSONString,\n\t\t\tuserSignature: arr,\n\t\t}).toBytes();\n\t}\n\n\t/**\n\t * This overrides the base class implementation that accepts the raw bytes and signs its\n\t * digest of the intent message, then serialize it with the passkey flag.\n\t */\n\tasync signWithIntent(bytes: Uint8Array, intent: IntentScope): Promise<SignatureWithBytes> {\n\t\t// prepend it into an intent message and computes the digest.\n\t\tconst intentMessage = messageWithIntent(intent, bytes);\n\t\tconst digest = blake2b(intentMessage, { dkLen: 32 });\n\n\t\t// sign the digest.\n\t\tconst signature = await this.sign(digest);\n\n\t\t// prepend with the passkey flag.\n\t\tconst serializedSignature = new Uint8Array(1 + signature.length);\n\t\tserializedSignature.set([SIGNATURE_SCHEME_TO_FLAG[this.getKeyScheme()]]);\n\t\tserializedSignature.set(signature, 1);\n\t\treturn {\n\t\t\tsignature: toBase64(serializedSignature),\n\t\t\tbytes: toBase64(bytes),\n\t\t};\n\t}\n\n\t/**\n\t * Given a message, asks the passkey device to sign it and return all (up to 4) possible public keys.\n\t * See: https://bitcoin.stackexchange.com/questions/81232/how-is-public-key-extracted-from-message-digital-signature-address\n\t *\n\t * This is useful if the user previously created passkey wallet with the origin, but the wallet session\n\t * does not have the public key / address. By calling this method twice with two different messages, the\n\t * wallet can compare the returned public keys and uniquely identify the previously created passkey wallet\n\t * using `findCommonPublicKey`.\n\t *\n\t * Alternatively, one call can be made and all possible public keys should be checked onchain to see if\n\t * there is any assets.\n\t *\n\t * Once the correct public key is identified, a passkey instance can then be initialized with this public key.\n\t *\n\t * Example usage to recover wallet with two signing calls:\n\t * ```\n\t * let provider = new BrowserPasskeyProvider('Haneul Passkey Example',{\n\t *     rpName: 'Haneul Passkey Example',\n\t * \t   rpId: window.location.hostname,\n\t * } as BrowserPasswordProviderOptions);\n\t * const testMessage = new TextEncoder().encode('Hello world!');\n\t * const possiblePks = await PasskeyKeypair.signAndRecover(provider, testMessage);\n\t * const testMessage2 = new TextEncoder().encode('Hello world 2!');\n\t * const possiblePks2 = await PasskeyKeypair.signAndRecover(provider, testMessage2);\n\t * const commonPk = findCommonPublicKey(possiblePks, possiblePks2);\n\t * const signer = new PasskeyKeypair(provider, commonPk.toRawBytes());\n\t * ```\n\t *\n\t * @param provider - the passkey provider.\n\t * @param message - the message to sign.\n\t * @returns all possible public keys.\n\t */\n\tstatic async signAndRecover(\n\t\tprovider: PasskeyProvider,\n\t\tmessage: Uint8Array,\n\t): Promise<PublicKey[]> {\n\t\tconst credential = await provider.get(message);\n\t\tconst fullMessage = messageFromAssertionResponse(credential.response);\n\t\tconst sig = secp256r1.Signature.fromBytes(new Uint8Array(credential.response.signature), 'der');\n\n\t\tconst res = [];\n\t\tconst msgHash = sha256(fullMessage);\n\t\tfor (let i = 0; i < 4; i++) {\n\t\t\tconst s = sig.addRecoveryBit(i);\n\t\t\ttry {\n\t\t\t\tconst pubkey = s.recoverPublicKey(msgHash);\n\t\t\t\tconst pk = new PasskeyPublicKey(pubkey.toBytes(true));\n\t\t\t\tres.push(pk);\n\t\t\t} catch {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t}\n\t\treturn res;\n\t}\n}\n\n/**\n * Finds the unique public key that exists in both arrays, throws error if the common\n * pubkey does not equal to one.\n *\n * @param arr1 - The first pubkeys array.\n * @param arr2 - The second pubkeys array.\n * @returns The only common pubkey in both arrays.\n */\nexport function findCommonPublicKey(arr1: PublicKey[], arr2: PublicKey[]): PublicKey {\n\tconst matchingPubkeys: PublicKey[] = [];\n\tfor (const pubkey1 of arr1) {\n\t\tfor (const pubkey2 of arr2) {\n\t\t\tif (pubkey1.equals(pubkey2)) {\n\t\t\t\tmatchingPubkeys.push(pubkey1);\n\t\t\t}\n\t\t}\n\t}\n\tif (matchingPubkeys.length !== 1) {\n\t\tthrow new Error('No unique public key found');\n\t}\n\treturn matchingPubkeys[0];\n}\n\n/**\n * Constructs the message that the passkey signature is produced over as authenticatorData || sha256(clientDataJSON).\n */\nfunction messageFromAssertionResponse(response: AuthenticatorAssertionResponse): Uint8Array {\n\tconst authenticatorData = new Uint8Array(response.authenticatorData);\n\tconst clientDataJSON = new Uint8Array(response.clientDataJSON);\n\tconst clientDataJSONDigest = sha256(clientDataJSON);\n\treturn new Uint8Array([...authenticatorData, ...clientDataJSONDigest]);\n}\n"],"mappings":";;;;;;;;;;;;AA6CA,IAAa,yBAAb,MAA+D;CAC9D;CACA;CAEA,YAAY,MAAc,SAAyC;AAClE,QAAKA,OAAQ;AACb,QAAKC,UAAW;;CAGjB,MAAM,SAA0C;AAC/C,SAAQ,MAAM,UAAU,YAAY,OAAO,EAC1C,WAAW;GACV,SAAS,MAAKA,QAAS,WAAW;GAClC,GAAG,MAAKA;GACR,IAAI;IACH,MAAM,MAAKD;IACX,GAAG,MAAKC,QAAS;IACjB;GACD,MAAM;IACL,MAAM,MAAKD;IACX,aAAa,MAAKA;IAClB,GAAG,MAAKC,QAAS;IACjB,IAAI,YAAY,GAAG;IACnB;GACD,WAAW,IAAI,aAAa,CAAC,OAAO,kCAAkC;GACtE,kBAAkB,CAAC;IAAE,KAAK;IAAI,MAAM;IAAc,CAAC;GACnD,wBAAwB;IACvB,yBAAyB;IACzB,aAAa;IACb,oBAAoB;IACpB,kBAAkB;IAClB,GAAG,MAAKA,QAAS;IACjB;GACD,EACD,CAAC;;CAGH,MAAM,IAAI,WAA0D;AACnE,SAAQ,MAAM,UAAU,YAAY,IAAI,EACvC,WAAW;GACC;GACX,kBAAkB,MAAKA,QAAS,wBAAwB,oBAAoB;GAC5E,SAAS,MAAKA,QAAS,WAAW;GAClC,EACD,CAAC;;;;;;;AAQJ,IAAa,iBAAb,MAAa,uBAAuB,OAAO;;;;CAO1C,eAAgC;AAC/B,SAAO;;;;;;;;;;;;;;;;CAiBR,YAAY,WAAuB,UAA2B;AAC7D,SAAO;AACP,OAAK,YAAY;AACjB,OAAK,WAAW;;;;;;;;;;CAWjB,aAAa,mBAAmB,UAAoD;EAEnF,MAAM,aAAa,MAAM,SAAS,QAAQ;AAE1C,MAAI,CAAC,WAAW,SAAS,cAAc,CACtC,OAAM,IAAI,MAAM,qCAAqC;OAC/C;GACN,MAAM,UAAU,WAAW,SAAS,cAAc;GAClD,MAAM,qBAAqB,aAAa,IAAI,WAAW,QAAQ,CAAC;AAGhE,UAAO,IAAI,eAFIC,KAAU,MAAM,UAAU,mBAAmB,CAC5B,QAAQ,KAAK,EACD,SAAS;;;;;;CAOvD,eAA0B;AACzB,SAAO,IAAI,iBAAiB,KAAK,UAAU;;;;;;CAO5C,MAAM,KAAK,MAAkB;EAE5B,MAAM,aAAa,MAAM,KAAK,SAAS,IAAI,KAAK;EAGhD,MAAM,oBAAoB,IAAI,WAAW,WAAW,SAAS,kBAAkB;EAC/E,MAAM,iBAAiB,IAAI,WAAW,WAAW,SAAS,eAAe;EAEzE,MAAM,uBADU,IAAI,aAAa,CACY,OAAO,eAAe;EAEnE,MAAM,MAAMA,KAAU,UAAU,UAAU,IAAI,WAAW,WAAW,SAAS,UAAU,EAAE,MAAM;EAK/F,MAAM,cAJgB,IAAI,UAAU,GACjC,IAAIA,KAAU,UAAU,IAAI,GAAGA,KAAU,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,GAC7D,KAE8B,QAAQ,UAAU;AAEnD,MACC,WAAW,WAAW,0BACtB,KAAK,UAAU,WAAW,wBAE1B,OAAM,IAAI,MAAM,yCAAyC;EAI1D,MAAM,MAAM,IAAI,WAAW,IAAI,WAAW,SAAS,KAAK,UAAU,OAAO;AACzE,MAAI,IAAI,CAAC,yBAAyB,aAAa,CAAC;AAChD,MAAI,IAAI,YAAY,EAAE;AACtB,MAAI,IAAI,KAAK,WAAW,IAAI,WAAW,OAAO;AAG9C,SAAO,qBAAqB,UAAU;GAClB;GACnB,gBAAgB;GAChB,eAAe;GACf,CAAC,CAAC,SAAS;;;;;;CAOb,MAAM,eAAe,OAAmB,QAAkD;EAGzF,MAAM,SAAS,QADO,kBAAkB,QAAQ,MAAM,EAChB,EAAE,OAAO,IAAI,CAAC;EAGpD,MAAM,YAAY,MAAM,KAAK,KAAK,OAAO;EAGzC,MAAM,sBAAsB,IAAI,WAAW,IAAI,UAAU,OAAO;AAChE,sBAAoB,IAAI,CAAC,yBAAyB,KAAK,cAAc,EAAE,CAAC;AACxE,sBAAoB,IAAI,WAAW,EAAE;AACrC,SAAO;GACN,WAAW,SAAS,oBAAoB;GACxC,OAAO,SAAS,MAAM;GACtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCF,aAAa,eACZ,UACA,SACuB;EACvB,MAAM,aAAa,MAAM,SAAS,IAAI,QAAQ;EAC9C,MAAM,cAAc,6BAA6B,WAAW,SAAS;EACrE,MAAM,MAAMA,KAAU,UAAU,UAAU,IAAI,WAAW,WAAW,SAAS,UAAU,EAAE,MAAM;EAE/F,MAAM,MAAM,EAAE;EACd,MAAM,UAAU,OAAO,YAAY;AACnC,OAAK,IAAI,IAAI,GAAG,IAAI,GAAG,KAAK;GAC3B,MAAM,IAAI,IAAI,eAAe,EAAE;AAC/B,OAAI;IAEH,MAAM,KAAK,IAAI,iBADA,EAAE,iBAAiB,QAAQ,CACH,QAAQ,KAAK,CAAC;AACrD,QAAI,KAAK,GAAG;WACL;AACP;;;AAGF,SAAO;;;;;;;;;;;AAYT,SAAgB,oBAAoB,MAAmB,MAA8B;CACpF,MAAM,kBAA+B,EAAE;AACvC,MAAK,MAAM,WAAW,KACrB,MAAK,MAAM,WAAW,KACrB,KAAI,QAAQ,OAAO,QAAQ,CAC1B,iBAAgB,KAAK,QAAQ;AAIhC,KAAI,gBAAgB,WAAW,EAC9B,OAAM,IAAI,MAAM,6BAA6B;AAE9C,QAAO,gBAAgB;;;;;AAMxB,SAAS,6BAA6B,UAAsD;CAC3F,MAAM,oBAAoB,IAAI,WAAW,SAAS,kBAAkB;CAEpE,MAAM,uBAAuB,OADN,IAAI,WAAW,SAAS,eAAe,CACX;AACnD,QAAO,IAAI,WAAW,CAAC,GAAG,mBAAmB,GAAG,qBAAqB,CAAC"}
+{"version":3,"file":"keypair.mjs","names":["#name","#options","secp256r1"],"sources":["../../../src/keypairs/passkey/keypair.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { toBase64 } from '@haneullabs/bcs';\nimport { p256 as secp256r1 } from '@noble/curves/nist.js';\nimport { blake2b } from '@noble/hashes/blake2.js';\nimport { sha256 } from '@noble/hashes/sha2.js';\nimport { randomBytes } from '@noble/hashes/utils.js';\n\nimport { PasskeyAuthenticator } from '../../bcs/bcs.js';\nimport type { IntentScope, SignatureWithBytes } from '../../cryptography/index.js';\nimport { messageWithIntent, SIGNATURE_SCHEME_TO_FLAG, Signer } from '../../cryptography/index.js';\nimport type { PublicKey } from '../../cryptography/publickey.js';\nimport type { SignatureScheme } from '../../cryptography/signature-scheme.js';\nimport {\n\tparseDerSPKI,\n\tPASSKEY_PUBLIC_KEY_SIZE,\n\tPASSKEY_SIGNATURE_SIZE,\n\tPasskeyPublicKey,\n} from './publickey.js';\nimport type { AuthenticationCredential, RegistrationCredential } from './types.js';\n\ntype DeepPartialConfigKeys = 'rp' | 'user' | 'authenticatorSelection';\n\ntype DeepPartial<T> = T extends object\n\t? {\n\t\t\t[P in keyof T]?: DeepPartial<T[P]>;\n\t\t}\n\t: T;\n\nexport type BrowserPasswordProviderOptions = Pick<\n\tDeepPartial<PublicKeyCredentialCreationOptions>,\n\tDeepPartialConfigKeys\n> &\n\tOmit<\n\t\tPartial<PublicKeyCredentialCreationOptions>,\n\t\tDeepPartialConfigKeys | 'pubKeyCredParams' | 'challenge'\n\t>;\n\nexport interface PasskeyProvider {\n\tcreate(): Promise<RegistrationCredential>;\n\tget(challenge: Uint8Array, credentialId?: Uint8Array): Promise<AuthenticationCredential>;\n}\n\n// Default browser implementation\nexport class BrowserPasskeyProvider implements PasskeyProvider {\n\t#name: string;\n\t#options: BrowserPasswordProviderOptions;\n\n\tconstructor(name: string, options: BrowserPasswordProviderOptions) {\n\t\tthis.#name = name;\n\t\tthis.#options = options;\n\t}\n\n\tasync create(): Promise<RegistrationCredential> {\n\t\treturn (await navigator.credentials.create({\n\t\t\tpublicKey: {\n\t\t\t\ttimeout: this.#options.timeout ?? 60000,\n\t\t\t\t...this.#options,\n\t\t\t\trp: {\n\t\t\t\t\tname: this.#name,\n\t\t\t\t\t...this.#options.rp,\n\t\t\t\t},\n\t\t\t\tuser: {\n\t\t\t\t\tname: this.#name,\n\t\t\t\t\tdisplayName: this.#name,\n\t\t\t\t\t...this.#options.user,\n\t\t\t\t\tid: randomBytes(10) as BufferSource,\n\t\t\t\t},\n\t\t\t\tchallenge: new TextEncoder().encode('Create passkey wallet on Haneul'),\n\t\t\t\tpubKeyCredParams: [{ alg: -7, type: 'public-key' }],\n\t\t\t\tauthenticatorSelection: {\n\t\t\t\t\tauthenticatorAttachment: 'cross-platform',\n\t\t\t\t\tresidentKey: 'required',\n\t\t\t\t\trequireResidentKey: true,\n\t\t\t\t\tuserVerification: 'required',\n\t\t\t\t\t...this.#options.authenticatorSelection,\n\t\t\t\t},\n\t\t\t},\n\t\t})) as RegistrationCredential;\n\t}\n\n\tasync get(challenge: Uint8Array, credentialId?: Uint8Array): Promise<AuthenticationCredential> {\n\t\treturn (await navigator.credentials.get({\n\t\t\tpublicKey: {\n\t\t\t\tchallenge: challenge as BufferSource,\n\t\t\t\tuserVerification: this.#options.authenticatorSelection?.userVerification || 'required',\n\t\t\t\ttimeout: this.#options.timeout ?? 60000,\n\t\t\t\t...(credentialId && {\n\t\t\t\t\tallowCredentials: [{ type: 'public-key' as const, id: credentialId as BufferSource }],\n\t\t\t\t}),\n\t\t\t},\n\t\t})) as AuthenticationCredential;\n\t}\n}\n\n/**\n * @experimental\n * A passkey signer used for signing transactions. This is a client side implementation for [SIP-9](https://github.com/haneul-foundation/sips/blob/main/sips/sip-9.md).\n */\nexport class PasskeyKeypair extends Signer {\n\tprivate publicKey: Uint8Array;\n\tprivate provider: PasskeyProvider;\n\tprivate credentialId?: Uint8Array;\n\n\t/**\n\t * Get the key scheme of passkey,\n\t */\n\tgetKeyScheme(): SignatureScheme {\n\t\treturn 'Passkey';\n\t}\n\n\t/**\n\t * Creates an instance of Passkey signer. If no passkey wallet had created before,\n\t * use `getPasskeyInstance`. For example:\n\t * ```\n\t * let provider = new BrowserPasskeyProvider('Haneul Passkey Example',{\n\t * \t  rpName: 'Haneul Passkey Example',\n\t * \t  rpId: window.location.hostname,\n\t * } as BrowserPasswordProviderOptions);\n\t * const signer = await PasskeyKeypair.getPasskeyInstance(provider);\n\t * ```\n\t *\n\t * If there are existing passkey wallet, use `signAndRecover` to identify the correct\n\t * public key and then initialize the instance. See usage in `signAndRecover`.\n\t */\n\tconstructor(publicKey: Uint8Array, provider: PasskeyProvider, credentialId?: Uint8Array) {\n\t\tsuper();\n\t\tthis.publicKey = publicKey;\n\t\tthis.provider = provider;\n\t\tthis.credentialId = credentialId;\n\t}\n\n\t/**\n\t * Return the credential ID for this passkey, if available.\n\t * The credential ID is captured when creating a new passkey via `getPasskeyInstance`\n\t * and can be used to constrain which credential the browser selects during signing.\n\t */\n\tgetCredentialId(): Uint8Array | undefined {\n\t\treturn this.credentialId;\n\t}\n\n\t/**\n\t * Creates an instance of Passkey signer invoking the passkey from navigator.\n\t * Note that this will invoke the passkey device to create a fresh credential.\n\t * Should only be called if passkey wallet is created for the first time.\n\t *\n\t * @param provider - the passkey provider.\n\t * @returns the passkey instance.\n\t */\n\tstatic async getPasskeyInstance(provider: PasskeyProvider): Promise<PasskeyKeypair> {\n\t\t// create a passkey secp256r1 with the provider.\n\t\tconst credential = await provider.create();\n\n\t\tif (!credential.response.getPublicKey()) {\n\t\t\tthrow new Error('Invalid credential create response');\n\t\t} else {\n\t\t\tconst derSPKI = credential.response.getPublicKey()!;\n\t\t\tconst pubkeyUncompressed = parseDerSPKI(new Uint8Array(derSPKI));\n\t\t\tconst pubkey = secp256r1.Point.fromBytes(pubkeyUncompressed);\n\t\t\tconst pubkeyCompressed = pubkey.toBytes(true);\n\t\t\treturn new PasskeyKeypair(pubkeyCompressed, provider, new Uint8Array(credential.rawId));\n\t\t}\n\t}\n\n\t/**\n\t * Return the public key for this passkey.\n\t */\n\tgetPublicKey(): PublicKey {\n\t\treturn new PasskeyPublicKey(this.publicKey);\n\t}\n\n\t/**\n\t * Return the signature for the provided data (i.e. blake2b(intent_message)).\n\t * This is sent to passkey as the challenge field.\n\t */\n\tasync sign(data: Uint8Array) {\n\t\t// asks the passkey to sign over challenge as the data.\n\t\tconst credential = await this.provider.get(data, this.credentialId);\n\n\t\t// parse authenticatorData (as bytes), clientDataJSON (decoded as string).\n\t\tconst authenticatorData = new Uint8Array(credential.response.authenticatorData);\n\t\tconst clientDataJSON = new Uint8Array(credential.response.clientDataJSON); // response.clientDataJSON is already UTF-8 encoded JSON\n\t\tconst decoder = new TextDecoder();\n\t\tconst clientDataJSONString: string = decoder.decode(clientDataJSON);\n\n\t\tconst sig = secp256r1.Signature.fromBytes(new Uint8Array(credential.response.signature), 'der');\n\t\tconst normalizedSig = sig.hasHighS()\n\t\t\t? new secp256r1.Signature(sig.r, secp256r1.Point.Fn.neg(sig.s))\n\t\t\t: sig;\n\n\t\tconst normalized = normalizedSig.toBytes('compact');\n\n\t\tif (\n\t\t\tnormalized.length !== PASSKEY_SIGNATURE_SIZE ||\n\t\t\tthis.publicKey.length !== PASSKEY_PUBLIC_KEY_SIZE\n\t\t) {\n\t\t\tthrow new Error('Invalid signature or public key length');\n\t\t}\n\n\t\t// construct userSignature as flag || sig || pubkey for the secp256r1 signature.\n\t\tconst arr = new Uint8Array(1 + normalized.length + this.publicKey.length);\n\t\tarr.set([SIGNATURE_SCHEME_TO_FLAG['Secp256r1']]);\n\t\tarr.set(normalized, 1);\n\t\tarr.set(this.publicKey, 1 + normalized.length);\n\n\t\t// serialize all fields into a passkey signature according to https://github.com/haneul-foundation/sips/blob/main/sips/sip-9.md#signature-encoding\n\t\treturn PasskeyAuthenticator.serialize({\n\t\t\tauthenticatorData: authenticatorData,\n\t\t\tclientDataJson: clientDataJSONString,\n\t\t\tuserSignature: arr,\n\t\t}).toBytes();\n\t}\n\n\t/**\n\t * This overrides the base class implementation that accepts the raw bytes and signs its\n\t * digest of the intent message, then serialize it with the passkey flag.\n\t */\n\tasync signWithIntent(bytes: Uint8Array, intent: IntentScope): Promise<SignatureWithBytes> {\n\t\t// prepend it into an intent message and computes the digest.\n\t\tconst intentMessage = messageWithIntent(intent, bytes);\n\t\tconst digest = blake2b(intentMessage, { dkLen: 32 });\n\n\t\t// sign the digest.\n\t\tconst signature = await this.sign(digest);\n\n\t\t// prepend with the passkey flag.\n\t\tconst serializedSignature = new Uint8Array(1 + signature.length);\n\t\tserializedSignature.set([SIGNATURE_SCHEME_TO_FLAG[this.getKeyScheme()]]);\n\t\tserializedSignature.set(signature, 1);\n\t\treturn {\n\t\t\tsignature: toBase64(serializedSignature),\n\t\t\tbytes: toBase64(bytes),\n\t\t};\n\t}\n\n\t/**\n\t * Given a message, asks the passkey device to sign it and return all (up to 4) possible public keys.\n\t * See: https://bitcoin.stackexchange.com/questions/81232/how-is-public-key-extracted-from-message-digital-signature-address\n\t *\n\t * This is useful if the user previously created passkey wallet with the origin, but the wallet session\n\t * does not have the public key / address. By calling this method twice with two different messages, the\n\t * wallet can compare the returned public keys and uniquely identify the previously created passkey wallet\n\t * using `findCommonPublicKey`.\n\t *\n\t * Alternatively, one call can be made and all possible public keys should be checked onchain to see if\n\t * there is any assets.\n\t *\n\t * Once the correct public key is identified, a passkey instance can then be initialized with this public key.\n\t *\n\t * Example usage to recover wallet with two signing calls:\n\t * ```\n\t * let provider = new BrowserPasskeyProvider('Haneul Passkey Example',{\n\t *     rpName: 'Haneul Passkey Example',\n\t * \t   rpId: window.location.hostname,\n\t * } as BrowserPasswordProviderOptions);\n\t * const testMessage = new TextEncoder().encode('Hello world!');\n\t * const possiblePks = await PasskeyKeypair.signAndRecover(provider, testMessage);\n\t * const testMessage2 = new TextEncoder().encode('Hello world 2!');\n\t * const possiblePks2 = await PasskeyKeypair.signAndRecover(provider, testMessage2);\n\t * const commonPk = findCommonPublicKey(possiblePks, possiblePks2);\n\t * const signer = new PasskeyKeypair(commonPk.toRawBytes(), provider);\n\t * ```\n\t *\n\t * @param provider - the passkey provider.\n\t * @param message - the message to sign.\n\t * @returns all possible public keys.\n\t */\n\tstatic async signAndRecover(\n\t\tprovider: PasskeyProvider,\n\t\tmessage: Uint8Array,\n\t): Promise<PublicKey[]> {\n\t\tconst credential = await provider.get(message);\n\t\tconst fullMessage = messageFromAssertionResponse(credential.response);\n\t\tconst sig = secp256r1.Signature.fromBytes(new Uint8Array(credential.response.signature), 'der');\n\n\t\tconst res = [];\n\t\tconst msgHash = sha256(fullMessage);\n\t\tfor (let i = 0; i < 4; i++) {\n\t\t\tconst s = sig.addRecoveryBit(i);\n\t\t\ttry {\n\t\t\t\tconst pubkey = s.recoverPublicKey(msgHash);\n\t\t\t\tconst pk = new PasskeyPublicKey(pubkey.toBytes(true));\n\t\t\t\tres.push(pk);\n\t\t\t} catch {\n\t\t\t\tcontinue;\n\t\t\t}\n\t\t}\n\t\treturn res;\n\t}\n}\n\n/**\n * Finds the unique public key that exists in both arrays, throws error if the common\n * pubkey does not equal to one.\n *\n * @param arr1 - The first pubkeys array.\n * @param arr2 - The second pubkeys array.\n * @returns The only common pubkey in both arrays.\n */\nexport function findCommonPublicKey(arr1: PublicKey[], arr2: PublicKey[]): PublicKey {\n\tconst matchingPubkeys: PublicKey[] = [];\n\tfor (const pubkey1 of arr1) {\n\t\tfor (const pubkey2 of arr2) {\n\t\t\tif (pubkey1.equals(pubkey2)) {\n\t\t\t\tmatchingPubkeys.push(pubkey1);\n\t\t\t}\n\t\t}\n\t}\n\tif (matchingPubkeys.length !== 1) {\n\t\tthrow new Error('No unique public key found');\n\t}\n\treturn matchingPubkeys[0];\n}\n\n/**\n * Constructs the message that the passkey signature is produced over as authenticatorData || sha256(clientDataJSON).\n */\nfunction messageFromAssertionResponse(response: AuthenticatorAssertionResponse): Uint8Array {\n\tconst authenticatorData = new Uint8Array(response.authenticatorData);\n\tconst clientDataJSON = new Uint8Array(response.clientDataJSON);\n\tconst clientDataJSONDigest = sha256(clientDataJSON);\n\treturn new Uint8Array([...authenticatorData, ...clientDataJSONDigest]);\n}\n"],"mappings":";;;;;;;;;;;;AA6CA,IAAa,yBAAb,MAA+D;CAC9D;CACA;CAEA,YAAY,MAAc,SAAyC;AAClE,QAAKA,OAAQ;AACb,QAAKC,UAAW;;CAGjB,MAAM,SAA0C;AAC/C,SAAQ,MAAM,UAAU,YAAY,OAAO,EAC1C,WAAW;GACV,SAAS,MAAKA,QAAS,WAAW;GAClC,GAAG,MAAKA;GACR,IAAI;IACH,MAAM,MAAKD;IACX,GAAG,MAAKC,QAAS;IACjB;GACD,MAAM;IACL,MAAM,MAAKD;IACX,aAAa,MAAKA;IAClB,GAAG,MAAKC,QAAS;IACjB,IAAI,YAAY,GAAG;IACnB;GACD,WAAW,IAAI,aAAa,CAAC,OAAO,kCAAkC;GACtE,kBAAkB,CAAC;IAAE,KAAK;IAAI,MAAM;IAAc,CAAC;GACnD,wBAAwB;IACvB,yBAAyB;IACzB,aAAa;IACb,oBAAoB;IACpB,kBAAkB;IAClB,GAAG,MAAKA,QAAS;IACjB;GACD,EACD,CAAC;;CAGH,MAAM,IAAI,WAAuB,cAA8D;AAC9F,SAAQ,MAAM,UAAU,YAAY,IAAI,EACvC,WAAW;GACC;GACX,kBAAkB,MAAKA,QAAS,wBAAwB,oBAAoB;GAC5E,SAAS,MAAKA,QAAS,WAAW;GAClC,GAAI,gBAAgB,EACnB,kBAAkB,CAAC;IAAE,MAAM;IAAuB,IAAI;IAA8B,CAAC,EACrF;GACD,EACD,CAAC;;;;;;;AAQJ,IAAa,iBAAb,MAAa,uBAAuB,OAAO;;;;CAQ1C,eAAgC;AAC/B,SAAO;;;;;;;;;;;;;;;;CAiBR,YAAY,WAAuB,UAA2B,cAA2B;AACxF,SAAO;AACP,OAAK,YAAY;AACjB,OAAK,WAAW;AAChB,OAAK,eAAe;;;;;;;CAQrB,kBAA0C;AACzC,SAAO,KAAK;;;;;;;;;;CAWb,aAAa,mBAAmB,UAAoD;EAEnF,MAAM,aAAa,MAAM,SAAS,QAAQ;AAE1C,MAAI,CAAC,WAAW,SAAS,cAAc,CACtC,OAAM,IAAI,MAAM,qCAAqC;OAC/C;GACN,MAAM,UAAU,WAAW,SAAS,cAAc;GAClD,MAAM,qBAAqB,aAAa,IAAI,WAAW,QAAQ,CAAC;AAGhE,UAAO,IAAI,eAFIC,KAAU,MAAM,UAAU,mBAAmB,CAC5B,QAAQ,KAAK,EACD,UAAU,IAAI,WAAW,WAAW,MAAM,CAAC;;;;;;CAOzF,eAA0B;AACzB,SAAO,IAAI,iBAAiB,KAAK,UAAU;;;;;;CAO5C,MAAM,KAAK,MAAkB;EAE5B,MAAM,aAAa,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,aAAa;EAGnE,MAAM,oBAAoB,IAAI,WAAW,WAAW,SAAS,kBAAkB;EAC/E,MAAM,iBAAiB,IAAI,WAAW,WAAW,SAAS,eAAe;EAEzE,MAAM,uBADU,IAAI,aAAa,CACY,OAAO,eAAe;EAEnE,MAAM,MAAMA,KAAU,UAAU,UAAU,IAAI,WAAW,WAAW,SAAS,UAAU,EAAE,MAAM;EAK/F,MAAM,cAJgB,IAAI,UAAU,GACjC,IAAIA,KAAU,UAAU,IAAI,GAAGA,KAAU,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC,GAC7D,KAE8B,QAAQ,UAAU;AAEnD,MACC,WAAW,WAAW,0BACtB,KAAK,UAAU,WAAW,wBAE1B,OAAM,IAAI,MAAM,yCAAyC;EAI1D,MAAM,MAAM,IAAI,WAAW,IAAI,WAAW,SAAS,KAAK,UAAU,OAAO;AACzE,MAAI,IAAI,CAAC,yBAAyB,aAAa,CAAC;AAChD,MAAI,IAAI,YAAY,EAAE;AACtB,MAAI,IAAI,KAAK,WAAW,IAAI,WAAW,OAAO;AAG9C,SAAO,qBAAqB,UAAU;GAClB;GACnB,gBAAgB;GAChB,eAAe;GACf,CAAC,CAAC,SAAS;;;;;;CAOb,MAAM,eAAe,OAAmB,QAAkD;EAGzF,MAAM,SAAS,QADO,kBAAkB,QAAQ,MAAM,EAChB,EAAE,OAAO,IAAI,CAAC;EAGpD,MAAM,YAAY,MAAM,KAAK,KAAK,OAAO;EAGzC,MAAM,sBAAsB,IAAI,WAAW,IAAI,UAAU,OAAO;AAChE,sBAAoB,IAAI,CAAC,yBAAyB,KAAK,cAAc,EAAE,CAAC;AACxE,sBAAoB,IAAI,WAAW,EAAE;AACrC,SAAO;GACN,WAAW,SAAS,oBAAoB;GACxC,OAAO,SAAS,MAAM;GACtB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAmCF,aAAa,eACZ,UACA,SACuB;EACvB,MAAM,aAAa,MAAM,SAAS,IAAI,QAAQ;EAC9C,MAAM,cAAc,6BAA6B,WAAW,SAAS;EACrE,MAAM,MAAMA,KAAU,UAAU,UAAU,IAAI,WAAW,WAAW,SAAS,UAAU,EAAE,MAAM;EAE/F,MAAM,MAAM,EAAE;EACd,MAAM,UAAU,OAAO,YAAY;AACnC,OAAK,IAAI,IAAI,GAAG,IAAI,GAAG,KAAK;GAC3B,MAAM,IAAI,IAAI,eAAe,EAAE;AAC/B,OAAI;IAEH,MAAM,KAAK,IAAI,iBADA,EAAE,iBAAiB,QAAQ,CACH,QAAQ,KAAK,CAAC;AACrD,QAAI,KAAK,GAAG;WACL;AACP;;;AAGF,SAAO;;;;;;;;;;;AAYT,SAAgB,oBAAoB,MAAmB,MAA8B;CACpF,MAAM,kBAA+B,EAAE;AACvC,MAAK,MAAM,WAAW,KACrB,MAAK,MAAM,WAAW,KACrB,KAAI,QAAQ,OAAO,QAAQ,CAC1B,iBAAgB,KAAK,QAAQ;AAIhC,KAAI,gBAAgB,WAAW,EAC9B,OAAM,IAAI,MAAM,6BAA6B;AAE9C,QAAO,gBAAgB;;;;;AAMxB,SAAS,6BAA6B,UAAsD;CAC3F,MAAM,oBAAoB,IAAI,WAAW,SAAS,kBAAkB;CAEpE,MAAM,uBAAuB,OADN,IAAI,WAAW,SAAS,eAAe,CACX;AACnD,QAAO,IAAI,WAAW,CAAC,GAAG,mBAAmB,GAAG,qBAAqB,CAAC"}

package/dist/keypairs/passkey/publickey.d.mts

@@ -1,7 +1,6 @@
 import { PublicKey, PublicKeyInitData } from "../../cryptography/publickey.mjs";
 
 //#region src/keypairs/passkey/publickey.d.ts
-
 /**
  * A passkey public key
  */

package/dist/keypairs/passkey/publickey.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"publickey.d.mts","names":[],"sources":["../../../src/keypairs/passkey/publickey.ts"],"sourcesContent":[],"mappings":";;;;;;;cAiEa,gBAAA,SAAyB,SAAA;;;;;;;qBAQlB;;;;oBAqBQ;;;;gBAOb,WAAW;;;;;;;;kBAcH,uBAAuB,sBAAsB"}
+{"version":3,"file":"publickey.d.mts","names":[],"sources":["../../../src/keypairs/passkey/publickey.ts"],"mappings":";;;;;;cAiEa,gBAAA,SAAyB,SAAA;EAAA,OAC9B,IAAA;EAAA,QACC,IAAA;EAgDc;;;;cA1CV,KAAA,EAAO,iBAAA;EA0CuD;;;EArBjE,MAAA,CAAO,SAAA,EAAW,gBAAA;;;;EAO3B,UAAA,CAAA,GAAc,UAAA,CAAW,WAAA;;;;EAOzB,IAAA,CAAA;;;;EAOM,MAAA,CAAO,OAAA,EAAS,UAAA,EAAY,SAAA,EAAW,UAAA,YAAsB,OAAA;AAAA"}

package/dist/keypairs/passkey/types.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.mts","names":[],"sources":["../../../src/keypairs/passkey/types.ts"],"sourcesContent":[],"mappings":";;AAMA;AAOA;UAPiB,wBAAA,SAAiC;YACvC;;;;;UAMM,sBAAA,SAA+B;YACrC"}
+{"version":3,"file":"types.d.mts","names":[],"sources":["../../../src/keypairs/passkey/types.ts"],"mappings":";;AAMA;;UAAiB,wBAAA,SAAiC,mBAAA;EACjD,QAAA,EAAU,8BAAA;AAAA;;;;UAMM,sBAAA,SAA+B,mBAAA;EAC/C,QAAA,EAAU,gCAAA;AAAA"}

package/dist/keypairs/secp256k1/keypair.d.mts

@@ -3,7 +3,7 @@ import { SignatureScheme } from "../../cryptography/signature-scheme.mjs";
 import { Keypair } from "../../cryptography/keypair.mjs";
 
 //#region src/keypairs/secp256k1/keypair.d.ts
-declare const DEFAULT_SECP256K1_DERIVATION_PATH = "m/54'/784'/0'/0/0";
+declare const DEFAULT_SECP256K1_DERIVATION_PATH = "m/54'/8282'/0'/0/0";
 /**
  * Secp256k1 Keypair data
  */
@@ -68,8 +68,8 @@ declare class Secp256k1Keypair extends Keypair {
    * Derive Secp256k1 keypair from mnemonics and path. The mnemonics must be normalized
    * and validated against the english wordlist.
    *
-   * If path is none, it will default to m/54'/784'/0'/0/0, otherwise the path must
-   * be compliant to BIP-32 in form m/54'/784'/{account_index}'/{change_index}/{address_index}.
+   * If path is none, it will default to m/54'/8282'/0'/0/0, otherwise the path must
+   * be compliant to BIP-32 in form m/54'/8282'/{account_index}'/{change_index}/{address_index}.
    */
   static deriveKeypair(mnemonics: string, path?: string): Secp256k1Keypair;
 }

package/dist/keypairs/secp256k1/keypair.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"keypair.d.mts","names":[],"sources":["../../../src/keypairs/secp256k1/keypair.ts"],"sourcesContent":[],"mappings":";;;;;cAaa,iCAAA;;AAAb;AAKA;AAQa,UARI,oBAAA,CAQa;EASP,SAAA,EAhBX,UAgBW;EAeN,SAAA,EA9BL,UA8BK;;;;;AAyDmB,cAjFvB,gBAAA,SAAyB,OAAA,CAiFF;EAQnB,QAAA,OAAA;EAaC;;;;;;EAtG2B,WAAA,CAAA,OAAA,CAAA,EAStB,oBATsB;;;;kBAwB5B;;;;qBAOG;;;;;;;;;;;;;kCAkBP;;MAET;;;;;;wBA8BmB,aAAa;;;;kBAQnB;;;;;;;;aAaC,aAAU,QAAA,WAAA;;;;;;;;0DAa6B"}
+{"version":3,"file":"keypair.d.mts","names":[],"sources":["../../../src/keypairs/secp256k1/keypair.ts"],"mappings":";;;;;cAaa,iCAAA;;AAAb;;UAKiB,oBAAA;EAChB,SAAA,EAAW,UAAA;EACX,SAAA,EAAW,UAAA;AAAA;;;;cAMC,gBAAA,SAAyB,OAAA;EAAA,QAC7B,OAAA;EAPR;;;;AAMD;;cASa,OAAA,GAAU,oBAAA;EAAA;;;EAetB,YAAA,CAAA,GAAgB,eAAA;EA2Bb;;;EAAA,OApBI,QAAA,CAAA,GAAY,gBAAA;EAuEF;;;;;;;;;;;;EAAA,OAtDV,aAAA,CACN,SAAA,EAAW,UAAA,WACX,OAAA;IAAY,cAAA;EAAA,IACV,gBAAA;EApBI;;;;;EAAA,OAkDA,QAAA,CAAS,IAAA,EAAM,UAAA,GAAa,gBAAA;EA/BlC;;;EAuCD,YAAA,CAAA,GAAgB,SAAA;EARA;;;EAchB,YAAA,CAAA;EAAA;;;EAOM,IAAA,CAAK,IAAA,EAAM,UAAA,GAAU,OAAA,CAAA,UAAA,CAAA,WAAA;EAAA;;;;;;;EAAA,OAapB,aAAA,CAAc,SAAA,UAAmB,IAAA,YAAgB,gBAAA;AAAA"}

package/dist/keypairs/secp256k1/keypair.mjs

@@ -1,12 +1,12 @@
 import { isValidBIP32Path, mnemonicToSeed } from "../../cryptography/mnemonics.mjs";
-import { Keypair, decodeSuiPrivateKey, encodeSuiPrivateKey } from "../../cryptography/keypair.mjs";
+import { Keypair, decodeHaneulPrivateKey, encodeHaneulPrivateKey } from "../../cryptography/keypair.mjs";
 import { Secp256k1PublicKey } from "./publickey.mjs";
 import { blake2b } from "@noble/hashes/blake2.js";
 import { secp256k1 } from "@noble/curves/secp256k1.js";
 import { HDKey } from "@scure/bip32";
 
 //#region src/keypairs/secp256k1/keypair.ts
-const DEFAULT_SECP256K1_DERIVATION_PATH = "m/54'/784'/0'/0/0";
+const DEFAULT_SECP256K1_DERIVATION_PATH = "m/54'/8282'/0'/0/0";
 /**
 * An Secp256k1 Keypair used for signing transactions.
 */
@@ -54,7 +54,7 @@ var Secp256k1Keypair = class Secp256k1Keypair extends Keypair {
 	*/
 	static fromSecretKey(secretKey, options) {
 		if (typeof secretKey === "string") {
-			const decoded = decodeSuiPrivateKey(secretKey);
+			const decoded = decodeHaneulPrivateKey(secretKey);
 			if (decoded.scheme !== "Secp256k1") throw new Error(`Expected a Secp256k1 keypair, got ${decoded.scheme}`);
 			return this.fromSecretKey(decoded.secretKey, options);
 		}
@@ -93,7 +93,7 @@ var Secp256k1Keypair = class Secp256k1Keypair extends Keypair {
 	* The Bech32 secret key string for this Secp256k1 keypair
 	*/
 	getSecretKey() {
-		return encodeSuiPrivateKey(this.keypair.secretKey, this.getKeyScheme());
+		return encodeHaneulPrivateKey(this.keypair.secretKey, this.getKeyScheme());
 	}
 	/**
 	* Return the signature for the provided data.
@@ -105,8 +105,8 @@ var Secp256k1Keypair = class Secp256k1Keypair extends Keypair {
 	* Derive Secp256k1 keypair from mnemonics and path. The mnemonics must be normalized
 	* and validated against the english wordlist.
 	*
-	* If path is none, it will default to m/54'/784'/0'/0/0, otherwise the path must
-	* be compliant to BIP-32 in form m/54'/784'/{account_index}'/{change_index}/{address_index}.
+	* If path is none, it will default to m/54'/8282'/0'/0/0, otherwise the path must
+	* be compliant to BIP-32 in form m/54'/8282'/{account_index}'/{change_index}/{address_index}.
 	*/
 	static deriveKeypair(mnemonics, path) {
 		if (path == null) path = DEFAULT_SECP256K1_DERIVATION_PATH;

package/dist/keypairs/secp256k1/keypair.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"keypair.mjs","names":[],"sources":["../../../src/keypairs/secp256k1/keypair.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { secp256k1 } from '@noble/curves/secp256k1.js';\nimport { blake2b } from '@noble/hashes/blake2.js';\nimport { HDKey } from '@scure/bip32';\n\nimport { decodeSuiPrivateKey, encodeSuiPrivateKey, Keypair } from '../../cryptography/keypair.js';\nimport { isValidBIP32Path, mnemonicToSeed } from '../../cryptography/mnemonics.js';\nimport type { PublicKey } from '../../cryptography/publickey.js';\nimport type { SignatureScheme } from '../../cryptography/signature-scheme.js';\nimport { Secp256k1PublicKey } from './publickey.js';\n\nexport const DEFAULT_SECP256K1_DERIVATION_PATH = \"m/54'/784'/0'/0/0\";\n\n/**\n * Secp256k1 Keypair data\n */\nexport interface Secp256k1KeypairData {\n\tpublicKey: Uint8Array;\n\tsecretKey: Uint8Array;\n}\n\n/**\n * An Secp256k1 Keypair used for signing transactions.\n */\nexport class Secp256k1Keypair extends Keypair {\n\tprivate keypair: Secp256k1KeypairData;\n\n\t/**\n\t * Create a new keypair instance.\n\t * Generate random keypair if no {@link Secp256k1Keypair} is provided.\n\t *\n\t * @param keypair secp256k1 keypair\n\t */\n\tconstructor(keypair?: Secp256k1KeypairData) {\n\t\tsuper();\n\t\tif (keypair) {\n\t\t\tthis.keypair = keypair;\n\t\t} else {\n\t\t\tconst secretKey: Uint8Array = secp256k1.utils.randomSecretKey();\n\t\t\tconst publicKey: Uint8Array = secp256k1.getPublicKey(secretKey, true);\n\n\t\t\tthis.keypair = { publicKey, secretKey };\n\t\t}\n\t}\n\n\t/**\n\t * Get the key scheme of the keypair Secp256k1\n\t */\n\tgetKeyScheme(): SignatureScheme {\n\t\treturn 'Secp256k1';\n\t}\n\n\t/**\n\t * Generate a new random keypair\n\t */\n\tstatic generate(): Secp256k1Keypair {\n\t\treturn new Secp256k1Keypair();\n\t}\n\n\t/**\n\t * Create a keypair from a raw secret key byte array.\n\t *\n\t * This method should only be used to recreate a keypair from a previously\n\t * generated secret key. Generating keypairs from a random seed should be done\n\t * with the {@link Keypair.fromSeed} method.\n\t *\n\t * @throws error if the provided secret key is invalid and validation is not skipped.\n\t *\n\t * @param secretKey secret key byte array  or Bech32 secret key string\n\t * @param options: skip secret key validation\n\t */\n\n\tstatic fromSecretKey(\n\t\tsecretKey: Uint8Array | string,\n\t\toptions?: { skipValidation?: boolean },\n\t): Secp256k1Keypair {\n\t\tif (typeof secretKey === 'string') {\n\t\t\tconst decoded = decodeSuiPrivateKey(secretKey);\n\n\t\t\tif (decoded.scheme !== 'Secp256k1') {\n\t\t\t\tthrow new Error(`Expected a Secp256k1 keypair, got ${decoded.scheme}`);\n\t\t\t}\n\n\t\t\treturn this.fromSecretKey(decoded.secretKey, options);\n\t\t}\n\n\t\tconst publicKey: Uint8Array = secp256k1.getPublicKey(secretKey, true);\n\t\tif (!options || !options.skipValidation) {\n\t\t\tconst encoder = new TextEncoder();\n\t\t\tconst signData = encoder.encode('haneul validation');\n\t\t\tconst msgHash = blake2b(signData, { dkLen: 32 });\n\t\t\tconst signature = secp256k1.sign(msgHash, secretKey, { prehash: false });\n\n\t\t\tif (!secp256k1.verify(signature, msgHash, publicKey, { lowS: true, prehash: false })) {\n\t\t\t\tthrow new Error('Provided secretKey is invalid');\n\t\t\t}\n\t\t}\n\t\treturn new Secp256k1Keypair({ publicKey, secretKey });\n\t}\n\n\t/**\n\t * Generate a keypair from a 32 byte seed.\n\t *\n\t * @param seed seed byte array\n\t */\n\tstatic fromSeed(seed: Uint8Array): Secp256k1Keypair {\n\t\tconst publicKey = secp256k1.getPublicKey(seed, true);\n\t\treturn new Secp256k1Keypair({ publicKey, secretKey: seed });\n\t}\n\n\t/**\n\t * The public key for this keypair\n\t */\n\tgetPublicKey(): PublicKey {\n\t\treturn new Secp256k1PublicKey(this.keypair.publicKey);\n\t}\n\t/**\n\t * The Bech32 secret key string for this Secp256k1 keypair\n\t */\n\tgetSecretKey(): string {\n\t\treturn encodeSuiPrivateKey(this.keypair.secretKey, this.getKeyScheme());\n\t}\n\n\t/**\n\t * Return the signature for the provided data.\n\t */\n\tasync sign(data: Uint8Array) {\n\t\treturn secp256k1.sign(data, this.keypair.secretKey, {\n\t\t\tlowS: true,\n\t\t}) as Uint8Array<ArrayBuffer>;\n\t}\n\n\t/**\n\t * Derive Secp256k1 keypair from mnemonics and path. The mnemonics must be normalized\n\t * and validated against the english wordlist.\n\t *\n\t * If path is none, it will default to m/54'/784'/0'/0/0, otherwise the path must\n\t * be compliant to BIP-32 in form m/54'/784'/{account_index}'/{change_index}/{address_index}.\n\t */\n\tstatic deriveKeypair(mnemonics: string, path?: string): Secp256k1Keypair {\n\t\tif (path == null) {\n\t\t\tpath = DEFAULT_SECP256K1_DERIVATION_PATH;\n\t\t}\n\t\tif (!isValidBIP32Path(path)) {\n\t\t\tthrow new Error('Invalid derivation path');\n\t\t}\n\t\tconst key = HDKey.fromMasterSeed(mnemonicToSeed(mnemonics)).derive(path);\n\t\tif (key.publicKey == null || key.privateKey == null) {\n\t\t\tthrow new Error('Invalid key');\n\t\t}\n\t\treturn new Secp256k1Keypair({\n\t\t\tpublicKey: key.publicKey,\n\t\t\tsecretKey: key.privateKey,\n\t\t});\n\t}\n}\n"],"mappings":";;;;;;;;AAaA,MAAa,oCAAoC;;;;AAajD,IAAa,mBAAb,MAAa,yBAAyB,QAAQ;;;;;;;CAS7C,YAAY,SAAgC;AAC3C,SAAO;AACP,MAAI,QACH,MAAK,UAAU;OACT;GACN,MAAM,YAAwB,UAAU,MAAM,iBAAiB;AAG/D,QAAK,UAAU;IAAE,WAFa,UAAU,aAAa,WAAW,KAAK;IAEzC;IAAW;;;;;;CAOzC,eAAgC;AAC/B,SAAO;;;;;CAMR,OAAO,WAA6B;AACnC,SAAO,IAAI,kBAAkB;;;;;;;;;;;;;;CAgB9B,OAAO,cACN,WACA,SACmB;AACnB,MAAI,OAAO,cAAc,UAAU;GAClC,MAAM,UAAU,oBAAoB,UAAU;AAE9C,OAAI,QAAQ,WAAW,YACtB,OAAM,IAAI,MAAM,qCAAqC,QAAQ,SAAS;AAGvE,UAAO,KAAK,cAAc,QAAQ,WAAW,QAAQ;;EAGtD,MAAM,YAAwB,UAAU,aAAa,WAAW,KAAK;AACrE,MAAI,CAAC,WAAW,CAAC,QAAQ,gBAAgB;GAGxC,MAAM,UAAU,QAFA,IAAI,aAAa,CACR,OAAO,oBAAoB,EAClB,EAAE,OAAO,IAAI,CAAC;GAChD,MAAM,YAAY,UAAU,KAAK,SAAS,WAAW,EAAE,SAAS,OAAO,CAAC;AAExE,OAAI,CAAC,UAAU,OAAO,WAAW,SAAS,WAAW;IAAE,MAAM;IAAM,SAAS;IAAO,CAAC,CACnF,OAAM,IAAI,MAAM,gCAAgC;;AAGlD,SAAO,IAAI,iBAAiB;GAAE;GAAW;GAAW,CAAC;;;;;;;CAQtD,OAAO,SAAS,MAAoC;AAEnD,SAAO,IAAI,iBAAiB;GAAE,WADZ,UAAU,aAAa,MAAM,KAAK;GACX,WAAW;GAAM,CAAC;;;;;CAM5D,eAA0B;AACzB,SAAO,IAAI,mBAAmB,KAAK,QAAQ,UAAU;;;;;CAKtD,eAAuB;AACtB,SAAO,oBAAoB,KAAK,QAAQ,WAAW,KAAK,cAAc,CAAC;;;;;CAMxE,MAAM,KAAK,MAAkB;AAC5B,SAAO,UAAU,KAAK,MAAM,KAAK,QAAQ,WAAW,EACnD,MAAM,MACN,CAAC;;;;;;;;;CAUH,OAAO,cAAc,WAAmB,MAAiC;AACxE,MAAI,QAAQ,KACX,QAAO;AAER,MAAI,CAAC,iBAAiB,KAAK,CAC1B,OAAM,IAAI,MAAM,0BAA0B;EAE3C,MAAM,MAAM,MAAM,eAAe,eAAe,UAAU,CAAC,CAAC,OAAO,KAAK;AACxE,MAAI,IAAI,aAAa,QAAQ,IAAI,cAAc,KAC9C,OAAM,IAAI,MAAM,cAAc;AAE/B,SAAO,IAAI,iBAAiB;GAC3B,WAAW,IAAI;GACf,WAAW,IAAI;GACf,CAAC"}
+{"version":3,"file":"keypair.mjs","names":[],"sources":["../../../src/keypairs/secp256k1/keypair.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { secp256k1 } from '@noble/curves/secp256k1.js';\nimport { blake2b } from '@noble/hashes/blake2.js';\nimport { HDKey } from '@scure/bip32';\n\nimport { decodeHaneulPrivateKey, encodeHaneulPrivateKey, Keypair } from '../../cryptography/keypair.js';\nimport { isValidBIP32Path, mnemonicToSeed } from '../../cryptography/mnemonics.js';\nimport type { PublicKey } from '../../cryptography/publickey.js';\nimport type { SignatureScheme } from '../../cryptography/signature-scheme.js';\nimport { Secp256k1PublicKey } from './publickey.js';\n\nexport const DEFAULT_SECP256K1_DERIVATION_PATH = \"m/54'/8282'/0'/0/0\";\n\n/**\n * Secp256k1 Keypair data\n */\nexport interface Secp256k1KeypairData {\n\tpublicKey: Uint8Array;\n\tsecretKey: Uint8Array;\n}\n\n/**\n * An Secp256k1 Keypair used for signing transactions.\n */\nexport class Secp256k1Keypair extends Keypair {\n\tprivate keypair: Secp256k1KeypairData;\n\n\t/**\n\t * Create a new keypair instance.\n\t * Generate random keypair if no {@link Secp256k1Keypair} is provided.\n\t *\n\t * @param keypair secp256k1 keypair\n\t */\n\tconstructor(keypair?: Secp256k1KeypairData) {\n\t\tsuper();\n\t\tif (keypair) {\n\t\t\tthis.keypair = keypair;\n\t\t} else {\n\t\t\tconst secretKey: Uint8Array = secp256k1.utils.randomSecretKey();\n\t\t\tconst publicKey: Uint8Array = secp256k1.getPublicKey(secretKey, true);\n\n\t\t\tthis.keypair = { publicKey, secretKey };\n\t\t}\n\t}\n\n\t/**\n\t * Get the key scheme of the keypair Secp256k1\n\t */\n\tgetKeyScheme(): SignatureScheme {\n\t\treturn 'Secp256k1';\n\t}\n\n\t/**\n\t * Generate a new random keypair\n\t */\n\tstatic generate(): Secp256k1Keypair {\n\t\treturn new Secp256k1Keypair();\n\t}\n\n\t/**\n\t * Create a keypair from a raw secret key byte array.\n\t *\n\t * This method should only be used to recreate a keypair from a previously\n\t * generated secret key. Generating keypairs from a random seed should be done\n\t * with the {@link Keypair.fromSeed} method.\n\t *\n\t * @throws error if the provided secret key is invalid and validation is not skipped.\n\t *\n\t * @param secretKey secret key byte array  or Bech32 secret key string\n\t * @param options: skip secret key validation\n\t */\n\n\tstatic fromSecretKey(\n\t\tsecretKey: Uint8Array | string,\n\t\toptions?: { skipValidation?: boolean },\n\t): Secp256k1Keypair {\n\t\tif (typeof secretKey === 'string') {\n\t\t\tconst decoded = decodeHaneulPrivateKey(secretKey);\n\n\t\t\tif (decoded.scheme !== 'Secp256k1') {\n\t\t\t\tthrow new Error(`Expected a Secp256k1 keypair, got ${decoded.scheme}`);\n\t\t\t}\n\n\t\t\treturn this.fromSecretKey(decoded.secretKey, options);\n\t\t}\n\n\t\tconst publicKey: Uint8Array = secp256k1.getPublicKey(secretKey, true);\n\t\tif (!options || !options.skipValidation) {\n\t\t\tconst encoder = new TextEncoder();\n\t\t\tconst signData = encoder.encode('haneul validation');\n\t\t\tconst msgHash = blake2b(signData, { dkLen: 32 });\n\t\t\tconst signature = secp256k1.sign(msgHash, secretKey, { prehash: false });\n\n\t\t\tif (!secp256k1.verify(signature, msgHash, publicKey, { lowS: true, prehash: false })) {\n\t\t\t\tthrow new Error('Provided secretKey is invalid');\n\t\t\t}\n\t\t}\n\t\treturn new Secp256k1Keypair({ publicKey, secretKey });\n\t}\n\n\t/**\n\t * Generate a keypair from a 32 byte seed.\n\t *\n\t * @param seed seed byte array\n\t */\n\tstatic fromSeed(seed: Uint8Array): Secp256k1Keypair {\n\t\tconst publicKey = secp256k1.getPublicKey(seed, true);\n\t\treturn new Secp256k1Keypair({ publicKey, secretKey: seed });\n\t}\n\n\t/**\n\t * The public key for this keypair\n\t */\n\tgetPublicKey(): PublicKey {\n\t\treturn new Secp256k1PublicKey(this.keypair.publicKey);\n\t}\n\t/**\n\t * The Bech32 secret key string for this Secp256k1 keypair\n\t */\n\tgetSecretKey(): string {\n\t\treturn encodeHaneulPrivateKey(this.keypair.secretKey, this.getKeyScheme());\n\t}\n\n\t/**\n\t * Return the signature for the provided data.\n\t */\n\tasync sign(data: Uint8Array) {\n\t\treturn secp256k1.sign(data, this.keypair.secretKey, {\n\t\t\tlowS: true,\n\t\t}) as Uint8Array<ArrayBuffer>;\n\t}\n\n\t/**\n\t * Derive Secp256k1 keypair from mnemonics and path. The mnemonics must be normalized\n\t * and validated against the english wordlist.\n\t *\n\t * If path is none, it will default to m/54'/8282'/0'/0/0, otherwise the path must\n\t * be compliant to BIP-32 in form m/54'/8282'/{account_index}'/{change_index}/{address_index}.\n\t */\n\tstatic deriveKeypair(mnemonics: string, path?: string): Secp256k1Keypair {\n\t\tif (path == null) {\n\t\t\tpath = DEFAULT_SECP256K1_DERIVATION_PATH;\n\t\t}\n\t\tif (!isValidBIP32Path(path)) {\n\t\t\tthrow new Error('Invalid derivation path');\n\t\t}\n\t\tconst key = HDKey.fromMasterSeed(mnemonicToSeed(mnemonics)).derive(path);\n\t\tif (key.publicKey == null || key.privateKey == null) {\n\t\t\tthrow new Error('Invalid key');\n\t\t}\n\t\treturn new Secp256k1Keypair({\n\t\t\tpublicKey: key.publicKey,\n\t\t\tsecretKey: key.privateKey,\n\t\t});\n\t}\n}\n"],"mappings":";;;;;;;;AAaA,MAAa,oCAAoC;;;;AAajD,IAAa,mBAAb,MAAa,yBAAyB,QAAQ;;;;;;;CAS7C,YAAY,SAAgC;AAC3C,SAAO;AACP,MAAI,QACH,MAAK,UAAU;OACT;GACN,MAAM,YAAwB,UAAU,MAAM,iBAAiB;AAG/D,QAAK,UAAU;IAAE,WAFa,UAAU,aAAa,WAAW,KAAK;IAEzC;IAAW;;;;;;CAOzC,eAAgC;AAC/B,SAAO;;;;;CAMR,OAAO,WAA6B;AACnC,SAAO,IAAI,kBAAkB;;;;;;;;;;;;;;CAgB9B,OAAO,cACN,WACA,SACmB;AACnB,MAAI,OAAO,cAAc,UAAU;GAClC,MAAM,UAAU,uBAAuB,UAAU;AAEjD,OAAI,QAAQ,WAAW,YACtB,OAAM,IAAI,MAAM,qCAAqC,QAAQ,SAAS;AAGvE,UAAO,KAAK,cAAc,QAAQ,WAAW,QAAQ;;EAGtD,MAAM,YAAwB,UAAU,aAAa,WAAW,KAAK;AACrE,MAAI,CAAC,WAAW,CAAC,QAAQ,gBAAgB;GAGxC,MAAM,UAAU,QAFA,IAAI,aAAa,CACR,OAAO,oBAAoB,EAClB,EAAE,OAAO,IAAI,CAAC;GAChD,MAAM,YAAY,UAAU,KAAK,SAAS,WAAW,EAAE,SAAS,OAAO,CAAC;AAExE,OAAI,CAAC,UAAU,OAAO,WAAW,SAAS,WAAW;IAAE,MAAM;IAAM,SAAS;IAAO,CAAC,CACnF,OAAM,IAAI,MAAM,gCAAgC;;AAGlD,SAAO,IAAI,iBAAiB;GAAE;GAAW;GAAW,CAAC;;;;;;;CAQtD,OAAO,SAAS,MAAoC;AAEnD,SAAO,IAAI,iBAAiB;GAAE,WADZ,UAAU,aAAa,MAAM,KAAK;GACX,WAAW;GAAM,CAAC;;;;;CAM5D,eAA0B;AACzB,SAAO,IAAI,mBAAmB,KAAK,QAAQ,UAAU;;;;;CAKtD,eAAuB;AACtB,SAAO,uBAAuB,KAAK,QAAQ,WAAW,KAAK,cAAc,CAAC;;;;;CAM3E,MAAM,KAAK,MAAkB;AAC5B,SAAO,UAAU,KAAK,MAAM,KAAK,QAAQ,WAAW,EACnD,MAAM,MACN,CAAC;;;;;;;;;CAUH,OAAO,cAAc,WAAmB,MAAiC;AACxE,MAAI,QAAQ,KACX,QAAO;AAER,MAAI,CAAC,iBAAiB,KAAK,CAC1B,OAAM,IAAI,MAAM,0BAA0B;EAE3C,MAAM,MAAM,MAAM,eAAe,eAAe,UAAU,CAAC,CAAC,OAAO,KAAK;AACxE,MAAI,IAAI,aAAa,QAAQ,IAAI,cAAc,KAC9C,OAAM,IAAI,MAAM,cAAc;AAE/B,SAAO,IAAI,iBAAiB;GAC3B,WAAW,IAAI;GACf,WAAW,IAAI;GACf,CAAC"}

package/dist/keypairs/secp256k1/publickey.d.mts

@@ -1,7 +1,6 @@
 import { PublicKey, PublicKeyInitData } from "../../cryptography/publickey.mjs";
 
 //#region src/keypairs/secp256k1/publickey.d.ts
-
 /**
  * A Secp256k1 public key
  */

package/dist/keypairs/secp256k1/publickey.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"publickey.d.mts","names":[],"sources":["../../../src/keypairs/secp256k1/publickey.ts"],"sourcesContent":[],"mappings":";;;;;AAmBA;;AA6B4B,cA7Bf,kBAAA,SAA2B,SAAA,CA6BZ;EAOF,OAAA,IAAA,EAAA,MAAA;EAAX,QAAA,IAAA;EAcQ;;;;EAlD0B,WAAA,CAAA,KAAA,EAQ7B,iBAR6B;;;;oBA6BrB;;;;gBAOb,WAAW;;;;;;;;kBAcH,uBAAuB,sBAAsB"}
+{"version":3,"file":"publickey.d.mts","names":[],"sources":["../../../src/keypairs/secp256k1/publickey.ts"],"mappings":";;;;AAmBA;;cAAa,kBAAA,SAA2B,SAAA;EAAA,OAChC,IAAA;EAAA,QACC,IAAA;EAkCiB;;;;cA5Bb,KAAA,EAAO,iBAAA;EARoB;;;EA6B9B,MAAA,CAAO,SAAA,EAAW,kBAAA;EA5BpB;;;EAmCP,UAAA,CAAA,GAAc,UAAA,CAAW,WAAA;EA5Bb;;;EAmCZ,IAAA,CAAA;EAPA;;;EAcM,MAAA,CAAO,OAAA,EAAS,UAAA,EAAY,SAAA,EAAW,UAAA,YAAsB,OAAA;AAAA"}

package/dist/keypairs/secp256r1/keypair.d.mts

@@ -3,7 +3,7 @@ import { SignatureScheme } from "../../cryptography/signature-scheme.mjs";
 import { Keypair } from "../../cryptography/keypair.mjs";
 
 //#region src/keypairs/secp256r1/keypair.d.ts
-declare const DEFAULT_SECP256R1_DERIVATION_PATH = "m/74'/784'/0'/0/0";
+declare const DEFAULT_SECP256R1_DERIVATION_PATH = "m/74'/8282'/0'/0/0";
 /**
  * Secp256r1 Keypair data
  */
@@ -68,8 +68,8 @@ declare class Secp256r1Keypair extends Keypair {
    * Derive Secp256r1 keypair from mnemonics and path. The mnemonics must be normalized
    * and validated against the english wordlist.
    *
-   * If path is none, it will default to m/74'/784'/0'/0/0, otherwise the path must
-   * be compliant to BIP-32 in form m/74'/784'/{account_index}'/{change_index}/{address_index}.
+   * If path is none, it will default to m/74'/8282'/0'/0/0, otherwise the path must
+   * be compliant to BIP-32 in form m/74'/8282'/{account_index}'/{change_index}/{address_index}.
    */
   static deriveKeypair(mnemonics: string, path?: string): Secp256r1Keypair;
 }

package/dist/keypairs/secp256r1/keypair.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"keypair.d.mts","names":[],"sources":["../../../src/keypairs/secp256r1/keypair.ts"],"sourcesContent":[],"mappings":";;;;;cAaa,iCAAA;;AAAb;AAKA;AAQa,UARI,oBAAA,CAQa;EASP,SAAA,EAhBX,UAgBW;EAeN,SAAA,EA9BL,UA8BK;;;;;AAyDmB,cAjFvB,gBAAA,SAAyB,OAAA,CAiFF;EAQnB,QAAA,OAAA;EAcC;;;;;;EAvG2B,WAAA,CAAA,OAAA,CAAA,EAStB,oBATsB;;;;kBAwB5B;;;;qBAOG;;;;;;;;;;;;;kCAkBP;;MAET;;;;;;wBA8BmB,aAAa;;;;kBAQnB;;;;;;;;aAcC,aAAU,QAAA,WAAA;;;;;;;;0DAa6B"}
+{"version":3,"file":"keypair.d.mts","names":[],"sources":["../../../src/keypairs/secp256r1/keypair.ts"],"mappings":";;;;;cAaa,iCAAA;;AAAb;;UAKiB,oBAAA;EAChB,SAAA,EAAW,UAAA;EACX,SAAA,EAAW,UAAA;AAAA;;;;cAMC,gBAAA,SAAyB,OAAA;EAAA,QAC7B,OAAA;EAPR;;;;AAMD;;cASa,OAAA,GAAU,oBAAA;EAAA;;;EAetB,YAAA,CAAA,GAAgB,eAAA;EA2Bb;;;EAAA,OApBI,QAAA,CAAA,GAAY,gBAAA;EAwEF;;;;;;;;;;;;EAAA,OAvDV,aAAA,CACN,SAAA,EAAW,UAAA,WACX,OAAA;IAAY,cAAA;EAAA,IACV,gBAAA;EApBI;;;;;EAAA,OAkDA,QAAA,CAAS,IAAA,EAAM,UAAA,GAAa,gBAAA;EA/BlC;;;EAuCD,YAAA,CAAA,GAAgB,SAAA;EARA;;;EAehB,YAAA,CAAA;EAAA;;;EAOM,IAAA,CAAK,IAAA,EAAM,UAAA,GAAU,OAAA,CAAA,UAAA,CAAA,WAAA;EAAA;;;;;;;EAAA,OAapB,aAAA,CAAc,SAAA,UAAmB,IAAA,YAAgB,gBAAA;AAAA"}

package/dist/keypairs/secp256r1/keypair.mjs

@@ -1,12 +1,12 @@
 import { isValidBIP32Path, mnemonicToSeed } from "../../cryptography/mnemonics.mjs";
-import { Keypair, decodeSuiPrivateKey, encodeSuiPrivateKey } from "../../cryptography/keypair.mjs";
+import { Keypair, decodeHaneulPrivateKey, encodeHaneulPrivateKey } from "../../cryptography/keypair.mjs";
 import { Secp256r1PublicKey } from "./publickey.mjs";
 import { blake2b } from "@noble/hashes/blake2.js";
 import { p256 } from "@noble/curves/nist.js";
 import { HDKey } from "@scure/bip32";
 
 //#region src/keypairs/secp256r1/keypair.ts
-const DEFAULT_SECP256R1_DERIVATION_PATH = "m/74'/784'/0'/0/0";
+const DEFAULT_SECP256R1_DERIVATION_PATH = "m/74'/8282'/0'/0/0";
 /**
 * An Secp256r1 Keypair used for signing transactions.
 */
@@ -54,7 +54,7 @@ var Secp256r1Keypair = class Secp256r1Keypair extends Keypair {
 	*/
 	static fromSecretKey(secretKey, options) {
 		if (typeof secretKey === "string") {
-			const decoded = decodeSuiPrivateKey(secretKey);
+			const decoded = decodeHaneulPrivateKey(secretKey);
 			if (decoded.scheme !== "Secp256r1") throw new Error(`Expected a Secp256r1 keypair, got ${decoded.scheme}`);
 			return this.fromSecretKey(decoded.secretKey, options);
 		}
@@ -96,7 +96,7 @@ var Secp256r1Keypair = class Secp256r1Keypair extends Keypair {
 	* The Bech32 secret key string for this Secp256r1 keypair
 	*/
 	getSecretKey() {
-		return encodeSuiPrivateKey(this.keypair.secretKey, this.getKeyScheme());
+		return encodeHaneulPrivateKey(this.keypair.secretKey, this.getKeyScheme());
 	}
 	/**
 	* Return the signature for the provided data.
@@ -108,8 +108,8 @@ var Secp256r1Keypair = class Secp256r1Keypair extends Keypair {
 	* Derive Secp256r1 keypair from mnemonics and path. The mnemonics must be normalized
 	* and validated against the english wordlist.
 	*
-	* If path is none, it will default to m/74'/784'/0'/0/0, otherwise the path must
-	* be compliant to BIP-32 in form m/74'/784'/{account_index}'/{change_index}/{address_index}.
+	* If path is none, it will default to m/74'/8282'/0'/0/0, otherwise the path must
+	* be compliant to BIP-32 in form m/74'/8282'/{account_index}'/{change_index}/{address_index}.
 	*/
 	static deriveKeypair(mnemonics, path) {
 		if (path == null) path = DEFAULT_SECP256R1_DERIVATION_PATH;

package/dist/keypairs/secp256r1/keypair.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"keypair.mjs","names":["secp256r1"],"sources":["../../../src/keypairs/secp256r1/keypair.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { p256 as secp256r1 } from '@noble/curves/nist.js';\nimport { blake2b } from '@noble/hashes/blake2.js';\nimport { HDKey } from '@scure/bip32';\n\nimport { decodeSuiPrivateKey, encodeSuiPrivateKey, Keypair } from '../../cryptography/keypair.js';\nimport { isValidBIP32Path, mnemonicToSeed } from '../../cryptography/mnemonics.js';\nimport type { PublicKey } from '../../cryptography/publickey.js';\nimport type { SignatureScheme } from '../../cryptography/signature-scheme.js';\nimport { Secp256r1PublicKey } from './publickey.js';\n\nexport const DEFAULT_SECP256R1_DERIVATION_PATH = \"m/74'/784'/0'/0/0\";\n\n/**\n * Secp256r1 Keypair data\n */\nexport interface Secp256r1KeypairData {\n\tpublicKey: Uint8Array;\n\tsecretKey: Uint8Array;\n}\n\n/**\n * An Secp256r1 Keypair used for signing transactions.\n */\nexport class Secp256r1Keypair extends Keypair {\n\tprivate keypair: Secp256r1KeypairData;\n\n\t/**\n\t * Create a new keypair instance.\n\t * Generate random keypair if no {@link Secp256r1Keypair} is provided.\n\t *\n\t * @param keypair Secp256r1 keypair\n\t */\n\tconstructor(keypair?: Secp256r1KeypairData) {\n\t\tsuper();\n\t\tif (keypair) {\n\t\t\tthis.keypair = keypair;\n\t\t} else {\n\t\t\tconst secretKey: Uint8Array = secp256r1.utils.randomSecretKey();\n\t\t\tconst publicKey: Uint8Array = secp256r1.getPublicKey(secretKey, true);\n\n\t\t\tthis.keypair = { publicKey, secretKey };\n\t\t}\n\t}\n\n\t/**\n\t * Get the key scheme of the keypair Secp256r1\n\t */\n\tgetKeyScheme(): SignatureScheme {\n\t\treturn 'Secp256r1';\n\t}\n\n\t/**\n\t * Generate a new random keypair\n\t */\n\tstatic generate(): Secp256r1Keypair {\n\t\treturn new Secp256r1Keypair();\n\t}\n\n\t/**\n\t * Create a keypair from a raw secret key byte array.\n\t *\n\t * This method should only be used to recreate a keypair from a previously\n\t * generated secret key. Generating keypairs from a random seed should be done\n\t * with the {@link Keypair.fromSeed} method.\n\t *\n\t * @throws error if the provided secret key is invalid and validation is not skipped.\n\t *\n\t * @param secretKey secret key byte array or Bech32 secret key string\n\t * @param options: skip secret key validation\n\t */\n\n\tstatic fromSecretKey(\n\t\tsecretKey: Uint8Array | string,\n\t\toptions?: { skipValidation?: boolean },\n\t): Secp256r1Keypair {\n\t\tif (typeof secretKey === 'string') {\n\t\t\tconst decoded = decodeSuiPrivateKey(secretKey);\n\n\t\t\tif (decoded.scheme !== 'Secp256r1') {\n\t\t\t\tthrow new Error(`Expected a Secp256r1 keypair, got ${decoded.scheme}`);\n\t\t\t}\n\n\t\t\treturn this.fromSecretKey(decoded.secretKey, options);\n\t\t}\n\n\t\tconst publicKey: Uint8Array = secp256r1.getPublicKey(secretKey, true);\n\t\tif (!options || !options.skipValidation) {\n\t\t\tconst encoder = new TextEncoder();\n\t\t\tconst signData = encoder.encode('haneul validation');\n\t\t\tconst msgHash = blake2b(signData, { dkLen: 32 });\n\t\t\tconst signature = secp256r1.sign(msgHash, secretKey, { lowS: true, prehash: false });\n\n\t\t\tif (!secp256r1.verify(signature, msgHash, publicKey, { lowS: true, prehash: false })) {\n\t\t\t\tthrow new Error('Provided secretKey is invalid');\n\t\t\t}\n\t\t}\n\t\treturn new Secp256r1Keypair({ publicKey, secretKey });\n\t}\n\n\t/**\n\t * Generate a keypair from a 32 byte seed.\n\t *\n\t * @param seed seed byte array\n\t */\n\tstatic fromSeed(seed: Uint8Array): Secp256r1Keypair {\n\t\tconst publicKey = secp256r1.getPublicKey(seed, true);\n\t\treturn new Secp256r1Keypair({ publicKey, secretKey: seed });\n\t}\n\n\t/**\n\t * The public key for this keypair\n\t */\n\tgetPublicKey(): PublicKey {\n\t\treturn new Secp256r1PublicKey(this.keypair.publicKey);\n\t}\n\n\t/**\n\t * The Bech32 secret key string for this Secp256r1 keypair\n\t */\n\tgetSecretKey(): string {\n\t\treturn encodeSuiPrivateKey(this.keypair.secretKey, this.getKeyScheme());\n\t}\n\n\t/**\n\t * Return the signature for the provided data.\n\t */\n\tasync sign(data: Uint8Array) {\n\t\treturn secp256r1.sign(data, this.keypair.secretKey, {\n\t\t\tlowS: true,\n\t\t}) as Uint8Array<ArrayBuffer>;\n\t}\n\n\t/**\n\t * Derive Secp256r1 keypair from mnemonics and path. The mnemonics must be normalized\n\t * and validated against the english wordlist.\n\t *\n\t * If path is none, it will default to m/74'/784'/0'/0/0, otherwise the path must\n\t * be compliant to BIP-32 in form m/74'/784'/{account_index}'/{change_index}/{address_index}.\n\t */\n\tstatic deriveKeypair(mnemonics: string, path?: string): Secp256r1Keypair {\n\t\tif (path == null) {\n\t\t\tpath = DEFAULT_SECP256R1_DERIVATION_PATH;\n\t\t}\n\t\tif (!isValidBIP32Path(path)) {\n\t\t\tthrow new Error('Invalid derivation path');\n\t\t}\n\t\t// We use HDKey which is hardcoded to use Secp256k1 but since we only need the 32 bytes for the private key it's okay to use here as well.\n\t\tconst privateKey = HDKey.fromMasterSeed(mnemonicToSeed(mnemonics)).derive(path).privateKey;\n\t\treturn Secp256r1Keypair.fromSecretKey(privateKey!);\n\t}\n}\n"],"mappings":";;;;;;;;AAaA,MAAa,oCAAoC;;;;AAajD,IAAa,mBAAb,MAAa,yBAAyB,QAAQ;;;;;;;CAS7C,YAAY,SAAgC;AAC3C,SAAO;AACP,MAAI,QACH,MAAK,UAAU;OACT;GACN,MAAM,YAAwBA,KAAU,MAAM,iBAAiB;AAG/D,QAAK,UAAU;IAAE,WAFaA,KAAU,aAAa,WAAW,KAAK;IAEzC;IAAW;;;;;;CAOzC,eAAgC;AAC/B,SAAO;;;;;CAMR,OAAO,WAA6B;AACnC,SAAO,IAAI,kBAAkB;;;;;;;;;;;;;;CAgB9B,OAAO,cACN,WACA,SACmB;AACnB,MAAI,OAAO,cAAc,UAAU;GAClC,MAAM,UAAU,oBAAoB,UAAU;AAE9C,OAAI,QAAQ,WAAW,YACtB,OAAM,IAAI,MAAM,qCAAqC,QAAQ,SAAS;AAGvE,UAAO,KAAK,cAAc,QAAQ,WAAW,QAAQ;;EAGtD,MAAM,YAAwBA,KAAU,aAAa,WAAW,KAAK;AACrE,MAAI,CAAC,WAAW,CAAC,QAAQ,gBAAgB;GAGxC,MAAM,UAAU,QAFA,IAAI,aAAa,CACR,OAAO,oBAAoB,EAClB,EAAE,OAAO,IAAI,CAAC;GAChD,MAAM,YAAYA,KAAU,KAAK,SAAS,WAAW;IAAE,MAAM;IAAM,SAAS;IAAO,CAAC;AAEpF,OAAI,CAACA,KAAU,OAAO,WAAW,SAAS,WAAW;IAAE,MAAM;IAAM,SAAS;IAAO,CAAC,CACnF,OAAM,IAAI,MAAM,gCAAgC;;AAGlD,SAAO,IAAI,iBAAiB;GAAE;GAAW;GAAW,CAAC;;;;;;;CAQtD,OAAO,SAAS,MAAoC;AAEnD,SAAO,IAAI,iBAAiB;GAAE,WADZA,KAAU,aAAa,MAAM,KAAK;GACX,WAAW;GAAM,CAAC;;;;;CAM5D,eAA0B;AACzB,SAAO,IAAI,mBAAmB,KAAK,QAAQ,UAAU;;;;;CAMtD,eAAuB;AACtB,SAAO,oBAAoB,KAAK,QAAQ,WAAW,KAAK,cAAc,CAAC;;;;;CAMxE,MAAM,KAAK,MAAkB;AAC5B,SAAOA,KAAU,KAAK,MAAM,KAAK,QAAQ,WAAW,EACnD,MAAM,MACN,CAAC;;;;;;;;;CAUH,OAAO,cAAc,WAAmB,MAAiC;AACxE,MAAI,QAAQ,KACX,QAAO;AAER,MAAI,CAAC,iBAAiB,KAAK,CAC1B,OAAM,IAAI,MAAM,0BAA0B;EAG3C,MAAM,aAAa,MAAM,eAAe,eAAe,UAAU,CAAC,CAAC,OAAO,KAAK,CAAC;AAChF,SAAO,iBAAiB,cAAc,WAAY"}
+{"version":3,"file":"keypair.mjs","names":["secp256r1"],"sources":["../../../src/keypairs/secp256r1/keypair.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { p256 as secp256r1 } from '@noble/curves/nist.js';\nimport { blake2b } from '@noble/hashes/blake2.js';\nimport { HDKey } from '@scure/bip32';\n\nimport { decodeHaneulPrivateKey, encodeHaneulPrivateKey, Keypair } from '../../cryptography/keypair.js';\nimport { isValidBIP32Path, mnemonicToSeed } from '../../cryptography/mnemonics.js';\nimport type { PublicKey } from '../../cryptography/publickey.js';\nimport type { SignatureScheme } from '../../cryptography/signature-scheme.js';\nimport { Secp256r1PublicKey } from './publickey.js';\n\nexport const DEFAULT_SECP256R1_DERIVATION_PATH = \"m/74'/8282'/0'/0/0\";\n\n/**\n * Secp256r1 Keypair data\n */\nexport interface Secp256r1KeypairData {\n\tpublicKey: Uint8Array;\n\tsecretKey: Uint8Array;\n}\n\n/**\n * An Secp256r1 Keypair used for signing transactions.\n */\nexport class Secp256r1Keypair extends Keypair {\n\tprivate keypair: Secp256r1KeypairData;\n\n\t/**\n\t * Create a new keypair instance.\n\t * Generate random keypair if no {@link Secp256r1Keypair} is provided.\n\t *\n\t * @param keypair Secp256r1 keypair\n\t */\n\tconstructor(keypair?: Secp256r1KeypairData) {\n\t\tsuper();\n\t\tif (keypair) {\n\t\t\tthis.keypair = keypair;\n\t\t} else {\n\t\t\tconst secretKey: Uint8Array = secp256r1.utils.randomSecretKey();\n\t\t\tconst publicKey: Uint8Array = secp256r1.getPublicKey(secretKey, true);\n\n\t\t\tthis.keypair = { publicKey, secretKey };\n\t\t}\n\t}\n\n\t/**\n\t * Get the key scheme of the keypair Secp256r1\n\t */\n\tgetKeyScheme(): SignatureScheme {\n\t\treturn 'Secp256r1';\n\t}\n\n\t/**\n\t * Generate a new random keypair\n\t */\n\tstatic generate(): Secp256r1Keypair {\n\t\treturn new Secp256r1Keypair();\n\t}\n\n\t/**\n\t * Create a keypair from a raw secret key byte array.\n\t *\n\t * This method should only be used to recreate a keypair from a previously\n\t * generated secret key. Generating keypairs from a random seed should be done\n\t * with the {@link Keypair.fromSeed} method.\n\t *\n\t * @throws error if the provided secret key is invalid and validation is not skipped.\n\t *\n\t * @param secretKey secret key byte array or Bech32 secret key string\n\t * @param options: skip secret key validation\n\t */\n\n\tstatic fromSecretKey(\n\t\tsecretKey: Uint8Array | string,\n\t\toptions?: { skipValidation?: boolean },\n\t): Secp256r1Keypair {\n\t\tif (typeof secretKey === 'string') {\n\t\t\tconst decoded = decodeHaneulPrivateKey(secretKey);\n\n\t\t\tif (decoded.scheme !== 'Secp256r1') {\n\t\t\t\tthrow new Error(`Expected a Secp256r1 keypair, got ${decoded.scheme}`);\n\t\t\t}\n\n\t\t\treturn this.fromSecretKey(decoded.secretKey, options);\n\t\t}\n\n\t\tconst publicKey: Uint8Array = secp256r1.getPublicKey(secretKey, true);\n\t\tif (!options || !options.skipValidation) {\n\t\t\tconst encoder = new TextEncoder();\n\t\t\tconst signData = encoder.encode('haneul validation');\n\t\t\tconst msgHash = blake2b(signData, { dkLen: 32 });\n\t\t\tconst signature = secp256r1.sign(msgHash, secretKey, { lowS: true, prehash: false });\n\n\t\t\tif (!secp256r1.verify(signature, msgHash, publicKey, { lowS: true, prehash: false })) {\n\t\t\t\tthrow new Error('Provided secretKey is invalid');\n\t\t\t}\n\t\t}\n\t\treturn new Secp256r1Keypair({ publicKey, secretKey });\n\t}\n\n\t/**\n\t * Generate a keypair from a 32 byte seed.\n\t *\n\t * @param seed seed byte array\n\t */\n\tstatic fromSeed(seed: Uint8Array): Secp256r1Keypair {\n\t\tconst publicKey = secp256r1.getPublicKey(seed, true);\n\t\treturn new Secp256r1Keypair({ publicKey, secretKey: seed });\n\t}\n\n\t/**\n\t * The public key for this keypair\n\t */\n\tgetPublicKey(): PublicKey {\n\t\treturn new Secp256r1PublicKey(this.keypair.publicKey);\n\t}\n\n\t/**\n\t * The Bech32 secret key string for this Secp256r1 keypair\n\t */\n\tgetSecretKey(): string {\n\t\treturn encodeHaneulPrivateKey(this.keypair.secretKey, this.getKeyScheme());\n\t}\n\n\t/**\n\t * Return the signature for the provided data.\n\t */\n\tasync sign(data: Uint8Array) {\n\t\treturn secp256r1.sign(data, this.keypair.secretKey, {\n\t\t\tlowS: true,\n\t\t}) as Uint8Array<ArrayBuffer>;\n\t}\n\n\t/**\n\t * Derive Secp256r1 keypair from mnemonics and path. The mnemonics must be normalized\n\t * and validated against the english wordlist.\n\t *\n\t * If path is none, it will default to m/74'/8282'/0'/0/0, otherwise the path must\n\t * be compliant to BIP-32 in form m/74'/8282'/{account_index}'/{change_index}/{address_index}.\n\t */\n\tstatic deriveKeypair(mnemonics: string, path?: string): Secp256r1Keypair {\n\t\tif (path == null) {\n\t\t\tpath = DEFAULT_SECP256R1_DERIVATION_PATH;\n\t\t}\n\t\tif (!isValidBIP32Path(path)) {\n\t\t\tthrow new Error('Invalid derivation path');\n\t\t}\n\t\t// We use HDKey which is hardcoded to use Secp256k1 but since we only need the 32 bytes for the private key it's okay to use here as well.\n\t\tconst privateKey = HDKey.fromMasterSeed(mnemonicToSeed(mnemonics)).derive(path).privateKey;\n\t\treturn Secp256r1Keypair.fromSecretKey(privateKey!);\n\t}\n}\n"],"mappings":";;;;;;;;AAaA,MAAa,oCAAoC;;;;AAajD,IAAa,mBAAb,MAAa,yBAAyB,QAAQ;;;;;;;CAS7C,YAAY,SAAgC;AAC3C,SAAO;AACP,MAAI,QACH,MAAK,UAAU;OACT;GACN,MAAM,YAAwBA,KAAU,MAAM,iBAAiB;AAG/D,QAAK,UAAU;IAAE,WAFaA,KAAU,aAAa,WAAW,KAAK;IAEzC;IAAW;;;;;;CAOzC,eAAgC;AAC/B,SAAO;;;;;CAMR,OAAO,WAA6B;AACnC,SAAO,IAAI,kBAAkB;;;;;;;;;;;;;;CAgB9B,OAAO,cACN,WACA,SACmB;AACnB,MAAI,OAAO,cAAc,UAAU;GAClC,MAAM,UAAU,uBAAuB,UAAU;AAEjD,OAAI,QAAQ,WAAW,YACtB,OAAM,IAAI,MAAM,qCAAqC,QAAQ,SAAS;AAGvE,UAAO,KAAK,cAAc,QAAQ,WAAW,QAAQ;;EAGtD,MAAM,YAAwBA,KAAU,aAAa,WAAW,KAAK;AACrE,MAAI,CAAC,WAAW,CAAC,QAAQ,gBAAgB;GAGxC,MAAM,UAAU,QAFA,IAAI,aAAa,CACR,OAAO,oBAAoB,EAClB,EAAE,OAAO,IAAI,CAAC;GAChD,MAAM,YAAYA,KAAU,KAAK,SAAS,WAAW;IAAE,MAAM;IAAM,SAAS;IAAO,CAAC;AAEpF,OAAI,CAACA,KAAU,OAAO,WAAW,SAAS,WAAW;IAAE,MAAM;IAAM,SAAS;IAAO,CAAC,CACnF,OAAM,IAAI,MAAM,gCAAgC;;AAGlD,SAAO,IAAI,iBAAiB;GAAE;GAAW;GAAW,CAAC;;;;;;;CAQtD,OAAO,SAAS,MAAoC;AAEnD,SAAO,IAAI,iBAAiB;GAAE,WADZA,KAAU,aAAa,MAAM,KAAK;GACX,WAAW;GAAM,CAAC;;;;;CAM5D,eAA0B;AACzB,SAAO,IAAI,mBAAmB,KAAK,QAAQ,UAAU;;;;;CAMtD,eAAuB;AACtB,SAAO,uBAAuB,KAAK,QAAQ,WAAW,KAAK,cAAc,CAAC;;;;;CAM3E,MAAM,KAAK,MAAkB;AAC5B,SAAOA,KAAU,KAAK,MAAM,KAAK,QAAQ,WAAW,EACnD,MAAM,MACN,CAAC;;;;;;;;;CAUH,OAAO,cAAc,WAAmB,MAAiC;AACxE,MAAI,QAAQ,KACX,QAAO;AAER,MAAI,CAAC,iBAAiB,KAAK,CAC1B,OAAM,IAAI,MAAM,0BAA0B;EAG3C,MAAM,aAAa,MAAM,eAAe,eAAe,UAAU,CAAC,CAAC,OAAO,KAAK,CAAC;AAChF,SAAO,iBAAiB,cAAc,WAAY"}

package/dist/keypairs/secp256r1/publickey.d.mts

@@ -1,7 +1,6 @@
 import { PublicKey, PublicKeyInitData } from "../../cryptography/publickey.mjs";
 
 //#region src/keypairs/secp256r1/publickey.d.ts
-
 /**
  * A Secp256r1 public key
  */

package/dist/keypairs/secp256r1/publickey.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"publickey.d.mts","names":[],"sources":["../../../src/keypairs/secp256r1/publickey.ts"],"sourcesContent":[],"mappings":";;;;;AAgBA;;AA6B4B,cA7Bf,kBAAA,SAA2B,SAAA,CA6BZ;EAOF,OAAA,IAAA,EAAA,MAAA;EAAX,QAAA,IAAA;EAcQ;;;;EAlD0B,WAAA,CAAA,KAAA,EAQ7B,iBAR6B;;;;oBA6BrB;;;;gBAOb,WAAW;;;;;;;;kBAcH,uBAAuB,sBAAsB"}
+{"version":3,"file":"publickey.d.mts","names":[],"sources":["../../../src/keypairs/secp256r1/publickey.ts"],"mappings":";;;;AAgBA;;cAAa,kBAAA,SAA2B,SAAA;EAAA,OAChC,IAAA;EAAA,QACC,IAAA;EAkCiB;;;;cA5Bb,KAAA,EAAO,iBAAA;EARoB;;;EA6B9B,MAAA,CAAO,SAAA,EAAW,kBAAA;EA5BpB;;;EAmCP,UAAA,CAAA,GAAc,UAAA,CAAW,WAAA;EA5Bb;;;EAmCZ,IAAA,CAAA;EAPA;;;EAcM,MAAA,CAAO,OAAA,EAAS,UAAA,EAAY,SAAA,EAAW,UAAA,YAAsB,OAAA;AAAA"}