@hwlt/era-connect 0.1.0

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+   implied. See the License for the specific language governing
+   permissions and limitations under the License.

package/NOTICE

@@ -0,0 +1,9 @@
+ERA Connect SDK
+Copyright 2026 ERA Wallet
+
+This product includes Protocol Buffers schema definitions for the Tron
+signing envelope (packages/connect/proto/tron/) that are derived from the
+QR code data protocol published by Keystone (https://github.com/KeystoneHQ,
+Apache License 2.0) and reference message shapes from the TRON protocol
+(https://github.com/tronprotocol/protocol, Apache License 2.0 / LGPL-3.0
+documentation headers as published).

package/README.md

@@ -0,0 +1,101 @@
+# @hwlt/era-connect
+
+Air-gapped **ERA hardware wallet** integration for software wallets: account
+linking and transaction signing over animated QR codes (BC-UR / Keystone-compatible
+registry), for **EVM, Bitcoin, Solana and Tron**.
+
+- **Headless.** You render the QR and own the camera; the SDK owns every byte
+  of the protocol. Works in React Native, Expo, browsers, extensions and Node.
+- **Zero I/O.** No network calls, ever. No Node built-ins, no `Buffer` —
+  `Uint8Array` end-to-end.
+- **Verified against the device.** Golden vectors are generated by the
+  reference implementation and replayed byte-for-byte in CI; the fountain
+  encoder reproduces the canonical BCR-2020-005 frames bit-for-bit and
+  round-trips against `@ngraveio/bc-ur`.
+- **Hardened where it matters.** The scanner refuses hostile QR frames
+  (stream binding needs a second distinct fragment), every reply must echo the
+  request id byte-for-byte, gzip replies inflate under a hard ceiling, and a
+  `verify` module proves the device signed *exactly* what you sent.
+
+## Install
+
+```sh
+npm install @hwlt/era-connect
+```
+
+React Native needs a CSPRNG for request ids — install
+[`react-native-get-random-values`](https://www.npmjs.com/package/react-native-get-random-values)
+and import it once at app start (or inject your own via `randomBytes`).
+
+## 60 seconds to a signature
+
+```ts
+import { EraConnect, EvmChain } from '@hwlt/era-connect';
+
+const era = new EraConnect({ origin: 'MyWallet' }); // shown on the device
+
+// 1. LINK — the user shows the device's "connect" QR; you scan it.
+const scanner = era.scanner({ expectedTypes: ['crypto-multi-accounts'] });
+// feed camera frames: scanner.receivePart(text) → { kind: 'complete', ur } when done
+const accounts = era.parseAccounts(scanner.result());
+const evm = accounts.evm()!;
+console.log(evm.deriveAddress(0)); // 0x... — derived locally, device not needed
+
+// 2. SIGN — build the request, render it, scan the reply.
+const request = era.evm.generateSignRequest({
+  signData: rlpBytes,                       // your unsigned tx, RLP-encoded for signing
+  dataType: EvmChain.DataType.transaction,
+  path: evm.pathFor(0),
+  xfp: evm.xfp,
+  chainId: 1,
+  address: evm.deriveAddress(0),
+});
+
+const animated = request.toAnimated();      // drive nextFrame() at ~8 fps
+// render animated.nextFrame() in your QR component every 125 ms
+
+const reply = request.scanner();            // pre-pinned to the right reply types
+// feed camera frames: reply.receivePart(text)
+const signature = reply.parse();            // typed; request-id echo enforced
+
+// 3. VERIFY (recommended) + broadcast with your own stack.
+import { verifyEvmSignature } from '@hwlt/era-connect/verify';
+verifyEvmSignature({ signData: rlpBytes, dataType: 1,
+  signature: signature.signature, address: evm.deriveAddress(0) });
+```
+
+## Chain support
+
+| Chain | Sign transaction | Sign message | Subpath |
+|---|---|---|---|
+| EVM (all chains) | `eth-sign-request` | personal_sign / EIP-712 | `@hwlt/era-connect/evm` |
+| Bitcoin | `crypto-psbt` (PSBT v0) | legacy P2PKH only | `@hwlt/era-connect/btc` |
+| Solana | `sol-sign-request` | off-chain messages | `@hwlt/era-connect/solana` |
+| Tron | `keystone-sign-request` (any contract via `rawData`) | UTF-8 in `rawData` | `@hwlt/era-connect/tron` |
+
+Subpath imports keep unrelated chains (and the `verify` crypto) out of your
+bundle. The device's chain list keeps growing — `era.raw` is the escape hatch
+for UR types this SDK has no module for yet.
+
+## Documentation
+
+The full guide lives in [`docs/`](https://github.com/ERAWLT/era-connect-sdk/tree/main/docs):
+
+1. [Install & set up](https://github.com/ERAWLT/era-connect-sdk/blob/main/docs/getting-started/01-install.md)
+2. [Link the device](https://github.com/ERAWLT/era-connect-sdk/blob/main/docs/getting-started/02-link-device.md)
+3. [Display a sign request](https://github.com/ERAWLT/era-connect-sdk/blob/main/docs/getting-started/03-display-request.md)
+4. [Scan the signature](https://github.com/ERAWLT/era-connect-sdk/blob/main/docs/getting-started/04-scan-signature.md)
+5. [Verify & broadcast](https://github.com/ERAWLT/era-connect-sdk/blob/main/docs/getting-started/05-broadcast.md)
+
+Per-chain guides, device specifics vs. the Keystone standard, QR tuning, the
+WalletConnect forwarding model and a migration note from
+`@keystonehq/keystone-sdk` are under
+[`docs/chains`](https://github.com/ERAWLT/era-connect-sdk/tree/main/docs/chains) and
+[`docs/advanced`](https://github.com/ERAWLT/era-connect-sdk/tree/main/docs/advanced).
+The normative wire specification is
+[`docs/protocol`](https://github.com/ERAWLT/era-connect-sdk/tree/main/docs/protocol).
+
+## License
+
+Apache-2.0 — see [LICENSE](https://github.com/ERAWLT/era-connect-sdk/blob/main/LICENSE)
+and [NOTICE](https://github.com/ERAWLT/era-connect-sdk/blob/main/NOTICE).

package/btc/package.json

@@ -0,0 +1,6 @@
+{
+  "main": "../dist/btc.cjs",
+  "module": "../dist/btc.js",
+  "types": "../dist/btc.d.ts",
+  "react-native": "../dist/btc.js"
+}

package/dist/btc-DfQ0q79G.d.ts

@@ -0,0 +1,58 @@
+import { _ as Ur, a as SignRequest, i as ExpectedReply, r as EraConnectConfig } from "./shared-CI8zhQiE.js";
+//#region src/chains/btc.d.ts
+interface BtcPsbtSignRequestProps {
+  /** Raw PSBT v0 bytes (BIP-174). The device's signer relies on the global UNSIGNED_TX. */
+  readonly psbt: Uint8Array;
+}
+interface BtcPsbtResult {
+  /** The signed, NOT finalized PSBT. Finalize + broadcast with your own stack. */
+  readonly psbt: Uint8Array;
+}
+interface BtcMessageSignRequestProps {
+  readonly requestId?: Uint8Array | string;
+  readonly message: Uint8Array;
+  /** Full signing path, e.g. `m/84'/0'/0'/0/0`. */
+  readonly path: string;
+  readonly xfp: string | number;
+  /**
+   * The signing address. The device's message signer supports LEGACY P2PKH
+   * (`1...`) addresses only; a segwit address yields `empty-signature`.
+   */
+  readonly address: string;
+  readonly origin?: string;
+}
+interface BtcMessageSignatureResult {
+  readonly requestId: Uint8Array;
+  /** Raw 65-byte BIP-137 signature (header + r + s). */
+  readonly signature: Uint8Array;
+  /** The base64 form dApps and verifiers expect. */
+  readonly signatureBase64: string;
+  readonly publicKey: Uint8Array | undefined;
+}
+declare class BtcChain {
+  static readonly DataType: {
+    readonly message: 1;
+  };
+  private readonly context;
+  constructor(config?: EraConnectConfig);
+  /**
+   * Build a `crypto-psbt` (310) request: the UR payload is a bare CBOR byte
+   * string of the raw PSBT — no map, no request id, no origin.
+   *
+   * BECAUSE the protocol carries no request id on this path, the reply is
+   * bound to the request only by its content: after parsing, compare the
+   * returned PSBT's unsigned transaction against the one you sent
+   * (`verifySignedPsbt` from `@hwlt/era-connect/verify`). Skipping that
+   * check re-opens replay of a stale signed PSBT.
+   */
+  generatePsbtSignRequest(props: BtcPsbtSignRequestProps): SignRequest<BtcPsbtResult>;
+  /** Parse a `crypto-psbt` reply: the signed (not finalized) PSBT bytes. */
+  parsePsbt(input: Ur | string): BtcPsbtResult;
+  /** Build a `btc-sign-request` (8101) for message signing. Reply: `btc-signature` (8102). */
+  generateMessageSignRequest(props: BtcMessageSignRequestProps): SignRequest<BtcMessageSignatureResult>;
+  /** Parse a `btc-signature` standalone. Prefer `SignRequest.scanner().parse()`. */
+  parseMessageSignature(input: Ur | string, expect?: ExpectedReply): BtcMessageSignatureResult;
+}
+//#endregion
+export { BtcPsbtSignRequestProps as a, BtcPsbtResult as i, BtcMessageSignRequestProps as n, BtcMessageSignatureResult as r, BtcChain as t };
+//# sourceMappingURL=btc-DfQ0q79G.d.ts.map

package/dist/btc-Dn6_Y12c.d.cts

@@ -0,0 +1,58 @@
+import { _ as Ur, a as SignRequest, i as ExpectedReply, r as EraConnectConfig } from "./shared-CI8zhQiE.cjs";
+//#region src/chains/btc.d.ts
+interface BtcPsbtSignRequestProps {
+  /** Raw PSBT v0 bytes (BIP-174). The device's signer relies on the global UNSIGNED_TX. */
+  readonly psbt: Uint8Array;
+}
+interface BtcPsbtResult {
+  /** The signed, NOT finalized PSBT. Finalize + broadcast with your own stack. */
+  readonly psbt: Uint8Array;
+}
+interface BtcMessageSignRequestProps {
+  readonly requestId?: Uint8Array | string;
+  readonly message: Uint8Array;
+  /** Full signing path, e.g. `m/84'/0'/0'/0/0`. */
+  readonly path: string;
+  readonly xfp: string | number;
+  /**
+   * The signing address. The device's message signer supports LEGACY P2PKH
+   * (`1...`) addresses only; a segwit address yields `empty-signature`.
+   */
+  readonly address: string;
+  readonly origin?: string;
+}
+interface BtcMessageSignatureResult {
+  readonly requestId: Uint8Array;
+  /** Raw 65-byte BIP-137 signature (header + r + s). */
+  readonly signature: Uint8Array;
+  /** The base64 form dApps and verifiers expect. */
+  readonly signatureBase64: string;
+  readonly publicKey: Uint8Array | undefined;
+}
+declare class BtcChain {
+  static readonly DataType: {
+    readonly message: 1;
+  };
+  private readonly context;
+  constructor(config?: EraConnectConfig);
+  /**
+   * Build a `crypto-psbt` (310) request: the UR payload is a bare CBOR byte
+   * string of the raw PSBT — no map, no request id, no origin.
+   *
+   * BECAUSE the protocol carries no request id on this path, the reply is
+   * bound to the request only by its content: after parsing, compare the
+   * returned PSBT's unsigned transaction against the one you sent
+   * (`verifySignedPsbt` from `@hwlt/era-connect/verify`). Skipping that
+   * check re-opens replay of a stale signed PSBT.
+   */
+  generatePsbtSignRequest(props: BtcPsbtSignRequestProps): SignRequest<BtcPsbtResult>;
+  /** Parse a `crypto-psbt` reply: the signed (not finalized) PSBT bytes. */
+  parsePsbt(input: Ur | string): BtcPsbtResult;
+  /** Build a `btc-sign-request` (8101) for message signing. Reply: `btc-signature` (8102). */
+  generateMessageSignRequest(props: BtcMessageSignRequestProps): SignRequest<BtcMessageSignatureResult>;
+  /** Parse a `btc-signature` standalone. Prefer `SignRequest.scanner().parse()`. */
+  parseMessageSignature(input: Ur | string, expect?: ExpectedReply): BtcMessageSignatureResult;
+}
+//#endregion
+export { BtcPsbtSignRequestProps as a, BtcPsbtResult as i, BtcMessageSignRequestProps as n, BtcMessageSignatureResult as r, BtcChain as t };
+//# sourceMappingURL=btc-Dn6_Y12c.d.cts.map

package/dist/btc-Fr6Jz4Fi.cjs

@@ -0,0 +1,104 @@
+const require_shared = require("./shared-nISrEktU.cjs");
+let _scure_base = require("@scure/base");
+//#region src/chains/btc.ts
+const PSBT_REPLY_TYPES = ["crypto-psbt"];
+const MESSAGE_REPLY_TYPES = ["btc-signature"];
+var BtcChain = class BtcChain {
+	constructor(config) {
+		this.context = require_shared.resolveContext(config);
+	}
+	/**
+	* Build a `crypto-psbt` (310) request: the UR payload is a bare CBOR byte
+	* string of the raw PSBT — no map, no request id, no origin.
+	*
+	* BECAUSE the protocol carries no request id on this path, the reply is
+	* bound to the request only by its content: after parsing, compare the
+	* returned PSBT's unsigned transaction against the one you sent
+	* (`verifySignedPsbt` from `@hwlt/era-connect/verify`). Skipping that
+	* check re-opens replay of a stale signed PSBT.
+	*/
+	generatePsbtSignRequest(props) {
+		if (props.psbt.length === 0) throw new require_shared.EraSdkError("invalid-props", "psbt must not be empty");
+		const ur = new require_shared.Ur("crypto-psbt", require_shared.cborEncode(require_shared.cbBytes(props.psbt)));
+		return require_shared.makeSignRequest({
+			ur,
+			replyTypes: PSBT_REPLY_TYPES,
+			context: this.context,
+			parse: (reply) => this.parsePsbt(reply)
+		});
+	}
+	/** Parse a `crypto-psbt` reply: the signed (not finalized) PSBT bytes. */
+	parsePsbt(input) {
+		const ur = require_shared.toUr(input);
+		require_shared.requireUrType(ur, [...PSBT_REPLY_TYPES], "crypto-psbt");
+		let decoded;
+		try {
+			decoded = require_shared.cborDecode(ur.cbor);
+		} catch (e) {
+			throw new require_shared.EraSdkError("malformed-cbor", `crypto-psbt reply: ${e.message}`);
+		}
+		const bytes = require_shared.asBytes(decoded);
+		if (!bytes) throw new require_shared.EraSdkError("malformed-reply", "crypto-psbt reply is not a byte string");
+		if (bytes.length === 0) throw new require_shared.EraSdkError("malformed-reply", "crypto-psbt reply is empty");
+		return { psbt: bytes };
+	}
+	/** Build a `btc-sign-request` (8101) for message signing. Reply: `btc-signature` (8102). */
+	generateMessageSignRequest(props) {
+		const requestId = require_shared.resolveRequestId(this.context, props.requestId);
+		const path = require_shared.parsePath(props.path);
+		const xfp = require_shared.normalizeXfp(props.xfp);
+		const ur = new require_shared.Ur("btc-sign-request", require_shared.cborEncode(require_shared.cbMap([
+			[1, require_shared.cbTag(37, require_shared.cbBytes(requestId))],
+			[2, require_shared.cbBytes(props.message)],
+			[3, require_shared.cbUint(BtcChain.DataType.message)],
+			[4, require_shared.cbArray([require_shared.keypath304(path, xfp)])],
+			[5, require_shared.cbArray([require_shared.cbText(props.address)])],
+			[6, require_shared.cbText(props.origin ?? this.context.origin)]
+		])));
+		return require_shared.makeSignRequest({
+			ur,
+			requestId,
+			replyTypes: MESSAGE_REPLY_TYPES,
+			context: this.context,
+			parse: (reply) => parseMessageSignature(reply, requestId)
+		});
+	}
+	/** Parse a `btc-signature` standalone. Prefer `SignRequest.scanner().parse()`. */
+	parseMessageSignature(input, expect) {
+		return parseMessageSignature(require_shared.toUr(input), expect?.requestId === void 0 ? void 0 : require_shared.normalizeRequestId(expect.requestId));
+	}
+};
+BtcChain.DataType = { message: 1 };
+function parseMessageSignature(ur, expectedRequestId) {
+	require_shared.requireUrType(ur, [...MESSAGE_REPLY_TYPES], "btc-signature");
+	const map = require_shared.requireReplyMap(ur, "btc-signature");
+	const requestId = require_shared.requireRequestIdEcho(map, 1, expectedRequestId, "btc-signature");
+	const sigValue = require_shared.asBytes(require_shared.mapGet(map, 2));
+	if (sigValue === void 0) throw new require_shared.EraSdkError("malformed-reply", "btc-signature is missing the signature (key 2)");
+	if (sigValue.length === 0) throw new require_shared.EraSdkError("empty-signature", "the device returned an empty signature — Bitcoin message signing supports legacy P2PKH (1...) addresses only");
+	let signature;
+	try {
+		signature = _scure_base.base64.decode(require_shared.asciiDecode(sigValue));
+	} catch {
+		signature = sigValue;
+	}
+	if (signature.length !== 65) {
+		if (sigValue.length === 65) signature = sigValue;
+		else throw new require_shared.EraSdkError("malformed-reply", `btc-signature payload does not decode to a 65-byte BIP-137 signature (${sigValue.length} bytes on the wire)`);
+	}
+	return {
+		requestId,
+		signature,
+		signatureBase64: _scure_base.base64.encode(signature),
+		publicKey: require_shared.asBytes(require_shared.mapGet(map, 3))
+	};
+}
+//#endregion
+Object.defineProperty(exports, "BtcChain", {
+	enumerable: true,
+	get: function() {
+		return BtcChain;
+	}
+});
+
+//# sourceMappingURL=btc-Fr6Jz4Fi.cjs.map

package/dist/btc-Fr6Jz4Fi.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"btc-Fr6Jz4Fi.cjs","names":["resolveContext","EraSdkError","UrValue","cborEncode","cbBytes","makeSignRequest","toUr","cborDecode","asBytes","resolveRequestId","parsePath","normalizeXfp","cbMap","cbTag","cbUint","cbArray","keypath304","cbText","normalizeRequestId","requireReplyMap","requireRequestIdEcho","mapGet","base64","asciiDecode"],"sources":["../src/chains/btc.ts"],"sourcesContent":["import { base64 } from '@scure/base';\nimport { cborDecode } from '../cbor/decode';\nimport { cborEncode } from '../cbor/encode';\nimport type { CborValue } from '../cbor/model';\nimport { asBytes, cbArray, cbBytes, cbMap, cbTag, cbText, cbUint, mapGet } from '../cbor/model';\nimport { asciiDecode } from '../core/bytes';\nimport { EraSdkError } from '../core/errors';\nimport { normalizeRequestId } from '../core/rand';\nimport { keypath304, normalizeXfp, parsePath } from '../registry/keypath';\nimport type { Ur } from '../ur/ur';\nimport { Ur as UrValue } from '../ur/ur';\nimport type { ChainContext, EraConnectConfig, ExpectedReply, SignRequest } from './shared';\nimport {\n  makeSignRequest,\n  requireReplyMap,\n  requireRequestIdEcho,\n  requireUrType,\n  resolveContext,\n  resolveRequestId,\n  toUr,\n} from './shared';\n\nexport interface BtcPsbtSignRequestProps {\n  /** Raw PSBT v0 bytes (BIP-174). The device's signer relies on the global UNSIGNED_TX. */\n  readonly psbt: Uint8Array;\n}\n\nexport interface BtcPsbtResult {\n  /** The signed, NOT finalized PSBT. Finalize + broadcast with your own stack. */\n  readonly psbt: Uint8Array;\n}\n\nexport interface BtcMessageSignRequestProps {\n  readonly requestId?: Uint8Array | string;\n  readonly message: Uint8Array;\n  /** Full signing path, e.g. `m/84'/0'/0'/0/0`. */\n  readonly path: string;\n  readonly xfp: string | number;\n  /**\n   * The signing address. The device's message signer supports LEGACY P2PKH\n   * (`1...`) addresses only; a segwit address yields `empty-signature`.\n   */\n  readonly address: string;\n  readonly origin?: string;\n}\n\nexport interface BtcMessageSignatureResult {\n  readonly requestId: Uint8Array;\n  /** Raw 65-byte BIP-137 signature (header + r + s). */\n  readonly signature: Uint8Array;\n  /** The base64 form dApps and verifiers expect. */\n  readonly signatureBase64: string;\n  readonly publicKey: Uint8Array | undefined;\n}\n\nconst PSBT_REPLY_TYPES = ['crypto-psbt'] as const;\nconst MESSAGE_REPLY_TYPES = ['btc-signature'] as const;\n\nexport class BtcChain {\n  static readonly DataType = { message: 1 } as const;\n\n  private readonly context: ChainContext;\n\n  constructor(config?: EraConnectConfig) {\n    this.context = resolveContext(config);\n  }\n\n  /**\n   * Build a `crypto-psbt` (310) request: the UR payload is a bare CBOR byte\n   * string of the raw PSBT — no map, no request id, no origin.\n   *\n   * BECAUSE the protocol carries no request id on this path, the reply is\n   * bound to the request only by its content: after parsing, compare the\n   * returned PSBT's unsigned transaction against the one you sent\n   * (`verifySignedPsbt` from `@hwlt/era-connect/verify`). Skipping that\n   * check re-opens replay of a stale signed PSBT.\n   */\n  generatePsbtSignRequest(props: BtcPsbtSignRequestProps): SignRequest<BtcPsbtResult> {\n    if (props.psbt.length === 0) {\n      throw new EraSdkError('invalid-props', 'psbt must not be empty');\n    }\n    const ur = new UrValue('crypto-psbt', cborEncode(cbBytes(props.psbt)));\n    return makeSignRequest({\n      ur,\n      replyTypes: PSBT_REPLY_TYPES,\n      context: this.context,\n      parse: (reply) => this.parsePsbt(reply),\n    });\n  }\n\n  /** Parse a `crypto-psbt` reply: the signed (not finalized) PSBT bytes. */\n  parsePsbt(input: Ur | string): BtcPsbtResult {\n    const ur = toUr(input);\n    requireUrType(ur, [...PSBT_REPLY_TYPES], 'crypto-psbt');\n    let decoded: CborValue;\n    try {\n      decoded = cborDecode(ur.cbor);\n    } catch (e) {\n      throw new EraSdkError('malformed-cbor', `crypto-psbt reply: ${(e as Error).message}`);\n    }\n    const bytes = asBytes(decoded);\n    if (!bytes) {\n      throw new EraSdkError('malformed-reply', 'crypto-psbt reply is not a byte string');\n    }\n    if (bytes.length === 0) {\n      throw new EraSdkError('malformed-reply', 'crypto-psbt reply is empty');\n    }\n    return { psbt: bytes };\n  }\n\n  /** Build a `btc-sign-request` (8101) for message signing. Reply: `btc-signature` (8102). */\n  generateMessageSignRequest(\n    props: BtcMessageSignRequestProps,\n  ): SignRequest<BtcMessageSignatureResult> {\n    const requestId = resolveRequestId(this.context, props.requestId);\n    const path = parsePath(props.path);\n    const xfp = normalizeXfp(props.xfp);\n\n    const ur = new UrValue(\n      'btc-sign-request',\n      cborEncode(\n        cbMap([\n          // Tag-37-wrapped on this chain (per-chain firmware policy).\n          [1, cbTag(37, cbBytes(requestId))],\n          [2, cbBytes(props.message)],\n          [3, cbUint(BtcChain.DataType.message)],\n          [4, cbArray([keypath304(path, xfp)])],\n          [5, cbArray([cbText(props.address)])],\n          [6, cbText(props.origin ?? this.context.origin)],\n        ]),\n      ),\n    );\n    return makeSignRequest({\n      ur,\n      requestId,\n      replyTypes: MESSAGE_REPLY_TYPES,\n      context: this.context,\n      parse: (reply) => parseMessageSignature(reply, requestId),\n    });\n  }\n\n  /** Parse a `btc-signature` standalone. Prefer `SignRequest.scanner().parse()`. */\n  parseMessageSignature(input: Ur | string, expect?: ExpectedReply): BtcMessageSignatureResult {\n    return parseMessageSignature(\n      toUr(input),\n      expect?.requestId === undefined ? undefined : normalizeRequestId(expect.requestId),\n    );\n  }\n}\n\nfunction parseMessageSignature(\n  ur: Ur,\n  expectedRequestId: Uint8Array | undefined,\n): BtcMessageSignatureResult {\n  requireUrType(ur, [...MESSAGE_REPLY_TYPES], 'btc-signature');\n  const map = requireReplyMap(ur, 'btc-signature');\n  const requestId = requireRequestIdEcho(map, 1, expectedRequestId, 'btc-signature');\n\n  const sigValue = asBytes(mapGet(map, 2));\n  if (sigValue === undefined) {\n    throw new EraSdkError('malformed-reply', 'btc-signature is missing the signature (key 2)');\n  }\n  // The device answers a message request for an address its signer cannot\n  // handle (any non-legacy script type) with an EMPTY signature.\n  if (sigValue.length === 0) {\n    throw new EraSdkError(\n      'empty-signature',\n      'the device returned an empty signature — Bitcoin message signing supports legacy P2PKH (1...) addresses only',\n    );\n  }\n\n  // Device quirk: the reply bytes are the ASCII of a base64 string, not raw\n  // signature bytes. Decode twice; tolerate a firmware that starts sending\n  // raw 65-byte signatures directly.\n  let signature: Uint8Array;\n  try {\n    signature = base64.decode(asciiDecode(sigValue));\n  } catch {\n    signature = sigValue;\n  }\n  if (signature.length !== 65) {\n    if (sigValue.length === 65) {\n      signature = sigValue;\n    } else {\n      throw new EraSdkError(\n        'malformed-reply',\n        `btc-signature payload does not decode to a 65-byte BIP-137 signature (${sigValue.length} bytes on the wire)`,\n      );\n    }\n  }\n  return {\n    requestId,\n    signature,\n    signatureBase64: base64.encode(signature),\n    publicKey: asBytes(mapGet(map, 3)),\n  };\n}\n"],"mappings":";;;AAuDA,MAAM,mBAAmB,CAAC,aAAa;AACvC,MAAM,sBAAsB,CAAC,eAAe;AAE5C,IAAa,WAAb,MAAa,SAAS;CAKpB,YAAY,QAA2B;EACrC,KAAK,UAAUA,eAAAA,eAAe,MAAM;CACtC;;;;;;;;;;;CAYA,wBAAwB,OAA4D;EAClF,IAAI,MAAM,KAAK,WAAW,GACxB,MAAM,IAAIC,eAAAA,YAAY,iBAAiB,wBAAwB;EAEjE,MAAM,KAAK,IAAIC,eAAAA,GAAQ,eAAeC,eAAAA,WAAWC,eAAAA,QAAQ,MAAM,IAAI,CAAC,CAAC;EACrE,OAAOC,eAAAA,gBAAgB;GACrB;GACA,YAAY;GACZ,SAAS,KAAK;GACd,QAAQ,UAAU,KAAK,UAAU,KAAK;EACxC,CAAC;CACH;;CAGA,UAAU,OAAmC;EAC3C,MAAM,KAAKC,eAAAA,KAAK,KAAK;EACrB,eAAA,cAAc,IAAI,CAAC,GAAG,gBAAgB,GAAG,aAAa;EACtD,IAAI;EACJ,IAAI;GACF,UAAUC,eAAAA,WAAW,GAAG,IAAI;EAC9B,SAAS,GAAG;GACV,MAAM,IAAIN,eAAAA,YAAY,kBAAkB,sBAAuB,EAAY,SAAS;EACtF;EACA,MAAM,QAAQO,eAAAA,QAAQ,OAAO;EAC7B,IAAI,CAAC,OACH,MAAM,IAAIP,eAAAA,YAAY,mBAAmB,wCAAwC;EAEnF,IAAI,MAAM,WAAW,GACnB,MAAM,IAAIA,eAAAA,YAAY,mBAAmB,4BAA4B;EAEvE,OAAO,EAAE,MAAM,MAAM;CACvB;;CAGA,2BACE,OACwC;EACxC,MAAM,YAAYQ,eAAAA,iBAAiB,KAAK,SAAS,MAAM,SAAS;EAChE,MAAM,OAAOC,eAAAA,UAAU,MAAM,IAAI;EACjC,MAAM,MAAMC,eAAAA,aAAa,MAAM,GAAG;EAElC,MAAM,KAAK,IAAIT,eAAAA,GACb,oBACAC,eAAAA,WACES,eAAAA,MAAM;GAEJ,CAAC,GAAGC,eAAAA,MAAM,IAAIT,eAAAA,QAAQ,SAAS,CAAC,CAAC;GACjC,CAAC,GAAGA,eAAAA,QAAQ,MAAM,OAAO,CAAC;GAC1B,CAAC,GAAGU,eAAAA,OAAO,SAAS,SAAS,OAAO,CAAC;GACrC,CAAC,GAAGC,eAAAA,QAAQ,CAACC,eAAAA,WAAW,MAAM,GAAG,CAAC,CAAC,CAAC;GACpC,CAAC,GAAGD,eAAAA,QAAQ,CAACE,eAAAA,OAAO,MAAM,OAAO,CAAC,CAAC,CAAC;GACpC,CAAC,GAAGA,eAAAA,OAAO,MAAM,UAAU,KAAK,QAAQ,MAAM,CAAC;EACjD,CAAC,CACH,CACF;EACA,OAAOZ,eAAAA,gBAAgB;GACrB;GACA;GACA,YAAY;GACZ,SAAS,KAAK;GACd,QAAQ,UAAU,sBAAsB,OAAO,SAAS;EAC1D,CAAC;CACH;;CAGA,sBAAsB,OAAoB,QAAmD;EAC3F,OAAO,sBACLC,eAAAA,KAAK,KAAK,GACV,QAAQ,cAAc,KAAA,IAAY,KAAA,IAAYY,eAAAA,mBAAmB,OAAO,SAAS,CACnF;CACF;AACF;AAzFE,SAAgB,WAAW,EAAE,SAAS,EAAE;AA2F1C,SAAS,sBACP,IACA,mBAC2B;CAC3B,eAAA,cAAc,IAAI,CAAC,GAAG,mBAAmB,GAAG,eAAe;CAC3D,MAAM,MAAMC,eAAAA,gBAAgB,IAAI,eAAe;CAC/C,MAAM,YAAYC,eAAAA,qBAAqB,KAAK,GAAG,mBAAmB,eAAe;CAEjF,MAAM,WAAWZ,eAAAA,QAAQa,eAAAA,OAAO,KAAK,CAAC,CAAC;CACvC,IAAI,aAAa,KAAA,GACf,MAAM,IAAIpB,eAAAA,YAAY,mBAAmB,gDAAgD;CAI3F,IAAI,SAAS,WAAW,GACtB,MAAM,IAAIA,eAAAA,YACR,mBACA,8GACF;CAMF,IAAI;CACJ,IAAI;EACF,YAAYqB,YAAAA,OAAO,OAAOC,eAAAA,YAAY,QAAQ,CAAC;CACjD,QAAQ;EACN,YAAY;CACd;CACA,IAAI,UAAU,WAAW,IAAI;EAC3B,IAAI,SAAS,WAAW,IACtB,YAAY;OAEZ,MAAM,IAAItB,eAAAA,YACR,mBACA,yEAAyE,SAAS,OAAO,oBAC3F;CAEJ;CACA,OAAO;EACL;EACA;EACA,iBAAiBqB,YAAAA,OAAO,OAAO,SAAS;EACxC,WAAWd,eAAAA,QAAQa,eAAAA,OAAO,KAAK,CAAC,CAAC;CACnC;AACF"}