@hwlt/era-connect 0.2.0 → 0.3.0

package/dist/derive-CuILJRPT.cjs

@@ -0,0 +1,176 @@
+const require_shared = require("./shared-nISrEktU.cjs");
+let _noble_curves_secp256k1 = require("@noble/curves/secp256k1");
+let _noble_hashes_ripemd160 = require("@noble/hashes/ripemd160");
+let _noble_hashes_sha2 = require("@noble/hashes/sha2");
+let _noble_hashes_sha3 = require("@noble/hashes/sha3");
+let _scure_base = require("@scure/base");
+let _scure_bip32 = require("@scure/bip32");
+let _noble_curves_ed25519 = require("@noble/curves/ed25519");
+let _noble_hashes_hmac = require("@noble/hashes/hmac");
+//#region src/accounts/derive.ts
+const base58check = (0, _scure_base.createBase58check)(_noble_hashes_sha2.sha256);
+/** Non-hardened BIP-32 child public key from an account-level (publicKey, chainCode). */
+function derivePublicKey(publicKey, chainCode, change, index) {
+	const child = new _scure_bip32.HDKey({
+		publicKey,
+		chainCode
+	}).deriveChild(change).deriveChild(index);
+	if (!child.publicKey) throw new require_shared.EraSdkError("invalid-props", "child derivation produced no public key");
+	return child.publicKey;
+}
+function uncompressed(publicKey33) {
+	return _noble_curves_secp256k1.secp256k1.ProjectivePoint.fromHex(publicKey33).toRawBytes(false);
+}
+/** EIP-55 checksummed address from a compressed secp256k1 public key. */
+function evmAddressFromPublicKey(publicKey33) {
+	const hash = (0, _noble_hashes_sha3.keccak_256)(uncompressed(publicKey33).slice(1));
+	const addr = require_shared.bytesToHex(hash.slice(12));
+	const check = (0, _noble_hashes_sha3.keccak_256)(new Uint8Array([...addr].map((c) => c.charCodeAt(0))));
+	let out = "";
+	for (let i = 0; i < addr.length; i++) {
+		const nibble = i % 2 === 0 ? check[i >> 1] >> 4 : check[i >> 1] & 15;
+		out += nibble >= 8 ? addr[i].toUpperCase() : addr[i];
+	}
+	return `0x${out}`;
+}
+function hash160(data) {
+	return (0, _noble_hashes_ripemd160.ripemd160)((0, _noble_hashes_sha2.sha256)(data));
+}
+/** P2WPKH (witness v0) bech32 address. */
+function btcP2wpkhAddressFromPublicKey(publicKey33, hrp = "bc") {
+	return _scure_base.bech32.encode(hrp, [0, ..._scure_base.bech32.toWords(hash160(publicKey33))]);
+}
+/** Legacy P2PKH base58check address (`1...`) — the kind the device signs messages for. */
+function btcP2pkhAddressFromPublicKey(publicKey33, testnet = false) {
+	return base58check.encode(require_shared.concatBytes(new Uint8Array([testnet ? 111 : 0]), hash160(publicKey33)));
+}
+/** Nested segwit (P2SH-P2WPKH) base58check address (`3...`). */
+function btcNestedSegwitAddressFromPublicKey(publicKey33, testnet = false) {
+	const redeemScript = require_shared.concatBytes(new Uint8Array([0, 20]), hash160(publicKey33));
+	return base58check.encode(require_shared.concatBytes(new Uint8Array([testnet ? 196 : 5]), hash160(redeemScript)));
+}
+/** Tron base58check address (0x41-prefixed keccak hash). */
+function tronAddressFromPublicKey(publicKey33) {
+	const hash = (0, _noble_hashes_sha3.keccak_256)(uncompressed(publicKey33).slice(1));
+	return base58check.encode(require_shared.concatBytes(new Uint8Array([65]), hash.slice(12)));
+}
+/** A Solana address IS the Ed25519 public key, base58. */
+function solanaAddressFromPublicKey(publicKey32) {
+	return _scure_base.base58.encode(publicKey32);
+}
+const XPUB_VERSION = 76067358;
+const ZPUB_VERSION = 78792518;
+/** BIP-32 extended public key serialization. */
+function serializeExtendedPublicKey(args) {
+	const { version = XPUB_VERSION, depth, parentFingerprint, childNumber, chainCode, publicKey } = args;
+	if (chainCode.length !== 32 || publicKey.length !== 33) throw new require_shared.EraSdkError("invalid-props", "extended key needs a 32-byte chain code and 33-byte key");
+	return base58check.encode(require_shared.concatBytes(require_shared.u32be(version), new Uint8Array([depth & 255]), require_shared.u32be(parentFingerprint), require_shared.u32be(childNumber), chainCode, publicKey));
+}
+function u32le(value) {
+	return new Uint8Array([
+		value & 255,
+		value >> 8 & 255,
+		value >> 16 & 255,
+		value >> 24 & 255
+	]);
+}
+function leBytesToBigint(bytes) {
+	let out = 0n;
+	for (let i = bytes.length - 1; i >= 0; i--) out = out << 8n | BigInt(bytes[i]);
+	return out;
+}
+/**
+* Public (soft) child of a BIP32-Ed25519 extended public key — the scheme
+* Cardano wallets share account xpubs under (CIP-3/V2):
+*
+*   Z       = HMAC-SHA512(chainCode, 0x02 || A || le32(index))
+*   childA  = A + [8 * ZL[0..28]] * B
+*   childCC = HMAC-SHA512(chainCode, 0x03 || A || le32(index))[32..]
+*
+* Only non-hardened indices are derivable publicly, which is exactly what the
+* role/index tail of a CIP-1852 path uses.
+*/
+function cardanoSoftDeriveChild(publicKey, chainCode, index) {
+	if (publicKey.length !== 32 || chainCode.length !== 32) throw new require_shared.EraSdkError("invalid-props", "Cardano derivation needs a 32-byte key and chain code");
+	if (!Number.isSafeInteger(index) || index < 0 || index >= 2147483648) throw new require_shared.EraSdkError("invalid-props", "Cardano public derivation is soft-index only");
+	const z = (0, _noble_hashes_hmac.hmac)(_noble_hashes_sha2.sha512, chainCode, require_shared.concatBytes(new Uint8Array([2]), publicKey, u32le(index)));
+	const cc = (0, _noble_hashes_hmac.hmac)(_noble_hashes_sha2.sha512, chainCode, require_shared.concatBytes(new Uint8Array([3]), publicKey, u32le(index))).slice(32);
+	const scalar = 8n * leBytesToBigint(z.slice(0, 28));
+	const parent = _noble_curves_ed25519.ed25519.ExtendedPoint.fromHex(require_shared.bytesToHex(publicKey));
+	return {
+		publicKey: (scalar === 0n ? parent : parent.add(_noble_curves_ed25519.ed25519.ExtendedPoint.BASE.multiply(scalar))).toRawBytes(),
+		chainCode: cc
+	};
+}
+/** Soft-derive along several indices (e.g. role, then address index). */
+function cardanoSoftDerivePath(publicKey, chainCode, indices) {
+	let node = {
+		publicKey,
+		chainCode
+	};
+	for (const index of indices) node = cardanoSoftDeriveChild(node.publicKey, node.chainCode, index);
+	return node.publicKey;
+}
+//#endregion
+Object.defineProperty(exports, "ZPUB_VERSION", {
+	enumerable: true,
+	get: function() {
+		return ZPUB_VERSION;
+	}
+});
+Object.defineProperty(exports, "btcNestedSegwitAddressFromPublicKey", {
+	enumerable: true,
+	get: function() {
+		return btcNestedSegwitAddressFromPublicKey;
+	}
+});
+Object.defineProperty(exports, "btcP2pkhAddressFromPublicKey", {
+	enumerable: true,
+	get: function() {
+		return btcP2pkhAddressFromPublicKey;
+	}
+});
+Object.defineProperty(exports, "btcP2wpkhAddressFromPublicKey", {
+	enumerable: true,
+	get: function() {
+		return btcP2wpkhAddressFromPublicKey;
+	}
+});
+Object.defineProperty(exports, "cardanoSoftDerivePath", {
+	enumerable: true,
+	get: function() {
+		return cardanoSoftDerivePath;
+	}
+});
+Object.defineProperty(exports, "derivePublicKey", {
+	enumerable: true,
+	get: function() {
+		return derivePublicKey;
+	}
+});
+Object.defineProperty(exports, "evmAddressFromPublicKey", {
+	enumerable: true,
+	get: function() {
+		return evmAddressFromPublicKey;
+	}
+});
+Object.defineProperty(exports, "serializeExtendedPublicKey", {
+	enumerable: true,
+	get: function() {
+		return serializeExtendedPublicKey;
+	}
+});
+Object.defineProperty(exports, "solanaAddressFromPublicKey", {
+	enumerable: true,
+	get: function() {
+		return solanaAddressFromPublicKey;
+	}
+});
+Object.defineProperty(exports, "tronAddressFromPublicKey", {
+	enumerable: true,
+	get: function() {
+		return tronAddressFromPublicKey;
+	}
+});
+
+//# sourceMappingURL=derive-CuILJRPT.cjs.map

package/dist/derive-CuILJRPT.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"derive-CuILJRPT.cjs","names":["createBase58check","sha256","HDKey","EraSdkError","secp256k1","keccak_256","bytesToHex","ripemd160","bech32","concatBytes","base58","u32be","hmac","sha512","ed25519"],"sources":["../src/accounts/derive.ts"],"sourcesContent":["import { secp256k1 } from '@noble/curves/secp256k1';\nimport { ripemd160 } from '@noble/hashes/ripemd160';\nimport { sha256 } from '@noble/hashes/sha2';\nimport { keccak_256 } from '@noble/hashes/sha3';\nimport { base58, bech32, createBase58check } from '@scure/base';\nimport { HDKey } from '@scure/bip32';\nimport { bytesToHex, concatBytes, u32be } from '../core/bytes';\nimport { EraSdkError } from '../core/errors';\n\nconst base58check = createBase58check(sha256);\n\n/** Non-hardened BIP-32 child public key from an account-level (publicKey, chainCode). */\nexport function derivePublicKey(\n  publicKey: Uint8Array,\n  chainCode: Uint8Array,\n  change: number,\n  index: number,\n): Uint8Array {\n  const node = new HDKey({ publicKey, chainCode });\n  const child = node.deriveChild(change).deriveChild(index);\n  if (!child.publicKey) {\n    throw new EraSdkError('invalid-props', 'child derivation produced no public key');\n  }\n  return child.publicKey;\n}\n\nfunction uncompressed(publicKey33: Uint8Array): Uint8Array {\n  return secp256k1.ProjectivePoint.fromHex(publicKey33).toRawBytes(false);\n}\n\n/** EIP-55 checksummed address from a compressed secp256k1 public key. */\nexport function evmAddressFromPublicKey(publicKey33: Uint8Array): `0x${string}` {\n  const hash = keccak_256(uncompressed(publicKey33).slice(1));\n  const addr = bytesToHex(hash.slice(12));\n  const check = keccak_256(new Uint8Array([...addr].map((c) => c.charCodeAt(0))));\n  let out = '';\n  for (let i = 0; i < addr.length; i++) {\n    const nibble = i % 2 === 0 ? check[i >> 1]! >> 4 : check[i >> 1]! & 0x0f;\n    out += nibble >= 8 ? addr[i]!.toUpperCase() : addr[i]!;\n  }\n  return `0x${out}`;\n}\n\nfunction hash160(data: Uint8Array): Uint8Array {\n  return ripemd160(sha256(data));\n}\n\n/** P2WPKH (witness v0) bech32 address. */\nexport function btcP2wpkhAddressFromPublicKey(\n  publicKey33: Uint8Array,\n  hrp: 'bc' | 'tb' = 'bc',\n): string {\n  return bech32.encode(hrp, [0, ...bech32.toWords(hash160(publicKey33))]);\n}\n\n/** Legacy P2PKH base58check address (`1...`) — the kind the device signs messages for. */\nexport function btcP2pkhAddressFromPublicKey(publicKey33: Uint8Array, testnet = false): string {\n  return base58check.encode(\n    concatBytes(new Uint8Array([testnet ? 0x6f : 0x00]), hash160(publicKey33)),\n  );\n}\n\n/** Nested segwit (P2SH-P2WPKH) base58check address (`3...`). */\nexport function btcNestedSegwitAddressFromPublicKey(\n  publicKey33: Uint8Array,\n  testnet = false,\n): string {\n  const redeemScript = concatBytes(new Uint8Array([0x00, 0x14]), hash160(publicKey33));\n  return base58check.encode(\n    concatBytes(new Uint8Array([testnet ? 0xc4 : 0x05]), hash160(redeemScript)),\n  );\n}\n\n/** Tron base58check address (0x41-prefixed keccak hash). */\nexport function tronAddressFromPublicKey(publicKey33: Uint8Array): string {\n  const hash = keccak_256(uncompressed(publicKey33).slice(1));\n  return base58check.encode(concatBytes(new Uint8Array([0x41]), hash.slice(12)));\n}\n\n/** A Solana address IS the Ed25519 public key, base58. */\nexport function solanaAddressFromPublicKey(publicKey32: Uint8Array): string {\n  return base58.encode(publicKey32);\n}\n\nconst XPUB_VERSION = 0x0488b21e;\nconst ZPUB_VERSION = 0x04b24746; // SLIP-132, BIP-84 P2WPKH\n\n/** BIP-32 extended public key serialization. */\nexport function serializeExtendedPublicKey(args: {\n  version?: number;\n  depth: number;\n  parentFingerprint: number;\n  childNumber: number;\n  chainCode: Uint8Array;\n  publicKey: Uint8Array;\n}): string {\n  const {\n    version = XPUB_VERSION,\n    depth,\n    parentFingerprint,\n    childNumber,\n    chainCode,\n    publicKey,\n  } = args;\n  if (chainCode.length !== 32 || publicKey.length !== 33) {\n    throw new EraSdkError(\n      'invalid-props',\n      'extended key needs a 32-byte chain code and 33-byte key',\n    );\n  }\n  return base58check.encode(\n    concatBytes(\n      u32be(version),\n      new Uint8Array([depth & 0xff]),\n      u32be(parentFingerprint),\n      u32be(childNumber),\n      chainCode,\n      publicKey,\n    ),\n  );\n}\n\nexport { XPUB_VERSION, ZPUB_VERSION };\n\n// ---------------------------------------------------------------------------\n// Cardano (BIP32-Ed25519 / CIP-3 \"V2\") soft public derivation\n// ---------------------------------------------------------------------------\n\nimport { ed25519 } from '@noble/curves/ed25519';\nimport { hmac } from '@noble/hashes/hmac';\nimport { sha512 } from '@noble/hashes/sha2';\n\nfunction u32le(value: number): Uint8Array {\n  return new Uint8Array([\n    value & 0xff,\n    (value >> 8) & 0xff,\n    (value >> 16) & 0xff,\n    (value >> 24) & 0xff,\n  ]);\n}\n\nfunction leBytesToBigint(bytes: Uint8Array): bigint {\n  let out = 0n;\n  for (let i = bytes.length - 1; i >= 0; i--) out = (out << 8n) | BigInt(bytes[i]!);\n  return out;\n}\n\n/**\n * Public (soft) child of a BIP32-Ed25519 extended public key — the scheme\n * Cardano wallets share account xpubs under (CIP-3/V2):\n *\n *   Z       = HMAC-SHA512(chainCode, 0x02 || A || le32(index))\n *   childA  = A + [8 * ZL[0..28]] * B\n *   childCC = HMAC-SHA512(chainCode, 0x03 || A || le32(index))[32..]\n *\n * Only non-hardened indices are derivable publicly, which is exactly what the\n * role/index tail of a CIP-1852 path uses.\n */\nexport function cardanoSoftDeriveChild(\n  publicKey: Uint8Array,\n  chainCode: Uint8Array,\n  index: number,\n): { publicKey: Uint8Array; chainCode: Uint8Array } {\n  if (publicKey.length !== 32 || chainCode.length !== 32) {\n    throw new EraSdkError('invalid-props', 'Cardano derivation needs a 32-byte key and chain code');\n  }\n  if (!Number.isSafeInteger(index) || index < 0 || index >= 0x80000000) {\n    throw new EraSdkError('invalid-props', 'Cardano public derivation is soft-index only');\n  }\n  const z = hmac(sha512, chainCode, concatBytes(new Uint8Array([0x02]), publicKey, u32le(index)));\n  const cc = hmac(\n    sha512,\n    chainCode,\n    concatBytes(new Uint8Array([0x03]), publicKey, u32le(index)),\n  ).slice(32);\n  const scalar = 8n * leBytesToBigint(z.slice(0, 28));\n  const parent = ed25519.ExtendedPoint.fromHex(bytesToHex(publicKey));\n  const child = scalar === 0n ? parent : parent.add(ed25519.ExtendedPoint.BASE.multiply(scalar));\n  return { publicKey: child.toRawBytes(), chainCode: cc };\n}\n\n/** Soft-derive along several indices (e.g. role, then address index). */\nexport function cardanoSoftDerivePath(\n  publicKey: Uint8Array,\n  chainCode: Uint8Array,\n  indices: readonly number[],\n): Uint8Array {\n  let node = { publicKey, chainCode };\n  for (const index of indices) {\n    node = cardanoSoftDeriveChild(node.publicKey, node.chainCode, index);\n  }\n  return node.publicKey;\n}\n"],"mappings":";;;;;;;;;;AASA,MAAM,eAAA,GAAcA,YAAAA,kBAAAA,CAAkBC,mBAAAA,MAAM;;AAG5C,SAAgB,gBACd,WACA,WACA,QACA,OACY;CAEZ,MAAM,QAAQ,IADGC,aAAAA,MAAM;EAAE;EAAW;CAAU,CAC7B,CAAC,CAAC,YAAY,MAAM,CAAC,CAAC,YAAY,KAAK;CACxD,IAAI,CAAC,MAAM,WACT,MAAM,IAAIC,eAAAA,YAAY,iBAAiB,yCAAyC;CAElF,OAAO,MAAM;AACf;AAEA,SAAS,aAAa,aAAqC;CACzD,OAAOC,wBAAAA,UAAU,gBAAgB,QAAQ,WAAW,CAAC,CAAC,WAAW,KAAK;AACxE;;AAGA,SAAgB,wBAAwB,aAAwC;CAC9E,MAAM,QAAA,GAAOC,mBAAAA,WAAAA,CAAW,aAAa,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;CAC1D,MAAM,OAAOC,eAAAA,WAAW,KAAK,MAAM,EAAE,CAAC;CACtC,MAAM,SAAA,GAAQD,mBAAAA,WAAAA,CAAW,IAAI,WAAW,CAAC,GAAG,IAAI,CAAC,CAAC,KAAK,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC,CAAC;CAC9E,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,GAAG,IAAI,KAAK,QAAQ,KAAK;EACpC,MAAM,SAAS,IAAI,MAAM,IAAI,MAAM,KAAK,MAAO,IAAI,MAAM,KAAK,KAAM;EACpE,OAAO,UAAU,IAAI,KAAK,EAAE,CAAE,YAAY,IAAI,KAAK;CACrD;CACA,OAAO,KAAK;AACd;AAEA,SAAS,QAAQ,MAA8B;CAC7C,QAAA,GAAOE,wBAAAA,UAAAA,EAAAA,GAAUN,mBAAAA,OAAAA,CAAO,IAAI,CAAC;AAC/B;;AAGA,SAAgB,8BACd,aACA,MAAmB,MACX;CACR,OAAOO,YAAAA,OAAO,OAAO,KAAK,CAAC,GAAG,GAAGA,YAAAA,OAAO,QAAQ,QAAQ,WAAW,CAAC,CAAC,CAAC;AACxE;;AAGA,SAAgB,6BAA6B,aAAyB,UAAU,OAAe;CAC7F,OAAO,YAAY,OACjBC,eAAAA,YAAY,IAAI,WAAW,CAAC,UAAU,MAAO,CAAI,CAAC,GAAG,QAAQ,WAAW,CAAC,CAC3E;AACF;;AAGA,SAAgB,oCACd,aACA,UAAU,OACF;CACR,MAAM,eAAeA,eAAAA,YAAY,IAAI,WAAW,CAAC,GAAM,EAAI,CAAC,GAAG,QAAQ,WAAW,CAAC;CACnF,OAAO,YAAY,OACjBA,eAAAA,YAAY,IAAI,WAAW,CAAC,UAAU,MAAO,CAAI,CAAC,GAAG,QAAQ,YAAY,CAAC,CAC5E;AACF;;AAGA,SAAgB,yBAAyB,aAAiC;CACxE,MAAM,QAAA,GAAOJ,mBAAAA,WAAAA,CAAW,aAAa,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC;CAC1D,OAAO,YAAY,OAAOI,eAAAA,YAAY,IAAI,WAAW,CAAC,EAAI,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC,CAAC;AAC/E;;AAGA,SAAgB,2BAA2B,aAAiC;CAC1E,OAAOC,YAAAA,OAAO,OAAO,WAAW;AAClC;AAEA,MAAM,eAAe;AACrB,MAAM,eAAe;;AAGrB,SAAgB,2BAA2B,MAOhC;CACT,MAAM,EACJ,UAAU,cACV,OACA,mBACA,aACA,WACA,cACE;CACJ,IAAI,UAAU,WAAW,MAAM,UAAU,WAAW,IAClD,MAAM,IAAIP,eAAAA,YACR,iBACA,yDACF;CAEF,OAAO,YAAY,OACjBM,eAAAA,YACEE,eAAAA,MAAM,OAAO,GACb,IAAI,WAAW,CAAC,QAAQ,GAAI,CAAC,GAC7BA,eAAAA,MAAM,iBAAiB,GACvBA,eAAAA,MAAM,WAAW,GACjB,WACA,SACF,CACF;AACF;AAYA,SAAS,MAAM,OAA2B;CACxC,OAAO,IAAI,WAAW;EACpB,QAAQ;EACP,SAAS,IAAK;EACd,SAAS,KAAM;EACf,SAAS,KAAM;CAClB,CAAC;AACH;AAEA,SAAS,gBAAgB,OAA2B;CAClD,IAAI,MAAM;CACV,KAAK,IAAI,IAAI,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,MAAO,OAAO,KAAM,OAAO,MAAM,EAAG;CAChF,OAAO;AACT;;;;;;;;;;;;AAaA,SAAgB,uBACd,WACA,WACA,OACkD;CAClD,IAAI,UAAU,WAAW,MAAM,UAAU,WAAW,IAClD,MAAM,IAAIR,eAAAA,YAAY,iBAAiB,uDAAuD;CAEhG,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,QAAQ,KAAK,SAAS,YACxD,MAAM,IAAIA,eAAAA,YAAY,iBAAiB,8CAA8C;CAEvF,MAAM,KAAA,GAAIS,mBAAAA,KAAAA,CAAKC,mBAAAA,QAAQ,WAAWJ,eAAAA,YAAY,IAAI,WAAW,CAAC,CAAI,CAAC,GAAG,WAAW,MAAM,KAAK,CAAC,CAAC;CAC9F,MAAM,MAAA,GAAKG,mBAAAA,KAAAA,CACTC,mBAAAA,QACA,WACAJ,eAAAA,YAAY,IAAI,WAAW,CAAC,CAAI,CAAC,GAAG,WAAW,MAAM,KAAK,CAAC,CAC7D,CAAC,CAAC,MAAM,EAAE;CACV,MAAM,SAAS,KAAK,gBAAgB,EAAE,MAAM,GAAG,EAAE,CAAC;CAClD,MAAM,SAASK,sBAAAA,QAAQ,cAAc,QAAQR,eAAAA,WAAW,SAAS,CAAC;CAElE,OAAO;EAAE,YADK,WAAW,KAAK,SAAS,OAAO,IAAIQ,sBAAAA,QAAQ,cAAc,KAAK,SAAS,MAAM,CAAC,EAAA,CACnE,WAAW;EAAG,WAAW;CAAG;AACxD;;AAGA,SAAgB,sBACd,WACA,WACA,SACY;CACZ,IAAI,OAAO;EAAE;EAAW;CAAU;CAClC,KAAK,MAAM,SAAS,SAClB,OAAO,uBAAuB,KAAK,WAAW,KAAK,WAAW,KAAK;CAErE,OAAO,KAAK;AACd"}

package/dist/index.cjs

@@ -1,16 +1,12 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_shared = require("./shared-nISrEktU.cjs");
+const require_derive = require("./derive-CuILJRPT.cjs");
 const require_btc = require("./btc-Fr6Jz4Fi.cjs");
+const require_cardano = require("./cardano-DP6U_K1J.cjs");
 const require_evm = require("./evm-BHj_2OTG.cjs");
 const require_solana = require("./solana-DdEn24X4.cjs");
 const require_ton = require("./ton-DUJGXdGa.cjs");
 const require_tron = require("./tron-CQIEqjCA.cjs");
-let _noble_curves_secp256k1 = require("@noble/curves/secp256k1");
-let _noble_hashes_ripemd160 = require("@noble/hashes/ripemd160");
-let _noble_hashes_sha2 = require("@noble/hashes/sha2");
-let _noble_hashes_sha3 = require("@noble/hashes/sha3");
-let _scure_base = require("@scure/base");
-let _scure_bip32 = require("@scure/bip32");
 //#region src/registry/multi-accounts.ts
 /** UR types a device links a watch-only wallet with. */
 const WALLET_UR_TYPES = /* @__PURE__ */ new Set([
@@ -54,7 +50,7 @@ function parseMultiAccountsUr(input) {
 		const entry = tryParseEntry(decoded);
 		if (!entry) throw new require_shared.EraSdkError("malformed-reply", "crypto-hdkey export carries no derivable account (missing origin keypath)");
 		return {
-			masterFingerprint: entry.xfp,
+			masterFingerprint: entry.xfp ?? 0,
 			deviceName: null,
 			deviceId: null,
 			deviceVersion: null,
@@ -84,12 +80,13 @@ function tryParseEntry(item) {
 	const origin = require_shared.asMap(require_shared.mapGet(map, 6));
 	if (!origin) return null;
 	const path = require_shared.parsePathComponents(require_shared.mapGet(origin, 1));
-	const xfp = require_shared.asUint(require_shared.mapGet(origin, 2));
-	if (!path || path.length === 0 || xfp === void 0 || xfp > 4294967295n) return null;
+	if (!path || path.length === 0) return null;
+	const xfpValue = require_shared.asUint(require_shared.mapGet(origin, 2));
+	const xfp = xfpValue !== void 0 && xfpValue <= 4294967295n ? Number(xfpValue) : null;
 	const parentFp = require_shared.asUint(require_shared.mapGet(map, 8));
 	return {
 		path,
-		xfp: Number(xfp),
+		xfp,
 		publicKey: require_shared.asBytes(require_shared.mapGet(map, 3)) ?? null,
 		chainCode: require_shared.asBytes(require_shared.mapGet(map, 4)) ?? null,
 		parentFingerprint: parentFp !== void 0 && parentFp <= 4294967295n ? Number(parentFp) : null,
@@ -98,66 +95,6 @@ function tryParseEntry(item) {
 	};
 }
 //#endregion
-//#region src/accounts/derive.ts
-const base58check = (0, _scure_base.createBase58check)(_noble_hashes_sha2.sha256);
-/** Non-hardened BIP-32 child public key from an account-level (publicKey, chainCode). */
-function derivePublicKey(publicKey, chainCode, change, index) {
-	const child = new _scure_bip32.HDKey({
-		publicKey,
-		chainCode
-	}).deriveChild(change).deriveChild(index);
-	if (!child.publicKey) throw new require_shared.EraSdkError("invalid-props", "child derivation produced no public key");
-	return child.publicKey;
-}
-function uncompressed(publicKey33) {
-	return _noble_curves_secp256k1.secp256k1.ProjectivePoint.fromHex(publicKey33).toRawBytes(false);
-}
-/** EIP-55 checksummed address from a compressed secp256k1 public key. */
-function evmAddressFromPublicKey(publicKey33) {
-	const hash = (0, _noble_hashes_sha3.keccak_256)(uncompressed(publicKey33).slice(1));
-	const addr = require_shared.bytesToHex(hash.slice(12));
-	const check = (0, _noble_hashes_sha3.keccak_256)(new Uint8Array([...addr].map((c) => c.charCodeAt(0))));
-	let out = "";
-	for (let i = 0; i < addr.length; i++) {
-		const nibble = i % 2 === 0 ? check[i >> 1] >> 4 : check[i >> 1] & 15;
-		out += nibble >= 8 ? addr[i].toUpperCase() : addr[i];
-	}
-	return `0x${out}`;
-}
-function hash160(data) {
-	return (0, _noble_hashes_ripemd160.ripemd160)((0, _noble_hashes_sha2.sha256)(data));
-}
-/** P2WPKH (witness v0) bech32 address. */
-function btcP2wpkhAddressFromPublicKey(publicKey33, hrp = "bc") {
-	return _scure_base.bech32.encode(hrp, [0, ..._scure_base.bech32.toWords(hash160(publicKey33))]);
-}
-/** Legacy P2PKH base58check address (`1...`) — the kind the device signs messages for. */
-function btcP2pkhAddressFromPublicKey(publicKey33, testnet = false) {
-	return base58check.encode(require_shared.concatBytes(new Uint8Array([testnet ? 111 : 0]), hash160(publicKey33)));
-}
-/** Nested segwit (P2SH-P2WPKH) base58check address (`3...`). */
-function btcNestedSegwitAddressFromPublicKey(publicKey33, testnet = false) {
-	const redeemScript = require_shared.concatBytes(new Uint8Array([0, 20]), hash160(publicKey33));
-	return base58check.encode(require_shared.concatBytes(new Uint8Array([testnet ? 196 : 5]), hash160(redeemScript)));
-}
-/** Tron base58check address (0x41-prefixed keccak hash). */
-function tronAddressFromPublicKey(publicKey33) {
-	const hash = (0, _noble_hashes_sha3.keccak_256)(uncompressed(publicKey33).slice(1));
-	return base58check.encode(require_shared.concatBytes(new Uint8Array([65]), hash.slice(12)));
-}
-/** A Solana address IS the Ed25519 public key, base58. */
-function solanaAddressFromPublicKey(publicKey32) {
-	return _scure_base.base58.encode(publicKey32);
-}
-const XPUB_VERSION = 76067358;
-const ZPUB_VERSION = 78792518;
-/** BIP-32 extended public key serialization. */
-function serializeExtendedPublicKey(args) {
-	const { version = XPUB_VERSION, depth, parentFingerprint, childNumber, chainCode, publicKey } = args;
-	if (chainCode.length !== 32 || publicKey.length !== 33) throw new require_shared.EraSdkError("invalid-props", "extended key needs a 32-byte chain code and 33-byte key");
-	return base58check.encode(require_shared.concatBytes(require_shared.u32be(version), new Uint8Array([depth & 255]), require_shared.u32be(parentFingerprint), require_shared.u32be(childNumber), chainCode, publicKey));
-}
-//#endregion
 //#region src/accounts/accounts.ts
 function classify(path) {
 	const p0 = path[0];
@@ -168,6 +105,7 @@ function classify(path) {
 	if (p0.index === 44 && p1.index === 501) return "solana";
 	if (p0.index === 44 && p1.index === 195) return "tron";
 	if (p0.index === 44 && p1.index === 607) return "ton";
+	if (p0.index === 1852 && p1.index === 1815) return "cardano";
 	return "unknown";
 }
 function withChainCode(entry) {
@@ -181,11 +119,12 @@ function requireKey(entry, length) {
 }
 /** EVM view over the linked wallet: one account xpub, addresses derived at `0/index`. */
 var EvmAccountView = class {
-	constructor(entry) {
+	constructor(entry, resolvedXfp) {
 		this.entry = entry;
+		this.resolvedXfp = resolvedXfp;
 	}
 	get xfp() {
-		return require_shared.xfpToHex(this.entry.xfp);
+		return require_shared.xfpToHex(this.resolvedXfp);
 	}
 	get accountPath() {
 		return require_shared.formatPath([...this.entry.path]);
@@ -195,7 +134,7 @@ var EvmAccountView = class {
 		return `${this.accountPath}/0/${index}`;
 	}
 	deriveAddress(index) {
-		return evmAddressFromPublicKey(derivePublicKey(requireKey(this.entry, 33), withChainCode(this.entry), 0, index));
+		return require_derive.evmAddressFromPublicKey(require_derive.derivePublicKey(requireKey(this.entry, 33), withChainCode(this.entry), 0, index));
 	}
 	xpub() {
 		return extendedKeyOf(this.entry);
@@ -208,13 +147,14 @@ var EvmAccountView = class {
 * 49 = nested segwit, 86 = taproot).
 */
 var BtcAccountView = class {
-	constructor(entry, testnet, purpose) {
+	constructor(entry, testnet, purpose, resolvedXfp) {
 		this.entry = entry;
 		this.testnet = testnet;
 		this.purpose = purpose;
+		this.resolvedXfp = resolvedXfp;
 	}
 	get xfp() {
-		return require_shared.xfpToHex(this.entry.xfp);
+		return require_shared.xfpToHex(this.resolvedXfp);
 	}
 	get accountPath() {
 		return require_shared.formatPath([...this.entry.path]);
@@ -227,11 +167,11 @@ var BtcAccountView = class {
 	}
 	deriveAddress(index, options) {
 		const change = options?.change ? 1 : 0;
-		const child = derivePublicKey(requireKey(this.entry, 33), withChainCode(this.entry), change, index);
+		const child = require_derive.derivePublicKey(requireKey(this.entry, 33), withChainCode(this.entry), change, index);
 		switch (this.purpose) {
-			case 84: return btcP2wpkhAddressFromPublicKey(child, this.testnet ? "tb" : "bc");
-			case 44: return btcP2pkhAddressFromPublicKey(child, this.testnet);
-			case 49: return btcNestedSegwitAddressFromPublicKey(child, this.testnet);
+			case 84: return require_derive.btcP2wpkhAddressFromPublicKey(child, this.testnet ? "tb" : "bc");
+			case 44: return require_derive.btcP2pkhAddressFromPublicKey(child, this.testnet);
+			case 49: return require_derive.btcNestedSegwitAddressFromPublicKey(child, this.testnet);
 			case 86: throw new require_shared.EraSdkError("invalid-props", "taproot addresses need the BIP-341 output-key tweak; derive them from xpub() with your Bitcoin library");
 		}
 	}
@@ -241,16 +181,17 @@ var BtcAccountView = class {
 	/** SLIP-132 zpub form of the BIP-84 key, for tools that require it. */
 	zpub() {
 		if (this.purpose !== 84) throw new require_shared.EraSdkError("invalid-props", "zpub is the SLIP-132 form of the BIP-84 account only");
-		return extendedKeyOf(this.entry, ZPUB_VERSION);
+		return extendedKeyOf(this.entry, require_derive.ZPUB_VERSION);
 	}
 };
 /** Tron view: addresses derived at `0/index`. */
 var TronAccountView = class {
-	constructor(entry) {
+	constructor(entry, resolvedXfp) {
 		this.entry = entry;
+		this.resolvedXfp = resolvedXfp;
 	}
 	get xfp() {
-		return require_shared.xfpToHex(this.entry.xfp);
+		return require_shared.xfpToHex(this.resolvedXfp);
 	}
 	get accountPath() {
 		return require_shared.formatPath([...this.entry.path]);
@@ -259,7 +200,7 @@ var TronAccountView = class {
 		return `${this.accountPath}/0/${index}`;
 	}
 	deriveAddress(index) {
-		return tronAddressFromPublicKey(derivePublicKey(requireKey(this.entry, 33), withChainCode(this.entry), 0, index));
+		return require_derive.tronAddressFromPublicKey(require_derive.derivePublicKey(requireKey(this.entry, 33), withChainCode(this.entry), 0, index));
 	}
 };
 /**
@@ -269,11 +210,12 @@ var TronAccountView = class {
 * with @ton/core or equivalent).
 */
 var TonAccountView = class {
-	constructor(entry) {
+	constructor(entry, resolvedXfp) {
 		this.entry = entry;
+		this.resolvedXfp = resolvedXfp;
 	}
 	get xfp() {
-		return require_shared.xfpToHex(this.entry.xfp);
+		return require_shared.xfpToHex(this.resolvedXfp);
 	}
 	get accountPath() {
 		return require_shared.formatPath([...this.entry.path]);
@@ -287,16 +229,50 @@ var TonAccountView = class {
 	}
 };
 /**
+* Cardano view (CIP-1852): the exported account key supports SOFT public
+* derivation (BIP32-Ed25519), so payment (`0/i`), change (`1/i`) and stake
+* (`2/0`) verification keys derive locally. Bech32 ADDRESS assembly is left
+* to Cardano tooling — `deriveKey` hands you the raw vkeys it needs.
+*/
+var CardanoAccountView = class {
+	constructor(entry, resolvedXfp) {
+		this.entry = entry;
+		this.resolvedXfp = resolvedXfp;
+	}
+	get xfp() {
+		return require_shared.xfpToHex(this.resolvedXfp);
+	}
+	get accountPath() {
+		return require_shared.formatPath([...this.entry.path]);
+	}
+	/** The account-level extended public key material. */
+	get publicKey() {
+		return requireKey(this.entry, 32);
+	}
+	get chainCode() {
+		return withChainCode(this.entry);
+	}
+	/** Signing path for `role/index`, e.g. `pathFor(0, 0)` → `.../0/0`. */
+	pathFor(role, index) {
+		return `${this.accountPath}/${role}/${index}`;
+	}
+	/** Soft-derived 32-byte verification key at `role/index` (0 payment, 1 change, 2 stake). */
+	deriveKey(role, index) {
+		return require_derive.cardanoSoftDerivePath(requireKey(this.entry, 32), withChainCode(this.entry), [role, index]);
+	}
+};
+/**
 * Solana view: Ed25519 has no public child derivation, so the device
 * pre-derives hardened accounts (`m/44'/501'/idx'`) and each entry IS a
 * signer. The public key, base58, IS the address.
 */
 var SolanaAccountView = class {
-	constructor(entry) {
+	constructor(entry, resolvedXfp) {
 		this.entry = entry;
+		this.resolvedXfp = resolvedXfp;
 	}
 	get xfp() {
-		return require_shared.xfpToHex(this.entry.xfp);
+		return require_shared.xfpToHex(this.resolvedXfp);
 	}
 	get path() {
 		return require_shared.formatPath([...this.entry.path]);
@@ -309,7 +285,7 @@ var SolanaAccountView = class {
 		return requireKey(this.entry, 32);
 	}
 	get address() {
-		return solanaAddressFromPublicKey(requireKey(this.entry, 32));
+		return require_derive.solanaAddressFromPublicKey(requireKey(this.entry, 32));
 	}
 };
 function extendedKeyOf(entry, version) {
@@ -323,7 +299,7 @@ function extendedKeyOf(entry, version) {
 		chainCode,
 		publicKey
 	};
-	return version === void 0 ? serializeExtendedPublicKey(args) : serializeExtendedPublicKey({
+	return version === void 0 ? require_derive.serializeExtendedPublicKey(args) : require_derive.serializeExtendedPublicKey({
 		...args,
 		version
 	});
@@ -357,7 +333,7 @@ var EraAccounts = class EraAccounts {
 		return this.raw.entries.map((entry) => ({
 			chain: classify(entry.path),
 			path: require_shared.formatPath([...entry.path]),
-			xfp: require_shared.xfpToHex(entry.xfp),
+			xfp: require_shared.xfpToHex(entry.xfp ?? this.raw.masterFingerprint),
 			publicKey: entry.publicKey ?? void 0,
 			chainCode: entry.chainCode ?? void 0,
 			name: entry.name ?? void 0,
@@ -369,12 +345,16 @@ var EraAccounts = class EraAccounts {
 	* equals `accountPath`. Throws `account-not-found` — never a silent zero.
 	*/
 	xfpFor(accountPath) {
-		return require_shared.xfpToHex(this.entryFor(accountPath).xfp);
+		return require_shared.xfpToHex(this.resolveXfp(this.entryFor(accountPath)));
+	}
+	/** Entry xfp, falling back to the wrapper's master fingerprint (Cardano-style path-only origins). */
+	resolveXfp(entry) {
+		return entry.xfp ?? this.raw.masterFingerprint;
 	}
 	/** The EVM account (standard `m/44'/60'/...` scheme), if the export carries one. */
 	evm() {
 		const entry = this.raw.entries.find((e) => classify(e.path) === "evm" && (e.note === null || e.note === "account.standard")) ?? this.raw.entries.find((e) => classify(e.path) === "evm");
-		return entry ? new EvmAccountView(entry) : void 0;
+		return entry ? new EvmAccountView(entry, this.resolveXfp(entry)) : void 0;
 	}
 	/**
 	* A Bitcoin account view. Defaults to the BIP-84 native-segwit account;
@@ -384,20 +364,25 @@ var EraAccounts = class EraAccounts {
 	btc(options) {
 		const purpose = options?.purpose ?? 84;
 		const entry = this.raw.entries.find((e) => classify(e.path) === "btc" && e.path[0]?.index === purpose);
-		return entry ? new BtcAccountView(entry, options?.testnet ?? false, purpose) : void 0;
+		return entry ? new BtcAccountView(entry, options?.testnet ?? false, purpose, this.resolveXfp(entry)) : void 0;
 	}
 	tron() {
 		const entry = this.raw.entries.find((e) => classify(e.path) === "tron");
-		return entry ? new TronAccountView(entry) : void 0;
+		return entry ? new TronAccountView(entry, this.resolveXfp(entry)) : void 0;
 	}
 	/** The TON account (linked via the Tonkeeper-style `crypto-hdkey` export). */
 	ton() {
 		const entry = this.raw.entries.find((e) => classify(e.path) === "ton" && e.publicKey?.length === 32);
-		return entry ? new TonAccountView(entry) : void 0;
+		return entry ? new TonAccountView(entry, this.resolveXfp(entry)) : void 0;
+	}
+	/** The Cardano account (CIP-1852 Icarus export), if the export carries one. */
+	cardano() {
+		const entry = this.raw.entries.find((e) => classify(e.path) === "cardano" && e.publicKey?.length === 32);
+		return entry ? new CardanoAccountView(entry, this.resolveXfp(entry)) : void 0;
 	}
 	/** All pre-derived Solana signers (usually `m/44'/501'/0'..9'`). */
 	solana() {
-		return this.raw.entries.filter((e) => classify(e.path) === "solana" && e.publicKey?.length === 32).map((e) => new SolanaAccountView(e));
+		return this.raw.entries.filter((e) => classify(e.path) === "solana" && e.publicKey?.length === 32).map((e) => new SolanaAccountView(e, this.resolveXfp(e)));
 	}
 	entryFor(accountPath) {
 		const levels = require_shared.parsePath(accountPath);
@@ -522,6 +507,10 @@ var EraConnect = class {
 		this._ton ?? (this._ton = new require_ton.TonChain(this.context));
 		return this._ton;
 	}
+	get cardano() {
+		this._cardano ?? (this._cardano = new require_cardano.CardanoChain(this.context));
+		return this._cardano;
+	}
 	/** Escape hatch for UR types without a dedicated module. */
 	get raw() {
 		this._raw ?? (this._raw = new RawModule(this.context));
@@ -551,6 +540,8 @@ var EraConnect = class {
 exports.AnimatedUr = require_shared.AnimatedUr;
 exports.BtcAccountView = BtcAccountView;
 exports.BtcChain = require_btc.BtcChain;
+exports.CardanoAccountView = CardanoAccountView;
+exports.CardanoChain = require_cardano.CardanoChain;
 exports.DEFAULT_FRAGMENT_LENGTH = require_shared.DEFAULT_FRAGMENT_LENGTH;
 exports.DEFAULT_ORIGIN = require_shared.DEFAULT_ORIGIN;
 exports.DeviceProfile = DeviceProfile;
@@ -573,6 +564,7 @@ exports.TypedUrScanner = require_shared.TypedUrScanner;
 exports.Ur = require_shared.Ur;
 exports.UrLimits = require_shared.UrLimits;
 exports.UrScanner = require_shared.UrScanner;
+exports.parseWitnessSet = require_cardano.parseWitnessSet;
 exports.utf8Decode = require_shared.utf8Decode;
 exports.utf8Encode = require_shared.utf8Encode;