@hwlt/era-connect 0.2.0 → 0.4.0

package/README.md

@@ -78,6 +78,11 @@ today and speaks the rest through the same primitives.
 | Solana | `sol-sign-request` | off-chain messages | `@hwlt/era-connect/solana` |
 | Tron | structured envelope (any contract via `rawData`) | UTF-8 in `rawData` | `@hwlt/era-connect/tron` |
 | TON | `ton-sign-request` (BoC root-hash signing) | TON Connect proof | `@hwlt/era-connect/ton` |
+| Cardano | `cardano-sign-request` (witness-set replies, soft-derived vkey binding) | — | `@hwlt/era-connect/cardano` |
+| Sui | `sui-sign-request` / hash variant | — | `@hwlt/era-connect/sui` |
+| Cosmos (~35 networks incl. Ethermint) | `cosmos-sign-request` / `evm-sign-request` | ADR-036 | `@hwlt/era-connect/cosmos` |
+| XRP | `ur:bytes` (XRP Toolkit convention) | — | `@hwlt/era-connect/xrp` |
+| Litecoin, Dogecoin, Dash | `crypto-psbt-extend` (same flow as Bitcoin) | — | `@hwlt/era-connect/btc` |
 
 **Also supported by the device** — usable today via `era.raw` +
 `era.scanner({expectedTypes})`, dedicated modules on the roadmap (order driven
@@ -85,12 +90,7 @@ by integrator demand):
 
 | Chain | Wire type | Module status |
 |---|---|---|
-| Cosmos (~35 networks, incl. Ethermint: INJ/EVMOS/DYM) | `cosmos-sign-request` / `evm-sign-request` | planned |
-| Cardano | `cardano-sign-request` | planned |
-| Sui | `sui-sign-request` / `sui-sign-hash-request` | planned |
-| Dogecoin | `crypto-psbt-extend` | planned |
-| Litecoin, Dash, Bitcoin Cash | structured envelope (as Tron) | planned |
-| XRP | `ur:bytes` (XRP Toolkit convention) | planned |
+| Bitcoin Cash | structured envelope (FORKID signing) | planned |
 
 Two things make the gap workable now: **linking already surfaces every account
 the device exports** (unknown chains still carry their path, fingerprint and

package/cardano/package.json

@@ -0,0 +1,6 @@
+{
+  "main": "../dist/cardano.cjs",
+  "module": "../dist/cardano.js",
+  "types": "../dist/cardano.d.ts",
+  "react-native": "../dist/cardano.js"
+}

package/cosmos/package.json

@@ -0,0 +1,6 @@
+{
+  "main": "../dist/cosmos.cjs",
+  "module": "../dist/cosmos.js",
+  "types": "../dist/cosmos.d.ts",
+  "react-native": "../dist/cosmos.js"
+}

package/dist/{btc-DfQ0q79G.d.ts → btc-B8LfSEkv.d.ts}

@@ -1,8 +1,17 @@
 import { _ as Ur, a as SignRequest, i as ExpectedReply, r as EraConnectConfig } from "./shared-CI8zhQiE.js";
 //#region src/chains/btc.d.ts
+/** Bitcoin-family coins the PSBT path signs for (BCH needs the FORKID signer and is not offered here). */
+type PsbtCoin = 'btc' | 'ltc' | 'doge' | 'dash';
 interface BtcPsbtSignRequestProps {
   /** Raw PSBT v0 bytes (BIP-174). The device's signer relies on the global UNSIGNED_TX. */
   readonly psbt: Uint8Array;
+  /**
+   * `'btc'` (default) rides plain `crypto-psbt`; Litecoin/Dogecoin/Dash ride
+   * `crypto-psbt-extend` — the same PSBT plus the coin id, answered in kind.
+   * Build the PSBT with the coin's own derivation paths (LTC `m/84'/2'/…`,
+   * DOGE `m/44'/3'/…`, DASH `m/44'/5'/…`).
+   */
+  readonly coin?: PsbtCoin;
 }
 interface BtcPsbtResult {
   /** The signed, NOT finalized PSBT. Finalize + broadcast with your own stack. */
@@ -46,7 +55,7 @@ declare class BtcChain {
    * check re-opens replay of a stale signed PSBT.
    */
   generatePsbtSignRequest(props: BtcPsbtSignRequestProps): SignRequest<BtcPsbtResult>;
-  /** Parse a `crypto-psbt` reply: the signed (not finalized) PSBT bytes. */
+  /** Parse a `crypto-psbt` / `crypto-psbt-extend` reply: the signed (not finalized) PSBT bytes. */
   parsePsbt(input: Ur | string): BtcPsbtResult;
   /** Build a `btc-sign-request` (8101) for message signing. Reply: `btc-signature` (8102). */
   generateMessageSignRequest(props: BtcMessageSignRequestProps): SignRequest<BtcMessageSignatureResult>;
@@ -55,4 +64,4 @@ declare class BtcChain {
 }
 //#endregion
 export { BtcPsbtSignRequestProps as a, BtcPsbtResult as i, BtcMessageSignRequestProps as n, BtcMessageSignatureResult as r, BtcChain as t };
-//# sourceMappingURL=btc-DfQ0q79G.d.ts.map
+//# sourceMappingURL=btc-B8LfSEkv.d.ts.map

package/dist/{btc-VyJKXq7d.js → btc-B_Nq2H4T.js}

@@ -1,7 +1,15 @@
-import { G as cbMap, J as cbUint, K as cbTag, M as keypath304, N as normalizeXfp, P as parsePath, S as asciiDecode, U as cbArray, W as cbBytes, Y as mapGet, Z as EraSdkError, _ as Ur, b as cborDecode, c as resolveRequestId, h as normalizeRequestId, i as requireRequestIdEcho, l as toUr, n as makeSignRequest, o as requireUrType, q as cbText, r as requireReplyMap, s as resolveContext, x as cborEncode, z as asBytes } from "./shared-B8Wc7ViU.js";
+import { B as cbMap, H as cbText, K as EraSdkError, L as cbArray, N as asBytes, S as asciiDecode, U as cbUint, V as cbTag, W as mapGet, _ as Ur, b as cborDecode, c as resolveRequestId, h as normalizeRequestId, i as requireRequestIdEcho, l as toUr, n as makeSignRequest, o as requireUrType, r as requireReplyMap, s as resolveContext, x as cborEncode, z as cbBytes } from "./shared-Bbgejrus.js";
+import { i as parsePath, n as keypath304, r as normalizeXfp } from "./keypath-Bvv_cfHt.js";
 import { base64 } from "@scure/base";
 //#region src/chains/btc.ts
+/** `crypto-psbt-extend` coin ids (the device's own coin-type table). */
+const PSBT_EXTEND_COIN_ID = {
+	ltc: 2,
+	doge: 3,
+	dash: 5
+};
 const PSBT_REPLY_TYPES = ["crypto-psbt"];
+const PSBT_EXTEND_REPLY_TYPES = ["crypto-psbt-extend", "crypto-psbt"];
 const MESSAGE_REPLY_TYPES = ["btc-signature"];
 var BtcChain = class BtcChain {
 	constructor(config) {
@@ -19,25 +27,26 @@ var BtcChain = class BtcChain {
 	*/
 	generatePsbtSignRequest(props) {
 		if (props.psbt.length === 0) throw new EraSdkError("invalid-props", "psbt must not be empty");
-		const ur = new Ur("crypto-psbt", cborEncode(cbBytes(props.psbt)));
+		const coin = props.coin ?? "btc";
+		const ur = coin === "btc" ? new Ur("crypto-psbt", cborEncode(cbBytes(props.psbt))) : new Ur("crypto-psbt-extend", cborEncode(cbMap([[1, cbBytes(props.psbt)], [2, cbUint(PSBT_EXTEND_COIN_ID[coin])]])));
 		return makeSignRequest({
 			ur,
-			replyTypes: PSBT_REPLY_TYPES,
+			replyTypes: coin === "btc" ? PSBT_REPLY_TYPES : PSBT_EXTEND_REPLY_TYPES,
 			context: this.context,
 			parse: (reply) => this.parsePsbt(reply)
 		});
 	}
-	/** Parse a `crypto-psbt` reply: the signed (not finalized) PSBT bytes. */
+	/** Parse a `crypto-psbt` / `crypto-psbt-extend` reply: the signed (not finalized) PSBT bytes. */
 	parsePsbt(input) {
 		const ur = toUr(input);
-		requireUrType(ur, [...PSBT_REPLY_TYPES], "crypto-psbt");
+		requireUrType(ur, [...PSBT_EXTEND_REPLY_TYPES], "crypto-psbt");
 		let decoded;
 		try {
 			decoded = cborDecode(ur.cbor);
 		} catch (e) {
 			throw new EraSdkError("malformed-cbor", `crypto-psbt reply: ${e.message}`);
 		}
-		const bytes = asBytes(decoded);
+		const bytes = asBytes(decoded) ?? asBytes(mapGet(decoded, 1));
 		if (!bytes) throw new EraSdkError("malformed-reply", "crypto-psbt reply is not a byte string");
 		if (bytes.length === 0) throw new EraSdkError("malformed-reply", "crypto-psbt reply is empty");
 		return { psbt: bytes };
@@ -96,4 +105,4 @@ function parseMessageSignature(ur, expectedRequestId) {
 //#endregion
 export { BtcChain as t };
 
-//# sourceMappingURL=btc-VyJKXq7d.js.map
+//# sourceMappingURL=btc-B_Nq2H4T.js.map

package/dist/btc-B_Nq2H4T.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"btc-B_Nq2H4T.js","names":["UrValue"],"sources":["../src/chains/btc.ts"],"sourcesContent":["import { base64 } from '@scure/base';\nimport { cborDecode } from '../cbor/decode';\nimport { cborEncode } from '../cbor/encode';\nimport type { CborValue } from '../cbor/model';\nimport { asBytes, cbArray, cbBytes, cbMap, cbTag, cbText, cbUint, mapGet } from '../cbor/model';\nimport { asciiDecode } from '../core/bytes';\nimport { EraSdkError } from '../core/errors';\nimport { normalizeRequestId } from '../core/rand';\nimport { keypath304, normalizeXfp, parsePath } from '../registry/keypath';\nimport type { Ur } from '../ur/ur';\nimport { Ur as UrValue } from '../ur/ur';\nimport type { ChainContext, EraConnectConfig, ExpectedReply, SignRequest } from './shared';\nimport {\n  makeSignRequest,\n  requireReplyMap,\n  requireRequestIdEcho,\n  requireUrType,\n  resolveContext,\n  resolveRequestId,\n  toUr,\n} from './shared';\n\n/** Bitcoin-family coins the PSBT path signs for (BCH needs the FORKID signer and is not offered here). */\nexport type PsbtCoin = 'btc' | 'ltc' | 'doge' | 'dash';\n\n/** `crypto-psbt-extend` coin ids (the device's own coin-type table). */\nconst PSBT_EXTEND_COIN_ID: Record<Exclude<PsbtCoin, 'btc'>, number> = {\n  ltc: 2,\n  doge: 3,\n  dash: 5,\n};\n\nexport interface BtcPsbtSignRequestProps {\n  /** Raw PSBT v0 bytes (BIP-174). The device's signer relies on the global UNSIGNED_TX. */\n  readonly psbt: Uint8Array;\n  /**\n   * `'btc'` (default) rides plain `crypto-psbt`; Litecoin/Dogecoin/Dash ride\n   * `crypto-psbt-extend` — the same PSBT plus the coin id, answered in kind.\n   * Build the PSBT with the coin's own derivation paths (LTC `m/84'/2'/…`,\n   * DOGE `m/44'/3'/…`, DASH `m/44'/5'/…`).\n   */\n  readonly coin?: PsbtCoin;\n}\n\nexport interface BtcPsbtResult {\n  /** The signed, NOT finalized PSBT. Finalize + broadcast with your own stack. */\n  readonly psbt: Uint8Array;\n}\n\nexport interface BtcMessageSignRequestProps {\n  readonly requestId?: Uint8Array | string;\n  readonly message: Uint8Array;\n  /** Full signing path, e.g. `m/84'/0'/0'/0/0`. */\n  readonly path: string;\n  readonly xfp: string | number;\n  /**\n   * The signing address. The device's message signer supports LEGACY P2PKH\n   * (`1...`) addresses only; a segwit address yields `empty-signature`.\n   */\n  readonly address: string;\n  readonly origin?: string;\n}\n\nexport interface BtcMessageSignatureResult {\n  readonly requestId: Uint8Array;\n  /** Raw 65-byte BIP-137 signature (header + r + s). */\n  readonly signature: Uint8Array;\n  /** The base64 form dApps and verifiers expect. */\n  readonly signatureBase64: string;\n  readonly publicKey: Uint8Array | undefined;\n}\n\nconst PSBT_REPLY_TYPES = ['crypto-psbt'] as const;\nconst PSBT_EXTEND_REPLY_TYPES = ['crypto-psbt-extend', 'crypto-psbt'] as const;\nconst MESSAGE_REPLY_TYPES = ['btc-signature'] as const;\n\nexport class BtcChain {\n  static readonly DataType = { message: 1 } as const;\n\n  private readonly context: ChainContext;\n\n  constructor(config?: EraConnectConfig) {\n    this.context = resolveContext(config);\n  }\n\n  /**\n   * Build a `crypto-psbt` (310) request: the UR payload is a bare CBOR byte\n   * string of the raw PSBT — no map, no request id, no origin.\n   *\n   * BECAUSE the protocol carries no request id on this path, the reply is\n   * bound to the request only by its content: after parsing, compare the\n   * returned PSBT's unsigned transaction against the one you sent\n   * (`verifySignedPsbt` from `@hwlt/era-connect/verify`). Skipping that\n   * check re-opens replay of a stale signed PSBT.\n   */\n  generatePsbtSignRequest(props: BtcPsbtSignRequestProps): SignRequest<BtcPsbtResult> {\n    if (props.psbt.length === 0) {\n      throw new EraSdkError('invalid-props', 'psbt must not be empty');\n    }\n    const coin = props.coin ?? 'btc';\n    const ur =\n      coin === 'btc'\n        ? new UrValue('crypto-psbt', cborEncode(cbBytes(props.psbt)))\n        : new UrValue(\n            'crypto-psbt-extend',\n            cborEncode(\n              cbMap([\n                [1, cbBytes(props.psbt)],\n                [2, cbUint(PSBT_EXTEND_COIN_ID[coin])],\n              ]),\n            ),\n          );\n    return makeSignRequest({\n      ur,\n      replyTypes: coin === 'btc' ? PSBT_REPLY_TYPES : PSBT_EXTEND_REPLY_TYPES,\n      context: this.context,\n      parse: (reply) => this.parsePsbt(reply),\n    });\n  }\n\n  /** Parse a `crypto-psbt` / `crypto-psbt-extend` reply: the signed (not finalized) PSBT bytes. */\n  parsePsbt(input: Ur | string): BtcPsbtResult {\n    const ur = toUr(input);\n    requireUrType(ur, [...PSBT_EXTEND_REPLY_TYPES], 'crypto-psbt');\n    let decoded: CborValue;\n    try {\n      decoded = cborDecode(ur.cbor);\n    } catch (e) {\n      throw new EraSdkError('malformed-cbor', `crypto-psbt reply: ${(e as Error).message}`);\n    }\n    // Plain form: a bare byte string. Extend form: {1: psbt, 2: coinId}.\n    const bytes = asBytes(decoded) ?? asBytes(mapGet(decoded, 1));\n    if (!bytes) {\n      throw new EraSdkError('malformed-reply', 'crypto-psbt reply is not a byte string');\n    }\n    if (bytes.length === 0) {\n      throw new EraSdkError('malformed-reply', 'crypto-psbt reply is empty');\n    }\n    return { psbt: bytes };\n  }\n\n  /** Build a `btc-sign-request` (8101) for message signing. Reply: `btc-signature` (8102). */\n  generateMessageSignRequest(\n    props: BtcMessageSignRequestProps,\n  ): SignRequest<BtcMessageSignatureResult> {\n    const requestId = resolveRequestId(this.context, props.requestId);\n    const path = parsePath(props.path);\n    const xfp = normalizeXfp(props.xfp);\n\n    const ur = new UrValue(\n      'btc-sign-request',\n      cborEncode(\n        cbMap([\n          // Tag-37-wrapped on this chain (per-chain firmware policy).\n          [1, cbTag(37, cbBytes(requestId))],\n          [2, cbBytes(props.message)],\n          [3, cbUint(BtcChain.DataType.message)],\n          [4, cbArray([keypath304(path, xfp)])],\n          [5, cbArray([cbText(props.address)])],\n          [6, cbText(props.origin ?? this.context.origin)],\n        ]),\n      ),\n    );\n    return makeSignRequest({\n      ur,\n      requestId,\n      replyTypes: MESSAGE_REPLY_TYPES,\n      context: this.context,\n      parse: (reply) => parseMessageSignature(reply, requestId),\n    });\n  }\n\n  /** Parse a `btc-signature` standalone. Prefer `SignRequest.scanner().parse()`. */\n  parseMessageSignature(input: Ur | string, expect?: ExpectedReply): BtcMessageSignatureResult {\n    return parseMessageSignature(\n      toUr(input),\n      expect?.requestId === undefined ? undefined : normalizeRequestId(expect.requestId),\n    );\n  }\n}\n\nfunction parseMessageSignature(\n  ur: Ur,\n  expectedRequestId: Uint8Array | undefined,\n): BtcMessageSignatureResult {\n  requireUrType(ur, [...MESSAGE_REPLY_TYPES], 'btc-signature');\n  const map = requireReplyMap(ur, 'btc-signature');\n  const requestId = requireRequestIdEcho(map, 1, expectedRequestId, 'btc-signature');\n\n  const sigValue = asBytes(mapGet(map, 2));\n  if (sigValue === undefined) {\n    throw new EraSdkError('malformed-reply', 'btc-signature is missing the signature (key 2)');\n  }\n  // The device answers a message request for an address its signer cannot\n  // handle (any non-legacy script type) with an EMPTY signature.\n  if (sigValue.length === 0) {\n    throw new EraSdkError(\n      'empty-signature',\n      'the device returned an empty signature — Bitcoin message signing supports legacy P2PKH (1...) addresses only',\n    );\n  }\n\n  // Device quirk: the reply bytes are the ASCII of a base64 string, not raw\n  // signature bytes. Decode twice; tolerate a firmware that starts sending\n  // raw 65-byte signatures directly.\n  let signature: Uint8Array;\n  try {\n    signature = base64.decode(asciiDecode(sigValue));\n  } catch {\n    signature = sigValue;\n  }\n  if (signature.length !== 65) {\n    if (sigValue.length === 65) {\n      signature = sigValue;\n    } else {\n      throw new EraSdkError(\n        'malformed-reply',\n        `btc-signature payload does not decode to a 65-byte BIP-137 signature (${sigValue.length} bytes on the wire)`,\n      );\n    }\n  }\n  return {\n    requestId,\n    signature,\n    signatureBase64: base64.encode(signature),\n    publicKey: asBytes(mapGet(map, 3)),\n  };\n}\n"],"mappings":";;;;;AA0BA,MAAM,sBAAgE;CACpE,KAAK;CACL,MAAM;CACN,MAAM;AACR;AA0CA,MAAM,mBAAmB,CAAC,aAAa;AACvC,MAAM,0BAA0B,CAAC,sBAAsB,aAAa;AACpE,MAAM,sBAAsB,CAAC,eAAe;AAE5C,IAAa,WAAb,MAAa,SAAS;CAKpB,YAAY,QAA2B;EACrC,KAAK,UAAU,eAAe,MAAM;CACtC;;;;;;;;;;;CAYA,wBAAwB,OAA4D;EAClF,IAAI,MAAM,KAAK,WAAW,GACxB,MAAM,IAAI,YAAY,iBAAiB,wBAAwB;EAEjE,MAAM,OAAO,MAAM,QAAQ;EAC3B,MAAM,KACJ,SAAS,QACL,IAAIA,GAAQ,eAAe,WAAW,QAAQ,MAAM,IAAI,CAAC,CAAC,IAC1D,IAAIA,GACF,sBACA,WACE,MAAM,CACJ,CAAC,GAAG,QAAQ,MAAM,IAAI,CAAC,GACvB,CAAC,GAAG,OAAO,oBAAoB,KAAK,CAAC,CACvC,CAAC,CACH,CACF;EACN,OAAO,gBAAgB;GACrB;GACA,YAAY,SAAS,QAAQ,mBAAmB;GAChD,SAAS,KAAK;GACd,QAAQ,UAAU,KAAK,UAAU,KAAK;EACxC,CAAC;CACH;;CAGA,UAAU,OAAmC;EAC3C,MAAM,KAAK,KAAK,KAAK;EACrB,cAAc,IAAI,CAAC,GAAG,uBAAuB,GAAG,aAAa;EAC7D,IAAI;EACJ,IAAI;GACF,UAAU,WAAW,GAAG,IAAI;EAC9B,SAAS,GAAG;GACV,MAAM,IAAI,YAAY,kBAAkB,sBAAuB,EAAY,SAAS;EACtF;EAEA,MAAM,QAAQ,QAAQ,OAAO,KAAK,QAAQ,OAAO,SAAS,CAAC,CAAC;EAC5D,IAAI,CAAC,OACH,MAAM,IAAI,YAAY,mBAAmB,wCAAwC;EAEnF,IAAI,MAAM,WAAW,GACnB,MAAM,IAAI,YAAY,mBAAmB,4BAA4B;EAEvE,OAAO,EAAE,MAAM,MAAM;CACvB;;CAGA,2BACE,OACwC;EACxC,MAAM,YAAY,iBAAiB,KAAK,SAAS,MAAM,SAAS;EAChE,MAAM,OAAO,UAAU,MAAM,IAAI;EACjC,MAAM,MAAM,aAAa,MAAM,GAAG;EAElC,MAAM,KAAK,IAAIA,GACb,oBACA,WACE,MAAM;GAEJ,CAAC,GAAG,MAAM,IAAI,QAAQ,SAAS,CAAC,CAAC;GACjC,CAAC,GAAG,QAAQ,MAAM,OAAO,CAAC;GAC1B,CAAC,GAAG,OAAO,SAAS,SAAS,OAAO,CAAC;GACrC,CAAC,GAAG,QAAQ,CAAC,WAAW,MAAM,GAAG,CAAC,CAAC,CAAC;GACpC,CAAC,GAAG,QAAQ,CAAC,OAAO,MAAM,OAAO,CAAC,CAAC,CAAC;GACpC,CAAC,GAAG,OAAO,MAAM,UAAU,KAAK,QAAQ,MAAM,CAAC;EACjD,CAAC,CACH,CACF;EACA,OAAO,gBAAgB;GACrB;GACA;GACA,YAAY;GACZ,SAAS,KAAK;GACd,QAAQ,UAAU,sBAAsB,OAAO,SAAS;EAC1D,CAAC;CACH;;CAGA,sBAAsB,OAAoB,QAAmD;EAC3F,OAAO,sBACL,KAAK,KAAK,GACV,QAAQ,cAAc,KAAA,IAAY,KAAA,IAAY,mBAAmB,OAAO,SAAS,CACnF;CACF;AACF;AAtGE,SAAgB,WAAW,EAAE,SAAS,EAAE;AAwG1C,SAAS,sBACP,IACA,mBAC2B;CAC3B,cAAc,IAAI,CAAC,GAAG,mBAAmB,GAAG,eAAe;CAC3D,MAAM,MAAM,gBAAgB,IAAI,eAAe;CAC/C,MAAM,YAAY,qBAAqB,KAAK,GAAG,mBAAmB,eAAe;CAEjF,MAAM,WAAW,QAAQ,OAAO,KAAK,CAAC,CAAC;CACvC,IAAI,aAAa,KAAA,GACf,MAAM,IAAI,YAAY,mBAAmB,gDAAgD;CAI3F,IAAI,SAAS,WAAW,GACtB,MAAM,IAAI,YACR,mBACA,8GACF;CAMF,IAAI;CACJ,IAAI;EACF,YAAY,OAAO,OAAO,YAAY,QAAQ,CAAC;CACjD,QAAQ;EACN,YAAY;CACd;CACA,IAAI,UAAU,WAAW,IAAI;EAC3B,IAAI,SAAS,WAAW,IACtB,YAAY;OAEZ,MAAM,IAAI,YACR,mBACA,yEAAyE,SAAS,OAAO,oBAC3F;CAEJ;CACA,OAAO;EACL;EACA;EACA,iBAAiB,OAAO,OAAO,SAAS;EACxC,WAAW,QAAQ,OAAO,KAAK,CAAC,CAAC;CACnC;AACF"}

package/dist/{btc-Fr6Jz4Fi.cjs → btc-ByzjzUKs.cjs}

@@ -1,7 +1,15 @@
-const require_shared = require("./shared-nISrEktU.cjs");
+const require_shared = require("./shared-Cu2yynP9.cjs");
+const require_keypath = require("./keypath-pzm_YIfN.cjs");
 let _scure_base = require("@scure/base");
 //#region src/chains/btc.ts
+/** `crypto-psbt-extend` coin ids (the device's own coin-type table). */
+const PSBT_EXTEND_COIN_ID = {
+	ltc: 2,
+	doge: 3,
+	dash: 5
+};
 const PSBT_REPLY_TYPES = ["crypto-psbt"];
+const PSBT_EXTEND_REPLY_TYPES = ["crypto-psbt-extend", "crypto-psbt"];
 const MESSAGE_REPLY_TYPES = ["btc-signature"];
 var BtcChain = class BtcChain {
 	constructor(config) {
@@ -19,25 +27,26 @@ var BtcChain = class BtcChain {
 	*/
 	generatePsbtSignRequest(props) {
 		if (props.psbt.length === 0) throw new require_shared.EraSdkError("invalid-props", "psbt must not be empty");
-		const ur = new require_shared.Ur("crypto-psbt", require_shared.cborEncode(require_shared.cbBytes(props.psbt)));
+		const coin = props.coin ?? "btc";
+		const ur = coin === "btc" ? new require_shared.Ur("crypto-psbt", require_shared.cborEncode(require_shared.cbBytes(props.psbt))) : new require_shared.Ur("crypto-psbt-extend", require_shared.cborEncode(require_shared.cbMap([[1, require_shared.cbBytes(props.psbt)], [2, require_shared.cbUint(PSBT_EXTEND_COIN_ID[coin])]])));
 		return require_shared.makeSignRequest({
 			ur,
-			replyTypes: PSBT_REPLY_TYPES,
+			replyTypes: coin === "btc" ? PSBT_REPLY_TYPES : PSBT_EXTEND_REPLY_TYPES,
 			context: this.context,
 			parse: (reply) => this.parsePsbt(reply)
 		});
 	}
-	/** Parse a `crypto-psbt` reply: the signed (not finalized) PSBT bytes. */
+	/** Parse a `crypto-psbt` / `crypto-psbt-extend` reply: the signed (not finalized) PSBT bytes. */
 	parsePsbt(input) {
 		const ur = require_shared.toUr(input);
-		require_shared.requireUrType(ur, [...PSBT_REPLY_TYPES], "crypto-psbt");
+		require_shared.requireUrType(ur, [...PSBT_EXTEND_REPLY_TYPES], "crypto-psbt");
 		let decoded;
 		try {
 			decoded = require_shared.cborDecode(ur.cbor);
 		} catch (e) {
 			throw new require_shared.EraSdkError("malformed-cbor", `crypto-psbt reply: ${e.message}`);
 		}
-		const bytes = require_shared.asBytes(decoded);
+		const bytes = require_shared.asBytes(decoded) ?? require_shared.asBytes(require_shared.mapGet(decoded, 1));
 		if (!bytes) throw new require_shared.EraSdkError("malformed-reply", "crypto-psbt reply is not a byte string");
 		if (bytes.length === 0) throw new require_shared.EraSdkError("malformed-reply", "crypto-psbt reply is empty");
 		return { psbt: bytes };
@@ -45,13 +54,13 @@ var BtcChain = class BtcChain {
 	/** Build a `btc-sign-request` (8101) for message signing. Reply: `btc-signature` (8102). */
 	generateMessageSignRequest(props) {
 		const requestId = require_shared.resolveRequestId(this.context, props.requestId);
-		const path = require_shared.parsePath(props.path);
-		const xfp = require_shared.normalizeXfp(props.xfp);
+		const path = require_keypath.parsePath(props.path);
+		const xfp = require_keypath.normalizeXfp(props.xfp);
 		const ur = new require_shared.Ur("btc-sign-request", require_shared.cborEncode(require_shared.cbMap([
 			[1, require_shared.cbTag(37, require_shared.cbBytes(requestId))],
 			[2, require_shared.cbBytes(props.message)],
 			[3, require_shared.cbUint(BtcChain.DataType.message)],
-			[4, require_shared.cbArray([require_shared.keypath304(path, xfp)])],
+			[4, require_shared.cbArray([require_keypath.keypath304(path, xfp)])],
 			[5, require_shared.cbArray([require_shared.cbText(props.address)])],
 			[6, require_shared.cbText(props.origin ?? this.context.origin)]
 		])));
@@ -101,4 +110,4 @@ Object.defineProperty(exports, "BtcChain", {
 	}
 });
 
-//# sourceMappingURL=btc-Fr6Jz4Fi.cjs.map
+//# sourceMappingURL=btc-ByzjzUKs.cjs.map

package/dist/btc-ByzjzUKs.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"btc-ByzjzUKs.cjs","names":["resolveContext","EraSdkError","UrValue","cborEncode","cbBytes","cbMap","cbUint","makeSignRequest","toUr","cborDecode","asBytes","mapGet","resolveRequestId","parsePath","normalizeXfp","cbTag","cbArray","keypath304","cbText","normalizeRequestId","requireReplyMap","requireRequestIdEcho","base64","asciiDecode"],"sources":["../src/chains/btc.ts"],"sourcesContent":["import { base64 } from '@scure/base';\nimport { cborDecode } from '../cbor/decode';\nimport { cborEncode } from '../cbor/encode';\nimport type { CborValue } from '../cbor/model';\nimport { asBytes, cbArray, cbBytes, cbMap, cbTag, cbText, cbUint, mapGet } from '../cbor/model';\nimport { asciiDecode } from '../core/bytes';\nimport { EraSdkError } from '../core/errors';\nimport { normalizeRequestId } from '../core/rand';\nimport { keypath304, normalizeXfp, parsePath } from '../registry/keypath';\nimport type { Ur } from '../ur/ur';\nimport { Ur as UrValue } from '../ur/ur';\nimport type { ChainContext, EraConnectConfig, ExpectedReply, SignRequest } from './shared';\nimport {\n  makeSignRequest,\n  requireReplyMap,\n  requireRequestIdEcho,\n  requireUrType,\n  resolveContext,\n  resolveRequestId,\n  toUr,\n} from './shared';\n\n/** Bitcoin-family coins the PSBT path signs for (BCH needs the FORKID signer and is not offered here). */\nexport type PsbtCoin = 'btc' | 'ltc' | 'doge' | 'dash';\n\n/** `crypto-psbt-extend` coin ids (the device's own coin-type table). */\nconst PSBT_EXTEND_COIN_ID: Record<Exclude<PsbtCoin, 'btc'>, number> = {\n  ltc: 2,\n  doge: 3,\n  dash: 5,\n};\n\nexport interface BtcPsbtSignRequestProps {\n  /** Raw PSBT v0 bytes (BIP-174). The device's signer relies on the global UNSIGNED_TX. */\n  readonly psbt: Uint8Array;\n  /**\n   * `'btc'` (default) rides plain `crypto-psbt`; Litecoin/Dogecoin/Dash ride\n   * `crypto-psbt-extend` — the same PSBT plus the coin id, answered in kind.\n   * Build the PSBT with the coin's own derivation paths (LTC `m/84'/2'/…`,\n   * DOGE `m/44'/3'/…`, DASH `m/44'/5'/…`).\n   */\n  readonly coin?: PsbtCoin;\n}\n\nexport interface BtcPsbtResult {\n  /** The signed, NOT finalized PSBT. Finalize + broadcast with your own stack. */\n  readonly psbt: Uint8Array;\n}\n\nexport interface BtcMessageSignRequestProps {\n  readonly requestId?: Uint8Array | string;\n  readonly message: Uint8Array;\n  /** Full signing path, e.g. `m/84'/0'/0'/0/0`. */\n  readonly path: string;\n  readonly xfp: string | number;\n  /**\n   * The signing address. The device's message signer supports LEGACY P2PKH\n   * (`1...`) addresses only; a segwit address yields `empty-signature`.\n   */\n  readonly address: string;\n  readonly origin?: string;\n}\n\nexport interface BtcMessageSignatureResult {\n  readonly requestId: Uint8Array;\n  /** Raw 65-byte BIP-137 signature (header + r + s). */\n  readonly signature: Uint8Array;\n  /** The base64 form dApps and verifiers expect. */\n  readonly signatureBase64: string;\n  readonly publicKey: Uint8Array | undefined;\n}\n\nconst PSBT_REPLY_TYPES = ['crypto-psbt'] as const;\nconst PSBT_EXTEND_REPLY_TYPES = ['crypto-psbt-extend', 'crypto-psbt'] as const;\nconst MESSAGE_REPLY_TYPES = ['btc-signature'] as const;\n\nexport class BtcChain {\n  static readonly DataType = { message: 1 } as const;\n\n  private readonly context: ChainContext;\n\n  constructor(config?: EraConnectConfig) {\n    this.context = resolveContext(config);\n  }\n\n  /**\n   * Build a `crypto-psbt` (310) request: the UR payload is a bare CBOR byte\n   * string of the raw PSBT — no map, no request id, no origin.\n   *\n   * BECAUSE the protocol carries no request id on this path, the reply is\n   * bound to the request only by its content: after parsing, compare the\n   * returned PSBT's unsigned transaction against the one you sent\n   * (`verifySignedPsbt` from `@hwlt/era-connect/verify`). Skipping that\n   * check re-opens replay of a stale signed PSBT.\n   */\n  generatePsbtSignRequest(props: BtcPsbtSignRequestProps): SignRequest<BtcPsbtResult> {\n    if (props.psbt.length === 0) {\n      throw new EraSdkError('invalid-props', 'psbt must not be empty');\n    }\n    const coin = props.coin ?? 'btc';\n    const ur =\n      coin === 'btc'\n        ? new UrValue('crypto-psbt', cborEncode(cbBytes(props.psbt)))\n        : new UrValue(\n            'crypto-psbt-extend',\n            cborEncode(\n              cbMap([\n                [1, cbBytes(props.psbt)],\n                [2, cbUint(PSBT_EXTEND_COIN_ID[coin])],\n              ]),\n            ),\n          );\n    return makeSignRequest({\n      ur,\n      replyTypes: coin === 'btc' ? PSBT_REPLY_TYPES : PSBT_EXTEND_REPLY_TYPES,\n      context: this.context,\n      parse: (reply) => this.parsePsbt(reply),\n    });\n  }\n\n  /** Parse a `crypto-psbt` / `crypto-psbt-extend` reply: the signed (not finalized) PSBT bytes. */\n  parsePsbt(input: Ur | string): BtcPsbtResult {\n    const ur = toUr(input);\n    requireUrType(ur, [...PSBT_EXTEND_REPLY_TYPES], 'crypto-psbt');\n    let decoded: CborValue;\n    try {\n      decoded = cborDecode(ur.cbor);\n    } catch (e) {\n      throw new EraSdkError('malformed-cbor', `crypto-psbt reply: ${(e as Error).message}`);\n    }\n    // Plain form: a bare byte string. Extend form: {1: psbt, 2: coinId}.\n    const bytes = asBytes(decoded) ?? asBytes(mapGet(decoded, 1));\n    if (!bytes) {\n      throw new EraSdkError('malformed-reply', 'crypto-psbt reply is not a byte string');\n    }\n    if (bytes.length === 0) {\n      throw new EraSdkError('malformed-reply', 'crypto-psbt reply is empty');\n    }\n    return { psbt: bytes };\n  }\n\n  /** Build a `btc-sign-request` (8101) for message signing. Reply: `btc-signature` (8102). */\n  generateMessageSignRequest(\n    props: BtcMessageSignRequestProps,\n  ): SignRequest<BtcMessageSignatureResult> {\n    const requestId = resolveRequestId(this.context, props.requestId);\n    const path = parsePath(props.path);\n    const xfp = normalizeXfp(props.xfp);\n\n    const ur = new UrValue(\n      'btc-sign-request',\n      cborEncode(\n        cbMap([\n          // Tag-37-wrapped on this chain (per-chain firmware policy).\n          [1, cbTag(37, cbBytes(requestId))],\n          [2, cbBytes(props.message)],\n          [3, cbUint(BtcChain.DataType.message)],\n          [4, cbArray([keypath304(path, xfp)])],\n          [5, cbArray([cbText(props.address)])],\n          [6, cbText(props.origin ?? this.context.origin)],\n        ]),\n      ),\n    );\n    return makeSignRequest({\n      ur,\n      requestId,\n      replyTypes: MESSAGE_REPLY_TYPES,\n      context: this.context,\n      parse: (reply) => parseMessageSignature(reply, requestId),\n    });\n  }\n\n  /** Parse a `btc-signature` standalone. Prefer `SignRequest.scanner().parse()`. */\n  parseMessageSignature(input: Ur | string, expect?: ExpectedReply): BtcMessageSignatureResult {\n    return parseMessageSignature(\n      toUr(input),\n      expect?.requestId === undefined ? undefined : normalizeRequestId(expect.requestId),\n    );\n  }\n}\n\nfunction parseMessageSignature(\n  ur: Ur,\n  expectedRequestId: Uint8Array | undefined,\n): BtcMessageSignatureResult {\n  requireUrType(ur, [...MESSAGE_REPLY_TYPES], 'btc-signature');\n  const map = requireReplyMap(ur, 'btc-signature');\n  const requestId = requireRequestIdEcho(map, 1, expectedRequestId, 'btc-signature');\n\n  const sigValue = asBytes(mapGet(map, 2));\n  if (sigValue === undefined) {\n    throw new EraSdkError('malformed-reply', 'btc-signature is missing the signature (key 2)');\n  }\n  // The device answers a message request for an address its signer cannot\n  // handle (any non-legacy script type) with an EMPTY signature.\n  if (sigValue.length === 0) {\n    throw new EraSdkError(\n      'empty-signature',\n      'the device returned an empty signature — Bitcoin message signing supports legacy P2PKH (1...) addresses only',\n    );\n  }\n\n  // Device quirk: the reply bytes are the ASCII of a base64 string, not raw\n  // signature bytes. Decode twice; tolerate a firmware that starts sending\n  // raw 65-byte signatures directly.\n  let signature: Uint8Array;\n  try {\n    signature = base64.decode(asciiDecode(sigValue));\n  } catch {\n    signature = sigValue;\n  }\n  if (signature.length !== 65) {\n    if (sigValue.length === 65) {\n      signature = sigValue;\n    } else {\n      throw new EraSdkError(\n        'malformed-reply',\n        `btc-signature payload does not decode to a 65-byte BIP-137 signature (${sigValue.length} bytes on the wire)`,\n      );\n    }\n  }\n  return {\n    requestId,\n    signature,\n    signatureBase64: base64.encode(signature),\n    publicKey: asBytes(mapGet(map, 3)),\n  };\n}\n"],"mappings":";;;;;AA0BA,MAAM,sBAAgE;CACpE,KAAK;CACL,MAAM;CACN,MAAM;AACR;AA0CA,MAAM,mBAAmB,CAAC,aAAa;AACvC,MAAM,0BAA0B,CAAC,sBAAsB,aAAa;AACpE,MAAM,sBAAsB,CAAC,eAAe;AAE5C,IAAa,WAAb,MAAa,SAAS;CAKpB,YAAY,QAA2B;EACrC,KAAK,UAAUA,eAAAA,eAAe,MAAM;CACtC;;;;;;;;;;;CAYA,wBAAwB,OAA4D;EAClF,IAAI,MAAM,KAAK,WAAW,GACxB,MAAM,IAAIC,eAAAA,YAAY,iBAAiB,wBAAwB;EAEjE,MAAM,OAAO,MAAM,QAAQ;EAC3B,MAAM,KACJ,SAAS,QACL,IAAIC,eAAAA,GAAQ,eAAeC,eAAAA,WAAWC,eAAAA,QAAQ,MAAM,IAAI,CAAC,CAAC,IAC1D,IAAIF,eAAAA,GACF,sBACAC,eAAAA,WACEE,eAAAA,MAAM,CACJ,CAAC,GAAGD,eAAAA,QAAQ,MAAM,IAAI,CAAC,GACvB,CAAC,GAAGE,eAAAA,OAAO,oBAAoB,KAAK,CAAC,CACvC,CAAC,CACH,CACF;EACN,OAAOC,eAAAA,gBAAgB;GACrB;GACA,YAAY,SAAS,QAAQ,mBAAmB;GAChD,SAAS,KAAK;GACd,QAAQ,UAAU,KAAK,UAAU,KAAK;EACxC,CAAC;CACH;;CAGA,UAAU,OAAmC;EAC3C,MAAM,KAAKC,eAAAA,KAAK,KAAK;EACrB,eAAA,cAAc,IAAI,CAAC,GAAG,uBAAuB,GAAG,aAAa;EAC7D,IAAI;EACJ,IAAI;GACF,UAAUC,eAAAA,WAAW,GAAG,IAAI;EAC9B,SAAS,GAAG;GACV,MAAM,IAAIR,eAAAA,YAAY,kBAAkB,sBAAuB,EAAY,SAAS;EACtF;EAEA,MAAM,QAAQS,eAAAA,QAAQ,OAAO,KAAKA,eAAAA,QAAQC,eAAAA,OAAO,SAAS,CAAC,CAAC;EAC5D,IAAI,CAAC,OACH,MAAM,IAAIV,eAAAA,YAAY,mBAAmB,wCAAwC;EAEnF,IAAI,MAAM,WAAW,GACnB,MAAM,IAAIA,eAAAA,YAAY,mBAAmB,4BAA4B;EAEvE,OAAO,EAAE,MAAM,MAAM;CACvB;;CAGA,2BACE,OACwC;EACxC,MAAM,YAAYW,eAAAA,iBAAiB,KAAK,SAAS,MAAM,SAAS;EAChE,MAAM,OAAOC,gBAAAA,UAAU,MAAM,IAAI;EACjC,MAAM,MAAMC,gBAAAA,aAAa,MAAM,GAAG;EAElC,MAAM,KAAK,IAAIZ,eAAAA,GACb,oBACAC,eAAAA,WACEE,eAAAA,MAAM;GAEJ,CAAC,GAAGU,eAAAA,MAAM,IAAIX,eAAAA,QAAQ,SAAS,CAAC,CAAC;GACjC,CAAC,GAAGA,eAAAA,QAAQ,MAAM,OAAO,CAAC;GAC1B,CAAC,GAAGE,eAAAA,OAAO,SAAS,SAAS,OAAO,CAAC;GACrC,CAAC,GAAGU,eAAAA,QAAQ,CAACC,gBAAAA,WAAW,MAAM,GAAG,CAAC,CAAC,CAAC;GACpC,CAAC,GAAGD,eAAAA,QAAQ,CAACE,eAAAA,OAAO,MAAM,OAAO,CAAC,CAAC,CAAC;GACpC,CAAC,GAAGA,eAAAA,OAAO,MAAM,UAAU,KAAK,QAAQ,MAAM,CAAC;EACjD,CAAC,CACH,CACF;EACA,OAAOX,eAAAA,gBAAgB;GACrB;GACA;GACA,YAAY;GACZ,SAAS,KAAK;GACd,QAAQ,UAAU,sBAAsB,OAAO,SAAS;EAC1D,CAAC;CACH;;CAGA,sBAAsB,OAAoB,QAAmD;EAC3F,OAAO,sBACLC,eAAAA,KAAK,KAAK,GACV,QAAQ,cAAc,KAAA,IAAY,KAAA,IAAYW,eAAAA,mBAAmB,OAAO,SAAS,CACnF;CACF;AACF;AAtGE,SAAgB,WAAW,EAAE,SAAS,EAAE;AAwG1C,SAAS,sBACP,IACA,mBAC2B;CAC3B,eAAA,cAAc,IAAI,CAAC,GAAG,mBAAmB,GAAG,eAAe;CAC3D,MAAM,MAAMC,eAAAA,gBAAgB,IAAI,eAAe;CAC/C,MAAM,YAAYC,eAAAA,qBAAqB,KAAK,GAAG,mBAAmB,eAAe;CAEjF,MAAM,WAAWX,eAAAA,QAAQC,eAAAA,OAAO,KAAK,CAAC,CAAC;CACvC,IAAI,aAAa,KAAA,GACf,MAAM,IAAIV,eAAAA,YAAY,mBAAmB,gDAAgD;CAI3F,IAAI,SAAS,WAAW,GACtB,MAAM,IAAIA,eAAAA,YACR,mBACA,8GACF;CAMF,IAAI;CACJ,IAAI;EACF,YAAYqB,YAAAA,OAAO,OAAOC,eAAAA,YAAY,QAAQ,CAAC;CACjD,QAAQ;EACN,YAAY;CACd;CACA,IAAI,UAAU,WAAW,IAAI;EAC3B,IAAI,SAAS,WAAW,IACtB,YAAY;OAEZ,MAAM,IAAItB,eAAAA,YACR,mBACA,yEAAyE,SAAS,OAAO,oBAC3F;CAEJ;CACA,OAAO;EACL;EACA;EACA,iBAAiBqB,YAAAA,OAAO,OAAO,SAAS;EACxC,WAAWZ,eAAAA,QAAQC,eAAAA,OAAO,KAAK,CAAC,CAAC;CACnC;AACF"}

package/dist/{btc-Dn6_Y12c.d.cts → btc-C4dVkxHb.d.cts}

@@ -1,8 +1,17 @@
 import { _ as Ur, a as SignRequest, i as ExpectedReply, r as EraConnectConfig } from "./shared-CI8zhQiE.cjs";
 //#region src/chains/btc.d.ts
+/** Bitcoin-family coins the PSBT path signs for (BCH needs the FORKID signer and is not offered here). */
+type PsbtCoin = 'btc' | 'ltc' | 'doge' | 'dash';
 interface BtcPsbtSignRequestProps {
   /** Raw PSBT v0 bytes (BIP-174). The device's signer relies on the global UNSIGNED_TX. */
   readonly psbt: Uint8Array;
+  /**
+   * `'btc'` (default) rides plain `crypto-psbt`; Litecoin/Dogecoin/Dash ride
+   * `crypto-psbt-extend` — the same PSBT plus the coin id, answered in kind.
+   * Build the PSBT with the coin's own derivation paths (LTC `m/84'/2'/…`,
+   * DOGE `m/44'/3'/…`, DASH `m/44'/5'/…`).
+   */
+  readonly coin?: PsbtCoin;
 }
 interface BtcPsbtResult {
   /** The signed, NOT finalized PSBT. Finalize + broadcast with your own stack. */
@@ -46,7 +55,7 @@ declare class BtcChain {
    * check re-opens replay of a stale signed PSBT.
    */
   generatePsbtSignRequest(props: BtcPsbtSignRequestProps): SignRequest<BtcPsbtResult>;
-  /** Parse a `crypto-psbt` reply: the signed (not finalized) PSBT bytes. */
+  /** Parse a `crypto-psbt` / `crypto-psbt-extend` reply: the signed (not finalized) PSBT bytes. */
   parsePsbt(input: Ur | string): BtcPsbtResult;
   /** Build a `btc-sign-request` (8101) for message signing. Reply: `btc-signature` (8102). */
   generateMessageSignRequest(props: BtcMessageSignRequestProps): SignRequest<BtcMessageSignatureResult>;
@@ -55,4 +64,4 @@ declare class BtcChain {
 }
 //#endregion
 export { BtcPsbtSignRequestProps as a, BtcPsbtResult as i, BtcMessageSignRequestProps as n, BtcMessageSignatureResult as r, BtcChain as t };
-//# sourceMappingURL=btc-Dn6_Y12c.d.cts.map
+//# sourceMappingURL=btc-C4dVkxHb.d.cts.map

package/dist/btc.cjs

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
-const require_shared = require("./shared-nISrEktU.cjs");
-const require_btc = require("./btc-Fr6Jz4Fi.cjs");
+const require_shared = require("./shared-Cu2yynP9.cjs");
+const require_btc = require("./btc-ByzjzUKs.cjs");
 exports.AnimatedUr = require_shared.AnimatedUr;
 exports.BtcChain = require_btc.BtcChain;
 exports.EraSdkError = require_shared.EraSdkError;

package/dist/btc.d.cts

@@ -1,3 +1,3 @@
 import { _ as Ur, a as SignRequest, c as TypedUrScanner, d as EraErrorCode, f as EraSdkError, i as ExpectedReply, l as UrScanner, p as AnimatedUr, r as EraConnectConfig } from "./shared-CI8zhQiE.cjs";
-import { a as BtcPsbtSignRequestProps, i as BtcPsbtResult, n as BtcMessageSignRequestProps, r as BtcMessageSignatureResult, t as BtcChain } from "./btc-Dn6_Y12c.cjs";
+import { a as BtcPsbtSignRequestProps, i as BtcPsbtResult, n as BtcMessageSignRequestProps, r as BtcMessageSignatureResult, t as BtcChain } from "./btc-C4dVkxHb.cjs";
 export { AnimatedUr, BtcChain, type BtcMessageSignRequestProps, type BtcMessageSignatureResult, type BtcPsbtResult, type BtcPsbtSignRequestProps, type EraConnectConfig, type EraErrorCode, EraSdkError, type ExpectedReply, type SignRequest, TypedUrScanner, Ur, UrScanner };

package/dist/btc.d.ts

@@ -1,3 +1,3 @@
 import { _ as Ur, a as SignRequest, c as TypedUrScanner, d as EraErrorCode, f as EraSdkError, i as ExpectedReply, l as UrScanner, p as AnimatedUr, r as EraConnectConfig } from "./shared-CI8zhQiE.js";
-import { a as BtcPsbtSignRequestProps, i as BtcPsbtResult, n as BtcMessageSignRequestProps, r as BtcMessageSignatureResult, t as BtcChain } from "./btc-DfQ0q79G.js";
+import { a as BtcPsbtSignRequestProps, i as BtcPsbtResult, n as BtcMessageSignRequestProps, r as BtcMessageSignatureResult, t as BtcChain } from "./btc-B8LfSEkv.js";
 export { AnimatedUr, BtcChain, type BtcMessageSignRequestProps, type BtcMessageSignatureResult, type BtcPsbtResult, type BtcPsbtSignRequestProps, type EraConnectConfig, type EraErrorCode, EraSdkError, type ExpectedReply, type SignRequest, TypedUrScanner, Ur, UrScanner };

package/dist/btc.js

@@ -1,3 +1,3 @@
-import { Z as EraSdkError, _ as Ur, d as UrScanner, f as AnimatedUr, u as TypedUrScanner } from "./shared-B8Wc7ViU.js";
-import { t as BtcChain } from "./btc-VyJKXq7d.js";
+import { K as EraSdkError, _ as Ur, d as UrScanner, f as AnimatedUr, u as TypedUrScanner } from "./shared-Bbgejrus.js";
+import { t as BtcChain } from "./btc-B_Nq2H4T.js";
 export { AnimatedUr, BtcChain, EraSdkError, TypedUrScanner, Ur, UrScanner };

package/dist/cardano-BCT55gwf.js

@@ -0,0 +1,95 @@
+import { B as cbMap, G as stripTags, H as cbText, K as EraSdkError, L as cbArray, N as asBytes, U as cbUint, V as cbTag, W as mapGet, _ as Ur, b as cborDecode, c as resolveRequestId, h as normalizeRequestId, i as requireRequestIdEcho, l as toUr, n as makeSignRequest, o as requireUrType, r as requireReplyMap, s as resolveContext, x as cborEncode, z as cbBytes } from "./shared-Bbgejrus.js";
+import { i as parsePath, n as keypath304, r as normalizeXfp } from "./keypath-Bvv_cfHt.js";
+//#region src/chains/cardano.ts
+const REPLY_TYPES = ["cardano-signature"];
+const UTXO_TAG = 2201;
+const CERT_KEY_TAG = 2204;
+var CardanoChain = class {
+	constructor(config) {
+		this.context = resolveContext(config);
+	}
+	/** Build a `cardano-sign-request` (2202). Reply: `cardano-signature` (2203). */
+	generateSignRequest(props) {
+		const requestId = resolveRequestId(this.context, props.requestId);
+		if (props.signData.length === 0) throw new EraSdkError("invalid-props", "signData must not be empty");
+		if (props.utxos.length === 0) throw new EraSdkError("invalid-props", "at least one utxo is required");
+		const utxos = props.utxos.map((utxo) => {
+			if (utxo.transactionHash.length !== 32) throw new EraSdkError("invalid-props", "utxo transactionHash must be 32 bytes");
+			if (!Number.isSafeInteger(utxo.index) || utxo.index < 0) throw new EraSdkError("invalid-props", "utxo index must be a non-negative integer");
+			const entries = [[1, cbBytes(utxo.transactionHash)], [2, cbUint(utxo.index)]];
+			if (utxo.amount !== void 0) entries.push([3, cbText(utxo.amount)]);
+			entries.push([4, keypath304(parsePath(utxo.path), normalizeXfp(utxo.xfp))]);
+			if (utxo.address !== void 0) entries.push([5, cbText(utxo.address)]);
+			return cbTag(UTXO_TAG, cbMap(entries));
+		});
+		const certKeys = (props.certKeys ?? []).map((certKey) => {
+			const entries = [];
+			if (certKey.keyHash !== void 0) entries.push([1, cbBytes(certKey.keyHash)]);
+			entries.push([2, keypath304(parsePath(certKey.path), normalizeXfp(certKey.xfp))]);
+			return cbTag(CERT_KEY_TAG, cbMap(entries));
+		});
+		const entries = [
+			[1, cbTag(37, cbBytes(requestId))],
+			[2, cbBytes(props.signData)],
+			[3, cbArray(utxos)]
+		];
+		if (certKeys.length > 0) entries.push([4, cbArray(certKeys)]);
+		entries.push([5, cbText(props.origin ?? this.context.origin)]);
+		const ur = new Ur("cardano-sign-request", cborEncode(cbMap(entries)));
+		return makeSignRequest({
+			ur,
+			requestId,
+			replyTypes: REPLY_TYPES,
+			context: this.context,
+			parse: (reply) => parseCardanoSignature(reply, requestId)
+		});
+	}
+	/** Parse a `cardano-signature` standalone. Prefer `SignRequest.scanner().parse()`. */
+	parseSignature(input, expect) {
+		return parseCardanoSignature(toUr(input), expect?.requestId === void 0 ? void 0 : normalizeRequestId(expect.requestId));
+	}
+};
+function parseCardanoSignature(ur, expectedRequestId) {
+	requireUrType(ur, [...REPLY_TYPES], "cardano-signature");
+	const map = requireReplyMap(ur, "cardano-signature");
+	const requestId = requireRequestIdEcho(map, 1, expectedRequestId, "cardano-signature");
+	const witnessSet = asBytes(mapGet(map, 2));
+	if (!witnessSet || witnessSet.length === 0) throw new EraSdkError("malformed-reply", "cardano-signature is missing the witness set (key 2)");
+	return {
+		requestId,
+		witnessSet,
+		witnesses: parseWitnessSet(witnessSet)
+	};
+}
+/** `[vkey, signature]` pairs from a witness-set CBOR `{0: #6.258([...])}` (the set tag is optional). */
+function parseWitnessSet(witnessSet) {
+	let decoded;
+	try {
+		decoded = cborDecode(witnessSet);
+	} catch (e) {
+		throw new EraSdkError("malformed-reply", `witness set is not readable CBOR: ${e.message}`);
+	}
+	const root = stripTags(decoded);
+	if (root.kind !== "map") throw new EraSdkError("malformed-reply", "witness set is not a CBOR map");
+	const vkeyWitnesses = mapGet(root, 0);
+	const list = vkeyWitnesses === void 0 ? void 0 : stripTags(vkeyWitnesses);
+	if (list?.kind !== "array") throw new EraSdkError("malformed-reply", "witness set carries no vkey witnesses (key 0)");
+	const witnesses = [];
+	for (const item of list.items) {
+		const pair = stripTags(item);
+		if (pair.kind !== "array" || pair.items.length < 2) throw new EraSdkError("malformed-reply", "malformed vkey witness");
+		const vkey = asBytes(pair.items[0]);
+		const signature = asBytes(pair.items[1]);
+		if (!vkey || vkey.length !== 32 || !signature || signature.length !== 64) throw new EraSdkError("malformed-reply", "vkey witness is not [32-byte key, 64-byte signature]");
+		witnesses.push({
+			vkey,
+			signature
+		});
+	}
+	if (witnesses.length === 0) throw new EraSdkError("malformed-reply", "witness set is empty");
+	return witnesses;
+}
+//#endregion
+export { parseWitnessSet as n, CardanoChain as t };
+
+//# sourceMappingURL=cardano-BCT55gwf.js.map

package/dist/cardano-BCT55gwf.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cardano-BCT55gwf.js","names":["UrValue"],"sources":["../src/chains/cardano.ts"],"sourcesContent":["import { cborDecode } from '../cbor/decode';\nimport { cborEncode } from '../cbor/encode';\nimport type { CborValue } from '../cbor/model';\nimport {\n  asBytes,\n  cbArray,\n  cbBytes,\n  cbMap,\n  cbTag,\n  cbText,\n  cbUint,\n  mapGet,\n  stripTags,\n} from '../cbor/model';\nimport { EraSdkError } from '../core/errors';\nimport { normalizeRequestId } from '../core/rand';\nimport { keypath304, normalizeXfp, parsePath } from '../registry/keypath';\nimport type { Ur } from '../ur/ur';\nimport { Ur as UrValue } from '../ur/ur';\nimport type { ChainContext, EraConnectConfig, ExpectedReply, SignRequest } from './shared';\nimport {\n  makeSignRequest,\n  requireReplyMap,\n  requireRequestIdEcho,\n  requireUrType,\n  resolveContext,\n  resolveRequestId,\n  toUr,\n} from './shared';\n\n/** One transaction input the device must sign for. */\nexport interface CardanoUtxoRef {\n  /** 32-byte hash of the transaction that created the UTXO. */\n  readonly transactionHash: Uint8Array;\n  readonly index: number;\n  /** Full signing path for this input, e.g. `m/1852'/1815'/0'/0/0`. */\n  readonly path: string;\n  readonly xfp: string | number;\n  /** Lovelace amount as a decimal string — device display. */\n  readonly amount?: string;\n  /** Bech32 address of the UTXO — device display. */\n  readonly address?: string;\n}\n\n/** A certificate/withdrawal key the transaction additionally needs a witness from. */\nexport interface CardanoCertKeyRef {\n  /** Full signing path, e.g. the stake key `m/1852'/1815'/0'/2/0`. */\n  readonly path: string;\n  readonly xfp: string | number;\n  /** 28-byte key hash — device display/matching. */\n  readonly keyHash?: Uint8Array;\n}\n\nexport interface CardanoSignRequestProps {\n  readonly requestId?: Uint8Array | string;\n  /**\n   * The FULL transaction CBOR (`[body, witness_set, is_valid, aux_data]`) as\n   * your Cardano tooling serializes it. The device extracts the body (first\n   * array element) and signs its BLAKE2b-256 hash.\n   */\n  readonly signData: Uint8Array;\n  /** At least one; the device signs once per UNIQUE path across utxos + certKeys. */\n  readonly utxos: readonly CardanoUtxoRef[];\n  readonly certKeys?: readonly CardanoCertKeyRef[];\n  readonly origin?: string;\n}\n\nexport interface CardanoWitness {\n  /** 32-byte verification key. */\n  readonly vkey: Uint8Array;\n  /** 64-byte Ed25519 signature over the tx-body BLAKE2b-256 hash. */\n  readonly signature: Uint8Array;\n}\n\nexport interface CardanoSignatureResult {\n  readonly requestId: Uint8Array;\n  /** The witness-set CBOR verbatim (`{0: #6.258([[vkey, sig]…])}`) — merge it into your tx. */\n  readonly witnessSet: Uint8Array;\n  /** The `[vkey, signature]` pairs parsed out of the witness set. */\n  readonly witnesses: readonly CardanoWitness[];\n}\n\nconst REPLY_TYPES = ['cardano-signature'] as const;\nconst UTXO_TAG = 2201;\nconst CERT_KEY_TAG = 2204;\n\nexport class CardanoChain {\n  private readonly context: ChainContext;\n\n  constructor(config?: EraConnectConfig) {\n    this.context = resolveContext(config);\n  }\n\n  /** Build a `cardano-sign-request` (2202). Reply: `cardano-signature` (2203). */\n  generateSignRequest(props: CardanoSignRequestProps): SignRequest<CardanoSignatureResult> {\n    const requestId = resolveRequestId(this.context, props.requestId);\n    if (props.signData.length === 0) {\n      throw new EraSdkError('invalid-props', 'signData must not be empty');\n    }\n    if (props.utxos.length === 0) {\n      throw new EraSdkError('invalid-props', 'at least one utxo is required');\n    }\n\n    const utxos = props.utxos.map((utxo) => {\n      if (utxo.transactionHash.length !== 32) {\n        throw new EraSdkError('invalid-props', 'utxo transactionHash must be 32 bytes');\n      }\n      if (!Number.isSafeInteger(utxo.index) || utxo.index < 0) {\n        throw new EraSdkError('invalid-props', 'utxo index must be a non-negative integer');\n      }\n      const entries: [number, CborValue][] = [\n        [1, cbBytes(utxo.transactionHash)],\n        [2, cbUint(utxo.index)],\n      ];\n      if (utxo.amount !== undefined) entries.push([3, cbText(utxo.amount)]);\n      entries.push([4, keypath304(parsePath(utxo.path), normalizeXfp(utxo.xfp))]);\n      if (utxo.address !== undefined) entries.push([5, cbText(utxo.address)]);\n      return cbTag(UTXO_TAG, cbMap(entries));\n    });\n\n    const certKeys = (props.certKeys ?? []).map((certKey) => {\n      const entries: [number, CborValue][] = [];\n      if (certKey.keyHash !== undefined) entries.push([1, cbBytes(certKey.keyHash)]);\n      entries.push([2, keypath304(parsePath(certKey.path), normalizeXfp(certKey.xfp))]);\n      return cbTag(CERT_KEY_TAG, cbMap(entries));\n    });\n\n    const entries: [number, CborValue][] = [\n      [1, cbTag(37, cbBytes(requestId))],\n      [2, cbBytes(props.signData)],\n      [3, cbArray(utxos)],\n    ];\n    if (certKeys.length > 0) entries.push([4, cbArray(certKeys)]);\n    entries.push([5, cbText(props.origin ?? this.context.origin)]);\n\n    const ur = new UrValue('cardano-sign-request', cborEncode(cbMap(entries)));\n    return makeSignRequest({\n      ur,\n      requestId,\n      replyTypes: REPLY_TYPES,\n      context: this.context,\n      parse: (reply) => parseCardanoSignature(reply, requestId),\n    });\n  }\n\n  /** Parse a `cardano-signature` standalone. Prefer `SignRequest.scanner().parse()`. */\n  parseSignature(input: Ur | string, expect?: ExpectedReply): CardanoSignatureResult {\n    return parseCardanoSignature(\n      toUr(input),\n      expect?.requestId === undefined ? undefined : normalizeRequestId(expect.requestId),\n    );\n  }\n}\n\nfunction parseCardanoSignature(\n  ur: Ur,\n  expectedRequestId: Uint8Array | undefined,\n): CardanoSignatureResult {\n  requireUrType(ur, [...REPLY_TYPES], 'cardano-signature');\n  const map = requireReplyMap(ur, 'cardano-signature');\n  const requestId = requireRequestIdEcho(map, 1, expectedRequestId, 'cardano-signature');\n\n  const witnessSet = asBytes(mapGet(map, 2));\n  if (!witnessSet || witnessSet.length === 0) {\n    throw new EraSdkError(\n      'malformed-reply',\n      'cardano-signature is missing the witness set (key 2)',\n    );\n  }\n  return { requestId, witnessSet, witnesses: parseWitnessSet(witnessSet) };\n}\n\n/** `[vkey, signature]` pairs from a witness-set CBOR `{0: #6.258([...])}` (the set tag is optional). */\nexport function parseWitnessSet(witnessSet: Uint8Array): CardanoWitness[] {\n  let decoded: CborValue;\n  try {\n    decoded = cborDecode(witnessSet);\n  } catch (e) {\n    throw new EraSdkError(\n      'malformed-reply',\n      `witness set is not readable CBOR: ${(e as Error).message}`,\n    );\n  }\n  const root = stripTags(decoded);\n  if (root.kind !== 'map') {\n    throw new EraSdkError('malformed-reply', 'witness set is not a CBOR map');\n  }\n  const vkeyWitnesses = mapGet(root, 0);\n  const list = vkeyWitnesses === undefined ? undefined : stripTags(vkeyWitnesses);\n  if (list?.kind !== 'array') {\n    throw new EraSdkError('malformed-reply', 'witness set carries no vkey witnesses (key 0)');\n  }\n  const witnesses: CardanoWitness[] = [];\n  for (const item of list.items) {\n    const pair = stripTags(item);\n    if (pair.kind !== 'array' || pair.items.length < 2) {\n      throw new EraSdkError('malformed-reply', 'malformed vkey witness');\n    }\n    const vkey = asBytes(pair.items[0]);\n    const signature = asBytes(pair.items[1]);\n    if (!vkey || vkey.length !== 32 || !signature || signature.length !== 64) {\n      throw new EraSdkError(\n        'malformed-reply',\n        'vkey witness is not [32-byte key, 64-byte signature]',\n      );\n    }\n    witnesses.push({ vkey, signature });\n  }\n  if (witnesses.length === 0) {\n    throw new EraSdkError('malformed-reply', 'witness set is empty');\n  }\n  return witnesses;\n}\n"],"mappings":";;;AAkFA,MAAM,cAAc,CAAC,mBAAmB;AACxC,MAAM,WAAW;AACjB,MAAM,eAAe;AAErB,IAAa,eAAb,MAA0B;CAGxB,YAAY,QAA2B;EACrC,KAAK,UAAU,eAAe,MAAM;CACtC;;CAGA,oBAAoB,OAAqE;EACvF,MAAM,YAAY,iBAAiB,KAAK,SAAS,MAAM,SAAS;EAChE,IAAI,MAAM,SAAS,WAAW,GAC5B,MAAM,IAAI,YAAY,iBAAiB,4BAA4B;EAErE,IAAI,MAAM,MAAM,WAAW,GACzB,MAAM,IAAI,YAAY,iBAAiB,+BAA+B;EAGxE,MAAM,QAAQ,MAAM,MAAM,KAAK,SAAS;GACtC,IAAI,KAAK,gBAAgB,WAAW,IAClC,MAAM,IAAI,YAAY,iBAAiB,uCAAuC;GAEhF,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,KAAK,KAAK,QAAQ,GACpD,MAAM,IAAI,YAAY,iBAAiB,2CAA2C;GAEpF,MAAM,UAAiC,CACrC,CAAC,GAAG,QAAQ,KAAK,eAAe,CAAC,GACjC,CAAC,GAAG,OAAO,KAAK,KAAK,CAAC,CACxB;GACA,IAAI,KAAK,WAAW,KAAA,GAAW,QAAQ,KAAK,CAAC,GAAG,OAAO,KAAK,MAAM,CAAC,CAAC;GACpE,QAAQ,KAAK,CAAC,GAAG,WAAW,UAAU,KAAK,IAAI,GAAG,aAAa,KAAK,GAAG,CAAC,CAAC,CAAC;GAC1E,IAAI,KAAK,YAAY,KAAA,GAAW,QAAQ,KAAK,CAAC,GAAG,OAAO,KAAK,OAAO,CAAC,CAAC;GACtE,OAAO,MAAM,UAAU,MAAM,OAAO,CAAC;EACvC,CAAC;EAED,MAAM,YAAY,MAAM,YAAY,CAAC,EAAA,CAAG,KAAK,YAAY;GACvD,MAAM,UAAiC,CAAC;GACxC,IAAI,QAAQ,YAAY,KAAA,GAAW,QAAQ,KAAK,CAAC,GAAG,QAAQ,QAAQ,OAAO,CAAC,CAAC;GAC7E,QAAQ,KAAK,CAAC,GAAG,WAAW,UAAU,QAAQ,IAAI,GAAG,aAAa,QAAQ,GAAG,CAAC,CAAC,CAAC;GAChF,OAAO,MAAM,cAAc,MAAM,OAAO,CAAC;EAC3C,CAAC;EAED,MAAM,UAAiC;GACrC,CAAC,GAAG,MAAM,IAAI,QAAQ,SAAS,CAAC,CAAC;GACjC,CAAC,GAAG,QAAQ,MAAM,QAAQ,CAAC;GAC3B,CAAC,GAAG,QAAQ,KAAK,CAAC;EACpB;EACA,IAAI,SAAS,SAAS,GAAG,QAAQ,KAAK,CAAC,GAAG,QAAQ,QAAQ,CAAC,CAAC;EAC5D,QAAQ,KAAK,CAAC,GAAG,OAAO,MAAM,UAAU,KAAK,QAAQ,MAAM,CAAC,CAAC;EAE7D,MAAM,KAAK,IAAIA,GAAQ,wBAAwB,WAAW,MAAM,OAAO,CAAC,CAAC;EACzE,OAAO,gBAAgB;GACrB;GACA;GACA,YAAY;GACZ,SAAS,KAAK;GACd,QAAQ,UAAU,sBAAsB,OAAO,SAAS;EAC1D,CAAC;CACH;;CAGA,eAAe,OAAoB,QAAgD;EACjF,OAAO,sBACL,KAAK,KAAK,GACV,QAAQ,cAAc,KAAA,IAAY,KAAA,IAAY,mBAAmB,OAAO,SAAS,CACnF;CACF;AACF;AAEA,SAAS,sBACP,IACA,mBACwB;CACxB,cAAc,IAAI,CAAC,GAAG,WAAW,GAAG,mBAAmB;CACvD,MAAM,MAAM,gBAAgB,IAAI,mBAAmB;CACnD,MAAM,YAAY,qBAAqB,KAAK,GAAG,mBAAmB,mBAAmB;CAErF,MAAM,aAAa,QAAQ,OAAO,KAAK,CAAC,CAAC;CACzC,IAAI,CAAC,cAAc,WAAW,WAAW,GACvC,MAAM,IAAI,YACR,mBACA,sDACF;CAEF,OAAO;EAAE;EAAW;EAAY,WAAW,gBAAgB,UAAU;CAAE;AACzE;;AAGA,SAAgB,gBAAgB,YAA0C;CACxE,IAAI;CACJ,IAAI;EACF,UAAU,WAAW,UAAU;CACjC,SAAS,GAAG;EACV,MAAM,IAAI,YACR,mBACA,qCAAsC,EAAY,SACpD;CACF;CACA,MAAM,OAAO,UAAU,OAAO;CAC9B,IAAI,KAAK,SAAS,OAChB,MAAM,IAAI,YAAY,mBAAmB,+BAA+B;CAE1E,MAAM,gBAAgB,OAAO,MAAM,CAAC;CACpC,MAAM,OAAO,kBAAkB,KAAA,IAAY,KAAA,IAAY,UAAU,aAAa;CAC9E,IAAI,MAAM,SAAS,SACjB,MAAM,IAAI,YAAY,mBAAmB,+CAA+C;CAE1F,MAAM,YAA8B,CAAC;CACrC,KAAK,MAAM,QAAQ,KAAK,OAAO;EAC7B,MAAM,OAAO,UAAU,IAAI;EAC3B,IAAI,KAAK,SAAS,WAAW,KAAK,MAAM,SAAS,GAC/C,MAAM,IAAI,YAAY,mBAAmB,wBAAwB;EAEnE,MAAM,OAAO,QAAQ,KAAK,MAAM,EAAE;EAClC,MAAM,YAAY,QAAQ,KAAK,MAAM,EAAE;EACvC,IAAI,CAAC,QAAQ,KAAK,WAAW,MAAM,CAAC,aAAa,UAAU,WAAW,IACpE,MAAM,IAAI,YACR,mBACA,sDACF;EAEF,UAAU,KAAK;GAAE;GAAM;EAAU,CAAC;CACpC;CACA,IAAI,UAAU,WAAW,GACvB,MAAM,IAAI,YAAY,mBAAmB,sBAAsB;CAEjE,OAAO;AACT"}

package/dist/cardano-CzYswGzK.cjs

@@ -0,0 +1,106 @@
+const require_shared = require("./shared-Cu2yynP9.cjs");
+const require_keypath = require("./keypath-pzm_YIfN.cjs");
+//#region src/chains/cardano.ts
+const REPLY_TYPES = ["cardano-signature"];
+const UTXO_TAG = 2201;
+const CERT_KEY_TAG = 2204;
+var CardanoChain = class {
+	constructor(config) {
+		this.context = require_shared.resolveContext(config);
+	}
+	/** Build a `cardano-sign-request` (2202). Reply: `cardano-signature` (2203). */
+	generateSignRequest(props) {
+		const requestId = require_shared.resolveRequestId(this.context, props.requestId);
+		if (props.signData.length === 0) throw new require_shared.EraSdkError("invalid-props", "signData must not be empty");
+		if (props.utxos.length === 0) throw new require_shared.EraSdkError("invalid-props", "at least one utxo is required");
+		const utxos = props.utxos.map((utxo) => {
+			if (utxo.transactionHash.length !== 32) throw new require_shared.EraSdkError("invalid-props", "utxo transactionHash must be 32 bytes");
+			if (!Number.isSafeInteger(utxo.index) || utxo.index < 0) throw new require_shared.EraSdkError("invalid-props", "utxo index must be a non-negative integer");
+			const entries = [[1, require_shared.cbBytes(utxo.transactionHash)], [2, require_shared.cbUint(utxo.index)]];
+			if (utxo.amount !== void 0) entries.push([3, require_shared.cbText(utxo.amount)]);
+			entries.push([4, require_keypath.keypath304(require_keypath.parsePath(utxo.path), require_keypath.normalizeXfp(utxo.xfp))]);
+			if (utxo.address !== void 0) entries.push([5, require_shared.cbText(utxo.address)]);
+			return require_shared.cbTag(UTXO_TAG, require_shared.cbMap(entries));
+		});
+		const certKeys = (props.certKeys ?? []).map((certKey) => {
+			const entries = [];
+			if (certKey.keyHash !== void 0) entries.push([1, require_shared.cbBytes(certKey.keyHash)]);
+			entries.push([2, require_keypath.keypath304(require_keypath.parsePath(certKey.path), require_keypath.normalizeXfp(certKey.xfp))]);
+			return require_shared.cbTag(CERT_KEY_TAG, require_shared.cbMap(entries));
+		});
+		const entries = [
+			[1, require_shared.cbTag(37, require_shared.cbBytes(requestId))],
+			[2, require_shared.cbBytes(props.signData)],
+			[3, require_shared.cbArray(utxos)]
+		];
+		if (certKeys.length > 0) entries.push([4, require_shared.cbArray(certKeys)]);
+		entries.push([5, require_shared.cbText(props.origin ?? this.context.origin)]);
+		const ur = new require_shared.Ur("cardano-sign-request", require_shared.cborEncode(require_shared.cbMap(entries)));
+		return require_shared.makeSignRequest({
+			ur,
+			requestId,
+			replyTypes: REPLY_TYPES,
+			context: this.context,
+			parse: (reply) => parseCardanoSignature(reply, requestId)
+		});
+	}
+	/** Parse a `cardano-signature` standalone. Prefer `SignRequest.scanner().parse()`. */
+	parseSignature(input, expect) {
+		return parseCardanoSignature(require_shared.toUr(input), expect?.requestId === void 0 ? void 0 : require_shared.normalizeRequestId(expect.requestId));
+	}
+};
+function parseCardanoSignature(ur, expectedRequestId) {
+	require_shared.requireUrType(ur, [...REPLY_TYPES], "cardano-signature");
+	const map = require_shared.requireReplyMap(ur, "cardano-signature");
+	const requestId = require_shared.requireRequestIdEcho(map, 1, expectedRequestId, "cardano-signature");
+	const witnessSet = require_shared.asBytes(require_shared.mapGet(map, 2));
+	if (!witnessSet || witnessSet.length === 0) throw new require_shared.EraSdkError("malformed-reply", "cardano-signature is missing the witness set (key 2)");
+	return {
+		requestId,
+		witnessSet,
+		witnesses: parseWitnessSet(witnessSet)
+	};
+}
+/** `[vkey, signature]` pairs from a witness-set CBOR `{0: #6.258([...])}` (the set tag is optional). */
+function parseWitnessSet(witnessSet) {
+	let decoded;
+	try {
+		decoded = require_shared.cborDecode(witnessSet);
+	} catch (e) {
+		throw new require_shared.EraSdkError("malformed-reply", `witness set is not readable CBOR: ${e.message}`);
+	}
+	const root = require_shared.stripTags(decoded);
+	if (root.kind !== "map") throw new require_shared.EraSdkError("malformed-reply", "witness set is not a CBOR map");
+	const vkeyWitnesses = require_shared.mapGet(root, 0);
+	const list = vkeyWitnesses === void 0 ? void 0 : require_shared.stripTags(vkeyWitnesses);
+	if (list?.kind !== "array") throw new require_shared.EraSdkError("malformed-reply", "witness set carries no vkey witnesses (key 0)");
+	const witnesses = [];
+	for (const item of list.items) {
+		const pair = require_shared.stripTags(item);
+		if (pair.kind !== "array" || pair.items.length < 2) throw new require_shared.EraSdkError("malformed-reply", "malformed vkey witness");
+		const vkey = require_shared.asBytes(pair.items[0]);
+		const signature = require_shared.asBytes(pair.items[1]);
+		if (!vkey || vkey.length !== 32 || !signature || signature.length !== 64) throw new require_shared.EraSdkError("malformed-reply", "vkey witness is not [32-byte key, 64-byte signature]");
+		witnesses.push({
+			vkey,
+			signature
+		});
+	}
+	if (witnesses.length === 0) throw new require_shared.EraSdkError("malformed-reply", "witness set is empty");
+	return witnesses;
+}
+//#endregion
+Object.defineProperty(exports, "CardanoChain", {
+	enumerable: true,
+	get: function() {
+		return CardanoChain;
+	}
+});
+Object.defineProperty(exports, "parseWitnessSet", {
+	enumerable: true,
+	get: function() {
+		return parseWitnessSet;
+	}
+});
+
+//# sourceMappingURL=cardano-CzYswGzK.cjs.map

package/dist/cardano-CzYswGzK.cjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cardano-CzYswGzK.cjs","names":["resolveContext","resolveRequestId","EraSdkError","cbBytes","cbUint","cbText","keypath304","parsePath","normalizeXfp","cbTag","cbMap","cbArray","UrValue","cborEncode","makeSignRequest","toUr","normalizeRequestId","requireReplyMap","requireRequestIdEcho","asBytes","mapGet","cborDecode","stripTags"],"sources":["../src/chains/cardano.ts"],"sourcesContent":["import { cborDecode } from '../cbor/decode';\nimport { cborEncode } from '../cbor/encode';\nimport type { CborValue } from '../cbor/model';\nimport {\n  asBytes,\n  cbArray,\n  cbBytes,\n  cbMap,\n  cbTag,\n  cbText,\n  cbUint,\n  mapGet,\n  stripTags,\n} from '../cbor/model';\nimport { EraSdkError } from '../core/errors';\nimport { normalizeRequestId } from '../core/rand';\nimport { keypath304, normalizeXfp, parsePath } from '../registry/keypath';\nimport type { Ur } from '../ur/ur';\nimport { Ur as UrValue } from '../ur/ur';\nimport type { ChainContext, EraConnectConfig, ExpectedReply, SignRequest } from './shared';\nimport {\n  makeSignRequest,\n  requireReplyMap,\n  requireRequestIdEcho,\n  requireUrType,\n  resolveContext,\n  resolveRequestId,\n  toUr,\n} from './shared';\n\n/** One transaction input the device must sign for. */\nexport interface CardanoUtxoRef {\n  /** 32-byte hash of the transaction that created the UTXO. */\n  readonly transactionHash: Uint8Array;\n  readonly index: number;\n  /** Full signing path for this input, e.g. `m/1852'/1815'/0'/0/0`. */\n  readonly path: string;\n  readonly xfp: string | number;\n  /** Lovelace amount as a decimal string — device display. */\n  readonly amount?: string;\n  /** Bech32 address of the UTXO — device display. */\n  readonly address?: string;\n}\n\n/** A certificate/withdrawal key the transaction additionally needs a witness from. */\nexport interface CardanoCertKeyRef {\n  /** Full signing path, e.g. the stake key `m/1852'/1815'/0'/2/0`. */\n  readonly path: string;\n  readonly xfp: string | number;\n  /** 28-byte key hash — device display/matching. */\n  readonly keyHash?: Uint8Array;\n}\n\nexport interface CardanoSignRequestProps {\n  readonly requestId?: Uint8Array | string;\n  /**\n   * The FULL transaction CBOR (`[body, witness_set, is_valid, aux_data]`) as\n   * your Cardano tooling serializes it. The device extracts the body (first\n   * array element) and signs its BLAKE2b-256 hash.\n   */\n  readonly signData: Uint8Array;\n  /** At least one; the device signs once per UNIQUE path across utxos + certKeys. */\n  readonly utxos: readonly CardanoUtxoRef[];\n  readonly certKeys?: readonly CardanoCertKeyRef[];\n  readonly origin?: string;\n}\n\nexport interface CardanoWitness {\n  /** 32-byte verification key. */\n  readonly vkey: Uint8Array;\n  /** 64-byte Ed25519 signature over the tx-body BLAKE2b-256 hash. */\n  readonly signature: Uint8Array;\n}\n\nexport interface CardanoSignatureResult {\n  readonly requestId: Uint8Array;\n  /** The witness-set CBOR verbatim (`{0: #6.258([[vkey, sig]…])}`) — merge it into your tx. */\n  readonly witnessSet: Uint8Array;\n  /** The `[vkey, signature]` pairs parsed out of the witness set. */\n  readonly witnesses: readonly CardanoWitness[];\n}\n\nconst REPLY_TYPES = ['cardano-signature'] as const;\nconst UTXO_TAG = 2201;\nconst CERT_KEY_TAG = 2204;\n\nexport class CardanoChain {\n  private readonly context: ChainContext;\n\n  constructor(config?: EraConnectConfig) {\n    this.context = resolveContext(config);\n  }\n\n  /** Build a `cardano-sign-request` (2202). Reply: `cardano-signature` (2203). */\n  generateSignRequest(props: CardanoSignRequestProps): SignRequest<CardanoSignatureResult> {\n    const requestId = resolveRequestId(this.context, props.requestId);\n    if (props.signData.length === 0) {\n      throw new EraSdkError('invalid-props', 'signData must not be empty');\n    }\n    if (props.utxos.length === 0) {\n      throw new EraSdkError('invalid-props', 'at least one utxo is required');\n    }\n\n    const utxos = props.utxos.map((utxo) => {\n      if (utxo.transactionHash.length !== 32) {\n        throw new EraSdkError('invalid-props', 'utxo transactionHash must be 32 bytes');\n      }\n      if (!Number.isSafeInteger(utxo.index) || utxo.index < 0) {\n        throw new EraSdkError('invalid-props', 'utxo index must be a non-negative integer');\n      }\n      const entries: [number, CborValue][] = [\n        [1, cbBytes(utxo.transactionHash)],\n        [2, cbUint(utxo.index)],\n      ];\n      if (utxo.amount !== undefined) entries.push([3, cbText(utxo.amount)]);\n      entries.push([4, keypath304(parsePath(utxo.path), normalizeXfp(utxo.xfp))]);\n      if (utxo.address !== undefined) entries.push([5, cbText(utxo.address)]);\n      return cbTag(UTXO_TAG, cbMap(entries));\n    });\n\n    const certKeys = (props.certKeys ?? []).map((certKey) => {\n      const entries: [number, CborValue][] = [];\n      if (certKey.keyHash !== undefined) entries.push([1, cbBytes(certKey.keyHash)]);\n      entries.push([2, keypath304(parsePath(certKey.path), normalizeXfp(certKey.xfp))]);\n      return cbTag(CERT_KEY_TAG, cbMap(entries));\n    });\n\n    const entries: [number, CborValue][] = [\n      [1, cbTag(37, cbBytes(requestId))],\n      [2, cbBytes(props.signData)],\n      [3, cbArray(utxos)],\n    ];\n    if (certKeys.length > 0) entries.push([4, cbArray(certKeys)]);\n    entries.push([5, cbText(props.origin ?? this.context.origin)]);\n\n    const ur = new UrValue('cardano-sign-request', cborEncode(cbMap(entries)));\n    return makeSignRequest({\n      ur,\n      requestId,\n      replyTypes: REPLY_TYPES,\n      context: this.context,\n      parse: (reply) => parseCardanoSignature(reply, requestId),\n    });\n  }\n\n  /** Parse a `cardano-signature` standalone. Prefer `SignRequest.scanner().parse()`. */\n  parseSignature(input: Ur | string, expect?: ExpectedReply): CardanoSignatureResult {\n    return parseCardanoSignature(\n      toUr(input),\n      expect?.requestId === undefined ? undefined : normalizeRequestId(expect.requestId),\n    );\n  }\n}\n\nfunction parseCardanoSignature(\n  ur: Ur,\n  expectedRequestId: Uint8Array | undefined,\n): CardanoSignatureResult {\n  requireUrType(ur, [...REPLY_TYPES], 'cardano-signature');\n  const map = requireReplyMap(ur, 'cardano-signature');\n  const requestId = requireRequestIdEcho(map, 1, expectedRequestId, 'cardano-signature');\n\n  const witnessSet = asBytes(mapGet(map, 2));\n  if (!witnessSet || witnessSet.length === 0) {\n    throw new EraSdkError(\n      'malformed-reply',\n      'cardano-signature is missing the witness set (key 2)',\n    );\n  }\n  return { requestId, witnessSet, witnesses: parseWitnessSet(witnessSet) };\n}\n\n/** `[vkey, signature]` pairs from a witness-set CBOR `{0: #6.258([...])}` (the set tag is optional). */\nexport function parseWitnessSet(witnessSet: Uint8Array): CardanoWitness[] {\n  let decoded: CborValue;\n  try {\n    decoded = cborDecode(witnessSet);\n  } catch (e) {\n    throw new EraSdkError(\n      'malformed-reply',\n      `witness set is not readable CBOR: ${(e as Error).message}`,\n    );\n  }\n  const root = stripTags(decoded);\n  if (root.kind !== 'map') {\n    throw new EraSdkError('malformed-reply', 'witness set is not a CBOR map');\n  }\n  const vkeyWitnesses = mapGet(root, 0);\n  const list = vkeyWitnesses === undefined ? undefined : stripTags(vkeyWitnesses);\n  if (list?.kind !== 'array') {\n    throw new EraSdkError('malformed-reply', 'witness set carries no vkey witnesses (key 0)');\n  }\n  const witnesses: CardanoWitness[] = [];\n  for (const item of list.items) {\n    const pair = stripTags(item);\n    if (pair.kind !== 'array' || pair.items.length < 2) {\n      throw new EraSdkError('malformed-reply', 'malformed vkey witness');\n    }\n    const vkey = asBytes(pair.items[0]);\n    const signature = asBytes(pair.items[1]);\n    if (!vkey || vkey.length !== 32 || !signature || signature.length !== 64) {\n      throw new EraSdkError(\n        'malformed-reply',\n        'vkey witness is not [32-byte key, 64-byte signature]',\n      );\n    }\n    witnesses.push({ vkey, signature });\n  }\n  if (witnesses.length === 0) {\n    throw new EraSdkError('malformed-reply', 'witness set is empty');\n  }\n  return witnesses;\n}\n"],"mappings":";;;AAkFA,MAAM,cAAc,CAAC,mBAAmB;AACxC,MAAM,WAAW;AACjB,MAAM,eAAe;AAErB,IAAa,eAAb,MAA0B;CAGxB,YAAY,QAA2B;EACrC,KAAK,UAAUA,eAAAA,eAAe,MAAM;CACtC;;CAGA,oBAAoB,OAAqE;EACvF,MAAM,YAAYC,eAAAA,iBAAiB,KAAK,SAAS,MAAM,SAAS;EAChE,IAAI,MAAM,SAAS,WAAW,GAC5B,MAAM,IAAIC,eAAAA,YAAY,iBAAiB,4BAA4B;EAErE,IAAI,MAAM,MAAM,WAAW,GACzB,MAAM,IAAIA,eAAAA,YAAY,iBAAiB,+BAA+B;EAGxE,MAAM,QAAQ,MAAM,MAAM,KAAK,SAAS;GACtC,IAAI,KAAK,gBAAgB,WAAW,IAClC,MAAM,IAAIA,eAAAA,YAAY,iBAAiB,uCAAuC;GAEhF,IAAI,CAAC,OAAO,cAAc,KAAK,KAAK,KAAK,KAAK,QAAQ,GACpD,MAAM,IAAIA,eAAAA,YAAY,iBAAiB,2CAA2C;GAEpF,MAAM,UAAiC,CACrC,CAAC,GAAGC,eAAAA,QAAQ,KAAK,eAAe,CAAC,GACjC,CAAC,GAAGC,eAAAA,OAAO,KAAK,KAAK,CAAC,CACxB;GACA,IAAI,KAAK,WAAW,KAAA,GAAW,QAAQ,KAAK,CAAC,GAAGC,eAAAA,OAAO,KAAK,MAAM,CAAC,CAAC;GACpE,QAAQ,KAAK,CAAC,GAAGC,gBAAAA,WAAWC,gBAAAA,UAAU,KAAK,IAAI,GAAGC,gBAAAA,aAAa,KAAK,GAAG,CAAC,CAAC,CAAC;GAC1E,IAAI,KAAK,YAAY,KAAA,GAAW,QAAQ,KAAK,CAAC,GAAGH,eAAAA,OAAO,KAAK,OAAO,CAAC,CAAC;GACtE,OAAOI,eAAAA,MAAM,UAAUC,eAAAA,MAAM,OAAO,CAAC;EACvC,CAAC;EAED,MAAM,YAAY,MAAM,YAAY,CAAC,EAAA,CAAG,KAAK,YAAY;GACvD,MAAM,UAAiC,CAAC;GACxC,IAAI,QAAQ,YAAY,KAAA,GAAW,QAAQ,KAAK,CAAC,GAAGP,eAAAA,QAAQ,QAAQ,OAAO,CAAC,CAAC;GAC7E,QAAQ,KAAK,CAAC,GAAGG,gBAAAA,WAAWC,gBAAAA,UAAU,QAAQ,IAAI,GAAGC,gBAAAA,aAAa,QAAQ,GAAG,CAAC,CAAC,CAAC;GAChF,OAAOC,eAAAA,MAAM,cAAcC,eAAAA,MAAM,OAAO,CAAC;EAC3C,CAAC;EAED,MAAM,UAAiC;GACrC,CAAC,GAAGD,eAAAA,MAAM,IAAIN,eAAAA,QAAQ,SAAS,CAAC,CAAC;GACjC,CAAC,GAAGA,eAAAA,QAAQ,MAAM,QAAQ,CAAC;GAC3B,CAAC,GAAGQ,eAAAA,QAAQ,KAAK,CAAC;EACpB;EACA,IAAI,SAAS,SAAS,GAAG,QAAQ,KAAK,CAAC,GAAGA,eAAAA,QAAQ,QAAQ,CAAC,CAAC;EAC5D,QAAQ,KAAK,CAAC,GAAGN,eAAAA,OAAO,MAAM,UAAU,KAAK,QAAQ,MAAM,CAAC,CAAC;EAE7D,MAAM,KAAK,IAAIO,eAAAA,GAAQ,wBAAwBC,eAAAA,WAAWH,eAAAA,MAAM,OAAO,CAAC,CAAC;EACzE,OAAOI,eAAAA,gBAAgB;GACrB;GACA;GACA,YAAY;GACZ,SAAS,KAAK;GACd,QAAQ,UAAU,sBAAsB,OAAO,SAAS;EAC1D,CAAC;CACH;;CAGA,eAAe,OAAoB,QAAgD;EACjF,OAAO,sBACLC,eAAAA,KAAK,KAAK,GACV,QAAQ,cAAc,KAAA,IAAY,KAAA,IAAYC,eAAAA,mBAAmB,OAAO,SAAS,CACnF;CACF;AACF;AAEA,SAAS,sBACP,IACA,mBACwB;CACxB,eAAA,cAAc,IAAI,CAAC,GAAG,WAAW,GAAG,mBAAmB;CACvD,MAAM,MAAMC,eAAAA,gBAAgB,IAAI,mBAAmB;CACnD,MAAM,YAAYC,eAAAA,qBAAqB,KAAK,GAAG,mBAAmB,mBAAmB;CAErF,MAAM,aAAaC,eAAAA,QAAQC,eAAAA,OAAO,KAAK,CAAC,CAAC;CACzC,IAAI,CAAC,cAAc,WAAW,WAAW,GACvC,MAAM,IAAIlB,eAAAA,YACR,mBACA,sDACF;CAEF,OAAO;EAAE;EAAW;EAAY,WAAW,gBAAgB,UAAU;CAAE;AACzE;;AAGA,SAAgB,gBAAgB,YAA0C;CACxE,IAAI;CACJ,IAAI;EACF,UAAUmB,eAAAA,WAAW,UAAU;CACjC,SAAS,GAAG;EACV,MAAM,IAAInB,eAAAA,YACR,mBACA,qCAAsC,EAAY,SACpD;CACF;CACA,MAAM,OAAOoB,eAAAA,UAAU,OAAO;CAC9B,IAAI,KAAK,SAAS,OAChB,MAAM,IAAIpB,eAAAA,YAAY,mBAAmB,+BAA+B;CAE1E,MAAM,gBAAgBkB,eAAAA,OAAO,MAAM,CAAC;CACpC,MAAM,OAAO,kBAAkB,KAAA,IAAY,KAAA,IAAYE,eAAAA,UAAU,aAAa;CAC9E,IAAI,MAAM,SAAS,SACjB,MAAM,IAAIpB,eAAAA,YAAY,mBAAmB,+CAA+C;CAE1F,MAAM,YAA8B,CAAC;CACrC,KAAK,MAAM,QAAQ,KAAK,OAAO;EAC7B,MAAM,OAAOoB,eAAAA,UAAU,IAAI;EAC3B,IAAI,KAAK,SAAS,WAAW,KAAK,MAAM,SAAS,GAC/C,MAAM,IAAIpB,eAAAA,YAAY,mBAAmB,wBAAwB;EAEnE,MAAM,OAAOiB,eAAAA,QAAQ,KAAK,MAAM,EAAE;EAClC,MAAM,YAAYA,eAAAA,QAAQ,KAAK,MAAM,EAAE;EACvC,IAAI,CAAC,QAAQ,KAAK,WAAW,MAAM,CAAC,aAAa,UAAU,WAAW,IACpE,MAAM,IAAIjB,eAAAA,YACR,mBACA,sDACF;EAEF,UAAU,KAAK;GAAE;GAAM;EAAU,CAAC;CACpC;CACA,IAAI,UAAU,WAAW,GACvB,MAAM,IAAIA,eAAAA,YAAY,mBAAmB,sBAAsB;CAEjE,OAAO;AACT"}