@ixo/openhands-sdk 0.0.0-stage → 0.2.0

package/dist/cjs/chain/session.js

@@ -0,0 +1,145 @@
+"use strict";
+/**
+ * Who is signed in, and what they can sign with.
+ *
+ * Three rungs of one ladder, not three kinds of user. A passkey session is a
+ * pointer to a credential and nothing more — possession IS the credential. A
+ * connected session (SignX or the auth hub) additionally carries an ixo
+ * identity: a DID, the name they call themselves, and usually a Matrix
+ * identity of their own.
+ *
+ * **The Matrix half is always optional.** INFRA §1.1: phones older than some
+ * unknown release send no matrix payload at all, so nothing may require it —
+ * the chain half of a session has to work without a vault, and chat falls back
+ * to the relay that already serves everyone.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.speaksForItself = exports.kindOf = void 0;
+exports.loadSession = loadSession;
+exports.withoutSecrets = withoutSecrets;
+exports.previousSessions = previousSessions;
+exports.forgetPrevious = forgetPrevious;
+exports.saveSession = saveSession;
+exports.clearSession = clearSession;
+exports.subscribeSession = subscribeSession;
+/** Passkey is the default so a session stored before the ladder still reads. */
+const kindOf = (session) => session.kind ?? "passkey";
+exports.kindOf = kindOf;
+/** Whether this session can post to a room as itself rather than through the bot. */
+const speaksForItself = (session) => Boolean(session?.matrix?.accessToken);
+exports.speaksForItself = speaksForItself;
+const KEY = "qi.session";
+const EVENT = "qi-session-changed";
+function loadSession() {
+    if (typeof window === "undefined")
+        return null;
+    try {
+        const raw = window.localStorage.getItem(KEY);
+        if (!raw)
+            return null;
+        const parsed = JSON.parse(raw);
+        if (!parsed.address)
+            return null;
+        /* A session with no kind is a passkey session written before the ladder,
+           and those are only usable with their credential. A connected session
+           needs no credential — its door does the signing. */
+        return (0, exports.kindOf)(parsed) === "passkey" ? (parsed.credentialId && parsed.authenticatorId ? parsed : null) : parsed;
+    }
+    catch {
+        return null;
+    }
+}
+/*
+ * Signing in as somebody else must never be silent (ID9).
+ *
+ * A second door replaces the session in place, and the account that was there
+ * a moment ago can hold money and a public record. So the one it replaces is
+ * kept — not to sign anyone in behind their back, but so the app can ask the
+ * only question worth asking: *was that you too?* If yes, the ceremony joins
+ * them. If no, one tap forgets it. Doing neither, and saying nothing, is the
+ * behaviour this exists to prevent.
+ *
+ * Passkey sessions are the ones that matter here: the credential is still on
+ * the device, so a session kept this way can still sign.
+ *
+ * **What is kept is who, never what signs** (scale review 2026-10, D22). The
+ * list used to hold each replaced session whole — an auth-hub session key's
+ * mnemonic, the filesystem signing key's, a Matrix access token, a SignX
+ * post token — and kept them after sign-out, so "signed out" left every key
+ * this browser had ever held sitting in storage. The question this list
+ * exists to ask needs an address and a door, and a passkey's pointer, none of
+ * which is secret. The price is named: an auth-hub account found here can no
+ * longer sign the union from this list, and joins by signing in again.
+ */
+const PREVIOUS_KEY = "qi.session.previous";
+const KEEP_PREVIOUS = 3;
+/** A session with every key, token and ciphertext taken out: what may outlive it. */
+function withoutSecrets(session) {
+    const { sessionKey: _sessionKey, signingKey: _signingKey, postToken: _postToken, matrix, ...rest } = session;
+    if (!matrix)
+        return rest;
+    const { accessToken: _accessToken, encryptedMnemonic: _encryptedMnemonic, ...publicMatrix } = matrix;
+    return { ...rest, matrix: publicMatrix };
+}
+const holdsSecrets = (session) => Boolean(session.sessionKey || session.signingKey || session.postToken || session.matrix?.accessToken || session.matrix?.encryptedMnemonic);
+function previousSessions() {
+    if (typeof window === "undefined")
+        return [];
+    try {
+        const parsed = JSON.parse(window.localStorage.getItem(PREVIOUS_KEY) ?? "[]");
+        if (!Array.isArray(parsed))
+            return [];
+        const kept = parsed.filter((one) => one?.address);
+        /* A list written before secrets were stripped is cleaned the first time
+           it is read, rather than waiting for the next sign-in to rewrite it. */
+        if (kept.some(holdsSecrets)) {
+            const clean = kept.map(withoutSecrets);
+            window.localStorage.setItem(PREVIOUS_KEY, JSON.stringify(clean));
+            return clean;
+        }
+        return kept;
+    }
+    catch {
+        return [];
+    }
+}
+/** Drop one — "that wasn't me", or the ceremony finished with it. */
+function forgetPrevious(address) {
+    const kept = previousSessions().filter((one) => one.address !== address);
+    window.localStorage.setItem(PREVIOUS_KEY, JSON.stringify(kept));
+    window.dispatchEvent(new Event(EVENT));
+}
+function saveSession(session) {
+    const replaced = loadSession();
+    if (replaced && replaced.address !== session.address) {
+        /* Keep the newest few, most recent first, never the one signing in now —
+           coming back to an account you already had is not a second identity. */
+        const kept = [withoutSecrets(replaced), ...previousSessions().filter((one) => one.address !== replaced.address)]
+            .filter((one) => one.address !== session.address)
+            .slice(0, KEEP_PREVIOUS);
+        window.localStorage.setItem(PREVIOUS_KEY, JSON.stringify(kept));
+    }
+    window.localStorage.setItem(KEY, JSON.stringify(session));
+    window.dispatchEvent(new Event(EVENT));
+}
+/**
+ * Sign out: the session, and the accounts it remembered replacing.
+ *
+ * A browser somebody signed out of is often one somebody else uses next, and
+ * "was that you too?" asked of a stranger names the accounts the last person
+ * held. Signing out forgets them all (D22).
+ */
+function clearSession() {
+    window.localStorage.removeItem(KEY);
+    window.localStorage.removeItem(PREVIOUS_KEY);
+    window.dispatchEvent(new Event(EVENT));
+}
+function subscribeSession(callback) {
+    window.addEventListener(EVENT, callback);
+    window.addEventListener("storage", callback);
+    return () => {
+        window.removeEventListener(EVENT, callback);
+        window.removeEventListener("storage", callback);
+    };
+}
+//# sourceMappingURL=session.js.map

package/dist/cjs/chain/session.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session.js","sourceRoot":"","sources":["../../../src/chain/session.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAkFH,kCAcC;AA4BD,wCAKC;AAKD,4CAiBC;AAGD,wCAIC;AAED,kCAaC;AASD,oCAIC;AAED,4CAOC;AA1HD,gFAAgF;AACzE,MAAM,MAAM,GAAG,CAAC,OAAkB,EAAe,EAAE,CAAC,OAAO,CAAC,IAAI,IAAI,SAAS,CAAC;AAAxE,QAAA,MAAM,UAAkE;AAErF,qFAAqF;AAC9E,MAAM,eAAe,GAAG,CAAC,OAAyB,EAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,CAAC;AAAhG,QAAA,eAAe,mBAAiF;AAE7G,MAAM,GAAG,GAAG,YAAY,CAAC;AACzB,MAAM,KAAK,GAAG,oBAAoB,CAAC;AAEnC,SAAgB,WAAW;IACzB,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC/C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC7C,IAAI,CAAC,GAAG;YAAE,OAAO,IAAI,CAAC;QACtB,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAc,CAAC;QAC5C,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QACjC;;8DAEsD;QACtD,OAAO,IAAA,cAAM,EAAC,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,YAAY,IAAI,MAAM,CAAC,eAAe,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IACjH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAC3C,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,qFAAqF;AACrF,SAAgB,cAAc,CAAC,OAAkB;IAC/C,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,GAAG,OAAO,CAAC;IAC7G,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IACzB,MAAM,EAAE,WAAW,EAAE,YAAY,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,GAAG,YAAY,EAAE,GAAG,MAAM,CAAC;IACrG,OAAO,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;AAC3C,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,OAAkB,EAAW,EAAE,CACnD,OAAO,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,SAAS,IAAI,OAAO,CAAC,MAAM,EAAE,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC;AAE7I,SAAgB,gBAAgB;IAC9B,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,IAAI,IAAI,CAAgB,CAAC;QAC5F,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,CAAC;QACtC,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAClD;iFACyE;QACzE,IAAI,IAAI,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;YACvC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;YACjE,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,qEAAqE;AACrE,SAAgB,cAAc,CAAC,OAAe;IAC5C,MAAM,IAAI,GAAG,gBAAgB,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;IACzE,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAChE,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAgB,WAAW,CAAC,OAAkB;IAC5C,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;IAC/B,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;QACrD;iFACyE;QACzE,MAAM,IAAI,GAAG,CAAC,cAAc,CAAC,QAAQ,CAAC,EAAE,GAAG,gBAAgB,EAAE,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,QAAQ,CAAC,OAAO,CAAC,CAAC;aAC7G,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC;aAChD,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;QAC3B,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IAClE,CAAC;IAED,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,YAAY;IAC1B,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IACpC,MAAM,CAAC,YAAY,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAC7C,MAAM,CAAC,aAAa,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAgB,gBAAgB,CAAC,QAAoB;IACnD,MAAM,CAAC,gBAAgB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IACzC,MAAM,CAAC,gBAAgB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAC7C,OAAO,GAAG,EAAE;QACV,MAAM,CAAC,mBAAmB,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;QAC5C,MAAM,CAAC,mBAAmB,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC;IAClD,CAAC,CAAC;AACJ,CAAC"}

package/dist/cjs/chain/signWith.d.ts

@@ -0,0 +1,69 @@
+import type { EncodeObject } from "@cosmjs/proto-signing";
+import { type QiSession } from "./session.ts";
+/**
+ * One way to sign, whoever you are.
+ *
+ * Before the identity ladder every signing site called `broadcastWithPasskey`
+ * directly, which is now only one of three answers. This dispatches on what
+ * the session actually holds, so `/ask`, PosterTools and the union ceremony
+ * each have one call site rather than a branch each.
+ *
+ * The SignX path is the interesting one: the phone decodes the body, shows the
+ * messages on its own screen, signs, **and broadcasts itself**. We never hold
+ * a key. What comes back is a result — and the trap INFRA §1.1 names is that
+ * **a broadcast that landed with `code ≠ 0` still arrives on the success
+ * channel**, so this throws on it. A failed payout must never read as paid.
+ */
+export interface SignResult {
+    transactionHash: string;
+}
+export interface SignHooks {
+    /**
+     * Called with the transaction's hash once it is signed and before its bytes
+     * leave this device, and awaited: a caller moving money keeps the hash first
+     * (`postAsk` re-saves its marker with it), so an ending that does not say
+     * whether the transaction landed can still be looked up. Throwing here
+     * stops the broadcast. Not called on the phone path, where the phone
+     * broadcasts on its own and every unknown ending already carries the hash
+     * (`unknownOutcome`).
+     */
+    onSigned?: (transactionHash: string) => void | Promise<void>;
+}
+/**
+ * The chain said no to this transaction: refused at CheckTx, or included with
+ * a non-zero code. Either way it did not do what it said, and nothing moved
+ * but the fee — the one failure a caller moving money may treat as final.
+ * Carries the same `code` and `log` cosmjs's `BroadcastTxError` does, so one
+ * test (`isChainRefusal`) recognises both.
+ */
+export declare class ChainRefusal extends Error {
+    readonly code: number;
+    readonly log: string;
+    constructor(code: number, log: string);
+}
+/**
+ * Whether an error is the chain's own "no" — a non-zero code with a log —
+ * rather than an ending that does not say (a dropped connection, an RPC 5xx,
+ * a timeout). Duck-typed because cosmjs's `BroadcastTxError` comes from a
+ * module this file must not load eagerly.
+ */
+export declare function isChainRefusal(error: unknown): boolean;
+/** What the phone needs shown: a link to tap here, a code to scan there. */
+export interface PhoneSignRequest {
+    deeplink: string;
+    /** Where to fetch the QR for it, already stamped so the route will draw it. */
+    qrUrl: string;
+}
+/** How a caller shows a QR and waits, without this module knowing about UI. */
+export interface PhonePrompt {
+    show: (request: PhoneSignRequest) => void;
+    done: () => void;
+}
+/**
+ * Sign and broadcast, by whatever means this session has.
+ *
+ * `prompt` is only consulted for phone signing; a passkey session never sees
+ * it, which is why it is optional rather than a required no-op.
+ */
+export declare function signWithSession(session: QiSession, messages: EncodeObject[], memo?: string, prompt?: PhonePrompt, hooks?: SignHooks): Promise<SignResult>;
+//# sourceMappingURL=signWith.d.ts.map

package/dist/cjs/chain/signWith.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signWith.d.ts","sourceRoot":"","sources":["../../../src/chain/signWith.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAE1D,OAAO,EAAU,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAEtD;;;;;;;;;;;;;GAaG;AAEH,MAAM,WAAW,UAAU;IACzB,eAAe,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,SAAS;IACxB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,CAAC,eAAe,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9D;AAED;;;;;;GAMG;AACH,qBAAa,YAAa,SAAQ,KAAK;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;gBACT,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM;CAMtC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAItD;AAED,4EAA4E;AAC5E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;CACf;AAED,+EAA+E;AAC/E,MAAM,WAAW,WAAW;IAC1B,IAAI,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAC1C,IAAI,EAAE,MAAM,IAAI,CAAC;CAClB;AAyKD;;;;;GAKG;AACH,wBAAsB,eAAe,CAAC,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,YAAY,EAAE,EAAE,IAAI,SAAgC,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,EAAE,SAAS,GAAG,OAAO,CAAC,UAAU,CAAC,CAwCtL"}

package/dist/cjs/chain/signWith.js

@@ -0,0 +1,277 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ChainRefusal = void 0;
+exports.isChainRefusal = isChainRefusal;
+exports.signWithSession = signWithSession;
+const session_ts_1 = require("./session.js");
+/**
+ * The chain said no to this transaction: refused at CheckTx, or included with
+ * a non-zero code. Either way it did not do what it said, and nothing moved
+ * but the fee — the one failure a caller moving money may treat as final.
+ * Carries the same `code` and `log` cosmjs's `BroadcastTxError` does, so one
+ * test (`isChainRefusal`) recognises both.
+ */
+class ChainRefusal extends Error {
+    code;
+    log;
+    constructor(code, log) {
+        super(log || `Transaction failed (code ${code})`);
+        this.name = "ChainRefusal";
+        this.code = code;
+        this.log = log;
+    }
+}
+exports.ChainRefusal = ChainRefusal;
+/**
+ * Whether an error is the chain's own "no" — a non-zero code with a log —
+ * rather than an ending that does not say (a dropped connection, an RPC 5xx,
+ * a timeout). Duck-typed because cosmjs's `BroadcastTxError` comes from a
+ * module this file must not load eagerly.
+ */
+function isChainRefusal(error) {
+    if (!(error instanceof Error))
+        return false;
+    const shaped = error;
+    return typeof shaped.code === "number" && shaped.code !== 0 && typeof shaped.log === "string";
+}
+/**
+ * An ending that does not say whether the transaction landed. Named
+ * `TimeoutError` with the hash attached — the same shape cosmjs gives a
+ * broadcast that was sent but not seen in time — so a caller moving money
+ * (`postAsk`) treats every such ending as "pending, check before retrying"
+ * rather than as a failure it may simply repeat.
+ */
+function unknownOutcome(message, transactionHash) {
+    const error = new Error(message);
+    error.name = "TimeoutError";
+    error.txId = transactionHash;
+    return error;
+}
+const POLL_MS = 2000;
+/**
+ * Five minutes of wall clock, not three: a ceremony's timeout is a claim
+ * about the journey it serves, and this journey crosses an app boundary —
+ * cold start, read the transaction, sign, find the way back. The login paid
+ * for the two-minute version of this mistake; three minutes was the same
+ * mistake with more room.
+ */
+const GIVE_UP_MS = 5 * 60 * 1000;
+/** How many failed polls in a row are a hiccup rather than a dead request. */
+const BLIPS_ALLOWED = 4;
+async function signViaPhone(session, messages, memo, prompt) {
+    /* Everything below is reached only by a session that signs with a phone.
+       Most people never have one, and /t/[id] sits on the byte ceiling, so the
+       polling loop and the encoder load when they are actually used. */
+    if (!session.did)
+        throw new Error("this session has no ixo identity to sign with");
+    /* The registry that knows ixo's messages already lives in broadcast.ts's
+       client; encoding here keeps the phone's payload identical to what the
+       chain would have received from us. */
+    const [{ encodeTxBody }, { pubkeyHexFor, didOf }] = await Promise.all([Promise.resolve().then(() => __importStar(require("./broadcast.js"))), Promise.resolve().then(() => __importStar(require("./iid.js")))]);
+    const txBodyHex = await encodeTxBody(messages, memo);
+    const pubkey = await pubkeyHexFor(session.address);
+    const started = await fetch("/api/signx/transact/start", {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        /* The post token is how the route knows this is the signed-in person and
+           not a page asking our relay to stamp somebody else's transaction (C9). */
+        body: JSON.stringify({ address: session.address, did: session.did ?? didOf(session.address), pubkey, txBodyHexes: [txBodyHex], postToken: session.postToken })
+    }).then(async (response) => {
+        if (response.ok)
+            return response.json();
+        /* A refusal with a reason (sign in again; not a transaction we build) is
+           said as itself, not as an unreachable relay. */
+        const refused = (await response.json().catch(() => null));
+        if (response.status === 401 && refused?.why)
+            throw new Error(refused.why);
+        return null;
+    });
+    if (!started)
+        throw new Error("could not reach the signing relay");
+    /*
+     * The request outlives this page from here on. On a phone the deeplink
+     * backgrounds the tab and iOS may discard it; the phone signs AND
+     * broadcasts on its own, so the transaction can succeed while nobody is
+     * left to hear it. The shell's `finishPendingTransacts` chases whatever
+     * this page never got to clear.
+     */
+    const { rememberTransact, forgetTransact } = await Promise.resolve().then(() => __importStar(require("./pendingTransact.js")));
+    rememberTransact({ sessionHash: started.sessionHash, transactionHash: started.transactionHash, memo, startedAt: new Date().toISOString() });
+    prompt?.show({ deeplink: started.deeplink, qrUrl: started.qrUrl });
+    /*
+     * **Every answer that is not "not yet" ends the wait** — and the wait is
+     * driven by two things, not one: the timer, and the tab coming back to the
+     * front. iOS suspends timers in a backgrounded tab, and the trip to the
+     * app backgrounds this one — so the deadline is only allowed to expire
+     * with a **final ask**, never silently: if the phone signed while this
+     * page was suspended, the answer is sitting on the relay, and a page that
+     * says "timed out" over a transaction that landed is the exact lie this
+     * path exists to prevent.
+     */
+    const until = Date.now() + GIVE_UP_MS;
+    let blips = 0;
+    return await new Promise((resolve, reject) => {
+        let settled = false;
+        let inFlight = false;
+        let timer;
+        let onReturn;
+        const finish = (act, clear) => {
+            if (settled)
+                return;
+            settled = true;
+            if (timer)
+                clearInterval(timer);
+            if (onReturn && typeof document !== "undefined")
+                document.removeEventListener("visibilitychange", onReturn);
+            if (clear)
+                forgetTransact(started.transactionHash);
+            prompt?.done();
+            act();
+        };
+        const tick = async (last = false) => {
+            if (settled || inFlight)
+                return;
+            inFlight = true;
+            try {
+                const response = await fetch("/api/signx/transact/poll", {
+                    method: "POST",
+                    headers: { "content-type": "application/json" },
+                    body: JSON.stringify({ sessionHash: started.sessionHash, transactionHash: started.transactionHash })
+                }).catch(() => null);
+                if (!response) {
+                    if (++blips > BLIPS_ALLOWED)
+                        finish(() => reject(unknownOutcome("lost contact with the signing relay. Check your connection; if your phone already approved it, the money still moves and this page will catch up", started.transactionHash)), false);
+                    else if (last)
+                        finish(() => reject(unknownOutcome("the signing request timed out. If your phone approved it, this page will say so when it hears back", started.transactionHash)), false);
+                    return;
+                }
+                const answer = (await response.json().catch(() => null));
+                if (!response.ok) {
+                    /* 5xx is worth another try; 429 and 4xx will not fix themselves in
+                       the two seconds before the next one, so they end it with a reason. */
+                    if (response.status >= 500 && ++blips <= BLIPS_ALLOWED && !last)
+                        return;
+                    finish(() => reject(new Error(answer?.error || `the signing relay answered ${response.status}`)), true);
+                    return;
+                }
+                blips = 0;
+                if (!answer)
+                    return;
+                /* The relay told us this is over — the session is gone, or the phone
+                   declined. Either way nobody is going to answer this code. */
+                if (answer.failed) {
+                    finish(() => reject(new Error(answer.why || "your phone did not complete this")), true);
+                    return;
+                }
+                if (answer.waiting) {
+                    /* The deadline may only expire with an answer in hand. "Not yet"
+                       on the final ask is the one honest timeout. */
+                    if (last)
+                        finish(() => reject(unknownOutcome("the signing request timed out. Nothing was signed. If you approved it late, the page will catch up on its own", started.transactionHash)), false);
+                    return;
+                }
+                /* The whole reason this is checked here: the relay's success channel
+                   carries failures too. */
+                if (answer.code !== 0) {
+                    const code = typeof answer.code === "number" ? answer.code : -1;
+                    finish(() => reject(new ChainRefusal(code, answer.rawLog?.slice(0, 200) || `the transaction failed on chain (code ${answer.code})`)), true);
+                    return;
+                }
+                finish(() => resolve({ transactionHash: answer.transactionHash ?? "" }), true);
+            }
+            finally {
+                inFlight = false;
+            }
+        };
+        timer = setInterval(() => void tick(Date.now() > until), POLL_MS);
+        if (typeof document !== "undefined") {
+            /* The moment the tab fronts again, ask — waiting for the next tick
+               after a phone trip is waiting on a timer iOS may have shelved. */
+            onReturn = () => {
+                if (document.visibilityState === "visible")
+                    void tick(Date.now() > until);
+            };
+            document.addEventListener("visibilitychange", onReturn);
+        }
+        void tick();
+    });
+}
+/**
+ * Sign and broadcast, by whatever means this session has.
+ *
+ * `prompt` is only consulted for phone signing; a passkey session never sees
+ * it, which is why it is optional rather than a required no-op.
+ */
+async function signWithSession(session, messages, memo = "Signed on Openhands Network", prompt, hooks) {
+    const kind = (0, session_ts_1.kindOf)(session);
+    if (kind === "passkey") {
+        const { broadcastWithPasskey } = await Promise.resolve().then(() => __importStar(require("./broadcast.js")));
+        const result = await broadcastWithPasskey(session, messages, memo, hooks);
+        return { transactionHash: result.transactionHash ?? "" };
+    }
+    if (kind === "signx")
+        return signViaPhone(session, messages, memo, prompt);
+    /*
+     * The auth hub hands over a session key — a secp mnemonic it registered on
+     * chain as a smart-account authenticator of the account, with that
+     * authenticator's id. **It is not the account's own key**: its derived
+     * address is another address entirely, so a plain wallet built from it
+     * cannot sign as the account — cosmjs refuses the signer before anything
+     * reaches the chain, which is what every hub-signed act here died of. It
+     * signs through the smart-account path, naming its authenticator, exactly
+     * as the portal and Jambo do. The root recovery mnemonic stays where the
+     * hub keeps it: away from this browser.
+     */
+    if (session.sessionKey?.mnemonic) {
+        const { broadcastAsAccount, broadcastWithWallet } = await Promise.resolve().then(() => __importStar(require("./broadcast.js")));
+        if (session.sessionKey.authenticatorId) {
+            const result = await broadcastAsAccount({ address: session.address, mnemonic: session.sessionKey.mnemonic, authenticatorId: session.sessionKey.authenticatorId }, messages, memo, hooks);
+            return { transactionHash: result.transactionHash ?? "" };
+        }
+        /* No authenticator id: only a key that IS the account can sign with a
+           plain wallet, and that is checked rather than assumed, so the failure
+           says what is missing instead of cosmjs saying something else. */
+        const { DirectSecp256k1HdWallet } = await Promise.resolve().then(() => __importStar(require("@cosmjs/proto-signing")));
+        const wallet = await DirectSecp256k1HdWallet.fromMnemonic(session.sessionKey.mnemonic, { prefix: "ixo" });
+        const [own] = await wallet.getAccounts();
+        if (own?.address !== session.address)
+            throw new Error("this session's key is not the account's own, and the hub named no authenticator for it. Sign in again");
+        const result = await broadcastWithWallet(wallet, session.address, messages, memo, hooks);
+        return { transactionHash: result.transactionHash ?? "" };
+    }
+    throw new Error("This account has no way to sign here. Sign in again.");
+}
+//# sourceMappingURL=signWith.js.map

package/dist/cjs/chain/signWith.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signWith.js","sourceRoot":"","sources":["../../../src/chain/signWith.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4DA,wCAIC;AA4LD,0CAwCC;AAlSD,6CAAsD;AAkCtD;;;;;;GAMG;AACH,MAAa,YAAa,SAAQ,KAAK;IAC5B,IAAI,CAAS;IACb,GAAG,CAAS;IACrB,YAAY,IAAY,EAAE,GAAW;QACnC,KAAK,CAAC,GAAG,IAAI,4BAA4B,IAAI,GAAG,CAAC,CAAC;QAClD,IAAI,CAAC,IAAI,GAAG,cAAc,CAAC;QAC3B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;CACF;AATD,oCASC;AAED;;;;;GAKG;AACH,SAAgB,cAAc,CAAC,KAAc;IAC3C,IAAI,CAAC,CAAC,KAAK,YAAY,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,MAAM,GAAG,KAAkD,CAAC;IAClE,OAAO,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC;AAChG,CAAC;AAeD;;;;;;GAMG;AACH,SAAS,cAAc,CAAC,OAAe,EAAE,eAAuB;IAC9D,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,OAAO,CAA6B,CAAC;IAC7D,KAAK,CAAC,IAAI,GAAG,cAAc,CAAC;IAC5B,KAAK,CAAC,IAAI,GAAG,eAAe,CAAC;IAC7B,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,OAAO,GAAG,IAAI,CAAC;AACrB;;;;;;GAMG;AACH,MAAM,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AACjC,8EAA8E;AAC9E,MAAM,aAAa,GAAG,CAAC,CAAC;AAExB,KAAK,UAAU,YAAY,CAAC,OAAkB,EAAE,QAAwB,EAAE,IAAY,EAAE,MAAoB;IAC1G;;wEAEoE;IACpE,IAAI,CAAC,OAAO,CAAC,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IAEnF;;4CAEwC;IACxC,MAAM,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,mDAAQ,gBAAgB,uDAAU,UAAU,IAAE,CAAC,CAAC;IACtH,MAAM,SAAS,GAAG,MAAM,YAAY,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACrD,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAEnD,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,2BAA2B,EAAE;QACvD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;QAC/C;oFAC4E;QAC5E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;KAC/J,CAAC,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,EAAE;QACzB,IAAI,QAAQ,CAAC,EAAE;YAAE,OAAO,QAAQ,CAAC,IAAI,EAAgG,CAAC;QACtI;0DACkD;QAClD,MAAM,OAAO,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAA4B,CAAC;QACrF,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,EAAE,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC1E,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IAEnE;;;;;;OAMG;IACH,MAAM,EAAE,gBAAgB,EAAE,cAAc,EAAE,GAAG,wDAAa,sBAAsB,GAAC,CAAC;IAClF,gBAAgB,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAE5I,MAAM,EAAE,IAAI,CAAC,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;IAEnE;;;;;;;;;OASG;IACH,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,UAAU,CAAC;IACtC,IAAI,KAAK,GAAG,CAAC,CAAC;IAEd,OAAO,MAAM,IAAI,OAAO,CAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACvD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,KAAiD,CAAC;QACtD,IAAI,QAAkC,CAAC;QAEvC,MAAM,MAAM,GAAG,CAAC,GAAe,EAAE,KAAc,EAAE,EAAE;YACjD,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,IAAI,KAAK;gBAAE,aAAa,CAAC,KAAK,CAAC,CAAC;YAChC,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,WAAW;gBAAE,QAAQ,CAAC,mBAAmB,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;YAC5G,IAAI,KAAK;gBAAE,cAAc,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC;YACnD,MAAM,EAAE,IAAI,EAAE,CAAC;YACf,GAAG,EAAE,CAAC;QACR,CAAC,CAAC;QAEF,MAAM,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,EAAE,EAAE;YAClC,IAAI,OAAO,IAAI,QAAQ;gBAAE,OAAO;YAChC,QAAQ,GAAG,IAAI,CAAC;YAChB,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,0BAA0B,EAAE;oBACvD,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,eAAe,EAAE,OAAO,CAAC,eAAe,EAAE,CAAC;iBACrG,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAC;gBAErB,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,IAAI,EAAE,KAAK,GAAG,aAAa;wBAAE,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,kJAAkJ,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;yBACjP,IAAI,IAAI;wBAAE,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,oGAAoG,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;oBAC1L,OAAO;gBACT,CAAC;gBAED,MAAM,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAE/C,CAAC;gBAET,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB;4FACwE;oBACxE,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,EAAE,KAAK,IAAI,aAAa,IAAI,CAAC,IAAI;wBAAE,OAAO;oBACxE,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,KAAK,IAAI,8BAA8B,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;oBACxG,OAAO;gBACT,CAAC;gBAED,KAAK,GAAG,CAAC,CAAC;gBACV,IAAI,CAAC,MAAM;oBAAE,OAAO;gBAEpB;+EAC+D;gBAC/D,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;oBAClB,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,IAAI,kCAAkC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;oBACxF,OAAO;gBACT,CAAC;gBACD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB;qEACiD;oBACjD,IAAI,IAAI;wBAAE,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,+GAA+G,EAAE,OAAO,CAAC,eAAe,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;oBAChM,OAAO;gBACT,CAAC;gBAED;2CAC2B;gBAC3B,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;oBACtB,MAAM,IAAI,GAAG,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;oBAChE,MAAM,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,IAAI,yCAAyC,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;oBAC5I,OAAO;gBACT,CAAC;gBACD,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;YACjF,CAAC;oBAAS,CAAC;gBACT,QAAQ,GAAG,KAAK,CAAC;YACnB,CAAC;QACH,CAAC,CAAC;QAEF,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,EAAE,OAAO,CAAC,CAAC;QAClE,IAAI,OAAO,QAAQ,KAAK,WAAW,EAAE,CAAC;YACpC;gFACoE;YACpE,QAAQ,GAAG,GAAG,EAAE;gBACd,IAAI,QAAQ,CAAC,eAAe,KAAK,SAAS;oBAAE,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,CAAC;YAC5E,CAAC,CAAC;YACF,QAAQ,CAAC,gBAAgB,CAAC,kBAAkB,EAAE,QAAQ,CAAC,CAAC;QAC1D,CAAC;QACD,KAAK,IAAI,EAAE,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,eAAe,CAAC,OAAkB,EAAE,QAAwB,EAAE,IAAI,GAAG,6BAA6B,EAAE,MAAoB,EAAE,KAAiB;IAC/J,MAAM,IAAI,GAAG,IAAA,mBAAM,EAAC,OAAO,CAAC,CAAC;IAE7B,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,MAAM,EAAE,oBAAoB,EAAE,GAAG,wDAAa,gBAAgB,GAAC,CAAC;QAChE,MAAM,MAAM,GAAG,MAAM,oBAAoB,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QAC1E,OAAO,EAAE,eAAe,EAAG,MAAuC,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;IAC7F,CAAC;IAED,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,YAAY,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IAE3E;;;;;;;;;;OAUG;IACH,IAAI,OAAO,CAAC,UAAU,EAAE,QAAQ,EAAE,CAAC;QACjC,MAAM,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,GAAG,wDAAa,gBAAgB,GAAC,CAAC;QACnF,IAAI,OAAO,CAAC,UAAU,CAAC,eAAe,EAAE,CAAC;YACvC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,eAAe,EAAE,OAAO,CAAC,UAAU,CAAC,eAAe,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YACzL,OAAO,EAAE,eAAe,EAAG,MAAuC,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;QAC7F,CAAC;QACD;;2EAEmE;QACnE,MAAM,EAAE,uBAAuB,EAAE,GAAG,wDAAa,uBAAuB,GAAC,CAAC;QAC1E,MAAM,MAAM,GAAG,MAAM,uBAAuB,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1G,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,MAAM,CAAC,WAAW,EAAE,CAAC;QACzC,IAAI,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,uGAAuG,CAAC,CAAC;QAC/J,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;QACzF,OAAO,EAAE,eAAe,EAAG,MAAuC,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;IAC7F,CAAC;IAED,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;AAC1E,CAAC"}

package/dist/cjs/chain/signer.d.ts

@@ -0,0 +1,38 @@
+import type { AccountData, DirectSecp256k1HdWallet, DirectSignResponse, OfflineDirectSigner } from "@cosmjs/proto-signing";
+/**
+ * Signs Cosmos SignDocs with a passkey: the tx hash becomes the WebAuthn
+ * challenge, and the assertion (authenticatorData + clientDataJSON +
+ * signature) travels in the signature slot for the chain's AuthnVerification
+ * authenticator to verify.
+ */
+export declare class PasskeySigner implements OfflineDirectSigner {
+    private readonly address;
+    private readonly credentialId;
+    constructor(address: string, credentialId: string);
+    getAccounts(): Promise<readonly AccountData[]>;
+    signDirect(signerAddress: string, signDoc: Parameters<OfflineDirectSigner["signDirect"]>[1]): Promise<DirectSignResponse>;
+}
+/**
+ * Signs Cosmos SignDocs with an auth-hub session key, for the account it was
+ * registered on.
+ *
+ * The mnemonic-driven twin of `PasskeySigner`. An auth-hub account is a
+ * smart account, and the key the hub hands a browser is a *session key* it
+ * added on chain as a `SignatureVerification` authenticator — so that key's
+ * own address is not the account's, and a plain wallet built from it cannot
+ * sign as the account: cosmjs looks the signer address up in
+ * `getAccounts()` and stops there. This reports the account's address with an
+ * empty public key, which is how a smart-account signer says "verify me by
+ * the authenticator the transaction names", and signs the document with the
+ * session key. The `TxExtension` beside it (`broadcastAsAccount`) names which
+ * authenticator that is. The same shape the portal and the Jambo app sign
+ * with, and the shape the hub's own demo proved against the chain.
+ */
+export declare class SessionKeySigner implements OfflineDirectSigner {
+    private readonly wallet;
+    private readonly address;
+    constructor(wallet: DirectSecp256k1HdWallet, address: string);
+    getAccounts(): Promise<readonly AccountData[]>;
+    signDirect(signerAddress: string, signDoc: Parameters<OfflineDirectSigner["signDirect"]>[1]): Promise<DirectSignResponse>;
+}
+//# sourceMappingURL=signer.d.ts.map

package/dist/cjs/chain/signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../../src/chain/signer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,WAAW,EAAE,uBAAuB,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAK3H;;;;;GAKG;AACH,qBAAa,aAAc,YAAW,mBAAmB;IAIvD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAS;gBAE1B,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM;IAK3C,WAAW,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IAI9C,UAAU,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAchI;AAED;;;;;;;;;;;;;;;GAeG;AACH,qBAAa,gBAAiB,YAAW,mBAAmB;IAC1D,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA0B;IACjD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,MAAM,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM;IAKtD,WAAW,IAAI,OAAO,CAAC,SAAS,WAAW,EAAE,CAAC;IAI9C,UAAU,CAAC,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,mBAAmB,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,kBAAkB,CAAC;CAMhI"}

package/dist/cjs/chain/signer.js

@@ -0,0 +1,78 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SessionKeySigner = exports.PasskeySigner = void 0;
+const crypto_1 = require("@cosmjs/crypto");
+const proto_signing_1 = require("@cosmjs/proto-signing");
+const encoding_ts_1 = require("./encoding.js");
+const webauthn_ts_1 = require("./webauthn.js");
+/**
+ * Signs Cosmos SignDocs with a passkey: the tx hash becomes the WebAuthn
+ * challenge, and the assertion (authenticatorData + clientDataJSON +
+ * signature) travels in the signature slot for the chain's AuthnVerification
+ * authenticator to verify.
+ */
+class PasskeySigner {
+    /* Plain fields rather than constructor parameter properties: node's
+       strip-only TypeScript cannot parse those, and the smokes run this package
+       directly so a live script proves the same code the browser runs. */
+    address;
+    credentialId;
+    constructor(address, credentialId) {
+        this.address = address;
+        this.credentialId = credentialId;
+    }
+    async getAccounts() {
+        return [{ address: this.address, algo: "secp256k1", pubkey: new Uint8Array() }];
+    }
+    async signDirect(signerAddress, signDoc) {
+        if (signerAddress !== this.address)
+            throw new Error(`Address ${signerAddress} not found in wallet`);
+        const challenge = (0, crypto_1.sha256)((0, proto_signing_1.makeSignBytes)(signDoc));
+        const assertion = await (0, webauthn_ts_1.assertWithCredential)(this.credentialId, challenge, (0, encoding_ts_1.base64urlToBytes)(this.credentialId));
+        return {
+            signed: signDoc,
+            signature: {
+                pub_key: { type: "tendermint/PubKeySecp256k1", value: "" },
+                signature: (0, encoding_ts_1.utf8ToBase64)(JSON.stringify(assertion))
+            }
+        };
+    }
+}
+exports.PasskeySigner = PasskeySigner;
+/**
+ * Signs Cosmos SignDocs with an auth-hub session key, for the account it was
+ * registered on.
+ *
+ * The mnemonic-driven twin of `PasskeySigner`. An auth-hub account is a
+ * smart account, and the key the hub hands a browser is a *session key* it
+ * added on chain as a `SignatureVerification` authenticator — so that key's
+ * own address is not the account's, and a plain wallet built from it cannot
+ * sign as the account: cosmjs looks the signer address up in
+ * `getAccounts()` and stops there. This reports the account's address with an
+ * empty public key, which is how a smart-account signer says "verify me by
+ * the authenticator the transaction names", and signs the document with the
+ * session key. The `TxExtension` beside it (`broadcastAsAccount`) names which
+ * authenticator that is. The same shape the portal and the Jambo app sign
+ * with, and the shape the hub's own demo proved against the chain.
+ */
+class SessionKeySigner {
+    wallet;
+    address;
+    constructor(wallet, address) {
+        this.wallet = wallet;
+        this.address = address;
+    }
+    async getAccounts() {
+        return [{ address: this.address, algo: "secp256k1", pubkey: new Uint8Array() }];
+    }
+    async signDirect(signerAddress, signDoc) {
+        if (signerAddress !== this.address)
+            throw new Error(`Address ${signerAddress} not found in wallet`);
+        const [own] = await this.wallet.getAccounts();
+        if (!own)
+            throw new Error("the session key has no account");
+        return this.wallet.signDirect(own.address, signDoc);
+    }
+}
+exports.SessionKeySigner = SessionKeySigner;
+//# sourceMappingURL=signer.js.map

package/dist/cjs/chain/signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer.js","sourceRoot":"","sources":["../../../src/chain/signer.ts"],"names":[],"mappings":";;;AAAA,2CAAwC;AACxC,yDAAsD;AAGtD,+CAA+D;AAC/D,+CAAqD;AAErD;;;;;GAKG;AACH,MAAa,aAAa;IACxB;;0EAEsE;IACrD,OAAO,CAAS;IAChB,YAAY,CAAS;IAEtC,YAAY,OAAe,EAAE,YAAoB;QAC/C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,YAAY,GAAG,YAAY,CAAC;IACnC,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,aAAqB,EAAE,OAAyD;QAC/F,IAAI,aAAa,KAAK,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,aAAa,sBAAsB,CAAC,CAAC;QAEpG,MAAM,SAAS,GAAG,IAAA,eAAM,EAAC,IAAA,6BAAa,EAAC,OAAO,CAAC,CAAC,CAAC;QACjD,MAAM,SAAS,GAAG,MAAM,IAAA,kCAAoB,EAAC,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAA,8BAAgB,EAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;QAEhH,OAAO;YACL,MAAM,EAAE,OAAO;YACf,SAAS,EAAE;gBACT,OAAO,EAAE,EAAE,IAAI,EAAE,4BAA4B,EAAE,KAAK,EAAE,EAAE,EAAE;gBAC1D,SAAS,EAAE,IAAA,0BAAY,EAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;aACnD;SACF,CAAC;IACJ,CAAC;CACF;AA9BD,sCA8BC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAa,gBAAgB;IACV,MAAM,CAA0B;IAChC,OAAO,CAAS;IAEjC,YAAY,MAA+B,EAAE,OAAe;QAC1D,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,KAAK,CAAC,WAAW;QACf,OAAO,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,UAAU,EAAE,EAAE,CAAC,CAAC;IAClF,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,aAAqB,EAAE,OAAyD;QAC/F,IAAI,aAAa,KAAK,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,WAAW,aAAa,sBAAsB,CAAC,CAAC;QACpG,MAAM,CAAC,GAAG,CAAC,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;QAC9C,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;QAC5D,OAAO,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IACtD,CAAC;CACF;AAnBD,4CAmBC"}