@medialane/sdk 0.113.0 → 0.115.0

package/dist/starknet/index.cjs

@@ -11912,6 +11912,25 @@ async function deriveAesKey(prfSecret, hkdfInfo) {
     ["encrypt", "decrypt"]
   );
 }
+var STARK_KEY_INFO = new TextEncoder().encode("medialane/passkey/stark-key/v1");
+var DERIVE_BITS = 384;
+function bytesToBigInt(bytes) {
+  let value = 0n;
+  for (const byte of bytes) value = value << 8n | BigInt(byte);
+  return value;
+}
+async function deriveStarkKeyPair(prfSecret) {
+  const hkdf = await crypto.subtle.importKey("raw", prfSecret, "HKDF", false, ["deriveBits"]);
+  const bits = await crypto.subtle.deriveBits(
+    { name: "HKDF", hash: "SHA-256", salt: new Uint8Array(0), info: STARK_KEY_INFO },
+    hkdf,
+    DERIVE_BITS
+  );
+  const order = starknet.ec.starkCurve.CURVE.n;
+  const value = bytesToBigInt(new Uint8Array(bits)) % (order - 1n) + 1n;
+  const privateKeyHex = "0x" + value.toString(16).padStart(64, "0");
+  return { privateKeyHex, publicKeyHex: starknet.ec.starkCurve.getStarkKey(privateKeyHex) };
+}
 function generateStarkKeyPair() {
   const privateKeyHex = "0x" + Array.from(starknet.ec.starkCurve.utils.randomPrivateKey()).map((b) => b.toString(16).padStart(2, "0")).join("");
   return { privateKeyHex, publicKeyHex: starknet.ec.starkCurve.getStarkKey(privateKeyHex) };
@@ -11950,8 +11969,73 @@ function signWithPrivateKey(privateKeyHex, msgHash) {
   return [starknet.num.toHex(sig.r), starknet.num.toHex(sig.s)];
 }
 
+// src/starknet/app-approval/approval.ts
+var MEDIALANE_SUFFIX = ".medialane.io";
+var STARK_ORDER2 = (1n << 251n) + 17n * (1n << 192n) + 1n;
+var APPROVAL_PATH = "/approve-app";
+var InvalidApprovalRequestError = class extends Error {
+  constructor(message) {
+    super(message);
+    this.name = "InvalidApprovalRequestError";
+  }
+};
+function isMedialaneOrigin(url) {
+  let parsed;
+  try {
+    parsed = new URL(url);
+  } catch {
+    return false;
+  }
+  if (parsed.protocol !== "https:") return parsed.hostname === "localhost";
+  return parsed.hostname === "medialane.io" || parsed.hostname.endsWith(MEDIALANE_SUFFIX);
+}
+function assertPublicKey(value) {
+  if (!/^0x[0-9a-fA-F]{1,64}$/.test(value)) {
+    throw new InvalidApprovalRequestError("That is not a wallet key.");
+  }
+  const scalar = BigInt(value);
+  if (scalar === 0n || scalar >= STARK_ORDER2) {
+    throw new InvalidApprovalRequestError("That is not a wallet key.");
+  }
+  return `0x${scalar.toString(16)}`;
+}
+function assertAppName(value) {
+  const name = value.replace(/\s+/g, " ").trim().slice(0, 40);
+  if (!name) throw new InvalidApprovalRequestError("The app asking has no name.");
+  return name;
+}
+function assertReturnUrl(value) {
+  if (!isMedialaneOrigin(value)) {
+    throw new InvalidApprovalRequestError("That app is not part of Medialane.");
+  }
+  return value;
+}
+function buildApprovalUrl(approverOrigin, request) {
+  if (!isMedialaneOrigin(approverOrigin)) {
+    throw new InvalidApprovalRequestError("That app is not part of Medialane.");
+  }
+  const url = new URL(APPROVAL_PATH, approverOrigin);
+  url.searchParams.set("key", assertPublicKey(request.publicKey));
+  url.searchParams.set("app", assertAppName(request.appName));
+  url.searchParams.set("return", assertReturnUrl(request.returnUrl));
+  return url.toString();
+}
+function parseApprovalRequest(params) {
+  return {
+    publicKey: assertPublicKey(params.get("key") ?? ""),
+    appName: assertAppName(params.get("app") ?? ""),
+    returnUrl: assertReturnUrl(params.get("return") ?? "")
+  };
+}
+function buildReturnUrl(returnUrl, outcome) {
+  const url = new URL(assertReturnUrl(returnUrl));
+  url.searchParams.set("approval", outcome);
+  return url.toString();
+}
+
 exports.ADMIN_HEADERS = ADMIN_HEADERS;
 exports.ADMIN_SCOPE = ADMIN_SCOPE;
+exports.APPROVAL_PATH = APPROVAL_PATH;
 exports.COIN_MAX_SUPPLY = MAX_SUPPLY;
 exports.COIN_MIN_SUPPLY = MIN_SUPPLY;
 exports.ClubService = ClubService;
@@ -11972,6 +12056,7 @@ exports.IPNftABI = IPNftABI;
 exports.IPSponsorshipABI = IPSponsorshipABI;
 exports.IPTicketCollectionABI = IPTicketCollectionABI;
 exports.IPTicketCollectionFactoryABI = IPTicketCollectionFactoryABI;
+exports.InvalidApprovalRequestError = InvalidApprovalRequestError;
 exports.InvalidStarkPrivateKeyError = InvalidStarkPrivateKeyError;
 exports.MAX_HOLDERS_AT_LAUNCH = MAX_HOLDERS_AT_LAUNCH;
 exports.MAX_TEAM_ALLOCATION_PERCENT = MAX_TEAM_ALLOCATION_PERCENT;
@@ -11993,6 +12078,7 @@ exports.build1155CancellationTypedData = build1155CancellationTypedData;
 exports.build1155OrderTypedData = build1155OrderTypedData;
 exports.buildAddOwnerCall = buildAddOwnerCall;
 exports.buildAdminSessionTypedData = buildAdminSessionTypedData;
+exports.buildApprovalUrl = buildApprovalUrl;
 exports.buildCancelEscapeCall = buildCancelEscapeCall;
 exports.buildCancellationTypedData = buildCancellationTypedData;
 exports.buildChangeOwnersCall = buildChangeOwnersCall;
@@ -12004,6 +12090,7 @@ exports.buildLaunchOnEkuboCalls = buildLaunchOnEkuboCalls;
 exports.buildOrderTypedData = buildOrderTypedData;
 exports.buildRemoveOwnerByGuidCall = buildRemoveOwnerByGuidCall;
 exports.buildRemoveOwnerCall = buildRemoveOwnerCall;
+exports.buildReturnUrl = buildReturnUrl;
 exports.buildSetFirstGuardianCall = buildSetFirstGuardianCall;
 exports.buildTriggerEscapeOwnerCall = buildTriggerEscapeOwnerCall;
 exports.buybackQuoteRaw = buybackQuoteRaw;
@@ -12016,6 +12103,7 @@ exports.decodeEscapeAndStatus = decodeEscapeAndStatus;
 exports.decodeGuardiansInfo = decodeGuardiansInfo;
 exports.deriveAesKey = deriveAesKey;
 exports.deriveOwnerKeyPair = deriveOwnerKeyPair;
+exports.deriveStarkKeyPair = deriveStarkKeyPair;
 exports.encodeAdminHeaders = encodeAdminHeaders;
 exports.encodeByteArray = encodeByteArray;
 exports.executeIntent = executeIntent;
@@ -12034,11 +12122,13 @@ exports.getOrderDetails1155 = getOrderDetails1155;
 exports.getOwners = getOwners;
 exports.getSiwsStorageKey = getSiwsStorageKey;
 exports.getStoredSiwsToken = getStoredSiwsToken;
+exports.isMedialaneOrigin = isMedialaneOrigin;
 exports.isSiwsTokenValid = isSiwsTokenValid;
 exports.normalizeSiwsSignature = normalizeSiwsSignature;
 exports.ownerAliveTypedData = ownerAliveTypedData;
 exports.ownerConstructorCalldata = ownerConstructorCalldata;
 exports.parseAdminHeaders = parseAdminHeaders;
+exports.parseApprovalRequest = parseApprovalRequest;
 exports.parseCreatorCoinCreated = parseCreatorCoinCreated;
 exports.priceToEkuboParams = priceToEkuboParams;
 exports.randomNonce = randomNonce;