@mysten-incubation/dev-wallet 0.0.0

package/dist/adapters/passkey-adapter.mjs

@@ -0,0 +1,87 @@
+import { buildManagedAccount } from "./build-managed-account.mjs";
+import { BaseSignerAdapter } from "./base-adapter.mjs";
+import { IDBStore } from "./idb-store.mjs";
+import { PasskeyKeypair } from "@mysten/sui/keypairs/passkey";
+
+//#region src/adapters/passkey-adapter.ts
+const DEFAULT_DB_NAME = "dev-wallet-passkey";
+const DEFAULT_STORE_NAME = "accounts";
+const META_KEY = "__passkey_accounts__";
+/**
+* Signer adapter backed by WebAuthn passkeys. Each signing operation triggers a
+* browser biometric/PIN prompt. Account metadata is persisted in IndexedDB;
+* private keys are managed by the browser/OS and never enter JavaScript.
+*
+* Browser only — requires `navigator.credentials` and `indexedDB`.
+*/
+var PasskeySignerAdapter = class extends BaseSignerAdapter {
+	#store;
+	#provider;
+	constructor(options) {
+		super();
+		this.id = "passkey";
+		this.name = "Passkey Signer";
+		this.allowAutoSign = false;
+		this.#store = new IDBStore(options?.dbName ?? DEFAULT_DB_NAME, options?.storeName ?? DEFAULT_STORE_NAME);
+		this.#provider = options?.provider ?? null;
+	}
+	#getProvider() {
+		if (!this.#provider) {
+			throw new Error("PasskeySignerAdapter not initialized. Call initialize() first.");
+		}
+		return this.#provider;
+	}
+	async initialize() {
+		if (!this.#provider) {
+			const { BrowserPasskeyProvider } = await import("@mysten/sui/keypairs/passkey");
+			this.#provider = new BrowserPasskeyProvider("Dev Wallet Passkey", { rp: { id: globalThis.location?.hostname } });
+		}
+		const stored = await this.#store.get(META_KEY);
+		if (!stored) return;
+		const provider = this.#getProvider();
+		this.setInitialAccounts(stored.map((meta) => {
+			const publicKeyBytes = new Uint8Array(meta.publicKeyBytes);
+			const credentialId = meta.credentialId ? new Uint8Array(meta.credentialId) : undefined;
+			const signer = new PasskeyKeypair(publicKeyBytes, provider, credentialId);
+			return buildManagedAccount(signer, meta.address, meta.label);
+		}));
+	}
+	getDefaultLabel() {
+		return `Passkey Account ${this.getAccounts().length + 1}`;
+	}
+	async createAccount(options) {
+		const signer = await PasskeyKeypair.getPasskeyInstance(this.#getProvider());
+		const address = signer.toSuiAddress();
+		const label = options?.label ?? this.getDefaultLabel();
+		const managedAccount = buildManagedAccount(signer, address, label);
+		this.addAccount(managedAccount);
+		await this.#saveMeta();
+		return managedAccount;
+	}
+	async renameAccount(address, label) {
+		if (!this._performRename(address, label)) return false;
+		await this.#saveMeta();
+		return true;
+	}
+	async removeAccount(address) {
+		if (!this.removeAccountByAddress(address)) return false;
+		await this.#saveMeta();
+		return true;
+	}
+	async #saveMeta() {
+		const meta = this.getAccounts().map((a) => {
+			const credentialId = a.signer.getCredentialId?.();
+			return {
+				address: a.address,
+				label: a.label,
+				publicKeyBytes: [...a.signer.getPublicKey().toRawBytes()],
+				...credentialId && { credentialId: [...credentialId] }
+			};
+		});
+		await this.#store.set(META_KEY, meta);
+	}
+};
+
+//#endregion
+export { PasskeySignerAdapter };
+//# sourceMappingURL=passkey-adapter.mjs.map

package/dist/adapters/passkey-adapter.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey-adapter.mjs","names":["#store","#provider","#getProvider","#saveMeta"],"sources":["../../src/adapters/passkey-adapter.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { PasskeyKeypair } from '@mysten/sui/keypairs/passkey';\nimport type { PasskeyProvider } from '@mysten/sui/keypairs/passkey';\n\nimport type { CreateAccountOptions } from '../types.js';\nimport { BaseSignerAdapter } from './base-adapter.js';\nimport { buildManagedAccount } from './build-managed-account.js';\nimport { IDBStore } from './idb-store.js';\n\n/** Metadata stored in IndexedDB for each passkey account. */\ninterface StoredPasskeyMeta {\n\taddress: string;\n\tlabel: string;\n\t/** Compressed secp256r1 public key (33 bytes, stored as number array). */\n\tpublicKeyBytes: number[];\n\t/** WebAuthn credential ID (stored as number array). Used to constrain credential selection during signing. */\n\tcredentialId?: number[];\n}\n\nconst DEFAULT_DB_NAME = 'dev-wallet-passkey';\nconst DEFAULT_STORE_NAME = 'accounts';\nconst META_KEY = '__passkey_accounts__';\n\n/**\n * Signer adapter backed by WebAuthn passkeys. Each signing operation triggers a\n * browser biometric/PIN prompt. Account metadata is persisted in IndexedDB;\n * private keys are managed by the browser/OS and never enter JavaScript.\n *\n * Browser only — requires `navigator.credentials` and `indexedDB`.\n */\nexport class PasskeySignerAdapter extends BaseSignerAdapter {\n\treadonly id = 'passkey';\n\treadonly name = 'Passkey Signer';\n\treadonly allowAutoSign = false;\n\n\t#store: IDBStore;\n\t#provider: PasskeyProvider | null;\n\n\tconstructor(options?: { dbName?: string; storeName?: string; provider?: PasskeyProvider }) {\n\t\tsuper();\n\t\tthis.#store = new IDBStore(\n\t\t\toptions?.dbName ?? DEFAULT_DB_NAME,\n\t\t\toptions?.storeName ?? DEFAULT_STORE_NAME,\n\t\t);\n\t\t// Allow injecting a custom provider (useful for testing)\n\t\tthis.#provider = options?.provider ?? null;\n\t}\n\n\t#getProvider(): PasskeyProvider {\n\t\tif (!this.#provider) {\n\t\t\tthrow new Error('PasskeySignerAdapter not initialized. Call initialize() first.');\n\t\t}\n\t\treturn this.#provider;\n\t}\n\n\tasync initialize(): Promise<void> {\n\t\tif (!this.#provider) {\n\t\t\tconst { BrowserPasskeyProvider } = await import('@mysten/sui/keypairs/passkey');\n\t\t\tthis.#provider = new BrowserPasskeyProvider('Dev Wallet Passkey', {\n\t\t\t\trp: { id: globalThis.location?.hostname },\n\t\t\t});\n\t\t}\n\n\t\tconst stored = await this.#store.get<StoredPasskeyMeta[]>(META_KEY);\n\t\tif (!stored) return;\n\n\t\tconst provider = this.#getProvider();\n\t\tthis.setInitialAccounts(\n\t\t\tstored.map((meta) => {\n\t\t\t\tconst publicKeyBytes = new Uint8Array(meta.publicKeyBytes);\n\t\t\t\tconst credentialId = meta.credentialId ? new Uint8Array(meta.credentialId) : undefined;\n\t\t\t\tconst signer = new PasskeyKeypair(publicKeyBytes, provider, credentialId);\n\t\t\t\treturn buildManagedAccount(signer, meta.address, meta.label);\n\t\t\t}),\n\t\t);\n\t}\n\n\tprotected override getDefaultLabel(): string {\n\t\treturn `Passkey Account ${this.getAccounts().length + 1}`;\n\t}\n\n\tasync createAccount(options?: CreateAccountOptions) {\n\t\tconst signer = await PasskeyKeypair.getPasskeyInstance(this.#getProvider());\n\t\tconst address = signer.toSuiAddress();\n\t\tconst label = options?.label ?? this.getDefaultLabel();\n\n\t\tconst managedAccount = buildManagedAccount(signer, address, label);\n\t\tthis.addAccount(managedAccount);\n\t\tawait this.#saveMeta();\n\n\t\treturn managedAccount;\n\t}\n\n\tasync renameAccount(address: string, label: string): Promise<boolean> {\n\t\tif (!this._performRename(address, label)) return false;\n\t\tawait this.#saveMeta();\n\t\treturn true;\n\t}\n\n\tasync removeAccount(address: string): Promise<boolean> {\n\t\tif (!this.removeAccountByAddress(address)) return false;\n\t\tawait this.#saveMeta();\n\t\treturn true;\n\t}\n\n\tasync #saveMeta(): Promise<void> {\n\t\tconst meta: StoredPasskeyMeta[] = this.getAccounts().map((a) => {\n\t\t\tconst credentialId = (a.signer as PasskeyKeypair).getCredentialId?.();\n\t\t\treturn {\n\t\t\t\taddress: a.address,\n\t\t\t\tlabel: a.label,\n\t\t\t\tpublicKeyBytes: [...a.signer.getPublicKey().toRawBytes()],\n\t\t\t\t...(credentialId && { credentialId: [...credentialId] }),\n\t\t\t};\n\t\t});\n\t\tawait this.#store.set(META_KEY, meta);\n\t}\n}\n"],"mappings":";;;;;;AAqBA,MAAM,kBAAkB;AACxB,MAAM,qBAAqB;AAC3B,MAAM,WAAW;;;;;;;;AASjB,IAAa,uBAAb,cAA0C,kBAAkB;CAK3D;CACA;CAEA,YAAY,SAA+E;AAC1F,SAAO;YARM;cACE;uBACS;AAOxB,QAAKA,QAAS,IAAI,SACjB,SAAS,UAAU,iBACnB,SAAS,aAAa,mBACtB;AAED,QAAKC,WAAY,SAAS,YAAY;;CAGvC,eAAgC;AAC/B,MAAI,CAAC,MAAKA,UAAW;AACpB,SAAM,IAAI,MAAM,iEAAiE;;AAElF,SAAO,MAAKA;;CAGb,MAAM,aAA4B;AACjC,MAAI,CAAC,MAAKA,UAAW;GACpB,MAAM,EAAE,2BAA2B,MAAM,OAAO;AAChD,SAAKA,WAAY,IAAI,uBAAuB,sBAAsB,EACjE,IAAI,EAAE,IAAI,WAAW,UAAU,UAAU,EACzC,CAAC;;EAGH,MAAM,SAAS,MAAM,MAAKD,MAAO,IAAyB,SAAS;AACnE,MAAI,CAAC,OAAQ;EAEb,MAAM,WAAW,MAAKE,aAAc;AACpC,OAAK,mBACJ,OAAO,KAAK,SAAS;GACpB,MAAM,iBAAiB,IAAI,WAAW,KAAK,eAAe;GAC1D,MAAM,eAAe,KAAK,eAAe,IAAI,WAAW,KAAK,aAAa,GAAG;GAC7E,MAAM,SAAS,IAAI,eAAe,gBAAgB,UAAU,aAAa;AACzE,UAAO,oBAAoB,QAAQ,KAAK,SAAS,KAAK,MAAM;IAC3D,CACF;;CAGF,AAAmB,kBAA0B;AAC5C,SAAO,mBAAmB,KAAK,aAAa,CAAC,SAAS;;CAGvD,MAAM,cAAc,SAAgC;EACnD,MAAM,SAAS,MAAM,eAAe,mBAAmB,MAAKA,aAAc,CAAC;EAC3E,MAAM,UAAU,OAAO,cAAc;EACrC,MAAM,QAAQ,SAAS,SAAS,KAAK,iBAAiB;EAEtD,MAAM,iBAAiB,oBAAoB,QAAQ,SAAS,MAAM;AAClE,OAAK,WAAW,eAAe;AAC/B,QAAM,MAAKC,UAAW;AAEtB,SAAO;;CAGR,MAAM,cAAc,SAAiB,OAAiC;AACrE,MAAI,CAAC,KAAK,eAAe,SAAS,MAAM,CAAE,QAAO;AACjD,QAAM,MAAKA,UAAW;AACtB,SAAO;;CAGR,MAAM,cAAc,SAAmC;AACtD,MAAI,CAAC,KAAK,uBAAuB,QAAQ,CAAE,QAAO;AAClD,QAAM,MAAKA,UAAW;AACtB,SAAO;;CAGR,OAAMA,WAA2B;EAChC,MAAM,OAA4B,KAAK,aAAa,CAAC,KAAK,MAAM;GAC/D,MAAM,eAAgB,EAAE,OAA0B,mBAAmB;AACrE,UAAO;IACN,SAAS,EAAE;IACX,OAAO,EAAE;IACT,gBAAgB,CAAC,GAAG,EAAE,OAAO,cAAc,CAAC,YAAY,CAAC;IACzD,GAAI,gBAAgB,EAAE,cAAc,CAAC,GAAG,aAAa,EAAE;IACvD;IACA;AACF,QAAM,MAAKH,MAAO,IAAI,UAAU,KAAK"}

package/dist/adapters/remote-cli-adapter.d.mts

@@ -0,0 +1,65 @@
+import { ImportAccountOptions, ManagedAccount } from "../types.mjs";
+import { BaseSignerAdapter } from "./base-adapter.mjs";
+import { PublicKey, SignatureScheme, Signer } from "@mysten/sui/cryptography";
+
+//#region src/adapters/remote-cli-adapter.d.ts
+/**
+ * A {@link Signer} that delegates transaction signing to a server HTTP endpoint
+ * backed by `sui keytool sign`. Private keys never enter JavaScript.
+ *
+ * `signPersonalMessage()` is not supported — `sui keytool sign` only accepts
+ * BCS-serialized `TransactionData`.
+ */
+declare class CliProxySigner extends Signer {
+  #private;
+  constructor(options: {
+    address: string;
+    publicKey: PublicKey;
+    scheme: SignatureScheme;
+    serverOrigin: string;
+    authToken?: string | null;
+  });
+  sign(_bytes: Uint8Array): Promise<Uint8Array<ArrayBuffer>>;
+  getKeyScheme(): SignatureScheme;
+  getPublicKey(): PublicKey;
+  toSuiAddress(): string;
+  signTransaction(bytes: Uint8Array): Promise<{
+    bytes: string;
+    signature: string;
+  }>;
+  signPersonalMessage(_bytes: Uint8Array): Promise<never>;
+}
+/**
+ * {@link SignerAdapter} that delegates signing to a server running the `sui` CLI.
+ *
+ * Authentication uses a token-in-URL approach: the CLI server prints a URL with
+ * a token, which gets stored in `localStorage` for subsequent page loads. Imported
+ * account addresses are also persisted so they survive CLI restarts.
+ */
+declare class RemoteCliAdapter extends BaseSignerAdapter {
+  #private;
+  readonly id = "remote-cli";
+  readonly name = "Remote CLI Signer";
+  readonly allowAutoSign = false;
+  protected getDefaultLabel(): string;
+  static storageKey(suffix: string): string;
+  static get STORAGE_KEY(): string;
+  static get TOKEN_KEY(): string;
+  constructor(options?: {
+    serverOrigin?: string;
+    token?: string;
+  });
+  get isPaired(): boolean;
+  initialize(): Promise<void>;
+  listAvailableAccounts(): Promise<Array<{
+    address: string;
+    scheme: string;
+    alias: string | null;
+  }>>;
+  importAccount(options: ImportAccountOptions): Promise<ManagedAccount>;
+  removeAccount(address: string): Promise<boolean>;
+  destroy(): void;
+}
+//#endregion
+export { CliProxySigner, RemoteCliAdapter };
+//# sourceMappingURL=remote-cli-adapter.d.mts.map

package/dist/adapters/remote-cli-adapter.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-cli-adapter.d.mts","names":[],"sources":["../../src/adapters/remote-cli-adapter.ts"],"mappings":";;;;;;AAqEA;;;;;;cAAa,cAAA,SAAuB,MAAA;EAAA;cAOvB,OAAA;IACX,OAAA;IACA,SAAA,EAAW,SAAA;IACX,MAAA,EAAQ,eAAA;IACR,YAAA;IACA,SAAA;EAAA;EAUK,IAAA,CAAK,MAAA,EAAQ,UAAA,GAAa,OAAA,CAAQ,UAAA,CAAW,WAAA;EAOnD,YAAA,CAAA,GAAgB,eAAA;EAIhB,YAAA,CAAA,GAAgB,SAAA;EAIP,YAAA,CAAA;EAIM,eAAA,CAAgB,KAAA,EAAO,UAAA,GAAU,OAAA;;;;EA8BjC,mBAAA,CAAoB,MAAA,EAAQ,UAAA,GAAa,OAAA;AAAA;;;;;;;;cAgB5C,gBAAA,SAAyB,iBAAA;EAAA;WAC5B,EAAA;EAAA,SACA,IAAA;EAAA,SACA,aAAA;EAAA,UAEU,eAAA,CAAA;EAAA,OAOZ,UAAA,CAAW,MAAA;EAAA,WAKP,WAAA,CAAA;EAAA,WAIA,SAAA,CAAA;cASC,OAAA;IAAY,YAAA;IAAuB,KAAA;EAAA;EAAA,IAgB3C,QAAA,CAAA;EAIE,UAAA,CAAA,GAAc,OAAA;EAyBd,qBAAA,CAAA,GAAyB,OAAA,CAC9B,KAAA;IAAQ,OAAA;IAAiB,MAAA;IAAgB,KAAA;EAAA;EAgBpC,aAAA,CAAc,OAAA,EAAS,oBAAA,GAAuB,OAAA,CAAQ,cAAA;EA2BtD,aAAA,CAAc,OAAA,WAAkB,OAAA;EAQ7B,OAAA,CAAA;AAAA"}

package/dist/adapters/remote-cli-adapter.mjs

@@ -0,0 +1,299 @@
+import { buildManagedAccount } from "./build-managed-account.mjs";
+import { BaseSignerAdapter } from "./base-adapter.mjs";
+import { fromBase64, toBase64 } from "@mysten/sui/utils";
+import { Ed25519PublicKey } from "@mysten/sui/keypairs/ed25519";
+import { Signer } from "@mysten/sui/cryptography";
+import { Secp256k1PublicKey } from "@mysten/sui/keypairs/secp256k1";
+import { Secp256r1PublicKey } from "@mysten/sui/keypairs/secp256r1";
+
+//#region src/adapters/remote-cli-adapter.ts
+/**
+* Wallet features advertised by CLI-backed accounts.
+* Personal message signing is not supported because the `sui keytool sign`
+* command only accepts BCS-serialized TransactionData.
+*/
+const CLI_WALLET_FEATURES = ["sui:signTransaction", "sui:signAndExecuteTransaction"];
+/** Cache TTL for the CLI server accounts fetch (milliseconds). */
+const ACCOUNTS_CACHE_TTL_MS = 5e3;
+/** Thrown when the server rejects a request with a 401 or 403 status. */
+var AuthError = class extends Error {
+	constructor() {
+		super("Unauthorized");
+		this.name = "AuthError";
+	}
+};
+/** Map CLI `keyScheme` strings to SDK {@link SignatureScheme} values. */
+const KEY_SCHEME_MAP = {
+	ed25519: "ED25519",
+	secp256k1: "Secp256k1",
+	secp256r1: "Secp256r1"
+};
+function publicKeyFromSuiBytes(publicBase64Key, scheme) {
+	const allBytes = fromBase64(publicBase64Key);
+	const rawBytes = allBytes.slice(1);
+	switch (scheme) {
+		case "ED25519": return new Ed25519PublicKey(rawBytes);
+		case "Secp256k1": return new Secp256k1PublicKey(rawBytes);
+		case "Secp256r1": return new Secp256r1PublicKey(rawBytes);
+		default: throw new Error(`Unsupported key scheme: ${scheme}`);
+	}
+}
+/**
+* A {@link Signer} that delegates transaction signing to a server HTTP endpoint
+* backed by `sui keytool sign`. Private keys never enter JavaScript.
+*
+* `signPersonalMessage()` is not supported — `sui keytool sign` only accepts
+* BCS-serialized `TransactionData`.
+*/
+var CliProxySigner = class extends Signer {
+	#address;
+	#publicKey;
+	#scheme;
+	#serverOrigin;
+	#authToken;
+	constructor(options) {
+		super();
+		this.#address = options.address;
+		this.#publicKey = options.publicKey;
+		this.#scheme = options.scheme;
+		this.#serverOrigin = options.serverOrigin;
+		this.#authToken = options.authToken ?? null;
+	}
+	async sign(_bytes) {
+		throw new Error("CliProxySigner does not support direct digest signing. " + "Transaction signing is handled via the sui CLI.");
+	}
+	getKeyScheme() {
+		return this.#scheme;
+	}
+	getPublicKey() {
+		return this.#publicKey;
+	}
+	toSuiAddress() {
+		return this.#address;
+	}
+	async signTransaction(bytes) {
+		const headers = { "Content-Type": "application/json" };
+		if (this.#authToken) {
+			headers["Authorization"] = `Bearer ${this.#authToken}`;
+		}
+		const res = await fetch(`${this.#serverOrigin}/api/v1/sign-transaction`, {
+			method: "POST",
+			headers,
+			body: JSON.stringify({
+				address: this.#address,
+				txBytes: toBase64(bytes)
+			})
+		});
+		if (!res.ok) {
+			const body = await res.json().catch(() => ({}));
+			throw new Error(`Transaction signing failed: ${body.error ?? res.statusText}`);
+		}
+		const { suiSignature } = await res.json();
+		if (typeof suiSignature !== "string" || suiSignature.length === 0) {
+			throw new Error("Transaction signing failed: server returned invalid signature");
+		}
+		return {
+			bytes: toBase64(bytes),
+			signature: suiSignature
+		};
+	}
+	async signPersonalMessage(_bytes) {
+		throw new Error("Personal message signing is not supported in CLI mode. " + "The sui keytool sign command only supports TransactionData. " + "Use --adapter=webcrypto or --adapter=memory for personal message signing.");
+	}
+};
+/**
+* {@link SignerAdapter} that delegates signing to a server running the `sui` CLI.
+*
+* Authentication uses a token-in-URL approach: the CLI server prints a URL with
+* a token, which gets stored in `localStorage` for subsequent page loads. Imported
+* account addresses are also persisted so they survive CLI restarts.
+*/
+var RemoteCliAdapter = class RemoteCliAdapter extends BaseSignerAdapter {
+	getDefaultLabel() {
+		return `CLI Account ${this.getAccounts().length + 1}`;
+	}
+	static storageKey(suffix) {
+		const origin = typeof location !== "undefined" ? location.origin : "unknown";
+		return `dev-wallet:${suffix}:${origin}`;
+	}
+	static get STORAGE_KEY() {
+		return RemoteCliAdapter.storageKey("cli-imported-addresses");
+	}
+	static get TOKEN_KEY() {
+		return RemoteCliAdapter.storageKey("cli-token");
+	}
+	#serverOrigin;
+	#authToken = null;
+	#allServerAccounts = [];
+	#lastFetch = null;
+	constructor(options) {
+		super();
+		this.id = "remote-cli";
+		this.name = "Remote CLI Signer";
+		this.allowAutoSign = false;
+		const origin = options?.serverOrigin ?? "";
+		if (origin) {
+			try {
+				new URL(origin);
+			} catch {
+				throw new Error(`Invalid serverOrigin URL: "${origin}"`);
+			}
+		}
+		this.#serverOrigin = origin;
+		if (options?.token) {
+			this.#authToken = options.token;
+		}
+	}
+	get isPaired() {
+		return this.#authToken !== null;
+	}
+	async initialize() {
+		if (!this.#authToken && typeof localStorage !== "undefined") {
+			const stored = localStorage.getItem(RemoteCliAdapter.TOKEN_KEY);
+			if (stored) {
+				this.#authToken = stored;
+			}
+		}
+		if (this.#authToken) {
+			try {
+				await this.#fetchServerAccounts();
+				await this.#restoreImportedAccounts();
+			} catch (error) {
+				if (error instanceof AuthError) {
+					this.#authToken = null;
+					if (typeof localStorage !== "undefined") {
+						localStorage.removeItem(RemoteCliAdapter.TOKEN_KEY);
+					}
+				} else {
+					console.warn("[dev-wallet] CLI adapter initialization failed:", error);
+				}
+			}
+		}
+	}
+	async listAvailableAccounts() {
+		await this.#fetchServerAccounts();
+		const importedAddresses = new Set(this._accounts.map((a) => a.address));
+		return this.#allServerAccounts.filter((info) => {
+			const scheme = KEY_SCHEME_MAP[info.keyScheme];
+			return scheme && !importedAddresses.has(info.suiAddress);
+		}).map((info) => ({
+			address: info.suiAddress,
+			scheme: info.keyScheme,
+			alias: info.alias
+		}));
+	}
+	async importAccount(options) {
+		const address = options.address;
+		if (!address) {
+			throw new Error("Remote CLI adapter requires an address to import");
+		}
+		if (this._accounts.some((a) => a.address === address)) {
+			throw new Error(`Account ${address} is already imported`);
+		}
+		await this.#fetchServerAccounts();
+		const info = this.#allServerAccounts.find((a) => a.suiAddress === address);
+		if (!info) {
+			throw new Error(`Account ${address} not found on server`);
+		}
+		const scheme = KEY_SCHEME_MAP[info.keyScheme];
+		if (!scheme) {
+			throw new Error(`Unsupported key scheme: ${info.keyScheme}`);
+		}
+		const account = this.#serverAccountToManaged(info, scheme, options.label);
+		this.addAccount(account);
+		this.#saveImportedAddresses();
+		return account;
+	}
+	async removeAccount(address) {
+		const removed = this.removeAccountByAddress(address);
+		if (removed) {
+			this.#saveImportedAddresses();
+		}
+		return removed;
+	}
+	destroy() {
+		this.#allServerAccounts = [];
+		this.#authToken = null;
+		if (typeof localStorage !== "undefined") {
+			localStorage.removeItem(RemoteCliAdapter.TOKEN_KEY);
+			localStorage.removeItem(RemoteCliAdapter.STORAGE_KEY);
+		}
+		super.destroy();
+	}
+	#authHeaders() {
+		const headers = { "Content-Type": "application/json" };
+		if (this.#authToken) {
+			headers["Authorization"] = `Bearer ${this.#authToken}`;
+		}
+		return headers;
+	}
+	async #fetchServerAccounts(forceRefresh = false) {
+		if (!forceRefresh && this.#lastFetch && Date.now() - this.#lastFetch.time < ACCOUNTS_CACHE_TTL_MS) {
+			this.#allServerAccounts = this.#lastFetch.result;
+			return;
+		}
+		const res = await fetch(`${this.#serverOrigin}/api/v1/accounts`, { headers: this.#authHeaders() });
+		if (res.status === 401 || res.status === 403) {
+			throw new AuthError();
+		}
+		if (!res.ok) {
+			throw new Error(`Failed to fetch accounts: ${res.statusText}`);
+		}
+		const { accounts } = await res.json();
+		this.#allServerAccounts = accounts;
+		this.#lastFetch = {
+			time: Date.now(),
+			result: accounts
+		};
+	}
+	async #restoreImportedAccounts() {
+		const saved = this.#loadImportedAddresses();
+		if (saved.length === 0) return;
+		const existingAddresses = new Set(this.getAccounts().map((a) => a.address));
+		const restored = [];
+		for (const address of saved) {
+			if (existingAddresses.has(address)) continue;
+			const info = this.#allServerAccounts.find((a) => a.suiAddress === address);
+			if (!info) continue;
+			const scheme = KEY_SCHEME_MAP[info.keyScheme];
+			if (!scheme) continue;
+			restored.push(this.#serverAccountToManaged(info, scheme));
+		}
+		if (restored.length > 0) {
+			this.setInitialAccounts([...this.getAccounts(), ...restored]);
+		}
+	}
+	#loadImportedAddresses() {
+		if (typeof localStorage === "undefined") return [];
+		try {
+			const raw = localStorage.getItem(RemoteCliAdapter.STORAGE_KEY);
+			if (!raw) return [];
+			const parsed = JSON.parse(raw);
+			if (!Array.isArray(parsed)) return [];
+			return parsed.filter((v) => typeof v === "string");
+		} catch {
+			return [];
+		}
+	}
+	#saveImportedAddresses() {
+		if (typeof localStorage === "undefined") return;
+		const addresses = this._accounts.map((a) => a.address);
+		localStorage.setItem(RemoteCliAdapter.STORAGE_KEY, JSON.stringify(addresses));
+	}
+	#serverAccountToManaged(info, scheme, label) {
+		const publicKey = publicKeyFromSuiBytes(info.publicBase64Key, scheme);
+		const signer = new CliProxySigner({
+			address: info.suiAddress,
+			publicKey,
+			scheme,
+			serverOrigin: this.#serverOrigin,
+			authToken: this.#authToken
+		});
+		const accountLabel = label ?? info.alias ?? this.getDefaultLabel();
+		return buildManagedAccount(signer, info.suiAddress, accountLabel, CLI_WALLET_FEATURES);
+	}
+};
+
+//#endregion
+export { CliProxySigner, RemoteCliAdapter };
+//# sourceMappingURL=remote-cli-adapter.mjs.map

package/dist/adapters/remote-cli-adapter.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"remote-cli-adapter.mjs","names":["#address","#publicKey","#scheme","#serverOrigin","#authToken","#fetchServerAccounts","#restoreImportedAccounts","#allServerAccounts","#serverAccountToManaged","#saveImportedAddresses","#lastFetch","#authHeaders","#loadImportedAddresses"],"sources":["../../src/adapters/remote-cli-adapter.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { Signer } from '@mysten/sui/cryptography';\nimport type { PublicKey, SignatureScheme } from '@mysten/sui/cryptography';\nimport { Ed25519PublicKey } from '@mysten/sui/keypairs/ed25519';\nimport { Secp256k1PublicKey } from '@mysten/sui/keypairs/secp256k1';\nimport { Secp256r1PublicKey } from '@mysten/sui/keypairs/secp256r1';\nimport { fromBase64, toBase64 } from '@mysten/sui/utils';\nimport type { ImportAccountOptions, ManagedAccount } from '../types.js';\nimport { BaseSignerAdapter } from './base-adapter.js';\nimport { buildManagedAccount } from './build-managed-account.js';\n\n/**\n * Wallet features advertised by CLI-backed accounts.\n * Personal message signing is not supported because the `sui keytool sign`\n * command only accepts BCS-serialized TransactionData.\n */\nconst CLI_WALLET_FEATURES = ['sui:signTransaction', 'sui:signAndExecuteTransaction'] as const;\n\n/** Cache TTL for the CLI server accounts fetch (milliseconds). */\nconst ACCOUNTS_CACHE_TTL_MS = 5000;\n\n/** Thrown when the server rejects a request with a 401 or 403 status. */\nclass AuthError extends Error {\n\tconstructor() {\n\t\tsuper('Unauthorized');\n\t\tthis.name = 'AuthError';\n\t}\n}\n\n/** Map CLI `keyScheme` strings to SDK {@link SignatureScheme} values. */\nconst KEY_SCHEME_MAP: Record<string, SignatureScheme> = {\n\ted25519: 'ED25519',\n\tsecp256k1: 'Secp256k1',\n\tsecp256r1: 'Secp256r1',\n};\n\n/** Account metadata returned by the server `/api/v1/accounts` endpoint. */\ninterface ServerAccountInfo {\n\tsuiAddress: string;\n\tpublicBase64Key: string;\n\tkeyScheme: string;\n\talias: string | null;\n}\n\nfunction publicKeyFromSuiBytes(publicBase64Key: string, scheme: SignatureScheme): PublicKey {\n\tconst allBytes = fromBase64(publicBase64Key);\n\tconst rawBytes = allBytes.slice(1);\n\n\tswitch (scheme) {\n\t\tcase 'ED25519':\n\t\t\treturn new Ed25519PublicKey(rawBytes);\n\t\tcase 'Secp256k1':\n\t\t\treturn new Secp256k1PublicKey(rawBytes);\n\t\tcase 'Secp256r1':\n\t\t\treturn new Secp256r1PublicKey(rawBytes);\n\t\tdefault:\n\t\t\tthrow new Error(`Unsupported key scheme: ${scheme}`);\n\t}\n}\n\n/**\n * A {@link Signer} that delegates transaction signing to a server HTTP endpoint\n * backed by `sui keytool sign`. Private keys never enter JavaScript.\n *\n * `signPersonalMessage()` is not supported — `sui keytool sign` only accepts\n * BCS-serialized `TransactionData`.\n */\nexport class CliProxySigner extends Signer {\n\t#address: string;\n\t#publicKey: PublicKey;\n\t#scheme: SignatureScheme;\n\t#serverOrigin: string;\n\t#authToken: string | null;\n\n\tconstructor(options: {\n\t\taddress: string;\n\t\tpublicKey: PublicKey;\n\t\tscheme: SignatureScheme;\n\t\tserverOrigin: string;\n\t\tauthToken?: string | null;\n\t}) {\n\t\tsuper();\n\t\tthis.#address = options.address;\n\t\tthis.#publicKey = options.publicKey;\n\t\tthis.#scheme = options.scheme;\n\t\tthis.#serverOrigin = options.serverOrigin;\n\t\tthis.#authToken = options.authToken ?? null;\n\t}\n\n\tasync sign(_bytes: Uint8Array): Promise<Uint8Array<ArrayBuffer>> {\n\t\tthrow new Error(\n\t\t\t'CliProxySigner does not support direct digest signing. ' +\n\t\t\t\t'Transaction signing is handled via the sui CLI.',\n\t\t);\n\t}\n\n\tgetKeyScheme(): SignatureScheme {\n\t\treturn this.#scheme;\n\t}\n\n\tgetPublicKey(): PublicKey {\n\t\treturn this.#publicKey;\n\t}\n\n\toverride toSuiAddress(): string {\n\t\treturn this.#address;\n\t}\n\n\toverride async signTransaction(bytes: Uint8Array) {\n\t\tconst headers: Record<string, string> = { 'Content-Type': 'application/json' };\n\t\tif (this.#authToken) {\n\t\t\theaders['Authorization'] = `Bearer ${this.#authToken}`;\n\t\t}\n\n\t\tconst res = await fetch(`${this.#serverOrigin}/api/v1/sign-transaction`, {\n\t\t\tmethod: 'POST',\n\t\t\theaders,\n\t\t\tbody: JSON.stringify({\n\t\t\t\taddress: this.#address,\n\t\t\t\ttxBytes: toBase64(bytes),\n\t\t\t}),\n\t\t});\n\n\t\tif (!res.ok) {\n\t\t\tconst body = await res.json().catch(() => ({}));\n\t\t\tthrow new Error(`Transaction signing failed: ${body.error ?? res.statusText}`);\n\t\t}\n\n\t\tconst { suiSignature } = await res.json();\n\t\tif (typeof suiSignature !== 'string' || suiSignature.length === 0) {\n\t\t\tthrow new Error('Transaction signing failed: server returned invalid signature');\n\t\t}\n\t\treturn {\n\t\t\tbytes: toBase64(bytes),\n\t\t\tsignature: suiSignature,\n\t\t};\n\t}\n\n\toverride async signPersonalMessage(_bytes: Uint8Array): Promise<never> {\n\t\tthrow new Error(\n\t\t\t'Personal message signing is not supported in CLI mode. ' +\n\t\t\t\t'The sui keytool sign command only supports TransactionData. ' +\n\t\t\t\t'Use --adapter=webcrypto or --adapter=memory for personal message signing.',\n\t\t);\n\t}\n}\n\n/**\n * {@link SignerAdapter} that delegates signing to a server running the `sui` CLI.\n *\n * Authentication uses a token-in-URL approach: the CLI server prints a URL with\n * a token, which gets stored in `localStorage` for subsequent page loads. Imported\n * account addresses are also persisted so they survive CLI restarts.\n */\nexport class RemoteCliAdapter extends BaseSignerAdapter {\n\treadonly id = 'remote-cli';\n\treadonly name = 'Remote CLI Signer';\n\treadonly allowAutoSign = false;\n\n\tprotected override getDefaultLabel(): string {\n\t\treturn `CLI Account ${this.getAccounts().length + 1}`;\n\t}\n\n\t// Keys are scoped per origin to prevent cross-site leakage on shared localhost setups.\n\t// localStorage is used rather than sessionStorage because popup wallet flows\n\t// (DevWalletClient) may open new tabs that need access to the token.\n\tstatic storageKey(suffix: string): string {\n\t\tconst origin = typeof location !== 'undefined' ? location.origin : 'unknown';\n\t\treturn `dev-wallet:${suffix}:${origin}`;\n\t}\n\n\tstatic get STORAGE_KEY(): string {\n\t\treturn RemoteCliAdapter.storageKey('cli-imported-addresses');\n\t}\n\n\tstatic get TOKEN_KEY(): string {\n\t\treturn RemoteCliAdapter.storageKey('cli-token');\n\t}\n\n\t#serverOrigin: string;\n\t#authToken: string | null = null;\n\t#allServerAccounts: ServerAccountInfo[] = [];\n\t#lastFetch: { time: number; result: ServerAccountInfo[] } | null = null;\n\n\tconstructor(options?: { serverOrigin?: string; token?: string }) {\n\t\tsuper();\n\t\tconst origin = options?.serverOrigin ?? '';\n\t\tif (origin) {\n\t\t\ttry {\n\t\t\t\tnew URL(origin);\n\t\t\t} catch {\n\t\t\t\tthrow new Error(`Invalid serverOrigin URL: \"${origin}\"`);\n\t\t\t}\n\t\t}\n\t\tthis.#serverOrigin = origin;\n\t\tif (options?.token) {\n\t\t\tthis.#authToken = options.token;\n\t\t}\n\t}\n\n\tget isPaired(): boolean {\n\t\treturn this.#authToken !== null;\n\t}\n\n\tasync initialize(): Promise<void> {\n\t\tif (!this.#authToken && typeof localStorage !== 'undefined') {\n\t\t\tconst stored = localStorage.getItem(RemoteCliAdapter.TOKEN_KEY);\n\t\t\tif (stored) {\n\t\t\t\tthis.#authToken = stored;\n\t\t\t}\n\t\t}\n\n\t\tif (this.#authToken) {\n\t\t\ttry {\n\t\t\t\tawait this.#fetchServerAccounts();\n\t\t\t\tawait this.#restoreImportedAccounts();\n\t\t\t} catch (error) {\n\t\t\t\tif (error instanceof AuthError) {\n\t\t\t\t\tthis.#authToken = null;\n\t\t\t\t\tif (typeof localStorage !== 'undefined') {\n\t\t\t\t\t\tlocalStorage.removeItem(RemoteCliAdapter.TOKEN_KEY);\n\t\t\t\t\t}\n\t\t\t\t} else {\n\t\t\t\t\tconsole.warn('[dev-wallet] CLI adapter initialization failed:', error);\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t}\n\n\tasync listAvailableAccounts(): Promise<\n\t\tArray<{ address: string; scheme: string; alias: string | null }>\n\t> {\n\t\tawait this.#fetchServerAccounts();\n\t\tconst importedAddresses = new Set(this._accounts.map((a) => a.address));\n\t\treturn this.#allServerAccounts\n\t\t\t.filter((info) => {\n\t\t\t\tconst scheme = KEY_SCHEME_MAP[info.keyScheme];\n\t\t\t\treturn scheme && !importedAddresses.has(info.suiAddress);\n\t\t\t})\n\t\t\t.map((info) => ({\n\t\t\t\taddress: info.suiAddress,\n\t\t\t\tscheme: info.keyScheme,\n\t\t\t\talias: info.alias,\n\t\t\t}));\n\t}\n\n\tasync importAccount(options: ImportAccountOptions): Promise<ManagedAccount> {\n\t\tconst address = options.address;\n\t\tif (!address) {\n\t\t\tthrow new Error('Remote CLI adapter requires an address to import');\n\t\t}\n\n\t\tif (this._accounts.some((a) => a.address === address)) {\n\t\t\tthrow new Error(`Account ${address} is already imported`);\n\t\t}\n\n\t\tawait this.#fetchServerAccounts();\n\t\tconst info = this.#allServerAccounts.find((a) => a.suiAddress === address);\n\t\tif (!info) {\n\t\t\tthrow new Error(`Account ${address} not found on server`);\n\t\t}\n\n\t\tconst scheme = KEY_SCHEME_MAP[info.keyScheme];\n\t\tif (!scheme) {\n\t\t\tthrow new Error(`Unsupported key scheme: ${info.keyScheme}`);\n\t\t}\n\n\t\tconst account = this.#serverAccountToManaged(info, scheme, options.label);\n\t\tthis.addAccount(account);\n\t\tthis.#saveImportedAddresses();\n\t\treturn account;\n\t}\n\n\tasync removeAccount(address: string): Promise<boolean> {\n\t\tconst removed = this.removeAccountByAddress(address);\n\t\tif (removed) {\n\t\t\tthis.#saveImportedAddresses();\n\t\t}\n\t\treturn removed;\n\t}\n\n\toverride destroy(): void {\n\t\tthis.#allServerAccounts = [];\n\t\tthis.#authToken = null;\n\t\tif (typeof localStorage !== 'undefined') {\n\t\t\tlocalStorage.removeItem(RemoteCliAdapter.TOKEN_KEY);\n\t\t\tlocalStorage.removeItem(RemoteCliAdapter.STORAGE_KEY);\n\t\t}\n\t\tsuper.destroy();\n\t}\n\n\t#authHeaders(): Record<string, string> {\n\t\tconst headers: Record<string, string> = { 'Content-Type': 'application/json' };\n\t\tif (this.#authToken) {\n\t\t\theaders['Authorization'] = `Bearer ${this.#authToken}`;\n\t\t}\n\t\treturn headers;\n\t}\n\n\tasync #fetchServerAccounts(forceRefresh = false): Promise<void> {\n\t\tif (\n\t\t\t!forceRefresh &&\n\t\t\tthis.#lastFetch &&\n\t\t\tDate.now() - this.#lastFetch.time < ACCOUNTS_CACHE_TTL_MS\n\t\t) {\n\t\t\tthis.#allServerAccounts = this.#lastFetch.result;\n\t\t\treturn;\n\t\t}\n\t\tconst res = await fetch(`${this.#serverOrigin}/api/v1/accounts`, {\n\t\t\theaders: this.#authHeaders(),\n\t\t});\n\t\tif (res.status === 401 || res.status === 403) {\n\t\t\tthrow new AuthError();\n\t\t}\n\t\tif (!res.ok) {\n\t\t\tthrow new Error(`Failed to fetch accounts: ${res.statusText}`);\n\t\t}\n\n\t\tconst { accounts } = (await res.json()) as { accounts: ServerAccountInfo[] };\n\t\tthis.#allServerAccounts = accounts;\n\t\tthis.#lastFetch = { time: Date.now(), result: accounts };\n\t}\n\n\tasync #restoreImportedAccounts(): Promise<void> {\n\t\tconst saved = this.#loadImportedAddresses();\n\t\tif (saved.length === 0) return;\n\n\t\tconst existingAddresses = new Set(this.getAccounts().map((a) => a.address));\n\t\tconst restored: ManagedAccount[] = [];\n\n\t\tfor (const address of saved) {\n\t\t\tif (existingAddresses.has(address)) continue;\n\n\t\t\tconst info = this.#allServerAccounts.find((a) => a.suiAddress === address);\n\t\t\tif (!info) continue; // Account no longer on server — skip\n\n\t\t\tconst scheme = KEY_SCHEME_MAP[info.keyScheme];\n\t\t\tif (!scheme) continue;\n\n\t\t\trestored.push(this.#serverAccountToManaged(info, scheme));\n\t\t}\n\n\t\tif (restored.length > 0) {\n\t\t\tthis.setInitialAccounts([...this.getAccounts(), ...restored]);\n\t\t}\n\t}\n\n\t#loadImportedAddresses(): string[] {\n\t\tif (typeof localStorage === 'undefined') return [];\n\t\ttry {\n\t\t\tconst raw = localStorage.getItem(RemoteCliAdapter.STORAGE_KEY);\n\t\t\tif (!raw) return [];\n\t\t\tconst parsed: unknown = JSON.parse(raw);\n\t\t\tif (!Array.isArray(parsed)) return [];\n\t\t\treturn parsed.filter((v): v is string => typeof v === 'string');\n\t\t} catch {\n\t\t\treturn [];\n\t\t}\n\t}\n\n\t#saveImportedAddresses(): void {\n\t\tif (typeof localStorage === 'undefined') return;\n\t\tconst addresses = this._accounts.map((a) => a.address);\n\t\tlocalStorage.setItem(RemoteCliAdapter.STORAGE_KEY, JSON.stringify(addresses));\n\t}\n\n\t#serverAccountToManaged(\n\t\tinfo: ServerAccountInfo,\n\t\tscheme: SignatureScheme,\n\t\tlabel?: string,\n\t): ManagedAccount {\n\t\tconst publicKey = publicKeyFromSuiBytes(info.publicBase64Key, scheme);\n\n\t\tconst signer = new CliProxySigner({\n\t\t\taddress: info.suiAddress,\n\t\t\tpublicKey,\n\t\t\tscheme,\n\t\t\tserverOrigin: this.#serverOrigin,\n\t\t\tauthToken: this.#authToken,\n\t\t});\n\n\t\tconst accountLabel = label ?? info.alias ?? this.getDefaultLabel();\n\n\t\treturn buildManagedAccount(signer, info.suiAddress, accountLabel, CLI_WALLET_FEATURES);\n\t}\n}\n"],"mappings":";;;;;;;;;;;;;;AAkBA,MAAM,sBAAsB,CAAC,uBAAuB,gCAAgC;;AAGpF,MAAM,wBAAwB;;AAG9B,IAAM,YAAN,cAAwB,MAAM;CAC7B,cAAc;AACb,QAAM,eAAe;AACrB,OAAK,OAAO;;;;AAKd,MAAM,iBAAkD;CACvD,SAAS;CACT,WAAW;CACX,WAAW;CACX;AAUD,SAAS,sBAAsB,iBAAyB,QAAoC;CAC3F,MAAM,WAAW,WAAW,gBAAgB;CAC5C,MAAM,WAAW,SAAS,MAAM,EAAE;AAElC,SAAQ,QAAR;EACC,KAAK,UACJ,QAAO,IAAI,iBAAiB,SAAS;EACtC,KAAK,YACJ,QAAO,IAAI,mBAAmB,SAAS;EACxC,KAAK,YACJ,QAAO,IAAI,mBAAmB,SAAS;EACxC,QACC,OAAM,IAAI,MAAM,2BAA2B,SAAS;;;;;;;;;;AAWvD,IAAa,iBAAb,cAAoC,OAAO;CAC1C;CACA;CACA;CACA;CACA;CAEA,YAAY,SAMT;AACF,SAAO;AACP,QAAKA,UAAW,QAAQ;AACxB,QAAKC,YAAa,QAAQ;AAC1B,QAAKC,SAAU,QAAQ;AACvB,QAAKC,eAAgB,QAAQ;AAC7B,QAAKC,YAAa,QAAQ,aAAa;;CAGxC,MAAM,KAAK,QAAsD;AAChE,QAAM,IAAI,MACT,4DACC,kDACD;;CAGF,eAAgC;AAC/B,SAAO,MAAKF;;CAGb,eAA0B;AACzB,SAAO,MAAKD;;CAGb,AAAS,eAAuB;AAC/B,SAAO,MAAKD;;CAGb,MAAe,gBAAgB,OAAmB;EACjD,MAAM,UAAkC,EAAE,gBAAgB,oBAAoB;AAC9E,MAAI,MAAKI,WAAY;AACpB,WAAQ,mBAAmB,UAAU,MAAKA;;EAG3C,MAAM,MAAM,MAAM,MAAM,GAAG,MAAKD,aAAc,2BAA2B;GACxE,QAAQ;GACR;GACA,MAAM,KAAK,UAAU;IACpB,SAAS,MAAKH;IACd,SAAS,SAAS,MAAM;IACxB,CAAC;GACF,CAAC;AAEF,MAAI,CAAC,IAAI,IAAI;GACZ,MAAM,OAAO,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,EAAE;AAC/C,SAAM,IAAI,MAAM,+BAA+B,KAAK,SAAS,IAAI,aAAa;;EAG/E,MAAM,EAAE,iBAAiB,MAAM,IAAI,MAAM;AACzC,MAAI,OAAO,iBAAiB,YAAY,aAAa,WAAW,GAAG;AAClE,SAAM,IAAI,MAAM,gEAAgE;;AAEjF,SAAO;GACN,OAAO,SAAS,MAAM;GACtB,WAAW;GACX;;CAGF,MAAe,oBAAoB,QAAoC;AACtE,QAAM,IAAI,MACT,4DACC,iEACA,4EACD;;;;;;;;;;AAWH,IAAa,mBAAb,MAAa,yBAAyB,kBAAkB;CAKvD,AAAmB,kBAA0B;AAC5C,SAAO,eAAe,KAAK,aAAa,CAAC,SAAS;;CAMnD,OAAO,WAAW,QAAwB;EACzC,MAAM,SAAS,OAAO,aAAa,cAAc,SAAS,SAAS;AACnE,SAAO,cAAc,OAAO,GAAG;;CAGhC,WAAW,cAAsB;AAChC,SAAO,iBAAiB,WAAW,yBAAyB;;CAG7D,WAAW,YAAoB;AAC9B,SAAO,iBAAiB,WAAW,YAAY;;CAGhD;CACA,aAA4B;CAC5B,qBAA0C,EAAE;CAC5C,aAAmE;CAEnE,YAAY,SAAqD;AAChE,SAAO;YA9BM;cACE;uBACS;EA6BxB,MAAM,SAAS,SAAS,gBAAgB;AACxC,MAAI,QAAQ;AACX,OAAI;AACH,QAAI,IAAI,OAAO;WACR;AACP,UAAM,IAAI,MAAM,8BAA8B,OAAO,GAAG;;;AAG1D,QAAKG,eAAgB;AACrB,MAAI,SAAS,OAAO;AACnB,SAAKC,YAAa,QAAQ;;;CAI5B,IAAI,WAAoB;AACvB,SAAO,MAAKA,cAAe;;CAG5B,MAAM,aAA4B;AACjC,MAAI,CAAC,MAAKA,aAAc,OAAO,iBAAiB,aAAa;GAC5D,MAAM,SAAS,aAAa,QAAQ,iBAAiB,UAAU;AAC/D,OAAI,QAAQ;AACX,UAAKA,YAAa;;;AAIpB,MAAI,MAAKA,WAAY;AACpB,OAAI;AACH,UAAM,MAAKC,qBAAsB;AACjC,UAAM,MAAKC,yBAA0B;YAC7B,OAAO;AACf,QAAI,iBAAiB,WAAW;AAC/B,WAAKF,YAAa;AAClB,SAAI,OAAO,iBAAiB,aAAa;AACxC,mBAAa,WAAW,iBAAiB,UAAU;;WAE9C;AACN,aAAQ,KAAK,mDAAmD,MAAM;;;;;CAM1E,MAAM,wBAEJ;AACD,QAAM,MAAKC,qBAAsB;EACjC,MAAM,oBAAoB,IAAI,IAAI,KAAK,UAAU,KAAK,MAAM,EAAE,QAAQ,CAAC;AACvE,SAAO,MAAKE,kBACV,QAAQ,SAAS;GACjB,MAAM,SAAS,eAAe,KAAK;AACnC,UAAO,UAAU,CAAC,kBAAkB,IAAI,KAAK,WAAW;IACvD,CACD,KAAK,UAAU;GACf,SAAS,KAAK;GACd,QAAQ,KAAK;GACb,OAAO,KAAK;GACZ,EAAE;;CAGL,MAAM,cAAc,SAAwD;EAC3E,MAAM,UAAU,QAAQ;AACxB,MAAI,CAAC,SAAS;AACb,SAAM,IAAI,MAAM,mDAAmD;;AAGpE,MAAI,KAAK,UAAU,MAAM,MAAM,EAAE,YAAY,QAAQ,EAAE;AACtD,SAAM,IAAI,MAAM,WAAW,QAAQ,sBAAsB;;AAG1D,QAAM,MAAKF,qBAAsB;EACjC,MAAM,OAAO,MAAKE,kBAAmB,MAAM,MAAM,EAAE,eAAe,QAAQ;AAC1E,MAAI,CAAC,MAAM;AACV,SAAM,IAAI,MAAM,WAAW,QAAQ,sBAAsB;;EAG1D,MAAM,SAAS,eAAe,KAAK;AACnC,MAAI,CAAC,QAAQ;AACZ,SAAM,IAAI,MAAM,2BAA2B,KAAK,YAAY;;EAG7D,MAAM,UAAU,MAAKC,uBAAwB,MAAM,QAAQ,QAAQ,MAAM;AACzE,OAAK,WAAW,QAAQ;AACxB,QAAKC,uBAAwB;AAC7B,SAAO;;CAGR,MAAM,cAAc,SAAmC;EACtD,MAAM,UAAU,KAAK,uBAAuB,QAAQ;AACpD,MAAI,SAAS;AACZ,SAAKA,uBAAwB;;AAE9B,SAAO;;CAGR,AAAS,UAAgB;AACxB,QAAKF,oBAAqB,EAAE;AAC5B,QAAKH,YAAa;AAClB,MAAI,OAAO,iBAAiB,aAAa;AACxC,gBAAa,WAAW,iBAAiB,UAAU;AACnD,gBAAa,WAAW,iBAAiB,YAAY;;AAEtD,QAAM,SAAS;;CAGhB,eAAuC;EACtC,MAAM,UAAkC,EAAE,gBAAgB,oBAAoB;AAC9E,MAAI,MAAKA,WAAY;AACpB,WAAQ,mBAAmB,UAAU,MAAKA;;AAE3C,SAAO;;CAGR,OAAMC,oBAAqB,eAAe,OAAsB;AAC/D,MACC,CAAC,gBACD,MAAKK,aACL,KAAK,KAAK,GAAG,MAAKA,UAAW,OAAO,uBACnC;AACD,SAAKH,oBAAqB,MAAKG,UAAW;AAC1C;;EAED,MAAM,MAAM,MAAM,MAAM,GAAG,MAAKP,aAAc,mBAAmB,EAChE,SAAS,MAAKQ,aAAc,EAC5B,CAAC;AACF,MAAI,IAAI,WAAW,OAAO,IAAI,WAAW,KAAK;AAC7C,SAAM,IAAI,WAAW;;AAEtB,MAAI,CAAC,IAAI,IAAI;AACZ,SAAM,IAAI,MAAM,6BAA6B,IAAI,aAAa;;EAG/D,MAAM,EAAE,aAAc,MAAM,IAAI,MAAM;AACtC,QAAKJ,oBAAqB;AAC1B,QAAKG,YAAa;GAAE,MAAM,KAAK,KAAK;GAAE,QAAQ;GAAU;;CAGzD,OAAMJ,0BAA0C;EAC/C,MAAM,QAAQ,MAAKM,uBAAwB;AAC3C,MAAI,MAAM,WAAW,EAAG;EAExB,MAAM,oBAAoB,IAAI,IAAI,KAAK,aAAa,CAAC,KAAK,MAAM,EAAE,QAAQ,CAAC;EAC3E,MAAM,WAA6B,EAAE;AAErC,OAAK,MAAM,WAAW,OAAO;AAC5B,OAAI,kBAAkB,IAAI,QAAQ,CAAE;GAEpC,MAAM,OAAO,MAAKL,kBAAmB,MAAM,MAAM,EAAE,eAAe,QAAQ;AAC1E,OAAI,CAAC,KAAM;GAEX,MAAM,SAAS,eAAe,KAAK;AACnC,OAAI,CAAC,OAAQ;AAEb,YAAS,KAAK,MAAKC,uBAAwB,MAAM,OAAO,CAAC;;AAG1D,MAAI,SAAS,SAAS,GAAG;AACxB,QAAK,mBAAmB,CAAC,GAAG,KAAK,aAAa,EAAE,GAAG,SAAS,CAAC;;;CAI/D,yBAAmC;AAClC,MAAI,OAAO,iBAAiB,YAAa,QAAO,EAAE;AAClD,MAAI;GACH,MAAM,MAAM,aAAa,QAAQ,iBAAiB,YAAY;AAC9D,OAAI,CAAC,IAAK,QAAO,EAAE;GACnB,MAAM,SAAkB,KAAK,MAAM,IAAI;AACvC,OAAI,CAAC,MAAM,QAAQ,OAAO,CAAE,QAAO,EAAE;AACrC,UAAO,OAAO,QAAQ,MAAmB,OAAO,MAAM,SAAS;UACxD;AACP,UAAO,EAAE;;;CAIX,yBAA+B;AAC9B,MAAI,OAAO,iBAAiB,YAAa;EACzC,MAAM,YAAY,KAAK,UAAU,KAAK,MAAM,EAAE,QAAQ;AACtD,eAAa,QAAQ,iBAAiB,aAAa,KAAK,UAAU,UAAU,CAAC;;CAG9E,wBACC,MACA,QACA,OACiB;EACjB,MAAM,YAAY,sBAAsB,KAAK,iBAAiB,OAAO;EAErE,MAAM,SAAS,IAAI,eAAe;GACjC,SAAS,KAAK;GACd;GACA;GACA,cAAc,MAAKL;GACnB,WAAW,MAAKC;GAChB,CAAC;EAEF,MAAM,eAAe,SAAS,KAAK,SAAS,KAAK,iBAAiB;AAElE,SAAO,oBAAoB,QAAQ,KAAK,YAAY,cAAc,oBAAoB"}

package/dist/adapters/webcrypto-adapter.d.mts

@@ -0,0 +1,20 @@
+import { CreateAccountOptions, ManagedAccount } from "../types.mjs";
+import { BaseSignerAdapter } from "./base-adapter.mjs";
+
+//#region src/adapters/webcrypto-adapter.d.ts
+declare class WebCryptoSignerAdapter extends BaseSignerAdapter {
+  #private;
+  readonly id = "webcrypto";
+  readonly name = "WebCrypto Signer";
+  constructor(options?: {
+    dbName?: string;
+    storeName?: string;
+  });
+  initialize(): Promise<void>;
+  createAccount(options?: CreateAccountOptions): Promise<ManagedAccount>;
+  renameAccount(address: string, label: string): Promise<boolean>;
+  removeAccount(address: string): Promise<boolean>;
+}
+//#endregion
+export { WebCryptoSignerAdapter };
+//# sourceMappingURL=webcrypto-adapter.d.mts.map

package/dist/adapters/webcrypto-adapter.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webcrypto-adapter.d.mts","names":[],"sources":["../../src/adapters/webcrypto-adapter.ts"],"mappings":";;;;cAoBa,sBAAA,SAA+B,iBAAA;EAAA;WAClC,EAAA;EAAA,SACA,IAAA;cAIG,OAAA;IAAY,MAAA;IAAiB,SAAA;EAAA;EAQnC,UAAA,CAAA,GAAc,OAAA;EA0Bd,aAAA,CAAc,OAAA,GAAU,oBAAA,GAAuB,OAAA,CAAQ,cAAA;EAcvD,aAAA,CAAc,OAAA,UAAiB,KAAA,WAAgB,OAAA;EAM/C,aAAA,CAAc,OAAA,WAAkB,OAAA;AAAA"}

package/dist/adapters/webcrypto-adapter.mjs

@@ -0,0 +1,68 @@
+import { buildManagedAccount } from "./build-managed-account.mjs";
+import { BaseSignerAdapter } from "./base-adapter.mjs";
+import { IDBStore } from "./idb-store.mjs";
+import { WebCryptoSigner } from "@mysten/signers/webcrypto";
+
+//#region src/adapters/webcrypto-adapter.ts
+const DEFAULT_DB_NAME = "dev-wallet-webcrypto";
+const DEFAULT_STORE_NAME = "accounts";
+const META_KEY = "__account_meta__";
+var WebCryptoSignerAdapter = class extends BaseSignerAdapter {
+	#store;
+	constructor(options) {
+		super();
+		this.id = "webcrypto";
+		this.name = "WebCrypto Signer";
+		this.#store = new IDBStore(options?.dbName ?? DEFAULT_DB_NAME, options?.storeName ?? DEFAULT_STORE_NAME);
+	}
+	async initialize() {
+		const allEntries = await this.#store.entries();
+		const meta = await this.#store.get(META_KEY) ?? [];
+		const accounts = [];
+		for (const [key, value] of allEntries) {
+			if (key === META_KEY) continue;
+			const address = key;
+			try {
+				const exported = value;
+				const signer = WebCryptoSigner.import(exported);
+				const accountMeta = meta.find((m) => m.address === address);
+				accounts.push(buildManagedAccount(signer, address, accountMeta?.label ?? "Account"));
+			} catch (error) {
+				console.warn(`[dev-wallet] Failed to load account ${address}, skipping:`, error);
+			}
+		}
+		this.setInitialAccounts(accounts);
+	}
+	async createAccount(options) {
+		const signer = await WebCryptoSigner.generate();
+		const address = signer.getPublicKey().toSuiAddress();
+		const label = options?.label ?? this.getDefaultLabel();
+		const managedAccount = buildManagedAccount(signer, address, label);
+		await this.#store.set(address, signer.export());
+		this.addAccount(managedAccount);
+		await this.#saveMeta();
+		return managedAccount;
+	}
+	async renameAccount(address, label) {
+		if (!this._performRename(address, label)) return false;
+		await this.#saveMeta();
+		return true;
+	}
+	async removeAccount(address) {
+		if (!this.removeAccountByAddress(address)) return false;
+		await this.#store.del(address);
+		await this.#saveMeta();
+		return true;
+	}
+	async #saveMeta() {
+		const meta = this.getAccounts().map((a) => ({
+			address: a.address,
+			label: a.label
+		}));
+		await this.#store.set(META_KEY, meta);
+	}
+};
+
+//#endregion
+export { WebCryptoSignerAdapter };
+//# sourceMappingURL=webcrypto-adapter.mjs.map

package/dist/adapters/webcrypto-adapter.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"webcrypto-adapter.mjs","names":["#store","#saveMeta"],"sources":["../../src/adapters/webcrypto-adapter.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport type { ExportedWebCryptoKeypair } from '@mysten/signers/webcrypto';\nimport { WebCryptoSigner } from '@mysten/signers/webcrypto';\n\nimport type { CreateAccountOptions, ManagedAccount } from '../types.js';\nimport { BaseSignerAdapter } from './base-adapter.js';\nimport { buildManagedAccount } from './build-managed-account.js';\nimport { IDBStore } from './idb-store.js';\n\ninterface StoredAccountMeta {\n\taddress: string;\n\tlabel: string;\n}\n\nconst DEFAULT_DB_NAME = 'dev-wallet-webcrypto';\nconst DEFAULT_STORE_NAME = 'accounts';\nconst META_KEY = '__account_meta__';\n\nexport class WebCryptoSignerAdapter extends BaseSignerAdapter {\n\treadonly id = 'webcrypto';\n\treadonly name = 'WebCrypto Signer';\n\n\t#store: IDBStore;\n\n\tconstructor(options?: { dbName?: string; storeName?: string }) {\n\t\tsuper();\n\t\tthis.#store = new IDBStore(\n\t\t\toptions?.dbName ?? DEFAULT_DB_NAME,\n\t\t\toptions?.storeName ?? DEFAULT_STORE_NAME,\n\t\t);\n\t}\n\n\tasync initialize(): Promise<void> {\n\t\tconst allEntries = await this.#store.entries<\n\t\t\tstring,\n\t\t\tExportedWebCryptoKeypair | StoredAccountMeta[]\n\t\t>();\n\t\tconst meta: StoredAccountMeta[] = (await this.#store.get<StoredAccountMeta[]>(META_KEY)) ?? [];\n\n\t\tconst accounts = [];\n\n\t\tfor (const [key, value] of allEntries) {\n\t\t\tif (key === META_KEY) continue;\n\n\t\t\tconst address = key as string;\n\t\t\ttry {\n\t\t\t\tconst exported = value as ExportedWebCryptoKeypair;\n\t\t\t\tconst signer = WebCryptoSigner.import(exported);\n\t\t\t\tconst accountMeta = meta.find((m) => m.address === address);\n\t\t\t\taccounts.push(buildManagedAccount(signer, address, accountMeta?.label ?? 'Account'));\n\t\t\t} catch (error) {\n\t\t\t\tconsole.warn(`[dev-wallet] Failed to load account ${address}, skipping:`, error);\n\t\t\t}\n\t\t}\n\n\t\tthis.setInitialAccounts(accounts);\n\t}\n\n\tasync createAccount(options?: CreateAccountOptions): Promise<ManagedAccount> {\n\t\tconst signer = await WebCryptoSigner.generate();\n\t\tconst address = signer.getPublicKey().toSuiAddress();\n\t\tconst label = options?.label ?? this.getDefaultLabel();\n\n\t\tconst managedAccount = buildManagedAccount(signer, address, label);\n\n\t\tawait this.#store.set(address, signer.export());\n\t\tthis.addAccount(managedAccount);\n\t\tawait this.#saveMeta();\n\n\t\treturn managedAccount;\n\t}\n\n\tasync renameAccount(address: string, label: string): Promise<boolean> {\n\t\tif (!this._performRename(address, label)) return false;\n\t\tawait this.#saveMeta();\n\t\treturn true;\n\t}\n\n\tasync removeAccount(address: string): Promise<boolean> {\n\t\tif (!this.removeAccountByAddress(address)) return false;\n\n\t\tawait this.#store.del(address);\n\t\tawait this.#saveMeta();\n\t\treturn true;\n\t}\n\n\tasync #saveMeta(): Promise<void> {\n\t\tconst meta: StoredAccountMeta[] = this.getAccounts().map((a) => ({\n\t\t\taddress: a.address,\n\t\t\tlabel: a.label,\n\t\t}));\n\t\tawait this.#store.set(META_KEY, meta);\n\t}\n}\n"],"mappings":";;;;;;AAgBA,MAAM,kBAAkB;AACxB,MAAM,qBAAqB;AAC3B,MAAM,WAAW;AAEjB,IAAa,yBAAb,cAA4C,kBAAkB;CAI7D;CAEA,YAAY,SAAmD;AAC9D,SAAO;YANM;cACE;AAMf,QAAKA,QAAS,IAAI,SACjB,SAAS,UAAU,iBACnB,SAAS,aAAa,mBACtB;;CAGF,MAAM,aAA4B;EACjC,MAAM,aAAa,MAAM,MAAKA,MAAO,SAGlC;EACH,MAAM,OAA6B,MAAM,MAAKA,MAAO,IAAyB,SAAS,IAAK,EAAE;EAE9F,MAAM,WAAW,EAAE;AAEnB,OAAK,MAAM,CAAC,KAAK,UAAU,YAAY;AACtC,OAAI,QAAQ,SAAU;GAEtB,MAAM,UAAU;AAChB,OAAI;IACH,MAAM,WAAW;IACjB,MAAM,SAAS,gBAAgB,OAAO,SAAS;IAC/C,MAAM,cAAc,KAAK,MAAM,MAAM,EAAE,YAAY,QAAQ;AAC3D,aAAS,KAAK,oBAAoB,QAAQ,SAAS,aAAa,SAAS,UAAU,CAAC;YAC5E,OAAO;AACf,YAAQ,KAAK,uCAAuC,QAAQ,cAAc,MAAM;;;AAIlF,OAAK,mBAAmB,SAAS;;CAGlC,MAAM,cAAc,SAAyD;EAC5E,MAAM,SAAS,MAAM,gBAAgB,UAAU;EAC/C,MAAM,UAAU,OAAO,cAAc,CAAC,cAAc;EACpD,MAAM,QAAQ,SAAS,SAAS,KAAK,iBAAiB;EAEtD,MAAM,iBAAiB,oBAAoB,QAAQ,SAAS,MAAM;AAElE,QAAM,MAAKA,MAAO,IAAI,SAAS,OAAO,QAAQ,CAAC;AAC/C,OAAK,WAAW,eAAe;AAC/B,QAAM,MAAKC,UAAW;AAEtB,SAAO;;CAGR,MAAM,cAAc,SAAiB,OAAiC;AACrE,MAAI,CAAC,KAAK,eAAe,SAAS,MAAM,CAAE,QAAO;AACjD,QAAM,MAAKA,UAAW;AACtB,SAAO;;CAGR,MAAM,cAAc,SAAmC;AACtD,MAAI,CAAC,KAAK,uBAAuB,QAAQ,CAAE,QAAO;AAElD,QAAM,MAAKD,MAAO,IAAI,QAAQ;AAC9B,QAAM,MAAKC,UAAW;AACtB,SAAO;;CAGR,OAAMA,WAA2B;EAChC,MAAM,OAA4B,KAAK,aAAa,CAAC,KAAK,OAAO;GAChE,SAAS,EAAE;GACX,OAAO,EAAE;GACT,EAAE;AACH,QAAM,MAAKD,MAAO,IAAI,UAAU,KAAK"}

package/dist/bin/cli.d.mts

@@ -0,0 +1 @@
+export { };