@mysten-incubation/dev-wallet 0.0.0

package/dist/wallet/signing.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.d.mts","names":[],"sources":["../../src/wallet/signing.ts"],"mappings":";;;;KAQK,kBAAA;AAAA,UAKK,qBAAA;EACT,IAAA,EAAM,kBAAA;EACN,MAAA,EAAQ,MAAA;EACR,IAAA,WAAe,UAAA;EACf,MAAA,GAAS,iBAAA;AAAA;AAAA,KAGE,aAAA;EACP,IAAA;EAA+B,KAAA;EAAe,SAAA;AAAA;EAC9C,IAAA;EAA0B,KAAA;EAAe,SAAA;AAAA;EAE3C,IAAA;EACA,KAAA;EACA,SAAA;EACA,MAAA;EACA,OAAA;AAAA;AAAA,iBAImB,cAAA,CAAA;EACrB,IAAA;EACA,MAAA;EACA,IAAA;EACA;AAAA,GACE,qBAAA,GAAwB,OAAA,CAAQ,aAAA"}

package/dist/wallet/signing.mjs

@@ -0,0 +1,69 @@
+import { Transaction } from "@mysten/sui/transactions";
+import { fromBase64, toBase64 } from "@mysten/sui/utils";
+
+//#region src/wallet/signing.ts
+async function executeSigning({ type, signer, data, client }) {
+	switch (type) {
+		case "sign-personal-message": {
+			if (!(data instanceof Uint8Array)) {
+				throw new Error("sign-personal-message expects data to be a Uint8Array");
+			}
+			const { bytes, signature } = await signer.signPersonalMessage(data);
+			return {
+				type,
+				bytes,
+				signature
+			};
+		}
+		case "sign-transaction": {
+			if (!client) throw new Error("No client provided for sign-transaction");
+			if (typeof data !== "string") {
+				throw new Error("sign-transaction expects data to be a JSON string");
+			}
+			const tx = Transaction.from(data);
+			const { bytes, signature } = await tx.sign({
+				client,
+				signer
+			});
+			return {
+				type,
+				bytes,
+				signature
+			};
+		}
+		case "sign-and-execute-transaction": {
+			if (!client) throw new Error("No client provided for sign-and-execute-transaction");
+			if (typeof data !== "string") {
+				throw new Error("sign-and-execute-transaction expects data to be a JSON string");
+			}
+			const tx = Transaction.from(data);
+			const { bytes, signature } = await tx.sign({
+				client,
+				signer
+			});
+			const result = await client.core.executeTransaction({
+				transaction: fromBase64(bytes),
+				signatures: [signature],
+				include: { effects: true }
+			});
+			const txResult = result.Transaction ?? result.FailedTransaction;
+			if (!txResult) {
+				throw new Error("Transaction execution returned empty result");
+			}
+			if (!txResult.status.success) {
+				throw new Error(txResult.status.error?.message ?? "Transaction execution failed");
+			}
+			return {
+				type,
+				bytes,
+				signature,
+				digest: txResult.digest,
+				effects: txResult.effects?.bcs ? toBase64(txResult.effects.bcs) : ""
+			};
+		}
+	}
+}
+
+//#endregion
+export { executeSigning };
+//# sourceMappingURL=signing.mjs.map

package/dist/wallet/signing.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"signing.mjs","names":[],"sources":["../../src/wallet/signing.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport type { ClientWithCoreApi } from '@mysten/sui/client';\nimport type { Signer } from '@mysten/sui/cryptography';\nimport { Transaction } from '@mysten/sui/transactions';\nimport { fromBase64, toBase64 } from '@mysten/sui/utils';\n\ntype SigningRequestType =\n\t| 'sign-personal-message'\n\t| 'sign-transaction'\n\t| 'sign-and-execute-transaction';\n\ninterface ExecuteSigningOptions {\n\ttype: SigningRequestType;\n\tsigner: Signer;\n\tdata: string | Uint8Array;\n\tclient?: ClientWithCoreApi;\n}\n\nexport type SigningResult =\n\t| { type: 'sign-personal-message'; bytes: string; signature: string }\n\t| { type: 'sign-transaction'; bytes: string; signature: string }\n\t| {\n\t\t\ttype: 'sign-and-execute-transaction';\n\t\t\tbytes: string;\n\t\t\tsignature: string;\n\t\t\tdigest: string;\n\t\t\teffects: string;\n\t  };\n\n// Shared between the embedded DevWallet and the standalone popup request-handler.\nexport async function executeSigning({\n\ttype,\n\tsigner,\n\tdata,\n\tclient,\n}: ExecuteSigningOptions): Promise<SigningResult> {\n\tswitch (type) {\n\t\tcase 'sign-personal-message': {\n\t\t\tif (!(data instanceof Uint8Array)) {\n\t\t\t\tthrow new Error('sign-personal-message expects data to be a Uint8Array');\n\t\t\t}\n\t\t\tconst { bytes, signature } = await signer.signPersonalMessage(data);\n\t\t\treturn { type, bytes, signature };\n\t\t}\n\t\tcase 'sign-transaction': {\n\t\t\tif (!client) throw new Error('No client provided for sign-transaction');\n\t\t\tif (typeof data !== 'string') {\n\t\t\t\tthrow new Error('sign-transaction expects data to be a JSON string');\n\t\t\t}\n\t\t\tconst tx = Transaction.from(data);\n\t\t\tconst { bytes, signature } = await tx.sign({ client, signer });\n\t\t\treturn { type, bytes, signature };\n\t\t}\n\t\tcase 'sign-and-execute-transaction': {\n\t\t\tif (!client) throw new Error('No client provided for sign-and-execute-transaction');\n\t\t\tif (typeof data !== 'string') {\n\t\t\t\tthrow new Error('sign-and-execute-transaction expects data to be a JSON string');\n\t\t\t}\n\t\t\tconst tx = Transaction.from(data);\n\t\t\tconst { bytes, signature } = await tx.sign({ client, signer });\n\t\t\tconst result = await client.core.executeTransaction({\n\t\t\t\ttransaction: fromBase64(bytes),\n\t\t\t\tsignatures: [signature],\n\t\t\t\tinclude: { effects: true },\n\t\t\t});\n\t\t\tconst txResult = result.Transaction ?? result.FailedTransaction;\n\t\t\tif (!txResult) {\n\t\t\t\tthrow new Error('Transaction execution returned empty result');\n\t\t\t}\n\t\t\tif (!txResult.status.success) {\n\t\t\t\tthrow new Error(txResult.status.error?.message ?? 'Transaction execution failed');\n\t\t\t}\n\t\t\treturn {\n\t\t\t\ttype,\n\t\t\t\tbytes,\n\t\t\t\tsignature,\n\t\t\t\tdigest: txResult.digest,\n\t\t\t\t// Empty string when effects BCS is unavailable — the wallet-standard protocol requires a string\n\t\t\t\teffects: txResult.effects?.bcs ? toBase64(txResult.effects.bcs) : '',\n\t\t\t};\n\t\t}\n\t}\n}\n"],"mappings":";;;;AAgCA,eAAsB,eAAe,EACpC,MACA,QACA,MACA,UACiD;AACjD,SAAQ,MAAR;EACC,KAAK,yBAAyB;AAC7B,OAAI,EAAE,gBAAgB,aAAa;AAClC,UAAM,IAAI,MAAM,wDAAwD;;GAEzE,MAAM,EAAE,OAAO,cAAc,MAAM,OAAO,oBAAoB,KAAK;AACnE,UAAO;IAAE;IAAM;IAAO;IAAW;;EAElC,KAAK,oBAAoB;AACxB,OAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,0CAA0C;AACvE,OAAI,OAAO,SAAS,UAAU;AAC7B,UAAM,IAAI,MAAM,oDAAoD;;GAErE,MAAM,KAAK,YAAY,KAAK,KAAK;GACjC,MAAM,EAAE,OAAO,cAAc,MAAM,GAAG,KAAK;IAAE;IAAQ;IAAQ,CAAC;AAC9D,UAAO;IAAE;IAAM;IAAO;IAAW;;EAElC,KAAK,gCAAgC;AACpC,OAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,sDAAsD;AACnF,OAAI,OAAO,SAAS,UAAU;AAC7B,UAAM,IAAI,MAAM,gEAAgE;;GAEjF,MAAM,KAAK,YAAY,KAAK,KAAK;GACjC,MAAM,EAAE,OAAO,cAAc,MAAM,GAAG,KAAK;IAAE;IAAQ;IAAQ,CAAC;GAC9D,MAAM,SAAS,MAAM,OAAO,KAAK,mBAAmB;IACnD,aAAa,WAAW,MAAM;IAC9B,YAAY,CAAC,UAAU;IACvB,SAAS,EAAE,SAAS,MAAM;IAC1B,CAAC;GACF,MAAM,WAAW,OAAO,eAAe,OAAO;AAC9C,OAAI,CAAC,UAAU;AACd,UAAM,IAAI,MAAM,8CAA8C;;AAE/D,OAAI,CAAC,SAAS,OAAO,SAAS;AAC7B,UAAM,IAAI,MAAM,SAAS,OAAO,OAAO,WAAW,+BAA+B;;AAElF,UAAO;IACN;IACA;IACA;IACA,QAAQ,SAAS;IAEjB,SAAS,SAAS,SAAS,MAAM,SAAS,SAAS,QAAQ,IAAI,GAAG;IAClE"}

package/package.json

@@ -0,0 +1,124 @@
+{
+	"name": "@mysten-incubation/dev-wallet",
+	"version": "0.0.0",
+	"description": "A modular dev wallet for Sui",
+	"license": "Apache-2.0",
+	"author": "Mysten Labs <build@mystenlabs.com>",
+	"type": "module",
+	"main": "./dist/index.mjs",
+	"types": "./dist/index.d.mts",
+	"bin": {
+		"dev-wallet": "dist/bin/cli.mjs"
+	},
+	"exports": {
+		".": {
+			"types": "./dist/index.d.mts",
+			"import": "./dist/index.mjs"
+		},
+		"./adapters": {
+			"types": "./dist/adapters/browser.d.mts",
+			"import": "./dist/adapters/browser.mjs"
+		},
+		"./ui": {
+			"types": "./dist/ui/index.d.mts",
+			"import": "./dist/ui/index.mjs"
+		},
+		"./react": {
+			"types": "./dist/react/index.d.mts",
+			"import": "./dist/react/index.mjs"
+		},
+		"./client": {
+			"types": "./dist/client/index.d.mts",
+			"import": "./dist/client/index.mjs"
+		},
+		"./server": {
+			"types": "./dist/server/index.d.mts",
+			"import": "./dist/server/index.mjs"
+		}
+	},
+	"sideEffects": [
+		"dist/ui/*.mjs"
+	],
+	"files": [
+		"CHANGELOG.md",
+		"dist",
+		"src"
+	],
+	"scripts": {
+		"clean": "rm -rf tsconfig.tsbuildinfo ./dist",
+		"build": "rm -rf dist && tsc --noEmit && tsdown && vite build --config vite.standalone.config.ts && vite build --config vite.bookmarklet.config.ts",
+		"prettier:check": "prettier -c --ignore-unknown .",
+		"prettier:fix": "prettier -w --ignore-unknown .",
+		"oxlint:check": "oxlint  .",
+		"oxlint:fix": "oxlint --fix",
+		"lint": "pnpm run oxlint:check && pnpm run prettier:check",
+		"lint:fix": "pnpm run oxlint:fix && pnpm run prettier:fix",
+		"test": "vitest run --config vitest.config.ts",
+		"test:node": "vitest run --config vitest.config.ts",
+		"test:browser": "vitest run --config vitest.browser.config.ts"
+	},
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/MystenLabs/ts-incubation.git"
+	},
+	"bugs": {
+		"url": "https://github.com/MystenLabs/ts-incubation/issues"
+	},
+	"keywords": [
+		"sui",
+		"wallet",
+		"development",
+		"testing",
+		"dapp",
+		"web3",
+		"wallet-standard"
+	],
+	"homepage": "https://github.com/MystenLabs/ts-incubation/tree/main/packages/dev-wallet#readme",
+	"devDependencies": {
+		"@lit/react": "^1.0.8",
+		"@mysten/signers": "^1.0.1",
+		"@mysten/sui": "^2.9.1",
+		"@testing-library/react": "^16.3.1",
+		"@types/node": "^25.0.8",
+		"@types/react": "^19.2.8",
+		"@vitest/browser": "^4.0.18",
+		"@vitest/browser-playwright": "^4.0.18",
+		"happy-dom": "^20.1.0",
+		"playwright": "*",
+		"react": "^19.2.3",
+		"react-dom": "^19.2.3",
+		"typescript": "^5.9.3",
+		"vite": "^7.3.1",
+		"vitest": "^4.0.17"
+	},
+	"dependencies": {
+		"@hono/node-server": "^1.19.9",
+		"@mysten/utils": "^0.3.1",
+		"@mysten/wallet-sdk": "^0.1.1",
+		"@mysten/wallet-standard": "^0.20.1",
+		"@mysten/window-wallet-core": "^0.1.4",
+		"hono": "^4.12.3",
+		"lit": "^3.3.2"
+	},
+	"peerDependencies": {
+		"@lit/react": "^1.0.8",
+		"@mysten/signers": "^1.0.1",
+		"@mysten/sui": "^2.9.1",
+		"@types/react": ">=17.0.0",
+		"react": ">=17.0.0"
+	},
+	"peerDependenciesMeta": {
+		"react": {
+			"optional": true
+		},
+		"@types/react": {
+			"optional": true
+		},
+		"@mysten/signers": {
+			"optional": true
+		},
+		"@lit/react": {
+			"optional": true
+		}
+	}
+}

package/src/adapters/base-adapter.ts

@@ -0,0 +1,93 @@
+// Copyright (c) Mysten Labs, Inc.
+// SPDX-License-Identifier: Apache-2.0
+
+import type { ManagedAccount, SignerAdapter } from '../types.js';
+import { buildManagedAccount } from './build-managed-account.js';
+
+/**
+ * Abstract base class implementing the shared boilerplate of {@link SignerAdapter}.
+ *
+ * Subclasses only need to implement `initialize()`, `id`, and `name`.
+ * All account list management, listener notification, and cleanup are handled here.
+ */
+export abstract class BaseSignerAdapter implements SignerAdapter {
+	abstract readonly id: string;
+	abstract readonly name: string;
+	readonly allowAutoSign: boolean = true;
+
+	#accounts: ManagedAccount[] = [];
+	#listeners = new Set<(accounts: ManagedAccount[]) => void>();
+
+	abstract initialize(): Promise<void>;
+
+	getAccounts(): ManagedAccount[] {
+		return [...this.#accounts];
+	}
+
+	getAccount(address: string): ManagedAccount | undefined {
+		return this.#accounts.find((account) => account.address === address);
+	}
+
+	onAccountsChanged(callback: (accounts: ManagedAccount[]) => void): () => void {
+		this.#listeners.add(callback);
+		return () => {
+			this.#listeners.delete(callback);
+		};
+	}
+
+	destroy(): void {
+		this.#accounts = [];
+		this.#listeners.clear();
+	}
+
+	// ── Protected helpers for subclasses ─────────────────────────────────────
+
+	protected get _accounts(): readonly ManagedAccount[] {
+		return this.#accounts;
+	}
+
+	protected setInitialAccounts(accounts: ManagedAccount[]): void {
+		this.#accounts = accounts;
+		this.notifyListeners();
+	}
+
+	protected addAccount(account: ManagedAccount): void {
+		this.#accounts.push(account);
+		this.notifyListeners();
+	}
+
+	protected removeAccountByAddress(address: string): boolean {
+		const index = this.#accounts.findIndex((a) => a.address === address);
+		if (index === -1) return false;
+		this.#accounts.splice(index, 1);
+		this.notifyListeners();
+		return true;
+	}
+
+	/** Replace an account by address (e.g. after rename). */
+	protected replaceAccount(address: string, account: ManagedAccount): boolean {
+		const index = this.#accounts.findIndex((a) => a.address === address);
+		if (index === -1) return false;
+		this.#accounts[index] = account;
+		this.notifyListeners();
+		return true;
+	}
+
+	/** Rename an account by rebuilding its ManagedAccount with a new label. */
+	protected _performRename(address: string, label: string): boolean {
+		const account = this.getAccount(address);
+		if (!account) return false;
+		return this.replaceAccount(address, buildManagedAccount(account.signer, address, label));
+	}
+
+	protected getDefaultLabel(): string {
+		return `Account ${this.getAccounts().length + 1}`;
+	}
+
+	protected notifyListeners(): void {
+		const accounts = this.getAccounts();
+		for (const listener of this.#listeners) {
+			listener(accounts);
+		}
+	}
+}

package/src/adapters/browser.ts

@@ -0,0 +1,15 @@
+// Copyright (c) Mysten Labs, Inc.
+// SPDX-License-Identifier: Apache-2.0
+
+export type {
+	SignerAdapter,
+	ManagedAccount,
+	CreateAccountOptions,
+	ImportAccountOptions,
+} from '../types.js';
+export { BaseSignerAdapter } from './base-adapter.js';
+export { buildManagedAccount } from './build-managed-account.js';
+export { InMemorySignerAdapter } from './in-memory-adapter.js';
+export { RemoteCliAdapter, CliProxySigner } from './remote-cli-adapter.js';
+export { WebCryptoSignerAdapter } from './webcrypto-adapter.js';
+export { PasskeySignerAdapter } from './passkey-adapter.js';

package/src/adapters/build-managed-account.ts

@@ -0,0 +1,33 @@
+// Copyright (c) Mysten Labs, Inc.
+// SPDX-License-Identifier: Apache-2.0
+
+import type { Signer } from '@mysten/sui/cryptography';
+import type { IdentifierString } from '@mysten/wallet-standard';
+import { ReadonlyWalletAccount, SUI_CHAINS } from '@mysten/wallet-standard';
+
+import type { ManagedAccount } from '../types.js';
+
+const DEFAULT_FEATURES: IdentifierString[] = [
+	'sui:signTransaction',
+	'sui:signAndExecuteTransaction',
+	'sui:signPersonalMessage',
+];
+
+/**
+ * Build a {@link ManagedAccount} from a signer, address, label, and optional feature list.
+ */
+export function buildManagedAccount(
+	signer: Signer,
+	address: string,
+	label: string,
+	features?: readonly IdentifierString[],
+): ManagedAccount {
+	const walletAccount = new ReadonlyWalletAccount({
+		address,
+		label,
+		publicKey: signer.getPublicKey().toSuiBytes(),
+		chains: [...SUI_CHAINS],
+		features: [...(features ?? DEFAULT_FEATURES)],
+	});
+	return { address, label, signer, walletAccount };
+}

package/src/adapters/idb-store.ts

@@ -0,0 +1,87 @@
+// Copyright (c) Mysten Labs, Inc.
+// SPDX-License-Identifier: Apache-2.0
+
+/**
+ * Minimal IndexedDB key-value store replacing the `idb-keyval` package.
+ *
+ * The database connection is opened lazily on first use and reused for all
+ * subsequent operations.
+ */
+export class IDBStore {
+	#dbName: string;
+	#storeName: string;
+	#db: Promise<IDBDatabase> | null = null;
+
+	constructor(dbName: string, storeName: string) {
+		this.#dbName = dbName;
+		this.#storeName = storeName;
+	}
+
+	get<T>(key: IDBValidKey): Promise<T | undefined> {
+		return this.#withTx('readonly', (s) => s.get(key) as IDBRequest<T | undefined>);
+	}
+
+	async set(key: IDBValidKey, value: unknown): Promise<void> {
+		await this.#withTx('readwrite', (s) => s.put(value, key));
+	}
+
+	del(key: IDBValidKey): Promise<void> {
+		return this.#withTx('readwrite', (s) => s.delete(key) as IDBRequest<void>);
+	}
+
+	entries<K extends IDBValidKey, V>(): Promise<[K, V][]> {
+		return this.#open().then(
+			(db) =>
+				new Promise((resolve, reject) => {
+					const tx = db.transaction(this.#storeName, 'readonly');
+					const objectStore = tx.objectStore(this.#storeName);
+					const results: [K, V][] = [];
+					const cursor = objectStore.openCursor();
+					cursor.onsuccess = () => {
+						const c = cursor.result;
+						if (c) {
+							results.push([c.key as K, c.value as V]);
+							c.continue();
+						}
+					};
+					tx.oncomplete = () => resolve(results);
+					tx.onerror = () => reject(tx.error);
+				}),
+		);
+	}
+
+	#open(): Promise<IDBDatabase> {
+		if (!this.#db) {
+			this.#db = new Promise((resolve, reject) => {
+				const request = indexedDB.open(this.#dbName);
+				request.onupgradeneeded = () => {
+					if (!request.result.objectStoreNames.contains(this.#storeName)) {
+						request.result.createObjectStore(this.#storeName);
+					}
+				};
+				request.onsuccess = () => resolve(request.result);
+				request.onerror = () => {
+					this.#db = null;
+					reject(request.error);
+				};
+			});
+		}
+		return this.#db;
+	}
+
+	#withTx<T>(
+		mode: IDBTransactionMode,
+		fn: (objectStore: IDBObjectStore) => IDBRequest<T>,
+	): Promise<T> {
+		return this.#open().then(
+			(db) =>
+				new Promise((resolve, reject) => {
+					const tx = db.transaction(this.#storeName, mode);
+					const req = fn(tx.objectStore(this.#storeName));
+					tx.oncomplete = () => resolve(req.result);
+					tx.onerror = () => reject(tx.error);
+					tx.onabort = () => reject(tx.error);
+				}),
+		);
+	}
+}

package/src/adapters/in-memory-adapter.ts

@@ -0,0 +1,51 @@
+// Copyright (c) Mysten Labs, Inc.
+// SPDX-License-Identifier: Apache-2.0
+
+import { Ed25519Keypair } from '@mysten/sui/keypairs/ed25519';
+
+import type { CreateAccountOptions, ImportAccountOptions, ManagedAccount } from '../types.js';
+import { BaseSignerAdapter } from './base-adapter.js';
+import { buildManagedAccount } from './build-managed-account.js';
+
+export class InMemorySignerAdapter extends BaseSignerAdapter {
+	readonly id = 'in-memory';
+	readonly name = 'In-Memory Signer';
+
+	async initialize(): Promise<void> {
+		// No-op for in-memory adapter
+	}
+
+	async createAccount(options?: CreateAccountOptions): Promise<ManagedAccount> {
+		const keypair = new Ed25519Keypair();
+		const address = keypair.getPublicKey().toSuiAddress();
+		const label = options?.label ?? this.getDefaultLabel();
+
+		const managedAccount = buildManagedAccount(keypair, address, label);
+		this.addAccount(managedAccount);
+		return managedAccount;
+	}
+
+	async importAccount(options: ImportAccountOptions): Promise<ManagedAccount> {
+		const signer = options.signer;
+		if (!signer) {
+			throw new Error('In-memory adapter requires a signer to import');
+		}
+		const address = signer.toSuiAddress();
+
+		const existing = this.getAccount(address);
+		if (existing) return existing;
+
+		const label = options.label ?? this.getDefaultLabel();
+		const managedAccount = buildManagedAccount(signer, address, label);
+		this.addAccount(managedAccount);
+		return managedAccount;
+	}
+
+	async renameAccount(address: string, label: string): Promise<boolean> {
+		return this._performRename(address, label);
+	}
+
+	async removeAccount(address: string): Promise<boolean> {
+		return this.removeAccountByAddress(address);
+	}
+}

package/src/adapters/passkey-adapter.ts

@@ -0,0 +1,120 @@
+// Copyright (c) Mysten Labs, Inc.
+// SPDX-License-Identifier: Apache-2.0
+
+import { PasskeyKeypair } from '@mysten/sui/keypairs/passkey';
+import type { PasskeyProvider } from '@mysten/sui/keypairs/passkey';
+
+import type { CreateAccountOptions } from '../types.js';
+import { BaseSignerAdapter } from './base-adapter.js';
+import { buildManagedAccount } from './build-managed-account.js';
+import { IDBStore } from './idb-store.js';
+
+/** Metadata stored in IndexedDB for each passkey account. */
+interface StoredPasskeyMeta {
+	address: string;
+	label: string;
+	/** Compressed secp256r1 public key (33 bytes, stored as number array). */
+	publicKeyBytes: number[];
+	/** WebAuthn credential ID (stored as number array). Used to constrain credential selection during signing. */
+	credentialId?: number[];
+}
+
+const DEFAULT_DB_NAME = 'dev-wallet-passkey';
+const DEFAULT_STORE_NAME = 'accounts';
+const META_KEY = '__passkey_accounts__';
+
+/**
+ * Signer adapter backed by WebAuthn passkeys. Each signing operation triggers a
+ * browser biometric/PIN prompt. Account metadata is persisted in IndexedDB;
+ * private keys are managed by the browser/OS and never enter JavaScript.
+ *
+ * Browser only — requires `navigator.credentials` and `indexedDB`.
+ */
+export class PasskeySignerAdapter extends BaseSignerAdapter {
+	readonly id = 'passkey';
+	readonly name = 'Passkey Signer';
+	readonly allowAutoSign = false;
+
+	#store: IDBStore;
+	#provider: PasskeyProvider | null;
+
+	constructor(options?: { dbName?: string; storeName?: string; provider?: PasskeyProvider }) {
+		super();
+		this.#store = new IDBStore(
+			options?.dbName ?? DEFAULT_DB_NAME,
+			options?.storeName ?? DEFAULT_STORE_NAME,
+		);
+		// Allow injecting a custom provider (useful for testing)
+		this.#provider = options?.provider ?? null;
+	}
+
+	#getProvider(): PasskeyProvider {
+		if (!this.#provider) {
+			throw new Error('PasskeySignerAdapter not initialized. Call initialize() first.');
+		}
+		return this.#provider;
+	}
+
+	async initialize(): Promise<void> {
+		if (!this.#provider) {
+			const { BrowserPasskeyProvider } = await import('@mysten/sui/keypairs/passkey');
+			this.#provider = new BrowserPasskeyProvider('Dev Wallet Passkey', {
+				rp: { id: globalThis.location?.hostname },
+			});
+		}
+
+		const stored = await this.#store.get<StoredPasskeyMeta[]>(META_KEY);
+		if (!stored) return;
+
+		const provider = this.#getProvider();
+		this.setInitialAccounts(
+			stored.map((meta) => {
+				const publicKeyBytes = new Uint8Array(meta.publicKeyBytes);
+				const credentialId = meta.credentialId ? new Uint8Array(meta.credentialId) : undefined;
+				const signer = new PasskeyKeypair(publicKeyBytes, provider, credentialId);
+				return buildManagedAccount(signer, meta.address, meta.label);
+			}),
+		);
+	}
+
+	protected override getDefaultLabel(): string {
+		return `Passkey Account ${this.getAccounts().length + 1}`;
+	}
+
+	async createAccount(options?: CreateAccountOptions) {
+		const signer = await PasskeyKeypair.getPasskeyInstance(this.#getProvider());
+		const address = signer.toSuiAddress();
+		const label = options?.label ?? this.getDefaultLabel();
+
+		const managedAccount = buildManagedAccount(signer, address, label);
+		this.addAccount(managedAccount);
+		await this.#saveMeta();
+
+		return managedAccount;
+	}
+
+	async renameAccount(address: string, label: string): Promise<boolean> {
+		if (!this._performRename(address, label)) return false;
+		await this.#saveMeta();
+		return true;
+	}
+
+	async removeAccount(address: string): Promise<boolean> {
+		if (!this.removeAccountByAddress(address)) return false;
+		await this.#saveMeta();
+		return true;
+	}
+
+	async #saveMeta(): Promise<void> {
+		const meta: StoredPasskeyMeta[] = this.getAccounts().map((a) => {
+			const credentialId = (a.signer as PasskeyKeypair).getCredentialId?.();
+			return {
+				address: a.address,
+				label: a.label,
+				publicKeyBytes: [...a.signer.getPublicKey().toRawBytes()],
+				...(credentialId && { credentialId: [...credentialId] }),
+			};
+		});
+		await this.#store.set(META_KEY, meta);
+	}
+}