@mysten-incubation/dev-wallet 0.0.0

package/dist/client/request-handler.mjs

@@ -0,0 +1,115 @@
+import { getNetworkFromChain } from "../wallet/constants.mjs";
+import { executeSigning } from "../wallet/signing.mjs";
+import { fromBase64, toBase64 } from "@mysten/sui/utils";
+import { WalletPostMessageChannel, createJwtSession } from "@mysten/window-wallet-core";
+
+//#region src/client/request-handler.ts
+function parseWalletRequest(options) {
+	if (!options.hash && typeof window === "undefined") {
+		throw new Error("parseWalletRequest requires either options.hash or a browser environment with window.location");
+	}
+	const hash = options.hash ?? window.location.hash.slice(1);
+	const channel = WalletPostMessageChannel.fromUrlHash(hash);
+	const requestData = channel.getRequestData();
+	const payload = requestData.payload;
+	if (payload.type === "connect") {
+		return {
+			type: "connect",
+			appName: requestData.appName,
+			appUrl: requestData.appUrl,
+			async approve(approveOptions) {
+				const allAccounts = options.adapters.flatMap((adapter) => adapter.getAccounts().map((a) => ({
+					address: a.address,
+					publicKey: toBase64(a.signer.getPublicKey().toSuiBytes()),
+					label: a.label
+				})));
+				const selected = approveOptions?.selectedAddresses;
+				const accounts = selected ? allAccounts.filter((a) => selected.includes(a.address)) : allAccounts;
+				const session = await createJwtSession({ accounts }, {
+					secretKey: options.jwtSecretKey,
+					expirationTime: "7d",
+					issuer: "dev-wallet",
+					audience: new URL(requestData.appUrl).origin
+				});
+				channel.sendMessage({
+					type: "resolve",
+					data: {
+						type: "connect",
+						session
+					}
+				});
+			},
+			reject(reason) {
+				channel.sendMessage({
+					type: "reject",
+					reason
+				});
+			}
+		};
+	}
+	const messageData = payload.type === "sign-personal-message" ? fromBase64(payload.message) : payload.transaction;
+	return {
+		type: payload.type,
+		appName: requestData.appName,
+		appUrl: requestData.appUrl,
+		address: payload.address,
+		chain: payload.chain,
+		data: messageData,
+		async approve() {
+			try {
+				await channel.verifyJwtSession(options.jwtSecretKey);
+			} catch (error) {
+				channel.sendMessage({
+					type: "reject",
+					reason: `Session verification failed: ${error instanceof Error ? error.message : String(error)}`
+				});
+				return;
+			}
+			let account;
+			for (const adapter of options.adapters) {
+				account = adapter.getAccount(payload.address);
+				if (account) break;
+			}
+			if (!account) {
+				channel.sendMessage({
+					type: "reject",
+					reason: `Account ${payload.address} not found`
+				});
+				return;
+			}
+			try {
+				const network = payload.chain ? getNetworkFromChain(payload.chain) : undefined;
+				const client = network ? options.getClient?.(network) : undefined;
+				const result = await executeSigning({
+					type: payload.type,
+					signer: account.signer,
+					data: messageData,
+					client
+				});
+				const data = result.type === "sign-and-execute-transaction" ? {
+					...result,
+					effects: result.effects ?? ""
+				} : result;
+				channel.sendMessage({
+					type: "resolve",
+					data
+				});
+			} catch (error) {
+				channel.sendMessage({
+					type: "reject",
+					reason: error instanceof Error ? error.message : String(error)
+				});
+			}
+		},
+		reject(reason) {
+			channel.sendMessage({
+				type: "reject",
+				reason
+			});
+		}
+	};
+}
+
+//#endregion
+export { parseWalletRequest };
+//# sourceMappingURL=request-handler.mjs.map

package/dist/client/request-handler.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"request-handler.mjs","names":[],"sources":["../../src/client/request-handler.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport type { ClientWithCoreApi } from '@mysten/sui/client';\nimport { fromBase64, toBase64 } from '@mysten/sui/utils';\nimport { createJwtSession, WalletPostMessageChannel } from '@mysten/window-wallet-core';\n\nimport type { SignerAdapter } from '../types.js';\nimport { getNetworkFromChain } from '../wallet/constants.js';\nimport { executeSigning } from '../wallet/signing.js';\n\n/**\n * A parsed wallet request with methods to approve or reject it.\n *\n * This is different from `PendingSigningRequest` (in dev-wallet.ts) — this interface\n * includes `approve()`/`reject()` methods and is specific to the standalone popup flow.\n */\nexport interface PendingWalletRequest {\n\ttype: 'connect' | 'sign-transaction' | 'sign-and-execute-transaction' | 'sign-personal-message';\n\tappName: string;\n\tappUrl: string;\n\taddress?: string;\n\tchain?: string;\n\tdata?: string | Uint8Array;\n\t/**\n\t * Approve the request.\n\t * For connect: creates a session with the selected accounts (or all if none specified).\n\t * For signing: signs with the adapter.\n\t */\n\tapprove(options?: { selectedAddresses?: string[] }): Promise<void>;\n\t/** Reject the request with an optional reason. */\n\treject(reason?: string): void;\n}\n\nexport interface HandleRequestOptions {\n\t/** The signer adapters providing accounts and signing capability. */\n\tadapters: SignerAdapter[];\n\t/** JWT secret key for session creation. */\n\tjwtSecretKey: CryptoKey | Uint8Array;\n\t/** Resolve a client for a given network name (needed for signAndExecute). */\n\tgetClient?: (network: string) => ClientWithCoreApi | undefined;\n\t/** URL hash containing the encoded request. Defaults to window.location.hash. */\n\thash?: string;\n}\n\nexport function parseWalletRequest(options: HandleRequestOptions): PendingWalletRequest {\n\tif (!options.hash && typeof window === 'undefined') {\n\t\tthrow new Error(\n\t\t\t'parseWalletRequest requires either options.hash or a browser environment with window.location',\n\t\t);\n\t}\n\tconst hash = options.hash ?? window.location.hash.slice(1);\n\tconst channel = WalletPostMessageChannel.fromUrlHash(hash);\n\tconst requestData = channel.getRequestData();\n\tconst payload = requestData.payload;\n\n\tif (payload.type === 'connect') {\n\t\treturn {\n\t\t\ttype: 'connect',\n\t\t\tappName: requestData.appName,\n\t\t\tappUrl: requestData.appUrl,\n\t\t\tasync approve(approveOptions?: { selectedAddresses?: string[] }) {\n\t\t\t\tconst allAccounts = options.adapters.flatMap((adapter) =>\n\t\t\t\t\tadapter.getAccounts().map((a) => ({\n\t\t\t\t\t\taddress: a.address,\n\t\t\t\t\t\tpublicKey: toBase64(a.signer.getPublicKey().toSuiBytes()),\n\t\t\t\t\t\tlabel: a.label,\n\t\t\t\t\t})),\n\t\t\t\t);\n\t\t\t\tconst selected = approveOptions?.selectedAddresses;\n\t\t\t\tconst accounts = selected\n\t\t\t\t\t? allAccounts.filter((a) => selected.includes(a.address))\n\t\t\t\t\t: allAccounts;\n\n\t\t\t\tconst session = await createJwtSession(\n\t\t\t\t\t{ accounts },\n\t\t\t\t\t{\n\t\t\t\t\t\tsecretKey: options.jwtSecretKey,\n\t\t\t\t\t\texpirationTime: '7d',\n\t\t\t\t\t\tissuer: 'dev-wallet',\n\t\t\t\t\t\taudience: new URL(requestData.appUrl).origin,\n\t\t\t\t\t},\n\t\t\t\t);\n\n\t\t\t\tchannel.sendMessage({\n\t\t\t\t\ttype: 'resolve',\n\t\t\t\t\tdata: { type: 'connect', session },\n\t\t\t\t});\n\t\t\t},\n\t\t\treject(reason?: string) {\n\t\t\t\tchannel.sendMessage({ type: 'reject', reason });\n\t\t\t},\n\t\t};\n\t}\n\n\tconst messageData =\n\t\tpayload.type === 'sign-personal-message' ? fromBase64(payload.message) : payload.transaction;\n\n\treturn {\n\t\ttype: payload.type,\n\t\tappName: requestData.appName,\n\t\tappUrl: requestData.appUrl,\n\t\taddress: payload.address,\n\t\tchain: payload.chain,\n\t\tdata: messageData,\n\t\tasync approve() {\n\t\t\t// Verify JWT session before signing — ensures the dApp was previously\n\t\t\t// authorized for this account via a connect flow\n\t\t\ttry {\n\t\t\t\tawait channel.verifyJwtSession(options.jwtSecretKey);\n\t\t\t} catch (error) {\n\t\t\t\tchannel.sendMessage({\n\t\t\t\t\ttype: 'reject',\n\t\t\t\t\treason: `Session verification failed: ${error instanceof Error ? error.message : String(error)}`,\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\tlet account;\n\t\t\tfor (const adapter of options.adapters) {\n\t\t\t\taccount = adapter.getAccount(payload.address);\n\t\t\t\tif (account) break;\n\t\t\t}\n\t\t\tif (!account) {\n\t\t\t\tchannel.sendMessage({\n\t\t\t\t\ttype: 'reject',\n\t\t\t\t\treason: `Account ${payload.address} not found`,\n\t\t\t\t});\n\t\t\t\treturn;\n\t\t\t}\n\n\t\t\ttry {\n\t\t\t\tconst network = payload.chain ? getNetworkFromChain(payload.chain) : undefined;\n\t\t\t\tconst client = network ? options.getClient?.(network) : undefined;\n\t\t\t\tconst result = await executeSigning({\n\t\t\t\t\ttype: payload.type,\n\t\t\t\t\tsigner: account.signer,\n\t\t\t\t\tdata: messageData,\n\t\t\t\t\tclient,\n\t\t\t\t});\n\t\t\t\t// effects must be a string in the PostMessage protocol\n\t\t\t\tconst data =\n\t\t\t\t\tresult.type === 'sign-and-execute-transaction'\n\t\t\t\t\t\t? { ...result, effects: result.effects ?? '' }\n\t\t\t\t\t\t: result;\n\t\t\t\tchannel.sendMessage({\n\t\t\t\t\ttype: 'resolve',\n\t\t\t\t\tdata,\n\t\t\t\t});\n\t\t\t} catch (error) {\n\t\t\t\tchannel.sendMessage({\n\t\t\t\t\ttype: 'reject',\n\t\t\t\t\treason: error instanceof Error ? error.message : String(error),\n\t\t\t\t});\n\t\t\t}\n\t\t},\n\t\treject(reason?: string) {\n\t\t\tchannel.sendMessage({ type: 'reject', reason });\n\t\t},\n\t};\n}\n"],"mappings":";;;;;;AA6CA,SAAgB,mBAAmB,SAAqD;AACvF,KAAI,CAAC,QAAQ,QAAQ,OAAO,WAAW,aAAa;AACnD,QAAM,IAAI,MACT,gGACA;;CAEF,MAAM,OAAO,QAAQ,QAAQ,OAAO,SAAS,KAAK,MAAM,EAAE;CAC1D,MAAM,UAAU,yBAAyB,YAAY,KAAK;CAC1D,MAAM,cAAc,QAAQ,gBAAgB;CAC5C,MAAM,UAAU,YAAY;AAE5B,KAAI,QAAQ,SAAS,WAAW;AAC/B,SAAO;GACN,MAAM;GACN,SAAS,YAAY;GACrB,QAAQ,YAAY;GACpB,MAAM,QAAQ,gBAAmD;IAChE,MAAM,cAAc,QAAQ,SAAS,SAAS,YAC7C,QAAQ,aAAa,CAAC,KAAK,OAAO;KACjC,SAAS,EAAE;KACX,WAAW,SAAS,EAAE,OAAO,cAAc,CAAC,YAAY,CAAC;KACzD,OAAO,EAAE;KACT,EAAE,CACH;IACD,MAAM,WAAW,gBAAgB;IACjC,MAAM,WAAW,WACd,YAAY,QAAQ,MAAM,SAAS,SAAS,EAAE,QAAQ,CAAC,GACvD;IAEH,MAAM,UAAU,MAAM,iBACrB,EAAE,UAAU,EACZ;KACC,WAAW,QAAQ;KACnB,gBAAgB;KAChB,QAAQ;KACR,UAAU,IAAI,IAAI,YAAY,OAAO,CAAC;KACtC,CACD;AAED,YAAQ,YAAY;KACnB,MAAM;KACN,MAAM;MAAE,MAAM;MAAW;MAAS;KAClC,CAAC;;GAEH,OAAO,QAAiB;AACvB,YAAQ,YAAY;KAAE,MAAM;KAAU;KAAQ,CAAC;;GAEhD;;CAGF,MAAM,cACL,QAAQ,SAAS,0BAA0B,WAAW,QAAQ,QAAQ,GAAG,QAAQ;AAElF,QAAO;EACN,MAAM,QAAQ;EACd,SAAS,YAAY;EACrB,QAAQ,YAAY;EACpB,SAAS,QAAQ;EACjB,OAAO,QAAQ;EACf,MAAM;EACN,MAAM,UAAU;AAGf,OAAI;AACH,UAAM,QAAQ,iBAAiB,QAAQ,aAAa;YAC5C,OAAO;AACf,YAAQ,YAAY;KACnB,MAAM;KACN,QAAQ,gCAAgC,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;KAC9F,CAAC;AACF;;GAGD,IAAI;AACJ,QAAK,MAAM,WAAW,QAAQ,UAAU;AACvC,cAAU,QAAQ,WAAW,QAAQ,QAAQ;AAC7C,QAAI,QAAS;;AAEd,OAAI,CAAC,SAAS;AACb,YAAQ,YAAY;KACnB,MAAM;KACN,QAAQ,WAAW,QAAQ,QAAQ;KACnC,CAAC;AACF;;AAGD,OAAI;IACH,MAAM,UAAU,QAAQ,QAAQ,oBAAoB,QAAQ,MAAM,GAAG;IACrE,MAAM,SAAS,UAAU,QAAQ,YAAY,QAAQ,GAAG;IACxD,MAAM,SAAS,MAAM,eAAe;KACnC,MAAM,QAAQ;KACd,QAAQ,QAAQ;KAChB,MAAM;KACN;KACA,CAAC;IAEF,MAAM,OACL,OAAO,SAAS,iCACb;KAAE,GAAG;KAAQ,SAAS,OAAO,WAAW;KAAI,GAC5C;AACJ,YAAQ,YAAY;KACnB,MAAM;KACN;KACA,CAAC;YACM,OAAO;AACf,YAAQ,YAAY;KACnB,MAAM;KACN,QAAQ,iBAAiB,QAAQ,MAAM,UAAU,OAAO,MAAM;KAC9D,CAAC;;;EAGJ,OAAO,QAAiB;AACvB,WAAQ,YAAY;IAAE,MAAM;IAAU;IAAQ,CAAC;;EAEhD"}

package/dist/index.d.mts

@@ -0,0 +1,5 @@
+import { CreateAccountOptions, ImportAccountOptions, ManagedAccount, SignerAdapter } from "./types.mjs";
+import { SigningResult } from "./wallet/signing.mjs";
+import { AutoApprovePolicy, DEFAULT_NETWORK_URLS, DevWallet, DevWalletConfig, PendingConnectRequest, PendingSigningRequest } from "./wallet/dev-wallet.mjs";
+import { DevWalletInitializerConfig, devWalletInitializer } from "./wallet/initializer.mjs";
+export { type AutoApprovePolicy, type CreateAccountOptions, DEFAULT_NETWORK_URLS, DevWallet, type DevWalletConfig, type DevWalletInitializerConfig, type ImportAccountOptions, type ManagedAccount, type PendingConnectRequest, type PendingSigningRequest, type SignerAdapter, type SigningResult, devWalletInitializer };

package/dist/index.mjs

@@ -0,0 +1,4 @@
+import { DEFAULT_NETWORK_URLS, DevWallet } from "./wallet/dev-wallet.mjs";
+import { devWalletInitializer } from "./wallet/initializer.mjs";
+
+export { DEFAULT_NETWORK_URLS, DevWallet, devWalletInitializer };

package/dist/react/components.d.mts

@@ -0,0 +1,32 @@
+import { DevWalletNewAccount as DevWalletNewAccount$1 } from "../ui/dev-wallet-new-account.mjs";
+import { DevWalletAccounts as DevWalletAccounts$1 } from "../ui/dev-wallet-accounts.mjs";
+import { DevWalletBalances as DevWalletBalances$1 } from "../ui/dev-wallet-balances.mjs";
+import { DevWalletPanel as DevWalletPanel$1 } from "../ui/dev-wallet-panel.mjs";
+import { DevWalletSigning as DevWalletSigning$1 } from "../ui/dev-wallet-signing.mjs";
+import * as _mysten_wallet_standard0 from "@mysten/wallet-standard";
+import * as _lit_react0 from "@lit/react";
+import { EventName } from "@lit/react";
+
+//#region src/react/components.d.ts
+declare const DevWalletPanel: _lit_react0.ReactWebComponent<DevWalletPanel$1, {}>;
+declare const DevWalletAccounts: _lit_react0.ReactWebComponent<DevWalletAccounts$1, {
+  onAccountSelected: EventName<CustomEvent<{
+    account: _mysten_wallet_standard0.ReadonlyWalletAccount;
+  }>>;
+  onAccountRenamed: EventName<CustomEvent<{
+    address: string;
+    label: string;
+  }>>;
+}>;
+declare const DevWalletBalances: _lit_react0.ReactWebComponent<DevWalletBalances$1, {}>;
+declare const DevWalletNewAccount: _lit_react0.ReactWebComponent<DevWalletNewAccount$1, {
+  onClose: EventName<CustomEvent>;
+  onAccountCreated: EventName<CustomEvent>;
+}>;
+declare const DevWalletSigning: _lit_react0.ReactWebComponent<DevWalletSigning$1, {
+  onApprove: EventName<CustomEvent>;
+  onReject: EventName<CustomEvent>;
+}>;
+//#endregion
+export { DevWalletAccounts, DevWalletBalances, DevWalletNewAccount, DevWalletPanel, DevWalletSigning };
+//# sourceMappingURL=components.d.mts.map

package/dist/react/components.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"components.d.mts","names":[],"sources":["../../src/react/components.ts"],"mappings":";;;;;;;;;;cAmBa,cAAA,EAAc,WAAA,CAAA,iBAAA,CAAA,gBAAA;AAAA,cAMd,iBAAA,EAQqC,WAAA,CARpB,iBAAA,CAAA,mBAAA;qBAKa,SAAA,CACxC,WAAA;IAAc,OAAA,EANa,wBAAA,CAM8B,qBAAA;EAAA;oBAEnB,SAAA,CACtC,WAAA;IAAc,OAAA;IAAiB,KAAA;EAAA;AAAA;AAAA,cAKrB,iBAAA,EAAiB,WAAA,CAAA,iBAAA,CAAA,mBAAA;AAAA,cAMjB,mBAAA,EAMqC,WAAA,CANlB,iBAAA,CAAA,qBAAA;WAKV,SAAA,CAAU,WAAA;oBACS,SAAA,CAAU,WAAA;AAAA;AAAA,cAItC,gBAAA,EAMoB,WAAA,CANJ,iBAAA,CAAA,kBAAA;aAKH,SAAA,CAAU,WAAA;YACZ,SAAA,CAAU,WAAA;AAAA"}

package/dist/react/components.mjs

@@ -0,0 +1,53 @@
+import { DevWalletBalances as DevWalletBalances$1 } from "../ui/dev-wallet-balances.mjs";
+import { DevWalletNewAccount as DevWalletNewAccount$1 } from "../ui/dev-wallet-new-account.mjs";
+import { DevWalletAccounts as DevWalletAccounts$1 } from "../ui/dev-wallet-accounts.mjs";
+import { DevWalletSigning as DevWalletSigning$1 } from "../ui/dev-wallet-signing.mjs";
+import { DevWalletPanel as DevWalletPanel$1 } from "../ui/dev-wallet-panel.mjs";
+import * as React from "react";
+import { createComponent } from "@lit/react";
+
+//#region src/react/components.ts
+if (typeof customElements === "undefined") {
+	throw new Error("@mysten-incubation/dev-wallet/react components require a browser environment. " + "Use dynamic imports with ssr:false in Next.js.");
+}
+const DevWalletPanel = createComponent({
+	react: React,
+	tagName: "dev-wallet-panel",
+	elementClass: DevWalletPanel$1
+});
+const DevWalletAccounts = createComponent({
+	react: React,
+	tagName: "dev-wallet-accounts",
+	elementClass: DevWalletAccounts$1,
+	events: {
+		onAccountSelected: "account-selected",
+		onAccountRenamed: "account-renamed"
+	}
+});
+const DevWalletBalances = createComponent({
+	react: React,
+	tagName: "dev-wallet-balances",
+	elementClass: DevWalletBalances$1
+});
+const DevWalletNewAccount = createComponent({
+	react: React,
+	tagName: "dev-wallet-new-account",
+	elementClass: DevWalletNewAccount$1,
+	events: {
+		onClose: "close",
+		onAccountCreated: "account-created"
+	}
+});
+const DevWalletSigning = createComponent({
+	react: React,
+	tagName: "dev-wallet-signing",
+	elementClass: DevWalletSigning$1,
+	events: {
+		onApprove: "approve",
+		onReject: "reject"
+	}
+});
+
+//#endregion
+export { DevWalletAccounts, DevWalletBalances, DevWalletNewAccount, DevWalletPanel, DevWalletSigning };
+//# sourceMappingURL=components.mjs.map

package/dist/react/components.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"components.mjs","names":["DevWalletPanelElement","DevWalletAccountsElement","DevWalletBalancesElement","DevWalletNewAccountElement","DevWalletSigningElement"],"sources":["../../src/react/components.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nif (typeof customElements === 'undefined') {\n\tthrow new Error(\n\t\t'@mysten-incubation/dev-wallet/react components require a browser environment. ' +\n\t\t\t'Use dynamic imports with ssr:false in Next.js.',\n\t);\n}\n\nimport { createComponent, type EventName } from '@lit/react';\nimport * as React from 'react';\n\nimport { DevWalletAccounts as DevWalletAccountsElement } from '../ui/dev-wallet-accounts.js';\nimport { DevWalletBalances as DevWalletBalancesElement } from '../ui/dev-wallet-balances.js';\nimport { DevWalletNewAccount as DevWalletNewAccountElement } from '../ui/dev-wallet-new-account.js';\nimport { DevWalletPanel as DevWalletPanelElement } from '../ui/dev-wallet-panel.js';\nimport { DevWalletSigning as DevWalletSigningElement } from '../ui/dev-wallet-signing.js';\n\nexport const DevWalletPanel = createComponent({\n\treact: React,\n\ttagName: 'dev-wallet-panel',\n\telementClass: DevWalletPanelElement,\n});\n\nexport const DevWalletAccounts = createComponent({\n\treact: React,\n\ttagName: 'dev-wallet-accounts',\n\telementClass: DevWalletAccountsElement,\n\tevents: {\n\t\tonAccountSelected: 'account-selected' as EventName<\n\t\t\tCustomEvent<{ account: import('@mysten/wallet-standard').ReadonlyWalletAccount }>\n\t\t>,\n\t\tonAccountRenamed: 'account-renamed' as EventName<\n\t\t\tCustomEvent<{ address: string; label: string }>\n\t\t>,\n\t},\n});\n\nexport const DevWalletBalances = createComponent({\n\treact: React,\n\ttagName: 'dev-wallet-balances',\n\telementClass: DevWalletBalancesElement,\n});\n\nexport const DevWalletNewAccount = createComponent({\n\treact: React,\n\ttagName: 'dev-wallet-new-account',\n\telementClass: DevWalletNewAccountElement,\n\tevents: {\n\t\tonClose: 'close' as EventName<CustomEvent>,\n\t\tonAccountCreated: 'account-created' as EventName<CustomEvent>,\n\t},\n});\n\nexport const DevWalletSigning = createComponent({\n\treact: React,\n\ttagName: 'dev-wallet-signing',\n\telementClass: DevWalletSigningElement,\n\tevents: {\n\t\tonApprove: 'approve' as EventName<CustomEvent>,\n\t\tonReject: 'reject' as EventName<CustomEvent>,\n\t},\n});\n"],"mappings":";;;;;;;;;AAGA,IAAI,OAAO,mBAAmB,aAAa;AAC1C,OAAM,IAAI,MACT,mFACC,iDACD;;AAYF,MAAa,iBAAiB,gBAAgB;CAC7C,OAAO;CACP,SAAS;CACT,cAAcA;CACd,CAAC;AAEF,MAAa,oBAAoB,gBAAgB;CAChD,OAAO;CACP,SAAS;CACT,cAAcC;CACd,QAAQ;EACP,mBAAmB;EAGnB,kBAAkB;EAGlB;CACD,CAAC;AAEF,MAAa,oBAAoB,gBAAgB;CAChD,OAAO;CACP,SAAS;CACT,cAAcC;CACd,CAAC;AAEF,MAAa,sBAAsB,gBAAgB;CAClD,OAAO;CACP,SAAS;CACT,cAAcC;CACd,QAAQ;EACP,SAAS;EACT,kBAAkB;EAClB;CACD,CAAC;AAEF,MAAa,mBAAmB,gBAAgB;CAC/C,OAAO;CACP,SAAS;CACT,cAAcC;CACd,QAAQ;EACP,WAAW;EACX,UAAU;EACV;CACD,CAAC"}

package/dist/react/context.d.mts

@@ -0,0 +1,22 @@
+import { DevWallet } from "../wallet/dev-wallet.mjs";
+import * as react0 from "react";
+import { ReactNode } from "react";
+
+//#region src/react/context.d.ts
+declare const DevWalletContext: react0.Context<DevWallet | null>;
+interface DevWalletProviderProps {
+  wallet: DevWallet;
+  children?: ReactNode;
+}
+declare function DevWalletProvider({
+  wallet,
+  children
+}: DevWalletProviderProps): react0.FunctionComponentElement<react0.ProviderProps<DevWallet | null>>;
+/**
+ * @param wallet - If provided, context is bypassed.
+ * @throws If no wallet is provided and no DevWalletProvider is in the tree.
+ */
+declare function useDevWalletInstance(wallet?: DevWallet): DevWallet;
+//#endregion
+export { DevWalletContext, DevWalletProvider, DevWalletProviderProps, useDevWalletInstance };
+//# sourceMappingURL=context.d.mts.map

package/dist/react/context.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.d.mts","names":[],"sources":["../../src/react/context.ts"],"mappings":";;;;;cAQa,gBAAA,EAAgB,MAAA,CAAA,OAAA,CAAA,SAAA;AAAA,UAEZ,sBAAA;EAChB,MAAA,EAAQ,SAAA;EACR,QAAA,GAAW,SAAA;AAAA;AAAA,iBAGI,iBAAA,CAAA;EAAoB,MAAA;EAAQ;AAAA,GAAY,sBAAA,GAAsB,MAAA,CAAA,wBAAA,CAAA,MAAA,CAAA,aAAA,CAAA,SAAA;;;AAL9E;;iBAagB,oBAAA,CAAqB,MAAA,GAAS,SAAA,GAAY,SAAA"}

package/dist/react/context.mjs

@@ -0,0 +1,25 @@
+import { createContext, createElement, useContext } from "react";
+
+//#region src/react/context.ts
+const DevWalletContext = createContext(null);
+function DevWalletProvider({ wallet, children }) {
+	return createElement(DevWalletContext.Provider, { value: wallet }, children);
+}
+/**
+* @param wallet - If provided, context is bypassed.
+* @throws If no wallet is provided and no DevWalletProvider is in the tree.
+*/
+function useDevWalletInstance(wallet) {
+	const contextValue = useContext(DevWalletContext);
+	if (wallet) {
+		return wallet;
+	}
+	if (!contextValue) {
+		throw new Error("Could not find DevWalletContext. Ensure that you have set up the DevWalletProvider.");
+	}
+	return contextValue;
+}
+
+//#endregion
+export { DevWalletContext, DevWalletProvider, useDevWalletInstance };
+//# sourceMappingURL=context.mjs.map

package/dist/react/context.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.mjs","names":[],"sources":["../../src/react/context.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { createContext, createElement, useContext } from 'react';\nimport type { ReactNode } from 'react';\n\nimport type { DevWallet } from '../wallet/dev-wallet.js';\n\nexport const DevWalletContext = createContext<DevWallet | null>(null);\n\nexport interface DevWalletProviderProps {\n\twallet: DevWallet;\n\tchildren?: ReactNode;\n}\n\nexport function DevWalletProvider({ wallet, children }: DevWalletProviderProps) {\n\treturn createElement(DevWalletContext.Provider, { value: wallet }, children);\n}\n\n/**\n * @param wallet - If provided, context is bypassed.\n * @throws If no wallet is provided and no DevWalletProvider is in the tree.\n */\nexport function useDevWalletInstance(wallet?: DevWallet): DevWallet {\n\tconst contextValue = useContext(DevWalletContext);\n\n\tif (wallet) {\n\t\treturn wallet;\n\t}\n\n\tif (!contextValue) {\n\t\tthrow new Error(\n\t\t\t'Could not find DevWalletContext. Ensure that you have set up the DevWalletProvider.',\n\t\t);\n\t}\n\n\treturn contextValue;\n}\n"],"mappings":";;;AAQA,MAAa,mBAAmB,cAAgC,KAAK;AAOrE,SAAgB,kBAAkB,EAAE,QAAQ,YAAoC;AAC/E,QAAO,cAAc,iBAAiB,UAAU,EAAE,OAAO,QAAQ,EAAE,SAAS;;;;;;AAO7E,SAAgB,qBAAqB,QAA+B;CACnE,MAAM,eAAe,WAAW,iBAAiB;AAEjD,KAAI,QAAQ;AACX,SAAO;;AAGR,KAAI,CAAC,cAAc;AAClB,QAAM,IAAI,MACT,sFACA;;AAGF,QAAO"}

package/dist/react/index.d.mts

@@ -0,0 +1,4 @@
+import { UseDevWalletOptions, UseDevWalletResult, useDevWallet } from "./useDevWallet.mjs";
+import { DevWalletContext, DevWalletProvider, DevWalletProviderProps, useDevWalletInstance } from "./context.mjs";
+import { DevWalletAccounts, DevWalletBalances, DevWalletNewAccount, DevWalletPanel, DevWalletSigning } from "./components.mjs";
+export { DevWalletAccounts, DevWalletBalances, DevWalletContext, DevWalletNewAccount, DevWalletPanel, DevWalletProvider, type DevWalletProviderProps, DevWalletSigning, type UseDevWalletOptions, type UseDevWalletResult, useDevWallet, useDevWalletInstance };

package/dist/react/index.mjs

@@ -0,0 +1,5 @@
+import { useDevWallet } from "./useDevWallet.mjs";
+import { DevWalletContext, DevWalletProvider, useDevWalletInstance } from "./context.mjs";
+import { DevWalletAccounts, DevWalletBalances, DevWalletNewAccount, DevWalletPanel, DevWalletSigning } from "./components.mjs";
+
+export { DevWalletAccounts, DevWalletBalances, DevWalletContext, DevWalletNewAccount, DevWalletPanel, DevWalletProvider, DevWalletSigning, useDevWallet, useDevWalletInstance };

package/dist/react/useDevWallet.d.mts

@@ -0,0 +1,38 @@
+import { DevWallet, DevWalletConfig } from "../wallet/dev-wallet.mjs";
+
+//#region src/react/useDevWallet.d.ts
+interface UseDevWalletOptions extends DevWalletConfig {
+  /** Whether to call adapter.initialize() automatically. Defaults to true. */
+  autoInitialize?: boolean;
+  /** Whether to create an initial account after initialization (if adapter supports it). Defaults to true. */
+  createInitialAccount?: boolean;
+  /** Whether to mount the floating wallet drawer UI. Defaults to true. */
+  mountUI?: boolean;
+  /** Container element for the UI drawer. Defaults to document.body. */
+  container?: HTMLElement;
+}
+interface UseDevWalletResult {
+  wallet: DevWallet | null;
+  /** Initialization error, if any (e.g. IndexedDB quota exceeded, adapter failure). */
+  error: Error | null;
+  /** True while the wallet is being initialized. */
+  loading: boolean;
+}
+/**
+ * React hook that initializes a DevWallet, registers it with the wallet-standard
+ * registry, and optionally mounts the wallet drawer UI.
+ *
+ * The adapters are captured on first render and used for the wallet's
+ * lifetime. Pass stable references (created outside the component or via useMemo).
+ *
+ * @example
+ * ```tsx
+ * const adapters = useMemo(() => [new InMemorySignerAdapter()], []);
+ *
+ * const wallet = useDevWallet({ adapters, networks: { devnet: 'https://fullnode.devnet.sui.io:443' } });
+ * ```
+ */
+declare function useDevWallet(options: UseDevWalletOptions): UseDevWalletResult;
+//#endregion
+export { UseDevWalletOptions, UseDevWalletResult, useDevWallet };
+//# sourceMappingURL=useDevWallet.d.mts.map

package/dist/react/useDevWallet.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"useDevWallet.d.mts","names":[],"sources":["../../src/react/useDevWallet.ts"],"mappings":";;;UAQiB,mBAAA,SAA4B,eAAA;;EAE5C,cAAA;EAFoC;EAIpC,oBAAA;EAJ2D;EAM3D,OAAA;EAJA;EAMA,SAAA,GAAY,WAAA;AAAA;AAAA,UAGI,kBAAA;EAChB,MAAA,EAAQ,SAAA;EAJe;EAMvB,KAAA,EAAO,KAAA;EAHS;EAKhB,OAAA;AAAA;;;;;;;;;AAiBD;;;;;;iBAAgB,YAAA,CAAa,OAAA,EAAS,mBAAA,GAAsB,kBAAA"}

package/dist/react/useDevWallet.mjs

@@ -0,0 +1,89 @@
+import { DevWallet } from "../wallet/dev-wallet.mjs";
+import { mountDevWallet } from "../ui/mount.mjs";
+import { useEffect, useMemo, useRef, useState } from "react";
+
+//#region src/react/useDevWallet.ts
+/**
+* React hook that initializes a DevWallet, registers it with the wallet-standard
+* registry, and optionally mounts the wallet drawer UI.
+*
+* The adapters are captured on first render and used for the wallet's
+* lifetime. Pass stable references (created outside the component or via useMemo).
+*
+* @example
+* ```tsx
+* const adapters = useMemo(() => [new InMemorySignerAdapter()], []);
+*
+* const wallet = useDevWallet({ adapters, networks: { devnet: 'https://fullnode.devnet.sui.io:443' } });
+* ```
+*/
+function useDevWallet(options) {
+	const [wallet, setWallet] = useState(null);
+	const [error, setError] = useState(null);
+	const [loading, setLoading] = useState(true);
+	const optionsRef = useRef(options);
+	optionsRef.current = options;
+	useEffect(() => {
+		const { autoInitialize = true, createInitialAccount = true, mountUI = true, container, ...walletConfig } = optionsRef.current;
+		let cancelled = false;
+		let unregister;
+		let unmountUI;
+		let devWallet;
+		try {
+			devWallet = new DevWallet(walletConfig);
+		} catch (err) {
+			setError(err instanceof Error ? err : new Error(String(err)));
+			setLoading(false);
+			return;
+		}
+		async function setup() {
+			if (autoInitialize) {
+				await Promise.all(walletConfig.adapters.map((a) => a.initialize()));
+			}
+			if (cancelled) return;
+			if (createInitialAccount) {
+				const hasAccounts = walletConfig.adapters.some((a) => a.getAccounts().length > 0);
+				if (!hasAccounts) {
+					const creatableAdapter = walletConfig.adapters.find((a) => a.createAccount && a.getAccounts().length === 0);
+					if (creatableAdapter?.createAccount) {
+						await creatableAdapter.createAccount({ label: "Dev Account" });
+					}
+				}
+			}
+			if (cancelled) return;
+			unregister = devWallet.register();
+			if (mountUI && typeof document !== "undefined") {
+				unmountUI = mountDevWallet(devWallet, { container });
+			}
+			if (!cancelled) {
+				setWallet(devWallet);
+				setLoading(false);
+			}
+		}
+		setup().catch((err) => {
+			if (!cancelled) {
+				setError(err instanceof Error ? err : new Error(String(err)));
+				setLoading(false);
+			}
+		});
+		return () => {
+			cancelled = true;
+			unmountUI?.();
+			unregister?.();
+			devWallet.destroy();
+		};
+	}, []);
+	return useMemo(() => ({
+		wallet,
+		error,
+		loading
+	}), [
+		wallet,
+		error,
+		loading
+	]);
+}
+
+//#endregion
+export { useDevWallet };
+//# sourceMappingURL=useDevWallet.mjs.map

package/dist/react/useDevWallet.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"useDevWallet.mjs","names":[],"sources":["../../src/react/useDevWallet.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { useEffect, useMemo, useRef, useState } from 'react';\n\nimport { mountDevWallet } from '../ui/mount.js';\nimport { DevWallet, type DevWalletConfig } from '../wallet/dev-wallet.js';\n\nexport interface UseDevWalletOptions extends DevWalletConfig {\n\t/** Whether to call adapter.initialize() automatically. Defaults to true. */\n\tautoInitialize?: boolean;\n\t/** Whether to create an initial account after initialization (if adapter supports it). Defaults to true. */\n\tcreateInitialAccount?: boolean;\n\t/** Whether to mount the floating wallet drawer UI. Defaults to true. */\n\tmountUI?: boolean;\n\t/** Container element for the UI drawer. Defaults to document.body. */\n\tcontainer?: HTMLElement;\n}\n\nexport interface UseDevWalletResult {\n\twallet: DevWallet | null;\n\t/** Initialization error, if any (e.g. IndexedDB quota exceeded, adapter failure). */\n\terror: Error | null;\n\t/** True while the wallet is being initialized. */\n\tloading: boolean;\n}\n\n/**\n * React hook that initializes a DevWallet, registers it with the wallet-standard\n * registry, and optionally mounts the wallet drawer UI.\n *\n * The adapters are captured on first render and used for the wallet's\n * lifetime. Pass stable references (created outside the component or via useMemo).\n *\n * @example\n * ```tsx\n * const adapters = useMemo(() => [new InMemorySignerAdapter()], []);\n *\n * const wallet = useDevWallet({ adapters, networks: { devnet: 'https://fullnode.devnet.sui.io:443' } });\n * ```\n */\nexport function useDevWallet(options: UseDevWalletOptions): UseDevWalletResult {\n\tconst [wallet, setWallet] = useState<DevWallet | null>(null);\n\tconst [error, setError] = useState<Error | null>(null);\n\tconst [loading, setLoading] = useState(true);\n\tconst optionsRef = useRef(options);\n\toptionsRef.current = options;\n\n\tuseEffect(() => {\n\t\tconst {\n\t\t\tautoInitialize = true,\n\t\t\tcreateInitialAccount = true,\n\t\t\tmountUI = true,\n\t\t\tcontainer,\n\t\t\t...walletConfig\n\t\t} = optionsRef.current;\n\n\t\tlet cancelled = false;\n\t\tlet unregister: (() => void) | undefined;\n\t\tlet unmountUI: (() => void) | undefined;\n\n\t\tlet devWallet: DevWallet;\n\t\ttry {\n\t\t\tdevWallet = new DevWallet(walletConfig);\n\t\t} catch (err) {\n\t\t\tsetError(err instanceof Error ? err : new Error(String(err)));\n\t\t\tsetLoading(false);\n\t\t\treturn;\n\t\t}\n\n\t\tasync function setup() {\n\t\t\tif (autoInitialize) {\n\t\t\t\tawait Promise.all(walletConfig.adapters.map((a) => a.initialize()));\n\t\t\t}\n\t\t\tif (cancelled) return;\n\n\t\t\tif (createInitialAccount) {\n\t\t\t\tconst hasAccounts = walletConfig.adapters.some((a) => a.getAccounts().length > 0);\n\t\t\t\tif (!hasAccounts) {\n\t\t\t\t\tconst creatableAdapter = walletConfig.adapters.find(\n\t\t\t\t\t\t(a) => a.createAccount && a.getAccounts().length === 0,\n\t\t\t\t\t);\n\t\t\t\t\tif (creatableAdapter?.createAccount) {\n\t\t\t\t\t\tawait creatableAdapter.createAccount({ label: 'Dev Account' });\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t}\n\t\t\tif (cancelled) return;\n\n\t\t\tunregister = devWallet.register();\n\n\t\t\tif (mountUI && typeof document !== 'undefined') {\n\t\t\t\tunmountUI = mountDevWallet(devWallet, { container });\n\t\t\t}\n\n\t\t\tif (!cancelled) {\n\t\t\t\tsetWallet(devWallet);\n\t\t\t\tsetLoading(false);\n\t\t\t}\n\t\t}\n\n\t\tsetup().catch((err) => {\n\t\t\tif (!cancelled) {\n\t\t\t\tsetError(err instanceof Error ? err : new Error(String(err)));\n\t\t\t\tsetLoading(false);\n\t\t\t}\n\t\t});\n\n\t\treturn () => {\n\t\t\tcancelled = true;\n\t\t\tunmountUI?.();\n\t\t\tunregister?.();\n\t\t\tdevWallet.destroy();\n\t\t};\n\t}, []); // eslint-disable-line react-hooks/exhaustive-deps\n\n\treturn useMemo(() => ({ wallet, error, loading }), [wallet, error, loading]);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;AAyCA,SAAgB,aAAa,SAAkD;CAC9E,MAAM,CAAC,QAAQ,aAAa,SAA2B,KAAK;CAC5D,MAAM,CAAC,OAAO,YAAY,SAAuB,KAAK;CACtD,MAAM,CAAC,SAAS,cAAc,SAAS,KAAK;CAC5C,MAAM,aAAa,OAAO,QAAQ;AAClC,YAAW,UAAU;AAErB,iBAAgB;EACf,MAAM,EACL,iBAAiB,MACjB,uBAAuB,MACvB,UAAU,MACV,WACA,GAAG,iBACA,WAAW;EAEf,IAAI,YAAY;EAChB,IAAI;EACJ,IAAI;EAEJ,IAAI;AACJ,MAAI;AACH,eAAY,IAAI,UAAU,aAAa;WAC/B,KAAK;AACb,YAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,IAAI,CAAC,CAAC;AAC7D,cAAW,MAAM;AACjB;;EAGD,eAAe,QAAQ;AACtB,OAAI,gBAAgB;AACnB,UAAM,QAAQ,IAAI,aAAa,SAAS,KAAK,MAAM,EAAE,YAAY,CAAC,CAAC;;AAEpE,OAAI,UAAW;AAEf,OAAI,sBAAsB;IACzB,MAAM,cAAc,aAAa,SAAS,MAAM,MAAM,EAAE,aAAa,CAAC,SAAS,EAAE;AACjF,QAAI,CAAC,aAAa;KACjB,MAAM,mBAAmB,aAAa,SAAS,MAC7C,MAAM,EAAE,iBAAiB,EAAE,aAAa,CAAC,WAAW,EACrD;AACD,SAAI,kBAAkB,eAAe;AACpC,YAAM,iBAAiB,cAAc,EAAE,OAAO,eAAe,CAAC;;;;AAIjE,OAAI,UAAW;AAEf,gBAAa,UAAU,UAAU;AAEjC,OAAI,WAAW,OAAO,aAAa,aAAa;AAC/C,gBAAY,eAAe,WAAW,EAAE,WAAW,CAAC;;AAGrD,OAAI,CAAC,WAAW;AACf,cAAU,UAAU;AACpB,eAAW,MAAM;;;AAInB,SAAO,CAAC,OAAO,QAAQ;AACtB,OAAI,CAAC,WAAW;AACf,aAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,IAAI,CAAC,CAAC;AAC7D,eAAW,MAAM;;IAEjB;AAEF,eAAa;AACZ,eAAY;AACZ,gBAAa;AACb,iBAAc;AACd,aAAU,SAAS;;IAElB,EAAE,CAAC;AAEN,QAAO,eAAe;EAAE;EAAQ;EAAO;EAAS,GAAG;EAAC;EAAQ;EAAO;EAAQ,CAAC"}

package/dist/server/cli-signing-middleware.d.mts

@@ -0,0 +1,22 @@
+import { Hono } from "hono";
+
+//#region src/server/cli-signing-middleware.d.ts
+interface CliSigningMiddlewareOptions {
+  /** The port the server is listening on, used for DNS rebinding protection. */
+  port: number;
+}
+interface CliSigningMiddlewareResult {
+  app: Hono;
+  token: string;
+}
+/**
+ * Create a Hono sub-app that exposes signing endpoints backed by the `sui` CLI.
+ *
+ * Uses token-in-URL auth: a 256-bit random token is embedded in the URL printed
+ * to the terminal and sent as `Authorization: Bearer <token>` on subsequent requests.
+ * All CLI calls use `execFile` to prevent shell injection.
+ */
+declare function createCliSigningMiddleware(options: CliSigningMiddlewareOptions): CliSigningMiddlewareResult;
+//#endregion
+export { CliSigningMiddlewareOptions, CliSigningMiddlewareResult, createCliSigningMiddleware };
+//# sourceMappingURL=cli-signing-middleware.d.mts.map

package/dist/server/cli-signing-middleware.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-signing-middleware.d.mts","names":[],"sources":["../../src/server/cli-signing-middleware.ts"],"mappings":";;;UAuBiB,2BAAA;;EAEhB,IAAA;AAAA;AAAA,UAGgB,0BAAA;EAChB,GAAA,EAAK,IAAA;EACL,KAAA;AAAA;;;;;;;;iBAUe,0BAAA,CACf,OAAA,EAAS,2BAAA,GACP,0BAAA"}

package/dist/server/cli-signing-middleware.mjs

@@ -0,0 +1,117 @@
+import { isValidSuiAddress } from "@mysten/sui/utils";
+import { execFile } from "node:child_process";
+import { randomBytes, timingSafeEqual } from "node:crypto";
+import { promisify } from "node:util";
+import { Hono } from "hono";
+
+//#region src/server/cli-signing-middleware.ts
+const execFileAsync = promisify(execFile);
+function isValidBase64(value) {
+	if (typeof value !== "string" || value.length === 0) return false;
+	return /^[A-Za-z0-9+/]+=*$/.test(value) && value.length <= 1e6;
+}
+const MAX_BODY_SIZE = 2 * 1024 * 1024;
+function generateToken() {
+	return randomBytes(32).toString("hex");
+}
+/**
+* Create a Hono sub-app that exposes signing endpoints backed by the `sui` CLI.
+*
+* Uses token-in-URL auth: a 256-bit random token is embedded in the URL printed
+* to the terminal and sent as `Authorization: Bearer <token>` on subsequent requests.
+* All CLI calls use `execFile` to prevent shell injection.
+*/
+function createCliSigningMiddleware(options) {
+	const { port } = options;
+	const token = generateToken();
+	function isAuthenticated(authHeader) {
+		if (!token) return false;
+		if (!authHeader || !/^bearer /i.test(authHeader)) return false;
+		const provided = authHeader.slice(7);
+		if (provided.length !== token.length) return false;
+		return timingSafeEqual(Buffer.from(provided), Buffer.from(token));
+	}
+	const app = new Hono();
+	app.use("*", async (c, next) => {
+		const host = c.req.header("host") ?? "";
+		const allowedHosts = new Set([
+			`localhost:${port}`,
+			`127.0.0.1:${port}`,
+			`[::1]:${port}`
+		]);
+		if (host && !allowedHosts.has(host)) {
+			return c.json({ error: "Requests must originate from localhost." }, 403);
+		}
+		return await next();
+	});
+	app.use("/api/*", async (c, next) => {
+		if (!isAuthenticated(c.req.header("authorization"))) {
+			return c.json({ error: "Authentication required. Open the token URL from the terminal." }, 401);
+		}
+		return await next();
+	});
+	app.get("/api/v1/accounts", async (c) => {
+		try {
+			const { stdout } = await execFileAsync("sui", [
+				"keytool",
+				"list",
+				"--json"
+			]);
+			const accounts = JSON.parse(stdout);
+			return c.json({ accounts });
+		} catch (err) {
+			const message = err instanceof Error ? err.message : String(err);
+			const isExecError = message.includes("ENOENT") || message.includes("not found");
+			return c.json({ error: isExecError ? "Failed to list accounts: sui CLI not found." : "Failed to list accounts." }, 500);
+		}
+	});
+	app.post("/api/v1/sign-transaction", async (c) => {
+		const contentLength = c.req.header("content-length");
+		if (contentLength && parseInt(contentLength, 10) > MAX_BODY_SIZE) {
+			return c.json({ error: "Request body too large" }, 413);
+		}
+		let body;
+		try {
+			body = await c.req.json();
+		} catch {
+			return c.json({ error: "Invalid JSON body" }, 400);
+		}
+		if (typeof body.address !== "string" || !isValidSuiAddress(body.address)) {
+			return c.json({ error: "Invalid address format. Expected 0x-prefixed hex." }, 400);
+		}
+		if (!isValidBase64(body.txBytes)) {
+			return c.json({ error: "Invalid txBytes. Expected non-empty base64 string." }, 400);
+		}
+		try {
+			const { stdout } = await execFileAsync("sui", [
+				"keytool",
+				"sign",
+				"--address",
+				body.address,
+				"--data",
+				body.txBytes,
+				"--json"
+			]);
+			const result = JSON.parse(stdout);
+			return c.json({
+				suiSignature: result.suiSignature,
+				digest: result.digest
+			});
+		} catch (err) {
+			const message = err instanceof Error ? err.message : String(err);
+			console.error("[dev-wallet] CLI signing error:", message);
+			if (message.includes("not found") || message.includes("Cannot find key")) {
+				return c.json({ error: `Address not found in keystore: ${body.address}` }, 404);
+			}
+			return c.json({ error: "Signing failed due to a CLI error." }, 500);
+		}
+	});
+	return {
+		app,
+		token
+	};
+}
+
+//#endregion
+export { createCliSigningMiddleware };
+//# sourceMappingURL=cli-signing-middleware.mjs.map

package/dist/server/cli-signing-middleware.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cli-signing-middleware.mjs","names":[],"sources":["../../src/server/cli-signing-middleware.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { execFile } from 'node:child_process';\nimport { randomBytes, timingSafeEqual } from 'node:crypto';\nimport { promisify } from 'node:util';\n\nimport { isValidSuiAddress } from '@mysten/sui/utils';\nimport { Hono } from 'hono';\n\nconst execFileAsync = promisify(execFile);\n\nfunction isValidBase64(value: unknown): value is string {\n\tif (typeof value !== 'string' || value.length === 0) return false;\n\treturn /^[A-Za-z0-9+/]+=*$/.test(value) && value.length <= 1_000_000;\n}\n\nconst MAX_BODY_SIZE = 2 * 1024 * 1024; // 2 MB\n\nfunction generateToken(): string {\n\treturn randomBytes(32).toString('hex');\n}\n\nexport interface CliSigningMiddlewareOptions {\n\t/** The port the server is listening on, used for DNS rebinding protection. */\n\tport: number;\n}\n\nexport interface CliSigningMiddlewareResult {\n\tapp: Hono;\n\ttoken: string;\n}\n\n/**\n * Create a Hono sub-app that exposes signing endpoints backed by the `sui` CLI.\n *\n * Uses token-in-URL auth: a 256-bit random token is embedded in the URL printed\n * to the terminal and sent as `Authorization: Bearer <token>` on subsequent requests.\n * All CLI calls use `execFile` to prevent shell injection.\n */\nexport function createCliSigningMiddleware(\n\toptions: CliSigningMiddlewareOptions,\n): CliSigningMiddlewareResult {\n\tconst { port } = options;\n\tconst token = generateToken();\n\n\tfunction isAuthenticated(authHeader: string | undefined): boolean {\n\t\tif (!token) return false;\n\t\tif (!authHeader || !/^bearer /i.test(authHeader)) return false;\n\t\tconst provided = authHeader.slice(7);\n\t\tif (provided.length !== token.length) return false;\n\t\treturn timingSafeEqual(Buffer.from(provided), Buffer.from(token));\n\t}\n\n\tconst app = new Hono();\n\n\t// DNS rebinding protection — reject non-localhost hosts\n\tapp.use('*', async (c, next) => {\n\t\tconst host = c.req.header('host') ?? '';\n\t\tconst allowedHosts = new Set([`localhost:${port}`, `127.0.0.1:${port}`, `[::1]:${port}`]);\n\t\tif (host && !allowedHosts.has(host)) {\n\t\t\treturn c.json({ error: 'Requests must originate from localhost.' }, 403);\n\t\t}\n\t\treturn await next();\n\t});\n\n\t// Token authentication for API routes\n\tapp.use('/api/*', async (c, next) => {\n\t\tif (!isAuthenticated(c.req.header('authorization'))) {\n\t\t\treturn c.json(\n\t\t\t\t{ error: 'Authentication required. Open the token URL from the terminal.' },\n\t\t\t\t401,\n\t\t\t);\n\t\t}\n\t\treturn await next();\n\t});\n\n\t// GET /api/v1/accounts — list accounts from sui CLI keystore\n\tapp.get('/api/v1/accounts', async (c) => {\n\t\ttry {\n\t\t\tconst { stdout } = await execFileAsync('sui', ['keytool', 'list', '--json']);\n\t\t\tconst accounts = JSON.parse(stdout);\n\t\t\treturn c.json({ accounts });\n\t\t} catch (err) {\n\t\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\t\tconst isExecError = message.includes('ENOENT') || message.includes('not found');\n\t\t\treturn c.json(\n\t\t\t\t{\n\t\t\t\t\terror: isExecError\n\t\t\t\t\t\t? 'Failed to list accounts: sui CLI not found.'\n\t\t\t\t\t\t: 'Failed to list accounts.',\n\t\t\t\t},\n\t\t\t\t500,\n\t\t\t);\n\t\t}\n\t});\n\n\t// POST /api/v1/sign-transaction — sign BCS-serialized TransactionData\n\tapp.post('/api/v1/sign-transaction', async (c) => {\n\t\tconst contentLength = c.req.header('content-length');\n\t\tif (contentLength && parseInt(contentLength, 10) > MAX_BODY_SIZE) {\n\t\t\treturn c.json({ error: 'Request body too large' }, 413);\n\t\t}\n\n\t\tlet body: { address?: unknown; txBytes?: unknown };\n\t\ttry {\n\t\t\tbody = await c.req.json();\n\t\t} catch {\n\t\t\treturn c.json({ error: 'Invalid JSON body' }, 400);\n\t\t}\n\n\t\tif (typeof body.address !== 'string' || !isValidSuiAddress(body.address)) {\n\t\t\treturn c.json({ error: 'Invalid address format. Expected 0x-prefixed hex.' }, 400);\n\t\t}\n\n\t\tif (!isValidBase64(body.txBytes)) {\n\t\t\treturn c.json({ error: 'Invalid txBytes. Expected non-empty base64 string.' }, 400);\n\t\t}\n\n\t\ttry {\n\t\t\tconst { stdout } = await execFileAsync('sui', [\n\t\t\t\t'keytool',\n\t\t\t\t'sign',\n\t\t\t\t'--address',\n\t\t\t\tbody.address,\n\t\t\t\t'--data',\n\t\t\t\tbody.txBytes as string,\n\t\t\t\t'--json',\n\t\t\t]);\n\n\t\t\tconst result = JSON.parse(stdout);\n\t\t\treturn c.json({ suiSignature: result.suiSignature, digest: result.digest });\n\t\t} catch (err) {\n\t\t\tconst message = err instanceof Error ? err.message : String(err);\n\t\t\tconsole.error('[dev-wallet] CLI signing error:', message);\n\n\t\t\tif (message.includes('not found') || message.includes('Cannot find key')) {\n\t\t\t\treturn c.json({ error: `Address not found in keystore: ${body.address}` }, 404);\n\t\t\t}\n\n\t\t\treturn c.json({ error: 'Signing failed due to a CLI error.' }, 500);\n\t\t}\n\t});\n\n\treturn { app, token };\n}\n"],"mappings":";;;;;;;AAUA,MAAM,gBAAgB,UAAU,SAAS;AAEzC,SAAS,cAAc,OAAiC;AACvD,KAAI,OAAO,UAAU,YAAY,MAAM,WAAW,EAAG,QAAO;AAC5D,QAAO,qBAAqB,KAAK,MAAM,IAAI,MAAM,UAAU;;AAG5D,MAAM,gBAAgB,IAAI,OAAO;AAEjC,SAAS,gBAAwB;AAChC,QAAO,YAAY,GAAG,CAAC,SAAS,MAAM;;;;;;;;;AAoBvC,SAAgB,2BACf,SAC6B;CAC7B,MAAM,EAAE,SAAS;CACjB,MAAM,QAAQ,eAAe;CAE7B,SAAS,gBAAgB,YAAyC;AACjE,MAAI,CAAC,MAAO,QAAO;AACnB,MAAI,CAAC,cAAc,CAAC,YAAY,KAAK,WAAW,CAAE,QAAO;EACzD,MAAM,WAAW,WAAW,MAAM,EAAE;AACpC,MAAI,SAAS,WAAW,MAAM,OAAQ,QAAO;AAC7C,SAAO,gBAAgB,OAAO,KAAK,SAAS,EAAE,OAAO,KAAK,MAAM,CAAC;;CAGlE,MAAM,MAAM,IAAI,MAAM;AAGtB,KAAI,IAAI,KAAK,OAAO,GAAG,SAAS;EAC/B,MAAM,OAAO,EAAE,IAAI,OAAO,OAAO,IAAI;EACrC,MAAM,eAAe,IAAI,IAAI;GAAC,aAAa;GAAQ,aAAa;GAAQ,SAAS;GAAO,CAAC;AACzF,MAAI,QAAQ,CAAC,aAAa,IAAI,KAAK,EAAE;AACpC,UAAO,EAAE,KAAK,EAAE,OAAO,2CAA2C,EAAE,IAAI;;AAEzE,SAAO,MAAM,MAAM;GAClB;AAGF,KAAI,IAAI,UAAU,OAAO,GAAG,SAAS;AACpC,MAAI,CAAC,gBAAgB,EAAE,IAAI,OAAO,gBAAgB,CAAC,EAAE;AACpD,UAAO,EAAE,KACR,EAAE,OAAO,kEAAkE,EAC3E,IACA;;AAEF,SAAO,MAAM,MAAM;GAClB;AAGF,KAAI,IAAI,oBAAoB,OAAO,MAAM;AACxC,MAAI;GACH,MAAM,EAAE,WAAW,MAAM,cAAc,OAAO;IAAC;IAAW;IAAQ;IAAS,CAAC;GAC5E,MAAM,WAAW,KAAK,MAAM,OAAO;AACnC,UAAO,EAAE,KAAK,EAAE,UAAU,CAAC;WACnB,KAAK;GACb,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;GAChE,MAAM,cAAc,QAAQ,SAAS,SAAS,IAAI,QAAQ,SAAS,YAAY;AAC/E,UAAO,EAAE,KACR,EACC,OAAO,cACJ,gDACA,4BACH,EACD,IACA;;GAED;AAGF,KAAI,KAAK,4BAA4B,OAAO,MAAM;EACjD,MAAM,gBAAgB,EAAE,IAAI,OAAO,iBAAiB;AACpD,MAAI,iBAAiB,SAAS,eAAe,GAAG,GAAG,eAAe;AACjE,UAAO,EAAE,KAAK,EAAE,OAAO,0BAA0B,EAAE,IAAI;;EAGxD,IAAI;AACJ,MAAI;AACH,UAAO,MAAM,EAAE,IAAI,MAAM;UAClB;AACP,UAAO,EAAE,KAAK,EAAE,OAAO,qBAAqB,EAAE,IAAI;;AAGnD,MAAI,OAAO,KAAK,YAAY,YAAY,CAAC,kBAAkB,KAAK,QAAQ,EAAE;AACzE,UAAO,EAAE,KAAK,EAAE,OAAO,qDAAqD,EAAE,IAAI;;AAGnF,MAAI,CAAC,cAAc,KAAK,QAAQ,EAAE;AACjC,UAAO,EAAE,KAAK,EAAE,OAAO,sDAAsD,EAAE,IAAI;;AAGpF,MAAI;GACH,MAAM,EAAE,WAAW,MAAM,cAAc,OAAO;IAC7C;IACA;IACA;IACA,KAAK;IACL;IACA,KAAK;IACL;IACA,CAAC;GAEF,MAAM,SAAS,KAAK,MAAM,OAAO;AACjC,UAAO,EAAE,KAAK;IAAE,cAAc,OAAO;IAAc,QAAQ,OAAO;IAAQ,CAAC;WACnE,KAAK;GACb,MAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,IAAI;AAChE,WAAQ,MAAM,mCAAmC,QAAQ;AAEzD,OAAI,QAAQ,SAAS,YAAY,IAAI,QAAQ,SAAS,kBAAkB,EAAE;AACzE,WAAO,EAAE,KAAK,EAAE,OAAO,kCAAkC,KAAK,WAAW,EAAE,IAAI;;AAGhF,UAAO,EAAE,KAAK,EAAE,OAAO,sCAAsC,EAAE,IAAI;;GAEnE;AAEF,QAAO;EAAE;EAAK;EAAO"}

package/dist/server/index.d.mts

@@ -0,0 +1,2 @@
+import { CliSigningMiddlewareOptions, CliSigningMiddlewareResult, createCliSigningMiddleware } from "./cli-signing-middleware.mjs";
+export { type CliSigningMiddlewareOptions, type CliSigningMiddlewareResult, createCliSigningMiddleware };

package/dist/server/index.mjs

@@ -0,0 +1,3 @@
+import { createCliSigningMiddleware } from "./cli-signing-middleware.mjs";
+
+export { createCliSigningMiddleware };