@mysten/sui 1.45.2 → 2.0.0

package/dist/utils/move-registry.mjs

@@ -0,0 +1,32 @@
+import { isValidSuiNSName } from "./suins.mjs";
+
+//#region src/utils/move-registry.ts
+/** The pattern to find an optionally versioned name */
+const NAME_PATTERN = /^([a-z0-9]+(?:-[a-z0-9]+)*)$/;
+/** The pattern for a valid version number */
+const VERSION_REGEX = /^\d+$/;
+/** The maximum size for an app */
+const MAX_APP_SIZE = 64;
+/** The separator for the name */
+const NAME_SEPARATOR = "/";
+const isValidNamedPackage = (name) => {
+	const parts = name.split(NAME_SEPARATOR);
+	if (parts.length < 2 || parts.length > 3) return false;
+	const [org, app, version] = parts;
+	if (version !== void 0 && !VERSION_REGEX.test(version)) return false;
+	if (!isValidSuiNSName(org)) return false;
+	return NAME_PATTERN.test(app) && app.length < MAX_APP_SIZE;
+};
+/**
+* Checks if a type contains valid named packages.
+* This DOES NOT check if the type is a valid Move type.
+*/
+const isValidNamedType = (type) => {
+	const splitType = type.split(/::|<|>|,/);
+	for (const t of splitType) if (t.includes(NAME_SEPARATOR) && !isValidNamedPackage(t)) return false;
+	return true;
+};
+
+//#endregion
+export { isValidNamedPackage, isValidNamedType };
+//# sourceMappingURL=move-registry.mjs.map

package/dist/utils/move-registry.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"move-registry.mjs","names":[],"sources":["../../src/utils/move-registry.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { isValidSuiNSName } from './suins.js';\n\n/** The pattern to find an optionally versioned name */\nconst NAME_PATTERN = /^([a-z0-9]+(?:-[a-z0-9]+)*)$/;\n/** The pattern for a valid version number */\nconst VERSION_REGEX = /^\\d+$/;\n/** The maximum size for an app */\nconst MAX_APP_SIZE = 64;\n/** The separator for the name */\nconst NAME_SEPARATOR = '/';\n\nexport const isValidNamedPackage = (name: string): boolean => {\n\tconst parts = name.split(NAME_SEPARATOR);\n\t// The name has to have 2 parts (without-version), or 3 parts (with version).\n\tif (parts.length < 2 || parts.length > 3) return false;\n\n\tconst [org, app, version] = parts; // split by {org} {app} {optional version}\n\n\t// If the version exists, it must be a number.\n\tif (version !== undefined && !VERSION_REGEX.test(version)) return false;\n\t// Check if the org is a valid SuiNS name.\n\tif (!isValidSuiNSName(org)) return false;\n\n\t// Check if the app is a valid name.\n\treturn NAME_PATTERN.test(app) && app.length < MAX_APP_SIZE;\n};\n\n/**\n * Checks if a type contains valid named packages.\n * This DOES NOT check if the type is a valid Move type.\n */\nexport const isValidNamedType = (type: string): boolean => {\n\t// split our type by all possible type delimeters.\n\tconst splitType = type.split(/::|<|>|,/);\n\tfor (const t of splitType) {\n\t\tif (t.includes(NAME_SEPARATOR) && !isValidNamedPackage(t)) return false;\n\t}\n\t// TODO: Add `isValidStructTag` check once it's introduced.\n\treturn true;\n};\n"],"mappings":";;;;AAMA,MAAM,eAAe;;AAErB,MAAM,gBAAgB;;AAEtB,MAAM,eAAe;;AAErB,MAAM,iBAAiB;AAEvB,MAAa,uBAAuB,SAA0B;CAC7D,MAAM,QAAQ,KAAK,MAAM,eAAe;AAExC,KAAI,MAAM,SAAS,KAAK,MAAM,SAAS,EAAG,QAAO;CAEjD,MAAM,CAAC,KAAK,KAAK,WAAW;AAG5B,KAAI,YAAY,UAAa,CAAC,cAAc,KAAK,QAAQ,CAAE,QAAO;AAElE,KAAI,CAAC,iBAAiB,IAAI,CAAE,QAAO;AAGnC,QAAO,aAAa,KAAK,IAAI,IAAI,IAAI,SAAS;;;;;;AAO/C,MAAa,oBAAoB,SAA0B;CAE1D,MAAM,YAAY,KAAK,MAAM,WAAW;AACxC,MAAK,MAAM,KAAK,UACf,KAAI,EAAE,SAAS,eAAe,IAAI,CAAC,oBAAoB,EAAE,CAAE,QAAO;AAGnE,QAAO"}

package/dist/utils/sui-types.d.mts

@@ -0,0 +1,30 @@
+//#region src/utils/sui-types.d.ts
+/** Returns whether the tx digest is valid based on the serialization format */
+declare function isValidTransactionDigest(value: string): value is string;
+declare const SUI_ADDRESS_LENGTH = 32;
+declare function isValidSuiAddress(value: string): value is string;
+declare function isValidSuiObjectId(value: string): boolean;
+type StructTag = {
+  address: string;
+  module: string;
+  name: string;
+  typeParams: (string | StructTag)[];
+};
+declare function parseStructTag(type: string): StructTag;
+declare function normalizeStructTag(type: string | StructTag): string;
+/**
+ * Perform the following operations:
+ * 1. Make the address lower case
+ * 2. Prepend `0x` if the string does not start with `0x`.
+ * 3. Add more zeros if the length of the address(excluding `0x`) is less than `SUI_ADDRESS_LENGTH`
+ *
+ * WARNING: if the address value itself starts with `0x`, e.g., `0x0x`, the default behavior
+ * is to treat the first `0x` not as part of the address. The default behavior can be overridden by
+ * setting `forceAdd0x` to true
+ *
+ */
+declare function normalizeSuiAddress(value: string, forceAdd0x?: boolean): string;
+declare function normalizeSuiObjectId(value: string, forceAdd0x?: boolean): string;
+//#endregion
+export { SUI_ADDRESS_LENGTH, isValidSuiAddress, isValidSuiObjectId, isValidTransactionDigest, normalizeStructTag, normalizeSuiAddress, normalizeSuiObjectId, parseStructTag };
+//# sourceMappingURL=sui-types.d.mts.map

package/dist/utils/sui-types.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sui-types.d.mts","names":[],"sources":["../../src/utils/sui-types.ts"],"sourcesContent":[],"mappings":";;AAUgB,iBAAA,wBAAA,CAAwB,KAAA,EAAA,MAAA,CAAA,EAAA,KAAA,IAAA,MAAA;AAe3B,cAAA,kBAAA,GAAkB,EAAA;AACf,iBAAA,iBAAA,CAAiB,KAAA,EAAA,MAAA,CAAA,EAAA,KAAA,IAAA,MAAA;AAIjB,iBAAA,kBAAA,CAAkB,KAAA,EAAA,MAAA,CAAA,EAAA,OAAA;AAItB,KAAA,SAAA,GAAS;EAaL,OAAA,EAAA,MAAA;EA0BA,MAAA,EAAA,MAAA;EA2BA,IAAA,EAAA,MAAA;EAQA,UAAA,EAAA,CAAA,MAAA,GAtEO,SAsEa,CAAA,EAAA;;iBA7DpB,cAAA,gBAA8B;iBA0B9B,kBAAA,gBAAkC;;;;;;;;;;;;iBA2BlC,mBAAA;iBAQA,oBAAA"}

package/dist/utils/sui-types.mjs

@@ -0,0 +1,72 @@
+import { isValidNamedPackage } from "./move-registry.mjs";
+import { fromBase58, splitGenericParameters } from "@mysten/bcs";
+
+//#region src/utils/sui-types.ts
+const TX_DIGEST_LENGTH = 32;
+/** Returns whether the tx digest is valid based on the serialization format */
+function isValidTransactionDigest(value) {
+	try {
+		return fromBase58(value).length === TX_DIGEST_LENGTH;
+	} catch {
+		return false;
+	}
+}
+const SUI_ADDRESS_LENGTH = 32;
+function isValidSuiAddress(value) {
+	return isHex(value) && getHexByteLength(value) === SUI_ADDRESS_LENGTH;
+}
+function isValidSuiObjectId(value) {
+	return isValidSuiAddress(value);
+}
+function parseTypeTag(type) {
+	if (!type.includes("::")) return type;
+	return parseStructTag(type);
+}
+function parseStructTag(type) {
+	const parts = type.split("::");
+	if (parts.length < 3) throw new Error(`Invalid struct tag: ${type}`);
+	const [address, module] = parts;
+	const isMvrPackage = isValidNamedPackage(address);
+	const rest = type.slice(address.length + module.length + 4);
+	const name = rest.includes("<") ? rest.slice(0, rest.indexOf("<")) : rest;
+	const typeParams = rest.includes("<") ? splitGenericParameters(rest.slice(rest.indexOf("<") + 1, rest.lastIndexOf(">"))).map((typeParam) => parseTypeTag(typeParam.trim())) : [];
+	return {
+		address: isMvrPackage ? address : normalizeSuiAddress(address),
+		module,
+		name,
+		typeParams
+	};
+}
+function normalizeStructTag(type) {
+	const { address, module, name, typeParams } = typeof type === "string" ? parseStructTag(type) : type;
+	return `${address}::${module}::${name}${typeParams?.length > 0 ? `<${typeParams.map((typeParam) => typeof typeParam === "string" ? typeParam : normalizeStructTag(typeParam)).join(",")}>` : ""}`;
+}
+/**
+* Perform the following operations:
+* 1. Make the address lower case
+* 2. Prepend `0x` if the string does not start with `0x`.
+* 3. Add more zeros if the length of the address(excluding `0x`) is less than `SUI_ADDRESS_LENGTH`
+*
+* WARNING: if the address value itself starts with `0x`, e.g., `0x0x`, the default behavior
+* is to treat the first `0x` not as part of the address. The default behavior can be overridden by
+* setting `forceAdd0x` to true
+*
+*/
+function normalizeSuiAddress(value, forceAdd0x = false) {
+	let address = value.toLowerCase();
+	if (!forceAdd0x && address.startsWith("0x")) address = address.slice(2);
+	return `0x${address.padStart(SUI_ADDRESS_LENGTH * 2, "0")}`;
+}
+function normalizeSuiObjectId(value, forceAdd0x = false) {
+	return normalizeSuiAddress(value, forceAdd0x);
+}
+function isHex(value) {
+	return /^(0x|0X)?[a-fA-F0-9]+$/.test(value) && value.length % 2 === 0;
+}
+function getHexByteLength(value) {
+	return /^(0x|0X)/.test(value) ? (value.length - 2) / 2 : value.length / 2;
+}
+
+//#endregion
+export { SUI_ADDRESS_LENGTH, isValidSuiAddress, isValidSuiObjectId, isValidTransactionDigest, normalizeStructTag, normalizeSuiAddress, normalizeSuiObjectId, parseStructTag };
+//# sourceMappingURL=sui-types.mjs.map

package/dist/utils/sui-types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"sui-types.mjs","names":[],"sources":["../../src/utils/sui-types.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { fromBase58, splitGenericParameters } from '@mysten/bcs';\n\nimport { isValidNamedPackage } from './move-registry.js';\n\nconst TX_DIGEST_LENGTH = 32;\n\n/** Returns whether the tx digest is valid based on the serialization format */\nexport function isValidTransactionDigest(value: string): value is string {\n\ttry {\n\t\tconst buffer = fromBase58(value);\n\t\treturn buffer.length === TX_DIGEST_LENGTH;\n\t} catch {\n\t\treturn false;\n\t}\n}\n\n// TODO - can we automatically sync this with rust length definition?\n// Source of truth is\n// https://github.com/MystenLabs/sui/blob/acb2b97ae21f47600e05b0d28127d88d0725561d/crates/sui-types/src/base_types.rs#L67\n// which uses the Move account address length\n// https://github.com/move-language/move/blob/67ec40dc50c66c34fd73512fcc412f3b68d67235/language/move-core/types/src/account_address.rs#L23 .\n\nexport const SUI_ADDRESS_LENGTH = 32;\nexport function isValidSuiAddress(value: string): value is string {\n\treturn isHex(value) && getHexByteLength(value) === SUI_ADDRESS_LENGTH;\n}\n\nexport function isValidSuiObjectId(value: string): boolean {\n\treturn isValidSuiAddress(value);\n}\n\nexport type StructTag = {\n\taddress: string;\n\tmodule: string;\n\tname: string;\n\ttypeParams: (string | StructTag)[];\n};\n\nfunction parseTypeTag(type: string): string | StructTag {\n\tif (!type.includes('::')) return type;\n\n\treturn parseStructTag(type);\n}\n\nexport function parseStructTag(type: string): StructTag {\n\tconst parts = type.split('::');\n\n\tif (parts.length < 3) {\n\t\tthrow new Error(`Invalid struct tag: ${type}`);\n\t}\n\n\tconst [address, module] = parts;\n\tconst isMvrPackage = isValidNamedPackage(address);\n\n\tconst rest = type.slice(address.length + module.length + 4);\n\tconst name = rest.includes('<') ? rest.slice(0, rest.indexOf('<')) : rest;\n\tconst typeParams = rest.includes('<')\n\t\t? splitGenericParameters(rest.slice(rest.indexOf('<') + 1, rest.lastIndexOf('>'))).map(\n\t\t\t\t(typeParam) => parseTypeTag(typeParam.trim()),\n\t\t\t)\n\t\t: [];\n\n\treturn {\n\t\taddress: isMvrPackage ? address : normalizeSuiAddress(address),\n\t\tmodule,\n\t\tname,\n\t\ttypeParams,\n\t};\n}\n\nexport function normalizeStructTag(type: string | StructTag): string {\n\tconst { address, module, name, typeParams } =\n\t\ttypeof type === 'string' ? parseStructTag(type) : type;\n\n\tconst formattedTypeParams =\n\t\ttypeParams?.length > 0\n\t\t\t? `<${typeParams\n\t\t\t\t\t.map((typeParam) =>\n\t\t\t\t\t\ttypeof typeParam === 'string' ? typeParam : normalizeStructTag(typeParam),\n\t\t\t\t\t)\n\t\t\t\t\t.join(',')}>`\n\t\t\t: '';\n\n\treturn `${address}::${module}::${name}${formattedTypeParams}`;\n}\n\n/**\n * Perform the following operations:\n * 1. Make the address lower case\n * 2. Prepend `0x` if the string does not start with `0x`.\n * 3. Add more zeros if the length of the address(excluding `0x`) is less than `SUI_ADDRESS_LENGTH`\n *\n * WARNING: if the address value itself starts with `0x`, e.g., `0x0x`, the default behavior\n * is to treat the first `0x` not as part of the address. The default behavior can be overridden by\n * setting `forceAdd0x` to true\n *\n */\nexport function normalizeSuiAddress(value: string, forceAdd0x: boolean = false): string {\n\tlet address = value.toLowerCase();\n\tif (!forceAdd0x && address.startsWith('0x')) {\n\t\taddress = address.slice(2);\n\t}\n\treturn `0x${address.padStart(SUI_ADDRESS_LENGTH * 2, '0')}`;\n}\n\nexport function normalizeSuiObjectId(value: string, forceAdd0x: boolean = false): string {\n\treturn normalizeSuiAddress(value, forceAdd0x);\n}\n\nfunction isHex(value: string): boolean {\n\treturn /^(0x|0X)?[a-fA-F0-9]+$/.test(value) && value.length % 2 === 0;\n}\n\nfunction getHexByteLength(value: string): number {\n\treturn /^(0x|0X)/.test(value) ? (value.length - 2) / 2 : value.length / 2;\n}\n"],"mappings":";;;;AAOA,MAAM,mBAAmB;;AAGzB,SAAgB,yBAAyB,OAAgC;AACxE,KAAI;AAEH,SADe,WAAW,MAAM,CAClB,WAAW;SAClB;AACP,SAAO;;;AAUT,MAAa,qBAAqB;AAClC,SAAgB,kBAAkB,OAAgC;AACjE,QAAO,MAAM,MAAM,IAAI,iBAAiB,MAAM,KAAK;;AAGpD,SAAgB,mBAAmB,OAAwB;AAC1D,QAAO,kBAAkB,MAAM;;AAUhC,SAAS,aAAa,MAAkC;AACvD,KAAI,CAAC,KAAK,SAAS,KAAK,CAAE,QAAO;AAEjC,QAAO,eAAe,KAAK;;AAG5B,SAAgB,eAAe,MAAyB;CACvD,MAAM,QAAQ,KAAK,MAAM,KAAK;AAE9B,KAAI,MAAM,SAAS,EAClB,OAAM,IAAI,MAAM,uBAAuB,OAAO;CAG/C,MAAM,CAAC,SAAS,UAAU;CAC1B,MAAM,eAAe,oBAAoB,QAAQ;CAEjD,MAAM,OAAO,KAAK,MAAM,QAAQ,SAAS,OAAO,SAAS,EAAE;CAC3D,MAAM,OAAO,KAAK,SAAS,IAAI,GAAG,KAAK,MAAM,GAAG,KAAK,QAAQ,IAAI,CAAC,GAAG;CACrE,MAAM,aAAa,KAAK,SAAS,IAAI,GAClC,uBAAuB,KAAK,MAAM,KAAK,QAAQ,IAAI,GAAG,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAChF,cAAc,aAAa,UAAU,MAAM,CAAC,CAC7C,GACA,EAAE;AAEL,QAAO;EACN,SAAS,eAAe,UAAU,oBAAoB,QAAQ;EAC9D;EACA;EACA;EACA;;AAGF,SAAgB,mBAAmB,MAAkC;CACpE,MAAM,EAAE,SAAS,QAAQ,MAAM,eAC9B,OAAO,SAAS,WAAW,eAAe,KAAK,GAAG;AAWnD,QAAO,GAAG,QAAQ,IAAI,OAAO,IAAI,OARhC,YAAY,SAAS,IAClB,IAAI,WACH,KAAK,cACL,OAAO,cAAc,WAAW,YAAY,mBAAmB,UAAU,CACzE,CACA,KAAK,IAAI,CAAC,KACX;;;;;;;;;;;;;AAgBL,SAAgB,oBAAoB,OAAe,aAAsB,OAAe;CACvF,IAAI,UAAU,MAAM,aAAa;AACjC,KAAI,CAAC,cAAc,QAAQ,WAAW,KAAK,CAC1C,WAAU,QAAQ,MAAM,EAAE;AAE3B,QAAO,KAAK,QAAQ,SAAS,qBAAqB,GAAG,IAAI;;AAG1D,SAAgB,qBAAqB,OAAe,aAAsB,OAAe;AACxF,QAAO,oBAAoB,OAAO,WAAW;;AAG9C,SAAS,MAAM,OAAwB;AACtC,QAAO,yBAAyB,KAAK,MAAM,IAAI,MAAM,SAAS,MAAM;;AAGrE,SAAS,iBAAiB,OAAuB;AAChD,QAAO,WAAW,KAAK,MAAM,IAAI,MAAM,SAAS,KAAK,IAAI,MAAM,SAAS"}

package/dist/utils/suins.d.mts

@@ -0,0 +1,6 @@
+//#region src/utils/suins.d.ts
+declare function isValidSuiNSName(name: string): boolean;
+declare function normalizeSuiNSName(name: string, format?: 'at' | 'dot'): string;
+//#endregion
+export { isValidSuiNSName, normalizeSuiNSName };
+//# sourceMappingURL=suins.d.mts.map

package/dist/utils/suins.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"suins.d.mts","names":[],"sources":["../../src/utils/suins.ts"],"sourcesContent":[],"mappings":";iBAQgB,gBAAA;AAAA,iBAYA,kBAAA,CAZgB,IAAA,EAAA,MAAA,EAAA,MAAA,CAAA,EAAA,IAAA,GAAA,KAAA,CAAA,EAAA,MAAA"}

package/dist/utils/suins.mjs

@@ -0,0 +1,27 @@
+//#region src/utils/suins.ts
+const SUI_NS_NAME_REGEX = /^(?!.*(^(?!@)|[-.@])($|[-.@]))(?:[a-z0-9-]{0,63}(?:\.[a-z0-9-]{0,63})*)?@[a-z0-9-]{0,63}$/i;
+const SUI_NS_DOMAIN_REGEX = /^(?!.*(^|[-.])($|[-.]))(?:[a-z0-9-]{0,63}\.)+sui$/i;
+const MAX_SUI_NS_NAME_LENGTH = 235;
+function isValidSuiNSName(name) {
+	if (name.length > MAX_SUI_NS_NAME_LENGTH) return false;
+	if (name.includes("@")) return SUI_NS_NAME_REGEX.test(name);
+	return SUI_NS_DOMAIN_REGEX.test(name);
+}
+function normalizeSuiNSName(name, format = "at") {
+	const lowerCase = name.toLowerCase();
+	let parts;
+	if (lowerCase.includes("@")) {
+		if (!SUI_NS_NAME_REGEX.test(lowerCase)) throw new Error(`Invalid SuiNS name ${name}`);
+		const [labels, domain] = lowerCase.split("@");
+		parts = [...labels ? labels.split(".") : [], domain];
+	} else {
+		if (!SUI_NS_DOMAIN_REGEX.test(lowerCase)) throw new Error(`Invalid SuiNS name ${name}`);
+		parts = lowerCase.split(".").slice(0, -1);
+	}
+	if (format === "dot") return `${parts.join(".")}.sui`;
+	return `${parts.slice(0, -1).join(".")}@${parts[parts.length - 1]}`;
+}
+
+//#endregion
+export { isValidSuiNSName, normalizeSuiNSName };
+//# sourceMappingURL=suins.mjs.map

package/dist/utils/suins.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"suins.mjs","names":[],"sources":["../../src/utils/suins.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nconst SUI_NS_NAME_REGEX =\n\t/^(?!.*(^(?!@)|[-.@])($|[-.@]))(?:[a-z0-9-]{0,63}(?:\\.[a-z0-9-]{0,63})*)?@[a-z0-9-]{0,63}$/i;\nconst SUI_NS_DOMAIN_REGEX = /^(?!.*(^|[-.])($|[-.]))(?:[a-z0-9-]{0,63}\\.)+sui$/i;\nconst MAX_SUI_NS_NAME_LENGTH = 235;\n\nexport function isValidSuiNSName(name: string): boolean {\n\tif (name.length > MAX_SUI_NS_NAME_LENGTH) {\n\t\treturn false;\n\t}\n\n\tif (name.includes('@')) {\n\t\treturn SUI_NS_NAME_REGEX.test(name);\n\t}\n\n\treturn SUI_NS_DOMAIN_REGEX.test(name);\n}\n\nexport function normalizeSuiNSName(name: string, format: 'at' | 'dot' = 'at'): string {\n\tconst lowerCase = name.toLowerCase();\n\tlet parts;\n\n\tif (lowerCase.includes('@')) {\n\t\tif (!SUI_NS_NAME_REGEX.test(lowerCase)) {\n\t\t\tthrow new Error(`Invalid SuiNS name ${name}`);\n\t\t}\n\t\tconst [labels, domain] = lowerCase.split('@');\n\t\tparts = [...(labels ? labels.split('.') : []), domain];\n\t} else {\n\t\tif (!SUI_NS_DOMAIN_REGEX.test(lowerCase)) {\n\t\t\tthrow new Error(`Invalid SuiNS name ${name}`);\n\t\t}\n\t\tparts = lowerCase.split('.').slice(0, -1);\n\t}\n\n\tif (format === 'dot') {\n\t\treturn `${parts.join('.')}.sui`;\n\t}\n\n\treturn `${parts.slice(0, -1).join('.')}@${parts[parts.length - 1]}`;\n}\n"],"mappings":";AAGA,MAAM,oBACL;AACD,MAAM,sBAAsB;AAC5B,MAAM,yBAAyB;AAE/B,SAAgB,iBAAiB,MAAuB;AACvD,KAAI,KAAK,SAAS,uBACjB,QAAO;AAGR,KAAI,KAAK,SAAS,IAAI,CACrB,QAAO,kBAAkB,KAAK,KAAK;AAGpC,QAAO,oBAAoB,KAAK,KAAK;;AAGtC,SAAgB,mBAAmB,MAAc,SAAuB,MAAc;CACrF,MAAM,YAAY,KAAK,aAAa;CACpC,IAAI;AAEJ,KAAI,UAAU,SAAS,IAAI,EAAE;AAC5B,MAAI,CAAC,kBAAkB,KAAK,UAAU,CACrC,OAAM,IAAI,MAAM,sBAAsB,OAAO;EAE9C,MAAM,CAAC,QAAQ,UAAU,UAAU,MAAM,IAAI;AAC7C,UAAQ,CAAC,GAAI,SAAS,OAAO,MAAM,IAAI,GAAG,EAAE,EAAG,OAAO;QAChD;AACN,MAAI,CAAC,oBAAoB,KAAK,UAAU,CACvC,OAAM,IAAI,MAAM,sBAAsB,OAAO;AAE9C,UAAQ,UAAU,MAAM,IAAI,CAAC,MAAM,GAAG,GAAG;;AAG1C,KAAI,WAAW,MACd,QAAO,GAAG,MAAM,KAAK,IAAI,CAAC;AAG3B,QAAO,GAAG,MAAM,MAAM,GAAG,GAAG,CAAC,KAAK,IAAI,CAAC,GAAG,MAAM,MAAM,SAAS"}

package/dist/verify/index.d.mts

@@ -0,0 +1,2 @@
+import { publicKeyFromRawBytes, publicKeyFromSuiBytes, verifyPersonalMessageSignature, verifySignature, verifyTransactionSignature } from "./verify.mjs";
+export { publicKeyFromRawBytes, publicKeyFromSuiBytes, verifyPersonalMessageSignature, verifySignature, verifyTransactionSignature };

package/dist/verify/index.mjs

@@ -0,0 +1,3 @@
+import { publicKeyFromRawBytes, publicKeyFromSuiBytes, verifyPersonalMessageSignature, verifySignature, verifyTransactionSignature } from "./verify.mjs";
+
+export { publicKeyFromRawBytes, publicKeyFromSuiBytes, verifyPersonalMessageSignature, verifySignature, verifyTransactionSignature };

package/dist/verify/verify.d.mts

@@ -0,0 +1,28 @@
+import { PublicKey } from "../cryptography/publickey.mjs";
+import { SignatureScheme } from "../cryptography/signature-scheme.mjs";
+import "../cryptography/index.mjs";
+import { ClientWithCoreApi } from "../client/core.mjs";
+
+//#region src/verify/verify.d.ts
+declare function verifySignature(bytes: Uint8Array, signature: string, options?: {
+  address?: string;
+}): Promise<PublicKey>;
+declare function verifyPersonalMessageSignature(message: Uint8Array, signature: string, options?: {
+  client?: ClientWithCoreApi;
+  address?: string;
+}): Promise<PublicKey>;
+declare function verifyTransactionSignature(transaction: Uint8Array, signature: string, options?: {
+  client?: ClientWithCoreApi;
+  address?: string;
+}): Promise<PublicKey>;
+declare function publicKeyFromRawBytes(signatureScheme: SignatureScheme, bytes: Uint8Array, options?: {
+  client?: ClientWithCoreApi;
+  address?: string;
+}): PublicKey;
+declare function publicKeyFromSuiBytes(publicKey: string | Uint8Array, options?: {
+  client?: ClientWithCoreApi;
+  address?: string;
+}): PublicKey;
+//#endregion
+export { publicKeyFromRawBytes, publicKeyFromSuiBytes, verifyPersonalMessageSignature, verifySignature, verifyTransactionSignature };
+//# sourceMappingURL=verify.d.mts.map

package/dist/verify/verify.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.d.mts","names":[],"sources":["../../src/verify/verify.ts"],"sourcesContent":[],"mappings":";;;;;;iBAesB,eAAA,QACd;;IAKL,QAAQ;iBAcW,8BAAA,UACZ,sCAfC;EANW,MAAA,CAAA,EAuBD,iBAvBgB;EAC7B,OAAA,CAAA,EAAA,MAAA;CAKG,CAAA,EAkBR,OAlBQ,CAkBA,SAlBA,CAAA;AAAR,iBAqCmB,0BAAA,CArCnB,WAAA,EAsCW,UAtCX,EAAA,SAAA,EAAA,MAAA,EAAA,OAeO,CAfP,EAAA;EAAO,MAAA,CAAA,EAwCW,iBAxCX;EAcY,OAAA,CAAA,EAAA,MAAA;CACZ,CAAA,EA0BP,OA1BO,CA0BC,SA1BD,CAAA;AAEW,iBAgEL,qBAAA,CAhEK,eAAA,EAiEH,eAjEG,EAAA,KAAA,EAkEb,UAlEa,EAAA,OACX,CADW,EAAA;EACV,MAAA,CAAA,EAkEU,iBAlEV;EAAR,OAAA,CAAA,EAAA,MAAA;CAAO,CAAA,EAmEP,SAnEO;AAmBY,iBAgFN,qBAAA,CAhFgC,SAAA,EAAA,MAAA,GAiF3B,UAjF2B,EAAA,OAIrC,CAJqC,EAAA;EAClC,MAAA,CAAA,EAiFO,iBAjFP;EAEO,OAAA,CAAA,EAAA,MAAA;CACV,CAAA,EA8EoD,SA9EpD"}

package/dist/verify/verify.mjs

@@ -0,0 +1,76 @@
+import { SIGNATURE_FLAG_TO_SCHEME } from "../cryptography/signature-scheme.mjs";
+import { PasskeyPublicKey } from "../keypairs/passkey/publickey.mjs";
+import { ZkLoginPublicIdentifier } from "../zklogin/publickey.mjs";
+import { parseSerializedSignature } from "../cryptography/signature.mjs";
+import { Ed25519PublicKey } from "../keypairs/ed25519/publickey.mjs";
+import { Secp256k1PublicKey } from "../keypairs/secp256k1/publickey.mjs";
+import { Secp256r1PublicKey } from "../keypairs/secp256r1/publickey.mjs";
+import { MultiSigPublicKey } from "../multisig/publickey.mjs";
+import { fromBase64 } from "@mysten/bcs";
+
+//#region src/verify/verify.ts
+async function verifySignature(bytes, signature, options) {
+	const parsedSignature = parseSignature(signature);
+	if (!await parsedSignature.publicKey.verify(bytes, parsedSignature.serializedSignature)) throw new Error(`Signature is not valid for the provided data`);
+	if (options?.address && !parsedSignature.publicKey.verifyAddress(options.address)) throw new Error(`Signature is not valid for the provided address`);
+	return parsedSignature.publicKey;
+}
+async function verifyPersonalMessageSignature(message, signature, options = {}) {
+	const parsedSignature = parseSignature(signature, options);
+	if (!await parsedSignature.publicKey.verifyPersonalMessage(message, parsedSignature.serializedSignature)) throw new Error(`Signature is not valid for the provided message`);
+	if (options?.address && !parsedSignature.publicKey.verifyAddress(options.address)) throw new Error(`Signature is not valid for the provided address`);
+	return parsedSignature.publicKey;
+}
+async function verifyTransactionSignature(transaction, signature, options = {}) {
+	const parsedSignature = parseSignature(signature, options);
+	if (!await parsedSignature.publicKey.verifyTransaction(transaction, parsedSignature.serializedSignature)) throw new Error(`Signature is not valid for the provided Transaction`);
+	if (options?.address && !parsedSignature.publicKey.verifyAddress(options.address)) throw new Error(`Signature is not valid for the provided address`);
+	return parsedSignature.publicKey;
+}
+function parseSignature(signature, options = {}) {
+	const parsedSignature = parseSerializedSignature(signature);
+	if (parsedSignature.signatureScheme === "MultiSig") return {
+		...parsedSignature,
+		publicKey: new MultiSigPublicKey(parsedSignature.multisig.multisig_pk)
+	};
+	const publicKey = publicKeyFromRawBytes(parsedSignature.signatureScheme, parsedSignature.publicKey, options);
+	return {
+		...parsedSignature,
+		publicKey
+	};
+}
+function publicKeyFromRawBytes(signatureScheme, bytes, options = {}) {
+	let publicKey;
+	switch (signatureScheme) {
+		case "ED25519":
+			publicKey = new Ed25519PublicKey(bytes);
+			break;
+		case "Secp256k1":
+			publicKey = new Secp256k1PublicKey(bytes);
+			break;
+		case "Secp256r1":
+			publicKey = new Secp256r1PublicKey(bytes);
+			break;
+		case "MultiSig":
+			publicKey = new MultiSigPublicKey(bytes);
+			break;
+		case "ZkLogin":
+			publicKey = ZkLoginPublicIdentifier.fromBytes(bytes, options);
+			break;
+		case "Passkey":
+			publicKey = new PasskeyPublicKey(bytes);
+			break;
+		default: throw new Error(`Unsupported signature scheme ${signatureScheme}`);
+	}
+	if (options.address && publicKey.toSuiAddress() !== options.address) throw new Error(`Public key bytes do not match the provided address`);
+	return publicKey;
+}
+function publicKeyFromSuiBytes(publicKey, options = {}) {
+	const bytes = typeof publicKey === "string" ? fromBase64(publicKey) : publicKey;
+	const signatureScheme = SIGNATURE_FLAG_TO_SCHEME[bytes[0]];
+	return publicKeyFromRawBytes(signatureScheme, bytes.slice(1), options);
+}
+
+//#endregion
+export { publicKeyFromRawBytes, publicKeyFromSuiBytes, verifyPersonalMessageSignature, verifySignature, verifyTransactionSignature };
+//# sourceMappingURL=verify.mjs.map

package/dist/verify/verify.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.mjs","names":[],"sources":["../../src/verify/verify.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { fromBase64 } from '@mysten/bcs';\n\nimport type { PublicKey, SignatureFlag, SignatureScheme } from '../cryptography/index.js';\nimport { parseSerializedSignature, SIGNATURE_FLAG_TO_SCHEME } from '../cryptography/index.js';\nimport { Ed25519PublicKey } from '../keypairs/ed25519/publickey.js';\nimport { PasskeyPublicKey } from '../keypairs/passkey/publickey.js';\nimport { Secp256k1PublicKey } from '../keypairs/secp256k1/publickey.js';\nimport { Secp256r1PublicKey } from '../keypairs/secp256r1/publickey.js';\nimport { MultiSigPublicKey } from '../multisig/publickey.js';\nimport { ZkLoginPublicIdentifier } from '../zklogin/publickey.js';\nimport type { ClientWithCoreApi } from '../client/core.js';\n\nexport async function verifySignature(\n\tbytes: Uint8Array,\n\tsignature: string,\n\toptions?: {\n\t\taddress?: string;\n\t},\n): Promise<PublicKey> {\n\tconst parsedSignature = parseSignature(signature);\n\n\tif (!(await parsedSignature.publicKey.verify(bytes, parsedSignature.serializedSignature))) {\n\t\tthrow new Error(`Signature is not valid for the provided data`);\n\t}\n\n\tif (options?.address && !parsedSignature.publicKey.verifyAddress(options.address)) {\n\t\tthrow new Error(`Signature is not valid for the provided address`);\n\t}\n\n\treturn parsedSignature.publicKey;\n}\n\nexport async function verifyPersonalMessageSignature(\n\tmessage: Uint8Array,\n\tsignature: string,\n\toptions: { client?: ClientWithCoreApi; address?: string } = {},\n): Promise<PublicKey> {\n\tconst parsedSignature = parseSignature(signature, options);\n\n\tif (\n\t\t!(await parsedSignature.publicKey.verifyPersonalMessage(\n\t\t\tmessage,\n\t\t\tparsedSignature.serializedSignature,\n\t\t))\n\t) {\n\t\tthrow new Error(`Signature is not valid for the provided message`);\n\t}\n\n\tif (options?.address && !parsedSignature.publicKey.verifyAddress(options.address)) {\n\t\tthrow new Error(`Signature is not valid for the provided address`);\n\t}\n\n\treturn parsedSignature.publicKey;\n}\n\nexport async function verifyTransactionSignature(\n\ttransaction: Uint8Array,\n\tsignature: string,\n\toptions: { client?: ClientWithCoreApi; address?: string } = {},\n): Promise<PublicKey> {\n\tconst parsedSignature = parseSignature(signature, options);\n\n\tif (\n\t\t!(await parsedSignature.publicKey.verifyTransaction(\n\t\t\ttransaction,\n\t\t\tparsedSignature.serializedSignature,\n\t\t))\n\t) {\n\t\tthrow new Error(`Signature is not valid for the provided Transaction`);\n\t}\n\n\tif (options?.address && !parsedSignature.publicKey.verifyAddress(options.address)) {\n\t\tthrow new Error(`Signature is not valid for the provided address`);\n\t}\n\n\treturn parsedSignature.publicKey;\n}\n\nfunction parseSignature(signature: string, options: { client?: ClientWithCoreApi } = {}) {\n\tconst parsedSignature = parseSerializedSignature(signature);\n\n\tif (parsedSignature.signatureScheme === 'MultiSig') {\n\t\treturn {\n\t\t\t...parsedSignature,\n\t\t\tpublicKey: new MultiSigPublicKey(parsedSignature.multisig.multisig_pk),\n\t\t};\n\t}\n\n\tconst publicKey = publicKeyFromRawBytes(\n\t\tparsedSignature.signatureScheme,\n\t\tparsedSignature.publicKey,\n\t\toptions,\n\t);\n\treturn {\n\t\t...parsedSignature,\n\t\tpublicKey,\n\t};\n}\n\nexport function publicKeyFromRawBytes(\n\tsignatureScheme: SignatureScheme,\n\tbytes: Uint8Array,\n\toptions: { client?: ClientWithCoreApi; address?: string } = {},\n): PublicKey {\n\tlet publicKey: PublicKey;\n\tswitch (signatureScheme) {\n\t\tcase 'ED25519':\n\t\t\tpublicKey = new Ed25519PublicKey(bytes);\n\t\t\tbreak;\n\t\tcase 'Secp256k1':\n\t\t\tpublicKey = new Secp256k1PublicKey(bytes);\n\t\t\tbreak;\n\t\tcase 'Secp256r1':\n\t\t\tpublicKey = new Secp256r1PublicKey(bytes);\n\t\t\tbreak;\n\t\tcase 'MultiSig':\n\t\t\tpublicKey = new MultiSigPublicKey(bytes);\n\t\t\tbreak;\n\t\tcase 'ZkLogin':\n\t\t\tpublicKey = ZkLoginPublicIdentifier.fromBytes(bytes, options);\n\t\t\tbreak;\n\t\tcase 'Passkey':\n\t\t\tpublicKey = new PasskeyPublicKey(bytes);\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tthrow new Error(`Unsupported signature scheme ${signatureScheme}`);\n\t}\n\n\tif (options.address && publicKey.toSuiAddress() !== options.address) {\n\t\tthrow new Error(`Public key bytes do not match the provided address`);\n\t}\n\n\treturn publicKey;\n}\n\nexport function publicKeyFromSuiBytes(\n\tpublicKey: string | Uint8Array,\n\toptions: { client?: ClientWithCoreApi; address?: string } = {},\n) {\n\tconst bytes = typeof publicKey === 'string' ? fromBase64(publicKey) : publicKey;\n\n\tconst signatureScheme = SIGNATURE_FLAG_TO_SCHEME[bytes[0] as SignatureFlag];\n\n\treturn publicKeyFromRawBytes(signatureScheme, bytes.slice(1), options);\n}\n"],"mappings":";;;;;;;;;;;AAeA,eAAsB,gBACrB,OACA,WACA,SAGqB;CACrB,MAAM,kBAAkB,eAAe,UAAU;AAEjD,KAAI,CAAE,MAAM,gBAAgB,UAAU,OAAO,OAAO,gBAAgB,oBAAoB,CACvF,OAAM,IAAI,MAAM,+CAA+C;AAGhE,KAAI,SAAS,WAAW,CAAC,gBAAgB,UAAU,cAAc,QAAQ,QAAQ,CAChF,OAAM,IAAI,MAAM,kDAAkD;AAGnE,QAAO,gBAAgB;;AAGxB,eAAsB,+BACrB,SACA,WACA,UAA4D,EAAE,EACzC;CACrB,MAAM,kBAAkB,eAAe,WAAW,QAAQ;AAE1D,KACC,CAAE,MAAM,gBAAgB,UAAU,sBACjC,SACA,gBAAgB,oBAChB,CAED,OAAM,IAAI,MAAM,kDAAkD;AAGnE,KAAI,SAAS,WAAW,CAAC,gBAAgB,UAAU,cAAc,QAAQ,QAAQ,CAChF,OAAM,IAAI,MAAM,kDAAkD;AAGnE,QAAO,gBAAgB;;AAGxB,eAAsB,2BACrB,aACA,WACA,UAA4D,EAAE,EACzC;CACrB,MAAM,kBAAkB,eAAe,WAAW,QAAQ;AAE1D,KACC,CAAE,MAAM,gBAAgB,UAAU,kBACjC,aACA,gBAAgB,oBAChB,CAED,OAAM,IAAI,MAAM,sDAAsD;AAGvE,KAAI,SAAS,WAAW,CAAC,gBAAgB,UAAU,cAAc,QAAQ,QAAQ,CAChF,OAAM,IAAI,MAAM,kDAAkD;AAGnE,QAAO,gBAAgB;;AAGxB,SAAS,eAAe,WAAmB,UAA0C,EAAE,EAAE;CACxF,MAAM,kBAAkB,yBAAyB,UAAU;AAE3D,KAAI,gBAAgB,oBAAoB,WACvC,QAAO;EACN,GAAG;EACH,WAAW,IAAI,kBAAkB,gBAAgB,SAAS,YAAY;EACtE;CAGF,MAAM,YAAY,sBACjB,gBAAgB,iBAChB,gBAAgB,WAChB,QACA;AACD,QAAO;EACN,GAAG;EACH;EACA;;AAGF,SAAgB,sBACf,iBACA,OACA,UAA4D,EAAE,EAClD;CACZ,IAAI;AACJ,SAAQ,iBAAR;EACC,KAAK;AACJ,eAAY,IAAI,iBAAiB,MAAM;AACvC;EACD,KAAK;AACJ,eAAY,IAAI,mBAAmB,MAAM;AACzC;EACD,KAAK;AACJ,eAAY,IAAI,mBAAmB,MAAM;AACzC;EACD,KAAK;AACJ,eAAY,IAAI,kBAAkB,MAAM;AACxC;EACD,KAAK;AACJ,eAAY,wBAAwB,UAAU,OAAO,QAAQ;AAC7D;EACD,KAAK;AACJ,eAAY,IAAI,iBAAiB,MAAM;AACvC;EACD,QACC,OAAM,IAAI,MAAM,gCAAgC,kBAAkB;;AAGpE,KAAI,QAAQ,WAAW,UAAU,cAAc,KAAK,QAAQ,QAC3D,OAAM,IAAI,MAAM,qDAAqD;AAGtE,QAAO;;AAGR,SAAgB,sBACf,WACA,UAA4D,EAAE,EAC7D;CACD,MAAM,QAAQ,OAAO,cAAc,WAAW,WAAW,UAAU,GAAG;CAEtE,MAAM,kBAAkB,yBAAyB,MAAM;AAEvD,QAAO,sBAAsB,iBAAiB,MAAM,MAAM,EAAE,EAAE,QAAQ"}

package/dist/version.mjs

@@ -0,0 +1,7 @@
+//#region src/version.ts
+const PACKAGE_VERSION = "2.0.0";
+const TARGETED_RPC_VERSION = "1.65.0";
+
+//#endregion
+export { PACKAGE_VERSION, TARGETED_RPC_VERSION };
+//# sourceMappingURL=version.mjs.map

package/dist/version.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.mjs","names":[],"sources":["../src/version.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\n// This file is generated by genversion.mjs. Do not edit it directly.\n\nexport const PACKAGE_VERSION = '2.0.0';\nexport const TARGETED_RPC_VERSION = '1.65.0';\n"],"mappings":";AAKA,MAAa,kBAAkB;AAC/B,MAAa,uBAAuB"}

package/dist/zklogin/address.d.mts

@@ -0,0 +1,22 @@
+//#region src/zklogin/address.d.ts
+declare function computeZkLoginAddressFromSeed(addressSeed: bigint, iss: string, legacyAddress: boolean): string;
+declare function jwtToAddress(jwt: string, userSalt: string | bigint, legacyAddress: boolean): string;
+interface ComputeZkLoginAddressOptions {
+  claimName: string;
+  claimValue: string;
+  userSalt: string | bigint;
+  iss: string;
+  aud: string;
+  legacyAddress: boolean;
+}
+declare function computeZkLoginAddress({
+  claimName,
+  claimValue,
+  iss,
+  aud,
+  userSalt,
+  legacyAddress
+}: ComputeZkLoginAddressOptions): string;
+//#endregion
+export { ComputeZkLoginAddressOptions, computeZkLoginAddress, computeZkLoginAddressFromSeed, jwtToAddress };
+//# sourceMappingURL=address.d.mts.map

package/dist/zklogin/address.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.d.mts","names":[],"sources":["../../src/zklogin/address.ts"],"sourcesContent":[],"mappings":";iBAgBgB,6BAAA;AA8EA,iBA5BA,YAAA,CA4BqB,GAAA,EAAA,MAAA,EAAA,QAAA,EAAA,MAAA,GAAA,MAAA,EAAA,aAAA,EAAA,OAAA,CAAA,EAAA,MAAA;AACpC,UAVgB,4BAAA,CAUhB;EACA,SAAA,EAAA,MAAA;EACA,UAAA,EAAA,MAAA;EACA,QAAA,EAAA,MAAA,GAAA,MAAA;EACA,GAAA,EAAA,MAAA;EACA,GAAA,EAAA,MAAA;EACE,aAAA,EAAA,OAAA;;iBAPa,qBAAA;;;;;;;GAOb"}

package/dist/zklogin/address.mjs

@@ -0,0 +1,49 @@
+import { SUI_ADDRESS_LENGTH, normalizeSuiAddress } from "../utils/sui-types.mjs";
+import { SIGNATURE_SCHEME_TO_FLAG } from "../cryptography/signature-scheme.mjs";
+import { genAddressSeed, normalizeZkLoginIssuer, toBigEndianBytes, toPaddedBigEndianBytes } from "./utils.mjs";
+import { decodeJwt } from "./jwt-utils.mjs";
+import { blake2b } from "@noble/hashes/blake2.js";
+import { bytesToHex } from "@noble/hashes/utils.js";
+
+//#region src/zklogin/address.ts
+function computeZkLoginAddressFromSeed(addressSeed, iss, legacyAddress) {
+	if (legacyAddress === void 0) throw new Error("legacyAddress parameter must be specified");
+	const addressSeedBytesBigEndian = legacyAddress ? toBigEndianBytes(addressSeed, 32) : toPaddedBigEndianBytes(addressSeed, 32);
+	const addressParamBytes = new TextEncoder().encode(normalizeZkLoginIssuer(iss));
+	const tmp = new Uint8Array(2 + addressSeedBytesBigEndian.length + addressParamBytes.length);
+	tmp.set([SIGNATURE_SCHEME_TO_FLAG.ZkLogin]);
+	tmp.set([addressParamBytes.length], 1);
+	tmp.set(addressParamBytes, 2);
+	tmp.set(addressSeedBytesBigEndian, 2 + addressParamBytes.length);
+	return normalizeSuiAddress(bytesToHex(blake2b(tmp, { dkLen: 32 })).slice(0, SUI_ADDRESS_LENGTH * 2));
+}
+const MAX_HEADER_LEN_B64 = 248;
+const MAX_PADDED_UNSIGNED_JWT_LEN = 1600;
+function lengthChecks(jwt) {
+	const [header, payload] = jwt.split(".");
+	if (header.length > MAX_HEADER_LEN_B64) throw new Error(`Header is too long`);
+	const L = (header.length + 1 + payload.length) * 8;
+	const K = (960 - (L % 512 + 1)) % 512;
+	if ((L + 1 + K + 64) / 8 > MAX_PADDED_UNSIGNED_JWT_LEN) throw new Error(`JWT is too long`);
+}
+function jwtToAddress(jwt, userSalt, legacyAddress) {
+	if (legacyAddress === void 0) throw new Error("legacyAddress parameter must be specified");
+	lengthChecks(jwt);
+	const decodedJWT = decodeJwt(jwt);
+	return computeZkLoginAddress({
+		userSalt,
+		claimName: "sub",
+		claimValue: decodedJWT.sub,
+		aud: decodedJWT.aud,
+		iss: decodedJWT.iss,
+		legacyAddress
+	});
+}
+function computeZkLoginAddress({ claimName, claimValue, iss, aud, userSalt, legacyAddress }) {
+	if (legacyAddress === void 0) throw new Error("legacyAddress parameter must be specified");
+	return computeZkLoginAddressFromSeed(genAddressSeed(userSalt, claimName, claimValue, aud), iss, legacyAddress);
+}
+
+//#endregion
+export { computeZkLoginAddress, computeZkLoginAddressFromSeed, jwtToAddress };
+//# sourceMappingURL=address.mjs.map

package/dist/zklogin/address.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.mjs","names":[],"sources":["../../src/zklogin/address.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport { blake2b } from '@noble/hashes/blake2.js';\nimport { bytesToHex } from '@noble/hashes/utils.js';\n\nimport { SIGNATURE_SCHEME_TO_FLAG } from '../cryptography/signature-scheme.js';\nimport { normalizeSuiAddress, SUI_ADDRESS_LENGTH } from '../utils/index.js';\nimport { decodeJwt } from './jwt-utils.js';\nimport {\n\tgenAddressSeed,\n\tnormalizeZkLoginIssuer,\n\ttoBigEndianBytes,\n\ttoPaddedBigEndianBytes,\n} from './utils.js';\n\nexport function computeZkLoginAddressFromSeed(\n\taddressSeed: bigint,\n\tiss: string,\n\tlegacyAddress: boolean,\n) {\n\t// Explicitly check for people not using typescript and ignoring the major version migration guide\n\tif (legacyAddress === undefined) {\n\t\tthrow new Error('legacyAddress parameter must be specified');\n\t}\n\tconst addressSeedBytesBigEndian = legacyAddress\n\t\t? toBigEndianBytes(addressSeed, 32)\n\t\t: toPaddedBigEndianBytes(addressSeed, 32);\n\n\tconst addressParamBytes = new TextEncoder().encode(normalizeZkLoginIssuer(iss));\n\tconst tmp = new Uint8Array(2 + addressSeedBytesBigEndian.length + addressParamBytes.length);\n\n\ttmp.set([SIGNATURE_SCHEME_TO_FLAG.ZkLogin]);\n\ttmp.set([addressParamBytes.length], 1);\n\ttmp.set(addressParamBytes, 2);\n\ttmp.set(addressSeedBytesBigEndian, 2 + addressParamBytes.length);\n\n\treturn normalizeSuiAddress(\n\t\tbytesToHex(blake2b(tmp, { dkLen: 32 })).slice(0, SUI_ADDRESS_LENGTH * 2),\n\t);\n}\n\nexport const MAX_HEADER_LEN_B64 = 248;\nexport const MAX_PADDED_UNSIGNED_JWT_LEN = 64 * 25;\n\nexport function lengthChecks(jwt: string) {\n\tconst [header, payload] = jwt.split('.');\n\t/// Is the header small enough\n\tif (header.length > MAX_HEADER_LEN_B64) {\n\t\tthrow new Error(`Header is too long`);\n\t}\n\n\t/// Is the combined length of (header, payload, SHA2 padding) small enough?\n\t// unsigned_jwt = header + '.' + payload;\n\tconst L = (header.length + 1 + payload.length) * 8;\n\tconst K = (512 + 448 - ((L % 512) + 1)) % 512;\n\n\t// The SHA2 padding is 1 followed by K zeros, followed by the length of the message\n\tconst padded_unsigned_jwt_len = (L + 1 + K + 64) / 8;\n\n\t// The padded unsigned JWT must be less than the max_padded_unsigned_jwt_len\n\tif (padded_unsigned_jwt_len > MAX_PADDED_UNSIGNED_JWT_LEN) {\n\t\tthrow new Error(`JWT is too long`);\n\t}\n}\n\nexport function jwtToAddress(jwt: string, userSalt: string | bigint, legacyAddress: boolean) {\n\t// Explicitly check for people not using typescript and ignoring the major version migration guide\n\tif (legacyAddress === undefined) {\n\t\tthrow new Error('legacyAddress parameter must be specified');\n\t}\n\tlengthChecks(jwt);\n\n\tconst decodedJWT = decodeJwt(jwt);\n\n\treturn computeZkLoginAddress({\n\t\tuserSalt,\n\t\tclaimName: 'sub',\n\t\tclaimValue: decodedJWT.sub,\n\t\taud: decodedJWT.aud,\n\t\tiss: decodedJWT.iss,\n\t\tlegacyAddress,\n\t});\n}\n\nexport interface ComputeZkLoginAddressOptions {\n\tclaimName: string;\n\tclaimValue: string;\n\tuserSalt: string | bigint;\n\tiss: string;\n\taud: string;\n\tlegacyAddress: boolean;\n}\n\nexport function computeZkLoginAddress({\n\tclaimName,\n\tclaimValue,\n\tiss,\n\taud,\n\tuserSalt,\n\tlegacyAddress,\n}: ComputeZkLoginAddressOptions) {\n\t// Explicitly check for people not using typescript and ignoring the major version migration guide\n\tif (legacyAddress === undefined) {\n\t\tthrow new Error('legacyAddress parameter must be specified');\n\t}\n\treturn computeZkLoginAddressFromSeed(\n\t\tgenAddressSeed(userSalt, claimName, claimValue, aud),\n\t\tiss,\n\t\tlegacyAddress,\n\t);\n}\n"],"mappings":";;;;;;;;AAgBA,SAAgB,8BACf,aACA,KACA,eACC;AAED,KAAI,kBAAkB,OACrB,OAAM,IAAI,MAAM,4CAA4C;CAE7D,MAAM,4BAA4B,gBAC/B,iBAAiB,aAAa,GAAG,GACjC,uBAAuB,aAAa,GAAG;CAE1C,MAAM,oBAAoB,IAAI,aAAa,CAAC,OAAO,uBAAuB,IAAI,CAAC;CAC/E,MAAM,MAAM,IAAI,WAAW,IAAI,0BAA0B,SAAS,kBAAkB,OAAO;AAE3F,KAAI,IAAI,CAAC,yBAAyB,QAAQ,CAAC;AAC3C,KAAI,IAAI,CAAC,kBAAkB,OAAO,EAAE,EAAE;AACtC,KAAI,IAAI,mBAAmB,EAAE;AAC7B,KAAI,IAAI,2BAA2B,IAAI,kBAAkB,OAAO;AAEhE,QAAO,oBACN,WAAW,QAAQ,KAAK,EAAE,OAAO,IAAI,CAAC,CAAC,CAAC,MAAM,GAAG,qBAAqB,EAAE,CACxE;;AAGF,MAAa,qBAAqB;AAClC,MAAa,8BAA8B;AAE3C,SAAgB,aAAa,KAAa;CACzC,MAAM,CAAC,QAAQ,WAAW,IAAI,MAAM,IAAI;AAExC,KAAI,OAAO,SAAS,mBACnB,OAAM,IAAI,MAAM,qBAAqB;CAKtC,MAAM,KAAK,OAAO,SAAS,IAAI,QAAQ,UAAU;CACjD,MAAM,KAAK,OAAc,IAAI,MAAO,MAAM;AAM1C,MAHiC,IAAI,IAAI,IAAI,MAAM,IAGrB,4BAC7B,OAAM,IAAI,MAAM,kBAAkB;;AAIpC,SAAgB,aAAa,KAAa,UAA2B,eAAwB;AAE5F,KAAI,kBAAkB,OACrB,OAAM,IAAI,MAAM,4CAA4C;AAE7D,cAAa,IAAI;CAEjB,MAAM,aAAa,UAAU,IAAI;AAEjC,QAAO,sBAAsB;EAC5B;EACA,WAAW;EACX,YAAY,WAAW;EACvB,KAAK,WAAW;EAChB,KAAK,WAAW;EAChB;EACA,CAAC;;AAYH,SAAgB,sBAAsB,EACrC,WACA,YACA,KACA,KACA,UACA,iBACgC;AAEhC,KAAI,kBAAkB,OACrB,OAAM,IAAI,MAAM,4CAA4C;AAE7D,QAAO,8BACN,eAAe,UAAU,WAAW,YAAY,IAAI,EACpD,KACA,cACA"}

package/dist/zklogin/bcs.d.mts

@@ -0,0 +1,34 @@
+import * as _mysten_bcs1111 from "@mysten/bcs";
+import { InferBcsInput } from "@mysten/bcs";
+
+//#region src/zklogin/bcs.d.ts
+declare const zkLoginSignature: _mysten_bcs1111.BcsStruct<{
+  inputs: _mysten_bcs1111.BcsStruct<{
+    proofPoints: _mysten_bcs1111.BcsStruct<{
+      a: _mysten_bcs1111.BcsType<string[], Iterable<string> & {
+        length: number;
+      }, string>;
+      b: _mysten_bcs1111.BcsType<string[][], Iterable<Iterable<string> & {
+        length: number;
+      }> & {
+        length: number;
+      }, string>;
+      c: _mysten_bcs1111.BcsType<string[], Iterable<string> & {
+        length: number;
+      }, string>;
+    }, string>;
+    issBase64Details: _mysten_bcs1111.BcsStruct<{
+      value: _mysten_bcs1111.BcsType<string, string, "string">;
+      indexMod4: _mysten_bcs1111.BcsType<number, number, "u8">;
+    }, string>;
+    headerBase64: _mysten_bcs1111.BcsType<string, string, "string">;
+    addressSeed: _mysten_bcs1111.BcsType<string, string, "string">;
+  }, string>;
+  maxEpoch: _mysten_bcs1111.BcsType<string, string | number | bigint, "u64">;
+  userSignature: _mysten_bcs1111.BcsType<Uint8Array<ArrayBufferLike>, Iterable<number>, "vector<u8>">;
+}, string>;
+type ZkLoginSignature = InferBcsInput<typeof zkLoginSignature>;
+type ZkLoginSignatureInputs = ZkLoginSignature['inputs'];
+//#endregion
+export { ZkLoginSignature, ZkLoginSignatureInputs };
+//# sourceMappingURL=bcs.d.mts.map

package/dist/zklogin/bcs.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bcs.d.mts","names":[],"sources":["../../src/zklogin/bcs.ts"],"sourcesContent":[],"mappings":";;;;cAMa,kCAAgB;;;MAAhB,CAAA,yBAgBX,CAAA,MAAA,EAAA,UAAA,CAAA,MAAA,CAAA,GAAA;;;;;;;;;;;;;;;;;;;;eAhB2B,yBAAA,WAAA,gBAAA,CAAA,UAAA,CAAA,MAAA,CAAA,EAAA,YAAA,CAAA;CAAA,EAAA,MAAA,CAAA;AAkBjB,KAAA,gBAAA,GAAmB,aAAqB,CAAA,OAAA,gBAAR,CAAA;AAChC,KAAA,sBAAA,GAAyB,gBAAA,CAAA,QAAgB,CAAA"}

package/dist/zklogin/bcs.mjs

@@ -0,0 +1,24 @@
+import { bcs } from "@mysten/bcs";
+
+//#region src/zklogin/bcs.ts
+const zkLoginSignature = bcs.struct("ZkLoginSignature", {
+	inputs: bcs.struct("ZkLoginSignatureInputs", {
+		proofPoints: bcs.struct("ZkLoginSignatureInputsProofPoints", {
+			a: bcs.vector(bcs.string()),
+			b: bcs.vector(bcs.vector(bcs.string())),
+			c: bcs.vector(bcs.string())
+		}),
+		issBase64Details: bcs.struct("ZkLoginSignatureInputsClaim", {
+			value: bcs.string(),
+			indexMod4: bcs.u8()
+		}),
+		headerBase64: bcs.string(),
+		addressSeed: bcs.string()
+	}),
+	maxEpoch: bcs.u64(),
+	userSignature: bcs.byteVector()
+});
+
+//#endregion
+export { zkLoginSignature };
+//# sourceMappingURL=bcs.mjs.map

package/dist/zklogin/bcs.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"bcs.mjs","names":[],"sources":["../../src/zklogin/bcs.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n\nimport type { InferBcsInput } from '@mysten/bcs';\nimport { bcs } from '@mysten/bcs';\n\nexport const zkLoginSignature = bcs.struct('ZkLoginSignature', {\n\tinputs: bcs.struct('ZkLoginSignatureInputs', {\n\t\tproofPoints: bcs.struct('ZkLoginSignatureInputsProofPoints', {\n\t\t\ta: bcs.vector(bcs.string()),\n\t\t\tb: bcs.vector(bcs.vector(bcs.string())),\n\t\t\tc: bcs.vector(bcs.string()),\n\t\t}),\n\t\tissBase64Details: bcs.struct('ZkLoginSignatureInputsClaim', {\n\t\t\tvalue: bcs.string(),\n\t\t\tindexMod4: bcs.u8(),\n\t\t}),\n\t\theaderBase64: bcs.string(),\n\t\taddressSeed: bcs.string(),\n\t}),\n\tmaxEpoch: bcs.u64(),\n\tuserSignature: bcs.byteVector(),\n});\n\nexport type ZkLoginSignature = InferBcsInput<typeof zkLoginSignature>;\nexport type ZkLoginSignatureInputs = ZkLoginSignature['inputs'];\n"],"mappings":";;;AAMA,MAAa,mBAAmB,IAAI,OAAO,oBAAoB;CAC9D,QAAQ,IAAI,OAAO,0BAA0B;EAC5C,aAAa,IAAI,OAAO,qCAAqC;GAC5D,GAAG,IAAI,OAAO,IAAI,QAAQ,CAAC;GAC3B,GAAG,IAAI,OAAO,IAAI,OAAO,IAAI,QAAQ,CAAC,CAAC;GACvC,GAAG,IAAI,OAAO,IAAI,QAAQ,CAAC;GAC3B,CAAC;EACF,kBAAkB,IAAI,OAAO,+BAA+B;GAC3D,OAAO,IAAI,QAAQ;GACnB,WAAW,IAAI,IAAI;GACnB,CAAC;EACF,cAAc,IAAI,QAAQ;EAC1B,aAAa,IAAI,QAAQ;EACzB,CAAC;CACF,UAAU,IAAI,KAAK;CACnB,eAAe,IAAI,YAAY;CAC/B,CAAC"}

package/dist/zklogin/index.d.mts

@@ -0,0 +1,9 @@
+import { ZkLoginSignatureInputs } from "./bcs.mjs";
+import { getZkLoginSignature, parseZkLoginSignature } from "./signature.mjs";
+import { genAddressSeed, getExtendedEphemeralPublicKey, hashASCIIStrToField, toBigEndianBytes, toPaddedBigEndianBytes } from "./utils.mjs";
+import { ComputeZkLoginAddressOptions, computeZkLoginAddress, computeZkLoginAddressFromSeed, jwtToAddress } from "./address.mjs";
+import { ZkLoginPublicIdentifier, toZkLoginPublicIdentifier } from "./publickey.mjs";
+import { poseidonHash } from "./poseidon.mjs";
+import { generateNonce, generateRandomness } from "./nonce.mjs";
+import { decodeJwt } from "./jwt-utils.mjs";
+export { type ComputeZkLoginAddressOptions, ZkLoginPublicIdentifier, type ZkLoginSignatureInputs, computeZkLoginAddress, computeZkLoginAddressFromSeed, decodeJwt, genAddressSeed, generateNonce, generateRandomness, getExtendedEphemeralPublicKey, getZkLoginSignature, hashASCIIStrToField, jwtToAddress, parseZkLoginSignature, poseidonHash, toBigEndianBytes, toPaddedBigEndianBytes, toZkLoginPublicIdentifier };

package/dist/zklogin/index.mjs

@@ -0,0 +1,9 @@
+import { poseidonHash } from "./poseidon.mjs";
+import { genAddressSeed, getExtendedEphemeralPublicKey, hashASCIIStrToField, toBigEndianBytes, toPaddedBigEndianBytes } from "./utils.mjs";
+import { decodeJwt } from "./jwt-utils.mjs";
+import { getZkLoginSignature, parseZkLoginSignature } from "./signature.mjs";
+import { ZkLoginPublicIdentifier, toZkLoginPublicIdentifier } from "./publickey.mjs";
+import { computeZkLoginAddress, computeZkLoginAddressFromSeed, jwtToAddress } from "./address.mjs";
+import { generateNonce, generateRandomness } from "./nonce.mjs";
+
+export { ZkLoginPublicIdentifier, computeZkLoginAddress, computeZkLoginAddressFromSeed, decodeJwt, genAddressSeed, generateNonce, generateRandomness, getExtendedEphemeralPublicKey, getZkLoginSignature, hashASCIIStrToField, jwtToAddress, parseZkLoginSignature, poseidonHash, toBigEndianBytes, toPaddedBigEndianBytes, toZkLoginPublicIdentifier };

package/dist/zklogin/jwt-decode.d.mts

@@ -0,0 +1,14 @@
+//#region src/zklogin/jwt-decode.d.ts
+
+interface JwtPayload {
+  iss?: string;
+  sub?: string;
+  aud?: string[] | string;
+  exp?: number;
+  nbf?: number;
+  iat?: number;
+  jti?: string;
+}
+//#endregion
+export { JwtPayload };
+//# sourceMappingURL=jwt-decode.d.mts.map

package/dist/zklogin/jwt-decode.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-decode.d.mts","names":[],"sources":["../../src/zklogin/jwt-decode.ts"],"sourcesContent":[],"mappings":";;UAwCiB,UAAA"}

package/dist/zklogin/jwt-decode.mjs

@@ -0,0 +1,50 @@
+//#region src/zklogin/jwt-decode.ts
+var InvalidTokenError = class extends Error {};
+InvalidTokenError.prototype.name = "InvalidTokenError";
+function b64DecodeUnicode(str) {
+	return decodeURIComponent(atob(str).replace(/(.)/g, (_m, p) => {
+		let code = p.charCodeAt(0).toString(16).toUpperCase();
+		if (code.length < 2) code = "0" + code;
+		return "%" + code;
+	}));
+}
+function base64UrlDecode(str) {
+	let output = str.replace(/-/g, "+").replace(/_/g, "/");
+	switch (output.length % 4) {
+		case 0: break;
+		case 2:
+			output += "==";
+			break;
+		case 3:
+			output += "=";
+			break;
+		default: throw new Error("base64 string is not of the correct length");
+	}
+	try {
+		return b64DecodeUnicode(output);
+	} catch {
+		return atob(output);
+	}
+}
+function jwtDecode(token, options) {
+	if (typeof token !== "string") throw new InvalidTokenError("Invalid token specified: must be a string");
+	options ||= {};
+	const pos = options.header === true ? 0 : 1;
+	const part = token.split(".")[pos];
+	if (typeof part !== "string") throw new InvalidTokenError(`Invalid token specified: missing part #${pos + 1}`);
+	let decoded;
+	try {
+		decoded = base64UrlDecode(part);
+	} catch (e) {
+		throw new InvalidTokenError(`Invalid token specified: invalid base64 for part #${pos + 1} (${e.message})`);
+	}
+	try {
+		return JSON.parse(decoded);
+	} catch (e) {
+		throw new InvalidTokenError(`Invalid token specified: invalid json for part #${pos + 1} (${e.message})`);
+	}
+}
+
+//#endregion
+export { jwtDecode };
+//# sourceMappingURL=jwt-decode.mjs.map

package/dist/zklogin/jwt-decode.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwt-decode.mjs","names":[],"sources":["../../src/zklogin/jwt-decode.ts"],"sourcesContent":["// Copyright (c) Mysten Labs, Inc.\n// SPDX-License-Identifier: Apache-2.0\n// oxlint-disable check-tag-names\n\n/** Copied from https://github.com/auth0/jwt-decode/blob/3d372e9875ff673228a9f2d9df74e84690842a9c/lib/index.ts */\n\n/**\nThe MIT License (MIT)\n\nCopyright (c) 2015 Auth0, Inc. <support@auth0.com> (http://auth0.com)\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n */\n\nexport interface JwtDecodeOptions {\n\theader?: boolean;\n}\n\nexport interface JwtHeader {\n\ttyp?: string;\n\talg?: string;\n\tkid?: string;\n}\n\nexport interface JwtPayload {\n\tiss?: string;\n\tsub?: string;\n\taud?: string[] | string;\n\texp?: number;\n\tnbf?: number;\n\tiat?: number;\n\tjti?: string;\n}\n\nexport class InvalidTokenError extends Error {}\n\nInvalidTokenError.prototype.name = 'InvalidTokenError';\n\nfunction b64DecodeUnicode(str: string) {\n\treturn decodeURIComponent(\n\t\tatob(str).replace(/(.)/g, (_m, p) => {\n\t\t\tlet code = (p as string).charCodeAt(0).toString(16).toUpperCase();\n\t\t\tif (code.length < 2) {\n\t\t\t\tcode = '0' + code;\n\t\t\t}\n\t\t\treturn '%' + code;\n\t\t}),\n\t);\n}\n\nfunction base64UrlDecode(str: string) {\n\tlet output = str.replace(/-/g, '+').replace(/_/g, '/');\n\tswitch (output.length % 4) {\n\t\tcase 0:\n\t\t\tbreak;\n\t\tcase 2:\n\t\t\toutput += '==';\n\t\t\tbreak;\n\t\tcase 3:\n\t\t\toutput += '=';\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tthrow new Error('base64 string is not of the correct length');\n\t}\n\n\ttry {\n\t\treturn b64DecodeUnicode(output);\n\t} catch {\n\t\treturn atob(output);\n\t}\n}\n\nexport function jwtDecode<T = JwtHeader>(\n\ttoken: string,\n\toptions: JwtDecodeOptions & { header: true },\n): T;\nexport function jwtDecode<T = JwtPayload>(token: string, options?: JwtDecodeOptions): T;\nexport function jwtDecode<T = JwtHeader | JwtPayload>(\n\ttoken: string,\n\toptions?: JwtDecodeOptions,\n): T {\n\tif (typeof token !== 'string') {\n\t\tthrow new InvalidTokenError('Invalid token specified: must be a string');\n\t}\n\n\toptions ||= {};\n\n\tconst pos = options.header === true ? 0 : 1;\n\tconst part = token.split('.')[pos];\n\n\tif (typeof part !== 'string') {\n\t\tthrow new InvalidTokenError(`Invalid token specified: missing part #${pos + 1}`);\n\t}\n\n\tlet decoded: string;\n\ttry {\n\t\tdecoded = base64UrlDecode(part);\n\t} catch (e) {\n\t\tthrow new InvalidTokenError(\n\t\t\t`Invalid token specified: invalid base64 for part #${pos + 1} (${(e as Error).message})`,\n\t\t);\n\t}\n\n\ttry {\n\t\treturn JSON.parse(decoded) as T;\n\t} catch (e) {\n\t\tthrow new InvalidTokenError(\n\t\t\t`Invalid token specified: invalid json for part #${pos + 1} (${(e as Error).message})`,\n\t\t);\n\t}\n}\n"],"mappings":";AAkDA,IAAa,oBAAb,cAAuC,MAAM;AAE7C,kBAAkB,UAAU,OAAO;AAEnC,SAAS,iBAAiB,KAAa;AACtC,QAAO,mBACN,KAAK,IAAI,CAAC,QAAQ,SAAS,IAAI,MAAM;EACpC,IAAI,OAAQ,EAAa,WAAW,EAAE,CAAC,SAAS,GAAG,CAAC,aAAa;AACjE,MAAI,KAAK,SAAS,EACjB,QAAO,MAAM;AAEd,SAAO,MAAM;GACZ,CACF;;AAGF,SAAS,gBAAgB,KAAa;CACrC,IAAI,SAAS,IAAI,QAAQ,MAAM,IAAI,CAAC,QAAQ,MAAM,IAAI;AACtD,SAAQ,OAAO,SAAS,GAAxB;EACC,KAAK,EACJ;EACD,KAAK;AACJ,aAAU;AACV;EACD,KAAK;AACJ,aAAU;AACV;EACD,QACC,OAAM,IAAI,MAAM,6CAA6C;;AAG/D,KAAI;AACH,SAAO,iBAAiB,OAAO;SACxB;AACP,SAAO,KAAK,OAAO;;;AASrB,SAAgB,UACf,OACA,SACI;AACJ,KAAI,OAAO,UAAU,SACpB,OAAM,IAAI,kBAAkB,4CAA4C;AAGzE,aAAY,EAAE;CAEd,MAAM,MAAM,QAAQ,WAAW,OAAO,IAAI;CAC1C,MAAM,OAAO,MAAM,MAAM,IAAI,CAAC;AAE9B,KAAI,OAAO,SAAS,SACnB,OAAM,IAAI,kBAAkB,0CAA0C,MAAM,IAAI;CAGjF,IAAI;AACJ,KAAI;AACH,YAAU,gBAAgB,KAAK;UACvB,GAAG;AACX,QAAM,IAAI,kBACT,qDAAqD,MAAM,EAAE,IAAK,EAAY,QAAQ,GACtF;;AAGF,KAAI;AACH,SAAO,KAAK,MAAM,QAAQ;UAClB,GAAG;AACX,QAAM,IAAI,kBACT,mDAAmD,MAAM,EAAE,IAAK,EAAY,QAAQ,GACpF"}