@openzeppelin/miden-multisig-client 0.18.0 → 0.18.2

package/dist/session/key.js

@@ -0,0 +1,160 @@
+import { AuthDigest } from '../utils/digest.js';
+import { EcdsaFormat } from '../utils/ecdsa.js';
+import { bytesToHex } from '../utils/encoding.js';
+import { wordToBytes } from '../utils/word.js';
+import { sessionLogoutDigest } from './grant.js';
+const ALGORITHM = { name: 'ECDSA', namedCurve: 'P-256' };
+const SIGNATURE = { name: 'ECDSA', hash: 'SHA-256' };
+function subtle() {
+    if (!globalThis.crypto?.subtle) {
+        throw new Error('Guardian sessions require WebCrypto (crypto.subtle)');
+    }
+    return globalThis.crypto.subtle;
+}
+/**
+ * A P-256 session key whose private half is a non-extractable WebCrypto key:
+ * page scripts can use it to sign while it is loaded, but can never read or
+ * export it.
+ */
+export class WebCryptoSessionKey {
+    privateKey;
+    publicKey;
+    constructor(privateKey, 
+    /** Hex SEC1-compressed public key. */
+    publicKey) {
+        this.privateKey = privateKey;
+        this.publicKey = publicKey;
+    }
+    static async generate() {
+        const pair = await subtle().generateKey(ALGORITHM, false, ['sign', 'verify']);
+        const raw = new Uint8Array(await subtle().exportKey('raw', pair.publicKey));
+        return new WebCryptoSessionKey(pair.privateKey, EcdsaFormat.compressPublicKey(bytesToHex(raw)));
+    }
+    /** Sign the 32 bytes of a word: ECDSA P-256 over SHA-256, `r || s` hex. */
+    async signWord(word) {
+        const message = new Uint8Array(wordToBytes(word));
+        const signature = await subtle().sign(SIGNATURE, this.privateKey, message);
+        return bytesToHex(new Uint8Array(signature));
+    }
+}
+/**
+ * Signs Guardian requests for a wallet after its session grant was
+ * registered. Plug into `GuardianHttpClient.setSession`.
+ */
+export class GuardianSession {
+    key;
+    signerCommitment;
+    expiresAt;
+    storeId;
+    options;
+    constructor(key, 
+    /** Commitment of the wallet that signed the grant. */
+    signerCommitment, 
+    /** Unix seconds. */
+    expiresAt, 
+    /** Where a `SessionKeyStore` keeps this session's key. */
+    storeId, options = {}) {
+        this.key = key;
+        this.signerCommitment = signerCommitment;
+        this.expiresAt = expiresAt;
+        this.storeId = storeId;
+        this.options = options;
+    }
+    get publicKey() {
+        return this.key.publicKey;
+    }
+    /**
+     * Forgets the stored key (best effort: a dead key left behind fails its
+     * first request after a reload and ends then) and tells the app.
+     */
+    onEnded(reason) {
+        if (this.options.store) {
+            void forgetSessionKey(this.options.store, this).catch(() => undefined);
+        }
+        this.options.onEnded?.(reason, this);
+    }
+    signRequest(accountId, timestamp, requestPayload) {
+        return this.key.signWord(AuthDigest.fromRequest(accountId, timestamp, requestPayload));
+    }
+    signLogout(timestampMs) {
+        return this.key.signWord(sessionLogoutDigest(this.key.publicKey, timestampMs));
+    }
+}
+/**
+ * Remove the stored key of `session`, unless the record already holds the key
+ * of a newer session for the same wallet and Guardian.
+ */
+export async function forgetSessionKey(store, session) {
+    await store.remove(session.storeId, session.publicKey);
+}
+/**
+ * Keeps session keys in IndexedDB so a reload does not need another wallet
+ * signature. The browser stores the `CryptoKey` object itself; it stays
+ * non-extractable.
+ */
+export class IndexedDbSessionKeyStore {
+    databaseName;
+    static STORE = 'sessions';
+    database = null;
+    constructor(databaseName = 'guardian-sessions') {
+        this.databaseName = databaseName;
+    }
+    async load(id) {
+        const record = await this.request('readonly', (store) => store.get(id));
+        return record ?? null;
+    }
+    async save(record) {
+        await this.request('readwrite', (store) => store.put(record));
+    }
+    async remove(id, publicKey) {
+        const database = await this.open();
+        return new Promise((resolve, reject) => {
+            const transaction = database.transaction(IndexedDbSessionKeyStore.STORE, 'readwrite');
+            const store = transaction.objectStore(IndexedDbSessionKeyStore.STORE);
+            const lookup = store.get(id);
+            lookup.onsuccess = () => {
+                if (lookup.result?.publicKey === publicKey) {
+                    store.delete(id);
+                }
+            };
+            transaction.oncomplete = () => resolve();
+            transaction.onerror = () => reject(transaction.error);
+            transaction.onabort = () => reject(transaction.error);
+        });
+    }
+    async request(mode, run) {
+        const database = await this.open();
+        return new Promise((resolve, reject) => {
+            const transaction = database.transaction(IndexedDbSessionKeyStore.STORE, mode);
+            const request = run(transaction.objectStore(IndexedDbSessionKeyStore.STORE));
+            transaction.oncomplete = () => resolve(request.result);
+            transaction.onerror = () => reject(transaction.error ?? request.error);
+            transaction.onabort = () => reject(transaction.error ?? request.error);
+        });
+    }
+    /** Opens the database once; a failed open is retried on the next call. */
+    open() {
+        if (!this.database) {
+            const opening = new Promise((resolve, reject) => {
+                if (!globalThis.indexedDB) {
+                    reject(new Error('IndexedDB is not available'));
+                    return;
+                }
+                const request = globalThis.indexedDB.open(this.databaseName, 1);
+                request.onupgradeneeded = () => {
+                    request.result.createObjectStore(IndexedDbSessionKeyStore.STORE, { keyPath: 'id' });
+                };
+                request.onsuccess = () => resolve(request.result);
+                request.onerror = () => reject(request.error);
+            });
+            opening.catch(() => {
+                if (this.database === opening) {
+                    this.database = null;
+                }
+            });
+            this.database = opening;
+        }
+        return this.database;
+    }
+}
+//# sourceMappingURL=key.js.map

package/dist/session/key.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"key.js","sourceRoot":"","sources":["../../src/session/key.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAChD,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAC/C,OAAO,EAAE,mBAAmB,EAAE,MAAM,YAAY,CAAC;AAEjD,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAW,CAAC;AAClE,MAAM,SAAS,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAW,CAAC;AAE9D,SAAS,MAAM;IACb,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACzE,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;AAClC,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,mBAAmB;IAEnB;IAEA;IAHX,YACW,UAAqB;IAC9B,sCAAsC;IAC7B,SAAiB;QAFjB,eAAU,GAAV,UAAU,CAAW;QAErB,cAAS,GAAT,SAAS,CAAQ;IACzB,CAAC;IAEJ,MAAM,CAAC,KAAK,CAAC,QAAQ;QACnB,MAAM,IAAI,GAAG,MAAM,MAAM,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,KAAK,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,MAAM,MAAM,EAAE,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5E,OAAO,IAAI,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,iBAAiB,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,QAAQ,CAAC,IAAU;QACvB,MAAM,OAAO,GAAG,IAAI,UAAU,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QAClD,MAAM,SAAS,GAAG,MAAM,MAAM,EAAE,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;QAC3E,OAAO,UAAU,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;IAC/C,CAAC;CACF;AAcD;;;GAGG;AACH,MAAM,OAAO,eAAe;IAEP;IAER;IAEA;IAEA;IACQ;IARnB,YACmB,GAAwB;IACzC,sDAAsD;IAC7C,gBAAwB;IACjC,oBAAoB;IACX,SAAiB;IAC1B,0DAA0D;IACjD,OAAe,EACP,UAAkC,EAAE;QAPpC,QAAG,GAAH,GAAG,CAAqB;QAEhC,qBAAgB,GAAhB,gBAAgB,CAAQ;QAExB,cAAS,GAAT,SAAS,CAAQ;QAEjB,YAAO,GAAP,OAAO,CAAQ;QACP,YAAO,GAAP,OAAO,CAA6B;IACpD,CAAC;IAEJ,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,OAAO,CAAC,MAAwB;QAC9B,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;YACvB,KAAK,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACzE,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC;IAED,WAAW,CACT,SAAiB,EACjB,SAAiB,EACjB,cAAkC;QAElC,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,UAAU,CAAC,WAAmB;QAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC,CAAC;IACjF,CAAC;CACF;AAuBD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,KAAsB,EACtB,OAA+C;IAE/C,MAAM,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;AACzD,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,wBAAwB;IAIN;IAHrB,MAAM,CAAU,KAAK,GAAG,UAAU,CAAC;IACnC,QAAQ,GAAgC,IAAI,CAAC;IAErD,YAA6B,eAAe,mBAAmB;QAAlC,iBAAY,GAAZ,YAAY,CAAsB;IAAG,CAAC;IAEnE,KAAK,CAAC,IAAI,CAAC,EAAU;QACnB,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAA+B,UAAU,EAAE,CAAC,KAAK,EAAE,EAAE,CACpF,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CACd,CAAC;QACF,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,MAAwB;QACjC,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAChE,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,EAAU,EAAE,SAAiB;QACxC,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YAC3C,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,wBAAwB,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;YACtF,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC;YACtE,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7B,MAAM,CAAC,SAAS,GAAG,GAAG,EAAE;gBACtB,IAAK,MAAM,CAAC,MAAuC,EAAE,SAAS,KAAK,SAAS,EAAE,CAAC;oBAC7E,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;gBACnB,CAAC;YACH,CAAC,CAAC;YACF,WAAW,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;YACzC,WAAW,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;YACtD,WAAW,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;QACxD,CAAC,CAAC,CAAC;IACL,CAAC;IAGO,KAAK,CAAC,OAAO,CACnB,IAAwB,EACxB,GAA0C;QAE1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnC,OAAO,IAAI,OAAO,CAAI,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACxC,MAAM,WAAW,GAAG,QAAQ,CAAC,WAAW,CAAC,wBAAwB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;YAC/E,MAAM,OAAO,GAAG,GAAG,CAAC,WAAW,CAAC,WAAW,CAAC,wBAAwB,CAAC,KAAK,CAAC,CAAC,CAAC;YAC7E,WAAW,CAAC,UAAU,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAW,CAAC,CAAC;YAC5D,WAAW,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;YACvE,WAAW,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC;QACzE,CAAC,CAAC,CAAC;IACL,CAAC;IAED,0EAA0E;IAClE,IAAI;QACV,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;YACnB,MAAM,OAAO,GAAG,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBAC3D,IAAI,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;oBAC1B,MAAM,CAAC,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;oBAChD,OAAO;gBACT,CAAC;gBACD,MAAM,OAAO,GAAG,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC;gBAChE,OAAO,CAAC,eAAe,GAAG,GAAG,EAAE;oBAC7B,OAAO,CAAC,MAAM,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;gBACtF,CAAC,CAAC;gBACF,OAAO,CAAC,SAAS,GAAG,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;gBAClD,OAAO,CAAC,OAAO,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YAChD,CAAC,CAAC,CAAC;YACH,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE;gBACjB,IAAI,IAAI,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;oBAC9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACvB,CAAC;YACH,CAAC,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QAC1B,CAAC;QACD,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC"}

package/dist/session/manager.d.ts

@@ -0,0 +1,76 @@
+import type { GuardianHttpClient, SessionGrantFields, Signer } from '@openzeppelin/guardian-client';
+import { GuardianSession, type GuardianSessionOptions, type SessionKeyStore } from './key.js';
+/** The Guardian does not advertise sessions on `GET /status`. */
+export declare class GuardianSessionsUnsupportedError extends Error {
+    constructor();
+}
+/** `confirm` returned `false`: the user declined the grant. */
+export declare class SessionGrantDeclinedError extends Error {
+    constructor();
+}
+export interface StartSessionOptions extends Pick<GuardianSessionOptions, 'onEnded'> {
+    /**
+     * Requested lifetime, more than 300 seconds; capped below the Guardian's
+     * advertised maximum.
+     */
+    ttlSeconds?: number;
+    /**
+     * The website asking for the session, shown to the user by the wallet.
+     * Defaults to the page's `location.origin` in a browser and to none
+     * elsewhere. Guardian does not check it against requests.
+     */
+    origin?: string;
+    /**
+     * Called with the grant before the wallet signs it; return `false` to
+     * abort. Required for raw (non-EIP-712) wallets, which show only a hash:
+     * display {@link describeSessionGrant} to the user here.
+     */
+    confirm?: (grant: SessionGrantFields) => boolean | Promise<boolean>;
+    /** Persist the session key so a reload can `resume` without the wallet. */
+    store?: SessionKeyStore;
+}
+/**
+ * Start a Guardian session: `signer` signs one grant and, once the session is
+ * registered, becomes `guardian`'s signer; a non-extractable P-256 delegated
+ * signer then signs the
+ * session-eligible requests on `guardian` (reads, proposal list/get, proposal
+ * create/sign). Every other route, including `configure`, `pushDelta`,
+ * `abandonCandidate`, account lookup and `revokeAllSessions`, keeps using the
+ * wallet. A session already set on `guardian` is replaced but stays valid on
+ * the server until it expires; end it first with {@link endGuardianSession}.
+ *
+ * The grant is dated after `confirm` returns, so a slow confirmation still
+ * registers; only its start moves, the confirmed expiry stays. If storing the
+ * key fails, the registered session is logged out and the error rethrown.
+ */
+export declare function startGuardianSession(guardian: GuardianHttpClient, signer: Signer, options?: StartSessionOptions): Promise<GuardianSession>;
+/**
+ * Reuse a session key persisted by `startGuardianSession` without asking the
+ * wallet again; `signer` becomes `guardian`'s signer when a session resumes.
+ * Returns `null` when none
+ * is stored or it expires within 30 seconds. A session revoked elsewhere
+ * fails its next request with `session_revoked` and ends then (`onEnded`);
+ * start a new one.
+ */
+export declare function resumeGuardianSession(guardian: GuardianHttpClient, signer: Signer, store: SessionKeyStore, options?: Pick<GuardianSessionOptions, 'onEnded'>): Promise<GuardianSession | null>;
+/**
+ * Revoke `session` on the server, stop using it if it is the current one, and
+ * forget its stored key. Returns whether the server still had it active. On
+ * error nothing changes.
+ */
+export declare function endGuardianSession(guardian: GuardianHttpClient, session: GuardianSession, store?: SessionKeyStore): Promise<boolean>;
+/**
+ * Revoke every session of `signer` on the Guardian with a wallet signature,
+ * including sessions started in other tabs or devices, stop using the current
+ * one, and forget its stored key (a newer key another tab stored meanwhile
+ * is kept). `signer` becomes `guardian`'s signer. Use it when a session key
+ * may be compromised: page logout alone cannot stop a script that holds the
+ * key. Returns how many sessions the server revoked.
+ *
+ * It ends sessions already registered with Guardian. A page that got a grant
+ * signed can still register it for up to about 10 minutes, and a device whose
+ * clock runs behind can miss sessions started just before; run it again 10
+ * minutes later when a key may be compromised.
+ */
+export declare function revokeAllGuardianSessions(guardian: GuardianHttpClient, signer: Signer, store?: SessionKeyStore): Promise<number>;
+//# sourceMappingURL=manager.d.ts.map

package/dist/session/manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.d.ts","sourceRoot":"","sources":["../../src/session/manager.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,kBAAkB,EAClB,kBAAkB,EAClB,MAAM,EACP,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,eAAe,EACf,KAAK,sBAAsB,EAC3B,KAAK,eAAe,EAIrB,MAAM,UAAU,CAAC;AAiBlB,iEAAiE;AACjE,qBAAa,gCAAiC,SAAQ,KAAK;;CAK1D;AAED,+DAA+D;AAC/D,qBAAa,yBAA0B,SAAQ,KAAK;;CAKnD;AAED,MAAM,WAAW,mBAAoB,SAAQ,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAC;IAClF;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACpE,2EAA2E;IAC3E,KAAK,CAAC,EAAE,eAAe,CAAC;CACzB;AAgBD;;;;;;;;;;;;;GAaG;AACH,wBAAsB,oBAAoB,CACxC,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,eAAe,CAAC,CAoF1B;AAED;;;;;;;GAOG;AACH,wBAAsB,qBAAqB,CACzC,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,eAAe,EACtB,OAAO,GAAE,IAAI,CAAC,sBAAsB,EAAE,SAAS,CAAM,GACpD,OAAO,CAAC,eAAe,GAAG,IAAI,CAAC,CAqBjC;AAED;;;;GAIG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,kBAAkB,EAC5B,OAAO,EAAE,eAAe,EACxB,KAAK,CAAC,EAAE,eAAe,GACtB,OAAO,CAAC,OAAO,CAAC,CAMlB;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,yBAAyB,CAC7C,QAAQ,EAAE,kBAAkB,EAC5B,MAAM,EAAE,MAAM,EACd,KAAK,CAAC,EAAE,eAAe,GACtB,OAAO,CAAC,MAAM,CAAC,CAQjB"}

package/dist/session/manager.js

@@ -0,0 +1,187 @@
+import { GuardianSession, WebCryptoSessionKey, forgetSessionKey, } from './key.js';
+/**
+ * A grant is shortened by this much below the Guardian's maximum lifetime so
+ * client clock drift cannot push it over the limit.
+ */
+const MAX_TTL_MARGIN_SECONDS = 60;
+/**
+ * Guardian accepts a grant only while it is at most this old, and only if it
+ * expires more than this far in the future.
+ */
+const GRANT_WINDOW_SECONDS = 300;
+/** Matches `GuardianHttpClient`: a session this close to expiry is not used. */
+const SESSION_EXPIRY_MARGIN_SECONDS = 30;
+/** The Guardian does not advertise sessions on `GET /status`. */
+export class GuardianSessionsUnsupportedError extends Error {
+    constructor() {
+        super('This Guardian does not accept sessions');
+        this.name = 'GuardianSessionsUnsupportedError';
+    }
+}
+/** `confirm` returned `false`: the user declined the grant. */
+export class SessionGrantDeclinedError extends Error {
+    constructor() {
+        super('Session grant was declined');
+        this.name = 'SessionGrantDeclinedError';
+    }
+}
+/** The current page's origin in a browser; empty elsewhere. */
+function pageOrigin() {
+    const location = globalThis.location;
+    return location?.origin && location.origin !== 'null' ? location.origin : '';
+}
+function storeId(guardianCommitment, signerCommitment) {
+    return `${guardianCommitment.toLowerCase()}:${signerCommitment.toLowerCase()}`;
+}
+function nowSeconds() {
+    return Math.floor(Date.now() / 1000);
+}
+/**
+ * Start a Guardian session: `signer` signs one grant and, once the session is
+ * registered, becomes `guardian`'s signer; a non-extractable P-256 delegated
+ * signer then signs the
+ * session-eligible requests on `guardian` (reads, proposal list/get, proposal
+ * create/sign). Every other route, including `configure`, `pushDelta`,
+ * `abandonCandidate`, account lookup and `revokeAllSessions`, keeps using the
+ * wallet. A session already set on `guardian` is replaced but stays valid on
+ * the server until it expires; end it first with {@link endGuardianSession}.
+ *
+ * The grant is dated after `confirm` returns, so a slow confirmation still
+ * registers; only its start moves, the confirmed expiry stays. If storing the
+ * key fails, the registered session is logged out and the error rethrown.
+ */
+export async function startGuardianSession(guardian, signer, options = {}) {
+    if (!signer.signSessionGrant) {
+        throw new Error('This signer cannot sign Guardian session grants');
+    }
+    if (signer.requestAuthFormat !== 'eip712' && !options.confirm) {
+        throw new Error('This wallet signs a session grant as a hash: pass `confirm` and show ' +
+            'describeSessionGrant(grant) to the user first');
+    }
+    const [status, { commitment: guardianCommitment }, key] = await Promise.all([
+        guardian.getStatus(),
+        guardian.getPubkey(signer.scheme),
+        WebCryptoSessionKey.generate(),
+    ]);
+    if (!status.sessions) {
+        throw new GuardianSessionsUnsupportedError();
+    }
+    const maxTtl = status.sessions.maxTtlSeconds - MAX_TTL_MARGIN_SECONDS;
+    const ttl = Math.min(options.ttlSeconds ?? maxTtl, maxTtl);
+    if (!Number.isInteger(ttl) || ttl <= GRANT_WINDOW_SECONDS) {
+        throw new Error(`Session lifetime must be a whole number of seconds above ${GRANT_WINDOW_SECONDS}`);
+    }
+    const issuedAt = nowSeconds();
+    let grant = {
+        signerCommitment: signer.commitment,
+        sessionPublicKey: key.publicKey,
+        origin: options.origin ?? pageOrigin(),
+        issuedAt,
+        expiresAt: issuedAt + ttl,
+        guardianCommitment,
+        network: status.environment,
+    };
+    if (options.confirm) {
+        if (!(await options.confirm(grant))) {
+            throw new SessionGrantDeclinedError();
+        }
+        grant = { ...grant, issuedAt: Math.max(issuedAt, nowSeconds()) };
+        if (grant.expiresAt - grant.issuedAt <= GRANT_WINDOW_SECONDS) {
+            throw new Error('The session grant was confirmed too late; start the session again');
+        }
+    }
+    const signature = await signer.signSessionGrant(grant);
+    if (nowSeconds() - grant.issuedAt > GRANT_WINDOW_SECONDS) {
+        throw new Error(`The wallet took more than ${GRANT_WINDOW_SECONDS} seconds to sign the session grant; ` +
+            'start the session again');
+    }
+    await guardian.createSession({
+        scheme: signer.scheme,
+        ...(signer.requestAuthFormat === 'eip712' ? { authFormat: 'eip712' } : {}),
+        ...(signer.scheme === 'ecdsa' ? { publicKey: signer.publicKey } : {}),
+        signature,
+        grant,
+    });
+    const session = new GuardianSession(key, signer.commitment, grant.expiresAt, storeId(guardianCommitment, signer.commitment), { store: options.store, onEnded: options.onEnded });
+    if (options.store) {
+        try {
+            await options.store.save({
+                id: session.storeId,
+                privateKey: key.privateKey,
+                publicKey: key.publicKey,
+                expiresAt: grant.expiresAt,
+            });
+        }
+        catch (error) {
+            const unreachable = new GuardianSession(key, signer.commitment, grant.expiresAt, session.storeId);
+            await guardian.revokeSession(unreachable).catch(() => false);
+            throw error;
+        }
+    }
+    guardian.setSigner(signer);
+    guardian.setSession(session);
+    return session;
+}
+/**
+ * Reuse a session key persisted by `startGuardianSession` without asking the
+ * wallet again; `signer` becomes `guardian`'s signer when a session resumes.
+ * Returns `null` when none
+ * is stored or it expires within 30 seconds. A session revoked elsewhere
+ * fails its next request with `session_revoked` and ends then (`onEnded`);
+ * start a new one.
+ */
+export async function resumeGuardianSession(guardian, signer, store, options = {}) {
+    const { commitment: guardianCommitment } = await guardian.getPubkey(signer.scheme);
+    const id = storeId(guardianCommitment, signer.commitment);
+    const record = await store.load(id);
+    if (!record) {
+        return null;
+    }
+    if (record.expiresAt - SESSION_EXPIRY_MARGIN_SECONDS <= nowSeconds()) {
+        await store.remove(id, record.publicKey);
+        return null;
+    }
+    const session = new GuardianSession(new WebCryptoSessionKey(record.privateKey, record.publicKey), signer.commitment, record.expiresAt, id, { store, onEnded: options.onEnded });
+    guardian.setSigner(signer);
+    guardian.setSession(session);
+    return session;
+}
+/**
+ * Revoke `session` on the server, stop using it if it is the current one, and
+ * forget its stored key. Returns whether the server still had it active. On
+ * error nothing changes.
+ */
+export async function endGuardianSession(guardian, session, store) {
+    const revoked = await guardian.revokeSession(session);
+    if (store) {
+        await forgetSessionKey(store, session);
+    }
+    return revoked;
+}
+/**
+ * Revoke every session of `signer` on the Guardian with a wallet signature,
+ * including sessions started in other tabs or devices, stop using the current
+ * one, and forget its stored key (a newer key another tab stored meanwhile
+ * is kept). `signer` becomes `guardian`'s signer. Use it when a session key
+ * may be compromised: page logout alone cannot stop a script that holds the
+ * key. Returns how many sessions the server revoked.
+ *
+ * It ends sessions already registered with Guardian. A page that got a grant
+ * signed can still register it for up to about 10 minutes, and a device whose
+ * clock runs behind can miss sessions started just before; run it again 10
+ * minutes later when a key may be compromised.
+ */
+export async function revokeAllGuardianSessions(guardian, signer, store) {
+    guardian.setSigner(signer);
+    const stored = store ? await storedKey(guardian, signer, store) : null;
+    const revoked = await guardian.revokeAllSessions();
+    if (store && stored) {
+        await forgetSessionKey(store, { storeId: stored.id, publicKey: stored.publicKey });
+    }
+    return revoked;
+}
+async function storedKey(guardian, signer, store) {
+    const { commitment: guardianCommitment } = await guardian.getPubkey(signer.scheme);
+    return store.load(storeId(guardianCommitment, signer.commitment));
+}
+//# sourceMappingURL=manager.js.map

package/dist/session/manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"manager.js","sourceRoot":"","sources":["../../src/session/manager.ts"],"names":[],"mappings":"AAKA,OAAO,EACL,eAAe,EAIf,mBAAmB,EACnB,gBAAgB,GACjB,MAAM,UAAU,CAAC;AAElB;;;GAGG;AACH,MAAM,sBAAsB,GAAG,EAAE,CAAC;AAElC;;;GAGG;AACH,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC,gFAAgF;AAChF,MAAM,6BAA6B,GAAG,EAAE,CAAC;AAEzC,iEAAiE;AACjE,MAAM,OAAO,gCAAiC,SAAQ,KAAK;IACzD;QACE,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAChD,IAAI,CAAC,IAAI,GAAG,kCAAkC,CAAC;IACjD,CAAC;CACF;AAED,+DAA+D;AAC/D,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD;QACE,KAAK,CAAC,4BAA4B,CAAC,CAAC;QACpC,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAwBD,+DAA+D;AAC/D,SAAS,UAAU;IACjB,MAAM,QAAQ,GAAI,UAAiD,CAAC,QAAQ,CAAC;IAC7E,OAAO,QAAQ,EAAE,MAAM,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;AAC/E,CAAC;AAED,SAAS,OAAO,CAAC,kBAA0B,EAAE,gBAAwB;IACnE,OAAO,GAAG,kBAAkB,CAAC,WAAW,EAAE,IAAI,gBAAgB,CAAC,WAAW,EAAE,EAAE,CAAC;AACjF,CAAC;AAED,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAA4B,EAC5B,MAAc,EACd,UAA+B,EAAE;IAEjC,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;IACrE,CAAC;IACD,IAAI,MAAM,CAAC,iBAAiB,KAAK,QAAQ,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAC9D,MAAM,IAAI,KAAK,CACb,uEAAuE;YACrE,+CAA+C,CAClD,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,kBAAkB,EAAE,EAAE,GAAG,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1E,QAAQ,CAAC,SAAS,EAAE;QACpB,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC;QACjC,mBAAmB,CAAC,QAAQ,EAAE;KAC/B,CAAC,CAAC;IACH,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,IAAI,gCAAgC,EAAE,CAAC;IAC/C,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,QAAQ,CAAC,aAAa,GAAG,sBAAsB,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,IAAI,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3D,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,oBAAoB,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,4DAA4D,oBAAoB,EAAE,CACnF,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,UAAU,EAAE,CAAC;IAC9B,IAAI,KAAK,GAAuB;QAC9B,gBAAgB,EAAE,MAAM,CAAC,UAAU;QACnC,gBAAgB,EAAE,GAAG,CAAC,SAAS;QAC/B,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,UAAU,EAAE;QACtC,QAAQ;QACR,SAAS,EAAE,QAAQ,GAAG,GAAG;QACzB,kBAAkB;QAClB,OAAO,EAAE,MAAM,CAAC,WAAW;KAC5B,CAAC;IACF,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,IAAI,CAAC,CAAC,MAAM,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;YACpC,MAAM,IAAI,yBAAyB,EAAE,CAAC;QACxC,CAAC;QACD,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,QAAQ,EAAE,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;QACjE,IAAI,KAAK,CAAC,SAAS,GAAG,KAAK,CAAC,QAAQ,IAAI,oBAAoB,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,mEAAmE,CAAC,CAAC;QACvF,CAAC;IACH,CAAC;IACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;IACvD,IAAI,UAAU,EAAE,GAAG,KAAK,CAAC,QAAQ,GAAG,oBAAoB,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CACb,6BAA6B,oBAAoB,sCAAsC;YACrF,yBAAyB,CAC5B,CAAC;IACJ,CAAC;IACD,MAAM,QAAQ,CAAC,aAAa,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,GAAG,CAAC,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,QAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,MAAM,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrE,SAAS;QACT,KAAK;KACN,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,eAAe,CACjC,GAAG,EACH,MAAM,CAAC,UAAU,EACjB,KAAK,CAAC,SAAS,EACf,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC,EAC9C,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CACnD,CAAC;IACF,IAAI,OAAO,CAAC,KAAK,EAAE,CAAC;QAClB,IAAI,CAAC;YACH,MAAM,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC;gBACvB,EAAE,EAAE,OAAO,CAAC,OAAO;gBACnB,UAAU,EAAE,GAAG,CAAC,UAAU;gBAC1B,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,SAAS,EAAE,KAAK,CAAC,SAAS;aAC3B,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;YAClG,MAAM,QAAQ,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YAC7D,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IACD,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,QAA4B,EAC5B,MAAc,EACd,KAAsB,EACtB,UAAmD,EAAE;IAErD,MAAM,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnF,MAAM,EAAE,GAAG,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACpC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,SAAS,GAAG,6BAA6B,IAAI,UAAU,EAAE,EAAE,CAAC;QACrE,MAAM,KAAK,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;QACzC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,OAAO,GAAG,IAAI,eAAe,CACjC,IAAI,mBAAmB,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,SAAS,CAAC,EAC5D,MAAM,CAAC,UAAU,EACjB,MAAM,CAAC,SAAS,EAChB,EAAE,EACF,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,CACpC,CAAC;IACF,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3B,QAAQ,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAA4B,EAC5B,OAAwB,EACxB,KAAuB;IAEvB,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IACtD,IAAI,KAAK,EAAE,CAAC;QACV,MAAM,gBAAgB,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC7C,QAA4B,EAC5B,MAAc,EACd,KAAuB;IAEvB,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;IAC3B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,MAAM,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvE,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,iBAAiB,EAAE,CAAC;IACnD,IAAI,KAAK,IAAI,MAAM,EAAE,CAAC;QACpB,MAAM,gBAAgB,CAAC,KAAK,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,QAA4B,EAC5B,MAAc,EACd,KAAsB;IAEtB,MAAM,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,MAAM,QAAQ,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACnF,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,kBAAkB,EAAE,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;AACpE,CAAC"}

package/dist/signers/ecdsa.d.ts

@@ -1,4 +1,4 @@
-import type { RequestAuthPayload } from '@openzeppelin/guardian-client';
+import type { RequestAuthPayload, SessionGrantFields } from '@openzeppelin/guardian-client';
 import { AuthSecretKey, type MidenClient } from '@miden-sdk/miden-sdk';
 import type { Signer, SignatureScheme } from '../types.js';
 export declare class EcdsaSigner implements Signer {
@@ -16,6 +16,10 @@ export declare class EcdsaSigner implements Signer {
      * Account-less; used directly by `recoverByKey`.
      */
     signLookupMessage(keyCommitmentHex: string, timestampMs: number): Promise<string>;
+    /** Sign a session grant as its raw RPO digest. */
+    signSessionGrant(grant: SessionGrantFields): Promise<string>;
+    /** Sign a session revoke-all as its raw RPO digest. */
+    signSessionRevokeAll(signerCommitment: string, timestampMs: number): Promise<string>;
     bindAccountKey(midenClient: MidenClient, accountId: string): Promise<void>;
     private signWord;
 }

package/dist/signers/ecdsa.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ecdsa.d.ts","sourceRoot":"","sources":["../../src/signers/ecdsa.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAa,aAAa,EAAE,KAAK,WAAW,EAAa,MAAM,sBAAsB,CAAC;AAC7F,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAK3D,qBAAa,WAAY,YAAW,MAAM;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAW;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAO;gBAE/B,SAAS,EAAE,aAAa;IAS9B,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKjF,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,kBAAkB,GACjC,OAAO,CAAC,MAAM,CAAC;IAKZ,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK5D;;;OAGG;IACG,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKjF,cAAc,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAchF,OAAO,CAAC,QAAQ;CAMjB"}
+{"version":3,"file":"ecdsa.d.ts","sourceRoot":"","sources":["../../src/signers/ecdsa.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAC5F,OAAO,EAAa,aAAa,EAAE,KAAK,WAAW,EAAa,MAAM,sBAAsB,CAAC;AAC7F,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAM3D,qBAAa,WAAY,YAAW,MAAM;IACxC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAW;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAO;gBAE/B,SAAS,EAAE,aAAa;IAS9B,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKjF,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,kBAAkB,GACjC,OAAO,CAAC,MAAM,CAAC;IAKZ,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK5D;;;OAGG;IACG,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvF,kDAAkD;IAC5C,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlE,uDAAuD;IACjD,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIpF,cAAc,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAchF,OAAO,CAAC,QAAQ;CAMjB"}

package/dist/signers/ecdsa.js

@@ -2,6 +2,7 @@ import { AccountId } from '@miden-sdk/miden-sdk';
 import { bytesToHex, normalizeHexWord } from '../utils/encoding.js';
 import { AuthDigest } from '../utils/digest.js';
 import { lookupAuthDigest } from '../lookupAuth.js';
+import { sessionGrantDigest, sessionRevokeAllDigest } from '../session/grant.js';
 export class EcdsaSigner {
     commitment;
     publicKey;
@@ -36,6 +37,14 @@ export class EcdsaSigner {
         const digest = lookupAuthDigest(timestampMs, keyCommitmentHex);
         return this.signWord(digest);
     }
+    /** Sign a session grant as its raw RPO digest. */
+    async signSessionGrant(grant) {
+        return this.signWord(sessionGrantDigest(grant));
+    }
+    /** Sign a session revoke-all as its raw RPO digest. */
+    async signSessionRevokeAll(signerCommitment, timestampMs) {
+        return this.signWord(sessionRevokeAllDigest(signerCommitment, timestampMs));
+    }
     async bindAccountKey(midenClient, accountId) {
         const targetAccountId = AccountId.fromHex(accountId);
         const existingAccountId = await midenClient.keystore.getAccountId(this.publicKeyCommitment);

package/dist/signers/ecdsa.js.map

@@ -1 +1 @@
-{"version":3,"file":"ecdsa.js","sourceRoot":"","sources":["../../src/signers/ecdsa.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAA8C,MAAM,sBAAsB,CAAC;AAE7F,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,OAAO,WAAW;IACb,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,MAAM,GAAoB,OAAO,CAAC;IAC1B,SAAS,CAAgB;IACzB,mBAAmB,CAAO;IAE3C,YAAY,SAAwB;QAClC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,SAAiB,EAAE,SAAiB;QACnE,MAAM,MAAM,GAAG,UAAU,CAAC,0BAA0B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,SAAiB,EACjB,cAAkC;QAElC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,aAAqB;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,gBAAwB,EAAE,WAAmB;QACnE,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAwB,EAAE,SAAiB;QAC9D,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5F,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,iBAAiB,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3E,OAAO;YACT,CAAC;YACD,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,CAAC,UAAU,gCAAgC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CACnG,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;IAEO,QAAQ,CAAC,IAAqD;QACpE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,cAAc,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;IACpC,CAAC;CACF"}
+{"version":3,"file":"ecdsa.js","sourceRoot":"","sources":["../../src/signers/ecdsa.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAA8C,MAAM,sBAAsB,CAAC;AAE7F,OAAO,EAAE,UAAU,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAC;AACpE,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAEjF,MAAM,OAAO,WAAW;IACb,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,MAAM,GAAoB,OAAO,CAAC;IAC1B,SAAS,CAAgB;IACzB,mBAAmB,CAAO;IAE3C,YAAY,SAAwB;QAClC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACrC,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACtC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QACjD,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,GAAG,gBAAgB,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC,CAAC;IACvE,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,SAAiB,EAAE,SAAiB;QACnE,MAAM,MAAM,GAAG,UAAU,CAAC,0BAA0B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,SAAiB,EACjB,cAAkC;QAElC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,aAAqB;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,gBAAwB,EAAE,WAAmB;QACnE,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,gBAAgB,CAAC,KAAyB;QAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,oBAAoB,CAAC,gBAAwB,EAAE,WAAmB;QACtE,OAAO,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAwB,EAAE,SAAiB;QAC9D,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5F,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,iBAAiB,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3E,OAAO;YACT,CAAC;YACD,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,CAAC,UAAU,gCAAgC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CACnG,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;IAEO,QAAQ,CAAC,IAAqD;QACpE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,cAAc,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,OAAO,UAAU,CAAC,cAAc,CAAC,CAAC;IACpC,CAAC;CACF"}

package/dist/signers/falcon.d.ts

@@ -1,4 +1,4 @@
-import type { RequestAuthPayload } from '@openzeppelin/guardian-client';
+import type { RequestAuthPayload, SessionGrantFields } from '@openzeppelin/guardian-client';
 import { AuthSecretKey, type MidenClient } from '@miden-sdk/miden-sdk';
 import type { Signer, SignatureScheme } from '../types.js';
 export declare class FalconSigner implements Signer {
@@ -16,6 +16,10 @@ export declare class FalconSigner implements Signer {
      * Account-less; used directly by `recoverByKey`.
      */
     signLookupMessage(keyCommitmentHex: string, timestampMs: number): Promise<string>;
+    /** Sign a session grant as its raw RPO digest. */
+    signSessionGrant(grant: SessionGrantFields): Promise<string>;
+    /** Sign a session revoke-all as its raw RPO digest. */
+    signSessionRevokeAll(signerCommitment: string, timestampMs: number): Promise<string>;
     bindAccountKey(midenClient: MidenClient, accountId: string): Promise<void>;
     private signWord;
 }

package/dist/signers/falcon.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"falcon.d.ts","sourceRoot":"","sources":["../../src/signers/falcon.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AACxE,OAAO,EAAa,aAAa,EAAE,KAAK,WAAW,EAAa,MAAM,sBAAsB,CAAC;AAC7F,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAK3D,qBAAa,YAAa,YAAW,MAAM;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAY;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAO;gBAE/B,SAAS,EAAE,aAAa;IAU9B,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKjF,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,kBAAkB,GACjC,OAAO,CAAC,MAAM,CAAC;IAKZ,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK5D;;;OAGG;IACG,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKjF,cAAc,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAchF,OAAO,CAAC,QAAQ;CAMjB"}
+{"version":3,"file":"falcon.d.ts","sourceRoot":"","sources":["../../src/signers/falcon.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAC5F,OAAO,EAAa,aAAa,EAAE,KAAK,WAAW,EAAa,MAAM,sBAAsB,CAAC;AAC7F,OAAO,KAAK,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAM3D,qBAAa,YAAa,YAAW,MAAM;IACzC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAY;IAC5C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAgB;IAC1C,OAAO,CAAC,QAAQ,CAAC,mBAAmB,CAAO;gBAE/B,SAAS,EAAE,aAAa;IAU9B,0BAA0B,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKjF,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,kBAAkB,GACjC,OAAO,CAAC,MAAM,CAAC;IAKZ,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK5D;;;OAGG;IACG,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKvF,kDAAkD;IAC5C,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlE,uDAAuD;IACjD,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAIpF,cAAc,CAAC,WAAW,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAchF,OAAO,CAAC,QAAQ;CAMjB"}

package/dist/signers/falcon.js

@@ -2,6 +2,7 @@ import { AccountId } from '@miden-sdk/miden-sdk';
 import { bytesToHex } from '../utils/encoding.js';
 import { AuthDigest } from '../utils/digest.js';
 import { lookupAuthDigest } from '../lookupAuth.js';
+import { sessionGrantDigest, sessionRevokeAllDigest } from '../session/grant.js';
 export class FalconSigner {
     commitment;
     publicKey;
@@ -37,6 +38,14 @@ export class FalconSigner {
         const digest = lookupAuthDigest(timestampMs, keyCommitmentHex);
         return this.signWord(digest);
     }
+    /** Sign a session grant as its raw RPO digest. */
+    async signSessionGrant(grant) {
+        return this.signWord(sessionGrantDigest(grant));
+    }
+    /** Sign a session revoke-all as its raw RPO digest. */
+    async signSessionRevokeAll(signerCommitment, timestampMs) {
+        return this.signWord(sessionRevokeAllDigest(signerCommitment, timestampMs));
+    }
     async bindAccountKey(midenClient, accountId) {
         const targetAccountId = AccountId.fromHex(accountId);
         const existingAccountId = await midenClient.keystore.getAccountId(this.publicKeyCommitment);

package/dist/signers/falcon.js.map

@@ -1 +1 @@
-{"version":3,"file":"falcon.js","sourceRoot":"","sources":["../../src/signers/falcon.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAA8C,MAAM,sBAAsB,CAAC;AAE7F,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AAEpD,MAAM,OAAO,YAAY;IACd,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,MAAM,GAAoB,QAAQ,CAAC;IAC3B,SAAS,CAAgB;IACzB,mBAAmB,CAAO;IAE3C,YAAY,SAAwB;QAClC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,SAAiB,EAAE,SAAiB;QACnE,MAAM,MAAM,GAAG,UAAU,CAAC,0BAA0B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,SAAiB,EACjB,cAAkC;QAElC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,aAAqB;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,gBAAwB,EAAE,WAAmB;QACnE,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAwB,EAAE,SAAiB;QAC9D,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5F,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,iBAAiB,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3E,OAAO;YACT,CAAC;YACD,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,CAAC,UAAU,gCAAgC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CACnG,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;IAEO,QAAQ,CAAC,IAAU;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,cAAc,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChD,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACF"}
+{"version":3,"file":"falcon.js","sourceRoot":"","sources":["../../src/signers/falcon.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,SAAS,EAA8C,MAAM,sBAAsB,CAAC;AAE7F,OAAO,EAAE,UAAU,EAAE,MAAM,sBAAsB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAChD,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,EAAE,kBAAkB,EAAE,sBAAsB,EAAE,MAAM,qBAAqB,CAAC;AAEjF,MAAM,OAAO,YAAY;IACd,UAAU,CAAS;IACnB,SAAS,CAAS;IAClB,MAAM,GAAoB,QAAQ,CAAC;IAC3B,SAAS,CAAgB;IACzB,mBAAmB,CAAO;IAE3C,YAAY,SAAwB;QAClC,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,MAAM,MAAM,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,mBAAmB,GAAG,MAAM,CAAC,YAAY,EAAE,CAAC;QACjD,IAAI,CAAC,UAAU,GAAG,IAAI,CAAC,mBAAmB,CAAC,KAAK,EAAE,CAAC;QACnD,MAAM,UAAU,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;QACtC,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QACzC,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,YAAY,CAAC,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,0BAA0B,CAAC,SAAiB,EAAE,SAAiB;QACnE,MAAM,MAAM,GAAG,UAAU,CAAC,0BAA0B,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;QAC3E,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,WAAW,CACf,SAAiB,EACjB,SAAiB,EACjB,cAAkC;QAElC,MAAM,MAAM,GAAG,UAAU,CAAC,WAAW,CAAC,SAAS,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;QAC5E,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,aAAqB;QACxC,MAAM,IAAI,GAAG,UAAU,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,iBAAiB,CAAC,gBAAwB,EAAE,WAAmB;QACnE,MAAM,MAAM,GAAG,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,CAAC,CAAC;QAC/D,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC/B,CAAC;IAED,kDAAkD;IAClD,KAAK,CAAC,gBAAgB,CAAC,KAAyB;QAC9C,OAAO,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,CAAC;IAClD,CAAC;IAED,uDAAuD;IACvD,KAAK,CAAC,oBAAoB,CAAC,gBAAwB,EAAE,WAAmB;QACtE,OAAO,IAAI,CAAC,QAAQ,CAAC,sBAAsB,CAAC,gBAAgB,EAAE,WAAW,CAAC,CAAC,CAAC;IAC9E,CAAC;IAED,KAAK,CAAC,cAAc,CAAC,WAAwB,EAAE,SAAiB;QAC9D,MAAM,eAAe,GAAG,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QACrD,MAAM,iBAAiB,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAC5F,IAAI,iBAAiB,EAAE,CAAC;YACtB,IAAI,iBAAiB,CAAC,QAAQ,EAAE,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC3E,OAAO;YACT,CAAC;YACD,MAAM,IAAI,KAAK,CACb,qBAAqB,IAAI,CAAC,UAAU,gCAAgC,iBAAiB,CAAC,QAAQ,EAAE,EAAE,CACnG,CAAC;QACJ,CAAC;QACD,MAAM,WAAW,CAAC,QAAQ,CAAC,MAAM,CAAC,eAAe,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IACrE,CAAC;IAEO,QAAQ,CAAC,IAAU;QACzB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC5C,MAAM,cAAc,GAAG,SAAS,CAAC,SAAS,EAAE,CAAC;QAC7C,MAAM,eAAe,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAChD,OAAO,UAAU,CAAC,eAAe,CAAC,CAAC;IACrC,CAAC;CACF"}

package/dist/signers/ledger.d.ts

@@ -1,4 +1,4 @@
-import type { RequestAuthPayload, Signer } from '@openzeppelin/guardian-client';
+import type { RequestAuthPayload, SessionGrantFields, Signer } from '@openzeppelin/guardian-client';
 export interface Eip1193SignerProvider {
     request(args: {
         method: string;
@@ -19,6 +19,14 @@ export declare class Eip712Signer implements Signer {
     signRequest(accountId: string, timestamp: number, requestPayload: RequestAuthPayload): Promise<string>;
     signLookupMessage(keyCommitmentHex: string, timestampMs: number): Promise<string>;
     signCommitment(commitmentHex: string): Promise<string>;
+    /**
+     * Sign a session grant as readable `GuardianSession` typed
+     * data, so the device shows the Guardian, network and expiry rather than a
+     * hash. Devices without registered display metadata need "Verbose EIP-712".
+     */
+    signSessionGrant(grant: SessionGrantFields): Promise<string>;
+    /** Sign a session revoke-all as readable `GuardianSessionRevokeAll` typed data. */
+    signSessionRevokeAll(signerCommitment: string, timestampMs: number): Promise<string>;
     private signTypedData;
 }
 export { Eip712Signer as LedgerSigner };

package/dist/signers/ledger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../src/signers/ledger.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAehF,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxE;AAED,qBAAa,YAAa,YAAW,MAAM;IAmCvC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAlC3B,QAAQ,CAAC,MAAM,WAAW;IAC1B,QAAQ,CAAC,iBAAiB,YAAY;IACtC,QAAQ,CAAC,qBAAqB,YAAY;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;WAEZ,OAAO,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,YAAY,CAAC;gBA2BzD,QAAQ,EAAE,qBAAqB,EAChD,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM;IAoBjB,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC;IAIvC,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,kBAAkB,GACjC,OAAO,CAAC,MAAM,CAAC;IAKZ,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKjF,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAK9C,aAAa;CAkB5B;AAED,OAAO,EAAE,YAAY,IAAI,YAAY,EAAE,CAAC"}
+{"version":3,"file":"ledger.d.ts","sourceRoot":"","sources":["../../src/signers/ledger.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,+BAA+B,CAAC;AAkBpG,MAAM,WAAW,qBAAqB;IACpC,OAAO,CAAC,IAAI,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,OAAO,EAAE,CAAA;KAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACxE;AAED,qBAAa,YAAa,YAAW,MAAM;IAmCvC,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAlC3B,QAAQ,CAAC,MAAM,WAAW;IAC1B,QAAQ,CAAC,iBAAiB,YAAY;IACtC,QAAQ,CAAC,qBAAqB,YAAY;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;WAEZ,OAAO,CAAC,QAAQ,EAAE,qBAAqB,GAAG,OAAO,CAAC,YAAY,CAAC;gBA2BzD,QAAQ,EAAE,qBAAqB,EAChD,SAAS,EAAE,MAAM,EACjB,OAAO,EAAE,MAAM;IAoBjB,0BAA0B,IAAI,OAAO,CAAC,MAAM,CAAC;IAIvC,WAAW,CACf,SAAS,EAAE,MAAM,EACjB,SAAS,EAAE,MAAM,EACjB,cAAc,EAAE,kBAAkB,GACjC,OAAO,CAAC,MAAM,CAAC;IAKZ,iBAAiB,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAKjF,cAAc,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;IAK5D;;;;OAIG;IACG,gBAAgB,CAAC,KAAK,EAAE,kBAAkB,GAAG,OAAO,CAAC,MAAM,CAAC;IAIlE,mFAAmF;IAC7E,oBAAoB,CAAC,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC;YAI5E,aAAa;CAkB5B;AAED,OAAO,EAAE,YAAY,IAAI,YAAY,EAAE,CAAC"}

package/dist/signers/ledger.js

@@ -4,7 +4,7 @@ import { AuthDigest } from '../utils/digest.js';
 import { lookupAuthDigest } from '../lookupAuth.js';
 import { EcdsaFormat } from '../utils/ecdsa.js';
 import { bytesToHex, hexToBytes } from '../utils/encoding.js';
-import { guardianKeyDiscoveryTypedData, guardianLookupTypedData, guardianRequestTypedData, midenTransactionTypedData, typedDataDigest, } from '../utils/eip712.js';
+import { guardianKeyDiscoveryTypedData, guardianLookupTypedData, guardianRequestTypedData, guardianSessionRevokeAllTypedData, guardianSessionTypedData, midenTransactionTypedData, typedDataDigest, } from '../utils/eip712.js';
 import { tryComputeEcdsaCommitmentHex } from '../utils/signature.js';
 import { wordToBytes } from '../utils/word.js';
 export class Eip712Signer {
@@ -73,6 +73,18 @@ export class Eip712Signer {
         const commitment = AuthDigest.fromCommitmentHex(commitmentHex);
         return this.signTypedData(midenTransactionTypedData(wordToBytes(commitment)));
     }
+    /**
+     * Sign a session grant as readable `GuardianSession` typed
+     * data, so the device shows the Guardian, network and expiry rather than a
+     * hash. Devices without registered display metadata need "Verbose EIP-712".
+     */
+    async signSessionGrant(grant) {
+        return this.signTypedData(guardianSessionTypedData(grant));
+    }
+    /** Sign a session revoke-all as readable `GuardianSessionRevokeAll` typed data. */
+    async signSessionRevokeAll(signerCommitment, timestampMs) {
+        return this.signTypedData(guardianSessionRevokeAllTypedData(signerCommitment, timestampMs));
+    }
     async signTypedData(data) {
         const result = await this.provider.request({
             method: 'eth_signTypedData_v4',