@phantom/embedded-provider-core 1.0.0-beta.1 → 1.0.0-beta.3

package/dist/index.mjs

@@ -1,7 +1,7 @@
 // src/embedded-provider.ts
 import { PhantomClient } from "@phantom/client";
 import { base64urlEncode } from "@phantom/base64url";
-import bs58 from "bs58";
+import bs582 from "bs58";
 import {
   parseMessage,
   parseTransactionToBase64Url,
@@ -133,7 +133,8 @@ async function retryWithBackoff(operation, operationName, logger, maxRetries = 3
 // src/chains/SolanaChain.ts
 import { EventEmitter } from "eventemitter3";
 import { NetworkId } from "@phantom/constants";
-import { Buffer } from "buffer";
+import bs58 from "bs58";
+import { parseSolanaTransactionSignature } from "@phantom/parsers";
 var EmbeddedSolanaChain = class {
   constructor(provider) {
     this.provider = provider;
@@ -164,15 +165,20 @@ var EmbeddedSolanaChain = class {
       message: messageStr,
       networkId: this.currentNetworkId
     });
-    const signature = typeof result.signature === "string" ? new Uint8Array(Buffer.from(result.signature, "base64")) : result.signature;
+    const signature = typeof result.signature === "string" ? new Uint8Array(bs58.decode(result.signature)) : result.signature;
     return {
       signature,
       publicKey: this._publicKey || ""
     };
   }
-  signTransaction(_transaction) {
+  async signTransaction(transaction) {
     this.ensureConnected();
-    throw new Error("signTransaction not yet implemented for embedded provider");
+    const result = await this.provider.signTransaction({
+      transaction,
+      networkId: this.currentNetworkId
+    });
+    const signatureResult = parseSolanaTransactionSignature(result.rawTransaction);
+    return signatureResult.signature;
   }
   async signAndSendTransaction(transaction) {
     this.ensureConnected();
@@ -189,6 +195,10 @@ var EmbeddedSolanaChain = class {
     const results = await Promise.all(transactions.map((tx) => this.signTransaction(tx)));
     return results;
   }
+  async signAndSendAllTransactions(transactions) {
+    const results = await Promise.all(transactions.map((tx) => this.signAndSendTransaction(tx)));
+    return { signatures: results.map((result) => result.signature) };
+  }
   connect(_options) {
     if (!this.provider.isConnected()) {
       throw new Error("Provider not connected. Call provider connect first.");
@@ -255,6 +265,8 @@ var EmbeddedSolanaChain = class {
 // src/chains/EthereumChain.ts
 import { EventEmitter as EventEmitter2 } from "eventemitter3";
 import { NetworkId as NetworkId2, chainIdToNetworkId, networkIdToChainId } from "@phantom/constants";
+import { base64urlDecode } from "@phantom/base64url";
+import { Buffer } from "buffer";
 var EmbeddedEthereumChain = class {
   constructor(provider) {
     this.provider = provider;
@@ -311,6 +323,18 @@ var EmbeddedEthereumChain = class {
       params: [address, JSON.stringify(typedData)]
     });
   }
+  async signTransaction(transaction) {
+    const result = await this.provider.signTransaction({
+      transaction,
+      networkId: this.currentNetworkId
+    });
+    try {
+      const signatureBytes = base64urlDecode(result.rawTransaction);
+      return "0x" + Buffer.from(signatureBytes).toString("hex");
+    } catch (error) {
+      return result.rawTransaction.startsWith("0x") ? result.rawTransaction : "0x" + result.rawTransaction;
+    }
+  }
   async sendTransaction(transaction) {
     const result = await this.provider.signAndSendTransaction({
       transaction,
@@ -388,6 +412,17 @@ var EmbeddedEthereumChain = class {
         });
         return typedDataResult.signature;
       }
+      case "eth_signTransaction": {
+        const [transaction] = args.params;
+        const networkIdFromTx = transaction.chainId ? chainIdToNetworkId(
+          typeof transaction.chainId === "number" ? transaction.chainId : parseInt(transaction.chainId, 16)
+        ) : null;
+        const signResult = await this.provider.signTransaction({
+          transaction,
+          networkId: networkIdFromTx || this.currentNetworkId
+        });
+        return signResult.rawTransaction;
+      }
       case "eth_sendTransaction": {
         const [transaction] = args.params;
         const networkIdFromTx = transaction.chainId ? chainIdToNetworkId(
@@ -435,6 +470,9 @@ var EmbeddedProvider = class {
     this.eventListeners = /* @__PURE__ */ new Map();
     this.logger = logger;
     this.logger.log("EMBEDDED_PROVIDER", "Initializing EmbeddedProvider", { config });
+    if (config.embeddedWalletType === "app-wallet") {
+      throw new Error("app-wallet type is not currently supported. Please use 'user-wallet' instead.");
+    }
     this.config = config;
     this.platform = platform;
     this.storage = platform.storage;
@@ -442,7 +480,6 @@ var EmbeddedProvider = class {
     this.urlParamsAccessor = platform.urlParamsAccessor;
     this.stamper = platform.stamper;
     this.jwtAuth = new JWTAuth();
-    config.solanaProvider;
     this.solana = new EmbeddedSolanaChain(this);
     this.ethereum = new EmbeddedEthereumChain(this);
     this.logger.info("EMBEDDED_PROVIDER", "EmbeddedProvider initialized");
@@ -709,7 +746,10 @@ var EmbeddedProvider = class {
     this.logger.log("EMBEDDED_PROVIDER", "Creating temporary PhantomClient");
     const tempClient = new PhantomClient(
       {
-        apiBaseUrl: this.config.apiBaseUrl
+        apiBaseUrl: this.config.apiBaseUrl,
+        headers: {
+          ...this.platform.analyticsHeaders || {}
+        }
       },
       this.stamper
     );
@@ -721,8 +761,8 @@ var EmbeddedProvider = class {
       publicKey: stamperInfo.publicKey,
       platform: platformName
     });
-    const base64urlPublicKey = base64urlEncode(bs58.decode(stamperInfo.publicKey));
-    const expiresAtMs = Date.now() + AUTHENTICATOR_EXPIRATION_TIME_MS;
+    const base64urlPublicKey = base64urlEncode(bs582.decode(stamperInfo.publicKey));
+    const expiresInMs = AUTHENTICATOR_EXPIRATION_TIME_MS;
     const username = `user-${shortPubKey}`;
     const { organizationId } = await tempClient.createOrganization(organizationName, [
       {
@@ -735,13 +775,13 @@ var EmbeddedProvider = class {
             publicKey: base64urlPublicKey,
             algorithm: "Ed25519"
             // Commented for now until KMS supports fully expirable organizations
-            // expiresAtMs: expiresAtMs,
+            // expiresInMs: expiresInMs,
           }
         ]
       }
     ]);
     this.logger.info("EMBEDDED_PROVIDER", "Organization created", { organizationId });
-    return { organizationId, stamperInfo, expiresAtMs, username };
+    return { organizationId, stamperInfo, expiresInMs, username };
   }
   async connect(authOptions) {
     try {
@@ -770,8 +810,8 @@ var EmbeddedProvider = class {
       }
       this.validateAuthOptions(authOptions);
       this.logger.info("EMBEDDED_PROVIDER", "No existing connection, creating new auth flow");
-      const { organizationId, stamperInfo, expiresAtMs, username } = await this.createOrganizationAndStamper();
-      const session = await this.handleAuthFlow(organizationId, stamperInfo, authOptions, expiresAtMs, username);
+      const { organizationId, stamperInfo, expiresInMs, username } = await this.createOrganizationAndStamper();
+      const session = await this.handleAuthFlow(organizationId, stamperInfo, authOptions, expiresInMs, username);
       if (!session) {
         return {
           addresses: [],
@@ -869,6 +909,36 @@ var EmbeddedProvider = class {
     });
     return parseSignMessageResponse(rawResponse, params.networkId);
   }
+  async signTransaction(params) {
+    if (!this.client || !this.walletId) {
+      throw new Error("Not connected");
+    }
+    await this.ensureValidAuthenticator();
+    this.logger.info("EMBEDDED_PROVIDER", "Signing transaction", {
+      walletId: this.walletId,
+      networkId: params.networkId
+    });
+    const parsedTransaction = await parseTransactionToBase64Url(params.transaction, params.networkId);
+    const session = await this.storage.getSession();
+    const derivationIndex = session?.accountDerivationIndex ?? 0;
+    this.logger.log("EMBEDDED_PROVIDER", "Parsed transaction for signing", {
+      walletId: this.walletId,
+      transaction: parsedTransaction,
+      derivationIndex
+    });
+    const rawResponse = await this.client.signTransaction({
+      walletId: this.walletId,
+      transaction: parsedTransaction.base64url,
+      networkId: params.networkId,
+      derivationIndex
+    });
+    this.logger.info("EMBEDDED_PROVIDER", "Transaction signed successfully", {
+      walletId: this.walletId,
+      networkId: params.networkId,
+      rawTransaction: rawResponse.rawTransaction
+    });
+    return await parseTransactionResponse(rawResponse.rawTransaction, params.networkId);
+  }
   async signAndSendTransaction(params) {
     if (!this.client || !this.walletId) {
       throw new Error("Not connected");
@@ -911,13 +981,13 @@ var EmbeddedProvider = class {
    * It handles app-wallet creation directly or routes to JWT/redirect authentication for user-wallets.
    * Returns null for redirect flows since they don't complete synchronously.
    */
-  async handleAuthFlow(organizationId, stamperInfo, authOptions, expiresAtMs, username) {
+  async handleAuthFlow(organizationId, stamperInfo, authOptions, expiresInMs, username) {
     if (this.config.embeddedWalletType === "user-wallet") {
       this.logger.info("EMBEDDED_PROVIDER", "Creating user-wallet, routing authentication", {
         authProvider: authOptions?.provider || "phantom-connect"
       });
       if (authOptions?.provider === "jwt") {
-        return await this.handleJWTAuth(organizationId, stamperInfo, authOptions, expiresAtMs, username);
+        return await this.handleJWTAuth(organizationId, stamperInfo, authOptions, expiresInMs, username);
       } else {
         this.logger.info("EMBEDDED_PROVIDER", "Starting redirect-based authentication flow", {
           organizationId,
@@ -933,7 +1003,10 @@ var EmbeddedProvider = class {
       const tempClient = new PhantomClient(
         {
           apiBaseUrl: this.config.apiBaseUrl,
-          organizationId
+          organizationId,
+          headers: {
+            ...this.platform.analyticsHeaders || {}
+          }
         },
         this.stamper
       );
@@ -954,7 +1027,7 @@ var EmbeddedProvider = class {
         createdAt: now,
         lastUsed: now,
         authenticatorCreatedAt: now,
-        authenticatorExpiresAt: expiresAtMs,
+        authenticatorExpiresAt: Date.now() + expiresInMs,
         lastRenewalAttempt: void 0,
         username
       };
@@ -967,7 +1040,7 @@ var EmbeddedProvider = class {
    * We use this method to handle JWT-based authentication for user-wallets.
    * It authenticates using the provided JWT token and creates a completed session.
    */
-  async handleJWTAuth(organizationId, stamperInfo, authOptions, expiresAtMs, username) {
+  async handleJWTAuth(organizationId, stamperInfo, authOptions, expiresInMs, username) {
     this.logger.info("EMBEDDED_PROVIDER", "Using JWT authentication flow");
     if (!authOptions.jwtToken) {
       this.logger.error("EMBEDDED_PROVIDER", "JWT token missing for JWT authentication");
@@ -997,7 +1070,7 @@ var EmbeddedProvider = class {
       createdAt: now,
       lastUsed: now,
       authenticatorCreatedAt: now,
-      authenticatorExpiresAt: expiresAtMs,
+      authenticatorExpiresAt: Date.now() + expiresInMs,
       lastRenewalAttempt: void 0,
       username
     };
@@ -1013,8 +1086,8 @@ var EmbeddedProvider = class {
   async handleRedirectAuth(organizationId, stamperInfo, authOptions, username) {
     this.logger.info("EMBEDDED_PROVIDER", "Using Phantom Connect authentication flow (redirect-based)", {
       provider: authOptions?.provider,
-      hasRedirectUrl: !!this.config.authOptions?.redirectUrl,
-      authUrl: this.config.authOptions?.authUrl
+      hasRedirectUrl: !!this.config.authOptions.redirectUrl,
+      authUrl: this.config.authOptions.authUrl
     });
     const now = Date.now();
     const sessionId = generateSessionId();
@@ -1048,16 +1121,16 @@ var EmbeddedProvider = class {
       parentOrganizationId: this.config.organizationId,
       appId: this.config.appId,
       provider: authOptions?.provider,
-      authUrl: this.config.authOptions?.authUrl
+      authUrl: this.config.authOptions.authUrl
     });
     const authResult = await this.authProvider.authenticate({
       organizationId,
       appId: this.config.appId,
       parentOrganizationId: this.config.organizationId,
       provider: authOptions?.provider,
-      redirectUrl: this.config.authOptions?.redirectUrl,
+      redirectUrl: this.config.authOptions.redirectUrl,
       customAuthData: authOptions?.customAuthData,
-      authUrl: this.config.authOptions?.authUrl,
+      authUrl: this.config.authOptions.authUrl,
       sessionId
     });
     if (authResult && "walletId" in authResult) {
@@ -1152,8 +1225,8 @@ var EmbeddedProvider = class {
         newKeyId: newKeyInfo.keyId,
         newPublicKey: newKeyInfo.publicKey
       });
-      const base64urlPublicKey = base64urlEncode(bs58.decode(newKeyInfo.publicKey));
-      const expiresAtMs = Date.now() + AUTHENTICATOR_EXPIRATION_TIME_MS;
+      const base64urlPublicKey = base64urlEncode(bs582.decode(newKeyInfo.publicKey));
+      const expiresInMs = AUTHENTICATOR_EXPIRATION_TIME_MS;
       let authenticatorResult;
       try {
         authenticatorResult = await this.client.createAuthenticator({
@@ -1166,7 +1239,7 @@ var EmbeddedProvider = class {
             publicKey: base64urlPublicKey,
             algorithm: "Ed25519"
             // Commented for now until KMS supports fully expiring organizations
-            // expiresAtMs: expiresAtMs,
+            // expiresInMs: expiresInMs,
           },
           replaceExpirable: true
         });
@@ -1186,12 +1259,12 @@ var EmbeddedProvider = class {
       const now = Date.now();
       session.stamperInfo = newKeyInfo;
       session.authenticatorCreatedAt = now;
-      session.authenticatorExpiresAt = expiresAtMs;
+      session.authenticatorExpiresAt = Date.now() + expiresInMs;
       session.lastRenewalAttempt = now;
       await this.storage.saveSession(session);
       this.logger.info("EMBEDDED_PROVIDER", "Authenticator renewal completed successfully", {
         newKeyId: newKeyInfo.keyId,
-        expiresAt: new Date(expiresAtMs).toISOString()
+        expiresAt: new Date(Date.now() + expiresInMs).toISOString()
       });
     } catch (error) {
       await this.stamper.rollbackRotation();
@@ -1214,7 +1287,10 @@ var EmbeddedProvider = class {
     this.client = new PhantomClient(
       {
         apiBaseUrl: this.config.apiBaseUrl,
-        organizationId: session.organizationId
+        organizationId: session.organizationId,
+        headers: {
+          ...this.platform.analyticsHeaders || {}
+        }
       },
       this.stamper
     );