@qrkit/core 0.2.0 → 0.3.0

package/README.md

@@ -32,14 +32,23 @@ account.sourceFingerprint // master key fingerprint — required for signing
 Encode a message as animated UR parts to display as a QR code for the wallet to scan:
 
 ```ts
-import { buildEthSignRequestURParts, buildEthSignRequestUR } from '@qrkit/core'
+import { buildEthSignRequestURParts, buildEthSignRequestUR, EthDataType } from '@qrkit/core'
 
 // Animated QR (multiple parts for long messages)
-const parts = buildEthSignRequestURParts(message, account.address, account.sourceFingerprint)
+const parts = buildEthSignRequestURParts({
+  signData: message,            // string (UTF-8 encoded) or Uint8Array (raw bytes)
+  dataType: EthDataType.PersonalMessage, // defaults to PersonalMessage if omitted
+  address: account.address,
+  sourceFingerprint: account.sourceFingerprint,
+})
 // parts is string[] — cycle through them to animate the QR
 
 // Single-frame QR (short messages)
-const ur = buildEthSignRequestUR(message, account.address, account.sourceFingerprint)
+const ur = buildEthSignRequestUR({
+  signData: message,
+  address: account.address,
+  sourceFingerprint: account.sourceFingerprint,
+})
 ```
 
 ### 3. Parse the wallet's signature response
@@ -58,8 +67,9 @@ const signature = parseEthSignature(scannedResponseUR)
 | Export | Description |
 |---|---|
 | `parseConnection(ur, options)` | Parse a `crypto-hdkey` or `crypto-account` UR into `Account[]` |
-| `buildEthSignRequestURParts(message, address, fingerprint)` | Build animated UR parts for an EIP-191 sign request |
-| `buildEthSignRequestUR(message, address, fingerprint)` | Build a single-frame UR for a sign request |
+| `buildEthSignRequestURParts(params)` | Build animated UR parts for a sign request (`EthSignRequestParams`) |
+| `buildEthSignRequestUR(params)` | Build a single-frame UR for a sign request (`EthSignRequestParams`) |
+| `EthDataType` | Constants for ERC-4527 data types (1–4) |
 | `parseEthSignature(ur)` | Decode an `eth-signature` UR into a `0x...` hex string |
 
 ## License

package/dist/index.cjs

@@ -30,6 +30,7 @@ var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: tru
 // src/index.ts
 var index_exports = {};
 __export(index_exports, {
+  EthDataType: () => EthDataType,
   buildEthSignRequestUR: () => buildEthSignRequestUR,
   buildEthSignRequestURParts: () => buildEthSignRequestURParts,
   parseConnection: () => parseConnection,
@@ -227,7 +228,16 @@ function encodeURParts(cbor, type, maxFragmentLength = 200) {
 }
 
 // src/eth/signRequest.ts
-var DATA_TYPE_ETH_RAW_BYTES = 3;
+var EthDataType = {
+  /** Legacy transaction (RLP-encoded). Wallet applies EIP-155: v = 35 + 2*chainId + recId */
+  LegacyTransaction: 1,
+  /** EIP-712 typed data bytes. Wallet hashes internally. */
+  TypedData: 2,
+  /** Personal message (EIP-191). Wallet prepends "\x19Ethereum Signed Message:\n{len}". */
+  PersonalMessage: 3,
+  /** EIP-1559 transaction (RLP-encoded). Wallet uses v = recId. */
+  TypedTransaction: 4
+};
 var TAG_KEYPATH = 304;
 function randomBytes(n) {
   const buf = new Uint8Array(n);
@@ -242,39 +252,41 @@ function buildKeypath(purpose, coinType, sourceFingerprint) {
   }
   return new CborTag(TAG_KEYPATH, keypathMap);
 }
-function buildEthSignRequestCbor(message, address, sourceFingerprint, origin = "qrkit") {
+function buildEthSignRequestCbor(params) {
+  const {
+    signData,
+    dataType = EthDataType.PersonalMessage,
+    address,
+    sourceFingerprint,
+    chainId,
+    origin = "qrkit"
+  } = params;
   const requestId = randomBytes(16);
-  const messageBytes = new TextEncoder().encode(message);
+  const signBytes = typeof signData === "string" ? new TextEncoder().encode(signData) : signData;
   const keypath = buildKeypath(44, 60, sourceFingerprint);
   const addrHex = address.replace(/^0x/i, "");
   const addrBytes = new Uint8Array(addrHex.match(/.{2}/g).map((b) => parseInt(b, 16)));
   const map = /* @__PURE__ */ new Map([
     [1, new CborTag(37, requestId)],
     // request-id: uuid = #6.37(bstr)
-    [2, messageBytes],
+    [2, signBytes],
     // sign-data
-    [3, DATA_TYPE_ETH_RAW_BYTES],
-    // data-type: eth-raw-bytes for EIP-191
-    [5, keypath],
-    // derivation-path
-    [6, addrBytes],
-    // address
-    [7, origin]
-    // origin
+    [3, dataType]
+    // data-type
   ]);
+  if (chainId !== void 0) {
+    map.set(4, chainId);
+  }
+  map.set(5, keypath);
+  map.set(6, addrBytes);
+  map.set(7, origin);
   return encode(map);
 }
-function buildEthSignRequestURParts(message, address, sourceFingerprint, origin) {
-  return encodeURParts(
-    buildEthSignRequestCbor(message, address, sourceFingerprint, origin),
-    "eth-sign-request"
-  );
+function buildEthSignRequestURParts(params) {
+  return encodeURParts(buildEthSignRequestCbor(params), "eth-sign-request");
 }
-function buildEthSignRequestUR(message, address, sourceFingerprint, origin) {
-  return encodeURParts(
-    buildEthSignRequestCbor(message, address, sourceFingerprint, origin),
-    "eth-sign-request"
-  )[0];
+function buildEthSignRequestUR(params) {
+  return encodeURParts(buildEthSignRequestCbor(params), "eth-sign-request")[0];
 }
 
 // src/eth/signature.ts
@@ -295,6 +307,7 @@ function parseEthSignature(scanned) {
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {
+  EthDataType,
   buildEthSignRequestUR,
   buildEthSignRequestURParts,
   parseConnection,

package/dist/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts","../src/parseXpub.ts","../src/eth/address.ts","../src/eth/deriveAccount.ts","../src/parseConnection.ts","../src/cbor.ts","../src/urEncoding.ts","../src/eth/signRequest.ts","../src/eth/signature.ts"],"sourcesContent":["// Types\nexport type { ScannedUR, Chain, QRKitConfig, Account, EvmAccount } from \"./types.js\";\nexport type { ParsedXpub, XpubType } from \"./parseXpub.js\";\n\n// Connection\nexport { parseConnection } from \"./parseConnection.js\";\n\n// EVM signing\nexport { buildEthSignRequestUR, buildEthSignRequestURParts } from \"./eth/signRequest.js\";\nexport { parseEthSignature } from \"./eth/signature.js\";\n","import { HDKey } from \"@scure/bip32\";\nimport { decode as cborDecode, type TagDecoder } from \"cborg\";\n\nimport type { ScannedUR } from \"./types.js\";\n\nexport type XpubType = \"xpub\";\n\nexport interface ParsedXpub {\n  hdKey: HDKey;\n  type: XpubType;\n  /** BIP-44 purpose index: 44 for EVM */\n  purpose: number | undefined;\n  /** BIP-44 coin type: 60 = ETH */\n  coinType: number | undefined;\n  /** source-fingerprint from the origin keypath — required by Shell for signing */\n  sourceFingerprint: number | undefined;\n  raw: string;\n}\n\nfunction get(m: unknown, k: number): unknown {\n  if (m instanceof Map) return (m as Map<number, unknown>).get(k);\n  return undefined;\n}\n\nconst passthrough = (v: unknown) => v;\n\nfunction decodeCbor(cbor: Uint8Array): Map<number, unknown> {\n  return cborDecode(cbor, {\n    useMaps: true,\n    tags: Object.assign([] as TagDecoder[], {\n      303: passthrough, // crypto-hdkey\n      304: passthrough, // crypto-keypath\n      305: passthrough, // crypto-coin-info\n    }),\n  }) as Map<number, unknown>;\n}\n\nfunction parseCryptoHdKey(map: unknown, raw: string): ParsedXpub {\n  const keyData = get(map, 3) as Uint8Array | undefined;\n  const chainCode = get(map, 4) as Uint8Array | undefined;\n\n  if (!keyData || !chainCode) {\n    throw new Error(\"crypto-hdkey missing key-data or chain-code\");\n  }\n\n  let purpose: number | undefined;\n  let coinType: number | undefined;\n  let sourceFingerprint: number | undefined;\n  const origin = get(map, 6);\n  if (origin) {\n    const components = get(origin, 1);\n    if (Array.isArray(components)) {\n      if (components.length >= 1) purpose = components[0] as number;\n      if (components.length >= 3) coinType = components[2] as number;\n    }\n    sourceFingerprint = get(origin, 2) as number | undefined;\n  }\n\n  const hdKey = new HDKey({ publicKey: keyData, chainCode });\n  return { hdKey, type: \"xpub\", purpose, coinType, sourceFingerprint, raw };\n}\n\nfunction parseScannedUR(scanned: ScannedUR): ParsedXpub | ParsedXpub[] {\n  const { type, cbor } = scanned;\n  const raw = `ur:${type}`;\n\n  if (type !== \"crypto-hdkey\" && type !== \"crypto-account\") {\n    throw new Error(`Unsupported UR type: ${type}`);\n  }\n\n  const map = decodeCbor(cbor);\n\n  if (type === \"crypto-hdkey\") {\n    return parseCryptoHdKey(map, raw);\n  }\n\n  const accounts = map.get(2) as unknown[] | undefined;\n  if (!Array.isArray(accounts) || accounts.length === 0) {\n    throw new Error(\"crypto-account contains no keys\");\n  }\n  return accounts.map((entry) => parseCryptoHdKey(entry, raw));\n}\n\nexport function parseXpub(input: ScannedUR | string): ParsedXpub[] {\n  if (typeof input !== \"string\") {\n    const result = parseScannedUR(input);\n    return Array.isArray(result) ? result : [result];\n  }\n  // Raw base58 xpub string — @scure/bip32 handles decoding directly\n  const hdKey = HDKey.fromExtendedKey(input.trim());\n  return [\n    {\n      hdKey,\n      type: \"xpub\",\n      purpose: undefined,\n      coinType: undefined,\n      sourceFingerprint: undefined,\n      raw: input.trim(),\n    },\n  ];\n}\n","import { keccak_256 } from \"@noble/hashes/sha3.js\";\nimport * as secp from \"@noble/secp256k1\";\n\nexport function pubKeyToEthAddress(compressedPubKey: Uint8Array): string {\n  const uncompressed = secp.Point.fromBytes(compressedPubKey).toBytes(false);\n  const hash = keccak_256(uncompressed.slice(1));\n  const hex = [...hash.slice(12)]\n    .map((b: number) => b.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n  return toChecksumAddress(hex);\n}\n\nfunction toChecksumAddress(hex: string): string {\n  const checksumHash = keccak_256(new TextEncoder().encode(hex));\n  return (\n    \"0x\" +\n    [...hex]\n      .map((c, i) => {\n        if (c >= \"0\" && c <= \"9\") return c;\n        const nibble =\n          i % 2 === 0\n            ? (checksumHash[Math.floor(i / 2)] >> 4) & 0xf\n            : checksumHash[Math.floor(i / 2)] & 0xf;\n        return nibble >= 8 ? c.toUpperCase() : c.toLowerCase();\n      })\n      .join(\"\")\n  );\n}\n","import type { HDKey } from \"@scure/bip32\";\n\nimport type { ParsedXpub } from \"../parseXpub.js\";\nimport { pubKeyToEthAddress } from \"./address.js\";\n\nexport interface DerivedAccount {\n  address: string;\n  publicKey: string;\n  /** source-fingerprint from the scanned xpub — required by Shell for signing */\n  sourceFingerprint: number | undefined;\n}\n\n// Derive the first external address (index 0) from an account-level xpub.\n// Account-level xpub is at depth 3 (m/purpose'/coin'/account').\n// External chain is child 0, then address index 0.\nfunction firstChild(accountKey: HDKey): HDKey {\n  return accountKey.deriveChild(0).deriveChild(0);\n}\n\nfunction toHex(bytes: Uint8Array): string {\n  return [...bytes].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport function deriveEvmAccount(parsed: ParsedXpub[]): DerivedAccount | undefined {\n  for (const entry of parsed) {\n    const { hdKey, purpose, coinType, type, sourceFingerprint } = entry;\n    const isEvm =\n      (purpose === 44 && coinType === 60) || (purpose === undefined && type === \"xpub\");\n\n    if (!isEvm) continue;\n\n    const child = firstChild(hdKey);\n    if (!child.publicKey) continue;\n\n    return {\n      address: pubKeyToEthAddress(child.publicKey),\n      publicKey: toHex(child.publicKey),\n      sourceFingerprint,\n    };\n  }\n  return undefined;\n}\n","import { parseXpub } from \"./parseXpub.js\";\nimport { deriveEvmAccount } from \"./eth/deriveAccount.js\";\nimport type { Account, Chain, EvmAccount, QRKitConfig, ScannedUR } from \"./types.js\";\n\nconst ALL_CHAINS: Chain[] = [\"evm\", \"btc\"];\n\n/**\n * Parse a connection QR (crypto-hdkey or crypto-account) and return\n * only the accounts for the chains configured in QRKitConfig.\n *\n * A dApp configured with `chains: [\"evm\"]` will never see BTC accounts,\n * and vice versa. Both chains can be enabled with `chains: [\"evm\", \"btc\"]`.\n * If `chains` is omitted, all supported chains are tried.\n */\nexport function parseConnection(\n  scannedUR: ScannedUR,\n  config: QRKitConfig = {},\n): Account[] {\n  const chains = config.chains ?? ALL_CHAINS;\n  const parsed = parseXpub(scannedUR);\n  const accounts: Account[] = [];\n\n  if (chains.includes(\"evm\")) {\n    const account = deriveEvmAccount(parsed);\n    if (account) {\n      accounts.push({ chain: \"evm\", ...account } satisfies EvmAccount);\n    }\n  }\n\n  // \"btc\" — will be implemented in src/btc/ when Bitcoin support is added.\n\n  return accounts;\n}\n","// Minimal CBOR encoder.\n// Supports only the types needed for eth-sign-request: uint, bytes, text, array, map (integer keys), bool, tag.\n\nfunction majorType(major: number, n: number): number[] {\n  const base = major << 5;\n  if (n <= 23) return [base | n];\n  if (n <= 0xff) return [base | 0x18, n];\n  if (n <= 0xffff) return [base | 0x19, (n >> 8) & 0xff, n & 0xff];\n  return [base | 0x1a, (n >> 24) & 0xff, (n >> 16) & 0xff, (n >> 8) & 0xff, n & 0xff];\n}\n\nexport function encodeItem(value: unknown): number[] {\n  if (typeof value === \"boolean\") {\n    return [value ? 0xf5 : 0xf4];\n  }\n  if (typeof value === \"number\") {\n    return majorType(0, value);\n  }\n  if (value instanceof Uint8Array) {\n    return [...majorType(2, value.length), ...value];\n  }\n  if (typeof value === \"string\") {\n    const bytes = new TextEncoder().encode(value);\n    return [...majorType(3, bytes.length), ...bytes];\n  }\n  if (Array.isArray(value)) {\n    return [...majorType(4, value.length), ...value.flatMap(encodeItem)];\n  }\n  if (value instanceof CborTag) {\n    return [...majorType(6, value.tag), ...encodeItem(value.value)];\n  }\n  if (value instanceof Map) {\n    const entries = [...value.entries()];\n    return [\n      ...majorType(5, entries.length),\n      ...entries.flatMap(([k, v]) => [...encodeItem(k), ...encodeItem(v)]),\n    ];\n  }\n  throw new Error(`Unsupported CBOR value: ${typeof value}`);\n}\n\nexport class CborTag {\n  tag: number;\n  value: unknown;\n  constructor(tag: number, value: unknown) {\n    this.tag = tag;\n    this.value = value;\n  }\n}\n\nexport function encode(value: unknown): Uint8Array {\n  return new Uint8Array(encodeItem(value));\n}\n","import { UR, UrFountainEncoder } from \"@qrkit/bc-ur\";\n\nexport function encodeURParts(\n  cbor: Uint8Array,\n  type: string,\n  maxFragmentLength = 200,\n): string[] {\n  const ur = UR.fromCbor({ type, payload: cbor });\n  const encoder = new UrFountainEncoder(ur, maxFragmentLength);\n  return encoder.getAllPartsUr().map((part) => part.toString().toUpperCase());\n}\n","import { encode, CborTag } from \"../cbor.js\";\nimport { encodeURParts } from \"../urEncoding.js\";\n\n// EIP-191 personal_sign = eth-raw-bytes (ERC-4527 data type 3)\nconst DATA_TYPE_ETH_RAW_BYTES = 3;\n\n// CBOR tag for crypto-keypath\nconst TAG_KEYPATH = 304;\n\nfunction randomBytes(n: number): Uint8Array {\n  const buf = new Uint8Array(n);\n  crypto.getRandomValues(buf);\n  return buf;\n}\n\nfunction buildKeypath(\n  purpose: number,\n  coinType: number,\n  sourceFingerprint: number | undefined,\n): CborTag {\n  // m/purpose'/coinType'/0'/0/0\n  const components = [purpose, true, coinType, true, 0, true, 0, false, 0, false];\n  const keypathMap = new Map<number, unknown>([[1, components]]);\n  if (sourceFingerprint !== undefined) {\n    keypathMap.set(2, sourceFingerprint);\n  }\n  return new CborTag(TAG_KEYPATH, keypathMap);\n}\n\nfunction buildEthSignRequestCbor(\n  message: string,\n  address: string,\n  sourceFingerprint: number | undefined,\n  origin = \"qrkit\",\n): Uint8Array {\n  const requestId = randomBytes(16);\n  const messageBytes = new TextEncoder().encode(message);\n  const keypath = buildKeypath(44, 60, sourceFingerprint);\n\n  const addrHex = address.replace(/^0x/i, \"\");\n  const addrBytes = new Uint8Array(addrHex.match(/.{2}/g)!.map((b) => parseInt(b, 16)));\n\n  const map = new Map<number, unknown>([\n    [1, new CborTag(37, requestId)], // request-id: uuid = #6.37(bstr)\n    [2, messageBytes], // sign-data\n    [3, DATA_TYPE_ETH_RAW_BYTES], // data-type: eth-raw-bytes for EIP-191\n    [5, keypath], // derivation-path\n    [6, addrBytes], // address\n    [7, origin], // origin\n  ]);\n\n  return encode(map);\n}\n\nexport function buildEthSignRequestURParts(\n  message: string,\n  address: string,\n  sourceFingerprint: number | undefined,\n  origin?: string,\n): string[] {\n  return encodeURParts(\n    buildEthSignRequestCbor(message, address, sourceFingerprint, origin),\n    \"eth-sign-request\",\n  );\n}\n\nexport function buildEthSignRequestUR(\n  message: string,\n  address: string,\n  sourceFingerprint: number | undefined,\n  origin?: string,\n): string {\n  return encodeURParts(\n    buildEthSignRequestCbor(message, address, sourceFingerprint, origin),\n    \"eth-sign-request\",\n  )[0];\n}\n","import { decode as cborDecode, type TagDecoder } from \"cborg\";\n\nimport type { ScannedUR } from \"../types.js\";\n\nexport function parseEthSignature(scanned: ScannedUR): string {\n  if (scanned.type !== \"eth-signature\") {\n    throw new Error(`Expected eth-signature, got: ${scanned.type}`);\n  }\n\n  const map = cborDecode(scanned.cbor, {\n    useMaps: true,\n    tags: Object.assign([] as TagDecoder[], { 37: (v: unknown) => v }),\n  }) as Map<number, unknown>;\n\n  const sigBytes = map.get(2) as Uint8Array | undefined;\n  if (!sigBytes || sigBytes.length < 64) {\n    throw new Error(\"Invalid or missing signature bytes\");\n  }\n\n  return \"0x\" + [...sigBytes].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,mBAAsB;AACtB,mBAAsD;AAkBtD,SAAS,IAAI,GAAY,GAAoB;AAC3C,MAAI,aAAa,IAAK,QAAQ,EAA2B,IAAI,CAAC;AAC9D,SAAO;AACT;AAEA,IAAM,cAAc,CAAC,MAAe;AAEpC,SAAS,WAAW,MAAwC;AAC1D,aAAO,aAAAA,QAAW,MAAM;AAAA,IACtB,SAAS;AAAA,IACT,MAAM,OAAO,OAAO,CAAC,GAAmB;AAAA,MACtC,KAAK;AAAA;AAAA,MACL,KAAK;AAAA;AAAA,MACL,KAAK;AAAA;AAAA,IACP,CAAC;AAAA,EACH,CAAC;AACH;AAEA,SAAS,iBAAiB,KAAc,KAAyB;AAC/D,QAAM,UAAU,IAAI,KAAK,CAAC;AAC1B,QAAM,YAAY,IAAI,KAAK,CAAC;AAE5B,MAAI,CAAC,WAAW,CAAC,WAAW;AAC1B,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,QAAM,SAAS,IAAI,KAAK,CAAC;AACzB,MAAI,QAAQ;AACV,UAAM,aAAa,IAAI,QAAQ,CAAC;AAChC,QAAI,MAAM,QAAQ,UAAU,GAAG;AAC7B,UAAI,WAAW,UAAU,EAAG,WAAU,WAAW,CAAC;AAClD,UAAI,WAAW,UAAU,EAAG,YAAW,WAAW,CAAC;AAAA,IACrD;AACA,wBAAoB,IAAI,QAAQ,CAAC;AAAA,EACnC;AAEA,QAAM,QAAQ,IAAI,mBAAM,EAAE,WAAW,SAAS,UAAU,CAAC;AACzD,SAAO,EAAE,OAAO,MAAM,QAAQ,SAAS,UAAU,mBAAmB,IAAI;AAC1E;AAEA,SAAS,eAAe,SAA+C;AACrE,QAAM,EAAE,MAAM,KAAK,IAAI;AACvB,QAAM,MAAM,MAAM,IAAI;AAEtB,MAAI,SAAS,kBAAkB,SAAS,kBAAkB;AACxD,UAAM,IAAI,MAAM,wBAAwB,IAAI,EAAE;AAAA,EAChD;AAEA,QAAM,MAAM,WAAW,IAAI;AAE3B,MAAI,SAAS,gBAAgB;AAC3B,WAAO,iBAAiB,KAAK,GAAG;AAAA,EAClC;AAEA,QAAM,WAAW,IAAI,IAAI,CAAC;AAC1B,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,GAAG;AACrD,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD;AACA,SAAO,SAAS,IAAI,CAAC,UAAU,iBAAiB,OAAO,GAAG,CAAC;AAC7D;AAEO,SAAS,UAAU,OAAyC;AACjE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,SAAS,eAAe,KAAK;AACnC,WAAO,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,MAAM;AAAA,EACjD;AAEA,QAAM,QAAQ,mBAAM,gBAAgB,MAAM,KAAK,CAAC;AAChD,SAAO;AAAA,IACL;AAAA,MACE;AAAA,MACA,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,MACV,mBAAmB;AAAA,MACnB,KAAK,MAAM,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACpGA,kBAA2B;AAC3B,WAAsB;AAEf,SAAS,mBAAmB,kBAAsC;AACvE,QAAM,eAAoB,WAAM,UAAU,gBAAgB,EAAE,QAAQ,KAAK;AACzE,QAAM,WAAO,wBAAW,aAAa,MAAM,CAAC,CAAC;AAC7C,QAAM,MAAM,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC,EAC3B,IAAI,CAAC,MAAc,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAClD,KAAK,EAAE;AACV,SAAO,kBAAkB,GAAG;AAC9B;AAEA,SAAS,kBAAkB,KAAqB;AAC9C,QAAM,mBAAe,wBAAW,IAAI,YAAY,EAAE,OAAO,GAAG,CAAC;AAC7D,SACE,OACA,CAAC,GAAG,GAAG,EACJ,IAAI,CAAC,GAAG,MAAM;AACb,QAAI,KAAK,OAAO,KAAK,IAAK,QAAO;AACjC,UAAM,SACJ,IAAI,MAAM,IACL,aAAa,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,IAAK,KACzC,aAAa,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI;AACxC,WAAO,UAAU,IAAI,EAAE,YAAY,IAAI,EAAE,YAAY;AAAA,EACvD,CAAC,EACA,KAAK,EAAE;AAEd;;;ACZA,SAAS,WAAW,YAA0B;AAC5C,SAAO,WAAW,YAAY,CAAC,EAAE,YAAY,CAAC;AAChD;AAEA,SAAS,MAAM,OAA2B;AACxC,SAAO,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACvE;AAEO,SAAS,iBAAiB,QAAkD;AACjF,aAAW,SAAS,QAAQ;AAC1B,UAAM,EAAE,OAAO,SAAS,UAAU,MAAM,kBAAkB,IAAI;AAC9D,UAAM,QACH,YAAY,MAAM,aAAa,MAAQ,YAAY,UAAa,SAAS;AAE5E,QAAI,CAAC,MAAO;AAEZ,UAAM,QAAQ,WAAW,KAAK;AAC9B,QAAI,CAAC,MAAM,UAAW;AAEtB,WAAO;AAAA,MACL,SAAS,mBAAmB,MAAM,SAAS;AAAA,MAC3C,WAAW,MAAM,MAAM,SAAS;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;;;ACrCA,IAAM,aAAsB,CAAC,OAAO,KAAK;AAUlC,SAAS,gBACd,WACA,SAAsB,CAAC,GACZ;AACX,QAAM,SAAS,OAAO,UAAU;AAChC,QAAM,SAAS,UAAU,SAAS;AAClC,QAAM,WAAsB,CAAC;AAE7B,MAAI,OAAO,SAAS,KAAK,GAAG;AAC1B,UAAM,UAAU,iBAAiB,MAAM;AACvC,QAAI,SAAS;AACX,eAAS,KAAK,EAAE,OAAO,OAAO,GAAG,QAAQ,CAAsB;AAAA,IACjE;AAAA,EACF;AAIA,SAAO;AACT;;;AC7BA,SAAS,UAAU,OAAe,GAAqB;AACrD,QAAM,OAAO,SAAS;AACtB,MAAI,KAAK,GAAI,QAAO,CAAC,OAAO,CAAC;AAC7B,MAAI,KAAK,IAAM,QAAO,CAAC,OAAO,IAAM,CAAC;AACrC,MAAI,KAAK,MAAQ,QAAO,CAAC,OAAO,IAAO,KAAK,IAAK,KAAM,IAAI,GAAI;AAC/D,SAAO,CAAC,OAAO,IAAO,KAAK,KAAM,KAAO,KAAK,KAAM,KAAO,KAAK,IAAK,KAAM,IAAI,GAAI;AACpF;AAEO,SAAS,WAAW,OAA0B;AACnD,MAAI,OAAO,UAAU,WAAW;AAC9B,WAAO,CAAC,QAAQ,MAAO,GAAI;AAAA,EAC7B;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,UAAU,GAAG,KAAK;AAAA,EAC3B;AACA,MAAI,iBAAiB,YAAY;AAC/B,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,MAAM,GAAG,GAAG,KAAK;AAAA,EACjD;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAC5C,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,MAAM,GAAG,GAAG,KAAK;AAAA,EACjD;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,MAAM,GAAG,GAAG,MAAM,QAAQ,UAAU,CAAC;AAAA,EACrE;AACA,MAAI,iBAAiB,SAAS;AAC5B,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,GAAG,GAAG,GAAG,WAAW,MAAM,KAAK,CAAC;AAAA,EAChE;AACA,MAAI,iBAAiB,KAAK;AACxB,UAAM,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC;AACnC,WAAO;AAAA,MACL,GAAG,UAAU,GAAG,QAAQ,MAAM;AAAA,MAC9B,GAAG,QAAQ,QAAQ,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;AAAA,IACrE;AAAA,EACF;AACA,QAAM,IAAI,MAAM,2BAA2B,OAAO,KAAK,EAAE;AAC3D;AAEO,IAAM,UAAN,MAAc;AAAA,EACnB;AAAA,EACA;AAAA,EACA,YAAY,KAAa,OAAgB;AACvC,SAAK,MAAM;AACX,SAAK,QAAQ;AAAA,EACf;AACF;AAEO,SAAS,OAAO,OAA4B;AACjD,SAAO,IAAI,WAAW,WAAW,KAAK,CAAC;AACzC;;;ACpDA,mBAAsC;AAE/B,SAAS,cACd,MACA,MACA,oBAAoB,KACV;AACV,QAAM,KAAK,gBAAG,SAAS,EAAE,MAAM,SAAS,KAAK,CAAC;AAC9C,QAAM,UAAU,IAAI,+BAAkB,IAAI,iBAAiB;AAC3D,SAAO,QAAQ,cAAc,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,YAAY,CAAC;AAC5E;;;ACNA,IAAM,0BAA0B;AAGhC,IAAM,cAAc;AAEpB,SAAS,YAAY,GAAuB;AAC1C,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,SAAO,gBAAgB,GAAG;AAC1B,SAAO;AACT;AAEA,SAAS,aACP,SACA,UACA,mBACS;AAET,QAAM,aAAa,CAAC,SAAS,MAAM,UAAU,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK;AAC9E,QAAM,aAAa,oBAAI,IAAqB,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;AAC7D,MAAI,sBAAsB,QAAW;AACnC,eAAW,IAAI,GAAG,iBAAiB;AAAA,EACrC;AACA,SAAO,IAAI,QAAQ,aAAa,UAAU;AAC5C;AAEA,SAAS,wBACP,SACA,SACA,mBACA,SAAS,SACG;AACZ,QAAM,YAAY,YAAY,EAAE;AAChC,QAAM,eAAe,IAAI,YAAY,EAAE,OAAO,OAAO;AACrD,QAAM,UAAU,aAAa,IAAI,IAAI,iBAAiB;AAEtD,QAAM,UAAU,QAAQ,QAAQ,QAAQ,EAAE;AAC1C,QAAM,YAAY,IAAI,WAAW,QAAQ,MAAM,OAAO,EAAG,IAAI,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC;AAEpF,QAAM,MAAM,oBAAI,IAAqB;AAAA,IACnC,CAAC,GAAG,IAAI,QAAQ,IAAI,SAAS,CAAC;AAAA;AAAA,IAC9B,CAAC,GAAG,YAAY;AAAA;AAAA,IAChB,CAAC,GAAG,uBAAuB;AAAA;AAAA,IAC3B,CAAC,GAAG,OAAO;AAAA;AAAA,IACX,CAAC,GAAG,SAAS;AAAA;AAAA,IACb,CAAC,GAAG,MAAM;AAAA;AAAA,EACZ,CAAC;AAED,SAAO,OAAO,GAAG;AACnB;AAEO,SAAS,2BACd,SACA,SACA,mBACA,QACU;AACV,SAAO;AAAA,IACL,wBAAwB,SAAS,SAAS,mBAAmB,MAAM;AAAA,IACnE;AAAA,EACF;AACF;AAEO,SAAS,sBACd,SACA,SACA,mBACA,QACQ;AACR,SAAO;AAAA,IACL,wBAAwB,SAAS,SAAS,mBAAmB,MAAM;AAAA,IACnE;AAAA,EACF,EAAE,CAAC;AACL;;;AC5EA,IAAAC,gBAAsD;AAI/C,SAAS,kBAAkB,SAA4B;AAC5D,MAAI,QAAQ,SAAS,iBAAiB;AACpC,UAAM,IAAI,MAAM,gCAAgC,QAAQ,IAAI,EAAE;AAAA,EAChE;AAEA,QAAM,UAAM,cAAAC,QAAW,QAAQ,MAAM;AAAA,IACnC,SAAS;AAAA,IACT,MAAM,OAAO,OAAO,CAAC,GAAmB,EAAE,IAAI,CAAC,MAAe,EAAE,CAAC;AAAA,EACnE,CAAC;AAED,QAAM,WAAW,IAAI,IAAI,CAAC;AAC1B,MAAI,CAAC,YAAY,SAAS,SAAS,IAAI;AACrC,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAEA,SAAO,OAAO,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACjF;","names":["cborDecode","import_cborg","cborDecode"]}
+{"version":3,"sources":["../src/index.ts","../src/parseXpub.ts","../src/eth/address.ts","../src/eth/deriveAccount.ts","../src/parseConnection.ts","../src/cbor.ts","../src/urEncoding.ts","../src/eth/signRequest.ts","../src/eth/signature.ts"],"sourcesContent":["// Types\nexport type { ScannedUR, Chain, QRKitConfig, Account, EvmAccount } from \"./types.js\";\nexport type { ParsedXpub, XpubType } from \"./parseXpub.js\";\n\n// Connection\nexport { parseConnection } from \"./parseConnection.js\";\n\n// EVM signing\nexport {\n  buildEthSignRequestUR,\n  buildEthSignRequestURParts,\n  EthDataType,\n} from \"./eth/signRequest.js\";\nexport type { EthDataTypeValue, EthSignRequestParams } from \"./eth/signRequest.js\";\nexport { parseEthSignature } from \"./eth/signature.js\";\n","import { HDKey } from \"@scure/bip32\";\nimport { decode as cborDecode, type TagDecoder } from \"cborg\";\n\nimport type { ScannedUR } from \"./types.js\";\n\nexport type XpubType = \"xpub\";\n\nexport interface ParsedXpub {\n  hdKey: HDKey;\n  type: XpubType;\n  /** BIP-44 purpose index: 44 for EVM */\n  purpose: number | undefined;\n  /** BIP-44 coin type: 60 = ETH */\n  coinType: number | undefined;\n  /** source-fingerprint from the origin keypath — required by Shell for signing */\n  sourceFingerprint: number | undefined;\n  raw: string;\n}\n\nfunction get(m: unknown, k: number): unknown {\n  if (m instanceof Map) return (m as Map<number, unknown>).get(k);\n  return undefined;\n}\n\nconst passthrough = (v: unknown) => v;\n\nfunction decodeCbor(cbor: Uint8Array): Map<number, unknown> {\n  return cborDecode(cbor, {\n    useMaps: true,\n    tags: Object.assign([] as TagDecoder[], {\n      303: passthrough, // crypto-hdkey\n      304: passthrough, // crypto-keypath\n      305: passthrough, // crypto-coin-info\n    }),\n  }) as Map<number, unknown>;\n}\n\nfunction parseCryptoHdKey(map: unknown, raw: string): ParsedXpub {\n  const keyData = get(map, 3) as Uint8Array | undefined;\n  const chainCode = get(map, 4) as Uint8Array | undefined;\n\n  if (!keyData || !chainCode) {\n    throw new Error(\"crypto-hdkey missing key-data or chain-code\");\n  }\n\n  let purpose: number | undefined;\n  let coinType: number | undefined;\n  let sourceFingerprint: number | undefined;\n  const origin = get(map, 6);\n  if (origin) {\n    const components = get(origin, 1);\n    if (Array.isArray(components)) {\n      if (components.length >= 1) purpose = components[0] as number;\n      if (components.length >= 3) coinType = components[2] as number;\n    }\n    sourceFingerprint = get(origin, 2) as number | undefined;\n  }\n\n  const hdKey = new HDKey({ publicKey: keyData, chainCode });\n  return { hdKey, type: \"xpub\", purpose, coinType, sourceFingerprint, raw };\n}\n\nfunction parseScannedUR(scanned: ScannedUR): ParsedXpub | ParsedXpub[] {\n  const { type, cbor } = scanned;\n  const raw = `ur:${type}`;\n\n  if (type !== \"crypto-hdkey\" && type !== \"crypto-account\") {\n    throw new Error(`Unsupported UR type: ${type}`);\n  }\n\n  const map = decodeCbor(cbor);\n\n  if (type === \"crypto-hdkey\") {\n    return parseCryptoHdKey(map, raw);\n  }\n\n  const accounts = map.get(2) as unknown[] | undefined;\n  if (!Array.isArray(accounts) || accounts.length === 0) {\n    throw new Error(\"crypto-account contains no keys\");\n  }\n  return accounts.map((entry) => parseCryptoHdKey(entry, raw));\n}\n\nexport function parseXpub(input: ScannedUR | string): ParsedXpub[] {\n  if (typeof input !== \"string\") {\n    const result = parseScannedUR(input);\n    return Array.isArray(result) ? result : [result];\n  }\n  // Raw base58 xpub string — @scure/bip32 handles decoding directly\n  const hdKey = HDKey.fromExtendedKey(input.trim());\n  return [\n    {\n      hdKey,\n      type: \"xpub\",\n      purpose: undefined,\n      coinType: undefined,\n      sourceFingerprint: undefined,\n      raw: input.trim(),\n    },\n  ];\n}\n","import { keccak_256 } from \"@noble/hashes/sha3.js\";\nimport * as secp from \"@noble/secp256k1\";\n\nexport function pubKeyToEthAddress(compressedPubKey: Uint8Array): string {\n  const uncompressed = secp.Point.fromBytes(compressedPubKey).toBytes(false);\n  const hash = keccak_256(uncompressed.slice(1));\n  const hex = [...hash.slice(12)]\n    .map((b: number) => b.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n  return toChecksumAddress(hex);\n}\n\nfunction toChecksumAddress(hex: string): string {\n  const checksumHash = keccak_256(new TextEncoder().encode(hex));\n  return (\n    \"0x\" +\n    [...hex]\n      .map((c, i) => {\n        if (c >= \"0\" && c <= \"9\") return c;\n        const nibble =\n          i % 2 === 0\n            ? (checksumHash[Math.floor(i / 2)] >> 4) & 0xf\n            : checksumHash[Math.floor(i / 2)] & 0xf;\n        return nibble >= 8 ? c.toUpperCase() : c.toLowerCase();\n      })\n      .join(\"\")\n  );\n}\n","import type { HDKey } from \"@scure/bip32\";\n\nimport type { ParsedXpub } from \"../parseXpub.js\";\nimport { pubKeyToEthAddress } from \"./address.js\";\n\nexport interface DerivedAccount {\n  address: string;\n  publicKey: string;\n  /** source-fingerprint from the scanned xpub — required by Shell for signing */\n  sourceFingerprint: number | undefined;\n}\n\n// Derive the first external address (index 0) from an account-level xpub.\n// Account-level xpub is at depth 3 (m/purpose'/coin'/account').\n// External chain is child 0, then address index 0.\nfunction firstChild(accountKey: HDKey): HDKey {\n  return accountKey.deriveChild(0).deriveChild(0);\n}\n\nfunction toHex(bytes: Uint8Array): string {\n  return [...bytes].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport function deriveEvmAccount(parsed: ParsedXpub[]): DerivedAccount | undefined {\n  for (const entry of parsed) {\n    const { hdKey, purpose, coinType, type, sourceFingerprint } = entry;\n    const isEvm =\n      (purpose === 44 && coinType === 60) || (purpose === undefined && type === \"xpub\");\n\n    if (!isEvm) continue;\n\n    const child = firstChild(hdKey);\n    if (!child.publicKey) continue;\n\n    return {\n      address: pubKeyToEthAddress(child.publicKey),\n      publicKey: toHex(child.publicKey),\n      sourceFingerprint,\n    };\n  }\n  return undefined;\n}\n","import { parseXpub } from \"./parseXpub.js\";\nimport { deriveEvmAccount } from \"./eth/deriveAccount.js\";\nimport type { Account, Chain, EvmAccount, QRKitConfig, ScannedUR } from \"./types.js\";\n\nconst ALL_CHAINS: Chain[] = [\"evm\", \"btc\"];\n\n/**\n * Parse a connection QR (crypto-hdkey or crypto-account) and return\n * only the accounts for the chains configured in QRKitConfig.\n *\n * A dApp configured with `chains: [\"evm\"]` will never see BTC accounts,\n * and vice versa. Both chains can be enabled with `chains: [\"evm\", \"btc\"]`.\n * If `chains` is omitted, all supported chains are tried.\n */\nexport function parseConnection(\n  scannedUR: ScannedUR,\n  config: QRKitConfig = {},\n): Account[] {\n  const chains = config.chains ?? ALL_CHAINS;\n  const parsed = parseXpub(scannedUR);\n  const accounts: Account[] = [];\n\n  if (chains.includes(\"evm\")) {\n    const account = deriveEvmAccount(parsed);\n    if (account) {\n      accounts.push({ chain: \"evm\", ...account } satisfies EvmAccount);\n    }\n  }\n\n  // \"btc\" — will be implemented in src/btc/ when Bitcoin support is added.\n\n  return accounts;\n}\n","// Minimal CBOR encoder.\n// Supports only the types needed for eth-sign-request: uint, bytes, text, array, map (integer keys), bool, tag.\n\nfunction majorType(major: number, n: number): number[] {\n  const base = major << 5;\n  if (n <= 23) return [base | n];\n  if (n <= 0xff) return [base | 0x18, n];\n  if (n <= 0xffff) return [base | 0x19, (n >> 8) & 0xff, n & 0xff];\n  return [base | 0x1a, (n >> 24) & 0xff, (n >> 16) & 0xff, (n >> 8) & 0xff, n & 0xff];\n}\n\nexport function encodeItem(value: unknown): number[] {\n  if (typeof value === \"boolean\") {\n    return [value ? 0xf5 : 0xf4];\n  }\n  if (typeof value === \"number\") {\n    return majorType(0, value);\n  }\n  if (value instanceof Uint8Array) {\n    return [...majorType(2, value.length), ...value];\n  }\n  if (typeof value === \"string\") {\n    const bytes = new TextEncoder().encode(value);\n    return [...majorType(3, bytes.length), ...bytes];\n  }\n  if (Array.isArray(value)) {\n    return [...majorType(4, value.length), ...value.flatMap(encodeItem)];\n  }\n  if (value instanceof CborTag) {\n    return [...majorType(6, value.tag), ...encodeItem(value.value)];\n  }\n  if (value instanceof Map) {\n    const entries = [...value.entries()];\n    return [\n      ...majorType(5, entries.length),\n      ...entries.flatMap(([k, v]) => [...encodeItem(k), ...encodeItem(v)]),\n    ];\n  }\n  throw new Error(`Unsupported CBOR value: ${typeof value}`);\n}\n\nexport class CborTag {\n  tag: number;\n  value: unknown;\n  constructor(tag: number, value: unknown) {\n    this.tag = tag;\n    this.value = value;\n  }\n}\n\nexport function encode(value: unknown): Uint8Array {\n  return new Uint8Array(encodeItem(value));\n}\n","import { UR, UrFountainEncoder } from \"@qrkit/bc-ur\";\n\nexport function encodeURParts(\n  cbor: Uint8Array,\n  type: string,\n  maxFragmentLength = 200,\n): string[] {\n  const ur = UR.fromCbor({ type, payload: cbor });\n  const encoder = new UrFountainEncoder(ur, maxFragmentLength);\n  return encoder.getAllPartsUr().map((part) => part.toString().toUpperCase());\n}\n","import { encode, CborTag } from \"../cbor.js\";\nimport { encodeURParts } from \"../urEncoding.js\";\n\n// ERC-4527 eth-sign-request data types\nexport const EthDataType = {\n  /** Legacy transaction (RLP-encoded). Wallet applies EIP-155: v = 35 + 2*chainId + recId */\n  LegacyTransaction: 1,\n  /** EIP-712 typed data bytes. Wallet hashes internally. */\n  TypedData: 2,\n  /** Personal message (EIP-191). Wallet prepends \"\\x19Ethereum Signed Message:\\n{len}\". */\n  PersonalMessage: 3,\n  /** EIP-1559 transaction (RLP-encoded). Wallet uses v = recId. */\n  TypedTransaction: 4,\n} as const;\n\nexport type EthDataTypeValue = (typeof EthDataType)[keyof typeof EthDataType];\n\n// CBOR tag for crypto-keypath\nconst TAG_KEYPATH = 304;\n\nfunction randomBytes(n: number): Uint8Array {\n  const buf = new Uint8Array(n);\n  crypto.getRandomValues(buf);\n  return buf;\n}\n\nfunction buildKeypath(\n  purpose: number,\n  coinType: number,\n  sourceFingerprint: number | undefined,\n): CborTag {\n  // m/purpose'/coinType'/0'/0/0\n  const components = [purpose, true, coinType, true, 0, true, 0, false, 0, false];\n  const keypathMap = new Map<number, unknown>([[1, components]]);\n  if (sourceFingerprint !== undefined) {\n    keypathMap.set(2, sourceFingerprint);\n  }\n  return new CborTag(TAG_KEYPATH, keypathMap);\n}\n\nexport interface EthSignRequestParams {\n  /** Raw sign data. For PersonalMessage, a string is UTF-8 encoded automatically. */\n  signData: Uint8Array | string;\n  /** ERC-4527 data type. Defaults to PersonalMessage (3). Use EthDataType constants. */\n  dataType?: number;\n  address: string;\n  sourceFingerprint: number | undefined;\n  /** Chain ID — required by the wallet for v-value encoding on LegacyTransaction (type 1). */\n  chainId?: number;\n  origin?: string;\n}\n\nfunction buildEthSignRequestCbor(params: EthSignRequestParams): Uint8Array {\n  const {\n    signData,\n    dataType = EthDataType.PersonalMessage,\n    address,\n    sourceFingerprint,\n    chainId,\n    origin = \"qrkit\",\n  } = params;\n\n  const requestId = randomBytes(16);\n  const signBytes =\n    typeof signData === \"string\" ? new TextEncoder().encode(signData) : signData;\n  const keypath = buildKeypath(44, 60, sourceFingerprint);\n\n  const addrHex = address.replace(/^0x/i, \"\");\n  const addrBytes = new Uint8Array(addrHex.match(/.{2}/g)!.map((b) => parseInt(b, 16)));\n\n  // Keys must be in strictly ascending order for zcbor (Shell firmware decoder).\n  const map = new Map<number, unknown>([\n    [1, new CborTag(37, requestId)], // request-id: uuid = #6.37(bstr)\n    [2, signBytes], // sign-data\n    [3, dataType], // data-type\n  ]);\n\n  if (chainId !== undefined) {\n    map.set(4, chainId); // chain-id — must come before key 5\n  }\n\n  map.set(5, keypath); // derivation-path\n  map.set(6, addrBytes); // address\n  map.set(7, origin); // origin\n\n  return encode(map);\n}\n\nexport function buildEthSignRequestURParts(params: EthSignRequestParams): string[] {\n  return encodeURParts(buildEthSignRequestCbor(params), \"eth-sign-request\");\n}\n\nexport function buildEthSignRequestUR(params: EthSignRequestParams): string {\n  return encodeURParts(buildEthSignRequestCbor(params), \"eth-sign-request\")[0];\n}\n","import { decode as cborDecode, type TagDecoder } from \"cborg\";\n\nimport type { ScannedUR } from \"../types.js\";\n\nexport function parseEthSignature(scanned: ScannedUR): string {\n  if (scanned.type !== \"eth-signature\") {\n    throw new Error(`Expected eth-signature, got: ${scanned.type}`);\n  }\n\n  const map = cborDecode(scanned.cbor, {\n    useMaps: true,\n    tags: Object.assign([] as TagDecoder[], { 37: (v: unknown) => v }),\n  }) as Map<number, unknown>;\n\n  const sigBytes = map.get(2) as Uint8Array | undefined;\n  if (!sigBytes || sigBytes.length < 64) {\n    throw new Error(\"Invalid or missing signature bytes\");\n  }\n\n  return \"0x\" + [...sigBytes].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;;ACAA,mBAAsB;AACtB,mBAAsD;AAkBtD,SAAS,IAAI,GAAY,GAAoB;AAC3C,MAAI,aAAa,IAAK,QAAQ,EAA2B,IAAI,CAAC;AAC9D,SAAO;AACT;AAEA,IAAM,cAAc,CAAC,MAAe;AAEpC,SAAS,WAAW,MAAwC;AAC1D,aAAO,aAAAA,QAAW,MAAM;AAAA,IACtB,SAAS;AAAA,IACT,MAAM,OAAO,OAAO,CAAC,GAAmB;AAAA,MACtC,KAAK;AAAA;AAAA,MACL,KAAK;AAAA;AAAA,MACL,KAAK;AAAA;AAAA,IACP,CAAC;AAAA,EACH,CAAC;AACH;AAEA,SAAS,iBAAiB,KAAc,KAAyB;AAC/D,QAAM,UAAU,IAAI,KAAK,CAAC;AAC1B,QAAM,YAAY,IAAI,KAAK,CAAC;AAE5B,MAAI,CAAC,WAAW,CAAC,WAAW;AAC1B,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,QAAM,SAAS,IAAI,KAAK,CAAC;AACzB,MAAI,QAAQ;AACV,UAAM,aAAa,IAAI,QAAQ,CAAC;AAChC,QAAI,MAAM,QAAQ,UAAU,GAAG;AAC7B,UAAI,WAAW,UAAU,EAAG,WAAU,WAAW,CAAC;AAClD,UAAI,WAAW,UAAU,EAAG,YAAW,WAAW,CAAC;AAAA,IACrD;AACA,wBAAoB,IAAI,QAAQ,CAAC;AAAA,EACnC;AAEA,QAAM,QAAQ,IAAI,mBAAM,EAAE,WAAW,SAAS,UAAU,CAAC;AACzD,SAAO,EAAE,OAAO,MAAM,QAAQ,SAAS,UAAU,mBAAmB,IAAI;AAC1E;AAEA,SAAS,eAAe,SAA+C;AACrE,QAAM,EAAE,MAAM,KAAK,IAAI;AACvB,QAAM,MAAM,MAAM,IAAI;AAEtB,MAAI,SAAS,kBAAkB,SAAS,kBAAkB;AACxD,UAAM,IAAI,MAAM,wBAAwB,IAAI,EAAE;AAAA,EAChD;AAEA,QAAM,MAAM,WAAW,IAAI;AAE3B,MAAI,SAAS,gBAAgB;AAC3B,WAAO,iBAAiB,KAAK,GAAG;AAAA,EAClC;AAEA,QAAM,WAAW,IAAI,IAAI,CAAC;AAC1B,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,GAAG;AACrD,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD;AACA,SAAO,SAAS,IAAI,CAAC,UAAU,iBAAiB,OAAO,GAAG,CAAC;AAC7D;AAEO,SAAS,UAAU,OAAyC;AACjE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,SAAS,eAAe,KAAK;AACnC,WAAO,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,MAAM;AAAA,EACjD;AAEA,QAAM,QAAQ,mBAAM,gBAAgB,MAAM,KAAK,CAAC;AAChD,SAAO;AAAA,IACL;AAAA,MACE;AAAA,MACA,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,MACV,mBAAmB;AAAA,MACnB,KAAK,MAAM,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACpGA,kBAA2B;AAC3B,WAAsB;AAEf,SAAS,mBAAmB,kBAAsC;AACvE,QAAM,eAAoB,WAAM,UAAU,gBAAgB,EAAE,QAAQ,KAAK;AACzE,QAAM,WAAO,wBAAW,aAAa,MAAM,CAAC,CAAC;AAC7C,QAAM,MAAM,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC,EAC3B,IAAI,CAAC,MAAc,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAClD,KAAK,EAAE;AACV,SAAO,kBAAkB,GAAG;AAC9B;AAEA,SAAS,kBAAkB,KAAqB;AAC9C,QAAM,mBAAe,wBAAW,IAAI,YAAY,EAAE,OAAO,GAAG,CAAC;AAC7D,SACE,OACA,CAAC,GAAG,GAAG,EACJ,IAAI,CAAC,GAAG,MAAM;AACb,QAAI,KAAK,OAAO,KAAK,IAAK,QAAO;AACjC,UAAM,SACJ,IAAI,MAAM,IACL,aAAa,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,IAAK,KACzC,aAAa,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI;AACxC,WAAO,UAAU,IAAI,EAAE,YAAY,IAAI,EAAE,YAAY;AAAA,EACvD,CAAC,EACA,KAAK,EAAE;AAEd;;;ACZA,SAAS,WAAW,YAA0B;AAC5C,SAAO,WAAW,YAAY,CAAC,EAAE,YAAY,CAAC;AAChD;AAEA,SAAS,MAAM,OAA2B;AACxC,SAAO,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACvE;AAEO,SAAS,iBAAiB,QAAkD;AACjF,aAAW,SAAS,QAAQ;AAC1B,UAAM,EAAE,OAAO,SAAS,UAAU,MAAM,kBAAkB,IAAI;AAC9D,UAAM,QACH,YAAY,MAAM,aAAa,MAAQ,YAAY,UAAa,SAAS;AAE5E,QAAI,CAAC,MAAO;AAEZ,UAAM,QAAQ,WAAW,KAAK;AAC9B,QAAI,CAAC,MAAM,UAAW;AAEtB,WAAO;AAAA,MACL,SAAS,mBAAmB,MAAM,SAAS;AAAA,MAC3C,WAAW,MAAM,MAAM,SAAS;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;;;ACrCA,IAAM,aAAsB,CAAC,OAAO,KAAK;AAUlC,SAAS,gBACd,WACA,SAAsB,CAAC,GACZ;AACX,QAAM,SAAS,OAAO,UAAU;AAChC,QAAM,SAAS,UAAU,SAAS;AAClC,QAAM,WAAsB,CAAC;AAE7B,MAAI,OAAO,SAAS,KAAK,GAAG;AAC1B,UAAM,UAAU,iBAAiB,MAAM;AACvC,QAAI,SAAS;AACX,eAAS,KAAK,EAAE,OAAO,OAAO,GAAG,QAAQ,CAAsB;AAAA,IACjE;AAAA,EACF;AAIA,SAAO;AACT;;;AC7BA,SAAS,UAAU,OAAe,GAAqB;AACrD,QAAM,OAAO,SAAS;AACtB,MAAI,KAAK,GAAI,QAAO,CAAC,OAAO,CAAC;AAC7B,MAAI,KAAK,IAAM,QAAO,CAAC,OAAO,IAAM,CAAC;AACrC,MAAI,KAAK,MAAQ,QAAO,CAAC,OAAO,IAAO,KAAK,IAAK,KAAM,IAAI,GAAI;AAC/D,SAAO,CAAC,OAAO,IAAO,KAAK,KAAM,KAAO,KAAK,KAAM,KAAO,KAAK,IAAK,KAAM,IAAI,GAAI;AACpF;AAEO,SAAS,WAAW,OAA0B;AACnD,MAAI,OAAO,UAAU,WAAW;AAC9B,WAAO,CAAC,QAAQ,MAAO,GAAI;AAAA,EAC7B;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,UAAU,GAAG,KAAK;AAAA,EAC3B;AACA,MAAI,iBAAiB,YAAY;AAC/B,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,MAAM,GAAG,GAAG,KAAK;AAAA,EACjD;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAC5C,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,MAAM,GAAG,GAAG,KAAK;AAAA,EACjD;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,MAAM,GAAG,GAAG,MAAM,QAAQ,UAAU,CAAC;AAAA,EACrE;AACA,MAAI,iBAAiB,SAAS;AAC5B,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,GAAG,GAAG,GAAG,WAAW,MAAM,KAAK,CAAC;AAAA,EAChE;AACA,MAAI,iBAAiB,KAAK;AACxB,UAAM,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC;AACnC,WAAO;AAAA,MACL,GAAG,UAAU,GAAG,QAAQ,MAAM;AAAA,MAC9B,GAAG,QAAQ,QAAQ,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;AAAA,IACrE;AAAA,EACF;AACA,QAAM,IAAI,MAAM,2BAA2B,OAAO,KAAK,EAAE;AAC3D;AAEO,IAAM,UAAN,MAAc;AAAA,EACnB;AAAA,EACA;AAAA,EACA,YAAY,KAAa,OAAgB;AACvC,SAAK,MAAM;AACX,SAAK,QAAQ;AAAA,EACf;AACF;AAEO,SAAS,OAAO,OAA4B;AACjD,SAAO,IAAI,WAAW,WAAW,KAAK,CAAC;AACzC;;;ACpDA,mBAAsC;AAE/B,SAAS,cACd,MACA,MACA,oBAAoB,KACV;AACV,QAAM,KAAK,gBAAG,SAAS,EAAE,MAAM,SAAS,KAAK,CAAC;AAC9C,QAAM,UAAU,IAAI,+BAAkB,IAAI,iBAAiB;AAC3D,SAAO,QAAQ,cAAc,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,YAAY,CAAC;AAC5E;;;ACNO,IAAM,cAAc;AAAA;AAAA,EAEzB,mBAAmB;AAAA;AAAA,EAEnB,WAAW;AAAA;AAAA,EAEX,iBAAiB;AAAA;AAAA,EAEjB,kBAAkB;AACpB;AAKA,IAAM,cAAc;AAEpB,SAAS,YAAY,GAAuB;AAC1C,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,SAAO,gBAAgB,GAAG;AAC1B,SAAO;AACT;AAEA,SAAS,aACP,SACA,UACA,mBACS;AAET,QAAM,aAAa,CAAC,SAAS,MAAM,UAAU,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK;AAC9E,QAAM,aAAa,oBAAI,IAAqB,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;AAC7D,MAAI,sBAAsB,QAAW;AACnC,eAAW,IAAI,GAAG,iBAAiB;AAAA,EACrC;AACA,SAAO,IAAI,QAAQ,aAAa,UAAU;AAC5C;AAcA,SAAS,wBAAwB,QAA0C;AACzE,QAAM;AAAA,IACJ;AAAA,IACA,WAAW,YAAY;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX,IAAI;AAEJ,QAAM,YAAY,YAAY,EAAE;AAChC,QAAM,YACJ,OAAO,aAAa,WAAW,IAAI,YAAY,EAAE,OAAO,QAAQ,IAAI;AACtE,QAAM,UAAU,aAAa,IAAI,IAAI,iBAAiB;AAEtD,QAAM,UAAU,QAAQ,QAAQ,QAAQ,EAAE;AAC1C,QAAM,YAAY,IAAI,WAAW,QAAQ,MAAM,OAAO,EAAG,IAAI,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC;AAGpF,QAAM,MAAM,oBAAI,IAAqB;AAAA,IACnC,CAAC,GAAG,IAAI,QAAQ,IAAI,SAAS,CAAC;AAAA;AAAA,IAC9B,CAAC,GAAG,SAAS;AAAA;AAAA,IACb,CAAC,GAAG,QAAQ;AAAA;AAAA,EACd,CAAC;AAED,MAAI,YAAY,QAAW;AACzB,QAAI,IAAI,GAAG,OAAO;AAAA,EACpB;AAEA,MAAI,IAAI,GAAG,OAAO;AAClB,MAAI,IAAI,GAAG,SAAS;AACpB,MAAI,IAAI,GAAG,MAAM;AAEjB,SAAO,OAAO,GAAG;AACnB;AAEO,SAAS,2BAA2B,QAAwC;AACjF,SAAO,cAAc,wBAAwB,MAAM,GAAG,kBAAkB;AAC1E;AAEO,SAAS,sBAAsB,QAAsC;AAC1E,SAAO,cAAc,wBAAwB,MAAM,GAAG,kBAAkB,EAAE,CAAC;AAC7E;;;AC9FA,IAAAC,gBAAsD;AAI/C,SAAS,kBAAkB,SAA4B;AAC5D,MAAI,QAAQ,SAAS,iBAAiB;AACpC,UAAM,IAAI,MAAM,gCAAgC,QAAQ,IAAI,EAAE;AAAA,EAChE;AAEA,QAAM,UAAM,cAAAC,QAAW,QAAQ,MAAM;AAAA,IACnC,SAAS;AAAA,IACT,MAAM,OAAO,OAAO,CAAC,GAAmB,EAAE,IAAI,CAAC,MAAe,EAAE,CAAC;AAAA,EACnE,CAAC;AAED,QAAM,WAAW,IAAI,IAAI,CAAC;AAC1B,MAAI,CAAC,YAAY,SAAS,SAAS,IAAI;AACrC,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAEA,SAAO,OAAO,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACjF;","names":["cborDecode","import_cborg","cborDecode"]}

package/dist/index.d.cts

@@ -42,9 +42,31 @@ interface ParsedXpub {
  */
 declare function parseConnection(scannedUR: ScannedUR, config?: QRKitConfig): Account[];
 
-declare function buildEthSignRequestURParts(message: string, address: string, sourceFingerprint: number | undefined, origin?: string): string[];
-declare function buildEthSignRequestUR(message: string, address: string, sourceFingerprint: number | undefined, origin?: string): string;
+declare const EthDataType: {
+    /** Legacy transaction (RLP-encoded). Wallet applies EIP-155: v = 35 + 2*chainId + recId */
+    readonly LegacyTransaction: 1;
+    /** EIP-712 typed data bytes. Wallet hashes internally. */
+    readonly TypedData: 2;
+    /** Personal message (EIP-191). Wallet prepends "\x19Ethereum Signed Message:\n{len}". */
+    readonly PersonalMessage: 3;
+    /** EIP-1559 transaction (RLP-encoded). Wallet uses v = recId. */
+    readonly TypedTransaction: 4;
+};
+type EthDataTypeValue = (typeof EthDataType)[keyof typeof EthDataType];
+interface EthSignRequestParams {
+    /** Raw sign data. For PersonalMessage, a string is UTF-8 encoded automatically. */
+    signData: Uint8Array | string;
+    /** ERC-4527 data type. Defaults to PersonalMessage (3). Use EthDataType constants. */
+    dataType?: number;
+    address: string;
+    sourceFingerprint: number | undefined;
+    /** Chain ID — required by the wallet for v-value encoding on LegacyTransaction (type 1). */
+    chainId?: number;
+    origin?: string;
+}
+declare function buildEthSignRequestURParts(params: EthSignRequestParams): string[];
+declare function buildEthSignRequestUR(params: EthSignRequestParams): string;
 
 declare function parseEthSignature(scanned: ScannedUR): string;
 
-export { type Account, type Chain, type EvmAccount, type ParsedXpub, type QRKitConfig, type ScannedUR, type XpubType, buildEthSignRequestUR, buildEthSignRequestURParts, parseConnection, parseEthSignature };
+export { type Account, type Chain, EthDataType, type EthDataTypeValue, type EthSignRequestParams, type EvmAccount, type ParsedXpub, type QRKitConfig, type ScannedUR, type XpubType, buildEthSignRequestUR, buildEthSignRequestURParts, parseConnection, parseEthSignature };

package/dist/index.d.ts

@@ -42,9 +42,31 @@ interface ParsedXpub {
  */
 declare function parseConnection(scannedUR: ScannedUR, config?: QRKitConfig): Account[];
 
-declare function buildEthSignRequestURParts(message: string, address: string, sourceFingerprint: number | undefined, origin?: string): string[];
-declare function buildEthSignRequestUR(message: string, address: string, sourceFingerprint: number | undefined, origin?: string): string;
+declare const EthDataType: {
+    /** Legacy transaction (RLP-encoded). Wallet applies EIP-155: v = 35 + 2*chainId + recId */
+    readonly LegacyTransaction: 1;
+    /** EIP-712 typed data bytes. Wallet hashes internally. */
+    readonly TypedData: 2;
+    /** Personal message (EIP-191). Wallet prepends "\x19Ethereum Signed Message:\n{len}". */
+    readonly PersonalMessage: 3;
+    /** EIP-1559 transaction (RLP-encoded). Wallet uses v = recId. */
+    readonly TypedTransaction: 4;
+};
+type EthDataTypeValue = (typeof EthDataType)[keyof typeof EthDataType];
+interface EthSignRequestParams {
+    /** Raw sign data. For PersonalMessage, a string is UTF-8 encoded automatically. */
+    signData: Uint8Array | string;
+    /** ERC-4527 data type. Defaults to PersonalMessage (3). Use EthDataType constants. */
+    dataType?: number;
+    address: string;
+    sourceFingerprint: number | undefined;
+    /** Chain ID — required by the wallet for v-value encoding on LegacyTransaction (type 1). */
+    chainId?: number;
+    origin?: string;
+}
+declare function buildEthSignRequestURParts(params: EthSignRequestParams): string[];
+declare function buildEthSignRequestUR(params: EthSignRequestParams): string;
 
 declare function parseEthSignature(scanned: ScannedUR): string;
 
-export { type Account, type Chain, type EvmAccount, type ParsedXpub, type QRKitConfig, type ScannedUR, type XpubType, buildEthSignRequestUR, buildEthSignRequestURParts, parseConnection, parseEthSignature };
+export { type Account, type Chain, EthDataType, type EthDataTypeValue, type EthSignRequestParams, type EvmAccount, type ParsedXpub, type QRKitConfig, type ScannedUR, type XpubType, buildEthSignRequestUR, buildEthSignRequestURParts, parseConnection, parseEthSignature };

package/dist/index.js

@@ -188,7 +188,16 @@ function encodeURParts(cbor, type, maxFragmentLength = 200) {
 }
 
 // src/eth/signRequest.ts
-var DATA_TYPE_ETH_RAW_BYTES = 3;
+var EthDataType = {
+  /** Legacy transaction (RLP-encoded). Wallet applies EIP-155: v = 35 + 2*chainId + recId */
+  LegacyTransaction: 1,
+  /** EIP-712 typed data bytes. Wallet hashes internally. */
+  TypedData: 2,
+  /** Personal message (EIP-191). Wallet prepends "\x19Ethereum Signed Message:\n{len}". */
+  PersonalMessage: 3,
+  /** EIP-1559 transaction (RLP-encoded). Wallet uses v = recId. */
+  TypedTransaction: 4
+};
 var TAG_KEYPATH = 304;
 function randomBytes(n) {
   const buf = new Uint8Array(n);
@@ -203,39 +212,41 @@ function buildKeypath(purpose, coinType, sourceFingerprint) {
   }
   return new CborTag(TAG_KEYPATH, keypathMap);
 }
-function buildEthSignRequestCbor(message, address, sourceFingerprint, origin = "qrkit") {
+function buildEthSignRequestCbor(params) {
+  const {
+    signData,
+    dataType = EthDataType.PersonalMessage,
+    address,
+    sourceFingerprint,
+    chainId,
+    origin = "qrkit"
+  } = params;
   const requestId = randomBytes(16);
-  const messageBytes = new TextEncoder().encode(message);
+  const signBytes = typeof signData === "string" ? new TextEncoder().encode(signData) : signData;
   const keypath = buildKeypath(44, 60, sourceFingerprint);
   const addrHex = address.replace(/^0x/i, "");
   const addrBytes = new Uint8Array(addrHex.match(/.{2}/g).map((b) => parseInt(b, 16)));
   const map = /* @__PURE__ */ new Map([
     [1, new CborTag(37, requestId)],
     // request-id: uuid = #6.37(bstr)
-    [2, messageBytes],
+    [2, signBytes],
     // sign-data
-    [3, DATA_TYPE_ETH_RAW_BYTES],
-    // data-type: eth-raw-bytes for EIP-191
-    [5, keypath],
-    // derivation-path
-    [6, addrBytes],
-    // address
-    [7, origin]
-    // origin
+    [3, dataType]
+    // data-type
   ]);
+  if (chainId !== void 0) {
+    map.set(4, chainId);
+  }
+  map.set(5, keypath);
+  map.set(6, addrBytes);
+  map.set(7, origin);
   return encode(map);
 }
-function buildEthSignRequestURParts(message, address, sourceFingerprint, origin) {
-  return encodeURParts(
-    buildEthSignRequestCbor(message, address, sourceFingerprint, origin),
-    "eth-sign-request"
-  );
+function buildEthSignRequestURParts(params) {
+  return encodeURParts(buildEthSignRequestCbor(params), "eth-sign-request");
 }
-function buildEthSignRequestUR(message, address, sourceFingerprint, origin) {
-  return encodeURParts(
-    buildEthSignRequestCbor(message, address, sourceFingerprint, origin),
-    "eth-sign-request"
-  )[0];
+function buildEthSignRequestUR(params) {
+  return encodeURParts(buildEthSignRequestCbor(params), "eth-sign-request")[0];
 }
 
 // src/eth/signature.ts
@@ -255,6 +266,7 @@ function parseEthSignature(scanned) {
   return "0x" + [...sigBytes].map((b) => b.toString(16).padStart(2, "0")).join("");
 }
 export {
+  EthDataType,
   buildEthSignRequestUR,
   buildEthSignRequestURParts,
   parseConnection,

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/parseXpub.ts","../src/eth/address.ts","../src/eth/deriveAccount.ts","../src/parseConnection.ts","../src/cbor.ts","../src/urEncoding.ts","../src/eth/signRequest.ts","../src/eth/signature.ts"],"sourcesContent":["import { HDKey } from \"@scure/bip32\";\nimport { decode as cborDecode, type TagDecoder } from \"cborg\";\n\nimport type { ScannedUR } from \"./types.js\";\n\nexport type XpubType = \"xpub\";\n\nexport interface ParsedXpub {\n  hdKey: HDKey;\n  type: XpubType;\n  /** BIP-44 purpose index: 44 for EVM */\n  purpose: number | undefined;\n  /** BIP-44 coin type: 60 = ETH */\n  coinType: number | undefined;\n  /** source-fingerprint from the origin keypath — required by Shell for signing */\n  sourceFingerprint: number | undefined;\n  raw: string;\n}\n\nfunction get(m: unknown, k: number): unknown {\n  if (m instanceof Map) return (m as Map<number, unknown>).get(k);\n  return undefined;\n}\n\nconst passthrough = (v: unknown) => v;\n\nfunction decodeCbor(cbor: Uint8Array): Map<number, unknown> {\n  return cborDecode(cbor, {\n    useMaps: true,\n    tags: Object.assign([] as TagDecoder[], {\n      303: passthrough, // crypto-hdkey\n      304: passthrough, // crypto-keypath\n      305: passthrough, // crypto-coin-info\n    }),\n  }) as Map<number, unknown>;\n}\n\nfunction parseCryptoHdKey(map: unknown, raw: string): ParsedXpub {\n  const keyData = get(map, 3) as Uint8Array | undefined;\n  const chainCode = get(map, 4) as Uint8Array | undefined;\n\n  if (!keyData || !chainCode) {\n    throw new Error(\"crypto-hdkey missing key-data or chain-code\");\n  }\n\n  let purpose: number | undefined;\n  let coinType: number | undefined;\n  let sourceFingerprint: number | undefined;\n  const origin = get(map, 6);\n  if (origin) {\n    const components = get(origin, 1);\n    if (Array.isArray(components)) {\n      if (components.length >= 1) purpose = components[0] as number;\n      if (components.length >= 3) coinType = components[2] as number;\n    }\n    sourceFingerprint = get(origin, 2) as number | undefined;\n  }\n\n  const hdKey = new HDKey({ publicKey: keyData, chainCode });\n  return { hdKey, type: \"xpub\", purpose, coinType, sourceFingerprint, raw };\n}\n\nfunction parseScannedUR(scanned: ScannedUR): ParsedXpub | ParsedXpub[] {\n  const { type, cbor } = scanned;\n  const raw = `ur:${type}`;\n\n  if (type !== \"crypto-hdkey\" && type !== \"crypto-account\") {\n    throw new Error(`Unsupported UR type: ${type}`);\n  }\n\n  const map = decodeCbor(cbor);\n\n  if (type === \"crypto-hdkey\") {\n    return parseCryptoHdKey(map, raw);\n  }\n\n  const accounts = map.get(2) as unknown[] | undefined;\n  if (!Array.isArray(accounts) || accounts.length === 0) {\n    throw new Error(\"crypto-account contains no keys\");\n  }\n  return accounts.map((entry) => parseCryptoHdKey(entry, raw));\n}\n\nexport function parseXpub(input: ScannedUR | string): ParsedXpub[] {\n  if (typeof input !== \"string\") {\n    const result = parseScannedUR(input);\n    return Array.isArray(result) ? result : [result];\n  }\n  // Raw base58 xpub string — @scure/bip32 handles decoding directly\n  const hdKey = HDKey.fromExtendedKey(input.trim());\n  return [\n    {\n      hdKey,\n      type: \"xpub\",\n      purpose: undefined,\n      coinType: undefined,\n      sourceFingerprint: undefined,\n      raw: input.trim(),\n    },\n  ];\n}\n","import { keccak_256 } from \"@noble/hashes/sha3.js\";\nimport * as secp from \"@noble/secp256k1\";\n\nexport function pubKeyToEthAddress(compressedPubKey: Uint8Array): string {\n  const uncompressed = secp.Point.fromBytes(compressedPubKey).toBytes(false);\n  const hash = keccak_256(uncompressed.slice(1));\n  const hex = [...hash.slice(12)]\n    .map((b: number) => b.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n  return toChecksumAddress(hex);\n}\n\nfunction toChecksumAddress(hex: string): string {\n  const checksumHash = keccak_256(new TextEncoder().encode(hex));\n  return (\n    \"0x\" +\n    [...hex]\n      .map((c, i) => {\n        if (c >= \"0\" && c <= \"9\") return c;\n        const nibble =\n          i % 2 === 0\n            ? (checksumHash[Math.floor(i / 2)] >> 4) & 0xf\n            : checksumHash[Math.floor(i / 2)] & 0xf;\n        return nibble >= 8 ? c.toUpperCase() : c.toLowerCase();\n      })\n      .join(\"\")\n  );\n}\n","import type { HDKey } from \"@scure/bip32\";\n\nimport type { ParsedXpub } from \"../parseXpub.js\";\nimport { pubKeyToEthAddress } from \"./address.js\";\n\nexport interface DerivedAccount {\n  address: string;\n  publicKey: string;\n  /** source-fingerprint from the scanned xpub — required by Shell for signing */\n  sourceFingerprint: number | undefined;\n}\n\n// Derive the first external address (index 0) from an account-level xpub.\n// Account-level xpub is at depth 3 (m/purpose'/coin'/account').\n// External chain is child 0, then address index 0.\nfunction firstChild(accountKey: HDKey): HDKey {\n  return accountKey.deriveChild(0).deriveChild(0);\n}\n\nfunction toHex(bytes: Uint8Array): string {\n  return [...bytes].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport function deriveEvmAccount(parsed: ParsedXpub[]): DerivedAccount | undefined {\n  for (const entry of parsed) {\n    const { hdKey, purpose, coinType, type, sourceFingerprint } = entry;\n    const isEvm =\n      (purpose === 44 && coinType === 60) || (purpose === undefined && type === \"xpub\");\n\n    if (!isEvm) continue;\n\n    const child = firstChild(hdKey);\n    if (!child.publicKey) continue;\n\n    return {\n      address: pubKeyToEthAddress(child.publicKey),\n      publicKey: toHex(child.publicKey),\n      sourceFingerprint,\n    };\n  }\n  return undefined;\n}\n","import { parseXpub } from \"./parseXpub.js\";\nimport { deriveEvmAccount } from \"./eth/deriveAccount.js\";\nimport type { Account, Chain, EvmAccount, QRKitConfig, ScannedUR } from \"./types.js\";\n\nconst ALL_CHAINS: Chain[] = [\"evm\", \"btc\"];\n\n/**\n * Parse a connection QR (crypto-hdkey or crypto-account) and return\n * only the accounts for the chains configured in QRKitConfig.\n *\n * A dApp configured with `chains: [\"evm\"]` will never see BTC accounts,\n * and vice versa. Both chains can be enabled with `chains: [\"evm\", \"btc\"]`.\n * If `chains` is omitted, all supported chains are tried.\n */\nexport function parseConnection(\n  scannedUR: ScannedUR,\n  config: QRKitConfig = {},\n): Account[] {\n  const chains = config.chains ?? ALL_CHAINS;\n  const parsed = parseXpub(scannedUR);\n  const accounts: Account[] = [];\n\n  if (chains.includes(\"evm\")) {\n    const account = deriveEvmAccount(parsed);\n    if (account) {\n      accounts.push({ chain: \"evm\", ...account } satisfies EvmAccount);\n    }\n  }\n\n  // \"btc\" — will be implemented in src/btc/ when Bitcoin support is added.\n\n  return accounts;\n}\n","// Minimal CBOR encoder.\n// Supports only the types needed for eth-sign-request: uint, bytes, text, array, map (integer keys), bool, tag.\n\nfunction majorType(major: number, n: number): number[] {\n  const base = major << 5;\n  if (n <= 23) return [base | n];\n  if (n <= 0xff) return [base | 0x18, n];\n  if (n <= 0xffff) return [base | 0x19, (n >> 8) & 0xff, n & 0xff];\n  return [base | 0x1a, (n >> 24) & 0xff, (n >> 16) & 0xff, (n >> 8) & 0xff, n & 0xff];\n}\n\nexport function encodeItem(value: unknown): number[] {\n  if (typeof value === \"boolean\") {\n    return [value ? 0xf5 : 0xf4];\n  }\n  if (typeof value === \"number\") {\n    return majorType(0, value);\n  }\n  if (value instanceof Uint8Array) {\n    return [...majorType(2, value.length), ...value];\n  }\n  if (typeof value === \"string\") {\n    const bytes = new TextEncoder().encode(value);\n    return [...majorType(3, bytes.length), ...bytes];\n  }\n  if (Array.isArray(value)) {\n    return [...majorType(4, value.length), ...value.flatMap(encodeItem)];\n  }\n  if (value instanceof CborTag) {\n    return [...majorType(6, value.tag), ...encodeItem(value.value)];\n  }\n  if (value instanceof Map) {\n    const entries = [...value.entries()];\n    return [\n      ...majorType(5, entries.length),\n      ...entries.flatMap(([k, v]) => [...encodeItem(k), ...encodeItem(v)]),\n    ];\n  }\n  throw new Error(`Unsupported CBOR value: ${typeof value}`);\n}\n\nexport class CborTag {\n  tag: number;\n  value: unknown;\n  constructor(tag: number, value: unknown) {\n    this.tag = tag;\n    this.value = value;\n  }\n}\n\nexport function encode(value: unknown): Uint8Array {\n  return new Uint8Array(encodeItem(value));\n}\n","import { UR, UrFountainEncoder } from \"@qrkit/bc-ur\";\n\nexport function encodeURParts(\n  cbor: Uint8Array,\n  type: string,\n  maxFragmentLength = 200,\n): string[] {\n  const ur = UR.fromCbor({ type, payload: cbor });\n  const encoder = new UrFountainEncoder(ur, maxFragmentLength);\n  return encoder.getAllPartsUr().map((part) => part.toString().toUpperCase());\n}\n","import { encode, CborTag } from \"../cbor.js\";\nimport { encodeURParts } from \"../urEncoding.js\";\n\n// EIP-191 personal_sign = eth-raw-bytes (ERC-4527 data type 3)\nconst DATA_TYPE_ETH_RAW_BYTES = 3;\n\n// CBOR tag for crypto-keypath\nconst TAG_KEYPATH = 304;\n\nfunction randomBytes(n: number): Uint8Array {\n  const buf = new Uint8Array(n);\n  crypto.getRandomValues(buf);\n  return buf;\n}\n\nfunction buildKeypath(\n  purpose: number,\n  coinType: number,\n  sourceFingerprint: number | undefined,\n): CborTag {\n  // m/purpose'/coinType'/0'/0/0\n  const components = [purpose, true, coinType, true, 0, true, 0, false, 0, false];\n  const keypathMap = new Map<number, unknown>([[1, components]]);\n  if (sourceFingerprint !== undefined) {\n    keypathMap.set(2, sourceFingerprint);\n  }\n  return new CborTag(TAG_KEYPATH, keypathMap);\n}\n\nfunction buildEthSignRequestCbor(\n  message: string,\n  address: string,\n  sourceFingerprint: number | undefined,\n  origin = \"qrkit\",\n): Uint8Array {\n  const requestId = randomBytes(16);\n  const messageBytes = new TextEncoder().encode(message);\n  const keypath = buildKeypath(44, 60, sourceFingerprint);\n\n  const addrHex = address.replace(/^0x/i, \"\");\n  const addrBytes = new Uint8Array(addrHex.match(/.{2}/g)!.map((b) => parseInt(b, 16)));\n\n  const map = new Map<number, unknown>([\n    [1, new CborTag(37, requestId)], // request-id: uuid = #6.37(bstr)\n    [2, messageBytes], // sign-data\n    [3, DATA_TYPE_ETH_RAW_BYTES], // data-type: eth-raw-bytes for EIP-191\n    [5, keypath], // derivation-path\n    [6, addrBytes], // address\n    [7, origin], // origin\n  ]);\n\n  return encode(map);\n}\n\nexport function buildEthSignRequestURParts(\n  message: string,\n  address: string,\n  sourceFingerprint: number | undefined,\n  origin?: string,\n): string[] {\n  return encodeURParts(\n    buildEthSignRequestCbor(message, address, sourceFingerprint, origin),\n    \"eth-sign-request\",\n  );\n}\n\nexport function buildEthSignRequestUR(\n  message: string,\n  address: string,\n  sourceFingerprint: number | undefined,\n  origin?: string,\n): string {\n  return encodeURParts(\n    buildEthSignRequestCbor(message, address, sourceFingerprint, origin),\n    \"eth-sign-request\",\n  )[0];\n}\n","import { decode as cborDecode, type TagDecoder } from \"cborg\";\n\nimport type { ScannedUR } from \"../types.js\";\n\nexport function parseEthSignature(scanned: ScannedUR): string {\n  if (scanned.type !== \"eth-signature\") {\n    throw new Error(`Expected eth-signature, got: ${scanned.type}`);\n  }\n\n  const map = cborDecode(scanned.cbor, {\n    useMaps: true,\n    tags: Object.assign([] as TagDecoder[], { 37: (v: unknown) => v }),\n  }) as Map<number, unknown>;\n\n  const sigBytes = map.get(2) as Uint8Array | undefined;\n  if (!sigBytes || sigBytes.length < 64) {\n    throw new Error(\"Invalid or missing signature bytes\");\n  }\n\n  return \"0x\" + [...sigBytes].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n"],"mappings":";AAAA,SAAS,aAAa;AACtB,SAAS,UAAU,kBAAmC;AAkBtD,SAAS,IAAI,GAAY,GAAoB;AAC3C,MAAI,aAAa,IAAK,QAAQ,EAA2B,IAAI,CAAC;AAC9D,SAAO;AACT;AAEA,IAAM,cAAc,CAAC,MAAe;AAEpC,SAAS,WAAW,MAAwC;AAC1D,SAAO,WAAW,MAAM;AAAA,IACtB,SAAS;AAAA,IACT,MAAM,OAAO,OAAO,CAAC,GAAmB;AAAA,MACtC,KAAK;AAAA;AAAA,MACL,KAAK;AAAA;AAAA,MACL,KAAK;AAAA;AAAA,IACP,CAAC;AAAA,EACH,CAAC;AACH;AAEA,SAAS,iBAAiB,KAAc,KAAyB;AAC/D,QAAM,UAAU,IAAI,KAAK,CAAC;AAC1B,QAAM,YAAY,IAAI,KAAK,CAAC;AAE5B,MAAI,CAAC,WAAW,CAAC,WAAW;AAC1B,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,QAAM,SAAS,IAAI,KAAK,CAAC;AACzB,MAAI,QAAQ;AACV,UAAM,aAAa,IAAI,QAAQ,CAAC;AAChC,QAAI,MAAM,QAAQ,UAAU,GAAG;AAC7B,UAAI,WAAW,UAAU,EAAG,WAAU,WAAW,CAAC;AAClD,UAAI,WAAW,UAAU,EAAG,YAAW,WAAW,CAAC;AAAA,IACrD;AACA,wBAAoB,IAAI,QAAQ,CAAC;AAAA,EACnC;AAEA,QAAM,QAAQ,IAAI,MAAM,EAAE,WAAW,SAAS,UAAU,CAAC;AACzD,SAAO,EAAE,OAAO,MAAM,QAAQ,SAAS,UAAU,mBAAmB,IAAI;AAC1E;AAEA,SAAS,eAAe,SAA+C;AACrE,QAAM,EAAE,MAAM,KAAK,IAAI;AACvB,QAAM,MAAM,MAAM,IAAI;AAEtB,MAAI,SAAS,kBAAkB,SAAS,kBAAkB;AACxD,UAAM,IAAI,MAAM,wBAAwB,IAAI,EAAE;AAAA,EAChD;AAEA,QAAM,MAAM,WAAW,IAAI;AAE3B,MAAI,SAAS,gBAAgB;AAC3B,WAAO,iBAAiB,KAAK,GAAG;AAAA,EAClC;AAEA,QAAM,WAAW,IAAI,IAAI,CAAC;AAC1B,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,GAAG;AACrD,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD;AACA,SAAO,SAAS,IAAI,CAAC,UAAU,iBAAiB,OAAO,GAAG,CAAC;AAC7D;AAEO,SAAS,UAAU,OAAyC;AACjE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,SAAS,eAAe,KAAK;AACnC,WAAO,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,MAAM;AAAA,EACjD;AAEA,QAAM,QAAQ,MAAM,gBAAgB,MAAM,KAAK,CAAC;AAChD,SAAO;AAAA,IACL;AAAA,MACE;AAAA,MACA,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,MACV,mBAAmB;AAAA,MACnB,KAAK,MAAM,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACpGA,SAAS,kBAAkB;AAC3B,YAAY,UAAU;AAEf,SAAS,mBAAmB,kBAAsC;AACvE,QAAM,eAAoB,WAAM,UAAU,gBAAgB,EAAE,QAAQ,KAAK;AACzE,QAAM,OAAO,WAAW,aAAa,MAAM,CAAC,CAAC;AAC7C,QAAM,MAAM,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC,EAC3B,IAAI,CAAC,MAAc,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAClD,KAAK,EAAE;AACV,SAAO,kBAAkB,GAAG;AAC9B;AAEA,SAAS,kBAAkB,KAAqB;AAC9C,QAAM,eAAe,WAAW,IAAI,YAAY,EAAE,OAAO,GAAG,CAAC;AAC7D,SACE,OACA,CAAC,GAAG,GAAG,EACJ,IAAI,CAAC,GAAG,MAAM;AACb,QAAI,KAAK,OAAO,KAAK,IAAK,QAAO;AACjC,UAAM,SACJ,IAAI,MAAM,IACL,aAAa,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,IAAK,KACzC,aAAa,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI;AACxC,WAAO,UAAU,IAAI,EAAE,YAAY,IAAI,EAAE,YAAY;AAAA,EACvD,CAAC,EACA,KAAK,EAAE;AAEd;;;ACZA,SAAS,WAAW,YAA0B;AAC5C,SAAO,WAAW,YAAY,CAAC,EAAE,YAAY,CAAC;AAChD;AAEA,SAAS,MAAM,OAA2B;AACxC,SAAO,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACvE;AAEO,SAAS,iBAAiB,QAAkD;AACjF,aAAW,SAAS,QAAQ;AAC1B,UAAM,EAAE,OAAO,SAAS,UAAU,MAAM,kBAAkB,IAAI;AAC9D,UAAM,QACH,YAAY,MAAM,aAAa,MAAQ,YAAY,UAAa,SAAS;AAE5E,QAAI,CAAC,MAAO;AAEZ,UAAM,QAAQ,WAAW,KAAK;AAC9B,QAAI,CAAC,MAAM,UAAW;AAEtB,WAAO;AAAA,MACL,SAAS,mBAAmB,MAAM,SAAS;AAAA,MAC3C,WAAW,MAAM,MAAM,SAAS;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;;;ACrCA,IAAM,aAAsB,CAAC,OAAO,KAAK;AAUlC,SAAS,gBACd,WACA,SAAsB,CAAC,GACZ;AACX,QAAM,SAAS,OAAO,UAAU;AAChC,QAAM,SAAS,UAAU,SAAS;AAClC,QAAM,WAAsB,CAAC;AAE7B,MAAI,OAAO,SAAS,KAAK,GAAG;AAC1B,UAAM,UAAU,iBAAiB,MAAM;AACvC,QAAI,SAAS;AACX,eAAS,KAAK,EAAE,OAAO,OAAO,GAAG,QAAQ,CAAsB;AAAA,IACjE;AAAA,EACF;AAIA,SAAO;AACT;;;AC7BA,SAAS,UAAU,OAAe,GAAqB;AACrD,QAAM,OAAO,SAAS;AACtB,MAAI,KAAK,GAAI,QAAO,CAAC,OAAO,CAAC;AAC7B,MAAI,KAAK,IAAM,QAAO,CAAC,OAAO,IAAM,CAAC;AACrC,MAAI,KAAK,MAAQ,QAAO,CAAC,OAAO,IAAO,KAAK,IAAK,KAAM,IAAI,GAAI;AAC/D,SAAO,CAAC,OAAO,IAAO,KAAK,KAAM,KAAO,KAAK,KAAM,KAAO,KAAK,IAAK,KAAM,IAAI,GAAI;AACpF;AAEO,SAAS,WAAW,OAA0B;AACnD,MAAI,OAAO,UAAU,WAAW;AAC9B,WAAO,CAAC,QAAQ,MAAO,GAAI;AAAA,EAC7B;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,UAAU,GAAG,KAAK;AAAA,EAC3B;AACA,MAAI,iBAAiB,YAAY;AAC/B,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,MAAM,GAAG,GAAG,KAAK;AAAA,EACjD;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAC5C,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,MAAM,GAAG,GAAG,KAAK;AAAA,EACjD;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,MAAM,GAAG,GAAG,MAAM,QAAQ,UAAU,CAAC;AAAA,EACrE;AACA,MAAI,iBAAiB,SAAS;AAC5B,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,GAAG,GAAG,GAAG,WAAW,MAAM,KAAK,CAAC;AAAA,EAChE;AACA,MAAI,iBAAiB,KAAK;AACxB,UAAM,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC;AACnC,WAAO;AAAA,MACL,GAAG,UAAU,GAAG,QAAQ,MAAM;AAAA,MAC9B,GAAG,QAAQ,QAAQ,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;AAAA,IACrE;AAAA,EACF;AACA,QAAM,IAAI,MAAM,2BAA2B,OAAO,KAAK,EAAE;AAC3D;AAEO,IAAM,UAAN,MAAc;AAAA,EACnB;AAAA,EACA;AAAA,EACA,YAAY,KAAa,OAAgB;AACvC,SAAK,MAAM;AACX,SAAK,QAAQ;AAAA,EACf;AACF;AAEO,SAAS,OAAO,OAA4B;AACjD,SAAO,IAAI,WAAW,WAAW,KAAK,CAAC;AACzC;;;ACpDA,SAAS,IAAI,yBAAyB;AAE/B,SAAS,cACd,MACA,MACA,oBAAoB,KACV;AACV,QAAM,KAAK,GAAG,SAAS,EAAE,MAAM,SAAS,KAAK,CAAC;AAC9C,QAAM,UAAU,IAAI,kBAAkB,IAAI,iBAAiB;AAC3D,SAAO,QAAQ,cAAc,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,YAAY,CAAC;AAC5E;;;ACNA,IAAM,0BAA0B;AAGhC,IAAM,cAAc;AAEpB,SAAS,YAAY,GAAuB;AAC1C,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,SAAO,gBAAgB,GAAG;AAC1B,SAAO;AACT;AAEA,SAAS,aACP,SACA,UACA,mBACS;AAET,QAAM,aAAa,CAAC,SAAS,MAAM,UAAU,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK;AAC9E,QAAM,aAAa,oBAAI,IAAqB,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;AAC7D,MAAI,sBAAsB,QAAW;AACnC,eAAW,IAAI,GAAG,iBAAiB;AAAA,EACrC;AACA,SAAO,IAAI,QAAQ,aAAa,UAAU;AAC5C;AAEA,SAAS,wBACP,SACA,SACA,mBACA,SAAS,SACG;AACZ,QAAM,YAAY,YAAY,EAAE;AAChC,QAAM,eAAe,IAAI,YAAY,EAAE,OAAO,OAAO;AACrD,QAAM,UAAU,aAAa,IAAI,IAAI,iBAAiB;AAEtD,QAAM,UAAU,QAAQ,QAAQ,QAAQ,EAAE;AAC1C,QAAM,YAAY,IAAI,WAAW,QAAQ,MAAM,OAAO,EAAG,IAAI,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC;AAEpF,QAAM,MAAM,oBAAI,IAAqB;AAAA,IACnC,CAAC,GAAG,IAAI,QAAQ,IAAI,SAAS,CAAC;AAAA;AAAA,IAC9B,CAAC,GAAG,YAAY;AAAA;AAAA,IAChB,CAAC,GAAG,uBAAuB;AAAA;AAAA,IAC3B,CAAC,GAAG,OAAO;AAAA;AAAA,IACX,CAAC,GAAG,SAAS;AAAA;AAAA,IACb,CAAC,GAAG,MAAM;AAAA;AAAA,EACZ,CAAC;AAED,SAAO,OAAO,GAAG;AACnB;AAEO,SAAS,2BACd,SACA,SACA,mBACA,QACU;AACV,SAAO;AAAA,IACL,wBAAwB,SAAS,SAAS,mBAAmB,MAAM;AAAA,IACnE;AAAA,EACF;AACF;AAEO,SAAS,sBACd,SACA,SACA,mBACA,QACQ;AACR,SAAO;AAAA,IACL,wBAAwB,SAAS,SAAS,mBAAmB,MAAM;AAAA,IACnE;AAAA,EACF,EAAE,CAAC;AACL;;;AC5EA,SAAS,UAAUA,mBAAmC;AAI/C,SAAS,kBAAkB,SAA4B;AAC5D,MAAI,QAAQ,SAAS,iBAAiB;AACpC,UAAM,IAAI,MAAM,gCAAgC,QAAQ,IAAI,EAAE;AAAA,EAChE;AAEA,QAAM,MAAMA,YAAW,QAAQ,MAAM;AAAA,IACnC,SAAS;AAAA,IACT,MAAM,OAAO,OAAO,CAAC,GAAmB,EAAE,IAAI,CAAC,MAAe,EAAE,CAAC;AAAA,EACnE,CAAC;AAED,QAAM,WAAW,IAAI,IAAI,CAAC;AAC1B,MAAI,CAAC,YAAY,SAAS,SAAS,IAAI;AACrC,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAEA,SAAO,OAAO,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACjF;","names":["cborDecode"]}
+{"version":3,"sources":["../src/parseXpub.ts","../src/eth/address.ts","../src/eth/deriveAccount.ts","../src/parseConnection.ts","../src/cbor.ts","../src/urEncoding.ts","../src/eth/signRequest.ts","../src/eth/signature.ts"],"sourcesContent":["import { HDKey } from \"@scure/bip32\";\nimport { decode as cborDecode, type TagDecoder } from \"cborg\";\n\nimport type { ScannedUR } from \"./types.js\";\n\nexport type XpubType = \"xpub\";\n\nexport interface ParsedXpub {\n  hdKey: HDKey;\n  type: XpubType;\n  /** BIP-44 purpose index: 44 for EVM */\n  purpose: number | undefined;\n  /** BIP-44 coin type: 60 = ETH */\n  coinType: number | undefined;\n  /** source-fingerprint from the origin keypath — required by Shell for signing */\n  sourceFingerprint: number | undefined;\n  raw: string;\n}\n\nfunction get(m: unknown, k: number): unknown {\n  if (m instanceof Map) return (m as Map<number, unknown>).get(k);\n  return undefined;\n}\n\nconst passthrough = (v: unknown) => v;\n\nfunction decodeCbor(cbor: Uint8Array): Map<number, unknown> {\n  return cborDecode(cbor, {\n    useMaps: true,\n    tags: Object.assign([] as TagDecoder[], {\n      303: passthrough, // crypto-hdkey\n      304: passthrough, // crypto-keypath\n      305: passthrough, // crypto-coin-info\n    }),\n  }) as Map<number, unknown>;\n}\n\nfunction parseCryptoHdKey(map: unknown, raw: string): ParsedXpub {\n  const keyData = get(map, 3) as Uint8Array | undefined;\n  const chainCode = get(map, 4) as Uint8Array | undefined;\n\n  if (!keyData || !chainCode) {\n    throw new Error(\"crypto-hdkey missing key-data or chain-code\");\n  }\n\n  let purpose: number | undefined;\n  let coinType: number | undefined;\n  let sourceFingerprint: number | undefined;\n  const origin = get(map, 6);\n  if (origin) {\n    const components = get(origin, 1);\n    if (Array.isArray(components)) {\n      if (components.length >= 1) purpose = components[0] as number;\n      if (components.length >= 3) coinType = components[2] as number;\n    }\n    sourceFingerprint = get(origin, 2) as number | undefined;\n  }\n\n  const hdKey = new HDKey({ publicKey: keyData, chainCode });\n  return { hdKey, type: \"xpub\", purpose, coinType, sourceFingerprint, raw };\n}\n\nfunction parseScannedUR(scanned: ScannedUR): ParsedXpub | ParsedXpub[] {\n  const { type, cbor } = scanned;\n  const raw = `ur:${type}`;\n\n  if (type !== \"crypto-hdkey\" && type !== \"crypto-account\") {\n    throw new Error(`Unsupported UR type: ${type}`);\n  }\n\n  const map = decodeCbor(cbor);\n\n  if (type === \"crypto-hdkey\") {\n    return parseCryptoHdKey(map, raw);\n  }\n\n  const accounts = map.get(2) as unknown[] | undefined;\n  if (!Array.isArray(accounts) || accounts.length === 0) {\n    throw new Error(\"crypto-account contains no keys\");\n  }\n  return accounts.map((entry) => parseCryptoHdKey(entry, raw));\n}\n\nexport function parseXpub(input: ScannedUR | string): ParsedXpub[] {\n  if (typeof input !== \"string\") {\n    const result = parseScannedUR(input);\n    return Array.isArray(result) ? result : [result];\n  }\n  // Raw base58 xpub string — @scure/bip32 handles decoding directly\n  const hdKey = HDKey.fromExtendedKey(input.trim());\n  return [\n    {\n      hdKey,\n      type: \"xpub\",\n      purpose: undefined,\n      coinType: undefined,\n      sourceFingerprint: undefined,\n      raw: input.trim(),\n    },\n  ];\n}\n","import { keccak_256 } from \"@noble/hashes/sha3.js\";\nimport * as secp from \"@noble/secp256k1\";\n\nexport function pubKeyToEthAddress(compressedPubKey: Uint8Array): string {\n  const uncompressed = secp.Point.fromBytes(compressedPubKey).toBytes(false);\n  const hash = keccak_256(uncompressed.slice(1));\n  const hex = [...hash.slice(12)]\n    .map((b: number) => b.toString(16).padStart(2, \"0\"))\n    .join(\"\");\n  return toChecksumAddress(hex);\n}\n\nfunction toChecksumAddress(hex: string): string {\n  const checksumHash = keccak_256(new TextEncoder().encode(hex));\n  return (\n    \"0x\" +\n    [...hex]\n      .map((c, i) => {\n        if (c >= \"0\" && c <= \"9\") return c;\n        const nibble =\n          i % 2 === 0\n            ? (checksumHash[Math.floor(i / 2)] >> 4) & 0xf\n            : checksumHash[Math.floor(i / 2)] & 0xf;\n        return nibble >= 8 ? c.toUpperCase() : c.toLowerCase();\n      })\n      .join(\"\")\n  );\n}\n","import type { HDKey } from \"@scure/bip32\";\n\nimport type { ParsedXpub } from \"../parseXpub.js\";\nimport { pubKeyToEthAddress } from \"./address.js\";\n\nexport interface DerivedAccount {\n  address: string;\n  publicKey: string;\n  /** source-fingerprint from the scanned xpub — required by Shell for signing */\n  sourceFingerprint: number | undefined;\n}\n\n// Derive the first external address (index 0) from an account-level xpub.\n// Account-level xpub is at depth 3 (m/purpose'/coin'/account').\n// External chain is child 0, then address index 0.\nfunction firstChild(accountKey: HDKey): HDKey {\n  return accountKey.deriveChild(0).deriveChild(0);\n}\n\nfunction toHex(bytes: Uint8Array): string {\n  return [...bytes].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nexport function deriveEvmAccount(parsed: ParsedXpub[]): DerivedAccount | undefined {\n  for (const entry of parsed) {\n    const { hdKey, purpose, coinType, type, sourceFingerprint } = entry;\n    const isEvm =\n      (purpose === 44 && coinType === 60) || (purpose === undefined && type === \"xpub\");\n\n    if (!isEvm) continue;\n\n    const child = firstChild(hdKey);\n    if (!child.publicKey) continue;\n\n    return {\n      address: pubKeyToEthAddress(child.publicKey),\n      publicKey: toHex(child.publicKey),\n      sourceFingerprint,\n    };\n  }\n  return undefined;\n}\n","import { parseXpub } from \"./parseXpub.js\";\nimport { deriveEvmAccount } from \"./eth/deriveAccount.js\";\nimport type { Account, Chain, EvmAccount, QRKitConfig, ScannedUR } from \"./types.js\";\n\nconst ALL_CHAINS: Chain[] = [\"evm\", \"btc\"];\n\n/**\n * Parse a connection QR (crypto-hdkey or crypto-account) and return\n * only the accounts for the chains configured in QRKitConfig.\n *\n * A dApp configured with `chains: [\"evm\"]` will never see BTC accounts,\n * and vice versa. Both chains can be enabled with `chains: [\"evm\", \"btc\"]`.\n * If `chains` is omitted, all supported chains are tried.\n */\nexport function parseConnection(\n  scannedUR: ScannedUR,\n  config: QRKitConfig = {},\n): Account[] {\n  const chains = config.chains ?? ALL_CHAINS;\n  const parsed = parseXpub(scannedUR);\n  const accounts: Account[] = [];\n\n  if (chains.includes(\"evm\")) {\n    const account = deriveEvmAccount(parsed);\n    if (account) {\n      accounts.push({ chain: \"evm\", ...account } satisfies EvmAccount);\n    }\n  }\n\n  // \"btc\" — will be implemented in src/btc/ when Bitcoin support is added.\n\n  return accounts;\n}\n","// Minimal CBOR encoder.\n// Supports only the types needed for eth-sign-request: uint, bytes, text, array, map (integer keys), bool, tag.\n\nfunction majorType(major: number, n: number): number[] {\n  const base = major << 5;\n  if (n <= 23) return [base | n];\n  if (n <= 0xff) return [base | 0x18, n];\n  if (n <= 0xffff) return [base | 0x19, (n >> 8) & 0xff, n & 0xff];\n  return [base | 0x1a, (n >> 24) & 0xff, (n >> 16) & 0xff, (n >> 8) & 0xff, n & 0xff];\n}\n\nexport function encodeItem(value: unknown): number[] {\n  if (typeof value === \"boolean\") {\n    return [value ? 0xf5 : 0xf4];\n  }\n  if (typeof value === \"number\") {\n    return majorType(0, value);\n  }\n  if (value instanceof Uint8Array) {\n    return [...majorType(2, value.length), ...value];\n  }\n  if (typeof value === \"string\") {\n    const bytes = new TextEncoder().encode(value);\n    return [...majorType(3, bytes.length), ...bytes];\n  }\n  if (Array.isArray(value)) {\n    return [...majorType(4, value.length), ...value.flatMap(encodeItem)];\n  }\n  if (value instanceof CborTag) {\n    return [...majorType(6, value.tag), ...encodeItem(value.value)];\n  }\n  if (value instanceof Map) {\n    const entries = [...value.entries()];\n    return [\n      ...majorType(5, entries.length),\n      ...entries.flatMap(([k, v]) => [...encodeItem(k), ...encodeItem(v)]),\n    ];\n  }\n  throw new Error(`Unsupported CBOR value: ${typeof value}`);\n}\n\nexport class CborTag {\n  tag: number;\n  value: unknown;\n  constructor(tag: number, value: unknown) {\n    this.tag = tag;\n    this.value = value;\n  }\n}\n\nexport function encode(value: unknown): Uint8Array {\n  return new Uint8Array(encodeItem(value));\n}\n","import { UR, UrFountainEncoder } from \"@qrkit/bc-ur\";\n\nexport function encodeURParts(\n  cbor: Uint8Array,\n  type: string,\n  maxFragmentLength = 200,\n): string[] {\n  const ur = UR.fromCbor({ type, payload: cbor });\n  const encoder = new UrFountainEncoder(ur, maxFragmentLength);\n  return encoder.getAllPartsUr().map((part) => part.toString().toUpperCase());\n}\n","import { encode, CborTag } from \"../cbor.js\";\nimport { encodeURParts } from \"../urEncoding.js\";\n\n// ERC-4527 eth-sign-request data types\nexport const EthDataType = {\n  /** Legacy transaction (RLP-encoded). Wallet applies EIP-155: v = 35 + 2*chainId + recId */\n  LegacyTransaction: 1,\n  /** EIP-712 typed data bytes. Wallet hashes internally. */\n  TypedData: 2,\n  /** Personal message (EIP-191). Wallet prepends \"\\x19Ethereum Signed Message:\\n{len}\". */\n  PersonalMessage: 3,\n  /** EIP-1559 transaction (RLP-encoded). Wallet uses v = recId. */\n  TypedTransaction: 4,\n} as const;\n\nexport type EthDataTypeValue = (typeof EthDataType)[keyof typeof EthDataType];\n\n// CBOR tag for crypto-keypath\nconst TAG_KEYPATH = 304;\n\nfunction randomBytes(n: number): Uint8Array {\n  const buf = new Uint8Array(n);\n  crypto.getRandomValues(buf);\n  return buf;\n}\n\nfunction buildKeypath(\n  purpose: number,\n  coinType: number,\n  sourceFingerprint: number | undefined,\n): CborTag {\n  // m/purpose'/coinType'/0'/0/0\n  const components = [purpose, true, coinType, true, 0, true, 0, false, 0, false];\n  const keypathMap = new Map<number, unknown>([[1, components]]);\n  if (sourceFingerprint !== undefined) {\n    keypathMap.set(2, sourceFingerprint);\n  }\n  return new CborTag(TAG_KEYPATH, keypathMap);\n}\n\nexport interface EthSignRequestParams {\n  /** Raw sign data. For PersonalMessage, a string is UTF-8 encoded automatically. */\n  signData: Uint8Array | string;\n  /** ERC-4527 data type. Defaults to PersonalMessage (3). Use EthDataType constants. */\n  dataType?: number;\n  address: string;\n  sourceFingerprint: number | undefined;\n  /** Chain ID — required by the wallet for v-value encoding on LegacyTransaction (type 1). */\n  chainId?: number;\n  origin?: string;\n}\n\nfunction buildEthSignRequestCbor(params: EthSignRequestParams): Uint8Array {\n  const {\n    signData,\n    dataType = EthDataType.PersonalMessage,\n    address,\n    sourceFingerprint,\n    chainId,\n    origin = \"qrkit\",\n  } = params;\n\n  const requestId = randomBytes(16);\n  const signBytes =\n    typeof signData === \"string\" ? new TextEncoder().encode(signData) : signData;\n  const keypath = buildKeypath(44, 60, sourceFingerprint);\n\n  const addrHex = address.replace(/^0x/i, \"\");\n  const addrBytes = new Uint8Array(addrHex.match(/.{2}/g)!.map((b) => parseInt(b, 16)));\n\n  // Keys must be in strictly ascending order for zcbor (Shell firmware decoder).\n  const map = new Map<number, unknown>([\n    [1, new CborTag(37, requestId)], // request-id: uuid = #6.37(bstr)\n    [2, signBytes], // sign-data\n    [3, dataType], // data-type\n  ]);\n\n  if (chainId !== undefined) {\n    map.set(4, chainId); // chain-id — must come before key 5\n  }\n\n  map.set(5, keypath); // derivation-path\n  map.set(6, addrBytes); // address\n  map.set(7, origin); // origin\n\n  return encode(map);\n}\n\nexport function buildEthSignRequestURParts(params: EthSignRequestParams): string[] {\n  return encodeURParts(buildEthSignRequestCbor(params), \"eth-sign-request\");\n}\n\nexport function buildEthSignRequestUR(params: EthSignRequestParams): string {\n  return encodeURParts(buildEthSignRequestCbor(params), \"eth-sign-request\")[0];\n}\n","import { decode as cborDecode, type TagDecoder } from \"cborg\";\n\nimport type { ScannedUR } from \"../types.js\";\n\nexport function parseEthSignature(scanned: ScannedUR): string {\n  if (scanned.type !== \"eth-signature\") {\n    throw new Error(`Expected eth-signature, got: ${scanned.type}`);\n  }\n\n  const map = cborDecode(scanned.cbor, {\n    useMaps: true,\n    tags: Object.assign([] as TagDecoder[], { 37: (v: unknown) => v }),\n  }) as Map<number, unknown>;\n\n  const sigBytes = map.get(2) as Uint8Array | undefined;\n  if (!sigBytes || sigBytes.length < 64) {\n    throw new Error(\"Invalid or missing signature bytes\");\n  }\n\n  return \"0x\" + [...sigBytes].map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n"],"mappings":";AAAA,SAAS,aAAa;AACtB,SAAS,UAAU,kBAAmC;AAkBtD,SAAS,IAAI,GAAY,GAAoB;AAC3C,MAAI,aAAa,IAAK,QAAQ,EAA2B,IAAI,CAAC;AAC9D,SAAO;AACT;AAEA,IAAM,cAAc,CAAC,MAAe;AAEpC,SAAS,WAAW,MAAwC;AAC1D,SAAO,WAAW,MAAM;AAAA,IACtB,SAAS;AAAA,IACT,MAAM,OAAO,OAAO,CAAC,GAAmB;AAAA,MACtC,KAAK;AAAA;AAAA,MACL,KAAK;AAAA;AAAA,MACL,KAAK;AAAA;AAAA,IACP,CAAC;AAAA,EACH,CAAC;AACH;AAEA,SAAS,iBAAiB,KAAc,KAAyB;AAC/D,QAAM,UAAU,IAAI,KAAK,CAAC;AAC1B,QAAM,YAAY,IAAI,KAAK,CAAC;AAE5B,MAAI,CAAC,WAAW,CAAC,WAAW;AAC1B,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AAEA,MAAI;AACJ,MAAI;AACJ,MAAI;AACJ,QAAM,SAAS,IAAI,KAAK,CAAC;AACzB,MAAI,QAAQ;AACV,UAAM,aAAa,IAAI,QAAQ,CAAC;AAChC,QAAI,MAAM,QAAQ,UAAU,GAAG;AAC7B,UAAI,WAAW,UAAU,EAAG,WAAU,WAAW,CAAC;AAClD,UAAI,WAAW,UAAU,EAAG,YAAW,WAAW,CAAC;AAAA,IACrD;AACA,wBAAoB,IAAI,QAAQ,CAAC;AAAA,EACnC;AAEA,QAAM,QAAQ,IAAI,MAAM,EAAE,WAAW,SAAS,UAAU,CAAC;AACzD,SAAO,EAAE,OAAO,MAAM,QAAQ,SAAS,UAAU,mBAAmB,IAAI;AAC1E;AAEA,SAAS,eAAe,SAA+C;AACrE,QAAM,EAAE,MAAM,KAAK,IAAI;AACvB,QAAM,MAAM,MAAM,IAAI;AAEtB,MAAI,SAAS,kBAAkB,SAAS,kBAAkB;AACxD,UAAM,IAAI,MAAM,wBAAwB,IAAI,EAAE;AAAA,EAChD;AAEA,QAAM,MAAM,WAAW,IAAI;AAE3B,MAAI,SAAS,gBAAgB;AAC3B,WAAO,iBAAiB,KAAK,GAAG;AAAA,EAClC;AAEA,QAAM,WAAW,IAAI,IAAI,CAAC;AAC1B,MAAI,CAAC,MAAM,QAAQ,QAAQ,KAAK,SAAS,WAAW,GAAG;AACrD,UAAM,IAAI,MAAM,iCAAiC;AAAA,EACnD;AACA,SAAO,SAAS,IAAI,CAAC,UAAU,iBAAiB,OAAO,GAAG,CAAC;AAC7D;AAEO,SAAS,UAAU,OAAyC;AACjE,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,SAAS,eAAe,KAAK;AACnC,WAAO,MAAM,QAAQ,MAAM,IAAI,SAAS,CAAC,MAAM;AAAA,EACjD;AAEA,QAAM,QAAQ,MAAM,gBAAgB,MAAM,KAAK,CAAC;AAChD,SAAO;AAAA,IACL;AAAA,MACE;AAAA,MACA,MAAM;AAAA,MACN,SAAS;AAAA,MACT,UAAU;AAAA,MACV,mBAAmB;AAAA,MACnB,KAAK,MAAM,KAAK;AAAA,IAClB;AAAA,EACF;AACF;;;ACpGA,SAAS,kBAAkB;AAC3B,YAAY,UAAU;AAEf,SAAS,mBAAmB,kBAAsC;AACvE,QAAM,eAAoB,WAAM,UAAU,gBAAgB,EAAE,QAAQ,KAAK;AACzE,QAAM,OAAO,WAAW,aAAa,MAAM,CAAC,CAAC;AAC7C,QAAM,MAAM,CAAC,GAAG,KAAK,MAAM,EAAE,CAAC,EAC3B,IAAI,CAAC,MAAc,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAClD,KAAK,EAAE;AACV,SAAO,kBAAkB,GAAG;AAC9B;AAEA,SAAS,kBAAkB,KAAqB;AAC9C,QAAM,eAAe,WAAW,IAAI,YAAY,EAAE,OAAO,GAAG,CAAC;AAC7D,SACE,OACA,CAAC,GAAG,GAAG,EACJ,IAAI,CAAC,GAAG,MAAM;AACb,QAAI,KAAK,OAAO,KAAK,IAAK,QAAO;AACjC,UAAM,SACJ,IAAI,MAAM,IACL,aAAa,KAAK,MAAM,IAAI,CAAC,CAAC,KAAK,IAAK,KACzC,aAAa,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI;AACxC,WAAO,UAAU,IAAI,EAAE,YAAY,IAAI,EAAE,YAAY;AAAA,EACvD,CAAC,EACA,KAAK,EAAE;AAEd;;;ACZA,SAAS,WAAW,YAA0B;AAC5C,SAAO,WAAW,YAAY,CAAC,EAAE,YAAY,CAAC;AAChD;AAEA,SAAS,MAAM,OAA2B;AACxC,SAAO,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACvE;AAEO,SAAS,iBAAiB,QAAkD;AACjF,aAAW,SAAS,QAAQ;AAC1B,UAAM,EAAE,OAAO,SAAS,UAAU,MAAM,kBAAkB,IAAI;AAC9D,UAAM,QACH,YAAY,MAAM,aAAa,MAAQ,YAAY,UAAa,SAAS;AAE5E,QAAI,CAAC,MAAO;AAEZ,UAAM,QAAQ,WAAW,KAAK;AAC9B,QAAI,CAAC,MAAM,UAAW;AAEtB,WAAO;AAAA,MACL,SAAS,mBAAmB,MAAM,SAAS;AAAA,MAC3C,WAAW,MAAM,MAAM,SAAS;AAAA,MAChC;AAAA,IACF;AAAA,EACF;AACA,SAAO;AACT;;;ACrCA,IAAM,aAAsB,CAAC,OAAO,KAAK;AAUlC,SAAS,gBACd,WACA,SAAsB,CAAC,GACZ;AACX,QAAM,SAAS,OAAO,UAAU;AAChC,QAAM,SAAS,UAAU,SAAS;AAClC,QAAM,WAAsB,CAAC;AAE7B,MAAI,OAAO,SAAS,KAAK,GAAG;AAC1B,UAAM,UAAU,iBAAiB,MAAM;AACvC,QAAI,SAAS;AACX,eAAS,KAAK,EAAE,OAAO,OAAO,GAAG,QAAQ,CAAsB;AAAA,IACjE;AAAA,EACF;AAIA,SAAO;AACT;;;AC7BA,SAAS,UAAU,OAAe,GAAqB;AACrD,QAAM,OAAO,SAAS;AACtB,MAAI,KAAK,GAAI,QAAO,CAAC,OAAO,CAAC;AAC7B,MAAI,KAAK,IAAM,QAAO,CAAC,OAAO,IAAM,CAAC;AACrC,MAAI,KAAK,MAAQ,QAAO,CAAC,OAAO,IAAO,KAAK,IAAK,KAAM,IAAI,GAAI;AAC/D,SAAO,CAAC,OAAO,IAAO,KAAK,KAAM,KAAO,KAAK,KAAM,KAAO,KAAK,IAAK,KAAM,IAAI,GAAI;AACpF;AAEO,SAAS,WAAW,OAA0B;AACnD,MAAI,OAAO,UAAU,WAAW;AAC9B,WAAO,CAAC,QAAQ,MAAO,GAAI;AAAA,EAC7B;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,WAAO,UAAU,GAAG,KAAK;AAAA,EAC3B;AACA,MAAI,iBAAiB,YAAY;AAC/B,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,MAAM,GAAG,GAAG,KAAK;AAAA,EACjD;AACA,MAAI,OAAO,UAAU,UAAU;AAC7B,UAAM,QAAQ,IAAI,YAAY,EAAE,OAAO,KAAK;AAC5C,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,MAAM,GAAG,GAAG,KAAK;AAAA,EACjD;AACA,MAAI,MAAM,QAAQ,KAAK,GAAG;AACxB,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,MAAM,GAAG,GAAG,MAAM,QAAQ,UAAU,CAAC;AAAA,EACrE;AACA,MAAI,iBAAiB,SAAS;AAC5B,WAAO,CAAC,GAAG,UAAU,GAAG,MAAM,GAAG,GAAG,GAAG,WAAW,MAAM,KAAK,CAAC;AAAA,EAChE;AACA,MAAI,iBAAiB,KAAK;AACxB,UAAM,UAAU,CAAC,GAAG,MAAM,QAAQ,CAAC;AACnC,WAAO;AAAA,MACL,GAAG,UAAU,GAAG,QAAQ,MAAM;AAAA,MAC9B,GAAG,QAAQ,QAAQ,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,GAAG,WAAW,CAAC,GAAG,GAAG,WAAW,CAAC,CAAC,CAAC;AAAA,IACrE;AAAA,EACF;AACA,QAAM,IAAI,MAAM,2BAA2B,OAAO,KAAK,EAAE;AAC3D;AAEO,IAAM,UAAN,MAAc;AAAA,EACnB;AAAA,EACA;AAAA,EACA,YAAY,KAAa,OAAgB;AACvC,SAAK,MAAM;AACX,SAAK,QAAQ;AAAA,EACf;AACF;AAEO,SAAS,OAAO,OAA4B;AACjD,SAAO,IAAI,WAAW,WAAW,KAAK,CAAC;AACzC;;;ACpDA,SAAS,IAAI,yBAAyB;AAE/B,SAAS,cACd,MACA,MACA,oBAAoB,KACV;AACV,QAAM,KAAK,GAAG,SAAS,EAAE,MAAM,SAAS,KAAK,CAAC;AAC9C,QAAM,UAAU,IAAI,kBAAkB,IAAI,iBAAiB;AAC3D,SAAO,QAAQ,cAAc,EAAE,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,YAAY,CAAC;AAC5E;;;ACNO,IAAM,cAAc;AAAA;AAAA,EAEzB,mBAAmB;AAAA;AAAA,EAEnB,WAAW;AAAA;AAAA,EAEX,iBAAiB;AAAA;AAAA,EAEjB,kBAAkB;AACpB;AAKA,IAAM,cAAc;AAEpB,SAAS,YAAY,GAAuB;AAC1C,QAAM,MAAM,IAAI,WAAW,CAAC;AAC5B,SAAO,gBAAgB,GAAG;AAC1B,SAAO;AACT;AAEA,SAAS,aACP,SACA,UACA,mBACS;AAET,QAAM,aAAa,CAAC,SAAS,MAAM,UAAU,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK;AAC9E,QAAM,aAAa,oBAAI,IAAqB,CAAC,CAAC,GAAG,UAAU,CAAC,CAAC;AAC7D,MAAI,sBAAsB,QAAW;AACnC,eAAW,IAAI,GAAG,iBAAiB;AAAA,EACrC;AACA,SAAO,IAAI,QAAQ,aAAa,UAAU;AAC5C;AAcA,SAAS,wBAAwB,QAA0C;AACzE,QAAM;AAAA,IACJ;AAAA,IACA,WAAW,YAAY;AAAA,IACvB;AAAA,IACA;AAAA,IACA;AAAA,IACA,SAAS;AAAA,EACX,IAAI;AAEJ,QAAM,YAAY,YAAY,EAAE;AAChC,QAAM,YACJ,OAAO,aAAa,WAAW,IAAI,YAAY,EAAE,OAAO,QAAQ,IAAI;AACtE,QAAM,UAAU,aAAa,IAAI,IAAI,iBAAiB;AAEtD,QAAM,UAAU,QAAQ,QAAQ,QAAQ,EAAE;AAC1C,QAAM,YAAY,IAAI,WAAW,QAAQ,MAAM,OAAO,EAAG,IAAI,CAAC,MAAM,SAAS,GAAG,EAAE,CAAC,CAAC;AAGpF,QAAM,MAAM,oBAAI,IAAqB;AAAA,IACnC,CAAC,GAAG,IAAI,QAAQ,IAAI,SAAS,CAAC;AAAA;AAAA,IAC9B,CAAC,GAAG,SAAS;AAAA;AAAA,IACb,CAAC,GAAG,QAAQ;AAAA;AAAA,EACd,CAAC;AAED,MAAI,YAAY,QAAW;AACzB,QAAI,IAAI,GAAG,OAAO;AAAA,EACpB;AAEA,MAAI,IAAI,GAAG,OAAO;AAClB,MAAI,IAAI,GAAG,SAAS;AACpB,MAAI,IAAI,GAAG,MAAM;AAEjB,SAAO,OAAO,GAAG;AACnB;AAEO,SAAS,2BAA2B,QAAwC;AACjF,SAAO,cAAc,wBAAwB,MAAM,GAAG,kBAAkB;AAC1E;AAEO,SAAS,sBAAsB,QAAsC;AAC1E,SAAO,cAAc,wBAAwB,MAAM,GAAG,kBAAkB,EAAE,CAAC;AAC7E;;;AC9FA,SAAS,UAAUA,mBAAmC;AAI/C,SAAS,kBAAkB,SAA4B;AAC5D,MAAI,QAAQ,SAAS,iBAAiB;AACpC,UAAM,IAAI,MAAM,gCAAgC,QAAQ,IAAI,EAAE;AAAA,EAChE;AAEA,QAAM,MAAMA,YAAW,QAAQ,MAAM;AAAA,IACnC,SAAS;AAAA,IACT,MAAM,OAAO,OAAO,CAAC,GAAmB,EAAE,IAAI,CAAC,MAAe,EAAE,CAAC;AAAA,EACnE,CAAC;AAED,QAAM,WAAW,IAAI,IAAI,CAAC;AAC1B,MAAI,CAAC,YAAY,SAAS,SAAS,IAAI;AACrC,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAEA,SAAO,OAAO,CAAC,GAAG,QAAQ,EAAE,IAAI,CAAC,MAAM,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,GAAG,CAAC,EAAE,KAAK,EAAE;AACjF;","names":["cborDecode"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@qrkit/core",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "description": "Protocol core for QR-based airgapped wallet flows — UR decoding, xpub parsing, address derivation, sign request and signature handling.",
   "license": "Apache-2.0",
   "type": "module",