@qrlwallet/connect 2.0.0 → 3.0.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +3 -1
- package/dist/index.d.mts +251 -3
- package/dist/index.d.ts +251 -3
- package/dist/index.js +607 -13
- package/dist/index.mjs +589 -12
- package/package.json +7 -4
package/README.md
CHANGED
|
@@ -131,7 +131,9 @@ The main class. Creates a connection manager and EIP-1193 provider.
|
|
|
131
131
|
### Supported RPC methods
|
|
132
132
|
|
|
133
133
|
**Require user approval:**
|
|
134
|
-
`qrl_requestAccounts`, `qrl_sendTransaction`, `qrl_signTransaction`, `
|
|
134
|
+
`qrl_requestAccounts`, `qrl_sendTransaction`, `qrl_signTransaction`, `qrl_signMessage`, `qrl_signTypedData`, `wallet_addQrlChain`, `wallet_switchQrlChain`
|
|
135
|
+
|
|
136
|
+
`qrl_signMessage` and `qrl_signTypedData` (v3.0.0) replace the Ethereum-flavored `personal_sign` / `qrl_sign` / `qrl_signTypedData_v3` / `qrl_signTypedData_v4`. Both use SHAKE256 + native ML-DSA-87 ctx and return a rich `{ signature, publicKey, signer, digest, schemeVersion }` object; verify locally with `verifyMessage` / `verifyTypedData` exported from this package.
|
|
135
137
|
|
|
136
138
|
**Auto-proxied (no approval needed):**
|
|
137
139
|
`qrl_getBalance`, `qrl_call`, `qrl_estimateGas`, `qrl_blockNumber`, `qrl_chainId`, `qrl_getTransactionReceipt`, and 30+ more read-only methods.
|
package/dist/index.d.mts
CHANGED
|
@@ -104,6 +104,13 @@ interface DAppMetadata {
|
|
|
104
104
|
name: string;
|
|
105
105
|
url: string;
|
|
106
106
|
icon?: string;
|
|
107
|
+
/**
|
|
108
|
+
* Optional "return to dApp" target (a URL or app deep-link scheme). Sent to
|
|
109
|
+
* the wallet in ORIGINATOR_INFO; after the wallet resolves a restricted
|
|
110
|
+
* request it bounces the user back here (WalletConnect-style peer redirect)
|
|
111
|
+
* so a same-device deep-link flow does not strand the user in the wallet.
|
|
112
|
+
*/
|
|
113
|
+
redirectUrl?: string;
|
|
107
114
|
}
|
|
108
115
|
/**
|
|
109
116
|
* Stored session for reconnection.
|
|
@@ -204,6 +211,66 @@ interface JsonRpcResponse {
|
|
|
204
211
|
data?: unknown;
|
|
205
212
|
};
|
|
206
213
|
}
|
|
214
|
+
/**
|
|
215
|
+
* EIP-6963 wallet identity advertised to dApps.
|
|
216
|
+
*
|
|
217
|
+
* `rdns` MUST be unique to this wallet and SHOULD be a reverse-DNS string
|
|
218
|
+
* (per EIP-6963). Defaults work for most consumers — override only when
|
|
219
|
+
* embedding the SDK inside a different branded wallet.
|
|
220
|
+
*/
|
|
221
|
+
interface EIP6963ProviderInfoOverride {
|
|
222
|
+
name?: string;
|
|
223
|
+
icon?: string;
|
|
224
|
+
rdns?: string;
|
|
225
|
+
}
|
|
226
|
+
/**
|
|
227
|
+
* Rich response object returned by both `qrl_signMessage` and
|
|
228
|
+
* `qrl_signTypedData`. The signature alone is not enough to verify since
|
|
229
|
+
* ML-DSA-87 public keys cannot be recovered from a signature, so the
|
|
230
|
+
* wallet always returns the public key explicitly. Stateless verifiers
|
|
231
|
+
* (e.g. the SDK's `verifyMessage` / `verifyTypedData`) need every field.
|
|
232
|
+
*/
|
|
233
|
+
interface QrlSignedResult {
|
|
234
|
+
/** 0x-hex of the 4595-byte ML-DSA-87 signature. */
|
|
235
|
+
signature: string;
|
|
236
|
+
/** 0x-hex of the 2592-byte ML-DSA-87 public key. */
|
|
237
|
+
publicKey: string;
|
|
238
|
+
/** 41-char checksummed Q-address derived from `publicKey`. */
|
|
239
|
+
signer: string;
|
|
240
|
+
/** 0x-hex of the 64-byte SHAKE256 digest that was signed. */
|
|
241
|
+
digest: string;
|
|
242
|
+
/** Scheme tag: 'QRL-SIGN-MSG-v1' or 'QRL-SIGN-TYPED-v1'. */
|
|
243
|
+
schemeVersion: string;
|
|
244
|
+
}
|
|
245
|
+
/**
|
|
246
|
+
* Response from `qrl_signTypedData`. Echoes `domain` so a stateless
|
|
247
|
+
* verifier doesn't need to be told the domain out-of-band.
|
|
248
|
+
*/
|
|
249
|
+
interface QrlSignedTypedDataResult extends QrlSignedResult {
|
|
250
|
+
domain: Record<string, unknown>;
|
|
251
|
+
}
|
|
252
|
+
/**
|
|
253
|
+
* `qrl_signMessage` params: `[signer, messageHex]`. `signer` must equal the
|
|
254
|
+
* dApp's currently-connected account; the wallet rejects mismatches before
|
|
255
|
+
* unlocking. `messageHex` is strict `0x`-prefixed bytes (no UTF-8 strings).
|
|
256
|
+
*/
|
|
257
|
+
type QrlSignMessageParams = [string, string];
|
|
258
|
+
/**
|
|
259
|
+
* `qrl_signTypedData` params: `[signer, payload]`. Payload mirrors EIP-712
|
|
260
|
+
* shape: `{ types, primaryType, domain, message }`, but with `QRLDomain`
|
|
261
|
+
* in place of `EIP712Domain` and SHAKE256-based hashing. See `signing/`
|
|
262
|
+
* for the full encoder.
|
|
263
|
+
*/
|
|
264
|
+
interface QrlTypedDataPayload {
|
|
265
|
+
types: Record<string, ReadonlyArray<{
|
|
266
|
+
name: string;
|
|
267
|
+
type: string;
|
|
268
|
+
}>>;
|
|
269
|
+
primaryType: string;
|
|
270
|
+
domain: Record<string, unknown>;
|
|
271
|
+
message: Record<string, unknown>;
|
|
272
|
+
}
|
|
273
|
+
type QrlSignTypedDataParams = [string, QrlTypedDataPayload];
|
|
207
274
|
/** QRL Connect configuration */
|
|
208
275
|
interface QRLConnectOptions {
|
|
209
276
|
dappMetadata: DAppMetadata;
|
|
@@ -215,6 +282,15 @@ interface QRLConnectOptions {
|
|
|
215
282
|
storageKey?: string;
|
|
216
283
|
/** Enable debug logging */
|
|
217
284
|
debug?: boolean;
|
|
285
|
+
/**
|
|
286
|
+
* Announce the provider via EIP-6963 so dApp wallet pickers can see it
|
|
287
|
+
* alongside the QRL browser extension. Defaults to true in browser
|
|
288
|
+
* environments. Set false to suppress (e.g. when the dApp wires the
|
|
289
|
+
* provider in manually).
|
|
290
|
+
*/
|
|
291
|
+
announceProvider?: boolean;
|
|
292
|
+
/** Override the EIP-6963 announce metadata (name / icon / rdns). */
|
|
293
|
+
providerInfo?: EIP6963ProviderInfoOverride;
|
|
218
294
|
}
|
|
219
295
|
|
|
220
296
|
/**
|
|
@@ -222,12 +298,44 @@ interface QRLConnectOptions {
|
|
|
222
298
|
* Bridges JSON-RPC requests from dApp to QRL Wallet via the relay.
|
|
223
299
|
*/
|
|
224
300
|
|
|
301
|
+
/**
|
|
302
|
+
* Default EIP-6963 identity for the QRL Connect provider. The `rdns` is
|
|
303
|
+
* deliberately distinct from the QRL browser extension (`theqrl.org`) so
|
|
304
|
+
* both wallets can coexist in the same dApp picker.
|
|
305
|
+
*/
|
|
306
|
+
declare const QRL_CONNECT_PROVIDER_INFO: {
|
|
307
|
+
readonly name: "MyQRLWallet (Mobile)";
|
|
308
|
+
readonly rdns: "com.qrlwallet.connect";
|
|
309
|
+
readonly icon: "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAMAAAADACAYAAABS3GwHAAAAAXNSR0IArs4c6QAAH1dJREFUeF7tnXt8XGWZ+L/PmaT3JpOkrVCKgD9wFcELwgoLArIsWnDLCnIVgZ8gF1lcylVsk5xMKuXiiiKLn7L82OWiK1ZBtgpdFRDdAu4P1EVAuaNoQbrNTJJek5nzbN+TpE0nk8yZmTMzZybv/AXNe3ue9/me9/a8zyvYn9XAJNaATGLZrehWA1gArBFMag1YACZ191vhLQDWBia1BiwAk7r7rfAWAGsDk1oDFoBJ3f1WeAuAtYFJrQELwKTufiu8BcDawKTWwKQEQF0cwGGtPQjMtv6ngA8m8ViJJ6D1TsekAEDZZugu01MeHxLlIBXmi7A7ymwxKNjfdg1ohkEV3sDhj+LxG8fhN7M7eVGkPmGodwBEXRp7MpwdE7pUZBYwq96FDpHnLQqbFF2dXsf5c29hY72NCnVrC6+6TGvxOA6HK1TlQyNGUbcCh2j1I0WNnv8IbFH0+kbhG7Nc3ixDdVUpsi7tQRXp66TDE7lSYEZVNFuPlQoZ9XhePF0UX8bL9SBi3QHwxtXMnTqFOx2Rj6J2kRu6kZq1gOqrHpzV0sWaWp8S1RUA6tLQq6wAOdvf5bG/smlAlDcyaT2m9RqeKVslFSi4bgDQk4gl38VpTkzutF/+CliOX4X+clD427kuaytVY9j11A0AvS4f8zx5QMROe8I2knHLM5MhR7/a4nJpxeoMuaK6AEBdZvSqfBPhePv1D9lC8hSnqhlxeGfc5ZXK1hxObXUBwLp2PhgTecQRZoejFltKYA0IKqqrmoQTxSUdOF9EEtY8AGbLM9nJchG5quaFiYhRFNoMsyBOD+rRbct5rtC81U5f8zbzrMuU3TxeR2RetZU5WetXYTOefqolwX21poOaB6CvnUM8kTXYxW9VbU887WzuJlHVRhRRec0D0NPOGXbrs4ieDz2LfqvZ5Yxac5qreQCS7ZwtMbnd7v6EbtEFFegvhLs43gJQkNpKT5zswEWks+ZJLl0VVSvBOM2J6oPNXRxnAahwN6RclqnKEgtAhRU/XN0Oj1H9SdzlGAtAhfsh1cEyRJaEXW2WK3DYxVesvOwrXWF/KCwAFevK3BWVGYC1Ar9WYSvKXwD7hm1A5VafwgaUx0Ukqei7BPYL01FwBAAR/XFzJx+1I0C5ezSr/LIBoDyVdvSCQXhu17UM9s5jgcbkq8Ci2oFAN6ny8fQWnpwzg409MF/SnOU0SHdYmwYWgAobfHZ1ZQFAzf1XvTCeMK7VO34plwNB/hNlapXFDlS94+llTd18ZXRic3Le6/I0iBkJSv7ZKVDJKiytgLIAAF7G0/e2dfPsTsZzHo2pXUiJSPRvmQnqoIc1uTyWreFkB3eKyKdL0/xQbjsChKHFEsooFwADm3S3eTeMvfua7GCDiMwsockVyaqKxlQPberm8Ryj5i2IXBhGQ+wIEIYWSyijXAA0bNLdZlUAAH8PvQT5x82qaMbRw9pyjAA9nXzDQS4Io1oLQBhaLKGMcgFQiRFg2Hg8M48QQ4HxZwrrHvMEAKQ6+QYWAN/qyvLxKcGeC85aLgDKPgIMXS7/sQ5yVXwKT/dvpcVr5DOKXI3QUnLHWAAC2VLJeg5USxkT9Q6fBIdchVdOAPwvv2r/xkH2WrCc9SNtNwNBbwfLNYy7DRaAQCZRDwAkPJX2kAUpPwDo3S1djNmJSbmcLCp3KEwL1IPjJao0AKI/jtuDsJK6rKjMPS6fc5Cbzf52iBCUDYBRi8abW7q4OFvoZDtHSExWmbilRSlkx3Ay7iI4zDXAqOp+EHdZZE+CS+q1wjMnl7IIR75vFpAWgFH6q9AIsL1G1RXNCS6stUBZIdpM4cYbRo7XFzN99mzWqMgHQhSmeiNAgiPEq60RQJWNip7SmuCHYfRpJcsI0WYq2eyd61rfznsckTUiNIfUCm9wUBfMvYY3xkxRQjgIG5oGae4pkMuRgvx7yVMgQTPkPgcIdQpk9rJEvxnv4sxa+/rXxTaob0oraOz9E2ci0sFQ3P9SwfYym3WPtuv5Y6UBSLkchcr9Jox7KTAbyDzRQ3MdhKU6uBWRz5ZSvn9ioWz20LtFuKrFJVVSeVXKXKqhVKnZY6s1r75sgDkDyhUxOA+V4heRDt5AWt89bxkv5likGleIkn2BxNGbm10+n13+epePxVRWopTmbmF8gWJ6WFPHWFeIpMud4skZJXReWhx9IOOxYn2Sh/f5OltLKKuqWesGgGwtbn8GCfhpQBUfCby0nljbDKa1XkdvrmxJl3jqNbbsuSfpoOWOLsfUQS+NNG9btLtsyq7jyfNofHsDU+euY4D34BVahyn/uWdx5s5lytwj2Swnk8mu49WzmbZnC/LURtL984O//OK33Zye1mAArPFMoG4BCGjzNtkk14AFYJIbwGQX3wIw2S1gkstvAZjkBjDZxa9bAMyDGX9cwJQFG0lTwEJvshvEePI/tRZpGyC25wGofL52d32y5atbAPpdTsio3BFmBAQLh7kCqa+0dLF/veiibgFIuZwLcmsIh2L10tchyaFes9AoLl5IBVa1mLoFINnOHeLImVXVbn1W7pHWD8W/xJP1IF5dAvCIS8P7lZcFeXs9dFKUZFDjAuHpP8QT3FyLvj91vwbwb1W5nIgn37FvBoSPztAlfn1gQDhlnsuG8GuobIl1NwKoy7Skx68dERPK0P7Ko4GUJ/rhVre23wg2qqk7AFJL+aTE5K6SrxSWx3DqotThUeC7zeb6ppkS1fCvrgDQi5na28IqRP6mhvsk8k33LV7QtKfHz0nwg1peC9QVAKkOrlGRq+tKqAjiMOqT/9y0Rj12+lJ+H8FmBmpSXdiKv/Bt5xxicovqtj3qQKLbRKVoYCSol6Dfbe7i1FodBWreVozx9yzhEKdRvo2ye10ubEqx1HLnFVRVv7RZWD4/x/2Gcldfavk1D8CGL/LegUZWjez517xApfZoNfKbB0TQpc0u/1hrI0FN24u5DB8TVqrIu+2XvxqWP6rO4TcVkg537OWypcqtCVx9rQIgqaW8Q2PyXYT3GX+fWhUkcE/VQEJVMg66uOm33CIrx17FjKIINWk3PVfR7EzjRypykDX+aJmVwFtk9LCmZbxUC9OhmgPALHqTnSxzRK6wOz7RMv7trRFe1y16eMu1vBbRFo5qatRbmNW+1BIOpIHHFWmw8/4Id57oyuZd+ZScz2CEW1lbrhD9LvMGPX4mw34+NTd8RdkSwm6bkgQ9KZ7gobCLDrO8mrEhf+rTwRdFJGFuedVMw8PsrVorS/VXzQk+GOW1QM3YUZ/LnLTKzwXMY8/2VwsaGLo7cGFzglujCkFN2JL5+qdcFm8Ld2gOWuyvhjSg8OtG0YWz3LEvbkZBjJqwp3VXMnvKdHpGFr5RUJxtQ34NDL+AuQXVM+IJvpc/R+VT1AQAyXYucWLyFfMKTOVVZGssRQPDdwe+3exyehTvDkTeoNRlSm+Ge3Dk70rpCJu3ihpQtPlNnSq3Rm9LNPIA9Lrs7XnyIxH2qmIX2qpL0YDxGPX0spYEN5ZSTDnyRh6AVAd/DfIfKsQi39hy9FC9lKm8Ek/o/4maOJG3qWQnX0fkIuvzEzXTCd6e4cszPekBPWTucl4InrP8KSMPQE8nv3WQd5VfFWNrGHPbW1GzkFPV14FnUNZFbmEnzBy+GHSAiDSqICObB9Xq7GE9blTVk1oTPFiNvhyvzmrpJJAO3rycmVNn0C9SHW/nkW08NUG2RB9FuL95Xx7iuW0hMjuHoyFETYMj1HYhSdhPMhxNTBahvBthrlRrJ01RD726JcH1UToUi1r3jQZDejr4uIPcX5UAV+b1Q/QnONzcAE/MdnkrELURTGRiJa3P8L6Yw+miXKQisZFmVswABBXVrzUJl0UprmjF5C/ULvyL7h2ciyMrKh3gVmGTI7q8B768p8vWKH2xCtXj6PTDwQMOwOFuVfmLkB8Xz9s0z9PVr/yZRQdGaDs00gCkOvmyiCyuKADK8+roF+Iu99eL4WdbZu9S9vEa+GdUjjB/q5QRqOqj8d34myi5SFdK9rxfh+wEZuHW67LaD3JVuXnrgIge0eTyi3o1/hE9+weMHj/FkYONrithCIo+E5dt3qEuAwUbRJkyVELuopruA9DFGlQOKaqAAjMppDSjn2pdxgP5spp7CZkBFiA4NOZLXdm/Dw7C1Eb6XofX3pPH0JIue6KsBDmwEoag6Np4G++I0gszlZC7KAsYHgEeAzm4qAIKyTR0UrksnqBzvC+/eXc4leZwhHYceYfAjAqOTIVIgwqDqvqWeNwbb+BLEy06e5ZwmBPjUUScgiopIrGqbo47tEqEokZEHAB5DCgrAMNbnS9s3qof3TXHHVazcOxbyt6eQyeIceiKrM6yFrx+/E5zZiHC4rjLfbng9l3NO7gBkcvKLpio9vcyc/cb2VwEP2XJUnaZi2310AhQGQDU04tbu7k5V1t7ExzkZbhdkP2KlaVa+bYf5Cn9it7csh/tuV6O37yMPbYMysOAGdnK97MABNdtpQBA9c1mh91yTRP8ub7Hz6iPtwYGRPXSpi5uyT69Ni9q9u7LTYp8rqy7QhaAiAFgDmc87WpKkMieHqx1mTE9wz0Sk+OiOtcPrs3tez9vOsL+TS7/k53XvKugMVlpAShcq2XJUaERwMuoHtuW4D+yhTCLQ2mQ+2Hboq0sElahUEE9T29rSXB+NvDrL6bJaZNUWV0l7AgQvNMrAYAqr3uqC9u6eTarZdLTzhXiyHV1Y/wjAopmnK28rWk563daNJs1VydrEdkleC8VmFJV+/vtIjiQ1ioBAPDSgOjCeS4vZRtDXxf/piqnBGpsLSUy0760Htu8jNVZu0YGgJsRubBsUz47AgS3lAoB8AKiC+Mur+xkDC5OUlkjyMF1NwIYQVU/mX1J3d/u7SShIkssAMHttGwpKwTA7zZv1YXZ+//+oZfHHxHZtZyLwnyvy5UNPtUL4glWZI8AqXYSErMAlM2oCym4EgAI/NbbqsdmB3E1APR6rFWRt4UJwIjBi/rz7w0qJEVGHQoN+Ty1qjllhl0E/PinYf881c+1JviGBaByjoAF92HVAVD+pAwtCIv9Eo/+woswiKc/8Rzubsjwe1F6BgdZ23ItfduVsxIn9d8saHRoGoixv6PmPjQnINIc5rTEArDDHIvt24INutAM9QCAcUXwlM2oPtrQyOLZS3mhkCuUfjzUq2hypnM1npwHNCFsv8xSqE5H0lsALAC+BiacApU6AhiHNE8fUFixPsnD+3zdvKNV/K/vat6pU/i0Il+gxKmRBcACUF4AhpzQuuNvsExuJW32XYo3/R05zdqkP80+Xsy4bMs7ii3TAmABKB8Awp8yGU20dvPP5bhU43tvtvNeiXEXxkGviMtCFgALQLkASKvoOXG4eyIffGPE27vAjA1d/v830MngyF/ywbPRZf6gmscnCg8ZYwGwAJQDgC2qem1Lgq6JpiappeylDoc7wpGKHOXH8Bm5iuL5M6XfAQ9kMtzb18gvJ3pytH8p7047sgrBj7gWdEfDAmABCB0AFb0j3sn/HW+XR29iamqd71/0KYG9TajHcacv5mEJpVdV18QGuXz2cp7PeZnFnFekOUEdvkMBwZMsABaAsAH4Q0x04WyX57K//mY7N/kFdpdp3CciHyh4zq4kM+j5rb/l3lxv75ry+1xu90TOCurJaQGwAIQHwNAzQFc3jxPxzGxfelO4B+T9xeza+JMipX+bA09nPMFXc40EySXsITF5hIARtC0AFoDQAPAjHXSxIJdhPusyZb7HE/6Xv8jfdvcJYat6+tl4YtsCO2tb1Xdk6+CfPJELg6wDLAAWgFAA8C/Ue3pVvJvrs+3bxDWdPoP/p1K6S/WOu736cibDEXO+xJ+y6+t1+UtP5fEgL2haACwAoQAAvInocXGXX2YbZMrlKFTMu1jxIj/+O2XbMRLoyrjLyWPWGkMerK8gske+UcACYAEIC4BfDogeNy/HC4gpl9tQOScM49+5DPViwvtmuzyTXXayg8WIfMUCEFzr+XQVvKSQU9aCM5yn+mCLw8dzHXqlOiSF0ByyWoZi/Xi6rCVBR3bZ61zmN6qMmR5lp7MjgB0BSh4BzJTEQ5e1ddGebWAblnJM2pHVZQvrLnLPuvXeWdkOdn4kC+XPgsyaCDwLgAUgFABQPbMlYXxydvz8EORLuZIGWV7wnn+e4WLUjtAvnK16XPbF9hcvZurcVn6uyEETDe0WAAtAyQCYAjzVM1oTfDMbgGQnNznD75qFOQUa5VL6pDl4y47voytoTK31PUWPNvWOB4EFwAJQVgBSndxUrof9hiHICcDwucMDiJibZBaAAF8fuwge705wgAsxonpGc44RoKedy5yYXF/Gly2fdHKMAGYKNKeV/8wX7tyOAHYEKHkEGHJR0EuzH3/2T2XbOcUT+Va5niASYVUTeqq4bBr9kXt9MdNnN5kQLxMHt7IAWABKBsC3f/T7LV18InukNY/S9apsNKeyAUbhwpIM3Tb7WryLS7NdIt5ymdXoSV++EO4WAAtAKACI8POB6Xrc3KuMs9rOv2Qn3xPkhMKsO39qAU88PbypmzVj6mznbBz5l3zzWguABSAUAIA/eKLHteY4le1p51REbhdh+kQL0vwmvyOFmXY56GMvvsGRuV5aTHbwMxH5cL4yLQAWgLAAwPP0tNZuvp1tdH1X05ZulB+K8KHQAFDdOOjxgXnLeDG7vrVX8fYZ0+TVINMuC4AFIDwAVH/RkuCQXO7Q2165PFg9+b4Kb8s3Lcn31QbSil4bfw4318WYVAdLcKQ7yOGbBcACEBoAZiWcUT21rZvvjFkMD/npm6nQvypMCWDkOyXZfvJr5v2ijzfBUbmeGO2/mrmZKWKiPR8QpA4LgAUgPAD8kvTphkGOmXUNfx4DwdB7vGepSIfAgiAG6pc4klDNS/V6+5ZNXLHLlzE7S9mQSLKDC0TEvHHmBBlpLAAWgJABwNOMuvFlLBvv8npSWRBD/k2FQyaapuwcQUs3Ocq5TXO4d7y3dde77BvzeEpFpgVda1gALAChAjB8b/fPafS0OQl+OsFbww19cLLncYkgB+SK8+nfMlPWgd7uDHLD7OX0jFden8ucTIZ7cOSokS61I0DQMXYoXRB9FVZiSKlr4T7AaFGHIViP6okt3Tw6kRp6Xfb2PB4Wkd1zTGnw3RzgR/mCa6U6+S7IopFYoUE7044AdgQIdQQYbcQCj2U8vaC127+xNW5M0GQn3YIszQbA5E+LLmxzR4VNz0qUWk6LbuVGQc40H4pCv2QWAAtA2QAYXsD+QVQvb3a2nQa7eLlGg94OLtKhhevOi1qPR+IxXSQuG3Lkk75raPW28E8qcmKxD2hYACwAZQVgWL0DqLpbNnFTrt2bng4ucnIAgMfDAzE9fl4WACYy9AY4POPJahWmFvrVHw2TBcACUAkA/Pu7qC5t7mJ59kJ2XADg4QEZC4A5Wc40ym8QSn63zAJgAagYAIJ2N7m4JQPgMsdTed68IVbqPoMFwAJQMQAUTcRdukICwESObrMAlKoBC0DlADAvxXSFNgJYAMKz/REbCLnEkIqrtXOAnGKbNQB6XbPLF0sdAYy/T3qKvCTmobwSf3YKZEeA0EYAcz3LcVjleST9qP4yfLg49F8iyg/iORzlCl0Er7uS2Y1TuV6FmX5IIvMz9Snq3zmI8WGQ+dYbtLCvQ9DDw8JKDSF1TYwAQlLRS+Kd3DXRmXouV4ZCARiy93FqUehtZ091+JGI7J1P/XYEsCNAKCOAonfG2zhvPEe1iQyx0HOAfEZt/v7WUvaZEhNzAj2h67UFwAIQCgC5wqIEMVSTZlwAlIcGHP277IOwIOWqy5Q+5SFFDpsovQXAAhAKAI7qlU0JbghinNlp+jq5wUMuz/53VZ7C0aNbXFKFlvuqy7QW5Tcw8TTIAmABCAUA4L/Mqe1c1wSkDfYYtpnHr1/C/IZGeRQdet1xp5+Sdhz9xGyXH5p/D1LuyNqgbwlLvJgkbFiU4J8OuwgeLzKcx1oVeduwEY6vUdUHcfhXzC6QQybt5V6oNjioCpoZpKXR4RKdIHqDSSeqyx3hcY+h4Fe5yjVl+ovjNLNo4EjgErMnlK9T7QhgR4DtI8CmrXrsrtfy2mgLN45nvUEBGCIkox6bRHJ7fvpl+zdd/G3LmQiNeb9R/hkCW/AYGHeHyZwyDN2DnGoc5IK6RlsALABDGlCex9OF8WWYcCLbfwaAlPIyyJ55R4C8lhytBP67Bp6e09bN7TvJDJJqJyExWRLkLKEoqUS1v5eZu9/I5qLylyFTvtGyDFUGK7IS5wDAS7JVFzZfy0ujW+W6OJ/P8KA4ckxkFRRMjTulGrmdo6qLWhOsygagr5OEShkBUNX+fgtAoK6rCADKy+LpwuasQFNmUZnq5DZBPhOosTWSyAfArC8yelC8m6fGjAAd3CWOnG5HgAh0aEUAEPodRxc2dYyNs5layieJiXn8ouB4PhFQ35gm7LibqU/HXd4vQ2uMHdM+RXpdkiDhv2s2UoudAgU3jQoBoJ6nn25J8K3s7cZ1VzK/cbo8BLwreKujndJsLXlbObR1OU+Mcc5rZ3/HkafLKoEFILh6KwGA/wn09OF4gqPHfBHNW18dfEaRFSLEgrc8milNVGkVXfkrOOMjLunsVvZ2cLGK3FTW1lsAgqu3EgAMtyatg3pQyzX8Ort1eh6NqV1YIkhH2V58DK6SklKq0hNz9NAmF3OnYKffepemmHIPyMdKqiRfZgtAPg1lz0nlMeDg4LmKS6mqqzb0c0qu7bk3L2fmtFl0qifnOg7xkb324mqqfC6BAU91TczjwqZlmCuVY37JJRwuDfIgMKOsLbQABFdvBUeAbcEb/MXwyc0uJsDsmJ9ezNRknL8Uh0tRFokjYtoX6S1Sc+SGvuDAP+JwX/aLkiNCGtl6W3gakXcG750iU1oAgiuukgAMtUqfHhAOncgL0/e5uYEZPX2c1ugwLwP7IGV4Bim4mnZOaRoorBN4LZPhv1ti23a3XHSCUI1Tkhm+5sTk/LJtfY5uoQUgeM9WHACzP47++6atfHbX5SY25/i/nS6mjBv7LbisoaUcNSTlc6LzH/Pr4HQVuYUQrlkGksECEEhNQ99jf1+6MmuAnVrl6bc3xThnftYLjMFbHv2U3zmJ2DHv4SPq+TfIKjeTswAEN45qAeD7rIneoxmua+nmV8FbXDspezr8MO6LRaS8i95slVgAghtJtQDwW+g/Rcobnqrb2sVt2WcEwaWITkpfn0v5IDHuVJF9io0rWpJEFoDg6qsqACPN9KM86P9XjxUNaZ6YNXXbI9QuW4NLUeWUCskvsHtsOvuqcqIipwvMGPLMrsLPAhBc6ZEAYEdzzcnpWoW3QJ8R5QmHsaepwaUrX8rtoagd9lI4DJVdBXYDP5xKdX8WgOD6jxgA2xtupkNR2vjJpdFR74sV/HZA8B4qIqUFILjSogpAcAmqm7Jq05yJxLYABDcKC0BwXdVMSgtA8K7yAejkMUTK7gsUvFU2ZSkaUHRTXGgTly2llBNm3qpsBgQRwACQ7OSnMUc+XGsOaEHkm5xp9JV1Pey7z9ejs5MWXQCGriV+VUQuroifyuS0yIpKLaJrmnblI3I+gxWteILKIg1Abwfn4sgKC0BUzKW0dgj6gybhE5LjQk5pJRefO7IAGJFSSziQmPxXrV9GKb576iinf7qu3XHzXFTWfeRqShlpAIzHYrKDPzgiC6qpJFt3KBrYguoZ8QT3TvR+cig1FVBIpAEwciQ7uVFE/sFOgwro1YglHYrfSDLj6F/NyXEls5rNjTwAPe0cKo6sFphVTUXZuovXwBAAel9LghOKL6U8OSMPQP81zM1skfsRDimPCmyp5daACplG9IBZLuUNu1KEIJEHwMjU4/L3DnKTnQYV0cNRyKJ6T3MXp0Vp8TuilpoAQG9iau96ngTZLwr9adsQXAMKKRE9Me7ycPBclUtZEwAYdaxfwsFOTB4UIV459diaStKA2e709PaX3uTCA2+NzuHXaJlqBgB1aUjBF0Wl04TEL6ljbOaya2DIbVyfUTi8mOeeyt7A4QpqBgB/LXAVzTKVR8SR99v1QKVMpLh6VPl9rFE/2tSeOxhXcaWGn6umADDi97vMS3vcjshx5v9rToDw+zB6Jaqm1eOk+POskpVkotfAHS2qSfvZ4LLLoCercXivmBfZ7S9CGtD/QTil2eWRfLGJotDomjWedS7zG5TlIJ8cHdOyZgWKgjWU0gb//TN93vM4z0SkE3eC99JKqSfkvDVtL4+4NLzPY7Eg1/nL4qjH6wy58yJTnDF91bviczlPPh8dX/8g+qlpAEYE7GlnfxEWI3K8QGsQwW2aEDSgbFb0CXW4bf16vheliy5BpasLAIyw+hWm9/Wx27aAVuercpEg00bcqEeiJNSNsEF7txzphp56VRH9oedxIw6/irv01sJ8P5c66s4m/MC159GQmsup0sCxiOyB0qZKswgzUaZplCI6l8NIQyhTzLQGBkT8J01Tah7sVv29Oqz20jzU1s3voujaUKjodQdAtgKSLnFJ00YDzQqzxGNqxqv9J48K7eiC0zvoFIetXobNoqQGlU2tL7A26tuahcpZ9wBMoJDJLHsQO4l6/K8gMuRNY40gr4psgnrWgAWgnnvXypZXAxaAvCqyCepZAxaAeu5dK1teDVgA8qrIJqhnDVgA6rl3rWx5NfC/zGV/wHfd+nEAAAAASUVORK5CYII=";
|
|
310
|
+
};
|
|
225
311
|
declare class QRLConnectProvider extends EventEmitter<ProviderEvents> {
|
|
226
312
|
private connectionManager;
|
|
227
313
|
private pendingRequests;
|
|
228
314
|
private options;
|
|
315
|
+
private eip6963Detail;
|
|
316
|
+
private eip6963RequestListener;
|
|
317
|
+
private resumeListener;
|
|
318
|
+
private resumeDebounce;
|
|
229
319
|
readonly isQRLConnect = true;
|
|
230
320
|
constructor(options: QRLConnectOptions);
|
|
321
|
+
private startEip6963Announce;
|
|
322
|
+
/**
|
|
323
|
+
* Re-open the relay socket when the dApp tab regains focus or the network
|
|
324
|
+
* comes back. Debounced because visibilitychange + online can fire together.
|
|
325
|
+
* No-op when already connected (ConnectionManager.resume guards that).
|
|
326
|
+
*/
|
|
327
|
+
private setupResumeListeners;
|
|
328
|
+
/**
|
|
329
|
+
* Remove the foreground/online resume listeners. Called on disconnect so a
|
|
330
|
+
* torn-down session can't be silently revived by a later tab focus; the
|
|
331
|
+
* listeners are re-armed by getConnectionURI()/newConnection() if the same
|
|
332
|
+
* provider is re-paired. Safe in any env.
|
|
333
|
+
*/
|
|
334
|
+
private teardownResumeListeners;
|
|
335
|
+
/**
|
|
336
|
+
* Stop announcing this provider over EIP-6963. Safe to call from any env.
|
|
337
|
+
*/
|
|
338
|
+
stopEip6963Announce(): void;
|
|
231
339
|
private setupConnectionListeners;
|
|
232
340
|
/**
|
|
233
341
|
* Generate a connection URI for QR code display or deep link redirect.
|
|
@@ -312,6 +420,7 @@ declare class ConnectionManager extends EventEmitter<ConnectionManagerEvents> {
|
|
|
312
420
|
private connectedAccounts;
|
|
313
421
|
private storageKey;
|
|
314
422
|
private unresponsiveTimer;
|
|
423
|
+
private reconnectProbeTimer;
|
|
315
424
|
private failedReconnects;
|
|
316
425
|
private walletPresent;
|
|
317
426
|
private pendingRestore;
|
|
@@ -335,6 +444,30 @@ declare class ConnectionManager extends EventEmitter<ConnectionManagerEvents> {
|
|
|
335
444
|
* Returns false if there is nothing to restore.
|
|
336
445
|
*/
|
|
337
446
|
reconnect(): Promise<boolean>;
|
|
447
|
+
/**
|
|
448
|
+
* (Re)open the socket, join the persisted channel, drain buffered relay
|
|
449
|
+
* messages, and settle status. Shared by the cold-restore reconnect() and
|
|
450
|
+
* the warm resume() path whose socket was torn down by the reconnect probe.
|
|
451
|
+
* Assumes channelId and a hydrated keyExchange are already in place, and
|
|
452
|
+
* that the caller has reset walletPresent + set RECONNECTING status.
|
|
453
|
+
*/
|
|
454
|
+
private joinAndSettle;
|
|
455
|
+
/**
|
|
456
|
+
* Nudge the connection back to life after the dApp tab / wallet app was
|
|
457
|
+
* backgrounded. Idempotent and safe to call from visibilitychange / online
|
|
458
|
+
* / pageshow handlers. If a restored session has not yet been hydrated,
|
|
459
|
+
* runs the full reconnect(); otherwise just re-opens the socket, whose
|
|
460
|
+
* own connect handler re-joins the channel and drains the relay buffer.
|
|
461
|
+
*/
|
|
462
|
+
resume(): void;
|
|
463
|
+
/**
|
|
464
|
+
* A session was terminated for good (wallet sent a relay 'close', or the
|
|
465
|
+
* join ack reported a tombstone). Clear local state and surface
|
|
466
|
+
* DISCONNECTED so the consumer drops to a fresh-pairing UI.
|
|
467
|
+
*/
|
|
468
|
+
private handleSessionTerminated;
|
|
469
|
+
private armReconnectProbe;
|
|
470
|
+
private clearReconnectProbe;
|
|
338
471
|
/**
|
|
339
472
|
* Send a JSON-RPC request to the wallet (async, fire-and-forget).
|
|
340
473
|
*/
|
|
@@ -384,7 +517,7 @@ interface SocketClientEvents {
|
|
|
384
517
|
message: (data: RelayMessage) => void;
|
|
385
518
|
connected: () => void;
|
|
386
519
|
disconnected: (reason: string) => void;
|
|
387
|
-
reconnected: () => void;
|
|
520
|
+
reconnected: (result: JoinResult) => void;
|
|
388
521
|
participants_changed: (data: {
|
|
389
522
|
event: string;
|
|
390
523
|
clientType?: string;
|
|
@@ -399,6 +532,18 @@ interface JoinResult {
|
|
|
399
532
|
* registered a PK yet — wallet callers must treat this as a retry signal.
|
|
400
533
|
*/
|
|
401
534
|
channelPublicKey: string | null;
|
|
535
|
+
/**
|
|
536
|
+
* Client types of the OTHER participants already in the channel at join
|
|
537
|
+
* time (e.g. `['wallet']` or `[]`). Lets a (re)joining peer detect an
|
|
538
|
+
* absent counterparty immediately instead of waiting on a future
|
|
539
|
+
* participants_changed event. Empty array on older relays.
|
|
540
|
+
*/
|
|
541
|
+
participants: string[];
|
|
542
|
+
/**
|
|
543
|
+
* True if the channel was explicitly closed (a terminated tombstone). The
|
|
544
|
+
* peer should drop its stored session rather than wait or re-pair.
|
|
545
|
+
*/
|
|
546
|
+
terminated: boolean;
|
|
402
547
|
}
|
|
403
548
|
declare class SocketClient extends EventEmitter<SocketClientEvents> {
|
|
404
549
|
private socket;
|
|
@@ -449,6 +594,99 @@ declare class SocketClient extends EventEmitter<SocketClientEvents> {
|
|
|
449
594
|
getChannelId(): string | null;
|
|
450
595
|
}
|
|
451
596
|
|
|
597
|
+
/**
|
|
598
|
+
* Per-scheme domain-separation tags + version strings.
|
|
599
|
+
*
|
|
600
|
+
* The tag bytes are mixed into both:
|
|
601
|
+
* 1. The SHAKE256 preimage that produces the signed digest (so the digest
|
|
602
|
+
* itself commits to which scheme is in use), and
|
|
603
|
+
* 2. The ML-DSA-87 `ctx` parameter (so the signature verifier rejects
|
|
604
|
+
* cross-scheme replay even if a digest collision were ever found).
|
|
605
|
+
*
|
|
606
|
+
* Both stay well under FIPS 204's 255-byte ctx cap.
|
|
607
|
+
*
|
|
608
|
+
* NOTE: This file is byte-identical with the wallet's
|
|
609
|
+
* `myqrlwallet-frontend/src/utils/signing/ctx.ts`. Any divergence is a
|
|
610
|
+
* cross-repo bug that will surface as fixture mismatches in both test
|
|
611
|
+
* suites; keep them in lock-step.
|
|
612
|
+
*/
|
|
613
|
+
declare const SCHEME_VERSION_MSG = "QRL-SIGN-MSG-v1";
|
|
614
|
+
declare const SCHEME_VERSION_TYPED = "QRL-SIGN-TYPED-v1";
|
|
615
|
+
declare const SCHEME_TAG_MSG: Uint8Array;
|
|
616
|
+
declare const SCHEME_TAG_TYPED: Uint8Array;
|
|
617
|
+
/** SHAKE256 output length used throughout the signing module (NIST L5-matched). */
|
|
618
|
+
declare const DIGEST_LEN = 64;
|
|
619
|
+
|
|
620
|
+
/**
|
|
621
|
+
* Pure SHAKE256 digest for `qrl_signMessage` v1.
|
|
622
|
+
*
|
|
623
|
+
* digest = SHAKE256("QRL-SIGN-MSG-v1" || messageBytes, 64)
|
|
624
|
+
*
|
|
625
|
+
* The scheme tag is committed into the preimage so a signature produced for
|
|
626
|
+
* this scheme cannot be re-interpreted as belonging to typed-data signing
|
|
627
|
+
* (or vice versa) even if the `ctx` parameter were ever stripped.
|
|
628
|
+
*/
|
|
629
|
+
declare function computeMessageDigest(messageBytes: Uint8Array): Uint8Array;
|
|
630
|
+
|
|
631
|
+
/**
|
|
632
|
+
* EIP-712-shaped typed-data encoding for `qrl_signTypedData` v1.
|
|
633
|
+
*
|
|
634
|
+
* Byte-identical algorithm with the wallet's signing/typedData.ts; this
|
|
635
|
+
* file is the SDK port (only the relative-import extensions differ). See
|
|
636
|
+
* the wallet copy for the spec-level comments; behavior must stay in
|
|
637
|
+
* lock-step or the cross-repo parity test fails on next CI.
|
|
638
|
+
*/
|
|
639
|
+
type FieldType = string;
|
|
640
|
+
interface TypedField {
|
|
641
|
+
name: string;
|
|
642
|
+
type: FieldType;
|
|
643
|
+
}
|
|
644
|
+
type StructDef = readonly TypedField[];
|
|
645
|
+
type TypeMap = Record<string, StructDef>;
|
|
646
|
+
type Domain = Record<string, unknown>;
|
|
647
|
+
type Message = Record<string, unknown>;
|
|
648
|
+
interface TypedDataPayload {
|
|
649
|
+
types: TypeMap;
|
|
650
|
+
primaryType: string;
|
|
651
|
+
domain: Domain;
|
|
652
|
+
message: Message;
|
|
653
|
+
}
|
|
654
|
+
declare function encodeType(primary: string, types: TypeMap): string;
|
|
655
|
+
declare function typeHash(primary: string, types: TypeMap): Uint8Array;
|
|
656
|
+
declare function encodeField(type: FieldType, value: unknown, types: TypeMap): Uint8Array;
|
|
657
|
+
declare function hashStruct(primary: string, data: Message, types: TypeMap): Uint8Array;
|
|
658
|
+
declare function computeTypedDataDigest(payload: TypedDataPayload): Uint8Array;
|
|
659
|
+
|
|
660
|
+
/**
|
|
661
|
+
* Stateless verifiers for the two PQ signing schemes. The SDK exposes these
|
|
662
|
+
* so a dApp can re-verify the rich response object returned by the wallet
|
|
663
|
+
* without round-tripping back through the relay. They never touch a secret
|
|
664
|
+
* key and never derive an address; that's the wallet's job.
|
|
665
|
+
*/
|
|
666
|
+
|
|
667
|
+
interface VerifyMessageParams {
|
|
668
|
+
signature: Uint8Array | string;
|
|
669
|
+
publicKey: Uint8Array | string;
|
|
670
|
+
/** 0x-hex bytes that were originally signed. */
|
|
671
|
+
messageBytes: Uint8Array | string;
|
|
672
|
+
}
|
|
673
|
+
declare function verifyMessage({ signature, publicKey, messageBytes, }: VerifyMessageParams): boolean;
|
|
674
|
+
interface VerifyTypedDataParams {
|
|
675
|
+
signature: Uint8Array | string;
|
|
676
|
+
publicKey: Uint8Array | string;
|
|
677
|
+
payload: TypedDataPayload;
|
|
678
|
+
}
|
|
679
|
+
declare function verifyTypedData({ signature, publicKey, payload }: VerifyTypedDataParams): boolean;
|
|
680
|
+
|
|
681
|
+
/**
|
|
682
|
+
* Local hex/bytes utilities for the signing module.
|
|
683
|
+
*
|
|
684
|
+
* Byte-identical with the wallet's signing/bytes.ts.
|
|
685
|
+
*/
|
|
686
|
+
declare function hexToBytes(hex: string): Uint8Array;
|
|
687
|
+
declare function bytesToHex(bytes: Uint8Array): string;
|
|
688
|
+
declare function concatBytes(...parts: Uint8Array[]): Uint8Array;
|
|
689
|
+
|
|
452
690
|
/**
|
|
453
691
|
* v2 QR URI codec (PQP2).
|
|
454
692
|
*
|
|
@@ -523,9 +761,19 @@ declare function getAppStoreUrl(): string;
|
|
|
523
761
|
|
|
524
762
|
declare const DEFAULT_RELAY_URL = "https://qrlwallet.com";
|
|
525
763
|
declare const PROTOCOL_VERSION = 2;
|
|
526
|
-
/**
|
|
764
|
+
/**
|
|
765
|
+
* RPC methods that require user approval in the wallet.
|
|
766
|
+
*
|
|
767
|
+
* v3.0.0 replaces the Ethereum-flavored signing surface with two
|
|
768
|
+
* post-quantum-native methods: `qrl_signMessage` for opaque bytes and
|
|
769
|
+
* `qrl_signTypedData` for structured payloads (EIP-712-shaped, but with
|
|
770
|
+
* SHAKE256 + native Dilithium ctx). The legacy methods (`personal_sign`,
|
|
771
|
+
* `qrl_sign`, `qrl_signTypedData_v3`, `qrl_signTypedData_v4`) are no
|
|
772
|
+
* longer accepted; a dApp calling them via this SDK will get a
|
|
773
|
+
* "method not supported" error before the relay round-trip.
|
|
774
|
+
*/
|
|
527
775
|
declare const RESTRICTED_METHODS: Set<string>;
|
|
528
776
|
/** RPC methods that can be auto-proxied without approval */
|
|
529
777
|
declare const UNRESTRICTED_METHODS: Set<string>;
|
|
530
778
|
|
|
531
|
-
export { type AckMessage, BLOB_LEN, CID_LEN, ConnectionManager, ConnectionStatus, type DAppMetadata, type DAppSession, DEFAULT_RELAY_URL, FP_LEN, type JsonRpcRequest, type JsonRpcResponse, KeyExchange, KeyExchangeMessageType, MessageType, PROTOCOL_VERSION, type ParsedURI, type PendingRequest, type PersistedSession, type ProviderEvents, QRLConnectProvider as QRLConnect, type QRLConnectOptions, QRLConnectProvider, RESTRICTED_METHODS, type RelayMessage, type Session, SocketClient, type SynAckMessage, UNRESTRICTED_METHODS, cidFromString, cidRandom, cidToString, computeFingerprint, fingerprintEquals, generateConnectionURI, getAppStoreUrl, isMobileBrowser, parseConnectionURI };
|
|
779
|
+
export { type AckMessage, BLOB_LEN, CID_LEN, ConnectionManager, ConnectionStatus, type DAppMetadata, type DAppSession, DEFAULT_RELAY_URL, DIGEST_LEN, type Domain, type EIP6963ProviderInfoOverride, FP_LEN, type JsonRpcRequest, type JsonRpcResponse, KeyExchange, KeyExchangeMessageType, type Message, MessageType, PROTOCOL_VERSION, type ParsedURI, type PendingRequest, type PersistedSession, type ProviderEvents, QRLConnectProvider as QRLConnect, type QRLConnectOptions, QRLConnectProvider, QRL_CONNECT_PROVIDER_INFO, type QrlSignMessageParams, type QrlSignTypedDataParams, type QrlSignedResult, type QrlSignedTypedDataResult, type QrlTypedDataPayload, RESTRICTED_METHODS, type RelayMessage, SCHEME_TAG_MSG, SCHEME_TAG_TYPED, SCHEME_VERSION_MSG, SCHEME_VERSION_TYPED, type Session, SocketClient, type StructDef, type SynAckMessage, type TypeMap, type TypedDataPayload, type TypedField, UNRESTRICTED_METHODS, type VerifyMessageParams, type VerifyTypedDataParams, bytesToHex, cidFromString, cidRandom, cidToString, computeFingerprint, computeMessageDigest, computeTypedDataDigest, concatBytes, encodeField, encodeType, fingerprintEquals, generateConnectionURI, getAppStoreUrl, hashStruct, hexToBytes, isMobileBrowser, parseConnectionURI, typeHash, verifyMessage, verifyTypedData };
|