@renown/sdk 6.0.2-staging.2 → 6.0.2-staging.4

package/dist/src/crypto/node-key-storage.js

@@ -1,107 +0,0 @@
-import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync, } from "node:fs";
-import { dirname, join } from "node:path";
-const ENV_KEY_NAME = "PH_RENOWN_PRIVATE_KEY";
-const DEFAULT_KEYPAIR_PATH = join(process.cwd(), ".ph/.keypair.json");
-/**
- * Key storage that supports:
- * 1. PH_RENOWN_PRIVATE_KEY environment variable (JSON-encoded JwkKeyPair)
- * 2. Custom file path passed via options
- * 3. Falls back to file storage at .ph/.keypair.json in current working directory
- */
-export class NodeKeyStorage {
-    #filePath;
-    #envKeyName;
-    #logger;
-    static DEFAULT_KEYPAIR_PATH = DEFAULT_KEYPAIR_PATH;
-    static ENV_KEY_NAME = ENV_KEY_NAME;
-    constructor(filePath, options = {}) {
-        this.#filePath = filePath || DEFAULT_KEYPAIR_PATH;
-        this.#envKeyName = options.envKeyName || ENV_KEY_NAME;
-        this.#logger = options.logger;
-        // Ensure directory exists
-        const dir = dirname(this.#filePath);
-        if (!existsSync(dir)) {
-            mkdirSync(dir, { recursive: true });
-        }
-    }
-    loadKeyPair() {
-        // First check environment variable
-        const envKey = process.env[this.#envKeyName];
-        if (envKey) {
-            try {
-                const keyPairJson = JSON.parse(envKey);
-                const keyPair = this.#parseKeyPair(keyPairJson);
-                // Validate it has the required structure
-                this.#logger?.debug("Loaded keypair from environment variable");
-                return Promise.resolve(keyPair);
-            }
-            catch (e) {
-                throw new Error(`Failed to parse ${this.#envKeyName}: ${e instanceof Error ? e.message : String(e)}`, {
-                    cause: e,
-                });
-            }
-        }
-        // Fall back to file storage
-        return Promise.resolve(this.#loadFromFile());
-    }
-    async saveKeyPair(keyPair) {
-        // Don't save if using env var
-        if (process.env[this.#envKeyName]) {
-            return;
-        }
-        // Save to file
-        this.#saveToFile(keyPair);
-        return Promise.resolve();
-    }
-    removeKeyPair() {
-        if (process.env[this.#envKeyName]) {
-            delete process.env[this.#envKeyName];
-        }
-        if (existsSync(this.#filePath)) {
-            unlinkSync(this.#filePath);
-        }
-        return Promise.resolve();
-    }
-    #loadFromFile() {
-        try {
-            if (!existsSync(this.#filePath)) {
-                return undefined;
-            }
-            const data = readFileSync(this.#filePath, "utf-8");
-            const parsed = JSON.parse(data);
-            const keyPair = this.#parseKeyPair(parsed);
-            this.#logger?.debug(`Loaded keypair from ${this.#filePath}`);
-            return keyPair;
-        }
-        catch (e) {
-            throw new Error(`Failed to parse ${this.#filePath}: ${e instanceof Error ? e.message : String(e)}`, {
-                cause: e,
-            });
-        }
-    }
-    #saveToFile(keyPair) {
-        const data = { keyPair };
-        writeFileSync(this.#filePath, JSON.stringify(data, null, 2), "utf-8");
-        this.#logger?.debug(`Saved keypair to ${this.#filePath}`);
-    }
-    #parseKeyPair(json) {
-        if (typeof json !== "object") {
-            throw new Error("Invalid keyPair format:" + JSON.stringify(json));
-        }
-        const object = json;
-        let keyPair;
-        if ("keyPair" in object) {
-            keyPair = object.keyPair;
-        }
-        else {
-            keyPair = object;
-        }
-        if ("publicKey" in keyPair && "privateKey" in keyPair) {
-            return keyPair;
-        }
-        else {
-            throw new Error("Invalid keyPair format:" + JSON.stringify(json));
-        }
-    }
-}
-//# sourceMappingURL=node-key-storage.js.map

package/dist/src/crypto/node-key-storage.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"node-key-storage.js","sourceRoot":"","sources":["../../../src/crypto/node-key-storage.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,SAAS,EACT,YAAY,EACZ,UAAU,EACV,aAAa,GACd,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAI1C,MAAM,YAAY,GAAG,uBAAuB,CAAC;AAC7C,MAAM,oBAAoB,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,mBAAmB,CAAC,CAAC;AAEtE;;;;;GAKG;AACH,MAAM,OAAO,cAAc;IACzB,SAAS,CAAS;IAClB,WAAW,CAAS;IACpB,OAAO,CAAW;IAElB,MAAM,CAAU,oBAAoB,GAAG,oBAAoB,CAAC;IAC5D,MAAM,CAAU,YAAY,GAAG,YAAY,CAAC;IAE5C,YACE,QAAiB,EACjB,UAAqD,EAAE;QAEvD,IAAI,CAAC,SAAS,GAAG,QAAQ,IAAI,oBAAoB,CAAC;QAClD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,UAAU,IAAI,YAAY,CAAC;QACtD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC;QAE9B,0BAA0B;QAC1B,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACpC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YACrB,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;IAED,WAAW;QACT,mCAAmC;QACnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QAC7C,IAAI,MAAM,EAAE,CAAC;YACX,IAAI,CAAC;gBACH,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAY,CAAC;gBAClD,MAAM,OAAO,GAAe,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,CAAC;gBAE5D,yCAAyC;gBACzC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,0CAA0C,CAAC,CAAC;gBAChE,OAAO,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAClC,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,CAAC,WAAW,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EACpF;oBACE,KAAK,EAAE,CAAC;iBACT,CACF,CAAC;YACJ,CAAC;QACH,CAAC;QAED,4BAA4B;QAC5B,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC;IAC/C,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,OAAmB;QACnC,8BAA8B;QAC9B,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO;QACT,CAAC;QAED,eAAe;QACf,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QAC1B,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,aAAa;QACX,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC;YAClC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACvC,CAAC;QACD,IAAI,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,OAAO,CAAC,OAAO,EAAE,CAAC;IAC3B,CAAC;IAED,aAAa;QACX,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBAChC,OAAO,SAAS,CAAC;YACnB,CAAC;YACD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;YACnD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAY,CAAC;YAC3C,MAAM,OAAO,GAAe,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC;YACvD,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,uBAAuB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC7D,OAAO,OAAO,CAAC;QACjB,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,MAAM,IAAI,KAAK,CACb,mBAAmB,IAAI,CAAC,SAAS,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAClF;gBACE,KAAK,EAAE,CAAC;aACT,CACF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,WAAW,CAAC,OAAmB;QAC7B,MAAM,IAAI,GAAG,EAAE,OAAO,EAAE,CAAC;QACzB,aAAa,CAAC,IAAI,CAAC,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACtE,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,oBAAoB,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;IAC5D,CAAC;IAED,aAAa,CAAC,IAAa;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,CAAC;QAED,MAAM,MAAM,GAAG,IAA4C,CAAC;QAC5D,IAAI,OAAmB,CAAC;QACxB,IAAI,SAAS,IAAI,MAAM,EAAE,CAAC;YACxB,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC3B,CAAC;aAAM,CAAC;YACN,OAAO,GAAG,MAAM,CAAC;QACnB,CAAC;QAED,IAAI,WAAW,IAAI,OAAO,IAAI,YAAY,IAAI,OAAO,EAAE,CAAC;YACtD,OAAO,OAAO,CAAC;QACjB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CAAC,yBAAyB,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,CAAC;IACH,CAAC"}

package/dist/src/crypto/node.d.ts

@@ -1,3 +0,0 @@
-export * from "./common.js";
-export { NodeKeyStorage } from "./node-key-storage.js";
-//# sourceMappingURL=node.d.ts.map

package/dist/src/crypto/node.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"node.d.ts","sourceRoot":"","sources":["../../../src/crypto/node.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAE5B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/src/crypto/node.js

@@ -1,3 +0,0 @@
-export * from "./common.js";
-export { NodeKeyStorage } from "./node-key-storage.js";
-//# sourceMappingURL=node.js.map

package/dist/src/crypto/node.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"node.js","sourceRoot":"","sources":["../../../src/crypto/node.ts"],"names":[],"mappings":"AAAA,cAAc,aAAa,CAAC;AAE5B,OAAO,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/src/crypto/renown-crypto-builder.d.ts

@@ -1,11 +0,0 @@
-import { RenownCrypto } from "./renown-crypto.js";
-import type { JsonWebKeyPairStorage } from "./types.js";
-export declare class RenownCryptoBuilder {
-    #private;
-    private keyPairStorage?;
-    private subtleCrypto?;
-    withKeyPairStorage(storage: JsonWebKeyPairStorage): this;
-    withSubtleCrypto(crypto: SubtleCrypto): this;
-    build(): Promise<RenownCrypto>;
-}
-//# sourceMappingURL=renown-crypto-builder.d.ts.map

package/dist/src/crypto/renown-crypto-builder.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"renown-crypto-builder.d.ts","sourceRoot":"","sources":["../../../src/crypto/renown-crypto-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAQxD,qBAAa,mBAAmB;;IAC9B,OAAO,CAAC,cAAc,CAAC,CAAwB;IAC/C,OAAO,CAAC,YAAY,CAAC,CAAe;IAEpC,kBAAkB,CAAC,OAAO,EAAE,qBAAqB,GAAG,IAAI;IAKxD,gBAAgB,CAAC,MAAM,EAAE,YAAY,GAAG,IAAI;IAKtC,KAAK,IAAI,OAAO,CAAC,YAAY,CAAC;CA+BrC"}

package/dist/src/crypto/renown-crypto-builder.js

@@ -1,34 +0,0 @@
-import { RenownCrypto } from "./renown-crypto.js";
-import { exportKeyPair, generateKeyPair, importKeyPair, parseDid, } from "./utils.js";
-export class RenownCryptoBuilder {
-    keyPairStorage;
-    subtleCrypto;
-    withKeyPairStorage(storage) {
-        this.keyPairStorage = storage;
-        return this;
-    }
-    withSubtleCrypto(crypto) {
-        this.subtleCrypto = crypto;
-        return this;
-    }
-    async build() {
-        if (!this.keyPairStorage) {
-            throw new Error("KeyPairStorage is required. Use withKeyPairStorage() to set it.");
-        }
-        const subtleCrypto = this.subtleCrypto ?? globalThis.crypto.subtle;
-        const keyPair = await this.#initializeKeyPair(subtleCrypto, this.keyPairStorage);
-        const did = await parseDid(keyPair, subtleCrypto);
-        return new RenownCrypto(this.keyPairStorage, subtleCrypto, keyPair, did);
-    }
-    async #initializeKeyPair(subtleCrypto, keyPairStorage) {
-        const loadedKeyPair = await keyPairStorage.loadKeyPair();
-        if (loadedKeyPair) {
-            return importKeyPair(loadedKeyPair, subtleCrypto);
-        }
-        const keyPair = await generateKeyPair(subtleCrypto);
-        const exported = await exportKeyPair(keyPair, subtleCrypto);
-        await keyPairStorage.saveKeyPair(exported);
-        return keyPair;
-    }
-}
-//# sourceMappingURL=renown-crypto-builder.js.map

package/dist/src/crypto/renown-crypto-builder.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"renown-crypto-builder.js","sourceRoot":"","sources":["../../../src/crypto/renown-crypto-builder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAElD,OAAO,EACL,aAAa,EACb,eAAe,EACf,aAAa,EACb,QAAQ,GACT,MAAM,YAAY,CAAC;AAEpB,MAAM,OAAO,mBAAmB;IACtB,cAAc,CAAyB;IACvC,YAAY,CAAgB;IAEpC,kBAAkB,CAAC,OAA8B;QAC/C,IAAI,CAAC,cAAc,GAAG,OAAO,CAAC;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,gBAAgB,CAAC,MAAoB;QACnC,IAAI,CAAC,YAAY,GAAG,MAAM,CAAC;QAC3B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC;YACzB,MAAM,IAAI,KAAK,CACb,iEAAiE,CAClE,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,kBAAkB,CAC3C,YAAY,EACZ,IAAI,CAAC,cAAc,CACpB,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAElD,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,cAAc,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAC3E,CAAC;IAED,KAAK,CAAC,kBAAkB,CACtB,YAA0B,EAC1B,cAAqC;QAErC,MAAM,aAAa,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE,CAAC;QACzD,IAAI,aAAa,EAAE,CAAC;YAClB,OAAO,aAAa,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;QACpD,CAAC;QAED,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC,YAAY,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;QAC5D,MAAM,cAAc,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,OAAO,CAAC;IACjB,CAAC;CACF"}

package/dist/src/crypto/renown-crypto.d.ts

@@ -1,26 +0,0 @@
-import type { Issuer } from "did-jwt-vc";
-import type { CreateBearerTokenOptions } from "../types.js";
-import type { DID, IRenownCrypto, JsonWebKeyPairStorage } from "./types.js";
-export declare class RenownCrypto implements IRenownCrypto {
-    #private;
-    readonly did: DID;
-    static algorithm: EcKeyAlgorithm;
-    static signAlgorithm: {
-        name: string;
-        namedCurve: string;
-        hash: string;
-    };
-    constructor(keyPairStorage: JsonWebKeyPairStorage, crypto: SubtleCrypto, keyPair: CryptoKeyPair, did: DID);
-    get publicKey(): CryptoKey;
-    getBearerToken(address: string | undefined, options?: CreateBearerTokenOptions): Promise<string>;
-    removeDid(): Promise<void>;
-    sign(data: Uint8Array | string): Promise<Uint8Array>;
-    verify(data: Uint8Array, signature: Uint8Array): Promise<boolean>;
-    get issuer(): Issuer;
-}
-/**
- * @deprecated Use RenownCrypto instead
- */
-export declare class ConnectCrypto extends RenownCrypto {
-}
-//# sourceMappingURL=renown-crypto.d.ts.map

package/dist/src/crypto/renown-crypto.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"renown-crypto.d.ts","sourceRoot":"","sources":["../../../src/crypto/renown-crypto.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,YAAY,CAAC;AAEzC,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,aAAa,CAAC;AAE5D,OAAO,KAAK,EAAE,GAAG,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAM5E,qBAAa,YAAa,YAAW,aAAa;;IAKhD,QAAQ,CAAC,GAAG,EAAE,GAAG,CAAC;IAElB,MAAM,CAAC,SAAS,iBAAmB;IACnC,MAAM,CAAC,aAAa;;;;MAAwB;gBAG1C,cAAc,EAAE,qBAAqB,EACrC,MAAM,EAAE,YAAY,EACpB,OAAO,EAAE,aAAa,EACtB,GAAG,EAAE,GAAG;IAQV,IAAI,SAAS,cAEZ;IAEK,cAAc,CAClB,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,CAAC,EAAE,wBAAwB,GACjC,OAAO,CAAC,MAAM,CAAC;IAUZ,SAAS,IAAI,OAAO,CAAC,IAAI,CAAC;IAQ1B,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC;IAapD,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IASvE,IAAI,MAAM,IAAI,MAAM,CAWnB;CACF;AAED;;GAEG;AACH,qBAAa,aAAc,SAAQ,YAAY;CAAG"}

package/dist/src/crypto/renown-crypto.js

@@ -1,56 +0,0 @@
-import { bytesToBase64url } from "did-jwt";
-import { fromString } from "uint8arrays";
-import { createAuthBearerToken } from "../utils.js";
-import { ECDSA_ALGORITHM, ECDSA_SIGN_ALGORITHM } from "./utils.js";
-const RENOWN_NETWORK_ID = "eip155";
-const RENOWN_CHAIN_ID = 1;
-export class RenownCrypto {
-    #subtleCrypto;
-    #keyPair;
-    #keyPairStorage;
-    did;
-    static algorithm = ECDSA_ALGORITHM;
-    static signAlgorithm = ECDSA_SIGN_ALGORITHM;
-    constructor(keyPairStorage, crypto, keyPair, did) {
-        this.#keyPairStorage = keyPairStorage;
-        this.#subtleCrypto = crypto;
-        this.#keyPair = keyPair;
-        this.did = did;
-    }
-    get publicKey() {
-        return this.#keyPair.publicKey;
-    }
-    async getBearerToken(address, options) {
-        return await createAuthBearerToken(Number(RENOWN_CHAIN_ID), RENOWN_NETWORK_ID, address || this.did, this.issuer, options);
-    }
-    async removeDid() {
-        await this.#keyPairStorage.removeKeyPair();
-    }
-    #stringToBytes(s) {
-        return fromString(s, "utf-8");
-    }
-    async sign(data) {
-        const dataBytes = typeof data === "string" ? this.#stringToBytes(data) : data;
-        const arrayBuffer = await this.#subtleCrypto.sign(RenownCrypto.signAlgorithm, this.#keyPair.privateKey, dataBytes.buffer);
-        return new Uint8Array(arrayBuffer);
-    }
-    async verify(data, signature) {
-        return this.#subtleCrypto.verify({ name: "ECDSA", hash: "SHA-256" }, this.#keyPair.publicKey, signature.buffer, data.buffer);
-    }
-    get issuer() {
-        return {
-            did: this.did,
-            signer: async (data) => {
-                const signature = await this.sign(typeof data === "string" ? new TextEncoder().encode(data) : data);
-                return bytesToBase64url(signature);
-            },
-            alg: "ES256",
-        };
-    }
-}
-/**
- * @deprecated Use RenownCrypto instead
- */
-export class ConnectCrypto extends RenownCrypto {
-}
-//# sourceMappingURL=renown-crypto.js.map

package/dist/src/crypto/renown-crypto.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"renown-crypto.js","sourceRoot":"","sources":["../../../src/crypto/renown-crypto.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,SAAS,CAAC;AAE3C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAEpD,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAEnE,MAAM,iBAAiB,GAAG,QAAQ,CAAC;AACnC,MAAM,eAAe,GAAG,CAAC,CAAC;AAE1B,MAAM,OAAO,YAAY;IACvB,aAAa,CAAe;IAC5B,QAAQ,CAAgB;IACxB,eAAe,CAAwB;IAE9B,GAAG,CAAM;IAElB,MAAM,CAAC,SAAS,GAAG,eAAe,CAAC;IACnC,MAAM,CAAC,aAAa,GAAG,oBAAoB,CAAC;IAE5C,YACE,cAAqC,EACrC,MAAoB,EACpB,OAAsB,EACtB,GAAQ;QAER,IAAI,CAAC,eAAe,GAAG,cAAc,CAAC;QACtC,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC;QAC5B,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,cAAc,CAClB,OAA2B,EAC3B,OAAkC;QAElC,OAAO,MAAM,qBAAqB,CAChC,MAAM,CAAC,eAAe,CAAC,EACvB,iBAAiB,EACjB,OAAO,IAAI,IAAI,CAAC,GAAG,EACnB,IAAI,CAAC,MAAM,EACX,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,SAAS;QACb,MAAM,IAAI,CAAC,eAAe,CAAC,aAAa,EAAE,CAAC;IAC7C,CAAC;IAED,cAAc,CAAC,CAAS;QACtB,OAAO,UAAU,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;IAChC,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,IAAyB;QAClC,MAAM,SAAS,GACb,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QAE9D,MAAM,WAAW,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,IAAI,CAC/C,YAAY,CAAC,aAAa,EAC1B,IAAI,CAAC,QAAQ,CAAC,UAAU,EACxB,SAAS,CAAC,MAAqB,CAChC,CAAC;QAEF,OAAO,IAAI,UAAU,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,IAAgB,EAAE,SAAqB;QAClD,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAC9B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,IAAI,CAAC,QAAQ,CAAC,SAAS,EACvB,SAAS,CAAC,MAAqB,EAC/B,IAAI,CAAC,MAAqB,CAC3B,CAAC;IACJ,CAAC;IAED,IAAI,MAAM;QACR,OAAO;YACL,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,KAAK,EAAE,IAAyB,EAAE,EAAE;gBAC1C,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,CAC/B,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CACjE,CAAC;gBACF,OAAO,gBAAgB,CAAC,SAAS,CAAC,CAAC;YACrC,CAAC;YACD,GAAG,EAAE,OAAO;SACb,CAAC;IACJ,CAAC;;AAGH;;GAEG;AACH,MAAM,OAAO,aAAc,SAAQ,YAAY;CAAG"}

package/dist/src/crypto/signer.d.ts

@@ -1,74 +0,0 @@
-import type { Action, AppActionSigner, ISigner, Signature, SignatureVerificationHandler, UserActionSigner } from "document-model";
-import type { IRenownCrypto } from "./index.js";
-export declare class InvalidSignatureError extends Error {
-    constructor();
-}
-export declare class RenownCryptoSigner implements ISigner {
-    private readonly crypto;
-    private readonly appName;
-    user?: UserActionSigner | undefined;
-    readonly app: AppActionSigner;
-    constructor(crypto: IRenownCrypto, appName: string, user?: UserActionSigner | undefined);
-    get publicKey(): CryptoKey;
-    sign(data: Uint8Array): Promise<Uint8Array>;
-    verify(data: Uint8Array, signature: Uint8Array): Promise<void>;
-    signAction(action: Action, abortSignal?: AbortSignal): Promise<Signature>;
-    /**
-     * Signs an action including a predicted resulting state hash.
-     *
-     * The resulting hash is packed into the signature tuple's 4th element (index 3)
-     * using the format: `${prevStateHash}:${resultingStateHash}`
-     *
-     * This allows offline verification of documents without reducer logic:
-     * - Verifier can check that the signature is valid for the claimed resulting state
-     * - Verifier can compare claimed resulting state to actual operation.hash
-     *
-     * @param action - The action to sign
-     * @param resultingStateHash - The predicted hash of document state AFTER this action runs
-     * @param abortSignal - Optional abort signal
-     * @returns A Signature tuple with the resulting hash encoded in element [3]
-     */
-    signActionWithResultingState(action: Action, resultingStateHash: string, abortSignal?: AbortSignal): Promise<Signature>;
-    /**
-     * Internal signing implementation shared by signAction and signActionWithResultingState.
-     */
-    private _signAction;
-    private hashAction;
-    private buildSignatureMessage;
-    private arrayBufferToHex;
-    private arrayBufferToBase64;
-}
-/**
- * Creates a signature verification handler that verifies signatures using the Web Crypto API.
- * The verification uses ECDSA with P-256 curve and SHA-256 hash, matching the RenownCrypto signing algorithm.
- */
-export declare function createSignatureVerifier(requireSignature?: boolean): SignatureVerificationHandler;
-/**
- * Parses the hash field (element [3]) from a signature tuple.
- *
- * Supports two formats:
- * - Old format: just `prevStateHash` (no colon)
- * - New format: `prevStateHash:resultingStateHash` (colon-separated)
- *
- * @param hashField - The 4th element of a Signature tuple
- * @returns Object with prevStateHash and optional resultingStateHash
- */
-export declare function parseSignatureHashField(hashField: string): {
-    prevStateHash: string;
-    resultingStateHash: string | undefined;
-};
-/**
- * Extracts the resulting state hash from a signature, if present.
- *
- * @param signature - A Signature tuple
- * @returns The resulting state hash, or undefined if not present
- */
-export declare function extractResultingHashFromSignature(signature: Signature): string | undefined;
-/**
- * Checks if a signature includes a resulting state hash.
- *
- * @param signature - A Signature tuple
- * @returns true if the signature includes a resulting state hash
- */
-export declare function signatureHasResultingHash(signature: Signature): boolean;
-//# sourceMappingURL=signer.d.ts.map

package/dist/src/crypto/signer.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"signer.d.ts","sourceRoot":"","sources":["../../../src/crypto/signer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,MAAM,EACN,eAAe,EACf,OAAO,EAEP,SAAS,EACT,4BAA4B,EAC5B,gBAAgB,EACjB,MAAM,gBAAgB,CAAC;AACxB,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,YAAY,CAAC;AAEhD,qBAAa,qBAAsB,SAAQ,KAAK;;CAI/C;AAED,qBAAa,kBAAmB,YAAW,OAAO;IAI9C,OAAO,CAAC,QAAQ,CAAC,MAAM;IACvB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACjB,IAAI,CAAC,EAAE,gBAAgB;IALhC,QAAQ,CAAC,GAAG,EAAE,eAAe,CAAC;gBAGX,MAAM,EAAE,aAAa,EACrB,OAAO,EAAE,MAAM,EACzB,IAAI,CAAC,EAAE,gBAAgB,YAAA;IAQhC,IAAI,SAAS,cAEZ;IAEK,IAAI,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,UAAU,CAAC;IAI3C,MAAM,CAAC,IAAI,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC;IAO9D,UAAU,CACd,MAAM,EAAE,MAAM,EACd,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,SAAS,CAAC;IAKrB;;;;;;;;;;;;;;OAcG;IACG,4BAA4B,CAChC,MAAM,EAAE,MAAM,EACd,kBAAkB,EAAE,MAAM,EAC1B,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,SAAS,CAAC;IAMrB;;OAEG;YACW,WAAW;YAiCX,UAAU;IAYxB,OAAO,CAAC,qBAAqB;IAS7B,OAAO,CAAC,gBAAgB;IAQxB,OAAO,CAAC,mBAAmB;CAQ5B;AAED;;;GAGG;AACH,wBAAgB,uBAAuB,CACrC,gBAAgB,UAAQ,GACvB,4BAA4B,CAuC9B;AA+JD;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG;IAC1D,aAAa,EAAE,MAAM,CAAC;IACtB,kBAAkB,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC,CAcA;AAED;;;;;GAKG;AACH,wBAAgB,iCAAiC,CAC/C,SAAS,EAAE,SAAS,GACnB,MAAM,GAAG,SAAS,CAIpB;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAEvE"}

package/dist/src/crypto/signer.js

@@ -1,306 +0,0 @@
-export class InvalidSignatureError extends Error {
-    constructor() {
-        super("Invalid signature");
-    }
-}
-export class RenownCryptoSigner {
-    crypto;
-    appName;
-    user;
-    app;
-    constructor(crypto, appName, user) {
-        this.crypto = crypto;
-        this.appName = appName;
-        this.user = user;
-        this.app = {
-            key: this.crypto.did,
-            name: this.appName,
-        };
-    }
-    get publicKey() {
-        return this.crypto.publicKey;
-    }
-    async sign(data) {
-        return this.crypto.sign(data);
-    }
-    async verify(data, signature) {
-        const isValid = await this.crypto.verify(data, signature);
-        if (!isValid) {
-            throw new InvalidSignatureError();
-        }
-    }
-    async signAction(action, abortSignal) {
-        const hashField = action.context?.prevOpHash ?? "";
-        return this._signAction(action, hashField, abortSignal);
-    }
-    /**
-     * Signs an action including a predicted resulting state hash.
-     *
-     * The resulting hash is packed into the signature tuple's 4th element (index 3)
-     * using the format: `${prevStateHash}:${resultingStateHash}`
-     *
-     * This allows offline verification of documents without reducer logic:
-     * - Verifier can check that the signature is valid for the claimed resulting state
-     * - Verifier can compare claimed resulting state to actual operation.hash
-     *
-     * @param action - The action to sign
-     * @param resultingStateHash - The predicted hash of document state AFTER this action runs
-     * @param abortSignal - Optional abort signal
-     * @returns A Signature tuple with the resulting hash encoded in element [3]
-     */
-    async signActionWithResultingState(action, resultingStateHash, abortSignal) {
-        const prevStateHash = action.context?.prevOpHash ?? "";
-        const hashField = `${prevStateHash}:${resultingStateHash}`;
-        return this._signAction(action, hashField, abortSignal);
-    }
-    /**
-     * Internal signing implementation shared by signAction and signActionWithResultingState.
-     */
-    async _signAction(action, hashField, abortSignal) {
-        if (abortSignal?.aborted) {
-            throw new Error("Signing aborted");
-        }
-        const timestamp = (new Date().getTime() / 1000).toFixed(0);
-        const hash = await this.hashAction(action);
-        if (abortSignal?.aborted) {
-            throw new Error("Signing aborted");
-        }
-        const params = [
-            timestamp,
-            this.crypto.did,
-            hash,
-            hashField,
-        ];
-        const message = this.buildSignatureMessage(params);
-        const signatureBytes = await this.crypto.sign(message);
-        const signatureHex = `0x${this.arrayBufferToHex(signatureBytes)}`;
-        if (abortSignal?.aborted) {
-            throw new Error("Signing aborted");
-        }
-        return [...params, signatureHex];
-    }
-    async hashAction(action) {
-        const payload = [
-            action.scope,
-            action.type,
-            JSON.stringify(action.input),
-        ].join("");
-        const encoder = new TextEncoder();
-        const data = encoder.encode(payload);
-        const hashBuffer = await crypto.subtle.digest("SHA-256", data);
-        return this.arrayBufferToBase64(hashBuffer);
-    }
-    buildSignatureMessage(params) {
-        const message = params.join("");
-        const prefix = "\x19Signed Operation:\n" + message.length.toString();
-        const encoder = new TextEncoder();
-        return encoder.encode(prefix + message);
-    }
-    arrayBufferToHex(buffer) {
-        const bytes = buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer);
-        return Array.from(bytes)
-            .map((byte) => byte.toString(16).padStart(2, "0"))
-            .join("");
-    }
-    arrayBufferToBase64(buffer) {
-        const bytes = new Uint8Array(buffer);
-        let binary = "";
-        for (let i = 0; i < bytes.length; i++) {
-            binary += String.fromCharCode(bytes[i]);
-        }
-        return btoa(binary);
-    }
-}
-/**
- * Creates a signature verification handler that verifies signatures using the Web Crypto API.
- * The verification uses ECDSA with P-256 curve and SHA-256 hash, matching the RenownCrypto signing algorithm.
- */
-export function createSignatureVerifier(requireSignature = false) {
-    return async (operation, publicKey) => {
-        const signer = operation.action.context?.signer;
-        if (!signer || !publicKey) {
-            return !requireSignature;
-        }
-        const signatures = signer.signatures;
-        if (signatures.length === 0) {
-            return false;
-        }
-        const signature = signatures[signatures.length - 1];
-        const [timestamp, signerKey, hash, prevStateHash, signatureHex] = signature;
-        if (signerKey !== publicKey) {
-            return false;
-        }
-        const params = [
-            timestamp,
-            signerKey,
-            hash,
-            prevStateHash,
-        ];
-        const message = buildSignatureMessage(params);
-        const signatureBytes = hexToUint8Array(signatureHex);
-        const cryptoKey = await importPublicKey(publicKey);
-        const isValid = await crypto.subtle.verify({ name: "ECDSA", hash: "SHA-256" }, cryptoKey, signatureBytes.buffer, message.buffer);
-        return isValid;
-    };
-}
-function buildSignatureMessage(params) {
-    const message = params.join("");
-    const prefix = "\x19Signed Operation:\n" + message.length.toString();
-    const encoder = new TextEncoder();
-    return encoder.encode(prefix + message);
-}
-function hexToUint8Array(hex) {
-    const cleanHex = hex.startsWith("0x") ? hex.slice(2) : hex;
-    const bytes = new Uint8Array(cleanHex.length / 2);
-    for (let i = 0; i < cleanHex.length; i += 2) {
-        bytes[i / 2] = parseInt(cleanHex.substring(i, i + 2), 16);
-    }
-    return bytes;
-}
-async function importPublicKey(did) {
-    const keyData = extractKeyFromDid(did);
-    return crypto.subtle.importKey("raw", keyData.buffer, { name: "ECDSA", namedCurve: "P-256" }, true, ["verify"]);
-}
-function extractKeyFromDid(did) {
-    const parts = did.split(":");
-    if (parts.length < 3 || parts[0] !== "did" || parts[1] !== "key") {
-        throw new Error(`Invalid DID format: ${did}`);
-    }
-    const multibaseKey = parts[2];
-    if (!multibaseKey.startsWith("z")) {
-        throw new Error(`Unsupported multibase encoding: ${multibaseKey[0]}`);
-    }
-    const decoded = base58Decode(multibaseKey.slice(1));
-    if (decoded[0] !== 0x80 || decoded[1] !== 0x24) {
-        throw new Error("Not a P-256 public key multicodec");
-    }
-    const compressedKey = decoded.slice(2);
-    return decompressP256PublicKey(compressedKey);
-}
-function base58Decode(input) {
-    const ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
-    const ALPHABET_MAP = new Map();
-    for (let i = 0; i < ALPHABET.length; i++) {
-        ALPHABET_MAP.set(ALPHABET[i], i);
-    }
-    if (input.length === 0) {
-        return new Uint8Array(0);
-    }
-    const bytes = [0];
-    for (const char of input) {
-        const value = ALPHABET_MAP.get(char);
-        if (value === undefined) {
-            throw new Error(`Invalid base58 character: ${char}`);
-        }
-        let carry = value;
-        for (let j = 0; j < bytes.length; j++) {
-            carry += bytes[j] * 58;
-            bytes[j] = carry & 0xff;
-            carry >>= 8;
-        }
-        while (carry > 0) {
-            bytes.push(carry & 0xff);
-            carry >>= 8;
-        }
-    }
-    for (const char of input) {
-        if (char !== "1")
-            break;
-        bytes.push(0);
-    }
-    return new Uint8Array(bytes.reverse());
-}
-function decompressP256PublicKey(compressed) {
-    if (compressed.length !== 33) {
-        throw new Error(`Invalid compressed key length: ${compressed.length}`);
-    }
-    const prefix = compressed[0];
-    if (prefix !== 0x02 && prefix !== 0x03) {
-        throw new Error(`Invalid compression prefix: ${prefix}`);
-    }
-    const p = BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff");
-    const a = BigInt("0xffffffff00000001000000000000000000000000fffffffffffffffffffffffc");
-    const b = BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b");
-    let x = BigInt(0);
-    for (let i = 1; i < compressed.length; i++) {
-        x = (x << BigInt(8)) | BigInt(compressed[i]);
-    }
-    const ySquared = (modPow(x, BigInt(3), p) + a * x + b) % p;
-    let y = modPow(ySquared, (p + BigInt(1)) / BigInt(4), p);
-    const isYEven = y % BigInt(2) === BigInt(0);
-    const shouldBeEven = prefix === 0x02;
-    if (isYEven !== shouldBeEven) {
-        y = p - y;
-    }
-    const uncompressed = new Uint8Array(65);
-    uncompressed[0] = 0x04;
-    const xBytes = bigIntToBytes(x, 32);
-    const yBytes = bigIntToBytes(y, 32);
-    uncompressed.set(xBytes, 1);
-    uncompressed.set(yBytes, 33);
-    return uncompressed;
-}
-function modPow(base, exp, mod) {
-    let result = BigInt(1);
-    base = base % mod;
-    while (exp > BigInt(0)) {
-        if (exp % BigInt(2) === BigInt(1)) {
-            result = (result * base) % mod;
-        }
-        exp = exp >> BigInt(1);
-        base = (base * base) % mod;
-    }
-    return result;
-}
-function bigIntToBytes(n, length) {
-    const bytes = new Uint8Array(length);
-    for (let i = length - 1; i >= 0; i--) {
-        bytes[i] = Number(n & BigInt(0xff));
-        n = n >> BigInt(8);
-    }
-    return bytes;
-}
-/**
- * Parses the hash field (element [3]) from a signature tuple.
- *
- * Supports two formats:
- * - Old format: just `prevStateHash` (no colon)
- * - New format: `prevStateHash:resultingStateHash` (colon-separated)
- *
- * @param hashField - The 4th element of a Signature tuple
- * @returns Object with prevStateHash and optional resultingStateHash
- */
-export function parseSignatureHashField(hashField) {
-    const colonIndex = hashField.indexOf(":");
-    if (colonIndex === -1) {
-        return {
-            prevStateHash: hashField,
-            resultingStateHash: undefined,
-        };
-    }
-    return {
-        prevStateHash: hashField.substring(0, colonIndex),
-        resultingStateHash: hashField.substring(colonIndex + 1),
-    };
-}
-/**
- * Extracts the resulting state hash from a signature, if present.
- *
- * @param signature - A Signature tuple
- * @returns The resulting state hash, or undefined if not present
- */
-export function extractResultingHashFromSignature(signature) {
-    const hashField = signature[3];
-    const { resultingStateHash } = parseSignatureHashField(hashField);
-    return resultingStateHash;
-}
-/**
- * Checks if a signature includes a resulting state hash.
- *
- * @param signature - A Signature tuple
- * @returns true if the signature includes a resulting state hash
- */
-export function signatureHasResultingHash(signature) {
-    return extractResultingHashFromSignature(signature) !== undefined;
-}
-//# sourceMappingURL=signer.js.map