@rhinestone/1auth 0.1.0

package/dist/server.js

@@ -0,0 +1,142 @@
+"use strict";
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+
+// src/server.ts
+var server_exports = {};
+__export(server_exports, {
+  createSignIntentHandler: () => createSignIntentHandler,
+  signIntent: () => signIntent
+});
+module.exports = __toCommonJS(server_exports);
+var import_crypto = require("crypto");
+function createCanonicalMessage(data) {
+  return JSON.stringify({
+    merchantId: data.merchantId,
+    targetChain: data.targetChain,
+    calls: data.calls.map((c) => ({
+      to: c.to.toLowerCase(),
+      data: (c.data || "0x").toLowerCase(),
+      value: c.value || "0",
+      label: c.label || "",
+      sublabel: c.sublabel || ""
+    })),
+    username: data.username,
+    accountAddress: data.accountAddress?.toLowerCase(),
+    nonce: data.nonce,
+    expiresAt: data.expiresAt
+  });
+}
+function signMessage(message, privateKeyBase64) {
+  const privateKeyBuffer = Buffer.from(privateKeyBase64, "base64");
+  const signature = (0, import_crypto.sign)(null, Buffer.from(message), {
+    key: privateKeyBuffer,
+    format: "der",
+    type: "pkcs8"
+  });
+  return signature.toString("base64");
+}
+function signIntent(params, config) {
+  const { username, accountAddress, targetChain, calls, tokenRequests } = params;
+  const { merchantId, privateKey, expiryMs = 5 * 60 * 1e3 } = config;
+  if (!merchantId || !privateKey) {
+    throw new Error("Missing merchantId or privateKey in config");
+  }
+  if (!username && !accountAddress) {
+    throw new Error("Either username or accountAddress is required");
+  }
+  if (!targetChain || !calls?.length) {
+    throw new Error("targetChain and calls are required");
+  }
+  const nonce = crypto.randomUUID();
+  const expiresAt = Date.now() + expiryMs;
+  const intentData = {
+    merchantId,
+    targetChain,
+    calls,
+    username,
+    accountAddress,
+    nonce,
+    expiresAt
+  };
+  const message = createCanonicalMessage(intentData);
+  const signature = signMessage(message, privateKey);
+  return {
+    ...intentData,
+    signature,
+    tokenRequests
+  };
+}
+function createSignIntentHandler(config) {
+  return async function handler(request) {
+    if (!config.merchantId || !config.privateKey) {
+      console.error("Missing MERCHANT_ID or MERCHANT_PRIVATE_KEY");
+      return Response.json(
+        { error: "Server misconfiguration: missing merchant credentials" },
+        { status: 500 }
+      );
+    }
+    try {
+      const body = await request.json();
+      const { targetChain, calls, username, accountAddress, tokenRequests } = body;
+      if (!targetChain || typeof targetChain !== "number") {
+        return Response.json(
+          { error: "targetChain is required and must be a number" },
+          { status: 400 }
+        );
+      }
+      if (!calls || !Array.isArray(calls) || calls.length === 0) {
+        return Response.json(
+          { error: "calls is required and must be a non-empty array" },
+          { status: 400 }
+        );
+      }
+      if (!username && !accountAddress) {
+        return Response.json(
+          { error: "Either username or accountAddress is required" },
+          { status: 400 }
+        );
+      }
+      for (const call of calls) {
+        if (!call.to || !/^0x[a-fA-F0-9]{40}$/.test(call.to)) {
+          return Response.json(
+            { error: "Each call must have a valid 'to' address" },
+            { status: 400 }
+          );
+        }
+      }
+      const signedIntent = signIntent(
+        { username, accountAddress, targetChain, calls, tokenRequests },
+        config
+      );
+      return Response.json(signedIntent);
+    } catch (error) {
+      console.error("Error signing intent:", error);
+      return Response.json(
+        { error: "Failed to sign intent" },
+        { status: 500 }
+      );
+    }
+  };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  createSignIntentHandler,
+  signIntent
+});
+//# sourceMappingURL=server.js.map

package/dist/server.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server-side utilities for 1auth SDK\n * Use these in Next.js API routes or server actions\n */\n\nimport { sign } from \"crypto\";\n\nexport interface MerchantConfig {\n  /** Merchant ID from registration */\n  merchantId: string;\n  /** Ed25519 private key (base64 encoded) */\n  privateKey: string;\n  /** Intent expiry time in ms (default: 5 minutes) */\n  expiryMs?: number;\n}\n\nexport interface IntentCall {\n  to: string;\n  data?: string;\n  value?: string;\n  label?: string;\n  sublabel?: string;\n}\n\nexport interface SignIntentParams {\n  username?: string;\n  accountAddress?: string;\n  targetChain: number;\n  calls: IntentCall[];\n  tokenRequests?: Array<{ token: string; amount: string }>;\n}\n\nexport interface SignedIntent {\n  merchantId: string;\n  targetChain: number;\n  calls: IntentCall[];\n  username?: string;\n  accountAddress?: string;\n  nonce: string;\n  expiresAt: number;\n  signature: string;\n  tokenRequests?: Array<{ token: string; amount: string }>;\n}\n\n/**\n * Create canonical message for signing\n * Must match the format expected by passkey service\n */\nfunction createCanonicalMessage(data: {\n  merchantId: string;\n  targetChain: number;\n  calls: IntentCall[];\n  username?: string;\n  accountAddress?: string;\n  nonce: string;\n  expiresAt: number;\n}): string {\n  return JSON.stringify({\n    merchantId: data.merchantId,\n    targetChain: data.targetChain,\n    calls: data.calls.map((c) => ({\n      to: c.to.toLowerCase(),\n      data: (c.data || \"0x\").toLowerCase(),\n      value: c.value || \"0\",\n      label: c.label || \"\",\n      sublabel: c.sublabel || \"\",\n    })),\n    username: data.username,\n    accountAddress: data.accountAddress?.toLowerCase(),\n    nonce: data.nonce,\n    expiresAt: data.expiresAt,\n  });\n}\n\n/**\n * Sign an intent with Ed25519 private key\n */\nfunction signMessage(message: string, privateKeyBase64: string): string {\n  const privateKeyBuffer = Buffer.from(privateKeyBase64, \"base64\");\n  const signature = sign(null, Buffer.from(message), {\n    key: privateKeyBuffer,\n    format: \"der\",\n    type: \"pkcs8\",\n  });\n  return signature.toString(\"base64\");\n}\n\n/**\n * Sign an intent for submission to the passkey service\n *\n * @example\n * ```typescript\n * import { signIntent } from \"@rhinestone/1auth/server\";\n *\n * const signedIntent = signIntent(\n *   {\n *     username: \"alice\",\n *     targetChain: 8453,\n *     calls: [{ to: \"0x...\", data: \"0x...\", label: \"Buy NFT\" }],\n *   },\n *   {\n *     merchantId: process.env.MERCHANT_ID!,\n *     privateKey: process.env.MERCHANT_PRIVATE_KEY!,\n *   }\n * );\n * ```\n */\nexport function signIntent(\n  params: SignIntentParams,\n  config: MerchantConfig\n): SignedIntent {\n  const { username, accountAddress, targetChain, calls, tokenRequests } = params;\n  const { merchantId, privateKey, expiryMs = 5 * 60 * 1000 } = config;\n\n  if (!merchantId || !privateKey) {\n    throw new Error(\"Missing merchantId or privateKey in config\");\n  }\n\n  if (!username && !accountAddress) {\n    throw new Error(\"Either username or accountAddress is required\");\n  }\n\n  if (!targetChain || !calls?.length) {\n    throw new Error(\"targetChain and calls are required\");\n  }\n\n  // Generate nonce and expiry\n  const nonce = crypto.randomUUID();\n  const expiresAt = Date.now() + expiryMs;\n\n  // Create intent data\n  const intentData = {\n    merchantId,\n    targetChain,\n    calls,\n    username,\n    accountAddress,\n    nonce,\n    expiresAt,\n  };\n\n  // Create canonical message and sign\n  const message = createCanonicalMessage(intentData);\n  const signature = signMessage(message, privateKey);\n\n  return {\n    ...intentData,\n    signature,\n    tokenRequests,\n  };\n}\n\n/**\n * Create a Next.js API route handler for signing intents\n *\n * @example\n * ```typescript\n * // app/api/sign-intent/route.ts\n * import { createSignIntentHandler } from \"@rhinestone/1auth/server\";\n *\n * export const POST = createSignIntentHandler({\n *   merchantId: process.env.MERCHANT_ID!,\n *   privateKey: process.env.MERCHANT_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createSignIntentHandler(config: MerchantConfig) {\n  return async function handler(request: Request): Promise<Response> {\n    // Validate config\n    if (!config.merchantId || !config.privateKey) {\n      console.error(\"Missing MERCHANT_ID or MERCHANT_PRIVATE_KEY\");\n      return Response.json(\n        { error: \"Server misconfiguration: missing merchant credentials\" },\n        { status: 500 }\n      );\n    }\n\n    try {\n      const body = await request.json();\n\n      // Validate required fields\n      const { targetChain, calls, username, accountAddress, tokenRequests } = body;\n\n      if (!targetChain || typeof targetChain !== \"number\") {\n        return Response.json(\n          { error: \"targetChain is required and must be a number\" },\n          { status: 400 }\n        );\n      }\n\n      if (!calls || !Array.isArray(calls) || calls.length === 0) {\n        return Response.json(\n          { error: \"calls is required and must be a non-empty array\" },\n          { status: 400 }\n        );\n      }\n\n      if (!username && !accountAddress) {\n        return Response.json(\n          { error: \"Either username or accountAddress is required\" },\n          { status: 400 }\n        );\n      }\n\n      // Validate each call has a valid address\n      for (const call of calls) {\n        if (!call.to || !/^0x[a-fA-F0-9]{40}$/.test(call.to)) {\n          return Response.json(\n            { error: \"Each call must have a valid 'to' address\" },\n            { status: 400 }\n          );\n        }\n      }\n\n      // Sign the intent\n      const signedIntent = signIntent(\n        { username, accountAddress, targetChain, calls, tokenRequests },\n        config\n      );\n\n      return Response.json(signedIntent);\n    } catch (error) {\n      console.error(\"Error signing intent:\", error);\n      return Response.json(\n        { error: \"Failed to sign intent\" },\n        { status: 500 }\n      );\n    }\n  };\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAKA,oBAAqB;AA2CrB,SAAS,uBAAuB,MAQrB;AACT,SAAO,KAAK,UAAU;AAAA,IACpB,YAAY,KAAK;AAAA,IACjB,aAAa,KAAK;AAAA,IAClB,OAAO,KAAK,MAAM,IAAI,CAAC,OAAO;AAAA,MAC5B,IAAI,EAAE,GAAG,YAAY;AAAA,MACrB,OAAO,EAAE,QAAQ,MAAM,YAAY;AAAA,MACnC,OAAO,EAAE,SAAS;AAAA,MAClB,OAAO,EAAE,SAAS;AAAA,MAClB,UAAU,EAAE,YAAY;AAAA,IAC1B,EAAE;AAAA,IACF,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK,gBAAgB,YAAY;AAAA,IACjD,OAAO,KAAK;AAAA,IACZ,WAAW,KAAK;AAAA,EAClB,CAAC;AACH;AAKA,SAAS,YAAY,SAAiB,kBAAkC;AACtE,QAAM,mBAAmB,OAAO,KAAK,kBAAkB,QAAQ;AAC/D,QAAM,gBAAY,oBAAK,MAAM,OAAO,KAAK,OAAO,GAAG;AAAA,IACjD,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACD,SAAO,UAAU,SAAS,QAAQ;AACpC;AAsBO,SAAS,WACd,QACA,QACc;AACd,QAAM,EAAE,UAAU,gBAAgB,aAAa,OAAO,cAAc,IAAI;AACxE,QAAM,EAAE,YAAY,YAAY,WAAW,IAAI,KAAK,IAAK,IAAI;AAE7D,MAAI,CAAC,cAAc,CAAC,YAAY;AAC9B,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AAEA,MAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAEA,MAAI,CAAC,eAAe,CAAC,OAAO,QAAQ;AAClC,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAGA,QAAM,QAAQ,OAAO,WAAW;AAChC,QAAM,YAAY,KAAK,IAAI,IAAI;AAG/B,QAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAGA,QAAM,UAAU,uBAAuB,UAAU;AACjD,QAAM,YAAY,YAAY,SAAS,UAAU;AAEjD,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA;AAAA,EACF;AACF;AAgBO,SAAS,wBAAwB,QAAwB;AAC9D,SAAO,eAAe,QAAQ,SAAqC;AAEjE,QAAI,CAAC,OAAO,cAAc,CAAC,OAAO,YAAY;AAC5C,cAAQ,MAAM,6CAA6C;AAC3D,aAAO,SAAS;AAAA,QACd,EAAE,OAAO,wDAAwD;AAAA,QACjE,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,OAAO,MAAM,QAAQ,KAAK;AAGhC,YAAM,EAAE,aAAa,OAAO,UAAU,gBAAgB,cAAc,IAAI;AAExE,UAAI,CAAC,eAAe,OAAO,gBAAgB,UAAU;AACnD,eAAO,SAAS;AAAA,UACd,EAAE,OAAO,+CAA+C;AAAA,UACxD,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,UAAI,CAAC,SAAS,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,GAAG;AACzD,eAAO,SAAS;AAAA,UACd,EAAE,OAAO,kDAAkD;AAAA,UAC3D,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,UAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,eAAO,SAAS;AAAA,UACd,EAAE,OAAO,gDAAgD;AAAA,UACzD,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAGA,iBAAW,QAAQ,OAAO;AACxB,YAAI,CAAC,KAAK,MAAM,CAAC,sBAAsB,KAAK,KAAK,EAAE,GAAG;AACpD,iBAAO,SAAS;AAAA,YACd,EAAE,OAAO,2CAA2C;AAAA,YACpD,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,QACF;AAAA,MACF;AAGA,YAAM,eAAe;AAAA,QACnB,EAAE,UAAU,gBAAgB,aAAa,OAAO,cAAc;AAAA,QAC9D;AAAA,MACF;AAEA,aAAO,SAAS,KAAK,YAAY;AAAA,IACnC,SAAS,OAAO;AACd,cAAQ,MAAM,yBAAyB,KAAK;AAC5C,aAAO,SAAS;AAAA,QACd,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/server.mjs

@@ -0,0 +1,116 @@
+// src/server.ts
+import { sign } from "crypto";
+function createCanonicalMessage(data) {
+  return JSON.stringify({
+    merchantId: data.merchantId,
+    targetChain: data.targetChain,
+    calls: data.calls.map((c) => ({
+      to: c.to.toLowerCase(),
+      data: (c.data || "0x").toLowerCase(),
+      value: c.value || "0",
+      label: c.label || "",
+      sublabel: c.sublabel || ""
+    })),
+    username: data.username,
+    accountAddress: data.accountAddress?.toLowerCase(),
+    nonce: data.nonce,
+    expiresAt: data.expiresAt
+  });
+}
+function signMessage(message, privateKeyBase64) {
+  const privateKeyBuffer = Buffer.from(privateKeyBase64, "base64");
+  const signature = sign(null, Buffer.from(message), {
+    key: privateKeyBuffer,
+    format: "der",
+    type: "pkcs8"
+  });
+  return signature.toString("base64");
+}
+function signIntent(params, config) {
+  const { username, accountAddress, targetChain, calls, tokenRequests } = params;
+  const { merchantId, privateKey, expiryMs = 5 * 60 * 1e3 } = config;
+  if (!merchantId || !privateKey) {
+    throw new Error("Missing merchantId or privateKey in config");
+  }
+  if (!username && !accountAddress) {
+    throw new Error("Either username or accountAddress is required");
+  }
+  if (!targetChain || !calls?.length) {
+    throw new Error("targetChain and calls are required");
+  }
+  const nonce = crypto.randomUUID();
+  const expiresAt = Date.now() + expiryMs;
+  const intentData = {
+    merchantId,
+    targetChain,
+    calls,
+    username,
+    accountAddress,
+    nonce,
+    expiresAt
+  };
+  const message = createCanonicalMessage(intentData);
+  const signature = signMessage(message, privateKey);
+  return {
+    ...intentData,
+    signature,
+    tokenRequests
+  };
+}
+function createSignIntentHandler(config) {
+  return async function handler(request) {
+    if (!config.merchantId || !config.privateKey) {
+      console.error("Missing MERCHANT_ID or MERCHANT_PRIVATE_KEY");
+      return Response.json(
+        { error: "Server misconfiguration: missing merchant credentials" },
+        { status: 500 }
+      );
+    }
+    try {
+      const body = await request.json();
+      const { targetChain, calls, username, accountAddress, tokenRequests } = body;
+      if (!targetChain || typeof targetChain !== "number") {
+        return Response.json(
+          { error: "targetChain is required and must be a number" },
+          { status: 400 }
+        );
+      }
+      if (!calls || !Array.isArray(calls) || calls.length === 0) {
+        return Response.json(
+          { error: "calls is required and must be a non-empty array" },
+          { status: 400 }
+        );
+      }
+      if (!username && !accountAddress) {
+        return Response.json(
+          { error: "Either username or accountAddress is required" },
+          { status: 400 }
+        );
+      }
+      for (const call of calls) {
+        if (!call.to || !/^0x[a-fA-F0-9]{40}$/.test(call.to)) {
+          return Response.json(
+            { error: "Each call must have a valid 'to' address" },
+            { status: 400 }
+          );
+        }
+      }
+      const signedIntent = signIntent(
+        { username, accountAddress, targetChain, calls, tokenRequests },
+        config
+      );
+      return Response.json(signedIntent);
+    } catch (error) {
+      console.error("Error signing intent:", error);
+      return Response.json(
+        { error: "Failed to sign intent" },
+        { status: 500 }
+      );
+    }
+  };
+}
+export {
+  createSignIntentHandler,
+  signIntent
+};
+//# sourceMappingURL=server.mjs.map

package/dist/server.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/server.ts"],"sourcesContent":["/**\n * Server-side utilities for 1auth SDK\n * Use these in Next.js API routes or server actions\n */\n\nimport { sign } from \"crypto\";\n\nexport interface MerchantConfig {\n  /** Merchant ID from registration */\n  merchantId: string;\n  /** Ed25519 private key (base64 encoded) */\n  privateKey: string;\n  /** Intent expiry time in ms (default: 5 minutes) */\n  expiryMs?: number;\n}\n\nexport interface IntentCall {\n  to: string;\n  data?: string;\n  value?: string;\n  label?: string;\n  sublabel?: string;\n}\n\nexport interface SignIntentParams {\n  username?: string;\n  accountAddress?: string;\n  targetChain: number;\n  calls: IntentCall[];\n  tokenRequests?: Array<{ token: string; amount: string }>;\n}\n\nexport interface SignedIntent {\n  merchantId: string;\n  targetChain: number;\n  calls: IntentCall[];\n  username?: string;\n  accountAddress?: string;\n  nonce: string;\n  expiresAt: number;\n  signature: string;\n  tokenRequests?: Array<{ token: string; amount: string }>;\n}\n\n/**\n * Create canonical message for signing\n * Must match the format expected by passkey service\n */\nfunction createCanonicalMessage(data: {\n  merchantId: string;\n  targetChain: number;\n  calls: IntentCall[];\n  username?: string;\n  accountAddress?: string;\n  nonce: string;\n  expiresAt: number;\n}): string {\n  return JSON.stringify({\n    merchantId: data.merchantId,\n    targetChain: data.targetChain,\n    calls: data.calls.map((c) => ({\n      to: c.to.toLowerCase(),\n      data: (c.data || \"0x\").toLowerCase(),\n      value: c.value || \"0\",\n      label: c.label || \"\",\n      sublabel: c.sublabel || \"\",\n    })),\n    username: data.username,\n    accountAddress: data.accountAddress?.toLowerCase(),\n    nonce: data.nonce,\n    expiresAt: data.expiresAt,\n  });\n}\n\n/**\n * Sign an intent with Ed25519 private key\n */\nfunction signMessage(message: string, privateKeyBase64: string): string {\n  const privateKeyBuffer = Buffer.from(privateKeyBase64, \"base64\");\n  const signature = sign(null, Buffer.from(message), {\n    key: privateKeyBuffer,\n    format: \"der\",\n    type: \"pkcs8\",\n  });\n  return signature.toString(\"base64\");\n}\n\n/**\n * Sign an intent for submission to the passkey service\n *\n * @example\n * ```typescript\n * import { signIntent } from \"@rhinestone/1auth/server\";\n *\n * const signedIntent = signIntent(\n *   {\n *     username: \"alice\",\n *     targetChain: 8453,\n *     calls: [{ to: \"0x...\", data: \"0x...\", label: \"Buy NFT\" }],\n *   },\n *   {\n *     merchantId: process.env.MERCHANT_ID!,\n *     privateKey: process.env.MERCHANT_PRIVATE_KEY!,\n *   }\n * );\n * ```\n */\nexport function signIntent(\n  params: SignIntentParams,\n  config: MerchantConfig\n): SignedIntent {\n  const { username, accountAddress, targetChain, calls, tokenRequests } = params;\n  const { merchantId, privateKey, expiryMs = 5 * 60 * 1000 } = config;\n\n  if (!merchantId || !privateKey) {\n    throw new Error(\"Missing merchantId or privateKey in config\");\n  }\n\n  if (!username && !accountAddress) {\n    throw new Error(\"Either username or accountAddress is required\");\n  }\n\n  if (!targetChain || !calls?.length) {\n    throw new Error(\"targetChain and calls are required\");\n  }\n\n  // Generate nonce and expiry\n  const nonce = crypto.randomUUID();\n  const expiresAt = Date.now() + expiryMs;\n\n  // Create intent data\n  const intentData = {\n    merchantId,\n    targetChain,\n    calls,\n    username,\n    accountAddress,\n    nonce,\n    expiresAt,\n  };\n\n  // Create canonical message and sign\n  const message = createCanonicalMessage(intentData);\n  const signature = signMessage(message, privateKey);\n\n  return {\n    ...intentData,\n    signature,\n    tokenRequests,\n  };\n}\n\n/**\n * Create a Next.js API route handler for signing intents\n *\n * @example\n * ```typescript\n * // app/api/sign-intent/route.ts\n * import { createSignIntentHandler } from \"@rhinestone/1auth/server\";\n *\n * export const POST = createSignIntentHandler({\n *   merchantId: process.env.MERCHANT_ID!,\n *   privateKey: process.env.MERCHANT_PRIVATE_KEY!,\n * });\n * ```\n */\nexport function createSignIntentHandler(config: MerchantConfig) {\n  return async function handler(request: Request): Promise<Response> {\n    // Validate config\n    if (!config.merchantId || !config.privateKey) {\n      console.error(\"Missing MERCHANT_ID or MERCHANT_PRIVATE_KEY\");\n      return Response.json(\n        { error: \"Server misconfiguration: missing merchant credentials\" },\n        { status: 500 }\n      );\n    }\n\n    try {\n      const body = await request.json();\n\n      // Validate required fields\n      const { targetChain, calls, username, accountAddress, tokenRequests } = body;\n\n      if (!targetChain || typeof targetChain !== \"number\") {\n        return Response.json(\n          { error: \"targetChain is required and must be a number\" },\n          { status: 400 }\n        );\n      }\n\n      if (!calls || !Array.isArray(calls) || calls.length === 0) {\n        return Response.json(\n          { error: \"calls is required and must be a non-empty array\" },\n          { status: 400 }\n        );\n      }\n\n      if (!username && !accountAddress) {\n        return Response.json(\n          { error: \"Either username or accountAddress is required\" },\n          { status: 400 }\n        );\n      }\n\n      // Validate each call has a valid address\n      for (const call of calls) {\n        if (!call.to || !/^0x[a-fA-F0-9]{40}$/.test(call.to)) {\n          return Response.json(\n            { error: \"Each call must have a valid 'to' address\" },\n            { status: 400 }\n          );\n        }\n      }\n\n      // Sign the intent\n      const signedIntent = signIntent(\n        { username, accountAddress, targetChain, calls, tokenRequests },\n        config\n      );\n\n      return Response.json(signedIntent);\n    } catch (error) {\n      console.error(\"Error signing intent:\", error);\n      return Response.json(\n        { error: \"Failed to sign intent\" },\n        { status: 500 }\n      );\n    }\n  };\n}\n"],"mappings":";AAKA,SAAS,YAAY;AA2CrB,SAAS,uBAAuB,MAQrB;AACT,SAAO,KAAK,UAAU;AAAA,IACpB,YAAY,KAAK;AAAA,IACjB,aAAa,KAAK;AAAA,IAClB,OAAO,KAAK,MAAM,IAAI,CAAC,OAAO;AAAA,MAC5B,IAAI,EAAE,GAAG,YAAY;AAAA,MACrB,OAAO,EAAE,QAAQ,MAAM,YAAY;AAAA,MACnC,OAAO,EAAE,SAAS;AAAA,MAClB,OAAO,EAAE,SAAS;AAAA,MAClB,UAAU,EAAE,YAAY;AAAA,IAC1B,EAAE;AAAA,IACF,UAAU,KAAK;AAAA,IACf,gBAAgB,KAAK,gBAAgB,YAAY;AAAA,IACjD,OAAO,KAAK;AAAA,IACZ,WAAW,KAAK;AAAA,EAClB,CAAC;AACH;AAKA,SAAS,YAAY,SAAiB,kBAAkC;AACtE,QAAM,mBAAmB,OAAO,KAAK,kBAAkB,QAAQ;AAC/D,QAAM,YAAY,KAAK,MAAM,OAAO,KAAK,OAAO,GAAG;AAAA,IACjD,KAAK;AAAA,IACL,QAAQ;AAAA,IACR,MAAM;AAAA,EACR,CAAC;AACD,SAAO,UAAU,SAAS,QAAQ;AACpC;AAsBO,SAAS,WACd,QACA,QACc;AACd,QAAM,EAAE,UAAU,gBAAgB,aAAa,OAAO,cAAc,IAAI;AACxE,QAAM,EAAE,YAAY,YAAY,WAAW,IAAI,KAAK,IAAK,IAAI;AAE7D,MAAI,CAAC,cAAc,CAAC,YAAY;AAC9B,UAAM,IAAI,MAAM,4CAA4C;AAAA,EAC9D;AAEA,MAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AAEA,MAAI,CAAC,eAAe,CAAC,OAAO,QAAQ;AAClC,UAAM,IAAI,MAAM,oCAAoC;AAAA,EACtD;AAGA,QAAM,QAAQ,OAAO,WAAW;AAChC,QAAM,YAAY,KAAK,IAAI,IAAI;AAG/B,QAAM,aAAa;AAAA,IACjB;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EACF;AAGA,QAAM,UAAU,uBAAuB,UAAU;AACjD,QAAM,YAAY,YAAY,SAAS,UAAU;AAEjD,SAAO;AAAA,IACL,GAAG;AAAA,IACH;AAAA,IACA;AAAA,EACF;AACF;AAgBO,SAAS,wBAAwB,QAAwB;AAC9D,SAAO,eAAe,QAAQ,SAAqC;AAEjE,QAAI,CAAC,OAAO,cAAc,CAAC,OAAO,YAAY;AAC5C,cAAQ,MAAM,6CAA6C;AAC3D,aAAO,SAAS;AAAA,QACd,EAAE,OAAO,wDAAwD;AAAA,QACjE,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAEA,QAAI;AACF,YAAM,OAAO,MAAM,QAAQ,KAAK;AAGhC,YAAM,EAAE,aAAa,OAAO,UAAU,gBAAgB,cAAc,IAAI;AAExE,UAAI,CAAC,eAAe,OAAO,gBAAgB,UAAU;AACnD,eAAO,SAAS;AAAA,UACd,EAAE,OAAO,+CAA+C;AAAA,UACxD,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,UAAI,CAAC,SAAS,CAAC,MAAM,QAAQ,KAAK,KAAK,MAAM,WAAW,GAAG;AACzD,eAAO,SAAS;AAAA,UACd,EAAE,OAAO,kDAAkD;AAAA,UAC3D,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAEA,UAAI,CAAC,YAAY,CAAC,gBAAgB;AAChC,eAAO,SAAS;AAAA,UACd,EAAE,OAAO,gDAAgD;AAAA,UACzD,EAAE,QAAQ,IAAI;AAAA,QAChB;AAAA,MACF;AAGA,iBAAW,QAAQ,OAAO;AACxB,YAAI,CAAC,KAAK,MAAM,CAAC,sBAAsB,KAAK,KAAK,EAAE,GAAG;AACpD,iBAAO,SAAS;AAAA,YACd,EAAE,OAAO,2CAA2C;AAAA,YACpD,EAAE,QAAQ,IAAI;AAAA,UAChB;AAAA,QACF;AAAA,MACF;AAGA,YAAM,eAAe;AAAA,QACnB,EAAE,UAAU,gBAAgB,aAAa,OAAO,cAAc;AAAA,QAC9D;AAAA,MACF;AAEA,aAAO,SAAS,KAAK,YAAY;AAAA,IACnC,SAAS,OAAO;AACd,cAAQ,MAAM,yBAAyB,KAAK;AAC5C,aAAO,SAAS;AAAA,QACd,EAAE,OAAO,wBAAwB;AAAA,QACjC,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/dist/wagmi.d.mts

@@ -0,0 +1,15 @@
+import * as _wagmi_core from '@wagmi/core';
+import { P as PasskeyProvider } from './provider-Dgh51NRc.mjs';
+import { P as PasskeyProviderClient } from './client-C1inywuT.mjs';
+
+type OneAuthConnectorOptions = {
+    client: PasskeyProviderClient;
+    chainId?: number;
+    storageKey?: string;
+    waitForHash?: boolean;
+    hashTimeoutMs?: number;
+    hashIntervalMs?: number;
+};
+declare function oneAuth(options: OneAuthConnectorOptions): _wagmi_core.CreateConnectorFn<PasskeyProvider, Record<string, unknown>, Record<string, unknown>>;
+
+export { type OneAuthConnectorOptions, oneAuth };

package/dist/wagmi.d.ts

@@ -0,0 +1,15 @@
+import * as _wagmi_core from '@wagmi/core';
+import { P as PasskeyProvider } from './provider-q7M728Mn.js';
+import { P as PasskeyProviderClient } from './client-C1inywuT.js';
+
+type OneAuthConnectorOptions = {
+    client: PasskeyProviderClient;
+    chainId?: number;
+    storageKey?: string;
+    waitForHash?: boolean;
+    hashTimeoutMs?: number;
+    hashIntervalMs?: number;
+};
+declare function oneAuth(options: OneAuthConnectorOptions): _wagmi_core.CreateConnectorFn<PasskeyProvider, Record<string, unknown>, Record<string, unknown>>;
+
+export { type OneAuthConnectorOptions, oneAuth };