@rhinestone/1auth 0.6.8 → 0.6.10

package/dist/verify-BLgZzwmJ.d.ts

@@ -0,0 +1,150 @@
+import { Address, Chain, Transport, Hex } from 'viem';
+import { aa as ThemeConfig, S as SponsorshipConfig, W as WebAuthnSignature } from './types-U_dwxbtS.js';
+
+/**
+ * Configuration for creating a passkey-enabled WalletClient
+ */
+interface PasskeyWalletClientConfig {
+    /** User's smart account address */
+    accountAddress: Address;
+    /** Optional username hint for legacy passkey accounts. */
+    username?: string;
+    /** Base URL of the auth API (defaults to https://passkey.1auth.box) */
+    providerUrl?: string;
+    /** Client identifier for this application */
+    clientId: string;
+    /** Optional URL of the dialog UI */
+    dialogUrl?: string;
+    /** Theme configuration for the signing dialog */
+    theme?: ThemeConfig;
+    /**
+     * Control whether the 1auth signing review iframe is hidden.
+     *
+     * Blind signing is the SDK default. Set `blind_signing: false` to opt this
+     * wallet-client factory into 1auth's visible review UI globally; individual
+     * methods still use the internal OneAuthClient defaults.
+     */
+    blind_signing?: boolean;
+    /** When true, operate on testnet chains only. Default: false */
+    testnets?: boolean;
+    /** Chain configuration */
+    chain: Chain;
+    /** Transport (e.g., http(), webSocket()) */
+    transport: Transport;
+    /** Wait for a transaction hash before resolving send calls. */
+    waitForHash?: boolean;
+    /** Maximum time to wait for a transaction hash in ms. */
+    hashTimeoutMs?: number;
+    /** Poll interval for transaction hash in ms. */
+    hashIntervalMs?: number;
+    /** Sponsorship configuration for app-sponsored intents */
+    sponsorship?: SponsorshipConfig;
+}
+/**
+ * A single call in a batch transaction
+ */
+interface TransactionCall {
+    /** Target contract address */
+    to: Address;
+    /** Calldata to send */
+    data?: Hex;
+    /** Value in wei to send */
+    value?: bigint;
+    /** Optional label for the transaction review UI (e.g., "Swap ETH for USDC") */
+    label?: string;
+    /** Optional sublabel for additional context (e.g., "1 ETH → 2,500 USDC") */
+    sublabel?: string;
+    /**
+     * Optional icon shown in the sign dialog's action card. Falls back to the
+     * built-in token icon if 1auth can resolve one for this call. SVG / square
+     * PNG URL, or a `data:image/svg+xml,...` URL.
+     */
+    icon?: string;
+    /**
+     * Optional ABI for unverified human-readable decoding of `data` in the
+     * sign dialog. App-supplied — rendered with an "Unverified" badge.
+     * Decoding is best-effort; failures are silently dropped.
+     */
+    abi?: readonly unknown[];
+}
+/**
+ * Parameters for sendCalls (batched transactions)
+ */
+interface SendCallsParams {
+    /** Array of calls to execute */
+    calls: TransactionCall[];
+    /** Optional chain id override */
+    chainId?: number;
+    /** Optional token requests for orchestrator output (what tokens/amounts to deliver) */
+    tokenRequests?: {
+        token: string;
+        amount: bigint;
+    }[];
+    /** Constrain which tokens the orchestrator can use as input/payment */
+    sourceAssets?: string[];
+    /** Which chain to look for source assets on */
+    sourceChainId?: number;
+}
+
+/**
+ * Encode a WebAuthn signature for ERC-1271 verification on-chain
+ *
+ * @param sig - The WebAuthn signature from the passkey
+ * @returns ABI-encoded signature bytes
+ */
+declare function encodeWebAuthnSignature(sig: WebAuthnSignature): Hex;
+/**
+ * Hash an array of transaction calls for signing
+ *
+ * @param calls - Array of transaction calls
+ * @returns keccak256 hash of the encoded calls
+ */
+declare function hashCalls(calls: TransactionCall[]): Hex;
+
+/**
+ * The EIP-191 prefix used for personal message signing.
+ * This is the standard Ethereum message prefix for `personal_sign`.
+ */
+declare const ETHEREUM_MESSAGE_PREFIX = "\u0019Ethereum Signed Message:\n";
+/**
+ * Hash a message with the EIP-191 Ethereum prefix.
+ *
+ * This is the same hashing function used by the passkey sign dialog.
+ * Use this to verify that the `signedHash` returned from `signMessage()`
+ * matches your original message.
+ *
+ * Format: keccak256("\x19Ethereum Signed Message:\n" + len + message)
+ *
+ * @example
+ * ```typescript
+ * const message = "Sign in to MyApp\nTimestamp: 1234567890";
+ * const result = await client.signMessage({ username: 'alice', message });
+ *
+ * // Verify the hash matches
+ * const expectedHash = hashMessage(message);
+ * if (result.signedHash === expectedHash) {
+ *   console.log('Hash matches - signature is for this message');
+ * }
+ * ```
+ */
+declare function hashMessage(message: string): `0x${string}`;
+/**
+ * Verify that a signedHash matches the expected message.
+ *
+ * This is a convenience wrapper around `hashMessage()` that returns
+ * a boolean. For full cryptographic verification of the P256 signature,
+ * use on-chain verification via the WebAuthn.sol contract.
+ *
+ * @example
+ * ```typescript
+ * const result = await client.signMessage({ username: 'alice', message });
+ *
+ * if (result.success && verifyMessageHash(message, result.signedHash)) {
+ *   // The signature is for this exact message
+ *   // For full verification, verify the P256 signature on-chain or server-side
+ * }
+ * ```
+ */
+declare function verifyMessageHash(message: string, signedHash: string | undefined): boolean;
+
+export { ETHEREUM_MESSAGE_PREFIX as E, type PasskeyWalletClientConfig as P, type SendCallsParams as S, type TransactionCall as T, hashMessage as a, encodeWebAuthnSignature as e, hashCalls as h, verifyMessageHash as v };

package/dist/verify-C8-a5c3K.d.mts

@@ -0,0 +1,150 @@
+import { Address, Chain, Transport, Hex } from 'viem';
+import { aa as ThemeConfig, S as SponsorshipConfig, W as WebAuthnSignature } from './types-U_dwxbtS.mjs';
+
+/**
+ * Configuration for creating a passkey-enabled WalletClient
+ */
+interface PasskeyWalletClientConfig {
+    /** User's smart account address */
+    accountAddress: Address;
+    /** Optional username hint for legacy passkey accounts. */
+    username?: string;
+    /** Base URL of the auth API (defaults to https://passkey.1auth.box) */
+    providerUrl?: string;
+    /** Client identifier for this application */
+    clientId: string;
+    /** Optional URL of the dialog UI */
+    dialogUrl?: string;
+    /** Theme configuration for the signing dialog */
+    theme?: ThemeConfig;
+    /**
+     * Control whether the 1auth signing review iframe is hidden.
+     *
+     * Blind signing is the SDK default. Set `blind_signing: false` to opt this
+     * wallet-client factory into 1auth's visible review UI globally; individual
+     * methods still use the internal OneAuthClient defaults.
+     */
+    blind_signing?: boolean;
+    /** When true, operate on testnet chains only. Default: false */
+    testnets?: boolean;
+    /** Chain configuration */
+    chain: Chain;
+    /** Transport (e.g., http(), webSocket()) */
+    transport: Transport;
+    /** Wait for a transaction hash before resolving send calls. */
+    waitForHash?: boolean;
+    /** Maximum time to wait for a transaction hash in ms. */
+    hashTimeoutMs?: number;
+    /** Poll interval for transaction hash in ms. */
+    hashIntervalMs?: number;
+    /** Sponsorship configuration for app-sponsored intents */
+    sponsorship?: SponsorshipConfig;
+}
+/**
+ * A single call in a batch transaction
+ */
+interface TransactionCall {
+    /** Target contract address */
+    to: Address;
+    /** Calldata to send */
+    data?: Hex;
+    /** Value in wei to send */
+    value?: bigint;
+    /** Optional label for the transaction review UI (e.g., "Swap ETH for USDC") */
+    label?: string;
+    /** Optional sublabel for additional context (e.g., "1 ETH → 2,500 USDC") */
+    sublabel?: string;
+    /**
+     * Optional icon shown in the sign dialog's action card. Falls back to the
+     * built-in token icon if 1auth can resolve one for this call. SVG / square
+     * PNG URL, or a `data:image/svg+xml,...` URL.
+     */
+    icon?: string;
+    /**
+     * Optional ABI for unverified human-readable decoding of `data` in the
+     * sign dialog. App-supplied — rendered with an "Unverified" badge.
+     * Decoding is best-effort; failures are silently dropped.
+     */
+    abi?: readonly unknown[];
+}
+/**
+ * Parameters for sendCalls (batched transactions)
+ */
+interface SendCallsParams {
+    /** Array of calls to execute */
+    calls: TransactionCall[];
+    /** Optional chain id override */
+    chainId?: number;
+    /** Optional token requests for orchestrator output (what tokens/amounts to deliver) */
+    tokenRequests?: {
+        token: string;
+        amount: bigint;
+    }[];
+    /** Constrain which tokens the orchestrator can use as input/payment */
+    sourceAssets?: string[];
+    /** Which chain to look for source assets on */
+    sourceChainId?: number;
+}
+
+/**
+ * Encode a WebAuthn signature for ERC-1271 verification on-chain
+ *
+ * @param sig - The WebAuthn signature from the passkey
+ * @returns ABI-encoded signature bytes
+ */
+declare function encodeWebAuthnSignature(sig: WebAuthnSignature): Hex;
+/**
+ * Hash an array of transaction calls for signing
+ *
+ * @param calls - Array of transaction calls
+ * @returns keccak256 hash of the encoded calls
+ */
+declare function hashCalls(calls: TransactionCall[]): Hex;
+
+/**
+ * The EIP-191 prefix used for personal message signing.
+ * This is the standard Ethereum message prefix for `personal_sign`.
+ */
+declare const ETHEREUM_MESSAGE_PREFIX = "\u0019Ethereum Signed Message:\n";
+/**
+ * Hash a message with the EIP-191 Ethereum prefix.
+ *
+ * This is the same hashing function used by the passkey sign dialog.
+ * Use this to verify that the `signedHash` returned from `signMessage()`
+ * matches your original message.
+ *
+ * Format: keccak256("\x19Ethereum Signed Message:\n" + len + message)
+ *
+ * @example
+ * ```typescript
+ * const message = "Sign in to MyApp\nTimestamp: 1234567890";
+ * const result = await client.signMessage({ username: 'alice', message });
+ *
+ * // Verify the hash matches
+ * const expectedHash = hashMessage(message);
+ * if (result.signedHash === expectedHash) {
+ *   console.log('Hash matches - signature is for this message');
+ * }
+ * ```
+ */
+declare function hashMessage(message: string): `0x${string}`;
+/**
+ * Verify that a signedHash matches the expected message.
+ *
+ * This is a convenience wrapper around `hashMessage()` that returns
+ * a boolean. For full cryptographic verification of the P256 signature,
+ * use on-chain verification via the WebAuthn.sol contract.
+ *
+ * @example
+ * ```typescript
+ * const result = await client.signMessage({ username: 'alice', message });
+ *
+ * if (result.success && verifyMessageHash(message, result.signedHash)) {
+ *   // The signature is for this exact message
+ *   // For full verification, verify the P256 signature on-chain or server-side
+ * }
+ * ```
+ */
+declare function verifyMessageHash(message: string, signedHash: string | undefined): boolean;
+
+export { ETHEREUM_MESSAGE_PREFIX as E, type PasskeyWalletClientConfig as P, type SendCallsParams as S, type TransactionCall as T, hashMessage as a, encodeWebAuthnSignature as e, hashCalls as h, verifyMessageHash as v };

package/dist/wagmi.d.mts

@@ -1,6 +1,9 @@
 import * as _wagmi_core from '@wagmi/core';
-import { O as OneAuthProvider } from './provider-CDl9wYEc.mjs';
-import { O as OneAuthClient } from './client-BrMrhetG.mjs';
+import { O as OneAuthProvider } from './provider-IvYXPMpk.mjs';
+import { O as OneAuthClient } from './client-F4DnFM8d.mjs';
+import './types-U_dwxbtS.mjs';
+import 'viem';
+import '@rhinestone/sdk';
 
 type OneAuthConnectorOptions = {
     client: OneAuthClient;

package/dist/wagmi.d.ts

@@ -1,6 +1,9 @@
 import * as _wagmi_core from '@wagmi/core';
-import { O as OneAuthProvider } from './provider-Dgv533YQ.js';
-import { O as OneAuthClient } from './client-BrMrhetG.js';
+import { O as OneAuthProvider } from './provider-Cd7Ip5L-.js';
+import { O as OneAuthClient } from './client-B_CzDa_I.js';
+import './types-U_dwxbtS.js';
+import 'viem';
+import '@rhinestone/sdk';
 
 type OneAuthConnectorOptions = {
     client: OneAuthClient;

package/dist/wagmi.js

@@ -42,7 +42,7 @@ var import_viem3 = require("viem");
 // src/registry.ts
 var import_viem = require("viem");
 var viemChains = __toESM(require("viem/chains"));
-var import_sdk = require("@rhinestone/sdk");
+var import_shared_configs = require("@rhinestone/shared-configs");
 var env = typeof process !== "undefined" ? process.env : {};
 var VIEM_CHAIN_BY_ID = /* @__PURE__ */ new Map();
 for (const value of Object.values(viemChains)) {
@@ -53,9 +53,11 @@ for (const value of Object.values(viemChains)) {
     VIEM_CHAIN_BY_ID.set(chain.id, chain);
   }
 }
-var SUPPORTED_CHAIN_IDS = new Set(
-  (0, import_sdk.getAllSupportedChainsAndTokens)().map((entry) => entry.chainId)
-);
+function isEvmRegistryEntry(entry) {
+  return entry?.vmType === "evm";
+}
+var REGISTRY_CHAIN_IDS = Object.entries(import_shared_configs.chainRegistry).filter(([, entry]) => isEvmRegistryEntry(entry)).map(([id]) => Number(id));
+var SUPPORTED_CHAIN_IDS = new Set(REGISTRY_CHAIN_IDS);
 function parseBool(value) {
   if (value === "true" || value === "1") return true;
   if (value === "false" || value === "0") return false;
@@ -80,7 +82,7 @@ function applyChainFilters(chainIds, options) {
   return filtered;
 }
 function getSupportedChainIds(options) {
-  return applyChainFilters(Array.from(SUPPORTED_CHAIN_IDS), options);
+  return applyChainFilters(REGISTRY_CHAIN_IDS, options);
 }
 function getChainById(chainId) {
   if (!SUPPORTED_CHAIN_IDS.has(chainId)) {
@@ -186,29 +188,20 @@ function createOneAuthProvider(options) {
     if (stored) {
       return [stored.address];
     }
-    const connectResult = await client.connectWithModal();
-    let username;
-    let address;
-    if (connectResult.success) {
-      username = connectResult.user?.username;
-      address = connectResult.user?.address;
-    } else if (connectResult.action === "switch") {
-      const authResult = await client.authWithModal();
-      if (!authResult.success) {
-        throw new Error(authResult.error?.message || "Authentication failed");
-      }
-      username = authResult.user?.username;
-      address = authResult.user?.address;
-    } else {
-      throw new Error(connectResult.error?.message || "Connection cancelled");
+    const authResult = await client.authWithModal();
+    if (!authResult.success) {
+      throw new Error(authResult.error?.message || "Authentication failed");
     }
+    const username = authResult.user?.username;
+    let address = authResult.user?.address;
+    const signerType = authResult.signerType;
     if (!address && username) {
       address = await resolveAccountAddress(username);
     }
     if (!address) {
       throw new Error("No account address available");
     }
-    setStoredUser({ username, address });
+    setStoredUser({ username, address, signerType });
     emit("accountsChanged", [address]);
     emit("connect", { chainId: (0, import_viem3.numberToHex)(chainId) });
     return [address];
@@ -228,6 +221,22 @@ function createOneAuthProvider(options) {
     const user = getStoredUser();
     return user || { address };
   };
+  const getAssetsAccountAddress = (assetsParams) => {
+    const raw = Array.isArray(assetsParams) ? assetsParams[0] : assetsParams;
+    if (typeof raw === "string" && raw.trim()) return raw.trim();
+    if (!raw || typeof raw !== "object") return void 0;
+    const request2 = raw;
+    const candidates = [
+      request2.accountAddress,
+      request2.address
+    ];
+    for (const candidate of candidates) {
+      if (typeof candidate === "string" && candidate.trim()) {
+        return candidate.trim();
+      }
+    }
+    return void 0;
+  };
   const parseChainId = (value) => {
     if (typeof value === "number") return value;
     if (typeof value === "string") {
@@ -257,7 +266,9 @@ function createOneAuthProvider(options) {
         data: c.data || "0x",
         value: normalizeValue(c.value) || "0",
         label: c.label,
-        sublabel: c.sublabel
+        sublabel: c.sublabel,
+        icon: c.icon,
+        abi: c.abi
       };
     });
   };
@@ -279,13 +290,36 @@ function createOneAuthProvider(options) {
       return value;
     }
   };
+  const forwardToWallet = async (method, params, expectedAddress) => {
+    const result = await client.requestWithWallet({
+      method,
+      params,
+      expectedAddress
+    });
+    if (!result.success) {
+      const err = new Error(result.error.message);
+      err.code = result.error.code;
+      throw err;
+    }
+    return result.result;
+  };
+  const EOA_FORWARDED_METHODS = /* @__PURE__ */ new Set([
+    "personal_sign",
+    "eth_sign",
+    "eth_signTypedData",
+    "eth_signTypedData_v3",
+    "eth_signTypedData_v4",
+    "eth_sendTransaction",
+    "wallet_sendCalls",
+    "wallet_getCallsStatus"
+  ]);
   const signMessage = async (message) => {
     const user = await ensureUser();
     if (!user.username && !user.address) {
       throw new Error("Username or address required for signing.");
     }
     const result = await client.signMessage({
-      username: user.username,
+      username: user.username || void 0,
       accountAddress: user.address,
       message
     });
@@ -301,7 +335,7 @@ function createOneAuthProvider(options) {
     }
     const data = typeof typedData === "string" ? JSON.parse(typedData) : typedData;
     const result = await client.signTypedData({
-      username: user.username,
+      username: user.username || void 0,
       accountAddress: user.address,
       domain: data.domain,
       types: data.types,
@@ -321,13 +355,12 @@ function createOneAuthProvider(options) {
     tokenRequests: payload.tokenRequests
   });
   const sendIntent = async (payload) => {
-    const closeOn = options.closeOn ?? (options.waitForHash ?? true ? "completed" : "preconfirmed");
     const intentPayload = resolveIntentPayload(payload);
     const result = await client.sendIntent({
       ...intentPayload,
       tokenRequests: payload.tokenRequests,
       sourceChainId: payload.sourceChainId,
-      closeOn,
+      closeOn: options.closeOn,
       waitForHash: options.waitForHash ?? true,
       hashTimeoutMs: options.hashTimeoutMs,
       hashIntervalMs: options.hashIntervalMs
@@ -337,7 +370,70 @@ function createOneAuthProvider(options) {
     }
     return result.intentId;
   };
+  const accountMismatchError = () => {
+    const err = new Error(
+      "Requested signer does not match the active wallet connection."
+    );
+    err.code = "ACCOUNT_MISMATCH";
+    return err;
+  };
+  const sameAddress = (a, b) => typeof a === "string" && a.toLowerCase() === b.toLowerCase();
+  const injectEoaSigner = (method, params, address) => {
+    const list = Array.isArray(params) ? params.slice() : params;
+    if (!Array.isArray(list)) return params;
+    if (method === "eth_sendTransaction") {
+      const first = list[0] || {};
+      if (first.from !== void 0 && !sameAddress(first.from, address)) {
+        throw accountMismatchError();
+      }
+      list[0] = { ...first, from: address };
+      return list;
+    }
+    if (method === "wallet_sendCalls") {
+      const first = list[0] || {};
+      if (first.from !== void 0 && !sameAddress(first.from, address)) {
+        throw accountMismatchError();
+      }
+      const calls = first.calls;
+      if (Array.isArray(calls)) {
+        for (const call of calls) {
+          if (!call || typeof call !== "object") continue;
+          const callFrom = call.from;
+          if (callFrom !== void 0 && !sameAddress(callFrom, address)) {
+            throw accountMismatchError();
+          }
+        }
+      }
+      list[0] = { ...first, from: address };
+      return list;
+    }
+    if (method === "personal_sign") {
+      if (list[1] !== void 0 && !sameAddress(list[1], address)) {
+        throw accountMismatchError();
+      }
+      if (list[0] && list[1] === void 0) list[1] = address;
+      return list;
+    }
+    if (method === "eth_sign" || method === "eth_signTypedData" || method === "eth_signTypedData_v3" || method === "eth_signTypedData_v4") {
+      if (list[0] !== void 0 && !sameAddress(list[0], address)) {
+        throw accountMismatchError();
+      }
+      if (list[0] === void 0 && list[1] !== void 0) list[0] = address;
+      return list;
+    }
+    return list;
+  };
   const request = async ({ method, params }) => {
+    if (EOA_FORWARDED_METHODS.has(method)) {
+      const user = await ensureUser();
+      if (user.signerType === "eoa") {
+        return forwardToWallet(
+          method,
+          injectEoaSigner(method, params, user.address),
+          user.address
+        );
+      }
+    }
     switch (method) {
       case "eth_chainId":
         return (0, import_viem3.numberToHex)(chainId);
@@ -358,6 +454,10 @@ function createOneAuthProvider(options) {
         if (!next) {
           throw new Error("Invalid chainId");
         }
+        const stored = getStoredUser();
+        if (stored?.signerType === "eoa") {
+          await forwardToWallet(method, params, stored.address);
+        }
         chainId = next;
         emit("chainChanged", (0, import_viem3.numberToHex)(chainId));
         return null;
@@ -391,7 +491,7 @@ function createOneAuthProvider(options) {
         const tokenRequests = normalizeTokenRequests(tx.tokenRequests);
         const txSourceChainId = parseChainId(tx.sourceChainId);
         return sendIntent({
-          username: user.username,
+          username: user.username || void 0,
           accountAddress: user.address,
           targetChain,
           calls,
@@ -409,7 +509,7 @@ function createOneAuthProvider(options) {
         const sourceChainId = parseChainId(payload.sourceChainId);
         if (!calls.length) throw new Error("No calls provided");
         return sendIntent({
-          username: user.username,
+          username: user.username || void 0,
           accountAddress: user.address,
           targetChain,
           calls,
@@ -418,6 +518,10 @@ function createOneAuthProvider(options) {
         });
       }
       case "wallet_getCapabilities": {
+        const stored = getStoredUser();
+        if (stored?.signerType === "eoa") {
+          return {};
+        }
         const paramList = Array.isArray(params) ? params : [];
         const requestedChains = paramList[1];
         const chainIds = getSupportedChainIds();
@@ -436,22 +540,13 @@ function createOneAuthProvider(options) {
         return capabilities;
       }
       case "wallet_getAssets": {
-        const user = await ensureUser();
-        if (!user.username) {
-          throw new Error("Username required to fetch assets. Set a username first.");
-        }
-        const clientId = client.getClientId();
-        const response = await fetch(
-          `${client.getProviderUrl()}/api/users/${encodeURIComponent(user.username)}/portfolio`,
-          {
-            headers: clientId ? { "x-client-id": clientId } : {}
-          }
-        );
-        if (!response.ok) {
-          const data = await response.json().catch(() => ({}));
-          throw new Error(data.error || "Failed to get assets");
+        const explicitAccountAddress = getAssetsAccountAddress(params);
+        const user = explicitAccountAddress ? null : await ensureUser();
+        const accountAddress = explicitAccountAddress || user?.address;
+        if (!accountAddress) {
+          throw new Error("wallet_getAssets requires accountAddress or a connected account");
         }
-        return response.json();
+        return client.getAssets({ accountAddress });
       }
       case "wallet_getCallsStatus": {
         const paramList = Array.isArray(params) ? params : [];