@silencelaboratories/walletprovider-sdk 0.0.10 → 0.2.0

package/README.md

@@ -10,8 +10,8 @@ In order to run it execute the following:
 1. Build the library
 
 ```
-bun install
-bun run build
+npm install
+npm run build
 ```
 
 2. Run the demo
@@ -49,24 +49,30 @@ For description of classes, interfaces, types, please refer to [documentation](.
 ## Authentication
 
 
-Users authenticate using an EOA wallet during **key generation** and register an ephemeral signing key pair and associates it with their identity.
+Users authenticate using **EOA wallet** or **Passkey** during **key generation** and register an ephemeral signing key pair and associates it with their identity.
 
 Frontend can later use the ephemeral signing key pair to authorize **signing requests** for duration of the session without the need for repeated user interaction, providing a seamless and secure authentication mechanism.
 
-We use [EOAAuth](./docs/walletprovider-sdk.eoaauth.md) to authenticate the user **during keygen**. The `EOAAuth` object is created with the user's wallet address, ephemeral public key, and lifetime of the key in seconds.
+Key generation:
+- [EOAAuth](./docs/walletprovider-sdk.eoaauth.md) to authenticate the user **during keygen**. The `EOAAuth` object is created with the user's wallet address.
+
+- [PasskeyAuth](./docs/walletprovider-sdk.passkeyauth.md) to authenticate the user **during keygen**. The `PasskeyAuth` object is created with the [PasskeyUser](./docs/walletprovider-sdk.passkeyuser.md), [RelyingPartyConfig](./docs/walletprovider-sdk.relyingpartyconfig.md).
+
+- The ephemeral public key and lifetime of the key in seconds will be associated with both `EOAAuth` and `PasskeyAuth` objects.
 
-We then use [EphAuth](./docs/walletprovider-sdk.ephauth.md) to authenticate the user **during signing**. The `EphAuth` object is created with the user's wallet address and ephemeral keypair.
+Signature generation:
+- [EphAuth](./docs/walletprovider-sdk.ephauth.md) to authenticate the user **during signing**. The `EphAuth` object is created with the ephemeral keypair.
 
 ## Keygen
 
 
 The full working example is in the [demo](https://github.com/silence-laboratories/walletprovider-sdk/blob/a75d7a009fb4d3629d353d53f8c27c34190c9035/demo/src/routes/%2Bpage.svelte#L89).
-The core object to use is the [NetworkSigner](./docs/walletprovider-sdk.networksigner.md).
+The core object to use is the [NetworkSigner](./docs/walletprovider-sdk.networksigner.md). It allows to generate keys and do signatures. 
 
-It allows to generate keys and do signatures. In order to create, you need two other components. The [WalletProviderServiceClient](./docs/walletprovider-sdk.walletproviderserviceclient.md) that connects to the Backend part of the SDK, and the authentication module. Currently we provide EOA authentication via [EOAAuth](./docs/walletprovider-sdk.eoaauth.md).
+In order to create your keys, you need two other components. The [WalletProviderServiceClient](./docs/walletprovider-sdk.walletproviderserviceclient.md) that connects to the Backend part of the SDK, and the **authentication module**. 
 
-
-Let's create the `NetworkSigner`
+### Authenticate with EOA wallet
+We provide EOA authentication via [EOAAuth](./docs/walletprovider-sdk.eoaauth.md) module. Let's create the `NetworkSigner` with associated `EOAAuth` object.
 
 ```ts
 // Generate ephemeral secret key esk
@@ -74,12 +80,14 @@ const sk = ed.utils.randomPrivateKey();
 ephSK = sk;
 // Derive public part epk from esk
 ephPK = await ed.getPublicKeyAsync(sk);
-
+// Arbitrary ID to identify the ephemeral key
+const ephId = uuidv4();
 // Create a client that connects to the backend service
 const wpClient = await createWalletProviderService(clusterConfig);
 
 // Create EOA authenticator, signature will include epk
 const eoaAuth = new EOAAuth(
+  ephId,
   accountsFromBrowserWallet[0],
   new BrowserWallet(),
   ephPK,
@@ -113,9 +121,58 @@ const permissions = {
 let resp: KeygenResponse = await sdk.authenticateAndCreateKey(JSON.stringify(permissions));
 ```
 
-Calling this method will cause to the Browser Wallet window to pop up, requesting the User to sign the request. After execution [KeygenResponse](./docs/walletprovider-sdk.keygenresponse.md) is returned.
+Calling this method will cause to the Browser Wallet window to pop up, requesting the User to sign the request.
 
-The [KeygenResponse](./docs/walletprovider-sdk.keygenresponse.md) contains `keyId` and `publicKey`. The `publicKey` is the public part of the key generated by Silent Network. Use the `keyId` in subsequent calls to sign.
+The returned [KeygenResponse](./docs/walletprovider-sdk.keygenresponse.md) contains `keyId` and `publicKey`. The `publicKey` is the public part of the key generated by Silent Network. Use the `keyId` in subsequent calls to sign.
+
+The `esk` key can be later used by the frontend in subsequent signgen requests for authenticating.
+
+### Authenticate with Passkey
+We provide Passkey authentication via [PasskeyAuth](./docs/walletprovider-sdk.passkeyauth.md) module. Let's create the `NetworkSigner` with associated `PasskeyAuth` object.
+
+```ts
+// Generate ephemeral secret key esk
+const sk = ed.utils.randomPrivateKey();
+ephSK = sk;
+// Derive public part epk from esk
+ephPK = await ed.getPublicKeyAsync(sk);
+// Arbitrary ID to identify the ephemeral key
+const ephId = uuidv4();
+// Create a client that connects to the backend service
+const wpClient = await createWalletProviderService(clusterConfig);
+// Here we configure the relying party for local development
+const rpConfig: RelyingPartyConfig = {
+  rpId: 'localhost',
+  rpName: 'http://localhost:5173',
+};
+// Information about the owner of the passkey 
+const passkeyUser: PasskeyUser = {
+  id: userId,
+  displayName: 'Alice',
+  name: 'alice@gmail.com ' + userId, // For development purposes
+};
+
+// Get passkey credential id from your storage
+const credentialId = getPasskeyCredentialId();
+// Create EOA authenticator, signature will include epk
+const passkeyAuth = new PasskeyAuth(
+  rpConfig,
+  passkeyUser,
+  ephId,
+  ephPK,
+  // Lifetime of one hour
+  60 * 60,
+  // If credentialId is null, we will do passkey register, otherwise, we will do passkey auth/login
+  credentialId,
+);
+
+// Create a new signer instance
+const sdk = new NetworkSigner(wpClient, threshold, partiesNumber, passkeyAuth);
+```
+
+Now you can generate a key like in the EOA example by calling the [authenticateAndCreateKey](./docs/walletprovider-sdk.networksigner.authenticateandcreatekey.md) method. 
+
+Calling this method will prompt the browser to request Passkey User Verification. Once user verification is done, the [KeygenResponse](./docs/walletprovider-sdk.keygenresponse.md) is returned.
 
 The `esk` key can be later used by the frontend in subsequent signgen requests for authenticating.
 
@@ -125,7 +182,7 @@ The full signing example is [here](https://github.com/silence-laboratories/walle
 
 Let's create NetworkSigner for signing. Note the `EphAuth` is used to avoid user interaction when generating the signatures.
 ```ts
-const authModule = new EphAuth(accountsFromBrowserWallet[0], ephSK!);
+const authModule = new EphAuth(ephId, ephSK);
 // Create a new signer instance
 const sdk = new NetworkSigner(wpClient, threshold, partiesNumber, authModule);
 ```
@@ -135,71 +192,57 @@ Use the [NetworkSigner.authenticateAndSign](./docs/walletprovider-sdk.networksig
 
 ```ts
 let signMessage = JSON.stringify({
-  userOperation: {
-    sender: '0x8d4cb2540d993fe34c646299f1ab4af3012ff34c',
-    nonce: '0x7',
-    initCode: '',
-    callData: '0000189a...',
-    callGasLimit: '123130',
-    verificationGasLimit: '153427',
-    preVerificationGas: '66768',
-    maxFeePerGas: '',
-    maxPriorityFeePerGas: '',
-    paymasterAndData: '',
-  },
-  entryPointVersion: 'v0.6.0',
-  entryPointAddress: '0x5FF137D4b0FDCD49DcA30c7CF57E578a026d2789',
-  chainId: 80002,
-});
+    message: JSON.stringify({
+      userOperation: {
+        sender: '0x8d4cb2540d993fe34c646299f1ab4af3012ff34c',
+        nonce: '0x7',
+        initCode: '0x',
+        callData: '0000189...',
+        callGasLimit: '0x18473',
+        verificationGasLimit: '0x18473',
+        preVerificationGas: '66768',
+        maxFeePerGas: '',
+        maxPriorityFeePerGas: '',
+        paymasterAndData: '0x',
+      },
+      entryPointVersion: 'v0.6.0',
+      entryPointAddress: '0x5FF137D4b0FDCD49DcA30c7CF57E578a026d2789',
+      chainId: 80002,
+    }),
+    requestType: 'accountAbstractionTx',
+  });
 
 let resp = await sdk.authenticateAndSign(selectedKeyId, signMessage);
 ```
 
 The [SignResponse](./docs/walletprovider-sdk.signresponse.md) contains the signature `sign` and the recovery ID `recid`.
 
-# Developing the library
-
-Audience of this section are library developers.
-
-## Bun runtime is required
-
-Install bun from https://bun.sh
 
 ## Install dependencies
 
 ```bash
-bun install
+npm install
 ```
 
 ## Build
 
 ```bash
-bun run build
+npm run build
 ```
 
 The output will be in the `dist` folder.
 
-## Test
-
-Create `*.test.ts` files and run tests with:
-
-```bash
-bun run test
-# or watch test
-bun run test:watch
-```
-
 ## End to end tests
 Please refer to [README.md](./e2e-tests/README.md) for instructions how to execute them.
 
 ## Format the code
 
 ```bash
-bun run format
+npm run format
 ```
 
 ## Generate the documentation
 
 ```bash
-bun run docs
-```
+npm run docs
+```

package/dist/EOAauthentication.d.ts

@@ -1,14 +1,9 @@
 /** Externally Owned Account (EOA) atuhentication. Uses secret key stored on a wallet to sign requests.
  * The requests are presented to the user in a readable form by using TypedData (EIP712).
  */
-import { KeygenSetupOpts, SignSetupOpts } from './networkSigner.ts';
-import { type UserAuthentication } from './authentication.ts';
+import { KeygenSetupOpts } from './networkSigner';
+import { type UserAuthentication } from './authentication';
 import { type TypedDataDomain } from 'viem';
-export type EphClaim = {
-    eoa: string;
-    ephPK: string;
-    expiry: number;
-};
 export type FieldDefinition = {
     name: string;
     type: string;
@@ -50,23 +45,14 @@ export interface IBrowserWallet {
     signTypedData<T>(from: string, request: TypedData<T>): Promise<unknown>;
 }
 /** Present the request to the User using wallet UI, and ask for sign.
- * The signature is the authorization for the operation
+ * The signature is the authorization for keygen operation
  */
-export declare function authenticateUsingEOA({ setup, user_id, challenge, browserWallet, ephPK, lifetime, }: {
+export declare function authenticateUsingEOA({ setup, ephId, eoa, challenge, browserWallet, ephPK, lifetime, }: {
     setup: KeygenSetupOpts;
-    user_id: string;
+    ephId: string;
+    eoa: string;
     challenge: string;
     browserWallet: IBrowserWallet;
     ephPK: Uint8Array;
     lifetime: number;
 }): Promise<UserAuthentication>;
-/** Present the request to the User using wallet UI, and ask for sign.
- * The signature is the authorization for the operation
- */
-export declare function authenticateUsingEphKey({ setup, user_id, challenge, ephSK, ephPK, }: {
-    setup: SignSetupOpts;
-    user_id: string;
-    challenge: string;
-    ephSK: Uint8Array;
-    ephPK: Uint8Array;
-}): Promise<UserAuthentication>;

package/dist/authentication.d.ts

@@ -1,22 +1,19 @@
 import { KeygenSetupOpts, SignSetupOpts } from './networkSigner';
 import { IBrowserWallet } from './EOAauthentication';
+import { PasskeyUser, RelyingPartyConfig } from './passkeyAuthentication';
 /** Type of the request authentication
  * @alpha
  */
-export declare enum AuthMethod {
-    /** Authentication using Externally Owned Account */
-    EOA = 0,
-    /** No authentication */
-    NONE = 1
-}
 export type UserCredentials = {
     id: string;
     method: string;
     credentials: string;
+    ephId?: string;
 };
 export type UserAuthentication = {
     credentials: UserCredentials;
     signature: string;
+    passkeyCredentialId?: string;
 };
 export interface AuthModule {
     authenticate({ setup, challenge, }: {
@@ -24,46 +21,78 @@ export interface AuthModule {
         challenge: string;
     }): Promise<UserAuthentication>;
 }
-/** The `AuthModule` implementing Externally Owned Account authentication.
+/** The `EOAAuth` implementing Externally Owned Account authentication.
  * @alpha
  */
 export declare class EOAAuth implements AuthModule {
-    /** User ID, typically the ETH address that is used to do authentication */
-    userId: string;
+    /** Ephemeral id identify ephemeral key */
+    ephId: string;
     /** An interface to the wallet, like MetaMask, that is used to sign the requests */
     browserWallet: IBrowserWallet;
     /** Public key of the ephemeral key */
     ephPK: Uint8Array;
     /** Lifetime of the ephemeral key */
     lifetime: number;
-    constructor(userId: string, browserWallet: IBrowserWallet, ephPK: Uint8Array, lifetime?: number);
+    /** the ETH address that is used to do EOA authentication */
+    eoa: string;
+    constructor(ephId: string, eoa: string, browserWallet: IBrowserWallet, ephPK: Uint8Array, lifetime?: number);
     /**
      * Prepares a message to present on the Browser Wallet window and requests to sign it.
-     * @param setup - either Keygen or Sign setup options
+     * @param setup - Keygen setup options
      * @param challenge - the challenge received from the backend
      *
      * @public
      */
-    authenticate({ setup, challenge, }: {
-        setup: KeygenSetupOpts | SignSetupOpts;
+    authenticate({ setup, challenge }: {
+        setup: KeygenSetupOpts;
         challenge: string;
     }): Promise<UserAuthentication>;
 }
-/** An Ephmeral key used to locally sign the signature requests to network.
+/** The `EphAuth` module is only used for signing requests to the network.
+ * @alpha
+ * An Ephmeral key used to locally sign the signature requests to network.
  * This eph key is registered during keygen. The key is used to sign the requests without
  * asking the user to sign the request each time.
- * The auth module is only used for signing requests to the network.
  * */
 export declare class EphAuth implements AuthModule {
-    /** User ID, typically the ETH address that is used to do authentication */
-    userId: string;
+    /** Ephemeral id identify ephemeral key */
+    ephId: string;
     /** Secret key of the ephemeral keypair */
     ephSK: Uint8Array;
     /** Public key of the ephemeral keypair */
     ephPK: Uint8Array;
-    constructor(userId: string, ephSK: Uint8Array);
-    authenticate({ setup, challenge, }: {
-        setup: KeygenSetupOpts | SignSetupOpts;
+    constructor(ephId: string, ephSK: Uint8Array);
+    /**
+     * Prepares a message to present on the Browser Wallet window and requests to sign it.
+     * @param setup - Signgen setup options
+     * @param challenge - the challenge received from the backend
+     *
+     * @public
+     */
+    authenticate({ setup, challenge }: {
+        setup: SignSetupOpts;
+        challenge: string;
+    }): Promise<UserAuthentication>;
+}
+/** The `AuthModule` implementing Passkey authentication.
+ * @alpha
+ */
+export declare class PasskeyAuth implements AuthModule {
+    /** Replying party object. Read more: https://developer.mozilla.org/en-US/docs/Web/API/PublicKeyCredentialCreationOptions#rp */
+    rpConfig: RelyingPartyConfig;
+    /** Passkey user information. Read more: https://developer.mozilla.org/en-US/docs/Web/API/PublicKeyCredentialCreationOptions#user */
+    user: PasskeyUser;
+    /** Public key of the ephemeral key */
+    ephPK: Uint8Array;
+    /** Lifetime of the ephemeral key */
+    lifetime: number;
+    /** Ephemeral id identify ephemeral key */
+    ephId: string;
+    /** Credential id that user and authenticator acknowledges about */
+    credentialId: string | null;
+    constructor(rpConfig: RelyingPartyConfig, user: PasskeyUser, ephId: string, ephPK: Uint8Array, lifetime: number | undefined, credentialId: string | null);
+    authenticate({ setup, challenge }: {
+        setup: KeygenSetupOpts;
         challenge: string;
     }): Promise<UserAuthentication>;
 }

package/dist/encoding.d.ts

@@ -1,4 +1,3 @@
-export declare const decodeHex: (s: string) => Uint8Array;
-export declare const encodeHex: (a: Uint8Array) => string;
 export declare const decodeBase64: (b64: string) => Uint8Array;
 export declare const encodeBase64: (b: Uint8Array) => string;
+export declare const arrayBufferToBase64Url: (a: ArrayBuffer) => string;

package/dist/ephemeralAuthentication.d.ts

@@ -0,0 +1,16 @@
+import { UserAuthentication } from './authentication';
+import { SignSetupOpts } from './networkSigner';
+export type EphClaim = {
+    ephPK: string;
+    expiry: number;
+};
+/** Locally sign the signature requests to network without asking the user, the ephSK is registered during keygen.
+ * The signature is the authorization for signgen operation
+ */
+export declare function authenticateUsingEphKey({ setup, ephId, challenge, ephSK, ephPK, }: {
+    setup: SignSetupOpts;
+    ephId: string;
+    challenge: string;
+    ephSK: Uint8Array;
+    ephPK: Uint8Array;
+}): Promise<UserAuthentication>;

package/dist/index.cjs.js

@@ -0,0 +1 @@
+"use strict";var H=Object.create;var y=Object.defineProperty;var F=Object.getOwnPropertyDescriptor;var z=Object.getOwnPropertyNames;var L=Object.getPrototypeOf,V=Object.prototype.hasOwnProperty;var G=(t,e,n)=>e in t?y(t,e,{enumerable:!0,configurable:!0,writable:!0,value:n}):t[e]=n;var Y=(t,e)=>{for(var n in e)y(t,n,{get:e[n],enumerable:!0})},v=(t,e,n,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of z(e))!V.call(t,s)&&s!==n&&y(t,s,{get:()=>e[s],enumerable:!(r=F(e,s))||r.enumerable});return t};var j=(t,e,n)=>(n=t!=null?H(L(t)):{},v(e||!t||!t.__esModule?y(n,"default",{value:t,enumerable:!0}):n,t)),Q=t=>v(y({},"__esModule",{value:!0}),t);var a=(t,e,n)=>G(t,typeof e!="symbol"?e+"":e,n);var se={};Y(se,{EOAAuth:()=>w,EphAuth:()=>A,NetworkSigner:()=>P,PasskeyAuth:()=>I,WalletProviderServiceClient:()=>K,computeAddress:()=>M});module.exports=Q(se);var k=require("viem");var X=1,Z=2,f=class{constructor({t:e,n,ephPK:r,key_label:s,permissions:i}){a(this,"t");a(this,"n");a(this,"key_label");a(this,"metadata");this.t=e,this.n=n,this.key_label=s,this.metadata=[],this.metadata.push({tag:Z,value:r}),i&&this.metadata.push({tag:X,value:i})}};function u(t){return t.message!==void 0}var P=class{constructor(e,n,r,s){a(this,"authModule");a(this,"threshold");a(this,"totalNodes");a(this,"wp_client");if(n===0)throw new Error("Threshold cannot be 0");this.threshold=n,this.totalNodes=r,this.authModule=s,this.wp_client=e}async authenticateAndCreateKey(e,n){try{let r=new f({t:this.threshold,n:this.totalNodes,permissions:n,ephPK:(0,k.toHex)(e)}),s=p=>this.authModule.authenticate({setup:r,challenge:p}),i=await this.wp_client.startKeygen({setup:r,signer:s});return console.log("Keygen response:",i),i}catch(r){throw console.error(r),r}}async authenticateAndSign(e,n){let r={t:this.threshold,key_id:e,message:n},s=p=>this.authModule.authenticate({setup:r,challenge:p}),i=await this.wp_client.startSigngen({setup:r,signer:s});return console.log("Sign response:",i),i}};var b=require("viem"),ee=[{name:"tag",type:"uint16"},{name:"value",type:"string"}],te={Request:[{name:"setup",type:"KeygenSetupOpts"},{name:"challenge",type:"string"}],KeygenSetupOpts:[{name:"t",type:"uint32"},{name:"n",type:"uint32"},{name:"metadata",type:"TaggedValue[]"}],TaggedValue:ee},ne={name:"SilentShard authentication",version:"0.1.0"},ie=[{name:"name",type:"string"},{name:"version",type:"string"}];function re(t,e,n){console.log("EPHKEY",n);let r=new f({t:t.t,n:t.n,key_label:t.key_label,permissions:void 0,ephPK:(0,b.toHex)(n)});return{types:{EIP712Domain:ie,...te},domain:ne,primaryType:"Request",message:{setup:r,challenge:e}}}async function R({setup:t,ephId:e,eoa:n,challenge:r,browserWallet:s,ephPK:i,lifetime:p}){if(u(t))throw new Error("EOA auth cannot be used for Sign requests, please use EphAuth instead");let c=re(t,r,i),o=await s.signTypedData(n,c);console.log("User signed a request",o);let l={ephPK:(0,b.toHex)(i),expiry:Math.floor(Date.now()/1e3)+p};return{credentials:{credentials:JSON.stringify(l),method:"eoa",id:n,ephId:e},signature:o}}var B=require("@noble/curves/ed25519");var T=require("js-base64");var E=t=>btoa(String.fromCodePoint.apply(null,Array.from(t))),g=t=>T.Base64.fromUint8Array(new Uint8Array(t),!0);var O=require("js-base64"),d=require("viem");async function N({user:t,ephId:e,challenge:n,rpConfig:r,ephPK:s,lifetime:i}){let p=(0,d.hexToBytes)(`0x${n}`,{size:32}),c={publicKey:{authenticatorSelection:{authenticatorAttachment:void 0,residentKey:"preferred",requireResidentKey:!1,userVerification:"required"},challenge:p,excludeCredentials:[],pubKeyCredParams:[{type:"public-key",alg:-7},{type:"public-key",alg:-257}],rp:{name:r.rpName,id:r.rpId},user:{...t,id:O.Base64.toUint8Array(t.id)}}},o=await navigator.credentials.create(c);if(o===null)throw new Error("No credential returned");let l=g(o.response.attestationObject),S={rawCredential:JSON.stringify({authenticatorAttachment:o.authenticatorAttachment,id:o.id,rawId:g(o.rawId),response:{attestationObject:l,clientDataJSON:g(o.response.clientDataJSON)},type:o.type}),origin:r.rpName,rpId:r.rpId},x={ephPK:(0,d.toHex)(s),expiry:Math.floor(Date.now()/1e3)+i};return{credentials:{credentials:JSON.stringify(x),method:"passkey",id:o.id,ephId:e},signature:JSON.stringify(S),passkeyCredentialId:o.id}}async function D({ephId:t,challenge:e,credentialId:n,rpConfig:r,ephPK:s,lifetime:i}){let p=(0,d.hexToBytes)(`0x${e}`,{size:32}),c=[{type:"public-key",id:O.Base64.toUint8Array(n)}],o={publicKey:{userVerification:"required",challenge:p,allowCredentials:c}},l=await navigator.credentials.get(o);if(l===null)throw new Error("Failed to get navigator credentials");let m=l.response,S=m.userHandle;if(S===null)throw new Error("User handle cannot be null");let x=g(m.signature),_={rawCredential:JSON.stringify({authenticatorAttachment:l.authenticatorAttachment,id:l.id,rawId:g(l.rawId),response:{authenticatorData:g(m.authenticatorData),clientDataJSON:g(m.clientDataJSON),signature:x,userHandle:g(S)},type:l.type}),origin:r.rpName,rpId:r.rpId,credentialId:n},$={ephPK:(0,d.toHex)(s),expiry:Math.floor(Date.now()/1e3)+i};return{credentials:{credentials:JSON.stringify($),method:"passkey",id:l.id,ephId:t},signature:JSON.stringify(_),passkeyCredentialId:l.id}}var U=require("viem"),J=require("@noble/curves/ed25519");async function W({setup:t,ephId:e,challenge:n,ephSK:r,ephPK:s}){let i={setup:t,challenge:n},p=new TextEncoder,c=(0,U.toHex)(J.ed25519.sign(p.encode(JSON.stringify(i)),r));console.log("AUTH SIGNATURE by eph key",c);let o={ephPK:(0,U.toHex)(s),expiry:0};return{credentials:{credentials:JSON.stringify(o),method:"ephemeral",id:e},signature:c}}var w=class{constructor(e,n,r,s,i=3600){a(this,"ephId");a(this,"browserWallet");a(this,"ephPK");a(this,"lifetime");a(this,"eoa");this.ephId=e,this.browserWallet=r,this.ephPK=s,this.lifetime=i,this.eoa=n}async authenticate({setup:e,challenge:n}){return await R({setup:e,ephId:this.ephId,eoa:this.eoa,challenge:n,browserWallet:this.browserWallet,ephPK:this.ephPK,lifetime:this.lifetime})}},A=class{constructor(e,n){a(this,"ephId");a(this,"ephSK");a(this,"ephPK");this.ephId=e,this.ephSK=n,this.ephPK=B.ed25519.getPublicKey(this.ephSK)}async authenticate({setup:e,challenge:n}){return await W({setup:e,ephId:this.ephId,challenge:n,ephSK:this.ephSK,ephPK:this.ephPK})}},I=class{constructor(e,n,r,s,i=3600,p){a(this,"rpConfig");a(this,"user");a(this,"ephPK");a(this,"lifetime");a(this,"ephId");a(this,"credentialId");this.rpConfig=e,this.user=n,this.ephPK=s,this.lifetime=i,this.ephId=r,this.credentialId=p}async authenticate({setup:e,challenge:n}){if(u(e))throw new Error("Passkey auth cannot be used for Sign requests, please use EphAuth instead");return this.credentialId?await D({ephId:this.ephId,credentialId:this.credentialId,challenge:n,rpConfig:this.rpConfig,ephPK:this.ephPK,lifetime:this.lifetime}):await N({user:this.user,ephId:this.ephId,challenge:n,rpConfig:this.rpConfig,ephPK:this.ephPK,lifetime:this.lifetime})}};var K=class{constructor(e){a(this,"walletProviderId");a(this,"walletProviderUrl");a(this,"passkeyCredentialId");this.walletProviderId=e.walletProviderId,this.walletProviderUrl=e.walletProviderUrl}getWalletId(){return this.walletProviderId}async startKeygen({setup:e,signer:n}){return this.connect(e,n).then(r=>{let s=r.split(":"),i=s[0].split("=")[1];return{publicKey:s[1].split("=")[1],keyId:i,passkeyCredentialId:this.passkeyCredentialId}})}async startSigngen({setup:e,signer:n}){return this.connect(e,n).then(r=>{let s=r.split(":"),i=s[0].split("=")[1],p=s[1].split("=")[1];return{sign:i,recid:parseInt(p)}})}connect(e,n){return new Promise((r,s)=>{let i=0,p;u(e)?(p="signgen",e.message=E(new TextEncoder().encode(e.message))):p="keygen";let c=new WebSocket(`${this.walletProviderUrl}/${p}`);c.addEventListener("open",o=>{switch(console.log(`Connection opened in state ${i} with event ${JSON.stringify(o,void 0,"	")}`),i){case 0:i=1,console.log(`Sending setup: ${JSON.stringify(e)}`),c.send(JSON.stringify(e));break;case 1:case 2:i=3,s("Incorrect protocol state");break;case 3:break}}),c.addEventListener("message",async o=>{switch(console.log(`Connection message in state ${i} with event ${JSON.stringify(o,void 0,"	")}`),i){case 0:i=3,s("Incorrect protocol state");break;case 1:{i=2;let l=await n(o.data);l.credentials.method==="passkey"&&(this.passkeyCredentialId=l.passkeyCredentialId),console.log(`Sending signature: ${JSON.stringify(l)}`),c.send(JSON.stringify(l));break}case 2:i=3,c.close(),r(o.data);break;case 3:break}}),c.addEventListener("error",o=>{console.log(`Connection error in state ${i} with event ${JSON.stringify(o,void 0,"	")}`),i!=3&&(i=3,s("Incorrect protocol state"))}),c.addEventListener("close",o=>{console.log(`Connection closed in state ${i} with event ${JSON.stringify(o,void 0,"	")}`),i!=3&&(i=3,s("Incorrect protocol state"))})})}};var h=j(require("viem")),C=require("viem/accounts"),q=require("@noble/curves/secp256k1");function M(t){if(t.startsWith("0x")&&(t=t.slice(2)),t.startsWith("04"))return(0,C.publicKeyToAddress)(`0x${t} `);if(t.startsWith("02")||t.startsWith("03")){let e=q.secp256k1.ProjectivePoint.fromHex(t).toHex(!1);return(0,C.publicKeyToAddress)(`0x${e}`)}else throw new Error("Invalid public key")}0&&(module.exports={EOAAuth,EphAuth,NetworkSigner,PasskeyAuth,WalletProviderServiceClient,computeAddress});

package/dist/index.d.ts

@@ -1,6 +1,8 @@
-export { NetworkSigner, SignResponse, KeygenResponse } from './networkSigner.ts';
-export { AuthMethod, EOAAuth, EphAuth } from './authentication.ts';
-export type { IBrowserWallet, TypedData } from './EOAauthentication.ts';
-export type { ClientConfig, IWalletProviderServiceClient } from './walletProviderServiceClientInterface.ts';
-export { WalletProviderServiceClient } from './walletProviderServiceClient.ts';
-export { computeAddress } from './viemSigner.ts';
+export type { SignResponse, KeygenResponse } from './networkSigner';
+export type { IBrowserWallet, TypedData } from './EOAauthentication';
+export type { ClientConfig, IWalletProviderServiceClient } from './walletProviderServiceClientInterface';
+export type { PasskeyUser, RelyingPartyConfig } from './passkeyAuthentication';
+export { NetworkSigner } from './networkSigner';
+export { EOAAuth, EphAuth, PasskeyAuth } from './authentication';
+export { WalletProviderServiceClient } from './walletProviderServiceClient';
+export { computeAddress } from './viemSigner';

package/dist/index.esm.js

@@ -0,0 +1 @@
+var M=Object.defineProperty,_=Object.defineProperties;var $=Object.getOwnPropertyDescriptors;var b=Object.getOwnPropertySymbols;var H=Object.prototype.hasOwnProperty,F=Object.prototype.propertyIsEnumerable;var P=(n,e,t)=>e in n?M(n,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):n[e]=t,m=(n,e)=>{for(var t in e||(e={}))H.call(e,t)&&P(n,t,e[t]);if(b)for(var t of b(e))F.call(e,t)&&P(n,t,e[t]);return n},w=(n,e)=>_(n,$(e));var a=(n,e,t)=>P(n,typeof e!="symbol"?e+"":e,t);import{toHex as z}from"viem";var L=1,V=2,y=class{constructor({t:e,n:t,ephPK:r,key_label:s,permissions:i}){a(this,"t");a(this,"n");a(this,"key_label");a(this,"metadata");this.t=e,this.n=t,this.key_label=s,this.metadata=[],this.metadata.push({tag:V,value:r}),i&&this.metadata.push({tag:L,value:i})}};function u(n){return n.message!==void 0}var A=class{constructor(e,t,r,s){a(this,"authModule");a(this,"threshold");a(this,"totalNodes");a(this,"wp_client");if(t===0)throw new Error("Threshold cannot be 0");this.threshold=t,this.totalNodes=r,this.authModule=s,this.wp_client=e}async authenticateAndCreateKey(e,t){try{let r=new y({t:this.threshold,n:this.totalNodes,permissions:t,ephPK:z(e)}),s=p=>this.authModule.authenticate({setup:r,challenge:p}),i=await this.wp_client.startKeygen({setup:r,signer:s});return console.log("Keygen response:",i),i}catch(r){throw console.error(r),r}}async authenticateAndSign(e,t){let r={t:this.threshold,key_id:e,message:t},s=p=>this.authModule.authenticate({setup:r,challenge:p}),i=await this.wp_client.startSigngen({setup:r,signer:s});return console.log("Sign response:",i),i}};import{toHex as O}from"viem";var G=[{name:"tag",type:"uint16"},{name:"value",type:"string"}],Y={Request:[{name:"setup",type:"KeygenSetupOpts"},{name:"challenge",type:"string"}],KeygenSetupOpts:[{name:"t",type:"uint32"},{name:"n",type:"uint32"},{name:"metadata",type:"TaggedValue[]"}],TaggedValue:G},j={name:"SilentShard authentication",version:"0.1.0"},Q=[{name:"name",type:"string"},{name:"version",type:"string"}];function X(n,e,t){console.log("EPHKEY",t);let r=new y({t:n.t,n:n.n,key_label:n.key_label,permissions:void 0,ephPK:O(t)});return{types:m({EIP712Domain:Q},Y),domain:j,primaryType:"Request",message:{setup:r,challenge:e}}}async function U({setup:n,ephId:e,eoa:t,challenge:r,browserWallet:s,ephPK:i,lifetime:p}){if(u(n))throw new Error("EOA auth cannot be used for Sign requests, please use EphAuth instead");let c=X(n,r,i),o=await s.signTypedData(t,c);console.log("User signed a request",o);let l={ephPK:O(i),expiry:Math.floor(Date.now()/1e3)+p};return{credentials:{credentials:JSON.stringify(l),method:"eoa",id:t,ephId:e},signature:o}}import{ed25519 as te}from"@noble/curves/ed25519";import{Base64 as Z}from"js-base64";var v=n=>btoa(String.fromCodePoint.apply(null,Array.from(n))),g=n=>Z.fromUint8Array(new Uint8Array(n),!0);import{Base64 as k}from"js-base64";import{toHex as R,hexToBytes as T}from"viem";async function E({user:n,ephId:e,challenge:t,rpConfig:r,ephPK:s,lifetime:i}){let p=T("0x".concat(t),{size:32}),c={publicKey:{authenticatorSelection:{authenticatorAttachment:void 0,residentKey:"preferred",requireResidentKey:!1,userVerification:"required"},challenge:p,excludeCredentials:[],pubKeyCredParams:[{type:"public-key",alg:-7},{type:"public-key",alg:-257}],rp:{name:r.rpName,id:r.rpId},user:w(m({},n),{id:k.toUint8Array(n.id)})}},o=await navigator.credentials.create(c);if(o===null)throw new Error("No credential returned");let l=g(o.response.attestationObject),f={rawCredential:JSON.stringify({authenticatorAttachment:o.authenticatorAttachment,id:o.id,rawId:g(o.rawId),response:{attestationObject:l,clientDataJSON:g(o.response.clientDataJSON)},type:o.type}),origin:r.rpName,rpId:r.rpId},S={ephPK:R(s),expiry:Math.floor(Date.now()/1e3)+i};return{credentials:{credentials:JSON.stringify(S),method:"passkey",id:o.id,ephId:e},signature:JSON.stringify(f),passkeyCredentialId:o.id}}async function N({ephId:n,challenge:e,credentialId:t,rpConfig:r,ephPK:s,lifetime:i}){let p=T("0x".concat(e),{size:32}),c=[{type:"public-key",id:k.toUint8Array(t)}],o={publicKey:{userVerification:"required",challenge:p,allowCredentials:c}},l=await navigator.credentials.get(o);if(l===null)throw new Error("Failed to get navigator credentials");let h=l.response,f=h.userHandle;if(f===null)throw new Error("User handle cannot be null");let S=g(h.signature),B={rawCredential:JSON.stringify({authenticatorAttachment:l.authenticatorAttachment,id:l.id,rawId:g(l.rawId),response:{authenticatorData:g(h.authenticatorData),clientDataJSON:g(h.clientDataJSON),signature:S,userHandle:g(f)},type:l.type}),origin:r.rpName,rpId:r.rpId,credentialId:t},q={ephPK:R(s),expiry:Math.floor(Date.now()/1e3)+i};return{credentials:{credentials:JSON.stringify(q),method:"passkey",id:l.id,ephId:n},signature:JSON.stringify(B),passkeyCredentialId:l.id}}import{toHex as D}from"viem";import{ed25519 as ee}from"@noble/curves/ed25519";async function J({setup:n,ephId:e,challenge:t,ephSK:r,ephPK:s}){let i={setup:n,challenge:t},p=new TextEncoder,c=D(ee.sign(p.encode(JSON.stringify(i)),r));console.log("AUTH SIGNATURE by eph key",c);let o={ephPK:D(s),expiry:0};return{credentials:{credentials:JSON.stringify(o),method:"ephemeral",id:e},signature:c}}var I=class{constructor(e,t,r,s,i=3600){a(this,"ephId");a(this,"browserWallet");a(this,"ephPK");a(this,"lifetime");a(this,"eoa");this.ephId=e,this.browserWallet=r,this.ephPK=s,this.lifetime=i,this.eoa=t}async authenticate({setup:e,challenge:t}){return await U({setup:e,ephId:this.ephId,eoa:this.eoa,challenge:t,browserWallet:this.browserWallet,ephPK:this.ephPK,lifetime:this.lifetime})}},K=class{constructor(e,t){a(this,"ephId");a(this,"ephSK");a(this,"ephPK");this.ephId=e,this.ephSK=t,this.ephPK=te.getPublicKey(this.ephSK)}async authenticate({setup:e,challenge:t}){return await J({setup:e,ephId:this.ephId,challenge:t,ephSK:this.ephSK,ephPK:this.ephPK})}},C=class{constructor(e,t,r,s,i=3600,p){a(this,"rpConfig");a(this,"user");a(this,"ephPK");a(this,"lifetime");a(this,"ephId");a(this,"credentialId");this.rpConfig=e,this.user=t,this.ephPK=s,this.lifetime=i,this.ephId=r,this.credentialId=p}async authenticate({setup:e,challenge:t}){if(u(e))throw new Error("Passkey auth cannot be used for Sign requests, please use EphAuth instead");return this.credentialId?await N({ephId:this.ephId,credentialId:this.credentialId,challenge:t,rpConfig:this.rpConfig,ephPK:this.ephPK,lifetime:this.lifetime}):await E({user:this.user,ephId:this.ephId,challenge:t,rpConfig:this.rpConfig,ephPK:this.ephPK,lifetime:this.lifetime})}};var x=class{constructor(e){a(this,"walletProviderId");a(this,"walletProviderUrl");a(this,"passkeyCredentialId");this.walletProviderId=e.walletProviderId,this.walletProviderUrl=e.walletProviderUrl}getWalletId(){return this.walletProviderId}async startKeygen({setup:e,signer:t}){return this.connect(e,t).then(r=>{let s=r.split(":"),i=s[0].split("=")[1];return{publicKey:s[1].split("=")[1],keyId:i,passkeyCredentialId:this.passkeyCredentialId}})}async startSigngen({setup:e,signer:t}){return this.connect(e,t).then(r=>{let s=r.split(":"),i=s[0].split("=")[1],p=s[1].split("=")[1];return{sign:i,recid:parseInt(p)}})}connect(e,t){return new Promise((r,s)=>{let i=0,p;u(e)?(p="signgen",e.message=v(new TextEncoder().encode(e.message))):p="keygen";let c=new WebSocket("".concat(this.walletProviderUrl,"/").concat(p));c.addEventListener("open",o=>{switch(console.log("Connection opened in state ".concat(i," with event ").concat(JSON.stringify(o,void 0,"	"))),i){case 0:i=1,console.log("Sending setup: ".concat(JSON.stringify(e))),c.send(JSON.stringify(e));break;case 1:case 2:i=3,s("Incorrect protocol state");break;case 3:break}}),c.addEventListener("message",async o=>{switch(console.log("Connection message in state ".concat(i," with event ").concat(JSON.stringify(o,void 0,"	"))),i){case 0:i=3,s("Incorrect protocol state");break;case 1:{i=2;let l=await t(o.data);l.credentials.method==="passkey"&&(this.passkeyCredentialId=l.passkeyCredentialId),console.log("Sending signature: ".concat(JSON.stringify(l))),c.send(JSON.stringify(l));break}case 2:i=3,c.close(),r(o.data);break;case 3:break}}),c.addEventListener("error",o=>{console.log("Connection error in state ".concat(i," with event ").concat(JSON.stringify(o,void 0,"	"))),i!=3&&(i=3,s("Incorrect protocol state"))}),c.addEventListener("close",o=>{console.log("Connection closed in state ".concat(i," with event ").concat(JSON.stringify(o,void 0,"	"))),i!=3&&(i=3,s("Incorrect protocol state"))})})}};import*as d from"viem";import{publicKeyToAddress as W,toAccount as _e}from"viem/accounts";import{secp256k1 as ne}from"@noble/curves/secp256k1";function ie(n){if(n.startsWith("0x")&&(n=n.slice(2)),n.startsWith("04"))return W("0x".concat(n," "));if(n.startsWith("02")||n.startsWith("03")){let e=ne.ProjectivePoint.fromHex(n).toHex(!1);return W("0x".concat(e))}else throw new Error("Invalid public key")}export{I as EOAAuth,K as EphAuth,A as NetworkSigner,C as PasskeyAuth,x as WalletProviderServiceClient,ie as computeAddress};

package/dist/networkSigner.d.ts

@@ -1,5 +1,5 @@
-import { AuthModule, UserAuthentication } from './authentication.ts';
-import { type IWalletProviderServiceClient } from './walletProviderServiceClientInterface.ts';
+import { AuthModule, UserAuthentication } from './authentication';
+import { type IWalletProviderServiceClient } from './walletProviderServiceClientInterface';
 /**
  * Response from the network for keygen requests
  * @alpha
@@ -19,6 +19,10 @@ export interface KeygenResponse {
      * where Y is set to 0x02 if Y-coord is even, or 0x03 if Y-coord is odd
      */
     publicKey: string;
+    /**
+     * Optional credential id used for passkey authentication
+     */
+    passkeyCredentialId?: string;
 }
 /**
  * Response from the network for sign request
@@ -49,12 +53,12 @@ export declare class KeygenSetupOpts {
         tag: number;
         value: string;
     }[];
-    constructor({ t, n, key_label, permissions, ephPK, }: {
+    constructor({ t, n, ephPK, key_label, permissions, }: {
         t: number;
         n: number;
+        ephPK: string;
         key_label?: string;
         permissions?: string;
-        ephPK?: string;
     });
 }
 /** Parameters used in Signature execution */
@@ -101,7 +105,6 @@ export declare class NetworkSigner {
      * The permissions are validated during sign requests.
      * @returns {@link KeygenResponse} containing `keyId` and the `pubKey` public part of the key
      * @public
-     * @alpha
      */
     authenticateAndCreateKey(ephKey: Uint8Array, permissions?: string): Promise<KeygenResponse>;
     /** Generate a signature. Uses `authModule` to authenticate the sign request by the User.
@@ -110,7 +113,6 @@ export declare class NetworkSigner {
      * @param message - the message to sign by the MPC network
      * @returns {@link SignResponse}
      * @public
-     * @alpha
      */
     authenticateAndSign(keyId: string, message: string): Promise<SignResponse>;
 }

package/dist/passkeyAuthentication.d.ts

@@ -0,0 +1,32 @@
+import { UserAuthentication } from './authentication';
+/** Information about the user currently registering. Read more: https://w3c.github.io/webauthn/#dom-publickeycredentialcreationoptions-user
+ * @alpha
+ * */
+export type PasskeyUser = {
+    id: string;
+    name: string;
+    displayName: string;
+};
+/** The RP responsible for registering and authenticating the user. Read more: https://w3c.github.io/webauthn/#dom-publickeycredentialcreationoptions-rp
+ * @alpha
+ * */
+export type RelyingPartyConfig = {
+    rpName: string;
+    rpId: string;
+};
+export declare function passkeyRegister({ user, ephId, challenge, rpConfig, ephPK, lifetime, }: {
+    user: PasskeyUser;
+    ephId: string;
+    challenge: string;
+    rpConfig: RelyingPartyConfig;
+    ephPK: Uint8Array;
+    lifetime: number;
+}): Promise<UserAuthentication>;
+export declare function passkeyLogin({ ephId, challenge, credentialId, rpConfig, ephPK, lifetime, }: {
+    ephId: string;
+    challenge: string;
+    credentialId: string;
+    rpConfig: RelyingPartyConfig;
+    ephPK: Uint8Array;
+    lifetime: number;
+}): Promise<UserAuthentication>;

package/dist/viemSigner.d.ts

@@ -9,5 +9,7 @@ import { NetworkSigner } from './networkSigner';
  * @param threshold The threshold.
  */
 export declare function createViemAccount(networkSigner: NetworkSigner, keyId: string, publicKey: string): viem.LocalAccount;
-/** Computes ETH address from ECDSA `publicKey` returned by Silent Network */
+/** Computes ETH address from ECDSA `publicKey` returned by Silent Network
+ * @public
+ */
 export declare function computeAddress(publicKey: string): viem.Address;

package/dist/walletProviderServiceClient.d.ts

@@ -8,6 +8,7 @@ import { type ClientConfig, IWalletProviderServiceClient, type Signer } from './
 export declare class WalletProviderServiceClient implements IWalletProviderServiceClient {
     walletProviderId: string;
     walletProviderUrl: string;
+    passkeyCredentialId?: string;
     /**
      * Create new client that connects to the backend service
      * @param config - config containing information about backend service
@@ -22,5 +23,5 @@ export declare class WalletProviderServiceClient implements IWalletProviderServi
         setup: SignSetupOpts;
         signer: Signer;
     }): Promise<SignResponse>;
-    connect(params: KeygenSetupOpts | SignSetupOpts, signer: Signer): Promise<string>;
+    connect(setupOpts: KeygenSetupOpts | SignSetupOpts, signer: Signer): Promise<string>;
 }

package/package.json

@@ -1,9 +1,18 @@
 {
   "name": "@silencelaboratories/walletprovider-sdk",
-  "version": "0.0.10",
+  "version": "0.2.0",
+  "author": "Silence Laboratories",
   "description": "Frontend SDK for Wallet Providers",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
+  "main": "./dist/index.cjs.js",
+  "module": "./dist/index.esm.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "require": "./dist/index.cjs.js",
+      "import": "./dist/index.esm.js"
+    }
+  },
   "files": [
     "dist"
   ],
@@ -12,27 +21,29 @@
     "formatcheck": "prettier --check --cache .",
     "lint": "eslint --cache ./src/**/*.ts",
     "typecheck": "tsc -p . --noEmit",
-    "build": "bun run scripts/build.mjs && bun run build:declaration",
+    "build": "npm run clean && node build.js && npm run build:declaration",
     "build:declaration": "tsc -p . --emitDeclarationOnly",
-    "test": "bun test",
-    "test:watch": "bun test --watch",
-    "docs": "bun run build:declaration && api-extractor run --local --verbose && api-documenter  markdown -i ./temp -o ./docs"
+    "clean": "rimraf dist",
+    "prepack": "npm run clean && npm run build && npm run build:declaration",
+    "docs": "npm run build:declaration && api-extractor run --local --verbose && api-documenter  markdown -i ./temp -o ./docs"
   },
-  "type": "module",
   "devDependencies": {
     "@eslint/js": "^9.3.0",
     "@microsoft/api-documenter": "^7.25.2",
     "@microsoft/api-extractor": "^7.46.2",
-    "@types/bun": "^1.1.2",
+    "esbuild": "^0.23.0",
+    "esbuild-node-externals": "^1.14.0",
     "eslint": "^8.x",
     "globals": "^15.3.0",
+    "npm-dts": "^1.3.13",
     "prettier": "^3.2.5",
+    "rimraf": "^6.0.1",
     "typescript": "^5.4.5",
     "typescript-eslint": "^7.11.0"
   },
   "dependencies": {
-    "@noble/ed25519": "^2.1.0",
-    "@noble/secp256k1": "^2.1.0",
+    "@noble/curves": "^1.4.2",
+    "js-base64": "^3.7.7",
     "viem": "^2.11.1"
   }
 }

package/dist/index.js

@@ -1 +0,0 @@
-import{toHex as N8} from"viem";function m(Q){return Q.message!==void 0}var V8=1,U8=2;class C{t;n;key_label;metadata;constructor({t:Q,n:Z,key_label:X,permissions:$,ephPK:Y}){if(this.t=Q,this.n=Z,this.key_label=X,this.metadata=[],$)this.metadata.push({tag:V8,value:$});if(Y)this.metadata.push({tag:U8,value:Y})}}class o{authModule;threshold;totalNodes;wp_client;constructor(Q,Z,X,$){if(Z===0)throw new Error("Threshold cannot be 0");this.threshold=Z,this.totalNodes=X,this.authModule=$,this.wp_client=Q}async authenticateAndCreateKey(Q,Z){try{const X=new C({t:this.threshold,n:this.totalNodes,permissions:Z,ephPK:N8(Q)});console.log("Generated Payload:",X);const $=(z)=>this.authModule.authenticate({setup:X,challenge:z}),Y=await this.wp_client.startKeygen({setup:X,signer:$});return console.log("Keygen response:",Y),Y}catch(X){throw console.error(X),X}}async authenticateAndSign(Q,Z){const X={t:this.threshold,key_id:Q,message:Z},$=(z)=>this.authModule.authenticate({setup:X,challenge:z}),Y=await this.wp_client.startSigngen({setup:X,signer:$});return console.log("Sign response:",Y),Y}}import{toHex as H} from"viem";import*as E from"@noble/ed25519";var R8=function(Q,...Z){if(!(Q instanceof Uint8Array))throw new Error("Expected Uint8Array");if(Z.length>0&&!Z.includes(Q.length))throw new Error(`Expected Uint8Array of length ${Z}, not of length=${Q.length}`)};var d=function(Q,Z=!0){if(Q.destroyed)throw new Error("Hash instance has been destroyed");if(Z&&Q.finished)throw new Error("Hash#digest() has already been called")},h=function(Q,Z){R8(Q);const X=Z.outputLen;if(Q.length<X)throw new Error(`digestInto() expects output buffer of length at least ${X}`)};function O8(Q){if(typeof Q!=="string")throw new Error(`utf8ToBytes expected string, got ${typeof Q}`);return new Uint8Array((new TextEncoder()).encode(Q))}function c(Q){if(typeof Q==="string")Q=O8(Q);if(!x8(Q))throw new Error(`expected Uint8Array, got ${typeof Q}`);return Q}function a(Q){const Z=($)=>Q().update(c($)).digest(),X=Q();return Z.outputLen=X.outputLen,Z.blockLen=X.blockLen,Z.create=()=>Q(),Z}/*! noble-hashes - MIT License (c) 2022 Paul Miller (paulmillr.com) */var x8=(Q)=>Q instanceof Uint8Array;var y=(Q)=>new DataView(Q.buffer,Q.byteOffset,Q.byteLength);var T8=new Uint8Array(new Uint32Array([287454020]).buffer)[0]===68;if(!T8)throw new Error("Non little-endian hardware is not supported");class p{clone(){return this._cloneInto()}}var l8={}.toString;var F8=function(Q,Z,X,$){if(typeof Q.setBigUint64==="function")return Q.setBigUint64(Z,X,$);const Y=BigInt(32),z=BigInt(4294967295),q=Number(X>>Y&z),N=Number(X&z),R=$?4:0,O=$?0:4;Q.setUint32(Z+R,q,$),Q.setUint32(Z+O,N,$)};class u extends p{constructor(Q,Z,X,$){super();this.blockLen=Q,this.outputLen=Z,this.padOffset=X,this.isLE=$,this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.buffer=new Uint8Array(Q),this.view=y(this.buffer)}update(Q){d(this);const{view:Z,buffer:X,blockLen:$}=this;Q=c(Q);const Y=Q.length;for(let z=0;z<Y;){const q=Math.min($-this.pos,Y-z);if(q===$){const N=y(Q);for(;$<=Y-z;z+=$)this.process(N,z);continue}if(X.set(Q.subarray(z,z+q),this.pos),this.pos+=q,z+=q,this.pos===$)this.process(Z,0),this.pos=0}return this.length+=Q.length,this.roundClean(),this}digestInto(Q){d(this),h(Q,this),this.finished=!0;const{buffer:Z,view:X,blockLen:$,isLE:Y}=this;let{pos:z}=this;if(Z[z++]=128,this.buffer.subarray(z).fill(0),this.padOffset>$-z)this.process(X,0),z=0;for(let V=z;V<$;V++)Z[V]=0;F8(X,$-8,BigInt(this.length*8),Y),this.process(X,0);const q=y(Q),N=this.outputLen;if(N%4)throw new Error("_sha2: outputLen should be aligned to 32bit");const R=N/4,O=this.get();if(R>O.length)throw new Error("_sha2: outputLen bigger than state");for(let V=0;V<R;V++)q.setUint32(4*V,O[V],Y)}digest(){const{buffer:Q,outputLen:Z}=this;this.digestInto(Q);const X=Q.slice(0,Z);return this.destroy(),X}_cloneInto(Q){Q||(Q=new this.constructor),Q.set(...this.get());const{blockLen:Z,buffer:X,length:$,finished:Y,destroyed:z,pos:q}=this;if(Q.length=$,Q.pos=q,Q.finished=Y,Q.destroyed=z,$%Z)Q.buffer.set(X);return Q}}var l=function(Q,Z=!1){if(Z)return{h:Number(Q&_),l:Number(Q>>n&_)};return{h:Number(Q>>n&_)|0,l:Number(Q&_)|0}},G8=function(Q,Z=!1){let X=new Uint32Array(Q.length),$=new Uint32Array(Q.length);for(let Y=0;Y<Q.length;Y++){const{h:z,l:q}=l(Q[Y],Z);[X[Y],$[Y]]=[z,q]}return[X,$]},L8=function(Q,Z,X,$){const Y=(Z>>>0)+($>>>0);return{h:Q+X+(Y/4294967296|0)|0,l:Y|0}},_=BigInt(4294967295),n=BigInt(32),j8=(Q,Z)=>BigInt(Q>>>0)<<n|BigInt(Z>>>0),I8=(Q,Z,X)=>Q>>>X,M8=(Q,Z,X)=>Q<<32-X|Z>>>X,D8=(Q,Z,X)=>Q>>>X|Z<<32-X,W8=(Q,Z,X)=>Q<<32-X|Z>>>X,k8=(Q,Z,X)=>Q<<64-X|Z>>>X-32,v8=(Q,Z,X)=>Q>>>X-32|Z<<64-X,P8=(Q,Z)=>Z,w8=(Q,Z)=>Q,K8=(Q,Z,X)=>Q<<X|Z>>>32-X,B8=(Q,Z,X)=>Z<<X|Q>>>32-X,E8=(Q,Z,X)=>Z<<X-32|Q>>>64-X,f8=(Q,Z,X)=>Q<<X-32|Z>>>64-X,C8=(Q,Z,X)=>(Q>>>0)+(Z>>>0)+(X>>>0),m8=(Q,Z,X,$)=>Z+X+$+(Q/4294967296|0)|0,y8=(Q,Z,X,$)=>(Q>>>0)+(Z>>>0)+(X>>>0)+($>>>0),_8=(Q,Z,X,$,Y)=>Z+X+$+Y+(Q/4294967296|0)|0,H8=(Q,Z,X,$,Y)=>(Q>>>0)+(Z>>>0)+(X>>>0)+($>>>0)+(Y>>>0),b8=(Q,Z,X,$,Y,z)=>Z+X+$+Y+z+(Q/4294967296|0)|0;var A8={fromBig:l,split:G8,toBig:j8,shrSH:I8,shrSL:M8,rotrSH:D8,rotrSL:W8,rotrBH:k8,rotrBL:v8,rotr32H:P8,rotr32L:w8,rotlSH:K8,rotlSL:B8,rotlBH:E8,rotlBL:f8,add:L8,add3L:C8,add3H:m8,add4L:y8,add4H:_8,add5H:b8,add5L:H8},J=A8;var[g8,S8]=(()=>J.split(["0x428a2f98d728ae22","0x7137449123ef65cd","0xb5c0fbcfec4d3b2f","0xe9b5dba58189dbbc","0x3956c25bf348b538","0x59f111f1b605d019","0x923f82a4af194f9b","0xab1c5ed5da6d8118","0xd807aa98a3030242","0x12835b0145706fbe","0x243185be4ee4b28c","0x550c7dc3d5ffb4e2","0x72be5d74f27b896f","0x80deb1fe3b1696b1","0x9bdc06a725c71235","0xc19bf174cf692694","0xe49b69c19ef14ad2","0xefbe4786384f25e3","0x0fc19dc68b8cd5b5","0x240ca1cc77ac9c65","0x2de92c6f592b0275","0x4a7484aa6ea6e483","0x5cb0a9dcbd41fbd4","0x76f988da831153b5","0x983e5152ee66dfab","0xa831c66d2db43210","0xb00327c898fb213f","0xbf597fc7beef0ee4","0xc6e00bf33da88fc2","0xd5a79147930aa725","0x06ca6351e003826f","0x142929670a0e6e70","0x27b70a8546d22ffc","0x2e1b21385c26c926","0x4d2c6dfc5ac42aed","0x53380d139d95b3df","0x650a73548baf63de","0x766a0abb3c77b2a8","0x81c2c92e47edaee6","0x92722c851482353b","0xa2bfe8a14cf10364","0xa81a664bbc423001","0xc24b8b70d0f89791","0xc76c51a30654be30","0xd192e819d6ef5218","0xd69906245565a910","0xf40e35855771202a","0x106aa07032bbd1b8","0x19a4c116b8d2d0c8","0x1e376c085141ab53","0x2748774cdf8eeb99","0x34b0bcb5e19b48a8","0x391c0cb3c5c95a63","0x4ed8aa4ae3418acb","0x5b9cca4f7763e373","0x682e6ff3d6b2b8a3","0x748f82ee5defb2fc","0x78a5636f43172f60","0x84c87814a1f0ab72","0x8cc702081a6439ec","0x90befffa23631e28","0xa4506cebde82bde9","0xbef9a3f7b2c67915","0xc67178f2e372532b","0xca273eceea26619c","0xd186b8c721c0c207","0xeada7dd6cde0eb1e","0xf57d4f7fee6ed178","0x06f067aa72176fba","0x0a637dc5a2c898a6","0x113f9804bef90dae","0x1b710b35131c471b","0x28db77f523047d84","0x32caab7b40c72493","0x3c9ebe0a15c9bebc","0x431d67c49c100d4c","0x4cc5d4becb3e42b6","0x597f299cfc657e2a","0x5fcb6fab3ad6faec","0x6c44198c4a475817"].map((Q)=>BigInt(Q))))(),v=new Uint32Array(80),P=new Uint32Array(80);class s extends u{constructor(){super(128,64,16,!1);this.Ah=1779033703|0,this.Al=4089235720|0,this.Bh=3144134277|0,this.Bl=2227873595|0,this.Ch=1013904242|0,this.Cl=4271175723|0,this.Dh=2773480762|0,this.Dl=1595750129|0,this.Eh=1359893119|0,this.El=2917565137|0,this.Fh=2600822924|0,this.Fl=725511199|0,this.Gh=528734635|0,this.Gl=4215389547|0,this.Hh=1541459225|0,this.Hl=327033209|0}get(){const{Ah:Q,Al:Z,Bh:X,Bl:$,Ch:Y,Cl:z,Dh:q,Dl:N,Eh:R,El:O,Fh:V,Fl:T,Gh:F,Gl:G,Hh:j,Hl:I}=this;return[Q,Z,X,$,Y,z,q,N,R,O,V,T,F,G,j,I]}set(Q,Z,X,$,Y,z,q,N,R,O,V,T,F,G,j,I){this.Ah=Q|0,this.Al=Z|0,this.Bh=X|0,this.Bl=$|0,this.Ch=Y|0,this.Cl=z|0,this.Dh=q|0,this.Dl=N|0,this.Eh=R|0,this.El=O|0,this.Fh=V|0,this.Fl=T|0,this.Gh=F|0,this.Gl=G|0,this.Hh=j|0,this.Hl=I|0}process(Q,Z){for(let U=0;U<16;U++,Z+=4)v[U]=Q.getUint32(Z),P[U]=Q.getUint32(Z+=4);for(let U=16;U<80;U++){const W=v[U-15]|0,k=P[U-15]|0,b=J.rotrSH(W,k,1)^J.rotrSH(W,k,8)^J.shrSH(W,k,7),A=J.rotrSL(W,k,1)^J.rotrSL(W,k,8)^J.shrSL(W,k,7),M=v[U-2]|0,D=P[U-2]|0,f=J.rotrSH(M,D,19)^J.rotrBH(M,D,61)^J.shrSH(M,D,6),g=J.rotrSL(M,D,19)^J.rotrBL(M,D,61)^J.shrSL(M,D,6),L=J.add4L(A,g,P[U-7],P[U-16]),S=J.add4H(L,b,f,v[U-7],v[U-16]);v[U]=S|0,P[U]=L|0}let{Ah:X,Al:$,Bh:Y,Bl:z,Ch:q,Cl:N,Dh:R,Dl:O,Eh:V,El:T,Fh:F,Fl:G,Gh:j,Gl:I,Hh:K,Hl:B}=this;for(let U=0;U<80;U++){const W=J.rotrSH(V,T,14)^J.rotrSH(V,T,18)^J.rotrBH(V,T,41),k=J.rotrSL(V,T,14)^J.rotrSL(V,T,18)^J.rotrBL(V,T,41),b=V&F^~V&j,A=T&G^~T&I,M=J.add5L(B,k,A,S8[U],P[U]),D=J.add5H(M,K,W,b,g8[U],v[U]),f=M|0,g=J.rotrSH(X,$,28)^J.rotrBH(X,$,34)^J.rotrBH(X,$,39),L=J.rotrSL(X,$,28)^J.rotrBL(X,$,34)^J.rotrBL(X,$,39),S=X&Y^X&q^Y&q,q8=$&z^$&N^z&N;K=j|0,B=I|0,j=F|0,I=G|0,F=V|0,G=T|0,{h:V,l:T}=J.add(R|0,O|0,D|0,f|0),R=q|0,O=N|0,q=Y|0,N=z|0,Y=X|0,z=$|0;const r=J.add3L(f,L,q8);X=J.add3H(r,D,g,S),$=r|0}({h:X,l:$}=J.add(this.Ah|0,this.Al|0,X|0,$|0)),{h:Y,l:z}=J.add(this.Bh|0,this.Bl|0,Y|0,z|0),{h:q,l:N}=J.add(this.Ch|0,this.Cl|0,q|0,N|0),{h:R,l:O}=J.add(this.Dh|0,this.Dl|0,R|0,O|0),{h:V,l:T}=J.add(this.Eh|0,this.El|0,V|0,T|0),{h:F,l:G}=J.add(this.Fh|0,this.Fl|0,F|0,G|0),{h:j,l:I}=J.add(this.Gh|0,this.Gl|0,j|0,I|0),{h:K,l:B}=J.add(this.Hh|0,this.Hl|0,K|0,B|0),this.set(X,$,Y,z,q,N,R,O,V,T,F,G,j,I,K,B)}roundClean(){v.fill(0),P.fill(0)}destroy(){this.buffer.fill(0),this.set(0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0)}}var t=a(()=>new s);var n8=function(Q,Z,X){console.log("EPHKEY",X);const $=new C({t:Q.t,n:Q.n,key_label:Q.key_label,permissions:void 0,ephPK:H(X)});return console.log("SETUP_NO_PERM",$),{types:{EIP712Domain:u8,...c8},domain:p8,primaryType:"Request",message:{setup:$,challenge:Z}}};async function e({setup:Q,user_id:Z,challenge:X,browserWallet:$,ephPK:Y,lifetime:z}){if(m(Q))throw new Error("EOA auth cannot be used for Sign requests, please use EphAuth instead");const q=n8(Q,X,Y);console.log("typed request:"),console.log(JSON.stringify(q,void 0,4));const N=await $.signTypedData(Z,q);console.log("User signed a request",N);const R={eoa:Z,ephPK:H(Y),expiry:Math.floor(Date.now()/1000)+z};return{credentials:{credentials:JSON.stringify(R),method:"eoa",id:Z},signature:N}}async function Q8({setup:Q,user_id:Z,challenge:X,ephSK:$,ephPK:Y}){const z={setup:Q,challenge:X},N=H(await E.signAsync((new TextEncoder()).encode(JSON.stringify(z)),$));console.log("AUTH SIGNATURE by eph key",N),console.log("User signed a request",N);const R={eoa:Z,ephPK:H(Y),expiry:0};return{credentials:{credentials:JSON.stringify(R),method:"ephemeral",id:Z},signature:N}}E.etc.sha512Sync=(...Q)=>t(E.etc.concatBytes(...Q));var d8=[{name:"tag",type:"uint16"},{name:"value",type:"string"}],c8={Request:[{name:"setup",type:"KeygenSetupOpts"},{name:"challenge",type:"string"}],KeygenSetupOpts:[{name:"t",type:"uint32"},{name:"n",type:"uint32"},{name:"metadata",type:"TaggedValue[]"}],TaggedValue:d8},p8={name:"SilentShard authentication",version:"0.1.0"},u8=[{name:"name",type:"string"},{name:"version",type:"string"}];import*as X8 from"@noble/ed25519";var i;(function(X){X[X["EOA"]=0]="EOA";X[X["NONE"]=1]="NONE"})(i||(i={}));class Z8{userId;browserWallet;ephPK;lifetime;constructor(Q,Z,X,$=3600){this.userId=Q,this.browserWallet=Z,this.ephPK=X,this.lifetime=$}async authenticate({setup:Q,challenge:Z}){return await e({setup:Q,user_id:this.userId,challenge:Z,browserWallet:this.browserWallet,ephPK:this.ephPK,lifetime:this.lifetime})}}class $8{userId;ephSK;ephPK;constructor(Q,Z){this.userId=Q,this.ephSK=Z,this.ephPK=X8.getPublicKey(this.ephSK)}async authenticate({setup:Q,challenge:Z}){return await Q8({setup:Q,user_id:this.userId,challenge:Z,ephSK:this.ephSK,ephPK:this.ephPK})}}var Y8=(Q)=>btoa(String.fromCodePoint.apply(null,Array.from(Q)));var x;(function(Y){Y[Y["initiated"]=0]="initiated";Y[Y["waitingForSign"]=1]="waitingForSign";Y[Y["waitingForResult"]=2]="waitingForResult";Y[Y["finished"]=3]="finished"})(x||(x={}));class z8{walletProviderId;walletProviderUrl;constructor(Q){this.walletProviderId=Q.walletProviderId,this.walletProviderUrl=Q.walletProviderUrl}getWalletId(){return this.walletProviderId}async startKeygen({setup:Q,signer:Z}){return this.connect(Q,Z).then((X)=>{const $=X.split(":"),Y=$[1].split("=")[1],z=$[0].split("=")[1];return{publicKey:Y,keyId:z}})}async startSigngen({setup:Q,signer:Z}){return this.connect(Q,Z).then((X)=>{const $=X.split(":"),Y=$[0].split("=")[1],z=$[1].split("=")[1];return{sign:Y,recid:parseInt(z)}})}connect(Q,Z){return new Promise((X,$)=>{let Y=x.initiated,z;if(m(Q))z="signgen",Q.message=Y8((new TextEncoder()).encode(Q.message));else z="keygen";const q=new WebSocket(`${this.walletProviderUrl}/${z}`);q.addEventListener("open",(N)=>{switch(console.log(`Connection opened in state ${Y} with event ${JSON.stringify(N,void 0,"\t")}`),Y){case x.initiated:Y=x.waitingForSign,console.log(`Sending setup: ${JSON.stringify(Q)}`),q.send(JSON.stringify(Q));break;case x.waitingForSign:case x.waitingForResult:Y=x.finished,$("Incorrect protocol state");break;case x.finished:break}}),q.addEventListener("message",async(N)=>{switch(console.log(`Connection message in state ${Y} with event ${JSON.stringify(N,void 0,"\t")}`),Y){case x.initiated:Y=x.finished,$("Incorrect protocol state");break;case x.waitingForSign:{Y=x.waitingForResult;const R=await Z(N.data);console.log(`Sending signature: ${JSON.stringify(R)}`),q.send(JSON.stringify(R));break}case x.waitingForResult:Y=x.finished,q.close(),X(N.data);break;case x.finished:break}}),q.addEventListener("error",(N)=>{if(console.log(`Connection error in state ${Y} with event ${JSON.stringify(N,void 0,"\t")}`),Y!=x.finished)Y=x.finished,$("Incorrect protocol state")}),q.addEventListener("close",(N)=>{if(console.log(`Connection closed in state ${Y} with event ${JSON.stringify(N,void 0,"\t")}`),Y!=x.finished)Y=x.finished,$("Incorrect protocol state")})})}}import*as w from"viem";import{publicKeyToAddress as J8,toAccount as D0} from"viem/accounts";import{ProjectivePoint as i8} from"@noble/secp256k1";function r8(Q){if(Q.startsWith("0x"))Q=Q.slice(2);if(Q.startsWith("04"))return J8(`0x${Q} `);else if(Q.startsWith("02")||Q.startsWith("03")){const Z=i8.fromHex(Q).toHex(!1);return J8(`0x${Z}`)}else throw new Error("Invalid public key")}export{r8 as computeAddress,z8 as WalletProviderServiceClient,o as NetworkSigner,$8 as EphAuth,Z8 as EOAAuth,i as AuthMethod};