@silencelaboratories/walletprovider-sdk 0.1.0 → 0.2.0

package/README.md

@@ -10,8 +10,8 @@ In order to run it execute the following:
 1. Build the library
 
 ```
-bun install
-bun run build
+npm install
+npm run build
 ```
 
 2. Run the demo
@@ -49,24 +49,30 @@ For description of classes, interfaces, types, please refer to [documentation](.
 ## Authentication
 
 
-Users authenticate using an EOA wallet during **key generation** and register an ephemeral signing key pair and associates it with their identity.
+Users authenticate using **EOA wallet** or **Passkey** during **key generation** and register an ephemeral signing key pair and associates it with their identity.
 
 Frontend can later use the ephemeral signing key pair to authorize **signing requests** for duration of the session without the need for repeated user interaction, providing a seamless and secure authentication mechanism.
 
-We use [EOAAuth](./docs/walletprovider-sdk.eoaauth.md) to authenticate the user **during keygen**. The `EOAAuth` object is created with the user's wallet address, ephemeral public key, and lifetime of the key in seconds.
+Key generation:
+- [EOAAuth](./docs/walletprovider-sdk.eoaauth.md) to authenticate the user **during keygen**. The `EOAAuth` object is created with the user's wallet address.
+
+- [PasskeyAuth](./docs/walletprovider-sdk.passkeyauth.md) to authenticate the user **during keygen**. The `PasskeyAuth` object is created with the [PasskeyUser](./docs/walletprovider-sdk.passkeyuser.md), [RelyingPartyConfig](./docs/walletprovider-sdk.relyingpartyconfig.md).
+
+- The ephemeral public key and lifetime of the key in seconds will be associated with both `EOAAuth` and `PasskeyAuth` objects.
 
-We then use [EphAuth](./docs/walletprovider-sdk.ephauth.md) to authenticate the user **during signing**. The `EphAuth` object is created with the user's wallet address and ephemeral keypair.
+Signature generation:
+- [EphAuth](./docs/walletprovider-sdk.ephauth.md) to authenticate the user **during signing**. The `EphAuth` object is created with the ephemeral keypair.
 
 ## Keygen
 
 
 The full working example is in the [demo](https://github.com/silence-laboratories/walletprovider-sdk/blob/a75d7a009fb4d3629d353d53f8c27c34190c9035/demo/src/routes/%2Bpage.svelte#L89).
-The core object to use is the [NetworkSigner](./docs/walletprovider-sdk.networksigner.md).
+The core object to use is the [NetworkSigner](./docs/walletprovider-sdk.networksigner.md). It allows to generate keys and do signatures. 
 
-It allows to generate keys and do signatures. In order to create, you need two other components. The [WalletProviderServiceClient](./docs/walletprovider-sdk.walletproviderserviceclient.md) that connects to the Backend part of the SDK, and the authentication module. Currently we provide EOA authentication via [EOAAuth](./docs/walletprovider-sdk.eoaauth.md).
+In order to create your keys, you need two other components. The [WalletProviderServiceClient](./docs/walletprovider-sdk.walletproviderserviceclient.md) that connects to the Backend part of the SDK, and the **authentication module**. 
 
-
-Let's create the `NetworkSigner`
+### Authenticate with EOA wallet
+We provide EOA authentication via [EOAAuth](./docs/walletprovider-sdk.eoaauth.md) module. Let's create the `NetworkSigner` with associated `EOAAuth` object.
 
 ```ts
 // Generate ephemeral secret key esk
@@ -74,12 +80,14 @@ const sk = ed.utils.randomPrivateKey();
 ephSK = sk;
 // Derive public part epk from esk
 ephPK = await ed.getPublicKeyAsync(sk);
-
+// Arbitrary ID to identify the ephemeral key
+const ephId = uuidv4();
 // Create a client that connects to the backend service
 const wpClient = await createWalletProviderService(clusterConfig);
 
 // Create EOA authenticator, signature will include epk
 const eoaAuth = new EOAAuth(
+  ephId,
   accountsFromBrowserWallet[0],
   new BrowserWallet(),
   ephPK,
@@ -113,9 +121,58 @@ const permissions = {
 let resp: KeygenResponse = await sdk.authenticateAndCreateKey(JSON.stringify(permissions));
 ```
 
-Calling this method will cause to the Browser Wallet window to pop up, requesting the User to sign the request. After execution [KeygenResponse](./docs/walletprovider-sdk.keygenresponse.md) is returned.
+Calling this method will cause to the Browser Wallet window to pop up, requesting the User to sign the request.
 
-The [KeygenResponse](./docs/walletprovider-sdk.keygenresponse.md) contains `keyId` and `publicKey`. The `publicKey` is the public part of the key generated by Silent Network. Use the `keyId` in subsequent calls to sign.
+The returned [KeygenResponse](./docs/walletprovider-sdk.keygenresponse.md) contains `keyId` and `publicKey`. The `publicKey` is the public part of the key generated by Silent Network. Use the `keyId` in subsequent calls to sign.
+
+The `esk` key can be later used by the frontend in subsequent signgen requests for authenticating.
+
+### Authenticate with Passkey
+We provide Passkey authentication via [PasskeyAuth](./docs/walletprovider-sdk.passkeyauth.md) module. Let's create the `NetworkSigner` with associated `PasskeyAuth` object.
+
+```ts
+// Generate ephemeral secret key esk
+const sk = ed.utils.randomPrivateKey();
+ephSK = sk;
+// Derive public part epk from esk
+ephPK = await ed.getPublicKeyAsync(sk);
+// Arbitrary ID to identify the ephemeral key
+const ephId = uuidv4();
+// Create a client that connects to the backend service
+const wpClient = await createWalletProviderService(clusterConfig);
+// Here we configure the relying party for local development
+const rpConfig: RelyingPartyConfig = {
+  rpId: 'localhost',
+  rpName: 'http://localhost:5173',
+};
+// Information about the owner of the passkey 
+const passkeyUser: PasskeyUser = {
+  id: userId,
+  displayName: 'Alice',
+  name: 'alice@gmail.com ' + userId, // For development purposes
+};
+
+// Get passkey credential id from your storage
+const credentialId = getPasskeyCredentialId();
+// Create EOA authenticator, signature will include epk
+const passkeyAuth = new PasskeyAuth(
+  rpConfig,
+  passkeyUser,
+  ephId,
+  ephPK,
+  // Lifetime of one hour
+  60 * 60,
+  // If credentialId is null, we will do passkey register, otherwise, we will do passkey auth/login
+  credentialId,
+);
+
+// Create a new signer instance
+const sdk = new NetworkSigner(wpClient, threshold, partiesNumber, passkeyAuth);
+```
+
+Now you can generate a key like in the EOA example by calling the [authenticateAndCreateKey](./docs/walletprovider-sdk.networksigner.authenticateandcreatekey.md) method. 
+
+Calling this method will prompt the browser to request Passkey User Verification. Once user verification is done, the [KeygenResponse](./docs/walletprovider-sdk.keygenresponse.md) is returned.
 
 The `esk` key can be later used by the frontend in subsequent signgen requests for authenticating.
 
@@ -125,7 +182,7 @@ The full signing example is [here](https://github.com/silence-laboratories/walle
 
 Let's create NetworkSigner for signing. Note the `EphAuth` is used to avoid user interaction when generating the signatures.
 ```ts
-const authModule = new EphAuth(accountsFromBrowserWallet[0], ephSK!);
+const authModule = new EphAuth(ephId, ephSK);
 // Create a new signer instance
 const sdk = new NetworkSigner(wpClient, threshold, partiesNumber, authModule);
 ```
@@ -135,71 +192,57 @@ Use the [NetworkSigner.authenticateAndSign](./docs/walletprovider-sdk.networksig
 
 ```ts
 let signMessage = JSON.stringify({
-  userOperation: {
-    sender: '0x8d4cb2540d993fe34c646299f1ab4af3012ff34c',
-    nonce: '0x7',
-    initCode: '',
-    callData: '0000189a...',
-    callGasLimit: '123130',
-    verificationGasLimit: '153427',
-    preVerificationGas: '66768',
-    maxFeePerGas: '',
-    maxPriorityFeePerGas: '',
-    paymasterAndData: '',
-  },
-  entryPointVersion: 'v0.6.0',
-  entryPointAddress: '0x5FF137D4b0FDCD49DcA30c7CF57E578a026d2789',
-  chainId: 80002,
-});
+    message: JSON.stringify({
+      userOperation: {
+        sender: '0x8d4cb2540d993fe34c646299f1ab4af3012ff34c',
+        nonce: '0x7',
+        initCode: '0x',
+        callData: '0000189...',
+        callGasLimit: '0x18473',
+        verificationGasLimit: '0x18473',
+        preVerificationGas: '66768',
+        maxFeePerGas: '',
+        maxPriorityFeePerGas: '',
+        paymasterAndData: '0x',
+      },
+      entryPointVersion: 'v0.6.0',
+      entryPointAddress: '0x5FF137D4b0FDCD49DcA30c7CF57E578a026d2789',
+      chainId: 80002,
+    }),
+    requestType: 'accountAbstractionTx',
+  });
 
 let resp = await sdk.authenticateAndSign(selectedKeyId, signMessage);
 ```
 
 The [SignResponse](./docs/walletprovider-sdk.signresponse.md) contains the signature `sign` and the recovery ID `recid`.
 
-# Developing the library
-
-Audience of this section are library developers.
-
-## Bun runtime is required
-
-Install bun from https://bun.sh
 
 ## Install dependencies
 
 ```bash
-bun install
+npm install
 ```
 
 ## Build
 
 ```bash
-bun run build
+npm run build
 ```
 
 The output will be in the `dist` folder.
 
-## Test
-
-Create `*.test.ts` files and run tests with:
-
-```bash
-bun run test
-# or watch test
-bun run test:watch
-```
-
 ## End to end tests
 Please refer to [README.md](./e2e-tests/README.md) for instructions how to execute them.
 
 ## Format the code
 
 ```bash
-bun run format
+npm run format
 ```
 
 ## Generate the documentation
 
 ```bash
-bun run docs
-```
+npm run docs
+```

package/dist/EOAauthentication.d.ts

@@ -1,14 +1,9 @@
 /** Externally Owned Account (EOA) atuhentication. Uses secret key stored on a wallet to sign requests.
  * The requests are presented to the user in a readable form by using TypedData (EIP712).
  */
-import { KeygenSetupOpts, SignSetupOpts } from './networkSigner.ts';
-import { type UserAuthentication } from './authentication.ts';
+import { KeygenSetupOpts } from './networkSigner';
+import { type UserAuthentication } from './authentication';
 import { type TypedDataDomain } from 'viem';
-export type EphClaim = {
-    eoa: string;
-    ephPK: string;
-    expiry: number;
-};
 export type FieldDefinition = {
     name: string;
     type: string;
@@ -50,23 +45,14 @@ export interface IBrowserWallet {
     signTypedData<T>(from: string, request: TypedData<T>): Promise<unknown>;
 }
 /** Present the request to the User using wallet UI, and ask for sign.
- * The signature is the authorization for the operation
+ * The signature is the authorization for keygen operation
  */
-export declare function authenticateUsingEOA({ setup, user_id, challenge, browserWallet, ephPK, lifetime, }: {
+export declare function authenticateUsingEOA({ setup, ephId, eoa, challenge, browserWallet, ephPK, lifetime, }: {
     setup: KeygenSetupOpts;
-    user_id: string;
+    ephId: string;
+    eoa: string;
     challenge: string;
     browserWallet: IBrowserWallet;
     ephPK: Uint8Array;
     lifetime: number;
 }): Promise<UserAuthentication>;
-/** Present the request to the User using wallet UI, and ask for sign.
- * The signature is the authorization for the operation
- */
-export declare function authenticateUsingEphKey({ setup, user_id, challenge, ephSK, ephPK, }: {
-    setup: SignSetupOpts;
-    user_id: string;
-    challenge: string;
-    ephSK: Uint8Array;
-    ephPK: Uint8Array;
-}): Promise<UserAuthentication>;

package/dist/authentication.d.ts

@@ -1,22 +1,19 @@
 import { KeygenSetupOpts, SignSetupOpts } from './networkSigner';
 import { IBrowserWallet } from './EOAauthentication';
+import { PasskeyUser, RelyingPartyConfig } from './passkeyAuthentication';
 /** Type of the request authentication
  * @alpha
  */
-export declare enum AuthMethod {
-    /** Authentication using Externally Owned Account */
-    EOA = 0,
-    /** No authentication */
-    NONE = 1
-}
 export type UserCredentials = {
     id: string;
     method: string;
     credentials: string;
+    ephId?: string;
 };
 export type UserAuthentication = {
     credentials: UserCredentials;
     signature: string;
+    passkeyCredentialId?: string;
 };
 export interface AuthModule {
     authenticate({ setup, challenge, }: {
@@ -24,46 +21,78 @@ export interface AuthModule {
         challenge: string;
     }): Promise<UserAuthentication>;
 }
-/** The `AuthModule` implementing Externally Owned Account authentication.
+/** The `EOAAuth` implementing Externally Owned Account authentication.
  * @alpha
  */
 export declare class EOAAuth implements AuthModule {
-    /** User ID, typically the ETH address that is used to do authentication */
-    userId: string;
+    /** Ephemeral id identify ephemeral key */
+    ephId: string;
     /** An interface to the wallet, like MetaMask, that is used to sign the requests */
     browserWallet: IBrowserWallet;
     /** Public key of the ephemeral key */
     ephPK: Uint8Array;
     /** Lifetime of the ephemeral key */
     lifetime: number;
-    constructor(userId: string, browserWallet: IBrowserWallet, ephPK: Uint8Array, lifetime?: number);
+    /** the ETH address that is used to do EOA authentication */
+    eoa: string;
+    constructor(ephId: string, eoa: string, browserWallet: IBrowserWallet, ephPK: Uint8Array, lifetime?: number);
     /**
      * Prepares a message to present on the Browser Wallet window and requests to sign it.
-     * @param setup - either Keygen or Sign setup options
+     * @param setup - Keygen setup options
      * @param challenge - the challenge received from the backend
      *
      * @public
      */
-    authenticate({ setup, challenge, }: {
-        setup: KeygenSetupOpts | SignSetupOpts;
+    authenticate({ setup, challenge }: {
+        setup: KeygenSetupOpts;
         challenge: string;
     }): Promise<UserAuthentication>;
 }
-/** An Ephmeral key used to locally sign the signature requests to network.
+/** The `EphAuth` module is only used for signing requests to the network.
+ * @alpha
+ * An Ephmeral key used to locally sign the signature requests to network.
  * This eph key is registered during keygen. The key is used to sign the requests without
  * asking the user to sign the request each time.
- * The auth module is only used for signing requests to the network.
  * */
 export declare class EphAuth implements AuthModule {
-    /** User ID, typically the ETH address that is used to do authentication */
-    userId: string;
+    /** Ephemeral id identify ephemeral key */
+    ephId: string;
     /** Secret key of the ephemeral keypair */
     ephSK: Uint8Array;
     /** Public key of the ephemeral keypair */
     ephPK: Uint8Array;
-    constructor(userId: string, ephSK: Uint8Array);
-    authenticate({ setup, challenge, }: {
-        setup: KeygenSetupOpts | SignSetupOpts;
+    constructor(ephId: string, ephSK: Uint8Array);
+    /**
+     * Prepares a message to present on the Browser Wallet window and requests to sign it.
+     * @param setup - Signgen setup options
+     * @param challenge - the challenge received from the backend
+     *
+     * @public
+     */
+    authenticate({ setup, challenge }: {
+        setup: SignSetupOpts;
+        challenge: string;
+    }): Promise<UserAuthentication>;
+}
+/** The `AuthModule` implementing Passkey authentication.
+ * @alpha
+ */
+export declare class PasskeyAuth implements AuthModule {
+    /** Replying party object. Read more: https://developer.mozilla.org/en-US/docs/Web/API/PublicKeyCredentialCreationOptions#rp */
+    rpConfig: RelyingPartyConfig;
+    /** Passkey user information. Read more: https://developer.mozilla.org/en-US/docs/Web/API/PublicKeyCredentialCreationOptions#user */
+    user: PasskeyUser;
+    /** Public key of the ephemeral key */
+    ephPK: Uint8Array;
+    /** Lifetime of the ephemeral key */
+    lifetime: number;
+    /** Ephemeral id identify ephemeral key */
+    ephId: string;
+    /** Credential id that user and authenticator acknowledges about */
+    credentialId: string | null;
+    constructor(rpConfig: RelyingPartyConfig, user: PasskeyUser, ephId: string, ephPK: Uint8Array, lifetime: number | undefined, credentialId: string | null);
+    authenticate({ setup, challenge }: {
+        setup: KeygenSetupOpts;
         challenge: string;
     }): Promise<UserAuthentication>;
 }

package/dist/encoding.d.ts

@@ -1,4 +1,3 @@
-export declare const decodeHex: (s: string) => Uint8Array;
-export declare const encodeHex: (a: Uint8Array) => string;
 export declare const decodeBase64: (b64: string) => Uint8Array;
 export declare const encodeBase64: (b: Uint8Array) => string;
+export declare const arrayBufferToBase64Url: (a: ArrayBuffer) => string;

package/dist/ephemeralAuthentication.d.ts

@@ -0,0 +1,16 @@
+import { UserAuthentication } from './authentication';
+import { SignSetupOpts } from './networkSigner';
+export type EphClaim = {
+    ephPK: string;
+    expiry: number;
+};
+/** Locally sign the signature requests to network without asking the user, the ephSK is registered during keygen.
+ * The signature is the authorization for signgen operation
+ */
+export declare function authenticateUsingEphKey({ setup, ephId, challenge, ephSK, ephPK, }: {
+    setup: SignSetupOpts;
+    ephId: string;
+    challenge: string;
+    ephSK: Uint8Array;
+    ephPK: Uint8Array;
+}): Promise<UserAuthentication>;

package/dist/index.cjs.js

@@ -0,0 +1 @@
+"use strict";var H=Object.create;var y=Object.defineProperty;var F=Object.getOwnPropertyDescriptor;var z=Object.getOwnPropertyNames;var L=Object.getPrototypeOf,V=Object.prototype.hasOwnProperty;var G=(t,e,n)=>e in t?y(t,e,{enumerable:!0,configurable:!0,writable:!0,value:n}):t[e]=n;var Y=(t,e)=>{for(var n in e)y(t,n,{get:e[n],enumerable:!0})},v=(t,e,n,r)=>{if(e&&typeof e=="object"||typeof e=="function")for(let s of z(e))!V.call(t,s)&&s!==n&&y(t,s,{get:()=>e[s],enumerable:!(r=F(e,s))||r.enumerable});return t};var j=(t,e,n)=>(n=t!=null?H(L(t)):{},v(e||!t||!t.__esModule?y(n,"default",{value:t,enumerable:!0}):n,t)),Q=t=>v(y({},"__esModule",{value:!0}),t);var a=(t,e,n)=>G(t,typeof e!="symbol"?e+"":e,n);var se={};Y(se,{EOAAuth:()=>w,EphAuth:()=>A,NetworkSigner:()=>P,PasskeyAuth:()=>I,WalletProviderServiceClient:()=>K,computeAddress:()=>M});module.exports=Q(se);var k=require("viem");var X=1,Z=2,f=class{constructor({t:e,n,ephPK:r,key_label:s,permissions:i}){a(this,"t");a(this,"n");a(this,"key_label");a(this,"metadata");this.t=e,this.n=n,this.key_label=s,this.metadata=[],this.metadata.push({tag:Z,value:r}),i&&this.metadata.push({tag:X,value:i})}};function u(t){return t.message!==void 0}var P=class{constructor(e,n,r,s){a(this,"authModule");a(this,"threshold");a(this,"totalNodes");a(this,"wp_client");if(n===0)throw new Error("Threshold cannot be 0");this.threshold=n,this.totalNodes=r,this.authModule=s,this.wp_client=e}async authenticateAndCreateKey(e,n){try{let r=new f({t:this.threshold,n:this.totalNodes,permissions:n,ephPK:(0,k.toHex)(e)}),s=p=>this.authModule.authenticate({setup:r,challenge:p}),i=await this.wp_client.startKeygen({setup:r,signer:s});return console.log("Keygen response:",i),i}catch(r){throw console.error(r),r}}async authenticateAndSign(e,n){let r={t:this.threshold,key_id:e,message:n},s=p=>this.authModule.authenticate({setup:r,challenge:p}),i=await this.wp_client.startSigngen({setup:r,signer:s});return console.log("Sign response:",i),i}};var b=require("viem"),ee=[{name:"tag",type:"uint16"},{name:"value",type:"string"}],te={Request:[{name:"setup",type:"KeygenSetupOpts"},{name:"challenge",type:"string"}],KeygenSetupOpts:[{name:"t",type:"uint32"},{name:"n",type:"uint32"},{name:"metadata",type:"TaggedValue[]"}],TaggedValue:ee},ne={name:"SilentShard authentication",version:"0.1.0"},ie=[{name:"name",type:"string"},{name:"version",type:"string"}];function re(t,e,n){console.log("EPHKEY",n);let r=new f({t:t.t,n:t.n,key_label:t.key_label,permissions:void 0,ephPK:(0,b.toHex)(n)});return{types:{EIP712Domain:ie,...te},domain:ne,primaryType:"Request",message:{setup:r,challenge:e}}}async function R({setup:t,ephId:e,eoa:n,challenge:r,browserWallet:s,ephPK:i,lifetime:p}){if(u(t))throw new Error("EOA auth cannot be used for Sign requests, please use EphAuth instead");let c=re(t,r,i),o=await s.signTypedData(n,c);console.log("User signed a request",o);let l={ephPK:(0,b.toHex)(i),expiry:Math.floor(Date.now()/1e3)+p};return{credentials:{credentials:JSON.stringify(l),method:"eoa",id:n,ephId:e},signature:o}}var B=require("@noble/curves/ed25519");var T=require("js-base64");var E=t=>btoa(String.fromCodePoint.apply(null,Array.from(t))),g=t=>T.Base64.fromUint8Array(new Uint8Array(t),!0);var O=require("js-base64"),d=require("viem");async function N({user:t,ephId:e,challenge:n,rpConfig:r,ephPK:s,lifetime:i}){let p=(0,d.hexToBytes)(`0x${n}`,{size:32}),c={publicKey:{authenticatorSelection:{authenticatorAttachment:void 0,residentKey:"preferred",requireResidentKey:!1,userVerification:"required"},challenge:p,excludeCredentials:[],pubKeyCredParams:[{type:"public-key",alg:-7},{type:"public-key",alg:-257}],rp:{name:r.rpName,id:r.rpId},user:{...t,id:O.Base64.toUint8Array(t.id)}}},o=await navigator.credentials.create(c);if(o===null)throw new Error("No credential returned");let l=g(o.response.attestationObject),S={rawCredential:JSON.stringify({authenticatorAttachment:o.authenticatorAttachment,id:o.id,rawId:g(o.rawId),response:{attestationObject:l,clientDataJSON:g(o.response.clientDataJSON)},type:o.type}),origin:r.rpName,rpId:r.rpId},x={ephPK:(0,d.toHex)(s),expiry:Math.floor(Date.now()/1e3)+i};return{credentials:{credentials:JSON.stringify(x),method:"passkey",id:o.id,ephId:e},signature:JSON.stringify(S),passkeyCredentialId:o.id}}async function D({ephId:t,challenge:e,credentialId:n,rpConfig:r,ephPK:s,lifetime:i}){let p=(0,d.hexToBytes)(`0x${e}`,{size:32}),c=[{type:"public-key",id:O.Base64.toUint8Array(n)}],o={publicKey:{userVerification:"required",challenge:p,allowCredentials:c}},l=await navigator.credentials.get(o);if(l===null)throw new Error("Failed to get navigator credentials");let m=l.response,S=m.userHandle;if(S===null)throw new Error("User handle cannot be null");let x=g(m.signature),_={rawCredential:JSON.stringify({authenticatorAttachment:l.authenticatorAttachment,id:l.id,rawId:g(l.rawId),response:{authenticatorData:g(m.authenticatorData),clientDataJSON:g(m.clientDataJSON),signature:x,userHandle:g(S)},type:l.type}),origin:r.rpName,rpId:r.rpId,credentialId:n},$={ephPK:(0,d.toHex)(s),expiry:Math.floor(Date.now()/1e3)+i};return{credentials:{credentials:JSON.stringify($),method:"passkey",id:l.id,ephId:t},signature:JSON.stringify(_),passkeyCredentialId:l.id}}var U=require("viem"),J=require("@noble/curves/ed25519");async function W({setup:t,ephId:e,challenge:n,ephSK:r,ephPK:s}){let i={setup:t,challenge:n},p=new TextEncoder,c=(0,U.toHex)(J.ed25519.sign(p.encode(JSON.stringify(i)),r));console.log("AUTH SIGNATURE by eph key",c);let o={ephPK:(0,U.toHex)(s),expiry:0};return{credentials:{credentials:JSON.stringify(o),method:"ephemeral",id:e},signature:c}}var w=class{constructor(e,n,r,s,i=3600){a(this,"ephId");a(this,"browserWallet");a(this,"ephPK");a(this,"lifetime");a(this,"eoa");this.ephId=e,this.browserWallet=r,this.ephPK=s,this.lifetime=i,this.eoa=n}async authenticate({setup:e,challenge:n}){return await R({setup:e,ephId:this.ephId,eoa:this.eoa,challenge:n,browserWallet:this.browserWallet,ephPK:this.ephPK,lifetime:this.lifetime})}},A=class{constructor(e,n){a(this,"ephId");a(this,"ephSK");a(this,"ephPK");this.ephId=e,this.ephSK=n,this.ephPK=B.ed25519.getPublicKey(this.ephSK)}async authenticate({setup:e,challenge:n}){return await W({setup:e,ephId:this.ephId,challenge:n,ephSK:this.ephSK,ephPK:this.ephPK})}},I=class{constructor(e,n,r,s,i=3600,p){a(this,"rpConfig");a(this,"user");a(this,"ephPK");a(this,"lifetime");a(this,"ephId");a(this,"credentialId");this.rpConfig=e,this.user=n,this.ephPK=s,this.lifetime=i,this.ephId=r,this.credentialId=p}async authenticate({setup:e,challenge:n}){if(u(e))throw new Error("Passkey auth cannot be used for Sign requests, please use EphAuth instead");return this.credentialId?await D({ephId:this.ephId,credentialId:this.credentialId,challenge:n,rpConfig:this.rpConfig,ephPK:this.ephPK,lifetime:this.lifetime}):await N({user:this.user,ephId:this.ephId,challenge:n,rpConfig:this.rpConfig,ephPK:this.ephPK,lifetime:this.lifetime})}};var K=class{constructor(e){a(this,"walletProviderId");a(this,"walletProviderUrl");a(this,"passkeyCredentialId");this.walletProviderId=e.walletProviderId,this.walletProviderUrl=e.walletProviderUrl}getWalletId(){return this.walletProviderId}async startKeygen({setup:e,signer:n}){return this.connect(e,n).then(r=>{let s=r.split(":"),i=s[0].split("=")[1];return{publicKey:s[1].split("=")[1],keyId:i,passkeyCredentialId:this.passkeyCredentialId}})}async startSigngen({setup:e,signer:n}){return this.connect(e,n).then(r=>{let s=r.split(":"),i=s[0].split("=")[1],p=s[1].split("=")[1];return{sign:i,recid:parseInt(p)}})}connect(e,n){return new Promise((r,s)=>{let i=0,p;u(e)?(p="signgen",e.message=E(new TextEncoder().encode(e.message))):p="keygen";let c=new WebSocket(`${this.walletProviderUrl}/${p}`);c.addEventListener("open",o=>{switch(console.log(`Connection opened in state ${i} with event ${JSON.stringify(o,void 0,"	")}`),i){case 0:i=1,console.log(`Sending setup: ${JSON.stringify(e)}`),c.send(JSON.stringify(e));break;case 1:case 2:i=3,s("Incorrect protocol state");break;case 3:break}}),c.addEventListener("message",async o=>{switch(console.log(`Connection message in state ${i} with event ${JSON.stringify(o,void 0,"	")}`),i){case 0:i=3,s("Incorrect protocol state");break;case 1:{i=2;let l=await n(o.data);l.credentials.method==="passkey"&&(this.passkeyCredentialId=l.passkeyCredentialId),console.log(`Sending signature: ${JSON.stringify(l)}`),c.send(JSON.stringify(l));break}case 2:i=3,c.close(),r(o.data);break;case 3:break}}),c.addEventListener("error",o=>{console.log(`Connection error in state ${i} with event ${JSON.stringify(o,void 0,"	")}`),i!=3&&(i=3,s("Incorrect protocol state"))}),c.addEventListener("close",o=>{console.log(`Connection closed in state ${i} with event ${JSON.stringify(o,void 0,"	")}`),i!=3&&(i=3,s("Incorrect protocol state"))})})}};var h=j(require("viem")),C=require("viem/accounts"),q=require("@noble/curves/secp256k1");function M(t){if(t.startsWith("0x")&&(t=t.slice(2)),t.startsWith("04"))return(0,C.publicKeyToAddress)(`0x${t} `);if(t.startsWith("02")||t.startsWith("03")){let e=q.secp256k1.ProjectivePoint.fromHex(t).toHex(!1);return(0,C.publicKeyToAddress)(`0x${e}`)}else throw new Error("Invalid public key")}0&&(module.exports={EOAAuth,EphAuth,NetworkSigner,PasskeyAuth,WalletProviderServiceClient,computeAddress});

package/dist/index.d.ts

@@ -1,6 +1,8 @@
-export { NetworkSigner, SignResponse, KeygenResponse } from './networkSigner.ts';
-export { AuthMethod, EOAAuth, EphAuth } from './authentication.ts';
-export type { IBrowserWallet, TypedData } from './EOAauthentication.ts';
-export type { ClientConfig, IWalletProviderServiceClient } from './walletProviderServiceClientInterface.ts';
-export { WalletProviderServiceClient } from './walletProviderServiceClient.ts';
-export { computeAddress } from './viemSigner.ts';
+export type { SignResponse, KeygenResponse } from './networkSigner';
+export type { IBrowserWallet, TypedData } from './EOAauthentication';
+export type { ClientConfig, IWalletProviderServiceClient } from './walletProviderServiceClientInterface';
+export type { PasskeyUser, RelyingPartyConfig } from './passkeyAuthentication';
+export { NetworkSigner } from './networkSigner';
+export { EOAAuth, EphAuth, PasskeyAuth } from './authentication';
+export { WalletProviderServiceClient } from './walletProviderServiceClient';
+export { computeAddress } from './viemSigner';

package/dist/index.esm.js

@@ -0,0 +1 @@
+var M=Object.defineProperty,_=Object.defineProperties;var $=Object.getOwnPropertyDescriptors;var b=Object.getOwnPropertySymbols;var H=Object.prototype.hasOwnProperty,F=Object.prototype.propertyIsEnumerable;var P=(n,e,t)=>e in n?M(n,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):n[e]=t,m=(n,e)=>{for(var t in e||(e={}))H.call(e,t)&&P(n,t,e[t]);if(b)for(var t of b(e))F.call(e,t)&&P(n,t,e[t]);return n},w=(n,e)=>_(n,$(e));var a=(n,e,t)=>P(n,typeof e!="symbol"?e+"":e,t);import{toHex as z}from"viem";var L=1,V=2,y=class{constructor({t:e,n:t,ephPK:r,key_label:s,permissions:i}){a(this,"t");a(this,"n");a(this,"key_label");a(this,"metadata");this.t=e,this.n=t,this.key_label=s,this.metadata=[],this.metadata.push({tag:V,value:r}),i&&this.metadata.push({tag:L,value:i})}};function u(n){return n.message!==void 0}var A=class{constructor(e,t,r,s){a(this,"authModule");a(this,"threshold");a(this,"totalNodes");a(this,"wp_client");if(t===0)throw new Error("Threshold cannot be 0");this.threshold=t,this.totalNodes=r,this.authModule=s,this.wp_client=e}async authenticateAndCreateKey(e,t){try{let r=new y({t:this.threshold,n:this.totalNodes,permissions:t,ephPK:z(e)}),s=p=>this.authModule.authenticate({setup:r,challenge:p}),i=await this.wp_client.startKeygen({setup:r,signer:s});return console.log("Keygen response:",i),i}catch(r){throw console.error(r),r}}async authenticateAndSign(e,t){let r={t:this.threshold,key_id:e,message:t},s=p=>this.authModule.authenticate({setup:r,challenge:p}),i=await this.wp_client.startSigngen({setup:r,signer:s});return console.log("Sign response:",i),i}};import{toHex as O}from"viem";var G=[{name:"tag",type:"uint16"},{name:"value",type:"string"}],Y={Request:[{name:"setup",type:"KeygenSetupOpts"},{name:"challenge",type:"string"}],KeygenSetupOpts:[{name:"t",type:"uint32"},{name:"n",type:"uint32"},{name:"metadata",type:"TaggedValue[]"}],TaggedValue:G},j={name:"SilentShard authentication",version:"0.1.0"},Q=[{name:"name",type:"string"},{name:"version",type:"string"}];function X(n,e,t){console.log("EPHKEY",t);let r=new y({t:n.t,n:n.n,key_label:n.key_label,permissions:void 0,ephPK:O(t)});return{types:m({EIP712Domain:Q},Y),domain:j,primaryType:"Request",message:{setup:r,challenge:e}}}async function U({setup:n,ephId:e,eoa:t,challenge:r,browserWallet:s,ephPK:i,lifetime:p}){if(u(n))throw new Error("EOA auth cannot be used for Sign requests, please use EphAuth instead");let c=X(n,r,i),o=await s.signTypedData(t,c);console.log("User signed a request",o);let l={ephPK:O(i),expiry:Math.floor(Date.now()/1e3)+p};return{credentials:{credentials:JSON.stringify(l),method:"eoa",id:t,ephId:e},signature:o}}import{ed25519 as te}from"@noble/curves/ed25519";import{Base64 as Z}from"js-base64";var v=n=>btoa(String.fromCodePoint.apply(null,Array.from(n))),g=n=>Z.fromUint8Array(new Uint8Array(n),!0);import{Base64 as k}from"js-base64";import{toHex as R,hexToBytes as T}from"viem";async function E({user:n,ephId:e,challenge:t,rpConfig:r,ephPK:s,lifetime:i}){let p=T("0x".concat(t),{size:32}),c={publicKey:{authenticatorSelection:{authenticatorAttachment:void 0,residentKey:"preferred",requireResidentKey:!1,userVerification:"required"},challenge:p,excludeCredentials:[],pubKeyCredParams:[{type:"public-key",alg:-7},{type:"public-key",alg:-257}],rp:{name:r.rpName,id:r.rpId},user:w(m({},n),{id:k.toUint8Array(n.id)})}},o=await navigator.credentials.create(c);if(o===null)throw new Error("No credential returned");let l=g(o.response.attestationObject),f={rawCredential:JSON.stringify({authenticatorAttachment:o.authenticatorAttachment,id:o.id,rawId:g(o.rawId),response:{attestationObject:l,clientDataJSON:g(o.response.clientDataJSON)},type:o.type}),origin:r.rpName,rpId:r.rpId},S={ephPK:R(s),expiry:Math.floor(Date.now()/1e3)+i};return{credentials:{credentials:JSON.stringify(S),method:"passkey",id:o.id,ephId:e},signature:JSON.stringify(f),passkeyCredentialId:o.id}}async function N({ephId:n,challenge:e,credentialId:t,rpConfig:r,ephPK:s,lifetime:i}){let p=T("0x".concat(e),{size:32}),c=[{type:"public-key",id:k.toUint8Array(t)}],o={publicKey:{userVerification:"required",challenge:p,allowCredentials:c}},l=await navigator.credentials.get(o);if(l===null)throw new Error("Failed to get navigator credentials");let h=l.response,f=h.userHandle;if(f===null)throw new Error("User handle cannot be null");let S=g(h.signature),B={rawCredential:JSON.stringify({authenticatorAttachment:l.authenticatorAttachment,id:l.id,rawId:g(l.rawId),response:{authenticatorData:g(h.authenticatorData),clientDataJSON:g(h.clientDataJSON),signature:S,userHandle:g(f)},type:l.type}),origin:r.rpName,rpId:r.rpId,credentialId:t},q={ephPK:R(s),expiry:Math.floor(Date.now()/1e3)+i};return{credentials:{credentials:JSON.stringify(q),method:"passkey",id:l.id,ephId:n},signature:JSON.stringify(B),passkeyCredentialId:l.id}}import{toHex as D}from"viem";import{ed25519 as ee}from"@noble/curves/ed25519";async function J({setup:n,ephId:e,challenge:t,ephSK:r,ephPK:s}){let i={setup:n,challenge:t},p=new TextEncoder,c=D(ee.sign(p.encode(JSON.stringify(i)),r));console.log("AUTH SIGNATURE by eph key",c);let o={ephPK:D(s),expiry:0};return{credentials:{credentials:JSON.stringify(o),method:"ephemeral",id:e},signature:c}}var I=class{constructor(e,t,r,s,i=3600){a(this,"ephId");a(this,"browserWallet");a(this,"ephPK");a(this,"lifetime");a(this,"eoa");this.ephId=e,this.browserWallet=r,this.ephPK=s,this.lifetime=i,this.eoa=t}async authenticate({setup:e,challenge:t}){return await U({setup:e,ephId:this.ephId,eoa:this.eoa,challenge:t,browserWallet:this.browserWallet,ephPK:this.ephPK,lifetime:this.lifetime})}},K=class{constructor(e,t){a(this,"ephId");a(this,"ephSK");a(this,"ephPK");this.ephId=e,this.ephSK=t,this.ephPK=te.getPublicKey(this.ephSK)}async authenticate({setup:e,challenge:t}){return await J({setup:e,ephId:this.ephId,challenge:t,ephSK:this.ephSK,ephPK:this.ephPK})}},C=class{constructor(e,t,r,s,i=3600,p){a(this,"rpConfig");a(this,"user");a(this,"ephPK");a(this,"lifetime");a(this,"ephId");a(this,"credentialId");this.rpConfig=e,this.user=t,this.ephPK=s,this.lifetime=i,this.ephId=r,this.credentialId=p}async authenticate({setup:e,challenge:t}){if(u(e))throw new Error("Passkey auth cannot be used for Sign requests, please use EphAuth instead");return this.credentialId?await N({ephId:this.ephId,credentialId:this.credentialId,challenge:t,rpConfig:this.rpConfig,ephPK:this.ephPK,lifetime:this.lifetime}):await E({user:this.user,ephId:this.ephId,challenge:t,rpConfig:this.rpConfig,ephPK:this.ephPK,lifetime:this.lifetime})}};var x=class{constructor(e){a(this,"walletProviderId");a(this,"walletProviderUrl");a(this,"passkeyCredentialId");this.walletProviderId=e.walletProviderId,this.walletProviderUrl=e.walletProviderUrl}getWalletId(){return this.walletProviderId}async startKeygen({setup:e,signer:t}){return this.connect(e,t).then(r=>{let s=r.split(":"),i=s[0].split("=")[1];return{publicKey:s[1].split("=")[1],keyId:i,passkeyCredentialId:this.passkeyCredentialId}})}async startSigngen({setup:e,signer:t}){return this.connect(e,t).then(r=>{let s=r.split(":"),i=s[0].split("=")[1],p=s[1].split("=")[1];return{sign:i,recid:parseInt(p)}})}connect(e,t){return new Promise((r,s)=>{let i=0,p;u(e)?(p="signgen",e.message=v(new TextEncoder().encode(e.message))):p="keygen";let c=new WebSocket("".concat(this.walletProviderUrl,"/").concat(p));c.addEventListener("open",o=>{switch(console.log("Connection opened in state ".concat(i," with event ").concat(JSON.stringify(o,void 0,"	"))),i){case 0:i=1,console.log("Sending setup: ".concat(JSON.stringify(e))),c.send(JSON.stringify(e));break;case 1:case 2:i=3,s("Incorrect protocol state");break;case 3:break}}),c.addEventListener("message",async o=>{switch(console.log("Connection message in state ".concat(i," with event ").concat(JSON.stringify(o,void 0,"	"))),i){case 0:i=3,s("Incorrect protocol state");break;case 1:{i=2;let l=await t(o.data);l.credentials.method==="passkey"&&(this.passkeyCredentialId=l.passkeyCredentialId),console.log("Sending signature: ".concat(JSON.stringify(l))),c.send(JSON.stringify(l));break}case 2:i=3,c.close(),r(o.data);break;case 3:break}}),c.addEventListener("error",o=>{console.log("Connection error in state ".concat(i," with event ").concat(JSON.stringify(o,void 0,"	"))),i!=3&&(i=3,s("Incorrect protocol state"))}),c.addEventListener("close",o=>{console.log("Connection closed in state ".concat(i," with event ").concat(JSON.stringify(o,void 0,"	"))),i!=3&&(i=3,s("Incorrect protocol state"))})})}};import*as d from"viem";import{publicKeyToAddress as W,toAccount as _e}from"viem/accounts";import{secp256k1 as ne}from"@noble/curves/secp256k1";function ie(n){if(n.startsWith("0x")&&(n=n.slice(2)),n.startsWith("04"))return W("0x".concat(n," "));if(n.startsWith("02")||n.startsWith("03")){let e=ne.ProjectivePoint.fromHex(n).toHex(!1);return W("0x".concat(e))}else throw new Error("Invalid public key")}export{I as EOAAuth,K as EphAuth,A as NetworkSigner,C as PasskeyAuth,x as WalletProviderServiceClient,ie as computeAddress};

package/dist/networkSigner.d.ts

@@ -1,5 +1,5 @@
-import { AuthModule, UserAuthentication } from './authentication.ts';
-import { type IWalletProviderServiceClient } from './walletProviderServiceClientInterface.ts';
+import { AuthModule, UserAuthentication } from './authentication';
+import { type IWalletProviderServiceClient } from './walletProviderServiceClientInterface';
 /**
  * Response from the network for keygen requests
  * @alpha
@@ -19,6 +19,10 @@ export interface KeygenResponse {
      * where Y is set to 0x02 if Y-coord is even, or 0x03 if Y-coord is odd
      */
     publicKey: string;
+    /**
+     * Optional credential id used for passkey authentication
+     */
+    passkeyCredentialId?: string;
 }
 /**
  * Response from the network for sign request
@@ -49,12 +53,12 @@ export declare class KeygenSetupOpts {
         tag: number;
         value: string;
     }[];
-    constructor({ t, n, key_label, permissions, ephPK, }: {
+    constructor({ t, n, ephPK, key_label, permissions, }: {
         t: number;
         n: number;
+        ephPK: string;
         key_label?: string;
         permissions?: string;
-        ephPK?: string;
     });
 }
 /** Parameters used in Signature execution */
@@ -101,7 +105,6 @@ export declare class NetworkSigner {
      * The permissions are validated during sign requests.
      * @returns {@link KeygenResponse} containing `keyId` and the `pubKey` public part of the key
      * @public
-     * @alpha
      */
     authenticateAndCreateKey(ephKey: Uint8Array, permissions?: string): Promise<KeygenResponse>;
     /** Generate a signature. Uses `authModule` to authenticate the sign request by the User.
@@ -110,7 +113,6 @@ export declare class NetworkSigner {
      * @param message - the message to sign by the MPC network
      * @returns {@link SignResponse}
      * @public
-     * @alpha
      */
     authenticateAndSign(keyId: string, message: string): Promise<SignResponse>;
 }

package/dist/passkeyAuthentication.d.ts

@@ -0,0 +1,32 @@
+import { UserAuthentication } from './authentication';
+/** Information about the user currently registering. Read more: https://w3c.github.io/webauthn/#dom-publickeycredentialcreationoptions-user
+ * @alpha
+ * */
+export type PasskeyUser = {
+    id: string;
+    name: string;
+    displayName: string;
+};
+/** The RP responsible for registering and authenticating the user. Read more: https://w3c.github.io/webauthn/#dom-publickeycredentialcreationoptions-rp
+ * @alpha
+ * */
+export type RelyingPartyConfig = {
+    rpName: string;
+    rpId: string;
+};
+export declare function passkeyRegister({ user, ephId, challenge, rpConfig, ephPK, lifetime, }: {
+    user: PasskeyUser;
+    ephId: string;
+    challenge: string;
+    rpConfig: RelyingPartyConfig;
+    ephPK: Uint8Array;
+    lifetime: number;
+}): Promise<UserAuthentication>;
+export declare function passkeyLogin({ ephId, challenge, credentialId, rpConfig, ephPK, lifetime, }: {
+    ephId: string;
+    challenge: string;
+    credentialId: string;
+    rpConfig: RelyingPartyConfig;
+    ephPK: Uint8Array;
+    lifetime: number;
+}): Promise<UserAuthentication>;

package/dist/viemSigner.d.ts

@@ -9,5 +9,7 @@ import { NetworkSigner } from './networkSigner';
  * @param threshold The threshold.
  */
 export declare function createViemAccount(networkSigner: NetworkSigner, keyId: string, publicKey: string): viem.LocalAccount;
-/** Computes ETH address from ECDSA `publicKey` returned by Silent Network */
+/** Computes ETH address from ECDSA `publicKey` returned by Silent Network
+ * @public
+ */
 export declare function computeAddress(publicKey: string): viem.Address;

package/dist/walletProviderServiceClient.d.ts

@@ -8,6 +8,7 @@ import { type ClientConfig, IWalletProviderServiceClient, type Signer } from './
 export declare class WalletProviderServiceClient implements IWalletProviderServiceClient {
     walletProviderId: string;
     walletProviderUrl: string;
+    passkeyCredentialId?: string;
     /**
      * Create new client that connects to the backend service
      * @param config - config containing information about backend service
@@ -22,5 +23,5 @@ export declare class WalletProviderServiceClient implements IWalletProviderServi
         setup: SignSetupOpts;
         signer: Signer;
     }): Promise<SignResponse>;
-    connect(params: KeygenSetupOpts | SignSetupOpts, signer: Signer): Promise<string>;
+    connect(setupOpts: KeygenSetupOpts | SignSetupOpts, signer: Signer): Promise<string>;
 }

package/package.json

@@ -1,9 +1,18 @@
 {
   "name": "@silencelaboratories/walletprovider-sdk",
-  "version": "0.1.0",
+  "version": "0.2.0",
+  "author": "Silence Laboratories",
   "description": "Frontend SDK for Wallet Providers",
-  "main": "dist/index.js",
-  "types": "dist/index.d.ts",
+  "main": "./dist/index.cjs.js",
+  "module": "./dist/index.esm.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "require": "./dist/index.cjs.js",
+      "import": "./dist/index.esm.js"
+    }
+  },
   "files": [
     "dist"
   ],
@@ -12,27 +21,29 @@
     "formatcheck": "prettier --check --cache .",
     "lint": "eslint --cache ./src/**/*.ts",
     "typecheck": "tsc -p . --noEmit",
-    "build": "bun run scripts/build.mjs && bun run build:declaration",
-    "build:e2e": "bun run scripts/build.e2e.mjs && bun run build:declaration",
+    "build": "npm run clean && node build.js && npm run build:declaration",
     "build:declaration": "tsc -p . --emitDeclarationOnly",
-    "test": "bun test",
-    "test:watch": "bun test --watch",
-    "docs": "bun run build:declaration && api-extractor run --local --verbose && api-documenter  markdown -i ./temp -o ./docs"
+    "clean": "rimraf dist",
+    "prepack": "npm run clean && npm run build && npm run build:declaration",
+    "docs": "npm run build:declaration && api-extractor run --local --verbose && api-documenter  markdown -i ./temp -o ./docs"
   },
-  "type": "module",
   "devDependencies": {
     "@eslint/js": "^9.3.0",
     "@microsoft/api-documenter": "^7.25.2",
     "@microsoft/api-extractor": "^7.46.2",
-    "@types/bun": "^1.1.2",
+    "esbuild": "^0.23.0",
+    "esbuild-node-externals": "^1.14.0",
     "eslint": "^8.x",
     "globals": "^15.3.0",
+    "npm-dts": "^1.3.13",
     "prettier": "^3.2.5",
+    "rimraf": "^6.0.1",
     "typescript": "^5.4.5",
     "typescript-eslint": "^7.11.0"
   },
   "dependencies": {
     "@noble/curves": "^1.4.2",
+    "js-base64": "^3.7.7",
     "viem": "^2.11.1"
   }
 }

package/dist/index.js

@@ -1 +0,0 @@
-import{toHex as R} from"viem";function Y(x){return x.message!==void 0}var j=1,E=2;class H{t;n;key_label;metadata;constructor({t:x,n:F,key_label:B,permissions:J,ephPK:U}){if(this.t=x,this.n=F,this.key_label=B,this.metadata=[],J)this.metadata.push({tag:j,value:J});if(U)this.metadata.push({tag:E,value:U})}}class V{authModule;threshold;totalNodes;wp_client;constructor(x,F,B,J){if(F===0)throw new Error("Threshold cannot be 0");this.threshold=F,this.totalNodes=B,this.authModule=J,this.wp_client=x}async authenticateAndCreateKey(x,F){try{const B=new H({t:this.threshold,n:this.totalNodes,permissions:F,ephPK:R(x)});console.log("Generated Payload:",B);const J=(X)=>this.authModule.authenticate({setup:B,challenge:X}),U=await this.wp_client.startKeygen({setup:B,signer:J});return console.log("Keygen response:",U),U}catch(B){throw console.error(B),B}}async authenticateAndSign(x,F){const B={t:this.threshold,key_id:x,message:F},J=(X)=>this.authModule.authenticate({setup:B,challenge:X}),U=await this.wp_client.startSigngen({setup:B,signer:J});return console.log("Sign response:",U),U}}import{toHex as z} from"viem";import{ed25519 as f} from"@noble/curves/ed25519";var k=function(x,F,B){console.log("EPHKEY",B);const J=new H({t:x.t,n:x.n,key_label:x.key_label,permissions:void 0,ephPK:z(B)});return console.log("SETUP_NO_PERM",J),{types:{EIP712Domain:_,...w},domain:I,primaryType:"Request",message:{setup:J,challenge:F}}};async function D({setup:x,user_id:F,challenge:B,browserWallet:J,ephPK:U,lifetime:X}){if(Y(x))throw new Error("EOA auth cannot be used for Sign requests, please use EphAuth instead");const Z=k(x,B,U);console.log("typed request:"),console.log(JSON.stringify(Z,void 0,4));const Q=await J.signTypedData(F,Z);console.log("User signed a request",Q);const $={eoa:F,ephPK:z(U),expiry:Math.floor(Date.now()/1000)+X};return{credentials:{credentials:JSON.stringify($),method:"eoa",id:F},signature:Q}}async function N({setup:x,user_id:F,challenge:B,ephSK:J,ephPK:U}){const X={setup:x,challenge:B},Z=new TextEncoder,Q=z(f.sign(Z.encode(JSON.stringify(X)),J));console.log("AUTH SIGNATURE by eph key",Q),console.log("User signed a request",Q);const $={eoa:F,ephPK:z(U),expiry:0};return{credentials:{credentials:JSON.stringify($),method:"ephemeral",id:F},signature:Q}}var M=[{name:"tag",type:"uint16"},{name:"value",type:"string"}],w={Request:[{name:"setup",type:"KeygenSetupOpts"},{name:"challenge",type:"string"}],KeygenSetupOpts:[{name:"t",type:"uint32"},{name:"n",type:"uint32"},{name:"metadata",type:"TaggedValue[]"}],TaggedValue:M},I={name:"SilentShard authentication",version:"0.1.0"},_=[{name:"name",type:"string"},{name:"version",type:"string"}];import{ed25519 as v} from"@noble/curves/ed25519";var q;(function(B){B[B["EOA"]=0]="EOA";B[B["NONE"]=1]="NONE"})(q||(q={}));class W{userId;browserWallet;ephPK;lifetime;constructor(x,F,B,J=3600){this.userId=x,this.browserWallet=F,this.ephPK=B,this.lifetime=J}async authenticate({setup:x,challenge:F}){return await D({setup:x,user_id:this.userId,challenge:F,browserWallet:this.browserWallet,ephPK:this.ephPK,lifetime:this.lifetime})}}class C{userId;ephSK;ephPK;constructor(x,F){this.userId=x,this.ephSK=F,this.ephPK=v.getPublicKey(this.ephSK)}async authenticate({setup:x,challenge:F}){return await N({setup:x,user_id:this.userId,challenge:F,ephSK:this.ephSK,ephPK:this.ephPK})}}var T=(x)=>btoa(String.fromCodePoint.apply(null,Array.from(x)));var L;(function(U){U[U["initiated"]=0]="initiated";U[U["waitingForSign"]=1]="waitingForSign";U[U["waitingForResult"]=2]="waitingForResult";U[U["finished"]=3]="finished"})(L||(L={}));class O{walletProviderId;walletProviderUrl;constructor(x){this.walletProviderId=x.walletProviderId,this.walletProviderUrl=x.walletProviderUrl}getWalletId(){return this.walletProviderId}async startKeygen({setup:x,signer:F}){return this.connect(x,F).then((B)=>{const J=B.split(":"),U=J[1].split("=")[1],X=J[0].split("=")[1];return{publicKey:U,keyId:X}})}async startSigngen({setup:x,signer:F}){return this.connect(x,F).then((B)=>{const J=B.split(":"),U=J[0].split("=")[1],X=J[1].split("=")[1];return{sign:U,recid:parseInt(X)}})}connect(x,F){return new Promise((B,J)=>{let U=L.initiated,X;if(Y(x))X="signgen",x.message=T((new TextEncoder()).encode(x.message));else X="keygen";const Z=new WebSocket(`${this.walletProviderUrl}/${X}`);Z.addEventListener("open",(Q)=>{switch(console.log(`Connection opened in state ${U} with event ${JSON.stringify(Q,void 0,"\t")}`),U){case L.initiated:U=L.waitingForSign,console.log(`Sending setup: ${JSON.stringify(x)}`),Z.send(JSON.stringify(x));break;case L.waitingForSign:case L.waitingForResult:U=L.finished,J("Incorrect protocol state");break;case L.finished:break}}),Z.addEventListener("message",async(Q)=>{switch(console.log(`Connection message in state ${U} with event ${JSON.stringify(Q,void 0,"\t")}`),U){case L.initiated:U=L.finished,J("Incorrect protocol state");break;case L.waitingForSign:{U=L.waitingForResult;const $=await F(Q.data);console.log(`Sending signature: ${JSON.stringify($)}`),Z.send(JSON.stringify($));break}case L.waitingForResult:U=L.finished,Z.close(),B(Q.data);break;case L.finished:break}}),Z.addEventListener("error",(Q)=>{if(console.log(`Connection error in state ${U} with event ${JSON.stringify(Q,void 0,"\t")}`),U!=L.finished)U=L.finished,J("Incorrect protocol state")}),Z.addEventListener("close",(Q)=>{if(console.log(`Connection closed in state ${U} with event ${JSON.stringify(Q,void 0,"\t")}`),U!=L.finished)U=L.finished,J("Incorrect protocol state")})})}}import*as G from"viem";import{publicKeyToAddress as A,toAccount as t} from"viem/accounts";import{secp256k1 as b} from"@noble/curves/secp256k1";function m(x){if(x.startsWith("0x"))x=x.slice(2);if(x.startsWith("04"))return A(`0x${x} `);else if(x.startsWith("02")||x.startsWith("03")){const F=b.ProjectivePoint.fromHex(x).toHex(!1);return A(`0x${F}`)}else throw new Error("Invalid public key")}export{m as computeAddress,O as WalletProviderServiceClient,V as NetworkSigner,C as EphAuth,W as EOAAuth,q as AuthMethod};