@snap-protocol/core 0.1.0

package/dist/crypto/Signer.d.ts

@@ -0,0 +1,31 @@
+import type { UnsignedMessage, SigningIntermediates, SchnorrSignatureHex } from '../types/message.js';
+import type { PublicKeyXOnly, PrivateKeyHex } from '../types/keys.js';
+export interface SignResult {
+    signature: SchnorrSignatureHex;
+    intermediates: SigningIntermediates;
+}
+export interface SignOptions {
+    /** Auxiliary randomness for Schnorr signing. Defaults to 32 zero bytes (deterministic). */
+    auxRand?: Uint8Array;
+}
+export declare class Signer {
+    /**
+     * Build the canonical signature input string from a message.
+     * Concatenates 7 fields with NULL byte (0x00) separators.
+     */
+    static buildSignatureInput(message: UnsignedMessage): string;
+    /**
+     * Hash the UTF-8 encoded signature input with SHA-256.
+     */
+    static hashSignatureInput(signatureInput: string): Uint8Array;
+    /**
+     * Sign a message. Returns signature hex and intermediates for debugging.
+     * Uses deterministic signing (zero aux randomness) by default.
+     */
+    static sign(message: UnsignedMessage, privateKey: PrivateKeyHex, options?: SignOptions): SignResult;
+    /**
+     * Verify a Schnorr signature against a message and public key.
+     */
+    static verify(message: UnsignedMessage, signature: SchnorrSignatureHex, publicKey: PublicKeyXOnly): boolean;
+}
+//# sourceMappingURL=Signer.d.ts.map

package/dist/crypto/Signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"Signer.d.ts","sourceRoot":"","sources":["../../src/crypto/Signer.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAC;AACtG,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AAEtE,MAAM,WAAW,UAAU;IACzB,SAAS,EAAE,mBAAmB,CAAC;IAC/B,aAAa,EAAE,oBAAoB,CAAC;CACrC;AAED,MAAM,WAAW,WAAW;IAC1B,2FAA2F;IAC3F,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAED,qBAAa,MAAM;IACjB;;;OAGG;IACH,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,GAAG,MAAM;IAa5D;;OAEG;IACH,MAAM,CAAC,kBAAkB,CAAC,cAAc,EAAE,MAAM,GAAG,UAAU;IAK7D;;;OAGG;IACH,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,UAAU;IAkBnG;;OAEG;IACH,MAAM,CAAC,MAAM,CACX,OAAO,EAAE,eAAe,EACxB,SAAS,EAAE,mBAAmB,EAC9B,SAAS,EAAE,cAAc,GACxB,OAAO;CAUX"}

package/dist/crypto/Signer.js

@@ -0,0 +1,64 @@
+import { schnorr } from '@noble/curves/secp256k1.js';
+import { sha256 } from '@noble/hashes/sha256';
+import { bytesToHex, hexToBytes } from '@noble/hashes/utils';
+import { Canonicalizer } from './Canonicalizer.js';
+export class Signer {
+    /**
+     * Build the canonical signature input string from a message.
+     * Concatenates 7 fields with NULL byte (0x00) separators.
+     */
+    static buildSignatureInput(message) {
+        const parts = [
+            message.id,
+            message.from,
+            message.to,
+            message.type,
+            message.method,
+            Canonicalizer.canonicalize(message.payload),
+            message.timestamp.toString(),
+        ];
+        return parts.join('\x00');
+    }
+    /**
+     * Hash the UTF-8 encoded signature input with SHA-256.
+     */
+    static hashSignatureInput(signatureInput) {
+        const inputBytes = new TextEncoder().encode(signatureInput);
+        return sha256(inputBytes);
+    }
+    /**
+     * Sign a message. Returns signature hex and intermediates for debugging.
+     * Uses deterministic signing (zero aux randomness) by default.
+     */
+    static sign(message, privateKey, options) {
+        const signatureInput = Signer.buildSignatureInput(message);
+        const inputBytes = new TextEncoder().encode(signatureInput);
+        const hash = sha256(inputBytes);
+        const auxRand = options?.auxRand ?? new Uint8Array(32);
+        const sig = schnorr.sign(hash, hexToBytes(privateKey), auxRand);
+        return {
+            signature: bytesToHex(sig),
+            intermediates: {
+                canonicalPayload: Canonicalizer.canonicalize(message.payload),
+                signatureInput,
+                signatureInputHex: bytesToHex(inputBytes),
+                sha256Hash: bytesToHex(hash),
+            },
+        };
+    }
+    /**
+     * Verify a Schnorr signature against a message and public key.
+     */
+    static verify(message, signature, publicKey) {
+        try {
+            const signatureInput = Signer.buildSignatureInput(message);
+            const inputBytes = new TextEncoder().encode(signatureInput);
+            const hash = sha256(inputBytes);
+            return schnorr.verify(hexToBytes(signature), hash, hexToBytes(publicKey));
+        }
+        catch {
+            return false;
+        }
+    }
+}
+//# sourceMappingURL=Signer.js.map

package/dist/crypto/Signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"Signer.js","sourceRoot":"","sources":["../../src/crypto/Signer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,4BAA4B,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC7D,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAcnD,MAAM,OAAO,MAAM;IACjB;;;OAGG;IACH,MAAM,CAAC,mBAAmB,CAAC,OAAwB;QACjD,MAAM,KAAK,GAAG;YACZ,OAAO,CAAC,EAAE;YACV,OAAO,CAAC,IAAI;YACZ,OAAO,CAAC,EAAE;YACV,OAAO,CAAC,IAAI;YACZ,OAAO,CAAC,MAAM;YACd,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC;YAC3C,OAAO,CAAC,SAAS,CAAC,QAAQ,EAAE;SAC7B,CAAC;QACF,OAAO,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAC5B,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,kBAAkB,CAAC,cAAsB;QAC9C,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,UAAU,CAAC,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,IAAI,CAAC,OAAwB,EAAE,UAAyB,EAAE,OAAqB;QACpF,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;QAC3D,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;QAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;QAChC,MAAM,OAAO,GAAG,OAAO,EAAE,OAAO,IAAI,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;QAEhE,OAAO;YACL,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC;YAC1B,aAAa,EAAE;gBACb,gBAAgB,EAAE,aAAa,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC7D,cAAc;gBACd,iBAAiB,EAAE,UAAU,CAAC,UAAU,CAAC;gBACzC,UAAU,EAAE,UAAU,CAAC,IAAI,CAAC;aAC7B;SACF,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,MAAM,CACX,OAAwB,EACxB,SAA8B,EAC9B,SAAyB;QAEzB,IAAI,CAAC;YACH,MAAM,cAAc,GAAG,MAAM,CAAC,mBAAmB,CAAC,OAAO,CAAC,CAAC;YAC3D,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,cAAc,CAAC,CAAC;YAC5D,MAAM,IAAI,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC;YAChC,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;CACF"}

package/dist/crypto/index.d.ts

@@ -0,0 +1,5 @@
+export { KeyManager } from './KeyManager.js';
+export { Canonicalizer } from './Canonicalizer.js';
+export { Signer } from './Signer.js';
+export type { SignResult, SignOptions } from './Signer.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/crypto/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC;AACrC,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC"}

package/dist/crypto/index.js

@@ -0,0 +1,4 @@
+export { KeyManager } from './KeyManager.js';
+export { Canonicalizer } from './Canonicalizer.js';
+export { Signer } from './Signer.js';
+//# sourceMappingURL=index.js.map

package/dist/crypto/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/crypto/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAC"}

package/dist/errors/SnapError.d.ts

@@ -0,0 +1,15 @@
+import { type SnapErrorData } from '../types/errors.js';
+export declare class SnapError extends Error {
+    readonly code: number;
+    readonly data?: Record<string, unknown>;
+    constructor(code: number, message: string, data?: Record<string, unknown>);
+    toJSON(): SnapErrorData;
+    static signatureInvalid(details?: Record<string, unknown>): SnapError;
+    static signatureMissing(): SnapError;
+    static timestampExpired(provided: number, serverTime: number): SnapError;
+    static invalidMessage(reason: string): SnapError;
+    static invalidPayload(reason: string): SnapError;
+    static duplicateMessage(id: string, from: string): SnapError;
+    static identityInvalid(address: string): SnapError;
+}
+//# sourceMappingURL=SnapError.d.ts.map

package/dist/errors/SnapError.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SnapError.d.ts","sourceRoot":"","sources":["../../src/errors/SnapError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAEpE,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;gBAE5B,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IAOzE,MAAM,IAAI,aAAa;IAQvB,MAAM,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,SAAS;IAIrE,MAAM,CAAC,gBAAgB,IAAI,SAAS;IAIpC,MAAM,CAAC,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,SAAS;IAQxE,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS;IAIhD,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS;IAIhD,MAAM,CAAC,gBAAgB,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,SAAS;IAI5D,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS;CAGnD"}

package/dist/errors/SnapError.js

@@ -0,0 +1,44 @@
+import { ErrorCodes } from '../types/errors.js';
+export class SnapError extends Error {
+    code;
+    data;
+    constructor(code, message, data) {
+        super(message);
+        this.name = 'SnapError';
+        this.code = code;
+        this.data = data;
+    }
+    toJSON() {
+        return {
+            code: this.code,
+            message: this.message,
+            ...(this.data !== undefined ? { data: this.data } : {}),
+        };
+    }
+    static signatureInvalid(details) {
+        return new SnapError(ErrorCodes.SIGNATURE_INVALID, 'Signature verification failed', details);
+    }
+    static signatureMissing() {
+        return new SnapError(ErrorCodes.SIGNATURE_MISSING, 'Signature is required for requests');
+    }
+    static timestampExpired(provided, serverTime) {
+        return new SnapError(ErrorCodes.TIMESTAMP_EXPIRED, 'Timestamp outside acceptable window', {
+            provided,
+            serverTime,
+            maxDrift: 60,
+        });
+    }
+    static invalidMessage(reason) {
+        return new SnapError(ErrorCodes.INVALID_MESSAGE, reason);
+    }
+    static invalidPayload(reason) {
+        return new SnapError(ErrorCodes.INVALID_PAYLOAD, reason);
+    }
+    static duplicateMessage(id, from) {
+        return new SnapError(ErrorCodes.DUPLICATE_MESSAGE, 'Duplicate message ID', { id, from });
+    }
+    static identityInvalid(address) {
+        return new SnapError(ErrorCodes.IDENTITY_INVALID, 'Invalid P2TR address', { address });
+    }
+}
+//# sourceMappingURL=SnapError.js.map

package/dist/errors/SnapError.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SnapError.js","sourceRoot":"","sources":["../../src/errors/SnapError.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAsB,MAAM,oBAAoB,CAAC;AAEpE,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,IAAI,CAAS;IACb,IAAI,CAA2B;IAExC,YAAY,IAAY,EAAE,OAAe,EAAE,IAA8B;QACvE,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,WAAW,CAAC;QACxB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;IAED,MAAM;QACJ,OAAO;YACL,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,gBAAgB,CAAC,OAAiC;QACvD,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,iBAAiB,EAAE,+BAA+B,EAAE,OAAO,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,CAAC,gBAAgB;QACrB,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,iBAAiB,EAAE,oCAAoC,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,CAAC,gBAAgB,CAAC,QAAgB,EAAE,UAAkB;QAC1D,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,iBAAiB,EAAE,qCAAqC,EAAE;YACxF,QAAQ;YACR,UAAU;YACV,QAAQ,EAAE,EAAE;SACb,CAAC,CAAC;IACL,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,MAAc;QAClC,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,CAAC,cAAc,CAAC,MAAc;QAClC,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,eAAe,EAAE,MAAM,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,CAAC,gBAAgB,CAAC,EAAU,EAAE,IAAY;QAC9C,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,iBAAiB,EAAE,sBAAsB,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3F,CAAC;IAED,MAAM,CAAC,eAAe,CAAC,OAAe;QACpC,OAAO,IAAI,SAAS,CAAC,UAAU,CAAC,gBAAgB,EAAE,sBAAsB,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;IACzF,CAAC;CACF"}

package/dist/errors/index.d.ts

@@ -0,0 +1,2 @@
+export { SnapError } from './SnapError.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/errors/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/errors/index.js

@@ -0,0 +1,2 @@
+export { SnapError } from './SnapError.js';
+//# sourceMappingURL=index.js.map

package/dist/errors/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/errors/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,34 @@
+export { KeyManager } from './crypto/KeyManager.js';
+export { Canonicalizer } from './crypto/Canonicalizer.js';
+export { Signer } from './crypto/Signer.js';
+export type { SignResult, SignOptions } from './crypto/Signer.js';
+export { MessageBuilder } from './messaging/MessageBuilder.js';
+export { MessageSigner } from './messaging/MessageSigner.js';
+export { MessageValidator } from './messaging/MessageValidator.js';
+export type { ValidationOptions, ValidationResult } from './messaging/MessageValidator.js';
+export { SnapError } from './errors/SnapError.js';
+export { PluginRegistry } from './plugins/PluginRegistry.js';
+export type { Network, HexString, PublicKeyXOnly, PrivateKeyHex, P2TRAddress, KeyPair, } from './types/keys.js';
+export type { MessageType, MethodName, TaskState, SchnorrSignatureHex, UnsignedMessage, SnapMessage, SigningIntermediates, } from './types/message.js';
+export type { SnapErrorData, ErrorCode } from './types/errors.js';
+export { ErrorCodes } from './types/errors.js';
+export type { TransportLogger, TransportPlugin, TransportSendOptions, ReplayStore, TaskStore, Middleware, MiddlewareContext, NextFn, } from './types/plugin.js';
+export type { MediaType, TextPart, RawPart, UrlPart, DataPart, Part, } from './types/part.js';
+export type { Artifact } from './types/artifact.js';
+export type { MessageRole, TaskStatus, InnerMessage, Task, } from './types/task.js';
+export type { Skill, Capabilities, Trust, Provider, EndpointProtocol, AgentEndpoint, AgentCard, } from './types/agent-card.js';
+export type { MessageSendRequest, MessageSendResponse, TasksGetRequest, TasksGetResponse, TasksCancelRequest, TasksCancelResponse, } from './types/payloads.js';
+export type { MethodPayloadMap, HandlerContext, MethodHandler, StreamMethodHandler, } from './types/handler.js';
+export type { StreamTransportPlugin, TaskProgressEvent, TaskArtifactEvent, } from './types/transport.js';
+export { InMemoryReplayStore } from './stores/InMemoryReplayStore.js';
+export { InMemoryTaskStore } from './stores/InMemoryTaskStore.js';
+export { AgentCardBuilder } from './agent/AgentCardBuilder.js';
+export { SnapAgent } from './agent/SnapAgent.js';
+export type { SnapAgentConfig } from './agent/SnapAgent.js';
+export { HttpTransport } from './transport/HttpTransport.js';
+export type { HttpTransportConfig } from './transport/HttpTransport.js';
+export { WebSocketTransport } from './transport/WebSocketTransport.js';
+export type { WebSocketTransportConfig } from './transport/WebSocketTransport.js';
+export { NostrTransport, SNAP_MESSAGE_KIND, SNAP_AGENT_CARD_KIND } from './transport/NostrTransport.js';
+export type { NostrTransportConfig, AgentDiscoveryFilter } from './transport/NostrTransport.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,YAAY,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAGlE,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AACnE,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAG3F,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAGlD,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAG7D,YAAY,EACV,OAAO,EACP,SAAS,EACT,cAAc,EACd,aAAa,EACb,WAAW,EACX,OAAO,GACR,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,WAAW,EACX,UAAU,EACV,SAAS,EACT,mBAAmB,EACnB,eAAe,EACf,WAAW,EACX,oBAAoB,GACrB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,mBAAmB,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAE/C,YAAY,EACV,eAAe,EACf,eAAe,EACf,oBAAoB,EACpB,WAAW,EACX,SAAS,EACT,UAAU,EACV,iBAAiB,EACjB,MAAM,GACP,MAAM,mBAAmB,CAAC;AAE3B,YAAY,EACV,SAAS,EACT,QAAQ,EACR,OAAO,EACP,OAAO,EACP,QAAQ,EACR,IAAI,GACL,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,YAAY,EACV,WAAW,EACX,UAAU,EACV,YAAY,EACZ,IAAI,GACL,MAAM,iBAAiB,CAAC;AAEzB,YAAY,EACV,KAAK,EACL,YAAY,EACZ,KAAK,EACL,QAAQ,EACR,gBAAgB,EAChB,aAAa,EACb,SAAS,GACV,MAAM,uBAAuB,CAAC;AAE/B,YAAY,EACV,kBAAkB,EAClB,mBAAmB,EACnB,eAAe,EACf,gBAAgB,EAChB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAE7B,YAAY,EACV,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,mBAAmB,GACpB,MAAM,oBAAoB,CAAC;AAE5B,YAAY,EACV,qBAAqB,EACrB,iBAAiB,EACjB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAG9B,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAGlE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAG5D,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,YAAY,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAExE,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AACvE,YAAY,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAC;AAElF,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AACxG,YAAY,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/index.js

@@ -0,0 +1,24 @@
+// Core crypto
+export { KeyManager } from './crypto/KeyManager.js';
+export { Canonicalizer } from './crypto/Canonicalizer.js';
+export { Signer } from './crypto/Signer.js';
+// Messaging
+export { MessageBuilder } from './messaging/MessageBuilder.js';
+export { MessageSigner } from './messaging/MessageSigner.js';
+export { MessageValidator } from './messaging/MessageValidator.js';
+// Errors
+export { SnapError } from './errors/SnapError.js';
+// Plugins
+export { PluginRegistry } from './plugins/PluginRegistry.js';
+export { ErrorCodes } from './types/errors.js';
+// Stores
+export { InMemoryReplayStore } from './stores/InMemoryReplayStore.js';
+export { InMemoryTaskStore } from './stores/InMemoryTaskStore.js';
+// Agent
+export { AgentCardBuilder } from './agent/AgentCardBuilder.js';
+export { SnapAgent } from './agent/SnapAgent.js';
+// Transports
+export { HttpTransport } from './transport/HttpTransport.js';
+export { WebSocketTransport } from './transport/WebSocketTransport.js';
+export { NostrTransport, SNAP_MESSAGE_KIND, SNAP_AGENT_CARD_KIND } from './transport/NostrTransport.js';
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,cAAc;AACd,OAAO,EAAE,UAAU,EAAE,MAAM,wBAAwB,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAG5C,YAAY;AACZ,OAAO,EAAE,cAAc,EAAE,MAAM,+BAA+B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC7D,OAAO,EAAE,gBAAgB,EAAE,MAAM,iCAAiC,CAAC;AAGnE,SAAS;AACT,OAAO,EAAE,SAAS,EAAE,MAAM,uBAAuB,CAAC;AAElD,UAAU;AACV,OAAO,EAAE,cAAc,EAAE,MAAM,6BAA6B,CAAC;AAuB7D,OAAO,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AA+D/C,SAAS;AACT,OAAO,EAAE,mBAAmB,EAAE,MAAM,iCAAiC,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAElE,QAAQ;AACR,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAC;AAC/D,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAGjD,aAAa;AACb,OAAO,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAG7D,OAAO,EAAE,kBAAkB,EAAE,MAAM,mCAAmC,CAAC;AAGvE,OAAO,EAAE,cAAc,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC"}

package/dist/messaging/MessageBuilder.d.ts

@@ -0,0 +1,25 @@
+import type { UnsignedMessage, MessageType, MethodName } from '../types/message.js';
+import type { P2TRAddress } from '../types/keys.js';
+export declare class MessageBuilder {
+    private _id?;
+    private _version;
+    private _from?;
+    private _to?;
+    private _type;
+    private _method?;
+    private _payload;
+    private _timestamp?;
+    id(id: string): this;
+    version(version: string): this;
+    from(from: P2TRAddress): this;
+    to(to: P2TRAddress): this;
+    type(type: MessageType): this;
+    method(method: MethodName): this;
+    payload(payload: Record<string, unknown>): this;
+    timestamp(timestamp: number): this;
+    /**
+     * Build the unsigned message. Throws if required fields are missing.
+     */
+    build(): UnsignedMessage;
+}
+//# sourceMappingURL=MessageBuilder.d.ts.map

package/dist/messaging/MessageBuilder.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MessageBuilder.d.ts","sourceRoot":"","sources":["../../src/messaging/MessageBuilder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,qBAAqB,CAAC;AACpF,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEpD,qBAAa,cAAc;IACzB,OAAO,CAAC,GAAG,CAAC,CAAS;IACrB,OAAO,CAAC,QAAQ,CAAiB;IACjC,OAAO,CAAC,KAAK,CAAC,CAAc;IAC5B,OAAO,CAAC,GAAG,CAAC,CAAc;IAC1B,OAAO,CAAC,KAAK,CAA0B;IACvC,OAAO,CAAC,OAAO,CAAC,CAAa;IAC7B,OAAO,CAAC,QAAQ,CAA+B;IAC/C,OAAO,CAAC,UAAU,CAAC,CAAS;IAE5B,EAAE,CAAC,EAAE,EAAE,MAAM,GAAG,IAAI;IAKpB,OAAO,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAK9B,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAK7B,EAAE,CAAC,EAAE,EAAE,WAAW,GAAG,IAAI;IAKzB,IAAI,CAAC,IAAI,EAAE,WAAW,GAAG,IAAI;IAK7B,MAAM,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAKhC,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI;IAK/C,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAKlC;;OAEG;IACH,KAAK,IAAI,eAAe;CAkBzB"}

package/dist/messaging/MessageBuilder.js

@@ -0,0 +1,68 @@
+export class MessageBuilder {
+    _id;
+    _version = '0.1';
+    _from;
+    _to;
+    _type = 'request';
+    _method;
+    _payload = {};
+    _timestamp;
+    id(id) {
+        this._id = id;
+        return this;
+    }
+    version(version) {
+        this._version = version;
+        return this;
+    }
+    from(from) {
+        this._from = from;
+        return this;
+    }
+    to(to) {
+        this._to = to;
+        return this;
+    }
+    type(type) {
+        this._type = type;
+        return this;
+    }
+    method(method) {
+        this._method = method;
+        return this;
+    }
+    payload(payload) {
+        this._payload = payload;
+        return this;
+    }
+    timestamp(timestamp) {
+        this._timestamp = timestamp;
+        return this;
+    }
+    /**
+     * Build the unsigned message. Throws if required fields are missing.
+     */
+    build() {
+        if (!this._id)
+            throw new Error('id is required');
+        if (!this._from)
+            throw new Error('from is required');
+        if (!this._to)
+            throw new Error('to is required');
+        if (!this._method)
+            throw new Error('method is required');
+        if (this._timestamp === undefined)
+            throw new Error('timestamp is required');
+        return {
+            id: this._id,
+            version: this._version,
+            from: this._from,
+            to: this._to,
+            type: this._type,
+            method: this._method,
+            payload: this._payload,
+            timestamp: this._timestamp,
+        };
+    }
+}
+//# sourceMappingURL=MessageBuilder.js.map

package/dist/messaging/MessageBuilder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MessageBuilder.js","sourceRoot":"","sources":["../../src/messaging/MessageBuilder.ts"],"names":[],"mappings":"AAGA,MAAM,OAAO,cAAc;IACjB,GAAG,CAAU;IACb,QAAQ,GAAW,KAAK,CAAC;IACzB,KAAK,CAAe;IACpB,GAAG,CAAe;IAClB,KAAK,GAAgB,SAAS,CAAC;IAC/B,OAAO,CAAc;IACrB,QAAQ,GAA4B,EAAE,CAAC;IACvC,UAAU,CAAU;IAE5B,EAAE,CAAC,EAAU;QACX,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,OAAe;QACrB,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,IAAiB;QACpB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,EAAE,CAAC,EAAe;QAChB,IAAI,CAAC,GAAG,GAAG,EAAE,CAAC;QACd,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,IAAiB;QACpB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;QAClB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,CAAC,MAAkB;QACvB,IAAI,CAAC,OAAO,GAAG,MAAM,CAAC;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,CAAC,OAAgC;QACtC,IAAI,CAAC,QAAQ,GAAG,OAAO,CAAC;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,CAAC,SAAiB;QACzB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,kBAAkB,CAAC,CAAC;QACrD,IAAI,CAAC,IAAI,CAAC,GAAG;YAAE,MAAM,IAAI,KAAK,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,CAAC,IAAI,CAAC,OAAO;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;QACzD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;QAE5E,OAAO;YACL,EAAE,EAAE,IAAI,CAAC,GAAG;YACZ,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,EAAE,EAAE,IAAI,CAAC,GAAG;YACZ,IAAI,EAAE,IAAI,CAAC,KAAK;YAChB,MAAM,EAAE,IAAI,CAAC,OAAO;YACpB,OAAO,EAAE,IAAI,CAAC,QAAQ;YACtB,SAAS,EAAE,IAAI,CAAC,UAAU;SAC3B,CAAC;IACJ,CAAC;CACF"}

package/dist/messaging/MessageSigner.d.ts

@@ -0,0 +1,24 @@
+import { type SignOptions } from '../crypto/Signer.js';
+import type { UnsignedMessage, SnapMessage, SigningIntermediates } from '../types/message.js';
+import type { PrivateKeyHex, P2TRAddress, Network } from '../types/keys.js';
+export declare class MessageSigner {
+    private readonly privateKey;
+    private readonly signOptions;
+    constructor(privateKey: PrivateKeyHex, options?: SignOptions);
+    /**
+     * Sign an unsigned message. Returns a full SnapMessage with sig field.
+     */
+    sign(message: UnsignedMessage): SnapMessage;
+    /**
+     * Sign and return intermediates for debugging.
+     */
+    signWithIntermediates(message: UnsignedMessage): {
+        message: SnapMessage;
+        intermediates: SigningIntermediates;
+    };
+    /**
+     * Get the P2TR address for this signer's key pair.
+     */
+    getAddress(network?: Network): P2TRAddress;
+}
+//# sourceMappingURL=MessageSigner.d.ts.map

package/dist/messaging/MessageSigner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MessageSigner.d.ts","sourceRoot":"","sources":["../../src/messaging/MessageSigner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAU,KAAK,WAAW,EAAmB,MAAM,qBAAqB,CAAC;AAEhF,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAC9F,OAAO,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE5E,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAgB;IAC3C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;gBAE9B,UAAU,EAAE,aAAa,EAAE,OAAO,CAAC,EAAE,WAAW;IAK5D;;OAEG;IACH,IAAI,CAAC,OAAO,EAAE,eAAe,GAAG,WAAW;IAK3C;;OAEG;IACH,qBAAqB,CAAC,OAAO,EAAE,eAAe,GAAG;QAC/C,OAAO,EAAE,WAAW,CAAC;QACrB,aAAa,EAAE,oBAAoB,CAAC;KACrC;IAQD;;OAEG;IACH,UAAU,CAAC,OAAO,GAAE,OAAmB,GAAG,WAAW;CAGtD"}

package/dist/messaging/MessageSigner.js

@@ -0,0 +1,34 @@
+import { Signer } from '../crypto/Signer.js';
+import { KeyManager } from '../crypto/KeyManager.js';
+export class MessageSigner {
+    privateKey;
+    signOptions;
+    constructor(privateKey, options) {
+        this.privateKey = privateKey;
+        this.signOptions = options ?? {};
+    }
+    /**
+     * Sign an unsigned message. Returns a full SnapMessage with sig field.
+     */
+    sign(message) {
+        const result = Signer.sign(message, this.privateKey, this.signOptions);
+        return { ...message, sig: result.signature };
+    }
+    /**
+     * Sign and return intermediates for debugging.
+     */
+    signWithIntermediates(message) {
+        const result = Signer.sign(message, this.privateKey, this.signOptions);
+        return {
+            message: { ...message, sig: result.signature },
+            intermediates: result.intermediates,
+        };
+    }
+    /**
+     * Get the P2TR address for this signer's key pair.
+     */
+    getAddress(network = 'mainnet') {
+        return KeyManager.publicKeyToP2TR(KeyManager.getPublicKey(this.privateKey), network);
+    }
+}
+//# sourceMappingURL=MessageSigner.js.map

package/dist/messaging/MessageSigner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MessageSigner.js","sourceRoot":"","sources":["../../src/messaging/MessageSigner.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAqC,MAAM,qBAAqB,CAAC;AAChF,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AAIrD,MAAM,OAAO,aAAa;IACP,UAAU,CAAgB;IAC1B,WAAW,CAAc;IAE1C,YAAY,UAAyB,EAAE,OAAqB;QAC1D,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,WAAW,GAAG,OAAO,IAAI,EAAE,CAAC;IACnC,CAAC;IAED;;OAEG;IACH,IAAI,CAAC,OAAwB;QAC3B,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACvE,OAAO,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED;;OAEG;IACH,qBAAqB,CAAC,OAAwB;QAI5C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QACvE,OAAO;YACL,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,EAAE,MAAM,CAAC,SAAS,EAAE;YAC9C,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC;IACJ,CAAC;IAED;;OAEG;IACH,UAAU,CAAC,UAAmB,SAAS;QACrC,OAAO,UAAU,CAAC,eAAe,CAAC,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,OAAO,CAAC,CAAC;IACvF,CAAC;CACF"}

package/dist/messaging/MessageValidator.d.ts

@@ -0,0 +1,32 @@
+import { SnapError } from '../errors/SnapError.js';
+import type { SnapMessage } from '../types/message.js';
+export interface ValidationOptions {
+    /** Skip timestamp check (useful for test vectors with fixed timestamps). */
+    skipTimestampCheck?: boolean;
+    /** Custom max clock drift in seconds. Default: 60. */
+    maxClockDrift?: number;
+    /** Skip replay check. Default: false. */
+    skipReplayCheck?: boolean;
+}
+export interface ValidationResult {
+    valid: boolean;
+    error?: SnapError;
+}
+export declare class MessageValidator {
+    /**
+     * Validate message structure (required fields, types, patterns).
+     * Does NOT verify signature.
+     */
+    static validateStructure(message: unknown): message is SnapMessage;
+    /**
+     * Verify the Schnorr signature on a message.
+     * Extracts public key from message.from P2TR address.
+     */
+    static verifySignature(message: SnapMessage): boolean;
+    /**
+     * Full validation: structure + signature + optional timestamp.
+     * @throws SnapError on failure.
+     */
+    static validate(message: unknown, options?: ValidationOptions): void;
+}
+//# sourceMappingURL=MessageValidator.d.ts.map

package/dist/messaging/MessageValidator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"MessageValidator.d.ts","sourceRoot":"","sources":["../../src/messaging/MessageValidator.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AACnD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAEvD,MAAM,WAAW,iBAAiB;IAChC,4EAA4E;IAC5E,kBAAkB,CAAC,EAAE,OAAO,CAAC;IAC7B,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,yCAAyC;IACzC,eAAe,CAAC,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,SAAS,CAAC;CACnB;AAQD,qBAAa,gBAAgB;IAC3B;;;OAGG;IACH,MAAM,CAAC,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI,WAAW;IA0BlE;;;OAGG;IACH,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO;IAKrD;;;OAGG;IACH,MAAM,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,iBAAiB,GAAG,IAAI;CAyBrE"}

package/dist/messaging/MessageValidator.js

@@ -0,0 +1,82 @@
+import { Signer } from '../crypto/Signer.js';
+import { KeyManager } from '../crypto/KeyManager.js';
+import { SnapError } from '../errors/SnapError.js';
+const P2TR_PATTERN = /^(bc1p|tb1p)[a-z0-9]{58}$/;
+const MESSAGE_ID_PATTERN = /^[a-zA-Z0-9_-]+$/;
+const METHOD_PATTERN = /^[a-z]+\/[a-z_]+$/;
+const SIG_PATTERN = /^[0-9a-f]{128}$/;
+const VALID_TYPES = new Set(['request', 'response', 'event']);
+export class MessageValidator {
+    /**
+     * Validate message structure (required fields, types, patterns).
+     * Does NOT verify signature.
+     */
+    static validateStructure(message) {
+        if (typeof message !== 'object' || message === null)
+            return false;
+        const msg = message;
+        // Required fields
+        if (typeof msg.id !== 'string' || !MESSAGE_ID_PATTERN.test(msg.id))
+            return false;
+        if (typeof msg.version !== 'string')
+            return false;
+        if (typeof msg.from !== 'string' || !P2TR_PATTERN.test(msg.from))
+            return false;
+        if (typeof msg.to !== 'string' || !P2TR_PATTERN.test(msg.to))
+            return false;
+        if (typeof msg.type !== 'string' || !VALID_TYPES.has(msg.type))
+            return false;
+        if (typeof msg.method !== 'string' || !METHOD_PATTERN.test(msg.method))
+            return false;
+        if (typeof msg.payload !== 'object' || msg.payload === null)
+            return false;
+        if (typeof msg.timestamp !== 'number' || !Number.isInteger(msg.timestamp) || msg.timestamp < 0)
+            return false;
+        // sig: required for requests, optional for responses
+        if (msg.type === 'request') {
+            if (typeof msg.sig !== 'string' || !SIG_PATTERN.test(msg.sig))
+                return false;
+        }
+        else if (msg.sig !== undefined) {
+            if (typeof msg.sig !== 'string' || !SIG_PATTERN.test(msg.sig))
+                return false;
+        }
+        return true;
+    }
+    /**
+     * Verify the Schnorr signature on a message.
+     * Extracts public key from message.from P2TR address.
+     */
+    static verifySignature(message) {
+        const publicKey = KeyManager.p2trToPublicKey(message.from);
+        return Signer.verify(message, message.sig, publicKey);
+    }
+    /**
+     * Full validation: structure + signature + optional timestamp.
+     * @throws SnapError on failure.
+     */
+    static validate(message, options) {
+        if (!MessageValidator.validateStructure(message)) {
+            throw SnapError.invalidMessage('Message structure validation failed');
+        }
+        const msg = message;
+        // Timestamp check
+        if (!options?.skipTimestampCheck) {
+            const maxDrift = options?.maxClockDrift ?? 60;
+            const now = Math.floor(Date.now() / 1000);
+            if (Math.abs(now - msg.timestamp) > maxDrift) {
+                throw SnapError.timestampExpired(msg.timestamp, now);
+            }
+        }
+        // Signature verification (only if sig is present)
+        if (msg.sig) {
+            if (!MessageValidator.verifySignature(msg)) {
+                throw SnapError.signatureInvalid();
+            }
+        }
+        else if (msg.type === 'request') {
+            throw SnapError.signatureMissing();
+        }
+    }
+}
+//# sourceMappingURL=MessageValidator.js.map

package/dist/messaging/MessageValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"MessageValidator.js","sourceRoot":"","sources":["../../src/messaging/MessageValidator.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,qBAAqB,CAAC;AAC7C,OAAO,EAAE,UAAU,EAAE,MAAM,yBAAyB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,wBAAwB,CAAC;AAiBnD,MAAM,YAAY,GAAG,2BAA2B,CAAC;AACjD,MAAM,kBAAkB,GAAG,kBAAkB,CAAC;AAC9C,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAC3C,MAAM,WAAW,GAAG,iBAAiB,CAAC;AACtC,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,CAAC,CAAC,CAAC;AAE9D,MAAM,OAAO,gBAAgB;IAC3B;;;OAGG;IACH,MAAM,CAAC,iBAAiB,CAAC,OAAgB;QACvC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAElE,MAAM,GAAG,GAAG,OAAkC,CAAC;QAE/C,kBAAkB;QAClB,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QACjF,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAClD,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC/E,IAAI,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,OAAO,KAAK,CAAC;QAC3E,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7E,IAAI,OAAO,GAAG,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QACrF,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI;YAAE,OAAO,KAAK,CAAC;QAC1E,IAAI,OAAO,GAAG,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,GAAG,CAAC,SAAS,GAAG,CAAC;YAC5F,OAAO,KAAK,CAAC;QAEf,qDAAqD;QACrD,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC9E,CAAC;aAAM,IAAI,GAAG,CAAC,GAAG,KAAK,SAAS,EAAE,CAAC;YACjC,IAAI,OAAO,GAAG,CAAC,GAAG,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,OAAO,KAAK,CAAC;QAC9E,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,eAAe,CAAC,OAAoB;QACzC,MAAM,SAAS,GAAG,UAAU,CAAC,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAC3D,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACxD,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,QAAQ,CAAC,OAAgB,EAAE,OAA2B;QAC3D,IAAI,CAAC,gBAAgB,CAAC,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YACjD,MAAM,SAAS,CAAC,cAAc,CAAC,qCAAqC,CAAC,CAAC;QACxE,CAAC;QAED,MAAM,GAAG,GAAG,OAAsB,CAAC;QAEnC,kBAAkB;QAClB,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE,CAAC;YACjC,MAAM,QAAQ,GAAG,OAAO,EAAE,aAAa,IAAI,EAAE,CAAC;YAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;YAC1C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,SAAS,CAAC,GAAG,QAAQ,EAAE,CAAC;gBAC7C,MAAM,SAAS,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;QAED,kDAAkD;QAClD,IAAI,GAAG,CAAC,GAAG,EAAE,CAAC;YACZ,IAAI,CAAC,gBAAgB,CAAC,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;gBAC3C,MAAM,SAAS,CAAC,gBAAgB,EAAE,CAAC;YACrC,CAAC;QACH,CAAC;aAAM,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YAClC,MAAM,SAAS,CAAC,gBAAgB,EAAE,CAAC;QACrC,CAAC;IACH,CAAC;CACF"}

package/dist/messaging/index.d.ts

@@ -0,0 +1,5 @@
+export { MessageBuilder } from './MessageBuilder.js';
+export { MessageSigner } from './MessageSigner.js';
+export { MessageValidator } from './MessageValidator.js';
+export type { ValidationOptions, ValidationResult } from './MessageValidator.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/messaging/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/messaging/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AACzD,YAAY,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/messaging/index.js

@@ -0,0 +1,4 @@
+export { MessageBuilder } from './MessageBuilder.js';
+export { MessageSigner } from './MessageSigner.js';
+export { MessageValidator } from './MessageValidator.js';
+//# sourceMappingURL=index.js.map

package/dist/messaging/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/messaging/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AACnD,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC"}

package/dist/plugins/PluginRegistry.d.ts

@@ -0,0 +1,17 @@
+import type { TransportPlugin, ReplayStore, TaskStore, Middleware } from '../types/plugin.js';
+export declare class PluginRegistry {
+    private transports;
+    private middlewares;
+    private replayStore?;
+    private taskStore?;
+    registerTransport(plugin: TransportPlugin): void;
+    getTransport(name: string): TransportPlugin | undefined;
+    getTransportNames(): string[];
+    registerMiddleware(middleware: Middleware): void;
+    getMiddlewareChain(): ReadonlyArray<Middleware>;
+    setReplayStore(store: ReplayStore): void;
+    getReplayStore(): ReplayStore | undefined;
+    setTaskStore(store: TaskStore): void;
+    getTaskStore(): TaskStore | undefined;
+}
+//# sourceMappingURL=PluginRegistry.d.ts.map

package/dist/plugins/PluginRegistry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"PluginRegistry.d.ts","sourceRoot":"","sources":["../../src/plugins/PluginRegistry.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,EAAE,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAE9F,qBAAa,cAAc;IACzB,OAAO,CAAC,UAAU,CAAsC;IACxD,OAAO,CAAC,WAAW,CAAoB;IACvC,OAAO,CAAC,WAAW,CAAC,CAAc;IAClC,OAAO,CAAC,SAAS,CAAC,CAAY;IAE9B,iBAAiB,CAAC,MAAM,EAAE,eAAe,GAAG,IAAI;IAIhD,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS;IAIvD,iBAAiB,IAAI,MAAM,EAAE;IAI7B,kBAAkB,CAAC,UAAU,EAAE,UAAU,GAAG,IAAI;IAIhD,kBAAkB,IAAI,aAAa,CAAC,UAAU,CAAC;IAI/C,cAAc,CAAC,KAAK,EAAE,WAAW,GAAG,IAAI;IAIxC,cAAc,IAAI,WAAW,GAAG,SAAS;IAIzC,YAAY,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI;IAIpC,YAAY,IAAI,SAAS,GAAG,SAAS;CAGtC"}