@soropass/core 0.1.0

package/dist/types.cjs

@@ -0,0 +1,44 @@
+'use strict';
+
+// src/errors.ts
+var KIT_ERROR_CODES = Object.freeze([
+  "USER_CANCELLED",
+  "ES256_NOT_SUPPORTED",
+  "RP_ID_MISMATCH",
+  "ORIGIN_MISMATCH",
+  "CHALLENGE_MISMATCH",
+  "INVALID_SIGNATURE_DER",
+  "INVALID_PUBLIC_KEY",
+  "CONTRACT_AUTH_FAILED",
+  "NETWORK_ERROR",
+  "UNSUPPORTED_AUTHENTICATOR"
+]);
+var KitError = class _KitError extends Error {
+  code;
+  name = "KitError";
+  constructor(code, message, options) {
+    super(message ?? code, options);
+    this.code = code;
+    Object.setPrototypeOf(this, _KitError.prototype);
+  }
+};
+function isKitError(value) {
+  return value instanceof KitError;
+}
+
+// src/anchors.ts
+var BATTLE_TESTED_ANCHORS = Object.freeze({
+  /** Apple Touch ID/Face ID emit high-S ~50% of the time; we normalize to low-S. */
+  LOW_S_NORMALIZATION: "low-s-normalization",
+  /** Non-ES256 credentials (e.g. some Windows Hello configs) cannot verify on-chain. */
+  RS256_HARD_FAIL: "rs256-hard-fail",
+  /** Safari requires create/get inside a user activation or it silently rejects. */
+  APPLE_USER_GESTURE: "apple-user-gesture"
+});
+
+exports.BATTLE_TESTED_ANCHORS = BATTLE_TESTED_ANCHORS;
+exports.KIT_ERROR_CODES = KIT_ERROR_CODES;
+exports.KitError = KitError;
+exports.isKitError = isKitError;
+//# sourceMappingURL=types.cjs.map
+//# sourceMappingURL=types.cjs.map

package/dist/types.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/errors.ts","../src/anchors.ts"],"names":[],"mappings":";;;AAIO,IAAM,eAAA,GAAkB,OAAO,MAAA,CAAO;AAAA,EAC3C,gBAAA;AAAA,EACA,qBAAA;AAAA,EACA,gBAAA;AAAA,EACA,iBAAA;AAAA,EACA,oBAAA;AAAA,EACA,uBAAA;AAAA,EACA,oBAAA;AAAA,EACA,sBAAA;AAAA,EACA,eAAA;AAAA,EACA;AACF,CAAU;AAKH,IAAM,QAAA,GAAN,MAAM,SAAA,SAAiB,KAAA,CAAM;AAAA,EACzB,IAAA;AAAA,EACS,IAAA,GAAO,UAAA;AAAA,EAEzB,WAAA,CAAY,IAAA,EAAoB,OAAA,EAAkB,OAAA,EAA+B;AAC/E,IAAA,KAAA,CAAM,OAAA,IAAW,MAAM,OAAO,CAAA;AAC9B,IAAA,IAAA,CAAK,IAAA,GAAO,IAAA;AAGZ,IAAA,MAAA,CAAO,cAAA,CAAe,IAAA,EAAM,SAAA,CAAS,SAAS,CAAA;AAAA,EAChD;AACF;AAEO,SAAS,WAAW,KAAA,EAAmC;AAC5D,EAAA,OAAO,KAAA,YAAiB,QAAA;AAC1B;;;AC3BO,IAAM,qBAAA,GAAwB,OAAO,MAAA,CAAO;AAAA;AAAA,EAEjD,mBAAA,EAAqB,qBAAA;AAAA;AAAA,EAErB,eAAA,EAAiB,iBAAA;AAAA;AAAA,EAEjB,kBAAA,EAAoB;AACtB,CAAU","file":"types.cjs","sourcesContent":["/**\n * The frozen taxonomy of error codes the SDK can throw. This union is\n * deliberately closed — every failure path maps to exactly one of these.\n */\nexport const KIT_ERROR_CODES = Object.freeze([\n  'USER_CANCELLED',\n  'ES256_NOT_SUPPORTED',\n  'RP_ID_MISMATCH',\n  'ORIGIN_MISMATCH',\n  'CHALLENGE_MISMATCH',\n  'INVALID_SIGNATURE_DER',\n  'INVALID_PUBLIC_KEY',\n  'CONTRACT_AUTH_FAILED',\n  'NETWORK_ERROR',\n  'UNSUPPORTED_AUTHENTICATOR',\n] as const);\n\nexport type KitErrorCode = (typeof KIT_ERROR_CODES)[number];\n\n/** Structured error carrying a machine-readable {@link KitErrorCode}. */\nexport class KitError extends Error {\n  readonly code: KitErrorCode;\n  override readonly name = 'KitError';\n\n  constructor(code: KitErrorCode, message?: string, options?: { cause?: unknown }) {\n    super(message ?? code, options);\n    this.code = code;\n    // Restore the prototype chain so `instanceof KitError` works after\n    // down-level transpilation to CJS.\n    Object.setPrototypeOf(this, KitError.prototype);\n  }\n}\n\nexport function isKitError(value: unknown): value is KitError {\n  return value instanceof KitError;\n}\n","import { KitError } from './errors';\n\n/**\n * Stable identifiers for the three battle-tested anchors (S04 / YK-430) — the\n * bugs that silently break ~50% of users. Referenced by stable name from the\n * threat model (S14) and the compatibility matrix (S09) so each mitigation has\n * one canonical id across code and docs.\n */\nexport const BATTLE_TESTED_ANCHORS = Object.freeze({\n  /** Apple Touch ID/Face ID emit high-S ~50% of the time; we normalize to low-S. */\n  LOW_S_NORMALIZATION: 'low-s-normalization',\n  /** Non-ES256 credentials (e.g. some Windows Hello configs) cannot verify on-chain. */\n  RS256_HARD_FAIL: 'rs256-hard-fail',\n  /** Safari requires create/get inside a user activation or it silently rejects. */\n  APPLE_USER_GESTURE: 'apple-user-gesture',\n} as const);\n\nexport type BattleTestedAnchor = (typeof BATTLE_TESTED_ANCHORS)[keyof typeof BATTLE_TESTED_ANCHORS];\n\n/** COSE algorithm id for ES256 (ECDSA w/ SHA-256 over P-256). */\nconst ALG_ES256 = -7;\n\n/**\n * Anchor `RS256_HARD_FAIL`. The Soroban webauthn-wallet verifies *only*\n * secp256r1, so a non-ES256 credential would produce an unusable account.\n * Hard-fail rather than continue (invariant #1).\n */\nexport function assertES256(alg: number): void {\n  if (alg !== ALG_ES256) {\n    throw new KitError('ES256_NOT_SUPPORTED', `COSE alg ${alg} is not ES256 (-7)`);\n  }\n}\n\ninterface UserActivationLike {\n  isActive: boolean;\n}\n\n/**\n * Anchor `APPLE_USER_GESTURE`. `navigator.credentials.create/get` on\n * Safari/WebKit must run inside a transient user activation (a real click/tap)\n * or the promise silently rejects. Call this at the very top of a create/sign\n * handler.\n *\n * UI pattern (for S18): never auto-trigger the ceremony from a mount/effect —\n * always gate it behind an explicit user click, and surface `USER_CANCELLED`\n * in the flow state machine. Lenient when `navigator.userActivation` is\n * unavailable (non-browser / older engines) so the SDK stays isomorphic; pass\n * an explicit `{ isActive }` to force the check.\n */\nexport function assertUserActivation(activation?: UserActivationLike): void {\n  const ua =\n    activation ??\n    (globalThis.navigator as { userActivation?: UserActivationLike } | undefined)?.userActivation;\n  if (ua && !ua.isActive) {\n    throw new KitError(\n      'USER_CANCELLED',\n      'WebAuthn ceremony must be invoked inside a user activation (click/tap)',\n    );\n  }\n}\n"]}

package/dist/types.d.cts

@@ -0,0 +1,5 @@
+export { B as BATTLE_TESTED_ANCHORS, a as BattleTestedAnchor, K as KIT_ERROR_CODES, b as KitError, c as KitErrorCode, P as PasskeyCredential, i as isKitError } from './types-dMRWEEo0.cjs';
+export { A as AuthenticatorDataFlags, C as CheckAuthResult, a as ClientData, P as ParsedAuthenticatorData, V as VerifyAssertionInput } from './checkAuth-C2AcXqFe.cjs';
+export { A as AccountDeployer, B as BuildCreateOptionsInput, C as CredentialStorage, I as IndexerAdapter, P as PubKeyCredParam, a as PublicKeyCredentialCreationOptionsJSON, R as ResidentKeyRequirement, b as ResolvedAccount, S as SubmissionAdapter, c as SubmitResult, U as UserVerificationRequirement, W as WebAuthnClient, d as WebAuthnCreateResult, e as WebAuthnGetOptions, f as WebAuthnGetResult } from './types--WNl-Sda.cjs';
+export { A as AssertionResult, a as SorobanSignOptions, b as WebAuthnSigner } from './sign-Cfg0NM0T.cjs';
+import '@stellar/stellar-sdk';

package/dist/types.d.ts

@@ -0,0 +1,5 @@
+export { B as BATTLE_TESTED_ANCHORS, a as BattleTestedAnchor, K as KIT_ERROR_CODES, b as KitError, c as KitErrorCode, P as PasskeyCredential, i as isKitError } from './types-lW2h8Uxn.js';
+export { A as AuthenticatorDataFlags, C as CheckAuthResult, a as ClientData, P as ParsedAuthenticatorData, V as VerifyAssertionInput } from './checkAuth-C2AcXqFe.js';
+export { A as AccountDeployer, B as BuildCreateOptionsInput, C as CredentialStorage, I as IndexerAdapter, P as PubKeyCredParam, a as PublicKeyCredentialCreationOptionsJSON, R as ResidentKeyRequirement, b as ResolvedAccount, S as SubmissionAdapter, c as SubmitResult, U as UserVerificationRequirement, W as WebAuthnClient, d as WebAuthnCreateResult, e as WebAuthnGetOptions, f as WebAuthnGetResult } from './types--WNl-Sda.js';
+export { A as AssertionResult, a as SorobanSignOptions, b as WebAuthnSigner } from './sign-Cfg0NM0T.js';
+import '@stellar/stellar-sdk';

package/dist/types.js

@@ -0,0 +1,5 @@
+import './chunk-LUDXP56M.js';
+export { BATTLE_TESTED_ANCHORS } from './chunk-TPBBZNPP.js';
+export { KIT_ERROR_CODES, KitError, isKitError } from './chunk-AMYFJQAC.js';
+//# sourceMappingURL=types.js.map
+//# sourceMappingURL=types.js.map

package/dist/types.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"types.js"}

package/package.json

@@ -0,0 +1,117 @@
+{
+  "name": "@soropass/core",
+  "version": "0.1.0",
+  "description": "Minimal, headless, ES256-only passkey SDK for Stellar smart accounts.",
+  "license": "Apache-2.0",
+  "publishConfig": {
+    "access": "public"
+  },
+  "type": "module",
+  "sideEffects": false,
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.ts",
+        "default": "./dist/index.js"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./create": {
+      "import": {
+        "types": "./dist/create.d.ts",
+        "default": "./dist/create.js"
+      },
+      "require": {
+        "types": "./dist/create.d.cts",
+        "default": "./dist/create.cjs"
+      }
+    },
+    "./connect": {
+      "import": {
+        "types": "./dist/connect.d.ts",
+        "default": "./dist/connect.js"
+      },
+      "require": {
+        "types": "./dist/connect.d.cts",
+        "default": "./dist/connect.cjs"
+      }
+    },
+    "./sign": {
+      "import": {
+        "types": "./dist/sign.d.ts",
+        "default": "./dist/sign.js"
+      },
+      "require": {
+        "types": "./dist/sign.d.cts",
+        "default": "./dist/sign.cjs"
+      }
+    },
+    "./recover": {
+      "import": {
+        "types": "./dist/recover.d.ts",
+        "default": "./dist/recover.js"
+      },
+      "require": {
+        "types": "./dist/recover.d.cts",
+        "default": "./dist/recover.cjs"
+      }
+    },
+    "./types": {
+      "import": {
+        "types": "./dist/types.d.ts",
+        "default": "./dist/types.js"
+      },
+      "require": {
+        "types": "./dist/types.d.cts",
+        "default": "./dist/types.cjs"
+      }
+    },
+    "./testing": {
+      "import": {
+        "types": "./dist/testing.d.ts",
+        "default": "./dist/testing.js"
+      },
+      "require": {
+        "types": "./dist/testing.d.cts",
+        "default": "./dist/testing.cjs"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist"
+  ],
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "test:coverage": "vitest run --coverage --coverage.reporter=text --coverage.reporter=json-summary",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "lint": "eslint src"
+  },
+  "peerDependencies": {
+    "@stellar/stellar-sdk": ">=12"
+  },
+  "peerDependenciesMeta": {
+    "@stellar/stellar-sdk": {
+      "optional": false
+    }
+  },
+  "dependencies": {
+    "@noble/curves": "^1.6.0",
+    "@noble/hashes": "^1.5.0"
+  },
+  "devDependencies": {
+    "@stellar/stellar-sdk": "^15.1.0",
+    "@types/node": "^22.0.0",
+    "@vitest/coverage-v8": "^2.0.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.6.0",
+    "vitest": "^2.0.0"
+  }
+}