@soropass/core 0.1.2 → 0.2.0

package/dist/sign.d.cts

@@ -1,9 +1,9 @@
-export { S as SmartWalletCheckAuthResult, d as decodeChallenge, e as encodeChallenge, p as parseAuthenticatorData, b as parseClientDataJSON, r as referenceCheckAuth, c as referenceSmartWalletCheckAuth, v as verifyAssertionSignature, f as verifyClientDataJSON, g as verifyRpIdHash } from './checkAuth-C2AcXqFe.cjs';
-import { b as WebAuthnSigner, A as AssertionResult } from './sign-B4JV2Inn.cjs';
-export { S as SignVerifyOptions, a as SorobanSignOptions, W as WalletTarget, s as signAuthEntry, c as signTransaction } from './sign-B4JV2Inn.cjs';
-import { W as WebAuthnClient } from './types--WNl-Sda.cjs';
+export { S as SmartWalletCheckAuthResult, d as decodeChallenge, e as encodeChallenge, p as parseAuthenticatorData, b as parseClientDataJSON, r as referenceCheckAuth, c as referenceSmartWalletCheckAuth, v as verifyAssertionSignature, f as verifyClientDataJSON, g as verifyRpIdHash } from './checkAuth-B5ObsEsP.cjs';
+import { b as WebAuthnSigner, A as AssertionResult } from './sign-O5d7Moma.cjs';
+export { S as SignVerifyOptions, a as SorobanSignOptions, W as WalletTarget, s as signAuthEntry, c as signTransaction } from './sign-O5d7Moma.cjs';
+import { W as WebAuthnClient } from './types-CJluKV7s.cjs';
 import { xdr } from '@stellar/stellar-sdk';
-export { B as BuildAddSignerOptions, a as BuildRemoveSignerOptions, S as Secp256r1SignerSpec, b as SendSmartWalletTxOptions, c as SignerStorage, d as buildAddSignerOperation, e as buildRemoveSignerOperation, f as buildSecp256r1Signer, s as sendSmartWalletTx } from './submit-BsKXOCkL.cjs';
+export { B as BuildAddSignerOptions, a as BuildRemoveSignerOptions, S as Secp256r1SignerSpec, b as SendSmartWalletTxOptions, c as SignerStorage, d as buildAddSignerOperation, e as buildRemoveSignerOperation, f as buildSecp256r1Signer, s as sendSmartWalletTx } from './submit-BKogb6Y8.cjs';
 
 /**
  * Convert an ASN.1 DER ECDSA signature to the 64-byte raw `R‖S` form Soroban's
@@ -19,9 +19,10 @@ declare function isLowS(compactSignature: Uint8Array): boolean;
 /**
  * Normalize a 64-byte compact signature to canonical low-S: if S > n/2, replace
  * S with n − S (anchor LOW_S_NORMALIZATION, invariant #2). ~50% of Apple Touch
- * ID / Face ID assertions are high-S and Soroban's `secp256r1_verify` does not
- * enforce low-S, so the SDK MUST emit low-S before a signature reaches a
- * contract. Idempotent: low-S input is returned unchanged.
+ * ID / Face ID assertions are high-S, and Soroban's `secp256r1_verify` REJECTS a
+ * high-S signature at decode, so the SDK MUST emit low-S or roughly half of real
+ * assertions would fail on-chain. Low-S is a validity requirement here, not just
+ * malleability hygiene. Idempotent: low-S input is returned unchanged.
  */
 declare function normalizeLowS(compactSignature: Uint8Array): Uint8Array;
 /** DER → 64-byte canonical low-S compact — the conversion the signing ceremony uses. */
@@ -50,6 +51,13 @@ interface BrowserPasskeySignerOptions {
     userVerification?: 'discouraged' | 'preferred' | 'required';
     /** Inject a custom client (tests / non-browser). Defaults to `browserWebAuthnClient()`. */
     webauthn?: WebAuthnClient;
+    /**
+     * SEC-1 (65-byte) public key of this passkey (from `create` / `connect`).
+     * WebAuthn assertions do not return the public key, so pass it here to sign
+     * for the v0.2 single-signer account; it is echoed onto the `AssertionResult`.
+     * You can instead supply it once via `SorobanSignOptions.publicKey`.
+     */
+    publicKey?: Uint8Array;
 }
 /**
  * Adapt `navigator.credentials.get` into the `WebAuthnSigner` that
@@ -80,17 +88,22 @@ declare function authEntryChallenge(entry: xdr.SorobanAuthorizationEntry, networ
 
 /**
  * Set an address-credential auth entry's signature to the `Secp256r1Signature`
- * struct the on-chain `__check_auth` consumes:
+ * struct our v0.2 `webauthn-account` `__check_auth` consumes:
  *
- *   ScVal::Map { authenticator_data: Bytes, client_data_json: Bytes, signature: BytesN<64> }
+ *   ScVal::Map {
+ *     authenticator_data: Bytes,
+ *     client_data_json:   Bytes,
+ *     public_key:         BytesN<65>,   // the enrolled signer to verify against
+ *     signature:          BytesN<64>,
+ *   }
  *
  * Map keys are alphabetical, so the ScMap is canonically sorted as Soroban
  * requires. `signature` MUST already be 64-byte low-S compact (`signAuthEntry`
- * normalizes before calling this). This is the exact shape the audited
- * webauthn-verifier reference expects — proven on testnet by the on-chain
- * integration test (scripts/onchain-e2e.ts).
+ * normalizes before calling this). `publicKey` names which enrolled signer the
+ * contract checks; the multi-signer account rejects a key it does not hold
+ * before any crypto runs.
  */
-declare function applyAssertionToEntry(entry: xdr.SorobanAuthorizationEntry, assertion: AssertionResult): xdr.SorobanAuthorizationEntry;
+declare function applyAssertionToEntry(entry: xdr.SorobanAuthorizationEntry, assertion: AssertionResult, publicKey: Uint8Array): xdr.SorobanAuthorizationEntry;
 
 /**
  * The passkey-kit / `webauthn-wallet` smart-wallet ABI target.

package/dist/sign.d.ts

@@ -1,9 +1,9 @@
-export { S as SmartWalletCheckAuthResult, d as decodeChallenge, e as encodeChallenge, p as parseAuthenticatorData, b as parseClientDataJSON, r as referenceCheckAuth, c as referenceSmartWalletCheckAuth, v as verifyAssertionSignature, f as verifyClientDataJSON, g as verifyRpIdHash } from './checkAuth-C2AcXqFe.js';
-import { b as WebAuthnSigner, A as AssertionResult } from './sign-B4JV2Inn.js';
-export { S as SignVerifyOptions, a as SorobanSignOptions, W as WalletTarget, s as signAuthEntry, c as signTransaction } from './sign-B4JV2Inn.js';
-import { W as WebAuthnClient } from './types--WNl-Sda.js';
+export { S as SmartWalletCheckAuthResult, d as decodeChallenge, e as encodeChallenge, p as parseAuthenticatorData, b as parseClientDataJSON, r as referenceCheckAuth, c as referenceSmartWalletCheckAuth, v as verifyAssertionSignature, f as verifyClientDataJSON, g as verifyRpIdHash } from './checkAuth-B5ObsEsP.js';
+import { b as WebAuthnSigner, A as AssertionResult } from './sign-O5d7Moma.js';
+export { S as SignVerifyOptions, a as SorobanSignOptions, W as WalletTarget, s as signAuthEntry, c as signTransaction } from './sign-O5d7Moma.js';
+import { W as WebAuthnClient } from './types-CJluKV7s.js';
 import { xdr } from '@stellar/stellar-sdk';
-export { B as BuildAddSignerOptions, a as BuildRemoveSignerOptions, S as Secp256r1SignerSpec, b as SendSmartWalletTxOptions, c as SignerStorage, d as buildAddSignerOperation, e as buildRemoveSignerOperation, f as buildSecp256r1Signer, s as sendSmartWalletTx } from './submit-CZt8fNRf.js';
+export { B as BuildAddSignerOptions, a as BuildRemoveSignerOptions, S as Secp256r1SignerSpec, b as SendSmartWalletTxOptions, c as SignerStorage, d as buildAddSignerOperation, e as buildRemoveSignerOperation, f as buildSecp256r1Signer, s as sendSmartWalletTx } from './submit-CKJp7XgZ.js';
 
 /**
  * Convert an ASN.1 DER ECDSA signature to the 64-byte raw `R‖S` form Soroban's
@@ -19,9 +19,10 @@ declare function isLowS(compactSignature: Uint8Array): boolean;
 /**
  * Normalize a 64-byte compact signature to canonical low-S: if S > n/2, replace
  * S with n − S (anchor LOW_S_NORMALIZATION, invariant #2). ~50% of Apple Touch
- * ID / Face ID assertions are high-S and Soroban's `secp256r1_verify` does not
- * enforce low-S, so the SDK MUST emit low-S before a signature reaches a
- * contract. Idempotent: low-S input is returned unchanged.
+ * ID / Face ID assertions are high-S, and Soroban's `secp256r1_verify` REJECTS a
+ * high-S signature at decode, so the SDK MUST emit low-S or roughly half of real
+ * assertions would fail on-chain. Low-S is a validity requirement here, not just
+ * malleability hygiene. Idempotent: low-S input is returned unchanged.
  */
 declare function normalizeLowS(compactSignature: Uint8Array): Uint8Array;
 /** DER → 64-byte canonical low-S compact — the conversion the signing ceremony uses. */
@@ -50,6 +51,13 @@ interface BrowserPasskeySignerOptions {
     userVerification?: 'discouraged' | 'preferred' | 'required';
     /** Inject a custom client (tests / non-browser). Defaults to `browserWebAuthnClient()`. */
     webauthn?: WebAuthnClient;
+    /**
+     * SEC-1 (65-byte) public key of this passkey (from `create` / `connect`).
+     * WebAuthn assertions do not return the public key, so pass it here to sign
+     * for the v0.2 single-signer account; it is echoed onto the `AssertionResult`.
+     * You can instead supply it once via `SorobanSignOptions.publicKey`.
+     */
+    publicKey?: Uint8Array;
 }
 /**
  * Adapt `navigator.credentials.get` into the `WebAuthnSigner` that
@@ -80,17 +88,22 @@ declare function authEntryChallenge(entry: xdr.SorobanAuthorizationEntry, networ
 
 /**
  * Set an address-credential auth entry's signature to the `Secp256r1Signature`
- * struct the on-chain `__check_auth` consumes:
+ * struct our v0.2 `webauthn-account` `__check_auth` consumes:
  *
- *   ScVal::Map { authenticator_data: Bytes, client_data_json: Bytes, signature: BytesN<64> }
+ *   ScVal::Map {
+ *     authenticator_data: Bytes,
+ *     client_data_json:   Bytes,
+ *     public_key:         BytesN<65>,   // the enrolled signer to verify against
+ *     signature:          BytesN<64>,
+ *   }
  *
  * Map keys are alphabetical, so the ScMap is canonically sorted as Soroban
  * requires. `signature` MUST already be 64-byte low-S compact (`signAuthEntry`
- * normalizes before calling this). This is the exact shape the audited
- * webauthn-verifier reference expects — proven on testnet by the on-chain
- * integration test (scripts/onchain-e2e.ts).
+ * normalizes before calling this). `publicKey` names which enrolled signer the
+ * contract checks; the multi-signer account rejects a key it does not hold
+ * before any crypto runs.
  */
-declare function applyAssertionToEntry(entry: xdr.SorobanAuthorizationEntry, assertion: AssertionResult): xdr.SorobanAuthorizationEntry;
+declare function applyAssertionToEntry(entry: xdr.SorobanAuthorizationEntry, assertion: AssertionResult, publicKey: Uint8Array): xdr.SorobanAuthorizationEntry;
 
 /**
  * The passkey-kit / `webauthn-wallet` smart-wallet ABI target.

package/dist/sign.js

@@ -1,6 +1,6 @@
-export { browserPasskeySigner, referenceCheckAuth, referenceSmartWalletCheckAuth } from './chunk-ZQRFIL4P.js';
-export { buildAddSignerOperation, buildRemoveSignerOperation, buildSecp256r1Signer, sendSmartWalletTx } from './chunk-BLFCRWCT.js';
-export { applyAssertionToEntry, applyAssertionToSmartWalletEntry, authEntryChallenge, authEntryChallengeBytes, buildSignerKeyScVal, buildSmartWalletSignatureVariant, compareSignerKeyScVal, derToCompact, derToCompactLowS, isLowS, normalizeLowS, reconstructSignedPayload, signAuthEntry, signTransaction, verifyAssertionSignature } from './chunk-FIRTUNWF.js';
+export { browserPasskeySigner, referenceCheckAuth, referenceSmartWalletCheckAuth } from './chunk-ODXQCLZL.js';
+export { buildAddSignerOperation, buildRemoveSignerOperation, buildSecp256r1Signer, sendSmartWalletTx } from './chunk-QREICNIW.js';
+export { applyAssertionToEntry, applyAssertionToSmartWalletEntry, authEntryChallenge, authEntryChallengeBytes, buildSignerKeyScVal, buildSmartWalletSignatureVariant, compareSignerKeyScVal, derToCompact, derToCompactLowS, isLowS, normalizeLowS, reconstructSignedPayload, signAuthEntry, signTransaction, verifyAssertionSignature } from './chunk-XTLWH3VQ.js';
 export { decodeChallenge, encodeChallenge, parseAuthenticatorData, parseClientDataJSON, verifyClientDataJSON, verifyRpIdHash } from './chunk-JNJ2FY45.js';
 import './chunk-LB4HOTLV.js';
 import './chunk-AMYFJQAC.js';

package/dist/{submit-BsKXOCkL.d.cts → submit-BKogb6Y8.d.cts}

@@ -1,6 +1,6 @@
 import { xdr } from '@stellar/stellar-sdk';
-import { S as SubmissionAdapter, c as SubmitResult } from './types--WNl-Sda.cjs';
-import { b as WebAuthnSigner, S as SignVerifyOptions } from './sign-B4JV2Inn.cjs';
+import { S as SubmissionAdapter, c as SubmitResult } from './types-CJluKV7s.cjs';
+import { b as WebAuthnSigner, S as SignVerifyOptions } from './sign-O5d7Moma.cjs';
 
 /**
  * passkey-kit v1 (v0.13.0, Protocol 27) smart-wallet SIGNER encoders — the WRITE

package/dist/{submit-CZt8fNRf.d.ts → submit-CKJp7XgZ.d.ts}

@@ -1,6 +1,6 @@
 import { xdr } from '@stellar/stellar-sdk';
-import { S as SubmissionAdapter, c as SubmitResult } from './types--WNl-Sda.js';
-import { b as WebAuthnSigner, S as SignVerifyOptions } from './sign-B4JV2Inn.js';
+import { S as SubmissionAdapter, c as SubmitResult } from './types-CJluKV7s.js';
+import { b as WebAuthnSigner, S as SignVerifyOptions } from './sign-O5d7Moma.js';
 
 /**
  * passkey-kit v1 (v0.13.0, Protocol 27) smart-wallet SIGNER encoders — the WRITE

package/dist/testing.cjs

@@ -66,7 +66,9 @@ function buildCreateOptions(input) {
     authenticatorSelection: {
       residentKey,
       requireResidentKey: residentKey === "required",
-      userVerification: input.userVerification ?? "preferred"
+      // The v0.2 account requires the User-Verified flag at sign time, so
+      // register with 'required' to enroll authenticators that can produce it.
+      userVerification: input.userVerification ?? "required"
     },
     attestation: "none",
     timeout: input.timeout ?? 6e4
@@ -444,8 +446,20 @@ async function connect(options) {
   const credentialId = storage.get(options.rpId);
   if (!credentialId) return null;
   const accounts = await options.indexer.resolveByCredential(credentialId);
-  const contractId = accounts[0]?.contractId;
-  return contractId ? { contractId, credentialId } : null;
+  const selected = selectAccount(accounts, options.publicKey);
+  return selected ? { contractId: selected.contractId, credentialId } : null;
+}
+function bytesEqual(a, b) {
+  if (a.length !== b.length) return false;
+  for (let i = 0; i < a.length; i++) if (a[i] !== b[i]) return false;
+  return true;
+}
+function selectAccount(accounts, publicKey) {
+  if (publicKey) {
+    const match = accounts.find((a) => a.publicKey && bytesEqual(a.publicKey, publicKey));
+    return match ? { contractId: match.contractId } : null;
+  }
+  return accounts[0] ?? null;
 }
 
 // src/ceremonies/recover.ts
@@ -565,10 +579,24 @@ function authEntryChallengeBytes(entry, networkPassphrase) {
 function authEntryChallenge(entry, networkPassphrase) {
   return bytesToBase64Url(authEntryChallengeBytes(entry, networkPassphrase));
 }
-function applyAssertionToEntry(entry, assertion) {
-  entry.credentials().address().signature(buildSignatureScVal(assertion));
+function applyAssertionToEntry(entry, assertion, publicKey) {
+  entry.credentials().address().signature(buildSingleSignerSignatureScVal(assertion, publicKey));
   return entry;
 }
+function buildSingleSignerSignatureScVal(assertion, publicKey) {
+  if (publicKey.length !== 65) {
+    throw new KitError(
+      "CONTRACT_AUTH_FAILED",
+      `single-signer signature needs a 65-byte SEC-1 public key (got ${String(publicKey.length)})`
+    );
+  }
+  return stellarSdk.xdr.ScVal.scvMap([
+    bytesField("authenticator_data", assertion.authenticatorData),
+    bytesField("client_data_json", assertion.clientDataJSON),
+    bytesField("public_key", publicKey),
+    bytesField("signature", assertion.signature)
+  ]);
+}
 function buildSignatureScVal(assertion) {
   return stellarSdk.xdr.ScVal.scvMap([
     bytesField("authenticator_data", assertion.authenticatorData),
@@ -721,7 +749,14 @@ async function signEntryInPlace(entry, options) {
   if (options.target === "smart-wallet") {
     applyAssertionToSmartWalletEntry(entry, normalized);
   } else {
-    applyAssertionToEntry(entry, normalized);
+    const publicKey = options.publicKey ?? assertion.publicKey;
+    if (publicKey === void 0) {
+      throw new KitError(
+        "CONTRACT_AUTH_FAILED",
+        "single-signer signing requires the signer public key: set SorobanSignOptions.publicKey or return publicKey from the signer"
+      );
+    }
+    applyAssertionToEntry(entry, normalized, publicKey);
   }
 }
 async function signAuthEntry(entryXdr, options) {
@@ -861,7 +896,8 @@ function mockAuthenticator(options) {
         authenticatorData: a.authenticatorData,
         clientDataJSON: a.clientDataJSON,
         signature: a.signatureDer,
-        credentialId: credIdBytes
+        credentialId: credIdBytes,
+        publicKey
       };
     }
   };
@@ -883,7 +919,9 @@ function createInMemoryBackend() {
     indexer: {
       resolveByCredential(credentialId) {
         const account = registry.get(credentialId);
-        return Promise.resolve(account ? [{ contractId: account.contractId }] : []);
+        return Promise.resolve(
+          account ? [{ contractId: account.contractId, publicKey: account.publicKey }] : []
+        );
       }
     },
     submission: {