@subwallet/extension-inject 1.3.89-0 → 1.3.90-0

package/cjs/packageInfo.js

@@ -13,6 +13,6 @@ const packageInfo = {
   name: '@subwallet/extension-inject',
   path: typeof __dirname === 'string' ? __dirname : 'auto',
   type: 'cjs',
-  version: '1.3.89-0'
+  version: '1.3.90-0'
 };
 exports.packageInfo = packageInfo;

package/package.json

@@ -14,7 +14,7 @@
   },
   "sideEffects": true,
   "type": "module",
-  "version": "1.3.89-0",
+  "version": "1.3.90-0",
   "main": "./cjs/index.js",
   "module": "./index.js",
   "types": "./index.d.ts",

package/packageInfo.js

@@ -7,5 +7,5 @@ export const packageInfo = {
   name: '@subwallet/extension-inject',
   path: (import.meta && import.meta.url) ? new URL(import.meta.url).pathname.substring(0, new URL(import.meta.url).pathname.lastIndexOf('/') + 1) : 'auto',
   type: 'esm',
-  version: '1.3.89-0'
+  version: '1.3.90-0'
 };

package/types.d.ts

@@ -1,7 +1,8 @@
 import type { KeypairType } from '@subwallet/keyring/types';
-import type { Signer as InjectedSigner } from '@polkadot/api/types';
+import type { Signer as PolkadotSigner, SignerResult } from '@polkadot/api/types';
 import type { ProviderInterface } from '@polkadot/rpc-provider/types';
 import type { ExtDef } from '@polkadot/types/extrinsic/signedExtensions/types';
+import type { HexString } from '@polkadot/util/types';
 declare type This = typeof globalThis;
 export declare type Unsubcall = () => void;
 export interface InjectedAccount {
@@ -70,6 +71,35 @@ export interface InjectedProviderWithMeta {
     provider: InjectedProvider;
     meta: ProviderMeta;
 }
+export interface SignerPayloadVrf {
+    /** the account to derive for, must be a local sr25519 account */
+    address: string;
+    /** the message to derive over, 0x-prefixed hex */
+    data: HexString;
+    /** the caller's own domain separator within its origin, 0x-prefixed hex; empty if omitted */
+    context?: HexString;
+}
+export interface InjectedSigner extends PolkadotSigner {
+    /**
+     * SubWallet-specific extension to the injected-web3 spec: sr25519 VRF signing.
+     *
+     * Optional — dapps must feature-detect with `typeof signer.signVrf === 'function'`, and other
+     * injected signers (e.g. the MetaMask compat shim) legitimately do not implement it.
+     *
+     * Returns 96 hex-encoded bytes, `output(32) || proof(64)`. **Only `output(32)` is
+     * deterministic** — the proof is randomized, so two calls with the same payload return
+     * different 96-byte values. Derive keys from the first 32 bytes alone; hashing the whole
+     * result yields a different key on every call.
+     *
+     * The output is bound to the requesting site's origin (`scheme://host`), which the wallet
+     * takes from the tab and never from this payload. No other site can obtain the same value, and
+     * a dapp served from several origins (http vs https included) derives a different value on
+     * each, so pin a canonical one.
+     *
+     * Local password-protected sr25519 accounts only.
+     */
+    signVrf?: (payload: SignerPayloadVrf) => Promise<SignerResult>;
+}
 export interface Injected {
     accounts: InjectedAccounts;
     metadata?: InjectedMetadata;