@tatchi-xyz/sdk 0.21.0 → 0.31.0

package/dist/cjs/react/src/core/TatchiPasskey/relay.js

@@ -0,0 +1,110 @@
+const require_sdkSentEvents = require('../types/sdkSentEvents.js');
+
+//#region src/core/TatchiPasskey/relay.ts
+const toNumberArray = (value) => Array.isArray(value) ? value : Array.from(value);
+const normalizeSignedDelegateForRelay = (signedDelegate) => {
+	const delegateAction = signedDelegate.delegateAction;
+	const signature = signedDelegate.signature;
+	return {
+		delegateAction: {
+			...delegateAction,
+			publicKey: {
+				...delegateAction.publicKey,
+				keyData: toNumberArray(delegateAction.publicKey.keyData)
+			}
+		},
+		signature: {
+			...signature,
+			signatureData: toNumberArray(signature.signatureData)
+		}
+	};
+};
+async function sendDelegateActionViaRelayer(args) {
+	const { url, payload, signal, options } = args;
+	const normalizedPayload = {
+		...payload,
+		signedDelegate: normalizeSignedDelegateForRelay(payload.signedDelegate)
+	};
+	const emit = (event) => options?.onEvent?.(event);
+	const emitError = (message) => {
+		emit({
+			step: 0,
+			phase: require_sdkSentEvents.ActionPhase.ACTION_ERROR,
+			status: require_sdkSentEvents.ActionStatus.ERROR,
+			message,
+			error: message
+		});
+	};
+	emit({
+		step: 7,
+		phase: require_sdkSentEvents.ActionPhase.STEP_7_BROADCASTING,
+		status: require_sdkSentEvents.ActionStatus.PROGRESS,
+		message: "Submitting delegate to relayer..."
+	});
+	let res;
+	try {
+		res = await fetch(url, {
+			method: "POST",
+			headers: { "content-type": "application/json" },
+			body: JSON.stringify(normalizedPayload),
+			signal
+		});
+	} catch (err) {
+		const error = err instanceof Error ? err : new Error(String(err));
+		options?.onError?.(error);
+		emitError(error.message);
+		await options?.afterCall?.(false);
+		throw error;
+	}
+	if (!res.ok) {
+		const response$1 = {
+			ok: false,
+			error: `Relayer HTTP ${res.status}`
+		};
+		options?.onError?.(new Error(response$1.error));
+		emitError(response$1.error);
+		await options?.afterCall?.(false);
+		return response$1;
+	}
+	let json;
+	try {
+		json = await res.json();
+	} catch (err) {
+		const response$1 = {
+			ok: false,
+			error: "Relayer returned non-JSON response"
+		};
+		const error = err instanceof Error ? err : new Error(String(err));
+		options?.onError?.(error);
+		emitError(response$1.error);
+		await options?.afterCall?.(false);
+		return response$1;
+	}
+	const response = {
+		ok: Boolean(json?.ok ?? true),
+		relayerTxHash: json?.relayerTxHash ?? json?.transactionId ?? json?.txHash,
+		status: json?.status,
+		outcome: json?.outcome,
+		error: json?.error
+	};
+	const success = response.ok !== false;
+	if (success) {
+		emit({
+			step: 8,
+			phase: require_sdkSentEvents.ActionPhase.STEP_8_ACTION_COMPLETE,
+			status: require_sdkSentEvents.ActionStatus.SUCCESS,
+			message: "Delegate relayed successfully"
+		});
+		await options?.afterCall?.(true, response);
+	} else {
+		const message = response.error || "Relayer execution failed";
+		options?.onError?.(new Error(message));
+		emitError(message);
+		await options?.afterCall?.(false);
+	}
+	return response;
+}
+
+//#endregion
+exports.sendDelegateActionViaRelayer = sendDelegateActionViaRelayer;
+//# sourceMappingURL=relay.js.map

package/dist/cjs/react/src/core/TatchiPasskey/relay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.js","names":["normalizedPayload: RelayDelegateRequest","ActionPhase","ActionStatus","res: Response","err: unknown","response: DelegateRelayResult","response","json: any"],"sources":["../../../../../../src/core/TatchiPasskey/relay.ts"],"sourcesContent":["import { ActionPhase, ActionStatus, type ActionSSEEvent, type DelegateRelayHooksOptions } from '../types/sdkSentEvents';\nimport type { DelegateRelayResult } from '../types/tatchi';\nimport type { SignedDelegate } from '../types/delegate';\nimport type { WasmSignedDelegate } from '../types/signer-worker';\n\nexport interface RelayDelegateRequest {\n  hash: string;\n  signedDelegate: SignedDelegate | WasmSignedDelegate;\n}\n\nconst toNumberArray = (value: number[] | Uint8Array): number[] =>\n  Array.isArray(value) ? value : Array.from(value);\n\nconst normalizeSignedDelegateForRelay = (\n  signedDelegate: SignedDelegate | WasmSignedDelegate\n): SignedDelegate => {\n  const delegateAction = signedDelegate.delegateAction as SignedDelegate['delegateAction'] & {\n    publicKey: { keyType: number; keyData: number[] | Uint8Array };\n  };\n  const signature = signedDelegate.signature as SignedDelegate['signature'] & {\n    keyType: number;\n    signatureData: number[] | Uint8Array;\n  };\n\n  return {\n    delegateAction: {\n      ...delegateAction,\n      publicKey: {\n        ...delegateAction.publicKey,\n        keyData: toNumberArray(delegateAction.publicKey.keyData),\n      },\n    },\n    signature: {\n      ...signature,\n      signatureData: toNumberArray(signature.signatureData),\n    },\n  };\n};\n\nexport async function sendDelegateActionViaRelayer(args: {\n  url: string;\n  payload: RelayDelegateRequest;\n  signal?: AbortSignal;\n  options?: DelegateRelayHooksOptions;\n}): Promise<DelegateRelayResult> {\n\n  const { url, payload, signal, options } = args;\n  const normalizedPayload: RelayDelegateRequest = {\n    ...payload,\n    signedDelegate: normalizeSignedDelegateForRelay(payload.signedDelegate),\n  };\n\n  const emit = (event: ActionSSEEvent) => options?.onEvent?.(event);\n  const emitError = (message: string) => {\n    emit({\n      step: 0,\n      phase: ActionPhase.ACTION_ERROR,\n      status: ActionStatus.ERROR,\n      message,\n      error: message,\n    });\n  };\n\n  emit({\n    step: 7,\n    phase: ActionPhase.STEP_7_BROADCASTING,\n    status: ActionStatus.PROGRESS,\n    message: 'Submitting delegate to relayer...',\n  });\n\n  let res: Response;\n  try {\n    res = await fetch(url, {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: JSON.stringify(normalizedPayload),\n      signal,\n    });\n  } catch (err: unknown) {\n    const error = err instanceof Error ? err : new Error(String(err));\n    options?.onError?.(error);\n    emitError(error.message);\n    await options?.afterCall?.(false);\n    throw error;\n  }\n\n  if (!res.ok) {\n    const response: DelegateRelayResult = {\n      ok: false,\n      error: `Relayer HTTP ${res.status}`,\n    };\n    options?.onError?.(new Error(response.error));\n    emitError(response.error!);\n    await options?.afterCall?.(false);\n    return response;\n  }\n\n  let json: any;\n  try {\n    json = await res.json();\n  } catch (err: unknown) {\n    const response: DelegateRelayResult = {\n      ok: false,\n      error: 'Relayer returned non-JSON response',\n    };\n    const error = err instanceof Error ? err : new Error(String(err));\n    options?.onError?.(error);\n    emitError(response.error!);\n    await options?.afterCall?.(false);\n    return response;\n  }\n\n  const response: DelegateRelayResult = {\n    ok: Boolean(json?.ok ?? true),\n    relayerTxHash: json?.relayerTxHash ?? json?.transactionId ?? json?.txHash,\n    status: json?.status,\n    outcome: json?.outcome,\n    error: json?.error,\n  };\n\n  const success = response.ok !== false;\n  if (success) {\n    emit({\n      step: 8,\n      phase: ActionPhase.STEP_8_ACTION_COMPLETE,\n      status: ActionStatus.SUCCESS,\n      message: 'Delegate relayed successfully',\n    });\n    await options?.afterCall?.(true, response);\n  } else {\n    const message = response.error || 'Relayer execution failed';\n    options?.onError?.(new Error(message));\n    emitError(message);\n    await options?.afterCall?.(false);\n  }\n\n  return response;\n}\n"],"mappings":";;;AAUA,MAAM,iBAAiB,UACrB,MAAM,QAAQ,SAAS,QAAQ,MAAM,KAAK;AAE5C,MAAM,mCACJ,mBACmB;CACnB,MAAM,iBAAiB,eAAe;CAGtC,MAAM,YAAY,eAAe;AAKjC,QAAO;EACL,gBAAgB;GACd,GAAG;GACH,WAAW;IACT,GAAG,eAAe;IAClB,SAAS,cAAc,eAAe,UAAU;;;EAGpD,WAAW;GACT,GAAG;GACH,eAAe,cAAc,UAAU;;;;AAK7C,eAAsB,6BAA6B,MAKlB;CAE/B,MAAM,EAAE,KAAK,SAAS,QAAQ,YAAY;CAC1C,MAAMA,oBAA0C;EAC9C,GAAG;EACH,gBAAgB,gCAAgC,QAAQ;;CAG1D,MAAM,QAAQ,UAA0B,SAAS,UAAU;CAC3D,MAAM,aAAa,YAAoB;AACrC,OAAK;GACH,MAAM;GACN,OAAOC,kCAAY;GACnB,QAAQC,mCAAa;GACrB;GACA,OAAO;;;AAIX,MAAK;EACH,MAAM;EACN,OAAOD,kCAAY;EACnB,QAAQC,mCAAa;EACrB,SAAS;;CAGX,IAAIC;AACJ,KAAI;AACF,QAAM,MAAM,MAAM,KAAK;GACrB,QAAQ;GACR,SAAS,EAAE,gBAAgB;GAC3B,MAAM,KAAK,UAAU;GACrB;;UAEKC,KAAc;EACrB,MAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO;AAC5D,WAAS,UAAU;AACnB,YAAU,MAAM;AAChB,QAAM,SAAS,YAAY;AAC3B,QAAM;;AAGR,KAAI,CAAC,IAAI,IAAI;EACX,MAAMC,aAAgC;GACpC,IAAI;GACJ,OAAO,gBAAgB,IAAI;;AAE7B,WAAS,UAAU,IAAI,MAAMC,WAAS;AACtC,YAAUA,WAAS;AACnB,QAAM,SAAS,YAAY;AAC3B,SAAOA;;CAGT,IAAIC;AACJ,KAAI;AACF,SAAO,MAAM,IAAI;UACVH,KAAc;EACrB,MAAMC,aAAgC;GACpC,IAAI;GACJ,OAAO;;EAET,MAAM,QAAQ,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO;AAC5D,WAAS,UAAU;AACnB,YAAUC,WAAS;AACnB,QAAM,SAAS,YAAY;AAC3B,SAAOA;;CAGT,MAAMD,WAAgC;EACpC,IAAI,QAAQ,MAAM,MAAM;EACxB,eAAe,MAAM,iBAAiB,MAAM,iBAAiB,MAAM;EACnE,QAAQ,MAAM;EACd,SAAS,MAAM;EACf,OAAO,MAAM;;CAGf,MAAM,UAAU,SAAS,OAAO;AAChC,KAAI,SAAS;AACX,OAAK;GACH,MAAM;GACN,OAAOJ,kCAAY;GACnB,QAAQC,mCAAa;GACrB,SAAS;;AAEX,QAAM,SAAS,YAAY,MAAM;QAC5B;EACL,MAAM,UAAU,SAAS,SAAS;AAClC,WAAS,UAAU,IAAI,MAAM;AAC7B,YAAU;AACV,QAAM,SAAS,YAAY;;AAG7B,QAAO"}

package/dist/cjs/react/src/core/TatchiPasskey/scanDevice.js

@@ -0,0 +1,99 @@
+const require_validation = require('../../utils/validation.js');
+const require_config = require('../../config.js');
+const require_sdkSentEvents = require('../types/sdkSentEvents.js');
+const require_rpcCalls = require('../rpcCalls.js');
+const require_linkDevice = require('../types/linkDevice.js');
+const require_login = require('./login.js');
+
+//#region src/core/TatchiPasskey/scanDevice.ts
+/**
+* Device1 (original device): Link device using pre-scanned QR data
+*/
+async function linkDeviceWithScannedQRData(context, qrData, options) {
+	const { onEvent, onError } = options || {};
+	try {
+		onEvent?.({
+			step: 2,
+			phase: require_sdkSentEvents.DeviceLinkingPhase.STEP_2_SCANNING,
+			status: require_sdkSentEvents.DeviceLinkingStatus.PROGRESS,
+			message: "Validating QR data..."
+		});
+		validateDeviceLinkingQRData(qrData);
+		const { login: device1LoginState } = await require_login.getLoginSession(context);
+		if (!device1LoginState.isLoggedIn || !device1LoginState.nearAccountId) throw new Error("Device1 must be logged in to authorize device linking");
+		const device1AccountId = device1LoginState.nearAccountId;
+		const fundingAmount = options.fundingAmount;
+		const device2PublicKey = require_validation.ensureEd25519Prefix(qrData.device2PublicKey);
+		if (!device2PublicKey || !/^ed25519:/i.test(device2PublicKey)) throw new Error("Invalid device public key format");
+		onEvent?.({
+			step: 3,
+			phase: require_sdkSentEvents.DeviceLinkingPhase.STEP_3_AUTHORIZATION,
+			status: require_sdkSentEvents.DeviceLinkingStatus.PROGRESS,
+			message: `Performing TouchID authentication for device linking...`
+		});
+		const userData = await context.webAuthnManager.getLastUser();
+		const nearPublicKeyStr = userData?.clientNearPublicKey;
+		if (!nearPublicKeyStr) throw new Error("Client NEAR public key not found in user data");
+		const { accessKeyInfo, nextNonce, txBlockHeight, txBlockHash } = await context.webAuthnManager.getNonceManager().getNonceBlockHashAndHeight(context.nearClient);
+		const nextNextNonce = (BigInt(nextNonce) + BigInt(1)).toString();
+		const nextNextNextNonce = (BigInt(nextNonce) + BigInt(2)).toString();
+		const vrfInputData = {
+			userId: device1AccountId,
+			rpId: context.webAuthnManager.getRpId(),
+			blockHeight: txBlockHeight,
+			blockHash: txBlockHash
+		};
+		const vrfChallenge = await context.webAuthnManager.generateVrfChallengeOnce(vrfInputData);
+		onEvent?.({
+			step: 6,
+			phase: require_sdkSentEvents.DeviceLinkingPhase.STEP_6_REGISTRATION,
+			status: require_sdkSentEvents.DeviceLinkingStatus.PROGRESS,
+			message: "TouchID successful! Signing AddKey transaction..."
+		});
+		const { addKeyTxResult, storeDeviceLinkingTxResult, signedDeleteKeyTransaction } = await require_rpcCalls.executeDeviceLinkingContractCalls({
+			context,
+			device1AccountId,
+			device2PublicKey,
+			nextNonce,
+			nextNextNonce,
+			nextNextNextNonce,
+			txBlockHash,
+			vrfChallenge,
+			onEvent,
+			confirmationConfigOverride: options?.confirmationConfig,
+			confirmerText: options?.confirmerText
+		});
+		const result = {
+			success: true,
+			device2PublicKey,
+			transactionId: addKeyTxResult?.transaction?.hash || storeDeviceLinkingTxResult?.transaction?.hash || "unknown",
+			fundingAmount,
+			linkedToAccount: device1AccountId,
+			signedDeleteKeyTransaction
+		};
+		onEvent?.({
+			step: 6,
+			phase: require_sdkSentEvents.DeviceLinkingPhase.STEP_6_REGISTRATION,
+			status: require_sdkSentEvents.DeviceLinkingStatus.SUCCESS,
+			message: `Device2's key added to ${device1AccountId} successfully!`
+		});
+		return result;
+	} catch (error) {
+		console.error("LinkDeviceFlow: linkDeviceWithQRData caught error:", error);
+		const errorMessage = `Failed to scan and link device: ${error.message}`;
+		onError?.(new Error(errorMessage));
+		throw new require_linkDevice.DeviceLinkingError(errorMessage, require_linkDevice.DeviceLinkingErrorCode.AUTHORIZATION_TIMEOUT, "authorization");
+	}
+}
+function validateDeviceLinkingQRData(qrData) {
+	if (!qrData.device2PublicKey) throw new require_linkDevice.DeviceLinkingError("Missing device public key", require_linkDevice.DeviceLinkingErrorCode.INVALID_QR_DATA, "authorization");
+	if (!qrData.timestamp) throw new require_linkDevice.DeviceLinkingError("Missing timestamp", require_linkDevice.DeviceLinkingErrorCode.INVALID_QR_DATA, "authorization");
+	const maxAge = require_config.DEVICE_LINKING_CONFIG.TIMEOUTS.QR_CODE_MAX_AGE_MS;
+	if (Date.now() - qrData.timestamp > maxAge) throw new require_linkDevice.DeviceLinkingError("QR code expired", require_linkDevice.DeviceLinkingErrorCode.SESSION_EXPIRED, "authorization");
+	if (qrData.accountId) require_validation.validateNearAccountId(qrData.accountId);
+}
+
+//#endregion
+exports.linkDeviceWithScannedQRData = linkDeviceWithScannedQRData;
+exports.validateDeviceLinkingQRData = validateDeviceLinkingQRData;
+//# sourceMappingURL=scanDevice.js.map

package/dist/cjs/react/src/core/TatchiPasskey/scanDevice.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scanDevice.js","names":["DeviceLinkingPhase","DeviceLinkingStatus","getLoginSession","ensureEd25519Prefix","vrfInputData: VRFInputData","executeDeviceLinkingContractCalls","error: any","DeviceLinkingError","DeviceLinkingErrorCode","DEVICE_LINKING_CONFIG"],"sources":["../../../../../../src/core/TatchiPasskey/scanDevice.ts"],"sourcesContent":["import type { PasskeyManagerContext } from './index';\nimport { validateNearAccountId } from '../../utils/validation';\nimport { getLoginSession } from './login';\nimport type { VRFInputData } from '../types/vrf-worker';\nimport type {\n  DeviceLinkingQRData,\n  LinkDeviceResult,\n  ScanAndLinkDeviceOptionsDevice1,\n} from '../types/linkDevice';\nimport { DeviceLinkingPhase, DeviceLinkingStatus } from '../types/sdkSentEvents';\nimport { DeviceLinkingError, DeviceLinkingErrorCode } from '../types/linkDevice';\nimport { DEVICE_LINKING_CONFIG } from '../../config.js';\nimport { executeDeviceLinkingContractCalls } from '../rpcCalls';\nimport { ensureEd25519Prefix } from '../nearCrypto';\n\n/**\n * Device1 (original device): Link device using pre-scanned QR data\n */\nexport async function linkDeviceWithScannedQRData(\n  context: PasskeyManagerContext,\n  qrData: DeviceLinkingQRData,\n  options: ScanAndLinkDeviceOptionsDevice1\n): Promise<LinkDeviceResult> {\n  const { onEvent, onError } = options || {};\n\n  try {\n    onEvent?.({\n      step: 2,\n      phase: DeviceLinkingPhase.STEP_2_SCANNING,\n      status: DeviceLinkingStatus.PROGRESS,\n      message: 'Validating QR data...'\n    });\n\n    // Validate QR data\n    validateDeviceLinkingQRData(qrData);\n\n    // 3. Get Device1's current account (the account that will receive the new key)\n    const { login: device1LoginState } = await getLoginSession(context);\n\n    if (!device1LoginState.isLoggedIn || !device1LoginState.nearAccountId) {\n      throw new Error('Device1 must be logged in to authorize device linking');\n    }\n\n    const device1AccountId = device1LoginState.nearAccountId;\n\n    // 4. Execute batched transaction: AddKey + Contract notification\n    const fundingAmount = options.fundingAmount;\n\n    // Parse the device public key for AddKey action\n    const device2PublicKey = ensureEd25519Prefix(qrData.device2PublicKey);\n    if (!device2PublicKey || !/^ed25519:/i.test(device2PublicKey)) {\n      throw new Error('Invalid device public key format');\n    }\n\n    onEvent?.({\n      step: 3,\n      phase: DeviceLinkingPhase.STEP_3_AUTHORIZATION,\n      status: DeviceLinkingStatus.PROGRESS,\n      message: `Performing TouchID authentication for device linking...`\n    });\n\n    const userData = await context.webAuthnManager.getLastUser();\n    const nearPublicKeyStr = userData?.clientNearPublicKey;\n    if (!nearPublicKeyStr) {\n      throw new Error('Client NEAR public key not found in user data');\n    }\n    // Generate VRF challenge once for both transactions\n    const {\n      accessKeyInfo,\n      nextNonce,\n      txBlockHeight,\n      txBlockHash\n    } = await context.webAuthnManager.getNonceManager().getNonceBlockHashAndHeight(context.nearClient);\n    const nextNextNonce = (BigInt(nextNonce) + BigInt(1)).toString();\n    const nextNextNextNonce = (BigInt(nextNonce) + BigInt(2)).toString();\n\n    const vrfInputData: VRFInputData = {\n      userId: device1AccountId,\n      rpId: context.webAuthnManager.getRpId(),\n      blockHeight: txBlockHeight,\n      blockHash: txBlockHash,\n    };\n\n    const vrfChallenge = await context.webAuthnManager.generateVrfChallengeOnce(vrfInputData);\n\n    onEvent?.({\n      step: 6,\n      phase: DeviceLinkingPhase.STEP_6_REGISTRATION,\n      status: DeviceLinkingStatus.PROGRESS,\n      message: 'TouchID successful! Signing AddKey transaction...'\n    });\n\n    // Execute device linking transactions using the centralized RPC function\n    const {\n      addKeyTxResult,\n      storeDeviceLinkingTxResult,\n      signedDeleteKeyTransaction\n    } = await executeDeviceLinkingContractCalls({\n      context,\n      device1AccountId,\n      device2PublicKey,\n      nextNonce,\n      nextNextNonce,\n      nextNextNextNonce,\n      txBlockHash,\n      vrfChallenge,\n      onEvent,\n      confirmationConfigOverride: options?.confirmationConfig,\n      confirmerText: options?.confirmerText,\n    });\n\n    const result = {\n      success: true,\n      device2PublicKey,\n      transactionId: addKeyTxResult?.transaction?.hash\n        || storeDeviceLinkingTxResult?.transaction?.hash\n        || 'unknown',\n      fundingAmount,\n      linkedToAccount: device1AccountId, // Include which account the key was added to\n      signedDeleteKeyTransaction\n    };\n\n    onEvent?.({\n      step: 6,\n      phase: DeviceLinkingPhase.STEP_6_REGISTRATION,\n      status: DeviceLinkingStatus.SUCCESS,\n      message: `Device2's key added to ${device1AccountId} successfully!`\n    });\n\n    return result;\n\n  } catch (error: any) {\n    console.error('LinkDeviceFlow: linkDeviceWithQRData caught error:', error);\n\n    const errorMessage = `Failed to scan and link device: ${error.message}`;\n    onError?.(new Error(errorMessage));\n\n    throw new DeviceLinkingError(\n      errorMessage,\n      DeviceLinkingErrorCode.AUTHORIZATION_TIMEOUT,\n      'authorization'\n    );\n  }\n}\n\nexport function validateDeviceLinkingQRData(qrData: DeviceLinkingQRData): void {\n  if (!qrData.device2PublicKey) {\n    throw new DeviceLinkingError(\n      'Missing device public key',\n      DeviceLinkingErrorCode.INVALID_QR_DATA,\n      'authorization'\n    );\n  }\n\n  if (!qrData.timestamp) {\n    throw new DeviceLinkingError(\n      'Missing timestamp',\n      DeviceLinkingErrorCode.INVALID_QR_DATA,\n      'authorization'\n    );\n  }\n\n  // Check timestamp is not too old (max 15 minutes)\n  const maxAge = DEVICE_LINKING_CONFIG.TIMEOUTS.QR_CODE_MAX_AGE_MS;\n  if (Date.now() - qrData.timestamp > maxAge) {\n    throw new DeviceLinkingError(\n      'QR code expired',\n      DeviceLinkingErrorCode.SESSION_EXPIRED,\n      'authorization'\n    );\n  }\n\n  // Account ID is optional - Device2 discovers it from contract logs\n  if (qrData.accountId) {\n    validateNearAccountId(qrData.accountId);\n  }\n}\n"],"mappings":";;;;;;;;;;;AAkBA,eAAsB,4BACpB,SACA,QACA,SAC2B;CAC3B,MAAM,EAAE,SAAS,YAAY,WAAW;AAExC,KAAI;AACF,YAAU;GACR,MAAM;GACN,OAAOA,yCAAmB;GAC1B,QAAQC,0CAAoB;GAC5B,SAAS;;AAIX,8BAA4B;EAG5B,MAAM,EAAE,OAAO,sBAAsB,MAAMC,8BAAgB;AAE3D,MAAI,CAAC,kBAAkB,cAAc,CAAC,kBAAkB,cACtD,OAAM,IAAI,MAAM;EAGlB,MAAM,mBAAmB,kBAAkB;EAG3C,MAAM,gBAAgB,QAAQ;EAG9B,MAAM,mBAAmBC,uCAAoB,OAAO;AACpD,MAAI,CAAC,oBAAoB,CAAC,aAAa,KAAK,kBAC1C,OAAM,IAAI,MAAM;AAGlB,YAAU;GACR,MAAM;GACN,OAAOH,yCAAmB;GAC1B,QAAQC,0CAAoB;GAC5B,SAAS;;EAGX,MAAM,WAAW,MAAM,QAAQ,gBAAgB;EAC/C,MAAM,mBAAmB,UAAU;AACnC,MAAI,CAAC,iBACH,OAAM,IAAI,MAAM;EAGlB,MAAM,EACJ,eACA,WACA,eACA,gBACE,MAAM,QAAQ,gBAAgB,kBAAkB,2BAA2B,QAAQ;EACvF,MAAM,iBAAiB,OAAO,aAAa,OAAO,IAAI;EACtD,MAAM,qBAAqB,OAAO,aAAa,OAAO,IAAI;EAE1D,MAAMG,eAA6B;GACjC,QAAQ;GACR,MAAM,QAAQ,gBAAgB;GAC9B,aAAa;GACb,WAAW;;EAGb,MAAM,eAAe,MAAM,QAAQ,gBAAgB,yBAAyB;AAE5E,YAAU;GACR,MAAM;GACN,OAAOJ,yCAAmB;GAC1B,QAAQC,0CAAoB;GAC5B,SAAS;;EAIX,MAAM,EACJ,gBACA,4BACA,+BACE,MAAMI,mDAAkC;GAC1C;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA;GACA,4BAA4B,SAAS;GACrC,eAAe,SAAS;;EAG1B,MAAM,SAAS;GACb,SAAS;GACT;GACA,eAAe,gBAAgB,aAAa,QACvC,4BAA4B,aAAa,QACzC;GACL;GACA,iBAAiB;GACjB;;AAGF,YAAU;GACR,MAAM;GACN,OAAOL,yCAAmB;GAC1B,QAAQC,0CAAoB;GAC5B,SAAS,0BAA0B,iBAAiB;;AAGtD,SAAO;UAEAK,OAAY;AACnB,UAAQ,MAAM,sDAAsD;EAEpE,MAAM,eAAe,mCAAmC,MAAM;AAC9D,YAAU,IAAI,MAAM;AAEpB,QAAM,IAAIC,sCACR,cACAC,0CAAuB,uBACvB;;;AAKN,SAAgB,4BAA4B,QAAmC;AAC7E,KAAI,CAAC,OAAO,iBACV,OAAM,IAAID,sCACR,6BACAC,0CAAuB,iBACvB;AAIJ,KAAI,CAAC,OAAO,UACV,OAAM,IAAID,sCACR,qBACAC,0CAAuB,iBACvB;CAKJ,MAAM,SAASC,qCAAsB,SAAS;AAC9C,KAAI,KAAK,QAAQ,OAAO,YAAY,OAClC,OAAM,IAAIF,sCACR,mBACAC,0CAAuB,iBACvB;AAKJ,KAAI,OAAO,UACT,0CAAsB,OAAO"}

package/dist/cjs/react/src/core/TatchiPasskey/signNEP413.js

@@ -0,0 +1,96 @@
+const require_signer_worker = require('../types/signer-worker.js');
+const require_base64 = require('../../utils/base64.js');
+const require_sdkSentEvents = require('../types/sdkSentEvents.js');
+
+//#region src/core/TatchiPasskey/signNEP413.ts
+/**
+* Sign a NEP-413 message using the user's passkey-derived private key
+*
+* This function implements the NEP-413 standard for off-chain message signing:
+* - Creates a payload with message, recipient, nonce, and state
+* - Serializes using Borsh
+* - Adds NEP-413 prefix (2^31 + 413)
+* - Hashes with SHA-256
+* - Signs with Ed25519
+* - Returns base64-encoded signature
+*
+* @param context - TatchiPasskey context
+* @param nearAccountId - NEAR account ID to sign with
+* @param params - NEP-413 signing parameters
+* @param options - Action options for event handling
+* @returns Promise resolving to signing result
+*/
+async function signNEP413Message(args) {
+	const { context, nearAccountId, params, options } = args;
+	const confirmerText = options?.confirmerText;
+	const confirmationConfigOverride = options?.confirmationConfig;
+	const { webAuthnManager } = context;
+	const baseSignerMode = webAuthnManager.getUserPreferences().getSignerMode();
+	const signerMode = require_signer_worker.mergeSignerMode(baseSignerMode, options.signerMode);
+	try {
+		options?.onEvent?.({
+			step: 1,
+			phase: require_sdkSentEvents.ActionPhase.STEP_1_PREPARATION,
+			status: require_sdkSentEvents.ActionStatus.PROGRESS,
+			message: "Preparing NEP-413 message signing"
+		});
+		const [vrfStatus, userData] = await Promise.all([webAuthnManager.checkVrfStatus(), webAuthnManager.getLastUser()]);
+		if (!vrfStatus.active) throw new Error("User not authenticated. Please login first.");
+		if (!userData || !userData.clientNearPublicKey) throw new Error(`User data not found for ${nearAccountId}`);
+		const nonceBytes = new Uint8Array(32);
+		if (typeof crypto === "undefined" || typeof crypto.getRandomValues !== "function") throw new Error("Secure random not available to generate NEP-413 nonce");
+		crypto.getRandomValues(nonceBytes);
+		const nonce = require_base64.base64Encode(nonceBytes);
+		options?.onEvent?.({
+			step: 5,
+			phase: require_sdkSentEvents.ActionPhase.STEP_5_TRANSACTION_SIGNING_PROGRESS,
+			status: require_sdkSentEvents.ActionStatus.PROGRESS,
+			message: "Signing NEP-413 message"
+		});
+		const result = await context.webAuthnManager.signNEP413Message({
+			message: params.message,
+			recipient: params.recipient,
+			nonce,
+			state: params.state || null,
+			accountId: nearAccountId,
+			signerMode,
+			title: confirmerText?.title,
+			body: confirmerText?.body,
+			confirmationConfigOverride
+		});
+		if (result.success) {
+			options?.onEvent?.({
+				step: 8,
+				phase: require_sdkSentEvents.ActionPhase.STEP_8_ACTION_COMPLETE,
+				status: require_sdkSentEvents.ActionStatus.SUCCESS,
+				message: "NEP-413 message signed successfully"
+			});
+			return {
+				success: true,
+				accountId: result.accountId,
+				publicKey: result.publicKey,
+				signature: result.signature,
+				nonce,
+				state: result.state
+			};
+		} else throw new Error(`NEP-413 signing failed: ${result.error || "Unknown error"}`);
+	} catch (error) {
+		const errorMessage = error instanceof Error ? error.message : "Unknown error";
+		options?.onEvent?.({
+			step: 0,
+			phase: "action-error",
+			status: "error",
+			message: `NEP-413 signing failed: ${errorMessage}`,
+			error: errorMessage
+		});
+		options?.onError?.(error instanceof Error ? error : new Error(errorMessage));
+		return {
+			success: false,
+			error: errorMessage
+		};
+	}
+}
+
+//#endregion
+exports.signNEP413Message = signNEP413Message;
+//# sourceMappingURL=signNEP413.js.map

package/dist/cjs/react/src/core/TatchiPasskey/signNEP413.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signNEP413.js","names":["mergeSignerMode","ActionPhase","ActionStatus","base64Encode"],"sources":["../../../../../../src/core/TatchiPasskey/signNEP413.ts"],"sourcesContent":["import type { PasskeyManagerContext } from './index';\nimport type { SignNEP413HooksOptions } from '../types/sdkSentEvents';\nimport { ActionPhase, ActionStatus } from '../types/sdkSentEvents';\nimport type { AccountId } from '../types/accountIds';\nimport { mergeSignerMode } from '../types/signer-worker';\nimport { base64Encode } from '../../utils/encoders';\n\n/**\n * NEP-413 message signing parameters\n */\nexport interface SignNEP413MessageParams {\n  /** The message to sign */\n  message: string;\n  /** The recipient identifier */\n  recipient: string;\n  /** Optional state parameter */\n  state?: string;\n}\n\n/**\n * NEP-413 message signing result\n */\nexport interface SignNEP413MessageResult {\n  /** Success status */\n  success: boolean;\n  /** NEAR account ID that signed the message */\n  accountId?: string;\n  /** Base58-encoded public key */\n  publicKey?: string;\n  /** Base64-encoded signature */\n  signature?: string;\n  /** Base64-encoded 32-byte nonce used for signing */\n  nonce?: string;\n  /** Optional state parameter */\n  state?: string;\n  /** Error message if signing failed */\n  error?: string;\n}\n\n/**\n * Sign a NEP-413 message using the user's passkey-derived private key\n *\n * This function implements the NEP-413 standard for off-chain message signing:\n * - Creates a payload with message, recipient, nonce, and state\n * - Serializes using Borsh\n * - Adds NEP-413 prefix (2^31 + 413)\n * - Hashes with SHA-256\n * - Signs with Ed25519\n * - Returns base64-encoded signature\n *\n * @param context - TatchiPasskey context\n * @param nearAccountId - NEAR account ID to sign with\n * @param params - NEP-413 signing parameters\n * @param options - Action options for event handling\n * @returns Promise resolving to signing result\n */\nexport async function signNEP413Message(args: {\n  context: PasskeyManagerContext,\n  nearAccountId: AccountId,\n  params: SignNEP413MessageParams,\n  options: SignNEP413HooksOptions\n}): Promise<SignNEP413MessageResult> {\n\n  const { context, nearAccountId, params, options } = args;\n  const confirmerText = options?.confirmerText;\n  const confirmationConfigOverride = options?.confirmationConfig;\n  const { webAuthnManager } = context;\n  const baseSignerMode = webAuthnManager.getUserPreferences().getSignerMode();\n  const signerMode = mergeSignerMode(baseSignerMode, options.signerMode);\n\n  try {\n    // Emit preparation event\n    options?.onEvent?.({\n      step: 1,\n      phase: ActionPhase.STEP_1_PREPARATION,\n      status: ActionStatus.PROGRESS,\n      message: 'Preparing NEP-413 message signing'\n    });\n\n    // Get user data and VRF status for NEP-413 signing\n    const [vrfStatus, userData] = await Promise.all([\n      webAuthnManager.checkVrfStatus(),\n      webAuthnManager.getLastUser(),\n    ]);\n    // Check VRF status to ensure user is authenticated\n    if (!vrfStatus.active) {\n      throw new Error('User not authenticated. Please login first.');\n    }\n    if (!userData || !userData.clientNearPublicKey) {\n      throw new Error(`User data not found for ${nearAccountId}`);\n    }\n\n    // Generate a random 32-byte nonce (NEP-413 expects base64-encoded nonce bytes).\n    const nonceBytes = new Uint8Array(32);\n    if (typeof crypto === 'undefined' || typeof crypto.getRandomValues !== 'function') {\n      throw new Error('Secure random not available to generate NEP-413 nonce');\n    }\n    crypto.getRandomValues(nonceBytes);\n    const nonce = base64Encode(nonceBytes);\n\n    // Emit signing progress event\n    options?.onEvent?.({\n      step: 5,\n      phase: ActionPhase.STEP_5_TRANSACTION_SIGNING_PROGRESS,\n      status: ActionStatus.PROGRESS,\n      message: 'Signing NEP-413 message'\n    });\n\n    // Send to WebAuthnManager for signing.\n    // Note: NEP-413 now uses VRF-driven confirmTxFlow inside WebAuthnManager/SignerWorkerManager;\n    // this call will trigger its own confirmation + WebAuthn authentication as needed.\n    const result = await context.webAuthnManager.signNEP413Message({\n      message: params.message,\n      recipient: params.recipient,\n      nonce,\n      state: params.state || null,\n      accountId: nearAccountId,\n      signerMode,\n      title: confirmerText?.title,\n      body: confirmerText?.body,\n      confirmationConfigOverride,\n    });\n\n    if (result.success) {\n      // Emit completion event\n      options?.onEvent?.({\n        step: 8,\n        phase: ActionPhase.STEP_8_ACTION_COMPLETE,\n        status: ActionStatus.SUCCESS,\n        message: 'NEP-413 message signed successfully'\n      });\n\n      return {\n        success: true,\n        accountId: result.accountId,\n        publicKey: result.publicKey,\n        signature: result.signature,\n        nonce,\n        state: result.state\n      };\n    } else {\n      throw new Error(`NEP-413 signing failed: ${result.error || 'Unknown error'}`);\n    }\n\n  } catch (error) {\n    const errorMessage = error instanceof Error ? error.message : 'Unknown error';\n\n    // Emit error event\n    options?.onEvent?.({\n      step: 0,\n      phase: 'action-error' as any,\n      status: 'error' as any,\n      message: `NEP-413 signing failed: ${errorMessage}`,\n      error: errorMessage\n    });\n\n    options?.onError?.(error instanceof Error ? error : new Error(errorMessage));\n\n    return {\n      success: false,\n      error: errorMessage\n    };\n  }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;AAwDA,eAAsB,kBAAkB,MAKH;CAEnC,MAAM,EAAE,SAAS,eAAe,QAAQ,YAAY;CACpD,MAAM,gBAAgB,SAAS;CAC/B,MAAM,6BAA6B,SAAS;CAC5C,MAAM,EAAE,oBAAoB;CAC5B,MAAM,iBAAiB,gBAAgB,qBAAqB;CAC5D,MAAM,aAAaA,sCAAgB,gBAAgB,QAAQ;AAE3D,KAAI;AAEF,WAAS,UAAU;GACjB,MAAM;GACN,OAAOC,kCAAY;GACnB,QAAQC,mCAAa;GACrB,SAAS;;EAIX,MAAM,CAAC,WAAW,YAAY,MAAM,QAAQ,IAAI,CAC9C,gBAAgB,kBAChB,gBAAgB;AAGlB,MAAI,CAAC,UAAU,OACb,OAAM,IAAI,MAAM;AAElB,MAAI,CAAC,YAAY,CAAC,SAAS,oBACzB,OAAM,IAAI,MAAM,2BAA2B;EAI7C,MAAM,aAAa,IAAI,WAAW;AAClC,MAAI,OAAO,WAAW,eAAe,OAAO,OAAO,oBAAoB,WACrE,OAAM,IAAI,MAAM;AAElB,SAAO,gBAAgB;EACvB,MAAM,QAAQC,4BAAa;AAG3B,WAAS,UAAU;GACjB,MAAM;GACN,OAAOF,kCAAY;GACnB,QAAQC,mCAAa;GACrB,SAAS;;EAMX,MAAM,SAAS,MAAM,QAAQ,gBAAgB,kBAAkB;GAC7D,SAAS,OAAO;GAChB,WAAW,OAAO;GAClB;GACA,OAAO,OAAO,SAAS;GACvB,WAAW;GACX;GACA,OAAO,eAAe;GACtB,MAAM,eAAe;GACrB;;AAGF,MAAI,OAAO,SAAS;AAElB,YAAS,UAAU;IACjB,MAAM;IACN,OAAOD,kCAAY;IACnB,QAAQC,mCAAa;IACrB,SAAS;;AAGX,UAAO;IACL,SAAS;IACT,WAAW,OAAO;IAClB,WAAW,OAAO;IAClB,WAAW,OAAO;IAClB;IACA,OAAO,OAAO;;QAGhB,OAAM,IAAI,MAAM,2BAA2B,OAAO,SAAS;UAGtD,OAAO;EACd,MAAM,eAAe,iBAAiB,QAAQ,MAAM,UAAU;AAG9D,WAAS,UAAU;GACjB,MAAM;GACN,OAAO;GACP,QAAQ;GACR,SAAS,2BAA2B;GACpC,OAAO;;AAGT,WAAS,UAAU,iBAAiB,QAAQ,QAAQ,IAAI,MAAM;AAE9D,SAAO;GACL,SAAS;GACT,OAAO"}