@thru/passkey-manager 0.2.1 → 0.2.4

package/src/instructions/register-credential.ts

@@ -0,0 +1,33 @@
+import type { RegisterCredentialInstructionParams } from '../types';
+import {
+  RegisterCredentialArgsBuilder,
+  PasskeyInstructionBuilder,
+} from '../abi/thru/program/passkey_manager/types';
+
+export function encodeRegisterCredentialInstruction(
+  params: RegisterCredentialInstructionParams
+): Uint8Array {
+  const { walletAccountIdx, lookupAccountIdx, seed, stateProof } = params;
+
+  if (seed.length !== 32) throw new Error('seed must be 32 bytes');
+  if (walletAccountIdx < 0 || walletAccountIdx > 0xffff) {
+    throw new Error('walletAccountIdx must be 0-65535');
+  }
+  if (lookupAccountIdx < 0 || lookupAccountIdx > 0xffff) {
+    throw new Error('lookupAccountIdx must be 0-65535');
+  }
+
+  const argsPayload = new RegisterCredentialArgsBuilder()
+    .set_wallet_account_idx(walletAccountIdx)
+    .set_lookup_account_idx(lookupAccountIdx)
+    .set_seed(seed)
+    .set_state_proof(stateProof)
+    .build();
+
+  return new PasskeyInstructionBuilder()
+    .payload()
+    .select('register_credential')
+    .writePayload(argsPayload)
+    .finish()
+    .build();
+}

package/src/seeds.ts

@@ -45,3 +45,36 @@ export async function deriveWalletAddress(
   const hashBuffer = await crypto.subtle.digest('SHA-256', preimage);
   return new Uint8Array(hashBuffer);
 }
+
+/**
+ * Create a 32-byte seed for a credential lookup PDA.
+ * SHA-256(credentialId || walletName)
+ *
+ * Including walletName makes the lookup unique per (credential, wallet) pair,
+ * so one passkey can be an authority on multiple wallets with separate lookups.
+ */
+export async function createCredentialLookupSeed(
+  credentialId: Uint8Array,
+  walletName: string
+): Promise<Uint8Array> {
+  const nameBytes = new TextEncoder().encode(walletName);
+  const data = new Uint8Array(credentialId.length + nameBytes.length);
+  data.set(credentialId, 0);
+  data.set(nameBytes, credentialId.length);
+
+  const hashBuffer = await crypto.subtle.digest('SHA-256', data);
+  return new Uint8Array(hashBuffer);
+}
+
+/**
+ * Derive credential lookup PDA address from a credential ID and wallet name.
+ * Convenience wrapper: deriveWalletAddress(SHA-256(credentialId || walletName), programAddress)
+ */
+export async function deriveCredentialLookupAddress(
+  credentialId: Uint8Array,
+  walletName: string,
+  programAddress: string
+): Promise<Uint8Array> {
+  const seed = await createCredentialLookupSeed(credentialId, walletName);
+  return deriveWalletAddress(seed, programAddress);
+}

package/src/types.ts

@@ -81,6 +81,13 @@ export interface AccountContext {
   getAccountIndex: (pubkey: Uint8Array) => number;
 }
 
+export interface RegisterCredentialInstructionParams {
+  walletAccountIdx: number;
+  lookupAccountIdx: number;
+  seed: Uint8Array; // SHA-256(credentialId), 32 bytes
+  stateProof: Uint8Array;
+}
+
 export type WalletSigner = {
   signTransaction: (payloadBase64: string) => Promise<string>;
 };