@thru/passkey-manager 0.2.1

package/dist/index.d.cts

@@ -0,0 +1,201 @@
+declare const PASSKEY_MANAGER_PROGRAM_ADDRESS = "taNiWOgcxRz2DYI1Vbp6AOMdiEbC9nYwXd02dQJ4jnUUpF";
+declare const INSTRUCTION_CREATE = 0;
+declare const INSTRUCTION_VALIDATE = 1;
+declare const INSTRUCTION_TRANSFER = 2;
+declare const INSTRUCTION_INVOKE = 3;
+declare const INSTRUCTION_ADD_AUTHORITY = 4;
+declare const INSTRUCTION_REMOVE_AUTHORITY = 5;
+declare const AUTHORITY_TAG_PASSKEY = 1;
+declare const AUTHORITY_TAG_PUBKEY = 2;
+
+/**
+ * Result of passkey registration (credential creation).
+ */
+interface PasskeyRegistrationResult {
+    credentialId: string;
+    publicKeyX: string;
+    publicKeyY: string;
+    rpId: string;
+}
+/**
+ * Result of passkey signing (assertion).
+ */
+interface PasskeySigningResult {
+    signature: Uint8Array;
+    authenticatorData: Uint8Array;
+    clientDataJSON: Uint8Array;
+    signatureR: Uint8Array;
+    signatureS: Uint8Array;
+}
+/**
+ * Signing result with discoverable credential info.
+ */
+interface PasskeyDiscoverableSigningResult extends PasskeySigningResult {
+    credentialId: string;
+    rpId: string;
+}
+/**
+ * Passkey metadata stored locally (the actual private key lives in the device's secure enclave).
+ */
+interface PasskeyMetadata {
+    credentialId: string;
+    publicKeyX: string;
+    publicKeyY: string;
+    rpId: string;
+    label?: string;
+    createdAt: string;
+    lastUsedAt: string;
+}
+type Authority = {
+    tag: 1;
+    pubkeyX: Uint8Array;
+    pubkeyY: Uint8Array;
+} | {
+    tag: 2;
+    pubkey: Uint8Array;
+};
+interface CreateInstructionParams {
+    walletAccountIdx: number;
+    authority: Authority;
+    seed: Uint8Array;
+    stateProof: Uint8Array;
+}
+interface TransferInstructionParams {
+    walletAccountIdx: number;
+    toAccountIdx: number;
+    amount: bigint;
+}
+interface ValidateInstructionParams {
+    walletAccountIdx: number;
+    authIdx: number;
+    signatureR: Uint8Array;
+    signatureS: Uint8Array;
+    authenticatorData: Uint8Array;
+    clientDataJSON: Uint8Array;
+}
+interface AccountContext {
+    readWriteAddresses: string[];
+    readOnlyAddresses: string[];
+    accountAddresses: string[];
+    walletAccountIdx: number;
+    getAccountIndex: (pubkey: Uint8Array) => number;
+}
+type WalletSigner = {
+    signTransaction: (payloadBase64: string) => Promise<string>;
+};
+type TransactionExecutionSummary = {
+    executionResult?: bigint | number | null;
+    userErrorCode?: bigint | number | null;
+    vmError?: number | string | bigint | null;
+};
+
+declare function encodeCreateInstruction(params: CreateInstructionParams): Uint8Array;
+
+declare function encodeValidateInstruction(params: ValidateInstructionParams): Uint8Array;
+
+declare function encodeTransferInstruction(params: TransferInstructionParams): Uint8Array;
+
+declare function encodeInvokeInstruction(programPubkey: Uint8Array, instruction: Uint8Array): Uint8Array;
+
+declare function encodeAddAuthorityInstruction(params: {
+    authority: Authority;
+}): Uint8Array;
+
+declare function encodeRemoveAuthorityInstruction(params: {
+    authIdx: number;
+}): Uint8Array;
+
+declare function concatenateInstructions(instructions: Uint8Array[]): Uint8Array;
+
+/**
+ * Create challenge for VALIDATE instruction.
+ * SHA256(nonce || account_0 || account_1 || ... || trailing_instruction_bytes)
+ */
+declare function createValidateChallenge(nonce: bigint, accountAddresses: string[], trailingInstructionData: Uint8Array): Promise<Uint8Array>;
+
+/**
+ * Create a 32-byte seed from wallet name and passkey coordinates.
+ * SHA-256(walletName || pubkey_x || pubkey_y)
+ */
+declare function createWalletSeed(walletName: string, pubkeyX: Uint8Array, pubkeyY: Uint8Array): Promise<Uint8Array>;
+/**
+ * Derive wallet account address from seed using proper PDA derivation.
+ * SHA256(program_address || is_ephemeral || seed)
+ */
+declare function deriveWalletAddress(seed: Uint8Array, programAddress: string): Promise<Uint8Array>;
+
+/**
+ * Default fee payer address (manager profile).
+ */
+declare const FEE_PAYER_ADDRESS = "taVcZv3wB2m-euBpMHm2rF9fQRY_fO_g7WdOjs70CxDh_S";
+/**
+ * Build account context for passkey manager transactions.
+ * Handles account deduplication, sorting, and index lookup.
+ */
+declare function buildAccountContext(params: {
+    walletAddress: string;
+    readWriteAccounts: Uint8Array[];
+    readOnlyAccounts: Uint8Array[];
+    feePayerAddress?: string;
+    programAddress?: string;
+}): AccountContext;
+/**
+ * Build read-write accounts list for passkey manager transactions (simpler wallet-only version).
+ */
+declare function buildPasskeyReadWriteAccounts(userAccounts: Uint8Array[], feePayerPublicKey: Uint8Array, programAddress: Uint8Array): {
+    readWriteAddresses: string[];
+    findAccountIndex: (target: Uint8Array) => number;
+};
+
+/**
+ * Parse wallet account data to extract nonce.
+ */
+declare function parseWalletNonce(data: Uint8Array): bigint;
+/**
+ * Fetch wallet nonce from the chain.
+ * Takes an SDK-like object with accounts.get() method.
+ */
+declare function fetchWalletNonce(sdk: {
+    accounts: {
+        get: (address: string) => Promise<{
+            data?: {
+                data?: Uint8Array;
+            };
+        }>;
+    };
+}, walletAddress: string): Promise<bigint>;
+
+/**
+ * P-256 curve order and half-order for low-S normalization.
+ */
+declare const P256_N = 115792089210356248762697446949407573529996955224135760342422259061068512044369n;
+declare const P256_HALF_N: bigint;
+/**
+ * Parse DER-encoded ECDSA signature to get r and s components.
+ */
+declare function parseDerSignature(der: Uint8Array): {
+    r: Uint8Array;
+    s: Uint8Array;
+};
+/**
+ * Ensure S is in the lower half of the curve order (BIP-62 / SEC1 compliance).
+ */
+declare function normalizeLowS(s: Uint8Array): Uint8Array;
+/**
+ * Normalize signature component to exactly 32 bytes.
+ */
+declare function normalizeSignatureComponent(component: Uint8Array): Uint8Array;
+declare function bytesToBigIntBE(bytes: Uint8Array): bigint;
+declare function bigIntToBytesBE(value: bigint, length: number): Uint8Array;
+
+declare function arrayBufferToBase64Url(buffer: ArrayBuffer | SharedArrayBuffer): string;
+declare function base64UrlToArrayBuffer(base64Url: string): ArrayBuffer;
+declare function bytesToBase64Url(bytes: Uint8Array): string;
+declare function base64UrlToBytes(base64Url: string): Uint8Array;
+declare function bytesToHex(bytes: Uint8Array): string;
+declare function hexToBytes(hex: string): Uint8Array;
+declare function bytesEqual(a: Uint8Array, b: Uint8Array): boolean;
+declare function compareBytes(a: Uint8Array, b: Uint8Array): number;
+declare function uniqueAccounts(accounts: Uint8Array[]): Uint8Array[];
+
+export { AUTHORITY_TAG_PASSKEY, AUTHORITY_TAG_PUBKEY, type AccountContext, type Authority, type CreateInstructionParams, FEE_PAYER_ADDRESS, INSTRUCTION_ADD_AUTHORITY, INSTRUCTION_CREATE, INSTRUCTION_INVOKE, INSTRUCTION_REMOVE_AUTHORITY, INSTRUCTION_TRANSFER, INSTRUCTION_VALIDATE, P256_HALF_N, P256_N, PASSKEY_MANAGER_PROGRAM_ADDRESS, type PasskeyDiscoverableSigningResult, type PasskeyMetadata, type PasskeyRegistrationResult, type PasskeySigningResult, type TransactionExecutionSummary, type TransferInstructionParams, type ValidateInstructionParams, type WalletSigner, arrayBufferToBase64Url, base64UrlToArrayBuffer, base64UrlToBytes, bigIntToBytesBE, buildAccountContext, buildPasskeyReadWriteAccounts, bytesEqual, bytesToBase64Url, bytesToBigIntBE, bytesToHex, compareBytes, concatenateInstructions, createValidateChallenge, createWalletSeed, deriveWalletAddress, encodeAddAuthorityInstruction, encodeCreateInstruction, encodeInvokeInstruction, encodeRemoveAuthorityInstruction, encodeTransferInstruction, encodeValidateInstruction, fetchWalletNonce, hexToBytes, normalizeLowS, normalizeSignatureComponent, parseDerSignature, parseWalletNonce, uniqueAccounts };

package/dist/index.d.ts

@@ -0,0 +1,201 @@
+declare const PASSKEY_MANAGER_PROGRAM_ADDRESS = "taNiWOgcxRz2DYI1Vbp6AOMdiEbC9nYwXd02dQJ4jnUUpF";
+declare const INSTRUCTION_CREATE = 0;
+declare const INSTRUCTION_VALIDATE = 1;
+declare const INSTRUCTION_TRANSFER = 2;
+declare const INSTRUCTION_INVOKE = 3;
+declare const INSTRUCTION_ADD_AUTHORITY = 4;
+declare const INSTRUCTION_REMOVE_AUTHORITY = 5;
+declare const AUTHORITY_TAG_PASSKEY = 1;
+declare const AUTHORITY_TAG_PUBKEY = 2;
+
+/**
+ * Result of passkey registration (credential creation).
+ */
+interface PasskeyRegistrationResult {
+    credentialId: string;
+    publicKeyX: string;
+    publicKeyY: string;
+    rpId: string;
+}
+/**
+ * Result of passkey signing (assertion).
+ */
+interface PasskeySigningResult {
+    signature: Uint8Array;
+    authenticatorData: Uint8Array;
+    clientDataJSON: Uint8Array;
+    signatureR: Uint8Array;
+    signatureS: Uint8Array;
+}
+/**
+ * Signing result with discoverable credential info.
+ */
+interface PasskeyDiscoverableSigningResult extends PasskeySigningResult {
+    credentialId: string;
+    rpId: string;
+}
+/**
+ * Passkey metadata stored locally (the actual private key lives in the device's secure enclave).
+ */
+interface PasskeyMetadata {
+    credentialId: string;
+    publicKeyX: string;
+    publicKeyY: string;
+    rpId: string;
+    label?: string;
+    createdAt: string;
+    lastUsedAt: string;
+}
+type Authority = {
+    tag: 1;
+    pubkeyX: Uint8Array;
+    pubkeyY: Uint8Array;
+} | {
+    tag: 2;
+    pubkey: Uint8Array;
+};
+interface CreateInstructionParams {
+    walletAccountIdx: number;
+    authority: Authority;
+    seed: Uint8Array;
+    stateProof: Uint8Array;
+}
+interface TransferInstructionParams {
+    walletAccountIdx: number;
+    toAccountIdx: number;
+    amount: bigint;
+}
+interface ValidateInstructionParams {
+    walletAccountIdx: number;
+    authIdx: number;
+    signatureR: Uint8Array;
+    signatureS: Uint8Array;
+    authenticatorData: Uint8Array;
+    clientDataJSON: Uint8Array;
+}
+interface AccountContext {
+    readWriteAddresses: string[];
+    readOnlyAddresses: string[];
+    accountAddresses: string[];
+    walletAccountIdx: number;
+    getAccountIndex: (pubkey: Uint8Array) => number;
+}
+type WalletSigner = {
+    signTransaction: (payloadBase64: string) => Promise<string>;
+};
+type TransactionExecutionSummary = {
+    executionResult?: bigint | number | null;
+    userErrorCode?: bigint | number | null;
+    vmError?: number | string | bigint | null;
+};
+
+declare function encodeCreateInstruction(params: CreateInstructionParams): Uint8Array;
+
+declare function encodeValidateInstruction(params: ValidateInstructionParams): Uint8Array;
+
+declare function encodeTransferInstruction(params: TransferInstructionParams): Uint8Array;
+
+declare function encodeInvokeInstruction(programPubkey: Uint8Array, instruction: Uint8Array): Uint8Array;
+
+declare function encodeAddAuthorityInstruction(params: {
+    authority: Authority;
+}): Uint8Array;
+
+declare function encodeRemoveAuthorityInstruction(params: {
+    authIdx: number;
+}): Uint8Array;
+
+declare function concatenateInstructions(instructions: Uint8Array[]): Uint8Array;
+
+/**
+ * Create challenge for VALIDATE instruction.
+ * SHA256(nonce || account_0 || account_1 || ... || trailing_instruction_bytes)
+ */
+declare function createValidateChallenge(nonce: bigint, accountAddresses: string[], trailingInstructionData: Uint8Array): Promise<Uint8Array>;
+
+/**
+ * Create a 32-byte seed from wallet name and passkey coordinates.
+ * SHA-256(walletName || pubkey_x || pubkey_y)
+ */
+declare function createWalletSeed(walletName: string, pubkeyX: Uint8Array, pubkeyY: Uint8Array): Promise<Uint8Array>;
+/**
+ * Derive wallet account address from seed using proper PDA derivation.
+ * SHA256(program_address || is_ephemeral || seed)
+ */
+declare function deriveWalletAddress(seed: Uint8Array, programAddress: string): Promise<Uint8Array>;
+
+/**
+ * Default fee payer address (manager profile).
+ */
+declare const FEE_PAYER_ADDRESS = "taVcZv3wB2m-euBpMHm2rF9fQRY_fO_g7WdOjs70CxDh_S";
+/**
+ * Build account context for passkey manager transactions.
+ * Handles account deduplication, sorting, and index lookup.
+ */
+declare function buildAccountContext(params: {
+    walletAddress: string;
+    readWriteAccounts: Uint8Array[];
+    readOnlyAccounts: Uint8Array[];
+    feePayerAddress?: string;
+    programAddress?: string;
+}): AccountContext;
+/**
+ * Build read-write accounts list for passkey manager transactions (simpler wallet-only version).
+ */
+declare function buildPasskeyReadWriteAccounts(userAccounts: Uint8Array[], feePayerPublicKey: Uint8Array, programAddress: Uint8Array): {
+    readWriteAddresses: string[];
+    findAccountIndex: (target: Uint8Array) => number;
+};
+
+/**
+ * Parse wallet account data to extract nonce.
+ */
+declare function parseWalletNonce(data: Uint8Array): bigint;
+/**
+ * Fetch wallet nonce from the chain.
+ * Takes an SDK-like object with accounts.get() method.
+ */
+declare function fetchWalletNonce(sdk: {
+    accounts: {
+        get: (address: string) => Promise<{
+            data?: {
+                data?: Uint8Array;
+            };
+        }>;
+    };
+}, walletAddress: string): Promise<bigint>;
+
+/**
+ * P-256 curve order and half-order for low-S normalization.
+ */
+declare const P256_N = 115792089210356248762697446949407573529996955224135760342422259061068512044369n;
+declare const P256_HALF_N: bigint;
+/**
+ * Parse DER-encoded ECDSA signature to get r and s components.
+ */
+declare function parseDerSignature(der: Uint8Array): {
+    r: Uint8Array;
+    s: Uint8Array;
+};
+/**
+ * Ensure S is in the lower half of the curve order (BIP-62 / SEC1 compliance).
+ */
+declare function normalizeLowS(s: Uint8Array): Uint8Array;
+/**
+ * Normalize signature component to exactly 32 bytes.
+ */
+declare function normalizeSignatureComponent(component: Uint8Array): Uint8Array;
+declare function bytesToBigIntBE(bytes: Uint8Array): bigint;
+declare function bigIntToBytesBE(value: bigint, length: number): Uint8Array;
+
+declare function arrayBufferToBase64Url(buffer: ArrayBuffer | SharedArrayBuffer): string;
+declare function base64UrlToArrayBuffer(base64Url: string): ArrayBuffer;
+declare function bytesToBase64Url(bytes: Uint8Array): string;
+declare function base64UrlToBytes(base64Url: string): Uint8Array;
+declare function bytesToHex(bytes: Uint8Array): string;
+declare function hexToBytes(hex: string): Uint8Array;
+declare function bytesEqual(a: Uint8Array, b: Uint8Array): boolean;
+declare function compareBytes(a: Uint8Array, b: Uint8Array): number;
+declare function uniqueAccounts(accounts: Uint8Array[]): Uint8Array[];
+
+export { AUTHORITY_TAG_PASSKEY, AUTHORITY_TAG_PUBKEY, type AccountContext, type Authority, type CreateInstructionParams, FEE_PAYER_ADDRESS, INSTRUCTION_ADD_AUTHORITY, INSTRUCTION_CREATE, INSTRUCTION_INVOKE, INSTRUCTION_REMOVE_AUTHORITY, INSTRUCTION_TRANSFER, INSTRUCTION_VALIDATE, P256_HALF_N, P256_N, PASSKEY_MANAGER_PROGRAM_ADDRESS, type PasskeyDiscoverableSigningResult, type PasskeyMetadata, type PasskeyRegistrationResult, type PasskeySigningResult, type TransactionExecutionSummary, type TransferInstructionParams, type ValidateInstructionParams, type WalletSigner, arrayBufferToBase64Url, base64UrlToArrayBuffer, base64UrlToBytes, bigIntToBytesBE, buildAccountContext, buildPasskeyReadWriteAccounts, bytesEqual, bytesToBase64Url, bytesToBigIntBE, bytesToHex, compareBytes, concatenateInstructions, createValidateChallenge, createWalletSeed, deriveWalletAddress, encodeAddAuthorityInstruction, encodeCreateInstruction, encodeInvokeInstruction, encodeRemoveAuthorityInstruction, encodeTransferInstruction, encodeValidateInstruction, fetchWalletNonce, hexToBytes, normalizeLowS, normalizeSignatureComponent, parseDerSignature, parseWalletNonce, uniqueAccounts };