@thru/programs 0.2.25 → 0.2.28

package/dist/passkey-manager/index.d.cts

@@ -1,6 +1,6 @@
 export { decodeAddress, encodeAddress } from '@thru/sdk/helpers';
 
-declare const PASSKEY_MANAGER_PROGRAM_ADDRESS = "taUDdQyFxvM5i0HFRkEK3W45kWLyblAHSnMg4zplgUnz6Z";
+declare const PASSKEY_MANAGER_PROGRAM_ADDRESS = "tabsq39mzj3DZlutXOGG6VtfMj8fUvI0HIOXfZm7TLLY6N";
 declare const INSTRUCTION_CREATE = 0;
 declare const INSTRUCTION_VALIDATE = 1;
 declare const INSTRUCTION_TRANSFER = 2;
@@ -9,6 +9,9 @@ declare const INSTRUCTION_REMOVE_AUTHORITY = 5;
 declare const INSTRUCTION_REGISTER_CREDENTIAL = 6;
 declare const AUTHORITY_TAG_PASSKEY = 1;
 declare const AUTHORITY_TAG_PUBKEY = 2;
+declare const AUTHORITY_BYTES: number;
+declare const AUTHORITY_RECORD_BYTES: number;
+declare const LONG_LIVED_AUTHORITY_EXPIRY_SECONDS = 18446744073709551615n;
 
 /**
  * Result of passkey registration (credential creation).
@@ -69,9 +72,13 @@ type Authority = {
     tag: 2;
     pubkey: Uint8Array;
 };
+interface AuthorityRecord {
+    authority: Authority;
+    expiresAtBlockTimeSeconds: bigint;
+}
 interface CreateInstructionParams {
     walletAccountIdx: number;
-    authority: Authority;
+    authorityRecord: AuthorityRecord;
     seed: Uint8Array;
     stateProof: Uint8Array;
 }
@@ -95,7 +102,7 @@ interface ValidateInstructionParams {
 }
 interface AddAuthorityInstructionParams {
     walletAccountIdx: number;
-    authority: Authority;
+    authorityRecord: AuthorityRecord;
 }
 interface RemoveAuthorityInstructionParams {
     walletAccountIdx: number;
@@ -123,18 +130,47 @@ type TransactionExecutionSummary = {
     vmError?: number | string | bigint | null;
 };
 
+declare function buildAuthority(authority: Authority): Uint8Array;
+
+declare function createAuthorityRecord(authority: Authority, expiresAtBlockTimeSeconds?: bigint): AuthorityRecord;
+declare function createSessionAuthorityRecord(params: {
+    pubkey: Uint8Array;
+    expiresAtBlockTimeSeconds: bigint;
+}): AuthorityRecord;
+declare function buildAuthorityRecord(record: AuthorityRecord): Uint8Array;
 declare function encodeCreateInstruction(params: CreateInstructionParams): Uint8Array;
+/**
+ * Encode CREATE for the currently deployed legacy passkey-manager program.
+ *
+ * Legacy CREATE stores the initial bare Authority directly:
+ *   tag || wallet_account_idx || Authority || seed || StateProof
+ *
+ * Newer program builds should use encodeCreateInstruction, which carries a
+ * full AuthorityRecord with an expiry timestamp.
+ */
+declare function encodeLegacyCreateInstruction(params: CreateInstructionParams): Uint8Array;
 
 declare function encodeValidateInstruction(params: ValidateInstructionParams): Uint8Array;
 
 declare function encodeTransferInstruction(params: TransferInstructionParams): Uint8Array;
 
+declare function encodeInvokeInstruction(_programPubkey: Uint8Array, _instruction: Uint8Array): Uint8Array;
+
 declare function encodeAddAuthorityInstruction(params: AddAuthorityInstructionParams): Uint8Array;
+/**
+ * Encode ADD_AUTHORITY for the currently deployed legacy passkey-manager.
+ *
+ * Legacy ADD_AUTHORITY appends a bare 65-byte Authority. Expiry remains a
+ * local wallet/session policy until the AuthorityRecord program is deployed.
+ */
+declare function encodeLegacyAddAuthorityInstruction(params: AddAuthorityInstructionParams): Uint8Array;
 
 declare function encodeRemoveAuthorityInstruction(params: RemoveAuthorityInstructionParams): Uint8Array;
 
 declare function encodeRegisterCredentialInstruction(params: RegisterCredentialInstructionParams): Uint8Array;
 
+declare function concatenateInstructions(instructions: Uint8Array[]): Uint8Array;
+
 /**
  * Create challenge for VALIDATE instruction.
  * SHA256(domain || nonce || wallet_account_idx || auth_idx || account_count ||
@@ -206,15 +242,18 @@ declare function fetchWalletNonce(sdk: {
 }, walletAddress: string): Promise<bigint>;
 type ParsedAuthority = {
     idx: number;
+    expiresAtBlockTimeSeconds: bigint;
     kind: 'passkey';
     x: Uint8Array;
     y: Uint8Array;
 } | {
     idx: number;
+    expiresAtBlockTimeSeconds: bigint;
     kind: 'pubkey';
     pubkey: Uint8Array;
 } | {
     idx: number;
+    expiresAtBlockTimeSeconds: bigint;
     kind: 'unknown';
     tag: number;
     data: Uint8Array;
@@ -222,16 +261,11 @@ type ParsedAuthority = {
 interface WalletAuthorities {
     nonce: bigint;
     authorities: ParsedAuthority[];
+    layout: 'authorityRecord' | 'legacyAuthority';
 }
 /**
  * Parse the on-chain WalletAccount data buffer into its nonce and full
- * authority list. The on-chain layout is:
- *
- *   num_auth: u8
- *   nonce:    u64 LE
- *   authorities[num_auth + 1]: { tag: u8, data: [u8; 64] }
- *
- * (`num_auth + 1` because num_auth stores the count minus one.)
+ * authority list using the generated ABI view.
  */
 declare function parseWalletAuthorities(data: Uint8Array): WalletAuthorities;
 /**
@@ -322,4 +356,4 @@ declare function bytesEqual(a: Uint8Array, b: Uint8Array): boolean;
 declare function compareBytes(a: Uint8Array, b: Uint8Array): number;
 declare function uniqueAccounts(accounts: Uint8Array[]): Uint8Array[];
 
-export { AUTHORITY_TAG_PASSKEY, AUTHORITY_TAG_PUBKEY, type AccountContext, type AddAuthorityInstructionParams, type Authority, type CheckablePasskeyAuthorityIdentity, type CreateInstructionParams, FEE_PAYER_ADDRESS, INSTRUCTION_ADD_AUTHORITY, INSTRUCTION_CREATE, INSTRUCTION_REGISTER_CREDENTIAL, INSTRUCTION_REMOVE_AUTHORITY, INSTRUCTION_TRANSFER, INSTRUCTION_VALIDATE, P256_HALF_N, P256_N, PASSKEY_MANAGER_PROGRAM_ADDRESS, type ParsedAuthority, type PasskeyAuthorityIdentity, type PasskeyAuthorityTarget, type PasskeyDiscoverableSigningResult, type PasskeyMetadata, type PasskeyRegistrationResult, type PasskeySigningResult, type PreparePasskeyAuthorityTargetsOptions, type RegisterCredentialInstructionParams, type RemoveAuthorityInstructionParams, type TargetInstructionParams, type TransactionExecutionSummary, type TransferInstructionParams, VALIDATE_CHALLENGE_DOMAIN, type ValidateInstructionParams, type WalletAuthorities, type WalletSigner, arrayBufferToBase64Url, base64UrlToArrayBuffer, base64UrlToBytes, bigIntToBytesBE, buildAccountContext, buildPasskeyReadWriteAccounts, bytesEqual, bytesToBase64, bytesToBase64Url, bytesToBigIntBE, bytesToHex, compareBytes, createCredentialLookupSeed, createValidateChallenge, createWalletSeed, deriveCredentialLookupAddress, deriveWalletAddress, encodeAddAuthorityInstruction, encodeCreateInstruction, encodeRegisterCredentialInstruction, encodeRemoveAuthorityInstruction, encodeTransferInstruction, encodeValidateInstruction, fetchWalletNonce, findPasskeyAuthorityIndexForIdentity, findPasskeyAuthorityIndexInWalletData, formatAuthorityPubkey, hexToBytes, isPasskeyAuthorityCheckable, normalizeLowS, normalizeSignatureComponent, parseCredentialLookupWallet, parseDerSignature, parseWalletAuthorities, parseWalletNonce, preparePasskeyAuthorityTargets, resolvePasskeyAuthorityIndex, uniqueAccounts };
+export { AUTHORITY_BYTES, AUTHORITY_RECORD_BYTES, AUTHORITY_TAG_PASSKEY, AUTHORITY_TAG_PUBKEY, type AccountContext, type AddAuthorityInstructionParams, type Authority, type AuthorityRecord, type CheckablePasskeyAuthorityIdentity, type CreateInstructionParams, FEE_PAYER_ADDRESS, INSTRUCTION_ADD_AUTHORITY, INSTRUCTION_CREATE, INSTRUCTION_REGISTER_CREDENTIAL, INSTRUCTION_REMOVE_AUTHORITY, INSTRUCTION_TRANSFER, INSTRUCTION_VALIDATE, LONG_LIVED_AUTHORITY_EXPIRY_SECONDS, P256_HALF_N, P256_N, PASSKEY_MANAGER_PROGRAM_ADDRESS, type ParsedAuthority, type PasskeyAuthorityIdentity, type PasskeyAuthorityTarget, type PasskeyDiscoverableSigningResult, type PasskeyMetadata, type PasskeyRegistrationResult, type PasskeySigningResult, type PreparePasskeyAuthorityTargetsOptions, type RegisterCredentialInstructionParams, type RemoveAuthorityInstructionParams, type TargetInstructionParams, type TransactionExecutionSummary, type TransferInstructionParams, VALIDATE_CHALLENGE_DOMAIN, type ValidateInstructionParams, type WalletAuthorities, type WalletSigner, arrayBufferToBase64Url, base64UrlToArrayBuffer, base64UrlToBytes, bigIntToBytesBE, buildAccountContext, buildAuthority, buildAuthorityRecord, buildPasskeyReadWriteAccounts, bytesEqual, bytesToBase64, bytesToBase64Url, bytesToBigIntBE, bytesToHex, compareBytes, concatenateInstructions, createAuthorityRecord, createCredentialLookupSeed, createSessionAuthorityRecord, createValidateChallenge, createWalletSeed, deriveCredentialLookupAddress, deriveWalletAddress, encodeAddAuthorityInstruction, encodeCreateInstruction, encodeInvokeInstruction, encodeLegacyAddAuthorityInstruction, encodeLegacyCreateInstruction, encodeRegisterCredentialInstruction, encodeRemoveAuthorityInstruction, encodeTransferInstruction, encodeValidateInstruction, fetchWalletNonce, findPasskeyAuthorityIndexForIdentity, findPasskeyAuthorityIndexInWalletData, formatAuthorityPubkey, hexToBytes, isPasskeyAuthorityCheckable, normalizeLowS, normalizeSignatureComponent, parseCredentialLookupWallet, parseDerSignature, parseWalletAuthorities, parseWalletNonce, preparePasskeyAuthorityTargets, resolvePasskeyAuthorityIndex, uniqueAccounts };

package/dist/passkey-manager/index.d.ts

@@ -1,6 +1,6 @@
 export { decodeAddress, encodeAddress } from '@thru/sdk/helpers';
 
-declare const PASSKEY_MANAGER_PROGRAM_ADDRESS = "taUDdQyFxvM5i0HFRkEK3W45kWLyblAHSnMg4zplgUnz6Z";
+declare const PASSKEY_MANAGER_PROGRAM_ADDRESS = "tabsq39mzj3DZlutXOGG6VtfMj8fUvI0HIOXfZm7TLLY6N";
 declare const INSTRUCTION_CREATE = 0;
 declare const INSTRUCTION_VALIDATE = 1;
 declare const INSTRUCTION_TRANSFER = 2;
@@ -9,6 +9,9 @@ declare const INSTRUCTION_REMOVE_AUTHORITY = 5;
 declare const INSTRUCTION_REGISTER_CREDENTIAL = 6;
 declare const AUTHORITY_TAG_PASSKEY = 1;
 declare const AUTHORITY_TAG_PUBKEY = 2;
+declare const AUTHORITY_BYTES: number;
+declare const AUTHORITY_RECORD_BYTES: number;
+declare const LONG_LIVED_AUTHORITY_EXPIRY_SECONDS = 18446744073709551615n;
 
 /**
  * Result of passkey registration (credential creation).
@@ -69,9 +72,13 @@ type Authority = {
     tag: 2;
     pubkey: Uint8Array;
 };
+interface AuthorityRecord {
+    authority: Authority;
+    expiresAtBlockTimeSeconds: bigint;
+}
 interface CreateInstructionParams {
     walletAccountIdx: number;
-    authority: Authority;
+    authorityRecord: AuthorityRecord;
     seed: Uint8Array;
     stateProof: Uint8Array;
 }
@@ -95,7 +102,7 @@ interface ValidateInstructionParams {
 }
 interface AddAuthorityInstructionParams {
     walletAccountIdx: number;
-    authority: Authority;
+    authorityRecord: AuthorityRecord;
 }
 interface RemoveAuthorityInstructionParams {
     walletAccountIdx: number;
@@ -123,18 +130,47 @@ type TransactionExecutionSummary = {
     vmError?: number | string | bigint | null;
 };
 
+declare function buildAuthority(authority: Authority): Uint8Array;
+
+declare function createAuthorityRecord(authority: Authority, expiresAtBlockTimeSeconds?: bigint): AuthorityRecord;
+declare function createSessionAuthorityRecord(params: {
+    pubkey: Uint8Array;
+    expiresAtBlockTimeSeconds: bigint;
+}): AuthorityRecord;
+declare function buildAuthorityRecord(record: AuthorityRecord): Uint8Array;
 declare function encodeCreateInstruction(params: CreateInstructionParams): Uint8Array;
+/**
+ * Encode CREATE for the currently deployed legacy passkey-manager program.
+ *
+ * Legacy CREATE stores the initial bare Authority directly:
+ *   tag || wallet_account_idx || Authority || seed || StateProof
+ *
+ * Newer program builds should use encodeCreateInstruction, which carries a
+ * full AuthorityRecord with an expiry timestamp.
+ */
+declare function encodeLegacyCreateInstruction(params: CreateInstructionParams): Uint8Array;
 
 declare function encodeValidateInstruction(params: ValidateInstructionParams): Uint8Array;
 
 declare function encodeTransferInstruction(params: TransferInstructionParams): Uint8Array;
 
+declare function encodeInvokeInstruction(_programPubkey: Uint8Array, _instruction: Uint8Array): Uint8Array;
+
 declare function encodeAddAuthorityInstruction(params: AddAuthorityInstructionParams): Uint8Array;
+/**
+ * Encode ADD_AUTHORITY for the currently deployed legacy passkey-manager.
+ *
+ * Legacy ADD_AUTHORITY appends a bare 65-byte Authority. Expiry remains a
+ * local wallet/session policy until the AuthorityRecord program is deployed.
+ */
+declare function encodeLegacyAddAuthorityInstruction(params: AddAuthorityInstructionParams): Uint8Array;
 
 declare function encodeRemoveAuthorityInstruction(params: RemoveAuthorityInstructionParams): Uint8Array;
 
 declare function encodeRegisterCredentialInstruction(params: RegisterCredentialInstructionParams): Uint8Array;
 
+declare function concatenateInstructions(instructions: Uint8Array[]): Uint8Array;
+
 /**
  * Create challenge for VALIDATE instruction.
  * SHA256(domain || nonce || wallet_account_idx || auth_idx || account_count ||
@@ -206,15 +242,18 @@ declare function fetchWalletNonce(sdk: {
 }, walletAddress: string): Promise<bigint>;
 type ParsedAuthority = {
     idx: number;
+    expiresAtBlockTimeSeconds: bigint;
     kind: 'passkey';
     x: Uint8Array;
     y: Uint8Array;
 } | {
     idx: number;
+    expiresAtBlockTimeSeconds: bigint;
     kind: 'pubkey';
     pubkey: Uint8Array;
 } | {
     idx: number;
+    expiresAtBlockTimeSeconds: bigint;
     kind: 'unknown';
     tag: number;
     data: Uint8Array;
@@ -222,16 +261,11 @@ type ParsedAuthority = {
 interface WalletAuthorities {
     nonce: bigint;
     authorities: ParsedAuthority[];
+    layout: 'authorityRecord' | 'legacyAuthority';
 }
 /**
  * Parse the on-chain WalletAccount data buffer into its nonce and full
- * authority list. The on-chain layout is:
- *
- *   num_auth: u8
- *   nonce:    u64 LE
- *   authorities[num_auth + 1]: { tag: u8, data: [u8; 64] }
- *
- * (`num_auth + 1` because num_auth stores the count minus one.)
+ * authority list using the generated ABI view.
  */
 declare function parseWalletAuthorities(data: Uint8Array): WalletAuthorities;
 /**
@@ -322,4 +356,4 @@ declare function bytesEqual(a: Uint8Array, b: Uint8Array): boolean;
 declare function compareBytes(a: Uint8Array, b: Uint8Array): number;
 declare function uniqueAccounts(accounts: Uint8Array[]): Uint8Array[];
 
-export { AUTHORITY_TAG_PASSKEY, AUTHORITY_TAG_PUBKEY, type AccountContext, type AddAuthorityInstructionParams, type Authority, type CheckablePasskeyAuthorityIdentity, type CreateInstructionParams, FEE_PAYER_ADDRESS, INSTRUCTION_ADD_AUTHORITY, INSTRUCTION_CREATE, INSTRUCTION_REGISTER_CREDENTIAL, INSTRUCTION_REMOVE_AUTHORITY, INSTRUCTION_TRANSFER, INSTRUCTION_VALIDATE, P256_HALF_N, P256_N, PASSKEY_MANAGER_PROGRAM_ADDRESS, type ParsedAuthority, type PasskeyAuthorityIdentity, type PasskeyAuthorityTarget, type PasskeyDiscoverableSigningResult, type PasskeyMetadata, type PasskeyRegistrationResult, type PasskeySigningResult, type PreparePasskeyAuthorityTargetsOptions, type RegisterCredentialInstructionParams, type RemoveAuthorityInstructionParams, type TargetInstructionParams, type TransactionExecutionSummary, type TransferInstructionParams, VALIDATE_CHALLENGE_DOMAIN, type ValidateInstructionParams, type WalletAuthorities, type WalletSigner, arrayBufferToBase64Url, base64UrlToArrayBuffer, base64UrlToBytes, bigIntToBytesBE, buildAccountContext, buildPasskeyReadWriteAccounts, bytesEqual, bytesToBase64, bytesToBase64Url, bytesToBigIntBE, bytesToHex, compareBytes, createCredentialLookupSeed, createValidateChallenge, createWalletSeed, deriveCredentialLookupAddress, deriveWalletAddress, encodeAddAuthorityInstruction, encodeCreateInstruction, encodeRegisterCredentialInstruction, encodeRemoveAuthorityInstruction, encodeTransferInstruction, encodeValidateInstruction, fetchWalletNonce, findPasskeyAuthorityIndexForIdentity, findPasskeyAuthorityIndexInWalletData, formatAuthorityPubkey, hexToBytes, isPasskeyAuthorityCheckable, normalizeLowS, normalizeSignatureComponent, parseCredentialLookupWallet, parseDerSignature, parseWalletAuthorities, parseWalletNonce, preparePasskeyAuthorityTargets, resolvePasskeyAuthorityIndex, uniqueAccounts };
+export { AUTHORITY_BYTES, AUTHORITY_RECORD_BYTES, AUTHORITY_TAG_PASSKEY, AUTHORITY_TAG_PUBKEY, type AccountContext, type AddAuthorityInstructionParams, type Authority, type AuthorityRecord, type CheckablePasskeyAuthorityIdentity, type CreateInstructionParams, FEE_PAYER_ADDRESS, INSTRUCTION_ADD_AUTHORITY, INSTRUCTION_CREATE, INSTRUCTION_REGISTER_CREDENTIAL, INSTRUCTION_REMOVE_AUTHORITY, INSTRUCTION_TRANSFER, INSTRUCTION_VALIDATE, LONG_LIVED_AUTHORITY_EXPIRY_SECONDS, P256_HALF_N, P256_N, PASSKEY_MANAGER_PROGRAM_ADDRESS, type ParsedAuthority, type PasskeyAuthorityIdentity, type PasskeyAuthorityTarget, type PasskeyDiscoverableSigningResult, type PasskeyMetadata, type PasskeyRegistrationResult, type PasskeySigningResult, type PreparePasskeyAuthorityTargetsOptions, type RegisterCredentialInstructionParams, type RemoveAuthorityInstructionParams, type TargetInstructionParams, type TransactionExecutionSummary, type TransferInstructionParams, VALIDATE_CHALLENGE_DOMAIN, type ValidateInstructionParams, type WalletAuthorities, type WalletSigner, arrayBufferToBase64Url, base64UrlToArrayBuffer, base64UrlToBytes, bigIntToBytesBE, buildAccountContext, buildAuthority, buildAuthorityRecord, buildPasskeyReadWriteAccounts, bytesEqual, bytesToBase64, bytesToBase64Url, bytesToBigIntBE, bytesToHex, compareBytes, concatenateInstructions, createAuthorityRecord, createCredentialLookupSeed, createSessionAuthorityRecord, createValidateChallenge, createWalletSeed, deriveCredentialLookupAddress, deriveWalletAddress, encodeAddAuthorityInstruction, encodeCreateInstruction, encodeInvokeInstruction, encodeLegacyAddAuthorityInstruction, encodeLegacyCreateInstruction, encodeRegisterCredentialInstruction, encodeRemoveAuthorityInstruction, encodeTransferInstruction, encodeValidateInstruction, fetchWalletNonce, findPasskeyAuthorityIndexForIdentity, findPasskeyAuthorityIndexInWalletData, formatAuthorityPubkey, hexToBytes, isPasskeyAuthorityCheckable, normalizeLowS, normalizeSignatureComponent, parseCredentialLookupWallet, parseDerSignature, parseWalletAuthorities, parseWalletNonce, preparePasskeyAuthorityTargets, resolvePasskeyAuthorityIndex, uniqueAccounts };