@veilux/sdk 0.3.8 → 0.4.0

package/dist/encoding.d.ts

@@ -14,6 +14,12 @@ export declare function visibilityJson(v: Visibility): Uint8Array;
  *   b"veilux/command/v1" 0xff prism 0xff submitter 0xff nonce_le vis 0xff payload
  */
 export declare function signingBytes(cmd: Command): Uint8Array;
+/**
+ * Chain-bound signing bytes (EIP-155 style). `chainId = 0` is identical to
+ * `signingBytes` (legacy/dev). A nonzero chain id appends a domain-separated
+ * suffix so a signature is only valid on its intended chain.
+ */
+export declare function signingBytesForChain(cmd: Command, chainId: number): Uint8Array;
 /**
  * Reproduce `Hash::commit(domain, parts)`:
  *   blake3(domain || 0xff || for each part: len_le_u64 || part)

package/dist/encoding.js

@@ -41,6 +41,17 @@ export function signingBytes(cmd) {
     const sep = new Uint8Array([0xff]);
     return concat(textEncoder.encode("veilux/command/v1"), sep, textEncoder.encode(cmd.prism), sep, textEncoder.encode(cmd.submitter), sep, u64le(cmd.nonce), visibilityJson(cmd.visibility), sep, Uint8Array.from(cmd.payload));
 }
+/**
+ * Chain-bound signing bytes (EIP-155 style). `chainId = 0` is identical to
+ * `signingBytes` (legacy/dev). A nonzero chain id appends a domain-separated
+ * suffix so a signature is only valid on its intended chain.
+ */
+export function signingBytesForChain(cmd, chainId) {
+    const base = signingBytes(cmd);
+    if (chainId === 0)
+        return base;
+    return concat(base, new Uint8Array([0xff]), textEncoder.encode("chain"), u64le(chainId));
+}
 /**
  * Reproduce `Hash::commit(domain, parts)`:
  *   blake3(domain || 0xff || for each part: len_le_u64 || part)

package/dist/identity.d.ts

@@ -20,4 +20,9 @@ export declare class PartyIdentity {
     publicKey(): Uint8Array;
     /** Sign a command, producing a SignedCommand ready for submission. */
     sign(command: Command): SignedCommand;
+    /**
+     * Sign a command bound to a specific chain id (replay protection). Use the
+     * chain's `chain_id` (from `veilux_chainId` / genesis); 0 = legacy/dev.
+     */
+    signForChain(command: Command, chainId: number): SignedCommand;
 }

package/dist/identity.js

@@ -1,7 +1,7 @@
 import * as ed from "@noble/ed25519";
 import { sha512 } from "@noble/hashes/sha512";
 import { blake3 } from "@noble/hashes/blake3";
-import { signingBytes } from "./encoding.js";
+import { signingBytesForChain } from "./encoding.js";
 // @noble/ed25519 v2 needs sha512 wired up for synchronous signing.
 ed.etc.sha512Sync = (...m) => sha512(ed.etc.concatBytes(...m));
 /**
@@ -37,12 +37,20 @@ export class PartyIdentity {
     }
     /** Sign a command, producing a SignedCommand ready for submission. */
     sign(command) {
-        const msg = signingBytes(command);
+        return this.signForChain(command, 0);
+    }
+    /**
+     * Sign a command bound to a specific chain id (replay protection). Use the
+     * chain's `chain_id` (from `veilux_chainId` / genesis); 0 = legacy/dev.
+     */
+    signForChain(command, chainId) {
+        const msg = signingBytesForChain(command, chainId);
         const signature = ed.sign(msg, this.secret);
         return {
             command,
             public_key: Array.from(this.publicKey()),
             signature: Array.from(signature),
+            chain_id: chainId,
         };
     }
 }

package/dist/types.d.ts

@@ -22,6 +22,7 @@ export interface SignedCommand {
     command: Command;
     public_key: number[];
     signature: number[];
+    chain_id: number;
 }
 export interface NodeInfo {
     network: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@veilux/sdk",
-  "version": "0.3.8",
+  "version": "0.4.0",
   "description": "VEILUX TypeScript SDK — build, sign, and submit commands to a VEILUX node",
   "license": "MIT",
   "author": "nathan <nathan@winnode.xyz>",