@vultisig/core-chain 2.11.0 → 2.12.0

package/CHANGELOG.md

@@ -1,5 +1,26 @@
 # @vultisig/core-chain
 
+## 2.12.0
+
+### Minor Changes
+
+- [#651](https://github.com/vultisig/vultisig-sdk/pull/651) [`e9c4997`](https://github.com/vultisig/vultisig-sdk/commit/e9c4997bae3a499785295b76dbc956807cc704f5) Thanks [@Ehsan-saradar](https://github.com/Ehsan-saradar)! - Add Sui dApp signing helpers to `@vultisig/core-chain/chains/sui`. Two new
+  public modules:
+  - `./chains/sui/sign` exports `suiTransactionDataIntent` /
+    `suiPersonalMessageIntent` (defensive clones of the 3-byte intent
+    prefixes), `getSuiTransactionDataDigest(txBytes)` and
+    `getSuiPersonalMessageDigest(messageBytes)` for the intent-prefixed
+    blake2b-256 digests the wallet's Ed25519 signer signs, and
+    `buildSuiSerializedSignature({ signature, publicKey })` for the 97-byte
+    `flag(1) || sig(64) || pubkey(32)` Wallet Standard wire signature.
+  - `./chains/sui/buildTransactionFromJson` exports
+    `buildSuiTransactionFromJson({ transactionJson, sender })` which hydrates
+    a serialized Sui `Transaction` (V1 or V2 JSON) and resolves it to BCS
+    bytes via `Transaction.build({ client: getSuiClient() })`. Lets
+    extension callers move the build step off the dApp page (where the dApp
+    page's Content Security Policy blocks the Sui RPC) and into the
+    extension's own context.
+
 ## 2.11.0
 
 ### Minor Changes

package/dist/chains/sui/buildTransactionFromJson.d.ts

@@ -0,0 +1,16 @@
+type BuildSuiTransactionFromJsonInput = {
+    /** JSON output of `Transaction.toJSON()` or `Transaction.serialize()` (V1 or V2). */
+    transactionJson: string;
+    /** Sui address of the sender. Used when the serialized transaction omits a sender. */
+    sender: string;
+};
+/**
+ * Hydrate a serialized Sui Transaction and resolve it to BCS bytes via
+ * `Transaction.build({ client })`. Runs inside the SDK so the network call
+ * uses the SDK's pinned Sui RPC client and isn't subject to the dApp page's
+ * Content Security Policy — callers that run under a dApp's CSP (extension
+ * inpage scripts) must route through this from a background context.
+ */
+export declare const buildSuiTransactionFromJson: ({ transactionJson, sender, }: BuildSuiTransactionFromJsonInput) => Promise<Uint8Array>;
+export {};
+//# sourceMappingURL=buildTransactionFromJson.d.ts.map

package/dist/chains/sui/buildTransactionFromJson.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildTransactionFromJson.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/sui/buildTransactionFromJson.ts"],"names":[],"mappings":"AAIA,KAAK,gCAAgC,GAAG;IACtC,qFAAqF;IACrF,eAAe,EAAE,MAAM,CAAA;IACvB,sFAAsF;IACtF,MAAM,EAAE,MAAM,CAAA;CACf,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,2BAA2B,GAAU,8BAG/C,gCAAgC,KAAG,OAAO,CAAC,UAAU,CAIvD,CAAA"}

package/dist/chains/sui/buildTransactionFromJson.js

@@ -0,0 +1,15 @@
+import { Transaction } from '@mysten/sui/transactions';
+import { getSuiClient } from './client.js';
+/**
+ * Hydrate a serialized Sui Transaction and resolve it to BCS bytes via
+ * `Transaction.build({ client })`. Runs inside the SDK so the network call
+ * uses the SDK's pinned Sui RPC client and isn't subject to the dApp page's
+ * Content Security Policy — callers that run under a dApp's CSP (extension
+ * inpage scripts) must route through this from a background context.
+ */
+export const buildSuiTransactionFromJson = async ({ transactionJson, sender, }) => {
+    const tx = Transaction.from(transactionJson);
+    tx.setSenderIfNotSet(sender);
+    return tx.build({ client: getSuiClient() });
+};
+//# sourceMappingURL=buildTransactionFromJson.js.map

package/dist/chains/sui/buildTransactionFromJson.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"buildTransactionFromJson.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/sui/buildTransactionFromJson.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,0BAA0B,CAAA;AAEtD,OAAO,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AASvC;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,KAAK,EAAE,EAChD,eAAe,EACf,MAAM,GAC2B,EAAuB,EAAE;IAC1D,MAAM,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;IAC5C,EAAE,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAA;IAC5B,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,YAAY,EAAE,EAAE,CAAC,CAAA;AAC7C,CAAC,CAAA"}

package/dist/chains/sui/sign.d.ts

@@ -0,0 +1,25 @@
+export declare const suiTransactionDataIntent: Uint8Array<ArrayBuffer>;
+export declare const suiPersonalMessageIntent: Uint8Array<ArrayBuffer>;
+/**
+ * Produce the Sui intent-prefixed blake2b-256 digest of a built PTB. This is
+ * the 32-byte hash that the wallet's Ed25519 signer signs.
+ */
+export declare const getSuiTransactionDataDigest: (txBytes: Uint8Array) => Uint8Array;
+/**
+ * Produce the Sui intent-prefixed blake2b-256 digest of a personal message.
+ * The message is BCS-wrapped as `vector<u8>` (uleb128 length || bytes) before
+ * hashing.
+ */
+export declare const getSuiPersonalMessageDigest: (messageBytes: Uint8Array) => Uint8Array;
+type BuildSuiSerializedSignatureInput = {
+    signature: Uint8Array;
+    publicKey: Uint8Array;
+};
+/**
+ * Assemble a Sui Wallet Standard wire signature for an Ed25519 vault:
+ * `flag(1) || signature(64) || publicKey(32)`. The result is 97 bytes; callers
+ * typically base64-encode it before returning to the dApp.
+ */
+export declare const buildSuiSerializedSignature: ({ signature, publicKey }: BuildSuiSerializedSignatureInput) => Uint8Array;
+export {};
+//# sourceMappingURL=sign.d.ts.map

package/dist/chains/sui/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/sui/sign.ts"],"names":[],"mappings":"AAaA,eAAO,MAAM,wBAAwB,yBAAgD,CAAA;AACrF,eAAO,MAAM,wBAAwB,yBAAgD,CAAA;AAwBrF;;;GAGG;AACH,eAAO,MAAM,2BAA2B,GAAI,SAAS,UAAU,KAAG,UACW,CAAA;AAE7E;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,GAAI,cAAc,UAAU,KAAG,UAC+C,CAAA;AAMtH,KAAK,gCAAgC,GAAG;IACtC,SAAS,EAAE,UAAU,CAAA;IACrB,SAAS,EAAE,UAAU,CAAA;CACtB,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,GAAI,0BAA0B,gCAAgC,KAAG,UAYxG,CAAA"}

package/dist/chains/sui/sign.js

@@ -0,0 +1,66 @@
+import { blake2b } from '@noble/hashes/blake2';
+/**
+ * Sui intent prefixes — `[scope, version, app_id]`. Version is always `0` (V0)
+ * and `app_id` is always `0` (Sui). See `@mysten/sui/cryptography/intent`.
+ *
+ * The public exports are separate `Uint8Array` instances cloned from the
+ * private source buffers, so a consumer mutating an imported intent can't
+ * corrupt the bytes the digest helpers below feed into every blake2b call.
+ */
+const suiTransactionDataIntentBytes = new Uint8Array([0, 0, 0]);
+const suiPersonalMessageIntentBytes = new Uint8Array([3, 0, 0]);
+export const suiTransactionDataIntent = new Uint8Array(suiTransactionDataIntentBytes);
+export const suiPersonalMessageIntent = new Uint8Array(suiPersonalMessageIntentBytes);
+const concatBytes = (...parts) => {
+    const total = parts.reduce((n, p) => n + p.length, 0);
+    const out = new Uint8Array(total);
+    let off = 0;
+    for (const p of parts) {
+        out.set(p, off);
+        off += p.length;
+    }
+    return out;
+};
+const encodeUleb128 = (n) => {
+    const out = [];
+    let v = n;
+    while (v >= 0x80) {
+        out.push((v & 0x7f) | 0x80);
+        v >>>= 7;
+    }
+    out.push(v & 0x7f);
+    return new Uint8Array(out);
+};
+/**
+ * Produce the Sui intent-prefixed blake2b-256 digest of a built PTB. This is
+ * the 32-byte hash that the wallet's Ed25519 signer signs.
+ */
+export const getSuiTransactionDataDigest = (txBytes) => blake2b(concatBytes(suiTransactionDataIntentBytes, txBytes), { dkLen: 32 });
+/**
+ * Produce the Sui intent-prefixed blake2b-256 digest of a personal message.
+ * The message is BCS-wrapped as `vector<u8>` (uleb128 length || bytes) before
+ * hashing.
+ */
+export const getSuiPersonalMessageDigest = (messageBytes) => blake2b(concatBytes(suiPersonalMessageIntentBytes, encodeUleb128(messageBytes.length), messageBytes), { dkLen: 32 });
+const ed25519SchemeFlag = 0x00;
+const ed25519SignatureLength = 64;
+const ed25519PublicKeyLength = 32;
+/**
+ * Assemble a Sui Wallet Standard wire signature for an Ed25519 vault:
+ * `flag(1) || signature(64) || publicKey(32)`. The result is 97 bytes; callers
+ * typically base64-encode it before returning to the dApp.
+ */
+export const buildSuiSerializedSignature = ({ signature, publicKey }) => {
+    if (signature.length !== ed25519SignatureLength) {
+        throw new Error(`Sui Ed25519 signature must be ${ed25519SignatureLength} bytes, got ${signature.length}`);
+    }
+    if (publicKey.length !== ed25519PublicKeyLength) {
+        throw new Error(`Sui Ed25519 public key must be ${ed25519PublicKeyLength} bytes, got ${publicKey.length}`);
+    }
+    const out = new Uint8Array(1 + ed25519SignatureLength + ed25519PublicKeyLength);
+    out[0] = ed25519SchemeFlag;
+    out.set(signature, 1);
+    out.set(publicKey, 1 + ed25519SignatureLength);
+    return out;
+};
+//# sourceMappingURL=sign.js.map

package/dist/chains/sui/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../../../../../../packages/core/chain/chains/sui/sign.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAA;AAE9C;;;;;;;GAOG;AACH,MAAM,6BAA6B,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AAC/D,MAAM,6BAA6B,GAAG,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;AAE/D,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAA;AACrF,MAAM,CAAC,MAAM,wBAAwB,GAAG,IAAI,UAAU,CAAC,6BAA6B,CAAC,CAAA;AAErF,MAAM,WAAW,GAAG,CAAC,GAAG,KAAmB,EAAc,EAAE;IACzD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAA;IACrD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,GAAG,GAAG,CAAC,CAAA;IACX,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;QACf,GAAG,IAAI,CAAC,CAAC,MAAM,CAAA;IACjB,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA;AAED,MAAM,aAAa,GAAG,CAAC,CAAS,EAAc,EAAE;IAC9C,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,IAAI,CAAC,GAAG,CAAC,CAAA;IACT,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC;QACjB,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAA;QAC3B,CAAC,MAAM,CAAC,CAAA;IACV,CAAC;IACD,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IAClB,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,CAAA;AAC5B,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,OAAmB,EAAc,EAAE,CAC7E,OAAO,CAAC,WAAW,CAAC,6BAA6B,EAAE,OAAO,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;AAE7E;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,YAAwB,EAAc,EAAE,CAClF,OAAO,CAAC,WAAW,CAAC,6BAA6B,EAAE,aAAa,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAA;AAEtH,MAAM,iBAAiB,GAAG,IAAI,CAAA;AAC9B,MAAM,sBAAsB,GAAG,EAAE,CAAA;AACjC,MAAM,sBAAsB,GAAG,EAAE,CAAA;AAOjC;;;;GAIG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,CAAC,EAAE,SAAS,EAAE,SAAS,EAAoC,EAAc,EAAE;IACpH,IAAI,SAAS,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,iCAAiC,sBAAsB,eAAe,SAAS,CAAC,MAAM,EAAE,CAAC,CAAA;IAC3G,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,KAAK,sBAAsB,EAAE,CAAC;QAChD,MAAM,IAAI,KAAK,CAAC,kCAAkC,sBAAsB,eAAe,SAAS,CAAC,MAAM,EAAE,CAAC,CAAA;IAC5G,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,CAAC,GAAG,sBAAsB,GAAG,sBAAsB,CAAC,CAAA;IAC/E,GAAG,CAAC,CAAC,CAAC,GAAG,iBAAiB,CAAA;IAC1B,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,CAAC,CAAA;IACrB,GAAG,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,GAAG,sBAAsB,CAAC,CAAA;IAC9C,OAAO,GAAG,CAAA;AACZ,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vultisig/core-chain",
-  "version": "2.11.0",
+  "version": "2.12.0",
   "description": "Blockchain chain logic shared across Vultisig clients",
   "license": "MIT",
   "repository": {
@@ -614,6 +614,11 @@
       "import": "./dist/chains/solana/spl/getSplAssociatedAccount.js",
       "default": "./dist/chains/solana/spl/getSplAssociatedAccount.js"
     },
+    "./chains/sui/buildTransactionFromJson": {
+      "types": "./dist/chains/sui/buildTransactionFromJson.d.ts",
+      "import": "./dist/chains/sui/buildTransactionFromJson.js",
+      "default": "./dist/chains/sui/buildTransactionFromJson.js"
+    },
     "./chains/sui/client": {
       "types": "./dist/chains/sui/client.d.ts",
       "import": "./dist/chains/sui/client.js",
@@ -624,6 +629,11 @@
       "import": "./dist/chains/sui/config.js",
       "default": "./dist/chains/sui/config.js"
     },
+    "./chains/sui/sign": {
+      "types": "./dist/chains/sui/sign.d.ts",
+      "import": "./dist/chains/sui/sign.js",
+      "default": "./dist/chains/sui/sign.js"
+    },
     "./chains/thorchain/ruji/services/fetchMergeableTokenBalances": {
       "types": "./dist/chains/thorchain/ruji/services/fetchMergeableTokenBalances.d.ts",
       "import": "./dist/chains/thorchain/ruji/services/fetchMergeableTokenBalances.js",