crypto-aio 0.0.3 → 0.1.0

package/dist/core/secret/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../../src/core/secret/redact.ts"],"names":[],"mappings":";;AAQA,8BAoBC;AAED,gCAOC;AAED,sCASC;AAED,gCAEC;AAkCD,sCAgBC;AAtGD,qCAA2D;AAE3D,MAAM,aAAa,GACjB,oFAAoF,CAAC;AACvF,MAAM,gBAAgB,GAAG,kDAAkD,CAAC;AAC5E,MAAM,eAAe,GAAG,sBAAsB,CAAC;AAC/C,MAAM,WAAW,GAAG,uCAAuC,CAAC;AAE5D,SAAgB,SAAS,CAAC,GAA4B;IACpD,MAAM,WAAW,GAAG,IAAA,iBAAQ,EAAC,GAAG,CAAC,CAAC;IAClC,MAAM,GAAG,GAAG,WAAW,CAAC,CAAC,CAAE,GAAsB,CAAC,MAAM,EAAE,CAAC,CAAC,CAAE,GAAc,CAAC;IAC7E,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,iBAAQ,CAAC;IAClB,CAAC;IACD,IAAI,WAAW;QAAE,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,IAAI,IAAI,iBAAQ,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ;SACzB,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;SACtE,IAAI,CAAC,GAAG,CAAC,CAAC;IACb,MAAM,IAAI,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IACtD,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM;QACvB,CAAC,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,CAAC,CAAC,IAAI,iBAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;QACzE,CAAC,CAAC,EAAE,CAAC;IACP,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,iBAAQ,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IACtE,OAAO,GAAG,MAAM,CAAC,QAAQ,KAAK,IAAI,GAAG,MAAM,CAAC,IAAI,GAAG,IAAI,GAAG,KAAK,EAAE,CAAC;AACpE,CAAC;AAED,SAAgB,UAAU,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,KAAK,EAAE,EAAE;QACzC,MAAM,QAAQ,GAAG,KAAK,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;QAC9C,MAAM,WAAW,GAAG,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAChD,MAAM,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACnE,OAAO,SAAS,CAAC,GAAG,CAAC,GAAG,WAAW,CAAC;IACtC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,aAAa,CAC3B,OAAsE;IAEtE,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,GAAG,CAAC,IAAI,CAAC;YACP,IAAA,iBAAQ,EAAC,KAAK,CAAC,IAAI,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAQ,CAAC,CAAC,CAAE,KAAgB,CAAC;IAClF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,UAAU,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAClD,OAAO,IAAI,CAAC,KAAK,EAAE,KAAK,EAAE,IAAI,OAAO,EAAE,CAAC,CAAC;AAC3C,CAAC;AAED,SAAS,IAAI,CAAC,KAAc,EAAE,KAAa,EAAE,IAAqB;IAChE,IAAI,IAAA,iBAAQ,EAAC,KAAK,CAAC;QAAE,OAAO,iBAAQ,CAAC;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC;IACxD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,QAAQ,EAAE,CAAC;IACvD,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC9D,IAAI,KAAK,YAAY,UAAU;QAAE,OAAO,UAAU,KAAK,CAAC,MAAM,GAAG,CAAC;IAClE,IAAI,KAAK,YAAY,KAAK;QACxB,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;IAClE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IACzC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,aAAa,CAAC;IACrC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;IAClF,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChD,4EAA4E;QAC5E,MAAM,WAAW,GACf,IAAI,KAAK,SAAS;YAClB,IAAI,KAAK,IAAI;YACb,OAAO,IAAI,KAAK,SAAS;YACzB,OAAO,IAAI,KAAK,QAAQ,CAAC;QAC3B,MAAM,SAAS,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,WAAW,CAAC;QAC1D,GAAG,CAAC,GAAG,CAAC,GAAG,SAAS,CAAC,CAAC,CAAC,iBAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,MAAM,WAAW,GAAG,qBAAqB,CAAC;AAE1C;;;GAGG;AACH,SAAgB,aAAa,CAAC,KAAc;IAC1C,IAAI,CAAC;QACH,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,MAAM,KAAK,GAAG,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC3D,KAAK,CAAC,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5C,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;YAChD,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC5B,KAAmC,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;YAC/D,CAAC;YACD,KAAK,CAAC,KAAK,GAAG,GAAG,KAAK,CAAC,IAAI,KAAK,KAAK,CAAC,OAAO,EAAE,CAAC;YAChD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,KAAK,CAAC,WAAW,CAAC,CAAC;IAChC,CAAC;AACH,CAAC","sourcesContent":["import { REDACTED, isSecret, type Secret } from './secret';\n\nconst SENSITIVE_KEY =\n  /(key|secret|token|password|passphrase|mnemonic|private|seed|authorization|cookie)/i;\nconst SENSITIVE_HEADER = /(authorization|api[-_]?key|token|secret|cookie)/i;\nconst KEYLIKE_SEGMENT = /^[A-Za-z0-9_-]{16,}$/;\nconst URL_IN_TEXT = /\\b[a-z][a-z0-9+.-]*:\\/\\/[^\\s'\"<>)]+/gi;\n\nexport function redactUrl(url: string | Secret<string>): string {\n  const isSecretUrl = isSecret(url);\n  const raw = isSecretUrl ? (url as Secret<string>).reveal() : (url as string);\n  let parsed: URL;\n  try {\n    parsed = new URL(raw);\n  } catch {\n    return REDACTED;\n  }\n  if (isSecretUrl) return `${parsed.protocol}//${parsed.host}/${REDACTED}`;\n  const path = parsed.pathname\n    .split('/')\n    .map((segment) => (KEYLIKE_SEGMENT.test(segment) ? REDACTED : segment))\n    .join('/');\n  const keys = [...new Set(parsed.searchParams.keys())];\n  const query = keys.length\n    ? `?${keys.map((k) => `${encodeURIComponent(k)}=${REDACTED}`).join('&')}`\n    : '';\n  const auth = parsed.username || parsed.password ? `${REDACTED}@` : '';\n  return `${parsed.protocol}//${auth}${parsed.host}${path}${query}`;\n}\n\nexport function redactText(text: string): string {\n  return text.replace(URL_IN_TEXT, (match) => {\n    const trailing = match.match(/[.,;:!?\\]}]+$/);\n    const trailingStr = trailing ? trailing[0] : '';\n    const url = trailing ? match.slice(0, -trailingStr.length) : match;\n    return redactUrl(url) + trailingStr;\n  });\n}\n\nexport function redactHeaders(\n  headers: Readonly<Record<string, string | Secret<string>>> | undefined,\n): Record<string, string> {\n  const out: Record<string, string> = {};\n  for (const [name, value] of Object.entries(headers ?? {})) {\n    out[name] =\n      isSecret(value) || SENSITIVE_HEADER.test(name) ? REDACTED : (value as string);\n  }\n  return out;\n}\n\nexport function redactDeep(value: unknown, depth = 8): unknown {\n  return walk(value, depth, new WeakSet());\n}\n\nfunction walk(value: unknown, depth: number, seen: WeakSet<object>): unknown {\n  if (isSecret(value)) return REDACTED;\n  if (typeof value === 'string') return redactText(value);\n  if (typeof value === 'bigint') return value.toString();\n  if (value === null || typeof value !== 'object') return value;\n  if (value instanceof Uint8Array) return `[bytes:${value.length}]`;\n  if (value instanceof Error)\n    return { name: value.name, message: redactText(value.message) };\n  if (seen.has(value)) return '[Circular]';\n  if (depth <= 0) return '[Truncated]';\n  seen.add(value);\n  if (Array.isArray(value)) return value.map((item) => walk(item, depth - 1, seen));\n  const out: Record<string, unknown> = {};\n  for (const [key, item] of Object.entries(value)) {\n    // Redact if key is sensitive and value is not null/undefined/boolean/number\n    const isPrimitive =\n      item === undefined ||\n      item === null ||\n      typeof item === 'boolean' ||\n      typeof item === 'number';\n    const sensitive = SENSITIVE_KEY.test(key) && !isPrimitive;\n    out[key] = sensitive ? REDACTED : walk(item, depth - 1, seen);\n  }\n  return out;\n}\n\nconst UNPRINTABLE = '[unprintable error]';\n\n/**\n * Copies an error's name/message/code with URLs redacted and without its cause chain.\n * Total: a throwable that cannot be read or printed yields '[unprintable error]'.\n */\nexport function sanitizeError(error: unknown): Error {\n  try {\n    if (error instanceof Error) {\n      const clean = new Error(redactText(String(error.message)));\n      clean.name = redactText(String(error.name));\n      const code = (error as { code?: unknown }).code;\n      if (typeof code === 'string') {\n        (clean as Error & { code?: string }).code = redactText(code);\n      }\n      clean.stack = `${clean.name}: ${clean.message}`;\n      return clean;\n    }\n    return new Error(redactText(String(error)));\n  } catch {\n    return new Error(UNPRINTABLE);\n  }\n}\n"]}

package/dist/core/secret/secret.d.ts

@@ -0,0 +1,14 @@
+import { inspect } from 'node:util';
+export declare const REDACTED = "[REDACTED]";
+/** Wraps sensitive material so that it never renders in logs, JSON or inspection. */
+export declare class Secret<T = string> {
+    constructor(value: T);
+    reveal(): T;
+    toString(): string;
+    toJSON(): string;
+    [Symbol.toPrimitive](): string;
+    [inspect.custom](): string;
+}
+export declare function secret<T>(value: T | Secret<T>): Secret<T>;
+export declare function isSecret(value: unknown): value is Secret<unknown>;
+export declare function reveal<T>(value: T | Secret<T>): T;

package/dist/core/secret/secret.js

@@ -0,0 +1,42 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.Secret = exports.REDACTED = void 0;
+exports.secret = secret;
+exports.isSecret = isSecret;
+exports.reveal = reveal;
+const node_util_1 = require("node:util");
+exports.REDACTED = '[REDACTED]';
+const values = new WeakMap();
+/** Wraps sensitive material so that it never renders in logs, JSON or inspection. */
+class Secret {
+    constructor(value) {
+        values.set(this, value);
+        Object.freeze(this);
+    }
+    reveal() {
+        return values.get(this);
+    }
+    toString() {
+        return exports.REDACTED;
+    }
+    toJSON() {
+        return exports.REDACTED;
+    }
+    [Symbol.toPrimitive]() {
+        return exports.REDACTED;
+    }
+    [node_util_1.inspect.custom]() {
+        return `Secret(${exports.REDACTED})`;
+    }
+}
+exports.Secret = Secret;
+function secret(value) {
+    return value instanceof Secret ? value : new Secret(value);
+}
+function isSecret(value) {
+    return value instanceof Secret;
+}
+function reveal(value) {
+    return value instanceof Secret ? value.reveal() : value;
+}
+//# sourceMappingURL=secret.js.map

package/dist/core/secret/secret.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret.js","sourceRoot":"","sources":["../../../src/core/secret/secret.ts"],"names":[],"mappings":";;;AAkCA,wBAEC;AAED,4BAEC;AAED,wBAEC;AA5CD,yCAAoC;AAEvB,QAAA,QAAQ,GAAG,YAAY,CAAC;AAErC,MAAM,MAAM,GAAG,IAAI,OAAO,EAAmB,CAAC;AAE9C,qFAAqF;AACrF,MAAa,MAAM;IACjB,YAAY,KAAQ;QAClB,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QACxB,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACtB,CAAC;IAED,MAAM;QACJ,OAAO,MAAM,CAAC,GAAG,CAAC,IAAI,CAAM,CAAC;IAC/B,CAAC;IAED,QAAQ;QACN,OAAO,gBAAQ,CAAC;IAClB,CAAC;IAED,MAAM;QACJ,OAAO,gBAAQ,CAAC;IAClB,CAAC;IAED,CAAC,MAAM,CAAC,WAAW,CAAC;QAClB,OAAO,gBAAQ,CAAC;IAClB,CAAC;IAED,CAAC,mBAAO,CAAC,MAAM,CAAC;QACd,OAAO,UAAU,gBAAQ,GAAG,CAAC;IAC/B,CAAC;CACF;AAzBD,wBAyBC;AAED,SAAgB,MAAM,CAAI,KAAoB;IAC5C,OAAO,KAAK,YAAY,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,SAAgB,QAAQ,CAAC,KAAc;IACrC,OAAO,KAAK,YAAY,MAAM,CAAC;AACjC,CAAC;AAED,SAAgB,MAAM,CAAI,KAAoB;IAC5C,OAAO,KAAK,YAAY,MAAM,CAAC,CAAC,CAAE,KAAK,CAAC,MAAM,EAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;AACjE,CAAC","sourcesContent":["import { inspect } from 'node:util';\n\nexport const REDACTED = '[REDACTED]';\n\nconst values = new WeakMap<object, unknown>();\n\n/** Wraps sensitive material so that it never renders in logs, JSON or inspection. */\nexport class Secret<T = string> {\n  constructor(value: T) {\n    values.set(this, value);\n    Object.freeze(this);\n  }\n\n  reveal(): T {\n    return values.get(this) as T;\n  }\n\n  toString(): string {\n    return REDACTED;\n  }\n\n  toJSON(): string {\n    return REDACTED;\n  }\n\n  [Symbol.toPrimitive](): string {\n    return REDACTED;\n  }\n\n  [inspect.custom](): string {\n    return `Secret(${REDACTED})`;\n  }\n}\n\nexport function secret<T>(value: T | Secret<T>): Secret<T> {\n  return value instanceof Secret ? value : new Secret(value);\n}\n\nexport function isSecret(value: unknown): value is Secret<unknown> {\n  return value instanceof Secret;\n}\n\nexport function reveal<T>(value: T | Secret<T>): T {\n  return value instanceof Secret ? (value.reveal() as T) : value;\n}\n"]}

package/dist/core/signing/callback.d.ts

@@ -0,0 +1,10 @@
+import type { Signer } from './types';
+export interface CallbackSignerOptions {
+    readonly id: string;
+    readonly schemes: readonly string[];
+    readonly getPublicKey: Signer['getPublicKey'];
+    readonly sign: Signer['sign'];
+    readonly cancelRequest?: (ticket: string) => Promise<void>;
+}
+/** Base for remote, KMS, HSM and MPC signers: supply the three callbacks. */
+export declare function callbackSigner(options: CallbackSignerOptions): Signer;

package/dist/core/signing/callback.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.callbackSigner = callbackSigner;
+const error_1 = require("../errors/error");
+/** Base for remote, KMS, HSM and MPC signers: supply the three callbacks. */
+function callbackSigner(options) {
+    if (!options.id)
+        throw new error_1.ConfigError('CONFIG_INVALID', 'callbackSigner requires an id');
+    if (options.schemes.length === 0) {
+        throw new error_1.ConfigError('CONFIG_INVALID', `callbackSigner '${options.id}' must declare at least one scheme`);
+    }
+    const cancel = options.cancelRequest;
+    const signer = {
+        id: options.id,
+        schemes: Object.freeze([...options.schemes]),
+        getPublicKey: (scheme, keyRef) => options.getPublicKey(scheme, keyRef),
+        sign: (requests, ctx) => options.sign(requests, ctx),
+        ...(cancel ? { cancelRequest: (ticket) => cancel(ticket) } : {}),
+    };
+    return Object.freeze(signer);
+}
+//# sourceMappingURL=callback.js.map

package/dist/core/signing/callback.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"callback.js","sourceRoot":"","sources":["../../../src/core/signing/callback.ts"],"names":[],"mappings":";;AAYA,wCAkBC;AA9BD,2CAA8C;AAW9C,6EAA6E;AAC7E,SAAgB,cAAc,CAAC,OAA8B;IAC3D,IAAI,CAAC,OAAO,CAAC,EAAE;QACb,MAAM,IAAI,mBAAW,CAAC,gBAAgB,EAAE,+BAA+B,CAAC,CAAC;IAC3E,IAAI,OAAO,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,mBAAW,CACnB,gBAAgB,EAChB,mBAAmB,OAAO,CAAC,EAAE,oCAAoC,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC;IACrC,MAAM,MAAM,GAAW;QACrB,EAAE,EAAE,OAAO,CAAC,EAAE;QACd,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;QAC5C,YAAY,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;QACtE,IAAI,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC;QACpD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,MAAc,EAAE,EAAE,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzE,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC","sourcesContent":["import { ConfigError } from '../errors/error';\nimport type { Signer } from './types';\n\nexport interface CallbackSignerOptions {\n  readonly id: string;\n  readonly schemes: readonly string[];\n  readonly getPublicKey: Signer['getPublicKey'];\n  readonly sign: Signer['sign'];\n  readonly cancelRequest?: (ticket: string) => Promise<void>;\n}\n\n/** Base for remote, KMS, HSM and MPC signers: supply the three callbacks. */\nexport function callbackSigner(options: CallbackSignerOptions): Signer {\n  if (!options.id)\n    throw new ConfigError('CONFIG_INVALID', 'callbackSigner requires an id');\n  if (options.schemes.length === 0) {\n    throw new ConfigError(\n      'CONFIG_INVALID',\n      `callbackSigner '${options.id}' must declare at least one scheme`,\n    );\n  }\n  const cancel = options.cancelRequest;\n  const signer: Signer = {\n    id: options.id,\n    schemes: Object.freeze([...options.schemes]),\n    getPublicKey: (scheme, keyRef) => options.getPublicKey(scheme, keyRef),\n    sign: (requests, ctx) => options.sign(requests, ctx),\n    ...(cancel ? { cancelRequest: (ticket: string) => cancel(ticket) } : {}),\n  };\n  return Object.freeze(signer);\n}\n"]}

package/dist/core/signing/guard.d.ts

@@ -0,0 +1,18 @@
+import { type CodesOf, type CryptoAioError, type ErrorContext } from '../errors/error';
+import type { Clock } from '../util/clock';
+import type { KeyRef, Signer } from './types';
+/** How long a signer may take to hand out a public key (`lifecycle.signTimeoutMs`). */
+export interface SignerDeadline {
+    readonly clock: Clock;
+    readonly timeoutMs: number;
+}
+/** A CryptoAioError passes through; anything else becomes `code` with a sanitized cause. */
+export declare function signerFailure(error: unknown, code: CodesOf<'signing'>, message: string, context?: ErrorContext): CryptoAioError;
+/** The signer's declared schemes, read once and copied; SIGNER_UNAVAILABLE if unusable. */
+export declare function signerSchemes(signerId: string, signer: Signer, context?: ErrorContext): readonly string[];
+/**
+ * The signer's public key for `scheme`, checked against `length` and copied. With a
+ * `deadline`, a signer that does not answer in time fails with a retryable TIMEOUT
+ * (its late answer is ignored), so a hung custody backend can never block its caller.
+ */
+export declare function signerPublicKey(signerId: string, signer: Signer, scheme: string, keyRef: KeyRef | undefined, length: number, deadline?: SignerDeadline): Promise<Uint8Array>;

package/dist/core/signing/guard.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signerFailure = signerFailure;
+exports.signerSchemes = signerSchemes;
+exports.signerPublicKey = signerPublicKey;
+const error_1 = require("../errors/error");
+const redact_1 = require("../secret/redact");
+/*
+ * Guards for every call into signer code (local, callback, KMS, HSM, MPC or user-written).
+ * Custody backends put URLs and credentials in their error messages, so a failure that is
+ * not already a CryptoAioError only ever surfaces as a sanitized cause. Never call a
+ * `Signer` around these guards: a direct call can leak a custodian's message.
+ */
+/** A CryptoAioError passes through; anything else becomes `code` with a sanitized cause. */
+function signerFailure(error, code, message, context) {
+    if ((0, error_1.isCryptoAioError)(error))
+        return error;
+    return new error_1.SigningError(code, message, {
+        cause: (0, redact_1.sanitizeError)(error),
+        ...(context ? { context } : {}),
+    });
+}
+/** The signer's declared schemes, read once and copied; SIGNER_UNAVAILABLE if unusable. */
+function signerSchemes(signerId, signer, context) {
+    try {
+        const schemes = signer.schemes;
+        if (Array.isArray(schemes) && schemes.every((s) => typeof s === 'string')) {
+            return [...schemes];
+        }
+    }
+    catch (error) {
+        throw signerFailure(error, 'SIGNER_UNAVAILABLE', `signer '${signerId}' has an unreadable scheme list`, context);
+    }
+    throw new error_1.SigningError('SIGNER_UNAVAILABLE', `signer '${signerId}' does not declare a list of schemes`, context ? { context } : {});
+}
+/**
+ * The signer's public key for `scheme`, checked against `length` and copied. With a
+ * `deadline`, a signer that does not answer in time fails with a retryable TIMEOUT
+ * (its late answer is ignored), so a hung custody backend can never block its caller.
+ */
+async function signerPublicKey(signerId, signer, scheme, keyRef, length, deadline) {
+    let key;
+    try {
+        const asked = Promise.resolve(signer.getPublicKey(scheme, keyRef));
+        key = deadline ? await withinDeadline(asked, deadline, signerId) : await asked;
+    }
+    catch (error) {
+        throw signerFailure(error, 'SIGNER_UNAVAILABLE', `signer '${signerId}' could not provide its ${scheme} public key`);
+    }
+    const copy = key instanceof Uint8Array ? new Uint8Array(key) : undefined;
+    if (!copy || copy.length !== length) {
+        throw new error_1.SigningError('SIGNER_UNAVAILABLE', `signer '${signerId}' returned a malformed ${scheme} public key (expected ${length} bytes)`);
+    }
+    return copy;
+}
+/** `work`, or a retryable TIMEOUT once `deadline.timeoutMs` passes first. */
+async function withinDeadline(work, deadline, signerId) {
+    const done = new AbortController();
+    // A late rejection must not surface as an unhandled one.
+    work.catch(() => undefined);
+    const expired = deadline.clock.sleep(deadline.timeoutMs, done.signal).then(() => {
+        throw new error_1.TimeoutError('TIMEOUT', `signer '${signerId}' did not provide its public key within lifecycle.signTimeoutMs`, { retryable: true });
+    });
+    expired.catch(() => undefined);
+    try {
+        return await Promise.race([work, expired]);
+    }
+    finally {
+        done.abort();
+    }
+}
+//# sourceMappingURL=guard.js.map

package/dist/core/signing/guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"guard.js","sourceRoot":"","sources":["../../../src/core/signing/guard.ts"],"names":[],"mappings":";;AA0BA,sCAWC;AAGD,sCAuBC;AAOD,0CA2BC;AAjGD,2CAOyB;AACzB,6CAAiD;AAUjD;;;;;GAKG;AAEH,4FAA4F;AAC5F,SAAgB,aAAa,CAC3B,KAAc,EACd,IAAwB,EACxB,OAAe,EACf,OAAsB;IAEtB,IAAI,IAAA,wBAAgB,EAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,IAAI,oBAAY,CAAC,IAAI,EAAE,OAAO,EAAE;QACrC,KAAK,EAAE,IAAA,sBAAa,EAAC,KAAK,CAAC;QAC3B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChC,CAAC,CAAC;AACL,CAAC;AAED,2FAA2F;AAC3F,SAAgB,aAAa,CAC3B,QAAgB,EAChB,MAAc,EACd,OAAsB;IAEtB,IAAI,CAAC;QACH,MAAM,OAAO,GAAY,MAAM,CAAC,OAAO,CAAC;QACxC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,EAAE,CAAC;YAC1E,OAAO,CAAC,GAAI,OAAoB,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CACjB,KAAK,EACL,oBAAoB,EACpB,WAAW,QAAQ,iCAAiC,EACpD,OAAO,CACR,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,oBAAY,CACpB,oBAAoB,EACpB,WAAW,QAAQ,sCAAsC,EACzD,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAC3B,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACI,KAAK,UAAU,eAAe,CACnC,QAAgB,EAChB,MAAc,EACd,MAAc,EACd,MAA0B,EAC1B,MAAc,EACd,QAAyB;IAEzB,IAAI,GAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,MAAM,cAAc,CAAC,KAAK,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,KAAK,CAAC;IACjF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,aAAa,CACjB,KAAK,EACL,oBAAoB,EACpB,WAAW,QAAQ,2BAA2B,MAAM,aAAa,CAClE,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,GAAG,YAAY,UAAU,CAAC,CAAC,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACzE,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QACpC,MAAM,IAAI,oBAAY,CACpB,oBAAoB,EACpB,WAAW,QAAQ,0BAA0B,MAAM,yBAAyB,MAAM,SAAS,CAC5F,CAAC;IACJ,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,KAAK,UAAU,cAAc,CAC3B,IAAgB,EAChB,QAAwB,EACxB,QAAgB;IAEhB,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;IACnC,yDAAyD;IACzD,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC5B,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE;QAC9E,MAAM,IAAI,oBAAY,CACpB,SAAS,EACT,WAAW,QAAQ,iEAAiE,EACpF,EAAE,SAAS,EAAE,IAAI,EAAE,CACpB,CAAC;IACJ,CAAC,CAAC,CAAC;IACH,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC/B,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC7C,CAAC;YAAS,CAAC;QACT,IAAI,CAAC,KAAK,EAAE,CAAC;IACf,CAAC;AACH,CAAC","sourcesContent":["import {\n  SigningError,\n  TimeoutError,\n  isCryptoAioError,\n  type CodesOf,\n  type CryptoAioError,\n  type ErrorContext,\n} from '../errors/error';\nimport { sanitizeError } from '../secret/redact';\nimport type { Clock } from '../util/clock';\nimport type { KeyRef, Signer } from './types';\n\n/** How long a signer may take to hand out a public key (`lifecycle.signTimeoutMs`). */\nexport interface SignerDeadline {\n  readonly clock: Clock;\n  readonly timeoutMs: number;\n}\n\n/*\n * Guards for every call into signer code (local, callback, KMS, HSM, MPC or user-written).\n * Custody backends put URLs and credentials in their error messages, so a failure that is\n * not already a CryptoAioError only ever surfaces as a sanitized cause. Never call a\n * `Signer` around these guards: a direct call can leak a custodian's message.\n */\n\n/** A CryptoAioError passes through; anything else becomes `code` with a sanitized cause. */\nexport function signerFailure(\n  error: unknown,\n  code: CodesOf<'signing'>,\n  message: string,\n  context?: ErrorContext,\n): CryptoAioError {\n  if (isCryptoAioError(error)) return error;\n  return new SigningError(code, message, {\n    cause: sanitizeError(error),\n    ...(context ? { context } : {}),\n  });\n}\n\n/** The signer's declared schemes, read once and copied; SIGNER_UNAVAILABLE if unusable. */\nexport function signerSchemes(\n  signerId: string,\n  signer: Signer,\n  context?: ErrorContext,\n): readonly string[] {\n  try {\n    const schemes: unknown = signer.schemes;\n    if (Array.isArray(schemes) && schemes.every((s) => typeof s === 'string')) {\n      return [...(schemes as string[])];\n    }\n  } catch (error) {\n    throw signerFailure(\n      error,\n      'SIGNER_UNAVAILABLE',\n      `signer '${signerId}' has an unreadable scheme list`,\n      context,\n    );\n  }\n  throw new SigningError(\n    'SIGNER_UNAVAILABLE',\n    `signer '${signerId}' does not declare a list of schemes`,\n    context ? { context } : {},\n  );\n}\n\n/**\n * The signer's public key for `scheme`, checked against `length` and copied. With a\n * `deadline`, a signer that does not answer in time fails with a retryable TIMEOUT\n * (its late answer is ignored), so a hung custody backend can never block its caller.\n */\nexport async function signerPublicKey(\n  signerId: string,\n  signer: Signer,\n  scheme: string,\n  keyRef: KeyRef | undefined,\n  length: number,\n  deadline?: SignerDeadline,\n): Promise<Uint8Array> {\n  let key: unknown;\n  try {\n    const asked = Promise.resolve(signer.getPublicKey(scheme, keyRef));\n    key = deadline ? await withinDeadline(asked, deadline, signerId) : await asked;\n  } catch (error) {\n    throw signerFailure(\n      error,\n      'SIGNER_UNAVAILABLE',\n      `signer '${signerId}' could not provide its ${scheme} public key`,\n    );\n  }\n  const copy = key instanceof Uint8Array ? new Uint8Array(key) : undefined;\n  if (!copy || copy.length !== length) {\n    throw new SigningError(\n      'SIGNER_UNAVAILABLE',\n      `signer '${signerId}' returned a malformed ${scheme} public key (expected ${length} bytes)`,\n    );\n  }\n  return copy;\n}\n\n/** `work`, or a retryable TIMEOUT once `deadline.timeoutMs` passes first. */\nasync function withinDeadline<T>(\n  work: Promise<T>,\n  deadline: SignerDeadline,\n  signerId: string,\n): Promise<T> {\n  const done = new AbortController();\n  // A late rejection must not surface as an unhandled one.\n  work.catch(() => undefined);\n  const expired = deadline.clock.sleep(deadline.timeoutMs, done.signal).then(() => {\n    throw new TimeoutError(\n      'TIMEOUT',\n      `signer '${signerId}' did not provide its public key within lifecycle.signTimeoutMs`,\n      { retryable: true },\n    );\n  });\n  expired.catch(() => undefined);\n  try {\n    return await Promise.race([work, expired]);\n  } finally {\n    done.abort();\n  }\n}\n"]}

package/dist/core/signing/hd.d.ts

@@ -0,0 +1,36 @@
+import { HDKey } from '@scure/bip32';
+export interface PathSegment {
+    readonly index: number;
+    readonly hardened: boolean;
+}
+export interface ExtendedKeyVersions {
+    readonly private: number;
+    readonly public: number;
+}
+export declare function mnemonicToSeed(phrase: string, passphrase?: string): Uint8Array;
+export declare function parsePath(path: string): PathSegment[];
+export declare function deriveSecp256k1(seed: Uint8Array, path: string): Uint8Array;
+/** SLIP-10 ed25519 derivation (hardened segments only). */
+export declare function deriveEd25519(seed: Uint8Array, path: string): Uint8Array;
+/**
+ * Reads an extended PUBLIC key with `versions` (default: by its `xpub`/`tpub` prefix).
+ * A private key (by its SLIP-0132 prefix, or by its key data), an unreadable or non-string
+ * one, or one of an unknown format is `CONFIG_INVALID` with a fixed text: no message or
+ * `cause` repeats any part of the input, which may be a mis-pasted secret (a mnemonic, a WIF
+ * or hex key). Returns the node and the version pair it was read with, whose `public` is the
+ * key's own version.
+ */
+export declare function parseExtendedPublicKey(xpub: string, versions?: ExtendedKeyVersions): {
+    readonly node: HDKey;
+    readonly versions: ExtendedKeyVersions;
+};
+/**
+ * Non-hardened child public key (33-byte compressed) from an extended PUBLIC key. With
+ * `network`, a key whose SLIP-0132 version belongs to the other network class (a mainnet
+ * `xpub`/`zpub` on a test network, a `tpub`/`vpub` on mainnet) is `CONFIG_INVALID`; a
+ * version outside the Bitcoin SLIP-0132 table has no known class and is not checked. Pass
+ * it for chains whose extended keys carry a network class (UTXO chains).
+ */
+export declare function deriveXpubChild(xpub: string, relativePath: string, versions?: ExtendedKeyVersions, network?: {
+    readonly testnet: boolean;
+}): Uint8Array;

package/dist/core/signing/hd.js

@@ -0,0 +1,167 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mnemonicToSeed = mnemonicToSeed;
+exports.parsePath = parsePath;
+exports.deriveSecp256k1 = deriveSecp256k1;
+exports.deriveEd25519 = deriveEd25519;
+exports.parseExtendedPublicKey = parseExtendedPublicKey;
+exports.deriveXpubChild = deriveXpubChild;
+const hmac_1 = require("@noble/hashes/hmac");
+const sha512_1 = require("@noble/hashes/sha512");
+const utils_1 = require("@noble/hashes/utils");
+const bip32_1 = require("@scure/bip32");
+const bip39_1 = require("@scure/bip39");
+const english_1 = require("@scure/bip39/wordlists/english");
+const error_1 = require("../errors/error");
+const KNOWN_VERSIONS = {
+    xpub: { private: 0x0488ade4, public: 0x0488b21e },
+    tpub: { private: 0x04358394, public: 0x043587cf },
+};
+/**
+ * SLIP-0132: whether each registered Bitcoin extended PUBLIC key version belongs to a
+ * test network (`tpub`, `upub`, `vpub`, `Upub`, `Vpub`) or to mainnet (`xpub`, `ypub`,
+ * `zpub`, `Ypub`, `Zpub`).
+ */
+const TESTNET_VERSION = new Map([
+    [0x0488b21e, false], // xpub
+    [0x049d7cb2, false], // ypub
+    [0x04b24746, false], // zpub
+    [0x0295b43f, false], // Ypub
+    [0x02aa7ed3, false], // Zpub
+    [0x043587cf, true], // tpub
+    [0x044a5262, true], // upub
+    [0x045f1cf6, true], // vpub
+    [0x024289ef, true], // Upub
+    [0x02575483, true], // Vpub
+]);
+function mnemonicToSeed(phrase, passphrase = '') {
+    const normalized = phrase.trim().normalize('NFKD').split(/\s+/).join(' ');
+    if (!(0, bip39_1.validateMnemonic)(normalized, english_1.wordlist)) {
+        throw new error_1.ConfigError('CONFIG_INVALID', 'invalid BIP39 mnemonic (checksum or word list mismatch)');
+    }
+    return (0, bip39_1.mnemonicToSeedSync)(normalized, passphrase);
+}
+function parsePath(path) {
+    const parts = path.trim().split('/');
+    if (parts[0] !== 'm') {
+        throw new error_1.ConfigError('CONFIG_INVALID', `derivation path must start with 'm': ${path}`);
+    }
+    return parts.slice(1).map((part) => {
+        const hardened = /['hH]$/.test(part);
+        const digits = hardened ? part.slice(0, -1) : part;
+        if (!/^\d+$/.test(digits))
+            throw new error_1.ConfigError('CONFIG_INVALID', `invalid path segment '${part}' in ${path}`);
+        const index = Number(digits);
+        if (index >= 2 ** 31)
+            throw new error_1.ConfigError('CONFIG_INVALID', `path index out of range in ${path}`);
+        return { index, hardened };
+    });
+}
+function deriveSecp256k1(seed, path) {
+    const segments = parsePath(path);
+    let node = bip32_1.HDKey.fromMasterSeed(seed);
+    try {
+        for (const segment of segments) {
+            node = node.deriveChild(segment.hardened ? segment.index + bip32_1.HARDENED_OFFSET : segment.index);
+        }
+    }
+    catch (cause) {
+        throw new error_1.ConfigError('CONFIG_INVALID', `could not derive a private key at ${path}`, {
+            cause,
+        });
+    }
+    const key = node.privateKey;
+    if (!key)
+        throw new error_1.ConfigError('CONFIG_INVALID', `could not derive a private key at ${path}`);
+    return key;
+}
+/** SLIP-10 ed25519 derivation (hardened segments only). */
+function deriveEd25519(seed, path) {
+    let digest = (0, hmac_1.hmac)(sha512_1.sha512, (0, utils_1.utf8ToBytes)('ed25519 seed'), seed);
+    let key = digest.slice(0, 32);
+    let chainCode = digest.slice(32);
+    for (const segment of parsePath(path)) {
+        if (!segment.hardened) {
+            throw new error_1.ConfigError('CONFIG_INVALID', `ed25519 (SLIP-10) supports hardened derivation only: ${path}`);
+        }
+        const data = new Uint8Array(37);
+        data.set(key, 1);
+        new DataView(data.buffer).setUint32(33, (segment.index | 0x80000000) >>> 0);
+        digest = (0, hmac_1.hmac)(sha512_1.sha512, chainCode, data);
+        key = digest.slice(0, 32);
+        chainCode = digest.slice(32);
+    }
+    return key;
+}
+/** SLIP-0132: the prefixes of extended PRIVATE keys. */
+const PRIVATE_PREFIXES = new Set([
+    'xprv',
+    'yprv',
+    'zprv',
+    'Yprv',
+    'Zprv',
+    'tprv',
+    'uprv',
+    'vprv',
+    'Uprv',
+    'Vprv',
+]);
+/**
+ * Reads an extended PUBLIC key with `versions` (default: by its `xpub`/`tpub` prefix).
+ * A private key (by its SLIP-0132 prefix, or by its key data), an unreadable or non-string
+ * one, or one of an unknown format is `CONFIG_INVALID` with a fixed text: no message or
+ * `cause` repeats any part of the input, which may be a mis-pasted secret (a mnemonic, a WIF
+ * or hex key). Returns the node and the version pair it was read with, whose `public` is the
+ * key's own version.
+ */
+function parseExtendedPublicKey(xpub, versions) {
+    if (typeof xpub !== 'string') {
+        throw new error_1.ConfigError('CONFIG_INVALID', 'an extended public key must be a string');
+    }
+    const prefix = xpub.slice(0, 4);
+    const privateKey = () => new error_1.ConfigError('CONFIG_INVALID', 'expected an extended PUBLIC key; never configure private extended keys');
+    if (versions === undefined && PRIVATE_PREFIXES.has(prefix))
+        throw privateKey();
+    const selected = versions ?? KNOWN_VERSIONS[prefix];
+    if (!selected) {
+        throw new error_1.ConfigError('CONFIG_INVALID', 'unsupported extended key format; pass xpubVersions for this format');
+    }
+    let node;
+    try {
+        node = bip32_1.HDKey.fromExtendedKey(xpub, selected);
+    }
+    catch {
+        // The library's error can name a character of the input, so it is not kept.
+        throw new error_1.ConfigError('CONFIG_INVALID', 'invalid extended public key');
+    }
+    if (node.privateKey)
+        throw privateKey();
+    return { node, versions: selected };
+}
+/**
+ * Non-hardened child public key (33-byte compressed) from an extended PUBLIC key. With
+ * `network`, a key whose SLIP-0132 version belongs to the other network class (a mainnet
+ * `xpub`/`zpub` on a test network, a `tpub`/`vpub` on mainnet) is `CONFIG_INVALID`; a
+ * version outside the Bitcoin SLIP-0132 table has no known class and is not checked. Pass
+ * it for chains whose extended keys carry a network class (UTXO chains).
+ */
+function deriveXpubChild(xpub, relativePath, versions, network) {
+    const { node, versions: selected } = parseExtendedPublicKey(xpub, versions);
+    // The key parsed with `selected`, so its version is `selected.public`.
+    const testnet = TESTNET_VERSION.get(selected.public);
+    if (network && testnet !== undefined && testnet !== network.testnet) {
+        throw new error_1.ConfigError('CONFIG_INVALID', `the extended public key is for ${testnet ? 'a test network' : 'mainnet'}, but the network is ${network.testnet ? 'a test network' : 'mainnet'}`);
+    }
+    const path = relativePath.startsWith('m') ? relativePath : `m/${relativePath}`;
+    let child;
+    try {
+        child = node.derive(path);
+    }
+    catch (cause) {
+        throw new error_1.ConfigError('CONFIG_INVALID', `cannot derive '${relativePath}' from an xpub (hardened segments need the private key)`, { cause });
+    }
+    if (!child.publicKey)
+        throw new error_1.ConfigError('CONFIG_INVALID', `no public key at '${relativePath}'`);
+    return child.publicKey;
+}
+//# sourceMappingURL=hd.js.map

package/dist/core/signing/hd.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hd.js","sourceRoot":"","sources":["../../../src/core/signing/hd.ts"],"names":[],"mappings":";;AAyCA,wCASC;AAED,8BAqBC;AAED,0CAkBC;AAGD,sCAmBC;AAwBD,wDA8BC;AASD,0CA6BC;AA/MD,6CAA0C;AAC1C,iDAA8C;AAC9C,+CAAkD;AAClD,wCAAsD;AACtD,wCAAoE;AACpE,4DAA0D;AAC1D,2CAA8C;AAY9C,MAAM,cAAc,GAAkD;IACpE,IAAI,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE;IACjD,IAAI,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,UAAU,EAAE;CAClD,CAAC;AAEF;;;;GAIG;AACH,MAAM,eAAe,GAAiC,IAAI,GAAG,CAAC;IAC5D,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,OAAO;IAC5B,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,OAAO;IAC5B,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,OAAO;IAC5B,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,OAAO;IAC5B,CAAC,UAAU,EAAE,KAAK,CAAC,EAAE,OAAO;IAC5B,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,OAAO;IAC3B,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,OAAO;IAC3B,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,OAAO;IAC3B,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,OAAO;IAC3B,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,OAAO;CAC5B,CAAC,CAAC;AAEH,SAAgB,cAAc,CAAC,MAAc,EAAE,UAAU,GAAG,EAAE;IAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC1E,IAAI,CAAC,IAAA,wBAAgB,EAAC,UAAU,EAAE,kBAAQ,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,mBAAW,CACnB,gBAAgB,EAChB,yDAAyD,CAC1D,CAAC;IACJ,CAAC;IACD,OAAO,IAAA,0BAAkB,EAAC,UAAU,EAAE,UAAU,CAAC,CAAC;AACpD,CAAC;AAED,SAAgB,SAAS,CAAC,IAAY;IACpC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,EAAE,CAAC;QACrB,MAAM,IAAI,mBAAW,CACnB,gBAAgB,EAChB,wCAAwC,IAAI,EAAE,CAC/C,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACjC,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrC,MAAM,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;QACnD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC;YACvB,MAAM,IAAI,mBAAW,CACnB,gBAAgB,EAChB,yBAAyB,IAAI,QAAQ,IAAI,EAAE,CAC5C,CAAC;QACJ,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7B,IAAI,KAAK,IAAI,CAAC,IAAI,EAAE;YAClB,MAAM,IAAI,mBAAW,CAAC,gBAAgB,EAAE,8BAA8B,IAAI,EAAE,CAAC,CAAC;QAChF,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAgB,eAAe,CAAC,IAAgB,EAAE,IAAY;IAC5D,MAAM,QAAQ,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IACjC,IAAI,IAAI,GAAG,aAAK,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,CAAC;QACH,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,IAAI,GAAG,IAAI,CAAC,WAAW,CACrB,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,GAAG,uBAAe,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CACnE,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAW,CAAC,gBAAgB,EAAE,qCAAqC,IAAI,EAAE,EAAE;YACnF,KAAK;SACN,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC;IAC5B,IAAI,CAAC,GAAG;QACN,MAAM,IAAI,mBAAW,CAAC,gBAAgB,EAAE,qCAAqC,IAAI,EAAE,CAAC,CAAC;IACvF,OAAO,GAAG,CAAC;AACb,CAAC;AAED,2DAA2D;AAC3D,SAAgB,aAAa,CAAC,IAAgB,EAAE,IAAY;IAC1D,IAAI,MAAM,GAAG,IAAA,WAAI,EAAC,eAAM,EAAE,IAAA,mBAAW,EAAC,cAAc,CAAC,EAAE,IAAI,CAAC,CAAC;IAC7D,IAAI,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC9B,IAAI,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACjC,KAAK,MAAM,OAAO,IAAI,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,mBAAW,CACnB,gBAAgB,EAChB,wDAAwD,IAAI,EAAE,CAC/D,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC;QAChC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;QACjB,IAAI,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC;QAC5E,MAAM,GAAG,IAAA,WAAI,EAAC,eAAM,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACvC,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC/B,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,wDAAwD;AACxD,MAAM,gBAAgB,GAAwB,IAAI,GAAG,CAAC;IACpD,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;IACN,MAAM;CACP,CAAC,CAAC;AAEH;;;;;;;GAOG;AACH,SAAgB,sBAAsB,CACpC,IAAY,EACZ,QAA8B;IAE9B,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,mBAAW,CAAC,gBAAgB,EAAE,yCAAyC,CAAC,CAAC;IACrF,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IAChC,MAAM,UAAU,GAAG,GAAG,EAAE,CACtB,IAAI,mBAAW,CACb,gBAAgB,EAChB,wEAAwE,CACzE,CAAC;IACJ,IAAI,QAAQ,KAAK,SAAS,IAAI,gBAAgB,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,MAAM,UAAU,EAAE,CAAC;IAC/E,MAAM,QAAQ,GAAG,QAAQ,IAAI,cAAc,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,mBAAW,CACnB,gBAAgB,EAChB,oEAAoE,CACrE,CAAC;IACJ,CAAC;IACD,IAAI,IAAW,CAAC;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,aAAK,CAAC,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,MAAM,IAAI,mBAAW,CAAC,gBAAgB,EAAE,6BAA6B,CAAC,CAAC;IACzE,CAAC;IACD,IAAI,IAAI,CAAC,UAAU;QAAE,MAAM,UAAU,EAAE,CAAC;IACxC,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AACtC,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,eAAe,CAC7B,IAAY,EACZ,YAAoB,EACpB,QAA8B,EAC9B,OAAuC;IAEvC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,GAAG,sBAAsB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC5E,uEAAuE;IACvE,MAAM,OAAO,GAAG,eAAe,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IACrD,IAAI,OAAO,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC;QACpE,MAAM,IAAI,mBAAW,CACnB,gBAAgB,EAChB,kCAAkC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,wBAAwB,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,EAAE,CACjJ,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,YAAY,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,KAAK,YAAY,EAAE,CAAC;IAC/E,IAAI,KAAY,CAAC;IACjB,IAAI,CAAC;QACH,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,mBAAW,CACnB,gBAAgB,EAChB,kBAAkB,YAAY,yDAAyD,EACvF,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,SAAS;QAClB,MAAM,IAAI,mBAAW,CAAC,gBAAgB,EAAE,qBAAqB,YAAY,GAAG,CAAC,CAAC;IAChF,OAAO,KAAK,CAAC,SAAS,CAAC;AACzB,CAAC","sourcesContent":["import { hmac } from '@noble/hashes/hmac';\nimport { sha512 } from '@noble/hashes/sha512';\nimport { utf8ToBytes } from '@noble/hashes/utils';\nimport { HARDENED_OFFSET, HDKey } from '@scure/bip32';\nimport { mnemonicToSeedSync, validateMnemonic } from '@scure/bip39';\nimport { wordlist } from '@scure/bip39/wordlists/english';\nimport { ConfigError } from '../errors/error';\n\nexport interface PathSegment {\n  readonly index: number;\n  readonly hardened: boolean;\n}\n\nexport interface ExtendedKeyVersions {\n  readonly private: number;\n  readonly public: number;\n}\n\nconst KNOWN_VERSIONS: Readonly<Record<string, ExtendedKeyVersions>> = {\n  xpub: { private: 0x0488ade4, public: 0x0488b21e },\n  tpub: { private: 0x04358394, public: 0x043587cf },\n};\n\n/**\n * SLIP-0132: whether each registered Bitcoin extended PUBLIC key version belongs to a\n * test network (`tpub`, `upub`, `vpub`, `Upub`, `Vpub`) or to mainnet (`xpub`, `ypub`,\n * `zpub`, `Ypub`, `Zpub`).\n */\nconst TESTNET_VERSION: ReadonlyMap<number, boolean> = new Map([\n  [0x0488b21e, false], // xpub\n  [0x049d7cb2, false], // ypub\n  [0x04b24746, false], // zpub\n  [0x0295b43f, false], // Ypub\n  [0x02aa7ed3, false], // Zpub\n  [0x043587cf, true], // tpub\n  [0x044a5262, true], // upub\n  [0x045f1cf6, true], // vpub\n  [0x024289ef, true], // Upub\n  [0x02575483, true], // Vpub\n]);\n\nexport function mnemonicToSeed(phrase: string, passphrase = ''): Uint8Array {\n  const normalized = phrase.trim().normalize('NFKD').split(/\\s+/).join(' ');\n  if (!validateMnemonic(normalized, wordlist)) {\n    throw new ConfigError(\n      'CONFIG_INVALID',\n      'invalid BIP39 mnemonic (checksum or word list mismatch)',\n    );\n  }\n  return mnemonicToSeedSync(normalized, passphrase);\n}\n\nexport function parsePath(path: string): PathSegment[] {\n  const parts = path.trim().split('/');\n  if (parts[0] !== 'm') {\n    throw new ConfigError(\n      'CONFIG_INVALID',\n      `derivation path must start with 'm': ${path}`,\n    );\n  }\n  return parts.slice(1).map((part) => {\n    const hardened = /['hH]$/.test(part);\n    const digits = hardened ? part.slice(0, -1) : part;\n    if (!/^\\d+$/.test(digits))\n      throw new ConfigError(\n        'CONFIG_INVALID',\n        `invalid path segment '${part}' in ${path}`,\n      );\n    const index = Number(digits);\n    if (index >= 2 ** 31)\n      throw new ConfigError('CONFIG_INVALID', `path index out of range in ${path}`);\n    return { index, hardened };\n  });\n}\n\nexport function deriveSecp256k1(seed: Uint8Array, path: string): Uint8Array {\n  const segments = parsePath(path);\n  let node = HDKey.fromMasterSeed(seed);\n  try {\n    for (const segment of segments) {\n      node = node.deriveChild(\n        segment.hardened ? segment.index + HARDENED_OFFSET : segment.index,\n      );\n    }\n  } catch (cause) {\n    throw new ConfigError('CONFIG_INVALID', `could not derive a private key at ${path}`, {\n      cause,\n    });\n  }\n  const key = node.privateKey;\n  if (!key)\n    throw new ConfigError('CONFIG_INVALID', `could not derive a private key at ${path}`);\n  return key;\n}\n\n/** SLIP-10 ed25519 derivation (hardened segments only). */\nexport function deriveEd25519(seed: Uint8Array, path: string): Uint8Array {\n  let digest = hmac(sha512, utf8ToBytes('ed25519 seed'), seed);\n  let key = digest.slice(0, 32);\n  let chainCode = digest.slice(32);\n  for (const segment of parsePath(path)) {\n    if (!segment.hardened) {\n      throw new ConfigError(\n        'CONFIG_INVALID',\n        `ed25519 (SLIP-10) supports hardened derivation only: ${path}`,\n      );\n    }\n    const data = new Uint8Array(37);\n    data.set(key, 1);\n    new DataView(data.buffer).setUint32(33, (segment.index | 0x80000000) >>> 0);\n    digest = hmac(sha512, chainCode, data);\n    key = digest.slice(0, 32);\n    chainCode = digest.slice(32);\n  }\n  return key;\n}\n\n/** SLIP-0132: the prefixes of extended PRIVATE keys. */\nconst PRIVATE_PREFIXES: ReadonlySet<string> = new Set([\n  'xprv',\n  'yprv',\n  'zprv',\n  'Yprv',\n  'Zprv',\n  'tprv',\n  'uprv',\n  'vprv',\n  'Uprv',\n  'Vprv',\n]);\n\n/**\n * Reads an extended PUBLIC key with `versions` (default: by its `xpub`/`tpub` prefix).\n * A private key (by its SLIP-0132 prefix, or by its key data), an unreadable or non-string\n * one, or one of an unknown format is `CONFIG_INVALID` with a fixed text: no message or\n * `cause` repeats any part of the input, which may be a mis-pasted secret (a mnemonic, a WIF\n * or hex key). Returns the node and the version pair it was read with, whose `public` is the\n * key's own version.\n */\nexport function parseExtendedPublicKey(\n  xpub: string,\n  versions?: ExtendedKeyVersions,\n): { readonly node: HDKey; readonly versions: ExtendedKeyVersions } {\n  if (typeof xpub !== 'string') {\n    throw new ConfigError('CONFIG_INVALID', 'an extended public key must be a string');\n  }\n  const prefix = xpub.slice(0, 4);\n  const privateKey = () =>\n    new ConfigError(\n      'CONFIG_INVALID',\n      'expected an extended PUBLIC key; never configure private extended keys',\n    );\n  if (versions === undefined && PRIVATE_PREFIXES.has(prefix)) throw privateKey();\n  const selected = versions ?? KNOWN_VERSIONS[prefix];\n  if (!selected) {\n    throw new ConfigError(\n      'CONFIG_INVALID',\n      'unsupported extended key format; pass xpubVersions for this format',\n    );\n  }\n  let node: HDKey;\n  try {\n    node = HDKey.fromExtendedKey(xpub, selected);\n  } catch {\n    // The library's error can name a character of the input, so it is not kept.\n    throw new ConfigError('CONFIG_INVALID', 'invalid extended public key');\n  }\n  if (node.privateKey) throw privateKey();\n  return { node, versions: selected };\n}\n\n/**\n * Non-hardened child public key (33-byte compressed) from an extended PUBLIC key. With\n * `network`, a key whose SLIP-0132 version belongs to the other network class (a mainnet\n * `xpub`/`zpub` on a test network, a `tpub`/`vpub` on mainnet) is `CONFIG_INVALID`; a\n * version outside the Bitcoin SLIP-0132 table has no known class and is not checked. Pass\n * it for chains whose extended keys carry a network class (UTXO chains).\n */\nexport function deriveXpubChild(\n  xpub: string,\n  relativePath: string,\n  versions?: ExtendedKeyVersions,\n  network?: { readonly testnet: boolean },\n): Uint8Array {\n  const { node, versions: selected } = parseExtendedPublicKey(xpub, versions);\n  // The key parsed with `selected`, so its version is `selected.public`.\n  const testnet = TESTNET_VERSION.get(selected.public);\n  if (network && testnet !== undefined && testnet !== network.testnet) {\n    throw new ConfigError(\n      'CONFIG_INVALID',\n      `the extended public key is for ${testnet ? 'a test network' : 'mainnet'}, but the network is ${network.testnet ? 'a test network' : 'mainnet'}`,\n    );\n  }\n  const path = relativePath.startsWith('m') ? relativePath : `m/${relativePath}`;\n  let child: HDKey;\n  try {\n    child = node.derive(path);\n  } catch (cause) {\n    throw new ConfigError(\n      'CONFIG_INVALID',\n      `cannot derive '${relativePath}' from an xpub (hardened segments need the private key)`,\n      { cause },\n    );\n  }\n  if (!child.publicKey)\n    throw new ConfigError('CONFIG_INVALID', `no public key at '${relativePath}'`);\n  return child.publicKey;\n}\n"]}

package/dist/core/signing/local.d.ts

@@ -0,0 +1,48 @@
+import { type Secret } from '../secret/secret';
+import type { KeyRef, Signer, SigningContext, SigningRequest, SigningResult } from './types';
+export type Curve = 'secp256k1' | 'ed25519';
+export type KeySource = (curve: Curve, keyRef: KeyRef | undefined) => Uint8Array;
+export declare function curveOfScheme(scheme: string): Curve | undefined;
+/** In-process signer. Keys live only in private fields and are never serialized. */
+export declare class LocalSigner implements Signer {
+    #private;
+    readonly id: string;
+    readonly schemes: readonly string[];
+    constructor(id: string, curves: readonly Curve[], keys: KeySource, exportable: boolean);
+    getPublicKey(scheme: string, keyRef?: KeyRef): Promise<Uint8Array>;
+    sign(requests: readonly SigningRequest[], _ctx: SigningContext): Promise<SigningResult>;
+    exportKey(scheme: string, keyRef?: KeyRef): Promise<Secret<Uint8Array>>;
+    toJSON(): {
+        id: string;
+        schemes: readonly string[];
+    };
+}
+/** BIP341 key-path tweak: negate for odd Y, then add the tweak modulo n. */
+export declare function tweakPrivateKey(key: Uint8Array, tweak: Uint8Array): Uint8Array;
+export interface LocalSignerOptions {
+    readonly id?: string;
+    readonly secp256k1?: Secret<string | Uint8Array>;
+    readonly ed25519?: Secret<string | Uint8Array>;
+    readonly exportable?: boolean;
+}
+export interface GenerateOptions {
+    readonly id?: string;
+    readonly curves: readonly Curve[];
+    readonly exportable?: boolean;
+}
+export interface GeneratedSigner {
+    readonly signer: Signer;
+    /** secp256k1: 33-byte compressed; ed25519: 32 bytes. */
+    readonly publicKeys: Readonly<Partial<Record<Curve, Uint8Array>>>;
+}
+export declare function localSigner(options: LocalSignerOptions): Signer;
+export declare namespace localSigner {
+    var generate: (options: GenerateOptions) => GeneratedSigner;
+    var fromMnemonic: (phrase: Secret<string>, options?: MnemonicSignerOptions) => Signer;
+}
+export interface MnemonicSignerOptions {
+    readonly id?: string;
+    readonly passphrase?: Secret<string>;
+    readonly exportable?: boolean;
+    readonly curves?: readonly Curve[];
+}