hd-wallet-wasm 2.0.28 → 2.0.30

package/dist/runtime/epm-attestation.mjs

@@ -119,8 +119,8 @@ function epmJcsCanonicalize(value) {
  * wallet signature over this content verifies isomorphically in the browser and
  * on wasmedge. Mirrors the field set/rules exactly: trim + omit-empty strings,
  * enum-label ENTITY_TYPE (always) / KEY_TYPE (Signing|Encryption only), nested
- * ADDRESS, KEYS/CHAIN_PROOFS arrays, SIGNATURE_TIMESTAMP (integer, when nonzero),
- * and SIGNATURE excluded.
+ * ADDRESS, all public CryptoKey fields in KEYS, CHAIN_PROOFS arrays,
+ * SIGNATURE_TIMESTAMP (integer, when nonzero), and SIGNATURE excluded.
  *
  * @param {Object} epm - EPM fields as a plain object (schema UPPER_SNAKE keys;
  *   ENTITY_TYPE/KEY_TYPE may be enum index or label)
@@ -170,6 +170,9 @@ export function buildEPMSigningContent(epm) {
       epmAddStr(e, 'KEY_ADDRESS', kg('KEY_ADDRESS'));
       const kt = epmEnumName(kg('KEY_TYPE'), EPM_KEY_TYPE_NAMES);
       if (kt === 'Signing' || kt === 'Encryption') e.KEY_TYPE = kt;
+      epmAddStr(e, 'KEY_PATH', kg('KEY_PATH'));
+      epmAddStr(e, 'ALGORITHM', kg('ALGORITHM'));
+      epmAddStr(e, 'ENCODING', kg('ENCODING'));
       if (Object.keys(e).length) arr.push(e);
     }
     if (arr.length) content.KEYS = arr;

package/dist/runtime/index.d.ts

@@ -179,6 +179,7 @@ export interface SdnWasmPublicIdentity {
 
 export type SdnRegistryRowId =
   | 'sdn-node-console-v2'
+  | 'spaceaware-publish-request-v1'
   | 'asset-review-authority-activation-v1'
   | 'asset-review-decision-v1';
 
@@ -213,6 +214,34 @@ export interface SdnLoginV2WireRequest {
   protocolVersion: 2;
 }
 
+/** Internal wallet-origin request; the wallet obtains the provider challenge. */
+export interface SdnPublishRequest {
+  protocolVersion: 1;
+  providerOrigin: string;
+  method: 'POST';
+  requestUri: string;
+  bodySha256: string;
+  bodyBytes: number;
+  challengeId: string;
+  challengeBase64url: string;
+  schema: 'CZM' | 'ETM';
+  entityId: string;
+  entityName: string;
+  documentCount: number;
+}
+
+export interface SdnPublishSignature {
+  schemaVersion: 1;
+  keyId: `sha256:${string}`;
+  identityScheme: 'sdn-bip32-slip10-purpose-v1';
+  algorithm: 'ed25519';
+  encoding: 'raw';
+  signatureProfile: 'ed25519-sdn-signed-request-v2';
+  publicKeyHex: string;
+  signatureHex: string;
+  requestDigestSha256: string;
+}
+
 export interface ReviewedTransform {
   translation: readonly [number, number, number];
   rotation: readonly [number, number, number, number];
@@ -307,6 +336,26 @@ export interface SdnIdentityCapabilities {
     request: SdnLoginV2WireRequest,
     registryRow: 'sdn-node-console-v2',
   ): CanonicalWalletSignature;
+  signSdnPublishRequest(
+    handle: SdnIdentityHandle,
+    request: SdnPublishRequest,
+    registryRow: 'spaceaware-publish-request-v1',
+  ): SdnPublishSignature;
+  /** The account key's EPM ChainProof that a session key may fetch paid modules. */
+  signModuleDeliveryKey(
+    handle: SdnIdentityHandle,
+    request: { protocolVersion: 1; origin: string; sessionPublicKeyHex: string; expiresAt: number },
+    registryRow: 'spaceaware-module-delivery-key-v1',
+  ): {
+    schemaVersion: 1;
+    keyPath: string;
+    accountXpub: string;
+    publicKeyHex: string;
+    signedPayloadHex: string;
+    signatureHex: string;
+    algorithm: 'secp256k1';
+    encoding: 'der';
+  };
   signAssetReviewAuthorityActivation(
     handle: SdnIdentityHandle,
     request: AssetReviewAuthorityActivationRequest,

package/dist/runtime/index.mjs

@@ -9,7 +9,7 @@
  * - Transaction building and signing
  *
  * @module hd-wallet-wasm
- * @version 2.0.28
+ * @version 2.0.30
  */
 
 // Import aligned API for batch operations

package/dist/runtime/sdn-typed.mjs

@@ -33,6 +33,8 @@ const RAW_ENTRYPOINTS = Object.freeze([
   '_hd_sdn_import_remembered_identity',
   '_hd_sdn_sign_login_v1',
   '_hd_sdn_sign_login_v2',
+  '_hd_sdn_sign_publish_request',
+  '_hd_sdn_sign_module_delivery_key',
   '_hd_sdn_sign_asset_review_authority_activation',
   '_hd_sdn_sign_asset_review_decision',
   '_hd_sdn_seal_remembered_identity',
@@ -347,6 +349,28 @@ function parseIdentity(bytes) {
 }
 
 function copySignature(value, canonical) {
+  if (canonical === 'module-delivery-key') {
+    if (!exactKeys(value, ['schemaVersion', 'keyPath', 'accountXpub', 'publicKeyHex',
+      'signedPayloadHex', 'signatureHex', 'algorithm', 'encoding']) ||
+        value.schemaVersion !== 1 || !/^m\/44'\/0'\/\d+'$/u.test(value.keyPath) ||
+        typeof value.accountXpub !== 'string' || !value.accountXpub.startsWith('xpub') ||
+        !validLowerHex(value.publicKeyHex, 66) ||
+        typeof value.signedPayloadHex !== 'string' || !/^(?:[0-9a-f]{2})+$/u.test(value.signedPayloadHex) ||
+        typeof value.signatureHex !== 'string' || !/^30(?:[0-9a-f]{2}){7,72}$/u.test(value.signatureHex) ||
+        value.algorithm !== 'secp256k1' || value.encoding !== 'der') fail('CRYPTO_FAILURE');
+    return Object.freeze({ ...value });
+  }
+  if (canonical === 'publish') {
+    if (!exactKeys(value, ['schemaVersion', 'keyId', 'identityScheme', 'algorithm',
+      'encoding', 'signatureProfile', 'publicKeyHex', 'signatureHex', 'requestDigestSha256']) ||
+        value.schemaVersion !== 1 || !validKeyId(value.keyId) ||
+        value.identityScheme !== 'sdn-bip32-slip10-purpose-v1' ||
+        value.algorithm !== 'ed25519' || value.encoding !== 'raw' ||
+        value.signatureProfile !== 'ed25519-sdn-signed-request-v2' ||
+        !validLowerHex(value.publicKeyHex, 64) || !validLowerHex(value.signatureHex, 128) ||
+        !validLowerHex(value.requestDigestSha256, 64)) fail('CRYPTO_FAILURE');
+    return Object.freeze({ ...value });
+  }
   const common = [
     'schemaVersion', 'keyId', 'identityScheme', 'algorithm', 'encoding',
     'signatureProfile', 'signatureHex',
@@ -795,6 +819,36 @@ export function createSdnTypedCapabilities(wasm) {
       );
     },
 
+    signSdnPublishRequest(handle, request, registryRow) {
+      const record = recordFor(handle);
+      if (registryRow !== 'spaceaware-publish-request-v1') fail('INVALID_REQUEST');
+      const requestBytes = encodeRequest(request);
+      return invokeSign(
+        '_hd_sdn_sign_publish_request', record, requestBytes,
+        (native, input, length, output, required) => [
+          native, input, length, 4, output, MAX_OUTPUT_BYTES, required,
+        ],
+        'publish',
+      );
+    },
+
+    /**
+     * Account key's proof that `request.sessionPublicKeyHex` may fetch paid
+     * modules for this account: an EPM ChainProof's fields.
+     */
+    signModuleDeliveryKey(handle, request, registryRow) {
+      const record = recordFor(handle);
+      if (registryRow !== 'spaceaware-module-delivery-key-v1') fail('INVALID_REQUEST');
+      const requestBytes = encodeRequest(request);
+      return invokeSign(
+        '_hd_sdn_sign_module_delivery_key', record, requestBytes,
+        (native, input, length, output, required) => [
+          native, input, length, 5, output, MAX_OUTPUT_BYTES, required,
+        ],
+        'module-delivery-key',
+      );
+    },
+
     signAssetReviewAuthorityActivation(handle, request, registryRow) {
       const record = recordFor(handle);
       if (registryRow !== 'asset-review-authority-activation-v1') {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "hd-wallet-wasm",
-  "version": "2.0.28",
+  "version": "2.0.30",
   "description": "Comprehensive HD Wallet implementation in WebAssembly - BIP-32/39/44, multi-curve, multi-chain support",
   "type": "module",
   "main": "./dist/runtime/index.mjs",
@@ -92,5 +92,5 @@
   "devDependencies": {
     "@types/node": "^20.0.0"
   },
-  "gitHead": "d1ed47f3777c08fc68170bbf0692e8c5313f9f81"
+  "gitHead": "d59643a6d9797dc505ff626d6e80339fbff6b548"
 }