mppx 0.8.14 → 0.8.17

package/dist/attestation/internal/HttpMessageSignature.js

@@ -0,0 +1,320 @@
+import { isInnerList, parseDictionary, serializeItem, serializeDictionary, serializeInnerList, serializeParameters, } from 'structured-headers';
+import * as Store from '../../Store.js';
+import { Algorithms, Headers as AttestationHeaders } from '../Constants.js';
+import * as SigningContextInternal from './SigningContext.js';
+/** RFC 9421 constants used by request-attestation signature profiles. */
+export const Constants = {
+    /** Derived request components supported by this narrow request profile. */
+    components: {
+        /** The target host and non-default port. */
+        authority: '@authority',
+        /** The request URL path without its query string. */
+        path: '@path',
+        /** The lowercased `Signature-Agent` request header. */
+        signatureAgent: 'signature-agent',
+        /** The signature's canonicalized covered-components and parameters. */
+        signatureParams: '@signature-params',
+    },
+};
+const algorithmDescriptors = {
+    [Algorithms.ed25519]: {
+        hash: undefined,
+        keyAlgorithm: 'Ed25519',
+        webCryptoAlgorithm: 'Ed25519',
+    },
+    [Algorithms.rsaPssSha512]: {
+        hash: 'SHA-512',
+        keyAlgorithm: 'RSA-PSS',
+        webCryptoAlgorithm: { name: 'RSA-PSS', saltLength: 64 },
+    },
+};
+/** Signs a request using the configured RFC 9421-derived component list. */
+export async function sign(request, options) {
+    const context = options.context ?? SigningContextInternal.create();
+    const created = context.created;
+    const expires = created + (options.expiresIn ?? 60);
+    const algorithm = algorithmFromKey(options.key);
+    const parameters = new Map([
+        ['created', created],
+        ['expires', expires],
+        ['keyid', options.keyId],
+        ['alg', algorithm],
+        ['nonce', context.nonce],
+        ['tag', options.tag],
+    ]);
+    const input = {
+        algorithm,
+        components: options.components.map(toComponent),
+        created,
+        expires,
+        keyId: options.keyId,
+        label: options.label,
+        nonce: context.nonce,
+        parameters,
+        tag: options.tag,
+    };
+    const signature = await crypto.subtle.sign(webCryptoAlgorithm(algorithm), options.key, toArrayBuffer(encode(signatureBase(request, input))));
+    const headers = new Headers(request.headers);
+    const inputs = parseHeaderDictionary(headers, AttestationHeaders.signatureInput);
+    const signatures = parseHeaderDictionary(headers, AttestationHeaders.signature);
+    if (!haveSameKeys(inputs, signatures))
+        throw new Error('Signature-Input and Signature must contain the same labels.');
+    if (inputs.has(input.label) || signatures.has(input.label))
+        throw new Error(`HTTP message signature label "${input.label}" already exists.`);
+    inputs.set(input.label, toInnerList(input));
+    signatures.set(input.label, [signature, new Map()]);
+    headers.set(AttestationHeaders.signatureInput, serializeDictionary(inputs));
+    headers.set(AttestationHeaders.signature, serializeDictionary(signatures));
+    return new Request(request, { headers });
+}
+/** Verifies a request signature, its lifetime, and optionally its nonce. */
+export async function verify(request, options) {
+    const parsed = parse(request, options.tag);
+    if (!parsed)
+        return { status: 'absent' };
+    if (parsed.reason)
+        return { status: 'invalid', reason: parsed.reason };
+    if (!parsed.input || !parsed.signature)
+        return { status: 'invalid', reason: 'The HTTP message signature is malformed.' };
+    const { input, signature } = parsed;
+    if (!options.requiredComponents.every((component) => hasComponent(input.components, component)))
+        return {
+            status: 'invalid',
+            reason: 'The signature does not cover the required request components.',
+        };
+    const now = Math.floor(Date.now() / 1000);
+    if (input.created > now || input.expires <= now || input.expires - input.created > options.maxAge)
+        return { status: 'invalid', reason: 'The signature is expired or has an invalid lifetime.' };
+    if (options.validate) {
+        const reason = options.validate(input, request);
+        if (reason)
+            return { status: 'invalid', reason };
+    }
+    let key;
+    try {
+        key = await options.keyResolver({
+            algorithm: input.algorithm,
+            keyId: input.keyId,
+            request,
+        });
+    }
+    catch {
+        return { status: 'unverified', reason: 'The public key could not be resolved.' };
+    }
+    if (!key)
+        return {
+            status: 'unverified',
+            reason: 'No public key is available for the signature key ID.',
+        };
+    if (!keySupportsAlgorithm(key, input.algorithm))
+        return {
+            status: 'invalid',
+            reason: 'The public key does not support the signature algorithm.',
+        };
+    if (options.validateKey) {
+        const reason = await options.validateKey(key, input, request);
+        if (reason)
+            return { status: 'invalid', reason };
+    }
+    let valid;
+    try {
+        valid = await crypto.subtle.verify(webCryptoAlgorithm(input.algorithm), key, toArrayBuffer(signature), toArrayBuffer(encode(signatureBase(request, input))));
+    }
+    catch {
+        valid = false;
+    }
+    if (!valid)
+        return { status: 'invalid', reason: 'The HTTP message signature is invalid.' };
+    try {
+        if (!(await Store.tryClaim(options.nonceStore, `${options.nonceNamespace}:${input.keyId}:${input.nonce}`, input.expires * 1000)))
+            return { status: 'invalid', reason: 'The signature nonce has already been used.' };
+    }
+    catch {
+        return { status: 'unverified', reason: 'Replay protection is unavailable.' };
+    }
+    return { status: 'verified', input };
+}
+function parse(request, expectedTag) {
+    const inputHeader = request.headers.get(AttestationHeaders.signatureInput);
+    const signatureHeader = request.headers.get(AttestationHeaders.signature);
+    if (!inputHeader && !signatureHeader)
+        return undefined;
+    if (!inputHeader || !signatureHeader)
+        return { reason: 'Signature-Input and Signature must both be provided.' };
+    let inputs;
+    let signatures;
+    try {
+        inputs = parseDictionary(inputHeader);
+        signatures = parseDictionary(signatureHeader);
+    }
+    catch {
+        return { reason: 'The HTTP message signature is malformed.' };
+    }
+    if (!haveSameKeys(inputs, signatures))
+        return { reason: 'Signature-Input and Signature do not contain the same labels.' };
+    const tags = new Set(typeof expectedTag === 'string' ? [expectedTag] : expectedTag);
+    for (const [label, entry] of inputs) {
+        if (!hasExpectedTag(entry, tags))
+            continue;
+        const input = toSignatureInput(label, entry);
+        if (!input)
+            return { reason: 'The HTTP message signature is malformed.' };
+        const signature = signatures.get(label);
+        if (!signature || isInnerList(signature) || !(signature[0] instanceof ArrayBuffer))
+            return { reason: 'No matching HTTP message signature was provided.' };
+        return { input, signature: new Uint8Array(signature[0]) };
+    }
+    return undefined;
+}
+function serializeInput(input) {
+    return serializeInnerList(toInnerList(input));
+}
+function toInnerList(input) {
+    const components = input.components.map((component) => [
+        component.id,
+        new Map(component.parameters),
+    ]);
+    return [components, new Map(input.parameters)];
+}
+function toSignatureInput(label, entry) {
+    const innerList = entry;
+    if (!isInnerList(innerList))
+        return undefined;
+    const [componentEntries, parameters] = innerList;
+    if (!componentEntries.length ||
+        !componentEntries.every(([component]) => typeof component === 'string'))
+        return undefined;
+    const components = componentEntries.map(([id, parameters]) => ({
+        id: id,
+        parameters,
+    }));
+    const created = parameters.get('created');
+    const expires = parameters.get('expires');
+    const algorithm = parameters.get('alg');
+    const keyId = parameters.get('keyid');
+    const nonce = parameters.get('nonce');
+    const tag = parameters.get('tag');
+    if (!isInteger(created) ||
+        !isInteger(expires) ||
+        !isSignatureAlgorithm(algorithm) ||
+        typeof keyId !== 'string' ||
+        typeof nonce !== 'string' ||
+        typeof tag !== 'string')
+        return undefined;
+    return {
+        algorithm,
+        components,
+        created,
+        expires,
+        keyId,
+        label,
+        nonce,
+        parameters,
+        tag,
+    };
+}
+function algorithmFromKey(key) {
+    for (const algorithm of Object.values(Algorithms))
+        if (keySupportsAlgorithm(key, algorithm))
+            return algorithm;
+    throw new TypeError('Request attestation requires an Ed25519 or RSA-PSS SHA-512 signing key.');
+}
+function isInteger(value) {
+    return typeof value === 'number' && Number.isInteger(value);
+}
+function isSignatureAlgorithm(value) {
+    return typeof value === 'string' && Object.hasOwn(algorithmDescriptors, value);
+}
+function keySupportsAlgorithm(key, algorithm) {
+    const { hash, keyAlgorithm } = algorithmDescriptors[algorithm];
+    return (key.algorithm.name === keyAlgorithm &&
+        (!hash || key.algorithm.hash.name === hash));
+}
+function webCryptoAlgorithm(algorithm) {
+    return algorithmDescriptors[algorithm].webCryptoAlgorithm;
+}
+function signatureBase(request, input) {
+    const lines = input.components.map((component) => `${serializeComponent(component)}: ${componentValue(request, component)}`);
+    lines.push(`"${Constants.components.signatureParams}": ${serializeInput(input)}`);
+    return lines.join('\n');
+}
+function componentValue(request, component) {
+    const url = new URL(request.url);
+    if (component.id === Constants.components.authority) {
+        if (component.parameters?.size)
+            throw new Error('Unsupported parameters for "@authority".');
+        return url.host;
+    }
+    if (component.id === Constants.components.path) {
+        if (component.parameters?.size)
+            throw new Error('Unsupported parameters for "@path".');
+        return url.pathname;
+    }
+    if (component.parameters?.size)
+        return componentDictionaryValue(request, component.id, component.parameters);
+    const value = request.headers.get(component.id);
+    if (value === null)
+        throw new Error(`Missing signed HTTP header "${component.id}".`);
+    // RFC 9421 signs the serialized field value, not a Unicode-normalized string.
+    if (!/^[\x20-\x7e]*$/.test(value))
+        throw new Error(`Signed HTTP header "${component.id}" is not ASCII.`);
+    return value;
+}
+function componentDictionaryValue(request, component, parameters) {
+    const key = parameters.get('key');
+    if (typeof key !== 'string' || parameters.size !== 1)
+        throw new Error(`Unsupported parameters for signed HTTP header "${component}".`);
+    const value = request.headers.get(component);
+    if (value === null)
+        throw new Error(`Missing signed HTTP header "${component}".`);
+    let dictionary;
+    try {
+        dictionary = parseDictionary(value);
+    }
+    catch {
+        throw new Error(`Signed HTTP header "${component}" is not a structured dictionary.`);
+    }
+    const member = dictionary.get(key);
+    if (!member || isInnerList(member))
+        throw new Error(`Signed HTTP header "${component}" has no member "${key}".`);
+    return serializeItem(member);
+}
+function hasComponent(components, expected) {
+    return components.some((component) => component.id === expected);
+}
+function haveSameKeys(left, right) {
+    return left.size === right.size && [...left.keys()].every((key) => right.has(key));
+}
+function hasExpectedTag(entry, tags) {
+    const value = entry;
+    if (!isInnerList(value))
+        return false;
+    const tag = value[1].get('tag');
+    return typeof tag === 'string' && tags.has(tag);
+}
+function serializeComponent(component) {
+    return `"${component.id}"${component.parameters?.size ? serializeParameters(new Map(component.parameters)) : ''}`;
+}
+function toComponent(component) {
+    return typeof component === 'string'
+        ? { id: component }
+        : { id: component.id, parameters: component.parameters && new Map(component.parameters) };
+}
+function parseHeaderDictionary(headers, name) {
+    const value = headers.get(name);
+    if (!value)
+        return new Map();
+    try {
+        return parseDictionary(value);
+    }
+    catch {
+        throw new Error(`HTTP header "${name}" is not a structured dictionary.`);
+    }
+}
+function encode(value) {
+    return new TextEncoder().encode(value);
+}
+function toArrayBuffer(value) {
+    return value.buffer.slice(value.byteOffset, value.byteOffset + value.byteLength);
+}
+//# sourceMappingURL=HttpMessageSignature.js.map

package/dist/attestation/internal/HttpMessageSignature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"HttpMessageSignature.js","sourceRoot":"","sources":["../../../src/attestation/internal/HttpMessageSignature.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,WAAW,EACX,eAAe,EACf,aAAa,EACb,mBAAmB,EACnB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,oBAAoB,CAAA;AAI3B,OAAO,KAAK,KAAK,MAAM,gBAAgB,CAAA;AACvC,OAAO,EAAE,UAAU,EAAE,OAAO,IAAI,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AAE3E,OAAO,KAAK,sBAAsB,MAAM,qBAAqB,CAAA;AAE7D,yEAAyE;AACzE,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,2EAA2E;IAC3E,UAAU,EAAE;QACV,4CAA4C;QAC5C,SAAS,EAAE,YAAY;QACvB,qDAAqD;QACrD,IAAI,EAAE,OAAO;QACb,uDAAuD;QACvD,cAAc,EAAE,iBAAiB;QACjC,uEAAuE;QACvE,eAAe,EAAE,mBAAmB;KACrC;CACO,CAAA;AAEV,MAAM,oBAAoB,GAAG;IAC3B,CAAC,UAAU,CAAC,OAAO,CAAC,EAAE;QACpB,IAAI,EAAE,SAAS;QACf,YAAY,EAAE,SAAS;QACvB,kBAAkB,EAAE,SAAS;KAC9B;IACD,CAAC,UAAU,CAAC,YAAY,CAAC,EAAE;QACzB,IAAI,EAAE,SAAS;QACf,YAAY,EAAE,SAAS;QACvB,kBAAkB,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,UAAU,EAAE,EAAE,EAAE;KACxD;CAQF,CAAA;AAgCD,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,OAAgB,EAChB,OAQC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,sBAAsB,CAAC,MAAM,EAAE,CAAA;IAClE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAA;IAC/B,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC,CAAA;IACnD,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAmB;QAC3C,CAAC,SAAS,EAAE,OAAO,CAAC;QACpB,CAAC,SAAS,EAAE,OAAO,CAAC;QACpB,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC;QACxB,CAAC,KAAK,EAAE,SAAS,CAAC;QAClB,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC;QACxB,CAAC,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC;KACrB,CAAC,CAAA;IACF,MAAM,KAAK,GAAmB;QAC5B,SAAS;QACT,UAAU,EAAE,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC,WAAW,CAAC;QAC/C,OAAO;QACP,OAAO;QACP,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,UAAU;QACV,GAAG,EAAE,OAAO,CAAC,GAAG;KACjB,CAAA;IACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACxC,kBAAkB,CAAC,SAAS,CAAC,EAC7B,OAAO,CAAC,GAAG,EACX,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CACrD,CAAA;IACD,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC5C,MAAM,MAAM,GAAG,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,CAAC,cAAc,CAAC,CAAA;IAChF,MAAM,UAAU,GAAG,qBAAqB,CAAC,OAAO,EAAE,kBAAkB,CAAC,SAAS,CAAC,CAAA;IAC/E,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,6DAA6D,CAAC,CAAA;IAChF,IAAI,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC;QACxD,MAAM,IAAI,KAAK,CAAC,iCAAiC,KAAK,CAAC,KAAK,mBAAmB,CAAC,CAAA;IAClF,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;IAC3C,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC,SAAS,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC,CAAA;IACnD,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,cAAc,EAAE,mBAAmB,CAAC,MAAM,CAAC,CAAC,CAAA;IAC3E,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,SAAS,EAAE,mBAAmB,CAAC,UAAU,CAAC,CAAC,CAAA;IAC1E,OAAO,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,CAAC,CAAA;AAC1C,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,KAAK,UAAU,MAAM,CAC1B,OAAgB,EAChB,OAeC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,CAAA;IAC1C,IAAI,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAA;IACxC,IAAI,MAAM,CAAC,MAAM;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAA;IACtE,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,SAAS;QACpC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAA;IAClF,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,MAAM,CAAA;IAEnC,IAAI,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAC7F,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,+DAA+D;SACxE,CAAA;IACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;IACzC,IAAI,KAAK,CAAC,OAAO,GAAG,GAAG,IAAI,KAAK,CAAC,OAAO,IAAI,GAAG,IAAI,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM;QAC/F,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAA;IAC9F,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACrB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC,CAAA;QAC/C,IAAI,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;IAClD,CAAC;IACD,IAAI,GAA0B,CAAA;IAC9B,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC;YAC9B,SAAS,EAAE,KAAK,CAAC,SAAS;YAC1B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO;SACR,CAAC,CAAA;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,uCAAuC,EAAE,CAAA;IAClF,CAAC;IACD,IAAI,CAAC,GAAG;QACN,OAAO;YACL,MAAM,EAAE,YAAY;YACpB,MAAM,EAAE,sDAAsD;SAC/D,CAAA;IACH,IAAI,CAAC,oBAAoB,CAAC,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC;QAC7C,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,0DAA0D;SACnE,CAAA;IACH,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,OAAO,CAAC,CAAA;QAC7D,IAAI,MAAM;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAA;IAClD,CAAC;IACD,IAAI,KAAc,CAAA;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAChC,kBAAkB,CAAC,KAAK,CAAC,SAAS,CAAC,EACnC,GAAG,EACH,aAAa,CAAC,SAAS,CAAC,EACxB,aAAa,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CACrD,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,KAAK,GAAG,KAAK,CAAA;IACf,CAAC;IACD,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,wCAAwC,EAAE,CAAA;IAC1F,IAAI,CAAC;QACH,IACE,CAAC,CAAC,MAAM,KAAK,CAAC,QAAQ,CACpB,OAAO,CAAC,UAAU,EAClB,GAAG,OAAO,CAAC,cAAc,IAAI,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,KAAK,EAAE,EACzD,KAAK,CAAC,OAAO,GAAG,IAAI,CACrB,CAAC;YAEF,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,4CAA4C,EAAE,CAAA;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,EAAE,mCAAmC,EAAE,CAAA;IAC9E,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAA;AACtC,CAAC;AAED,SAAS,KAAK,CACZ,OAAgB,EAChB,WAAuC;IAEvC,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,cAAc,CAAC,CAAA;IAC1E,MAAM,eAAe,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,SAAS,CAAC,CAAA;IACzE,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe;QAAE,OAAO,SAAS,CAAA;IACtD,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe;QAClC,OAAO,EAAE,MAAM,EAAE,sDAAsD,EAAE,CAAA;IAC3E,IAAI,MAAkB,CAAA;IACtB,IAAI,UAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,CAAA;QACrC,UAAU,GAAG,eAAe,CAAC,eAAe,CAAC,CAAA;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAA;IAC/D,CAAC;IACD,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,CAAC;QACnC,OAAO,EAAE,MAAM,EAAE,+DAA+D,EAAE,CAAA;IACpF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAA;IACnF,KAAK,MAAM,CAAC,KAAK,EAAE,KAAK,CAAC,IAAI,MAAM,EAAE,CAAC;QACpC,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC;YAAE,SAAQ;QAC1C,MAAM,KAAK,GAAG,gBAAgB,CAAC,KAAK,EAAE,KAAK,CAAC,CAAA;QAC5C,IAAI,CAAC,KAAK;YAAE,OAAO,EAAE,MAAM,EAAE,0CAA0C,EAAE,CAAA;QACzE,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;QACvC,IAAI,CAAC,SAAS,IAAI,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,WAAW,CAAC;YAChF,OAAO,EAAE,MAAM,EAAE,kDAAkD,EAAE,CAAA;QACvE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC3D,CAAC;IACD,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,SAAS,cAAc,CAAC,KAAqB;IAC3C,OAAO,kBAAkB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAA;AAC/C,CAAC;AAED,SAAS,WAAW,CAAC,KAAqB;IACxC,MAAM,UAAU,GAAiB,KAAK,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC;QACnE,SAAS,CAAC,EAAE;QACZ,IAAI,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC;KAC9B,CAAC,CAAA;IACF,OAAO,CAAC,UAAU,EAAE,IAAI,GAAG,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAA;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAE,KAAc;IACrD,MAAM,SAAS,GAAG,KAAkB,CAAA;IACpC,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC;QAAE,OAAO,SAAS,CAAA;IAC7C,MAAM,CAAC,gBAAgB,EAAE,UAAU,CAAC,GAAG,SAAS,CAAA;IAChD,IACE,CAAC,gBAAgB,CAAC,MAAM;QACxB,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,EAAE,CAAC,OAAO,SAAS,KAAK,QAAQ,CAAC;QAEvE,OAAO,SAAS,CAAA;IAClB,MAAM,UAAU,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7D,EAAE,EAAE,EAAY;QAChB,UAAU;KACX,CAAC,CAAC,CAAA;IACH,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACzC,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IACzC,MAAM,SAAS,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACvC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACrC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACjC,IACE,CAAC,SAAS,CAAC,OAAO,CAAC;QACnB,CAAC,SAAS,CAAC,OAAO,CAAC;QACnB,CAAC,oBAAoB,CAAC,SAAS,CAAC;QAChC,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAO,GAAG,KAAK,QAAQ;QAEvB,OAAO,SAAS,CAAA;IAClB,OAAO;QACL,SAAS;QACT,UAAU;QACV,OAAO;QACP,OAAO;QACP,KAAK;QACL,KAAK;QACL,KAAK;QACL,UAAU;QACV,GAAG;KACJ,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAc;IACtC,KAAK,MAAM,SAAS,IAAI,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC;QAC/C,IAAI,oBAAoB,CAAC,GAAG,EAAE,SAAS,CAAC;YAAE,OAAO,SAAS,CAAA;IAC5D,MAAM,IAAI,SAAS,CAAC,yEAAyE,CAAC,CAAA;AAChG,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,CAAA;AAC7D,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,oBAAoB,EAAE,KAAK,CAAC,CAAA;AAChF,CAAC;AAED,SAAS,oBAAoB,CAAC,GAAc,EAAE,SAA6B;IACzE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,oBAAoB,CAAC,SAAS,CAAC,CAAA;IAC9D,OAAO,CACL,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,YAAY;QACnC,CAAC,CAAC,IAAI,IAAK,GAAG,CAAC,SAAmC,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CACvE,CAAA;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,SAA6B;IACvD,OAAO,oBAAoB,CAAC,SAAS,CAAC,CAAC,kBAAkB,CAAA;AAC3D,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB,EAAE,KAAqB;IAC5D,MAAM,KAAK,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,CAChC,CAAC,SAAS,EAAE,EAAE,CAAC,GAAG,kBAAkB,CAAC,SAAS,CAAC,KAAK,cAAc,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,CACzF,CAAA;IACD,KAAK,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,UAAU,CAAC,eAAe,MAAM,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;IACjF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;AACzB,CAAC;AAED,SAAS,cAAc,CAAC,OAAgB,EAAE,SAAoB;IAC5D,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,SAAS,CAAC,EAAE,KAAK,SAAS,CAAC,UAAU,CAAC,SAAS,EAAE,CAAC;QACpD,IAAI,SAAS,CAAC,UAAU,EAAE,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAA;QAC3F,OAAO,GAAG,CAAC,IAAI,CAAA;IACjB,CAAC;IACD,IAAI,SAAS,CAAC,EAAE,KAAK,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;QAC/C,IAAI,SAAS,CAAC,UAAU,EAAE,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;QACtF,OAAO,GAAG,CAAC,QAAQ,CAAA;IACrB,CAAC;IACD,IAAI,SAAS,CAAC,UAAU,EAAE,IAAI;QAC5B,OAAO,wBAAwB,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,EAAE,SAAS,CAAC,UAAU,CAAC,CAAA;IAC9E,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC,CAAA;IAC/C,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,SAAS,CAAC,EAAE,IAAI,CAAC,CAAA;IACpF,8EAA8E;IAC9E,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,KAAK,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,CAAC,EAAE,iBAAiB,CAAC,CAAA;IACvE,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,wBAAwB,CAC/B,OAAgB,EAChB,SAAiB,EACjB,UAAyC;IAEzC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,KAAK,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,kDAAkD,SAAS,IAAI,CAAC,CAAA;IAClF,MAAM,KAAK,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,CAAA;IAC5C,IAAI,KAAK,KAAK,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,SAAS,IAAI,CAAC,CAAA;IACjF,IAAI,UAAsB,CAAA;IAC1B,IAAI,CAAC;QACH,UAAU,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACrC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,mCAAmC,CAAC,CAAA;IACtF,CAAC;IACD,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;IAClC,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,MAAM,CAAC;QAChC,MAAM,IAAI,KAAK,CAAC,uBAAuB,SAAS,oBAAoB,GAAG,IAAI,CAAC,CAAA;IAC9E,OAAO,aAAa,CAAC,MAAM,CAAC,CAAA;AAC9B,CAAC;AAED,SAAS,YAAY,CAAC,UAAgC,EAAE,QAAgB;IACtE,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAA;AAClE,CAAC;AAED,SAAS,YAAY,CAAC,IAAgB,EAAE,KAAiB;IACvD,OAAO,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,IAAI,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAA;AACpF,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAyB;IAC/D,MAAM,KAAK,GAAG,KAAyB,CAAA;IACvC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrC,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;IAC/B,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;AACjD,CAAC;AAED,SAAS,kBAAkB,CAAC,SAAoB;IAC9C,OAAO,IAAI,SAAS,CAAC,EAAE,IAAI,SAAS,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AACnH,CAAC;AAED,SAAS,WAAW,CAAC,SAAyB;IAC5C,OAAO,OAAO,SAAS,KAAK,QAAQ;QAClC,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE;QACnB,CAAC,CAAC,EAAE,EAAE,EAAE,SAAS,CAAC,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,UAAU,IAAI,IAAI,GAAG,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAA;AAC7F,CAAC;AAED,SAAS,qBAAqB,CAAC,OAAgB,EAAE,IAAY;IAC3D,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAA;IAC/B,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,GAAG,EAAE,CAAA;IAC5B,IAAI,CAAC;QACH,OAAO,eAAe,CAAC,KAAK,CAAC,CAAA;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gBAAgB,IAAI,mCAAmC,CAAC,CAAA;IAC1E,CAAC;AACH,CAAC;AAED,SAAS,MAAM,CAAC,KAAa;IAC3B,OAAO,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;AACxC,CAAC;AAED,SAAS,aAAa,CAAC,KAAiB;IACtC,OAAO,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAgB,CAAA;AACjG,CAAC"}

package/dist/attestation/internal/SigningContext.d.ts

@@ -0,0 +1,4 @@
+import type * as Types from '../Types.js';
+/** Creates the signing context for one outbound HTTP request attempt. */
+export declare function create(): Types.SigningContext;
+//# sourceMappingURL=SigningContext.d.ts.map

package/dist/attestation/internal/SigningContext.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"SigningContext.d.ts","sourceRoot":"","sources":["../../../src/attestation/internal/SigningContext.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,KAAK,KAAK,MAAM,aAAa,CAAA;AAEzC,yEAAyE;AACzE,wBAAgB,MAAM,IAAI,KAAK,CAAC,cAAc,CAO7C"}

package/dist/attestation/internal/SigningContext.js

@@ -0,0 +1,11 @@
+import { Base64 } from 'ox';
+/** Creates the signing context for one outbound HTTP request attempt. */
+export function create() {
+    const bytes = new Uint8Array(64);
+    crypto.getRandomValues(bytes);
+    return Object.freeze({
+        created: Math.floor(Date.now() / 1_000),
+        nonce: Base64.fromBytes(bytes, { pad: false, url: true }),
+    });
+}
+//# sourceMappingURL=SigningContext.js.map

package/dist/attestation/internal/SigningContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"SigningContext.js","sourceRoot":"","sources":["../../../src/attestation/internal/SigningContext.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAA;AAI3B,yEAAyE;AACzE,MAAM,UAAU,MAAM;IACpB,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,EAAE,CAAC,CAAA;IAChC,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAA;IAC7B,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;QACvC,KAAK,EAAE,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC;KAC1D,CAAC,CAAA;AACJ,CAAC"}

package/dist/cli/account.d.ts

@@ -30,12 +30,12 @@ export declare function resolveLocalAccount(name?: string): Promise<{
         signTransaction: <serializer extends import("viem").SerializeTransactionFn<import("viem").TransactionSerializable> = import("viem").SerializeTransactionFn<import("viem").TransactionSerializable>, transaction extends Parameters<serializer>[0] = Parameters<serializer>[0]>(transaction: transaction, options?: {
             serializer?: serializer | undefined;
         } | undefined) => Promise<import("viem").Hex>;
-        signTypedData: <const typedData extends import("viem").TypedData | Record<string, unknown>, primaryType extends keyof typedData | "EIP712Domain" = keyof typedData>(parameters: import("viem").TypedDataDefinition<typedData, primaryType>) => Promise<import("viem").Hex>;
+        signTypedData: <const typedData extends import("viem").TypedData | Record<string, unknown>, primaryType extends keyof typedData | 'EIP712Domain' = keyof typedData>(parameters: import("viem").TypedDataDefinition<typedData, primaryType>) => Promise<import("viem").Hex>;
         publicKey: import("viem").Hex;
         source: "privateKey";
-        type: "local";
+        type: 'local';
     };
-    source: "environment";
+    source: 'environment';
     accountName?: undefined;
 } | {
     account: {
@@ -51,13 +51,13 @@ export declare function resolveLocalAccount(name?: string): Promise<{
         signTransaction: <serializer extends import("viem").SerializeTransactionFn<import("viem").TransactionSerializable> = import("viem").SerializeTransactionFn<import("viem").TransactionSerializable>, transaction extends Parameters<serializer>[0] = Parameters<serializer>[0]>(transaction: transaction, options?: {
             serializer?: serializer | undefined;
         } | undefined) => Promise<import("viem").Hex>;
-        signTypedData: <const typedData extends import("viem").TypedData | Record<string, unknown>, primaryType extends keyof typedData | "EIP712Domain" = keyof typedData>(parameters: import("viem").TypedDataDefinition<typedData, primaryType>) => Promise<import("viem").Hex>;
+        signTypedData: <const typedData extends import("viem").TypedData | Record<string, unknown>, primaryType extends keyof typedData | 'EIP712Domain' = keyof typedData>(parameters: import("viem").TypedDataDefinition<typedData, primaryType>) => Promise<import("viem").Hex>;
         publicKey: import("viem").Hex;
         source: "privateKey";
-        type: "local";
+        type: 'local';
     };
     accountName: string;
-    source: "keychain";
+    source: 'keychain';
 }>;
 /** Resolves an account supported by persistent CLI sessions. */
 export declare function resolvePersistentAccount(name?: string): Promise<{
@@ -74,12 +74,12 @@ export declare function resolvePersistentAccount(name?: string): Promise<{
         signTransaction: <serializer extends import("viem").SerializeTransactionFn<import("viem").TransactionSerializable> = import("viem").SerializeTransactionFn<import("viem").TransactionSerializable>, transaction extends Parameters<serializer>[0] = Parameters<serializer>[0]>(transaction: transaction, options?: {
             serializer?: serializer | undefined;
         } | undefined) => Promise<import("viem").Hex>;
-        signTypedData: <const typedData extends import("viem").TypedData | Record<string, unknown>, primaryType extends keyof typedData | "EIP712Domain" = keyof typedData>(parameters: import("viem").TypedDataDefinition<typedData, primaryType>) => Promise<import("viem").Hex>;
+        signTypedData: <const typedData extends import("viem").TypedData | Record<string, unknown>, primaryType extends keyof typedData | 'EIP712Domain' = keyof typedData>(parameters: import("viem").TypedDataDefinition<typedData, primaryType>) => Promise<import("viem").Hex>;
         publicKey: import("viem").Hex;
         source: "privateKey";
-        type: "local";
+        type: 'local';
     };
-    source: "environment";
+    source: 'environment';
     accountName?: undefined;
 } | {
     account: {
@@ -95,13 +95,13 @@ export declare function resolvePersistentAccount(name?: string): Promise<{
         signTransaction: <serializer extends import("viem").SerializeTransactionFn<import("viem").TransactionSerializable> = import("viem").SerializeTransactionFn<import("viem").TransactionSerializable>, transaction extends Parameters<serializer>[0] = Parameters<serializer>[0]>(transaction: transaction, options?: {
             serializer?: serializer | undefined;
         } | undefined) => Promise<import("viem").Hex>;
-        signTypedData: <const typedData extends import("viem").TypedData | Record<string, unknown>, primaryType extends keyof typedData | "EIP712Domain" = keyof typedData>(parameters: import("viem").TypedDataDefinition<typedData, primaryType>) => Promise<import("viem").Hex>;
+        signTypedData: <const typedData extends import("viem").TypedData | Record<string, unknown>, primaryType extends keyof typedData | 'EIP712Domain' = keyof typedData>(parameters: import("viem").TypedDataDefinition<typedData, primaryType>) => Promise<import("viem").Hex>;
         publicKey: import("viem").Hex;
         source: "privateKey";
-        type: "local";
+        type: 'local';
     };
     accountName: string;
-    source: "keychain";
+    source: 'keychain';
 }>;
 /**
  * Resolve a CLI account to a viem `LocalAccount`.
@@ -133,9 +133,9 @@ export declare function resolveAccount(name?: string): Promise<{
     signTransaction: <serializer extends import("viem").SerializeTransactionFn<import("viem").TransactionSerializable> = import("viem").SerializeTransactionFn<import("viem").TransactionSerializable>, transaction extends Parameters<serializer>[0] = Parameters<serializer>[0]>(transaction: transaction, options?: {
         serializer?: serializer | undefined;
     } | undefined) => Promise<import("viem").Hex>;
-    signTypedData: <const typedData extends import("viem").TypedData | Record<string, unknown>, primaryType extends keyof typedData | "EIP712Domain" = keyof typedData>(parameters: import("viem").TypedDataDefinition<typedData, primaryType>) => Promise<import("viem").Hex>;
+    signTypedData: <const typedData extends import("viem").TypedData | Record<string, unknown>, primaryType extends keyof typedData | 'EIP712Domain' = keyof typedData>(parameters: import("viem").TypedDataDefinition<typedData, primaryType>) => Promise<import("viem").Hex>;
     publicKey: import("viem").Hex;
     source: "privateKey";
-    type: "local";
+    type: 'local';
 }>;
 //# sourceMappingURL=account.d.ts.map

package/dist/cli/account.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../src/cli/account.ts"],"names":[],"mappings":"AAqCA,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAA;CAAE,CAAC,CAMlE;AAED,wBAAgB,kBAAkB;WAOvB,MAAM;eAOF,MAAM,GAAG,IAAI;aAIf,IAAI;EAMhB;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAI5D;AAGD,wBAAgB,cAAc,CAAC,OAAO,SAAS;YAG7B,OAAO,CAAC,MAAM,EAAE,CAAC;WAgClB,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;eA0BvB,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;cA2CvB,OAAO,CAAC,IAAI,CAAC;EAoBhC;AAED,+EAA+E;AAC/E,wBAAsB,mBAAmB,CAAC,IAAI,CAAC,EAAE,MAAM;;;;;;;;;;;wTA/JtC,CAAC;sBACV,CAAC;;;;;;;;;;;;;;;;;;;;wTADQ,CAAC;sBACV,CAAC;;;;;;;;;GAkLR;AAED,gEAAgE;AAChE,wBAAsB,wBAAwB,CAAC,IAAI,CAAC,EAAE,MAAM;;;;;;;;;;;wTAtL3C,CAAC;sBACV,CAAC;;;;;;;;;;;;;;;;;;;;wTADQ,CAAC;sBACV,CAAC;;;;;;;;;GAqMR;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM;;;;;;;;;;oTAzNjC,CAAC;kBACV,CAAC;;;;;;GA0NR"}
+{"version":3,"file":"account.d.ts","sourceRoot":"","sources":["../../src/cli/account.ts"],"names":[],"mappings":"AAqCA,wBAAgB,WAAW,CACzB,OAAO,EAAE,MAAM,EACf,IAAI,EAAE,MAAM,EAAE,GACb,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,KAAK,GAAG,IAAI,CAAA;CAAE,CAAC,CAMlE;AAED,wBAAgB,kBAAkB;IAO9B,GAAG,IAAI,MAAM;IAOb,GAAG,QAAQ,MAAM,GAAG,IAAI;IAIxB,KAAK,IAAI,IAAI;EAMhB;AAED,wBAAgB,kBAAkB,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAI5D;AAGD,wBAAgB,cAAc,CAAC,OAAO,SAAS;IAGrC,IAAI,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;IAgCzB,GAAG,IAAI,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;IA0BlC,GAAG,QAAQ,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IA2CjC,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC;EAoBhC;AAED,+EAA+E;AAC/E,wBAAsB,mBAAmB,CAAC,IAAI,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;YAOzC,aAAa;;;;;;;;;;;;;;;;;;;;;;YASb,UAAU;GAIvB;AAED,gEAAgE;AAChE,wBAAsB,wBAAwB,CAAC,IAAI,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;;;YAhB9C,aAAa;;;;;;;;;;;;;;;;;;;;;;YASb,UAAU;GAuBvB;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,cAAc,CAAC,IAAI,CAAC,EAAE,MAAM;;;;;;;;;;;;;;;;;GAEjD"}

package/dist/cli/cli.d.ts

@@ -5,14 +5,10 @@ declare const cli: Cli.Cli<{
             url: string;
         };
         options: {
-            confirm: boolean;
-            session: string;
-            silent: boolean;
-            userAgent: string;
-            verbose: number;
             account?: string | undefined;
             autoSwap?: boolean | undefined;
             config?: string | undefined;
+            confirm: boolean;
             currency?: string | undefined;
             data?: string | undefined;
             fail?: boolean | undefined;
@@ -23,10 +19,14 @@ declare const cli: Cli.Cli<{
             location?: boolean | undefined;
             method?: string | undefined;
             methodOpt?: string[] | undefined;
-            network?: "testnet" | "mainnet" | undefined;
+            network?: "mainnet" | "testnet" | undefined;
             payWith?: string | undefined;
             rpcUrl?: string | undefined;
+            session: string;
+            silent: boolean;
             slippage?: number | undefined;
+            userAgent: string;
+            verbose: number;
         };
     };
 }, undefined, undefined, undefined>;

package/dist/cli/cli.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/cli/cli.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,EAAa,MAAM,OAAO,CAAA;AAiNtC,QAAA,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAgiBP,CAAA;AA23BF,eAAe,GAAG,CAAA"}
+{"version":3,"file":"cli.d.ts","sourceRoot":"","sources":["../../src/cli/cli.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,GAAG,EAAa,MAAM,OAAO,CAAA;AAiNtC,QAAA,MAAM,GAAG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;mCAiiBP,CAAA;eA23Ba,GAAG"}

package/dist/cli/cli.js

@@ -151,6 +151,7 @@ function findService(services, id) {
     });
 }
 const cli = Cli.create('mppx', {
+    mcp: { tools: { discovery: 'direct' } },
     version: packageJson.version,
     description: 'Make HTTP requests with automatic payment handling',
     usage: [{ suffix: '<url> [options]' }],