ox 1.0.4 → 1.1.0

package/dist/core/internal/engine.d.ts

@@ -0,0 +1,278 @@
+/**
+ * Engine slot contracts and the override registry.
+ *
+ * This module intentionally has **no imports**. It is pulled into the module
+ * graph of every crypto module in ox, so it must not drag any dependency along
+ * with it. That constraint is also why the contracts speak raw `Uint8Array`
+ * rather than `Bytes.Bytes`/`Hex.Hex` -- coercion stays in the public module,
+ * and the engine boundary is plain bytes in, plain bytes out.
+ *
+ * The registry holds **overrides only**. Defaults are never registered here,
+ * because a registered default has to live on a complete slot object, and a
+ * slot object is a single reachable value: esbuild cannot drop the properties
+ * of one, so every default's `@noble/*` import survives into every bundle that
+ * touches the slot. Measured on a keccak256-only bundle, that costs 5 kB gzip.
+ * Instead each slot has a resolver module under `internal/` holding one binding
+ * per primitive, and the fallback is chosen there, per primitive.
+ *
+ * @internal
+ */
+/**
+ * Hash primitives. One-shot, synchronous, bytes in / bytes out.
+ *
+ * @internal
+ */
+export type Hash = {
+    /** BLAKE3, 32-byte digest. */
+    blake3?: ((input: Uint8Array) => Uint8Array) | undefined;
+    /** HMAC-SHA256. */
+    hmacSha256?: ((key: Uint8Array, message: Uint8Array) => Uint8Array) | undefined;
+    /** Keccak256 (not FIPS-202 SHA3-256). */
+    keccak256?: ((input: Uint8Array) => Uint8Array) | undefined;
+    /** RIPEMD-160. */
+    ripemd160?: ((input: Uint8Array) => Uint8Array) | undefined;
+    /** SHA-256. */
+    sha256?: ((input: Uint8Array) => Uint8Array) | undefined;
+};
+/**
+ * Short-Weierstrass ECDSA. Shared by the `Secp256k1` and `P256` slots.
+ *
+ * Signatures are always low-S normalized and always returned in 65-byte
+ * recovered form -- the contract mandates it, so an engine cannot silently opt
+ * out.
+ *
+ * @internal
+ */
+export type Ecdsa = {
+    /** Derives an uncompressed (65-byte) public key. */
+    getPublicKey?: ((privateKey: Uint8Array) => Uint8Array) | undefined;
+    /**
+     * Computes a compressed (33-byte) ECDH shared secret.
+     *
+     * `publicKey` arrives in whichever SEC1 form the caller supplied, so an
+     * implementation has to accept both the compressed 33-byte and uncompressed
+     * 65-byte encodings.
+     */
+    getSharedSecret?: ((privateKey: Uint8Array, publicKey: Uint8Array) => Uint8Array) | undefined;
+    /**
+     * Recovers an uncompressed public key from a 65-byte `yParity || r || s`
+     * signature, the same layout {@link Ecdsa.sign} returns.
+     */
+    recoverPublicKey?: ((signature: Uint8Array, payload: Uint8Array) => Uint8Array) | undefined;
+    /** Generates a random private key. */
+    randomSecretKey?: (() => Uint8Array) | undefined;
+    /** Signs a payload, returning 65 bytes of `yParity || r || s`. */
+    sign?: ((payload: Uint8Array, privateKey: Uint8Array, options: {
+        /** Extra entropy for hedged signing, or `true` for random. */
+        extraEntropy: boolean | Uint8Array;
+        /** Whether to hash the payload before signing. */
+        prehash: boolean;
+    }) => Uint8Array) | undefined;
+    /** Verifies a 64-byte compact (`r || s`) signature. */
+    verify?: ((signature: Uint8Array, payload: Uint8Array, publicKey: Uint8Array, options: {
+        /** Whether to hash the payload before verifying. */
+        prehash: boolean;
+    }) => boolean) | undefined;
+};
+/**
+ * Edwards-curve signatures (Ed25519).
+ *
+ * @internal
+ */
+export type Eddsa = {
+    /** Derives a 32-byte public key. */
+    getPublicKey?: ((privateKey: Uint8Array) => Uint8Array) | undefined;
+    /** Generates a random private key. */
+    randomSecretKey?: (() => Uint8Array) | undefined;
+    /** Signs a payload, returning a 64-byte signature. */
+    sign?: ((payload: Uint8Array, privateKey: Uint8Array) => Uint8Array) | undefined;
+    /** Converts an Ed25519 public key to its X25519 (Montgomery) form. */
+    toMontgomery?: ((publicKey: Uint8Array) => Uint8Array) | undefined;
+    /** Converts an Ed25519 private key to its X25519 (Montgomery) form. */
+    toMontgomerySecret?: ((privateKey: Uint8Array) => Uint8Array) | undefined;
+    /** Verifies a 64-byte signature. */
+    verify?: ((signature: Uint8Array, payload: Uint8Array, publicKey: Uint8Array) => boolean) | undefined;
+};
+/**
+ * Montgomery-curve key agreement (X25519).
+ *
+ * @internal
+ */
+export type Ecdh = {
+    /** Derives a 32-byte public key. */
+    getPublicKey?: ((privateKey: Uint8Array) => Uint8Array) | undefined;
+    /** Computes a 32-byte shared secret. */
+    getSharedSecret?: ((privateKey: Uint8Array, publicKey: Uint8Array) => Uint8Array) | undefined;
+    /** Generates a random private key. */
+    randomSecretKey?: (() => Uint8Array) | undefined;
+};
+/**
+ * Key derivation and symmetric primitives used by keystores.
+ *
+ * The `*Async` functions resolve independently of their synchronous twins --
+ * an engine that supplies only `scrypt` leaves `scryptAsync` on the default
+ * implementation, because wrapping a long synchronous call in a promise is
+ * worse than a genuinely yielding one.
+ *
+ * @internal
+ */
+export type Keystore = {
+    /** AES-CTR decryption (key length selects AES-128/192/256). */
+    aesCtrDecrypt?: ((key: Uint8Array, iv: Uint8Array, data: Uint8Array) => Uint8Array) | undefined;
+    /** AES-CTR encryption (key length selects AES-128/192/256). */
+    aesCtrEncrypt?: ((key: Uint8Array, iv: Uint8Array, data: Uint8Array) => Uint8Array) | undefined;
+    /** PBKDF2-HMAC-SHA256. */
+    pbkdf2Sha256?: ((password: Uint8Array, salt: Uint8Array, options: {
+        c: number;
+        dkLen: number;
+    }) => Uint8Array) | undefined;
+    /** Asynchronous PBKDF2-HMAC-SHA256. */
+    pbkdf2Sha256Async?: ((password: Uint8Array, salt: Uint8Array, options: {
+        c: number;
+        dkLen: number;
+    }) => Promise<Uint8Array>) | undefined;
+    /** scrypt. */
+    scrypt?: ((password: Uint8Array, salt: Uint8Array, options: {
+        N: number;
+        dkLen: number;
+        p: number;
+        r: number;
+    }) => Uint8Array) | undefined;
+    /** Asynchronous scrypt. */
+    scryptAsync?: ((password: Uint8Array, salt: Uint8Array, options: {
+        N: number;
+        dkLen: number;
+        p: number;
+        r: number;
+    }) => Promise<Uint8Array>) | undefined;
+};
+/**
+ * BIP-39 seed derivation (PBKDF2-HMAC-SHA512, 2048 iterations).
+ *
+ * Mnemonic generation, validation, and the wordlists themselves are plain data
+ * and string handling, so they are not part of the engine boundary.
+ *
+ * @internal
+ */
+export type Mnemonic = {
+    /** Derives a 64-byte seed from a mnemonic phrase and optional passphrase. */
+    toSeed?: ((mnemonic: string, passphrase?: string) => Uint8Array) | undefined;
+};
+/**
+ * BLS12-381 operations.
+ *
+ * Points cross this boundary in their compressed serialized form (48 bytes for
+ * G1, 96 for G2), never as projective coordinate triples -- an engine backed by
+ * a native library cannot be expected to reproduce another library's internal
+ * point representation.
+ *
+ * @internal
+ */
+export type Bls = {
+    /** Aggregates compressed points of the same group. */
+    aggregate?: ((points: readonly Uint8Array[], group: 'G1' | 'G2') => Uint8Array) | undefined;
+    /** Derives a compressed public key in the given group. */
+    getPublicKey?: ((privateKey: Uint8Array, group: 'G1' | 'G2') => Uint8Array) | undefined;
+    /** Generates a random private key. */
+    randomSecretKey?: (() => Uint8Array) | undefined;
+    /** Signs a payload, returning a compressed point in the opposite group. */
+    sign?: ((payload: Uint8Array, privateKey: Uint8Array, options: {
+        /** Domain separation tag for hash-to-curve. */
+        dst?: Uint8Array | undefined;
+        /** Group of the signature. */
+        group: 'G1' | 'G2';
+    }) => Uint8Array) | undefined;
+    /** Verifies a compressed signature against a compressed public key. */
+    verify?: ((signature: Uint8Array, payload: Uint8Array, publicKey: Uint8Array, options: {
+        /** Domain separation tag for hash-to-curve. */
+        dst?: Uint8Array | undefined;
+        /** Group of the signature. */
+        signatureGroup: 'G1' | 'G2';
+    }) => boolean) | undefined;
+};
+/**
+ * Root engine type. Slots and functions are optional; omissions preserve
+ * earlier overrides, or use Ox's default when none exists.
+ *
+ * @internal
+ */
+export type Engine = {
+    /** Implementation for {@link ox#Bls}. */
+    Bls?: Bls | undefined;
+    /** Implementation for {@link ox#Ed25519}. */
+    Ed25519?: Eddsa | undefined;
+    /** Implementation for {@link ox#Hash}. */
+    Hash?: Hash | undefined;
+    /** Implementation for {@link ox#Keystore}. */
+    Keystore?: Keystore | undefined;
+    /** Implementation for {@link ox#Mnemonic}. */
+    Mnemonic?: Mnemonic | undefined;
+    /** Implementation for {@link ox#P256}. */
+    P256?: Ecdsa | undefined;
+    /** Implementation for {@link ox#Secp256k1}. */
+    Secp256k1?: Ecdsa | undefined;
+    /** Implementation for {@link ox#X25519}. */
+    X25519?: Ecdh | undefined;
+};
+/**
+ * A slot with every function present.
+ *
+ * Slots are optional all the way down so that an engine can fill in as little
+ * as it likes. ox's own default implementations are held to the opposite
+ * standard: they back every function ox routes, so they are declared against
+ * this instead, and a default that goes missing or drifts from the contract
+ * fails to compile.
+ *
+ * @internal
+ */
+export type Complete<slot> = {
+    [key in keyof slot]-?: NonNullable<slot[key]>;
+};
+/**
+ * Recognized slot names, in the order they appear on {@link Engine}.
+ *
+ * @internal
+ */
+export declare const slots: readonly ["Bls", "Ed25519", "Hash", "Keystore", "Mnemonic", "P256", "Secp256k1", "X25519"];
+/**
+ * Recognized primitive names, per slot.
+ *
+ * An override stored under a name no resolver reads is invisible: the default
+ * keeps running and nothing is reported, so a typo looks exactly like success.
+ * That is worst for the callers who can least afford it -- someone installing a
+ * policy-constrained or hardware-backed implementation silently gets ox's
+ * default instead. {@link Engine.set} checks against this to make it loud.
+ *
+ * @internal
+ */
+export declare const primitives: {
+    readonly Bls: readonly ["aggregate", "getPublicKey", "randomSecretKey", "sign", "verify"];
+    readonly Ed25519: readonly ["getPublicKey", "randomSecretKey", "sign", "toMontgomery", "toMontgomerySecret", "verify"];
+    readonly Hash: readonly ["blake3", "hmacSha256", "keccak256", "ripemd160", "sha256"];
+    readonly Keystore: readonly ["aesCtrDecrypt", "aesCtrEncrypt", "pbkdf2Sha256", "pbkdf2Sha256Async", "scrypt", "scryptAsync"];
+    readonly Mnemonic: readonly ["toSeed"];
+    readonly P256: readonly ["getPublicKey", "getSharedSecret", "recoverPublicKey", "randomSecretKey", "sign", "verify"];
+    readonly Secp256k1: readonly ["getPublicKey", "getSharedSecret", "recoverPublicKey", "randomSecretKey", "sign", "verify"];
+    readonly X25519: readonly ["getPublicKey", "getSharedSecret", "randomSecretKey"];
+};
+/**
+ * The installed overrides. Empty by default -- a bare object literal, so
+ * bundlers treat it as side-effect free.
+ *
+ * @internal
+ */
+export declare const overrides: Engine;
+/**
+ * Merges overrides into the registry, one level deep. A slot set to `undefined`
+ * is removed.
+ *
+ * @internal
+ */
+export declare function merge(value: Engine): void;
+/**
+ * Removes one slot, or every slot when `slot` is omitted.
+ *
+ * @internal
+ */
+export declare function reset(slot?: keyof Engine): void;
+//# sourceMappingURL=engine.d.ts.map

package/dist/core/internal/engine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../../../src/core/internal/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH;;;;GAIG;AACH,MAAM,MAAM,IAAI,GAAG;IACjB,8BAA8B;IAC9B,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,KAAK,UAAU,CAAC,GAAG,SAAS,CAAA;IACxD,mBAAmB;IACnB,UAAU,CAAC,EACP,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,KAAK,UAAU,CAAC,GACtD,SAAS,CAAA;IACb,yCAAyC;IACzC,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,KAAK,UAAU,CAAC,GAAG,SAAS,CAAA;IAC3D,kBAAkB;IAClB,SAAS,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,KAAK,UAAU,CAAC,GAAG,SAAS,CAAA;IAC3D,eAAe;IACf,MAAM,CAAC,EAAE,CAAC,CAAC,KAAK,EAAE,UAAU,KAAK,UAAU,CAAC,GAAG,SAAS,CAAA;CACzD,CAAA;AAED;;;;;;;;GAQG;AACH,MAAM,MAAM,KAAK,GAAG;IAClB,oDAAoD;IACpD,YAAY,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,KAAK,UAAU,CAAC,GAAG,SAAS,CAAA;IACnE;;;;;;OAMG;IACH,eAAe,CAAC,EACZ,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,KAAK,UAAU,CAAC,GAC/D,SAAS,CAAA;IACb;;;OAGG;IACH,gBAAgB,CAAC,EACb,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,OAAO,EAAE,UAAU,KAAK,UAAU,CAAC,GAC5D,SAAS,CAAA;IACb,sCAAsC;IACtC,eAAe,CAAC,EAAE,CAAC,MAAM,UAAU,CAAC,GAAG,SAAS,CAAA;IAChD,kEAAkE;IAClE,IAAI,CAAC,EACD,CAAC,CACC,OAAO,EAAE,UAAU,EACnB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE;QACP,8DAA8D;QAC9D,YAAY,EAAE,OAAO,GAAG,UAAU,CAAA;QAClC,kDAAkD;QAClD,OAAO,EAAE,OAAO,CAAA;KACjB,KACE,UAAU,CAAC,GAChB,SAAS,CAAA;IACb,uDAAuD;IACvD,MAAM,CAAC,EACH,CAAC,CACC,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE;QACP,oDAAoD;QACpD,OAAO,EAAE,OAAO,CAAA;KACjB,KACE,OAAO,CAAC,GACb,SAAS,CAAA;CACd,CAAA;AAED;;;;GAIG;AACH,MAAM,MAAM,KAAK,GAAG;IAClB,oCAAoC;IACpC,YAAY,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,KAAK,UAAU,CAAC,GAAG,SAAS,CAAA;IACnE,sCAAsC;IACtC,eAAe,CAAC,EAAE,CAAC,MAAM,UAAU,CAAC,GAAG,SAAS,CAAA;IAChD,sDAAsD;IACtD,IAAI,CAAC,EACD,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,UAAU,EAAE,UAAU,KAAK,UAAU,CAAC,GAC7D,SAAS,CAAA;IACb,sEAAsE;IACtE,YAAY,CAAC,EAAE,CAAC,CAAC,SAAS,EAAE,UAAU,KAAK,UAAU,CAAC,GAAG,SAAS,CAAA;IAClE,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,KAAK,UAAU,CAAC,GAAG,SAAS,CAAA;IACzE,oCAAoC;IACpC,MAAM,CAAC,EACH,CAAC,CACC,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,KAClB,OAAO,CAAC,GACb,SAAS,CAAA;CACd,CAAA;AAED;;;;GAIG;AACH,MAAM,MAAM,IAAI,GAAG;IACjB,oCAAoC;IACpC,YAAY,CAAC,EAAE,CAAC,CAAC,UAAU,EAAE,UAAU,KAAK,UAAU,CAAC,GAAG,SAAS,CAAA;IACnE,wCAAwC;IACxC,eAAe,CAAC,EACZ,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,UAAU,KAAK,UAAU,CAAC,GAC/D,SAAS,CAAA;IACb,sCAAsC;IACtC,eAAe,CAAC,EAAE,CAAC,MAAM,UAAU,CAAC,GAAG,SAAS,CAAA;CACjD,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,QAAQ,GAAG;IACrB,+DAA+D;IAC/D,aAAa,CAAC,EACV,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,UAAU,CAAC,GACnE,SAAS,CAAA;IACb,+DAA+D;IAC/D,aAAa,CAAC,EACV,CAAC,CAAC,GAAG,EAAE,UAAU,EAAE,EAAE,EAAE,UAAU,EAAE,IAAI,EAAE,UAAU,KAAK,UAAU,CAAC,GACnE,SAAS,CAAA;IACb,0BAA0B;IAC1B,YAAY,CAAC,EACT,CAAC,CACC,QAAQ,EAAE,UAAU,EACpB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAClC,UAAU,CAAC,GAChB,SAAS,CAAA;IACb,uCAAuC;IACvC,iBAAiB,CAAC,EACd,CAAC,CACC,QAAQ,EAAE,UAAU,EACpB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAClC,OAAO,CAAC,UAAU,CAAC,CAAC,GACzB,SAAS,CAAA;IACb,cAAc;IACd,MAAM,CAAC,EACH,CAAC,CACC,QAAQ,EAAE,UAAU,EACpB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,KACxD,UAAU,CAAC,GAChB,SAAS,CAAA;IACb,2BAA2B;IAC3B,WAAW,CAAC,EACR,CAAC,CACC,QAAQ,EAAE,UAAU,EACpB,IAAI,EAAE,UAAU,EAChB,OAAO,EAAE;QAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAC;QAAC,CAAC,EAAE,MAAM,CAAA;KAAE,KACxD,OAAO,CAAC,UAAU,CAAC,CAAC,GACzB,SAAS,CAAA;CACd,CAAA;AAED;;;;;;;GAOG;AACH,MAAM,MAAM,QAAQ,GAAG;IACrB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,KAAK,UAAU,CAAC,GAAG,SAAS,CAAA;CAC7E,CAAA;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,GAAG,GAAG;IAChB,sDAAsD;IACtD,SAAS,CAAC,EACN,CAAC,CAAC,MAAM,EAAE,SAAS,UAAU,EAAE,EAAE,KAAK,EAAE,IAAI,GAAG,IAAI,KAAK,UAAU,CAAC,GACnE,SAAS,CAAA;IACb,0DAA0D;IAC1D,YAAY,CAAC,EACT,CAAC,CAAC,UAAU,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,GAAG,IAAI,KAAK,UAAU,CAAC,GAC5D,SAAS,CAAA;IACb,sCAAsC;IACtC,eAAe,CAAC,EAAE,CAAC,MAAM,UAAU,CAAC,GAAG,SAAS,CAAA;IAChD,2EAA2E;IAC3E,IAAI,CAAC,EACD,CAAC,CACC,OAAO,EAAE,UAAU,EACnB,UAAU,EAAE,UAAU,EACtB,OAAO,EAAE;QACP,+CAA+C;QAC/C,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;QAC5B,8BAA8B;QAC9B,KAAK,EAAE,IAAI,GAAG,IAAI,CAAA;KACnB,KACE,UAAU,CAAC,GAChB,SAAS,CAAA;IACb,uEAAuE;IACvE,MAAM,CAAC,EACH,CAAC,CACC,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE,UAAU,EACnB,SAAS,EAAE,UAAU,EACrB,OAAO,EAAE;QACP,+CAA+C;QAC/C,GAAG,CAAC,EAAE,UAAU,GAAG,SAAS,CAAA;QAC5B,8BAA8B;QAC9B,cAAc,EAAE,IAAI,GAAG,IAAI,CAAA;KAC5B,KACE,OAAO,CAAC,GACb,SAAS,CAAA;CACd,CAAA;AAED;;;;;GAKG;AACH,MAAM,MAAM,MAAM,GAAG;IACnB,yCAAyC;IACzC,GAAG,CAAC,EAAE,GAAG,GAAG,SAAS,CAAA;IACrB,6CAA6C;IAC7C,OAAO,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;IAC3B,0CAA0C;IAC1C,IAAI,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;IACvB,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC/B,8CAA8C;IAC9C,QAAQ,CAAC,EAAE,QAAQ,GAAG,SAAS,CAAA;IAC/B,0CAA0C;IAC1C,IAAI,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;IACxB,+CAA+C;IAC/C,SAAS,CAAC,EAAE,KAAK,GAAG,SAAS,CAAA;IAC7B,4CAA4C;IAC5C,MAAM,CAAC,EAAE,IAAI,GAAG,SAAS,CAAA;CAC1B,CAAA;AAED;;;;;;;;;;GAUG;AACH,MAAM,MAAM,QAAQ,CAAC,IAAI,IAAI;KAAG,GAAG,IAAI,MAAM,IAAI,CAAC,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;CAAE,CAAA;AAE9E;;;;GAIG;AACH,eAAO,MAAM,KAAK,4FAS4B,CAAA;AAE9C;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU;;;;;;;;;CAuCtB,CAAA;AAED;;;;;GAKG;AACH,eAAO,MAAM,SAAS,EAAE,MAAW,CAAA;AAEnC;;;;;GAKG;AACH,wBAAgB,KAAK,CAAC,KAAK,EAAE,MAAM,QAmBlC;AAED;;;;GAIG;AACH,wBAAgB,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,MAAM,QAKxC"}

package/dist/core/internal/engine.js

@@ -0,0 +1,131 @@
+/**
+ * Engine slot contracts and the override registry.
+ *
+ * This module intentionally has **no imports**. It is pulled into the module
+ * graph of every crypto module in ox, so it must not drag any dependency along
+ * with it. That constraint is also why the contracts speak raw `Uint8Array`
+ * rather than `Bytes.Bytes`/`Hex.Hex` -- coercion stays in the public module,
+ * and the engine boundary is plain bytes in, plain bytes out.
+ *
+ * The registry holds **overrides only**. Defaults are never registered here,
+ * because a registered default has to live on a complete slot object, and a
+ * slot object is a single reachable value: esbuild cannot drop the properties
+ * of one, so every default's `@noble/*` import survives into every bundle that
+ * touches the slot. Measured on a keccak256-only bundle, that costs 5 kB gzip.
+ * Instead each slot has a resolver module under `internal/` holding one binding
+ * per primitive, and the fallback is chosen there, per primitive.
+ *
+ * @internal
+ */
+/**
+ * Recognized slot names, in the order they appear on {@link Engine}.
+ *
+ * @internal
+ */
+export const slots = [
+    'Bls',
+    'Ed25519',
+    'Hash',
+    'Keystore',
+    'Mnemonic',
+    'P256',
+    'Secp256k1',
+    'X25519',
+];
+/**
+ * Recognized primitive names, per slot.
+ *
+ * An override stored under a name no resolver reads is invisible: the default
+ * keeps running and nothing is reported, so a typo looks exactly like success.
+ * That is worst for the callers who can least afford it -- someone installing a
+ * policy-constrained or hardware-backed implementation silently gets ox's
+ * default instead. {@link Engine.set} checks against this to make it loud.
+ *
+ * @internal
+ */
+export const primitives = {
+    Bls: ['aggregate', 'getPublicKey', 'randomSecretKey', 'sign', 'verify'],
+    Ed25519: [
+        'getPublicKey',
+        'randomSecretKey',
+        'sign',
+        'toMontgomery',
+        'toMontgomerySecret',
+        'verify',
+    ],
+    Hash: ['blake3', 'hmacSha256', 'keccak256', 'ripemd160', 'sha256'],
+    Keystore: [
+        'aesCtrDecrypt',
+        'aesCtrEncrypt',
+        'pbkdf2Sha256',
+        'pbkdf2Sha256Async',
+        'scrypt',
+        'scryptAsync',
+    ],
+    Mnemonic: ['toSeed'],
+    P256: [
+        'getPublicKey',
+        'getSharedSecret',
+        'recoverPublicKey',
+        'randomSecretKey',
+        'sign',
+        'verify',
+    ],
+    Secp256k1: [
+        'getPublicKey',
+        'getSharedSecret',
+        'recoverPublicKey',
+        'randomSecretKey',
+        'sign',
+        'verify',
+    ],
+    X25519: ['getPublicKey', 'getSharedSecret', 'randomSecretKey'],
+};
+/**
+ * The installed overrides. Empty by default -- a bare object literal, so
+ * bundlers treat it as side-effect free.
+ *
+ * @internal
+ */
+export const overrides = {};
+/**
+ * Merges overrides into the registry, one level deep. A slot set to `undefined`
+ * is removed.
+ *
+ * @internal
+ */
+export function merge(value) {
+    for (const key of Object.keys(value)) {
+        const slot = value[key];
+        if (slot === undefined) {
+            delete overrides[key];
+            continue;
+        }
+        // A member set to `undefined` clears that primitive. Spreading would keep
+        // it as an own property: calls still fall through to the default, but
+        // `get` would report an override that is not there.
+        const merged = { ...overrides[key] };
+        for (const [name, fn] of Object.entries(slot)) {
+            if (fn === undefined)
+                delete merged[name];
+            else
+                merged[name] = fn;
+        }
+        // An empty slot stays: `set({ Hash: {} })` is a no-op a caller wrote
+        // deliberately, and `get` has always reported it.
+        overrides[key] = merged;
+    }
+}
+/**
+ * Removes one slot, or every slot when `slot` is omitted.
+ *
+ * @internal
+ */
+export function reset(slot) {
+    if (slot)
+        delete overrides[slot];
+    else
+        for (const key of Object.keys(overrides))
+            delete overrides[key];
+}
+//# sourceMappingURL=engine.js.map

package/dist/core/internal/engine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine.js","sourceRoot":"","sources":["../../../src/core/internal/engine.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAsRH;;;;GAIG;AACH,MAAM,CAAC,MAAM,KAAK,GAAG;IACnB,KAAK;IACL,SAAS;IACT,MAAM;IACN,UAAU;IACV,UAAU;IACV,MAAM;IACN,WAAW;IACX,QAAQ;CACoC,CAAA;AAE9C;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG;IACxB,GAAG,EAAE,CAAC,WAAW,EAAE,cAAc,EAAE,iBAAiB,EAAE,MAAM,EAAE,QAAQ,CAAC;IACvE,OAAO,EAAE;QACP,cAAc;QACd,iBAAiB;QACjB,MAAM;QACN,cAAc;QACd,oBAAoB;QACpB,QAAQ;KACT;IACD,IAAI,EAAE,CAAC,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,QAAQ,CAAC;IAClE,QAAQ,EAAE;QACR,eAAe;QACf,eAAe;QACf,cAAc;QACd,mBAAmB;QACnB,QAAQ;QACR,aAAa;KACd;IACD,QAAQ,EAAE,CAAC,QAAQ,CAAC;IACpB,IAAI,EAAE;QACJ,cAAc;QACd,iBAAiB;QACjB,kBAAkB;QAClB,iBAAiB;QACjB,MAAM;QACN,QAAQ;KACT;IACD,SAAS,EAAE;QACT,cAAc;QACd,iBAAiB;QACjB,kBAAkB;QAClB,iBAAiB;QACjB,MAAM;QACN,QAAQ;KACT;IACD,MAAM,EAAE,CAAC,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,CAAC;CAG/D,CAAA;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,SAAS,GAAW,EAAE,CAAA;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,KAAK,CAAC,KAAa;IACjC,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAqB,EAAE,CAAC;QACzD,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,CAAA;QACvB,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,OAAO,SAAS,CAAC,GAAG,CAAC,CAAA;YACrB,SAAQ;QACV,CAAC;QACD,0EAA0E;QAC1E,sEAAsE;QACtE,oDAAoD;QACpD,MAAM,MAAM,GAA4B,EAAE,GAAG,SAAS,CAAC,GAAG,CAAC,EAAE,CAAA;QAC7D,KAAK,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC9C,IAAI,EAAE,KAAK,SAAS;gBAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAA;;gBACpC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAA;QACxB,CAAC;QACD,qEAAqE;QACrE,kDAAkD;QAClD,SAAS,CAAC,GAAG,CAAC,GAAG,MAAe,CAAA;IAClC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,KAAK,CAAC,IAAmB;IACvC,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC,IAAI,CAAC,CAAA;;QAE9B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAqB;YAC1D,OAAO,SAAS,CAAC,GAAG,CAAC,CAAA;AAC3B,CAAC"}

package/dist/core/internal/hash.d.ts

@@ -0,0 +1,12 @@
+import { type Complete, type Hash } from './engine.js';
+/** @internal */
+export declare const blake3: Complete<Hash>['blake3'];
+/** @internal */
+export declare const hmacSha256: Complete<Hash>['hmacSha256'];
+/** @internal */
+export declare const keccak256: Complete<Hash>['keccak256'];
+/** @internal */
+export declare const ripemd160: Complete<Hash>['ripemd160'];
+/** @internal */
+export declare const sha256: Complete<Hash>['sha256'];
+//# sourceMappingURL=hash.d.ts.map

package/dist/core/internal/hash.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.d.ts","sourceRoot":"","sources":["../../../src/core/internal/hash.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,IAAI,EAAa,MAAM,aAAa,CAAA;AAwBjE,gBAAgB;AAChB,eAAO,MAAM,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CACM,CAAA;AAElD,gBAAgB;AAChB,eAAO,MAAM,UAAU,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,YAAY,CACa,CAAA;AAEjE,gBAAgB;AAChB,eAAO,MAAM,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,CACM,CAAA;AAExD,gBAAgB;AAChB,eAAO,MAAM,SAAS,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,WAAW,CACM,CAAA;AAExD,gBAAgB;AAChB,eAAO,MAAM,MAAM,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,QAAQ,CACM,CAAA"}

package/dist/core/internal/hash.js

@@ -0,0 +1,30 @@
+import { blake3 as noble_blake3 } from '@noble/hashes/blake3.js';
+import { hmac } from '@noble/hashes/hmac.js';
+import { ripemd160 as noble_ripemd160 } from '@noble/hashes/legacy.js';
+import { sha256 as noble_sha256 } from '@noble/hashes/sha2.js';
+import { keccak_256 as noble_keccak256 } from '@noble/hashes/sha3.js';
+import { overrides } from './engine.js';
+/**
+ * Resolvers for the `Hash` slot, and ox's defaults for it, backed by
+ * `@noble/hashes`.
+ *
+ * Declaring the defaults against the slot contract is what keeps them honest: a
+ * default that goes missing, or whose signature drifts, fails to compile rather
+ * than failing at the call site.
+ */
+const blake3Default = (input) => noble_blake3(input);
+const hmacSha256Default = (key, message) => hmac(noble_sha256, key, message);
+const keccak256Default = (input) => noble_keccak256(input);
+const ripemd160Default = (input) => noble_ripemd160(input);
+const sha256Default = (input) => noble_sha256(input);
+/** @internal */
+export const blake3 = (input) => (overrides.Hash?.blake3 ?? blake3Default)(input);
+/** @internal */
+export const hmacSha256 = (key, message) => (overrides.Hash?.hmacSha256 ?? hmacSha256Default)(key, message);
+/** @internal */
+export const keccak256 = (input) => (overrides.Hash?.keccak256 ?? keccak256Default)(input);
+/** @internal */
+export const ripemd160 = (input) => (overrides.Hash?.ripemd160 ?? ripemd160Default)(input);
+/** @internal */
+export const sha256 = (input) => (overrides.Hash?.sha256 ?? sha256Default)(input);
+//# sourceMappingURL=hash.js.map

package/dist/core/internal/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../../src/core/internal/hash.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAChE,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAC5C,OAAO,EAAE,SAAS,IAAI,eAAe,EAAE,MAAM,yBAAyB,CAAA;AACtE,OAAO,EAAE,MAAM,IAAI,YAAY,EAAE,MAAM,uBAAuB,CAAA;AAC9D,OAAO,EAAE,UAAU,IAAI,eAAe,EAAE,MAAM,uBAAuB,CAAA;AACrE,OAAO,EAA4B,SAAS,EAAE,MAAM,aAAa,CAAA;AAEjE;;;;;;;GAOG;AAEH,MAAM,aAAa,GAA6B,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;AAE9E,MAAM,iBAAiB,GAAiC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CACvE,IAAI,CAAC,YAAY,EAAE,GAAG,EAAE,OAAO,CAAC,CAAA;AAElC,MAAM,gBAAgB,GAAgC,CAAC,KAAK,EAAE,EAAE,CAC9D,eAAe,CAAC,KAAK,CAAC,CAAA;AAExB,MAAM,gBAAgB,GAAgC,CAAC,KAAK,EAAE,EAAE,CAC9D,eAAe,CAAC,KAAK,CAAC,CAAA;AAExB,MAAM,aAAa,GAA6B,CAAC,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC,CAAA;AAE9E,gBAAgB;AAChB,MAAM,CAAC,MAAM,MAAM,GAA6B,CAAC,KAAK,EAAE,EAAE,CACxD,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,IAAI,aAAa,CAAC,CAAC,KAAK,CAAC,CAAA;AAElD,gBAAgB;AAChB,MAAM,CAAC,MAAM,UAAU,GAAiC,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,CACvE,CAAC,SAAS,CAAC,IAAI,EAAE,UAAU,IAAI,iBAAiB,CAAC,CAAC,GAAG,EAAE,OAAO,CAAC,CAAA;AAEjE,gBAAgB;AAChB,MAAM,CAAC,MAAM,SAAS,GAAgC,CAAC,KAAK,EAAE,EAAE,CAC9D,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,IAAI,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAA;AAExD,gBAAgB;AAChB,MAAM,CAAC,MAAM,SAAS,GAAgC,CAAC,KAAK,EAAE,EAAE,CAC9D,CAAC,SAAS,CAAC,IAAI,EAAE,SAAS,IAAI,gBAAgB,CAAC,CAAC,KAAK,CAAC,CAAA;AAExD,gBAAgB;AAChB,MAAM,CAAC,MAAM,MAAM,GAA6B,CAAC,KAAK,EAAE,EAAE,CACxD,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,IAAI,aAAa,CAAC,CAAC,KAAK,CAAC,CAAA"}

package/dist/core/internal/keystore.d.ts

@@ -0,0 +1,14 @@
+import { type Complete, type Keystore } from './engine.js';
+/** @internal */
+export declare const aesCtrDecrypt: Complete<Keystore>['aesCtrDecrypt'];
+/** @internal */
+export declare const aesCtrEncrypt: Complete<Keystore>['aesCtrEncrypt'];
+/** @internal */
+export declare const pbkdf2Sha256: Complete<Keystore>['pbkdf2Sha256'];
+/** @internal */
+export declare const pbkdf2Sha256Async: Complete<Keystore>['pbkdf2Sha256Async'];
+/** @internal */
+export declare const scrypt: Complete<Keystore>['scrypt'];
+/** @internal */
+export declare const scryptAsync: Complete<Keystore>['scryptAsync'];
+//# sourceMappingURL=keystore.d.ts.map

package/dist/core/internal/keystore.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystore.d.ts","sourceRoot":"","sources":["../../../src/core/internal/keystore.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAa,MAAM,aAAa,CAAA;AA4CrE,gBAAgB;AAChB,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,eAAe,CAIiB,CAAA;AAE/E,gBAAgB;AAChB,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,eAAe,CAIiB,CAAA;AAE/E,gBAAgB;AAChB,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,cAAc,CASzD,CAAA;AAEH,gBAAgB;AAChB,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,mBAAmB,CASnE,CAAA;AAEH,gBAAgB;AAChB,eAAO,MAAM,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,QAAQ,CACwB,CAAA;AAExE,gBAAgB;AAChB,eAAO,MAAM,WAAW,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,aAAa,CASvD,CAAA"}

package/dist/core/internal/keystore.js

@@ -0,0 +1,32 @@
+import { ctr } from '@noble/ciphers/aes.js';
+import { pbkdf2 as pbkdf2_noble, pbkdf2Async as pbkdf2Async_noble, } from '@noble/hashes/pbkdf2.js';
+import { scrypt as scrypt_noble, scryptAsync as scryptAsync_noble, } from '@noble/hashes/scrypt.js';
+import { sha256 } from '@noble/hashes/sha2.js';
+import { overrides } from './engine.js';
+/**
+ * Resolvers for the `Keystore` slot, and ox's defaults for it, backed by
+ * `@noble/ciphers` and `@noble/hashes`.
+ *
+ * Declaring the defaults against the slot contract is what keeps them honest: a
+ * default that goes missing, or whose signature drifts, fails to compile rather
+ * than failing at the call site.
+ */
+const aesCtrDecryptDefault = (key, iv, data) => ctr(key, iv).decrypt(data);
+const aesCtrEncryptDefault = (key, iv, data) => ctr(key, iv).encrypt(data);
+const pbkdf2Sha256Default = (password, salt, options) => pbkdf2_noble(sha256, password, salt, options);
+const pbkdf2Sha256AsyncDefault = (password, salt, options) => pbkdf2Async_noble(sha256, password, salt, options);
+const scryptDefault = (password, salt, options) => scrypt_noble(password, salt, options);
+const scryptAsyncDefault = (password, salt, options) => scryptAsync_noble(password, salt, options);
+/** @internal */
+export const aesCtrDecrypt = (key, iv, data) => (overrides.Keystore?.aesCtrDecrypt ?? aesCtrDecryptDefault)(key, iv, data);
+/** @internal */
+export const aesCtrEncrypt = (key, iv, data) => (overrides.Keystore?.aesCtrEncrypt ?? aesCtrEncryptDefault)(key, iv, data);
+/** @internal */
+export const pbkdf2Sha256 = (password, salt, options) => (overrides.Keystore?.pbkdf2Sha256 ?? pbkdf2Sha256Default)(password, salt, options);
+/** @internal */
+export const pbkdf2Sha256Async = (password, salt, options) => (overrides.Keystore?.pbkdf2Sha256Async ?? pbkdf2Sha256AsyncDefault)(password, salt, options);
+/** @internal */
+export const scrypt = (password, salt, options) => (overrides.Keystore?.scrypt ?? scryptDefault)(password, salt, options);
+/** @internal */
+export const scryptAsync = (password, salt, options) => (overrides.Keystore?.scryptAsync ?? scryptAsyncDefault)(password, salt, options);
+//# sourceMappingURL=keystore.js.map

package/dist/core/internal/keystore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keystore.js","sourceRoot":"","sources":["../../../src/core/internal/keystore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,GAAG,EAAE,MAAM,uBAAuB,CAAA;AAC3C,OAAO,EACL,MAAM,IAAI,YAAY,EACtB,WAAW,IAAI,iBAAiB,GACjC,MAAM,yBAAyB,CAAA;AAChC,OAAO,EACL,MAAM,IAAI,YAAY,EACtB,WAAW,IAAI,iBAAiB,GACjC,MAAM,yBAAyB,CAAA;AAChC,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAA;AAC9C,OAAO,EAAgC,SAAS,EAAE,MAAM,aAAa,CAAA;AAErE;;;;;;;GAOG;AAEH,MAAM,oBAAoB,GAAwC,CAChE,GAAG,EACH,EAAE,EACF,IAAI,EACJ,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AAE/B,MAAM,oBAAoB,GAAwC,CAChE,GAAG,EACH,EAAE,EACF,IAAI,EACJ,EAAE,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAA;AAE/B,MAAM,mBAAmB,GAAuC,CAC9D,QAAQ,EACR,IAAI,EACJ,OAAO,EACP,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;AAElD,MAAM,wBAAwB,GAA4C,CACxE,QAAQ,EACR,IAAI,EACJ,OAAO,EACP,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;AAEvD,MAAM,aAAa,GAAiC,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAC9E,YAAY,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;AAEvC,MAAM,kBAAkB,GAAsC,CAC5D,QAAQ,EACR,IAAI,EACJ,OAAO,EACP,EAAE,CAAC,iBAAiB,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;AAE/C,gBAAgB;AAChB,MAAM,CAAC,MAAM,aAAa,GAAwC,CAChE,GAAG,EACH,EAAE,EACF,IAAI,EACJ,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,aAAa,IAAI,oBAAoB,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;AAE/E,gBAAgB;AAChB,MAAM,CAAC,MAAM,aAAa,GAAwC,CAChE,GAAG,EACH,EAAE,EACF,IAAI,EACJ,EAAE,CAAC,CAAC,SAAS,CAAC,QAAQ,EAAE,aAAa,IAAI,oBAAoB,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,IAAI,CAAC,CAAA;AAE/E,gBAAgB;AAChB,MAAM,CAAC,MAAM,YAAY,GAAuC,CAC9D,QAAQ,EACR,IAAI,EACJ,OAAO,EACP,EAAE,CACF,CAAC,SAAS,CAAC,QAAQ,EAAE,YAAY,IAAI,mBAAmB,CAAC,CACvD,QAAQ,EACR,IAAI,EACJ,OAAO,CACR,CAAA;AAEH,gBAAgB;AAChB,MAAM,CAAC,MAAM,iBAAiB,GAA4C,CACxE,QAAQ,EACR,IAAI,EACJ,OAAO,EACP,EAAE,CACF,CAAC,SAAS,CAAC,QAAQ,EAAE,iBAAiB,IAAI,wBAAwB,CAAC,CACjE,QAAQ,EACR,IAAI,EACJ,OAAO,CACR,CAAA;AAEH,gBAAgB;AAChB,MAAM,CAAC,MAAM,MAAM,GAAiC,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,CAC9E,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,aAAa,CAAC,CAAC,QAAQ,EAAE,IAAI,EAAE,OAAO,CAAC,CAAA;AAExE,gBAAgB;AAChB,MAAM,CAAC,MAAM,WAAW,GAAsC,CAC5D,QAAQ,EACR,IAAI,EACJ,OAAO,EACP,EAAE,CACF,CAAC,SAAS,CAAC,QAAQ,EAAE,WAAW,IAAI,kBAAkB,CAAC,CACrD,QAAQ,EACR,IAAI,EACJ,OAAO,CACR,CAAA"}

package/dist/core/internal/mnemonic.d.ts

@@ -0,0 +1,4 @@
+import { type Complete, type Mnemonic } from './engine.js';
+/** @internal */
+export declare const toSeed: Complete<Mnemonic>['toSeed'];
+//# sourceMappingURL=mnemonic.d.ts.map

package/dist/core/internal/mnemonic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mnemonic.d.ts","sourceRoot":"","sources":["../../../src/core/internal/mnemonic.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,QAAQ,EAAa,MAAM,aAAa,CAAA;AAcrE,gBAAgB;AAChB,eAAO,MAAM,MAAM,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC,QAAQ,CACqB,CAAA"}

package/dist/core/internal/mnemonic.js

@@ -0,0 +1,14 @@
+import { mnemonicToSeedSync } from '@scure/bip39';
+import { overrides } from './engine.js';
+/**
+ * Resolvers for the `Mnemonic` slot, and ox's defaults for it, backed by
+ * `@scure/bip39`.
+ *
+ * Declaring the defaults against the slot contract is what keeps them honest: a
+ * default that goes missing, or whose signature drifts, fails to compile rather
+ * than failing at the call site.
+ */
+const toSeedDefault = (mnemonic, passphrase) => mnemonicToSeedSync(mnemonic, passphrase);
+/** @internal */
+export const toSeed = (mnemonic, passphrase) => (overrides.Mnemonic?.toSeed ?? toSeedDefault)(mnemonic, passphrase);
+//# sourceMappingURL=mnemonic.js.map

package/dist/core/internal/mnemonic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mnemonic.js","sourceRoot":"","sources":["../../../src/core/internal/mnemonic.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,MAAM,cAAc,CAAA;AACjD,OAAO,EAAgC,SAAS,EAAE,MAAM,aAAa,CAAA;AAErE;;;;;;;GAOG;AAEH,MAAM,aAAa,GAAiC,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAC3E,kBAAkB,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA;AAE1C,gBAAgB;AAChB,MAAM,CAAC,MAAM,MAAM,GAAiC,CAAC,QAAQ,EAAE,UAAU,EAAE,EAAE,CAC3E,CAAC,SAAS,CAAC,QAAQ,EAAE,MAAM,IAAI,aAAa,CAAC,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAA"}

package/dist/core/internal/p256.d.ts

@@ -0,0 +1,14 @@
+import { type Complete, type Ecdsa } from './engine.js';
+/** @internal */
+export declare const getPublicKey: Complete<Ecdsa>['getPublicKey'];
+/** @internal */
+export declare const getSharedSecret: Complete<Ecdsa>['getSharedSecret'];
+/** @internal */
+export declare const randomSecretKey: Complete<Ecdsa>['randomSecretKey'];
+/** @internal */
+export declare const recoverPublicKey: Complete<Ecdsa>['recoverPublicKey'];
+/** @internal */
+export declare const sign: Complete<Ecdsa>['sign'];
+/** @internal */
+export declare const verify: Complete<Ecdsa>['verify'];
+//# sourceMappingURL=p256.d.ts.map

package/dist/core/internal/p256.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"p256.d.ts","sourceRoot":"","sources":["../../../src/core/internal/p256.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,QAAQ,EAAE,KAAK,KAAK,EAAa,MAAM,aAAa,CAAA;AA6ClE,gBAAgB;AAChB,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,cAAc,CACU,CAAA;AAEnE,gBAAgB;AAChB,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,iBAAiB,CAO5D,CAAA;AAEH,gBAAgB;AAChB,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,iBAAiB,CACA,CAAA;AAE/D,gBAAgB;AAChB,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,kBAAkB,CAO9D,CAAA;AAEH,gBAAgB;AAChB,eAAO,MAAM,IAAI,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,MAAM,CAC4B,CAAA;AAErE,gBAAgB;AAChB,eAAO,MAAM,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC,QAAQ,CAW1C,CAAA"}

package/dist/core/internal/p256.js

@@ -0,0 +1,36 @@
+import { p256 } from '@noble/curves/nist.js';
+import { overrides } from './engine.js';
+/**
+ * Resolvers for the `P256` slot, and ox's defaults for it, backed by
+ * `@noble/curves`.
+ *
+ * Declaring the defaults against the slot contract is what keeps them honest: a
+ * default that goes missing, or whose signature drifts, fails to compile rather
+ * than failing at the call site. `lowS` and the recovered signature format are
+ * pinned here rather than in the contract, so an engine cannot opt out of them.
+ */
+const getPublicKeyDefault = (privateKey) => p256.getPublicKey(privateKey, false);
+const getSharedSecretDefault = (privateKey, publicKey) => p256.getSharedSecret(privateKey, publicKey, true);
+const randomSecretKeyDefault = () => p256.utils.randomSecretKey();
+const recoverPublicKeyDefault = (signature, payload) => p256.Signature.fromBytes(signature, 'recovered')
+    .recoverPublicKey(payload)
+    .toBytes(false);
+const signDefault = (payload, privateKey, options) => p256.sign(payload, privateKey, {
+    ...options,
+    format: 'recovered',
+    lowS: true,
+});
+const verifyDefault = (signature, payload, publicKey, options) => p256.verify(signature, payload, publicKey, { ...options, lowS: true });
+/** @internal */
+export const getPublicKey = (privateKey) => (overrides.P256?.getPublicKey ?? getPublicKeyDefault)(privateKey);
+/** @internal */
+export const getSharedSecret = (privateKey, publicKey) => (overrides.P256?.getSharedSecret ?? getSharedSecretDefault)(privateKey, publicKey);
+/** @internal */
+export const randomSecretKey = () => (overrides.P256?.randomSecretKey ?? randomSecretKeyDefault)();
+/** @internal */
+export const recoverPublicKey = (signature, payload) => (overrides.P256?.recoverPublicKey ?? recoverPublicKeyDefault)(signature, payload);
+/** @internal */
+export const sign = (payload, privateKey, options) => (overrides.P256?.sign ?? signDefault)(payload, privateKey, options);
+/** @internal */
+export const verify = (signature, payload, publicKey, options) => (overrides.P256?.verify ?? verifyDefault)(signature, payload, publicKey, options);
+//# sourceMappingURL=p256.js.map

package/dist/core/internal/p256.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"p256.js","sourceRoot":"","sources":["../../../src/core/internal/p256.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,uBAAuB,CAAA;AAC5C,OAAO,EAA6B,SAAS,EAAE,MAAM,aAAa,CAAA;AAElE;;;;;;;;GAQG;AAEH,MAAM,mBAAmB,GAAoC,CAAC,UAAU,EAAE,EAAE,CAC1E,IAAI,CAAC,YAAY,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;AAEtC,MAAM,sBAAsB,GAAuC,CACjE,UAAU,EACV,SAAS,EACT,EAAE,CAAC,IAAI,CAAC,eAAe,CAAC,UAAU,EAAE,SAAS,EAAE,IAAI,CAAC,CAAA;AAEtD,MAAM,sBAAsB,GAAuC,GAAG,EAAE,CACtE,IAAI,CAAC,KAAK,CAAC,eAAe,EAAE,CAAA;AAE9B,MAAM,uBAAuB,GAAwC,CACnE,SAAS,EACT,OAAO,EACP,EAAE,CACF,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,EAAE,WAAW,CAAC;KAC7C,gBAAgB,CAAC,OAAO,CAAC;KACzB,OAAO,CAAC,KAAK,CAAC,CAAA;AAEnB,MAAM,WAAW,GAA4B,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,CAC5E,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE;IAC7B,GAAG,OAAO;IACV,MAAM,EAAE,WAAW;IACnB,IAAI,EAAE,IAAI;CACX,CAAC,CAAA;AAEJ,MAAM,aAAa,GAA8B,CAC/C,SAAS,EACT,OAAO,EACP,SAAS,EACT,OAAO,EACP,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;AAE3E,gBAAgB;AAChB,MAAM,CAAC,MAAM,YAAY,GAAoC,CAAC,UAAU,EAAE,EAAE,CAC1E,CAAC,SAAS,CAAC,IAAI,EAAE,YAAY,IAAI,mBAAmB,CAAC,CAAC,UAAU,CAAC,CAAA;AAEnE,gBAAgB;AAChB,MAAM,CAAC,MAAM,eAAe,GAAuC,CACjE,UAAU,EACV,SAAS,EACT,EAAE,CACF,CAAC,SAAS,CAAC,IAAI,EAAE,eAAe,IAAI,sBAAsB,CAAC,CACzD,UAAU,EACV,SAAS,CACV,CAAA;AAEH,gBAAgB;AAChB,MAAM,CAAC,MAAM,eAAe,GAAuC,GAAG,EAAE,CACtE,CAAC,SAAS,CAAC,IAAI,EAAE,eAAe,IAAI,sBAAsB,CAAC,EAAE,CAAA;AAE/D,gBAAgB;AAChB,MAAM,CAAC,MAAM,gBAAgB,GAAwC,CACnE,SAAS,EACT,OAAO,EACP,EAAE,CACF,CAAC,SAAS,CAAC,IAAI,EAAE,gBAAgB,IAAI,uBAAuB,CAAC,CAC3D,SAAS,EACT,OAAO,CACR,CAAA;AAEH,gBAAgB;AAChB,MAAM,CAAC,MAAM,IAAI,GAA4B,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EAAE,CAC5E,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,IAAI,WAAW,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,CAAC,CAAA;AAErE,gBAAgB;AAChB,MAAM,CAAC,MAAM,MAAM,GAA8B,CAC/C,SAAS,EACT,OAAO,EACP,SAAS,EACT,OAAO,EACP,EAAE,CACF,CAAC,SAAS,CAAC,IAAI,EAAE,MAAM,IAAI,aAAa,CAAC,CACvC,SAAS,EACT,OAAO,EACP,SAAS,EACT,OAAO,CACR,CAAA"}

package/dist/core/internal/secp256k1.d.ts

@@ -0,0 +1,14 @@
+import { type Complete, type Ecdsa } from './engine.js';
+/** @internal */
+export declare const getPublicKey: Complete<Ecdsa>['getPublicKey'];
+/** @internal */
+export declare const getSharedSecret: Complete<Ecdsa>['getSharedSecret'];
+/** @internal */
+export declare const randomSecretKey: Complete<Ecdsa>['randomSecretKey'];
+/** @internal */
+export declare const recoverPublicKey: Complete<Ecdsa>['recoverPublicKey'];
+/** @internal */
+export declare const sign: Complete<Ecdsa>['sign'];
+/** @internal */
+export declare const verify: Complete<Ecdsa>['verify'];
+//# sourceMappingURL=secp256k1.d.ts.map