passkey-kit 0.12.0 → 0.13.1

package/dist/validation.js

@@ -0,0 +1,73 @@
+/**
+ * Client-side input validation.
+ *
+ * Produces clear {@link ValidationError}s before submission instead of opaque
+ * on-chain or WebCrypto failures. The smart wallet imposes no signer-count caps
+ * (unlike a policy-based account), so validation here is about shapes and
+ * ranges: addresses, amounts, expirations, and secp256r1 public keys.
+ *
+ * @packageDocumentation
+ */
+import { StrKey } from "@stellar/stellar-sdk";
+import { SECP256R1_PUBLIC_KEY_SIZE, UNCOMPRESSED_PUBKEY_PREFIX, } from "./constants.js";
+import { PasskeyKitErrorCode, ValidationError } from "./errors.js";
+/**
+ * Validate that a string is a Stellar account (`G…`) or contract (`C…`) address.
+ *
+ * @throws {ValidationError} If the address is missing or malformed.
+ */
+export function validateAddress(address, fieldName = "address") {
+    if (!address || typeof address !== "string") {
+        throw new ValidationError(`${fieldName} is required`, PasskeyKitErrorCode.INVALID_ADDRESS, { field: fieldName });
+    }
+    if (!StrKey.isValidEd25519PublicKey(address) &&
+        !StrKey.isValidContract(address)) {
+        throw new ValidationError(`Invalid ${fieldName}: must be a valid Stellar account (G…) or contract (C…) address`, PasskeyKitErrorCode.INVALID_ADDRESS, { field: fieldName, value: address.slice(0, 10) + "…" });
+    }
+}
+/**
+ * Validate that an amount is a positive, finite number.
+ *
+ * @throws {ValidationError} If the amount is not a positive number.
+ */
+export function validateAmount(amount, fieldName = "amount") {
+    if (typeof amount !== "number" || !Number.isFinite(amount)) {
+        throw new ValidationError(`${fieldName} must be a number`, PasskeyKitErrorCode.INVALID_AMOUNT, { field: fieldName });
+    }
+    if (amount <= 0) {
+        throw new ValidationError(`${fieldName} must be positive`, PasskeyKitErrorCode.INVALID_AMOUNT, { field: fieldName, value: amount });
+    }
+}
+/**
+ * Validate a signer expiration.
+ *
+ * Must be a non-negative integer within `u32` bounds when provided; `undefined`
+ * means "no expiration". (Unix-second timestamps fit in `u32` through the year
+ * 2106, so this bound holds whether the contract interprets the value as a
+ * ledger sequence or a UNIX timestamp.)
+ *
+ * @throws {ValidationError} If the expiration is out of range.
+ */
+export function validateExpiration(expiration, fieldName = "expiration") {
+    if (expiration === undefined)
+        return;
+    if (!Number.isInteger(expiration) ||
+        expiration < 0 ||
+        expiration > 0xffffffff) {
+        throw new ValidationError(`${fieldName} must be a non-negative integer within u32 bounds`, PasskeyKitErrorCode.INVALID_INPUT, { field: fieldName, value: expiration });
+    }
+}
+/**
+ * Validate a secp256r1 public key: 65 bytes, uncompressed (`0x04`) prefix.
+ *
+ * @throws {ValidationError} If the key is not a valid uncompressed EC point.
+ */
+export function validateSecp256r1PublicKey(publicKey, fieldName = "publicKey") {
+    if (publicKey.length !== SECP256R1_PUBLIC_KEY_SIZE) {
+        throw new ValidationError(`${fieldName} must be ${SECP256R1_PUBLIC_KEY_SIZE} bytes (got ${publicKey.length})`, PasskeyKitErrorCode.INVALID_PUBLIC_KEY, { field: fieldName, length: publicKey.length });
+    }
+    if (publicKey[0] !== UNCOMPRESSED_PUBKEY_PREFIX) {
+        throw new ValidationError(`${fieldName} must be an uncompressed EC point (0x04 prefix)`, PasskeyKitErrorCode.INVALID_PUBLIC_KEY, { field: fieldName, prefix: publicKey[0] });
+    }
+}
+//# sourceMappingURL=validation.js.map

package/dist/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EACL,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnE;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,SAAS,GAAG,SAAS;IAErB,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,cAAc,EAC1B,mBAAmB,CAAC,eAAe,EACnC,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;IACJ,CAAC;IAED,IACE,CAAC,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC;QACxC,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,WAAW,SAAS,iEAAiE,EACrF,mBAAmB,CAAC,eAAe,EACnC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,SAAS,GAAG,QAAQ;IACjE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,mBAAmB,EAC/B,mBAAmB,CAAC,cAAc,EAClC,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,mBAAmB,EAC/B,mBAAmB,CAAC,cAAc,EAClC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CACpC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAA8B,EAC9B,SAAS,GAAG,YAAY;IAExB,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO;IACrC,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;QAC7B,UAAU,GAAG,CAAC;QACd,UAAU,GAAG,UAAU,EACvB,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,mDAAmD,EAC/D,mBAAmB,CAAC,aAAa,EACjC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CACxC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAAqB,EACrB,SAAS,GAAG,WAAW;IAEvB,IAAI,SAAS,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACnD,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,YAAY,yBAAyB,eAAe,SAAS,CAAC,MAAM,GAAG,EACnF,mBAAmB,CAAC,kBAAkB,EACtC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,0BAA0B,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,iDAAiD,EAC7D,mBAAmB,CAAC,kBAAkB,EACtC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Package version — auto-generated from package.json.
+ * @packageDocumentation
+ */
+export declare const VERSION = "0.13.1";
+export declare const NAME = "passkey-kit";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,eAAO,MAAM,OAAO,WAAW,CAAC;AAChC,eAAO,MAAM,IAAI,gBAAgB,CAAC"}

package/dist/version.js

@@ -0,0 +1,9 @@
+/**
+ * Package version — auto-generated from package.json.
+ * @packageDocumentation
+ */
+// This file is auto-generated. Do not edit manually.
+// Run `pnpm run sync-version` (or `pnpm build`) to update.
+export const VERSION = "0.13.1";
+export const NAME = "passkey-kit";
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,qDAAqD;AACrD,2DAA2D;AAE3D,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC;AAChC,MAAM,CAAC,MAAM,IAAI,GAAG,aAAa,CAAC"}

package/package.json

@@ -1,30 +1,53 @@
 {
   "name": "passkey-kit",
-  "version": "0.12.0",
+  "version": "0.13.1",
   "description": "A helper library for creating and using smart wallet accounts on the Stellar blockchain.",
-  "author": "Tyler van der Hoeven",
+  "author": "Tyler van der Hoeven <tyler@stellar.org>",
   "license": "MIT",
   "type": "module",
-  "main": "src/index.ts",
-  "types": "types/index.d.ts",
+  "main": "dist/index.js",
+  "module": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./storage": {
+      "import": "./dist/storage/index.js",
+      "types": "./dist/storage/index.d.ts"
+    },
+    "./server": {
+      "import": "./dist/server.js",
+      "types": "./dist/server.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENCE"
+  ],
   "dependencies": {
-    "@openzeppelin/relayer-plugin-channels": "^0.5.0",
-    "@simplewebauthn/browser": "^13.2.0",
-    "@stellar/stellar-sdk": "^14.2.0",
+    "@openzeppelin/relayer-plugin-channels": "^0.20.0",
+    "@simplewebauthn/browser": "^13.3.0",
+    "@stellar/stellar-sdk": "16.0.1",
     "base64url": "^3.0.1",
     "buffer": "^6.0.3",
-    "passkey-kit-sdk": "0.7.2",
-    "sac-sdk": "0.4.2"
+    "passkey-kit-sdk": "0.7.3",
+    "sac-sdk": "0.4.3"
   },
   "devDependencies": {
     "@types/node": "^24.6.0",
-    "typescript": "^5.9.2"
+    "fake-indexeddb": "^6.2.5",
+    "typescript": "^5.9.2",
+    "vitest": "^3.2.4"
   },
-  "workspaces": [
-    "packages/*"
-  ],
-  "engine": {
-    "node": ">=20"
+  "peerDependencies": {
+    "@stellar/stellar-sdk": ">=16.0.0"
+  },
+  "engines": {
+    "node": ">=22.0.0"
   },
   "repository": {
     "type": "git",
@@ -48,12 +71,17 @@
   },
   "homepage": "https://github.com/kalepail/passkey-kit/blob/main/README.md",
   "scripts": {
+    "sync-version": "node scripts/sync-version.js",
+    "prebuild": "node scripts/sync-version.js",
+    "build:bindings": "pnpm --filter sac-sdk run build && pnpm --filter passkey-kit-sdk run build",
+    "bindings:regen": "bash scripts/bindings/build.sh",
+    "verify:bindings": "bash scripts/bindings/verify.sh",
+    "build": "pnpm run build:bindings && tsc && node scripts/verify-esm.mjs",
+    "verify:esm": "node scripts/verify-esm.mjs",
+    "test": "vitest",
+    "clean": "rm -rf dist packages/passkey-kit-sdk/dist packages/sac-sdk/dist",
     "build:demo": "cd demo && pnpm --ignore-workspace install && pnpm run build",
     "deploy:demo": "npx wrangler pages deploy",
-    "deploy:demo:prod": "npx wrangler pages deploy --env production",
-    "build:sac": "pnpm --filter=sac-sdk run build",
-    "build:pks": "pnpm --filter=passkey-kit-sdk run build",
-    "build": "pnpm run build:sac && pnpm run build:pks && tsc",
-    "ext:cp": "./clone-js-sdk.sh"
+    "deploy:demo:prod": "npx wrangler pages deploy --branch production"
   }
 }

package/.claude/settings.local.json

@@ -1,20 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "WebSearch",
-      "mcp__context7__resolve-library-id",
-      "Bash(tree:*)",
-      "mcp__deepwiki__read_wiki_structure",
-      "mcp__context7__query-docs",
-      "mcp__deepwiki__read_wiki_contents",
-      "Bash(curl:*)",
-      "Bash(pnpm install:*)",
-      "Bash(pnpm run build:*)",
-      "mcp__github__get_file_contents",
-      "mcp__perplexity__perplexity_ask",
-      "mcp__perplexity__perplexity_search"
-    ],
-    "deny": [],
-    "ask": []
-  }
-}

package/.cursorrules

@@ -1,170 +0,0 @@
-# Passkey Kit – Cursor Workspace Rules (v2025-06-12)
-
-These rules provide canonical guidance to AI assistants and contributors interacting with this repository.  They supersede any previous `.cursorrules` file.
-Their intent is to stay *future-proof*: they encode principles that should hold even as tooling evolves.  When in doubt, prefer the spirit of the rule over its letter.
-
----
-
-## 1  Repository Topology (overview)
-
-•  `src/` – Core **passkey-kit** TypeScript library (published to npm).
-•  `packages/passkey-kit-sdk/` – Stand-alone TS SDK used by the main package.
-•  `packages/sac-sdk/` – SAC (smart-account contract) SDK.
-•  `contracts/` – Soroban smart contracts written in Rust.
-•  `zephyr/` – Deterministic Zephyr program exposing HTTP endpoints.
-•  `demo/` – Svelte demo showcasing end-to-end usage.
-
-This repo is a **pnpm workspace**; always use `pnpm` (≥ 8) for Node tasks.
-
----
-
-## 2  Language & Toolchain Baselines
-
-| Domain | Minimum Supported | Notes |
-|--------|-------------------|-------|
-| Node.js | 20 LTS | ESM by default, top-level `await` allowed |
-| TypeScript | 5.4 | `strict`, `moduleResolution: node16` |
-| Rust (contracts) | 1.79 | Follow the current stable Soroban toolchain |
-| Soroban SDK | 22.x | Keep minor versions in lock-step across contracts |
-| Bun (tests) | 1.x | Used for ultrafast unit tests (`bun test`) |
-| pnpm | 8.x | Managed via **Corepack**; lockfile v5 enforced |
-
-Upgrade the baselines on every **major** release of the kit.
-
----
-
-## 3  General Coding Principles
-
-1. **Functional & immutable** – avoid shared mutable state; favour pure functions.
-2. **Fail loudly, fail early** – surface rich, actionable error messages.
-3. **Minimal dependencies** – prefer platform APIs or internal utils; justify every new dep.
-4. **Typed first** – all public surfaces must be *fully* typed; export `.d.ts` files.
-5. **Async-first** – use `async/await`; never chain raw `Promise` callbacks.
-6. **Workspace integrity** – after changes run `pnpm run build` at the repo root to guarantee type-safety across packages.
-
----
-
-## 4  JavaScript / TypeScript Specifics
-
-• Import Stellar via `@stellar/stellar-sdk/minimal` unless full bundle is strictly required.
-• Base-64 URL encode/decode with `base64url`; avoid `Buffer.from(x, 'base64')`.
-• Prefer **named exports**; avoid `export default` in new code.
-• File extensions: `.ts` / `.tsx` (React) / `.svelte` (demo) only.
-• Module import grouping: external → workspace → relative → style imports; blank line between groups.
-• Leverage modern ECMAScript (`??`, `?.`, `Array#at`, `Intl`) – but avoid stage-3 proposals unless polyfilled.
-• Publish ESM-first: every package must declare `"type": "module"` and expose an `exports` map with `import`, `require` (fallback), and `types` conditions.
-• Mark packages `"sideEffects": false` when safe to enable aggressive tree-shaking.
-• Ship first-party `.d.ts` bundles (either via `tsc --emitDeclarationOnly` or `api-extractor`).  Do **not** rely on DefinitelyTyped for kit packages.
-• Top-level entrypoints should be 100 % statically analyzable – avoid dynamic `require()` or `eval()`.
-
----
-
-## 5  Rust / Soroban Contract Rules
-
-1. Contracts live in `contracts/*/src`.
-2. `#![no_std]` mandatory; rely on `soroban-sdk` helpers instead of `std`.
-3. Expose a top-level `Contract` struct marked with `#[contract]`.
-4. Model errors with `#[contracterror]`; surface via `panic_with_error!`.
-5. Tests belong under `contracts/*/src/tests` using `soroban_sdk::testutils`.
-6. New contracts must be registered in `contracts/Cargo.toml` workspace members.
-
----
-
-## 6  Zephyr Program Rules
-
-• Zephyr code resides in `zephyr/src` and **must remain deterministic** – avoid non-deterministic data sources (e.g. system time, randomness) unless explicitly mocked.
-• Each externally exposed endpoint must be documented *above* its `#[no_mangle]` function.
-
----
-
-## 7  Svelte / Demo Rules
-
-• Demo code lives in `demo/src`.
-• Follow existing component conventions: PascalCase filenames, `<script lang="ts">`, `<style scoped>`.
-• Prefer lightweight stores over global state; mock network calls when possible.
-
----
-
-## 8  Testing & CI
-
-1. Run `bun test` to execute JavaScript unit tests (`bun_tests/`).
-2. Rust contract tests live alongside contracts.
-3. All new public functions (TS) or contract interfaces (Rust) require unit tests.
-4. Use **Conventional Commits** in PR titles to automate semantic-release notes.
-5. CI (GitHub Actions) must run: `pnpm lint`, `pnpm run build`, `bun test`, and contract tests.
-
----
-
-## 9  Versioning & Release
-
-• Independent package versions, shared workspace lockfile.
-• Semantic Versioning: breaking changes → major bump.
-• Root `prepublishOnly` script builds **all** packages; never publish from a dirty tree.
-• Tags follow `pkg-name@x.y.z` format.
-• Adopt **Changesets** for automated changelog generation and version bumping across the workspace; release pipeline should consume the generated changelog artefacts.
-
----
-
-## 10  Style, Linting & Formatting
-
-• Indent: 2 spaces, trailing commas, single quotes.
-• Code formatted with **Prettier** (`pnpm format`).
-• Lint with **ESLint** + `@typescript-eslint`.  Lint errors are CI blockers.
-• Prefer `const`; use `let` only when reassignment is needed.
-
----
-
-## 11  AI Usage Etiquette
-
-• These rules are the *source of truth* for AI coding assistants.
-• Assistants must **never** write secrets, API keys, or personal data into the codebase.
-• When creating code, ensure it can run *immediately* and is fully typed.
-• Before adding dependencies, verify they fit the "minimal deps" philosophy and update `package.json` accordingly.
-
----
-
-## 12  Context Shortcuts
-
-Use these aliases when referencing files in chat:
-
-```text
-@kit.ts          → src/kit.ts
-@smart-wallet    → contracts/smart-wallet/src/lib.rs
-@passkey-sdk     → packages/passkey-kit-sdk/src
-```
-
----
-
-## 13  Performance & Build Optimisation
-
-1. Prefer **incremental builds** (e.g. `pnpm --filter`, `--recursive --workspace-concurrency`) to accelerate CI and local development.
-2. Enable intelligent cache layers (GitHub Actions cache / bun test cache) to avoid redundant compilation of unchanged packages.
-3. Leverage Bun's ultra-fast test runner; keep test suites granular to maximise parallelism.
-4. When introducing heavy tasks (e.g. Soroban WASM compilation), gate them behind conditional steps so that they execute only when relevant code changes.
-5. Monitor build & test times; aim for sub-5-minute end-to-end CI under normal load.
-
----
-
-## 14  npm Package Publishing Principles
-
-• Source of truth is **ESM**; if CJS support is required, publish it under `./cjs` and reference with the `require` condition – no transpiled dual-bundles in `dist/`.
-• Generate a **size-snapshot** report (e.g. with `size-limit`) and block PRs that increase size over budget.
-• `package.json` must include: `license`, `funding`, `homepage`, `repository`, `bugs`, and a short but descriptive `description`.
-• Use the `files` whitelist (or `.npmignore`) to keep the published tarball lean (< 30 KiB ideally).
-• Release via GitHub Actions with `npm publish --provenance` to attach Sigstore metadata; use **two-factor auth** on the npm org.
-• After publish, run `npm view @scope/pkg dist.unpackedSize` in CI and fail if unexpectedly large.
-
----
-
-## 15  Security & Supply Chain
-
-1. Enforce automated dependency scanning (GitHub Dependabot + `pnpm audit --recursive`).
-2. Run **OpenSSF Scorecard** weekly; block merges if score < 7.
-3. Sign commits & tags (Conventional Commits + `git config commit.gpgsign`); CI verifies signatures.
-4. Harden CI with minimal permissions (`GITHUB_TOKEN` → read-only except on `release/*` jobs).
-5. Adopt `.npmrc` with `ignore-scripts=true` for CI and `prefer-offline=true` for faster deterministic installs.
-6. All public APIs must have runtime assertions (zod or custom) to prevent type coercion exploits.
-
----
-
-End of rules. 

package/.gitattributes

@@ -1,2 +0,0 @@
-# Auto detect text files and perform LF normalization
-* text=auto

package/.github/workflows/release.yml

@@ -1,21 +0,0 @@
-name: Contract Release
-
-on:
-  workflow_dispatch:
-    inputs:
-      release_name:
-        description: 'Unique release name'
-        required: true
-        type: string
-
-jobs:
-
-  release-contract-smart-wallet:
-      uses: stellar-expert/soroban-build-workflow/.github/workflows/release.yml@main
-      with:
-        release_name: ${{ github.ref_name }}
-        release_description: 'Release of the smart wallet contract'
-        relative_path: 'contracts'
-        package: 'smart-wallet'
-      secrets:
-        release_token: ${{ secrets.GITHUB_TOKEN }}

package/.vscode/settings.json

@@ -1,6 +0,0 @@
-{
-    "rust-analyzer.linkedProjects": [
-        "./zephyr/Cargo.toml",
-        "./contracts/Cargo.toml",
-    ]
-}