passkey-kit 0.12.1 → 0.14.0

package/dist/utils.js

@@ -0,0 +1,253 @@
+/**
+ * Cryptographic and derivation helpers for the Passkey Kit SDK.
+ *
+ * @packageDocumentation
+ */
+import { StrKey, hash, xdr, Address } from "@stellar/stellar-sdk";
+import base64url from "./base64url.js";
+import { SECP256R1_PUBLIC_KEY_SIZE, SECP256R1_CURVE_ORDER, SECP256R1_FIELD_PRIME, SECP256R1_B, UNCOMPRESSED_PUBKEY_PREFIX, WEBAUTHN_CHALLENGE_SIZE, } from "./constants.js";
+import { ValidationError, WebAuthnError, PasskeyKitErrorCode, } from "./errors.js";
+// ============================================================================
+// Deterministic contract-address derivation
+// ============================================================================
+/**
+ * Derive a smart-wallet contract address from a passkey credential id.
+ *
+ * The wallet's contract id is deterministic: `salt = sha256(keyId)` and the
+ * deployer address salts a `ContractIdPreimageFromAddress`. This determinism is
+ * load-bearing — the indexer reverse-lookup (keyId → wallet) re-derives the
+ * address the same way — so this function is pinned with golden vectors in
+ * `utils.test.ts`. Any change to the derivation breaks the tests instead of
+ * silently shifting deployed addresses.
+ *
+ * @param keyId - The raw credential id bytes
+ * @param deployerPublicKey - The deployer's `G…` public key
+ * @param networkPassphrase - The network passphrase
+ * @returns The derived contract address (`C…`)
+ */
+export function deriveContractAddress(keyId, deployerPublicKey, networkPassphrase) {
+    const preimage = xdr.HashIdPreimage.envelopeTypeContractId(new xdr.HashIdPreimageContractId({
+        networkId: hash(Buffer.from(networkPassphrase)),
+        contractIdPreimage: xdr.ContractIdPreimage.contractIdPreimageFromAddress(new xdr.ContractIdPreimageFromAddress({
+            address: Address.fromString(deployerPublicKey).toScAddress(),
+            salt: hash(keyId),
+        })),
+    }));
+    return StrKey.encodeContract(hash(preimage.toXDR()));
+}
+// ============================================================================
+// WebAuthn public-key extraction
+// ============================================================================
+/** COSE map prefix for an ES256 (P-256) key: `{1:2, 3:-26, -1:1, -2: bytes(32)…}`. */
+const ES256_COSE_PREFIX = Buffer.from([
+    0xa5, 0x01, 0x02, 0x03, 0x26, 0x20, 0x01, 0x21, 0x58, 0x20,
+]);
+/** COSE label for the `y` coordinate that must follow `x`: `-3: bytes(32)`. */
+const COSE_Y_LABEL = Buffer.from([0x22, 0x58, 0x20]);
+/**
+ * Whether an uncompressed `0x04 || x || y` key is a point on the P-256 curve
+ * (`y² ≡ x³ − 3x + b (mod p)`, coordinates in-field). A structurally valid but
+ * off-curve key would register fine and deploy a wallet no signature can ever
+ * satisfy, so extraction rejects it up front.
+ */
+export function isOnP256Curve(publicKey) {
+    const key = Buffer.from(publicKey);
+    if (key.length !== SECP256R1_PUBLIC_KEY_SIZE ||
+        key[0] !== UNCOMPRESSED_PUBKEY_PREFIX) {
+        return false;
+    }
+    const p = SECP256R1_FIELD_PRIME;
+    const x = BigInt("0x" + key.subarray(1, 33).toString("hex"));
+    const y = BigInt("0x" + key.subarray(33, 65).toString("hex"));
+    if (x >= p || y >= p)
+        return false;
+    const x3 = (((x * x) % p) * x) % p;
+    const rhs = (((x3 - ((3n * x) % p) + SECP256R1_B) % p) + p) % p;
+    return (y * y) % p === rhs;
+}
+/**
+ * Read `x || y` out of a COSE key at `xStart`, verifying the `y` label bytes
+ * and buffer bounds instead of trusting fixed offsets. Returns the
+ * uncompressed `0x04 || x || y` point, or `undefined` when the shape doesn't
+ * match.
+ */
+function coseCoordinates(buf, xStart) {
+    const yLabelStart = xStart + 32;
+    const yStart = yLabelStart + COSE_Y_LABEL.length;
+    if (buf.length < yStart + 32)
+        return undefined;
+    if (!buf.subarray(yLabelStart, yStart).equals(COSE_Y_LABEL))
+        return undefined;
+    return Buffer.concat([
+        Buffer.from([UNCOMPRESSED_PUBKEY_PREFIX]),
+        buf.subarray(xStart, xStart + 32),
+        buf.subarray(yStart, yStart + 32),
+    ]);
+}
+/**
+ * Parse the attested COSE key out of raw `authenticatorData`:
+ * `rpIdHash(32) | flags(1) | counter(4) | aaguid(16) | credIdLen(2) | credId | COSE`.
+ * Every offset is bounds-checked and the ES256 COSE prefix is verified in
+ * place before any coordinate is sliced.
+ */
+function coseKeyFromAuthenticatorData(ad) {
+    if (ad.length < 55)
+        return undefined;
+    const credentialIdLength = (ad[53] << 8) | ad[54];
+    const coseStart = 55 + credentialIdLength;
+    if (ad.length < coseStart + ES256_COSE_PREFIX.length)
+        return undefined;
+    if (!ad
+        .subarray(coseStart, coseStart + ES256_COSE_PREFIX.length)
+        .equals(ES256_COSE_PREFIX)) {
+        return undefined;
+    }
+    return coseCoordinates(ad, coseStart + ES256_COSE_PREFIX.length);
+}
+/** Locate the ES256 COSE key inside a CBOR attestation object and extract it. */
+function coseKeyFromAttestationObject(ao) {
+    const prefixIndex = ao.indexOf(ES256_COSE_PREFIX);
+    if (prefixIndex === -1)
+        return undefined;
+    return coseCoordinates(ao, prefixIndex + ES256_COSE_PREFIX.length);
+}
+/**
+ * Extract the 65-byte uncompressed secp256r1 public key from a WebAuthn
+ * registration (attestation) response.
+ *
+ * Tries, in order:
+ * 1. `response.publicKey` when it is already a raw uncompressed EC point.
+ * 2. `response.publicKey` decoded from SPKI via WebCrypto (`crypto.subtle`),
+ *    which is the correct, non-magic-offset way to normalize the DER-encoded
+ *    SubjectPublicKeyInfo most authenticators return.
+ * 3. Parsing the COSE key out of `authenticatorData`, then
+ *    `attestationObject` — with the COSE structure verified in place, never
+ *    trusted fixed offsets.
+ *
+ * Whatever the source, the result must be a valid point ON the P-256 curve;
+ * a mangled key is rejected here rather than deployed as an unusable wallet
+ * signer.
+ *
+ * @throws {WebAuthnError} If no valid public key can be extracted.
+ */
+export async function extractPublicKeyFromAttestation(response) {
+    let publicKey;
+    if (response.publicKey) {
+        const encodedPublicKey = base64url.toBuffer(response.publicKey);
+        if (encodedPublicKey.length === SECP256R1_PUBLIC_KEY_SIZE &&
+            encodedPublicKey[0] === UNCOMPRESSED_PUBKEY_PREFIX) {
+            publicKey = encodedPublicKey;
+        }
+        else if (typeof crypto?.subtle !== "undefined") {
+            try {
+                const imported = await crypto.subtle.importKey("spki", new Uint8Array(encodedPublicKey), { name: "ECDSA", namedCurve: "P-256" }, true, []);
+                const rawKey = await crypto.subtle.exportKey("raw", imported);
+                publicKey = Buffer.from(new Uint8Array(rawKey));
+            }
+            catch {
+                publicKey = undefined; // not SPKI — fall through to the COSE paths
+            }
+        }
+    }
+    // Fall back to the attested COSE key when `response.publicKey` is absent or
+    // didn't yield a valid on-curve point.
+    if (!publicKey || !isOnP256Curve(publicKey)) {
+        publicKey =
+            (response.authenticatorData
+                ? coseKeyFromAuthenticatorData(base64url.toBuffer(response.authenticatorData))
+                : undefined) ??
+                (response.attestationObject
+                    ? coseKeyFromAttestationObject(base64url.toBuffer(response.attestationObject))
+                    : undefined);
+    }
+    if (!publicKey || !isOnP256Curve(publicKey)) {
+        throw new WebAuthnError("Could not extract a valid secp256r1 public key from the attestation response", PasskeyKitErrorCode.PUBLIC_KEY_EXTRACTION_FAILED);
+    }
+    return new Uint8Array(publicKey);
+}
+// ============================================================================
+// Signature encoding
+// ============================================================================
+function malformedDer(reason) {
+    return new ValidationError(`Malformed DER ECDSA signature: ${reason}`, PasskeyKitErrorCode.INVALID_INPUT);
+}
+/**
+ * Convert a DER-encoded ECDSA signature to Stellar's compact `r || s` form with
+ * a low-S value (S <= n/2), as required by the secp256r1 host function.
+ *
+ * The DER structure is validated before any offset is dereferenced:
+ * sequence/integer tags, short-form lengths that exactly span the buffer, and
+ * `r`/`s` values in `[1, n-1]`. A WebAuthn P-256 signature always fits
+ * short-form DER (total length < 128 bytes), so long-form lengths are rejected.
+ *
+ * @param derSignature - The DER-encoded signature
+ * @returns 64-byte compact signature (`r || s`)
+ * @throws {ValidationError} If the signature is not structurally valid DER or
+ *   `r`/`s` are out of range for P-256.
+ */
+export function compactSignature(derSignature) {
+    // DER: 0x30 [total-len] 0x02 [r-len] [r] 0x02 [s-len] [s]
+    if (derSignature.length < 8)
+        throw malformedDer("too short");
+    if (derSignature[0] !== 0x30)
+        throw malformedDer("missing SEQUENCE tag");
+    const totalLength = derSignature[1];
+    if (totalLength >= 0x80)
+        throw malformedDer("long-form length not supported");
+    if (totalLength !== derSignature.length - 2) {
+        throw malformedDer("SEQUENCE length does not span the buffer");
+    }
+    if (derSignature[2] !== 0x02)
+        throw malformedDer("missing INTEGER tag for r");
+    const rLength = derSignature[3];
+    // A P-256 integer is at most 32 bytes plus one 0x00 sign pad.
+    if (rLength < 1 || rLength > 33)
+        throw malformedDer("r length out of range");
+    if (4 + rLength + 2 > derSignature.length) {
+        throw malformedDer("r overruns the buffer");
+    }
+    const r = derSignature.subarray(4, 4 + rLength);
+    const sTagOffset = 4 + rLength;
+    if (derSignature[sTagOffset] !== 0x02) {
+        throw malformedDer("missing INTEGER tag for s");
+    }
+    const sLength = derSignature[sTagOffset + 1];
+    if (sLength < 1 || sLength > 33)
+        throw malformedDer("s length out of range");
+    if (sTagOffset + 2 + sLength !== derSignature.length) {
+        throw malformedDer("s does not end exactly at the buffer end");
+    }
+    const s = derSignature.subarray(sTagOffset + 2, sTagOffset + 2 + sLength);
+    const rBigInt = BigInt("0x" + r.toString("hex"));
+    let sBigInt = BigInt("0x" + s.toString("hex"));
+    // Scalars must be in [1, n-1] — anything else can never verify on-chain.
+    if (rBigInt < 1n || rBigInt >= SECP256R1_CURVE_ORDER) {
+        throw malformedDer("r out of curve order range");
+    }
+    if (sBigInt < 1n || sBigInt >= SECP256R1_CURVE_ORDER) {
+        throw malformedDer("s out of curve order range");
+    }
+    // Enforce low-S.
+    const halfN = SECP256R1_CURVE_ORDER / 2n;
+    if (sBigInt > halfN) {
+        sBigInt = SECP256R1_CURVE_ORDER - sBigInt;
+    }
+    const rPadded = Buffer.from(rBigInt.toString(16).padStart(64, "0"), "hex");
+    const sLowS = Buffer.from(sBigInt.toString(16).padStart(64, "0"), "hex");
+    return new Uint8Array(Buffer.concat([rPadded, sLowS]));
+}
+// ============================================================================
+// WebAuthn challenge
+// ============================================================================
+/**
+ * Generate a cryptographically-random base64url challenge for a WebAuthn
+ * ceremony.
+ *
+ * Replaces the old hard-coded `"stellaristhebetterblockchain"` challenge.
+ */
+export function generateChallenge() {
+    const bytes = new Uint8Array(WEBAUTHN_CHALLENGE_SIZE);
+    crypto.getRandomValues(bytes);
+    return base64url.encode(Buffer.from(bytes));
+}
+//# sourceMappingURL=utils.js.map

package/dist/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../src/utils.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAElE,OAAO,SAAS,MAAM,gBAAgB,CAAC;AACvC,OAAO,EACL,yBAAyB,EACzB,qBAAqB,EACrB,qBAAqB,EACrB,WAAW,EACX,0BAA0B,EAC1B,uBAAuB,GACxB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,eAAe,EACf,aAAa,EACb,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAErB,+EAA+E;AAC/E,4CAA4C;AAC5C,+EAA+E;AAE/E;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CACnC,KAAa,EACb,iBAAyB,EACzB,iBAAyB;IAEzB,MAAM,QAAQ,GAAG,GAAG,CAAC,cAAc,CAAC,sBAAsB,CACxD,IAAI,GAAG,CAAC,wBAAwB,CAAC;QAC/B,SAAS,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAC;QAC/C,kBAAkB,EAAE,GAAG,CAAC,kBAAkB,CAAC,6BAA6B,CACtE,IAAI,GAAG,CAAC,6BAA6B,CAAC;YACpC,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,iBAAiB,CAAC,CAAC,WAAW,EAAE;YAC5D,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC;SAClB,CAAC,CACH;KACF,CAAC,CACH,CAAC;IAEF,OAAO,MAAM,CAAC,cAAc,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AACvD,CAAC;AAED,+EAA+E;AAC/E,iCAAiC;AACjC,+EAA+E;AAE/E,sFAAsF;AACtF,MAAM,iBAAiB,GAAG,MAAM,CAAC,IAAI,CAAC;IACpC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;CAC3D,CAAC,CAAC;AAEH,+EAA+E;AAC/E,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;AAErD;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,SAAqB;IACjD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;IACnC,IACE,GAAG,CAAC,MAAM,KAAK,yBAAyB;QACxC,GAAG,CAAC,CAAC,CAAC,KAAK,0BAA0B,EACrC,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,CAAC,GAAG,qBAAqB,CAAC;IAChC,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7D,MAAM,CAAC,GAAG,MAAM,CAAC,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAChE,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,KAAK,GAAG,CAAC;AAC7B,CAAC;AAED;;;;;GAKG;AACH,SAAS,eAAe,CAAC,GAAW,EAAE,MAAc;IAClD,MAAM,WAAW,GAAG,MAAM,GAAG,EAAE,CAAC;IAChC,MAAM,MAAM,GAAG,WAAW,GAAG,YAAY,CAAC,MAAM,CAAC;IACjD,IAAI,GAAG,CAAC,MAAM,GAAG,MAAM,GAAG,EAAE;QAAE,OAAO,SAAS,CAAC;IAC/C,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC;QAAE,OAAO,SAAS,CAAC;IAC9E,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC,CAAC,0BAA0B,CAAC,CAAC;QACzC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC;QACjC,GAAG,CAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,EAAE,CAAC;KAClC,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,4BAA4B,CAAC,EAAU;IAC9C,IAAI,EAAE,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,kBAAkB,GAAG,CAAC,EAAE,CAAC,EAAE,CAAE,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAE,CAAC;IACpD,MAAM,SAAS,GAAG,EAAE,GAAG,kBAAkB,CAAC;IAC1C,IAAI,EAAE,CAAC,MAAM,GAAG,SAAS,GAAG,iBAAiB,CAAC,MAAM;QAAE,OAAO,SAAS,CAAC;IACvE,IACE,CAAC,EAAE;SACA,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC;SACzD,MAAM,CAAC,iBAAiB,CAAC,EAC5B,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,eAAe,CAAC,EAAE,EAAE,SAAS,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACnE,CAAC;AAED,iFAAiF;AACjF,SAAS,4BAA4B,CAAC,EAAU;IAC9C,MAAM,WAAW,GAAG,EAAE,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAClD,IAAI,WAAW,KAAK,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzC,OAAO,eAAe,CAAC,EAAE,EAAE,WAAW,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,QAA8C;IAE9C,IAAI,SAA6B,CAAC;IAElC,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;QACvB,MAAM,gBAAgB,GAAG,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;QAEhE,IACE,gBAAgB,CAAC,MAAM,KAAK,yBAAyB;YACrD,gBAAgB,CAAC,CAAC,CAAC,KAAK,0BAA0B,EAClD,CAAC;YACD,SAAS,GAAG,gBAAgB,CAAC;QAC/B,CAAC;aAAM,IAAI,OAAO,MAAM,EAAE,MAAM,KAAK,WAAW,EAAE,CAAC;YACjD,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5C,MAAM,EACN,IAAI,UAAU,CAAC,gBAAgB,CAAC,EAChC,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,IAAI,EACJ,EAAE,CACH,CAAC;gBACF,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;gBAC9D,SAAS,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;YAClD,CAAC;YAAC,MAAM,CAAC;gBACP,SAAS,GAAG,SAAS,CAAC,CAAC,4CAA4C;YACrE,CAAC;QACH,CAAC;IACH,CAAC;IAED,4EAA4E;IAC5E,uCAAuC;IACvC,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,SAAS;YACP,CAAC,QAAQ,CAAC,iBAAiB;gBACzB,CAAC,CAAC,4BAA4B,CAC1B,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAC/C;gBACH,CAAC,CAAC,SAAS,CAAC;gBACd,CAAC,QAAQ,CAAC,iBAAiB;oBACzB,CAAC,CAAC,4BAA4B,CAC1B,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAC/C;oBACH,CAAC,CAAC,SAAS,CAAC,CAAC;IACnB,CAAC;IAED,IAAI,CAAC,SAAS,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5C,MAAM,IAAI,aAAa,CACrB,8EAA8E,EAC9E,mBAAmB,CAAC,4BAA4B,CACjD,CAAC;IACJ,CAAC;IAED,OAAO,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E,SAAS,YAAY,CAAC,MAAc;IAClC,OAAO,IAAI,eAAe,CACxB,kCAAkC,MAAM,EAAE,EAC1C,mBAAmB,CAAC,aAAa,CAClC,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,gBAAgB,CAAC,YAAoB;IACnD,0DAA0D;IAC1D,IAAI,YAAY,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,YAAY,CAAC,WAAW,CAAC,CAAC;IAC7D,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,MAAM,YAAY,CAAC,sBAAsB,CAAC,CAAC;IACzE,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC;IACrC,IAAI,WAAW,IAAI,IAAI;QAAE,MAAM,YAAY,CAAC,gCAAgC,CAAC,CAAC;IAC9E,IAAI,WAAW,KAAK,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5C,MAAM,YAAY,CAAC,0CAA0C,CAAC,CAAC;IACjE,CAAC;IAED,IAAI,YAAY,CAAC,CAAC,CAAC,KAAK,IAAI;QAAE,MAAM,YAAY,CAAC,2BAA2B,CAAC,CAAC;IAC9E,MAAM,OAAO,GAAG,YAAY,CAAC,CAAC,CAAE,CAAC;IACjC,8DAA8D;IAC9D,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,EAAE;QAAE,MAAM,YAAY,CAAC,uBAAuB,CAAC,CAAC;IAC7E,IAAI,CAAC,GAAG,OAAO,GAAG,CAAC,GAAG,YAAY,CAAC,MAAM,EAAE,CAAC;QAC1C,MAAM,YAAY,CAAC,uBAAuB,CAAC,CAAC;IAC9C,CAAC;IACD,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC;IAEhD,MAAM,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC;IAC/B,IAAI,YAAY,CAAC,UAAU,CAAC,KAAK,IAAI,EAAE,CAAC;QACtC,MAAM,YAAY,CAAC,2BAA2B,CAAC,CAAC;IAClD,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,UAAU,GAAG,CAAC,CAAE,CAAC;IAC9C,IAAI,OAAO,GAAG,CAAC,IAAI,OAAO,GAAG,EAAE;QAAE,MAAM,YAAY,CAAC,uBAAuB,CAAC,CAAC;IAC7E,IAAI,UAAU,GAAG,CAAC,GAAG,OAAO,KAAK,YAAY,CAAC,MAAM,EAAE,CAAC;QACrD,MAAM,YAAY,CAAC,0CAA0C,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,CAAC,GAAG,YAAY,CAAC,QAAQ,CAAC,UAAU,GAAG,CAAC,EAAE,UAAU,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC;IAE1E,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IACjD,IAAI,OAAO,GAAG,MAAM,CAAC,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;IAE/C,yEAAyE;IACzE,IAAI,OAAO,GAAG,EAAE,IAAI,OAAO,IAAI,qBAAqB,EAAE,CAAC;QACrD,MAAM,YAAY,CAAC,4BAA4B,CAAC,CAAC;IACnD,CAAC;IACD,IAAI,OAAO,GAAG,EAAE,IAAI,OAAO,IAAI,qBAAqB,EAAE,CAAC;QACrD,MAAM,YAAY,CAAC,4BAA4B,CAAC,CAAC;IACnD,CAAC;IAED,iBAAiB;IACjB,MAAM,KAAK,GAAG,qBAAqB,GAAG,EAAE,CAAC;IACzC,IAAI,OAAO,GAAG,KAAK,EAAE,CAAC;QACpB,OAAO,GAAG,qBAAqB,GAAG,OAAO,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAC3E,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,CAAC,EAAE,KAAK,CAAC,CAAC;IAEzE,OAAO,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC;AACzD,CAAC;AAED,+EAA+E;AAC/E,qBAAqB;AACrB,+EAA+E;AAE/E;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB;IAC/B,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,uBAAuB,CAAC,CAAC;IACtD,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;IAC9B,OAAO,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AAC9C,CAAC"}

package/dist/validation.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Client-side input validation.
+ *
+ * Produces clear {@link ValidationError}s before submission instead of opaque
+ * on-chain or WebCrypto failures. The smart wallet imposes no signer-count caps
+ * (unlike a policy-based account), so validation here is about shapes and
+ * ranges: addresses, amounts, expirations, and secp256r1 public keys.
+ *
+ * @packageDocumentation
+ */
+/**
+ * Validate that a string is a Stellar account (`G…`) or contract (`C…`) address.
+ *
+ * @throws {ValidationError} If the address is missing or malformed.
+ */
+export declare function validateAddress(address: string, fieldName?: string): void;
+/**
+ * Validate that an amount is a positive, finite number.
+ *
+ * @throws {ValidationError} If the amount is not a positive number.
+ */
+export declare function validateAmount(amount: number, fieldName?: string): void;
+/**
+ * Validate a signer expiration.
+ *
+ * The contract types signer expiration as `Option<u64>` UNIX seconds, so the
+ * accepted range here is the `u64`-compatible safe-integer range: a
+ * non-negative integer up to `Number.MAX_SAFE_INTEGER` (the kit carries the
+ * value as a JS number before converting to `BigInt`). `undefined` means "no
+ * expiration". Capping at `u32` (the old bound) would reject post-2106
+ * timestamps the contract accepts.
+ *
+ * @throws {ValidationError} If the expiration is out of range.
+ */
+export declare function validateExpiration(expiration: number | undefined, fieldName?: string): void;
+/**
+ * Validate a secp256r1 public key: 65 bytes, uncompressed (`0x04`) prefix.
+ *
+ * @throws {ValidationError} If the key is not a valid uncompressed EC point.
+ */
+export declare function validateSecp256r1PublicKey(publicKey: Uint8Array, fieldName?: string): void;
+//# sourceMappingURL=validation.d.ts.map

package/dist/validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH;;;;GAIG;AACH,wBAAgB,eAAe,CAC7B,OAAO,EAAE,MAAM,EACf,SAAS,SAAY,GACpB,IAAI,CAmBN;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,SAAW,GAAG,IAAI,CAezE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,kBAAkB,CAChC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,SAAS,SAAe,GACvB,IAAI,CAaN;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,UAAU,EACrB,SAAS,SAAc,GACtB,IAAI,CAeN"}

package/dist/validation.js

@@ -0,0 +1,75 @@
+/**
+ * Client-side input validation.
+ *
+ * Produces clear {@link ValidationError}s before submission instead of opaque
+ * on-chain or WebCrypto failures. The smart wallet imposes no signer-count caps
+ * (unlike a policy-based account), so validation here is about shapes and
+ * ranges: addresses, amounts, expirations, and secp256r1 public keys.
+ *
+ * @packageDocumentation
+ */
+import { StrKey } from "@stellar/stellar-sdk";
+import { SECP256R1_PUBLIC_KEY_SIZE, UNCOMPRESSED_PUBKEY_PREFIX, } from "./constants.js";
+import { PasskeyKitErrorCode, ValidationError } from "./errors.js";
+/**
+ * Validate that a string is a Stellar account (`G…`) or contract (`C…`) address.
+ *
+ * @throws {ValidationError} If the address is missing or malformed.
+ */
+export function validateAddress(address, fieldName = "address") {
+    if (!address || typeof address !== "string") {
+        throw new ValidationError(`${fieldName} is required`, PasskeyKitErrorCode.INVALID_ADDRESS, { field: fieldName });
+    }
+    if (!StrKey.isValidEd25519PublicKey(address) &&
+        !StrKey.isValidContract(address)) {
+        throw new ValidationError(`Invalid ${fieldName}: must be a valid Stellar account (G…) or contract (C…) address`, PasskeyKitErrorCode.INVALID_ADDRESS, { field: fieldName, value: address.slice(0, 10) + "…" });
+    }
+}
+/**
+ * Validate that an amount is a positive, finite number.
+ *
+ * @throws {ValidationError} If the amount is not a positive number.
+ */
+export function validateAmount(amount, fieldName = "amount") {
+    if (typeof amount !== "number" || !Number.isFinite(amount)) {
+        throw new ValidationError(`${fieldName} must be a number`, PasskeyKitErrorCode.INVALID_AMOUNT, { field: fieldName });
+    }
+    if (amount <= 0) {
+        throw new ValidationError(`${fieldName} must be positive`, PasskeyKitErrorCode.INVALID_AMOUNT, { field: fieldName, value: amount });
+    }
+}
+/**
+ * Validate a signer expiration.
+ *
+ * The contract types signer expiration as `Option<u64>` UNIX seconds, so the
+ * accepted range here is the `u64`-compatible safe-integer range: a
+ * non-negative integer up to `Number.MAX_SAFE_INTEGER` (the kit carries the
+ * value as a JS number before converting to `BigInt`). `undefined` means "no
+ * expiration". Capping at `u32` (the old bound) would reject post-2106
+ * timestamps the contract accepts.
+ *
+ * @throws {ValidationError} If the expiration is out of range.
+ */
+export function validateExpiration(expiration, fieldName = "expiration") {
+    if (expiration === undefined)
+        return;
+    if (!Number.isInteger(expiration) ||
+        expiration < 0 ||
+        expiration > Number.MAX_SAFE_INTEGER) {
+        throw new ValidationError(`${fieldName} must be a non-negative integer (u64 UNIX seconds, within JS safe-integer range)`, PasskeyKitErrorCode.INVALID_INPUT, { field: fieldName, value: expiration });
+    }
+}
+/**
+ * Validate a secp256r1 public key: 65 bytes, uncompressed (`0x04`) prefix.
+ *
+ * @throws {ValidationError} If the key is not a valid uncompressed EC point.
+ */
+export function validateSecp256r1PublicKey(publicKey, fieldName = "publicKey") {
+    if (publicKey.length !== SECP256R1_PUBLIC_KEY_SIZE) {
+        throw new ValidationError(`${fieldName} must be ${SECP256R1_PUBLIC_KEY_SIZE} bytes (got ${publicKey.length})`, PasskeyKitErrorCode.INVALID_PUBLIC_KEY, { field: fieldName, length: publicKey.length });
+    }
+    if (publicKey[0] !== UNCOMPRESSED_PUBKEY_PREFIX) {
+        throw new ValidationError(`${fieldName} must be an uncompressed EC point (0x04 prefix)`, PasskeyKitErrorCode.INVALID_PUBLIC_KEY, { field: fieldName, prefix: publicKey[0] });
+    }
+}
+//# sourceMappingURL=validation.js.map

package/dist/validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validation.js","sourceRoot":"","sources":["../src/validation.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAC9C,OAAO,EACL,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,mBAAmB,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAEnE;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAC7B,OAAe,EACf,SAAS,GAAG,SAAS;IAErB,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,cAAc,EAC1B,mBAAmB,CAAC,eAAe,EACnC,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;IACJ,CAAC;IAED,IACE,CAAC,MAAM,CAAC,uBAAuB,CAAC,OAAO,CAAC;QACxC,CAAC,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC,EAChC,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,WAAW,SAAS,iEAAiE,EACrF,mBAAmB,CAAC,eAAe,EACnC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,EAAE,CACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,MAAc,EAAE,SAAS,GAAG,QAAQ;IACjE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3D,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,mBAAmB,EAC/B,mBAAmB,CAAC,cAAc,EAClC,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,IAAI,CAAC,EAAE,CAAC;QAChB,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,mBAAmB,EAC/B,mBAAmB,CAAC,cAAc,EAClC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,CACpC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB,CAChC,UAA8B,EAC9B,SAAS,GAAG,YAAY;IAExB,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO;IACrC,IACE,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC;QAC7B,UAAU,GAAG,CAAC;QACd,UAAU,GAAG,MAAM,CAAC,gBAAgB,EACpC,CAAC;QACD,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,kFAAkF,EAC9F,mBAAmB,CAAC,aAAa,EACjC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,UAAU,EAAE,CACxC,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,SAAqB,EACrB,SAAS,GAAG,WAAW;IAEvB,IAAI,SAAS,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACnD,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,YAAY,yBAAyB,eAAe,SAAS,CAAC,MAAM,GAAG,EACnF,mBAAmB,CAAC,kBAAkB,EACtC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,MAAM,EAAE,CAC/C,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,0BAA0B,EAAE,CAAC;QAChD,MAAM,IAAI,eAAe,CACvB,GAAG,SAAS,iDAAiD,EAC7D,mBAAmB,CAAC,kBAAkB,EACtC,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,EAAE,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/version.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Package version — auto-generated from package.json.
+ * @packageDocumentation
+ */
+export declare const VERSION = "0.14.0";
+export declare const NAME = "passkey-kit";
+//# sourceMappingURL=version.d.ts.map

package/dist/version.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.d.ts","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAKH,eAAO,MAAM,OAAO,WAAW,CAAC;AAChC,eAAO,MAAM,IAAI,gBAAgB,CAAC"}

package/dist/version.js

@@ -0,0 +1,9 @@
+/**
+ * Package version — auto-generated from package.json.
+ * @packageDocumentation
+ */
+// This file is auto-generated. Do not edit manually.
+// Run `pnpm run sync-version` (or `pnpm build`) to update.
+export const VERSION = "0.14.0";
+export const NAME = "passkey-kit";
+//# sourceMappingURL=version.js.map

package/dist/version.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"version.js","sourceRoot":"","sources":["../src/version.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,qDAAqD;AACrD,2DAA2D;AAE3D,MAAM,CAAC,MAAM,OAAO,GAAG,QAAQ,CAAC;AAChC,MAAM,CAAC,MAAM,IAAI,GAAG,aAAa,CAAC"}

package/package.json

@@ -1,30 +1,53 @@
 {
   "name": "passkey-kit",
-  "version": "0.12.1",
+  "version": "0.14.0",
   "description": "A helper library for creating and using smart wallet accounts on the Stellar blockchain.",
-  "author": "Tyler van der Hoeven",
+  "author": "Tyler van der Hoeven <tyler@stellar.org>",
   "license": "MIT",
   "type": "module",
-  "main": "src/index.ts",
-  "types": "types/index.d.ts",
+  "main": "dist/index.js",
+  "module": "dist/index.js",
+  "types": "dist/index.d.ts",
+  "sideEffects": false,
+  "exports": {
+    ".": {
+      "import": "./dist/index.js",
+      "types": "./dist/index.d.ts"
+    },
+    "./storage": {
+      "import": "./dist/storage/index.js",
+      "types": "./dist/storage/index.d.ts"
+    },
+    "./server": {
+      "import": "./dist/server.js",
+      "types": "./dist/server.d.ts"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENCE"
+  ],
   "dependencies": {
-    "@openzeppelin/relayer-plugin-channels": "^0.5.0",
-    "@simplewebauthn/browser": "^13.2.0",
-    "@stellar/stellar-sdk": "16.0.0-rc.1",
+    "@openzeppelin/relayer-plugin-channels": "^0.20.0",
+    "@simplewebauthn/browser": "^13.3.0",
+    "@stellar/stellar-sdk": "16.0.1",
     "base64url": "^3.0.1",
     "buffer": "^6.0.3",
-    "passkey-kit-sdk": "0.7.3",
-    "sac-sdk": "0.4.3"
+    "sac-sdk": "0.4.3",
+    "passkey-kit-sdk": "0.8.0"
   },
   "devDependencies": {
     "@types/node": "^24.6.0",
-    "typescript": "^5.9.2"
+    "fake-indexeddb": "^6.2.5",
+    "typescript": "^5.9.2",
+    "vitest": "^3.2.4"
+  },
+  "peerDependencies": {
+    "@stellar/stellar-sdk": ">=16.0.0"
   },
-  "workspaces": [
-    "packages/*"
-  ],
   "engines": {
-    "node": ">=22.18.0"
+    "node": ">=22.0.0"
   },
   "repository": {
     "type": "git",
@@ -48,13 +71,17 @@
   },
   "homepage": "https://github.com/kalepail/passkey-kit/blob/main/README.md",
   "scripts": {
+    "sync-version": "node scripts/sync-version.js",
+    "prebuild": "node scripts/sync-version.js",
+    "build:bindings": "pnpm --filter sac-sdk run build && pnpm --filter passkey-kit-sdk run build",
+    "bindings:regen": "bash scripts/bindings/build.sh",
+    "verify:bindings": "bash scripts/bindings/verify.sh",
+    "build": "pnpm run build:bindings && tsc && node scripts/verify-esm.mjs",
+    "verify:esm": "node scripts/verify-esm.mjs",
+    "test": "vitest",
+    "clean": "rm -rf dist packages/passkey-kit-sdk/dist packages/sac-sdk/dist",
     "build:demo": "cd demo && pnpm --ignore-workspace install && pnpm run build",
     "deploy:demo": "npx wrangler pages deploy",
-    "deploy:demo:prod": "npx wrangler pages deploy --env production",
-    "test:p27-auth": "bun bun_tests/9.index.ts",
-    "build:sac": "pnpm --filter=sac-sdk run build",
-    "build:pks": "pnpm --filter=passkey-kit-sdk run build",
-    "build": "pnpm run build:sac && pnpm run build:pks && tsc",
-    "ext:cp": "./clone-js-sdk.sh"
+    "deploy:demo:prod": "npx wrangler pages deploy --branch production"
   }
 }

package/.claude/settings.local.json

@@ -1,20 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "WebSearch",
-      "mcp__context7__resolve-library-id",
-      "Bash(tree:*)",
-      "mcp__deepwiki__read_wiki_structure",
-      "mcp__context7__query-docs",
-      "mcp__deepwiki__read_wiki_contents",
-      "Bash(curl:*)",
-      "Bash(pnpm install:*)",
-      "Bash(pnpm run build:*)",
-      "mcp__github__get_file_contents",
-      "mcp__perplexity__perplexity_ask",
-      "mcp__perplexity__perplexity_search"
-    ],
-    "deny": [],
-    "ask": []
-  }
-}