passkey-kit 0.12.1 → 0.14.0

package/dist/kit.js

@@ -0,0 +1,290 @@
+/**
+ * `PasskeyKit` — the browser-side facade for creating and using smart-wallet
+ * accounts with WebAuthn passkeys.
+ *
+ * This is a ground-up rewrite of the old monolithic `kit.ts`. The signing
+ * pipeline, WebAuthn ceremonies, deploy path, and signer writes now live in
+ * dependency-injected managers ({@link CredentialManager}, {@link SignerManager},
+ * {@link SubmissionManager}) wired here with late-bound closures. All Protocol-27
+ * probe shims, dead commented experiments, and the legacy factory-address
+ * fallback are gone — the kit targets stellar-sdk >= 16 and the current wallet.
+ *
+ * @packageDocumentation
+ */
+import { xdr } from "@stellar/stellar-sdk";
+import { Server } from "@stellar/stellar-sdk/rpc";
+import { startAuthentication, startRegistration, } from "@simplewebauthn/browser";
+import { Client as PasskeyClient } from "passkey-kit-sdk";
+import base64url from "./base64url.js";
+import { SignerKey, } from "./types.js";
+import { ConfigurationError, PasskeyKitError, PasskeyKitErrorCode, WalletNotConnectedError, WalletOwnershipError, } from "./errors.js";
+import { PasskeyEventEmitter } from "./events.js";
+import { DEFAULT_TIMEOUT_SECONDS } from "./constants.js";
+import { calculateExpiration } from "./kit/tx-ops.js";
+import { CredentialManager, SignerManager, SubmissionManager, } from "./managers/index.js";
+import { resolveDeployer } from "./kit/deploy-ops.js";
+import { contractInstanceExists } from "./rpc-data.js";
+export class PasskeyKit {
+    rpc;
+    rpcUrl;
+    networkPassphrase;
+    walletWasmHash;
+    rpId;
+    /** Lifecycle event emitter (walletCreated, walletConnected, …). */
+    events = new PasskeyEventEmitter();
+    timeoutInSeconds;
+    webAuthn;
+    credentialManager;
+    signerManager;
+    submissionManager;
+    /** The connected passkey's base64url keyId, if any. */
+    keyId;
+    /** The connected wallet client, if any. */
+    wallet;
+    constructor(config) {
+        if (!config.rpcUrl) {
+            throw new ConfigurationError("rpcUrl is required", PasskeyKitErrorCode.MISSING_CONFIG);
+        }
+        if (!config.networkPassphrase) {
+            throw new ConfigurationError("networkPassphrase is required", PasskeyKitErrorCode.MISSING_CONFIG);
+        }
+        if (!config.walletWasmHash) {
+            throw new ConfigurationError("walletWasmHash is required", PasskeyKitErrorCode.MISSING_CONFIG);
+        }
+        this.rpc = new Server(config.rpcUrl);
+        this.rpcUrl = config.rpcUrl;
+        this.networkPassphrase = config.networkPassphrase;
+        this.walletWasmHash = config.walletWasmHash;
+        this.rpId = config.rpId;
+        this.timeoutInSeconds = config.timeoutInSeconds ?? DEFAULT_TIMEOUT_SECONDS;
+        this.webAuthn =
+            config.WebAuthn ?? { startRegistration, startAuthentication };
+        const deployerKeypair = resolveDeployer(config.deploySource);
+        this.credentialManager = new CredentialManager({
+            rpId: this.rpId,
+            webAuthn: this.webAuthn,
+            storage: config.storage,
+        });
+        this.signerManager = new SignerManager({
+            networkPassphrase: this.networkPassphrase,
+            timeoutInSeconds: this.timeoutInSeconds,
+            rpc: this.rpc,
+            getWallet: () => this.wallet,
+            getContractId: () => this.wallet?.options.contractId,
+            getSignerContext: () => this.signerContext(),
+            calculateExpiration: () => calculateExpiration({ rpc: this.rpc, timeoutInSeconds: this.timeoutInSeconds }),
+        });
+        this.submissionManager = new SubmissionManager({
+            rpc: this.rpc,
+            rpcUrl: config.rpcUrl,
+            networkPassphrase: this.networkPassphrase,
+            walletWasmHash: this.walletWasmHash,
+            deployerKeypair,
+            timeoutInSeconds: this.timeoutInSeconds,
+        });
+    }
+    /** The connected wallet's contract id, if any. */
+    get contractId() {
+        return this.wallet?.options.contractId;
+    }
+    /** The fee-paying deployer's `G…` public key. */
+    get deployerPublicKey() {
+        return this.submissionManager.deployerPublicKey;
+    }
+    signerContext() {
+        return { rpId: this.rpId, webAuthn: this.webAuthn, defaultKeyId: this.keyId };
+    }
+    // -- Passkey / wallet lifecycle ---------------------------------------------
+    /** Run a passkey registration ceremony without deploying a wallet. */
+    createKey(appName, userName, options) {
+        return this.credentialManager.createKey(appName, userName, options?.authenticatorSelection);
+    }
+    /**
+     * Register a passkey and deploy a smart wallet initialized with it as the
+     * first signer. Returns the signed deploy transaction (submit it via
+     * `PasskeyServer`).
+     */
+    async createWallet(appName, userName, options) {
+        const created = await this.createKey(appName, userName, options);
+        const deployTx = await this.submissionManager.buildDeployTransaction(created.keyIdBuffer, created.publicKey);
+        const contractId = deployTx.result.options.contractId;
+        this.wallet = new PasskeyClient({
+            contractId,
+            rpcUrl: this.rpcUrl,
+            networkPassphrase: this.networkPassphrase,
+        });
+        this.keyId = created.keyId;
+        const signedTx = await this.submissionManager.signDeploy(deployTx);
+        await this.credentialManager.rememberPasskey({
+            keyId: created.keyId,
+            publicKey: created.publicKey,
+            contractId,
+            createdAt: Date.now(),
+        });
+        this.events.emit("walletCreated", { contractId, keyId: created.keyId });
+        return {
+            rawResponse: created.rawResponse,
+            keyId: created.keyIdBuffer,
+            keyIdBase64: created.keyId,
+            contractId,
+            signedTx,
+        };
+    }
+    /**
+     * Connect an existing wallet from a passkey.
+     *
+     * Resolves the wallet address by (1) deterministic derivation from the keyId,
+     * (2) local storage, then (3) an injected indexer lookup — and then VERIFIES
+     * ownership: the keyId must resolve to a live signer on the wallet (#601 F7).
+     * This closes the unverified reverse-lookup hole (#598 F3) at the SDK layer.
+     *
+     * @throws {WalletOwnershipError} If the keyId is not a signer on the wallet.
+     */
+    async connectWallet(options) {
+        let rawResponse;
+        let keyId = options?.keyId;
+        if (!keyId) {
+            const auth = await this.credentialManager.authenticate();
+            keyId = auth.keyId;
+            rawResponse = auth.rawResponse;
+        }
+        const keyIdBase64 = keyId instanceof Uint8Array ? base64url(Buffer.from(keyId)) : keyId;
+        const keyIdBuffer = keyId instanceof Uint8Array ? Buffer.from(keyId) : base64url.toBuffer(keyId);
+        // 1) Deterministic derivation, confirmed by an on-chain instance read.
+        // Transport errors (429/5xx/timeout) propagate — only an authoritative
+        // not-found may abandon the canonical derivation for the less-trusted
+        // storage/indexer fallbacks.
+        let contractId = this.submissionManager.deriveWalletAddress(keyIdBuffer);
+        if (!(await contractInstanceExists(this.rpc, contractId))) {
+            // 2) local storage, then 3) injected indexer lookup.
+            contractId =
+                (await this.credentialManager.lookupContractId(keyIdBase64)) ??
+                    (options?.getContractId
+                        ? await options.getContractId(keyIdBase64)
+                        : undefined);
+        }
+        if (!contractId) {
+            throw new PasskeyKitError("Could not resolve a wallet for the given passkey", PasskeyKitErrorCode.WALLET_NOT_FOUND, { context: { keyId: keyIdBase64 } });
+        }
+        this.wallet = new PasskeyClient({
+            contractId,
+            rpcUrl: this.rpcUrl,
+            networkPassphrase: this.networkPassphrase,
+        });
+        this.keyId = keyIdBase64;
+        // 3) Ownership verification (F7): the keyId must be a live signer.
+        // A thrown error here is a transport failure, not proof of non-ownership —
+        // surface it as-is (a valid passkey must not read as an ownership mismatch
+        // because the RPC hiccuped); only a definitive not-found (`null`) does.
+        let signerVal;
+        try {
+            signerVal = await this.signerManager.getSigner(SignerKey.Secp256r1(keyIdBase64));
+        }
+        catch (err) {
+            this.wallet = undefined;
+            this.keyId = undefined;
+            throw err;
+        }
+        if (!signerVal) {
+            this.wallet = undefined;
+            this.keyId = undefined;
+            throw new WalletOwnershipError("The passkey is not a signer on the resolved wallet", { contractId, keyId: keyIdBase64 });
+        }
+        // 4) Optional wasm-hash check (opt-in; upgraded wallets differ by design).
+        // A failed check must leave the kit disconnected — otherwise a subsequent
+        // sign() would operate on the contract the caller just rejected.
+        if (options?.verifyWasmHash) {
+            try {
+                await this.assertWalletWasmHash(contractId);
+            }
+            catch (err) {
+                this.wallet = undefined;
+                this.keyId = undefined;
+                throw err;
+            }
+        }
+        this.events.emit("walletConnected", { contractId, keyId: keyIdBase64 });
+        return { rawResponse, keyId: keyIdBuffer, keyIdBase64, contractId };
+    }
+    async assertWalletWasmHash(contractId) {
+        const instance = await this.rpc.getContractData(contractId, xdr.ScVal.scvLedgerKeyContractInstance());
+        const executable = instance.val
+            .contractData()
+            .val()
+            .instance()
+            .executable();
+        if (executable.switch().name !== "contractExecutableWasm") {
+            throw new WalletOwnershipError("Wallet is not a WASM contract", {
+                contractId,
+            });
+        }
+        const wasmHash = executable.wasmHash().toString("hex");
+        if (wasmHash !== this.walletWasmHash.toLowerCase()) {
+            throw new WalletOwnershipError("Wallet WASM hash does not match", {
+                contractId,
+                expected: this.walletWasmHash,
+                actual: wasmHash,
+            });
+        }
+    }
+    /** Disconnect the current wallet. */
+    disconnect() {
+        const contractId = this.contractId;
+        this.wallet = undefined;
+        this.keyId = undefined;
+        if (contractId) {
+            this.events.emit("walletDisconnected", { contractId });
+        }
+    }
+    // -- Signing -----------------------------------------------------------------
+    /** Sign a single auth entry (defaults to the connected passkey signer). */
+    signAuthEntry(entry, signer, options) {
+        return this.signerManager.signAuthEntry(entry, signer, options);
+    }
+    /** Sign an assembled transaction's wallet auth entries. */
+    sign(txn, signer, options) {
+        return this.signerManager.sign(txn, signer, options);
+    }
+    // -- Signer management -------------------------------------------------------
+    addSecp256r1(keyId, publicKey, limits, store, expiration) {
+        return this.signerManager.addSecp256r1(keyId, publicKey, limits, store, expiration);
+    }
+    /**
+     * Update a passkey signer's limits/storage/expiration. The public key is
+     * re-read from the ledger — never caller- or indexer-supplied.
+     */
+    updateSecp256r1(keyId, limits, store, expiration) {
+        return this.signerManager.updateSecp256r1(keyId, limits, store, expiration);
+    }
+    addEd25519(publicKey, limits, store, expiration) {
+        return this.signerManager.addEd25519(publicKey, limits, store, expiration);
+    }
+    updateEd25519(publicKey, limits, store, expiration) {
+        return this.signerManager.updateEd25519(publicKey, limits, store, expiration);
+    }
+    addPolicy(policy, limits, store, expiration) {
+        return this.signerManager.addPolicy(policy, limits, store, expiration);
+    }
+    updatePolicy(policy, limits, store, expiration) {
+        return this.signerManager.updatePolicy(policy, limits, store, expiration);
+    }
+    remove(signerKey) {
+        return this.signerManager.remove(signerKey);
+    }
+    /** Build an `upgrade(new_wasm_hash)` transaction for the connected wallet. */
+    upgrade(newWasmHash) {
+        return this.signerManager.upgrade(newWasmHash);
+    }
+    /** Read a signer entry from the ledger (temporary before persistent). */
+    getSigner(signerKey) {
+        return this.signerManager.getSigner(signerKey);
+    }
+    /** Require a connected wallet, or throw. */
+    requireWallet() {
+        if (!this.wallet) {
+            throw new WalletNotConnectedError();
+        }
+        return this.wallet;
+    }
+}
+//# sourceMappingURL=kit.js.map

package/dist/kit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kit.js","sourceRoot":"","sources":["../src/kit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EACL,mBAAmB,EACnB,iBAAiB,GAGlB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAC1D,OAAO,SAAS,MAAM,gBAAgB,CAAC;AACvC,OAAO,EACL,SAAS,GAMV,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,kBAAkB,EAClB,eAAe,EACf,mBAAmB,EACnB,uBAAuB,EACvB,oBAAoB,GACrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAClD,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AAKzD,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAC;AACtD,OAAO,EACL,iBAAiB,EACjB,aAAa,EACb,iBAAiB,GAClB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AACtD,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AA6CvD,MAAM,OAAO,UAAU;IACZ,GAAG,CAAS;IACZ,MAAM,CAAS;IACf,iBAAiB,CAAS;IAC1B,cAAc,CAAS;IACvB,IAAI,CAAU;IAEvB,mEAAmE;IAC1D,MAAM,GAAG,IAAI,mBAAmB,EAAE,CAAC;IAE3B,gBAAgB,CAAS;IACzB,QAAQ,CAAiB;IAEzB,iBAAiB,CAAoB;IACrC,aAAa,CAAgB;IAC7B,iBAAiB,CAAoB;IAEtD,uDAAuD;IACvD,KAAK,CAAqB;IAC1B,2CAA2C;IAC3C,MAAM,CAA4B;IAElC,YAAY,MAAwB;QAClC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,kBAAkB,CAC1B,oBAAoB,EACpB,mBAAmB,CAAC,cAAc,CACnC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC;YAC9B,MAAM,IAAI,kBAAkB,CAC1B,+BAA+B,EAC/B,mBAAmB,CAAC,cAAc,CACnC,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAC3B,MAAM,IAAI,kBAAkB,CAC1B,4BAA4B,EAC5B,mBAAmB,CAAC,cAAc,CACnC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACrC,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC5B,IAAI,CAAC,iBAAiB,GAAG,MAAM,CAAC,iBAAiB,CAAC;QAClD,IAAI,CAAC,cAAc,GAAG,MAAM,CAAC,cAAc,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACxB,IAAI,CAAC,gBAAgB,GAAG,MAAM,CAAC,gBAAgB,IAAI,uBAAuB,CAAC;QAC3E,IAAI,CAAC,QAAQ;YACX,MAAM,CAAC,QAAQ,IAAK,EAAE,iBAAiB,EAAE,mBAAmB,EAAqB,CAAC;QAEpF,MAAM,eAAe,GAAG,eAAe,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QAE7D,IAAI,CAAC,iBAAiB,GAAG,IAAI,iBAAiB,CAAC;YAC7C,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QAEH,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC;YACrC,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,SAAS,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM;YAC5B,aAAa,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU;YACpD,gBAAgB,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE;YAC5C,mBAAmB,EAAE,GAAG,EAAE,CACxB,mBAAmB,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,CAAC;SAClF,CAAC,CAAC;QAEH,IAAI,CAAC,iBAAiB,GAAG,IAAI,iBAAiB,CAAC;YAC7C,GAAG,EAAE,IAAI,CAAC,GAAG;YACb,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe;YACf,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;SACxC,CAAC,CAAC;IACL,CAAC;IAED,kDAAkD;IAClD,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC;IACzC,CAAC;IAED,iDAAiD;IACjD,IAAI,iBAAiB;QACnB,OAAO,IAAI,CAAC,iBAAiB,CAAC,iBAAiB,CAAC;IAClD,CAAC;IAEO,aAAa;QACnB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;IAChF,CAAC;IAED,8EAA8E;IAE9E,sEAAsE;IACtE,SAAS,CACP,OAAe,EACf,QAAgB,EAChB,OAAuB;QAEvB,OAAO,IAAI,CAAC,iBAAiB,CAAC,SAAS,CACrC,OAAO,EACP,QAAQ,EACR,OAAO,EAAE,sBAAsB,CAChC,CAAC;IACJ,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,YAAY,CAChB,OAAe,EACf,QAAgB,EAChB,OAAuB;QAEvB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;QAEjE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,sBAAsB,CAClE,OAAO,CAAC,WAAW,EACnB,OAAO,CAAC,SAAS,CAClB,CAAC;QACF,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QAEtD,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC;YAC9B,UAAU;YACV,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC;QAE3B,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;QAEnE,MAAM,IAAI,CAAC,iBAAiB,CAAC,eAAe,CAAC;YAC3C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS;YAC5B,UAAU;YACV,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC;QAEH,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;QAExE,OAAO;YACL,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,KAAK,EAAE,OAAO,CAAC,WAAW;YAC1B,WAAW,EAAE,OAAO,CAAC,KAAK;YAC1B,UAAU;YACV,QAAQ;SACT,CAAC;IACJ,CAAC;IAED;;;;;;;;;OASG;IACH,KAAK,CAAC,aAAa,CAAC,OAAwB;QAC1C,IAAI,WAAmD,CAAC;QACxD,IAAI,KAAK,GAAG,OAAO,EAAE,KAAK,CAAC;QAE3B,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,YAAY,EAAE,CAAC;YACzD,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACnB,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;QACjC,CAAC;QAED,MAAM,WAAW,GACf,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QACtE,MAAM,WAAW,GACf,KAAK,YAAY,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAE/E,uEAAuE;QACvE,uEAAuE;QACvE,sEAAsE;QACtE,6BAA6B;QAC7B,IAAI,UAAU,GACZ,IAAI,CAAC,iBAAiB,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC,EAAE,CAAC;YAC1D,qDAAqD;YACrD,UAAU;gBACR,CAAC,MAAM,IAAI,CAAC,iBAAiB,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;oBAC5D,CAAC,OAAO,EAAE,aAAa;wBACrB,CAAC,CAAC,MAAM,OAAO,CAAC,aAAa,CAAC,WAAW,CAAC;wBAC1C,CAAC,CAAC,SAAS,CAAC,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,eAAe,CACvB,kDAAkD,EAClD,mBAAmB,CAAC,gBAAgB,EACpC,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,CACpC,CAAC;QACJ,CAAC;QAED,IAAI,CAAC,MAAM,GAAG,IAAI,aAAa,CAAC;YAC9B,UAAU;YACV,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;SAC1C,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;QAEzB,mEAAmE;QACnE,2EAA2E;QAC3E,2EAA2E;QAC3E,wEAAwE;QACxE,IAAI,SAAS,CAAC;QACd,IAAI,CAAC;YACH,SAAS,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,SAAS,CAC5C,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CACjC,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YACvB,MAAM,GAAG,CAAC;QACZ,CAAC;QACD,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;YACxB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;YACvB,MAAM,IAAI,oBAAoB,CAC5B,oDAAoD,EACpD,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,CACnC,CAAC;QACJ,CAAC;QAED,2EAA2E;QAC3E,0EAA0E;QAC1E,iEAAiE;QACjE,IAAI,OAAO,EAAE,cAAc,EAAE,CAAC;YAC5B,IAAI,CAAC;gBACH,MAAM,IAAI,CAAC,oBAAoB,CAAC,UAAU,CAAC,CAAC;YAC9C,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACb,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;gBACxB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;gBACvB,MAAM,GAAG,CAAC;YACZ,CAAC;QACH,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;QAExE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,WAAW,EAAE,WAAW,EAAE,UAAU,EAAE,CAAC;IACtE,CAAC;IAEO,KAAK,CAAC,oBAAoB,CAAC,UAAkB;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,eAAe,CAC7C,UAAU,EACV,GAAG,CAAC,KAAK,CAAC,4BAA4B,EAAE,CACzC,CAAC;QACF,MAAM,UAAU,GAAG,QAAQ,CAAC,GAAG;aAC5B,YAAY,EAAE;aACd,GAAG,EAAE;aACL,QAAQ,EAAE;aACV,UAAU,EAAE,CAAC;QAChB,IAAI,UAAU,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,wBAAwB,EAAE,CAAC;YAC1D,MAAM,IAAI,oBAAoB,CAAC,+BAA+B,EAAE;gBAC9D,UAAU;aACX,CAAC,CAAC;QACL,CAAC;QACD,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QACvD,IAAI,QAAQ,KAAK,IAAI,CAAC,cAAc,CAAC,WAAW,EAAE,EAAE,CAAC;YACnD,MAAM,IAAI,oBAAoB,CAAC,iCAAiC,EAAE;gBAChE,UAAU;gBACV,QAAQ,EAAE,IAAI,CAAC,cAAc;gBAC7B,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,qCAAqC;IACrC,UAAU;QACR,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,MAAM,GAAG,SAAS,CAAC;QACxB,IAAI,CAAC,KAAK,GAAG,SAAS,CAAC;QACvB,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED,+EAA+E;IAE/E,2EAA2E;IAC3E,aAAa,CACX,KAAoC,EACpC,MAAe,EACf,OAAqB;QAErB,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,2DAA2D;IAC3D,IAAI,CACF,GAA4B,EAC5B,MAAe,EACf,OAAqB;QAErB,OAAO,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACvD,CAAC;IAED,+EAA+E;IAE/E,YAAY,CACV,KAA0B,EAC1B,SAA8B,EAC9B,MAAoB,EACpB,KAAkB,EAClB,UAAmB;QAEnB,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACtF,CAAC;IACD;;;OAGG;IACH,eAAe,CACb,KAA0B,EAC1B,MAAoB,EACpB,KAAkB,EAClB,UAAmB;QAEnB,OAAO,IAAI,CAAC,aAAa,CAAC,eAAe,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC9E,CAAC;IACD,UAAU,CACR,SAAiB,EACjB,MAAoB,EACpB,KAAkB,EAClB,UAAmB;QAEnB,OAAO,IAAI,CAAC,aAAa,CAAC,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC7E,CAAC;IACD,aAAa,CACX,SAAiB,EACjB,MAAoB,EACpB,KAAkB,EAClB,UAAmB;QAEnB,OAAO,IAAI,CAAC,aAAa,CAAC,aAAa,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAChF,CAAC;IACD,SAAS,CACP,MAAc,EACd,MAAoB,EACpB,KAAkB,EAClB,UAAmB;QAEnB,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACzE,CAAC;IACD,YAAY,CACV,MAAc,EACd,MAAoB,EACpB,KAAkB,EAClB,UAAmB;QAEnB,OAAO,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,CAAC,SAAoB;QACzB,OAAO,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IAC9C,CAAC;IAED,8EAA8E;IAC9E,OAAO,CAAC,WAAgC;QACtC,OAAO,IAAI,CAAC,aAAa,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;IACjD,CAAC;IAED,yEAAyE;IACzE,SAAS,CAAC,SAAoB;QAC5B,OAAO,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACjD,CAAC;IAED,4CAA4C;IAC5C,aAAa;QACX,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;YACjB,MAAM,IAAI,uBAAuB,EAAE,CAAC;QACtC,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;CACF"}

package/dist/managers/credential-manager.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Credential manager: WebAuthn passkey ceremonies + optional passkey-record
+ * persistence.
+ *
+ * Constructed from a plain {@link CredentialManagerDeps} object so it is fully
+ * unit-testable with `vi.fn()` fakes (no live authenticator or RPC needed).
+ *
+ * @packageDocumentation
+ */
+import type { AuthenticatorSelectionCriteria } from "@simplewebauthn/browser";
+import type { StorageAdapter, StoredPasskey } from "../types.js";
+import { type AuthenticatedPasskey, type CreatedPasskey, type WebAuthnClient } from "../kit/webauthn-ops.js";
+export interface CredentialManagerDeps {
+    rpId?: string;
+    webAuthn: WebAuthnClient;
+    /** Optional passkey-record store; when absent, remember/lookup are no-ops. */
+    storage?: StorageAdapter;
+}
+export declare class CredentialManager {
+    private readonly deps;
+    constructor(deps: CredentialManagerDeps);
+    private get webAuthnDeps();
+    /** Run a registration ceremony, returning the new passkey + its public key. */
+    createKey(appName: string, userName: string, authenticatorSelection?: AuthenticatorSelectionCriteria): Promise<CreatedPasskey>;
+    /** Run a discoverable-credential authentication ceremony. */
+    authenticate(): Promise<AuthenticatedPasskey>;
+    /** Persist a passkey → wallet association (no-op without a storage adapter). */
+    rememberPasskey(record: StoredPasskey): Promise<void>;
+    /** Remove a persisted passkey record (no-op without a storage adapter). */
+    forgetPasskey(keyId: string): Promise<void>;
+    /** Look up a stored passkey record by keyId. */
+    getPasskey(keyId: string): Promise<StoredPasskey | null>;
+    /**
+     * Resolve a wallet contract id for a keyId from local storage, if a record
+     * exists. Used as an indexer-free `connectWallet` fallback.
+     */
+    lookupContractId(keyId: string): Promise<string | undefined>;
+}
+//# sourceMappingURL=credential-manager.d.ts.map

package/dist/managers/credential-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-manager.d.ts","sourceRoot":"","sources":["../../src/managers/credential-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,8BAA8B,EAAE,MAAM,yBAAyB,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AACjE,OAAO,EAGL,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,cAAc,EACpB,MAAM,wBAAwB,CAAC;AAEhC,MAAM,WAAW,qBAAqB;IACpC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,cAAc,CAAC;IACzB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,cAAc,CAAC;CAC1B;AAED,qBAAa,iBAAiB;IAChB,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,qBAAqB;IAExD,OAAO,KAAK,YAAY,GAEvB;IAED,+EAA+E;IAC/E,SAAS,CACP,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,sBAAsB,CAAC,EAAE,8BAA8B,GACtD,OAAO,CAAC,cAAc,CAAC;IAS1B,6DAA6D;IAC7D,YAAY,IAAI,OAAO,CAAC,oBAAoB,CAAC;IAI7C,gFAAgF;IAC1E,eAAe,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC;IAI3D,2EAA2E;IACrE,aAAa,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIjD,gDAAgD;IAC1C,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;IAI9D;;;OAGG;IACG,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC;CAGnE"}

package/dist/managers/credential-manager.js

@@ -0,0 +1,47 @@
+/**
+ * Credential manager: WebAuthn passkey ceremonies + optional passkey-record
+ * persistence.
+ *
+ * Constructed from a plain {@link CredentialManagerDeps} object so it is fully
+ * unit-testable with `vi.fn()` fakes (no live authenticator or RPC needed).
+ *
+ * @packageDocumentation
+ */
+import { authenticatePasskey, createPasskey, } from "../kit/webauthn-ops.js";
+export class CredentialManager {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    get webAuthnDeps() {
+        return { rpId: this.deps.rpId, webAuthn: this.deps.webAuthn };
+    }
+    /** Run a registration ceremony, returning the new passkey + its public key. */
+    createKey(appName, userName, authenticatorSelection) {
+        return createPasskey(this.webAuthnDeps, appName, userName, authenticatorSelection);
+    }
+    /** Run a discoverable-credential authentication ceremony. */
+    authenticate() {
+        return authenticatePasskey(this.webAuthnDeps);
+    }
+    /** Persist a passkey → wallet association (no-op without a storage adapter). */
+    async rememberPasskey(record) {
+        await this.deps.storage?.save(record);
+    }
+    /** Remove a persisted passkey record (no-op without a storage adapter). */
+    async forgetPasskey(keyId) {
+        await this.deps.storage?.delete(keyId);
+    }
+    /** Look up a stored passkey record by keyId. */
+    async getPasskey(keyId) {
+        return (await this.deps.storage?.get(keyId)) ?? null;
+    }
+    /**
+     * Resolve a wallet contract id for a keyId from local storage, if a record
+     * exists. Used as an indexer-free `connectWallet` fallback.
+     */
+    async lookupContractId(keyId) {
+        return (await this.getPasskey(keyId))?.contractId;
+    }
+}
+//# sourceMappingURL=credential-manager.js.map

package/dist/managers/credential-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential-manager.js","sourceRoot":"","sources":["../../src/managers/credential-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,OAAO,EACL,mBAAmB,EACnB,aAAa,GAId,MAAM,wBAAwB,CAAC;AAShC,MAAM,OAAO,iBAAiB;IACC;IAA7B,YAA6B,IAA2B;QAA3B,SAAI,GAAJ,IAAI,CAAuB;IAAG,CAAC;IAE5D,IAAY,YAAY;QACtB,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;IAChE,CAAC;IAED,+EAA+E;IAC/E,SAAS,CACP,OAAe,EACf,QAAgB,EAChB,sBAAuD;QAEvD,OAAO,aAAa,CAClB,IAAI,CAAC,YAAY,EACjB,OAAO,EACP,QAAQ,EACR,sBAAsB,CACvB,CAAC;IACJ,CAAC;IAED,6DAA6D;IAC7D,YAAY;QACV,OAAO,mBAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAChD,CAAC;IAED,gFAAgF;IAChF,KAAK,CAAC,eAAe,CAAC,MAAqB;QACzC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,CAAC;IAED,2EAA2E;IAC3E,KAAK,CAAC,aAAa,CAAC,KAAa;QAC/B,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IACzC,CAAC;IAED,gDAAgD;IAChD,KAAK,CAAC,UAAU,CAAC,KAAa;QAC5B,OAAO,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,IAAI,IAAI,CAAC;IACvD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,gBAAgB,CAAC,KAAa;QAClC,OAAO,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC;IACpD,CAAC;CACF"}

package/dist/managers/index.d.ts

@@ -0,0 +1,7 @@
+/**
+ * Dependency-injected managers that compose the kit facade.
+ */
+export { CredentialManager, type CredentialManagerDeps, } from "./credential-manager.js";
+export { SignerManager, type SignerManagerDeps } from "./signer-manager.js";
+export { SubmissionManager, type SubmissionManagerDeps, } from "./submission-manager.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/managers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/managers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,iBAAiB,EACjB,KAAK,qBAAqB,GAC3B,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAAE,KAAK,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EACL,iBAAiB,EACjB,KAAK,qBAAqB,GAC3B,MAAM,yBAAyB,CAAC"}

package/dist/managers/index.js

@@ -0,0 +1,7 @@
+/**
+ * Dependency-injected managers that compose the kit facade.
+ */
+export { CredentialManager, } from "./credential-manager.js";
+export { SignerManager } from "./signer-manager.js";
+export { SubmissionManager, } from "./submission-manager.js";
+//# sourceMappingURL=index.js.map

package/dist/managers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/managers/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,iBAAiB,GAElB,MAAM,yBAAyB,CAAC;AACjC,OAAO,EAAE,aAAa,EAA0B,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EACL,iBAAiB,GAElB,MAAM,yBAAyB,CAAC"}

package/dist/managers/signer-manager.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Signer manager: the signing pipeline and signer-write builders for the
+ * connected wallet.
+ *
+ * Owns nothing directly — every wallet-dependent value is a late-bound closure
+ * ({@link SignerManagerDeps.getWallet} / `getContractId` / `getSpec`) supplied by
+ * the kit facade, so the manager is constructed once and always sees current
+ * state. That indirection is also what makes it `vi.fn()`-testable.
+ *
+ * @packageDocumentation
+ */
+import { xdr } from "@stellar/stellar-sdk";
+import type { Server } from "@stellar/stellar-sdk/rpc";
+import type { AssembledTransaction } from "@stellar/stellar-sdk/contract";
+import type { Client as PasskeyClient, SignerVal } from "passkey-kit-sdk";
+import type { Signer, SignerContext } from "../signers.js";
+import { SignerKey, SignerStore, type SignerLimits } from "../types.js";
+import { type SignOptions } from "../kit/tx-ops.js";
+import { type WalletTx } from "../kit/wallet-ops.js";
+export interface SignerManagerDeps {
+    networkPassphrase: string;
+    timeoutInSeconds: number;
+    rpc: Server;
+    getWallet: () => PasskeyClient | undefined;
+    getContractId: () => string | undefined;
+    getSignerContext: () => SignerContext;
+    calculateExpiration: () => Promise<number>;
+}
+export declare class SignerManager {
+    private readonly deps;
+    constructor(deps: SignerManagerDeps);
+    private requireWallet;
+    private writeDeps;
+    private signAuthEntryDeps;
+    /** Sign a single auth entry with `signer` (defaults to the connected passkey). */
+    signAuthEntry(entry: xdr.SorobanAuthorizationEntry, signer?: Signer, options?: SignOptions): Promise<xdr.SorobanAuthorizationEntry>;
+    /** Sign an assembled transaction's wallet auth entries. */
+    sign<T>(txn: AssembledTransaction<T>, signer?: Signer, options?: SignOptions): Promise<AssembledTransaction<T>>;
+    addSecp256r1(keyId: string | Uint8Array, publicKey: string | Uint8Array, limits: SignerLimits, store: SignerStore, expiration?: number): Promise<WalletTx>;
+    /**
+     * Update a passkey signer's limits/storage/expiration.
+     *
+     * The signer's `publicKey` is deliberately NOT a parameter: `update_signer`
+     * replaces the whole on-chain `SignerVal`, so the ledger is treated as the
+     * single source of truth for key material — a limits-only update must never
+     * change the stored public key. The authoritative key
+     * is re-read from the ledger here, and only that value is written back.
+     *
+     * @throws {SignerNotFoundError} If the keyId is not a live on-chain signer.
+     */
+    updateSecp256r1(keyId: string | Uint8Array, limits: SignerLimits, store: SignerStore, expiration?: number): Promise<WalletTx>;
+    addEd25519(publicKey: string, limits: SignerLimits, store: SignerStore, expiration?: number): Promise<WalletTx>;
+    updateEd25519(publicKey: string, limits: SignerLimits, store: SignerStore, expiration?: number): Promise<WalletTx>;
+    addPolicy(policy: string, limits: SignerLimits, store: SignerStore, expiration?: number): Promise<WalletTx>;
+    updatePolicy(policy: string, limits: SignerLimits, store: SignerStore, expiration?: number): Promise<WalletTx>;
+    remove(signerKey: SignerKey): Promise<WalletTx>;
+    /** Build an `upgrade(new_wasm_hash)` transaction. */
+    upgrade(newWasmHash: Buffer | Uint8Array): Promise<WalletTx>;
+    /** Read a signer entry from the ledger (temporary before persistent). */
+    getSigner(signerKey: SignerKey): Promise<SignerVal | null>;
+}
+//# sourceMappingURL=signer-manager.d.ts.map

package/dist/managers/signer-manager.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer-manager.d.ts","sourceRoot":"","sources":["../../src/managers/signer-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAC3C,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,+BAA+B,CAAC;AACvC,OAAO,KAAK,EAAE,MAAM,IAAI,aAAa,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC1E,OAAO,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAE3D,OAAO,EACL,SAAS,EACT,WAAW,EACX,KAAK,YAAY,EAClB,MAAM,aAAa,CAAC;AAGrB,OAAO,EAGL,KAAK,WAAW,EACjB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAOL,KAAK,QAAQ,EACd,MAAM,sBAAsB,CAAC;AAO9B,MAAM,WAAW,iBAAiB;IAChC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,MAAM,CAAC;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,aAAa,GAAG,SAAS,CAAC;IAC3C,aAAa,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACxC,gBAAgB,EAAE,MAAM,aAAa,CAAC;IACtC,mBAAmB,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAC;CAC5C;AAED,qBAAa,aAAa;IACZ,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,iBAAiB;IAEpD,OAAO,CAAC,aAAa;IAQrB,OAAO,CAAC,SAAS;IASjB,OAAO,CAAC,iBAAiB;IASzB,kFAAkF;IAClF,aAAa,CACX,KAAK,EAAE,GAAG,CAAC,yBAAyB,EACpC,MAAM,GAAE,MAA4B,EACpC,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAIzC,2DAA2D;IAC3D,IAAI,CAAC,CAAC,EACJ,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC,EAC5B,MAAM,GAAE,MAA4B,EACpC,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAWnC,YAAY,CACV,KAAK,EAAE,MAAM,GAAG,UAAU,EAC1B,SAAS,EAAE,MAAM,GAAG,UAAU,EAC9B,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAIpB;;;;;;;;;;OAUG;IACG,eAAe,CACnB,KAAK,EAAE,MAAM,GAAG,UAAU,EAC1B,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAgBpB,UAAU,CACR,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAIpB,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAIpB,SAAS,CACP,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAIpB,YAAY,CACV,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAIpB,MAAM,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI/C,qDAAqD;IACrD,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC;IAM5D,yEAAyE;IACzE,SAAS,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;CAQ3D"}

package/dist/managers/signer-manager.js

@@ -0,0 +1,111 @@
+/**
+ * Signer manager: the signing pipeline and signer-write builders for the
+ * connected wallet.
+ *
+ * Owns nothing directly — every wallet-dependent value is a late-bound closure
+ * ({@link SignerManagerDeps.getWallet} / `getContractId` / `getSpec`) supplied by
+ * the kit facade, so the manager is constructed once and always sees current
+ * state. That indirection is also what makes it `vi.fn()`-testable.
+ *
+ * @packageDocumentation
+ */
+import { PasskeySigner } from "../signers.js";
+import { SignerKey, } from "../types.js";
+import base64url from "../base64url.js";
+import { SignerNotFoundError, WalletNotConnectedError } from "../errors.js";
+import { signAuthEntry as signAuthEntryOp, sign as signOp, } from "../kit/tx-ops.js";
+import { buildEd25519SignerTx, buildPolicySignerTx, buildRemoveSignerTx, buildSecp256r1SignerTx, buildUpgradeTx, getSigner as getSignerOp, } from "../kit/wallet-ops.js";
+/** Extract the contract `Spec` from a generated client (not in the public type). */
+function specOf(wallet) {
+    return wallet.spec;
+}
+export class SignerManager {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    requireWallet() {
+        const wallet = this.deps.getWallet();
+        if (!wallet) {
+            throw new WalletNotConnectedError("perform a signer operation");
+        }
+        return { wallet, spec: specOf(wallet) };
+    }
+    writeDeps() {
+        return {
+            wallet: this.requireWallet().wallet,
+            timeoutInSeconds: this.deps.timeoutInSeconds,
+        };
+    }
+    // -- Signing pipeline --------------------------------------------------------
+    signAuthEntryDeps() {
+        return {
+            networkPassphrase: this.deps.networkPassphrase,
+            spec: this.requireWallet().spec,
+            signerContext: this.deps.getSignerContext(),
+            calculateExpiration: this.deps.calculateExpiration,
+        };
+    }
+    /** Sign a single auth entry with `signer` (defaults to the connected passkey). */
+    signAuthEntry(entry, signer = new PasskeySigner(), options) {
+        return signAuthEntryOp(this.signAuthEntryDeps(), entry, signer, options);
+    }
+    /** Sign an assembled transaction's wallet auth entries. */
+    sign(txn, signer = new PasskeySigner(), options) {
+        return signOp({ ...this.signAuthEntryDeps(), getContractId: this.deps.getContractId }, txn, signer, options);
+    }
+    // -- Signer writes -----------------------------------------------------------
+    addSecp256r1(keyId, publicKey, limits, store, expiration) {
+        return buildSecp256r1SignerTx(this.writeDeps(), "add_signer", keyId, publicKey, limits, store, expiration);
+    }
+    /**
+     * Update a passkey signer's limits/storage/expiration.
+     *
+     * The signer's `publicKey` is deliberately NOT a parameter: `update_signer`
+     * replaces the whole on-chain `SignerVal`, so the ledger is treated as the
+     * single source of truth for key material — a limits-only update must never
+     * change the stored public key. The authoritative key
+     * is re-read from the ledger here, and only that value is written back.
+     *
+     * @throws {SignerNotFoundError} If the keyId is not a live on-chain signer.
+     */
+    async updateSecp256r1(keyId, limits, store, expiration) {
+        const keyIdBase64 = typeof keyId === "string" ? keyId : base64url(Buffer.from(keyId));
+        const signerVal = await this.getSigner(SignerKey.Secp256r1(keyIdBase64));
+        if (!signerVal || signerVal.tag !== "Secp256r1") {
+            throw new SignerNotFoundError(keyIdBase64, "Cannot update a Secp256r1 signer that does not exist on-chain.");
+        }
+        const [publicKey] = signerVal.values;
+        return buildSecp256r1SignerTx(this.writeDeps(), "update_signer", keyIdBase64, publicKey, limits, store, expiration);
+    }
+    addEd25519(publicKey, limits, store, expiration) {
+        return buildEd25519SignerTx(this.writeDeps(), "add_signer", publicKey, limits, store, expiration);
+    }
+    updateEd25519(publicKey, limits, store, expiration) {
+        return buildEd25519SignerTx(this.writeDeps(), "update_signer", publicKey, limits, store, expiration);
+    }
+    addPolicy(policy, limits, store, expiration) {
+        return buildPolicySignerTx(this.writeDeps(), "add_signer", policy, limits, store, expiration);
+    }
+    updatePolicy(policy, limits, store, expiration) {
+        return buildPolicySignerTx(this.writeDeps(), "update_signer", policy, limits, store, expiration);
+    }
+    remove(signerKey) {
+        return buildRemoveSignerTx(this.writeDeps(), signerKey);
+    }
+    /** Build an `upgrade(new_wasm_hash)` transaction. */
+    upgrade(newWasmHash) {
+        return buildUpgradeTx(this.writeDeps(), newWasmHash);
+    }
+    // -- Reads -------------------------------------------------------------------
+    /** Read a signer entry from the ledger (temporary before persistent). */
+    getSigner(signerKey) {
+        const { spec } = this.requireWallet();
+        const contractId = this.deps.getContractId();
+        if (!contractId) {
+            throw new WalletNotConnectedError("read a signer");
+        }
+        return getSignerOp({ rpc: this.deps.rpc, spec }, contractId, signerKey);
+    }
+}
+//# sourceMappingURL=signer-manager.js.map

package/dist/managers/signer-manager.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signer-manager.js","sourceRoot":"","sources":["../../src/managers/signer-manager.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAUH,OAAO,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAC9C,OAAO,EACL,SAAS,GAGV,MAAM,aAAa,CAAC;AACrB,OAAO,SAAS,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AAC5E,OAAO,EACL,aAAa,IAAI,eAAe,EAChC,IAAI,IAAI,MAAM,GAEf,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACL,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,sBAAsB,EACtB,cAAc,EACd,SAAS,IAAI,WAAW,GAEzB,MAAM,sBAAsB,CAAC;AAE9B,oFAAoF;AACpF,SAAS,MAAM,CAAC,MAAqB;IACnC,OAAQ,MAA4C,CAAC,IAAI,CAAC;AAC5D,CAAC;AAYD,MAAM,OAAO,aAAa;IACK;IAA7B,YAA6B,IAAuB;QAAvB,SAAI,GAAJ,IAAI,CAAmB;IAAG,CAAC;IAEhD,aAAa;QACnB,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,uBAAuB,CAAC,4BAA4B,CAAC,CAAC;QAClE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;IAC1C,CAAC;IAEO,SAAS;QACf,OAAO;YACL,MAAM,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,MAAM;YACnC,gBAAgB,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB;SAC7C,CAAC;IACJ,CAAC;IAED,+EAA+E;IAEvE,iBAAiB;QACvB,OAAO;YACL,iBAAiB,EAAE,IAAI,CAAC,IAAI,CAAC,iBAAiB;YAC9C,IAAI,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,IAAI;YAC/B,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;YAC3C,mBAAmB,EAAE,IAAI,CAAC,IAAI,CAAC,mBAAmB;SACnD,CAAC;IACJ,CAAC;IAED,kFAAkF;IAClF,aAAa,CACX,KAAoC,EACpC,SAAiB,IAAI,aAAa,EAAE,EACpC,OAAqB;QAErB,OAAO,eAAe,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3E,CAAC;IAED,2DAA2D;IAC3D,IAAI,CACF,GAA4B,EAC5B,SAAiB,IAAI,aAAa,EAAE,EACpC,OAAqB;QAErB,OAAO,MAAM,CACX,EAAE,GAAG,IAAI,CAAC,iBAAiB,EAAE,EAAE,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,EACvE,GAAG,EACH,MAAM,EACN,OAAO,CACR,CAAC;IACJ,CAAC;IAED,+EAA+E;IAE/E,YAAY,CACV,KAA0B,EAC1B,SAA8B,EAC9B,MAAoB,EACpB,KAAkB,EAClB,UAAmB;QAEnB,OAAO,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAC7G,CAAC;IAED;;;;;;;;;;OAUG;IACH,KAAK,CAAC,eAAe,CACnB,KAA0B,EAC1B,MAAoB,EACpB,KAAkB,EAClB,UAAmB;QAEnB,MAAM,WAAW,GACf,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;QAEpE,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC;QACzE,IAAI,CAAC,SAAS,IAAI,SAAS,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;YAChD,MAAM,IAAI,mBAAmB,CAC3B,WAAW,EACX,gEAAgE,CACjE,CAAC;QACJ,CAAC;QACD,MAAM,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,MAAM,CAAC;QAErC,OAAO,sBAAsB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,eAAe,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACtH,CAAC;IAED,UAAU,CACR,SAAiB,EACjB,MAAoB,EACpB,KAAkB,EAClB,UAAmB;QAEnB,OAAO,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACpG,CAAC;IAED,aAAa,CACX,SAAiB,EACjB,MAAoB,EACpB,KAAkB,EAClB,UAAmB;QAEnB,OAAO,oBAAoB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,eAAe,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACvG,CAAC;IAED,SAAS,CACP,MAAc,EACd,MAAoB,EACpB,KAAkB,EAClB,UAAmB;QAEnB,OAAO,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IAChG,CAAC;IAED,YAAY,CACV,MAAc,EACd,MAAoB,EACpB,KAAkB,EAClB,UAAmB;QAEnB,OAAO,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACnG,CAAC;IAED,MAAM,CAAC,SAAoB;QACzB,OAAO,mBAAmB,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,SAAS,CAAC,CAAC;IAC1D,CAAC;IAED,qDAAqD;IACrD,OAAO,CAAC,WAAgC;QACtC,OAAO,cAAc,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,WAAW,CAAC,CAAC;IACvD,CAAC;IAED,+EAA+E;IAE/E,yEAAyE;IACzE,SAAS,CAAC,SAAoB;QAC5B,MAAM,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QAC7C,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,uBAAuB,CAAC,eAAe,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,WAAW,CAAC,EAAE,GAAG,EAAE,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IAC1E,CAAC;CACF"}