passkey-kit 0.16.5 → 0.17.0

package/dist/kit/webauthn-verify.js

@@ -0,0 +1,328 @@
+/**
+ * Client-side cryptography for the Secp256r1 signer-binding protocol.
+ *
+ * Three things live here, all browser-safe (WebCrypto + stellar-sdk hashing,
+ * no Node-only modules):
+ *
+ * 1. **The binding challenge.** `sha256(XDR(Secp256r1BindingPayload))`, where
+ *    the payload contains the network, wallet, purpose, and complete original
+ *    signer. GENESIS and ADD use separate domains. The payload is encoded
+ *    through the contract `Spec` and canonicalized to the host's map order.
+ *    This is the exact value the wallet contract recomputes.
+ *
+ * 2. **WebAuthn assertion verification.** For a STORED proof (the contract's
+ *    64-byte compact `r||s` signature) and for a FRESH `AuthenticationResponseJSON`
+ *    (DER signature straight from the authenticator). Checks: clientDataJSON
+ *    `type`, `challenge`, optional origin allowlist, `rpIdHash`, User Presence,
+ *    optional User Verification, the credential id where one is available, and
+ *    the P-256 signature over `authenticatorData || sha256(clientDataJSON)`.
+ *
+ * 3. **Binding-record verification.** The record's immutable `keyId` and
+ *    `publicKey` must equal the LIVE signer entry. The proof verifies
+ *    against the ORIGINAL signer in the record. This permits authorized policy
+ *    updates without changing the signed deployment or addition consent.
+ *    The caller must also verify the wallet's accepted birth code. Custom birth
+ *    code can copy a pending proof before it upgrades to accepted current code.
+ *
+ * Every verifier returns a result object rather than throwing, so a candidate
+ * filter can drop a wallet for a named reason without aborting the whole
+ * resolution. Only programmer errors (missing WebCrypto, malformed inputs to the
+ * challenge builder) throw.
+ *
+ * @packageDocumentation
+ */
+import { hash, xdr } from "@stellar/stellar-sdk";
+import base64url from "../base64url.js";
+import { compactSignature } from "../utils.js";
+import { SECP256R1_PUBLIC_KEY_SIZE } from "../constants.js";
+/** First byte of a SEC-1 uncompressed P-256 public key. */
+const SECP256R1_PUBLIC_KEY_PREFIX = 0x04;
+/**
+ * Copy bytes into a fresh, non-shared `ArrayBuffer`. WebCrypto's `BufferSource`
+ * parameters reject views over a `SharedArrayBuffer` at the type level, and a
+ * `Buffer` from the pool may alias a larger allocation, so every input handed
+ * to `crypto.subtle` goes through here.
+ */
+function toArrayBuffer(bytes) {
+    const copy = new Uint8Array(bytes.byteLength);
+    copy.set(bytes);
+    return copy.buffer;
+}
+// ============================================================================
+// Binding challenge
+// ============================================================================
+/**
+ * Fixed domain separators. These values must equal the contract constants.
+ */
+export const SECP256R1_GENESIS_DOMAIN = "secp256r1_genesis_v1";
+export const SECP256R1_ADD_DOMAIN = "secp256r1_add_v1";
+/** The contract spec UDT name of the binding payload struct. */
+export const SECP256R1_BINDING_PAYLOAD_TYPE = "Secp256r1BindingPayload";
+/** Normalize a base64url string or raw bytes to bytes. */
+export function toKeyIdBytes(keyId) {
+    return typeof keyId === "string"
+        ? new Uint8Array(base64url.toBuffer(keyId))
+        : keyId;
+}
+function bytesEqual(a, b) {
+    if (a.length !== b.length)
+        return false;
+    let diff = 0;
+    for (let i = 0; i < a.length; i++)
+        diff |= a[i] ^ b[i];
+    return diff === 0;
+}
+/**
+ * Canonicalize an `ScVal` map into the host's storage order.
+ *
+ * The contract hashes `to_xdr(payload)`, and the host serializes a struct as
+ * an `ScMap` sorted by key. `Spec.nativeToScVal` emits struct fields in spec
+ * declaration order, which for the Rust struct is NOT sorted, so the map is
+ * re-sorted here by symbol key (bytewise, the host's order for symbols).
+ * Non-map values pass through unchanged.
+ */
+export function canonicalScVal(value) {
+    if (value.switch().name === "scvVec") {
+        const entries = value.vec();
+        return entries
+            ? xdr.ScVal.scvVec(entries.map((entry) => canonicalScVal(entry)))
+            : value;
+    }
+    if (value.switch().name !== "scvMap")
+        return value;
+    const entries = value.map();
+    if (!entries)
+        return value;
+    const sorted = entries
+        .map((entry) => new xdr.ScMapEntry({
+        key: canonicalScVal(entry.key()),
+        val: canonicalScVal(entry.val()),
+    }))
+        .sort((a, b) => compareScValMapKeys(a.key(), b.key()));
+    return xdr.ScVal.scvMap(sorted);
+}
+/** Compare map keys as the Soroban host compares them. */
+function compareScValMapKeys(a, b) {
+    if (a.switch().name === "scvSymbol" &&
+        b.switch().name === "scvSymbol") {
+        return Buffer.compare(Buffer.from(a.sym().toString(), "utf8"), Buffer.from(b.sym().toString(), "utf8"));
+    }
+    // The binding payload only uses fixed-width address keys outside structs.
+    // Their XDR byte order matches the host order for address type and payload.
+    return Buffer.compare(a.toXDR(), b.toXDR());
+}
+/**
+ * The binding payload as a canonical `ScVal`, encoded through the contract
+ * `Spec` so field types are exactly the on-chain ones.
+ */
+export function bindingPayloadScVal(input) {
+    if (input.signer.tag !== "Secp256r1") {
+        throw new TypeError("binding signer must be Secp256r1");
+    }
+    const publicKey = input.signer.values[1];
+    if (publicKey.length !== SECP256R1_PUBLIC_KEY_SIZE) {
+        throw new TypeError(`publicKey must be ${SECP256R1_PUBLIC_KEY_SIZE} bytes (got ${publicKey.length})`);
+    }
+    const payload = {
+        domain: input.purpose === "Genesis"
+            ? SECP256R1_GENESIS_DOMAIN
+            : SECP256R1_ADD_DOMAIN,
+        network_id: hash(Buffer.from(input.networkPassphrase)),
+        contract: input.contractId,
+        purpose: { tag: input.purpose, values: undefined },
+        signer: input.signer,
+    };
+    const scVal = input.spec.nativeToScVal(payload, xdr.ScSpecTypeDef.scSpecTypeUdt(new xdr.ScSpecTypeUdt({ name: SECP256R1_BINDING_PAYLOAD_TYPE })));
+    return canonicalScVal(scVal);
+}
+/**
+ * The 32-byte binding challenge: `sha256(XDR(payload))`. This is the value a
+ * WebAuthn ceremony must carry (base64url-encoded) as its `challenge`.
+ */
+export function bindingChallenge(input) {
+    return new Uint8Array(hash(bindingPayloadScVal(input).toXDR()));
+}
+/** The binding challenge as the base64url string WebAuthn puts in clientDataJSON. */
+export function bindingChallengeBase64url(input) {
+    return base64url.encode(Buffer.from(bindingChallenge(input)));
+}
+/** WebAuthn authenticatorData layout. */
+const AUTHENTICATOR_DATA_MIN_LEN = 37;
+const RP_ID_HASH_LEN = 32;
+const FLAGS_INDEX = 32;
+const FLAG_USER_PRESENT = 0x01;
+const FLAG_USER_VERIFIED = 0x04;
+const WEBAUTHN_GET = "webauthn.get";
+function fail(reason, detail) {
+    return { ok: false, reason, detail };
+}
+function subtle() {
+    const subtleCrypto = globalThis.crypto?.subtle;
+    if (!subtleCrypto) {
+        throw new Error("WebCrypto (crypto.subtle) is not available in this runtime");
+    }
+    return subtleCrypto;
+}
+/**
+ * Verify a P-256 ECDSA signature (compact `r||s`) over
+ * `authenticatorData || sha256(clientDataJSON)` — the WebAuthn signed message.
+ */
+async function verifyP256(publicKey, compactSig, authenticatorData, clientDataJSON) {
+    if (publicKey.length !== SECP256R1_PUBLIC_KEY_SIZE ||
+        publicKey[0] !== SECP256R1_PUBLIC_KEY_PREFIX) {
+        return fail("public_key", "public key must be a 65-byte 0x04-prefixed P-256 point");
+    }
+    if (compactSig.length !== 64) {
+        return fail("signature", `compact signature must be 64 bytes (got ${compactSig.length})`);
+    }
+    let key;
+    try {
+        key = await subtle().importKey("raw", toArrayBuffer(publicKey), { name: "ECDSA", namedCurve: "P-256" }, false, ["verify"]);
+    }
+    catch (err) {
+        return fail("public_key", `public key rejected by WebCrypto: ${String(err)}`);
+    }
+    const signed = Buffer.concat([
+        Buffer.from(authenticatorData),
+        hash(Buffer.from(clientDataJSON)),
+    ]);
+    let valid;
+    try {
+        valid = await subtle().verify({ name: "ECDSA", hash: "SHA-256" }, key, toArrayBuffer(compactSig), toArrayBuffer(signed));
+    }
+    catch (err) {
+        return fail("signature", `WebCrypto verify threw: ${String(err)}`);
+    }
+    return valid ? { ok: true } : fail("signature", "P-256 signature does not verify");
+}
+/**
+ * Verify one WebAuthn assertion with a compact signature against a policy.
+ * Every structural check runs before the signature, so a malformed assertion
+ * never costs a curve operation.
+ */
+export async function verifyAssertion(proof, policy, presentedKeyId) {
+    // Credential id, where the assertion carries one.
+    if (policy.expectedKeyId !== undefined && presentedKeyId !== undefined) {
+        const expected = base64url.encode(Buffer.from(toKeyIdBytes(policy.expectedKeyId)));
+        if (presentedKeyId !== expected) {
+            return fail("key_id", "assertion credential id does not match the expected keyId");
+        }
+    }
+    // clientDataJSON: type, challenge, origin.
+    let clientData;
+    try {
+        clientData = JSON.parse(Buffer.from(proof.clientDataJSON).toString("utf8"));
+    }
+    catch {
+        return fail("client_data", "clientDataJSON is not valid JSON");
+    }
+    if (typeof clientData !== "object" || clientData === null) {
+        return fail("client_data", "clientDataJSON is not an object");
+    }
+    if (clientData.type !== WEBAUTHN_GET) {
+        return fail("type", `clientDataJSON.type must be "${WEBAUTHN_GET}"`);
+    }
+    const expectedChallenge = base64url.encode(Buffer.from(policy.expectedChallenge));
+    if (clientData.challenge !== expectedChallenge) {
+        return fail("challenge", "clientDataJSON.challenge does not match the expected challenge");
+    }
+    if (policy.allowedOrigins && policy.allowedOrigins.length > 0) {
+        if (typeof clientData.origin !== "string" ||
+            !policy.allowedOrigins.includes(clientData.origin)) {
+            return fail("origin", "clientDataJSON.origin is not in the allowed origins");
+        }
+    }
+    // authenticatorData: length, rpIdHash, flags.
+    const authData = proof.authenticatorData;
+    if (authData.length < AUTHENTICATOR_DATA_MIN_LEN) {
+        return fail("authenticator_data", "authenticatorData is shorter than 37 bytes");
+    }
+    const rpIdHash = hash(Buffer.from(policy.rpId));
+    if (!bytesEqual(authData.subarray(0, RP_ID_HASH_LEN), new Uint8Array(rpIdHash))) {
+        return fail("rp_id", "authenticatorData.rpIdHash does not match the relying party id");
+    }
+    const flags = authData[FLAGS_INDEX];
+    if ((flags & FLAG_USER_PRESENT) === 0) {
+        return fail("user_presence", "User Present flag is not set");
+    }
+    if (policy.requireUserVerification && (flags & FLAG_USER_VERIFIED) === 0) {
+        return fail("user_verification", "User Verified flag is not set");
+    }
+    return verifyP256(policy.publicKey, proof.signature, authData, proof.clientDataJSON);
+}
+/** Verify a STORED binding proof (contract compact signature). */
+export function verifyStoredProof(proof, policy) {
+    return verifyAssertion(proof, policy);
+}
+/**
+ * Verify a FRESH `AuthenticationResponseJSON` from `startAuthentication`. The
+ * DER signature is converted to compact form (with low-S) through the same
+ * `compactSignature` the signing pipeline uses, and `response.id` is checked
+ * against `policy.expectedKeyId` when that is set.
+ */
+export async function verifyFreshAssertion(response, policy) {
+    let signature;
+    try {
+        signature = compactSignature(base64url.toBuffer(response.response.signature));
+    }
+    catch (err) {
+        return fail("signature", `DER signature is malformed: ${String(err)}`);
+    }
+    return verifyAssertion({
+        authenticatorData: new Uint8Array(base64url.toBuffer(response.response.authenticatorData)),
+        clientDataJSON: new Uint8Array(base64url.toBuffer(response.response.clientDataJSON)),
+        signature,
+    }, policy, response.id);
+}
+/**
+ * Verify that `record` binds `liveSigner` to `policy.contractId`.
+ *
+ * 1. The record's signer keyId and public key equal the live signer.
+ * 2. The challenge uses the record's original full signer and purpose.
+ * 3. The stored proof must be a valid `webauthn.get` assertion over that
+ *    challenge under that key, with the rpId/UP/UV/origin policy applied.
+ */
+export async function verifyBindingRecord(record, liveSigner, policy) {
+    if (record.signer.tag !== "Secp256r1") {
+        return {
+            ok: false,
+            reason: "signer_kind",
+            detail: "binding record does not contain a Secp256r1 signer",
+        };
+    }
+    const [recordKeyId, recordPublicKey] = record.signer.values;
+    if (!bytesEqual(recordKeyId, toKeyIdBytes(liveSigner.keyId))) {
+        return {
+            ok: false,
+            reason: "key_id_mismatch",
+            detail: "binding record keyId does not equal the live signer keyId",
+        };
+    }
+    if (!bytesEqual(recordPublicKey, liveSigner.publicKey)) {
+        return {
+            ok: false,
+            reason: "public_key_mismatch",
+            detail: "binding record public key does not equal the live signer public key",
+        };
+    }
+    const challenge = bindingChallenge({
+        spec: policy.spec,
+        networkPassphrase: policy.networkPassphrase,
+        contractId: policy.contractId,
+        purpose: record.purpose.tag,
+        signer: record.signer,
+    });
+    const result = await verifyStoredProof({
+        authenticatorData: record.proof.authenticator_data,
+        clientDataJSON: record.proof.client_data_json,
+        signature: record.proof.signature,
+    }, {
+        expectedChallenge: challenge,
+        rpId: policy.rpId,
+        publicKey: recordPublicKey,
+        allowedOrigins: policy.allowedOrigins,
+        requireUserVerification: policy.requireUserVerification,
+    });
+    return result.ok ? { ok: true, challenge } : result;
+}
+//# sourceMappingURL=webauthn-verify.js.map

package/dist/kit/webauthn-verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn-verify.js","sourceRoot":"","sources":["../../src/kit/webauthn-verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAEH,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,sBAAsB,CAAC;AAQjD,OAAO,SAAS,MAAM,iBAAiB,CAAC;AACxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,iBAAiB,CAAC;AAE5D,2DAA2D;AAC3D,MAAM,2BAA2B,GAAG,IAAI,CAAC;AAEzC;;;;;GAKG;AACH,SAAS,aAAa,CAAC,KAAiB;IACtC,MAAM,IAAI,GAAG,IAAI,UAAU,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9C,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChB,OAAO,IAAI,CAAC,MAAM,CAAC;AACrB,CAAC;AAED,+EAA+E;AAC/E,oBAAoB;AACpB,+EAA+E;AAE/E;;GAEG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,sBAAsB,CAAC;AAC/D,MAAM,CAAC,MAAM,oBAAoB,GAAG,kBAAkB,CAAC;AAEvD,gEAAgE;AAChE,MAAM,CAAC,MAAM,8BAA8B,GAAG,yBAAyB,CAAC;AAgBxE,0DAA0D;AAC1D,MAAM,UAAU,YAAY,CAAC,KAA0B;IACrD,OAAO,OAAO,KAAK,KAAK,QAAQ;QAC9B,CAAC,CAAC,IAAI,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC3C,CAAC,CAAC,KAAK,CAAC;AACZ,CAAC;AAED,SAAS,UAAU,CAAC,CAAa,EAAE,CAAa;IAC9C,IAAI,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,MAAM;QAAE,OAAO,KAAK,CAAC;IACxC,IAAI,IAAI,GAAG,CAAC,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,EAAE;QAAE,IAAI,IAAI,CAAC,CAAC,CAAC,CAAE,GAAG,CAAC,CAAC,CAAC,CAAE,CAAC;IACzD,OAAO,IAAI,KAAK,CAAC,CAAC;AACpB,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,KAAgB;IAC7C,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;QAC5B,OAAO,OAAO;YACZ,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC;YACjE,CAAC,CAAC,KAAK,CAAC;IACZ,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IACnD,MAAM,OAAO,GAAG,KAAK,CAAC,GAAG,EAAE,CAAC;IAC5B,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,MAAM,MAAM,GAAG,OAAO;SACnB,GAAG,CACF,CAAC,KAAK,EAAE,EAAE,CACR,IAAI,GAAG,CAAC,UAAU,CAAC;QACjB,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;QAChC,GAAG,EAAE,cAAc,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC;KACjC,CAAC,CACL;SACA,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;IACzD,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,0DAA0D;AAC1D,SAAS,mBAAmB,CAAC,CAAY,EAAE,CAAY;IACrD,IACE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,WAAW;QAC/B,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,KAAK,WAAW,EAC/B,CAAC;QACD,OAAO,MAAM,CAAC,OAAO,CACnB,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,EACvC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,EAAE,MAAM,CAAC,CACxC,CAAC;IACJ,CAAC;IAED,0EAA0E;IAC1E,4EAA4E;IAC5E,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,KAA4B;IAC9D,IAAI,KAAK,CAAC,MAAM,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CAAC,kCAAkC,CAAC,CAAC;IAC1D,CAAC;IACD,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IACzC,IAAI,SAAS,CAAC,MAAM,KAAK,yBAAyB,EAAE,CAAC;QACnD,MAAM,IAAI,SAAS,CACjB,qBAAqB,yBAAyB,eAAe,SAAS,CAAC,MAAM,GAAG,CACjF,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG;QACd,MAAM,EACJ,KAAK,CAAC,OAAO,KAAK,SAAS;YACzB,CAAC,CAAC,wBAAwB;YAC1B,CAAC,CAAC,oBAAoB;QAC1B,UAAU,EAAE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;QACtD,QAAQ,EAAE,KAAK,CAAC,UAAU;QAC1B,OAAO,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE;QAClD,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,CAAC;IAEF,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,aAAa,CACpC,OAAO,EACP,GAAG,CAAC,aAAa,CAAC,aAAa,CAC7B,IAAI,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,8BAA8B,EAAE,CAAC,CAChE,CACF,CAAC;IACF,OAAO,cAAc,CAAC,KAAK,CAAC,CAAC;AAC/B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAA4B;IAC3D,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,mBAAmB,CAAC,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,yBAAyB,CAAC,KAA4B;IACpE,OAAO,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AAChE,CAAC;AAmDD,yCAAyC;AACzC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AACtC,MAAM,cAAc,GAAG,EAAE,CAAC;AAC1B,MAAM,WAAW,GAAG,EAAE,CAAC;AACvB,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAC/B,MAAM,kBAAkB,GAAG,IAAI,CAAC;AAChC,MAAM,YAAY,GAAG,cAAc,CAAC;AAEpC,SAAS,IAAI,CAAC,MAAwB,EAAE,MAAc;IACpD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AACvC,CAAC;AAED,SAAS,MAAM;IACb,MAAM,YAAY,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC;IAC/C,IAAI,CAAC,YAAY,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,YAAY,CAAC;AACtB,CAAC;AAED;;;GAGG;AACH,KAAK,UAAU,UAAU,CACvB,SAAqB,EACrB,UAAsB,EACtB,iBAA6B,EAC7B,cAA0B;IAE1B,IACE,SAAS,CAAC,MAAM,KAAK,yBAAyB;QAC9C,SAAS,CAAC,CAAC,CAAC,KAAK,2BAA2B,EAC5C,CAAC;QACD,OAAO,IAAI,CAAC,YAAY,EAAE,wDAAwD,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,WAAW,EAAE,2CAA2C,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC;IAC5F,CAAC;IAED,IAAI,GAAc,CAAC;IACnB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,MAAM,EAAE,CAAC,SAAS,CAC5B,KAAK,EACL,aAAa,CAAC,SAAS,CAAC,EACxB,EAAE,IAAI,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE,EACtC,KAAK,EACL,CAAC,QAAQ,CAAC,CACX,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,YAAY,EAAE,qCAAqC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QAC3B,MAAM,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAC9B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;KAClC,CAAC,CAAC;IAEH,IAAI,KAAc,CAAC;IACnB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,MAAM,EAAE,CAAC,MAAM,CAC3B,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,EAClC,GAAG,EACH,aAAa,CAAC,UAAU,CAAC,EACzB,aAAa,CAAC,MAAM,CAAC,CACtB,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,WAAW,EAAE,2BAA2B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,iCAAiC,CAAC,CAAC;AACrF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,KAA0B,EAC1B,MAAuB,EACvB,cAAuB;IAEvB,kDAAkD;IAClD,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;QACvE,MAAM,QAAQ,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,cAAc,KAAK,QAAQ,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC,QAAQ,EAAE,2DAA2D,CAAC,CAAC;QACrF,CAAC;IACH,CAAC;IAED,2CAA2C;IAC3C,IAAI,UAAqE,CAAC;IAC1E,IAAI,CAAC;QACH,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,aAAa,EAAE,kCAAkC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;QAC1D,OAAO,IAAI,CAAC,aAAa,EAAE,iCAAiC,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,UAAU,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACrC,OAAO,IAAI,CAAC,MAAM,EAAE,gCAAgC,YAAY,GAAG,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,iBAAiB,GAAG,SAAS,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC;IAClF,IAAI,UAAU,CAAC,SAAS,KAAK,iBAAiB,EAAE,CAAC;QAC/C,OAAO,IAAI,CAAC,WAAW,EAAE,gEAAgE,CAAC,CAAC;IAC7F,CAAC;IACD,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9D,IACE,OAAO,UAAU,CAAC,MAAM,KAAK,QAAQ;YACrC,CAAC,MAAM,CAAC,cAAc,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,EAClD,CAAC;YACD,OAAO,IAAI,CAAC,QAAQ,EAAE,qDAAqD,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED,8CAA8C;IAC9C,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAC;IACzC,IAAI,QAAQ,CAAC,MAAM,GAAG,0BAA0B,EAAE,CAAC;QACjD,OAAO,IAAI,CAAC,oBAAoB,EAAE,4CAA4C,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,EAAE,cAAc,CAAC,EAAE,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;QAChF,OAAO,IAAI,CAAC,OAAO,EAAE,gEAAgE,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,CAAE,CAAC;IACrC,IAAI,CAAC,KAAK,GAAG,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC,eAAe,EAAE,8BAA8B,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,MAAM,CAAC,uBAAuB,IAAI,CAAC,KAAK,GAAG,kBAAkB,CAAC,KAAK,CAAC,EAAE,CAAC;QACzE,OAAO,IAAI,CAAC,mBAAmB,EAAE,+BAA+B,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,UAAU,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,QAAQ,EAAE,KAAK,CAAC,cAAc,CAAC,CAAC;AACvF,CAAC;AAED,kEAAkE;AAClE,MAAM,UAAU,iBAAiB,CAC/B,KAA0B,EAC1B,MAAuB;IAEvB,OAAO,eAAe,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;AACxC,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,QAAoC,EACpC,MAAuB;IAEvB,IAAI,SAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,SAAS,GAAG,gBAAgB,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAC;IAChF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,IAAI,CAAC,WAAW,EAAE,+BAA+B,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzE,CAAC;IAED,OAAO,eAAe,CACpB;QACE,iBAAiB,EAAE,IAAI,UAAU,CAC/B,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CACxD;QACD,cAAc,EAAE,IAAI,UAAU,CAAC,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAC;QACpF,SAAS;KACV,EACD,MAAM,EACN,QAAQ,CAAC,EAAE,CACZ,CAAC;AACJ,CAAC;AAoCD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAA8B,EAC9B,UAA+B,EAC/B,MAA2B;IAE3B,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,KAAK,WAAW,EAAE,CAAC;QACtC,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,aAAa;YACrB,MAAM,EAAE,oDAAoD;SAC7D,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC;IAC5D,IAAI,CAAC,UAAU,CAAC,WAAW,EAAE,YAAY,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;QAC7D,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,iBAAiB;YACzB,MAAM,EAAE,2DAA2D;SACpE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,eAAe,EAAE,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC;QACvD,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,qBAAqB;YAC7B,MAAM,EAAE,qEAAqE;SAC9E,CAAC;IACJ,CAAC;IAED,MAAM,SAAS,GAAG,gBAAgB,CAAC;QACjC,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,UAAU,EAAE,MAAM,CAAC,UAAU;QAC7B,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM;KACtB,CAAC,CAAC;IAEH,MAAM,MAAM,GAAG,MAAM,iBAAiB,CACpC;QACE,iBAAiB,EAAE,MAAM,CAAC,KAAK,CAAC,kBAAkB;QAClD,cAAc,EAAE,MAAM,CAAC,KAAK,CAAC,gBAAgB;QAC7C,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,SAAS;KAClC,EACD;QACE,iBAAiB,EAAE,SAAS;QAC5B,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,eAAe;QAC1B,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,uBAAuB,EAAE,MAAM,CAAC,uBAAuB;KACxD,CACF,CAAC;IAEF,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC;AACtD,CAAC"}

package/dist/kit.d.ts

@@ -6,23 +6,25 @@
  * pipeline, WebAuthn ceremonies, deploy path, and signer writes now live in
  * dependency-injected managers ({@link CredentialManager}, {@link SignerManager},
  * {@link SubmissionManager}) wired here with late-bound closures. All Protocol-27
- * probe shims, dead commented experiments, and the legacy factory-address
- * fallback are gone — the kit targets stellar-sdk >= 16 and the current wallet.
+ * probe shims and dead commented experiments are gone. The kit targets
+ * stellar-sdk >= 16 and the current wallet.
  *
  * @packageDocumentation
  */
-import { xdr } from "@stellar/stellar-sdk";
+import { Horizon, xdr } from "@stellar/stellar-sdk";
 import { Server } from "@stellar/stellar-sdk/rpc";
 import { type AuthenticatorSelectionCriteria } from "@simplewebauthn/browser";
 import type { AssembledTransaction } from "@stellar/stellar-sdk/contract";
-import { Client as PasskeyClient } from "passkey-kit-sdk";
+import { Client as PasskeyClient, type SignerVal } from "passkey-kit-sdk";
 import { SignerKey, SignerStore, type ConnectWalletResult, type CreateWalletResult, type SignerLimits, type StorageAdapter } from "./types.js";
 import { PasskeyEventEmitter } from "./events.js";
 import { type Signer } from "./signers.js";
 import type { WebAuthnClient } from "./kit/webauthn-ops.js";
 import type { CreatedPasskey } from "./kit/webauthn-ops.js";
 import type { SignOptions } from "./kit/tx-ops.js";
-import type { WalletTx } from "./kit/wallet-ops.js";
+import { type PolicySignerTxOptions, type WalletTx } from "./kit/wallet-ops.js";
+import type { WalletCandidateLookup } from "./indexer/types.js";
+import { type VerifiedWalletBirth } from "./kit/birth-verification.js";
 /** Configuration for a {@link PasskeyKit} client. */
 export interface PasskeyKitConfig {
     /** Stellar RPC URL. */
@@ -32,23 +34,31 @@ export interface PasskeyKitConfig {
     /** Smart-wallet WASM hash (hex) used to deploy new wallets. */
     walletWasmHash: string;
     /**
-     * Code identities (hex WASM hashes) accepted when connecting to a wallet whose
-     * address came from an untrusted source — an indexer lookup or address
-     * derivation. Defaults to `[walletWasmHash]`.
-     *
-     * Binding code identity is what makes a wallet's signer state meaningful: under
-     * accepted code, a signer entry can only have been produced by logic that
-     * required wallet authorization. Arbitrary code can write whatever signer entry
-     * a client expects, so without this check a reverse lookup proves nothing.
+     * Current code identities accepted during every wallet connection.
+     * Defaults to `[walletWasmHash]`.
      *
      * This is a list rather than a single value because a legitimately upgraded
-     * wallet runs different code. Add each accepted hash as you roll upgrades out;
-     * a wallet running code that is not listed will not connect from an untrusted
-     * path. See `docs/security-deterministic-deployer.md`.
+     * wallet runs different code. Add each accepted hash during an upgrade.
+     * See `docs/security-deterministic-deployer.md`.
      */
     acceptedWasmHashes?: string[];
+    /**
+     * Immutable birth WASM hashes accepted during wallet discovery.
+     * Defaults to `[walletWasmHash]`. This list is separate from current code
+     * identities because a valid wallet can upgrade after its secure birth.
+     */
+    acceptedBirthWasmHashes?: string[];
+    /**
+     * Full-history Horizon URL for creation transactions outside RPC retention.
+     * Public and test networks use the official Horizon endpoints by default.
+     */
+    horizonUrl?: string;
     /** WebAuthn Relying Party id (domain); defaults to the current origin. */
     rpId?: string;
+    /** Accepted WebAuthn origins. Defaults to the browser origin. Required outside a browser. */
+    allowedOrigins?: readonly string[];
+    /** Require the WebAuthn User Verified flag. User Presence is always required. */
+    requireUserVerification?: boolean;
     /**
      * Secret key (`S…`) for the address-derivation deployer. Defaults to the
      * canonical shared sign-only deployer (see {@link resolveDeployer});
@@ -70,23 +80,13 @@ export interface CreateOptions {
 }
 /** Options for {@link PasskeyKit.connectWallet}. */
 export interface ConnectOptions {
-    /** A specific keyId to connect (skips the discovery ceremony). */
+    /** A specific keyId to connect. Untrusted discovery still requires a proof ceremony. */
     keyId?: string | Uint8Array;
-    /** Indexer-backed keyId → contract lookup, used when derivation misses. */
-    getContractId?: (keyId: string) => Promise<string | undefined>;
     /**
-     * Override the code-identity check against {@link PasskeyKitConfig.acceptedWasmHashes}.
-     *
-     * Defaults to ON whenever the address was resolved from an untrusted source
-     * (indexer lookup or derivation) and OFF when it came from trusted local
-     * storage, where a legitimately upgraded wallet would otherwise be locked out.
-     *
-     * Set `true` to check even a storage-resolved address; set `false` to skip the
-     * check entirely. Disabling it means a reverse lookup can resolve to a contract
-     * that merely claims this credential — only do so if you bind code identity
-     * yourself.
+     * Complete indexer-backed keyId lookup with immutable birth claims.
+     * The kit verifies every claim through Stellar RPC before use.
      */
-    verifyWasmHash?: boolean;
+    getWalletCandidates?: (keyId: string) => Promise<WalletCandidateLookup>;
 }
 export declare class PasskeyKit {
     readonly rpc: Server;
@@ -95,11 +95,17 @@ export declare class PasskeyKit {
     readonly walletWasmHash: string;
     /** Accepted code identities, lowercase hex. Never empty. */
     readonly acceptedWasmHashes: readonly string[];
+    /** Accepted immutable birth code identities, lowercase hex. Never empty. */
+    readonly acceptedBirthWasmHashes: readonly string[];
+    /** Full-history source for immutable wallet-birth verification. */
+    readonly history?: Horizon.Server;
     readonly rpId?: string;
     /** Lifecycle event emitter (walletCreated, walletConnected, …). */
     readonly events: PasskeyEventEmitter;
     private readonly timeoutInSeconds;
     private readonly webAuthn;
+    private readonly allowedOrigins?;
+    private readonly requireUserVerification;
     private readonly credentialManager;
     private readonly signerManager;
     private readonly submissionManager;
@@ -121,20 +127,31 @@ export declare class PasskeyKit {
      * submission and calls `connectWallet`.
      */
     createWallet(appName: string, userName: string, options?: CreateOptions): Promise<CreateWalletResult>;
+    /**
+     * Verify a successful wallet deployment and persist its immutable birth data.
+     * Call this only after the relayer returns a successful transaction hash.
+     */
+    confirmWalletCreation(created: CreateWalletResult, creationTransactionHash: string): Promise<VerifiedWalletBirth>;
     /**
      * Connect an existing wallet from a passkey.
      *
-     * Resolves the wallet address by (1) local storage, (2) an injected indexer
-     * lookup, then (3) deterministic derivation from the keyId — and then VERIFIES
-     * ownership: the keyId must resolve to a live signer on the wallet (#601 F7).
-     * This closes the unverified reverse-lookup hole (#598 F3) at the SDK layer.
-     * Derivation is deliberately last: it is only correct for a wallet's first
-     * credential and is the one path a squatted contract can hijack.
+     * Resolves wallet candidates from verified local storage or one complete
+     * indexer response. Every candidate must prove its immutable birth, current
+     * code, signer binding, and fresh passkey possession. The method connects
+     * only when one candidate passes every check.
      *
      * @throws {WalletOwnershipError} If the keyId is not a signer on the wallet.
      */
     connectWallet(options?: ConnectOptions): Promise<ConnectWalletResult>;
     private assertWalletWasmHash;
+    private contractWasmHash;
+    /** Create the address-bound proof required for a Secp256r1 signer write. */
+    private createBindingProof;
+    /** Verify stored address consent and fresh passkey possession. */
+    private assertSignerProvenance;
+    /** Verify one fresh WebAuthn assertion against the live signer key. */
+    private assertFreshAssertion;
+    private assertWebAuthnVerificationConfig;
     /** Disconnect the current wallet. */
     disconnect(): void;
     /** Sign a single auth entry (defaults to the connected passkey signer). */
@@ -149,13 +166,18 @@ export declare class PasskeyKit {
     updateSecp256r1(keyId: string | Uint8Array, limits: SignerLimits, store: SignerStore, expiration?: number): Promise<WalletTx>;
     addEd25519(publicKey: string, limits: SignerLimits, store: SignerStore, expiration?: number): Promise<WalletTx>;
     updateEd25519(publicKey: string, limits: SignerLimits, store: SignerStore, expiration?: number): Promise<WalletTx>;
-    addPolicy(policy: string, limits: SignerLimits, store: SignerStore, expiration?: number): Promise<WalletTx>;
+    /**
+     * Add a policy signer. Throws a `ValidationError` if the policy's `install`
+     * hook adds wallet-authorized sub-invocations to the auth entry, unless
+     * `options.allowInstallSubInvocations` is set.
+     */
+    addPolicy(policy: string, limits: SignerLimits, store: SignerStore, expiration?: number, options?: PolicySignerTxOptions): Promise<WalletTx>;
     updatePolicy(policy: string, limits: SignerLimits, store: SignerStore, expiration?: number): Promise<WalletTx>;
     remove(signerKey: SignerKey): Promise<WalletTx>;
     /** Build an `upgrade(new_wasm_hash)` transaction for the connected wallet. */
     upgrade(newWasmHash: Buffer | Uint8Array): Promise<WalletTx>;
     /** Read a signer entry from the ledger (temporary before persistent). */
-    getSigner(signerKey: SignerKey): Promise<import("passkey-kit-sdk").SignerVal | null>;
+    getSigner(signerKey: SignerKey): Promise<SignerVal | null>;
     /** Require a connected wallet, or throw. */
     requireWallet(): PasskeyClient;
 }

package/dist/kit.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"kit.d.ts","sourceRoot":"","sources":["../src/kit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAW,GAAG,EAAE,MAAM,sBAAsB,CAAC;AACpD,OAAO,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAClD,OAAO,EAIL,KAAK,8BAA8B,EACpC,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAC1E,OAAO,EAAE,MAAM,IAAI,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAE1D,OAAO,EACL,SAAS,EACT,WAAW,EACX,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AAQpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGlD,OAAO,EAAiB,KAAK,MAAM,EAAsB,MAAM,cAAc,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AASnD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAEpD,qDAAqD;AACrD,MAAM,WAAW,gBAAgB;IAC/B,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,+DAA+D;IAC/D,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;;;;;;;;;;OAcG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,sBAAsB,CAAC,EAAE,8BAA8B,CAAC;CACzD;AAED,oDAAoD;AACpD,MAAM,WAAW,cAAc;IAC7B,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IAC5B,2EAA2E;IAC3E,aAAa,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/D;;;;;;;;;;;OAWG;IACH,cAAc,CAAC,EAAE,OAAO,CAAC;CAC1B;AAED,qBAAa,UAAU;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB,mEAAmE;IACnE,QAAQ,CAAC,MAAM,sBAA6B;IAE5C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAE1C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IAEtD,uDAAuD;IACvD,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,2CAA2C;IAC3C,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC;gBAEtB,MAAM,EAAE,gBAAgB;IAoFpC,kDAAkD;IAClD,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAEnC;IAED,yDAAyD;IACzD,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED,OAAO,CAAC,aAAa;IAMrB,sEAAsE;IACtE,SAAS,CACP,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,cAAc,CAAC;IAQ1B;;;;OAIG;IACG,YAAY,CAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,kBAAkB,CAAC;IA8B9B;;;;;;;;;;;OAWG;IACG,aAAa,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC;YAuG7D,oBAAoB;IAyBlC,qCAAqC;IACrC,UAAU,IAAI,IAAI;IAWlB,2EAA2E;IAC3E,aAAa,CACX,KAAK,EAAE,GAAG,CAAC,yBAAyB,EACpC,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAIzC,2DAA2D;IAC3D,IAAI,CAAC,CAAC,EACJ,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC,EAC5B,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAM7B,YAAY,CAChB,KAAK,EAAE,MAAM,GAAG,UAAU,EAC1B,SAAS,EAAE,MAAM,GAAG,UAAU,EAC9B,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAiCpB;;;OAGG;IACH,eAAe,CACb,KAAK,EAAE,MAAM,GAAG,UAAU,EAC1B,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAGpB,UAAU,CACR,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAGpB,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAGpB,SAAS,CACP,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAGpB,YAAY,CACV,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAGpB,MAAM,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI/C,8EAA8E;IAC9E,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI5D,yEAAyE;IACzE,SAAS,CAAC,SAAS,EAAE,SAAS;IAI9B,4CAA4C;IAC5C,aAAa,IAAI,aAAa;CAM/B"}
+{"version":3,"file":"kit.d.ts","sourceRoot":"","sources":["../src/kit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,OAAO,EAAqB,GAAG,EAAE,MAAM,sBAAsB,CAAC;AACvE,OAAO,EAAO,MAAM,EAAE,MAAM,0BAA0B,CAAC;AACvD,OAAO,EAIL,KAAK,8BAA8B,EACpC,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EACV,oBAAoB,EAErB,MAAM,+BAA+B,CAAC;AACvC,OAAO,EACL,MAAM,IAAI,aAAa,EAIvB,KAAK,SAAS,EACf,MAAM,iBAAiB,CAAC;AAEzB,OAAO,EACL,SAAS,EACT,WAAW,EACX,KAAK,mBAAmB,EACxB,KAAK,kBAAkB,EACvB,KAAK,YAAY,EACjB,KAAK,cAAc,EACpB,MAAM,YAAY,CAAC;AASpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGlD,OAAO,EAAiB,KAAK,MAAM,EAAsB,MAAM,cAAc,CAAC;AAC9E,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAQnD,OAAO,EAEL,KAAK,qBAAqB,EAC1B,KAAK,QAAQ,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAEV,qBAAqB,EACtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAEL,KAAK,mBAAmB,EACzB,MAAM,6BAA6B,CAAC;AAiBrC,qDAAqD;AACrD,MAAM,WAAW,gBAAgB;IAC/B,uBAAuB;IACvB,MAAM,EAAE,MAAM,CAAC;IACf,0BAA0B;IAC1B,iBAAiB,EAAE,MAAM,CAAC;IAC1B,+DAA+D;IAC/D,cAAc,EAAE,MAAM,CAAC;IACvB;;;;;;;OAOG;IACH,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B;;;;OAIG;IACH,uBAAuB,CAAC,EAAE,MAAM,EAAE,CAAC;IACnC;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,0EAA0E;IAC1E,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6FAA6F;IAC7F,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,OAAO,CAAC;IAClC;;;;OAIG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,gFAAgF;IAChF,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,oDAAoD;IACpD,QAAQ,CAAC,EAAE,cAAc,CAAC;CAC3B;AAED,gFAAgF;AAChF,MAAM,WAAW,aAAa;IAC5B,sBAAsB,CAAC,EAAE,8BAA8B,CAAC;CACzD;AAED,oDAAoD;AACpD,MAAM,WAAW,cAAc;IAC7B,wFAAwF;IACxF,KAAK,CAAC,EAAE,MAAM,GAAG,UAAU,CAAC;IAC5B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAC;CACzE;AAED,qBAAa,UAAU;IACrB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,4DAA4D;IAC5D,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,4EAA4E;IAC5E,QAAQ,CAAC,uBAAuB,EAAE,SAAS,MAAM,EAAE,CAAC;IACpD,mEAAmE;IACnE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC;IAClC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAEvB,mEAAmE;IACnE,QAAQ,CAAC,MAAM,sBAA6B;IAE5C,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAiB;IAC1C,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,CAAoB;IACpD,OAAO,CAAC,QAAQ,CAAC,uBAAuB,CAAU;IAElD,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IACtD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAAoB;IAEtD,uDAAuD;IACvD,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,2CAA2C;IAC3C,MAAM,EAAE,aAAa,GAAG,SAAS,CAAC;gBAEtB,MAAM,EAAE,gBAAgB;IAuGpC,kDAAkD;IAClD,IAAI,UAAU,IAAI,MAAM,GAAG,SAAS,CAEnC;IAED,yDAAyD;IACzD,IAAI,iBAAiB,IAAI,MAAM,CAE9B;IAED,OAAO,CAAC,aAAa;IAMrB,sEAAsE;IACtE,SAAS,CACP,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,cAAc,CAAC;IAQ1B;;;;OAIG;IACG,YAAY,CAChB,OAAO,EAAE,MAAM,EACf,QAAQ,EAAE,MAAM,EAChB,OAAO,CAAC,EAAE,aAAa,GACtB,OAAO,CAAC,kBAAkB,CAAC;IAsC9B;;;OAGG;IACG,qBAAqB,CACzB,OAAO,EAAE,kBAAkB,EAC3B,uBAAuB,EAAE,MAAM,GAC9B,OAAO,CAAC,mBAAmB,CAAC;IA6D/B;;;;;;;;;OASG;IACG,aAAa,CAAC,OAAO,CAAC,EAAE,cAAc,GAAG,OAAO,CAAC,mBAAmB,CAAC;YA6L7D,oBAAoB;YAWpB,gBAAgB;IAkB9B,4EAA4E;YAC9D,kBAAkB;IA8DhC,kEAAkE;YACpD,sBAAsB;IAiDpC,uEAAuE;YACzD,oBAAoB;IA0BlC,OAAO,CAAC,gCAAgC;IAexC,qCAAqC;IACrC,UAAU,IAAI,IAAI;IAWlB,2EAA2E;IAC3E,aAAa,CACX,KAAK,EAAE,GAAG,CAAC,yBAAyB,EACpC,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;IAIzC,2DAA2D;IAC3D,IAAI,CAAC,CAAC,EACJ,GAAG,EAAE,oBAAoB,CAAC,CAAC,CAAC,EAC5B,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,CAAC,EAAE,WAAW,GACpB,OAAO,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAM7B,YAAY,CAChB,KAAK,EAAE,MAAM,GAAG,UAAU,EAC1B,SAAS,EAAE,MAAM,GAAG,UAAU,EAC9B,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAwDpB;;;OAGG;IACH,eAAe,CACb,KAAK,EAAE,MAAM,GAAG,UAAU,EAC1B,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAGpB,UAAU,CACR,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAGpB,aAAa,CACX,SAAS,EAAE,MAAM,EACjB,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAGpB;;;;OAIG;IACH,SAAS,CACP,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,EACnB,OAAO,CAAC,EAAE,qBAAqB,GAC9B,OAAO,CAAC,QAAQ,CAAC;IAGpB,YAAY,CACV,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,YAAY,EACpB,KAAK,EAAE,WAAW,EAClB,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,QAAQ,CAAC;IAGpB,MAAM,CAAC,SAAS,EAAE,SAAS,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI/C,8EAA8E;IAC9E,OAAO,CAAC,WAAW,EAAE,MAAM,GAAG,UAAU,GAAG,OAAO,CAAC,QAAQ,CAAC;IAI5D,yEAAyE;IACzE,SAAS,CAAC,SAAS,EAAE,SAAS;IAI9B,4CAA4C;IAC5C,aAAa,IAAI,aAAa;CAM/B"}