tenzro-wallet 0.1.0

package/dist/dapp/eip6963.d.ts

@@ -0,0 +1,64 @@
+/**
+ * EIP-6963 announcement payload builder.
+ *
+ * EIP-6963 specifies how a wallet announces itself to dApps in the
+ * browser-extension form factor: the wallet dispatches an
+ * `eip6963:announceProvider` event carrying a `{ info, provider }` detail,
+ * and listens for `eip6963:requestProvider` to re-announce on demand.
+ *
+ * Per DESIGN.md §11.6 (resolved), Tenzro Wallet uses EIP-6963 in-page
+ * conventions until a Canton CIP for multi-provider discovery lands. The
+ * actual `window.dispatchEvent` lives in the browser-extension package
+ * (`@tenzro/wallet-extension`, M6) — this module only builds the
+ * payload so the announcement can be unit-tested without a DOM and
+ * re-used across form factors.
+ *
+ * The default `rdns` is sourced from `tenzro-sdk`'s `TENZRO_PROVIDER_RDNS`
+ * constant — the SDK's `discoverEip6963Provider()` filters on that exact
+ * value, so importing it here keeps the announce side and the consume side
+ * aligned by construction. If the SDK ever moves the RDNS, the kernel
+ * announcement moves with it without a code change here.
+ *
+ * Spec: https://eips.ethereum.org/EIPS/eip-6963
+ */
+/**
+ * The `info` half of an EIP-6963 announcement. The `provider` half is the
+ * EIP-1193 object the extension injects; the kernel doesn't construct
+ * that — the extension does.
+ */
+export interface Eip6963ProviderInfo {
+    /**
+     * UUIDv4 stable across announcements within a page. Per spec, dApps
+     * may treat this as a session-scoped wallet identity.
+     */
+    readonly uuid: string;
+    /** Human-readable wallet name displayed in selector UIs. */
+    readonly name: string;
+    /** Reverse-DNS namespace owned by the wallet vendor. */
+    readonly rdns: string;
+    /** `data:image/svg+xml;base64,...` (or PNG) wallet icon. */
+    readonly icon: string;
+}
+export interface Eip6963AnnouncementInput {
+    readonly uuid: string;
+    /** Defaults to "Tenzro Wallet". */
+    readonly name?: string;
+    /**
+     * Defaults to the SDK's `TENZRO_PROVIDER_RDNS` constant
+     * (`network.tenzro.wallet`) — the same value `discoverEip6963Provider()`
+     * filters on. Override only for staging / preview builds.
+     */
+    readonly rdns?: string;
+    /** Required — no built-in default; the extension supplies the asset. */
+    readonly icon: string;
+}
+/**
+ * Build the `info` payload for an `eip6963:announceProvider` event. Pure —
+ * no DOM access, no side effects. The browser-extension package consumes
+ * this and pairs it with the EIP-1193 provider object before dispatch.
+ */
+export declare function buildEip6963Announcement(input: Eip6963AnnouncementInput): Eip6963ProviderInfo;
+/** EIP-6963 event names — exported as constants so consumers don't typo. */
+export declare const EIP6963_ANNOUNCE_EVENT = "eip6963:announceProvider";
+export declare const EIP6963_REQUEST_EVENT = "eip6963:requestProvider";
+//# sourceMappingURL=eip6963.d.ts.map

package/dist/dapp/eip6963.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"eip6963.d.ts","sourceRoot":"","sources":["../../src/dapp/eip6963.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAIH;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC;;;OAGG;IACH,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB;;;;OAIG;IACH,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IACvB,wEAAwE;IACxE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAQD;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,wBAAwB,GAAG,mBAAmB,CAiB7F;AAED,4EAA4E;AAC5E,eAAO,MAAM,sBAAsB,6BAA6B,CAAC;AACjE,eAAO,MAAM,qBAAqB,4BAA4B,CAAC"}

package/dist/dapp/eip6963.js

@@ -0,0 +1,55 @@
+/**
+ * EIP-6963 announcement payload builder.
+ *
+ * EIP-6963 specifies how a wallet announces itself to dApps in the
+ * browser-extension form factor: the wallet dispatches an
+ * `eip6963:announceProvider` event carrying a `{ info, provider }` detail,
+ * and listens for `eip6963:requestProvider` to re-announce on demand.
+ *
+ * Per DESIGN.md §11.6 (resolved), Tenzro Wallet uses EIP-6963 in-page
+ * conventions until a Canton CIP for multi-provider discovery lands. The
+ * actual `window.dispatchEvent` lives in the browser-extension package
+ * (`@tenzro/wallet-extension`, M6) — this module only builds the
+ * payload so the announcement can be unit-tested without a DOM and
+ * re-used across form factors.
+ *
+ * The default `rdns` is sourced from `tenzro-sdk`'s `TENZRO_PROVIDER_RDNS`
+ * constant — the SDK's `discoverEip6963Provider()` filters on that exact
+ * value, so importing it here keeps the announce side and the consume side
+ * aligned by construction. If the SDK ever moves the RDNS, the kernel
+ * announcement moves with it without a code change here.
+ *
+ * Spec: https://eips.ethereum.org/EIPS/eip-6963
+ */
+import { TENZRO_PROVIDER_RDNS } from 'tenzro-sdk';
+/** Tenzro defaults — kernel-default name + rdns matching the docs site. */
+const DEFAULT_NAME = 'Tenzro Wallet';
+const DEFAULT_RDNS = TENZRO_PROVIDER_RDNS;
+const UUID_RE = /^[0-9a-f]{8}-[0-9a-f]{4}-[1-5][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i;
+/**
+ * Build the `info` payload for an `eip6963:announceProvider` event. Pure —
+ * no DOM access, no side effects. The browser-extension package consumes
+ * this and pairs it with the EIP-1193 provider object before dispatch.
+ */
+export function buildEip6963Announcement(input) {
+    if (!UUID_RE.test(input.uuid)) {
+        throw new Error(`buildEip6963Announcement: invalid uuid "${input.uuid}" — must be UUIDv1–v5`);
+    }
+    if (!input.icon || !/^data:image\/(svg\+xml|png|jpeg|webp)/i.test(input.icon)) {
+        throw new Error('buildEip6963Announcement: icon must be a data: URL with an image MIME type');
+    }
+    const rdns = input.rdns ?? DEFAULT_RDNS;
+    if (!/^[a-z0-9]+(\.[a-z0-9-]+)+$/i.test(rdns)) {
+        throw new Error(`buildEip6963Announcement: invalid rdns "${rdns}" — expected reverse-DNS form`);
+    }
+    return {
+        uuid: input.uuid,
+        name: input.name ?? DEFAULT_NAME,
+        rdns,
+        icon: input.icon,
+    };
+}
+/** EIP-6963 event names — exported as constants so consumers don't typo. */
+export const EIP6963_ANNOUNCE_EVENT = 'eip6963:announceProvider';
+export const EIP6963_REQUEST_EVENT = 'eip6963:requestProvider';
+//# sourceMappingURL=eip6963.js.map

package/dist/dapp/eip6963.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"eip6963.js","sourceRoot":"","sources":["../../src/dapp/eip6963.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAmClD,2EAA2E;AAC3E,MAAM,YAAY,GAAG,eAAe,CAAC;AACrC,MAAM,YAAY,GAAG,oBAAoB,CAAC;AAE1C,MAAM,OAAO,GAAG,4EAA4E,CAAC;AAE7F;;;;GAIG;AACH,MAAM,UAAU,wBAAwB,CAAC,KAA+B;IACtE,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,2CAA2C,KAAK,CAAC,IAAI,uBAAuB,CAAC,CAAC;IAChG,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,wCAAwC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9E,MAAM,IAAI,KAAK,CAAC,4EAA4E,CAAC,CAAC;IAChG,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,IAAI,YAAY,CAAC;IACxC,IAAI,CAAC,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CAAC,2CAA2C,IAAI,+BAA+B,CAAC,CAAC;IAClG,CAAC;IACD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI,EAAE,KAAK,CAAC,IAAI,IAAI,YAAY;QAChC,IAAI;QACJ,IAAI,EAAE,KAAK,CAAC,IAAI;KACjB,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,sBAAsB,GAAG,0BAA0B,CAAC;AACjE,MAAM,CAAC,MAAM,qBAAqB,GAAG,yBAAyB,CAAC"}

package/dist/dapp/index.d.ts

@@ -0,0 +1,21 @@
+/**
+ * dApp-facing helpers — payload builders + event names + SDK browser-support
+ * re-exports. The actual provider injection lives in
+ * `@tenzro/wallet-extension` (M6); the kernel only ships the parts that are
+ * pure / DOM-free / unit-testable plus a re-export of the SDK-supplied
+ * consume-side helpers so dApp-host code in this repo can pull from one
+ * place.
+ *
+ * Why the re-export lives here: the SDK provides
+ * `discoverEip6963Provider` + `TenzroNotInstalledError` +
+ * `TENZRO_PROVIDER_RDNS` as the consumer-side counterpart to the
+ * announce-side builder in this folder. Co-locating them keeps "the kernel
+ * is the only thing that touches `tenzro-sdk`" rule intact (any host that
+ * just needs to *consume* an injected provider can depend on the kernel
+ * instead of a second SDK install).
+ */
+export { buildEip6963Announcement, EIP6963_ANNOUNCE_EVENT, EIP6963_REQUEST_EVENT, } from './eip6963.js';
+export type { Eip6963ProviderInfo, Eip6963AnnouncementInput, } from './eip6963.js';
+export { TENZRO_PROVIDER_RDNS, discoverEip6963Provider, TenzroNotInstalledError, Eip1193Transport, } from 'tenzro-sdk';
+export type { EIP1193Provider, EIP6963ProviderInfo, EIP6963ProviderDetail, RpcTransport, } from 'tenzro-sdk';
+//# sourceMappingURL=index.d.ts.map

package/dist/dapp/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/dapp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AACtB,YAAY,EACV,mBAAmB,EACnB,wBAAwB,GACzB,MAAM,cAAc,CAAC;AAOtB,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,YAAY,CAAC;AACpB,YAAY,EACV,eAAe,EACf,mBAAmB,EACnB,qBAAqB,EACrB,YAAY,GACb,MAAM,YAAY,CAAC"}

package/dist/dapp/index.js

@@ -0,0 +1,24 @@
+/**
+ * dApp-facing helpers — payload builders + event names + SDK browser-support
+ * re-exports. The actual provider injection lives in
+ * `@tenzro/wallet-extension` (M6); the kernel only ships the parts that are
+ * pure / DOM-free / unit-testable plus a re-export of the SDK-supplied
+ * consume-side helpers so dApp-host code in this repo can pull from one
+ * place.
+ *
+ * Why the re-export lives here: the SDK provides
+ * `discoverEip6963Provider` + `TenzroNotInstalledError` +
+ * `TENZRO_PROVIDER_RDNS` as the consumer-side counterpart to the
+ * announce-side builder in this folder. Co-locating them keeps "the kernel
+ * is the only thing that touches `tenzro-sdk`" rule intact (any host that
+ * just needs to *consume* an injected provider can depend on the kernel
+ * instead of a second SDK install).
+ */
+export { buildEip6963Announcement, EIP6963_ANNOUNCE_EVENT, EIP6963_REQUEST_EVENT, } from "./eip6963.js";
+// SDK-supplied consume-side helpers — see `tenzro-sdk/dist/eip6963.d.ts`
+// and `tenzro-sdk/dist/rpc.d.ts`. The kernel re-exports rather than
+// re-implements so the SDK stays the single source of truth for the
+// `network.tenzro.wallet` RDNS, the discovery timeout semantics, and the
+// `Eip1193Transport` wire shape.
+export { TENZRO_PROVIDER_RDNS, discoverEip6963Provider, TenzroNotInstalledError, Eip1193Transport, } from 'tenzro-sdk';
+//# sourceMappingURL=index.js.map

package/dist/dapp/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/dapp/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EACL,wBAAwB,EACxB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,cAAc,CAAC;AAMtB,yEAAyE;AACzE,oEAAoE;AACpE,oEAAoE;AACpE,yEAAyE;AACzE,iCAAiC;AACjC,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,uBAAuB,EACvB,gBAAgB,GACjB,MAAM,YAAY,CAAC"}

package/dist/identity/delegate-set.d.ts

@@ -0,0 +1,57 @@
+/**
+ * TDIP social-recovery delegate set — `k of n` configuration.
+ *
+ * Per DESIGN.md §4.3.6 + §11.10 (deferred): users designate `n` delegates
+ * (TDIP-rooted DIDs of trusted parties — friends, family, institutions) and
+ * recovery requires `k` of them to co-sign. We ship a 3-of-5 default that
+ * matches Argent's model, with k/n configurable at delegate-set creation.
+ *
+ * The kernel exposes the *shape* + validation here; the actual recovery
+ * flow (UI, delegate-onboarding, signature collection) lives in the
+ * passkey-quorum custody surface (M5.5).
+ *
+ * Constraints:
+ *   - 1 ≤ k ≤ n
+ *   - n ≤ 7 (exchange-grade; UX gets unwieldy beyond this — ship a higher
+ *     cap only when there's a documented enterprise need)
+ *   - delegates list contains exactly `n` distinct DIDs
+ *   - the wallet's own DID cannot appear in the delegate list (prevents
+ *     a self-recovery loop where the wallet is also a delegate of itself)
+ */
+import type { TdipDid } from '../types/identity.js';
+export interface DelegateSetConfig {
+    readonly k: number;
+    readonly n: number;
+    /** Exactly `n` distinct delegate DIDs. Order is the canonical signing order. */
+    readonly delegates: readonly TdipDid[];
+}
+/** Argent-style default. */
+export declare const DELEGATE_SET_DEFAULT_K = 3;
+export declare const DELEGATE_SET_DEFAULT_N = 5;
+export declare const DELEGATE_SET_MAX_N = 7;
+export interface DelegateSetSizeOption {
+    readonly k: number;
+    readonly n: number;
+    readonly label: string;
+    readonly tier: 'friendly' | 'standard' | 'exchange-grade';
+}
+/**
+ * UX-validated options the social-recovery UI offers. The user can also
+ * roll a custom k/n inside the constraints. These three are the curated
+ * presets.
+ */
+export declare const DELEGATE_SET_OPTIONS: readonly DelegateSetSizeOption[];
+/**
+ * Validate a `DelegateSetConfig` against the recovery rules. Returns the
+ * config unchanged on success; throws with a specific reason otherwise.
+ *
+ * `selfDid` is the wallet's own DID; if provided, the validator rejects
+ * configs where the wallet is in its own delegate list.
+ */
+export declare function validateDelegateSet(cfg: DelegateSetConfig, selfDid?: TdipDid): DelegateSetConfig;
+/**
+ * Build the default 3-of-5 delegate set from a list of candidate delegate
+ * DIDs. Throws if fewer than 5 delegates are supplied.
+ */
+export declare function defaultDelegateSet(delegates: readonly TdipDid[], selfDid?: TdipDid): DelegateSetConfig;
+//# sourceMappingURL=delegate-set.d.ts.map

package/dist/identity/delegate-set.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegate-set.d.ts","sourceRoot":"","sources":["../../src/identity/delegate-set.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,sBAAsB,CAAC;AAEpD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,QAAQ,CAAC,SAAS,EAAE,SAAS,OAAO,EAAE,CAAC;CACxC;AAED,4BAA4B;AAC5B,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,eAAO,MAAM,sBAAsB,IAAI,CAAC;AACxC,eAAO,MAAM,kBAAkB,IAAI,CAAC;AAEpC,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,UAAU,GAAG,gBAAgB,CAAC;CAC3D;AAED;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,SAAS,qBAAqB,EAIhE,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,iBAAiB,EAAE,OAAO,CAAC,EAAE,OAAO,GAAG,iBAAiB,CAkChG;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,SAAS,OAAO,EAAE,EAC7B,OAAO,CAAC,EAAE,OAAO,GAChB,iBAAiB,CAcnB"}

package/dist/identity/delegate-set.js

@@ -0,0 +1,85 @@
+/**
+ * TDIP social-recovery delegate set — `k of n` configuration.
+ *
+ * Per DESIGN.md §4.3.6 + §11.10 (deferred): users designate `n` delegates
+ * (TDIP-rooted DIDs of trusted parties — friends, family, institutions) and
+ * recovery requires `k` of them to co-sign. We ship a 3-of-5 default that
+ * matches Argent's model, with k/n configurable at delegate-set creation.
+ *
+ * The kernel exposes the *shape* + validation here; the actual recovery
+ * flow (UI, delegate-onboarding, signature collection) lives in the
+ * passkey-quorum custody surface (M5.5).
+ *
+ * Constraints:
+ *   - 1 ≤ k ≤ n
+ *   - n ≤ 7 (exchange-grade; UX gets unwieldy beyond this — ship a higher
+ *     cap only when there's a documented enterprise need)
+ *   - delegates list contains exactly `n` distinct DIDs
+ *   - the wallet's own DID cannot appear in the delegate list (prevents
+ *     a self-recovery loop where the wallet is also a delegate of itself)
+ */
+/** Argent-style default. */
+export const DELEGATE_SET_DEFAULT_K = 3;
+export const DELEGATE_SET_DEFAULT_N = 5;
+export const DELEGATE_SET_MAX_N = 7;
+/**
+ * UX-validated options the social-recovery UI offers. The user can also
+ * roll a custom k/n inside the constraints. These three are the curated
+ * presets.
+ */
+export const DELEGATE_SET_OPTIONS = [
+    { k: 2, n: 3, label: '2 of 3 (friendly)', tier: 'friendly' },
+    { k: 3, n: 5, label: '3 of 5 (standard)', tier: 'standard' },
+    { k: 5, n: 7, label: '5 of 7 (exchange-grade)', tier: 'exchange-grade' },
+];
+/**
+ * Validate a `DelegateSetConfig` against the recovery rules. Returns the
+ * config unchanged on success; throws with a specific reason otherwise.
+ *
+ * `selfDid` is the wallet's own DID; if provided, the validator rejects
+ * configs where the wallet is in its own delegate list.
+ */
+export function validateDelegateSet(cfg, selfDid) {
+    if (!Number.isInteger(cfg.k) || !Number.isInteger(cfg.n)) {
+        throw new Error(`validateDelegateSet: k and n must be integers; got ${cfg.k}/${cfg.n}`);
+    }
+    if (cfg.k < 1) {
+        throw new Error(`validateDelegateSet: k must be ≥ 1; got ${cfg.k}`);
+    }
+    if (cfg.k > cfg.n) {
+        throw new Error(`validateDelegateSet: k (${cfg.k}) cannot exceed n (${cfg.n})`);
+    }
+    if (cfg.n > DELEGATE_SET_MAX_N) {
+        throw new Error(`validateDelegateSet: n (${cfg.n}) exceeds DELEGATE_SET_MAX_N (${DELEGATE_SET_MAX_N}); ` +
+            'open an issue if your use case requires more');
+    }
+    if (cfg.delegates.length !== cfg.n) {
+        throw new Error(`validateDelegateSet: expected exactly ${cfg.n} delegates, got ${cfg.delegates.length}`);
+    }
+    const seen = new Set();
+    for (const d of cfg.delegates) {
+        if (seen.has(d)) {
+            throw new Error(`validateDelegateSet: duplicate delegate ${d}`);
+        }
+        seen.add(d);
+    }
+    if (selfDid !== undefined && seen.has(selfDid)) {
+        throw new Error(`validateDelegateSet: wallet DID ${selfDid} cannot appear in its own delegate list`);
+    }
+    return cfg;
+}
+/**
+ * Build the default 3-of-5 delegate set from a list of candidate delegate
+ * DIDs. Throws if fewer than 5 delegates are supplied.
+ */
+export function defaultDelegateSet(delegates, selfDid) {
+    if (delegates.length < DELEGATE_SET_DEFAULT_N) {
+        throw new Error(`defaultDelegateSet: need ${DELEGATE_SET_DEFAULT_N} delegates for the default config, got ${delegates.length}`);
+    }
+    return validateDelegateSet({
+        k: DELEGATE_SET_DEFAULT_K,
+        n: DELEGATE_SET_DEFAULT_N,
+        delegates: delegates.slice(0, DELEGATE_SET_DEFAULT_N),
+    }, selfDid);
+}
+//# sourceMappingURL=delegate-set.js.map

package/dist/identity/delegate-set.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delegate-set.js","sourceRoot":"","sources":["../../src/identity/delegate-set.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAWH,4BAA4B;AAC5B,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACxC,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC;AASpC;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAqC;IACpE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,UAAU,EAAE;IAC5D,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,UAAU,EAAE;IAC5D,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,yBAAyB,EAAE,IAAI,EAAE,gBAAgB,EAAE;CACzE,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,GAAsB,EAAE,OAAiB;IAC3E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QACzD,MAAM,IAAI,KAAK,CAAC,sDAAsD,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IAC1F,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,2CAA2C,GAAG,CAAC,CAAC,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,2BAA2B,GAAG,CAAC,CAAC,sBAAsB,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,IAAI,GAAG,CAAC,CAAC,GAAG,kBAAkB,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CACb,2BAA2B,GAAG,CAAC,CAAC,iCAAiC,kBAAkB,KAAK;YACtF,8CAA8C,CACjD,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CACb,yCAAyC,GAAG,CAAC,CAAC,mBAAmB,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CACxF,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,SAAS,EAAE,CAAC;QAC9B,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,2CAA2C,CAAC,EAAE,CAAC,CAAC;QAClE,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC;QAC/C,MAAM,IAAI,KAAK,CACb,mCAAmC,OAAO,yCAAyC,CACpF,CAAC;IACJ,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAA6B,EAC7B,OAAiB;IAEjB,IAAI,SAAS,CAAC,MAAM,GAAG,sBAAsB,EAAE,CAAC;QAC9C,MAAM,IAAI,KAAK,CACb,4BAA4B,sBAAsB,0CAA0C,SAAS,CAAC,MAAM,EAAE,CAC/G,CAAC;IACJ,CAAC;IACD,OAAO,mBAAmB,CACxB;QACE,CAAC,EAAE,sBAAsB;QACzB,CAAC,EAAE,sBAAsB;QACzB,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,sBAAsB,CAAC;KACtD,EACD,OAAO,CACR,CAAC;AACJ,CAAC"}

package/dist/identity/did.d.ts

@@ -0,0 +1,17 @@
+/**
+ * TDIP DID parsing/formatting. Pure functions, no side effects.
+ *
+ * Forms:
+ *   did:tenzro:human:{uuid}
+ *   did:tenzro:machine:{uuid}                       — autonomous
+ *   did:tenzro:machine:{controller-did-uuid}:{uuid} — controlled-machine
+ */
+import type { TdipDid, TdipDidParts, TdipKind } from '../types/identity.js';
+export declare function asTdipDid(s: string): TdipDid;
+export declare function parseTdipDid(s: string): TdipDidParts;
+export declare function formatTdipDid(parts: {
+    kind: TdipKind;
+    controller?: TdipDid | undefined;
+    uuid: string;
+}): TdipDid;
+//# sourceMappingURL=did.d.ts.map

package/dist/identity/did.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"did.d.ts","sourceRoot":"","sources":["../../src/identity/did.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,KAAK,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAI5E,wBAAgB,SAAS,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAG5C;AAED,wBAAgB,YAAY,CAAC,CAAC,EAAE,MAAM,GAAG,YAAY,CA+BpD;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACnC,IAAI,EAAE,QAAQ,CAAC;IACf,UAAU,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACjC,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,OAAO,CAYV"}

package/dist/identity/did.js

@@ -0,0 +1,60 @@
+/**
+ * TDIP DID parsing/formatting. Pure functions, no side effects.
+ *
+ * Forms:
+ *   did:tenzro:human:{uuid}
+ *   did:tenzro:machine:{uuid}                       — autonomous
+ *   did:tenzro:machine:{controller-did-uuid}:{uuid} — controlled-machine
+ */
+const DID_PREFIX = 'did:tenzro:';
+export function asTdipDid(s) {
+    parseTdipDid(s); // throws if malformed
+    return s;
+}
+export function parseTdipDid(s) {
+    if (!s.startsWith(DID_PREFIX)) {
+        throw new Error(`not a tenzro DID: ${s}`);
+    }
+    const rest = s.slice(DID_PREFIX.length);
+    const parts = rest.split(':');
+    const [kindRaw, ...tail] = parts;
+    switch (kindRaw) {
+        case 'human': {
+            if (tail.length !== 1 || !tail[0])
+                throw new Error(`malformed human DID: ${s}`);
+            return { method: 'tenzro', kind: 'human', uuid: tail[0] };
+        }
+        case 'machine': {
+            if (tail.length === 1 && tail[0]) {
+                return { method: 'tenzro', kind: 'autonomous-machine', uuid: tail[0] };
+            }
+            if (tail.length === 2 && tail[0] && tail[1]) {
+                const controller = `${DID_PREFIX}human:${tail[0]}`;
+                return {
+                    method: 'tenzro',
+                    kind: 'controlled-machine',
+                    controller,
+                    uuid: tail[1],
+                };
+            }
+            throw new Error(`malformed machine DID: ${s}`);
+        }
+        default:
+            throw new Error(`unknown TDIP kind: ${kindRaw}`);
+    }
+}
+export function formatTdipDid(parts) {
+    switch (parts.kind) {
+        case 'human':
+            return `${DID_PREFIX}human:${parts.uuid}`;
+        case 'autonomous-machine':
+            return `${DID_PREFIX}machine:${parts.uuid}`;
+        case 'controlled-machine': {
+            if (!parts.controller)
+                throw new Error('controlled-machine requires controller');
+            const ctrl = parseTdipDid(parts.controller);
+            return `${DID_PREFIX}machine:${ctrl.uuid}:${parts.uuid}`;
+        }
+    }
+}
+//# sourceMappingURL=did.js.map

package/dist/identity/did.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"did.js","sourceRoot":"","sources":["../../src/identity/did.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAIH,MAAM,UAAU,GAAG,aAAa,CAAC;AAEjC,MAAM,UAAU,SAAS,CAAC,CAAS;IACjC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,sBAAsB;IACvC,OAAO,CAAY,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,CAAS;IACpC,IAAI,CAAC,CAAC,CAAC,UAAU,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;IAC5C,CAAC;IACD,MAAM,IAAI,GAAG,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;IACxC,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC;IAEjC,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;YAChF,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,CAAC;QACD,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,oBAAoB,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,CAAC;YACD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,MAAM,UAAU,GAAG,GAAG,UAAU,SAAS,IAAI,CAAC,CAAC,CAAC,EAAa,CAAC;gBAC9D,OAAO;oBACL,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,oBAAoB;oBAC1B,UAAU;oBACV,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;iBACd,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,EAAE,CAAC,CAAC;QACjD,CAAC;QACD;YACE,MAAM,IAAI,KAAK,CAAC,sBAAsB,OAAO,EAAE,CAAC,CAAC;IACrD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,KAI7B;IACC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,OAAO;YACV,OAAO,GAAG,UAAU,SAAS,KAAK,CAAC,IAAI,EAAa,CAAC;QACvD,KAAK,oBAAoB;YACvB,OAAO,GAAG,UAAU,WAAW,KAAK,CAAC,IAAI,EAAa,CAAC;QACzD,KAAK,oBAAoB,CAAC,CAAC,CAAC;YAC1B,IAAI,CAAC,KAAK,CAAC,UAAU;gBAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;YACjF,MAAM,IAAI,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;YAC5C,OAAO,GAAG,UAAU,WAAW,IAAI,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,EAAa,CAAC;QACtE,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/identity/index.d.ts

@@ -0,0 +1,14 @@
+export { asTdipDid, formatTdipDid, parseTdipDid } from './did.js';
+export { provisionIdentity } from './provision.js';
+export type { ProvisionOptions } from './provision.js';
+export { DELEGATE_SET_DEFAULT_K, DELEGATE_SET_DEFAULT_N, DELEGATE_SET_MAX_N, DELEGATE_SET_OPTIONS, defaultDelegateSet, validateDelegateSet, } from './delegate-set.js';
+export type { DelegateSetConfig, DelegateSetSizeOption, } from './delegate-set.js';
+export { walletNew } from './wallet-new.js';
+export type { DeviceShareStore, PasskeyEnroller, PasskeyEnrolment, ProvisioningPort, WalletNewOptions, WalletNewResult, WalletThresholdRecord, WrappedDeviceShare, } from './wallet-new.js';
+export { walletRecover } from './wallet-recover.js';
+export type { RecoveryPort, RecoveryProof, WalletRecoverOptions, WalletRecoverResult, } from './wallet-recover.js';
+export { ProvisioningHttpAdapter, ProvisioningHttpError } from './provisioning-http-adapter.js';
+export type { ProvisioningHttpConfig } from './provisioning-http-adapter.js';
+export { RecoveryHttpAdapter, RecoveryHttpError } from './recovery-http-adapter.js';
+export type { RecoveryHttpConfig } from './recovery-http-adapter.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/identity/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,YAAY,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACvD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAC3B,YAAY,EACV,iBAAiB,EACjB,qBAAqB,GACtB,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAC5C,YAAY,EACV,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,gBAAgB,EAChB,gBAAgB,EAChB,eAAe,EACf,qBAAqB,EACrB,kBAAkB,GACnB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,YAAY,EACV,YAAY,EACZ,aAAa,EACb,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAChG,YAAY,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAC7E,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AACpF,YAAY,EAAE,kBAAkB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/identity/index.js

@@ -0,0 +1,8 @@
+export { asTdipDid, formatTdipDid, parseTdipDid } from "./did.js";
+export { provisionIdentity } from "./provision.js";
+export { DELEGATE_SET_DEFAULT_K, DELEGATE_SET_DEFAULT_N, DELEGATE_SET_MAX_N, DELEGATE_SET_OPTIONS, defaultDelegateSet, validateDelegateSet, } from "./delegate-set.js";
+export { walletNew } from "./wallet-new.js";
+export { walletRecover } from "./wallet-recover.js";
+export { ProvisioningHttpAdapter, ProvisioningHttpError } from "./provisioning-http-adapter.js";
+export { RecoveryHttpAdapter, RecoveryHttpError } from "./recovery-http-adapter.js";
+//# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAClE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AAEnD,OAAO,EACL,sBAAsB,EACtB,sBAAsB,EACtB,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAK3B,OAAO,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAW5C,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAOpD,OAAO,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,gCAAgC,CAAC;AAEhG,OAAO,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,MAAM,4BAA4B,CAAC"}

package/dist/identity/provision.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Provision a new TDIP identity. M1: deterministic mock — generates a uuid,
+ * derives placeholder per-surface keys. M2 swaps in real key derivation inside
+ * the MPC quorum.
+ */
+import type { TdipIdentity, TdipKind } from '../types/identity.js';
+export interface ProvisionOptions {
+    readonly kind?: TdipKind;
+    /** For deterministic test fixtures. */
+    readonly uuid?: string;
+}
+export declare function provisionIdentity(opts?: ProvisionOptions): Promise<TdipIdentity>;
+//# sourceMappingURL=provision.d.ts.map

package/dist/identity/provision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.d.ts","sourceRoot":"","sources":["../../src/identity/provision.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAA+B,YAAY,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAGhG,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,QAAQ,CAAC;IACzB,uCAAuC;IACvC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,wBAAsB,iBAAiB,CAAC,IAAI,GAAE,gBAAqB,GAAG,OAAO,CAAC,YAAY,CAAC,CA4C1F"}

package/dist/identity/provision.js

@@ -0,0 +1,151 @@
+/**
+ * Provision a new TDIP identity. M1: deterministic mock — generates a uuid,
+ * derives placeholder per-surface keys. M2 swaps in real key derivation inside
+ * the MPC quorum.
+ */
+import { cantonFingerprint } from "../ports/canton/fingerprint.js";
+import { formatTdipDid } from "./did.js";
+export async function provisionIdentity(opts = {}) {
+    const kind = opts.kind ?? 'human';
+    const uuid = opts.uuid ?? newUuid();
+    const did = formatTdipDid({ kind, uuid });
+    // M1: each surface gets a deterministic mock key. M2 derives real keys via
+    // the MPC quorum (BIP32-like derivation paths inside the threshold scheme).
+    const seed = new TextEncoder().encode(did);
+    const nativePub = derive(seed, 'native', 32);
+    const svmPub = derive(seed, 'svm', 32);
+    const cantonInternal = await cantonPartyKey(seed, 'internal', 'tenzro-internal-synchronizer::1220');
+    const cantonExternal = await cantonPartyKey(seed, 'external', 'global-domain::1220');
+    const keys = new Map([
+        [
+            'tenzro-native',
+            {
+                surface: 'tenzro-native',
+                scheme: 'ed25519',
+                publicKey: nativePub,
+                address: base58Encode(nativePub),
+            },
+        ],
+        [
+            'evm-on-tenzro',
+            { surface: 'evm-on-tenzro', scheme: 'secp256k1', address: deriveEvmAddress(seed) },
+        ],
+        [
+            'svm-on-tenzro',
+            {
+                surface: 'svm-on-tenzro',
+                scheme: 'ed25519',
+                publicKey: svmPub,
+                address: base58Encode(svmPub),
+            },
+        ],
+        ['canton-internal', cantonInternal],
+        ['canton-external', cantonExternal],
+    ]);
+    return { did, parts: { method: 'tenzro', kind, uuid }, keys, createdAt: Date.now() };
+}
+// --- helpers ---
+/**
+ * Generate an RFC 4122 v4 UUID. Uses `crypto.randomUUID()` (universally
+ * available in WebCrypto-capable runtimes — browsers, Node 19+, Workers).
+ * M2 will move provisioning into the MPC ceremony where the quorum agrees
+ * on the uuid as part of the threshold key generation; this lives here
+ * until then.
+ */
+function newUuid() {
+    if (!globalThis.crypto?.randomUUID) {
+        throw new Error('provisionIdentity: crypto.randomUUID unavailable on this runtime');
+    }
+    return globalThis.crypto.randomUUID();
+}
+function derive(seed, label, len) {
+    const labelBytes = new TextEncoder().encode(label);
+    const out = new Uint8Array(len);
+    for (let i = 0; i < len; i++) {
+        out[i] =
+            ((seed[i % seed.length] ?? 0) ^ (labelBytes[i % labelBytes.length] ?? 0) ^ (i * 31)) & 0xff;
+    }
+    return out;
+}
+function deriveEvmAddress(seed) {
+    const bytes = derive(seed, 'evm', 20);
+    let hex = '0x';
+    for (const b of bytes)
+        hex += b.toString(16).padStart(2, '0');
+    return hex;
+}
+function partyIdFor(hint, namespaceFingerprint) {
+    // PartyId is `<hint>::<namespace-fingerprint>`. The fingerprint is the
+    // multihash-prefixed SHA-256 of the namespace public key, so the party id
+    // is bound to the namespace key — rotating signing keys never changes it.
+    return `${hint}::${namespaceFingerprint}`;
+}
+/**
+ * Build the canton-internal/canton-external SurfaceKey shape with the new
+ * two-key model (per DESIGN.md §4.5.4 and identity.ts:CantonPartyKey).
+ *
+ * M1 placeholders: namespace + signing keys are deterministic 32-byte
+ * derivations from the DID seed, threshold = 1, single signing key. M5+
+ * onboarding-flow work replaces this with real Ed25519 keys produced under
+ * the passkey-quorum and a M-of-N signing-key set registered via
+ * `PartyToKeyMapping`.
+ *
+ * `synchronizerHostPrefix` is the Canton synchronizer id minus the trailing
+ * fingerprint — `global-domain::1220` for external (MainNet),
+ * `tenzro-internal-synchronizer::1220` for internal. The full id is
+ * completed with a derived 32-byte fingerprint.
+ */
+async function cantonPartyKey(seed, label, synchronizerHostPrefix) {
+    const namespacePub = derive(seed, `canton-${label}-namespace`, 32);
+    const signingPub = derive(seed, `canton-${label}-signing`, 32);
+    const namespaceFingerprint = await cantonFingerprint(namespacePub);
+    const signingFingerprint = await cantonFingerprint(signingPub);
+    const synchronizerFp = derive(seed, `canton-${label}-synchronizer-fp`, 32);
+    let synchronizerHex = '';
+    for (const b of synchronizerFp)
+        synchronizerHex += b.toString(16).padStart(2, '0');
+    const signingScheme = 'ed25519';
+    return {
+        surface: label === 'internal' ? 'canton-internal' : 'canton-external',
+        partyId: partyIdFor(`tenzro-wallet-${label}`, namespaceFingerprint),
+        synchronizerId: `${synchronizerHostPrefix}${synchronizerHex.slice(0, 64)}`,
+        hostingParticipantId: `tenzro-validator::1220${synchronizerHex.slice(0, 64)}`,
+        namespaceKey: {
+            scheme: 'ed25519',
+            publicKey: namespacePub,
+            fingerprint: namespaceFingerprint,
+        },
+        signingKeys: [
+            { scheme: signingScheme, publicKey: signingPub, fingerprint: signingFingerprint },
+        ],
+        threshold: 1,
+    };
+}
+/**
+ * Base58 encoding (Bitcoin alphabet). Tenzro uses Base58 for native and SVM
+ * addresses (per `Address` typedef in tenzro-sdk/types.ts). This is a tiny
+ * pure-JS implementation; M5 swaps it for the canonical encoder used by
+ * the threshold-key derivation routine.
+ */
+function base58Encode(bytes) {
+    const ALPHABET = '123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz';
+    // Convert bytes to a big integer.
+    let n = 0n;
+    for (const b of bytes)
+        n = (n << 8n) + BigInt(b);
+    // Encode.
+    let out = '';
+    while (n > 0n) {
+        const r = Number(n % 58n);
+        out = ALPHABET[r] + out;
+        n /= 58n;
+    }
+    // Preserve leading zero-bytes as '1' chars per Base58 convention.
+    for (const b of bytes) {
+        if (b !== 0)
+            break;
+        out = '1' + out;
+    }
+    return out;
+}
+//# sourceMappingURL=provision.js.map

package/dist/identity/provision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provision.js","sourceRoot":"","sources":["../../src/identity/provision.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,gCAAgC,CAAC;AAEnE,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAQzC,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAyB,EAAE;IACjE,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,CAAC;IAClC,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;IACpC,MAAM,GAAG,GAAG,aAAa,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAE1C,2EAA2E;IAC3E,4EAA4E;IAC5E,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,MAAM,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;IAC7C,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACvC,MAAM,cAAc,GAAG,MAAM,cAAc,CACzC,IAAI,EACJ,UAAU,EACV,oCAAoC,CACrC,CAAC;IACF,MAAM,cAAc,GAAG,MAAM,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE,qBAAqB,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,IAAI,GAAG,CAAoC;QACtD;YACE,eAAe;YACf;gBACE,OAAO,EAAE,eAAe;gBACxB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,SAAS;gBACpB,OAAO,EAAE,YAAY,CAAC,SAAS,CAAC;aACjC;SACF;QACD;YACE,eAAe;YACf,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,EAAE;SACnF;QACD;YACE,eAAe;YACf;gBACE,OAAO,EAAE,eAAe;gBACxB,MAAM,EAAE,SAAS;gBACjB,SAAS,EAAE,MAAM;gBACjB,OAAO,EAAE,YAAY,CAAC,MAAM,CAAC;aAC9B;SACF;QACD,CAAC,iBAAiB,EAAE,cAAc,CAAC;QACnC,CAAC,iBAAiB,EAAE,cAAc,CAAC;KACpC,CAAC,CAAC;IAEH,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC;AACvF,CAAC;AAED,kBAAkB;AAElB;;;;;;GAMG;AACH,SAAS,OAAO;IACd,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;QACnC,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,MAAM,CAAC,IAAgB,EAAE,KAAa,EAAE,GAAW;IAC1D,MAAM,UAAU,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,CAAC;IAChC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAC7B,GAAG,CAAC,CAAC,CAAC;YACJ,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,GAAG,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC;IAChG,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAgB;IACxC,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,GAAG,GAAG,IAAI,CAAC;IACf,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,GAAG,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,OAAO,GAAoB,CAAC;AAC9B,CAAC;AAED,SAAS,UAAU,CAAC,IAAY,EAAE,oBAA4B;IAC5D,uEAAuE;IACvE,0EAA0E;IAC1E,0EAA0E;IAC1E,OAAO,GAAG,IAAI,KAAK,oBAAoB,EAAE,CAAC;AAC5C,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,KAAK,UAAU,cAAc,CAC3B,IAAgB,EAChB,KAA8B,EAC9B,sBAA8B;IAE9B,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,KAAK,YAAY,EAAE,EAAE,CAAC,CAAC;IACnE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,KAAK,UAAU,EAAE,EAAE,CAAC,CAAC;IAC/D,MAAM,oBAAoB,GAAG,MAAM,iBAAiB,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,kBAAkB,GAAG,MAAM,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC/D,MAAM,cAAc,GAAG,MAAM,CAAC,IAAI,EAAE,UAAU,KAAK,kBAAkB,EAAE,EAAE,CAAC,CAAC;IAC3E,IAAI,eAAe,GAAG,EAAE,CAAC;IACzB,KAAK,MAAM,CAAC,IAAI,cAAc;QAAE,eAAe,IAAI,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACnF,MAAM,aAAa,GAAoB,SAAS,CAAC;IACjD,OAAO;QACL,OAAO,EAAE,KAAK,KAAK,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,CAAC,CAAC,iBAAiB;QACrE,OAAO,EAAE,UAAU,CAAC,iBAAiB,KAAK,EAAE,EAAE,oBAAoB,CAAC;QACnE,cAAc,EAAE,GAAG,sBAAsB,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QAC1E,oBAAoB,EAAE,yBAAyB,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE;QAC7E,YAAY,EAAE;YACZ,MAAM,EAAE,SAAS;YACjB,SAAS,EAAE,YAAY;YACvB,WAAW,EAAE,oBAAoB;SAClC;QACD,WAAW,EAAE;YACX,EAAE,MAAM,EAAE,aAAa,EAAE,SAAS,EAAE,UAAU,EAAE,WAAW,EAAE,kBAAkB,EAAE;SAClF;QACD,SAAS,EAAE,CAAC;KACb,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,SAAS,YAAY,CAAC,KAAiB;IACrC,MAAM,QAAQ,GAAG,4DAA4D,CAAC;IAC9E,kCAAkC;IAClC,IAAI,CAAC,GAAG,EAAE,CAAC;IACX,KAAK,MAAM,CAAC,IAAI,KAAK;QAAE,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;IACjD,UAAU;IACV,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC;QACd,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;QAC1B,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC;QACxB,CAAC,IAAI,GAAG,CAAC;IACX,CAAC;IACD,kEAAkE;IAClE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,KAAK,CAAC;YAAE,MAAM;QACnB,GAAG,GAAG,GAAG,GAAG,GAAG,CAAC;IAClB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}