w3pk 0.10.3 → 0.10.5

package/README.md

@@ -59,7 +59,6 @@ const endpoints = await w3pk.getEndpoints(1)
 - EIP-7951 PRIMARY mode (P-256 passkey signing)
 - Build verification (IPFS CID hashing + DAO-maintained onchain registry)
 - Three-layer backup & recovery (passkey sync, encrypted backups, social recovery)
-- AI-powered host app inspection
 
 ## API
 
@@ -428,53 +427,6 @@ console.log('Onchain CID:', onchainCid)
 console.log('Verified:', isValid ? '✅' : '❌')
 ```
 
-### Security Inspection
-
-> **⚠️ Privacy Notice:** This optional feature sends application source code to an external API (Rukh) for AI analysis. User IP address will be visible to the API server.
-
-Analyze web3 applications to understand their transaction and signing methods:
-
-**Browser (analyze current page):**
-```typescript
-import { inspect, inspectNow } from 'w3pk'
-
-// Full inspection with custom options
-const result = await inspect({
-  appUrl: 'https://example.com',
-  rukhUrl: 'https://rukh.w3hc.org',
-  model: 'anthropic',
-  focusMode: 'transactions'
-})
-console.log(result.report)
-
-// Quick console inspection
-await inspectNow()  // Logs report directly to console
-```
-
-**Note:** Inspection API calls are sponsored by the [W3HC (Web3 Hackers Collective)](https://w3hc.org).
-
-**Node.js (analyze local files):**
-```typescript
-import { inspect, gatherCode } from 'w3pk/inspect/node'
-
-// Generate security report via Rukh API
-const report = await inspect(
-  '../my-dapp',           // App path
-  'https://rukh.w3hc.org', // Rukh API URL
-  'w3pk',                  // Context
-  'anthropic',             // Model
-  'transactions'           // Focus mode
-)
-
-// Or just gather code for analysis
-const result = await gatherCode({
-  appPath: '../my-dapp',
-  focusMode: 'transactions',
-  maxFileSizeKB: 500
-})
-console.log(`Analyzed ${result.includedFiles.length} files`)
-```
-
 ## Security & Verification
 
 ### Onchain Build Registry
@@ -493,7 +445,6 @@ Host applications should verify their installed W3PK build against this registry
 - [Integration Guidelines](./docs/INTEGRATION_GUIDELINES.md)
 - [API Reference](./docs/API_REFERENCE.md)
 - [Build Verification](./docs/BUILD_VERIFICATION.md)
-- [Security Inspection](./docs/INSPECTION.md)
 - [EIP-7951](./docs/EIP-7951.md)
 - [Security Architecture](./docs/SECURITY.md)
 - [Post-Quantum Cryptography](./docs/POST_QUANTUM.md) - Quantum-safe migration roadmap
@@ -512,11 +463,4 @@ GPL-3.0
 
 ## Contact
 
-**Julien Béranger** ([GitHub](https://github.com/julienbrg))
-- Element: [@julienbrg:matrix.org](https://matrix.to/#/@julienbrg:matrix.org)
-- Farcaster: [julien-](https://warpcast.com/julien-)
-- Telegram: [@julienbrg](https://t.me/julienbrg)
-- Twitter: [@julienbrg](https://twitter.com/julienbrg)
-
-
-<img src="https://bafkreid5xwxz4bed67bxb2wjmwsec4uhlcjviwy7pkzwoyu5oesjd3sp64.ipfs.w3s.link" alt="built-with-ethereum-w3hc" width="100"/>
+Questions or feedback? Get in touch with [Julien](https://github.com/julienbrg): [https://julienberanger.com/contact](https://julienberanger.com/contact)

package/dist/chainlist/index.d.mts

@@ -0,0 +1,96 @@
+/**
+ * Chainlist types
+ */
+interface Chain {
+    name: string;
+    chain: string;
+    icon?: string;
+    rpc: string[];
+    features?: Array<{
+        name: string;
+    }>;
+    faucets: string[];
+    nativeCurrency: {
+        name: string;
+        symbol: string;
+        decimals: number;
+    };
+    infoURL: string;
+    shortName: string;
+    chainId: number;
+    networkId: number;
+    slip44?: number;
+    ens?: {
+        registry: string;
+    };
+    explorers?: Array<{
+        name: string;
+        url: string;
+        icon?: string;
+        standard: string;
+    }>;
+    title?: string;
+    status?: string;
+    redFlags?: string[];
+}
+interface ChainlistOptions {
+    /**
+     * Custom URL for chains.json data
+     * @default 'https://chainid.network/chains.json'
+     */
+    chainsJsonUrl?: string;
+    /**
+     * Cache duration in milliseconds
+     * @default 3600000 (1 hour)
+     */
+    cacheDuration?: number;
+}
+
+/**
+ * Chainlist module for fetching RPC endpoints
+ */
+
+/**
+ * Get RPC endpoints for a specific chain ID, excluding those that require API keys
+ *
+ * @param chainId - The chain ID to get endpoints for
+ * @param options - Optional configuration
+ * @returns Array of RPC URLs that don't require API keys
+ *
+ * @example
+ * ```typescript
+ * import { getEndpoints } from 'w3pk/chainlist'
+ *
+ * // Get Ethereum mainnet RPCs
+ * const endpoints = await getEndpoints(1)
+ * console.log(endpoints)
+ * // [
+ * //   "https://api.mycryptoapi.com/eth",
+ * //   "https://cloudflare-eth.com",
+ * //   "https://ethereum-rpc.publicnode.com",
+ * //   ...
+ * // ]
+ * ```
+ */
+declare function getEndpoints(chainId: number, options?: ChainlistOptions): Promise<string[]>;
+/**
+ * Get all available chains
+ *
+ * @param options - Optional configuration
+ * @returns Array of all chains
+ */
+declare function getAllChains(options?: ChainlistOptions): Promise<Chain[]>;
+/**
+ * Get chain information by chain ID
+ *
+ * @param chainId - The chain ID to get information for
+ * @param options - Optional configuration
+ * @returns Chain information or undefined if not found
+ */
+declare function getChainById(chainId: number, options?: ChainlistOptions): Promise<Chain | undefined>;
+/**
+ * Clear the chains data cache
+ */
+declare function clearCache(): void;
+
+export { type Chain, type ChainlistOptions, clearCache, getAllChains, getChainById, getEndpoints };

package/dist/chainlist/index.d.ts

@@ -0,0 +1,96 @@
+/**
+ * Chainlist types
+ */
+interface Chain {
+    name: string;
+    chain: string;
+    icon?: string;
+    rpc: string[];
+    features?: Array<{
+        name: string;
+    }>;
+    faucets: string[];
+    nativeCurrency: {
+        name: string;
+        symbol: string;
+        decimals: number;
+    };
+    infoURL: string;
+    shortName: string;
+    chainId: number;
+    networkId: number;
+    slip44?: number;
+    ens?: {
+        registry: string;
+    };
+    explorers?: Array<{
+        name: string;
+        url: string;
+        icon?: string;
+        standard: string;
+    }>;
+    title?: string;
+    status?: string;
+    redFlags?: string[];
+}
+interface ChainlistOptions {
+    /**
+     * Custom URL for chains.json data
+     * @default 'https://chainid.network/chains.json'
+     */
+    chainsJsonUrl?: string;
+    /**
+     * Cache duration in milliseconds
+     * @default 3600000 (1 hour)
+     */
+    cacheDuration?: number;
+}
+
+/**
+ * Chainlist module for fetching RPC endpoints
+ */
+
+/**
+ * Get RPC endpoints for a specific chain ID, excluding those that require API keys
+ *
+ * @param chainId - The chain ID to get endpoints for
+ * @param options - Optional configuration
+ * @returns Array of RPC URLs that don't require API keys
+ *
+ * @example
+ * ```typescript
+ * import { getEndpoints } from 'w3pk/chainlist'
+ *
+ * // Get Ethereum mainnet RPCs
+ * const endpoints = await getEndpoints(1)
+ * console.log(endpoints)
+ * // [
+ * //   "https://api.mycryptoapi.com/eth",
+ * //   "https://cloudflare-eth.com",
+ * //   "https://ethereum-rpc.publicnode.com",
+ * //   ...
+ * // ]
+ * ```
+ */
+declare function getEndpoints(chainId: number, options?: ChainlistOptions): Promise<string[]>;
+/**
+ * Get all available chains
+ *
+ * @param options - Optional configuration
+ * @returns Array of all chains
+ */
+declare function getAllChains(options?: ChainlistOptions): Promise<Chain[]>;
+/**
+ * Get chain information by chain ID
+ *
+ * @param chainId - The chain ID to get information for
+ * @param options - Optional configuration
+ * @returns Chain information or undefined if not found
+ */
+declare function getChainById(chainId: number, options?: ChainlistOptions): Promise<Chain | undefined>;
+/**
+ * Clear the chains data cache
+ */
+declare function clearCache(): void;
+
+export { type Chain, type ChainlistOptions, clearCache, getAllChains, getChainById, getEndpoints };

package/dist/index.d.mts

@@ -246,6 +246,47 @@ declare class StealthAddressModule {
     get isAvailable(): boolean;
 }
 
+/** Client extension results consumed by w3pk (subset of the WebAuthn spec) */
+interface PrfExtensionResults {
+    prf?: {
+        enabled?: boolean;
+        results?: {
+            first?: ArrayBuffer;
+        };
+    };
+}
+/**
+ * Native WebAuthn credential response (authentication)
+ */
+interface AuthenticationCredential {
+    id: string;
+    rawId: ArrayBuffer;
+    type: 'public-key';
+    response: {
+        clientDataJSON: ArrayBuffer;
+        authenticatorData: ArrayBuffer;
+        signature: ArrayBuffer;
+        userHandle?: ArrayBuffer;
+    };
+    getClientExtensionResults(): PrfExtensionResults;
+}
+
+/**
+ * WebAuthn PRF evaluation
+ *
+ * The PRF extension releases HMAC(credential secret, salt) only on a live,
+ * user-verified assertion. The browser hashes each input as
+ * SHA-256("WebAuthn PRF" || 0x00 || input) before it reaches the
+ * authenticator, so inputs here can be any bytes.
+ */
+
+interface PrfSecret {
+    /** 32-byte secret for this origin and tag */
+    secret: Uint8Array;
+    /** Credential the secret is bound to; a new credential gives a new secret */
+    credentialId: string;
+}
+
 /**
  * Shared types used across the SDK
  */
@@ -396,6 +437,23 @@ declare class WalletMissingError extends Web3PasskeyError {
     ethereumAddress: string;
     constructor(credentialId: string, ethereumAddress: string);
 }
+type SyncBootstrapReason = "PASSKEY_BACKUP" | "NO_CREDENTIAL" | "CREDENTIAL_MISMATCH" | "PUBLIC_KEY_MISMATCH";
+/**
+ * A sync can't set up this device's passkey metadata from the backup.
+ */
+declare class SyncBootstrapError extends Web3PasskeyError {
+    reason: SyncBootstrapReason;
+    credentialId: string;
+    constructor(reason: SyncBootstrapReason, credentialId: string);
+}
+/**
+ * The authenticator returned no WebAuthn PRF output, so no
+ * passkey-bound secret can be derived. There is no fallback.
+ */
+declare class PrfUnsupportedError extends Web3PasskeyError {
+    credentialId: string;
+    constructor(credentialId: string);
+}
 
 /**
  * Persistent Session Storage
@@ -479,6 +537,13 @@ interface Web3PasskeyConfig {
      * Requires: snarkjs, circomlibjs
      */
     zkProofs?: ZKProofConfig;
+    /**
+     * WebAuthn user verification for login, registration and signing
+     * (default: 'required'). With 'preferred', authenticators that can skip
+     * the biometric/PIN check (security keys, unlocked password managers)
+     * sign in with one click. PRF-derived secrets always require it.
+     */
+    userVerification?: 'required' | 'preferred';
 }
 
 /**
@@ -487,6 +552,7 @@ interface Web3PasskeyConfig {
 type BackupMethod = 'file' | 'qr' | 'phrase';
 interface BackupStatus {
     hasBackup: boolean;
+    evictionRisk: boolean;
     lastBackupAt?: string;
     methods: BackupMethod[];
     passkeySync: PasskeySyncStatus;
@@ -622,6 +688,7 @@ declare class Web3Passkey {
         address: string;
         username: string;
         hasBackup: boolean;
+        evictionRisk: boolean;
     }>;
     /**
      * Login with WebAuthn using resident credentials
@@ -1007,6 +1074,7 @@ declare class Web3Passkey {
         blob: Blob;
         filename: string;
     }>;
+    private backupCredential;
     /**
      * Set up social recovery by splitting backup file among guardians
      * Uses Shamir Secret Sharing to split the backup - requires M-of-N guardians to recover
@@ -1066,6 +1134,9 @@ declare class Web3Passkey {
      *
      * This allows the user to use the same PRIMARY mode webauthn account on multiple devices.
      *
+     * A PRF backup (from exportForSync()) takes a single assertion restricted
+     * to its passkey and no password.
+     *
      * @param backupData - Backup file (JSON string or Blob) - can be pasted by user
      * @param password - Password to decrypt backup (if password-encrypted)
      * @returns Restored wallet info
@@ -1074,6 +1145,18 @@ declare class Web3Passkey {
         mnemonic: string;
         ethereumAddress: string;
     }>;
+    /**
+     * Restore a PRF backup with its passkey and set this device up for it.
+     * The public key is this device's when it has the passkey's metadata,
+     * else the backup's, checked against the assertion's signature.
+     */
+    private restorePrfBackup;
+    /**
+     * Set this device up for a passkey and a synced wallet: saves the
+     * passkey's metadata (or points it at the wallet), stores the wallet
+     * under the passkey-derived key and starts a session
+     */
+    private bootstrapCredential;
     /**
      * Register new passkey with wallet from backup file
      * Use case: Fresh device, user has backup file but no passkey yet
@@ -1094,16 +1177,30 @@ declare class Web3Passkey {
     getSyncStatus(): Promise<any>;
     /**
      * Export wallet for syncing to another device
-     * Uses passkey encryption so it works on devices where the passkey is synced
+     *
+     * Prompts for the passkey and encrypts with a key derived from its WebAuthn
+     * PRF output (`encryptionMethod: 'prf'`): a device where the passkey synced
+     * restores it with one prompt and no password. Where the authenticator has
+     * no PRF support, `password` makes it fall back to a password backup.
+     *
+     * @param password - Fallback password when PRF is unavailable
+     * @throws PrfUnsupportedError when PRF is unavailable and no password is given
      */
-    exportForSync(): Promise<{
+    exportForSync(password?: string): Promise<{
         blob: Blob;
         filename: string;
         qrCode?: string;
     }>;
     /**
      * Import wallet from another device (sync wallet to this device)
-     * Use case: User has passkey on both devices, wallet only on one
+     *
+     * Takes a PRF backup from exportForSync(): one assertion restricted to
+     * the backup's passkey decrypts it, with no password, on any device where
+     * the passkey synced, including one with no data for it. Works without a
+     * login. For a password backup (exportForSync()'s fallback), use
+     * syncWalletWithPasskey().
+     *
+     * @throws SyncBootstrapError ('CREDENTIAL_MISMATCH') when logged in with another passkey
      */
     importFromSync(syncData: string | Blob): Promise<{
         ethereumAddress: string;
@@ -1158,6 +1255,23 @@ declare class Web3Passkey {
      * @param hours - Duration in hours
      */
     setPersistentSessionDuration(hours: number): void;
+    /**
+     * Derive a 32-byte secret bound to the passkey, separate per origin and tag
+     *
+     * Evaluates the WebAuthn PRF extension on a fresh user-verified assertion
+     * and runs HKDF-SHA256 on the output. The secret is never derived from or
+     * stored with the mnemonic, so it never appears in backups, recovery
+     * phrases, sessions or storage. When logged in, the assertion is
+     * restricted to the current user's passkey.
+     *
+     * @param tag - Non-empty label without ':', e.g. "zk-identity"
+     * @returns The secret and the credential it is bound to
+     * @throws PrfUnsupportedError when the authenticator doesn't support PRF
+     *
+     * @example
+     * const { secret, credentialId } = await w3pk.derivePrfSecret("zk-identity")
+     */
+    derivePrfSecret(tag: string): Promise<PrfSecret>;
     /**
      * Derive ML-KEM-1024 public key from the current wallet
      *
@@ -1443,31 +1557,6 @@ declare function verifyEIP7702Authorization(chainId: bigint, contractAddress: st
     s: string;
 } | string, expectedSigner: string): boolean;
 
-/** Client extension results consumed by w3pk (subset of the WebAuthn spec) */
-interface PrfExtensionResults {
-    prf?: {
-        enabled?: boolean;
-        results?: {
-            first?: ArrayBuffer;
-        };
-    };
-}
-/**
- * Native WebAuthn credential response (authentication)
- */
-interface AuthenticationCredential {
-    id: string;
-    rawId: ArrayBuffer;
-    type: 'public-key';
-    response: {
-        clientDataJSON: ArrayBuffer;
-        authenticatorData: ArrayBuffer;
-        signature: ArrayBuffer;
-        userHandle?: ArrayBuffer;
-    };
-    getClientExtensionResults(): PrfExtensionResults;
-}
-
 /**
  * Sync Authentication Helper
  * Handles passkey selection and authentication for cross-device sync scenarios
@@ -1477,6 +1566,9 @@ interface PasskeySelectionResult {
     credentialId: string;
     publicKey: string;
     ethereumAddress?: string;
+    username?: string;
+    /** The selection assertion, to verify against a public key from a backup */
+    assertion: AuthenticationCredential;
 }
 /**
  * Prompts the user to select a passkey/webauthn credential
@@ -2145,111 +2237,6 @@ declare function getChainById(chainId: number, options?: ChainlistOptions): Prom
  */
 declare function clearCache(): void;
 
-/**
- * Browser Inspection Module
- *
- * Provides client-side code inspection capabilities for analyzing running web3 applications.
- * Fetches JavaScript sources from the current page and analyzes transaction/signing patterns
- * to generate security reports via the Rukh API.
- *
- * This module is designed to be used directly in the browser console or embedded in
- * web applications to help end-users understand the security posture of the apps they use.
- *
- * @module inspect/browser
- */
-/**
- * Configuration options for browser-based application inspection
- */
-interface BrowserInspectOptions {
-    /**
-     * The origin/URL of the app to inspect
-     * @default window.location.origin
-     */
-    appUrl?: string;
-    /**
-     * Rukh API endpoint
-     * @default 'https://rukh.w3hc.org'
-     */
-    rukhUrl?: string;
-    /**
-     * Context to use for analysis
-     * @default 'w3pk'
-     */
-    context?: string;
-    /**
-     * AI model to use
-     * @default 'anthropic'
-     */
-    model?: "anthropic" | "mistral" | "openai";
-    /**
-     * Focus mode for analysis
-     * @default 'transactions'
-     */
-    focusMode?: "transactions" | "all";
-    /**
-     * Maximum total size in KB for all collected code (prevents exceeding API token limits)
-     * @default 100
-     */
-    maxTotalSizeKB?: number;
-}
-/**
- * Result of a browser-based inspection
- */
-interface BrowserInspectResult {
-    /**
-     * The security report markdown generated by Rukh API
-     */
-    report: string;
-    /**
-     * List of JavaScript file paths that were analyzed
-     */
-    analyzedFiles: string[];
-    /**
-     * The application URL that was inspected
-     */
-    appUrl: string;
-}
-/**
- * Inspects the currently running web application and returns a security report
- *
- * This function can be called by end-users in their browser console to analyze
- * the security of the web application they're currently using.
- *
- * @param options - Configuration options
- * @returns A security report analyzing transaction and signing methods
- *
- * @example
- * ```typescript
- * // In browser console or app code:
- * import { inspect } from 'w3pk';
- *
- * const report = await inspect();
- * console.log(report.report);
- * ```
- *
- * @example
- * ```typescript
- * // With custom options:
- * const report = await inspect({
- *   appUrl: 'https://w3pk.w3hc.org',
- *   model: 'anthropic',
- *   focusMode: 'transactions'
- * });
- * ```
- */
-declare function inspect(options?: BrowserInspectOptions): Promise<BrowserInspectResult>;
-/**
- * Quick inspection helper that logs the report to console
- * Perfect for use in browser DevTools console
- *
- * @example
- * ```javascript
- * // In browser console:
- * await w3pk.inspectNow()
- * ```
- */
-declare function inspectNow(options?: BrowserInspectOptions): Promise<void>;
-
 interface MLKemKeypair {
     publicKey: Uint8Array;
     privateKey: Uint8Array;
@@ -2352,4 +2339,4 @@ declare function mlkemDecryptWithKey(payload: EncryptedPayload, privateKey: stri
 
 declare function createWeb3Passkey(config?: Web3PasskeyConfig): Web3Passkey;
 
-export { ApiError, AuthenticationError, type BackupMethod, type BackupStatus, type BrowserInspectOptions, type BrowserInspectResult, CryptoError, DEFAULT_MODE, DEFAULT_TAG, type DeviceInfo, type EIP1193Provider, type EIP7702Authorization, type EncryptedBackupInfo, type EncryptedPayload, type Guardian, type GuardianInvite, type MLKemKeypair, type PasskeySelectionResult, type QRBackupOptions, type RecoveryProgress, type RecoveryScenario, type RecoveryShare, RecoverySimulator, RegistrationError, type SecurityScore, type SignAuthorizationParams, type SimulationResult, type SiweMessage, type SocialRecoveryConfig, SocialRecoveryManager, type StealthAddressConfig, StealthAddressModule, type StealthAddressResult, type StealthKeys, StorageError, type SyncCapabilities, SyncRequiredError, type SyncStatus, type SyncVault, type UserInfo, WalletError, type WalletInfo, WalletMissingError, Web3Passkey, type Web3PasskeyConfig, Web3PasskeyError, arrayBufferToBase64Url, assertEthereumAddress, assertMnemonic, assertUsername, authenticateWithPasskey, base64ToArrayBuffer, base64UrlDecode, base64UrlToArrayBuffer, canControlStealthAddress, checkStealthAddress, clearCache, computeStealthPrivateKey, createSiweMessage, createWalletFromMnemonic, createWeb3Passkey, createWeb3Passkey as default, deriveAddressFromP256PublicKey, deriveIndexFromOriginModeAndTag, deriveMLKemKeypair, deriveStealthKeys, deriveWalletFromMnemonic, detectWalletProvider, encodeEIP7702AuthorizationMessage, extractRS, generateBIP39Wallet, generateSiweNonce, generateStealthAddress, getAllChains, getAllTopics, getChainById, getCurrentBuildHash, getCurrentOrigin, getDefaultProvider, getEndpoints, getExplainer, getOriginSpecificAddress, getPackageVersion, getW3pkBuildHash, hashEIP7702AuthorizationMessage, inspect, inspectNow, isStrongPassword, mlkemDecrypt, mlkemDecryptWithKey, mlkemEncrypt, mlkemEncryptWithKey, normalizeOrigin, parseSiweMessage, promptPasskeySelection, requestExternalWalletAuthorization, safeAtob, safeBtoa, searchExplainers, supportsEIP7702Authorization, validateEthereumAddress, validateMnemonic, validateSiweMessage, validateUsername, verifyBuildHash, verifyEIP7702Authorization, verifySiweSignature };
+export { ApiError, AuthenticationError, type BackupMethod, type BackupStatus, CryptoError, DEFAULT_MODE, DEFAULT_TAG, type DeviceInfo, type EIP1193Provider, type EIP7702Authorization, type EncryptedBackupInfo, type EncryptedPayload, type Guardian, type GuardianInvite, type MLKemKeypair, type PasskeySelectionResult, type PrfSecret, PrfUnsupportedError, type QRBackupOptions, type RecoveryProgress, type RecoveryScenario, type RecoveryShare, RecoverySimulator, RegistrationError, type SecurityScore, type SignAuthorizationParams, type SimulationResult, type SiweMessage, type SocialRecoveryConfig, SocialRecoveryManager, type StealthAddressConfig, StealthAddressModule, type StealthAddressResult, type StealthKeys, StorageError, SyncBootstrapError, type SyncBootstrapReason, type SyncCapabilities, SyncRequiredError, type SyncStatus, type SyncVault, type UserInfo, WalletError, type WalletInfo, WalletMissingError, Web3Passkey, type Web3PasskeyConfig, Web3PasskeyError, arrayBufferToBase64Url, assertEthereumAddress, assertMnemonic, assertUsername, authenticateWithPasskey, base64ToArrayBuffer, base64UrlDecode, base64UrlToArrayBuffer, canControlStealthAddress, checkStealthAddress, clearCache, computeStealthPrivateKey, createSiweMessage, createWalletFromMnemonic, createWeb3Passkey, createWeb3Passkey as default, deriveAddressFromP256PublicKey, deriveIndexFromOriginModeAndTag, deriveMLKemKeypair, deriveStealthKeys, deriveWalletFromMnemonic, detectWalletProvider, encodeEIP7702AuthorizationMessage, extractRS, generateBIP39Wallet, generateSiweNonce, generateStealthAddress, getAllChains, getAllTopics, getChainById, getCurrentBuildHash, getCurrentOrigin, getDefaultProvider, getEndpoints, getExplainer, getOriginSpecificAddress, getPackageVersion, getW3pkBuildHash, hashEIP7702AuthorizationMessage, isStrongPassword, mlkemDecrypt, mlkemDecryptWithKey, mlkemEncrypt, mlkemEncryptWithKey, normalizeOrigin, parseSiweMessage, promptPasskeySelection, requestExternalWalletAuthorization, safeAtob, safeBtoa, searchExplainers, supportsEIP7702Authorization, validateEthereumAddress, validateMnemonic, validateSiweMessage, validateUsername, verifyBuildHash, verifyEIP7702Authorization, verifySiweSignature };