feat: stack upgrades

.cursor/worktrees.json

@@ -0,0 +1,3 @@
+{
+  "setup-worktree": ["npm install"]
+}

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,29 @@
+## Jira Link
+
+<!-- Link to the Jira ticket (if applicable) -->
+
+## Description
+
+<!-- Describe your changes in detail -->
+
+## How has this been tested?
+
+<!-- Please describe how you tested your changes -->
+
+## Screenshots (if appropriate)
+
+<!-- Add screenshots if UI changes are involved -->
+
+## Types of changes
+
+- [ ] Bug fix (non-breaking change which fixes an issue)
+- [ ] New feature (non-breaking change which adds functionality)
+- [ ] Breaking change (fix or feature that would cause existing functionality to not work as expected)
+
+## Checklist
+
+- [ ] My code follows the code style of this project. (run lint)
+- [ ] My change requires a change to the documentation.
+- [ ] I have updated the documentation accordingly.
+- [ ] I have added tests to cover my changes.
+- [ ] All new and existing tests passed.

.github/workflows/backward.yml

@@ -19,14 +19,14 @@ jobs:
     name: Backward Compatibility Tests
     strategy:
       matrix:
-        node: ["22.x"]
+        node: ["24.x"]
         os: [ubuntu-latest]
 
     runs-on: ${{ matrix.os }}
 
     steps:
       - name: checkout tkey repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: tkey
 
@@ -35,7 +35,7 @@ jobs:
           cd ./tkey
 
       - name: Set up node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}
           cache: "npm"
@@ -65,4 +65,4 @@ jobs:
       - name: Running comp tests
         run: |
           cd ./backward-compatibility-tests
-          npm test
+          npm test

.github/workflows/browserTests.yml

@@ -1,11 +1,11 @@
 name: BrowserTests
 
-on:   
+on:
   create: #[push]
   workflow_dispatch:
 env:
   PLAYWRIGHT_BROWSERS_PATH: 0
-  NODE_VERSION: 20
+  NODE_VERSION: 24
   FORCE_COLOR: 3
 
 jobs:
@@ -26,10 +26,10 @@ jobs:
 
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Setup Node.js ${{ env.NODE_VERSION }}
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ env.NODE_VERSION }}
           cache: "npm"
@@ -62,4 +62,4 @@ jobs:
 
       # - name: Browser Test Production webkit (prod)
       #   if: startsWith(matrix.browser, 'webkit')
-      #   run: npm run browser-tests:local-prod-webkit
+      #   run: npm run browser-tests:local-prod-webkit

.github/workflows/buildMocks.yml

@@ -14,19 +14,19 @@ jobs:
     name: Backward Compatibility Tests
     strategy:
       matrix:
-        node: ["22.x"]
+        node: ["24.x"]
         os: [ubuntu-latest]
 
     runs-on: ${{ matrix.os }}
 
     steps:
       - name: checkout tkey repo
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           path: ./tkey
 
       - name: Set up node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}
           cache: "npm"
@@ -65,4 +65,4 @@ jobs:
           branch: master
           cwd: "./backward-compatibility-tests"
           message: "Building Mocks from tkey workflow"
-          push: true
+          push: true

.github/workflows/ci.yml

@@ -6,17 +6,17 @@ jobs:
   test:
     strategy:
       matrix:
-        node: ["22.x"]
+        node: ["24.x"]
         os: [ubuntu-latest]
 
     runs-on: ${{ matrix.os }}
 
     steps:
       - name: Check out Git repository
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Set up node
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
           node-version: ${{ matrix.node }}
           cache: "npm"
@@ -29,6 +29,10 @@ jobs:
 
       - name: Test Development
         run: npm run test
+        env:
+          TEST_RPC_TARGET: ${{ secrets.TEST_RPC_TARGET }}
 
       - name: Test Production
         run: npm run test-production
+        env:
+          TEST_RPC_TARGET: ${{ secrets.TEST_RPC_TARGET }}

.nvmrc

@@ -1 +1 @@
->=18.x
+>=24.x

README.md

@@ -6,6 +6,8 @@
 
 tKey is the underlying SDK used to implement [Web3Auth Plug n Play](https://github.com/web3auth/web3auth). This package can also be used to self host Web3Auth in your own system. tKey stands for Threshold Key, which refers to the management keys & shares generated using threshold cryptography.
 
+> **v16 Breaking Change:** All cryptographic primitives have been migrated from `bn.js`/`elliptic`/`Buffer` to native `bigint`/`@noble/curves`/`Uint8Array`. See the [Migration Guide](#migration-guide) below.
+
 ## The `tKey` SDK
 
 The `tKey` SDK manages private keys by generating shares of it using Shamir Secret Sharing. For example, for a 2 out of 3 (2/3) setup, we give the
@@ -28,6 +30,8 @@ For more information, check out the [technical overview](https://hackmd.io/Tej2t
 - Typescript compatible. Includes Type definitions
 - Fully composable API
 - Module support (Include only those modules which you require)
+- Modern cryptography via [`@noble/curves`](https://github.com/paulmillr/noble-curves) (secp256k1, ed25519)
+- Zero dependency on `Buffer` — uses native `Uint8Array`
 - [Audited](https://github.com/tkey/audit)
 
 ## Packages
@@ -40,7 +44,7 @@ For more information, check out the [technical overview](https://hackmd.io/Tej2t
 | `@tkey/core`                   | [![npm version](https://img.shields.io/npm/v/@tkey/core?label=%22%22)](https://www.npmjs.com/package/@tkey/core/v/latest)                                     | [![minzip](https://img.shields.io/bundlephobia/minzip/@tkey/core?label=%22%22)](https://bundlephobia.com/result?p=@tkey/core@latest)                                     | Core functionalities for creating a tkey                        |
 | 🐕‍🦺 **Service Provider**        |
 | `@tkey/service-provider-torus` | [![npm version](https://img.shields.io/npm/v/@tkey/service-provider-torus?label=%22%22)](https://www.npmjs.com/package/@tkey/service-provider-torus/v/latest) | [![minzip](https://img.shields.io/bundlephobia/minzip/@tkey/service-provider-torus?label=%22%22)](https://bundlephobia.com/result?p=@tkey/service-provider-torus@latest) | `@service-provider-base` with DirectAuth functionality          |
-| 🗳 **Storage Layer**            |
+| 🗳 **Storage Layer**           |
 | `@tkey/storage-layer-torus`    | [![npm version](https://img.shields.io/npm/v/@tkey/storage-layer-torus?label=%22%22)](https://www.npmjs.com/package/@tkey/storage-layer-torus/v/latest)       | [![minzip](https://img.shields.io/bundlephobia/minzip/@tkey/storage-layer-torus?label=%22%22)](https://bundlephobia.com/result?p=@tkey/storage-layer-torus@latest)       | get/set metadata for various shares                             |
 | 🔌 **Modules**                 |
 | `@tkey/chrome-storage`         | [![npm version](https://img.shields.io/npm/v/@tkey/chrome-storage?label=%22%22)](https://www.npmjs.com/package/@tkey/chrome-storage/v/latest)                 | [![minzip](https://img.shields.io/bundlephobia/minzip/@tkey/chrome-storage?label=%22%22)](https://bundlephobia.com/result?p=@tkey/chrome-storage@latest)                 | Add/remove a share from chrome extension storage                |
@@ -53,12 +57,37 @@ For more information, check out the [technical overview](https://hackmd.io/Tej2t
 | 🐉 **Low-Level**               |
 | `@tkey/common-types`           | [![npm version](https://img.shields.io/npm/v/@tkey/common-types?label=%22%22)](https://www.npmjs.com/package/@tkey/common-types/v/latest)                     | [![minzip](https://img.shields.io/bundlephobia/minzip/@tkey/common-types?label=%22%22)](https://bundlephobia.com/result?p=@tkey/common-types@latest)                     | Shared [TypeScript](https://www.typescriptlang.org/) Types      |
 
+## Migration Guide
+
+### v16: `bigint` / `@noble/curves` / `Uint8Array`
+
+v16 removes all legacy cryptography dependencies in favor of modern, audited alternatives:
+
+| Before                    | After                     |
+| ------------------------- | ------------------------- |
+| `bn.js` (`BN`)            | Native `bigint`           |
+| `elliptic`                | `@noble/curves/secp256k1` |
+| `@toruslabs/tweetnacl-js` | `@noble/curves/ed25519`   |
+| `Buffer`                  | `Uint8Array`              |
+
+**What you need to change:**
+
+- **Private keys and share values** are now `bigint` instead of `BN`. Replace `new BN(hex, 16)` with `BigInt(\`0x${hex}\`)`.
+- **Public keys and encrypted data** are now `Uint8Array` instead of `Buffer`. Use `hexToBytes` / `bytesToHex` from `@toruslabs/metadata-helpers` for conversions.
+- **`BNString` type** has been removed. APIs now use `bigint` directly (was `BN | string`).
+- **JSON serialization** of objects containing `bigint` requires the `bigIntReplacer` from `@tkey/common-types`:
+  ```js
+  import { bigIntReplacer } from "@tkey/common-types";
+  JSON.stringify(thresholdKey, bigIntReplacer);
+  ```
+- **`@tkey/tss`** has been removed from this package and will be migrated separately.
+
 ## Building the SDK Locally
 
 ### Requirements
 
 - This package requires a peer dependency of `@babel/runtime`
-- Node 18+
+- Node 22+
 
 ### Installation
 

eslint.config.mjs

@@ -21,4 +21,10 @@ export default [
       },
     },
   },
+  {
+    files: ["test/**/*.test.js", "test/**/*.test.ts"],
+    rules: {
+      "import/no-extraneous-dependencies": "off",
+    },
+  },
 ];