Extend authorizeEntry signing callbacks: payload argument and custom signature ScVals

CHANGELOG.md

@@ -1,9 +1,17 @@
-
 # Changelog
 
 A breaking change will get clearly marked in this log.
 
 
+## Unreleased
+
+### Added
+- `authorizeEntry` / `authorizeInvocation` signing callbacks now receive the 32-byte signing payload (`hash(preimage.toXDR())`) as a second argument alongside the preimage, so signers — including HSMs and remote signers that only accept a digest — never have to re-derive it. Existing single-argument callbacks are unaffected ([#1532](https://github.com/stellar/js-stellar-sdk/issues/1532)).
+- `authorizeEntry` / `authorizeInvocation` now support non-Ed25519 signers: the signing callback may return `{ signatureScVal: xdr.ScVal, address?: string }`, and the given `ScVal` is written verbatim as the credentials' signature — no Ed25519 verification, no `{public_key, signature}` map, no `scvVec` wrapping. This lets smart-wallet / custom-account contracts (whose `__check_auth` expects its own signature structure) use the helper instead of hand-rolling preimage construction and credential assembly. The optional `address` routes the signature to a specific credential node, like `forAddress` ([#1530](https://github.com/stellar/js-stellar-sdk/issues/1530)).
+- First-class passkey/WebAuthn helpers ([#1531](https://github.com/stellar/js-stellar-sdk/issues/1531)):
+  - `buildWebAuthnSignatureScVal({ signature, authenticatorData, clientDataJSON })` assembles the ecosystem-standard (passkey-kit-shaped) signature map `{ authenticator_data, client_data_json, signature }` as an `xdr.ScVal`, for returning via `signatureScVal` from an `authorizeEntry` callback.
+  - `normalizeSecp256r1Signature(derOrCompact)` converts the DER-encoded secp256r1 signature returned by WebAuthn authenticators into the 64-byte compact `r || s` form with low-S normalization that on-chain verification requires.
+
 ## [v16.1.0](https://github.com/stellar/js-stellar-sdk/compare/v16.0.1...v16.1.0)
 
 ### Added