@rhinestone/sdk 0.0.0-dev-20260728163313 → 0.0.0-dev-20260728220029

package/dist/src/actions/passkeys.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"passkeys.d.ts","sourceRoot":"","sources":["../../../actions/passkeys.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACrE,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAA;AAMvC;;;;;GAKG;AACH,iBAAS,MAAM,CAAC,UAAU,EAAE,kBAAkB,GAAG,aAAa,CAU7D;AAED;;;GAGG;AACH,iBAAS,OAAO,IAAI,aAAa,CAgBhC;AAED;;;;;;GAMG;AACH,iBAAS,QAAQ,CACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,uBAAuB,EAAE,OAAO,GAC/B,aAAa,CAyBf;AAED;;;;;GAKG;AACH,iBAAS,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,aAAa,CAqBpE;AAED;;;;GAIG;AACH,iBAAS,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,CAoB5D;AAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA"}
+{"version":3,"file":"passkeys.d.ts","sourceRoot":"","sources":["../../../actions/passkeys.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AACrE,OAAO,EAGL,KAAK,kBAAkB,EACxB,MAAM,gCAAgC,CAAA;AAWvC;;;;;GAKG;AACH,iBAAS,MAAM,CAAC,UAAU,EAAE,kBAAkB,GAAG,aAAa,CAU7D;AAED;;;GAGG;AACH,iBAAS,OAAO,IAAI,aAAa,CAgBhC;AAED;;;;;;GAMG;AACH,iBAAS,QAAQ,CACf,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,uBAAuB,EAAE,OAAO,GAC/B,aAAa,CAOf;AAED;;;;;GAKG;AACH,iBAAS,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,aAAa,CAEpE;AAED;;;;GAIG;AACH,iBAAS,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,aAAa,CAE5D;AAED,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA"}

package/dist/src/actions/passkeys.js

@@ -1,6 +1,6 @@
-import { encodeFunctionData } from 'viem';
 import { resolveWebauthnCredentials, WEBAUTHN_VALIDATOR_ADDRESS, } from '../modules/validators/webauthn.js';
 import { resolveModuleInstallation, resolveModuleUninstallation, } from './runtime.js';
+import { addWebauthnCredential, changeWebauthnThreshold, removeWebauthnCredential, } from './webauthn.js';
 /**
  * Enable passkeys authentication
  * @param pubKey Public key for the passkey
@@ -46,30 +46,7 @@ function disable() {
  * @returns Call to add the passkey owner
  */
 function addOwner(pubKeyX, pubKeyY, requireUserVerification) {
-    return {
-        to: WEBAUTHN_VALIDATOR_ADDRESS,
-        value: 0n,
-        data: encodeFunctionData({
-            abi: [
-                {
-                    inputs: [
-                        { name: 'pubKeyX', type: 'uint256' },
-                        { name: 'pubKeyY', type: 'uint256' },
-                        {
-                            name: 'requireUserVerification',
-                            type: 'bool',
-                        },
-                    ],
-                    name: 'addCredential',
-                    outputs: [],
-                    stateMutability: 'nonpayable',
-                    type: 'function',
-                },
-            ],
-            functionName: 'addCredential',
-            args: [pubKeyX, pubKeyY, requireUserVerification],
-        }),
-    };
+    return addWebauthnCredential(WEBAUTHN_VALIDATOR_ADDRESS, pubKeyX, pubKeyY, requireUserVerification);
 }
 /**
  * Remove a passkey owner
@@ -78,26 +55,7 @@ function addOwner(pubKeyX, pubKeyY, requireUserVerification) {
  * @returns Call to remove the passkey owner
  */
 function removeOwner(pubKeyX, pubKeyY) {
-    return {
-        to: WEBAUTHN_VALIDATOR_ADDRESS,
-        value: 0n,
-        data: encodeFunctionData({
-            abi: [
-                {
-                    inputs: [
-                        { name: 'pubKeyX', type: 'uint256' },
-                        { name: 'pubKeyY', type: 'uint256' },
-                    ],
-                    name: 'removeCredential',
-                    outputs: [],
-                    stateMutability: 'nonpayable',
-                    type: 'function',
-                },
-            ],
-            functionName: 'removeCredential',
-            args: [pubKeyX, pubKeyY],
-        }),
-    };
+    return removeWebauthnCredential(WEBAUTHN_VALIDATOR_ADDRESS, pubKeyX, pubKeyY);
 }
 /**
  * Change an account's signer threshold (passkey)
@@ -105,24 +63,6 @@ function removeOwner(pubKeyX, pubKeyY) {
  * @returns Call to change the threshold
  */
 function changeThreshold(newThreshold) {
-    return {
-        to: WEBAUTHN_VALIDATOR_ADDRESS,
-        value: 0n,
-        data: encodeFunctionData({
-            abi: [
-                {
-                    inputs: [
-                        { internalType: 'uint256', name: '_threshold', type: 'uint256' },
-                    ],
-                    name: 'setThreshold',
-                    outputs: [],
-                    stateMutability: 'nonpayable',
-                    type: 'function',
-                },
-            ],
-            functionName: 'setThreshold',
-            args: [BigInt(newThreshold)],
-        }),
-    };
+    return changeWebauthnThreshold(WEBAUTHN_VALIDATOR_ADDRESS, newThreshold);
 }
 export { addOwner, removeOwner, changeThreshold, disable, enable };

package/dist/src/actions/recovery.d.ts

@@ -23,7 +23,10 @@ export interface RecoverPasskeyOwnershipOptions extends CallResolveContext {
      * id, so their coordinates cannot be read back onchain.
      */
     currentCredentials: readonly PasskeyCredential[];
-    /** Target passkey owner set. */
+    /**
+     * Target passkey owner set. If supplied, `module` must match the account's
+     * configured owner validator.
+     */
     newOwners: WebauthnValidatorConfig;
 }
 /**

package/dist/src/actions/recovery.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../../actions/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAgC,MAAM,MAAM,CAAA;AACjE,OAAO,KAAK,EACV,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,mBAAmB,CAAA;AA0B1B,UAAU,iBAAiB;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,4BAA6B,SAAQ,kBAAkB;IACtE;;;OAGG;IACH,SAAS,EAAE,sBAAsB,CAAA;CAClC;AAED,MAAM,WAAW,8BAA+B,SAAQ,kBAAkB;IACxE;;;;;;;;;OASG;IACH,kBAAkB,EAAE,SAAS,iBAAiB,EAAE,CAAA;IAChD,gCAAgC;IAChC,SAAS,EAAE,uBAAuB,CAAA;CACnC;AAED;;;;;;GAMG;AACH,iBAAS,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,SAAS,SAAI,GAAG,aAAa,CAUlE;AAED;;;;;;;;;;;GAWG;AACH,iBAAe,qBAAqB,CAClC,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,aAAa,EAAE,CAAC,CA4D1B;AAED;;;;;;;;;;;GAWG;AACH,iBAAe,uBAAuB,CACpC,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,aAAa,EAAE,CAAC,CAiD1B;AAMD,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,CAAA"}
+{"version":3,"file":"recovery.d.ts","sourceRoot":"","sources":["../../../actions/recovery.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAgC,MAAM,MAAM,CAAA;AACjE,OAAO,KAAK,EACV,aAAa,EACb,kBAAkB,EAClB,aAAa,EACb,sBAAsB,EACtB,uBAAuB,EACxB,MAAM,mBAAmB,CAAA;AA0B1B,UAAU,iBAAiB;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,EAAE,MAAM,CAAA;CAChB;AAED,MAAM,WAAW,4BAA6B,SAAQ,kBAAkB;IACtE;;;OAGG;IACH,SAAS,EAAE,sBAAsB,CAAA;CAClC;AAED,MAAM,WAAW,8BAA+B,SAAQ,kBAAkB;IACxE;;;;;;;;;OASG;IACH,kBAAkB,EAAE,SAAS,iBAAiB,EAAE,CAAA;IAChD;;;OAGG;IACH,SAAS,EAAE,uBAAuB,CAAA;CACnC;AAED;;;;;;GAMG;AACH,iBAAS,MAAM,CAAC,SAAS,EAAE,OAAO,EAAE,EAAE,SAAS,SAAI,GAAG,aAAa,CAUlE;AAED;;;;;;;;;;;GAWG;AACH,iBAAe,qBAAqB,CAClC,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,aAAa,EAAE,CAAC,CA4D1B;AAED;;;;;;;;;;;GAWG;AACH,iBAAe,uBAAuB,CACpC,OAAO,EAAE,8BAA8B,GACtC,OAAO,CAAC,aAAa,EAAE,CAAC,CAwE1B;AAMD,OAAO,EAAE,MAAM,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,CAAA"}

package/dist/src/actions/recovery.js

@@ -3,8 +3,8 @@ import { OWNABLE_VALIDATOR_ADDRESS } from '../modules/validators/ownable.js';
 import { resolveSocialRecoveryValidator } from '../modules/validators/social-recovery.js';
 import { parseWebauthnPublicKey, WEBAUTHN_VALIDATOR_ADDRESS, } from '../modules/validators/webauthn.js';
 import { addOwnableOwner, changeOwnableThreshold, removeOwnableOwner, } from './ownable.js';
-import { addOwner as addPasskeyOwner, changeThreshold as changePasskeyThreshold, removeOwner as removePasskeyOwner, } from './passkeys.js';
 import { readOwnershipFor, readThresholdFor, resolveValidatorInstallation, } from './runtime.js';
+import { addWebauthnCredential, changeWebauthnThreshold, removeWebauthnCredential, } from './webauthn.js';
 /** Sentinel head of the validator's owner linked list. */
 const SENTINEL_OWNER = '0x0000000000000000000000000000000000000001';
 /**
@@ -90,7 +90,17 @@ async function recoverEcdsaOwnership(options) {
  * @returns Calls to recover ownership, in the order they must be sent
  */
 async function recoverPasskeyOwnership(options) {
-    const existingThreshold = await readThresholdFor(options, options.accountAddress, WEBAUTHN_VALIDATOR_ADDRESS);
+    const configuredValidator = options.config.owners?.type === 'passkey'
+        ? (options.config.owners.module ?? WEBAUTHN_VALIDATOR_ADDRESS)
+        : undefined;
+    const requestedValidator = options.newOwners.module;
+    if (configuredValidator &&
+        requestedValidator &&
+        !isAddressEqual(configuredValidator, requestedValidator)) {
+        throw new Error('Recovery owner validator must match the configured owner validator');
+    }
+    const validator = configuredValidator ?? requestedValidator ?? WEBAUTHN_VALIDATOR_ADDRESS;
+    const existingThreshold = await readThresholdFor(options, options.accountAddress, validator);
     const newCredentials = options.newOwners.accounts.map((account) => {
         // Must go through the shared parser: uncompressed SEC1 keys are 65 bytes
         // with an 0x04 prefix, and slicing from byte 0 shifts both coordinates.
@@ -108,13 +118,13 @@ async function recoverPasskeyOwnership(options) {
     // `removeCredential` reverts once the count would reach the threshold.
     // Rotating the sole credential of a 1-of-1 account is impossible otherwise.
     for (const credential of credentialsToAdd) {
-        calls.push(addPasskeyOwner(credential.pubKeyX, credential.pubKeyY, credential.requireUV));
+        calls.push(addWebauthnCredential(validator, credential.pubKeyX, credential.pubKeyY, credential.requireUV));
     }
     if (existingThreshold !== newThreshold) {
-        calls.push(changePasskeyThreshold(newThreshold));
+        calls.push(changeWebauthnThreshold(validator, newThreshold));
     }
     for (const credential of credentialsToRemove) {
-        calls.push(removePasskeyOwner(credential.pubKeyX, credential.pubKeyY));
+        calls.push(removeWebauthnCredential(validator, credential.pubKeyX, credential.pubKeyY));
     }
     return calls;
 }

package/dist/src/actions/webauthn.d.ts

@@ -0,0 +1,6 @@
+import { type Address } from 'viem';
+import type { CalldataInput } from '../config/account.js';
+export declare function addWebauthnCredential(validator: Address, pubKeyX: bigint, pubKeyY: bigint, requireUserVerification: boolean): CalldataInput;
+export declare function removeWebauthnCredential(validator: Address, pubKeyX: bigint, pubKeyY: bigint): CalldataInput;
+export declare function changeWebauthnThreshold(validator: Address, newThreshold: number): CalldataInput;
+//# sourceMappingURL=webauthn.d.ts.map

package/dist/src/actions/webauthn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn.d.ts","sourceRoot":"","sources":["../../../actions/webauthn.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,OAAO,EAAsB,MAAM,MAAM,CAAA;AACvD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAEtD,wBAAgB,qBAAqB,CACnC,SAAS,EAAE,OAAO,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,uBAAuB,EAAE,OAAO,GAC/B,aAAa,CAsBf;AAED,wBAAgB,wBAAwB,CACtC,SAAS,EAAE,OAAO,EAClB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,GACd,aAAa,CAqBf;AAED,wBAAgB,uBAAuB,CACrC,SAAS,EAAE,OAAO,EAClB,YAAY,EAAE,MAAM,GACnB,aAAa,CAoBf"}

package/dist/src/actions/webauthn.js

@@ -0,0 +1,67 @@
+import { encodeFunctionData } from 'viem';
+export function addWebauthnCredential(validator, pubKeyX, pubKeyY, requireUserVerification) {
+    return {
+        to: validator,
+        value: 0n,
+        data: encodeFunctionData({
+            abi: [
+                {
+                    inputs: [
+                        { name: 'pubKeyX', type: 'uint256' },
+                        { name: 'pubKeyY', type: 'uint256' },
+                        { name: 'requireUserVerification', type: 'bool' },
+                    ],
+                    name: 'addCredential',
+                    outputs: [],
+                    stateMutability: 'nonpayable',
+                    type: 'function',
+                },
+            ],
+            functionName: 'addCredential',
+            args: [pubKeyX, pubKeyY, requireUserVerification],
+        }),
+    };
+}
+export function removeWebauthnCredential(validator, pubKeyX, pubKeyY) {
+    return {
+        to: validator,
+        value: 0n,
+        data: encodeFunctionData({
+            abi: [
+                {
+                    inputs: [
+                        { name: 'pubKeyX', type: 'uint256' },
+                        { name: 'pubKeyY', type: 'uint256' },
+                    ],
+                    name: 'removeCredential',
+                    outputs: [],
+                    stateMutability: 'nonpayable',
+                    type: 'function',
+                },
+            ],
+            functionName: 'removeCredential',
+            args: [pubKeyX, pubKeyY],
+        }),
+    };
+}
+export function changeWebauthnThreshold(validator, newThreshold) {
+    return {
+        to: validator,
+        value: 0n,
+        data: encodeFunctionData({
+            abi: [
+                {
+                    inputs: [
+                        { internalType: 'uint256', name: '_threshold', type: 'uint256' },
+                    ],
+                    name: 'setThreshold',
+                    outputs: [],
+                    stateMutability: 'nonpayable',
+                    type: 'function',
+                },
+            ],
+            functionName: 'setThreshold',
+            args: [BigInt(newThreshold)],
+        }),
+    };
+}

package/dist/src/clients/orchestrator/client.js

@@ -3,7 +3,7 @@ import { createOrchestratorAuth } from './auth.js';
 import { ChainCatalog, parseChains } from './chain-catalog.js';
 import { fetchOrchestratorJson } from './fetch.js';
 import { mapIntentRequestToWire, mapIntentStatusFromWire, mapPortfolioFromWire, mapQuoteResponseFromWire, mapSignedIntentToWire, mapSplitRequestToWire, mapSplitResultFromWire, } from './mappers.js';
-const SDK_VERSION = '0.0.0-dev-20260728163313';
+const SDK_VERSION = '0.0.0-dev-20260728220029';
 const API_VERSION = '2026-04.blanc';
 export function createOrchestratorClient(options) {
     const fetchPort = options.fetch ?? globalThis.fetch;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rhinestone/sdk",
-  "version": "0.0.0-dev-20260728163313",
+  "version": "0.0.0-dev-20260728220029",
   "description": "End-to-end chain abstraction and modularity toolkit",
   "author": {
     "name": "Rhinestone",