@seams/wallet 0.19.0 → 0.21.0

package/dist/public/sdk/walletAuthority-BY3kyKQ-.js

@@ -1 +0,0 @@
-import{A as e,D as t,O as n,h as r,k as i,l as a,u as o}from"./domainIds-C3fUa33Q.js";import{k as s,l as c}from"./chains-CPmd4s9f.js";import{_ as l,l as u,m as ee,n as te,s as ne}from"./primitives-CTmDwMNc.js";import{i as d}from"./base64-BmKR3UqU.js";import{l as re}from"./capabilityKinds-D0Yrp9uf.js";import{r as f}from"./canonicalPrimitives-BMP5yILS.js";import{a as p,i as ie,n as m,o as ae,r as oe,s as se,t as h}from"./digestEncoding-aC4dSf_x.js";const ce=[`kind`,`keyFamilies`,`signers`],le=[`kind`,`keyFamily`,`walletId`,`walletKeyId`,`registeredPublicKeyB64u`],ue=[`kind`,`keyFamily`,`walletId`,`walletKeyId`,`thresholdPublicKey33B64u`,`evmAddress`];function g(e){if(e.length===0)throw Error(`exact administered signer manifest must contain at least one active family`);let t,n,r,i=new Set;for(let a of e){if(t!==void 0&&t!==a.walletId)throw Error(`exact administered signer manifest must use one wallet identity`);if(t=a.walletId,i.has(a.walletKeyId))throw Error(`exact administered signer manifest repeats wallet key ${a.walletKeyId}`);switch(i.add(a.walletKeyId),a.keyFamily){case`ed25519`:if(n!==void 0)throw Error(`exact administered signer manifest repeats the ed25519 family`);if(a.kind!==`exact_administered_ed25519_signer_v1`)throw Error(`exact administered signer manifest has an invalid Ed25519 signer`);n=a;break;case`ecdsa_secp256k1`:if(r!==void 0)throw Error(`exact administered signer manifest repeats the ecdsa family`);if(a.kind!==`exact_administered_ecdsa_signer_v1`)throw Error(`exact administered signer manifest has an invalid ECDSA signer`);r=a;break}}if(n!==void 0&&r!==void 0)return{kind:`exact_administered_signer_manifest_v1`,keyFamilies:[`ed25519`,`ecdsa_secp256k1`],signers:[n,r]};if(n!==void 0)return{kind:`exact_administered_signer_manifest_v1`,keyFamilies:[`ed25519`],signers:[n]};if(r!==void 0)return{kind:`exact_administered_signer_manifest_v1`,keyFamilies:[`ecdsa_secp256k1`],signers:[r]};throw Error(`exact administered signer manifest must contain a supported family`)}function _(e){let t=he(e,ce,`ExactAdministeredSignerManifestV1`);if(t.kind!==`exact_administered_signer_manifest_v1`)throw Error(`ExactAdministeredSignerManifestV1.kind is invalid`);let n=fe(t.keyFamilies);if(!Array.isArray(t.signers))throw Error(`ExactAdministeredSignerManifestV1.signers must be an array`);let r=[];for(let e=0;e<t.signers.length;e+=1)r.push(de(t.signers[e],`signers[${e}]`));let i=g(r);if(!pe(n,i.keyFamilies))throw Error(`ExactAdministeredSignerManifestV1.keyFamilies do not match signers`);return i}function de(e,t){let r=s(e,t);switch(r.keyFamily){case`ed25519`:if(l(r,le,t),r.kind!==`exact_administered_ed25519_signer_v1`)throw Error(`${t}.kind is invalid for Ed25519`);return{kind:`exact_administered_ed25519_signer_v1`,keyFamily:`ed25519`,walletId:u(n(r.walletId),`${t}.walletId`),walletKeyId:u(i(r.walletKeyId),`${t}.walletKeyId`),registeredPublicKeyB64u:te(r.registeredPublicKeyB64u,`${t}.registeredPublicKeyB64u`)};case`ecdsa_secp256k1`:if(l(r,ue,t),r.kind!==`exact_administered_ecdsa_signer_v1`)throw Error(`${t}.kind is invalid for ECDSA`);return{kind:`exact_administered_ecdsa_signer_v1`,keyFamily:`ecdsa_secp256k1`,walletId:u(n(r.walletId),`${t}.walletId`),walletKeyId:u(i(r.walletKeyId),`${t}.walletKeyId`),thresholdPublicKey33B64u:ne(r.thresholdPublicKey33B64u,`${t}.thresholdPublicKey33B64u`),evmAddress:me(r.evmAddress,`${t}.evmAddress`)};default:throw Error(`${t}.keyFamily is unsupported`)}}function fe(e){if(!Array.isArray(e)||e.length===0||e.length>2)throw Error(`ExactAdministeredSignerManifestV1.keyFamilies must be non-empty`);if(e.length===1&&e[0]===`ed25519`)return[`ed25519`];if(e.length===1&&e[0]===`ecdsa_secp256k1`)return[`ecdsa_secp256k1`];if(e.length===2&&e[0]===`ed25519`&&e[1]===`ecdsa_secp256k1`)return[`ed25519`,`ecdsa_secp256k1`];throw Error(`ExactAdministeredSignerManifestV1.keyFamilies must be canonical and duplicate-free`)}function pe(e,t){if(e.length!==t.length)return!1;for(let n=0;n<e.length;n+=1)if(e[n]!==t[n])return!1;return!0}function me(e,t){if(typeof e!=`string`||!/^0x[0-9a-fA-F]{40}$/.test(e))throw Error(`${t} must be a 20-byte hexadecimal EVM address`);return e}function he(e,t,n){let r=s(e,n);l(r,t,n);for(let e of t)if(!(e in r))throw Error(`${n}.${e} is required`);return r}function v(e){return K(e)}function y(e){return G(e.signerActivations)}function b(e){return W(e.signerActivations)}function ge(e){return e.provenance.kind===`wallet_recovery`}function x(e){return{kind:`wallet_ed25519_signer_activation_v1`,signer:e.signer,materialActivation:e.materialActivation}}function S(e){return{kind:`wallet_ecdsa_signer_activation_v1`,signer:e.signer,materialActivation:e.materialActivation}}function C(e){let t=_(e.manifest),n=ze(e.materialActivations);if(!Ne(t.keyFamilies,n.keyFamilies))throw Error(`wallet signer activation materials must match the signer manifest families`);if(U(t)){if(!Ie(n))throw Error(`Ed25519 signer activation requires one Ed25519 material activation`);return{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ed25519`],ed25519:x({signer:t.signers[0],materialActivation:n.ed25519})}}if(Pe(t)){if(!Le(n))throw Error(`ECDSA signer activation requires one ECDSA material activation`);return{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ecdsa_secp256k1`],ecdsa:S({signer:t.signers[0],materialActivation:n.ecdsa})}}if(!Fe(t)||!Re(n))throw Error(`wallet signer activation set has unsupported families`);if(n.ed25519.activationId===n.ecdsa.activationId)throw Error(`wallet signer activation references must be distinct`);return{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:x({signer:t.signers[0],materialActivation:n.ed25519}),ecdsa:S({signer:t.signers[1],materialActivation:n.ecdsa})}}function _e(e){try{let t=s(e,`WalletSignerActivationSetV1`);if(t.kind!==`wallet_signer_activation_set_v1`)return Z(`wallet signer activation set kind is unsupported`);if(!Object.prototype.hasOwnProperty.call(t,`keyFamilies`))return Z(`WalletSignerActivationSetV1.keyFamilies is required`);let n=Me(t.keyFamilies,`WalletSignerActivationSetV1.keyFamilies`);if(n.length===1&&n[0]===`ed25519`)return H(t,[`kind`,`keyFamilies`,`ed25519`],`WalletSignerActivationSetV1`),{ok:!0,value:{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ed25519`],ed25519:M(t.ed25519,`ed25519`)}};if(n.length===1&&n[0]===`ecdsa_secp256k1`)return H(t,[`kind`,`keyFamilies`,`ecdsa`],`WalletSignerActivationSetV1`),{ok:!0,value:{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ecdsa_secp256k1`],ecdsa:N(t.ecdsa,`ecdsa`)}};H(t,[`kind`,`keyFamilies`,`ed25519`,`ecdsa`],`WalletSignerActivationSetV1`);let r=M(t.ed25519,`ed25519`),i=N(t.ecdsa,`ecdsa`);return r.materialActivation.activationId===i.materialActivation.activationId?Z(`wallet signer activation references must be distinct`):{ok:!0,value:{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:r,ecdsa:i}}}catch(e){return Z(Q(e,`wallet signer activation set is invalid`))}}function ve(e){let t=[p(`seams/wallet-signer-activation-set/v1`,`domain`),p(e.kind,`kind`),ae(e.keyFamilies.length,`keyFamilies`)];for(let n of e.keyFamilies)t.push(p(n,`keyFamilies.item`));return(W(e)||K(e))&&t.push(m(F(e.ed25519),`ed25519`)),(G(e)||K(e))&&t.push(m(I(e.ecdsa),`ecdsa`)),h(t)}async function w(e){return f(d(await c(ve(e))))}function T(e){return{kind:`wallet_authority_v1`,authorityId:e.authorityId,walletId:e.walletId,principal:e.principal,provenance:e.provenance,permissions:e.permissions,signerActivations:e.signerActivations,signerActivationSetDigestB64u:e.signerActivationSetDigestB64u,authorityDigestB64u:e.authorityDigestB64u,revocationEpoch:e.revocationEpoch,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs}}function ye(e){return A(e),{...T(e),state:`pending_local_install`,localInstallPackageSetDigestB64u:e.localInstallPackageSetDigestB64u}}function E(e){return A(e),{...T(e),state:`active`,activatedAtMs:e.activatedAtMs}}async function be(e){let t=e.authority.signerActivations;if(!t.ed25519)throw Error(`active Wallet Authority has no Ed25519 material activation to replace`);let n=t.ecdsa?C({manifest:g([t.ed25519.signer,t.ecdsa.signer]),materialActivations:{keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:e.materialActivation,ecdsa:t.ecdsa.materialActivation}}):C({manifest:g([t.ed25519.signer]),materialActivations:{keyFamilies:[`ed25519`],ed25519:e.materialActivation}}),r=await w(n),i={kind:e.authority.kind,authorityId:e.authority.authorityId,walletId:e.authority.walletId,principal:e.authority.principal,provenance:e.authority.provenance,permissions:e.authority.permissions,signerActivations:n,signerActivationSetDigestB64u:r,authorityDigestB64u:e.authority.authorityDigestB64u,revocationEpoch:e.authority.revocationEpoch,createdAtMs:e.authority.createdAtMs,updatedAtMs:Math.max(e.authority.updatedAtMs,e.updatedAtMs),state:`active`,activatedAtMs:e.authority.activatedAtMs};return E({...i,authorityDigestB64u:await O(i)})}function xe(e){return A(e),{...T(e),state:`active`,activatedAtMs:e.activatedAtMs}}function Se(e){return A(e),{...T(e),state:`revoked`,activatedAtMs:e.activatedAtMs,revokedAtMs:e.revokedAtMs}}const D=[`kind`,`authorityId`,`walletId`,`principal`,`provenance`,`permissions`,`signerActivations`,`signerActivationSetDigestB64u`,`authorityDigestB64u`,`revocationEpoch`,`createdAtMs`,`updatedAtMs`,`state`];function Ce(e){try{let t=s(e,`WalletAuthorityV1`),n=Ee(t);switch(t.state){case`pending_local_install`:return H(t,[...D,`localInstallPackageSetDigestB64u`],`WalletAuthorityV1`),{ok:!0,value:ye({kind:`wallet_authority_v1`,...n,state:`pending_local_install`,localInstallPackageSetDigestB64u:q(t.localInstallPackageSetDigestB64u,`localInstallPackageSetDigestB64u`)})};case`active`:return H(t,[...D,`activatedAtMs`],`WalletAuthorityV1`),{ok:!0,value:E({kind:`wallet_authority_v1`,...n,state:`active`,activatedAtMs:J(t.activatedAtMs,`activatedAtMs`)})};case`revoked`:return H(t,[...D,`activatedAtMs`,`revokedAtMs`],`WalletAuthorityV1`),{ok:!0,value:Se({kind:`wallet_authority_v1`,...n,state:`revoked`,activatedAtMs:J(t.activatedAtMs,`activatedAtMs`),revokedAtMs:J(t.revokedAtMs,`revokedAtMs`)})};default:return Z(`WalletAuthorityV1.state is unsupported`)}}catch(e){return Z(Q(e,`wallet authority is invalid`))}}function we(e){return h([p(`seams/wallet-authority/v1`,`domain`),p(e.kind,`kind`),p(e.authorityId,`authorityId`),p(e.walletId,`walletId`),m(R(e.principal),`principal`),m(z(e.provenance),`provenance`),m(B(e.permissions),`permissions`),oe(e.signerActivationSetDigestB64u,`signerActivationSetDigestB64u`),p(e.state,`state`),se(e.revocationEpoch,`revocationEpoch`)])}async function O(e){return f(d(await c(we(e))))}async function k(e){return await w(e.signerActivations)===e.signerActivationSetDigestB64u?await O(e)===e.authorityDigestB64u:!1}async function Te(e,t){let[n,r]=await Promise.all([k(e),k(t)]);return n&&r&&e.authorityDigestB64u===t.authorityDigestB64u&&e.signerActivationSetDigestB64u===t.signerActivationSetDigestB64u&&e.createdAtMs===t.createdAtMs&&e.updatedAtMs===t.updatedAtMs&&e.activatedAtMs===t.activatedAtMs}function Ee(e){if(e.kind!==`wallet_authority_v1`)throw Error(`WalletAuthorityV1.kind is unsupported`);let r=X(t(e.authorityId),`authorityId`),i=X(n(e.walletId),`walletId`),a=De(e.principal),o=Oe(e.provenance),s=X(ee(e.permissions),`permissions`),c=X(_e(e.signerActivations),`signerActivations`),l=q(e.signerActivationSetDigestB64u,`signerActivationSetDigestB64u`),u=q(e.authorityDigestB64u,`authorityDigestB64u`),te=J(e.revocationEpoch,`revocationEpoch`),ne=J(e.createdAtMs,`createdAtMs`),d=J(e.updatedAtMs,`updatedAtMs`);return j(c,i),{authorityId:r,walletId:i,principal:a,provenance:o,permissions:s,signerActivations:c,signerActivationSetDigestB64u:l,authorityDigestB64u:u,revocationEpoch:te,createdAtMs:ne,updatedAtMs:d}}function A(e){if(e.kind!==`wallet_authority_v1`)throw Error(`wallet authority kind is unsupported`);if(!Number.isSafeInteger(e.revocationEpoch)||e.revocationEpoch<0)throw Error(`wallet authority revocationEpoch must be a non-negative safe integer`);if(Y(e.createdAtMs,`createdAtMs`),Y(e.updatedAtMs,`updatedAtMs`),e.updatedAtMs<e.createdAtMs)throw Error(`wallet authority updatedAtMs cannot precede createdAtMs`);switch(q(e.signerActivationSetDigestB64u,`signerActivationSetDigestB64u`),q(e.authorityDigestB64u,`authorityDigestB64u`),j(e.signerActivations,e.walletId),ke(e.provenance),e.state){case`pending_local_install`:q(e.localInstallPackageSetDigestB64u,`localInstallPackageSetDigestB64u`);break;case`active`:Y(e.activatedAtMs,`activatedAtMs`);break;case`revoked`:if(Y(e.activatedAtMs,`activatedAtMs`),Y(e.revokedAtMs,`revokedAtMs`),e.revokedAtMs<e.activatedAtMs)throw Error(`revokedAtMs cannot precede activatedAtMs`);break}}function De(e){let t=V(e,[`kind`,`deviceId`],`WalletAuthorityPrincipalV1`);if(t.kind!==`owner_device`)throw Error(`wallet authority principal kind is unsupported`);return{kind:`owner_device`,deviceId:X(re(t.deviceId),`deviceId`)}}function Oe(n){let r=s(n,`WalletAuthorityProvenanceV1`);switch(r.kind){case`wallet_registration`:return H(r,[`kind`],`WalletAuthorityProvenanceV1`),{kind:`wallet_registration`};case`device_link`:return H(r,[`kind`,`enrollmentId`,`sourceAuthorityId`,`linkSessionId`],`WalletAuthorityProvenanceV1`),{kind:`device_link`,enrollmentId:X(o(r.enrollmentId),`enrollmentId`),sourceAuthorityId:X(t(r.sourceAuthorityId),`sourceAuthorityId`),linkSessionId:X(a(r.linkSessionId),`linkSessionId`)};case`wallet_recovery`:return H(r,[`kind`,`recoveryOperationId`,`continuityAuthorityId`],`WalletAuthorityProvenanceV1`),{kind:`wallet_recovery`,recoveryOperationId:X(e(r.recoveryOperationId),`recoveryOperationId`),continuityAuthorityId:X(t(r.continuityAuthorityId),`continuityAuthorityId`)};default:throw Error(`wallet authority provenance kind is unsupported`)}}function ke(e){switch(e.kind){case`wallet_registration`:return;case`device_link`:if(!e.enrollmentId||!e.sourceAuthorityId||!e.linkSessionId)throw Error(`device-link provenance requires every audit identity`);return;case`wallet_recovery`:if(!e.recoveryOperationId||!e.continuityAuthorityId)throw Error(`wallet-recovery provenance requires every audit identity`);return}Be(e,`wallet authority provenance`)}function j(e,t){if(W(e)){if(e.ed25519.signer.walletId!==t)throw Error(`Ed25519 signer activation uses a different wallet id`);return}if(G(e)){if(e.ecdsa.signer.walletId!==t)throw Error(`ECDSA signer activation uses a different wallet id`);return}if(K(e)){if(e.ed25519.signer.walletId!==t||e.ecdsa.signer.walletId!==t)throw Error(`signer activations must use the authority wallet id`);return}throw Error(`wallet signer activation families are unsupported`)}function M(e,t){let n=V(e,[`kind`,`signer`,`materialActivation`],t);if(n.kind!==`wallet_ed25519_signer_activation_v1`)throw Error(`${t}.kind is invalid`);let i=P(n.signer,`ed25519`,`${t}.signer`);if(!U(i))throw Error(`${t}.signer is not Ed25519`);return x({signer:i.signers[0],materialActivation:X(r(n.materialActivation),`${t}.materialActivation`)})}function N(e,t){let n=V(e,[`kind`,`signer`,`materialActivation`],t);if(n.kind!==`wallet_ecdsa_signer_activation_v1`)throw Error(`${t}.kind is invalid`);let i=P(n.signer,`ecdsa_secp256k1`,`${t}.signer`);if(!Pe(i))throw Error(`${t}.signer is not ECDSA`);return S({signer:i.signers[0],materialActivation:X(r(n.materialActivation),`${t}.materialActivation`)})}function P(e,t,n){return _({kind:`exact_administered_signer_manifest_v1`,keyFamilies:[t],signers:[e]})}function F(e){return h([p(e.kind,`ed25519.kind`),m(Ae(e.signer),`ed25519.signer`),m(L(e.materialActivation),`ed25519.materialActivation`)])}function I(e){return h([p(e.kind,`ecdsa.kind`),m(je(e.signer),`ecdsa.signer`),m(L(e.materialActivation),`ecdsa.materialActivation`)])}function Ae(e){return h([p(e.kind,`ed25519.signer.kind`),p(e.keyFamily,`ed25519.signer.keyFamily`),p(e.walletId,`ed25519.signer.walletId`),p(e.walletKeyId,`ed25519.signer.walletKeyId`),m(ie(e.registeredPublicKeyB64u,`ed25519.signer.registeredPublicKeyB64u`),`ed25519.signer.registeredPublicKeyB64u`)])}function je(e){return h([p(e.kind,`ecdsa.signer.kind`),p(e.keyFamily,`ecdsa.signer.keyFamily`),p(e.walletId,`ecdsa.signer.walletId`),p(e.walletKeyId,`ecdsa.signer.walletKeyId`),m(ie(e.thresholdPublicKey33B64u,`ecdsa.signer.thresholdPublicKey33B64u`),`ecdsa.signer.thresholdPublicKey33B64u`),p(e.evmAddress,`ecdsa.signer.evmAddress`)])}function L(e){return h([p(e.kind,`materialActivation.kind`),p(e.activationId,`materialActivation.activationId`),p(e.capability,`materialActivation.capability`),p(e.materialOwner,`materialActivation.materialOwner`),p(e.keyBinding,`materialActivation.keyBinding`),p(e.lifecycleBinding,`materialActivation.lifecycleBinding`),p(e.signingWorker,`materialActivation.signingWorker`)])}function R(e){return h([p(e.kind,`principal.kind`),p(e.deviceId,`principal.deviceId`)])}function z(e){switch(e.kind){case`wallet_registration`:return p(e.kind,`provenance.kind`);case`device_link`:return h([p(e.kind,`provenance.kind`),p(e.enrollmentId,`provenance.enrollmentId`),p(e.sourceAuthorityId,`provenance.sourceAuthorityId`),p(e.linkSessionId,`provenance.linkSessionId`)]);case`wallet_recovery`:return h([p(e.kind,`provenance.kind`),p(e.recoveryOperationId,`provenance.recoveryOperationId`),p(e.continuityAuthorityId,`provenance.continuityAuthorityId`)])}return Be(e,`wallet authority provenance`)}function B(e){let t=[ae(e.length,`permissions`)];for(let n of e)t.push(m(p(n,`permissions.item`),`permissions.item`));return h(t)}function V(e,t,n){let r=s(e,n);return H(r,t,n),r}function H(e,t,n){let r=new Set(t),i=Object.keys(e);if(i.length!==t.length)throw Error(`${n} contains unexpected fields`);for(let e of i)if(!r.has(e))throw Error(`${n}.${e} is not allowed`);for(let r of t)if(!Object.prototype.hasOwnProperty.call(e,r))throw Error(`${n}.${r} is required`)}function Me(e,t){if(!Array.isArray(e))throw Error(`${t} must be an array`);if(e.length===1&&e[0]===`ed25519`)return[`ed25519`];if(e.length===1&&e[0]===`ecdsa_secp256k1`)return[`ecdsa_secp256k1`];if(e.length===2&&e[0]===`ed25519`&&e[1]===`ecdsa_secp256k1`)return[`ed25519`,`ecdsa_secp256k1`];throw Error(`${t} must use canonical family order`)}function Ne(e,t){if(e.length!==t.length)return!1;for(let n=0;n<e.length;n+=1)if(e[n]!==t[n])return!1;return!0}function U(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ed25519`}function Pe(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ecdsa_secp256k1`}function Fe(e){return e.keyFamilies.length===2}function Ie(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ed25519`}function Le(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ecdsa_secp256k1`}function Re(e){return e.keyFamilies.length===2}function ze(e){if(Ie(e))return{keyFamilies:[`ed25519`],ed25519:X(r(e.ed25519),`materialActivations.ed25519`)};if(Le(e))return{keyFamilies:[`ecdsa_secp256k1`],ecdsa:X(r(e.ecdsa),`materialActivations.ecdsa`)};if(Re(e))return{keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:X(r(e.ed25519),`materialActivations.ed25519`),ecdsa:X(r(e.ecdsa),`materialActivations.ecdsa`)};throw Error(`wallet signer activation materials are unsupported`)}function W(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ed25519`}function G(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ecdsa_secp256k1`}function K(e){return e.keyFamilies.length===2}function q(e,t){try{return f(e)}catch(e){throw Error(`${t} ${Q(e,`is invalid`)}`)}}function J(e,t){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<0)throw Error(`${t} must be a non-negative safe integer`);return e}function Y(e,t){if(!Number.isSafeInteger(e)||e<0)throw Error(`${t} must be a non-negative safe integer`)}function X(e,t){if(e.ok)return e.value;throw Error(`${t} ${e.error.message}`)}function Z(e){return{ok:!1,error:{code:`invalid`,message:e}}}function Q(e,t){return e instanceof Error?e.message:t}function Be(e,t){throw Error(`${t} branch is unsupported: ${String(e)}`)}async function Ve(e,t,n){let r=await w(t),i={kind:`wallet_authority_v1`,authorityId:e.authorityId,walletId:e.walletId,principal:e.principal,provenance:e.provenance,permissions:e.permissions,signerActivations:t,signerActivationSetDigestB64u:r,authorityDigestB64u:e.authorityDigestB64u,revocationEpoch:e.revocationEpoch,createdAtMs:e.createdAtMs,updatedAtMs:Math.max(e.updatedAtMs,n),state:`active`,activatedAtMs:e.activatedAtMs};return xe({...i,authorityDigestB64u:await O(i)})}async function He(e){if(e.ed25519.signer.walletId!==e.authority.walletId)throw Error(`NEAR signer belongs to a different wallet authority`);let t=e.authority.signerActivations.ecdsa,n=e.ed25519.signer,r=C({manifest:g([n,t.signer]),materialActivations:{keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:e.ed25519.materialActivation,ecdsa:t.materialActivation}});if(!v(r))throw Error(`Deferred Ed25519 activation did not produce a combined signer activation set`);return Ve(e.authority,r,e.now)}function $(e,t){return e.authorityId===t.authorityId&&e.walletId===t.walletId&&e.revocationEpoch===t.revocationEpoch&&e.createdAtMs===t.createdAtMs&&e.activatedAtMs===t.activatedAtMs&&d(R(e.principal))===d(R(t.principal))&&d(z(e.provenance))===d(z(t.provenance))&&d(B(e.permissions))===d(B(t.permissions))}function Ue(e,t){return b(e)&&v(t.signerActivations)&&$(e,t)&&d(F(e.signerActivations.ed25519))===d(F(t.signerActivations.ed25519))}function We(e,t){return y(e)&&v(t.signerActivations)&&e.provenance.kind===`wallet_registration`&&$(e,t)&&d(I(e.signerActivations.ecdsa))===d(I(t.signerActivations.ecdsa))}export{y as a,v as c,Ce as d,_e as f,_ as g,k as h,He as i,Ue as l,Te as m,w as n,b as o,be as p,ve as r,ge as s,O as t,We as u};