@seams/wallet 0.26.0 → 0.28.0

package/dist/{public/sdk/wallet-recovery-jyfGoejZ.js → esm/sdk/wallet-recovery-BZB2Vu3X.js}

@@ -1 +1 @@
-import{k as e}from"./domainIds-t1lp25yU.js";import{S as t,n}from"./digests-BIaE0DMd.js";import{i as r,r as i}from"./base64-BmKR3UqU.js";import{E as a,J as o,O as s,k as c}from"./activeWalletSession-BJ4B-nJo.js";import{a as l,r as u}from"./canonicalPrimitives-Jd3i_Ngz.js";import{M as d,N as f}from"./indexedDB-CWFDCCbP.js";const p=/^wallet-rkid-v1-[A-Za-z0-9_-]{43}$/;function m(e,t=`recoveryKeyId`){if(typeof e!=`string`||!p.test(e))throw Error(`${t} must be a derived wallet recovery key id`);return e}function h(){let e=[],t=[];for(let n=0;n<10;n+=1){let n=_();t.push(n),e.push(f(d(n)))}return{codes:e,codeBytes:t}}function g(e){for(let t of e.codeBytes)t.fill(0)}function _(){let e=globalThis.crypto;if(!e?.getRandomValues)throw Error(`a secure random source is required to issue wallet recovery codes`);return e.getRandomValues(new Uint8Array(20))}function v(e,t=`recoveryCodeLocator`){try{return u(e)}catch(e){throw Error(`${t} ${e instanceof Error?e.message:`must be a canonical digest`}`)}}async function y(e){if(!(e instanceof Uint8Array)||e.length!==20)throw Error(`recovery code bytes must be exactly 20 bytes`);let t=null;try{let i=new TextEncoder().encode(`seams/wallet-recovery/code-locator/v1`);t=new Uint8Array(8+i.length+e.length);let a=new DataView(t.buffer);return a.setUint32(0,i.length,!1),t.set(i,4),a.setUint32(4+i.length,e.length,!1),t.set(e,8+i.length),v(r(await n(t)))}finally{t?.fill(0)}}function b(e){return{custodySecretKind:`wallet_custody_seed_v1`,nonceB64u:e.nonceB64u,wrappedCustodySecretB64u:e.wrappedCustodySecretB64u,aadHashB64u:e.aadHashB64u}}function x(n,r){let i=r.label||`walletRecoverySetRotation`,l=t(n,i);o(l,w,i);let u=e(l.walletId);if(!u.ok)throw Error(`${i}.walletId ${u.error.message}`);if(String(u.value)!==String(r.expectedWalletId))throw Error(`${i}.walletId is outside the authenticated wallet`);if(!Array.isArray(l.manifestKekWraps))throw Error(`${i}.manifestKekWraps must be an array`);if(l.manifestKekWraps.length!==10)throw Error(`${i}.manifestKekWraps must carry exactly 10 recovery-code wraps`);let d=l.manifestKekWraps.map((e,n)=>{let r=t(e,`${i}.manifestKekWraps[${n}]`);return o(r,C,`${i}.manifestKekWraps[${n}]`),{recoveryKeyId:m(r.recoveryKeyId,`${i}.manifestKekWraps[${n}].recoveryKeyId`),nonceB64u:c(r.nonceB64u,`${i}.manifestKekWraps[${n}].nonceB64u`),ciphertextB64u:s(r.ciphertextB64u,`${i}.manifestKekWraps[${n}].ciphertextB64u`),aadHashB64u:a(r.aadHashB64u,`${i}.manifestKekWraps[${n}].aadHashB64u`)}}),f=new Set;for(let e of d){let t=String(e.recoveryKeyId);if(!f.add(t))throw Error(`${i} contains duplicate recovery key ids`)}if(!Array.isArray(l.entries)||l.entries.length!==1)throw Error(`${i}.entries must carry exactly one wallet custody seed entry`);let p=T(l.entries[0],`${i}.entries[0]`);return{walletId:u.value,manifestKekWraps:d,entry:p}}const S=[`custodySecretKind`,`nonceB64u`,`wrappedCustodySecretB64u`,`aadHashB64u`],C=[`recoveryKeyId`,`nonceB64u`,`ciphertextB64u`,`aadHashB64u`],w=[`walletId`,`manifestKekWraps`,`entries`];function T(e,n){let r=t(e,n);if(o(r,S,n),r.custodySecretKind!==`wallet_custody_seed_v1`)throw Error(`${n}.custodySecretKind must be wallet_custody_seed_v1; lane holder shares are reprovisioned, not recovered`);return b({nonceB64u:c(r.nonceB64u,`${n}.nonceB64u`),wrappedCustodySecretB64u:s(r.wrappedCustodySecretB64u,`${n}.wrappedCustodySecretB64u`),aadHashB64u:a(r.aadHashB64u,`${n}.aadHashB64u`)})}function E(e,t){if(!e||typeof e!=`object`||Array.isArray(e))throw Error(`${t} must be an object`);return e}function D(e,t){let n=typeof e==`string`?e.trim():``;if(!n)throw Error(`${t} is required`);return n}function O(e){let t=E(e,`rotation worker result`);if(!Array.isArray(t.recoveryManifestKekWraps)||t.recoveryManifestKekWraps.length!==10)throw Error(`rotation worker result must contain exactly 10 recovery wraps`);return{walletId:D(t.walletId,`rotation worker walletId`),recoveryManifestKekWraps:t.recoveryManifestKekWraps.map((e,t)=>{let n=E(e,`rotation worker wrap ${t}`);return{recoveryKeyId:D(n.recoveryKeyId,`rotation worker wrap ${t} recoveryKeyId`),nonceB64u:D(n.nonceB64u,`rotation worker wrap ${t} nonceB64u`),ciphertextB64u:D(n.ciphertextB64u,`rotation worker wrap ${t} ciphertextB64u`),aadHashB64u:D(n.aadHashB64u,`rotation worker wrap ${t} aadHashB64u`)}}),recoveryEntryNonceB64u:D(t.recoveryEntryNonceB64u,`rotation worker recoveryEntryNonceB64u`),recoveryEntryCiphertextB64u:D(t.recoveryEntryCiphertextB64u,`rotation worker recoveryEntryCiphertextB64u`),recoveryEntryAadHashB64u:D(t.recoveryEntryAadHashB64u,`rotation worker recoveryEntryAadHashB64u`)}}function k(t){let n=O(t),r=e(n.walletId);if(!r.ok)throw Error(`rotation worker wallet id is invalid: ${r.error.message}`);let i={custodySecretKind:`wallet_custody_seed_v1`,nonceB64u:c(n.recoveryEntryNonceB64u,`rotation.entry.nonceB64u`),wrappedCustodySecretB64u:s(n.recoveryEntryCiphertextB64u,`rotation.entry.wrappedCustodySecretB64u`),aadHashB64u:a(n.recoveryEntryAadHashB64u,`rotation.entry.aadHashB64u`)};return x({walletId:r.value,manifestKekWraps:n.recoveryManifestKekWraps.map(e=>({recoveryKeyId:m(e.recoveryKeyId,`rotation.recoveryKeyId`),nonceB64u:c(e.nonceB64u,`rotation.wrap.nonceB64u`),ciphertextB64u:s(e.ciphertextB64u,`rotation.wrap.ciphertextB64u`),aadHashB64u:a(e.aadHashB64u,`rotation.wrap.aadHashB64u`)})),entries:[i]},{expectedWalletId:r.value,label:`rotation.workerResult`})}const A=`secp256k1_bip340_sha256_v1`;function j(e,t,n){let r=new Set(n);for(let n of Object.keys(e))if(!r.has(n))throw Error(`${t}.${n} is not a supported field`);for(let r of n)if(!Object.hasOwn(e,r))throw Error(`${t}.${r} is required`)}function M(e,t){if(typeof e!=`string`||e.length===0||e.trim()!==e)throw Error(`${t} must be a non-empty canonical identifier`);for(let n=0;n<e.length;n+=1){let r=e.charCodeAt(n);if(r<33||r>126)throw Error(`${t} must contain visible ASCII bytes`)}return e}function N(e){return e.startsWith(`evm_family_ecdsa:`)&&e.length>17}function P(e,t){let n=M(e,t);if(!N(n))throw Error(`${t} must identify an ECDSA key set`);return n}function F(e,t){try{return u(e)}catch{throw Error(`${t} must be canonical base64url for 32 bytes`)}}function I(e,t){if(typeof e!=`string`||!/^[A-Za-z0-9_-]+$/.test(e))throw Error(`${t} must be canonical base64url`);let n;try{n=i(e)}catch{throw Error(`${t} must be valid base64url`)}if(n.length!==33||n[0]!==2&&n[0]!==3||r(n)!==e)throw Error(`${t} must be canonical compressed secp256k1 public key bytes`);return e}function L(e,t){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<=0)throw Error(`${t} must be a positive safe integer`);return e}function R(e,t){if(typeof e!=`string`||!/^[A-Za-z0-9_-]+$/.test(e))throw Error(`${t} must be canonical base64url`);let n;try{n=i(e)}catch{throw Error(`${t} must be valid base64url`)}if(n.length!==64||r(n)!==e)throw Error(`${t} must be canonical base64url for 64 bytes`);return e}function z(e){let n=t(e,`walletRecoveryEcdsaPossessionChallenge`);if(j(n,`walletRecoveryEcdsaPossessionChallenge`,[`kind`,`walletId`,`reservationId`,`replacementId`,`keySetId`,`keyHandle`,`recordedKeyManifestDigestB64u`,`publicCapabilityDigestB64u`,`authorityRefDigestB64u`,`derivationClientSharePublicKey33B64u`,`expectedServerGeneration`,`expiresAtMs`,`serverNonceB64u`]),n.kind!==`wallet_recovery_ecdsa_possession_challenge_v1`)throw Error(`walletRecoveryEcdsaPossessionChallenge.kind is invalid`);let r=P(n.keySetId,`walletRecoveryEcdsaPossessionChallenge.keySetId`);return{kind:`wallet_recovery_ecdsa_possession_challenge_v1`,walletId:M(n.walletId,`walletRecoveryEcdsaPossessionChallenge.walletId`),reservationId:M(n.reservationId,`walletRecoveryEcdsaPossessionChallenge.reservationId`),replacementId:M(n.replacementId,`walletRecoveryEcdsaPossessionChallenge.replacementId`),keySetId:r,keyHandle:M(n.keyHandle,`walletRecoveryEcdsaPossessionChallenge.keyHandle`),recordedKeyManifestDigestB64u:F(n.recordedKeyManifestDigestB64u,`walletRecoveryEcdsaPossessionChallenge.recordedKeyManifestDigestB64u`),publicCapabilityDigestB64u:F(n.publicCapabilityDigestB64u,`walletRecoveryEcdsaPossessionChallenge.publicCapabilityDigestB64u`),authorityRefDigestB64u:F(n.authorityRefDigestB64u,`walletRecoveryEcdsaPossessionChallenge.authorityRefDigestB64u`),derivationClientSharePublicKey33B64u:I(n.derivationClientSharePublicKey33B64u,`walletRecoveryEcdsaPossessionChallenge.derivationClientSharePublicKey33B64u`),expectedServerGeneration:M(n.expectedServerGeneration,`walletRecoveryEcdsaPossessionChallenge.expectedServerGeneration`),expiresAtMs:L(n.expiresAtMs,`walletRecoveryEcdsaPossessionChallenge.expiresAtMs`),serverNonceB64u:F(n.serverNonceB64u,`walletRecoveryEcdsaPossessionChallenge.serverNonceB64u`)}}function B(e){let n=t(e,`walletRecoveryEcdsaPossessionProof`);if(j(n,`walletRecoveryEcdsaPossessionProof`,[`kind`,`scheme`,`signature64B64u`]),n.kind!==`wallet_recovery_ecdsa_possession_proof_v1`)throw Error(`walletRecoveryEcdsaPossessionProof.kind is invalid`);if(n.scheme!==A)throw Error(`walletRecoveryEcdsaPossessionProof.scheme is invalid`);return{kind:`wallet_recovery_ecdsa_possession_proof_v1`,scheme:A,signature64B64u:R(n.signature64B64u,`walletRecoveryEcdsaPossessionProof.signature64B64u`)}}function V(e){let t=z(e),n=[`seams/wallet-recovery/ecdsa-existing-material-possession/v1`,A,t.walletId,t.reservationId,t.replacementId,t.keySetId,t.keyHandle,i(t.recordedKeyManifestDigestB64u),i(t.publicCapabilityDigestB64u),i(t.authorityRefDigestB64u),i(t.derivationClientSharePublicKey33B64u),t.expectedServerGeneration,i(t.serverNonceB64u),H(t.expiresAtMs)],r=[];for(let e of n){let t=typeof e==`string`?new TextEncoder().encode(e):e,n=t.length;if(n>4294967295)throw Error(`wallet recovery possession field is too large`);r.push(n>>>24&255,n>>>16&255,n>>>8&255,n&255,...t)}return Uint8Array.from(r)}function H(e){let t=BigInt(e),n=new Uint8Array(8);for(let e=n.length-1;e>=0;--e)n[e]=Number(t&255n),t>>=8n;return n}async function U(e){return l(V(e))}export{T as a,g as c,k as i,B as n,y as o,U as r,h as s,z as t};
+import{k as e}from"./domainIds-t1lp25yU.js";import{S as t,n}from"./digests-BIaE0DMd.js";import{i as r,r as i}from"./base64-BmKR3UqU.js";import{E as a,J as o,O as s,k as c}from"./activeWalletSession-BJ4B-nJo.js";import{a as l,r as u}from"./canonicalPrimitives-Jd3i_Ngz.js";import{M as d,N as f}from"./indexedDB-C4SDsyOG.js";const p=/^wallet-rkid-v1-[A-Za-z0-9_-]{43}$/;function m(e,t=`recoveryKeyId`){if(typeof e!=`string`||!p.test(e))throw Error(`${t} must be a derived wallet recovery key id`);return e}function h(){let e=[],t=[];for(let n=0;n<10;n+=1){let n=_();t.push(n),e.push(f(d(n)))}return{codes:e,codeBytes:t}}function g(e){for(let t of e.codeBytes)t.fill(0)}function _(){let e=globalThis.crypto;if(!e?.getRandomValues)throw Error(`a secure random source is required to issue wallet recovery codes`);return e.getRandomValues(new Uint8Array(20))}function v(e,t=`recoveryCodeLocator`){try{return u(e)}catch(e){throw Error(`${t} ${e instanceof Error?e.message:`must be a canonical digest`}`)}}async function y(e){if(!(e instanceof Uint8Array)||e.length!==20)throw Error(`recovery code bytes must be exactly 20 bytes`);let t=null;try{let i=new TextEncoder().encode(`seams/wallet-recovery/code-locator/v1`);t=new Uint8Array(8+i.length+e.length);let a=new DataView(t.buffer);return a.setUint32(0,i.length,!1),t.set(i,4),a.setUint32(4+i.length,e.length,!1),t.set(e,8+i.length),v(r(await n(t)))}finally{t?.fill(0)}}function b(e){return{custodySecretKind:`wallet_custody_seed_v1`,nonceB64u:e.nonceB64u,wrappedCustodySecretB64u:e.wrappedCustodySecretB64u,aadHashB64u:e.aadHashB64u}}function x(n,r){let i=r.label||`walletRecoverySetRotation`,l=t(n,i);o(l,w,i);let u=e(l.walletId);if(!u.ok)throw Error(`${i}.walletId ${u.error.message}`);if(String(u.value)!==String(r.expectedWalletId))throw Error(`${i}.walletId is outside the authenticated wallet`);if(!Array.isArray(l.manifestKekWraps))throw Error(`${i}.manifestKekWraps must be an array`);if(l.manifestKekWraps.length!==10)throw Error(`${i}.manifestKekWraps must carry exactly 10 recovery-code wraps`);let d=l.manifestKekWraps.map((e,n)=>{let r=t(e,`${i}.manifestKekWraps[${n}]`);return o(r,C,`${i}.manifestKekWraps[${n}]`),{recoveryKeyId:m(r.recoveryKeyId,`${i}.manifestKekWraps[${n}].recoveryKeyId`),nonceB64u:c(r.nonceB64u,`${i}.manifestKekWraps[${n}].nonceB64u`),ciphertextB64u:s(r.ciphertextB64u,`${i}.manifestKekWraps[${n}].ciphertextB64u`),aadHashB64u:a(r.aadHashB64u,`${i}.manifestKekWraps[${n}].aadHashB64u`)}}),f=new Set;for(let e of d){let t=String(e.recoveryKeyId);if(!f.add(t))throw Error(`${i} contains duplicate recovery key ids`)}if(!Array.isArray(l.entries)||l.entries.length!==1)throw Error(`${i}.entries must carry exactly one wallet custody seed entry`);let p=T(l.entries[0],`${i}.entries[0]`);return{walletId:u.value,manifestKekWraps:d,entry:p}}const S=[`custodySecretKind`,`nonceB64u`,`wrappedCustodySecretB64u`,`aadHashB64u`],C=[`recoveryKeyId`,`nonceB64u`,`ciphertextB64u`,`aadHashB64u`],w=[`walletId`,`manifestKekWraps`,`entries`];function T(e,n){let r=t(e,n);if(o(r,S,n),r.custodySecretKind!==`wallet_custody_seed_v1`)throw Error(`${n}.custodySecretKind must be wallet_custody_seed_v1; lane holder shares are reprovisioned, not recovered`);return b({nonceB64u:c(r.nonceB64u,`${n}.nonceB64u`),wrappedCustodySecretB64u:s(r.wrappedCustodySecretB64u,`${n}.wrappedCustodySecretB64u`),aadHashB64u:a(r.aadHashB64u,`${n}.aadHashB64u`)})}function E(e,t){if(!e||typeof e!=`object`||Array.isArray(e))throw Error(`${t} must be an object`);return e}function D(e,t){let n=typeof e==`string`?e.trim():``;if(!n)throw Error(`${t} is required`);return n}function O(e){let t=E(e,`rotation worker result`);if(!Array.isArray(t.recoveryManifestKekWraps)||t.recoveryManifestKekWraps.length!==10)throw Error(`rotation worker result must contain exactly 10 recovery wraps`);return{walletId:D(t.walletId,`rotation worker walletId`),recoveryManifestKekWraps:t.recoveryManifestKekWraps.map((e,t)=>{let n=E(e,`rotation worker wrap ${t}`);return{recoveryKeyId:D(n.recoveryKeyId,`rotation worker wrap ${t} recoveryKeyId`),nonceB64u:D(n.nonceB64u,`rotation worker wrap ${t} nonceB64u`),ciphertextB64u:D(n.ciphertextB64u,`rotation worker wrap ${t} ciphertextB64u`),aadHashB64u:D(n.aadHashB64u,`rotation worker wrap ${t} aadHashB64u`)}}),recoveryEntryNonceB64u:D(t.recoveryEntryNonceB64u,`rotation worker recoveryEntryNonceB64u`),recoveryEntryCiphertextB64u:D(t.recoveryEntryCiphertextB64u,`rotation worker recoveryEntryCiphertextB64u`),recoveryEntryAadHashB64u:D(t.recoveryEntryAadHashB64u,`rotation worker recoveryEntryAadHashB64u`)}}function k(t){let n=O(t),r=e(n.walletId);if(!r.ok)throw Error(`rotation worker wallet id is invalid: ${r.error.message}`);let i={custodySecretKind:`wallet_custody_seed_v1`,nonceB64u:c(n.recoveryEntryNonceB64u,`rotation.entry.nonceB64u`),wrappedCustodySecretB64u:s(n.recoveryEntryCiphertextB64u,`rotation.entry.wrappedCustodySecretB64u`),aadHashB64u:a(n.recoveryEntryAadHashB64u,`rotation.entry.aadHashB64u`)};return x({walletId:r.value,manifestKekWraps:n.recoveryManifestKekWraps.map(e=>({recoveryKeyId:m(e.recoveryKeyId,`rotation.recoveryKeyId`),nonceB64u:c(e.nonceB64u,`rotation.wrap.nonceB64u`),ciphertextB64u:s(e.ciphertextB64u,`rotation.wrap.ciphertextB64u`),aadHashB64u:a(e.aadHashB64u,`rotation.wrap.aadHashB64u`)})),entries:[i]},{expectedWalletId:r.value,label:`rotation.workerResult`})}const A=`secp256k1_bip340_sha256_v1`;function j(e,t,n){let r=new Set(n);for(let n of Object.keys(e))if(!r.has(n))throw Error(`${t}.${n} is not a supported field`);for(let r of n)if(!Object.hasOwn(e,r))throw Error(`${t}.${r} is required`)}function M(e,t){if(typeof e!=`string`||e.length===0||e.trim()!==e)throw Error(`${t} must be a non-empty canonical identifier`);for(let n=0;n<e.length;n+=1){let r=e.charCodeAt(n);if(r<33||r>126)throw Error(`${t} must contain visible ASCII bytes`)}return e}function N(e){return e.startsWith(`evm_family_ecdsa:`)&&e.length>17}function P(e,t){let n=M(e,t);if(!N(n))throw Error(`${t} must identify an ECDSA key set`);return n}function F(e,t){try{return u(e)}catch{throw Error(`${t} must be canonical base64url for 32 bytes`)}}function I(e,t){if(typeof e!=`string`||!/^[A-Za-z0-9_-]+$/.test(e))throw Error(`${t} must be canonical base64url`);let n;try{n=i(e)}catch{throw Error(`${t} must be valid base64url`)}if(n.length!==33||n[0]!==2&&n[0]!==3||r(n)!==e)throw Error(`${t} must be canonical compressed secp256k1 public key bytes`);return e}function L(e,t){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<=0)throw Error(`${t} must be a positive safe integer`);return e}function R(e,t){if(typeof e!=`string`||!/^[A-Za-z0-9_-]+$/.test(e))throw Error(`${t} must be canonical base64url`);let n;try{n=i(e)}catch{throw Error(`${t} must be valid base64url`)}if(n.length!==64||r(n)!==e)throw Error(`${t} must be canonical base64url for 64 bytes`);return e}function z(e){let n=t(e,`walletRecoveryEcdsaPossessionChallenge`);if(j(n,`walletRecoveryEcdsaPossessionChallenge`,[`kind`,`walletId`,`reservationId`,`replacementId`,`keySetId`,`keyHandle`,`recordedKeyManifestDigestB64u`,`publicCapabilityDigestB64u`,`authorityRefDigestB64u`,`derivationClientSharePublicKey33B64u`,`expectedServerGeneration`,`expiresAtMs`,`serverNonceB64u`]),n.kind!==`wallet_recovery_ecdsa_possession_challenge_v1`)throw Error(`walletRecoveryEcdsaPossessionChallenge.kind is invalid`);let r=P(n.keySetId,`walletRecoveryEcdsaPossessionChallenge.keySetId`);return{kind:`wallet_recovery_ecdsa_possession_challenge_v1`,walletId:M(n.walletId,`walletRecoveryEcdsaPossessionChallenge.walletId`),reservationId:M(n.reservationId,`walletRecoveryEcdsaPossessionChallenge.reservationId`),replacementId:M(n.replacementId,`walletRecoveryEcdsaPossessionChallenge.replacementId`),keySetId:r,keyHandle:M(n.keyHandle,`walletRecoveryEcdsaPossessionChallenge.keyHandle`),recordedKeyManifestDigestB64u:F(n.recordedKeyManifestDigestB64u,`walletRecoveryEcdsaPossessionChallenge.recordedKeyManifestDigestB64u`),publicCapabilityDigestB64u:F(n.publicCapabilityDigestB64u,`walletRecoveryEcdsaPossessionChallenge.publicCapabilityDigestB64u`),authorityRefDigestB64u:F(n.authorityRefDigestB64u,`walletRecoveryEcdsaPossessionChallenge.authorityRefDigestB64u`),derivationClientSharePublicKey33B64u:I(n.derivationClientSharePublicKey33B64u,`walletRecoveryEcdsaPossessionChallenge.derivationClientSharePublicKey33B64u`),expectedServerGeneration:M(n.expectedServerGeneration,`walletRecoveryEcdsaPossessionChallenge.expectedServerGeneration`),expiresAtMs:L(n.expiresAtMs,`walletRecoveryEcdsaPossessionChallenge.expiresAtMs`),serverNonceB64u:F(n.serverNonceB64u,`walletRecoveryEcdsaPossessionChallenge.serverNonceB64u`)}}function B(e){let n=t(e,`walletRecoveryEcdsaPossessionProof`);if(j(n,`walletRecoveryEcdsaPossessionProof`,[`kind`,`scheme`,`signature64B64u`]),n.kind!==`wallet_recovery_ecdsa_possession_proof_v1`)throw Error(`walletRecoveryEcdsaPossessionProof.kind is invalid`);if(n.scheme!==A)throw Error(`walletRecoveryEcdsaPossessionProof.scheme is invalid`);return{kind:`wallet_recovery_ecdsa_possession_proof_v1`,scheme:A,signature64B64u:R(n.signature64B64u,`walletRecoveryEcdsaPossessionProof.signature64B64u`)}}function V(e){let t=z(e),n=[`seams/wallet-recovery/ecdsa-existing-material-possession/v1`,A,t.walletId,t.reservationId,t.replacementId,t.keySetId,t.keyHandle,i(t.recordedKeyManifestDigestB64u),i(t.publicCapabilityDigestB64u),i(t.authorityRefDigestB64u),i(t.derivationClientSharePublicKey33B64u),t.expectedServerGeneration,i(t.serverNonceB64u),H(t.expiresAtMs)],r=[];for(let e of n){let t=typeof e==`string`?new TextEncoder().encode(e):e,n=t.length;if(n>4294967295)throw Error(`wallet recovery possession field is too large`);r.push(n>>>24&255,n>>>16&255,n>>>8&255,n&255,...t)}return Uint8Array.from(r)}function H(e){let t=BigInt(e),n=new Uint8Array(8);for(let e=n.length-1;e>=0;--e)n[e]=Number(t&255n),t>>=8n;return n}async function U(e){return l(V(e))}export{T as a,g as c,k as i,B as n,y as o,U as r,h as s,z as t};