@seams/wallet 0.27.0 → 0.28.0

package/dist/{esm/sdk/sessionObservationRevision-JOvVF4Hf.js → public/sdk/sessionObservationRevision-ihBwjS3y.js}

@@ -1 +1 @@
-import{E as e,k as t}from"./domainIds-t1lp25yU.js";import{g as n}from"./digests-BIaE0DMd.js";import{r}from"./activeWalletSession-BJ4B-nJo.js";import{t as i}from"./walletIframeIdentity-CpgyEnKg.js";import{o as a}from"./errors-BJBDbwHk.js";const o=`__SEAMS_WALLET_SDK_BASE__`,s=`SEAMS_WALLET_SDK_BASE_CHANGED`,c=`__SEAMS_WALLET_ASSET_VERSION__`;function l(){if(typeof window>`u`)return;let e=window[o];return typeof e==`string`&&e.length>0?e:void 0}function u(e){if(typeof window>`u`)return;let t=window;t[o]=e,window.dispatchEvent(new CustomEvent(s,{detail:e}))}function d(){if(typeof window>`u`)return;let e=window[c];return typeof e==`string`&&e.length>0?e:void 0}function f(e){if(typeof window>`u`)return;let t=e.trim();t&&(window[c]=t)}function p(e){if(typeof window>`u`)return()=>{};let t=t=>{let n=t.detail;typeof n==`string`&&n.length>0&&e(n)};return window.addEventListener(s,t,{passive:!0}),()=>window.removeEventListener(s,t)}const m={login:{title:`Welcome back`,subtitle:``,passkeyCta:`Unlock with passkey`},register:{title:`Create a wallet`,subtitle:``,passkeyNameLabel:`Wallet name`,passkeyCta:`Create wallet with passkey`},common:{closeLabel:`Close`}};function h(e,t){return typeof e==`string`&&e.trim()||null}function g(e,t){let n=h(e,t);return n===null?null:n}function _(e){try{return i(e)}catch{return null}}function v(e,t){let n=new Set(t);return Object.keys(e).every(e=>n.has(e))}function y(e){return g(e,`authMenuSessionId`)}function b(e){return g(e,`externalAuthRequestId`)}function x(e){return n(e)?e:null}function S(e,t=new Set,n=!1){if(e===void 0)return n;if(e===null||typeof e==`string`||typeof e==`boolean`)return!0;if(typeof e==`number`)return Number.isFinite(e);if(typeof e!=`object`||t.has(e))return!1;if(t.add(e),Array.isArray(e))return e.every(e=>S(e,t,n));let r=x(e);return r!==null&&Object.values(r).every(e=>S(e,t,n))}function C(e,t){return h(e,`copy`)??t}function w(e,t){let n=x(e);return{title:C(n?.title,t.title),subtitle:C(n?.subtitle,t.subtitle),passkeyCta:C(n?.passkeyCta,t.passkeyCta)}}function T(e){let t=x(e),n=x(t?.register);return{login:w(t?.login,m.login),register:{...w(t?.register,m.register),passkeyNameLabel:C(n?.passkeyNameLabel,m.register.passkeyNameLabel)},common:{closeLabel:C(x(t?.common)?.closeLabel,m.common.closeLabel)}}}function E(e){return e===`google`?e:null}function D(e){return e===`login`||e===`register`?e:null}function O(e){return e===`implicit_wallet`||e===`sponsored_named_near_account`?e:null}function k(e){return e===`close_button`||e===`component_unmounted`||e===`connection_closed`?e:null}function A(e,t){if(e===void 0)return!0;let n=x(e);return n!==null&&v(n,t)}function j(e){let t=x(e);return!t||!v(t,[`login`,`register`,`common`])?!1:A(t.login,[`title`,`subtitle`,`passkeyCta`])&&A(t.register,[`title`,`subtitle`,`passkeyCta`,`passkeyNameLabel`])&&A(t.common,[`closeLabel`])}function M(e){if(!Array.isArray(e))return null;let t=[];for(let n of e){let e=E(n);if(!e)return null;t.push(e)}return t}function N(e){let n=x(e);if(!n||!S(n,new Set,!0)||n.kind!==`hosted_auth_menu_open_v1`||!v(n,[`kind`,`authMenuSessionId`,`initialMode`,`initialHeightCssPx`,`loginTarget`,`registrationAccountInput`,`showRegistrationInput`,`showProgress`,`copy`,`enabledExternalProviders`])||!j(n.copy))return null;let r=y(n.authMenuSessionId),i=D(n.initialMode),a=n.initialHeightCssPx;if(a!==void 0&&(typeof a!=`number`||!Number.isFinite(a)||a<=0))return null;let o=x(n.loginTarget),s=o?.kind===`wallet`||o?.kind===`wallet_sync`?t(o.walletId):null,c=o?.kind===`discoverable`&&v(o,[`kind`])?{kind:`discoverable`}:o?.kind===`wallet`&&v(o,[`kind`,`walletId`])&&s?.ok?{kind:`wallet`,walletId:s.value}:o?.kind===`wallet_sync`&&v(o,[`kind`,`walletId`])&&s?.ok?{kind:`wallet_sync`,walletId:s.value}:null,l=O(n.registrationAccountInput),u=M(n.enabledExternalProviders);return!r||!i||!c||!l||typeof n.showRegistrationInput!=`boolean`||typeof n.showProgress!=`boolean`||!u||!S(n.copy,new Set,!0)?null:{kind:`hosted_auth_menu_open_v1`,authMenuSessionId:r,initialMode:i,initialHeightCssPx:a,loginTarget:c,registrationAccountInput:l,showRegistrationInput:n.showRegistrationInput,showProgress:n.showProgress,copy:T(n.copy),enabledExternalProviders:u}}function P(e){let t=x(e);if(!t||!S(t)||t.kind!==`hosted_auth_menu_error_v1`||!v(t,[`kind`,`authMenuSessionId`,`mode`,`message`]))return null;let n=y(t.authMenuSessionId),r=D(t.mode),i=h(t.message,`message`);return n&&r&&i?{kind:t.kind,authMenuSessionId:n,mode:r,message:i}:null}function F(e){let t=x(e);if(!t||!S(t))return null;switch(t.kind){case`google_id_token`:{if(!v(t,[`kind`,`idToken`]))return null;let e=h(t.idToken,`idToken`);return e?{kind:t.kind,idToken:e}:null}case`cancelled`:return v(t,[`kind`,`reason`])&&t.reason===`user_cancelled`?{kind:t.kind,reason:t.reason}:null;case`failed`:{if(!v(t,[`kind`,`code`,`message`]))return null;let e=t.code===`provider_unavailable`||t.code===`provider_error`||t.code===`invalid_evidence`?t.code:null,n=h(t.message,`message`);return e&&n?{kind:t.kind,code:e,message:n}:null}default:return null}}function I(e){let t=x(e);if(!t||!S(t)||t.kind!==`hosted_auth_menu_external_auth_resolution_v1`||!v(t,[`kind`,`authMenuSessionId`,`externalAuthRequestId`,`requestId`,`evidence`]))return null;let n=y(t.authMenuSessionId),r=b(t.externalAuthRequestId),i=_(t.requestId),a=F(t.evidence);return!n||!r||!i||!a?null:{kind:t.kind,authMenuSessionId:n,externalAuthRequestId:r,requestId:i,evidence:a}}function L(e){let t=x(e);if(!t||!S(t)||t.kind!==`hosted_auth_menu_cancel_v1`||!v(t,[`kind`,`authMenuSessionId`,`requestId`,`reason`]))return null;let n=y(t.authMenuSessionId),r=_(t.requestId),i=k(t.reason);return n&&r&&i?{kind:t.kind,authMenuSessionId:n,requestId:r,reason:i}:null}const R=`17.0.0`,z=`WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH`,B=[`home`,`exchangeCode`,`nonce`,`appOrigin`,`walletOrigin`,`relayUrl`];function V(e,t){if(typeof e!=`string`||e.length===0||e.length>512||e.trim()!==e||/[\s\u0000-\u001f\u007f]/.test(e))throw Error(`${t} must be a compact opaque identifier`);return e}function H(e,t){if(typeof e!=`string`||e.length===0||e.trim()!==e)throw Error(`${t} must be a canonical HTTP origin`);let n;try{n=new URL(e)}catch{throw Error(`${t} must be a canonical HTTP origin`)}if(n.protocol!==`https:`&&n.protocol!==`http:`||n.origin!==e||n.pathname!==`/`||n.search!==``||n.hash!==``)throw Error(`${t} must be a canonical HTTP origin`);return n.origin}function U(e){if(!n(e))throw Error(`hosted-wallet redemption payload must be an exact object`);if(Object.keys(e).length!==B.length)throw Error(`hosted-wallet redemption payload fields are invalid`);for(let t of B)if(!Object.hasOwn(e,t))throw Error(`hosted-wallet redemption payload fields are invalid`);return{home:r(e.home),exchangeCode:V(e.exchangeCode,`exchangeCode`),nonce:V(e.nonce,`nonce`),appOrigin:H(e.appOrigin,`appOrigin`),walletOrigin:H(e.walletOrigin,`walletOrigin`),relayUrl:V(e.relayUrl,`relayUrl`)}}function W(t){if(!n(t)||!v(t,[`scanRequestId`,`action`])||typeof t.scanRequestId!=`string`||t.scanRequestId.length===0||!n(t.action))return null;let r=t.action;if(r.kind===`cancel`)return v(r,[`kind`])?{scanRequestId:t.scanRequestId,action:{kind:r.kind}}:null;if(r.kind!==`select`||!v(r,[`kind`,`baseWalletAuthMethodId`]))return null;let i=e(r.baseWalletAuthMethodId);return i.ok?{scanRequestId:t.scanRequestId,action:{kind:r.kind,baseWalletAuthMethodId:i.value}}:null}function G(e){if(!n(e)||!v(e,[`activationId`,`action`])||typeof e.activationId!=`string`||e.activationId.length===0||!n(e.action))return null;let t=e.action;switch(t.kind){case`create_passkey`:case`send_email_otp`:case`resend_email_otp`:return v(t,[`kind`])?{activationId:e.activationId,action:{kind:t.kind}}:null;case`submit_email_otp`:return v(t,[`kind`,`otpCode`])&&typeof t.otpCode==`string`&&/^\d{6}$/.test(t.otpCode)?{activationId:e.activationId,action:{kind:t.kind,otpCode:t.otpCode}}:null;default:return null}}function K(e,t){return{success:!1,kind:t,error:a(e)||`NEAR transaction failed`}}function q(e,t){return{success:!1,kind:`unresolved`,transactionId:e,error:a(t)}}function J(){return{appIdentity:{kind:`anonymous`},authentication:{kind:`signed_out`},capabilityProjection:{kind:`not_requested`},nonceDiagnostics:null}}let Y=0;function X(){return Y+=1,Y}export{p as _,z as a,W as c,P as d,I as f,l as g,d as h,q as i,G as l,U as m,J as n,R as o,N as p,K as r,b as s,X as t,L as u,f as v,u as y};
+import{E as e,k as t}from"./domainIds-t1lp25yU.js";import{g as n}from"./digests-BIaE0DMd.js";import{r}from"./activeWalletSession-BJ4B-nJo.js";import{t as i}from"./walletIframeIdentity-CpgyEnKg.js";import{o as a}from"./errors-BJBDbwHk.js";const o=`__SEAMS_WALLET_SDK_BASE__`,s=`SEAMS_WALLET_SDK_BASE_CHANGED`,c=`__SEAMS_WALLET_ASSET_VERSION__`;function l(){if(typeof window>`u`)return;let e=window[o];return typeof e==`string`&&e.length>0?e:void 0}function u(e){if(typeof window>`u`)return;let t=window;t[o]=e,window.dispatchEvent(new CustomEvent(s,{detail:e}))}function d(){if(typeof window>`u`)return;let e=window[c];return typeof e==`string`&&e.length>0?e:void 0}function f(e){if(typeof window>`u`)return;let t=e.trim();t&&(window[c]=t)}function p(e){if(typeof window>`u`)return()=>{};let t=t=>{let n=t.detail;typeof n==`string`&&n.length>0&&e(n)};return window.addEventListener(s,t,{passive:!0}),()=>window.removeEventListener(s,t)}const m={login:{title:`Welcome back`,subtitle:``,passkeyCta:`Unlock with passkey`},register:{title:`Create a wallet`,subtitle:``,passkeyNameLabel:`Wallet name`,passkeyCta:`Create wallet with passkey`},common:{closeLabel:`Close`}};function h(e,t){return typeof e==`string`&&e.trim()||null}function g(e,t){let n=h(e,t);return n===null?null:n}function _(e){try{return i(e)}catch{return null}}function v(e,t){let n=new Set(t);return Object.keys(e).every(e=>n.has(e))}function y(e){return g(e,`authMenuSessionId`)}function b(e){return g(e,`externalAuthRequestId`)}function x(e){return n(e)?e:null}function S(e,t=new Set,n=!1){if(e===void 0)return n;if(e===null||typeof e==`string`||typeof e==`boolean`)return!0;if(typeof e==`number`)return Number.isFinite(e);if(typeof e!=`object`||t.has(e))return!1;if(t.add(e),Array.isArray(e))return e.every(e=>S(e,t,n));let r=x(e);return r!==null&&Object.values(r).every(e=>S(e,t,n))}function C(e,t){return h(e,`copy`)??t}function w(e,t){let n=x(e);return{title:C(n?.title,t.title),subtitle:C(n?.subtitle,t.subtitle),passkeyCta:C(n?.passkeyCta,t.passkeyCta)}}function T(e){let t=x(e),n=x(t?.register);return{login:w(t?.login,m.login),register:{...w(t?.register,m.register),passkeyNameLabel:C(n?.passkeyNameLabel,m.register.passkeyNameLabel)},common:{closeLabel:C(x(t?.common)?.closeLabel,m.common.closeLabel)}}}function E(e){return e===`google`?e:null}function D(e){return e===`login`||e===`register`?e:null}function O(e){return e===`implicit_wallet`||e===`sponsored_named_near_account`?e:null}function k(e){return e===`close_button`||e===`component_unmounted`||e===`connection_closed`?e:null}function A(e,t){if(e===void 0)return!0;let n=x(e);return n!==null&&v(n,t)}function j(e){let t=x(e);return!t||!v(t,[`login`,`register`,`common`])?!1:A(t.login,[`title`,`subtitle`,`passkeyCta`])&&A(t.register,[`title`,`subtitle`,`passkeyCta`,`passkeyNameLabel`])&&A(t.common,[`closeLabel`])}function M(e){if(!Array.isArray(e))return null;let t=[];for(let n of e){let e=E(n);if(!e)return null;t.push(e)}return t}function N(e){let n=x(e);if(!n||!S(n,new Set,!0)||n.kind!==`hosted_auth_menu_open_v1`||!v(n,[`kind`,`authMenuSessionId`,`initialMode`,`initialHeightCssPx`,`loginTarget`,`registrationAccountInput`,`showRegistrationInput`,`showProgress`,`copy`,`enabledExternalProviders`])||!j(n.copy))return null;let r=y(n.authMenuSessionId),i=D(n.initialMode),a=n.initialHeightCssPx;if(a!==void 0&&(typeof a!=`number`||!Number.isFinite(a)||a<=0))return null;let o=x(n.loginTarget),s=o?.kind===`wallet`||o?.kind===`wallet_sync`?t(o.walletId):null,c=o?.kind===`discoverable`&&v(o,[`kind`])?{kind:`discoverable`}:o?.kind===`wallet`&&v(o,[`kind`,`walletId`])&&s?.ok?{kind:`wallet`,walletId:s.value}:o?.kind===`wallet_sync`&&v(o,[`kind`,`walletId`])&&s?.ok?{kind:`wallet_sync`,walletId:s.value}:null,l=O(n.registrationAccountInput),u=M(n.enabledExternalProviders);return!r||!i||!c||!l||typeof n.showRegistrationInput!=`boolean`||typeof n.showProgress!=`boolean`||!u||!S(n.copy,new Set,!0)?null:{kind:`hosted_auth_menu_open_v1`,authMenuSessionId:r,initialMode:i,initialHeightCssPx:a,loginTarget:c,registrationAccountInput:l,showRegistrationInput:n.showRegistrationInput,showProgress:n.showProgress,copy:T(n.copy),enabledExternalProviders:u}}function P(e){let t=x(e);if(!t||!S(t)||t.kind!==`hosted_auth_menu_error_v1`||!v(t,[`kind`,`authMenuSessionId`,`mode`,`message`]))return null;let n=y(t.authMenuSessionId),r=D(t.mode),i=h(t.message,`message`);return n&&r&&i?{kind:t.kind,authMenuSessionId:n,mode:r,message:i}:null}function F(e){let t=x(e);if(!t||!S(t))return null;switch(t.kind){case`google_id_token`:{if(!v(t,[`kind`,`idToken`]))return null;let e=h(t.idToken,`idToken`);return e?{kind:t.kind,idToken:e}:null}case`cancelled`:return v(t,[`kind`,`reason`])&&t.reason===`user_cancelled`?{kind:t.kind,reason:t.reason}:null;case`failed`:{if(!v(t,[`kind`,`code`,`message`]))return null;let e=t.code===`provider_unavailable`||t.code===`provider_error`||t.code===`invalid_evidence`?t.code:null,n=h(t.message,`message`);return e&&n?{kind:t.kind,code:e,message:n}:null}default:return null}}function I(e){let t=x(e);if(!t||!S(t)||t.kind!==`hosted_auth_menu_external_auth_resolution_v1`||!v(t,[`kind`,`authMenuSessionId`,`externalAuthRequestId`,`requestId`,`evidence`]))return null;let n=y(t.authMenuSessionId),r=b(t.externalAuthRequestId),i=_(t.requestId),a=F(t.evidence);return!n||!r||!i||!a?null:{kind:t.kind,authMenuSessionId:n,externalAuthRequestId:r,requestId:i,evidence:a}}function L(e){let t=x(e);if(!t||!S(t)||t.kind!==`hosted_auth_menu_cancel_v1`||!v(t,[`kind`,`authMenuSessionId`,`requestId`,`reason`]))return null;let n=y(t.authMenuSessionId),r=_(t.requestId),i=k(t.reason);return n&&r&&i?{kind:t.kind,authMenuSessionId:n,requestId:r,reason:i}:null}const R=`18.0.0`,z=`WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH`,B=[`home`,`exchangeCode`,`nonce`,`appOrigin`,`walletOrigin`,`relayUrl`];function V(e,t){if(typeof e!=`string`||e.length===0||e.length>512||e.trim()!==e||/[\s\u0000-\u001f\u007f]/.test(e))throw Error(`${t} must be a compact opaque identifier`);return e}function H(e,t){if(typeof e!=`string`||e.length===0||e.trim()!==e)throw Error(`${t} must be a canonical HTTP origin`);let n;try{n=new URL(e)}catch{throw Error(`${t} must be a canonical HTTP origin`)}if(n.protocol!==`https:`&&n.protocol!==`http:`||n.origin!==e||n.pathname!==`/`||n.search!==``||n.hash!==``)throw Error(`${t} must be a canonical HTTP origin`);return n.origin}function U(e){if(!n(e))throw Error(`hosted-wallet redemption payload must be an exact object`);if(Object.keys(e).length!==B.length)throw Error(`hosted-wallet redemption payload fields are invalid`);for(let t of B)if(!Object.hasOwn(e,t))throw Error(`hosted-wallet redemption payload fields are invalid`);return{home:r(e.home),exchangeCode:V(e.exchangeCode,`exchangeCode`),nonce:V(e.nonce,`nonce`),appOrigin:H(e.appOrigin,`appOrigin`),walletOrigin:H(e.walletOrigin,`walletOrigin`),relayUrl:V(e.relayUrl,`relayUrl`)}}function W(t){if(!n(t)||!v(t,[`scanRequestId`,`action`])||typeof t.scanRequestId!=`string`||t.scanRequestId.length===0||!n(t.action))return null;let r=t.action;if(r.kind===`cancel`)return v(r,[`kind`])?{scanRequestId:t.scanRequestId,action:{kind:r.kind}}:null;if(r.kind!==`select`||!v(r,[`kind`,`baseWalletAuthMethodId`]))return null;let i=e(r.baseWalletAuthMethodId);return i.ok?{scanRequestId:t.scanRequestId,action:{kind:r.kind,baseWalletAuthMethodId:i.value}}:null}function G(e){if(!n(e)||!v(e,[`activationId`,`action`])||typeof e.activationId!=`string`||e.activationId.length===0||!n(e.action))return null;let t=e.action;switch(t.kind){case`create_passkey`:case`send_email_otp`:case`resend_email_otp`:return v(t,[`kind`])?{activationId:e.activationId,action:{kind:t.kind}}:null;case`submit_email_otp`:return v(t,[`kind`,`otpCode`])&&typeof t.otpCode==`string`&&/^\d{6}$/.test(t.otpCode)?{activationId:e.activationId,action:{kind:t.kind,otpCode:t.otpCode}}:null;default:return null}}function K(e,t){return{success:!1,kind:t,error:a(e)||`NEAR transaction failed`}}function q(e,t){return{success:!1,kind:`unresolved`,transactionId:e,error:a(t)}}function J(){return{appIdentity:{kind:`anonymous`},authentication:{kind:`signed_out`},capabilityProjection:{kind:`not_requested`},nonceDiagnostics:null}}let Y=0;function X(){return Y+=1,Y}export{p as _,z as a,W as c,P as d,I as f,l as g,d as h,q as i,G as l,U as m,J as n,R as o,N as p,K as r,b as s,X as t,L as u,f as v,u as y};

package/dist/public/sdk/tx-confirm-ui.js

@@ -2661,6 +2661,14 @@ var walletMessages = [
     "ウォレットをロックできません。もう一度お試しください。"
   ],
   ["Unlocked on this device", "このデバイスでロック解除済み"],
+  ["Connected with Google", "Google で接続中"],
+  ["Wallet access", "ウォレットへのアクセス"],
+  ["Connected to your wallet", "ウォレットに接続しています"],
+  ["Method {value0}", "認証方法 {value0}"],
+  [
+    "Confirm with a wallet authentication method to make security changes.",
+    "セキュリティ設定を変更するには、ウォレットの認証方法で本人確認してください。"
+  ],
   ["All settings", "すべての設定"],
   ["Locking…", "ロック中…"],
   ["Lock wallet", "ウォレットをロック"],

package/dist/public/sdk/voiceid-host.js

@@ -1 +1 @@
-import{E as e,P as t,i as n,k as r,t as i,y as a}from"./domainIds-t1lp25yU.js";import{S as o,g as s,p as c,t as l}from"./digests-BIaE0DMd.js";import{c as u,l as d,o as f,u as p}from"./participants-BXdREC5k.js";import{i as m,r as h}from"./base64-BmKR3UqU.js";import{r as g}from"./secureRandomId-8LSc91aN.js";import"./walletDbName-Ca0rCq5r.js";import{A as _,F as v,J as y,L as b,V as x,i as S,n as C}from"./activeWalletSession-BJ4B-nJo.js";import{a as w}from"./chains-B72I4PDH.js";import"./signingSessionSeal-BFOBKj-J.js";import{r as T}from"./configuration-DBEc3bsj.js";import{i as E,t as D}from"./transactionReview-CGIlI835.js";import"./capabilityKinds-DVlGMspk.js";import{a as O,r as k}from"./canonicalPrimitives-Jd3i_Ngz.js";import{s as A}from"./errors-BJBDbwHk.js";import{r as j,v as M}from"./icons-BlMXolHv.js";import{t as N}from"./surface-measurement-reporter-DXsvq401.js";import{n as P,t as F}from"./csp-stylesheet-DUSqfXvZ.js";import"./signerDomain-BAsLT3XN.js";import{T as I,_ as L,b as R,h as z,m as B,v as V,x as H}from"./registrationIntent-Do1tD1V7.js";import{a as U}from"./presignatures-BCeq56DG.js";import"./accountIds-CW2BP-d9.js";import{h as W}from"./device-linking-DiCNt3iA.js";import"./walletAuthority-BTGAuOi8.js";import"./digestEncoding-CqNXPZY9.js";import{a as G,c as K,o as q,r as J,s as Y}from"./walletAuthMethodRecord-DLBB5fez.js";import"./signerSlot-D2RZnb27.js";import{a as X,o as Z,s as Q,t as $}from"./indexedDB-C4SDsyOG.js";import"./keccak-mS0Mejjx.js";import"./registrationSignerPlan-DK2b3N_p.js";import"./walletCapabilityBindings-D5YYB7nN.js";import"./emailOtpEcdsaDerivationIdentity-HFQXc1Yw.js";import{o as ee}from"./walletSessionAuthorizationStore-B9Vwkshr.js";import{a as te,i as ne,n as re,t as ie,u as ae}from"./resealedEnvelopeResult-B1p5UkYg.js";import{n as oe}from"./walletSessionAuthorizationStatus-DG7DPcgR.js";import{i as se,n as ce}from"./evmCryptoWasm-BUPb4hBH.js";import{a as le,s as ue,u as de}from"./unlockedEd25519ExportRootCapability-yzxQjIFd.js";import{t as fe}from"./SeamsWordmark-DwvPx2UA.js";import{t as pe}from"./actions-DrtSTGus.js";var me=class{promise;resolveValue=null;rejectValue=null;constructor(){this.promise=new Promise(this.capture)}resolve(e){if(!this.resolveValue)throw Error(`Worker deferred resolver is unavailable`);this.resolveValue(e)}reject(e){if(!this.rejectValue)throw Error(`Worker deferred rejecter is unavailable`);this.rejectValue(e)}capture=(e,t)=>{this.resolveValue=e,this.rejectValue=t}};const he=2;export{pe as ActionType,$ as IndexedDBManager,U as SEAMS_WALLET_STORES,fe as SeamsWordmark,D as TransactionReviewError,he as VOICE_ID_HOST_API_VERSION,me as WorkerDeferred,i as allocateWalletAuthMethodId,l as alphabetizeStringify,M as authMenuSuccessCopy,re as availabilityKey,j as backIcon,h as base64UrlDecode,m as base64UrlEncode,v as buildDelegatedWalletAuthorityV1,b as buildFullOwnerPermissionsV1,B as buildMethodBoundEnvelopeOwnership,z as buildPasskeyCustodyEnvelopeRecord,f as buildRelayerJsonPostRequestInit,L as buildVoiceIdEnvelopeFactor,I as buildWalletCustodySeedBinding,u as buildWalletSessionAuthorizationHeaders,ce as buildWebauthnP256SignatureWasm,F as createCspStylesheetManager,oe as createRelayerExactWalletSessionStatusPort,N as createWalletIframeSurfaceMeasurementReporter,V as custodyEnvelopeBindingJsonV1,se as decodeCoseP256PublicKeyWasm,d as fetchWithWalletHomeDiscovery,P as getDefaultCspNonce,c as isFiniteNumber,s as isPlainObject,R as isVoiceIdSeedEnvelope,t as joinNormalizedUrl,n as mpcMaterialActivationRefsEqual,p as normalizeRelayerBaseUrl,C as parseActiveWalletSessionV1,k as parseDigestB64u,de as parseEd25519YaoRecoveryCapabilityV1,_ as parseEnvelopeRevision,W as parseLinkedDeviceListResultV1,H as parsePasskeyCustodyEnvelopeRecord,a as parsePasskeyEnvelopeId,ie as parseResealedEnvelopeResult,ne as parseStoredAuthMethodAvailability,E as parseTransactionReviewWire,G as parseVoiceIdDeviceAssertion,q as parseVoiceIdDevicePublicKeyB64u,Y as parseVoiceIdWalletSessionChallenge,e as parseWalletAuthMethodId,J as parseWalletAuthMethodRecordV2,X as parseWalletAuthMethodV2StorageRow,Z as parseWalletAuthorityStorageRow,r as parseWalletId,Q as parseWalletSelectionStorageRow,S as parseWalletSessionOperationCredentialV1,te as readAuthMethodEnabled,le as readUnlockedWalletEd25519ExportRootCapabilityV1,y as rejectUnknownFields,o as requireRecord,w as resolveNearNetwork,x as sameDelegatedWalletAuthorityV1,g as secureRandomId,O as sha256DigestB64u,A as toError,K as voiceIdWalletSessionChallengeBytes,ue as walletCustodyCeremonyTransportFromWorkerContextV1,ae as walletForHostRequest,T as walletHostExecutionFingerprint,ee as walletSessionAuthorizations};
+import{E as e,P as t,i as n,k as r,t as i,y as a}from"./domainIds-t1lp25yU.js";import{S as o,g as s,p as c,t as l}from"./digests-BIaE0DMd.js";import{c as u,l as d,o as f,u as p}from"./participants-BXdREC5k.js";import{i as m,r as h}from"./base64-BmKR3UqU.js";import{r as g}from"./secureRandomId-8LSc91aN.js";import"./walletDbName-Ca0rCq5r.js";import{A as _,F as v,J as y,L as b,V as x,i as S,n as C}from"./activeWalletSession-BJ4B-nJo.js";import{a as w}from"./chains-B72I4PDH.js";import"./signingSessionSeal-BFOBKj-J.js";import{r as T}from"./configuration-BAad7ngq.js";import{i as E,t as D}from"./transactionReview-CGIlI835.js";import"./capabilityKinds-DVlGMspk.js";import{a as O,r as k}from"./canonicalPrimitives-Jd3i_Ngz.js";import{s as A}from"./errors-BJBDbwHk.js";import{r as j,v as M}from"./icons-BlMXolHv.js";import{t as N}from"./surface-measurement-reporter-DXsvq401.js";import{n as P,t as F}from"./csp-stylesheet-DUSqfXvZ.js";import"./signerDomain-BAsLT3XN.js";import{T as I,_ as L,b as R,h as z,m as B,v as V,x as H}from"./registrationIntent-Do1tD1V7.js";import{a as U}from"./presignatures-BCeq56DG.js";import"./accountIds-CW2BP-d9.js";import{h as W}from"./device-linking-DiCNt3iA.js";import"./walletAuthority-BTGAuOi8.js";import"./digestEncoding-CqNXPZY9.js";import{a as G,c as K,o as q,r as J,s as Y}from"./walletAuthMethodRecord-DLBB5fez.js";import"./signerSlot-D2RZnb27.js";import{a as X,o as Z,s as Q,t as $}from"./indexedDB-C4SDsyOG.js";import"./keccak-mS0Mejjx.js";import"./registrationSignerPlan-DK2b3N_p.js";import"./walletCapabilityBindings-D5YYB7nN.js";import"./emailOtpEcdsaDerivationIdentity-HFQXc1Yw.js";import{o as ee}from"./walletSessionAuthorizationStore-B9Vwkshr.js";import{a as te,i as ne,n as re,t as ie,u as ae}from"./resealedEnvelopeResult-CLW00Vbw.js";import{n as oe}from"./walletSessionAuthorizationStatus-DG7DPcgR.js";import{i as se,n as ce}from"./evmCryptoWasm-BUPb4hBH.js";import{a as le,s as ue,u as de}from"./unlockedEd25519ExportRootCapability-yzxQjIFd.js";import{t as fe}from"./SeamsWordmark-DwvPx2UA.js";import{t as pe}from"./actions-DrtSTGus.js";var me=class{promise;resolveValue=null;rejectValue=null;constructor(){this.promise=new Promise(this.capture)}resolve(e){if(!this.resolveValue)throw Error(`Worker deferred resolver is unavailable`);this.resolveValue(e)}reject(e){if(!this.rejectValue)throw Error(`Worker deferred rejecter is unavailable`);this.rejectValue(e)}capture=(e,t)=>{this.resolveValue=e,this.rejectValue=t}};const he=3;export{pe as ActionType,$ as IndexedDBManager,U as SEAMS_WALLET_STORES,fe as SeamsWordmark,D as TransactionReviewError,he as VOICE_ID_HOST_API_VERSION,me as WorkerDeferred,i as allocateWalletAuthMethodId,l as alphabetizeStringify,M as authMenuSuccessCopy,re as availabilityKey,j as backIcon,h as base64UrlDecode,m as base64UrlEncode,v as buildDelegatedWalletAuthorityV1,b as buildFullOwnerPermissionsV1,B as buildMethodBoundEnvelopeOwnership,z as buildPasskeyCustodyEnvelopeRecord,f as buildRelayerJsonPostRequestInit,L as buildVoiceIdEnvelopeFactor,I as buildWalletCustodySeedBinding,u as buildWalletSessionAuthorizationHeaders,ce as buildWebauthnP256SignatureWasm,F as createCspStylesheetManager,oe as createRelayerExactWalletSessionStatusPort,N as createWalletIframeSurfaceMeasurementReporter,V as custodyEnvelopeBindingJsonV1,se as decodeCoseP256PublicKeyWasm,d as fetchWithWalletHomeDiscovery,P as getDefaultCspNonce,c as isFiniteNumber,s as isPlainObject,R as isVoiceIdSeedEnvelope,t as joinNormalizedUrl,n as mpcMaterialActivationRefsEqual,p as normalizeRelayerBaseUrl,C as parseActiveWalletSessionV1,k as parseDigestB64u,de as parseEd25519YaoRecoveryCapabilityV1,_ as parseEnvelopeRevision,W as parseLinkedDeviceListResultV1,H as parsePasskeyCustodyEnvelopeRecord,a as parsePasskeyEnvelopeId,ie as parseResealedEnvelopeResult,ne as parseStoredAuthMethodAvailability,E as parseTransactionReviewWire,G as parseVoiceIdDeviceAssertion,q as parseVoiceIdDevicePublicKeyB64u,Y as parseVoiceIdWalletSessionChallenge,e as parseWalletAuthMethodId,J as parseWalletAuthMethodRecordV2,X as parseWalletAuthMethodV2StorageRow,Z as parseWalletAuthorityStorageRow,r as parseWalletId,Q as parseWalletSelectionStorageRow,S as parseWalletSessionOperationCredentialV1,te as readAuthMethodEnabled,le as readUnlockedWalletEd25519ExportRootCapabilityV1,y as rejectUnknownFields,o as requireRecord,w as resolveNearNetwork,x as sameDelegatedWalletAuthorityV1,g as secureRandomId,O as sha256DigestB64u,A as toError,K as voiceIdWalletSessionChallengeBytes,ue as walletCustodyCeremonyTransportFromWorkerContextV1,ae as walletForHostRequest,T as walletHostExecutionFingerprint,ee as walletSessionAuthorizations};

package/dist/public/sdk/wallet-iframe-host-ecdsa.js

@@ -1 +1 @@
-import"./walletDbName-Ca0rCq5r.js";import"./activeWalletSession-BJ4B-nJo.js";import"./signingSessionSeal-BFOBKj-J.js";import{t as e}from"./host-DayrOrgm.js";import"./capabilityKinds-DVlGMspk.js";import"./errors-BJBDbwHk.js";e({supportedRuntimeRouteKinds:new Set([`auth`,`ecdsa`,`email_otp`,`export`,`recovery`,`preferences`])});
+import"./walletDbName-Ca0rCq5r.js";import"./activeWalletSession-BJ4B-nJo.js";import"./signingSessionSeal-BFOBKj-J.js";import{t as e}from"./host-C51z-AxP.js";import"./capabilityKinds-DVlGMspk.js";import"./errors-BJBDbwHk.js";e({supportedRuntimeRouteKinds:new Set([`auth`,`ecdsa`,`email_otp`,`export`,`recovery`,`preferences`])});

package/dist/public/sdk/wallet-iframe-host-full.js

@@ -1 +1 @@
-import"./walletDbName-Ca0rCq5r.js";import"./activeWalletSession-BJ4B-nJo.js";import"./signingSessionSeal-BFOBKj-J.js";import{t as e}from"./host-DayrOrgm.js";import"./capabilityKinds-DVlGMspk.js";import"./errors-BJBDbwHk.js";e();
+import"./walletDbName-Ca0rCq5r.js";import"./activeWalletSession-BJ4B-nJo.js";import"./signingSessionSeal-BFOBKj-J.js";import{t as e}from"./host-C51z-AxP.js";import"./capabilityKinds-DVlGMspk.js";import"./errors-BJBDbwHk.js";e();

package/dist/public/sdk/wallet-iframe-host-near.js

@@ -1 +1 @@
-import"./walletDbName-Ca0rCq5r.js";import"./activeWalletSession-BJ4B-nJo.js";import"./signingSessionSeal-BFOBKj-J.js";import{t as e}from"./host-DayrOrgm.js";import"./capabilityKinds-DVlGMspk.js";import"./errors-BJBDbwHk.js";e({supportedRuntimeRouteKinds:new Set([`auth`,`near`,`export`,`device_link`,`recovery`,`preferences`])});
+import"./walletDbName-Ca0rCq5r.js";import"./activeWalletSession-BJ4B-nJo.js";import"./signingSessionSeal-BFOBKj-J.js";import{t as e}from"./host-C51z-AxP.js";import"./capabilityKinds-DVlGMspk.js";import"./errors-BJBDbwHk.js";e({supportedRuntimeRouteKinds:new Set([`auth`,`near`,`export`,`device_link`,`recovery`,`preferences`])});

package/dist/public/sdk/wallet-iframe-host-runtime.js

@@ -1 +1 @@
-import"./walletDbName-Ca0rCq5r.js";import"./activeWalletSession-BJ4B-nJo.js";import"./signingSessionSeal-BFOBKj-J.js";import{t as e}from"./host-DayrOrgm.js";import"./capabilityKinds-DVlGMspk.js";import"./errors-BJBDbwHk.js";export{e as initWalletIFrame};
+import"./walletDbName-Ca0rCq5r.js";import"./activeWalletSession-BJ4B-nJo.js";import"./signingSessionSeal-BFOBKj-J.js";import{t as e}from"./host-C51z-AxP.js";import"./capabilityKinds-DVlGMspk.js";import"./errors-BJBDbwHk.js";export{e as initWalletIFrame};

package/dist/public/sdk/{walletRecoveryAdminProof-CvSYbyg5.js → walletRecoveryAdminProof-B4Ic07jY.js}

@@ -1 +1 @@
-import{o as e,u as t}from"./participants-BXdREC5k.js";import{r as n}from"./base64-BmKR3UqU.js";import{r,t as i}from"./secureRandomId-8LSc91aN.js";import{o as a}from"./signerSlot-D2RZnb27.js";import{t as o}from"./indexedDB-C4SDsyOG.js";import{n as s,s as c,t as l,u}from"./helpers-Dubwo5uK.js";import{i as ee}from"./pendingWalletRecoveryCodeBackup-Cjx-X-pP.js";import{t as d}from"./walletCustodyOperation-DimzAbCB.js";import{t as f}from"./webauthnPromptCoordinator-npsSRD51.js";import{i as p}from"./collectAuthenticationCredentialForChallengeB64u-I4wq8OGq.js";function m(e){if(typeof e!=`object`||!e||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype&&Object.getPrototypeOf(e)!==null)return{kind:`invalid`};let t=new Map(Object.entries(e)),n=[...t.keys()];if(t.size===5&&n.every(e=>[`ok`,`challengeId`,`challenge_digest`,`expiresAtMs`,`otpChannel`].includes(e))&&t.get(`ok`)===!0)return{kind:`success`,challengeId:t.get(`challengeId`),challengeDigest:t.get(`challenge_digest`),expiresAtMs:t.get(`expiresAtMs`),otpChannel:t.get(`otpChannel`)};let r=[`ok`,`code`,`message`,`retryAfterMs`];if((t.size===3||t.size===4)&&n.every(e=>r.includes(e))&&t.get(`ok`)===!1&&typeof t.get(`code`)==`string`&&typeof t.get(`message`)==`string`&&(t.size===3||typeof t.get(`retryAfterMs`)==`number`)){let e=t.get(`message`);return{kind:`failure`,message:typeof e==`string`&&e.trim()?e.trim():null}}return{kind:`invalid`}}async function h(e){let t;try{t=await S({relayUrl:e.relayUrl,path:`/wallets/custody/email-otp/challenge`,body:{walletId:e.walletId,providerSubjectId:e.providerSubjectId,operation:e.operation,payload:e.payload,...e.requestOrigin?{requestOrigin:e.requestOrigin}:{}},fetchImpl:e.fetchImpl})}catch(e){return{kind:`transport_failed`,message:e instanceof Error?e.message:`Email OTP challenge request failed`}}let n=m(await t.json().catch(()=>null)),r=n.kind===`failure`&&n.message?n.message:``;if(t.status!==200||n.kind!==`success`)return{kind:t.status>=400&&t.status<500?`rejected`:`transport_failed`,message:r||`Email OTP challenge failed (HTTP ${t.status})`};let i=typeof n.challengeId==`string`?n.challengeId.trim():``,a=typeof n.challengeDigest==`string`?n.challengeDigest.trim():``,o=Number(n.expiresAtMs),s=typeof n.otpChannel==`string`?n.otpChannel.trim():``;return!i||!a||!Number.isSafeInteger(o)||o<=0||!s?{kind:`transport_failed`,message:`Email OTP challenge returned an unusable payload`}:{kind:`ready`,challengeId:i,challenge_digest:a,expiresAtMs:o,otpChannel:s}}function g(e){if(typeof e!=`object`||!e||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype&&Object.getPrototypeOf(e)!==null)return{kind:`invalid`};let t=new Map(Object.entries(e)),n=[`ok`,`activeCodeCount`,`totalCodeCount`,`issuedAtMs`,`storeVersion`,`backupOutstanding`],r=[...t.keys()];if(t.size===n.length&&r.every(e=>n.includes(e))&&t.get(`ok`)===!0)return{kind:`success`,activeCodeCount:t.get(`activeCodeCount`),totalCodeCount:t.get(`totalCodeCount`),issuedAtMs:t.get(`issuedAtMs`),storeVersion:t.get(`storeVersion`),backupOutstanding:t.get(`backupOutstanding`)};let i=[`ok`,`code`,`message`];if(t.size===i.length&&r.every(e=>i.includes(e))&&t.get(`ok`)===!1&&typeof t.get(`code`)==`string`){let e=t.get(`message`);return{kind:`failure`,message:typeof e==`string`&&e.trim()?e.trim():null}}return{kind:`invalid`}}async function _(e){let t;try{t=await S({relayUrl:e.relayUrl,path:`/wallets/${encodeURIComponent(e.walletId)}/recovery/status`,body:{requestId:e.requestId,factorProof:e.factorProof},fetchImpl:e.fetchImpl})}catch(e){return{kind:`transport_failed`,message:e instanceof Error?e.message:`recovery status request failed`}}let n=g(await t.json().catch(()=>null)),r=n.kind===`failure`&&n.message?n.message:``;if(t.status===401||t.status===403)return{kind:`unauthorized`,message:r||`recovery status is unauthorized`};if(t.status===404)return{kind:`no_recovery_set`,message:r||`this wallet has no recovery set`};if(t.status!==200)return{kind:`transport_failed`,message:r||`recovery status failed (HTTP ${t.status})`};if(n.kind!==`success`)return{kind:`transport_failed`,message:`recovery status returned an unusable payload`};let i=Number(n.activeCodeCount),a=Number(n.totalCodeCount),o=Number(n.issuedAtMs),s=typeof n.storeVersion==`string`?n.storeVersion.trim():``;return!Number.isSafeInteger(i)||i<0||!Number.isSafeInteger(a)||a<i||!Number.isSafeInteger(o)||o<=0||!s||typeof n.backupOutstanding!=`boolean`?{kind:`transport_failed`,message:`recovery status returned an unusable payload`}:{kind:`ready`,walletId:e.walletId,activeCodeCount:i,totalCodeCount:a,issuedAtMs:o,storeVersion:s,backupOutstanding:n.backupOutstanding,pendingLocalBackup:!1}}function v(e){if(typeof e!=`object`||!e||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype&&Object.getPrototypeOf(e)!==null)return{kind:`invalid`};let t=new Map(Object.entries(e)),n=[...t.keys()];if(t.size===2&&n.includes(`ok`)&&n.includes(`issuedAtMs`)&&t.get(`ok`)===!0)return{kind:`success`,issuedAtMs:t.get(`issuedAtMs`)};if(t.size===3&&n.includes(`ok`)&&n.includes(`code`)&&n.includes(`message`)&&t.get(`ok`)===!1&&typeof t.get(`code`)==`string`){let e=t.get(`message`);return{kind:`failure`,message:typeof e==`string`&&e.trim()?e.trim():null}}return{kind:`invalid`}}async function y(e){let t;try{t=await S({relayUrl:e.relayUrl,path:`/wallets/recovery/acknowledge-backup`,body:{walletId:e.walletId,requestId:e.requestId,expectedIssuedAtMs:e.expectedIssuedAtMs,factorProof:e.factorProof},fetchImpl:e.fetchImpl})}catch(e){return{kind:`transport_failed`,message:e instanceof Error?e.message:`recovery backup acknowledgement failed`}}let n=v(await t.json().catch(()=>null)),r=n.kind===`failure`&&n.message?n.message:``;if(t.status===401||t.status===403)return{kind:`unauthorized`,message:r||`recovery backup acknowledgement is unauthorized`};if(t.status===404)return{kind:`no_recovery_set`,message:r||`this wallet has no recovery set`};if(t.status===409)return{kind:`conflict`,message:r||`Recovery codes changed. Check status and review the current set.`};if(t.status!==200)return{kind:`transport_failed`,message:r||`recovery backup acknowledgement failed (HTTP ${t.status})`};if(n.kind!==`success`)return{kind:`transport_failed`,message:`recovery backup acknowledgement returned an unusable payload`};let i=Number(n.issuedAtMs);return!Number.isSafeInteger(i)||i<=0?{kind:`transport_failed`,message:`recovery backup acknowledgement returned an unusable payload`}:{kind:`acknowledged`,walletId:e.walletId,issuedAtMs:i}}function b(e){if(typeof e!=`object`||!e||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype&&Object.getPrototypeOf(e)!==null)return{kind:`invalid`};let t=new Map(Object.entries(e)),n=[...t.keys()];if(t.size===3&&n.every(e=>[`ok`,`issuedAtMs`,`storeVersion`].includes(e))&&t.get(`ok`)===!0)return{kind:`success`,issuedAtMs:t.get(`issuedAtMs`),storeVersion:t.get(`storeVersion`)};if(t.size===3&&n.every(e=>[`ok`,`code`,`message`].includes(e))&&t.get(`ok`)===!1&&typeof t.get(`code`)==`string`){let e=t.get(`message`);return{kind:`failure`,message:typeof e==`string`&&e.trim()?e.trim():null}}return{kind:`invalid`}}async function x(e){let t=await S({relayUrl:e.relayUrl,path:`/wallets/recovery/rotate`,body:{walletId:e.walletId,expectedStoreVersion:e.expectedStoreVersion,manifestKekWraps:e.replacement.manifestKekWraps,entries:[e.replacement.entry],recoveryCodeLocators:e.recoveryCodeLocators,factorProof:e.factorProof},fetchImpl:e.fetchImpl}),n=b(await t.json().catch(()=>null)),r=n.kind===`failure`&&n.message?n.message:``;if(t.status===200&&n.kind===`success`){let e=Number(n.issuedAtMs),t=typeof n.storeVersion==`string`?n.storeVersion.trim():``;return!Number.isSafeInteger(e)||e<=0||!t?{kind:`transport_failed`,message:`rotation returned an unusable response`}:{kind:`rotated`,issuedAtMs:e,storeVersion:t}}return t.status===404?{kind:`no_recovery_set`,message:r||`no recovery set`}:t.status===409?{kind:`conflict`,message:r||`recovery set changed`}:t.status===400?{kind:`rejected`,message:r||`rotation rejected`}:{kind:`transport_failed`,message:r||`rotation failed (HTTP ${t.status})`}}async function S(n){let r=`${t(n.relayUrl)}${n.path}`;return await(n.fetchImpl||fetch)(r,e({headers:{Accept:`application/json`},body:n.body}))}var C=class extends Error{code=`wallet_origin_webauthn_unavailable`;constructor(e){super(e),this.name=`WalletOriginWebAuthnUnavailableError`}};async function w(e,t,n){let r=T(e,t);try{return e===`create`?await navigator.credentials.create({publicKey:r,...n.abortSignal?{signal:n.abortSignal}:{}}):await navigator.credentials.get({publicKey:r,...n.abortSignal?{signal:n.abortSignal}:{}})}catch(t){throw e===`create`&&(N(t)||P(t))?new C(`Wallet-origin WebAuthn registration is unavailable: ${F(t)}`):t}}function T(e,t){return e===`create`?E(t):D(t)}function E(e){return{...e,challenge:M(e.challenge),user:{...e.user,id:M(e.user.id)},excludeCredentials:e.excludeCredentials?.map(O),extensions:k(e.extensions)}}function D(e){return{...e,challenge:M(e.challenge),allowCredentials:e.allowCredentials?.map(O),extensions:k(e.extensions)}}function O(e){return{...e,id:M(e.id)}}function k(e){if(!e)return e;let t={...e},n=t.prf;if(n&&typeof n==`object`){let e={...n};if(e.eval&&typeof e.eval==`object`&&(e.eval=A(e.eval)),e.evalByCredential&&typeof e.evalByCredential==`object`){let t={};for(let[n,r]of Object.entries(e.evalByCredential))t[n]=r&&typeof r==`object`?A(r):r;e.evalByCredential=t}t.prf=e}return t}function A(e){return{...e,...j(e.first)?{first:M(e.first)}:{},...j(e.second)?{second:M(e.second)}:{}}}function j(e){return e instanceof ArrayBuffer||ArrayBuffer.isView(e)}function M(e){if(e instanceof ArrayBuffer)return e.slice(0);let t=e,n=new Uint8Array(t.buffer,t.byteOffset,t.byteLength).slice();if(e instanceof DataView)return new DataView(n.buffer);let r=Object.getPrototypeOf(e).constructor;return new r(n.buffer)}function N(e){let t=F(e);return/origin of the document is not the same as its ancestors/i.test(t)}function P(e){let t=I(e),n=F(e),r=t===`NotAllowedError`,i=/document is not focused|not focused|focus/i.test(n);return!!(r&&i)}function F(e){return String(e?.message||``)}function I(e){let t=e?.name;return typeof t==`string`?t:``}function L(e,t){return(e||t||``).toLowerCase()}function R(e){let t=n(String(e||``));if(t.length!==32)throw Error(`Invalid WebAuthn challenge: expected 32 bytes, got ${t.length}`);return t}function z(e){if(e.kind!==`wallet_registration`)throw Error(`Wallet registration challenge is unavailable`);return e.challengeB64u}function B(e){let t=a(String(e.walletId||``).trim());if(String(e.intendedUserName||``).trim()!==String(t))throw Error(`WebAuthn registration user.name must match walletId`);return{walletId:t}}var V=class{rpIdOverride;abortController;removePageAbortHandlers;removeExternalAbortListener;constructor(e){this.rpIdOverride=e}getRpId(){try{return L(this.rpIdOverride,window?.location?.hostname)}catch{return this.rpIdOverride||``}}getAuthenticationCredentialsSerializedForChallengeB64u(e){let t=`webauthn-get-${i(12,`WebAuthn get request IDs`)}`;return f.runImmediate({owner:{kind:`wallet_request`,requestId:t,operation:`authentication`},operation:this.executeAuthenticationCredential.bind(this,e)})}async executeAuthenticationCredential({subjectId:e,challengeB64u:t,allowCredentials:r=[],includeSecondPrfOutput:i=!1,cancellation:a={kind:`none`}}){this.abortController=new AbortController,this.removePageAbortHandlers=q(this.abortController),this.removeExternalAbortListener=H(this.abortController,a);let o=this.getRpId(),u={challenge:R(t),rpId:o,userVerification:`preferred`,timeout:6e4,extensions:{prf:{eval:{first:l(),second:s()}}}};r.length>0&&(u.allowCredentials=r.map(e=>({id:n(e.id),type:`public-key`,transports:e.transports})));try{let e=c({credential:await w(`get`,u,{abortSignal:this.abortController.signal}),firstPrfOutput:!0,secondPrfOutput:i});return G(e,t),e}finally{this.removePageAbortHandlers?.(),this.removePageAbortHandlers=void 0,this.removeExternalAbortListener?.(),this.removeExternalAbortListener=void 0,this.abortController=void 0}}generateRegistrationCredentialsInternal(e){switch(e.prompt.kind){case`reserved`:return f.runReserved({reservation:e.prompt.reservation,owner:e.prompt.owner,operation:this.executeRegistrationCredential.bind(this,e)});case`immediate`:return f.runImmediate({owner:{kind:`wallet_request`,requestId:e.prompt.requestId,operation:`registration`},operation:this.executeRegistrationCredential.bind(this,e)})}}async executeRegistrationCredential(e){this.abortController=new AbortController,this.removePageAbortHandlers=q(this.abortController),this.removeExternalAbortListener=H(this.abortController,e.prompt.cancellation);let t=this.getRpId(),r=B({walletId:e.walletId,intendedUserName:e.intendedUserName}),i=e.kind===`wallet_recovery`?e.recoveryRegistration:null,a=e.kind===`wallet_add_auth_method`?e.registration:null,o=i??a,c=o?.rpId??t;if(o&&c!==t)throw Error(`Wallet recovery RP ID does not match the wallet origin`);let u=o?{challenge:R(o.challengeB64u),rp:{name:`Seams Wallet`,id:c},user:{id:n(o.user.idB64u),name:o.user.name,displayName:o.user.displayName},pubKeyCredParams:o.pubKeyCredParams.map(e=>({...e})),authenticatorSelection:{...o.authenticatorSelection},timeout:o.timeoutMs,attestation:o.attestation,extensions:{prf:{eval:{first:n(o.extensions.prf.eval.firstB64u),second:n(o.extensions.prf.eval.secondB64u)}}},excludeCredentials:o.excludeCredentials.map(e=>({type:e.type,id:n(e.id)}))}:{challenge:R(z(e)),rp:{name:`WebAuthn Passkey`,id:c},user:{id:new TextEncoder().encode(K(e.walletId,e.signerSlot)),name:r.walletId,displayName:r.walletId},pubKeyCredParams:[{alg:-7,type:`public-key`},{alg:-257,type:`public-key`}],authenticatorSelection:{residentKey:`required`,userVerification:`preferred`},timeout:6e4,attestation:`none`,extensions:{prf:{eval:{first:l(),second:s()}}}};try{return await w(`create`,u,{abortSignal:this.abortController.signal})}finally{this.removePageAbortHandlers?.(),this.removePageAbortHandlers=void 0,this.removeExternalAbortListener?.(),this.removeExternalAbortListener=void 0,this.abortController=void 0}}};function H(e,t){if(t.kind===`none`)return;let n=t.signal,r=e.abort.bind(e);if(n.aborted){r();return}return n.addEventListener(`abort`,r,{once:!0}),n.removeEventListener.bind(n,`abort`,r)}function U(e){return String(e||``).trim().replace(/=+$/g,``)}function W(e){let t=String(e.response?.clientDataJSON||``).trim();if(!t)throw Error(`WebAuthn authentication response missing clientDataJSON`);let r=``;try{r=new TextDecoder().decode(n(t))}catch(e){throw Error(`WebAuthn authentication response has invalid clientDataJSON encoding: ${e instanceof Error?e.message:String(e)}`)}let i;try{i=JSON.parse(r)}catch(e){throw Error(`WebAuthn authentication response has invalid clientDataJSON JSON: ${e instanceof Error?e.message:String(e)}`)}let a=i&&typeof i==`object`?i.challenge:void 0;if(typeof a!=`string`||!a.trim())throw Error(`WebAuthn authentication response clientDataJSON missing challenge`);return a}function G(e,t){let n=U(W(e)),r=U(t);if(n!==r)throw Error(`Unexpected authentication response challenge "${n}", expected "${r}"`)}function K(e,t){return t===void 0||t===1?e:`${e} (${t})`}function q(e){let t=()=>{document.hidden&&e.abort()},n=()=>{e.abort()},r=()=>{e.abort()};return document.addEventListener(`visibilitychange`,t,{passive:!0}),window.addEventListener(`pagehide`,n,{passive:!0}),window.addEventListener(`beforeunload`,r,{passive:!0}),()=>{document.removeEventListener(`visibilitychange`,t),window.removeEventListener(`pagehide`,n),window.removeEventListener(`beforeunload`,r)}}async function J(e){let t=e.request.payload.walletId,n=window.location.origin,r=await d({walletId:t,operation:e.request.operation,payload:e.request.payload,requestOrigin:n}),i=await p({credentialStore:o,touchIdPrompt:new V(e.rpId),walletId:t,challengeB64u:r,includeSecondPrfOutput:!1}),a=ee(i);if(!a)throw Error(`Wallet recovery proof did not receive a passkey credential`);return{kind:`passkey`,walletId:t,rpId:e.rpId,credentialIdB64u:a,challenge_digest:r,webauthn_authentication:u(i)}}function Y(){return r(`wallet-recovery-admin`,16,`wallet recovery administration request IDs`)}async function X(e){let t=Y(),n={walletId:e.walletId,requestId:t},r=await J({rpId:e.rpId,request:{operation:`recovery_status`,payload:n}});return await _({relayUrl:e.relayUrl,walletId:e.walletId,requestId:t,factorProof:r})}async function Z(e){let t=Y(),n={walletId:e.walletId,requestId:t,expectedIssuedAtMs:e.expectedIssuedAtMs},r=await J({rpId:e.rpId,request:{operation:`recovery_backup_acknowledge`,payload:n}});return await y({relayUrl:e.relayUrl,walletId:e.walletId,requestId:t,expectedIssuedAtMs:e.expectedIssuedAtMs,factorProof:r})}async function Q(e){let t=await o.resolveSelectedWalletAuthority(e);if(t.kind!==`resolved`||t.selection.lockState!==`unlocked`||String(t.selection.walletId)!==e||t.selection.walletAuthMethodId!==t.authMethod.walletAuthMethodId||t.authMethod.kind!==`email_otp`||t.authMethod.status!==`active`||t.authority.state!==`active`||String(t.authMethod.walletId)!==e||String(t.authority.walletId)!==e)throw Error(`Unlock this wallet with its active Email OTP method`);let n=await o.listWalletAuthMethodsForWallet(e),r=null;for(let e of n)if(!(e.kind!==`email_otp`||e.status!==`active`||e.localStatus!==`synced`||String(e.authority.bindingId)!==String(t.authMethod.walletAuthMethodId))){if(r!==null)throw Error(`The selected Email OTP owner method is duplicated`);r=String(e.authority.factor.providerUserId||``).trim()}if(!r)throw Error(`The selected Email OTP owner method is unavailable on this wallet`);return{walletAuthMethodId:String(t.authMethod.walletAuthMethodId),providerSubjectId:r}}async function $(e){let t=e.request.payload.walletId,{providerSubjectId:n}=await Q(t),r=window.location.origin,i=await d({walletId:t,operation:e.request.operation,payload:e.request.payload,requestOrigin:r}),a=await h({relayUrl:e.relayUrl,walletId:t,providerSubjectId:n,operation:e.request.operation,payload:e.request.payload,requestOrigin:r});if(a.kind!==`ready`)throw Error(a.message);if(a.challenge_digest!==i)throw Error(`Recovery Email OTP challenge does not match this operation`);let o=await e.context.signingEngine.requestEmailOtpOwnerConfirmation({purpose:e.request.operation,walletId:t,emailAddress:`your email`,challengeId:a.challengeId});if(o.challengeId!==a.challengeId)throw Error(`Recovery Email OTP confirmation changed its challenge`);return{kind:`email_otp`,provider_subject_id:n,challenge_id:o.challengeId,otp_code:o.otpCode,challenge_digest:i}}async function te(e){let t=Y(),n={walletId:e.walletId,requestId:t},r=await $({context:e.context,relayUrl:e.relayUrl,request:{operation:`recovery_status`,payload:n}});return await _({relayUrl:e.relayUrl,walletId:e.walletId,requestId:t,factorProof:r})}async function ne(e){let t=Y(),n={walletId:e.walletId,requestId:t,expectedIssuedAtMs:e.expectedIssuedAtMs},r=await $({context:e.context,relayUrl:e.relayUrl,request:{operation:`recovery_backup_acknowledge`,payload:n}});return await y({relayUrl:e.relayUrl,walletId:e.walletId,requestId:t,expectedIssuedAtMs:e.expectedIssuedAtMs,factorProof:r})}export{X as a,_ as c,te as i,h as l,Z as n,Q as o,$ as r,V as s,ne as t,x as u};
+import{o as e,u as t}from"./participants-BXdREC5k.js";import{r as n}from"./base64-BmKR3UqU.js";import{r,t as i}from"./secureRandomId-8LSc91aN.js";import{o as a}from"./signerSlot-D2RZnb27.js";import{t as o}from"./indexedDB-C4SDsyOG.js";import{n as s,s as c,t as l,u}from"./helpers-Dubwo5uK.js";import{i as ee}from"./pendingWalletRecoveryCodeBackup-B-R_U34I.js";import{t as d}from"./walletCustodyOperation-DimzAbCB.js";import{t as f}from"./webauthnPromptCoordinator-npsSRD51.js";import{i as p}from"./collectAuthenticationCredentialForChallengeB64u-I4wq8OGq.js";function m(e){if(typeof e!=`object`||!e||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype&&Object.getPrototypeOf(e)!==null)return{kind:`invalid`};let t=new Map(Object.entries(e)),n=[...t.keys()];if(t.size===5&&n.every(e=>[`ok`,`challengeId`,`challenge_digest`,`expiresAtMs`,`otpChannel`].includes(e))&&t.get(`ok`)===!0)return{kind:`success`,challengeId:t.get(`challengeId`),challengeDigest:t.get(`challenge_digest`),expiresAtMs:t.get(`expiresAtMs`),otpChannel:t.get(`otpChannel`)};let r=[`ok`,`code`,`message`,`retryAfterMs`];if((t.size===3||t.size===4)&&n.every(e=>r.includes(e))&&t.get(`ok`)===!1&&typeof t.get(`code`)==`string`&&typeof t.get(`message`)==`string`&&(t.size===3||typeof t.get(`retryAfterMs`)==`number`)){let e=t.get(`message`);return{kind:`failure`,message:typeof e==`string`&&e.trim()?e.trim():null}}return{kind:`invalid`}}async function h(e){let t;try{t=await S({relayUrl:e.relayUrl,path:`/wallets/custody/email-otp/challenge`,body:{walletId:e.walletId,providerSubjectId:e.providerSubjectId,operation:e.operation,payload:e.payload,...e.requestOrigin?{requestOrigin:e.requestOrigin}:{}},fetchImpl:e.fetchImpl})}catch(e){return{kind:`transport_failed`,message:e instanceof Error?e.message:`Email OTP challenge request failed`}}let n=m(await t.json().catch(()=>null)),r=n.kind===`failure`&&n.message?n.message:``;if(t.status!==200||n.kind!==`success`)return{kind:t.status>=400&&t.status<500?`rejected`:`transport_failed`,message:r||`Email OTP challenge failed (HTTP ${t.status})`};let i=typeof n.challengeId==`string`?n.challengeId.trim():``,a=typeof n.challengeDigest==`string`?n.challengeDigest.trim():``,o=Number(n.expiresAtMs),s=typeof n.otpChannel==`string`?n.otpChannel.trim():``;return!i||!a||!Number.isSafeInteger(o)||o<=0||!s?{kind:`transport_failed`,message:`Email OTP challenge returned an unusable payload`}:{kind:`ready`,challengeId:i,challenge_digest:a,expiresAtMs:o,otpChannel:s}}function g(e){if(typeof e!=`object`||!e||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype&&Object.getPrototypeOf(e)!==null)return{kind:`invalid`};let t=new Map(Object.entries(e)),n=[`ok`,`activeCodeCount`,`totalCodeCount`,`issuedAtMs`,`storeVersion`,`backupOutstanding`],r=[...t.keys()];if(t.size===n.length&&r.every(e=>n.includes(e))&&t.get(`ok`)===!0)return{kind:`success`,activeCodeCount:t.get(`activeCodeCount`),totalCodeCount:t.get(`totalCodeCount`),issuedAtMs:t.get(`issuedAtMs`),storeVersion:t.get(`storeVersion`),backupOutstanding:t.get(`backupOutstanding`)};let i=[`ok`,`code`,`message`];if(t.size===i.length&&r.every(e=>i.includes(e))&&t.get(`ok`)===!1&&typeof t.get(`code`)==`string`){let e=t.get(`message`);return{kind:`failure`,message:typeof e==`string`&&e.trim()?e.trim():null}}return{kind:`invalid`}}async function _(e){let t;try{t=await S({relayUrl:e.relayUrl,path:`/wallets/${encodeURIComponent(e.walletId)}/recovery/status`,body:{requestId:e.requestId,factorProof:e.factorProof},fetchImpl:e.fetchImpl})}catch(e){return{kind:`transport_failed`,message:e instanceof Error?e.message:`recovery status request failed`}}let n=g(await t.json().catch(()=>null)),r=n.kind===`failure`&&n.message?n.message:``;if(t.status===401||t.status===403)return{kind:`unauthorized`,message:r||`recovery status is unauthorized`};if(t.status===404)return{kind:`no_recovery_set`,message:r||`this wallet has no recovery set`};if(t.status!==200)return{kind:`transport_failed`,message:r||`recovery status failed (HTTP ${t.status})`};if(n.kind!==`success`)return{kind:`transport_failed`,message:`recovery status returned an unusable payload`};let i=Number(n.activeCodeCount),a=Number(n.totalCodeCount),o=Number(n.issuedAtMs),s=typeof n.storeVersion==`string`?n.storeVersion.trim():``;return!Number.isSafeInteger(i)||i<0||!Number.isSafeInteger(a)||a<i||!Number.isSafeInteger(o)||o<=0||!s||typeof n.backupOutstanding!=`boolean`?{kind:`transport_failed`,message:`recovery status returned an unusable payload`}:{kind:`ready`,walletId:e.walletId,activeCodeCount:i,totalCodeCount:a,issuedAtMs:o,storeVersion:s,backupOutstanding:n.backupOutstanding,pendingLocalBackup:!1}}function v(e){if(typeof e!=`object`||!e||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype&&Object.getPrototypeOf(e)!==null)return{kind:`invalid`};let t=new Map(Object.entries(e)),n=[...t.keys()];if(t.size===2&&n.includes(`ok`)&&n.includes(`issuedAtMs`)&&t.get(`ok`)===!0)return{kind:`success`,issuedAtMs:t.get(`issuedAtMs`)};if(t.size===3&&n.includes(`ok`)&&n.includes(`code`)&&n.includes(`message`)&&t.get(`ok`)===!1&&typeof t.get(`code`)==`string`){let e=t.get(`message`);return{kind:`failure`,message:typeof e==`string`&&e.trim()?e.trim():null}}return{kind:`invalid`}}async function y(e){let t;try{t=await S({relayUrl:e.relayUrl,path:`/wallets/recovery/acknowledge-backup`,body:{walletId:e.walletId,requestId:e.requestId,expectedIssuedAtMs:e.expectedIssuedAtMs,factorProof:e.factorProof},fetchImpl:e.fetchImpl})}catch(e){return{kind:`transport_failed`,message:e instanceof Error?e.message:`recovery backup acknowledgement failed`}}let n=v(await t.json().catch(()=>null)),r=n.kind===`failure`&&n.message?n.message:``;if(t.status===401||t.status===403)return{kind:`unauthorized`,message:r||`recovery backup acknowledgement is unauthorized`};if(t.status===404)return{kind:`no_recovery_set`,message:r||`this wallet has no recovery set`};if(t.status===409)return{kind:`conflict`,message:r||`Recovery codes changed. Check status and review the current set.`};if(t.status!==200)return{kind:`transport_failed`,message:r||`recovery backup acknowledgement failed (HTTP ${t.status})`};if(n.kind!==`success`)return{kind:`transport_failed`,message:`recovery backup acknowledgement returned an unusable payload`};let i=Number(n.issuedAtMs);return!Number.isSafeInteger(i)||i<=0?{kind:`transport_failed`,message:`recovery backup acknowledgement returned an unusable payload`}:{kind:`acknowledged`,walletId:e.walletId,issuedAtMs:i}}function b(e){if(typeof e!=`object`||!e||Array.isArray(e)||Object.getPrototypeOf(e)!==Object.prototype&&Object.getPrototypeOf(e)!==null)return{kind:`invalid`};let t=new Map(Object.entries(e)),n=[...t.keys()];if(t.size===3&&n.every(e=>[`ok`,`issuedAtMs`,`storeVersion`].includes(e))&&t.get(`ok`)===!0)return{kind:`success`,issuedAtMs:t.get(`issuedAtMs`),storeVersion:t.get(`storeVersion`)};if(t.size===3&&n.every(e=>[`ok`,`code`,`message`].includes(e))&&t.get(`ok`)===!1&&typeof t.get(`code`)==`string`){let e=t.get(`message`);return{kind:`failure`,message:typeof e==`string`&&e.trim()?e.trim():null}}return{kind:`invalid`}}async function x(e){let t=await S({relayUrl:e.relayUrl,path:`/wallets/recovery/rotate`,body:{walletId:e.walletId,expectedStoreVersion:e.expectedStoreVersion,manifestKekWraps:e.replacement.manifestKekWraps,entries:[e.replacement.entry],recoveryCodeLocators:e.recoveryCodeLocators,factorProof:e.factorProof},fetchImpl:e.fetchImpl}),n=b(await t.json().catch(()=>null)),r=n.kind===`failure`&&n.message?n.message:``;if(t.status===200&&n.kind===`success`){let e=Number(n.issuedAtMs),t=typeof n.storeVersion==`string`?n.storeVersion.trim():``;return!Number.isSafeInteger(e)||e<=0||!t?{kind:`transport_failed`,message:`rotation returned an unusable response`}:{kind:`rotated`,issuedAtMs:e,storeVersion:t}}return t.status===404?{kind:`no_recovery_set`,message:r||`no recovery set`}:t.status===409?{kind:`conflict`,message:r||`recovery set changed`}:t.status===400?{kind:`rejected`,message:r||`rotation rejected`}:{kind:`transport_failed`,message:r||`rotation failed (HTTP ${t.status})`}}async function S(n){let r=`${t(n.relayUrl)}${n.path}`;return await(n.fetchImpl||fetch)(r,e({headers:{Accept:`application/json`},body:n.body}))}var C=class extends Error{code=`wallet_origin_webauthn_unavailable`;constructor(e){super(e),this.name=`WalletOriginWebAuthnUnavailableError`}};async function w(e,t,n){let r=T(e,t);try{return e===`create`?await navigator.credentials.create({publicKey:r,...n.abortSignal?{signal:n.abortSignal}:{}}):await navigator.credentials.get({publicKey:r,...n.abortSignal?{signal:n.abortSignal}:{}})}catch(t){throw e===`create`&&(N(t)||P(t))?new C(`Wallet-origin WebAuthn registration is unavailable: ${F(t)}`):t}}function T(e,t){return e===`create`?E(t):D(t)}function E(e){return{...e,challenge:M(e.challenge),user:{...e.user,id:M(e.user.id)},excludeCredentials:e.excludeCredentials?.map(O),extensions:k(e.extensions)}}function D(e){return{...e,challenge:M(e.challenge),allowCredentials:e.allowCredentials?.map(O),extensions:k(e.extensions)}}function O(e){return{...e,id:M(e.id)}}function k(e){if(!e)return e;let t={...e},n=t.prf;if(n&&typeof n==`object`){let e={...n};if(e.eval&&typeof e.eval==`object`&&(e.eval=A(e.eval)),e.evalByCredential&&typeof e.evalByCredential==`object`){let t={};for(let[n,r]of Object.entries(e.evalByCredential))t[n]=r&&typeof r==`object`?A(r):r;e.evalByCredential=t}t.prf=e}return t}function A(e){return{...e,...j(e.first)?{first:M(e.first)}:{},...j(e.second)?{second:M(e.second)}:{}}}function j(e){return e instanceof ArrayBuffer||ArrayBuffer.isView(e)}function M(e){if(e instanceof ArrayBuffer)return e.slice(0);let t=e,n=new Uint8Array(t.buffer,t.byteOffset,t.byteLength).slice();if(e instanceof DataView)return new DataView(n.buffer);let r=Object.getPrototypeOf(e).constructor;return new r(n.buffer)}function N(e){let t=F(e);return/origin of the document is not the same as its ancestors/i.test(t)}function P(e){let t=I(e),n=F(e),r=t===`NotAllowedError`,i=/document is not focused|not focused|focus/i.test(n);return!!(r&&i)}function F(e){return String(e?.message||``)}function I(e){let t=e?.name;return typeof t==`string`?t:``}function L(e,t){return(e||t||``).toLowerCase()}function R(e){let t=n(String(e||``));if(t.length!==32)throw Error(`Invalid WebAuthn challenge: expected 32 bytes, got ${t.length}`);return t}function z(e){if(e.kind!==`wallet_registration`)throw Error(`Wallet registration challenge is unavailable`);return e.challengeB64u}function B(e){let t=a(String(e.walletId||``).trim());if(String(e.intendedUserName||``).trim()!==String(t))throw Error(`WebAuthn registration user.name must match walletId`);return{walletId:t}}var V=class{rpIdOverride;abortController;removePageAbortHandlers;removeExternalAbortListener;constructor(e){this.rpIdOverride=e}getRpId(){try{return L(this.rpIdOverride,window?.location?.hostname)}catch{return this.rpIdOverride||``}}getAuthenticationCredentialsSerializedForChallengeB64u(e){let t=`webauthn-get-${i(12,`WebAuthn get request IDs`)}`;return f.runImmediate({owner:{kind:`wallet_request`,requestId:t,operation:`authentication`},operation:this.executeAuthenticationCredential.bind(this,e)})}async executeAuthenticationCredential({subjectId:e,challengeB64u:t,allowCredentials:r=[],includeSecondPrfOutput:i=!1,cancellation:a={kind:`none`}}){this.abortController=new AbortController,this.removePageAbortHandlers=q(this.abortController),this.removeExternalAbortListener=H(this.abortController,a);let o=this.getRpId(),u={challenge:R(t),rpId:o,userVerification:`preferred`,timeout:6e4,extensions:{prf:{eval:{first:l(),second:s()}}}};r.length>0&&(u.allowCredentials=r.map(e=>({id:n(e.id),type:`public-key`,transports:e.transports})));try{let e=c({credential:await w(`get`,u,{abortSignal:this.abortController.signal}),firstPrfOutput:!0,secondPrfOutput:i});return G(e,t),e}finally{this.removePageAbortHandlers?.(),this.removePageAbortHandlers=void 0,this.removeExternalAbortListener?.(),this.removeExternalAbortListener=void 0,this.abortController=void 0}}generateRegistrationCredentialsInternal(e){switch(e.prompt.kind){case`reserved`:return f.runReserved({reservation:e.prompt.reservation,owner:e.prompt.owner,operation:this.executeRegistrationCredential.bind(this,e)});case`immediate`:return f.runImmediate({owner:{kind:`wallet_request`,requestId:e.prompt.requestId,operation:`registration`},operation:this.executeRegistrationCredential.bind(this,e)})}}async executeRegistrationCredential(e){this.abortController=new AbortController,this.removePageAbortHandlers=q(this.abortController),this.removeExternalAbortListener=H(this.abortController,e.prompt.cancellation);let t=this.getRpId(),r=B({walletId:e.walletId,intendedUserName:e.intendedUserName}),i=e.kind===`wallet_recovery`?e.recoveryRegistration:null,a=e.kind===`wallet_add_auth_method`?e.registration:null,o=i??a,c=o?.rpId??t;if(o&&c!==t)throw Error(`Wallet recovery RP ID does not match the wallet origin`);let u=o?{challenge:R(o.challengeB64u),rp:{name:`Seams Wallet`,id:c},user:{id:n(o.user.idB64u),name:o.user.name,displayName:o.user.displayName},pubKeyCredParams:o.pubKeyCredParams.map(e=>({...e})),authenticatorSelection:{...o.authenticatorSelection},timeout:o.timeoutMs,attestation:o.attestation,extensions:{prf:{eval:{first:n(o.extensions.prf.eval.firstB64u),second:n(o.extensions.prf.eval.secondB64u)}}},excludeCredentials:o.excludeCredentials.map(e=>({type:e.type,id:n(e.id)}))}:{challenge:R(z(e)),rp:{name:`WebAuthn Passkey`,id:c},user:{id:new TextEncoder().encode(K(e.walletId,e.signerSlot)),name:r.walletId,displayName:r.walletId},pubKeyCredParams:[{alg:-7,type:`public-key`},{alg:-257,type:`public-key`}],authenticatorSelection:{residentKey:`required`,userVerification:`preferred`},timeout:6e4,attestation:`none`,extensions:{prf:{eval:{first:l(),second:s()}}}};try{return await w(`create`,u,{abortSignal:this.abortController.signal})}finally{this.removePageAbortHandlers?.(),this.removePageAbortHandlers=void 0,this.removeExternalAbortListener?.(),this.removeExternalAbortListener=void 0,this.abortController=void 0}}};function H(e,t){if(t.kind===`none`)return;let n=t.signal,r=e.abort.bind(e);if(n.aborted){r();return}return n.addEventListener(`abort`,r,{once:!0}),n.removeEventListener.bind(n,`abort`,r)}function U(e){return String(e||``).trim().replace(/=+$/g,``)}function W(e){let t=String(e.response?.clientDataJSON||``).trim();if(!t)throw Error(`WebAuthn authentication response missing clientDataJSON`);let r=``;try{r=new TextDecoder().decode(n(t))}catch(e){throw Error(`WebAuthn authentication response has invalid clientDataJSON encoding: ${e instanceof Error?e.message:String(e)}`)}let i;try{i=JSON.parse(r)}catch(e){throw Error(`WebAuthn authentication response has invalid clientDataJSON JSON: ${e instanceof Error?e.message:String(e)}`)}let a=i&&typeof i==`object`?i.challenge:void 0;if(typeof a!=`string`||!a.trim())throw Error(`WebAuthn authentication response clientDataJSON missing challenge`);return a}function G(e,t){let n=U(W(e)),r=U(t);if(n!==r)throw Error(`Unexpected authentication response challenge "${n}", expected "${r}"`)}function K(e,t){return t===void 0||t===1?e:`${e} (${t})`}function q(e){let t=()=>{document.hidden&&e.abort()},n=()=>{e.abort()},r=()=>{e.abort()};return document.addEventListener(`visibilitychange`,t,{passive:!0}),window.addEventListener(`pagehide`,n,{passive:!0}),window.addEventListener(`beforeunload`,r,{passive:!0}),()=>{document.removeEventListener(`visibilitychange`,t),window.removeEventListener(`pagehide`,n),window.removeEventListener(`beforeunload`,r)}}async function J(e){let t=e.request.payload.walletId,n=window.location.origin,r=await d({walletId:t,operation:e.request.operation,payload:e.request.payload,requestOrigin:n}),i=await p({credentialStore:o,touchIdPrompt:new V(e.rpId),walletId:t,challengeB64u:r,includeSecondPrfOutput:!1}),a=ee(i);if(!a)throw Error(`Wallet recovery proof did not receive a passkey credential`);return{kind:`passkey`,walletId:t,rpId:e.rpId,credentialIdB64u:a,challenge_digest:r,webauthn_authentication:u(i)}}function Y(){return r(`wallet-recovery-admin`,16,`wallet recovery administration request IDs`)}async function X(e){let t=Y(),n={walletId:e.walletId,requestId:t},r=await J({rpId:e.rpId,request:{operation:`recovery_status`,payload:n}});return await _({relayUrl:e.relayUrl,walletId:e.walletId,requestId:t,factorProof:r})}async function Z(e){let t=Y(),n={walletId:e.walletId,requestId:t,expectedIssuedAtMs:e.expectedIssuedAtMs},r=await J({rpId:e.rpId,request:{operation:`recovery_backup_acknowledge`,payload:n}});return await y({relayUrl:e.relayUrl,walletId:e.walletId,requestId:t,expectedIssuedAtMs:e.expectedIssuedAtMs,factorProof:r})}async function Q(e){let t=await o.resolveSelectedWalletAuthority(e);if(t.kind!==`resolved`||t.selection.lockState!==`unlocked`||String(t.selection.walletId)!==e||t.selection.walletAuthMethodId!==t.authMethod.walletAuthMethodId||t.authMethod.kind!==`email_otp`||t.authMethod.status!==`active`||t.authority.state!==`active`||String(t.authMethod.walletId)!==e||String(t.authority.walletId)!==e)throw Error(`Unlock this wallet with its active Email OTP method`);let n=await o.listWalletAuthMethodsForWallet(e),r=null;for(let e of n)if(!(e.kind!==`email_otp`||e.status!==`active`||e.localStatus!==`synced`||String(e.authority.bindingId)!==String(t.authMethod.walletAuthMethodId))){if(r!==null)throw Error(`The selected Email OTP owner method is duplicated`);r=String(e.authority.factor.providerUserId||``).trim()}if(!r)throw Error(`The selected Email OTP owner method is unavailable on this wallet`);return{walletAuthMethodId:String(t.authMethod.walletAuthMethodId),providerSubjectId:r}}async function $(e){let t=e.request.payload.walletId,{providerSubjectId:n}=await Q(t),r=window.location.origin,i=await d({walletId:t,operation:e.request.operation,payload:e.request.payload,requestOrigin:r}),a=await h({relayUrl:e.relayUrl,walletId:t,providerSubjectId:n,operation:e.request.operation,payload:e.request.payload,requestOrigin:r});if(a.kind!==`ready`)throw Error(a.message);if(a.challenge_digest!==i)throw Error(`Recovery Email OTP challenge does not match this operation`);let o=await e.context.signingEngine.requestEmailOtpOwnerConfirmation({purpose:e.request.operation,walletId:t,emailAddress:`your email`,challengeId:a.challengeId});if(o.challengeId!==a.challengeId)throw Error(`Recovery Email OTP confirmation changed its challenge`);return{kind:`email_otp`,provider_subject_id:n,challenge_id:o.challengeId,otp_code:o.otpCode,challenge_digest:i}}async function te(e){let t=Y(),n={walletId:e.walletId,requestId:t},r=await $({context:e.context,relayUrl:e.relayUrl,request:{operation:`recovery_status`,payload:n}});return await _({relayUrl:e.relayUrl,walletId:e.walletId,requestId:t,factorProof:r})}async function ne(e){let t=Y(),n={walletId:e.walletId,requestId:t,expectedIssuedAtMs:e.expectedIssuedAtMs},r=await $({context:e.context,relayUrl:e.relayUrl,request:{operation:`recovery_backup_acknowledge`,payload:n}});return await y({relayUrl:e.relayUrl,walletId:e.walletId,requestId:t,expectedIssuedAtMs:e.expectedIssuedAtMs,factorProof:r})}export{X as a,_ as c,te as i,h as l,Z as n,Q as o,$ as r,V as s,ne as t,x as u};

package/dist/public/wallet-assets.manifest.json

@@ -1,15 +1,15 @@
 {
   "schemaVersion": 1,
   "packageName": "@seams/wallet",
-  "packageVersion": "0.27.0",
+  "packageVersion": "0.28.0",
   "assetRoot": "dist/public",
   "sdkBasePath": "/sdk",
   "walletServicePath": "/wallet-service",
   "headersManifest": "headers.manifest.json",
   "versionSkewContract": {
     "kind": "wallet_iframe_protocol_handshake",
-    "packageVersion": "0.27.0",
-    "protocolVersion": "17.0.0",
+    "packageVersion": "0.28.0",
+    "protocolVersion": "18.0.0",
     "readyPayloadField": "protocolVersion",
     "failureMode": "typed_error",
     "errorCode": "WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH"
@@ -130,8 +130,8 @@
       ]
     },
     {
-      "route": "/sdk/adapters-d9yh1bdC.js",
-      "sourceFile": "sdk/adapters-d9yh1bdC.js",
+      "route": "/sdk/adapters-C-g_hkkZ.js",
+      "sourceFile": "sdk/adapters-C-g_hkkZ.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -178,8 +178,8 @@
       ]
     },
     {
-      "route": "/sdk/appearance-token-vars-BJydfWT_.js",
-      "sourceFile": "sdk/appearance-token-vars-BJydfWT_.js",
+      "route": "/sdk/appearance-token-vars-01eH9pgA.js",
+      "sourceFile": "sdk/appearance-token-vars-01eH9pgA.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -538,8 +538,8 @@
       ]
     },
     {
-      "route": "/sdk/configBuilder-CSwJrmcR.js",
-      "sourceFile": "sdk/configBuilder-CSwJrmcR.js",
+      "route": "/sdk/configBuilder-DpChXfDO.js",
+      "sourceFile": "sdk/configBuilder-DpChXfDO.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -586,8 +586,8 @@
       ]
     },
     {
-      "route": "/sdk/configuration-DBEc3bsj.js",
-      "sourceFile": "sdk/configuration-DBEc3bsj.js",
+      "route": "/sdk/configuration-BAad7ngq.js",
+      "sourceFile": "sdk/configuration-BAad7ngq.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -610,8 +610,8 @@
       ]
     },
     {
-      "route": "/sdk/confirm-ui-nU6ymgiv.js",
-      "sourceFile": "sdk/confirm-ui-nU6ymgiv.js",
+      "route": "/sdk/confirm-ui-em0vkd2m.js",
+      "sourceFile": "sdk/confirm-ui-em0vkd2m.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -634,8 +634,8 @@
       ]
     },
     {
-      "route": "/sdk/ConfirmationDrawer-AZruQmhP.js",
-      "sourceFile": "sdk/ConfirmationDrawer-AZruQmhP.js",
+      "route": "/sdk/ConfirmationDrawer-MJoE0AAo.js",
+      "sourceFile": "sdk/ConfirmationDrawer-MJoE0AAo.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -730,8 +730,8 @@
       ]
     },
     {
-      "route": "/sdk/deviceLinkApproval-CfEiotVt.js",
-      "sourceFile": "sdk/deviceLinkApproval-CfEiotVt.js",
+      "route": "/sdk/deviceLinkApproval-x3WkiYrd.js",
+      "sourceFile": "sdk/deviceLinkApproval-x3WkiYrd.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -1138,8 +1138,8 @@
       ]
     },
     {
-      "route": "/sdk/export-viewer-host-BtrKVXxu.js",
-      "sourceFile": "sdk/export-viewer-host-BtrKVXxu.js",
+      "route": "/sdk/export-viewer-host-BSTfHhau.js",
+      "sourceFile": "sdk/export-viewer-host-BSTfHhau.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -1162,8 +1162,8 @@
       ]
     },
     {
-      "route": "/sdk/exportKeypairOperation-CGE9ZU1m.js",
-      "sourceFile": "sdk/exportKeypairOperation-CGE9ZU1m.js",
+      "route": "/sdk/exportKeypairOperation-CjST_NUK.js",
+      "sourceFile": "sdk/exportKeypairOperation-CjST_NUK.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -1210,8 +1210,8 @@
       ]
     },
     {
-      "route": "/sdk/host-DayrOrgm.js",
-      "sourceFile": "sdk/host-DayrOrgm.js",
+      "route": "/sdk/host-C51z-AxP.js",
+      "sourceFile": "sdk/host-C51z-AxP.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -1402,8 +1402,8 @@
       ]
     },
     {
-      "route": "/sdk/localOnly-BATWJj78.js",
-      "sourceFile": "sdk/localOnly-BATWJj78.js",
+      "route": "/sdk/localOnly-Xs89Xajm.js",
+      "sourceFile": "sdk/localOnly-Xs89Xajm.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -1426,8 +1426,8 @@
       ]
     },
     {
-      "route": "/sdk/mountExportPrivateKeySurface-CyHU8bVc.js",
-      "sourceFile": "sdk/mountExportPrivateKeySurface-CyHU8bVc.js",
+      "route": "/sdk/mountExportPrivateKeySurface-CsUEKeum.js",
+      "sourceFile": "sdk/mountExportPrivateKeySurface-CsUEKeum.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -1450,8 +1450,8 @@
       ]
     },
     {
-      "route": "/sdk/mountRecoveryCodeBackupSurface-C7aglQxf.js",
-      "sourceFile": "sdk/mountRecoveryCodeBackupSurface-C7aglQxf.js",
+      "route": "/sdk/mountRecoveryCodeBackupSurface-kFLo5zLk.js",
+      "sourceFile": "sdk/mountRecoveryCodeBackupSurface-kFLo5zLk.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -1690,8 +1690,8 @@
       ]
     },
     {
-      "route": "/sdk/pendingWalletRecoveryCodeBackup-Cjx-X-pP.js",
-      "sourceFile": "sdk/pendingWalletRecoveryCodeBackup-Cjx-X-pP.js",
+      "route": "/sdk/pendingWalletRecoveryCodeBackup-B-R_U34I.js",
+      "sourceFile": "sdk/pendingWalletRecoveryCodeBackup-B-R_U34I.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -1882,8 +1882,8 @@
       ]
     },
     {
-      "route": "/sdk/registration-CNLUYN-p.js",
-      "sourceFile": "sdk/registration-CNLUYN-p.js",
+      "route": "/sdk/registration-Byl4l4yZ.js",
+      "sourceFile": "sdk/registration-Byl4l4yZ.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -1906,8 +1906,8 @@
       ]
     },
     {
-      "route": "/sdk/registration-HSwOHZOo.js",
-      "sourceFile": "sdk/registration-HSwOHZOo.js",
+      "route": "/sdk/registration-C2fb9kRQ.js",
+      "sourceFile": "sdk/registration-C2fb9kRQ.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -2050,8 +2050,8 @@
       ]
     },
     {
-      "route": "/sdk/resealedEnvelopeResult-B1p5UkYg.js",
-      "sourceFile": "sdk/resealedEnvelopeResult-B1p5UkYg.js",
+      "route": "/sdk/resealedEnvelopeResult-CLW00Vbw.js",
+      "sourceFile": "sdk/resealedEnvelopeResult-CLW00Vbw.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -2122,8 +2122,8 @@
       ]
     },
     {
-      "route": "/sdk/runtime-auth-BCoj7_-G.js",
-      "sourceFile": "sdk/runtime-auth-BCoj7_-G.js",
+      "route": "/sdk/runtime-auth-ufbVur2p.js",
+      "sourceFile": "sdk/runtime-auth-ufbVur2p.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -2146,8 +2146,8 @@
       ]
     },
     {
-      "route": "/sdk/runtime-device-link-DAsq5tGT.js",
-      "sourceFile": "sdk/runtime-device-link-DAsq5tGT.js",
+      "route": "/sdk/runtime-device-link-CagI2Q62.js",
+      "sourceFile": "sdk/runtime-device-link-CagI2Q62.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -2170,8 +2170,8 @@
       ]
     },
     {
-      "route": "/sdk/runtime-ecdsa-tempo-CVh_Vwl6.js",
-      "sourceFile": "sdk/runtime-ecdsa-tempo-CVh_Vwl6.js",
+      "route": "/sdk/runtime-ecdsa-tempo-Rctxr0yM.js",
+      "sourceFile": "sdk/runtime-ecdsa-tempo-Rctxr0yM.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -2194,8 +2194,8 @@
       ]
     },
     {
-      "route": "/sdk/runtime-email-otp-BxSKK9AG.js",
-      "sourceFile": "sdk/runtime-email-otp-BxSKK9AG.js",
+      "route": "/sdk/runtime-email-otp-BQtcG-LF.js",
+      "sourceFile": "sdk/runtime-email-otp-BQtcG-LF.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -2218,8 +2218,8 @@
       ]
     },
     {
-      "route": "/sdk/runtime-export-BWnQXMzT.js",
-      "sourceFile": "sdk/runtime-export-BWnQXMzT.js",
+      "route": "/sdk/runtime-export-wTeEaqlk.js",
+      "sourceFile": "sdk/runtime-export-wTeEaqlk.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -2242,8 +2242,8 @@
       ]
     },
     {
-      "route": "/sdk/runtime-near-CuzPZrDS.js",
-      "sourceFile": "sdk/runtime-near-CuzPZrDS.js",
+      "route": "/sdk/runtime-near-59yU_3ud.js",
+      "sourceFile": "sdk/runtime-near-59yU_3ud.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -2266,8 +2266,8 @@
       ]
     },
     {
-      "route": "/sdk/runtime-preferences-B-nDWlm3.js",
-      "sourceFile": "sdk/runtime-preferences-B-nDWlm3.js",
+      "route": "/sdk/runtime-preferences-B9qLHX8W.js",
+      "sourceFile": "sdk/runtime-preferences-B9qLHX8W.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -2290,8 +2290,8 @@
       ]
     },
     {
-      "route": "/sdk/runtime-recovery-codes-DeUjQsxZ.js",
-      "sourceFile": "sdk/runtime-recovery-codes-DeUjQsxZ.js",
+      "route": "/sdk/runtime-recovery-codes-si1fGktB.js",
+      "sourceFile": "sdk/runtime-recovery-codes-si1fGktB.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -2314,8 +2314,8 @@
       ]
     },
     {
-      "route": "/sdk/runtime-recovery-DpOdEJ8N.js",
-      "sourceFile": "sdk/runtime-recovery-DpOdEJ8N.js",
+      "route": "/sdk/runtime-recovery-DNyzdMBj.js",
+      "sourceFile": "sdk/runtime-recovery-DNyzdMBj.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -2338,8 +2338,8 @@
       ]
     },
     {
-      "route": "/sdk/runtimeContext-5JcewRo3.js",
-      "sourceFile": "sdk/runtimeContext-5JcewRo3.js",
+      "route": "/sdk/runtimeContext-ByeM6Z4Z.js",
+      "sourceFile": "sdk/runtimeContext-ByeM6Z4Z.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -2458,8 +2458,8 @@
       ]
     },
     {
-      "route": "/sdk/sessionObservationRevision-JOvVF4Hf.js",
-      "sourceFile": "sdk/sessionObservationRevision-JOvVF4Hf.js",
+      "route": "/sdk/sessionObservationRevision-ihBwjS3y.js",
+      "sourceFile": "sdk/sessionObservationRevision-ihBwjS3y.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",
@@ -3466,8 +3466,8 @@
       ]
     },
     {
-      "route": "/sdk/walletRecoveryAdminProof-CvSYbyg5.js",
-      "sourceFile": "sdk/walletRecoveryAdminProof-CvSYbyg5.js",
+      "route": "/sdk/walletRecoveryAdminProof-B4Ic07jY.js",
+      "sourceFile": "sdk/walletRecoveryAdminProof-B4Ic07jY.js",
       "owner": "wallet_sdk_asset",
       "routeClass": "javascript",
       "contentType": "text/javascript; charset=utf-8",

package/dist/public/wallet-service/index.html

@@ -5,14 +5,14 @@
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>Web3Authn Wallet Service</title>
     <!-- Surface styles are external so strict CSP can keep style-src 'self' -->
-    <link rel="stylesheet" href="/sdk/wallet-ui.css?v=0.27.0" />
+    <link rel="stylesheet" href="/sdk/wallet-ui.css?v=0.28.0" />
     <!-- Minimal shims some ESM bundles expect (externalized to enable strict CSP) -->
-    <script src="/sdk/wallet-shims.js?v=0.27.0"></script>
+    <script src="/sdk/wallet-shims.js?v=0.28.0"></script>
     <!-- Hint the browser to fetch the host script earlier -->
-    <link rel="modulepreload" href="/sdk/wallet-iframe-host-runtime.js?v=0.27.0" crossorigin>
+    <link rel="modulepreload" href="/sdk/wallet-iframe-host-runtime.js?v=0.28.0" crossorigin>
   </head>
   <body>
     <!-- sdkBasePath points to the SDK root (e.g. '/sdk'). Load the host directly. -->
-    <script type="module" src="/sdk/wallet-iframe-host-runtime.js?v=0.27.0"></script>
+    <script type="module" src="/sdk/wallet-iframe-host-runtime.js?v=0.28.0"></script>
   </body>
 </html>

package/dist/types/shared-ts/src/auth/externalAuth.d.ts

@@ -0,0 +1,84 @@
+import { type WalletId } from '../utils/domainIds';
+import type { ReadonlyExclusiveUnion } from '../utils/variant';
+export declare const EXTERNAL_AUTH_PATH = "/wallet/external-auth";
+export type ExternalAuthConfiguration = ReadonlyExclusiveUnion<{
+    kind: 'disabled';
+    revision: number;
+} | {
+    kind: 'google';
+    revision: number;
+    clientId: string;
+}>;
+export declare function parseExternalAuthConfiguration(raw: unknown): ExternalAuthConfiguration;
+type ExternalAuthFailureCode = 'invalid_request' | 'invalid_credential' | 'access_denied' | 'expired' | 'superseded' | 'unavailable' | 'rate_limited';
+export type ExternalAuthResult<T> = ReadonlyExclusiveUnion<{
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    code: ExternalAuthFailureCode;
+    message: string;
+}>;
+export type ExternalAuthenticateInput = ReadonlyExclusiveUnion<{
+    method: 'google';
+    walletId: string;
+    idToken: string;
+} | {
+    method: 'handoff';
+    walletId: string;
+    attemptId: string;
+    code: string;
+}>;
+export type ExternalAuthAttempt = Readonly<{
+    attemptId: string;
+    walletId: WalletId;
+    expiresAtMs: number;
+}>;
+export type ExternalAuthCommand = ReadonlyExclusiveUnion<{
+    action: 'authenticate';
+    input: ExternalAuthenticateInput;
+} | {
+    action: 'prepare';
+    walletId: string;
+} | {
+    action: 'associate';
+    walletId: string;
+    idToken: string;
+} | {
+    action: 'unlink';
+    walletId: string;
+    associationId: string;
+}>;
+export declare function parseExternalAuthCommand(raw: unknown): ExternalAuthCommand;
+export type ExternalWalletAuthentication = Readonly<{
+    kind: 'external_authenticated';
+    walletId: WalletId;
+    sessionId: string;
+    associationId: string;
+    environmentId: string;
+    provider: 'google';
+    permission: 'wallet_settings_read';
+    expiresAtMs: number;
+    authMethod?: never;
+}>;
+export type ExternalWalletSettings = Readonly<{
+    authentication: ExternalWalletAuthentication;
+    accounts: readonly Readonly<{
+        family: 'ed25519' | 'ecdsa';
+        address: string;
+        publicKey: string;
+    }>[];
+    methods: readonly Readonly<{
+        id: string;
+        kind: 'passkey' | 'email_otp' | 'voiceid';
+    }>[];
+    devices: readonly Readonly<{
+        id: string;
+    }>[];
+}>;
+export declare function parseExternalWalletAuthentication(value: unknown): ExternalWalletAuthentication;
+export declare function externalAuthFailure(code: ExternalAuthFailureCode): ExternalAuthResult<never>;
+export declare function parseExternalAuthFailure(value: unknown): ExternalAuthResult<never>;
+export declare function parseExternalWalletSettings(value: unknown): ExternalWalletSettings;
+export {};
+//# sourceMappingURL=externalAuth.d.ts.map