@seams/wallet 0.29.0 → 0.30.0

package/dist/public/sdk/{authorization-gVWwKwav.js → authorization-D_NueqAv.js}

@@ -1 +1 @@
-import{C as e,E as t,M as n,N as r,O as i,S as a,g as o,i as s,k as c,p as l}from"./domainIds-t1lp25yU.js";import{g as u,h as d}from"./digests-BIaE0DMd.js";import{a as f,c as p,d as m,o as ee,u as te}from"./participants-BXdREC5k.js";import{t as h}from"./walletRegistrationSetupPrewarm-CEvGKQSg.js";import{r as ne}from"./base64-BmKR3UqU.js";import{s as re}from"./walletDbName-Ca0rCq5r.js";import{X as ie,i as ae,n as oe,r as se}from"./activeWalletSession-BJ4B-nJo.js";import{d as ce,f as le,i as ue,r as de}from"./signingSessionSeal-BFOBKj-J.js";import{d as g,g as fe,h as _,m as v}from"./capabilityKinds-DVlGMspk.js";import{r as pe}from"./canonicalPrimitives-Jd3i_Ngz.js";import{n as me,r as he}from"./signerDomain-D-EUTlLK.js";import{c as ge,l as _e,s as ve}from"./accountIds-DGWFzEnw.js";import{O as ye,a as be,c as xe,i as Se,k as Ce,l as we,n as Te,o as Ee,s as De,t as Oe,x as y}from"./registrationIntent-C1-Kyx_-.js";import{a as b,l as ke,o as Ae,s as je}from"./ecdsaChainTarget-BoRVQtjQ.js";import{q as Me,v as Ne}from"./device-linking-_o3_fgiG.js";import{M as Pe,X as x,Y as Fe,d as Ie,q as Le}from"./walletAuthority-DbGaSw7D.js";import{F as Re,M as ze,N as Be,Nt as Ve,S as He,j as Ue,rt as S,st as We,x as Ge}from"./digestEncoding-34kXJoJr.js";import{r as Ke}from"./walletAuthMethodRecord-BW-XV4fv.js";import{r as qe}from"./registrationAuthMethodInput-C4o7yFBJ.js";import{a as Je,o as Ye}from"./signerSlot-BlijMq8C.js";import{o as Xe,u as Ze}from"./registrationSignerPlan-CeMidFme.js";import{C as Qe,E as $e,M as et,b as tt,l as nt,y as rt}from"./emailOtpEcdsaDerivationIdentity-Qd4pBwHv.js";import{n as it}from"./thresholdEcdsa-BxfOZmiR.js";var C=class{retainProof(){return!0}constructor(){this.retainProof()}},at=class extends C{kind=`use_live_runtime`;capability;materialOwner;authority;runtime;materialActivation;constructor(e){super(),this.capability=e.materialActivation.capability,this.materialOwner=e.materialActivation.materialOwner,this.authority=e.authority,this.runtime=e.runtime,this.materialActivation=e.materialActivation}},ot=class extends C{kind=`rehydrate_material_activation`;capability;materialOwner;authority;materialActivation;sealedMaterial;constructor(e){super(),this.capability=e.materialActivation.capability,this.materialOwner=e.materialActivation.materialOwner,this.authority=e.authority,this.materialActivation=e.materialActivation,this.sealedMaterial=e.sealedMaterial}},st=class extends C{kind=`reauthorize_public_anchor`;capability;materialOwner;authority;retirement;publicReauthAnchor;constructor(e){super(),this.capability=e.publicReauthAnchor.capability,this.materialOwner=e.publicReauthAnchor.materialOwner,this.authority=e.publicReauthAnchor.authority,this.retirement=e.retirement,this.publicReauthAnchor=e.publicReauthAnchor}},ct=class extends C{kind=`blocked`},lt=class extends ct{capability=null;reason=`missing_capability`},ut=class extends ct{capability;reason;constructor(e){super(),this.capability=e.capability,this.reason=e.reason}};function dt(e){return new at(e)}function ft(e){return new ot(e)}function pt(e){return new st(e)}function w(e){return e.reason===`missing_capability`?new lt:new ut(e)}function mt(e){if(!e.ok)throw Error(e.error.message);return e.value}function ht(e){return e.materialActivation}function gt(e){return mt(l(`near-ed25519-yao:${e.activationId}`))}function T(e,t){let n=e.sealed.kind===`available`?e.sealed.materialActivation.capability:e.runtime.kind===`live`?e.runtime.materialActivation.capability:e.publicLocator.kind===`available`?e.publicLocator.materialActivation.capability:null;return w(n?{capability:n,reason:t}:{capability:null,reason:`missing_capability`})}function _t(e){switch(e.publicLocator.kind){case`missing`:return w({capability:null,reason:`missing_capability`});case`retired`:return pt({retirement:e.publicLocator.retirement,publicReauthAnchor:e.publicLocator.publicReauthAnchor});case`conflict`:return T(e,`exact_record_conflict`);case`corrupt`:return T(e,`corrupt`);case`unavailable`:return w({capability:e.publicLocator.capability,reason:`persistence_unavailable`});case`available`:break;default:e.publicLocator}let t=e.publicLocator.materialActivation;if(String(t.materialOwner)!==e.publicLocator.walletId)return T(e,`binding_mismatch`);switch(e.runtime.kind){case`live`:return s(t,e.runtime.materialActivation)?dt({authority:e.publicLocator.authority,runtime:e.runtime.runtime,materialActivation:t}):T(e,`binding_mismatch`);case`absent`:break;default:e.runtime}switch(e.sealed.kind){case`missing`:return T(e,`missing_material`);case`corrupt`:return T(e,`corrupt`);case`available`:break;default:e.sealed}let n=e.sealed;if(String(n.authority.walletId)!==e.publicLocator.walletId||String(n.authority.authorityDigest)!==String(e.publicLocator.authority.authorityDigest)||String(n.materialActivation.materialOwner)!==e.publicLocator.walletId||!s(n.materialActivation,e.publicLocator.materialActivation))return T(e,`binding_mismatch`);switch(e.unlockSource.kind){case`unavailable`:return T(e,`missing_material`);case`available`:return String(e.unlockSource.authority.walletId)!==String(n.authority.walletId)||String(e.unlockSource.authority.authorityDigest)!==String(n.authority.authorityDigest)?T(e,`binding_mismatch`):ft({authority:n.authority,materialActivation:n.materialActivation,sealedMaterial:n.sealedMaterial});default:e.unlockSource}throw Error(`Unsupported Near Ed25519 unlock-source observation`)}function vt(e){let t=O(e);if(!t||!(`kind`in t)||typeof t.kind!=`string`)return null;switch(t.kind){case`owner_operations`:{if(!k(t,[`kind`,`walletId`]))return null;let e=c(Reflect.get(t,`walletId`));return e.ok?{kind:`owner_operations`,walletId:e.value}:null}case`issued`:{if(!k(t,[`kind`,`session`])||!(`session`in t))return null;let e=yt(t.session);return e===null?null:{kind:`issued`,session:e}}case`already_committed`:{if(!k(t,[`kind`,`session`,`next`])||!(`session`in t)||!(`next`in t)||t.next!==`unlock_exact_method`)return null;let e=St(t.session);return e===null?null:{kind:`already_committed`,session:e,next:t.next}}default:return null}}function yt(e){try{let t=O(e);if(!t||!k(t,[`kind`,`walletId`,`authorizationId`,`walletSessionId`,`quotaId`,`expiresAtMs`,`remainingUses`,`walletSession`,`operationCredential`,`tokens`])||!(`kind`in t)||!(`walletId`in t)||!(`authorizationId`in t)||!(`walletSessionId`in t)||!(`quotaId`in t)||!(`expiresAtMs`in t)||!(`remainingUses`in t)||!(`walletSession`in t)||!(`operationCredential`in t)||!(`tokens`in t)||t.kind!==`registration_established_wallet_session_v2`)return null;let n=c(t.walletId),r=_(t.walletSessionId),i=v(t.authorizationId),a=g(t.quotaId);if(!n.ok||!i.ok||!r.ok||!a.ok)return null;let o=D(t.expiresAtMs),s=D(t.remainingUses);if(o===null||o<=0||s===null||s<=0)return null;let l=oe(t.walletSession),u=ae(t.operationCredential);if(l.walletId!==n.value||l.authorizationId!==i.value||l.quotaId!==a.value||l.expiresAtMs!==o||u.walletSessionId!==r.value)return null;let d=Ct(t.tokens);return d===null||!bt(l,d)?null:{kind:`registration_established_wallet_session_v2`,walletId:n.value,authorizationId:i.value,walletSessionId:r.value,quotaId:a.value,expiresAtMs:o,remainingUses:s,walletSession:l,operationCredential:u,tokens:d}}catch{return null}}function bt(e,t){switch(t.kind){case`evm_family_ecdsa`:return E(e,`ecdsa_secp256k1`,t.ecdsa.materialActivation)&&!xt(e,`ecdsa_secp256k1`);case`near_ed25519`:return E(e,`ed25519`,t.ed25519.materialActivation)&&!xt(e,`ed25519`);case`near_ed25519_and_evm_family_ecdsa`:return E(e,`ecdsa_secp256k1`,t.ecdsa.materialActivation)&&E(e,`ed25519`,t.ed25519.materialActivation)&&!xt(e,`ed25519`,`ecdsa_secp256k1`);default:return!1}}function E(e,t,n){return e.capabilitySubjects.some(e=>e.kind===`sign`&&e.keyFamily===t&&s(e.materialActivation,n))}function xt(e,...t){return e.capabilitySubjects.some(e=>e.kind===`sign`&&!t.includes(e.keyFamily))}function St(e){try{let t=O(e);if(!t||!k(t,[`kind`,`walletId`,`authorizationId`,`walletSessionId`,`quotaId`,`expiresAtMs`,`remainingUses`,`walletSession`,`tokens`])||!(`kind`in t)||!(`walletId`in t)||!(`authorizationId`in t)||!(`walletSessionId`in t)||!(`quotaId`in t)||!(`expiresAtMs`in t)||!(`remainingUses`in t)||!(`walletSession`in t)||!(`tokens`in t)||t.kind!==`registration_established_wallet_session_projection_v2`)return null;let n=c(t.walletId),r=v(t.authorizationId),i=_(t.walletSessionId),a=g(t.quotaId);if(!n.ok||!r.ok||!i.ok||!a.ok||new Set([r.value,i.value,a.value]).size!==3)return null;let o=D(t.expiresAtMs),s=D(t.remainingUses),l=oe(t.walletSession),u=Ct(t.tokens);return o===null||o<=0||s===null||u===null||l.walletId!==n.value||l.authorizationId!==r.value||l.quotaId!==a.value||l.expiresAtMs!==o||!bt(l,u)?null:{kind:`registration_established_wallet_session_projection_v2`,walletId:n.value,authorizationId:r.value,walletSessionId:i.value,quotaId:a.value,expiresAtMs:o,remainingUses:s,walletSession:l,tokens:u}}catch{return null}}function Ct(e){let t=O(e);if(!t||!(`kind`in t)||typeof t.kind!=`string`)return null;switch(t.kind){case`evm_family_ecdsa`:{if(!k(t,[`kind`,`ecdsa`])||!(`ecdsa`in t))return null;let e=wt(t.ecdsa);return e===null?null:{kind:`evm_family_ecdsa`,ecdsa:e}}case`near_ed25519`:{if(!k(t,[`kind`,`ed25519`])||!(`ed25519`in t))return null;let e=Tt(t.ed25519);return e===null?null:{kind:`near_ed25519`,ed25519:e}}case`near_ed25519_and_evm_family_ecdsa`:{if(!k(t,[`kind`,`ecdsa`,`ed25519`])||!(`ecdsa`in t)||!(`ed25519`in t))return null;let e=wt(t.ecdsa),n=Tt(t.ed25519);return e===null||n===null?null:{kind:`near_ed25519_and_evm_family_ecdsa`,ecdsa:e,ed25519:n}}default:return null}}function wt(e){let t=O(e);if(!t||!k(t,[`sessionKind`,`thresholdSessionId`,`keyHandle`,`runtimePolicyScope`,`materialActivation`,`routerAbEcdsaDerivationNormalSigning`])||!(`sessionKind`in t)||!(`thresholdSessionId`in t)||!(`keyHandle`in t)||!(`runtimePolicyScope`in t)||!(`materialActivation`in t)||!(`routerAbEcdsaDerivationNormalSigning`in t)||t.sessionKind!==`credential_free_projection_v2`)return null;let n=a(t.thresholdSessionId);if(!n.ok)return null;try{let e=et(t.keyHandle),r=Et(t.runtimePolicyScope),i=o(t.materialActivation);if(!i.ok)return null;let a=Ge(t.routerAbEcdsaDerivationNormalSigning);if(!a)return null;let c=Ve(a.scope.material_activation);return s(i.value,c)?{sessionKind:`credential_free_projection_v2`,thresholdSessionId:n.value,keyHandle:e,runtimePolicyScope:r,materialActivation:i.value,routerAbEcdsaDerivationNormalSigning:a}:null}catch{return null}}function Tt(t){let n=O(t);if(!n||!k(n,[`sessionKind`,`thresholdSessionId`,`nearAccountId`,`nearEd25519SigningKeyId`,`runtimePolicyScope`,`materialActivation`,`routerAbNormalSigning`])||!(`sessionKind`in n)||!(`thresholdSessionId`in n)||!(`nearAccountId`in n)||!(`nearEd25519SigningKeyId`in n)||!(`runtimePolicyScope`in n)||!(`materialActivation`in n)||!(`routerAbNormalSigning`in n)||n.sessionKind!==`credential_free_projection_v2`)return null;let r=e(n.thresholdSessionId),i=_e(n.nearAccountId);if(!r.ok||!i.ok)return null;try{let e=Je(n.nearEd25519SigningKeyId),t=Et(n.runtimePolicyScope),a=o(n.materialActivation);if(!a.ok)return null;let s=ce(n.routerAbNormalSigning);return s?{sessionKind:`credential_free_projection_v2`,thresholdSessionId:r.value,nearAccountId:i.value,nearEd25519SigningKeyId:e,runtimePolicyScope:t,materialActivation:a.value,routerAbNormalSigning:s}:null}catch{return null}}function Et(e){let t=O(e);if(!t||!k(t,[`orgId`,`projectId`,`envId`,`signingRootVersion`])||!(`orgId`in t)||!(`projectId`in t)||!(`envId`in t)||!(`signingRootVersion`in t))throw Error(`runtime policy scope projection is invalid`);return ie({orgId:t.orgId,projectId:t.projectId,envId:t.envId,signingRootVersion:t.signingRootVersion})}function D(e){return typeof e==`number`&&Number.isSafeInteger(e)&&e>=0?e:null}function O(e){return typeof e==`object`&&e&&!Array.isArray(e)?e:null}function k(e,t){return Object.keys(e).length===t.length&&t.every(t=>Object.prototype.hasOwnProperty.call(e,t))}function Dt(e){let t=String(e||``).trim().toLowerCase();return/^0x[0-9a-f]{40}$/.test(t)?t:``}const Ot=/^ederivation-key-[A-Za-z0-9_-]+$/;function A(e){let t=String(e||``).trim();return t?Ot.test(t)?{kind:`resolved`,keyHandle:t}:{kind:`invalid`}:{kind:`missing`}}function kt(e){let t=A(e.keyHandle),n=d(e.sharedEvmFamilyKey)?A(e.sharedEvmFamilyKey.keyHandle):{kind:`missing`};return t.kind===`missing`?{kind:`blocked`,reason:`missing_key_handle`}:t.kind===`invalid`||n.kind===`invalid`?{kind:`blocked`,reason:`invalid_key_handle`}:n.kind===`resolved`&&t.keyHandle!==n.keyHandle?{kind:`blocked`,reason:`duplicate_key_handles`}:{kind:`resolved`,keyHandle:t.keyHandle}}function At(e){let t=(d(e.metadata.sharedEvmFamilyKey)?e.metadata.sharedEvmFamilyKey:null)||e.metadata,n=String(t.thresholdEcdsaPublicKeyB64u||e.metadata.thresholdEcdsaPublicKeyB64u||``).trim();if(!n)return null;let r=String(t.walletId||``).trim();if(!r)return null;try{$e(n);let i=t.ecdsaThresholdKeyId||e.metadata.ecdsaThresholdKeyId,a=t.signingRootId||e.metadata.signingRootId,o=t.signingRootVersion||e.metadata.signingRootVersion,s=t.participantIds||e.metadata.participantIds,c=t.thresholdOwnerAddress||e.metadata.thresholdOwnerAddress||e.metadata.ownerAddress;return nt({walletId:r,keyHandle:e.keyHandle,chainTarget:e.chainTarget,ecdsaThresholdKeyId:i,signingRootId:a,signingRootVersion:o,participantIds:s,thresholdOwnerAddress:c,thresholdEcdsaPublicKeyB64u:n})}catch{return null}}function jt(e){try{let t=He(e.raw);return String(t.client_id)!==String(e.walletId)||t.public_identity.threshold_public_key33_b64u!==e.thresholdEcdsaPublicKeyB64u?null:t}catch{return null}}function Mt(e){let t=e.signer;if(t.status!==`active`||t.signerKind!==he.thresholdEcdsa||t.signerAuthMethod!==me.passkey)return{kind:`skipped`};let n=d(t.metadata)?t.metadata:{};if(!d(n.chainTarget))return{kind:`blocked`,targetKey:``,reason:`missing_chain_target`};let r;try{r=b(n.chainTarget)}catch{return{kind:`blocked`,targetKey:``,reason:`invalid_chain_target`}}if(!e.configuredTargets.some(e=>je(e,r)))return{kind:`skipped`};let i=Ae(r),a=kt(n);if(a.kind===`blocked`)return{kind:`blocked`,targetKey:i,reason:a.reason};let o=At({metadata:n,keyHandle:a.keyHandle,chainTarget:r});if(!o)return{kind:`key_facts_inventory_required`,chainTarget:r,targetKey:i,keyHandle:a.keyHandle,reason:`missing_key_facts`};let s=jt({raw:n.publicCapability,walletId:e.walletId,thresholdEcdsaPublicKeyB64u:o.keyFacts.thresholdEcdsaPublicKeyB64u});return{kind:`active_wallet_key`,chainTarget:r,targetKey:i,walletKey:o,publicCapability:s?{kind:`persisted_public_capability`,value:s}:{kind:`missing_public_capability`}}}function Nt(e){let{raw:t}=e;if(!d(t)||!d(t.chainTarget))return null;let n=d(t.key)?t.key:t,r;try{r=b(t.chainTarget)}catch{return null}let i=A(t.keyHandle),a=A(n.keyHandle),o=Dt(t.accountAddress),s=Dt(t.ownerAddress),c=String(n.walletId||``).trim(),l=String(n.subjectId||``).trim(),u=String(ke({walletId:e.walletId})),f=String(n.rpId||``).trim(),p=String(n.thresholdEcdsaPublicKeyB64u||t.thresholdEcdsaPublicKeyB64u||``).trim(),m=Dt(n.thresholdOwnerAddress||t.ownerAddress||t.accountAddress||t.ethereumAddress);if(i.kind!==`resolved`||a.kind!==`resolved`||a.keyHandle!==i.keyHandle||!p||!s||!o||!m||c!==String(e.walletId)||l&&l!==u||f!==e.rpId||m!==s)return null;try{let a=jt({raw:t.publicCapability,walletId:e.walletId,thresholdEcdsaPublicKeyB64u:p});if(!a)return null;let c=Qe(i.keyHandle),l=tt({record:{ecdsaThresholdKeyId:t.ecdsaThresholdKeyId}}),u=rt({signingRootId:t.signingRootId||n.signingRootId,signingRootVersion:t.signingRootVersion||n.signingRootVersion});return{accountAddress:o,ownerAddress:s,publicCapability:a,walletKey:nt({walletId:e.walletId,keyHandle:c,chainTarget:r,ecdsaThresholdKeyId:l,signingRootId:u.signingRootId,signingRootVersion:u.signingRootVersion,participantIds:n.participantIds||t.participantIds,thresholdOwnerAddress:m,thresholdEcdsaPublicKeyB64u:p})}}catch{return null}}function Pt(e){let t=[];for(let n of e.records){let r=Nt({walletId:e.walletId,rpId:e.rpId,raw:n});r&&t.push(r)}return t}function j(e){let t=String(e.value||``).trim();if(!t)throw Error(`${e.responseName} response missing ${e.field}`);return t}function M(e){if(!u(e.value))throw Error(`${e.responseName} response missing ${e.field}`);return e.value}function N(e,t,n){let r=new Set(t);for(let t of Object.keys(e))if(!r.has(t))throw Error(`${n} response contains unexpected ${t}`)}function P(e){let t=Number(e.value);if(!Number.isSafeInteger(t)||t<e.minimum)throw Error(`${e.responseName} response has invalid ${e.field}`);return t}function F(e,t){if(!Array.isArray(e)||e.length!==2)throw Error(`${t} response has invalid participantIds`);let n=P({responseName:t,field:`participantIds[0]`,value:e[0],minimum:1}),r=P({responseName:t,field:`participantIds[1]`,value:e[1],minimum:1});if(n===r)throw Error(`${t} response has duplicate participantIds`);if(n!==1||r!==2)throw Error(`${t} response has unsupported participantIds`);return[n,r]}function I(e,t){let n=r(e);if(!n.ok)throw Error(`${t} response has invalid rpId`);return n.value}function Ft(e,t){let n=M({responseName:t,field:`authorityScope`,value:e});switch(n.kind){case`passkey_rp`:return N(n,[`kind`,`rpId`],t),{kind:`passkey_rp`,rpId:I(n.rpId,t)};case`email_otp`:if(N(n,[`kind`,`provider`,`providerUserId`],t),n.provider!==`google`&&n.provider!==`email`)throw Error(`${t} response has invalid authorityScope provider`);return{kind:`email_otp`,provider:n.provider,providerUserId:j({responseName:t,field:`authorityScope.providerUserId`,value:n.providerUserId})};default:throw Error(`${t} response has invalid authorityScope`)}}function It(e,t){let n=M({responseName:t,field:`ed25519`,value:e});if(N(n,[`signerSlot`,`nearAccountId`,`nearEd25519SigningKeyId`,`publicKey`,`relayerKeyId`,`keyVersion`,`recoveryExportCapable`,`participantIds`],t),n.recoveryExportCapable!==!0)throw Error(`${t} response is not recovery/export capable`);return{signerSlot:P({responseName:t,field:`ed25519.signerSlot`,value:n.signerSlot,minimum:1}),nearAccountId:j({responseName:t,field:`ed25519.nearAccountId`,value:n.nearAccountId}),nearEd25519SigningKeyId:j({responseName:t,field:`ed25519.nearEd25519SigningKeyId`,value:n.nearEd25519SigningKeyId}),publicKey:j({responseName:t,field:`ed25519.publicKey`,value:n.publicKey}),relayerKeyId:j({responseName:t,field:`ed25519.relayerKeyId`,value:n.relayerKeyId}),keyVersion:j({responseName:t,field:`ed25519.keyVersion`,value:n.keyVersion}),recoveryExportCapable:!0,participantIds:F(n.participantIds,t)}}function Lt(t,n){let r=M({responseName:n,field:`ed25519`,value:t});N(r,[`signerSlot`,`nearAccountId`,`nearEd25519SigningKeyId`,`publicKey`,`relayerKeyId`,`keyVersion`,`recoveryExportCapable`,`participantIds`,`thresholdSessionId`,`runtimePolicyScope`,`routerAbNormalSigning`],n);let i=It({signerSlot:r.signerSlot,nearAccountId:r.nearAccountId,nearEd25519SigningKeyId:r.nearEd25519SigningKeyId,publicKey:r.publicKey,relayerKeyId:r.relayerKeyId,keyVersion:r.keyVersion,recoveryExportCapable:r.recoveryExportCapable,participantIds:r.participantIds},n),a=e(r.thresholdSessionId);if(!a.ok)throw Error(`${n} response has invalid ed25519.thresholdSessionId`);let o=re(r.runtimePolicyScope);if(!o)throw Error(`${n} response has invalid ed25519.runtimePolicyScope`);return{...i,thresholdSessionId:a.value,runtimePolicyScope:o,routerAbNormalSigning:le(r.routerAbNormalSigning)}}function L(e,t){let n=M({responseName:t,field:`chainTarget`,value:e});switch(n.kind){case`evm`:return N(n,[`kind`,`namespace`,`chainId`,`networkSlug`],t),b(n);case`tempo`:return N(n,[`kind`,`chainId`,`networkSlug`],t),b(n);default:throw Error(`${t} response has invalid chainTarget kind`)}}function Rt(e,t){let n=M({responseName:t,field:`ecdsa.walletKeys[]`,value:e});if(N(n,[`keyScope`,`chainTarget`,`walletId`,`evmFamilySigningKeySlotId`,`keyHandle`,`ecdsaThresholdKeyId`,`signingRootId`,`signingRootVersion`,`thresholdEcdsaPublicKeyB64u`,`thresholdOwnerAddress`,`relayerKeyId`,`relayerVerifyingShareB64u`,`contextBinding32B64u`,`derivationClientSharePublicKey33B64u`,`clientShareRetryCounter`,`relayerShareRetryCounter`,`participantIds`,`publicCapability`],t),n.keyScope!==`evm-family`)throw Error(`${t} response has invalid keyScope`);return{keyScope:`evm-family`,chainTarget:L(n.chainTarget,t),walletId:j({responseName:t,field:`walletId`,value:n.walletId}),evmFamilySigningKeySlotId:j({responseName:t,field:`evmFamilySigningKeySlotId`,value:n.evmFamilySigningKeySlotId}),keyHandle:j({responseName:t,field:`keyHandle`,value:n.keyHandle}),ecdsaThresholdKeyId:j({responseName:t,field:`ecdsaThresholdKeyId`,value:n.ecdsaThresholdKeyId}),signingRootId:j({responseName:t,field:`signingRootId`,value:n.signingRootId}),signingRootVersion:j({responseName:t,field:`signingRootVersion`,value:n.signingRootVersion}),thresholdEcdsaPublicKeyB64u:j({responseName:t,field:`thresholdEcdsaPublicKeyB64u`,value:n.thresholdEcdsaPublicKeyB64u}),thresholdOwnerAddress:j({responseName:t,field:`thresholdOwnerAddress`,value:n.thresholdOwnerAddress}),relayerKeyId:j({responseName:t,field:`relayerKeyId`,value:n.relayerKeyId}),relayerVerifyingShareB64u:j({responseName:t,field:`relayerVerifyingShareB64u`,value:n.relayerVerifyingShareB64u}),contextBinding32B64u:j({responseName:t,field:`contextBinding32B64u`,value:n.contextBinding32B64u}),derivationClientSharePublicKey33B64u:j({responseName:t,field:`derivationClientSharePublicKey33B64u`,value:n.derivationClientSharePublicKey33B64u}),clientShareRetryCounter:P({responseName:t,field:`clientShareRetryCounter`,value:n.clientShareRetryCounter,minimum:0}),relayerShareRetryCounter:P({responseName:t,field:`relayerShareRetryCounter`,value:n.relayerShareRetryCounter,minimum:0}),participantIds:F(n.participantIds,t),publicCapability:He(n.publicCapability)}}function zt(e){switch(e){case`registrationIntentLoadMs`:case`registrationIntentDigestMs`:case`registrationIntentConsumeMs`:case`registrationAttemptGateMs`:case`registrationPreparationPersistMs`:case`registrationPreparationLoadMs`:case`registrationPreparationConsumeMs`:case`registrationPreparationScopeCheckMs`:case`registrationAuthorityVerifyMs`:case`registrationEcdsaPrepareMs`:case`registrationCeremonyPersistMs`:case`registerPrepareTotalMs`:case`registerStartTotalMs`:case`registrationEcdsaRespondMs`:case`registrationFinalizeReplayLoadMs`:case`registrationCeremonyLoadMs`:case`registrationEcdsaBootstrapVerifyMs`:case`sponsoredNearAccountCreateMs`:case`registrationKeygenMs`:case`registrationEmailOtpEnrollmentPlanMs`:case`relaySessionMintMs`:case`relayGoogleEmailOtpActivationPlanMs`:case`relayPersistenceMs`:case`registrationFinalizeReplayCacheMs`:case`registerFinalizeTotalMs`:return e;default:throw Error(`Wallet registration finalize response has invalid diagnostics timing name`)}}function Bt(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`registrationDiagnostics`,value:e});if(N(n,[`kind`,`route`,`entries`],t),n.kind!==`wallet_registration_route_diagnostics_v1`||n.route!==`wallets_register_finalize`||!Array.isArray(n.entries))throw Error(`${t} response has invalid registrationDiagnostics`);return{kind:`wallet_registration_route_diagnostics_v1`,route:`wallets_register_finalize`,entries:n.entries.map(e=>{let n=M({responseName:t,field:`registrationDiagnostics.entries[]`,value:e});if(N(n,[`name`,`durationMs`],t),typeof n.durationMs!=`number`||!Number.isFinite(n.durationMs)||n.durationMs<0)throw Error(`${t} response has invalid diagnostics durationMs`);return{name:zt(n.name),durationMs:n.durationMs}})}}function Vt(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`authority`,value:e});N(n,[`walletId`,`factor`,`verifier`,`bindingId`],t);let r=M({responseName:t,field:`authority.factor`,value:n.factor}),i=M({responseName:t,field:`authority.verifier`,value:n.verifier});switch(r.kind){case`passkey`:N(r,[`kind`,`credentialIdB64u`],t),N(i,[`kind`,`rpId`],t);break;case`email_otp`:N(r,[`kind`,`provider`,`providerUserId`],t),N(i,[`kind`,`emailHashHex`],t);break;default:throw Error(`${t} response has invalid authority factor`)}let a=We(n);if(!a)throw Error(`${t} response has invalid authority`);return a}function Ht(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`authMethod`,value:e.response.authMethod});if(String(e.authority.walletId)!==String(e.walletId))throw Error(`${t} response authority wallet mismatch`);switch(n.kind){case`passkey`:{if(N(n,[`kind`,`credentialIdB64u`,`credentialPublicKeyB64u`],t),!S(e.authority))throw Error(`${t} response has inconsistent passkey authority`);let r=I(e.response.rpId,t),i=j({responseName:t,field:`authMethod.credentialIdB64u`,value:n.credentialIdB64u});if(String(e.authority.factor.credentialIdB64u)!==i||String(e.authority.verifier.rpId)!==String(r))throw Error(`${t} response passkey authority binding mismatch`);return{kind:`passkey`,rpId:r,authMethod:{kind:`passkey`,credentialIdB64u:i,credentialPublicKeyB64u:j({responseName:t,field:`authMethod.credentialPublicKeyB64u`,value:n.credentialPublicKeyB64u})}}}case`email_otp`:if(N(n,[`kind`,`registrationAuthorityId`],t),S(e.authority)||e.response.rpId!==void 0)throw Error(`${t} response has inconsistent email OTP authority`);return{kind:`email_otp`,authMethod:{kind:`email_otp`,registrationAuthorityId:j({responseName:t,field:`authMethod.registrationAuthorityId`,value:n.registrationAuthorityId})}};default:throw Error(`${t} response has invalid authMethod`)}}function Ut(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`accountProvisioning`,value:e});switch(n.kind){case`implicit_account`:if(N(n,[`kind`,`accountIdSource`],t),n.accountIdSource!==`ed25519_public_key`)throw Error(`${t} response has invalid implicit account provisioning`);return{kind:`implicit_account`,accountIdSource:`ed25519_public_key`};case`sponsored_named_account`:{N(n,[`kind`,`requestedAccountId`,`sponsor`],t);let e=ge(n.requestedAccountId);if(!e.ok||n.sponsor!==`relayer`)throw Error(`${t} response has invalid named account provisioning`);return{kind:`sponsored_named_account`,requestedAccountId:e.value,sponsor:`relayer`}}default:throw Error(`${t} response has invalid accountProvisioning kind`)}}function Wt(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`resolvedAccount`,value:e});switch(n.kind){case`implicit_account`:{N(n,[`kind`,`nearAccountId`,`nearEd25519SigningKeyId`],t);let e=ve(n.nearAccountId);if(!e.ok)throw Error(`${t} response has invalid implicit nearAccountId`);return{kind:`implicit_account`,nearAccountId:e.value,nearEd25519SigningKeyId:Je(n.nearEd25519SigningKeyId)}}case`sponsored_named_account`:{N(n,[`kind`,`nearAccountId`,`nearEd25519SigningKeyId`,`transactionHash`],t);let e=ge(n.nearAccountId);if(!e.ok)throw Error(`${t} response has invalid named nearAccountId`);return{kind:`sponsored_named_account`,nearAccountId:e.value,nearEd25519SigningKeyId:Je(n.nearEd25519SigningKeyId),transactionHash:j({responseName:t,field:`resolvedAccount.transactionHash`,value:n.transactionHash})}}default:throw Error(`${t} response has invalid resolvedAccount kind`)}}function Gt(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`ecdsa`,value:e.value});if(N(n,[`walletKeys`],t),!Array.isArray(n.walletKeys)||n.walletKeys.length===0)throw Error(`${t} response has invalid walletKeys`);let r=new Set;return{walletKeys:n.walletKeys.map(n=>{let i=Rt(n,t);if(i.walletId!==String(e.walletId))throw Error(`${t} response ECDSA walletId mismatch`);if(String(i.publicCapability.client_id)!==String(e.walletId)||i.publicCapability.public_identity.context_binding_b64u!==i.contextBinding32B64u||i.publicCapability.public_identity.derivation_client_share_public_key33_b64u!==i.derivationClientSharePublicKey33B64u||i.publicCapability.public_identity.threshold_public_key33_b64u!==i.thresholdEcdsaPublicKeyB64u||i.publicCapability.public_identity.client_share_retry_counter!==i.clientShareRetryCounter||i.publicCapability.public_identity.server_share_retry_counter!==i.relayerShareRetryCounter)throw Error(`${t} response ECDSA public capability mismatch`);let a=Ae(i.chainTarget);if(r.has(a))throw Error(`${t} response has duplicate ECDSA target ${a}`);return r.add(a),i})}}function Kt(e){let t=`Wallet registration finalize`,n=Ft(e.response.authorityScope,t),r=Ut(e.response.accountProvisioning),i=Wt(e.response.resolvedAccount),a=Lt(e.response.ed25519,t);if(r.kind!==i.kind||i.nearAccountId!==a.nearAccountId||i.nearEd25519SigningKeyId!==a.nearEd25519SigningKeyId)throw Error(`${t} response has inconsistent Ed25519 identity`);if(n.kind===`passkey_rp`&&(!S(e.authority)||String(e.authority.verifier.rpId)!==String(n.rpId))||n.kind===`email_otp`&&(S(e.authority)||e.authority.factor.provider!==n.provider||String(e.authority.factor.providerUserId)!==n.providerUserId))throw Error(`${t} response authorityScope mismatch`);return{authorityScope:n,accountProvisioning:r,resolvedAccount:i,ed25519:a}}function qt(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`body`,value:e.value});if(N(n,[`ok`,`walletId`,`authority`,`foundingAuthority`,`foundingAuthMethod`,`registrationDiagnostics`,`rpId`,`authMethod`,`walletCustody`,`custodyKeyManifestDigestB64u`,`kind`,`authorityScope`,`accountProvisioning`,`resolvedAccount`,`ed25519`,`ecdsa`],t),n.ok!==!0||n.kind!==e.expectedKind)throw Error(`${t} response substituted signer branch`);let r=Ye(j({responseName:t,field:`walletId`,value:n.walletId})),i=Vt(n.authority),a=Ie(n.foundingAuthority),o=Ke(n.foundingAuthMethod);if(!a.ok)throw Error(`${t} response has an invalid founding authority: ${a.error.message}`);if(a.value.state!==`active`)throw Error(`${t} response has an inactive founding authority`);if(!o)throw Error(`${t} response has an invalid founding auth method`);if(o.status!==`active`)throw Error(`${t} response has an inactive founding auth method`);if(a.value.walletId!==r||o.walletId!==r)throw Error(`${t} response changed the founding wallet identity`);if(o.walletAuthorityId!==a.value.authorityId)throw Error(`${t} response has mismatched founding authority identities`);if(o.walletAuthMethodId!==i.bindingId)throw Error(`${t} response has mismatched founding auth-method identities`);let s=Ht({response:n,walletId:r,authority:i}),c=n.registrationDiagnostics===void 0?void 0:Bt(n.registrationDiagnostics),l=n.walletCustody===void 0?{}:{walletCustody:we(n.walletCustody,t)},u=n.custodyKeyManifestDigestB64u===void 0?void 0:j({responseName:t,field:`custodyKeyManifestDigestB64u`,value:n.custodyKeyManifestDigestB64u});if(u!==void 0&&ne(u).byteLength!==32)throw Error(`${t} response has invalid custodyKeyManifestDigestB64u`);let d=u===void 0?{}:{custodyKeyManifestDigestB64u:u};switch(n.kind){case`near_ed25519`:{if(n.ecdsa!==void 0)throw Error(`${t} response mixed signer branches`);let e=Kt({response:n,authority:i});return s.kind===`passkey`?{ok:!0,walletId:r,authority:i,foundingAuthority:a.value,foundingAuthMethod:o,...c?{registrationDiagnostics:c}:{},...l,...d,rpId:s.rpId,authMethod:s.authMethod,kind:`near_ed25519`,authorityScope:e.authorityScope,accountProvisioning:e.accountProvisioning,resolvedAccount:e.resolvedAccount,ed25519:e.ed25519}:{ok:!0,walletId:r,authority:i,foundingAuthority:a.value,foundingAuthMethod:o,...c?{registrationDiagnostics:c}:{},...l,...d,authMethod:s.authMethod,kind:`near_ed25519`,authorityScope:e.authorityScope,accountProvisioning:e.accountProvisioning,resolvedAccount:e.resolvedAccount,ed25519:e.ed25519}}case`evm_family_ecdsa`:{if(n.authorityScope!==void 0||n.accountProvisioning!==void 0||n.resolvedAccount!==void 0||n.ed25519!==void 0)throw Error(`${t} response mixed signer branches`);let e=Gt({value:n.ecdsa,walletId:r});return s.kind===`passkey`?{ok:!0,walletId:r,authority:i,foundingAuthority:a.value,foundingAuthMethod:o,...c?{registrationDiagnostics:c}:{},...l,...d,rpId:s.rpId,authMethod:s.authMethod,kind:`evm_family_ecdsa`,ecdsa:e}:{ok:!0,walletId:r,authority:i,foundingAuthority:a.value,foundingAuthMethod:o,...c?{registrationDiagnostics:c}:{},...l,...d,authMethod:s.authMethod,kind:`evm_family_ecdsa`,ecdsa:e}}default:throw Error(`${t} response has invalid kind`)}}const Jt=`/wallets/register/respond`,Yt=`/wallets/register/activate`,Xt=`/wallets/register/near-provisioning`,R=`X-Seams-Environment-Id`;function Zt(e){let t=[Jt];e.evmFamilyEcdsa&&t.push(Yt),e.nearEd25519&&(e.evmFamilyEcdsa&&t.push(`/wallets/register/near-admission`),t.push(Pe,Xt,ue,de)),m(e.relayerUrl,t)}function z(e){try{return new TextEncoder().encode(String(e||``)).length}catch{return String(e||``).length}}function Qt(){try{return globalThis.__SEAMS_REGISTRATION_BENCHMARK_DIAGNOSTICS===!0}catch{return!1}}function $t(e){if(!(!e.value||typeof e.value!=`object`||Array.isArray(e.value))&&!(Object.keys(e.out).length>=64))for(let[t,n]of Object.entries(e.value)){if(Object.keys(e.out).length>=64)return;let r=e.path?`${e.path}.${t}`:t;typeof n==`string`?e.out[`${r}Bytes`]=z(n):Array.isArray(n)?e.out[`${r}Count`]=n.length:e.depth>0&&n&&typeof n==`object`&&$t({value:n,out:e.out,path:r,depth:e.depth-1})}}function en(e){let t={};return $t({value:e,out:t,path:``,depth:2}),t}function tn(e){try{return JSON.parse(e)}catch{return}}function B(e,t){if(!(typeof e!=`object`||!e||Array.isArray(e)))return Reflect.get(e,t)}async function nn(e){try{return await e.text()}catch{return`{}`}}async function V(e){let t=Date.now(),n=JSON.stringify(e.body),r=await fetch(`${te(e.relayerUrl,{trim:!1})}${e.path}`,ee({headers:{...e.headers,"X-Seams-Wallet-Protocol":`5`},body:e.body,bodyJson:n}));if(e.onServerTiming)try{e.onServerTiming(r.headers.get(`Server-Timing`))}catch{}let i=await nn(r),a=tn(i);if(Qt()&&console.info(`[Registration] wallet route payload summary`,{path:e.path,status:r.status,requestBytes:z(n),requestSizeBreakdown:en(e.body),responseBytes:z(i),responseSizeBreakdown:en(a),totalMs:Date.now()-t}),!r.ok||B(a,`ok`)===!1){let e=String(B(a,`code`)||``).trim(),t=String(B(a,`message`)||B(a,`error`)||e||`HTTP ${r.status}`);throw Object.assign(Error(t),e?{code:e}:{})}return a}const rn=[`ok`,`walletId`,`nearAccountId`,`fundedAmountYocto`],an=[`transactionHash`,`message`],on=[`ok`,`code`,`message`];function sn(e,t){if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`${t} must be an object`);return e}function cn(e,t,n,r){let i=new Set([...t,...n]),a=Object.keys(e);if(a.some(e=>!i.has(e)))throw Error(`${r} contains unexpected fields`);for(let e of t)if(!a.includes(e))throw Error(`${r}.${e} is required`)}function H(e,t){return Reflect.get(e,t)}function ln(e,t){if(typeof e!=`string`||e.trim().length===0)throw Error(`${t} must be a non-empty string`);return e.trim()}function un(e,t){if(e!==void 0){if(typeof e!=`string`)throw Error(`${t} must be a string`);return e}}function dn(e){let t=sn(e,`fund implicit NEAR account response`),n=H(t,`ok`);if(n===!0){cn(t,rn,an,`fund implicit NEAR account success response`);let e=c(H(t,`walletId`));if(!e.ok)throw Error(`fund implicit NEAR account walletId is invalid`);let n=ve(H(t,`nearAccountId`));if(!n.ok)throw Error(`fund implicit NEAR account nearAccountId is invalid`);let r=un(H(t,`transactionHash`),`fund implicit NEAR account transactionHash`),i=un(H(t,`message`),`fund implicit NEAR account message`);return{ok:!0,walletId:e.value,nearAccountId:n.value,fundedAmountYocto:ln(H(t,`fundedAmountYocto`),`fund implicit NEAR account fundedAmountYocto`),...r===void 0?{}:{transactionHash:r},...i===void 0?{}:{message:i}}}if(n===!1)return cn(t,on,[],`fund implicit NEAR account failure response`),{ok:!1,code:ln(H(t,`code`),`fund implicit NEAR account code`),message:ln(H(t,`message`),`fund implicit NEAR account message`)};throw Error(`fund implicit NEAR account response has an invalid ok discriminator`)}async function fn(e){let t=String(e.walletId||``).trim(),n=String(e.nearAccountId||``).trim(),r=String(e.nearPublicKeyStr||``).trim(),i=String(e.walletSessionToken||``).trim();if(!t)throw Error(`walletId is required for implicit NEAR account funding`);if(!n)throw Error(`nearAccountId is required for implicit NEAR account funding`);if(!r)throw Error(`nearPublicKeyStr is required for implicit NEAR account funding`);if(!i)throw Error(`walletSessionToken is required for implicit NEAR account funding`);return dn(await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/near/implicit-account/fund`,headers:f({token:i,missingMessage:`walletSessionToken is required for implicit NEAR account funding`}),body:{nearAccountId:n,nearPublicKeyStr:r}}))}function pn(e){let t=String(e||``).trim();if(!t)throw Error(`Registration preparation id is required`);return t}const mn=[`formatVersion`,`walletId`,`evmFamilySigningKeySlotId`,`ecdsaThresholdKeyId`,`signingRootId`,`signingRootVersion`,`keyScope`,`relayerKeyId`,`registrationPreparationId`,`requestId`,`thresholdSessionId`,`ttlMs`,`remainingUses`,`participantIds`,`runtimePolicyScope`];function U(e){if(e.value===null||typeof e.value!=`object`||Array.isArray(e.value))throw Error(`${e.responseName} response missing ${e.field}`);return e.value}function W(e,t,n){if(!Object.keys(e).includes(t))throw Error(`${n} is missing ${t}`);return Reflect.get(e,t)}function G(e,t,n){if(Object.keys(e).includes(t))return Reflect.get(e,t)}function K(e,t,n){let r=new Set(t);for(let t of Object.keys(e))if(!r.has(t))throw Error(`${n} contains unexpected ${t}`)}function q(e,t){if(!Array.isArray(e))throw Error(`${t} must be an array`);return e}function hn(e,t){return Object.keys(e).includes(t)}function gn(e,t){if(typeof e!=`string`||e.length===0||e.trim()!==e)throw Error(`${t} must be a non-empty canonical string`);return e}function _n(e,t,n){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<n)throw Error(`${t} must be a safe integer`);return e}function J(e,t,n){return gn(W(e,t,n),`${n}.${t}`)}function Y(e,t,n){if(hn(e,t))return gn(W(e,t,n),`${n}.${t}`)}function X(e,t,n,r){return _n(W(e,t,n),`${n}.${t}`,r)}function vn(e,t){let n=q(e,t);if(n.length===0)throw Error(`${t} must not be empty`);let r=[];for(let e=0;e<n.length;e+=1)r.push(_n(n[e],`${t}[${e}]`,1));return r}function yn(e,t){let n=vn(e,t);if(n.length!==2||n[0]!==1||n[1]!==2)throw Error(`${t} must be [1, 2]`);return[1,2]}function bn(e,t,n=!1){if(e===void 0)return;let r=`${t} runtimePolicyScope`,i=U({responseName:r,field:`value`,value:e});K(i,[`orgId`,`projectId`,`envId`,`signingRootVersion`],r);let a=Y(i,`signingRootVersion`,r);if(n&&a===void 0)throw Error(`${r}.signingRootVersion is required`);let o={orgId:J(i,`orgId`,r),projectId:J(i,`projectId`,r),envId:J(i,`envId`,r)};return a===void 0?o:{...o,signingRootVersion:a}}function xn(e,t){let n=bn(e,t,!0);if(!n||n.signingRootVersion===void 0)throw Error(`${t} runtimePolicyScope is invalid`);return{orgId:n.orgId,projectId:n.projectId,envId:n.envId,signingRootVersion:n.signingRootVersion}}function Sn(e){let t=`Wallet registration setup intent authMethod`,n=U({responseName:t,field:`value`,value:e});switch(J(n,`kind`,t)){case`passkey`:if(K(n,[`kind`,`rpId`,`authenticatorOptions`],t),!r(J(n,`rpId`,t)).ok)throw Error(`${t}.rpId is invalid`);if(!hn(n,`authenticatorOptions`))break;if(W(n,`authenticatorOptions`,t)===void 0)throw Error(`${t}.authenticatorOptions must be defined when present`);break;case`email_otp`:switch(J(n,`proofKind`,t)){case`otp_challenge`:K(n,[`kind`,`proofKind`,`email`,`providerSubject`,`otpCode`,`challengeId`],t),Y(n,`challengeId`,t),J(n,`email`,t),J(n,`providerSubject`,t),J(n,`otpCode`,t);break;case`google_sso_registration`:K(n,[`kind`,`proofKind`,`email`,`providerSubject`,`googleEmailOtpRegistrationAttemptId`,`googleEmailOtpRegistrationOfferId`,`googleEmailOtpRegistrationCandidateId`],t),J(n,`email`,t),J(n,`providerSubject`,t),J(n,`googleEmailOtpRegistrationAttemptId`,t),J(n,`googleEmailOtpRegistrationOfferId`,t),J(n,`googleEmailOtpRegistrationCandidateId`,t);break;default:throw Error(`${t}.proofKind is invalid`)}break;default:throw Error(`${t}.kind is invalid`)}let i=qe(e);if(!i)throw Error(`${t} is invalid`);return i}function Cn(e){let t=`Wallet registration setup intent accountProvisioning`,n=U({responseName:t,field:`value`,value:e}),r=J(n,`kind`,t);switch(r){case`implicit_account`:if(K(n,[`kind`,`accountIdSource`],t),J(n,`accountIdSource`,t)!==`ed25519_public_key`)throw Error(`${t}.accountIdSource is invalid`);return{kind:r,accountIdSource:`ed25519_public_key`};case`sponsored_named_account`:{if(K(n,[`kind`,`requestedAccountId`,`sponsor`],t),J(n,`sponsor`,t)!==`relayer`)throw Error(`${t}.sponsor is invalid`);let e=ge(J(n,`requestedAccountId`,t));if(!e.ok)throw Error(`${t}.requestedAccountId is invalid`);return{kind:r,requestedAccountId:e.value,sponsor:`relayer`}}default:throw Error(`${t}.kind is invalid`)}}function wn(e,t){switch(e.kind){case`evm`:return t.kind===`evm`&&e.namespace===t.namespace&&e.chainId===t.chainId&&e.networkSlug===t.networkSlug;case`tempo`:return t.kind===`tempo`&&e.chainId===t.chainId&&e.networkSlug===t.networkSlug;default:return Tn(e)}}function Tn(e){throw Error(`Unsupported wallet registration setup chain target: ${String(e)}`)}function Z(e,t){let n=U({responseName:t,field:`chainTarget`,value:e}),r=J(n,`kind`,t);switch(r){case`evm`:{if(K(n,[`kind`,`namespace`,`chainId`,`networkSlug`],t),J(n,`namespace`,t)!==`eip155`)throw Error(`${t}.namespace is invalid`);let e=X(n,`chainId`,t,1),i=Y(n,`networkSlug`,t);return i===void 0?{kind:r,namespace:`eip155`,chainId:e}:{kind:r,namespace:`eip155`,chainId:e,networkSlug:i}}case`tempo`:{K(n,[`kind`,`chainId`,`networkSlug`],t);let e=X(n,`chainId`,t,1),i=Y(n,`networkSlug`,t);return i===void 0?{kind:r,chainId:e}:{kind:r,chainId:e,networkSlug:i}}default:throw Error(`${t}.kind is invalid`)}}function En(e){try{return Z(e,`Wallet registration setup intent`)}catch{return null}}function Dn(e){let t=`Wallet registration setup intent signer`,n=U({responseName:t,field:`value`,value:e}),r=J(n,`kind`,t);switch(r){case`near_ed25519`:if(K(n,[`kind`,`accountProvisioning`,`signerSlot`,`participantIds`,`derivationVersion`],t),X(n,`derivationVersion`,t,1)!==1)throw Error(`${t}.derivationVersion is invalid`);return{kind:r,accountProvisioning:Cn(W(n,`accountProvisioning`,t)),signerSlot:X(n,`signerSlot`,t,1),participantIds:vn(W(n,`participantIds`,t),`${t}.participantIds`),derivationVersion:1};case`evm_family_ecdsa`:{K(n,[`kind`,`participantIds`,`chainTargets`],t);let e=q(W(n,`chainTargets`,t),`${t}.chainTargets`);if(e.length===0)throw Error(`${t}.chainTargets must not be empty`);let i=[];for(let n of e){let e=Z(n,`${t}.chainTargets`);if(i.some(t=>wn(t,e)))throw Error(`${t}.chainTargets contains a duplicate target`);i.push(e)}return{kind:r,participantIds:vn(W(n,`participantIds`,t),`${t}.participantIds`),chainTargets:i}}default:throw Error(`${t}.kind is invalid`)}}function On(e){let t=`Wallet registration setup intent signerSelection`,n=U({responseName:t,field:`value`,value:e});if(K(n,[`kind`,`signers`],t),J(n,`kind`,t)!==`signer_set`)throw Error(`${t}.kind is invalid`);let r=q(W(n,`signers`,t),`${t}.signers`);if(r.length===0)throw Error(`${t}.signers must not be empty`);let i=[];for(let e of r)i.push(Dn(e));return{kind:`signer_set`,signers:i}}function kn(e){let n=`Wallet registration setup intent`,r=U({responseName:n,field:`intent`,value:e});if(K(r,[`version`,`completion`,`walletId`,`authMethod`,`signerSelection`,`foundingWalletAuthMethodId`,`runtimePolicyScope`,`nonceB64u`],n),J(r,`version`,n)!==`registration_intent_v1`)throw Error(`${n}.version is invalid`);let i=J(r,`completion`,n);if(i!==`wallet_session`&&i!==`owner_operations`)throw Error(`Invalid registration completion`);let a=c(J(r,`walletId`,n));if(!a.ok)throw Error(`${n}.walletId is invalid`);let o=t(J(r,`foundingWalletAuthMethodId`,n));if(!o.ok)throw Error(`${n}.foundingWalletAuthMethodId is invalid`);let s=Sn(W(r,`authMethod`,n)),l=On(W(r,`signerSelection`,n)),u=bn(G(r,`runtimePolicyScope`,n),n),d=J(r,`nonceB64u`,n);return u===void 0?{version:`registration_intent_v1`,completion:i,walletId:a.value,authMethod:s,signerSelection:l,foundingWalletAuthMethodId:o.value,nonceB64u:d}:{version:`registration_intent_v1`,completion:i,walletId:a.value,authMethod:s,signerSelection:l,foundingWalletAuthMethodId:o.value,runtimePolicyScope:u,nonceB64u:d}}function An(e){let t=`Wallet add-signer ECDSA derivation`,n=U({responseName:t,field:`response`,value:e});if(K(n,[`ok`,`addSignerCeremonyId`,`ecdsa`],`${t} response`),W(n,`ok`,`${t} response`)!==!0)throw Error(`${t} response is not successful`);let r=U({responseName:t,field:`ecdsa`,value:W(n,`ecdsa`,`${t} response`)});if(K(r,[`kind`,`strictResult`],`${t} response ecdsa`),W(r,`kind`,`${t} response ecdsa`)!==`router_ab_ecdsa_registration_forwarded_v1`)throw Error(`${t} response kind is invalid`);return{ok:!0,addSignerCeremonyId:j({responseName:t,field:`addSignerCeremonyId`,value:W(n,`addSignerCeremonyId`,t)}),ecdsa:{kind:`router_ab_ecdsa_registration_forwarded_v1`,strictResult:Be(W(r,`strictResult`,`${t} response ecdsa`))}}}function jn(e){let t=`Wallet add-signer ECDSA activation`,n=U({responseName:t,field:`response`,value:e});if(K(n,[`ok`,`addSignerCeremonyId`,`ecdsa`],`${t} response`),W(n,`ok`,`${t} response`)!==!0)throw Error(`${t} response is not successful`);let r=U({responseName:t,field:`ecdsa`,value:W(n,`ecdsa`,`${t} response`)});if(K(r,[`kind`,`activation`,`bootstrap`],`${t} response ecdsa`),W(r,`kind`,`${t} response ecdsa`)!==`router_ab_ecdsa_registration_activated_v1`)throw Error(`${t} response kind is invalid`);return{ok:!0,addSignerCeremonyId:j({responseName:t,field:`addSignerCeremonyId`,value:W(n,`addSignerCeremonyId`,t)}),ecdsa:{kind:`router_ab_ecdsa_registration_activated_v1`,activation:Ue(W(r,`activation`,`${t} response ecdsa`)),bootstrap:it(W(r,`bootstrap`,`${t} response ecdsa`))}}}function Mn(e){return e.authMethod.kind===`email_otp`}function Nn(e){let t=`Wallet add-auth-method intent`,n=U({responseName:t,field:`body`,value:e});if(K(n,[`ok`,`intent`,`addAuthMethodIntentDigestB64u`,`addAuthMethodIntentGrant`,`expiresAtMs`],t),W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=be(W(n,`intent`,t)),i;try{i=pe(W(n,`addAuthMethodIntentDigestB64u`,t))}catch{throw Error(`${t} response has invalid addAuthMethodIntentDigestB64u`)}let a=W(n,`addAuthMethodIntentGrant`,t);if(typeof a!=`string`||!a.trim())throw Error(`${t} response is missing addAuthMethodIntentGrant`);return{ok:!0,intent:r,addAuthMethodIntentDigestB64u:i,addAuthMethodIntentGrant:Oe(a),expiresAtMs:P({responseName:t,field:`expiresAtMs`,value:W(n,`expiresAtMs`,t),minimum:1})}}function Pn(e){let t=`Wallet add-signer intent`,n=U({responseName:t,field:`body`,value:e});if(K(n,[`ok`,`intent`,`addSignerIntentDigestB64u`,`addSignerIntentGrant`,`expiresAtMs`],t),W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=Ee(W(n,`intent`,t)),i;try{i=pe(W(n,`addSignerIntentDigestB64u`,t))}catch{throw Error(`${t} response has invalid addSignerIntentDigestB64u`)}let a=W(n,`addSignerIntentGrant`,t);if(typeof a!=`string`||!a.trim())throw Error(`${t} response is missing addSignerIntentGrant`);return{ok:!0,intent:r,addSignerIntentDigestB64u:i,addSignerIntentGrant:Te(a),expiresAtMs:P({responseName:t,field:`expiresAtMs`,value:W(n,`expiresAtMs`,t),minimum:1})}}function Fn(e){let t=`Wallet add-auth-method finalize`,i=U({responseName:t,field:`body`,value:e});if(W(i,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let a=U({responseName:t,field:`authMethod`,value:W(i,`authMethod`,t)}),o=W(a,`kind`,`${t} authMethod`);if(o!==`passkey`&&o!==`email_otp`)throw Error(`${t} response has invalid authMethod kind`);let s=c(W(i,`walletId`,t));if(!s.ok)throw Error(`${t} response has invalid walletId`);let l=We(W(i,`authority`,t));if(!l)throw Error(`${t} response has invalid authority`);if(l.walletId!==s.value)throw Error(`${t} response authority wallet mismatch`);if(o===`passkey`){if(K(i,[`ok`,`walletId`,`authority`,`rpId`,`authMethod`],t),K(a,[`kind`,`status`,`credentialIdB64u`,`credentialPublicKeyB64u`,`counter`,`device`],`${t} authMethod`),W(a,`status`,t)!==`active`)throw Error(`${t} response has invalid authMethod status`);if(l.factor.kind!==`passkey`||l.verifier.kind!==`webauthn`)throw Error(`${t} response has inconsistent passkey authority`);let e=r(W(i,`rpId`,t));if(!e.ok)throw Error(`${t} response has invalid rpId`);let o=n(W(a,`credentialIdB64u`,t));if(!o.ok)throw Error(`${t} response has invalid credentialIdB64u`);let c=W(a,`credentialPublicKeyB64u`,t);if(typeof c!=`string`||!c.trim())throw Error(`${t} response is missing credentialPublicKeyB64u`);let u=W(a,`counter`,t);if(typeof u!=`number`||!Number.isSafeInteger(u)||u<0)throw Error(`${t} response has invalid counter`);let d=Ne(W(a,`device`,t));if(!d)throw Error(`${t} response has invalid device`);if(l.factor.credentialIdB64u!==o.value||l.verifier.rpId!==e.value)throw Error(`${t} response passkey authority binding mismatch`);return{ok:!0,walletId:s.value,authority:l,rpId:e.value,authMethod:{kind:`passkey`,status:`active`,credentialIdB64u:o.value,credentialPublicKeyB64u:c.trim(),counter:u,device:d}}}if(K(i,[`ok`,`walletId`,`authority`,`authMethod`],t),K(a,[`kind`,`status`],`${t} authMethod`),W(a,`status`,t)!==`active`)throw Error(`${t} response has invalid authMethod status`);if(l.factor.kind!==`email_otp`||l.verifier.kind!==`email_otp_wallet_auth_method`)throw Error(`${t} response has inconsistent email OTP authority`);return{ok:!0,walletId:s.value,authority:l,authMethod:{kind:`email_otp`,status:`active`}}}function In(e){let t=`Wallet add-auth-method start`,n=U({responseName:t,field:`body`,value:e.value});if(W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=j({responseName:t,field:`addAuthMethodCeremonyId`,value:W(n,`addAuthMethodCeremonyId`,t)}),i=Rn(W(n,`intent`,t),e.expectedIntent);return e.expectedIntent.authMethod.kind===`email_otp`?(K(n,[`ok`,`addAuthMethodCeremonyId`,`intent`,`custodyEnvelope`,`addAuthMethodCeremonyExpiresAtMs`],t),{ok:!0,addAuthMethodCeremonyId:r,intent:i,custodyEnvelope:y(W(n,`custodyEnvelope`,t)),addAuthMethodCeremonyExpiresAtMs:P({responseName:t,field:`addAuthMethodCeremonyExpiresAtMs`,value:W(n,`addAuthMethodCeremonyExpiresAtMs`,t),minimum:1})}):(K(n,[`ok`,`addAuthMethodCeremonyId`,`intent`,`custodyEnvelope`,`registration`,`addAuthMethodCeremonyExpiresAtMs`],t),{ok:!0,addAuthMethodCeremonyId:r,intent:i,custodyEnvelope:y(W(n,`custodyEnvelope`,t)),registration:Me(W(n,`registration`,t)),addAuthMethodCeremonyExpiresAtMs:P({responseName:t,field:`addAuthMethodCeremonyExpiresAtMs`,value:W(n,`addAuthMethodCeremonyExpiresAtMs`,t),minimum:1})})}function Ln(e,t){try{if(!xe(Ee(e),t))throw Error(`intent mismatch`)}catch{throw Error(`Wallet add-signer start response changed the admitted intent`)}return t}function Rn(e,t){try{if(!De(be(e),t))throw Error(`intent mismatch`)}catch{throw Error(`Wallet add-auth-method start response changed the admitted intent`)}return t}function zn(e,t){let n=U({responseName:t,field:`ecdsa.prepare`,value:e});if(K(n,mn,t),W(n,`formatVersion`,t)!==`ecdsa-derivation-role-local`||W(n,`keyScope`,t)!==`evm-family`)throw Error(`${t} response has invalid prepare discriminator`);let r=re(W(n,`runtimePolicyScope`,t));if(!r)throw Error(`${t} response has invalid runtimePolicyScope`);return{formatVersion:`ecdsa-derivation-role-local`,walletId:j({responseName:t,field:`prepare.walletId`,value:W(n,`walletId`,t)}),evmFamilySigningKeySlotId:j({responseName:t,field:`prepare.evmFamilySigningKeySlotId`,value:W(n,`evmFamilySigningKeySlotId`,t)}),ecdsaThresholdKeyId:j({responseName:t,field:`prepare.ecdsaThresholdKeyId`,value:W(n,`ecdsaThresholdKeyId`,t)}),signingRootId:j({responseName:t,field:`prepare.signingRootId`,value:W(n,`signingRootId`,t)}),signingRootVersion:j({responseName:t,field:`prepare.signingRootVersion`,value:W(n,`signingRootVersion`,t)}),keyScope:`evm-family`,relayerKeyId:j({responseName:t,field:`prepare.relayerKeyId`,value:W(n,`relayerKeyId`,t)}),registrationPreparationId:pn(j({responseName:t,field:`prepare.registrationPreparationId`,value:W(n,`registrationPreparationId`,t)})),requestId:j({responseName:t,field:`prepare.requestId`,value:W(n,`requestId`,t)}),thresholdSessionId:j({responseName:t,field:`prepare.thresholdSessionId`,value:W(n,`thresholdSessionId`,t)}),ttlMs:P({responseName:t,field:`prepare.ttlMs`,value:W(n,`ttlMs`,t),minimum:1}),remainingUses:P({responseName:t,field:`prepare.remainingUses`,value:W(n,`remainingUses`,t),minimum:0}),participantIds:[...F(W(n,`participantIds`,t),t)],runtimePolicyScope:r}}function Bn(e,t){let n=U({responseName:t,field:`ecdsa.prepare`,value:e});if(K(n,mn,t),W(n,`formatVersion`,t)!==`ecdsa-derivation-role-local`||W(n,`keyScope`,t)!==`evm-family`)throw Error(`${t} response has invalid prepare discriminator`);for(let e of[`walletId`,`evmFamilySigningKeySlotId`,`ecdsaThresholdKeyId`,`signingRootId`,`signingRootVersion`,`relayerKeyId`,`registrationPreparationId`,`requestId`,`thresholdSessionId`])J(n,e,t);X(n,`ttlMs`,t,1),X(n,`remainingUses`,t,0),yn(W(n,`participantIds`,t),`${t}.participantIds`),xn(W(n,`runtimePolicyScope`,t),t)}function Vn(e){let t=`Wallet registration setup ECDSA`,n=U({responseName:t,field:`ecdsa`,value:e});if(K(n,[`kind`,`chainTargets`,`prepare`,`strictRegistration`],t),W(n,`kind`,t)!==`evm_family_ecdsa_keygen`)throw Error(`${t} response has an invalid kind`);let r=W(n,`chainTargets`,t);if(!Array.isArray(r)||r.length===0)throw Error(`${t} response has invalid chainTargets`);let i=[];for(let e of r){let n=Z(e,`${t}.chainTargets`);if(i.some(e=>wn(e,n)))throw Error(`${t} response has duplicate chainTargets`);i.push(n)}let[a,...o]=i;if(!a)throw Error(`${t} response has invalid chainTargets`);let s=W(n,`prepare`,t);Bn(s,t);let c=zn(s,t),l=ze(W(n,`strictRegistration`,t));if(l.registration_purpose!==`wallet_registration`)throw Error(`${t} response has an invalid registration purpose`);return{kind:`evm_family_ecdsa_keygen`,chainTargets:[a,...o],prepare:c,strictRegistration:l}}function Hn(e){let t=!1,n=!1;for(let r of e.signerSelection.signers)switch(r.kind){case`near_ed25519`:t=!0;break;case`evm_family_ecdsa`:n=!0;break;default:return Un(r)}if(t&&n)return`near_ed25519_and_evm_family_ecdsa`;if(n)return`evm_family_ecdsa`;if(t)return`near_ed25519`;throw Error(`Wallet registration setup intent has no signer branch`)}function Un(e){throw Error(`Unsupported wallet registration setup signer: ${String(e)}`)}function Wn(e,t){if(e.length!==t.length)return!1;for(let n=0;n<e.length;n+=1)if(e[n]!==t[n])return!1;return!0}function Gn(e,t){return e!==void 0&&e.orgId===t.orgId&&e.projectId===t.projectId&&e.envId===t.envId&&e.signingRootVersion===t.signingRootVersion}function Kn(e,t){try{return wn(Z(e,`Wallet registration setup intent`),t)}catch{return!1}}function qn(e){let t=e.intent.signerSelection.signers.find(e=>e.kind===`evm_family_ecdsa`);if(!t)throw Error(`${e.responseName} response has no ECDSA intent branch`);if(t.chainTargets.length!==e.ecdsa.chainTargets.length||t.chainTargets.some((t,n)=>!Kn(t,e.ecdsa.chainTargets[n])))throw Error(`${e.responseName} response ECDSA chainTargets do not match intent`);if(!Wn(t.participantIds,e.ecdsa.prepare.participantIds))throw Error(`${e.responseName} response ECDSA participantIds do not match intent`);if(e.ecdsa.prepare.walletId!==String(e.walletId))throw Error(`${e.responseName} response ECDSA prepare walletId does not match response`);if(!Gn(e.intent.runtimePolicyScope,e.ecdsa.prepare.runtimePolicyScope))throw Error(`${e.responseName} response ECDSA runtimePolicyScope does not match intent`);let n=e.ecdsa.strictRegistration.lifecycle;if(n.lifecycle_id!==e.registrationCeremonyId||n.account_id!==String(e.walletId)||e.ecdsa.strictRegistration.client_id!==String(e.walletId))throw Error(`${e.responseName} response ECDSA identities do not match response`)}function Jn(e){let n=`Wallet registration setup`,r=U({responseName:n,field:`body`,value:e});if(W(r,`ok`,n)!==!0)throw Error(`${n} response is not successful`);let i=W(r,`kind`,n);if(i!==`near_ed25519`&&i!==`evm_family_ecdsa`&&i!==`near_ed25519_and_evm_family_ecdsa`)throw Error(`${n} response kind is invalid`);let a=i!==`near_ed25519`;K(r,[`ok`,`registrationCeremonyId`,`walletId`,`walletAuthMethodId`,`registrationIntentDigestB64u`,`intent`,`signedSetup`,`home`,`kind`,a?`ecdsa`:`ed25519`],n);let o=J(r,`registrationCeremonyId`,n),s=c(J(r,`walletId`,n));if(!s.ok)throw Error(`${n} response has an invalid walletId`);let l=t(J(r,`walletAuthMethodId`,n));if(!l.ok)throw Error(`${n} response has an invalid walletAuthMethodId`);let u=kn(W(r,`intent`,n));if(u.walletId!==s.value)throw Error(`${n} response walletId does not match intent`);if(u.foundingWalletAuthMethodId!==l.value)throw Error(`${n} response walletAuthMethodId does not match intent`);let d;try{d=pe(W(r,`registrationIntentDigestB64u`,n))}catch{throw Error(`${n} response has an invalid registrationIntentDigestB64u`)}let f=se(W(r,`home`,n)),p=W(r,`signedSetup`,n);if(typeof p!=`string`||!p.trim())throw Error(`${n} response missing signedSetup`);if(!a){if(Hn(u)!==i)throw Error(`${n} response kind does not match intent`);return{ok:!0,registrationCeremonyId:o,walletId:s.value,walletAuthMethodId:l.value,registrationIntentDigestB64u:d,intent:u,signedSetup:p,home:f,kind:`near_ed25519`,ed25519:Yn(W(r,`ed25519`,n),{registrationCeremonyId:o,walletId:s.value})}}let m=Vn(W(r,`ecdsa`,n));if(Hn(u)!==i)throw Error(`${n} response kind does not match intent`);return qn({responseName:n,registrationCeremonyId:o,walletId:s.value,intent:u,ecdsa:m}),{ok:!0,registrationCeremonyId:o,walletId:s.value,walletAuthMethodId:l.value,registrationIntentDigestB64u:d,intent:u,signedSetup:p,home:f,kind:i,ecdsa:m}}function Yn(e,t){let n=`Wallet registration setup ed25519`,r=U({responseName:n,field:`ed25519`,value:e}),i=W(r,`status`,n);if(i===`after_proof`)return K(r,[`status`],n),{status:`after_proof`};if(i!==`described`)throw Error(`${n} status is invalid`);K(r,[`status`,`admissionRequest`,`admissionReceipt`],n);let a=x(W(r,`admissionRequest`,n)),o=Le(W(r,`admissionReceipt`,n));if(!a.ok||!o.ok)throw Error(`${n} request or receipt is invalid`);if(a.value.scope.lifecycle_id!==t.registrationCeremonyId||a.value.scope.account_id!==t.walletId||a.value.application_binding.wallet_id!==t.walletId||o.value.binding.lifecycle.lifecycle_id!==t.registrationCeremonyId||o.value.binding.lifecycle.account_id!==t.walletId)throw Error(`${n} admission does not belong to this registration`);return{status:`described`,admissionRequest:a.value,admissionReceipt:o.value}}function Xn(e){let t=e.completion??`wallet_session`;if(t!==`wallet_session`&&t!==`owner_operations`)throw Error(`Invalid registration completion`);let n=qe(e.authMethod);if(!n)throw Error(`Wallet registration setup request authMethod is invalid`);let r=Xe(e.signerSelection);if(!r.ok)throw Error(`Wallet registration setup request signerSelection is invalid: ${r.message}`);let i=Ze(r.value,{normalizeEcdsaChainTarget:En});if(!i.ok)throw Error(`Wallet registration setup request signerSelection is invalid: ${i.message}`);return{completion:t,wallet:e.wallet??{kind:`server_allocated`},authMethod:n,signerSelection:i.value}}function Zn(e,t){let n={version:`registration_intent_v1`,completion:t.completion,walletId:e.walletId,authMethod:t.authMethod,signerSelection:t.signerSelection,foundingWalletAuthMethodId:e.foundingWalletAuthMethodId,nonceB64u:e.nonceB64u};return e.runtimePolicyScope===void 0?n:{...n,runtimePolicyScope:e.runtimePolicyScope}}async function Qn(e){if(e.requestedWallet?.kind===`provided`&&String(e.requestedWallet.walletId)!==e.response.walletId)throw Error(`Wallet registration setup response walletId does not match request`);if(await Se(e.response.intent)!==e.response.registrationIntentDigestB64u)throw Error(`Wallet registration setup response digest does not match intent`);if(await Se(Zn(e.response.intent,e.request))!==e.response.registrationIntentDigestB64u)throw Error(`Wallet registration setup response intent does not match request`)}function $n(e,t){let n=`Wallet add-signer ECDSA start`,r=U({responseName:n,field:`ecdsa`,value:e});K(r,[`kind`,`chainTargets`,`prepare`,`strictRegistration`,`custodyEnvelope`],n);let i=W(r,`kind`,n),a=W(r,`chainTargets`,n);if(i!==`evm_family_ecdsa_keygen`||!Array.isArray(a))throw Error(`${n} response has invalid payload`);if(t.signerSelection.mode!==`ecdsa`)throw Error(`${n} response substituted signer branch`);let o=t.signerSelection.ecdsa.chainTargets;if(a.length!==o.length)throw Error(`${n} response changed target count`);let s=[];for(let e=0;e<a.length;e+=1){let t=a[e],r=L(t,n),i=o[e];if(!i||!je(r,L(i,n)))throw Error(`${n} response changed chainTarget`);s.push(r)}let[c,...l]=s;if(!c)throw Error(`${n} response requires an EVM-family target`);let u=zn(W(r,`prepare`,n),n),d=ze(W(r,`strictRegistration`,n));if(d.registration_purpose!==`wallet_add_signer`)throw Error(`${n} response has invalid registration purpose`);return{kind:`evm_family_ecdsa_keygen`,chainTargets:[c,...l],prepare:u,strictRegistration:d}}function er(e){let t=`Wallet add-signer start`,n=U({responseName:t,field:`body`,value:e.value});if(K(n,[`ok`,`addSignerCeremonyId`,`intent`,`authorizationKind`,`kind`,`ed25519`,`ecdsa`],t),W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=j({responseName:t,field:`addSignerCeremonyId`,value:W(n,`addSignerCeremonyId`,t)}),i=Ln(W(n,`intent`,t),e.expectedIntent),a=W(n,`authorizationKind`,t);if(a!==`webauthn_assertion`)throw Error(`${t} response has invalid authorization kind`);switch(W(n,`kind`,t)){case`near_ed25519`:{if(a!==`webauthn_assertion`||i.signerSelection.mode!==`ed25519`||G(n,`ecdsa`,t)!==void 0)throw Error(`${t} response substituted signer branch`);let e=U({responseName:t,field:`ed25519`,value:W(n,`ed25519`,t)});K(e,[`admissionRequest`,`custodyEnvelope`],t);let o=x(W(e,`admissionRequest`,t));if(!o.ok)throw Error(o.message);return{ok:!0,addSignerCeremonyId:r,intent:i,authorizationKind:`webauthn_assertion`,kind:`near_ed25519`,ed25519:{admissionRequest:o.value,custodyEnvelope:y(W(e,`custodyEnvelope`,t))}}}case`evm_family_ecdsa`:{if(i.signerSelection.mode!==`ecdsa`||G(n,`ed25519`,t)!==void 0)throw Error(`${t} response substituted signer branch`);let e=W(n,`ecdsa`,t),a=$n(e,i),o=U({responseName:t,field:`ecdsa`,value:e});return{ok:!0,addSignerCeremonyId:r,intent:i,authorizationKind:`webauthn_assertion`,kind:`evm_family_ecdsa`,ecdsa:{...a,custodyEnvelope:y(W(o,`custodyEnvelope`,t))}}}default:throw Error(`${t} response has invalid kind`)}}function tr(e){let t=`Wallet add-signer finalize`,n=U({responseName:t,field:`body`,value:e.value});K(n,[`ok`,`walletId`,`kind`,`rpId`,`credentialIdB64u`,`ed25519`,`ecdsa`,`authority`],t);let r=W(n,`ok`,t),i=W(n,`kind`,t);if(r!==!0||i!==e.expectedKind)throw Error(`${t} response substituted signer branch`);let a=Ye(j({responseName:t,field:`walletId`,value:W(n,`walletId`,t)})),o=I(W(n,`rpId`,t),t);switch(i){case`near_ed25519`:{if(G(n,`ecdsa`,t)!==void 0||G(n,`authority`,t)!==void 0)throw Error(`${t} response mixed signer branches`);let e=It(W(n,`ed25519`,t),`Wallet add-signer Ed25519 finalize`);return{ok:!0,walletId:a,kind:`near_ed25519`,rpId:o,credentialIdB64u:j({responseName:t,field:`credentialIdB64u`,value:W(n,`credentialIdB64u`,t)}),ed25519:e}}case`evm_family_ecdsa`:{if(G(n,`ed25519`,t)!==void 0||G(n,`credentialIdB64u`,t)!==void 0)throw Error(`${t} response mixed signer branches`);let e=U({responseName:t,field:`ecdsa`,value:W(n,`ecdsa`,t)});K(e,[`walletKeys`],t);let r=q(W(e,`walletKeys`,t),`${t} walletKeys`);if(r.length===0)throw Error(`${t} response has invalid walletKeys`);let i=Ie(W(n,`authority`,t));if(!i.ok||i.value.state!==`active`||i.value.walletId!==a)throw Error(`${t} response has invalid authority`);return{ok:!0,walletId:a,kind:`evm_family_ecdsa`,rpId:o,ecdsa:{walletKeys:r.map(nr)},authority:i.value}}default:throw Error(`${t} response has invalid kind`)}}function nr(e){return Rt(e,`Wallet add-signer ECDSA finalize`)}function Q(e){let t=String(e.expected||``).trim(),n=String(e.actual||``).trim();if(!t||!n)throw Error(`ECDSA registration bootstrap returned incomplete ${e.field}`);if(t!==n)throw Error(`ECDSA registration bootstrap ${e.field} mismatch`);return n}function rr(e){let t=e.expected.map(e=>Math.floor(Number(e))),n=e.actual.map(e=>Math.floor(Number(e)));if(t.length===0||n.length===0||t.some(e=>!Number.isSafeInteger(e)||e<=0)||n.some(e=>!Number.isSafeInteger(e)||e<=0))throw Error(`ECDSA registration bootstrap returned incomplete participantIds`);if(t.length!==n.length||t.some((e,t)=>e!==n[t]))throw Error(`ECDSA registration bootstrap participantIds mismatch`);return n}function ir(e){let t=e.clientBootstrap,n=e.serverBootstrap;Q({field:`derivationClientSharePublicKey33B64u`,expected:t.derivationClientSharePublicKey33B64u,actual:n.publicIdentity.derivationClientSharePublicKey33B64u});let r=Q({field:`contextBinding32B64u`,expected:t.contextBinding32B64u,actual:n.contextBinding32B64u}),i=Q({field:`walletId`,expected:t.walletId,actual:n.walletId}),a=Q({field:`evmFamilySigningKeySlotId`,expected:t.evmFamilySigningKeySlotId,actual:n.evmFamilySigningKeySlotId});Q({field:`activationEpoch`,expected:e.activationEpoch,actual:n.activationEpoch});let o=rr({expected:t.participantIds,actual:n.participantIds}),s=Re(n.routerAbEcdsaDerivationNormalSigning),c=String(n.ecdsaThresholdKeyId||``).trim(),l=String(n.keyHandle||``).trim(),u=String(n.signingRootId||``).trim(),d=String(n.signingRootVersion||``).trim(),f=String(n.applicationBindingDigestB64u||``).trim(),p=String(n.thresholdEcdsaPublicKeyB64u||``).trim(),m=String(n.ethereumAddress||``).trim(),ee=String(n.relayerKeyId||``).trim(),te=String(n.relayerVerifyingShareB64u||``).trim(),h=Math.floor(Number(n.relayerShareRetryCounter));if(!i||!a||!l||!c||!u||!d||!f||!p||!m||!ee||!te||!Number.isSafeInteger(h)||h<0||!o.length||o.some(e=>!Number.isSafeInteger(e)||e<=0))throw Error(`ECDSA registration bootstrap returned incomplete session material`);return{walletId:i,evmFamilySigningKeySlotId:a,ecdsaThresholdKeyId:c,relayerKeyId:ee,applicationBindingDigestB64u:f,contextBinding32B64u:r,publicIdentity:n.publicIdentity,relayerShareRetryCounter:h,keyHandle:l,signingRootId:u,signingRootVersion:d,thresholdEcdsaPublicKeyB64u:p,ethereumAddress:m,relayerVerifyingShareB64u:te,participantIds:o,routerAbEcdsaDerivationNormalSigning:s}}function ar(e){let t=`Wallet ECDSA key-facts inventory`,n=U({responseName:t,field:`body`,value:e.value});if(K(n,[`ok`,`ecdsaKeyIdentityTargets`,`diagnostics`],t),W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=q(W(n,`ecdsaKeyIdentityTargets`,t),`${t} ecdsaKeyIdentityTargets`);return{ok:!0,records:Pt({walletId:e.walletId,rpId:e.rpId,records:r}),diagnostics:W(n,`diagnostics`,t)}}async function or(e){let t=String(e.auth?.publishableKey||``).trim(),n=String(e.auth?.environmentId||``).trim();if(!t||!n)return{ok:!1,code:`invalid_body`,message:`registration setup requires a publishable key and environment id`};let r=Xn(e.request),i=await Ce({relayerUrl:e.relayerUrl,publishableKey:t,environmentId:n}),a=await ye.begin(i,r),o=Jn(await V({relayerUrl:e.relayerUrl,path:h,headers:{...e.headers,Authorization:`Bearer ${t}`,[R]:n},body:{registrationOperationId:a.operationId,completion:r.completion,wallet:r.wallet,signerSelection:r.signerSelection,authMethod:r.authMethod},...e.onServerTiming?{onServerTiming:e.onServerTiming}:{}}));return o.ok?(await Qn({response:o,...e.request.wallet?{requestedWallet:e.request.wallet}:{},request:r}),await ye.accept(a,o),o):o}async function sr(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-signer intent`);let n=String(e.auth.publishableKey||``).trim(),r=String(e.auth.environmentId||``).trim();if(!n||!r)throw Error(`add-signer intent requires a publishable key and environment id`);return Pn(await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/intent`,headers:{Authorization:`Bearer ${n}`,[R]:r},body:e.request}))}function cr(e){let t=`Wallet auth-method revoke`,n=U({responseName:t,field:`body`,value:e});if(W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=c(W(n,`walletId`,t));if(!r.ok)throw Error(`${t} response has invalid walletId`);let i=U({responseName:t,field:`authMethod`,value:W(n,`authMethod`,t)});if(K(i,[`kind`,`status`],`${t} response authMethod`),W(i,`status`,t)!==`revoked`)throw Error(`${t} response has invalid authMethod status`);let a=W(i,`kind`,t);switch(a){case`passkey`:return K(n,[`ok`,`walletId`,`authMethod`,`rpId`],t),{ok:!0,walletId:r.value,authMethod:{kind:`passkey`,status:`revoked`},rpId:I(W(n,`rpId`,t),t)};case`email_otp`:case`voiceid`:return K(n,[`ok`,`walletId`,`authMethod`],t),{ok:!0,walletId:r.value,authMethod:{kind:a,status:`revoked`}};default:throw Error(`${t} response has invalid authMethod kind`)}}async function lr(e){let t=String(e.walletId||``).trim(),n=String(e.walletAuthMethodId||``).trim();if(!t||!n)throw Error(`auth-method revoke requires a wallet and a target method`);let r={relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/auth-methods/${encodeURIComponent(n)}/revoke`,body:{walletId:t,walletAuthMethodId:n,requestedAtMs:e.requestedAtMs,sourceProof:e.sourceProof}},i;try{i=await V(r)}catch(e){if(!(e instanceof TypeError))throw e;i=await V(r)}return cr(i)}async function ur(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-auth-method intent`);let n=String(e.auth.publishableKey||``).trim(),r=String(e.auth.environmentId||``).trim();if(!n||!r)throw Error(`add-auth-method intent requires a publishable key and environment id`);let i=e.request.caller.caller===`same_device_addition`?{caller:`same_device_addition`,source:e.request.caller.source}:{caller:`linked_device_ceremony`};return Nn(await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/auth-methods/intent`,headers:{Authorization:`Bearer ${n}`,[R]:r},body:{walletId:e.request.walletId,rpId:e.request.rpId,authMethod:e.request.authMethod,...i}}))}function dr(e){let t=`Wallet registration respond`,n=U({responseName:t,field:`body`,value:e});if(W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=j({responseName:t,field:`registrationCeremonyId`,value:W(n,`registrationCeremonyId`,t)}),i=W(n,`kind`,t);if(i!==`evm_family_ecdsa`&&i!==`near_ed25519_and_evm_family_ecdsa`&&i!==`near_ed25519`)throw Error(`${t} response kind is invalid`);let a=i!==`near_ed25519`,o=i!==`evm_family_ecdsa`;K(n,[`ok`,`registrationCeremonyId`,`kind`,...a?[`ecdsa`]:[],...o?[`ed25519`]:[]],t);let s=G(n,`ed25519`,t);if(o&&s===void 0)throw Error(`${t} signer plan is missing its ed25519 deferred work`);if(!a)return{ok:!0,registrationCeremonyId:r,kind:`near_ed25519`,ed25519:fr(s)};let c=U({responseName:t,field:`ecdsa`,value:W(n,`ecdsa`,t)});if(K(c,[`kind`,`strictResult`],`${t} ecdsa`),W(c,`kind`,`${t} ecdsa`)!==`router_ab_ecdsa_registration_forwarded_v1`)throw Error(`${t} ecdsa kind is invalid`);let l=o?pr(s):null,u={kind:`router_ab_ecdsa_registration_forwarded_v1`,strictResult:Be(W(c,`strictResult`,`${t} ecdsa`))};return l?{ok:!0,registrationCeremonyId:r,kind:`near_ed25519_and_evm_family_ecdsa`,ecdsa:u,ed25519:l}:{ok:!0,registrationCeremonyId:r,kind:`evm_family_ecdsa`,ecdsa:u}}function fr(e){let t=`Wallet registration respond ed25519 admission`,n=U({responseName:t,field:`ed25519`,value:e}),r=W(n,`status`,t);if(r!==`admitted`&&r!==`executed`)throw Error(`${t} status is invalid`);K(n,[`status`,`admissionRequest`,`admissionReceipt`,...r===`executed`?[`activationResult`]:[]],t);let i=x(W(n,`admissionRequest`,t)),a=Le(W(n,`admissionReceipt`,t));if(!i.ok||!a.ok)throw Error(`${t} request or receipt is invalid`);if(r===`admitted`)return{status:`admitted`,admissionRequest:i.value,admissionReceipt:a.value};let o=Fe(W(n,`activationResult`,t));if(!o.ok)throw Error(`${t} activationResult is invalid`);return{status:`executed`,admissionRequest:i.value,admissionReceipt:a.value,activationResult:o.value}}function pr(e){let t=`Wallet registration respond ed25519`,n=U({responseName:t,field:`ed25519`,value:e});if(K(n,[`status`,`admissionRequest`],t),W(n,`status`,t)!==`deferred`)throw Error(`${t} status is invalid`);let r=x(W(n,`admissionRequest`,t));if(!r.ok)throw Error(`${t} admissionRequest is invalid`);return{status:`deferred`,admissionRequest:r.value}}function mr(e){let t={registrationCeremonyId:e.registrationCeremonyId,signedSetup:e.signedSetup,kind:e.signerPlanKind};switch(e.kind){case`passkey`:t.webauthn_registration=e.webauthnRegistration;break;case`email_otp`:t.emailOtpRegistrationProof=e.emailOtpRegistrationProof;break}return t.ecdsa=e.ecdsa,e.ed25519Execution!==void 0&&(t.ed25519Execution=e.ed25519Execution),t}async function hr(e){return dr(await V({relayerUrl:e.relayerUrl,path:Jt,headers:e.headers,body:mr(e),onServerTiming:e.onServerTiming}))}function gr(e,t){let n=vt(e);if(n===null||(n.kind===`owner_operations`?n.walletId!==t:n.session.walletId!==t))throw Error(`Wallet registration established session direct session result is invalid`);return n}function _r(e,t){let n=`Wallet registration activate`,r=G(e,`registrationDiagnostics`,n),i=G(e,`rpId`,n),a=G(e,`walletCustody`,n),o=G(e,`custodyKeyManifestDigestB64u`,n);return{ok:W(e,`ok`,n),walletId:W(e,`walletId`,n),authority:W(e,`authority`,n),foundingAuthority:W(e,`foundingAuthority`,n),foundingAuthMethod:W(e,`foundingAuthMethod`,n),...r===void 0?{}:{registrationDiagnostics:r},...i===void 0?{}:{rpId:i},authMethod:W(e,`authMethod`,n),...a===void 0?{}:{walletCustody:a},...o===void 0?{}:{custodyKeyManifestDigestB64u:o},kind:`evm_family_ecdsa`,ecdsa:{walletKeys:W(t,`walletKeys`,n)}}}function vr(e){let t=`Wallet registration NEAR provisioning`,n=G(e,`registrationDiagnostics`,t),r=G(e,`rpId`,t),i=G(e,`walletCustody`,t),a=G(e,`custodyKeyManifestDigestB64u`,t);return{ok:W(e,`ok`,t),walletId:W(e,`walletId`,t),authority:W(e,`authority`,t),foundingAuthority:W(e,`foundingAuthority`,t),foundingAuthMethod:W(e,`foundingAuthMethod`,t),...n===void 0?{}:{registrationDiagnostics:n},...r===void 0?{}:{rpId:r},authMethod:W(e,`authMethod`,t),...i===void 0?{}:{walletCustody:i},...a===void 0?{}:{custodyKeyManifestDigestB64u:a},kind:`near_ed25519`,authorityScope:W(e,`authorityScope`,t),accountProvisioning:W(e,`accountProvisioning`,t),resolvedAccount:W(e,`resolvedAccount`,t),ed25519:W(e,`ed25519`,t)}}function yr(e){let t=`Wallet registration activate`,n=U({responseName:t,field:`body`,value:e}),r=W(n,`kind`,t),i=G(n,`nearProvisioning`,t),a=G(n,`registrationEstablishedSession`,t);if(r!==`evm_family_ecdsa`)throw Error(`${t} response has invalid kind`);let o=U({responseName:t,field:`ecdsa`,value:W(n,`ecdsa`,t)});K(n,[`ok`,`walletId`,`authority`,`foundingAuthority`,`foundingAuthMethod`,`registrationDiagnostics`,`rpId`,`authMethod`,`walletCustody`,`custodyKeyManifestDigestB64u`,`kind`,`ecdsa`,`nearProvisioning`,`registrationEstablishedSession`],t),K(o,[`walletKeys`,`activation`,`bootstrap`],t);let s=G(o,`activation`,t),c=G(o,`bootstrap`,t);if(i!==void 0){let e=U({responseName:t,field:`nearProvisioning`,value:i});if(K(e,[`status`],`${t} nearProvisioning`),W(e,`status`,`${t} nearProvisioning`)!==`near_pending`)throw Error(`${t} nearProvisioning status is invalid`)}if(s===void 0||c===void 0)throw Error(`${t} is missing the activation payload the client needs to build its ECDSA session`);let l=qt({value:_r(n,o),expectedKind:`evm_family_ecdsa`});if(!l.ok||l.kind!==`evm_family_ecdsa`)throw Error(`${t} did not return an activated ECDSA wallet`);let u=gr(a,l.walletId);return{...l,ecdsa:{...l.ecdsa,activation:Ue(s),bootstrap:it(c)},registrationEstablishedSession:u,...i===void 0?{}:{nearProvisioning:{status:`near_pending`}}}}function br(e){let t={registrationCeremonyId:e.registrationCeremonyId,kind:e.signerPlanKind,signedSetup:e.signedSetup,idempotencyKey:e.idempotencyKey};return t.ecdsa=e.ecdsa,e.emailOtpEnrollment&&(t.emailOtpEnrollment=e.emailOtpEnrollment),e.walletCustodyCommit&&(t.walletCustodyCommit=e.walletCustodyCommit),t}async function xr(e){return yr(await V({relayerUrl:e.relayerUrl,path:Yt,headers:e.headers,body:br(e),onServerTiming:e.onServerTiming}))}function Sr(e){let t=`Wallet registration session seal`,n=U({responseName:t,field:`body`,value:e});K(n,[`ciphertext`,`keyVersion`,`expiresAtMs`,`remainingUses`],t);let r=W(n,`ciphertext`,t),i=W(n,`keyVersion`,t),a=W(n,`expiresAtMs`,t),o=W(n,`remainingUses`,t);if(typeof r!=`string`||!r.trim()||typeof i!=`string`||!i.trim()||typeof a!=`number`||!Number.isSafeInteger(a)||a<=0||typeof o!=`number`||!Number.isSafeInteger(o)||o<0)throw Error(`${t} is invalid`);return{ciphertext:r,keyVersion:i,expiresAtMs:a,remainingUses:o}}function Cr(e){let t=`Wallet registration NEAR provisioning`,n=U({responseName:t,field:`body`,value:e});if(W(n,`ok`,t)!==!0){K(n,[`ok`,`code`,`message`,`nearProvisioning`],t);let e=W(n,`code`,t),r=W(n,`message`,t);if(typeof e!=`string`||typeof r!=`string`)throw Error(`${t} failure is invalid`);let i=G(n,`nearProvisioning`,t);if(i!==void 0){let n=U({responseName:t,field:`nearProvisioning`,value:i});if(K(n,[`status`],`${t} nearProvisioning`),W(n,`status`,`${t} nearProvisioning`)!==`near_failed_retryable`)throw Error(`${t} failure status is invalid`);return{ok:!1,code:e,message:r,nearProvisioning:{status:`near_failed_retryable`}}}return{ok:!1,code:e,message:r}}K(n,[`ok`,`walletId`,`authority`,`foundingAuthority`,`foundingAuthMethod`,`registrationDiagnostics`,`rpId`,`authMethod`,`walletCustody`,`custodyKeyManifestDigestB64u`,`kind`,`accountProvisioning`,`resolvedAccount`,`ed25519`,`authorityScope`,`nearProvisioning`,`registrationEstablishedSession`,`sessionSeal`],t);let r=U({responseName:t,field:`nearProvisioning`,value:W(n,`nearProvisioning`,t)});if(K(r,[`status`],`${t} nearProvisioning`),W(r,`status`,`${t} nearProvisioning`)!==`near_ready`)throw Error(`${t} success status is invalid`);let i=qt({value:vr(n),expectedKind:`near_ed25519`});if(!i.ok||i.kind!==`near_ed25519`)throw Error(`${t} did not return a finalized Ed25519 wallet`);let a=G(n,`sessionSeal`,t),o=gr(W(n,`registrationEstablishedSession`,t),i.walletId);if(Mn(i)){if(a!==void 0)throw Error(`${t} returned a session seal for an Email OTP authority`);return{...i,nearProvisioning:{status:`near_ready`},registrationEstablishedSession:o}}let s={...i,nearProvisioning:{status:`near_ready`},registrationEstablishedSession:o};return a===void 0?s:{...s,sessionSeal:Sr(a)}}async function wr(e){let t={registrationCeremonyId:e.registrationCeremonyId,signedSetup:e.signedSetup,idempotencyKey:e.idempotencyKey,ed25519:e.ed25519};return e.auth.kind===`email_otp`&&(t.emailOtpEnrollment=e.auth.enrollment),e.walletCustodyCommit&&(t.walletCustodyCommit=e.walletCustodyCommit),e.sessionSeal&&(t.sessionSeal=e.sessionSeal),Cr(await V({relayerUrl:e.relayerUrl,path:Xt,headers:e.headers,body:t,...e.onServerTiming?{onServerTiming:e.onServerTiming}:{}}))}function Tr(e){switch(e.kind){case`webauthn_assertion`:return{kind:`webauthn_assertion`,rpId:e.rpId,credential:e.credential,expectedChallengeDigestB64u:e.expectedChallengeDigestB64u}}}function Er(e){switch(e.kind){case`webauthn_assertion`:return{kind:`webauthn_assertion`,rpId:e.rpId,credential:e.credential,expectedChallengeDigestB64u:e.expectedChallengeDigestB64u};case`wallet_session`:return{kind:`wallet_session`};case`email_otp`:return{kind:`email_otp`,challengeId:e.challengeId,otpCode:e.otpCode,expectedChallengeDigestB64u:e.expectedChallengeDigestB64u}}}function Dr(e){switch(e.kind){case`passkey`:return{};case`email_otp`:return{emailOtpRegistrationProof:e.emailOtpRegistrationProof}}}async function Or(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-signer start`);return er({value:await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/start`,body:{addSignerIntentGrant:e.addSignerIntentGrant,addSignerIntentDigestB64u:e.addSignerIntentDigestB64u,intent:e.intent,auth:Tr(e.auth)}}),expectedIntent:e.intent})}function kr(e){let t=`Email OTP enrollment code`,n=U({responseName:t,field:`body`,value:e});if(K(n,[`ok`,`challengeId`,`expiresAtMs`,`emailHint`],t),W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=W(n,`challengeId`,t);if(typeof r!=`string`||!r.trim())throw Error(`${t} response missing challengeId`);let i=W(n,`expiresAtMs`,t);if(typeof i!=`number`||!Number.isSafeInteger(i)||i<1)throw Error(`${t} response has invalid expiresAtMs`);let a=W(n,`emailHint`,t);if(typeof a!=`string`)throw Error(`${t} response has invalid emailHint`);return{challengeId:r.trim(),expiresAtMs:i,emailHint:a}}async function Ar(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for the Email OTP enrollment code`);return kr(await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/auth-methods/email-otp/challenge`,body:{addAuthMethodIntentGrant:e.addAuthMethodIntentGrant,addAuthMethodIntentDigestB64u:e.addAuthMethodIntentDigestB64u}}))}async function jr(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-auth-method start`);return In({value:await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/auth-methods/start`,body:{addAuthMethodIntentGrant:e.addAuthMethodIntentGrant,addAuthMethodIntentDigestB64u:e.addAuthMethodIntentDigestB64u,intent:e.intent,auth:Er(e.auth),...Dr(e.authority)},...e.auth.kind===`wallet_session`?{headers:{authorization:`Bearer ${e.auth.walletSessionToken}`}}:{}}),expectedIntent:e.intent})}async function Mr(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-signer ECDSA respond`);return An(await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/derivation/respond`,body:{addSignerCeremonyId:e.addSignerCeremonyId,ecdsa:e.ecdsa}}))}async function Nr(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-signer ECDSA activation`);return jn(await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/derivation/activate`,body:{addSignerCeremonyId:e.addSignerCeremonyId,ecdsa:{kind:`router_ab_ecdsa_registration_activation_v1`,activationCorrelationId:e.activationCorrelationId,publicFacts:e.publicFacts,expectedActivationRequestDigest:e.expectedActivationRequestDigest}}}))}function Pr(e){switch(e.kind){case`near_ed25519`:return{addSignerCeremonyId:e.addSignerCeremonyId,idempotencyKey:e.idempotencyKey,kind:e.kind,ed25519:e.ed25519,custodyKeySet:e.custodyKeySet};case`evm_family_ecdsa`:return{addSignerCeremonyId:e.addSignerCeremonyId,idempotencyKey:e.idempotencyKey,kind:e.kind,ecdsa:e.ecdsa,custodyKeySet:e.custodyKeySet}}}async function Fr(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-signer finalize`);return tr({value:await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/finalize`,body:Pr(e)}),expectedKind:e.kind})}async function Ir(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-auth-method finalize`);let n=e.custodyEnvelope===void 0?{addAuthMethodCeremonyId:e.addAuthMethodCeremonyId}:e.webauthnRegistration===void 0?{addAuthMethodCeremonyId:e.addAuthMethodCeremonyId,custodyEnvelope:y(e.custodyEnvelope),emailOtpTarget:e.emailOtpTarget}:{addAuthMethodCeremonyId:e.addAuthMethodCeremonyId,webauthnRegistration:e.webauthnRegistration,custodyEnvelope:y(e.custodyEnvelope)},r={relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/auth-methods/finalize`,body:n},i;try{i=await V(r)}catch(e){if(!(e instanceof TypeError))throw e;i=await V(r)}return Fn(i)}async function Lr(e){let t=String(e.walletId||``).trim(),n=String(e.rpId||``).trim(),r=e.operationCredential;if(!t)throw Error(`walletId is required for ECDSA key-facts inventory`);if(!n)throw Error(`rpId is required for ECDSA key-facts inventory`);return ar({value:await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/ecdsa/key-facts/inventory`,headers:p(r),body:{rpId:n,keyTargets:e.keyTargets,auth:{kind:r.kind,walletSessionId:r.walletSessionId}}}),walletId:e.walletId,rpId:n})}async function Rr(e){let t=String(e.walletId||``).trim(),n=String(e.rpId||``).trim(),r=String(e.serverNonceB64u||``).trim(),i=String(e.expectedChallengeDigestB64u||``).trim();if(!t)throw Error(`walletId is required for ECDSA key-facts inventory`);if(!n)throw Error(`rpId is required for ECDSA key-facts inventory`);if(!r||!i)throw Error(`WebAuthn ECDSA key-facts inventory requires challenge binding`);return ar({value:await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/ecdsa/key-facts/inventory`,body:{rpId:n,keyTargets:e.keyTargets,auth:{kind:`webauthn_assertion`,credential:e.credential,serverNonceB64u:r,expectedChallengeDigestB64u:i,...e.runtimePolicyScope?{runtimePolicyScope:e.runtimePolicyScope}:{}}}}),walletId:e.walletId,rpId:n})}function $(e,t){if(typeof e!=`object`||!e||Array.isArray(e))return!1;let n=Object.keys(e);return n.length===t.length&&n.every(e=>t.includes(e))}const zr=[`kind`,`walletId`,`authorityId`,`walletAuthMethodId`,`mintId`,`authorizationId`,`walletSessionId`,`quotaId`],Br=[`ok`,`code`,`message`,`next`,`committed`],Vr=[`ok`,`code`,`message`,`next`,`kind`,`walletId`,`authorityId`,`walletAuthMethodId`,`mintId`,`authorizationId`,`walletSessionId`,`quotaId`],Hr=[...Vr,`unlocked`,`unlockBackend`];function Ur(e){if(!u(e)||!$(e,zr)||e.kind!==`already_committed_wallet_session_v1`)return null;let n=c(e.walletId),r=i(e.authorityId),a=t(e.walletAuthMethodId),o=fe(e.mintId),s=v(e.authorizationId),l=_(e.walletSessionId),d=g(e.quotaId);return!n.ok||!r.ok||!a.ok||!o.ok||!s.ok||!l.ok||!d.ok?null:{kind:`already_committed_wallet_session_v1`,walletId:n.value,authorityId:r.value,walletAuthMethodId:a.value,mintId:o.value,authorizationId:s.value,walletSessionId:l.value,quotaId:d.value}}function Wr(e){return e.ok!==!1||e.code!==`already_committed`||typeof e.message!=`string`||e.next!==`unlock_exact_method`?null:{ok:!1,code:`already_committed`,message:e.message,next:`unlock_exact_method`}}function Gr(e){return!$(e,Vr)&&!$(e,Hr)||$(e,Hr)&&(e.unlocked!==!1||e.unlockBackend!==`passkey`&&e.unlockBackend!==`email_otp`)||e.kind!==`already_committed`?null:Ur({kind:`already_committed_wallet_session_v1`,walletId:e.walletId,authorityId:e.authorityId,walletAuthMethodId:e.walletAuthMethodId,mintId:e.mintId,authorizationId:e.authorizationId,walletSessionId:e.walletSessionId,quotaId:e.quotaId})}function Kr(e,t){return{ok:!1,code:`already_committed`,message:e.message,next:`unlock_exact_method`,committed:t}}function qr(e){if(!u(e))return null;let t=Wr(e);if(!t||!$(e,Br))return null;let n=Ur(e.committed);return n?Kr(t,n):null}function Jr(e){if(!u(e))return null;let t=Wr(e);if(!t)return null;let n=Gr(e);return n?Kr(t,n):null}export{dt as A,Or as C,_t as D,gt as E,w as O,jr as S,ht as T,Ar as _,xr as a,lr as b,sr as c,Ir as d,Fr as f,Zt as g,ir as h,Nr as i,ft as k,Lr as l,Mn as m,Jr as n,wr as o,fn as p,$ as r,ur as s,qr as t,Rr as u,Mr as v,Mt as w,or as x,hr as y};
+import{C as e,E as t,M as n,N as r,O as i,S as a,g as o,i as s,k as c,p as l}from"./domainIds-t1lp25yU.js";import{g as u,h as d}from"./digests-BIaE0DMd.js";import{a as f,c as p,d as m,o as ee,u as te}from"./participants-BXdREC5k.js";import{t as h}from"./walletRegistrationSetupPrewarm-CEvGKQSg.js";import{r as ne}from"./base64-BmKR3UqU.js";import{s as re}from"./walletDbName-B6-CV_Rq.js";import{X as ie,i as ae,n as oe,r as se}from"./activeWalletSession-HAOgRKzn.js";import{d as ce,f as le,i as ue,r as de}from"./signingSessionSeal-BFOBKj-J.js";import{d as g,g as fe,h as _,m as v}from"./capabilityKinds-Cafn86Y1.js";import{r as pe}from"./canonicalPrimitives-DKeS3M40.js";import{n as me,r as he}from"./signerDomain-D-EUTlLK.js";import{c as ge,l as _e,s as ve}from"./accountIds-DGWFzEnw.js";import{O as ye,a as be,c as xe,i as Se,k as Ce,l as we,n as Te,o as Ee,s as De,t as Oe,x as y}from"./registrationIntent-Cb3tggIM.js";import{a as b,l as ke,o as Ae,s as je}from"./ecdsaChainTarget-BoRVQtjQ.js";import{q as Me,v as Ne}from"./device-linking-BL2aDEUF.js";import{M as Pe,X as x,Y as Fe,d as Ie,q as Le}from"./walletAuthority-CU9nO0Ze.js";import{F as Re,M as ze,N as Be,Nt as Ve,S as He,j as Ue,rt as S,st as We,x as Ge}from"./digestEncoding-Rx8Vjy4J.js";import{r as Ke}from"./walletAuthMethodRecord--fvGr8r1.js";import{r as qe}from"./registrationAuthMethodInput-C4o7yFBJ.js";import{a as Je,o as Ye}from"./signerSlot-BlijMq8C.js";import{o as Xe,u as Ze}from"./registrationSignerPlan-CeMidFme.js";import{C as Qe,E as $e,M as et,b as tt,l as nt,y as rt}from"./emailOtpEcdsaDerivationIdentity-DJmMyqL-.js";import{n as it}from"./thresholdEcdsa-CRfx6RP1.js";var C=class{retainProof(){return!0}constructor(){this.retainProof()}},at=class extends C{kind=`use_live_runtime`;capability;materialOwner;authority;runtime;materialActivation;constructor(e){super(),this.capability=e.materialActivation.capability,this.materialOwner=e.materialActivation.materialOwner,this.authority=e.authority,this.runtime=e.runtime,this.materialActivation=e.materialActivation}},ot=class extends C{kind=`rehydrate_material_activation`;capability;materialOwner;authority;materialActivation;sealedMaterial;constructor(e){super(),this.capability=e.materialActivation.capability,this.materialOwner=e.materialActivation.materialOwner,this.authority=e.authority,this.materialActivation=e.materialActivation,this.sealedMaterial=e.sealedMaterial}},st=class extends C{kind=`reauthorize_public_anchor`;capability;materialOwner;authority;retirement;publicReauthAnchor;constructor(e){super(),this.capability=e.publicReauthAnchor.capability,this.materialOwner=e.publicReauthAnchor.materialOwner,this.authority=e.publicReauthAnchor.authority,this.retirement=e.retirement,this.publicReauthAnchor=e.publicReauthAnchor}},ct=class extends C{kind=`blocked`},lt=class extends ct{capability=null;reason=`missing_capability`},ut=class extends ct{capability;reason;constructor(e){super(),this.capability=e.capability,this.reason=e.reason}};function dt(e){return new at(e)}function ft(e){return new ot(e)}function pt(e){return new st(e)}function w(e){return e.reason===`missing_capability`?new lt:new ut(e)}function mt(e){if(!e.ok)throw Error(e.error.message);return e.value}function ht(e){return e.materialActivation}function gt(e){return mt(l(`near-ed25519-yao:${e.activationId}`))}function T(e,t){let n=e.sealed.kind===`available`?e.sealed.materialActivation.capability:e.runtime.kind===`live`?e.runtime.materialActivation.capability:e.publicLocator.kind===`available`?e.publicLocator.materialActivation.capability:null;return w(n?{capability:n,reason:t}:{capability:null,reason:`missing_capability`})}function _t(e){switch(e.publicLocator.kind){case`missing`:return w({capability:null,reason:`missing_capability`});case`retired`:return pt({retirement:e.publicLocator.retirement,publicReauthAnchor:e.publicLocator.publicReauthAnchor});case`conflict`:return T(e,`exact_record_conflict`);case`corrupt`:return T(e,`corrupt`);case`unavailable`:return w({capability:e.publicLocator.capability,reason:`persistence_unavailable`});case`available`:break;default:e.publicLocator}let t=e.publicLocator.materialActivation;if(String(t.materialOwner)!==e.publicLocator.walletId)return T(e,`binding_mismatch`);switch(e.runtime.kind){case`live`:return s(t,e.runtime.materialActivation)?dt({authority:e.publicLocator.authority,runtime:e.runtime.runtime,materialActivation:t}):T(e,`binding_mismatch`);case`absent`:break;default:e.runtime}switch(e.sealed.kind){case`missing`:return T(e,`missing_material`);case`corrupt`:return T(e,`corrupt`);case`available`:break;default:e.sealed}let n=e.sealed;if(String(n.authority.walletId)!==e.publicLocator.walletId||String(n.authority.authorityDigest)!==String(e.publicLocator.authority.authorityDigest)||String(n.materialActivation.materialOwner)!==e.publicLocator.walletId||!s(n.materialActivation,e.publicLocator.materialActivation))return T(e,`binding_mismatch`);switch(e.unlockSource.kind){case`unavailable`:return T(e,`missing_material`);case`available`:return String(e.unlockSource.authority.walletId)!==String(n.authority.walletId)||String(e.unlockSource.authority.authorityDigest)!==String(n.authority.authorityDigest)?T(e,`binding_mismatch`):ft({authority:n.authority,materialActivation:n.materialActivation,sealedMaterial:n.sealedMaterial});default:e.unlockSource}throw Error(`Unsupported Near Ed25519 unlock-source observation`)}function vt(e){let t=O(e);if(!t||!(`kind`in t)||typeof t.kind!=`string`)return null;switch(t.kind){case`owner_operations`:{if(!k(t,[`kind`,`walletId`]))return null;let e=c(Reflect.get(t,`walletId`));return e.ok?{kind:`owner_operations`,walletId:e.value}:null}case`issued`:{if(!k(t,[`kind`,`session`])||!(`session`in t))return null;let e=yt(t.session);return e===null?null:{kind:`issued`,session:e}}case`already_committed`:{if(!k(t,[`kind`,`session`,`next`])||!(`session`in t)||!(`next`in t)||t.next!==`unlock_exact_method`)return null;let e=St(t.session);return e===null?null:{kind:`already_committed`,session:e,next:t.next}}default:return null}}function yt(e){try{let t=O(e);if(!t||!k(t,[`kind`,`walletId`,`authorizationId`,`walletSessionId`,`quotaId`,`expiresAtMs`,`remainingUses`,`walletSession`,`operationCredential`,`tokens`])||!(`kind`in t)||!(`walletId`in t)||!(`authorizationId`in t)||!(`walletSessionId`in t)||!(`quotaId`in t)||!(`expiresAtMs`in t)||!(`remainingUses`in t)||!(`walletSession`in t)||!(`operationCredential`in t)||!(`tokens`in t)||t.kind!==`registration_established_wallet_session_v2`)return null;let n=c(t.walletId),r=_(t.walletSessionId),i=v(t.authorizationId),a=g(t.quotaId);if(!n.ok||!i.ok||!r.ok||!a.ok)return null;let o=D(t.expiresAtMs),s=D(t.remainingUses);if(o===null||o<=0||s===null||s<=0)return null;let l=oe(t.walletSession),u=ae(t.operationCredential);if(l.walletId!==n.value||l.authorizationId!==i.value||l.quotaId!==a.value||l.expiresAtMs!==o||u.walletSessionId!==r.value)return null;let d=Ct(t.tokens);return d===null||!bt(l,d)?null:{kind:`registration_established_wallet_session_v2`,walletId:n.value,authorizationId:i.value,walletSessionId:r.value,quotaId:a.value,expiresAtMs:o,remainingUses:s,walletSession:l,operationCredential:u,tokens:d}}catch{return null}}function bt(e,t){switch(t.kind){case`evm_family_ecdsa`:return E(e,`ecdsa_secp256k1`,t.ecdsa.materialActivation)&&!xt(e,`ecdsa_secp256k1`);case`near_ed25519`:return E(e,`ed25519`,t.ed25519.materialActivation)&&!xt(e,`ed25519`);case`near_ed25519_and_evm_family_ecdsa`:return E(e,`ecdsa_secp256k1`,t.ecdsa.materialActivation)&&E(e,`ed25519`,t.ed25519.materialActivation)&&!xt(e,`ed25519`,`ecdsa_secp256k1`);default:return!1}}function E(e,t,n){return e.capabilitySubjects.some(e=>e.kind===`sign`&&e.keyFamily===t&&s(e.materialActivation,n))}function xt(e,...t){return e.capabilitySubjects.some(e=>e.kind===`sign`&&!t.includes(e.keyFamily))}function St(e){try{let t=O(e);if(!t||!k(t,[`kind`,`walletId`,`authorizationId`,`walletSessionId`,`quotaId`,`expiresAtMs`,`remainingUses`,`walletSession`,`tokens`])||!(`kind`in t)||!(`walletId`in t)||!(`authorizationId`in t)||!(`walletSessionId`in t)||!(`quotaId`in t)||!(`expiresAtMs`in t)||!(`remainingUses`in t)||!(`walletSession`in t)||!(`tokens`in t)||t.kind!==`registration_established_wallet_session_projection_v2`)return null;let n=c(t.walletId),r=v(t.authorizationId),i=_(t.walletSessionId),a=g(t.quotaId);if(!n.ok||!r.ok||!i.ok||!a.ok||new Set([r.value,i.value,a.value]).size!==3)return null;let o=D(t.expiresAtMs),s=D(t.remainingUses),l=oe(t.walletSession),u=Ct(t.tokens);return o===null||o<=0||s===null||u===null||l.walletId!==n.value||l.authorizationId!==r.value||l.quotaId!==a.value||l.expiresAtMs!==o||!bt(l,u)?null:{kind:`registration_established_wallet_session_projection_v2`,walletId:n.value,authorizationId:r.value,walletSessionId:i.value,quotaId:a.value,expiresAtMs:o,remainingUses:s,walletSession:l,tokens:u}}catch{return null}}function Ct(e){let t=O(e);if(!t||!(`kind`in t)||typeof t.kind!=`string`)return null;switch(t.kind){case`evm_family_ecdsa`:{if(!k(t,[`kind`,`ecdsa`])||!(`ecdsa`in t))return null;let e=wt(t.ecdsa);return e===null?null:{kind:`evm_family_ecdsa`,ecdsa:e}}case`near_ed25519`:{if(!k(t,[`kind`,`ed25519`])||!(`ed25519`in t))return null;let e=Tt(t.ed25519);return e===null?null:{kind:`near_ed25519`,ed25519:e}}case`near_ed25519_and_evm_family_ecdsa`:{if(!k(t,[`kind`,`ecdsa`,`ed25519`])||!(`ecdsa`in t)||!(`ed25519`in t))return null;let e=wt(t.ecdsa),n=Tt(t.ed25519);return e===null||n===null?null:{kind:`near_ed25519_and_evm_family_ecdsa`,ecdsa:e,ed25519:n}}default:return null}}function wt(e){let t=O(e);if(!t||!k(t,[`sessionKind`,`thresholdSessionId`,`keyHandle`,`runtimePolicyScope`,`materialActivation`,`routerAbEcdsaDerivationNormalSigning`])||!(`sessionKind`in t)||!(`thresholdSessionId`in t)||!(`keyHandle`in t)||!(`runtimePolicyScope`in t)||!(`materialActivation`in t)||!(`routerAbEcdsaDerivationNormalSigning`in t)||t.sessionKind!==`credential_free_projection_v2`)return null;let n=a(t.thresholdSessionId);if(!n.ok)return null;try{let e=et(t.keyHandle),r=Et(t.runtimePolicyScope),i=o(t.materialActivation);if(!i.ok)return null;let a=Ge(t.routerAbEcdsaDerivationNormalSigning);if(!a)return null;let c=Ve(a.scope.material_activation);return s(i.value,c)?{sessionKind:`credential_free_projection_v2`,thresholdSessionId:n.value,keyHandle:e,runtimePolicyScope:r,materialActivation:i.value,routerAbEcdsaDerivationNormalSigning:a}:null}catch{return null}}function Tt(t){let n=O(t);if(!n||!k(n,[`sessionKind`,`thresholdSessionId`,`nearAccountId`,`nearEd25519SigningKeyId`,`runtimePolicyScope`,`materialActivation`,`routerAbNormalSigning`])||!(`sessionKind`in n)||!(`thresholdSessionId`in n)||!(`nearAccountId`in n)||!(`nearEd25519SigningKeyId`in n)||!(`runtimePolicyScope`in n)||!(`materialActivation`in n)||!(`routerAbNormalSigning`in n)||n.sessionKind!==`credential_free_projection_v2`)return null;let r=e(n.thresholdSessionId),i=_e(n.nearAccountId);if(!r.ok||!i.ok)return null;try{let e=Je(n.nearEd25519SigningKeyId),t=Et(n.runtimePolicyScope),a=o(n.materialActivation);if(!a.ok)return null;let s=ce(n.routerAbNormalSigning);return s?{sessionKind:`credential_free_projection_v2`,thresholdSessionId:r.value,nearAccountId:i.value,nearEd25519SigningKeyId:e,runtimePolicyScope:t,materialActivation:a.value,routerAbNormalSigning:s}:null}catch{return null}}function Et(e){let t=O(e);if(!t||!k(t,[`orgId`,`projectId`,`envId`,`signingRootVersion`])||!(`orgId`in t)||!(`projectId`in t)||!(`envId`in t)||!(`signingRootVersion`in t))throw Error(`runtime policy scope projection is invalid`);return ie({orgId:t.orgId,projectId:t.projectId,envId:t.envId,signingRootVersion:t.signingRootVersion})}function D(e){return typeof e==`number`&&Number.isSafeInteger(e)&&e>=0?e:null}function O(e){return typeof e==`object`&&e&&!Array.isArray(e)?e:null}function k(e,t){return Object.keys(e).length===t.length&&t.every(t=>Object.prototype.hasOwnProperty.call(e,t))}function Dt(e){let t=String(e||``).trim().toLowerCase();return/^0x[0-9a-f]{40}$/.test(t)?t:``}const Ot=/^ederivation-key-[A-Za-z0-9_-]+$/;function A(e){let t=String(e||``).trim();return t?Ot.test(t)?{kind:`resolved`,keyHandle:t}:{kind:`invalid`}:{kind:`missing`}}function kt(e){let t=A(e.keyHandle),n=d(e.sharedEvmFamilyKey)?A(e.sharedEvmFamilyKey.keyHandle):{kind:`missing`};return t.kind===`missing`?{kind:`blocked`,reason:`missing_key_handle`}:t.kind===`invalid`||n.kind===`invalid`?{kind:`blocked`,reason:`invalid_key_handle`}:n.kind===`resolved`&&t.keyHandle!==n.keyHandle?{kind:`blocked`,reason:`duplicate_key_handles`}:{kind:`resolved`,keyHandle:t.keyHandle}}function At(e){let t=(d(e.metadata.sharedEvmFamilyKey)?e.metadata.sharedEvmFamilyKey:null)||e.metadata,n=String(t.thresholdEcdsaPublicKeyB64u||e.metadata.thresholdEcdsaPublicKeyB64u||``).trim();if(!n)return null;let r=String(t.walletId||``).trim();if(!r)return null;try{$e(n);let i=t.ecdsaThresholdKeyId||e.metadata.ecdsaThresholdKeyId,a=t.signingRootId||e.metadata.signingRootId,o=t.signingRootVersion||e.metadata.signingRootVersion,s=t.participantIds||e.metadata.participantIds,c=t.thresholdOwnerAddress||e.metadata.thresholdOwnerAddress||e.metadata.ownerAddress;return nt({walletId:r,keyHandle:e.keyHandle,chainTarget:e.chainTarget,ecdsaThresholdKeyId:i,signingRootId:a,signingRootVersion:o,participantIds:s,thresholdOwnerAddress:c,thresholdEcdsaPublicKeyB64u:n})}catch{return null}}function jt(e){try{let t=He(e.raw);return String(t.client_id)!==String(e.walletId)||t.public_identity.threshold_public_key33_b64u!==e.thresholdEcdsaPublicKeyB64u?null:t}catch{return null}}function Mt(e){let t=e.signer;if(t.status!==`active`||t.signerKind!==he.thresholdEcdsa||t.signerAuthMethod!==me.passkey)return{kind:`skipped`};let n=d(t.metadata)?t.metadata:{};if(!d(n.chainTarget))return{kind:`blocked`,targetKey:``,reason:`missing_chain_target`};let r;try{r=b(n.chainTarget)}catch{return{kind:`blocked`,targetKey:``,reason:`invalid_chain_target`}}if(!e.configuredTargets.some(e=>je(e,r)))return{kind:`skipped`};let i=Ae(r),a=kt(n);if(a.kind===`blocked`)return{kind:`blocked`,targetKey:i,reason:a.reason};let o=At({metadata:n,keyHandle:a.keyHandle,chainTarget:r});if(!o)return{kind:`key_facts_inventory_required`,chainTarget:r,targetKey:i,keyHandle:a.keyHandle,reason:`missing_key_facts`};let s=jt({raw:n.publicCapability,walletId:e.walletId,thresholdEcdsaPublicKeyB64u:o.keyFacts.thresholdEcdsaPublicKeyB64u});return{kind:`active_wallet_key`,chainTarget:r,targetKey:i,walletKey:o,publicCapability:s?{kind:`persisted_public_capability`,value:s}:{kind:`missing_public_capability`}}}function Nt(e){let{raw:t}=e;if(!d(t)||!d(t.chainTarget))return null;let n=d(t.key)?t.key:t,r;try{r=b(t.chainTarget)}catch{return null}let i=A(t.keyHandle),a=A(n.keyHandle),o=Dt(t.accountAddress),s=Dt(t.ownerAddress),c=String(n.walletId||``).trim(),l=String(n.subjectId||``).trim(),u=String(ke({walletId:e.walletId})),f=String(n.rpId||``).trim(),p=String(n.thresholdEcdsaPublicKeyB64u||t.thresholdEcdsaPublicKeyB64u||``).trim(),m=Dt(n.thresholdOwnerAddress||t.ownerAddress||t.accountAddress||t.ethereumAddress);if(i.kind!==`resolved`||a.kind!==`resolved`||a.keyHandle!==i.keyHandle||!p||!s||!o||!m||c!==String(e.walletId)||l&&l!==u||f!==e.rpId||m!==s)return null;try{let a=jt({raw:t.publicCapability,walletId:e.walletId,thresholdEcdsaPublicKeyB64u:p});if(!a)return null;let c=Qe(i.keyHandle),l=tt({record:{ecdsaThresholdKeyId:t.ecdsaThresholdKeyId}}),u=rt({signingRootId:t.signingRootId||n.signingRootId,signingRootVersion:t.signingRootVersion||n.signingRootVersion});return{accountAddress:o,ownerAddress:s,publicCapability:a,walletKey:nt({walletId:e.walletId,keyHandle:c,chainTarget:r,ecdsaThresholdKeyId:l,signingRootId:u.signingRootId,signingRootVersion:u.signingRootVersion,participantIds:n.participantIds||t.participantIds,thresholdOwnerAddress:m,thresholdEcdsaPublicKeyB64u:p})}}catch{return null}}function Pt(e){let t=[];for(let n of e.records){let r=Nt({walletId:e.walletId,rpId:e.rpId,raw:n});r&&t.push(r)}return t}function j(e){let t=String(e.value||``).trim();if(!t)throw Error(`${e.responseName} response missing ${e.field}`);return t}function M(e){if(!u(e.value))throw Error(`${e.responseName} response missing ${e.field}`);return e.value}function N(e,t,n){let r=new Set(t);for(let t of Object.keys(e))if(!r.has(t))throw Error(`${n} response contains unexpected ${t}`)}function P(e){let t=Number(e.value);if(!Number.isSafeInteger(t)||t<e.minimum)throw Error(`${e.responseName} response has invalid ${e.field}`);return t}function F(e,t){if(!Array.isArray(e)||e.length!==2)throw Error(`${t} response has invalid participantIds`);let n=P({responseName:t,field:`participantIds[0]`,value:e[0],minimum:1}),r=P({responseName:t,field:`participantIds[1]`,value:e[1],minimum:1});if(n===r)throw Error(`${t} response has duplicate participantIds`);if(n!==1||r!==2)throw Error(`${t} response has unsupported participantIds`);return[n,r]}function I(e,t){let n=r(e);if(!n.ok)throw Error(`${t} response has invalid rpId`);return n.value}function Ft(e,t){let n=M({responseName:t,field:`authorityScope`,value:e});switch(n.kind){case`passkey_rp`:return N(n,[`kind`,`rpId`],t),{kind:`passkey_rp`,rpId:I(n.rpId,t)};case`email_otp`:if(N(n,[`kind`,`provider`,`providerUserId`],t),n.provider!==`google`&&n.provider!==`email`)throw Error(`${t} response has invalid authorityScope provider`);return{kind:`email_otp`,provider:n.provider,providerUserId:j({responseName:t,field:`authorityScope.providerUserId`,value:n.providerUserId})};default:throw Error(`${t} response has invalid authorityScope`)}}function It(e,t){let n=M({responseName:t,field:`ed25519`,value:e});if(N(n,[`signerSlot`,`nearAccountId`,`nearEd25519SigningKeyId`,`publicKey`,`relayerKeyId`,`keyVersion`,`recoveryExportCapable`,`participantIds`],t),n.recoveryExportCapable!==!0)throw Error(`${t} response is not recovery/export capable`);return{signerSlot:P({responseName:t,field:`ed25519.signerSlot`,value:n.signerSlot,minimum:1}),nearAccountId:j({responseName:t,field:`ed25519.nearAccountId`,value:n.nearAccountId}),nearEd25519SigningKeyId:j({responseName:t,field:`ed25519.nearEd25519SigningKeyId`,value:n.nearEd25519SigningKeyId}),publicKey:j({responseName:t,field:`ed25519.publicKey`,value:n.publicKey}),relayerKeyId:j({responseName:t,field:`ed25519.relayerKeyId`,value:n.relayerKeyId}),keyVersion:j({responseName:t,field:`ed25519.keyVersion`,value:n.keyVersion}),recoveryExportCapable:!0,participantIds:F(n.participantIds,t)}}function Lt(t,n){let r=M({responseName:n,field:`ed25519`,value:t});N(r,[`signerSlot`,`nearAccountId`,`nearEd25519SigningKeyId`,`publicKey`,`relayerKeyId`,`keyVersion`,`recoveryExportCapable`,`participantIds`,`thresholdSessionId`,`runtimePolicyScope`,`routerAbNormalSigning`],n);let i=It({signerSlot:r.signerSlot,nearAccountId:r.nearAccountId,nearEd25519SigningKeyId:r.nearEd25519SigningKeyId,publicKey:r.publicKey,relayerKeyId:r.relayerKeyId,keyVersion:r.keyVersion,recoveryExportCapable:r.recoveryExportCapable,participantIds:r.participantIds},n),a=e(r.thresholdSessionId);if(!a.ok)throw Error(`${n} response has invalid ed25519.thresholdSessionId`);let o=re(r.runtimePolicyScope);if(!o)throw Error(`${n} response has invalid ed25519.runtimePolicyScope`);return{...i,thresholdSessionId:a.value,runtimePolicyScope:o,routerAbNormalSigning:le(r.routerAbNormalSigning)}}function L(e,t){let n=M({responseName:t,field:`chainTarget`,value:e});switch(n.kind){case`evm`:return N(n,[`kind`,`namespace`,`chainId`,`networkSlug`],t),b(n);case`tempo`:return N(n,[`kind`,`chainId`,`networkSlug`],t),b(n);default:throw Error(`${t} response has invalid chainTarget kind`)}}function Rt(e,t){let n=M({responseName:t,field:`ecdsa.walletKeys[]`,value:e});if(N(n,[`keyScope`,`chainTarget`,`walletId`,`evmFamilySigningKeySlotId`,`keyHandle`,`ecdsaThresholdKeyId`,`signingRootId`,`signingRootVersion`,`thresholdEcdsaPublicKeyB64u`,`thresholdOwnerAddress`,`relayerKeyId`,`relayerVerifyingShareB64u`,`contextBinding32B64u`,`derivationClientSharePublicKey33B64u`,`clientShareRetryCounter`,`relayerShareRetryCounter`,`participantIds`,`publicCapability`],t),n.keyScope!==`evm-family`)throw Error(`${t} response has invalid keyScope`);return{keyScope:`evm-family`,chainTarget:L(n.chainTarget,t),walletId:j({responseName:t,field:`walletId`,value:n.walletId}),evmFamilySigningKeySlotId:j({responseName:t,field:`evmFamilySigningKeySlotId`,value:n.evmFamilySigningKeySlotId}),keyHandle:j({responseName:t,field:`keyHandle`,value:n.keyHandle}),ecdsaThresholdKeyId:j({responseName:t,field:`ecdsaThresholdKeyId`,value:n.ecdsaThresholdKeyId}),signingRootId:j({responseName:t,field:`signingRootId`,value:n.signingRootId}),signingRootVersion:j({responseName:t,field:`signingRootVersion`,value:n.signingRootVersion}),thresholdEcdsaPublicKeyB64u:j({responseName:t,field:`thresholdEcdsaPublicKeyB64u`,value:n.thresholdEcdsaPublicKeyB64u}),thresholdOwnerAddress:j({responseName:t,field:`thresholdOwnerAddress`,value:n.thresholdOwnerAddress}),relayerKeyId:j({responseName:t,field:`relayerKeyId`,value:n.relayerKeyId}),relayerVerifyingShareB64u:j({responseName:t,field:`relayerVerifyingShareB64u`,value:n.relayerVerifyingShareB64u}),contextBinding32B64u:j({responseName:t,field:`contextBinding32B64u`,value:n.contextBinding32B64u}),derivationClientSharePublicKey33B64u:j({responseName:t,field:`derivationClientSharePublicKey33B64u`,value:n.derivationClientSharePublicKey33B64u}),clientShareRetryCounter:P({responseName:t,field:`clientShareRetryCounter`,value:n.clientShareRetryCounter,minimum:0}),relayerShareRetryCounter:P({responseName:t,field:`relayerShareRetryCounter`,value:n.relayerShareRetryCounter,minimum:0}),participantIds:F(n.participantIds,t),publicCapability:He(n.publicCapability)}}function zt(e){switch(e){case`registrationIntentLoadMs`:case`registrationIntentDigestMs`:case`registrationIntentConsumeMs`:case`registrationAttemptGateMs`:case`registrationPreparationPersistMs`:case`registrationPreparationLoadMs`:case`registrationPreparationConsumeMs`:case`registrationPreparationScopeCheckMs`:case`registrationAuthorityVerifyMs`:case`registrationEcdsaPrepareMs`:case`registrationCeremonyPersistMs`:case`registerPrepareTotalMs`:case`registerStartTotalMs`:case`registrationEcdsaRespondMs`:case`registrationFinalizeReplayLoadMs`:case`registrationCeremonyLoadMs`:case`registrationEcdsaBootstrapVerifyMs`:case`sponsoredNearAccountCreateMs`:case`registrationKeygenMs`:case`registrationEmailOtpEnrollmentPlanMs`:case`relaySessionMintMs`:case`relayGoogleEmailOtpActivationPlanMs`:case`relayPersistenceMs`:case`registrationFinalizeReplayCacheMs`:case`registerFinalizeTotalMs`:return e;default:throw Error(`Wallet registration finalize response has invalid diagnostics timing name`)}}function Bt(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`registrationDiagnostics`,value:e});if(N(n,[`kind`,`route`,`entries`],t),n.kind!==`wallet_registration_route_diagnostics_v1`||n.route!==`wallets_register_finalize`||!Array.isArray(n.entries))throw Error(`${t} response has invalid registrationDiagnostics`);return{kind:`wallet_registration_route_diagnostics_v1`,route:`wallets_register_finalize`,entries:n.entries.map(e=>{let n=M({responseName:t,field:`registrationDiagnostics.entries[]`,value:e});if(N(n,[`name`,`durationMs`],t),typeof n.durationMs!=`number`||!Number.isFinite(n.durationMs)||n.durationMs<0)throw Error(`${t} response has invalid diagnostics durationMs`);return{name:zt(n.name),durationMs:n.durationMs}})}}function Vt(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`authority`,value:e});N(n,[`walletId`,`factor`,`verifier`,`bindingId`],t);let r=M({responseName:t,field:`authority.factor`,value:n.factor}),i=M({responseName:t,field:`authority.verifier`,value:n.verifier});switch(r.kind){case`passkey`:N(r,[`kind`,`credentialIdB64u`],t),N(i,[`kind`,`rpId`],t);break;case`email_otp`:N(r,[`kind`,`provider`,`providerUserId`],t),N(i,[`kind`,`emailHashHex`],t);break;default:throw Error(`${t} response has invalid authority factor`)}let a=We(n);if(!a)throw Error(`${t} response has invalid authority`);return a}function Ht(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`authMethod`,value:e.response.authMethod});if(String(e.authority.walletId)!==String(e.walletId))throw Error(`${t} response authority wallet mismatch`);switch(n.kind){case`passkey`:{if(N(n,[`kind`,`credentialIdB64u`,`credentialPublicKeyB64u`],t),!S(e.authority))throw Error(`${t} response has inconsistent passkey authority`);let r=I(e.response.rpId,t),i=j({responseName:t,field:`authMethod.credentialIdB64u`,value:n.credentialIdB64u});if(String(e.authority.factor.credentialIdB64u)!==i||String(e.authority.verifier.rpId)!==String(r))throw Error(`${t} response passkey authority binding mismatch`);return{kind:`passkey`,rpId:r,authMethod:{kind:`passkey`,credentialIdB64u:i,credentialPublicKeyB64u:j({responseName:t,field:`authMethod.credentialPublicKeyB64u`,value:n.credentialPublicKeyB64u})}}}case`email_otp`:if(N(n,[`kind`,`registrationAuthorityId`],t),S(e.authority)||e.response.rpId!==void 0)throw Error(`${t} response has inconsistent email OTP authority`);return{kind:`email_otp`,authMethod:{kind:`email_otp`,registrationAuthorityId:j({responseName:t,field:`authMethod.registrationAuthorityId`,value:n.registrationAuthorityId})}};default:throw Error(`${t} response has invalid authMethod`)}}function Ut(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`accountProvisioning`,value:e});switch(n.kind){case`implicit_account`:if(N(n,[`kind`,`accountIdSource`],t),n.accountIdSource!==`ed25519_public_key`)throw Error(`${t} response has invalid implicit account provisioning`);return{kind:`implicit_account`,accountIdSource:`ed25519_public_key`};case`sponsored_named_account`:{N(n,[`kind`,`requestedAccountId`,`sponsor`],t);let e=ge(n.requestedAccountId);if(!e.ok||n.sponsor!==`relayer`)throw Error(`${t} response has invalid named account provisioning`);return{kind:`sponsored_named_account`,requestedAccountId:e.value,sponsor:`relayer`}}default:throw Error(`${t} response has invalid accountProvisioning kind`)}}function Wt(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`resolvedAccount`,value:e});switch(n.kind){case`implicit_account`:{N(n,[`kind`,`nearAccountId`,`nearEd25519SigningKeyId`],t);let e=ve(n.nearAccountId);if(!e.ok)throw Error(`${t} response has invalid implicit nearAccountId`);return{kind:`implicit_account`,nearAccountId:e.value,nearEd25519SigningKeyId:Je(n.nearEd25519SigningKeyId)}}case`sponsored_named_account`:{N(n,[`kind`,`nearAccountId`,`nearEd25519SigningKeyId`,`transactionHash`],t);let e=ge(n.nearAccountId);if(!e.ok)throw Error(`${t} response has invalid named nearAccountId`);return{kind:`sponsored_named_account`,nearAccountId:e.value,nearEd25519SigningKeyId:Je(n.nearEd25519SigningKeyId),transactionHash:j({responseName:t,field:`resolvedAccount.transactionHash`,value:n.transactionHash})}}default:throw Error(`${t} response has invalid resolvedAccount kind`)}}function Gt(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`ecdsa`,value:e.value});if(N(n,[`walletKeys`],t),!Array.isArray(n.walletKeys)||n.walletKeys.length===0)throw Error(`${t} response has invalid walletKeys`);let r=new Set;return{walletKeys:n.walletKeys.map(n=>{let i=Rt(n,t);if(i.walletId!==String(e.walletId))throw Error(`${t} response ECDSA walletId mismatch`);if(String(i.publicCapability.client_id)!==String(e.walletId)||i.publicCapability.public_identity.context_binding_b64u!==i.contextBinding32B64u||i.publicCapability.public_identity.derivation_client_share_public_key33_b64u!==i.derivationClientSharePublicKey33B64u||i.publicCapability.public_identity.threshold_public_key33_b64u!==i.thresholdEcdsaPublicKeyB64u||i.publicCapability.public_identity.client_share_retry_counter!==i.clientShareRetryCounter||i.publicCapability.public_identity.server_share_retry_counter!==i.relayerShareRetryCounter)throw Error(`${t} response ECDSA public capability mismatch`);let a=Ae(i.chainTarget);if(r.has(a))throw Error(`${t} response has duplicate ECDSA target ${a}`);return r.add(a),i})}}function Kt(e){let t=`Wallet registration finalize`,n=Ft(e.response.authorityScope,t),r=Ut(e.response.accountProvisioning),i=Wt(e.response.resolvedAccount),a=Lt(e.response.ed25519,t);if(r.kind!==i.kind||i.nearAccountId!==a.nearAccountId||i.nearEd25519SigningKeyId!==a.nearEd25519SigningKeyId)throw Error(`${t} response has inconsistent Ed25519 identity`);if(n.kind===`passkey_rp`&&(!S(e.authority)||String(e.authority.verifier.rpId)!==String(n.rpId))||n.kind===`email_otp`&&(S(e.authority)||e.authority.factor.provider!==n.provider||String(e.authority.factor.providerUserId)!==n.providerUserId))throw Error(`${t} response authorityScope mismatch`);return{authorityScope:n,accountProvisioning:r,resolvedAccount:i,ed25519:a}}function qt(e){let t=`Wallet registration finalize`,n=M({responseName:t,field:`body`,value:e.value});if(N(n,[`ok`,`walletId`,`authority`,`foundingAuthority`,`foundingAuthMethod`,`registrationDiagnostics`,`rpId`,`authMethod`,`walletCustody`,`custodyKeyManifestDigestB64u`,`kind`,`authorityScope`,`accountProvisioning`,`resolvedAccount`,`ed25519`,`ecdsa`],t),n.ok!==!0||n.kind!==e.expectedKind)throw Error(`${t} response substituted signer branch`);let r=Ye(j({responseName:t,field:`walletId`,value:n.walletId})),i=Vt(n.authority),a=Ie(n.foundingAuthority),o=Ke(n.foundingAuthMethod);if(!a.ok)throw Error(`${t} response has an invalid founding authority: ${a.error.message}`);if(a.value.state!==`active`)throw Error(`${t} response has an inactive founding authority`);if(!o)throw Error(`${t} response has an invalid founding auth method`);if(o.status!==`active`)throw Error(`${t} response has an inactive founding auth method`);if(a.value.walletId!==r||o.walletId!==r)throw Error(`${t} response changed the founding wallet identity`);if(o.walletAuthorityId!==a.value.authorityId)throw Error(`${t} response has mismatched founding authority identities`);if(o.walletAuthMethodId!==i.bindingId)throw Error(`${t} response has mismatched founding auth-method identities`);let s=Ht({response:n,walletId:r,authority:i}),c=n.registrationDiagnostics===void 0?void 0:Bt(n.registrationDiagnostics),l=n.walletCustody===void 0?{}:{walletCustody:we(n.walletCustody,t)},u=n.custodyKeyManifestDigestB64u===void 0?void 0:j({responseName:t,field:`custodyKeyManifestDigestB64u`,value:n.custodyKeyManifestDigestB64u});if(u!==void 0&&ne(u).byteLength!==32)throw Error(`${t} response has invalid custodyKeyManifestDigestB64u`);let d=u===void 0?{}:{custodyKeyManifestDigestB64u:u};switch(n.kind){case`near_ed25519`:{if(n.ecdsa!==void 0)throw Error(`${t} response mixed signer branches`);let e=Kt({response:n,authority:i});return s.kind===`passkey`?{ok:!0,walletId:r,authority:i,foundingAuthority:a.value,foundingAuthMethod:o,...c?{registrationDiagnostics:c}:{},...l,...d,rpId:s.rpId,authMethod:s.authMethod,kind:`near_ed25519`,authorityScope:e.authorityScope,accountProvisioning:e.accountProvisioning,resolvedAccount:e.resolvedAccount,ed25519:e.ed25519}:{ok:!0,walletId:r,authority:i,foundingAuthority:a.value,foundingAuthMethod:o,...c?{registrationDiagnostics:c}:{},...l,...d,authMethod:s.authMethod,kind:`near_ed25519`,authorityScope:e.authorityScope,accountProvisioning:e.accountProvisioning,resolvedAccount:e.resolvedAccount,ed25519:e.ed25519}}case`evm_family_ecdsa`:{if(n.authorityScope!==void 0||n.accountProvisioning!==void 0||n.resolvedAccount!==void 0||n.ed25519!==void 0)throw Error(`${t} response mixed signer branches`);let e=Gt({value:n.ecdsa,walletId:r});return s.kind===`passkey`?{ok:!0,walletId:r,authority:i,foundingAuthority:a.value,foundingAuthMethod:o,...c?{registrationDiagnostics:c}:{},...l,...d,rpId:s.rpId,authMethod:s.authMethod,kind:`evm_family_ecdsa`,ecdsa:e}:{ok:!0,walletId:r,authority:i,foundingAuthority:a.value,foundingAuthMethod:o,...c?{registrationDiagnostics:c}:{},...l,...d,authMethod:s.authMethod,kind:`evm_family_ecdsa`,ecdsa:e}}default:throw Error(`${t} response has invalid kind`)}}const Jt=`/wallets/register/respond`,Yt=`/wallets/register/activate`,Xt=`/wallets/register/near-provisioning`,R=`X-Seams-Environment-Id`;function Zt(e){let t=[Jt];e.evmFamilyEcdsa&&t.push(Yt),e.nearEd25519&&(e.evmFamilyEcdsa&&t.push(`/wallets/register/near-admission`),t.push(Pe,Xt,ue,de)),m(e.relayerUrl,t)}function z(e){try{return new TextEncoder().encode(String(e||``)).length}catch{return String(e||``).length}}function Qt(){try{return globalThis.__SEAMS_REGISTRATION_BENCHMARK_DIAGNOSTICS===!0}catch{return!1}}function $t(e){if(!(!e.value||typeof e.value!=`object`||Array.isArray(e.value))&&!(Object.keys(e.out).length>=64))for(let[t,n]of Object.entries(e.value)){if(Object.keys(e.out).length>=64)return;let r=e.path?`${e.path}.${t}`:t;typeof n==`string`?e.out[`${r}Bytes`]=z(n):Array.isArray(n)?e.out[`${r}Count`]=n.length:e.depth>0&&n&&typeof n==`object`&&$t({value:n,out:e.out,path:r,depth:e.depth-1})}}function en(e){let t={};return $t({value:e,out:t,path:``,depth:2}),t}function tn(e){try{return JSON.parse(e)}catch{return}}function B(e,t){if(!(typeof e!=`object`||!e||Array.isArray(e)))return Reflect.get(e,t)}async function nn(e){try{return await e.text()}catch{return`{}`}}async function V(e){let t=Date.now(),n=JSON.stringify(e.body),r=await fetch(`${te(e.relayerUrl,{trim:!1})}${e.path}`,ee({headers:{...e.headers,"X-Seams-Wallet-Protocol":`5`},body:e.body,bodyJson:n}));if(e.onServerTiming)try{e.onServerTiming(r.headers.get(`Server-Timing`))}catch{}let i=await nn(r),a=tn(i);if(Qt()&&console.info(`[Registration] wallet route payload summary`,{path:e.path,status:r.status,requestBytes:z(n),requestSizeBreakdown:en(e.body),responseBytes:z(i),responseSizeBreakdown:en(a),totalMs:Date.now()-t}),!r.ok||B(a,`ok`)===!1){let e=String(B(a,`code`)||``).trim(),t=String(B(a,`message`)||B(a,`error`)||e||`HTTP ${r.status}`);throw Object.assign(Error(t),e?{code:e}:{})}return a}const rn=[`ok`,`walletId`,`nearAccountId`,`fundedAmountYocto`],an=[`transactionHash`,`message`],on=[`ok`,`code`,`message`];function sn(e,t){if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`${t} must be an object`);return e}function cn(e,t,n,r){let i=new Set([...t,...n]),a=Object.keys(e);if(a.some(e=>!i.has(e)))throw Error(`${r} contains unexpected fields`);for(let e of t)if(!a.includes(e))throw Error(`${r}.${e} is required`)}function H(e,t){return Reflect.get(e,t)}function ln(e,t){if(typeof e!=`string`||e.trim().length===0)throw Error(`${t} must be a non-empty string`);return e.trim()}function un(e,t){if(e!==void 0){if(typeof e!=`string`)throw Error(`${t} must be a string`);return e}}function dn(e){let t=sn(e,`fund implicit NEAR account response`),n=H(t,`ok`);if(n===!0){cn(t,rn,an,`fund implicit NEAR account success response`);let e=c(H(t,`walletId`));if(!e.ok)throw Error(`fund implicit NEAR account walletId is invalid`);let n=ve(H(t,`nearAccountId`));if(!n.ok)throw Error(`fund implicit NEAR account nearAccountId is invalid`);let r=un(H(t,`transactionHash`),`fund implicit NEAR account transactionHash`),i=un(H(t,`message`),`fund implicit NEAR account message`);return{ok:!0,walletId:e.value,nearAccountId:n.value,fundedAmountYocto:ln(H(t,`fundedAmountYocto`),`fund implicit NEAR account fundedAmountYocto`),...r===void 0?{}:{transactionHash:r},...i===void 0?{}:{message:i}}}if(n===!1)return cn(t,on,[],`fund implicit NEAR account failure response`),{ok:!1,code:ln(H(t,`code`),`fund implicit NEAR account code`),message:ln(H(t,`message`),`fund implicit NEAR account message`)};throw Error(`fund implicit NEAR account response has an invalid ok discriminator`)}async function fn(e){let t=String(e.walletId||``).trim(),n=String(e.nearAccountId||``).trim(),r=String(e.nearPublicKeyStr||``).trim(),i=String(e.walletSessionToken||``).trim();if(!t)throw Error(`walletId is required for implicit NEAR account funding`);if(!n)throw Error(`nearAccountId is required for implicit NEAR account funding`);if(!r)throw Error(`nearPublicKeyStr is required for implicit NEAR account funding`);if(!i)throw Error(`walletSessionToken is required for implicit NEAR account funding`);return dn(await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/near/implicit-account/fund`,headers:f({token:i,missingMessage:`walletSessionToken is required for implicit NEAR account funding`}),body:{nearAccountId:n,nearPublicKeyStr:r}}))}function pn(e){let t=String(e||``).trim();if(!t)throw Error(`Registration preparation id is required`);return t}const mn=[`formatVersion`,`walletId`,`evmFamilySigningKeySlotId`,`ecdsaThresholdKeyId`,`signingRootId`,`signingRootVersion`,`keyScope`,`relayerKeyId`,`registrationPreparationId`,`requestId`,`thresholdSessionId`,`ttlMs`,`remainingUses`,`participantIds`,`runtimePolicyScope`];function U(e){if(e.value===null||typeof e.value!=`object`||Array.isArray(e.value))throw Error(`${e.responseName} response missing ${e.field}`);return e.value}function W(e,t,n){if(!Object.keys(e).includes(t))throw Error(`${n} is missing ${t}`);return Reflect.get(e,t)}function G(e,t,n){if(Object.keys(e).includes(t))return Reflect.get(e,t)}function K(e,t,n){let r=new Set(t);for(let t of Object.keys(e))if(!r.has(t))throw Error(`${n} contains unexpected ${t}`)}function q(e,t){if(!Array.isArray(e))throw Error(`${t} must be an array`);return e}function hn(e,t){return Object.keys(e).includes(t)}function gn(e,t){if(typeof e!=`string`||e.length===0||e.trim()!==e)throw Error(`${t} must be a non-empty canonical string`);return e}function _n(e,t,n){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<n)throw Error(`${t} must be a safe integer`);return e}function J(e,t,n){return gn(W(e,t,n),`${n}.${t}`)}function Y(e,t,n){if(hn(e,t))return gn(W(e,t,n),`${n}.${t}`)}function X(e,t,n,r){return _n(W(e,t,n),`${n}.${t}`,r)}function vn(e,t){let n=q(e,t);if(n.length===0)throw Error(`${t} must not be empty`);let r=[];for(let e=0;e<n.length;e+=1)r.push(_n(n[e],`${t}[${e}]`,1));return r}function yn(e,t){let n=vn(e,t);if(n.length!==2||n[0]!==1||n[1]!==2)throw Error(`${t} must be [1, 2]`);return[1,2]}function bn(e,t,n=!1){if(e===void 0)return;let r=`${t} runtimePolicyScope`,i=U({responseName:r,field:`value`,value:e});K(i,[`orgId`,`projectId`,`envId`,`signingRootVersion`],r);let a=Y(i,`signingRootVersion`,r);if(n&&a===void 0)throw Error(`${r}.signingRootVersion is required`);let o={orgId:J(i,`orgId`,r),projectId:J(i,`projectId`,r),envId:J(i,`envId`,r)};return a===void 0?o:{...o,signingRootVersion:a}}function xn(e,t){let n=bn(e,t,!0);if(!n||n.signingRootVersion===void 0)throw Error(`${t} runtimePolicyScope is invalid`);return{orgId:n.orgId,projectId:n.projectId,envId:n.envId,signingRootVersion:n.signingRootVersion}}function Sn(e){let t=`Wallet registration setup intent authMethod`,n=U({responseName:t,field:`value`,value:e});switch(J(n,`kind`,t)){case`passkey`:if(K(n,[`kind`,`rpId`,`authenticatorOptions`],t),!r(J(n,`rpId`,t)).ok)throw Error(`${t}.rpId is invalid`);if(!hn(n,`authenticatorOptions`))break;if(W(n,`authenticatorOptions`,t)===void 0)throw Error(`${t}.authenticatorOptions must be defined when present`);break;case`email_otp`:switch(J(n,`proofKind`,t)){case`otp_challenge`:K(n,[`kind`,`proofKind`,`email`,`providerSubject`,`otpCode`,`challengeId`],t),Y(n,`challengeId`,t),J(n,`email`,t),J(n,`providerSubject`,t),J(n,`otpCode`,t);break;case`google_sso_registration`:K(n,[`kind`,`proofKind`,`email`,`providerSubject`,`googleEmailOtpRegistrationAttemptId`,`googleEmailOtpRegistrationOfferId`,`googleEmailOtpRegistrationCandidateId`],t),J(n,`email`,t),J(n,`providerSubject`,t),J(n,`googleEmailOtpRegistrationAttemptId`,t),J(n,`googleEmailOtpRegistrationOfferId`,t),J(n,`googleEmailOtpRegistrationCandidateId`,t);break;default:throw Error(`${t}.proofKind is invalid`)}break;default:throw Error(`${t}.kind is invalid`)}let i=qe(e);if(!i)throw Error(`${t} is invalid`);return i}function Cn(e){let t=`Wallet registration setup intent accountProvisioning`,n=U({responseName:t,field:`value`,value:e}),r=J(n,`kind`,t);switch(r){case`implicit_account`:if(K(n,[`kind`,`accountIdSource`],t),J(n,`accountIdSource`,t)!==`ed25519_public_key`)throw Error(`${t}.accountIdSource is invalid`);return{kind:r,accountIdSource:`ed25519_public_key`};case`sponsored_named_account`:{if(K(n,[`kind`,`requestedAccountId`,`sponsor`],t),J(n,`sponsor`,t)!==`relayer`)throw Error(`${t}.sponsor is invalid`);let e=ge(J(n,`requestedAccountId`,t));if(!e.ok)throw Error(`${t}.requestedAccountId is invalid`);return{kind:r,requestedAccountId:e.value,sponsor:`relayer`}}default:throw Error(`${t}.kind is invalid`)}}function wn(e,t){switch(e.kind){case`evm`:return t.kind===`evm`&&e.namespace===t.namespace&&e.chainId===t.chainId&&e.networkSlug===t.networkSlug;case`tempo`:return t.kind===`tempo`&&e.chainId===t.chainId&&e.networkSlug===t.networkSlug;default:return Tn(e)}}function Tn(e){throw Error(`Unsupported wallet registration setup chain target: ${String(e)}`)}function Z(e,t){let n=U({responseName:t,field:`chainTarget`,value:e}),r=J(n,`kind`,t);switch(r){case`evm`:{if(K(n,[`kind`,`namespace`,`chainId`,`networkSlug`],t),J(n,`namespace`,t)!==`eip155`)throw Error(`${t}.namespace is invalid`);let e=X(n,`chainId`,t,1),i=Y(n,`networkSlug`,t);return i===void 0?{kind:r,namespace:`eip155`,chainId:e}:{kind:r,namespace:`eip155`,chainId:e,networkSlug:i}}case`tempo`:{K(n,[`kind`,`chainId`,`networkSlug`],t);let e=X(n,`chainId`,t,1),i=Y(n,`networkSlug`,t);return i===void 0?{kind:r,chainId:e}:{kind:r,chainId:e,networkSlug:i}}default:throw Error(`${t}.kind is invalid`)}}function En(e){try{return Z(e,`Wallet registration setup intent`)}catch{return null}}function Dn(e){let t=`Wallet registration setup intent signer`,n=U({responseName:t,field:`value`,value:e}),r=J(n,`kind`,t);switch(r){case`near_ed25519`:if(K(n,[`kind`,`accountProvisioning`,`signerSlot`,`participantIds`,`derivationVersion`],t),X(n,`derivationVersion`,t,1)!==1)throw Error(`${t}.derivationVersion is invalid`);return{kind:r,accountProvisioning:Cn(W(n,`accountProvisioning`,t)),signerSlot:X(n,`signerSlot`,t,1),participantIds:vn(W(n,`participantIds`,t),`${t}.participantIds`),derivationVersion:1};case`evm_family_ecdsa`:{K(n,[`kind`,`participantIds`,`chainTargets`],t);let e=q(W(n,`chainTargets`,t),`${t}.chainTargets`);if(e.length===0)throw Error(`${t}.chainTargets must not be empty`);let i=[];for(let n of e){let e=Z(n,`${t}.chainTargets`);if(i.some(t=>wn(t,e)))throw Error(`${t}.chainTargets contains a duplicate target`);i.push(e)}return{kind:r,participantIds:vn(W(n,`participantIds`,t),`${t}.participantIds`),chainTargets:i}}default:throw Error(`${t}.kind is invalid`)}}function On(e){let t=`Wallet registration setup intent signerSelection`,n=U({responseName:t,field:`value`,value:e});if(K(n,[`kind`,`signers`],t),J(n,`kind`,t)!==`signer_set`)throw Error(`${t}.kind is invalid`);let r=q(W(n,`signers`,t),`${t}.signers`);if(r.length===0)throw Error(`${t}.signers must not be empty`);let i=[];for(let e of r)i.push(Dn(e));return{kind:`signer_set`,signers:i}}function kn(e){let n=`Wallet registration setup intent`,r=U({responseName:n,field:`intent`,value:e});if(K(r,[`version`,`completion`,`walletId`,`authMethod`,`signerSelection`,`foundingWalletAuthMethodId`,`runtimePolicyScope`,`nonceB64u`],n),J(r,`version`,n)!==`registration_intent_v1`)throw Error(`${n}.version is invalid`);let i=J(r,`completion`,n);if(i!==`wallet_session`&&i!==`owner_operations`)throw Error(`Invalid registration completion`);let a=c(J(r,`walletId`,n));if(!a.ok)throw Error(`${n}.walletId is invalid`);let o=t(J(r,`foundingWalletAuthMethodId`,n));if(!o.ok)throw Error(`${n}.foundingWalletAuthMethodId is invalid`);let s=Sn(W(r,`authMethod`,n)),l=On(W(r,`signerSelection`,n)),u=bn(G(r,`runtimePolicyScope`,n),n),d=J(r,`nonceB64u`,n);return u===void 0?{version:`registration_intent_v1`,completion:i,walletId:a.value,authMethod:s,signerSelection:l,foundingWalletAuthMethodId:o.value,nonceB64u:d}:{version:`registration_intent_v1`,completion:i,walletId:a.value,authMethod:s,signerSelection:l,foundingWalletAuthMethodId:o.value,runtimePolicyScope:u,nonceB64u:d}}function An(e){let t=`Wallet add-signer ECDSA derivation`,n=U({responseName:t,field:`response`,value:e});if(K(n,[`ok`,`addSignerCeremonyId`,`ecdsa`],`${t} response`),W(n,`ok`,`${t} response`)!==!0)throw Error(`${t} response is not successful`);let r=U({responseName:t,field:`ecdsa`,value:W(n,`ecdsa`,`${t} response`)});if(K(r,[`kind`,`strictResult`],`${t} response ecdsa`),W(r,`kind`,`${t} response ecdsa`)!==`router_ab_ecdsa_registration_forwarded_v1`)throw Error(`${t} response kind is invalid`);return{ok:!0,addSignerCeremonyId:j({responseName:t,field:`addSignerCeremonyId`,value:W(n,`addSignerCeremonyId`,t)}),ecdsa:{kind:`router_ab_ecdsa_registration_forwarded_v1`,strictResult:Be(W(r,`strictResult`,`${t} response ecdsa`))}}}function jn(e){let t=`Wallet add-signer ECDSA activation`,n=U({responseName:t,field:`response`,value:e});if(K(n,[`ok`,`addSignerCeremonyId`,`ecdsa`],`${t} response`),W(n,`ok`,`${t} response`)!==!0)throw Error(`${t} response is not successful`);let r=U({responseName:t,field:`ecdsa`,value:W(n,`ecdsa`,`${t} response`)});if(K(r,[`kind`,`activation`,`bootstrap`],`${t} response ecdsa`),W(r,`kind`,`${t} response ecdsa`)!==`router_ab_ecdsa_registration_activated_v1`)throw Error(`${t} response kind is invalid`);return{ok:!0,addSignerCeremonyId:j({responseName:t,field:`addSignerCeremonyId`,value:W(n,`addSignerCeremonyId`,t)}),ecdsa:{kind:`router_ab_ecdsa_registration_activated_v1`,activation:Ue(W(r,`activation`,`${t} response ecdsa`)),bootstrap:it(W(r,`bootstrap`,`${t} response ecdsa`))}}}function Mn(e){return e.authMethod.kind===`email_otp`}function Nn(e){let t=`Wallet add-auth-method intent`,n=U({responseName:t,field:`body`,value:e});if(K(n,[`ok`,`intent`,`addAuthMethodIntentDigestB64u`,`addAuthMethodIntentGrant`,`expiresAtMs`],t),W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=be(W(n,`intent`,t)),i;try{i=pe(W(n,`addAuthMethodIntentDigestB64u`,t))}catch{throw Error(`${t} response has invalid addAuthMethodIntentDigestB64u`)}let a=W(n,`addAuthMethodIntentGrant`,t);if(typeof a!=`string`||!a.trim())throw Error(`${t} response is missing addAuthMethodIntentGrant`);return{ok:!0,intent:r,addAuthMethodIntentDigestB64u:i,addAuthMethodIntentGrant:Oe(a),expiresAtMs:P({responseName:t,field:`expiresAtMs`,value:W(n,`expiresAtMs`,t),minimum:1})}}function Pn(e){let t=`Wallet add-signer intent`,n=U({responseName:t,field:`body`,value:e});if(K(n,[`ok`,`intent`,`addSignerIntentDigestB64u`,`addSignerIntentGrant`,`expiresAtMs`],t),W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=Ee(W(n,`intent`,t)),i;try{i=pe(W(n,`addSignerIntentDigestB64u`,t))}catch{throw Error(`${t} response has invalid addSignerIntentDigestB64u`)}let a=W(n,`addSignerIntentGrant`,t);if(typeof a!=`string`||!a.trim())throw Error(`${t} response is missing addSignerIntentGrant`);return{ok:!0,intent:r,addSignerIntentDigestB64u:i,addSignerIntentGrant:Te(a),expiresAtMs:P({responseName:t,field:`expiresAtMs`,value:W(n,`expiresAtMs`,t),minimum:1})}}function Fn(e){let t=`Wallet add-auth-method finalize`,i=U({responseName:t,field:`body`,value:e});if(W(i,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let a=U({responseName:t,field:`authMethod`,value:W(i,`authMethod`,t)}),o=W(a,`kind`,`${t} authMethod`);if(o!==`passkey`&&o!==`email_otp`)throw Error(`${t} response has invalid authMethod kind`);let s=c(W(i,`walletId`,t));if(!s.ok)throw Error(`${t} response has invalid walletId`);let l=We(W(i,`authority`,t));if(!l)throw Error(`${t} response has invalid authority`);if(l.walletId!==s.value)throw Error(`${t} response authority wallet mismatch`);if(o===`passkey`){if(K(i,[`ok`,`walletId`,`authority`,`rpId`,`authMethod`],t),K(a,[`kind`,`status`,`credentialIdB64u`,`credentialPublicKeyB64u`,`counter`,`device`],`${t} authMethod`),W(a,`status`,t)!==`active`)throw Error(`${t} response has invalid authMethod status`);if(l.factor.kind!==`passkey`||l.verifier.kind!==`webauthn`)throw Error(`${t} response has inconsistent passkey authority`);let e=r(W(i,`rpId`,t));if(!e.ok)throw Error(`${t} response has invalid rpId`);let o=n(W(a,`credentialIdB64u`,t));if(!o.ok)throw Error(`${t} response has invalid credentialIdB64u`);let c=W(a,`credentialPublicKeyB64u`,t);if(typeof c!=`string`||!c.trim())throw Error(`${t} response is missing credentialPublicKeyB64u`);let u=W(a,`counter`,t);if(typeof u!=`number`||!Number.isSafeInteger(u)||u<0)throw Error(`${t} response has invalid counter`);let d=Ne(W(a,`device`,t));if(!d)throw Error(`${t} response has invalid device`);if(l.factor.credentialIdB64u!==o.value||l.verifier.rpId!==e.value)throw Error(`${t} response passkey authority binding mismatch`);return{ok:!0,walletId:s.value,authority:l,rpId:e.value,authMethod:{kind:`passkey`,status:`active`,credentialIdB64u:o.value,credentialPublicKeyB64u:c.trim(),counter:u,device:d}}}if(K(i,[`ok`,`walletId`,`authority`,`authMethod`],t),K(a,[`kind`,`status`],`${t} authMethod`),W(a,`status`,t)!==`active`)throw Error(`${t} response has invalid authMethod status`);if(l.factor.kind!==`email_otp`||l.verifier.kind!==`email_otp_wallet_auth_method`)throw Error(`${t} response has inconsistent email OTP authority`);return{ok:!0,walletId:s.value,authority:l,authMethod:{kind:`email_otp`,status:`active`}}}function In(e){let t=`Wallet add-auth-method start`,n=U({responseName:t,field:`body`,value:e.value});if(W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=j({responseName:t,field:`addAuthMethodCeremonyId`,value:W(n,`addAuthMethodCeremonyId`,t)}),i=Rn(W(n,`intent`,t),e.expectedIntent);return e.expectedIntent.authMethod.kind===`email_otp`?(K(n,[`ok`,`addAuthMethodCeremonyId`,`intent`,`custodyEnvelope`,`addAuthMethodCeremonyExpiresAtMs`],t),{ok:!0,addAuthMethodCeremonyId:r,intent:i,custodyEnvelope:y(W(n,`custodyEnvelope`,t)),addAuthMethodCeremonyExpiresAtMs:P({responseName:t,field:`addAuthMethodCeremonyExpiresAtMs`,value:W(n,`addAuthMethodCeremonyExpiresAtMs`,t),minimum:1})}):(K(n,[`ok`,`addAuthMethodCeremonyId`,`intent`,`custodyEnvelope`,`registration`,`addAuthMethodCeremonyExpiresAtMs`],t),{ok:!0,addAuthMethodCeremonyId:r,intent:i,custodyEnvelope:y(W(n,`custodyEnvelope`,t)),registration:Me(W(n,`registration`,t)),addAuthMethodCeremonyExpiresAtMs:P({responseName:t,field:`addAuthMethodCeremonyExpiresAtMs`,value:W(n,`addAuthMethodCeremonyExpiresAtMs`,t),minimum:1})})}function Ln(e,t){try{if(!xe(Ee(e),t))throw Error(`intent mismatch`)}catch{throw Error(`Wallet add-signer start response changed the admitted intent`)}return t}function Rn(e,t){try{if(!De(be(e),t))throw Error(`intent mismatch`)}catch{throw Error(`Wallet add-auth-method start response changed the admitted intent`)}return t}function zn(e,t){let n=U({responseName:t,field:`ecdsa.prepare`,value:e});if(K(n,mn,t),W(n,`formatVersion`,t)!==`ecdsa-derivation-role-local`||W(n,`keyScope`,t)!==`evm-family`)throw Error(`${t} response has invalid prepare discriminator`);let r=re(W(n,`runtimePolicyScope`,t));if(!r)throw Error(`${t} response has invalid runtimePolicyScope`);return{formatVersion:`ecdsa-derivation-role-local`,walletId:j({responseName:t,field:`prepare.walletId`,value:W(n,`walletId`,t)}),evmFamilySigningKeySlotId:j({responseName:t,field:`prepare.evmFamilySigningKeySlotId`,value:W(n,`evmFamilySigningKeySlotId`,t)}),ecdsaThresholdKeyId:j({responseName:t,field:`prepare.ecdsaThresholdKeyId`,value:W(n,`ecdsaThresholdKeyId`,t)}),signingRootId:j({responseName:t,field:`prepare.signingRootId`,value:W(n,`signingRootId`,t)}),signingRootVersion:j({responseName:t,field:`prepare.signingRootVersion`,value:W(n,`signingRootVersion`,t)}),keyScope:`evm-family`,relayerKeyId:j({responseName:t,field:`prepare.relayerKeyId`,value:W(n,`relayerKeyId`,t)}),registrationPreparationId:pn(j({responseName:t,field:`prepare.registrationPreparationId`,value:W(n,`registrationPreparationId`,t)})),requestId:j({responseName:t,field:`prepare.requestId`,value:W(n,`requestId`,t)}),thresholdSessionId:j({responseName:t,field:`prepare.thresholdSessionId`,value:W(n,`thresholdSessionId`,t)}),ttlMs:P({responseName:t,field:`prepare.ttlMs`,value:W(n,`ttlMs`,t),minimum:1}),remainingUses:P({responseName:t,field:`prepare.remainingUses`,value:W(n,`remainingUses`,t),minimum:0}),participantIds:[...F(W(n,`participantIds`,t),t)],runtimePolicyScope:r}}function Bn(e,t){let n=U({responseName:t,field:`ecdsa.prepare`,value:e});if(K(n,mn,t),W(n,`formatVersion`,t)!==`ecdsa-derivation-role-local`||W(n,`keyScope`,t)!==`evm-family`)throw Error(`${t} response has invalid prepare discriminator`);for(let e of[`walletId`,`evmFamilySigningKeySlotId`,`ecdsaThresholdKeyId`,`signingRootId`,`signingRootVersion`,`relayerKeyId`,`registrationPreparationId`,`requestId`,`thresholdSessionId`])J(n,e,t);X(n,`ttlMs`,t,1),X(n,`remainingUses`,t,0),yn(W(n,`participantIds`,t),`${t}.participantIds`),xn(W(n,`runtimePolicyScope`,t),t)}function Vn(e){let t=`Wallet registration setup ECDSA`,n=U({responseName:t,field:`ecdsa`,value:e});if(K(n,[`kind`,`chainTargets`,`prepare`,`strictRegistration`],t),W(n,`kind`,t)!==`evm_family_ecdsa_keygen`)throw Error(`${t} response has an invalid kind`);let r=W(n,`chainTargets`,t);if(!Array.isArray(r)||r.length===0)throw Error(`${t} response has invalid chainTargets`);let i=[];for(let e of r){let n=Z(e,`${t}.chainTargets`);if(i.some(e=>wn(e,n)))throw Error(`${t} response has duplicate chainTargets`);i.push(n)}let[a,...o]=i;if(!a)throw Error(`${t} response has invalid chainTargets`);let s=W(n,`prepare`,t);Bn(s,t);let c=zn(s,t),l=ze(W(n,`strictRegistration`,t));if(l.registration_purpose!==`wallet_registration`)throw Error(`${t} response has an invalid registration purpose`);return{kind:`evm_family_ecdsa_keygen`,chainTargets:[a,...o],prepare:c,strictRegistration:l}}function Hn(e){let t=!1,n=!1;for(let r of e.signerSelection.signers)switch(r.kind){case`near_ed25519`:t=!0;break;case`evm_family_ecdsa`:n=!0;break;default:return Un(r)}if(t&&n)return`near_ed25519_and_evm_family_ecdsa`;if(n)return`evm_family_ecdsa`;if(t)return`near_ed25519`;throw Error(`Wallet registration setup intent has no signer branch`)}function Un(e){throw Error(`Unsupported wallet registration setup signer: ${String(e)}`)}function Wn(e,t){if(e.length!==t.length)return!1;for(let n=0;n<e.length;n+=1)if(e[n]!==t[n])return!1;return!0}function Gn(e,t){return e!==void 0&&e.orgId===t.orgId&&e.projectId===t.projectId&&e.envId===t.envId&&e.signingRootVersion===t.signingRootVersion}function Kn(e,t){try{return wn(Z(e,`Wallet registration setup intent`),t)}catch{return!1}}function qn(e){let t=e.intent.signerSelection.signers.find(e=>e.kind===`evm_family_ecdsa`);if(!t)throw Error(`${e.responseName} response has no ECDSA intent branch`);if(t.chainTargets.length!==e.ecdsa.chainTargets.length||t.chainTargets.some((t,n)=>!Kn(t,e.ecdsa.chainTargets[n])))throw Error(`${e.responseName} response ECDSA chainTargets do not match intent`);if(!Wn(t.participantIds,e.ecdsa.prepare.participantIds))throw Error(`${e.responseName} response ECDSA participantIds do not match intent`);if(e.ecdsa.prepare.walletId!==String(e.walletId))throw Error(`${e.responseName} response ECDSA prepare walletId does not match response`);if(!Gn(e.intent.runtimePolicyScope,e.ecdsa.prepare.runtimePolicyScope))throw Error(`${e.responseName} response ECDSA runtimePolicyScope does not match intent`);let n=e.ecdsa.strictRegistration.lifecycle;if(n.lifecycle_id!==e.registrationCeremonyId||n.account_id!==String(e.walletId)||e.ecdsa.strictRegistration.client_id!==String(e.walletId))throw Error(`${e.responseName} response ECDSA identities do not match response`)}function Jn(e){let n=`Wallet registration setup`,r=U({responseName:n,field:`body`,value:e});if(W(r,`ok`,n)!==!0)throw Error(`${n} response is not successful`);let i=W(r,`kind`,n);if(i!==`near_ed25519`&&i!==`evm_family_ecdsa`&&i!==`near_ed25519_and_evm_family_ecdsa`)throw Error(`${n} response kind is invalid`);let a=i!==`near_ed25519`;K(r,[`ok`,`registrationCeremonyId`,`walletId`,`walletAuthMethodId`,`registrationIntentDigestB64u`,`intent`,`signedSetup`,`home`,`kind`,a?`ecdsa`:`ed25519`],n);let o=J(r,`registrationCeremonyId`,n),s=c(J(r,`walletId`,n));if(!s.ok)throw Error(`${n} response has an invalid walletId`);let l=t(J(r,`walletAuthMethodId`,n));if(!l.ok)throw Error(`${n} response has an invalid walletAuthMethodId`);let u=kn(W(r,`intent`,n));if(u.walletId!==s.value)throw Error(`${n} response walletId does not match intent`);if(u.foundingWalletAuthMethodId!==l.value)throw Error(`${n} response walletAuthMethodId does not match intent`);let d;try{d=pe(W(r,`registrationIntentDigestB64u`,n))}catch{throw Error(`${n} response has an invalid registrationIntentDigestB64u`)}let f=se(W(r,`home`,n)),p=W(r,`signedSetup`,n);if(typeof p!=`string`||!p.trim())throw Error(`${n} response missing signedSetup`);if(!a){if(Hn(u)!==i)throw Error(`${n} response kind does not match intent`);return{ok:!0,registrationCeremonyId:o,walletId:s.value,walletAuthMethodId:l.value,registrationIntentDigestB64u:d,intent:u,signedSetup:p,home:f,kind:`near_ed25519`,ed25519:Yn(W(r,`ed25519`,n),{registrationCeremonyId:o,walletId:s.value})}}let m=Vn(W(r,`ecdsa`,n));if(Hn(u)!==i)throw Error(`${n} response kind does not match intent`);return qn({responseName:n,registrationCeremonyId:o,walletId:s.value,intent:u,ecdsa:m}),{ok:!0,registrationCeremonyId:o,walletId:s.value,walletAuthMethodId:l.value,registrationIntentDigestB64u:d,intent:u,signedSetup:p,home:f,kind:i,ecdsa:m}}function Yn(e,t){let n=`Wallet registration setup ed25519`,r=U({responseName:n,field:`ed25519`,value:e}),i=W(r,`status`,n);if(i===`after_proof`)return K(r,[`status`],n),{status:`after_proof`};if(i!==`described`)throw Error(`${n} status is invalid`);K(r,[`status`,`admissionRequest`,`admissionReceipt`],n);let a=x(W(r,`admissionRequest`,n)),o=Le(W(r,`admissionReceipt`,n));if(!a.ok||!o.ok)throw Error(`${n} request or receipt is invalid`);if(a.value.scope.lifecycle_id!==t.registrationCeremonyId||a.value.scope.account_id!==t.walletId||a.value.application_binding.wallet_id!==t.walletId||o.value.binding.lifecycle.lifecycle_id!==t.registrationCeremonyId||o.value.binding.lifecycle.account_id!==t.walletId)throw Error(`${n} admission does not belong to this registration`);return{status:`described`,admissionRequest:a.value,admissionReceipt:o.value}}function Xn(e){let t=e.completion??`wallet_session`;if(t!==`wallet_session`&&t!==`owner_operations`)throw Error(`Invalid registration completion`);let n=qe(e.authMethod);if(!n)throw Error(`Wallet registration setup request authMethod is invalid`);let r=Xe(e.signerSelection);if(!r.ok)throw Error(`Wallet registration setup request signerSelection is invalid: ${r.message}`);let i=Ze(r.value,{normalizeEcdsaChainTarget:En});if(!i.ok)throw Error(`Wallet registration setup request signerSelection is invalid: ${i.message}`);return{completion:t,wallet:e.wallet??{kind:`server_allocated`},authMethod:n,signerSelection:i.value}}function Zn(e,t){let n={version:`registration_intent_v1`,completion:t.completion,walletId:e.walletId,authMethod:t.authMethod,signerSelection:t.signerSelection,foundingWalletAuthMethodId:e.foundingWalletAuthMethodId,nonceB64u:e.nonceB64u};return e.runtimePolicyScope===void 0?n:{...n,runtimePolicyScope:e.runtimePolicyScope}}async function Qn(e){if(e.requestedWallet?.kind===`provided`&&String(e.requestedWallet.walletId)!==e.response.walletId)throw Error(`Wallet registration setup response walletId does not match request`);if(await Se(e.response.intent)!==e.response.registrationIntentDigestB64u)throw Error(`Wallet registration setup response digest does not match intent`);if(await Se(Zn(e.response.intent,e.request))!==e.response.registrationIntentDigestB64u)throw Error(`Wallet registration setup response intent does not match request`)}function $n(e,t){let n=`Wallet add-signer ECDSA start`,r=U({responseName:n,field:`ecdsa`,value:e});K(r,[`kind`,`chainTargets`,`prepare`,`strictRegistration`,`custodyEnvelope`],n);let i=W(r,`kind`,n),a=W(r,`chainTargets`,n);if(i!==`evm_family_ecdsa_keygen`||!Array.isArray(a))throw Error(`${n} response has invalid payload`);if(t.signerSelection.mode!==`ecdsa`)throw Error(`${n} response substituted signer branch`);let o=t.signerSelection.ecdsa.chainTargets;if(a.length!==o.length)throw Error(`${n} response changed target count`);let s=[];for(let e=0;e<a.length;e+=1){let t=a[e],r=L(t,n),i=o[e];if(!i||!je(r,L(i,n)))throw Error(`${n} response changed chainTarget`);s.push(r)}let[c,...l]=s;if(!c)throw Error(`${n} response requires an EVM-family target`);let u=zn(W(r,`prepare`,n),n),d=ze(W(r,`strictRegistration`,n));if(d.registration_purpose!==`wallet_add_signer`)throw Error(`${n} response has invalid registration purpose`);return{kind:`evm_family_ecdsa_keygen`,chainTargets:[c,...l],prepare:u,strictRegistration:d}}function er(e){let t=`Wallet add-signer start`,n=U({responseName:t,field:`body`,value:e.value});if(K(n,[`ok`,`addSignerCeremonyId`,`intent`,`authorizationKind`,`kind`,`ed25519`,`ecdsa`],t),W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=j({responseName:t,field:`addSignerCeremonyId`,value:W(n,`addSignerCeremonyId`,t)}),i=Ln(W(n,`intent`,t),e.expectedIntent),a=W(n,`authorizationKind`,t);if(a!==`webauthn_assertion`)throw Error(`${t} response has invalid authorization kind`);switch(W(n,`kind`,t)){case`near_ed25519`:{if(a!==`webauthn_assertion`||i.signerSelection.mode!==`ed25519`||G(n,`ecdsa`,t)!==void 0)throw Error(`${t} response substituted signer branch`);let e=U({responseName:t,field:`ed25519`,value:W(n,`ed25519`,t)});K(e,[`admissionRequest`,`custodyEnvelope`],t);let o=x(W(e,`admissionRequest`,t));if(!o.ok)throw Error(o.message);return{ok:!0,addSignerCeremonyId:r,intent:i,authorizationKind:`webauthn_assertion`,kind:`near_ed25519`,ed25519:{admissionRequest:o.value,custodyEnvelope:y(W(e,`custodyEnvelope`,t))}}}case`evm_family_ecdsa`:{if(i.signerSelection.mode!==`ecdsa`||G(n,`ed25519`,t)!==void 0)throw Error(`${t} response substituted signer branch`);let e=W(n,`ecdsa`,t),a=$n(e,i),o=U({responseName:t,field:`ecdsa`,value:e});return{ok:!0,addSignerCeremonyId:r,intent:i,authorizationKind:`webauthn_assertion`,kind:`evm_family_ecdsa`,ecdsa:{...a,custodyEnvelope:y(W(o,`custodyEnvelope`,t))}}}default:throw Error(`${t} response has invalid kind`)}}function tr(e){let t=`Wallet add-signer finalize`,n=U({responseName:t,field:`body`,value:e.value});K(n,[`ok`,`walletId`,`kind`,`rpId`,`credentialIdB64u`,`ed25519`,`ecdsa`,`authority`],t);let r=W(n,`ok`,t),i=W(n,`kind`,t);if(r!==!0||i!==e.expectedKind)throw Error(`${t} response substituted signer branch`);let a=Ye(j({responseName:t,field:`walletId`,value:W(n,`walletId`,t)})),o=I(W(n,`rpId`,t),t);switch(i){case`near_ed25519`:{if(G(n,`ecdsa`,t)!==void 0||G(n,`authority`,t)!==void 0)throw Error(`${t} response mixed signer branches`);let e=It(W(n,`ed25519`,t),`Wallet add-signer Ed25519 finalize`);return{ok:!0,walletId:a,kind:`near_ed25519`,rpId:o,credentialIdB64u:j({responseName:t,field:`credentialIdB64u`,value:W(n,`credentialIdB64u`,t)}),ed25519:e}}case`evm_family_ecdsa`:{if(G(n,`ed25519`,t)!==void 0||G(n,`credentialIdB64u`,t)!==void 0)throw Error(`${t} response mixed signer branches`);let e=U({responseName:t,field:`ecdsa`,value:W(n,`ecdsa`,t)});K(e,[`walletKeys`],t);let r=q(W(e,`walletKeys`,t),`${t} walletKeys`);if(r.length===0)throw Error(`${t} response has invalid walletKeys`);let i=Ie(W(n,`authority`,t));if(!i.ok||i.value.state!==`active`||i.value.walletId!==a)throw Error(`${t} response has invalid authority`);return{ok:!0,walletId:a,kind:`evm_family_ecdsa`,rpId:o,ecdsa:{walletKeys:r.map(nr)},authority:i.value}}default:throw Error(`${t} response has invalid kind`)}}function nr(e){return Rt(e,`Wallet add-signer ECDSA finalize`)}function Q(e){let t=String(e.expected||``).trim(),n=String(e.actual||``).trim();if(!t||!n)throw Error(`ECDSA registration bootstrap returned incomplete ${e.field}`);if(t!==n)throw Error(`ECDSA registration bootstrap ${e.field} mismatch`);return n}function rr(e){let t=e.expected.map(e=>Math.floor(Number(e))),n=e.actual.map(e=>Math.floor(Number(e)));if(t.length===0||n.length===0||t.some(e=>!Number.isSafeInteger(e)||e<=0)||n.some(e=>!Number.isSafeInteger(e)||e<=0))throw Error(`ECDSA registration bootstrap returned incomplete participantIds`);if(t.length!==n.length||t.some((e,t)=>e!==n[t]))throw Error(`ECDSA registration bootstrap participantIds mismatch`);return n}function ir(e){let t=e.clientBootstrap,n=e.serverBootstrap;Q({field:`derivationClientSharePublicKey33B64u`,expected:t.derivationClientSharePublicKey33B64u,actual:n.publicIdentity.derivationClientSharePublicKey33B64u});let r=Q({field:`contextBinding32B64u`,expected:t.contextBinding32B64u,actual:n.contextBinding32B64u}),i=Q({field:`walletId`,expected:t.walletId,actual:n.walletId}),a=Q({field:`evmFamilySigningKeySlotId`,expected:t.evmFamilySigningKeySlotId,actual:n.evmFamilySigningKeySlotId});Q({field:`activationEpoch`,expected:e.activationEpoch,actual:n.activationEpoch});let o=rr({expected:t.participantIds,actual:n.participantIds}),s=Re(n.routerAbEcdsaDerivationNormalSigning),c=String(n.ecdsaThresholdKeyId||``).trim(),l=String(n.keyHandle||``).trim(),u=String(n.signingRootId||``).trim(),d=String(n.signingRootVersion||``).trim(),f=String(n.applicationBindingDigestB64u||``).trim(),p=String(n.thresholdEcdsaPublicKeyB64u||``).trim(),m=String(n.ethereumAddress||``).trim(),ee=String(n.relayerKeyId||``).trim(),te=String(n.relayerVerifyingShareB64u||``).trim(),h=Math.floor(Number(n.relayerShareRetryCounter));if(!i||!a||!l||!c||!u||!d||!f||!p||!m||!ee||!te||!Number.isSafeInteger(h)||h<0||!o.length||o.some(e=>!Number.isSafeInteger(e)||e<=0))throw Error(`ECDSA registration bootstrap returned incomplete session material`);return{walletId:i,evmFamilySigningKeySlotId:a,ecdsaThresholdKeyId:c,relayerKeyId:ee,applicationBindingDigestB64u:f,contextBinding32B64u:r,publicIdentity:n.publicIdentity,relayerShareRetryCounter:h,keyHandle:l,signingRootId:u,signingRootVersion:d,thresholdEcdsaPublicKeyB64u:p,ethereumAddress:m,relayerVerifyingShareB64u:te,participantIds:o,routerAbEcdsaDerivationNormalSigning:s}}function ar(e){let t=`Wallet ECDSA key-facts inventory`,n=U({responseName:t,field:`body`,value:e.value});if(K(n,[`ok`,`ecdsaKeyIdentityTargets`,`diagnostics`],t),W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=q(W(n,`ecdsaKeyIdentityTargets`,t),`${t} ecdsaKeyIdentityTargets`);return{ok:!0,records:Pt({walletId:e.walletId,rpId:e.rpId,records:r}),diagnostics:W(n,`diagnostics`,t)}}async function or(e){let t=String(e.auth?.publishableKey||``).trim(),n=String(e.auth?.environmentId||``).trim();if(!t||!n)return{ok:!1,code:`invalid_body`,message:`registration setup requires a publishable key and environment id`};let r=Xn(e.request),i=await Ce({relayerUrl:e.relayerUrl,publishableKey:t,environmentId:n}),a=await ye.begin(i,r),o=Jn(await V({relayerUrl:e.relayerUrl,path:h,headers:{...e.headers,Authorization:`Bearer ${t}`,[R]:n},body:{registrationOperationId:a.operationId,completion:r.completion,wallet:r.wallet,signerSelection:r.signerSelection,authMethod:r.authMethod},...e.onServerTiming?{onServerTiming:e.onServerTiming}:{}}));return o.ok?(await Qn({response:o,...e.request.wallet?{requestedWallet:e.request.wallet}:{},request:r}),await ye.accept(a,o),o):o}async function sr(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-signer intent`);let n=String(e.auth.publishableKey||``).trim(),r=String(e.auth.environmentId||``).trim();if(!n||!r)throw Error(`add-signer intent requires a publishable key and environment id`);return Pn(await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/intent`,headers:{Authorization:`Bearer ${n}`,[R]:r},body:e.request}))}function cr(e){let t=`Wallet auth-method revoke`,n=U({responseName:t,field:`body`,value:e});if(W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=c(W(n,`walletId`,t));if(!r.ok)throw Error(`${t} response has invalid walletId`);let i=U({responseName:t,field:`authMethod`,value:W(n,`authMethod`,t)});if(K(i,[`kind`,`status`],`${t} response authMethod`),W(i,`status`,t)!==`revoked`)throw Error(`${t} response has invalid authMethod status`);let a=W(i,`kind`,t);switch(a){case`passkey`:return K(n,[`ok`,`walletId`,`authMethod`,`rpId`],t),{ok:!0,walletId:r.value,authMethod:{kind:`passkey`,status:`revoked`},rpId:I(W(n,`rpId`,t),t)};case`email_otp`:case`voiceid`:return K(n,[`ok`,`walletId`,`authMethod`],t),{ok:!0,walletId:r.value,authMethod:{kind:a,status:`revoked`}};default:throw Error(`${t} response has invalid authMethod kind`)}}async function lr(e){let t=String(e.walletId||``).trim(),n=String(e.walletAuthMethodId||``).trim();if(!t||!n)throw Error(`auth-method revoke requires a wallet and a target method`);let r={relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/auth-methods/${encodeURIComponent(n)}/revoke`,body:{walletId:t,walletAuthMethodId:n,requestedAtMs:e.requestedAtMs,sourceProof:e.sourceProof}},i;try{i=await V(r)}catch(e){if(!(e instanceof TypeError))throw e;i=await V(r)}return cr(i)}async function ur(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-auth-method intent`);let n=String(e.auth.publishableKey||``).trim(),r=String(e.auth.environmentId||``).trim();if(!n||!r)throw Error(`add-auth-method intent requires a publishable key and environment id`);let i=e.request.caller.caller===`same_device_addition`?{caller:`same_device_addition`,source:e.request.caller.source}:{caller:`linked_device_ceremony`};return Nn(await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/auth-methods/intent`,headers:{Authorization:`Bearer ${n}`,[R]:r},body:{walletId:e.request.walletId,rpId:e.request.rpId,authMethod:e.request.authMethod,...i}}))}function dr(e){let t=`Wallet registration respond`,n=U({responseName:t,field:`body`,value:e});if(W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=j({responseName:t,field:`registrationCeremonyId`,value:W(n,`registrationCeremonyId`,t)}),i=W(n,`kind`,t);if(i!==`evm_family_ecdsa`&&i!==`near_ed25519_and_evm_family_ecdsa`&&i!==`near_ed25519`)throw Error(`${t} response kind is invalid`);let a=i!==`near_ed25519`,o=i!==`evm_family_ecdsa`;K(n,[`ok`,`registrationCeremonyId`,`kind`,...a?[`ecdsa`]:[],...o?[`ed25519`]:[]],t);let s=G(n,`ed25519`,t);if(o&&s===void 0)throw Error(`${t} signer plan is missing its ed25519 deferred work`);if(!a)return{ok:!0,registrationCeremonyId:r,kind:`near_ed25519`,ed25519:fr(s)};let c=U({responseName:t,field:`ecdsa`,value:W(n,`ecdsa`,t)});if(K(c,[`kind`,`strictResult`],`${t} ecdsa`),W(c,`kind`,`${t} ecdsa`)!==`router_ab_ecdsa_registration_forwarded_v1`)throw Error(`${t} ecdsa kind is invalid`);let l=o?pr(s):null,u={kind:`router_ab_ecdsa_registration_forwarded_v1`,strictResult:Be(W(c,`strictResult`,`${t} ecdsa`))};return l?{ok:!0,registrationCeremonyId:r,kind:`near_ed25519_and_evm_family_ecdsa`,ecdsa:u,ed25519:l}:{ok:!0,registrationCeremonyId:r,kind:`evm_family_ecdsa`,ecdsa:u}}function fr(e){let t=`Wallet registration respond ed25519 admission`,n=U({responseName:t,field:`ed25519`,value:e}),r=W(n,`status`,t);if(r!==`admitted`&&r!==`executed`)throw Error(`${t} status is invalid`);K(n,[`status`,`admissionRequest`,`admissionReceipt`,...r===`executed`?[`activationResult`]:[]],t);let i=x(W(n,`admissionRequest`,t)),a=Le(W(n,`admissionReceipt`,t));if(!i.ok||!a.ok)throw Error(`${t} request or receipt is invalid`);if(r===`admitted`)return{status:`admitted`,admissionRequest:i.value,admissionReceipt:a.value};let o=Fe(W(n,`activationResult`,t));if(!o.ok)throw Error(`${t} activationResult is invalid`);return{status:`executed`,admissionRequest:i.value,admissionReceipt:a.value,activationResult:o.value}}function pr(e){let t=`Wallet registration respond ed25519`,n=U({responseName:t,field:`ed25519`,value:e});if(K(n,[`status`,`admissionRequest`],t),W(n,`status`,t)!==`deferred`)throw Error(`${t} status is invalid`);let r=x(W(n,`admissionRequest`,t));if(!r.ok)throw Error(`${t} admissionRequest is invalid`);return{status:`deferred`,admissionRequest:r.value}}function mr(e){let t={registrationCeremonyId:e.registrationCeremonyId,signedSetup:e.signedSetup,kind:e.signerPlanKind};switch(e.kind){case`passkey`:t.webauthn_registration=e.webauthnRegistration;break;case`email_otp`:t.emailOtpRegistrationProof=e.emailOtpRegistrationProof;break}return t.ecdsa=e.ecdsa,e.ed25519Execution!==void 0&&(t.ed25519Execution=e.ed25519Execution),t}async function hr(e){return dr(await V({relayerUrl:e.relayerUrl,path:Jt,headers:e.headers,body:mr(e),onServerTiming:e.onServerTiming}))}function gr(e,t){let n=vt(e);if(n===null||(n.kind===`owner_operations`?n.walletId!==t:n.session.walletId!==t))throw Error(`Wallet registration established session direct session result is invalid`);return n}function _r(e,t){let n=`Wallet registration activate`,r=G(e,`registrationDiagnostics`,n),i=G(e,`rpId`,n),a=G(e,`walletCustody`,n),o=G(e,`custodyKeyManifestDigestB64u`,n);return{ok:W(e,`ok`,n),walletId:W(e,`walletId`,n),authority:W(e,`authority`,n),foundingAuthority:W(e,`foundingAuthority`,n),foundingAuthMethod:W(e,`foundingAuthMethod`,n),...r===void 0?{}:{registrationDiagnostics:r},...i===void 0?{}:{rpId:i},authMethod:W(e,`authMethod`,n),...a===void 0?{}:{walletCustody:a},...o===void 0?{}:{custodyKeyManifestDigestB64u:o},kind:`evm_family_ecdsa`,ecdsa:{walletKeys:W(t,`walletKeys`,n)}}}function vr(e){let t=`Wallet registration NEAR provisioning`,n=G(e,`registrationDiagnostics`,t),r=G(e,`rpId`,t),i=G(e,`walletCustody`,t),a=G(e,`custodyKeyManifestDigestB64u`,t);return{ok:W(e,`ok`,t),walletId:W(e,`walletId`,t),authority:W(e,`authority`,t),foundingAuthority:W(e,`foundingAuthority`,t),foundingAuthMethod:W(e,`foundingAuthMethod`,t),...n===void 0?{}:{registrationDiagnostics:n},...r===void 0?{}:{rpId:r},authMethod:W(e,`authMethod`,t),...i===void 0?{}:{walletCustody:i},...a===void 0?{}:{custodyKeyManifestDigestB64u:a},kind:`near_ed25519`,authorityScope:W(e,`authorityScope`,t),accountProvisioning:W(e,`accountProvisioning`,t),resolvedAccount:W(e,`resolvedAccount`,t),ed25519:W(e,`ed25519`,t)}}function yr(e){let t=`Wallet registration activate`,n=U({responseName:t,field:`body`,value:e}),r=W(n,`kind`,t),i=G(n,`nearProvisioning`,t),a=G(n,`registrationEstablishedSession`,t);if(r!==`evm_family_ecdsa`)throw Error(`${t} response has invalid kind`);let o=U({responseName:t,field:`ecdsa`,value:W(n,`ecdsa`,t)});K(n,[`ok`,`walletId`,`authority`,`foundingAuthority`,`foundingAuthMethod`,`registrationDiagnostics`,`rpId`,`authMethod`,`walletCustody`,`custodyKeyManifestDigestB64u`,`kind`,`ecdsa`,`nearProvisioning`,`registrationEstablishedSession`],t),K(o,[`walletKeys`,`activation`,`bootstrap`],t);let s=G(o,`activation`,t),c=G(o,`bootstrap`,t);if(i!==void 0){let e=U({responseName:t,field:`nearProvisioning`,value:i});if(K(e,[`status`],`${t} nearProvisioning`),W(e,`status`,`${t} nearProvisioning`)!==`near_pending`)throw Error(`${t} nearProvisioning status is invalid`)}if(s===void 0||c===void 0)throw Error(`${t} is missing the activation payload the client needs to build its ECDSA session`);let l=qt({value:_r(n,o),expectedKind:`evm_family_ecdsa`});if(!l.ok||l.kind!==`evm_family_ecdsa`)throw Error(`${t} did not return an activated ECDSA wallet`);let u=gr(a,l.walletId);return{...l,ecdsa:{...l.ecdsa,activation:Ue(s),bootstrap:it(c)},registrationEstablishedSession:u,...i===void 0?{}:{nearProvisioning:{status:`near_pending`}}}}function br(e){let t={registrationCeremonyId:e.registrationCeremonyId,kind:e.signerPlanKind,signedSetup:e.signedSetup,idempotencyKey:e.idempotencyKey};return t.ecdsa=e.ecdsa,e.emailOtpEnrollment&&(t.emailOtpEnrollment=e.emailOtpEnrollment),e.walletCustodyCommit&&(t.walletCustodyCommit=e.walletCustodyCommit),t}async function xr(e){return yr(await V({relayerUrl:e.relayerUrl,path:Yt,headers:e.headers,body:br(e),onServerTiming:e.onServerTiming}))}function Sr(e){let t=`Wallet registration session seal`,n=U({responseName:t,field:`body`,value:e});K(n,[`ciphertext`,`keyVersion`,`expiresAtMs`,`remainingUses`],t);let r=W(n,`ciphertext`,t),i=W(n,`keyVersion`,t),a=W(n,`expiresAtMs`,t),o=W(n,`remainingUses`,t);if(typeof r!=`string`||!r.trim()||typeof i!=`string`||!i.trim()||typeof a!=`number`||!Number.isSafeInteger(a)||a<=0||typeof o!=`number`||!Number.isSafeInteger(o)||o<0)throw Error(`${t} is invalid`);return{ciphertext:r,keyVersion:i,expiresAtMs:a,remainingUses:o}}function Cr(e){let t=`Wallet registration NEAR provisioning`,n=U({responseName:t,field:`body`,value:e});if(W(n,`ok`,t)!==!0){K(n,[`ok`,`code`,`message`,`nearProvisioning`],t);let e=W(n,`code`,t),r=W(n,`message`,t);if(typeof e!=`string`||typeof r!=`string`)throw Error(`${t} failure is invalid`);let i=G(n,`nearProvisioning`,t);if(i!==void 0){let n=U({responseName:t,field:`nearProvisioning`,value:i});if(K(n,[`status`],`${t} nearProvisioning`),W(n,`status`,`${t} nearProvisioning`)!==`near_failed_retryable`)throw Error(`${t} failure status is invalid`);return{ok:!1,code:e,message:r,nearProvisioning:{status:`near_failed_retryable`}}}return{ok:!1,code:e,message:r}}K(n,[`ok`,`walletId`,`authority`,`foundingAuthority`,`foundingAuthMethod`,`registrationDiagnostics`,`rpId`,`authMethod`,`walletCustody`,`custodyKeyManifestDigestB64u`,`kind`,`accountProvisioning`,`resolvedAccount`,`ed25519`,`authorityScope`,`nearProvisioning`,`registrationEstablishedSession`,`sessionSeal`],t);let r=U({responseName:t,field:`nearProvisioning`,value:W(n,`nearProvisioning`,t)});if(K(r,[`status`],`${t} nearProvisioning`),W(r,`status`,`${t} nearProvisioning`)!==`near_ready`)throw Error(`${t} success status is invalid`);let i=qt({value:vr(n),expectedKind:`near_ed25519`});if(!i.ok||i.kind!==`near_ed25519`)throw Error(`${t} did not return a finalized Ed25519 wallet`);let a=G(n,`sessionSeal`,t),o=gr(W(n,`registrationEstablishedSession`,t),i.walletId);if(Mn(i)){if(a!==void 0)throw Error(`${t} returned a session seal for an Email OTP authority`);return{...i,nearProvisioning:{status:`near_ready`},registrationEstablishedSession:o}}let s={...i,nearProvisioning:{status:`near_ready`},registrationEstablishedSession:o};return a===void 0?s:{...s,sessionSeal:Sr(a)}}async function wr(e){let t={registrationCeremonyId:e.registrationCeremonyId,signedSetup:e.signedSetup,idempotencyKey:e.idempotencyKey,ed25519:e.ed25519};return e.auth.kind===`email_otp`&&(t.emailOtpEnrollment=e.auth.enrollment),e.walletCustodyCommit&&(t.walletCustodyCommit=e.walletCustodyCommit),e.sessionSeal&&(t.sessionSeal=e.sessionSeal),Cr(await V({relayerUrl:e.relayerUrl,path:Xt,headers:e.headers,body:t,...e.onServerTiming?{onServerTiming:e.onServerTiming}:{}}))}function Tr(e){switch(e.kind){case`webauthn_assertion`:return{kind:`webauthn_assertion`,rpId:e.rpId,credential:e.credential,expectedChallengeDigestB64u:e.expectedChallengeDigestB64u}}}function Er(e){switch(e.kind){case`webauthn_assertion`:return{kind:`webauthn_assertion`,rpId:e.rpId,credential:e.credential,expectedChallengeDigestB64u:e.expectedChallengeDigestB64u};case`wallet_session`:return{kind:`wallet_session`};case`email_otp`:return{kind:`email_otp`,challengeId:e.challengeId,otpCode:e.otpCode,expectedChallengeDigestB64u:e.expectedChallengeDigestB64u}}}function Dr(e){switch(e.kind){case`passkey`:return{};case`email_otp`:return{emailOtpRegistrationProof:e.emailOtpRegistrationProof}}}async function Or(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-signer start`);return er({value:await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/start`,body:{addSignerIntentGrant:e.addSignerIntentGrant,addSignerIntentDigestB64u:e.addSignerIntentDigestB64u,intent:e.intent,auth:Tr(e.auth)}}),expectedIntent:e.intent})}function kr(e){let t=`Email OTP enrollment code`,n=U({responseName:t,field:`body`,value:e});if(K(n,[`ok`,`challengeId`,`expiresAtMs`,`emailHint`],t),W(n,`ok`,t)!==!0)throw Error(`${t} response is not successful`);let r=W(n,`challengeId`,t);if(typeof r!=`string`||!r.trim())throw Error(`${t} response missing challengeId`);let i=W(n,`expiresAtMs`,t);if(typeof i!=`number`||!Number.isSafeInteger(i)||i<1)throw Error(`${t} response has invalid expiresAtMs`);let a=W(n,`emailHint`,t);if(typeof a!=`string`)throw Error(`${t} response has invalid emailHint`);return{challengeId:r.trim(),expiresAtMs:i,emailHint:a}}async function Ar(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for the Email OTP enrollment code`);return kr(await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/auth-methods/email-otp/challenge`,body:{addAuthMethodIntentGrant:e.addAuthMethodIntentGrant,addAuthMethodIntentDigestB64u:e.addAuthMethodIntentDigestB64u}}))}async function jr(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-auth-method start`);return In({value:await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/auth-methods/start`,body:{addAuthMethodIntentGrant:e.addAuthMethodIntentGrant,addAuthMethodIntentDigestB64u:e.addAuthMethodIntentDigestB64u,intent:e.intent,auth:Er(e.auth),...Dr(e.authority)},...e.auth.kind===`wallet_session`?{headers:{authorization:`Bearer ${e.auth.walletSessionToken}`}}:{}}),expectedIntent:e.intent})}async function Mr(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-signer ECDSA respond`);return An(await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/derivation/respond`,body:{addSignerCeremonyId:e.addSignerCeremonyId,ecdsa:e.ecdsa}}))}async function Nr(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-signer ECDSA activation`);return jn(await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/derivation/activate`,body:{addSignerCeremonyId:e.addSignerCeremonyId,ecdsa:{kind:`router_ab_ecdsa_registration_activation_v1`,activationCorrelationId:e.activationCorrelationId,publicFacts:e.publicFacts,expectedActivationRequestDigest:e.expectedActivationRequestDigest}}}))}function Pr(e){switch(e.kind){case`near_ed25519`:return{addSignerCeremonyId:e.addSignerCeremonyId,idempotencyKey:e.idempotencyKey,kind:e.kind,ed25519:e.ed25519,custodyKeySet:e.custodyKeySet};case`evm_family_ecdsa`:return{addSignerCeremonyId:e.addSignerCeremonyId,idempotencyKey:e.idempotencyKey,kind:e.kind,ecdsa:e.ecdsa,custodyKeySet:e.custodyKeySet}}}async function Fr(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-signer finalize`);return tr({value:await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/finalize`,body:Pr(e)}),expectedKind:e.kind})}async function Ir(e){let t=String(e.walletId||``).trim();if(!t)throw Error(`walletId is required for add-auth-method finalize`);let n=e.custodyEnvelope===void 0?{addAuthMethodCeremonyId:e.addAuthMethodCeremonyId}:e.webauthnRegistration===void 0?{addAuthMethodCeremonyId:e.addAuthMethodCeremonyId,custodyEnvelope:y(e.custodyEnvelope),emailOtpTarget:e.emailOtpTarget}:{addAuthMethodCeremonyId:e.addAuthMethodCeremonyId,webauthnRegistration:e.webauthnRegistration,custodyEnvelope:y(e.custodyEnvelope)},r={relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/auth-methods/finalize`,body:n},i;try{i=await V(r)}catch(e){if(!(e instanceof TypeError))throw e;i=await V(r)}return Fn(i)}async function Lr(e){let t=String(e.walletId||``).trim(),n=String(e.rpId||``).trim(),r=e.operationCredential;if(!t)throw Error(`walletId is required for ECDSA key-facts inventory`);if(!n)throw Error(`rpId is required for ECDSA key-facts inventory`);return ar({value:await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/ecdsa/key-facts/inventory`,headers:p(r),body:{rpId:n,keyTargets:e.keyTargets,auth:{kind:r.kind,walletSessionId:r.walletSessionId}}}),walletId:e.walletId,rpId:n})}async function Rr(e){let t=String(e.walletId||``).trim(),n=String(e.rpId||``).trim(),r=String(e.serverNonceB64u||``).trim(),i=String(e.expectedChallengeDigestB64u||``).trim();if(!t)throw Error(`walletId is required for ECDSA key-facts inventory`);if(!n)throw Error(`rpId is required for ECDSA key-facts inventory`);if(!r||!i)throw Error(`WebAuthn ECDSA key-facts inventory requires challenge binding`);return ar({value:await V({relayerUrl:e.relayerUrl,path:`/wallets/${encodeURIComponent(t)}/signers/ecdsa/key-facts/inventory`,body:{rpId:n,keyTargets:e.keyTargets,auth:{kind:`webauthn_assertion`,credential:e.credential,serverNonceB64u:r,expectedChallengeDigestB64u:i,...e.runtimePolicyScope?{runtimePolicyScope:e.runtimePolicyScope}:{}}}}),walletId:e.walletId,rpId:n})}function $(e,t){if(typeof e!=`object`||!e||Array.isArray(e))return!1;let n=Object.keys(e);return n.length===t.length&&n.every(e=>t.includes(e))}const zr=[`kind`,`walletId`,`authorityId`,`walletAuthMethodId`,`mintId`,`authorizationId`,`walletSessionId`,`quotaId`],Br=[`ok`,`code`,`message`,`next`,`committed`],Vr=[`ok`,`code`,`message`,`next`,`kind`,`walletId`,`authorityId`,`walletAuthMethodId`,`mintId`,`authorizationId`,`walletSessionId`,`quotaId`],Hr=[...Vr,`unlocked`,`unlockBackend`];function Ur(e){if(!u(e)||!$(e,zr)||e.kind!==`already_committed_wallet_session_v1`)return null;let n=c(e.walletId),r=i(e.authorityId),a=t(e.walletAuthMethodId),o=fe(e.mintId),s=v(e.authorizationId),l=_(e.walletSessionId),d=g(e.quotaId);return!n.ok||!r.ok||!a.ok||!o.ok||!s.ok||!l.ok||!d.ok?null:{kind:`already_committed_wallet_session_v1`,walletId:n.value,authorityId:r.value,walletAuthMethodId:a.value,mintId:o.value,authorizationId:s.value,walletSessionId:l.value,quotaId:d.value}}function Wr(e){return e.ok!==!1||e.code!==`already_committed`||typeof e.message!=`string`||e.next!==`unlock_exact_method`?null:{ok:!1,code:`already_committed`,message:e.message,next:`unlock_exact_method`}}function Gr(e){return!$(e,Vr)&&!$(e,Hr)||$(e,Hr)&&(e.unlocked!==!1||e.unlockBackend!==`passkey`&&e.unlockBackend!==`email_otp`)||e.kind!==`already_committed`?null:Ur({kind:`already_committed_wallet_session_v1`,walletId:e.walletId,authorityId:e.authorityId,walletAuthMethodId:e.walletAuthMethodId,mintId:e.mintId,authorizationId:e.authorizationId,walletSessionId:e.walletSessionId,quotaId:e.quotaId})}function Kr(e,t){return{ok:!1,code:`already_committed`,message:e.message,next:`unlock_exact_method`,committed:t}}function qr(e){if(!u(e))return null;let t=Wr(e);if(!t||!$(e,Br))return null;let n=Ur(e.committed);return n?Kr(t,n):null}function Jr(e){if(!u(e))return null;let t=Wr(e);if(!t)return null;let n=Gr(e);return n?Kr(t,n):null}export{dt as A,Or as C,_t as D,gt as E,w as O,jr as S,ht as T,Ar as _,xr as a,lr as b,sr as c,Ir as d,Fr as f,Zt as g,ir as h,Nr as i,ft as k,Lr as l,Mn as m,Jr as n,wr as o,fn as p,$ as r,ur as s,qr as t,Rr as u,Mr as v,Mt as w,or as x,hr as y};

package/dist/public/sdk/{clientSessionPersistenceState-BxpITYM_.js → clientSessionPersistenceState-B3gU3515.js}

@@ -1 +1 @@
-import{F as e,i as t}from"./domainIds-t1lp25yU.js";import{c as n,s as r}from"./types-A-w1cYlJ.js";import{t as i}from"./accountIds-DGWFzEnw.js";import{c as a,o}from"./ecdsaChainTarget-BoRVQtjQ.js";import{ut as s}from"./digestEncoding-34kXJoJr.js";import{i as c,t as l}from"./signerSlot-BlijMq8C.js";import{T as u,g as d}from"./emailOtpEcdsaDerivationIdentity-Qd4pBwHv.js";import{a as f,k as p}from"./nearEd25519YaoSigningPreparation-CnbgQfZc.js";function m(e){let t=Math.floor(Number(e));return!Number.isFinite(t)||t<=0?null:t.toString(10).padStart(20,`0`)}function h(e,t){if(e.length===0)return{kind:`no_current_lane`,unusableFacts:[]};let n=_(e,t),r=v(n,t);if(r.length)return{kind:`conflicting_key_material`,conflicts:r};if(n.length!==1)return{kind:`ambiguous_material`,candidates:e};let i=n[0];return i?g(i,t.supersession):{kind:`no_current_lane`,unusableFacts:[]}}function g(e,t){let n=e.facts.filter(t.isOperationUsable);if(n.length===0)return{kind:`no_current_lane`,unusableFacts:e.facts};let r=y(n,t);return r.kind===`ambiguous`?{kind:`ambiguous_material`,candidates:r.candidates}:{kind:`selected`,selectedFact:r.fact,supersededFacts:e.facts.filter(e=>e!==r.fact)}}function _(e,t){let n=new Map;for(let r of e){let e=t.groupKey(r),i=t.groupKeyString(e),a=n.get(i);n.set(i,a?{groupKey:a.groupKey,facts:[...a.facts,r]}:{groupKey:e,facts:[r]})}return[...n.values()]}function v(e,t){return e.flatMap(e=>t.groupConflicts(e.facts))}function y(e,t){let n=e[0];if(n===void 0)return{kind:`ambiguous`,candidates:[]};let r=n;for(let n of e.slice(1)){let e=b(r,n,t);switch(e.kind){case`left`:break;case`right`:r=n;break;case`ambiguous`:return{kind:`ambiguous`,candidates:e.candidates};default:return e}}return{kind:`selected`,fact:r}}function b(e,t,n){let r=x(e,t,n);if(r.kind!==`equal`)return r;let i=S(e,t,n);if(i.kind!==`equal`)return i;let a=n.tieBreak(e,t);switch(a){case 1:return{kind:`left`};case-1:return{kind:`right`};case 0:return{kind:`ambiguous`,candidates:[e,t]};default:return a}}function x(e,t,n){let r=n.generation(e),i=n.generation(t);return!r||!i?{kind:`ambiguous`,candidates:[e,t]}:r>i?{kind:`left`}:i>r?{kind:`right`}:{kind:`equal`}}function S(e,t,n){let r=n.exactness(e);return r===n.exactness(t)?{kind:`equal`}:r===`exact_target`?{kind:`left`}:{kind:`right`}}function C(e){return{kind:`ed25519_durable_material`,authMethod:e.authMethod,materialActivation:e.materialActivation}}function w(e){return[e.activationId,e.capability,e.materialOwner,e.keyBinding,e.lifecycleBinding,e.signingWorker].map(e=>encodeURIComponent(String(e))).join(`:`)}function T(e){let t={source:e.source,runtime:e.runtime,key:e.key,materialActivation:e.materialActivation,publicFacts:e.publicFacts,curve:`ecdsa`,chainTarget:e.chainTarget,state:e.state,authorizationState:e.authorizationState};if(e.auth.kind===`passkey`){if(!e.resolvedKey)throw Error(`active Wallet Authority passkey lane is missing its resolved ECDSA key`);return{...t,auth:e.auth,resolvedKey:e.resolvedKey}}return{...t,auth:e.auth}}function ee(e){let t=e.authorization;return t?e.remainingUses===t.runtime.remainingUses&&e.expiresAtMs===t.runtime.expiresAtMs:!0}function E(e){return e.auth.kind}function D(e){return n(e.auth)}function O(e){let t=e.ed25519Restore;if(e.authMethod===`passkey`){if(!t.credentialIdB64u)return null;try{return{kind:`passkey`,rpId:u(t.rpId),credentialIdB64u:t.credentialIdB64u}}catch{return null}}return t.providerSubjectId?{kind:`email_otp`,providerSubjectId:t.providerSubjectId}:null}function k(e){let{authorization:t}=e;if(String(t.session.walletId)!==e.walletId||t.selectedAuthMethod.kind!==e.auth.kind||t.operationCredential.walletSessionId.length===0||t.session.quotaId.length===0||!f({session:t.session,materialActivation:e.materialActivation}))return!1;switch(e.auth.kind){case`passkey`:if(t.selectedAuthMethod.kind!==`passkey`||String(t.selectedAuthMethod.rpId)!==String(e.auth.rpId)||t.selectedAuthMethod.credentialIdB64u!==e.auth.credentialIdB64u)return!1;break;case`email_otp`:if(t.selectedAuthMethod.kind!==`email_otp`||t.selectedFactorAuthority.factor.kind!==`email_otp`||t.selectedFactorAuthority.factor.providerUserId!==e.auth.providerSubjectId)return!1;break;case`voiceid`:if(t.selectedAuthMethod.kind!==`voiceid`||t.selectedAuthMethod.walletAuthMethodId!==e.auth.walletAuthMethodId||t.selectedAuthMethod.deviceKeyId!==e.auth.deviceKeyId)return!1;break;default:return e.auth,!1}return!!(e.ownerScope&&r(e.auth)===r(e.ownerScope.auth))}function te(e,t,n){if(e.curve!==`ed25519`)return null;let r=String(e.thresholdSessionIds.ed25519||``).trim(),o=String(e.walletId||``).trim(),s=e.ed25519Restore,u=l(s.signerSlot),d=O(e);if(!r||!o||u===null||!d)return null;let f=Math.floor(Number(e.expiresAtMs)||0),p=Math.max(0,Math.floor(Number(e.remainingUses)||0)),m=f>0&&f<=Date.now()?`expired`:p===0?`exhausted`:`restorable`,h=t&&k({authorization:t,auth:d,walletId:o,materialActivation:s.materialActivation,ownerScope:n})?t:null;try{let t={auth:d,curve:`ed25519`,chain:`near`,materialActivation:s.materialActivation,walletId:a(o),nearAccountId:i(s.nearAccountId),nearEd25519SigningKeyId:c(s.nearEd25519SigningKeyId),signerSlot:u,source:`durable_sealed_record`,thresholdSessionId:r,remainingUses:p,...f>0?{expiresAtMs:f}:{},updatedAtMs:Math.floor(Number(e.updatedAtMs)||0),...P(e)?{policyHint:P(e)}:{}};return h?{...t,state:m,authorizationState:`authorized`,authorization:h}:{...t,state:`deferred`,authorizationState:`authorization_required`}}catch{return null}}function ne(e){return e.auth.kind===`email_otp`}function re(e,t,n){let r=String(e.walletId||``).trim(),o=String(e.nearAccountId||``).trim(),s=String(e.thresholdSessionId||``).trim();if(!r||!o||!s)return null;let c=t&&k({authorization:t,auth:e.auth,walletId:r,materialActivation:e.materialActivation,ownerScope:n})?t:null;try{let t={auth:e.auth,curve:`ed25519`,chain:`near`,materialActivation:e.materialActivation,walletId:a(r),nearAccountId:i(o),nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,signerSlot:e.signerSlot,thresholdSessionId:s,source:`public_capability_reference`};if(!c)return{...t,state:`deferred`,authorizationState:`authorization_required`};let n=Math.floor(Number(c.status.expiresAtMs)||0),l=ne(e)?e:null,u=l?Math.min(l.expiresAtMs,n):n,d=u>0&&u<=Date.now()?`expired`:`ready`;return{...t,state:d,authorizationState:`authorized`,authorization:c,remainingUses:c.status.remainingUses,...u>0?{expiresAtMs:u}:{}}}catch{return null}}function A(e){if(e.state===`missing`)return!1;if(e.curve!==`ecdsa`){let t=String(e.thresholdSessionId||``).trim();return e.thresholdSessionId!==t||!t?!1:e.authorizationState===`authorization_required`?e.state===`deferred`:!(!e.authorization.operationCredential.walletSessionId||!e.authorization.session.quotaId||e.authorization.status.remainingUses<=0||e.authorization.status.expiresAtMs<=Date.now())}return e.source===`active_wallet_authority`&&(e.state!==`deferred`||e.authorizationState!==`authorization_required`||e.runtime.kind!==`active_wallet_authority_ecdsa_runtime_v1`||String(e.runtime.walletId)!==String(e.key.walletId)||!t(e.runtime.materialActivation,e.materialActivation)||e.runtime.publicFacts!==e.publicFacts)||!(e.key&&String(e.key.walletId||``).trim()&&String(e.key.ecdsaThresholdKeyId||``).trim()&&String(e.key.signingRootId||``).trim()&&String(e.key.signingRootVersion||``).trim()&&Array.isArray(e.key.participantIds)&&e.key.participantIds.length>0&&String(e.key.thresholdOwnerAddress||``).trim()&&`publicFacts`in e&&e.publicFacts&&e.publicFacts.keyHandle&&String(e.publicFacts.publicKeyB64u||``).trim()&&Array.isArray(e.publicFacts.participantIds)&&e.publicFacts.participantIds.length>0&&String(e.publicFacts.thresholdOwnerAddress||``).trim())||e.source===`canonical_capability`&&!ee(e)?!1:n(e.auth)===`passkey`?e.resolvedKey?.kind===`resolved_evm_family_ecdsa_key`&&e.resolvedKey.authBinding.kind===`passkey_ecdsa_auth_binding`&&String(e.resolvedKey.walletId)===String(e.key.walletId)&&e.resolvedKey.publicFacts===e.publicFacts:!(`resolvedKey`in e)}function j(e){return e===`missing`?null:e}function ie(e){return e||`unknown`}function ae(e){let t=Math.floor(Number(e));return Number.isFinite(t)&&t>0?t:null}function oe(e){let t=Math.max(0,Math.floor(Number(e)));return Number.isFinite(t)?t:null}function se(e){if(!A(e.lane)||e.lane.curve!==`ed25519`)return null;let t=j(e.lane.state);if(!t)return null;let n={kind:`lane_candidate`,walletId:e.lane.walletId,nearAccountId:e.lane.nearAccountId,nearEd25519SigningKeyId:e.lane.nearEd25519SigningKeyId,signerSlot:e.lane.signerSlot,materialActivation:e.lane.materialActivation,auth:e.lane.auth,curve:`ed25519`,chain:`near`,thresholdSessionId:e.lane.thresholdSessionId,state:t,remainingUses:oe(e.lane.remainingUses),expiresAtMs:ae(e.lane.expiresAtMs),updatedAtMs:ae(e.lane.updatedAtMs),source:ie(e.lane.source)};return e.lane.authorizationState===`authorization_required`?{...n,authorizationState:`authorization_required`,state:`deferred`}:{...n,authorizationState:`authorized`,authorization:e.lane.authorization}}function ce(e){if(!A(e.lane)||e.lane.curve!==`ecdsa`)return null;let t=j(e.lane.state);if(!t)return null;let r=n(e.lane.auth),i={kind:`lane_candidate`,walletId:a(e.walletId),auth:e.lane.auth,authMethod:r,curve:`ecdsa`,chain:e.lane.chainTarget.kind,key:e.lane.key,materialActivation:e.lane.materialActivation,...r===`passkey`?{resolvedKey:e.lane.resolvedKey}:{},keyHandle:e.lane.publicFacts.keyHandle,chainTarget:e.lane.chainTarget};switch(e.lane.source){case`active_wallet_authority`:return{...i,source:`active_wallet_authority`,runtime:e.lane.runtime,authorizationState:`authorization_required`,state:`deferred`};case`canonical_capability`:return e.lane.authorization?{...i,source:`canonical_capability`,authorizationState:`authorized`,authorization:e.lane.authorization,state:t}:{...i,source:`canonical_capability`,authorizationState:`authorization_required`,state:`deferred`};default:return e.lane}}function le(e){if(!e||e.curve!==`ecdsa`||!e.chainTarget||!(`key`in e)||!e.key||!(`auth`in e)||!e.auth)return null;let t=n(e.auth);try{let n=r(e.auth);return[t,`ecdsa`,o(e.chainTarget),n,ue(e),w(e.materialActivation)].join(`:`)}catch{return null}}function ue(e){return d({walletId:e.key.walletId,publicFacts:e.publicFacts})}function M(e){if(!e||e.curve!==`ed25519`||e.chain!==`near`||e.state===`missing`||!e.auth)return null;let t=n(e.auth),r=String(e.walletId||``).trim(),i=String(e.nearAccountId||``).trim(),a=String(e.nearEd25519SigningKeyId||``).trim(),o=String(e.signerSlot||``).trim(),s=String(e.thresholdSessionId||``).trim(),c=e.materialActivation?w(e.materialActivation):``;return!t||!r||!i||!a||!o||!s||!c?null:[r,i,a,o,t,`ed25519`,`near`,s,c].join(`:`)}function N(e){return{curve:`ecdsa`,chainTarget:e.chainTarget,state:`missing`}}function de(e,t){let n=o(t);return e.ecdsa.lanesByTarget[n]||N({chainTarget:t})}function fe(e,t){let n=o(t);return e.ecdsa.candidatesByTarget[n]||[]}function pe(){return{curve:`ed25519`,chain:`near`,state:`missing`}}function P(e){let t=Math.floor(Number(e.remainingUses)),n=Math.floor(Number(e.expiresAtMs)),r={};return Number.isFinite(t)&&t>=0&&(r.remainingUses=t),Number.isFinite(n)&&n>0&&(r.expiresAtMs=n),Object.keys(r).length?r:void 0}function F(e){return Math.floor(Number(`updatedAtMs`in e?e.updatedAtMs:0)||0)}function I(e){return m(e.expiresAtMs??e.policyHint?.expiresAtMs)}function L(e){switch(e.state){case`ready`:return 5;case`restorable`:return 4;case`deferred`:return 3;case`expired`:case`exhausted`:return 2;case`missing`:return 1}}function R(e){return!A(e)||e.curve===`ecdsa`?0:e.source===`durable_sealed_record`?1:0}function z(e,t){return L(e)-L(t)||R(e)-R(t)||F(e)-F(t)}function me(e,t){return z(e,t)}function he(e,t){return L(e)-L(t)||R(e)-R(t)||F(e)-F(t)}function B(e){let t=r(e.auth),n=String(e.walletId||``).trim(),i=String(e.nearAccountId||``).trim(),a=String(e.nearEd25519SigningKeyId||``).trim(),o=String(e.signerSlot||``).trim(),s=w(e.materialActivation);return!t||!n||!i||!a||!o||!s?null:{walletId:n,authKey:t,nearAccountId:i,nearEd25519SigningKeyId:a,signerSlot:o,materialActivationKey:s}}function V(e){return[e.walletId,e.authKey,e.nearAccountId,e.nearEd25519SigningKeyId,e.signerSlot,e.materialActivationKey].map(e=>encodeURIComponent(e)).join(`|`)}function ge(e){if(!A(e)||e.curve!==`ed25519`)return null;let t=B(e);return t?{groupKey:t,lane:e}:null}function H(e,t){return me(t,e)}function U(e,t){return e>t?1:t>e?-1:0}function W(e,t){let n=e.localeCompare(t);return n>0?1:n<0?-1:0}function G(e){for(let t of e)if(t!==0)return t;return 0}function _e(e){return[]}function ve(e){return!0}function ye(e){return I(e.lane)}function be(){return`exact_target`}function xe(e,t){return G([U(L(e.lane),L(t.lane)),U(R(e.lane),R(t.lane)),W(Se(e.lane),Se(t.lane))])}function Se(e){return[e.thresholdSessionId,e.authorizationState===`authorized`?e.authorization.operationCredential.walletSessionId:``,e.authorizationState===`authorized`?e.authorization.session.quotaId:``,e.source||`durable_sealed_record`].map(e=>String(e)).join(`|`)}const Ce={groupKey:we,groupKeyString:V,groupConflicts:_e,supersession:{isOperationUsable:ve,generation:ye,exactness:be,tieBreak:xe}};function we(e){return e.groupKey}function Te(e){let t=new Map;for(let n of e){let e=V(n.groupKey);t.set(e,[...t.get(e)||[],n])}return t}function Ee(e,t){let n=h(e,Ce);switch(n.kind){case`selected`:return[n.selectedFact.lane];case`no_current_lane`:return[];case`conflicting_key_material`:return t.push({curve:`ed25519`,source:`canonical_lane_inventory`,reason:`conflicting_key_material`,message:`Ed25519 canonical lane inventory has conflicting material facts`}),[];case`ambiguous_material`:return t.push({curve:`ed25519`,source:`canonical_lane_inventory`,reason:`ambiguous_material`,message:`Ed25519 canonical lane inventory has incomparable usable records`}),[];default:return n}}function De(e,t){let n=e.map(ge).filter(e=>e!==null),r=[];for(let e of Te(n).values())r.push(...Ee(e,t));return r.sort(H)}function Oe(e){if(!A(e)||e.curve!==`ed25519`)return null;let t=String(e.thresholdSessionId||``).trim();return e.authorizationState!==`authorized`||!t?null:`${e.authorization.operationCredential.walletSessionId}:${e.authorization.session.quotaId}:${t}`}function ke(e){if(!A(e.primaryLane)||e.primaryLane.curve!==`ed25519`||D(e.primaryLane)!==`passkey`)return e.primaryLane;let t=Oe(e.primaryLane);return t&&e.candidates.find(e=>A(e)&&e.curve===`ed25519`&&D(e)===`email_otp`&&Oe(e)===t)||e.primaryLane}function Ae(){try{return globalThis.localStorage?.getItem(`seams:debug:signing-session`)===`1`}catch{return!1}}function K(e){return e?A(e)?{present:!0,authMethod:n(e.auth),curve:e.curve,keyHandle:e.publicFacts.keyHandle,walletId:e.key.walletId,chainTarget:e.chainTarget,targetKey:o(e.chainTarget),state:e.state,source:e.source,evmFamilyKeyFingerprint:ue(e),ecdsaThresholdKeyId:e.key.ecdsaThresholdKeyId,participantIds:e.publicFacts.participantIds,thresholdOwnerAddress:e.publicFacts.thresholdOwnerAddress,remainingUses:e.remainingUses,expiresAtMs:e.expiresAtMs,updatedAtMs:e.updatedAtMs}:{present:!0,curve:e.curve,chainTarget:e.chainTarget,state:e.state}:{present:!1}}function je(e){switch(e.source){case`canonical_capability`:return`canonical_capability`;case`active_wallet_authority`:return`active_wallet_authority`;default:return e}}function Me(e){let t=r(e.auth);return{walletId:String(e.key.walletId),authKey:t,materialActivationKey:w(e.materialActivation),ecdsaThresholdKeyId:String(e.key.ecdsaThresholdKeyId),signingRootId:String(e.key.signingRootId),signingRootVersion:String(e.key.signingRootVersion||`default`)}}function Ne(e){return[e.walletId,e.authKey,e.materialActivationKey,e.ecdsaThresholdKeyId,e.signingRootId,e.signingRootVersion].map(e=>encodeURIComponent(e)).join(`|`)}function Pe(e){let t=Me(e);return t?{source:je(e),groupKey:t,chainTargetKey:o(e.chainTarget),lane:e}:null}function Fe(e){let t=r(e.auth);return[String(e.key.walletId),t,w(e.materialActivation),String(e.key.signingRootId),String(e.key.signingRootVersion||`default`)].map(e=>encodeURIComponent(e)).join(`|`)}function q(e,t){return[...new Set(e.map(e=>t(e.lane)).filter(Boolean))].sort()}function Ie(e){return[{field:`ecdsaThresholdKeyId`,values:q(e.facts,e=>String(e.key.ecdsaThresholdKeyId||``))},{field:`thresholdOwnerAddress`,values:q(e.facts,e=>String(e.publicFacts.thresholdOwnerAddress||``).toLowerCase())},{field:`keyHandle`,values:q(e.facts,e=>String(e.publicFacts.keyHandle||``))},{field:`publicKeyB64u`,values:q(e.facts,e=>String(e.publicFacts.publicKeyB64u||``))},{field:`participantIds`,values:q(e.facts,e=>e.publicFacts.participantIds.map(e=>Number(e)).join(`,`))}].filter(e=>e.values.length>1).map(t=>({groupKey:e.key,field:t.field,values:t.values}))}function Le(e){let t=new Map;for(let n of e){let e=Fe(n.lane);e&&t.set(e,[...t.get(e)||[],n])}let n=new Map;for(let[e,r]of t){let t=r[0];if(!t)continue;let i=Ie({key:t.groupKey,facts:r});i.length&&n.set(e,i)}return n}function Re(e){let t=Fe(e.fact.lane);return t&&e.conflictsByFamilyGroup.get(t)||[]}function ze(e){return e.filter(e=>A(e)&&e.curve===`ecdsa`).map(Pe).filter(e=>e!==null)}function Be(e){return e.source===`active_wallet_authority`?2:1}function Ve(e){return e.groupKey}function He(e){let t=e[0];return t?Ie({key:t.groupKey,facts:e}):[]}function Ue(e){return e.lane.source===`active_wallet_authority`?!0:e.lane.state!==`deferred`||!e.lane.authorization}function We(e){return I(e.lane)}function Ge(e){return`exact_target`}function J(e){return[w(e.materialActivation),e.source,o(e.chainTarget)].map(e=>String(e)).join(`|`)}function Ke(e,t){return G([U(L(e.lane),L(t.lane)),U(Be(e.lane),Be(t.lane)),W(J(e.lane),J(t.lane))])}const qe={groupKey:Ve,groupKeyString:Ne,groupConflicts:He,supersession:{isOperationUsable:Ue,generation:We,exactness:Ge,tieBreak:Ke}};function Je(e){let t=new Map;for(let n of e)t.set(Ne(n.groupKey),n.groupKey);return[...t.values()]}function Ye(e){let t=h(e,qe);switch(t.kind){case`selected`:return{kind:`selected`,selectedFact:t.selectedFact,supersededFacts:t.supersededFacts};case`no_current_lane`:return{kind:`no_current_lane`,unusableFacts:t.unusableFacts};case`conflicting_key_material`:return{kind:`conflicting_key_material`,conflicts:t.conflicts};case`ambiguous_material`:return{kind:`ambiguous_material`,candidates:Je(t.candidates),candidateFacts:t.candidates};default:return t}}function Xe(e){return A(e)?J(e):null}function Ze(e){let t={},n={},r=Object.fromEntries(Object.entries(e.candidatesByTarget).map(([e,t])=>[e,Qe(t,Xe)])),i=Le(Object.values(r).flatMap(ze));for(let a of e.targets){let s=o(a),c=ze(r[s]||[]),l=c.flatMap(e=>Re({fact:e,conflictsByFamilyGroup:i}));if(l.length){e.invalidLanes.push({curve:`ecdsa`,source:`canonical_lane_inventory`,reason:`conflicting_key_material`,targetKey:s,groupKey:l[0]?.groupKey,conflicts:l}),t[s]=[],n[s]=N({chainTarget:a});continue}let u=Ye(c);switch(u.kind){case`selected`:t[s]=[u.selectedFact.lane],n[s]=u.selectedFact.lane;break;case`no_current_lane`:t[s]=[],n[s]=N({chainTarget:a});break;case`conflicting_key_material`:e.invalidLanes.push({curve:`ecdsa`,source:`canonical_lane_inventory`,reason:`conflicting_key_material`,targetKey:s,groupKey:u.conflicts[0]?.groupKey,conflicts:u.conflicts}),t[s]=[],n[s]=N({chainTarget:a});break;case`ambiguous_material`:e.invalidLanes.push({curve:`ecdsa`,source:`canonical_lane_inventory`,reason:`ambiguous_material`,targetKey:s}),t[s]=[],n[s]=N({chainTarget:a});break}}return{lanesByTarget:n,candidatesByTarget:t}}function Qe(e,t,n=z){let r=new Map,i=[];for(let n of e){let e=t(n);if(!e){i.push(n);continue}r.set(e,[...r.get(e)||[],n])}return[...[...r.values()].map(e=>[...e].sort((e,t)=>n(t,e))[0]),...i]}function $e(e){let t=new Set(e.filter(e=>A(e)&&e.curve===`ed25519`&&e.source===`durable_sealed_record`&&(e.state===`ready`||e.state===`restorable`)).map(B).filter(e=>e!==null).map(V));return t.size?e.filter(e=>{if(!A(e)||e.curve!==`ed25519`||e.source!==`public_capability_reference`)return!0;let n=B(e);return!n||!t.has(V(n))}):[...e]}async function et(e,t){return e.state===`missing`||r(e.auth)!==r(t.auth)||!await rt(e,t)?!1:t.auth.kind===`passkey`?`keyFamily`in t&&t.keyFamily===`ecdsa`?!1:e.signerSlot===t.signerSlot:!0}function tt(e,t){return e.state===`missing`||r(e.auth)!==r(t.auth)?!1:nt(e,t)}function nt(e,t){let n=t.auth.kind===`passkey`?void 0:t.ownerAuthority;if(!n)return!0;if(e.curve===`ecdsa`&&e.source===`active_wallet_authority`)return e.runtime.factorAuthorityRef.walletAuthMethodId===n.walletAuthMethodId&&String(e.runtime.factorAuthorityRef.authorityDigest)===String(n.authorityDigest);if(e.curve===`ecdsa`&&e.source===`canonical_capability`){let t=e.capability.manifest.signer.authority;return t.walletAuthMethodId===n.walletAuthMethodId&&String(t.authorityDigest)===String(n.authorityDigest)}return!1}async function rt(e,t){let n=t.auth.kind===`passkey`?void 0:t.ownerAuthority;if(!n)return!0;if(e.state===`missing`||e.curve!==`ed25519`)return!1;if(e.authorizationState===`authorization_required`)return!0;try{let t=await s({authority:e.authorization.selectedFactorAuthority});return t.walletId===e.walletId&&t.walletAuthMethodId===n.walletAuthMethodId&&t.authorityDigest===n.authorityDigest}catch{return!1}}async function it(e,t){let n=[];for(let r of e)await et(r,t)&&n.push(r);return n}async function at(e,t){let r=a(e.walletId),i=new Map;for(let t of e.ecdsaChainTargets)i.set(o(t),t);let s=[...i.values()],[c,l,u,d]=await Promise.all([t.listSealedRecordsForWallet({walletId:r,filter:{...e.authMethod?{authMethod:e.authMethod}:{},curve:`ed25519`}}),t.listPublicCapabilityReferences?.()??[],t.readActiveWalletSessionAuthorization?.(r)??{kind:`missing`},s.length>0&&t.listCanonicalEcdsaLanesForWallet?t.listCanonicalEcdsaLanesForWallet({walletId:r}):[]]),f=u.kind===`found`?u.authorization:null,p=[...s],m={},h={},g={};for(let e of p){let t=o(e);m[t]=N({chainTarget:e}),h[t]=[],g[t]=0}let _=[],v=0,y=Ae(),b=[],x=[];for(let t of c){let n=te(t,f,e.ownerScope);if(!n)continue;_.push(n);let r=F(n);v=Math.max(v,r)}for(let i of l){if(String(i.walletId)!==String(r))continue;let a=u.kind===`exhausted`||u.kind===`expired`;if(!t.isPublicCapabilityActive?.(i)&&!a)continue;let o=re(i,f,e.ownerScope);o&&(e.authMethod&&n(o.auth)!==e.authMethod||_.push(o))}for(let t of d){let a=n(t.auth);if(e.authMethod&&a!==e.authMethod||String(t.key.walletId)!==String(r))continue;let s=o(t.chainTarget);if(!i.has(s))continue;h[s]||=[],h[s].push(t);let c=F(t);v=Math.max(v,c),b.push({result:`accepted`,targetKey:s,lane:K(t)})}let S=s.length>0&&t.listActiveWalletAuthorityEcdsaLanesForWallet?await t.listActiveWalletAuthorityEcdsaLanesForWallet({walletId:r,chainTargets:s}):[];for(let t of S){let a=n(t.auth);if(e.authMethod&&a!==e.authMethod||String(t.key.walletId)!==String(r))continue;let s=o(t.chainTarget);i.has(s)&&(h[s]||=[],h[s].push(t),b.push({result:`accepted`,targetKey:s,lane:K(t)}))}let C=e.ownerScope,w=C?await it(_,C):_;if(C)for(let e of Object.keys(h))h[e]=(h[e]||[]).filter(e=>tt(e,C));let T=De(Qe($e(w),M,he).sort(H),x),ee=ke({primaryLane:T[0]||pe(),candidates:T}),E=Ze({targets:p,candidatesByTarget:Ze({targets:p,candidatesByTarget:h,invalidLanes:x}).candidatesByTarget,invalidLanes:x}),D={walletId:r,generation:v,ecdsa:{targets:p,lanesByTarget:E.lanesByTarget,candidatesByTarget:E.candidatesByTarget},lanes:{ed25519:{near:ee}},candidates:{ed25519:{near:T}},diagnostics:{invalidLanes:x}},O=p.map(e=>{let t=o(e),n=D.ecdsa.candidatesByTarget[t]||[],r=D.ecdsa.lanesByTarget[t],i=r?.state||`missing`;return n.length>0&&i!==`missing`?null:{chainTarget:e,targetKey:t,candidateCount:n.length,selectedLane:K(r)}}).filter(e=>!!e),k={walletId:r,authMethod:e.authMethod||`any`,requestedTargets:p.map(e=>({chainTarget:e,targetKey:o(e)})),sealedRecordCount:0,runtimeRecordCount:d.length,durableDiscovery:[],runtimeDiscovery:b,resultSelectedLanesByTarget:Object.fromEntries(Object.entries(D.ecdsa.lanesByTarget).map(([e,t])=>[e,K(t)])),resultCandidatesByTarget:Object.fromEntries(Object.entries(D.ecdsa.candidatesByTarget).map(([e,t])=>[e,t.map(e=>K(e))]))};if(y&&O.length>0)try{console.warn(`[SigningLanes][available][ecdsa][missing-candidates]`,JSON.stringify({...k,missingEcdsaTargets:O}))}catch{}if(y)try{console.info(`[SigningLanes][available][ecdsa]`,JSON.stringify(k))}catch{}return D}function Y(t,n){return e(t,{fallback:n,min:1})}function X(e,t){let n=Error(`[SigningEngine] ${t}`);return n.code=e,n}function ot(e,t){let n=e.get(t);if(n)return n;let r={running:!1,items:[]};return e.set(t,r),r}function st(e){e.timeoutHandle&&=(clearTimeout(e.timeoutHandle),null)}async function ct(e,t){let n=e.get(t);if(!(!n||n.running)){n.running=!0;try{for(;n.items.length>0;){let e=n.items.shift();if(e&&!e.isSettled()){if(st(e),e.shouldAbort?.()){e.reject(e.makeCancelledError(`cancelled`));continue}if(Date.now()-e.enqueuedAtMs>e.timeoutMs){e.reject(e.makeTimeoutError(e.timeoutMs));continue}try{await e.run()}catch(t){e.reject(t)}}}}finally{n.running=!1,n.items.length===0&&e.get(t)===n?e.delete(t):n.items.length>0&&ct(e,t)}}}function lt(e){for(let t of e.values()){for(let e of t.items)st(e),e.reject(e.makeCancelledError(`queue_cleared`));t.items.length=0}e.clear()}function ut(e){return[`material`,encodeURIComponent(String(e.materialActivation.materialOwner)),encodeURIComponent(String(e.materialActivation.capability)),encodeURIComponent(String(e.materialActivation.activationId))].join(`:`)}async function dt(e){let{labels:t,owner:n}=e,r=String(e.queueKey||``).trim();if(!r)throw Error(`[SigningEngine] ${t.queue} requires non-empty queueKey`);if(!e.enabled)return await e.task();let i=Y(e.maxQueueLength,8),a=Y(e.queueTimeoutMs,45e3),o=ot(e.queueByKey,r);if(o.items.length+(o.running?1:0)>=i)throw X(`commit_queue_overflow`,`${t.queue} overflow for ${n} (queueKey=${r}, max=${i})`);return await new Promise((i,s)=>{let c=null,l=!1,u=()=>{c&&=(clearTimeout(c),null)},d=e=>{l||(l=!0,u(),s(e))},f=e=>{l||(l=!0,u(),i(e))},p=e=>X(`cancelled`,`${t.queuedOperation} cancelled for ${n} (queueKey=${r}${e===`queue_cleared`?`, queue_cleared`:``})`),m=e=>X(`commit_queue_timeout`,`${t.queue} timeout for ${n} (queueKey=${r}, waited>${e}ms before start)`),h={enqueuedAtMs:Date.now(),timeoutMs:a,shouldAbort:e.shouldAbort,timeoutHandle:null,isSettled:()=>l,reject:d,makeCancelledError:p,makeTimeoutError:m,run:async()=>{if(e.shouldAbort?.())throw p(`cancelled`);f(await e.task())}};c=setTimeout(()=>{if(h.isSettled())return;let t=o.items.indexOf(h);t>=0&&o.items.splice(t,1),d(m(a)),!o.running&&o.items.length===0&&e.queueByKey.get(r)===o&&e.queueByKey.delete(r)},a),h.timeoutHandle=c,o.items.push(h),ct(e.queueByKey,r)})}function Z(e){let t={walletId:p(e.laneIdentity),authMethod:n(e.laneIdentity.auth),laneIdentity:e.laneIdentity};return e.kind===`ecdsa`?{...t,walletSessionId:e.authorization.operationCredential.walletSessionId,quotaId:e.authorization.session.quotaId}:{...t,walletSessionId:e.laneIdentity.walletSessionId,quotaId:e.laneIdentity.quotaId}}function Q(e){return{kind:`invalid`,...Z(e.source)}}function $(e){let t=Number(e);return!Number.isSafeInteger(t)||t<0?null:t}function ft(e){let t=$(e.expiresAtMs),n=$(e.detectedAtMs);if(t===null||t===0)throw Error(`Authoritative expired Wallet Session expiresAtMs is invalid`);if(n===null||n===0)throw Error(`Authoritative expired Wallet Session detectedAtMs is invalid`);if(t>n)throw Error(`Authoritative expired Wallet Session timeline is invalid`);return{kind:`expired`,...Z(e.source),expiresAtMs:t,detectedAtMs:n}}function pt(e){let t=$(e.observation.expiresAtMs);if(t===null||t===0)return Q({source:e.observation.source});let n=Z(e.observation.source);return t<=e.nowMs?{kind:`expired`,...n,expiresAtMs:t,detectedAtMs:e.nowMs}:{kind:`active`,...n,expiresAtMs:t}}function mt(e){let t=$(e.nowMs);if(t===null)return Q({source:e.observation.source});switch(e.observation.kind){case`found`:return pt({observation:e.observation,nowMs:t});case`missing`:return{kind:`missing`,...Z(e.observation.source)};case`unavailable`:return{kind:`unavailable`,...Z(e.observation.source)};case`invalid`:return Q({source:e.observation.source});default:return e.observation}}export{C as _,dt as a,D as c,le as d,ce as f,at as g,A as h,ut as i,fe as l,se as m,ft as n,T as o,M as p,lt as r,E as s,mt as t,de as u,w as v};
+import{F as e,i as t}from"./domainIds-t1lp25yU.js";import{c as n,s as r}from"./types-D2Zk1W7I.js";import{t as i}from"./accountIds-DGWFzEnw.js";import{c as a,o}from"./ecdsaChainTarget-BoRVQtjQ.js";import{ut as s}from"./digestEncoding-Rx8Vjy4J.js";import{i as c,t as l}from"./signerSlot-BlijMq8C.js";import{T as u,g as d}from"./emailOtpEcdsaDerivationIdentity-DJmMyqL-.js";import{a as f,k as p}from"./nearEd25519YaoSigningPreparation-Cz2Gb95g.js";function m(e){let t=Math.floor(Number(e));return!Number.isFinite(t)||t<=0?null:t.toString(10).padStart(20,`0`)}function h(e,t){if(e.length===0)return{kind:`no_current_lane`,unusableFacts:[]};let n=_(e,t),r=v(n,t);if(r.length)return{kind:`conflicting_key_material`,conflicts:r};if(n.length!==1)return{kind:`ambiguous_material`,candidates:e};let i=n[0];return i?g(i,t.supersession):{kind:`no_current_lane`,unusableFacts:[]}}function g(e,t){let n=e.facts.filter(t.isOperationUsable);if(n.length===0)return{kind:`no_current_lane`,unusableFacts:e.facts};let r=y(n,t);return r.kind===`ambiguous`?{kind:`ambiguous_material`,candidates:r.candidates}:{kind:`selected`,selectedFact:r.fact,supersededFacts:e.facts.filter(e=>e!==r.fact)}}function _(e,t){let n=new Map;for(let r of e){let e=t.groupKey(r),i=t.groupKeyString(e),a=n.get(i);n.set(i,a?{groupKey:a.groupKey,facts:[...a.facts,r]}:{groupKey:e,facts:[r]})}return[...n.values()]}function v(e,t){return e.flatMap(e=>t.groupConflicts(e.facts))}function y(e,t){let n=e[0];if(n===void 0)return{kind:`ambiguous`,candidates:[]};let r=n;for(let n of e.slice(1)){let e=b(r,n,t);switch(e.kind){case`left`:break;case`right`:r=n;break;case`ambiguous`:return{kind:`ambiguous`,candidates:e.candidates};default:return e}}return{kind:`selected`,fact:r}}function b(e,t,n){let r=x(e,t,n);if(r.kind!==`equal`)return r;let i=S(e,t,n);if(i.kind!==`equal`)return i;let a=n.tieBreak(e,t);switch(a){case 1:return{kind:`left`};case-1:return{kind:`right`};case 0:return{kind:`ambiguous`,candidates:[e,t]};default:return a}}function x(e,t,n){let r=n.generation(e),i=n.generation(t);return!r||!i?{kind:`ambiguous`,candidates:[e,t]}:r>i?{kind:`left`}:i>r?{kind:`right`}:{kind:`equal`}}function S(e,t,n){let r=n.exactness(e);return r===n.exactness(t)?{kind:`equal`}:r===`exact_target`?{kind:`left`}:{kind:`right`}}function C(e){return{kind:`ed25519_durable_material`,authMethod:e.authMethod,materialActivation:e.materialActivation}}function w(e){return[e.activationId,e.capability,e.materialOwner,e.keyBinding,e.lifecycleBinding,e.signingWorker].map(e=>encodeURIComponent(String(e))).join(`:`)}function T(e){let t={source:e.source,runtime:e.runtime,key:e.key,materialActivation:e.materialActivation,publicFacts:e.publicFacts,curve:`ecdsa`,chainTarget:e.chainTarget,state:e.state,authorizationState:e.authorizationState};if(e.auth.kind===`passkey`){if(!e.resolvedKey)throw Error(`active Wallet Authority passkey lane is missing its resolved ECDSA key`);return{...t,auth:e.auth,resolvedKey:e.resolvedKey}}return{...t,auth:e.auth}}function ee(e){let t=e.authorization;return t?e.remainingUses===t.runtime.remainingUses&&e.expiresAtMs===t.runtime.expiresAtMs:!0}function E(e){return e.auth.kind}function D(e){return n(e.auth)}function O(e){let t=e.ed25519Restore;if(e.authMethod===`passkey`){if(!t.credentialIdB64u)return null;try{return{kind:`passkey`,rpId:u(t.rpId),credentialIdB64u:t.credentialIdB64u}}catch{return null}}return t.providerSubjectId?{kind:`email_otp`,providerSubjectId:t.providerSubjectId}:null}function k(e){let{authorization:t}=e;if(String(t.session.walletId)!==e.walletId||t.selectedAuthMethod.kind!==e.auth.kind||t.operationCredential.walletSessionId.length===0||t.session.quotaId.length===0||!f({session:t.session,materialActivation:e.materialActivation}))return!1;switch(e.auth.kind){case`passkey`:if(t.selectedAuthMethod.kind!==`passkey`||String(t.selectedAuthMethod.rpId)!==String(e.auth.rpId)||t.selectedAuthMethod.credentialIdB64u!==e.auth.credentialIdB64u)return!1;break;case`email_otp`:if(t.selectedAuthMethod.kind!==`email_otp`||t.selectedFactorAuthority.factor.kind!==`email_otp`||t.selectedFactorAuthority.factor.providerUserId!==e.auth.providerSubjectId)return!1;break;case`voiceid`:if(t.selectedAuthMethod.kind!==`voiceid`||t.selectedAuthMethod.walletAuthMethodId!==e.auth.walletAuthMethodId||t.selectedAuthMethod.deviceKeyId!==e.auth.deviceKeyId)return!1;break;default:return e.auth,!1}return!!(e.ownerScope&&r(e.auth)===r(e.ownerScope.auth))}function te(e,t,n){if(e.curve!==`ed25519`)return null;let r=String(e.thresholdSessionIds.ed25519||``).trim(),o=String(e.walletId||``).trim(),s=e.ed25519Restore,u=l(s.signerSlot),d=O(e);if(!r||!o||u===null||!d)return null;let f=Math.floor(Number(e.expiresAtMs)||0),p=Math.max(0,Math.floor(Number(e.remainingUses)||0)),m=f>0&&f<=Date.now()?`expired`:p===0?`exhausted`:`restorable`,h=t&&k({authorization:t,auth:d,walletId:o,materialActivation:s.materialActivation,ownerScope:n})?t:null;try{let t={auth:d,curve:`ed25519`,chain:`near`,materialActivation:s.materialActivation,walletId:a(o),nearAccountId:i(s.nearAccountId),nearEd25519SigningKeyId:c(s.nearEd25519SigningKeyId),signerSlot:u,source:`durable_sealed_record`,thresholdSessionId:r,remainingUses:p,...f>0?{expiresAtMs:f}:{},updatedAtMs:Math.floor(Number(e.updatedAtMs)||0),...P(e)?{policyHint:P(e)}:{}};return h?{...t,state:m,authorizationState:`authorized`,authorization:h}:{...t,state:`deferred`,authorizationState:`authorization_required`}}catch{return null}}function ne(e){return e.auth.kind===`email_otp`}function re(e,t,n){let r=String(e.walletId||``).trim(),o=String(e.nearAccountId||``).trim(),s=String(e.thresholdSessionId||``).trim();if(!r||!o||!s)return null;let c=t&&k({authorization:t,auth:e.auth,walletId:r,materialActivation:e.materialActivation,ownerScope:n})?t:null;try{let t={auth:e.auth,curve:`ed25519`,chain:`near`,materialActivation:e.materialActivation,walletId:a(r),nearAccountId:i(o),nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,signerSlot:e.signerSlot,thresholdSessionId:s,source:`public_capability_reference`};if(!c)return{...t,state:`deferred`,authorizationState:`authorization_required`};let n=Math.floor(Number(c.status.expiresAtMs)||0),l=ne(e)?e:null,u=l?Math.min(l.expiresAtMs,n):n,d=u>0&&u<=Date.now()?`expired`:`ready`;return{...t,state:d,authorizationState:`authorized`,authorization:c,remainingUses:c.status.remainingUses,...u>0?{expiresAtMs:u}:{}}}catch{return null}}function A(e){if(e.state===`missing`)return!1;if(e.curve!==`ecdsa`){let t=String(e.thresholdSessionId||``).trim();return e.thresholdSessionId!==t||!t?!1:e.authorizationState===`authorization_required`?e.state===`deferred`:!(!e.authorization.operationCredential.walletSessionId||!e.authorization.session.quotaId||e.authorization.status.remainingUses<=0||e.authorization.status.expiresAtMs<=Date.now())}return e.source===`active_wallet_authority`&&(e.state!==`deferred`||e.authorizationState!==`authorization_required`||e.runtime.kind!==`active_wallet_authority_ecdsa_runtime_v1`||String(e.runtime.walletId)!==String(e.key.walletId)||!t(e.runtime.materialActivation,e.materialActivation)||e.runtime.publicFacts!==e.publicFacts)||!(e.key&&String(e.key.walletId||``).trim()&&String(e.key.ecdsaThresholdKeyId||``).trim()&&String(e.key.signingRootId||``).trim()&&String(e.key.signingRootVersion||``).trim()&&Array.isArray(e.key.participantIds)&&e.key.participantIds.length>0&&String(e.key.thresholdOwnerAddress||``).trim()&&`publicFacts`in e&&e.publicFacts&&e.publicFacts.keyHandle&&String(e.publicFacts.publicKeyB64u||``).trim()&&Array.isArray(e.publicFacts.participantIds)&&e.publicFacts.participantIds.length>0&&String(e.publicFacts.thresholdOwnerAddress||``).trim())||e.source===`canonical_capability`&&!ee(e)?!1:n(e.auth)===`passkey`?e.resolvedKey?.kind===`resolved_evm_family_ecdsa_key`&&e.resolvedKey.authBinding.kind===`passkey_ecdsa_auth_binding`&&String(e.resolvedKey.walletId)===String(e.key.walletId)&&e.resolvedKey.publicFacts===e.publicFacts:!(`resolvedKey`in e)}function j(e){return e===`missing`?null:e}function ie(e){return e||`unknown`}function ae(e){let t=Math.floor(Number(e));return Number.isFinite(t)&&t>0?t:null}function oe(e){let t=Math.max(0,Math.floor(Number(e)));return Number.isFinite(t)?t:null}function se(e){if(!A(e.lane)||e.lane.curve!==`ed25519`)return null;let t=j(e.lane.state);if(!t)return null;let n={kind:`lane_candidate`,walletId:e.lane.walletId,nearAccountId:e.lane.nearAccountId,nearEd25519SigningKeyId:e.lane.nearEd25519SigningKeyId,signerSlot:e.lane.signerSlot,materialActivation:e.lane.materialActivation,auth:e.lane.auth,curve:`ed25519`,chain:`near`,thresholdSessionId:e.lane.thresholdSessionId,state:t,remainingUses:oe(e.lane.remainingUses),expiresAtMs:ae(e.lane.expiresAtMs),updatedAtMs:ae(e.lane.updatedAtMs),source:ie(e.lane.source)};return e.lane.authorizationState===`authorization_required`?{...n,authorizationState:`authorization_required`,state:`deferred`}:{...n,authorizationState:`authorized`,authorization:e.lane.authorization}}function ce(e){if(!A(e.lane)||e.lane.curve!==`ecdsa`)return null;let t=j(e.lane.state);if(!t)return null;let r=n(e.lane.auth),i={kind:`lane_candidate`,walletId:a(e.walletId),auth:e.lane.auth,authMethod:r,curve:`ecdsa`,chain:e.lane.chainTarget.kind,key:e.lane.key,materialActivation:e.lane.materialActivation,...r===`passkey`?{resolvedKey:e.lane.resolvedKey}:{},keyHandle:e.lane.publicFacts.keyHandle,chainTarget:e.lane.chainTarget};switch(e.lane.source){case`active_wallet_authority`:return{...i,source:`active_wallet_authority`,runtime:e.lane.runtime,authorizationState:`authorization_required`,state:`deferred`};case`canonical_capability`:return e.lane.authorization?{...i,source:`canonical_capability`,authorizationState:`authorized`,authorization:e.lane.authorization,state:t}:{...i,source:`canonical_capability`,authorizationState:`authorization_required`,state:`deferred`};default:return e.lane}}function le(e){if(!e||e.curve!==`ecdsa`||!e.chainTarget||!(`key`in e)||!e.key||!(`auth`in e)||!e.auth)return null;let t=n(e.auth);try{let n=r(e.auth);return[t,`ecdsa`,o(e.chainTarget),n,ue(e),w(e.materialActivation)].join(`:`)}catch{return null}}function ue(e){return d({walletId:e.key.walletId,publicFacts:e.publicFacts})}function M(e){if(!e||e.curve!==`ed25519`||e.chain!==`near`||e.state===`missing`||!e.auth)return null;let t=n(e.auth),r=String(e.walletId||``).trim(),i=String(e.nearAccountId||``).trim(),a=String(e.nearEd25519SigningKeyId||``).trim(),o=String(e.signerSlot||``).trim(),s=String(e.thresholdSessionId||``).trim(),c=e.materialActivation?w(e.materialActivation):``;return!t||!r||!i||!a||!o||!s||!c?null:[r,i,a,o,t,`ed25519`,`near`,s,c].join(`:`)}function N(e){return{curve:`ecdsa`,chainTarget:e.chainTarget,state:`missing`}}function de(e,t){let n=o(t);return e.ecdsa.lanesByTarget[n]||N({chainTarget:t})}function fe(e,t){let n=o(t);return e.ecdsa.candidatesByTarget[n]||[]}function pe(){return{curve:`ed25519`,chain:`near`,state:`missing`}}function P(e){let t=Math.floor(Number(e.remainingUses)),n=Math.floor(Number(e.expiresAtMs)),r={};return Number.isFinite(t)&&t>=0&&(r.remainingUses=t),Number.isFinite(n)&&n>0&&(r.expiresAtMs=n),Object.keys(r).length?r:void 0}function F(e){return Math.floor(Number(`updatedAtMs`in e?e.updatedAtMs:0)||0)}function I(e){return m(e.expiresAtMs??e.policyHint?.expiresAtMs)}function L(e){switch(e.state){case`ready`:return 5;case`restorable`:return 4;case`deferred`:return 3;case`expired`:case`exhausted`:return 2;case`missing`:return 1}}function R(e){return!A(e)||e.curve===`ecdsa`?0:e.source===`durable_sealed_record`?1:0}function z(e,t){return L(e)-L(t)||R(e)-R(t)||F(e)-F(t)}function me(e,t){return z(e,t)}function he(e,t){return L(e)-L(t)||R(e)-R(t)||F(e)-F(t)}function B(e){let t=r(e.auth),n=String(e.walletId||``).trim(),i=String(e.nearAccountId||``).trim(),a=String(e.nearEd25519SigningKeyId||``).trim(),o=String(e.signerSlot||``).trim(),s=w(e.materialActivation);return!t||!n||!i||!a||!o||!s?null:{walletId:n,authKey:t,nearAccountId:i,nearEd25519SigningKeyId:a,signerSlot:o,materialActivationKey:s}}function V(e){return[e.walletId,e.authKey,e.nearAccountId,e.nearEd25519SigningKeyId,e.signerSlot,e.materialActivationKey].map(e=>encodeURIComponent(e)).join(`|`)}function ge(e){if(!A(e)||e.curve!==`ed25519`)return null;let t=B(e);return t?{groupKey:t,lane:e}:null}function H(e,t){return me(t,e)}function U(e,t){return e>t?1:t>e?-1:0}function W(e,t){let n=e.localeCompare(t);return n>0?1:n<0?-1:0}function G(e){for(let t of e)if(t!==0)return t;return 0}function _e(e){return[]}function ve(e){return!0}function ye(e){return I(e.lane)}function be(){return`exact_target`}function xe(e,t){return G([U(L(e.lane),L(t.lane)),U(R(e.lane),R(t.lane)),W(Se(e.lane),Se(t.lane))])}function Se(e){return[e.thresholdSessionId,e.authorizationState===`authorized`?e.authorization.operationCredential.walletSessionId:``,e.authorizationState===`authorized`?e.authorization.session.quotaId:``,e.source||`durable_sealed_record`].map(e=>String(e)).join(`|`)}const Ce={groupKey:we,groupKeyString:V,groupConflicts:_e,supersession:{isOperationUsable:ve,generation:ye,exactness:be,tieBreak:xe}};function we(e){return e.groupKey}function Te(e){let t=new Map;for(let n of e){let e=V(n.groupKey);t.set(e,[...t.get(e)||[],n])}return t}function Ee(e,t){let n=h(e,Ce);switch(n.kind){case`selected`:return[n.selectedFact.lane];case`no_current_lane`:return[];case`conflicting_key_material`:return t.push({curve:`ed25519`,source:`canonical_lane_inventory`,reason:`conflicting_key_material`,message:`Ed25519 canonical lane inventory has conflicting material facts`}),[];case`ambiguous_material`:return t.push({curve:`ed25519`,source:`canonical_lane_inventory`,reason:`ambiguous_material`,message:`Ed25519 canonical lane inventory has incomparable usable records`}),[];default:return n}}function De(e,t){let n=e.map(ge).filter(e=>e!==null),r=[];for(let e of Te(n).values())r.push(...Ee(e,t));return r.sort(H)}function Oe(e){if(!A(e)||e.curve!==`ed25519`)return null;let t=String(e.thresholdSessionId||``).trim();return e.authorizationState!==`authorized`||!t?null:`${e.authorization.operationCredential.walletSessionId}:${e.authorization.session.quotaId}:${t}`}function ke(e){if(!A(e.primaryLane)||e.primaryLane.curve!==`ed25519`||D(e.primaryLane)!==`passkey`)return e.primaryLane;let t=Oe(e.primaryLane);return t&&e.candidates.find(e=>A(e)&&e.curve===`ed25519`&&D(e)===`email_otp`&&Oe(e)===t)||e.primaryLane}function Ae(){try{return globalThis.localStorage?.getItem(`seams:debug:signing-session`)===`1`}catch{return!1}}function K(e){return e?A(e)?{present:!0,authMethod:n(e.auth),curve:e.curve,keyHandle:e.publicFacts.keyHandle,walletId:e.key.walletId,chainTarget:e.chainTarget,targetKey:o(e.chainTarget),state:e.state,source:e.source,evmFamilyKeyFingerprint:ue(e),ecdsaThresholdKeyId:e.key.ecdsaThresholdKeyId,participantIds:e.publicFacts.participantIds,thresholdOwnerAddress:e.publicFacts.thresholdOwnerAddress,remainingUses:e.remainingUses,expiresAtMs:e.expiresAtMs,updatedAtMs:e.updatedAtMs}:{present:!0,curve:e.curve,chainTarget:e.chainTarget,state:e.state}:{present:!1}}function je(e){switch(e.source){case`canonical_capability`:return`canonical_capability`;case`active_wallet_authority`:return`active_wallet_authority`;default:return e}}function Me(e){let t=r(e.auth);return{walletId:String(e.key.walletId),authKey:t,materialActivationKey:w(e.materialActivation),ecdsaThresholdKeyId:String(e.key.ecdsaThresholdKeyId),signingRootId:String(e.key.signingRootId),signingRootVersion:String(e.key.signingRootVersion||`default`)}}function Ne(e){return[e.walletId,e.authKey,e.materialActivationKey,e.ecdsaThresholdKeyId,e.signingRootId,e.signingRootVersion].map(e=>encodeURIComponent(e)).join(`|`)}function Pe(e){let t=Me(e);return t?{source:je(e),groupKey:t,chainTargetKey:o(e.chainTarget),lane:e}:null}function Fe(e){let t=r(e.auth);return[String(e.key.walletId),t,w(e.materialActivation),String(e.key.signingRootId),String(e.key.signingRootVersion||`default`)].map(e=>encodeURIComponent(e)).join(`|`)}function q(e,t){return[...new Set(e.map(e=>t(e.lane)).filter(Boolean))].sort()}function Ie(e){return[{field:`ecdsaThresholdKeyId`,values:q(e.facts,e=>String(e.key.ecdsaThresholdKeyId||``))},{field:`thresholdOwnerAddress`,values:q(e.facts,e=>String(e.publicFacts.thresholdOwnerAddress||``).toLowerCase())},{field:`keyHandle`,values:q(e.facts,e=>String(e.publicFacts.keyHandle||``))},{field:`publicKeyB64u`,values:q(e.facts,e=>String(e.publicFacts.publicKeyB64u||``))},{field:`participantIds`,values:q(e.facts,e=>e.publicFacts.participantIds.map(e=>Number(e)).join(`,`))}].filter(e=>e.values.length>1).map(t=>({groupKey:e.key,field:t.field,values:t.values}))}function Le(e){let t=new Map;for(let n of e){let e=Fe(n.lane);e&&t.set(e,[...t.get(e)||[],n])}let n=new Map;for(let[e,r]of t){let t=r[0];if(!t)continue;let i=Ie({key:t.groupKey,facts:r});i.length&&n.set(e,i)}return n}function Re(e){let t=Fe(e.fact.lane);return t&&e.conflictsByFamilyGroup.get(t)||[]}function ze(e){return e.filter(e=>A(e)&&e.curve===`ecdsa`).map(Pe).filter(e=>e!==null)}function Be(e){return e.source===`active_wallet_authority`?2:1}function Ve(e){return e.groupKey}function He(e){let t=e[0];return t?Ie({key:t.groupKey,facts:e}):[]}function Ue(e){return e.lane.source===`active_wallet_authority`?!0:e.lane.state!==`deferred`||!e.lane.authorization}function We(e){return I(e.lane)}function Ge(e){return`exact_target`}function J(e){return[w(e.materialActivation),e.source,o(e.chainTarget)].map(e=>String(e)).join(`|`)}function Ke(e,t){return G([U(L(e.lane),L(t.lane)),U(Be(e.lane),Be(t.lane)),W(J(e.lane),J(t.lane))])}const qe={groupKey:Ve,groupKeyString:Ne,groupConflicts:He,supersession:{isOperationUsable:Ue,generation:We,exactness:Ge,tieBreak:Ke}};function Je(e){let t=new Map;for(let n of e)t.set(Ne(n.groupKey),n.groupKey);return[...t.values()]}function Ye(e){let t=h(e,qe);switch(t.kind){case`selected`:return{kind:`selected`,selectedFact:t.selectedFact,supersededFacts:t.supersededFacts};case`no_current_lane`:return{kind:`no_current_lane`,unusableFacts:t.unusableFacts};case`conflicting_key_material`:return{kind:`conflicting_key_material`,conflicts:t.conflicts};case`ambiguous_material`:return{kind:`ambiguous_material`,candidates:Je(t.candidates),candidateFacts:t.candidates};default:return t}}function Xe(e){return A(e)?J(e):null}function Ze(e){let t={},n={},r=Object.fromEntries(Object.entries(e.candidatesByTarget).map(([e,t])=>[e,Qe(t,Xe)])),i=Le(Object.values(r).flatMap(ze));for(let a of e.targets){let s=o(a),c=ze(r[s]||[]),l=c.flatMap(e=>Re({fact:e,conflictsByFamilyGroup:i}));if(l.length){e.invalidLanes.push({curve:`ecdsa`,source:`canonical_lane_inventory`,reason:`conflicting_key_material`,targetKey:s,groupKey:l[0]?.groupKey,conflicts:l}),t[s]=[],n[s]=N({chainTarget:a});continue}let u=Ye(c);switch(u.kind){case`selected`:t[s]=[u.selectedFact.lane],n[s]=u.selectedFact.lane;break;case`no_current_lane`:t[s]=[],n[s]=N({chainTarget:a});break;case`conflicting_key_material`:e.invalidLanes.push({curve:`ecdsa`,source:`canonical_lane_inventory`,reason:`conflicting_key_material`,targetKey:s,groupKey:u.conflicts[0]?.groupKey,conflicts:u.conflicts}),t[s]=[],n[s]=N({chainTarget:a});break;case`ambiguous_material`:e.invalidLanes.push({curve:`ecdsa`,source:`canonical_lane_inventory`,reason:`ambiguous_material`,targetKey:s}),t[s]=[],n[s]=N({chainTarget:a});break}}return{lanesByTarget:n,candidatesByTarget:t}}function Qe(e,t,n=z){let r=new Map,i=[];for(let n of e){let e=t(n);if(!e){i.push(n);continue}r.set(e,[...r.get(e)||[],n])}return[...[...r.values()].map(e=>[...e].sort((e,t)=>n(t,e))[0]),...i]}function $e(e){let t=new Set(e.filter(e=>A(e)&&e.curve===`ed25519`&&e.source===`durable_sealed_record`&&(e.state===`ready`||e.state===`restorable`)).map(B).filter(e=>e!==null).map(V));return t.size?e.filter(e=>{if(!A(e)||e.curve!==`ed25519`||e.source!==`public_capability_reference`)return!0;let n=B(e);return!n||!t.has(V(n))}):[...e]}async function et(e,t){return e.state===`missing`||r(e.auth)!==r(t.auth)||!await rt(e,t)?!1:t.auth.kind===`passkey`?`keyFamily`in t&&t.keyFamily===`ecdsa`?!1:e.signerSlot===t.signerSlot:!0}function tt(e,t){return e.state===`missing`||r(e.auth)!==r(t.auth)?!1:nt(e,t)}function nt(e,t){let n=t.auth.kind===`passkey`?void 0:t.ownerAuthority;if(!n)return!0;if(e.curve===`ecdsa`&&e.source===`active_wallet_authority`)return e.runtime.factorAuthorityRef.walletAuthMethodId===n.walletAuthMethodId&&String(e.runtime.factorAuthorityRef.authorityDigest)===String(n.authorityDigest);if(e.curve===`ecdsa`&&e.source===`canonical_capability`){let t=e.capability.manifest.signer.authority;return t.walletAuthMethodId===n.walletAuthMethodId&&String(t.authorityDigest)===String(n.authorityDigest)}return!1}async function rt(e,t){let n=t.auth.kind===`passkey`?void 0:t.ownerAuthority;if(!n)return!0;if(e.state===`missing`||e.curve!==`ed25519`)return!1;if(e.authorizationState===`authorization_required`)return!0;try{let t=await s({authority:e.authorization.selectedFactorAuthority});return t.walletId===e.walletId&&t.walletAuthMethodId===n.walletAuthMethodId&&t.authorityDigest===n.authorityDigest}catch{return!1}}async function it(e,t){let n=[];for(let r of e)await et(r,t)&&n.push(r);return n}async function at(e,t){let r=a(e.walletId),i=new Map;for(let t of e.ecdsaChainTargets)i.set(o(t),t);let s=[...i.values()],[c,l,u,d]=await Promise.all([t.listSealedRecordsForWallet({walletId:r,filter:{...e.authMethod?{authMethod:e.authMethod}:{},curve:`ed25519`}}),t.listPublicCapabilityReferences?.()??[],t.readActiveWalletSessionAuthorization?.(r)??{kind:`missing`},s.length>0&&t.listCanonicalEcdsaLanesForWallet?t.listCanonicalEcdsaLanesForWallet({walletId:r}):[]]),f=u.kind===`found`?u.authorization:null,p=[...s],m={},h={},g={};for(let e of p){let t=o(e);m[t]=N({chainTarget:e}),h[t]=[],g[t]=0}let _=[],v=0,y=Ae(),b=[],x=[];for(let t of c){let n=te(t,f,e.ownerScope);if(!n)continue;_.push(n);let r=F(n);v=Math.max(v,r)}for(let i of l){if(String(i.walletId)!==String(r))continue;let a=u.kind===`exhausted`||u.kind===`expired`;if(!t.isPublicCapabilityActive?.(i)&&!a)continue;let o=re(i,f,e.ownerScope);o&&(e.authMethod&&n(o.auth)!==e.authMethod||_.push(o))}for(let t of d){let a=n(t.auth);if(e.authMethod&&a!==e.authMethod||String(t.key.walletId)!==String(r))continue;let s=o(t.chainTarget);if(!i.has(s))continue;h[s]||=[],h[s].push(t);let c=F(t);v=Math.max(v,c),b.push({result:`accepted`,targetKey:s,lane:K(t)})}let S=s.length>0&&t.listActiveWalletAuthorityEcdsaLanesForWallet?await t.listActiveWalletAuthorityEcdsaLanesForWallet({walletId:r,chainTargets:s}):[];for(let t of S){let a=n(t.auth);if(e.authMethod&&a!==e.authMethod||String(t.key.walletId)!==String(r))continue;let s=o(t.chainTarget);i.has(s)&&(h[s]||=[],h[s].push(t),b.push({result:`accepted`,targetKey:s,lane:K(t)}))}let C=e.ownerScope,w=C?await it(_,C):_;if(C)for(let e of Object.keys(h))h[e]=(h[e]||[]).filter(e=>tt(e,C));let T=De(Qe($e(w),M,he).sort(H),x),ee=ke({primaryLane:T[0]||pe(),candidates:T}),E=Ze({targets:p,candidatesByTarget:Ze({targets:p,candidatesByTarget:h,invalidLanes:x}).candidatesByTarget,invalidLanes:x}),D={walletId:r,generation:v,ecdsa:{targets:p,lanesByTarget:E.lanesByTarget,candidatesByTarget:E.candidatesByTarget},lanes:{ed25519:{near:ee}},candidates:{ed25519:{near:T}},diagnostics:{invalidLanes:x}},O=p.map(e=>{let t=o(e),n=D.ecdsa.candidatesByTarget[t]||[],r=D.ecdsa.lanesByTarget[t],i=r?.state||`missing`;return n.length>0&&i!==`missing`?null:{chainTarget:e,targetKey:t,candidateCount:n.length,selectedLane:K(r)}}).filter(e=>!!e),k={walletId:r,authMethod:e.authMethod||`any`,requestedTargets:p.map(e=>({chainTarget:e,targetKey:o(e)})),sealedRecordCount:0,runtimeRecordCount:d.length,durableDiscovery:[],runtimeDiscovery:b,resultSelectedLanesByTarget:Object.fromEntries(Object.entries(D.ecdsa.lanesByTarget).map(([e,t])=>[e,K(t)])),resultCandidatesByTarget:Object.fromEntries(Object.entries(D.ecdsa.candidatesByTarget).map(([e,t])=>[e,t.map(e=>K(e))]))};if(y&&O.length>0)try{console.warn(`[SigningLanes][available][ecdsa][missing-candidates]`,JSON.stringify({...k,missingEcdsaTargets:O}))}catch{}if(y)try{console.info(`[SigningLanes][available][ecdsa]`,JSON.stringify(k))}catch{}return D}function Y(t,n){return e(t,{fallback:n,min:1})}function X(e,t){let n=Error(`[SigningEngine] ${t}`);return n.code=e,n}function ot(e,t){let n=e.get(t);if(n)return n;let r={running:!1,items:[]};return e.set(t,r),r}function st(e){e.timeoutHandle&&=(clearTimeout(e.timeoutHandle),null)}async function ct(e,t){let n=e.get(t);if(!(!n||n.running)){n.running=!0;try{for(;n.items.length>0;){let e=n.items.shift();if(e&&!e.isSettled()){if(st(e),e.shouldAbort?.()){e.reject(e.makeCancelledError(`cancelled`));continue}if(Date.now()-e.enqueuedAtMs>e.timeoutMs){e.reject(e.makeTimeoutError(e.timeoutMs));continue}try{await e.run()}catch(t){e.reject(t)}}}}finally{n.running=!1,n.items.length===0&&e.get(t)===n?e.delete(t):n.items.length>0&&ct(e,t)}}}function lt(e){for(let t of e.values()){for(let e of t.items)st(e),e.reject(e.makeCancelledError(`queue_cleared`));t.items.length=0}e.clear()}function ut(e){return[`material`,encodeURIComponent(String(e.materialActivation.materialOwner)),encodeURIComponent(String(e.materialActivation.capability)),encodeURIComponent(String(e.materialActivation.activationId))].join(`:`)}async function dt(e){let{labels:t,owner:n}=e,r=String(e.queueKey||``).trim();if(!r)throw Error(`[SigningEngine] ${t.queue} requires non-empty queueKey`);if(!e.enabled)return await e.task();let i=Y(e.maxQueueLength,8),a=Y(e.queueTimeoutMs,45e3),o=ot(e.queueByKey,r);if(o.items.length+(o.running?1:0)>=i)throw X(`commit_queue_overflow`,`${t.queue} overflow for ${n} (queueKey=${r}, max=${i})`);return await new Promise((i,s)=>{let c=null,l=!1,u=()=>{c&&=(clearTimeout(c),null)},d=e=>{l||(l=!0,u(),s(e))},f=e=>{l||(l=!0,u(),i(e))},p=e=>X(`cancelled`,`${t.queuedOperation} cancelled for ${n} (queueKey=${r}${e===`queue_cleared`?`, queue_cleared`:``})`),m=e=>X(`commit_queue_timeout`,`${t.queue} timeout for ${n} (queueKey=${r}, waited>${e}ms before start)`),h={enqueuedAtMs:Date.now(),timeoutMs:a,shouldAbort:e.shouldAbort,timeoutHandle:null,isSettled:()=>l,reject:d,makeCancelledError:p,makeTimeoutError:m,run:async()=>{if(e.shouldAbort?.())throw p(`cancelled`);f(await e.task())}};c=setTimeout(()=>{if(h.isSettled())return;let t=o.items.indexOf(h);t>=0&&o.items.splice(t,1),d(m(a)),!o.running&&o.items.length===0&&e.queueByKey.get(r)===o&&e.queueByKey.delete(r)},a),h.timeoutHandle=c,o.items.push(h),ct(e.queueByKey,r)})}function Z(e){let t={walletId:p(e.laneIdentity),authMethod:n(e.laneIdentity.auth),laneIdentity:e.laneIdentity};return e.kind===`ecdsa`?{...t,walletSessionId:e.authorization.operationCredential.walletSessionId,quotaId:e.authorization.session.quotaId}:{...t,walletSessionId:e.laneIdentity.walletSessionId,quotaId:e.laneIdentity.quotaId}}function Q(e){return{kind:`invalid`,...Z(e.source)}}function $(e){let t=Number(e);return!Number.isSafeInteger(t)||t<0?null:t}function ft(e){let t=$(e.expiresAtMs),n=$(e.detectedAtMs);if(t===null||t===0)throw Error(`Authoritative expired Wallet Session expiresAtMs is invalid`);if(n===null||n===0)throw Error(`Authoritative expired Wallet Session detectedAtMs is invalid`);if(t>n)throw Error(`Authoritative expired Wallet Session timeline is invalid`);return{kind:`expired`,...Z(e.source),expiresAtMs:t,detectedAtMs:n}}function pt(e){let t=$(e.observation.expiresAtMs);if(t===null||t===0)return Q({source:e.observation.source});let n=Z(e.observation.source);return t<=e.nowMs?{kind:`expired`,...n,expiresAtMs:t,detectedAtMs:e.nowMs}:{kind:`active`,...n,expiresAtMs:t}}function mt(e){let t=$(e.nowMs);if(t===null)return Q({source:e.observation.source});switch(e.observation.kind){case`found`:return pt({observation:e.observation,nowMs:t});case`missing`:return{kind:`missing`,...Z(e.observation.source)};case`unavailable`:return{kind:`unavailable`,...Z(e.observation.source)};case`invalid`:return Q({source:e.observation.source});default:return e.observation}}export{C as _,dt as a,D as c,le as d,ce as f,at as g,A as h,ut as i,fe as l,se as m,ft as n,T as o,M as p,lt as r,E as s,mt as t,de as u,w as v};

package/dist/public/sdk/{commitQueue-C1wkey4q.js → commitQueue-CbyuhEW9.js}

@@ -1 +1 @@
-import{a as e}from"./clientSessionPersistenceState-BxpITYM_.js";async function t(t){return await e({...t,labels:{queue:`threshold Ed25519 commit queue`,queuedOperation:`threshold Ed25519 queued commit`},owner:String(t.nearAccountId)})}export{t};
+import{a as e}from"./clientSessionPersistenceState-B3gU3515.js";async function t(t){return await e({...t,labels:{queue:`threshold Ed25519 commit queue`,queuedOperation:`threshold Ed25519 queued commit`},owner:String(t.nearAccountId)})}export{t};