@seams/wallet 0.6.0 → 0.6.1

package/dist/{public/sdk/nearEd25519YaoMaterialActivation-4AuGG2DG.js → esm/sdk/nearEd25519YaoMaterialActivation-BLxVE6E5.js}

@@ -7,7 +7,7 @@ import { a as thresholdEcdsaChainTargetFromRequest, c as toWalletId, l as wallet
 import { n as SIGNER_AUTH_METHODS, r as SIGNER_KINDS } from "./signerDomain-DDLiwuYS.js";
 import { o as normalizeRuntimePolicyScope } from "./participants-Bcnsa_ip.js";
 import { o as normalizeThresholdRuntimePolicyScope, v as parseWalletAuthorityV1 } from "./sessionPolicy-B4FsPuk2.js";
-import { It as isPasskeyWalletAuthAuthority, On as parseWalletAddAuthMethodRegistrationOptions, R as parseWalletSessionOperationCredentialV1, Y as ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, _t as requireRouterAbEcdsaDerivationNormalSigningStateV1, d as parseActiveWalletSessionV1, dt as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, hn as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, ht as parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, it as parseRouterAbEcdsaDerivationPublicCapabilityV1, mt as parseRouterAbEcdsaRegistrationRequestFactsV1, pt as parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, rt as parseRouterAbEcdsaDerivationNormalSigningStateV1, wn as parseWebAuthnAuthenticatorDeviceInfo, xn as routerAbMpcMaterialActivationRefFromWire, zt as parseWalletAuthAuthority } from "./ecdsaPresignLifecycle-D_KCktCj.js";
+import { It as isPasskeyWalletAuthAuthority, R as parseWalletSessionOperationCredentialV1, Sn as routerAbMpcMaterialActivationRefFromWire, Tn as parseWebAuthnAuthenticatorDeviceInfo, Y as ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, _t as requireRouterAbEcdsaDerivationNormalSigningStateV1, d as parseActiveWalletSessionV1, dt as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, hn as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, ht as parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, it as parseRouterAbEcdsaDerivationPublicCapabilityV1, kn as parseWalletAddAuthMethodRegistrationOptions, mt as parseRouterAbEcdsaRegistrationRequestFactsV1, pt as parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, rt as parseRouterAbEcdsaDerivationNormalSigningStateV1, zt as parseWalletAuthAuthority } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
 import { d as parseMpcWalletSigningQuotaId, g as parseWalletSessionMintId, h as parseWalletSessionId, m as parseWalletSessionAuthorizationId } from "./capabilityKinds-jwCEaqBU.js";
 import { Q as parseThresholdEcdsaKeyHandle, S as toThresholdEcdsaPublicKeyB64u, a as buildEvmFamilyEcdsaWalletKey, g as resolveThresholdEcdsaKeyIdFromRecord, h as parseThresholdSigningRootBinding, y as toEvmFamilyEcdsaKeyHandle } from "./evmFamilyEcdsaIdentity-_kuKSW35.js";
 import { d as parsePasskeyCustodyEnvelopeRecord, t as parseWalletCustodyRegistrationOutcome } from "./passkey-custody-BaHyYMhj.js";
@@ -1423,6 +1423,7 @@ const ROUTE_PAYLOAD_BREAKDOWN_MAX_DEPTH = 2;
 const ROUTE_PAYLOAD_BREAKDOWN_MAX_FIELDS = 64;
 const WALLET_REGISTRATION_SETUP_PATH = "/wallets/register/setup";
 const WALLET_REGISTRATION_RESPOND_PATH = "/wallets/register/respond";
+const WALLET_REGISTRATION_NEAR_ADMISSION_PATH = "/wallets/register/near-admission";
 const WALLET_REGISTRATION_ACTIVATE_PATH = "/wallets/register/activate";
 const WALLET_REGISTRATION_NEAR_PROVISIONING_PATH = "/wallets/register/near-provisioning";
 /** Managed environment id header for Router API `api_credentials` auth. */
@@ -3125,6 +3126,47 @@ async function respondWalletRegistration(args) {
 		onServerTiming: args.onServerTiming
 	}));
 }
+async function authorizeWalletRegistrationNearAdmission(args) {
+	const body = {
+		registrationCeremonyId: args.registrationCeremonyId,
+		signedSetup: args.signedSetup
+	};
+	switch (args.kind) {
+		case "passkey":
+			body.webauthn_registration = args.webauthnRegistration;
+			break;
+		case "email_otp":
+			body.emailOtpRegistrationProof = args.emailOtpRegistrationProof;
+			break;
+	}
+	const response = await postJson({
+		relayerUrl: args.relayerUrl,
+		path: WALLET_REGISTRATION_NEAR_ADMISSION_PATH,
+		headers: args.headers,
+		body
+	});
+	const responseName = "Wallet registration NEAR admission";
+	const record = requireWalletRegistrationResponseObject({
+		responseName,
+		field: "body",
+		value: response
+	});
+	assertWalletRegistrationResponseKeys(record, [
+		"ok",
+		"registrationCeremonyId",
+		"ed25519"
+	], responseName);
+	if (readWalletRegistrationResponseField(record, "ok", responseName) !== true) throw new Error(`${responseName} response is not successful`);
+	return {
+		ok: true,
+		registrationCeremonyId: requireResponseString({
+			responseName,
+			field: "registrationCeremonyId",
+			value: readWalletRegistrationResponseField(record, "registrationCeremonyId", responseName)
+		}),
+		ed25519: parseWalletRegistrationRespondEd25519DeferredWork(readWalletRegistrationResponseField(record, "ed25519", responseName))
+	};
+}
 function parseRegistrationEstablishedSessionResult(value, expectedWalletId) {
 	const responseName = "Wallet registration established session";
 	const parsed = parseRegistrationEstablishedSessionResultV2(value);
@@ -3332,6 +3374,31 @@ async function activateWalletRegistration(args) {
 		onServerTiming: args.onServerTiming
 	}));
 }
+function parseWalletRegistrationSessionSealResponse(value) {
+	const responseName = "Wallet registration session seal";
+	const record = requireWalletRegistrationResponseObject({
+		responseName,
+		field: "body",
+		value
+	});
+	assertWalletRegistrationResponseKeys(record, [
+		"ciphertext",
+		"keyVersion",
+		"expiresAtMs",
+		"remainingUses"
+	], responseName);
+	const ciphertext = readWalletRegistrationResponseField(record, "ciphertext", responseName);
+	const keyVersion = readWalletRegistrationResponseField(record, "keyVersion", responseName);
+	const expiresAtMs = readWalletRegistrationResponseField(record, "expiresAtMs", responseName);
+	const remainingUses = readWalletRegistrationResponseField(record, "remainingUses", responseName);
+	if (typeof ciphertext !== "string" || !ciphertext.trim() || typeof keyVersion !== "string" || !keyVersion.trim() || typeof expiresAtMs !== "number" || !Number.isSafeInteger(expiresAtMs) || expiresAtMs <= 0 || typeof remainingUses !== "number" || !Number.isSafeInteger(remainingUses) || remainingUses < 0) throw new Error(`${responseName} is invalid`);
+	return {
+		ciphertext,
+		keyVersion,
+		expiresAtMs,
+		remainingUses
+	};
+}
 function parseWalletRegistrationNearProvisioningResponseV2(value) {
 	const responseName = "Wallet registration NEAR provisioning";
 	const record = requireWalletRegistrationResponseObject({
@@ -3388,7 +3455,8 @@ function parseWalletRegistrationNearProvisioningResponseV2(value) {
 		"ed25519",
 		"authorityScope",
 		"nearProvisioning",
-		"registrationEstablishedSession"
+		"registrationEstablishedSession",
+		"sessionSeal"
 	], responseName);
 	const provisioning = requireWalletRegistrationResponseObject({
 		responseName,
@@ -3402,10 +3470,25 @@ function parseWalletRegistrationNearProvisioningResponseV2(value) {
 		expectedKind: "near_ed25519"
 	});
 	if (!finalized.ok || finalized.kind !== "near_ed25519") throw new Error(`${responseName} did not return a finalized Ed25519 wallet`);
-	return {
+	const sessionSeal = readOptionalWalletRegistrationResponseField(record, "sessionSeal", responseName);
+	const registrationEstablishedSession = parseRegistrationEstablishedSessionResult(readWalletRegistrationResponseField(record, "registrationEstablishedSession", responseName), finalized.walletId);
+	if (isEmailOtpWalletRegistrationFinalizeResponse(finalized)) {
+		if (sessionSeal !== void 0) throw new Error(`${responseName} returned a session seal for an Email OTP authority`);
+		return {
+			...finalized,
+			nearProvisioning: { status: "near_ready" },
+			registrationEstablishedSession
+		};
+	}
+	const success = {
 		...finalized,
 		nearProvisioning: { status: "near_ready" },
-		registrationEstablishedSession: parseRegistrationEstablishedSessionResult(readWalletRegistrationResponseField(record, "registrationEstablishedSession", responseName), finalized.walletId)
+		registrationEstablishedSession
+	};
+	if (sessionSeal === void 0) return success;
+	return {
+		...success,
+		sessionSeal: parseWalletRegistrationSessionSealResponse(sessionSeal)
 	};
 }
 async function completeWalletRegistrationNearProvisioning(args) {
@@ -3417,6 +3500,7 @@ async function completeWalletRegistrationNearProvisioning(args) {
 	};
 	if (args.auth.kind === "email_otp") body.emailOtpEnrollment = args.auth.enrollment;
 	if (args.walletCustodyCommit) body.walletCustodyCommit = args.walletCustodyCommit;
+	if (args.sessionSeal) body.sessionSeal = args.sessionSeal;
 	return parseWalletRegistrationNearProvisioningResponseV2(await postJson({
 		relayerUrl: args.relayerUrl,
 		path: WALLET_REGISTRATION_NEAR_PROVISIONING_PATH,
@@ -3946,4 +4030,4 @@ function resolveNearEd25519YaoCapabilityHydrationV1(input) {
 	throw new Error("Unsupported Near Ed25519 unlock-source observation");
 }
 //#endregion
-export { parseProfileContinuityEcdsaWarmKey as A, respondWalletAddSignerEcdsa as C, startWalletAddAuthMethod as D, setupWalletRegistration as E, startWalletAddSigner as O, requestAddAuthMethodEmailOtpChallenge as S, revokeWalletAuthMethod as T, finalizeWalletAddAuthMethod as _, buildRehydrateMaterialActivationHydrationPlan as a, isEmailOtpWalletRegistrationFinalizeResponse as b, parseWalletUnlockAlreadyCommittedResponseV1 as c, activateWalletRegistration as d, completeWalletRegistrationNearProvisioning as f, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn as g, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential as h, buildBlockedMpcCapabilityHydrationPlan as i, activateRouterAbEcdsaPostRegistrationSession as k, computeWalletCustodyAdminChallengeDigest as l, createWalletAddSignerIntent as m, nearEd25519YaoRuntimeRef as n, buildUseLiveRuntimeHydrationPlan as o, createWalletAddAuthMethodIntent as p, resolveNearEd25519YaoCapabilityHydrationV1 as r, parseWalletSessionAlreadyCommittedResponseV1 as s, nearEd25519YaoMaterialActivationFromMetadata as t, activateWalletAddSignerEcdsa as u, finalizeWalletAddSigner as v, respondWalletRegistration as w, parseWalletRegistrationEcdsaDerivationRespond as x, fundImplicitNearAccountForTesting as y };
+export { activateRouterAbEcdsaPostRegistrationSession as A, requestAddAuthMethodEmailOtpChallenge as C, setupWalletRegistration as D, revokeWalletAuthMethod as E, startWalletAddAuthMethod as O, parseWalletRegistrationEcdsaDerivationRespond as S, respondWalletRegistration as T, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn as _, buildRehydrateMaterialActivationHydrationPlan as a, fundImplicitNearAccountForTesting as b, parseWalletUnlockAlreadyCommittedResponseV1 as c, activateWalletRegistration as d, authorizeWalletRegistrationNearAdmission as f, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential as g, createWalletAddSignerIntent as h, buildBlockedMpcCapabilityHydrationPlan as i, parseProfileContinuityEcdsaWarmKey as j, startWalletAddSigner as k, computeWalletCustodyAdminChallengeDigest as l, createWalletAddAuthMethodIntent as m, nearEd25519YaoRuntimeRef as n, buildUseLiveRuntimeHydrationPlan as o, completeWalletRegistrationNearProvisioning as p, resolveNearEd25519YaoCapabilityHydrationV1 as r, parseWalletSessionAlreadyCommittedResponseV1 as s, nearEd25519YaoMaterialActivationFromMetadata as t, activateWalletAddSignerEcdsa as u, finalizeWalletAddAuthMethod as v, respondWalletAddSignerEcdsa as w, isEmailOtpWalletRegistrationFinalizeResponse as x, finalizeWalletAddSigner as y };

package/dist/esm/sdk/{nearEd25519YaoSigningPreparation-jiGcQylO.js → nearEd25519YaoSigningPreparation-DX6xG-IW.js}

@@ -1,6 +1,6 @@
 import { p as mpcMaterialActivationRefsEqual } from "./normalize-BephcEIF.js";
 import { l as activeWalletSessionV1RecordsEqual } from "./device-linking-DpVGjSeq.js";
-import { At as buildEmailOtpWalletAuthAuthority, Ht as walletAuthAuthorityRef, Mt as emailOtpWalletAuthAuthorityEmailHashHex, Nt as emailOtpWalletAuthAuthorityProvider, Pt as emailOtpWalletAuthAuthorityProviderUserId } from "./ecdsaPresignLifecycle-D_KCktCj.js";
+import { At as buildEmailOtpWalletAuthAuthority, Ht as walletAuthAuthorityRef, Mt as emailOtpWalletAuthAuthorityEmailHashHex, Nt as emailOtpWalletAuthAuthorityProvider, Pt as emailOtpWalletAuthAuthorityProviderUserId } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
 import { E as SigningSessionIds, I as exactEd25519SigningLaneIdentity, M as buildEvmFamilyEcdsaSignerBinding, N as exactEcdsaSigningLaneIdentity, U as nearEd25519SignerBindingFromBoundaryFields, j as signingLaneAuthMethod, y as toEvmFamilyEcdsaKeyHandle } from "./evmFamilyEcdsaIdentity-_kuKSW35.js";
 import { t as parseSignerSlot } from "./signerSlot-DbNAs-kc.js";
 function emailOtpAuthContextProviderUserId(context) {

package/dist/esm/sdk/{prfCache-Dwwauj4v.js → prfCache-CgAr-VEU.js}

@@ -15,23 +15,43 @@ function normalizeSigningSessionCacheEntry(args) {
 	if (!thresholdSessionId || !prfFirstB64u) throw new Error("Missing thresholdSessionId or prfFirstB64u for signing session hydration");
 	if (!Number.isFinite(expiresAtMsRaw) || expiresAtMsRaw <= 0) throw new Error("Invalid expiresAtMs for signing session hydration");
 	if (remainingUses == null) throw new Error("Invalid remainingUses for signing session hydration");
-	return {
+	const normalized = {
 		thresholdSessionId,
 		prfFirstB64u,
 		expiresAtMs: Math.floor(expiresAtMsRaw),
 		remainingUses,
+		...args.diagnostics ? { diagnostics: args.diagnostics } : {}
+	};
+	if (args.preparedServerSeal) return {
+		...normalized,
+		transport: args.transport,
+		preparedServerSeal: args.preparedServerSeal
+	};
+	return {
+		...normalized,
 		...args.transport ? { transport: args.transport } : {}
 	};
 }
 async function cacheCredentialBoundarySetupExportPrfFirst(writer, args) {
 	const normalized = normalizeSigningSessionCacheEntry(args);
-	await writer.putWarmSessionMaterial({
+	const material = {
 		thresholdSessionId: normalized.thresholdSessionId,
 		prfFirstB64u: normalized.prfFirstB64u,
 		expiresAtMs: normalized.expiresAtMs,
 		remainingUses: normalized.remainingUses,
-		...args.transport ? { transport: args.transport } : {},
-		...args.diagnostics ? { diagnostics: args.diagnostics } : {}
+		...normalized.diagnostics ? { diagnostics: normalized.diagnostics } : {}
+	};
+	if (normalized.preparedServerSeal) {
+		await writer.putWarmSessionMaterial({
+			...material,
+			transport: normalized.transport,
+			preparedServerSeal: normalized.preparedServerSeal
+		});
+		return;
+	}
+	await writer.putWarmSessionMaterial({
+		...material,
+		...normalized.transport ? { transport: normalized.transport } : {}
 	});
 }
 //#endregion

package/dist/{public/sdk/recovery-entrypoint-CFTX6PFZ.js → esm/sdk/recovery-entrypoint-D39R1avB.js}

@@ -9,14 +9,14 @@ import "./signerDomain-DDLiwuYS.js";
 import { f as parseRecoveryCodeReservationId, m as decodeEmailOtpRecoveryKey } from "./wallet-recovery-CKqoHbxT.js";
 import "./participants-Bcnsa_ip.js";
 import "./sessionPolicy-B4FsPuk2.js";
-import "./ecdsaPresignLifecycle-D_KCktCj.js";
+import "./ecdsaPresignLifecycle-CnSnzoRJ.js";
 import "./capabilityKinds-jwCEaqBU.js";
 import "./evmFamilyEcdsaIdentity-_kuKSW35.js";
 import { a as buildEmailOtpEnvelopeFactor, c as buildPasskeyEnvelopeFactor } from "./passkey-custody-BaHyYMhj.js";
-import { s as IndexedDBManager } from "./ed25519SeedMaterial-0VmS6K9P.js";
+import { s as IndexedDBManager } from "./ed25519SeedMaterial-Cghz8-XB.js";
 import "./keccak-DY5wDsym.js";
 import "./signingSessionSeal-CdtgXHSL.js";
-import { a as finalizeWalletRecoveryGoogleEmailOtp, c as isDurablePasskeyPayload, d as prepareWalletRecoveryWithCode, l as finalizeWalletRecovery, n as promoteWalletRecoveryCommit, o as verifyWalletRecoveryEmailOtp, r as restoreAndPublishWalletRecoveryCommit, s as verifyWalletRecoveryGoogle, t as createAwaitingWalletRecoveryCommit, u as buildWalletRecoveryCeremonyCustodyJson } from "./walletRecoveryCommit-DNvzgeIX.js";
+import { a as finalizeWalletRecoveryGoogleEmailOtp, c as isDurablePasskeyPayload, d as prepareWalletRecoveryWithCode, l as finalizeWalletRecovery, n as promoteWalletRecoveryCommit, o as verifyWalletRecoveryEmailOtp, r as restoreAndPublishWalletRecoveryCommit, s as verifyWalletRecoveryGoogle, t as createAwaitingWalletRecoveryCommit, u as buildWalletRecoveryCeremonyCustodyJson } from "./walletRecoveryCommit-G6w6N5RV.js";
 //#region src/SeamsWeb/operations/recovery/walletRecovery.ts
 const RECOVERY_PREPARE_RETRY_TTL_MS = 300 * 1e3;
 function assertNever(value) {

package/dist/{public/sdk/registration-CuP1WmQu.js → esm/sdk/registration-BtPLgKHk.js}

@@ -2,7 +2,7 @@ import { n as __exportAll } from "./chunk-BtrIJ4_z.js";
 import { o as toError } from "./errors-93h9uAW9.js";
 import { c as serializeRegistrationCredentialWithPRF, r as isSerializedRegistrationCredential } from "./helpers-DpRjHMBx.js";
 import { t as webAuthnPromptCoordinator } from "./webauthnPromptCoordinator-CLeba8ru.js";
-import { D as getWalletId, S as getNearAccountId, f as ERROR_MESSAGES, m as isUserCancelledUserConfirm, n as createConfirmTxFlowAdapters, t as createConfirmSession, x as getIntentDigest } from "./adapters-Dgy69gf0.js";
+import { D as getWalletId, S as getNearAccountId, f as ERROR_MESSAGES, m as isUserCancelledUserConfirm, n as createConfirmTxFlowAdapters, t as createConfirmSession, x as getIntentDigest } from "./adapters-LgE4nnos.js";
 import { a as sha256Base64UrlUtf8 } from "./intentDigest-A1MbbJPu.js";
 //#region src/core/signingEngine/uiConfirm/handlers/flows/registration.ts
 var registration_exports = /* @__PURE__ */ __exportAll({ handleRegistrationFlow: () => handleRegistrationFlow });