@seams/wallet 0.6.0 → 0.6.2

package/dist/{public/sdk/nearEd25519YaoMaterialActivation-4AuGG2DG.js → esm/sdk/nearEd25519YaoMaterialActivation-Cz5UJQ_7.js}

@@ -7,7 +7,7 @@ import { a as thresholdEcdsaChainTargetFromRequest, c as toWalletId, l as wallet
 import { n as SIGNER_AUTH_METHODS, r as SIGNER_KINDS } from "./signerDomain-DDLiwuYS.js";
 import { o as normalizeRuntimePolicyScope } from "./participants-Bcnsa_ip.js";
 import { o as normalizeThresholdRuntimePolicyScope, v as parseWalletAuthorityV1 } from "./sessionPolicy-B4FsPuk2.js";
-import { It as isPasskeyWalletAuthAuthority, On as parseWalletAddAuthMethodRegistrationOptions, R as parseWalletSessionOperationCredentialV1, Y as ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, _t as requireRouterAbEcdsaDerivationNormalSigningStateV1, d as parseActiveWalletSessionV1, dt as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, hn as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, ht as parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, it as parseRouterAbEcdsaDerivationPublicCapabilityV1, mt as parseRouterAbEcdsaRegistrationRequestFactsV1, pt as parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, rt as parseRouterAbEcdsaDerivationNormalSigningStateV1, wn as parseWebAuthnAuthenticatorDeviceInfo, xn as routerAbMpcMaterialActivationRefFromWire, zt as parseWalletAuthAuthority } from "./ecdsaPresignLifecycle-D_KCktCj.js";
+import { It as isPasskeyWalletAuthAuthority, R as parseWalletSessionOperationCredentialV1, Sn as routerAbMpcMaterialActivationRefFromWire, Tn as parseWebAuthnAuthenticatorDeviceInfo, Y as ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, _t as requireRouterAbEcdsaDerivationNormalSigningStateV1, d as parseActiveWalletSessionV1, dt as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, hn as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, ht as parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, it as parseRouterAbEcdsaDerivationPublicCapabilityV1, kn as parseWalletAddAuthMethodRegistrationOptions, mt as parseRouterAbEcdsaRegistrationRequestFactsV1, pt as parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, rt as parseRouterAbEcdsaDerivationNormalSigningStateV1, zt as parseWalletAuthAuthority } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
 import { d as parseMpcWalletSigningQuotaId, g as parseWalletSessionMintId, h as parseWalletSessionId, m as parseWalletSessionAuthorizationId } from "./capabilityKinds-jwCEaqBU.js";
 import { Q as parseThresholdEcdsaKeyHandle, S as toThresholdEcdsaPublicKeyB64u, a as buildEvmFamilyEcdsaWalletKey, g as resolveThresholdEcdsaKeyIdFromRecord, h as parseThresholdSigningRootBinding, y as toEvmFamilyEcdsaKeyHandle } from "./evmFamilyEcdsaIdentity-_kuKSW35.js";
 import { d as parsePasskeyCustodyEnvelopeRecord, t as parseWalletCustodyRegistrationOutcome } from "./passkey-custody-BaHyYMhj.js";
@@ -3332,6 +3332,31 @@ async function activateWalletRegistration(args) {
 		onServerTiming: args.onServerTiming
 	}));
 }
+function parseWalletRegistrationSessionSealResponse(value) {
+	const responseName = "Wallet registration session seal";
+	const record = requireWalletRegistrationResponseObject({
+		responseName,
+		field: "body",
+		value
+	});
+	assertWalletRegistrationResponseKeys(record, [
+		"ciphertext",
+		"keyVersion",
+		"expiresAtMs",
+		"remainingUses"
+	], responseName);
+	const ciphertext = readWalletRegistrationResponseField(record, "ciphertext", responseName);
+	const keyVersion = readWalletRegistrationResponseField(record, "keyVersion", responseName);
+	const expiresAtMs = readWalletRegistrationResponseField(record, "expiresAtMs", responseName);
+	const remainingUses = readWalletRegistrationResponseField(record, "remainingUses", responseName);
+	if (typeof ciphertext !== "string" || !ciphertext.trim() || typeof keyVersion !== "string" || !keyVersion.trim() || typeof expiresAtMs !== "number" || !Number.isSafeInteger(expiresAtMs) || expiresAtMs <= 0 || typeof remainingUses !== "number" || !Number.isSafeInteger(remainingUses) || remainingUses < 0) throw new Error(`${responseName} is invalid`);
+	return {
+		ciphertext,
+		keyVersion,
+		expiresAtMs,
+		remainingUses
+	};
+}
 function parseWalletRegistrationNearProvisioningResponseV2(value) {
 	const responseName = "Wallet registration NEAR provisioning";
 	const record = requireWalletRegistrationResponseObject({
@@ -3388,7 +3413,8 @@ function parseWalletRegistrationNearProvisioningResponseV2(value) {
 		"ed25519",
 		"authorityScope",
 		"nearProvisioning",
-		"registrationEstablishedSession"
+		"registrationEstablishedSession",
+		"sessionSeal"
 	], responseName);
 	const provisioning = requireWalletRegistrationResponseObject({
 		responseName,
@@ -3402,10 +3428,25 @@ function parseWalletRegistrationNearProvisioningResponseV2(value) {
 		expectedKind: "near_ed25519"
 	});
 	if (!finalized.ok || finalized.kind !== "near_ed25519") throw new Error(`${responseName} did not return a finalized Ed25519 wallet`);
-	return {
+	const sessionSeal = readOptionalWalletRegistrationResponseField(record, "sessionSeal", responseName);
+	const registrationEstablishedSession = parseRegistrationEstablishedSessionResult(readWalletRegistrationResponseField(record, "registrationEstablishedSession", responseName), finalized.walletId);
+	if (isEmailOtpWalletRegistrationFinalizeResponse(finalized)) {
+		if (sessionSeal !== void 0) throw new Error(`${responseName} returned a session seal for an Email OTP authority`);
+		return {
+			...finalized,
+			nearProvisioning: { status: "near_ready" },
+			registrationEstablishedSession
+		};
+	}
+	const success = {
 		...finalized,
 		nearProvisioning: { status: "near_ready" },
-		registrationEstablishedSession: parseRegistrationEstablishedSessionResult(readWalletRegistrationResponseField(record, "registrationEstablishedSession", responseName), finalized.walletId)
+		registrationEstablishedSession
+	};
+	if (sessionSeal === void 0) return success;
+	return {
+		...success,
+		sessionSeal: parseWalletRegistrationSessionSealResponse(sessionSeal)
 	};
 }
 async function completeWalletRegistrationNearProvisioning(args) {
@@ -3417,6 +3458,7 @@ async function completeWalletRegistrationNearProvisioning(args) {
 	};
 	if (args.auth.kind === "email_otp") body.emailOtpEnrollment = args.auth.enrollment;
 	if (args.walletCustodyCommit) body.walletCustodyCommit = args.walletCustodyCommit;
+	if (args.sessionSeal) body.sessionSeal = args.sessionSeal;
 	return parseWalletRegistrationNearProvisioningResponseV2(await postJson({
 		relayerUrl: args.relayerUrl,
 		path: WALLET_REGISTRATION_NEAR_PROVISIONING_PATH,

package/dist/esm/sdk/{nearEd25519YaoSigningPreparation-jiGcQylO.js → nearEd25519YaoSigningPreparation-DX6xG-IW.js}

@@ -1,6 +1,6 @@
 import { p as mpcMaterialActivationRefsEqual } from "./normalize-BephcEIF.js";
 import { l as activeWalletSessionV1RecordsEqual } from "./device-linking-DpVGjSeq.js";
-import { At as buildEmailOtpWalletAuthAuthority, Ht as walletAuthAuthorityRef, Mt as emailOtpWalletAuthAuthorityEmailHashHex, Nt as emailOtpWalletAuthAuthorityProvider, Pt as emailOtpWalletAuthAuthorityProviderUserId } from "./ecdsaPresignLifecycle-D_KCktCj.js";
+import { At as buildEmailOtpWalletAuthAuthority, Ht as walletAuthAuthorityRef, Mt as emailOtpWalletAuthAuthorityEmailHashHex, Nt as emailOtpWalletAuthAuthorityProvider, Pt as emailOtpWalletAuthAuthorityProviderUserId } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
 import { E as SigningSessionIds, I as exactEd25519SigningLaneIdentity, M as buildEvmFamilyEcdsaSignerBinding, N as exactEcdsaSigningLaneIdentity, U as nearEd25519SignerBindingFromBoundaryFields, j as signingLaneAuthMethod, y as toEvmFamilyEcdsaKeyHandle } from "./evmFamilyEcdsaIdentity-_kuKSW35.js";
 import { t as parseSignerSlot } from "./signerSlot-DbNAs-kc.js";
 function emailOtpAuthContextProviderUserId(context) {

package/dist/esm/sdk/{prfCache-Dwwauj4v.js → prfCache-CgAr-VEU.js}

@@ -15,23 +15,43 @@ function normalizeSigningSessionCacheEntry(args) {
 	if (!thresholdSessionId || !prfFirstB64u) throw new Error("Missing thresholdSessionId or prfFirstB64u for signing session hydration");
 	if (!Number.isFinite(expiresAtMsRaw) || expiresAtMsRaw <= 0) throw new Error("Invalid expiresAtMs for signing session hydration");
 	if (remainingUses == null) throw new Error("Invalid remainingUses for signing session hydration");
-	return {
+	const normalized = {
 		thresholdSessionId,
 		prfFirstB64u,
 		expiresAtMs: Math.floor(expiresAtMsRaw),
 		remainingUses,
+		...args.diagnostics ? { diagnostics: args.diagnostics } : {}
+	};
+	if (args.preparedServerSeal) return {
+		...normalized,
+		transport: args.transport,
+		preparedServerSeal: args.preparedServerSeal
+	};
+	return {
+		...normalized,
 		...args.transport ? { transport: args.transport } : {}
 	};
 }
 async function cacheCredentialBoundarySetupExportPrfFirst(writer, args) {
 	const normalized = normalizeSigningSessionCacheEntry(args);
-	await writer.putWarmSessionMaterial({
+	const material = {
 		thresholdSessionId: normalized.thresholdSessionId,
 		prfFirstB64u: normalized.prfFirstB64u,
 		expiresAtMs: normalized.expiresAtMs,
 		remainingUses: normalized.remainingUses,
-		...args.transport ? { transport: args.transport } : {},
-		...args.diagnostics ? { diagnostics: args.diagnostics } : {}
+		...normalized.diagnostics ? { diagnostics: normalized.diagnostics } : {}
+	};
+	if (normalized.preparedServerSeal) {
+		await writer.putWarmSessionMaterial({
+			...material,
+			transport: normalized.transport,
+			preparedServerSeal: normalized.preparedServerSeal
+		});
+		return;
+	}
+	await writer.putWarmSessionMaterial({
+		...material,
+		...normalized.transport ? { transport: normalized.transport } : {}
 	});
 }
 //#endregion

package/dist/{public/sdk/recovery-entrypoint-CFTX6PFZ.js → esm/sdk/recovery-entrypoint-D39R1avB.js}

@@ -9,14 +9,14 @@ import "./signerDomain-DDLiwuYS.js";
 import { f as parseRecoveryCodeReservationId, m as decodeEmailOtpRecoveryKey } from "./wallet-recovery-CKqoHbxT.js";
 import "./participants-Bcnsa_ip.js";
 import "./sessionPolicy-B4FsPuk2.js";
-import "./ecdsaPresignLifecycle-D_KCktCj.js";
+import "./ecdsaPresignLifecycle-CnSnzoRJ.js";
 import "./capabilityKinds-jwCEaqBU.js";
 import "./evmFamilyEcdsaIdentity-_kuKSW35.js";
 import { a as buildEmailOtpEnvelopeFactor, c as buildPasskeyEnvelopeFactor } from "./passkey-custody-BaHyYMhj.js";
-import { s as IndexedDBManager } from "./ed25519SeedMaterial-0VmS6K9P.js";
+import { s as IndexedDBManager } from "./ed25519SeedMaterial-Cghz8-XB.js";
 import "./keccak-DY5wDsym.js";
 import "./signingSessionSeal-CdtgXHSL.js";
-import { a as finalizeWalletRecoveryGoogleEmailOtp, c as isDurablePasskeyPayload, d as prepareWalletRecoveryWithCode, l as finalizeWalletRecovery, n as promoteWalletRecoveryCommit, o as verifyWalletRecoveryEmailOtp, r as restoreAndPublishWalletRecoveryCommit, s as verifyWalletRecoveryGoogle, t as createAwaitingWalletRecoveryCommit, u as buildWalletRecoveryCeremonyCustodyJson } from "./walletRecoveryCommit-DNvzgeIX.js";
+import { a as finalizeWalletRecoveryGoogleEmailOtp, c as isDurablePasskeyPayload, d as prepareWalletRecoveryWithCode, l as finalizeWalletRecovery, n as promoteWalletRecoveryCommit, o as verifyWalletRecoveryEmailOtp, r as restoreAndPublishWalletRecoveryCommit, s as verifyWalletRecoveryGoogle, t as createAwaitingWalletRecoveryCommit, u as buildWalletRecoveryCeremonyCustodyJson } from "./walletRecoveryCommit-G6w6N5RV.js";
 //#region src/SeamsWeb/operations/recovery/walletRecovery.ts
 const RECOVERY_PREPARE_RETRY_TTL_MS = 300 * 1e3;
 function assertNever(value) {

package/dist/{public/sdk/registration-CuP1WmQu.js → esm/sdk/registration-DtDICj-o.js}

@@ -2,7 +2,7 @@ import { n as __exportAll } from "./chunk-BtrIJ4_z.js";
 import { o as toError } from "./errors-93h9uAW9.js";
 import { c as serializeRegistrationCredentialWithPRF, r as isSerializedRegistrationCredential } from "./helpers-DpRjHMBx.js";
 import { t as webAuthnPromptCoordinator } from "./webauthnPromptCoordinator-CLeba8ru.js";
-import { D as getWalletId, S as getNearAccountId, f as ERROR_MESSAGES, m as isUserCancelledUserConfirm, n as createConfirmTxFlowAdapters, t as createConfirmSession, x as getIntentDigest } from "./adapters-Dgy69gf0.js";
+import { D as getWalletId, S as getNearAccountId, f as ERROR_MESSAGES, m as isUserCancelledUserConfirm, n as createConfirmTxFlowAdapters, t as createConfirmSession, x as getIntentDigest } from "./adapters-m94YFj70.js";
 import { a as sha256Base64UrlUtf8 } from "./intentDigest-A1MbbJPu.js";
 //#region src/core/signingEngine/uiConfirm/handlers/flows/registration.ts
 var registration_exports = /* @__PURE__ */ __exportAll({ handleRegistrationFlow: () => handleRegistrationFlow });