@seams/wallet 0.6.1 → 0.7.1

package/dist/public/sdk/workers/evm-crypto.worker.js

@@ -674,6 +674,11 @@ Original error: ${initError?.message}
   }
 }
 
+// src/core/signingEngine/workerManager/workerTypes.ts
+var WorkerControlMessage = {
+  WORKER_READY: "WORKER_READY"
+};
+
 // ../../node_modules/base-x/src/esm/index.js
 function base(ALPHABET) {
   if (ALPHABET.length >= 255) {
@@ -855,12 +860,7 @@ var SENSITIVE_ERROR_FIELD_NAMES = [
   "client_nonce_handle_b64u"
 ];
 
-// src/core/signingEngine/workerManager/workerTypes.ts
-var WorkerControlMessage = {
-  WORKER_READY: "WORKER_READY"
-};
-
-// src/core/signingEngine/workerManager/workers/evm-crypto.worker.ts
+// src/core/signingEngine/workerManager/workers/workerErrorPayload.ts
 function asWorkerErrorPayload(err) {
   if (err && typeof err === "object") {
     const message = typeof err.message === "string" ? String(err.message).trim() : "";
@@ -874,6 +874,8 @@ function asWorkerErrorPayload(err) {
   }
   return { message: errorMessage(err) };
 }
+
+// src/core/signingEngine/workerManager/workers/evm-crypto.worker.ts
 function toU8(v) {
   if (v instanceof Uint8Array)
     return v;

package/dist/public/sdk/workers/near-signer.worker.js

@@ -256,7 +256,7 @@ function threshold_ed25519_finalize_delegate_from_signature(args) {
 function __wbg_adapter_52(arg0, arg1, arg2) {
   wasm.closure67_externref_shim(arg0, arg1, arg2);
 }
-function __wbg_adapter_387(arg0, arg1, arg2, arg3) {
+function __wbg_adapter_388(arg0, arg1, arg2, arg3) {
   wasm.closure60_externref_shim(arg0, arg1, arg2, arg3);
 }
 var ConfirmationBehavior = Object.freeze({
@@ -792,7 +792,7 @@ function __wbg_get_imports() {
         const a = state0.a;
         state0.a = 0;
         try {
-          return __wbg_adapter_387(a, state0.b, arg0, arg1);
+          return __wbg_adapter_388(a, state0.b, arg0, arg1);
         } finally {
           state0.a = a;
         }
@@ -993,7 +993,7 @@ function __wbg_get_imports() {
     const ret = false;
     return ret;
   };
-  imports.wbg.__wbindgen_closure_wrapper2623 = function(arg0, arg1, arg2) {
+  imports.wbg.__wbindgen_closure_wrapper2627 = function(arg0, arg1, arg2) {
     const ret = makeMutClosure(arg0, arg1, 68, __wbg_adapter_52);
     return ret;
   };
@@ -1424,7 +1424,7 @@ var wasmUrl = resolveWasmUrl("wasm_signer_worker_bg.wasm", "Signer Worker");
 var wasmInitPromise = null;
 var messageQueue = Promise.resolve();
 var activeRequestId = null;
-function sendProgressMessage2(messageType, messageTypeName, step, stepName, message, data, logs) {
+function sendProgressMessage2(_messageType, messageTypeName, step, stepName, message, data, logs) {
   try {
     const parsedData = typeof data === "string" ? safeJsonParse(data, {}) : data || {};
     const parsedLogs = typeof logs === "string" ? safeJsonParse(logs || "", []) : logs || [];

package/dist/public/sdk/workers/passkey-confirm.worker.js

@@ -144,12 +144,18 @@ var esm_default2 = esm_default(ALPHABET);
 function isObject(x) {
   return x !== null && typeof x === "object";
 }
+function isPlainObject(x) {
+  return isObject(x) && !Array.isArray(x);
+}
 function isString(x) {
   return typeof x === "string";
 }
 function isBoolean(x) {
   return typeof x === "boolean";
 }
+function asRecord(value) {
+  return isPlainObject(value) ? value : null;
+}
 
 // ../shared-ts/src/utils/errors.ts
 function errorMessage(err) {
@@ -501,9 +507,6 @@ function isValidUserConfirmOrigin(messageEvent) {
 
 // src/core/signingEngine/workerManager/workers/passkey-confirm.worker.ts
 globalThis.awaitUserConfirmationV2 = awaitUserConfirmationV2;
-function asRecord(value) {
-  return value && typeof value === "object" && !Array.isArray(value) ? value : null;
-}
 function asIncomingMessage(value) {
   const record = asRecord(value);
   return record ? {

package/dist/public/sdk/workers/passkey-mpc-export.worker.js

@@ -185,6 +185,9 @@ var base58Encode = (data) => {
 function isObject(x) {
   return x !== null && typeof x === "object";
 }
+function isPlainObject(x) {
+  return isObject(x) && !Array.isArray(x);
+}
 function isString(x) {
   return typeof x === "string";
 }
@@ -194,6 +197,11 @@ function isBoolean(x) {
 function isArray(x) {
   return Array.isArray(x);
 }
+function requireRecord(value, label) {
+  if (!isPlainObject(value))
+    throw new Error(`${label} must be an object`);
+  return value;
+}
 
 // ../shared-ts/src/utils/errors.ts
 function errorMessage(err) {
@@ -858,12 +866,6 @@ function thresholdEcdsaChainTargetFromRequest(args) {
 }
 
 // ../shared-ts/src/utils/routerAbNormalSigningIdentity.ts
-function requireRecord(value, label) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    throw new Error(`${label} must be an object`);
-  }
-  return value;
-}
 function requireExactFields(record, expectedFields, label) {
   const actualFields = Object.keys(record).sort();
   const expected = [...expectedFields].sort();
@@ -2345,38 +2347,11 @@ async function __wbg_init(module_or_path) {
   return __wbg_finalize_init(instance, module);
 }
 
-// ../shared-ts/src/utils/routerAbEd25519Yao.ts
-var ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1 = "x-seams-wallet-recovery-challenge-id";
-var ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1 = "/router-ab/ed25519/yao/export/admit";
-var ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1 = "/router-ab/ed25519/yao/export/execute";
-var ED25519_YAO_CONTROL_CIPHERTEXT_MAX_BYTES_V1 = 64 * 1024;
-var REGISTRATION_WORK_KIND = "registration_prepare";
-var REGISTRATION_PRIMITIVE_REQUEST_KIND = "registration";
-var RECOVERY_WORK_KIND = "recovery";
-var RECOVERY_PRIMITIVE_REQUEST_KIND = "recovery";
-var EXPORT_WORK_KIND = "key_export";
-var EXPORT_PRIMITIVE_REQUEST_KIND = "export";
+// ../shared-ts/src/utils/routerAbEd25519YaoDigests.ts
 var EXPORT_CONFIRMATION_DOMAIN = "seams/router-ab/ed25519-yao/export-confirmation/v1";
 var EXPORT_AUTHORIZATION_DOMAIN = "seams/router-ab/ed25519-yao/export-authorization/v1";
 var RUNTIME_POLICY_BINDING_DOMAIN = "seams/router-ab/runtime-policy-binding/v1";
 var UTF8 = new TextEncoder;
-function requireRecord2(value, label) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    throw new Error(`${label} must be an object`);
-  }
-  return value;
-}
-function requireExactKeys(record, label, allowedKeys) {
-  const allowed = new Set(allowedKeys);
-  for (const key of Object.keys(record)) {
-    if (!allowed.has(key))
-      throw new Error(`${label}.${key} is not a supported field`);
-  }
-  for (const key of allowedKeys) {
-    if (!Object.hasOwn(record, key))
-      throw new Error(`${label}.${key} is required`);
-  }
-}
 function requireVisibleIdentifier(value, label) {
   if (typeof value !== "string" || value.length === 0) {
     throw new Error(`${label} must be a non-empty visible ASCII string`);
@@ -2389,18 +2364,6 @@ function requireVisibleIdentifier(value, label) {
   }
   return value;
 }
-function requirePositiveU32(value, label) {
-  if (!Number.isInteger(value) || typeof value !== "number" || value <= 0 || value > 4294967295) {
-    throw new Error(`${label} must be a positive u32`);
-  }
-  return value;
-}
-function requirePositiveSafeInteger(value, label) {
-  if (typeof value !== "number" || !Number.isSafeInteger(value) || value <= 0) {
-    throw new Error(`${label} must be a positive safe integer`);
-  }
-  return value;
-}
 function requireByte(value, label) {
   if (typeof value !== "number" || !Number.isInteger(value) || value < 0 || value > 255) {
     throw new Error(`${label} must be a byte`);
@@ -2541,6 +2504,41 @@ async function deriveRouterAbEd25519YaoExportAuthorizationDigestV1(input) {
   ]);
   return Array.from(await sha256(encoded));
 }
+
+// ../shared-ts/src/utils/routerAbEd25519Yao.ts
+var ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1 = "x-seams-wallet-recovery-challenge-id";
+var ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1 = "/router-ab/ed25519/yao/export/admit";
+var ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1 = "/router-ab/ed25519/yao/export/execute";
+var ED25519_YAO_CONTROL_CIPHERTEXT_MAX_BYTES_V1 = 64 * 1024;
+var REGISTRATION_WORK_KIND = "registration_prepare";
+var REGISTRATION_PRIMITIVE_REQUEST_KIND = "registration";
+var RECOVERY_WORK_KIND = "recovery";
+var RECOVERY_PRIMITIVE_REQUEST_KIND = "recovery";
+var EXPORT_WORK_KIND = "key_export";
+var EXPORT_PRIMITIVE_REQUEST_KIND = "export";
+function requireExactKeys(record, label, allowedKeys) {
+  const allowed = new Set(allowedKeys);
+  for (const key of Object.keys(record)) {
+    if (!allowed.has(key))
+      throw new Error(`${label}.${key} is not a supported field`);
+  }
+  for (const key of allowedKeys) {
+    if (!Object.hasOwn(record, key))
+      throw new Error(`${label}.${key} is required`);
+  }
+}
+function requirePositiveU32(value, label) {
+  if (!Number.isInteger(value) || typeof value !== "number" || value <= 0 || value > 4294967295) {
+    throw new Error(`${label} must be a positive u32`);
+  }
+  return value;
+}
+function requirePositiveSafeInteger(value, label) {
+  if (typeof value !== "number" || !Number.isSafeInteger(value) || value <= 0) {
+    throw new Error(`${label} must be a positive safe integer`);
+  }
+  return value;
+}
 function parseOperation(value, label) {
   switch (value) {
     case "registration":
@@ -2605,7 +2603,7 @@ function parsePrimitiveRequestKind(value, label) {
   }
 }
 function parseRouterAbEd25519YaoApplicationBindingFactsV1(value) {
-  const record = requireRecord2(value, "application_binding");
+  const record = requireRecord(value, "application_binding");
   requireExactKeys(record, "application_binding", [
     "wallet_id",
     "near_ed25519_signing_key_id",
@@ -2620,7 +2618,7 @@ function parseRouterAbEd25519YaoApplicationBindingFactsV1(value) {
   };
 }
 function parsePublicLifecycleScope(value) {
-  const record = requireRecord2(value, "scope");
+  const record = requireRecord(value, "scope");
   requireExactKeys(record, "scope", [
     "lifecycle_id",
     "root_share_epoch",
@@ -2658,7 +2656,7 @@ function parseParticipantIds(value) {
   return [first, second];
 }
 function parseAdmittedLifecycle(value) {
-  const record = requireRecord2(value, "binding.lifecycle");
+  const record = requireRecord(value, "binding.lifecycle");
   requireExactKeys(record, "binding.lifecycle", [
     "lifecycle_id",
     "work_kind",
@@ -2691,7 +2689,7 @@ function parseAdmittedLifecycle(value) {
   return lifecycle;
 }
 function parseCeremonyBinding(value) {
-  const record = requireRecord2(value, "binding");
+  const record = requireRecord(value, "binding");
   requireExactKeys(record, "binding", [
     "lifecycle",
     "operation",
@@ -2743,7 +2741,7 @@ function requireExportCeremonyBinding(value) {
   };
 }
 function parseExportBinding(value) {
-  const record = requireRecord2(value, "export binding");
+  const record = requireRecord(value, "export binding");
   requireExactKeys(record, "export binding", [
     "ceremony",
     "registered_public_key",
@@ -2760,7 +2758,7 @@ function parseExportBinding(value) {
   };
 }
 function parseKeyset(value) {
-  const record = requireRecord2(value, "keyset");
+  const record = requireRecord(value, "keyset");
   requireExactKeys(record, "keyset", [
     "deriver_a_input_public_key",
     "deriver_b_input_public_key",
@@ -2777,7 +2775,7 @@ function parseKeyset(value) {
   return keyset;
 }
 function parseEncryptedInput(value, label) {
-  const record = requireRecord2(value, label);
+  const record = requireRecord(value, label);
   requireExactKeys(record, label, [
     "kind",
     "deriver",
@@ -2819,7 +2817,7 @@ function requireExportInput(binding, input, expectedDeriver, label) {
   };
 }
 function parseEncryptedPackage(value, label) {
-  const record = requireRecord2(value, label);
+  const record = requireRecord(value, label);
   requireExactKeys(record, label, [
     "kind",
     "deriver",
@@ -2862,7 +2860,7 @@ function parseBoundary(parser, value) {
   }
 }
 function parseRegistrationAdmissionRequestValue(value) {
-  const record = requireRecord2(value, "registration admission request");
+  const record = requireRecord(value, "registration admission request");
   requireExactKeys(record, "registration admission request", [
     "scope",
     "application_binding",
@@ -2875,7 +2873,7 @@ function parseRegistrationAdmissionRequestValue(value) {
   };
 }
 function parseExportAuthorization(value) {
-  const record = requireRecord2(value, "export authorization");
+  const record = requireRecord(value, "export authorization");
   requireExactKeys(record, "export authorization", [
     "confirmation_digest",
     "authorization_digest",
@@ -2897,7 +2895,7 @@ function parseExportAuthorization(value) {
   };
 }
 function parseExportAdmissionRequestValue(value) {
-  const record = requireRecord2(value, "export admission request");
+  const record = requireRecord(value, "export admission request");
   requireExactKeys(record, "export admission request", [
     "scope",
     "application_binding",
@@ -2918,7 +2916,7 @@ function parseExportAdmissionRequestValue(value) {
   };
 }
 function parseExportAdmissionReceiptValue(value) {
-  const record = requireRecord2(value, "export admission receipt");
+  const record = requireRecord(value, "export admission receipt");
   requireExactKeys(record, "export admission receipt", ["binding", "keyset"]);
   return {
     binding: parseExportBinding(record.binding),
@@ -2926,7 +2924,7 @@ function parseExportAdmissionReceiptValue(value) {
   };
 }
 function parseExportExecuteRequestValue(value) {
-  const record = requireRecord2(value, "export execute request");
+  const record = requireRecord(value, "export execute request");
   requireExactKeys(record, "export execute request", [
     "binding",
     "deriver_a_input",
@@ -2940,7 +2938,7 @@ function parseExportExecuteRequestValue(value) {
   };
 }
 function parseExportResultValue(value) {
-  const record = requireRecord2(value, "export result");
+  const record = requireRecord(value, "export result");
   requireExactKeys(record, "export result", [
     "binding",
     "transcript",
@@ -3957,41 +3955,6 @@ function parseUnixMs(value, label) {
   }
   return value;
 }
-function requireRecord3(value, label) {
-  if (typeof value !== "object" || value === null || Array.isArray(value)) {
-    throw new Error(`${label} must be an object`);
-  }
-  return value;
-}
-var SECRET_BEARING_FIELD_SUBSTRINGS = [
-  "prf",
-  "kek",
-  "seed",
-  "scalar",
-  "secretkey",
-  "privatekey",
-  "plaintext",
-  "recoverycode",
-  "clientroot",
-  "holdershare"
-];
-function rejectUnknownFields(record, allowed, label, knownOnOtherBranches = []) {
-  const allowedSet = new Set(allowed);
-  const knownSet = new Set(knownOnOtherBranches);
-  for (const field of Object.keys(record)) {
-    if (allowedSet.has(field))
-      continue;
-    if (knownSet.has(field)) {
-      throw new Error(`${label}.${field} is not part of ${label}`);
-    }
-    const normalized = field.toLowerCase().replace(/_/g, "");
-    const namesAPublicKey = normalized.includes("publickey");
-    if (!namesAPublicKey && SECRET_BEARING_FIELD_SUBSTRINGS.some((substring) => normalized.includes(substring))) {
-      throw new Error(`${label}.${field} must never carry plaintext custody material`);
-    }
-    throw new Error(`${label}.${field} is not part of ${label}`);
-  }
-}
 // ../shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.ts
 function isEvmFamilySigningKeySlotIdShape(value) {
   const parts = value.split(":");
@@ -4021,7 +3984,7 @@ function requireEvmFamilySigningKeySlotId(value, label = "evmFamilySigningKeySlo
   throw new Error(`${label} must be an EVM-family signing key slot id`);
 }
 
-// ../shared-ts/src/utils/registrationIntent.ts
+// ../shared-ts/src/utils/registrationIds.ts
 var SERVER_ALLOCATED_WALLET_ADJECTIVES = [
   "alpine",
   "amber",
@@ -4170,6 +4133,37 @@ function parseNearEd25519SigningKeyId(value) {
   return nearEd25519SigningKeyIdFromString(value);
 }
 
+// ../shared-ts/src/utils/exactRecord.ts
+var SECRET_BEARING_FIELD_SUBSTRINGS = [
+  "prf",
+  "kek",
+  "seed",
+  "scalar",
+  "secretkey",
+  "privatekey",
+  "plaintext",
+  "recoverycode",
+  "clientroot",
+  "holdershare"
+];
+function rejectUnknownFields(record, allowed, label, knownOnOtherBranches = []) {
+  const allowedSet = new Set(allowed);
+  const knownSet = new Set(knownOnOtherBranches);
+  for (const field of Object.keys(record)) {
+    if (allowedSet.has(field))
+      continue;
+    if (knownSet.has(field)) {
+      throw new Error(`${label}.${field} is not part of ${label}`);
+    }
+    const normalized = field.toLowerCase().replace(/_/g, "");
+    const namesAPublicKey = normalized.includes("publickey");
+    if (!namesAPublicKey && SECRET_BEARING_FIELD_SUBSTRINGS.some((substring) => normalized.includes(substring))) {
+      throw new Error(`${label}.${field} must never carry plaintext custody material`);
+    }
+    throw new Error(`${label}.${field} is not part of ${label}`);
+  }
+}
+
 // ../shared-ts/src/passkey-custody/custodySecretBinding.ts
 var WALLET_SEED_DERIVATION_SCHEME_V1 = "wallet_seed_parallel_hkdf_sha256_v1";
 function isWalletCustodySeedBinding(binding) {
@@ -4257,7 +4251,7 @@ function requireNonNegativeSafeInteger(value, label) {
   return value;
 }
 function parseEd25519YaoClientRootTargetFactor(value, label) {
-  const record = requireRecord3(value, label);
+  const record = requireRecord(value, label);
   rejectUnknownFields(record, ["kind"], label);
   if (record.kind === "passkey_prf" || record.kind === "email_otp") {
     return { kind: record.kind };
@@ -4288,7 +4282,7 @@ function requireThresholdEcdsaSessionId(value, label) {
   return parsed.value;
 }
 function parsePasskeyCustodySecretBinding(raw, label = "passkeyCustodySecretBinding") {
-  const record = requireRecord3(raw, label);
+  const record = requireRecord(raw, label);
   const kind = requireCustodySecretKind(record.kind, label);
   rejectUnknownFields(record, ALLOWED_FIELDS_BY_KIND[kind], label, ALL_BRANCH_FIELDS);
   switch (kind) {
@@ -4448,7 +4442,7 @@ function buildPasskeyCustodyEnvelopeRecord(args) {
 }
 var ENVELOPE_LIFECYCLE_FIELDS = ["state", "activatedAtMs", "retiredAtMs", "revokedAtMs"];
 function parsePasskeyCustodyEnvelopeLifecycle(raw, label = "lifecycle") {
-  const record = requireRecord3(raw, label);
+  const record = requireRecord(raw, label);
   rejectUnknownFields(record, ENVELOPE_LIFECYCLE_FIELDS, label);
   const activatedAtMs = parseUnixMs(record.activatedAtMs, `${label}.activatedAtMs`);
   switch (record.state) {
@@ -4495,7 +4489,7 @@ function requireNonEmptyString(value, label) {
   return value;
 }
 function parseWalletCustodyEnvelopeFactor(raw, label = "factor") {
-  const record = requireRecord3(raw, label);
+  const record = requireRecord(raw, label);
   switch (record.kind) {
     case "passkey": {
       rejectUnknownFields(record, PASSKEY_FACTOR_FIELDS, label, ALL_FACTOR_FIELDS);
@@ -4546,7 +4540,7 @@ var ENVELOPE_RECORD_FIELDS = [
   "updatedAtMs"
 ];
 function parsePasskeyCustodyEnvelopeRecord(raw, label = "walletCustodyEnvelope") {
-  const record = requireRecord3(raw, label);
+  const record = requireRecord(raw, label);
   if (record.kind !== WALLET_CUSTODY_ENVELOPE_VERSION_V2) {
     throw new Error(`${label}.kind must be ${WALLET_CUSTODY_ENVELOPE_VERSION_V2}`);
   }