@seams/wallet 0.6.2 → 0.7.3

package/dist/esm/sdk/signer-worker-DYRteieu.js

@@ -1,48 +0,0 @@
-//#region src/core/types/signer-worker.ts
-let WorkerRequestType = /* @__PURE__ */ function(WorkerRequestType) {
-	WorkerRequestType[WorkerRequestType["SignTransactionsWithActions"] = 0] = "SignTransactionsWithActions";
-	WorkerRequestType[WorkerRequestType["SignNep413Message"] = 1] = "SignNep413Message";
-	WorkerRequestType[WorkerRequestType["SignDelegateAction"] = 2] = "SignDelegateAction";
-	WorkerRequestType[WorkerRequestType["DeriveThresholdEd25519ClientVerifyingShare"] = 3] = "DeriveThresholdEd25519ClientVerifyingShare";
-	return WorkerRequestType;
-}({});
-let WorkerResponseType = /* @__PURE__ */ function(WorkerResponseType) {
-	WorkerResponseType[WorkerResponseType["SignTransactionsWithActionsSuccess"] = 0] = "SignTransactionsWithActionsSuccess";
-	WorkerResponseType[WorkerResponseType["SignNep413MessageSuccess"] = 1] = "SignNep413MessageSuccess";
-	WorkerResponseType[WorkerResponseType["SignDelegateActionSuccess"] = 2] = "SignDelegateActionSuccess";
-	WorkerResponseType[WorkerResponseType["SignTransactionsWithActionsFailure"] = 3] = "SignTransactionsWithActionsFailure";
-	WorkerResponseType[WorkerResponseType["SignNep413MessageFailure"] = 4] = "SignNep413MessageFailure";
-	WorkerResponseType[WorkerResponseType["SignDelegateActionFailure"] = 5] = "SignDelegateActionFailure";
-	WorkerResponseType[WorkerResponseType["RegistrationProgress"] = 6] = "RegistrationProgress";
-	WorkerResponseType[WorkerResponseType["RegistrationComplete"] = 7] = "RegistrationComplete";
-	WorkerResponseType[WorkerResponseType["ExecuteActionsProgress"] = 8] = "ExecuteActionsProgress";
-	WorkerResponseType[WorkerResponseType["ExecuteActionsComplete"] = 9] = "ExecuteActionsComplete";
-	WorkerResponseType[WorkerResponseType["DeriveThresholdEd25519ClientVerifyingShareSuccess"] = 10] = "DeriveThresholdEd25519ClientVerifyingShareSuccess";
-	WorkerResponseType[WorkerResponseType["DeriveThresholdEd25519ClientVerifyingShareFailure"] = 11] = "DeriveThresholdEd25519ClientVerifyingShareFailure";
-	return WorkerResponseType;
-}({});
-const NearSignerWorkerCustomRequestType = {
-	ThresholdEd25519ComputeNep413SigningDigest: "thresholdEd25519ComputeNep413SigningDigest",
-	ThresholdEd25519ComputeDelegateSigningDigest: "thresholdEd25519ComputeDelegateSigningDigest",
-	ThresholdEd25519BuildDelegateSigningPayload: "thresholdEd25519BuildDelegateSigningPayload",
-	ThresholdEd25519FinalizeDelegateFromSignature: "thresholdEd25519FinalizeDelegateFromSignature",
-	ThresholdEd25519FinalizeNearTxFromSignature: "thresholdEd25519FinalizeNearTxFromSignature",
-	ThresholdEd25519BuildNearTxUnsignedBorsh: "thresholdEd25519BuildNearTxUnsignedBorsh",
-	ThresholdEd25519DecodeSignedNearTxBorsh: "thresholdEd25519DecodeSignedNearTxBorsh"
-};
-const DEFAULT_CONFIRMATION_CONFIG = {
-	uiMode: "modal",
-	behavior: "requireClick",
-	autoProceedDelay: 0
-};
-function isWorkerProgress(response) {
-	return response.type === WorkerResponseType.RegistrationProgress || response.type === WorkerResponseType.RegistrationComplete || response.type === WorkerResponseType.ExecuteActionsProgress || response.type === WorkerResponseType.ExecuteActionsComplete;
-}
-function isWorkerSuccess(response) {
-	return response.type === WorkerResponseType.SignTransactionsWithActionsSuccess || response.type === WorkerResponseType.SignDelegateActionSuccess || response.type === WorkerResponseType.SignNep413MessageSuccess || response.type === WorkerResponseType.DeriveThresholdEd25519ClientVerifyingShareSuccess;
-}
-function isWorkerError(response) {
-	return response.type === WorkerResponseType.SignTransactionsWithActionsFailure || response.type === WorkerResponseType.SignDelegateActionFailure || response.type === WorkerResponseType.SignNep413MessageFailure || response.type === WorkerResponseType.DeriveThresholdEd25519ClientVerifyingShareFailure;
-}
-//#endregion
-export { isWorkerError as a, WorkerResponseType as i, NearSignerWorkerCustomRequestType as n, isWorkerProgress as o, WorkerRequestType as r, isWorkerSuccess as s, DEFAULT_CONFIRMATION_CONFIG as t };

package/dist/esm/shared-ts/src/signing-lanes/linkedEcdsaScope.js

@@ -1 +0,0 @@
-import "./rotationParsers.js";

package/dist/esm/shared-ts/src/utils/paillier.js

@@ -1,3 +0,0 @@
-//#endregion
-
-//# sourceMappingURL=paillier.js.map

package/dist/public/sdk/device-linking-DpVGjSeq.js

@@ -1,221 +0,0 @@
-import { p as mpcMaterialActivationRefsEqual } from "./normalize-BephcEIF.js";
-import { i as base64UrlEncode, r as base64UrlDecode } from "./base64-Clm8C-e9.js";
-import { A as alphabetizeStringify, I as parseDigestB64u, M as sha256BytesUtf8, j as sha256Bytes } from "./registrationIntent-DwAIMQYh.js";
-//#region ../shared-ts/src/device-linking/activeWalletSession.ts
-function activeWalletSessionV1RecordsEqual(left, right) {
-	if (left.kind !== right.kind || left.walletId !== right.walletId || left.authorityId !== right.authorityId || left.authMethodId !== right.authMethodId || left.authorizationId !== right.authorizationId || left.quotaId !== right.quotaId || left.authorityDigestB64u !== right.authorityDigestB64u || left.authorityRevocationEpoch !== right.authorityRevocationEpoch || left.issuedAtMs !== right.issuedAtMs || left.expiresAtMs !== right.expiresAtMs || left.capabilitySubjects.length !== right.capabilitySubjects.length) return false;
-	for (let index = 0; index < left.capabilitySubjects.length; index += 1) {
-		const leftSubject = left.capabilitySubjects[index];
-		const rightSubject = right.capabilitySubjects[index];
-		if (!leftSubject || !rightSubject || !walletCapabilitySubjectsEqual(leftSubject, rightSubject)) return false;
-	}
-	return true;
-}
-function walletCapabilitySubjectsEqual(left, right) {
-	switch (left.kind) {
-		case "link_devices":
-		case "revoke_devices": return right.kind === left.kind;
-		case "sign":
-		case "export_keys": return right.kind === left.kind && right.keyFamily === left.keyFamily && mpcMaterialActivationRefsEqual(left.materialActivation, right.materialActivation);
-		default: return false;
-	}
-}
-function walletSessionPreservesCapabilities(previous, next) {
-	for (const subject of previous.capabilitySubjects) {
-		let retained = false;
-		for (const candidate of next.capabilitySubjects) if (walletCapabilitySubjectsEqual(subject, candidate)) {
-			retained = true;
-			break;
-		}
-		if (!retained) return false;
-	}
-	return true;
-}
-//#endregion
-//#region ../shared-ts/src/device-linking/contracts.ts
-function assertNeverLinkSessionStateV1(value) {
-	throw new Error(`[LinkSessionStateV1] unsupported state: ${String(value)}`);
-}
-//#endregion
-//#region ../shared-ts/src/device-linking/digests.ts
-const TARGET_PREPARATION_DOMAIN = "seams/linked-device/target-preparation/v1";
-const LOCAL_AUTHORITY_INSTALLATION_RECEIPT_DOMAIN = "seams/linked-device/local-authority-installation-receipt/v1";
-const TEXT_ENCODER = new TextEncoder();
-/**
-* The server stores this digest alongside the authorization. Hashing the
-* opaque token directly keeps the browser binding identical to that row.
-*/
-async function computeWalletSessionOperationCredentialDigestB64u(credential) {
-	return parseDigestB64u(base64UrlEncode(await sha256BytesUtf8(credential.token)));
-}
-function encodeWalletSessionInstallationReceiptV1(receipt) {
-	return alphabetizeStringify({
-		domain: LOCAL_AUTHORITY_INSTALLATION_RECEIPT_DOMAIN,
-		receipt
-	});
-}
-async function computeWalletSessionInstallationReceiptDigestB64u(receipt) {
-	return parseDigestB64u(base64UrlEncode(await sha256BytesUtf8(encodeWalletSessionInstallationReceiptV1(receipt))));
-}
-function concat(parts) {
-	let length = 0;
-	for (const part of parts) length += part.length;
-	const output = new Uint8Array(length);
-	let offset = 0;
-	for (const part of parts) {
-		output.set(part, offset);
-		offset += part.length;
-	}
-	return output;
-}
-function u32(value, label) {
-	if (!Number.isSafeInteger(value) || value < 0 || value > 4294967295) throw new Error(`${label} must be a non-negative u32`);
-	return Uint8Array.from([
-		value >>> 24 & 255,
-		value >>> 16 & 255,
-		value >>> 8 & 255,
-		value & 255
-	]);
-}
-function u64(value, label) {
-	if (!Number.isSafeInteger(value) || value < 0) throw new Error(`${label} must be a non-negative safe integer`);
-	let remaining = BigInt(value);
-	const output = new Uint8Array(8);
-	for (let index = 7; index >= 0; index -= 1) {
-		output[index] = Number(remaining & 255n);
-		remaining >>= 8n;
-	}
-	return output;
-}
-function lp32(value, label) {
-	return concat([u32(value.length, `${label}.length`), value]);
-}
-function text(value, label) {
-	if (typeof value !== "string") throw new Error(`${label} must be a string`);
-	return lp32(TEXT_ENCODER.encode(value), label);
-}
-function requirePresentString(value, label) {
-	if (value === void 0) throw new Error(`${label} is required`);
-	return value;
-}
-function rawDigest(value, label) {
-	try {
-		const decoded = base64UrlDecode(parseDigestB64u(value));
-		if (decoded.length !== 32) throw new Error("must decode to 32 bytes");
-		return decoded;
-	} catch (error) {
-		throw new Error(`${label} ${error instanceof Error ? error.message : "is invalid"}`);
-	}
-}
-function rawPublicKey(value, label) {
-	try {
-		const decoded = base64UrlDecode(value);
-		if (decoded.length === 0 || base64UrlEncode(decoded) !== value) throw new Error("must be canonical base64url");
-		return decoded;
-	} catch (error) {
-		throw new Error(`${label} ${error instanceof Error ? error.message : "is invalid"}`);
-	}
-}
-function encodeTargetFactor(value) {
-	return text(value.kind, "targetFactor.kind");
-}
-function encodeLinkedDevicePasskeyCreationOptionsV1(value) {
-	const algorithms = value.pubKeyCredParams.map((entry) => concat([text(entry.type, "passkeyCreationOptions.pubKeyCredParams.type"), text(String(entry.alg), "passkeyCreationOptions.pubKeyCredParams.alg")]));
-	const excludeCredentials = value.excludeCredentials.map((entry) => concat([text(entry.type, "passkeyCreationOptions.excludeCredentials.type"), text(entry.id, "passkeyCreationOptions.excludeCredentials.id")]));
-	return concat([
-		text(value.kind, "passkeyCreationOptions.kind"),
-		text(value.walletAuthMethodId, "passkeyCreationOptions.walletAuthMethodId"),
-		text(value.challengeId, "passkeyCreationOptions.challengeId"),
-		text(value.challengeB64u, "passkeyCreationOptions.challengeB64u"),
-		text(value.rpId, "passkeyCreationOptions.rpId"),
-		text(value.user.idB64u, "passkeyCreationOptions.user.idB64u"),
-		text(value.user.name, "passkeyCreationOptions.user.name"),
-		text(value.user.displayName, "passkeyCreationOptions.user.displayName"),
-		u32(algorithms.length, "passkeyCreationOptions.pubKeyCredParams"),
-		...algorithms.map((entry) => lp32(entry, "passkeyCreationOptions.pubKeyCredParams.item")),
-		text(value.authenticatorSelection.residentKey, "passkeyCreationOptions.authenticatorSelection.residentKey"),
-		text(value.authenticatorSelection.userVerification, "passkeyCreationOptions.authenticatorSelection.userVerification"),
-		u64(value.timeoutMs, "passkeyCreationOptions.timeoutMs"),
-		text(value.attestation, "passkeyCreationOptions.attestation"),
-		text(value.extensions.prf.eval.firstB64u, "passkeyCreationOptions.extensions.prf.eval.firstB64u"),
-		text(value.extensions.prf.eval.secondB64u, "passkeyCreationOptions.extensions.prf.eval.secondB64u"),
-		u32(excludeCredentials.length, "passkeyCreationOptions.excludeCredentials"),
-		...excludeCredentials.map((entry) => lp32(entry, "passkeyCreationOptions.excludeCredentials.item"))
-	]);
-}
-function encodeRecipientRequirement(value) {
-	return concat([
-		text(value.kind, "recipientRequirement.kind"),
-		text(value.keyFamily, "recipientRequirement.keyFamily"),
-		text(value.walletKeyId, "recipientRequirement.walletKeyId")
-	]);
-}
-function encodeEd25519ExportRootPreparation(value) {
-	if (value === null) return text("none", "ed25519ExportRoot.kind");
-	return concat([
-		text(value.kind, "ed25519ExportRoot.kind"),
-		text(value.walletKeyId, "ed25519ExportRoot.walletKeyId"),
-		rawDigest(value.applicationBindingDigestB64u, "ed25519ExportRoot.applicationBindingDigestB64u"),
-		rawPublicKey(value.registeredPublicKeyB64u, "ed25519ExportRoot.registeredPublicKeyB64u"),
-		u64(value.revocationEpoch, "ed25519ExportRoot.revocationEpoch")
-	]);
-}
-function encodeLinkedDeviceTargetPreparationV1(value) {
-	const requirements = value.ordinarySignerMaterialRecipientRequirements.map(encodeRecipientRequirement);
-	const passkeyPreparation = isPasskeyTargetPreparationV1(value) ? value : void 0;
-	const passkeyCreationOptions = passkeyPreparation?.passkeyCreationOptions;
-	if (value.targetFactor.kind === "passkey_prf" && !passkeyCreationOptions) throw new Error("passkey target preparation is missing creation options");
-	return concat([
-		text(TARGET_PREPARATION_DOMAIN, "domain"),
-		text(value.kind, "kind"),
-		text(value.linkSessionId, "linkSessionId"),
-		text(value.walletId, "walletId"),
-		text(value.enrollmentId, "enrollmentId"),
-		text(value.deviceId, "deviceId"),
-		lp32(rawPublicKey(value.deliveryRecipientPublicKey65B64u, "deliveryRecipientPublicKey65B64u"), "deliveryRecipientPublicKey65B64u"),
-		text(value.walletAuthMethodId, "walletAuthMethodId"),
-		lp32(encodeEd25519ExportRootPreparation(value.ed25519ExportRoot), "ed25519ExportRoot"),
-		lp32(encodeTargetFactor(value.targetFactor), "targetFactor"),
-		...passkeyCreationOptions ? [lp32(encodeLinkedDevicePasskeyCreationOptionsV1(passkeyCreationOptions), "passkeyCreationOptions"), rawDigest(passkeyPreparation.passkeyConfigurationDigestB64u, "passkeyConfigurationDigestB64u")] : [],
-		...encodeEmailTargetPreparationFactorBindingV1(value),
-		u32(requirements.length, "ordinarySignerMaterialRecipientRequirements"),
-		...requirements.map((entry) => lp32(entry, "ordinarySignerMaterialRecipientRequirements.item")),
-		u64(value.issuedAtMs, "issuedAtMs"),
-		u64(value.expiresAtMs, "expiresAtMs")
-	]);
-}
-function encodeEmailTargetPreparationFactorBindingV1(value) {
-	if (isPasskeyTargetPreparationV1(value)) return [];
-	return [
-		text(value.targetEmail, "targetEmail"),
-		text(value.enrollment.kind, "enrollment.kind"),
-		...value.enrollment.kind === "existing_enrollment" ? [text(requirePresentString(value.baseWalletAuthMethodId, "baseWalletAuthMethodId"), "baseWalletAuthMethodId")] : []
-	];
-}
-function isPasskeyTargetPreparationV1(value) {
-	return value.targetFactor.kind === "passkey_prf";
-}
-async function computeLinkedDeviceTargetPreparationDigestV1(value) {
-	return parseDigestB64u(base64UrlEncode(await sha256Bytes(encodeLinkedDeviceTargetPreparationV1(value))));
-}
-//#endregion
-//#region ../shared-ts/src/device-linking/requestProof.ts
-const LINKED_DEVICE_REQUEST_PROOF_HEADER_V1 = "x-seams-linked-device-proof-v1";
-const LINKED_DEVICE_REQUEST_PROOF_MAX_TTL_MS_V1 = 6e4;
-const LINKED_DEVICE_CLOCK_SKEW_TOLERANCE_MS_V1 = 6e4;
-async function computeLinkedDevicePublicKeyDigestV1(publicKeyB64u) {
-	return parseDigestB64u(base64UrlEncode(await sha256Bytes(parseFixedB64u(publicKeyB64u, 32, "devicePublicKeyB64u"))));
-}
-function parseFixedB64u(value, expectedBytes, label) {
-	if (typeof value !== "string" || value.length === 0 || !/^[A-Za-z0-9_-]+$/.test(value)) throw new Error(`${label} is invalid`);
-	let bytes;
-	try {
-		bytes = base64UrlDecode(value);
-	} catch {
-		throw new Error(`${label} is invalid`);
-	}
-	if (bytes.length !== expectedBytes || base64UrlEncode(bytes) !== value) throw new Error(`${label} is invalid`);
-	return bytes;
-}
-//#endregion
-export { computeLinkedDeviceTargetPreparationDigestV1 as a, assertNeverLinkSessionStateV1 as c, computeLinkedDevicePublicKeyDigestV1 as i, activeWalletSessionV1RecordsEqual as l, LINKED_DEVICE_REQUEST_PROOF_HEADER_V1 as n, computeWalletSessionInstallationReceiptDigestB64u as o, LINKED_DEVICE_REQUEST_PROOF_MAX_TTL_MS_V1 as r, computeWalletSessionOperationCredentialDigestB64u as s, LINKED_DEVICE_CLOCK_SKEW_TOLERANCE_MS_V1 as t, walletSessionPreservesCapabilities as u };