@seams/wallet 0.7.1 → 0.8.0

package/dist/public/sdk/walletAuthority-CoWSeqvQ.js

@@ -0,0 +1 @@
+import{A as e,D as t,M as n,O as r,T as i,h as a,j as o,k as s,l as c,u as ee}from"./domainIds-GDzjOs6i.js";import{_ as l}from"./validation-dC1-_uyG.js";import{i as u,r as d}from"./base64-ojm5DKcF.js";import{E as te,I as f,N as ne,O as p,x as re}from"./sessionPolicy-CNVK7nJ6.js";import{l as ie}from"./capabilityKinds-XaXXiD2B.js";import{f as ae,p as oe}from"./chains-yAls2d9X.js";import{o as se,r as m}from"./canonicalPrimitives-MPGET2cl.js";import{s as ce,u as h}from"./registrationIds-BIel5S0i.js";const le=[`kind`,`keyFamilies`,`signers`],ue=[`kind`,`keyFamily`,`walletId`,`walletKeyId`,`registeredPublicKeyB64u`],de=[`kind`,`keyFamily`,`walletId`,`walletKeyId`,`thresholdPublicKey33B64u`,`evmAddress`];function g(e){if(e.length===0)throw Error(`exact administered signer manifest must contain at least one active family`);let t,n,r,i=new Set;for(let a of e){if(t!==void 0&&t!==a.walletId)throw Error(`exact administered signer manifest must use one wallet identity`);if(t=a.walletId,i.has(a.walletKeyId))throw Error(`exact administered signer manifest repeats wallet key ${a.walletKeyId}`);switch(i.add(a.walletKeyId),a.keyFamily){case`ed25519`:if(n!==void 0)throw Error(`exact administered signer manifest repeats the ed25519 family`);if(a.kind!==`exact_administered_ed25519_signer_v1`)throw Error(`exact administered signer manifest has an invalid Ed25519 signer`);n=a;break;case`ecdsa_secp256k1`:if(r!==void 0)throw Error(`exact administered signer manifest repeats the ecdsa family`);if(a.kind!==`exact_administered_ecdsa_signer_v1`)throw Error(`exact administered signer manifest has an invalid ECDSA signer`);r=a;break}}if(n!==void 0&&r!==void 0)return{kind:`exact_administered_signer_manifest_v1`,keyFamilies:[`ed25519`,`ecdsa_secp256k1`],signers:[n,r]};if(n!==void 0)return{kind:`exact_administered_signer_manifest_v1`,keyFamilies:[`ed25519`],signers:[n]};if(r!==void 0)return{kind:`exact_administered_signer_manifest_v1`,keyFamilies:[`ecdsa_secp256k1`],signers:[r]};throw Error(`exact administered signer manifest must contain a supported family`)}function _(e){let t=ge(e,le,`ExactAdministeredSignerManifestV1`);if(t.kind!==`exact_administered_signer_manifest_v1`)throw Error(`ExactAdministeredSignerManifestV1.kind is invalid`);let n=pe(t.keyFamilies);if(!Array.isArray(t.signers))throw Error(`ExactAdministeredSignerManifestV1.signers must be an array`);let r=[];for(let e=0;e<t.signers.length;e+=1)r.push(fe(t.signers[e],`signers[${e}]`));let i=g(r);if(!me(n,i.keyFamilies))throw Error(`ExactAdministeredSignerManifestV1.keyFamilies do not match signers`);return i}function fe(e,t){let n=l(e,t);switch(n.keyFamily){case`ed25519`:if(f(n,ue,t),n.kind!==`exact_administered_ed25519_signer_v1`)throw Error(`${t}.kind is invalid for Ed25519`);return{kind:`exact_administered_ed25519_signer_v1`,keyFamily:`ed25519`,walletId:p(r(n.walletId),`${t}.walletId`),walletKeyId:p(s(n.walletKeyId),`${t}.walletKeyId`),registeredPublicKeyB64u:re(n.registeredPublicKeyB64u,`${t}.registeredPublicKeyB64u`)};case`ecdsa_secp256k1`:if(f(n,de,t),n.kind!==`exact_administered_ecdsa_signer_v1`)throw Error(`${t}.kind is invalid for ECDSA`);return{kind:`exact_administered_ecdsa_signer_v1`,keyFamily:`ecdsa_secp256k1`,walletId:p(r(n.walletId),`${t}.walletId`),walletKeyId:p(s(n.walletKeyId),`${t}.walletKeyId`),thresholdPublicKey33B64u:te(n.thresholdPublicKey33B64u,`${t}.thresholdPublicKey33B64u`),evmAddress:he(n.evmAddress,`${t}.evmAddress`)};default:throw Error(`${t}.keyFamily is unsupported`)}}function pe(e){if(!Array.isArray(e)||e.length===0||e.length>2)throw Error(`ExactAdministeredSignerManifestV1.keyFamilies must be non-empty`);if(e.length===1&&e[0]===`ed25519`)return[`ed25519`];if(e.length===1&&e[0]===`ecdsa_secp256k1`)return[`ecdsa_secp256k1`];if(e.length===2&&e[0]===`ed25519`&&e[1]===`ecdsa_secp256k1`)return[`ed25519`,`ecdsa_secp256k1`];throw Error(`ExactAdministeredSignerManifestV1.keyFamilies must be canonical and duplicate-free`)}function me(e,t){if(e.length!==t.length)return!1;for(let n=0;n<e.length;n+=1)if(e[n]!==t[n])return!1;return!0}function he(e,t){if(typeof e!=`string`||!/^0x[0-9a-fA-F]{40}$/.test(e))throw Error(`${t} must be a 20-byte hexadecimal EVM address`);return e}function ge(e,t,n){let r=l(e,n);f(r,t,n);for(let e of t)if(!(e in r))throw Error(`${n}.${e} is required`);return r}async function _e(e){return se(ae({version:`wallet_auth_method_revoke_operation_v1`,walletId:String(e.walletId),targetWalletAuthMethodId:String(e.targetWalletAuthMethodId),requestedAtMs:e.requestedAtMs}))}function ve(e,t){if(e.version!==t.version||e.walletAuthMethodId!==t.walletAuthMethodId||e.walletId!==t.walletId||e.walletAuthorityId!==t.walletAuthorityId||e.status!==t.status||e.createdAtMs!==t.createdAtMs||e.updatedAtMs!==t.updatedAtMs)return!1;switch(e.kind){case`passkey`:if(t.kind!==`passkey`)return!1;if(e.rpId===t.rpId&&e.credentialIdB64u===t.credentialIdB64u&&e.credentialPublicKeyB64u===t.credentialPublicKeyB64u&&e.counter===t.counter)break;return!1;case`email_otp`:if(t.kind!==`email_otp`)return!1;if(e.emailHashHex===t.emailHashHex&&e.registrationAuthorityId===t.registrationAuthorityId)break;return!1;default:return v(e,`wallet auth method kind`)}switch(e.status){case`pending_local_install`:return t.status===`pending_local_install`;case`active`:return t.status===`active`&&e.activatedAtMs===t.activatedAtMs;case`revoked`:return t.status===`revoked`&&e.activatedAtMs===t.activatedAtMs&&e.revokedAtMs===t.revokedAtMs;default:return v(e,`wallet auth method lifecycle`)}}function v(e,t){throw Error(`${t} branch is unsupported: ${String(e)}`)}function ye(e){if(Se(e),e.kind===`passkey`)switch(e.status){case`pending_local_install`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.walletAuthMethodId,walletId:e.walletId,walletAuthorityId:e.walletAuthorityId,kind:`passkey`,status:`pending_local_install`,rpId:e.rpId,credentialIdB64u:e.credentialIdB64u,credentialPublicKeyB64u:e.credentialPublicKeyB64u,counter:e.counter,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs};case`active`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.walletAuthMethodId,walletId:e.walletId,walletAuthorityId:e.walletAuthorityId,kind:`passkey`,status:`active`,rpId:e.rpId,credentialIdB64u:e.credentialIdB64u,credentialPublicKeyB64u:e.credentialPublicKeyB64u,counter:e.counter,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs,activatedAtMs:e.activatedAtMs};case`revoked`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.walletAuthMethodId,walletId:e.walletId,walletAuthorityId:e.walletAuthorityId,kind:`passkey`,status:`revoked`,rpId:e.rpId,credentialIdB64u:e.credentialIdB64u,credentialPublicKeyB64u:e.credentialPublicKeyB64u,counter:e.counter,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs,activatedAtMs:e.activatedAtMs,revokedAtMs:e.revokedAtMs}}switch(e.status){case`pending_local_install`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.walletAuthMethodId,walletId:e.walletId,walletAuthorityId:e.walletAuthorityId,kind:`email_otp`,status:`pending_local_install`,emailHashHex:e.emailHashHex,registrationAuthorityId:e.registrationAuthorityId,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs};case`active`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.walletAuthMethodId,walletId:e.walletId,walletAuthorityId:e.walletAuthorityId,kind:`email_otp`,status:`active`,emailHashHex:e.emailHashHex,registrationAuthorityId:e.registrationAuthorityId,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs,activatedAtMs:e.activatedAtMs};case`revoked`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.walletAuthMethodId,walletId:e.walletId,walletAuthorityId:e.walletAuthorityId,kind:`email_otp`,status:`revoked`,emailHashHex:e.emailHashHex,registrationAuthorityId:e.registrationAuthorityId,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs,activatedAtMs:e.activatedAtMs,revokedAtMs:e.revokedAtMs}}}function be(e){let t=ce(e);if(!t||!(`version`in t)||!(`kind`in t)||!(`status`in t))return null;let r=h(t.version),i=h(t.kind),a=h(t.status);if(r!==`wallet_auth_method_v2`||i!==`passkey`&&i!==`email_otp`)return null;try{let e=xe(t);if(i===`passkey`){if(!(`rpId`in t)||!(`credentialIdB64u`in t)||!(`credentialPublicKeyB64u`in t)||!(`counter`in t))return null;we(t,`passkey`,a);let r=n(t.rpId),i=o(t.credentialIdB64u);return!r.ok||!i.ok||typeof t.credentialPublicKeyB64u!=`string`||!t.credentialPublicKeyB64u.trim()||Object.prototype.hasOwnProperty.call(t,`emailHashHex`)||Object.prototype.hasOwnProperty.call(t,`registrationAuthorityId`)?null:Te({common:e,lifecycle:Ce(t),rpId:r.value,credentialIdB64u:i.value,credentialPublicKeyB64u:t.credentialPublicKeyB64u,counter:y(t.counter)})}if(!(`emailHashHex`in t)||!(`registrationAuthorityId`in t))return null;we(t,`email_otp`,a);let r=h(t.emailHashHex),s=h(t.registrationAuthorityId);return!r||!s||Object.prototype.hasOwnProperty.call(t,`rpId`)||Object.prototype.hasOwnProperty.call(t,`credentialIdB64u`)||Object.prototype.hasOwnProperty.call(t,`credentialPublicKeyB64u`)||Object.prototype.hasOwnProperty.call(t,`counter`)?null:Ee({common:e,lifecycle:Ce(t),emailHashHex:r,registrationAuthorityId:s})}catch{return null}}function xe(e){if(!(`walletAuthMethodId`in e)||!(`walletId`in e)||!(`walletAuthorityId`in e)||!(`createdAtMs`in e)||!(`updatedAtMs`in e))throw Error(`wallet auth method common fields are required`);return{version:`wallet_auth_method_v2`,walletAuthMethodId:De(e.walletAuthMethodId),walletId:Oe(e.walletId),walletAuthorityId:ke(e.walletAuthorityId),createdAtMs:y(e.createdAtMs),updatedAtMs:y(e.updatedAtMs)}}function Se(e){if(e.version!==`wallet_auth_method_v2`)throw Error(`wallet auth method record version is unsupported`);if(!e.walletAuthMethodId||!e.walletId||!e.walletAuthorityId)throw Error(`wallet auth method record identities are required`);if(!Number.isSafeInteger(e.createdAtMs)||e.createdAtMs<0)throw Error(`wallet auth method createdAtMs must be a non-negative safe integer`);if(!Number.isSafeInteger(e.updatedAtMs)||e.updatedAtMs<e.createdAtMs)throw Error(`wallet auth method updatedAtMs must follow createdAtMs`);if(e.kind===`passkey`){if(!e.rpId||!e.credentialIdB64u||!e.credentialPublicKeyB64u.trim())throw Error(`passkey wallet auth method fields are required`);if(!Number.isSafeInteger(e.counter)||e.counter<0)throw Error(`passkey authenticator counter must be non-negative`)}else if(!e.emailHashHex.trim()||!e.registrationAuthorityId.trim())throw Error(`email OTP wallet auth method fields are required`);switch(e.status){case`pending_local_install`:return;case`active`:b(e.activatedAtMs,`activatedAtMs`);return;case`revoked`:if(b(e.activatedAtMs,`activatedAtMs`),b(e.revokedAtMs,`revokedAtMs`),e.revokedAtMs<e.activatedAtMs)throw Error(`revokedAtMs cannot precede activatedAtMs`);return}}function Ce(e){if(!(`status`in e))throw Error(`wallet auth method status is required`);switch(e.status){case`pending_local_install`:return{status:`pending_local_install`};case`active`:if(!(`activatedAtMs`in e))throw Error(`wallet auth method activatedAtMs is required`);return{status:`active`,activatedAtMs:y(e.activatedAtMs)};case`revoked`:if(!(`activatedAtMs`in e)||!(`revokedAtMs`in e))throw Error(`wallet auth method revocation timestamps are required`);return{status:`revoked`,activatedAtMs:y(e.activatedAtMs),revokedAtMs:y(e.revokedAtMs)};default:throw Error(`wallet auth method status is unsupported`)}}function we(e,t,n){let r=[`version`,`walletAuthMethodId`,`walletId`,`walletAuthorityId`,`kind`,`status`,`createdAtMs`,`updatedAtMs`];if(t===`passkey`?r.push(`rpId`,`credentialIdB64u`,`credentialPublicKeyB64u`,`counter`):r.push(`emailHashHex`,`registrationAuthorityId`),n===`active`&&r.push(`activatedAtMs`),n===`revoked`&&r.push(`activatedAtMs`,`revokedAtMs`),n!==`pending_local_install`&&n!==`active`&&n!==`revoked`)throw Error(`wallet auth method status is unsupported`);let i=new Set(r),a=Object.keys(e);if(a.length!==r.length)throw Error(`wallet auth method record has invalid fields`);for(let e of a)if(!i.has(e))throw Error(`wallet auth method field ${e} is invalid`)}function Te(e){switch(e.lifecycle.status){case`pending_local_install`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.common.walletAuthMethodId,walletId:e.common.walletId,walletAuthorityId:e.common.walletAuthorityId,kind:`passkey`,status:`pending_local_install`,createdAtMs:e.common.createdAtMs,updatedAtMs:e.common.updatedAtMs,rpId:e.rpId,credentialIdB64u:e.credentialIdB64u,credentialPublicKeyB64u:e.credentialPublicKeyB64u,counter:e.counter};case`active`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.common.walletAuthMethodId,walletId:e.common.walletId,walletAuthorityId:e.common.walletAuthorityId,kind:`passkey`,status:`active`,createdAtMs:e.common.createdAtMs,updatedAtMs:e.common.updatedAtMs,rpId:e.rpId,credentialIdB64u:e.credentialIdB64u,credentialPublicKeyB64u:e.credentialPublicKeyB64u,counter:e.counter,activatedAtMs:e.lifecycle.activatedAtMs};case`revoked`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.common.walletAuthMethodId,walletId:e.common.walletId,walletAuthorityId:e.common.walletAuthorityId,kind:`passkey`,status:`revoked`,createdAtMs:e.common.createdAtMs,updatedAtMs:e.common.updatedAtMs,rpId:e.rpId,credentialIdB64u:e.credentialIdB64u,credentialPublicKeyB64u:e.credentialPublicKeyB64u,counter:e.counter,activatedAtMs:e.lifecycle.activatedAtMs,revokedAtMs:e.lifecycle.revokedAtMs}}}function Ee(e){switch(e.lifecycle.status){case`pending_local_install`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.common.walletAuthMethodId,walletId:e.common.walletId,walletAuthorityId:e.common.walletAuthorityId,kind:`email_otp`,status:`pending_local_install`,createdAtMs:e.common.createdAtMs,updatedAtMs:e.common.updatedAtMs,emailHashHex:e.emailHashHex,registrationAuthorityId:e.registrationAuthorityId};case`active`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.common.walletAuthMethodId,walletId:e.common.walletId,walletAuthorityId:e.common.walletAuthorityId,kind:`email_otp`,status:`active`,createdAtMs:e.common.createdAtMs,updatedAtMs:e.common.updatedAtMs,emailHashHex:e.emailHashHex,registrationAuthorityId:e.registrationAuthorityId,activatedAtMs:e.lifecycle.activatedAtMs};case`revoked`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.common.walletAuthMethodId,walletId:e.common.walletId,walletAuthorityId:e.common.walletAuthorityId,kind:`email_otp`,status:`revoked`,createdAtMs:e.common.createdAtMs,updatedAtMs:e.common.updatedAtMs,emailHashHex:e.emailHashHex,registrationAuthorityId:e.registrationAuthorityId,activatedAtMs:e.lifecycle.activatedAtMs,revokedAtMs:e.lifecycle.revokedAtMs}}}function De(e){let t=i(e);if(!t.ok)throw Error(t.error.message);return t.value}function Oe(e){let t=r(e);if(!t.ok)throw Error(t.error.message);return t.value}function ke(e){let n=t(e);if(!n.ok)throw Error(n.error.message);return n.value}function y(e){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<0)throw Error(`value must be a non-negative safe integer`);return e}function b(e,t){if(!Number.isSafeInteger(e)||e<0)throw Error(`${t} must be a non-negative safe integer`)}const Ae=new TextEncoder;function x(e){let t=0;for(let n of e)t+=n.length;let n=new Uint8Array(t),r=0;for(let t of e)n.set(t,r),r+=t.length;return n}function S(e,t){if(!Number.isSafeInteger(e)||e<0||e>4294967295)throw Error(`${t} must be a non-negative u32`);return Uint8Array.from([e>>>24&255,e>>>16&255,e>>>8&255,e&255])}function je(e,t){if(!Number.isSafeInteger(e)||e<0)throw Error(`${t} must be a non-negative safe integer`);let n=BigInt(e),r=new Uint8Array(8);for(let e=7;e>=0;--e)r[e]=Number(n&255n),n>>=8n;return r}function C(e,t){return x([S(e.length,`${t}.length`),e])}function w(e,t){if(typeof e!=`string`)throw Error(`${t} must be a string`);return C(Ae.encode(e),t)}function Me(e,t){try{let t=d(m(e));if(t.length!==32)throw Error(`must decode to 32 bytes`);return t}catch(e){throw Error(`${t} ${e instanceof Error?e.message:`is invalid`}`)}}function T(e,t){try{let t=d(e);if(t.length===0||u(t)!==e)throw Error(`must be canonical base64url`);return t}catch(e){throw Error(`${t} ${e instanceof Error?e.message:`is invalid`}`)}}function E(e){return q(e)}function Ne(e){return K(e.signerActivations)}function Pe(e){return G(e.signerActivations)}function Fe(e){return e.provenance.kind===`wallet_recovery`}function D(e){return{kind:`wallet_ed25519_signer_activation_v1`,signer:e.signer,materialActivation:e.materialActivation}}function O(e){return{kind:`wallet_ecdsa_signer_activation_v1`,signer:e.signer,materialActivation:e.materialActivation}}function k(e){let t=_(e.manifest),n=lt(e.materialActivations);if(!rt(t.keyFamilies,n.keyFamilies))throw Error(`wallet signer activation materials must match the signer manifest families`);if(it(t)){if(!W(n))throw Error(`Ed25519 signer activation requires one Ed25519 material activation`);return{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ed25519`],ed25519:D({signer:t.signers[0],materialActivation:n.ed25519})}}if(at(t)){if(!st(n))throw Error(`ECDSA signer activation requires one ECDSA material activation`);return{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ecdsa_secp256k1`],ecdsa:O({signer:t.signers[0],materialActivation:n.ecdsa})}}if(!ot(t)||!ct(n))throw Error(`wallet signer activation set has unsupported families`);if(n.ed25519.activationId===n.ecdsa.activationId)throw Error(`wallet signer activation references must be distinct`);return{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:D({signer:t.signers[0],materialActivation:n.ed25519}),ecdsa:O({signer:t.signers[1],materialActivation:n.ecdsa})}}function Ie(e){try{let t=l(e,`WalletSignerActivationSetV1`);if(t.kind!==`wallet_signer_activation_set_v1`)return Q(`wallet signer activation set kind is unsupported`);if(!Object.prototype.hasOwnProperty.call(t,`keyFamilies`))return Q(`WalletSignerActivationSetV1.keyFamilies is required`);let n=nt(t.keyFamilies,`WalletSignerActivationSetV1.keyFamilies`);if(n.length===1&&n[0]===`ed25519`)return U(t,[`kind`,`keyFamilies`,`ed25519`],`WalletSignerActivationSetV1`),{ok:!0,value:{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ed25519`],ed25519:Xe(t.ed25519,`ed25519`)}};if(n.length===1&&n[0]===`ecdsa_secp256k1`)return U(t,[`kind`,`keyFamilies`,`ecdsa`],`WalletSignerActivationSetV1`),{ok:!0,value:{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ecdsa_secp256k1`],ecdsa:Ze(t.ecdsa,`ecdsa`)}};U(t,[`kind`,`keyFamilies`,`ed25519`,`ecdsa`],`WalletSignerActivationSetV1`);let r=Xe(t.ed25519,`ed25519`),i=Ze(t.ecdsa,`ecdsa`);return r.materialActivation.activationId===i.materialActivation.activationId?Q(`wallet signer activation references must be distinct`):{ok:!0,value:{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:r,ecdsa:i}}}catch(e){return Q($(e,`wallet signer activation set is invalid`))}}function Le(e){let t=[w(`seams/wallet-signer-activation-set/v1`,`domain`),w(e.kind,`kind`),S(e.keyFamilies.length,`keyFamilies`)];for(let n of e.keyFamilies)t.push(w(n,`keyFamilies.item`));return(G(e)||q(e))&&t.push(C(L(e.ed25519),`ed25519`)),(K(e)||q(e))&&t.push(C(R(e.ecdsa),`ecdsa`)),x(t)}async function A(e){return m(u(await oe(Le(e))))}function j(e){return{kind:`wallet_authority_v1`,authorityId:e.authorityId,walletId:e.walletId,principal:e.principal,provenance:e.provenance,permissions:e.permissions,signerActivations:e.signerActivations,signerActivationSetDigestB64u:e.signerActivationSetDigestB64u,authorityDigestB64u:e.authorityDigestB64u,revocationEpoch:e.revocationEpoch,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs}}function Re(e){return F(e),{...j(e),state:`pending_local_install`,localInstallPackageSetDigestB64u:e.localInstallPackageSetDigestB64u}}function ze(e){return F(e),{...j(e),state:`active`,activatedAtMs:e.activatedAtMs}}async function Be(e){let t=e.authority.signerActivations;if(!t.ed25519)throw Error(`active Wallet Authority has no Ed25519 material activation to replace`);let n=t.ecdsa?k({manifest:g([t.ed25519.signer,t.ecdsa.signer]),materialActivations:{keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:e.materialActivation,ecdsa:t.ecdsa.materialActivation}}):k({manifest:g([t.ed25519.signer]),materialActivations:{keyFamilies:[`ed25519`],ed25519:e.materialActivation}}),r=await A(n),i={kind:e.authority.kind,authorityId:e.authority.authorityId,walletId:e.authority.walletId,principal:e.authority.principal,provenance:e.authority.provenance,permissions:e.authority.permissions,signerActivations:n,signerActivationSetDigestB64u:r,authorityDigestB64u:e.authority.authorityDigestB64u,revocationEpoch:e.authority.revocationEpoch,createdAtMs:e.authority.createdAtMs,updatedAtMs:Math.max(e.authority.updatedAtMs,e.updatedAtMs),state:`active`,activatedAtMs:e.authority.activatedAtMs};return ze({...i,authorityDigestB64u:await N(i)})}function Ve(e){return F(e),{...j(e),state:`active`,activatedAtMs:e.activatedAtMs}}function He(e){return F(e),{...j(e),state:`revoked`,activatedAtMs:e.activatedAtMs,revokedAtMs:e.revokedAtMs}}const M=[`kind`,`authorityId`,`walletId`,`principal`,`provenance`,`permissions`,`signerActivations`,`signerActivationSetDigestB64u`,`authorityDigestB64u`,`revocationEpoch`,`createdAtMs`,`updatedAtMs`,`state`];function Ue(e){try{let t=l(e,`WalletAuthorityV1`),n=Ke(t);switch(t.state){case`pending_local_install`:return U(t,[...M,`localInstallPackageSetDigestB64u`],`WalletAuthorityV1`),{ok:!0,value:Re({kind:`wallet_authority_v1`,...n,state:`pending_local_install`,localInstallPackageSetDigestB64u:J(t.localInstallPackageSetDigestB64u,`localInstallPackageSetDigestB64u`)})};case`active`:return U(t,[...M,`activatedAtMs`],`WalletAuthorityV1`),{ok:!0,value:ze({kind:`wallet_authority_v1`,...n,state:`active`,activatedAtMs:Y(t.activatedAtMs,`activatedAtMs`)})};case`revoked`:return U(t,[...M,`activatedAtMs`,`revokedAtMs`],`WalletAuthorityV1`),{ok:!0,value:He({kind:`wallet_authority_v1`,...n,state:`revoked`,activatedAtMs:Y(t.activatedAtMs,`activatedAtMs`),revokedAtMs:Y(t.revokedAtMs,`revokedAtMs`)})};default:return Q(`WalletAuthorityV1.state is unsupported`)}}catch(e){return Q($(e,`wallet authority is invalid`))}}function We(e){return x([w(`seams/wallet-authority/v1`,`domain`),w(e.kind,`kind`),w(e.authorityId,`authorityId`),w(e.walletId,`walletId`),C(z(e.principal),`principal`),C(B(e.provenance),`provenance`),C(V(e.permissions),`permissions`),Me(e.signerActivationSetDigestB64u,`signerActivationSetDigestB64u`),w(e.state,`state`),je(e.revocationEpoch,`revocationEpoch`)])}async function N(e){return m(u(await oe(We(e))))}async function P(e){return await A(e.signerActivations)===e.signerActivationSetDigestB64u?await N(e)===e.authorityDigestB64u:!1}async function Ge(e,t){let[n,r]=await Promise.all([P(e),P(t)]);return n&&r&&e.authorityDigestB64u===t.authorityDigestB64u&&e.signerActivationSetDigestB64u===t.signerActivationSetDigestB64u&&e.createdAtMs===t.createdAtMs&&e.updatedAtMs===t.updatedAtMs&&e.activatedAtMs===t.activatedAtMs}function Ke(e){if(e.kind!==`wallet_authority_v1`)throw Error(`WalletAuthorityV1.kind is unsupported`);let n=Z(t(e.authorityId),`authorityId`),i=Z(r(e.walletId),`walletId`),a=qe(e.principal),o=Je(e.provenance),s=Z(ne(e.permissions),`permissions`),c=Z(Ie(e.signerActivations),`signerActivations`),ee=J(e.signerActivationSetDigestB64u,`signerActivationSetDigestB64u`),l=J(e.authorityDigestB64u,`authorityDigestB64u`),u=Y(e.revocationEpoch,`revocationEpoch`),d=Y(e.createdAtMs,`createdAtMs`),te=Y(e.updatedAtMs,`updatedAtMs`);return I(c,i),{authorityId:n,walletId:i,principal:a,provenance:o,permissions:s,signerActivations:c,signerActivationSetDigestB64u:ee,authorityDigestB64u:l,revocationEpoch:u,createdAtMs:d,updatedAtMs:te}}function F(e){if(e.kind!==`wallet_authority_v1`)throw Error(`wallet authority kind is unsupported`);if(!Number.isSafeInteger(e.revocationEpoch)||e.revocationEpoch<0)throw Error(`wallet authority revocationEpoch must be a non-negative safe integer`);if(X(e.createdAtMs,`createdAtMs`),X(e.updatedAtMs,`updatedAtMs`),e.updatedAtMs<e.createdAtMs)throw Error(`wallet authority updatedAtMs cannot precede createdAtMs`);switch(J(e.signerActivationSetDigestB64u,`signerActivationSetDigestB64u`),J(e.authorityDigestB64u,`authorityDigestB64u`),I(e.signerActivations,e.walletId),Ye(e.provenance),e.state){case`pending_local_install`:J(e.localInstallPackageSetDigestB64u,`localInstallPackageSetDigestB64u`);break;case`active`:X(e.activatedAtMs,`activatedAtMs`);break;case`revoked`:if(X(e.activatedAtMs,`activatedAtMs`),X(e.revokedAtMs,`revokedAtMs`),e.revokedAtMs<e.activatedAtMs)throw Error(`revokedAtMs cannot precede activatedAtMs`);break}}function qe(e){let t=H(e,[`kind`,`deviceId`],`WalletAuthorityPrincipalV1`);if(t.kind!==`owner_device`)throw Error(`wallet authority principal kind is unsupported`);return{kind:`owner_device`,deviceId:Z(ie(t.deviceId),`deviceId`)}}function Je(n){let r=l(n,`WalletAuthorityProvenanceV1`);switch(r.kind){case`wallet_registration`:return U(r,[`kind`],`WalletAuthorityProvenanceV1`),{kind:`wallet_registration`};case`device_link`:return U(r,[`kind`,`enrollmentId`,`sourceAuthorityId`,`linkSessionId`],`WalletAuthorityProvenanceV1`),{kind:`device_link`,enrollmentId:Z(ee(r.enrollmentId),`enrollmentId`),sourceAuthorityId:Z(t(r.sourceAuthorityId),`sourceAuthorityId`),linkSessionId:Z(c(r.linkSessionId),`linkSessionId`)};case`wallet_recovery`:return U(r,[`kind`,`recoveryOperationId`,`continuityAuthorityId`],`WalletAuthorityProvenanceV1`),{kind:`wallet_recovery`,recoveryOperationId:Z(e(r.recoveryOperationId),`recoveryOperationId`),continuityAuthorityId:Z(t(r.continuityAuthorityId),`continuityAuthorityId`)};default:throw Error(`wallet authority provenance kind is unsupported`)}}function Ye(e){switch(e.kind){case`wallet_registration`:return;case`device_link`:if(!e.enrollmentId||!e.sourceAuthorityId||!e.linkSessionId)throw Error(`device-link provenance requires every audit identity`);return;case`wallet_recovery`:if(!e.recoveryOperationId||!e.continuityAuthorityId)throw Error(`wallet-recovery provenance requires every audit identity`);return}ut(e,`wallet authority provenance`)}function I(e,t){if(G(e)){if(e.ed25519.signer.walletId!==t)throw Error(`Ed25519 signer activation uses a different wallet id`);return}if(K(e)){if(e.ecdsa.signer.walletId!==t)throw Error(`ECDSA signer activation uses a different wallet id`);return}if(q(e)){if(e.ed25519.signer.walletId!==t||e.ecdsa.signer.walletId!==t)throw Error(`signer activations must use the authority wallet id`);return}throw Error(`wallet signer activation families are unsupported`)}function Xe(e,t){let n=H(e,[`kind`,`signer`,`materialActivation`],t);if(n.kind!==`wallet_ed25519_signer_activation_v1`)throw Error(`${t}.kind is invalid`);let r=Qe(n.signer,`ed25519`,`${t}.signer`);if(!it(r))throw Error(`${t}.signer is not Ed25519`);return D({signer:r.signers[0],materialActivation:Z(a(n.materialActivation),`${t}.materialActivation`)})}function Ze(e,t){let n=H(e,[`kind`,`signer`,`materialActivation`],t);if(n.kind!==`wallet_ecdsa_signer_activation_v1`)throw Error(`${t}.kind is invalid`);let r=Qe(n.signer,`ecdsa_secp256k1`,`${t}.signer`);if(!at(r))throw Error(`${t}.signer is not ECDSA`);return O({signer:r.signers[0],materialActivation:Z(a(n.materialActivation),`${t}.materialActivation`)})}function Qe(e,t,n){return _({kind:`exact_administered_signer_manifest_v1`,keyFamilies:[t],signers:[e]})}function L(e){return x([w(e.kind,`ed25519.kind`),C($e(e.signer),`ed25519.signer`),C(tt(e.materialActivation),`ed25519.materialActivation`)])}function R(e){return x([w(e.kind,`ecdsa.kind`),C(et(e.signer),`ecdsa.signer`),C(tt(e.materialActivation),`ecdsa.materialActivation`)])}function $e(e){return x([w(e.kind,`ed25519.signer.kind`),w(e.keyFamily,`ed25519.signer.keyFamily`),w(e.walletId,`ed25519.signer.walletId`),w(e.walletKeyId,`ed25519.signer.walletKeyId`),C(T(e.registeredPublicKeyB64u,`ed25519.signer.registeredPublicKeyB64u`),`ed25519.signer.registeredPublicKeyB64u`)])}function et(e){return x([w(e.kind,`ecdsa.signer.kind`),w(e.keyFamily,`ecdsa.signer.keyFamily`),w(e.walletId,`ecdsa.signer.walletId`),w(e.walletKeyId,`ecdsa.signer.walletKeyId`),C(T(e.thresholdPublicKey33B64u,`ecdsa.signer.thresholdPublicKey33B64u`),`ecdsa.signer.thresholdPublicKey33B64u`),w(e.evmAddress,`ecdsa.signer.evmAddress`)])}function tt(e){return x([w(e.kind,`materialActivation.kind`),w(e.activationId,`materialActivation.activationId`),w(e.capability,`materialActivation.capability`),w(e.materialOwner,`materialActivation.materialOwner`),w(e.keyBinding,`materialActivation.keyBinding`),w(e.lifecycleBinding,`materialActivation.lifecycleBinding`),w(e.signingWorker,`materialActivation.signingWorker`)])}function z(e){return x([w(e.kind,`principal.kind`),w(e.deviceId,`principal.deviceId`)])}function B(e){switch(e.kind){case`wallet_registration`:return w(e.kind,`provenance.kind`);case`device_link`:return x([w(e.kind,`provenance.kind`),w(e.enrollmentId,`provenance.enrollmentId`),w(e.sourceAuthorityId,`provenance.sourceAuthorityId`),w(e.linkSessionId,`provenance.linkSessionId`)]);case`wallet_recovery`:return x([w(e.kind,`provenance.kind`),w(e.recoveryOperationId,`provenance.recoveryOperationId`),w(e.continuityAuthorityId,`provenance.continuityAuthorityId`)])}return ut(e,`wallet authority provenance`)}function V(e){let t=[S(e.length,`permissions`)];for(let n of e)t.push(C(w(n,`permissions.item`),`permissions.item`));return x(t)}function H(e,t,n){let r=l(e,n);return U(r,t,n),r}function U(e,t,n){let r=new Set(t),i=Object.keys(e);if(i.length!==t.length)throw Error(`${n} contains unexpected fields`);for(let e of i)if(!r.has(e))throw Error(`${n}.${e} is not allowed`);for(let r of t)if(!Object.prototype.hasOwnProperty.call(e,r))throw Error(`${n}.${r} is required`)}function nt(e,t){if(!Array.isArray(e))throw Error(`${t} must be an array`);if(e.length===1&&e[0]===`ed25519`)return[`ed25519`];if(e.length===1&&e[0]===`ecdsa_secp256k1`)return[`ecdsa_secp256k1`];if(e.length===2&&e[0]===`ed25519`&&e[1]===`ecdsa_secp256k1`)return[`ed25519`,`ecdsa_secp256k1`];throw Error(`${t} must use canonical family order`)}function rt(e,t){if(e.length!==t.length)return!1;for(let n=0;n<e.length;n+=1)if(e[n]!==t[n])return!1;return!0}function it(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ed25519`}function at(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ecdsa_secp256k1`}function ot(e){return e.keyFamilies.length===2}function W(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ed25519`}function st(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ecdsa_secp256k1`}function ct(e){return e.keyFamilies.length===2}function lt(e){if(W(e))return{keyFamilies:[`ed25519`],ed25519:Z(a(e.ed25519),`materialActivations.ed25519`)};if(st(e))return{keyFamilies:[`ecdsa_secp256k1`],ecdsa:Z(a(e.ecdsa),`materialActivations.ecdsa`)};if(ct(e))return{keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:Z(a(e.ed25519),`materialActivations.ed25519`),ecdsa:Z(a(e.ecdsa),`materialActivations.ecdsa`)};throw Error(`wallet signer activation materials are unsupported`)}function G(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ed25519`}function K(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ecdsa_secp256k1`}function q(e){return e.keyFamilies.length===2}function J(e,t){try{return m(e)}catch(e){throw Error(`${t} ${$(e,`is invalid`)}`)}}function Y(e,t){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<0)throw Error(`${t} must be a non-negative safe integer`);return e}function X(e,t){if(!Number.isSafeInteger(e)||e<0)throw Error(`${t} must be a non-negative safe integer`)}function Z(e,t){if(e.ok)return e.value;throw Error(`${t} ${e.error.message}`)}function Q(e){return{ok:!1,error:{code:`invalid`,message:e}}}function $(e,t){return e instanceof Error?e.message:t}function ut(e,t){throw Error(`${t} branch is unsupported: ${String(e)}`)}async function dt(e,t,n){let r=await A(t),i={kind:`wallet_authority_v1`,authorityId:e.authorityId,walletId:e.walletId,principal:e.principal,provenance:e.provenance,permissions:e.permissions,signerActivations:t,signerActivationSetDigestB64u:r,authorityDigestB64u:e.authorityDigestB64u,revocationEpoch:e.revocationEpoch,createdAtMs:e.createdAtMs,updatedAtMs:Math.max(e.updatedAtMs,n),state:`active`,activatedAtMs:e.activatedAtMs};return Ve({...i,authorityDigestB64u:await N(i)})}async function ft(e){if(e.ed25519.signer.walletId!==e.authority.walletId)throw Error(`NEAR signer belongs to a different wallet authority`);let t=e.authority.signerActivations.ecdsa,n=e.ed25519.signer,r=k({manifest:g([n,t.signer]),materialActivations:{keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:e.ed25519.materialActivation,ecdsa:t.materialActivation}});if(!E(r))throw Error(`Deferred Ed25519 activation did not produce a combined signer activation set`);return dt(e.authority,r,e.now)}function pt(e,t){return e.authorityId===t.authorityId&&e.walletId===t.walletId&&e.revocationEpoch===t.revocationEpoch&&e.createdAtMs===t.createdAtMs&&e.activatedAtMs===t.activatedAtMs&&u(z(e.principal))===u(z(t.principal))&&u(B(e.provenance))===u(B(t.provenance))&&u(V(e.permissions))===u(V(t.permissions))}function mt(e,t){return Pe(e)&&E(t.signerActivations)&&pt(e,t)&&u(L(e.signerActivations.ed25519))===u(L(t.signerActivations.ed25519))}function ht(e,t){return Ne(e)&&E(t.signerActivations)&&e.provenance.kind===`wallet_registration`&&pt(e,t)&&u(R(e.signerActivations.ecdsa))===u(R(t.signerActivations.ecdsa))}export{_e as C,_ as E,ye as S,ve as T,Me as _,Ne as a,S as b,mt as c,Ie as d,Be as f,C as g,x as h,ft as i,ht as l,P as m,A as n,Fe as o,Ge as p,Le as r,E as s,N as t,Ue as u,T as v,be as w,je as x,w as y};