@seams/wallet 0.7.3 → 0.8.0

package/dist/esm/sdk/evmFamilyEcdsaIdentity-Br3iFdQx.js

@@ -0,0 +1 @@
+import{D as e,M as t,O as n,T as r,_ as i,d as a,h as o,k as s,l as c,n as l,r as u,u as ee}from"./domainIds-GDzjOs6i.js";import{_ as d,m as te,v as f}from"./validation-dC1-_uyG.js";import{i as p,r as m}from"./base64-ojm5DKcF.js";import{A as ne,C as re,E as h,F as g,I as _,O as v,S as ie,_ as ae,b as y,d as oe,v as se,x as ce}from"./sessionPolicy-CNVK7nJ6.js";import{$t as b,At as le,Bt as ue,Ct as de,Dt as fe,Ft as x,Gt as pe,Ht as me,It as S,Jt as C,Kt as w,Lt as T,Nt as he,Ot as ge,Pt as _e,Qt as ve,Rt as E,Tt as ye,Ut as D,Vt as O,Wt as k,Xt as be,Yt as A,Zt as xe,en as Se,j as Ce,qt as j,rn as we,tn as M,xt as Te,zt as Ee}from"./ecdsaPresignLifecycle-CQnCxSlq.js";import{d as De,f as Oe,h as ke,l as Ae,m as je,p as Me}from"./capabilityKinds-XaXXiD2B.js";import{f as N,m as Ne}from"./chains-yAls2d9X.js";import{a as Pe,o as Fe,r as P}from"./canonicalPrimitives-MPGET2cl.js";import{c as Ie,l as Le}from"./ecdsaChainTarget-CRcRR78w.js";import{n as Re}from"./signerDomain-BhUTzDmF.js";import{c as ze,s as Be}from"./accountIds-C3Ihsd2c.js";import{_ as Ve,b as He,d as Ue,g as F,h as We,u as Ge,v as Ke,w as qe,x as Je,y as I}from"./walletAuthority-CoWSeqvQ.js";import{i as Ye}from"./registrationIds-BIel5S0i.js";import{r as Xe}from"./types-M7vxrYtJ.js";function Ze(e){throw Error(`[LinkSessionStateV1] unsupported state: ${String(e)}`)}const Qe=`x25519-hkdf-sha256-chacha20poly1305-v1`,$e=/^[A-Za-z0-9_-]+$/,et=[`kind`,`linkSessionId`,`walletId`,`walletKeyId`,`enrollmentId`,`deviceId`,`transferAlg`,`applicationBindingDigestB64u`,`registeredPublicKeyB64u`,`targetFactor`,`revocationEpoch`,`recipientPublicKeyB64u`,`registeredAtMs`],tt=[`kind`,`linkSessionId`,`walletId`,`walletKeyId`,`enrollmentId`,`deviceId`,`transferAlg`,`applicationBindingDigestB64u`,`registeredPublicKeyB64u`,`targetFactor`,`revocationEpoch`,`recipientPublicKeyB64u`,`ephemeralPublicKeyB64u`,`nonceB64u`,`sealedExportRootB64u`,`bindingDigestB64u`,`ciphertextDigestB64u`,`sealedAtMs`];function nt(e,t=`recipientPublicKeyB64u`){if(typeof e!=`string`||!$e.test(e))throw Error(`${t} must be unpadded base64url`);let n;try{n=m(e)}catch{throw Error(`${t} must be valid base64url`)}if(p(n)!==e)throw Error(`${t} must be canonical base64url`);if(n.length!==32)throw Error(`${t} must decode to a 32-byte X25519 public key`);return e}function rt(e){return{linkSessionId:e.linkSessionId,walletId:e.walletId,walletKeyId:e.walletKeyId,targetFactor:e.targetFactor,enrollmentId:e.enrollmentId,deviceId:e.deviceId,revocationEpoch:e.revocationEpoch,applicationBindingDigestB64u:e.applicationBindingDigestB64u,registeredPublicKeyB64u:e.registeredPublicKeyB64u,recipientPublicKeyB64u:e.recipientPublicKeyB64u}}function it(e){return JSON.stringify({linkSessionId:String(e.linkSessionId),walletId:String(e.walletId),walletKeyId:String(e.walletKeyId),targetFactor:e.targetFactor,enrollmentId:String(e.enrollmentId),deviceId:String(e.deviceId),revocationEpoch:e.revocationEpoch,applicationBindingDigestB64u:String(e.applicationBindingDigestB64u),registeredPublicKeyB64u:String(e.registeredPublicKeyB64u),recipientPublicKeyB64u:String(e.recipientPublicKeyB64u)})}function at(e){let t=ct(e,et,`LinkedDeviceEd25519ExportRootRecipientV1`);if(t.kind!==`linked_device_ed25519_export_root_recipient_v1`)throw Error(`LinkedDeviceEd25519ExportRootRecipientV1.kind is invalid`);return lt(t.transferAlg,`LinkedDeviceEd25519ExportRootRecipientV1.transferAlg`),{kind:`linked_device_ed25519_export_root_recipient_v1`,linkSessionId:v(c(t.linkSessionId),`LinkedDeviceEd25519ExportRootRecipientV1.linkSessionId`),walletId:v(n(t.walletId),`walletId`),walletKeyId:v(s(t.walletKeyId),`walletKeyId`),enrollmentId:v(ee(t.enrollmentId),`enrollmentId`),deviceId:v(a(t.deviceId),`deviceId`),transferAlg:Qe,applicationBindingDigestB64u:y(t.applicationBindingDigestB64u,`applicationBindingDigestB64u`),registeredPublicKeyB64u:ce(t.registeredPublicKeyB64u,`registeredPublicKeyB64u`),targetFactor:st(t.targetFactor),revocationEpoch:ut(t.revocationEpoch,`revocationEpoch`),recipientPublicKeyB64u:nt(t.recipientPublicKeyB64u,`recipientPublicKeyB64u`),registeredAtMs:dt(t.registeredAtMs,`registeredAtMs`)}}function ot(e){let t=ct(e,tt,`LinkedDeviceEd25519ExportRootPackageV1`);if(t.kind!==`linked_device_ed25519_export_root_package_v1`)throw Error(`LinkedDeviceEd25519ExportRootPackageV1.kind is invalid`);lt(t.transferAlg,`LinkedDeviceEd25519ExportRootPackageV1.transferAlg`);let r=nt(t.recipientPublicKeyB64u,`recipientPublicKeyB64u`),i=nt(t.ephemeralPublicKeyB64u,`ephemeralPublicKeyB64u`);if(r===i)throw Error(`ephemeralPublicKeyB64u repeats the recipient key`);return{kind:`linked_device_ed25519_export_root_package_v1`,linkSessionId:v(c(t.linkSessionId),`linkSessionId`),walletId:v(n(t.walletId),`walletId`),walletKeyId:v(s(t.walletKeyId),`walletKeyId`),enrollmentId:v(ee(t.enrollmentId),`enrollmentId`),deviceId:v(a(t.deviceId),`deviceId`),transferAlg:Qe,applicationBindingDigestB64u:y(t.applicationBindingDigestB64u,`applicationBindingDigestB64u`),registeredPublicKeyB64u:ce(t.registeredPublicKeyB64u,`registeredPublicKeyB64u`),targetFactor:st(t.targetFactor),revocationEpoch:ut(t.revocationEpoch,`revocationEpoch`),recipientPublicKeyB64u:r,ephemeralPublicKeyB64u:i,nonceB64u:re(t.nonceB64u,`nonceB64u`),sealedExportRootB64u:ie(t.sealedExportRootB64u,`sealedExportRootB64u`),bindingDigestB64u:y(t.bindingDigestB64u,`bindingDigestB64u`),ciphertextDigestB64u:y(t.ciphertextDigestB64u,`ciphertextDigestB64u`),sealedAtMs:dt(t.sealedAtMs,`sealedAtMs`)}}function st(e){switch(ct(e,[`kind`],`targetFactor`).kind){case`passkey_prf`:return{kind:`passkey_prf`};case`email_otp`:return{kind:`email_otp`};default:throw Error(`targetFactor.kind is unsupported`)}}function ct(e,t,n){let r=d(e,n);_(r,t,n);for(let e of t)if(r[e]===void 0)throw Error(`${n}.${e} is required`);return r}function lt(e,t){if(e!==`x25519-hkdf-sha256-chacha20poly1305-v1`)throw Error(`${t} must be ${Qe}`)}function ut(e,t){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<0)throw Error(`${t} must be a non-negative safe integer`);return e}function dt(e,t){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<=0)throw Error(`${t} must be a positive unix-millisecond timestamp`);return e}function L(e,t){if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`${t} must be an object`);return e}function R(e,t){if(typeof e!=`string`)throw Error(`${t} must be a string`);let n=e.trim();if(!n)throw Error(`${t} must not be empty`);if(n!==e)throw Error(`${t} must not be padded with whitespace`);return n}function ft(e,n){let r=t(R(e,n));if(!r.ok)throw Error(`${n} is invalid: ${r.error.message}`);return r.value}function z(e,t,n){if(e!==t)throw Error(`${n} must be ${String(t)}`);return t}function pt(e){let t=`WalletAddAuthMethodRegistrationOptions`,n=L(e,t);z(n.kind,`webauthn_add_auth_method_registration_v1`,`${t}.kind`);let r=L(n.user,`${t}.user`),i=L(n.authenticatorSelection,`${t}.authenticatorSelection`),a=L(L(L(n.extensions,`${t}.extensions`).prf,`${t}.extensions.prf`).eval,`${t}.extensions.prf.eval`);if(!Array.isArray(n.pubKeyCredParams)||n.pubKeyCredParams.length!==2)throw Error(`${t}.pubKeyCredParams must list exactly two algorithms`);let[o,s]=n.pubKeyCredParams;if(z(L(o,`${t}.pubKeyCredParams[0]`).type,`public-key`,`${t}.pubKeyCredParams[0].type`),z(L(o,`${t}.pubKeyCredParams[0]`).alg,-7,`${t}.pubKeyCredParams[0].alg`),z(L(s,`${t}.pubKeyCredParams[1]`).type,`public-key`,`${t}.pubKeyCredParams[1].type`),z(L(s,`${t}.pubKeyCredParams[1]`).alg,-257,`${t}.pubKeyCredParams[1].alg`),!Array.isArray(n.excludeCredentials))throw Error(`${t}.excludeCredentials must be an array`);let c=n.excludeCredentials.map((e,n)=>{let r=L(e,`${t}.excludeCredentials[${n}]`);return{type:z(r.type,`public-key`,`${t}.excludeCredentials[${n}].type`),id:R(r.id,`${t}.excludeCredentials[${n}].id`)}}),l=n.timeoutMs;if(typeof l!=`number`||!Number.isSafeInteger(l)||l<=0)throw Error(`${t}.timeoutMs must be a positive safe integer`);return{kind:`webauthn_add_auth_method_registration_v1`,challengeId:R(n.challengeId,`${t}.challengeId`),challengeB64u:R(n.challengeB64u,`${t}.challengeB64u`),rpId:ft(n.rpId,`${t}.rpId`),user:{idB64u:R(r.idB64u,`${t}.user.idB64u`),name:R(r.name,`${t}.user.name`),displayName:R(r.displayName,`${t}.user.displayName`)},pubKeyCredParams:[{type:`public-key`,alg:-7},{type:`public-key`,alg:-257}],authenticatorSelection:{residentKey:z(i.residentKey,`required`,`${t}.authenticatorSelection.residentKey`),userVerification:z(i.userVerification,`preferred`,`${t}.authenticatorSelection.userVerification`)},timeoutMs:l,attestation:z(n.attestation,`none`,`${t}.attestation`),extensions:{prf:{eval:{firstB64u:R(a.firstB64u,`${t}.extensions.prf.eval.firstB64u`),secondB64u:R(a.secondB64u,`${t}.extensions.prf.eval.secondB64u`)}}},excludeCredentials:c}}const mt=new TextEncoder;function B(e,t){if(typeof e!=`string`||e.length===0)throw Error(`${t} must be a non-empty visible ASCII string`);for(let n=0;n<e.length;n+=1){let r=e.charCodeAt(n);if(r<33||r>126)throw Error(`${t} must contain visible ASCII bytes`)}return e}function ht(e,t){if(typeof e!=`number`||!Number.isInteger(e)||e<0||e>255)throw Error(`${t} must be a byte`);return e}function gt(e,t,n,r){if(!Array.isArray(e))throw Error(`${t} must be a byte array`);if(e.length<n||e.length>r)throw Error(`${t} has an invalid length`);let i=[];for(let n=0;n<e.length;n+=1)i.push(ht(e[n],`${t}[${n}]`));return i}function V(e,t,n){let r=gt(e,t,32,32);if(n&&_t(r))throw Error(`${t} must be nonzero`);return r}function _t(e){for(let t of e)if(t!==0)return!1;return!0}function H(e,t){if(e.length!==t.length)return!1;for(let n=0;n<e.length;n+=1)if(e[n]!==t[n])return!1;return!0}function vt(e){let t=new Uint8Array(4);return new DataView(t.buffer).setUint32(0,e,!1),t}function yt(e){let t=0;for(let n of e)t+=n.length;let n=new Uint8Array(t),r=0;for(let t of e)n.set(t,r),r+=t.length;return n}function bt(e){return yt([vt(e.length),e])}function xt(e,t){return yt([bt(mt.encode(e)),bt(t)])}async function St(e){let t=await globalThis.crypto.subtle.digest(`SHA-256`,e);return new Uint8Array(t)}async function Ct(e){let t=yt([bt(mt.encode(`seams/router-ab/ed25519-yao/application-binding/v1`)),xt(`walletId`,mt.encode(e.wallet_id)),xt(`nearEd25519SigningKeyId`,mt.encode(e.near_ed25519_signing_key_id)),xt(`signingRootId`,mt.encode(e.signing_root_id)),xt(`keyCreationSignerSlot`,vt(e.key_creation_signer_slot))]);return Array.from(await St(t))}const wt=`/router-ab/ed25519/yao/registration/admit`,Tt=`/router-ab/ed25519/yao/registration/execute`,Et=`/router-ab/ed25519/yao/recovery/admit`,Dt=`/router-ab/ed25519/yao/recovery/execute`,Ot=`/router-ab/ed25519/yao/recovery/activate`,kt=`x-seams-wallet-recovery-challenge-id`,At=`/router-ab/ed25519/yao/recovery/bootstrap`,jt=`router_ab_ed25519_yao_email_otp_recovery_v1`,Mt=`/router-ab/ed25519/yao/export/admit`,Nt=`/router-ab/ed25519/yao/export/execute`,Pt=64*1024;function Ft(e,t){return e.operation===t.operation&&U(e.session_id,t.session_id)&&U(e.stable_key_context_binding,t.stable_key_context_binding)&&fe(e.material_activation,t.material_activation)&&e.lifecycle.lifecycle_id===t.lifecycle.lifecycle_id&&e.lifecycle.work_kind===t.lifecycle.work_kind&&e.lifecycle.primitive_request_kind===t.lifecycle.primitive_request_kind&&e.lifecycle.root_share_epoch===t.lifecycle.root_share_epoch&&e.lifecycle.account_id===t.lifecycle.account_id&&e.lifecycle.session_id===t.lifecycle.session_id&&e.lifecycle.signer_set_id===t.lifecycle.signer_set_id&&e.lifecycle.selected_server_id===t.lifecycle.selected_server_id}function U(e,t){return e.length===t.length&&e.every((e,n)=>e===t[n])}function It(e,t){return e[0]===t[0]&&e[1]===t[1]}function Lt(e,t){return e.lifecycle_id===t.lifecycle_id&&e.root_share_epoch===t.root_share_epoch&&e.account_id===t.account_id&&e.threshold_session_id===t.threshold_session_id&&e.signer_set_id===t.signer_set_id&&e.signing_worker_id===t.signing_worker_id&&fe(e.material_activation,t.material_activation)}function Rt(e,t){return e.wallet_id===t.wallet_id&&e.near_ed25519_signing_key_id===t.near_ed25519_signing_key_id&&e.signing_root_id===t.signing_root_id&&e.key_creation_signer_slot===t.key_creation_signer_slot}function zt(e,t){return Lt(e.scope,t.scope)&&Rt(e.application_binding,t.application_binding)&&It(e.participant_ids,t.participant_ids)}const Bt=`registration_prepare`,Vt=`registration`,Ht=`recovery`,Ut=`recovery`,Wt=`key_export`,Gt=`export`;function W(e,t,n){let r=new Set(n);for(let n of Object.keys(e))if(!r.has(n))throw Error(`${t}.${n} is not a supported field`);for(let r of n)if(!Object.hasOwn(e,r))throw Error(`${t}.${r} is required`)}function Kt(e,t){if(!Number.isInteger(e)||typeof e!=`number`||e<=0||e>4294967295)throw Error(`${t} must be a positive u32`);return e}function qt(e,t){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<=0)throw Error(`${t} must be a positive safe integer`);return e}function Jt(e,t){switch(e){case`registration`:case`recovery`:case`refresh`:case`export`:case`lane_provisioning`:case`lane_refresh`:return e;default:throw Error(`${t} is invalid`)}}function Yt(e,t){switch(e){case`deriver_a`:case`deriver_b`:return e;default:throw Error(`${t} is invalid`)}}function Xt(e,t){switch(e){case`activation`:case`export`:return e;default:throw Error(`${t} is invalid`)}}function Zt(e,t){switch(e){case`activation_client`:case`activation_signing_worker`:case`export_client`:return e;default:throw Error(`${t} is invalid`)}}function Qt(e,t){switch(e){case`registration_prepare`:case`key_export`:case`recovery`:case`server_share_refresh`:return e;default:throw Error(`${t} is invalid`)}}function $t(e,t){switch(e){case`registration`:case`recovery`:case`export`:case`refresh`:return e;default:throw Error(`${t} is invalid`)}}function en(e){let t=d(e,`application_binding`);return W(t,`application_binding`,[`wallet_id`,`near_ed25519_signing_key_id`,`signing_root_id`,`key_creation_signer_slot`]),{wallet_id:B(t.wallet_id,`application_binding.wallet_id`),near_ed25519_signing_key_id:B(t.near_ed25519_signing_key_id,`application_binding.near_ed25519_signing_key_id`),signing_root_id:B(t.signing_root_id,`application_binding.signing_root_id`),key_creation_signer_slot:Kt(t.key_creation_signer_slot,`application_binding.key_creation_signer_slot`)}}function tn(e){let t=d(e,`scope`);W(t,`scope`,[`lifecycle_id`,`root_share_epoch`,`account_id`,`threshold_session_id`,`signer_set_id`,`signing_worker_id`,`material_activation`]);let n=B(t.account_id,`scope.account_id`),r=B(t.signing_worker_id,`scope.signing_worker_id`),i=de(t.material_activation);if(i.material_owner!==n||i.signing_worker!==r)throw Error(`scope.material_activation does not match the lifecycle owner and worker`);return{lifecycle_id:B(t.lifecycle_id,`scope.lifecycle_id`),root_share_epoch:B(t.root_share_epoch,`scope.root_share_epoch`),account_id:n,threshold_session_id:B(t.threshold_session_id,`scope.threshold_session_id`),signer_set_id:B(t.signer_set_id,`scope.signer_set_id`),signing_worker_id:r,material_activation:i}}function nn(e){if(!Array.isArray(e)||e.length!==2)throw Error(`participant_ids must contain exactly two values`);let t=Kt(e[0],`participant_ids[0]`),n=Kt(e[1],`participant_ids[1]`);if(t>65535||n>65535||t>=n)throw Error(`participant_ids must be distinct, nonzero, ascending u16 values`);return[t,n]}function rn(e){return nn(e)}function an(e){let t=d(e,`binding.lifecycle`);W(t,`binding.lifecycle`,[`lifecycle_id`,`work_kind`,`primitive_request_kind`,`root_share_epoch`,`account_id`,`session_id`,`signer_set_id`,`selected_server_id`]);let n={lifecycle_id:B(t.lifecycle_id,`binding.lifecycle.lifecycle_id`),work_kind:Qt(t.work_kind,`binding.lifecycle.work_kind`),primitive_request_kind:$t(t.primitive_request_kind,`binding.lifecycle.primitive_request_kind`),root_share_epoch:B(t.root_share_epoch,`binding.lifecycle.root_share_epoch`),account_id:B(t.account_id,`binding.lifecycle.account_id`),session_id:B(t.session_id,`binding.lifecycle.session_id`),signer_set_id:B(t.signer_set_id,`binding.lifecycle.signer_set_id`),selected_server_id:B(t.selected_server_id,`binding.lifecycle.selected_server_id`)};if(n.work_kind===Bt&&n.primitive_request_kind!==Vt||n.work_kind===Ht&&n.primitive_request_kind!==Ut||n.work_kind===Wt&&n.primitive_request_kind!==Gt)throw Error(`binding.lifecycle primitive request kind does not match its work kind`);return n}function on(e){let t=d(e,`binding`);W(t,`binding`,[`lifecycle`,`operation`,`session_id`,`stable_key_context_binding`,`material_activation`]);let n={lifecycle:an(t.lifecycle),operation:Jt(t.operation,`binding.operation`),session_id:V(t.session_id,`binding.session_id`,!0),stable_key_context_binding:V(t.stable_key_context_binding,`binding.stable_key_context_binding`,!1),material_activation:de(t.material_activation)};if(n.operation===`registration`&&n.lifecycle.work_kind!==Bt||n.operation===`recovery`&&n.lifecycle.work_kind!==Ht||n.operation===`export`&&n.lifecycle.work_kind!==Wt)throw Error(`binding operation does not match its lifecycle work kind`);if(n.material_activation.material_owner!==n.lifecycle.account_id||n.material_activation.signing_worker!==n.lifecycle.selected_server_id)throw Error(`binding material activation does not match its lifecycle owner and worker`);return n}function sn(e){return on(e)}function cn(e){let t=on(e);if(t.operation!==`export`||t.lifecycle.work_kind!==Wt||t.lifecycle.primitive_request_kind!==Gt)throw Error(`export binding requires the exact export lifecycle`);return{lifecycle:{lifecycle_id:t.lifecycle.lifecycle_id,work_kind:Wt,primitive_request_kind:Gt,root_share_epoch:t.lifecycle.root_share_epoch,account_id:t.lifecycle.account_id,session_id:t.lifecycle.session_id,signer_set_id:t.lifecycle.signer_set_id,selected_server_id:t.lifecycle.selected_server_id},operation:`export`,session_id:t.session_id,stable_key_context_binding:t.stable_key_context_binding,material_activation:t.material_activation}}function ln(e){let t=d(e,`export binding`);return W(t,`export binding`,[`ceremony`,`registered_public_key`,`state_epoch`,`runtime_policy_binding`,`authorization_digest`]),{ceremony:cn(t.ceremony),registered_public_key:V(t.registered_public_key,`export binding.registered_public_key`,!0),state_epoch:qt(t.state_epoch,`export binding.state_epoch`),runtime_policy_binding:V(t.runtime_policy_binding,`export binding.runtime_policy_binding`,!0),authorization_digest:V(t.authorization_digest,`export binding.authorization_digest`,!0)}}function un(e){switch(e.operation){case`registration`:if(e.lifecycle.work_kind!==Bt||e.lifecycle.primitive_request_kind!==Vt)throw Error(`activation binding has the wrong registration lifecycle kind`);return{lifecycle:{lifecycle_id:e.lifecycle.lifecycle_id,work_kind:Bt,primitive_request_kind:Vt,root_share_epoch:e.lifecycle.root_share_epoch,account_id:e.lifecycle.account_id,session_id:e.lifecycle.session_id,signer_set_id:e.lifecycle.signer_set_id,selected_server_id:e.lifecycle.selected_server_id},operation:`registration`,session_id:e.session_id,stable_key_context_binding:e.stable_key_context_binding,material_activation:e.material_activation};case`recovery`:if(e.lifecycle.work_kind!==Ht||e.lifecycle.primitive_request_kind!==Ut)throw Error(`activation binding has the wrong recovery lifecycle kind`);return{lifecycle:{lifecycle_id:e.lifecycle.lifecycle_id,work_kind:Ht,primitive_request_kind:Ut,root_share_epoch:e.lifecycle.root_share_epoch,account_id:e.lifecycle.account_id,session_id:e.lifecycle.session_id,signer_set_id:e.lifecycle.signer_set_id,selected_server_id:e.lifecycle.selected_server_id},operation:`recovery`,session_id:e.session_id,stable_key_context_binding:e.stable_key_context_binding,material_activation:e.material_activation};case`refresh`:case`export`:case`lane_provisioning`:case`lane_refresh`:throw Error(`activation binding has a non-activation operation`)}}function dn(e){let t=d(e,`keyset`);W(t,`keyset`,[`deriver_a_input_public_key`,`deriver_b_input_public_key`,`signing_worker_recipient_public_key`]);let n={deriver_a_input_public_key:V(t.deriver_a_input_public_key,`keyset.deriver_a_input_public_key`,!0),deriver_b_input_public_key:V(t.deriver_b_input_public_key,`keyset.deriver_b_input_public_key`,!0),signing_worker_recipient_public_key:V(t.signing_worker_recipient_public_key,`keyset.signing_worker_recipient_public_key`,!0)};if(H(n.deriver_a_input_public_key,n.deriver_b_input_public_key)||H(n.deriver_a_input_public_key,n.signing_worker_recipient_public_key)||H(n.deriver_b_input_public_key,n.signing_worker_recipient_public_key))throw Error(`keyset public keys must be distinct`);return n}function fn(e,t){let n=d(e,t);W(n,t,[`kind`,`deriver`,`operation`,`session`,`stable_context_binding`,`encapsulated_key`,`ciphertext`]);let r={kind:Xt(n.kind,`${t}.kind`),deriver:Yt(n.deriver,`${t}.deriver`),operation:Jt(n.operation,`${t}.operation`),session:V(n.session,`${t}.session`,!0),stable_context_binding:V(n.stable_context_binding,`${t}.stable_context_binding`,!0),encapsulated_key:V(n.encapsulated_key,`${t}.encapsulated_key`,!0),ciphertext:gt(n.ciphertext,`${t}.ciphertext`,16,Pt)};if(r.kind===`activation`&&r.operation===`export`||r.kind===`export`&&r.operation!==`export`)throw Error(`${t} operation does not match its circuit family`);return r}function pn(e,t,n,r){if(t.kind!==`activation`||t.deriver!==n||t.operation!==e.operation||!H(t.session,e.session_id)||!H(t.stable_context_binding,e.stable_key_context_binding))throw Error(`${r} does not match the admitted activation binding`);switch(e.operation){case`registration`:return{kind:`activation`,deriver:n,operation:`registration`,session:t.session,stable_context_binding:t.stable_context_binding,encapsulated_key:t.encapsulated_key,ciphertext:t.ciphertext};case`recovery`:return{kind:`activation`,deriver:n,operation:`recovery`,session:t.session,stable_context_binding:t.stable_context_binding,encapsulated_key:t.encapsulated_key,ciphertext:t.ciphertext}}}function mn(e,t,n,r){if(t.kind!==`export`||t.deriver!==n||t.operation!==`export`||!H(t.session,e.ceremony.session_id)||!H(t.stable_context_binding,e.ceremony.stable_key_context_binding))throw Error(`${r} does not match the admitted export binding`);return{kind:`export`,deriver:n,operation:`export`,session:t.session,stable_context_binding:t.stable_context_binding,encapsulated_key:t.encapsulated_key,ciphertext:t.ciphertext}}function hn(e,t){let n=d(e,t);return W(n,t,[`kind`,`deriver`,`session`,`transcript`,`encapsulated_key`,`ciphertext`]),{kind:Zt(n.kind,`${t}.kind`),deriver:Yt(n.deriver,`${t}.deriver`),session:V(n.session,`${t}.session`,!0),transcript:V(n.transcript,`${t}.transcript`,!0),encapsulated_key:V(n.encapsulated_key,`${t}.encapsulated_key`,!0),ciphertext:gt(n.ciphertext,`${t}.ciphertext`,16,Pt)}}function gn(e){let t=d(e,`public_receipt`);return W(t,`public_receipt`,[`transcript`,`registered_public_key`,`joined_client_commitment`,`joined_signing_worker_commitment`,`signing_worker_verifying_share`,`state_epoch`,`material_activation`]),{transcript:V(t.transcript,`public_receipt.transcript`,!0),registered_public_key:V(t.registered_public_key,`public_receipt.registered_public_key`,!0),joined_client_commitment:V(t.joined_client_commitment,`public_receipt.joined_client_commitment`,!0),joined_signing_worker_commitment:V(t.joined_signing_worker_commitment,`public_receipt.joined_signing_worker_commitment`,!0),signing_worker_verifying_share:V(t.signing_worker_verifying_share,`public_receipt.signing_worker_verifying_share`,!0),state_epoch:qt(t.state_epoch,`public_receipt.state_epoch`),material_activation:de(t.material_activation)}}function _n(e,t,n,r,i){if(n.kind!==`activation_client`||n.deriver!==r||!H(n.session,e.session_id)||!H(n.transcript,t.transcript))throw Error(`${i} does not match the terminal activation receipt`);return{kind:`activation_client`,deriver:r,session:n.session,transcript:n.transcript,encapsulated_key:n.encapsulated_key,ciphertext:n.ciphertext}}function vn(e,t,n,r,i){if(n.kind!==`export_client`||n.deriver!==r||!H(n.session,e.ceremony.session_id)||!H(n.transcript,t))throw Error(`${i} does not match the terminal export result`);return{kind:`export_client`,deriver:r,session:n.session,transcript:n.transcript,encapsulated_key:n.encapsulated_key,ciphertext:n.ciphertext}}function G(e,t){try{return{ok:!0,value:e(t)}}catch(e){return{ok:!1,code:`invalid_body`,message:e instanceof Error?e.message:String(e)}}}function yn(e){let t=d(e,`registration admission request`);return W(t,`registration admission request`,[`scope`,`application_binding`,`participant_ids`]),{scope:tn(t.scope),application_binding:en(t.application_binding),participant_ids:nn(t.participant_ids)}}function bn(e){let t=d(e,`recovery admission request`);W(t,`recovery admission request`,[`scope`,`active_material_activation`,`application_binding`,`participant_ids`,`active_capability_binding`,`replacement_capability_binding`,`registered_public_key`]);let n=V(t.active_capability_binding,`recovery admission request.active_capability_binding`,!0),r=V(t.replacement_capability_binding,`recovery admission request.replacement_capability_binding`,!0);if(H(n,r))throw Error(`recovery replacement capability binding must be fresh`);let i=tn(t.scope),a=de(t.active_material_activation),o=i.material_activation;if(a.activation_id===o.activation_id||a.lifecycle_binding===o.lifecycle_binding)throw Error(`recovery replacement material activation identity must be fresh`);if(a.capability!==o.capability||a.material_owner!==o.material_owner||a.key_binding!==o.key_binding||a.signing_worker!==o.signing_worker)throw Error(`recovery replacement material activation changed stable identity facts`);return{scope:i,active_material_activation:a,application_binding:en(t.application_binding),participant_ids:nn(t.participant_ids),active_capability_binding:n,replacement_capability_binding:r,registered_public_key:V(t.registered_public_key,`recovery admission request.registered_public_key`,!0)}}function xn(e){let t=d(e,`warm recovery bootstrap request`);if(W(t,`warm recovery bootstrap request`,[`kind`,`walletId`,`nearAccountId`,`nearEd25519SigningKeyId`,`signerSlot`,`thresholdSessionId`,`signingWorkerId`,`participantIds`]),t.kind!==`router_ab_ed25519_yao_warm_recovery_bootstrap_request_v1`)throw Error(`warm recovery bootstrap request.kind is invalid`);return{kind:`router_ab_ed25519_yao_warm_recovery_bootstrap_request_v1`,walletId:B(t.walletId,`warm recovery bootstrap request.walletId`),nearAccountId:B(t.nearAccountId,`warm recovery bootstrap request.nearAccountId`),nearEd25519SigningKeyId:B(t.nearEd25519SigningKeyId,`warm recovery bootstrap request.nearEd25519SigningKeyId`),signerSlot:qt(t.signerSlot,`warm recovery bootstrap request.signerSlot`),thresholdSessionId:B(t.thresholdSessionId,`warm recovery bootstrap request.thresholdSessionId`),signingWorkerId:B(t.signingWorkerId,`warm recovery bootstrap request.signingWorkerId`),participantIds:nn(t.participantIds)}}function Sn(e){let t=d(e,`export admission receipt`);return W(t,`export admission receipt`,[`binding`,`keyset`]),{binding:ln(t.binding),keyset:dn(t.keyset)}}function Cn(e){let t=d(e,`export execute request`);W(t,`export execute request`,[`binding`,`deriver_a_input`,`deriver_b_input`]);let n=ln(t.binding);return{binding:n,deriver_a_input:mn(n,fn(t.deriver_a_input,`deriver_a_input`),`deriver_a`,`deriver_a_input`),deriver_b_input:mn(n,fn(t.deriver_b_input,`deriver_b_input`),`deriver_b`,`deriver_b_input`)}}function wn(e){let t=d(e,`export result`);W(t,`export result`,[`binding`,`transcript`,`deriver_a_client_package`,`deriver_b_client_package`]);let n=ln(t.binding),r=V(t.transcript,`export result.transcript`,!0);return{binding:n,transcript:r,deriver_a_client_package:vn(n,r,hn(t.deriver_a_client_package,`deriver_a_client_package`),`deriver_a`,`deriver_a_client_package`),deriver_b_client_package:vn(n,r,hn(t.deriver_b_client_package,`deriver_b_client_package`),`deriver_b`,`deriver_b_client_package`)}}function Tn(e){let t=d(e,`activation admission receipt`);W(t,`activation admission receipt`,[`binding`,`keyset`]);let n=un(on(t.binding)),r=dn(t.keyset);switch(n.operation){case`registration`:return{binding:n,keyset:r};case`recovery`:return{binding:n,keyset:r}}}function En(e){let t=d(e,`activation execute request`);W(t,`activation execute request`,[`binding`,`deriver_a_input`,`deriver_b_input`]);let n=un(on(t.binding)),r=pn(n,fn(t.deriver_a_input,`deriver_a_input`),`deriver_a`,`deriver_a_input`),i=pn(n,fn(t.deriver_b_input,`deriver_b_input`),`deriver_b`,`deriver_b_input`);if(n.operation===`registration`){if(r.operation!==`registration`||i.operation!==`registration`)throw Error(`activation inputs do not match registration binding`);return{binding:n,deriver_a_input:r,deriver_b_input:i}}if(r.operation!==`recovery`||i.operation!==`recovery`)throw Error(`activation inputs do not match recovery binding`);return{binding:n,deriver_a_input:r,deriver_b_input:i}}function Dn(e){let t=d(e,`activation result`);W(t,`activation result`,[`binding`,`deriver_a_client_package`,`deriver_b_client_package`,`public_receipt`]);let n=un(on(t.binding)),r=gn(t.public_receipt);if(!fe(n.material_activation,r.material_activation))throw Error(`activation result receipt material does not match the admitted binding`);let i=hn(t.deriver_a_client_package,`deriver_a_client_package`),a=hn(t.deriver_b_client_package,`deriver_b_client_package`),o=_n(n,r,i,`deriver_a`,`deriver_a_client_package`),s=_n(n,r,a,`deriver_b`,`deriver_b_client_package`);switch(n.operation){case`registration`:return{binding:n,deriver_a_client_package:o,deriver_b_client_package:s,public_receipt:r};case`recovery`:return{binding:n,deriver_a_client_package:o,deriver_b_client_package:s,public_receipt:r}}}function On(e){let t=un(on(e));switch(t.operation){case`registration`:throw Error(`recovery activation requires a recovery binding`);case`recovery`:return t}}function kn(e){let t=d(e,`recovery activation receipt`);W(t,`recovery activation receipt`,[`binding`,`public_receipt`,`active_capability_binding`,`retired_capability_binding`]);let n=V(t.active_capability_binding,`recovery activation receipt.active_capability_binding`,!0),r=V(t.retired_capability_binding,`recovery activation receipt.retired_capability_binding`,!0);if(H(n,r))throw Error(`recovery activation receipt capability bindings must be distinct`);return{binding:On(t.binding),public_receipt:gn(t.public_receipt),active_capability_binding:n,retired_capability_binding:r}}function An(e,t){return e.binding.operation===t}function jn(e,t){return e.binding.operation===t}function Mn(e,t){return e.binding.operation===t}function Nn(e){return{ok:!1,code:`invalid_body`,message:`activation value must use the ${e} operation`}}function Pn(e){return G(yn,e)}function Fn(e){return G(bn,e)}function In(e){return G(xn,e)}function Ln(e){return G(Sn,e)}function Rn(e){return G(Cn,e)}function zn(e){return G(wn,e)}function Bn(e){return G(Tn,e)}function Vn(e){let t=Bn(e);return t.ok?An(t.value,`registration`)?{ok:!0,value:t.value}:Nn(`registration`):t}function Hn(e){let t=Bn(e);return t.ok?An(t.value,`recovery`)?{ok:!0,value:t.value}:Nn(`recovery`):t}function Un(e){return G(En,e)}function Wn(e){let t=Un(e);return t.ok?jn(t.value,`registration`)?{ok:!0,value:t.value}:Nn(`registration`):t}function Gn(e){let t=Un(e);return t.ok?jn(t.value,`recovery`)?{ok:!0,value:t.value}:Nn(`recovery`):t}function Kn(e){return G(Dn,e)}function qn(e){let t=Kn(e);return t.ok?Mn(t.value,`registration`)?{ok:!0,value:t.value}:Nn(`registration`):t}function Jn(e){let t=Kn(e);return t.ok?Mn(t.value,`recovery`)?{ok:!0,value:t.value}:Nn(`recovery`):t}function Yn(e){return G(kn,e)}function Xn(e){return G(Zn,e)}function Zn(e){return hn(e,`encrypted_package`)}const Qn=`seams/linked-device/ecdsa-source-contribution-envelope/v1`;function $n(e){let t=f(e,`linked-device ordinary source contribution`);switch(t.kind){case`linked_device_ed25519_source_contribution_v1`:return or(t);case`linked_device_ecdsa_source_contribution_v1`:return sr(t);default:throw Error(`linked-device ordinary source contribution kind is invalid`)}}function er(e){let t=J(e,[`state`,`reservation_id`,`participant_ids`,`activation_receipt`,`deriver_a_client_package`,`deriver_b_client_package`],`linked-device Ed25519 source-preserving reservation`);if(t.state!==`inactive`)throw Error(`linked-device Ed25519 source-preserving reservation is not inactive`);let n=gn(t.activation_receipt),r=rn(t.participant_ids),i=fr(t.deriver_a_client_package,`deriver_a`),a=fr(t.deriver_b_client_package,`deriver_b`);if(!U(n.transcript,i.transcript)||!U(n.transcript,a.transcript))throw Error(`linked-device Ed25519 reservation packages have mismatched transcripts`);return{state:`inactive`,reservationId:q(t.reservation_id,`reservation_id`),participantIds:r,activationReceipt:n,deriver_a_client_package:i,deriver_b_client_package:a}}function tr(e){if(!Array.isArray(e)||e.length===0||e.length>2)throw Error(`linked-device ordinary source contributions must contain one or two entries`);let t=e.map($n),n=t.map(e=>e.keyFamily);if(new Set(n).size!==n.length)throw Error(`linked-device ordinary source contributions repeat a key family`);if(t.length===2&&(t[0]?.keyFamily!==`ed25519`||t[1]?.keyFamily!==`ecdsa_secp256k1`))throw Error(`linked-device ordinary source contributions must be Ed25519 then ECDSA`);let r=t[0];if(!r)throw Error(`linked-device ordinary source contributions are empty`);return[r,...t.slice(1)]}function nr(e){let t=J(e,[`linkSessionId`,`enrollmentId`,`sourceAuthorityId`,`source`,`target`],`linked-device ECDSA source contribution preparation`),n=gr(t.source),r=_r(t.target);return wr(n.activation,r.activation),{linkSessionId:Dr(t.linkSessionId),enrollmentId:Or(t.enrollmentId),sourceAuthorityId:kr(t.sourceAuthorityId),source:n,target:r}}function rr(e){let t=f(e,`linked-device ordinary source contribution preparation`);if(t.kind===`linked_device_ed25519_source_contribution_preparation_v1`)return ar(t);if(Object.prototype.hasOwnProperty.call(t,`source`)&&Object.prototype.hasOwnProperty.call(t,`target`))return nr(t);throw Error(`linked-device ordinary source contribution preparation family is invalid`)}function ir(e){if(!Array.isArray(e)||e.length===0||e.length>2)throw Error(`linked-device ordinary source contribution preparations must contain one or two entries`);let t=e.map(rr),n=t.map(e=>`kind`in e?`ed25519`:`ecdsa_secp256k1`);if(new Set(n).size!==n.length)throw Error(`linked-device ordinary source contribution preparations repeat a key family`);if(t.length===2&&(n[0]!==`ed25519`||n[1]!==`ecdsa_secp256k1`))throw Error(`linked-device ordinary source contribution preparations must be ordered Ed25519 then ECDSA`);let r=t[0];if(!r)throw Error(`linked-device ordinary source contribution preparation is empty`);return[r,...t.slice(1)]}function ar(e){if(J(e,[`kind`,`linkSessionId`,`enrollmentId`,`sourceAuthorityId`,`walletKeyId`,`targetDeviceId`,`targetFactorVerificationDigestB64u`,`sourceBinding`,`targetAdmission`,`applicationBinding`,`sourceRevocationEpoch`,`participantIds`,`targetMaterialActivation`,`targetClientRecipientPublicKeyB64u`,`targetSigningWorkerRecipientPublicKeyB64u`,`sourceRegisteredPublicKeyB64u`],`linked-device Ed25519 source contribution preparation`),e.kind!==`linked_device_ed25519_source_contribution_preparation_v1`)throw Error(`linked-device Ed25519 source contribution preparation kind is invalid`);let t=yr(e.sourceBinding,`sourceBinding`),n=Vn(e.targetAdmission);if(!n.ok)throw Error(`targetAdmission ${n.message}`);let r=n.value,i=en(e.applicationBinding);if(typeof e.sourceRevocationEpoch!=`number`||!Number.isSafeInteger(e.sourceRevocationEpoch)||e.sourceRevocationEpoch<0)throw Error(`sourceRevocationEpoch must be a non-negative safe integer`);let a=Er(e.targetMaterialActivation,`targetMaterialActivation`),o=Dr(e.linkSessionId),s=Or(e.enrollmentId),c=kr(e.sourceAuthorityId),l=Ar(e.walletKeyId),ee=jr(e.targetDeviceId),d=Mr(e.targetFactorVerificationDigestB64u,`targetFactorVerificationDigestB64u`),te=K(e.targetClientRecipientPublicKeyB64u,32,`targetClientRecipientPublicKeyB64u`),f=K(e.targetSigningWorkerRecipientPublicKeyB64u,32,`targetSigningWorkerRecipientPublicKeyB64u`);if(te===f)throw Error(`linked-device Ed25519 source contribution recipients must differ`);let p=rn(e.participantIds);if(xr(t,o,`sourceBinding`),!u(a,ye(r.binding.material_activation)))throw Error(`targetAdmission activation differs from targetMaterialActivation`);if(!Sr(t,r.binding))throw Error(`source and target Ed25519 contribution bindings differ`);if(t.material_activation.activation_id===a.activationId)throw Error(`source and target Ed25519 contribution activations must differ`);return{kind:`linked_device_ed25519_source_contribution_preparation_v1`,linkSessionId:o,enrollmentId:s,sourceAuthorityId:c,walletKeyId:l,targetDeviceId:ee,targetFactorVerificationDigestB64u:d,sourceBinding:t,targetAdmission:r,applicationBinding:i,sourceRevocationEpoch:e.sourceRevocationEpoch,participantIds:p,targetMaterialActivation:a,targetClientRecipientPublicKeyB64u:te,targetSigningWorkerRecipientPublicKeyB64u:f,sourceRegisteredPublicKeyB64u:ce(e.sourceRegisteredPublicKeyB64u,`sourceRegisteredPublicKeyB64u`)}}function or(e){if(J(e,[`kind`,`keyFamily`,`linkSessionId`,`enrollmentId`,`sourceAuthorityId`,`walletKeyId`,`targetDeviceId`,`targetFactorVerificationDigestB64u`,`targetMaterialActivation`,`targetClientRecipientPublicKeyB64u`,`targetSigningWorkerRecipientPublicKeyB64u`,`sourceBinding`,`reservationId`,`targetBinding`,`activationReceipt`,`participantIds`,`deriver_a_client_package`,`deriver_b_client_package`,`sourceRegisteredPublicKeyB64u`],`linked-device Ed25519 source contribution`),e.kind!==`linked_device_ed25519_source_contribution_v1`)throw Error(`linked-device Ed25519 source contribution kind is invalid`);if(e.keyFamily!==`ed25519`)throw Error(`linked-device Ed25519 source contribution family is invalid`);let t=yr(e.sourceBinding,`sourceBinding`),n=Er(e.targetMaterialActivation,`source contribution targetMaterialActivation`),r=yr(e.targetBinding,`targetBinding`),i=gn(e.activationReceipt),a=q(e.reservationId,`reservationId`),o=rn(e.participantIds),s=Dr(e.linkSessionId),c=Or(e.enrollmentId),l=kr(e.sourceAuthorityId),ee=Ar(e.walletKeyId),d=jr(e.targetDeviceId),te=Mr(e.targetFactorVerificationDigestB64u,`targetFactorVerificationDigestB64u`),f=K(e.targetClientRecipientPublicKeyB64u,32,`targetClientRecipientPublicKeyB64u`),p=K(e.targetSigningWorkerRecipientPublicKeyB64u,32,`targetSigningWorkerRecipientPublicKeyB64u`);if(f===p)throw Error(`linked-device Ed25519 source contribution recipients must differ`);if(xr(t,s,`sourceBinding`),br(r,s,n,`targetBinding`),!Sr(t,r))throw Error(`linked-device Ed25519 source contribution stable identity differs`);if(!u(ye(i.material_activation),n))throw Error(`linked-device Ed25519 source contribution receipt activation differs`);let ne=ce(e.sourceRegisteredPublicKeyB64u,`sourceRegisteredPublicKeyB64u`);if(!U(i.registered_public_key,Array.from(m(ne))))throw Error(`linked-device Ed25519 source contribution receipt public key differs`);let re=fr(e.deriver_a_client_package,`deriver_a`),h=fr(e.deriver_b_client_package,`deriver_b`);if(!U(i.transcript,re.transcript)||!U(i.transcript,h.transcript))throw Error(`linked-device Ed25519 source contribution package transcript differs`);if(t.material_activation.activation_id===n.activationId)throw Error(`linked-device Ed25519 source contribution reuses the source activation`);return{kind:`linked_device_ed25519_source_contribution_v1`,keyFamily:`ed25519`,linkSessionId:s,enrollmentId:c,sourceAuthorityId:l,walletKeyId:ee,targetDeviceId:d,targetFactorVerificationDigestB64u:te,targetMaterialActivation:n,targetClientRecipientPublicKeyB64u:f,targetSigningWorkerRecipientPublicKeyB64u:p,sourceBinding:t,reservationId:a,targetBinding:r,activationReceipt:i,participantIds:o,deriver_a_client_package:re,deriver_b_client_package:h,sourceRegisteredPublicKeyB64u:ne}}function sr(e){if(J(e,[`kind`,`keyFamily`,`linkSessionId`,`enrollmentId`,`sourceAuthorityId`,`walletKeyId`,`targetDeviceId`,`targetFactorVerificationDigestB64u`,`sourceSigner`,`sourceDerivation`,`target`,`package`],`linked-device ECDSA source contribution`),e.kind!==`linked_device_ecdsa_source_contribution_v1`)throw Error(`linked-device ECDSA source contribution kind is invalid`);if(e.keyFamily!==`ecdsa_secp256k1`)throw Error(`linked-device ECDSA source contribution family is invalid`);let t=Dr(e.linkSessionId),n=Or(e.enrollmentId),r=kr(e.sourceAuthorityId),i=Ar(e.walletKeyId),a=jr(e.targetDeviceId),o=Mr(e.targetFactorVerificationDigestB64u,`targetFactorVerificationDigestB64u`),s=gr(e.sourceSigner),c=cr(e.sourceDerivation),l=_r(e.target);wr(s.activation,l.activation);let u=mr(e.package);if(u.binding.linkSessionId!==t||u.binding.enrollmentId!==n||u.binding.sourceAuthorityId!==r||u.binding.target.targetDeviceId!==a||u.binding.target.targetFactorVerificationDigestB64u!==o)throw Error(`linked-device ECDSA source contribution package binding differs`);if(!Cr(u.binding.source,s))throw Error(`linked-device ECDSA source contribution signer differs from package binding`);if(!Tr(u.binding.target,l))throw Error(`linked-device ECDSA source contribution target differs from package binding`);return{kind:`linked_device_ecdsa_source_contribution_v1`,keyFamily:`ecdsa_secp256k1`,linkSessionId:t,enrollmentId:n,sourceAuthorityId:r,walletKeyId:i,targetDeviceId:a,targetFactorVerificationDigestB64u:o,sourceSigner:s,sourceDerivation:c,target:l,package:u}}function cr(e){let t=J(e,[`applicationBindingDigestB64u`,`clientShareRetryCounter`,`ecdsaThresholdKeyId`,`sourceNormalSigning`],`linked-device ECDSA source derivation`),n=t.clientShareRetryCounter;if(typeof n!=`number`||!Number.isSafeInteger(n)||n<0)throw Error(`linked-device ECDSA source derivation retry counter is invalid`);let r=Mr(t.applicationBindingDigestB64u,`sourceDerivation.applicationBindingDigestB64u`),i=Ce(t.sourceNormalSigning),a=Te(t.ecdsaThresholdKeyId);if(i.scope.context.application_binding_digest_b64u!==r||i.scope.public_identity.client_share_retry_counter!==n||i.scope.ecdsa_threshold_key_id!==a)throw Error(`linked-device ECDSA source derivation differs from normal signing`);return{applicationBindingDigestB64u:r,clientShareRetryCounter:n,ecdsaThresholdKeyId:a,sourceNormalSigning:i}}function lr(e){let t=J(e,[`state`,`binding`,`sourceDerivation`,`targetRelayerPublicKey33B64u`,`thresholdPublicKey33B64u`,`thresholdEthereumAddress20B64u`,`normalSigning`],`linked-device ECDSA source-preserving activation receipt`);if(t.state!==`inactive`)throw Error(`linked-device ECDSA source-preserving activation receipt is not inactive`);let n=hr(t.binding),r=cr(t.sourceDerivation),i=h(t.targetRelayerPublicKey33B64u,`targetRelayerPublicKey33B64u`),a=h(t.thresholdPublicKey33B64u,`thresholdPublicKey33B64u`),o=K(t.thresholdEthereumAddress20B64u,20,`thresholdEthereumAddress20B64u`),s=Ce(t.normalSigning);return ur({binding:n,sourceDerivation:r,targetRelayerPublicKey33B64u:i,thresholdPublicKey33B64u:a,thresholdEthereumAddress20B64u:o,normalSigning:s}),{state:`inactive`,binding:n,sourceDerivation:r,targetRelayerPublicKey33B64u:i,thresholdPublicKey33B64u:a,thresholdEthereumAddress20B64u:o,normalSigning:s}}function ur(e){let t=e.sourceDerivation.sourceNormalSigning.scope,n=e.normalSigning.scope;if(!u(ye(t.material_activation),e.binding.source.activation)||!u(ye(n.material_activation),e.binding.target.activation)||t.wallet_id!==n.wallet_id||t.wallet_id!==e.binding.source.activation.materialOwner||n.wallet_id!==e.binding.target.activation.materialOwner||t.ecdsa_threshold_key_id!==n.ecdsa_threshold_key_id||t.signing_root_id!==n.signing_root_id||t.signing_root_version!==n.signing_root_version||t.context.application_binding_digest_b64u!==n.context.application_binding_digest_b64u||t.activation_epoch!==n.activation_epoch||t.public_identity.derivation_client_share_public_key33_b64u!==e.binding.source.clientPublicKey33B64u||t.public_identity.server_public_key33_b64u!==e.binding.source.relayerPublicKey33B64u||t.public_identity.threshold_public_key33_b64u!==e.binding.source.thresholdPublicKey33B64u||t.public_identity.ethereum_address20_b64u!==e.binding.source.thresholdEthereumAddress20B64u||n.public_identity.context_binding_b64u!==t.public_identity.context_binding_b64u||n.public_identity.derivation_client_share_public_key33_b64u!==e.binding.targetClientPublicKey33B64u||n.public_identity.server_public_key33_b64u!==e.targetRelayerPublicKey33B64u||n.public_identity.threshold_public_key33_b64u!==e.thresholdPublicKey33B64u||n.public_identity.ethereum_address20_b64u!==e.thresholdEthereumAddress20B64u||n.public_identity.client_share_retry_counter!==t.public_identity.client_share_retry_counter||n.public_identity.server_share_retry_counter!==t.public_identity.server_share_retry_counter||n.signing_worker.server_id!==e.binding.target.activation.signingWorker||n.signing_worker.key_epoch!==t.signing_worker.key_epoch||n.signing_worker.recipient_encryption_key!==dr(e.binding.target.signingWorkerRecipientPublicKeyB64u))throw Error(`linked-device ECDSA normal signing state differs from its activation receipt`)}function dr(e){let t=m(e);if(t.length!==32||p(t)!==e)throw Error(`linked-device signing-worker recipient key is invalid`);let n=``;for(let e of t)n+=e.toString(16).padStart(2,`0`);return`x25519:${n}`}function fr(e,t){let n=pr(e,`${t} client package`);if(n.kind!==`activation_client`||n.deriver!==t)throw Error(`${t} client package is not an activation client package`);return t===`deriver_a`?{kind:`activation_client`,deriver:`deriver_a`,session:n.session,transcript:n.transcript,encapsulated_key:n.encapsulated_key,ciphertext:n.ciphertext}:{kind:`activation_client`,deriver:`deriver_b`,session:n.session,transcript:n.transcript,encapsulated_key:n.encapsulated_key,ciphertext:n.ciphertext}}function pr(e,t){let n=Xn(e);if(!n.ok)throw Error(`${t} ${n.message}`);return n.value}function mr(e){let t=J(e,[`binding`,`encryptedDelta`,`encryptedTargetClientShare`],`linked-device ECDSA source contribution package`),n=hr(t.binding),r=vr(t.encryptedDelta,`encryptedDelta`),i=vr(t.encryptedTargetClientShare,`encryptedTargetClientShare`),a=r.bindingDigestB64u;if(i.bindingDigestB64u!==a)throw Error(`linked-device ECDSA source contribution envelope bindings differ`);if(r.recipientPublicKeyB64u!==n.target.signingWorkerRecipientPublicKeyB64u||i.recipientPublicKeyB64u!==n.target.clientRecipientPublicKeyB64u)throw Error(`linked-device ECDSA source contribution envelope recipients differ`);return{binding:n,encryptedDelta:r,encryptedTargetClientShare:i}}function hr(e){let t=J(e,[`linkSessionId`,`enrollmentId`,`sourceAuthorityId`,`source`,`target`,`targetClientPublicKey33B64u`],`linked-device ECDSA source contribution binding`),n=gr(t.source),r=_r(t.target);return wr(n.activation,r.activation),{linkSessionId:q(t.linkSessionId,`binding.linkSessionId`),enrollmentId:q(t.enrollmentId,`binding.enrollmentId`),sourceAuthorityId:q(t.sourceAuthorityId,`binding.sourceAuthorityId`),source:n,target:r,targetClientPublicKey33B64u:h(t.targetClientPublicKey33B64u,`binding.targetClientPublicKey33B64u`)}}function gr(e){let t=J(e,[`activation`,`clientPublicKey33B64u`,`relayerPublicKey33B64u`,`thresholdPublicKey33B64u`,`thresholdEthereumAddress20B64u`],`linked-device ECDSA source signer`);return{activation:Er(t.activation,`source.activation`),clientPublicKey33B64u:h(t.clientPublicKey33B64u,`source.clientPublicKey33B64u`),relayerPublicKey33B64u:h(t.relayerPublicKey33B64u,`source.relayerPublicKey33B64u`),thresholdPublicKey33B64u:h(t.thresholdPublicKey33B64u,`source.thresholdPublicKey33B64u`),thresholdEthereumAddress20B64u:K(t.thresholdEthereumAddress20B64u,20,`source.thresholdEthereumAddress20B64u`)}}function _r(e){let t=J(e,[`activation`,`targetDeviceId`,`targetFactorVerificationDigestB64u`,`clientRecipientPublicKeyB64u`,`signingWorkerRecipientPublicKeyB64u`],`linked-device ECDSA target recipient`),n=K(t.clientRecipientPublicKeyB64u,32,`target.clientRecipientPublicKeyB64u`),r=K(t.signingWorkerRecipientPublicKeyB64u,32,`target.signingWorkerRecipientPublicKeyB64u`);if(n===r)throw Error(`linked-device ECDSA target recipients must differ`);return{activation:Er(t.activation,`target.activation`),targetDeviceId:jr(t.targetDeviceId),targetFactorVerificationDigestB64u:Mr(t.targetFactorVerificationDigestB64u,`target.targetFactorVerificationDigestB64u`),clientRecipientPublicKeyB64u:n,signingWorkerRecipientPublicKeyB64u:r}}function vr(e,t){let n=J(e,[`kind`,`recipientPublicKeyB64u`,`bindingDigestB64u`,`encappedKeyB64u`,`ciphertextB64u`],`linked-device ECDSA ${t}`);if(n.kind!==Qn)throw Error(`${t}.kind is invalid`);return{kind:Qn,recipientPublicKeyB64u:K(n.recipientPublicKeyB64u,32,`${t}.recipientPublicKeyB64u`),bindingDigestB64u:Mr(n.bindingDigestB64u,`${t}.bindingDigestB64u`),encappedKeyB64u:K(n.encappedKeyB64u,32,`${t}.encappedKeyB64u`),ciphertextB64u:ie(n.ciphertextB64u,`${t}.ciphertextB64u`)}}function yr(e,t){let n=sn(e);if(n.operation!==`registration`)throw Error(`${t} must use the registration operation`);return n}function br(e,t,n,r){if(e.material_activation.activation_id!==n.activationId)throw Error(`${r} activation does not match the target activation`);if(e.material_activation.material_owner!==n.materialOwner)throw Error(`${r} material owner does not match the target activation`);if(e.material_activation.signing_worker!==n.signingWorker)throw Error(`${r} signing worker does not match the target activation`);if(e.session_id.length!==32||String(t).length===0)throw Error(`${r} link binding is invalid`)}function xr(e,t,n){if(e.session_id.length!==32||String(t).length===0)throw Error(`${n} link binding is invalid`)}function Sr(e,t){return e.operation===t.operation&&e.stable_key_context_binding.every((e,n)=>e===t.stable_key_context_binding[n])&&e.material_activation.capability===t.material_activation.capability&&e.material_activation.material_owner===t.material_activation.material_owner&&e.material_activation.key_binding===t.material_activation.key_binding&&e.material_activation.lifecycle_binding===t.material_activation.lifecycle_binding&&e.material_activation.signing_worker===t.material_activation.signing_worker&&e.lifecycle.root_share_epoch===t.lifecycle.root_share_epoch&&e.lifecycle.account_id===t.lifecycle.account_id&&e.lifecycle.signer_set_id===t.lifecycle.signer_set_id&&e.lifecycle.selected_server_id===t.lifecycle.selected_server_id}function Cr(e,t){return u(e.activation,t.activation)&&e.clientPublicKey33B64u===t.clientPublicKey33B64u&&e.relayerPublicKey33B64u===t.relayerPublicKey33B64u&&e.thresholdPublicKey33B64u===t.thresholdPublicKey33B64u&&e.thresholdEthereumAddress20B64u===t.thresholdEthereumAddress20B64u}function wr(e,t){if(u(e,t)||e.materialOwner!==t.materialOwner||e.signingWorker!==t.signingWorker)throw Error(`linked-device ECDSA source and target activations are invalid`)}function Tr(e,t){return u(e.activation,t.activation)&&e.targetDeviceId===t.targetDeviceId&&e.targetFactorVerificationDigestB64u===t.targetFactorVerificationDigestB64u&&e.clientRecipientPublicKeyB64u===t.clientRecipientPublicKeyB64u&&e.signingWorkerRecipientPublicKeyB64u===t.signingWorkerRecipientPublicKeyB64u}function Er(e,t){let n=o(e);if(!n.ok)throw Error(`${t} ${n.error.message}`);return n.value}function Dr(e){let t=c(q(e,`linkSessionId`));if(!t.ok)throw Error(`linkSessionId ${t.error.message}`);return t.value}function Or(e){let t=ee(q(e,`enrollmentId`));if(!t.ok)throw Error(`enrollmentId ${t.error.message}`);return t.value}function kr(t){let n=e(q(t,`sourceAuthorityId`));if(!n.ok)throw Error(`sourceAuthorityId ${n.error.message}`);return n.value}function Ar(e){let t=s(q(e,`walletKeyId`));if(!t.ok)throw Error(`walletKeyId ${t.error.message}`);return t.value}function jr(e){let t=Ae(q(e,`targetDeviceId`));if(!t.ok)throw Error(`targetDeviceId ${t.error.message}`);return t.value}function Mr(e,t){try{return P(e)}catch(e){throw Error(`${t} ${e instanceof Error?e.message:`is invalid`}`)}}function K(e,t,n){if(typeof e!=`string`||!/^[A-Za-z0-9_-]+$/.test(e))throw Error(`${n} must be canonical base64url`);let r;try{r=m(e)}catch{throw Error(`${n} must be canonical base64url`)}if(r.length!==t||p(r)!==e)throw Error(`${n} must decode to ${t} bytes`);return e}function q(e,t){if(typeof e!=`string`||e.length===0||e.trim()!==e||[...e].some(e=>{let t=e.charCodeAt(0);return t<32||t===127}))throw Error(`${t} must be a non-empty visible string`);return e}function J(e,t,n){let r=f(e,n),i=new Set(t),a=Object.keys(r);if(a.length!==t.length||a.some(e=>!i.has(e))||t.some(e=>!Object.prototype.hasOwnProperty.call(r,e)))throw Error(`${n} contains unknown or missing fields`);return r}function Nr(e){let t=Hr(e);if(t.kind!==`committed_authority_packages_v1`)throw Error(`CommittedAuthorityPackagesV1.kind is invalid`);let n=Ge(t.authority);if(!n.ok||n.value.state!==`pending_local_install`)throw Error(`CommittedAuthorityPackagesV1.authority is not pending`);let r=qe(t.authMethod);if(!r||r.status!==`pending_local_install`)throw Error(`CommittedAuthorityPackagesV1.authMethod is not pending`);if(r.walletId!==n.value.walletId||r.walletAuthorityId!==n.value.authorityId)throw Error(`CommittedAuthorityPackagesV1 authority and auth method identities differ`);let i=Fr(t.signerPackages);Pr(i,n.value.signerActivations);let a=t.ed25519ExportRootPackage===null?null:ot(t.ed25519ExportRootPackage);if(a&&(a.walletId!==n.value.walletId||a.revocationEpoch!==n.value.revocationEpoch||n.value.provenance.kind!==`device_link`||a.enrollmentId!==n.value.provenance.enrollmentId||a.linkSessionId!==n.value.provenance.linkSessionId||String(a.deviceId)!==String(n.value.principal.deviceId)))throw Error(`CommittedAuthorityPackagesV1 export root identity does not match authority`);return{kind:`committed_authority_packages_v1`,authority:n.value,authMethod:r,signerPackages:i,ed25519ExportRootPackage:a,packageSetDigestB64u:Ir(t.packageSetDigestB64u)}}function Pr(e,t){if(e.keyFamilies.length!==t.keyFamilies.length)throw Error(`CommittedAuthorityPackagesV1 signer families do not match authority`);for(let n=0;n<e.keyFamilies.length;n+=1)if(e.keyFamilies[n]!==t.keyFamilies[n])throw Error(`CommittedAuthorityPackagesV1 signer family order does not match authority`);if(e.keyFamilies.length===1&&e.keyFamilies[0]===`ed25519`){if(!t.ed25519||!e.ed25519)throw Error(`CommittedAuthorityPackagesV1 Ed25519 activation is missing`);if(!u(e.ed25519.materialActivation,t.ed25519.materialActivation))throw Error(`CommittedAuthorityPackagesV1 Ed25519 activation does not match authority`);return}if(e.keyFamilies.length===1&&e.keyFamilies[0]===`ecdsa_secp256k1`){if(!t.ecdsa||!e.ecdsa)throw Error(`CommittedAuthorityPackagesV1 ECDSA activation is missing`);if(!u(e.ecdsa.materialActivation,t.ecdsa.materialActivation))throw Error(`CommittedAuthorityPackagesV1 ECDSA activation does not match authority`);return}if(!t.ed25519||!t.ecdsa||!e.ed25519||!e.ecdsa)throw Error(`CommittedAuthorityPackagesV1 combined activations are incomplete`);if(!u(e.ed25519.materialActivation,t.ed25519.materialActivation)||!u(e.ecdsa.materialActivation,t.ecdsa.materialActivation))throw Error(`CommittedAuthorityPackagesV1 activation references do not match authority`)}function Fr(e){let t=Ur(e);if(t.kind!==`committed_signer_package_set_v1`)throw Error(`CommittedSignerPackageSetV1.kind is invalid`);let n=Vr(t.keyFamilies);if(n.length===1&&n[0]===`ed25519`){if(!(`ed25519`in t))throw Error(`CommittedSignerPackageSetV1 fields are invalid`);return{kind:`committed_signer_package_set_v1`,keyFamilies:n,ed25519:Lr(t.ed25519)}}if(n.length===1&&n[0]===`ecdsa_secp256k1`){if(!(`ecdsa`in t))throw Error(`CommittedSignerPackageSetV1 fields are invalid`);return{kind:`committed_signer_package_set_v1`,keyFamilies:n,ecdsa:Rr(t.ecdsa)}}if(!(`ed25519`in t)||!(`ecdsa`in t))throw Error(`CommittedSignerPackageSetV1 fields are invalid`);let r=Lr(t.ed25519),i=Rr(t.ecdsa);if(r.materialActivation.activationId===i.materialActivation.activationId)throw Error(`CommittedSignerPackageSetV1 activation references must be distinct`);return{kind:`committed_signer_package_set_v1`,keyFamilies:n,ed25519:r,ecdsa:i}}function Ir(e){return P(e)}function Lr(e){let t=Wr(e);if(t.kind!==`committed_ed25519_signer_package_v1`)throw Error(`CommittedEd25519SignerPackageV1.kind is invalid`);let n=Br(t.materialActivation,`materialActivation`),r=sn(t.targetBinding),i=en(t.applicationBinding),a=gn(t.activationReceipt);if(!u(n,ye(a.material_activation)))throw Error(`CommittedEd25519SignerPackageV1 activation receipt does not match material`);if(!u(n,ye(r.material_activation)))throw Error(`CommittedEd25519SignerPackageV1 target binding does not match material`);let o=zr(t.deriver_a_client_package,`deriver_a_client_package`,`deriver_a`),s=zr(t.deriver_b_client_package,`deriver_b_client_package`,`deriver_b`);if(!U(a.transcript,o.transcript)||!U(a.transcript,s.transcript))throw Error(`CommittedEd25519SignerPackageV1 receipt transcript does not match packages`);return{kind:`committed_ed25519_signer_package_v1`,materialActivation:n,targetBinding:r,applicationBinding:i,participantIds:rn(t.participantIds),activationReceipt:a,deriver_a_client_package:o,deriver_b_client_package:s}}function Rr(e){let t=Gr(e);if(t.kind!==`committed_ecdsa_signer_package_v1`)throw Error(`CommittedEcdsaSignerPackageV1.kind is invalid`);let n=Br(t.materialActivation,`materialActivation`),r=lr(t.activationReceipt),i=r.binding.target.activation;if(!u(n,i))throw Error(`CommittedEcdsaSignerPackageV1 receipt activation does not match material`);let a=vr(t.encryptedTargetClientShare,`encryptedTargetClientShare`);if(a.recipientPublicKeyB64u!==r.binding.target.clientRecipientPublicKeyB64u)throw Error(`CommittedEcdsaSignerPackageV1 client share recipient does not match receipt`);return{kind:`committed_ecdsa_signer_package_v1`,materialActivation:n,encryptedTargetClientShare:a,activationReceipt:r}}function zr(e,t,n){let r=Xn(e);if(!r.ok)throw Error(`${t} ${r.message}`);if(r.value.kind!==`activation_client`||r.value.deriver!==n)throw Error(`${t} must be an activation_client for ${n}`);return{kind:`activation_client`,deriver:n,session:r.value.session,transcript:r.value.transcript,encapsulated_key:r.value.encapsulated_key,ciphertext:r.value.ciphertext}}function Br(e,t){let n=o(e);if(!n.ok)throw Error(`${t} ${n.error.message}`);return n.value}function Vr(e){if(!Array.isArray(e))throw Error(`CommittedSignerPackageSetV1.keyFamilies must be an array`);if(e.length===1&&e[0]===`ed25519`)return[`ed25519`];if(e.length===1&&e[0]===`ecdsa_secp256k1`)return[`ecdsa_secp256k1`];if(e.length===2&&e[0]===`ed25519`&&e[1]===`ecdsa_secp256k1`)return[`ed25519`,`ecdsa_secp256k1`];throw Error(`CommittedSignerPackageSetV1.keyFamilies must use canonical family order`)}function Hr(e){let t=Kr(e);if(t===null)throw Error(`CommittedAuthorityPackagesV1 must be an object`);return Y(t,[`kind`,`authority`,`authMethod`,`signerPackages`,`ed25519ExportRootPackage`,`packageSetDigestB64u`],`CommittedAuthorityPackagesV1`),{kind:Reflect.get(t,`kind`),authority:Reflect.get(t,`authority`),authMethod:Reflect.get(t,`authMethod`),signerPackages:Reflect.get(t,`signerPackages`),ed25519ExportRootPackage:Reflect.get(t,`ed25519ExportRootPackage`),packageSetDigestB64u:Reflect.get(t,`packageSetDigestB64u`)}}function Ur(e){let t=Kr(e);if(t===null)throw Error(`CommittedSignerPackageSetV1 must be an object`);let n=Object.keys(t),r=n.includes(`ed25519`),i=n.includes(`ecdsa`);return r&&i?(Y(t,[`kind`,`keyFamilies`,`ed25519`,`ecdsa`],`CommittedSignerPackageSetV1`),{kind:Reflect.get(t,`kind`),keyFamilies:Reflect.get(t,`keyFamilies`),ed25519:Reflect.get(t,`ed25519`),ecdsa:Reflect.get(t,`ecdsa`)}):r?(Y(t,[`kind`,`keyFamilies`,`ed25519`],`CommittedSignerPackageSetV1`),{kind:Reflect.get(t,`kind`),keyFamilies:Reflect.get(t,`keyFamilies`),ed25519:Reflect.get(t,`ed25519`)}):i?(Y(t,[`kind`,`keyFamilies`,`ecdsa`],`CommittedSignerPackageSetV1`),{kind:Reflect.get(t,`kind`),keyFamilies:Reflect.get(t,`keyFamilies`),ecdsa:Reflect.get(t,`ecdsa`)}):(Y(t,[`kind`,`keyFamilies`],`CommittedSignerPackageSetV1`),{kind:Reflect.get(t,`kind`),keyFamilies:Reflect.get(t,`keyFamilies`)})}function Wr(e){let t=Kr(e);if(t===null)throw Error(`CommittedEd25519SignerPackageV1 must be an object`);return Y(t,[`kind`,`materialActivation`,`targetBinding`,`applicationBinding`,`participantIds`,`activationReceipt`,`deriver_a_client_package`,`deriver_b_client_package`],`CommittedEd25519SignerPackageV1`),{kind:Reflect.get(t,`kind`),materialActivation:Reflect.get(t,`materialActivation`),targetBinding:Reflect.get(t,`targetBinding`),applicationBinding:Reflect.get(t,`applicationBinding`),participantIds:Reflect.get(t,`participantIds`),activationReceipt:Reflect.get(t,`activationReceipt`),deriver_a_client_package:Reflect.get(t,`deriver_a_client_package`),deriver_b_client_package:Reflect.get(t,`deriver_b_client_package`)}}function Gr(e){let t=Kr(e);if(t===null)throw Error(`CommittedEcdsaSignerPackageV1 must be an object`);return Y(t,[`kind`,`materialActivation`,`encryptedTargetClientShare`,`activationReceipt`],`CommittedEcdsaSignerPackageV1`),{kind:Reflect.get(t,`kind`),materialActivation:Reflect.get(t,`materialActivation`),encryptedTargetClientShare:Reflect.get(t,`encryptedTargetClientShare`),activationReceipt:Reflect.get(t,`activationReceipt`)}}function Kr(e){return typeof e==`object`&&e&&!Array.isArray(e)?e:null}function Y(e,t,n){let r=new Set(t),i=Object.keys(e);if(i.length!==t.length)throw Error(`${n} contains unexpected fields`);for(let e of i)if(!r.has(e))throw Error(`${n} contains unexpected fields`);for(let r of t)if(!Object.prototype.hasOwnProperty.call(e,r))throw Error(`${n}.${r} is required`)}const qr=[`version`,`purpose`,`linkSessionId`,`linkPublicKeyB64u`,`devicePublicKeyB64u`,`requestedPermission`,`targetFactor`,`issuedAtMs`,`expiresAtMs`];function Jr(...e){return(t,n)=>{if(!e.includes(t))throw Error(`${n} is unsupported`);return t}}function Yr(e,t){if(typeof e!=`string`||!/^[0-9a-f]{64}$/.test(e))throw Error(`${t} must be 32 canonical lowercase hex bytes`);return e}function Xr(e,t){if(typeof e!=`string`||e.length===0||!/^[A-Za-z0-9_-]+$/.test(e))throw Error(`${t} must be canonical unpadded base64url`);try{let t=m(e);if(t.length!==32||p(t)!==e)throw Error(`non-canonical`)}catch{throw Error(`${t} must be a canonical 32-byte unpadded base64url key`)}return e}function Zr(e,t){if(typeof e!=`string`||e.length===0||!/^[A-Za-z0-9_-]+$/.test(e))throw Error(`${t} must be canonical unpadded base64url`);try{let t=m(e);if(t.length===0||p(t)!==e)throw Error(`non-canonical`)}catch{throw Error(`${t} must be canonical unpadded base64url`)}return e}function Qr(e,t,n){let r=Zr(e,n),i=m(r);try{if(i.length!==t)throw Error(`${n} must encode ${t} bytes`);return r}finally{i.fill(0)}}const X=BigInt(`0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff`),$r=X-3n,ei=BigInt(`0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b`);function ti(e){let t=0n;for(let n of e)t=t<<8n|BigInt(n);return t}function ni(e){let t=ti(e.subarray(1,33)),n=ti(e.subarray(33,65));return t>=X||n>=X?!1:n*n%X===(t*t*t%X+$r*t%X+ei)%X}function ri(e,t){let n=Qr(e,65,t),r=m(n);try{if(r[0]!==4)throw Error(`${t} must be an uncompressed SEC1 P-256 point`);if(!ni(r))throw Error(`${t} must be an on-curve P-256 point`);return n}finally{r.fill(0)}}function ii(e){return Xr(e,`LinkDevicePublicKeyB64u`)}function ai(e,t){return _e(Zr(e,t),t)}function oi(e,t){if(e!==`ed25519`&&e!==`ecdsa_secp256k1`)throw Error(`${t} must identify a supported key family`);return e}function si(e,t,n){if(t<=e)throw Error(`${n}.expiresAtMs must be after issuedAtMs`)}function ci(e){return{kind:e.kind,permissions:[...ne(e)]}}function li(e){let t={version:e.version,purpose:e.purpose,linkSessionId:e.linkSessionId,linkPublicKeyB64u:e.linkPublicKeyB64u,devicePublicKeyB64u:e.devicePublicKeyB64u,requestedPermission:ci(e.requestedPermission),targetFactor:e.targetFactor,issuedAtMs:e.issuedAtMs,expiresAtMs:e.expiresAtMs};return e.targetFactor.kind===`email_otp`?{...t,targetEmail:e.targetEmail}:t}function ui(e,t){switch(g(e,[`kind`],t).kind){case`passkey_prf`:return{kind:`passkey_prf`};case`email_otp`:return{kind:`email_otp`};default:throw Error(`${t}.kind is unsupported`)}}function di(){return M({kind:b(`passkey_prf`)})}function fi(){return M({kind:b(`email_otp`)})}function pi(){return M({kind:b(`existing_enrollment`)})}function mi(){return M({kind:b(`new_enrollment`)})}function hi(){return we(`kind`,[pi(),mi()])}function gi(e,t){return hi()(e,t)}function _i(){return M({enrollmentSealKeyVersion:O,clientUnlockPublicKeyB64u:O,unlockKeyVersion:O,serverSealedFactorCiphertextB64u:O})}function vi(e,t){let n=d(e,t);if(n.kind===`passkey_prf`)return g(n,[`kind`],t),{kind:`passkey_prf`};if(n.kind===`email_otp`){let e=gi(n.enrollment,`${t}.enrollment`),r=D(n.targetEmail,`${t}.targetEmail`);return e.kind===`existing_enrollment`?{kind:`email_otp`,targetEmail:r,enrollment:e,baseWalletAuthMethodId:j(g(n,[`kind`,`targetEmail`,`enrollment`,`baseWalletAuthMethodId`],t).baseWalletAuthMethodId,`${t}.baseWalletAuthMethodId`)}:(g(n,[`kind`,`targetEmail`,`enrollment`],t),{kind:`email_otp`,targetEmail:r,enrollment:e})}throw Error(`${t}.kind is unsupported`)}function yi(e){if(e.version!==`v5`)throw Error(`QrLinkedDeviceSessionPayloadV5.version is invalid`);if(e.purpose!==`linked_device_lane_creation`)throw Error(`QrLinkedDeviceSessionPayloadV5.purpose is invalid`);let t=k(e.issuedAtMs,`QrLinkedDeviceSessionPayloadV5.issuedAtMs`),n=k(e.expiresAtMs,`QrLinkedDeviceSessionPayloadV5.expiresAtMs`);si(t,n,`QrLinkedDeviceSessionPayloadV5`);let r={version:`v5`,purpose:`linked_device_lane_creation`,linkSessionId:w(e.linkSessionId,`QrLinkedDeviceSessionPayloadV5.linkSessionId`),linkPublicKeyB64u:Xr(e.linkPublicKeyB64u,`QrLinkedDeviceSessionPayloadV5.linkPublicKeyB64u`),devicePublicKeyB64u:Xr(e.devicePublicKeyB64u,`QrLinkedDeviceSessionPayloadV5.devicePublicKeyB64u`),requestedPermission:ue(e.requestedPermission,`QrLinkedDeviceSessionPayloadV5.requestedPermission`),targetFactor:ui(e.targetFactor,`QrLinkedDeviceSessionPayloadV5.targetFactor`),issuedAtMs:t,expiresAtMs:n};return r.targetFactor.kind===`email_otp`?{...r,targetFactor:{kind:`email_otp`},targetEmail:D(e.targetEmail,`QrLinkedDeviceSessionPayloadV5.targetEmail`)}:{...r,targetFactor:{kind:`passkey_prf`}}}function bi(e){let t=d(e,`QrLinkedDeviceSessionPayloadV5`);return yi(g(t,ui(t.targetFactor,`QrLinkedDeviceSessionPayloadV5.targetFactor`).kind===`email_otp`?[...qr,`targetEmail`]:qr,`QrLinkedDeviceSessionPayloadV5`))}function xi(e){let t=yi(li(e)),n={v:5,s:t.linkSessionId,l:t.linkPublicKeyB64u,d:t.devicePublicKeyB64u,a:ci(t.requestedPermission),f:t.targetFactor.kind===`passkey_prf`?`p`:`e`,i:t.issuedAtMs,e:t.expiresAtMs};return t.targetFactor.kind===`email_otp`?JSON.stringify({...n,t:t.targetEmail}):JSON.stringify(n)}function Si(){return M({payload:bi,requestedAtMs:k})}function Ci(e){return Si()(e,`LinkedDeviceOwnerAuthorizationRequestV1`)}function wi(){let e=e=>M({state:b(e),deviceId:he});return[M({state:b(`displaying_qr`)}),e(`claimed`),e(`awaiting_target_factor`),e(`awaiting_source_contribution`),e(`provisioning`),M({state:b(`authority_pending_local_install`),deviceId:he,authorityId:C,packageSetDigestB64u:x}),M({state:b(`active`),deviceId:he,authorityId:C,activatedAtMs:k}),M({state:b(`failed_before_commit`),error:Ei}),M({state:b(`cancelled`),cancelledAtMs:k}),M({state:b(`expired`),expiredAtMs:k})]}function Ti(e){let t=d(e,`LinkSessionStateV1`).state;if(typeof t!=`string`)throw Error(`LinkSessionStateV1.state is invalid`);let n=wi().find(e=>e.shape.state.literals.includes(t));if(!n)throw Error(`LinkSessionStateV1.state ${t} is unsupported`);return n(e,`LinkSessionStateV1.${t}`)}function Ei(e){let t=g(e,[`kind`,`reason`],`LinkPrecommitFailureV1`);if(t.kind!==`invalid_input`&&t.kind!==`unauthorized_source`&&t.kind!==`revoked_source`&&t.kind!==`permission_attenuation_failed`&&t.kind!==`target_factor_failed`&&t.kind!==`expired_session`&&t.kind!==`cancelled_session`&&t.kind!==`claim_conflict`&&t.kind!==`package_preparation_failed`)throw Error(`LinkPrecommitFailureV1.kind is invalid`);return{kind:t.kind,reason:O(t.reason,`LinkPrecommitFailureV1.reason`)}}function Di(){return M({kind:b(`linked_device_session_projection_v1`),linkSessionId:w,qrPayload:bi,revision:me,createdAtMs:k,updatedAtMs:k,state:Ti})}function Oi(e){return Di()(e,`LinkSessionProjectionV1`)}function ki(){return M({kind:b(`linked_device_session_event_v1`),linkSessionId:w,state:Ti,emittedAtMs:k})}function Ai(e){return ki()(e,`LinkSessionTransportEventV1`)}function ji(){return we(`outcome`,[M({outcome:b(`pending`),state:Ni}),M({outcome:b(`replayed`),replay:M({state:()=>`pending`,session:Ni})})])}function Mi(e){return ji()(e,`LinkedDeviceApprovalResultV1`)}function Ni(e){let t=Ti(e);switch(t.state){case`awaiting_target_factor`:case`awaiting_source_contribution`:case`provisioning`:case`authority_pending_local_install`:return t;default:throw Error(`LinkedDeviceApprovalResultV1 state is not pending`)}}function Pi(){return M({kind:b(`linked_device_session_claim_v1`),linkSessionId:w,walletId:A,enrollmentId:S,deviceId:E,devicePublicKeyB64u:Xr,targetFactor:ui,sessionRevision:k,claimedAtMs:k,claimExpiresAtMs:k},(e,t)=>si(e.claimedAtMs,e.claimExpiresAtMs,t))}function Fi(e){return Pi()(e,`LinkedDeviceSessionClaimV1`)}function Ii(){return M({kind:b(`wallet_session`),walletSessionId:ve,authorizationId:xe})}function Li(e,t=`ownerAuthorization`){if(d(e,t).kind!==`wallet_session`)throw Error(`${t}.kind is unsupported`);return Ii()(e,t)}function Ri(){return{kind:b(`linked_device_approval_v1`),linkSessionId:w,walletId:A,enrollmentId:S,deviceId:E,linkPublicKeyB64u:Xr,devicePublicKeyB64u:Xr,permission:ue,targetFactor:vi,ownerAuthorization:Li,approvedAtMs:k,expiresAtMs:k}}function zi(e,t){si(e.approvedAtMs,e.expiresAtMs,t)}function Bi(){return M(Ri(),zi)}function Vi(){return M({...Ri(),sourceContribution:tr},zi)}function Hi(e){let t=d(e,`LinkedDeviceApprovalV1`);return(t.sourceContribution===void 0?Bi():Vi())(t,`LinkedDeviceApprovalV1`)}function Ui(){return M({kind:b(`linked_device_approval_delivery_v1`),approval:Hi})}function Wi(e){return Ui()(e,`LinkedDeviceApprovalDeliveryV1`)}function Gi(){return{kind:b(`linked_device_target_preparation_v1`),linkSessionId:w,walletId:A,enrollmentId:S,deviceId:E,deliveryRecipientPublicKey65B64u:ri,walletAuthMethodId:j,ed25519ExportRoot:Se(aa()),ordinarySignerMaterialRecipientRequirements:ca,issuedAtMs:k,expiresAtMs:k}}function Ki(e,t){if(e.expiresAtMs<=e.issuedAtMs)throw Error(`${t}.expiresAtMs must follow issuedAtMs`)}function qi(){return M({...Gi(),targetFactor:di(),passkeyCreationOptions:ia,passkeyConfigurationDigestB64u:x},(e,t)=>{if(Ki(e,t),e.passkeyCreationOptions.walletAuthMethodId!==e.walletAuthMethodId)throw Error(`${t}.passkeyCreationOptions.walletAuthMethodId must match the preparation`)})}function Ji(){return M({...Gi(),targetFactor:fi(),targetEmail:D,enrollment:pi(),baseWalletAuthMethodId:j},Ki)}function Yi(){return M({...Gi(),targetFactor:fi(),targetEmail:D,enrollment:mi()},Ki)}function Xi(e){let t=`LinkedDeviceTargetPreparationV1`,n=d(e,t);return ui(n.targetFactor,`${t}.targetFactor`).kind===`passkey_prf`?qi()(n,t):(gi(n.enrollment,`${t}.enrollment`).kind===`new_enrollment`?Yi():Ji())(n,t)}function Zi(){return M({kind:b(`linked_device_target_preparation_request_v1`),linkSessionId:w,deliveryRecipientPublicKey65B64u:ri})}function Qi(e){return Zi()(e,`LinkedDeviceTargetPreparationRequestV1`)}function $i(){return M({baseWalletAuthMethodId:j,maskedEmailHint:(e,t)=>{if(typeof e!=`string`||e.length===0)throw Error(`${t} is invalid`);return e}})}function ea(){let e=$i(),t=t=>e(t,`LinkedDeviceEmailOtpBaseFactorChoiceV1`);return{selected:M({kind:b(`selected`),choice:t}),selection_required:M({kind:b(`selection_required`),choices:(e,n)=>{if(!Array.isArray(e)||e.length===0)throw Error(`${n} must not be empty`);let r=e.map(t);return[r[0],...r.slice(1)]}}),unavailable:M({kind:b(`unavailable`),reason:Jr(`no_active_email_otp_base_factor`)})}}function ta(e){let t=`LinkedDeviceEmailOtpBaseFactorResolutionV1`,n=d(e,t),r=ea();switch(n.kind){case`selected`:case`selection_required`:case`unavailable`:return r[n.kind](n,t);default:throw Error(`${t}.kind is unsupported`)}}function na(){return M({revision:k,resolution:ta})}function ra(e){return na()(e,`LinkedDeviceEmailOtpBaseFactorResolutionResultV1`)}function ia(e,t){let n=g(e,[`kind`,`walletAuthMethodId`,`challengeId`,`challengeB64u`,`rpId`,`user`,`pubKeyCredParams`,`authenticatorSelection`,`timeoutMs`,`attestation`,`extensions`,`excludeCredentials`],t),r=j(n.walletAuthMethodId,`${t}.walletAuthMethodId`);if(g(n.user,[`idB64u`,`name`,`displayName`],`${t}.user`),g(n.authenticatorSelection,[`residentKey`,`userVerification`],`${t}.authenticatorSelection`),g(g(g(n.extensions,[`prf`],`${t}.extensions`).prf,[`eval`],`${t}.extensions.prf`).eval,[`firstB64u`,`secondB64u`],`${t}.extensions.prf.eval`),!Array.isArray(n.pubKeyCredParams))throw Error(`${t}.pubKeyCredParams must be an array`);if(n.pubKeyCredParams.forEach((e,n)=>{g(e,[`type`,`alg`],`${t}.pubKeyCredParams[${n}]`)}),!Array.isArray(n.excludeCredentials))throw Error(`${t}.excludeCredentials must be an array`);n.excludeCredentials.forEach((e,n)=>{g(e,[`type`,`id`],`${t}.excludeCredentials[${n}]`)});let i=pt(n);return{kind:i.kind,walletAuthMethodId:r,challengeId:i.challengeId,challengeB64u:i.challengeB64u,rpId:i.rpId,user:i.user,pubKeyCredParams:i.pubKeyCredParams,authenticatorSelection:i.authenticatorSelection,timeoutMs:i.timeoutMs,attestation:i.attestation,extensions:i.extensions,excludeCredentials:i.excludeCredentials}}function aa(){return M({kind:b(`linked_device_ed25519_export_root_preparation_v1`),walletKeyId:be,applicationBindingDigestB64u:x,registeredPublicKeyB64u:ce,revocationEpoch:me})}function oa(e,t,n){if(!Array.isArray(e)||e.length===0||e.length>2)throw Error(`${n} must contain one or two entries`);let r=e.map((e,r)=>t(e,`${n}[${r}]`));if(new Set(r.map(e=>e.keyFamily)).size!==r.length)throw Error(`${n} repeats a key family`);if(new Set(r.map(e=>String(e.walletKeyId))).size!==r.length)throw Error(`${n} repeats a wallet key`);if(r.length===2&&(r[0]?.keyFamily!==`ed25519`||r[1]?.keyFamily!==`ecdsa_secp256k1`))throw Error(`${n} must be ordered Ed25519 then ECDSA`);return r}function sa(){return M({kind:b(`ordinary_signer_material_recipient_requirement_v1`),keyFamily:oi,walletKeyId:be})}function ca(e){let t=oa(e,sa(),`LinkedDeviceTargetPreparationV1.ordinarySignerMaterialRecipientRequirements`),n=t[0];if(!n)throw Error(`ordinary signer material recipient requirements are empty`);return[n,...t.slice(1)]}const la=b(`ble`,`cable`,`hybrid`,`internal`,`nfc`,`smart-card`,`usb`);function ua(e,t){let n=te(e,t).map((e,n)=>la(e,`${t}[${n}]`));if(new Set(n).size!==n.length)throw Error(`${t} contains duplicates`);return n}function da(){return M({kind:b(`linked_device_webauthn_registration_v1`),credentialIdB64u:ai,authenticatorAttachment:Se(b(`platform`,`cross-platform`)),clientDataJsonB64u:Zr,attestationObjectB64u:Zr,transports:ua})}function fa(){let e=e=>(t,n)=>{if(t!==e)throw Error(`${n} does not match its kind`);return e};return we(`kind`,[M({kind:b(`ordinary_ed25519_signer_material_recipient_request_v1`),keyFamily:e(`ed25519`),walletKeyId:be,recipientPublicKeyB64u:(e,t)=>Qr(e,32,t)}),M({kind:b(`ordinary_ecdsa_signer_material_recipient_request_v1`),keyFamily:e(`ecdsa_secp256k1`),walletKeyId:be,clientEphemeralPublicKey:ge})])}function pa(e){let t=oa(e,fa(),`LinkedDeviceTargetCredentialRegistrationV1.ordinarySignerMaterialRecipientRequests`),n=t[0];if(!n)throw Error(`ordinary signer material recipient requests are empty`);return[n,...t.slice(1)]}function ma(){return{kind:b(`linked_device_target_credential_registration_v1`),linkSessionId:w,walletId:A,enrollmentId:S,deviceId:E,walletAuthMethodId:j}}function ha(){return M({...ma(),targetFactor:di(),targetPreparationDigestB64u:x,ordinarySignerMaterialRecipientRequests:pa,webauthnRegistration:da(),registeredAtMs:k})}function ga(){return M({...ma(),targetFactor:fi(),targetEmail:D,targetPreparationDigestB64u:x,ordinarySignerMaterialRecipientRequests:pa,emailOtpVerificationGrant:Pa,registeredAtMs:k})}function _a(){return M({...ma(),targetFactor:fi(),targetEmail:D,targetPreparationDigestB64u:x,ordinarySignerMaterialRecipientRequests:pa,emailOtpVerificationGrant:Pa,emailOtpEnrollment:_i(),registeredAtMs:k})}function va(e){let t=`LinkedDeviceTargetCredentialRegistrationV1`,n=d(e,t);return ui(n.targetFactor,`${t}.targetFactor`).kind===`passkey_prf`?ha()(n,t):(Pa(n.emailOtpVerificationGrant).enrollment.kind===`new_enrollment`?_a():ga())(n,t)}function ya(){return M({kind:b(`linked_device_target_credential_registration_result_v1`),outcome:b(`applied`,`replayed`),linkSessionId:w,walletId:A,enrollmentId:S,deviceId:E,walletAuthMethodId:j,targetPreparationDigestB64u:x,targetFactor:Ta,ordinarySignerMaterialPreparations:ir,ordinarySignerMaterialRecipientRequests:pa,keyManifestDigestB64u:x},(e,t)=>{let{authMethod:n}=e.targetFactor;if(n.walletAuthMethodId!==e.walletAuthMethodId||n.walletId!==e.walletId)throw Error(`${t} target identity differs`)})}function ba(e){return ya()(e,`LinkedDeviceTargetCredentialRegistrationResultV1`)}function xa(e,t){if(e.verifiedAtMs<e.authMethod.createdAtMs)throw Error(`${t}.verifiedAtMs precedes authMethod.createdAtMs`)}function Sa(){return M({kind:b(`verified_passkey_target_v1`),authMethod:Da,verificationDigestB64u:x,verifiedAtMs:k},xa)}function Ca(){return M({kind:b(`verified_email_otp_target_v1`),authMethod:ka,targetEmail:D,enrollment:pi(),baseWalletAuthMethodId:j,providerUserId:O,verificationDigestB64u:x,verifiedAtMs:k},xa)}function wa(){return M({kind:b(`verified_email_otp_target_v1`),authMethod:ka,targetEmail:D,enrollment:mi(),providerUserId:O,verificationDigestB64u:x,verifiedAtMs:k},xa)}function Ta(e,t){let n=d(e,t);if(n.kind===`verified_passkey_target_v1`)return Sa()(n,t);if(n.kind!==`verified_email_otp_target_v1`)throw Error(`${t}.kind is invalid`);return(gi(n.enrollment,`${t}.enrollment`).kind===`existing_enrollment`?Ca():wa())(n,t)}function Ea(){return M({walletAuthMethodId:j,walletId:A,createdAtMs:k,kind:b(`passkey`),rpId:pe,credentialIdB64u:_e,credentialPublicKeyB64u:Zr,counter:me})}function Da(e,t){return Ea()(e,t)}function Oa(){return M({walletAuthMethodId:j,walletId:A,createdAtMs:k,kind:b(`email_otp`),emailHashHex:Yr,registrationAuthorityId:O})}function ka(e,t){return Oa()(e,t)}function Aa(e){return{kind:b(`linked_device_email_otp_verification_grant_v1`),grantId:O,grantToken:O,challengeId:O,linkSessionId:w,walletId:A,enrollmentId:S,deviceId:E,targetPreparationDigestB64u:x,targetEmail:D,enrollment:e,emailHashHex:Yr,registrationAuthorityId:O,providerUserId:O,authorityDigestB64u:x,issuedAtMs:k,expiresAtMs:k}}function ja(e,t){si(e.issuedAtMs,e.expiresAtMs,t)}function Ma(){return M({...Aa(pi()),baseWalletAuthMethodId:j},ja)}function Na(){return M(Aa(mi()),ja)}function Pa(e){let t=`LinkedDeviceEmailOtpVerificationGrantV1`,n=d(e,t);return(gi(n.enrollment,`${t}.enrollment`).kind===`new_enrollment`?Na():Ma())(n,t)}function Fa(){return M({kind:b(`email_otp_factor_release_v1`),challengeId:O,enrollmentId:O,enrollmentSealKeyVersion:O,serverEphemeralPublicKey65B64u:ri,nonce12B64u:(e,t)=>Qr(e,12,t),ciphertextB64u:Zr})}function Ia(e){return Fa()(e,`LinkedDeviceEmailOtpFactorReleaseEnvelopeV1`)}function La(){return M({kind:b(`linked_device_email_otp_challenge_start_request_v1`),linkSessionId:w,workerEphemeralPublicKey65B64u:ri})}function Ra(e){return La()(e,`LinkedDeviceEmailOtpChallengeStartRequestV1`)}function za(){return M({kind:b(`linked_device_email_otp_challenge_resend_request_v1`),linkSessionId:w,challengeId:O})}function Ba(e){return za()(e,`LinkedDeviceEmailOtpChallengeResendRequestV1`)}function Va(){return M({kind:b(`linked_device_email_otp_challenge_verify_request_v1`),linkSessionId:w,challengeId:O,otpCode:(e,t)=>{if(typeof e!=`string`||!/^[0-9]{6,10}$/.test(e))throw Error(`${t} is invalid`);return e}})}function Ha(e){return Va()(e,`LinkedDeviceEmailOtpChallengeVerifyRequestV1`)}function Ua(){return M({kind:b(`linked_device_email_otp_challenge_result_v1`),challengeId:O,maskedEmailHint:O,expiresAtMs:k,resendAvailableAtMs:k})}function Wa(e){return Ua()(e,`LinkedDeviceEmailOtpChallengeResultV1`)}function Ga(e){let t=g(e,[`kind`,`verificationGrant`,`factorRelease`],`LinkedDeviceEmailOtpVerificationResultV1`);if(t.kind!==`linked_device_email_otp_verification_result_v1`)throw Error(`LinkedDeviceEmailOtpVerificationResultV1.kind is invalid`);let n=Pa(t.verificationGrant);if(Ka(n)){if(t.factorRelease!==null)throw Error(`new linked-device Email OTP enrollment cannot carry a factor release`);return{kind:`linked_device_email_otp_verification_result_v1`,verificationGrant:n,factorRelease:null}}let r=Ia(t.factorRelease);if(r.challengeId!==n.challengeId)throw Error(`LinkedDeviceEmailOtpVerificationResultV1 challenge binding changed`);return{kind:`linked_device_email_otp_verification_result_v1`,verificationGrant:n,factorRelease:r}}function Ka(e){return e.enrollment.kind===`new_enrollment`}function qa(e){let t=k(e.issuedAtMs,`QrLinkedDeviceSessionPayloadV5.issuedAtMs`),n=k(e.expiresAtMs,`QrLinkedDeviceSessionPayloadV5.expiresAtMs`);si(t,n,`QrLinkedDeviceSessionPayloadV5`);let r=ui(e.targetFactor,`QrLinkedDeviceSessionPayloadV5.targetFactor`);if(r.kind===`passkey_prf`)return{version:`v5`,purpose:`linked_device_lane_creation`,linkSessionId:e.linkSessionId,linkPublicKeyB64u:e.linkPublicKeyB64u,devicePublicKeyB64u:e.devicePublicKeyB64u,requestedPermission:ue(ci(e.requestedPermission),`QrLinkedDeviceSessionPayloadV5.requestedPermission`),targetFactor:r,issuedAtMs:t,expiresAtMs:n};if(e.targetEmail===void 0)throw Error(`QrLinkedDeviceSessionPayloadV5.targetEmail is required for Email OTP`);return{version:`v5`,purpose:`linked_device_lane_creation`,linkSessionId:e.linkSessionId,linkPublicKeyB64u:e.linkPublicKeyB64u,devicePublicKeyB64u:e.devicePublicKeyB64u,requestedPermission:ue(ci(e.requestedPermission),`QrLinkedDeviceSessionPayloadV5.requestedPermission`),targetFactor:r,targetEmail:D(e.targetEmail,`QrLinkedDeviceSessionPayloadV5.targetEmail`),issuedAtMs:t,expiresAtMs:n}}function Ja(e){return{kind:`linked_device_session_claim_request_v1`,payload:e}}function Ya(e,t,n){let r=k(e,`${n}.approvedAtMs`),i=k(t,`${n}.expiresAtMs`);return si(r,i,n),{approvedAtMs:r,expiresAtMs:i}}function Xa(e){let t=Ya(e.approvedAtMs,e.expiresAtMs,`LinkedDeviceApprovalV1`);return Hi({kind:`linked_device_approval_v1`,...e,...t})}function Za(e){return va({kind:`linked_device_target_credential_registration_v1`,...e})}function Qa(e){return{kind:`linked_device_session_cancel_unclaimed_request_v1`,linkSessionId:e.linkSessionId,reason:`user_cancelled`,requestedAtMs:k(e.requestedAtMs,`LinkedDeviceSessionCancelUnclaimedRequestV1.requestedAtMs`)}}function $a(e){return{kind:`linked_device_session_cancel_claimed_request_v1`,...e,requestedAtMs:k(e.requestedAtMs,`LinkedDeviceSessionCancelClaimedRequestV1.requestedAtMs`)}}const eo=[`chrome`,`safari`,`firefox`,`edge`,`other`],to=[`macos`,`ios`,`windows`,`android`,`linux`,`other`];function no(e){return typeof e==`string`&&eo.some(t=>t===e)}function ro(e){return typeof e==`string`&&to.some(t=>t===e)}function io(e){if(!e||typeof e!=`object`||Array.isArray(e))return null;let t=e,n=typeof t.label==`string`?t.label.trim():``;if(!n||!no(t.browser)||!ro(t.os)||typeof t.synced!=`boolean`||!Array.isArray(t.transports))return null;let r=t.transports.map(e=>typeof e==`string`?e.trim():``).filter(e=>e.length>0),i=typeof t.provider==`string`?t.provider.trim():``,a=typeof t.providerLabel==`string`?t.providerLabel.trim():``;return{label:n,browser:t.browser,os:t.os,synced:t.synced,transports:r,...i?{provider:i}:{},...a?{providerLabel:a}:{}}}function ao(e){return(t,n)=>{if(!Array.isArray(t))throw Error(`${n} is invalid`);return t.map((t,r)=>e(t,`${n}[${r}]`))}}function oo(e,t){let n=j(e,t);if(n.startsWith(`wallet-authority:`)||n.startsWith(`authority:`))throw Error(`${t} must identify a WalletAuthMethodId`);return n}function so(e,t){let n=me(e,t);if(n<1)throw Error(`${t} must be a positive safe integer`);return n}function co(e,t){let n=io(e);if(!n)throw Error(`${t} is invalid`);return n}function lo(){return we(`kind`,[M({kind:b(`passkey`),walletAuthMethodId:j,credentialIdB64u:_e,device:co}),M({kind:b(`email_otp`),walletAuthMethodId:j,email:D})])}function uo(e,t){return lo()(e,t)}function fo(){return M({deviceId:E,enrollmentId:S,walletId:A,credential:uo,permission:ue,keyManifestDigestB64u:x,coveredWalletKeys:ao(be),state:b(`provisioning`,`active`,`suspended`,`expired`,`revoked`),createdAtMs:k,lastActivityAtMs:k,revocationEpoch:me})}function po(e){return fo()(e,`LinkedDeviceSummaryV1`)}function mo(){return M({kind:b(`linked_device_list_request_v1`),walletId:A,limit:so,cursor:Ee})}function ho(e){return mo()(e,`LinkedDeviceListRequestV1`)}function go(){return M({walletId:A,walletAuthorityId:C,credential:uo,createdAtMs:k,lastActivityAtMs:k})}function _o(){let e=go();return M({devices:ao(po),ownerDevices:ao(t=>e(t,`OwnerDeviceSummaryV1`)),nextCursor:Ee})}function vo(e){return _o()(e,`LinkedDeviceListResultV1`)}function yo(){return M({kind:b(`linked_device_revoke_request_v1`),walletId:A,walletAuthMethodId:oo,requestedAtMs:k})}function bo(e){return yo()(e,`LinkedDeviceRevokeRequestV1`)}function xo(){return M({kind:b(`not_found`,`conflict`,`unauthorized`)})}function So(){return M({kind:b(`revoked`),walletAuthMethodId:oo,authorityId:C,revocationEpoch:me})}function Co(e){let t=d(e,`LinkedDeviceRevokeResultV1`);return(t.kind===`not_found`||t.kind===`conflict`||t.kind===`unauthorized`?xo():So())(t,`LinkedDeviceRevokeResultV1`)}function wo(e){return N({domain:`seams/linked-device/wallet-session-credential-delivery-aad/v1`,aad:e})}function To(e){let t=Mo(e,[`kind`,`namespace`,`orgId`,`projectId`,`envId`,`tenantId`,`principalId`],`LinkedDeviceWalletSessionCredentialDeliveryBindingV1`);if(t.kind!==`linked_device_wallet_session_credential_delivery_binding_v1`)throw Error(`LinkedDeviceWalletSessionCredentialDeliveryBindingV1.kind is invalid`);return{kind:`linked_device_wallet_session_credential_delivery_binding_v1`,namespace:Z(t.namespace,`namespace`),orgId:Z(t.orgId,`orgId`),projectId:Z(t.projectId,`projectId`),envId:Z(t.envId,`envId`),tenantId:Q(Me(t.tenantId)),principalId:Q(Oe(t.principalId))}}async function Eo(e){return Fe(wo(e))}async function Do(e){return Fe(N({domain:`seams/linked-device/wallet-session-credential-delivery-envelope/v1`,envelope:e}))}async function Oo(e){if(await Eo(e.aad)!==e.aadDigestB64u)throw Error(`linked-device Wallet Session credential delivery AAD digest is invalid`);if(await Do(e.envelope)!==e.envelopeDigestB64u)throw Error(`linked-device Wallet Session credential delivery envelope digest is invalid`);if(await Fe(N({domain:`seams/linked-device/delivery-recipient/v1`,recipientPublicKey65B64u:e.aad.recipientPublicKey65B64u}))!==e.recipientBindingDigestB64u)throw Error(`linked-device Wallet Session credential delivery recipient binding is invalid`)}function ko(e){let t=Mo(e,[`kind`,`aad`,`aadDigestB64u`,`recipientBindingDigestB64u`,`envelope`,`envelopeDigestB64u`,`installationReceiptDigestB64u`],`LinkedDeviceWalletSessionCredentialDeliveryV1`);if(t.kind!==`linked_device_wallet_session_credential_delivery_v1`)throw Error(`LinkedDeviceWalletSessionCredentialDeliveryV1.kind is invalid`);return{kind:`linked_device_wallet_session_credential_delivery_v1`,aad:Ao(t.aad),aadDigestB64u:P(t.aadDigestB64u),recipientBindingDigestB64u:P(t.recipientBindingDigestB64u),envelope:jo(t.envelope),envelopeDigestB64u:P(t.envelopeDigestB64u),installationReceiptDigestB64u:P(t.installationReceiptDigestB64u)}}function Ao(t){let i=Mo(t,[`kind`,`namespace`,`orgId`,`projectId`,`envId`,`tenantId`,`principalId`,`linkSessionId`,`walletId`,`authorityId`,`walletAuthMethodId`,`authorizationId`,`walletSessionId`,`quotaId`,`credentialDigestB64u`,`recipientPublicKey65B64u`,`issuedAtMs`,`expiresAtMs`],`LinkedDeviceWalletSessionCredentialDeliveryAadV1`);if(i.kind!==`linked_device_wallet_session_credential_delivery_aad_v1`)throw Error(`LinkedDeviceWalletSessionCredentialDeliveryAadV1.kind is invalid`);let a=No(i.issuedAtMs,`issuedAtMs`),o=No(i.expiresAtMs,`expiresAtMs`);if(o<=a)throw Error(`expiresAtMs must be after issuedAtMs`);return{kind:`linked_device_wallet_session_credential_delivery_aad_v1`,namespace:Z(i.namespace,`namespace`),orgId:Z(i.orgId,`orgId`),projectId:Z(i.projectId,`projectId`),envId:Z(i.envId,`envId`),tenantId:Q(Me(i.tenantId)),principalId:Q(Oe(i.principalId)),linkSessionId:Q(c(i.linkSessionId)),walletId:Q(n(i.walletId)),authorityId:Q(e(i.authorityId)),walletAuthMethodId:Q(r(i.walletAuthMethodId)),authorizationId:Q(je(i.authorizationId)),walletSessionId:Q(ke(i.walletSessionId)),quotaId:Q(De(i.quotaId)),credentialDigestB64u:P(i.credentialDigestB64u),recipientPublicKey65B64u:Fo(i.recipientPublicKey65B64u,65),issuedAtMs:a,expiresAtMs:o}}function jo(e){let t=Mo(e,[`kind`,`algorithm`,`serverEphemeralPublicKey65B64u`,`nonce12B64u`,`ciphertextB64u`],`LinkedDeviceWalletSessionCredentialEnvelopeV1`);if(t.kind!==`linked_device_wallet_session_credential_envelope_v1`||t.algorithm!==`p256-ecdh-aes256gcm-v1`)throw Error(`LinkedDeviceWalletSessionCredentialEnvelopeV1 identity is invalid`);return{kind:`linked_device_wallet_session_credential_envelope_v1`,algorithm:`p256-ecdh-aes256gcm-v1`,serverEphemeralPublicKey65B64u:Fo(t.serverEphemeralPublicKey65B64u,65),nonce12B64u:Fo(t.nonce12B64u,12),ciphertextB64u:Po(t.ciphertextB64u)}}function Mo(e,t,n){if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`${n} must be an object`);let r=e,i=new Set(t);for(let e of Object.keys(r))if(!i.has(e))throw Error(`${n}.${e} is not supported`);for(let e of t)if(!(e in r))throw Error(`${n}.${e} is required`);return r}function Z(e,t){if(typeof e!=`string`||e.length===0||e.trim()!==e)throw Error(`${t} is required`);return e}function No(e,t){if(!Number.isSafeInteger(e)||Number(e)<=0)throw Error(`${t} is invalid`);return Number(e)}function Po(e){let t=Z(e,`base64url`);if(p(m(t))!==t)throw Error(`base64url is not canonical`);return t}function Fo(e,t){let n=Po(e),r=m(n);if(r.length!==t)throw Error(`base64url must contain ${t} bytes`);if(t===65&&r[0]!==4)throw Error(`P-256 public key is invalid`);return n}function Q(e){if(!e.ok)throw Error(e.error.message);return e.value}function Io(e,t){let n=Ue(e);if(!n.ok)throw Error(`${t} ${n.error}`);return n.value}function Lo(){return M({kind:b(`local_authority_installation_receipt_v1`),authorityId:T(C),walletId:T(A),authMethodId:T(j),deviceId:T(he),packageSetDigestB64u:T(x),installedActivationRefs:Io,installedRecordSetDigestB64u:T(x),targetFactorVerificationDigestB64u:T(x),installedAtMs:T(k)})}function Ro(e){return Lo()(e,`LocalAuthorityInstallationReceiptV1`)}function zo(){return M({kind:b(`local_authority_activation_final_ack_v1`),linkSessionId:T(w),authorityId:T(C),packageSetDigestB64u:T(x),authorizationId:T(xe),walletSessionId:T(ve),credentialDigestB64u:T(x),installationReceiptDigestB64u:T(x),acknowledgedAtMs:T(k)})}function Bo(e){return zo()(e,`LocalAuthorityActivationFinalAckV1`)}function Vo(e){let t=d(e,`ActivateInstalledAuthorityResultV1`);switch(t.kind){case`active`:{_(t,[`kind`,`authority`,`authMethod`,`walletSession`,`deliveryBinding`,`sealedDelivery`],`ActivateInstalledAuthorityResultV1`);let e=Ge(t.authority);if(!e.ok||e.value.state!==`active`)throw Error(`ActivateInstalledAuthorityResultV1.authority must be active`);let n=qe(t.authMethod);if(!n||n.status!==`active`)throw Error(`ActivateInstalledAuthorityResultV1.authMethod must be active`);let r=le(t.walletSession),i=To(t.deliveryBinding),a=ko(t.sealedDelivery);if(e.value.walletId!==n.walletId||e.value.authorityId!==n.walletAuthorityId||r.walletId!==e.value.walletId||r.authorityId!==e.value.authorityId||r.authMethodId!==n.walletAuthMethodId||r.authorityDigestB64u!==e.value.authorityDigestB64u||r.authorityRevocationEpoch!==e.value.revocationEpoch||i.namespace!==a.aad.namespace||i.orgId!==a.aad.orgId||i.projectId!==a.aad.projectId||i.envId!==a.aad.envId||i.tenantId!==a.aad.tenantId||i.principalId!==a.aad.principalId||a.aad.walletId!==r.walletId||a.aad.authorityId!==r.authorityId||a.aad.walletAuthMethodId!==r.authMethodId||a.aad.authorizationId!==r.authorizationId||a.aad.quotaId!==r.quotaId||a.aad.issuedAtMs!==r.issuedAtMs||a.aad.expiresAtMs!==r.expiresAtMs)throw Error(`ActivateInstalledAuthorityResultV1 identities do not match`);return{kind:`active`,authority:e.value,authMethod:n,walletSession:r,deliveryBinding:i,sealedDelivery:a}}case`pending_local_install`:return _(t,[`kind`,`authorityId`,`reason`],`ActivateInstalledAuthorityResultV1`),{kind:`pending_local_install`,authorityId:C(t.authorityId,`authorityId`),reason:Ho()(t.reason,`ActivationRetryReasonV1`)};case`integrity_error`:return _(t,[`kind`,`reason`],`ActivateInstalledAuthorityResultV1`),{kind:`integrity_error`,reason:Uo(t.reason)};default:throw Error(`ActivateInstalledAuthorityResultV1.kind is invalid`)}}function Ho(){return we(`kind`,[M({kind:b(`installation_receipt_not_found`)}),M({kind:b(`server_worker_activation_pending`)}),M({kind:b(`wallet_session_issuance_pending`)})])}function Uo(e){let t=d(e,`LinkIntegrityFailureV1`);switch(t.kind){case`authority_id_mismatch`:return _(t,[`kind`,`expectedAuthorityId`,`actualAuthorityId`],`LinkIntegrityFailureV1`),{kind:`authority_id_mismatch`,expectedAuthorityId:C(t.expectedAuthorityId,`expectedAuthorityId`),actualAuthorityId:C(t.actualAuthorityId,`actualAuthorityId`)};case`package_set_digest_mismatch`:return _(t,[`kind`,`expectedPackageSetDigestB64u`,`actualPackageSetDigestB64u`],`LinkIntegrityFailureV1`),{kind:`package_set_digest_mismatch`,expectedPackageSetDigestB64u:x(t.expectedPackageSetDigestB64u,`expectedPackageSetDigestB64u`),actualPackageSetDigestB64u:x(t.actualPackageSetDigestB64u,`actualPackageSetDigestB64u`)};case`installation_receipt_mismatch`:if(_(t,[`kind`,`field`],`LinkIntegrityFailureV1`),t.field!==`walletId`&&t.field!==`authMethodId`&&t.field!==`deviceId`&&t.field!==`targetFactorVerificationDigestB64u`&&t.field!==`installedActivationRefs`)throw Error(`LinkIntegrityFailureV1.field is invalid`);return{kind:`installation_receipt_mismatch`,field:t.field};default:throw Error(`LinkIntegrityFailureV1.kind is invalid`)}}new TextEncoder;async function Wo(e){return Fe(e.token)}function Go(e){return N({domain:`seams/linked-device/local-authority-installation-receipt/v1`,receipt:e})}async function Ko(e){return Fe(Go(e))}function qo(e,t){if(e===void 0)throw Error(`${t} is required`);return e}function Jo(e){return I(e.kind,`targetFactor.kind`)}function Yo(e){let t=e.pubKeyCredParams.map(e=>We([I(e.type,`passkeyCreationOptions.pubKeyCredParams.type`),I(String(e.alg),`passkeyCreationOptions.pubKeyCredParams.alg`)])),n=e.excludeCredentials.map(e=>We([I(e.type,`passkeyCreationOptions.excludeCredentials.type`),I(e.id,`passkeyCreationOptions.excludeCredentials.id`)]));return We([I(e.kind,`passkeyCreationOptions.kind`),I(e.walletAuthMethodId,`passkeyCreationOptions.walletAuthMethodId`),I(e.challengeId,`passkeyCreationOptions.challengeId`),I(e.challengeB64u,`passkeyCreationOptions.challengeB64u`),I(e.rpId,`passkeyCreationOptions.rpId`),I(e.user.idB64u,`passkeyCreationOptions.user.idB64u`),I(e.user.name,`passkeyCreationOptions.user.name`),I(e.user.displayName,`passkeyCreationOptions.user.displayName`),He(t.length,`passkeyCreationOptions.pubKeyCredParams`),...t.map(e=>F(e,`passkeyCreationOptions.pubKeyCredParams.item`)),I(e.authenticatorSelection.residentKey,`passkeyCreationOptions.authenticatorSelection.residentKey`),I(e.authenticatorSelection.userVerification,`passkeyCreationOptions.authenticatorSelection.userVerification`),Je(e.timeoutMs,`passkeyCreationOptions.timeoutMs`),I(e.attestation,`passkeyCreationOptions.attestation`),I(e.extensions.prf.eval.firstB64u,`passkeyCreationOptions.extensions.prf.eval.firstB64u`),I(e.extensions.prf.eval.secondB64u,`passkeyCreationOptions.extensions.prf.eval.secondB64u`),He(n.length,`passkeyCreationOptions.excludeCredentials`),...n.map(e=>F(e,`passkeyCreationOptions.excludeCredentials.item`))])}function Xo(e){return We([I(e.kind,`recipientRequirement.kind`),I(e.keyFamily,`recipientRequirement.keyFamily`),I(e.walletKeyId,`recipientRequirement.walletKeyId`)])}function Zo(e){return e===null?I(`none`,`ed25519ExportRoot.kind`):We([I(e.kind,`ed25519ExportRoot.kind`),I(e.walletKeyId,`ed25519ExportRoot.walletKeyId`),Ve(e.applicationBindingDigestB64u,`ed25519ExportRoot.applicationBindingDigestB64u`),Ke(e.registeredPublicKeyB64u,`ed25519ExportRoot.registeredPublicKeyB64u`),Je(e.revocationEpoch,`ed25519ExportRoot.revocationEpoch`)])}function Qo(e){let t=e.ordinarySignerMaterialRecipientRequirements.map(Xo),n=es(e)?e:void 0,r=n?.passkeyCreationOptions;if(e.targetFactor.kind===`passkey_prf`&&!r)throw Error(`passkey target preparation is missing creation options`);return We([I(`seams/linked-device/target-preparation/v1`,`domain`),I(e.kind,`kind`),I(e.linkSessionId,`linkSessionId`),I(e.walletId,`walletId`),I(e.enrollmentId,`enrollmentId`),I(e.deviceId,`deviceId`),F(Ke(e.deliveryRecipientPublicKey65B64u,`deliveryRecipientPublicKey65B64u`),`deliveryRecipientPublicKey65B64u`),I(e.walletAuthMethodId,`walletAuthMethodId`),F(Zo(e.ed25519ExportRoot),`ed25519ExportRoot`),F(Jo(e.targetFactor),`targetFactor`),...r?[F(Yo(r),`passkeyCreationOptions`),Ve(n.passkeyConfigurationDigestB64u,`passkeyConfigurationDigestB64u`)]:[],...$o(e),He(t.length,`ordinarySignerMaterialRecipientRequirements`),...t.map(e=>F(e,`ordinarySignerMaterialRecipientRequirements.item`)),Je(e.issuedAtMs,`issuedAtMs`),Je(e.expiresAtMs,`expiresAtMs`)])}function $o(e){return es(e)?[]:[I(e.targetEmail,`targetEmail`),I(e.enrollment.kind,`enrollment.kind`),...e.enrollment.kind===`existing_enrollment`?[I(qo(e.baseWalletAuthMethodId,`baseWalletAuthMethodId`),`baseWalletAuthMethodId`)]:[]]}function es(e){return e.targetFactor.kind===`passkey_prf`}async function ts(e){return Pe(Qo(e))}const ns=`x-seams-linked-device-proof-v1`,rs=6e4,is=6e4;async function as(e){return Pe(os(e,32,`devicePublicKeyB64u`))}function os(e,t,n){if(typeof e!=`string`||e.length===0||!/^[A-Za-z0-9_-]+$/.test(e))throw Error(`${n} is invalid`);let r;try{r=m(e)}catch{throw Error(`${n} is invalid`)}if(r.length!==t||p(r)!==e)throw Error(`${n} is invalid`);return r}function ss(e){return!e||typeof e!=`object`||Array.isArray(e)?null:e}function $(e){return typeof e==`string`?e.trim():``}function cs(e,t){let n=$(e);return n?{ok:!0,value:n}:{ok:!1,error:{code:`missing`,message:`${t} is required`}}}function ls(e){let t=typeof e==`number`?e:Number(e);return!Number.isSafeInteger(t)||t<1?{ok:!1,error:{code:`invalid`,message:`signerSlot must be an integer >= 1`}}:{ok:!0,value:t}}function us(e){return{ok:!1,error:{code:`invalid`,message:`${e} must be an object`}}}function ds(e){let n=t(e);return n.ok?{ok:!0,value:n.value}:{ok:!1,error:n.error}}function fs(e){let t=ss(e);if(!t)return us(`WalletIdentity`);let r=n(t.walletId);return r.ok?{ok:!0,value:{walletId:r.value}}:{ok:!1,error:r.error}}function ps(e){return{walletId:e.walletId}}function ms(e){let t=ss(e);if(!t)return us(`PasskeyAuthScope`);let n=fs(t.wallet);if(!n.ok)return n;let r=ds(t.rpId);return r.ok?{ok:!0,value:{wallet:n.value,rpId:r.value}}:r}function hs(e){return{wallet:e.wallet,rpId:e.rpId}}function gs(e){let t=$(e.credentialIdB64u);if(!t)throw Error(`credentialIdB64u is required`);return{kind:`passkey`,walletAuthMethodId:e.walletAuthMethodId,scope:e.scope,credentialIdB64u:t}}function _s(e){let t=$(e.emailHashHex),n=$(e.registrationAuthorityId);if(!t)throw Error(`emailHashHex is required`);if(!n)throw Error(`registrationAuthorityId is required`);return{kind:`email_otp`,walletAuthMethodId:e.walletAuthMethodId,wallet:e.wallet,emailHashHex:t,registrationAuthorityId:n}}function vs(e){let t=ss(e);if(!t)return us(`WalletAuthMethodBinding`);let n=$(t.kind),i=r(t.walletAuthMethodId);if(!i.ok)return{ok:!1,error:i.error};if(n===`passkey`){let e=ms(t.scope);if(!e.ok)return e;let n=cs(t.credentialIdB64u,`credentialIdB64u`);return n.ok?{ok:!0,value:gs({walletAuthMethodId:i.value,scope:e.value,credentialIdB64u:n.value})}:n}if(n===`email_otp`){if(`rpId`in t&&$(t.rpId))return{ok:!1,error:{code:`invalid`,message:`Email OTP auth-method binding must not include rpId`}};let e=fs(t.wallet);if(!e.ok)return e;let n=cs(t.emailHashHex,`emailHashHex`);if(!n.ok)return n;let r=cs(t.registrationAuthorityId,`registrationAuthorityId`);return r.ok?{ok:!0,value:_s({walletAuthMethodId:i.value,wallet:e.value,emailHashHex:n.value,registrationAuthorityId:r.value})}:r}return{ok:!1,error:{code:`invalid`,message:`WalletAuthMethodBinding kind is invalid`}}}function ys(e){return{kind:`implicit_near_account`,wallet:e.wallet,nearAccountId:e.nearAccountId}}function bs(e){return{kind:`named_near_account`,wallet:e.wallet,nearAccountId:e.nearAccountId}}function xs(e){let t=ss(e);if(!t)return us(`NearAccountBinding`);let n=fs(t.wallet);if(!n.ok)return n;let r=$(t.kind);if(r===`implicit_near_account`){let e=Be(t.nearAccountId);return e.ok?{ok:!0,value:ys({wallet:n.value,nearAccountId:e.value})}:{ok:!1,error:{code:e.code,message:e.message}}}if(r===`named_near_account`){let e=ze(t.nearAccountId);return e.ok?{ok:!0,value:bs({wallet:n.value,nearAccountId:e.value})}:{ok:!1,error:{code:e.code,message:e.message}}}return{ok:!1,error:{code:`invalid`,message:`NearAccountBinding kind is invalid`}}}function Ss(e){let t=ls(e.signerSlot);if(!t.ok)throw Error(t.error.message);return{kind:`near_ed25519_signer`,account:e.account,nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,signerSlot:t.value}}function Cs(e){let t=ss(e);if(!t)return us(`NearEd25519SignerBinding`);let n=xs(t.account);if(!n.ok)return n;let r=cs(t.nearEd25519SigningKeyId,`nearEd25519SigningKeyId`);if(!r.ok)return r;let i=ls(t.signerSlot);return i.ok?{ok:!0,value:Ss({account:n.value,nearEd25519SigningKeyId:Ye(r.value),signerSlot:i.value})}:i}function ws(e){let t=typeof e==`string`?e.trim():``;if(!t.startsWith(`ederivation-key-`))throw Error(`Threshold ECDSA key handle is invalid`);return t}function Ts(e,t){let n=String(e??``).trim();if(!n)throw Error(`[threshold-ecdsa-key-handle] ${t} is required`);return n}function Es(e){return String(e??``).trim()||`default`}async function Ds(e){return`ederivation-key-${p(await Ne(N({domain:`seams.threshold_ecdsa.key_handle.v1`,ecdsaThresholdKeyId:Ts(e.ecdsaThresholdKeyId,`ecdsaThresholdKeyId`),signingRootId:Ts(e.signingRootId,`signingRootId`),signingRootVersion:Es(e.signingRootVersion)})))}`}function Os(e){return{code:`missing`,message:`${e} is required`}}function ks(e,t){return{code:`invalid`,message:`${e} ${t}`}}function As(e,t){if(e==null)return{ok:!1,error:Os(t)};if(typeof e!=`string`)return{ok:!1,error:ks(t,`must be a string`)};let n=e.trim();return n?l(n)?{ok:!1,error:ks(t,`must not contain whitespace or control characters`)}:{ok:!0,value:n}:{ok:!1,error:Os(t)}}function js(e,t){if(e==null)return{ok:!1,error:Os(t)};if(typeof e!=`string`||e.length===0)return{ok:!1,error:ks(t,`must be non-empty base64url`)};try{let n=m(e);if(n.length===0||p(n)!==e)return{ok:!1,error:ks(t,`must be canonical unpadded base64url`)}}catch{return{ok:!1,error:ks(t,`must be canonical unpadded base64url`)}}return{ok:!0,value:e}}function Ms(e,t,n){if(e==null)return{ok:!1,error:Os(t)};try{return{ok:!0,value:n(P(e))}}catch{return{ok:!1,error:ks(t,`must be canonical base64url for 32 bytes`)}}}function Ns(e){return e}function Ps(e){return e}function Fs(e){return e}function Is(e,t,n){let r=new Set(t);for(let t of Object.keys(e))if(!r.has(t))throw Error(`${n}.${t} is not supported`);for(let r of t)if(!(r in e))throw Error(`${n}.${r} is required`)}function Ls(e){return As(e,`laneHolderParticipantId`)}function Rs(e){return As(e,`signingWorkerParticipantId`)}function zs(e){return As(e,`signingWorkerRecipientKeyId`)}function Bs(e){return As(e,`laneHolderCustodyBindingId`)}function Vs(e){return Ms(e,`participantBindingDigestB64u`,Fs)}function Hs(e){return Ms(e,`custodyBindingDigestB64u`,Ns)}function Us(e){return Ms(e,`hpkePublicKeyDigestB64u`,Ps)}function Ws(e){return{kind:`lane_holder_custody_identity_v1`,custodyBindingId:e.custodyBindingId,custodyBindingDigestB64u:e.custodyBindingDigestB64u}}function Gs(e){return{kind:`signing_worker_recipient_identity_v1`,recipientKeyId:e.recipientKeyId,hpkePublicKeyB64u:e.hpkePublicKeyB64u,hpkePublicKeyDigestB64u:e.hpkePublicKeyDigestB64u}}function Ks(e,t=`laneHolderCustodyIdentity`){let n=d(e,t);if(Is(n,[`kind`,`custodyBindingId`,`custodyBindingDigestB64u`],t),n.kind!==`lane_holder_custody_identity_v1`)throw Error(`${t}.kind is invalid`);let r=Bs(n.custodyBindingId);if(!r.ok)throw Error(`${t}.${r.error.message}`);let i=Hs(n.custodyBindingDigestB64u);if(!i.ok)throw Error(`${t}.${i.error.message}`);return Ws({custodyBindingId:r.value,custodyBindingDigestB64u:i.value})}function qs(e,t=`signingWorkerRecipientIdentity`){let n=d(e,t);if(Is(n,[`kind`,`recipientKeyId`,`hpkePublicKeyB64u`,`hpkePublicKeyDigestB64u`],t),n.kind!==`signing_worker_recipient_identity_v1`)throw Error(`${t}.kind is invalid`);let r=zs(n.recipientKeyId);if(!r.ok)throw Error(`${t}.${r.error.message}`);let i=js(n.hpkePublicKeyB64u,`${t}.hpkePublicKeyB64u`);if(!i.ok)throw Error(i.error.message);let a=Us(n.hpkePublicKeyDigestB64u);if(!a.ok)throw Error(`${t}.${a.error.message}`);return Gs({recipientKeyId:r.value,hpkePublicKeyB64u:i.value,hpkePublicKeyDigestB64u:a.value})}function Js(e){return{kind:`lane_holder_participant_v1`,participantId:e.participantId,custodyBindingId:e.custody.custodyBindingId,custodyBindingDigestB64u:e.custody.custodyBindingDigestB64u,hpkePublicKeyB64u:e.hpkePublicKeyB64u,hpkePublicKeyDigestB64u:e.hpkePublicKeyDigestB64u,participantBindingDigestB64u:e.participantBindingDigestB64u}}function Ys(e){return{kind:`signing_worker_participant_v1`,participantId:e.participantId,recipientKeyId:e.recipient.recipientKeyId,hpkePublicKeyB64u:e.recipient.hpkePublicKeyB64u,hpkePublicKeyDigestB64u:e.recipient.hpkePublicKeyDigestB64u,participantBindingDigestB64u:e.participantBindingDigestB64u}}function Xs(e,t=`laneHolderParticipant`){let n=d(e,t);if(Is(n,[`kind`,`participantId`,`custodyBindingId`,`custodyBindingDigestB64u`,`hpkePublicKeyB64u`,`hpkePublicKeyDigestB64u`,`participantBindingDigestB64u`],t),n.kind!==`lane_holder_participant_v1`)throw Error(`${t}.kind is invalid`);let r=Ls(n.participantId);if(!r.ok)throw Error(`${t}.${r.error.message}`);let i=Ks({kind:`lane_holder_custody_identity_v1`,custodyBindingId:n.custodyBindingId,custodyBindingDigestB64u:n.custodyBindingDigestB64u},`${t}.custody`),a=js(n.hpkePublicKeyB64u,`${t}.hpkePublicKeyB64u`);if(!a.ok)throw Error(a.error.message);let o=Us(n.hpkePublicKeyDigestB64u);if(!o.ok)throw Error(`${t}.${o.error.message}`);let s=Vs(n.participantBindingDigestB64u);if(!s.ok)throw Error(`${t}.${s.error.message}`);return Js({participantId:r.value,custody:i,hpkePublicKeyB64u:a.value,hpkePublicKeyDigestB64u:o.value,participantBindingDigestB64u:s.value})}function Zs(e,t=`signingWorkerParticipant`){let n=d(e,t);if(Is(n,[`kind`,`participantId`,`recipientKeyId`,`hpkePublicKeyB64u`,`hpkePublicKeyDigestB64u`,`participantBindingDigestB64u`],t),n.kind!==`signing_worker_participant_v1`)throw Error(`${t}.kind is invalid`);let r=Rs(n.participantId);if(!r.ok)throw Error(`${t}.${r.error.message}`);let i=qs({kind:`signing_worker_recipient_identity_v1`,recipientKeyId:n.recipientKeyId,hpkePublicKeyB64u:n.hpkePublicKeyB64u,hpkePublicKeyDigestB64u:n.hpkePublicKeyDigestB64u},`${t}.recipient`),a=Vs(n.participantBindingDigestB64u);if(!a.ok)throw Error(`${t}.${a.error.message}`);return Ys({participantId:r.value,recipient:i,participantBindingDigestB64u:a.value})}const Qs=[`kind`,`signerId`,`participantIds`,`signingWorkerId`,`custodyKeyManifestDigestB64u`,`sourceIdentityDigestB64u`];function $s(e,t=`walletSignerId`){if(typeof e!=`string`)throw Error(`${t} must be a string`);let n=e.trim();if(!n)throw Error(`${t} is required`);if(l(n))throw Error(`${t} must not contain whitespace or control characters`);return n}function ec(e,t){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<=0)throw Error(`${t} must be a positive safe integer`);return e}function tc(e,t){if(!Array.isArray(e)||e.length!==2)throw Error(`${t} must contain exactly two participant ids`);let n=ec(e[0],`${t}[0]`),r=ec(e[1],`${t}[1]`);if(n===r)throw Error(`${t} must contain distinct participant ids`);return[n,r]}function nc(e){let t=tc(e.participantIds,`participantIds`);return{kind:`owner_lane_participant_continuity_v1`,signerId:$s(e.signerId),participantIds:t,signingWorkerId:v(i(e.signingWorkerId),`signingWorkerId`),custodyKeyManifestDigestB64u:y(e.custodyKeyManifestDigestB64u,`custodyKeyManifestDigestB64u`),sourceIdentityDigestB64u:y(e.sourceIdentityDigestB64u,`sourceIdentityDigestB64u`)}}function rc(e,t=`ownerParticipantContinuity`){let n=d(e,t);if(_(n,Qs,t),n.kind!==`owner_lane_participant_continuity_v1`)throw Error(`${t}.kind must be owner_lane_participant_continuity_v1`);return nc({signerId:$s(n.signerId,`${t}.signerId`),participantIds:tc(n.participantIds,`${t}.participantIds`),signingWorkerId:v(i(n.signingWorkerId),`${t}.signingWorkerId`),custodyKeyManifestDigestB64u:y(n.custodyKeyManifestDigestB64u,`${t}.custodyKeyManifestDigestB64u`),sourceIdentityDigestB64u:y(n.sourceIdentityDigestB64u,`${t}.sourceIdentityDigestB64u`)})}function ic(e,t){let n=String(e??``).trim();if(!n)throw Error(`[evm-family-ecdsa] ${t} is required`);return n}function ac(e){return ic(e,`rpId`)}function oc(e){return se({walletId:Ie(e.walletId),signingRootId:cc(e.signingRootId),signingRootVersion:lc(e.signingRootVersion)})}function sc(e){return ic(e,`ecdsaThresholdKeyId`)}function cc(e){return ic(e,`signingRootId`)}function lc(e){return String(e??``).trim()||`default`}function uc(e){let t=String(e??``).trim().toLowerCase();if(!/^0x[0-9a-f]{40}$/.test(t))throw Error(`[evm-family-ecdsa] thresholdOwnerAddress must be an EVM address`);return t}function dc(e){return uc(e)}function fc(e){return ac(e)}function pc(e){return ic(e,`keyHandle`)}function mc(e){return sc(String(e.record.ecdsaThresholdKeyId??``).trim())}function hc(e){return{signingRootId:cc(e.signingRootId),signingRootVersion:lc(e.signingRootVersion)}}function gc(e){return hc({signingRootId:e.record.signingRootId,signingRootVersion:e.record.signingRootVersion})}function _c(e){let t=ae(e.runtimePolicyScope);return hc({signingRootId:t.signingRootId,signingRootVersion:t.signingRootVersion})}function vc(e){let t=ic(e,`thresholdEcdsaPublicKeyB64u`),n;try{n=m(t)}catch{throw Error(`[evm-family-ecdsa] thresholdEcdsaPublicKeyB64u must be base64url`)}if(n.length!==33)throw Error(`[evm-family-ecdsa] thresholdEcdsaPublicKeyB64u must decode to 33 bytes`);return t}function yc(e){let t=Math.floor(Number(e));if(!Number.isSafeInteger(t)||t<1||t>65535)throw Error(`[evm-family-ecdsa] participantId must be a positive safe integer`);return t}function bc(e){let t=oe(e);if(!t?.length)throw Error(`[evm-family-ecdsa] participantIds are required`);return t.map(yc)}function xc(e){return e.map(e=>String(Number(e))).join(`,`)}function Sc(e){let t=2166136261;for(let n=0;n<e.length;n+=1)t^=e.charCodeAt(n),t=Math.imul(t,16777619)>>>0;return t.toString(16).padStart(8,`0`)}function Cc(e){return{walletId:e.walletId,keyScope:`evm-family`,ecdsaThresholdKeyId:sc(e.ecdsaThresholdKeyId),signingRootId:cc(e.signingRootId),signingRootVersion:lc(e.signingRootVersion),participantIds:bc(e.participantIds),thresholdOwnerAddress:uc(e.thresholdOwnerAddress)}}function wc(e){return Cc({walletId:Ie(e.walletId),ecdsaThresholdKeyId:e.ecdsaThresholdKeyId,signingRootId:e.signingRootId,signingRootVersion:e.signingRootVersion,participantIds:e.participantIds,thresholdOwnerAddress:e.thresholdOwnerAddress})}function Tc(e){return Le({walletId:Ie(e)})}async function Ec(e){return await Ds(e)}function Dc(e){return{kind:`verified_ecdsa_public_facts`,keyHandle:e.keyHandle,publicKeyB64u:vc(e.publicKeyB64u),participantIds:bc(e.participantIds),thresholdOwnerAddress:uc(e.thresholdOwnerAddress)}}function Oc(e){return{walletId:e.walletId,keyScope:e.keyFacts.keyScope,ecdsaThresholdKeyId:e.keyFacts.ecdsaThresholdKeyId,signingRootId:e.keyFacts.signingRootId,signingRootVersion:e.keyFacts.signingRootVersion,participantIds:e.keyFacts.participantIds,thresholdOwnerAddress:e.keyFacts.thresholdOwnerAddress}}function kc(e){let t=pc(e.keyHandle),n=wc(e),r=Dc({keyHandle:t,publicKeyB64u:e.thresholdEcdsaPublicKeyB64u,participantIds:n.participantIds,thresholdOwnerAddress:n.thresholdOwnerAddress});return{kind:`evm_family_ecdsa_wallet_key`,walletId:n.walletId,keyHandle:t,chainTarget:e.chainTarget,keyFacts:{kind:`evm_family_ecdsa_key_facts`,keyScope:n.keyScope,ecdsaThresholdKeyId:n.ecdsaThresholdKeyId,signingRootId:n.signingRootId,signingRootVersion:n.signingRootVersion,participantIds:r.participantIds,thresholdOwnerAddress:r.thresholdOwnerAddress,thresholdEcdsaPublicKeyB64u:r.publicKeyB64u}}}function Ac(e){let t=[];if(String(e.expected.keyHandle)!==String(e.actual.keyHandle)&&t.push(`keyHandle`),String(e.expected.publicKeyB64u)!==String(e.actual.publicKeyB64u)&&t.push(`publicKeyB64u`),xc(e.expected.participantIds)!==xc(e.actual.participantIds)&&t.push(`participantIds`),String(e.expected.thresholdOwnerAddress)!==String(e.actual.thresholdOwnerAddress)&&t.push(`thresholdOwnerAddress`),t.length)throw Error(`[evm-family-ecdsa] ${e.context} public facts mismatch: ${t.join(`, `)}`)}function jc(e){return{kind:`passkey_ecdsa_auth_binding`,authMethod:Re.passkey,rpId:ac(e.rpId),credentialIdB64u:ic(e.credentialIdB64u,`credentialIdB64u`)}}function Mc(e){return{kind:`resolved_evm_family_ecdsa_key`,walletId:Ie(e.walletId),publicFacts:e.publicFacts,authBinding:e.authBinding}}function Nc(e){return{kind:`hydrated_ecdsa_signer_material`,walletId:e.walletId,materialActivation:e.materialActivation,publicFacts:e.publicFacts,transport:e.transport,clientShare:e.clientShare,routerAbEcdsaDerivationNormalSigning:e.routerAbEcdsaDerivationNormalSigning}}function Pc(e){let t=Math.floor(Number(e.ttlMs)),n=Math.floor(Number(e.remainingUses));if(!Number.isFinite(t)||t<=0)throw Error(`[evm-family-ecdsa] ttlMs must be a positive finite value`);if(!Number.isFinite(n)||n<=0)throw Error(`[evm-family-ecdsa] remainingUses must be a positive finite value`);return{chainTarget:e.chainTarget,thresholdSessionId:Xe.thresholdEcdsaSession(e.thresholdSessionId),ttlMs:t,remainingUses:n,runtimePolicyScope:e.runtimePolicyScope}}function Fc(e){let t=Math.floor(Number(e.ttlMs)),n=Math.floor(Number(e.remainingUses));if(!Number.isFinite(t)||t<=0)throw Error(`[evm-family-ecdsa] ttlMs must be a positive finite value`);if(!Number.isFinite(n)||n<=0)throw Error(`[evm-family-ecdsa] remainingUses must be a positive finite value`);return{chainTarget:e.chainTarget,thresholdSessionId:Xe.thresholdEcdsaSession(e.thresholdSessionId),ttlMs:t,remainingUses:n,runtimePolicyScope:e.runtimePolicyScope}}function Ic(e){return`evmfam-ecdsa:${Sc(N({version:`evm_family_ecdsa_key_fingerprint_v2`,walletId:String(e.walletId),baseEcdsaSubjectId:String(Tc(e.walletId)),keyScope:e.keyScope,ecdsaThresholdKeyId:String(e.ecdsaThresholdKeyId),signingRootId:String(e.signingRootId),signingRootVersion:String(e.signingRootVersion),participantIds:e.participantIds.map(e=>Number(e)),thresholdOwnerAddress:String(e.thresholdOwnerAddress)}))}`}function Lc(e){return`evmfam-ecdsa:${Sc(N({version:`evm_family_ecdsa_public_facts_fingerprint_v1`,walletId:String(Ie(e.walletId)),keyHandle:String(e.publicFacts.keyHandle),publicKeyB64u:String(e.publicFacts.publicKeyB64u),participantIds:e.publicFacts.participantIds.map(e=>Number(e)),thresholdOwnerAddress:String(e.publicFacts.thresholdOwnerAddress)}))}`}export{ho as $,zn as $t,ys as A,xi as At,is as B,Nt as Bt,dc as C,Ci as Ct,Zs as D,Qi as Dt,Vs as E,ba as Et,ps as F,rr as Ft,Ko as G,wt as Gt,rs as H,Et as Ht,xs as I,Cr as It,Bo as J,gn as Jt,Wo as K,Tt as Kt,Cs as L,Tr as Lt,Ss as M,lr as Mt,hs as N,er as Nt,ws as O,Xi as Ot,gs as P,ir as Pt,ko as Q,Rn as Qt,ds as R,jt as Rt,vc as S,Ga as St,Xs as T,Fi as Tt,as as U,kt as Ut,ns as V,Ot as Vt,ts as W,Dt as Wt,Oo as X,sn as Xt,Ro as Y,en as Yt,To as Z,Ln as Zt,gc as _,ot as _n,Wa as _t,kc as a,Fn as an,$a as at,yc as b,it as bn,Ia as bt,Mc as c,qn as cn,Za as ct,Ic as d,Ft as dn,Oi as dt,rn as en,vo as et,Lc as f,zt as fn,Ai as ft,mc as g,rt as gn,Ba as gt,hc as h,Qe as hn,ra as ht,Pc as i,Jn as in,Xa as it,bs as j,Nr as jt,_s as k,bi as kt,Dc as l,Pn as ln,qa as lt,Oc as m,pt as mn,Mi as mt,wc as n,Gn as nn,Co as nt,Nc as o,Vn as on,Qa as ot,oc as p,Ct as pn,Wi as pt,Vo as q,At as qt,Fc as r,Yn as rn,io as rt,jc as s,Wn as sn,Ja as st,Ac as t,Hn as tn,bo as tt,Ec as u,In as un,ii as ut,_c as v,nt as vn,Ra as vt,rc as w,Li as wt,fc as x,Ze as xn,Pa as xt,pc as y,at as yn,Ha as yt,vs as z,Mt as zt};

package/dist/esm/sdk/exactSessionState-CjD8gekO.js

@@ -0,0 +1,210 @@
+import{O as e,i as t}from"./domainIds-GDzjOs6i.js";import{g as n,m as r,v as i}from"./validation-dC1-_uyG.js";import{kt as a,nt as o}from"./ecdsaPresignLifecycle-CQnCxSlq.js";import{h as s,m as c}from"./capabilityKinds-XaXXiD2B.js";import{a as l}from"./ecdsaChainTarget-CRcRR78w.js";import{o as u}from"./signerDomain-BhUTzDmF.js";import{t as d}from"./accountIds-C3Ihsd2c.js";import{z as f}from"./evmFamilyEcdsaIdentity-Br3iFdQx.js";import{a as ee}from"./registrationIds-BIel5S0i.js";import{s as te}from"./keyMaterialBrands-uVZHfAh3.js";import{t as p}from"./signerSlot-BQ1g5JNV.js";import{_ as m,v as h,x as g}from"./nonceLaneKeys-BBYi4g51.js";import{t as _}from"./EvmClient-DoxytQaJ.js";import{n as ne}from"./configHelpers-CseiVoZD.js";import{n as re,r as ie,t as ae}from"./csp-stylesheet-B1fAhrGB.js";const oe=/^0x[0-9a-fA-F]{40}$/,se=`0xfeec000000000000000000000000000000000000`,ce=[{type:`function`,name:`setUserToken`,inputs:[{name:`token`,type:`address`}]}];function v(e,t){let n=String(t||``).trim();if(!oe.test(n))throw Error(`[tempo] invalid ${e}: expected 20-byte 0x-prefixed address`);return n.toLowerCase()}function le(e){return`0xe7897444${v(`fee token address`,e).slice(2).toLowerCase().padStart(64,`0`)}`}function ue(e){let{request:t,chainTarget:n}=e;if(t.chain!==`evm`||t.kind!==`eip1559`||t.senderSignatureAlgorithm!==`secp256k1`)throw Error(`[tempo] fee-token request must use the EIP-1559 secp256k1 envelope`);if(t.tx.chainId!==n.chainId)throw Error(`[tempo] fee-token request chain id does not match the Tempo target`);if(t.tx.to?.toLowerCase()!==`0xfeec000000000000000000000000000000000000`)throw Error(`[tempo] fee-token request must call the Tempo FeeManager`);if(t.tx.value!==0n)throw Error(`[tempo] fee-token request must not transfer value`);let r=String(t.tx.data??``).toLowerCase(),i=r.slice(10);if(!r.startsWith(`0xe7897444`)||!/^0{24}[0-9a-f]{40}$/.test(i))throw Error(`[tempo] fee-token request must call FeeManager.setUserToken(address)`);if(t.tx.accessList&&t.tx.accessList.length!==0)throw Error(`[tempo] fee-token request must not carry an access list`);let a=v(`fee token address`,`0x${i.slice(24)}`);return{...t,tx:{...t.tx,to:se,value:0n,data:le(a)}}}function de(e){return`0xed498fa8${v(`user address`,e).slice(2).toLowerCase().padStart(64,`0`)}`}function fe(e){let t=String(e||``).trim().toLowerCase();if(!/^0x[0-9a-f]*$/.test(t))throw Error(`[tempo] invalid userTokens(address) result: expected 0x-prefixed hex`);let n=t.slice(2);if(n.length<64)throw Error(`[tempo] invalid userTokens(address) result: expected at least 32 bytes`);let r=n.slice(0,64).slice(24);if(!/^[0-9a-f]{40}$/.test(r))throw Error(`[tempo] invalid userTokens(address) result: malformed address word`);return/^0+$/.test(r)?null:`0x${r}`}function pe(e){let t=v(`fee token address`,e.token);return{to:v(`fee manager contract address`,e.feeManager??`0xfeec000000000000000000000000000000000000`),value:0n,input:le(t),abi:ce}}function me(e,t){let n=String(e||``).trim().toLowerCase();if(!/^0x[0-9a-f]+$/.test(n))throw Error(`[tempo] invalid ${t} result: expected 0x-prefixed hex`);let r=n.slice(2);if(r.length<128)throw Error(`[tempo] invalid ${t} result: missing ABI string header`);let i=Number(BigInt(`0x${r.slice(0,64)}`));if(!Number.isSafeInteger(i))throw Error(`[tempo] invalid ${t} result: unsafe ABI offset`);let a=i*2,o=a+64;if(o>r.length)throw Error(`[tempo] invalid ${t} result: ABI offset out of bounds`);let s=Number(BigInt(`0x${r.slice(a,o)}`));if(!Number.isSafeInteger(s))throw Error(`[tempo] invalid ${t} result: unsafe ABI string length`);let c=o;if(c+s*2>r.length)throw Error(`[tempo] invalid ${t} result: ABI string out of bounds`);let l=new Uint8Array(s);for(let e=0;e<s;e+=1)l[e]=Number.parseInt(r.slice(c+e*2,c+e*2+2),16);return new TextDecoder().decode(l)}function he(e,t){let n=String(e||``).trim().toLowerCase();if(!/^0x[0-9a-f]{64}$/.test(n))throw Error(`[tempo] invalid ${t} result: expected one ABI word`);let r=BigInt(n);if(r!==0n&&r!==1n)throw Error(`[tempo] invalid ${t} result: expected boolean`);return r===1n}async function y(e){let t=await _({rpcUrl:e.rpcUrl,...e.timeoutMs===void 0?{}:{requestTimeoutMs:e.timeoutMs}}).request({method:`eth_call`,params:[{to:e.to,data:e.data},`latest`],...e.timeoutMs===void 0?{}:{timeoutMs:e.timeoutMs}});if(typeof t!=`string`)throw Error(`[tempo] invalid eth_call response: expected a hex string`);return t}async function ge(e){let t=v(`account address`,e.account);return fe(await y({rpcUrl:e.rpcUrl,to:se,data:de(t),...e.timeoutMs===void 0?{}:{timeoutMs:e.timeoutMs}}))}async function _e(e){let t=v(`fee token address`,e.feeToken),n={rpcUrl:e.rpcUrl,to:t,...e.timeoutMs===void 0?{}:{timeoutMs:e.timeoutMs}},r=me(await y({...n,data:`0xe5a6b10f`}),`currency()`);return r===`USD`?he(await y({...n,data:`0x5c975abb`}),`paused()`)?{kind:`invalid`,feeToken:t,reason:`paused`,currency:`USD`}:{kind:`valid`,feeToken:t,currency:`USD`,paused:!1}:{kind:`invalid`,feeToken:t,reason:`unsupported_currency`,currency:r}}function ve(e){if(!Number.isSafeInteger(e.chainId)||e.chainId<=0)throw Error(`[tempo] chainId must be a positive safe integer`);if(e.maxPriorityFeePerGas<0n)throw Error(`[tempo] maxPriorityFeePerGas must be non-negative`);if(e.maxFeePerGas<e.maxPriorityFeePerGas)throw Error(`[tempo] maxFeePerGas must be at least maxPriorityFeePerGas`);if(e.gasLimit<=0n)throw Error(`[tempo] gasLimit must be positive`);let t=pe({token:e.feeToken});return{chain:`evm`,kind:`eip1559`,senderSignatureAlgorithm:`secp256k1`,tx:{chainId:e.chainId,maxPriorityFeePerGas:e.maxPriorityFeePerGas,maxFeePerGas:e.maxFeePerGas,gasLimit:e.gasLimit,to:t.to,value:0n,data:t.input??`0x`,abi:t.abi,accessList:[]}}}var ye={grey:{25:`oklch(0.99 0.001 240)`,50:`oklch(0.98 0.001 240)`,75:`oklch(0.97 0.002 240)`,100:`oklch(0.95 0.005 240)`,150:`oklch(0.92 0.007 240)`,200:`oklch(0.88 0.01 240)`,250:`oklch(0.85 0.012 240)`,300:`oklch(0.82 0.014 240)`,350:`oklch(0.75 0.016 240)`,400:`oklch(0.65 0.02 240)`,450:`oklch(0.6 0.021 240)`,500:`oklch(0.53 0.02 240)`,550:`oklch(0.48 0.02 240)`,600:`oklch(0.4 0.02 240)`,650:`oklch(0.35 0.018 240)`,700:`oklch(0.3 0.015 240)`,750:`oklch(0.25 0.012 240)`,800:`oklch(0.2 0.01 240)`,825:`oklch(0.17 0.009 240)`,850:`oklch(0.15 0.008 240)`,900:`oklch(0.1 0.005 240)`,950:`oklch(0.05 0.002 240)`,975:`oklch(0.025 0.001 240)`},slate:{25:`oklch(0.99 0.003 240)`,50:`oklch(0.98 0.005 240)`,75:`oklch(0.965 0.007 240)`,100:`oklch(0.95 0.01 240)`,150:`oklch(0.915 0.0125 240)`,200:`oklch(0.88 0.015 240)`,250:`oklch(0.84 0.0175 240)`,300:`oklch(0.8 0.02 240)`,350:`oklch(0.725 0.0225 240)`,400:`oklch(0.65 0.025 240)`,450:`oklch(0.59 0.0275 240)`,500:`oklch(0.53 0.03 240)`,550:`oklch(0.465 0.0275 240)`,600:`oklch(0.4 0.025 240)`,650:`oklch(0.35 0.0225 240)`,700:`oklch(0.3 0.02 240)`,750:`oklch(0.25 0.0175 240)`,800:`oklch(0.2 0.015 240)`,825:`oklch(0.175 0.015 240)`,850:`oklch(0.15 0.0125 240)`,900:`oklch(0.1 0.01 240)`},yellow:{50:`oklch(0.97 0.050 95)`,100:`oklch(0.95 0.070 95)`,150:`oklch(0.93 0.082 95)`,200:`oklch(0.90 0.094 95)`,250:`oklch(0.87 0.108 95)`,300:`oklch(0.82 0.140 95)`,350:`oklch(0.78 0.160 95)`,400:`oklch(0.74 0.176 95)`,450:`oklch(0.70 0.184 95)`,500:`oklch(0.66 0.188 95)`,550:`oklch(0.62 0.182 95)`,600:`oklch(0.56 0.160 95)`,650:`oklch(0.52 0.138 95)`,700:`oklch(0.46 0.106 95)`,750:`oklch(0.42 0.086 95)`,800:`oklch(0.36 0.062 95)`,850:`oklch(0.32 0.052 95)`,900:`oklch(0.26 0.044 95)`,950:`oklch(0.22 0.036 95)`},blue:{50:`oklch(0.97 0.040 255)`,100:`oklch(0.95 0.062 255)`,150:`oklch(0.93 0.074 255)`,200:`oklch(0.90 0.086 255)`,250:`oklch(0.87 0.100 255)`,300:`oklch(0.82 0.130 255)`,350:`oklch(0.78 0.150 255)`,400:`oklch(0.74 0.166 255)`,450:`oklch(0.70 0.174 255)`,500:`oklch(0.66 0.180 255)`,550:`oklch(0.62 0.176 255)`,600:`oklch(0.56 0.158 255)`,650:`oklch(0.52 0.138 255)`,700:`oklch(0.46 0.108 255)`,750:`oklch(0.42 0.088 255)`,800:`oklch(0.36 0.065 255)`,850:`oklch(0.32 0.056 255)`,900:`oklch(0.26 0.050 255)`,950:`oklch(0.22 0.040 255)`},red:{50:`oklch(0.97 0.040 19)`,100:`oklch(0.95 0.060 19)`,150:`oklch(0.93 0.072 19)`,200:`oklch(0.90 0.086 19)`,250:`oklch(0.87 0.100 19)`,300:`oklch(0.82 0.130 19)`,350:`oklch(0.78 0.150 19)`,400:`oklch(0.74 0.166 19)`,450:`oklch(0.70 0.174 19)`,500:`oklch(0.66 0.180 19)`,550:`oklch(0.62 0.176 19)`,600:`oklch(0.56 0.158 19)`,650:`oklch(0.52 0.138 19)`,700:`oklch(0.46 0.108 19)`,750:`oklch(0.42 0.088 19)`,800:`oklch(0.36 0.065 19)`,850:`oklch(0.32 0.056 19)`,900:`oklch(0.26 0.050 19)`,950:`oklch(0.22 0.040 19)`},orange:{100:`oklch(0.82 0.08 52)`,200:`oklch(0.8 0.1 55)`,300:`oklch(0.75 0.12 58)`,400:`oklch(0.7 0.14 60)`,500:`oklch(0.65 0.13 62)`,600:`oklch(0.6 0.12 65)`,700:`oklch(0.55 0.11 68)`,800:`oklch(0.5 0.1 70)`,900:`oklch(0.45 0.09 72)`},violet:{100:`oklch(0.80 0.08 308)`,200:`oklch(0.75 0.1 305)`,300:`oklch(0.72 0.12 302)`,400:`oklch(0.68 0.14 300)`,500:`oklch(0.65 0.15 298)`,600:`oklch(0.6 0.14 295)`,700:`oklch(0.55 0.13 292)`,800:`oklch(0.5 0.12 290)`,900:`oklch(0.45 0.11 288)`},green:{50:`oklch(0.97 0.040 170)`,100:`oklch(0.95 0.062 170)`,150:`oklch(0.93 0.074 170)`,200:`oklch(0.90 0.086 170)`,250:`oklch(0.87 0.100 170)`,300:`oklch(0.82 0.130 170)`,350:`oklch(0.78 0.150 170)`,400:`oklch(0.74 0.166 170)`,450:`oklch(0.70 0.174 170)`,500:`oklch(0.66 0.180 170)`,550:`oklch(0.62 0.176 170)`,600:`oklch(0.56 0.158 170)`,650:`oklch(0.52 0.138 170)`,700:`oklch(0.46 0.108 170)`,750:`oklch(0.42 0.088 170)`,800:`oklch(0.36 0.065 170)`,850:`oklch(0.32 0.056 170)`,900:`oklch(0.26 0.050 170)`,950:`oklch(0.22 0.040 170)`},gradients:{blue:`linear-gradient(45deg, oklch(0.82 0.130 255) 0%, oklch(0.66 0.180 255) 50%)`,red:`linear-gradient(45deg, oklch(0.82 0.130 19) 0%, oklch(0.66 0.180 19) 50%)`,green:`linear-gradient(45deg, oklch(0.82 0.130 170) 0%, oklch(0.66 0.180 170) 50%)`,black:`linear-gradient(45deg, oklch(0.53 0.03 240) 0%, oklch(0.2 0.015 240) 50%)`,blueWhite:`linear-gradient(90deg, hsla(213, 62%, 45%, 1) 0%, hsla(203, 89%, 71%, 1) 50%, hsla(0, 0%, 96%, 1) 100%)`,sage:`linear-gradient(160deg, #919690 0%, #c7d0cf 100%)`,sageDeep:`linear-gradient(160deg, #004737 0%, #919690 100%)`}};function be(e){let t={...b(`yellow`,e.yellow),...b(`blue`,e.blue),...b(`red`,e.red),...b(`orange`,e.orange),...b(`violet`,e.violet),...b(`green`,e.green)},n={...b(`grey`,e.grey),...b(`slate`,e.slate)},r={blue:e.gradients?.blue,red:e.gradients?.red,green:e.gradients?.green,black:e.gradients?.black,blueWhite:e.gradients?.blueWhite,sage:e.gradients?.sage,sageDeep:e.gradients?.sageDeep};return{CHROMA_COLORS:t,GREY_COLORS:n,GRADIENTS:r,DARK_THEME:{...n,...t,textPrimary:n.grey75,textSecondary:n.grey500,textMuted:n.grey650,textButton:n.grey975,colorBackground:n.grey800,surface:n.slate700,surface2:n.slate750,txDetailsBackground:n.slate750,surface3:n.slate800,surface4:n.slate825,primary:n.grey25,primaryHover:n.grey200,secondary:t.violet600,secondaryHover:t.violet500,accent:t.green400,buttonBackground:n.grey25,buttonHoverBackground:n.grey200,hover:n.grey850,active:n.grey650,focus:n.grey350,success:t.blue400,warning:(e.yellow||{})[400],error:t.red400,info:t.blue400,borderPrimary:n.grey650,borderSecondary:n.slate650,borderHover:n.grey600,gradientPrimary:r.blue,gradientSecondary:r.blueWhite,gradientTertiary:r.black,highlightPrimary:t.blue400,highlightHalo:t.blue400,highlightReceiver:t.blue400,highlightMethodName:t.blue400,highlightAmount:t.blue400},LIGHT_THEME:{...n,...t,textPrimary:n.grey650,textSecondary:n.grey500,textMuted:n.grey350,textButton:n.grey75,colorBackground:n.grey50,surface:n.slate100,surface2:n.slate150,txDetailsBackground:`#f8f8f7`,surface3:n.slate200,surface4:n.slate250,primary:n.grey975,primaryHover:n.grey750,secondary:t.violet600,secondaryHover:t.violet500,accent:t.green400,buttonBackground:n.grey975,buttonHoverBackground:n.grey750,hover:n.grey100,active:n.grey200,focus:n.grey600,success:t.blue500,warning:(e.yellow||{})[500],error:t.red500,info:t.blue400,borderPrimary:n.slate300,borderSecondary:n.grey300,borderHover:n.slate350,gradientPrimary:r.blue,gradientSecondary:r.blueWhite,gradientTertiary:r.black,highlightPrimary:t.blue300,highlightHalo:t.blue350,highlightReceiver:t.blue500,highlightMethodName:t.blue500,highlightAmount:t.blue500}}}const b=(e,t)=>{if(!t)return{};let n={};for(let r of Object.keys(t))n[`${e}${r}`]=t[r];return n},x=be(ye);x.CHROMA_COLORS,x.GREY_COLORS,x.GRADIENTS;const xe=x.DARK_THEME,Se=x.LIGHT_THEME;function Ce(e){return e.kind===`provisional_centered_modal`||e.kind===`centered_modal`||e.kind===`viewport_fallback`}function S(e){return typeof e==`number`&&Number.isFinite(e)&&e>0}function C(e){return typeof e==`number`&&Number.isFinite(e)}function w(e){return Math.max(0,Math.round(e))}function T(e){return Math.round(e)}function we(e,t,n){return Math.min(Math.max(e,t),n)}function E(e){if(!S(e.widthCssPx)||!S(e.heightCssPx)||!C(e.offsetLeftCssPx)||!C(e.offsetTopCssPx))throw Error(`Wallet iframe surface viewport is invalid`);return{widthCssPx:e.widthCssPx,heightCssPx:e.heightCssPx,offsetLeftCssPx:e.offsetLeftCssPx,offsetTopCssPx:e.offsetTopCssPx}}function D(e,t){let n=Math.max(1,e.widthCssPx-32),r=Math.max(1,e.heightCssPx-32);return{kind:`viewport_fallback`,reason:t,widthCssPx:w(n),heightCssPx:w(r),topCssPx:w(e.offsetTopCssPx+16),leftCssPx:w(e.offsetLeftCssPx+16)}}function O(e){return e.widthCssPx-32<280||e.heightCssPx-32<280}function Te(e,t,n,r){return{kind:r,widthCssPx:w(t),heightCssPx:w(n),topCssPx:w(e.offsetTopCssPx+(e.heightCssPx-n)/2),leftCssPx:w(e.offsetLeftCssPx+(e.widthCssPx-t)/2)}}function Ee(e,t){return e.kind===`viewport_fallback`||!C(t.topCssPx)||!C(t.leftCssPx)||!S(t.widthCssPx)||!S(t.heightCssPx)?e:{kind:e.kind,widthCssPx:w(t.widthCssPx),heightCssPx:w(e.heightCssPx),leftCssPx:T(t.leftCssPx),topCssPx:T(t.topCssPx)}}function De(e,t){return{kind:t,edge:`bottom`,widthCssPx:w(e.widthCssPx),heightCssPx:w(e.heightCssPx),topCssPx:T(e.offsetTopCssPx),leftCssPx:T(e.offsetLeftCssPx)}}function Oe(e){return e.kind===`drawer`}function ke(e,t,n=560){let r=E(t);if(Oe(e))return De(r,`provisional_bottom_drawer`);if(O(r))return D(r,`small_visual_viewport`);let i=r.widthCssPx-32,a=r.heightCssPx-32;return Te(r,we(n,280,Math.min(n,i)),Math.min(320,a),`provisional_centered_modal`)}function Ae(e,t,n,r=560){let i=E(t);if(Oe(e))return De(i,`bottom_drawer`);if(!S(n.widthCssPx)||!S(n.heightCssPx))throw Error(`Wallet iframe surface measurement is invalid`);if(O(i))return D(i,`small_visual_viewport`);let a=i.widthCssPx-32,o=i.heightCssPx-32;return Te(i,we(n.widthCssPx,280,Math.min(r,a)),we(n.heightCssPx,1,o),`centered_modal`)}function je(e){let t=e.measurement;if(!t)return ke(e.presentation,e.viewport,e.maxModalWidthCssPx);switch(t.kind){case`pending`:return ke(e.presentation,e.viewport,e.maxModalWidthCssPx);case`measured`:return Ae(e.presentation,e.viewport,t,e.maxModalWidthCssPx);case`unavailable`:{let t=E(e.viewport);return Oe(e.presentation)?De(t,`bottom_drawer`):O(t)?D(t,`small_visual_viewport`):D(t,`measurement_unavailable`)}default:{let e=t;throw Error(`Unhandled wallet iframe surface measurement state: ${String(e)}`)}}}function Me(e,t,n=1){return e.kind===t.kind?e.kind===`hidden`&&t.kind===`hidden`?!0:e.kind===`hidden`||t.kind===`hidden`||(`reason`in e||`reason`in t)&&(!(`reason`in e)||!(`reason`in t)||e.reason!==t.reason)||(`edge`in e||`edge`in t)&&(!(`edge`in e)||!(`edge`in t)||e.edge!==t.edge)?!1:Math.abs(e.widthCssPx-t.widthCssPx)<n&&Math.abs(e.heightCssPx-t.heightCssPx)<n&&Math.abs(e.topCssPx-t.topCssPx)<n&&Math.abs(e.leftCssPx-t.leftCssPx)<n:!1}const Ne=`seams-wallet-overlay`,k=`seams-wallet-overlay-dialog`,A=`seams-wallet-inline-dialog`,j=`seams-wallet-overlay-iframe`,M=`is-hidden`,N=`is-modal`,P=`is-drawer`,F=`is-viewport-fallback`,I=`is-provisional`,L=`is-auth-menu`,R=`has-geometry`,z=`is-resize-animated`,B=`is-reveal-pending`,Pe=`seams-wallet-overlay-dialog-`,Fe=`
+  .seams-transaction-review-slot {
+    position: absolute;
+    inset: 0;
+    overflow: auto;
+    overscroll-behavior: none;
+    scrollbar-width: none;
+    box-sizing: border-box;
+    color: var(--seams-colors-textPrimary);
+  }
+  .seams-transaction-review-slot[hidden] { display: none; }
+  .seams-transaction-review-slot::-webkit-scrollbar { display: none; }
+  .seams-review-wallet-inactive { opacity: 0; pointer-events: none; }
+  .seams-transaction-review-content { padding: 0.75rem; box-sizing: border-box; overflow-wrap: anywhere; }
+  .seams-transaction-review-content button { font: inherit; }
+  dialog.${k}[data-transaction-review]::backdrop { background: rgb(0 0 0 / 0.26); }
+  .seams-transaction-review-content h2 { margin-top: 0; }
+
+  dialog.${k} {
+    position: fixed;
+    display: block;
+    inset: auto;
+    top: auto;
+    left: auto;
+    right: auto;
+    bottom: auto;
+    margin: 0;
+    padding: 0;
+    border: 0;
+    overflow: visible;
+    max-width: none;
+    max-height: none;
+    background: transparent;
+    color-scheme: normal;
+    box-sizing: border-box;
+    --seams-wallet-overlay-safe-top: env(safe-area-inset-top, 0px);
+    --seams-wallet-overlay-safe-right: env(safe-area-inset-right, 0px);
+    --seams-wallet-overlay-safe-bottom: env(safe-area-inset-bottom, 0px);
+    --seams-wallet-overlay-safe-left: env(safe-area-inset-left, 0px);
+    z-index: var(--seams-wallet-overlay-z, 2147483646);
+  }
+  /* A dialog with no geometry rule would otherwise fall back to its static
+     position — the top-left of <body> — which is never right for an overlay.
+     Any surface that reaches the DOM before (or without) a measured rect gets
+     centred with the standard elevation instead of stranded in the corner.
+     Scoped to :not(.has-geometry) so a positioned surface is untouched. */
+  dialog.${k}:not(.${R}) {
+    top: 50%;
+    left: 50%;
+    translate: -50% -50%;
+    filter:
+      drop-shadow(0 12px 24px rgb(0 0 0 / 0.22))
+      drop-shadow(0 2px 8px rgb(0 0 0 / 0.12));
+  }
+  dialog.${k}:not([open]),
+  dialog.${k}.${M} {
+    visibility: hidden;
+    pointer-events: none;
+  }
+  dialog.${k}.${P}::backdrop {
+    background: transparent;
+  }
+  @keyframes seams-wallet-overlay-backdrop-in {
+    from {
+      background: transparent;
+    }
+    to {
+      background: rgb(0 0 0 / 0.26);
+    }
+  }
+  dialog.${k}.${N}::backdrop {
+    background: transparent;
+  }
+  dialog.${k}.${N}:not(.${I}):not(.${F}):not(.${L}):not(.${B})::backdrop {
+    background: rgb(0 0 0 / 0.26);
+    animation: seams-wallet-overlay-backdrop-in 180ms cubic-bezier(0.2, 0.7, 0.2, 1) both;
+  }
+  /* The host owns the modal frame. Keep the focused dialog and iframe from
+     adding a user-agent outline around the rounded card. */
+  dialog.${k}.${N},
+  dialog.${k}.${N}:focus,
+  dialog.${k}.${N}:focus-visible,
+  dialog.${k}.${N} iframe.${j},
+  dialog.${k}.${N} iframe.${j}:focus,
+  dialog.${k}.${N} iframe.${j}:focus-visible {
+    outline: none;
+  }
+  dialog.${k}.${N} {
+    transform-origin: top left;
+  }
+  /* Reviewed transactions keep one opaque shell while their interiors cross-fade. */
+  dialog.${k}.${N}[data-transaction-review] {
+    overflow: hidden;
+    background: var(--seams-colors-colorBackground);
+    border-radius: min(var(--seams-shape-card, 16px), 2rem);
+    box-shadow: 0 12px 24px rgb(0 0 0 / 0.22), 0 2px 8px rgb(0 0 0 / 0.12),
+      inset 0 0 0 1px var(--seams-colors-borderPrimary);
+  }
+  dialog.${k}.${N}[data-transaction-review] iframe.${j} {
+    filter: none;
+  }
+  /* The iframe clips the child's box shadow at its layout edge. Paint the
+     compact modal elevation in the host compositor so it can extend beyond
+     that edge without changing the measured hit region. */
+  dialog.${k}.${N}:not(.${I}):not(.${F}):not(.${L}):not([data-transaction-review])
+    iframe.${j} {
+    filter:
+      drop-shadow(0 12px 24px rgb(0 0 0 / 0.22))
+      drop-shadow(0 2px 8px rgb(0 0 0 / 0.12));
+  }
+  /* The auth-menu card paints no shadow of its own (wallet-ui.css) for the
+     same clipping reason; give it the quieter card elevation here, where the
+     drop-shadow hugs the card's silhouette and may extend past the iframe. */
+  dialog.${k}.${L} iframe.${j} {
+    filter:
+      drop-shadow(0 1px 2px rgb(15 23 42 / 0.05))
+      drop-shadow(0 10px 20px rgb(15 23 42 / 0.1));
+  }
+  dialog.${k}.${I}::backdrop {
+    background: transparent;
+  }
+  dialog.${k}.${F}::backdrop {
+    background: transparent;
+  }
+  /* The hosted auth menu is host-page furniture rather than an overlay: it is
+     opened non-modally, so it never enters the top layer, and it renders in the
+     host document's own stacking context. Page chrome (navbars, sticky headers,
+     popovers) therefore paints above it at ordinary z-index values instead of
+     losing to the overlay escape hatch.
+
+     It is position: absolute in DOCUMENT coordinates (its dynamic rule adds the
+     page scroll offset), not fixed: compositor scrolling then moves it with the
+     page content natively, instead of pinning it for a frame and snapping once
+     the scroll listener re-measures the anchor. It cannot be static because the
+     wallet iframe is mounted into this dialog once, before connect(), and
+     cannot be reparented afterwards without discarding its browsing context and
+     MessagePort — so the dialog stays a body child and mirrors the host
+     anchor's rect; --seams-wallet-inline-dialog-z is the host's hook for placing
+     it within the page's own layering. */
+  dialog.${k}.${A} {
+    position: absolute;
+    z-index: var(--seams-wallet-inline-dialog-z, auto);
+    transform-origin: top left;
+  }
+  dialog.${k}.${A}::backdrop {
+    background: transparent;
+  }
+  /* The dialog must NOT animate its own resize. The auth-menu card inside the
+     iframe animates its height, and a ResizeObserver posts every intermediate
+     frame out to this dialog. Transitioning here would make the host box ease
+     toward a target that is itself still easing — the box visibly trails the
+     card and the change reads as two steps (resize, then catch up). Applying
+     each reported frame instantly makes the dialog track the card 1:1, so the
+     card's own spring is the single motion, and the anchor height published
+     from the same frames keeps the host centring in step. */
+  dialog.${k}.${A}.${z} {
+    transition: none;
+  }
+  /* A provisional drawer already owns the full visual viewport. The hosted
+     auth menu also renders provisionally: hiding its dialog prevents the
+     child ResizeObserver from producing the measurement that replaces those
+     provisional bounds, leaving the menu invisible until the 4s fallback.
+     Request modals stay invisible until their measured bounds are ready.
+
+     Invisible means opacity, never visibility. Chrome stops rendering a
+     cross-origin iframe whose ancestor is visibility:hidden (no animation
+     frames, no ResizeObserver delivery), so a modal hidden that way could not
+     lay out its confirmer or post the measurement the reveal waits for: the
+     card appeared only when the 4s measurement fallback forced the box
+     visible. Playwright's bundled Chromium keeps rendering such frames, which
+     is why no browser test noticed. An opacity:0 dialog is painted normally
+     (the frame is not throttled), just fully transparent. */
+  dialog.${k}.${I}.${N}:not(.${L}) {
+    opacity: 0;
+    pointer-events: none;
+  }
+  /* Measured geometry is installed one frame before a request modal is
+     revealed. This prevents the native dialog's fallback position from ever
+     reaching the screen while its dynamic geometry rule settles. Opacity for
+     the same reason as above: the frame inside must keep rendering. */
+  dialog.${k}.${B} {
+    opacity: 0;
+    pointer-events: none;
+  }
+  iframe.${j} {
+    display: block;
+    width: 100%;
+    height: 100%;
+    border: 0;
+    margin: 0;
+    padding: 0;
+    background: transparent;
+    background-color: transparent;
+    box-sizing: border-box;
+  }
+  iframe.${j}.${M} {
+    width: 0;
+    height: 0;
+    opacity: 0;
+    pointer-events: none;
+  }
+  @media (prefers-reduced-motion: reduce) {
+    dialog.${k}.${A} {
+      transition: none;
+    }
+    dialog.${k}.${N}::backdrop {
+      animation: none;
+    }
+  }
+`;let Ie=null,Le=0;const V=()=>(Ie||=ae({doc:document,baseCss:Fe,dynamicStyleDataAttr:`data-seams-overlay-dyn`,nonce:()=>re()}),Ie);function Re(e){return Number.isFinite(e)&&e>=0}function H(e){return Re(e)?`${Math.min(Math.round(e),1e5)}px`:`0px`}function U(e){return Number.isFinite(e)?`${Math.min(Math.max(Math.round(e),-1e5),1e5)}px`:`0px`}function ze(e){return!Number.isFinite(e)||e<=0?`1`:String(Math.min(Math.max(e,.25),4))}const Be=e=>`${e}::drawer`,Ve=e=>`${e}::auth-menu`,W=e=>`${e}::iframe`;function G(e){let t=e.id;if(t.startsWith(Pe))return t;Le+=1;let n=`${Pe}${Le}`;return e.id=n,n}function He(e){V().ensureBase();try{e.classList.add(Ne),e instanceof HTMLIFrameElement&&e.classList.add(j)}catch{}}function K(e){V().ensureBase(),G(e),e.classList.add(k)}function Ue(e){He(e),e.classList.add(M),e.classList.remove(N,P,F,I,z,B)}function We(e){He(e),e.classList.remove(M)}function Ge(e,t,n){K(e),e.classList.toggle(N,t===`modal`),e.classList.toggle(P,t===`drawer`),e.classList.toggle(F,n===`fallback`),e.classList.toggle(I,n===`provisional`),e.classList.remove(M)}function Ke(e,t,n){K(e),e.classList.toggle(L,t),e.classList.toggle(A,t),e.classList.toggle(z,t&&n)}function qe(e,t,n=1){K(e);let r=G(e),i=H(16),a=`var(--seams-wallet-overlay-safe-top, 0px)`,o=`var(--seams-wallet-overlay-safe-left, 0px)`,s=`min(${H(t.widthCssPx)},max(1px,calc(100vw - ${o} - var(--seams-wallet-overlay-safe-right, 0px) - ${i} - ${i})))`,c=`min(${H(t.heightCssPx)},max(1px,calc(100dvh - ${a} - var(--seams-wallet-overlay-safe-bottom, 0px) - ${i} - ${i})))`;e.classList.add(R);let l=V();l.setDynamicDeclarations(r,`#${r}.${k}`,{top:`max(${H(t.topCssPx)},calc(${a} + ${i}))`,left:`max(${H(t.leftCssPx)},calc(${o} + ${i}))`,width:s,height:c}),l.setDynamicDeclarations(Be(r),`#${r}.${k}.${P}`,{top:U(t.topCssPx),left:U(t.leftCssPx),width:H(t.widthCssPx),height:H(t.heightCssPx)}),l.setDynamicDeclarations(Ve(r),`#${r}.${k}.${L}`,{top:U(t.topCssPx),left:U(t.leftCssPx),width:H(t.widthCssPx),height:H(t.heightCssPx),transform:`scale(${ze(n)})`})}function Je(e){K(e),e.classList.remove(R);let t=G(e),n=V();n.deleteDynamicRule(t),n.deleteDynamicRule(Be(t)),n.deleteDynamicRule(Ve(t)),n.deleteDynamicRule(W(t))}function Ye(e,t){K(e);let n=G(e);V().setDynamicDeclarations(W(n),`#${n}.${k} iframe.${j}`,{width:H(t.widthCssPx),height:H(t.heightCssPx)})}function Xe(e){let t=G(e);V().deleteDynamicRule(W(t))}const q={BASE:Ne,DIALOG:k,INLINE_DIALOG:A,IFRAME:j,HIDDEN:M,MODAL:N,DRAWER:P,FALLBACK:F,PROVISIONAL:I,AUTH_MENU:L,HAS_GEOMETRY:R,RESIZE_ANIMATED:z,REVEAL_PENDING:B};function Ze(e,t){let n=ne({value:t?.theme,fallback:{id:`default`,mode:`dark`,colors:{}}});e.dataset.theme=n.mode,V().setDynamicRule(`transaction-review-appearance-${e.id}`,ie(e.id,{palette:`default`,theme:{id:n.id,mode:n.mode,colors:{...n.mode===`light`?Se:xe,...n.colors},...n.shape?{shape:n.shape}:{}}}))}function Qe(e){V().deleteDynamicRule(`transaction-review-appearance-${e.id}`)}function $e(e){return!Number.isFinite(e.top)||!Number.isFinite(e.left)||!Number.isFinite(e.width)||!Number.isFinite(e.height)||e.width<=0||e.height<=0?null:{top:e.top,left:e.left,width:e.width,height:e.height}}function et(e,t){return[{top:`${e.top}px`,left:`${e.left}px`,width:`${e.width}px`,height:`${e.height}px`},{top:`${t.top}px`,left:`${t.left}px`,width:`${t.width}px`,height:`${t.height}px`}]}function J(e){throw Error(`Unhandled wallet iframe overlay mode: ${String(e)}`)}function tt(e){switch(e.kind){case`compact_transaction_review`:case`compact_request_modal`:case`compact_auth_menu`:return`modal`;case`compact_request_drawer`:return`drawer`;default:return J(e)}}function Y(e){switch(e.kind){case`hidden`:throw Error(`Visible wallet iframe overlay cannot use hidden geometry`);case`provisional_centered_modal`:case`provisional_bottom_drawer`:return`provisional`;case`centered_modal`:case`bottom_drawer`:return`measured`;case`viewport_fallback`:return`fallback`;default:return J(e)}}function nt(e){switch(e.kind){case`hidden`:return`hidden`;case`compact_transaction_review`:case`compact_request_modal`:case`compact_auth_menu`:return e.geometry.kind===`viewport_fallback`?`viewport_fallback`:`compact_modal`;case`compact_request_drawer`:return e.geometry.kind===`viewport_fallback`?`viewport_fallback`:`bottom_drawer`;default:return J(e)}}function rt(e,t){return e.kind===`hidden`||t.kind===`hidden`?e.kind===t.kind:e.identity.surfaceId!==t.identity.surfaceId||e.identity.requestId!==t.identity.requestId?!1:e.kind===`compact_auth_menu`||t.kind===`compact_auth_menu`?e.kind===`compact_auth_menu`&&t.kind===`compact_auth_menu`&&e.authMenuSessionId===t.authMenuSessionId:!0}function X(e,t){return e.clientX<=t.left||e.clientX>=t.right||e.clientY<=t.top||e.clientY>=t.bottom}function it(e){}var at=class{constructor(e){this.dialog=null,this.iframe=null,this.reviewSlot=null,this.mode={kind:`hidden`},this.visible=!1,this.generation=0,this.pointerCapture=null,this.restoreFocus=null,this.pendingProgrammaticCloseEvents=0,this.listenersInstalled=!1,this.lastAppliedGeometry=null,this.authMenuVisualScale=1,this.lastAppliedAuthMenuVisualScale=1,this.dialogDisplayMode=null,this.pendingRevealFrame=null,this.reviewHandoff={kind:`idle`},this.surfaceResizeAnimation=null,this.surfaceResizeTimer=null,this.handleReviewHandoffFinished=e=>{this.reviewHandoff.kind!==`animating`||e.currentTarget!==this.reviewHandoff.incoming||this.finishReviewHandoff()},this.revealMeasuredSurface=()=>{this.pendingRevealFrame=null;let e=this.dialog;!e||!this.visible||this.mode.kind!==`compact_request_modal`||Y(this.mode.geometry)===`provisional`||e.classList.remove(q.REVEAL_PENDING)},this.handleSurfaceResizeFinished=e=>{e.currentTarget===this.surfaceResizeAnimation&&this.cancelSurfaceResize()},this.handleCancel=e=>{e.preventDefault(),this.requestDismiss(`escape`)},this.handleClose=()=>{if(this.dialogDisplayMode=null,this.pendingProgrammaticCloseEvents>0){--this.pendingProgrammaticCloseEvents;return}this.visible&&this.requestDismiss(`escape`)},this.handlePointerDown=e=>{if(!this.visible||this.mode.kind===`hidden`||!this.dialog)return;let t=this.dialog.getBoundingClientRect(),n=this.ensureIframe().getBoundingClientRect();if(!X(e,t)||!X(e,n)){this.pointerCapture=null;return}this.pointerCapture={pointerId:e.pointerId,generation:this.generation}},this.handlePointerUp=e=>{let t=this.pointerCapture;if(this.pointerCapture=null,!t||t.pointerId!==e.pointerId||t.generation!==this.generation||!this.dialog||this.mode.kind===`hidden`)return;let n=this.dialog.getBoundingClientRect(),r=this.ensureIframe().getBoundingClientRect();X(e,n)&&X(e,r)&&this.requestDismiss(`backdrop`)},this.handlePointerCancel=e=>{this.pointerCapture?.pointerId===e.pointerId&&(this.pointerCapture=null)},this.ensureIframe=e.ensureIframe,this.dismissHandler=e.onDismiss}setDismissHandler(e){this.dismissHandler=e}prepare(){return this.ensureDialog().iframe}getTransactionReviewSlot(){let{dialog:e}=this.ensureDialog();return this.reviewSlot||(this.reviewSlot=document.createElement(`div`),this.reviewSlot.className=`seams-transaction-review-slot`,this.reviewSlot.id=`${e.id}-review`,this.reviewSlot.hidden=!0,this.reviewSlot.inert=!0,e.appendChild(this.reviewSlot)),this.reviewSlot}setReviewAppearance(e){Ze(this.ensureDialog().dialog,e)}setAuthMenuVisualScale(e){this.authMenuVisualScale=Number.isFinite(e)&&e>0?e:1}apply(e){switch(e.kind){case`hidden`:this.hideOverlay();return;case`compact_transaction_review`:case`compact_request_modal`:case`compact_request_drawer`:case`compact_auth_menu`:this.applyVisible(e);return;default:return J(e)}}ensureDialog(){if(!this.dialog){let e=document.createElement(`dialog`);K(e),e.addEventListener(`cancel`,this.handleCancel),e.addEventListener(`close`,this.handleClose),e.addEventListener(`pointerdown`,this.handlePointerDown),e.addEventListener(`pointerup`,this.handlePointerUp),window.addEventListener(`pointerup`,this.handlePointerUp),window.addEventListener(`pointercancel`,this.handlePointerCancel),this.listenersInstalled=!0,this.dialog=e}let e=this.dialog;K(e),e.isConnected||document.body.appendChild(e);let t=this.ensureIframe(e);if(this.iframe=t,t.parentElement!==e){if(t.isConnected)throw Error(`Wallet iframe cannot be reparented after it has been mounted`);e.appendChild(t)}return{dialog:e,iframe:t}}applyVisible(e){let{dialog:t,iframe:n}=this.ensureDialog(),r={widthCssPx:n.clientWidth,heightCssPx:n.clientHeight},i=null,a=!rt(this.mode,e),o=!a&&this.mode.kind===`compact_transaction_review`&&e.kind===`compact_request_modal`,s=!a&&this.mode.kind===`compact_request_modal`&&e.kind===`compact_transaction_review`,c=e.kind===`compact_auth_menu`,l=this.lastAppliedGeometry?Y(this.lastAppliedGeometry):null,u=Y(e.geometry),d=e.kind===`compact_request_modal`&&l===`provisional`&&u!==`provisional`,f=!this.lastAppliedGeometry||!Me(this.lastAppliedGeometry,e.geometry),ee=c&&Math.abs(this.lastAppliedAuthMenuVisualScale-this.authMenuVisualScale)>.001,te=c&&!a&&f&&this.lastAppliedGeometry!==null&&Y(this.lastAppliedGeometry)!==`provisional`&&Y(e.geometry)!==`provisional`,p=(e.kind===`compact_request_modal`||e.kind===`compact_transaction_review`)&&!a&&f&&l===`measured`&&u===`measured`?$e(t.getBoundingClientRect()):null;a&&(this.cancelReviewHandoff(),this.cancelPendingReveal(),this.cancelSurfaceResize(),this.generation+=1,this.pointerCapture=null,this.captureFocusForDialog()),this.mode=e,this.visible=!0,d&&t.classList.add(q.REVEAL_PENDING),We(n),Ge(t,tt(e),Y(e.geometry)),Ke(t,c,te),t.setAttribute(`aria-modal`,c||!e.focusTrap?`false`:`true`),(f||ee)&&(f&&this.cancelSurfaceResize(),p&&Ye(t,{widthCssPx:p.width,heightCssPx:p.height}),qe(t,e.geometry,c?this.authMenuVisualScale:1),this.lastAppliedGeometry=e.geometry,this.lastAppliedAuthMenuVisualScale=c?this.authMenuVisualScale:1,i=p?$e(t.getBoundingClientRect()):null,p&&i&&this.startSurfaceResize(p,i,o||s?320:180),p&&Xe(t));let m=e.kind===`compact_transaction_review`;m?t.setAttribute(`data-transaction-review`,``):(!this.mode||!(`identity`in this.mode)||a)&&t.removeAttribute(`data-transaction-review`),o&&this.startReviewHandoff(`wallet`),s&&this.startReviewHandoff(`review`);let h=this.reviewHandoff.kind===`animating`;h&&i&&Ye(t,m?r:{widthCssPx:i.width,heightCssPx:i.height}),n.inert=m||h,n.classList.toggle(`seams-review-wallet-inactive`,m),n.setAttribute(`aria-hidden`,String(m||h)),m?n.setAttribute(`tabindex`,`-1`):n.removeAttribute(`tabindex`);let g=this.getTransactionReviewSlot();g.hidden=!m&&!h,g.inert=!m||h,g.setAttribute(`aria-hidden`,String(!m||h)),s&&!h&&this.focusReview(),n.setAttribute(`title`,e.presentation.title),t.setAttribute(`aria-label`,e.presentation.title),t.classList.remove(q.HIDDEN);let _=c||!e.focusTrap?`nonmodal`:`modal`;t.open&&this.dialogDisplayMode!==_&&(this.closeDialogProgrammatically(t),this.dialogDisplayMode=null),t.open||this.showDialog(t,_),d&&this.scheduleMeasuredReveal()}activateAfterReviewHandoff(e){this.reviewHandoff.kind===`animating`?this.reviewHandoff.onReady=e:e()}startReviewHandoff(e){if(this.cancelReviewHandoff(),!this.iframe||window.matchMedia(`(prefers-reduced-motion: reduce)`).matches)return;let t={duration:320,easing:`cubic-bezier(0.22, 1, 0.36, 1)`,fill:`both`},n=this.getTransactionReviewSlot().firstElementChild;if(!n)return;let r=e===`wallet`?n:this.iframe,i=e===`wallet`?this.iframe:n,a=e===`wallet`?1:-1,o=r.animate([{opacity:1,transform:`translateY(0)`},{opacity:0,transform:`translateY(${-8*a}px)`,offset:.55},{opacity:0,transform:`translateY(${-8*a}px)`}],t),s=i.animate([{opacity:0,transform:`translateY(${12*a}px)`},{opacity:1,transform:`translateY(0)`}],t),c=[],l=0;for(let t of n.children){let n=e===`review`,r=Math.min(l,3)*25;c.push(t.animate([{opacity:n?0:1,transform:n?`translateY(8px)`:`translateY(0)`},{opacity:n?1:0,transform:n?`translateY(0)`:`translateY(-6px)`}],{duration:n?220:140,delay:r,easing:`ease-out`,fill:`both`})),l+=1}this.reviewHandoff={kind:`animating`,destination:e,outgoing:o,incoming:s,sections:c,timer:setTimeout(this.finishReviewHandoff.bind(this),320),onReady:null},s.addEventListener(`finish`,this.handleReviewHandoffFinished,{once:!0})}finishReviewHandoff(){if(this.reviewHandoff.kind!==`animating`)return;let e=this.reviewHandoff.onReady,t=this.reviewHandoff.destination===`review`;this.cancelReviewHandoff(),this.reviewSlot&&(this.reviewSlot.hidden=!t,this.reviewSlot.inert=!t,this.reviewSlot.setAttribute(`aria-hidden`,String(!t))),this.iframe&&(this.iframe.inert=t,this.iframe.setAttribute(`aria-hidden`,String(t))),t&&this.focusReview(),e?.()}focusReview(){this.reviewSlot?.querySelector(`[tabindex="-1"], button`)?.focus({preventScroll:!0})}cancelReviewHandoff(){if(this.reviewHandoff.kind===`animating`){clearTimeout(this.reviewHandoff.timer),this.reviewHandoff.outgoing.cancel(),this.reviewHandoff.incoming.cancel();for(let e of this.reviewHandoff.sections)e.cancel();this.dialog&&Xe(this.dialog),this.reviewHandoff={kind:`idle`}}}scheduleMeasuredReveal(){this.cancelPendingReveal(),this.pendingRevealFrame=window.requestAnimationFrame(this.revealMeasuredSurface)}startSurfaceResize(e,t,n){let r=this.dialog;if(!r||window.matchMedia(`(prefers-reduced-motion: reduce)`).matches)return;this.cancelSurfaceResize();let i=r.animate(et(e,t),{duration:n,easing:`cubic-bezier(0.2, 0.7, 0.2, 1)`});this.surfaceResizeAnimation=i,this.surfaceResizeTimer=setTimeout(this.cancelSurfaceResize.bind(this),n),i.addEventListener(`finish`,this.handleSurfaceResizeFinished,{once:!0})}cancelPendingReveal(){this.pendingRevealFrame!==null&&(window.cancelAnimationFrame(this.pendingRevealFrame),this.pendingRevealFrame=null)}cancelSurfaceResize(){this.surfaceResizeTimer&&clearTimeout(this.surfaceResizeTimer),this.surfaceResizeTimer=null,this.surfaceResizeAnimation?.cancel(),this.surfaceResizeAnimation=null}showDialog(e,t){if(t===`nonmodal`){if(typeof e.show!=`function`)throw Error(`Wallet iframe overlay requires native HTMLDialogElement.show support`);e.show(),this.dialogDisplayMode=`nonmodal`;return}if(typeof e.showModal!=`function`)throw Error(`Wallet iframe overlay requires native HTMLDialogElement.showModal support`);e.showModal(),this.dialogDisplayMode=`modal`}closeDialogProgrammatically(e){this.pendingProgrammaticCloseEvents+=1,e.close()}hideOverlay(){let e=this.visible;if(this.cancelReviewHandoff(),this.cancelPendingReveal(),this.cancelSurfaceResize(),this.generation+=1,this.pointerCapture=null,this.mode={kind:`hidden`},this.visible=!1,this.lastAppliedGeometry=null,this.authMenuVisualScale=1,this.lastAppliedAuthMenuVisualScale=1,!this.dialog)return;this.reviewSlot&&(this.reviewSlot.hidden=!0,this.reviewSlot.inert=!0);let t=this.iframe;t&&(Ue(t),t.setAttribute(`aria-hidden`,`true`),t.setAttribute(`tabindex`,`-1`),t.removeAttribute(`title`)),this.dialog.removeAttribute(`aria-label`),this.dialog.classList.add(q.HIDDEN),this.dialog.classList.remove(q.REVEAL_PENDING),Je(this.dialog),this.dialog.open&&this.closeDialogProgrammatically(this.dialog),this.dialogDisplayMode=null,e&&this.restoreCapturedFocus()}captureFocusForDialog(){let e=document.activeElement;e instanceof HTMLElement&&this.dialog&&!this.dialog.contains(e)&&(this.restoreFocus=e)}restoreCapturedFocus(){let e=this.restoreFocus;this.restoreFocus=null,!(!e||!e.isConnected||e.matches(`[inert]`))&&e.focus({preventScroll:!0})}activeDismissEvent(e){if(this.mode.kind===`hidden`)return null;let t={identity:this.mode.identity,reason:e,generation:this.generation};return this.mode.kind===`compact_auth_menu`&&(t.authMenuSessionId=this.mode.authMenuSessionId),t}requestDismiss(e){let t=this.activeDismissEvent(e);!t||!this.dismissHandler||Promise.resolve(this.dismissHandler(t)).catch(it)}getState(){return{visible:this.visible,mode:nt(this.mode),dialogOpen:this.dialog?.open??!1,generation:this.generation}}dispose(){this.cancelReviewHandoff(),this.cancelPendingReveal(),this.cancelSurfaceResize(),this.generation+=1,this.pointerCapture=null,this.mode={kind:`hidden`},this.visible=!1,this.lastAppliedGeometry=null,this.dialogDisplayMode=null,this.restoreFocus=null;let e=this.dialog;if(!e){this.dismissHandler=void 0;return}this.listenersInstalled&&(e.removeEventListener(`cancel`,this.handleCancel),e.removeEventListener(`close`,this.handleClose),e.removeEventListener(`pointerdown`,this.handlePointerDown),e.removeEventListener(`pointerup`,this.handlePointerUp),window.removeEventListener(`pointerup`,this.handlePointerUp),window.removeEventListener(`pointercancel`,this.handlePointerCancel)),e.open&&e.close(),Je(e),Qe(e),e.remove(),this.dialog=null,this.iframe=null,this.reviewSlot=null,this.listenersInstalled=!1,this.dismissHandler=void 0}};const ot=()=>{let e=navigator.userAgent.toLowerCase(),t=/android|iphone|ipod|blackberry|iemobile|opera mini/i.test(e),n=/ipad|tablet|kindle|playbook|silk/i.test(e),r=navigator.maxTouchPoints>0,i=window.screen.width,a=i<=480,o=i<=1024,s=`orientation`in window;return t||r&&a?`mobile`:n||r&&o&&s?`tablet`:`desktop`},st=()=>{try{let e=navigator.userAgent;return/safari/i.test(e)&&!/chrome|crios|crmo|chromium|edg|edge|opr|opera|brave/i.test(e)}catch{return!1}},ct=()=>{try{let e=navigator.userAgent,t=navigator.platform||``,n=Number(navigator.maxTouchPoints||0),r=/iPad|iPhone|iPod/.test(e),i=/Macintosh/.test(e)&&n>1,a=/iPad|iPhone|iPod/.test(t);return r||i||a}catch{return!1}},lt=()=>{try{let e=navigator.userActivation;return!!(e&&typeof e.isActive==`boolean`&&e.isActive)}catch{return!1}},ut=()=>{try{return lt()?!1:ct()||dt()||st()}catch{return!1}},dt=()=>ot()===`mobile`;function ft(e){return e.options?{kind:`custom_options`,walletId:e.walletId,options:e.options}:{kind:`default_options`,walletId:e.walletId}}function pt(e){switch(e.kind){case`default_options`:return{kind:`default_options`,walletId:e.walletId};case`custom_options`:return{kind:`custom_options`,walletId:e.walletId,options:{kind:`pm_unlock_options_v1`,signerSlot:vt(e.options.signerSlot),signingSession:vt(e.options.signingSession),unlockSelection:vt(e.options.unlockSelection),ecdsaKeyFactsInventory:mt(e.options.ecdsaKeyFactsInventory)}}}}function mt(e){if(!e)return{kind:`default`};switch(e.mode){case`webauthn`:return{kind:`value`,value:{mode:`webauthn`}};case`wallet_session_operation_credential_v1`:return{kind:`value`,value:{mode:`wallet_session_operation_credential_v1`}}}}function ht(e){if(!e)throw Error(`PM_UNLOCK payload is required`);return e}function gt(e){switch(e.kind){case`default_options`:return{};case`custom_options`:return{...yt(`signerSlot`,e.options.signerSlot),...yt(`signingSession`,e.options.signingSession),...yt(`unlockSelection`,e.options.unlockSelection),..._t(e.options.ecdsaKeyFactsInventory)}}}function _t(e){switch(e.kind){case`default`:return{};case`value`:return{ecdsaKeyFactsInventory:e.value}}}function vt(e){return e===void 0?{kind:`default`}:{kind:`value`,value:e}}function yt(e,t){switch(t.kind){case`default`:return{};case`value`:return{[e]:t.value}}}var bt=class extends Error{constructor(e){super(`Wallet session expired`),this.name=`WalletIframeSessionExpiredRequestError`,this.failure=e}};async function xt(e,t){let n;try{n=await t.resolveSelectedWalletAuthority(String(e.walletId))}catch{return Q(e.walletId,`unavailable`)}switch(n.kind){case`missing_selection`:return{kind:`wallet_locked`};case`missing_auth_method`:case`missing_authority`:case`integrity_error`:return Q(e.walletId,`invalid`);case`resolved`:break}let{selection:r,authMethod:i,authority:a}=n;if(r.walletId!==e.walletId||r.walletAuthMethodId!==i.walletAuthMethodId||i.walletId!==e.walletId||i.walletAuthorityId!==a.authorityId||a.walletId!==e.walletId)return Q(e.walletId,`invalid`);if(r.lockState===`locked`)return{kind:`wallet_locked`};if(i.status!==`active`||a.state!==`active`)return Q(e.walletId,`invalid`);let o=await pn(t,{walletId:e.walletId,authorityId:a.authorityId,authMethodId:i.walletAuthMethodId});switch(o.kind){case`missing`:return Q(e.walletId,`absent`);case`corrupt`:return Q(e.walletId,`invalid`);case`persistence_unavailable`:return Q(e.walletId,`unavailable`);case`upgrade_required`:return Q(e.walletId,`upgrade_required`);case`found`:break}let{record:s,operationCredential:c}=o;if(!fn({walletId:e.walletId,authorization:s,operationCredential:c,selected:n}))return Q(e.walletId,`invalid`);let l=t.nowMs();if(s.expiresAtMs<=l)return hn(e.walletId,i.kind,s,c);let u;try{u=await t.readStatus({authorization:s,operationCredential:c})}catch{return Q(e.walletId,`unavailable`)}return gn(u,s,c)?_n({walletId:e.walletId,authMethod:i.kind,authorization:s,operationCredential:c,status:u}):Q(e.walletId,`invalid`)}function St(e){if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`Wallet iframe exact session state must be an object`);switch(Reflect.get(e,`kind`)){case`wallet_locked`:return{kind:`wallet_locked`};case`wallet_authenticated_identity_unresolvable`:return{kind:`wallet_authenticated_identity_unresolvable`,walletId:$(Reflect.get(e,`walletId`)),reason:Reflect.get(e,`reason`)===`invalid`?`invalid`:cn(Reflect.get(e,`reason`))};case`wallet_unlocked_without_signing_session`:{let t=$(Reflect.get(e,`walletId`)),n=xn(Reflect.get(e,`reason`));if(n!==`not_found`)return{kind:`wallet_unlocked_without_signing_session`,walletId:t,reason:n};let r=c(Reflect.get(e,`authorizationId`)),i=s(Reflect.get(e,`walletSessionId`));if(!r.ok)throw Error(`Wallet iframe missing authorization ID is invalid`);if(!i.ok)throw Error(`Wallet iframe missing Wallet Session ID is invalid`);bn(r.value,i.value);let a=Reflect.get(e,`authMethod`);if(!u(a))throw Error(`Wallet iframe missing auth method is invalid`);return{kind:`wallet_unlocked_without_signing_session`,walletId:t,reason:n,authorizationId:r.value,walletSessionId:i.value,authMethod:a}}case`active_session`:{let t=yn(e);if(Reflect.get(e,`status`)!==`active`)throw Error(`Wallet iframe active session status is invalid`);return{kind:`active_session`,status:`active`,...t}}case`expired_session`:return{kind:`expired_session`,...yn(e)};default:throw Error(`Wallet iframe exact session state kind is invalid`)}}function Ct(e,t){if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`Wallet Session must be an object`);if(Reflect.get(e,`reusableWalletSession`)!==void 0)throw Error(`Wallet Session contains removed reusable-session fields`);let n={appIdentity:Dt(Reflect.get(e,`appIdentity`)),authentication:wt(Reflect.get(e,`authentication`)),capabilityProjection:Ot(Reflect.get(e,`capabilityProjection`)),nonceDiagnostics:Wt(Reflect.get(e,`nonceDiagnostics`))},r=t===void 0?null:$(t),i=on(n);if(r!==null&&i===null)throw Error(`Wallet iframe Wallet Session omitted the requested wallet identity`);if(r!==null&&i!==r)throw Error(`Wallet iframe Wallet Session does not match the requested wallet`);if(i!==null&&!sn(n,i))throw Error(`Wallet iframe Wallet Session wallet identities disagree`);return n}function wt(e){if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`Wallet Session authentication must be an object`);switch(Reflect.get(e,`kind`)){case`signed_out`:return{kind:`signed_out`};case`authenticated`:{let t=Reflect.get(e,`authMethod`);if(!u(t))throw Error(`Wallet Session authentication method is invalid`);return{kind:`authenticated`,walletId:$(Reflect.get(e,`walletId`)),authMethod:t}}default:throw Error(`Wallet Session authentication kind is invalid`)}}function Tt(e){if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`Wallet iframe exact session identity must be an object`);return yn(e)}function Et(e){if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`Wallet iframe exact session lock result must be an object`);switch(Reflect.get(e,`kind`)){case`locked`:return{kind:`locked`,identity:Tt(Reflect.get(e,`identity`))};case`stale_session`:return{kind:`stale_session`,expected:Tt(Reflect.get(e,`expected`)),current:St(Reflect.get(e,`current`))};default:throw Error(`Wallet iframe exact session lock result kind is invalid`)}}function Dt(e){let t=i(e,`Wallet Session appIdentity`);switch(t.kind){case`anonymous`:return{kind:`anonymous`};case`unresolvable`:return{kind:`unresolvable`,walletId:$(t.walletId),reason:cn(t.reason)};case`resolved`:{let e=$(t.walletId),i=r(t.authMethods,`Wallet Session authMethods`).map(zt);for(let t of i)if(Bt(t)!==e)throw Error(`Wallet Session auth-method wallet identity disagrees`);return{kind:`resolved`,walletId:e,nearAccountId:t.nearAccountId===null?null:d(n(t.nearAccountId,`nearAccountId`)),nearOperationalPublicKey:dn(t.nearOperationalPublicKey,`nearOperationalPublicKey`),userData:Vt(t.userData,e),authMethods:i,thresholdEcdsaEthereumAddress:dn(t.thresholdEcdsaEthereumAddress,`thresholdEcdsaEthereumAddress`),thresholdEcdsaPublicKeyB64u:dn(t.thresholdEcdsaPublicKeyB64u,`thresholdEcdsaPublicKeyB64u`)}}default:throw Error(`Wallet Session appIdentity kind is invalid`)}}function Ot(e){let t=i(e,`Wallet Session capabilityProjection`);switch(t.kind){case`not_requested`:return{kind:`not_requested`};case`unresolvable`:return{kind:`unresolvable`,reason:cn(t.reason)};case`resolved`:{let e=kt(t.subjectSet),n=un(t.capabilities,`Wallet Session capabilities`).map(jt);for(let t of n)if(t.subject.walletId!==e.walletId)throw Error(`Wallet Session capability wallet identity disagrees`);return{kind:`resolved`,subjectSet:e,capabilities:an(n)}}default:throw Error(`Wallet Session capabilityProjection kind is invalid`)}}function kt(e){let t=i(e,`wallet unlock subject set`);if(t.kind!==`wallet_unlock_subject_set`)throw Error(`Wallet unlock subject set kind is invalid`);let n=$(t.walletId),r=un(t.subjects,`wallet unlock subjects`).map(At);for(let e of r)if(e.walletId!==n)throw Error(`Wallet unlock subject wallet identity disagrees`);let a=r[0];if(!a)throw Error(`Wallet unlock subject set must be non-empty`);return{kind:`wallet_unlock_subject_set`,walletId:n,subjects:[a,...r.slice(1)]}}function At(e){let r=i(e,`wallet unlock subject`),a=$(r.walletId);switch(r.kind){case`near_ed25519_wallet`:{let e=p(r.signerSlot);if(e===null)throw Error(`Wallet unlock signerSlot is invalid`);return{kind:`near_ed25519_wallet`,walletId:a,nearAccountId:d(n(r.nearAccountId,`nearAccountId`)),nearEd25519SigningKeyId:ee(r.nearEd25519SigningKeyId),signerSlot:e}}case`evm_family_ecdsa_wallet`:{let e=t(r.capability);if(!e.ok)throw Error(e.error.message);let n=o(r.authority);if(!n||n.walletId!==a)throw Error(`Wallet unlock ECDSA authority is invalid`);return{kind:`evm_family_ecdsa_wallet`,walletId:a,capability:e.value,authority:n,ecdsaThresholdKeyId:te(r.ecdsaThresholdKeyId)}}default:throw Error(`Wallet unlock subject kind is invalid`)}}function jt(e){let t=i(e,`Wallet Session capability readiness`);switch(t.kind){case`near_ed25519`:return{kind:`near_ed25519`,subject:Mt(t.subject),lane:It(t.lane)};case`evm_family_ecdsa`:return{kind:`evm_family_ecdsa`,subject:Nt(t.subject),targets:Pt(t.targets)};default:throw Error(`Wallet Session capability readiness kind is invalid`)}}function Mt(e){let t=At(e);if(t.kind!==`near_ed25519_wallet`)throw Error(`Near capability requires a Near wallet subject`);return t}function Nt(e){let t=At(e);if(t.kind!==`evm_family_ecdsa_wallet`)throw Error(`ECDSA capability requires an ECDSA wallet subject`);return t}function Pt(e){let t=i(e,`ECDSA capability targets`);switch(t.kind){case`no_configured_target`:return{kind:`no_configured_target`};case`configured_targets`:{let e=un(t.lanes,`ECDSA capability target lanes`).map(Ft),n=e[0];if(!n)throw Error(`ECDSA capability target lanes must be non-empty`);return{kind:`configured_targets`,lanes:[n,...e.slice(1)]}}default:throw Error(`ECDSA capability targets kind is invalid`)}}function Ft(e){let t=i(e,`ECDSA capability target lane`);return{chainTarget:l(i(t.chainTarget,`ECDSA chain target`)),readiness:It(t.readiness)}}function It(e){let t=i(e,`Wallet Session capability lane readiness`);switch(t.kind){case`ready`:return{kind:`ready`};case`pending`:return{kind:`pending`,resume:Lt(t.resume)};case`authorization_required`:return{kind:`authorization_required`,requirement:Rt(t.requirement)};case`superseded`:if(t.replacement!==`re_resolve_current_capability`)throw Error(`Superseded capability lane replacement is invalid`);return{kind:`superseded`,replacement:t.replacement};case`failed`:return{kind:`failed`,reason:ln(t.reason)};default:throw Error(`Wallet Session capability lane readiness kind is invalid`)}}function Lt(e){if(e===`restore_material`||e===`resolve_deferred_state`)return e;throw Error(`Pending capability lane resume action is invalid`)}function Rt(e){switch(e){case`same_method_step_up`:case`wallet_session_expired`:case`wallet_session_exhausted`:return e;default:throw Error(`Capability lane authorization requirement is invalid`)}}function zt(e){let t=f(e);if(!t.ok)throw Error(t.error.message);return t.value}function Bt(e){switch(e.kind){case`passkey`:return e.scope.wallet.walletId;case`email_otp`:return e.wallet.walletId}throw Error(`Wallet auth-method binding kind is invalid`)}function Vt(e,t){if(e===null)return null;let r=i(e,`Wallet Session userData`),a=$(r.walletId);if(a!==t)throw Error(`Wallet Session userData wallet identity disagrees`);let o=i(r.passkeyCredential,`passkeyCredential`),s=p(r.signerSlot);if(s===null)throw Error(`Wallet Session userData signerSlot is invalid`);let c=Ht(r.authMethod);return{walletId:a,nearAccountId:d(n(r.nearAccountId,`userData.nearAccountId`)),loginDisplayName:n(r.loginDisplayName,`userData.loginDisplayName`),signerSlot:s,...r.version===void 0?{}:{version:Z(r.version,`userData.version`)},...r.registeredAt===void 0?{}:{registeredAt:Z(r.registeredAt,`userData.registeredAt`)},...r.lastLogin===void 0?{}:{lastLogin:Z(r.lastLogin,`userData.lastLogin`)},...r.lastUpdated===void 0?{}:{lastUpdated:Z(r.lastUpdated,`userData.lastUpdated`)},operationalPublicKey:n(r.operationalPublicKey,`userData.operationalPublicKey`),nearEd25519SigningKeyId:n(r.nearEd25519SigningKeyId,`userData.nearEd25519SigningKeyId`),passkeyCredential:{id:n(o.id,`passkeyCredential.id`),rawId:n(o.rawId,`passkeyCredential.rawId`)},...c===void 0?{}:{authMethod:c},...r.preferences===void 0?{}:{preferences:Ut(r.preferences)}}}function Ht(e){if(e!==void 0){if(e===null)return null;if(!u(e))throw Error(`Wallet Session userData authMethod is invalid`);return e}}function Ut(e){let t=i(e,`Wallet Session user preferences`);if(typeof t.useRelayer!=`boolean`)throw Error(`Wallet Session user preferences useRelayer is invalid`);if(t.useNetwork!==`testnet`&&t.useNetwork!==`mainnet`)throw Error(`Wallet Session user preferences useNetwork is invalid`);let n=i(t.confirmationConfig,`Wallet Session confirmationConfig`);if(n.uiMode!==`none`&&n.uiMode!==`modal`&&n.uiMode!==`drawer`)throw Error(`Wallet Session confirmationConfig uiMode is invalid`);if(n.behavior!==`requireClick`&&n.behavior!==`skipClick`)throw Error(`Wallet Session confirmationConfig behavior is invalid`);let r=n.autoProceedDelay===void 0?void 0:Z(n.autoProceedDelay,`confirmationConfig.autoProceedDelay`);return{useRelayer:t.useRelayer,useNetwork:t.useNetwork,confirmationConfig:{uiMode:n.uiMode,behavior:n.behavior,...r===void 0?{}:{autoProceedDelay:r}}}}function Wt(e){if(e===null)return null;let t=i(e,`Wallet Session nonce diagnostics`),a=i(t.near,`near nonce diagnostics`);return{leaseCount:Z(t.leaseCount,`nonce leaseCount`),leasesByState:Xt(t.leasesByState),laneCount:Z(t.laneCount,`nonce laneCount`),metrics:Gt(t.metrics),coordinationWarnings:r(t.coordinationWarnings,`nonce coordination warnings`).map(Jt),lanes:r(t.lanes,`nonce diagnostic lanes`).map(Yt),near:{...a.activeAccountId===void 0?{}:{activeAccountId:n(a.activeAccountId,`near activeAccountId`)},...a.activePublicKey===void 0?{}:{activePublicKey:n(a.activePublicKey,`near activePublicKey`)},hasContext:rn(a.hasContext,`near hasContext`),reservedNonceCount:Z(a.reservedNonceCount,`near reservedNonceCount`),...a.lastReservedNonce===void 0?{}:{lastReservedNonce:n(a.lastReservedNonce,`near lastReservedNonce`)}}}}function Gt(e){let t=i(e,`nonce metrics`);return{atMs:Z(t.atMs,`nonce metrics atMs`),...t.accountId===void 0?{}:{accountId:n(t.accountId,`nonce metrics accountId`)},leaseCount:Z(t.leaseCount,`nonce metrics leaseCount`),laneCount:Z(t.laneCount,`nonce metrics laneCount`),oldestLeaseAgeMs:Z(t.oldestLeaseAgeMs,`nonce metrics oldestLeaseAgeMs`),oldestInFlightLeaseAgeMs:Z(t.oldestInFlightLeaseAgeMs,`nonce metrics oldestInFlightLeaseAgeMs`),staleInFlightLeaseCount:Z(t.staleInFlightLeaseCount,`nonce metrics staleInFlightLeaseCount`),staleInFlightLaneCount:Z(t.staleInFlightLaneCount,`nonce metrics staleInFlightLaneCount`),reservedLeaseCount:Z(t.reservedLeaseCount,`nonce metrics reservedLeaseCount`),signedLeaseCount:Z(t.signedLeaseCount,`nonce metrics signedLeaseCount`),broadcastAcceptedLeaseCount:Z(t.broadcastAcceptedLeaseCount,`nonce metrics broadcastAcceptedLeaseCount`),droppedLeaseCount:Z(t.droppedLeaseCount,`nonce metrics droppedLeaseCount`),replacedLeaseCount:Z(t.replacedLeaseCount,`nonce metrics replacedLeaseCount`),reconciledLeaseCount:Z(t.reconciledLeaseCount,`nonce metrics reconciledLeaseCount`),releasedLeaseCount:Z(t.releasedLeaseCount,`nonce metrics releasedLeaseCount`),outcomes:Kt(t.outcomes)}}function Kt(e){let t=i(e,`nonce outcome metrics`);return{droppedCount:Z(t.droppedCount,`droppedCount`),replacedCount:Z(t.replacedCount,`replacedCount`),reconciledCount:Z(t.reconciledCount,`reconciledCount`),releasedCount:Z(t.releasedCount,`releasedCount`),expiredCount:Z(t.expiredCount,`expiredCount`),broadcastRejectedCount:Z(t.broadcastRejectedCount,`broadcastRejectedCount`),releaseReasons:qt(t.releaseReasons,`releaseReasons`),reconcileReasons:qt(t.reconcileReasons,`reconcileReasons`),expiryReasons:qt(t.expiryReasons,`expiryReasons`)}}function qt(e,t){let n=i(e,t),r={};for(let[e,i]of Object.entries(n)){if(!e)throw Error(`${t} key must be non-empty`);r[e]=Z(i,`${t}.${e}`)}return r}function Jt(e){let t=i(e,`nonce coordination warning`);return{reason:$t(t.reason),...t.laneFamily===void 0?{}:{laneFamily:tn(t.laneFamily)},...t.networkKey===void 0?{}:{networkKey:n(t.networkKey,`warning networkKey`)},...t.accountId===void 0?{}:{accountId:n(t.accountId,`warning accountId`)},fallback:en(t.fallback)}}function Yt(e){let t=i(e,`nonce diagnostic lane`),r=tn(t.family),a=t.chain===void 0?void 0:nn(t.chain);if(r===`near`&&(a!==void 0||t.chainId!==void 0))throw Error(`Near nonce diagnostic lane cannot contain EVM chain identity`);return{family:r,...t.accountId===void 0?{}:{accountId:n(t.accountId,`lane accountId`)},networkKey:n(t.networkKey,`lane networkKey`),...a===void 0?{}:{chain:a},...t.chainId===void 0?{}:{chainId:Z(t.chainId,`lane chainId`)},leaseCount:Z(t.leaseCount,`lane leaseCount`),states:Zt(t.states)}}function Xt(e){let t=i(e,`nonce state counts`),n={};for(let e of Object.values(g))n[e]=Qt(t,e);return n}function Zt(e){let t=i(e,`nonce state counts`),n={};for(let e of Object.values(g))t[e]!==void 0&&(n[e]=Qt(t,e));return n}function Qt(e,t){return Z(e[t],`nonce state ${t}`)}function $t(e){switch(e){case m.WebLocksUnavailable:case m.IndexedDBUnavailable:case m.DurableLockTimeout:case m.DurableStoreError:case m.MalformedDurableRecord:return e;default:throw Error(`Nonce coordination warning reason is invalid`)}}function en(e){switch(e){case h.InRuntimeLock:case h.None:return e;default:throw Error(`Nonce coordination warning fallback is invalid`)}}function tn(e){if(e===`near`||e===`evm`)return e;throw Error(`Nonce lane family is invalid`)}function nn(e){if(e===`evm`||e===`tempo`)return e;throw Error(`Nonce lane chain is invalid`)}function rn(e,t){if(typeof e!=`boolean`)throw Error(`${t} must be a boolean`);return e}function an(e){let t=e[0];if(!t)throw Error(`Wallet Session capabilities must be non-empty`);return[t,...e.slice(1)]}function on(e){if(e.authentication.kind!==`signed_out`)return e.authentication.walletId;switch(e.appIdentity.kind){case`resolved`:case`unresolvable`:return e.appIdentity.walletId;case`anonymous`:break}return e.capabilityProjection.kind===`resolved`?e.capabilityProjection.subjectSet.walletId:null}function sn(e,t){if(e.authentication.kind!==`signed_out`&&e.authentication.walletId!==t||e.appIdentity.kind!==`anonymous`&&e.appIdentity.walletId!==t)return!1;let n=e.capabilityProjection;if(n.kind!==`resolved`)return!0;if(n.subjectSet.walletId!==t)return!1;for(let e of n.subjectSet.subjects)if(e.walletId!==t)return!1;for(let e of n.capabilities)if(e.subject.walletId!==t)return!1;return!0}function cn(e){switch(e){case`missing_wallet_profile`:case`ambiguous_wallet_profile`:case`missing_requested_capability_subject`:case`capability_subject_lookup_failed`:case`invalid_capability_subject`:case`activation_reconciliation_pending`:case`activation_reconciliation_failed`:case`invalid_wallet_profile`:return e;default:throw Error(`Wallet Session identity resolve failure is invalid`)}}function ln(e){switch(e){case`missing`:case`persistence_unavailable`:case`malformed`:case`identity_mismatch`:case`ambiguous_lane`:return e;default:throw Error(`Failed capability lane reason is invalid`)}}function un(e,t){let n=r(e,t),i=n[0];if(i===void 0)throw Error(`${t} must be non-empty`);return[i,...n.slice(1)]}function dn(e,t){return e===null?null:n(e,t)}function Z(e,t){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<0)throw Error(`${t} must be a non-negative integer`);return e}function fn(e){let{authorization:t,operationCredential:n,selected:r}=e;return t.walletId===e.walletId&&t.authorityId===r.authority.authorityId&&t.authMethodId===r.authMethod.walletAuthMethodId&&t.authorityDigestB64u===r.authority.authorityDigestB64u&&t.authorityRevocationEpoch===r.authority.revocationEpoch&&n.kind===`opaque_wallet_session_operation_credential_v1`&&n.token.trim().length>0&&String(t.authorizationId)!==String(n.walletSessionId)}async function pn(e,t){try{return await e.readExactActiveForWallet(t)}catch{return{kind:`persistence_unavailable`}}}function mn(e,t,n,r){return{walletId:e,authorizationId:n.authorizationId,walletSessionId:r.walletSessionId,authMethod:t,expiresAtMs:n.expiresAtMs}}function hn(e,t,n,r){return{kind:`expired_session`,...mn(e,t,n,r)}}function gn(e,t,n){if(e.walletSessionId!==n.walletSessionId||e.quotaId!==t.quotaId)return!1;switch(e.status){case`missing`:case`invalid`:return!0;case`active`:case`exhausted`:case`expired`:case`superseded`:case`authority_unavailable`:case`method_unavailable`:case`capability_unavailable`:return e.expiresAtMs===t.expiresAtMs&&a(e.authorization,t)}}function _n(e){switch(e.status.status){case`active`:return e.status.remainingUses<=0?Q(e.walletId,`invalid`):{kind:`active_session`,status:`active`,...mn(e.walletId,e.authMethod,e.authorization,e.operationCredential)};case`exhausted`:return Q(e.walletId,`exhausted`);case`expired`:return hn(e.walletId,e.authMethod,e.authorization,e.operationCredential);case`missing`:return{kind:`wallet_unlocked_without_signing_session`,walletId:e.walletId,reason:`not_found`,authorizationId:e.authorization.authorizationId,walletSessionId:e.operationCredential.walletSessionId,authMethod:e.authMethod};case`superseded`:case`authority_unavailable`:case`method_unavailable`:case`capability_unavailable`:return Q(e.walletId,`superseded`);case`invalid`:return Q(e.walletId,`invalid`)}}function vn(e,t){return e.walletId===t.walletId&&e.authorizationId===t.authorizationId&&e.walletSessionId===t.walletSessionId}function yn(e){let t=s(Reflect.get(e,`walletSessionId`));if(!t.ok)throw Error(`Wallet iframe walletSessionId is invalid`);let n=Reflect.get(e,`expiresAtMs`);if(!Sn(n))throw Error(`Wallet iframe expiresAtMs is invalid`);let r=$(Reflect.get(e,`walletId`)),i=c(Reflect.get(e,`authorizationId`));if(!i.ok)throw Error(`Wallet iframe authorizationId is invalid`);let a=Reflect.get(e,`authMethod`);if(!u(a))throw Error(`Wallet iframe authMethod is invalid`);return bn(i.value,t.value),{walletId:r,authorizationId:i.value,walletSessionId:t.value,authMethod:a,expiresAtMs:n}}function bn(e,t){if(String(e)===String(t))throw Error(`Wallet iframe authorization and Wallet Session IDs must be distinct`)}function Q(e,t){return{kind:`wallet_unlocked_without_signing_session`,walletId:e,reason:t}}function $(t){let n=e(t);if(!n.ok)throw Error(`Wallet iframe walletId is invalid`);return n.value}function xn(e){switch(e){case`exhausted`:case`absent`:case`not_found`:case`unavailable`:case`upgrade_required`:case`superseded`:case`invalid`:return e;default:throw Error(`Wallet iframe unavailable reason is invalid`)}}function Sn(e){return typeof e==`number`&&Number.isSafeInteger(e)&&e>0}export{_e as C,ue as S,ke as _,St as a,v as b,pt as c,ft as d,ut as f,Ce as g,Ee as h,Et as i,gt as l,He as m,vn as n,Ct as o,at as p,Tt as r,xt as s,bt as t,ht as u,je as v,ge as x,ve as y};