@seams/wallet 0.7.3 → 0.8.0

package/dist/esm/sdk/passkey-custody-LP4UTFbn.js

@@ -0,0 +1 @@
+import{M as e,O as t,T as n,b as r,c as i,d as a,j as o,k as s,l as c,u as ee,v as te,x as ne}from"./domainIds-GDzjOs6i.js";import{_ as l}from"./validation-dC1-_uyG.js";import{C as re,D as u,E as ie,I as d,S as ae,b as f,w as oe,x as p,y as se}from"./sessionPolicy-CNVK7nJ6.js";import{a as ce}from"./registrationIds-BIel5S0i.js";const m=`seams_wallet`,h={appState:`app_state`,wallets:`wallets`,walletAuthorities:`wallet_authorities`,walletAuthMethods:`wallet_auth_methods`,walletAuthoritySignerMaterials:`wallet_authority_signer_materials`,walletAuthorityExportRoots:`wallet_authority_export_roots`,walletAuthorityInstallationReceipts:`wallet_authority_installation_receipts`,walletSelections:`wallet_selections`,walletSigners:`wallet_signers`,nearAccountProjections:`near_accounts`,signerOpsOutbox:`signer_ops_outbox`,nonceLaneLeases:`nonce_lane_leases`,nonceLaneLocks:`nonce_lane_locks`,keyMaterial:`key_material`,signingSessionSeals:`signing_session_seals`,signingSessionRestoreLeases:`signing_session_restore_leases`,pendingWalletRecoveryCodeBackups:`email_otp_pending_recovery_code_backups`,walletSessionAuthorizations:`wallet_session_authorizations`,ecdsaCapabilityManifests:`ecdsa_capability_manifests`,ecdsaCurrentCapabilityManifests:`ecdsa_current_capability_manifests`,ecdsaRoleLocalMaterial:`ecdsa_role_local_material`,ecdsaActivationCommitJournals:`ecdsa_activation_commit_journals`,ecdsaMaterialSealingKeys:`ecdsa_material_sealing_keys`,ecdsaClientPresignatures:`ecdsa_client_presignatures`},g={profileId:`profile_id`,updatedAt:`updated_at`,walletId:`wallet_id`,walletIdKind:`wallet_id_kind`,walletKindNearSignerSlot:`wallet_kind_near_signer_slot`,walletKindNearEd25519SigningKeyId:`wallet_kind_near_ed25519_signing_key_id`,walletKindChainTargetKeyHandle:`wallet_kind_chain_target_key_handle`,walletKindChainTargetKeyFacts:`wallet_kind_chain_target_key_facts`,walletSignerId:`wallet_signer_id`,nearAccountId:`near_account_id`,rpId:`rp_id`,chainTargetKey:`chain_target_key`,keyHandle:`key_handle`,thresholdOwnerAddress:`threshold_owner_address`,status:`status`,nextAttemptAt:`next_attempt_at`,statusNextAttemptAt:`status_next_attempt_at`,idempotencyKey:`idempotency_key`,laneKey:`lane_key`,state:`state`,expiresAtMs:`expires_at_ms`,recoveryCodesIssuedAtMs:`recovery_codes_issued_at_ms`,laneState:`lane_state`,walletExpiresAt:`wallet_expires_at`,ownerId:`owner_id`,publicKey:`public_key`,authMethod:`auth_method`,curve:`curve`,ed25519ThresholdSessionId:`ed25519_threshold_session_id`,ecdsaThresholdSessionId:`ecdsa_threshold_session_id`,thresholdSessionId:`threshold_session_id`,exactSigningLaneIdentityKey:`exact_signing_lane_identity_key`,enrollmentId:`enrollment_id`,walletIdEnrollmentId:`wallet_id_enrollment_id`,authIdentifierKey:`auth_identifier_key`,kindRpIdAuthIdentifier:`kind_rp_id_auth_identifier`,passkeyRpIdCredentialId:`passkey_rp_id_credential_id`,capabilityWallet:`capability_wallet`,capabilityWalletAuthorityState:`capability_wallet_authority_state`,capabilityWalletAuthority:`capability_wallet_authority`,walletAuthorityId:`wallet_authority_id`,walletAuthMethodId:`wallet_auth_method_id`,walletIdAuthorityId:`wallet_id_authority_id`,walletIdAuthorityStatus:`wallet_id_authority_status`,walletIdAuthMethodId:`wallet_id_auth_method_id`,walletAuthorityAuthMethodId:`wallet_authority_auth_method_id`,activationId:`activation_id`,walletAuthorityActivationId:`wallet_authority_activation_id`,walletIdDeviceId:`wallet_id_device_id`,packageSetDigest:`package_set_digest`,walletKeyId:`wallet_key_id`,walletIdLockGeneration:`wallet_id_lock_generation`,authorityDigest:`authority_digest`,revocationEpoch:`revocation_epoch`,poolIdentityKey:`pool_identity_key`,walletMaterialActivationId:`wallet_material_activation_id`},le=[{store:h.appState,keyPath:`key`,indexes:[]},{store:h.wallets,keyPath:`wallet_id`,indexes:[{name:g.rpId,keyPath:`rp_id`,unique:!1},{name:g.status,keyPath:`status`,unique:!1},{name:g.updatedAt,keyPath:`updated_at`,unique:!1}]},{store:h.walletAuthorities,keyPath:`authority_id`,indexes:[{name:g.walletId,keyPath:`wallet_id`,unique:!1},{name:g.walletAuthorityId,keyPath:`authority_id`,unique:!0},{name:g.walletIdAuthorityId,keyPath:[`wallet_id`,`authority_id`],unique:!0},{name:g.walletIdAuthorityStatus,keyPath:[`wallet_id`,`state`],unique:!1},{name:g.walletIdDeviceId,keyPath:[`wallet_id`,`device_id`],unique:!1},{name:g.updatedAt,keyPath:`updated_at`,unique:!1}]},{store:h.walletAuthMethods,keyPath:`wallet_auth_method_id`,indexes:[{name:g.walletId,keyPath:`wallet_id`,unique:!1},{name:g.walletIdKind,keyPath:[`wallet_id`,`kind`],unique:!1},{name:g.authMethod,keyPath:`auth_method`,unique:!1},{name:g.rpId,keyPath:`rp_id`,unique:!1},{name:g.authIdentifierKey,keyPath:`auth_identifier_key`,unique:!1},{name:g.kindRpIdAuthIdentifier,keyPath:[`kind`,`rp_id`,`auth_identifier_key`],unique:!1},{name:g.passkeyRpIdCredentialId,keyPath:[`kind`,`rp_id`,`credential_id_b64u`],unique:!0},{name:g.status,keyPath:`status`,unique:!1},{name:g.walletAuthorityId,keyPath:`wallet_authority_id`,unique:!1},{name:g.walletIdAuthMethodId,keyPath:[`wallet_id`,`wallet_auth_method_id`],unique:!0},{name:g.walletIdAuthorityStatus,keyPath:[`wallet_id`,`wallet_authority_id`,`status`],unique:!1},{name:g.updatedAt,keyPath:`updated_at`,unique:!1}]},{store:h.walletAuthoritySignerMaterials,keyPath:[`wallet_authority_id`,`wallet_auth_method_id`,`activation_id`],indexes:[{name:g.walletAuthorityId,keyPath:`wallet_authority_id`,unique:!1},{name:g.walletAuthorityAuthMethodId,keyPath:[`wallet_authority_id`,`wallet_auth_method_id`],unique:!1},{name:g.activationId,keyPath:`activation_id`,unique:!1},{name:g.walletAuthorityActivationId,keyPath:[`wallet_authority_id`,`activation_id`],unique:!0}]},{store:h.walletAuthorityExportRoots,keyPath:[`wallet_authority_id`,`wallet_auth_method_id`,`wallet_key_id`],indexes:[{name:g.walletAuthorityId,keyPath:`wallet_authority_id`,unique:!1},{name:g.walletAuthorityAuthMethodId,keyPath:[`wallet_authority_id`,`wallet_auth_method_id`],unique:!1},{name:g.walletKeyId,keyPath:`wallet_key_id`,unique:!1}]},{store:h.walletAuthorityInstallationReceipts,keyPath:`authority_id`,indexes:[{name:g.walletAuthorityId,keyPath:`authority_id`,unique:!0},{name:g.walletId,keyPath:`wallet_id`,unique:!1},{name:g.walletAuthMethodId,keyPath:`wallet_auth_method_id`,unique:!1},{name:g.walletIdDeviceId,keyPath:[`wallet_id`,`device_id`],unique:!1},{name:g.packageSetDigest,keyPath:`package_set_digest_b64u`,unique:!1},{name:g.updatedAt,keyPath:`installed_at_ms`,unique:!1}]},{store:h.walletSelections,keyPath:`wallet_id`,indexes:[{name:g.walletId,keyPath:`wallet_id`,unique:!0},{name:g.walletAuthMethodId,keyPath:`wallet_auth_method_id`,unique:!1},{name:g.walletIdLockGeneration,keyPath:[`wallet_id`,`lock_generation`],unique:!0}]},{store:h.walletSigners,keyPath:`wallet_signer_id`,indexes:[{name:g.walletId,keyPath:`wallet_id`,unique:!1},{name:g.walletIdKind,keyPath:[`wallet_id`,`kind`],unique:!1},{name:g.walletKindNearSignerSlot,keyPath:[`wallet_id`,`kind`,`near_signer_slot`],unique:!1},{name:g.walletKindNearEd25519SigningKeyId,keyPath:[`wallet_id`,`kind`,`near_ed25519_signing_key_id`],unique:!1},{name:g.walletKindChainTargetKeyHandle,keyPath:[`wallet_id`,`kind`,`chain_target_key`,`key_handle`],unique:!0},{name:g.walletKindChainTargetKeyFacts,keyPath:[`wallet_id`,`kind`,`chain_target_key`,`ecdsa_threshold_key_id`],unique:!0},{name:g.chainTargetKey,keyPath:`chain_target_key`,unique:!1},{name:g.keyHandle,keyPath:`key_handle`,unique:!1},{name:g.thresholdOwnerAddress,keyPath:`threshold_owner_address`,unique:!1},{name:g.status,keyPath:`status`,unique:!1},{name:g.updatedAt,keyPath:`updated_at`,unique:!1}]},{store:h.nearAccountProjections,keyPath:[`wallet_id`,`near_account_id`,`signer_slot`],indexes:[{name:g.nearAccountId,keyPath:`near_account_id`,unique:!1},{name:g.profileId,keyPath:`profile_id`,unique:!1},{name:g.publicKey,keyPath:`public_key`,unique:!1},{name:g.updatedAt,keyPath:`updated_at`,unique:!1}]},{store:h.signerOpsOutbox,keyPath:`op_id`,indexes:[{name:g.status,keyPath:`status`,unique:!1},{name:g.nextAttemptAt,keyPath:`next_attempt_at`,unique:!1},{name:g.statusNextAttemptAt,keyPath:[`status`,`next_attempt_at`],unique:!1},{name:g.idempotencyKey,keyPath:`idempotency_key`,unique:!0},{name:g.walletId,keyPath:`wallet_id`,unique:!1},{name:g.chainTargetKey,keyPath:`chain_target_key`,unique:!1}]},{store:h.nonceLaneLeases,keyPath:`lease_id`,indexes:[{name:g.laneKey,keyPath:`lane_key`,unique:!1},{name:g.walletId,keyPath:`wallet_id`,unique:!1},{name:g.nearAccountId,keyPath:`near_account_id`,unique:!1},{name:g.state,keyPath:`state`,unique:!1},{name:g.expiresAtMs,keyPath:`expires_at_ms`,unique:!1},{name:g.laneState,keyPath:[`lane_key`,`state`],unique:!1},{name:g.walletExpiresAt,keyPath:[`wallet_id`,`expires_at_ms`],unique:!1}]},{store:h.nonceLaneLocks,keyPath:`lock_key`,indexes:[{name:g.expiresAtMs,keyPath:`expires_at_ms`,unique:!1},{name:g.ownerId,keyPath:`owner_id`,unique:!1}]},{store:h.keyMaterial,keyPath:`key_material_id`,indexes:[{name:g.walletId,keyPath:`wallet_id`,unique:!1},{name:g.walletSignerId,keyPath:`wallet_signer_id`,unique:!1},{name:g.chainTargetKey,keyPath:`chain_target_key`,unique:!1},{name:g.keyHandle,keyPath:`key_handle`,unique:!1},{name:g.publicKey,keyPath:`public_key`,unique:!1},{name:g.updatedAt,keyPath:`updated_at`,unique:!1}]},{store:h.signingSessionSeals,keyPath:`store_key`,indexes:[{name:g.walletId,keyPath:`wallet_id`,unique:!1},{name:g.authMethod,keyPath:`auth_method`,unique:!1},{name:g.curve,keyPath:`curve`,unique:!1},{name:g.ed25519ThresholdSessionId,keyPath:`ed25519_threshold_session_id`,unique:!1},{name:g.ecdsaThresholdSessionId,keyPath:`ecdsa_threshold_session_id`,unique:!1},{name:g.thresholdSessionId,keyPath:`threshold_session_id`,unique:!1},{name:g.enrollmentId,keyPath:`enrollmentId`,unique:!1},{name:g.keyHandle,keyPath:`key_handle`,unique:!1},{name:g.chainTargetKey,keyPath:`chain_target_key`,unique:!1},{name:g.exactSigningLaneIdentityKey,keyPath:`exact_signing_lane_identity_key`,unique:!1},{name:g.expiresAtMs,keyPath:`expires_at_ms`,unique:!1},{name:g.updatedAt,keyPath:`updated_at`,unique:!1}]},{store:h.signingSessionRestoreLeases,keyPath:`lease_key`,indexes:[{name:g.thresholdSessionId,keyPath:`threshold_session_id`,unique:!1},{name:g.ownerId,keyPath:`owner_id`,unique:!1},{name:g.expiresAtMs,keyPath:`expires_at_ms`,unique:!1}]},{store:h.pendingWalletRecoveryCodeBackups,keyPath:[`wallet_id`,`enrollment_id`],indexes:[{name:g.walletId,keyPath:`wallet_id`,unique:!1},{name:g.enrollmentId,keyPath:`enrollment_id`,unique:!1},{name:g.walletIdEnrollmentId,keyPath:[`wallet_id`,`enrollment_id`],unique:!0},{name:g.recoveryCodesIssuedAtMs,keyPath:`recovery_codes_issued_at_ms`,unique:!1},{name:g.status,keyPath:`status`,unique:!1}]},{store:h.walletSessionAuthorizations,keyPath:`wallet_session_id`,indexes:[{name:g.walletId,keyPath:`wallet_id`,unique:!1},{name:g.walletAuthorityId,keyPath:`wallet_authority_id`,unique:!1},{name:g.walletAuthMethodId,keyPath:`wallet_auth_method_id`,unique:!1},{name:g.authorityDigest,keyPath:`authority_digest_b64u`,unique:!1},{name:g.revocationEpoch,keyPath:`authority_revocation_epoch`,unique:!1},{name:g.status,keyPath:`status`,unique:!1},{name:g.expiresAtMs,keyPath:`expires_at_ms`,unique:!1}]},{store:h.ecdsaCapabilityManifests,keyPath:`manifest_id`,indexes:[{name:g.capabilityWallet,keyPath:[`capability_ref`,`wallet_id`],unique:!1},{name:g.capabilityWalletAuthorityState,keyPath:[`capability_ref`,`wallet_id`,`authority_digest`,`manifest_state`],unique:!1}]},{store:h.ecdsaCurrentCapabilityManifests,keyPath:[`capability_ref`,`wallet_id`,`authority_digest`],indexes:[{name:g.walletId,keyPath:`wallet_id`,unique:!1}]},{store:h.ecdsaRoleLocalMaterial,keyPath:`durable_material_ref`,indexes:[]},{store:h.ecdsaActivationCommitJournals,keyPath:`journal_id`,indexes:[{name:g.capabilityWalletAuthority,keyPath:[`capability_ref`,`wallet_id`,`authority_digest`],unique:!0}]},{store:h.ecdsaMaterialSealingKeys,keyPath:`key_id`,indexes:[]},{store:h.ecdsaClientPresignatures,keyPath:`record_id`,indexes:[{name:g.poolIdentityKey,keyPath:`pool_identity_key`,unique:!1},{name:g.walletId,keyPath:`wallet_id`,unique:!1},{name:g.walletMaterialActivationId,keyPath:[`wallet_id`,`material_activation_id`],unique:!1},{name:g.expiresAtMs,keyPath:`expires_at_ms`,unique:!1},{name:g.walletExpiresAt,keyPath:[`wallet_id`,`expires_at_ms`],unique:!1}]}],_=(e,t)=>t.some(t=>e instanceof t);let ue,de;function fe(){return ue||=[IDBDatabase,IDBObjectStore,IDBIndex,IDBCursor,IDBTransaction]}function pe(){return de||=[IDBCursor.prototype.advance,IDBCursor.prototype.continue,IDBCursor.prototype.continuePrimaryKey]}const v=new WeakMap,y=new WeakMap,b=new WeakMap;function me(e){let t=new Promise((t,n)=>{let r=()=>{e.removeEventListener(`success`,i),e.removeEventListener(`error`,a)},i=()=>{t(w(e.result)),r()},a=()=>{n(e.error),r()};e.addEventListener(`success`,i),e.addEventListener(`error`,a)});return b.set(t,e),t}function he(e){if(v.has(e))return;let t=new Promise((t,n)=>{let r=()=>{e.removeEventListener(`complete`,i),e.removeEventListener(`error`,a),e.removeEventListener(`abort`,a)},i=()=>{t(),r()},a=()=>{n(e.error||new DOMException(`AbortError`,`AbortError`)),r()};e.addEventListener(`complete`,i),e.addEventListener(`error`,a),e.addEventListener(`abort`,a)});v.set(e,t)}let x={get(e,t,n){if(e instanceof IDBTransaction){if(t===`done`)return v.get(e);if(t===`store`)return n.objectStoreNames[1]?void 0:n.objectStore(n.objectStoreNames[0])}return w(e[t])},set(e,t,n){return e[t]=n,!0},has(e,t){return e instanceof IDBTransaction&&(t===`done`||t===`store`)?!0:t in e}};function S(e){x=e(x)}function C(e){return pe().includes(e)?function(...t){return e.apply(T(this),t),w(this.request)}:function(...t){return w(e.apply(T(this),t))}}function ge(e){return typeof e==`function`?C(e):(e instanceof IDBTransaction&&he(e),_(e,fe())?new Proxy(e,x):e)}function w(e){if(e instanceof IDBRequest)return me(e);if(y.has(e))return y.get(e);let t=ge(e);return t!==e&&(y.set(e,t),b.set(t,e)),t}const T=e=>b.get(e);function _e(e,t,{blocked:n,upgrade:r,blocking:i,terminated:a}={}){let o=indexedDB.open(e,t),s=w(o);return r&&o.addEventListener(`upgradeneeded`,e=>{r(w(o.result),e.oldVersion,e.newVersion,w(o.transaction),e)}),n&&o.addEventListener(`blocked`,e=>n(e.oldVersion,e.newVersion,e)),s.then(e=>{a&&e.addEventListener(`close`,()=>a()),i&&e.addEventListener(`versionchange`,e=>i(e.oldVersion,e.newVersion,e))}).catch(()=>{}),s}const ve=[`get`,`getKey`,`getAll`,`getAllKeys`,`count`],ye=[`put`,`add`,`delete`,`clear`],E=new Map;function D(e,t){if(!(e instanceof IDBDatabase&&!(t in e)&&typeof t==`string`))return;if(E.get(t))return E.get(t);let n=t.replace(/FromIndex$/,``),r=t!==n,i=ye.includes(n);if(!(n in(r?IDBIndex:IDBObjectStore).prototype)||!(i||ve.includes(n)))return;let a=async function(e,...t){let a=this.transaction(e,i?`readwrite`:`readonly`),o=a.store;return r&&(o=o.index(t.shift())),(await Promise.all([o[n](...t),i&&a.done]))[0]};return E.set(t,a),a}S(e=>({...e,get:(t,n,r)=>D(t,n)||e.get(t,n,r),has:(t,n)=>!!D(t,n)||e.has(t,n)}));const be=[`continue`,`continuePrimaryKey`,`advance`],O={},k=new WeakMap,A=new WeakMap,xe={get(e,t){if(!be.includes(t))return e[t];let n=O[t];return n||=O[t]=function(...e){k.set(this,A.get(this)[t](...e))},n}};async function*Se(...e){let t=this;if(t instanceof IDBCursor||(t=await t.openCursor(...e)),!t)return;t=t;let n=new Proxy(t,xe);for(A.set(n,t),b.set(n,T(t));t;)yield n,t=await(k.get(n)||t.continue()),k.delete(n)}function j(e,t){return t===Symbol.asyncIterator&&_(e,[IDBIndex,IDBObjectStore,IDBCursor])||t===`iterate`&&_(e,[IDBIndex,IDBObjectStore])}S(e=>({...e,get(t,n,r){return j(t,n)?Se:e.get(t,n,r)},has(t,n){return j(t,n)||e.has(t,n)}}));const Ce={dbName:m,dbVersion:24};function M(e){return typeof e==`string`?e:[...e]}function we(e,t){let n=e.createObjectStore(t.store,{keyPath:M(t.keyPath)});for(let e of t.indexes)n.createIndex(e.name,M(e.keyPath),{unique:e.unique})}function Te(e){for(let t of le)e.objectStoreNames.contains(t.store)||we(e,t)}const N=8e3;function Ee(e){return Error(`[SeamsWalletDBManager] IndexedDB open is blocked for ${e}. Close other tabs using this app and retry.`)}function P(e){return Error(e)}async function F(e,t,n,r){let i=!1,a=null,o=new Promise((e,o)=>{a=setTimeout(()=>{i||(r?.(),o(n))},t)});try{return await Promise.race([e,o])}finally{i=!0,a&&clearTimeout(a)}}async function De(e,t){let n=await t(e);return await e.tx.done,n}const Oe=new class{constructor(e=Ce){this.dbPromise=null,this.disabled=!1,this.config=e}getDbName(){return this.config.dbName}setDbName(e){this.config.dbName!==e&&(this.close(),this.config={...this.config,dbName:e})}setDisabled(e){this.disabled=e,e&&this.close()}isDisabled(){return this.disabled}close(){this.dbPromise&&=(this.dbPromise.then(e=>e.close()).catch(()=>void 0),null)}async getDB(){if(this.disabled)throw Error(`[SeamsWalletDBManager] IndexedDB is disabled in this environment.`);if(!this.dbPromise){let e=this.config.dbName,t=this.config.dbVersion,n=null,r=null,i=new Promise((e,t)=>{r=t}),a=_e(e,t,{upgrade(e){Te(e)},blocked(){console.warn(`[SeamsWalletDBManager] IndexedDB open is blocked.`,{dbName:e,dbVersion:t}),n=setTimeout(()=>{r?.(Ee(e))},3e3)},blocking:()=>{console.warn(`[SeamsWalletDBManager] IndexedDB connection is blocking an upgrade.`,{dbName:e,dbVersion:t}),this.close()},terminated(){console.warn(`[SeamsWalletDBManager] IndexedDB connection has been terminated.`,{dbName:e,dbVersion:t})}});this.dbPromise=F(Promise.race([a,i]).finally(()=>{n&&clearTimeout(n)}),N,P(`[SeamsWalletDBManager] IndexedDB open timed out for ${e}. Close other tabs using this app and retry.`)).catch(e=>{throw this.dbPromise=null,a.then(e=>e.close()).catch(()=>void 0),e})}return await this.dbPromise}async runTransaction(e,t,n,r){let i=await F(this.getDB(),N,P(`[SeamsWalletDBManager] IndexedDB connection timed out for ${this.config.dbName}. Close other tabs using this app and retry.`)),a=i.transaction([...e],t,r),o={db:i,tx:a,store(e){return a.objectStore(e)}};try{return await F(De(o,n),8e3,P(`[SeamsWalletDBManager] IndexedDB transaction timed out for ${this.config.dbName}. Close other tabs using this app and retry.`),()=>{try{a.abort()}catch{}})}catch(e){try{a.abort()}catch{}throw await a.done.catch(()=>void 0),e}}},I=`wallet_seed_parallel_hkdf_sha256_v1`;function ke(e){return e.kind===`wallet_custody_seed_v1`}function Ae(){return{kind:`wallet_custody_seed_v1`,derivationScheme:I}}function L(e){return{kind:`ed25519_yao_client_root_v1`,linkSessionId:e.linkSessionId,walletKeyId:e.walletKeyId,targetFactor:e.targetFactor,applicationBindingDigestB64u:e.applicationBindingDigestB64u,registeredPublicKeyB64u:e.registeredPublicKeyB64u,enrollmentId:e.enrollmentId,deviceId:e.deviceId,revocationEpoch:e.revocationEpoch}}function je(e){return{kind:`ed25519_lane_holder_share_v1`,walletKeyId:e.walletKeyId,laneId:e.laneId,laneShareEpoch:e.laneShareEpoch,nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,registeredPublicKeyB64u:e.registeredPublicKeyB64u,participantBindingDigestB64u:e.participantBindingDigestB64u}}function Me(e){return{kind:`ecdsa_lane_holder_share_v1`,walletKeyId:e.walletKeyId,laneId:e.laneId,laneShareEpoch:e.laneShareEpoch,evmFamilySigningKeySlotId:e.evmFamilySigningKeySlotId,thresholdSessionId:e.thresholdSessionId,thresholdPublicKey33B64u:e.thresholdPublicKey33B64u}}const R=[`kind`,`walletKeyId`,`laneId`,`laneShareEpoch`],z={wallet_custody_seed_v1:[`kind`,`derivationScheme`],ed25519_yao_client_root_v1:[`kind`,`linkSessionId`,`walletKeyId`,`targetFactor`,`applicationBindingDigestB64u`,`registeredPublicKeyB64u`,`enrollmentId`,`deviceId`,`revocationEpoch`],ed25519_lane_holder_share_v1:[...R,`nearEd25519SigningKeyId`,`registeredPublicKeyB64u`,`participantBindingDigestB64u`],ecdsa_lane_holder_share_v1:[...R,`evmFamilySigningKeySlotId`,`thresholdSessionId`,`thresholdPublicKey33B64u`]},Ne=Array.from(new Set(Object.values(z).flat()));function B(e,t){if(e===`wallet_custody_seed_v1`||e===`ed25519_yao_client_root_v1`||e===`ed25519_lane_holder_share_v1`||e===`ecdsa_lane_holder_share_v1`)return e;throw Error(`${t}.kind must be a known passkey custody secret kind`)}function Pe(e,t){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<0)throw Error(`${t} must be a non-negative safe integer`);return e}function Fe(e,t){let n=l(e,t);if(d(n,[`kind`],t),n.kind===`passkey_prf`||n.kind===`email_otp`)return{kind:n.kind};throw Error(`${t}.kind must be passkey_prf or email_otp`)}function V(e,t){let n=s(e.walletKeyId);if(!n.ok)throw Error(`${t}.walletKeyId ${n.error.message}`);let a=r(e.laneId);if(!a.ok)throw Error(`${t}.laneId ${a.error.message}`);let o=i(e.laneShareEpoch);if(!o.ok)throw Error(`${t}.laneShareEpoch ${o.error.message}`);return{walletKeyId:n.value,laneId:a.value,laneShareEpoch:o.value}}function Ie(e,t){let n=ne(e);if(!n.ok)throw Error(`${t} ${n.error.message}`);return n.value}function Le(e,t=`passkeyCustodySecretBinding`){let n=l(e,t),r=B(n.kind,t);switch(d(n,z[r],t,Ne),r){case`wallet_custody_seed_v1`:if(n.derivationScheme!==I)throw Error(`${t}.derivationScheme must be ${I}`);return Ae();case`ed25519_yao_client_root_v1`:{let e=c(n.linkSessionId);if(!e.ok)throw Error(`${t}.linkSessionId ${e.error.message}`);let r=s(n.walletKeyId);if(!r.ok)throw Error(`${t}.walletKeyId ${r.error.message}`);let i=ee(n.enrollmentId);if(!i.ok)throw Error(`${t}.enrollmentId ${i.error.message}`);let o=a(n.deviceId);if(!o.ok)throw Error(`${t}.deviceId ${o.error.message}`);return L({linkSessionId:e.value,walletKeyId:r.value,targetFactor:Fe(n.targetFactor,`${t}.targetFactor`),applicationBindingDigestB64u:f(n.applicationBindingDigestB64u,`${t}.applicationBindingDigestB64u`),registeredPublicKeyB64u:p(n.registeredPublicKeyB64u,`${t}.registeredPublicKeyB64u`),enrollmentId:i.value,deviceId:o.value,revocationEpoch:Pe(n.revocationEpoch,`${t}.revocationEpoch`)})}case`ed25519_lane_holder_share_v1`:{let e=V(n,t);return je({walletKeyId:e.walletKeyId,laneId:e.laneId,laneShareEpoch:e.laneShareEpoch,nearEd25519SigningKeyId:ce(n.nearEd25519SigningKeyId),registeredPublicKeyB64u:p(n.registeredPublicKeyB64u,`${t}.registeredPublicKeyB64u`),participantBindingDigestB64u:f(n.participantBindingDigestB64u,`${t}.participantBindingDigestB64u`)})}case`ecdsa_lane_holder_share_v1`:{let e=V(n,t);return Me({walletKeyId:e.walletKeyId,laneId:e.laneId,laneShareEpoch:e.laneShareEpoch,evmFamilySigningKeySlotId:se(n.evmFamilySigningKeySlotId,`${t}.evmFamilySigningKeySlotId`),thresholdSessionId:Ie(n.thresholdSessionId,`${t}.thresholdSessionId`),thresholdPublicKey33B64u:ie(n.thresholdPublicKey33B64u,`${t}.thresholdPublicKey33B64u`)})}}}const H=`wallet_custody_envelope_v2`,U=`passkey_prf_kek_hkdf_sha256_v1`,W=`email_otp_factor_kek_hkdf_sha256_v1`,Re=[`kind`,`walletAuthMethodId`];function ze(e,t){if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`${t} must be an object`);let r=e;switch(d(r,Re,t),r.kind){case`unbound`:if(r.walletAuthMethodId!==void 0)throw Error(`${t}.walletAuthMethodId belongs to the method_bound branch`);return{kind:`unbound`};case`method_bound`:{let e=n(r.walletAuthMethodId);if(!e.ok)throw Error(`${t}.walletAuthMethodId ${e.error.message}`);return{kind:`method_bound`,walletAuthMethodId:e.value}}default:throw Error(`${t}.kind must be unbound or method_bound`)}}function Be(e){return JSON.stringify({walletId:e.walletId,envelopeId:e.envelopeId,factor:e.factor,envelopeRevision:e.envelopeRevision,binding:e.binding,ownership:G(e.ownership)})}function Ve(e,t){if(e===`unbound`)return{kind:`unbound`};if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`${t} must be "unbound" or a methodBound object`);let r=e;d(r,[`methodBound`],t);let i=r.methodBound;if(typeof i!=`object`||!i||Array.isArray(i))throw Error(`${t}.methodBound must be an object`);let a=i;d(a,[`walletAuthMethodId`],`${t}.methodBound`);let o=n(a.walletAuthMethodId);if(!o.ok)throw Error(`${t}.methodBound.walletAuthMethodId ${o.error.message}`);return{kind:`method_bound`,walletAuthMethodId:o.value}}function G(e){switch(e.kind){case`unbound`:return`unbound`;case`method_bound`:return{methodBound:{walletAuthMethodId:String(e.walletAuthMethodId)}};default:throw Error(`Unhandled custody envelope ownership: ${String(e)}`)}}function He(e){return{kind:`method_bound`,walletAuthMethodId:e}}function K(e){return{kind:`passkey`,rpId:e.rpId,credentialIdB64u:e.credentialIdB64u,kekVersion:U}}function q(e){return{kind:`email_otp`,enrollmentId:e.enrollmentId,enrollmentSealKeyVersion:e.enrollmentSealKeyVersion,kekVersion:W}}function J(e){return{state:`active`,activatedAtMs:e.activatedAtMs}}function Ue(e){return{state:`retired`,activatedAtMs:e.activatedAtMs,retiredAtMs:e.retiredAtMs}}function We(e){return{state:`revoked`,activatedAtMs:e.activatedAtMs,revokedAtMs:e.revokedAtMs}}function Y(e){return{kind:`wallet_custody_envelope_v2`,envelopeId:e.envelopeId,walletId:e.walletId,ownership:e.ownership,binding:e.binding,factor:e.factor,envelopeVersion:H,envelopeRevision:e.envelopeRevision,nonceB64u:e.nonceB64u,sealedCustodySecretB64u:e.sealedCustodySecretB64u,ciphertextDigestB64u:e.ciphertextDigestB64u,aadHashB64u:e.aadHashB64u,lifecycle:e.lifecycle,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs}}const Ge=[`state`,`activatedAtMs`,`retiredAtMs`,`revokedAtMs`];function Ke(e,t=`lifecycle`){let n=l(e,t);d(n,Ge,t);let r=u(n.activatedAtMs,`${t}.activatedAtMs`);switch(n.state){case`active`:if(n.retiredAtMs!==void 0||n.revokedAtMs!==void 0)throw Error(`${t} cannot be active and carry a retired or revoked timestamp`);return J({activatedAtMs:r});case`retired`:{if(n.revokedAtMs!==void 0)throw Error(`${t} cannot be retired and carry a revoked timestamp`);let e=u(n.retiredAtMs,`${t}.retiredAtMs`);if(e<r)throw Error(`${t}.retiredAtMs cannot precede activation`);return Ue({activatedAtMs:r,retiredAtMs:e})}case`revoked`:{if(n.retiredAtMs!==void 0)throw Error(`${t} cannot be revoked and carry a retired timestamp`);let e=u(n.revokedAtMs,`${t}.revokedAtMs`);if(e<r)throw Error(`${t}.revokedAtMs cannot precede activation`);return We({activatedAtMs:r,revokedAtMs:e})}default:throw Error(`${t}.state must be active, retired, or revoked`)}}const X=[`kind`,`rpId`,`credentialIdB64u`,`kekVersion`],Z=[`kind`,`enrollmentId`,`enrollmentSealKeyVersion`,`kekVersion`],Q=Array.from(new Set([...X,...Z]));function $(e,t){if(typeof e!=`string`||!e.trim())throw Error(`${t} is required`);return e}function qe(t,n=`factor`){let r=l(t,n);switch(r.kind){case`passkey`:{if(d(r,X,n,Q),r.kekVersion!==U)throw Error(`${n}.kekVersion must be ${U}`);let t=e(r.rpId);if(!t.ok)throw Error(`${n}.rpId ${t.error.message}`);let i=o(r.credentialIdB64u);if(!i.ok)throw Error(`${n}.credentialIdB64u ${i.error.message}`);return K({rpId:t.value,credentialIdB64u:i.value})}case`email_otp`:if(d(r,Z,n,Q),r.kekVersion!==W)throw Error(`${n}.kekVersion must be ${W}`);return q({enrollmentId:$(r.enrollmentId,`${n}.enrollmentId`),enrollmentSealKeyVersion:$(r.enrollmentSealKeyVersion,`${n}.enrollmentSealKeyVersion`)});default:throw Error(`${n}.kind must be passkey or email_otp`)}}const Je=[`kind`,`envelopeId`,`walletId`,`ownership`,`binding`,`factor`,`envelopeVersion`,`envelopeRevision`,`nonceB64u`,`sealedCustodySecretB64u`,`ciphertextDigestB64u`,`aadHashB64u`,`lifecycle`,`createdAtMs`,`updatedAtMs`];function Ye(e,n=`walletCustodyEnvelope`){let r=l(e,n);if(r.kind!==`wallet_custody_envelope_v2`)throw Error(`${n}.kind must be ${H}`);if(d(r,Je,n),r.envelopeVersion!==`wallet_custody_envelope_v2`)throw Error(`${n}.envelopeVersion must be ${H}`);let i=te(r.envelopeId);if(!i.ok)throw Error(`${n}.envelopeId ${i.error.message}`);let a=t(r.walletId);if(!a.ok)throw Error(`${n}.walletId ${a.error.message}`);let o=ze(r.ownership,`${n}.ownership`),s=u(r.createdAtMs,`${n}.createdAtMs`),c=u(r.updatedAtMs,`${n}.updatedAtMs`);if(c<s)throw Error(`${n}.updatedAtMs cannot precede createdAtMs`);return Y({envelopeId:i.value,walletId:a.value,ownership:o,binding:Le(r.binding,`${n}.binding`),factor:qe(r.factor,`${n}.factor`),envelopeRevision:oe(r.envelopeRevision,`${n}.envelopeRevision`),nonceB64u:re(r.nonceB64u,`${n}.nonceB64u`),sealedCustodySecretB64u:ae(r.sealedCustodySecretB64u,`${n}.sealedCustodySecretB64u`),ciphertextDigestB64u:f(r.ciphertextDigestB64u,`${n}.ciphertextDigestB64u`),aadHashB64u:f(r.aadHashB64u,`${n}.aadHashB64u`),lifecycle:Ke(r.lifecycle,`${n}.lifecycle`),createdAtMs:s,updatedAtMs:c})}function Xe(e,t){return e.kind===t.kind?e.kind===`unbound`?!0:t.kind===`method_bound`&&String(e.walletAuthMethodId)===String(t.walletAuthMethodId):!1}function Ze(e){if(!e.establishedCustody)throw Error(`only a custody-establishing commit issues recovery codes`);return{...e,recoveryBackupAcknowledged:!0}}function Qe(e,t){if(typeof e!=`object`||!e||Array.isArray(e))throw Error(`${t} walletCustody must be an object`);let n=e;switch(n.status){case`not_requested`:case`committed`:case`custody_already_established`:return{status:n.status};case`joined`:{let e=n.keyManifestDigestB64u;if(typeof e!=`string`||!e)throw Error(`${t} joined custody carries no key manifest digest`);return{status:`joined`,keyManifestDigestB64u:e}}case`rejected`:{let e=n.reason;if(typeof e!=`string`||!e)throw Error(`${t} rejected custody carries no reason`);return{status:`rejected`,reason:e}}default:throw Error(`${t} walletCustody status is unrecognised`)}}export{T as _,q as a,h as b,K as c,Ye as d,Ve as f,Oe as g,ke as h,J as i,Be as l,L as m,Ze as n,He as o,Xe as p,H as r,Y as s,Qe as t,G as u,m as v,g as y};

package/dist/esm/sdk/pendingWalletRecoveryCodeBackup-BNk4ebsY.js

@@ -0,0 +1 @@
+import{b as e,g as t}from"./passkey-custody-LP4UTFbn.js";import{p as n}from"./wallet-recovery-CcDZ1hMH.js";import{t as r}from"./surface-measurement-reporter-OICExWKE.js";const i=`Recovery-code backup was cancelled before acknowledgement`;async function a(e,t={kind:`disabled`},n={}){if(typeof document>`u`)throw Error(`Wallet recovery-code backup requires a browser or a backup handler`);let a=document.activeElement instanceof HTMLElement?document.activeElement:null;if(n.shouldCancel?.())throw Error(i);let o=await import(`./mountRecoveryCodeBackupSurface-BBCTaQsu.js`);if(n.shouldCancel?.())throw Error(i);let s=null,l=null,u=!1;return await new Promise((d,f)=>{let p=()=>{s?.disconnect(),s=null,l?.dispose(),l=null,a?.focus()},m=e=>{u||(u=!0,p(),e instanceof Error?f(e):d(e))},h=t=>{switch(t.kind){case`dismissed`:m(Error(i));return;case`recovery_codes`:if(t.acknowledged){m({kind:`wallet_recovery_codes_backed_up_v1`});return}if(e.kind===`direct_backup`&&e.request.continuation===`registration_may_defer`){m({kind:`wallet_recovery_code_backup_deferred_v1`});return}m(Error(i));return}};try{l=o.mountRecoveryCodeBackupSurface({parent:document.body,appearance:n.appearance,experience:e,surface:t.kind===`wallet_iframe`?`wallet-iframe`:`standalone`,onClose:h,onCancel:()=>m(Error(i)),onShown:e=>{u||t.kind!==`wallet_iframe`||(s=r({kind:`request_scroll_surface`,requestId:t.requestId,element:e,postMeasurement:c.bind(null,e,t.postMeasurement)}))}})}catch(e){m(e instanceof Error?e:Error(String(e)))}})}async function o(e,t={kind:`disabled`}){return await a({kind:`direct_backup`,request:e},t)}async function s(e,t={kind:`disabled`},n={}){return await a({kind:`account_menu`,...e},t,n)}function c(e,t,n){if(n.kind!==`measured_v1`)throw Error(`Recovery codes require a request surface measurement`);t({kind:`measured_v1`,requestId:n.requestId,sequence:n.sequence,widthCssPx:e.dataset.seamsRecoveryStage===`recovery_codes`?688:480,heightCssPx:n.heightCssPx})}const l=`wallet_recovery_codes_v1`,u=[`record_version`,`wallet_id`,`enrollment_id`,`recovery_codes_issued_at_ms`,`status`,`key`,`iv`,`ciphertext`];function d(e){return typeof CryptoKey<`u`&&e instanceof CryptoKey&&e.type===`secret`&&!e.extractable&&e.algorithm.name===`AES-GCM`&&e.usages.includes(`encrypt`)&&e.usages.includes(`decrypt`)}function f(e){if(typeof e!=`object`||!e||Array.isArray(e))return null;let t=new Map(Object.entries(e)),n=new Set(u);return t.size!==n.size||[...t.keys()].some(e=>!n.has(e))?null:{record_version:t.get(`record_version`),wallet_id:t.get(`wallet_id`),enrollment_id:t.get(`enrollment_id`),recovery_codes_issued_at_ms:t.get(`recovery_codes_issued_at_ms`),status:t.get(`status`),key:t.get(`key`),iv:t.get(`iv`),ciphertext:t.get(`ciphertext`)}}function p(e,t){let n=f(e);if(!n)return null;let r=Number(n.recovery_codes_issued_at_ms);return n.record_version!==1||n.wallet_id!==t||n.enrollment_id!==l||n.status!==`pending`||!Number.isSafeInteger(r)||r<=0||!d(n.key)||!(n.iv instanceof Uint8Array)||n.iv.byteLength!==12||!(n.ciphertext instanceof Uint8Array)||n.ciphertext.byteLength===0?null:{record_version:1,wallet_id:t,enrollment_id:l,recovery_codes_issued_at_ms:r,status:`pending`,key:n.key,iv:n.iv,ciphertext:n.ciphertext}}function m(e,t){return new TextEncoder().encode(JSON.stringify({kind:l,walletId:e,issuedAtMs:t}))}function h(e){return[e,l]}const g=new class{async write(r){let i=r.walletId.trim();if(!i)throw Error(`Pending recovery-code backup requires a wallet`);let a=n(r.recoveryCodes.map(String)),o=r.issuedAtMs??Date.now();if(!Number.isSafeInteger(o)||o<=0)throw Error(`Pending recovery-code backup issue time is invalid`);let s=await crypto.subtle.generateKey({name:`AES-GCM`,length:256},!1,[`encrypt`,`decrypt`]),c=crypto.getRandomValues(new Uint8Array(12)),u=m(i,o),d=new TextEncoder().encode(JSON.stringify(a)),f=null;try{f=new Uint8Array(await crypto.subtle.encrypt({name:`AES-GCM`,iv:c,additionalData:u},s,d)),await t.runTransaction([e.pendingWalletRecoveryCodeBackups],`readwrite`,async t=>{await t.store(e.pendingWalletRecoveryCodeBackups).put({record_version:1,wallet_id:i,enrollment_id:l,recovery_codes_issued_at_ms:o,status:`pending`,key:s,iv:c,ciphertext:f})})}finally{u.fill(0),d.fill(0),f?.fill(0)}}async read(r){let i=r.trim();if(!i)return null;let a=p(await(await t.getDB()).get(e.pendingWalletRecoveryCodeBackups,h(i)),i);if(!a)return null;let o=m(i,a.recovery_codes_issued_at_ms),s=null;try{s=new Uint8Array(await crypto.subtle.decrypt({name:`AES-GCM`,iv:a.iv,additionalData:o},a.key,a.ciphertext));let e=JSON.parse(new TextDecoder().decode(s));if(!Array.isArray(e))throw Error(`Pending recovery-code backup is invalid`);return{walletId:i,recoveryCodes:n(e.map(String))}}finally{o.fill(0),s?.fill(0)}}async has(n){let r=n.trim();return r?p(await(await t.getDB()).get(e.pendingWalletRecoveryCodeBackups,h(r)),r)!==null:!1}async delete(n){let r=n.trim();r&&await t.runTransaction([e.pendingWalletRecoveryCodeBackups],`readwrite`,async t=>{await t.store(e.pendingWalletRecoveryCodeBackups).delete(h(r))})}};export{o as n,s as r,g as t};

package/dist/esm/sdk/prfCache-Mbo7_USg.js

@@ -0,0 +1 @@
+import{r as e}from"./secureRandomId-CTdlJ5Mx.js";function t(e){if(!(typeof e!=`number`||!Number.isFinite(e)||e<0))return Math.floor(e)}function n(t){return e(t,32,`passkey PRF cache session IDs`)}function r(e){let n=String(e.thresholdSessionId||``).trim(),r=String(e.prfFirstB64u||``).trim(),i=Number(e.expiresAtMs),a=t(e.remainingUses);if(!n||!r)throw Error(`Missing thresholdSessionId or prfFirstB64u for signing session hydration`);if(!Number.isFinite(i)||i<=0)throw Error(`Invalid expiresAtMs for signing session hydration`);if(a==null)throw Error(`Invalid remainingUses for signing session hydration`);let o={thresholdSessionId:n,prfFirstB64u:r,expiresAtMs:Math.floor(i),remainingUses:a,...e.diagnostics?{diagnostics:e.diagnostics}:{}};return e.preparedServerSeal?{...o,transport:e.transport,preparedServerSeal:e.preparedServerSeal}:{...o,...e.transport?{transport:e.transport}:{}}}async function i(e,t){let n=r(t),i={thresholdSessionId:n.thresholdSessionId,prfFirstB64u:n.prfFirstB64u,expiresAtMs:n.expiresAtMs,remainingUses:n.remainingUses,...n.diagnostics?{diagnostics:n.diagnostics}:{}};if(n.preparedServerSeal){await e.putWarmSessionMaterial({...i,transport:n.transport,preparedServerSeal:n.preparedServerSeal});return}await e.putWarmSessionMaterial({...i,...n.transport?{transport:n.transport}:{}})}export{n,i as t};

package/dist/esm/sdk/profileAccountProjection-DHCaMtOu.js

@@ -0,0 +1 @@
+function e(e,t){return t===`mainnet`?`near:mainnet`:t===`testnet`||String(e).endsWith(`.testnet`)?`near:testnet`:`near:mainnet`}function t(t){return e(t)===`near:testnet`?[`near:testnet`,`near:mainnet`]:[`near:mainnet`,`near:testnet`]}function n(e){let n=String(e||``).trim().toLowerCase();return n?t(n).map(e=>({chainIdKey:e,accountAddress:n})):[]}function r(e){return!Array.isArray(e)||e.length===0?null:e.find(e=>!!e.isPrimary)||e[0]||null}function i(e){if(typeof e.signerSlot==`number`)return e.activeSigners.find(t=>t.signerSlot===e.signerSlot)||null;let t=Number.isSafeInteger(e.profile.defaultSignerSlot)?e.profile.defaultSignerSlot:1;return e.activeSigners.find(e=>e.signerSlot===t)||e.activeSigners.slice().sort((e,t)=>e.signerSlot-t.signerSlot)[0]||null}async function a(e,t){for(let n of t){let t=await e.resolveProfileAccountContext(n).catch(()=>null);if(t?.profileId)return{profileId:t.profileId,accountRef:t.accountRef}}return null}async function o(e,t){let n=await a(e,t.accountRefs);if(!n?.profileId)return null;let[r,o]=await Promise.all([e.getProfile(n.profileId),e.listAccountSigners({chainIdKey:n.accountRef.chainIdKey,accountAddress:n.accountRef.accountAddress,status:`active`})]);if(!r||!o.length)return null;let s=i({profile:r,activeSigners:o,signerSlot:t.signerSlot});return s?{context:n,profile:r,activeSigners:o,selectedSigner:s}:null}async function s(e,t){let n=await e.listChainAccountsByProfile(t.profileId).catch(()=>[]);if(!n.length)return null;for(let e of t.chainIdKeys){let t=r(n.filter(t=>t.chainIdKey===e));if(t)return t}return null}async function c(e,t){let n=await e.getLastProfileState().catch(()=>null);if(!n?.profileId)return null;let r=await s(e,{profileId:n.profileId,chainIdKeys:t.chainIdKeys});return r?{profileId:n.profileId,signerSlot:n.activeSignerSlot,chainAccount:r}:null}export{t as a,n as i,a as n,e as o,o as r,c as t};

package/dist/esm/sdk/promptText-s8TQ6ckX.js

@@ -0,0 +1 @@
+const e={WarmSession:`warmSession`,ActiveWalletAuthority:`active_wallet_authority`,PasskeyReauth:`passkeyReauth`,EmailOtpReauth:`emailOtpReauth`};function t(t){return t?.kind===e.WarmSession}function n(t){return t?.kind===e.ActiveWalletAuthority}function r(t){return t?.kind===e.PasskeyReauth}function i(t){return t?.kind===e.EmailOtpReauth}function a(t){return t.kind===e.WarmSession||t.kind===e.ActiveWalletAuthority?`warmSession`:t.kind===e.EmailOtpReauth?`emailOtp`:`webauthn`}function o(e){return`Enter the 6-digit code sent to ${String(e||``).trim()||`your email`}`}export{r as a,i,e as n,t as o,n as r,a as s,o as t};

package/dist/esm/sdk/recovery-entrypoint-DkT8sFO5.js

@@ -0,0 +1 @@
+import{M as e,o as t}from"./domainIds-GDzjOs6i.js";import"./errors-DfbnsXjO.js";import{i as n}from"./base64-ojm5DKcF.js";import{r}from"./secureRandomId-CTdlJ5Mx.js";import"./sessionPolicy-CNVK7nJ6.js";import"./ecdsaPresignLifecycle-CQnCxSlq.js";import"./capabilityKinds-XaXXiD2B.js";import{h as i,p as a}from"./chains-yAls2d9X.js";import"./signerDomain-BhUTzDmF.js";import"./registrationIntent-DV1GYZ3K.js";import{a as o,c as s}from"./passkey-custody-LP4UTFbn.js";import"./accountIds-C3Ihsd2c.js";import"./evmFamilyEcdsaIdentity-Br3iFdQx.js";import"./walletAuthority-CoWSeqvQ.js";import"./registrationIds-BIel5S0i.js";import{u as c}from"./walletCustodyEcdsaContinuity-B7xi7nwh.js";import"./keccak-zexutGfG.js";import"./signingSessionSeal-Mr2Xp44o.js";import{f as l,m as u}from"./wallet-recovery-CcDZ1hMH.js";import"./registrationSignerPlan-FzD3TwxB.js";import{a as d,c as f,d as p,l as m,n as h,o as g,r as _,s as v,t as y,u as b}from"./walletRecoveryCommit-ljxVeo-d.js";function x(e){throw Error(`Unhandled wallet recovery branch: ${String(e)}`)}function S(e){return e.target.kind===`google_email_otp`}function C(e,t){if(!e||e.stage===`prepared`||e.stage===`google_verified`||e.walletId!==t.walletId||e.target.kind!==t.target.kind)return null;switch(e.target.kind){case`passkey`:return t.kind===`credential_created`&&t.target.kind===`passkey`&&e.target.rpId===t.target.rpId?e:null;case`google_email_otp`:return t.kind===`email_otp_verified`&&t.target.kind===`google_email_otp`&&e.target.googleProvider===t.target.googleProvider?e:null}}function w(){return l(r(`wallet-recovery-reservation`,32,`wallet recovery operation reservations`))}function T(e){return e}const E=`seams:recovery:consumed-code-digests`;function D(){try{let e=JSON.parse(sessionStorage.getItem(E)??`[]`);return Array.isArray(e)?new Set(e.filter(e=>typeof e==`string`)):new Set}catch{return new Set}}function O(e,t){e.add(t);try{sessionStorage.setItem(E,JSON.stringify([...e].slice(-32)))}catch{}}function k(e){e&&e.byteLength>0&&new Uint8Array(e).fill(0)}function A(e){switch(e.recoveryCodeBytes.fill(0),e.stage){case`prepared`:case`google_verified`:return;case`credential_created`:k(e.replacement.factorSecret);return;case`email_otp_verified`:case`manifest_recovered`:k(e.replacement.kind===`passkey`?e.replacement.factorSecret:e.replacement.factor.factorSecret);return}}function j(){return{kind:`refused`}}function M(e){if(typeof e!=`object`||!e)return!1;let t=Reflect.get(e,`name`);return t===`NotAllowedError`||t===`AbortError`}function N(e,t){if(e.target.kind!==`passkey`||!e.prepared.registration)throw Error(`passkey recovery registration is unavailable`);return{stage:`credential_created`,recoveryOperationId:e.recoveryOperationId,walletId:e.walletId,relayUrl:e.relayUrl,target:e.target,prepared:e.prepared,custodyJson:e.custodyJson,recoveryCodeBytes:e.recoveryCodeBytes,replacement:{kind:`passkey`,registration:t.registration,credentialIdB64u:t.credentialIdB64u,factorSecret:t.factorSecret}}}function P(e,t){return{stage:`email_otp_verified`,recoveryOperationId:e.recoveryOperationId,walletId:e.walletId,relayUrl:e.relayUrl,target:e.target,prepared:e.prepared,custodyJson:e.custodyJson,recoveryCodeBytes:e.recoveryCodeBytes,replacement:t}}function F(e){let t=e.prepared.registration;if(!t)throw Error(`passkey recovery registration is unavailable`);return{replacementId:t.replacementId,walletAuthMethodId:t.walletAuthMethodId,factor:s({rpId:t.rpId,credentialIdB64u:e.replacement.credentialIdB64u}),factorSecret:e.replacement.factorSecret}}function I(e){let t=e.prepared.registration;if(!t)throw Error(`passkey recovery registration is unavailable`);return t.challengeId}function L(e,t){return{stage:`manifest_recovered`,recoveryOperationId:e.recoveryOperationId,walletId:e.walletId,relayUrl:e.relayUrl,target:e.target,prepared:e.prepared,custodyJson:e.custodyJson,recoveryCodeBytes:e.recoveryCodeBytes,replacement:e.replacement,recovered:t}}function R(e,t){return{stage:`manifest_recovered`,recoveryOperationId:e.recoveryOperationId,walletId:e.walletId,relayUrl:e.relayUrl,target:e.target,prepared:e.prepared,custodyJson:e.custodyJson,recoveryCodeBytes:e.recoveryCodeBytes,replacement:e.replacement,recovered:t}}function z(e,t){switch(e.stage){case`credential_created`:return L(e,t);case`email_otp_verified`:return R(e,t);default:return x(e)}}function B(e){return e.authMethod.kind===`passkey`}function V(e){return e.target.kind===`passkey`&&e.replacement.kind===`passkey`}function H(e){return e.target.kind===`google_email_otp`&&e.replacement.kind===`email_otp`}async function U(e){return await e.context.signingEngine.getSignerWorkerContext().requestWorkerOperation({kind:`emailOtp`,request:{type:`releaseWalletRecoveryEmailOtpFactor`,payload:{relayUrl:e.relayUrl,walletId:String(e.walletId),recoveryOperationId:e.recoveryOperationId,reservationId:e.reservationId}}})}async function W(e){let t=e.prepared.registration;if(!t)throw Error(`passkey recovery registration is unavailable`);return await m({relayUrl:e.relayUrl,walletId:e.walletId,reservationId:e.prepared.reservationId,recoveryOperationId:e.prepared.recoveryOperationId,targetDeviceId:e.prepared.targetDeviceId,targetAuthorityId:e.prepared.targetAuthorityId,targetWalletAuthMethodId:e.prepared.targetWalletAuthMethodId,challengeId:t.challengeId,replacementId:t.replacementId,webauthnRegistration:e.replacement.registration,replacementEnvelope:e.recovered.replacementEnvelope,ecdsaMaterialPossessionProofs:e.recovered.ecdsaKeySets.map(e=>({keySetId:e.entry.keySetId,proof:e.activation.possessionProof}))})}var G=class{constructor(e=null){this.rpc=e}#e=new Map;#t=new Map;#n=new Map;#r=new Map;#i=new Map;#a=D();async prepareWithCode(t){if(this.#c(),t.signal.aborted)return j();if(t.target.kind===`passkey`){let n=e(t.context.signingEngine.getRpId());if(!n.ok||n.value!==t.target.rpId)return j()}let i=null;try{i=u(t.recoveryCode);let e=n(await a(i));if(this.#a.has(e))return{kind:`consumed`};let o=T(e),s=this.#r.get(o),c=s?.expiresAtMs&&s.expiresAtMs>Date.now()?s.reservationId:w(),l=await p({relayUrl:t.relayUrl,target:t.target,recoveryCodeB64u:n(i),reservationId:c});if(l.kind!==`prepared`)return l.kind===`retryable_conflict`||l.kind===`transport_uncertain`?this.#r.set(o,{reservationId:c,expiresAtMs:Date.now()+3e5}):this.#r.delete(o),l;if(this.#r.delete(o),t.signal.aborted)return this.#r.set(o,{reservationId:l.reservationId,expiresAtMs:l.reservationExpiresAtMs}),j();let d=r(`wallet-recovery-operation`,24,`wallet recovery client operation handles`);return this.#e.set(d,{stage:`prepared`,recoveryOperationId:d,walletId:l.walletId,relayUrl:t.relayUrl,target:t.target,prepared:l,custodyJson:b({walletId:l.walletId,prepared:l}),recoveryCodeBytes:i}),this.#i.set(d,o),i=null,{kind:`prepared`,recoveryOperationId:d,walletId:l.walletId,target:t.target}}catch{return j()}finally{i?.fill(0)}}createPasskey(e){this.#c();let t=this.#e.get(e.operation.recoveryOperationId);if(!t||t.stage!==`prepared`||t.walletId!==e.operation.walletId||t.target.kind!==`passkey`||e.operation.target.kind!==`passkey`||t.target.rpId!==e.operation.target.rpId||this.#n.has(t.recoveryOperationId)||!t.prepared.registration)return Promise.resolve({kind:`refused`});let n=new AbortController;this.#n.set(t.recoveryOperationId,n);let r;try{r=e.context.signingEngine.createWalletRecoveryReplacementCredential({walletId:t.walletId,registration:t.prepared.registration,cancellation:{kind:`abort_signal`,signal:n.signal}})}catch{return this.cancel(t.recoveryOperationId),Promise.resolve({kind:`refused`})}return this.#s({current:t,credentialPromise:r,promptController:n})}async verifyGoogle(e){this.#c();let t=this.#e.get(e.operation.recoveryOperationId);if(!this.rpc||!t||t.stage!==`prepared`||t.target.kind!==`google_email_otp`||e.operation.target.kind!==`google_email_otp`||t.walletId!==e.operation.walletId||t.target.googleProvider!==e.operation.target.googleProvider||t.relayUrl!==e.relayUrl)return j();let n=t.prepared;if(!S(n))return j();try{let r=await this.rpc.verifyGoogle({relayUrl:t.relayUrl,recoveryOperationId:n.recoveryOperationId,reservationId:n.reservationId,idToken:e.idToken});if(r.kind!==`verified`)return r;if(r.recoveryOperationId!==n.recoveryOperationId)return{kind:`transport_uncertain`};let i={kind:`google_verified`,recoveryOperationId:t.recoveryOperationId,walletId:t.walletId,target:t.target,challengeId:r.challengeId,delivery:r.delivery,expiresAtMs:r.expiresAtMs},a={stage:`google_verified`,recoveryOperationId:t.recoveryOperationId,walletId:t.walletId,relayUrl:t.relayUrl,target:t.target,prepared:n,custodyJson:t.custodyJson,recoveryCodeBytes:t.recoveryCodeBytes,verification:i};return this.#e.set(a.recoveryOperationId,a),i}catch{return{kind:`transport_uncertain`}}}async verifyEmailOtp(e){this.#c();let n=this.#e.get(e.operation.recoveryOperationId);if(!this.rpc||!n||n.stage!==`google_verified`||n.walletId!==e.operation.walletId||n.target.kind!==`google_email_otp`||e.operation.target.kind!==`google_email_otp`||n.verification.challengeId!==e.operation.challengeId||e.challengeId!==e.operation.challengeId)return j();let r=t(e.challengeId);if(!r.ok)return j();try{let t=await this.rpc.verifyEmailOtp({relayUrl:n.relayUrl,recoveryOperationId:n.prepared.recoveryOperationId,reservationId:n.prepared.reservationId,challengeId:r.value,otpCode:e.otpCode});if(t.kind!==`verified`)return t;if(t.recoveryOperationId!==n.prepared.recoveryOperationId||t.challengeId!==e.challengeId)return{kind:`transport_uncertain`};let i=await U({context:e.context,relayUrl:n.relayUrl,walletId:n.walletId,recoveryOperationId:n.prepared.recoveryOperationId,reservationId:String(n.prepared.reservationId)});if(i.kind===`existing`){if(i.recoveryOperationId!==String(n.prepared.recoveryOperationId)||i.reservationId!==String(n.prepared.reservationId)||i.factorSecret32.byteLength!==32)return k(i.factorSecret32),{kind:`transport_uncertain`};let t=P(n,{kind:`email_otp`,factor:{replacementId:String(n.prepared.recoveryOperationId),walletAuthMethodId:n.prepared.targetWalletAuthMethodId,factor:o({enrollmentId:i.enrollmentId,enrollmentSealKeyVersion:i.enrollmentSealKeyVersion}),factorSecret:i.factorSecret32},enrollment:{kind:`existing`,enrollmentId:i.enrollmentId,enrollmentSealKeyVersion:i.enrollmentSealKeyVersion},providerSubject:i.providerSubject,verifiedEmail:i.verifiedEmail,registrationAuthorityId:e.challengeId});return this.#e.set(t.recoveryOperationId,t),{kind:`email_otp_verified`,recoveryOperationId:t.recoveryOperationId,walletId:t.walletId,target:t.target,challengeId:e.challengeId}}if(i.kind!==`create`)return i;if(i.recoveryOperationId!==String(n.prepared.recoveryOperationId)||i.reservationId!==String(n.prepared.reservationId))return{kind:`transport_uncertain`};let a=crypto.getRandomValues(new Uint8Array(32)),s=null;try{let t=await e.context.signingEngine.prepareEmailOtpRegistrationEnrollmentMaterialInternal({relayUrl:n.relayUrl,walletId:n.walletId,userId:i.providerSubject,clientSecret32:a});s=a.slice().buffer;let r=P(n,{kind:`email_otp`,factor:{replacementId:String(n.prepared.recoveryOperationId),walletAuthMethodId:n.prepared.targetWalletAuthMethodId,factor:o({enrollmentId:t.enrollmentId,enrollmentSealKeyVersion:t.enrollmentSealKeyVersion}),factorSecret:s},enrollment:{kind:`create`,enrollmentId:t.enrollmentId,providerSubject:i.providerSubject,verifiedEmail:i.verifiedEmail,material:t.emailOtpEnrollment},providerSubject:i.providerSubject,verifiedEmail:i.verifiedEmail,registrationAuthorityId:e.challengeId});return this.#e.set(r.recoveryOperationId,r),s=null,{kind:`email_otp_verified`,recoveryOperationId:r.recoveryOperationId,walletId:r.walletId,target:r.target,challengeId:e.challengeId}}finally{a.fill(0),s&&k(s)}}catch{return{kind:`refused`}}}async finalize(e){let t=String(e.operation.recoveryOperationId),n=this.#t.get(t);if(n)return n;let r=this.#o(e).finally(()=>{this.#t.delete(t)});return this.#t.set(t,r),r}async#o(e){this.#c();let t=C(this.#e.get(e.operation.recoveryOperationId),e.operation);if(!t)return j();try{if(t.stage===`credential_created`||t.stage===`email_otp_verified`){let n=t.stage===`credential_created`?F(t):t.replacement.factor,r=await e.context.signingEngine.recoverWalletCustodyManifest({walletId:t.walletId,prepared:t.prepared,custodyJson:t.custodyJson,recoveryCodeBytes:t.recoveryCodeBytes,replacementFactor:n,recoveryChallengeId:t.stage===`credential_created`?I(t):String(t.prepared.recoveryOperationId),relayUrl:t.relayUrl});if(this.#e.get(t.recoveryOperationId)!==t)return A(t),j();if(t.prepared.reservationExpiresAtMs<=Date.now())return this.cancel(t.recoveryOperationId),j();t.recoveryCodeBytes.fill(0),k(t.stage===`credential_created`?t.replacement.factorSecret:t.replacement.factor.factorSecret),t=z(t,r),this.#e.set(t.recoveryOperationId,t)}if(t.stage===`manifest_recovered`){if(!V(t)&&!H(t))return{kind:`transport_uncertain`};if(t.target.kind===`google_email_otp`&&!this.rpc)return{kind:`refused`};let e=await y({operation:t});if(this.#e.get(t.recoveryOperationId)!==t)return{kind:`transport_uncertain`};await c.putPendingWalletRecoveryCommit(e.pending);let n=V(t)?await W(t):this.rpc?await this.rpc.finalizeEmailOtp({relayUrl:t.relayUrl,walletId:t.walletId,recoveryOperationId:t.prepared.recoveryOperationId,reservationId:t.prepared.reservationId,targetDeviceId:t.prepared.targetDeviceId,targetAuthorityId:t.prepared.targetAuthorityId,targetWalletAuthMethodId:t.prepared.targetWalletAuthMethodId,expectedProviderSubject:t.replacement.providerSubject,expectedEmailHashHex:await i(t.replacement.verifiedEmail),expectedRegistrationAuthorityId:t.replacement.registrationAuthorityId,replacementEnvelope:t.recovered.replacementEnvelope,ecdsaMaterialPossessionProofs:t.recovered.ecdsaKeySets.map(e=>({keySetId:e.entry.keySetId,proof:e.activation.possessionProof})),emailOtpEnrollment:t.replacement.enrollment.kind===`create`?{kind:`create`,material:t.replacement.enrollment.material}:null}):{kind:`refused`};if(n.kind===`refused`)return await c.deletePendingWalletRecoveryCommit(t.prepared.recoveryOperationId),this.#e.get(t.recoveryOperationId)===t&&this.cancel(t.recoveryOperationId),n;if(this.#e.get(t.recoveryOperationId)!==t)return n.kind===`promoted`?{kind:`transport_uncertain`}:n;if(n.kind!==`promoted`)return n;if(t.replacement.kind===`passkey`&&n.authMethod.credentialIdB64u!==t.replacement.credentialIdB64u)return{kind:`transport_uncertain`};let r;if(f(e.payload)){if(!B(n))return{kind:`transport_uncertain`};r={kind:`passkey`,payload:e.payload,promotion:n}}else{if(B(n))return{kind:`transport_uncertain`};r={kind:`google_email_otp`,payload:e.payload,promotion:n}}await _({pending:await h({awaiting:e.pending,promotion:r}),payload:r.payload})}let n=this.#i.get(t.recoveryOperationId);return n&&O(this.#a,n),this.#e.delete(t.recoveryOperationId),this.#i.delete(t.recoveryOperationId),A(t),{kind:`ready_for_sign_in`,walletId:t.walletId}}catch{return{kind:`transport_uncertain`}}}async#s(e){try{let t=await e.credentialPromise;if(this.#e.get(e.current.recoveryOperationId)!==e.current||e.promptController.signal.aborted)return k(t.factorSecret),{kind:`dismissed`};if(e.current.prepared.reservationExpiresAtMs<=Date.now())return k(t.factorSecret),this.cancel(e.current.recoveryOperationId),{kind:`refused`};let n=N(e.current,t);return this.#e.set(n.recoveryOperationId,n),{kind:`credential_created`,recoveryOperationId:n.recoveryOperationId,walletId:n.walletId,target:n.target}}catch(t){return e.promptController.signal.aborted||M(t)?{kind:`dismissed`}:{kind:`transport_uncertain`}}finally{this.#n.get(e.current.recoveryOperationId)===e.promptController&&this.#n.delete(e.current.recoveryOperationId)}}cancel(e){this.#n.get(e)?.abort(),this.#n.delete(e);let t=this.#e.get(e);if(!t)return;let n=this.#i.get(e);this.#i.delete(e),n&&t.prepared.reservationExpiresAtMs>Date.now()&&this.#r.set(n,{reservationId:t.prepared.reservationId,expiresAtMs:t.prepared.reservationExpiresAtMs}),this.#e.delete(e),A(t)}#c(){let e=Date.now();for(let[t,n]of this.#r)n.expiresAtMs<=e&&this.#r.delete(t);for(let[t,n]of this.#e)n.prepared.reservationExpiresAtMs>e||(this.#n.get(t)?.abort(),this.#n.delete(t),this.#e.delete(t),this.#i.delete(t),A(n))}},K=class{#e=new G({verifyGoogle:v,verifyEmailOtp:g,finalizeEmailOtp:d});constructor(t,n){this.context=t,this.relayUrl=n;let r=e(t.signingEngine.getRpId());if(!r.ok)throw Error(`wallet recovery RP ID ${r.error.message}`);this.#t=r.value}#t;targetFor(e){switch(e){case`passkey`:return{kind:e,rpId:this.#t};case`google_email_otp`:return{kind:e,googleProvider:`google`}}}async prepare(e){let t=await this.#e.prepareWithCode({context:this.context,relayUrl:this.relayUrl,recoveryCode:e.recoveryCode,target:e.target,signal:e.signal});return t.kind===`prepared`?(t.target.kind,{kind:`hosted_recovery_prepared`,recoveryOperationId:t.recoveryOperationId,walletId:t.walletId,target:t.target}):t}createPasskey(e){return this.#n({kind:`prepared`,recoveryOperationId:e.recoveryOperationId,walletId:e.walletId,target:e.target})}async verifyGoogle(e,t){let n=await this.#e.verifyGoogle({relayUrl:this.relayUrl,operation:{kind:`prepared`,recoveryOperationId:e.recoveryOperationId,walletId:e.walletId,target:e.target},idToken:t});return n.kind===`google_verified`?{kind:`hosted_recovery_google_verified`,recoveryOperationId:n.recoveryOperationId,walletId:n.walletId,target:n.target,challengeId:n.challengeId,delivery:n.delivery,expiresAtMs:n.expiresAtMs}:n}async verifyEmailOtp(e,t){let n=await this.#e.verifyEmailOtp({context:this.context,operation:{kind:`google_verified`,recoveryOperationId:e.recoveryOperationId,walletId:e.walletId,target:e.target,challengeId:e.challengeId,delivery:e.delivery,expiresAtMs:e.expiresAtMs},challengeId:t.challengeId,otpCode:t.otpCode});return n.kind===`email_otp_verified`?{kind:`hosted_recovery_email_otp_verified`,recoveryOperationId:n.recoveryOperationId,walletId:n.walletId,target:n.target,challengeId:n.challengeId}:n}async finalize(e){return e.kind===`hosted_recovery_credential_created`?await this.#e.finalize({context:this.context,operation:{kind:`credential_created`,recoveryOperationId:e.recoveryOperationId,walletId:e.walletId,target:e.target}}):await this.#e.finalize({context:this.context,operation:{kind:`email_otp_verified`,recoveryOperationId:e.recoveryOperationId,walletId:e.walletId,target:e.target,challengeId:e.challengeId}})}async cancel(e){this.#e.cancel(e.recoveryOperationId)}async#n(e){let t=await this.#e.createPasskey({context:this.context,operation:e});return t.kind===`credential_created`?this.#r(t):t}#r(e){return{kind:`hosted_recovery_credential_created`,recoveryOperationId:e.recoveryOperationId,walletId:e.walletId,target:e.target}}};function q(e){return new K(e.context,e.relayUrl)}export{q as createHostedRecoveryPort};

package/dist/esm/sdk/registration-Btozh7uh.js

@@ -0,0 +1 @@
+import{n as e}from"./chunk-dVx5-UGu.js";import{o as t}from"./errors-DfbnsXjO.js";import{c as n,r}from"./helpers-D4QckQhq.js";import{t as i}from"./webauthnPromptCoordinator-DO-qfECu.js";import{C as a,g as o,k as s,m as c,n as l,t as u,w as d}from"./adapters-DtAyuoiA.js";import{a as f}from"./intentDigest-CB6zy3lN.js";var p=e({handleRegistrationFlow:()=>_});function m(e){return Math.max(0,Math.round(performance.now()-e))}function h(e){return{kind:`passkey_registration_confirm_display_v1`,intendedUserName:e.walletId,accountId:e.walletId,rpId:e.rpId,signerSlot:e.signerSlot}}function g(e){let t={walletId:e.walletId,intendedUserName:e.walletId,prompt:e.prompt};return e.recoveryRegistration?{...t,kind:`wallet_recovery`,recoveryRegistration:e.recoveryRegistration}:e.addAuthMethodRegistration?{...t,kind:`wallet_add_auth_method`,registration:e.addAuthMethodRegistration}:{...t,kind:`wallet_registration`,challengeB64u:e.challengeB64u,signerSlot:e.signerSlot}}async function _(e,p,_,v){let{confirmationConfig:y,transactionSummary:b,theme:x,surface:S}=v,C=performance.now(),w=0,T=0,E=0,D=0,O=0,k=0,A=0,j=0,M=0,N=0,P=0,F=0,I=null,L=()=>({kind:`registration_confirmation_diagnostics_v1`,workerReadyMs:0,workerRequestRoundTripMs:0,workerResponseValidationMs:0,requestSetupMs:w,promptUserMs:T,promptElementDefineMs:E,promptMountMs:D,promptHostFirstUpdateMs:O,promptHostInteractiveMs:k,promptConfirmEventMs:A,promptDecisionWaitMs:j,credentialCreateStartMs:M,credentialCreateMs:N,credentialSerializeMs:P,duplicateRetryCount:F,mainThreadTotalMs:m(C)}),R=l(e),z=u({adapters:R,worker:_,request:p,confirmationConfig:y,transactionSummary:b,theme:x,surface:S}),B=s(p),V=d(p);try{let e=performance.now(),o=p.payload.walletRecoveryRegistration,s=p.payload.walletAddAuthMethodRegistration,c=p.payload.webauthnChallenge,l=o?o.challengeB64u:s?s.challengeB64u:c?.kind===`intent_digest`?String(c.challengeB64u||``).trim():``,u=async()=>{if(l)return l;let e=a(p);if(!e)throw Error(`Missing intentDigest for registration flow`);return f(e)},d=o?.rpId??s?.rpId??R.security.getRpId();if(!d)throw Error(`Missing rpId for registration challenge`);let _=p.payload?.signerSlot??1,v=await u(),y={rpId:d,passkeyRegistration:h({walletId:B,nearAccountId:V,rpId:d,signerSlot:_})};w=m(e);let b={kind:`registration_modal`,requestId:p.requestId};I=await i.reserveRegistrationPrompt({owner:b,expiresAtMs:Date.now()+300*1e3,cancellation:{kind:`none`}});let x=performance.now(),{confirmed:S,error:H,diagnostics:U}=await z.promptUser({securityContext:y});if(T=m(x),E=U.elementDefineMs,D=U.mountMs,O=U.hostFirstUpdateMs,k=U.hostInteractiveMs,A=U.confirmEventMs,j=U.decisionWaitMs,!S)return z.confirmAndCloseModal({requestId:p.requestId,intentDigest:a(p),confirmed:!1,registrationDiagnostics:L(),error:H});let W,G=p.payload?.signerSlot??1;M=m(C);let K=performance.now();try{try{let e={kind:`reserved`,reservation:I,owner:b,cancellation:{kind:`none`}};W=await R.webauthn.createRegistrationCredential(g(o?{walletId:B,recoveryRegistration:o,prompt:e}:s?{walletId:B,addAuthMethodRegistration:s,prompt:e}:{walletId:B,challengeB64u:v,signerSlot:G,prompt:e}))}catch(e){let n=t(e),r=String(n?.name||``),i=String(n?.message||``);if(r===`InvalidStateError`||/excluded|already\s*registered/i.test(i)){if(F+=1,l)throw Error(`Registration credential already exists for this wallet registration intent; create a fresh intent before retrying`);if(p.payload.walletRecoveryRegistration||s)throw Error(`Server-issued registration requires a fresh ceremony`);let e=G!==void 0&&Number.isFinite(G)?G+1:2;G=e,p.payload.signerSlot=e,p.intentDigest=p.type===`registerAccount`?`register:${B}:${e}`:`device2-register:${B}:${e}`,v=await u(),W=await R.webauthn.createRegistrationCredential(g({walletId:B,challengeB64u:v,signerSlot:e,prompt:{kind:`immediate`,requestId:p.requestId,cancellation:{kind:`none`}}}))}else throw console.error(`[RegistrationFlow] credentials.create failed (non-duplicate)`,{name:r,msg:i}),n}}finally{N=m(K)}let q=performance.now(),J=r(W)?W:n({credential:W,firstPrfOutput:!0,secondPrfOutput:!0});P=m(q),z.confirmAndCloseModal({requestId:p.requestId,intentDigest:a(p),confirmed:!0,credential:J,registrationDiagnostics:L()})}catch(e){let n=o(e),r=String(t(e)?.message||e||``);n&&window.parent?.postMessage({type:`WALLET_UI_CLOSED`},`*`);let i=/WebAuthn PRF output is missing from navigator\.credentials\.create\(\)/i.test(r)||/does not fully support the WebAuthn PRF extension during registration/i.test(r)||/roaming hardware authenticators .* not supported in this flow/i.test(r);return z.confirmAndCloseModal({requestId:p.requestId,intentDigest:a(p),confirmed:!1,registrationDiagnostics:L(),error:n?c.cancelled:i?r:r||c.collectCredentialsFailed})}finally{I&&i.releaseReservation(I)}}export{p as n,_ as t};