@seams/wallet 0.7.3 → 0.8.0

package/dist/esm/sdk/runtime-email-otp-CpX88VZJ.js

@@ -1,320 +0,0 @@
-import "./validation-gat4LEKm.js";
-import "./errors-93h9uAW9.js";
-import { r as secureRandomId } from "./secureRandomId-BORsmdS4.js";
-import "./sessionPolicy-DO-MkL65.js";
-import "./ecdsaPresignLifecycle-Bfx2AQKb.js";
-import "./capabilityKinds-hvYqa6S_.js";
-import "./signerDomain-IEAVrOrc.js";
-import "./wallet-recovery-BX61-79p.js";
-import "./evmFamilyEcdsaIdentity-CqGafQsI.js";
-import "./walletAuthority-DD9T25F6.js";
-import "./encoders-D8d07vpx.js";
-import "./registrationIds-DLSdEKSv.js";
-import "./passkey-custody-UUHbC0pk.js";
-import "./walletCustodyEcdsaContinuity-CF4bv9OI.js";
-import "./keccak-DUL3d8SF.js";
-import "./signingSessionSeal-Cu-GHm6y.js";
-import "./registrationSignerPlan-DhV8VAob.js";
-import "./registrationIntent-4zwk16zQ.js";
-import "./signNear-Bmb2fj_a.js";
-import "./nearEd25519YaoMaterialActivation-B5GecIvq.js";
-import "./actions-CCvThiKe.js";
-import "./NearClient-DY4NfHeD.js";
-import "./jsxRuntime.module-CuH5ZEIA.js";
-import { handleWalletHostRuntimeRequestWithHandlers, r as redeemHostedWalletSeamsSession } from "./runtimeContext-D3TBExQ6.js";
-import { n as respondOkResult, r as withProgress } from "./shared-DkbeLCI3.js";
-//#region src/SeamsWeb/walletIframe/host/handlers/emailOtp.ts
-function recordFromPayload(value) {
-	return value && typeof value === "object" && !Array.isArray(value) ? value : {};
-}
-function readRequiredString(record, field) {
-	const value = typeof record[field] === "string" ? record[field].trim() : "";
-	if (!value) throw new Error(`Missing ${field}`);
-	return value;
-}
-function readOptionalString(record, field) {
-	return (typeof record[field] === "string" ? record[field].trim() : "") || void 0;
-}
-function assertNoParentPostedWalletSessionToken(value) {
-	const record = recordFromPayload(value);
-	if (Object.prototype.hasOwnProperty.call(record, "walletSessionToken")) throw new Error("wallet iframe requests must not carry walletSessionToken");
-}
-function assertNoGoogleRegistrationOtpFields(payload) {
-	const record = recordFromPayload(payload);
-	const forbiddenField = [
-		"challengeId",
-		"challenge_id",
-		"otpCode",
-		"otp_code",
-		"otpDelivery",
-		"otp_delivery",
-		"delivery",
-		"resend"
-	].find((field) => Object.prototype.hasOwnProperty.call(record, field));
-	if (forbiddenField) throw new Error(`Google Email OTP registration message must not include ${forbiddenField}`);
-}
-const googleEmailOtpWalletAuthFlows = /* @__PURE__ */ new Map();
-function createFlowHandleId() {
-	return secureRandomId("google-email-otp", 16, "Google Email OTP wallet auth flow handles");
-}
-function flowToWire(flow) {
-	const flowHandleId = createFlowHandleId();
-	googleEmailOtpWalletAuthFlows.set(flowHandleId, {
-		flow,
-		expiresAtMs: flow.expiresAtMs
-	});
-	if (flow.mode === "register") return {
-		kind: flow.kind,
-		state: "registration_ready",
-		flowHandleId,
-		flowId: flow.flowId,
-		requestedMode: flow.requestedMode,
-		mode: "register",
-		walletId: flow.walletId,
-		emailHint: flow.emailHint,
-		prompt: flow.prompt,
-		expiresAtMs: flow.expiresAtMs
-	};
-	return {
-		kind: flow.kind,
-		state: "challenge_sent",
-		flowHandleId,
-		flowId: flow.flowId,
-		requestedMode: flow.requestedMode,
-		mode: "login",
-		walletId: flow.walletId,
-		emailHint: flow.emailHint,
-		prompt: flow.prompt,
-		delivery: flow.delivery,
-		expiresAtMs: flow.expiresAtMs
-	};
-}
-function resultFlowToWire(result) {
-	return result.ok ? {
-		ok: true,
-		value: flowToWire(result.value)
-	} : result;
-}
-function registrationResultFlowToWire(result) {
-	return result.ok ? {
-		ok: true,
-		value: flowToWire(result.value)
-	} : result;
-}
-function stripRegistrationCompletionResult(result) {
-	if (!result.ok) return result;
-	return {
-		ok: true,
-		value: {
-			walletId: result.value.walletId,
-			mode: "register",
-			session: result.value.session,
-			registration: result.value.registration
-		}
-	};
-}
-function readFlowHandleId(value) {
-	return readRequiredString(recordFromPayload(value), "flowHandleId");
-}
-function assertFlowHandleMatchesPayload(flow, payload) {
-	const flowId = readRequiredString(payload, "flowId");
-	const walletId = readRequiredString(payload, "walletId");
-	const mode = readRequiredString(payload, "mode");
-	if (flow.flowId !== flowId) throw new Error("Google Email OTP wallet auth flow handle does not match flow id");
-	if (String(flow.walletId) !== walletId) throw new Error("Google Email OTP wallet auth flow handle does not match wallet");
-	if (flow.mode !== mode) throw new Error("Google Email OTP wallet auth flow handle does not match mode");
-}
-function takeFlow(value) {
-	const payload = recordFromPayload(value);
-	const flowHandleId = readFlowHandleId(payload);
-	const record = googleEmailOtpWalletAuthFlows.get(flowHandleId);
-	if (!record) throw new Error("Google Email OTP wallet auth flow handle is not active");
-	if (Date.now() > record.expiresAtMs) {
-		googleEmailOtpWalletAuthFlows.delete(flowHandleId);
-		record.flow.cancel().catch(() => void 0);
-		throw new Error("Google Email OTP wallet auth flow handle expired");
-	}
-	assertFlowHandleMatchesPayload(record.flow, payload);
-	return record.flow;
-}
-function burnFlow(value) {
-	const flowHandleId = readFlowHandleId(recordFromPayload(value));
-	const flow = takeFlow(value);
-	googleEmailOtpWalletAuthFlows.delete(flowHandleId);
-	return flow;
-}
-function parseWalletRecoverySessionPayload(value) {
-	return { walletId: readRequiredString(recordFromPayload(value), "walletId") };
-}
-function parseWalletCustodyEmailOtpChallengePayload(value) {
-	const record = recordFromPayload(value);
-	const operation = readRequiredString(record, "operation");
-	if (operation !== "credentials_list" && operation !== "credential_label" && operation !== "recovery_rotate" && operation !== "recovery_read") throw new Error("Wallet custody Email OTP challenge operation is invalid");
-	const payload = recordFromPayload(record.payload);
-	if (Object.keys(payload).length === 0 && record.payload === void 0) throw new Error("Wallet custody Email OTP challenge payload is required");
-	return {
-		walletId: readRequiredString(record, "walletId"),
-		providerSubjectId: readRequiredString(record, "providerSubjectId"),
-		operation,
-		payload,
-		...readOptionalString(record, "requestOrigin") ? { requestOrigin: readOptionalString(record, "requestOrigin") } : {}
-	};
-}
-function parseWalletRecoveryRotationPayload(value) {
-	const record = recordFromPayload(value);
-	const authorization = recordFromPayload(record.authorization);
-	if (authorization.kind === "existing_passkey") return {
-		walletId: readRequiredString(record, "walletId"),
-		authorization: { kind: "existing_passkey" }
-	};
-	if (authorization.kind === "email_otp") return {
-		walletId: readRequiredString(record, "walletId"),
-		authorization: {
-			kind: "email_otp",
-			providerSubjectId: readRequiredString(authorization, "providerSubjectId"),
-			challengeId: readRequiredString(authorization, "challengeId"),
-			challenge_digest: readRequiredString(authorization, "challenge_digest"),
-			otpCode: readRequiredString(authorization, "otpCode")
-		}
-	};
-	throw new Error("Wallet recovery rotation authorization is invalid");
-}
-function enableEmailOtpDiagnosticsFromPayload(payload) {
-	const diagnostics = recordFromPayload(payload.diagnostics);
-	Reflect.set(globalThis, "__SEAMS_EMAIL_OTP_UNLOCK_DIAGNOSTICS", diagnostics.emailOtpUnlockTimings === true);
-	Reflect.set(globalThis, "__SEAMS_REGISTRATION_BENCHMARK_DIAGNOSTICS", diagnostics.registrationBenchmarkTimings === true);
-	delete payload.diagnostics;
-}
-function createEmailOtpWalletIframeHandlers(deps) {
-	return {
-		PM_REDEEM_HOSTED_WALLET_SEAMS_SESSION: async (req) => {
-			const session = await redeemHostedWalletSeamsSession(req.payload, req.payload.relayUrl);
-			respondOkResult(deps, req.requestId, {
-				kind: "redeemed_hosted_wallet_seams_session",
-				expiresAtMs: session.expiresAtMs
-			});
-		},
-		PM_REQUEST_EMAIL_OTP_CHALLENGE: async (req) => {
-			assertNoParentPostedWalletSessionToken(req.payload);
-			const pm = deps.getSeamsWeb();
-			const { walletId, walletAuthMethodId, relayUrl, operation, operationFingerprintDigest } = req.payload;
-			const result = await pm.auth.requestEmailOtpChallenge({
-				walletId,
-				...walletAuthMethodId ? { walletAuthMethodId } : {},
-				...relayUrl ? { relayUrl } : {},
-				...operation ? { operation } : {},
-				...operationFingerprintDigest ? { operationFingerprintDigest } : {}
-			});
-			respondOkResult(deps, req.requestId, result);
-		},
-		PM_REQUEST_EMAIL_OTP_ENROLLMENT_CHALLENGE: async (req) => {
-			assertNoParentPostedWalletSessionToken(req.payload);
-			const pm = deps.getSeamsWeb();
-			const { walletId, relayUrl } = req.payload;
-			const result = await pm.registration.requestEmailOtpEnrollmentChallenge({
-				walletId,
-				...relayUrl ? { relayUrl } : {}
-			});
-			respondOkResult(deps, req.requestId, result);
-		},
-		PM_REQUEST_EMAIL_OTP_SIGNING_SESSION_CHALLENGE: async (req) => {
-			const result = await deps.getSeamsWeb().auth.requestEmailOtpSigningSessionChallenge(req.payload);
-			respondOkResult(deps, req.requestId, result);
-		},
-		PM_BEGIN_GOOGLE_EMAIL_OTP_WALLET_AUTH: async (req) => {
-			const pm = deps.getSeamsWeb();
-			const payloadRecord = recordFromPayload(req.payload);
-			enableEmailOtpDiagnosticsFromPayload(payloadRecord);
-			if (payloadRecord.mode === "register") assertNoGoogleRegistrationOtpFields(payloadRecord);
-			const payload = withProgress(deps, req.requestId, payloadRecord);
-			const result = await pm.auth.beginGoogleEmailOtpWalletAuth(payload);
-			respondOkResult(deps, req.requestId, resultFlowToWire(result));
-		},
-		PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_RESEND: async (req) => {
-			const flow = takeFlow(req.payload);
-			if (flow.mode !== "login") throw new Error("Google Email OTP wallet auth resend requires a login flow");
-			const result = await flow.resend();
-			if (result.ok) burnFlow(req.payload);
-			respondOkResult(deps, req.requestId, resultFlowToWire(result));
-		},
-		PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_REROLL_WALLET_ID: async (req) => {
-			const flow = takeFlow(req.payload);
-			if (flow.mode !== "register") throw new Error("Google Email OTP wallet auth reroll requires a registration flow");
-			assertNoGoogleRegistrationOtpFields(req.payload);
-			const result = await flow.rerollWalletId();
-			if (result.ok) burnFlow(req.payload);
-			respondOkResult(deps, req.requestId, registrationResultFlowToWire(result));
-		},
-		PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_SUBMIT: async (req) => {
-			const flow = takeFlow(req.payload);
-			if (flow.mode !== "login") throw new Error("Google Email OTP wallet auth submit requires a login flow");
-			const payload = recordFromPayload(req.payload);
-			const result = await flow.submit({ otpCode: readRequiredString(payload, "otpCode") });
-			if (result.ok) burnFlow(req.payload);
-			respondOkResult(deps, req.requestId, result);
-		},
-		PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_COMPLETE_REGISTRATION: async (req) => {
-			const flow = takeFlow(req.payload);
-			if (flow.mode !== "register") throw new Error("Google Email OTP wallet auth completion requires a registration flow");
-			assertNoGoogleRegistrationOtpFields(req.payload);
-			const result = await flow.completeRegistration();
-			if (result.ok) burnFlow(req.payload);
-			respondOkResult(deps, req.requestId, stripRegistrationCompletionResult(result));
-		},
-		PM_GOOGLE_EMAIL_OTP_WALLET_AUTH_CANCEL: async (req) => {
-			await burnFlow(req.payload).cancel();
-			respondOkResult(deps, req.requestId, void 0);
-		},
-		PM_ENROLL_EMAIL_OTP: async (req) => {
-			assertNoParentPostedWalletSessionToken(req.payload);
-			const pm = deps.getSeamsWeb();
-			const rawPayload = recordFromPayload(req.payload);
-			if (!String(rawPayload.walletId || "").trim()) throw new Error("PM_ENROLL_EMAIL_OTP requires walletId");
-			const payload = withProgress(deps, req.requestId, { ...rawPayload });
-			const result = await pm.registration.enrollEmailOtp(payload);
-			respondOkResult(deps, req.requestId, result);
-		},
-		PM_LOGIN_EMAIL_OTP_ECDSA_CAPABILITY: async (req) => {
-			assertNoParentPostedWalletSessionToken(req.payload);
-			const pm = deps.getSeamsWeb();
-			if (!String(req.payload?.walletSession.walletId || "").trim()) throw new Error("PM_LOGIN_EMAIL_OTP_ECDSA_CAPABILITY requires walletId");
-			const payload = withProgress(deps, req.requestId, { ...req.payload || {} });
-			const result = await pm.auth.loginWithEmailOtpEcdsaCapability(payload);
-			respondOkResult(deps, req.requestId, result);
-		},
-		PM_REFRESH_EMAIL_OTP_SIGNING_SESSION: async (req) => {
-			assertNoParentPostedWalletSessionToken(req.payload);
-			const pm = deps.getSeamsWeb();
-			const payload = withProgress(deps, req.requestId, req.payload || {});
-			const result = await pm.auth.refreshEmailOtpSigningSession(payload);
-			respondOkResult(deps, req.requestId, result);
-		},
-		PM_GET_WALLET_RECOVERY_CODE_STATUS: async (req) => {
-			assertNoParentPostedWalletSessionToken(req.payload);
-			const result = await deps.getSeamsWeb().recovery.getWalletRecoveryCodeStatus(parseWalletRecoverySessionPayload(req.payload));
-			respondOkResult(deps, req.requestId, result);
-		},
-		PM_REQUEST_WALLET_CUSTODY_EMAIL_OTP_CHALLENGE: async (req) => {
-			assertNoParentPostedWalletSessionToken(req.payload);
-			const result = await deps.getSeamsWeb().recovery.requestWalletCustodyEmailOtpChallenge(parseWalletCustodyEmailOtpChallengePayload(req.payload));
-			respondOkResult(deps, req.requestId, result);
-		},
-		PM_ACKNOWLEDGE_WALLET_RECOVERY_CODE_BACKUP: async (req) => {
-			assertNoParentPostedWalletSessionToken(req.payload);
-			const result = await deps.getSeamsWeb().recovery.acknowledgeWalletRecoveryCodeBackup(parseWalletRecoverySessionPayload(req.payload));
-			respondOkResult(deps, req.requestId, result);
-		},
-		PM_ROTATE_WALLET_RECOVERY_CODES: async (req) => {
-			assertNoParentPostedWalletSessionToken(req.payload);
-			const result = await deps.getSeamsWeb().recovery.rotateWalletRecoveryCodes(parseWalletRecoveryRotationPayload(req.payload));
-			respondOkResult(deps, req.requestId, result);
-		}
-	};
-}
-//#endregion
-//#region src/SeamsWeb/walletIframe/host/runtime-email-otp.ts
-async function handleWalletHostRuntimeRequest(input) {
-	await handleWalletHostRuntimeRequestWithHandlers(input, createEmailOtpWalletIframeHandlers);
-}
-//#endregion
-export { handleWalletHostRuntimeRequest };

package/dist/esm/sdk/runtime-export-DIVY473L.js

@@ -1,112 +0,0 @@
-import { h as parseMpcMaterialActivationRef } from "./domainIds-lcrFg6Sa.js";
-import "./validation-gat4LEKm.js";
-import { r as isTouchIdCancellationError } from "./errors-93h9uAW9.js";
-import "./sessionPolicy-DO-MkL65.js";
-import "./ecdsaPresignLifecycle-Bfx2AQKb.js";
-import "./capabilityKinds-hvYqa6S_.js";
-import { s as thresholdEcdsaChainTargetsEqual } from "./ecdsaChainTarget-Bl-JWyuw.js";
-import "./signerDomain-IEAVrOrc.js";
-import "./wallet-recovery-BX61-79p.js";
-import "./evmFamilyEcdsaIdentity-CqGafQsI.js";
-import "./walletAuthority-DD9T25F6.js";
-import "./encoders-D8d07vpx.js";
-import "./registrationIds-DLSdEKSv.js";
-import "./passkey-custody-UUHbC0pk.js";
-import "./walletCustodyEcdsaContinuity-CF4bv9OI.js";
-import "./keccak-DUL3d8SF.js";
-import "./signingSessionSeal-Cu-GHm6y.js";
-import "./registrationSignerPlan-DhV8VAob.js";
-import "./registrationIntent-4zwk16zQ.js";
-import "./signNear-Bmb2fj_a.js";
-import "./nearEd25519YaoMaterialActivation-B5GecIvq.js";
-import { h as parseExactEd25519ExportMaterialIdentity, m as parseExactEcdsaSigningLaneIdentity } from "./exactSigningLaneIdentity-m6uTXV_A.js";
-import "./actions-CCvThiKe.js";
-import "./NearClient-DY4NfHeD.js";
-import "./jsxRuntime.module-CuH5ZEIA.js";
-import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-D3TBExQ6.js";
-import { n as respondOkResult, t as respondOk } from "./shared-DkbeLCI3.js";
-//#region src/SeamsWeb/walletIframe/host/handlers/export.ts
-function keyExportInputFromPayload(payload) {
-	switch (payload.kind) {
-		case "ecdsa": {
-			const laneIdentity = parseExactEcdsaSigningLaneIdentity(payload.laneIdentity);
-			if (String(laneIdentity.signer.walletId) !== String(payload.walletSession.walletId)) throw new Error("[WalletIframe] key export lane wallet does not match wallet session");
-			if (!thresholdEcdsaChainTargetsEqual(laneIdentity.signer.chainTarget, payload.chainTarget)) throw new Error("[WalletIframe] key export lane chain target does not match request target");
-			return {
-				kind: "ecdsa",
-				chainTarget: payload.chainTarget,
-				walletSession: payload.walletSession,
-				laneIdentity,
-				options: payload.options
-			};
-		}
-		case "ed25519": {
-			const laneIdentity = parseExactEd25519ExportMaterialIdentity(payload.laneIdentity);
-			const materialActivation = parseMpcMaterialActivationRef(payload.materialActivation);
-			if (!materialActivation.ok) throw new Error(materialActivation.error.message);
-			const signer = laneIdentity.signer;
-			if (String(signer.account.wallet.walletId) !== String(payload.walletSession.walletId)) throw new Error("[WalletIframe] Ed25519 export lane wallet does not match wallet session");
-			if (String(signer.account.nearAccountId) !== String(payload.nearAccount.accountId)) throw new Error("[WalletIframe] Ed25519 export lane does not match the NEAR account");
-			return {
-				kind: "ed25519",
-				nearAccount: payload.nearAccount,
-				walletSession: payload.walletSession,
-				laneIdentity,
-				materialActivation: materialActivation.value,
-				options: payload.options
-			};
-		}
-	}
-}
-function createExportWalletIframeHandlers(deps) {
-	return {
-		PM_RESOLVE_EXACT_KEY_EXPORT_LANE: async (req) => {
-			const result = await deps.getSeamsWeb().keys.resolveExactKeyExportLane(req.payload);
-			respondOkResult(deps, req.requestId, result);
-		},
-		PM_EXPORT_KEYPAIR_UI: async (req) => {
-			const pm = deps.getSeamsWeb();
-			const payload = req.payload;
-			if (deps.respondIfCancelled(req.requestId)) return;
-			try {
-				const exportInput = keyExportInputFromPayload(payload);
-				await pm.keys.exportKeypairWithUI(exportInput.kind === "ecdsa" ? {
-					kind: "ecdsa",
-					chainTarget: exportInput.chainTarget,
-					walletSession: exportInput.walletSession,
-					laneIdentity: exportInput.laneIdentity,
-					options: {
-						...exportInput.options,
-						onEvent: (event) => deps.postProgress(req.requestId, event)
-					}
-				} : {
-					kind: "ed25519",
-					nearAccount: exportInput.nearAccount,
-					walletSession: exportInput.walletSession,
-					laneIdentity: exportInput.laneIdentity,
-					materialActivation: exportInput.materialActivation,
-					options: {
-						...exportInput.options,
-						onEvent: (event) => deps.postProgress(req.requestId, event)
-					}
-				});
-			} catch (err) {
-				if (isTouchIdCancellationError(err)) {
-					if (deps.respondIfCancelled(req.requestId)) return;
-					respondOk(deps, req.requestId);
-					return;
-				}
-				throw err;
-			}
-			if (deps.respondIfCancelled(req.requestId)) return;
-			respondOk(deps, req.requestId);
-		}
-	};
-}
-//#endregion
-//#region src/SeamsWeb/walletIframe/host/runtime-export.ts
-async function handleWalletHostRuntimeRequest(input) {
-	await handleWalletHostRuntimeRequestWithHandlers(input, createExportWalletIframeHandlers);
-}
-//#endregion
-export { handleWalletHostRuntimeRequest };