@seams/wallet 0.8.0 → 0.9.0

package/dist/esm/core/signingEngine/stepUpConfirmation/otpPrompt/authLane.js

@@ -1,31 +0,0 @@
-import { isWalletEmailOtpLoginOperation } from "../../../../shared-ts/src/utils/emailOtpDomain.js";
-import "../../../../shared-ts/src/device-linking/index.js";
-//#region src/core/signingEngine/stepUpConfirmation/otpPrompt/authLane.ts
-function buildEmailOtpRoutePlan(args) {
-	switch (args.routeFamily) {
-		case "registration":
-			if (args.operation !== "registration") throw new Error("Email OTP registration routes require registration operation");
-			return {
-				routeFamily: "registration",
-				operation: args.operation
-			};
-		case "login":
-			if (!isWalletEmailOtpLoginOperation(args.operation)) throw new Error("Email OTP login routes require a login operation");
-			return {
-				routeFamily: "login",
-				operation: args.operation
-			};
-		case "signing_session":
-			if (args.operation !== "transaction_sign" && args.operation !== "export_key") throw new Error("Email OTP signing-session routes require signing or export operation");
-			return {
-				routeFamily: "signing_session",
-				authLane: args.authLane,
-				operation: args.operation
-			};
-	}
-	throw new Error("Unsupported Email OTP route family");
-}
-//#endregion
-export { buildEmailOtpRoutePlan };
-
-//# sourceMappingURL=authLane.js.map

package/dist/esm/core/signingEngine/stepUpConfirmation/otpPrompt/exportAuthorization.js

@@ -1,108 +0,0 @@
-import { toAccountId } from "../../../types/accountIds.js";
-import { secureRandomId } from "../../../../shared-ts/src/utils/secureRandomId.js";
-import { SigningAuthPlanKind } from "../types.js";
-import { UserConfirmationType } from "../userConfirmationType.js";
-//#region src/core/signingEngine/stepUpConfirmation/otpPrompt/exportAuthorization.ts
-function createEmailOtpExportUiRequestId(prefix) {
-	return secureRandomId(prefix, 32, "Email OTP export UI request IDs");
-}
-function accountIdForEmailOtpExportUi(identity) {
-	switch (identity.kind) {
-		case "near_account": return String(toAccountId(identity.nearAccountId));
-		case "wallet_session": {
-			const walletId = String(identity.walletId || "").trim();
-			if (!walletId) throw new Error("Email OTP export requires wallet identity");
-			return walletId;
-		}
-		default: return identity;
-	}
-}
-function signingSubjectForEmailOtpExportUi(identity) {
-	switch (identity.kind) {
-		case "near_account":
-			if (!String(identity.walletId || "").trim()) throw new Error("Email OTP NEAR export requires wallet identity");
-			return {
-				kind: "near_wallet",
-				walletId: String(identity.walletId).trim(),
-				nearAccountId: String(toAccountId(identity.nearAccountId))
-			};
-		case "wallet_session": {
-			const walletId = String(identity.walletId || "").trim();
-			if (!walletId) throw new Error("Email OTP export requires wallet identity");
-			return {
-				kind: "evm_wallet",
-				walletId
-			};
-		}
-		default: return identity;
-	}
-}
-function buildEmailOtpExportPrompt(args) {
-	return {
-		challengeId: args.challenge.challengeId,
-		...args.challenge.emailHint ? { emailHint: args.challenge.emailHint } : {},
-		title: "Enter email code to export",
-		body: "This one-time code authorizes private key export only.",
-		helperText: "Enter the 6-digit code sent to your email",
-		onResend: args.onResend
-	};
-}
-async function requestEmailOtpExportAuthorization(args) {
-	const accountIdForUi = accountIdForEmailOtpExportUi(args.identity);
-	const requestExportChallenge = async () => {
-		const challenge = await args.challengeSource.requestChallenge();
-		const challengeId = String(challenge.challengeId || "").trim();
-		if (!challengeId) throw new Error("Email OTP export challenge response did not include challengeId");
-		const emailHint = String(challenge.emailHint || "").trim();
-		if (!emailHint) throw new Error("Email OTP export challenge response did not include emailHint");
-		const normalizedChallenge = {
-			challengeId,
-			emailHint,
-			delivery: challenge.delivery
-		};
-		args.onChallenge?.(normalizedChallenge);
-		return normalizedChallenge;
-	};
-	let challenge = await requestExportChallenge();
-	const resend = async () => {
-		challenge = await requestExportChallenge();
-		return challenge;
-	};
-	const emailOtpPrompt = buildEmailOtpExportPrompt({
-		challenge,
-		onResend: resend
-	});
-	const signingSubject = signingSubjectForEmailOtpExportUi(args.identity);
-	const decision = await args.confirmer.requestUserConfirmation({
-		requestId: createEmailOtpExportUiRequestId(`export-${args.curve}-email-otp-auth`),
-		type: UserConfirmationType.SIGN_INTENT_DIGEST,
-		summary: {
-			operation: "Export Private Key",
-			accountId: accountIdForUi,
-			publicKey: args.publicKey,
-			warning: "Enter the email code to export this key. Anyone with the private key can fully control the account."
-		},
-		payload: {
-			signingSubject,
-			challengeB64u: challenge.challengeId,
-			signingAuthPlan: {
-				kind: SigningAuthPlanKind.EmailOtpReauth,
-				method: "email_otp",
-				emailOtpPrompt
-			},
-			emailOtpPrompt
-		},
-		intentDigest: `export-keys:${accountIdForUi}:${args.chain}:${args.curve}:email-otp`
-	});
-	if (!decision.confirmed) throw new Error(decision.error || "User cancelled Email OTP export request");
-	const otpCode = String(decision.otpCode || "").replace(/\D/g, "").slice(0, 6);
-	if (otpCode.length !== 6) throw new Error("Email OTP export requires a 6-digit code");
-	return {
-		challengeId: String(decision.emailOtpChallengeId || challenge.challengeId).trim(),
-		otpCode
-	};
-}
-//#endregion
-export { requestEmailOtpExportAuthorization };
-
-//# sourceMappingURL=exportAuthorization.js.map

package/dist/esm/core/signingEngine/stepUpConfirmation/passkeyPrompt/touchIdPrompt.js

@@ -1,271 +0,0 @@
-import { base64UrlDecode } from "../../../../shared-ts/src/utils/base64.js";
-import { walletIdFromString } from "../../../../shared-ts/src/utils/registrationIds.js";
-import { secureRandomBase36 } from "../../../../shared-ts/src/utils/secureRandomId.js";
-import { getPrfFirstSaltV1, getPrfSecondSaltV1, serializeAuthenticationCredentialWithPRF } from "../../webauthnAuth/credentials/helpers.js";
-import { webAuthnPromptCoordinator } from "./webauthnPromptCoordinator.js";
-import { executeWalletOriginWebAuthn } from "../../webauthnAuth/walletOriginWebAuthn.js";
-//#region src/core/signingEngine/stepUpConfirmation/passkeyPrompt/touchIdPrompt.ts
-function resolveRpId(override, host) {
-	return (override || host || "").toLowerCase();
-}
-function decodeChallengeB64u(challengeB64u) {
-	const decoded = base64UrlDecode(String(challengeB64u || ""));
-	if (decoded.length !== 32) throw new Error(`Invalid WebAuthn challenge: expected 32 bytes, got ${decoded.length}`);
-	return decoded;
-}
-function requireWalletRegistrationChallenge(args) {
-	if (args.kind !== "wallet_registration") throw new Error("Wallet registration challenge is unavailable");
-	return args.challengeB64u;
-}
-function requireExpectedPasskeyRegistrationUser(input) {
-	const walletId = walletIdFromString(String(input.walletId || "").trim());
-	if (String(input.intendedUserName || "").trim() !== String(walletId)) throw new Error("WebAuthn registration user.name must match walletId");
-	return { walletId };
-}
-/**
-* TouchIdPrompt prompts for touchID,
-* creates credentials,
-* manages WebAuthn touchID prompts,
-* and generates credentials, and PRF Outputs
-*/
-var TouchIdPrompt = class {
-	constructor(rpIdOverride) {
-		this.rpIdOverride = rpIdOverride;
-	}
-	getRpId() {
-		try {
-			return resolveRpId(this.rpIdOverride, window?.location?.hostname);
-		} catch {
-			return this.rpIdOverride || "";
-		}
-	}
-	/**
-	* Authenticate with a caller-provided 32-byte challenge (base64url string).
-	*
-	* This is the preferred entry point for WebAuthn-only flows where the challenge
-	* is already a canonical digest (e.g. `sessionPolicyDigest32`).
-	*/
-	getAuthenticationCredentialsSerializedForChallengeB64u(args) {
-		const requestId = `webauthn-get-${secureRandomBase36(12, "WebAuthn get request IDs")}`;
-		return webAuthnPromptCoordinator.runImmediate({
-			owner: {
-				kind: "wallet_request",
-				requestId,
-				operation: "authentication"
-			},
-			operation: this.executeAuthenticationCredential.bind(this, args)
-		});
-	}
-	async executeAuthenticationCredential({ subjectId: _subjectId, challengeB64u, allowCredentials = [], includeSecondPrfOutput = false, cancellation = { kind: "none" } }) {
-		this.abortController = new AbortController();
-		this.removePageAbortHandlers = attachPageAbortHandlers(this.abortController);
-		this.removeExternalAbortListener = attachExternalAbortSignal(this.abortController, cancellation);
-		const rpId = this.getRpId();
-		const publicKey = {
-			challenge: decodeChallengeB64u(challengeB64u),
-			rpId,
-			userVerification: "preferred",
-			timeout: 6e4,
-			extensions: { prf: { eval: {
-				first: getPrfFirstSaltV1(),
-				second: getPrfSecondSaltV1()
-			} } }
-		};
-		if (allowCredentials.length > 0) publicKey.allowCredentials = allowCredentials.map((credential) => ({
-			id: base64UrlDecode(credential.id),
-			type: "public-key",
-			transports: credential.transports
-		}));
-		try {
-			const serialized = serializeAuthenticationCredentialWithPRF({
-				credential: await executeWalletOriginWebAuthn("get", publicKey, { abortSignal: this.abortController.signal }),
-				firstPrfOutput: true,
-				secondPrfOutput: includeSecondPrfOutput
-			});
-			assertSerializedAuthenticationCredentialChallenge(serialized, challengeB64u);
-			return serialized;
-		} finally {
-			this.removePageAbortHandlers?.();
-			this.removePageAbortHandlers = void 0;
-			this.removeExternalAbortListener?.();
-			this.removeExternalAbortListener = void 0;
-			this.abortController = void 0;
-		}
-	}
-	/**
-	* Internal method for generating WebAuthn registration credentials with PRF output
-	* @param walletId - Durable wallet identity used for WebAuthn user handles.
-	* @param challenge - Random challenge bytes for the registration ceremony
-	* @param signerSlot - Local signer slot for WebAuthn user-handle disambiguation.
-	* @returns Credential with PRF output
-	*/
-	generateRegistrationCredentialsInternal(args) {
-		switch (args.prompt.kind) {
-			case "reserved": return webAuthnPromptCoordinator.runReserved({
-				reservation: args.prompt.reservation,
-				owner: args.prompt.owner,
-				operation: this.executeRegistrationCredential.bind(this, args)
-			});
-			case "immediate": return webAuthnPromptCoordinator.runImmediate({
-				owner: {
-					kind: "wallet_request",
-					requestId: args.prompt.requestId,
-					operation: "registration"
-				},
-				operation: this.executeRegistrationCredential.bind(this, args)
-			});
-		}
-	}
-	async executeRegistrationCredential(args) {
-		this.abortController = new AbortController();
-		this.removePageAbortHandlers = attachPageAbortHandlers(this.abortController);
-		this.removeExternalAbortListener = attachExternalAbortSignal(this.abortController, args.prompt.cancellation);
-		const configuredRpId = this.getRpId();
-		const expectedUser = requireExpectedPasskeyRegistrationUser({
-			walletId: args.walletId,
-			intendedUserName: args.intendedUserName
-		});
-		const recoveryRegistration = args.kind === "wallet_recovery" ? args.recoveryRegistration : null;
-		const addAuthMethodRegistration = args.kind === "wallet_add_auth_method" ? args.registration : null;
-		const serverRegistration = recoveryRegistration ?? addAuthMethodRegistration;
-		const rpId = serverRegistration?.rpId ?? configuredRpId;
-		if (serverRegistration && rpId !== configuredRpId) throw new Error("Wallet recovery RP ID does not match the wallet origin");
-		const publicKey = serverRegistration ? {
-			challenge: decodeChallengeB64u(serverRegistration.challengeB64u),
-			rp: {
-				name: "Seams Wallet",
-				id: rpId
-			},
-			user: {
-				id: base64UrlDecode(serverRegistration.user.idB64u),
-				name: serverRegistration.user.name,
-				displayName: serverRegistration.user.displayName
-			},
-			pubKeyCredParams: serverRegistration.pubKeyCredParams.map((parameter) => ({ ...parameter })),
-			authenticatorSelection: { ...serverRegistration.authenticatorSelection },
-			timeout: serverRegistration.timeoutMs,
-			attestation: serverRegistration.attestation,
-			extensions: { prf: { eval: {
-				first: base64UrlDecode(serverRegistration.extensions.prf.eval.firstB64u),
-				second: base64UrlDecode(serverRegistration.extensions.prf.eval.secondB64u)
-			} } },
-			excludeCredentials: serverRegistration.excludeCredentials.map((descriptor) => ({
-				type: descriptor.type,
-				id: base64UrlDecode(descriptor.id)
-			}))
-		} : {
-			challenge: decodeChallengeB64u(requireWalletRegistrationChallenge(args)),
-			rp: {
-				name: "WebAuthn Passkey",
-				id: rpId
-			},
-			user: {
-				id: new TextEncoder().encode(generateSignerSlotUserId(args.walletId, args.signerSlot)),
-				name: expectedUser.walletId,
-				displayName: expectedUser.walletId
-			},
-			pubKeyCredParams: [{
-				alg: -7,
-				type: "public-key"
-			}, {
-				alg: -257,
-				type: "public-key"
-			}],
-			authenticatorSelection: {
-				residentKey: "required",
-				userVerification: "preferred"
-			},
-			timeout: 6e4,
-			attestation: "none",
-			extensions: { prf: { eval: {
-				first: getPrfFirstSaltV1(),
-				second: getPrfSecondSaltV1()
-			} } }
-		};
-		try {
-			return await executeWalletOriginWebAuthn("create", publicKey, { abortSignal: this.abortController.signal });
-		} finally {
-			this.removePageAbortHandlers?.();
-			this.removePageAbortHandlers = void 0;
-			this.removeExternalAbortListener?.();
-			this.removeExternalAbortListener = void 0;
-			this.abortController = void 0;
-		}
-	}
-};
-function attachExternalAbortSignal(controller, cancellation) {
-	if (cancellation.kind === "none") return void 0;
-	const signal = cancellation.signal;
-	const abort = controller.abort.bind(controller);
-	if (signal.aborted) {
-		abort();
-		return;
-	}
-	signal.addEventListener("abort", abort, { once: true });
-	return signal.removeEventListener.bind(signal, "abort", abort);
-}
-function normalizeChallengeB64uForComparison(value) {
-	return String(value || "").trim().replace(/=+$/g, "");
-}
-function readSerializedAuthenticationChallenge(credential) {
-	const clientDataJsonB64u = String(credential.response?.clientDataJSON || "").trim();
-	if (!clientDataJsonB64u) throw new Error("WebAuthn authentication response missing clientDataJSON");
-	let decoded = "";
-	try {
-		decoded = new TextDecoder().decode(base64UrlDecode(clientDataJsonB64u));
-	} catch (error) {
-		throw new Error(`WebAuthn authentication response has invalid clientDataJSON encoding: ${error instanceof Error ? error.message : String(error)}`);
-	}
-	let parsed;
-	try {
-		parsed = JSON.parse(decoded);
-	} catch (error) {
-		throw new Error(`WebAuthn authentication response has invalid clientDataJSON JSON: ${error instanceof Error ? error.message : String(error)}`);
-	}
-	const challenge = parsed && typeof parsed === "object" ? parsed.challenge : void 0;
-	if (typeof challenge !== "string" || !challenge.trim()) throw new Error("WebAuthn authentication response clientDataJSON missing challenge");
-	return challenge;
-}
-function assertSerializedAuthenticationCredentialChallenge(credential, expectedChallengeB64u) {
-	const actual = normalizeChallengeB64uForComparison(readSerializedAuthenticationChallenge(credential));
-	const expected = normalizeChallengeB64uForComparison(expectedChallengeB64u);
-	if (actual !== expected) throw new Error(`Unexpected authentication response challenge "${actual}", expected "${expected}"`);
-}
-/**
-* Generate signer-slot-specific user ID to prevent Chrome sync conflicts
-* Creates technical identifiers with full wallet context.
-*
-* @param walletId - The wallet ID.
-* @param signerSlot - The signer slot (optional, undefined for signer slot 1, 2 for signer slot 2, etc.)
-* @returns Technical identifier:
-*   - Signer slot 1: "serp120.web3-authn.testnet"
-*   - Signer slot 2: "serp120.web3-authn.testnet (2)"
-*   - Signer slot 3: "serp120.web3-authn.testnet (3)"
-*/
-function generateSignerSlotUserId(walletId, signerSlot) {
-	if (signerSlot === void 0 || signerSlot === 1) return walletId;
-	return `${walletId} (${signerSlot})`;
-}
-function attachPageAbortHandlers(controller) {
-	const onVisibility = () => {
-		if (document.hidden) controller.abort();
-	};
-	const onPageHide = () => {
-		controller.abort();
-	};
-	const onBeforeUnload = () => {
-		controller.abort();
-	};
-	document.addEventListener("visibilitychange", onVisibility, { passive: true });
-	window.addEventListener("pagehide", onPageHide, { passive: true });
-	window.addEventListener("beforeunload", onBeforeUnload, { passive: true });
-	return () => {
-		document.removeEventListener("visibilitychange", onVisibility);
-		window.removeEventListener("pagehide", onPageHide);
-		window.removeEventListener("beforeunload", onBeforeUnload);
-	};
-}
-//#endregion
-export { TouchIdPrompt };
-
-//# sourceMappingURL=touchIdPrompt.js.map

package/dist/esm/core/signingEngine/stepUpConfirmation/passkeyPrompt/webauthnPromptCoordinator.js

@@ -1,167 +0,0 @@
-import { secureRandomBase36 } from "../../../../shared-ts/src/utils/secureRandomId.js";
-//#region src/core/signingEngine/stepUpConfirmation/passkeyPrompt/webauthnPromptCoordinator.ts
-var WebAuthnPromptCoordinatorError = class extends Error {
-	constructor(code, message) {
-		super(message);
-		this.name = "WebAuthnPromptCoordinatorError";
-		this.code = code;
-	}
-};
-function registrationPromptOwnersEqual(left, right) {
-	switch (left.kind) {
-		case "registration_modal": return right.kind === "registration_modal" && left.requestId === right.requestId;
-		case "hosted_auth_menu_registration": return right.kind === "hosted_auth_menu_registration" && left.authMenuSessionId === right.authMenuSessionId && left.requestId === right.requestId;
-		default: return assertNeverRegistrationWebAuthnPromptOwner(left);
-	}
-}
-function assertNeverRegistrationWebAuthnPromptOwner(value) {
-	throw new Error(`Unknown registration WebAuthn prompt owner: ${String(value)}`);
-}
-function createReservationId() {
-	return `webauthn-reservation-${secureRandomBase36(18, "WebAuthn reservation IDs")}`;
-}
-function createOperationId() {
-	return `webauthn-operation-${secureRandomBase36(18, "WebAuthn operation IDs")}`;
-}
-var WebAuthnPromptCoordinator = class {
-	constructor() {
-		this.state = { kind: "idle" };
-		this.idleWaiters = /* @__PURE__ */ new Set();
-		this.reservationExpiryTimer = null;
-		this.consumedReservationIds = /* @__PURE__ */ new Set();
-	}
-	async reserveRegistrationPrompt(args) {
-		this.throwIfReservationCancelled(args.cancellation);
-		if (Date.now() >= args.expiresAtMs) throw new WebAuthnPromptCoordinatorError("webauthn_prompt_reservation_expired", "WebAuthn prompt reservation expired before acquisition");
-		while (this.state.kind !== "idle") {
-			await this.waitUntilIdle(args.expiresAtMs, args.cancellation);
-			this.throwIfReservationCancelled(args.cancellation);
-		}
-		const reservation = {
-			kind: "reserved_registration_webauthn_prompt_v1",
-			reservationId: createReservationId(),
-			owner: args.owner,
-			expiresAtMs: args.expiresAtMs
-		};
-		this.state = {
-			kind: "reserved",
-			reservation
-		};
-		this.armReservationExpiry(reservation);
-		return reservation;
-	}
-	releaseReservation(reservation) {
-		if (this.state.kind !== "reserved") return;
-		if (this.state.reservation.reservationId !== reservation.reservationId) return;
-		this.clearReservationExpiry();
-		this.state = { kind: "idle" };
-		this.notifyIdle();
-	}
-	isLiveReservation(args) {
-		return Date.now() < args.reservation.expiresAtMs && this.state.kind === "reserved" && this.state.reservation.reservationId === args.reservation.reservationId && registrationPromptOwnersEqual(args.reservation.owner, args.owner);
-	}
-	runReserved(args) {
-		this.assertLiveReservation(args.reservation, args.owner);
-		const operationId = createOperationId();
-		this.consumedReservationIds.add(args.reservation.reservationId);
-		this.clearReservationExpiry();
-		this.state = {
-			kind: "running",
-			operationId,
-			owner: args.owner
-		};
-		return this.startOperation(operationId, args.operation);
-	}
-	runImmediate(args) {
-		if (this.state.kind !== "idle") throw new WebAuthnPromptCoordinatorError("webauthn_prompt_busy", "Another WebAuthn prompt owns the coordinator");
-		const operationId = createOperationId();
-		this.state = {
-			kind: "running",
-			operationId,
-			owner: args.owner
-		};
-		return this.startOperation(operationId, args.operation);
-	}
-	startOperation(operationId, operation) {
-		let result;
-		try {
-			result = operation();
-		} catch (error) {
-			this.finishOperation(operationId);
-			throw error;
-		}
-		const finish = this.finishOperation.bind(this, operationId);
-		result.then(finish, finish);
-		return result;
-	}
-	assertLiveReservation(reservation, owner) {
-		if (this.consumedReservationIds.has(reservation.reservationId)) throw new WebAuthnPromptCoordinatorError("webauthn_prompt_reservation_reused", "WebAuthn prompt reservation was already consumed");
-		if (Date.now() >= reservation.expiresAtMs) {
-			this.releaseReservation(reservation);
-			throw new WebAuthnPromptCoordinatorError("webauthn_prompt_reservation_expired", "WebAuthn prompt reservation expired");
-		}
-		if (this.state.kind !== "reserved" || this.state.reservation.reservationId !== reservation.reservationId) throw new WebAuthnPromptCoordinatorError("webauthn_prompt_reservation_reused", "WebAuthn prompt reservation is no longer active");
-		if (!registrationPromptOwnersEqual(reservation.owner, owner)) throw new WebAuthnPromptCoordinatorError("webauthn_prompt_reservation_owner_mismatch", "WebAuthn prompt reservation owner does not match");
-	}
-	finishOperation(operationId) {
-		if (this.state.kind !== "running" || this.state.operationId !== operationId) return;
-		this.state = { kind: "idle" };
-		this.notifyIdle();
-	}
-	waitUntilIdle(expiresAtMs, cancellation) {
-		const timeoutMs = Math.max(1, expiresAtMs - Date.now());
-		return new Promise((resolve, reject) => {
-			const waiter = {
-				resolve,
-				reject,
-				signal: cancellation.kind === "abort_signal" ? cancellation.signal : null,
-				onAbort: null,
-				timer: setTimeout(() => {
-					this.idleWaiters.delete(waiter);
-					this.removeWaiterAbortListener(waiter);
-					reject(new WebAuthnPromptCoordinatorError("webauthn_prompt_reservation_expired", "WebAuthn prompt reservation expired while waiting for the coordinator"));
-				}, timeoutMs)
-			};
-			if (waiter.signal) {
-				waiter.onAbort = () => {
-					this.idleWaiters.delete(waiter);
-					clearTimeout(waiter.timer);
-					this.removeWaiterAbortListener(waiter);
-					reject(/* @__PURE__ */ new Error("WebAuthn prompt reservation acquisition cancelled"));
-				};
-				waiter.signal.addEventListener("abort", waiter.onAbort, { once: true });
-			}
-			this.idleWaiters.add(waiter);
-		});
-	}
-	notifyIdle() {
-		for (const waiter of this.idleWaiters) {
-			clearTimeout(waiter.timer);
-			this.removeWaiterAbortListener(waiter);
-			waiter.resolve();
-		}
-		this.idleWaiters.clear();
-	}
-	armReservationExpiry(reservation) {
-		this.clearReservationExpiry();
-		this.reservationExpiryTimer = setTimeout(this.releaseReservation.bind(this, reservation), Math.max(1, reservation.expiresAtMs - Date.now()));
-	}
-	clearReservationExpiry() {
-		if (this.reservationExpiryTimer === null) return;
-		clearTimeout(this.reservationExpiryTimer);
-		this.reservationExpiryTimer = null;
-	}
-	throwIfReservationCancelled(cancellation) {
-		if (cancellation.kind === "abort_signal" && cancellation.signal.aborted) throw new Error("WebAuthn prompt reservation acquisition cancelled");
-	}
-	removeWaiterAbortListener(waiter) {
-		if (!waiter.signal || !waiter.onAbort) return;
-		waiter.signal.removeEventListener("abort", waiter.onAbort);
-		waiter.onAbort = null;
-	}
-};
-const webAuthnPromptCoordinator = new WebAuthnPromptCoordinator();
-//#endregion
-export { webAuthnPromptCoordinator };
-
-//# sourceMappingURL=webauthnPromptCoordinator.js.map

package/dist/esm/core/signingEngine/stepUpConfirmation/userConfirmationType.js

@@ -1,15 +0,0 @@
-//#region src/core/signingEngine/stepUpConfirmation/userConfirmationType.ts
-let UserConfirmationType = /* @__PURE__ */ function(UserConfirmationType) {
-	UserConfirmationType["SIGN_TRANSACTION"] = "signTransaction";
-	UserConfirmationType["REGISTER_ACCOUNT"] = "registerAccount";
-	UserConfirmationType["LINK_DEVICE"] = "linkDevice";
-	UserConfirmationType["AUTHORIZE_KEY_EXPORT"] = "authorizeKeyExport";
-	UserConfirmationType["SIGN_NEP413_MESSAGE"] = "signNep413Message";
-	UserConfirmationType["SHOW_SECURE_PRIVATE_KEY_UI"] = "showSecurePrivateKeyUi";
-	UserConfirmationType["SIGN_INTENT_DIGEST"] = "signIntentDigest";
-	return UserConfirmationType;
-}({});
-//#endregion
-export { UserConfirmationType };
-
-//# sourceMappingURL=userConfirmationType.js.map

package/dist/esm/core/signingEngine/threshold/crypto/ed25519YaoLaneWasm.js

@@ -1,67 +0,0 @@
-import { executeWorkerOperation } from "../../workerManager/executeWorkerOperation.js";
-//#region src/core/signingEngine/threshold/crypto/ed25519YaoLaneWasm.ts
-function requestJson(value) {
-	if (typeof value !== "string" || !value.trim()) throw new Error("Yao lane request JSON is required");
-	return value;
-}
-async function openEd25519YaoLaneWorkerSourceFromUnlockedCapabilityV1(args) {
-	const opened = await executeWorkerOperation({
-		ctx: args.workerCtx,
-		kind: "walletCustodyCeremony",
-		request: {
-			type: "openEd25519YaoLaneSource",
-			payload: {
-				kind: "unlocked_ed25519_export_root_capability",
-				capability: args.capability,
-				applicationBindingDigestB64u: args.applicationBindingDigestB64u,
-				walletKeyId: args.walletKeyId,
-				enrollmentId: args.enrollmentId,
-				revocationEpoch: args.revocationEpoch,
-				registeredPublicKeyB64u: args.registeredPublicKeyB64u
-			}
-		}
-	});
-	return new Ed25519YaoLaneWorkerSource(args.workerCtx, opened.sourceHandle);
-}
-var Ed25519YaoLaneWorkerSource = class {
-	#discarded = false;
-	constructor(workerCtx, sourceHandle) {
-		this.workerCtx = workerCtx;
-		this.sourceHandle = sourceHandle;
-	}
-	async discard() {
-		if (this.#discarded) return;
-		this.#discarded = true;
-		await executeWorkerOperation({
-			ctx: this.workerCtx,
-			kind: "walletCustodyCeremony",
-			request: {
-				type: "discardEd25519YaoLaneSource",
-				payload: { sourceHandle: this.sourceHandle }
-			}
-		});
-	}
-	async prepareSourcePreservingRegistration(input) {
-		if (this.#discarded) throw new Error("Ed25519 Yao lane source is already consumed");
-		this.#discarded = true;
-		return { requestJson: requestJson((await executeWorkerOperation({
-			ctx: this.workerCtx,
-			kind: "walletCustodyCeremony",
-			request: {
-				type: "prepareEd25519YaoSourcePreservingRegistration",
-				payload: {
-					sourceHandle: this.sourceHandle,
-					targetAdmission: input.targetAdmission,
-					applicationBinding: input.applicationBinding,
-					participantIds: input.participantIds,
-					expectedRegisteredPublicKeyB64u: input.expectedRegisteredPublicKeyB64u,
-					targetClientRecipientPublicKeyB64u: input.targetClientRecipientPublicKeyB64u
-				}
-			}
-		})).requestJson) };
-	}
-};
-//#endregion
-export { openEd25519YaoLaneWorkerSourceFromUnlockedCapabilityV1 };
-
-//# sourceMappingURL=ed25519YaoLaneWasm.js.map