@seams/wallet 0.8.0 → 0.9.0

package/dist/esm/sdk/walletAuthMethodRecord-CXedSgpV.js

@@ -0,0 +1 @@
+import{B as e,I as t,L as n,P as r,V as i}from"./normalize-kUDm5zfS.js";import{c as a}from"./chains-CiYQT1K4.js";import{o}from"./canonicalPrimitives-CKPGgpxg.js";import{i as s,t as c}from"./registrationAuthMethodInput-6ccY2Vuh.js";async function l(e){return o(a({version:`wallet_auth_method_revoke_operation_v1`,walletId:String(e.walletId),targetWalletAuthMethodId:String(e.targetWalletAuthMethodId),requestedAtMs:e.requestedAtMs}))}function u(e,t){if(e.version!==t.version||e.walletAuthMethodId!==t.walletAuthMethodId||e.walletId!==t.walletId||e.walletAuthorityId!==t.walletAuthorityId||e.status!==t.status||e.createdAtMs!==t.createdAtMs||e.updatedAtMs!==t.updatedAtMs)return!1;switch(e.kind){case`passkey`:if(t.kind!==`passkey`)return!1;if(e.rpId===t.rpId&&e.credentialIdB64u===t.credentialIdB64u&&e.credentialPublicKeyB64u===t.credentialPublicKeyB64u&&e.counter===t.counter)break;return!1;case`email_otp`:if(t.kind!==`email_otp`)return!1;if(e.emailHashHex===t.emailHashHex&&e.registrationAuthorityId===t.registrationAuthorityId)break;return!1;default:return d(e,`wallet auth method kind`)}switch(e.status){case`pending_local_install`:return t.status===`pending_local_install`;case`active`:return t.status===`active`&&e.activatedAtMs===t.activatedAtMs;case`revoked`:return t.status===`revoked`&&e.activatedAtMs===t.activatedAtMs&&e.revokedAtMs===t.revokedAtMs;default:return d(e,`wallet auth method lifecycle`)}}function d(e,t){throw Error(`${t} branch is unsupported: ${String(e)}`)}function f(e){if(h(e),e.kind===`passkey`)switch(e.status){case`pending_local_install`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.walletAuthMethodId,walletId:e.walletId,walletAuthorityId:e.walletAuthorityId,kind:`passkey`,status:`pending_local_install`,rpId:e.rpId,credentialIdB64u:e.credentialIdB64u,credentialPublicKeyB64u:e.credentialPublicKeyB64u,counter:e.counter,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs};case`active`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.walletAuthMethodId,walletId:e.walletId,walletAuthorityId:e.walletAuthorityId,kind:`passkey`,status:`active`,rpId:e.rpId,credentialIdB64u:e.credentialIdB64u,credentialPublicKeyB64u:e.credentialPublicKeyB64u,counter:e.counter,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs,activatedAtMs:e.activatedAtMs};case`revoked`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.walletAuthMethodId,walletId:e.walletId,walletAuthorityId:e.walletAuthorityId,kind:`passkey`,status:`revoked`,rpId:e.rpId,credentialIdB64u:e.credentialIdB64u,credentialPublicKeyB64u:e.credentialPublicKeyB64u,counter:e.counter,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs,activatedAtMs:e.activatedAtMs,revokedAtMs:e.revokedAtMs}}switch(e.status){case`pending_local_install`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.walletAuthMethodId,walletId:e.walletId,walletAuthorityId:e.walletAuthorityId,kind:`email_otp`,status:`pending_local_install`,emailHashHex:e.emailHashHex,registrationAuthorityId:e.registrationAuthorityId,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs};case`active`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.walletAuthMethodId,walletId:e.walletId,walletAuthorityId:e.walletAuthorityId,kind:`email_otp`,status:`active`,emailHashHex:e.emailHashHex,registrationAuthorityId:e.registrationAuthorityId,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs,activatedAtMs:e.activatedAtMs};case`revoked`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.walletAuthMethodId,walletId:e.walletId,walletAuthorityId:e.walletAuthorityId,kind:`email_otp`,status:`revoked`,emailHashHex:e.emailHashHex,registrationAuthorityId:e.registrationAuthorityId,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs,activatedAtMs:e.activatedAtMs,revokedAtMs:e.revokedAtMs}}}function p(t){let n=c(t);if(!n||!(`version`in n)||!(`kind`in n)||!(`status`in n))return null;let r=s(n.version),a=s(n.kind),o=s(n.status);if(r!==`wallet_auth_method_v2`||a!==`passkey`&&a!==`email_otp`)return null;try{let t=m(n);if(a===`passkey`){if(!(`rpId`in n)||!(`credentialIdB64u`in n)||!(`credentialPublicKeyB64u`in n)||!(`counter`in n))return null;_(n,`passkey`,o);let r=i(n.rpId),a=e(n.credentialIdB64u);return!r.ok||!a.ok||typeof n.credentialPublicKeyB64u!=`string`||!n.credentialPublicKeyB64u.trim()||Object.prototype.hasOwnProperty.call(n,`emailHashHex`)||Object.prototype.hasOwnProperty.call(n,`registrationAuthorityId`)?null:v({common:t,lifecycle:g(n),rpId:r.value,credentialIdB64u:a.value,credentialPublicKeyB64u:n.credentialPublicKeyB64u,counter:C(n.counter)})}if(!(`emailHashHex`in n)||!(`registrationAuthorityId`in n))return null;_(n,`email_otp`,o);let r=s(n.emailHashHex),c=s(n.registrationAuthorityId);return!r||!c||Object.prototype.hasOwnProperty.call(n,`rpId`)||Object.prototype.hasOwnProperty.call(n,`credentialIdB64u`)||Object.prototype.hasOwnProperty.call(n,`credentialPublicKeyB64u`)||Object.prototype.hasOwnProperty.call(n,`counter`)?null:y({common:t,lifecycle:g(n),emailHashHex:r,registrationAuthorityId:c})}catch{return null}}function m(e){if(!(`walletAuthMethodId`in e)||!(`walletId`in e)||!(`walletAuthorityId`in e)||!(`createdAtMs`in e)||!(`updatedAtMs`in e))throw Error(`wallet auth method common fields are required`);return{version:`wallet_auth_method_v2`,walletAuthMethodId:b(e.walletAuthMethodId),walletId:x(e.walletId),walletAuthorityId:S(e.walletAuthorityId),createdAtMs:C(e.createdAtMs),updatedAtMs:C(e.updatedAtMs)}}function h(e){if(e.version!==`wallet_auth_method_v2`)throw Error(`wallet auth method record version is unsupported`);if(!e.walletAuthMethodId||!e.walletId||!e.walletAuthorityId)throw Error(`wallet auth method record identities are required`);if(!Number.isSafeInteger(e.createdAtMs)||e.createdAtMs<0)throw Error(`wallet auth method createdAtMs must be a non-negative safe integer`);if(!Number.isSafeInteger(e.updatedAtMs)||e.updatedAtMs<e.createdAtMs)throw Error(`wallet auth method updatedAtMs must follow createdAtMs`);if(e.kind===`passkey`){if(!e.rpId||!e.credentialIdB64u||!e.credentialPublicKeyB64u.trim())throw Error(`passkey wallet auth method fields are required`);if(!Number.isSafeInteger(e.counter)||e.counter<0)throw Error(`passkey authenticator counter must be non-negative`)}else if(!e.emailHashHex.trim()||!e.registrationAuthorityId.trim())throw Error(`email OTP wallet auth method fields are required`);switch(e.status){case`pending_local_install`:return;case`active`:w(e.activatedAtMs,`activatedAtMs`);return;case`revoked`:if(w(e.activatedAtMs,`activatedAtMs`),w(e.revokedAtMs,`revokedAtMs`),e.revokedAtMs<e.activatedAtMs)throw Error(`revokedAtMs cannot precede activatedAtMs`);return}}function g(e){if(!(`status`in e))throw Error(`wallet auth method status is required`);switch(e.status){case`pending_local_install`:return{status:`pending_local_install`};case`active`:if(!(`activatedAtMs`in e))throw Error(`wallet auth method activatedAtMs is required`);return{status:`active`,activatedAtMs:C(e.activatedAtMs)};case`revoked`:if(!(`activatedAtMs`in e)||!(`revokedAtMs`in e))throw Error(`wallet auth method revocation timestamps are required`);return{status:`revoked`,activatedAtMs:C(e.activatedAtMs),revokedAtMs:C(e.revokedAtMs)};default:throw Error(`wallet auth method status is unsupported`)}}function _(e,t,n){let r=[`version`,`walletAuthMethodId`,`walletId`,`walletAuthorityId`,`kind`,`status`,`createdAtMs`,`updatedAtMs`];if(t===`passkey`?r.push(`rpId`,`credentialIdB64u`,`credentialPublicKeyB64u`,`counter`):r.push(`emailHashHex`,`registrationAuthorityId`),n===`active`&&r.push(`activatedAtMs`),n===`revoked`&&r.push(`activatedAtMs`,`revokedAtMs`),n!==`pending_local_install`&&n!==`active`&&n!==`revoked`)throw Error(`wallet auth method status is unsupported`);let i=new Set(r),a=Object.keys(e);if(a.length!==r.length)throw Error(`wallet auth method record has invalid fields`);for(let e of a)if(!i.has(e))throw Error(`wallet auth method field ${e} is invalid`)}function v(e){switch(e.lifecycle.status){case`pending_local_install`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.common.walletAuthMethodId,walletId:e.common.walletId,walletAuthorityId:e.common.walletAuthorityId,kind:`passkey`,status:`pending_local_install`,createdAtMs:e.common.createdAtMs,updatedAtMs:e.common.updatedAtMs,rpId:e.rpId,credentialIdB64u:e.credentialIdB64u,credentialPublicKeyB64u:e.credentialPublicKeyB64u,counter:e.counter};case`active`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.common.walletAuthMethodId,walletId:e.common.walletId,walletAuthorityId:e.common.walletAuthorityId,kind:`passkey`,status:`active`,createdAtMs:e.common.createdAtMs,updatedAtMs:e.common.updatedAtMs,rpId:e.rpId,credentialIdB64u:e.credentialIdB64u,credentialPublicKeyB64u:e.credentialPublicKeyB64u,counter:e.counter,activatedAtMs:e.lifecycle.activatedAtMs};case`revoked`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.common.walletAuthMethodId,walletId:e.common.walletId,walletAuthorityId:e.common.walletAuthorityId,kind:`passkey`,status:`revoked`,createdAtMs:e.common.createdAtMs,updatedAtMs:e.common.updatedAtMs,rpId:e.rpId,credentialIdB64u:e.credentialIdB64u,credentialPublicKeyB64u:e.credentialPublicKeyB64u,counter:e.counter,activatedAtMs:e.lifecycle.activatedAtMs,revokedAtMs:e.lifecycle.revokedAtMs}}}function y(e){switch(e.lifecycle.status){case`pending_local_install`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.common.walletAuthMethodId,walletId:e.common.walletId,walletAuthorityId:e.common.walletAuthorityId,kind:`email_otp`,status:`pending_local_install`,createdAtMs:e.common.createdAtMs,updatedAtMs:e.common.updatedAtMs,emailHashHex:e.emailHashHex,registrationAuthorityId:e.registrationAuthorityId};case`active`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.common.walletAuthMethodId,walletId:e.common.walletId,walletAuthorityId:e.common.walletAuthorityId,kind:`email_otp`,status:`active`,createdAtMs:e.common.createdAtMs,updatedAtMs:e.common.updatedAtMs,emailHashHex:e.emailHashHex,registrationAuthorityId:e.registrationAuthorityId,activatedAtMs:e.lifecycle.activatedAtMs};case`revoked`:return{version:`wallet_auth_method_v2`,walletAuthMethodId:e.common.walletAuthMethodId,walletId:e.common.walletId,walletAuthorityId:e.common.walletAuthorityId,kind:`email_otp`,status:`revoked`,createdAtMs:e.common.createdAtMs,updatedAtMs:e.common.updatedAtMs,emailHashHex:e.emailHashHex,registrationAuthorityId:e.registrationAuthorityId,activatedAtMs:e.lifecycle.activatedAtMs,revokedAtMs:e.lifecycle.revokedAtMs}}}function b(e){let t=r(e);if(!t.ok)throw Error(t.error.message);return t.value}function x(e){let t=n(e);if(!t.ok)throw Error(t.error.message);return t.value}function S(e){let n=t(e);if(!n.ok)throw Error(n.error.message);return n.value}function C(e){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<0)throw Error(`value must be a non-negative safe integer`);return e}function w(e,t){if(!Number.isSafeInteger(e)||e<0)throw Error(`${t} must be a non-negative safe integer`)}export{u as i,l as n,p as r,f as t};

package/dist/esm/sdk/walletAuthority-B5hXHWpK.js

@@ -0,0 +1 @@
+import{I as e,L as t,R as n,v as r,w as i,y as a,z as o}from"./normalize-kUDm5zfS.js";import{k as s,l as c}from"./chains-CiYQT1K4.js";import{i as l}from"./base64-CsEj-_bC.js";import{_ as u,l as d,m as ee,n as te,s as f}from"./primitives-CAcl7ON7.js";import{l as ne}from"./capabilityKinds-CKQ4Uqnv.js";import{r as p}from"./canonicalPrimitives-CKPGgpxg.js";import{a as m,i as re,n as h,o as g,r as ie,s as ae,t as _}from"./digestEncoding-Dzc1rzWV.js";const oe=[`kind`,`keyFamilies`,`signers`],se=[`kind`,`keyFamily`,`walletId`,`walletKeyId`,`registeredPublicKeyB64u`],ce=[`kind`,`keyFamily`,`walletId`,`walletKeyId`,`thresholdPublicKey33B64u`,`evmAddress`];function v(e){if(e.length===0)throw Error(`exact administered signer manifest must contain at least one active family`);let t,n,r,i=new Set;for(let a of e){if(t!==void 0&&t!==a.walletId)throw Error(`exact administered signer manifest must use one wallet identity`);if(t=a.walletId,i.has(a.walletKeyId))throw Error(`exact administered signer manifest repeats wallet key ${a.walletKeyId}`);switch(i.add(a.walletKeyId),a.keyFamily){case`ed25519`:if(n!==void 0)throw Error(`exact administered signer manifest repeats the ed25519 family`);if(a.kind!==`exact_administered_ed25519_signer_v1`)throw Error(`exact administered signer manifest has an invalid Ed25519 signer`);n=a;break;case`ecdsa_secp256k1`:if(r!==void 0)throw Error(`exact administered signer manifest repeats the ecdsa family`);if(a.kind!==`exact_administered_ecdsa_signer_v1`)throw Error(`exact administered signer manifest has an invalid ECDSA signer`);r=a;break}}if(n!==void 0&&r!==void 0)return{kind:`exact_administered_signer_manifest_v1`,keyFamilies:[`ed25519`,`ecdsa_secp256k1`],signers:[n,r]};if(n!==void 0)return{kind:`exact_administered_signer_manifest_v1`,keyFamilies:[`ed25519`],signers:[n]};if(r!==void 0)return{kind:`exact_administered_signer_manifest_v1`,keyFamilies:[`ecdsa_secp256k1`],signers:[r]};throw Error(`exact administered signer manifest must contain a supported family`)}function y(e){let t=pe(e,oe,`ExactAdministeredSignerManifestV1`);if(t.kind!==`exact_administered_signer_manifest_v1`)throw Error(`ExactAdministeredSignerManifestV1.kind is invalid`);let n=ue(t.keyFamilies);if(!Array.isArray(t.signers))throw Error(`ExactAdministeredSignerManifestV1.signers must be an array`);let r=[];for(let e=0;e<t.signers.length;e+=1)r.push(le(t.signers[e],`signers[${e}]`));let i=v(r);if(!de(n,i.keyFamilies))throw Error(`ExactAdministeredSignerManifestV1.keyFamilies do not match signers`);return i}function le(e,r){let i=s(e,r);switch(i.keyFamily){case`ed25519`:if(u(i,se,r),i.kind!==`exact_administered_ed25519_signer_v1`)throw Error(`${r}.kind is invalid for Ed25519`);return{kind:`exact_administered_ed25519_signer_v1`,keyFamily:`ed25519`,walletId:d(t(i.walletId),`${r}.walletId`),walletKeyId:d(n(i.walletKeyId),`${r}.walletKeyId`),registeredPublicKeyB64u:te(i.registeredPublicKeyB64u,`${r}.registeredPublicKeyB64u`)};case`ecdsa_secp256k1`:if(u(i,ce,r),i.kind!==`exact_administered_ecdsa_signer_v1`)throw Error(`${r}.kind is invalid for ECDSA`);return{kind:`exact_administered_ecdsa_signer_v1`,keyFamily:`ecdsa_secp256k1`,walletId:d(t(i.walletId),`${r}.walletId`),walletKeyId:d(n(i.walletKeyId),`${r}.walletKeyId`),thresholdPublicKey33B64u:f(i.thresholdPublicKey33B64u,`${r}.thresholdPublicKey33B64u`),evmAddress:fe(i.evmAddress,`${r}.evmAddress`)};default:throw Error(`${r}.keyFamily is unsupported`)}}function ue(e){if(!Array.isArray(e)||e.length===0||e.length>2)throw Error(`ExactAdministeredSignerManifestV1.keyFamilies must be non-empty`);if(e.length===1&&e[0]===`ed25519`)return[`ed25519`];if(e.length===1&&e[0]===`ecdsa_secp256k1`)return[`ecdsa_secp256k1`];if(e.length===2&&e[0]===`ed25519`&&e[1]===`ecdsa_secp256k1`)return[`ed25519`,`ecdsa_secp256k1`];throw Error(`ExactAdministeredSignerManifestV1.keyFamilies must be canonical and duplicate-free`)}function de(e,t){if(e.length!==t.length)return!1;for(let n=0;n<e.length;n+=1)if(e[n]!==t[n])return!1;return!0}function fe(e,t){if(typeof e!=`string`||!/^0x[0-9a-fA-F]{40}$/.test(e))throw Error(`${t} must be a 20-byte hexadecimal EVM address`);return e}function pe(e,t,n){let r=s(e,n);u(r,t,n);for(let e of t)if(!(e in r))throw Error(`${n}.${e} is required`);return r}function b(e){return K(e)}function x(e){return G(e.signerActivations)}function me(e){return W(e.signerActivations)}function he(e){return e.provenance.kind===`wallet_recovery`}function S(e){return{kind:`wallet_ed25519_signer_activation_v1`,signer:e.signer,materialActivation:e.materialActivation}}function C(e){return{kind:`wallet_ecdsa_signer_activation_v1`,signer:e.signer,materialActivation:e.materialActivation}}function w(e){let t=y(e.manifest),n=ze(e.materialActivations);if(!Me(t.keyFamilies,n.keyFamilies))throw Error(`wallet signer activation materials must match the signer manifest families`);if(Ne(t)){if(!Ie(n))throw Error(`Ed25519 signer activation requires one Ed25519 material activation`);return{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ed25519`],ed25519:S({signer:t.signers[0],materialActivation:n.ed25519})}}if(Pe(t)){if(!Le(n))throw Error(`ECDSA signer activation requires one ECDSA material activation`);return{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ecdsa_secp256k1`],ecdsa:C({signer:t.signers[0],materialActivation:n.ecdsa})}}if(!Fe(t)||!Re(n))throw Error(`wallet signer activation set has unsupported families`);if(n.ed25519.activationId===n.ecdsa.activationId)throw Error(`wallet signer activation references must be distinct`);return{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:S({signer:t.signers[0],materialActivation:n.ed25519}),ecdsa:C({signer:t.signers[1],materialActivation:n.ecdsa})}}function ge(e){try{let t=s(e,`WalletSignerActivationSetV1`);if(t.kind!==`wallet_signer_activation_set_v1`)return Z(`wallet signer activation set kind is unsupported`);if(!Object.prototype.hasOwnProperty.call(t,`keyFamilies`))return Z(`WalletSignerActivationSetV1.keyFamilies is required`);let n=je(t.keyFamilies,`WalletSignerActivationSetV1.keyFamilies`);if(n.length===1&&n[0]===`ed25519`)return U(t,[`kind`,`keyFamilies`,`ed25519`],`WalletSignerActivationSetV1`),{ok:!0,value:{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ed25519`],ed25519:N(t.ed25519,`ed25519`)}};if(n.length===1&&n[0]===`ecdsa_secp256k1`)return U(t,[`kind`,`keyFamilies`,`ecdsa`],`WalletSignerActivationSetV1`),{ok:!0,value:{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ecdsa_secp256k1`],ecdsa:P(t.ecdsa,`ecdsa`)}};U(t,[`kind`,`keyFamilies`,`ed25519`,`ecdsa`],`WalletSignerActivationSetV1`);let r=N(t.ed25519,`ed25519`),i=P(t.ecdsa,`ecdsa`);return r.materialActivation.activationId===i.materialActivation.activationId?Z(`wallet signer activation references must be distinct`):{ok:!0,value:{kind:`wallet_signer_activation_set_v1`,keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:r,ecdsa:i}}}catch(e){return Z(Q(e,`wallet signer activation set is invalid`))}}function _e(e){let t=[m(`seams/wallet-signer-activation-set/v1`,`domain`),m(e.kind,`kind`),g(e.keyFamilies.length,`keyFamilies`)];for(let n of e.keyFamilies)t.push(m(n,`keyFamilies.item`));return(W(e)||K(e))&&t.push(h(I(e.ed25519),`ed25519`)),(G(e)||K(e))&&t.push(h(L(e.ecdsa),`ecdsa`)),_(t)}async function T(e){return p(l(await c(_e(e))))}function E(e){return{kind:`wallet_authority_v1`,authorityId:e.authorityId,walletId:e.walletId,principal:e.principal,provenance:e.provenance,permissions:e.permissions,signerActivations:e.signerActivations,signerActivationSetDigestB64u:e.signerActivationSetDigestB64u,authorityDigestB64u:e.authorityDigestB64u,revocationEpoch:e.revocationEpoch,createdAtMs:e.createdAtMs,updatedAtMs:e.updatedAtMs}}function ve(e){return j(e),{...E(e),state:`pending_local_install`,localInstallPackageSetDigestB64u:e.localInstallPackageSetDigestB64u}}function D(e){return j(e),{...E(e),state:`active`,activatedAtMs:e.activatedAtMs}}async function ye(e){let t=e.authority.signerActivations;if(!t.ed25519)throw Error(`active Wallet Authority has no Ed25519 material activation to replace`);let n=t.ecdsa?w({manifest:v([t.ed25519.signer,t.ecdsa.signer]),materialActivations:{keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:e.materialActivation,ecdsa:t.ecdsa.materialActivation}}):w({manifest:v([t.ed25519.signer]),materialActivations:{keyFamilies:[`ed25519`],ed25519:e.materialActivation}}),r=await T(n),i={kind:e.authority.kind,authorityId:e.authority.authorityId,walletId:e.authority.walletId,principal:e.authority.principal,provenance:e.authority.provenance,permissions:e.authority.permissions,signerActivations:n,signerActivationSetDigestB64u:r,authorityDigestB64u:e.authority.authorityDigestB64u,revocationEpoch:e.authority.revocationEpoch,createdAtMs:e.authority.createdAtMs,updatedAtMs:Math.max(e.authority.updatedAtMs,e.updatedAtMs),state:`active`,activatedAtMs:e.authority.activatedAtMs};return D({...i,authorityDigestB64u:await k(i)})}function be(e){return j(e),{...E(e),state:`active`,activatedAtMs:e.activatedAtMs}}function xe(e){return j(e),{...E(e),state:`revoked`,activatedAtMs:e.activatedAtMs,revokedAtMs:e.revokedAtMs}}const O=[`kind`,`authorityId`,`walletId`,`principal`,`provenance`,`permissions`,`signerActivations`,`signerActivationSetDigestB64u`,`authorityDigestB64u`,`revocationEpoch`,`createdAtMs`,`updatedAtMs`,`state`];function Se(e){try{let t=s(e,`WalletAuthorityV1`),n=Te(t);switch(t.state){case`pending_local_install`:return U(t,[...O,`localInstallPackageSetDigestB64u`],`WalletAuthorityV1`),{ok:!0,value:ve({kind:`wallet_authority_v1`,...n,state:`pending_local_install`,localInstallPackageSetDigestB64u:q(t.localInstallPackageSetDigestB64u,`localInstallPackageSetDigestB64u`)})};case`active`:return U(t,[...O,`activatedAtMs`],`WalletAuthorityV1`),{ok:!0,value:D({kind:`wallet_authority_v1`,...n,state:`active`,activatedAtMs:J(t.activatedAtMs,`activatedAtMs`)})};case`revoked`:return U(t,[...O,`activatedAtMs`,`revokedAtMs`],`WalletAuthorityV1`),{ok:!0,value:xe({kind:`wallet_authority_v1`,...n,state:`revoked`,activatedAtMs:J(t.activatedAtMs,`activatedAtMs`),revokedAtMs:J(t.revokedAtMs,`revokedAtMs`)})};default:return Z(`WalletAuthorityV1.state is unsupported`)}}catch(e){return Z(Q(e,`wallet authority is invalid`))}}function Ce(e){return _([m(`seams/wallet-authority/v1`,`domain`),m(e.kind,`kind`),m(e.authorityId,`authorityId`),m(e.walletId,`walletId`),h(z(e.principal),`principal`),h(B(e.provenance),`provenance`),h(V(e.permissions),`permissions`),ie(e.signerActivationSetDigestB64u,`signerActivationSetDigestB64u`),m(e.state,`state`),ae(e.revocationEpoch,`revocationEpoch`)])}async function k(e){return p(l(await c(Ce(e))))}async function A(e){return await T(e.signerActivations)===e.signerActivationSetDigestB64u?await k(e)===e.authorityDigestB64u:!1}async function we(e,t){let[n,r]=await Promise.all([A(e),A(t)]);return n&&r&&e.authorityDigestB64u===t.authorityDigestB64u&&e.signerActivationSetDigestB64u===t.signerActivationSetDigestB64u&&e.createdAtMs===t.createdAtMs&&e.updatedAtMs===t.updatedAtMs&&e.activatedAtMs===t.activatedAtMs}function Te(n){if(n.kind!==`wallet_authority_v1`)throw Error(`WalletAuthorityV1.kind is unsupported`);let r=X(e(n.authorityId),`authorityId`),i=X(t(n.walletId),`walletId`),a=Ee(n.principal),o=De(n.provenance),s=X(ee(n.permissions),`permissions`),c=X(ge(n.signerActivations),`signerActivations`),l=q(n.signerActivationSetDigestB64u,`signerActivationSetDigestB64u`),u=q(n.authorityDigestB64u,`authorityDigestB64u`),d=J(n.revocationEpoch,`revocationEpoch`),te=J(n.createdAtMs,`createdAtMs`),f=J(n.updatedAtMs,`updatedAtMs`);return M(c,i),{authorityId:r,walletId:i,principal:a,provenance:o,permissions:s,signerActivations:c,signerActivationSetDigestB64u:l,authorityDigestB64u:u,revocationEpoch:d,createdAtMs:te,updatedAtMs:f}}function j(e){if(e.kind!==`wallet_authority_v1`)throw Error(`wallet authority kind is unsupported`);if(!Number.isSafeInteger(e.revocationEpoch)||e.revocationEpoch<0)throw Error(`wallet authority revocationEpoch must be a non-negative safe integer`);if(Y(e.createdAtMs,`createdAtMs`),Y(e.updatedAtMs,`updatedAtMs`),e.updatedAtMs<e.createdAtMs)throw Error(`wallet authority updatedAtMs cannot precede createdAtMs`);switch(q(e.signerActivationSetDigestB64u,`signerActivationSetDigestB64u`),q(e.authorityDigestB64u,`authorityDigestB64u`),M(e.signerActivations,e.walletId),Oe(e.provenance),e.state){case`pending_local_install`:q(e.localInstallPackageSetDigestB64u,`localInstallPackageSetDigestB64u`);break;case`active`:Y(e.activatedAtMs,`activatedAtMs`);break;case`revoked`:if(Y(e.activatedAtMs,`activatedAtMs`),Y(e.revokedAtMs,`revokedAtMs`),e.revokedAtMs<e.activatedAtMs)throw Error(`revokedAtMs cannot precede activatedAtMs`);break}}function Ee(e){let t=H(e,[`kind`,`deviceId`],`WalletAuthorityPrincipalV1`);if(t.kind!==`owner_device`)throw Error(`wallet authority principal kind is unsupported`);return{kind:`owner_device`,deviceId:X(ne(t.deviceId),`deviceId`)}}function De(t){let n=s(t,`WalletAuthorityProvenanceV1`);switch(n.kind){case`wallet_registration`:return U(n,[`kind`],`WalletAuthorityProvenanceV1`),{kind:`wallet_registration`};case`device_link`:return U(n,[`kind`,`enrollmentId`,`sourceAuthorityId`,`linkSessionId`],`WalletAuthorityProvenanceV1`),{kind:`device_link`,enrollmentId:X(a(n.enrollmentId),`enrollmentId`),sourceAuthorityId:X(e(n.sourceAuthorityId),`sourceAuthorityId`),linkSessionId:X(r(n.linkSessionId),`linkSessionId`)};case`wallet_recovery`:return U(n,[`kind`,`recoveryOperationId`,`continuityAuthorityId`],`WalletAuthorityProvenanceV1`),{kind:`wallet_recovery`,recoveryOperationId:X(o(n.recoveryOperationId),`recoveryOperationId`),continuityAuthorityId:X(e(n.continuityAuthorityId),`continuityAuthorityId`)};default:throw Error(`wallet authority provenance kind is unsupported`)}}function Oe(e){switch(e.kind){case`wallet_registration`:return;case`device_link`:if(!e.enrollmentId||!e.sourceAuthorityId||!e.linkSessionId)throw Error(`device-link provenance requires every audit identity`);return;case`wallet_recovery`:if(!e.recoveryOperationId||!e.continuityAuthorityId)throw Error(`wallet-recovery provenance requires every audit identity`);return}Be(e,`wallet authority provenance`)}function M(e,t){if(W(e)){if(e.ed25519.signer.walletId!==t)throw Error(`Ed25519 signer activation uses a different wallet id`);return}if(G(e)){if(e.ecdsa.signer.walletId!==t)throw Error(`ECDSA signer activation uses a different wallet id`);return}if(K(e)){if(e.ed25519.signer.walletId!==t||e.ecdsa.signer.walletId!==t)throw Error(`signer activations must use the authority wallet id`);return}throw Error(`wallet signer activation families are unsupported`)}function N(e,t){let n=H(e,[`kind`,`signer`,`materialActivation`],t);if(n.kind!==`wallet_ed25519_signer_activation_v1`)throw Error(`${t}.kind is invalid`);let r=F(n.signer,`ed25519`,`${t}.signer`);if(!Ne(r))throw Error(`${t}.signer is not Ed25519`);return S({signer:r.signers[0],materialActivation:X(i(n.materialActivation),`${t}.materialActivation`)})}function P(e,t){let n=H(e,[`kind`,`signer`,`materialActivation`],t);if(n.kind!==`wallet_ecdsa_signer_activation_v1`)throw Error(`${t}.kind is invalid`);let r=F(n.signer,`ecdsa_secp256k1`,`${t}.signer`);if(!Pe(r))throw Error(`${t}.signer is not ECDSA`);return C({signer:r.signers[0],materialActivation:X(i(n.materialActivation),`${t}.materialActivation`)})}function F(e,t,n){return y({kind:`exact_administered_signer_manifest_v1`,keyFamilies:[t],signers:[e]})}function I(e){return _([m(e.kind,`ed25519.kind`),h(ke(e.signer),`ed25519.signer`),h(R(e.materialActivation),`ed25519.materialActivation`)])}function L(e){return _([m(e.kind,`ecdsa.kind`),h(Ae(e.signer),`ecdsa.signer`),h(R(e.materialActivation),`ecdsa.materialActivation`)])}function ke(e){return _([m(e.kind,`ed25519.signer.kind`),m(e.keyFamily,`ed25519.signer.keyFamily`),m(e.walletId,`ed25519.signer.walletId`),m(e.walletKeyId,`ed25519.signer.walletKeyId`),h(re(e.registeredPublicKeyB64u,`ed25519.signer.registeredPublicKeyB64u`),`ed25519.signer.registeredPublicKeyB64u`)])}function Ae(e){return _([m(e.kind,`ecdsa.signer.kind`),m(e.keyFamily,`ecdsa.signer.keyFamily`),m(e.walletId,`ecdsa.signer.walletId`),m(e.walletKeyId,`ecdsa.signer.walletKeyId`),h(re(e.thresholdPublicKey33B64u,`ecdsa.signer.thresholdPublicKey33B64u`),`ecdsa.signer.thresholdPublicKey33B64u`),m(e.evmAddress,`ecdsa.signer.evmAddress`)])}function R(e){return _([m(e.kind,`materialActivation.kind`),m(e.activationId,`materialActivation.activationId`),m(e.capability,`materialActivation.capability`),m(e.materialOwner,`materialActivation.materialOwner`),m(e.keyBinding,`materialActivation.keyBinding`),m(e.lifecycleBinding,`materialActivation.lifecycleBinding`),m(e.signingWorker,`materialActivation.signingWorker`)])}function z(e){return _([m(e.kind,`principal.kind`),m(e.deviceId,`principal.deviceId`)])}function B(e){switch(e.kind){case`wallet_registration`:return m(e.kind,`provenance.kind`);case`device_link`:return _([m(e.kind,`provenance.kind`),m(e.enrollmentId,`provenance.enrollmentId`),m(e.sourceAuthorityId,`provenance.sourceAuthorityId`),m(e.linkSessionId,`provenance.linkSessionId`)]);case`wallet_recovery`:return _([m(e.kind,`provenance.kind`),m(e.recoveryOperationId,`provenance.recoveryOperationId`),m(e.continuityAuthorityId,`provenance.continuityAuthorityId`)])}return Be(e,`wallet authority provenance`)}function V(e){let t=[g(e.length,`permissions`)];for(let n of e)t.push(h(m(n,`permissions.item`),`permissions.item`));return _(t)}function H(e,t,n){let r=s(e,n);return U(r,t,n),r}function U(e,t,n){let r=new Set(t),i=Object.keys(e);if(i.length!==t.length)throw Error(`${n} contains unexpected fields`);for(let e of i)if(!r.has(e))throw Error(`${n}.${e} is not allowed`);for(let r of t)if(!Object.prototype.hasOwnProperty.call(e,r))throw Error(`${n}.${r} is required`)}function je(e,t){if(!Array.isArray(e))throw Error(`${t} must be an array`);if(e.length===1&&e[0]===`ed25519`)return[`ed25519`];if(e.length===1&&e[0]===`ecdsa_secp256k1`)return[`ecdsa_secp256k1`];if(e.length===2&&e[0]===`ed25519`&&e[1]===`ecdsa_secp256k1`)return[`ed25519`,`ecdsa_secp256k1`];throw Error(`${t} must use canonical family order`)}function Me(e,t){if(e.length!==t.length)return!1;for(let n=0;n<e.length;n+=1)if(e[n]!==t[n])return!1;return!0}function Ne(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ed25519`}function Pe(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ecdsa_secp256k1`}function Fe(e){return e.keyFamilies.length===2}function Ie(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ed25519`}function Le(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ecdsa_secp256k1`}function Re(e){return e.keyFamilies.length===2}function ze(e){if(Ie(e))return{keyFamilies:[`ed25519`],ed25519:X(i(e.ed25519),`materialActivations.ed25519`)};if(Le(e))return{keyFamilies:[`ecdsa_secp256k1`],ecdsa:X(i(e.ecdsa),`materialActivations.ecdsa`)};if(Re(e))return{keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:X(i(e.ed25519),`materialActivations.ed25519`),ecdsa:X(i(e.ecdsa),`materialActivations.ecdsa`)};throw Error(`wallet signer activation materials are unsupported`)}function W(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ed25519`}function G(e){return e.keyFamilies.length===1&&e.keyFamilies[0]===`ecdsa_secp256k1`}function K(e){return e.keyFamilies.length===2}function q(e,t){try{return p(e)}catch(e){throw Error(`${t} ${Q(e,`is invalid`)}`)}}function J(e,t){if(typeof e!=`number`||!Number.isSafeInteger(e)||e<0)throw Error(`${t} must be a non-negative safe integer`);return e}function Y(e,t){if(!Number.isSafeInteger(e)||e<0)throw Error(`${t} must be a non-negative safe integer`)}function X(e,t){if(e.ok)return e.value;throw Error(`${t} ${e.error.message}`)}function Z(e){return{ok:!1,error:{code:`invalid`,message:e}}}function Q(e,t){return e instanceof Error?e.message:t}function Be(e,t){throw Error(`${t} branch is unsupported: ${String(e)}`)}async function Ve(e,t,n){let r=await T(t),i={kind:`wallet_authority_v1`,authorityId:e.authorityId,walletId:e.walletId,principal:e.principal,provenance:e.provenance,permissions:e.permissions,signerActivations:t,signerActivationSetDigestB64u:r,authorityDigestB64u:e.authorityDigestB64u,revocationEpoch:e.revocationEpoch,createdAtMs:e.createdAtMs,updatedAtMs:Math.max(e.updatedAtMs,n),state:`active`,activatedAtMs:e.activatedAtMs};return be({...i,authorityDigestB64u:await k(i)})}async function He(e){if(e.ed25519.signer.walletId!==e.authority.walletId)throw Error(`NEAR signer belongs to a different wallet authority`);let t=e.authority.signerActivations.ecdsa,n=e.ed25519.signer,r=w({manifest:v([n,t.signer]),materialActivations:{keyFamilies:[`ed25519`,`ecdsa_secp256k1`],ed25519:e.ed25519.materialActivation,ecdsa:t.materialActivation}});if(!b(r))throw Error(`Deferred Ed25519 activation did not produce a combined signer activation set`);return Ve(e.authority,r,e.now)}function $(e,t){return e.authorityId===t.authorityId&&e.walletId===t.walletId&&e.revocationEpoch===t.revocationEpoch&&e.createdAtMs===t.createdAtMs&&e.activatedAtMs===t.activatedAtMs&&l(z(e.principal))===l(z(t.principal))&&l(B(e.provenance))===l(B(t.provenance))&&l(V(e.permissions))===l(V(t.permissions))}function Ue(e,t){return me(e)&&b(t.signerActivations)&&$(e,t)&&l(I(e.signerActivations.ed25519))===l(I(t.signerActivations.ed25519))}function We(e,t){return x(e)&&b(t.signerActivations)&&e.provenance.kind===`wallet_registration`&&$(e,t)&&l(L(e.signerActivations.ecdsa))===l(L(t.signerActivations.ecdsa))}export{x as a,b as c,Se as d,ge as f,y as g,A as h,He as i,Ue as l,we as m,T as n,me as o,ye as p,_e as r,he as s,k as t,We as u};