@seams/wallet 0.8.0 → 0.9.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +140 -254
- package/THIRD_PARTY_NOTICES.md +7 -1
- package/dist/.build-inputs.sha256 +1 -1
- package/dist/esm/SeamsWeb/SeamsWeb.js +98 -1825
- package/dist/esm/SeamsWeb/assembly/createWalletIframeRouter.js +4 -15
- package/dist/esm/SeamsWeb/index.js +2 -2
- package/dist/esm/SeamsWeb/operations/devices/scanDevice.js +3 -361
- package/dist/esm/SeamsWeb/operations/near/delegateAction.js +18 -106
- package/dist/esm/SeamsWeb/operations/recovery/walletRecovery.js +3 -3
- package/dist/esm/SeamsWeb/operations/recovery/walletRecoveryCommit.js +8 -209
- package/dist/esm/SeamsWeb/operations/recovery/walletRecoveryDurablePayload.js +5 -5
- package/dist/esm/SeamsWeb/operations/recovery/walletRecoveryJournal.js +2 -64
- package/dist/esm/SeamsWeb/operations/tempo/executeEvmFamilyTransaction.js +1 -1
- package/dist/esm/SeamsWeb/operations/tempo/index.js +1 -13
- package/dist/esm/SeamsWeb/publicApi/auth.js +3 -19
- package/dist/esm/SeamsWeb/publicApi/createPublicApi.js +59 -94
- package/dist/esm/SeamsWeb/publicApi/currentWallet.js +1 -1
- package/dist/esm/SeamsWeb/publicApi/devices.js +33 -64
- package/dist/esm/SeamsWeb/publicApi/evm.js +28 -93
- package/dist/esm/SeamsWeb/publicApi/keyExport.js +26 -52
- package/dist/esm/SeamsWeb/publicApi/near.js +140 -435
- package/dist/esm/SeamsWeb/publicApi/placement.js +206 -0
- package/dist/esm/SeamsWeb/publicApi/session.js +13 -0
- package/dist/esm/SeamsWeb/publicApi/tempo.js +64 -221
- package/dist/esm/SeamsWeb/publicApi/{awaitNearReady.js → waitForNearAccount.js} +12 -12
- package/dist/esm/SeamsWeb/walletIframe/client/deviceCommands.js +50 -0
- package/dist/esm/SeamsWeb/walletIframe/client/emailOtpCommands.js +25 -0
- package/dist/esm/SeamsWeb/walletIframe/client/evmFamilyCommands.js +118 -0
- package/dist/esm/SeamsWeb/walletIframe/client/inboundMessages.js +223 -0
- package/dist/esm/SeamsWeb/walletIframe/client/nearCommands.js +153 -0
- package/dist/esm/SeamsWeb/walletIframe/client/overlay/overlay-styles.js +2 -2
- package/dist/esm/SeamsWeb/walletIframe/client/placementCommands.js +65 -0
- package/dist/esm/SeamsWeb/walletIframe/client/preferenceState.js +93 -0
- package/dist/esm/SeamsWeb/walletIframe/client/preferences.js +117 -0
- package/dist/esm/SeamsWeb/walletIframe/client/registrationCommands.js +92 -0
- package/dist/esm/SeamsWeb/walletIframe/client/router.js +241 -583
- package/dist/esm/SeamsWeb/walletIframe/client/sessionCommands.js +61 -0
- package/dist/esm/SeamsWeb/walletIframe/coordinator.js +175 -134
- package/dist/esm/SeamsWeb/walletIframe/host/ui/auth-menu/AuthMenuSurface.js +13 -1
- package/dist/esm/SeamsWeb/walletIframe/host/ui/auth-menu/mountAuthMenuSurface.js +1 -1
- package/dist/esm/SeamsWeb/walletIframe/shared/configuration.js +37 -0
- package/dist/esm/SeamsWeb/walletIframe/shared/exactSessionState.js +31 -11
- package/dist/esm/SeamsWeb/walletIframe/shared/facadeBoundary.js +96 -0
- package/dist/esm/SeamsWeb/walletIframe/shared/messages.js +6 -32
- package/dist/esm/advanced.js +3 -3
- package/dist/esm/build-paths.js +0 -4
- package/dist/esm/core/accountData/near/accountProjection.js +3 -3
- package/dist/esm/core/accountData/near/keyMaterial.js +2 -2
- package/dist/esm/core/config/chains.js +1 -28
- package/dist/esm/core/config/configBuilder.js +3 -14
- package/dist/esm/core/config/defaultConfigs.js +4 -6
- package/dist/esm/core/{signingEngine/workerManager/ecdsaPresignLifecycle.js → config/presignatures.js} +2 -2
- package/dist/esm/core/diagnostics/registration.js +8 -0
- package/dist/esm/core/indexedDB/accountKeyMaterial.js +1 -1
- package/dist/esm/core/indexedDB/linkedAuthoritySignerMaterial.js +4 -125
- package/dist/esm/core/indexedDB/normalization.js +7 -1
- package/dist/esm/core/indexedDB/pendingWalletRecoveryCommit.js +1 -1
- package/dist/esm/core/indexedDB/pendingWalletRegistrationCommit.js +3 -41
- package/dist/esm/core/indexedDB/seamsWalletDB/accountSignerRows.js +261 -0
- package/dist/esm/core/indexedDB/seamsWalletDB/ecdsaCapabilityManifestLookups.js +2 -201
- package/dist/esm/core/indexedDB/seamsWalletDB/ecdsaCapabilityManifestRecords.js +5 -736
- package/dist/esm/core/indexedDB/seamsWalletDB/ecdsaCapabilityManifestStore.js +6 -1084
- package/dist/esm/core/indexedDB/seamsWalletDB/ecdsaClientPresignatures.js +20 -138
- package/dist/esm/core/indexedDB/seamsWalletDB/manager.js +100 -4
- package/dist/esm/core/indexedDB/seamsWalletDB/nonceLeaseRows.js +156 -0
- package/dist/esm/core/indexedDB/seamsWalletDB/registrationSetup.js +4 -11
- package/dist/esm/core/indexedDB/seamsWalletDB/repositories.js +91 -547
- package/dist/esm/core/indexedDB/seamsWalletDB/signerOutboxRows.js +90 -0
- package/dist/esm/core/indexedDB/seamsWalletDB/walletCustodyEcdsaContinuity.js +7 -92
- package/dist/esm/core/indexedDB/seamsWalletDB/walletOwnershipGeneration.js +43 -0
- package/dist/esm/core/indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js +103 -157
- package/dist/esm/core/indexedDB/unifiedIndexedDBManager.js +2 -1
- package/dist/esm/core/indexedDB/walletCustodyEd25519MaterialRecord.js +1 -1
- package/dist/esm/core/rpcClients/evm/nonceBackend.js +1 -176
- package/dist/esm/core/rpcClients/near/accountExists.js +34 -0
- package/dist/esm/core/rpcClients/relayer/ecdsaPrepareSession.js +42 -0
- package/dist/esm/core/rpcClients/relayer/relayerHttp.js +31 -1
- package/dist/esm/core/rpcClients/relayer/routerAbNormalSigning.js +47 -11
- package/dist/esm/core/rpcClients/relayer/walletRecoveryFinalize.js +2 -48
- package/dist/esm/core/rpcClients/relayer/walletRecoveryPrepare.js +9 -9
- package/dist/esm/core/rpcClients/relayer/walletRecoveryRotate.js +1 -223
- package/dist/esm/core/rpcClients/relayer/walletRegistration.js +36 -2197
- package/dist/esm/core/rpcClients/relayer/walletSessionAuthorizationStatus.js +145 -14
- package/dist/esm/core/signingEngine/chains/evm/evmAdapter.js +1 -1
- package/dist/esm/core/signingEngine/chains/near/display.js +1 -27
- package/dist/esm/core/signingEngine/chains/near/nearSignerWasm.js +2 -2
- package/dist/esm/core/signingEngine/flows/registration/accountLifecycle.js +6 -39
- package/dist/esm/core/signingEngine/flows/shared/signingConfirmation.js +2 -2
- package/dist/esm/core/signingEngine/flows/shared/signingStateMachine.js +1 -11
- package/dist/esm/core/signingEngine/flows/signEvmFamily/authPlanning.js +2 -2
- package/dist/esm/core/signingEngine/flows/signEvmFamily/ecdsaSelection.js +3 -3
- package/dist/esm/core/signingEngine/flows/signEvmFamily/emailOtpSigningSession.js +3 -136
- package/dist/esm/core/signingEngine/flows/signEvmFamily/freshWalletSessionRetry.js +1 -1
- package/dist/esm/core/signingEngine/flows/signEvmFamily/operationIds.js +1 -1
- package/dist/esm/core/signingEngine/flows/signEvmFamily/preparedSigning.js +2 -3
- package/dist/esm/core/signingEngine/flows/signEvmFamily/readySecp256k1Material.js +40 -5
- package/dist/esm/core/signingEngine/flows/signEvmFamily/signEvmFamily.js +4 -4
- package/dist/esm/core/signingEngine/flows/signEvmFamily/signers/ecdsaDerivationClientSigningMaterialSource.js +1 -1
- package/dist/esm/core/signingEngine/flows/signEvmFamily/signers/secp256k1.js +27 -53
- package/dist/esm/core/signingEngine/flows/signEvmFamily/signingFlow.js +5 -5
- package/dist/esm/core/signingEngine/flows/signEvmFamily/signingFlowRuntime.js +40 -33
- package/dist/esm/core/signingEngine/flows/signEvmFamily/thresholdAdmission.js +8 -2
- package/dist/esm/core/signingEngine/flows/signNear/implicitAccountFunding.js +1 -1
- package/dist/esm/core/signingEngine/flows/signNear/shared/ed25519YaoNormalSigning.js +177 -68
- package/dist/esm/core/signingEngine/flows/signNear/shared/implicitAccountFundingPort.js +1 -8
- package/dist/esm/core/signingEngine/flows/signNear/shared/operationStepUpPreparation.js +1 -38
- package/dist/esm/core/signingEngine/flows/signNear/shared/signatureOnlySigning.js +53 -8
- package/dist/esm/core/signingEngine/flows/signNear/signDelegate.js +5 -5
- package/dist/esm/core/signingEngine/flows/signNear/signNear.js +30 -44
- package/dist/esm/core/signingEngine/flows/signNear/signNep413.js +21 -12
- package/dist/esm/core/signingEngine/flows/signNear/signTransactions.js +59 -11
- package/dist/esm/core/signingEngine/interfaces/ecdsaChainTarget.js +1 -1
- package/dist/esm/core/signingEngine/nonce/nonceLaneKeys.js +1 -35
- package/dist/esm/core/signingEngine/nonce/nonceTypes.js +2 -26
- package/dist/esm/core/signingEngine/routerAb/ecdsaDerivation/httpRequest.js +4 -3
- package/dist/esm/core/signingEngine/routerAb/ecdsaDerivation/poolFillRoutes.js +5 -1
- package/dist/esm/core/signingEngine/routerAb/ecdsaDerivation/presignaturePool.js +112 -162
- package/dist/esm/core/signingEngine/routerAb/ecdsaDerivation/presignaturePoolPolicy.js +31 -0
- package/dist/esm/core/signingEngine/routerAb/ecdsaDerivation/signingMaterialRef.js +1 -1
- package/dist/esm/core/signingEngine/session/availability/availableSigningLanes.js +3 -913
- package/dist/esm/core/signingEngine/session/emailOtp/challengeDelivery.js +1 -45
- package/dist/esm/core/signingEngine/session/emailOtp/ecdsaSigningSessionAuthority.js +1 -81
- package/dist/esm/core/signingEngine/session/identity/clientSessionPersistenceState.js +1 -43
- package/dist/esm/core/signingEngine/session/identity/emailOtpEcdsaDerivationIdentity.js +1 -9
- package/dist/esm/core/signingEngine/session/identity/evmFamilyEcdsaIdentity.js +3 -125
- package/dist/esm/core/signingEngine/session/identity/exactSigningLaneIdentity.js +3 -19
- package/dist/esm/core/signingEngine/session/identity/laneIdentity.js +2 -106
- package/dist/esm/core/signingEngine/session/keyMaterialBrands.js +1 -1
- package/dist/esm/core/signingEngine/session/lifecycle/walletSessionFailure.js +1 -1
- package/dist/esm/core/signingEngine/session/material/activeEcdsaCapabilityRuntime.js +1 -114
- package/dist/esm/core/signingEngine/session/material/activeWalletAuthorityEcdsaRuntime.js +2 -2
- package/dist/esm/core/signingEngine/session/material/ecdsaCapabilityManifest.js +2 -187
- package/dist/esm/core/signingEngine/session/material/ecdsaRoleLocalMaterialResolver.js +2 -18
- package/dist/esm/core/signingEngine/session/material/ecdsaSigningCapability.js +2 -130
- package/dist/esm/core/signingEngine/session/material/linkedEcdsaHolderRuntime.js +1 -25
- package/dist/esm/core/signingEngine/session/material/nearEd25519YaoMaterialActivation.js +1 -73
- package/dist/esm/core/signingEngine/session/material/walletSigningStateFailure.js +1 -69
- package/dist/esm/core/signingEngine/session/operationState/preparedOperation.js +1 -5
- package/dist/esm/core/signingEngine/session/operationState/transactionState.js +0 -1
- package/dist/esm/core/signingEngine/session/passkey/prfCache.js +1 -5
- package/dist/esm/core/signingEngine/session/persistence/durableSealedSessionCommands.js +1 -9
- package/dist/esm/core/signingEngine/session/persistence/ecdsaRoleLocalRecords.js +3 -202
- package/dist/esm/core/signingEngine/session/persistence/sealedSessionRecords.js +4 -83
- package/dist/esm/core/signingEngine/session/persistence/sealedSessionStore.js +2 -2
- package/dist/esm/core/signingEngine/session/planning/planner.js +2 -13
- package/dist/esm/core/signingEngine/session/sealedRecovery/materialActivationKey.js +1 -8
- package/dist/esm/core/signingEngine/session/warmCapabilities/routerAbWalletSessionCredential.js +2 -1
- package/dist/esm/core/signingEngine/session/warmCapabilities/sealedRefreshParity.js +2 -41
- package/dist/esm/core/signingEngine/stepUpConfirmation/intentDigestPreparation.js +1 -14
- package/dist/esm/core/signingEngine/stepUpConfirmation/types.js +1 -7
- package/dist/esm/core/signingEngine/threshold/commitQueueShared.js +1 -127
- package/dist/esm/core/signingEngine/threshold/crypto/ecdsaDerivationClientWasm.js +3 -297
- package/dist/esm/core/signingEngine/threshold/ecdsa/operationStepUp.js +10 -24
- package/dist/esm/core/signingEngine/threshold/ed25519/walletSession.js +7 -209
- package/dist/esm/core/signingEngine/threshold/ed25519/yaoPublicCapabilityReferences.js +5 -208
- package/dist/esm/core/signingEngine/threshold/sessionPolicy.js +3 -9
- package/dist/esm/core/signingEngine/uiConfirm/nearFundingNotice.js +1 -17
- package/dist/esm/core/signingEngine/uiConfirm/ui/confirm-surface-resize.js +2 -173
- package/dist/esm/core/signingEngine/uiConfirm/ui/preact/ConfirmationContent.js +3 -3
- package/dist/esm/core/signingEngine/uiConfirm/ui/preact/ReviewDisclosure.js +2 -2
- package/dist/esm/core/signingEngine/uiConfirm/ui/preact/TransactionReceipt.js +1 -1
- package/dist/esm/core/signingEngine/uiConfirm/ui/preact/TransactionReview.js +5 -4
- package/dist/esm/core/signingEngine/uiConfirm/ui/preact/mountConfirmationSurface.js +2 -2
- package/dist/esm/core/signingEngine/uiConfirm/ui/surface-resize-events.js +1 -6
- package/dist/esm/core/signingEngine/uiConfirm/ui/transaction-display/abi/abiDecode.js +1 -1
- package/dist/esm/core/signingEngine/webauthnAuth/credentials/credentialExtensions.js +1 -19
- package/dist/esm/core/signingEngine/webauthnAuth/credentials/helpers.js +2 -170
- package/dist/esm/core/signingEngine/workerManager/ecdsaPresignPoolIdentity.js +27 -5
- package/dist/esm/core/signingEngine/workerManager/validation.js +1 -104
- package/dist/esm/core/signingEngine/workerManager/workerTypes.js +1 -33
- package/dist/esm/core/types/rpc.js +1 -4
- package/dist/esm/core/types/sdkSentEvents.js +1 -24
- package/dist/esm/core/walletRuntimePaths/base.js +1 -28
- package/dist/esm/externalEvm/controller.js +7 -7
- package/dist/esm/index.js +8 -7
- package/dist/esm/react/components/AccountMenuButton/AuthenticationMethodsModal.js +9 -9
- package/dist/esm/react/components/AccountMenuButton/LinkedDevicesModal.css +1 -2
- package/dist/esm/react/components/AccountMenuButton/LinkedDevicesModal.js +9 -185
- package/dist/esm/react/components/AccountMenuButton/WalletRegionSection.js +303 -0
- package/dist/esm/react/components/AccountMenuButton/WalletSettingsLayout.js +31 -5
- package/dist/esm/react/components/AccountMenuButton/index.js +21 -13
- package/dist/esm/react/components/AccountMenuButton/types.js +2 -1
- package/dist/esm/react/components/HostedSeamsAuthMenu/shell.js +5 -17
- package/dist/esm/react/components/QRCodeScanner.js +5 -5
- package/dist/esm/react/components/ShowQRCode.js +13 -13
- package/dist/esm/react/context/SeamsWebProvider.js +1 -2
- package/dist/esm/react/context/index.js +8 -10
- package/dist/esm/react/context/seamsManagerSingleton.js +1 -1
- package/dist/esm/react/context/useLoginStateRefresher.js +10 -13
- package/dist/esm/react/context/useNearProvisioningStateRefresh.js +3 -3
- package/dist/esm/react/context/useSeamsContextValue.js +33 -81
- package/dist/esm/react/context/useSeamsWithSdkFlow.js +22 -51
- package/dist/esm/react/context/useWalletIframeLifecycle.js +20 -110
- package/dist/esm/react/hooks/useAccountInput.js +10 -13
- package/dist/esm/react/hooks/useDeviceLinking.js +1 -1
- package/dist/esm/react/hooks/useNearClient.js +1 -1
- package/dist/esm/react/hooks/useQRCamera.js +2 -8
- package/dist/esm/react/hooks/useWallet.js +5 -6
- package/dist/esm/react/hooks/useWalletAuth.js +3 -4
- package/dist/esm/react/hooks/useWalletDevices.js +2 -2
- package/dist/esm/react/index.js +4 -4
- package/dist/esm/react/transactionReview/TransactionReviewHost.js +1 -1
- package/dist/esm/react/transactionReview/boundCalls.js +5 -39
- package/dist/esm/react/transactionReview/controller.js +3 -4
- package/dist/esm/react/transactionReview/snapshot.js +1 -1
- package/dist/esm/react/utils/walletIframe.js +11 -52
- package/dist/esm/sdk/{ConfirmationDrawer-DrsREojk.js → ConfirmationDrawer-DY0_yeUV.js} +1 -1
- package/dist/esm/sdk/NonceCoordinator-CFFq8-Q9.js +1 -0
- package/dist/esm/sdk/accountLifecycle-CAMVowDl.js +1 -0
- package/dist/esm/sdk/activeWalletSession-DiZcKjB_.js +1 -0
- package/dist/esm/sdk/adapters-DdDOQzl4.js +2 -0
- package/dist/esm/sdk/appearance-ZGVLwA4N.js +1 -0
- package/dist/esm/sdk/authenticatorOptions-DMLnDWT2.js +1 -0
- package/dist/esm/sdk/authorizationAdmission-Ckx6q6tp.js +1 -0
- package/dist/esm/sdk/bytes-BBYkulRB.js +1 -0
- package/dist/esm/sdk/canonicalPrimitives-CKPGgpxg.js +1 -0
- package/dist/esm/sdk/canonicalSignerErrorCode-DEHsPxNm.js +1 -0
- package/dist/esm/sdk/{capabilityKinds-XaXXiD2B.js → capabilityKinds-CKQ4Uqnv.js} +1 -1
- package/dist/esm/sdk/chains-CiYQT1K4.js +1 -0
- package/dist/esm/sdk/challengeDelivery-DxXAkOfS.js +1 -0
- package/dist/esm/sdk/clientSessionPersistenceState-CImFWDj6.js +1 -0
- package/dist/esm/sdk/commitQueue-iBNUt9Bz.js +1 -0
- package/dist/esm/sdk/configBuilder-ZiZwFKt4.js +1 -0
- package/dist/esm/sdk/configHelpers-D8Ivi6p8.js +1 -0
- package/dist/esm/sdk/digestEncoding-Dzc1rzWV.js +1 -0
- package/dist/esm/sdk/display-ClqZq-Xt.js +1 -0
- package/dist/esm/sdk/ecdsaCapabilityManifest-BlzJAQF8.js +1 -0
- package/dist/{public/sdk/ecdsaChainTarget-CRcRR78w.js → esm/sdk/ecdsaChainTarget-C8ZtMZ8l.js} +1 -1
- package/dist/esm/sdk/ecdsaDerivationClientWasm-CVeNEou2.js +1 -0
- package/dist/esm/sdk/ecdsaDerivationExport-BZFHSMCv.js +1 -0
- package/dist/esm/sdk/{ecdsaWalletRecords-Cm1DdexN.js → ecdsaWalletRecords-D4WeYc7H.js} +1 -1
- package/dist/esm/sdk/emailOtpEcdsaDerivationIdentity-B8HzTh4T.js +1 -0
- package/dist/esm/sdk/enrichDisplayModelWithAbi-69bNckvi.js +1 -0
- package/dist/esm/sdk/{evmCryptoWasm-CwEXiLrC.js → evmCryptoWasm-BXsIyRon.js} +1 -1
- package/dist/esm/sdk/export-viewer-host-CsFeiIhd.js +1 -0
- package/dist/esm/sdk/exportKeypairOperation-DGQIYML3.js +1 -0
- package/dist/esm/sdk/helpers-Ddy72ULN.js +1 -0
- package/dist/esm/sdk/host-c1__wJwz.js +1 -0
- package/dist/esm/sdk/intentDigest-CE-tLw87.js +1 -0
- package/dist/esm/sdk/jsxRuntime.module-BcZNe_OA.js +2 -0
- package/dist/esm/sdk/lanes-DnBwWv4l.js +1 -0
- package/dist/esm/sdk/localOnly-ClCo6602.js +1 -0
- package/dist/esm/sdk/messages-vxz27Way.js +1 -0
- package/dist/esm/sdk/mountExportPrivateKeySurface-CBZ0wRYj.js +1 -0
- package/dist/{public/sdk/mountRecoveryCodeBackupSurface-BBCTaQsu.js → esm/sdk/mountRecoveryCodeBackupSurface-B1qhFF6G.js} +2 -2
- package/dist/esm/sdk/nearEd25519YaoMaterialActivation-fWQI3rYj.js +1 -0
- package/dist/esm/sdk/nearEd25519YaoSigningPreparation-B0d1AG3u.js +1 -0
- package/dist/{public/sdk/nonceLaneKeys-BBYi4g51.js → esm/sdk/nonceLaneKeys-Fkvk2UPy.js} +1 -1
- package/dist/esm/sdk/normalization-CpLZcL2f.js +1 -0
- package/dist/esm/sdk/normalization-DCvuCvh0.js +1 -0
- package/dist/esm/sdk/normalize-kUDm5zfS.js +1 -0
- package/dist/esm/sdk/{operationFingerprint-DtQb0pdp.js → operationFingerprint-CTR9G1NT.js} +1 -1
- package/dist/esm/sdk/passkey-custody-BQj44jEM.js +1 -0
- package/dist/esm/sdk/pendingWalletRecoveryCodeBackup-yJN8VAHn.js +1 -0
- package/dist/esm/sdk/presignaturePool-DwlTReFO.js +1 -0
- package/dist/esm/sdk/presignatures-DB2IPD-A.js +1 -0
- package/dist/esm/sdk/{prfCache-Mbo7_USg.js → prfCache-BMpqZZ-v.js} +1 -1
- package/dist/esm/sdk/primitives-CAcl7ON7.js +1 -0
- package/dist/esm/sdk/promptText-D2f5Rg0h.js +1 -0
- package/dist/esm/sdk/recovery-entrypoint-Bl5GgbW9.js +1 -0
- package/dist/esm/sdk/registration-C4sALQZO.js +1 -0
- package/dist/esm/sdk/registration-CEqVAgNJ.js +1 -0
- package/dist/esm/sdk/{registrationAccounts-DIeEVy6W.js → registrationAccounts-D4RVetMz.js} +1 -1
- package/dist/esm/sdk/registrationAuthMethodInput-6ccY2Vuh.js +1 -0
- package/dist/esm/sdk/registrationIds-CdPqm-Ya.js +1 -0
- package/dist/esm/sdk/registrationIntent-DOkZcKSP.js +1 -0
- package/dist/esm/sdk/registrationSignerPlan-B9GCvpTV.js +1 -0
- package/dist/esm/sdk/requireStepUpAuth-DCVqmeee.js +1 -0
- package/dist/esm/sdk/routerAbNormalSigning-BG75eyI2.js +1 -0
- package/dist/esm/sdk/router_ab_ed25519_yao_client_bg.wasm +0 -0
- package/dist/esm/sdk/runtime-auth-BKFyLISf.js +1 -0
- package/dist/esm/sdk/runtime-device-link-ENxdEXQW.js +1 -0
- package/dist/esm/sdk/runtime-ecdsa-tempo-DhGEb9U7.js +1 -0
- package/dist/esm/sdk/runtime-email-otp-dgsP7XZi.js +1 -0
- package/dist/esm/sdk/runtime-export-D2RCm5Gk.js +1 -0
- package/dist/esm/sdk/runtime-near-Bf-9MFBQ.js +1 -0
- package/dist/esm/sdk/runtime-preferences-LQ8SPE7o.js +1 -0
- package/dist/esm/sdk/runtime-recovery-BuEzJzuZ.js +1 -0
- package/dist/esm/sdk/runtime-recovery-codes-BZMiAR_5.js +1 -0
- package/dist/esm/sdk/sdkSentEvents-D3q1h-Uo.js +1 -0
- package/dist/esm/sdk/secp256k1-DSLttQND.js +1 -0
- package/dist/esm/sdk/{secureRandomId-CTdlJ5Mx.js → secureRandomId-BIekT8bE.js} +1 -1
- package/dist/esm/sdk/sessionPolicy-J-RrlPZQ.js +1 -0
- package/dist/esm/sdk/shared-8ffIBYw2.js +6 -0
- package/dist/esm/sdk/signEvmFamily-KUNWKVeh.js +1 -0
- package/dist/esm/sdk/{signEvmFamilyWithUiConfirmForTempo-DgTbh6jX.js → signEvmFamilyWithUiConfirmForTempo-Dc57bJ3V.js} +1 -1
- package/dist/esm/sdk/{signEvmWithUiConfirm-ChreN7aZ.js → signEvmWithUiConfirm-CqxL7UbT.js} +1 -1
- package/dist/esm/sdk/signNear-BhTkDm2-.js +1 -0
- package/dist/esm/sdk/{signatureUses-CQkkUcwT.js → signatureUses-CjJ233KX.js} +1 -1
- package/dist/esm/sdk/signerDomain-vQmlnsbF.js +1 -0
- package/dist/esm/sdk/signingFlow-vrXxrhlG.js +2 -0
- package/dist/esm/sdk/signingQueue-BrGJXBqe.js +1 -0
- package/dist/esm/sdk/{signingSessionSeal-Mr2Xp44o.js → signingSessionSeal-CDLUmAFY.js} +1 -1
- package/dist/esm/sdk/singletons-8UH3gOnZ.js +1 -0
- package/dist/esm/sdk/theme-_AUTWLS_.js +1 -0
- package/dist/esm/sdk/thresholdEcdsa-CO7xo1So.js +1 -0
- package/dist/esm/sdk/trace-BvbCxdXF.js +1 -0
- package/dist/esm/sdk/transaction-activity-D40ih2j-.js +1 -0
- package/dist/esm/sdk/transactionReviewAdmission-C-a3ctCJ.js +1 -0
- package/dist/esm/sdk/transactionState-DVinJk4K.js +1 -0
- package/dist/esm/sdk/tx-confirm-ui.js +7 -11
- package/dist/esm/sdk/{promptText-s8TQ6ckX.js → types-BNUuaUtl.js} +1 -1
- package/dist/esm/sdk/{types-M7vxrYtJ.js → types-D3GM-uHR.js} +1 -1
- package/dist/esm/sdk/wallet-iframe-host-ecdsa.js +1 -1
- package/dist/esm/sdk/wallet-iframe-host-full.js +1 -1
- package/dist/esm/sdk/wallet-iframe-host-near.js +1 -1
- package/dist/esm/sdk/wallet-iframe-host-runtime.js +1 -1
- package/dist/esm/sdk/wallet-recovery-C1kesLCF.js +1 -0
- package/dist/esm/sdk/wallet-ui.css +1 -1
- package/dist/esm/sdk/walletAuthMethodRecord-CXedSgpV.js +1 -0
- package/dist/esm/sdk/walletAuthority-B5hXHWpK.js +1 -0
- package/dist/esm/sdk/walletCustodyEcdsaContinuity-abNZ_dvX.js +1 -0
- package/dist/esm/sdk/{walletIframeIdentity-C0b0XMQF.js → walletIframeIdentity-DJ0KOBHg.js} +1 -1
- package/dist/esm/sdk/walletOwnershipGeneration-DoXVMDWe.js +1 -0
- package/dist/esm/sdk/walletRecoveryCommit-Cc9AqHr0.js +1 -0
- package/dist/esm/sdk/walletRecoveryRotate-DWTAFYiv.js +1 -0
- package/dist/esm/sdk/walletSessionAuthorizationProjection-DWBksIJR.js +1 -0
- package/dist/esm/sdk/walletSessionAuthorizationStatus-o1VgsLhA.js +1 -0
- package/dist/esm/sdk/walletSessionAuthorizationStore-gEYPmu-G.js +1 -0
- package/dist/esm/sdk/walletSessionFailure-Bu4VPKTz.js +1 -0
- package/dist/esm/sdk/warmSessionHydration-DgjuUacN.js +1 -0
- package/dist/esm/sdk/{webauthnP256-qu06GNFm.js → webauthnP256-BEz4DEAs.js} +1 -1
- package/dist/esm/sdk/{webauthnPromptCoordinator-DO-qfECu.js → webauthnPromptCoordinator-BEudHQBr.js} +1 -1
- package/dist/esm/shared-ts/src/authorization/capabilityKinds.js +1 -7
- package/dist/esm/shared-ts/src/authorization/delegatedAuthority.js +2 -20
- package/dist/esm/shared-ts/src/authorization/index.js +1 -2
- package/dist/esm/shared-ts/src/authorization/operationFingerprint.js +1 -20
- package/dist/esm/shared-ts/src/authorization/walletAuthority.js +4 -51
- package/dist/esm/shared-ts/src/authorization/walletSessionIssuance.js +1 -112
- package/dist/esm/shared-ts/src/device-linking/activeWalletSession.js +13 -3
- package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +6 -116
- package/dist/esm/shared-ts/src/device-linking/committedSignerPackages.js +3 -270
- package/dist/esm/shared-ts/src/device-linking/delegatedActivationPlan.js +2 -2
- package/dist/esm/shared-ts/src/device-linking/deviceManagement.js +1 -12
- package/dist/esm/shared-ts/src/device-linking/digests.js +1 -109
- package/dist/esm/shared-ts/src/device-linking/index.js +0 -2
- package/dist/esm/shared-ts/src/device-linking/parsers.js +7 -921
- package/dist/esm/shared-ts/src/device-linking/requestProof.js +1 -19
- package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +5 -358
- package/dist/esm/shared-ts/src/device-linking/walletSessionCredentialDelivery.js +1 -172
- package/dist/esm/shared-ts/src/device-linking/wireFields.js +4 -5
- package/dist/esm/shared-ts/src/near/actions.js +1 -13
- package/dist/esm/shared-ts/src/near/nearClient.js +1 -1
- package/dist/esm/shared-ts/src/passkey-custody/custodyEnvelope.js +3 -59
- package/dist/esm/shared-ts/src/passkey-custody/custodySecretBinding.js +4 -8
- package/dist/esm/shared-ts/src/passkey-custody/index.js +0 -1
- package/dist/esm/shared-ts/src/signing-lanes/index.js +0 -1
- package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +0 -59
- package/dist/esm/shared-ts/src/threshold/ed25519OperationFingerprint.js +1 -1
- package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +1 -4
- package/dist/esm/shared-ts/src/threshold/participants.js +1 -2
- package/dist/esm/shared-ts/src/threshold/signingRootScope.js +1 -4
- package/dist/esm/shared-ts/src/utils/authenticatorOptions.js +1 -12
- package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +2 -5
- package/dist/esm/shared-ts/src/utils/domainIds.js +1 -7
- package/dist/esm/shared-ts/src/utils/ecdsaCapabilityActivation.js +1 -16
- package/dist/esm/shared-ts/src/utils/ecdsaServerTiming.js +6 -1
- package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +1 -23
- package/dist/esm/shared-ts/src/utils/emailOtpRecoveryKey.js +1 -42
- package/dist/esm/shared-ts/src/utils/errors.js +1 -43
- package/dist/esm/shared-ts/src/utils/index.js +18 -22
- package/dist/esm/shared-ts/src/utils/near.js +2 -74
- package/dist/esm/shared-ts/src/utils/normalize.js +1 -22
- package/dist/esm/shared-ts/src/utils/registrationAuthMethodInput.js +1 -74
- package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +6 -275
- package/dist/esm/shared-ts/src/utils/registrationIds.js +1 -203
- package/dist/esm/shared-ts/src/utils/registrationIntent.js +1 -389
- package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +2 -434
- package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +6 -414
- package/dist/esm/shared-ts/src/utils/routerAbEd25519Yao.js +1 -334
- package/dist/esm/shared-ts/src/utils/routerAbEd25519YaoDigests.js +2 -40
- package/dist/esm/shared-ts/src/utils/routerAbNormalSigningIdentity.js +1 -1
- package/dist/esm/shared-ts/src/utils/signingSessionSeal.js +1 -6
- package/dist/esm/shared-ts/src/utils/thresholdEcdsaKeyHandle.js +1 -6
- package/dist/esm/shared-ts/src/utils/validation.js +2 -17
- package/dist/esm/shared-ts/src/utils/walletAuthAuthority.js +1 -28
- package/dist/esm/shared-ts/src/utils/walletAuthMethodRecord.js +1 -11
- package/dist/esm/shared-ts/src/utils/walletCapabilityBindings.js +1 -7
- package/dist/esm/shared-ts/src/wallet-recovery/index.js +3 -5
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeIssuance.js +1 -35
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +0 -32
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeReservation.js +1 -15
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryKeyId.js +0 -11
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js +1 -1
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.js +2 -42
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.js +3 -53
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryRotation.js +2 -63
- package/dist/esm/threshold.js +1 -1
- package/dist/esm/utils/intentDigest.js +1 -4
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
- package/dist/esm/wasm/router_ab_ecdsa_client/pkg/router_ab_ecdsa_client_bg.wasm +0 -0
- package/dist/esm/wasm/router_ab_ed25519_yao_client/pkg/router_ab_ed25519_yao_client_bg.wasm +0 -0
- package/dist/public/headers.manifest.json +1 -1
- package/dist/public/sdk/{ConfirmationDrawer-DrsREojk.js → ConfirmationDrawer-DY0_yeUV.js} +1 -1
- package/dist/public/sdk/NonceCoordinator-CFFq8-Q9.js +1 -0
- package/dist/public/sdk/accountLifecycle-CAMVowDl.js +1 -0
- package/dist/public/sdk/activeWalletSession-DiZcKjB_.js +1 -0
- package/dist/public/sdk/adapters-DdDOQzl4.js +2 -0
- package/dist/public/sdk/appearance-ZGVLwA4N.js +1 -0
- package/dist/public/sdk/authenticatorOptions-DMLnDWT2.js +1 -0
- package/dist/public/sdk/authorizationAdmission-Ckx6q6tp.js +1 -0
- package/dist/public/sdk/bytes-BBYkulRB.js +1 -0
- package/dist/public/sdk/canonicalPrimitives-CKPGgpxg.js +1 -0
- package/dist/public/sdk/canonicalSignerErrorCode-DEHsPxNm.js +1 -0
- package/dist/public/sdk/{capabilityKinds-XaXXiD2B.js → capabilityKinds-CKQ4Uqnv.js} +1 -1
- package/dist/public/sdk/chains-CiYQT1K4.js +1 -0
- package/dist/public/sdk/challengeDelivery-DxXAkOfS.js +1 -0
- package/dist/public/sdk/clientSessionPersistenceState-CImFWDj6.js +1 -0
- package/dist/public/sdk/commitQueue-iBNUt9Bz.js +1 -0
- package/dist/public/sdk/configBuilder-ZiZwFKt4.js +1 -0
- package/dist/public/sdk/configHelpers-D8Ivi6p8.js +1 -0
- package/dist/public/sdk/digestEncoding-Dzc1rzWV.js +1 -0
- package/dist/public/sdk/display-ClqZq-Xt.js +1 -0
- package/dist/public/sdk/ecdsaCapabilityManifest-BlzJAQF8.js +1 -0
- package/dist/{esm/sdk/ecdsaChainTarget-CRcRR78w.js → public/sdk/ecdsaChainTarget-C8ZtMZ8l.js} +1 -1
- package/dist/public/sdk/ecdsaDerivationClientWasm-CVeNEou2.js +1 -0
- package/dist/public/sdk/ecdsaDerivationExport-BZFHSMCv.js +1 -0
- package/dist/public/sdk/{ecdsaWalletRecords-Cm1DdexN.js → ecdsaWalletRecords-D4WeYc7H.js} +1 -1
- package/dist/public/sdk/emailOtpEcdsaDerivationIdentity-B8HzTh4T.js +1 -0
- package/dist/public/sdk/enrichDisplayModelWithAbi-69bNckvi.js +1 -0
- package/dist/public/sdk/{evmCryptoWasm-CwEXiLrC.js → evmCryptoWasm-BXsIyRon.js} +1 -1
- package/dist/public/sdk/export-viewer-host-CsFeiIhd.js +1 -0
- package/dist/public/sdk/exportKeypairOperation-DGQIYML3.js +1 -0
- package/dist/public/sdk/helpers-Ddy72ULN.js +1 -0
- package/dist/public/sdk/host-c1__wJwz.js +1 -0
- package/dist/public/sdk/intentDigest-CE-tLw87.js +1 -0
- package/dist/public/sdk/jsxRuntime.module-BcZNe_OA.js +2 -0
- package/dist/public/sdk/lanes-DnBwWv4l.js +1 -0
- package/dist/public/sdk/localOnly-ClCo6602.js +1 -0
- package/dist/public/sdk/messages-vxz27Way.js +1 -0
- package/dist/public/sdk/mountExportPrivateKeySurface-CBZ0wRYj.js +1 -0
- package/dist/{esm/sdk/mountRecoveryCodeBackupSurface-BBCTaQsu.js → public/sdk/mountRecoveryCodeBackupSurface-B1qhFF6G.js} +2 -2
- package/dist/public/sdk/nearEd25519YaoMaterialActivation-fWQI3rYj.js +1 -0
- package/dist/public/sdk/nearEd25519YaoSigningPreparation-B0d1AG3u.js +1 -0
- package/dist/{esm/sdk/nonceLaneKeys-BBYi4g51.js → public/sdk/nonceLaneKeys-Fkvk2UPy.js} +1 -1
- package/dist/public/sdk/normalization-CpLZcL2f.js +1 -0
- package/dist/public/sdk/normalization-DCvuCvh0.js +1 -0
- package/dist/public/sdk/normalize-kUDm5zfS.js +1 -0
- package/dist/public/sdk/{operationFingerprint-DtQb0pdp.js → operationFingerprint-CTR9G1NT.js} +1 -1
- package/dist/public/sdk/passkey-custody-BQj44jEM.js +1 -0
- package/dist/public/sdk/pendingWalletRecoveryCodeBackup-yJN8VAHn.js +1 -0
- package/dist/public/sdk/presignaturePool-DwlTReFO.js +1 -0
- package/dist/public/sdk/presignatures-DB2IPD-A.js +1 -0
- package/dist/public/sdk/{prfCache-Mbo7_USg.js → prfCache-BMpqZZ-v.js} +1 -1
- package/dist/public/sdk/primitives-CAcl7ON7.js +1 -0
- package/dist/public/sdk/promptText-D2f5Rg0h.js +1 -0
- package/dist/public/sdk/recovery-entrypoint-Bl5GgbW9.js +1 -0
- package/dist/public/sdk/registration-C4sALQZO.js +1 -0
- package/dist/public/sdk/registration-CEqVAgNJ.js +1 -0
- package/dist/public/sdk/{registrationAccounts-DIeEVy6W.js → registrationAccounts-D4RVetMz.js} +1 -1
- package/dist/public/sdk/registrationAuthMethodInput-6ccY2Vuh.js +1 -0
- package/dist/public/sdk/registrationIds-CdPqm-Ya.js +1 -0
- package/dist/public/sdk/registrationIntent-DOkZcKSP.js +1 -0
- package/dist/public/sdk/registrationSignerPlan-B9GCvpTV.js +1 -0
- package/dist/public/sdk/requireStepUpAuth-DCVqmeee.js +1 -0
- package/dist/public/sdk/routerAbNormalSigning-BG75eyI2.js +1 -0
- package/dist/public/sdk/router_ab_ed25519_yao_client_bg.wasm +0 -0
- package/dist/public/sdk/runtime-auth-BKFyLISf.js +1 -0
- package/dist/public/sdk/runtime-device-link-ENxdEXQW.js +1 -0
- package/dist/public/sdk/runtime-ecdsa-tempo-DhGEb9U7.js +1 -0
- package/dist/public/sdk/runtime-email-otp-dgsP7XZi.js +1 -0
- package/dist/public/sdk/runtime-export-D2RCm5Gk.js +1 -0
- package/dist/public/sdk/runtime-near-Bf-9MFBQ.js +1 -0
- package/dist/public/sdk/runtime-preferences-LQ8SPE7o.js +1 -0
- package/dist/public/sdk/runtime-recovery-BuEzJzuZ.js +1 -0
- package/dist/public/sdk/runtime-recovery-codes-BZMiAR_5.js +1 -0
- package/dist/public/sdk/sdkSentEvents-D3q1h-Uo.js +1 -0
- package/dist/public/sdk/secp256k1-DSLttQND.js +1 -0
- package/dist/public/sdk/{secureRandomId-CTdlJ5Mx.js → secureRandomId-BIekT8bE.js} +1 -1
- package/dist/public/sdk/sessionPolicy-J-RrlPZQ.js +1 -0
- package/dist/public/sdk/shared-8ffIBYw2.js +6 -0
- package/dist/public/sdk/signEvmFamily-KUNWKVeh.js +1 -0
- package/dist/public/sdk/{signEvmFamilyWithUiConfirmForTempo-DgTbh6jX.js → signEvmFamilyWithUiConfirmForTempo-Dc57bJ3V.js} +1 -1
- package/dist/public/sdk/{signEvmWithUiConfirm-ChreN7aZ.js → signEvmWithUiConfirm-CqxL7UbT.js} +1 -1
- package/dist/public/sdk/signNear-BhTkDm2-.js +1 -0
- package/dist/public/sdk/{signatureUses-CQkkUcwT.js → signatureUses-CjJ233KX.js} +1 -1
- package/dist/public/sdk/signerDomain-vQmlnsbF.js +1 -0
- package/dist/public/sdk/signingFlow-vrXxrhlG.js +2 -0
- package/dist/public/sdk/signingQueue-BrGJXBqe.js +1 -0
- package/dist/public/sdk/{signingSessionSeal-Mr2Xp44o.js → signingSessionSeal-CDLUmAFY.js} +1 -1
- package/dist/public/sdk/singletons-8UH3gOnZ.js +1 -0
- package/dist/public/sdk/theme-_AUTWLS_.js +1 -0
- package/dist/public/sdk/thresholdEcdsa-CO7xo1So.js +1 -0
- package/dist/public/sdk/trace-BvbCxdXF.js +1 -0
- package/dist/public/sdk/transaction-activity-D40ih2j-.js +1 -0
- package/dist/public/sdk/transactionReviewAdmission-C-a3ctCJ.js +1 -0
- package/dist/public/sdk/transactionState-DVinJk4K.js +1 -0
- package/dist/public/sdk/tx-confirm-ui.js +7 -11
- package/dist/public/sdk/{promptText-s8TQ6ckX.js → types-BNUuaUtl.js} +1 -1
- package/dist/public/sdk/{types-M7vxrYtJ.js → types-D3GM-uHR.js} +1 -1
- package/dist/public/sdk/wallet-iframe-host-ecdsa.js +1 -1
- package/dist/public/sdk/wallet-iframe-host-full.js +1 -1
- package/dist/public/sdk/wallet-iframe-host-near.js +1 -1
- package/dist/public/sdk/wallet-iframe-host-runtime.js +1 -1
- package/dist/public/sdk/wallet-recovery-C1kesLCF.js +1 -0
- package/dist/public/sdk/wallet-ui.css +1 -1
- package/dist/public/sdk/walletAuthMethodRecord-CXedSgpV.js +1 -0
- package/dist/public/sdk/walletAuthority-B5hXHWpK.js +1 -0
- package/dist/public/sdk/walletCustodyEcdsaContinuity-abNZ_dvX.js +1 -0
- package/dist/public/sdk/{walletIframeIdentity-C0b0XMQF.js → walletIframeIdentity-DJ0KOBHg.js} +1 -1
- package/dist/public/sdk/walletOwnershipGeneration-DoXVMDWe.js +1 -0
- package/dist/public/sdk/walletRecoveryCommit-Cc9AqHr0.js +1 -0
- package/dist/public/sdk/walletRecoveryRotate-DWTAFYiv.js +1 -0
- package/dist/public/sdk/walletSessionAuthorizationProjection-DWBksIJR.js +1 -0
- package/dist/public/sdk/walletSessionAuthorizationStatus-o1VgsLhA.js +1 -0
- package/dist/public/sdk/walletSessionAuthorizationStore-gEYPmu-G.js +1 -0
- package/dist/public/sdk/walletSessionFailure-Bu4VPKTz.js +1 -0
- package/dist/public/sdk/warmSessionHydration-DgjuUacN.js +1 -0
- package/dist/public/sdk/{webauthnP256-qu06GNFm.js → webauthnP256-BEz4DEAs.js} +1 -1
- package/dist/public/sdk/{webauthnPromptCoordinator-DO-qfECu.js → webauthnPromptCoordinator-BEudHQBr.js} +1 -1
- package/dist/public/sdk/workers/device-linking-key.worker.js +18 -0
- package/dist/public/sdk/workers/ecdsa-derivation-client.worker.js +1490 -1268
- package/dist/public/sdk/workers/ecdsa-online-client.worker.js +96 -0
- package/dist/public/sdk/workers/ecdsa-presign-client.worker.js +101 -1
- package/dist/public/sdk/workers/email-otp.worker.js +267 -237
- package/dist/public/sdk/workers/evm-crypto.worker.js +12 -8
- package/dist/public/sdk/workers/passkey-mpc-export.worker.js +30 -1
- package/dist/public/sdk/workers/router_ab_ecdsa_client_bg.wasm +0 -0
- package/dist/public/sdk/workers/router_ab_ed25519_yao_client_bg.wasm +0 -0
- package/dist/public/sdk/workers/shamir3pass.worker.js +10 -8
- package/dist/public/sdk/workers/tempo-signer.worker.js +12 -8
- package/dist/public/sdk/workers/wallet-custody-ceremony.worker.js +3 -1
- package/dist/public/sdk/workers/wallet_custody_ceremony_bg.wasm +0 -0
- package/dist/public/sdk/workers/wasm_signer_worker_bg.wasm +0 -0
- package/dist/public/wallet-assets.manifest.json +391 -295
- package/dist/public/wallet-service/index.html +4 -4
- package/dist/types/shared-ts/src/device-linking/activeWalletSession.d.ts +2 -1
- package/dist/types/shared-ts/src/device-linking/contracts.d.ts +10 -0
- package/dist/types/shared-ts/src/threshold/ed25519OperationFingerprint.d.ts +2 -1
- package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +3 -1
- package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts +0 -9
- package/dist/types/shared-ts/src/utils/walletManagementProtocol.d.ts +1 -1
- package/dist/types/wallet/build-paths.d.ts +0 -4
- package/dist/types/wallet/src/SeamsWeb/SeamsWeb.d.ts +26 -146
- package/dist/types/wallet/src/SeamsWeb/assembly/browserSigningSurfaceAssembly.d.ts +7 -6
- package/dist/types/wallet/src/SeamsWeb/assembly/browserSigningSurfacePorts.d.ts +2 -4
- package/dist/types/wallet/src/SeamsWeb/assembly/createWalletIframeRouter.d.ts +2 -2
- package/dist/types/wallet/src/SeamsWeb/assembly/initializeBrowserSigningRuntime.d.ts +0 -2
- package/dist/types/wallet/src/SeamsWeb/index.d.ts +1 -1
- package/dist/types/wallet/src/SeamsWeb/operations/auth/login.d.ts +2 -8
- package/dist/types/wallet/src/SeamsWeb/operations/auth/unlockCompletion.d.ts +26 -0
- package/dist/types/wallet/src/SeamsWeb/operations/auth/unlockPendingRegistration.d.ts +14 -0
- package/dist/types/wallet/src/SeamsWeb/operations/auth/unlockSessionPolicy.d.ts +16 -0
- package/dist/types/wallet/src/SeamsWeb/operations/authMethods/emailOtp/challenge.d.ts +2 -2
- package/dist/types/wallet/src/SeamsWeb/operations/authMethods/emailOtp/googleEmailOtpWalletAuthFlow.d.ts +3 -2
- package/dist/types/wallet/src/SeamsWeb/operations/authMethods/revokeAuthMethod.d.ts +17 -1
- package/dist/types/wallet/src/SeamsWeb/operations/devices/linkDevice.d.ts +0 -7
- package/dist/types/wallet/src/SeamsWeb/operations/devices/walletHostComposition.d.ts +2 -0
- package/dist/types/wallet/src/SeamsWeb/operations/near/actions.d.ts +4 -21
- package/dist/types/wallet/src/SeamsWeb/operations/near/delegateAction.d.ts +4 -14
- package/dist/types/wallet/src/SeamsWeb/operations/near/signDelegateAction.d.ts +14 -0
- package/dist/types/wallet/src/SeamsWeb/operations/near/signNEP413.d.ts +2 -2
- package/dist/types/wallet/src/SeamsWeb/operations/registration/pendingEcdsaRegistrationRecovery.d.ts +11 -11
- package/dist/types/wallet/src/SeamsWeb/operations/registration/pendingEcdsaRegistrationRecoveryValidation.d.ts +18 -4
- package/dist/types/wallet/src/SeamsWeb/operations/registration/pendingRegistrationRecovery.d.ts +4 -20
- package/dist/types/wallet/src/SeamsWeb/operations/registration/registration.d.ts +10 -4
- package/dist/types/wallet/src/SeamsWeb/operations/registration/registrationEd25519Yao.d.ts +1 -1
- package/dist/types/wallet/src/SeamsWeb/operations/registration/registrationSignerSet.d.ts +1 -0
- package/dist/types/wallet/src/SeamsWeb/operations/registration/registrationTerminalCommit.d.ts +0 -4
- package/dist/types/wallet/src/SeamsWeb/operations/registration/registrationTiming.d.ts +2 -3
- package/dist/types/wallet/src/SeamsWeb/operations/tempo/index.d.ts +0 -3
- package/dist/types/wallet/src/SeamsWeb/publicApi/auth.d.ts +4 -13
- package/dist/types/wallet/src/SeamsWeb/publicApi/createPublicApi.d.ts +22 -43
- package/dist/types/wallet/src/SeamsWeb/publicApi/devices.d.ts +3 -21
- package/dist/types/wallet/src/SeamsWeb/publicApi/evm.d.ts +10 -16
- package/dist/types/wallet/src/SeamsWeb/publicApi/evmFamilyCommands.d.ts +6 -0
- package/dist/types/wallet/src/SeamsWeb/publicApi/index.d.ts +2 -2
- package/dist/types/wallet/src/SeamsWeb/publicApi/keyExport.d.ts +8 -16
- package/dist/types/wallet/src/SeamsWeb/publicApi/near.d.ts +10 -10
- package/dist/types/wallet/src/SeamsWeb/publicApi/nearCommands.d.ts +17 -0
- package/dist/types/wallet/src/SeamsWeb/publicApi/placement.d.ts +90 -0
- package/dist/types/wallet/src/SeamsWeb/publicApi/placement.typecheck.d.ts +2 -0
- package/dist/types/wallet/src/SeamsWeb/publicApi/session.d.ts +3 -0
- package/dist/types/wallet/src/SeamsWeb/publicApi/tempo.d.ts +11 -11
- package/dist/types/wallet/src/SeamsWeb/publicApi/types.d.ts +106 -243
- package/dist/types/wallet/src/SeamsWeb/publicApi/{awaitNearReady.d.ts → waitForNearAccount.d.ts} +7 -7
- package/dist/types/wallet/src/SeamsWeb/signingSurface/BrowserSigningSurface.d.ts +33 -78
- package/dist/types/wallet/src/SeamsWeb/signingSurface/ports.d.ts +8 -31
- package/dist/types/wallet/src/SeamsWeb/walletIframe/client/deviceCommands.d.ts +4 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/client/emailOtpCommands.d.ts +4 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/client/evmFamilyCommands.d.ts +6 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/client/inboundMessages.d.ts +62 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/client/nearCommands.d.ts +6 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/client/placementCommands.d.ts +31 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/client/preferenceState.d.ts +35 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/client/preferences.d.ts +10 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/client/registrationCommands.d.ts +6 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/client/router.d.ts +36 -121
- package/dist/types/wallet/src/SeamsWeb/walletIframe/client/sessionCommands.d.ts +6 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/coordinator.d.ts +29 -35
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/WalletHostRuntime.d.ts +98 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/auth-menu/controller.d.ts +2 -2
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/context.d.ts +11 -9
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/createDeviceDomain.d.ts +20 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/createEmailOtpCommands.d.ts +11 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/createEvmFamilyCommands.d.ts +8 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/createNearCommands.d.ts +4 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/createPlacementCommands.d.ts +11 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/createRegistrationCommands.d.ts +4 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/createSessionCommands.d.ts +16 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/handlers/placement.d.ts +3 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/handlers/walletIframeHandler.types.d.ts +7 -3
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/hostedWalletSeamsSession.d.ts +2 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/reconcileWalletPlacement.d.ts +10 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/requestRouter.d.ts +4 -4
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/requestWalletMove.d.ts +11 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/runtimeContext.d.ts +5 -3
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/runtimeLoader.d.ts +0 -1
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/sessionObserver.d.ts +39 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/walletMoveLocator.d.ts +5 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/walletMutationGuard.d.ts +3 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/shared/configuration.d.ts +30 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/shared/emailOtpLifecycle.d.ts +43 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/shared/exactSessionState.d.ts +15 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/shared/facadeBoundary.d.ts +14 -0
- package/dist/types/wallet/src/SeamsWeb/walletIframe/shared/messages.d.ts +35 -100
- package/dist/types/wallet/src/core/config/chains.d.ts +1 -3
- package/dist/types/wallet/src/core/config/configBuilder.d.ts +16 -6
- package/dist/types/wallet/src/core/config/defaultConfigs.d.ts +3 -4
- package/dist/types/wallet/src/core/config/defineConfig.d.ts +3 -6
- package/dist/types/wallet/src/core/config/presignatures.d.ts +3 -0
- package/dist/types/wallet/src/core/diagnostics/registration.d.ts +2 -0
- package/dist/types/wallet/src/core/indexedDB/normalization.d.ts +5 -0
- package/dist/types/wallet/src/core/indexedDB/passkeyClientDB.types.d.ts +2 -2
- package/dist/types/wallet/src/core/indexedDB/pendingWalletRegistrationCommit.d.ts +0 -10
- package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/accountSignerRows.d.ts +44 -0
- package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/ecdsaCapabilityManifestStore.d.ts +0 -2
- package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/ecdsaClientPresignatures.d.ts +0 -5
- package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/manager.d.ts +11 -0
- package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/nonceLeaseRows.d.ts +23 -0
- package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/repositories.d.ts +1 -0
- package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/signerOutboxRows.d.ts +15 -0
- package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/walletOwnershipGeneration.d.ts +6 -0
- package/dist/types/wallet/src/core/indexedDB/unifiedIndexedDBManager.d.ts +1 -1
- package/dist/types/wallet/src/core/rpcClients/near/accountExists.d.ts +3 -0
- package/dist/types/wallet/src/core/rpcClients/near/rpcCalls.d.ts +1 -14
- package/dist/types/wallet/src/core/rpcClients/relayer/ecdsaPrepareSession.d.ts +13 -0
- package/dist/types/wallet/src/core/rpcClients/relayer/ownerWalletExecutionLanePreflight.d.ts +3 -3
- package/dist/types/wallet/src/core/rpcClients/relayer/relayerHttp.d.ts +17 -0
- package/dist/types/wallet/src/core/rpcClients/relayer/routerAbNormalSigning.d.ts +19 -3
- package/dist/types/wallet/src/core/rpcClients/relayer/walletRegistration.d.ts +29 -40
- package/dist/types/wallet/src/core/rpcClients/relayer/walletSessionAuthorizationStatus.d.ts +34 -0
- package/dist/types/wallet/src/core/signingEngine/assembly/ports/shared.d.ts +1 -1
- package/dist/types/wallet/src/core/signingEngine/assembly/ports/warmSigning.d.ts +2 -1
- package/dist/types/wallet/src/core/signingEngine/assembly/warmup.d.ts +2 -14
- package/dist/types/wallet/src/core/signingEngine/chains/near/nearSignerWasm.d.ts +2 -6
- package/dist/types/wallet/src/core/signingEngine/flows/recovery/public.d.ts +1 -1
- package/dist/types/wallet/src/core/signingEngine/flows/signEvmFamily/emailOtpPublic.d.ts +1 -32
- package/dist/types/wallet/src/core/signingEngine/flows/signEvmFamily/emailOtpSigningSession.d.ts +3 -82
- package/dist/types/wallet/src/core/signingEngine/flows/signEvmFamily/readySecp256k1Material.d.ts +62 -1
- package/dist/types/wallet/src/core/signingEngine/flows/signEvmFamily/requireEvmFamilyStepUpAuth.d.ts +1 -1
- package/dist/types/wallet/src/core/signingEngine/flows/signEvmFamily/signers/secp256k1.d.ts +4 -55
- package/dist/types/wallet/src/core/signingEngine/flows/signEvmFamily/signingFlow.d.ts +1 -1
- package/dist/types/wallet/src/core/signingEngine/flows/signEvmFamily/thresholdAdmission.d.ts +3 -2
- package/dist/types/wallet/src/core/signingEngine/flows/signNear/shared/ed25519YaoNormalSigning.d.ts +45 -1
- package/dist/types/wallet/src/core/signingEngine/flows/signNear/shared/signatureOnlySigning.d.ts +16 -2
- package/dist/types/wallet/src/core/signingEngine/flows/signNear/signNear.d.ts +1 -2
- package/dist/types/wallet/src/core/signingEngine/flows/signNear/signNep413.d.ts +1 -1
- package/dist/types/wallet/src/core/signingEngine/interfaces/ecdsaChainTarget.d.ts +1 -1
- package/dist/types/wallet/src/core/signingEngine/interfaces/near.d.ts +3 -0
- package/dist/types/wallet/src/core/signingEngine/nonce/nearTransactionReadiness.d.ts +3 -0
- package/dist/types/wallet/src/core/signingEngine/routerAb/ecdsaDerivation/presignaturePool.d.ts +9 -5
- package/dist/types/wallet/src/core/signingEngine/routerAb/ecdsaDerivation/presignaturePoolPolicy.d.ts +5 -0
- package/dist/types/wallet/src/core/signingEngine/session/SigningSessionCoordinator.d.ts +1 -7
- package/dist/types/wallet/src/core/signingEngine/session/availability/persistedAvailableSigningLanes.d.ts +1 -1
- package/dist/types/wallet/src/core/signingEngine/session/availability/readiness.d.ts +0 -17
- package/dist/types/wallet/src/core/signingEngine/session/emailOtp/EmailOtpWalletSessionCoordinator.d.ts +2 -2
- package/dist/types/wallet/src/core/signingEngine/session/emailOtp/ecdsaSigningSessionAuthority.d.ts +2 -33
- package/dist/types/wallet/src/core/signingEngine/session/emailOtp/exportRecovery.d.ts +2 -2
- package/dist/types/wallet/src/core/signingEngine/session/emailOtp/exportRecoveryRuntime.d.ts +14 -3
- package/dist/types/wallet/src/core/signingEngine/session/emailOtp/publicTypes.d.ts +1 -2
- package/dist/types/wallet/src/core/signingEngine/session/emailOtp/workerEnrollment.d.ts +0 -12
- package/dist/types/wallet/src/core/signingEngine/session/lanes/walletExecutionLaneHydration.d.ts +11 -25
- package/dist/types/wallet/src/core/signingEngine/session/lifecycle/walletSessionStatus.d.ts +0 -8
- package/dist/types/wallet/src/core/signingEngine/session/material/ecdsaSigningCapability.d.ts +2 -2
- package/dist/types/wallet/src/core/signingEngine/session/operationState/preparedOperation.d.ts +0 -8
- package/dist/types/wallet/src/core/signingEngine/session/operationState/trace.d.ts +1 -1
- package/dist/types/wallet/src/core/signingEngine/session/operationState/transactionState.d.ts +0 -1
- package/dist/types/wallet/src/core/signingEngine/session/passkey/ed25519YaoRecoveryCapability.d.ts +2 -0
- package/dist/types/wallet/src/core/signingEngine/session/public.d.ts +1 -1
- package/dist/types/wallet/src/core/signingEngine/session/routerAbSigningWalletSession.d.ts +2 -0
- package/dist/types/wallet/src/core/signingEngine/session/userPreferences.d.ts +8 -11
- package/dist/types/wallet/src/core/signingEngine/session/warmCapabilities/capabilityReader.d.ts +2 -1
- package/dist/types/wallet/src/core/signingEngine/session/warmCapabilities/capabilityReaderCore.d.ts +2 -1
- package/dist/types/wallet/src/core/signingEngine/stepUpConfirmation/confirmOperation.d.ts +3 -1
- package/dist/types/wallet/src/core/signingEngine/stepUpConfirmation/otpPrompt/authLane.d.ts +6 -12
- package/dist/types/wallet/src/core/signingEngine/threshold/ecdsa/operationStepUp.d.ts +6 -5
- package/dist/types/wallet/src/core/signingEngine/threshold/ed25519/yaoClient.d.ts +6 -17
- package/dist/types/wallet/src/core/signingEngine/uiConfirm/handlers/flows/signing.d.ts +2 -0
- package/dist/types/wallet/src/core/signingEngine/uiConfirm/handlers/handlePromptFromWorker.d.ts +2 -0
- package/dist/types/wallet/src/core/signingEngine/uiConfirm/ui/preact/ReviewDisclosure.d.ts +1 -0
- package/dist/types/wallet/src/core/signingEngine/uiConfirm/uiConfirm.types.d.ts +3 -0
- package/dist/types/wallet/src/core/signingEngine/walletCustody/ceremonyDriver.d.ts +0 -1
- package/dist/types/wallet/src/core/signingEngine/walletCustody/walletRegistrationEd25519.d.ts +17 -0
- package/dist/types/wallet/src/core/signingEngine/workerManager/SignerWorkerManager.d.ts +0 -1
- package/dist/types/wallet/src/core/signingEngine/workerManager/ecdsaPresignLifecycle.d.ts +0 -2
- package/dist/types/wallet/src/core/signingEngine/workerManager/ecdsaPresignPoolIdentity.d.ts +9 -0
- package/dist/types/wallet/src/core/signingEngine/workerManager/workerTransport.d.ts +0 -5
- package/dist/types/wallet/src/core/signingEngine/workerManager/workerTypes.d.ts +15 -27
- package/dist/types/wallet/src/core/signingEngine/workerManager/workers/email-otp/enrollment.d.ts +1 -17
- package/dist/types/wallet/src/core/types/rpc.d.ts +0 -1
- package/dist/types/wallet/src/core/types/sdkPublicResults.d.ts +1 -0
- package/dist/types/wallet/src/core/types/sdkSentEvents.d.ts +2 -0
- package/dist/types/wallet/src/core/types/seams.d.ts +12 -9
- package/dist/types/wallet/src/core/types/signer-worker.d.ts +2 -1
- package/dist/types/wallet/src/externalEvm/controller.d.ts +5 -1
- package/dist/types/wallet/src/index.d.ts +5 -2
- package/dist/types/wallet/src/react/components/AccountMenuButton/WalletRegionSection.d.ts +54 -0
- package/dist/types/wallet/src/react/components/AccountMenuButton/WalletSettingsLayout.d.ts +7 -2
- package/dist/types/wallet/src/react/components/AccountMenuButton/index.d.ts +1 -1
- package/dist/types/wallet/src/react/components/AccountMenuButton/types.d.ts +1 -0
- package/dist/types/wallet/src/react/components/HostedSeamsAuthMenu/public.d.ts +1 -1
- package/dist/types/wallet/src/react/components/HostedSeamsAuthMenu/types.d.ts +2 -5
- package/dist/types/wallet/src/react/context/SeamsWebProvider.d.ts +0 -5
- package/dist/types/wallet/src/react/context/useLoginStateRefresher.d.ts +1 -1
- package/dist/types/wallet/src/react/context/useNearProvisioningStateRefresh.d.ts +1 -1
- package/dist/types/wallet/src/react/context/useSeamsContextValue.d.ts +2 -2
- package/dist/types/wallet/src/react/context/useWalletIframeLifecycle.d.ts +4 -2
- package/dist/types/wallet/src/react/hooks/useQRCamera.d.ts +1 -7
- package/dist/types/wallet/src/react/hooks/useWallet.d.ts +5 -6
- package/dist/types/wallet/src/react/hooks/useWalletAuth.d.ts +1 -1
- package/dist/types/wallet/src/react/hooks/useWalletDevices.d.ts +1 -1
- package/dist/types/wallet/src/react/index.d.ts +2 -2
- package/dist/types/wallet/src/react/transactionReview/boundCalls.d.ts +0 -26
- package/dist/types/wallet/src/react/types.d.ts +12 -20
- package/dist/types/wallet/src/react/utils/walletIframe.d.ts +2 -6
- package/dist/workers/device-linking-key.worker.js +18 -0
- package/dist/workers/ecdsa-derivation-client.worker.js +1490 -1268
- package/dist/workers/ecdsa-online-client.worker.js +96 -0
- package/dist/workers/ecdsa-presign-client.worker.js +101 -1
- package/dist/workers/email-otp.worker.js +267 -237
- package/dist/workers/evm-crypto.worker.js +12 -8
- package/dist/workers/passkey-mpc-export.worker.js +30 -1
- package/dist/workers/router_ab_ecdsa_client_bg.wasm +0 -0
- package/dist/workers/router_ab_ed25519_yao_client_bg.wasm +0 -0
- package/dist/workers/shamir3pass.worker.js +10 -8
- package/dist/workers/tempo-signer.worker.js +12 -8
- package/dist/workers/wallet-custody-ceremony.worker.js +3 -1
- package/dist/workers/wallet_custody_ceremony_bg.wasm +0 -0
- package/dist/workers/wasm_signer_worker_bg.wasm +0 -0
- package/package.json +1 -1
- package/dist/esm/SeamsWeb/assembly/browserSigningSurfaceAssembly.js +0 -817
- package/dist/esm/SeamsWeb/assembly/browserWorkerWarmupPolicy.js +0 -31
- package/dist/esm/SeamsWeb/assembly/configureBrowserIndexedDB.js +0 -10
- package/dist/esm/SeamsWeb/assembly/createBrowserRecoveryPublicDeps.js +0 -95
- package/dist/esm/SeamsWeb/assembly/createBrowserSigningRuntime.js +0 -34
- package/dist/esm/SeamsWeb/assembly/createBrowserSigningStores.js +0 -39
- package/dist/esm/SeamsWeb/assembly/createBrowserStepUpRuntime.js +0 -34
- package/dist/esm/SeamsWeb/assembly/createBrowserWarmSessionPublicDeps.js +0 -29
- package/dist/esm/SeamsWeb/assembly/initializeBrowserSigningRuntime.js +0 -19
- package/dist/esm/SeamsWeb/assembly/runtimeConfig.js +0 -12
- package/dist/esm/SeamsWeb/operations/auth/login.js +0 -4383
- package/dist/esm/SeamsWeb/operations/auth/scheduleEcdsaSessionPresignaturePrefill.js +0 -41
- package/dist/esm/SeamsWeb/operations/auth/scheduleLinkedDevicePresignaturePrefill.js +0 -64
- package/dist/esm/SeamsWeb/operations/auth/walletAuth.js +0 -142
- package/dist/esm/SeamsWeb/operations/auth/walletUnlockEcdsaSubject.js +0 -33
- package/dist/esm/SeamsWeb/operations/auth/walletUnlockSubject.js +0 -288
- package/dist/esm/SeamsWeb/operations/authMethods/addAuthMethodSourceClaim.js +0 -72
- package/dist/esm/SeamsWeb/operations/authMethods/emailOtp/addEmailOtp.js +0 -191
- package/dist/esm/SeamsWeb/operations/authMethods/emailOtp/challenge.js +0 -247
- package/dist/esm/SeamsWeb/operations/authMethods/emailOtp/googleEmailOtpWalletAuthFlow.js +0 -568
- package/dist/esm/SeamsWeb/operations/authMethods/emailOtp/localEmailOtpProjection.js +0 -69
- package/dist/esm/SeamsWeb/operations/authMethods/emailOtp/registrationAuthority.js +0 -62
- package/dist/esm/SeamsWeb/operations/authMethods/emailOtp/registrationOffer.js +0 -69
- package/dist/esm/SeamsWeb/operations/authMethods/emailOtp/walletActivation.js +0 -95
- package/dist/esm/SeamsWeb/operations/authMethods/passkey/addPasskey.js +0 -260
- package/dist/esm/SeamsWeb/operations/authMethods/passkey/ecdsaBootstrap.js +0 -17
- package/dist/esm/SeamsWeb/operations/authMethods/passkey/exactPasskeyAuthority.js +0 -34
- package/dist/esm/SeamsWeb/operations/authMethods/passkey/localUnlock.js +0 -16
- package/dist/esm/SeamsWeb/operations/authMethods/passkey/loginAssertion.js +0 -25
- package/dist/esm/SeamsWeb/operations/authMethods/passkey/registrationAuthority.js +0 -84
- package/dist/esm/SeamsWeb/operations/authMethods/revokeAuthMethod.js +0 -205
- package/dist/esm/SeamsWeb/operations/authMethods/sourcePasskeyProof.js +0 -12
- package/dist/esm/SeamsWeb/operations/devices/deviceLinkingAuthorityInstallation.js +0 -444
- package/dist/esm/SeamsWeb/operations/devices/deviceLinkingComposition.js +0 -106
- package/dist/esm/SeamsWeb/operations/devices/deviceLinkingEd25519ExportRoot.js +0 -194
- package/dist/esm/SeamsWeb/operations/devices/deviceLinkingHttpTransport.js +0 -524
- package/dist/esm/SeamsWeb/operations/devices/deviceLinkingOwnerTransport.js +0 -135
- package/dist/esm/SeamsWeb/operations/devices/deviceLinkingResume.js +0 -212
- package/dist/esm/SeamsWeb/operations/devices/deviceLinkingTargetCredential.js +0 -63
- package/dist/esm/SeamsWeb/operations/devices/deviceLinkingTargetEd25519ExportRoot.js +0 -61
- package/dist/esm/SeamsWeb/operations/devices/deviceLinkingWorkerChannels.js +0 -337
- package/dist/esm/SeamsWeb/operations/devices/linkDevice.js +0 -75
- package/dist/esm/SeamsWeb/operations/devices/linkDeviceFlow.js +0 -1383
- package/dist/esm/SeamsWeb/operations/devices/linkDeviceFlowSupport.js +0 -143
- package/dist/esm/SeamsWeb/operations/devices/linkDeviceTargetActivation.js +0 -119
- package/dist/esm/SeamsWeb/operations/devices/walletHostComposition.js +0 -130
- package/dist/esm/SeamsWeb/operations/devices/walletHostOwnerAuthority.js +0 -191
- package/dist/esm/SeamsWeb/operations/evm/index.js +0 -35
- package/dist/esm/SeamsWeb/operations/near/actions.js +0 -484
- package/dist/esm/SeamsWeb/operations/near/commandSubject.js +0 -14
- package/dist/esm/SeamsWeb/operations/near/index.js +0 -37
- package/dist/esm/SeamsWeb/operations/near/signNEP413.js +0 -116
- package/dist/esm/SeamsWeb/operations/recovery/accountSync.js +0 -21
- package/dist/esm/SeamsWeb/operations/recovery/recoveryWalletBinding.js +0 -43
- package/dist/esm/SeamsWeb/operations/recovery/syncAccount.js +0 -912
- package/dist/esm/SeamsWeb/operations/recovery/walletRecoveryCodeBackup.js +0 -100
- package/dist/esm/SeamsWeb/operations/recovery/walletRecoveryRotation.js +0 -213
- package/dist/esm/SeamsWeb/operations/registration/pendingEcdsaRegistrationRecovery.js +0 -184
- package/dist/esm/SeamsWeb/operations/registration/pendingEcdsaRegistrationRecoveryUnlock.js +0 -247
- package/dist/esm/SeamsWeb/operations/registration/pendingEcdsaRegistrationRecoveryValidation.js +0 -134
- package/dist/esm/SeamsWeb/operations/registration/pendingRegistrationRecovery.js +0 -354
- package/dist/esm/SeamsWeb/operations/registration/registration.js +0 -3818
- package/dist/esm/SeamsWeb/operations/registration/registrationEd25519Yao.js +0 -166
- package/dist/esm/SeamsWeb/operations/registration/registrationSignerSet.js +0 -60
- package/dist/esm/SeamsWeb/operations/registration/registrationStrictEcdsa.js +0 -343
- package/dist/esm/SeamsWeb/operations/registration/registrationTerminalCommit.js +0 -296
- package/dist/esm/SeamsWeb/operations/registration/registrationTiming.js +0 -682
- package/dist/esm/SeamsWeb/operations/session/thresholdEcdsaProvisioning.js +0 -36
- package/dist/esm/SeamsWeb/operations/session/thresholdWarmSessionBootstrap.js +0 -20
- package/dist/esm/SeamsWeb/publicApi/preferences.js +0 -61
- package/dist/esm/SeamsWeb/publicApi/recovery.js +0 -19
- package/dist/esm/SeamsWeb/publicApi/types.js +0 -10
- package/dist/esm/SeamsWeb/signingSurface/BrowserSigningSurface.js +0 -3917
- package/dist/esm/SeamsWeb/walletIframe/host/restoredSessionPresignaturePrefill.js +0 -29
- package/dist/esm/core/browser/walletIframe/events.js +0 -6
- package/dist/esm/core/browser/walletIframe/host-mode.js +0 -9
- package/dist/esm/core/config/managedRuntimeScope.js +0 -16
- package/dist/esm/core/indexedDB/seamsWalletDB/pendingWalletRecoveryCodeBackup.js +0 -144
- package/dist/esm/core/platform/browser/createBrowserPlatformRuntime.js +0 -535
- package/dist/esm/core/platform/secretSources.js +0 -111
- package/dist/esm/core/platform/signerCoreCommandAdapters.js +0 -122
- package/dist/esm/core/rpcClients/near/rpcCalls.js +0 -376
- package/dist/esm/core/rpcClients/relayer/ownerWalletExecutionLanePreflight.js +0 -67
- package/dist/esm/core/rpcClients/relayer/passkeyCustodyEnvelope.js +0 -218
- package/dist/esm/core/rpcClients/relayer/sealedRefreshCapabilities.js +0 -148
- package/dist/esm/core/rpcClients/relayer/thresholdEcdsa.js +0 -235
- package/dist/esm/core/rpcClients/relayer/walletRecoveryGoogleEmailOtp.js +0 -161
- package/dist/esm/core/rpcClients/relayer/walletRegistrationTerminalResponse.js +0 -718
- package/dist/esm/core/signingEngine/assembly/createManagers.js +0 -80
- package/dist/esm/core/signingEngine/assembly/createPorts.js +0 -54
- package/dist/esm/core/signingEngine/assembly/ports/emailOtp.js +0 -30
- package/dist/esm/core/signingEngine/assembly/ports/evmFamily.js +0 -73
- package/dist/esm/core/signingEngine/assembly/ports/near.js +0 -21
- package/dist/esm/core/signingEngine/assembly/ports/recovery.js +0 -75
- package/dist/esm/core/signingEngine/assembly/ports/registration.js +0 -22
- package/dist/esm/core/signingEngine/assembly/ports/session.js +0 -25
- package/dist/esm/core/signingEngine/assembly/ports/shared.js +0 -39
- package/dist/esm/core/signingEngine/assembly/ports/stepUpRuntime.js +0 -67
- package/dist/esm/core/signingEngine/assembly/ports/warmSigning.js +0 -92
- package/dist/esm/core/signingEngine/assembly/warmup.js +0 -64
- package/dist/esm/core/signingEngine/flows/recovery/ecdsaDerivationExport.js +0 -427
- package/dist/esm/core/signingEngine/flows/recovery/ecdsaExportFlow.js +0 -660
- package/dist/esm/core/signingEngine/flows/recovery/ecdsaExportMaterial.js +0 -249
- package/dist/esm/core/signingEngine/flows/recovery/ed25519YaoExportFlow.js +0 -353
- package/dist/esm/core/signingEngine/flows/recovery/exportKeypairOperation.js +0 -213
- package/dist/esm/core/signingEngine/flows/recovery/exportLaneSelection.js +0 -283
- package/dist/esm/core/signingEngine/flows/recovery/keyExportConfirmation.js +0 -325
- package/dist/esm/core/signingEngine/flows/recovery/keyExportFlow.js +0 -81
- package/dist/esm/core/signingEngine/flows/recovery/passkeyEd25519YaoRecovery.js +0 -192
- package/dist/esm/core/signingEngine/flows/recovery/public.js +0 -26
- package/dist/esm/core/signingEngine/flows/recovery/stepUpAuthorization.js +0 -139
- package/dist/esm/core/signingEngine/flows/registration/nearProvisioningRegistry.js +0 -79
- package/dist/esm/core/signingEngine/flows/registration/public.js +0 -85
- package/dist/esm/core/signingEngine/flows/registration/services/ecdsaRegistrationSessions.js +0 -77
- package/dist/esm/core/signingEngine/flows/registration/services/passkeyEd25519YaoAddSigner.js +0 -82
- package/dist/esm/core/signingEngine/flows/registration/session.js +0 -24
- package/dist/esm/core/signingEngine/flows/signEvmFamily/emailOtpPublic.js +0 -123
- package/dist/esm/core/signingEngine/nonce/NonceCoordinator.js +0 -1026
- package/dist/esm/core/signingEngine/nonce/evmNonceLane.js +0 -182
- package/dist/esm/core/signingEngine/nonce/nearNonceLane.js +0 -669
- package/dist/esm/core/signingEngine/nonce/nonceDiagnostics.js +0 -232
- package/dist/esm/core/signingEngine/nonce/nonceLeaseState.js +0 -128
- package/dist/esm/core/signingEngine/nonce/nonceUtils.js +0 -33
- package/dist/esm/core/signingEngine/session/SigningSessionCoordinator.js +0 -344
- package/dist/esm/core/signingEngine/session/authority/authorityOperationResolver.js +0 -114
- package/dist/esm/core/signingEngine/session/availability/canonicalLaneInventory.js +0 -127
- package/dist/esm/core/signingEngine/session/availability/clientSessionExpiryInvalidator.js +0 -72
- package/dist/esm/core/signingEngine/session/availability/persistedAvailableSigningLanes.js +0 -214
- package/dist/esm/core/signingEngine/session/availability/readiness.js +0 -464
- package/dist/esm/core/signingEngine/session/emailOtp/EmailOtpWalletSessionCoordinator.js +0 -130
- package/dist/esm/core/signingEngine/session/emailOtp/ecdsaBootstrapCommit.js +0 -106
- package/dist/esm/core/signingEngine/session/emailOtp/ecdsaLifecycleRuntime.js +0 -47
- package/dist/esm/core/signingEngine/session/emailOtp/ecdsaLogin.js +0 -930
- package/dist/esm/core/signingEngine/session/emailOtp/ecdsaPublication.js +0 -414
- package/dist/esm/core/signingEngine/session/emailOtp/ecdsaRecovery.js +0 -264
- package/dist/esm/core/signingEngine/session/emailOtp/ed25519ExportContext.js +0 -373
- package/dist/esm/core/signingEngine/session/emailOtp/exportRecovery.js +0 -284
- package/dist/esm/core/signingEngine/session/emailOtp/exportRecoveryRuntime.js +0 -50
- package/dist/esm/core/signingEngine/session/emailOtp/persistedSnapshot.js +0 -22
- package/dist/esm/core/signingEngine/session/emailOtp/publicTypes.js +0 -38
- package/dist/esm/core/signingEngine/session/emailOtp/routePlan.js +0 -60
- package/dist/esm/core/signingEngine/session/emailOtp/runtimeConfig.js +0 -24
- package/dist/esm/core/signingEngine/session/emailOtp/sealedRefreshPolicy.js +0 -49
- package/dist/esm/core/signingEngine/session/emailOtp/sealedRestoreOrchestrator.js +0 -234
- package/dist/esm/core/signingEngine/session/emailOtp/sealedRuntimePurpose.js +0 -16
- package/dist/esm/core/signingEngine/session/emailOtp/sealedSessionRegistry.js +0 -40
- package/dist/esm/core/signingEngine/session/emailOtp/status.js +0 -72
- package/dist/esm/core/signingEngine/session/emailOtp/walletUnlock.js +0 -168
- package/dist/esm/core/signingEngine/session/emailOtp/warmSessionRuntime.js +0 -70
- package/dist/esm/core/signingEngine/session/emailOtp/workerEnrollment.js +0 -159
- package/dist/esm/core/signingEngine/session/emailOtp/workerRequests.js +0 -84
- package/dist/esm/core/signingEngine/session/emailOtp/zeroize.js +0 -9
- package/dist/esm/core/signingEngine/session/identity/exactWalletSessionCredential.js +0 -104
- package/dist/esm/core/signingEngine/session/identity/exactWalletSessionReader.js +0 -54
- package/dist/esm/core/signingEngine/session/identity/ownerLaneScope.js +0 -185
- package/dist/esm/core/signingEngine/session/lanes/walletExecutionLaneHydration.js +0 -194
- package/dist/esm/core/signingEngine/session/lifecycle/canonicalWalletSessionStatus.js +0 -32
- package/dist/esm/core/signingEngine/session/lifecycle/walletSessionStatus.js +0 -123
- package/dist/esm/core/signingEngine/session/material/ecdsaCapabilityHydration.js +0 -75
- package/dist/esm/core/signingEngine/session/material/ecdsaSealedRuntime.js +0 -197
- package/dist/esm/core/signingEngine/session/material/mpcCapabilityHydration.js +0 -79
- package/dist/esm/core/signingEngine/session/material/nearEd25519YaoSigningPreparation.js +0 -122
- package/dist/esm/core/signingEngine/session/material/restorableMpcMaterialRef.internal.js +0 -21
- package/dist/esm/core/signingEngine/session/passkey/ecdsaBootstrap.js +0 -184
- package/dist/esm/core/signingEngine/session/passkey/ecdsaKeyFactsInventory.js +0 -205
- package/dist/esm/core/signingEngine/session/passkey/ecdsaRecovery.js +0 -84
- package/dist/esm/core/signingEngine/session/passkey/ecdsaSessionProvision.js +0 -224
- package/dist/esm/core/signingEngine/session/passkey/ecdsaWarmCapabilityBootstrap.js +0 -147
- package/dist/esm/core/signingEngine/session/passkey/ed25519Provisioner.js +0 -55
- package/dist/esm/core/signingEngine/session/passkey/ed25519SessionProvision.js +0 -228
- package/dist/esm/core/signingEngine/session/passkey/ed25519YaoLocalMaterial.js +0 -536
- package/dist/esm/core/signingEngine/session/passkey/ed25519YaoRecoveryCapability.js +0 -94
- package/dist/esm/core/signingEngine/session/passkey/ed25519YaoSealedSession.js +0 -57
- package/dist/esm/core/signingEngine/session/passkey/ed25519YaoWarmRecovery.js +0 -281
- package/dist/esm/core/signingEngine/session/passkey/passkeyCustodySessionCache.js +0 -90
- package/dist/esm/core/signingEngine/session/passkey/public.js +0 -15
- package/dist/esm/core/signingEngine/session/passkey/unlockEcdsaWarmupPlanner.js +0 -247
- package/dist/esm/core/signingEngine/session/persistence/clientSessionPersistence.js +0 -135
- package/dist/esm/core/signingEngine/session/persistence/walletSessionAuthorizationProjection.js +0 -51
- package/dist/esm/core/signingEngine/session/planning/operationIdBinding.js +0 -36
- package/dist/esm/core/signingEngine/session/postconditions/runtimePostconditions.js +0 -163
- package/dist/esm/core/signingEngine/session/public.js +0 -44
- package/dist/esm/core/signingEngine/session/routerAbSigningWalletSession.js +0 -119
- package/dist/esm/core/signingEngine/session/sealedRecovery/exactRecordLookup.js +0 -148
- package/dist/esm/core/signingEngine/session/sealedRecovery/recoveryRecord.js +0 -248
- package/dist/esm/core/signingEngine/session/sealedRecovery/restoreCoordinator.js +0 -229
- package/dist/esm/core/signingEngine/session/userPreferences.js +0 -212
- package/dist/esm/core/signingEngine/session/warmCapabilities/capabilityReader.js +0 -62
- package/dist/esm/core/signingEngine/session/warmCapabilities/capabilityReaderCore.js +0 -293
- package/dist/esm/core/signingEngine/session/warmCapabilities/clearVolatileWarmSigningMaterial.js +0 -44
- package/dist/esm/core/signingEngine/session/warmCapabilities/ecdsaBootstrapPersistence.js +0 -107
- package/dist/esm/core/signingEngine/session/warmCapabilities/ecdsaBootstrapQueue.js +0 -22
- package/dist/esm/core/signingEngine/session/warmCapabilities/ecdsaLoginPrefill.js +0 -93
- package/dist/esm/core/signingEngine/session/warmCapabilities/ecdsaLoginPrefillSigningMaterialSource.js +0 -50
- package/dist/esm/core/signingEngine/session/warmCapabilities/ecdsaProvisionPlan.js +0 -9
- package/dist/esm/core/signingEngine/session/warmCapabilities/ed25519SealedSessionRuntime.js +0 -251
- package/dist/esm/core/signingEngine/session/warmCapabilities/nearEd25519CapabilityRehydration.js +0 -98
- package/dist/esm/core/signingEngine/session/warmCapabilities/public.js +0 -31
- package/dist/esm/core/signingEngine/session/warmCapabilities/readModel.js +0 -155
- package/dist/esm/core/signingEngine/session/warmCapabilities/routerAbEd25519WalletSessionState.js +0 -256
- package/dist/esm/core/signingEngine/session/warmCapabilities/statusReader.js +0 -100
- package/dist/esm/core/signingEngine/session/warmCapabilities/transitions.js +0 -47
- package/dist/esm/core/signingEngine/session/warmCapabilities/types.js +0 -122
- package/dist/esm/core/signingEngine/session/warmCapabilities/volatileWarmMaterialCommands.js +0 -45
- package/dist/esm/core/signingEngine/stepUpConfirmation/channel/confirmCommon.js +0 -89
- package/dist/esm/core/signingEngine/stepUpConfirmation/channel/confirmTypes.js +0 -12
- package/dist/esm/core/signingEngine/stepUpConfirmation/otpPrompt/authLane.js +0 -31
- package/dist/esm/core/signingEngine/stepUpConfirmation/otpPrompt/exportAuthorization.js +0 -108
- package/dist/esm/core/signingEngine/stepUpConfirmation/passkeyPrompt/touchIdPrompt.js +0 -271
- package/dist/esm/core/signingEngine/stepUpConfirmation/passkeyPrompt/webauthnPromptCoordinator.js +0 -167
- package/dist/esm/core/signingEngine/stepUpConfirmation/userConfirmationType.js +0 -15
- package/dist/esm/core/signingEngine/threshold/crypto/ed25519YaoLaneWasm.js +0 -67
- package/dist/esm/core/signingEngine/threshold/ecdsa/activation.js +0 -267
- package/dist/esm/core/signingEngine/threshold/ecdsa/bootstrapSession.js +0 -115
- package/dist/esm/core/signingEngine/threshold/ecdsa/postRegistrationSessionActivation.js +0 -132
- package/dist/esm/core/signingEngine/threshold/ecdsa/signingQueue.js +0 -16
- package/dist/esm/core/signingEngine/threshold/ed25519/commitQueue.js +0 -16
- package/dist/esm/core/signingEngine/threshold/ed25519/connectSession.js +0 -137
- package/dist/esm/core/signingEngine/threshold/ed25519/yaoActiveClientRegistry.js +0 -146
- package/dist/esm/core/signingEngine/threshold/ed25519/yaoClient.js +0 -563
- package/dist/esm/core/signingEngine/threshold/ed25519/yaoPageLifecycleOwner.js +0 -23
- package/dist/esm/core/signingEngine/uiConfirm/PasskeyMpcExportManager.js +0 -233
- package/dist/esm/core/signingEngine/uiConfirm/PasskeyMpcSessionDurableState.js +0 -493
- package/dist/esm/core/signingEngine/uiConfirm/PasskeyMpcSessionManager.js +0 -746
- package/dist/esm/core/signingEngine/uiConfirm/UiConfirmManager.js +0 -599
- package/dist/esm/core/signingEngine/uiConfirm/confirmationReadinessRegistry.js +0 -41
- package/dist/esm/core/signingEngine/uiConfirm/exportConfirmRequest.js +0 -149
- package/dist/esm/core/signingEngine/uiConfirm/handlers/determineConfirmationConfig.js +0 -82
- package/dist/esm/core/signingEngine/uiConfirm/handlers/flowOrchestrator.js +0 -363
- package/dist/esm/core/signingEngine/uiConfirm/handlers/flows/adapters/adapters.js +0 -337
- package/dist/esm/core/signingEngine/uiConfirm/handlers/flows/adapters/request.js +0 -120
- package/dist/esm/core/signingEngine/uiConfirm/handlers/flows/localOnly.js +0 -149
- package/dist/esm/core/signingEngine/uiConfirm/handlers/flows/registration.js +0 -235
- package/dist/esm/core/signingEngine/uiConfirm/handlers/flows/requestRegistrationCredentialConfirmation.js +0 -178
- package/dist/esm/core/signingEngine/uiConfirm/handlers/flows/signing.js +0 -684
- package/dist/esm/core/signingEngine/uiConfirm/handlers/handlePromptFromWorker.js +0 -90
- package/dist/esm/core/signingEngine/uiConfirm/ui/appearance.js +0 -27
- package/dist/esm/core/signingEngine/uiConfirm/ui/confirm-ui.js +0 -516
- package/dist/esm/core/signingEngine/uiConfirm/ui/export-private-key-reveal.js +0 -155
- package/dist/esm/core/signingEngine/uiConfirm/ui/export-viewer-host.js +0 -207
- package/dist/esm/core/signingEngine/uiConfirm/ui/preact/ExportPrivateKeySurface.js +0 -318
- package/dist/esm/core/signingEngine/uiConfirm/ui/preact/RecoveryCodeBackupSurface.js +0 -518
- package/dist/esm/core/signingEngine/uiConfirm/ui/preact/confirmation-controller.js +0 -80
- package/dist/esm/core/signingEngine/uiConfirm/ui/preact/mountExportPrivateKeySurface.js +0 -86
- package/dist/esm/core/signingEngine/uiConfirm/ui/preact/mountRecoveryCodeBackupSurface.js +0 -82
- package/dist/esm/core/signingEngine/uiConfirm/ui/surface-measurement-binding.js +0 -12
- package/dist/esm/core/signingEngine/uiConfirm/ui/transaction-activity.js +0 -46
- package/dist/esm/core/signingEngine/uiConfirm/ui/transaction-display/confirmation-tree.js +0 -27
- package/dist/esm/core/signingEngine/uiConfirm/warmSessionUiConfirm.js +0 -65
- package/dist/esm/core/signingEngine/walletCustody/activateEd25519Capability.js +0 -122
- package/dist/esm/core/signingEngine/walletCustody/ceremonyActiveClientMetadata.js +0 -94
- package/dist/esm/core/signingEngine/walletCustody/ceremonyDriver.js +0 -171
- package/dist/esm/core/signingEngine/walletCustody/ceremonyStepRunner.js +0 -20
- package/dist/esm/core/signingEngine/walletCustody/ed25519ActiveClient.js +0 -100
- package/dist/esm/core/signingEngine/walletCustody/ed25519Projection.js +0 -32
- package/dist/esm/core/signingEngine/walletCustody/ed25519SeedMaterial.js +0 -92
- package/dist/esm/core/signingEngine/walletCustody/emailOtpLink.js +0 -132
- package/dist/esm/core/signingEngine/walletCustody/joinCustodyWire.js +0 -64
- package/dist/esm/core/signingEngine/walletCustody/openCustodyCache.js +0 -126
- package/dist/esm/core/signingEngine/walletCustody/passkeyLink.js +0 -180
- package/dist/esm/core/signingEngine/walletCustody/recoveryReplacementEnvelope.js +0 -60
- package/dist/esm/core/signingEngine/walletCustody/registrationCeremony.js +0 -460
- package/dist/esm/core/signingEngine/walletCustody/unlockedEd25519ExportRootCapability.js +0 -258
- package/dist/esm/core/signingEngine/walletCustody/walletRecoveryCredential.js +0 -23
- package/dist/esm/core/signingEngine/walletCustody/walletRecoveryEcdsa.js +0 -75
- package/dist/esm/core/signingEngine/walletCustody/walletRecoveryEd25519.js +0 -129
- package/dist/esm/core/signingEngine/walletCustody/walletRecoveryManifest.js +0 -178
- package/dist/esm/core/signingEngine/walletCustody/walletRecoveryRotation.js +0 -102
- package/dist/esm/core/signingEngine/webauthnAuth/credentials/collectAuthenticationCredentialForChallengeB64u.js +0 -154
- package/dist/esm/core/signingEngine/webauthnAuth/device/signerSlot.js +0 -25
- package/dist/esm/core/signingEngine/webauthnAuth/walletOriginWebAuthn.js +0 -109
- package/dist/esm/core/signingEngine/workerManager/SignerWorkerManager.js +0 -68
- package/dist/esm/core/signingEngine/workerManager/deviceLinkingPorts.js +0 -342
- package/dist/esm/core/signingEngine/workerManager/deviceLinkingSourceContribution.js +0 -158
- package/dist/esm/core/signingEngine/workerManager/ecdsaClientWorkerChannels.js +0 -13
- package/dist/esm/core/signingEngine/workerManager/workerTransport.js +0 -734
- package/dist/esm/core/types/confirmationConfig.js +0 -39
- package/dist/esm/core/types/secure-confirm-worker.js +0 -22
- package/dist/esm/core/walletRuntimePaths/emailOtpWorker.js +0 -12
- package/dist/esm/core/walletRuntimePaths/multichainWorkers.js +0 -25
- package/dist/esm/core/walletRuntimePaths/walletCustodyCeremonyWorker.js +0 -18
- package/dist/esm/core/walletRuntimePaths/workers.js +0 -93
- package/dist/esm/react/context/useEagerPrewarm.js +0 -38
- package/dist/esm/sdk/EvmClient-DoxytQaJ.js +0 -1
- package/dist/esm/sdk/NearClient-vJ65Wjrq.js +0 -1
- package/dist/esm/sdk/NonceCoordinator-BBeadCSq.js +0 -1
- package/dist/esm/sdk/accountLifecycle-EyfYPnuT.js +0 -1
- package/dist/esm/sdk/actions-DZLxCcrU.js +0 -1
- package/dist/esm/sdk/adapters-DtAyuoiA.js +0 -2
- package/dist/esm/sdk/base-Xtd32asf.js +0 -1
- package/dist/esm/sdk/bytes-t5S5mkat.js +0 -1
- package/dist/esm/sdk/canonicalPrimitives-MPGET2cl.js +0 -1
- package/dist/esm/sdk/canonicalSignerErrorCode-C0hh_SVi.js +0 -1
- package/dist/esm/sdk/chains-yAls2d9X.js +0 -1
- package/dist/esm/sdk/challengeDelivery-cAsaUC6U.js +0 -1
- package/dist/esm/sdk/configHelpers-CseiVoZD.js +0 -1
- package/dist/esm/sdk/csp-stylesheet-B1fAhrGB.js +0 -2
- package/dist/esm/sdk/defaultConfigs-CWpApkMq.js +0 -1
- package/dist/esm/sdk/display-jK7_hYho.js +0 -1
- package/dist/esm/sdk/domainIds-GDzjOs6i.js +0 -1
- package/dist/esm/sdk/ecdsaCapabilityManifest-CHFu-QrV.js +0 -1
- package/dist/esm/sdk/ecdsaPresignLifecycle-CQnCxSlq.js +0 -1
- package/dist/esm/sdk/ecdsaPresignPoolIdentity-Ci-ovDlv.js +0 -1
- package/dist/esm/sdk/enrichDisplayModelWithAbi-CR-4ebuU.js +0 -1
- package/dist/esm/sdk/evmFamilyEcdsaIdentity-Br3iFdQx.js +0 -1
- package/dist/esm/sdk/exactSessionState-CjD8gekO.js +0 -210
- package/dist/esm/sdk/exactSigningLaneIdentity-olheZx_n.js +0 -1
- package/dist/esm/sdk/export-viewer-host-jo7h_0wl.js +0 -1
- package/dist/esm/sdk/helpers-D4QckQhq.js +0 -1
- package/dist/esm/sdk/host-BAqOYnju.js +0 -1
- package/dist/esm/sdk/intentDigest-CB6zy3lN.js +0 -1
- package/dist/esm/sdk/jsxRuntime.module-CoHsKD_3.js +0 -1
- package/dist/esm/sdk/keyMaterialBrands-uVZHfAh3.js +0 -1
- package/dist/esm/sdk/localOnly-DBQRG6Qh.js +0 -1
- package/dist/esm/sdk/messages-Cv2j4SKI.js +0 -1
- package/dist/esm/sdk/mountExportPrivateKeySurface-G7Z_9JMQ.js +0 -1
- package/dist/esm/sdk/nearEd25519YaoMaterialActivation-DQIw8ho3.js +0 -1
- package/dist/esm/sdk/nearEd25519YaoSigningPreparation-Bp_CvWRz.js +0 -1
- package/dist/esm/sdk/nearRpcResults--cBcfmp4.js +0 -1
- package/dist/esm/sdk/normalization-BGPR6osg.js +0 -1
- package/dist/esm/sdk/operationFingerprint-5-wH2Ht8.js +0 -1
- package/dist/esm/sdk/passkey-custody-LP4UTFbn.js +0 -1
- package/dist/esm/sdk/pendingWalletRecoveryCodeBackup-BNk4ebsY.js +0 -1
- package/dist/esm/sdk/recovery-entrypoint-DkT8sFO5.js +0 -1
- package/dist/esm/sdk/registration-Btozh7uh.js +0 -1
- package/dist/esm/sdk/registration-CSAG_h4Y.js +0 -1
- package/dist/esm/sdk/registrationIds-BIel5S0i.js +0 -1
- package/dist/esm/sdk/registrationIntent-DV1GYZ3K.js +0 -1
- package/dist/esm/sdk/registrationPreparationPreload-vOCqNuG4.js +0 -1
- package/dist/esm/sdk/registrationSignerPlan-FzD3TwxB.js +0 -1
- package/dist/esm/sdk/relayerHttp-DaPeS929.js +0 -1
- package/dist/esm/sdk/routePlan-B_KJaPtm.js +0 -1
- package/dist/esm/sdk/router-Dd3fFHk3.js +0 -1
- package/dist/esm/sdk/routerAbNormalSigning-D_fHjq5l.js +0 -1
- package/dist/esm/sdk/runtime-auth-B2M91rSx.js +0 -1
- package/dist/esm/sdk/runtime-device-link-ojjPSRaG.js +0 -1
- package/dist/esm/sdk/runtime-ecdsa-tempo-CE4JLgmn.js +0 -1
- package/dist/esm/sdk/runtime-email-otp-DDwtKVAe.js +0 -1
- package/dist/esm/sdk/runtime-export-JXYk8sQ-.js +0 -1
- package/dist/esm/sdk/runtime-near-BB8AG6dV.js +0 -1
- package/dist/esm/sdk/runtime-preferences-DKFZYccW.js +0 -1
- package/dist/esm/sdk/runtime-recovery-C_XjsDBg.js +0 -1
- package/dist/esm/sdk/runtime-recovery-codes-CWp839mH.js +0 -1
- package/dist/esm/sdk/runtimeContext-BpObgzbj.js +0 -6
- package/dist/esm/sdk/runtimeLoader-DjgBf_yF.js +0 -1
- package/dist/esm/sdk/sdkSentEvents-_RGAEeld.js +0 -1
- package/dist/esm/sdk/secp256k1-B_6W9QDJ.js +0 -1
- package/dist/esm/sdk/sessionPolicy-CNVK7nJ6.js +0 -1
- package/dist/esm/sdk/shared-j_KsFbCT.js +0 -1
- package/dist/esm/sdk/signEvmFamily-CcLVBm0f.js +0 -1
- package/dist/esm/sdk/signNear-mWbTE2Dl.js +0 -1
- package/dist/esm/sdk/signerDomain-BhUTzDmF.js +0 -1
- package/dist/esm/sdk/signerLoader-By0IY24G.js +0 -1
- package/dist/esm/sdk/signingFlow-LUWrZi2d.js +0 -2
- package/dist/esm/sdk/trace-M34pNGuF.js +0 -1
- package/dist/esm/sdk/transaction-activity-BbDod7ji.js +0 -1
- package/dist/esm/sdk/transactionReview-CBE5oH4c.js +0 -1
- package/dist/esm/sdk/transactionReviewAdmission-0ZgWs6q3.js +0 -1
- package/dist/esm/sdk/transactionState-9d7f3xVj.js +0 -1
- package/dist/esm/sdk/validation-dC1-_uyG.js +0 -1
- package/dist/esm/sdk/wallet-recovery-CcDZ1hMH.js +0 -1
- package/dist/esm/sdk/walletAuthority-CoWSeqvQ.js +0 -1
- package/dist/esm/sdk/walletCustodyEcdsaContinuity-B7xi7nwh.js +0 -1
- package/dist/esm/sdk/walletRecoveryCommit-ljxVeo-d.js +0 -1
- package/dist/esm/sdk/walletRecoveryRotate-HztDcDaY.js +0 -1
- package/dist/esm/sdk/warmSessionHydration-BPGM0YRU.js +0 -1
- package/dist/esm/shared-ts/src/authorization/walletCustodyOperation.js +0 -16
- package/dist/esm/shared-ts/src/device-linking/contracts.js +0 -8
- package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +0 -167
- package/dist/esm/shared-ts/src/passkey-custody/ceremonyCommitPayload.js +0 -43
- package/dist/esm/shared-ts/src/signing-lanes/participants.js +0 -256
- package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +0 -479
- package/dist/esm/shared-ts/src/threshold/secp256k1.js +0 -6
- package/dist/esm/shared-ts/src/utils/addAuthMethodRegistration.js +0 -103
- package/dist/esm/shared-ts/src/utils/ecdsaKeyFactsInventory.js +0 -43
- package/dist/esm/shared-ts/src/utils/exactKeys.js +0 -17
- package/dist/esm/shared-ts/src/utils/routerAbTraceContext.js +0 -36
- package/dist/esm/shared-ts/src/utils/walletAddSignerActivation.js +0 -32
- package/dist/public/sdk/EvmClient-DoxytQaJ.js +0 -1
- package/dist/public/sdk/NearClient-vJ65Wjrq.js +0 -1
- package/dist/public/sdk/NonceCoordinator-BBeadCSq.js +0 -1
- package/dist/public/sdk/accountLifecycle-EyfYPnuT.js +0 -1
- package/dist/public/sdk/actions-DZLxCcrU.js +0 -1
- package/dist/public/sdk/adapters-DtAyuoiA.js +0 -2
- package/dist/public/sdk/base-Xtd32asf.js +0 -1
- package/dist/public/sdk/bytes-t5S5mkat.js +0 -1
- package/dist/public/sdk/canonicalPrimitives-MPGET2cl.js +0 -1
- package/dist/public/sdk/canonicalSignerErrorCode-C0hh_SVi.js +0 -1
- package/dist/public/sdk/chains-yAls2d9X.js +0 -1
- package/dist/public/sdk/challengeDelivery-cAsaUC6U.js +0 -1
- package/dist/public/sdk/configHelpers-CseiVoZD.js +0 -1
- package/dist/public/sdk/csp-stylesheet-B1fAhrGB.js +0 -2
- package/dist/public/sdk/defaultConfigs-CWpApkMq.js +0 -1
- package/dist/public/sdk/display-jK7_hYho.js +0 -1
- package/dist/public/sdk/domainIds-GDzjOs6i.js +0 -1
- package/dist/public/sdk/ecdsaCapabilityManifest-CHFu-QrV.js +0 -1
- package/dist/public/sdk/ecdsaPresignLifecycle-CQnCxSlq.js +0 -1
- package/dist/public/sdk/ecdsaPresignPoolIdentity-Ci-ovDlv.js +0 -1
- package/dist/public/sdk/enrichDisplayModelWithAbi-CR-4ebuU.js +0 -1
- package/dist/public/sdk/evmFamilyEcdsaIdentity-Br3iFdQx.js +0 -1
- package/dist/public/sdk/exactSessionState-CjD8gekO.js +0 -210
- package/dist/public/sdk/exactSigningLaneIdentity-olheZx_n.js +0 -1
- package/dist/public/sdk/export-viewer-host-jo7h_0wl.js +0 -1
- package/dist/public/sdk/helpers-D4QckQhq.js +0 -1
- package/dist/public/sdk/host-BAqOYnju.js +0 -1
- package/dist/public/sdk/intentDigest-CB6zy3lN.js +0 -1
- package/dist/public/sdk/jsxRuntime.module-CoHsKD_3.js +0 -1
- package/dist/public/sdk/keyMaterialBrands-uVZHfAh3.js +0 -1
- package/dist/public/sdk/localOnly-DBQRG6Qh.js +0 -1
- package/dist/public/sdk/messages-Cv2j4SKI.js +0 -1
- package/dist/public/sdk/mountExportPrivateKeySurface-G7Z_9JMQ.js +0 -1
- package/dist/public/sdk/nearEd25519YaoMaterialActivation-DQIw8ho3.js +0 -1
- package/dist/public/sdk/nearEd25519YaoSigningPreparation-Bp_CvWRz.js +0 -1
- package/dist/public/sdk/nearRpcResults--cBcfmp4.js +0 -1
- package/dist/public/sdk/normalization-BGPR6osg.js +0 -1
- package/dist/public/sdk/operationFingerprint-5-wH2Ht8.js +0 -1
- package/dist/public/sdk/passkey-custody-LP4UTFbn.js +0 -1
- package/dist/public/sdk/pendingWalletRecoveryCodeBackup-BNk4ebsY.js +0 -1
- package/dist/public/sdk/recovery-entrypoint-DkT8sFO5.js +0 -1
- package/dist/public/sdk/registration-Btozh7uh.js +0 -1
- package/dist/public/sdk/registration-CSAG_h4Y.js +0 -1
- package/dist/public/sdk/registrationIds-BIel5S0i.js +0 -1
- package/dist/public/sdk/registrationIntent-DV1GYZ3K.js +0 -1
- package/dist/public/sdk/registrationPreparationPreload-vOCqNuG4.js +0 -1
- package/dist/public/sdk/registrationSignerPlan-FzD3TwxB.js +0 -1
- package/dist/public/sdk/relayerHttp-DaPeS929.js +0 -1
- package/dist/public/sdk/routePlan-B_KJaPtm.js +0 -1
- package/dist/public/sdk/router-Dd3fFHk3.js +0 -1
- package/dist/public/sdk/routerAbNormalSigning-D_fHjq5l.js +0 -1
- package/dist/public/sdk/runtime-auth-B2M91rSx.js +0 -1
- package/dist/public/sdk/runtime-device-link-ojjPSRaG.js +0 -1
- package/dist/public/sdk/runtime-ecdsa-tempo-CE4JLgmn.js +0 -1
- package/dist/public/sdk/runtime-email-otp-DDwtKVAe.js +0 -1
- package/dist/public/sdk/runtime-export-JXYk8sQ-.js +0 -1
- package/dist/public/sdk/runtime-near-BB8AG6dV.js +0 -1
- package/dist/public/sdk/runtime-preferences-DKFZYccW.js +0 -1
- package/dist/public/sdk/runtime-recovery-C_XjsDBg.js +0 -1
- package/dist/public/sdk/runtime-recovery-codes-CWp839mH.js +0 -1
- package/dist/public/sdk/runtimeContext-BpObgzbj.js +0 -6
- package/dist/public/sdk/runtimeLoader-DjgBf_yF.js +0 -1
- package/dist/public/sdk/sdkSentEvents-_RGAEeld.js +0 -1
- package/dist/public/sdk/secp256k1-B_6W9QDJ.js +0 -1
- package/dist/public/sdk/sessionPolicy-CNVK7nJ6.js +0 -1
- package/dist/public/sdk/shared-j_KsFbCT.js +0 -1
- package/dist/public/sdk/signEvmFamily-CcLVBm0f.js +0 -1
- package/dist/public/sdk/signNear-mWbTE2Dl.js +0 -1
- package/dist/public/sdk/signerDomain-BhUTzDmF.js +0 -1
- package/dist/public/sdk/signerLoader-By0IY24G.js +0 -1
- package/dist/public/sdk/signingFlow-LUWrZi2d.js +0 -2
- package/dist/public/sdk/trace-M34pNGuF.js +0 -1
- package/dist/public/sdk/transaction-activity-BbDod7ji.js +0 -1
- package/dist/public/sdk/transactionReview-CBE5oH4c.js +0 -1
- package/dist/public/sdk/transactionReviewAdmission-0ZgWs6q3.js +0 -1
- package/dist/public/sdk/transactionState-9d7f3xVj.js +0 -1
- package/dist/public/sdk/validation-dC1-_uyG.js +0 -1
- package/dist/public/sdk/wallet-recovery-CcDZ1hMH.js +0 -1
- package/dist/public/sdk/walletAuthority-CoWSeqvQ.js +0 -1
- package/dist/public/sdk/walletCustodyEcdsaContinuity-B7xi7nwh.js +0 -1
- package/dist/public/sdk/walletRecoveryCommit-ljxVeo-d.js +0 -1
- package/dist/public/sdk/walletRecoveryRotate-HztDcDaY.js +0 -1
- package/dist/public/sdk/warmSessionHydration-BPGM0YRU.js +0 -1
- package/dist/public/sdk/workers/evm_crypto.wasm +0 -0
- package/dist/public/sdk/workers/near_signer.wasm +0 -0
- package/dist/public/sdk/workers/tempo_signer.wasm +0 -0
- package/dist/types/wallet/src/SeamsWeb/assembly/browserWorkerWarmupPolicy.d.ts +0 -4
- package/dist/types/wallet/src/SeamsWeb/assembly/configureBrowserIndexedDB.d.ts +0 -3
- package/dist/types/wallet/src/SeamsWeb/operations/auth/walletAuth.d.ts +0 -56
- package/dist/types/wallet/src/SeamsWeb/operations/evm/index.d.ts +0 -9
- package/dist/types/wallet/src/SeamsWeb/operations/near/index.d.ts +0 -11
- package/dist/types/wallet/src/SeamsWeb/operations/recovery/accountSync.d.ts +0 -19
- package/dist/types/wallet/src/SeamsWeb/publicApi/devices.typecheck.d.ts +0 -2
- package/dist/types/wallet/src/SeamsWeb/publicApi/preferences.d.ts +0 -8
- package/dist/types/wallet/src/SeamsWeb/publicApi/recovery.d.ts +0 -14
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/config-guards.d.ts +0 -15
- package/dist/types/wallet/src/SeamsWeb/walletIframe/host/registrationPreparationPreload.d.ts +0 -2
- package/dist/types/wallet/src/core/signingEngine/flows/registration/public.d.ts +0 -68
- package/dist/types/wallet/src/react/context/useEagerPrewarm.d.ts +0 -3
- package/dist/workers/evm_crypto.wasm +0 -0
- package/dist/workers/near_signer.wasm +0 -0
- package/dist/workers/tempo_signer.wasm +0 -0
- /package/dist/esm/sdk/{accountIds-C3Ihsd2c.js → accountIds-BzZs7YoX.js} +0 -0
- /package/dist/esm/sdk/{base64-ojm5DKcF.js → base64-CsEj-_bC.js} +0 -0
- /package/dist/esm/sdk/{browser-CsOGMbMy.js → browser-D4wUl_77.js} +0 -0
- /package/dist/esm/sdk/{errors-DfbnsXjO.js → errors-BZO3LF6G.js} +0 -0
- /package/dist/esm/sdk/{events-BJyVcnsn.js → events-DsQJQ0Cl.js} +0 -0
- /package/dist/esm/sdk/{executeWorkerOperation-CrFf3FkL.js → executeWorkerOperation-BInr8RYN.js} +0 -0
- /package/dist/esm/sdk/{jsonRpc-C85RYR0A.js → jsonRpc-DrCYQIM9.js} +0 -0
- /package/dist/esm/sdk/{keccak-zexutGfG.js → keccak-B02Fekdh.js} +0 -0
- /package/dist/esm/sdk/{profileAccountProjection-DHCaMtOu.js → profileAccountProjection-DmmfMood.js} +0 -0
- /package/dist/esm/sdk/{signerSlot-BQ1g5JNV.js → signerSlot-Dto7dObP.js} +0 -0
- /package/dist/esm/sdk/{surface-measurement-reporter-OICExWKE.js → surface-measurement-reporter-IlPOI3QK.js} +0 -0
- /package/dist/public/sdk/{accountIds-C3Ihsd2c.js → accountIds-BzZs7YoX.js} +0 -0
- /package/dist/public/sdk/{base64-ojm5DKcF.js → base64-CsEj-_bC.js} +0 -0
- /package/dist/public/sdk/{browser-CsOGMbMy.js → browser-D4wUl_77.js} +0 -0
- /package/dist/public/sdk/{errors-DfbnsXjO.js → errors-BZO3LF6G.js} +0 -0
- /package/dist/public/sdk/{events-BJyVcnsn.js → events-DsQJQ0Cl.js} +0 -0
- /package/dist/public/sdk/{executeWorkerOperation-CrFf3FkL.js → executeWorkerOperation-BInr8RYN.js} +0 -0
- /package/dist/public/sdk/{jsonRpc-C85RYR0A.js → jsonRpc-DrCYQIM9.js} +0 -0
- /package/dist/public/sdk/{keccak-zexutGfG.js → keccak-B02Fekdh.js} +0 -0
- /package/dist/public/sdk/{profileAccountProjection-DHCaMtOu.js → profileAccountProjection-DmmfMood.js} +0 -0
- /package/dist/public/sdk/{signerSlot-BQ1g5JNV.js → signerSlot-Dto7dObP.js} +0 -0
- /package/dist/public/sdk/{surface-measurement-reporter-OICExWKE.js → surface-measurement-reporter-IlPOI3QK.js} +0 -0
|
@@ -1,13 +1,9 @@
|
|
|
1
|
-
import {
|
|
2
|
-
import
|
|
3
|
-
import { wireLiteral, wireNullable, wireObject, wireUnion } from "../utils/wireSchema.js";
|
|
4
|
-
import { delegatedWalletPermissionNamesV1 } from "../authorization/delegatedAuthority.js";
|
|
1
|
+
import { requireRecord } from "../utils/validation.js";
|
|
2
|
+
import "../authorization/delegatedAuthority.js";
|
|
5
3
|
import { base64UrlDecode, base64UrlEncode } from "../utils/base64.js";
|
|
6
|
-
import {
|
|
7
|
-
import {
|
|
8
|
-
import
|
|
9
|
-
import { parseWalletAddAuthMethodRegistrationOptions } from "../utils/addAuthMethodRegistration.js";
|
|
10
|
-
import { parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationTupleV1, parseLinkedDeviceOrdinaryMaterialSourceContributionTupleV1 } from "./sourceContribution.js";
|
|
4
|
+
import { exactRecord } from "../utils/exactRecord.js";
|
|
5
|
+
import { parseDelegatedWalletAuthority, parseTargetEmail, parseUnixTime, sessionId } from "./wireFields.js";
|
|
6
|
+
import "./sourceContribution.js";
|
|
11
7
|
import "./committedSignerPackages.js";
|
|
12
8
|
//#region ../shared-ts/src/device-linking/parsers.ts
|
|
13
9
|
const QR_FIELDS = [
|
|
@@ -31,16 +27,6 @@ const COMPACT_QR_FIELDS = [
|
|
|
31
27
|
"i",
|
|
32
28
|
"e"
|
|
33
29
|
];
|
|
34
|
-
function supportedLiteral(...values) {
|
|
35
|
-
return (raw, label) => {
|
|
36
|
-
if (!values.includes(raw)) throw new Error(`${label} is unsupported`);
|
|
37
|
-
return raw;
|
|
38
|
-
};
|
|
39
|
-
}
|
|
40
|
-
function parseEmailHashHex(raw, label) {
|
|
41
|
-
if (typeof raw !== "string" || !/^[0-9a-f]{64}$/.test(raw)) throw new Error(`${label} must be 32 canonical lowercase hex bytes`);
|
|
42
|
-
return raw;
|
|
43
|
-
}
|
|
44
30
|
function parsePublicKey(raw, label) {
|
|
45
31
|
if (typeof raw !== "string" || raw.length === 0 || !/^[A-Za-z0-9_-]+$/.test(raw)) throw new Error(`${label} must be canonical unpadded base64url`);
|
|
46
32
|
try {
|
|
@@ -51,87 +37,10 @@ function parsePublicKey(raw, label) {
|
|
|
51
37
|
}
|
|
52
38
|
return raw;
|
|
53
39
|
}
|
|
54
|
-
|
|
55
|
-
if (typeof raw !== "string" || raw.length === 0 || !/^[A-Za-z0-9_-]+$/.test(raw)) throw new Error(`${label} must be canonical unpadded base64url`);
|
|
56
|
-
try {
|
|
57
|
-
const decoded = base64UrlDecode(raw);
|
|
58
|
-
if (decoded.length === 0 || base64UrlEncode(decoded) !== raw) throw new Error("non-canonical");
|
|
59
|
-
} catch {
|
|
60
|
-
throw new Error(`${label} must be canonical unpadded base64url`);
|
|
61
|
-
}
|
|
62
|
-
return raw;
|
|
63
|
-
}
|
|
64
|
-
function parseCanonicalFixedBase64UrlBytes(raw, length, label) {
|
|
65
|
-
const value = parseCanonicalBase64UrlBytes(raw, label);
|
|
66
|
-
const decoded = base64UrlDecode(value);
|
|
67
|
-
try {
|
|
68
|
-
if (decoded.length !== length) throw new Error(`${label} must encode ${length} bytes`);
|
|
69
|
-
return value;
|
|
70
|
-
} finally {
|
|
71
|
-
decoded.fill(0);
|
|
72
|
-
}
|
|
73
|
-
}
|
|
74
|
-
const P256_FIELD_PRIME = BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff");
|
|
75
|
-
const P256_CURVE_A = P256_FIELD_PRIME - 3n;
|
|
76
|
-
const P256_CURVE_B = BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b");
|
|
77
|
-
function bigEndianBytesToBigInt(bytes) {
|
|
78
|
-
let value = 0n;
|
|
79
|
-
for (const byte of bytes) value = value << 8n | BigInt(byte);
|
|
80
|
-
return value;
|
|
81
|
-
}
|
|
82
|
-
function isP256Point(decoded) {
|
|
83
|
-
const x = bigEndianBytesToBigInt(decoded.subarray(1, 33));
|
|
84
|
-
const y = bigEndianBytesToBigInt(decoded.subarray(33, 65));
|
|
85
|
-
if (x >= P256_FIELD_PRIME || y >= P256_FIELD_PRIME) return false;
|
|
86
|
-
return y * y % P256_FIELD_PRIME === (x * x * x % P256_FIELD_PRIME + P256_CURVE_A * x % P256_FIELD_PRIME + P256_CURVE_B) % P256_FIELD_PRIME;
|
|
87
|
-
}
|
|
88
|
-
function parseUncompressedP256PointB64u(raw, label) {
|
|
89
|
-
const value = parseCanonicalFixedBase64UrlBytes(raw, 65, label);
|
|
90
|
-
const decoded = base64UrlDecode(value);
|
|
91
|
-
try {
|
|
92
|
-
if (decoded[0] !== 4) throw new Error(`${label} must be an uncompressed SEC1 P-256 point`);
|
|
93
|
-
if (!isP256Point(decoded)) throw new Error(`${label} must be an on-curve P-256 point`);
|
|
94
|
-
return value;
|
|
95
|
-
} finally {
|
|
96
|
-
decoded.fill(0);
|
|
97
|
-
}
|
|
98
|
-
}
|
|
99
|
-
function parseLinkDevicePublicKeyB64u(raw) {
|
|
100
|
-
return parsePublicKey(raw, "LinkDevicePublicKeyB64u");
|
|
101
|
-
}
|
|
102
|
-
function parseCredential(raw, label) {
|
|
103
|
-
return credentialId(parseCanonicalBase64UrlBytes(raw, label), label);
|
|
104
|
-
}
|
|
105
|
-
function parseKeyFamily(raw, label) {
|
|
106
|
-
if (raw !== "ed25519" && raw !== "ecdsa_secp256k1") throw new Error(`${label} must identify a supported key family`);
|
|
107
|
-
return raw;
|
|
108
|
-
}
|
|
40
|
+
BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff") - 3n;
|
|
109
41
|
function assertExpiryAfterIssued(issuedAtMs, expiresAtMs, label) {
|
|
110
42
|
if (expiresAtMs <= issuedAtMs) throw new Error(`${label}.expiresAtMs must be after issuedAtMs`);
|
|
111
43
|
}
|
|
112
|
-
function delegatedWalletAuthorityWireValue(value) {
|
|
113
|
-
return {
|
|
114
|
-
kind: value.kind,
|
|
115
|
-
permissions: [...delegatedWalletPermissionNamesV1(value)]
|
|
116
|
-
};
|
|
117
|
-
}
|
|
118
|
-
function qrPayloadWireValue(payload) {
|
|
119
|
-
const base = {
|
|
120
|
-
version: payload.version,
|
|
121
|
-
purpose: payload.purpose,
|
|
122
|
-
linkSessionId: payload.linkSessionId,
|
|
123
|
-
linkPublicKeyB64u: payload.linkPublicKeyB64u,
|
|
124
|
-
devicePublicKeyB64u: payload.devicePublicKeyB64u,
|
|
125
|
-
requestedPermission: delegatedWalletAuthorityWireValue(payload.requestedPermission),
|
|
126
|
-
targetFactor: payload.targetFactor,
|
|
127
|
-
issuedAtMs: payload.issuedAtMs,
|
|
128
|
-
expiresAtMs: payload.expiresAtMs
|
|
129
|
-
};
|
|
130
|
-
return payload.targetFactor.kind === "email_otp" ? {
|
|
131
|
-
...base,
|
|
132
|
-
targetEmail: payload.targetEmail
|
|
133
|
-
} : base;
|
|
134
|
-
}
|
|
135
44
|
function parseTargetFactor(raw, label) {
|
|
136
45
|
switch (exactRecord(raw, ["kind"], label).kind) {
|
|
137
46
|
case "passkey_prf": return { kind: "passkey_prf" };
|
|
@@ -139,65 +48,6 @@ function parseTargetFactor(raw, label) {
|
|
|
139
48
|
default: throw new Error(`${label}.kind is unsupported`);
|
|
140
49
|
}
|
|
141
50
|
}
|
|
142
|
-
function passkeyTargetFactorV1() {
|
|
143
|
-
return wireObject({ kind: wireLiteral("passkey_prf") });
|
|
144
|
-
}
|
|
145
|
-
function emailOtpTargetFactorV1() {
|
|
146
|
-
return wireObject({ kind: wireLiteral("email_otp") });
|
|
147
|
-
}
|
|
148
|
-
function existingEnrollmentV1() {
|
|
149
|
-
return wireObject({ kind: wireLiteral("existing_enrollment") });
|
|
150
|
-
}
|
|
151
|
-
function newEnrollmentV1() {
|
|
152
|
-
return wireObject({ kind: wireLiteral("new_enrollment") });
|
|
153
|
-
}
|
|
154
|
-
function emailOtpEnrollmentSelectionV1() {
|
|
155
|
-
return wireUnion("kind", [existingEnrollmentV1(), newEnrollmentV1()]);
|
|
156
|
-
}
|
|
157
|
-
function parseEmailOtpEnrollmentSelection(raw, label) {
|
|
158
|
-
return emailOtpEnrollmentSelectionV1()(raw, label);
|
|
159
|
-
}
|
|
160
|
-
function emailOtpEnrollmentMaterialV1() {
|
|
161
|
-
return wireObject({
|
|
162
|
-
enrollmentSealKeyVersion: parseNonEmptyToken,
|
|
163
|
-
clientUnlockPublicKeyB64u: parseNonEmptyToken,
|
|
164
|
-
unlockKeyVersion: parseNonEmptyToken,
|
|
165
|
-
serverSealedFactorCiphertextB64u: parseNonEmptyToken
|
|
166
|
-
});
|
|
167
|
-
}
|
|
168
|
-
function parseApprovedTargetFactor(raw, label) {
|
|
169
|
-
const record = requireRecord(raw, label);
|
|
170
|
-
if (record.kind === "passkey_prf") {
|
|
171
|
-
exactRecord(record, ["kind"], label);
|
|
172
|
-
return { kind: "passkey_prf" };
|
|
173
|
-
}
|
|
174
|
-
if (record.kind === "email_otp") {
|
|
175
|
-
const enrollment = parseEmailOtpEnrollmentSelection(record.enrollment, `${label}.enrollment`);
|
|
176
|
-
const targetEmail = parseTargetEmail(record.targetEmail, `${label}.targetEmail`);
|
|
177
|
-
if (enrollment.kind === "existing_enrollment") return {
|
|
178
|
-
kind: "email_otp",
|
|
179
|
-
targetEmail,
|
|
180
|
-
enrollment,
|
|
181
|
-
baseWalletAuthMethodId: walletAuthMethodId(exactRecord(record, [
|
|
182
|
-
"kind",
|
|
183
|
-
"targetEmail",
|
|
184
|
-
"enrollment",
|
|
185
|
-
"baseWalletAuthMethodId"
|
|
186
|
-
], label).baseWalletAuthMethodId, `${label}.baseWalletAuthMethodId`)
|
|
187
|
-
};
|
|
188
|
-
exactRecord(record, [
|
|
189
|
-
"kind",
|
|
190
|
-
"targetEmail",
|
|
191
|
-
"enrollment"
|
|
192
|
-
], label);
|
|
193
|
-
return {
|
|
194
|
-
kind: "email_otp",
|
|
195
|
-
targetEmail,
|
|
196
|
-
enrollment
|
|
197
|
-
};
|
|
198
|
-
}
|
|
199
|
-
throw new Error(`${label}.kind is unsupported`);
|
|
200
|
-
}
|
|
201
51
|
function parseQrPayloadRecord(record) {
|
|
202
52
|
if (record.version !== "v5") throw new Error("QrLinkedDeviceSessionPayloadV5.version is invalid");
|
|
203
53
|
if (record.purpose !== "linked_device_lane_creation") throw new Error("QrLinkedDeviceSessionPayloadV5.purpose is invalid");
|
|
@@ -229,23 +79,6 @@ function parseQrLinkedDeviceSessionPayloadV5(raw) {
|
|
|
229
79
|
const candidate = requireRecord(raw, "QrLinkedDeviceSessionPayloadV5");
|
|
230
80
|
return parseQrPayloadRecord(exactRecord(candidate, parseTargetFactor(candidate.targetFactor, "QrLinkedDeviceSessionPayloadV5.targetFactor").kind === "email_otp" ? [...QR_FIELDS, "targetEmail"] : QR_FIELDS, "QrLinkedDeviceSessionPayloadV5"));
|
|
231
81
|
}
|
|
232
|
-
function serializeQrLinkedDeviceSessionPayloadV5(payload) {
|
|
233
|
-
const parsed = parseQrPayloadRecord(qrPayloadWireValue(payload));
|
|
234
|
-
const compact = {
|
|
235
|
-
v: 5,
|
|
236
|
-
s: parsed.linkSessionId,
|
|
237
|
-
l: parsed.linkPublicKeyB64u,
|
|
238
|
-
d: parsed.devicePublicKeyB64u,
|
|
239
|
-
a: delegatedWalletAuthorityWireValue(parsed.requestedPermission),
|
|
240
|
-
f: parsed.targetFactor.kind === "passkey_prf" ? "p" : "e",
|
|
241
|
-
i: parsed.issuedAtMs,
|
|
242
|
-
e: parsed.expiresAtMs
|
|
243
|
-
};
|
|
244
|
-
return parsed.targetFactor.kind === "email_otp" ? JSON.stringify({
|
|
245
|
-
...compact,
|
|
246
|
-
t: parsed.targetEmail
|
|
247
|
-
}) : JSON.stringify(compact);
|
|
248
|
-
}
|
|
249
82
|
function parseQrLinkedDeviceSessionTextV5(raw) {
|
|
250
83
|
let decoded;
|
|
251
84
|
try {
|
|
@@ -276,754 +109,7 @@ function parseQrLinkedDeviceSessionTextV5(raw) {
|
|
|
276
109
|
targetFactor: { kind: "passkey_prf" }
|
|
277
110
|
});
|
|
278
111
|
}
|
|
279
|
-
function linkedDeviceOwnerAuthorizationRequestV1() {
|
|
280
|
-
return wireObject({
|
|
281
|
-
payload: parseQrLinkedDeviceSessionPayloadV5,
|
|
282
|
-
requestedAtMs: parseUnixTime
|
|
283
|
-
});
|
|
284
|
-
}
|
|
285
|
-
function parseLinkedDeviceOwnerAuthorizationRequestV1(raw) {
|
|
286
|
-
return linkedDeviceOwnerAuthorizationRequestV1()(raw, "LinkedDeviceOwnerAuthorizationRequestV1");
|
|
287
|
-
}
|
|
288
|
-
function linkSessionStatesV1() {
|
|
289
|
-
const withDevice = (state) => wireObject({
|
|
290
|
-
state: wireLiteral(state),
|
|
291
|
-
deviceId: authorizationDeviceId
|
|
292
|
-
});
|
|
293
|
-
return [
|
|
294
|
-
wireObject({ state: wireLiteral("displaying_qr") }),
|
|
295
|
-
withDevice("claimed"),
|
|
296
|
-
withDevice("awaiting_target_factor"),
|
|
297
|
-
withDevice("awaiting_source_contribution"),
|
|
298
|
-
withDevice("provisioning"),
|
|
299
|
-
wireObject({
|
|
300
|
-
state: wireLiteral("authority_pending_local_install"),
|
|
301
|
-
deviceId: authorizationDeviceId,
|
|
302
|
-
authorityId: walletAuthorityId,
|
|
303
|
-
packageSetDigestB64u: digest
|
|
304
|
-
}),
|
|
305
|
-
wireObject({
|
|
306
|
-
state: wireLiteral("active"),
|
|
307
|
-
deviceId: authorizationDeviceId,
|
|
308
|
-
authorityId: walletAuthorityId,
|
|
309
|
-
activatedAtMs: parseUnixTime
|
|
310
|
-
}),
|
|
311
|
-
wireObject({
|
|
312
|
-
state: wireLiteral("failed_before_commit"),
|
|
313
|
-
error: parseLinkPrecommitFailureV1
|
|
314
|
-
}),
|
|
315
|
-
wireObject({
|
|
316
|
-
state: wireLiteral("cancelled"),
|
|
317
|
-
cancelledAtMs: parseUnixTime
|
|
318
|
-
}),
|
|
319
|
-
wireObject({
|
|
320
|
-
state: wireLiteral("expired"),
|
|
321
|
-
expiredAtMs: parseUnixTime
|
|
322
|
-
})
|
|
323
|
-
];
|
|
324
|
-
}
|
|
325
|
-
function parseLinkSessionStateV1(raw) {
|
|
326
|
-
const state = requireRecord(raw, "LinkSessionStateV1").state;
|
|
327
|
-
if (typeof state !== "string") throw new Error("LinkSessionStateV1.state is invalid");
|
|
328
|
-
const schema = linkSessionStatesV1().find((variant) => variant.shape.state.literals.includes(state));
|
|
329
|
-
if (!schema) throw new Error(`LinkSessionStateV1.state ${state} is unsupported`);
|
|
330
|
-
return schema(raw, `LinkSessionStateV1.${state}`);
|
|
331
|
-
}
|
|
332
|
-
function parseLinkPrecommitFailureV1(raw) {
|
|
333
|
-
const record = exactRecord(raw, ["kind", "reason"], "LinkPrecommitFailureV1");
|
|
334
|
-
if (record.kind !== "invalid_input" && record.kind !== "unauthorized_source" && record.kind !== "revoked_source" && record.kind !== "permission_attenuation_failed" && record.kind !== "target_factor_failed" && record.kind !== "expired_session" && record.kind !== "cancelled_session" && record.kind !== "claim_conflict" && record.kind !== "package_preparation_failed") throw new Error("LinkPrecommitFailureV1.kind is invalid");
|
|
335
|
-
return {
|
|
336
|
-
kind: record.kind,
|
|
337
|
-
reason: parseNonEmptyToken(record.reason, "LinkPrecommitFailureV1.reason")
|
|
338
|
-
};
|
|
339
|
-
}
|
|
340
|
-
function linkSessionProjectionV1() {
|
|
341
|
-
return wireObject({
|
|
342
|
-
kind: wireLiteral("linked_device_session_projection_v1"),
|
|
343
|
-
linkSessionId: sessionId,
|
|
344
|
-
qrPayload: parseQrLinkedDeviceSessionPayloadV5,
|
|
345
|
-
revision: parseNonNegativeSafeInteger,
|
|
346
|
-
createdAtMs: parseUnixTime,
|
|
347
|
-
updatedAtMs: parseUnixTime,
|
|
348
|
-
state: parseLinkSessionStateV1
|
|
349
|
-
});
|
|
350
|
-
}
|
|
351
|
-
function parseLinkSessionProjectionV1(raw) {
|
|
352
|
-
return linkSessionProjectionV1()(raw, "LinkSessionProjectionV1");
|
|
353
|
-
}
|
|
354
|
-
function linkSessionTransportEventV1() {
|
|
355
|
-
return wireObject({
|
|
356
|
-
kind: wireLiteral("linked_device_session_event_v1"),
|
|
357
|
-
linkSessionId: sessionId,
|
|
358
|
-
state: parseLinkSessionStateV1,
|
|
359
|
-
emittedAtMs: parseUnixTime
|
|
360
|
-
});
|
|
361
|
-
}
|
|
362
|
-
function parseLinkSessionTransportEventV1(raw) {
|
|
363
|
-
return linkSessionTransportEventV1()(raw, "LinkSessionTransportEventV1");
|
|
364
|
-
}
|
|
365
|
-
function linkedDeviceApprovalResultV1() {
|
|
366
|
-
return wireUnion("outcome", [wireObject({
|
|
367
|
-
outcome: wireLiteral("pending"),
|
|
368
|
-
state: parsePendingApprovalState
|
|
369
|
-
}), wireObject({
|
|
370
|
-
outcome: wireLiteral("replayed"),
|
|
371
|
-
replay: wireObject({
|
|
372
|
-
state: () => "pending",
|
|
373
|
-
session: parsePendingApprovalState
|
|
374
|
-
})
|
|
375
|
-
})]);
|
|
376
|
-
}
|
|
377
|
-
function parseLinkedDeviceApprovalResultV1(raw) {
|
|
378
|
-
return linkedDeviceApprovalResultV1()(raw, "LinkedDeviceApprovalResultV1");
|
|
379
|
-
}
|
|
380
|
-
function parsePendingApprovalState(raw) {
|
|
381
|
-
const state = parseLinkSessionStateV1(raw);
|
|
382
|
-
switch (state.state) {
|
|
383
|
-
case "awaiting_target_factor":
|
|
384
|
-
case "awaiting_source_contribution":
|
|
385
|
-
case "provisioning":
|
|
386
|
-
case "authority_pending_local_install": return state;
|
|
387
|
-
default: throw new Error("LinkedDeviceApprovalResultV1 state is not pending");
|
|
388
|
-
}
|
|
389
|
-
}
|
|
390
|
-
function linkedDeviceSessionClaimV1() {
|
|
391
|
-
return wireObject({
|
|
392
|
-
kind: wireLiteral("linked_device_session_claim_v1"),
|
|
393
|
-
linkSessionId: sessionId,
|
|
394
|
-
walletId,
|
|
395
|
-
enrollmentId,
|
|
396
|
-
deviceId: linkedDeviceId,
|
|
397
|
-
devicePublicKeyB64u: parsePublicKey,
|
|
398
|
-
targetFactor: parseTargetFactor,
|
|
399
|
-
sessionRevision: parseUnixTime,
|
|
400
|
-
claimedAtMs: parseUnixTime,
|
|
401
|
-
claimExpiresAtMs: parseUnixTime
|
|
402
|
-
}, (claim, label) => assertExpiryAfterIssued(claim.claimedAtMs, claim.claimExpiresAtMs, label));
|
|
403
|
-
}
|
|
404
|
-
function parseLinkedDeviceSessionClaimV1(raw) {
|
|
405
|
-
return linkedDeviceSessionClaimV1()(raw, "LinkedDeviceSessionClaimV1");
|
|
406
|
-
}
|
|
407
|
-
function walletSessionOwnerAuthorizationV1() {
|
|
408
|
-
return wireObject({
|
|
409
|
-
kind: wireLiteral("wallet_session"),
|
|
410
|
-
walletSessionId,
|
|
411
|
-
authorizationId: walletSessionAuthorizationId
|
|
412
|
-
});
|
|
413
|
-
}
|
|
414
|
-
function parseLinkedDeviceOwnerAuthorizationSourceV1(raw, label = "ownerAuthorization") {
|
|
415
|
-
if (requireRecord(raw, label).kind !== "wallet_session") throw new Error(`${label}.kind is unsupported`);
|
|
416
|
-
return walletSessionOwnerAuthorizationV1()(raw, label);
|
|
417
|
-
}
|
|
418
|
-
function linkedDeviceApprovalFields() {
|
|
419
|
-
return {
|
|
420
|
-
kind: wireLiteral("linked_device_approval_v1"),
|
|
421
|
-
linkSessionId: sessionId,
|
|
422
|
-
walletId,
|
|
423
|
-
enrollmentId,
|
|
424
|
-
deviceId: linkedDeviceId,
|
|
425
|
-
linkPublicKeyB64u: parsePublicKey,
|
|
426
|
-
devicePublicKeyB64u: parsePublicKey,
|
|
427
|
-
permission: parseDelegatedWalletAuthority,
|
|
428
|
-
targetFactor: parseApprovedTargetFactor,
|
|
429
|
-
ownerAuthorization: parseLinkedDeviceOwnerAuthorizationSourceV1,
|
|
430
|
-
approvedAtMs: parseUnixTime,
|
|
431
|
-
expiresAtMs: parseUnixTime
|
|
432
|
-
};
|
|
433
|
-
}
|
|
434
|
-
function approvedBeforeExpiry(approval, label) {
|
|
435
|
-
assertExpiryAfterIssued(approval.approvedAtMs, approval.expiresAtMs, label);
|
|
436
|
-
}
|
|
437
|
-
function linkedDeviceApprovalV1() {
|
|
438
|
-
return wireObject(linkedDeviceApprovalFields(), approvedBeforeExpiry);
|
|
439
|
-
}
|
|
440
|
-
function linkedDeviceSourceContributionApprovalV1() {
|
|
441
|
-
return wireObject({
|
|
442
|
-
...linkedDeviceApprovalFields(),
|
|
443
|
-
sourceContribution: parseLinkedDeviceOrdinaryMaterialSourceContributionTupleV1
|
|
444
|
-
}, approvedBeforeExpiry);
|
|
445
|
-
}
|
|
446
|
-
function parseLinkedDeviceApprovalV1(raw) {
|
|
447
|
-
const record = requireRecord(raw, "LinkedDeviceApprovalV1");
|
|
448
|
-
return (record.sourceContribution === void 0 ? linkedDeviceApprovalV1() : linkedDeviceSourceContributionApprovalV1())(record, "LinkedDeviceApprovalV1");
|
|
449
|
-
}
|
|
450
|
-
function linkedDeviceApprovalDeliveryV1() {
|
|
451
|
-
return wireObject({
|
|
452
|
-
kind: wireLiteral("linked_device_approval_delivery_v1"),
|
|
453
|
-
approval: parseLinkedDeviceApprovalV1
|
|
454
|
-
});
|
|
455
|
-
}
|
|
456
|
-
function parseLinkedDeviceApprovalDeliveryV1(raw) {
|
|
457
|
-
return linkedDeviceApprovalDeliveryV1()(raw, "LinkedDeviceApprovalDeliveryV1");
|
|
458
|
-
}
|
|
459
|
-
function linkedDeviceTargetPreparationFields() {
|
|
460
|
-
return {
|
|
461
|
-
kind: wireLiteral("linked_device_target_preparation_v1"),
|
|
462
|
-
linkSessionId: sessionId,
|
|
463
|
-
walletId,
|
|
464
|
-
enrollmentId,
|
|
465
|
-
deviceId: linkedDeviceId,
|
|
466
|
-
deliveryRecipientPublicKey65B64u: parseUncompressedP256PointB64u,
|
|
467
|
-
walletAuthMethodId,
|
|
468
|
-
ed25519ExportRoot: wireNullable(ed25519ExportRootPreparationV1()),
|
|
469
|
-
ordinarySignerMaterialRecipientRequirements: parseRecipientRequirements,
|
|
470
|
-
issuedAtMs: parseUnixTime,
|
|
471
|
-
expiresAtMs: parseUnixTime
|
|
472
|
-
};
|
|
473
|
-
}
|
|
474
|
-
function preparationExpiresAfterIssue(preparation, label) {
|
|
475
|
-
if (preparation.expiresAtMs <= preparation.issuedAtMs) throw new Error(`${label}.expiresAtMs must follow issuedAtMs`);
|
|
476
|
-
}
|
|
477
|
-
function passkeyTargetPreparationV1() {
|
|
478
|
-
return wireObject({
|
|
479
|
-
...linkedDeviceTargetPreparationFields(),
|
|
480
|
-
targetFactor: passkeyTargetFactorV1(),
|
|
481
|
-
passkeyCreationOptions: parseLinkedDevicePasskeyCreationOptionsV1,
|
|
482
|
-
passkeyConfigurationDigestB64u: digest
|
|
483
|
-
}, (preparation, label) => {
|
|
484
|
-
preparationExpiresAfterIssue(preparation, label);
|
|
485
|
-
if (preparation.passkeyCreationOptions.walletAuthMethodId !== preparation.walletAuthMethodId) throw new Error(`${label}.passkeyCreationOptions.walletAuthMethodId must match the preparation`);
|
|
486
|
-
});
|
|
487
|
-
}
|
|
488
|
-
function emailOtpTargetPreparationV1() {
|
|
489
|
-
return wireObject({
|
|
490
|
-
...linkedDeviceTargetPreparationFields(),
|
|
491
|
-
targetFactor: emailOtpTargetFactorV1(),
|
|
492
|
-
targetEmail: parseTargetEmail,
|
|
493
|
-
enrollment: existingEnrollmentV1(),
|
|
494
|
-
baseWalletAuthMethodId: walletAuthMethodId
|
|
495
|
-
}, preparationExpiresAfterIssue);
|
|
496
|
-
}
|
|
497
|
-
function newEmailOtpTargetPreparationV1() {
|
|
498
|
-
return wireObject({
|
|
499
|
-
...linkedDeviceTargetPreparationFields(),
|
|
500
|
-
targetFactor: emailOtpTargetFactorV1(),
|
|
501
|
-
targetEmail: parseTargetEmail,
|
|
502
|
-
enrollment: newEnrollmentV1()
|
|
503
|
-
}, preparationExpiresAfterIssue);
|
|
504
|
-
}
|
|
505
|
-
function parseLinkedDeviceTargetPreparationV1(raw) {
|
|
506
|
-
const label = "LinkedDeviceTargetPreparationV1";
|
|
507
|
-
const record = requireRecord(raw, label);
|
|
508
|
-
if (parseTargetFactor(record.targetFactor, `${label}.targetFactor`).kind === "passkey_prf") return passkeyTargetPreparationV1()(record, label);
|
|
509
|
-
return (parseEmailOtpEnrollmentSelection(record.enrollment, `${label}.enrollment`).kind === "new_enrollment" ? newEmailOtpTargetPreparationV1() : emailOtpTargetPreparationV1())(record, label);
|
|
510
|
-
}
|
|
511
|
-
function linkedDeviceTargetPreparationRequestV1() {
|
|
512
|
-
return wireObject({
|
|
513
|
-
kind: wireLiteral("linked_device_target_preparation_request_v1"),
|
|
514
|
-
linkSessionId: sessionId,
|
|
515
|
-
deliveryRecipientPublicKey65B64u: parseUncompressedP256PointB64u
|
|
516
|
-
});
|
|
517
|
-
}
|
|
518
|
-
function parseLinkedDeviceTargetPreparationRequestV1(raw) {
|
|
519
|
-
return linkedDeviceTargetPreparationRequestV1()(raw, "LinkedDeviceTargetPreparationRequestV1");
|
|
520
|
-
}
|
|
521
|
-
function emailOtpBaseFactorChoiceV1() {
|
|
522
|
-
return wireObject({
|
|
523
|
-
baseWalletAuthMethodId: walletAuthMethodId,
|
|
524
|
-
maskedEmailHint: (raw, label) => {
|
|
525
|
-
if (typeof raw !== "string" || raw.length === 0) throw new Error(`${label} is invalid`);
|
|
526
|
-
return raw;
|
|
527
|
-
}
|
|
528
|
-
});
|
|
529
|
-
}
|
|
530
|
-
function emailOtpBaseFactorResolutionsV1() {
|
|
531
|
-
const choice = emailOtpBaseFactorChoiceV1();
|
|
532
|
-
const parseChoice = (raw) => choice(raw, "LinkedDeviceEmailOtpBaseFactorChoiceV1");
|
|
533
|
-
return {
|
|
534
|
-
selected: wireObject({
|
|
535
|
-
kind: wireLiteral("selected"),
|
|
536
|
-
choice: parseChoice
|
|
537
|
-
}),
|
|
538
|
-
selection_required: wireObject({
|
|
539
|
-
kind: wireLiteral("selection_required"),
|
|
540
|
-
choices: (raw, label) => {
|
|
541
|
-
if (!Array.isArray(raw) || raw.length === 0) throw new Error(`${label} must not be empty`);
|
|
542
|
-
const choices = raw.map(parseChoice);
|
|
543
|
-
return [choices[0], ...choices.slice(1)];
|
|
544
|
-
}
|
|
545
|
-
}),
|
|
546
|
-
unavailable: wireObject({
|
|
547
|
-
kind: wireLiteral("unavailable"),
|
|
548
|
-
reason: supportedLiteral("no_active_email_otp_base_factor")
|
|
549
|
-
})
|
|
550
|
-
};
|
|
551
|
-
}
|
|
552
|
-
function parseLinkedDeviceEmailOtpBaseFactorResolutionV1(raw) {
|
|
553
|
-
const label = "LinkedDeviceEmailOtpBaseFactorResolutionV1";
|
|
554
|
-
const record = requireRecord(raw, label);
|
|
555
|
-
const resolutions = emailOtpBaseFactorResolutionsV1();
|
|
556
|
-
switch (record.kind) {
|
|
557
|
-
case "selected":
|
|
558
|
-
case "selection_required":
|
|
559
|
-
case "unavailable": return resolutions[record.kind](record, label);
|
|
560
|
-
default: throw new Error(`${label}.kind is unsupported`);
|
|
561
|
-
}
|
|
562
|
-
}
|
|
563
|
-
function emailOtpBaseFactorResolutionResultV1() {
|
|
564
|
-
return wireObject({
|
|
565
|
-
revision: parseUnixTime,
|
|
566
|
-
resolution: parseLinkedDeviceEmailOtpBaseFactorResolutionV1
|
|
567
|
-
});
|
|
568
|
-
}
|
|
569
|
-
function parseLinkedDeviceEmailOtpBaseFactorResolutionResultV1(raw) {
|
|
570
|
-
return emailOtpBaseFactorResolutionResultV1()(raw, "LinkedDeviceEmailOtpBaseFactorResolutionResultV1");
|
|
571
|
-
}
|
|
572
|
-
function parseLinkedDevicePasskeyCreationOptionsV1(raw, label) {
|
|
573
|
-
const record = exactRecord(raw, [
|
|
574
|
-
"kind",
|
|
575
|
-
"walletAuthMethodId",
|
|
576
|
-
"challengeId",
|
|
577
|
-
"challengeB64u",
|
|
578
|
-
"rpId",
|
|
579
|
-
"user",
|
|
580
|
-
"pubKeyCredParams",
|
|
581
|
-
"authenticatorSelection",
|
|
582
|
-
"timeoutMs",
|
|
583
|
-
"attestation",
|
|
584
|
-
"extensions",
|
|
585
|
-
"excludeCredentials"
|
|
586
|
-
], label);
|
|
587
|
-
const methodId = walletAuthMethodId(record.walletAuthMethodId, `${label}.walletAuthMethodId`);
|
|
588
|
-
exactRecord(record.user, [
|
|
589
|
-
"idB64u",
|
|
590
|
-
"name",
|
|
591
|
-
"displayName"
|
|
592
|
-
], `${label}.user`);
|
|
593
|
-
exactRecord(record.authenticatorSelection, ["residentKey", "userVerification"], `${label}.authenticatorSelection`);
|
|
594
|
-
exactRecord(exactRecord(exactRecord(record.extensions, ["prf"], `${label}.extensions`).prf, ["eval"], `${label}.extensions.prf`).eval, ["firstB64u", "secondB64u"], `${label}.extensions.prf.eval`);
|
|
595
|
-
if (!Array.isArray(record.pubKeyCredParams)) throw new Error(`${label}.pubKeyCredParams must be an array`);
|
|
596
|
-
record.pubKeyCredParams.forEach((entry, index) => {
|
|
597
|
-
exactRecord(entry, ["type", "alg"], `${label}.pubKeyCredParams[${index}]`);
|
|
598
|
-
});
|
|
599
|
-
if (!Array.isArray(record.excludeCredentials)) throw new Error(`${label}.excludeCredentials must be an array`);
|
|
600
|
-
record.excludeCredentials.forEach((entry, index) => {
|
|
601
|
-
exactRecord(entry, ["type", "id"], `${label}.excludeCredentials[${index}]`);
|
|
602
|
-
});
|
|
603
|
-
const options = parseWalletAddAuthMethodRegistrationOptions(record);
|
|
604
|
-
return {
|
|
605
|
-
kind: options.kind,
|
|
606
|
-
walletAuthMethodId: methodId,
|
|
607
|
-
challengeId: options.challengeId,
|
|
608
|
-
challengeB64u: options.challengeB64u,
|
|
609
|
-
rpId: options.rpId,
|
|
610
|
-
user: options.user,
|
|
611
|
-
pubKeyCredParams: options.pubKeyCredParams,
|
|
612
|
-
authenticatorSelection: options.authenticatorSelection,
|
|
613
|
-
timeoutMs: options.timeoutMs,
|
|
614
|
-
attestation: options.attestation,
|
|
615
|
-
extensions: options.extensions,
|
|
616
|
-
excludeCredentials: options.excludeCredentials
|
|
617
|
-
};
|
|
618
|
-
}
|
|
619
|
-
function ed25519ExportRootPreparationV1() {
|
|
620
|
-
return wireObject({
|
|
621
|
-
kind: wireLiteral("linked_device_ed25519_export_root_preparation_v1"),
|
|
622
|
-
walletKeyId,
|
|
623
|
-
applicationBindingDigestB64u: digest,
|
|
624
|
-
registeredPublicKeyB64u: parseEd25519PublicKeyB64u,
|
|
625
|
-
revocationEpoch: parseNonNegativeSafeInteger
|
|
626
|
-
});
|
|
627
|
-
}
|
|
628
|
-
function parseKeyFamilyEntries(raw, item, label) {
|
|
629
|
-
if (!Array.isArray(raw) || raw.length === 0 || raw.length > 2) throw new Error(`${label} must contain one or two entries`);
|
|
630
|
-
const entries = raw.map((entry, index) => item(entry, `${label}[${index}]`));
|
|
631
|
-
if (new Set(entries.map((entry) => entry.keyFamily)).size !== entries.length) throw new Error(`${label} repeats a key family`);
|
|
632
|
-
if (new Set(entries.map((entry) => String(entry.walletKeyId))).size !== entries.length) throw new Error(`${label} repeats a wallet key`);
|
|
633
|
-
if (entries.length === 2 && (entries[0]?.keyFamily !== "ed25519" || entries[1]?.keyFamily !== "ecdsa_secp256k1")) throw new Error(`${label} must be ordered Ed25519 then ECDSA`);
|
|
634
|
-
return entries;
|
|
635
|
-
}
|
|
636
|
-
function recipientRequirementV1() {
|
|
637
|
-
return wireObject({
|
|
638
|
-
kind: wireLiteral("ordinary_signer_material_recipient_requirement_v1"),
|
|
639
|
-
keyFamily: parseKeyFamily,
|
|
640
|
-
walletKeyId
|
|
641
|
-
});
|
|
642
|
-
}
|
|
643
|
-
function parseRecipientRequirements(raw) {
|
|
644
|
-
const requirements = parseKeyFamilyEntries(raw, recipientRequirementV1(), "LinkedDeviceTargetPreparationV1.ordinarySignerMaterialRecipientRequirements");
|
|
645
|
-
const first = requirements[0];
|
|
646
|
-
if (!first) throw new Error("ordinary signer material recipient requirements are empty");
|
|
647
|
-
return [first, ...requirements.slice(1)];
|
|
648
|
-
}
|
|
649
|
-
const webAuthnTransport = /* @__PURE__ */ wireLiteral("ble", "cable", "hybrid", "internal", "nfc", "smart-card", "usb");
|
|
650
|
-
function parseWebAuthnTransports(raw, label) {
|
|
651
|
-
const transports = requireArray(raw, label).map((entry, index) => webAuthnTransport(entry, `${label}[${index}]`));
|
|
652
|
-
if (new Set(transports).size !== transports.length) throw new Error(`${label} contains duplicates`);
|
|
653
|
-
return transports;
|
|
654
|
-
}
|
|
655
|
-
function linkedDeviceWebAuthnRegistrationV1() {
|
|
656
|
-
return wireObject({
|
|
657
|
-
kind: wireLiteral("linked_device_webauthn_registration_v1"),
|
|
658
|
-
credentialIdB64u: parseCredential,
|
|
659
|
-
authenticatorAttachment: wireNullable(wireLiteral("platform", "cross-platform")),
|
|
660
|
-
clientDataJsonB64u: parseCanonicalBase64UrlBytes,
|
|
661
|
-
attestationObjectB64u: parseCanonicalBase64UrlBytes,
|
|
662
|
-
transports: parseWebAuthnTransports
|
|
663
|
-
});
|
|
664
|
-
}
|
|
665
|
-
function recipientRequestV1() {
|
|
666
|
-
const keyFamily = (family) => (raw, label) => {
|
|
667
|
-
if (raw !== family) throw new Error(`${label} does not match its kind`);
|
|
668
|
-
return family;
|
|
669
|
-
};
|
|
670
|
-
return wireUnion("kind", [wireObject({
|
|
671
|
-
kind: wireLiteral("ordinary_ed25519_signer_material_recipient_request_v1"),
|
|
672
|
-
keyFamily: keyFamily("ed25519"),
|
|
673
|
-
walletKeyId,
|
|
674
|
-
recipientPublicKeyB64u: (raw, label) => parseCanonicalFixedBase64UrlBytes(raw, 32, label)
|
|
675
|
-
}), wireObject({
|
|
676
|
-
kind: wireLiteral("ordinary_ecdsa_signer_material_recipient_request_v1"),
|
|
677
|
-
keyFamily: keyFamily("ecdsa_secp256k1"),
|
|
678
|
-
walletKeyId,
|
|
679
|
-
clientEphemeralPublicKey: requireRouterAbX25519PublicKey
|
|
680
|
-
})]);
|
|
681
|
-
}
|
|
682
|
-
function parseRecipientRequests(raw) {
|
|
683
|
-
const requests = parseKeyFamilyEntries(raw, recipientRequestV1(), "LinkedDeviceTargetCredentialRegistrationV1.ordinarySignerMaterialRecipientRequests");
|
|
684
|
-
const first = requests[0];
|
|
685
|
-
if (!first) throw new Error("ordinary signer material recipient requests are empty");
|
|
686
|
-
return [first, ...requests.slice(1)];
|
|
687
|
-
}
|
|
688
|
-
function targetCredentialRegistrationIdentity() {
|
|
689
|
-
return {
|
|
690
|
-
kind: wireLiteral("linked_device_target_credential_registration_v1"),
|
|
691
|
-
linkSessionId: sessionId,
|
|
692
|
-
walletId,
|
|
693
|
-
enrollmentId,
|
|
694
|
-
deviceId: linkedDeviceId,
|
|
695
|
-
walletAuthMethodId
|
|
696
|
-
};
|
|
697
|
-
}
|
|
698
|
-
function passkeyTargetCredentialRegistrationV1() {
|
|
699
|
-
return wireObject({
|
|
700
|
-
...targetCredentialRegistrationIdentity(),
|
|
701
|
-
targetFactor: passkeyTargetFactorV1(),
|
|
702
|
-
targetPreparationDigestB64u: digest,
|
|
703
|
-
ordinarySignerMaterialRecipientRequests: parseRecipientRequests,
|
|
704
|
-
webauthnRegistration: linkedDeviceWebAuthnRegistrationV1(),
|
|
705
|
-
registeredAtMs: parseUnixTime
|
|
706
|
-
});
|
|
707
|
-
}
|
|
708
|
-
function emailOtpTargetCredentialRegistrationV1() {
|
|
709
|
-
return wireObject({
|
|
710
|
-
...targetCredentialRegistrationIdentity(),
|
|
711
|
-
targetFactor: emailOtpTargetFactorV1(),
|
|
712
|
-
targetEmail: parseTargetEmail,
|
|
713
|
-
targetPreparationDigestB64u: digest,
|
|
714
|
-
ordinarySignerMaterialRecipientRequests: parseRecipientRequests,
|
|
715
|
-
emailOtpVerificationGrant: parseLinkedDeviceEmailOtpVerificationGrantV1,
|
|
716
|
-
registeredAtMs: parseUnixTime
|
|
717
|
-
});
|
|
718
|
-
}
|
|
719
|
-
function newEmailOtpTargetCredentialRegistrationV1() {
|
|
720
|
-
return wireObject({
|
|
721
|
-
...targetCredentialRegistrationIdentity(),
|
|
722
|
-
targetFactor: emailOtpTargetFactorV1(),
|
|
723
|
-
targetEmail: parseTargetEmail,
|
|
724
|
-
targetPreparationDigestB64u: digest,
|
|
725
|
-
ordinarySignerMaterialRecipientRequests: parseRecipientRequests,
|
|
726
|
-
emailOtpVerificationGrant: parseLinkedDeviceEmailOtpVerificationGrantV1,
|
|
727
|
-
emailOtpEnrollment: emailOtpEnrollmentMaterialV1(),
|
|
728
|
-
registeredAtMs: parseUnixTime
|
|
729
|
-
});
|
|
730
|
-
}
|
|
731
|
-
function parseLinkedDeviceTargetCredentialRegistrationV1(raw) {
|
|
732
|
-
const label = "LinkedDeviceTargetCredentialRegistrationV1";
|
|
733
|
-
const record = requireRecord(raw, label);
|
|
734
|
-
if (parseTargetFactor(record.targetFactor, `${label}.targetFactor`).kind === "passkey_prf") return passkeyTargetCredentialRegistrationV1()(record, label);
|
|
735
|
-
return (parseLinkedDeviceEmailOtpVerificationGrantV1(record.emailOtpVerificationGrant).enrollment.kind === "new_enrollment" ? newEmailOtpTargetCredentialRegistrationV1() : emailOtpTargetCredentialRegistrationV1())(record, label);
|
|
736
|
-
}
|
|
737
|
-
function targetCredentialRegistrationResultV1() {
|
|
738
|
-
return wireObject({
|
|
739
|
-
kind: wireLiteral("linked_device_target_credential_registration_result_v1"),
|
|
740
|
-
outcome: wireLiteral("applied", "replayed"),
|
|
741
|
-
linkSessionId: sessionId,
|
|
742
|
-
walletId,
|
|
743
|
-
enrollmentId,
|
|
744
|
-
deviceId: linkedDeviceId,
|
|
745
|
-
walletAuthMethodId,
|
|
746
|
-
targetPreparationDigestB64u: digest,
|
|
747
|
-
targetFactor: parseVerifiedTargetFactorV1,
|
|
748
|
-
ordinarySignerMaterialPreparations: parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationTupleV1,
|
|
749
|
-
ordinarySignerMaterialRecipientRequests: parseRecipientRequests,
|
|
750
|
-
keyManifestDigestB64u: digest
|
|
751
|
-
}, (result, label) => {
|
|
752
|
-
const { authMethod } = result.targetFactor;
|
|
753
|
-
if (authMethod.walletAuthMethodId !== result.walletAuthMethodId || authMethod.walletId !== result.walletId) throw new Error(`${label} target identity differs`);
|
|
754
|
-
});
|
|
755
|
-
}
|
|
756
|
-
function parseLinkedDeviceTargetCredentialRegistrationResultV1(raw) {
|
|
757
|
-
return targetCredentialRegistrationResultV1()(raw, "LinkedDeviceTargetCredentialRegistrationResultV1");
|
|
758
|
-
}
|
|
759
|
-
function verifiedAfterCreation(target, label) {
|
|
760
|
-
if (target.verifiedAtMs < target.authMethod.createdAtMs) throw new Error(`${label}.verifiedAtMs precedes authMethod.createdAtMs`);
|
|
761
|
-
}
|
|
762
|
-
function verifiedPasskeyTargetV1() {
|
|
763
|
-
return wireObject({
|
|
764
|
-
kind: wireLiteral("verified_passkey_target_v1"),
|
|
765
|
-
authMethod: parsePasskeyWalletAuthMethodDraftV1,
|
|
766
|
-
verificationDigestB64u: digest,
|
|
767
|
-
verifiedAtMs: parseUnixTime
|
|
768
|
-
}, verifiedAfterCreation);
|
|
769
|
-
}
|
|
770
|
-
function verifiedEmailOtpTargetV1() {
|
|
771
|
-
return wireObject({
|
|
772
|
-
kind: wireLiteral("verified_email_otp_target_v1"),
|
|
773
|
-
authMethod: parseEmailOtpWalletAuthMethodDraftV1,
|
|
774
|
-
targetEmail: parseTargetEmail,
|
|
775
|
-
enrollment: existingEnrollmentV1(),
|
|
776
|
-
baseWalletAuthMethodId: walletAuthMethodId,
|
|
777
|
-
providerUserId: parseNonEmptyToken,
|
|
778
|
-
verificationDigestB64u: digest,
|
|
779
|
-
verifiedAtMs: parseUnixTime
|
|
780
|
-
}, verifiedAfterCreation);
|
|
781
|
-
}
|
|
782
|
-
function verifiedNewEmailOtpTargetV1() {
|
|
783
|
-
return wireObject({
|
|
784
|
-
kind: wireLiteral("verified_email_otp_target_v1"),
|
|
785
|
-
authMethod: parseEmailOtpWalletAuthMethodDraftV1,
|
|
786
|
-
targetEmail: parseTargetEmail,
|
|
787
|
-
enrollment: newEnrollmentV1(),
|
|
788
|
-
providerUserId: parseNonEmptyToken,
|
|
789
|
-
verificationDigestB64u: digest,
|
|
790
|
-
verifiedAtMs: parseUnixTime
|
|
791
|
-
}, verifiedAfterCreation);
|
|
792
|
-
}
|
|
793
|
-
function parseVerifiedTargetFactorV1(raw, label) {
|
|
794
|
-
const record = requireRecord(raw, label);
|
|
795
|
-
if (record.kind === "verified_passkey_target_v1") return verifiedPasskeyTargetV1()(record, label);
|
|
796
|
-
if (record.kind !== "verified_email_otp_target_v1") throw new Error(`${label}.kind is invalid`);
|
|
797
|
-
return (parseEmailOtpEnrollmentSelection(record.enrollment, `${label}.enrollment`).kind === "existing_enrollment" ? verifiedEmailOtpTargetV1() : verifiedNewEmailOtpTargetV1())(record, label);
|
|
798
|
-
}
|
|
799
|
-
function passkeyWalletAuthMethodDraftV1() {
|
|
800
|
-
return wireObject({
|
|
801
|
-
walletAuthMethodId,
|
|
802
|
-
walletId,
|
|
803
|
-
createdAtMs: parseUnixTime,
|
|
804
|
-
kind: wireLiteral("passkey"),
|
|
805
|
-
rpId,
|
|
806
|
-
credentialIdB64u: credentialId,
|
|
807
|
-
credentialPublicKeyB64u: parseCanonicalBase64UrlBytes,
|
|
808
|
-
counter: parseNonNegativeSafeInteger
|
|
809
|
-
});
|
|
810
|
-
}
|
|
811
|
-
function parsePasskeyWalletAuthMethodDraftV1(raw, label) {
|
|
812
|
-
return passkeyWalletAuthMethodDraftV1()(raw, label);
|
|
813
|
-
}
|
|
814
|
-
function emailOtpWalletAuthMethodDraftV1() {
|
|
815
|
-
return wireObject({
|
|
816
|
-
walletAuthMethodId,
|
|
817
|
-
walletId,
|
|
818
|
-
createdAtMs: parseUnixTime,
|
|
819
|
-
kind: wireLiteral("email_otp"),
|
|
820
|
-
emailHashHex: parseEmailHashHex,
|
|
821
|
-
registrationAuthorityId: parseNonEmptyToken
|
|
822
|
-
});
|
|
823
|
-
}
|
|
824
|
-
function parseEmailOtpWalletAuthMethodDraftV1(raw, label) {
|
|
825
|
-
return emailOtpWalletAuthMethodDraftV1()(raw, label);
|
|
826
|
-
}
|
|
827
|
-
function emailOtpVerificationGrantFields(enrollment) {
|
|
828
|
-
return {
|
|
829
|
-
kind: wireLiteral("linked_device_email_otp_verification_grant_v1"),
|
|
830
|
-
grantId: parseNonEmptyToken,
|
|
831
|
-
grantToken: parseNonEmptyToken,
|
|
832
|
-
challengeId: parseNonEmptyToken,
|
|
833
|
-
linkSessionId: sessionId,
|
|
834
|
-
walletId,
|
|
835
|
-
enrollmentId,
|
|
836
|
-
deviceId: linkedDeviceId,
|
|
837
|
-
targetPreparationDigestB64u: digest,
|
|
838
|
-
targetEmail: parseTargetEmail,
|
|
839
|
-
enrollment,
|
|
840
|
-
emailHashHex: parseEmailHashHex,
|
|
841
|
-
registrationAuthorityId: parseNonEmptyToken,
|
|
842
|
-
providerUserId: parseNonEmptyToken,
|
|
843
|
-
authorityDigestB64u: digest,
|
|
844
|
-
issuedAtMs: parseUnixTime,
|
|
845
|
-
expiresAtMs: parseUnixTime
|
|
846
|
-
};
|
|
847
|
-
}
|
|
848
|
-
function grantIssuedBeforeExpiry(grant, label) {
|
|
849
|
-
assertExpiryAfterIssued(grant.issuedAtMs, grant.expiresAtMs, label);
|
|
850
|
-
}
|
|
851
|
-
function emailOtpVerificationGrantV1() {
|
|
852
|
-
return wireObject({
|
|
853
|
-
...emailOtpVerificationGrantFields(existingEnrollmentV1()),
|
|
854
|
-
baseWalletAuthMethodId: walletAuthMethodId
|
|
855
|
-
}, grantIssuedBeforeExpiry);
|
|
856
|
-
}
|
|
857
|
-
function newEnrollmentEmailOtpVerificationGrantV1() {
|
|
858
|
-
return wireObject(emailOtpVerificationGrantFields(newEnrollmentV1()), grantIssuedBeforeExpiry);
|
|
859
|
-
}
|
|
860
|
-
function parseLinkedDeviceEmailOtpVerificationGrantV1(raw) {
|
|
861
|
-
const label = "LinkedDeviceEmailOtpVerificationGrantV1";
|
|
862
|
-
const record = requireRecord(raw, label);
|
|
863
|
-
return (parseEmailOtpEnrollmentSelection(record.enrollment, `${label}.enrollment`).kind === "new_enrollment" ? newEnrollmentEmailOtpVerificationGrantV1() : emailOtpVerificationGrantV1())(record, label);
|
|
864
|
-
}
|
|
865
|
-
function emailOtpFactorReleaseEnvelopeV1() {
|
|
866
|
-
return wireObject({
|
|
867
|
-
kind: wireLiteral("email_otp_factor_release_v1"),
|
|
868
|
-
challengeId: parseNonEmptyToken,
|
|
869
|
-
enrollmentId: parseNonEmptyToken,
|
|
870
|
-
enrollmentSealKeyVersion: parseNonEmptyToken,
|
|
871
|
-
serverEphemeralPublicKey65B64u: parseUncompressedP256PointB64u,
|
|
872
|
-
nonce12B64u: (raw, label) => parseCanonicalFixedBase64UrlBytes(raw, 12, label),
|
|
873
|
-
ciphertextB64u: parseCanonicalBase64UrlBytes
|
|
874
|
-
});
|
|
875
|
-
}
|
|
876
|
-
function parseLinkedDeviceEmailOtpFactorReleaseEnvelopeV1(raw) {
|
|
877
|
-
return emailOtpFactorReleaseEnvelopeV1()(raw, "LinkedDeviceEmailOtpFactorReleaseEnvelopeV1");
|
|
878
|
-
}
|
|
879
|
-
function emailOtpChallengeStartRequestV1() {
|
|
880
|
-
return wireObject({
|
|
881
|
-
kind: wireLiteral("linked_device_email_otp_challenge_start_request_v1"),
|
|
882
|
-
linkSessionId: sessionId,
|
|
883
|
-
workerEphemeralPublicKey65B64u: parseUncompressedP256PointB64u
|
|
884
|
-
});
|
|
885
|
-
}
|
|
886
|
-
function parseLinkedDeviceEmailOtpChallengeStartRequestV1(raw) {
|
|
887
|
-
return emailOtpChallengeStartRequestV1()(raw, "LinkedDeviceEmailOtpChallengeStartRequestV1");
|
|
888
|
-
}
|
|
889
|
-
function emailOtpChallengeResendRequestV1() {
|
|
890
|
-
return wireObject({
|
|
891
|
-
kind: wireLiteral("linked_device_email_otp_challenge_resend_request_v1"),
|
|
892
|
-
linkSessionId: sessionId,
|
|
893
|
-
challengeId: parseNonEmptyToken
|
|
894
|
-
});
|
|
895
|
-
}
|
|
896
|
-
function parseLinkedDeviceEmailOtpChallengeResendRequestV1(raw) {
|
|
897
|
-
return emailOtpChallengeResendRequestV1()(raw, "LinkedDeviceEmailOtpChallengeResendRequestV1");
|
|
898
|
-
}
|
|
899
|
-
function emailOtpChallengeVerifyRequestV1() {
|
|
900
|
-
return wireObject({
|
|
901
|
-
kind: wireLiteral("linked_device_email_otp_challenge_verify_request_v1"),
|
|
902
|
-
linkSessionId: sessionId,
|
|
903
|
-
challengeId: parseNonEmptyToken,
|
|
904
|
-
otpCode: (raw, label) => {
|
|
905
|
-
if (typeof raw !== "string" || !/^[0-9]{6,10}$/.test(raw)) throw new Error(`${label} is invalid`);
|
|
906
|
-
return raw;
|
|
907
|
-
}
|
|
908
|
-
});
|
|
909
|
-
}
|
|
910
|
-
function parseLinkedDeviceEmailOtpChallengeVerifyRequestV1(raw) {
|
|
911
|
-
return emailOtpChallengeVerifyRequestV1()(raw, "LinkedDeviceEmailOtpChallengeVerifyRequestV1");
|
|
912
|
-
}
|
|
913
|
-
function emailOtpChallengeResultV1() {
|
|
914
|
-
return wireObject({
|
|
915
|
-
kind: wireLiteral("linked_device_email_otp_challenge_result_v1"),
|
|
916
|
-
challengeId: parseNonEmptyToken,
|
|
917
|
-
maskedEmailHint: parseNonEmptyToken,
|
|
918
|
-
expiresAtMs: parseUnixTime,
|
|
919
|
-
resendAvailableAtMs: parseUnixTime
|
|
920
|
-
});
|
|
921
|
-
}
|
|
922
|
-
function parseLinkedDeviceEmailOtpChallengeResultV1(raw) {
|
|
923
|
-
return emailOtpChallengeResultV1()(raw, "LinkedDeviceEmailOtpChallengeResultV1");
|
|
924
|
-
}
|
|
925
|
-
function parseLinkedDeviceEmailOtpVerificationResultV1(raw) {
|
|
926
|
-
const record = exactRecord(raw, [
|
|
927
|
-
"kind",
|
|
928
|
-
"verificationGrant",
|
|
929
|
-
"factorRelease"
|
|
930
|
-
], "LinkedDeviceEmailOtpVerificationResultV1");
|
|
931
|
-
if (record.kind !== "linked_device_email_otp_verification_result_v1") throw new Error("LinkedDeviceEmailOtpVerificationResultV1.kind is invalid");
|
|
932
|
-
const verificationGrant = parseLinkedDeviceEmailOtpVerificationGrantV1(record.verificationGrant);
|
|
933
|
-
if (isNewEnrollmentEmailOtpVerificationGrantV1(verificationGrant)) {
|
|
934
|
-
if (record.factorRelease !== null) throw new Error("new linked-device Email OTP enrollment cannot carry a factor release");
|
|
935
|
-
return {
|
|
936
|
-
kind: "linked_device_email_otp_verification_result_v1",
|
|
937
|
-
verificationGrant,
|
|
938
|
-
factorRelease: null
|
|
939
|
-
};
|
|
940
|
-
}
|
|
941
|
-
const factorRelease = parseLinkedDeviceEmailOtpFactorReleaseEnvelopeV1(record.factorRelease);
|
|
942
|
-
if (factorRelease.challengeId !== verificationGrant.challengeId) throw new Error("LinkedDeviceEmailOtpVerificationResultV1 challenge binding changed");
|
|
943
|
-
return {
|
|
944
|
-
kind: "linked_device_email_otp_verification_result_v1",
|
|
945
|
-
verificationGrant,
|
|
946
|
-
factorRelease
|
|
947
|
-
};
|
|
948
|
-
}
|
|
949
|
-
function isNewEnrollmentEmailOtpVerificationGrantV1(grant) {
|
|
950
|
-
return grant.enrollment.kind === "new_enrollment";
|
|
951
|
-
}
|
|
952
|
-
function buildQrLinkedDeviceSessionPayloadV5(args) {
|
|
953
|
-
const issuedAtMs = parseUnixTime(args.issuedAtMs, "QrLinkedDeviceSessionPayloadV5.issuedAtMs");
|
|
954
|
-
const expiresAtMs = parseUnixTime(args.expiresAtMs, "QrLinkedDeviceSessionPayloadV5.expiresAtMs");
|
|
955
|
-
assertExpiryAfterIssued(issuedAtMs, expiresAtMs, "QrLinkedDeviceSessionPayloadV5");
|
|
956
|
-
const targetFactor = parseTargetFactor(args.targetFactor, "QrLinkedDeviceSessionPayloadV5.targetFactor");
|
|
957
|
-
if (targetFactor.kind === "passkey_prf") return {
|
|
958
|
-
version: "v5",
|
|
959
|
-
purpose: "linked_device_lane_creation",
|
|
960
|
-
linkSessionId: args.linkSessionId,
|
|
961
|
-
linkPublicKeyB64u: args.linkPublicKeyB64u,
|
|
962
|
-
devicePublicKeyB64u: args.devicePublicKeyB64u,
|
|
963
|
-
requestedPermission: parseDelegatedWalletAuthority(delegatedWalletAuthorityWireValue(args.requestedPermission), "QrLinkedDeviceSessionPayloadV5.requestedPermission"),
|
|
964
|
-
targetFactor,
|
|
965
|
-
issuedAtMs,
|
|
966
|
-
expiresAtMs
|
|
967
|
-
};
|
|
968
|
-
if (args.targetEmail === void 0) throw new Error("QrLinkedDeviceSessionPayloadV5.targetEmail is required for Email OTP");
|
|
969
|
-
return {
|
|
970
|
-
version: "v5",
|
|
971
|
-
purpose: "linked_device_lane_creation",
|
|
972
|
-
linkSessionId: args.linkSessionId,
|
|
973
|
-
linkPublicKeyB64u: args.linkPublicKeyB64u,
|
|
974
|
-
devicePublicKeyB64u: args.devicePublicKeyB64u,
|
|
975
|
-
requestedPermission: parseDelegatedWalletAuthority(delegatedWalletAuthorityWireValue(args.requestedPermission), "QrLinkedDeviceSessionPayloadV5.requestedPermission"),
|
|
976
|
-
targetFactor,
|
|
977
|
-
targetEmail: parseTargetEmail(args.targetEmail, "QrLinkedDeviceSessionPayloadV5.targetEmail"),
|
|
978
|
-
issuedAtMs,
|
|
979
|
-
expiresAtMs
|
|
980
|
-
};
|
|
981
|
-
}
|
|
982
|
-
function buildLinkedDeviceSessionClaimRequestV1(payload) {
|
|
983
|
-
return {
|
|
984
|
-
kind: "linked_device_session_claim_request_v1",
|
|
985
|
-
payload
|
|
986
|
-
};
|
|
987
|
-
}
|
|
988
|
-
function validateEnrollmentTimes(approvedAtMs, expiresAtMs, label) {
|
|
989
|
-
const approved = parseUnixTime(approvedAtMs, `${label}.approvedAtMs`);
|
|
990
|
-
const expires = parseUnixTime(expiresAtMs, `${label}.expiresAtMs`);
|
|
991
|
-
assertExpiryAfterIssued(approved, expires, label);
|
|
992
|
-
return {
|
|
993
|
-
approvedAtMs: approved,
|
|
994
|
-
expiresAtMs: expires
|
|
995
|
-
};
|
|
996
|
-
}
|
|
997
|
-
function buildLinkedDeviceApprovalV1(args) {
|
|
998
|
-
const times = validateEnrollmentTimes(args.approvedAtMs, args.expiresAtMs, "LinkedDeviceApprovalV1");
|
|
999
|
-
return parseLinkedDeviceApprovalV1({
|
|
1000
|
-
kind: "linked_device_approval_v1",
|
|
1001
|
-
...args,
|
|
1002
|
-
...times
|
|
1003
|
-
});
|
|
1004
|
-
}
|
|
1005
|
-
function buildLinkedDeviceTargetCredentialRegistrationV1(args) {
|
|
1006
|
-
return parseLinkedDeviceTargetCredentialRegistrationV1({
|
|
1007
|
-
kind: "linked_device_target_credential_registration_v1",
|
|
1008
|
-
...args
|
|
1009
|
-
});
|
|
1010
|
-
}
|
|
1011
|
-
function buildLinkedDeviceSessionCancelUnclaimedRequestV1(args) {
|
|
1012
|
-
return {
|
|
1013
|
-
kind: "linked_device_session_cancel_unclaimed_request_v1",
|
|
1014
|
-
linkSessionId: args.linkSessionId,
|
|
1015
|
-
reason: "user_cancelled",
|
|
1016
|
-
requestedAtMs: parseUnixTime(args.requestedAtMs, "LinkedDeviceSessionCancelUnclaimedRequestV1.requestedAtMs")
|
|
1017
|
-
};
|
|
1018
|
-
}
|
|
1019
|
-
function buildLinkedDeviceSessionCancelClaimedRequestV1(args) {
|
|
1020
|
-
return {
|
|
1021
|
-
kind: "linked_device_session_cancel_claimed_request_v1",
|
|
1022
|
-
...args,
|
|
1023
|
-
requestedAtMs: parseUnixTime(args.requestedAtMs, "LinkedDeviceSessionCancelClaimedRequestV1.requestedAtMs")
|
|
1024
|
-
};
|
|
1025
|
-
}
|
|
1026
112
|
//#endregion
|
|
1027
|
-
export {
|
|
113
|
+
export { parseQrLinkedDeviceSessionPayloadV5, parseQrLinkedDeviceSessionTextV5 };
|
|
1028
114
|
|
|
1029
115
|
//# sourceMappingURL=parsers.js.map
|