@seams/wallet 0.9.3 → 0.10.0

package/dist/{public/sdk/accountLifecycle-CAMVowDl.js → esm/sdk/accountLifecycle-HEUmDLus.js}

@@ -1 +1 @@
-import{c as e}from"./normalize-kUDm5zfS.js";import{d as t,f as n}from"./chains-CiYQT1K4.js";import{i as r,r as i}from"./base64-CsEj-_bC.js";import{d as a,n as o,t as s}from"./accountIds-BzZs7YoX.js";import{t as c}from"./registrationSignerPlan-B9GCvpTV.js";import{c as l,o as u}from"./ecdsaChainTarget-C8ZtMZ8l.js";import{i as d,n as f,r as p}from"./signerDomain-vQmlnsbF.js";import{s as m,t as h}from"./normalization-DCvuCvh0.js";import{r as g}from"./registrationIds-CdPqm-Ya.js";import{t as _}from"./signerSlot-Dto7dObP.js";import{a as v,i as y,n as ee,o as b,r as x,t as te}from"./profileAccountProjection-DmmfMood.js";function ne(e){if(typeof e!=`string`)return{ok:!1,message:`NEAR account projection profile id must be a string`};let t=e.trim();return t?{ok:!0,value:t}:{ok:!1,message:`NEAR account projection profile id is required`}}function S(e){return`near-profile:${String(e)}`}function re(e){let t=n(e);if(t)return{...t}}function C(t){let n=e(t.signerId||``),r=e(t.accountAddress||``).toLowerCase();return{profileId:e(t.profileId||``),signerSlot:t.signerSlot,chainIdKey:e(t.chainIdKey||``).toLowerCase(),accountAddress:r,keyKind:e(t.keyKind||``),schemaVersion:t.schemaVersion,signerId:n}}function ie(t,r,i){let a=n(t),o=String(a?.profileId??r.profileId).trim(),s=String(a?.chainIdKey??r.chainIdKey).trim().toLowerCase(),c=String(a?.keyKind??r.keyKind).trim(),l=Number(a?.schemaVersion??r.schemaVersion),u=Number.isSafeInteger(l)&&l>=1?l:r.schemaVersion,d=Number(a?.signerSlot??r.signerSlot),f=Number.isSafeInteger(d)&&d>=1?d:r.signerSlot,p=String(a?.signerId??r.signerId).trim(),m={profileId:o,signerSlot:f,chainIdKey:s,accountAddress:e(a?.accountAddress??r.accountAddress).toLowerCase(),keyKind:c,schemaVersion:u,signerId:p};if(!(m.profileId===r.profileId&&m.signerSlot===r.signerSlot&&m.chainIdKey===r.chainIdKey&&m.accountAddress===r.accountAddress&&m.keyKind===r.keyKind&&m.schemaVersion===r.schemaVersion&&m.signerId===r.signerId))throw Error(`KeyMaterialStore: payloadEnvelope.aad mismatch for ${i}`);return m}function ae(t,r,i){if(t==null)return;let a=n(t);if(!a)throw Error(`KeyMaterialStore: Invalid payloadEnvelope object for ${i}`);let o=Number(a.encVersion),s=Number.isSafeInteger(o)&&o>=1?o:NaN,c=e(a.alg||``),l=e(a.nonce||``),u=e(a.ciphertext||``),d=e(a.tag||``);if(!Number.isFinite(s))throw Error(`KeyMaterialStore: Invalid payloadEnvelope.encVersion for ${i}`);if(!c||!l||!u)throw Error(`KeyMaterialStore: Missing payloadEnvelope cryptographic fields for ${i}`);let f={encVersion:s,alg:c,nonce:l,ciphertext:u,aad:ie(a.aad,r,i)};return d&&(f.tag=d),f}function w(e){return e===f.emailOtp?f.emailOtp:e===f.passkey?f.passkey:null}function oe(t){if(t.authMethod===f.emailOtp){let n=e(t.metadata.email||``);if(n)return n}return t.walletId}async function T(t,n,r){let i=s(n),a=h(i);if(!a)return null;let o=await x(t,{accountRefs:v(i).map(e=>({chainIdKey:e,accountAddress:a})),signerSlot:r});if(!o)return null;let c=o.selectedSigner.metadata||{},l=typeof c.passkeyCredentialRawId==`string`?c.passkeyCredentialRawId:o.selectedSigner.signerId,u=typeof c.passkeyCredentialId==`string`?c.passkeyCredentialId:o.profile.passkeyCredential?.id||l,d=typeof c.operationalPublicKey==`string`?c.operationalPublicKey:``,f=e(c.nearEd25519SigningKeyId||``);if(!f)return null;let p=e(c.walletId||``);if(!p)return null;let m=w(o.selectedSigner.signerAuthMethod);return{walletId:p,nearAccountId:i,loginDisplayName:oe({walletId:p,authMethod:m,metadata:c}),signerSlot:o.selectedSigner.signerSlot,version:2,registeredAt:o.profile.createdAt,lastLogin:o.profile.updatedAt,lastUpdated:o.profile.updatedAt,operationalPublicKey:d,nearEd25519SigningKeyId:f,passkeyCredential:{id:u,rawId:l},authMethod:m,preferences:o.profile.preferences}}async function se(e){let t=await te(e,{chainIdKeys:[`near:testnet`,`near:mainnet`]});if(!t?.chainAccount?.accountAddress)return null;let n;try{n=s(t.chainAccount.accountAddress)}catch{return null}return{nearAccountId:n,profileId:t.profileId,signerSlot:t.signerSlot}}async function ce(e){let t=await se(e).catch(()=>null);return t?T(e,t.nearAccountId,t.signerSlot):null}async function le(t){let[n,r]=await Promise.all([t.listChainAccountsByChain(`near:testnet`),t.listChainAccountsByChain(`near:mainnet`)]),i=new Set;for(let t of[...n,...r]){let n=e(t.accountAddress||``);if(n)try{i.add(s(n))}catch{}}let a=[],o=new Set;for(let e of i){let n=await x(t,{accountRefs:v(e).map(t=>({chainIdKey:t,accountAddress:h(e)}))}).catch(()=>null);if(!n)continue;let r=n.activeSigners.filter(e=>e.signerKind===p.thresholdEd25519&&w(e.signerAuthMethod)).slice().sort((e,t)=>e.signerSlot-t.signerSlot);for(let n of r){let r=Number(n.signerSlot);if(!Number.isSafeInteger(r)||r<1)continue;let i=`${String(e)}:${r}`;if(o.has(i))continue;o.add(i);let s=await T(t,e,r).catch(()=>null);s&&a.push(s)}}return a}const E=`wallet_custody_ed25519_active_client_v1`,ue=`chacha20poly1305-hkdf-sha256-wallet-custody-seed-v1`;function de(e){for(let[t,n]of[[`walletId`,e.walletId],[`nearAccountId`,e.nearAccountId],[`nearEd25519SigningKeyId`,e.nearEd25519SigningKeyId],[`signingWorkerId`,e.signingWorkerId],[`applicationBindingDigestB64u`,e.applicationBindingDigestB64u],[`signingWorkerVerifyingShareB64u`,e.signingWorkerVerifyingShareB64u],[`stateEpoch`,e.stateEpoch]])if(!String(n||``).trim())throw Error(`Wallet custody Ed25519 material binding requires ${t}`);if(e.participantIds.length!==2)throw Error(`Wallet custody Ed25519 material binding requires exactly two participants`)}function D(e){let{binding:t,sealed:n,target:r}=e;de(t);let o=i(t.registeredPublicKeyB64u);if(o.length!==32)throw Error(`Wallet custody Ed25519 material requires a 32-byte registered public key`);if(!n.ciphertextB64u||!n.nonceB64u)throw Error(`Wallet custody Ed25519 material requires its sealed ciphertext and nonce`);return{profileId:r.profileId,signerSlot:t.signerSlot,chainIdKey:r.chainIdKey,accountAddress:r.accountAddress,keyKind:E,algorithm:`ed25519`,publicKey:`ed25519:${a(o)}`,signerId:t.nearEd25519SigningKeyId,payload:{binding:t},payloadEnvelope:{encVersion:1,alg:ue,nonce:n.nonceB64u,ciphertext:n.ciphertextB64u,aad:C({profileId:r.profileId,signerSlot:t.signerSlot,chainIdKey:r.chainIdKey,accountAddress:r.accountAddress,keyKind:E,schemaVersion:1,signerId:t.nearEd25519SigningKeyId})},timestamp:Date.now(),schemaVersion:1}}const fe=`threshold-ecdsa`,O={signerAuthMethod:f.passkey,signerSource:d.passkeyRegistration},k={signerAuthMethod:f.emailOtp,signerSource:d.emailOtpRegistration};function A(e,t){let n=String(e||``).trim();if(!n)throw Error(`SeamsWalletDB: ${t} is required`);let r=i(n);if(r.length===0)throw Error(`SeamsWalletDB: ${t} decoded to empty credential public key`);return r}async function j(e,t){let n=s(t),r=await ee(e.accountStore,y(n)).catch(()=>null);if(!r?.profileId)return null;let i=ne(r.profileId);return i.ok?{profileId:i.value}:null}async function pe(e,t){let n=s(t.nearAccountId),r=Number(t.signerSlot);if(!Number.isSafeInteger(r)||r<1)throw Error(`SeamsWalletDB: storeUserData requires an exact signerSlot`);let i=r,a=l(t.walletId),o=S(n),c=b(n,t.preferences?.useNetwork),u=h(n),m=String(t.passkeyCredential?.rawId||``).trim()||`signer-${i}`;await e.accountStore.upsertProfile({profileId:o,defaultSignerSlot:i,passkeyCredential:t.passkeyCredential,...t.preferences?{preferences:t.preferences}:{}});let g=await e.accountStore.getAccountSigner({chainIdKey:c,accountAddress:u,signerId:m}).catch(()=>null),_=await e.accountStore.activateAccountSigner({account:{profileId:o,chainIdKey:c,accountAddress:u,accountModel:`near-native`},signer:{signerId:m,signerType:`threshold`,signerKind:p.thresholdEd25519,signerAuthMethod:f.passkey,signerSource:d.passkeyRegistration,metadata:{...g?.metadata||{},walletId:String(a),nearAccountId:String(n),nearEd25519SigningKeyId:t.nearEd25519SigningKeyId,operationalPublicKey:t.operationalPublicKey,passkeyCredentialId:t.passkeyCredential?.id,passkeyCredentialRawId:t.passkeyCredential?.rawId}},activationPolicy:{mode:`allocate_next_free`},preferredSlot:i,mutation:{routeThroughOutbox:!1}});_.signerSlot!==i&&await e.accountStore.upsertProfile({profileId:o,defaultSignerSlot:_.signerSlot,passkeyCredential:t.passkeyCredential,...t.preferences?{preferences:t.preferences}:{}}),await e.accountStore.setLastProfileStateForProfile(o,_.signerSlot)}function me(e){return le(e.accountStore)}function he(e,t,n){return T(e.accountStore,t,n)}function ge(e){return ce(e.accountStore)}function _e(e,t,n){return{nearAccountId:t,signerSlot:n??e.signerSlot,credentialId:e.credentialId,credentialPublicKey:e.credentialPublicKey,transports:e.transports,name:e.name,registered:e.registered,syncedAt:e.syncedAt}}function ve(e){if(e.signerAuthMethod!==f.passkey)return null;let t=String(e.metadata?.walletId||``).trim(),n=String(e.metadata?.passkeyCredentialRawId||``).trim();return!t||!n?null:{walletId:t,credentialId:n,signerSlot:e.signerSlot}}async function ye(e,t){let n=(await e.accountStore.listAccountSigners({chainIdKey:t.chainIdKey,accountAddress:t.accountAddress,status:`active`})).map(ve).filter(e=>e!==null),r=new Map;for(let e of n){let t=r.get(e.walletId);t?t.push(e):r.set(e.walletId,[e])}let i=[];for(let[n,a]of r.entries()){let r=await e.accountStore.listProfileAuthenticators(n);for(let e of a){let n=r.find(t=>t.credentialId===e.credentialId);n&&i.push(_e(n,t.nearAccountId,e.signerSlot))}}return i}async function M(e,t){let n=s(t),r=await ee(e.accountStore,y(n)).catch(()=>null);return r?.accountRef?await ye(e,{nearAccountId:n,chainIdKey:r.accountRef.chainIdKey,accountAddress:r.accountRef.accountAddress}):[]}async function be(e,t,n){let r=Number(n);if(!Number.isSafeInteger(r)||r<1)throw Error(`SeamsWalletDB: signerSlot must be an integer >= 1`);let i=String(t||``).trim();if(!i)throw Error(`SeamsWalletDB: selected wallet id is required`);let a=await e.accountStore.getProfile(i).catch(()=>null);if(!a?.profileId)throw Error(`SeamsWalletDB: Missing profile for wallet ${i}`);await e.accountStore.setLastProfileStateForProfile(a.profileId,r)}function xe(e){try{return l(e)}catch{return null}}function Se(e){if(typeof e!=`string`)return null;try{return s(e)}catch{return null}}function Ce(e){if(typeof e!=`string`||!e.trim())return null;try{return g(e)}catch{return null}}async function we(e,t){let n=null;try{n=await x(e.accountStore,{accountRefs:y(t.nearAccountId),signerSlot:t.signerSlot})}catch{n=null}if(!n)throw Error(`Authenticated wallet activation requires an exact NEAR signer projection`);let r=ne(n.context.profileId);if(!r.ok)throw Error(r.message);let i=n.selectedSigner,a=i.metadata||{},o=xe(a.walletId),s=Se(a.nearAccountId),c=Ce(a.nearEd25519SigningKeyId),l=typeof a.operationalPublicKey==`string`?a.operationalPublicKey.trim():``;if(i.signerKind!==p.thresholdEd25519||i.signerSlot!==t.signerSlot||o!==t.walletId||s!==t.nearAccountId||!c||!l)throw Error(`Authenticated wallet activation requires an exact wallet signer binding`);return{kind:`authenticated_near_ed25519_wallet_profile_binding`,walletId:o,nearProjectionProfileId:r.value,nearAccountId:s,nearEd25519SigningKeyId:c,signerSlot:i.signerSlot,operationalPublicKey:l}}async function Te(e,t){return(await e.accountStore.getProfile(String(t)))?.nearProvisioning??null}async function Ee(e,t){let n=String(t.walletId||``).trim();if(!n)throw Error(`SeamsWalletDB: walletId is required`);let r=Date.now(),i=t.status===`near_ready`?{status:`near_ready`,updatedAtMs:r,nearAccountId:t.nearAccountId}:t.status===`near_failed_retryable`?{status:`near_failed_retryable`,updatedAtMs:r,error:t.errorCode,errorCode:t.errorCode}:{status:t.status,updatedAtMs:r};await e.accountStore.upsertProfile({profileId:n,nearProvisioning:i})}async function De(e,t){let n=s(t.nearAccountId),r=l(t.walletId),i=_(t.signerSlot);if(!i)throw Error(`Authenticated wallet activation requires an exact signerSlot`);let a=await we(e,{walletId:r,nearAccountId:n,signerSlot:i});await e.accountStore.setLastProfileStateForProfile(a.nearProjectionProfileId,a.signerSlot),e.userPreferencesManager.setCurrentWallet(a.walletId),await e.userPreferencesManager.reloadUserSettings().catch(()=>void 0),e.nonceCoordinator.initializeNearAccessKey({walletId:a.walletId,nearAccountId:a.nearAccountId,publicKey:a.operationalPublicKey}),t.nearClient&&e.nonceCoordinator.prefetchNearContext({kind:`initialized_state`,nearClient:t.nearClient}).catch(e=>console.debug(`Nonce prefetch after authentication state initialization failed (non-fatal):`,e))}async function Oe(e,t){let n=Number(t.signerSlot);if(!Number.isSafeInteger(n)||n<1)throw Error(`SeamsWalletDB: authenticator signerSlot must be an integer >= 1`);let r={...t,nearAccountId:s(t.nearAccountId),signerSlot:n},i=await j(e,r.nearAccountId);if(!i?.profileId)throw Error(`SeamsWalletDB: Missing profile/account mapping for NEAR account ${r.nearAccountId}`);await e.accountStore.upsertProfileAuthenticator({profileId:i.profileId,signerSlot:r.signerSlot,credentialId:r.credentialId,credentialPublicKey:r.credentialPublicKey,transports:r.transports,name:r.name,registered:r.registered,syncedAt:r.syncedAt})}function ke(e){let t=String(e).trim();return o(t)||t.split(`.`)[0]||``}function N(e){let t=Date.now();return{version:`wallet_auth_method_v1`,kind:`passkey`,status:`active`,localStatus:`synced`,walletId:e.walletId,rpId:e.rpId,credentialIdB64u:e.credentialId,credentialPublicKeyB64u:r(e.credentialPublicKey),counter:0,createdAtMs:t,updatedAtMs:t}}async function P(e){let n=String(e.walletId||``).trim(),r=String(e.email||``).trim().toLowerCase(),i=String(e.registrationAuthorityId||``).trim();if(!n||!r||!i)throw Error(`SeamsWalletDB: Email OTP auth method requires walletId, email, and registrationAuthorityId`);let a=await t(r);if(String(e.authority.walletId)!==n||e.authority.verifier.emailHashHex!==a)throw Error(`SeamsWalletDB: Email OTP auth method authority does not match wallet or email`);let o=Date.now();return{version:`wallet_auth_method_v1`,kind:`email_otp`,status:`active`,localStatus:`synced`,walletId:e.walletId,emailHashHex:a,registrationAuthorityId:i,authority:e.authority,createdAtMs:o,updatedAtMs:o}}async function Ae(e,t){let n=s(t),r=await j(e,n);r?.profileId&&await e.accountStore.deleteProfileData(r.profileId,{eventAccountId:n})}async function je(e,t){return(await M(e,s(t))).length>0}function Me(e){let t=e.activation.signer.metadata||{},n=e.activation.signer.signerKind,r=n===p.thresholdEcdsa?X(t.thresholdEcdsaPublicKeyB64u,`ECDSA key material publicKey`):X(t.operationalPublicKey,`Ed25519 key material publicKey`),i={profileId:X(e.activation.account.profileId,`profileId`),signerSlot:e.signerSlot,chainIdKey:X(e.activation.account.chainIdKey,`chainIdKey`),accountAddress:X(e.activation.account.accountAddress,`accountAddress`),signerId:X(e.activation.signer.signerId,`signerId`),keyKind:`threshold_share_v1`,algorithm:n===p.thresholdEcdsa?`secp256k1`:`ed25519`,publicKey:r,timestamp:e.timestamp,schemaVersion:1};return n===p.thresholdEd25519&&(i.payload={walletId:X(t.walletId,`walletId`),nearAccountId:X(t.nearAccountId,`nearAccountId`),nearEd25519SigningKeyId:X(t.nearEd25519SigningKeyId,`nearEd25519SigningKeyId`),relayerKeyId:X(t.relayerKeyId,`relayerKeyId`),keyVersion:X(t.keyVersion,`keyVersion`)}),i}function F(e){switch(e.mode.kind){case`fresh_registration`:return{mode:`fail_if_occupied`,signerSlot:e.signerSlot};case`wallet_recovery_replacement`:return{mode:`replace_slot`,signerSlot:e.signerSlot,replacedSignerKind:p.thresholdEd25519,revocationReason:`wallet_recovery_replacement`}}}function Ne(e){switch(e.mode.kind){case`fresh_registration`:return{mode:`allocate_next_free`};case`wallet_recovery_replacement`:return{mode:`replace_profile_chain_kind`,signerSlot:e.signerSlot,replacedSignerKind:p.thresholdEcdsa,revocationReason:`wallet_recovery_replacement`}}}function I(e){let t=Number(e.signerSlot);if(!Number.isSafeInteger(t)||t<1)throw Error(`SeamsWalletDB: wallet signerSlot must be an integer >= 1`);let n=String(e.walletId||``).trim();if(!n)throw Error(`SeamsWalletDB: walletId is required`);let r=s(e.nearAccountId),i=String(e.nearEd25519SigningKeyId||``).trim();if(!i)throw Error(`SeamsWalletDB: nearEd25519SigningKeyId is required`);return{signerSlot:t,walletId:n,nearAccountId:r,nearEd25519SigningKeyId:i}}function L(e,t,n){return{walletId:e.walletId,nearAccountId:String(e.nearAccountId),nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,operationalPublicKey:t.operationalPublicKey,relayerKeyId:t.relayerKeyId,keyVersion:t.keyVersion,...n,...t.participantIds?{participantIds:t.participantIds}:{},...t.clientParticipantId==null?{}:{clientParticipantId:t.clientParticipantId},...t.relayerParticipantId==null?{}:{relayerParticipantId:t.relayerParticipantId}}}function R(e){let t=X(e.operationalPublicKey,`Ed25519 signerId`),{signerSlot:n,walletId:r,nearAccountId:i}=e.identity,a=r=>({input:{account:r,signer:{signerId:t,signerType:`threshold`,signerKind:p.thresholdEd25519,signerAuthMethod:e.source.signerAuthMethod,signerSource:e.source.signerSource,metadata:e.metadata},activationPolicy:e.activationPolicy,preferredSlot:n,mutation:{routeThroughOutbox:!1}},signerSlot:n});return[a({profileId:r,chainIdKey:`wallet`,accountAddress:r,accountModel:`wallet`}),a({profileId:e.nearProfileId,chainIdKey:b(i),accountAddress:h(i),accountModel:`near-native`})]}function z(e){let t=e.map(e=>e.input),n=Date.now();return{signerActivations:t,keyMaterials:e.map(e=>Me({activation:e.input,signerSlot:e.signerSlot,timestamp:n}))}}function B(e,t,n,r){return t.kind===`near_ed25519_and_evm_family_ecdsa`?Q({walletId:e,walletKeys:t.walletKeys},n,r).signerActivations:[]}function V(e,t){return{chainTarget:e.chainTarget,targetKey:e.targetKey,signerSlot:t.signerSlot,signerId:e.signerId}}function H(e,t,n){let r=String(e.credential.rawId||``).trim();if(!r)throw Error(`SeamsWalletDB: registration credential rawId is required`);let i=e.participantIds===void 0?void 0:Z(e.participantIds);return U({walletId:e.walletId,nearAccountId:e.nearAccountId,nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,rpId:e.rpId,signerSlot:e.signerSlot,operationalPublicKey:e.operationalPublicKey,relayerKeyId:e.relayerKeyId,keyVersion:e.keyVersion,participantIds:i,clientParticipantId:e.clientParticipantId,relayerParticipantId:e.relayerParticipantId,credentialFacts:{credentialId:r,credentialDisplayId:e.credential.id,credentialPublicKey:A(e.credentialPublicKeyB64u,`credentialPublicKeyB64u`),transports:e.credential.response?.transports??[]}},t,n)}function U(e,t,n){let r=e.credentialFacts.credentialId,i=I(e),{signerSlot:a,walletId:o,nearAccountId:s}=i,c={id:e.credentialFacts.credentialDisplayId,rawId:r},l=new Date().toISOString(),u=S(s),{signerActivations:d,keyMaterials:f}=z([...R({identity:i,nearProfileId:u,operationalPublicKey:e.operationalPublicKey,source:O,metadata:L(i,e,{passkeyCredentialId:e.credentialFacts.credentialDisplayId,passkeyCredentialRawId:r}),activationPolicy:F({mode:t,signerSlot:a})}),...B(e.walletId,n,O,t)]);return{profiles:[o,u].map(e=>({profileId:e,defaultSignerSlot:a,passkeyCredential:c})),initialAuthMethod:N({walletId:e.walletId,rpId:e.rpId,credentialId:r,credentialPublicKey:e.credentialFacts.credentialPublicKey}),authenticators:[o,u].map(t=>({profileId:t,signerSlot:a,credentialId:r,credentialPublicKey:e.credentialFacts.credentialPublicKey,transports:[...e.credentialFacts.transports],name:`Passkey for ${ke(s)}`,registered:l,syncedAt:l})),signerActivations:d,keyMaterials:f,lastProfileState:{profileId:o,activeSignerSlot:a}}}function Pe(e,t){let n=e.signerActivations[1];if(!n)throw Error(`SeamsWalletDB: wallet Ed25519 registration batch did not complete`);let r=[];for(let n=0;n<t.length;n+=1){let i=t[n],a=e.signerActivations[n+2];if(!i||!a)throw Error(`SeamsWalletDB: mixed wallet ECDSA registration batch did not complete`);r.push(V(i,a))}return{signerSlot:n.signerSlot,storedSigners:r}}function Fe(e){return W(H(e,{kind:`fresh_registration`},{kind:`near_ed25519_only`}),e,e.participantIds,[e.custodyMaterial])}function Ie(e){let t=String(e.credentialIdB64u||``).trim();if(!t)throw Error(`SeamsWalletDB: registration credential projection id is required`);return W(U({walletId:e.walletId,nearAccountId:e.nearAccountId,nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,rpId:e.rpId,signerSlot:e.signerSlot,operationalPublicKey:e.operationalPublicKey,relayerKeyId:e.relayerKeyId,keyVersion:e.keyVersion,participantIds:e.participantIds,credentialFacts:{credentialId:t,credentialDisplayId:t,credentialPublicKey:A(e.credentialPublicKeyB64u,`credentialPublicKeyB64u`),transports:[...e.transports]}},{kind:`fresh_registration`},{kind:`near_ed25519_only`}),e,e.participantIds,[e.custodyMaterial])}function W(e,t,n,r){let i=s(t.nearAccountId),a=r.map(e=>{let r=e.binding;if(r.walletId!==String(t.walletId)||r.nearAccountId!==String(i)||r.nearEd25519SigningKeyId!==String(t.nearEd25519SigningKeyId)||r.signerSlot!==Number(t.signerSlot)||r.participantIds[0]!==n[0]||r.participantIds[1]!==n[1])throw Error(`Wallet custody Ed25519 material does not match registration identity`);return D({target:{profileId:String(S(i)),chainIdKey:b(i),accountAddress:h(i)},binding:r,sealed:e.sealed})}),o=e.lastProfileState;if(!o)throw Error(`Wallet Ed25519 registration publication requires last profile state`);return{profiles:e.profiles,initialAuthMethod:e.initialAuthMethod,authenticators:e.authenticators,signerActivations:e.signerActivations,keyMaterials:[...e.keyMaterials,...a],lastProfileState:{profileId:o.profileId,activeSignerSlot:o.activeSignerSlot,scope:o.scope??null}}}function G(e){let t=e[0];if(!t)throw Error(`SeamsWalletDB: threshold ECDSA walletKeys are required`);return[t,...e.slice(1)]}function Le(e){switch(e){case`email_otp`:return k;case`passkey`:return O;default:return Re(e)}}function Re(e){throw Error(`Unsupported wallet ECDSA registration kind: ${String(e)}`)}async function K(e,t){let{signerActivations:n,keyMaterials:r}=z(Q({walletId:e.walletId,walletKeys:e.walletKeys},Le(e.kind),t).signerActivations);switch(e.kind){case`passkey`:{let t=X(e.credentialIdB64u,`credentialIdB64u`),i=A(e.credentialPublicKeyB64u,`credentialPublicKeyB64u`),a=new Date().toISOString();return{profiles:[{profileId:e.walletId,defaultSignerSlot:1,passkeyCredential:{id:t,rawId:t}}],initialAuthMethod:N({walletId:e.walletId,rpId:e.rpId,credentialId:t,credentialPublicKey:i}),authenticators:[{profileId:e.walletId,signerSlot:1,credentialId:t,credentialPublicKey:i,transports:[...e.transports],name:`Passkey for wallet`,registered:a,syncedAt:a}],signerActivations:n,keyMaterials:r,lastProfileState:{profileId:e.walletId,activeSignerSlot:1,scope:null}}}case`email_otp`:return{profiles:[{profileId:e.walletId,defaultSignerSlot:1}],initialAuthMethod:await P({walletId:e.walletId,email:e.email,registrationAuthorityId:e.registrationAuthorityId,authority:e.authority}),authenticators:[],signerActivations:n,keyMaterials:r,lastProfileState:{profileId:e.walletId,activeSignerSlot:1,scope:null}}}}function q(e){return K(e,{kind:`fresh_registration`})}async function ze(e){let t=X(e.credentialIdB64u,`credentialIdB64u`);return e.kind===`near_ed25519`?W(U({walletId:e.walletId,nearAccountId:e.nearAccountId,nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,rpId:e.rpId,signerSlot:e.signerSlot,operationalPublicKey:e.operationalPublicKey,relayerKeyId:e.relayerKeyId,keyVersion:c,participantIds:Z(e.participantIds),credentialFacts:{credentialId:t,credentialDisplayId:t,credentialPublicKey:A(e.credentialPublicKeyB64u,`credentialPublicKeyB64u`),transports:e.transports}},{kind:`wallet_recovery_replacement`},e.walletKeys.length>0?{kind:`near_ed25519_and_evm_family_ecdsa`,walletKeys:e.walletKeys}:{kind:`near_ed25519_only`}),e,Z(e.participantIds),e.custodyMaterials):await K({kind:`passkey`,walletId:e.walletId,rpId:e.rpId,credentialIdB64u:t,credentialPublicKeyB64u:e.credentialPublicKeyB64u,transports:e.transports,walletKeys:G(e.walletKeys)},{kind:`wallet_recovery_replacement`})}async function Be(e){return e.kind===`near_ed25519`?W(await Y({walletId:e.walletId,nearAccountId:e.nearAccountId,nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,email:e.email,registrationAuthorityId:e.registrationAuthorityId,authority:e.authority,signerSlot:e.signerSlot,operationalPublicKey:e.operationalPublicKey,relayerKeyId:e.relayerKeyId,keyVersion:c,participantIds:Z(e.participantIds)},e.walletKeys.length>0?{kind:`near_ed25519_and_evm_family_ecdsa`,walletKeys:e.walletKeys}:{kind:`near_ed25519_only`},{kind:`wallet_recovery_replacement`}),e,Z(e.participantIds),e.custodyMaterials):await K({kind:`email_otp`,walletId:e.walletId,email:e.email,registrationAuthorityId:e.registrationAuthorityId,authority:e.authority,walletKeys:G(e.walletKeys)},{kind:`wallet_recovery_replacement`})}async function J(e,t,n,r){let i=H(t,n,r);return Pe(await e.accountStore.persistWalletRegistrationFinalize(i),B(t.walletId,r,O))}async function Ve(e,t){return{signerSlot:(await J(e,t,{kind:`fresh_registration`},{kind:`near_ed25519_only`})).signerSlot}}async function He(e,t){return await J(e,t,{kind:`fresh_registration`},{kind:`near_ed25519_and_evm_family_ecdsa`,walletKeys:t.walletKeys})}async function Ue(e,t){return{signerSlot:(await J(e,t,{kind:`wallet_recovery_replacement`},{kind:`near_ed25519_only`})).signerSlot}}async function Y(e,t,n={kind:`fresh_registration`}){let r=I(e),{signerSlot:i,walletId:a,nearAccountId:o}=r,s=S(o),{signerActivations:c,keyMaterials:l}=z([...R({identity:r,nearProfileId:s,operationalPublicKey:e.operationalPublicKey,source:k,metadata:L(r,e,{email:String(e.email||``).trim().toLowerCase(),registrationAuthorityId:String(e.registrationAuthorityId||``).trim()}),activationPolicy:F({mode:n,signerSlot:i})}),...B(e.walletId,t,k,n)]);return{profiles:[a,s].map(e=>({profileId:e,defaultSignerSlot:i})),initialAuthMethod:await P({walletId:e.walletId,email:e.email,registrationAuthorityId:e.registrationAuthorityId,authority:e.authority}),authenticators:[],signerActivations:c,keyMaterials:l,lastProfileState:{profileId:a,activeSignerSlot:i}}}async function We(e,t,n){let r=await Y(t,n),i=await e.accountStore.persistWalletRegistrationFinalize(r),a=B(t.walletId,n,k),o=i.signerActivations[1];if(!o)throw Error(`SeamsWalletDB: wallet Email OTP Ed25519 registration batch did not complete`);let s=[];for(let e=0;e<a.length;e+=1){let t=a[e],n=i.signerActivations[e+2];if(!t||!n)throw Error(`SeamsWalletDB: mixed wallet Email OTP ECDSA registration batch did not complete`);s.push(V(t,n))}return{signerSlot:o.signerSlot,storedSigners:s}}async function Ge(e){return W(await Y(e,{kind:`near_ed25519_only`}),e,e.participantIds,[e.custodyMaterial])}async function Ke(e,t){return{signerSlot:(await We(e,t,{kind:`near_ed25519_only`})).signerSlot}}async function qe(e,t){return We(e,t,{kind:`near_ed25519_and_evm_family_ecdsa`,walletKeys:t.walletKeys})}async function Je(e,t){let n=String(t.auth.credential.rawId||t.auth.credential.id||``).trim();if(!n)throw Error(`SeamsWalletDB: add-signer credential id is required`);let r=I(t),{signerSlot:i,walletId:a,nearAccountId:o}=r,s={id:t.auth.credential.id,rawId:n},c=S(o),{signerActivations:l,keyMaterials:u}=z(R({identity:r,nearProfileId:c,operationalPublicKey:t.operationalPublicKey,source:O,metadata:L(r,t,{passkeyCredentialId:t.auth.credential.id,passkeyCredentialRawId:n}),activationPolicy:{mode:`fail_if_occupied`,signerSlot:i}})),d=await e.accountStore.persistWalletSignerFinalize({profiles:[a,c].map(e=>({profileId:e,defaultSignerSlot:i,passkeyCredential:s})),signerActivations:l,keyMaterials:u,lastProfileState:{profileId:a,activeSignerSlot:i}}),f=d.signerActivations[1];if(!f)throw Error(`SeamsWalletDB: wallet Ed25519 signer batch did not complete`);return{signerSlot:f.signerSlot,rollbackReceipt:d.rollbackReceipt}}async function Ye(e,t){await e.accountStore.rollbackWalletSignerFinalize(t)}function X(e,t){let n=String(e||``).trim();if(!n)throw Error(`SeamsWalletDB: ${t} is required`);return n}function Z(e){if(e.length!==2||e.some(e=>!Number.isSafeInteger(e)||e<1))throw Error(`SeamsWalletDB: Ed25519 participantIds must contain two positive integers`);return[e[0],e[1]]}function Xe(e){if(!Array.isArray(e)||e.length!==2||e[0]!==1||e[1]!==2)throw Error(`SeamsWalletDB: threshold ECDSA participantIds must be [1, 2]`);return[1,2]}function Q(e,t=O,n={kind:`fresh_registration`}){let r=X(e.walletId,`walletId`);if(!Array.isArray(e.walletKeys)||e.walletKeys.length===0)throw Error(`SeamsWalletDB: threshold ECDSA walletKeys are required`);let i=[];for(let a of e.walletKeys){if(a.keyScope!==`evm-family`)throw Error(`SeamsWalletDB: threshold ECDSA wallet keyScope must be evm-family`);let e=X(a.walletId,`wallet key walletId`);if(e!==r)throw Error(`SeamsWalletDB: threshold ECDSA wallet key walletId mismatch`);let o=X(a.keyHandle,`wallet key keyHandle`),s=X(a.ecdsaThresholdKeyId,`wallet key ecdsaThresholdKeyId`),c=X(a.signingRootId,`wallet key signingRootId`),l=X(a.signingRootVersion,`wallet key signingRootVersion`),d=X(a.relayerKeyId,`wallet key relayerKeyId`),f=X(a.thresholdEcdsaPublicKeyB64u,`wallet key thresholdEcdsaPublicKeyB64u`),g=Xe(a.participantIds),_=h(a.thresholdOwnerAddress);if(!_)throw Error(`SeamsWalletDB: wallet key thresholdOwnerAddress is required`);let v=m(a.chainTarget),y=u(a.chainTarget);i.push({chainTarget:a.chainTarget,targetKey:y,signerId:_,signerSlot:1,input:{account:{profileId:e,chainIdKey:v,accountAddress:_,accountModel:fe},signer:{signerId:_,signerType:`threshold`,signerKind:p.thresholdEcdsa,signerAuthMethod:t.signerAuthMethod,signerSource:t.signerSource,metadata:{accountModel:fe,accountAddress:_,ownerAddress:_,thresholdOwnerAddress:_,keyScope:a.keyScope,keyHandle:o,walletId:e,ecdsaThresholdKeyId:s,signingRootId:c,signingRootVersion:l,relayerKeyId:d,relayerVerifyingShareB64u:X(a.relayerVerifyingShareB64u,`wallet key relayerVerifyingShareB64u`),publicCapability:a.publicCapability,roleLocalMaterialRef:a.roleLocalMaterialRef,ecdsaRoleLocalPublicFacts:a.ecdsaRoleLocalPublicFacts,thresholdEcdsaPublicKeyB64u:f,participantIds:g,chainTarget:a.chainTarget,targetMembership:{targetKey:y,chainTarget:a.chainTarget},sharedEvmFamilyKey:{walletId:e,keyScope:a.keyScope,keyHandle:o,ecdsaThresholdKeyId:s,signingRootId:c,signingRootVersion:l,participantIds:g,thresholdOwnerAddress:_,thresholdEcdsaPublicKeyB64u:f},chainId:a.chainTarget.chainId}},activationPolicy:Ne({mode:n,signerSlot:1}),preferredSlot:1,mutation:{routeThroughOutbox:!1}}})}return{walletId:r,signerActivations:i}}function $(e,t){return e.accountStore.persistWalletSignerFinalize({profiles:[{profileId:t.walletId}],...z(t.signerActivations)})}async function Ze(e,t){let n=Q(t),r=await $(e,n);return{storedSigners:n.signerActivations.map((e,t)=>{let n=r.signerActivations[t];if(!n)throw Error(`SeamsWalletDB: wallet ECDSA signer batch did not complete`);return V(e,n)})}}async function Qe(e,t){let n=Q(t,O,{kind:`wallet_recovery_replacement`}),r=await $(e,n);return{storedSigners:n.signerActivations.map((e,t)=>{let n=r.signerActivations[t];if(!n)throw Error(`SeamsWalletDB: wallet recovery ECDSA signer batch did not complete`);return V(e,n)})}}async function $e(e,t){let n=Q(t,k),r=await $(e,n);return{storedSigners:n.signerActivations.map((e,t)=>{let n=r.signerActivations[t];if(!n)throw Error(`SeamsWalletDB: wallet Email OTP ECDSA signer batch did not complete`);return V(e,n)})}}async function et(e,t){let n=String(t.credential.rawId||``).trim();if(!n)throw Error(`SeamsWalletDB: registration credential rawId is required`);let r=Q({walletId:t.walletId,walletKeys:t.walletKeys}),i=await q({kind:`passkey`,walletId:t.walletId,rpId:t.rpId,credentialIdB64u:n,credentialPublicKeyB64u:t.credentialPublicKeyB64u,transports:t.credential.response?.transports??[],walletKeys:G(t.walletKeys)}),a=await e.accountStore.persistWalletRegistrationFinalize(i);return{storedSigners:r.signerActivations.map((e,t)=>{let n=a.signerActivations[t];if(!n)throw Error(`SeamsWalletDB: wallet ECDSA registration batch did not complete`);return V(e,n)})}}async function tt(e,t){let n=Q({walletId:t.walletId,walletKeys:t.walletKeys},k),r=await q({kind:`email_otp`,walletId:t.walletId,email:t.email,registrationAuthorityId:t.registrationAuthorityId,authority:t.authority,walletKeys:G(t.walletKeys)}),i=await e.accountStore.persistWalletRegistrationFinalize(r);return{storedSigners:n.signerActivations.map((e,t)=>{let n=i.signerActivations[t];if(!n)throw Error(`SeamsWalletDB: wallet Email OTP ECDSA registration batch did not complete`);return V(e,n)})}}export{He as A,S as B,Ze as C,$e as D,tt as E,se as F,T as I,C as L,E as M,de as N,Ke as O,D as P,ae as R,Qe as S,Ve as T,Ye as _,ge as a,Oe as b,je as c,Ie as d,Fe as f,Ae as g,ze as h,me as i,ue as j,qe as k,M as l,Be as m,et as n,he as o,Ge as p,Je as r,Te as s,De as t,q as u,be as v,Ue as w,pe as x,Ee as y,re as z};
+import{B as e}from"./domainIds-BzkGsRqO.js";import{d as t,f as n}from"./chains-C_X_fNuS.js";import{i as r,r as i}from"./base64-DW79QA0h.js";import{d as a,n as o,t as s}from"./accountIds-BzZs7YoX.js";import{t as c}from"./registrationSignerPlan-dY9Rp0m_.js";import{c as l,o as u}from"./ecdsaChainTarget-DJBXHzbH.js";import{i as d,n as f,r as p}from"./signerDomain-DqLCvI-D.js";import{s as m,t as h}from"./normalization-DJPmcXTg.js";import{r as g}from"./registrationIds-ByuReLUc.js";import{t as _}from"./signerSlot-B4Eq8Oe2.js";import{a as v,i as y,n as ee,o as b,r as x,t as te}from"./profileAccountProjection-B3LXAUmo.js";function ne(e){if(typeof e!=`string`)return{ok:!1,message:`NEAR account projection profile id must be a string`};let t=e.trim();return t?{ok:!0,value:t}:{ok:!1,message:`NEAR account projection profile id is required`}}function S(e){return`near-profile:${String(e)}`}function re(e){let t=n(e);if(t)return{...t}}function C(t){let n=e(t.signerId||``),r=e(t.accountAddress||``).toLowerCase();return{profileId:e(t.profileId||``),signerSlot:t.signerSlot,chainIdKey:e(t.chainIdKey||``).toLowerCase(),accountAddress:r,keyKind:e(t.keyKind||``),schemaVersion:t.schemaVersion,signerId:n}}function ie(t,r,i){let a=n(t),o=String(a?.profileId??r.profileId).trim(),s=String(a?.chainIdKey??r.chainIdKey).trim().toLowerCase(),c=String(a?.keyKind??r.keyKind).trim(),l=Number(a?.schemaVersion??r.schemaVersion),u=Number.isSafeInteger(l)&&l>=1?l:r.schemaVersion,d=Number(a?.signerSlot??r.signerSlot),f=Number.isSafeInteger(d)&&d>=1?d:r.signerSlot,p=String(a?.signerId??r.signerId).trim(),m={profileId:o,signerSlot:f,chainIdKey:s,accountAddress:e(a?.accountAddress??r.accountAddress).toLowerCase(),keyKind:c,schemaVersion:u,signerId:p};if(!(m.profileId===r.profileId&&m.signerSlot===r.signerSlot&&m.chainIdKey===r.chainIdKey&&m.accountAddress===r.accountAddress&&m.keyKind===r.keyKind&&m.schemaVersion===r.schemaVersion&&m.signerId===r.signerId))throw Error(`KeyMaterialStore: payloadEnvelope.aad mismatch for ${i}`);return m}function ae(t,r,i){if(t==null)return;let a=n(t);if(!a)throw Error(`KeyMaterialStore: Invalid payloadEnvelope object for ${i}`);let o=Number(a.encVersion),s=Number.isSafeInteger(o)&&o>=1?o:NaN,c=e(a.alg||``),l=e(a.nonce||``),u=e(a.ciphertext||``),d=e(a.tag||``);if(!Number.isFinite(s))throw Error(`KeyMaterialStore: Invalid payloadEnvelope.encVersion for ${i}`);if(!c||!l||!u)throw Error(`KeyMaterialStore: Missing payloadEnvelope cryptographic fields for ${i}`);let f={encVersion:s,alg:c,nonce:l,ciphertext:u,aad:ie(a.aad,r,i)};return d&&(f.tag=d),f}function w(e){return e===f.emailOtp?f.emailOtp:e===f.passkey?f.passkey:null}function oe(t){if(t.authMethod===f.emailOtp){let n=e(t.metadata.email||``);if(n)return n}return t.walletId}async function T(t,n,r){let i=s(n),a=h(i);if(!a)return null;let o=await x(t,{accountRefs:v(i).map(e=>({chainIdKey:e,accountAddress:a})),signerSlot:r});if(!o)return null;let c=o.selectedSigner.metadata||{},l=typeof c.passkeyCredentialRawId==`string`?c.passkeyCredentialRawId:o.selectedSigner.signerId,u=typeof c.passkeyCredentialId==`string`?c.passkeyCredentialId:o.profile.passkeyCredential?.id||l,d=typeof c.operationalPublicKey==`string`?c.operationalPublicKey:``,f=e(c.nearEd25519SigningKeyId||``);if(!f)return null;let p=e(c.walletId||``);if(!p)return null;let m=w(o.selectedSigner.signerAuthMethod);return{walletId:p,nearAccountId:i,loginDisplayName:oe({walletId:p,authMethod:m,metadata:c}),signerSlot:o.selectedSigner.signerSlot,version:2,registeredAt:o.profile.createdAt,lastLogin:o.profile.updatedAt,lastUpdated:o.profile.updatedAt,operationalPublicKey:d,nearEd25519SigningKeyId:f,passkeyCredential:{id:u,rawId:l},authMethod:m,preferences:o.profile.preferences}}async function se(e){let t=await te(e,{chainIdKeys:[`near:testnet`,`near:mainnet`]});if(!t?.chainAccount?.accountAddress)return null;let n;try{n=s(t.chainAccount.accountAddress)}catch{return null}return{nearAccountId:n,profileId:t.profileId,signerSlot:t.signerSlot}}async function ce(e){let t=await se(e).catch(()=>null);return t?T(e,t.nearAccountId,t.signerSlot):null}async function le(t){let[n,r]=await Promise.all([t.listChainAccountsByChain(`near:testnet`),t.listChainAccountsByChain(`near:mainnet`)]),i=new Set;for(let t of[...n,...r]){let n=e(t.accountAddress||``);if(n)try{i.add(s(n))}catch{}}let a=[],o=new Set;for(let e of i){let n=await x(t,{accountRefs:v(e).map(t=>({chainIdKey:t,accountAddress:h(e)}))}).catch(()=>null);if(!n)continue;let r=n.activeSigners.filter(e=>e.signerKind===p.thresholdEd25519&&w(e.signerAuthMethod)).slice().sort((e,t)=>e.signerSlot-t.signerSlot);for(let n of r){let r=Number(n.signerSlot);if(!Number.isSafeInteger(r)||r<1)continue;let i=`${String(e)}:${r}`;if(o.has(i))continue;o.add(i);let s=await T(t,e,r).catch(()=>null);s&&a.push(s)}}return a}const E=`wallet_custody_ed25519_active_client_v1`,ue=`chacha20poly1305-hkdf-sha256-wallet-custody-seed-v1`;function de(e){for(let[t,n]of[[`walletId`,e.walletId],[`nearAccountId`,e.nearAccountId],[`nearEd25519SigningKeyId`,e.nearEd25519SigningKeyId],[`signingWorkerId`,e.signingWorkerId],[`applicationBindingDigestB64u`,e.applicationBindingDigestB64u],[`signingWorkerVerifyingShareB64u`,e.signingWorkerVerifyingShareB64u],[`stateEpoch`,e.stateEpoch]])if(!String(n||``).trim())throw Error(`Wallet custody Ed25519 material binding requires ${t}`);if(e.participantIds.length!==2)throw Error(`Wallet custody Ed25519 material binding requires exactly two participants`)}function D(e){let{binding:t,sealed:n,target:r}=e;de(t);let o=i(t.registeredPublicKeyB64u);if(o.length!==32)throw Error(`Wallet custody Ed25519 material requires a 32-byte registered public key`);if(!n.ciphertextB64u||!n.nonceB64u)throw Error(`Wallet custody Ed25519 material requires its sealed ciphertext and nonce`);return{profileId:r.profileId,signerSlot:t.signerSlot,chainIdKey:r.chainIdKey,accountAddress:r.accountAddress,keyKind:E,algorithm:`ed25519`,publicKey:`ed25519:${a(o)}`,signerId:t.nearEd25519SigningKeyId,payload:{binding:t},payloadEnvelope:{encVersion:1,alg:ue,nonce:n.nonceB64u,ciphertext:n.ciphertextB64u,aad:C({profileId:r.profileId,signerSlot:t.signerSlot,chainIdKey:r.chainIdKey,accountAddress:r.accountAddress,keyKind:E,schemaVersion:1,signerId:t.nearEd25519SigningKeyId})},timestamp:Date.now(),schemaVersion:1}}const fe=`threshold-ecdsa`,O={signerAuthMethod:f.passkey,signerSource:d.passkeyRegistration},k={signerAuthMethod:f.emailOtp,signerSource:d.emailOtpRegistration};function A(e,t){let n=String(e||``).trim();if(!n)throw Error(`SeamsWalletDB: ${t} is required`);let r=i(n);if(r.length===0)throw Error(`SeamsWalletDB: ${t} decoded to empty credential public key`);return r}async function j(e,t){let n=s(t),r=await ee(e.accountStore,y(n)).catch(()=>null);if(!r?.profileId)return null;let i=ne(r.profileId);return i.ok?{profileId:i.value}:null}async function pe(e,t){let n=s(t.nearAccountId),r=Number(t.signerSlot);if(!Number.isSafeInteger(r)||r<1)throw Error(`SeamsWalletDB: storeUserData requires an exact signerSlot`);let i=r,a=l(t.walletId),o=S(n),c=b(n,t.preferences?.useNetwork),u=h(n),m=String(t.passkeyCredential?.rawId||``).trim()||`signer-${i}`;await e.accountStore.upsertProfile({profileId:o,defaultSignerSlot:i,passkeyCredential:t.passkeyCredential,...t.preferences?{preferences:t.preferences}:{}});let g=await e.accountStore.getAccountSigner({chainIdKey:c,accountAddress:u,signerId:m}).catch(()=>null),_=await e.accountStore.activateAccountSigner({account:{profileId:o,chainIdKey:c,accountAddress:u,accountModel:`near-native`},signer:{signerId:m,signerType:`threshold`,signerKind:p.thresholdEd25519,signerAuthMethod:f.passkey,signerSource:d.passkeyRegistration,metadata:{...g?.metadata||{},walletId:String(a),nearAccountId:String(n),nearEd25519SigningKeyId:t.nearEd25519SigningKeyId,operationalPublicKey:t.operationalPublicKey,passkeyCredentialId:t.passkeyCredential?.id,passkeyCredentialRawId:t.passkeyCredential?.rawId}},activationPolicy:{mode:`allocate_next_free`},preferredSlot:i,mutation:{routeThroughOutbox:!1}});_.signerSlot!==i&&await e.accountStore.upsertProfile({profileId:o,defaultSignerSlot:_.signerSlot,passkeyCredential:t.passkeyCredential,...t.preferences?{preferences:t.preferences}:{}}),await e.accountStore.setLastProfileStateForProfile(o,_.signerSlot)}function me(e){return le(e.accountStore)}function he(e,t,n){return T(e.accountStore,t,n)}function ge(e){return ce(e.accountStore)}function _e(e,t,n){return{nearAccountId:t,signerSlot:n??e.signerSlot,credentialId:e.credentialId,credentialPublicKey:e.credentialPublicKey,transports:e.transports,name:e.name,registered:e.registered,syncedAt:e.syncedAt}}function ve(e){if(e.signerAuthMethod!==f.passkey)return null;let t=String(e.metadata?.walletId||``).trim(),n=String(e.metadata?.passkeyCredentialRawId||``).trim();return!t||!n?null:{walletId:t,credentialId:n,signerSlot:e.signerSlot}}async function ye(e,t){let n=(await e.accountStore.listAccountSigners({chainIdKey:t.chainIdKey,accountAddress:t.accountAddress,status:`active`})).map(ve).filter(e=>e!==null),r=new Map;for(let e of n){let t=r.get(e.walletId);t?t.push(e):r.set(e.walletId,[e])}let i=[];for(let[n,a]of r.entries()){let r=await e.accountStore.listProfileAuthenticators(n);for(let e of a){let n=r.find(t=>t.credentialId===e.credentialId);n&&i.push(_e(n,t.nearAccountId,e.signerSlot))}}return i}async function M(e,t){let n=s(t),r=await ee(e.accountStore,y(n)).catch(()=>null);return r?.accountRef?await ye(e,{nearAccountId:n,chainIdKey:r.accountRef.chainIdKey,accountAddress:r.accountRef.accountAddress}):[]}async function be(e,t,n){let r=Number(n);if(!Number.isSafeInteger(r)||r<1)throw Error(`SeamsWalletDB: signerSlot must be an integer >= 1`);let i=String(t||``).trim();if(!i)throw Error(`SeamsWalletDB: selected wallet id is required`);let a=await e.accountStore.getProfile(i).catch(()=>null);if(!a?.profileId)throw Error(`SeamsWalletDB: Missing profile for wallet ${i}`);await e.accountStore.setLastProfileStateForProfile(a.profileId,r)}function xe(e){try{return l(e)}catch{return null}}function Se(e){if(typeof e!=`string`)return null;try{return s(e)}catch{return null}}function Ce(e){if(typeof e!=`string`||!e.trim())return null;try{return g(e)}catch{return null}}async function we(e,t){let n=null;try{n=await x(e.accountStore,{accountRefs:y(t.nearAccountId),signerSlot:t.signerSlot})}catch{n=null}if(!n)throw Error(`Authenticated wallet activation requires an exact NEAR signer projection`);let r=ne(n.context.profileId);if(!r.ok)throw Error(r.message);let i=n.selectedSigner,a=i.metadata||{},o=xe(a.walletId),s=Se(a.nearAccountId),c=Ce(a.nearEd25519SigningKeyId),l=typeof a.operationalPublicKey==`string`?a.operationalPublicKey.trim():``;if(i.signerKind!==p.thresholdEd25519||i.signerSlot!==t.signerSlot||o!==t.walletId||s!==t.nearAccountId||!c||!l)throw Error(`Authenticated wallet activation requires an exact wallet signer binding`);return{kind:`authenticated_near_ed25519_wallet_profile_binding`,walletId:o,nearProjectionProfileId:r.value,nearAccountId:s,nearEd25519SigningKeyId:c,signerSlot:i.signerSlot,operationalPublicKey:l}}async function Te(e,t){return(await e.accountStore.getProfile(String(t)))?.nearProvisioning??null}async function Ee(e,t){let n=String(t.walletId||``).trim();if(!n)throw Error(`SeamsWalletDB: walletId is required`);let r=Date.now(),i=t.status===`near_ready`?{status:`near_ready`,updatedAtMs:r,nearAccountId:t.nearAccountId}:t.status===`near_failed_retryable`?{status:`near_failed_retryable`,updatedAtMs:r,error:t.errorCode,errorCode:t.errorCode}:{status:t.status,updatedAtMs:r};await e.accountStore.upsertProfile({profileId:n,nearProvisioning:i})}async function De(e,t){let n=s(t.nearAccountId),r=l(t.walletId),i=_(t.signerSlot);if(!i)throw Error(`Authenticated wallet activation requires an exact signerSlot`);let a=await we(e,{walletId:r,nearAccountId:n,signerSlot:i});await e.accountStore.setLastProfileStateForProfile(a.nearProjectionProfileId,a.signerSlot),e.userPreferencesManager.setCurrentWallet(a.walletId),await e.userPreferencesManager.reloadUserSettings().catch(()=>void 0),e.nonceCoordinator.initializeNearAccessKey({walletId:a.walletId,nearAccountId:a.nearAccountId,publicKey:a.operationalPublicKey}),t.nearClient&&e.nonceCoordinator.prefetchNearContext({kind:`initialized_state`,nearClient:t.nearClient}).catch(e=>console.debug(`Nonce prefetch after authentication state initialization failed (non-fatal):`,e))}async function Oe(e,t){let n=Number(t.signerSlot);if(!Number.isSafeInteger(n)||n<1)throw Error(`SeamsWalletDB: authenticator signerSlot must be an integer >= 1`);let r={...t,nearAccountId:s(t.nearAccountId),signerSlot:n},i=await j(e,r.nearAccountId);if(!i?.profileId)throw Error(`SeamsWalletDB: Missing profile/account mapping for NEAR account ${r.nearAccountId}`);await e.accountStore.upsertProfileAuthenticator({profileId:i.profileId,signerSlot:r.signerSlot,credentialId:r.credentialId,credentialPublicKey:r.credentialPublicKey,transports:r.transports,name:r.name,registered:r.registered,syncedAt:r.syncedAt})}function ke(e){let t=String(e).trim();return o(t)||t.split(`.`)[0]||``}function N(e){let t=Date.now();return{version:`wallet_auth_method_v1`,kind:`passkey`,status:`active`,localStatus:`synced`,walletId:e.walletId,rpId:e.rpId,credentialIdB64u:e.credentialId,credentialPublicKeyB64u:r(e.credentialPublicKey),counter:0,createdAtMs:t,updatedAtMs:t}}async function P(e){let n=String(e.walletId||``).trim(),r=String(e.email||``).trim().toLowerCase(),i=String(e.registrationAuthorityId||``).trim();if(!n||!r||!i)throw Error(`SeamsWalletDB: Email OTP auth method requires walletId, email, and registrationAuthorityId`);let a=await t(r);if(String(e.authority.walletId)!==n||e.authority.verifier.emailHashHex!==a)throw Error(`SeamsWalletDB: Email OTP auth method authority does not match wallet or email`);let o=Date.now();return{version:`wallet_auth_method_v1`,kind:`email_otp`,status:`active`,localStatus:`synced`,walletId:e.walletId,emailHashHex:a,registrationAuthorityId:i,authority:e.authority,createdAtMs:o,updatedAtMs:o}}async function Ae(e,t){let n=s(t),r=await j(e,n);r?.profileId&&await e.accountStore.deleteProfileData(r.profileId,{eventAccountId:n})}async function je(e,t){return(await M(e,s(t))).length>0}function Me(e){let t=e.activation.signer.metadata||{},n=e.activation.signer.signerKind,r=n===p.thresholdEcdsa?X(t.thresholdEcdsaPublicKeyB64u,`ECDSA key material publicKey`):X(t.operationalPublicKey,`Ed25519 key material publicKey`),i={profileId:X(e.activation.account.profileId,`profileId`),signerSlot:e.signerSlot,chainIdKey:X(e.activation.account.chainIdKey,`chainIdKey`),accountAddress:X(e.activation.account.accountAddress,`accountAddress`),signerId:X(e.activation.signer.signerId,`signerId`),keyKind:`threshold_share_v1`,algorithm:n===p.thresholdEcdsa?`secp256k1`:`ed25519`,publicKey:r,timestamp:e.timestamp,schemaVersion:1};return n===p.thresholdEd25519&&(i.payload={walletId:X(t.walletId,`walletId`),nearAccountId:X(t.nearAccountId,`nearAccountId`),nearEd25519SigningKeyId:X(t.nearEd25519SigningKeyId,`nearEd25519SigningKeyId`),relayerKeyId:X(t.relayerKeyId,`relayerKeyId`),keyVersion:X(t.keyVersion,`keyVersion`)}),i}function F(e){switch(e.mode.kind){case`fresh_registration`:return{mode:`fail_if_occupied`,signerSlot:e.signerSlot};case`wallet_recovery_replacement`:return{mode:`replace_slot`,signerSlot:e.signerSlot,replacedSignerKind:p.thresholdEd25519,revocationReason:`wallet_recovery_replacement`}}}function Ne(e){switch(e.mode.kind){case`fresh_registration`:return{mode:`allocate_next_free`};case`wallet_recovery_replacement`:return{mode:`replace_profile_chain_kind`,signerSlot:e.signerSlot,replacedSignerKind:p.thresholdEcdsa,revocationReason:`wallet_recovery_replacement`}}}function I(e){let t=Number(e.signerSlot);if(!Number.isSafeInteger(t)||t<1)throw Error(`SeamsWalletDB: wallet signerSlot must be an integer >= 1`);let n=String(e.walletId||``).trim();if(!n)throw Error(`SeamsWalletDB: walletId is required`);let r=s(e.nearAccountId),i=String(e.nearEd25519SigningKeyId||``).trim();if(!i)throw Error(`SeamsWalletDB: nearEd25519SigningKeyId is required`);return{signerSlot:t,walletId:n,nearAccountId:r,nearEd25519SigningKeyId:i}}function L(e,t,n){return{walletId:e.walletId,nearAccountId:String(e.nearAccountId),nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,operationalPublicKey:t.operationalPublicKey,relayerKeyId:t.relayerKeyId,keyVersion:t.keyVersion,...n,...t.participantIds?{participantIds:t.participantIds}:{},...t.clientParticipantId==null?{}:{clientParticipantId:t.clientParticipantId},...t.relayerParticipantId==null?{}:{relayerParticipantId:t.relayerParticipantId}}}function R(e){let t=X(e.operationalPublicKey,`Ed25519 signerId`),{signerSlot:n,walletId:r,nearAccountId:i}=e.identity,a=r=>({input:{account:r,signer:{signerId:t,signerType:`threshold`,signerKind:p.thresholdEd25519,signerAuthMethod:e.source.signerAuthMethod,signerSource:e.source.signerSource,metadata:e.metadata},activationPolicy:e.activationPolicy,preferredSlot:n,mutation:{routeThroughOutbox:!1}},signerSlot:n});return[a({profileId:r,chainIdKey:`wallet`,accountAddress:r,accountModel:`wallet`}),a({profileId:e.nearProfileId,chainIdKey:b(i),accountAddress:h(i),accountModel:`near-native`})]}function z(e){let t=e.map(e=>e.input),n=Date.now();return{signerActivations:t,keyMaterials:e.map(e=>Me({activation:e.input,signerSlot:e.signerSlot,timestamp:n}))}}function B(e,t,n,r){return t.kind===`near_ed25519_and_evm_family_ecdsa`?Q({walletId:e,walletKeys:t.walletKeys},n,r).signerActivations:[]}function V(e,t){return{chainTarget:e.chainTarget,targetKey:e.targetKey,signerSlot:t.signerSlot,signerId:e.signerId}}function H(e,t,n){let r=String(e.credential.rawId||``).trim();if(!r)throw Error(`SeamsWalletDB: registration credential rawId is required`);let i=e.participantIds===void 0?void 0:Z(e.participantIds);return U({walletId:e.walletId,nearAccountId:e.nearAccountId,nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,rpId:e.rpId,signerSlot:e.signerSlot,operationalPublicKey:e.operationalPublicKey,relayerKeyId:e.relayerKeyId,keyVersion:e.keyVersion,participantIds:i,clientParticipantId:e.clientParticipantId,relayerParticipantId:e.relayerParticipantId,credentialFacts:{credentialId:r,credentialDisplayId:e.credential.id,credentialPublicKey:A(e.credentialPublicKeyB64u,`credentialPublicKeyB64u`),transports:e.credential.response?.transports??[]}},t,n)}function U(e,t,n){let r=e.credentialFacts.credentialId,i=I(e),{signerSlot:a,walletId:o,nearAccountId:s}=i,c={id:e.credentialFacts.credentialDisplayId,rawId:r},l=new Date().toISOString(),u=S(s),{signerActivations:d,keyMaterials:f}=z([...R({identity:i,nearProfileId:u,operationalPublicKey:e.operationalPublicKey,source:O,metadata:L(i,e,{passkeyCredentialId:e.credentialFacts.credentialDisplayId,passkeyCredentialRawId:r}),activationPolicy:F({mode:t,signerSlot:a})}),...B(e.walletId,n,O,t)]);return{profiles:[o,u].map(e=>({profileId:e,defaultSignerSlot:a,passkeyCredential:c})),initialAuthMethod:N({walletId:e.walletId,rpId:e.rpId,credentialId:r,credentialPublicKey:e.credentialFacts.credentialPublicKey}),authenticators:[o,u].map(t=>({profileId:t,signerSlot:a,credentialId:r,credentialPublicKey:e.credentialFacts.credentialPublicKey,transports:[...e.credentialFacts.transports],name:`Passkey for ${ke(s)}`,registered:l,syncedAt:l})),signerActivations:d,keyMaterials:f,lastProfileState:{profileId:o,activeSignerSlot:a}}}function Pe(e,t){let n=e.signerActivations[1];if(!n)throw Error(`SeamsWalletDB: wallet Ed25519 registration batch did not complete`);let r=[];for(let n=0;n<t.length;n+=1){let i=t[n],a=e.signerActivations[n+2];if(!i||!a)throw Error(`SeamsWalletDB: mixed wallet ECDSA registration batch did not complete`);r.push(V(i,a))}return{signerSlot:n.signerSlot,storedSigners:r}}function Fe(e){return W(H(e,{kind:`fresh_registration`},{kind:`near_ed25519_only`}),e,e.participantIds,[e.custodyMaterial])}function Ie(e){let t=String(e.credentialIdB64u||``).trim();if(!t)throw Error(`SeamsWalletDB: registration credential projection id is required`);return W(U({walletId:e.walletId,nearAccountId:e.nearAccountId,nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,rpId:e.rpId,signerSlot:e.signerSlot,operationalPublicKey:e.operationalPublicKey,relayerKeyId:e.relayerKeyId,keyVersion:e.keyVersion,participantIds:e.participantIds,credentialFacts:{credentialId:t,credentialDisplayId:t,credentialPublicKey:A(e.credentialPublicKeyB64u,`credentialPublicKeyB64u`),transports:[...e.transports]}},{kind:`fresh_registration`},{kind:`near_ed25519_only`}),e,e.participantIds,[e.custodyMaterial])}function W(e,t,n,r){let i=s(t.nearAccountId),a=r.map(e=>{let r=e.binding;if(r.walletId!==String(t.walletId)||r.nearAccountId!==String(i)||r.nearEd25519SigningKeyId!==String(t.nearEd25519SigningKeyId)||r.signerSlot!==Number(t.signerSlot)||r.participantIds[0]!==n[0]||r.participantIds[1]!==n[1])throw Error(`Wallet custody Ed25519 material does not match registration identity`);return D({target:{profileId:String(S(i)),chainIdKey:b(i),accountAddress:h(i)},binding:r,sealed:e.sealed})}),o=e.lastProfileState;if(!o)throw Error(`Wallet Ed25519 registration publication requires last profile state`);return{profiles:e.profiles,initialAuthMethod:e.initialAuthMethod,authenticators:e.authenticators,signerActivations:e.signerActivations,keyMaterials:[...e.keyMaterials,...a],lastProfileState:{profileId:o.profileId,activeSignerSlot:o.activeSignerSlot,scope:o.scope??null}}}function G(e){let t=e[0];if(!t)throw Error(`SeamsWalletDB: threshold ECDSA walletKeys are required`);return[t,...e.slice(1)]}function Le(e){switch(e){case`email_otp`:return k;case`passkey`:return O;default:return Re(e)}}function Re(e){throw Error(`Unsupported wallet ECDSA registration kind: ${String(e)}`)}async function K(e,t){let{signerActivations:n,keyMaterials:r}=z(Q({walletId:e.walletId,walletKeys:e.walletKeys},Le(e.kind),t).signerActivations);switch(e.kind){case`passkey`:{let t=X(e.credentialIdB64u,`credentialIdB64u`),i=A(e.credentialPublicKeyB64u,`credentialPublicKeyB64u`),a=new Date().toISOString();return{profiles:[{profileId:e.walletId,defaultSignerSlot:1,passkeyCredential:{id:t,rawId:t}}],initialAuthMethod:N({walletId:e.walletId,rpId:e.rpId,credentialId:t,credentialPublicKey:i}),authenticators:[{profileId:e.walletId,signerSlot:1,credentialId:t,credentialPublicKey:i,transports:[...e.transports],name:`Passkey for wallet`,registered:a,syncedAt:a}],signerActivations:n,keyMaterials:r,lastProfileState:{profileId:e.walletId,activeSignerSlot:1,scope:null}}}case`email_otp`:return{profiles:[{profileId:e.walletId,defaultSignerSlot:1}],initialAuthMethod:await P({walletId:e.walletId,email:e.email,registrationAuthorityId:e.registrationAuthorityId,authority:e.authority}),authenticators:[],signerActivations:n,keyMaterials:r,lastProfileState:{profileId:e.walletId,activeSignerSlot:1,scope:null}}}}function q(e){return K(e,{kind:`fresh_registration`})}async function ze(e){let t=X(e.credentialIdB64u,`credentialIdB64u`);return e.kind===`near_ed25519`?W(U({walletId:e.walletId,nearAccountId:e.nearAccountId,nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,rpId:e.rpId,signerSlot:e.signerSlot,operationalPublicKey:e.operationalPublicKey,relayerKeyId:e.relayerKeyId,keyVersion:c,participantIds:Z(e.participantIds),credentialFacts:{credentialId:t,credentialDisplayId:t,credentialPublicKey:A(e.credentialPublicKeyB64u,`credentialPublicKeyB64u`),transports:e.transports}},{kind:`wallet_recovery_replacement`},e.walletKeys.length>0?{kind:`near_ed25519_and_evm_family_ecdsa`,walletKeys:e.walletKeys}:{kind:`near_ed25519_only`}),e,Z(e.participantIds),e.custodyMaterials):await K({kind:`passkey`,walletId:e.walletId,rpId:e.rpId,credentialIdB64u:t,credentialPublicKeyB64u:e.credentialPublicKeyB64u,transports:e.transports,walletKeys:G(e.walletKeys)},{kind:`wallet_recovery_replacement`})}async function Be(e){return e.kind===`near_ed25519`?W(await Y({walletId:e.walletId,nearAccountId:e.nearAccountId,nearEd25519SigningKeyId:e.nearEd25519SigningKeyId,email:e.email,registrationAuthorityId:e.registrationAuthorityId,authority:e.authority,signerSlot:e.signerSlot,operationalPublicKey:e.operationalPublicKey,relayerKeyId:e.relayerKeyId,keyVersion:c,participantIds:Z(e.participantIds)},e.walletKeys.length>0?{kind:`near_ed25519_and_evm_family_ecdsa`,walletKeys:e.walletKeys}:{kind:`near_ed25519_only`},{kind:`wallet_recovery_replacement`}),e,Z(e.participantIds),e.custodyMaterials):await K({kind:`email_otp`,walletId:e.walletId,email:e.email,registrationAuthorityId:e.registrationAuthorityId,authority:e.authority,walletKeys:G(e.walletKeys)},{kind:`wallet_recovery_replacement`})}async function J(e,t,n,r){let i=H(t,n,r);return Pe(await e.accountStore.persistWalletRegistrationFinalize(i),B(t.walletId,r,O))}async function Ve(e,t){return{signerSlot:(await J(e,t,{kind:`fresh_registration`},{kind:`near_ed25519_only`})).signerSlot}}async function He(e,t){return await J(e,t,{kind:`fresh_registration`},{kind:`near_ed25519_and_evm_family_ecdsa`,walletKeys:t.walletKeys})}async function Ue(e,t){return{signerSlot:(await J(e,t,{kind:`wallet_recovery_replacement`},{kind:`near_ed25519_only`})).signerSlot}}async function Y(e,t,n={kind:`fresh_registration`}){let r=I(e),{signerSlot:i,walletId:a,nearAccountId:o}=r,s=S(o),{signerActivations:c,keyMaterials:l}=z([...R({identity:r,nearProfileId:s,operationalPublicKey:e.operationalPublicKey,source:k,metadata:L(r,e,{email:String(e.email||``).trim().toLowerCase(),registrationAuthorityId:String(e.registrationAuthorityId||``).trim()}),activationPolicy:F({mode:n,signerSlot:i})}),...B(e.walletId,t,k,n)]);return{profiles:[a,s].map(e=>({profileId:e,defaultSignerSlot:i})),initialAuthMethod:await P({walletId:e.walletId,email:e.email,registrationAuthorityId:e.registrationAuthorityId,authority:e.authority}),authenticators:[],signerActivations:c,keyMaterials:l,lastProfileState:{profileId:a,activeSignerSlot:i}}}async function We(e,t,n){let r=await Y(t,n),i=await e.accountStore.persistWalletRegistrationFinalize(r),a=B(t.walletId,n,k),o=i.signerActivations[1];if(!o)throw Error(`SeamsWalletDB: wallet Email OTP Ed25519 registration batch did not complete`);let s=[];for(let e=0;e<a.length;e+=1){let t=a[e],n=i.signerActivations[e+2];if(!t||!n)throw Error(`SeamsWalletDB: mixed wallet Email OTP ECDSA registration batch did not complete`);s.push(V(t,n))}return{signerSlot:o.signerSlot,storedSigners:s}}async function Ge(e){return W(await Y(e,{kind:`near_ed25519_only`}),e,e.participantIds,[e.custodyMaterial])}async function Ke(e,t){return{signerSlot:(await We(e,t,{kind:`near_ed25519_only`})).signerSlot}}async function qe(e,t){return We(e,t,{kind:`near_ed25519_and_evm_family_ecdsa`,walletKeys:t.walletKeys})}async function Je(e,t){let n=String(t.auth.credential.rawId||t.auth.credential.id||``).trim();if(!n)throw Error(`SeamsWalletDB: add-signer credential id is required`);let r=I(t),{signerSlot:i,walletId:a,nearAccountId:o}=r,s={id:t.auth.credential.id,rawId:n},c=S(o),{signerActivations:l,keyMaterials:u}=z(R({identity:r,nearProfileId:c,operationalPublicKey:t.operationalPublicKey,source:O,metadata:L(r,t,{passkeyCredentialId:t.auth.credential.id,passkeyCredentialRawId:n}),activationPolicy:{mode:`fail_if_occupied`,signerSlot:i}})),d=await e.accountStore.persistWalletSignerFinalize({profiles:[a,c].map(e=>({profileId:e,defaultSignerSlot:i,passkeyCredential:s})),signerActivations:l,keyMaterials:u,lastProfileState:{profileId:a,activeSignerSlot:i}}),f=d.signerActivations[1];if(!f)throw Error(`SeamsWalletDB: wallet Ed25519 signer batch did not complete`);return{signerSlot:f.signerSlot,rollbackReceipt:d.rollbackReceipt}}async function Ye(e,t){await e.accountStore.rollbackWalletSignerFinalize(t)}function X(e,t){let n=String(e||``).trim();if(!n)throw Error(`SeamsWalletDB: ${t} is required`);return n}function Z(e){if(e.length!==2||e.some(e=>!Number.isSafeInteger(e)||e<1))throw Error(`SeamsWalletDB: Ed25519 participantIds must contain two positive integers`);return[e[0],e[1]]}function Xe(e){if(!Array.isArray(e)||e.length!==2||e[0]!==1||e[1]!==2)throw Error(`SeamsWalletDB: threshold ECDSA participantIds must be [1, 2]`);return[1,2]}function Q(e,t=O,n={kind:`fresh_registration`}){let r=X(e.walletId,`walletId`);if(!Array.isArray(e.walletKeys)||e.walletKeys.length===0)throw Error(`SeamsWalletDB: threshold ECDSA walletKeys are required`);let i=[];for(let a of e.walletKeys){if(a.keyScope!==`evm-family`)throw Error(`SeamsWalletDB: threshold ECDSA wallet keyScope must be evm-family`);let e=X(a.walletId,`wallet key walletId`);if(e!==r)throw Error(`SeamsWalletDB: threshold ECDSA wallet key walletId mismatch`);let o=X(a.keyHandle,`wallet key keyHandle`),s=X(a.ecdsaThresholdKeyId,`wallet key ecdsaThresholdKeyId`),c=X(a.signingRootId,`wallet key signingRootId`),l=X(a.signingRootVersion,`wallet key signingRootVersion`),d=X(a.relayerKeyId,`wallet key relayerKeyId`),f=X(a.thresholdEcdsaPublicKeyB64u,`wallet key thresholdEcdsaPublicKeyB64u`),g=Xe(a.participantIds),_=h(a.thresholdOwnerAddress);if(!_)throw Error(`SeamsWalletDB: wallet key thresholdOwnerAddress is required`);let v=m(a.chainTarget),y=u(a.chainTarget);i.push({chainTarget:a.chainTarget,targetKey:y,signerId:_,signerSlot:1,input:{account:{profileId:e,chainIdKey:v,accountAddress:_,accountModel:fe},signer:{signerId:_,signerType:`threshold`,signerKind:p.thresholdEcdsa,signerAuthMethod:t.signerAuthMethod,signerSource:t.signerSource,metadata:{accountModel:fe,accountAddress:_,ownerAddress:_,thresholdOwnerAddress:_,keyScope:a.keyScope,keyHandle:o,walletId:e,ecdsaThresholdKeyId:s,signingRootId:c,signingRootVersion:l,relayerKeyId:d,relayerVerifyingShareB64u:X(a.relayerVerifyingShareB64u,`wallet key relayerVerifyingShareB64u`),publicCapability:a.publicCapability,roleLocalMaterialRef:a.roleLocalMaterialRef,ecdsaRoleLocalPublicFacts:a.ecdsaRoleLocalPublicFacts,thresholdEcdsaPublicKeyB64u:f,participantIds:g,chainTarget:a.chainTarget,targetMembership:{targetKey:y,chainTarget:a.chainTarget},sharedEvmFamilyKey:{walletId:e,keyScope:a.keyScope,keyHandle:o,ecdsaThresholdKeyId:s,signingRootId:c,signingRootVersion:l,participantIds:g,thresholdOwnerAddress:_,thresholdEcdsaPublicKeyB64u:f},chainId:a.chainTarget.chainId}},activationPolicy:Ne({mode:n,signerSlot:1}),preferredSlot:1,mutation:{routeThroughOutbox:!1}}})}return{walletId:r,signerActivations:i}}function $(e,t){return e.accountStore.persistWalletSignerFinalize({profiles:[{profileId:t.walletId}],...z(t.signerActivations)})}async function Ze(e,t){let n=Q(t),r=await $(e,n);return{storedSigners:n.signerActivations.map((e,t)=>{let n=r.signerActivations[t];if(!n)throw Error(`SeamsWalletDB: wallet ECDSA signer batch did not complete`);return V(e,n)})}}async function Qe(e,t){let n=Q(t,O,{kind:`wallet_recovery_replacement`}),r=await $(e,n);return{storedSigners:n.signerActivations.map((e,t)=>{let n=r.signerActivations[t];if(!n)throw Error(`SeamsWalletDB: wallet recovery ECDSA signer batch did not complete`);return V(e,n)})}}async function $e(e,t){let n=Q(t,k),r=await $(e,n);return{storedSigners:n.signerActivations.map((e,t)=>{let n=r.signerActivations[t];if(!n)throw Error(`SeamsWalletDB: wallet Email OTP ECDSA signer batch did not complete`);return V(e,n)})}}async function et(e,t){let n=String(t.credential.rawId||``).trim();if(!n)throw Error(`SeamsWalletDB: registration credential rawId is required`);let r=Q({walletId:t.walletId,walletKeys:t.walletKeys}),i=await q({kind:`passkey`,walletId:t.walletId,rpId:t.rpId,credentialIdB64u:n,credentialPublicKeyB64u:t.credentialPublicKeyB64u,transports:t.credential.response?.transports??[],walletKeys:G(t.walletKeys)}),a=await e.accountStore.persistWalletRegistrationFinalize(i);return{storedSigners:r.signerActivations.map((e,t)=>{let n=a.signerActivations[t];if(!n)throw Error(`SeamsWalletDB: wallet ECDSA registration batch did not complete`);return V(e,n)})}}async function tt(e,t){let n=Q({walletId:t.walletId,walletKeys:t.walletKeys},k),r=await q({kind:`email_otp`,walletId:t.walletId,email:t.email,registrationAuthorityId:t.registrationAuthorityId,authority:t.authority,walletKeys:G(t.walletKeys)}),i=await e.accountStore.persistWalletRegistrationFinalize(r);return{storedSigners:n.signerActivations.map((e,t)=>{let n=i.signerActivations[t];if(!n)throw Error(`SeamsWalletDB: wallet Email OTP ECDSA registration batch did not complete`);return V(e,n)})}}export{He as A,S as B,Ze as C,$e as D,tt as E,se as F,T as I,C as L,E as M,de as N,Ke as O,D as P,ae as R,Qe as S,Ve as T,Ye as _,ge as a,Oe as b,je as c,Ie as d,Fe as f,Ae as g,ze as h,me as i,ue as j,qe as k,M as l,Be as m,et as n,he as o,Ge as p,Je as r,Te as s,De as t,q as u,be as v,Ue as w,pe as x,Ee as y,re as z};

package/dist/esm/sdk/activeWalletSession-WdZkhtBB.js

@@ -0,0 +1 @@
+import{D as e,M as t,O as n,T as r,d as i,h as a,j as o,k as s,l as c,r as l,u,w as d}from"./domainIds-BzkGsRqO.js";import{k as f}from"./chains-C_X_fNuS.js";import{_ as p,c as m,g as h,p as g}from"./primitives-CqrjmIAH.js";import{d as _,h as v,l as y,m as b}from"./capabilityKinds-N8xo_IEh.js";import{r as x}from"./canonicalPrimitives-Dsbsxgxc.js";function S(...e){return Object.assign((t,n)=>{if(!e.includes(t))throw Error(`${n} is invalid`);return t},{literals:e})}function C(e,t){let n=Object.keys(e),r=[...n.filter(t=>`literals`in e[t]),...n.filter(t=>!(`literals`in e[t]))];return Object.assign((i,a)=>{let o=h(i,n,a),s=new Map;for(let t of r)s.set(t,e[t](o[t],`${a}.${t}`));let c=Object.fromEntries(n.map(e=>[e,s.get(e)]));return t?.(c,a),c},{shape:e})}function w(e,t){let n=new Map;for(let r of t)for(let t of r.shape[e].literals)n.set(t,r);return(t,r)=>{let i=f(t,r),a=n.get(i[e]);if(!a)throw Error(`${r}.${e} is invalid`);return a(i,r)}}function T(e){return(t,n)=>t===null?null:e(t,n)}function E(e){return(t,n)=>{let r=e(t);if(r.ok)return r.value;throw Error(`${n} ${r.error.message}`)}}function D(e){return(t,n)=>{try{return e(t)}catch(e){throw Error(`${n} ${e instanceof Error?e.message:`is invalid`}`)}}}const ee=E(c),O=E(n),k=E(u),A=E(i),j=E(y),M=E(s),N=E(v),P=E(b),F=E(r),I=E(e),L=E(o),R=E(t),z=E(_),B=E(a),V=D(x),H=T(G);function U(e){return(t,n)=>e(t,n.slice(n.lastIndexOf(`.`)+1))}function W(e,t){try{return m(e,t)}catch(e){throw Error(e instanceof Error?e.message:`${t} is invalid`)}}function G(e,t){if(typeof e!=`string`||e.length===0||e.trim()!==e)throw Error(`${t} must be a non-empty canonical string`);for(let n of e){let e=n.charCodeAt(0);if(/\s/.test(n)||e<=31||e===127)throw Error(`${t} must not contain whitespace or control characters`)}return e}function K(e,t){if(!Number.isSafeInteger(e)||Number(e)<0)throw Error(`${t} must be a non-negative safe integer`);return Number(e)}function q(e,t){let n=g(e);if(!n.ok)throw Error(`${t}: ${n.error.message}`);return n.value}function J(e,t){let n=d(e);if(!n.ok)throw Error(`${t} ${n.error.message}`);return n.value}function Y(e,t){if(e.kind!==t.kind||e.walletId!==t.walletId||e.authorityId!==t.authorityId||e.authMethodId!==t.authMethodId||e.authorizationId!==t.authorizationId||e.quotaId!==t.quotaId||e.authorityDigestB64u!==t.authorityDigestB64u||e.authorityRevocationEpoch!==t.authorityRevocationEpoch||e.issuedAtMs!==t.issuedAtMs||e.expiresAtMs!==t.expiresAtMs||e.capabilitySubjects.length!==t.capabilitySubjects.length)return!1;for(let n=0;n<e.capabilitySubjects.length;n+=1){let r=e.capabilitySubjects[n],i=t.capabilitySubjects[n];if(!r||!i||!X(r,i))return!1}return!0}function X(e,t){switch(e.kind){case`link_devices`:case`revoke_devices`:return t.kind===e.kind;case`sign`:case`export_keys`:return t.kind===e.kind&&t.keyFamily===e.keyFamily&&l(e.materialActivation,t.materialActivation);default:return!1}}function Z(e,t){for(let n of e.capabilitySubjects){let e=!1;for(let r of t.capabilitySubjects)if(X(n,r)){e=!0;break}if(!e)return!1}return!0}const Q=w(`kind`,[C({kind:S(`direct`)}),C({kind:S(`regional`),region:S(`US`,`WEUR`,`APAC`,`OC`)})]);function $(e){return Q(e,`Wallet Session home`)}function te(){return C({kind:S(`opaque_wallet_session_operation_credential_v1`),ownershipGeneration:K,home:$,token:(e,t)=>{if(typeof e!=`string`||e.length>8192)throw Error(`${t} is invalid`);return e},walletSessionId:U(N)},(e,t)=>{if(e.ownershipGeneration===0)throw Error(`${t} ownership generation must be positive`);if(!/^wst_[A-Za-z0-9_-]{43}$/.test(e.token))throw Error(`${t} opaque token is invalid`)})}function ne(e){return te()(e,`WalletSessionOperationCredentialV1`)}function re(e){return e.kind===`sign`||e.kind===`export_keys`?`${e.kind}:${e.keyFamily}:${e.materialActivation.activationId}`:e.kind}function ie(){return C({kind:S(`active_wallet_session_v1`),walletId:U(O),authorityId:U(I),authMethodId:U(F),authorizationId:U(P),quotaId:U(z),authorityDigestB64u:U(V),authorityRevocationEpoch:U(K),capabilitySubjects:(e,t)=>{if(!Array.isArray(e)||e.length===0)throw Error(`${t} must be non-empty`);let n=[];for(let[t,r]of e.entries())n.push(oe(r,`capabilitySubjects[${t}]`));let r=n[0];if(!r)throw Error(`${t} must be non-empty`);return[r,...n.slice(1)]},issuedAtMs:U(W),expiresAtMs:U(W)},(e,t)=>{let n=e.capabilitySubjects.map(re);if(new Set(n).size!==n.length)throw Error(`${t} capability subjects repeat`)})}function ae(e){return ie()(e,`ActiveWalletSessionV1`)}function oe(e,t){let n=f(e,t);if(n.kind===`link_devices`||n.kind===`revoke_devices`)return p(n,[`kind`],t),{kind:n.kind};if(n.kind!==`sign`&&n.kind!==`export_keys`)throw Error(`${t}.kind is invalid`);if(p(n,[`kind`,`keyFamily`,`materialActivation`],t),n.keyFamily!==`ed25519`&&n.keyFamily!==`ecdsa_secp256k1`)throw Error(`${t}.keyFamily is invalid`);return{kind:n.kind,keyFamily:n.keyFamily,materialActivation:B(n.materialActivation,`${t}.materialActivation`)}}export{w as A,M as C,T as D,S as E,C as O,O as S,N as T,W as _,Z as a,F as b,V as c,A as d,H as f,J as g,K as h,ne as i,E as k,k as l,G as m,ae as n,j as o,q as p,$ as r,L as s,Y as t,U as u,R as v,P as w,I as x,ee as y};