@silencelaboratories/walletprovider-sdk 4.2.0 → 4.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (13) hide show
  1. package/README.md +47 -0
  2. package/dist/client/networkSigner.d.ts +2 -1
  3. package/dist/client/walletProviderServiceClient.d.ts +7 -0
  4. package/dist/client/walletProviderServiceClientInterface.d.ts +3 -0
  5. package/dist/index.cjs.js +1 -1
  6. package/dist/index.d.ts +1 -0
  7. package/dist/index.esm.js +1 -1
  8. package/dist/policy.d.ts +18 -1
  9. package/dist/policyIntegration.d.ts +20 -0
  10. package/dist/setupMessage.d.ts +8 -2
  11. package/dist/tsconfig.tsbuildinfo +1 -1
  12. package/dist/viemSigner.d.ts +2 -0
  13. package/package.json +2 -2
package/dist/index.esm.js CHANGED
@@ -1,4 +1,4 @@
1
- var Oe=Object.defineProperty,rt=Object.defineProperties;var it=Object.getOwnPropertyDescriptors;var Me=Object.getOwnPropertySymbols;var st=Object.prototype.hasOwnProperty,ot=Object.prototype.propertyIsEnumerable;var xe=(r,e,t)=>e in r?Oe(r,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):r[e]=t,f=(r,e)=>{for(var t in e||(e={}))st.call(e,t)&&xe(r,t,e[t]);if(Me)for(var t of Me(e))ot.call(e,t)&&xe(r,t,e[t]);return r},_=(r,e)=>rt(r,it(e));var at=(r,e)=>{for(var t in e)Oe(r,t,{get:e[t],enumerable:!0})};var a=(r,e,t)=>xe(r,typeof e!="symbol"?e+"":e,t);import{canonicalize as lt}from"json-canonicalize";var d=(r,e)=>{h(typeof e!="string","".concat(r," must be string")),h((e==null?void 0:e.trim().length)===0,"".concat(r," cannot be empty"))},Ke=(r,e)=>{if(h(!(r instanceof Uint8Array),"key must be an Uint8Array"),e==="secp256k1")h(r.length!==65,"secp256k1: key length must be 65 bytes, got "+r.length);else if(e==="ed25519")h(r.length!==32,"ed25519: key length must be 32 bytes, got "+r.length);else throw new Error("Invalid signature algorithm")},qe=(r,e)=>{if(h(!(r instanceof Uint8Array),"key must be an Uint8Array"),e==="secp256k1")h(r.length!==32,"secp256k1: key length must be 32 bytes, got "+r.length);else if(e==="ed25519")h(r.length!==32,"ed25519: key length must be 32 bytes, got "+r.length);else throw new Error("Invalid signature algorithm")},be=r=>{h(r!=="ed25519"&&r!=="secp256k1"&&r!=="mldsa44"&&r!=="mldsa65"&&r!=="mldsa87",'keygenAlg must be one of "ed25519", "secp256k1", "mldsa44", "mldsa65", or "mldsa87"')},Ne=r=>{h(r!=="ed25519"&&r!=="secp256k1"&&r!=="mldsa44"&&r!=="mldsa65"&&r!=="mldsa87"&&r!=="mldsa44_dg"&&r!=="mldsa65_dg"&&r!=="mldsa87_dg",'signAlg must be one of "ed25519", "secp256k1", "mldsa44{_dg}", "mldsa65{_dg}", or "mldsa87{_dg}"')},h=(r,e)=>{if(r)throw new Error(e)},ct=(r,e)=>"Invalid payload ".concat(JSON.stringify(r),", cannot be authenticated by ").concat(e.toLocaleUpperCase()," method."),W=(r,e,t)=>{h(!e.some(n=>r instanceof n),ct(r,t))};var D=class{constructor(){a(this,"signRequest",new Map)}setRequest(e,t,n){if(d("transactionId",e),d("message",t),d("requestType",n),this.signRequest.has(e))throw new Error("Transaction ID ".concat(e," is already set."));return this.signRequest.set(e,{signingMessage:t,requestType:n}),this}build(){let e={};if(this.signRequest.forEach((t,n)=>{e[n]=t}),Object.keys(e).length===0)throw new Error("No sign request is set.");if(Object.keys(e).length>1)throw new Error("More than one sign request is set. Cannot build request.");return lt(e)}};import{canonicalize as Be}from"json-canonicalize";import{Base64 as gt}from"js-base64";function ut(r){return r instanceof Uint8Array||ArrayBuffer.isView(r)&&r.constructor.name==="Uint8Array"}function ae(r,...e){if(!ut(r))throw new Error("Uint8Array expected");if(e.length>0&&!e.includes(r.length))throw new Error("Uint8Array expected of length "+e+", got length="+r.length)}function we(r,e=!0){if(r.destroyed)throw new Error("Hash instance has been destroyed");if(e&&r.finished)throw new Error("Hash#digest() has already been called")}function We(r,e){ae(r);let t=e.outputLen;if(r.length<t)throw new Error("digestInto() expects output buffer of length at least "+t)}function G(...r){for(let e=0;e<r.length;e++)r[e].fill(0)}function ce(r){return new DataView(r.buffer,r.byteOffset,r.byteLength)}function b(r,e){return r<<32-e|r>>>e}function ht(r){if(typeof r!="string")throw new Error("string expected");return new Uint8Array(new TextEncoder().encode(r))}function Ae(r){return typeof r=="string"&&(r=ht(r)),ae(r),r}var oe=class{};function De(r){let e=n=>r().update(Ae(n)).digest(),t=r();return e.outputLen=t.outputLen,e.blockLen=t.blockLen,e.create=()=>r(),e}function pt(r,e,t,n){if(typeof r.setBigUint64=="function")return r.setBigUint64(e,t,n);let i=BigInt(32),s=BigInt(4294967295),o=Number(t>>i&s),c=Number(t&s),l=n?4:0,u=n?0:4;r.setUint32(e+l,o,n),r.setUint32(e+u,c,n)}function He(r,e,t){return r&e^~r&t}function $e(r,e,t){return r&e^r&t^e&t}var le=class extends oe{constructor(e,t,n,i){super(),this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.blockLen=e,this.outputLen=t,this.padOffset=n,this.isLE=i,this.buffer=new Uint8Array(e),this.view=ce(this.buffer)}update(e){we(this),e=Ae(e),ae(e);let{view:t,buffer:n,blockLen:i}=this,s=e.length;for(let o=0;o<s;){let c=Math.min(i-this.pos,s-o);if(c===i){let l=ce(e);for(;i<=s-o;o+=i)this.process(l,o);continue}n.set(e.subarray(o,o+c),this.pos),this.pos+=c,o+=c,this.pos===i&&(this.process(t,0),this.pos=0)}return this.length+=e.length,this.roundClean(),this}digestInto(e){we(this),We(e,this),this.finished=!0;let{buffer:t,view:n,blockLen:i,isLE:s}=this,{pos:o}=this;t[o++]=128,G(this.buffer.subarray(o)),this.padOffset>i-o&&(this.process(n,0),o=0);for(let p=o;p<i;p++)t[p]=0;pt(n,i-8,BigInt(this.length*8),s),this.process(n,0);let c=ce(e),l=this.outputLen;if(l%4)throw new Error("_sha2: outputLen should be aligned to 32bit");let u=l/4,g=this.get();if(u>g.length)throw new Error("_sha2: outputLen bigger than state");for(let p=0;p<u;p++)c.setUint32(4*p,g[p],s)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());let{blockLen:t,buffer:n,length:i,finished:s,destroyed:o,pos:c}=this;return e.destroyed=o,e.finished=s,e.length=i,e.pos=c,i%t&&e.buffer.set(n),e}clone(){return this._cloneInto()}},S=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var dt=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),R=new Uint32Array(64),ue=class extends le{constructor(e=32){super(64,e,8,!1),this.A=S[0]|0,this.B=S[1]|0,this.C=S[2]|0,this.D=S[3]|0,this.E=S[4]|0,this.F=S[5]|0,this.G=S[6]|0,this.H=S[7]|0}get(){let{A:e,B:t,C:n,D:i,E:s,F:o,G:c,H:l}=this;return[e,t,n,i,s,o,c,l]}set(e,t,n,i,s,o,c,l){this.A=e|0,this.B=t|0,this.C=n|0,this.D=i|0,this.E=s|0,this.F=o|0,this.G=c|0,this.H=l|0}process(e,t){for(let p=0;p<16;p++,t+=4)R[p]=e.getUint32(t,!1);for(let p=16;p<64;p++){let J=R[p-15],N=R[p-2],Ue=b(J,7)^b(J,18)^J>>>3,me=b(N,17)^b(N,19)^N>>>10;R[p]=me+R[p-7]+Ue+R[p-16]|0}let{A:n,B:i,C:s,D:o,E:c,F:l,G:u,H:g}=this;for(let p=0;p<64;p++){let J=b(c,6)^b(c,11)^b(c,25),N=g+J+He(c,l,u)+dt[p]+R[p]|0,me=(b(n,2)^b(n,13)^b(n,22))+$e(n,i,s)|0;g=u,u=l,l=c,c=o+N|0,o=s,s=i,i=n,n=N+me|0}n=n+this.A|0,i=i+this.B|0,s=s+this.C|0,o=o+this.D|0,c=c+this.E|0,l=l+this.F|0,u=u+this.G|0,g=g+this.H|0,this.set(n,i,s,o,c,l,u,g)}roundClean(){G(R)}destroy(){this.set(0,0,0,0,0,0,0,0),G(this.buffer)}};var Ve=De(()=>new ue);var Se=Ve;import{stringToBytes as yt,toHex as ft}from"viem";var P=r=>gt.fromUint8Array(new Uint8Array(r),!0),Pe=r=>{let e=yt(r),t=Se(Se(e));return ft(t,{size:32}).slice(2)};var mt=new Set(["signgen","addEphemeralKey","revokeEphemeralKey","registerPasskey","keyRefresh","finishPresign","getPolicy","updatePolicy","deletePolicy","getStateControllers","createStateController","deleteStateController","dryRunPolicy"]),T=class{constructor(e,t){a(this,"userAuthentications");a(this,"authModule");a(this,"apiVersion");this.authModule=e,this.userAuthentications=new Map,this.apiVersion=t}async setDefaultAuth(e){let t=await this.authModule.authenticate({payload:e.payload,challenge:e.challenge});this.userAuthentications.set("default",t)}async setKeygenUserSigs(e,t){if(this.apiVersion==="v1"&&!t)throw new Error("no challenge response for keygen");for(let n of e){let i=n.signAlg,s=t?t[i]:Pe(Be(n));if(s){let o=await this.authModule.authenticate({payload:n,challenge:s});this.userAuthentications.set(i,o)}else throw new Error("no final challenge found in response for ".concat(i))}}async build(e,t,n){if(this.apiVersion!=="v1"&&(e==="registerPasskey"||e==="keyRefresh"))throw new Error("".concat(e," is only supported in V1"));let{challenge:i}=n!=null?n:{};if(e==="keygen"){let s=i?JSON.parse(i):void 0;await this.setKeygenUserSigs(t,s)}else{if(this.apiVersion==="v1"&&!i)throw new Error("missing challenge response for ".concat(e," V1"));let s=i!=null?i:Pe(Be(t));mt.has(e)&&await this.setDefaultAuth({payload:t,challenge:s})}return Object.fromEntries(this.userAuthentications)}};var Ee=r=>{let{sign:e,recid:t}=r,n=(27+t).toString(16);return"0x".concat(e).concat(n)};var xt=[{name:"tag",type:"uint16"},{name:"value",type:"string"}],E=class{constructor({t:e,n:t,ephClaim:n,policy:i,signAlg:s}){a(this,"t");a(this,"n");a(this,"ephClaim");a(this,"metadata");a(this,"signAlg");a(this,"policy");d("signAlg",s),this.t=e,this.n=t,this.signAlg=s,this.ephClaim=n==null?void 0:n.toJSON(),this.metadata=[],this.policy=i==null?void 0:i.toCanonicalJSON()}get eoaRequestSchema(){let e=[{name:"t",type:"uint32"},{name:"n",type:"uint32"},{name:"metadata",type:"TaggedValue[]"}];return this.ephClaim&&e.push({name:"ephClaim",type:"string"}),this.policy&&e.push({name:"policy",type:"string"}),{Request:[{name:"setup",type:"KeygenSetupOpts"},{name:"challenge",type:"string"}],KeygenSetupOpts:e,TaggedValue:xt}}},A=class{constructor({t:e,key_id:t,signAlg:n,message:i}){a(this,"t");a(this,"key_id");a(this,"message");a(this,"signAlg");d("keyId",t),d("signAlg",n),d("message",i),this.t=e,this.key_id=t,this.message=i,this.signAlg=n}get eoaRequestSchema(){return{Request:[{name:"setup",type:"SignSetupOpts"},{name:"challenge",type:"string"}],SignSetupOpts:[{name:"t",type:"uint32"},{name:"key_id",type:"string"},{name:"signAlg",type:"string"},{name:"message",type:"string"}]}}},z=class{constructor({amount:e,keyId:t,t:n,expiryInSecs:i}){a(this,"amount");a(this,"key_id");a(this,"t");a(this,"expiry");if(e<=0)throw new Error("Amount must be greater than 0");d("keyId",t),this.amount=e,this.key_id=t,this.t=n,this.expiry=i!=null?i:Math.floor(Date.now()/1e3)+7*24*3600}},k=class{constructor({presignSessionId:e,message:t}){a(this,"presignSessionId");a(this,"message");d("presignSessionId",e),d("message",t),this.presignSessionId=e,this.message=t}get eoaRequestSchema(){return{Request:[{name:"setup",type:"FinishPresignOpts"},{name:"challenge",type:"string"}],FinishPresignOpts:[{name:"presignSessionId",type:"string"},{name:"message",type:"string"}]}}};var Te={};at(Te,{Action:()=>Je,ChainType:()=>H,IssuerType:()=>Le,Logic:()=>Ge,Operator:()=>$,Policy:()=>Re,Rule:()=>Ce,StateControllerAggregationMethod:()=>Y,TransactionAttribute:()=>x,TransactionType:()=>v});import{canonicalize as bt}from"json-canonicalize";var he=512,Le=(n=>(n.SessionKeyId="SessionKeyId",n.UserId="UserId",n.All="*",n))(Le||{}),Je=(t=>(t.Allow="allow",t.Deny="deny",t))(Je||{}),Ge=(t=>(t.Or="or",t.And="and",t))(Ge||{}),H=(n=>(n.Off="off",n.Ethereum="ethereum",n.Solana="solana",n))(H||{}),v=(o=>(o.Eip712="eip712",o.Eip191="eip191",o.Erc20="erc20",o.Erc721="erc721",o.NativeTransfer="nativeTransfer",o.SolanaTransaction="solanaTransaction",o))(v||{}),x=(y=>(y.Sender="sender",y.Receiver="receiver",y.NativeValue="nativeValue",y.ChainId="chainId",y.FunctionSelector="functionSelector",y.Message="message",y.VerifyingContract="verifyingContract",y.PrimaryType="primaryType",y.DomainName="domainName",y.DomainVersion="domainVersion",y.SolanaAccountKeys="solanaAccountKeys",y.SplTransferAmount="splTransferAmount",y.SplTransferSrc="splTransferSrc",y.SplTransferDest="splTransferDest",y.SplTokenMint="splTokenMint",y.CustomProgramInstruction="customProgramInstruction",y.SystemInstructionName="systemInstructionName",y.SplInstructionName="splInstructionName",y))(x||{}),wt={off:[],ethereum:["erc20","erc721","nativeTransfer","eip712","eip191"],solana:["solanaTransaction","nativeTransfer"]},At={eip191:["message"],eip712:["verifyingContract","chainId","primaryType","message","domainName","domainVersion"],erc20:["sender","receiver","chainId","functionSelector"],erc721:["sender","receiver","chainId","functionSelector"],solanaTransaction:["solanaAccountKeys","splTransferAmount","splTokenMint","splTransferSrc","splTransferDest","customProgramInstruction","systemInstructionName","splInstructionName"],nativeTransfer:["sender","receiver","nativeValue","chainId"]},St=["erc20","erc721","solanaTransaction"],$=(l=>(l.Eq="eq",l.Neq="neq",l.Lt="lt",l.Lte="lte",l.Gt="gt",l.Gte="gte",l.In="in",l.All="all",l))($||{});(e=>{function r(t,n){var i;return((i=wt[t])!=null?i:[]).includes(n)}e.isSupported=r})(H||(H={}));(t=>{function r(n){return St.includes(n)}t.allowsCustomAttributes=r;function e(n,i){var s;return x.isBuiltIn(i)?((s=At[n])!=null?s:[]).includes(i):r(n)}t.isSupported=e})(v||(v={}));(i=>{function r(s){return Object.values(i).includes(s)}i.isBuiltIn=r;function e(s){return r(s)&&["nativeValue","chainId","splTransferAmount"].includes(s)}i.isNumeric=e;function t(s){return r(s)&&["sender","receiver","chainId","functionSelector","message","verifyingContract","primaryType","domainName","domainVersion","splTransferSrc","splTransferDest","splTokenMint","customProgramInstruction","systemInstructionName","splInstructionName"].includes(s)}i.isStringLike=t;function n(s){return t(s)||s==="solanaAccountKeys"}i.isListLike=n})(x||(x={}));(t=>{function r(n){return n==="in"||n==="all"}t.isArray=r;function e(n,i){if(!x.isBuiltIn(i))return!0;switch(n){case"eq":case"neq":return!0;case"lt":case"lte":case"gt":case"gte":return x.isNumeric(i);case"in":return x.isStringLike(i);case"all":return x.isListLike(i);default:return!1}}t.isSupported=e})($||($={}));function Fe(r,e,t){if(!H.isSupported(e,r.transaction_type))throw new Error("".concat(t,'.transaction_type "').concat(r.transaction_type,'" is not supported on chain "').concat(e,'"'));if(!v.isSupported(r.transaction_type,r.transaction_attr))throw new Error("".concat(t,'.transaction_attr "').concat(r.transaction_attr,'" is not supported by transaction type "').concat(r.transaction_type,'"'));if(!$.isSupported(r.operator,r.transaction_attr))throw new Error("".concat(t,'.operator "').concat(r.operator,'" is not supported by attribute "').concat(r.transaction_attr,'"'))}var Ce=class{constructor({description:e,chain_type:t,conditions:n,issuer:i,action:s,logic:o}){a(this,"description");a(this,"issuer");a(this,"action");a(this,"logic");a(this,"chain_type");a(this,"conditions");if(!n.length)throw new Error("Rule must have at least one condition");if(!t)throw new Error("Chain type must be set");if(e.length>he)throw new Error("Description length exceeds maximum of ".concat(he));this.description=e,this.chain_type=t,this.conditions=n,this.issuer=i||[{type:"*",id:"*"}],this.action=s||"allow",this.logic=o||"and"}},Re=class{constructor({version:e,description:t,rules:n}){a(this,"version");a(this,"description");a(this,"rules");if(t.length>he)throw new Error("Description length exceeds maximum of ".concat(he));this.version=e!=null?e:"1.0",this.description=t,n.forEach((i,s)=>{if(!Array.isArray(i.conditions))throw new Error("rules[".concat(s,"].conditions must be an array"));i.conditions.forEach((o,c)=>{let l="rules[".concat(s,"].conditions[").concat(c,"]");if(Array.isArray(o.group)){o.group.forEach((u,g)=>{Fe(u,i.chain_type,"".concat(l,".group[").concat(g,"]"))});return}Fe(o,i.chain_type,l)})}),this.rules=n}toCanonicalJSON(){try{return bt({version:this.version,description:this.description,rules:this.rules})}catch(e){throw console.error("Error while serializing policy",e),new Error("Error while serializing policy")}}},Y=(t=>(t.Sum="sum",t.Count="count",t))(Y||{});(e=>{function r(t,n){if(!x.isBuiltIn(n))return!0;switch(t){case"sum":return x.isNumeric(n);case"count":return!0;default:return!1}}e.supportsAttribute=r})(Y||(Y={}));var U=class{constructor(e,t){a(this,"key_id");a(this,"eph_claim");d("keyId",e),this.key_id=e,this.eph_claim=t.toJSON()}get eoaRequestSchema(){return{Request:[{name:"setup",type:"RevokeEphKeyRequest"},{name:"challenge",type:"string"}],RevokeEphKeyRequest:[{name:"key_id",type:"string"},{name:"eph_claim",type:"string"}]}}},V=class{constructor(e,t){a(this,"key_id_list");a(this,"eph_claim");for(let n of e)d("keyId",n);this.key_id_list=e,this.eph_claim=t.toJSON()}get eoaRequestSchema(){return{Request:[{name:"setup",type:"AddEphKeyRequest"},{name:"challenge",type:"string"}],AddEphKeyRequest:[{name:"key_id_list",type:"string[]"},{name:"eph_claim",type:"string"}]}}},B=class{constructor(e){a(this,"options");d("options",e),this.options=e}},F=class{constructor({t:e,keyId:t,signAlg:n}){a(this,"t");a(this,"key_id");a(this,"sign_alg");d("keyId",t),d("signAlg",n),this.t=e,this.key_id=t,this.sign_alg=n}get eoaRequestSchema(){return{Request:[{name:"setup",type:"KeyRefreshRequest"},{name:"challenge",type:"string"}],KeyRefreshRequest:[{name:"t",type:"uint32"},{name:"key_id",type:"string"},{name:"sign_alg",type:"string"}]}}},C=class{constructor({keyId:e,policy:t}){a(this,"key_id");a(this,"policy");d("keyId",e),this.key_id=e,this.policy=t.toCanonicalJSON()}get eoaRequestSchema(){return{Request:[{name:"setup",type:"UpdatePolicyRequest"},{name:"challenge",type:"string"}],UpdatePolicyRequest:[{name:"key_id",type:"string"},{name:"policy",type:"string"}]}}},m=class{constructor({keyId:e}){a(this,"key_id");d("keyId",e),this.key_id=e}get eoaRequestSchema(){return{Request:[{name:"setup",type:"KeyIdOfPolicy"},{name:"challenge",type:"string"}],KeyIdOfPolicy:[{name:"key_id",type:"string"}]}}},M=class{constructor({key_id:e,description:t,method:n,window:i,partition_by:s}){a(this,"key_id");a(this,"description");a(this,"method");a(this,"window");a(this,"partition_by");d("key_id",e),s.forEach((o,c)=>{if(!v.isSupported(o.transaction_type,o.transaction_attr))throw new Error("partition_by[".concat(c,'].transaction_attr "').concat(o.transaction_attr,'" is not supported by transaction type "').concat(o.transaction_type,'"'))}),this.key_id=e,this.description=t!=null?t:"",this.method=n,this.window=JSON.stringify(i),this.partition_by=JSON.stringify(s)}get eoaRequestSchema(){return{Request:[{name:"setup",type:"CreateStateControllerRequest"},{name:"challenge",type:"string"}],CreateStateControllerRequest:[{name:"key_id",type:"string"},{name:"description",type:"string"},{name:"method",type:"string"},{name:"window",type:"string"},{name:"partition_by",type:"string"}]}}},O=class{constructor({key_id:e,controller_id:t}){a(this,"key_id");a(this,"controller_id");d("key_id",e),this.key_id=e,d("controller_id",t),this.controller_id=t}get eoaRequestSchema(){return{Request:[{name:"setup",type:"DeleteStateControllerRequest"},{name:"challenge",type:"string"}],DeleteStateControllerRequest:[{name:"key_id",type:"string"},{name:"controller_id",type:"string"}]}}},K=class{constructor({keyId:e,message:t,signAlg:n,policy:i,stateControllers:s="[]",initialStateEntries:o="[]",evaluationCount:c=1}){a(this,"key_id");a(this,"message");a(this,"signAlg");a(this,"policy");a(this,"state_controllers");a(this,"initial_state_entries");a(this,"evaluation_count");if(d("keyId",e),d("message",t),d("signAlg",n),i===""&&(s!=="[]"||o!=="[]"))throw new Error("Policy is empty, state_controllers and initial_state_entries must be empty");this.key_id=e,this.message=t,this.signAlg=n,this.policy=i===""?i:i.toCanonicalJSON(),this.state_controllers=s,this.initial_state_entries=o,this.evaluation_count=c}get eoaRequestSchema(){return{Request:[{name:"setup",type:"DryRunPolicyRequest"},{name:"challenge",type:"string"}],DryRunPolicyRequest:[{name:"key_id",type:"string"},{name:"message",type:"string"},{name:"signAlg",type:"string"},{name:"policy",type:"string"},{name:"state_controllers",type:"string"},{name:"initial_state_entries",type:"string"},{name:"evaluation_count",type:"uint32"}]}}};import{canonicalize as pe}from"json-canonicalize";var j=class{constructor(e){a(this,"walletProviderUrl");a(this,"apiVersion","v1");this.walletProviderUrl="".concat(e.walletProviderUrl,"/").concat(e.apiVersion),this.apiVersion=e.apiVersion}getVersion(){return this.apiVersion}async startKeygen({setups:e,authModule:t}){return(this.apiVersion==="v1"?this.connect.bind(this):this.connectV2.bind(this))("keygen",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse keygen response: ".concat(i))}})}async startKeyRefresh({payload:e,authModule:t}){if(this.apiVersion==="v2")throw new Error("Key refresh is not supported in v2 API");return this.connect.bind(this)("keyRefresh",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse key refresh response: ".concat(i))}})}async startSigngen({setup:e,authModule:t}){return(this.apiVersion==="v1"?this.connect.bind(this):this.connectV2.bind(this))("signgen",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse signgen response: ".concat(i))}})}async addEphemeralKey({payload:e,authModule:t}){return(this.apiVersion==="v1"?this.connect.bind(this):this.connectV2.bind(this))("addEphemeralKey",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse add ephemeral key response: ".concat(i))}})}async revokeEphemeralKey({payload:e,authModule:t}){return(this.apiVersion==="v1"?this.connect.bind(this):this.connectV2.bind(this))("revokeEphemeralKey",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse revoke ephemeral key response: ".concat(i))}})}async registerPasskey({payload:e,authModule:t}){if(this.apiVersion==="v2")throw new Error("Passkey registration is not supported in v2 API");return this.connect.bind(this)("registerPasskey",e,t).then(i=>({passkeyCredentialId:i}))}async updatePolicy({payload:e,authModule:t}){return(this.apiVersion==="v1"?this.connect.bind(this):this.connectV2.bind(this))("updatePolicy",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse update policy response: ".concat(i))}})}async deletePolicy({payload:e,authModule:t}){return(this.apiVersion==="v1"?this.connect.bind(this):this.connectV2.bind(this))("deletePolicy",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse delete policy response: ".concat(i))}})}connect(e,t,n){return new Promise((i,s)=>{let o=new WebSocket("".concat(this.walletProviderUrl,"/").concat(e)),c=0;return console.debug("Connecting to ",o.url),o.addEventListener("open",l=>{switch(console.debug("Connection opened in state ".concat(c," with event ").concat(JSON.stringify(l,void 0," "))),c){case 0:{c=1;try{let u=pe({payload:t});console.debug("Sending request:",u),o.send(u)}catch(u){this.finishWithError(o,c,u,"open event",s)}break}case 1:case 2:this.finishWithError(o,c,"Unexpected message in state waitingForResult.","open event",s);break;case 3:break}}),o.addEventListener("message",async l=>{switch(console.debug("Connection message in state ".concat(c," with event data ").concat(JSON.stringify(l.data,void 0," "))),c){case 0:this.finishWithError(o,c,"Unexpected message in state initiated.","message event",s);break;case 1:{c=2;try{let u=l.data,g=await new T(n,this.apiVersion).build(e,t,{challenge:u});o.send(pe(g))}catch(u){this.finishWithError(o,c,u,"message event",s)}break}case 2:{c=3,o.close(),i(l.data);break}case 3:break}}),o.addEventListener("error",l=>{this.finishWithError(o,c,"Connection encountered an error event: ".concat(JSON.stringify(l,void 0," ")),"error event",s)}),o.addEventListener("close",l=>{let u=l.reason||"No specific reason provided.",g=l.code;console.debug("Connection closed. State: ".concat(c,", Code: ").concat(g,", Reason: '").concat(u,"'"));let p=g>=4e3?"Application Error ".concat(g,": ").concat(u):g===1006?"Connection Abnormality (Code 1006): Server closed connection unexpectedly or network issue.":"WebSocket Closed Unexpectedly (Code ".concat(g,"): ").concat(u);this.finishWithError(o,c,new Error(p),"close event",s)}),()=>{(o.readyState===WebSocket.OPEN||o.readyState===WebSocket.CONNECTING)&&o.close(1001,"Cleanup/Unmount")}})}connectV2(e,t,n){return new Promise((i,s)=>{let o=new WebSocket("".concat(this.walletProviderUrl,"/").concat(e)),c=0;return console.debug("Connecting to ",o.url),o.addEventListener("open",async l=>{switch(console.debug("Connection opened in state ".concat(c," with event ").concat(JSON.stringify(l,void 0," "))),c){case 0:c=2;try{let u=await new T(n,this.apiVersion).build(e,t);o.send(pe({payload:t,userSigs:u}))}catch(u){this.finishWithError(o,c,u,"open event",s)}break;case 2:c=3,this.finishWithError(o,c,"Unexpected message in state waitingForResult.","open event",s);break;case 3:break}}),o.addEventListener("message",async l=>{switch(console.debug("Connection message in state ".concat(c," with event ").concat(JSON.stringify(l,void 0," "))),c){case 0:this.finishWithError(o,c,"Unexpected message in state initiated.","message event",s);break;case 2:{c=3,o.close(),i(l.data);break}case 3:break}}),o.addEventListener("error",l=>{this.finishWithError(o,c,"Connection encountered an error event: ".concat(JSON.stringify(l,void 0," ")),"error event",s)}),o.addEventListener("close",l=>{let u=l.reason||"No specific reason provided.",g=l.code;console.debug("Connection closed. State: ".concat(c,", Code: ").concat(g,", Reason: '").concat(u,"'"));let p=g>=4e3?"Application Error ".concat(g,": ").concat(u):g===1006?"Connection Abnormality (Code 1006): Server closed connection unexpectedly or network issue.":"WebSocket Closed Unexpectedly (Code ".concat(g,"): ").concat(u);this.finishWithError(o,c,new Error(p),"close event",s)}),()=>{(o.readyState===WebSocket.OPEN||o.readyState===WebSocket.CONNECTING)&&o.close(1001,"Cleanup/Unmount")}})}finishWithError(e,t,n,i,s){t!==3&&(console.error("Error from ".concat(i," in state ").concat(t,":"),n),t=3,s(n instanceof Error?n:new Error(String(n)))),e.readyState===WebSocket.OPEN&&e.close(1e3,"Protocol run failed. Client attempted to close connection in state ".concat(t))}},I=class{constructor(e){a(this,"walletProviderUrl");a(this,"apiVersion","v1");this.walletProviderUrl="".concat(e.walletProviderUrl,"/").concat(e.apiVersion),this.apiVersion=e.apiVersion}getVersion(){return this.apiVersion}async startKeygen({setups:e}){return this.connect.bind(this)("keygen",e).then(n=>{try{return JSON.parse(n)}catch(i){throw new Error("Failed to parse keygen response: ".concat(n))}})}async startSigngen({setup:e}){return this.connect.bind(this)("signgen",e).then(n=>{try{return JSON.parse(n)}catch(i){throw new Error("Failed to parse signgen response: ".concat(n))}})}async startKeyRefresh({payload:e}){if(this.apiVersion==="v2")throw new Error("Key refresh is not supported in v2 API");return this.connect.bind(this)("keyRefresh",e).then(n=>{try{return JSON.parse(n)}catch(i){throw new Error("Failed to parse key refresh response: ".concat(n))}})}async updatePolicy({payload:e}){return this.connect.bind(this)("updatePolicy",e).then(n=>{try{return JSON.parse(n)}catch(i){throw new Error("Failed to parse update policy response: ".concat(n))}})}async deletePolicy({payload:e}){return this.connect.bind(this)("deletePolicy",e).then(n=>{try{return JSON.parse(n)}catch(i){throw new Error("Failed to parse delete policy response: ".concat(n))}})}connect(e,t){return new Promise((n,i)=>{let s=0,o=new WebSocket("".concat(this.walletProviderUrl,"/").concat(e));o.addEventListener("open",async c=>{switch(console.debug("Connection opened in state ".concat(s," with event ").concat(JSON.stringify(c,void 0," "))),s){case 0:s=2;try{o.send(pe({payload:t}))}catch(l){i(l)}break;case 2:s=3,i("Incorrect protocol state");break;case 3:break}}),o.addEventListener("message",async c=>{switch(console.debug("Connection message in state ".concat(s," with event ").concat(JSON.stringify(c,void 0," "))),s){case 0:s=3,i("Incorrect protocol state");break;case 2:{s=3,o.close(),n(c.data);break}case 3:break}}),o.addEventListener("error",c=>{console.debug("Connection error in state ".concat(s," with event ").concat(JSON.stringify(c,void 0," "))),s!=3&&(s=3,i("Incorrect protocol state"))}),o.addEventListener("close",c=>{console.debug("Connection closed in state ".concat(s," with event ").concat(JSON.stringify(c,void 0," "))),s!=3&&(s=3,i("Incorrect protocol state"))})})}};var Q=class{constructor(e,t){a(this,"authModule");a(this,"wpClient");if(!t&&!(e instanceof I))throw new Error("missing authModule for wallet provider client in auth mode");if(t&&e instanceof I)throw new Error("authModule is required but using wallet provider client in no-auth mode");this.authModule=t,this.wpClient=e}validateQuorumSetup({threshold:e,totalNodes:t}){e&&h(e<2,"Threshold = ".concat(e," must be at least 2")),e&&t&&h(t<e,"Total nodes = ".concat(t," must be greater or equal to threshold = ").concat(e))}async generateKey(e,t,n,i,s){this.validateQuorumSetup({threshold:e,totalNodes:t});let o=n.map(c=>(be(c),new E({t:e,n:t,ephClaim:i,policy:s,signAlg:c})));return this.authModule?await this.wpClient.startKeygen({setups:o,authModule:this.authModule}):await this.wpClient.startKeygen({setups:o})}async signMessage(e,t,n,i){this.validateQuorumSetup({threshold:e}),Ne(n);let s=new A({t:e,key_id:t,signAlg:n,message:i});return this.authModule?await this.wpClient.startSigngen({setup:s,authModule:this.authModule}):await this.wpClient.startSigngen({setup:s})}async refreshKey(e,t,n){be(n);let i=new F({t:e,keyId:t,signAlg:n});return this.authModule?await this.wpClient.startKeyRefresh({payload:i,authModule:this.authModule}):await this.wpClient.startKeyRefresh({payload:i})}async addEphemeralKey(e,t){let n=new V(e,t);if(!this.authModule)throw new Error("Add ephemeral key is not supported in no auth mode");return await this.wpClient.addEphemeralKey({payload:n,authModule:this.authModule})}async revokeEphemeralKey(e,t){d("keyId",e);let n=new U(e,t);if(!this.authModule)throw new Error("Revoke ephemeral key is not supported in no auth mode");return await this.wpClient.revokeEphemeralKey({payload:n,authModule:this.authModule})}async registerPasskey(e){let t=new B(e!=null?e:"passkey options");if(!this.authModule)throw new Error("Register passkey is not supported in no auth mode");return await this.wpClient.registerPasskey({payload:t,authModule:this.authModule})}async updatePolicy(e,t){let n=new C({keyId:e,policy:t});return this.authModule?await this.wpClient.updatePolicy({payload:n,authModule:this.authModule}):await this.wpClient.updatePolicy({payload:n})}async deletePolicy(e){let t=new m({keyId:e});return this.authModule?await this.wpClient.deletePolicy({payload:t,authModule:this.authModule}):await this.wpClient.deletePolicy({payload:t})}};import{canonicalize as Pt}from"json-canonicalize";var ke=class extends Error{constructor(t,n,i){super(i||n);this.status=t;this.statusText=n;this.name="HttpError"}},X=class{constructor(e="",t={}){a(this,"baseURL");a(this,"defaultHeaders");this.baseURL=e,this.validateHeaders(t),this.defaultHeaders=f({"Content-Type":"application/json"},t)}validateHeaders(e){if(typeof e!="object"||e===null)throw new Error("Headers must be an object.");for(let[t,n]of Object.entries(e))if(typeof t!="string"||typeof n!="string")throw new Error("Invalid header: ".concat(t,". Header names and values must be strings."))}setDefaultHeaders(e){this.defaultHeaders=f(f({},this.defaultHeaders),e)}buildUrl(e){return"".concat(this.baseURL).concat(e)}async handleResponse(e){if(!e.ok){let n;try{n=(await e.json()).message||e.statusText}catch(i){n=e.statusText}throw new ke(e.status,e.statusText,n)}let t=e.headers.get("content-type");return t&&t.includes("application/json")?e.json():e.text()}async request(e,t,n,i={}){let s=this.buildUrl(t),o=f(f({},this.defaultHeaders),i.headers),c=_(f({method:e,headers:o},i),{body:n?Pt(n):null}),l=await fetch(s,c);return this.handleResponse(l)}async get(e,t){return this.request("GET",e,void 0,t)}async post(e,t,n){return this.request("POST",e,t,n)}async put(e,t,n){return this.request("PUT",e,t,n)}async patch(e,t,n){return this.request("PATCH",e,t,n)}async delete(e,t){return this.request("DELETE",e,void 0,t)}};var Et={name:"SilentShard authentication",version:"0.1.0"},Ct=[{name:"name",type:"string"},{name:"version",type:"string"}];function Rt(r,e){let t={setup:r,challenge:e};return{types:f({EIP712Domain:Ct},r.eoaRequestSchema),domain:Et,primaryType:"Request",message:t}}async function ze({setup:r,eoa:e,challenge:t,browserWallet:n}){let i=Rt(r,t),s=await n.signTypedData(e,i);return new w({method:"eoa",id:e},s)}import{Base64 as Ye}from"js-base64";import{hexToBytes as je}from"viem";import{canonicalize as de}from"json-canonicalize";async function Qe({user:r,challenge:e,rpConfig:t}){let n=je("0x".concat(e),{size:32}),i={publicKey:{authenticatorSelection:{residentKey:"preferred",userVerification:"required"},challenge:n,excludeCredentials:[],pubKeyCredParams:[{type:"public-key",alg:-7},{type:"public-key",alg:-257}],rp:{name:t.rpName,id:t.rpId},user:_(f({},r),{id:Ye.toUint8Array(r.id)})}},s=await navigator.credentials.create(i);if(s===null)throw new Error("No credential returned");let o=P(s.response.attestationObject),l={rawCredential:de({authenticatorAttachment:s.authenticatorAttachment,id:s.id,rawId:P(s.rawId),response:{attestationObject:o,clientDataJSON:P(s.response.clientDataJSON)},type:s.type}),origin:t.rpName,rpId:t.rpId};return new w({method:"passkey",id:s.id},de(l))}async function Xe({challenge:r,allowCredentialId:e,rpConfig:t}){let n=je("0x".concat(r),{size:32}),i=e?[{type:"public-key",id:Ye.toUint8Array(e)}]:[],s={publicKey:{userVerification:"required",challenge:n,allowCredentials:i}},o=await navigator.credentials.get(s);if(o===null)throw new Error("Failed to get navigator credentials");let c=o.response,l=c.userHandle;if(l===null)throw new Error("User handle cannot be null");let u=P(c.signature),p={rawCredential:de({authenticatorAttachment:o.authenticatorAttachment,id:o.id,rawId:P(o.rawId),response:{authenticatorData:P(c.authenticatorData),clientDataJSON:P(c.clientDataJSON),signature:u,userHandle:P(l)},type:o.type}),origin:t.rpName,rpId:t.rpId};return new w({method:"passkey",id:o.id},de(p))}import{toHex as ge}from"viem";import{ed25519 as ve}from"@noble/curves/ed25519";import{secp256k1 as Ze}from"@noble/curves/secp256k1";import{signMessage as Tt}from"viem/accounts";import{canonicalize as et}from"json-canonicalize";var q=class r{constructor(e,t,n,i=Math.floor(Date.now()/1e3)+3600){a(this,"ephId");a(this,"ephPK");a(this,"signAlg");a(this,"expiry");this.validateInputs(e,t,n,i),this.ephId=e,this.ephPK=ge(t),this.signAlg=n,this.expiry=i}validateInputs(e,t,n,i){d("ephId",e),Ke(t,n),h(Number.isInteger(i)===!1,"expiry must be an integer");let s=Math.floor(Date.now()/1e3),o=i-s,c=o>0&&o<=365*24*60*60;h(!c,"lifetime must be greater than 0 and less than or equal to 365 days expiry - now ".concat(o,", expiry ").concat(i," now secs ").concat(s))}toJSON(){try{return et({ephId:this.ephId,ephPK:this.ephPK,expiry:this.expiry,signAlg:this.signAlg})}catch(e){throw console.error("Error while serializing ephemeral key claim",e),new Error("Error while serializing ephemeral key claim")}}static generateKeys(e,t){let n=ye(e),i=L(n,e),s=new r(ge(i),i,e,t);return{privKey:n,pubKey:i,ephClaim:s}}};async function tt({setup:r,challenge:e,ephSK:t,ephClaim:n}){let i={setup:r,challenge:e},s=new TextEncoder().encode(et(i)),o=await kt(s,t,n.signAlg);return new w({method:"ephemeral",id:n.ephId},o)}async function kt(r,e,t){switch(t){case"ed25519":return ge(ve.sign(r,e));case"secp256k1":return await Tt({message:{raw:r},privateKey:ge(e)});default:throw new Error("Invalid signature algorithm")}}function ye(r){switch(r){case"ed25519":return ve.utils.randomPrivateKey();case"secp256k1":return Ze.utils.randomPrivateKey();default:throw new Error("Invalid signature algorithm")}}function L(r,e){switch(e){case"ed25519":return ve.getPublicKey(r);case"secp256k1":return Ze.getPublicKey(r,!1);default:throw new Error("Invalid signature algorithm")}}import{isAddress as It}from"viem";import{jwtDecode as vt}from"jwt-decode";var fe=r=>{let e=vt(r);if(!e||typeof e!="object"||Array.isArray(e))throw new Error("Invalid JWT payload");return e};var w=class{constructor(e,t){this.credentials=e;this.signature=t;this.credentials=e,this.signature=t}},Ie=[E,F,V,U,A,k,C,m,M,O,K],_t=[A,U,k,m],Z=class{constructor(e,t){a(this,"browserWallet");a(this,"eoa");this.validateInputs(e,t),this.browserWallet=t,this.eoa=e}validateInputs(e,t){h(!It(e),"invalid Ethereum address format"),h(!((t==null?void 0:t.signTypedData)instanceof Function),"invalid browserWallet")}async authenticate({payload:e,challenge:t}){return W(e,Ie,"eoa"),await ze({setup:e,eoa:this.eoa,challenge:t,browserWallet:this.browserWallet})}},ee=class{constructor(e,t,n){a(this,"ephSK");a(this,"ephClaim");qe(t,n),this.ephSK=t;let i=L(this.ephSK,n);this.ephClaim=new q(e,i,n)}async authenticate({payload:e,challenge:t}){return W(e,_t,"ephemeral"),await tt({setup:e,challenge:t,ephSK:this.ephSK,ephClaim:this.ephClaim})}},te=class{constructor(e,t){a(this,"rpConfig");a(this,"allowCredentialId");this.rpConfig=e,this.allowCredentialId=t}async authenticate({payload:e,challenge:t}){return W(e,Ie,"passkey"),await Xe({allowCredentialId:this.allowCredentialId,challenge:t,rpConfig:this.rpConfig})}},ne=class{constructor(e,t){a(this,"rpConfig");a(this,"user");this.rpConfig=e,this.user=t}async authenticate({payload:e,challenge:t}){return W(e,[B],"passkey"),await Qe({user:this.user,challenge:t,rpConfig:this.rpConfig})}},re=class{constructor(e){a(this,"jwtIssuer");this.validateInputs(e),this.jwtIssuer=e}validateInputs(e){h(!((e==null?void 0:e.issueToken)instanceof Function),"invalid jwtIssuer")}async authenticate({payload:e,challenge:t}){W(e,Ie,"jwt");let n=await this.jwtIssuer.issueToken(t),i=fe(n),{iss:s,sub:o}=i;return h(!s||!o,"JWT token is missing iss or sub claims"),new w({method:"jwt",id:{iss:s,sub:o}},n)}};import{createAuth0Client as Ut,PopupOpenError as Mt}from"@auth0/auth0-spa-js";var Ot=["silent","popup","silent-with-popup-fallback"],ie="sl_nonce",Kt="popup_open",qt=(r,e)=>typeof e=="string"&&r.includes(e),se=class{constructor(e){a(this,"config");a(this,"auth0Client");a(this,"auth0ClientPromise");var t;this.validateInputs(e),this.config={domain:e.domain,clientId:e.clientId,audience:e.audience,interactiveMode:(t=e.interactiveMode)!=null?t:"silent-with-popup-fallback"},e.scope&&(this.config.scope=e.scope),e.redirectUri&&(this.config.redirectUri=e.redirectUri),e.useRefreshTokens!==void 0&&(this.config.useRefreshTokens=e.useRefreshTokens),e.useRefreshTokensFallback!==void 0&&(this.config.useRefreshTokensFallback=e.useRefreshTokensFallback),e.auth0Client&&(this.auth0Client=e.auth0Client)}async issueToken(e){h(!e,"missing challenge for Auth0 token issuance");let t=await this.getToken(e);return this.validateTokenChallenge(t,e),t}async isAuthenticated(){let e=await this.getClient();if(!(e.isAuthenticated instanceof Function))throw new Error("Auth0 session lookup is not available");return await e.isAuthenticated()}async getUser(){let e=await this.getClient();if(!(e.getUser instanceof Function))throw new Error("Auth0 user lookup is not available");return await e.getUser()}async logout(e){let t=await this.getClient();if(!(t.logout instanceof Function))throw new Error("Auth0 logout is not available");await t.logout(e)}validateInputs(e){var n,i;h(!(e!=null&&e.domain),"missing Auth0 domain"),h(!(e!=null&&e.clientId),"missing Auth0 clientId"),h(!(e!=null&&e.audience),"missing Auth0 audience"),h(e.interactiveMode!==void 0&&!qt(Ot,e.interactiveMode),"invalid Auth0 interactiveMode");let t=(n=e.interactiveMode)!=null?n:"silent-with-popup-fallback";e.auth0Client!==void 0&&(h(!(((i=e.auth0Client)==null?void 0:i.getTokenSilently)instanceof Function),"invalid auth0Client"),h(t!=="silent"&&!(e.auth0Client.getTokenWithPopup instanceof Function),"invalid auth0Client: missing getTokenWithPopup"))}async getClient(){return this.auth0Client?this.auth0Client:(this.auth0ClientPromise||(this.auth0ClientPromise=Ut(this.buildClientOptions())),this.auth0Client=await this.auth0ClientPromise,this.auth0Client)}buildClientOptions(){let e={audience:this.config.audience};this.config.scope&&(e.scope=this.config.scope);let t=this.getRedirectUri();return t&&(e.redirect_uri=t),f(f({domain:this.config.domain,clientId:this.config.clientId,authorizationParams:e},this.config.useRefreshTokens!==void 0?{useRefreshTokens:this.config.useRefreshTokens}:{}),this.config.useRefreshTokensFallback!==void 0?{useRefreshTokensFallback:this.config.useRefreshTokensFallback}:{})}getRedirectUri(){if(this.config.redirectUri)return this.config.redirectUri;if(typeof window<"u")return window.location.origin}buildAuthorizationParams(e){let t={audience:this.config.audience,[ie]:e};this.config.scope&&(t.scope=this.config.scope);let n=this.getRedirectUri();return n&&(t.redirect_uri=n),t}async getToken(e){let t=await this.getClient(),n=this.buildAuthorizationParams(e);if(this.config.interactiveMode==="popup")return await this.getTokenWithPopup(t,n);try{return await t.getTokenSilently({cacheMode:"off",authorizationParams:n})}catch(i){if(this.config.interactiveMode!=="silent-with-popup-fallback"||!this.isInteractiveAuthError(i))throw i;return await this.getTokenWithPopup(t,n)}}async getTokenWithPopup(e,t){h(!(e.getTokenWithPopup instanceof Function),"Auth0 popup token flow is not available");let n;try{n=await e.getTokenWithPopup({cacheMode:"off",authorizationParams:t})}catch(i){throw this.isPopupOpenError(i)?new Error("Your browser blocked the Auth0 sign-in popup. Sign in again and allow popups for this site if prompted."):i}if(!n)throw new Error("Auth0 popup token flow did not return an access token");return n}isPopupOpenError(e){return e instanceof Mt||e.error===Kt}isInteractiveAuthError(e){var n;let t=e;return["consent_required","interaction_required","login_required","mfa_required","missing_refresh_token"].includes((n=t.error)!=null?n:"")}validateTokenChallenge(e,t){let n=fe(e),i=Object.entries(n).find(([o])=>o===ie);if(i===void 0)throw new Error("Auth0 access token is missing ".concat(ie," claim"));let s=i[1];h(typeof s!="string","Auth0 access token ".concat(ie," claim must be a string")),h(s!==t,"Expected ".concat(ie," claim to match ").concat(t,", found ").concat(String(s)))}};import{publicKeyToAddress as nt,toAccount as Mr}from"viem/accounts";import{secp256k1 as Nt}from"@noble/curves/secp256k1";import{hashMessage as Nr,hashTypedData as Wr,keccak256 as Dr,serializeSignature as Hr,serializeTransaction as $r,toHex as Br}from"viem";import{Base64 as Lr}from"js-base64";function _e(r){if(r.startsWith("0x")&&(r=r.slice(2)),r.startsWith("04"))return nt("0x".concat(r," "));if(r.startsWith("02")||r.startsWith("03")){let e=Nt.ProjectivePoint.fromHex(r).toHex(!1);return nt("0x".concat(e))}else throw new Error("Invalid public key")}var ai=_(f({KeygenSetupOpts:E,InitPresignOpts:z,FinishPresignOpts:k,SignSetupOpts:A,UserSignatures:T,NetworkSigner:Q,SignRequestBuilder:D,WalletProviderServiceClient:j,NoAuthWalletProviderServiceClient:I,HttpClient:X,EOAAuth:Z,EphAuth:ee,PasskeyAuth:te,PasskeyRegister:ne,generateEphPrivateKey:ye,getEphPublicKey:L,EphKeyClaim:q,computeAddress:_e,flattenSignature:Ee,UpdatePolicyRequest:C,GetPolicyRequest:m,DeletePolicyRequest:m,GetStateControllersRequest:m,CreateStateControllerRequest:M,DeleteStateControllerRequest:O,DryRunPolicyRequest:K},Te),{JWTAuth:re,Auth0JWTIssuer:se});export{Je as Action,se as Auth0JWTIssuer,H as ChainType,M as CreateStateControllerRequest,m as DeletePolicyRequest,O as DeleteStateControllerRequest,K as DryRunPolicyRequest,Z as EOAAuth,ee as EphAuth,q as EphKeyClaim,k as FinishPresignOpts,m as GetPolicyRequest,m as GetStateControllersRequest,X as HttpClient,z as InitPresignOpts,Le as IssuerType,re as JWTAuth,E as KeygenSetupOpts,Ge as Logic,Q as NetworkSigner,I as NoAuthWalletProviderServiceClient,$ as Operator,te as PasskeyAuth,ne as PasskeyRegister,Re as Policy,Ce as Rule,D as SignRequestBuilder,A as SignSetupOpts,Y as StateControllerAggregationMethod,x as TransactionAttribute,v as TransactionType,C as UpdatePolicyRequest,w as UserAuthentication,T as UserSignatures,j as WalletProviderServiceClient,_e as computeAddress,ai as default,Ee as flattenSignature,ye as generateEphPrivateKey,L as getEphPublicKey};
1
+ var Ke=Object.defineProperty,at=Object.defineProperties;var ct=Object.getOwnPropertyDescriptors;var Oe=Object.getOwnPropertySymbols;var lt=Object.prototype.hasOwnProperty,ut=Object.prototype.propertyIsEnumerable;var xe=(r,e,t)=>e in r?Ke(r,e,{enumerable:!0,configurable:!0,writable:!0,value:t}):r[e]=t,y=(r,e)=>{for(var t in e||(e={}))lt.call(e,t)&&xe(r,t,e[t]);if(Oe)for(var t of Oe(e))ut.call(e,t)&&xe(r,t,e[t]);return r},M=(r,e)=>at(r,ct(e));var ht=(r,e)=>{for(var t in e)Ke(r,t,{get:e[t],enumerable:!0})};var a=(r,e,t)=>xe(r,typeof e!="symbol"?e+"":e,t);import{canonicalize as dt}from"json-canonicalize";var d=(r,e)=>{p(typeof e!="string","".concat(r," must be string")),p((e==null?void 0:e.trim().length)===0,"".concat(r," cannot be empty"))},qe=(r,e)=>{if(p(!(r instanceof Uint8Array),"key must be an Uint8Array"),e==="secp256k1")p(r.length!==65,"secp256k1: key length must be 65 bytes, got "+r.length);else if(e==="ed25519")p(r.length!==32,"ed25519: key length must be 32 bytes, got "+r.length);else throw new Error("Invalid signature algorithm")},Ne=(r,e)=>{if(p(!(r instanceof Uint8Array),"key must be an Uint8Array"),e==="secp256k1")p(r.length!==32,"secp256k1: key length must be 32 bytes, got "+r.length);else if(e==="ed25519")p(r.length!==32,"ed25519: key length must be 32 bytes, got "+r.length);else throw new Error("Invalid signature algorithm")},be=r=>{p(r!=="ed25519"&&r!=="secp256k1"&&r!=="mldsa44"&&r!=="mldsa65"&&r!=="mldsa87",'keygenAlg must be one of "ed25519", "secp256k1", "mldsa44", "mldsa65", or "mldsa87"')},$e=r=>{p(r!=="ed25519"&&r!=="secp256k1"&&r!=="mldsa44"&&r!=="mldsa65"&&r!=="mldsa87"&&r!=="mldsa44_dg"&&r!=="mldsa65_dg"&&r!=="mldsa87_dg",'signAlg must be one of "ed25519", "secp256k1", "mldsa44{_dg}", "mldsa65{_dg}", or "mldsa87{_dg}"')},p=(r,e)=>{if(r)throw new Error(e)},pt=(r,e)=>"Invalid payload ".concat(JSON.stringify(r),", cannot be authenticated by ").concat(e.toLocaleUpperCase()," method."),W=(r,e,t)=>{p(!e.some(n=>r instanceof n),pt(r,t))};var H=class{constructor(){a(this,"signRequest",new Map)}setRequest(e,t,n){if(d("transactionId",e),d("message",t),d("requestType",n),this.signRequest.has(e))throw new Error("Transaction ID ".concat(e," is already set."));return this.signRequest.set(e,{signingMessage:t,requestType:n}),this}build(){let e={};if(this.signRequest.forEach((t,n)=>{e[n]=t}),Object.keys(e).length===0)throw new Error("No sign request is set.");if(Object.keys(e).length>1)throw new Error("More than one sign request is set. Cannot build request.");return dt(e)}};import{canonicalize as Be}from"json-canonicalize";import{Base64 as xt}from"js-base64";function gt(r){return r instanceof Uint8Array||ArrayBuffer.isView(r)&&r.constructor.name==="Uint8Array"}function ae(r,...e){if(!gt(r))throw new Error("Uint8Array expected");if(e.length>0&&!e.includes(r.length))throw new Error("Uint8Array expected of length "+e+", got length="+r.length)}function we(r,e=!0){if(r.destroyed)throw new Error("Hash instance has been destroyed");if(e&&r.finished)throw new Error("Hash#digest() has already been called")}function De(r,e){ae(r);let t=e.outputLen;if(r.length<t)throw new Error("digestInto() expects output buffer of length at least "+t)}function z(...r){for(let e=0;e<r.length;e++)r[e].fill(0)}function ce(r){return new DataView(r.buffer,r.byteOffset,r.byteLength)}function b(r,e){return r<<32-e|r>>>e}function yt(r){if(typeof r!="string")throw new Error("string expected");return new Uint8Array(new TextEncoder().encode(r))}function Ae(r){return typeof r=="string"&&(r=yt(r)),ae(r),r}var oe=class{};function We(r){let e=n=>r().update(Ae(n)).digest(),t=r();return e.outputLen=t.outputLen,e.blockLen=t.blockLen,e.create=()=>r(),e}function ft(r,e,t,n){if(typeof r.setBigUint64=="function")return r.setBigUint64(e,t,n);let i=BigInt(32),s=BigInt(4294967295),o=Number(t>>i&s),c=Number(t&s),l=n?4:0,u=n?0:4;r.setUint32(e+l,o,n),r.setUint32(e+u,c,n)}function He(r,e,t){return r&e^~r&t}function Ve(r,e,t){return r&e^r&t^e&t}var le=class extends oe{constructor(e,t,n,i){super(),this.finished=!1,this.length=0,this.pos=0,this.destroyed=!1,this.blockLen=e,this.outputLen=t,this.padOffset=n,this.isLE=i,this.buffer=new Uint8Array(e),this.view=ce(this.buffer)}update(e){we(this),e=Ae(e),ae(e);let{view:t,buffer:n,blockLen:i}=this,s=e.length;for(let o=0;o<s;){let c=Math.min(i-this.pos,s-o);if(c===i){let l=ce(e);for(;i<=s-o;o+=i)this.process(l,o);continue}n.set(e.subarray(o,o+c),this.pos),this.pos+=c,o+=c,this.pos===i&&(this.process(t,0),this.pos=0)}return this.length+=e.length,this.roundClean(),this}digestInto(e){we(this),De(e,this),this.finished=!0;let{buffer:t,view:n,blockLen:i,isLE:s}=this,{pos:o}=this;t[o++]=128,z(this.buffer.subarray(o)),this.padOffset>i-o&&(this.process(n,0),o=0);for(let h=o;h<i;h++)t[h]=0;ft(n,i-8,BigInt(this.length*8),s),this.process(n,0);let c=ce(e),l=this.outputLen;if(l%4)throw new Error("_sha2: outputLen should be aligned to 32bit");let u=l/4,g=this.get();if(u>g.length)throw new Error("_sha2: outputLen bigger than state");for(let h=0;h<u;h++)c.setUint32(4*h,g[h],s)}digest(){let{buffer:e,outputLen:t}=this;this.digestInto(e);let n=e.slice(0,t);return this.destroy(),n}_cloneInto(e){e||(e=new this.constructor),e.set(...this.get());let{blockLen:t,buffer:n,length:i,finished:s,destroyed:o,pos:c}=this;return e.destroyed=o,e.finished=s,e.length=i,e.pos=c,i%t&&e.buffer.set(n),e}clone(){return this._cloneInto()}},P=Uint32Array.from([1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225]);var mt=Uint32Array.from([1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298]),R=new Uint32Array(64),ue=class extends le{constructor(e=32){super(64,e,8,!1),this.A=P[0]|0,this.B=P[1]|0,this.C=P[2]|0,this.D=P[3]|0,this.E=P[4]|0,this.F=P[5]|0,this.G=P[6]|0,this.H=P[7]|0}get(){let{A:e,B:t,C:n,D:i,E:s,F:o,G:c,H:l}=this;return[e,t,n,i,s,o,c,l]}set(e,t,n,i,s,o,c,l){this.A=e|0,this.B=t|0,this.C=n|0,this.D=i|0,this.E=s|0,this.F=o|0,this.G=c|0,this.H=l|0}process(e,t){for(let h=0;h<16;h++,t+=4)R[h]=e.getUint32(t,!1);for(let h=16;h<64;h++){let U=R[h-15],D=R[h-2],Me=b(U,7)^b(U,18)^U>>>3,me=b(D,17)^b(D,19)^D>>>10;R[h]=me+R[h-7]+Me+R[h-16]|0}let{A:n,B:i,C:s,D:o,E:c,F:l,G:u,H:g}=this;for(let h=0;h<64;h++){let U=b(c,6)^b(c,11)^b(c,25),D=g+U+He(c,l,u)+mt[h]+R[h]|0,me=(b(n,2)^b(n,13)^b(n,22))+Ve(n,i,s)|0;g=u,u=l,l=c,c=o+D|0,o=s,s=i,i=n,n=D+me|0}n=n+this.A|0,i=i+this.B|0,s=s+this.C|0,o=o+this.D|0,c=c+this.E|0,l=l+this.F|0,u=u+this.G|0,g=g+this.H|0,this.set(n,i,s,o,c,l,u,g)}roundClean(){z(R)}destroy(){this.set(0,0,0,0,0,0,0,0),z(this.buffer)}};var Le=We(()=>new ue);var Pe=Le;import{stringToBytes as bt,toHex as wt}from"viem";var S=r=>xt.fromUint8Array(new Uint8Array(r),!0),Se=r=>{let e=bt(r),t=Pe(Pe(e));return wt(t,{size:32}).slice(2)};var At=new Set(["signgen","addEphemeralKey","revokeEphemeralKey","registerPasskey","keyRefresh","finishPresign","getPolicy","updatePolicy","deletePolicy","getStateControllers","createStateController","deleteStateController","dryRunPolicy"]),k=class{constructor(e,t){a(this,"userAuthentications");a(this,"authModule");a(this,"apiVersion");this.authModule=e,this.userAuthentications=new Map,this.apiVersion=t}async setDefaultAuth(e){let t=await this.authModule.authenticate({payload:e.payload,challenge:e.challenge});this.userAuthentications.set("default",t)}async setKeygenUserSigs(e,t){if(this.apiVersion==="v1"&&!t)throw new Error("no challenge response for keygen");for(let n of e){let i=n.signAlg,s=t?t[i]:Se(Be(n));if(s){let o=await this.authModule.authenticate({payload:n,challenge:s});this.userAuthentications.set(i,o)}else throw new Error("no final challenge found in response for ".concat(i))}}async build(e,t,n){if(this.apiVersion!=="v1"&&(e==="registerPasskey"||e==="keyRefresh"))throw new Error("".concat(e," is only supported in V1"));let{challenge:i}=n!=null?n:{};if(e==="keygen"){let s=i?JSON.parse(i):void 0;await this.setKeygenUserSigs(t,s)}else{if(this.apiVersion==="v1"&&!i)throw new Error("missing challenge response for ".concat(e," V1"));let s=i!=null?i:Se(Be(t));At.has(e)&&await this.setDefaultAuth({payload:t,challenge:s})}return Object.fromEntries(this.userAuthentications)}};var Ee=r=>{let{sign:e,recid:t}=r,n=(27+t).toString(16);return"0x".concat(e).concat(n)};var Pt=[{name:"tag",type:"uint16"},{name:"value",type:"string"}],E=class{constructor({t:e,n:t,ephClaim:n,policy:i,signAlg:s}){a(this,"t");a(this,"n");a(this,"ephClaim");a(this,"metadata");a(this,"signAlg");a(this,"policy");d("signAlg",s),this.t=e,this.n=t,this.signAlg=s,this.ephClaim=n==null?void 0:n.toJSON(),this.metadata=[],this.policy=i==null?void 0:i.toCanonicalJSON()}get eoaRequestSchema(){let e=[{name:"t",type:"uint32"},{name:"n",type:"uint32"},{name:"metadata",type:"TaggedValue[]"}];return this.ephClaim&&e.push({name:"ephClaim",type:"string"}),this.policy&&e.push({name:"policy",type:"string"}),{Request:[{name:"setup",type:"KeygenSetupOpts"},{name:"challenge",type:"string"}],KeygenSetupOpts:e,TaggedValue:Pt}}},A=class{constructor({t:e,key_id:t,signAlg:n,message:i,policy_integration_context:s}){a(this,"t");a(this,"key_id");a(this,"message");a(this,"signAlg");a(this,"policy_integration_context");d("keyId",t),d("signAlg",n),d("message",i),this.t=e,this.key_id=t,this.message=i,this.signAlg=n,s!==void 0&&(d("policy_integration_context",s),this.policy_integration_context=s)}get eoaRequestSchema(){let e=[{name:"t",type:"uint32"},{name:"key_id",type:"string"},{name:"signAlg",type:"string"},{name:"message",type:"string"}];return this.policy_integration_context!==void 0&&e.push({name:"policy_integration_context",type:"string"}),{Request:[{name:"setup",type:"SignSetupOpts"},{name:"challenge",type:"string"}],SignSetupOpts:e}}},Y=class{constructor({amount:e,keyId:t,t:n,expiryInSecs:i}){a(this,"amount");a(this,"key_id");a(this,"t");a(this,"expiry");if(e<=0)throw new Error("Amount must be greater than 0");d("keyId",t),this.amount=e,this.key_id=t,this.t=n,this.expiry=i!=null?i:Math.floor(Date.now()/1e3)+7*24*3600}},T=class{constructor({presignSessionId:e,message:t,policy_integration_context:n}){a(this,"presignSessionId");a(this,"message");a(this,"policy_integration_context");d("presignSessionId",e),d("message",t),this.presignSessionId=e,this.message=t,n!==void 0&&(d("policy_integration_context",n),this.policy_integration_context=n)}get eoaRequestSchema(){return{Request:[{name:"setup",type:"FinishPresignOpts"},{name:"challenge",type:"string"}],FinishPresignOpts:[{name:"presignSessionId",type:"string"},{name:"message",type:"string"},...this.policy_integration_context!==void 0?[{name:"policy_integration_context",type:"string"}]:[]]}}};var Te={};ht(Te,{Action:()=>Ye,ChainType:()=>V,IssuerType:()=>ze,Logic:()=>je,Operator:()=>L,Policy:()=>ke,Rule:()=>Re,StateControllerAggregationMethod:()=>j,TransactionAttribute:()=>x,TransactionType:()=>v});import{canonicalize as St}from"json-canonicalize";var he=512,Fe=32,Je=256,Et=/^[a-z0-9][a-z0-9_-]{0,63}$/,ze=(n=>(n.SessionKeyId="SessionKeyId",n.UserId="UserId",n.All="*",n))(ze||{}),Ye=(t=>(t.Allow="allow",t.Deny="deny",t))(Ye||{}),je=(t=>(t.Or="or",t.And="and",t))(je||{}),V=(n=>(n.Off="off",n.Ethereum="ethereum",n.Solana="solana",n))(V||{}),v=(o=>(o.Eip712="eip712",o.Eip191="eip191",o.Erc20="erc20",o.Erc721="erc721",o.NativeTransfer="nativeTransfer",o.SolanaTransaction="solanaTransaction",o))(v||{}),x=(f=>(f.Sender="sender",f.Receiver="receiver",f.NativeValue="nativeValue",f.ChainId="chainId",f.FunctionSelector="functionSelector",f.Message="message",f.VerifyingContract="verifyingContract",f.PrimaryType="primaryType",f.DomainName="domainName",f.DomainVersion="domainVersion",f.SolanaAccountKeys="solanaAccountKeys",f.SplTransferAmount="splTransferAmount",f.SplTransferSrc="splTransferSrc",f.SplTransferDest="splTransferDest",f.SplTokenMint="splTokenMint",f.CustomProgramInstruction="customProgramInstruction",f.SystemInstructionName="systemInstructionName",f.SplInstructionName="splInstructionName",f))(x||{}),Ct={off:[],ethereum:["erc20","erc721","nativeTransfer","eip712","eip191"],solana:["solanaTransaction","nativeTransfer"]},Rt={eip191:["message"],eip712:["verifyingContract","chainId","primaryType","message","domainName","domainVersion"],erc20:["sender","receiver","chainId","functionSelector"],erc721:["sender","receiver","chainId","functionSelector"],solanaTransaction:["solanaAccountKeys","splTransferAmount","splTokenMint","splTransferSrc","splTransferDest","customProgramInstruction","systemInstructionName","splInstructionName"],nativeTransfer:["sender","receiver","nativeValue","chainId"]},kt=["erc20","erc721","solanaTransaction"],L=(l=>(l.Eq="eq",l.Neq="neq",l.Lt="lt",l.Lte="lte",l.Gt="gt",l.Gte="gte",l.In="in",l.All="all",l))(L||{});(e=>{function r(t,n){var i;return((i=Ct[t])!=null?i:[]).includes(n)}e.isSupported=r})(V||(V={}));(t=>{function r(n){return kt.includes(n)}t.allowsCustomAttributes=r;function e(n,i){var s;return x.isBuiltIn(i)?((s=Rt[n])!=null?s:[]).includes(i):r(n)}t.isSupported=e})(v||(v={}));(i=>{function r(s){return Object.values(i).includes(s)}i.isBuiltIn=r;function e(s){return r(s)&&["nativeValue","chainId","splTransferAmount"].includes(s)}i.isNumeric=e;function t(s){return r(s)&&["sender","receiver","chainId","functionSelector","message","verifyingContract","primaryType","domainName","domainVersion","splTransferSrc","splTransferDest","splTokenMint","customProgramInstruction","systemInstructionName","splInstructionName"].includes(s)}i.isStringLike=t;function n(s){return t(s)||s==="solanaAccountKeys"}i.isListLike=n})(x||(x={}));(t=>{function r(n){return n==="in"||n==="all"}t.isArray=r;function e(n,i){if(!x.isBuiltIn(i))return!0;switch(n){case"eq":case"neq":return!0;case"lt":case"lte":case"gt":case"gte":return x.isNumeric(i);case"in":return x.isStringLike(i);case"all":return x.isListLike(i);default:return!1}}t.isSupported=e})(L||(L={}));function Ce(r,e){if(!Et.test(e))throw new Error("".concat(r," must match [a-z0-9][a-z0-9_-]{0,63}"))}function Xe(r,e){if(r.checks.length===0||r.checks.length>Fe)throw new Error("".concat(e,".checks must contain 1 to ").concat(Fe," checks"));r.checks.forEach((t,n)=>{let i="".concat(e,".checks[").concat(n,"]");if(Ce("".concat(i,".check_id"),t.check_id),Ce("".concat(i,".integration_id"),t.integration_id),Ce("".concat(i,".operation"),t.operation),!Number.isSafeInteger(t.duration_ms)||t.duration_ms<=0)throw new Error("".concat(i,".duration_ms must be a positive integer"))})}function Ge(r,e,t){if(!V.isSupported(e,r.transaction_type))throw new Error("".concat(t,'.transaction_type "').concat(r.transaction_type,'" is not supported on chain "').concat(e,'"'));if(!v.isSupported(r.transaction_type,r.transaction_attr))throw new Error("".concat(t,'.transaction_attr "').concat(r.transaction_attr,'" is not supported by transaction type "').concat(r.transaction_type,'"'));if(!L.isSupported(r.operator,r.transaction_attr))throw new Error("".concat(t,'.operator "').concat(r.operator,'" is not supported by attribute "').concat(r.transaction_attr,'"'))}var Re=class{constructor({description:e,chain_type:t,conditions:n,issuer:i,action:s,logic:o,external_checks:c}){a(this,"description");a(this,"issuer");a(this,"action");a(this,"logic");a(this,"chain_type");a(this,"conditions");a(this,"external_checks");if(!n.length)throw new Error("Rule must have at least one condition");if(!t)throw new Error("Chain type must be set");if(e.length>he)throw new Error("Description length exceeds maximum of ".concat(he));this.description=e,this.chain_type=t,this.conditions=n,this.issuer=i||[{type:"*",id:"*"}],this.action=s||"allow",this.logic=o||"and",c&&(Xe(c,"external_checks"),this.external_checks=c)}},ke=class{constructor({version:e,description:t,rules:n}){a(this,"version");a(this,"description");a(this,"rules");if(t.length>he)throw new Error("Description length exceeds maximum of ".concat(he));this.version=e!=null?e:"1.0",this.description=t,n.forEach((o,c)=>{if(!Array.isArray(o.conditions))throw new Error("rules[".concat(c,"].conditions must be an array"));o.conditions.forEach((l,u)=>{let g="rules[".concat(c,"].conditions[").concat(u,"]");if(Array.isArray(l.group)){l.group.forEach((h,U)=>{Ge(h,o.chain_type,"".concat(g,".group[").concat(U,"]"))});return}Ge(l,o.chain_type,g)})});let i=new Map,s=0;n.forEach((o,c)=>{if(o.external_checks){if(Xe(o.external_checks,"rules[".concat(c,"].external_checks")),s+=o.external_checks.checks.length,s>Je)throw new Error("External check count exceeds policy maximum of ".concat(Je));o.external_checks.checks.forEach((l,u)=>{let g="rules[".concat(c,"].external_checks.checks[").concat(u,"].check_id"),h=i.get(l.check_id);if(h)throw new Error("".concat(g," duplicates ").concat(h));i.set(l.check_id,g)})}}),this.rules=n}toCanonicalJSON(){try{return St({version:this.version,description:this.description,rules:this.rules})}catch(e){throw console.error("Error while serializing policy",e),new Error("Error while serializing policy")}}},j=(t=>(t.Sum="sum",t.Count="count",t))(j||{});(e=>{function r(t,n){if(!x.isBuiltIn(n))return!0;switch(t){case"sum":return x.isNumeric(n);case"count":return!0;default:return!1}}e.supportsAttribute=r})(j||(j={}));var O=class{constructor(e,t){a(this,"key_id");a(this,"eph_claim");d("keyId",e),this.key_id=e,this.eph_claim=t.toJSON()}get eoaRequestSchema(){return{Request:[{name:"setup",type:"RevokeEphKeyRequest"},{name:"challenge",type:"string"}],RevokeEphKeyRequest:[{name:"key_id",type:"string"},{name:"eph_claim",type:"string"}]}}},B=class{constructor(e,t){a(this,"key_id_list");a(this,"eph_claim");for(let n of e)d("keyId",n);this.key_id_list=e,this.eph_claim=t.toJSON()}get eoaRequestSchema(){return{Request:[{name:"setup",type:"AddEphKeyRequest"},{name:"challenge",type:"string"}],AddEphKeyRequest:[{name:"key_id_list",type:"string[]"},{name:"eph_claim",type:"string"}]}}},F=class{constructor(e){a(this,"options");d("options",e),this.options=e}},J=class{constructor({t:e,keyId:t,signAlg:n}){a(this,"t");a(this,"key_id");a(this,"sign_alg");d("keyId",t),d("signAlg",n),this.t=e,this.key_id=t,this.sign_alg=n}get eoaRequestSchema(){return{Request:[{name:"setup",type:"KeyRefreshRequest"},{name:"challenge",type:"string"}],KeyRefreshRequest:[{name:"t",type:"uint32"},{name:"key_id",type:"string"},{name:"sign_alg",type:"string"}]}}},C=class{constructor({keyId:e,policy:t}){a(this,"key_id");a(this,"policy");d("keyId",e),this.key_id=e,this.policy=t.toCanonicalJSON()}get eoaRequestSchema(){return{Request:[{name:"setup",type:"UpdatePolicyRequest"},{name:"challenge",type:"string"}],UpdatePolicyRequest:[{name:"key_id",type:"string"},{name:"policy",type:"string"}]}}},m=class{constructor({keyId:e}){a(this,"key_id");d("keyId",e),this.key_id=e}get eoaRequestSchema(){return{Request:[{name:"setup",type:"KeyIdOfPolicy"},{name:"challenge",type:"string"}],KeyIdOfPolicy:[{name:"key_id",type:"string"}]}}},K=class{constructor({key_id:e,description:t,method:n,window:i,partition_by:s}){a(this,"key_id");a(this,"description");a(this,"method");a(this,"window");a(this,"partition_by");d("key_id",e),s.forEach((o,c)=>{if(!v.isSupported(o.transaction_type,o.transaction_attr))throw new Error("partition_by[".concat(c,'].transaction_attr "').concat(o.transaction_attr,'" is not supported by transaction type "').concat(o.transaction_type,'"'))}),this.key_id=e,this.description=t!=null?t:"",this.method=n,this.window=JSON.stringify(i),this.partition_by=JSON.stringify(s)}get eoaRequestSchema(){return{Request:[{name:"setup",type:"CreateStateControllerRequest"},{name:"challenge",type:"string"}],CreateStateControllerRequest:[{name:"key_id",type:"string"},{name:"description",type:"string"},{name:"method",type:"string"},{name:"window",type:"string"},{name:"partition_by",type:"string"}]}}},q=class{constructor({key_id:e,controller_id:t}){a(this,"key_id");a(this,"controller_id");d("key_id",e),this.key_id=e,d("controller_id",t),this.controller_id=t}get eoaRequestSchema(){return{Request:[{name:"setup",type:"DeleteStateControllerRequest"},{name:"challenge",type:"string"}],DeleteStateControllerRequest:[{name:"key_id",type:"string"},{name:"controller_id",type:"string"}]}}},N=class{constructor({keyId:e,message:t,signAlg:n,policy:i,stateControllers:s="[]",initialStateEntries:o="[]",evaluationCount:c=1}){a(this,"key_id");a(this,"message");a(this,"signAlg");a(this,"policy");a(this,"state_controllers");a(this,"initial_state_entries");a(this,"evaluation_count");if(d("keyId",e),d("message",t),d("signAlg",n),i===""&&(s!=="[]"||o!=="[]"))throw new Error("Policy is empty, state_controllers and initial_state_entries must be empty");this.key_id=e,this.message=t,this.signAlg=n,this.policy=i===""?i:i.toCanonicalJSON(),this.state_controllers=s,this.initial_state_entries=o,this.evaluation_count=c}get eoaRequestSchema(){return{Request:[{name:"setup",type:"DryRunPolicyRequest"},{name:"challenge",type:"string"}],DryRunPolicyRequest:[{name:"key_id",type:"string"},{name:"message",type:"string"},{name:"signAlg",type:"string"},{name:"policy",type:"string"},{name:"state_controllers",type:"string"},{name:"initial_state_entries",type:"string"},{name:"evaluation_count",type:"uint32"}]}}};import{canonicalize as pe}from"json-canonicalize";import{canonicalize as Tt}from"json-canonicalize";var ve=class extends Error{constructor(t,n,i){super(i||n);this.status=t;this.statusText=n;this.name="HttpError"}},I=class{constructor(e="",t={}){a(this,"baseURL");a(this,"defaultHeaders");this.baseURL=e,this.validateHeaders(t),this.defaultHeaders=y({"Content-Type":"application/json"},t)}validateHeaders(e){if(typeof e!="object"||e===null)throw new Error("Headers must be an object.");for(let[t,n]of Object.entries(e))if(typeof t!="string"||typeof n!="string")throw new Error("Invalid header: ".concat(t,". Header names and values must be strings."))}setDefaultHeaders(e){this.defaultHeaders=y(y({},this.defaultHeaders),e)}buildUrl(e){return"".concat(this.baseURL).concat(e)}async handleResponse(e){if(!e.ok){let n;try{n=(await e.json()).message||e.statusText}catch(i){n=e.statusText}throw new ve(e.status,e.statusText,n)}let t=e.headers.get("content-type");return t&&t.includes("application/json")?e.json():e.text()}async request(e,t,n,i={}){let s=this.buildUrl(t),o=y(y({},this.defaultHeaders),i.headers),c=M(y({method:e,headers:o},i),{body:n?Tt(n):null}),l=await fetch(s,c);return this.handleResponse(l)}async get(e,t){return this.request("GET",e,void 0,t)}async post(e,t,n){return this.request("POST",e,t,n)}async put(e,t,n){return this.request("PUT",e,t,n)}async patch(e,t,n){return this.request("PATCH",e,t,n)}async delete(e,t){return this.request("DELETE",e,void 0,t)}};var X=class{constructor(e){a(this,"walletProviderUrl");a(this,"apiVersion","v1");a(this,"httpClient");this.walletProviderUrl="".concat(e.walletProviderUrl,"/").concat(e.apiVersion),this.apiVersion=e.apiVersion,this.httpClient=new I(this.walletProviderUrl.replace(/^ws/,"http"))}getVersion(){return this.apiVersion}async getPolicyIntegrations(){return this.httpClient.get("/rest/getPolicyIntegrations")}async startKeygen({setups:e,authModule:t}){return(this.apiVersion==="v1"?this.connect.bind(this):this.connectV2.bind(this))("keygen",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse keygen response: ".concat(i))}})}async startKeyRefresh({payload:e,authModule:t}){if(this.apiVersion==="v2")throw new Error("Key refresh is not supported in v2 API");return this.connect.bind(this)("keyRefresh",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse key refresh response: ".concat(i))}})}async startSigngen({setup:e,authModule:t}){return(this.apiVersion==="v1"?this.connect.bind(this):this.connectV2.bind(this))("signgen",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse signgen response: ".concat(i))}})}async addEphemeralKey({payload:e,authModule:t}){return(this.apiVersion==="v1"?this.connect.bind(this):this.connectV2.bind(this))("addEphemeralKey",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse add ephemeral key response: ".concat(i))}})}async revokeEphemeralKey({payload:e,authModule:t}){return(this.apiVersion==="v1"?this.connect.bind(this):this.connectV2.bind(this))("revokeEphemeralKey",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse revoke ephemeral key response: ".concat(i))}})}async registerPasskey({payload:e,authModule:t}){if(this.apiVersion==="v2")throw new Error("Passkey registration is not supported in v2 API");return this.connect.bind(this)("registerPasskey",e,t).then(i=>({passkeyCredentialId:i}))}async updatePolicy({payload:e,authModule:t}){return(this.apiVersion==="v1"?this.connect.bind(this):this.connectV2.bind(this))("updatePolicy",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse update policy response: ".concat(i))}})}async deletePolicy({payload:e,authModule:t}){return(this.apiVersion==="v1"?this.connect.bind(this):this.connectV2.bind(this))("deletePolicy",e,t).then(i=>{try{return JSON.parse(i)}catch(s){throw new Error("Failed to parse delete policy response: ".concat(i))}})}connect(e,t,n){return new Promise((i,s)=>{let o=new WebSocket("".concat(this.walletProviderUrl,"/").concat(e)),c=0;return console.debug("Connecting to ",o.url),o.addEventListener("open",l=>{switch(console.debug("Connection opened in state ".concat(c," with event ").concat(JSON.stringify(l,void 0," "))),c){case 0:{c=1;try{let u=pe({payload:t});console.debug("Sending request:",u),o.send(u)}catch(u){this.finishWithError(o,c,u,"open event",s)}break}case 1:case 2:this.finishWithError(o,c,"Unexpected message in state waitingForResult.","open event",s);break;case 3:break}}),o.addEventListener("message",async l=>{switch(console.debug("Connection message in state ".concat(c," with event data ").concat(JSON.stringify(l.data,void 0," "))),c){case 0:this.finishWithError(o,c,"Unexpected message in state initiated.","message event",s);break;case 1:{c=2;try{let u=l.data,g=await new k(n,this.apiVersion).build(e,t,{challenge:u});o.send(pe(g))}catch(u){this.finishWithError(o,c,u,"message event",s)}break}case 2:{c=3,o.close(),i(l.data);break}case 3:break}}),o.addEventListener("error",l=>{this.finishWithError(o,c,"Connection encountered an error event: ".concat(JSON.stringify(l,void 0," ")),"error event",s)}),o.addEventListener("close",l=>{let u=l.reason||"No specific reason provided.",g=l.code;console.debug("Connection closed. State: ".concat(c,", Code: ").concat(g,", Reason: '").concat(u,"'"));let h=g>=4e3?"Application Error ".concat(g,": ").concat(u):g===1006?"Connection Abnormality (Code 1006): Server closed connection unexpectedly or network issue.":"WebSocket Closed Unexpectedly (Code ".concat(g,"): ").concat(u);this.finishWithError(o,c,new Error(h),"close event",s)}),()=>{(o.readyState===WebSocket.OPEN||o.readyState===WebSocket.CONNECTING)&&o.close(1001,"Cleanup/Unmount")}})}connectV2(e,t,n){return new Promise((i,s)=>{let o=new WebSocket("".concat(this.walletProviderUrl,"/").concat(e)),c=0;return console.debug("Connecting to ",o.url),o.addEventListener("open",async l=>{switch(console.debug("Connection opened in state ".concat(c," with event ").concat(JSON.stringify(l,void 0," "))),c){case 0:c=2;try{let u=await new k(n,this.apiVersion).build(e,t);o.send(pe({payload:t,userSigs:u}))}catch(u){this.finishWithError(o,c,u,"open event",s)}break;case 2:c=3,this.finishWithError(o,c,"Unexpected message in state waitingForResult.","open event",s);break;case 3:break}}),o.addEventListener("message",async l=>{switch(console.debug("Connection message in state ".concat(c," with event ").concat(JSON.stringify(l,void 0," "))),c){case 0:this.finishWithError(o,c,"Unexpected message in state initiated.","message event",s);break;case 2:{c=3,o.close(),i(l.data);break}case 3:break}}),o.addEventListener("error",l=>{this.finishWithError(o,c,"Connection encountered an error event: ".concat(JSON.stringify(l,void 0," ")),"error event",s)}),o.addEventListener("close",l=>{let u=l.reason||"No specific reason provided.",g=l.code;console.debug("Connection closed. State: ".concat(c,", Code: ").concat(g,", Reason: '").concat(u,"'"));let h=g>=4e3?"Application Error ".concat(g,": ").concat(u):g===1006?"Connection Abnormality (Code 1006): Server closed connection unexpectedly or network issue.":"WebSocket Closed Unexpectedly (Code ".concat(g,"): ").concat(u);this.finishWithError(o,c,new Error(h),"close event",s)}),()=>{(o.readyState===WebSocket.OPEN||o.readyState===WebSocket.CONNECTING)&&o.close(1001,"Cleanup/Unmount")}})}finishWithError(e,t,n,i,s){t!==3&&(console.error("Error from ".concat(i," in state ").concat(t,":"),n),t=3,s(n instanceof Error?n:new Error(String(n)))),e.readyState===WebSocket.OPEN&&e.close(1e3,"Protocol run failed. Client attempted to close connection in state ".concat(t))}},_=class{constructor(e){a(this,"walletProviderUrl");a(this,"apiVersion","v1");a(this,"httpClient");this.walletProviderUrl="".concat(e.walletProviderUrl,"/").concat(e.apiVersion),this.apiVersion=e.apiVersion,this.httpClient=new I(this.walletProviderUrl.replace(/^ws/,"http"))}getVersion(){return this.apiVersion}async getPolicyIntegrations(){return this.httpClient.get("/rest/getPolicyIntegrations")}async startKeygen({setups:e}){return this.connect.bind(this)("keygen",e).then(n=>{try{return JSON.parse(n)}catch(i){throw new Error("Failed to parse keygen response: ".concat(n))}})}async startSigngen({setup:e}){return this.connect.bind(this)("signgen",e).then(n=>{try{return JSON.parse(n)}catch(i){throw new Error("Failed to parse signgen response: ".concat(n))}})}async startKeyRefresh({payload:e}){if(this.apiVersion==="v2")throw new Error("Key refresh is not supported in v2 API");return this.connect.bind(this)("keyRefresh",e).then(n=>{try{return JSON.parse(n)}catch(i){throw new Error("Failed to parse key refresh response: ".concat(n))}})}async updatePolicy({payload:e}){return this.connect.bind(this)("updatePolicy",e).then(n=>{try{return JSON.parse(n)}catch(i){throw new Error("Failed to parse update policy response: ".concat(n))}})}async deletePolicy({payload:e}){return this.connect.bind(this)("deletePolicy",e).then(n=>{try{return JSON.parse(n)}catch(i){throw new Error("Failed to parse delete policy response: ".concat(n))}})}connect(e,t){return new Promise((n,i)=>{let s=0,o=new WebSocket("".concat(this.walletProviderUrl,"/").concat(e));o.addEventListener("open",async c=>{switch(console.debug("Connection opened in state ".concat(s," with event ").concat(JSON.stringify(c,void 0," "))),s){case 0:s=2;try{o.send(pe({payload:t}))}catch(l){i(l)}break;case 2:s=3,i("Incorrect protocol state");break;case 3:break}}),o.addEventListener("message",async c=>{switch(console.debug("Connection message in state ".concat(s," with event ").concat(JSON.stringify(c,void 0," "))),s){case 0:s=3,i("Incorrect protocol state");break;case 2:{s=3,o.close(),n(c.data);break}case 3:break}}),o.addEventListener("error",c=>{console.debug("Connection error in state ".concat(s," with event ").concat(JSON.stringify(c,void 0," "))),s!=3&&(s=3,i("Incorrect protocol state"))}),o.addEventListener("close",c=>{console.debug("Connection closed in state ".concat(s," with event ").concat(JSON.stringify(c,void 0," "))),s!=3&&(s=3,i("Incorrect protocol state"))})})}};var Q=class{constructor(e,t){a(this,"authModule");a(this,"wpClient");if(!t&&!(e instanceof _))throw new Error("missing authModule for wallet provider client in auth mode");if(t&&e instanceof _)throw new Error("authModule is required but using wallet provider client in no-auth mode");this.authModule=t,this.wpClient=e}validateQuorumSetup({threshold:e,totalNodes:t}){e&&p(e<2,"Threshold = ".concat(e," must be at least 2")),e&&t&&p(t<e,"Total nodes = ".concat(t," must be greater or equal to threshold = ").concat(e))}async generateKey(e,t,n,i,s){this.validateQuorumSetup({threshold:e,totalNodes:t});let o=n.map(c=>(be(c),new E({t:e,n:t,ephClaim:i,policy:s,signAlg:c})));return this.authModule?await this.wpClient.startKeygen({setups:o,authModule:this.authModule}):await this.wpClient.startKeygen({setups:o})}async signMessage(e,t,n,i,s){this.validateQuorumSetup({threshold:e}),$e(n);let o=new A(y({t:e,key_id:t,signAlg:n,message:i},s!==void 0?{policy_integration_context:s}:{}));return this.authModule?await this.wpClient.startSigngen({setup:o,authModule:this.authModule}):await this.wpClient.startSigngen({setup:o})}async refreshKey(e,t,n){be(n);let i=new J({t:e,keyId:t,signAlg:n});return this.authModule?await this.wpClient.startKeyRefresh({payload:i,authModule:this.authModule}):await this.wpClient.startKeyRefresh({payload:i})}async addEphemeralKey(e,t){let n=new B(e,t);if(!this.authModule)throw new Error("Add ephemeral key is not supported in no auth mode");return await this.wpClient.addEphemeralKey({payload:n,authModule:this.authModule})}async revokeEphemeralKey(e,t){d("keyId",e);let n=new O(e,t);if(!this.authModule)throw new Error("Revoke ephemeral key is not supported in no auth mode");return await this.wpClient.revokeEphemeralKey({payload:n,authModule:this.authModule})}async registerPasskey(e){let t=new F(e!=null?e:"passkey options");if(!this.authModule)throw new Error("Register passkey is not supported in no auth mode");return await this.wpClient.registerPasskey({payload:t,authModule:this.authModule})}async updatePolicy(e,t){let n=new C({keyId:e,policy:t});return this.authModule?await this.wpClient.updatePolicy({payload:n,authModule:this.authModule}):await this.wpClient.updatePolicy({payload:n})}async deletePolicy(e){let t=new m({keyId:e});return this.authModule?await this.wpClient.deletePolicy({payload:t,authModule:this.authModule}):await this.wpClient.deletePolicy({payload:t})}};var vt={name:"SilentShard authentication",version:"0.1.0"},It=[{name:"name",type:"string"},{name:"version",type:"string"}];function _t(r,e){let t={setup:r,challenge:e};return{types:y({EIP712Domain:It},r.eoaRequestSchema),domain:vt,primaryType:"Request",message:t}}async function Qe({setup:r,eoa:e,challenge:t,browserWallet:n}){let i=_t(r,t),s=await n.signTypedData(e,i);return new w({method:"eoa",id:e},s)}import{Base64 as Ze}from"js-base64";import{hexToBytes as et}from"viem";import{canonicalize as de}from"json-canonicalize";async function tt({user:r,challenge:e,rpConfig:t}){let n=et("0x".concat(e),{size:32}),i={publicKey:{authenticatorSelection:{residentKey:"preferred",userVerification:"required"},challenge:n,excludeCredentials:[],pubKeyCredParams:[{type:"public-key",alg:-7},{type:"public-key",alg:-257}],rp:{name:t.rpName,id:t.rpId},user:M(y({},r),{id:Ze.toUint8Array(r.id)})}},s=await navigator.credentials.create(i);if(s===null)throw new Error("No credential returned");let o=S(s.response.attestationObject),l={rawCredential:de({authenticatorAttachment:s.authenticatorAttachment,id:s.id,rawId:S(s.rawId),response:{attestationObject:o,clientDataJSON:S(s.response.clientDataJSON)},type:s.type}),origin:t.rpName,rpId:t.rpId};return new w({method:"passkey",id:s.id},de(l))}async function nt({challenge:r,allowCredentialId:e,rpConfig:t}){let n=et("0x".concat(r),{size:32}),i=e?[{type:"public-key",id:Ze.toUint8Array(e)}]:[],s={publicKey:{userVerification:"required",challenge:n,allowCredentials:i}},o=await navigator.credentials.get(s);if(o===null)throw new Error("Failed to get navigator credentials");let c=o.response,l=c.userHandle;if(l===null)throw new Error("User handle cannot be null");let u=S(c.signature),h={rawCredential:de({authenticatorAttachment:o.authenticatorAttachment,id:o.id,rawId:S(o.rawId),response:{authenticatorData:S(c.authenticatorData),clientDataJSON:S(c.clientDataJSON),signature:u,userHandle:S(l)},type:o.type}),origin:t.rpName,rpId:t.rpId};return new w({method:"passkey",id:o.id},de(h))}import{toHex as ge}from"viem";import{ed25519 as Ie}from"@noble/curves/ed25519";import{secp256k1 as rt}from"@noble/curves/secp256k1";import{signMessage as Ut}from"viem/accounts";import{canonicalize as it}from"json-canonicalize";var $=class r{constructor(e,t,n,i=Math.floor(Date.now()/1e3)+3600){a(this,"ephId");a(this,"ephPK");a(this,"signAlg");a(this,"expiry");this.validateInputs(e,t,n,i),this.ephId=e,this.ephPK=ge(t),this.signAlg=n,this.expiry=i}validateInputs(e,t,n,i){d("ephId",e),qe(t,n),p(Number.isInteger(i)===!1,"expiry must be an integer");let s=Math.floor(Date.now()/1e3),o=i-s,c=o>0&&o<=365*24*60*60;p(!c,"lifetime must be greater than 0 and less than or equal to 365 days expiry - now ".concat(o,", expiry ").concat(i," now secs ").concat(s))}toJSON(){try{return it({ephId:this.ephId,ephPK:this.ephPK,expiry:this.expiry,signAlg:this.signAlg})}catch(e){throw console.error("Error while serializing ephemeral key claim",e),new Error("Error while serializing ephemeral key claim")}}static generateKeys(e,t){let n=ye(e),i=G(n,e),s=new r(ge(i),i,e,t);return{privKey:n,pubKey:i,ephClaim:s}}};async function st({setup:r,challenge:e,ephSK:t,ephClaim:n}){let i={setup:r,challenge:e},s=new TextEncoder().encode(it(i)),o=await Mt(s,t,n.signAlg);return new w({method:"ephemeral",id:n.ephId},o)}async function Mt(r,e,t){switch(t){case"ed25519":return ge(Ie.sign(r,e));case"secp256k1":return await Ut({message:{raw:r},privateKey:ge(e)});default:throw new Error("Invalid signature algorithm")}}function ye(r){switch(r){case"ed25519":return Ie.utils.randomPrivateKey();case"secp256k1":return rt.utils.randomPrivateKey();default:throw new Error("Invalid signature algorithm")}}function G(r,e){switch(e){case"ed25519":return Ie.getPublicKey(r);case"secp256k1":return rt.getPublicKey(r,!1);default:throw new Error("Invalid signature algorithm")}}import{isAddress as Kt}from"viem";import{jwtDecode as Ot}from"jwt-decode";var fe=r=>{let e=Ot(r);if(!e||typeof e!="object"||Array.isArray(e))throw new Error("Invalid JWT payload");return e};var w=class{constructor(e,t){this.credentials=e;this.signature=t;this.credentials=e,this.signature=t}},_e=[E,J,B,O,A,T,C,m,K,q,N],qt=[A,O,T,m],Z=class{constructor(e,t){a(this,"browserWallet");a(this,"eoa");this.validateInputs(e,t),this.browserWallet=t,this.eoa=e}validateInputs(e,t){p(!Kt(e),"invalid Ethereum address format"),p(!((t==null?void 0:t.signTypedData)instanceof Function),"invalid browserWallet")}async authenticate({payload:e,challenge:t}){return W(e,_e,"eoa"),await Qe({setup:e,eoa:this.eoa,challenge:t,browserWallet:this.browserWallet})}},ee=class{constructor(e,t,n){a(this,"ephSK");a(this,"ephClaim");Ne(t,n),this.ephSK=t;let i=G(this.ephSK,n);this.ephClaim=new $(e,i,n)}async authenticate({payload:e,challenge:t}){return W(e,qt,"ephemeral"),await st({setup:e,challenge:t,ephSK:this.ephSK,ephClaim:this.ephClaim})}},te=class{constructor(e,t){a(this,"rpConfig");a(this,"allowCredentialId");this.rpConfig=e,this.allowCredentialId=t}async authenticate({payload:e,challenge:t}){return W(e,_e,"passkey"),await nt({allowCredentialId:this.allowCredentialId,challenge:t,rpConfig:this.rpConfig})}},ne=class{constructor(e,t){a(this,"rpConfig");a(this,"user");this.rpConfig=e,this.user=t}async authenticate({payload:e,challenge:t}){return W(e,[F],"passkey"),await tt({user:this.user,challenge:t,rpConfig:this.rpConfig})}},re=class{constructor(e){a(this,"jwtIssuer");this.validateInputs(e),this.jwtIssuer=e}validateInputs(e){p(!((e==null?void 0:e.issueToken)instanceof Function),"invalid jwtIssuer")}async authenticate({payload:e,challenge:t}){W(e,_e,"jwt");let n=await this.jwtIssuer.issueToken(t),i=fe(n),{iss:s,sub:o}=i;return p(!s||!o,"JWT token is missing iss or sub claims"),new w({method:"jwt",id:{iss:s,sub:o}},n)}};import{createAuth0Client as Nt,PopupOpenError as $t}from"@auth0/auth0-spa-js";var Dt=["silent","popup","silent-with-popup-fallback"],ie="sl_nonce",Wt="popup_open",Ht=(r,e)=>typeof e=="string"&&r.includes(e),se=class{constructor(e){a(this,"config");a(this,"auth0Client");a(this,"auth0ClientPromise");var t;this.validateInputs(e),this.config={domain:e.domain,clientId:e.clientId,audience:e.audience,interactiveMode:(t=e.interactiveMode)!=null?t:"silent-with-popup-fallback"},e.scope&&(this.config.scope=e.scope),e.redirectUri&&(this.config.redirectUri=e.redirectUri),e.useRefreshTokens!==void 0&&(this.config.useRefreshTokens=e.useRefreshTokens),e.useRefreshTokensFallback!==void 0&&(this.config.useRefreshTokensFallback=e.useRefreshTokensFallback),e.auth0Client&&(this.auth0Client=e.auth0Client)}async issueToken(e){p(!e,"missing challenge for Auth0 token issuance");let t=await this.getToken(e);return this.validateTokenChallenge(t,e),t}async isAuthenticated(){let e=await this.getClient();if(!(e.isAuthenticated instanceof Function))throw new Error("Auth0 session lookup is not available");return await e.isAuthenticated()}async getUser(){let e=await this.getClient();if(!(e.getUser instanceof Function))throw new Error("Auth0 user lookup is not available");return await e.getUser()}async logout(e){let t=await this.getClient();if(!(t.logout instanceof Function))throw new Error("Auth0 logout is not available");await t.logout(e)}validateInputs(e){var n,i;p(!(e!=null&&e.domain),"missing Auth0 domain"),p(!(e!=null&&e.clientId),"missing Auth0 clientId"),p(!(e!=null&&e.audience),"missing Auth0 audience"),p(e.interactiveMode!==void 0&&!Ht(Dt,e.interactiveMode),"invalid Auth0 interactiveMode");let t=(n=e.interactiveMode)!=null?n:"silent-with-popup-fallback";e.auth0Client!==void 0&&(p(!(((i=e.auth0Client)==null?void 0:i.getTokenSilently)instanceof Function),"invalid auth0Client"),p(t!=="silent"&&!(e.auth0Client.getTokenWithPopup instanceof Function),"invalid auth0Client: missing getTokenWithPopup"))}async getClient(){return this.auth0Client?this.auth0Client:(this.auth0ClientPromise||(this.auth0ClientPromise=Nt(this.buildClientOptions())),this.auth0Client=await this.auth0ClientPromise,this.auth0Client)}buildClientOptions(){let e={audience:this.config.audience};this.config.scope&&(e.scope=this.config.scope);let t=this.getRedirectUri();return t&&(e.redirect_uri=t),y(y({domain:this.config.domain,clientId:this.config.clientId,authorizationParams:e},this.config.useRefreshTokens!==void 0?{useRefreshTokens:this.config.useRefreshTokens}:{}),this.config.useRefreshTokensFallback!==void 0?{useRefreshTokensFallback:this.config.useRefreshTokensFallback}:{})}getRedirectUri(){if(this.config.redirectUri)return this.config.redirectUri;if(typeof window<"u")return window.location.origin}buildAuthorizationParams(e){let t={audience:this.config.audience,[ie]:e};this.config.scope&&(t.scope=this.config.scope);let n=this.getRedirectUri();return n&&(t.redirect_uri=n),t}async getToken(e){let t=await this.getClient(),n=this.buildAuthorizationParams(e);if(this.config.interactiveMode==="popup")return await this.getTokenWithPopup(t,n);try{return await t.getTokenSilently({cacheMode:"off",authorizationParams:n})}catch(i){if(this.config.interactiveMode!=="silent-with-popup-fallback"||!this.isInteractiveAuthError(i))throw i;return await this.getTokenWithPopup(t,n)}}async getTokenWithPopup(e,t){p(!(e.getTokenWithPopup instanceof Function),"Auth0 popup token flow is not available");let n;try{n=await e.getTokenWithPopup({cacheMode:"off",authorizationParams:t})}catch(i){throw this.isPopupOpenError(i)?new Error("Your browser blocked the Auth0 sign-in popup. Sign in again and allow popups for this site if prompted."):i}if(!n)throw new Error("Auth0 popup token flow did not return an access token");return n}isPopupOpenError(e){return e instanceof $t||e.error===Wt}isInteractiveAuthError(e){var n;let t=e;return["consent_required","interaction_required","login_required","mfa_required","missing_refresh_token"].includes((n=t.error)!=null?n:"")}validateTokenChallenge(e,t){let n=fe(e),i=Object.entries(n).find(([o])=>o===ie);if(i===void 0)throw new Error("Auth0 access token is missing ".concat(ie," claim"));let s=i[1];p(typeof s!="string","Auth0 access token ".concat(ie," claim must be a string")),p(s!==t,"Expected ".concat(ie," claim to match ").concat(t,", found ").concat(String(s)))}};import{publicKeyToAddress as ot,toAccount as Dr}from"viem/accounts";import{secp256k1 as Vt}from"@noble/curves/secp256k1";import{hashMessage as Lr,hashTypedData as Br,keccak256 as Fr,serializeSignature as Jr,serializeTransaction as Gr,toHex as Yr}from"viem";import{Base64 as Xr}from"js-base64";function Ue(r){if(r.startsWith("0x")&&(r=r.slice(2)),r.startsWith("04"))return ot("0x".concat(r," "));if(r.startsWith("02")||r.startsWith("03")){let e=Vt.ProjectivePoint.fromHex(r).toHex(!1);return ot("0x".concat(e))}else throw new Error("Invalid public key")}var di=M(y({KeygenSetupOpts:E,InitPresignOpts:Y,FinishPresignOpts:T,SignSetupOpts:A,UserSignatures:k,NetworkSigner:Q,SignRequestBuilder:H,WalletProviderServiceClient:X,NoAuthWalletProviderServiceClient:_,HttpClient:I,EOAAuth:Z,EphAuth:ee,PasskeyAuth:te,PasskeyRegister:ne,generateEphPrivateKey:ye,getEphPublicKey:G,EphKeyClaim:$,computeAddress:Ue,flattenSignature:Ee,UpdatePolicyRequest:C,GetPolicyRequest:m,DeletePolicyRequest:m,GetStateControllersRequest:m,CreateStateControllerRequest:K,DeleteStateControllerRequest:q,DryRunPolicyRequest:N},Te),{JWTAuth:re,Auth0JWTIssuer:se});export{Ye as Action,se as Auth0JWTIssuer,V as ChainType,K as CreateStateControllerRequest,m as DeletePolicyRequest,q as DeleteStateControllerRequest,N as DryRunPolicyRequest,Z as EOAAuth,ee as EphAuth,$ as EphKeyClaim,T as FinishPresignOpts,m as GetPolicyRequest,m as GetStateControllersRequest,I as HttpClient,Y as InitPresignOpts,ze as IssuerType,re as JWTAuth,E as KeygenSetupOpts,je as Logic,Q as NetworkSigner,_ as NoAuthWalletProviderServiceClient,L as Operator,te as PasskeyAuth,ne as PasskeyRegister,ke as Policy,Re as Rule,H as SignRequestBuilder,A as SignSetupOpts,j as StateControllerAggregationMethod,x as TransactionAttribute,v as TransactionType,C as UpdatePolicyRequest,w as UserAuthentication,k as UserSignatures,X as WalletProviderServiceClient,Ue as computeAddress,di as default,Ee as flattenSignature,ye as generateEphPrivateKey,G as getEphPublicKey};
2
2
  /*! Bundled license information:
3
3
 
4
4
  @noble/hashes/esm/utils.js:
package/dist/policy.d.ts CHANGED
@@ -201,6 +201,19 @@ export interface ConditionGroup {
201
201
  * Either a single condition or a group of conditions
202
202
  */
203
203
  export type ConditionOrGroup = Condition | ConditionGroup;
204
+ /** One external provider operation referenced by a policy rule. */
205
+ export interface ExternalCheck {
206
+ check_id: string;
207
+ integration_id: string;
208
+ operation: string;
209
+ /** End-to-end provider timeout in milliseconds. */
210
+ duration_ms: number;
211
+ }
212
+ /** Boolean group of external checks attached to one rule. */
213
+ export interface ExternalCheckGroup {
214
+ logic: Logic;
215
+ checks: ExternalCheck[];
216
+ }
204
217
  /**
205
218
  * A rule contains conditions that must be satisfied
206
219
  */
@@ -217,6 +230,8 @@ export declare class Rule {
217
230
  chain_type: ChainType;
218
231
  /** List of conditions or condition groups */
219
232
  conditions: ConditionOrGroup[];
233
+ /** Optional external predicates evaluated after the local conditions pass. */
234
+ external_checks?: ExternalCheckGroup;
220
235
  /**
221
236
  * Creates a new Rule instance.
222
237
  *
@@ -226,15 +241,17 @@ export declare class Rule {
226
241
  * @param issuer - (Optional) The issuers to whom this rule applies. Defaults to allowing all issuers (*).
227
242
  * @param action - (Optional) The action to take if the rule is matched (Allow/Deny). Defaults to Allow.
228
243
  * @param logic - (Optional) The logic operator (AND/OR) to apply to the conditions. Defaults to AND.
244
+ * @param external_checks - (Optional) External checks evaluated when the local conditions pass.
229
245
  * @throws Will throw an error if no conditions are provided or chain_type is missing.
230
246
  */
231
- constructor({ description, chain_type, conditions, issuer, action, logic, }: {
247
+ constructor({ description, chain_type, conditions, issuer, action, logic, external_checks, }: {
232
248
  description: string;
233
249
  chain_type: ChainType;
234
250
  conditions: ConditionOrGroup[];
235
251
  issuer?: Issuer[];
236
252
  action?: Action;
237
253
  logic?: Logic;
254
+ external_checks?: ExternalCheckGroup;
238
255
  });
239
256
  }
240
257
  /**
package/dist/policyIntegration.d.ts ADDED
@@ -0,0 +1,20 @@
1
+ /** RFC 6901 JSON Pointer allowlists for a provider request. */
2
+ export interface PayloadProjection {
3
+ transaction?: string[];
4
+ context?: string[];
5
+ }
6
+ /** One operation exposed by a deployment-managed policy integration. */
7
+ export interface OperationCatalogEntry {
8
+ operation: string;
9
+ description: string;
10
+ payload_projection: PayloadProjection;
11
+ }
12
+ /** One integration available to policy authors. */
13
+ export interface IntegrationCatalogEntry {
14
+ integration_id: string;
15
+ operations: OperationCatalogEntry[];
16
+ }
17
+ /** Public policy integration catalog returned by the wallet provider service. */
18
+ export interface IntegrationCatalogResponse {
19
+ integrations: IntegrationCatalogEntry[];
20
+ }
package/dist/setupMessage.d.ts CHANGED
@@ -53,11 +53,14 @@ export declare class SignSetupOpts implements EoaAuthPayload {
53
53
  message: string;
54
54
  /** Select which signature algorithm to use */
55
55
  signAlg: string;
56
- constructor({ t, key_id, signAlg, message }: {
56
+ /** Stringified JSON object forwarded to policy integrations. */
57
+ policy_integration_context?: string;
58
+ constructor({ t, key_id, signAlg, message, policy_integration_context, }: {
57
59
  t: number;
58
60
  key_id: string;
59
61
  message: string;
60
62
  signAlg: string;
63
+ policy_integration_context?: string;
61
64
  });
62
65
  get eoaRequestSchema(): {
63
66
  Request: {
@@ -91,9 +94,12 @@ export declare class FinishPresignOpts implements EoaAuthPayload {
91
94
  readonly presignSessionId: string;
92
95
  /** The message to sign */
93
96
  readonly message: string;
94
- constructor({ presignSessionId, message }: {
97
+ /** Stringified JSON object forwarded to policy integrations. */
98
+ readonly policy_integration_context?: string;
99
+ constructor({ presignSessionId, message, policy_integration_context, }: {
95
100
  presignSessionId: string;
96
101
  message: string;
102
+ policy_integration_context?: string;
97
103
  });
98
104
  get eoaRequestSchema(): {
99
105
  Request: {