@tatchi-xyz/sdk 0.21.0 → 0.31.0

package/dist/esm/core/TatchiPasskey/index.js

@@ -1,40 +1,22 @@
-import { __toCommonJS } from "../../_virtual/rolldown_runtime.js";
-import { init_accountIds, toAccountId } from "../types/accountIds.js";
-import { configureIndexedDB, init_IndexedDBManager } from "../IndexedDBManager/index.js";
-import { init_errors, toError } from "../../utils/errors.js";
-import { buildConfigsFromEnv, init_defaultConfigs } from "../defaultConfigs.js";
-import { ActionPhase, ActionStatus, DeviceLinkingPhase, init_sdkSentEvents } from "../types/sdkSentEvents.js";
-import { ActionType, init_actions } from "../types/actions.js";
-import { buildSetRecoveryEmailsActions, getRecoveryEmailHashesContractCall, init_rpcCalls } from "../rpcCalls.js";
-import { DEFAULT_AUTHENTICATOR_OPTIONS } from "../types/authenticatorOptions.js";
+import { toAccountId } from "../types/accountIds.js";
+import { toError } from "../../utils/errors.js";
+import { buildConfigsFromEnv } from "../defaultConfigs.js";
+import { configureIndexedDB } from "../IndexedDBManager/index.js";
 import { MinimalNearClient } from "../NearClient.js";
+import { ActionPhase, ActionStatus, DeviceLinkingPhase } from "../types/sdkSentEvents.js";
+import { ActionType } from "../types/actions.js";
+import { DEFAULT_AUTHENTICATOR_OPTIONS } from "../types/authenticatorOptions.js";
+import { DeviceLinkingError, DeviceLinkingErrorCode } from "../types/linkDevice.js";
 import { __isWalletIframeHostMode } from "../WalletIframe/host-mode.js";
 import { WebAuthnManager } from "../WebAuthnManager/index.js";
-import { getLoginSession, getRecentLogins, init_login, loginAndCreateSession, logoutAndClearSession } from "./login.js";
+import { getLoginSession, getRecentLogins, loginAndCreateSession, logoutAndClearSession } from "./login.js";
 import { executeAction, sendTransaction, signAndSendTransactions, signTransactionsWithActions } from "./actions.js";
-import { AccountRecoveryFlow } from "./recoverAccount.js";
 import { registerPasskey, registerPasskeyInternal } from "./registration.js";
 import { chainsigAddressManager } from "../ChainsigAddressManager/index.js";
-import { DeviceLinkingError, DeviceLinkingErrorCode } from "../types/linkDevice.js";
-import { LinkDeviceFlow } from "./linkDevice.js";
-import { linkDeviceWithScannedQRData } from "./scanDevice.js";
-import { signNEP413Message } from "./signNEP413.js";
-import { signDelegateAction } from "./delegateAction.js";
-import { sendDelegateActionViaRelayer } from "./relay.js";
 import { isOffline, openOfflineExport } from "../OfflineExport/overlay.js";
-import { bytesToHex, getLocalRecoveryEmails, init_EmailRecovery, prepareRecoveryEmails } from "../EmailRecovery/index.js";
-import { emailRecovery_exports, init_emailRecovery } from "./emailRecovery.js";
+import { SyncAccountFlow } from "./syncAccount.js";
 
 //#region src/core/TatchiPasskey/index.ts
-init_login();
-init_sdkSentEvents();
-init_accountIds();
-init_IndexedDBManager();
-init_actions();
-init_errors();
-init_rpcCalls();
-init_EmailRecovery();
-init_defaultConfigs();
 let warnedAboutSameOriginWallet = false;
 /**
 * Main TatchiPasskey class that provides framework-agnostic passkey operations
@@ -48,7 +30,6 @@ var TatchiPasskey = class {
 	walletIframeInitInFlight = null;
 	walletIframePrefsUnsubscribe = null;
 	activeDeviceLinkFlow = null;
-	activeAccountRecoveryFlow = null;
 	activeEmailRecoveryFlow = null;
 	constructor(configs, nearClient) {
 		this.configs = buildConfigsFromEnv(configs);
@@ -56,10 +37,14 @@ var TatchiPasskey = class {
 		configureIndexedDB({ mode });
 		this.nearClient = nearClient || new MinimalNearClient(this.configs.nearRpcUrl);
 		this.webAuthnManager = new WebAuthnManager(this.configs, this.nearClient);
+		this.userPreferences.configureWalletIframeSignerModeWriter(this.shouldUseWalletIframe() ? async (next) => {
+			const router = await this.requireWalletIframeRouter();
+			await router.setSignerMode(next);
+		} : null);
 	}
 	/**
 	* Direct access to user preferences manager for convenience
-	* Example: passkeyManager.userPreferences.onThemeChange(cb)
+	* Example: tatchi.userPreferences.onThemeChange(cb)
 	*/
 	get userPreferences() {
 		return this.webAuthnManager.getUserPreferences();
@@ -97,6 +82,7 @@ var TatchiPasskey = class {
 					connectTimeoutMs: 2e4,
 					requestTimeoutMs: 6e4,
 					theme: this.configs.walletTheme,
+					signerMode: this.configs.signerMode,
 					nearRpcUrl: this.configs.nearRpcUrl,
 					nearNetwork: this.configs.nearNetwork,
 					contractId: this.configs.contractId,
@@ -130,6 +116,11 @@ var TatchiPasskey = class {
 				nearAccountId: nearAccountId ? toAccountId(nearAccountId) : null,
 				confirmationConfig: cfg
 			});
+			const signerMode = await this.iframeRouter.getSignerMode?.({ timeoutMs: 1e3 }).catch(() => null);
+			if (signerMode) this.userPreferences.applyWalletHostSignerMode?.({
+				nearAccountId: nearAccountId ? toAccountId(nearAccountId) : null,
+				signerMode
+			});
 		}
 		await this.getLoginSession(nearAccountId);
 	}
@@ -146,6 +137,10 @@ var TatchiPasskey = class {
 				nearAccountId,
 				confirmationConfig: payload?.confirmationConfig
 			});
+			if (payload?.signerMode) this.userPreferences.applyWalletHostSignerMode?.({
+				nearAccountId,
+				signerMode: payload.signerMode
+			});
 		});
 		this.walletIframePrefsUnsubscribe = unsubscribe ?? null;
 	}
@@ -221,6 +216,7 @@ var TatchiPasskey = class {
 				confirmationConfig,
 				options: {
 					onEvent: options?.onEvent,
+					...options?.signerMode ? { signerMode: options.signerMode } : {},
 					...options?.confirmerText ? { confirmerText: options.confirmerText } : {}
 				}
 			});
@@ -252,6 +248,7 @@ var TatchiPasskey = class {
 				confirmationConfig,
 				options: {
 					onEvent: options?.onEvent,
+					...options?.signerMode ? { signerMode: options.signerMode } : {},
 					...options?.confirmerText ? { confirmerText: options.confirmerText } : {}
 				}
 			});
@@ -271,6 +268,41 @@ var TatchiPasskey = class {
 		return registerPasskeyInternal(this.getContext(), toAccountId(nearAccountId), options, this.configs.authenticatorOptions || DEFAULT_AUTHENTICATOR_OPTIONS, confirmationConfigOverride);
 	}
 	/**
+	* Post-registration threshold enrollment.
+	* Runs `/threshold-ed25519/keygen` authorization and stores `threshold_ed25519_2p_v1`
+	* key material locally. Intended to be called after the passkey is registered on-chain.
+	*/
+	async enrollThresholdEd25519Key(nearAccountId, options) {
+		if (this.shouldUseWalletIframe()) {
+			const router = await this.requireWalletIframeRouter(nearAccountId);
+			return await router.enrollThresholdEd25519Key({
+				nearAccountId,
+				options: options || {}
+			});
+		}
+		return await this.webAuthnManager.enrollThresholdEd25519KeyPostRegistration({
+			nearAccountId: toAccountId(nearAccountId),
+			deviceNumber: options?.deviceNumber
+		});
+	}
+	/**
+	* Threshold key rotation helper:
+	* keygen → AddKey(new) → DeleteKey(old).
+	*/
+	async rotateThresholdEd25519Key(nearAccountId, options) {
+		if (this.shouldUseWalletIframe()) {
+			const router = await this.requireWalletIframeRouter(nearAccountId);
+			return await router.rotateThresholdEd25519Key({
+				nearAccountId,
+				options: options || {}
+			});
+		}
+		return await this.webAuthnManager.rotateThresholdEd25519KeyPostRegistration({
+			nearAccountId: toAccountId(nearAccountId),
+			deviceNumber: options?.deviceNumber
+		});
+	}
+	/**
 	* Login and ensure a warm signing session exists.
 	* - Unlocks VRF keypair (Shamir auto-unlock when possible; else WebAuthn prompt)
 	* - Mints a warm signing session (policy from configs, override via options.signingSession)
@@ -283,6 +315,7 @@ var TatchiPasskey = class {
 				nearAccountId,
 				options: {
 					onEvent: options?.onEvent,
+					deviceNumber: options?.deviceNumber,
 					session: options?.session,
 					signingSession: options?.signingSession
 				}
@@ -383,12 +416,18 @@ var TatchiPasskey = class {
 		}
 		this.webAuthnManager.getUserPreferences().setUserTheme(theme);
 	}
+	setSignerMode(signerMode) {
+		this.webAuthnManager.getUserPreferences().setSignerMode(signerMode);
+	}
 	/**
 	* Get the current confirmation configuration
 	*/
 	getConfirmationConfig() {
 		return this.webAuthnManager.getUserPreferences().getConfirmationConfig();
 	}
+	getSignerMode() {
+		return this.webAuthnManager.getUserPreferences().getSignerMode();
+	}
 	/**
 	* Prefetch latest block height/hash (and nonce if context missing) to reduce
 	* perceived latency when the user initiates a signing flow.
@@ -430,14 +469,14 @@ var TatchiPasskey = class {
 	* @example
 	* ```typescript
 	* // Basic transfer
-	* const result = await passkeyManager.executeAction('alice.near', {
+	* const result = await tatchi.executeAction('alice.near', {
 	*   type: ActionType.Transfer,
 	*   receiverId: 'bob.near',
 	*   amount: '1000000000000000000000000' // 1 NEAR
 	* });
 	*
 	* // Function call with gas and deposit (already available in ActionArgs)
-	* const result = await passkeyManager.executeAction('alice.near', {
+	* const result = await tatchi.executeAction('alice.near', {
 	*   type: ActionType.FunctionCall,
 	*   receiverId: 'contract.near',
 	*   methodName: 'set_value',
@@ -447,7 +486,7 @@ var TatchiPasskey = class {
 	* });
 	*
 	* // Batched transaction
-	* const result = await passkeyManager.executeAction('alice.near', [
+	* const result = await tatchi.executeAction('alice.near', [
 	*   {
 	*     type: ActionType.Transfer,
 	*     receiverId: 'bob.near',
@@ -467,17 +506,11 @@ var TatchiPasskey = class {
 	async executeAction(args) {
 		if (this.shouldUseWalletIframe()) try {
 			const router = await this.requireWalletIframeRouter(args.nearAccountId);
-			const confirmerText = args.options?.confirmerText;
 			const res = await router.executeAction({
 				nearAccountId: args.nearAccountId,
 				receiverId: args.receiverId,
 				actionArgs: args.actionArgs,
-				options: {
-					onEvent: args.options?.onEvent,
-					waitUntil: args.options?.waitUntil,
-					confirmationConfig: args.options?.confirmationConfig,
-					confirmerText
-				}
+				options: args.options
 			});
 			await args.options?.afterCall?.(true, res);
 			return res;
@@ -512,7 +545,7 @@ var TatchiPasskey = class {
 	* @example
 	* ```typescript
 	* // Sign and send multiple transactions in a batch
-	* const results = await passkeyManager.signAndSendTransactions('alice.near', {
+	* const results = await tatchi.signAndSendTransactions('alice.near', {
 	*   transactions: [
 	*     {
 	*       receiverId: 'bob.near',
@@ -539,25 +572,23 @@ var TatchiPasskey = class {
 	* });
 	* ```
 	*/
-	async signAndSendTransactions({ nearAccountId, transactions, options = {} }) {
+	async signAndSendTransactions({ nearAccountId, transactions, options }) {
 		if (this.shouldUseWalletIframe()) try {
 			const router = await this.requireWalletIframeRouter(nearAccountId);
-			const confirmerText = options?.confirmerText;
+			const routerOptions = {
+				...options,
+				executionWait: options?.executionWait ?? {
+					mode: "sequential",
+					waitUntil: options?.waitUntil
+				}
+			};
 			const res = await router.signAndSendTransactions({
 				nearAccountId,
 				transactions: transactions.map((t) => ({
 					receiverId: t.receiverId,
 					actions: t.actions
 				})),
-				options: {
-					onEvent: options?.onEvent,
-					executionWait: options?.executionWait ?? {
-						mode: "sequential",
-						waitUntil: options?.waitUntil
-					},
-					confirmationConfig: options?.confirmationConfig,
-					confirmerText
-				}
+				options: routerOptions
 			});
 			const txIds = (res || []).map((r) => r?.transactionId).filter(Boolean).join(", ");
 			options?.onEvent?.({
@@ -594,7 +625,7 @@ var TatchiPasskey = class {
 	* Convenience helper to sign and send a single transaction with actions.
 	* Internally delegates to signAndSendTransactions() and returns the first result.
 	*/
-	async signAndSendTransaction({ nearAccountId, receiverId, actions, options = {} }) {
+	async signAndSendTransaction({ nearAccountId, receiverId, actions, options }) {
 		const results = await this.signAndSendTransactions({
 			nearAccountId,
 			transactions: [{
@@ -622,7 +653,7 @@ var TatchiPasskey = class {
 	* @example
 	* ```typescript
 	* // Sign a single transaction
-	* const signedTransactions = await passkeyManager.signTransactionsWithActions('alice.near', {
+	* const signedTransactions = await tatchi.signTransactionsWithActions('alice.near', {
 	*   transactions: [{
 	*     receiverId: 'bob.near',
 	*     actions: [{
@@ -634,7 +665,7 @@ var TatchiPasskey = class {
 	* });
 	*
 	* // Sign multiple transactions in a batch
-	* const signedTransactions = await passkeyManager.signTransactionsWithActions('alice.near', {
+	* const signedTransactions = await tatchi.signTransactionsWithActions('alice.near', {
 	*   transactions: [
 	*     {
 	*       receiverId: 'bob.near',
@@ -664,14 +695,14 @@ var TatchiPasskey = class {
 				receiverId: t.receiverId,
 				actions: t.actions
 			}));
-			const confirmerText = options?.confirmerText;
 			const result = await router.signTransactionsWithActions({
 				nearAccountId,
 				transactions: txs,
 				options: {
-					onEvent: options?.onEvent,
-					confirmationConfig: options?.confirmationConfig,
-					confirmerText
+					signerMode: options.signerMode,
+					onEvent: options.onEvent,
+					confirmationConfig: options.confirmationConfig,
+					confirmerText: options.confirmerText
 				}
 			});
 			const arr = Array.isArray(result) ? result : [];
@@ -701,7 +732,7 @@ var TatchiPasskey = class {
 	* @example
 	* ```typescript
 	* // Sign a transaction first
-	* const signedTransactions = await passkeyManager.signTransactionsWithActions('alice.near', {
+	* const signedTransactions = await tatchi.signTransactionsWithActions('alice.near', {
 	*   transactions: [{
 	*     receiverId: 'bob.near',
 	*     actions: [{
@@ -712,7 +743,7 @@ var TatchiPasskey = class {
 	* });
 	*
 	* // Then broadcast it
-	* const result = await passkeyManager.sendTransaction(
+	* const result = await tatchi.sendTransaction(
 	*   signedTransactions[0].signedTransaction,
 	*   TxExecutionStatus.FINAL
 	* );
@@ -763,9 +794,10 @@ var TatchiPasskey = class {
 				nearAccountId,
 				delegate,
 				options: {
-					onEvent: options?.onEvent,
-					confirmationConfig: options?.confirmationConfig,
-					confirmerText: options?.confirmerText
+					signerMode: options.signerMode,
+					onEvent: options.onEvent,
+					confirmationConfig: options.confirmationConfig,
+					confirmerText: options.confirmerText
 				}
 			});
 			await options?.afterCall?.(true, result);
@@ -776,6 +808,7 @@ var TatchiPasskey = class {
 			await options?.afterCall?.(false);
 			throw e;
 		}
+		const { signDelegateAction } = await import("./delegateAction.js");
 		return signDelegateAction({
 			context: this.getContext(),
 			nearAccountId: toAccountId(nearAccountId),
@@ -791,6 +824,7 @@ var TatchiPasskey = class {
 		const base = args.relayerUrl.replace(/\/+$/, "");
 		const route = (this.configs.relayer?.delegateActionRoute || "/signed-delegate").replace(/^\/?/, "/");
 		const endpoint = `${base}${route}`;
+		const { sendDelegateActionViaRelayer } = await import("./relay.js");
 		return sendDelegateActionViaRelayer({
 			url: endpoint,
 			payload: {
@@ -808,6 +842,7 @@ var TatchiPasskey = class {
 	async signAndSendDelegateAction(args) {
 		const { nearAccountId, delegate, relayerUrl, signal, options } = args;
 		const signOptions = options ? {
+			signerMode: options.signerMode,
 			onEvent: options.onEvent,
 			onError: options.onError,
 			waitUntil: options.waitUntil,
@@ -875,7 +910,7 @@ var TatchiPasskey = class {
 	*
 	* @example
 	* ```typescript
-	* const result = await passkeyManager.signNEP413Message('alice.near', {
+	* const result = await tatchi.signNEP413Message('alice.near', {
 	*   message: 'Hello World',
 	*   recipient: 'app.example.com',
 	*   state: 'optional-state'
@@ -885,17 +920,16 @@ var TatchiPasskey = class {
 	async signNEP413Message(args) {
 		if (this.shouldUseWalletIframe()) try {
 			const router = await this.requireWalletIframeRouter(args.nearAccountId);
-			const confirmerText = args.options?.confirmerText;
-			const confirmationConfig = args.options?.confirmationConfig;
 			const result = await router.signNep413Message({
 				nearAccountId: args.nearAccountId,
 				message: args.params.message,
 				recipient: args.params.recipient,
 				state: args.params.state,
 				options: {
-					onEvent: args.options?.onEvent,
-					confirmerText,
-					confirmationConfig
+					signerMode: args.options.signerMode,
+					onEvent: args.options.onEvent,
+					confirmerText: args.options.confirmerText,
+					confirmationConfig: args.options.confirmationConfig
 				}
 			});
 			await args.options?.afterCall?.(true, result);
@@ -906,6 +940,7 @@ var TatchiPasskey = class {
 			await args.options?.afterCall?.(false);
 			throw e;
 		}
+		const { signNEP413Message } = await import("./signNEP413.js");
 		const res = await signNEP413Message({
 			context: this.getContext(),
 			nearAccountId: toAccountId(args.nearAccountId),
@@ -1014,6 +1049,8 @@ var TatchiPasskey = class {
 			return await router.getRecoveryEmails(nearAccountId);
 		}
 		const accountId = toAccountId(nearAccountId);
+		const { getRecoveryEmailHashesContractCall } = await import("../rpcCalls.js");
+		const { getLocalRecoveryEmails, bytesToHex } = await import("../EmailRecovery/index.js");
 		const rawHashes = await getRecoveryEmailHashesContractCall(this.nearClient, accountId);
 		if (!rawHashes.length) return [];
 		let local = [];
@@ -1060,6 +1097,8 @@ var TatchiPasskey = class {
 			throw e;
 		}
 		const accountId = toAccountId(nearAccountId);
+		const { prepareRecoveryEmails } = await import("../EmailRecovery/index.js");
+		const { buildSetRecoveryEmailsActions } = await import("../rpcCalls.js");
 		const { hashes: recoveryEmailHashes } = await prepareRecoveryEmails(accountId, recoveryEmails);
 		const actions = await buildSetRecoveryEmailsActions(this.nearClient, accountId, recoveryEmailHashes, this.configs.emailRecoveryContracts);
 		return this.executeAction({
@@ -1070,14 +1109,14 @@ var TatchiPasskey = class {
 		});
 	}
 	/**
-	* Creates an AccountRecoveryFlow instance, for step-by-step account recovery UX
+	* Sync account state from on-chain data using an existing passkey.
 	*/
-	async recoverAccountFlow(args) {
+	async syncAccount(args) {
 		const accountIdInput = args?.accountId || "";
 		const options = args?.options;
 		if (this.shouldUseWalletIframe()) try {
 			const router = await this.requireWalletIframeRouter();
-			const res = await router.recoverAccountFlow({
+			const res = await router.syncAccount({
 				accountId: accountIdInput,
 				onEvent: options?.onEvent
 			});
@@ -1090,10 +1129,11 @@ var TatchiPasskey = class {
 			throw e;
 		}
 		try {
-			const flow = new AccountRecoveryFlow(this.getContext(), options);
+			const { SyncAccountFlow: SyncAccountFlow$1 } = await import("./syncAccount.js");
+			const flow = new SyncAccountFlow$1(this.getContext(), options);
 			const discovered = await flow.discover(accountIdInput || "");
 			if (!Array.isArray(discovered) || discovered.length === 0) {
-				const err = /* @__PURE__ */ new Error("No recoverable accounts found");
+				const err = /* @__PURE__ */ new Error("No syncable accounts found");
 				await options?.onError?.(err);
 				await options?.afterCall?.(false);
 				return {
@@ -1105,7 +1145,7 @@ var TatchiPasskey = class {
 				};
 			}
 			const selected = discovered[0];
-			const result = await flow.recover({
+			const result = await flow.sync({
 				credentialId: selected.credentialId,
 				accountId: selected.accountId
 			});
@@ -1118,17 +1158,16 @@ var TatchiPasskey = class {
 			throw e;
 		}
 	}
-	getEmailRecoveryFlow(options) {
-		const { EmailRecoveryFlow } = (init_emailRecovery(), __toCommonJS(emailRecovery_exports));
+	async ensureEmailRecoveryFlow(options) {
+		const { EmailRecoveryFlow } = await import("./emailRecovery.js");
 		if (!this.activeEmailRecoveryFlow) this.activeEmailRecoveryFlow = new EmailRecoveryFlow(this.getContext(), options);
 		else if (options) this.activeEmailRecoveryFlow.setOptions(options);
 		return this.activeEmailRecoveryFlow;
 	}
 	async startEmailRecovery(args) {
-		const { accountId, recoveryEmail, options } = args;
+		const { accountId, options } = args;
 		if (this.shouldUseWalletIframe()) try {
 			const router = await this.requireWalletIframeRouter();
-			const normalizedRecoveryEmail = typeof recoveryEmail === "string" && recoveryEmail.trim().length > 0 ? recoveryEmail.trim() : void 0;
 			const confirmerText = options?.confirmerText;
 			const confirmationConfig = options?.confirmationConfig;
 			const safeOptions = {
@@ -1137,7 +1176,6 @@ var TatchiPasskey = class {
 			};
 			const res = await router.startEmailRecovery({
 				accountId,
-				recoveryEmail: normalizedRecoveryEmail,
 				onEvent: options?.onEvent,
 				options: Object.keys(safeOptions).length > 0 ? safeOptions : void 0
 			});
@@ -1149,11 +1187,8 @@ var TatchiPasskey = class {
 			await options?.afterCall?.(false);
 			throw e;
 		}
-		const flow = this.getEmailRecoveryFlow(options);
-		return await flow.start({
-			accountId,
-			recoveryEmail
-		});
+		const flow = await this.ensureEmailRecoveryFlow(options);
+		return await flow.start({ accountId });
 	}
 	async finalizeEmailRecovery(args) {
 		const { accountId, nearPublicKey, options } = args;
@@ -1172,7 +1207,7 @@ var TatchiPasskey = class {
 			await options?.afterCall?.(false);
 			throw e;
 		}
-		const flow = this.getEmailRecoveryFlow(options);
+		const flow = await this.ensureEmailRecoveryFlow(options);
 		await flow.finalize({
 			accountId,
 			nearPublicKey
@@ -1218,6 +1253,7 @@ var TatchiPasskey = class {
 			});
 		}
 		this.activeDeviceLinkFlow?.cancel();
+		const { LinkDeviceFlow } = await import("./linkDevice.js");
 		const flow = new LinkDeviceFlow(this.getContext(), {
 			cameraId: args?.cameraId,
 			options: args?.options
@@ -1270,6 +1306,7 @@ var TatchiPasskey = class {
 			});
 			return res;
 		}
+		const { linkDeviceWithScannedQRData } = await import("./scanDevice.js");
 		return linkDeviceWithScannedQRData(this.getContext(), qrData, options);
 	}
 	/**