@zerodev/wallet-core 0.0.1-alpha.8 → 0.0.1

package/dist/_esm/adapters/viem.js

@@ -1,30 +1,20 @@
-import { hashMessage, parseSignature, parseTransaction, serializeTransaction, serializeTypedData, zeroAddress, } from 'viem';
+import { bytesToHex, concat, getTypesForEIP712Domain, hashTypedData, numberToHex, parseSignature, serializeTransaction, serializeTypedData, toRlp, zeroAddress, } from 'viem';
 import { toAccount } from 'viem/accounts';
 import { hashAuthorization } from 'viem/utils';
 export async function toViemAccount(params) {
-    const { client, organizationId, projectId, token } = params;
+    const { client, organizationId, projectId, getToken } = params;
     let address = zeroAddress;
     try {
         const walletResponse = await client.getUserWallet({
             organizationId,
             projectId,
-            token,
+            token: await getToken(),
         });
         address = walletResponse.walletAddresses[0];
     }
     catch {
         address = zeroAddress;
     }
-    const signRawPayloadInternal = async (payload, encoding = 'PAYLOAD_ENCODING_HEXADECIMAL') => {
-        return await client.signRawPayload({
-            organizationId,
-            projectId,
-            token,
-            address,
-            payload,
-            encoding,
-        });
-    };
     // Modified from: https://github.com/tkhq/sdk/blob/4e439bf2973ea13b51d981d7c24a4841d4e5fd5f/packages/viem/src/index.ts#L419-L461
     const signTransactionInternal = async (transaction, serializer) => {
         // Note: for Type 3 transactions, we are specifically handling parsing for payloads containing only the transaction payload body, without any wrappers around blobs, commitments, or proofs.
@@ -37,27 +27,38 @@ export async function toViemAccount(params) {
         const signature = await client.signTransaction({
             organizationId,
             projectId,
-            token,
+            token: await getToken(),
             address,
             unsignedTransaction: nonHexPrefixedSerializedTx,
         });
-        if (transaction.type === 'eip4844') {
-            // Grab components of the signature
-            const { r, s, v } = parseTransaction(signature);
-            // Recombine with the original transaction
-            return serializeTransaction(transaction, {
-                r: r,
-                s: s,
-                v: v,
-            });
-        }
-        return signature;
+        const { r, s, v, yParity } = parseSignature(signature);
+        return serializeTransaction(transaction, { r, s, v, yParity });
     };
     return toAccount({
         address,
         async signMessage({ message }) {
-            const hashedMessage = hashMessage(message);
-            return signRawPayloadInternal(hashedMessage);
+            if (typeof message === 'string') {
+                return client.signMessage({
+                    organizationId,
+                    projectId,
+                    token: await getToken(),
+                    address,
+                    message,
+                    encoding: 'utf8',
+                });
+            }
+            // Raw message (Hex or ByteArray)
+            const raw = typeof message.raw === 'string'
+                ? message.raw.replace(/^0x/, '')
+                : bytesToHex(message.raw).slice(2);
+            return client.signMessage({
+                organizationId,
+                projectId,
+                token: await getToken(),
+                address,
+                message: raw,
+                encoding: 'hex',
+            });
         },
         signTransaction: async (transaction, options) => {
             const serializer = options?.serializer ??
@@ -65,8 +66,24 @@ export async function toViemAccount(params) {
             return signTransactionInternal(transaction, serializer);
         },
         signTypedData: async (typedData) => {
-            const serializedTypedData = serializeTypedData(typedData);
-            return signRawPayloadInternal(serializedTypedData, 'PAYLOAD_ENCODING_EIP712');
+            const serializedTypedData = serializeTypedData({
+                ...typedData,
+                types: {
+                    ...typedData.types,
+                    EIP712Domain: getTypesForEIP712Domain({
+                        domain: typedData.domain,
+                    }),
+                },
+            });
+            return client.signTypedDataV4({
+                organizationId,
+                projectId,
+                token: await getToken(),
+                address,
+                unsignedTypedDataV4: serializedTypedData,
+                encoding: 'utf8',
+                typedDataHash: hashTypedData(typedData).slice(2),
+            });
         },
         async signAuthorization(parameters) {
             const { chainId, nonce } = parameters;
@@ -79,7 +96,23 @@ export async function toViemAccount(params) {
                 chainId,
                 nonce,
             });
-            const signature = await signRawPayloadInternal(hashedAuthorization);
+            // Serialize EIP-7702 authorization: 0x05 || RLP([chainId, address, nonce])
+            const unsignedTransaction = concat([
+                '0x05',
+                toRlp([
+                    chainId ? numberToHex(chainId) : '0x',
+                    authAddress,
+                    nonce ? numberToHex(nonce) : '0x',
+                ]),
+            ]).slice(2);
+            const signature = await client.sign7702Authorization({
+                organizationId,
+                projectId,
+                token: await getToken(),
+                address,
+                unsignedTransaction,
+                hashedAuthorization: hashedAuthorization.slice(2),
+            });
             const parsedSignature = parseSignature(signature);
             return {
                 address: authAddress,

package/dist/_esm/adapters/viem.js.map

@@ -1 +1 @@
-{"version":3,"file":"viem.js","sourceRoot":"","sources":["../../../src/adapters/viem.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,WAAW,EAEX,cAAc,EACd,gBAAgB,EAGhB,oBAAoB,EACpB,kBAAkB,EAElB,WAAW,GACZ,MAAM,MAAM,CAAA;AAKb,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAW9C,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAA2B;IAE3B,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;IAE3D,IAAI,OAAO,GAAQ,WAAW,CAAA;IAE9B,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;YAChD,cAAc;YACd,SAAS;YACT,KAAK;SACN,CAAC,CAAA;QACF,OAAO,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,WAAW,CAAA;IACvB,CAAC;IACD,MAAM,sBAAsB,GAAG,KAAK,EAClC,OAAe,EACf,WAEmB,8BAA8B,EACjD,EAAE;QACF,OAAO,MAAM,MAAM,CAAC,cAAc,CAAC;YACjC,cAAc;YACd,SAAS;YACT,KAAK;YACL,OAAO;YACP,OAAO;YACP,QAAQ;SACT,CAAC,CAAA;IACJ,CAAC,CAAA;IAED,gIAAgI;IAChI,MAAM,uBAAuB,GAAG,KAAK,EAGnC,WAAqC,EACrC,UAA4D,EAC9C,EAAE;QAChB,4LAA4L;QAC5L,qIAAqI;QACrI,MAAM,mBAAmB,GACvB,WAAW,CAAC,IAAI,KAAK,SAAS;YAC5B,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE;YACrC,CAAC,CAAC,WAAW,CAAA;QAEjB,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAAC,CAAA;QAC1D,MAAM,0BAA0B,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAClE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;YAC7C,cAAc;YACd,SAAS;YACT,KAAK;YACL,OAAO;YACP,mBAAmB,EAAE,0BAA0B;SAChD,CAAC,CAAA;QAEF,IAAI,WAAW,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;YACnC,mCAAmC;YACnC,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAA;YAE/C,0CAA0C;YAC1C,OAAO,oBAAoB,CAAC,WAAW,EAAE;gBACvC,CAAC,EAAE,CAAE;gBACL,CAAC,EAAE,CAAE;gBACL,CAAC,EAAE,CAAE;aACN,CAAC,CAAA;QACJ,CAAC;QAED,OAAO,SAAS,CAAA;IAClB,CAAC,CAAA;IAED,OAAO,SAAS,CAAC;QACf,OAAO;QAEP,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,EAAgC;YACzD,MAAM,aAAa,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;YAC1C,OAAO,sBAAsB,CAAC,aAAa,CAAC,CAAA;QAC9C,CAAC;QAED,eAAe,EAAE,KAAK,EAGpB,WAAqC,EACrC,OAIC,EACD,EAAE;YACF,MAAM,UAAU,GACd,OAAO,EAAE,UAAU;gBAClB,oBAAyE,CAAA;YAC5E,OAAO,uBAAuB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;QACzD,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACjC,MAAM,mBAAmB,GAAG,kBAAkB,CAAC,SAAS,CAAC,CAAA;YACzD,OAAO,sBAAsB,CAC3B,mBAAmB,EACnB,yBAAyB,CAC1B,CAAA;QACH,CAAC;QAED,KAAK,CAAC,iBAAiB,CACrB,UAA2D;YAE3D,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAA;YACrC,MAAM,WAAW,GAAG,UAAU,CAAC,eAAe,IAAI,UAAU,CAAC,OAAO,CAAA;YAEpE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;YACvE,CAAC;YAED,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;gBAC5C,OAAO,EAAE,WAAW;gBACpB,OAAO;gBACP,KAAK;aACN,CAAC,CAAA;YAEF,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,mBAAmB,CAAC,CAAA;YAEnE,MAAM,eAAe,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;YAEjD,OAAO;gBACL,OAAO,EAAE,WAAW;gBACpB,OAAO;gBACP,KAAK;gBACL,GAAG,eAAe;gBAClB,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACnB,CAAA;QAClC,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"viem.js","sourceRoot":"","sources":["../../../src/adapters/viem.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EACV,MAAM,EACN,uBAAuB,EAEvB,aAAa,EAEb,WAAW,EACX,cAAc,EAGd,oBAAoB,EACpB,kBAAkB,EAElB,KAAK,EACL,WAAW,GACZ,MAAM,MAAM,CAAA;AAKb,OAAO,EAAE,SAAS,EAAE,MAAM,eAAe,CAAA;AACzC,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAU9C,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAA2B;IAE3B,MAAM,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAA;IAE9D,IAAI,OAAO,GAAQ,WAAW,CAAA;IAE9B,IAAI,CAAC;QACH,MAAM,cAAc,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC;YAChD,cAAc;YACd,SAAS;YACT,KAAK,EAAE,MAAM,QAAQ,EAAE;SACxB,CAAC,CAAA;QACF,OAAO,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IAC7C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,WAAW,CAAA;IACvB,CAAC;IAED,gIAAgI;IAChI,MAAM,uBAAuB,GAAG,KAAK,EAGnC,WAAqC,EACrC,UAA4D,EAC9C,EAAE;QAChB,4LAA4L;QAC5L,qIAAqI;QACrI,MAAM,mBAAmB,GACvB,WAAW,CAAC,IAAI,KAAK,SAAS;YAC5B,CAAC,CAAC,EAAE,GAAG,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE;YACrC,CAAC,CAAC,WAAW,CAAA;QAEjB,MAAM,YAAY,GAAG,MAAM,UAAU,CAAC,mBAAmB,CAAC,CAAA;QAC1D,MAAM,0BAA0B,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;QAClE,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;YAC7C,cAAc;YACd,SAAS;YACT,KAAK,EAAE,MAAM,QAAQ,EAAE;YACvB,OAAO;YACP,mBAAmB,EAAE,0BAA0B;SAChD,CAAC,CAAA;QAEF,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;QACtD,OAAO,oBAAoB,CAAC,WAAW,EAAE,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;IAChE,CAAC,CAAA;IAED,OAAO,SAAS,CAAC;QACf,OAAO;QAEP,KAAK,CAAC,WAAW,CAAC,EAAE,OAAO,EAAgC;YACzD,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gBAChC,OAAO,MAAM,CAAC,WAAW,CAAC;oBACxB,cAAc;oBACd,SAAS;oBACT,KAAK,EAAE,MAAM,QAAQ,EAAE;oBACvB,OAAO;oBACP,OAAO;oBACP,QAAQ,EAAE,MAAM;iBACjB,CAAC,CAAA;YACJ,CAAC;YACD,iCAAiC;YACjC,MAAM,GAAG,GACP,OAAO,OAAO,CAAC,GAAG,KAAK,QAAQ;gBAC7B,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;gBAChC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YACtC,OAAO,MAAM,CAAC,WAAW,CAAC;gBACxB,cAAc;gBACd,SAAS;gBACT,KAAK,EAAE,MAAM,QAAQ,EAAE;gBACvB,OAAO;gBACP,OAAO,EAAE,GAAG;gBACZ,QAAQ,EAAE,KAAK;aAChB,CAAC,CAAA;QACJ,CAAC;QAED,eAAe,EAAE,KAAK,EAGpB,WAAqC,EACrC,OAIC,EACD,EAAE;YACF,MAAM,UAAU,GACd,OAAO,EAAE,UAAU;gBAClB,oBAAyE,CAAA;YAC5E,OAAO,uBAAuB,CAAC,WAAW,EAAE,UAAU,CAAC,CAAA;QACzD,CAAC;QACD,aAAa,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE;YACjC,MAAM,mBAAmB,GAAG,kBAAkB,CAAC;gBAC7C,GAAG,SAAS;gBACZ,KAAK,EAAE;oBACL,GAAG,SAAS,CAAC,KAAK;oBAClB,YAAY,EAAE,uBAAuB,CAAC;wBACpC,MAAM,EAAE,SAAS,CAAC,MAEJ;qBACf,CAAC;iBACH;aAC0C,CAAC,CAAA;YAC9C,OAAO,MAAM,CAAC,eAAe,CAAC;gBAC5B,cAAc;gBACd,SAAS;gBACT,KAAK,EAAE,MAAM,QAAQ,EAAE;gBACvB,OAAO;gBACP,mBAAmB,EAAE,mBAAmB;gBACxC,QAAQ,EAAE,MAAM;gBAChB,aAAa,EAAE,aAAa,CAC1B,SAAgD,CACjD,CAAC,KAAK,CAAC,CAAC,CAAC;aACX,CAAC,CAAA;QACJ,CAAC;QAED,KAAK,CAAC,iBAAiB,CACrB,UAA2D;YAE3D,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,UAAU,CAAA;YACrC,MAAM,WAAW,GAAG,UAAU,CAAC,eAAe,IAAI,UAAU,CAAC,OAAO,CAAA;YAEpE,IAAI,CAAC,WAAW,EAAE,CAAC;gBACjB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAA;YACvE,CAAC;YAED,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;gBAC5C,OAAO,EAAE,WAAW;gBACpB,OAAO;gBACP,KAAK;aACN,CAAC,CAAA;YAEF,2EAA2E;YAC3E,MAAM,mBAAmB,GAAG,MAAM,CAAC;gBACjC,MAAM;gBACN,KAAK,CAAC;oBACJ,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI;oBACrC,WAAW;oBACX,KAAK,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI;iBAClC,CAAC;aACH,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;YAEX,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC;gBACnD,cAAc;gBACd,SAAS;gBACT,KAAK,EAAE,MAAM,QAAQ,EAAE;gBACvB,OAAO;gBACP,mBAAmB;gBACnB,mBAAmB,EAAE,mBAAmB,CAAC,KAAK,CAAC,CAAC,CAAC;aAClD,CAAC,CAAA;YAEF,MAAM,eAAe,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;YAEjD,OAAO;gBACL,OAAO,EAAE,WAAW;gBACpB,OAAO;gBACP,KAAK;gBACL,GAAG,eAAe;gBAClB,OAAO,EAAE,eAAe,CAAC,CAAC,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;aACnB,CAAA;QAClC,CAAC;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/client/authProxy.js

@@ -28,13 +28,18 @@ export function createAuthProxyClient(config) {
     }
     return {
         /**
-         * Verifies an OTP code with Turnkey's Auth Proxy
+         * Verifies an OTP attempt with Turnkey's Auth Proxy.
          *
-         * Returns a verificationToken that should be passed to the backend's
-         * /auth/login/otp endpoint along with a client signature.
+         * The `encryptedOtpBundle` is HPKE-sealed `{otp_code, public_key}` JSON
+         * (see `encryptOtpAttempt`). The auth proxy forwards the ciphertext to
+         * the TLS Fetcher enclave, which decrypts it, verifies the OTP code, and
+         * returns a `verificationToken` bound to the embedded public key.
+         *
+         * Pass the returned `verificationToken` to `/auth/login/otp` along with
+         * a client signature to complete the login.
          */
         async verifyOtp(params) {
-            return request('/v1/otp_verify', params);
+            return request('/v1/otp_verify_v2', params);
         },
     };
 }

package/dist/_esm/client/authProxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"authProxy.js","sourceRoot":"","sources":["../../../src/client/authProxy.ts"],"names":[],"mappings":"AAAA,MAAM,mBAAmB,GAAG,+BAA+B,CAAA;AAuB3D;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,MAAM,EAAE,iBAAiB,EAAE,OAAO,GAAG,mBAAmB,EAAE,GAAG,MAAM,CAAA;IAEnE,KAAK,UAAU,OAAO,CACpB,IAAY,EACZ,IAAa,EACb,SAAyB,MAAM;QAE/B,MAAM,YAAY,GAAgB;YAChC,MAAM;YACN,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,wBAAwB,EAAE,iBAAiB;aAC5C;SACF,CAAA;QAED,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC1C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;QAE/D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACvC,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CACtF,CAAA;QACH,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAA;IACxB,CAAC;IAED,OAAO;QACL;;;;;WAKG;QACH,KAAK,CAAC,SAAS,CACb,MAAiC;YAEjC,OAAO,OAAO,CAA6B,gBAAgB,EAAE,MAAM,CAAC,CAAA;QACtE,CAAC;KACF,CAAA;AACH,CAAC"}
+{"version":3,"file":"authProxy.js","sourceRoot":"","sources":["../../../src/client/authProxy.ts"],"names":[],"mappings":"AAAA,MAAM,mBAAmB,GAAG,+BAA+B,CAAA;AAwB3D;;;;;;GAMG;AACH,MAAM,UAAU,qBAAqB,CAAC,MAA6B;IACjE,MAAM,EAAE,iBAAiB,EAAE,OAAO,GAAG,mBAAmB,EAAE,GAAG,MAAM,CAAA;IAEnE,KAAK,UAAU,OAAO,CACpB,IAAY,EACZ,IAAa,EACb,SAAyB,MAAM;QAE/B,MAAM,YAAY,GAAgB;YAChC,MAAM;YACN,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,wBAAwB,EAAE,iBAAiB;aAC5C;SACF,CAAA;QAED,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,YAAY,CAAC,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC1C,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,OAAO,GAAG,IAAI,EAAE,EAAE,YAAY,CAAC,CAAA;QAE/D,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;YACvC,MAAM,IAAI,KAAK,CACb,8BAA8B,QAAQ,CAAC,MAAM,IAAI,QAAQ,CAAC,UAAU,MAAM,SAAS,EAAE,CACtF,CAAA;QACH,CAAC;QAED,OAAO,QAAQ,CAAC,IAAI,EAAE,CAAA;IACxB,CAAC;IAED,OAAO;QACL;;;;;;;;;;WAUG;QACH,KAAK,CAAC,SAAS,CACb,MAAiC;YAEjC,OAAO,OAAO,CAA6B,mBAAmB,EAAE,MAAM,CAAC,CAAA;QACzE,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/_esm/client/createClient.js

@@ -6,19 +6,19 @@ let clientId = 0;
  * Use createClient() for a client with ZeroDev Wallet actions pre-loaded.
  */
 export function createBaseClient(config) {
-    const { transport, indexedDbStamper, webauthnStamper, organizationId, key = 'zeroDevWallet', name = 'ZeroDev Wallet Client', } = config;
+    const { transport, apiKeyStamper, passkeyStamper, organizationId, key = 'zeroDevWallet', name = 'ZeroDev Wallet Client', } = config;
     // Initialize the transport with stamper
     const { config: transportConfig, request, value, } = transport({
-        indexedDbStamper,
-        webauthnStamper,
+        apiKeyStamper,
+        passkeyStamper,
     });
     const transportInstance = { ...transportConfig, ...value };
     const uid = `${key}-${++clientId}`;
     const client = {
         transport: transportInstance,
         request,
-        indexedDbStamper,
-        webauthnStamper,
+        apiKeyStamper,
+        passkeyStamper,
         organizationId,
         key,
         name,

package/dist/_esm/client/createClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"createClient.js","sourceRoot":"","sources":["../../../src/client/createClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,oBAAoB,GACrB,MAAM,wBAAwB,CAAA;AAG/B,IAAI,QAAQ,GAAG,CAAC,CAAA;AAEhB;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAE9B,MAAoB;IACpB,MAAM,EACJ,SAAS,EACT,gBAAgB,EAChB,eAAe,EACf,cAAc,EACd,GAAG,GAAG,eAAe,EACrB,IAAI,GAAG,uBAAuB,GAC/B,GAAG,MAAM,CAAA;IAEV,wCAAwC;IACxC,MAAM,EACJ,MAAM,EAAE,eAAe,EACvB,OAAO,EACP,KAAK,GACN,GAAG,SAAS,CAAC;QACZ,gBAAgB;QAChB,eAAe;KAChB,CAAC,CAAA;IACF,MAAM,iBAAiB,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,KAAK,EAAE,CAAA;IAE1D,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAA;IAElC,MAAM,MAAM,GAAG;QACb,SAAS,EAAE,iBAAiB;QAC5B,OAAO;QACP,gBAAgB;QAChB,eAAe;QACf,cAAc;QACd,GAAG;QACH,IAAI;QACJ,IAAI,EAAE,eAAe;QACrB,GAAG;KACK,CAAA;IAEV,SAAS,MAAM,CAAC,IAAmB;QAEjC,OAAO,CAAC,QAAkB,EAAE,EAAE;YAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAA4B,CAAA;YAE1D,0DAA0D;YAC1D,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;gBACzB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAA;YACtB,CAAC;YAED,sCAAsC;YACtC,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAA;YAEzC,iDAAiD;YACjD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAe,CAAC,EAAE,CAAC,CAAA;QACrE,CAAC,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAQ;KAC9B,CAAqB,CAAA;AACxB,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,MAAM,EAAE,GAAG,GAAG,eAAe,EAAE,IAAI,GAAG,uBAAuB,EAAE,GAAG,MAAM,CAAA;IACxE,MAAM,MAAM,GAAG,gBAAgB,CAAC;QAC9B,GAAG,MAAM;QACT,GAAG;QACH,IAAI;KACL,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAwB,CAAA;AACnE,CAAC"}
+{"version":3,"file":"createClient.js","sourceRoot":"","sources":["../../../src/client/createClient.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,oBAAoB,GACrB,MAAM,wBAAwB,CAAA;AAG/B,IAAI,QAAQ,GAAG,CAAC,CAAA;AAEhB;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAE9B,MAAoB;IACpB,MAAM,EACJ,SAAS,EACT,aAAa,EACb,cAAc,EACd,cAAc,EACd,GAAG,GAAG,eAAe,EACrB,IAAI,GAAG,uBAAuB,GAC/B,GAAG,MAAM,CAAA;IAEV,wCAAwC;IACxC,MAAM,EACJ,MAAM,EAAE,eAAe,EACvB,OAAO,EACP,KAAK,GACN,GAAG,SAAS,CAAC;QACZ,aAAa;QACb,cAAc;KACf,CAAC,CAAA;IACF,MAAM,iBAAiB,GAAG,EAAE,GAAG,eAAe,EAAE,GAAG,KAAK,EAAE,CAAA;IAE1D,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAA;IAElC,MAAM,MAAM,GAAG;QACb,SAAS,EAAE,iBAAiB;QAC5B,OAAO;QACP,aAAa;QACb,cAAc;QACd,cAAc;QACd,GAAG;QACH,IAAI;QACJ,IAAI,EAAE,eAAe;QACrB,GAAG;KACK,CAAA;IAEV,SAAS,MAAM,CAAC,IAAmB;QAEjC,OAAO,CAAC,QAAkB,EAAE,EAAE;YAC5B,MAAM,QAAQ,GAAG,QAAQ,CAAC,IAAI,CAA4B,CAAA;YAE1D,0DAA0D;YAC1D,KAAK,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;gBACzB,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAA;YACtB,CAAC;YAED,sCAAsC;YACtC,MAAM,QAAQ,GAAG,EAAE,GAAG,IAAI,EAAE,GAAG,QAAQ,EAAE,CAAA;YAEzC,iDAAiD;YACjD,OAAO,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,QAAe,CAAC,EAAE,CAAC,CAAA;QACrE,CAAC,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,CAAQ;KAC9B,CAAqB,CAAA;AACxB,CAAC;AAID;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,MAAM,EAAE,GAAG,GAAG,eAAe,EAAE,IAAI,GAAG,uBAAuB,EAAE,GAAG,MAAM,CAAA;IACxE,MAAM,MAAM,GAAG,gBAAgB,CAAC;QAC9B,GAAG,MAAM;QACT,GAAG;QACH,IAAI;KACL,CAAC,CAAA;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,oBAAoB,CAAwB,CAAA;AACnE,CAAC"}

package/dist/_esm/client/decorators/client.js

@@ -1,6 +1,5 @@
 import { loginWithStamp, } from '../../actions/auth/loginWithStamp.js';
-import { authenticateWithEmail, authenticateWithOAuth, getUserEmail, getUserWallet, getWhoami, loginWithOTP, registerWithOTP, registerWithPasskey, signRawPayload, } from '../../actions/index.js';
-import { signTransaction, } from '../../actions/wallet/signTransaction.js';
+import { authenticateWithEmail, authenticateWithOAuth, getAuthenticators, getAuthProxyConfigId, getOAuthLoginUrl, getParentOrgId, getUserWallet, getWhoami, loginWithOTP, registerWithOTP, registerWithPasskey, sign7702Authorization, signMessage, signTransaction, signTypedDataV4, signUserOperation, } from '../../actions/index.js';
 /**
  * Decorator function that adds ZeroDev Wallet client actions to a client
  *
@@ -29,15 +28,21 @@ export function zeroDevWalletActions(client) {
         authenticateWithEmail: (params) => authenticateWithEmail(client, params),
         authenticateWithOAuth: (params) => authenticateWithOAuth(client, params),
         getWhoami: (params) => getWhoami(client, params),
-        getUserEmail: (params) => getUserEmail(client, params),
+        getAuthenticators: (params) => getAuthenticators(client, params),
         // Wallet actions
         getUserWallet: (params) => getUserWallet(client, params),
-        signRawPayload: (params) => signRawPayload(client, params),
+        signMessage: (params) => signMessage(client, params),
         signTransaction: (params) => signTransaction(client, params),
+        signTypedDataV4: (params) => signTypedDataV4(client, params),
+        signUserOperation: (params) => signUserOperation(client, params),
+        sign7702Authorization: (params) => sign7702Authorization(client, params),
         registerWithPasskey: (params) => registerWithPasskey(client, params),
         loginWithStamp: (params) => loginWithStamp(client, params),
         registerWithOTP: (params) => registerWithOTP(client, params),
         loginWithOTP: (params) => loginWithOTP(client, params),
+        getAuthProxyConfigId: () => getAuthProxyConfigId(client),
+        getParentOrgId: () => getParentOrgId(client),
+        getOAuthLoginUrl: (params) => getOAuthLoginUrl(client, params),
     };
 }
 //# sourceMappingURL=client.js.map

package/dist/_esm/client/decorators/client.js.map

@@ -1 +1 @@
-{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../../src/client/decorators/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,cAAc,GACf,MAAM,sCAAsC,CAAA;AAC7C,OAAO,EAKL,qBAAqB,EACrB,qBAAqB,EAOrB,YAAY,EACZ,aAAa,EACb,SAAS,EAGT,YAAY,EAKZ,eAAe,EACf,mBAAmB,EAGnB,cAAc,GACf,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAGL,eAAe,GAChB,MAAM,yCAAyC,CAAA;AAqFhD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO;QACL,eAAe;QACf,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC;QACxE,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC;QACxE,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;QAChD,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;QAEtD,iBAAiB;QACjB,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC;QACxD,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC;QAC1D,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC;QAC5D,mBAAmB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC;QACpE,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC;QAC1D,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC;QAC5D,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;KACvD,CAAA;AACH,CAAC"}
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../../../../src/client/decorators/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,cAAc,GACf,MAAM,sCAAsC,CAAA;AAC7C,OAAO,EAKL,qBAAqB,EACrB,qBAAqB,EAWrB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,aAAa,EACb,SAAS,EAGT,YAAY,EAKZ,eAAe,EACf,mBAAmB,EAWnB,qBAAqB,EACrB,WAAW,EACX,eAAe,EACf,eAAe,EACf,iBAAiB,GAClB,MAAM,wBAAwB,CAAA;AA4H/B;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,oBAAoB,CAAC,MAAc;IACjD,OAAO;QACL,eAAe;QACf,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC;QACxE,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC;QACxE,SAAS,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;QAChD,iBAAiB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC;QAEhE,iBAAiB;QACjB,aAAa,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,aAAa,CAAC,MAAM,EAAE,MAAM,CAAC;QACxD,WAAW,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC;QACpD,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC;QAC5D,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC;QAC5D,iBAAiB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,iBAAiB,CAAC,MAAM,EAAE,MAAM,CAAC;QAChE,qBAAqB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,qBAAqB,CAAC,MAAM,EAAE,MAAM,CAAC;QACxE,mBAAmB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC;QACpE,cAAc,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,cAAc,CAAC,MAAM,EAAE,MAAM,CAAC;QAC1D,eAAe,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC;QAC5D,YAAY,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC;QACtD,oBAAoB,EAAE,GAAG,EAAE,CAAC,oBAAoB,CAAC,MAAM,CAAC;QACxD,cAAc,EAAE,GAAG,EAAE,CAAC,cAAc,CAAC,MAAM,CAAC;QAC5C,gBAAgB,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC;KAC/D,CAAA;AACH,CAAC"}

package/dist/_esm/client/index.js

@@ -1,4 +1,4 @@
 export { createAuthProxyClient, } from './authProxy.js';
 export { createBaseClient, createClient, } from './createClient.js';
-export { zeroDevWalletTransport } from './transports/createTransport.js';
+export { zeroDevWalletTransport, } from './transports/createTransport.js';
 //# sourceMappingURL=index.js.map

package/dist/_esm/client/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,qBAAqB,GACtB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,gBAAgB,EAChB,YAAY,GAEb,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,sBAAsB,EAAE,MAAM,iCAAiC,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/client/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAKL,qBAAqB,GACtB,MAAM,gBAAgB,CAAA;AACvB,OAAO,EACL,gBAAgB,EAChB,YAAY,GAEb,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAEL,sBAAsB,GACvB,MAAM,iCAAiC,CAAA"}

package/dist/_esm/client/transports/createTransport.js

@@ -5,14 +5,15 @@ import { rest } from './rest.js';
  */
 export function zeroDevWalletTransport(options) {
     const { baseUrl, timeoutMs = 10_000, key = 'zeroDevWallet', name = 'ZeroDev Wallet Transport', } = options;
-    return ({ indexedDbStamper, webauthnStamper }) => {
+    return ({ apiKeyStamper, passkeyStamper }) => {
         // Create REST transport with stamper
         const transport = rest(baseUrl, {
             timeoutMs,
             key,
             name,
-            indexedDbStamper,
-            webauthnStamper,
+            apiKeyStamper,
+            passkeyStamper,
+            ...(options.fetchOptions && { fetchOptions: options.fetchOptions }),
         });
         return {
             config: {
@@ -24,8 +25,8 @@ export function zeroDevWalletTransport(options) {
             },
             request: transport.request,
             value: {
-                indexedDbStamper,
-                webauthnStamper,
+                apiKeyStamper,
+                passkeyStamper,
             },
         };
     };

package/dist/_esm/client/transports/createTransport.js.map

@@ -1 +1 @@
-{"version":3,"file":"createTransport.js","sourceRoot":"","sources":["../../../../src/client/transports/createTransport.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAahC;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA+B;IAE/B,MAAM,EACJ,OAAO,EACP,SAAS,GAAG,MAAM,EAClB,GAAG,GAAG,eAAe,EACrB,IAAI,GAAG,0BAA0B,GAClC,GAAG,OAAO,CAAA;IAEX,OAAO,CAAC,EAAE,gBAAgB,EAAE,eAAe,EAAE,EAAE,EAAE;QAC/C,qCAAqC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE;YAC9B,SAAS;YACT,GAAG;YACH,IAAI;YACJ,gBAAgB;YAChB,eAAe;SAChB,CAAC,CAAA;QAEF,OAAO;YACL,MAAM,EAAE;gBACN,IAAI;gBACJ,GAAG;gBACH,GAAG,EAAE,OAAO;gBACZ,SAAS;gBACT,IAAI,EAAE,eAAe;aACtB;YACD,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,KAAK,EAAE;gBACL,gBAAgB;gBAChB,eAAe;aAChB;SACF,CAAA;IACH,CAAC,CAAA;AACH,CAAC"}
+{"version":3,"file":"createTransport.js","sourceRoot":"","sources":["../../../../src/client/transports/createTransport.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAehC;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,OAA+B;IAE/B,MAAM,EACJ,OAAO,EACP,SAAS,GAAG,MAAM,EAClB,GAAG,GAAG,eAAe,EACrB,IAAI,GAAG,0BAA0B,GAClC,GAAG,OAAO,CAAA;IAEX,OAAO,CAAC,EAAE,aAAa,EAAE,cAAc,EAAE,EAAE,EAAE;QAC3C,qCAAqC;QACrC,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,EAAE;YAC9B,SAAS;YACT,GAAG;YACH,IAAI;YACJ,aAAa;YACb,cAAc;YACd,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;SACpE,CAAC,CAAA;QAEF,OAAO;YACL,MAAM,EAAE;gBACN,IAAI;gBACJ,GAAG;gBACH,GAAG,EAAE,OAAO;gBACZ,SAAS;gBACT,IAAI,EAAE,eAAe;aACtB;YACD,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,KAAK,EAAE;gBACL,aAAa;gBACb,cAAc;aACf;SACF,CAAA;IACH,CAAC,CAAA;AACH,CAAC"}

package/dist/_esm/client/transports/rest.js

@@ -11,50 +11,65 @@ export function rest(url, cfg) {
         try {
             let requestBody = args.body;
             let requestHeaders = {
-                'content-type': 'application/json',
-                ...(args.headers ?? {}),
                 ...(cfg.fetchOptions?.headers ?? {}),
+                ...(args.headers ?? {}),
+                'content-type': 'application/json',
             };
             // Handle stamping if requested
             if (args.stamp) {
                 let stamper;
-                if (args.stampWith === 'indexedDb') {
-                    stamper = cfg.indexedDbStamper;
+                if (args.stampWith === 'apiKey') {
+                    stamper = cfg.apiKeyStamper;
                 }
-                else if (args.stampWith === 'webAuthn') {
-                    stamper = cfg.webauthnStamper;
+                else if (args.stampWith === 'passkey') {
+                    stamper = cfg.passkeyStamper;
                 }
                 else {
-                    stamper = cfg.indexedDbStamper;
+                    stamper = cfg.apiKeyStamper;
                 }
-                const { body, apiUrl } = args.body;
-                const bodyString = canonicalizeEx(body ?? args.body);
-                const stamp = await stamper.stamp(bodyString);
-                // Restructure request body to match backend expectation
-                if (args.stampPostion === 'headers') {
+                // Timestamped stamp for GET endpoints behind StampCheckUser: the
+                // signed body is the unix-millis string itself (the backend rebuilds
+                // it from the X-Timestamp header via FormatTimestamp). No request body.
+                if (args.stampPostion === 'timestamp') {
+                    const ts = Date.now().toString();
+                    const stamp = await stamper.stamp(ts);
                     requestHeaders = {
                         ...requestHeaders,
+                        'X-Timestamp': ts,
                         [stamp.stampHeaderName]: stamp.stampHeaderValue,
                     };
-                }
-                else if (body) {
-                    requestBody = {
-                        body: bodyString,
-                        stamp: {
-                            stampHeaderName: stamp.stampHeaderName,
-                            stampHeaderValue: stamp.stampHeaderValue,
-                        },
-                        apiUrl: apiUrl,
-                    };
+                    requestBody = undefined;
                 }
                 else {
-                    requestBody = {
-                        ...args.body,
-                        stamp: {
-                            stampHeaderName: stamp.stampHeaderName,
-                            stampHeaderValue: stamp.stampHeaderValue,
-                        },
-                    };
+                    const { body, apiUrl } = args.body;
+                    const bodyString = canonicalizeEx(body ?? args.body);
+                    const stamp = await stamper.stamp(bodyString);
+                    // Restructure request body to match backend expectation
+                    if (args.stampPostion === 'headers') {
+                        requestHeaders = {
+                            ...requestHeaders,
+                            [stamp.stampHeaderName]: stamp.stampHeaderValue,
+                        };
+                    }
+                    else if (body) {
+                        requestBody = {
+                            body: bodyString,
+                            stamp: {
+                                stampHeaderName: stamp.stampHeaderName,
+                                stampHeaderValue: stamp.stampHeaderValue,
+                            },
+                            apiUrl: apiUrl,
+                        };
+                    }
+                    else {
+                        requestBody = {
+                            ...args.body,
+                            stamp: {
+                                stampHeaderName: stamp.stampHeaderName,
+                                stampHeaderValue: stamp.stampHeaderValue,
+                            },
+                        };
+                    }
                 }
             }
             const init = {

package/dist/_esm/client/transports/rest.js.map

@@ -1 +1 @@
-{"version":3,"file":"rest.js","sourceRoot":"","sources":["../../../../src/client/transports/rest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAqC5E,MAAM,UAAU,IAAI,CAAC,GAAW,EAAE,GAAwB;IACxD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,MAAM,CAAA;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,MAAM,CAAA;IAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,WAAW,CAAA;IAEpC,MAAM,OAAO,GAAkB,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5C,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAA;QACrC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;QAE7D,IAAI,CAAC;YACH,IAAI,WAAW,GAAG,IAAI,CAAC,IAAI,CAAA;YAC3B,IAAI,cAAc,GAAG;gBACnB,cAAc,EAAE,kBAAkB;gBAClC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;gBACvB,GAAG,CAAC,GAAG,CAAC,YAAY,EAAE,OAAO,IAAI,EAAE,CAAC;aACrC,CAAA;YAED,+BAA+B;YAC/B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,IAAI,OAA2C,CAAA;gBAC/C,IAAI,IAAI,CAAC,SAAS,KAAK,WAAW,EAAE,CAAC;oBACnC,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAA;gBAChC,CAAC;qBAAM,IAAI,IAAI,CAAC,SAAS,KAAK,UAAU,EAAE,CAAC;oBACzC,OAAO,GAAG,GAAG,CAAC,eAAe,CAAA;gBAC/B,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,GAAG,CAAC,gBAAgB,CAAA;gBAChC,CAAC;gBACD,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAA;gBAClC,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAA;gBACpD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;gBAE7C,wDAAwD;gBACxD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;oBACpC,cAAc,GAAG;wBACf,GAAG,cAAc;wBACjB,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,gBAAgB;qBAChD,CAAA;gBACH,CAAC;qBAAM,IAAI,IAAI,EAAE,CAAC;oBAChB,WAAW,GAAG;wBACZ,IAAI,EAAE,UAAU;wBAChB,KAAK,EAAE;4BACL,eAAe,EAAE,KAAK,CAAC,eAAe;4BACtC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;yBACzC;wBACD,MAAM,EAAE,MAAM;qBACf,CAAA;gBACH,CAAC;qBAAM,CAAC;oBACN,WAAW,GAAG;wBACZ,GAAG,IAAI,CAAC,IAAI;wBACZ,KAAK,EAAE;4BACL,eAAe,EAAE,KAAK,CAAC,eAAe;4BACtC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;yBACzC;qBACF,CAAA;gBACH,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAgB;gBACxB,GAAG,GAAG,CAAC,YAAY;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM;gBAC7B,OAAO,EAAE,cAAc;gBACvB,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC9D,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;aAC3D,CAAA;YAED,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,CAAA;YAChE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAE3C,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAA;YAE3B,IAAI,IAAS,CAAA;YACb,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;YAChD,IAAI,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBAAE,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;iBACzD,CAAC;gBACJ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;gBAC7B,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,GAAG,IAAI,CAAA;gBACb,CAAC;YACH,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAClE,OAAO,IAAW,CAAA;QACpB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAA;YAClE,MAAM,GAAG,CAAA;QACX,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;IACH,CAAC,CAAA;IAED,OAAO;QACL,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE;QACrC,OAAO;QACP,KAAK,EAAE,EAAE;KACV,CAAA;AACH,CAAC"}
+{"version":3,"file":"rest.js","sourceRoot":"","sources":["../../../../src/client/transports/rest.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAClD,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AA6C5E,MAAM,UAAU,IAAI,CAAC,GAAW,EAAE,GAAwB;IACxD,MAAM,SAAS,GAAG,GAAG,CAAC,SAAS,IAAI,MAAM,CAAA;IACzC,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,IAAI,MAAM,CAAA;IAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,IAAI,WAAW,CAAA;IAEpC,MAAM,OAAO,GAAkB,KAAK,EAAE,IAAI,EAAE,EAAE;QAC5C,MAAM,OAAO,GAAG,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,EAAE,CAAA;QACrC,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;QACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAA;QAE7D,IAAI,CAAC;YACH,IAAI,WAAW,GAAG,IAAI,CAAC,IAAI,CAAA;YAC3B,IAAI,cAAc,GAA2B;gBAC3C,GAAG,CAAE,GAAG,CAAC,YAAY,EAAE,OAAkC,IAAI,EAAE,CAAC;gBAChE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;gBACvB,cAAc,EAAE,kBAAkB;aACnC,CAAA;YAED,+BAA+B;YAC/B,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;gBACf,IAAI,OAAuC,CAAA;gBAC3C,IAAI,IAAI,CAAC,SAAS,KAAK,QAAQ,EAAE,CAAC;oBAChC,OAAO,GAAG,GAAG,CAAC,aAAa,CAAA;gBAC7B,CAAC;qBAAM,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;oBACxC,OAAO,GAAG,GAAG,CAAC,cAAc,CAAA;gBAC9B,CAAC;qBAAM,CAAC;oBACN,OAAO,GAAG,GAAG,CAAC,aAAa,CAAA;gBAC7B,CAAC;gBAED,iEAAiE;gBACjE,qEAAqE;gBACrE,wEAAwE;gBACxE,IAAI,IAAI,CAAC,YAAY,KAAK,WAAW,EAAE,CAAC;oBACtC,MAAM,EAAE,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAA;oBAChC,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;oBACrC,cAAc,GAAG;wBACf,GAAG,cAAc;wBACjB,aAAa,EAAE,EAAE;wBACjB,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,gBAAgB;qBAChD,CAAA;oBACD,WAAW,GAAG,SAAS,CAAA;gBACzB,CAAC;qBAAM,CAAC;oBACN,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAA;oBAClC,MAAM,UAAU,GAAG,cAAc,CAAC,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC,CAAA;oBACpD,MAAM,KAAK,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,CAAA;oBAE7C,wDAAwD;oBACxD,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;wBACpC,cAAc,GAAG;4BACf,GAAG,cAAc;4BACjB,CAAC,KAAK,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,gBAAgB;yBAChD,CAAA;oBACH,CAAC;yBAAM,IAAI,IAAI,EAAE,CAAC;wBAChB,WAAW,GAAG;4BACZ,IAAI,EAAE,UAAU;4BAChB,KAAK,EAAE;gCACL,eAAe,EAAE,KAAK,CAAC,eAAe;gCACtC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;6BACzC;4BACD,MAAM,EAAE,MAAM;yBACf,CAAA;oBACH,CAAC;yBAAM,CAAC;wBACN,WAAW,GAAG;4BACZ,GAAG,IAAI,CAAC,IAAI;4BACZ,KAAK,EAAE;gCACL,eAAe,EAAE,KAAK,CAAC,eAAe;gCACtC,gBAAgB,EAAE,KAAK,CAAC,gBAAgB;6BACzC;yBACF,CAAA;oBACH,CAAC;gBACH,CAAC;YACH,CAAC;YAED,MAAM,IAAI,GAAgB;gBACxB,GAAG,GAAG,CAAC,YAAY;gBACnB,MAAM,EAAE,IAAI,CAAC,MAAM,IAAI,MAAM;gBAC7B,OAAO,EAAE,cAAc;gBACvB,IAAI,EAAE,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,IAAI;gBAC9D,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,GAAG,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC;aAC3D,CAAA;YAED,MAAM,SAAS,GAAG,CAAC,MAAM,GAAG,CAAC,SAAS,EAAE,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC,IAAI,IAAI,CAAA;YAChE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,OAAO,EAAE,SAAS,CAAC,CAAA;YAE3C,MAAM,GAAG,CAAC,UAAU,EAAE,CAAC,GAAG,CAAC,CAAA;YAE3B,IAAI,IAAS,CAAA;YACb,MAAM,EAAE,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAA;YAChD,IAAI,EAAE,CAAC,UAAU,CAAC,kBAAkB,CAAC;gBAAE,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;iBACzD,CAAC;gBACJ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;gBAC7B,IAAI,CAAC;oBACH,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;gBACrC,CAAC;gBAAC,MAAM,CAAC;oBACP,IAAI,GAAG,IAAI,CAAA;gBACb,CAAC;YACH,CAAC;YAED,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;YAClE,OAAO,IAAW,CAAA;QACpB,CAAC;QAAC,OAAO,GAAQ,EAAE,CAAC;YAClB,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;gBAAE,MAAM,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAA;YAClE,MAAM,GAAG,CAAA;QACX,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAA;QACrB,CAAC;IACH,CAAC,CAAA;IAED,OAAO;QACL,MAAM,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE;QACrC,OAAO;QACP,KAAK,EAAE,EAAE;KACV,CAAA;AACH,CAAC"}

package/dist/_esm/constants.js

@@ -1,7 +1,14 @@
 export const DEFAULT_SESSION_EXPIRATION_IN_SECONDS = '900'; // default to 15 minutes
 export const DEFAULT_IFRAME_CONTAINER_ID = 'turnkey-auth-iframe-container-id';
 export const DEFAULT_IFRAME_ELEMENT_ID = 'turnkey-default-iframe-element-id';
-export const DEFAULT_ORGANIZATION_ID = '6254bb1d-0d0d-4f7e-96b8-77c94fe0b0c1';
-export const DEFAULT_AUTH_PROXY_CONFIG_ID = 'f69f6246-a814-43c6-90e6-2a8d947853d3';
-export const KMS_SERVER_URL = 'https://kms.dev.zerodev.app';
+// Prod parent organization id. Only a fallback — the SDK resolves the parent
+// org at runtime from the KMS `server-info/parent-org-id` endpoint.
+export const DEFAULT_ORGANIZATION_ID = '65028f18-01c6-4ed4-beff-2ed1be5d6bad';
+export const KMS_SERVER_URL = 'https://kms.zerodev.app';
+// Pinned ECDSA P-256 public key (uncompressed, 65 bytes hex) of Turnkey's
+// TLS Fetcher Sign enclave. Used to verify the signature on the OTP encryption
+// target bundle returned by /auth/init/otp before HPKE-encrypting the OTP
+// attempt. The bundle's `dataSignature` is verified against this key, so a
+// compromised proxy cannot substitute its own ephemeral key.
+export const TURNKEY_TLS_FETCHER_SIGN_PUBLIC_KEY = '046b4f88421f76b6ba418afc2ea1d8ced671337d7db6b80478a60d8531bf8f17fa9a512f0fef96fc0c9b4cd9dff70b34992e520ce04c79d931f6ff6296b547d201';
 //# sourceMappingURL=constants.js.map

package/dist/_esm/constants.js.map

@@ -1 +1 @@
-{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qCAAqC,GAAG,KAAK,CAAA,CAAC,wBAAwB;AACnF,MAAM,CAAC,MAAM,2BAA2B,GAAG,kCAAkC,CAAA;AAC7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,mCAAmC,CAAA;AAC5E,MAAM,CAAC,MAAM,uBAAuB,GAAG,sCAAsC,CAAA;AAC7E,MAAM,CAAC,MAAM,4BAA4B,GACvC,sCAAsC,CAAA;AACxC,MAAM,CAAC,MAAM,cAAc,GAAG,6BAA6B,CAAA"}
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../../src/constants.ts"],"names":[],"mappings":"AAAA,MAAM,CAAC,MAAM,qCAAqC,GAAG,KAAK,CAAA,CAAC,wBAAwB;AACnF,MAAM,CAAC,MAAM,2BAA2B,GAAG,kCAAkC,CAAA;AAC7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,mCAAmC,CAAA;AAC5E,6EAA6E;AAC7E,oEAAoE;AACpE,MAAM,CAAC,MAAM,uBAAuB,GAAG,sCAAsC,CAAA;AAC7E,MAAM,CAAC,MAAM,cAAc,GAAG,yBAAyB,CAAA;AAEvD,0EAA0E;AAC1E,+EAA+E;AAC/E,0EAA0E;AAC1E,2EAA2E;AAC3E,6DAA6D;AAC7D,MAAM,CAAC,MAAM,mCAAmC,GAC9C,oIAAoI,CAAA"}