@zerodev/wallet-core 0.0.1-alpha.8 → 0.0.1

package/dist/_esm/core/{createZeroDevWallet.js → createZeroDevWalletCore.js}

@@ -1,31 +1,40 @@
-import { getWebAuthnAttestation } from '@turnkey/http';
 import { toViemAccount } from '../adapters/viem.js';
 import { createAuthProxyClient, createClient, zeroDevWalletTransport, } from '../client/index.js';
-import { DEFAULT_AUTH_PROXY_CONFIG_ID, DEFAULT_ORGANIZATION_ID, DEFAULT_SESSION_EXPIRATION_IN_SECONDS, KMS_SERVER_URL, } from '../constants.js';
-import { createIndexedDbStamper } from '../stampers/indexedDbStamper.js';
-import { createWebauthnStamper } from '../stampers/webauthnStamper.js';
-import { createWebStorageAdapter } from '../storage/adapters.js';
+import { DEFAULT_ORGANIZATION_ID, DEFAULT_SESSION_EXPIRATION_IN_SECONDS, KMS_SERVER_URL, } from '../constants.js';
+import { createNoopPasskeyStamper } from '../stampers/noopPasskeyStamper.js';
 import { createStorageManager, } from '../storage/manager.js';
 import { SessionType } from '../types/session.js';
 import { buildClientSignature } from '../utils/buildClientSignature.js';
-import { base64UrlEncode, generateCompressedPublicKeyFromKeyPair, generateRandomBuffer, humanReadableDateTime, parseSession, } from '../utils/utils.js';
-export async function createZeroDevWallet(config) {
-    const { projectId, sessionStorage, rpId = window.location.hostname, organizationId = DEFAULT_ORGANIZATION_ID, } = config;
-    const sessionStorageManager = createStorageManager(sessionStorage || createWebStorageAdapter());
-    const indexedDbStamper = await createIndexedDbStamper();
-    const webauthnStamper = await createWebauthnStamper({ rpId });
+import { encryptOtpAttempt } from '../utils/encryptOtpAttempt.js';
+import { createOrganizationIdResolver } from '../utils/resolveOrganizationId.js';
+import { humanReadableDateTime, parseSession } from '../utils/utils.js';
+export async function createZeroDevWalletCore(config) {
+    const { projectId, sessionStorage, rpId, apiKeyStamper, organizationId } = config;
+    const passkeyStamper = config.passkeyStamper ?? createNoopPasskeyStamper();
+    const sessionStorageManager = createStorageManager(sessionStorage);
     const client = createClient({
-        indexedDbStamper,
-        webauthnStamper,
+        apiKeyStamper,
+        passkeyStamper,
         transport: zeroDevWalletTransport({
             baseUrl: config.proxyBaseUrl || `${KMS_SERVER_URL}/api/v1`,
+            ...(config.fetchOptions && { fetchOptions: config.fetchOptions }),
         }),
     });
+    let cachedAuthProxyConfigId;
+    // Resolve the Turnkey parent org that stamp-login is signed against: explicit
+    // override → backend fetch (/server-info/parent-org-id, cached) → hardcoded
+    // fallback if the endpoint is unavailable (older backends). This is why the
+    // org no longer needs to be hardcoded/overridden per environment.
+    const resolveOrganizationId = createOrganizationIdResolver({
+        organizationId,
+        fetchParentOrgId: async () => (await client.getParentOrgId()).parentOrgId,
+        fallback: DEFAULT_ORGANIZATION_ID,
+    });
     return {
         client,
         async getPublicKey() {
-            await client.indexedDbStamper.resetKeyPair();
-            const compressedPublicKey = await client.indexedDbStamper.getPublicKey();
+            await client.apiKeyStamper.resetKeyPair();
+            const compressedPublicKey = await client.apiKeyStamper.getPublicKey();
             return compressedPublicKey;
         },
         async getSession() {
@@ -57,25 +66,25 @@ export async function createZeroDevWallet(config) {
             if (!activeSession) {
                 throw new Error('No active session');
             }
-            if (activeSession.stamperType === 'indexedDb') {
-                const newKeyPair = await crypto.subtle.generateKey({
-                    name: 'ECDSA',
-                    namedCurve: 'P-256',
-                }, false, ['sign', 'verify']);
-                const compressedPublicKeyHex = await generateCompressedPublicKeyFromKeyPair(newKeyPair);
+            if (activeSession.stamperType === 'apiKey') {
+                const compressedPublicKeyHex = await client.apiKeyStamper.prepareKeyRotation();
                 const data = await client.loginWithStamp({
                     targetPublicKey: compressedPublicKeyHex,
                     projectId,
-                    organizationId: activeSession.organizationId,
-                    stampWith: 'indexedDb',
+                    // Stamp-login is signed against the Turnkey parent org; the backend
+                    // resolves the sub-org from the stamped credential. Signing the
+                    // sub-org here makes the relayed payload's org mismatch the
+                    // signature → Turnkey SIGNATURE_INVALID.
+                    organizationId: await resolveOrganizationId(),
+                    stampWith: 'apiKey',
                 });
-                await client.indexedDbStamper.resetKeyPair(newKeyPair);
+                await client.apiKeyStamper.commitKeyRotation();
                 const parsedSession = parseSession(data.session);
                 const session = {
                     id: `session_indexedDb_${Date.now()}`,
                     userId: parsedSession.userId,
                     organizationId: parsedSession.organizationId,
-                    stamperType: 'indexedDb',
+                    stamperType: 'apiKey',
                     sessionType: SessionType.READ_WRITE,
                     token: data.session,
                     expiry: parsedSession.expiry,
@@ -91,26 +100,25 @@ export async function createZeroDevWallet(config) {
         async auth(params) {
             switch (params.type) {
                 case 'oauth': {
-                    // Backend OAuth flow - the backend reads the OAuth session from a cookie
-                    // set during the OAuth popup flow via /oauth/google/login
+                    const popSignature = await client.apiKeyStamper.sign(params.sessionId);
                     const data = await client.authenticateWithOAuth({
                         provider: params.provider,
                         projectId,
+                        sessionId: params.sessionId,
+                        popSignature,
                     });
                     if (data.session) {
                         // Parse the JWT to get session data
                         const parsedSession = parseSession(data.session);
-                        const publicKey = await client.indexedDbStamper.getPublicKey();
                         const session = {
                             id: `session_oauth_${Date.now()}`,
                             userId: parsedSession.userId,
                             organizationId: parsedSession.organizationId,
-                            stamperType: 'indexedDb',
+                            stamperType: 'apiKey',
                             sessionType: parsedSession.sessionType || SessionType.READ_WRITE,
                             token: data.session,
                             expiry: parsedSession.expiry,
                             createdAt: Date.now(),
-                            publicKey: publicKey || '',
                         };
                         await sessionStorageManager.storeSession(session, session.id);
                     }
@@ -121,59 +129,35 @@ export async function createZeroDevWallet(config) {
                     if (type === 'passkey' &&
                         'mode' in params &&
                         params.mode === 'register') {
-                        const { email } = params;
-                        await client.indexedDbStamper.resetKeyPair();
-                        const tempPublicKey = await client.indexedDbStamper.getPublicKey();
+                        await client.apiKeyStamper.resetKeyPair();
+                        const tempPublicKey = await client.apiKeyStamper.getPublicKey();
                         if (!tempPublicKey) {
                             throw new Error('Failed to get public key');
                         }
-                        const challenge = generateRandomBuffer();
-                        const encodedChallenge = base64UrlEncode(challenge);
-                        const authenticatorUserId = generateRandomBuffer();
-                        const name = `ZeroDevWallet-${humanReadableDateTime()}-${email}`;
-                        const attestation = await getWebAuthnAttestation({
-                            publicKey: {
-                                rp: { id: rpId, name: '' },
-                                challenge,
-                                pubKeyCredParams: [
-                                    {
-                                        type: 'public-key',
-                                        alg: -7,
-                                    },
-                                    {
-                                        type: 'public-key',
-                                        alg: -257,
-                                    },
-                                ],
-                                user: {
-                                    id: authenticatorUserId,
-                                    name,
-                                    displayName: name,
-                                },
-                            },
+                        const name = `ZeroDevWallet-${humanReadableDateTime()}`;
+                        const { attestation, encodedChallenge } = await passkeyStamper.register({
+                            rp: { id: rpId, name: '' },
+                            userName: name,
                         });
                         const data = await client.registerWithPasskey({
-                            email,
                             attestation,
                             challenge: encodedChallenge,
                             projectId,
                             encodedPublicKey: tempPublicKey,
                         });
-                        const newKeyPair = await crypto.subtle.generateKey({
-                            name: 'ECDSA',
-                            namedCurve: 'P-256',
-                        }, false, ['sign', 'verify']);
-                        const compressedPublicKeyHex = await generateCompressedPublicKeyFromKeyPair(newKeyPair);
+                        const compressedPublicKeyHex = await client.apiKeyStamper.prepareKeyRotation();
                         const loginData = await client.loginWithStamp({
                             projectId,
                             targetPublicKey: compressedPublicKeyHex,
-                            organizationId: data.subOrganizationId,
+                            // Sign against the parent org (see refreshSession note) — the
+                            // backend derives the sub-org from the stamped credential.
+                            organizationId: await resolveOrganizationId(),
                         });
-                        await client.indexedDbStamper.resetKeyPair(newKeyPair);
+                        await client.apiKeyStamper.commitKeyRotation();
                         const parsedSession = parseSession(loginData.session);
                         const session = {
                             id: `session_indexedDb_${Date.now()}`,
-                            stamperType: 'indexedDb',
+                            stamperType: 'apiKey',
                             createdAt: Date.now(),
                             sessionType: SessionType.READ_WRITE,
                             userId: parsedSession.userId,
@@ -188,21 +172,24 @@ export async function createZeroDevWallet(config) {
                     if (type === 'passkey' &&
                         'mode' in params &&
                         params.mode === 'login') {
-                        await client.indexedDbStamper.resetKeyPair();
-                        const generatedPublicKey = await client.indexedDbStamper.getPublicKey();
+                        await client.apiKeyStamper.resetKeyPair();
+                        const generatedPublicKey = await client.apiKeyStamper.getPublicKey();
                         if (!generatedPublicKey) {
                             throw new Error('Failed to get public key');
                         }
                         const loginData = await client.loginWithStamp({
                             targetPublicKey: generatedPublicKey,
                             projectId,
-                            organizationId,
-                            stampWith: 'webauthn',
+                            // Sign against the parent org, not the user's sub-org (see the
+                            // refreshSession note). The backend derives the sub-org from the
+                            // stamped passkey credential.
+                            organizationId: await resolveOrganizationId(),
+                            stampWith: 'passkey',
                         });
                         const parsedSession = parseSession(loginData.session);
                         const session = {
                             id: `session_indexedDb_${Date.now()}`,
-                            stamperType: 'indexedDb',
+                            stamperType: 'apiKey',
                             createdAt: Date.now(),
                             sessionType: SessionType.READ_WRITE,
                             userId: parsedSession.userId,
@@ -216,40 +203,76 @@ export async function createZeroDevWallet(config) {
                     }
                     throw new Error('Passkey authentication requires passkey parameter');
                 }
-                case 'otp': {
-                    const { type, mode } = params;
-                    if (type === 'otp' && mode === 'sendOtp') {
-                        const { email, contact, emailCustomization } = params;
+                case 'otp':
+                case 'magicLink': {
+                    // Normalize magicLink params into OTP params
+                    let otpParams;
+                    if (params.type === 'magicLink') {
+                        if (params.mode === 'send') {
+                            // Magic-link vs plain-OTP delivery and the link URL template are
+                            // configured per-project on the backend (`wallet.otp_configs`);
+                            // the client just initiates OTP and the backend decides.
+                            otpParams = {
+                                type: 'otp',
+                                mode: 'sendOtp',
+                                email: params.email,
+                                contact: { type: 'email', contact: params.email },
+                            };
+                        }
+                        else {
+                            otpParams = {
+                                type: 'otp',
+                                mode: 'verifyOtp',
+                                otpId: params.otpId,
+                                otpCode: params.code,
+                                otpEncryptionTargetBundle: params.otpEncryptionTargetBundle,
+                            };
+                        }
+                    }
+                    else {
+                        otpParams = params;
+                    }
+                    if (otpParams.mode === 'sendOtp') {
+                        const { email, contact } = otpParams;
                         const data = await client.registerWithOTP({
                             email,
                             contact,
                             projectId,
-                            ...(emailCustomization && { emailCustomization }),
                         });
                         return data;
                     }
-                    if (type === 'otp' && mode === 'verifyOtp') {
-                        const { otpId, otpCode } = params;
+                    if (otpParams.mode === 'verifyOtp') {
+                        const { otpId, otpCode, otpEncryptionTargetBundle } = otpParams;
                         // Step 1: Generate new key pair
-                        await client.indexedDbStamper.resetKeyPair();
-                        const targetPublicKey = await client.indexedDbStamper.getPublicKey();
+                        await client.apiKeyStamper.resetKeyPair();
+                        const targetPublicKey = await client.apiKeyStamper.getPublicKey();
                         if (!targetPublicKey) {
                             throw new Error('Failed to get public key');
                         }
-                        // Step 2: Verify OTP via Auth Proxy
+                        // Step 2a: HPKE-seal the OTP attempt to the enclave's per-session
+                        // target key. The auth proxy never sees the plaintext OTP code.
+                        const encryptedOtpBundle = await encryptOtpAttempt({
+                            otpCode,
+                            publicKey: targetPublicKey,
+                            encryptionTargetBundle: otpEncryptionTargetBundle,
+                        });
+                        // Step 2b: Verify OTP via Auth Proxy
+                        if (!cachedAuthProxyConfigId) {
+                            const { authProxyConfigId } = await client.getAuthProxyConfigId();
+                            cachedAuthProxyConfigId = authProxyConfigId;
+                        }
                         const authProxyClient = createAuthProxyClient({
-                            authProxyConfigId: DEFAULT_AUTH_PROXY_CONFIG_ID,
+                            authProxyConfigId: cachedAuthProxyConfigId,
                         });
                         const { verificationToken } = await authProxyClient.verifyOtp({
                             otpId,
-                            otpCode,
-                            public_key: targetPublicKey,
+                            encryptedOtpBundle,
                         });
                         // Step 3: Build client signature
                         const clientSignature = await buildClientSignature({
                             verificationToken,
                             publicKey: targetPublicKey,
-                            stamper: client.indexedDbStamper,
+                            stamper: client.apiKeyStamper,
                         });
                         // Step 4: Login via backend (not Auth Proxy!)
                         const data = await client.loginWithOTP({
@@ -264,12 +287,11 @@ export async function createZeroDevWallet(config) {
                                 id: `session_otp_${Date.now()}`,
                                 userId: parsedSession.userId,
                                 organizationId: parsedSession.organizationId,
-                                stamperType: 'indexedDb',
+                                stamperType: 'apiKey',
                                 sessionType: parsedSession.sessionType || SessionType.READ_WRITE,
                                 token: data.session,
                                 expiry: parsedSession.expiry,
                                 createdAt: Date.now(),
-                                publicKey: targetPublicKey,
                             };
                             await sessionStorageManager.storeSession(session, session.id);
                         }
@@ -283,7 +305,7 @@ export async function createZeroDevWallet(config) {
         },
         async logout() {
             await sessionStorageManager.clearAllSessions();
-            await client.indexedDbStamper.resetKeyPair();
+            await client.apiKeyStamper.resetKeyPair();
             return true;
         },
         async toAccount() {
@@ -295,9 +317,12 @@ export async function createZeroDevWallet(config) {
                 client,
                 organizationId: session.organizationId,
                 projectId,
-                token: session.token ?? '',
+                getToken: async () => {
+                    const activeSession = await sessionStorageManager.getActiveSession();
+                    return activeSession?.token ?? '';
+                },
             });
         },
     };
 }
-//# sourceMappingURL=createZeroDevWallet.js.map
+//# sourceMappingURL=createZeroDevWalletCore.js.map

package/dist/_esm/core/createZeroDevWalletCore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createZeroDevWalletCore.js","sourceRoot":"","sources":["../../../src/core/createZeroDevWalletCore.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AACnD,OAAO,EAEL,qBAAqB,EACrB,YAAY,EAEZ,sBAAsB,GACvB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,EACL,uBAAuB,EACvB,qCAAqC,EACrC,cAAc,GACf,MAAM,iBAAiB,CAAA;AACxB,OAAO,EAAE,wBAAwB,EAAE,MAAM,mCAAmC,CAAA;AAE5E,OAAO,EACL,oBAAoB,GAErB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAAE,WAAW,EAA6B,MAAM,qBAAqB,CAAA;AAC5E,OAAO,EAAE,oBAAoB,EAAE,MAAM,kCAAkC,CAAA;AACvE,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAA;AACjE,OAAO,EAAE,4BAA4B,EAAE,MAAM,mCAAmC,CAAA;AAChF,OAAO,EAAE,qBAAqB,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAqFvE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,MAA+B;IAE/B,MAAM,EAAE,SAAS,EAAE,cAAc,EAAE,IAAI,EAAE,aAAa,EAAE,cAAc,EAAE,GACtE,MAAM,CAAA;IACR,MAAM,cAAc,GAAG,MAAM,CAAC,cAAc,IAAI,wBAAwB,EAAE,CAAA;IAE1E,MAAM,qBAAqB,GAAG,oBAAoB,CAAC,cAAc,CAAC,CAAA;IAElE,MAAM,MAAM,GAAG,YAAY,CAAC;QAC1B,aAAa;QACb,cAAc;QACd,SAAS,EAAE,sBAAsB,CAAC;YAChC,OAAO,EAAE,MAAM,CAAC,YAAY,IAAI,GAAG,cAAc,SAAS;YAC1D,GAAG,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,MAAM,CAAC,YAAY,EAAE,CAAC;SAClE,CAAC;KACH,CAAC,CAAA;IAEF,IAAI,uBAA2C,CAAA;IAE/C,8EAA8E;IAC9E,4EAA4E;IAC5E,4EAA4E;IAC5E,kEAAkE;IAClE,MAAM,qBAAqB,GAAG,4BAA4B,CAAC;QACzD,cAAc;QACd,gBAAgB,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC,CAAC,WAAW;QACzE,QAAQ,EAAE,uBAAuB;KAClC,CAAC,CAAA;IAEF,OAAO;QACL,MAAM;QACN,KAAK,CAAC,YAAY;YAChB,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,CAAA;YACzC,MAAM,mBAAmB,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,CAAA;YACrE,OAAO,mBAAmB,CAAA;QAC5B,CAAC;QAED,KAAK,CAAC,UAAU;YACd,OAAO,qBAAqB,CAAC,gBAAgB,EAAE,CAAA;QACjD,CAAC;QAED,KAAK,CAAC,cAAc;YAClB,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,YAAY,EAAE,CAAA;YAC3D,MAAM,UAAU,GAAyC,EAAE,CAAA;YAC3D,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;gBAC/B,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,OAAO,CAAA;YAClC,CAAC;YACD,OAAO,UAAU,CAAA;QACnB,CAAC;QAED,KAAK,CAAC,aAAa,CAAC,SAAiB;YACnC,MAAM,qBAAqB,CAAC,gBAAgB,CAAC,SAAS,CAAC,CAAA;YACvD,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,CAAA;YAE9D,OAAO,OAAO,CAAA;QAChB,CAAC;QAED,KAAK,CAAC,YAAY,CAAC,SAAiB;YAClC,MAAM,qBAAqB,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;QACrD,CAAC;QAED,KAAK,CAAC,gBAAgB;YACpB,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,CAAA;QAChD,CAAC;QAED,KAAK,CAAC,cAAc,CAAC,SAAkB;YACrC,MAAM,aAAa,GAAG,SAAS;gBAC7B,CAAC,CAAC,MAAM,qBAAqB,CAAC,UAAU,CAAC,SAAS,CAAC;gBACnD,CAAC,CAAC,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,CAAA;YAClD,IAAI,CAAC,aAAa,EAAE,CAAC;gBACnB,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;YACtC,CAAC;YACD,IAAI,aAAa,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;gBAC3C,MAAM,sBAAsB,GAC1B,MAAM,MAAM,CAAC,aAAa,CAAC,kBAAkB,EAAE,CAAA;gBACjD,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC;oBACvC,eAAe,EAAE,sBAAsB;oBACvC,SAAS;oBACT,oEAAoE;oBACpE,gEAAgE;oBAChE,4DAA4D;oBAC5D,yCAAyC;oBACzC,cAAc,EAAE,MAAM,qBAAqB,EAAE;oBAC7C,SAAS,EAAE,QAAQ;iBACpB,CAAC,CAAA;gBACF,MAAM,MAAM,CAAC,aAAa,CAAC,iBAAiB,EAAE,CAAA;gBAC9C,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;gBAChD,MAAM,OAAO,GAAyB;oBACpC,EAAE,EAAE,qBAAqB,IAAI,CAAC,GAAG,EAAE,EAAE;oBACrC,MAAM,EAAE,aAAa,CAAC,MAAM;oBAC5B,cAAc,EAAE,aAAa,CAAC,cAAc;oBAC5C,WAAW,EAAE,QAAQ;oBACrB,WAAW,EAAE,WAAW,CAAC,UAAU;oBACnC,KAAK,EAAE,IAAI,CAAC,OAAO;oBACnB,MAAM,EAAE,aAAa,CAAC,MAAM;oBAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;iBACtB,CAAA;gBACD,MAAM,qBAAqB,CAAC,YAAY,CAAC,aAAa,CAAC,EAAE,CAAC,CAAA;gBAC1D,MAAM,qBAAqB,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;gBAC7D,OAAO,OAAO,CAAA;YAChB,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAA;QACzC,CAAC;QAED,2CAA2C;QAC3C,KAAK,CAAC,IAAI,CAAC,MAAkB;YAC3B,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;gBACpB,KAAK,OAAO,CAAC,CAAC,CAAC;oBACb,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;oBACtE,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC;wBAC9C,QAAQ,EAAE,MAAM,CAAC,QAAQ;wBACzB,SAAS;wBACT,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,YAAY;qBACb,CAAC,CAAA;oBAEF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;wBACjB,oCAAoC;wBACpC,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;wBAChD,MAAM,OAAO,GAAyB;4BACpC,EAAE,EAAE,iBAAiB,IAAI,CAAC,GAAG,EAAE,EAAE;4BACjC,MAAM,EAAE,aAAa,CAAC,MAAM;4BAC5B,cAAc,EAAE,aAAa,CAAC,cAAc;4BAC5C,WAAW,EAAE,QAAQ;4BACrB,WAAW,EAAE,aAAa,CAAC,WAAW,IAAI,WAAW,CAAC,UAAU;4BAChE,KAAK,EAAE,IAAI,CAAC,OAAO;4BACnB,MAAM,EAAE,aAAa,CAAC,MAAM;4BAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;yBACtB,CAAA;wBACD,MAAM,qBAAqB,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;oBAC/D,CAAC;oBACD,OAAO,IAAI,CAAA;gBACb,CAAC;gBACD,KAAK,SAAS,CAAC,CAAC,CAAC;oBACf,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAA;oBACvB,IACE,IAAI,KAAK,SAAS;wBAClB,MAAM,IAAI,MAAM;wBAChB,MAAM,CAAC,IAAI,KAAK,UAAU,EAC1B,CAAC;wBACD,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,CAAA;wBACzC,MAAM,aAAa,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,CAAA;wBAC/D,IAAI,CAAC,aAAa,EAAE,CAAC;4BACnB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;wBAC7C,CAAC;wBACD,MAAM,IAAI,GAAG,iBAAiB,qBAAqB,EAAE,EAAE,CAAA;wBACvD,MAAM,EAAE,WAAW,EAAE,gBAAgB,EAAE,GACrC,MAAM,cAAc,CAAC,QAAQ,CAAC;4BAC5B,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;4BAC1B,QAAQ,EAAE,IAAI;yBACf,CAAC,CAAA;wBACJ,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC;4BAC5C,WAAW;4BACX,SAAS,EAAE,gBAAgB;4BAC3B,SAAS;4BACT,gBAAgB,EAAE,aAAa;yBAChC,CAAC,CAAA;wBACF,MAAM,sBAAsB,GAC1B,MAAM,MAAM,CAAC,aAAa,CAAC,kBAAkB,EAAE,CAAA;wBACjD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC;4BAC5C,SAAS;4BACT,eAAe,EAAE,sBAAsB;4BACvC,8DAA8D;4BAC9D,2DAA2D;4BAC3D,cAAc,EAAE,MAAM,qBAAqB,EAAE;yBAC9C,CAAC,CAAA;wBACF,MAAM,MAAM,CAAC,aAAa,CAAC,iBAAiB,EAAE,CAAA;wBAC9C,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;wBACrD,MAAM,OAAO,GAAyB;4BACpC,EAAE,EAAE,qBAAqB,IAAI,CAAC,GAAG,EAAE,EAAE;4BACrC,WAAW,EAAE,QAAQ;4BACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;4BACrB,WAAW,EAAE,WAAW,CAAC,UAAU;4BACnC,MAAM,EAAE,aAAa,CAAC,MAAM;4BAC5B,cAAc,EAAE,aAAa,CAAC,cAAc;4BAC5C,MAAM,EACJ,IAAI,CAAC,GAAG,EAAE;gCACV,MAAM,CAAC,qCAAqC,CAAC,GAAG,IAAI;4BACtD,KAAK,EAAE,SAAS,CAAC,OAAO;yBACzB,CAAA;wBACD,MAAM,qBAAqB,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;wBAC7D,OAAO,IAAI,CAAA;oBACb,CAAC;oBACD,IACE,IAAI,KAAK,SAAS;wBAClB,MAAM,IAAI,MAAM;wBAChB,MAAM,CAAC,IAAI,KAAK,OAAO,EACvB,CAAC;wBACD,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,CAAA;wBACzC,MAAM,kBAAkB,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,CAAA;wBACpE,IAAI,CAAC,kBAAkB,EAAE,CAAC;4BACxB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;wBAC7C,CAAC;wBACD,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC;4BAC5C,eAAe,EAAE,kBAAkB;4BACnC,SAAS;4BACT,+DAA+D;4BAC/D,iEAAiE;4BACjE,8BAA8B;4BAC9B,cAAc,EAAE,MAAM,qBAAqB,EAAE;4BAC7C,SAAS,EAAE,SAAS;yBACrB,CAAC,CAAA;wBACF,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC,OAAO,CAAC,CAAA;wBACrD,MAAM,OAAO,GAAyB;4BACpC,EAAE,EAAE,qBAAqB,IAAI,CAAC,GAAG,EAAE,EAAE;4BACrC,WAAW,EAAE,QAAQ;4BACrB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;4BACrB,WAAW,EAAE,WAAW,CAAC,UAAU;4BACnC,MAAM,EAAE,aAAa,CAAC,MAAM;4BAC5B,cAAc,EAAE,aAAa,CAAC,cAAc;4BAC5C,MAAM,EACJ,IAAI,CAAC,GAAG,EAAE;gCACV,MAAM,CAAC,qCAAqC,CAAC,GAAG,IAAI;4BACtD,KAAK,EAAE,SAAS,CAAC,OAAO;yBACzB,CAAA;wBACD,MAAM,qBAAqB,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;wBAC7D,OAAO,SAAS,CAAA;oBAClB,CAAC;oBACD,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAA;gBACtE,CAAC;gBACD,KAAK,KAAK,CAAC;gBACX,KAAK,WAAW,CAAC,CAAC,CAAC;oBACjB,6CAA6C;oBAC7C,IAAI,SAA+C,CAAA;oBACnD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;wBAChC,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;4BAC3B,iEAAiE;4BACjE,gEAAgE;4BAChE,yDAAyD;4BACzD,SAAS,GAAG;gCACV,IAAI,EAAE,KAAK;gCACX,IAAI,EAAE,SAAS;gCACf,KAAK,EAAE,MAAM,CAAC,KAAK;gCACnB,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,KAAK,EAAE;6BAClD,CAAA;wBACH,CAAC;6BAAM,CAAC;4BACN,SAAS,GAAG;gCACV,IAAI,EAAE,KAAK;gCACX,IAAI,EAAE,WAAW;gCACjB,KAAK,EAAE,MAAM,CAAC,KAAK;gCACnB,OAAO,EAAE,MAAM,CAAC,IAAI;gCACpB,yBAAyB,EAAE,MAAM,CAAC,yBAAyB;6BAC5D,CAAA;wBACH,CAAC;oBACH,CAAC;yBAAM,CAAC;wBACN,SAAS,GAAG,MAAM,CAAA;oBACpB,CAAC;oBAED,IAAI,SAAS,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;wBACjC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,SAAS,CAAA;wBAEpC,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC;4BACxC,KAAK;4BACL,OAAO;4BACP,SAAS;yBACV,CAAC,CAAA;wBAEF,OAAO,IAAI,CAAA;oBACb,CAAC;oBAED,IAAI,SAAS,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;wBACnC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,yBAAyB,EAAE,GAAG,SAAS,CAAA;wBAE/D,gCAAgC;wBAChC,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,CAAA;wBACzC,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,CAAA;wBAEjE,IAAI,CAAC,eAAe,EAAE,CAAC;4BACrB,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAA;wBAC7C,CAAC;wBAED,kEAAkE;wBAClE,gEAAgE;wBAChE,MAAM,kBAAkB,GAAG,MAAM,iBAAiB,CAAC;4BACjD,OAAO;4BACP,SAAS,EAAE,eAAe;4BAC1B,sBAAsB,EAAE,yBAAyB;yBAClD,CAAC,CAAA;wBAEF,qCAAqC;wBACrC,IAAI,CAAC,uBAAuB,EAAE,CAAC;4BAC7B,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,MAAM,CAAC,oBAAoB,EAAE,CAAA;4BACjE,uBAAuB,GAAG,iBAAiB,CAAA;wBAC7C,CAAC;wBACD,MAAM,eAAe,GAAG,qBAAqB,CAAC;4BAC5C,iBAAiB,EAAE,uBAAuB;yBAC3C,CAAC,CAAA;wBAEF,MAAM,EAAE,iBAAiB,EAAE,GAAG,MAAM,eAAe,CAAC,SAAS,CAAC;4BAC5D,KAAK;4BACL,kBAAkB;yBACnB,CAAC,CAAA;wBAEF,iCAAiC;wBACjC,MAAM,eAAe,GAAG,MAAM,oBAAoB,CAAC;4BACjD,iBAAiB;4BACjB,SAAS,EAAE,eAAe;4BAC1B,OAAO,EAAE,MAAM,CAAC,aAAa;yBAC9B,CAAC,CAAA;wBAEF,8CAA8C;wBAC9C,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC;4BACrC,iBAAiB;4BACjB,eAAe;4BACf,SAAS;yBACV,CAAC,CAAA;wBAEF,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;4BACjB,oCAAoC;4BACpC,MAAM,aAAa,GAAG,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;4BAChD,MAAM,OAAO,GAAyB;gCACpC,EAAE,EAAE,eAAe,IAAI,CAAC,GAAG,EAAE,EAAE;gCAC/B,MAAM,EAAE,aAAa,CAAC,MAAM;gCAC5B,cAAc,EAAE,aAAa,CAAC,cAAc;gCAC5C,WAAW,EAAE,QAAQ;gCACrB,WAAW,EACT,aAAa,CAAC,WAAW,IAAI,WAAW,CAAC,UAAU;gCACrD,KAAK,EAAE,IAAI,CAAC,OAAO;gCACnB,MAAM,EAAE,aAAa,CAAC,MAAM;gCAC5B,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;6BACtB,CAAA;4BACD,MAAM,qBAAqB,CAAC,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC,CAAA;wBAC/D,CAAC;wBACD,OAAO,IAAI,CAAA;oBACb,CAAC;oBAED,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAA;gBAC/D,CAAC;gBACD;oBACE,MAAM,IAAI,KAAK,CAAC,sBAAuB,MAAc,CAAC,IAAI,EAAE,CAAC,CAAA;YACjE,CAAC;QACH,CAAC;QAED,KAAK,CAAC,MAAM;YACV,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,CAAA;YAC9C,MAAM,MAAM,CAAC,aAAa,CAAC,YAAY,EAAE,CAAA;YACzC,OAAO,IAAI,CAAA;QACb,CAAC;QAED,KAAK,CAAC,SAAS;YACb,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,CAAA;YAC9D,IAAI,CAAC,OAAO,EAAE,CAAC;gBACb,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAA;YACtC,CAAC;YAED,OAAO,aAAa,CAAC;gBACnB,MAAM;gBACN,cAAc,EAAE,OAAO,CAAC,cAAc;gBACtC,SAAS;gBACT,QAAQ,EAAE,KAAK,IAAI,EAAE;oBACnB,MAAM,aAAa,GAAG,MAAM,qBAAqB,CAAC,gBAAgB,EAAE,CAAA;oBACpE,OAAO,aAAa,EAAE,KAAK,IAAI,EAAE,CAAA;gBACnC,CAAC;aACF,CAAC,CAAA;QACJ,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/_esm/index.js

@@ -1,9 +1,14 @@
+import { isReactNative } from './utils/platform.js';
+if (isReactNative()) {
+    // biome-ignore lint/suspicious/noConsole: Warning users if they try to use the web entry on React Native.
+    console.warn('@zerodev/wallet-core: the web entry was loaded in a React Native runtime. Check that your metro.config.js has `unstable_enablePackageExports: true` and `"react-native"` in `unstable_conditionNames`.');
+}
 // Actions
 export { 
 // Auth actions
-authenticateWithEmail, authenticateWithOAuth, 
+authenticateWithEmail, authenticateWithOAuth, getAuthenticators, 
 // Wallet actions
-getUserWallet, getWhoami, loginWithOTP, registerWithOTP, signRawPayload, signTransaction, } from './actions/index.js';
+getUserWallet, getWhoami, loginWithOTP, registerWithOTP, sign7702Authorization, signMessage, signTransaction, signTypedDataV4, signUserOperation, } from './actions/index.js';
 // Adapters
 export { toViemAccount } from './adapters/viem.js';
 // Client decorators
@@ -12,12 +17,15 @@ export { zeroDevWalletActions } from './client/decorators/client.js';
 export { createBaseClient, createClient, zeroDevWalletTransport, } from './client/index.js';
 // Constants
 export { KMS_SERVER_URL } from './constants.js';
-// Core
-export { createZeroDevWallet } from './core/createZeroDevWallet.js';
 // Stampers
-export { createIframeStamper, createIndexedDbStamper, createWebauthnStamper, } from './stampers/index.js';
+export { createIframeStamper } from './stampers/iframeStamper.js';
 export { exportPrivateKey } from './utils/exportPrivateKey.js';
 export { exportWallet } from './utils/exportWallet.js';
 // Utils
 export { normalizeTimestamp } from './utils/utils.js';
+// Core — bare specifier resolves web defaults (IndexedDB, WebAuthn, session
+// storage, hostname-derived rpId) before forwarding to the shared factory.
+// RN consumers go through `@zerodev/wallet-core/react-native`, which exposes
+// the strict `ZeroDevWalletConfig` (= core's required-fields shape) directly.
+export { createZeroDevWallet, } from './web/createZeroDevWallet.js';
 //# sourceMappingURL=index.js.map

package/dist/_esm/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAuBA,UAAU;AACV,OAAO;AACL,eAAe;AACf,qBAAqB,EACrB,qBAAqB;AACrB,iBAAiB;AACjB,aAAa,EACb,SAAS,EACT,YAAY,EACZ,eAAe,EACf,cAAc,EACd,eAAe,GAChB,MAAM,oBAAoB,CAAA;AAE3B,WAAW;AACX,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,oBAAoB;AACpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AAEpE,SAAS;AACT,OAAO,EACL,gBAAgB,EAChB,YAAY,EAEZ,sBAAsB,GACvB,MAAM,mBAAmB,CAAA;AAC1B,YAAY;AACZ,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAM/C,OAAO;AACP,OAAO,EAAE,mBAAmB,EAAE,MAAM,+BAA+B,CAAA;AACnE,WAAW;AACX,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,qBAAqB,GACtB,MAAM,qBAAqB,CAAA;AAW5B,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,QAAQ;AACR,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,IAAI,aAAa,EAAE,EAAE,CAAC;IACpB,0GAA0G;IAC1G,OAAO,CAAC,IAAI,CACV,wMAAwM,CACzM,CAAA;AACH,CAAC;AAoCD,UAAU;AACV,OAAO;AACL,eAAe;AACf,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB;AACjB,iBAAiB;AACjB,aAAa,EACb,SAAS,EACT,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,WAAW,EACX,eAAe,EACf,eAAe,EACf,iBAAiB,GAClB,MAAM,oBAAoB,CAAA;AAE3B,WAAW;AACX,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,oBAAoB;AACpB,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AAOpE,SAAS;AACT,OAAO,EACL,gBAAgB,EAChB,YAAY,EAEZ,sBAAsB,GACvB,MAAM,mBAAmB,CAAA;AAC1B,YAAY;AACZ,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAK/C,WAAW;AACX,OAAO,EAAE,mBAAmB,EAAE,MAAM,6BAA6B,CAAA;AAcjE,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,QAAQ;AACR,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA;AACrD,4EAA4E;AAC5E,2EAA2E;AAC3E,6EAA6E;AAC7E,8EAA8E;AAC9E,OAAO,EACL,mBAAmB,GAEpB,MAAM,8BAA8B,CAAA"}

package/dist/_esm/index.native.js

@@ -0,0 +1,19 @@
+import { isReactNative } from './utils/platform.js';
+if (!isReactNative()) {
+    // biome-ignore lint/suspicious/noConsole: Warning users if they try to use the web entry on React Native.
+    console.warn('@zerodev/wallet-core/react-native: the React Native entry was loaded outside a React Native runtime. If this is a non-RN context, import `@zerodev/wallet-core` (the bare specifier) instead.');
+}
+export { authenticateWithEmail, authenticateWithOAuth, getAuthenticators, getUserWallet, getWhoami, loginWithOTP, registerWithOTP, sign7702Authorization, signMessage, signTransaction, signTypedDataV4, signUserOperation, } from './actions/index.js';
+export { toViemAccount } from './adapters/viem.js';
+export { zeroDevWalletActions } from './client/decorators/client.js';
+export { createBaseClient, createClient, zeroDevWalletTransport, } from './client/index.js';
+export { KMS_SERVER_URL } from './constants.js';
+// RN entry re-exports through a thin wrapper that auto-injects the
+// `Origin: https://${rpId}` header on Turnkey requests. `ZeroDevWalletConfig`
+// matches the strict `ZeroDevWalletConfigCore` shape, so RN consumers still
+// get compile-time enforcement of the four required adapter fields.
+export { createZeroDevWallet, } from './native/createZeroDevWallet.js';
+export { exportPrivateKey } from './utils/exportPrivateKey.js';
+export { exportWallet } from './utils/exportWallet.js';
+export { normalizeTimestamp } from './utils/utils.js';
+//# sourceMappingURL=index.native.js.map

package/dist/_esm/index.native.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.native.js","sourceRoot":"","sources":["../../src/index.native.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAA;AAEnD,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;IACrB,0GAA0G;IAC1G,OAAO,CAAC,IAAI,CACV,+LAA+L,CAChM,CAAA;AACH,CAAC;AAsCD,OAAO,EACL,qBAAqB,EACrB,qBAAqB,EACrB,iBAAiB,EACjB,aAAa,EACb,SAAS,EACT,YAAY,EACZ,eAAe,EACf,qBAAqB,EACrB,WAAW,EACX,eAAe,EACf,eAAe,EACf,iBAAiB,GAClB,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAElD,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAA;AAOpE,OAAO,EACL,gBAAgB,EAChB,YAAY,EAEZ,sBAAsB,GACvB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAA;AAK/C,mEAAmE;AACnE,8EAA8E;AAC9E,4EAA4E;AAC5E,oEAAoE;AACpE,OAAO,EACL,mBAAmB,GAEpB,MAAM,iCAAiC,CAAA;AAYxC,OAAO,EAAE,gBAAgB,EAAE,MAAM,6BAA6B,CAAA;AAC9D,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAA"}

package/dist/_esm/native/createZeroDevWallet.js

@@ -0,0 +1,10 @@
+import { createZeroDevWalletCore, } from '../core/createZeroDevWalletCore.js';
+export async function createZeroDevWallet(config) {
+    return createZeroDevWalletCore({
+        ...config,
+        fetchOptions: config.fetchOptions ?? {
+            headers: { Origin: `https://${config.rpId}` },
+        },
+    });
+}
+//# sourceMappingURL=createZeroDevWallet.js.map

package/dist/_esm/native/createZeroDevWallet.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"createZeroDevWallet.js","sourceRoot":"","sources":["../../../src/native/createZeroDevWallet.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,GAGxB,MAAM,oCAAoC,CAAA;AAY3C,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAA2B;IAE3B,OAAO,uBAAuB,CAAC;QAC7B,GAAG,MAAM;QACT,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI;YACnC,OAAO,EAAE,EAAE,MAAM,EAAE,WAAW,MAAM,CAAC,IAAI,EAAE,EAAE;SAC9C;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/native/stampers/passkey.js

@@ -0,0 +1,27 @@
+import { createPasskey, PasskeyStamper as TurnkeyPasskeyStamper, } from '@turnkey/react-native-passkey-stamper';
+import { v4 as uuidv4 } from 'uuid';
+export async function createReactNativePasskeyStamper({ rpId, }) {
+    const inner = new TurnkeyPasskeyStamper({ rpId });
+    return {
+        async stamp(payload) {
+            return await inner.stamp(payload);
+        },
+        async clear() { },
+        async register({ rp, userName }) {
+            const { attestation, challenge: encodedChallenge } = await createPasskey({
+                rp: {
+                    id: rp.id,
+                    name: rp.name ?? 'Turnkey',
+                },
+                user: {
+                    id: uuidv4(),
+                    name: userName,
+                    displayName: userName,
+                },
+                authenticatorName: userName ?? 'End-User Passkey',
+            });
+            return { attestation, encodedChallenge };
+        },
+    };
+}
+//# sourceMappingURL=passkey.js.map

package/dist/_esm/native/stampers/passkey.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"passkey.js","sourceRoot":"","sources":["../../../../src/native/stampers/passkey.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EACb,cAAc,IAAI,qBAAqB,GACxC,MAAM,uCAAuC,CAAA;AAC9C,OAAO,EAAE,EAAE,IAAI,MAAM,EAAE,MAAM,MAAM,CAAA;AAMnC,MAAM,CAAC,KAAK,UAAU,+BAA+B,CAAC,EACpD,IAAI,GAGL;IACC,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC,EAAE,IAAI,EAAE,CAAC,CAAA;IAEjD,OAAO;QACL,KAAK,CAAC,KAAK,CAAC,OAAe;YACzB,OAAO,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QACnC,CAAC;QACD,KAAK,CAAC,KAAK,KAAI,CAAC;QAChB,KAAK,CAAC,QAAQ,CAAC,EAAE,EAAE,EAAE,QAAQ,EAA8B;YACzD,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,gBAAgB,EAAE,GAAG,MAAM,aAAa,CAAC;gBACvE,EAAE,EAAE;oBACF,EAAE,EAAE,EAAE,CAAC,EAAE;oBACT,IAAI,EAAE,EAAE,CAAC,IAAI,IAAI,SAAS;iBAC3B;gBACD,IAAI,EAAE;oBACJ,EAAE,EAAE,MAAM,EAAE;oBACZ,IAAI,EAAE,QAAQ;oBACd,WAAW,EAAE,QAAQ;iBACtB;gBACD,iBAAiB,EAAE,QAAQ,IAAI,kBAAkB;aAClD,CAAC,CAAA;YACF,OAAO,EAAE,WAAW,EAAE,gBAAgB,EAAE,CAAA;QAC1C,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/_esm/native/stampers/secureStore.js

@@ -0,0 +1,120 @@
+import { ApiKeyStamper, SignatureFormat } from '@turnkey/api-key-stamper';
+import { generateP256KeyPair } from '@turnkey/crypto';
+import * as SecureStore from 'expo-secure-store';
+const PUBLIC_KEY = 'zerodev.publicKey';
+const PRIVATE_KEY = 'zerodev.privateKey';
+class SecureStoreStamperInner {
+    constructor() {
+        Object.defineProperty(this, "publicKeyHex", {
+            enumerable: true,
+            configurable: true,
+            writable: true,
+            value: null
+        });
+    }
+    async init() {
+        const publicKey = await SecureStore.getItemAsync(PUBLIC_KEY);
+        const privateKey = await SecureStore.getItemAsync(PRIVATE_KEY);
+        if (publicKey && privateKey) {
+            this.publicKeyHex = publicKey;
+        }
+        else {
+            await this.resetKeyPair();
+        }
+    }
+    async getPublicKey() {
+        return this.publicKeyHex;
+    }
+    async resetKeyPair(externalKeyPair) {
+        await this.clear();
+        const pair = externalKeyPair ?? generateP256KeyPair();
+        await SecureStore.setItemAsync(PUBLIC_KEY, pair.publicKey);
+        await SecureStore.setItemAsync(PRIVATE_KEY, pair.privateKey);
+        this.publicKeyHex = pair.publicKey;
+    }
+    async getTurnkeyApiKeyStamper() {
+        if (!this.publicKeyHex) {
+            throw new Error('Key not initialized. Call init() or resetKeyPair() first.');
+        }
+        const privateKey = await SecureStore.getItemAsync(PRIVATE_KEY);
+        if (!privateKey) {
+            throw new Error('No private key found in secure store.');
+        }
+        return new ApiKeyStamper({
+            apiPublicKey: this.publicKeyHex,
+            apiPrivateKey: privateKey,
+        });
+    }
+    async stamp(payload) {
+        const stamper = await this.getTurnkeyApiKeyStamper();
+        const { stampHeaderName, stampHeaderValue } = await stamper.stamp(payload);
+        return { stampHeaderName, stampHeaderValue };
+    }
+    async sign(payload) {
+        const stamper = await this.getTurnkeyApiKeyStamper();
+        return stamper.sign(payload, SignatureFormat.Der);
+    }
+    async clear() {
+        await SecureStore.deleteItemAsync(PUBLIC_KEY);
+        await SecureStore.deleteItemAsync(PRIVATE_KEY);
+        this.publicKeyHex = null;
+    }
+}
+async function warmApiKeyStamperForMetroDev(inner) {
+    // `__DEV__` is a global set by React Native's Metro; read it via globalThis
+    // so this file needs no ambient `.d.ts` (which would conflict with RN's own
+    // typings when both happen to be in scope, e.g. in the editor).
+    if (!globalThis.__DEV__)
+        return;
+    // In Expo dev, Turnkey's API key stamper loads its React Native signer with a
+    // dynamic import the first time `stamp()` runs. OTP verification is usually
+    // the first code path that stamps a payload, and if the app was backgrounded
+    // while the user copied the code, Metro can serve that lazy module after
+    // foregrounding and trigger a full JS reload. Warming the stamper during dev
+    // startup makes Metro load the signer while the app is foregrounded; production
+    // builds do not use Metro and skip this block via `__DEV__`.
+    try {
+        await inner.stamp('{"purpose":"metro-dev-warmup"}');
+    }
+    catch (error) {
+        // biome-ignore lint/suspicious/noConsole: This only runs in dev mode
+        console.warn('Failed to warm API key stamper in dev:', error);
+    }
+}
+export async function createSecureStoreStamper() {
+    const inner = new SecureStoreStamperInner();
+    await inner.init();
+    await warmApiKeyStamperForMetroDev(inner);
+    let pendingKeyPair = null;
+    return {
+        async getPublicKey() {
+            return inner.getPublicKey();
+        },
+        async stamp(payload) {
+            return inner.stamp(payload);
+        },
+        async sign(payload) {
+            return inner.sign(payload);
+        },
+        async clear() {
+            await inner.clear();
+        },
+        async resetKeyPair() {
+            pendingKeyPair = null;
+            await inner.resetKeyPair();
+        },
+        async prepareKeyRotation() {
+            const keyPair = generateP256KeyPair();
+            pendingKeyPair = keyPair;
+            return keyPair.publicKey;
+        },
+        async commitKeyRotation() {
+            if (!pendingKeyPair) {
+                throw new Error('No pending key rotation to commit');
+            }
+            await inner.resetKeyPair(pendingKeyPair);
+            pendingKeyPair = null;
+        },
+    };
+}
+//# sourceMappingURL=secureStore.js.map

package/dist/_esm/native/stampers/secureStore.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"secureStore.js","sourceRoot":"","sources":["../../../../src/native/stampers/secureStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,0BAA0B,CAAA;AACzE,OAAO,EAAE,mBAAmB,EAAE,MAAM,iBAAiB,CAAA;AACrD,OAAO,KAAK,WAAW,MAAM,mBAAmB,CAAA;AAGhD,MAAM,UAAU,GAAG,mBAAmB,CAAA;AACtC,MAAM,WAAW,GAAG,oBAAoB,CAAA;AAExC,MAAM,uBAAuB;IAA7B;QACU;;;;mBAA8B,IAAI;WAAA;IAmE5C,CAAC;IAjEC,KAAK,CAAC,IAAI;QACR,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,UAAU,CAAC,CAAA;QAC5D,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QAE9D,IAAI,SAAS,IAAI,UAAU,EAAE,CAAC;YAC5B,IAAI,CAAC,YAAY,GAAG,SAAS,CAAA;QAC/B,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,CAAC,YAAY,EAAE,CAAA;QAC3B,CAAC;IACH,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,OAAO,IAAI,CAAC,YAAY,CAAA;IAC1B,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,eAGlB;QACC,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;QAElB,MAAM,IAAI,GAAG,eAAe,IAAI,mBAAmB,EAAE,CAAA;QAErD,MAAM,WAAW,CAAC,YAAY,CAAC,UAAU,EAAE,IAAI,CAAC,SAAS,CAAC,CAAA;QAC1D,MAAM,WAAW,CAAC,YAAY,CAAC,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,CAAA;QAE5D,IAAI,CAAC,YAAY,GAAG,IAAI,CAAC,SAAS,CAAA;IACpC,CAAC;IAEO,KAAK,CAAC,uBAAuB;QACnC,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CACb,2DAA2D,CAC5D,CAAA;QACH,CAAC;QAED,MAAM,UAAU,GAAG,MAAM,WAAW,CAAC,YAAY,CAAC,WAAW,CAAC,CAAA;QAC9D,IAAI,CAAC,UAAU,EAAE,CAAC;YAChB,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;QAC1D,CAAC;QAED,OAAO,IAAI,aAAa,CAAC;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;YAC/B,aAAa,EAAE,UAAU;SAC1B,CAAC,CAAA;IACJ,CAAC;IAED,KAAK,CAAC,KAAK,CACT,OAAe;QAEf,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAA;QACpD,MAAM,EAAE,eAAe,EAAE,gBAAgB,EAAE,GAAG,MAAM,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC1E,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,CAAA;IAC9C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,OAAe;QACxB,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,uBAAuB,EAAE,CAAA;QACpD,OAAO,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,eAAe,CAAC,GAAG,CAAC,CAAA;IACnD,CAAC;IAED,KAAK,CAAC,KAAK;QACT,MAAM,WAAW,CAAC,eAAe,CAAC,UAAU,CAAC,CAAA;QAC7C,MAAM,WAAW,CAAC,eAAe,CAAC,WAAW,CAAC,CAAA;QAC9C,IAAI,CAAC,YAAY,GAAG,IAAI,CAAA;IAC1B,CAAC;CACF;AAED,KAAK,UAAU,4BAA4B,CACzC,KAA8B;IAE9B,4EAA4E;IAC5E,4EAA4E;IAC5E,gEAAgE;IAChE,IAAI,CAAE,UAAoC,CAAC,OAAO;QAAE,OAAM;IAE1D,8EAA8E;IAC9E,4EAA4E;IAC5E,6EAA6E;IAC7E,yEAAyE;IACzE,6EAA6E;IAC7E,gFAAgF;IAChF,6DAA6D;IAC7D,IAAI,CAAC;QACH,MAAM,KAAK,CAAC,KAAK,CAAC,gCAAgC,CAAC,CAAA;IACrD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qEAAqE;QACrE,OAAO,CAAC,IAAI,CAAC,wCAAwC,EAAE,KAAK,CAAC,CAAA;IAC/D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,wBAAwB;IAC5C,MAAM,KAAK,GAAG,IAAI,uBAAuB,EAAE,CAAA;IAC3C,MAAM,KAAK,CAAC,IAAI,EAAE,CAAA;IAClB,MAAM,4BAA4B,CAAC,KAAK,CAAC,CAAA;IAEzC,IAAI,cAAc,GAAqD,IAAI,CAAA;IAE3E,OAAO;QACL,KAAK,CAAC,YAAY;YAChB,OAAO,KAAK,CAAC,YAAY,EAAE,CAAA;QAC7B,CAAC;QACD,KAAK,CAAC,KAAK,CAAC,OAAe;YACzB,OAAO,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAA;QAC7B,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,OAAe;YACxB,OAAO,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;QAC5B,CAAC;QACD,KAAK,CAAC,KAAK;YACT,MAAM,KAAK,CAAC,KAAK,EAAE,CAAA;QACrB,CAAC;QACD,KAAK,CAAC,YAAY;YAChB,cAAc,GAAG,IAAI,CAAA;YACrB,MAAM,KAAK,CAAC,YAAY,EAAE,CAAA;QAC5B,CAAC;QACD,KAAK,CAAC,kBAAkB;YACtB,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAA;YACrC,cAAc,GAAG,OAAO,CAAA;YACxB,OAAO,OAAO,CAAC,SAAS,CAAA;QAC1B,CAAC;QACD,KAAK,CAAC,iBAAiB;YACrB,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;YACtD,CAAC;YACD,MAAM,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,CAAA;YACxC,cAAc,GAAG,IAAI,CAAA;QACvB,CAAC;KACF,CAAA;AACH,CAAC"}

package/dist/_esm/native/storage/asyncStorage.js

@@ -0,0 +1,13 @@
+import * as AsyncStorageNS from '@react-native-async-storage/async-storage';
+// CJS package whose `.d.ts` declares `export default AsyncStorage`. Our tsconfig
+// keeps `esModuleInterop: false` (and `verbatimModuleSyntax: true`), so a plain
+// `import AsyncStorage from '...'` types as the module namespace instead of
+// the default. Unwrap explicitly. At runtime Metro returns the default object
+// either way; this only affects the static type.
+const AsyncStorage = AsyncStorageNS.default;
+export const asyncStorageAdapter = {
+    getItem: (key) => AsyncStorage.getItem(key),
+    setItem: (key, value) => AsyncStorage.setItem(key, value),
+    removeItem: (key) => AsyncStorage.removeItem(key),
+};
+//# sourceMappingURL=asyncStorage.js.map