@zerodev/wallet-core 0.0.1-alpha.9 → 0.0.1

package/dist/_esm/actions/auth/authenticateWithEmail.js.map

@@ -1 +1 @@
-{"version":3,"file":"authenticateWithEmail.js","sourceRoot":"","sources":["../../../../src/actions/auth/authenticateWithEmail.ts"],"names":[],"mappings":"AA+BA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,MAAuC;IAEvC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAA;IAExE,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,GAAG,SAAS,mBAAmB;QACrC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE;YACJ,KAAK;YACL,kBAAkB;YAClB,eAAe;YACf,SAAS;SACV;KACF,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"authenticateWithEmail.js","sourceRoot":"","sources":["../../../../src/actions/auth/authenticateWithEmail.ts"],"names":[],"mappings":"AAwBA;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,MAAuC;IAEvC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAE,GAAG,MAAM,CAAA;IAEpD,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,GAAG,SAAS,mBAAmB;QACrC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE;YACJ,KAAK;YACL,eAAe;YACf,SAAS;SACV;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/auth/authenticateWithOAuth.js

@@ -1,9 +1,9 @@
 /**
- * Authenticates a user with OAuth using cookie-based backend flow
+ * Authenticates a user with OAuth using a server-side session ID
  *
- * The backend reads the OAuth session from a cookie set during the OAuth flow.
- * This requires the OAuth popup flow to complete first via the backend's
- * /oauth/google/login endpoint.
+ * The backend stores the OAuth session server-side and returns a session ID
+ * via the callback URL. The SDK extracts this session ID and sends it in
+ * the request body.
  *
  * @param client - The ZeroDev Wallet client
  * @param params - The parameters for OAuth authentication
@@ -14,16 +14,17 @@
  * const result = await authenticateWithOAuth(client, {
  *   provider: 'google',
  *   projectId: 'proj_456',
+ *   sessionId: 'abc123',
+ *   popSignature: '3045022100...',
  * });
  * ```
  */
 export async function authenticateWithOAuth(client, params) {
-    const { projectId } = params;
+    const { projectId, sessionId, popSignature } = params;
     return await client.request({
         path: `${projectId}/auth/oauth`,
         method: 'POST',
-        body: null,
-        credentials: 'include',
+        body: { sessionId, popSignature },
     });
 }
 //# sourceMappingURL=authenticateWithOAuth.js.map

package/dist/_esm/actions/auth/authenticateWithOAuth.js.map

@@ -1 +1 @@
-{"version":3,"file":"authenticateWithOAuth.js","sourceRoot":"","sources":["../../../../src/actions/auth/authenticateWithOAuth.ts"],"names":[],"mappings":"AAoBA;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,MAAuC;IAEvC,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,CAAA;IAE5B,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,GAAG,SAAS,aAAa;QAC/B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,IAAI;QACV,WAAW,EAAE,SAAS;KACvB,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"authenticateWithOAuth.js","sourceRoot":"","sources":["../../../../src/actions/auth/authenticateWithOAuth.ts"],"names":[],"mappings":"AAwBA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,MAAuC;IAEvC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,GAAG,MAAM,CAAA;IAErD,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,GAAG,SAAS,aAAa;QAC/B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE;KAClC,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/auth/getAuthProxyConfigId.js

@@ -0,0 +1,13 @@
+/**
+ * Fetches the auth proxy config ID from the backend
+ *
+ * @param client - The ZeroDev Wallet client
+ * @returns The auth proxy config ID
+ */
+export async function getAuthProxyConfigId(client) {
+    return await client.request({
+        path: 'server-info/auth-proxy-id',
+        method: 'GET',
+    });
+}
+//# sourceMappingURL=getAuthProxyConfigId.js.map

package/dist/_esm/actions/auth/getAuthProxyConfigId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthProxyConfigId.js","sourceRoot":"","sources":["../../../../src/actions/auth/getAuthProxyConfigId.ts"],"names":[],"mappings":"AAMA;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,MAAc;IAEd,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,KAAK;KACd,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/auth/getAuthenticators.js

@@ -0,0 +1,36 @@
+/**
+ * Fetches all authenticators (oauths, passkeys, emailContacts, apiKeys) for
+ * the authenticated user within the given project/sub-organization.
+ *
+ * Corresponds to `POST /api/v1/{projectId}/authenticators`.
+ *
+ * @param client - The ZeroDev Wallet client
+ * @param params - The parameters for the authenticators request
+ * @returns The user's authenticators grouped by type
+ *
+ * @example
+ * ```ts
+ * const authenticators = await getAuthenticators(client, {
+ *   subOrganizationId: 'suborg_123',
+ *   projectId: 'proj_456',
+ *   token: 'session_token_abc',
+ * });
+ * console.log(authenticators.oauths, authenticators.passkeys);
+ * ```
+ */
+export async function getAuthenticators(client, params) {
+    const { projectId, token } = params;
+    // GET behind StampCheckUser: the backend resolves the user from the stamped
+    // credential (+ session JWT), so no body / sub-org is sent. The stamp signs
+    // the X-Timestamp value (see transport `stampPostion: 'timestamp'`).
+    return await client.request({
+        path: `${projectId}/authenticators`,
+        method: 'GET',
+        headers: {
+            Authorization: `Bearer ${token}`,
+        },
+        stamp: true,
+        stampPostion: 'timestamp',
+    });
+}
+//# sourceMappingURL=getAuthenticators.js.map

package/dist/_esm/actions/auth/getAuthenticators.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getAuthenticators.js","sourceRoot":"","sources":["../../../../src/actions/auth/getAuthenticators.ts"],"names":[],"mappings":"AAkDA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,MAAmC;IAEnC,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;IAEnC,4EAA4E;IAC5E,4EAA4E;IAC5E,qEAAqE;IACrE,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,GAAG,SAAS,iBAAiB;QACnC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;QACD,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/auth/getOAuthLoginUrl.js

@@ -0,0 +1,23 @@
+/**
+ * Fetches the Google OAuth authorization URL from the backend.
+ *
+ * The SDK must verify the returned URL's `nonce` against
+ * `sha256(utf8(publicKey))` (and the host is `accounts.google.com`)
+ * before opening it in a popup — the backend is not a trusted party.
+ * See audit finding TOB-KMS-1.
+ */
+export async function getOAuthLoginUrl(client, params) {
+    if (params.provider !== 'google') {
+        throw new Error(`Unsupported OAuth provider: ${params.provider}`);
+    }
+    const query = new URLSearchParams({
+        project_id: params.projectId,
+        pub_key: params.publicKey.replace(/^0x/, '').toLowerCase(),
+        return_to: params.returnTo,
+    });
+    return await client.request({
+        path: `oauth/google/login-url?${query.toString()}`,
+        method: 'GET',
+    });
+}
+//# sourceMappingURL=getOAuthLoginUrl.js.map

package/dist/_esm/actions/auth/getOAuthLoginUrl.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getOAuthLoginUrl.js","sourceRoot":"","sources":["../../../../src/actions/auth/getOAuthLoginUrl.ts"],"names":[],"mappings":"AAuBA;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,MAAc,EACd,MAAkC;IAElC,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CAAC,+BAA+B,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAA;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC;QAChC,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,OAAO,EAAE,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,WAAW,EAAE;QAC1D,SAAS,EAAE,MAAM,CAAC,QAAQ;KAC3B,CAAC,CAAA;IACF,OAAO,MAAM,MAAM,CAAC,OAAO,CAAS;QAClC,IAAI,EAAE,0BAA0B,KAAK,CAAC,QAAQ,EAAE,EAAE;QAClD,MAAM,EAAE,KAAK;KACd,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/auth/getParentOrgId.js

@@ -0,0 +1,17 @@
+/**
+ * Fetches the Turnkey parent (base) organization ID from the backend.
+ *
+ * Stamp-login payloads must be signed against this org — the backend relays the
+ * stamp under the parent org and derives the sub-org from the credential. The
+ * SDK fetches it (rather than hardcoding) so it works across environments
+ * (prod/staging/local) without a per-env override.
+ *
+ * Corresponds to `GET /api/v1/server-info/parent-org-id`.
+ */
+export async function getParentOrgId(client) {
+    return await client.request({
+        path: 'server-info/parent-org-id',
+        method: 'GET',
+    });
+}
+//# sourceMappingURL=getParentOrgId.js.map

package/dist/_esm/actions/auth/getParentOrgId.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"getParentOrgId.js","sourceRoot":"","sources":["../../../../src/actions/auth/getParentOrgId.ts"],"names":[],"mappings":"AAOA;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc;IAEd,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,2BAA2B;QACjC,MAAM,EAAE,KAAK;KACd,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/auth/getWhoami.js

@@ -1,5 +1,10 @@
+import { canonicalizeEx } from 'json-canonicalize';
 /**
- * Gets the current user information
+ * Gets the current user information.
+ *
+ * The whoami endpoint requires two stamps:
+ * 1. An inner stamp over the payload (for Turnkey verification) embedded in the body
+ * 2. An outer stamp over the full body (for KMS middleware) in the X-Stamp header
  *
  * @param client - The ZeroDev Wallet client
  * @param params - The parameters for the whoami request
@@ -9,20 +14,37 @@
  * ```ts
  * const userInfo = await getWhoami(client, {
  *   organizationId: 'org_123',
- *   projectId: 'proj_456'
+ *   projectId: 'proj_456',
+ *   token: 'session_token',
  * });
  * console.log(userInfo.userId); // 'user_789'
  * ```
  */
 export async function getWhoami(client, params) {
-    const { organizationId, projectId } = params;
+    const { organizationId, projectId, token } = params;
+    // Step 1: Inner stamp over the payload (for Turnkey verification)
+    const innerBody = { organizationId };
+    const innerBodyString = canonicalizeEx(innerBody);
+    const innerStamp = await client.apiKeyStamper.stamp(innerBodyString);
+    // Step 2: Build full body with inner stamp embedded
+    const fullBody = {
+        ...innerBody,
+        stamp: {
+            stampHeaderName: innerStamp.stampHeaderName,
+            stampHeaderValue: innerStamp.stampHeaderValue,
+        },
+    };
+    // Step 3: Outer stamp over full body (for KMS middleware)
+    const fullBodyString = canonicalizeEx(fullBody);
+    const outerStamp = await client.apiKeyStamper.stamp(fullBodyString);
     return await client.request({
         path: `${projectId}/whoami`,
         method: 'POST',
-        body: {
-            organizationId,
+        body: fullBody,
+        headers: {
+            [outerStamp.stampHeaderName]: outerStamp.stampHeaderValue,
+            ...(token && { Authorization: `Bearer ${token}` }),
         },
-        stamp: true,
     });
 }
 //# sourceMappingURL=getWhoami.js.map

package/dist/_esm/actions/auth/getWhoami.js.map

@@ -1 +1 @@
-{"version":3,"file":"getWhoami.js","sourceRoot":"","sources":["../../../../src/actions/auth/getWhoami.ts"],"names":[],"mappings":"AAoBA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,MAA2B;IAE3B,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,MAAM,CAAA;IAE5C,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,GAAG,SAAS,SAAS;QAC3B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE;YACJ,cAAc;SACf;QACD,KAAK,EAAE,IAAI;KACZ,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"getWhoami.js","sourceRoot":"","sources":["../../../../src/actions/auth/getWhoami.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAuBlD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAAc,EACd,MAA2B;IAE3B,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;IAEnD,kEAAkE;IAClE,MAAM,SAAS,GAAG,EAAE,cAAc,EAAE,CAAA;IACpC,MAAM,eAAe,GAAG,cAAc,CAAC,SAAS,CAAC,CAAA;IACjD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;IAEpE,oDAAoD;IACpD,MAAM,QAAQ,GAAG;QACf,GAAG,SAAS;QACZ,KAAK,EAAE;YACL,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;SAC9C;KACF,CAAA;IAED,0DAA0D;IAC1D,MAAM,cAAc,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IAEnE,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,GAAG,SAAS,SAAS;QAC3B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC,gBAAgB;YACzD,GAAG,CAAC,KAAK,IAAI,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,CAAC;SACnD;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/auth/index.js

@@ -1,6 +1,9 @@
 export { authenticateWithEmail, } from './authenticateWithEmail.js';
 export { authenticateWithOAuth, } from './authenticateWithOAuth.js';
-export { getUserEmail, } from './getUserEmail.js';
+export { getAuthenticators, } from './getAuthenticators.js';
+export { getAuthProxyConfigId, } from './getAuthProxyConfigId.js';
+export { getOAuthLoginUrl, } from './getOAuthLoginUrl.js';
+export { getParentOrgId, } from './getParentOrgId.js';
 export { getWhoami, } from './getWhoami.js';
 export { loginWithOTP, } from './loginWithOTP.js';
 export { loginWithStamp, } from './loginWithStamp.js';

package/dist/_esm/actions/auth/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,qBAAqB,GAEtB,MAAM,4BAA4B,CAAA;AAEnC,OAAO,EAGL,qBAAqB,GACtB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAGL,YAAY,GACb,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAGL,SAAS,GACV,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAGL,YAAY,GACb,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAGL,cAAc,GACf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAIL,eAAe,GAChB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAGL,mBAAmB,GACpB,MAAM,0BAA0B,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/auth/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,qBAAqB,GACtB,MAAM,4BAA4B,CAAA;AAEnC,OAAO,EAGL,qBAAqB,GACtB,MAAM,4BAA4B,CAAA;AACnC,OAAO,EAKL,iBAAiB,GAGlB,MAAM,wBAAwB,CAAA;AAC/B,OAAO,EAEL,oBAAoB,GACrB,MAAM,2BAA2B,CAAA;AAClC,OAAO,EAGL,gBAAgB,GACjB,MAAM,uBAAuB,CAAA;AAC9B,OAAO,EAEL,cAAc,GACf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAGL,SAAS,GACV,MAAM,gBAAgB,CAAA;AACvB,OAAO,EAGL,YAAY,GACb,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAGL,cAAc,GACf,MAAM,qBAAqB,CAAA;AAC5B,OAAO,EAIL,eAAe,GAChB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,EAGL,mBAAmB,GACpB,MAAM,0BAA0B,CAAA"}

package/dist/_esm/actions/auth/loginWithStamp.js

@@ -29,20 +29,23 @@ export async function loginWithStamp(client, params) {
         type: 'ACTIVITY_TYPE_STAMP_LOGIN',
     });
     let stamp;
-    if (stampWith === 'indexedDb') {
-        stamp = await client.indexedDbStamper.stamp(stampPayload);
+    if (stampWith === 'apiKey') {
+        stamp = await client.apiKeyStamper.stamp(stampPayload);
     }
-    else if (stampWith === 'webauthn') {
-        stamp = await client.webauthnStamper.stamp(stampPayload);
+    else if (stampWith === 'passkey') {
+        stamp = await client.passkeyStamper.stamp(stampPayload);
     }
     else {
-        stamp = await client.indexedDbStamper.stamp(stampPayload);
+        stamp = await client.apiKeyStamper.stamp(stampPayload);
     }
     return client.request({
         path: `${projectId}/auth/login/stamp`,
         method: 'POST',
+        // The sub-org id is intentionally not sent: the backend derives it from
+        // the stamped credential. `organizationId` (the parent org) is only
+        // signed into `stampPayload` above so the stamp matches the body the
+        // backend relays to Turnkey — it is not part of the wire request.
         body: {
-            subOrganizationId: organizationId,
             targetPublicKey,
             timestamp: timestampIso,
             stamp,

package/dist/_esm/actions/auth/loginWithStamp.js.map

@@ -1 +1 @@
-{"version":3,"file":"loginWithStamp.js","sourceRoot":"","sources":["../../../../src/actions/auth/loginWithStamp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAyBlD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,MAAgC;IAEhC,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,MAAM,CAAA;IAExE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC9B,MAAM,iBAAiB,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAA;IAChD,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAA;IAExD,MAAM,YAAY,GAAG,cAAc,CAAC;QAClC,cAAc;QACd,UAAU,EAAE;YACV,SAAS,EAAE,eAAe;SAC3B;QACD,WAAW,EAAE,iBAAiB;QAC9B,IAAI,EAAE,2BAA2B;KAClC,CAAC,CAAA;IACF,IAAI,KAAY,CAAA;IAChB,IAAI,SAAS,KAAK,WAAW,EAAE,CAAC;QAC9B,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAC3D,CAAC;SAAM,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;QACpC,KAAK,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAC1D,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,MAAM,MAAM,CAAC,gBAAgB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAC3D,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC;QACpB,IAAI,EAAE,GAAG,SAAS,mBAAmB;QACrC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE;YACJ,iBAAiB,EAAE,cAAc;YACjC,eAAe;YACf,SAAS,EAAE,YAAY;YACvB,KAAK;SACN;KACF,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"loginWithStamp.js","sourceRoot":"","sources":["../../../../src/actions/auth/loginWithStamp.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAqBlD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,MAAc,EACd,MAAgC;IAEhC,MAAM,EAAE,SAAS,EAAE,eAAe,EAAE,cAAc,EAAE,SAAS,EAAE,GAAG,MAAM,CAAA;IAExE,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IAC9B,MAAM,iBAAiB,GAAG,WAAW,CAAC,QAAQ,EAAE,CAAA;IAChD,MAAM,YAAY,GAAG,IAAI,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAA;IAExD,MAAM,YAAY,GAAG,cAAc,CAAC;QAClC,cAAc;QACd,UAAU,EAAE;YACV,SAAS,EAAE,eAAe;SAC3B;QACD,WAAW,EAAE,iBAAiB;QAC9B,IAAI,EAAE,2BAA2B;KAClC,CAAC,CAAA;IACF,IAAI,KAAY,CAAA;IAChB,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,KAAK,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACxD,CAAC;SAAM,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;QACnC,KAAK,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACzD,CAAC;SAAM,CAAC;QACN,KAAK,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IACxD,CAAC;IAED,OAAO,MAAM,CAAC,OAAO,CAAC;QACpB,IAAI,EAAE,GAAG,SAAS,mBAAmB;QACrC,MAAM,EAAE,MAAM;QACd,wEAAwE;QACxE,oEAAoE;QACpE,qEAAqE;QACrE,kEAAkE;QAClE,IAAI,EAAE;YACJ,eAAe;YACf,SAAS,EAAE,YAAY;YACvB,KAAK;SACN;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/auth/registerWithOTP.js

@@ -2,6 +2,10 @@
  * Initiates OTP (One-Time Password) authentication
  * This will send an OTP code to the specified contact method
  *
+ * OTP code length/format and, when enabled, the magic-link URL template are
+ * configured per-project on the backend (`wallet.otp_configs`). The client no
+ * longer sends customization fields — they are ignored server-side.
+ *
  * @param client - The ZeroDev Wallet client
  * @param params - The parameters for OTP initiation
  * @returns The result including otpId needed for verification
@@ -21,14 +25,13 @@
  * ```
  */
 export async function registerWithOTP(client, params) {
-    const { email, contact, projectId, emailCustomization } = params;
+    const { email, contact, projectId } = params;
     return await client.request({
         path: `${projectId}/auth/init/otp`,
         method: 'POST',
         body: {
             email,
             contact,
-            emailCustomization,
         },
     });
 }

package/dist/_esm/actions/auth/registerWithOTP.js.map

@@ -1 +1 @@
-{"version":3,"file":"registerWithOTP.js","sourceRoot":"","sources":["../../../../src/actions/auth/registerWithOTP.ts"],"names":[],"mappings":"AA0BA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,MAAiC;IAEjC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,GAAG,MAAM,CAAA;IAEhE,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,GAAG,SAAS,gBAAgB;QAClC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE;YACJ,KAAK;YACL,OAAO;YACP,kBAAkB;SACnB;KACF,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"registerWithOTP.js","sourceRoot":"","sources":["../../../../src/actions/auth/registerWithOTP.ts"],"names":[],"mappings":"AA6BA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,MAAiC;IAEjC,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,CAAA;IAE5C,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,GAAG,SAAS,gBAAgB;QAClC,MAAM,EAAE,MAAM;QACd,IAAI,EAAE;YACJ,KAAK;YACL,OAAO;SACR;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/auth/registerWithPasskey.js

@@ -8,7 +8,6 @@
  * @example
  * ```ts
  * const result = await registerWithPasskey(client, {
- *   email: 'user@example.com',
  *   projectId: 'proj_456',
  *   challenge: 'challenge',
  *   attestation: {
@@ -21,12 +20,11 @@
  * ```
  */
 export async function registerWithPasskey(client, params) {
-    const { email, projectId, challenge, attestation, encodedPublicKey } = params;
+    const { projectId, challenge, attestation, encodedPublicKey } = params;
     return client.request({
         path: `${projectId}/auth/register/passkey`,
         method: 'POST',
         body: {
-            email,
             attestation,
             challenge,
             encodedPublicKey,

package/dist/_esm/actions/auth/registerWithPasskey.js.map

@@ -1 +1 @@
-{"version":3,"file":"registerWithPasskey.js","sourceRoot":"","sources":["../../../../src/actions/auth/registerWithPasskey.ts"],"names":[],"mappings":"AAiCA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,MAAqC;IAErC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAA;IAE7E,OAAO,MAAM,CAAC,OAAO,CAAC;QACpB,IAAI,EAAE,GAAG,SAAS,wBAAwB;QAC1C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE;YACJ,KAAK;YACL,WAAW;YACX,SAAS;YACT,gBAAgB;SACjB;KACF,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"registerWithPasskey.js","sourceRoot":"","sources":["../../../../src/actions/auth/registerWithPasskey.ts"],"names":[],"mappings":"AA0BA;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,MAAc,EACd,MAAqC;IAErC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,WAAW,EAAE,gBAAgB,EAAE,GAAG,MAAM,CAAA;IAEtE,OAAO,MAAM,CAAC,OAAO,CAAC;QACpB,IAAI,EAAE,GAAG,SAAS,wBAAwB;QAC1C,MAAM,EAAE,MAAM;QACd,IAAI,EAAE;YACJ,WAAW;YACX,SAAS;YACT,gBAAgB;SACjB;KACF,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/index.js

@@ -1,5 +1,5 @@
 // Auth actions
-export { authenticateWithEmail, authenticateWithOAuth, getUserEmail, getWhoami, loginWithOTP, registerWithOTP, registerWithPasskey, } from './auth/index.js';
+export { authenticateWithEmail, authenticateWithOAuth, getAuthenticators, getAuthProxyConfigId, getOAuthLoginUrl, getParentOrgId, getWhoami, loginWithOTP, registerWithOTP, registerWithPasskey, } from './auth/index.js';
 // Wallet actions
-export { getUserWallet, signRawPayload, signTransaction, } from './wallet/index.js';
+export { getUserWallet, sign7702Authorization, signMessage, signTransaction, signTypedDataV4, signUserOperation, } from './wallet/index.js';
 //# sourceMappingURL=index.js.map

package/dist/_esm/actions/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/actions/index.ts"],"names":[],"mappings":"AAAA,eAAe;AACf,OAAO,EAKL,qBAAqB,EACrB,qBAAqB,EAMrB,YAAY,EACZ,SAAS,EAGT,YAAY,EAMZ,eAAe,EACf,mBAAmB,GACpB,MAAM,iBAAiB,CAAA;AAExB,iBAAiB;AACjB,OAAO,EAGL,aAAa,EAKb,cAAc,EACd,eAAe,GAChB,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/actions/index.ts"],"names":[],"mappings":"AAAA,eAAe;AACf,OAAO,EAML,qBAAqB,EACrB,qBAAqB,EAUrB,iBAAiB,EACjB,oBAAoB,EACpB,gBAAgB,EAChB,cAAc,EACd,SAAS,EAGT,YAAY,EAQZ,eAAe,EACf,mBAAmB,GACpB,MAAM,iBAAiB,CAAA;AAExB,iBAAiB;AACjB,OAAO,EAGL,aAAa,EAWb,qBAAqB,EACrB,WAAW,EACX,eAAe,EACf,eAAe,EACf,iBAAiB,GAClB,MAAM,mBAAmB,CAAA"}

package/dist/_esm/actions/wallet/getUserWallet.js

@@ -15,17 +15,17 @@
  * ```
  */
 export async function getUserWallet(client, params) {
-    const { organizationId, projectId, token } = params;
+    const { projectId, token } = params;
+    // GET behind StampCheckUser: user is resolved from the stamped credential
+    // (+ session JWT); no body sent. The stamp signs the X-Timestamp value.
     return await client.request({
         path: `${projectId}/user-wallet`,
-        body: {
-            organizationId,
-        },
+        method: 'GET',
         headers: {
             Authorization: `Bearer ${token}`,
         },
         stamp: true,
-        stampPostion: 'headers',
+        stampPostion: 'timestamp',
     });
 }
 //# sourceMappingURL=getUserWallet.js.map

package/dist/_esm/actions/wallet/getUserWallet.js.map

@@ -1 +1 @@
-{"version":3,"file":"getUserWallet.js","sourceRoot":"","sources":["../../../../src/actions/wallet/getUserWallet.ts"],"names":[],"mappings":"AAmBA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,MAA+B;IAE/B,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;IAEnD,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,GAAG,SAAS,cAAc;QAChC,IAAI,EAAE;YACJ,cAAc;SACf;QACD,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;QACD,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,SAAS;KACxB,CAAC,CAAA;AACJ,CAAC"}
+{"version":3,"file":"getUserWallet.js","sourceRoot":"","sources":["../../../../src/actions/wallet/getUserWallet.ts"],"names":[],"mappings":"AAmBA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,MAA+B;IAE/B,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;IAEnC,0EAA0E;IAC1E,wEAAwE;IACxE,OAAO,MAAM,MAAM,CAAC,OAAO,CAAC;QAC1B,IAAI,EAAE,GAAG,SAAS,cAAc;QAChC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;QACD,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,WAAW;KAC1B,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/wallet/index.js

@@ -1,4 +1,7 @@
 export { getUserWallet, } from './getUserWallet.js';
-export { signRawPayload, } from './signRawPayload.js';
+export { sign7702Authorization, } from './sign7702Authorization.js';
+export { signMessage, } from './signMessage.js';
 export { signTransaction, } from './signTransaction.js';
+export { signTypedDataV4, } from './signTypedDataV4.js';
+export { signUserOperation, } from './signUserOperation.js';
 //# sourceMappingURL=index.js.map

package/dist/_esm/actions/wallet/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/wallet/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,aAAa,GACd,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAGL,cAAc,GACf,MAAM,qBAAqB,CAAA;AAE5B,OAAO,EAGL,eAAe,GAChB,MAAM,sBAAsB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/actions/wallet/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,aAAa,GACd,MAAM,oBAAoB,CAAA;AAE3B,OAAO,EAGL,qBAAqB,GACtB,MAAM,4BAA4B,CAAA;AAEnC,OAAO,EAGL,WAAW,GACZ,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EAGL,eAAe,GAChB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAGL,eAAe,GAChB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAGL,iBAAiB,GAClB,MAAM,wBAAwB,CAAA"}

package/dist/_esm/actions/wallet/sign7702Authorization.js

@@ -0,0 +1,13 @@
+import { buildTurnkeyPayload, sendSigningRequest } from './signingUtils.js';
+export async function sign7702Authorization(client, params) {
+    const { organizationId, projectId, token, address, unsignedTransaction, hashedAuthorization, } = params;
+    const turnkeyPayload = buildTurnkeyPayload(organizationId, address, hashedAuthorization);
+    return sendSigningRequest(client, {
+        projectId,
+        token,
+        path: 'sign/7702-authorization',
+        turnkeyPayload,
+        bodyFields: { unsignedTransaction },
+    });
+}
+//# sourceMappingURL=sign7702Authorization.js.map

package/dist/_esm/actions/wallet/sign7702Authorization.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign7702Authorization.js","sourceRoot":"","sources":["../../../../src/actions/wallet/sign7702Authorization.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAmB3E,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAc,EACd,MAAuC;IAEvC,MAAM,EACJ,cAAc,EACd,SAAS,EACT,KAAK,EACL,OAAO,EACP,mBAAmB,EACnB,mBAAmB,GACpB,GAAG,MAAM,CAAA;IAEV,MAAM,cAAc,GAAG,mBAAmB,CACxC,cAAc,EACd,OAAO,EACP,mBAAmB,CACpB,CAAA;IAED,OAAO,kBAAkB,CAAC,MAAM,EAAE;QAChC,SAAS;QACT,KAAK;QACL,IAAI,EAAE,yBAAyB;QAC/B,cAAc;QACd,UAAU,EAAE,EAAE,mBAAmB,EAAE;KACpC,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/wallet/signMessage.js

@@ -0,0 +1,14 @@
+import { buildTurnkeyPayload, computeMessagePayloadHash, sendSigningRequest, } from './signingUtils.js';
+export async function signMessage(client, params) {
+    const { organizationId, projectId, token, address, message, encoding } = params;
+    const payloadHash = computeMessagePayloadHash(message, encoding);
+    const turnkeyPayload = buildTurnkeyPayload(organizationId, address, payloadHash);
+    return sendSigningRequest(client, {
+        projectId,
+        token,
+        path: 'sign/message',
+        turnkeyPayload,
+        bodyFields: { message, encoding },
+    });
+}
+//# sourceMappingURL=signMessage.js.map

package/dist/_esm/actions/wallet/signMessage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signMessage.js","sourceRoot":"","sources":["../../../../src/actions/wallet/signMessage.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,mBAAmB,EACnB,yBAAyB,EACzB,kBAAkB,GACnB,MAAM,mBAAmB,CAAA;AAmB1B,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAc,EACd,MAA6B;IAE7B,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GACpE,MAAM,CAAA;IAER,MAAM,WAAW,GAAG,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;IAChE,MAAM,cAAc,GAAG,mBAAmB,CACxC,cAAc,EACd,OAAO,EACP,WAAW,CACZ,CAAA;IAED,OAAO,kBAAkB,CAAC,MAAM,EAAE;QAChC,SAAS;QACT,KAAK;QACL,IAAI,EAAE,cAAc;QACpB,cAAc;QACd,UAAU,EAAE,EAAE,OAAO,EAAE,QAAQ,EAAE;KAClC,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/wallet/signTransaction.js

@@ -1,41 +1,14 @@
-/**
- * Signs a raw transaction with the user's wallet
- *
- * @param client - The ZeroDev Wallet client
- * @param params - The parameters for signing
- * @returns The signature
- *
- * @example
- * ```ts
- * const result = await signTransaction(client, {
- *   organizationId: 'org_123',
- *   projectId: 'proj_456',
- *   address: '0x123...',
- *   unsignedTransaction: 'abc123...',
- * });
- * console.log(result.signature); // '0x...'
- * ```
- */
+import { buildTurnkeyPayload, computeDataPayloadHash, sendSigningRequest, } from './signingUtils.js';
 export async function signTransaction(client, params) {
     const { organizationId, projectId, token, address, unsignedTransaction } = params;
-    const { signature } = await client.request({
-        path: `${projectId}/sign/transaction`,
-        body: {
-            type: 'ACTIVITY_TYPE_SIGN_TRANSACTION_V2',
-            timestampMs: Date.now().toString(),
-            organizationId,
-            parameters: {
-                signWith: address,
-                type: 'TRANSACTION_TYPE_ETHEREUM',
-                unsignedTransaction,
-            },
-        },
-        headers: {
-            Authorization: `Bearer ${token}`,
-        },
-        stamp: true,
-        stampPostion: 'headers',
+    const payloadHash = computeDataPayloadHash(unsignedTransaction, 'hex');
+    const turnkeyPayload = buildTurnkeyPayload(organizationId, address, payloadHash);
+    return sendSigningRequest(client, {
+        projectId,
+        token,
+        path: 'sign/transaction',
+        turnkeyPayload,
+        bodyFields: { unsignedTransaction },
     });
-    return `0x${signature}`;
 }
 //# sourceMappingURL=signTransaction.js.map

package/dist/_esm/actions/wallet/signTransaction.js.map

@@ -1 +1 @@
-{"version":3,"file":"signTransaction.js","sourceRoot":"","sources":["../../../../src/actions/wallet/signTransaction.ts"],"names":[],"mappings":"AAkBA;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,MAAiC;IAEjC,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,GACtE,MAAM,CAAA;IAER,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACzC,IAAI,EAAE,GAAG,SAAS,mBAAmB;QACrC,IAAI,EAAE;YACJ,IAAI,EAAE,mCAAmC;YACzC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;YAClC,cAAc;YACd,UAAU,EAAE;gBACV,QAAQ,EAAE,OAAO;gBACjB,IAAI,EAAE,2BAA2B;gBACjC,mBAAmB;aACpB;SACF;QACD,OAAO,EAAE;YACP,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;QACD,KAAK,EAAE,IAAI;QACX,YAAY,EAAE,SAAS;KACxB,CAAC,CAAA;IAEF,OAAO,KAAK,SAAS,EAAS,CAAA;AAChC,CAAC"}
+{"version":3,"file":"signTransaction.js","sourceRoot":"","sources":["../../../../src/actions/wallet/signTransaction.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,mBAAmB,CAAA;AAiB1B,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,MAAiC;IAEjC,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,EAAE,mBAAmB,EAAE,GACtE,MAAM,CAAA;IAER,MAAM,WAAW,GAAG,sBAAsB,CAAC,mBAAmB,EAAE,KAAK,CAAC,CAAA;IACtE,MAAM,cAAc,GAAG,mBAAmB,CACxC,cAAc,EACd,OAAO,EACP,WAAW,CACZ,CAAA;IAED,OAAO,kBAAkB,CAAC,MAAM,EAAE;QAChC,SAAS;QACT,KAAK;QACL,IAAI,EAAE,kBAAkB;QACxB,cAAc;QACd,UAAU,EAAE,EAAE,mBAAmB,EAAE;KACpC,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/wallet/signTypedDataV4.js

@@ -0,0 +1,14 @@
+import { buildTurnkeyPayload, sendSigningRequest } from './signingUtils.js';
+export async function signTypedDataV4(client, params) {
+    const { organizationId, projectId, token, address, unsignedTypedDataV4, encoding, typedDataHash, } = params;
+    const payloadHash = typedDataHash;
+    const turnkeyPayload = buildTurnkeyPayload(organizationId, address, payloadHash);
+    return sendSigningRequest(client, {
+        projectId,
+        token,
+        path: 'sign/typed-data-v4',
+        turnkeyPayload,
+        bodyFields: { unsignedTypedDataV4, encoding },
+    });
+}
+//# sourceMappingURL=signTypedDataV4.js.map

package/dist/_esm/actions/wallet/signTypedDataV4.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signTypedDataV4.js","sourceRoot":"","sources":["../../../../src/actions/wallet/signTypedDataV4.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,mBAAmB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAqB3E,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,MAAc,EACd,MAAiC;IAEjC,MAAM,EACJ,cAAc,EACd,SAAS,EACT,KAAK,EACL,OAAO,EACP,mBAAmB,EACnB,QAAQ,EACR,aAAa,GACd,GAAG,MAAM,CAAA;IAEV,MAAM,WAAW,GAAG,aAAa,CAAA;IACjC,MAAM,cAAc,GAAG,mBAAmB,CACxC,cAAc,EACd,OAAO,EACP,WAAW,CACZ,CAAA;IAED,OAAO,kBAAkB,CAAC,MAAM,EAAE;QAChC,SAAS;QACT,KAAK;QACL,IAAI,EAAE,oBAAoB;QAC1B,cAAc;QACd,UAAU,EAAE,EAAE,mBAAmB,EAAE,QAAQ,EAAE;KAC9C,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/wallet/signUserOperation.js

@@ -0,0 +1,14 @@
+import { buildTurnkeyPayload, computeDataPayloadHash, sendSigningRequest, } from './signingUtils.js';
+export async function signUserOperation(client, params) {
+    const { organizationId, projectId, token, address, unsignedUserOperation, chainId, encoding, } = params;
+    const payloadHash = computeDataPayloadHash(unsignedUserOperation, encoding);
+    const turnkeyPayload = buildTurnkeyPayload(organizationId, address, payloadHash);
+    return sendSigningRequest(client, {
+        projectId,
+        token,
+        path: 'sign/user-operation',
+        turnkeyPayload,
+        bodyFields: { unsignedUserOperation, chainId, encoding },
+    });
+}
+//# sourceMappingURL=signUserOperation.js.map

package/dist/_esm/actions/wallet/signUserOperation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signUserOperation.js","sourceRoot":"","sources":["../../../../src/actions/wallet/signUserOperation.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,kBAAkB,GACnB,MAAM,mBAAmB,CAAA;AAqB1B,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,MAAc,EACd,MAAmC;IAEnC,MAAM,EACJ,cAAc,EACd,SAAS,EACT,KAAK,EACL,OAAO,EACP,qBAAqB,EACrB,OAAO,EACP,QAAQ,GACT,GAAG,MAAM,CAAA;IAEV,MAAM,WAAW,GAAG,sBAAsB,CAAC,qBAAqB,EAAE,QAAQ,CAAC,CAAA;IAC3E,MAAM,cAAc,GAAG,mBAAmB,CACxC,cAAc,EACd,OAAO,EACP,WAAW,CACZ,CAAA;IAED,OAAO,kBAAkB,CAAC,MAAM,EAAE;QAChC,SAAS;QACT,KAAK;QACL,IAAI,EAAE,qBAAqB;QAC3B,cAAc;QACd,UAAU,EAAE,EAAE,qBAAqB,EAAE,OAAO,EAAE,QAAQ,EAAE;KACzD,CAAC,CAAA;AACJ,CAAC"}

package/dist/_esm/actions/wallet/signingUtils.js

@@ -0,0 +1,69 @@
+import { canonicalizeEx } from 'json-canonicalize';
+import { hashMessage, keccak256, toHex } from 'viem';
+export function buildTurnkeyPayload(organizationId, address, payloadHash) {
+    return {
+        type: 'ACTIVITY_TYPE_SIGN_RAW_PAYLOAD_V2',
+        timestampMs: Date.now().toString(),
+        organizationId,
+        parameters: {
+            signWith: address,
+            payload: payloadHash,
+            encoding: 'PAYLOAD_ENCODING_HEXADECIMAL',
+            hashFunction: 'HASH_FUNCTION_NO_OP',
+        },
+    };
+}
+export async function sendSigningRequest(client, params) {
+    const { projectId, token, path, turnkeyPayload, bodyFields } = params;
+    // Inner stamp over the Turnkey payload (for Turnkey verification)
+    const innerBodyString = canonicalizeEx(turnkeyPayload);
+    const innerStamp = await client.apiKeyStamper.stamp(innerBodyString);
+    // Build full body with inner stamp embedded
+    const fullBody = {
+        ...bodyFields,
+        turnkeyPayload,
+        stampHeader: {
+            stampHeaderName: innerStamp.stampHeaderName,
+            stampHeaderValue: innerStamp.stampHeaderValue,
+        },
+    };
+    // Outer stamp over full body (for KMS middleware)
+    const fullBodyString = canonicalizeEx(fullBody);
+    const outerStamp = await client.apiKeyStamper.stamp(fullBodyString);
+    const { signature } = await client.request({
+        path: `${projectId}/${path}`,
+        method: 'POST',
+        body: fullBody,
+        headers: {
+            [outerStamp.stampHeaderName]: outerStamp.stampHeaderValue,
+            Authorization: `Bearer ${token}`,
+        },
+    });
+    return (signature.startsWith('0x') ? signature : `0x${signature}`);
+}
+/**
+ * Compute payload hash for message signing (EIP-191).
+ * Uses viem's hashMessage directly to guarantee correct EIP-191 hashing.
+ */
+export function computeMessagePayloadHash(message, encoding) {
+    if (encoding === 'utf8') {
+        return hashMessage(message).slice(2);
+    }
+    const hex = message.replace(/^0x/, '');
+    return hashMessage({ raw: `0x${hex}` }).slice(2);
+}
+/**
+ * Compute payload hash for data signing (transaction, user operation).
+ * Hashes the raw decoded bytes: keccak256(hexDecode(hexData))
+ */
+export function computeDataPayloadHash(data, encoding) {
+    let hexData;
+    if (encoding === 'utf8') {
+        hexData = toHex(data).slice(2);
+    }
+    else {
+        hexData = data.replace(/^0x/, '');
+    }
+    return keccak256(`0x${hexData}`).slice(2);
+}
+//# sourceMappingURL=signingUtils.js.map

package/dist/_esm/actions/wallet/signingUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"signingUtils.js","sourceRoot":"","sources":["../../../../src/actions/wallet/signingUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAElD,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,MAAM,CAAA;AAepD,MAAM,UAAU,mBAAmB,CACjC,cAAsB,EACtB,OAAY,EACZ,WAAmB;IAEnB,OAAO;QACL,IAAI,EAAE,mCAAmC;QACzC,WAAW,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE;QAClC,cAAc;QACd,UAAU,EAAE;YACV,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,WAAW;YACpB,QAAQ,EAAE,8BAA8B;YACxC,YAAY,EAAE,qBAAqB;SACpC;KACF,CAAA;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,MAAc,EACd,MAMC;IAED,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,UAAU,EAAE,GAAG,MAAM,CAAA;IAErE,kEAAkE;IAClE,MAAM,eAAe,GAAG,cAAc,CAAC,cAAc,CAAC,CAAA;IACtD,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,eAAe,CAAC,CAAA;IAEpE,4CAA4C;IAC5C,MAAM,QAAQ,GAAG;QACf,GAAG,UAAU;QACb,cAAc;QACd,WAAW,EAAE;YACX,eAAe,EAAE,UAAU,CAAC,eAAe;YAC3C,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;SAC9C;KACF,CAAA;IAED,kDAAkD;IAClD,MAAM,cAAc,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAA;IAC/C,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,cAAc,CAAC,CAAA;IAEnE,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC;QACzC,IAAI,EAAE,GAAG,SAAS,IAAI,IAAI,EAAE;QAC5B,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,QAAQ;QACd,OAAO,EAAE;YACP,CAAC,UAAU,CAAC,eAAe,CAAC,EAAE,UAAU,CAAC,gBAAgB;YACzD,aAAa,EAAE,UAAU,KAAK,EAAE;SACjC;KACF,CAAC,CAAA;IAEF,OAAO,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,SAAS,EAAE,CAAQ,CAAA;AAC3E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAAe,EACf,QAAwB;IAExB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,WAAW,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IACtC,CAAC;IACD,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACtC,OAAO,WAAW,CAAC,EAAE,GAAG,EAAE,KAAK,GAAG,EAAS,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AACzD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAAY,EACZ,QAAwB;IAExB,IAAI,OAAe,CAAA;IACnB,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QACxB,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;IAChC,CAAC;SAAM,CAAC;QACN,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAA;IACnC,CAAC;IAED,OAAO,SAAS,CAAC,KAAK,OAAO,EAAS,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;AAClD,CAAC"}