@zerodev/wallet-core 0.0.1 → 0.0.3

package/package.json

@@ -1,7 +1,12 @@
 {
   "name": "@zerodev/wallet-core",
-  "version": "0.0.1",
+  "version": "0.0.3",
   "description": "ZeroDev Wallet SDK built on Turnkey",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/zerodevapp/zerodev-wallet-sdk.git",
+    "directory": "packages/core"
+  },
   "sideEffects": false,
   "main": "./dist/_cjs/index.js",
   "module": "./dist/_esm/index.js",
@@ -108,7 +113,7 @@
     "json-canonicalize": "^2.0.0"
   },
   "peerDependencies": {
-    "viem": "^2.38.0",
+    "viem": "^2.47.18",
     "@react-native-async-storage/async-storage": ">=2.0.0",
     "@turnkey/api-key-stamper": ">=0.6.0",
     "@turnkey/crypto": ">=2.8.0",
@@ -149,7 +154,7 @@
     "@types/node": "^20.0.0",
     "expo-secure-store": "55.0.9",
     "typescript": "5.9.3",
-    "uuid": "^13.0.0"
+    "uuid": "^13.0.2"
   },
   "scripts": {
     "build": "pnpm run clean && pnpm run build:cjs && pnpm run build:esm && pnpm run build:types",

package/src/adapters/viem.ts

@@ -4,6 +4,8 @@ import {
   getTypesForEIP712Domain,
   type Hex,
   hashTypedData,
+  isAddress,
+  isAddressEqual,
   type LocalAccount,
   numberToHex,
   parseSignature,
@@ -35,17 +37,20 @@ export async function toViemAccount(
 ): Promise<LocalAccount> {
   const { client, organizationId, projectId, getToken } = params
 
-  let address: Hex = zeroAddress
-
-  try {
-    const walletResponse = await client.getUserWallet({
-      organizationId,
-      projectId,
-      token: await getToken(),
-    })
-    address = walletResponse.walletAddresses[0]
-  } catch {
-    address = zeroAddress
+  const walletResponse = await client.getUserWallet({
+    organizationId,
+    projectId,
+    token: await getToken(),
+  })
+  const address = walletResponse.walletAddresses[0]
+  if (
+    !address ||
+    !isAddress(address, { strict: false }) ||
+    isAddressEqual(address, zeroAddress)
+  ) {
+    throw new Error(
+      `Cannot build account: wallet address is missing, malformed, or zero for organization ${organizationId} (got ${address ?? 'undefined'}).`,
+    )
   }
 
   // Modified from: https://github.com/tkhq/sdk/blob/4e439bf2973ea13b51d981d7c24a4841d4e5fd5f/packages/viem/src/index.ts#L419-L461

package/src/core/createZeroDevWalletCore.ts

@@ -459,7 +459,12 @@ export async function createZeroDevWalletCore(
         projectId,
         getToken: async () => {
           const activeSession = await sessionStorageManager.getActiveSession()
-          return activeSession?.token ?? ''
+          if (!activeSession?.token) {
+            throw new Error(
+              'No active session token; refusing to build an account without authentication.',
+            )
+          }
+          return activeSession.token
         },
       })
     },

package/src/stampers/webauthnStamper.ts

@@ -33,6 +33,13 @@ export async function createWebauthnStamper({
             name: options.userName,
             displayName: options.userName,
           },
+          // Login resolves the credential with an empty allowCredentials list,
+          // which can only surface discoverable (resident) credentials — so the
+          // credential must be created as resident.
+          authenticatorSelection: {
+            residentKey: 'required',
+            userVerification: 'preferred',
+          },
         },
       })
 

package/src/utils/hpke.ts

@@ -58,9 +58,10 @@ function concat(...parts: Uint8Array[]): Uint8Array {
 
 function i2osp(n: number, len: number): Uint8Array {
   const out = new Uint8Array(len)
+  let value = n
   for (let i = len - 1; i >= 0; i--) {
-    out[i] = n & 0xff
-    n >>>= 8
+    out[i] = value & 0xff
+    value >>>= 8
   }
   return out
 }