@seams/wallet 0.5.0 → 0.5.2

package/dist/.build-inputs.sha256

@@ -1 +1 @@
-9e6339642b68ce46bda1fabd01c5f6377195e50758961179b1f43feb0d24fafb
+3453dbe490ad19955c12397ded644b4e67fcdaeefeeba7f3ee9edd4487e13f33

package/dist/esm/SeamsWeb/signingSurface/BrowserSigningSurface.js

@@ -71,7 +71,7 @@ import { reconcileTempoNonceLane, reportTempoBroadcastAccepted, reportTempoBroad
 import { UserConfirmationType } from "../../core/signingEngine/stepUpConfirmation/userConfirmationType.js";
 import { exportKeypairWithUI, resolveExactKeyExportLane } from "../../core/signingEngine/flows/recovery/public.js";
 import { activateAuthenticatedWalletState, finalizeWalletEcdsaRegistration, finalizeWalletEd25519SignerRegistration, getAllUsers, getAuthenticationCredentialsSerialized, getLastUser, getUserBySignerSlot, getWalletNearProvisioningState, hasPasskeyCredential, nearAuthenticatorsByAccount, requestRegistrationCredentialConfirmation, rollbackUserRegistration, rollbackWalletEd25519SignerRegistration, setLastUser, setWalletNearProvisioningState, storeAuthenticator, storeUserData, storeWalletEcdsaRecoverySignerRecords, storeWalletEcdsaSignerRecords, storeWalletEd25519RecoveryRegistrationData, storeWalletEd25519RegistrationData, storeWalletEmailOtpEcdsaRegistrationData, storeWalletEmailOtpEcdsaSignerRecords, storeWalletEmailOtpEd25519RegistrationData, storeWalletEmailOtpMixedRegistrationData, storeWalletMixedRegistrationData } from "../../core/signingEngine/flows/registration/public.js";
-import { exactWalletSessionWithOperationCredentialOrThrow, readExactOwnerLaneWalletSession } from "../../core/signingEngine/session/identity/exactWalletSessionReader.js";
+import { exactWalletSessionWithOperationCredentialOrThrow } from "../../core/signingEngine/session/identity/exactWalletSessionReader.js";
 import { enrollEmailOtpInternal, loginWithEmailOtpEcdsaCapabilityInternal, prepareEmailOtpRegistrationEnrollmentMaterialInternal, refreshEmailOtpSigningSession, requestEmailOtpSigningSessionChallenge } from "../../core/signingEngine/flows/signEvmFamily/emailOtpPublic.js";
 import { __isWalletIframeHostMode } from "../../core/browser/walletIframe/host-mode.js";
 import { destroyUnlockedWalletEd25519ExportRootCapabilitiesV1, establishUnlockedWalletEd25519ExportRootCapabilityV1, setUnlockedCustodyEnvelopeUpgradeSinkV1 } from "../../core/signingEngine/walletCustody/unlockedEd25519ExportRootCapability.js";
@@ -1141,7 +1141,7 @@ var BrowserSigningSurface = class {
 				emailOtpSessions: this.emailOtpSessions,
 				sealedSigningSessionStore: deps.sealedSigningSessionStore
 			}, input),
-			resolveOwnerLaneScope: (walletId) => this.resolveActiveOwnerLaneScope(walletId)
+			resolveOwnerLaneScope: (walletId) => this.resolveSelectedOwnerLaneScope(walletId)
 		});
 		this.enginePorts = createBrowserSigningSurfaceEnginePorts({
 			runtimePorts: this.runtimePorts,
@@ -1167,7 +1167,7 @@ var BrowserSigningSurface = class {
 			workerWarmupPolicy: deps.workerWarmupPolicy,
 			getTheme: () => this.appearance.theme.mode,
 			ensureSealedRefreshStartupParity: () => this.ensureSealedRefreshStartupParity(),
-			resolveOwnerLaneScope: (walletId) => this.resolveActiveOwnerLaneScope(walletId),
+			resolveOwnerLaneScope: (walletId) => this.resolveSelectedOwnerLaneScope(walletId),
 			getEnginePorts: () => this.enginePorts,
 			getRegistrationPublicDeps: () => this.registrationPublicDeps,
 			prepareNearEd25519YaoMaterialBoundary: this.prepareExactNearEd25519YaoMaterialBoundary.bind(this)
@@ -1488,11 +1488,11 @@ var BrowserSigningSurface = class {
 		return await readOwnerScopedSigningLanes(this.sessionPublicDeps, args);
 	}
 	/**
-	* R103C derivation chain for post-login operations: the unique active Wallet
-	* Session authority resolves through the active wallet auth method to one
-	* exact owner scope. Callers never supply credential or slot hints.
+	* Resolves the selected active Wallet Authority and auth method to one exact
+	* owner scope. Session availability is resolved by the lane inventory so an
+	* expired session can enter operation step-up.
 	*/
-	async resolveActiveOwnerLaneScope(walletId) {
+	async resolveSelectedOwnerLaneScope(walletId) {
 		const parsedWalletId = parseWalletId(walletId);
 		if (!parsedWalletId.ok) throw new Error(parsedWalletId.error.message);
 		const stores = {
@@ -1506,13 +1506,6 @@ var BrowserSigningSurface = class {
 			const { selection, authMethod, authority } = selected;
 			if (selection.walletId !== parsedWalletId.value || selection.walletAuthMethodId !== authMethod.walletAuthMethodId || authMethod.walletId !== parsedWalletId.value || authMethod.walletAuthorityId !== authority.authorityId || authority.walletId !== parsedWalletId.value) throw new Error("[SigningEngine] selected Wallet Authority identity mismatch");
 			if (selection.lockState !== "unlocked" || authMethod.status !== "active" || authority.state !== "active") throw new Error("[SigningEngine] selected Wallet Authority is inactive or locked");
-			await readExactOwnerLaneWalletSession({
-				walletId: parsedWalletId.value,
-				authorityId: authority.authorityId,
-				authMethodId: authMethod.walletAuthMethodId,
-				authorityDigestB64u: authority.authorityDigestB64u,
-				authorityRevocationEpoch: authority.revocationEpoch
-			});
 			if (authority.provenance.kind === "device_link" && authMethod.kind === "passkey" && authority.signerActivations.ed25519) return buildExactPasskeyOwnerLaneScope({
 				authMethod,
 				signerSlot: await resolveLinkedPasskeyOwnerSignerSlot({

package/dist/esm/core/signingEngine/session/identity/exactWalletSessionReader.js

@@ -1,4 +1,4 @@
-import { WalletSessionAuthorizationUpgradeRequiredError, walletSessionAuthorizations } from "../../../indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
+import { WalletSessionAuthorizationUpgradeRequiredError } from "../../../indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
 //#region src/core/signingEngine/session/identity/exactWalletSessionReader.ts
 function exactWalletSessionMatchesAuthorityScope(args) {
 	const { record, operationCredential, scope } = args;
@@ -48,32 +48,7 @@ function exactWalletSessionWithOperationCredentialOrThrow(result, message) {
 		case "upgrade_required": throw new WalletSessionAuthorizationUpgradeRequiredError(message);
 	}
 }
-async function readExactOwnerLaneWalletSession(args) {
-	const read = await walletSessionAuthorizations.readExactActiveForWallet({
-		walletId: args.walletId,
-		authorityId: args.authorityId,
-		authMethodId: args.authMethodId
-	});
-	switch (read.kind) {
-		case "found":
-			if (!exactWalletSessionMatchesAuthorityScope({
-				record: read.record,
-				operationCredential: read.operationCredential,
-				scope: args
-			})) throw new Error("[SigningEngine] selected Wallet Authority session identity mismatch");
-			if (read.record.expiresAtMs <= Date.now()) throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: expired");
-			return;
-		case "missing": throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: missing");
-		case "upgrade_required": throw new WalletSessionAuthorizationUpgradeRequiredError("[SigningEngine] selected Wallet Authority Wallet Session requires a newer client");
-		case "corrupt": throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: corrupt");
-		case "persistence_unavailable": throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: persistence_unavailable");
-		default: return assertNeverWalletSessionAuthorizationRead(read);
-	}
-}
-function assertNeverWalletSessionAuthorizationRead(value) {
-	throw new Error(`Unknown exact Wallet Session authorization read: ${String(value)}`);
-}
 //#endregion
-export { exactWalletSessionWithOperationCredentialOrThrow, readExactOwnerLaneWalletSession, readExactWalletSessionAuthentication };
+export { exactWalletSessionWithOperationCredentialOrThrow, readExactWalletSessionAuthentication };
 
 //# sourceMappingURL=exactWalletSessionReader.js.map

package/dist/esm/react/SeamsWeb/signingSurface/BrowserSigningSurface.js

@@ -71,7 +71,7 @@ import { reconcileTempoNonceLane, reportTempoBroadcastAccepted, reportTempoBroad
 import { UserConfirmationType } from "../../core/signingEngine/stepUpConfirmation/userConfirmationType.js";
 import { exportKeypairWithUI, resolveExactKeyExportLane } from "../../core/signingEngine/flows/recovery/public.js";
 import { activateAuthenticatedWalletState, finalizeWalletEcdsaRegistration, finalizeWalletEd25519SignerRegistration, getAllUsers, getAuthenticationCredentialsSerialized, getLastUser, getUserBySignerSlot, getWalletNearProvisioningState, hasPasskeyCredential, nearAuthenticatorsByAccount, requestRegistrationCredentialConfirmation, rollbackUserRegistration, rollbackWalletEd25519SignerRegistration, setLastUser, setWalletNearProvisioningState, storeAuthenticator, storeUserData, storeWalletEcdsaRecoverySignerRecords, storeWalletEcdsaSignerRecords, storeWalletEd25519RecoveryRegistrationData, storeWalletEd25519RegistrationData, storeWalletEmailOtpEcdsaRegistrationData, storeWalletEmailOtpEcdsaSignerRecords, storeWalletEmailOtpEd25519RegistrationData, storeWalletEmailOtpMixedRegistrationData, storeWalletMixedRegistrationData } from "../../core/signingEngine/flows/registration/public.js";
-import { exactWalletSessionWithOperationCredentialOrThrow, readExactOwnerLaneWalletSession } from "../../core/signingEngine/session/identity/exactWalletSessionReader.js";
+import { exactWalletSessionWithOperationCredentialOrThrow } from "../../core/signingEngine/session/identity/exactWalletSessionReader.js";
 import { enrollEmailOtpInternal, loginWithEmailOtpEcdsaCapabilityInternal, prepareEmailOtpRegistrationEnrollmentMaterialInternal, refreshEmailOtpSigningSession, requestEmailOtpSigningSessionChallenge } from "../../core/signingEngine/flows/signEvmFamily/emailOtpPublic.js";
 import { __isWalletIframeHostMode } from "../../core/browser/walletIframe/host-mode.js";
 import { destroyUnlockedWalletEd25519ExportRootCapabilitiesV1, establishUnlockedWalletEd25519ExportRootCapabilityV1, setUnlockedCustodyEnvelopeUpgradeSinkV1 } from "../../core/signingEngine/walletCustody/unlockedEd25519ExportRootCapability.js";
@@ -1141,7 +1141,7 @@ var BrowserSigningSurface = class {
 				emailOtpSessions: this.emailOtpSessions,
 				sealedSigningSessionStore: deps.sealedSigningSessionStore
 			}, input),
-			resolveOwnerLaneScope: (walletId) => this.resolveActiveOwnerLaneScope(walletId)
+			resolveOwnerLaneScope: (walletId) => this.resolveSelectedOwnerLaneScope(walletId)
 		});
 		this.enginePorts = createBrowserSigningSurfaceEnginePorts({
 			runtimePorts: this.runtimePorts,
@@ -1167,7 +1167,7 @@ var BrowserSigningSurface = class {
 			workerWarmupPolicy: deps.workerWarmupPolicy,
 			getTheme: () => this.appearance.theme.mode,
 			ensureSealedRefreshStartupParity: () => this.ensureSealedRefreshStartupParity(),
-			resolveOwnerLaneScope: (walletId) => this.resolveActiveOwnerLaneScope(walletId),
+			resolveOwnerLaneScope: (walletId) => this.resolveSelectedOwnerLaneScope(walletId),
 			getEnginePorts: () => this.enginePorts,
 			getRegistrationPublicDeps: () => this.registrationPublicDeps,
 			prepareNearEd25519YaoMaterialBoundary: this.prepareExactNearEd25519YaoMaterialBoundary.bind(this)
@@ -1488,11 +1488,11 @@ var BrowserSigningSurface = class {
 		return await readOwnerScopedSigningLanes(this.sessionPublicDeps, args);
 	}
 	/**
-	* R103C derivation chain for post-login operations: the unique active Wallet
-	* Session authority resolves through the active wallet auth method to one
-	* exact owner scope. Callers never supply credential or slot hints.
+	* Resolves the selected active Wallet Authority and auth method to one exact
+	* owner scope. Session availability is resolved by the lane inventory so an
+	* expired session can enter operation step-up.
 	*/
-	async resolveActiveOwnerLaneScope(walletId) {
+	async resolveSelectedOwnerLaneScope(walletId) {
 		const parsedWalletId = parseWalletId(walletId);
 		if (!parsedWalletId.ok) throw new Error(parsedWalletId.error.message);
 		const stores = {
@@ -1506,13 +1506,6 @@ var BrowserSigningSurface = class {
 			const { selection, authMethod, authority } = selected;
 			if (selection.walletId !== parsedWalletId.value || selection.walletAuthMethodId !== authMethod.walletAuthMethodId || authMethod.walletId !== parsedWalletId.value || authMethod.walletAuthorityId !== authority.authorityId || authority.walletId !== parsedWalletId.value) throw new Error("[SigningEngine] selected Wallet Authority identity mismatch");
 			if (selection.lockState !== "unlocked" || authMethod.status !== "active" || authority.state !== "active") throw new Error("[SigningEngine] selected Wallet Authority is inactive or locked");
-			await readExactOwnerLaneWalletSession({
-				walletId: parsedWalletId.value,
-				authorityId: authority.authorityId,
-				authMethodId: authMethod.walletAuthMethodId,
-				authorityDigestB64u: authority.authorityDigestB64u,
-				authorityRevocationEpoch: authority.revocationEpoch
-			});
 			if (authority.provenance.kind === "device_link" && authMethod.kind === "passkey" && authority.signerActivations.ed25519) return buildExactPasskeyOwnerLaneScope({
 				authMethod,
 				signerSlot: await resolveLinkedPasskeyOwnerSignerSlot({

package/dist/esm/react/core/signingEngine/session/identity/exactWalletSessionReader.js

@@ -1,4 +1,4 @@
-import { WalletSessionAuthorizationUpgradeRequiredError, walletSessionAuthorizations } from "../../../indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
+import { WalletSessionAuthorizationUpgradeRequiredError } from "../../../indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
 //#region src/core/signingEngine/session/identity/exactWalletSessionReader.ts
 function exactWalletSessionMatchesAuthorityScope(args) {
 	const { record, operationCredential, scope } = args;
@@ -48,32 +48,7 @@ function exactWalletSessionWithOperationCredentialOrThrow(result, message) {
 		case "upgrade_required": throw new WalletSessionAuthorizationUpgradeRequiredError(message);
 	}
 }
-async function readExactOwnerLaneWalletSession(args) {
-	const read = await walletSessionAuthorizations.readExactActiveForWallet({
-		walletId: args.walletId,
-		authorityId: args.authorityId,
-		authMethodId: args.authMethodId
-	});
-	switch (read.kind) {
-		case "found":
-			if (!exactWalletSessionMatchesAuthorityScope({
-				record: read.record,
-				operationCredential: read.operationCredential,
-				scope: args
-			})) throw new Error("[SigningEngine] selected Wallet Authority session identity mismatch");
-			if (read.record.expiresAtMs <= Date.now()) throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: expired");
-			return;
-		case "missing": throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: missing");
-		case "upgrade_required": throw new WalletSessionAuthorizationUpgradeRequiredError("[SigningEngine] selected Wallet Authority Wallet Session requires a newer client");
-		case "corrupt": throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: corrupt");
-		case "persistence_unavailable": throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: persistence_unavailable");
-		default: return assertNeverWalletSessionAuthorizationRead(read);
-	}
-}
-function assertNeverWalletSessionAuthorizationRead(value) {
-	throw new Error(`Unknown exact Wallet Session authorization read: ${String(value)}`);
-}
 //#endregion
-export { exactWalletSessionWithOperationCredentialOrThrow, readExactOwnerLaneWalletSession, readExactWalletSessionAuthentication };
+export { exactWalletSessionWithOperationCredentialOrThrow, readExactWalletSessionAuthentication };
 
 //# sourceMappingURL=exactWalletSessionReader.js.map