@seams/wallet 0.5.1 → 0.5.2

package/dist/{esm/sdk/registrationPreparationPreload-u3ruCmpF.js → public/sdk/registrationPreparationPreload-CwUkRwVz.js}

@@ -7,7 +7,7 @@ import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmFor
 async function preloadWalletHostRegistrationPreparation() {
 	await Promise.all([
 		prewarmTxConfirmerUi(),
-		import("./runtime-ecdsa-tempo-B7dBVcCI.js").catch(() => void 0),
+		import("./runtime-ecdsa-tempo-CV-E-iZG.js").catch(() => void 0),
 		loadSignEvmFamilyWithUiConfirmForTempo().catch(() => void 0),
 		loadSignEvmWithUiConfirm().catch(() => void 0),
 		loadSecp256k1EngineCtor().catch(() => void 0),

package/dist/{esm/sdk/runtime-auth-Da9yQyaD.js → public/sdk/runtime-auth-dpoaCtkK.js}

@@ -8,7 +8,7 @@ import { M as parseWebAuthnRpId, O as parseWalletId } from "./domainIds-eOo5dgD-
 import { t as walletIframeRequestIdFromBoundary } from "./walletIframeIdentity--bEdQHo_.js";
 import { _ as parseHostedAuthMenuExternalAuthResolution, h as parseHostedAuthMenuErrorEvent, o as hostedAuthMenuExternalAuthRequestIdFromBoundary, p as parseHostedAuthMenuCancelPayload, v as parseHostedAuthMenuOpenRequest } from "./messages-BSWDBuFY.js";
 import "./errors-JAbF_T3T.js";
-import { r as preloadWalletHostRegistrationSurface } from "./runtimeLoader-BKQjNgXO.js";
+import { r as preloadWalletHostRegistrationSurface } from "./runtimeLoader-DxiLgXPm.js";
 import { c as classifyLinkDeviceFlowEvent, s as UnlockEventPhase } from "./sdkSentEvents-CPGpMmxi.js";
 import "./evmFamilySigningKeySlotId-DdgIJVvP.js";
 import { a as WALLET_AUTH_METHODS } from "./signerDomain-DNM7Ink8.js";
@@ -28,7 +28,7 @@ import "./keccak-3GZDz0C_.js";
 import "./signNear-B04A4qzs.js";
 import { t as createWalletIframeSurfaceMeasurementReporter } from "./surface-measurement-reporter-ki-AJVE5.js";
 import "./operationFingerprint-IujbIwg_.js";
-import { _ as startHostedPasskeyRegistrationCredential, a as syncAccountWithPreparedCredential, b as isLinkedDeviceTargetEmailAddressV1, c as listLocalLoginAuthMethods, d as unlockLinkedDevicePasskey, f as unlockResolvedWalletSubjectSet, g as registerPreparedHostedPasskeyRegistration, h as prepareHostedPasskeyRegistration, handleWalletHostRuntimeRequestWithHandlers, i as prepareSyncAccountChallenge, l as resolveLinkedDevicePasskeyAuthoritySelection, m as cancelHostedPasskeyRegistration, n as clearHostedWalletSessions, o as buildNearWalletRegistrationSignerSetSelection, p as resolveWalletUnlockSubjectSet, s as resolvePasskeyRegistrationAccountProvisioning, t as activeHostedWalletSessionOperationCredential, u as resolveLinkedDeviceUnlockSubjectSet, v as createRelayerExactWalletSessionStatusPort, x as normalizeLinkedDeviceTargetEmailAddressV1, y as DeviceLinkingErrorCode } from "./runtimeContext-BorCgXo5.js";
+import { _ as startHostedPasskeyRegistrationCredential, a as syncAccountWithPreparedCredential, b as isLinkedDeviceTargetEmailAddressV1, c as listLocalLoginAuthMethods, d as unlockLinkedDevicePasskey, f as unlockResolvedWalletSubjectSet, g as registerPreparedHostedPasskeyRegistration, h as prepareHostedPasskeyRegistration, handleWalletHostRuntimeRequestWithHandlers, i as prepareSyncAccountChallenge, l as resolveLinkedDevicePasskeyAuthoritySelection, m as cancelHostedPasskeyRegistration, n as clearHostedWalletSessions, o as buildNearWalletRegistrationSignerSetSelection, p as resolveWalletUnlockSubjectSet, s as resolvePasskeyRegistrationAccountProvisioning, t as activeHostedWalletSessionOperationCredential, u as resolveLinkedDeviceUnlockSubjectSet, v as createRelayerExactWalletSessionStatusPort, x as normalizeLinkedDeviceTargetEmailAddressV1, y as DeviceLinkingErrorCode } from "./runtimeContext-D_TkUM6Z.js";
 import { n as respondOkResult, r as withProgress, t as respondOk } from "./shared-HlqX0oXX.js";
 //#region src/SeamsWeb/walletIframe/shared/exactSessionReconciliation.ts
 /**

package/dist/public/sdk/{runtime-device-link-DNlzlwrr.js → runtime-device-link-C75epnbj.js}

@@ -19,7 +19,7 @@ import "./walletRecoveryCommit-D6lzaAHA.js";
 import "./keccak-3GZDz0C_.js";
 import "./signNear-B04A4qzs.js";
 import "./operationFingerprint-IujbIwg_.js";
-import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-BorCgXo5.js";
+import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-D_TkUM6Z.js";
 import { n as respondOkResult, r as withProgress, t as respondOk } from "./shared-HlqX0oXX.js";
 //#region src/SeamsWeb/walletIframe/host/handlers/deviceLink.ts
 /** The QR payload's own lifetime; a selection older than this blocks nothing. */

package/dist/{esm/sdk/runtime-ecdsa-tempo-B7dBVcCI.js → public/sdk/runtime-ecdsa-tempo-CV-E-iZG.js}

@@ -18,7 +18,7 @@ import "./walletRecoveryCommit-D6lzaAHA.js";
 import "./keccak-3GZDz0C_.js";
 import "./signNear-B04A4qzs.js";
 import "./operationFingerprint-IujbIwg_.js";
-import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-BorCgXo5.js";
+import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-D_TkUM6Z.js";
 import { n as respondOkResult, t as respondOk } from "./shared-HlqX0oXX.js";
 //#region src/SeamsWeb/walletIframe/host/handlers/ecdsaTempo.ts
 function createEcdsaTempoWalletIframeHandlers(deps) {

package/dist/{esm/sdk/runtime-email-otp-CckVQZJC.js → public/sdk/runtime-email-otp-V0mdMD_t.js}

@@ -18,7 +18,7 @@ import "./walletRecoveryCommit-D6lzaAHA.js";
 import "./keccak-3GZDz0C_.js";
 import "./signNear-B04A4qzs.js";
 import "./operationFingerprint-IujbIwg_.js";
-import { handleWalletHostRuntimeRequestWithHandlers, r as redeemHostedWalletSeamsSession } from "./runtimeContext-BorCgXo5.js";
+import { handleWalletHostRuntimeRequestWithHandlers, r as redeemHostedWalletSeamsSession } from "./runtimeContext-D_TkUM6Z.js";
 import { n as respondOkResult, r as withProgress } from "./shared-HlqX0oXX.js";
 //#region src/SeamsWeb/walletIframe/host/handlers/emailOtp.ts
 function recordFromPayload(value) {

package/dist/{esm/sdk/runtime-export-WAiBwZL_.js → public/sdk/runtime-export-C4HO5ysH.js}

@@ -19,7 +19,7 @@ import "./walletRecoveryCommit-D6lzaAHA.js";
 import "./keccak-3GZDz0C_.js";
 import "./signNear-B04A4qzs.js";
 import "./operationFingerprint-IujbIwg_.js";
-import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-BorCgXo5.js";
+import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-D_TkUM6Z.js";
 import { n as respondOkResult, t as respondOk } from "./shared-HlqX0oXX.js";
 //#region src/SeamsWeb/walletIframe/host/handlers/export.ts
 function keyExportInputFromPayload(payload) {

package/dist/public/sdk/{runtime-near-DBJ4KfFv.js → runtime-near-DlviFQWy.js}

@@ -19,7 +19,7 @@ import "./walletRecoveryCommit-D6lzaAHA.js";
 import "./keccak-3GZDz0C_.js";
 import "./signNear-B04A4qzs.js";
 import "./operationFingerprint-IujbIwg_.js";
-import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-BorCgXo5.js";
+import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-D_TkUM6Z.js";
 import { i as withRegistrationProgress, n as respondOkResult, r as withProgress, t as respondOk } from "./shared-HlqX0oXX.js";
 //#region src/SeamsWeb/walletIframe/host/handlers/near.ts
 function walletSessionFromWalletId(walletIdRaw) {

package/dist/{esm/sdk/runtime-preferences-DmH7eMHH.js → public/sdk/runtime-preferences-DyJidFuf.js}

@@ -18,7 +18,7 @@ import "./walletRecoveryCommit-D6lzaAHA.js";
 import "./keccak-3GZDz0C_.js";
 import "./signNear-B04A4qzs.js";
 import "./operationFingerprint-IujbIwg_.js";
-import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-BorCgXo5.js";
+import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-D_TkUM6Z.js";
 import { n as respondOkResult, t as respondOk } from "./shared-HlqX0oXX.js";
 //#region src/SeamsWeb/walletIframe/host/handlers/preferences.ts
 function createPreferencesWalletIframeHandlers(deps) {

package/dist/public/sdk/{runtime-recovery-kPgl9nTT.js → runtime-recovery-CHDE5gl0.js}

@@ -17,7 +17,7 @@ import "./walletRecoveryCommit-D6lzaAHA.js";
 import "./keccak-3GZDz0C_.js";
 import "./signNear-B04A4qzs.js";
 import "./operationFingerprint-IujbIwg_.js";
-import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-BorCgXo5.js";
+import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-D_TkUM6Z.js";
 import { n as respondOkResult, r as withProgress } from "./shared-HlqX0oXX.js";
 //#region src/SeamsWeb/walletIframe/host/handlers/recovery.ts
 function createRecoveryWalletIframeHandlers(deps) {

package/dist/public/sdk/{runtimeContext-BorCgXo5.js → runtimeContext-D_TkUM6Z.js}

@@ -13285,31 +13285,6 @@ function exactWalletSessionWithOperationCredentialOrThrow(result, message) {
 		case "upgrade_required": throw new WalletSessionAuthorizationUpgradeRequiredError(message);
 	}
 }
-async function readExactOwnerLaneWalletSession(args) {
-	const read = await walletSessionAuthorizations.readExactActiveForWallet({
-		walletId: args.walletId,
-		authorityId: args.authorityId,
-		authMethodId: args.authMethodId
-	});
-	switch (read.kind) {
-		case "found":
-			if (!exactWalletSessionMatchesAuthorityScope({
-				record: read.record,
-				operationCredential: read.operationCredential,
-				scope: args
-			})) throw new Error("[SigningEngine] selected Wallet Authority session identity mismatch");
-			if (read.record.expiresAtMs <= Date.now()) throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: expired");
-			return;
-		case "missing": throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: missing");
-		case "upgrade_required": throw new WalletSessionAuthorizationUpgradeRequiredError("[SigningEngine] selected Wallet Authority Wallet Session requires a newer client");
-		case "corrupt": throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: corrupt");
-		case "persistence_unavailable": throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: persistence_unavailable");
-		default: return assertNeverWalletSessionAuthorizationRead(read);
-	}
-}
-function assertNeverWalletSessionAuthorizationRead(value) {
-	throw new Error(`Unknown exact Wallet Session authorization read: ${String(value)}`);
-}
 //#endregion
 //#region src/core/signingEngine/session/emailOtp/zeroize.ts
 function zeroizeBytes(bytes) {
@@ -29688,7 +29663,7 @@ var BrowserSigningSurface = class {
 				emailOtpSessions: this.emailOtpSessions,
 				sealedSigningSessionStore: deps.sealedSigningSessionStore
 			}, input),
-			resolveOwnerLaneScope: (walletId) => this.resolveActiveOwnerLaneScope(walletId)
+			resolveOwnerLaneScope: (walletId) => this.resolveSelectedOwnerLaneScope(walletId)
 		});
 		this.enginePorts = createBrowserSigningSurfaceEnginePorts({
 			runtimePorts: this.runtimePorts,
@@ -29714,7 +29689,7 @@ var BrowserSigningSurface = class {
 			workerWarmupPolicy: deps.workerWarmupPolicy,
 			getTheme: () => this.appearance.theme.mode,
 			ensureSealedRefreshStartupParity: () => this.ensureSealedRefreshStartupParity(),
-			resolveOwnerLaneScope: (walletId) => this.resolveActiveOwnerLaneScope(walletId),
+			resolveOwnerLaneScope: (walletId) => this.resolveSelectedOwnerLaneScope(walletId),
 			getEnginePorts: () => this.enginePorts,
 			getRegistrationPublicDeps: () => this.registrationPublicDeps,
 			prepareNearEd25519YaoMaterialBoundary: this.prepareExactNearEd25519YaoMaterialBoundary.bind(this)
@@ -30035,11 +30010,11 @@ var BrowserSigningSurface = class {
 		return await readOwnerScopedSigningLanes(this.sessionPublicDeps, args);
 	}
 	/**
-	* R103C derivation chain for post-login operations: the unique active Wallet
-	* Session authority resolves through the active wallet auth method to one
-	* exact owner scope. Callers never supply credential or slot hints.
+	* Resolves the selected active Wallet Authority and auth method to one exact
+	* owner scope. Session availability is resolved by the lane inventory so an
+	* expired session can enter operation step-up.
 	*/
-	async resolveActiveOwnerLaneScope(walletId) {
+	async resolveSelectedOwnerLaneScope(walletId) {
 		const parsedWalletId = parseWalletId(walletId);
 		if (!parsedWalletId.ok) throw new Error(parsedWalletId.error.message);
 		const stores = {
@@ -30053,13 +30028,6 @@ var BrowserSigningSurface = class {
 			const { selection, authMethod, authority } = selected;
 			if (selection.walletId !== parsedWalletId.value || selection.walletAuthMethodId !== authMethod.walletAuthMethodId || authMethod.walletId !== parsedWalletId.value || authMethod.walletAuthorityId !== authority.authorityId || authority.walletId !== parsedWalletId.value) throw new Error("[SigningEngine] selected Wallet Authority identity mismatch");
 			if (selection.lockState !== "unlocked" || authMethod.status !== "active" || authority.state !== "active") throw new Error("[SigningEngine] selected Wallet Authority is inactive or locked");
-			await readExactOwnerLaneWalletSession({
-				walletId: parsedWalletId.value,
-				authorityId: authority.authorityId,
-				authMethodId: authMethod.walletAuthMethodId,
-				authorityDigestB64u: authority.authorityDigestB64u,
-				authorityRevocationEpoch: authority.revocationEpoch
-			});
 			if (authority.provenance.kind === "device_link" && authMethod.kind === "passkey" && authority.signerActivations.ed25519) return buildExactPasskeyOwnerLaneScope({
 				authMethod,
 				signerSlot: await resolveLinkedPasskeyOwnerSignerSlot({

package/dist/public/sdk/{runtimeLoader-BKQjNgXO.js → runtimeLoader-DxiLgXPm.js}

@@ -21,19 +21,19 @@ async function preloadWalletHostRecoveryCodeSurface() {
 	await recoveryCodeSurfacePromise;
 }
 async function preloadRegistrationPreparation() {
-	registrationPreparationPromise ??= import("./registrationPreparationPreload-u3ruCmpF.js");
+	registrationPreparationPromise ??= import("./registrationPreparationPreload-CwUkRwVz.js");
 	await (await registrationPreparationPromise).preloadWalletHostRegistrationPreparation();
 }
 function loadRuntimeForKind(kind) {
 	switch (kind) {
-		case "auth": return import("./runtime-auth-Da9yQyaD.js");
-		case "near": return import("./runtime-near-DBJ4KfFv.js");
-		case "ecdsa": return import("./runtime-ecdsa-tempo-B7dBVcCI.js");
-		case "email_otp": return import("./runtime-email-otp-CckVQZJC.js");
-		case "recovery": return import("./runtime-recovery-kPgl9nTT.js");
-		case "export": return import("./runtime-export-WAiBwZL_.js");
-		case "device_link": return import("./runtime-device-link-DNlzlwrr.js");
-		case "preferences": return import("./runtime-preferences-DmH7eMHH.js");
+		case "auth": return import("./runtime-auth-dpoaCtkK.js");
+		case "near": return import("./runtime-near-DlviFQWy.js");
+		case "ecdsa": return import("./runtime-ecdsa-tempo-CV-E-iZG.js");
+		case "email_otp": return import("./runtime-email-otp-V0mdMD_t.js");
+		case "recovery": return import("./runtime-recovery-CHDE5gl0.js");
+		case "export": return import("./runtime-export-C4HO5ysH.js");
+		case "device_link": return import("./runtime-device-link-C75epnbj.js");
+		case "preferences": return import("./runtime-preferences-DyJidFuf.js");
 	}
 	return assertNever(kind);
 }