@seams/wallet 0.5.1 → 0.5.3

package/dist/esm/sdk/{signNear-B04A4qzs.js → signNear-d9Xz3SDg.js}

@@ -6393,6 +6393,51 @@ function createNearTransactionSigningOperationId$1() {
 	const randomId = secureRandomBase64Url(32, "NEAR transaction signing operation IDs");
 	return SigningSessionIds.signingOperation(`near-transaction-sign:${randomId}`);
 }
+async function prepareNearTransactionConfirmationReadiness(args) {
+	const material = await prepareNearOperationStepUpMaterial({
+		method: args.method,
+		preparation: args.preparation,
+		executor: args.executor
+	});
+	const materialFacts = nearOperationStepUpMaterialFacts(material);
+	if (String(materialFacts.thresholdSessionId) !== args.expectedThresholdSessionId) throw new Error("[SigningEngine][near] prepared operation material changed threshold session");
+	registerNearOperationStepUpBuilder({
+		requestId: args.requestId,
+		build: async (preparation) => {
+			if (preparation.kind !== "near_transaction") throw new Error("[SigningEngine][near] transaction step-up preparation kind changed");
+			if (preparation.operationId !== String(args.operation.operationId)) throw new Error("[SigningEngine][near] operation step-up operation identity changed");
+			return await prepareRouterAbEd25519NearTransactionOperationStepUp({
+				...args.operation,
+				thresholdSessionId: materialFacts.thresholdSessionId,
+				materialFacts,
+				materialActivation: material.materialActivation,
+				transactionContext: preparation.transactionContext,
+				displayDigest: preparation.displayDigest
+			});
+		}
+	});
+	registerNearImplicitAccountFunder({
+		requestId: args.requestId,
+		fund: async (request) => await fundNearImplicitAccountForOperationStepUp({
+			...args.funding,
+			request,
+			fundingSession: await args.executor.resolveFundingSession(),
+			method: args.method
+		})
+	});
+	return material;
+}
+function clearNearTransactionConfirmationResources(requestId) {
+	clearNearOperationStepUpBuilder(requestId);
+	clearNearImplicitAccountFunder(requestId);
+}
+function clearNearTransactionConfirmationReadinessWhenSettled(args) {
+	if (!args.readiness) {
+		clearNearTransactionConfirmationResources(args.requestId);
+		return;
+	}
+	args.readiness.then(clearNearTransactionConfirmationResources.bind(void 0, args.requestId), clearNearTransactionConfirmationResources.bind(void 0, args.requestId));
+}
 /**
 * Sign one NEAR transaction. A transaction may contain multiple actions.
 */
@@ -6482,44 +6527,28 @@ async function runNearAuthorizationRequiredTransactionSigning(payload) {
 		...emailOtpEd25519StepUp ? { emailOtpEd25519StepUp } : {}
 	});
 	if (preparedStepUp.kind === "warm_session") throw new Error("[SigningEngine][near] deferred Ed25519 transaction cannot use warm session");
-	const operationStepUpMaterial = await prepareNearOperationStepUpMaterial({
-		method: preparedStepUp.kind,
-		preparation: yaoSigningPreparation,
-		executor: yaoMaterialExecutor
-	});
-	const materialFacts = nearOperationStepUpMaterialFacts(operationStepUpMaterial);
 	const signingOperationUses = requiredNearTransactionSignatureUses(transaction);
-	registerNearOperationStepUpBuilder({
-		requestId: String(operationId),
-		build: async (preparation) => {
-			if (preparation.kind !== "near_transaction") throw new Error("[SigningEngine][near] transaction step-up preparation kind changed");
-			return await prepareRouterAbEd25519NearTransactionOperationStepUp({
-				ctx,
-				thresholdSessionId: materialFacts.thresholdSessionId,
-				materialFacts,
-				thresholdKeyMaterial: signingContext.threshold.thresholdKeyMaterial,
-				walletId: commandSubject.walletSession.walletId,
-				nearAccountId,
-				materialActivation: operationStepUpMaterial.materialActivation,
-				operationId,
-				operationFingerprint,
-				txSigningRequest,
-				transactionContext: preparation.transactionContext,
-				displayDigest: preparation.displayDigest
-			});
-		}
-	});
-	registerNearImplicitAccountFunder({
+	const operationStepUpReadiness = prepareNearTransactionConfirmationReadiness({
 		requestId: String(operationId),
-		fund: async (fundingRequest) => await fundNearImplicitAccountForOperationStepUp({
-			request: fundingRequest,
+		expectedThresholdSessionId: String(deferredIdentity.thresholdSessionId),
+		method: preparedStepUp.kind,
+		preparation: yaoSigningPreparation,
+		executor: yaoMaterialExecutor,
+		operation: {
+			ctx,
+			thresholdKeyMaterial: signingContext.threshold.thresholdKeyMaterial,
+			walletId: commandSubject.walletSession.walletId,
+			nearAccountId,
+			operationId,
+			operationFingerprint,
+			txSigningRequest
+		},
+		funding: {
 			ctx,
 			nearPublicKeyStr: signingContext.signingNearPublicKeyStr,
-			fundingSession: await yaoMaterialExecutor.resolveFundingSession(),
-			method: preparedStepUp.kind,
 			signingOperation,
 			signatureUses: signingOperationUses
-		})
+		}
 	});
 	let confirmation;
 	try {
@@ -6555,6 +6584,10 @@ async function runNearAuthorizationRequiredTransactionSigning(payload) {
 				}),
 				title,
 				body,
+				confirmationReadiness: {
+					promise: operationStepUpReadiness,
+					body: "Preparing secure signing session…"
+				},
 				onProgress: emitNearSigningConfirmationProgress.bind(void 0, {
 					onEvent,
 					nearAccountId,
@@ -6563,9 +6596,13 @@ async function runNearAuthorizationRequiredTransactionSigning(payload) {
 			}
 		});
 	} finally {
-		clearNearOperationStepUpBuilder(String(operationId));
-		clearNearImplicitAccountFunder(String(operationId));
+		clearNearTransactionConfirmationReadinessWhenSettled({
+			requestId: String(operationId),
+			readiness: operationStepUpReadiness
+		});
 	}
+	const operationStepUpMaterial = await operationStepUpReadiness;
+	const materialFacts = nearOperationStepUpMaterialFacts(operationStepUpMaterial);
 	const stepUpAuthorization = buildNearEd25519StepUpAuthorization({
 		prepared: preparedStepUp,
 		confirmation
@@ -6774,50 +6811,28 @@ async function runAuthorizedNearTransactionWithActionsSigning({ ctx, commandSubj
 			overlay: "show"
 		}
 	});
-	let operationStepUpMaterial = null;
-	if (preparedStepUp.kind !== "warm_session") {
-		operationStepUpMaterial = await prepareNearOperationStepUpMaterial({
-			method: preparedStepUp.kind,
-			preparation: yaoSigningPreparation,
-			executor: yaoMaterialExecutor
-		});
-		const material = operationStepUpMaterial;
-		const materialFacts = nearOperationStepUpMaterialFacts(material);
-		registerNearOperationStepUpBuilder({
-			requestId: thresholdSessionId,
-			build: async (preparation) => {
-				if (preparation.kind !== "near_transaction") throw new Error("[SigningEngine][near] transaction step-up preparation kind changed");
-				if (preparation.operationId !== String(signingOperation.operationId)) throw new Error("[SigningEngine][near] operation step-up operation identity changed");
-				return await prepareRouterAbEd25519NearTransactionOperationStepUp({
-					ctx,
-					thresholdSessionId: materialFacts.thresholdSessionId,
-					materialFacts,
-					thresholdKeyMaterial: signingContext.threshold.thresholdKeyMaterial,
-					walletId: commandSubject.walletSession.walletId,
-					nearAccountId,
-					materialActivation: material.materialActivation,
-					operationId: signingOperation.operationId,
-					operationFingerprint,
-					txSigningRequest,
-					transactionContext: preparation.transactionContext,
-					displayDigest: preparation.displayDigest
-				});
-			}
-		});
-		const stepUpFundingMethod = preparedStepUp.kind;
-		registerNearImplicitAccountFunder({
-			requestId: thresholdSessionId,
-			fund: async (fundingRequest) => await fundNearImplicitAccountForOperationStepUp({
-				request: fundingRequest,
-				ctx,
-				nearPublicKeyStr: signingContext.signingNearPublicKeyStr,
-				fundingSession: await yaoMaterialExecutor.resolveFundingSession(),
-				method: stepUpFundingMethod,
-				signingOperation,
-				signatureUses: requiredSignatureUses
-			})
-		});
-	}
+	const operationStepUpReadiness = preparedStepUp.kind === "warm_session" ? null : prepareNearTransactionConfirmationReadiness({
+		requestId: thresholdSessionId,
+		expectedThresholdSessionId: thresholdSessionId,
+		method: preparedStepUp.kind,
+		preparation: yaoSigningPreparation,
+		executor: yaoMaterialExecutor,
+		operation: {
+			ctx,
+			thresholdKeyMaterial: signingContext.threshold.thresholdKeyMaterial,
+			walletId: commandSubject.walletSession.walletId,
+			nearAccountId,
+			operationId: signingOperation.operationId,
+			operationFingerprint,
+			txSigningRequest
+		},
+		funding: {
+			ctx,
+			nearPublicKeyStr: signingContext.signingNearPublicKeyStr,
+			signingOperation,
+			signatureUses: requiredSignatureUses
+		}
+	});
 	let confirmation;
 	try {
 		confirmation = await runSigningConfirmationCommand({
@@ -6852,13 +6867,20 @@ async function runAuthorizedNearTransactionWithActionsSigning({ ctx, commandSubj
 				}),
 				title,
 				body,
+				...operationStepUpReadiness ? { confirmationReadiness: {
+					promise: operationStepUpReadiness,
+					body: "Preparing secure signing session…"
+				} } : {},
 				onProgress: emitUiConfirmProgress
 			}
 		});
 	} finally {
-		clearNearOperationStepUpBuilder(thresholdSessionId);
-		clearNearImplicitAccountFunder(thresholdSessionId);
+		clearNearTransactionConfirmationReadinessWhenSettled({
+			requestId: thresholdSessionId,
+			readiness: operationStepUpReadiness
+		});
 	}
+	const operationStepUpMaterial = operationStepUpReadiness ? await operationStepUpReadiness : null;
 	emitNearSigningEvent$2(onEvent, nearAccountId, {
 		phase: SigningEventPhase.STEP_05_CONFIRMATION_APPROVED,
 		status: "succeeded",
@@ -8684,19 +8706,16 @@ function buildNearPasskeyEd25519OperationStepUp(args) {
 	if (args.auth.kind !== "passkey") return void 0;
 	const auth = args.auth;
 	return { prepare: async () => {
-		const materialFacts = await resolveNearPasskeyStepUpMaterialFacts({
-			preparation: args.preparation,
-			executor: args.materialExecutor
-		});
 		const signer = args.signer;
+		const authority = await exactPasskeyStepUpAuthority({
+			authorityRef: nearPasskeyPreparationAuthority(args.preparation),
+			walletId: signer.account.wallet.walletId,
+			rpId: auth.rpId,
+			credentialIdB64u: auth.credentialIdB64u
+		});
 		return {
-			thresholdSessionId: materialFacts.thresholdSessionId,
-			authority: await exactPasskeyStepUpAuthority({
-				authorityRef: nearPasskeyPreparationAuthority(args.preparation),
-				walletId: signer.account.wallet.walletId,
-				rpId: auth.rpId,
-				credentialIdB64u: auth.credentialIdB64u
-			})
+			thresholdSessionId: args.thresholdSessionId,
+			authority
 		};
 	} };
 }
@@ -8729,17 +8748,6 @@ async function exactPasskeyStepUpAuthority(args) {
 	if (resolvedRef.walletId !== args.authorityRef.walletId || resolvedRef.walletAuthMethodId !== args.authorityRef.walletAuthMethodId || resolvedRef.authorityDigest !== args.authorityRef.authorityDigest) throw new Error("[SigningEngine][near] exact Passkey step-up authority changed");
 	return authority;
 }
-async function resolveNearPasskeyStepUpMaterialFacts(args) {
-	switch (args.preparation.hydration.kind) {
-		case "use_live_runtime": return (await args.executor.resolve(args.preparation)).facts;
-		case "rehydrate_material_activation": return (await args.executor.preparePasskeyOperationStepUp(args.preparation)).facts;
-		case "reauthorize_public_anchor": throw new Error("[SigningEngine][near] retired material cannot prepare Passkey step-up");
-		case "blocked": throw new Error(`[SigningEngine][near] Passkey step-up material is blocked: ${args.preparation.hydration.reason}`);
-		default:
-			args.preparation.hydration;
-			throw new Error("[SigningEngine][near] unsupported Passkey step-up material source");
-	}
-}
 function buildNearEmailOtpEd25519StepUp(args) {
 	if (args.auth.kind !== SIGNER_AUTH_METHODS.emailOtp || typeof args.deps.requestEmailOtpEd25519SigningChallenge !== "function") return;
 	if (!args.preparation.hydration.materialActivation) return;
@@ -8810,8 +8818,8 @@ async function prepareNearAdHocSigningSession(args) {
 			passkeyEd25519OperationStepUp: buildNearPasskeyEd25519OperationStepUp({
 				auth: candidate.auth,
 				signer,
-				preparation: materialBoundary.preparation,
-				materialExecutor: materialBoundary.executor
+				thresholdSessionId: materialIdentity.thresholdSessionId,
+				preparation: materialBoundary.preparation
 			}) || null,
 			emailOtpEd25519StepUp: buildNearEmailOtpEd25519StepUp({
 				deps: args.deps,
@@ -8838,8 +8846,8 @@ async function prepareNearAdHocSigningSession(args) {
 		passkeyEd25519OperationStepUp: buildNearPasskeyEd25519OperationStepUp({
 			auth: selectedLane.auth,
 			signer: selectedLane.identity.signer,
-			preparation: materialBoundary.preparation,
-			materialExecutor: materialBoundary.executor
+			thresholdSessionId: selectedLane.identity.thresholdSessionId,
+			preparation: materialBoundary.preparation
 		}) || null,
 		emailOtpEd25519StepUp: buildNearEmailOtpEd25519StepUp({
 			deps: args.deps,
@@ -8902,8 +8910,8 @@ async function prepareNearAuthorizationRequiredTransaction(args) {
 		passkeyEd25519OperationStepUp: buildNearPasskeyEd25519OperationStepUp({
 			auth: candidate.auth,
 			signer,
-			preparation: materialBoundary.preparation,
-			materialExecutor: materialBoundary.executor
+			thresholdSessionId: materialIdentity.thresholdSessionId,
+			preparation: materialBoundary.preparation
 		}) || null,
 		emailOtpEd25519StepUp: buildNearEmailOtpEd25519StepUp({
 			deps: args.deps,
@@ -9257,8 +9265,8 @@ async function signTransactionWithActions(deps, args, attempt = {}) {
 				const passkeyEd25519OperationStepUp = buildNearPasskeyEd25519OperationStepUp({
 					auth: transactionLane.auth,
 					signer: transactionLane.identity.signer,
-					preparation: materialBoundary.preparation,
-					materialExecutor: materialBoundary.executor
+					thresholdSessionId,
+					preparation: materialBoundary.preparation
 				});
 				const emailOtpEd25519StepUp = buildNearEmailOtpEd25519StepUp({
 					deps,

package/dist/esm/sdk/{signatureUses-BsYpH81W.js → signatureUses-Dg0S52Mp.js}

@@ -828,6 +828,7 @@ async function signEvmFamilyWithUiConfirm(args) {
 	const thresholdEcdsaStepUp = input.thresholdEcdsaStepUp;
 	const thresholdEcdsaStepUpRuntime = thresholdEcdsaStepUp.kind === "not_required" ? void 0 : thresholdEcdsaStepUp.runtime;
 	const signingAuthPlan = signingAuthPlanFromThresholdEcdsaStepUp(thresholdEcdsaStepUp);
+	const requiresThresholdEcdsaOperationStepUp = input.authorization.kind === "owner" && thresholdEcdsaStepUp.kind === "required" && (thresholdEcdsaStepUp.runtime.reusableAuthorization.kind === "absent" || !isWarmSessionSigningAuthPlan(thresholdEcdsaStepUp.authPlan.signingAuthPlan));
 	if (hasThresholdEcdsaRequest && !signingAuthPlan) switch (input.authorization.kind) {
 		case "owner": throw new Error("[chains] threshold ECDSA transaction signing requires an explicit auth plan");
 		case "active_wallet_authority": break;
@@ -935,7 +936,7 @@ async function signEvmFamilyWithUiConfirm(args) {
 			subtitle: config.body
 		});
 		let challengeB64u = base64UrlEncode(firstDigest);
-		if (firstSignRequest.algorithm === "secp256k1" && thresholdEcdsaStepUpRuntime && activeThresholdEcdsaOperation && input.resolveEcdsaSigningMaterialPlan) {
+		if (requiresThresholdEcdsaOperationStepUp && firstSignRequest.algorithm === "secp256k1" && thresholdEcdsaStepUpRuntime && activeThresholdEcdsaOperation && input.resolveEcdsaSigningMaterialPlan) {
 			const operationDigests = await buildEvmFamilyOperationDigests({
 				operationFingerprint: input.signingOperation?.operationFingerprint,
 				signingDigest32: inferDigest32FromSignRequest(firstSignRequest),

package/dist/{public/sdk/signerLoader-BhF6IFbD.js → esm/sdk/signerLoader-DVlqSMOs.js}

@@ -12,11 +12,11 @@ async function loadWebAuthnP256EngineCtor() {
 	return await webAuthnP256EngineCtorPromise;
 }
 async function loadSignEvmWithUiConfirm() {
-	if (!signEvmWithUiConfirmPromise) signEvmWithUiConfirmPromise = import("./signEvmWithUiConfirm-CeDL-vEX.js").then((mod) => mod.signEvmWithUiConfirm);
+	if (!signEvmWithUiConfirmPromise) signEvmWithUiConfirmPromise = import("./signEvmWithUiConfirm-C4vBAKpE.js").then((mod) => mod.signEvmWithUiConfirm);
 	return await signEvmWithUiConfirmPromise;
 }
 async function loadSignEvmFamilyWithUiConfirmForTempo() {
-	if (!signEvmFamilyWithUiConfirmForTempoPromise) signEvmFamilyWithUiConfirmForTempoPromise = import("./signEvmFamilyWithUiConfirmForTempo-DtF2dEhK.js").then((mod) => mod.signEvmFamilyWithUiConfirmForTempo);
+	if (!signEvmFamilyWithUiConfirmForTempoPromise) signEvmFamilyWithUiConfirmForTempoPromise = import("./signEvmFamilyWithUiConfirmForTempo-LNMzIdPa.js").then((mod) => mod.signEvmFamilyWithUiConfirmForTempo);
 	return await signEvmFamilyWithUiConfirmForTempoPromise;
 }
 //#endregion