@seams/wallet 0.5.1 → 0.5.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (135) hide show
  1. package/LICENSE.md +201 -0
  2. package/THIRD_PARTY_NOTICES.md +15095 -0
  3. package/dist/.build-inputs.sha256 +1 -1
  4. package/dist/esm/SeamsWeb/signingSurface/BrowserSigningSurface.js +7 -14
  5. package/dist/esm/core/signingEngine/flows/signEvmFamily/signingFlow.js +2 -1
  6. package/dist/esm/core/signingEngine/flows/signNear/signNear.js +16 -30
  7. package/dist/esm/core/signingEngine/flows/signNear/signTransactions.js +102 -80
  8. package/dist/esm/core/signingEngine/session/identity/exactWalletSessionReader.js +2 -27
  9. package/dist/esm/core/signingEngine/uiConfirm/handlers/flows/signing.js +1 -1
  10. package/dist/esm/react/SeamsWeb/signingSurface/BrowserSigningSurface.js +7 -14
  11. package/dist/esm/react/core/signingEngine/flows/signEvmFamily/signingFlow.js +2 -1
  12. package/dist/esm/react/core/signingEngine/flows/signNear/signNear.js +16 -30
  13. package/dist/esm/react/core/signingEngine/flows/signNear/signTransactions.js +102 -80
  14. package/dist/esm/react/core/signingEngine/session/identity/exactWalletSessionReader.js +2 -27
  15. package/dist/esm/react/core/signingEngine/uiConfirm/handlers/flows/signing.js +1 -1
  16. package/dist/esm/sdk/{display-rIXVrumh.js → display-CV_FRBAv.js} +1 -1
  17. package/dist/esm/sdk/export-private-key-viewer.js +8804 -55
  18. package/dist/esm/sdk/halo-border.js +8887 -8
  19. package/dist/{public/sdk/host-BqwEYhX0.js → esm/sdk/host-saeh9CWY.js} +2 -2
  20. package/dist/esm/sdk/passkey-halo-loading.js +8850 -27
  21. package/dist/{public/sdk/registrationPreparationPreload-u3ruCmpF.js → esm/sdk/registrationPreparationPreload-9iIiVEzP.js} +2 -2
  22. package/dist/esm/sdk/router_ab_ed25519_yao_client_bg.wasm +0 -0
  23. package/dist/esm/sdk/{runtime-auth-Da9yQyaD.js → runtime-auth-CqJzUZit.js} +3 -3
  24. package/dist/esm/sdk/{runtime-device-link-DNlzlwrr.js → runtime-device-link-BDex3l39.js} +2 -2
  25. package/dist/{public/sdk/runtime-ecdsa-tempo-B7dBVcCI.js → esm/sdk/runtime-ecdsa-tempo-CV2jjenL.js} +2 -2
  26. package/dist/{public/sdk/runtime-email-otp-CckVQZJC.js → esm/sdk/runtime-email-otp-CRXxFJfB.js} +2 -2
  27. package/dist/{public/sdk/runtime-export-WAiBwZL_.js → esm/sdk/runtime-export-DDRRvQHJ.js} +2 -2
  28. package/dist/esm/sdk/{runtime-near-DBJ4KfFv.js → runtime-near-DOmJffsR.js} +2 -2
  29. package/dist/{public/sdk/runtime-preferences-DmH7eMHH.js → esm/sdk/runtime-preferences-CPxDZqxr.js} +2 -2
  30. package/dist/esm/sdk/{runtime-recovery-kPgl9nTT.js → runtime-recovery-wZqjlB5u.js} +2 -2
  31. package/dist/esm/sdk/{runtimeContext-BorCgXo5.js → runtimeContext-D73F6HOf.js} +18 -50
  32. package/dist/{public/sdk/runtimeLoader-BKQjNgXO.js → esm/sdk/runtimeLoader-DzuoDxql.js} +9 -9
  33. package/dist/{public/sdk/signEvmFamily-CwJEkCP7.js → esm/sdk/signEvmFamily-CIlzzMEd.js} +3 -3
  34. package/dist/esm/sdk/{signEvmFamilyWithUiConfirmForTempo-DtF2dEhK.js → signEvmFamilyWithUiConfirmForTempo-LNMzIdPa.js} +2 -2
  35. package/dist/esm/sdk/{signEvmWithUiConfirm-CeDL-vEX.js → signEvmWithUiConfirm-C4vBAKpE.js} +1 -1
  36. package/dist/esm/sdk/{signNear-B04A4qzs.js → signNear-d9Xz3SDg.js} +118 -110
  37. package/dist/esm/sdk/{signatureUses-BsYpH81W.js → signatureUses-Dg0S52Mp.js} +2 -1
  38. package/dist/{public/sdk/signerLoader-BhF6IFbD.js → esm/sdk/signerLoader-DVlqSMOs.js} +2 -2
  39. package/dist/esm/sdk/tx-confirm-ui.js +9568 -206
  40. package/dist/esm/sdk/w3a-tx-confirmer.js +8335 -206
  41. package/dist/esm/sdk/wallet-iframe-host-ecdsa.js +1 -1
  42. package/dist/esm/sdk/wallet-iframe-host-full.js +1 -1
  43. package/dist/esm/sdk/wallet-iframe-host-near.js +1 -1
  44. package/dist/esm/sdk/wallet-iframe-host-runtime.js +1 -1
  45. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +4 -4
  46. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
  47. package/dist/esm/wasm/router_ab_ecdsa_client/pkg/router_ab_ecdsa_client_bg.wasm +0 -0
  48. package/dist/esm/wasm/router_ab_ed25519_yao_client/pkg/router_ab_ed25519_yao_client_bg.wasm +0 -0
  49. package/dist/public/headers.manifest.json +1 -1
  50. package/dist/public/sdk/{display-rIXVrumh.js → display-CV_FRBAv.js} +1 -1
  51. package/dist/public/sdk/export-private-key-viewer.js +8804 -55
  52. package/dist/public/sdk/halo-border.js +8887 -8
  53. package/dist/{esm/sdk/host-BqwEYhX0.js → public/sdk/host-saeh9CWY.js} +2 -2
  54. package/dist/public/sdk/passkey-halo-loading.js +8850 -27
  55. package/dist/{esm/sdk/registrationPreparationPreload-u3ruCmpF.js → public/sdk/registrationPreparationPreload-9iIiVEzP.js} +2 -2
  56. package/dist/public/sdk/router_ab_ed25519_yao_client_bg.wasm +0 -0
  57. package/dist/public/sdk/{runtime-auth-Da9yQyaD.js → runtime-auth-CqJzUZit.js} +3 -3
  58. package/dist/public/sdk/{runtime-device-link-DNlzlwrr.js → runtime-device-link-BDex3l39.js} +2 -2
  59. package/dist/{esm/sdk/runtime-ecdsa-tempo-B7dBVcCI.js → public/sdk/runtime-ecdsa-tempo-CV2jjenL.js} +2 -2
  60. package/dist/{esm/sdk/runtime-email-otp-CckVQZJC.js → public/sdk/runtime-email-otp-CRXxFJfB.js} +2 -2
  61. package/dist/{esm/sdk/runtime-export-WAiBwZL_.js → public/sdk/runtime-export-DDRRvQHJ.js} +2 -2
  62. package/dist/public/sdk/{runtime-near-DBJ4KfFv.js → runtime-near-DOmJffsR.js} +2 -2
  63. package/dist/{esm/sdk/runtime-preferences-DmH7eMHH.js → public/sdk/runtime-preferences-CPxDZqxr.js} +2 -2
  64. package/dist/public/sdk/{runtime-recovery-kPgl9nTT.js → runtime-recovery-wZqjlB5u.js} +2 -2
  65. package/dist/public/sdk/{runtimeContext-BorCgXo5.js → runtimeContext-D73F6HOf.js} +18 -50
  66. package/dist/{esm/sdk/runtimeLoader-BKQjNgXO.js → public/sdk/runtimeLoader-DzuoDxql.js} +9 -9
  67. package/dist/{esm/sdk/signEvmFamily-CwJEkCP7.js → public/sdk/signEvmFamily-CIlzzMEd.js} +3 -3
  68. package/dist/public/sdk/{signEvmFamilyWithUiConfirmForTempo-DtF2dEhK.js → signEvmFamilyWithUiConfirmForTempo-LNMzIdPa.js} +2 -2
  69. package/dist/public/sdk/{signEvmWithUiConfirm-CeDL-vEX.js → signEvmWithUiConfirm-C4vBAKpE.js} +1 -1
  70. package/dist/public/sdk/{signNear-B04A4qzs.js → signNear-d9Xz3SDg.js} +118 -110
  71. package/dist/public/sdk/{signatureUses-BsYpH81W.js → signatureUses-Dg0S52Mp.js} +2 -1
  72. package/dist/{esm/sdk/signerLoader-BhF6IFbD.js → public/sdk/signerLoader-DVlqSMOs.js} +2 -2
  73. package/dist/public/sdk/tx-confirm-ui.js +9568 -206
  74. package/dist/public/sdk/w3a-tx-confirmer.js +8335 -206
  75. package/dist/public/sdk/wallet-iframe-host-ecdsa.js +1 -1
  76. package/dist/public/sdk/wallet-iframe-host-full.js +1 -1
  77. package/dist/public/sdk/wallet-iframe-host-near.js +1 -1
  78. package/dist/public/sdk/wallet-iframe-host-runtime.js +1 -1
  79. package/dist/public/sdk/workers/device-linking-key.worker.js +8603 -3
  80. package/dist/public/sdk/workers/ecdsa-derivation-client.worker.js +12320 -1
  81. package/dist/public/sdk/workers/ecdsa-online-client.worker.js +623 -1
  82. package/dist/public/sdk/workers/ecdsa-presign-client.worker.js +1276 -1
  83. package/dist/public/sdk/workers/email-otp.worker.js +15653 -7
  84. package/dist/public/sdk/workers/email_otp_runtime.js +39 -3
  85. package/dist/public/sdk/workers/email_otp_runtime_bg.wasm +0 -0
  86. package/dist/public/sdk/workers/evm-crypto.worker.js +1157 -5
  87. package/dist/public/sdk/workers/evm_crypto.wasm +0 -0
  88. package/dist/public/sdk/workers/evm_crypto_bg.wasm +0 -0
  89. package/dist/public/sdk/workers/near-signer.worker.js +1631 -2
  90. package/dist/public/sdk/workers/near_signer.wasm +0 -0
  91. package/dist/public/sdk/workers/passkey-confirm.worker.js +606 -1
  92. package/dist/public/sdk/workers/passkey-mpc-export.worker.js +5406 -2
  93. package/dist/public/sdk/workers/passkey-mpc-session.worker.js +1717 -1
  94. package/dist/public/sdk/workers/router_ab_ecdsa_client_bg.wasm +0 -0
  95. package/dist/public/sdk/workers/router_ab_ed25519_yao_client_bg.wasm +0 -0
  96. package/dist/public/sdk/workers/shamir3pass.worker.js +874 -4
  97. package/dist/public/sdk/workers/shamir3pass_runtime.js +84 -31
  98. package/dist/public/sdk/workers/shamir3pass_runtime_bg.wasm +0 -0
  99. package/dist/public/sdk/workers/tempo-signer.worker.js +987 -5
  100. package/dist/public/sdk/workers/tempo_signer.wasm +0 -0
  101. package/dist/public/sdk/workers/tempo_signer_bg.wasm +0 -0
  102. package/dist/public/sdk/workers/wallet-custody-ceremony.worker.js +55 -1244
  103. package/dist/public/sdk/workers/wallet_custody_ceremony_bg.wasm +0 -0
  104. package/dist/public/sdk/workers/wasm_signer_worker_bg.wasm +0 -0
  105. package/dist/public/wallet-assets.manifest.json +44 -44
  106. package/dist/types/wallet/src/SeamsWeb/signingSurface/BrowserSigningSurface.d.ts +4 -4
  107. package/dist/types/wallet/src/core/signingEngine/session/identity/exactWalletSessionReader.d.ts +1 -9
  108. package/dist/workers/device-linking-key.worker.js +8603 -3
  109. package/dist/workers/ecdsa-derivation-client.worker.js +12320 -1
  110. package/dist/workers/ecdsa-online-client.worker.js +623 -1
  111. package/dist/workers/ecdsa-presign-client.worker.js +1276 -1
  112. package/dist/workers/email-otp.worker.js +15653 -7
  113. package/dist/workers/email_otp_runtime.js +39 -3
  114. package/dist/workers/email_otp_runtime_bg.wasm +0 -0
  115. package/dist/workers/evm-crypto.worker.js +1157 -5
  116. package/dist/workers/evm_crypto.wasm +0 -0
  117. package/dist/workers/evm_crypto_bg.wasm +0 -0
  118. package/dist/workers/near-signer.worker.js +1631 -2
  119. package/dist/workers/near_signer.wasm +0 -0
  120. package/dist/workers/passkey-confirm.worker.js +606 -1
  121. package/dist/workers/passkey-mpc-export.worker.js +5406 -2
  122. package/dist/workers/passkey-mpc-session.worker.js +1717 -1
  123. package/dist/workers/router_ab_ecdsa_client_bg.wasm +0 -0
  124. package/dist/workers/router_ab_ed25519_yao_client_bg.wasm +0 -0
  125. package/dist/workers/shamir3pass.worker.js +874 -4
  126. package/dist/workers/shamir3pass_runtime.js +84 -31
  127. package/dist/workers/shamir3pass_runtime_bg.wasm +0 -0
  128. package/dist/workers/tempo-signer.worker.js +987 -5
  129. package/dist/workers/tempo_signer.wasm +0 -0
  130. package/dist/workers/tempo_signer_bg.wasm +0 -0
  131. package/dist/workers/wallet-custody-ceremony.worker.js +55 -1244
  132. package/dist/workers/wallet_custody_ceremony_bg.wasm +0 -0
  133. package/dist/workers/wasm_signer_worker_bg.wasm +0 -0
  134. package/package.json +5 -2
  135. package/LICENSE +0 -21
@@ -2,12 +2,12 @@ import "./near-DxFqEWl-.js";
2
2
  import "./validation-DD44yJtI.js";
3
3
  import "./actions-XVVkUk1T.js";
4
4
  import { i as prewarmTxConfirmerUi } from "./confirm-ui-ru96-Lq1.js";
5
- import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-BhF6IFbD.js";
5
+ import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-DVlqSMOs.js";
6
6
  //#region src/SeamsWeb/walletIframe/host/registrationPreparationPreload.ts
7
7
  async function preloadWalletHostRegistrationPreparation() {
8
8
  await Promise.all([
9
9
  prewarmTxConfirmerUi(),
10
- import("./runtime-ecdsa-tempo-B7dBVcCI.js").catch(() => void 0),
10
+ import("./runtime-ecdsa-tempo-CV2jjenL.js").catch(() => void 0),
11
11
  loadSignEvmFamilyWithUiConfirmForTempo().catch(() => void 0),
12
12
  loadSignEvmWithUiConfirm().catch(() => void 0),
13
13
  loadSecp256k1EngineCtor().catch(() => void 0),
@@ -8,7 +8,7 @@ import { M as parseWebAuthnRpId, O as parseWalletId } from "./domainIds-eOo5dgD-
8
8
  import { t as walletIframeRequestIdFromBoundary } from "./walletIframeIdentity--bEdQHo_.js";
9
9
  import { _ as parseHostedAuthMenuExternalAuthResolution, h as parseHostedAuthMenuErrorEvent, o as hostedAuthMenuExternalAuthRequestIdFromBoundary, p as parseHostedAuthMenuCancelPayload, v as parseHostedAuthMenuOpenRequest } from "./messages-BSWDBuFY.js";
10
10
  import "./errors-JAbF_T3T.js";
11
- import { r as preloadWalletHostRegistrationSurface } from "./runtimeLoader-BKQjNgXO.js";
11
+ import { r as preloadWalletHostRegistrationSurface } from "./runtimeLoader-DzuoDxql.js";
12
12
  import { c as classifyLinkDeviceFlowEvent, s as UnlockEventPhase } from "./sdkSentEvents-CPGpMmxi.js";
13
13
  import "./evmFamilySigningKeySlotId-DdgIJVvP.js";
14
14
  import { a as WALLET_AUTH_METHODS } from "./signerDomain-DNM7Ink8.js";
@@ -25,10 +25,10 @@ import "./passkey-custody-VjdWp6-P.js";
25
25
  import "./singletons-C7_F77OY.js";
26
26
  import { E as walletSessionAuthorizations, h as IndexedDBManager } from "./walletRecoveryCommit-D6lzaAHA.js";
27
27
  import "./keccak-3GZDz0C_.js";
28
- import "./signNear-B04A4qzs.js";
28
+ import "./signNear-d9Xz3SDg.js";
29
29
  import { t as createWalletIframeSurfaceMeasurementReporter } from "./surface-measurement-reporter-ki-AJVE5.js";
30
30
  import "./operationFingerprint-IujbIwg_.js";
31
- import { _ as startHostedPasskeyRegistrationCredential, a as syncAccountWithPreparedCredential, b as isLinkedDeviceTargetEmailAddressV1, c as listLocalLoginAuthMethods, d as unlockLinkedDevicePasskey, f as unlockResolvedWalletSubjectSet, g as registerPreparedHostedPasskeyRegistration, h as prepareHostedPasskeyRegistration, handleWalletHostRuntimeRequestWithHandlers, i as prepareSyncAccountChallenge, l as resolveLinkedDevicePasskeyAuthoritySelection, m as cancelHostedPasskeyRegistration, n as clearHostedWalletSessions, o as buildNearWalletRegistrationSignerSetSelection, p as resolveWalletUnlockSubjectSet, s as resolvePasskeyRegistrationAccountProvisioning, t as activeHostedWalletSessionOperationCredential, u as resolveLinkedDeviceUnlockSubjectSet, v as createRelayerExactWalletSessionStatusPort, x as normalizeLinkedDeviceTargetEmailAddressV1, y as DeviceLinkingErrorCode } from "./runtimeContext-BorCgXo5.js";
31
+ import { _ as startHostedPasskeyRegistrationCredential, a as syncAccountWithPreparedCredential, b as isLinkedDeviceTargetEmailAddressV1, c as listLocalLoginAuthMethods, d as unlockLinkedDevicePasskey, f as unlockResolvedWalletSubjectSet, g as registerPreparedHostedPasskeyRegistration, h as prepareHostedPasskeyRegistration, handleWalletHostRuntimeRequestWithHandlers, i as prepareSyncAccountChallenge, l as resolveLinkedDevicePasskeyAuthoritySelection, m as cancelHostedPasskeyRegistration, n as clearHostedWalletSessions, o as buildNearWalletRegistrationSignerSetSelection, p as resolveWalletUnlockSubjectSet, s as resolvePasskeyRegistrationAccountProvisioning, t as activeHostedWalletSessionOperationCredential, u as resolveLinkedDeviceUnlockSubjectSet, v as createRelayerExactWalletSessionStatusPort, x as normalizeLinkedDeviceTargetEmailAddressV1, y as DeviceLinkingErrorCode } from "./runtimeContext-D73F6HOf.js";
32
32
  import { n as respondOkResult, r as withProgress, t as respondOk } from "./shared-HlqX0oXX.js";
33
33
  //#region src/SeamsWeb/walletIframe/shared/exactSessionReconciliation.ts
34
34
  /**
@@ -17,9 +17,9 @@ import "./passkey-custody-VjdWp6-P.js";
17
17
  import "./singletons-C7_F77OY.js";
18
18
  import "./walletRecoveryCommit-D6lzaAHA.js";
19
19
  import "./keccak-3GZDz0C_.js";
20
- import "./signNear-B04A4qzs.js";
20
+ import "./signNear-d9Xz3SDg.js";
21
21
  import "./operationFingerprint-IujbIwg_.js";
22
- import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-BorCgXo5.js";
22
+ import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-D73F6HOf.js";
23
23
  import { n as respondOkResult, r as withProgress, t as respondOk } from "./shared-HlqX0oXX.js";
24
24
  //#region src/SeamsWeb/walletIframe/host/handlers/deviceLink.ts
25
25
  /** The QR payload's own lifetime; a selection older than this blocks nothing. */
@@ -16,9 +16,9 @@ import "./passkey-custody-VjdWp6-P.js";
16
16
  import "./singletons-C7_F77OY.js";
17
17
  import "./walletRecoveryCommit-D6lzaAHA.js";
18
18
  import "./keccak-3GZDz0C_.js";
19
- import "./signNear-B04A4qzs.js";
19
+ import "./signNear-d9Xz3SDg.js";
20
20
  import "./operationFingerprint-IujbIwg_.js";
21
- import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-BorCgXo5.js";
21
+ import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-D73F6HOf.js";
22
22
  import { n as respondOkResult, t as respondOk } from "./shared-HlqX0oXX.js";
23
23
  //#region src/SeamsWeb/walletIframe/host/handlers/ecdsaTempo.ts
24
24
  function createEcdsaTempoWalletIframeHandlers(deps) {
@@ -16,9 +16,9 @@ import "./passkey-custody-VjdWp6-P.js";
16
16
  import "./singletons-C7_F77OY.js";
17
17
  import "./walletRecoveryCommit-D6lzaAHA.js";
18
18
  import "./keccak-3GZDz0C_.js";
19
- import "./signNear-B04A4qzs.js";
19
+ import "./signNear-d9Xz3SDg.js";
20
20
  import "./operationFingerprint-IujbIwg_.js";
21
- import { handleWalletHostRuntimeRequestWithHandlers, r as redeemHostedWalletSeamsSession } from "./runtimeContext-BorCgXo5.js";
21
+ import { handleWalletHostRuntimeRequestWithHandlers, r as redeemHostedWalletSeamsSession } from "./runtimeContext-D73F6HOf.js";
22
22
  import { n as respondOkResult, r as withProgress } from "./shared-HlqX0oXX.js";
23
23
  //#region src/SeamsWeb/walletIframe/host/handlers/emailOtp.ts
24
24
  function recordFromPayload(value) {
@@ -17,9 +17,9 @@ import "./passkey-custody-VjdWp6-P.js";
17
17
  import "./singletons-C7_F77OY.js";
18
18
  import "./walletRecoveryCommit-D6lzaAHA.js";
19
19
  import "./keccak-3GZDz0C_.js";
20
- import "./signNear-B04A4qzs.js";
20
+ import "./signNear-d9Xz3SDg.js";
21
21
  import "./operationFingerprint-IujbIwg_.js";
22
- import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-BorCgXo5.js";
22
+ import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-D73F6HOf.js";
23
23
  import { n as respondOkResult, t as respondOk } from "./shared-HlqX0oXX.js";
24
24
  //#region src/SeamsWeb/walletIframe/host/handlers/export.ts
25
25
  function keyExportInputFromPayload(payload) {
@@ -17,9 +17,9 @@ import "./passkey-custody-VjdWp6-P.js";
17
17
  import "./singletons-C7_F77OY.js";
18
18
  import "./walletRecoveryCommit-D6lzaAHA.js";
19
19
  import "./keccak-3GZDz0C_.js";
20
- import "./signNear-B04A4qzs.js";
20
+ import "./signNear-d9Xz3SDg.js";
21
21
  import "./operationFingerprint-IujbIwg_.js";
22
- import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-BorCgXo5.js";
22
+ import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-D73F6HOf.js";
23
23
  import { i as withRegistrationProgress, n as respondOkResult, r as withProgress, t as respondOk } from "./shared-HlqX0oXX.js";
24
24
  //#region src/SeamsWeb/walletIframe/host/handlers/near.ts
25
25
  function walletSessionFromWalletId(walletIdRaw) {
@@ -16,9 +16,9 @@ import "./passkey-custody-VjdWp6-P.js";
16
16
  import "./singletons-C7_F77OY.js";
17
17
  import "./walletRecoveryCommit-D6lzaAHA.js";
18
18
  import "./keccak-3GZDz0C_.js";
19
- import "./signNear-B04A4qzs.js";
19
+ import "./signNear-d9Xz3SDg.js";
20
20
  import "./operationFingerprint-IujbIwg_.js";
21
- import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-BorCgXo5.js";
21
+ import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-D73F6HOf.js";
22
22
  import { n as respondOkResult, t as respondOk } from "./shared-HlqX0oXX.js";
23
23
  //#region src/SeamsWeb/walletIframe/host/handlers/preferences.ts
24
24
  function createPreferencesWalletIframeHandlers(deps) {
@@ -15,9 +15,9 @@ import "./passkey-custody-VjdWp6-P.js";
15
15
  import "./singletons-C7_F77OY.js";
16
16
  import "./walletRecoveryCommit-D6lzaAHA.js";
17
17
  import "./keccak-3GZDz0C_.js";
18
- import "./signNear-B04A4qzs.js";
18
+ import "./signNear-d9Xz3SDg.js";
19
19
  import "./operationFingerprint-IujbIwg_.js";
20
- import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-BorCgXo5.js";
20
+ import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-D73F6HOf.js";
21
21
  import { n as respondOkResult, r as withProgress } from "./shared-HlqX0oXX.js";
22
22
  //#region src/SeamsWeb/walletIframe/host/handlers/recovery.ts
23
23
  function createRecoveryWalletIframeHandlers(deps) {
@@ -41,7 +41,7 @@ import { a as toIndexedDbChainTargetKey, t as normalizeIndexedDbAccountAddress }
41
41
  import { A as storeWalletEmailOtpMixedRegistrationData$1, C as storeWalletEcdsaRecoverySignerRecords$1, D as storeWalletEmailOtpEcdsaRegistrationData$1, E as storeWalletEd25519RegistrationData$1, F as WALLET_CUSTODY_ED25519_MATERIAL_KEY_KIND, M as getLastSelectedNearAccount, N as getNearAccountProjection, O as storeWalletEmailOtpEcdsaSignerRecords$1, R as buildEnvelopeAAD, S as storeUserData$1, T as storeWalletEd25519RecoveryRegistrationData$1, _ as rollbackUserRegistration$1, a as getLastUser$1, b as setWalletNearProvisioningState$1, c as hasPasskeyCredential$1, d as prepareWalletEd25519RegistrationProjectionPublication, f as prepareWalletEd25519RegistrationPublication, i as getAllUsers$1, j as storeWalletMixedRegistrationData$1, k as storeWalletEmailOtpEd25519RegistrationData$1, l as nearAuthenticatorsByAccount$1, m as prepareWalletMixedRegistrationPublication, n as finalizeWalletEcdsaRegistration$1, o as getUserBySignerSlot$1, p as prepareWalletEmailOtpEd25519RegistrationPublication, r as finalizeWalletEd25519SignerRegistration$1, s as getWalletNearProvisioningState$1, t as activateAuthenticatedWalletState$1, u as prepareWalletEcdsaRegistrationPublication, v as rollbackWalletEd25519SignerRegistration$1, w as storeWalletEcdsaSignerRecords$1, x as storeAuthenticator$1, y as setLastUser$1 } from "./accountLifecycle-SJSTOet6.js";
42
42
  import "./keccak-3GZDz0C_.js";
43
43
  import { n as parseEmailOtpChallengeDelivery, t as demoEmailOtpCodeFromDelivery } from "./challengeDelivery-CUYbTM4u.js";
44
- import { A as buildThresholdEd25519WebAuthnPrfSecretSource, B as buildBlockedMpcCapabilityHydrationPlan, C as respondWalletRegistration, D as startWalletAddSigner, E as startWalletAddAuthMethod, F as computeWalletCustodyAdminChallengeDigest, G as parseEmailOtpEcdsaExportWorkerIssuedSessionHandle, H as buildUseLiveRuntimeHydrationPlan, I as nearOperationStepUpPreparationPort, K as parseEmailOtpWorkerIssuedSessionHandle, L as nearEd25519YaoMaterialActivationFromMetadata, M as mintEd25519WalletSession, N as parseWalletSessionAlreadyCommittedResponseV1, O as activateRouterAbEcdsaPostRegistrationSession, P as parseWalletUnlockAlreadyCommittedResponseV1, R as nearEd25519YaoRuntimeRef, S as respondWalletAddSignerEcdsa, T as setupWalletRegistration, U as deriveThresholdEd25519ClientVerifyingShareWasm, V as buildRehydrateMaterialActivationHydrationPlan, W as getLastLoggedInSignerSlot, _ as finalizeWalletAddSigner, a as createSigningPlannerDecisionTraceEvent, b as parseWalletRegistrationEcdsaDerivationRespond, c as nearImplicitAccountFundingPort, d as completeWalletRegistrationNearProvisioning, f as createWalletAddAuthMethodIntent, g as finalizeWalletAddAuthMethod, h as fetchWalletEcdsaKeyFactsInventoryWithWebAuthn, i as withThresholdEd25519CommitQueue, j as localPrfFirstForEd25519WalletSessionMintAuthorization, k as parseProfileContinuityEcdsaWarmKey, l as activateWalletAddSignerEcdsa, m as fetchWalletEcdsaKeyFactsInventoryWithOperationCredential, o as planSigningSession, p as createWalletAddSignerIntent, r as resolveThresholdEd25519CommitQueueKey, s as parseAndValidateRegistrationCredentialConfirmationPayload, t as signNear, u as activateWalletRegistration, v as fundImplicitNearAccountForTesting, w as revokeWalletAuthMethod, x as requestAddAuthMethodEmailOtpChallenge, y as isEmailOtpWalletRegistrationFinalizeResponse, z as resolveNearEd25519YaoCapabilityHydrationV1 } from "./signNear-B04A4qzs.js";
44
+ import { A as buildThresholdEd25519WebAuthnPrfSecretSource, B as buildBlockedMpcCapabilityHydrationPlan, C as respondWalletRegistration, D as startWalletAddSigner, E as startWalletAddAuthMethod, F as computeWalletCustodyAdminChallengeDigest, G as parseEmailOtpEcdsaExportWorkerIssuedSessionHandle, H as buildUseLiveRuntimeHydrationPlan, I as nearOperationStepUpPreparationPort, K as parseEmailOtpWorkerIssuedSessionHandle, L as nearEd25519YaoMaterialActivationFromMetadata, M as mintEd25519WalletSession, N as parseWalletSessionAlreadyCommittedResponseV1, O as activateRouterAbEcdsaPostRegistrationSession, P as parseWalletUnlockAlreadyCommittedResponseV1, R as nearEd25519YaoRuntimeRef, S as respondWalletAddSignerEcdsa, T as setupWalletRegistration, U as deriveThresholdEd25519ClientVerifyingShareWasm, V as buildRehydrateMaterialActivationHydrationPlan, W as getLastLoggedInSignerSlot, _ as finalizeWalletAddSigner, a as createSigningPlannerDecisionTraceEvent, b as parseWalletRegistrationEcdsaDerivationRespond, c as nearImplicitAccountFundingPort, d as completeWalletRegistrationNearProvisioning, f as createWalletAddAuthMethodIntent, g as finalizeWalletAddAuthMethod, h as fetchWalletEcdsaKeyFactsInventoryWithWebAuthn, i as withThresholdEd25519CommitQueue, j as localPrfFirstForEd25519WalletSessionMintAuthorization, k as parseProfileContinuityEcdsaWarmKey, l as activateWalletAddSignerEcdsa, m as fetchWalletEcdsaKeyFactsInventoryWithOperationCredential, o as planSigningSession, p as createWalletAddSignerIntent, r as resolveThresholdEd25519CommitQueueKey, s as parseAndValidateRegistrationCredentialConfirmationPayload, t as signNear, u as activateWalletRegistration, v as fundImplicitNearAccountForTesting, w as revokeWalletAuthMethod, x as requestAddAuthMethodEmailOtpChallenge, y as isEmailOtpWalletRegistrationFinalizeResponse, z as resolveNearEd25519YaoCapabilityHydrationV1 } from "./signNear-d9Xz3SDg.js";
45
45
  import { t as executeWorkerOperation } from "./executeWorkerOperation-AM59l0J2.js";
46
46
  import { A as thresholdEcdsaRoleLocalDestroyPresignatureWasm, B as SignerWorkerOperationError, C as reconcileCanonicalEcdsaActivationWasm, D as thresholdEcdsaRoleLocalAdmitPresignatureWasm, E as storeLinkedDeviceEcdsaHolderMaterialWasm, F as thresholdEcdsaRoleLocalReservePresignatureWasm, H as getSignerWorkerOperationCoreCode, I as thresholdEcdsaRoleLocalRetirePresignaturePoolWasm, L as verifyRouterAbEcdsaRegistrationClientProofsWasm, M as thresholdEcdsaRoleLocalPresignSessionAbortWasm, N as thresholdEcdsaRoleLocalPresignSessionInitFromMaterialHandleWasm, O as thresholdEcdsaRoleLocalCommitPresignatureWasm, P as thresholdEcdsaRoleLocalPresignSessionStepWasm, R as EcdsaDerivationClientCustomRequestType, S as prepareLinkedDeviceEcdsaSourceContributionWasm, T as storeEcdsaRoleLocalSigningMaterialWasm, U as getSignerWorkerOperationErrorCode, V as WorkerControlMessage, _ as finalizeRouterAbEcdsaExplicitExportWasm, a as resolveRouterAbEcdsaDerivationPresignaturePoolPolicy, b as persistInitialCanonicalEcdsaActivationWasm, c as closeRouterAbEcdsaPostRegistrationCeremonyWasm, d as createRouterAbEcdsaPostRegistrationCeremonyWasm, f as createRouterAbEcdsaRegistrationCeremonyWasm, g as finalizeEcdsaHolderOrdinaryExportWasm, h as finalizeEcdsaClientBootstrapCommandWasm, i as getRouterAbEcdsaDerivationClientPresignaturePoolDepth, j as thresholdEcdsaRoleLocalListAvailablePresignaturesWasm, k as thresholdEcdsaRoleLocalComputeSignatureShareFromPresignatureHandleWasm, l as closeRouterAbEcdsaRegistrationCeremonyWasm, m as destroyLinkedDeviceEcdsaHolderMaterialsWasm, o as scheduleRouterAbEcdsaDerivationClientPresignaturePoolRefill, p as destroyLinkedDeviceEcdsaHolderMaterialWasm, r as clearAllRouterAbEcdsaDerivationClientPresignatures, s as clearLinkedDeviceEcdsaHolderMaterialsWasm, u as createEcdsaHolderOrdinaryExportRequestWasm, v as finalizeRouterAbEcdsaRegistrationActivationWasm, w as signWalletRecoveryEcdsaMaterialPossessionProofWasm, x as prepareEcdsaClientBootstrapCommandWasm, y as openEcdsaRoleLocalSigningMaterialWasm, z as EcdsaPresignClientRequestType } from "./secp256k1-DaLqpj1T.js";
47
47
  import { C as ecdsaRoleLocalReadyRecordMatchesInput, E as parseEcdsaRoleLocalReadyRecord, O as serializeEcdsaRoleLocalReadyRecord, S as buildEcdsaRoleLocalPublicFacts, T as ecdsaRoleLocalReadyRecordStorageKeyFacts, b as buildEcdsaRoleLocalEmailOtpAuthMethod, w as ecdsaRoleLocalReadyRecordStorageKey, x as buildEcdsaRoleLocalPasskeyAuthMethod, y as routerAbEcdsaDerivationPublicCapabilitiesEqual } from "./ecdsaCapabilityManifest-BQdcnCxz.js";
@@ -49,14 +49,14 @@ import { i as buildNearAccountRefs } from "./profileAccountProjection-DHk5l-mN.j
49
49
  import { a as isWorkerError, o as isWorkerProgress, s as isWorkerSuccess, t as DEFAULT_CONFIRMATION_CONFIG } from "./signer-worker-C16IgcXt.js";
50
50
  import { a as computeAddSignerIntentDigest, c as orderActionForDigest, d as __setWalletIframeHostMode, i as prewarmTxConfirmerUi, n as mountConfirmUI, o as computeUiIntentDigestFromNep413, s as computeUiIntentDigestFromTxs, u as __isWalletIframeHostMode } from "./confirm-ui-ru96-Lq1.js";
51
51
  import { C as UserConfirmMessageType, T as normalizeConfirmationConfig, _ as getNearAccountId, b as getSigningAuthMode, c as createUserConfirmScopedWorker, d as sanitizeForPostMessage, f as sendConfirmProgress, g as getIntentDigest, h as assertSigningRequestContext, l as isUserCancelledUserConfirm, m as assertNoForbiddenMainThreadSigningSecrets, n as createConfirmTxFlowAdapters, o as collectAuthenticationCredentialForWalletChallengeB64u, p as sendConfirmResponse, r as collectAuthenticationCredentialForChallengeB64u, s as ERROR_MESSAGES, t as createConfirmSession, u as parseTransactionSummary, v as getSignIntentDigestSubject, w as UserConfirmationType, x as getTxCount, y as getSignTransactionPayload } from "./adapters-BN_t1F7m.js";
52
- import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-BhF6IFbD.js";
53
- import { A as resolveExactOwnerLaneScope, B as ensureSealedRefreshStartupParityForThresholdEcdsaBootstrap, C as buildFreshEmailOtpRoutePlan, D as buildExactLinkedEmailOtpOwnerLaneScope, E as buildExactEcdsaPasskeyOwnerLaneScope, F as authorizeEvmFamilyEcdsaSigningCapability, G as removeLinkedEcdsaHolderRuntimeV1, H as clearLinkedEcdsaHolderRuntimesV1, I as buildCanonicalEvmFamilyEcdsaSigningCapability, K as resolveLinkedEcdsaHolderRuntimeV1, L as buildExactEcdsaDirectCapabilityRuntime, M as buildPersistedEcdsaRoleLocalMaterial, N as ecdsaRoleLocalPersistedMaterialSource, O as buildExactPasskeyOwnerLaneScope, P as resolveEcdsaRoleLocalMaterial, R as buildExactEvmFamilyWalletSessionAuthorization, S as buildEmailOtpSigningSessionRoutePlan, T as throwEmailOtpSigningSessionAuthStateError, U as installLinkedEcdsaHolderRuntimeV1, V as isRetryableSealedRefreshCapabilityFetchError, W as listLinkedEcdsaHolderRuntimesV1, _ as resolveEmailOtpEcdsaSigningSessionAuth, a as reportTempoFinalized, b as withThresholdEcdsaSigningQueue, c as resolveActiveWalletAuthorityEcdsaRuntimeV1, d as createActiveEcdsaCapabilityRuntimeForChainResolver, f as createActiveEcdsaCapabilityRuntimeResolver, g as requestEmailOtpSigningSessionChallenge$1, h as refreshEmailOtpSigningSession$1, i as reportTempoDroppedOrReplaced, j as resolveExactWalletAuthAuthority$1, k as isOwnerRelinkRequiredError, l as issueEcdsaOperationStepUpAuthorization, m as resolveExactEcdsaSealedRuntime, n as reportTempoBroadcastAccepted, o as signEvmFamily, p as resolveExactEcdsaCapabilityRuntime, r as reportTempoBroadcastRejected, t as reconcileTempoNonceLane, u as prepareEcdsaOperationStepUp, v as clearThresholdEcdsaSigningQueue, w as emailOtpEcdsaBootstrapRouteAuthFromRoutePlan, x as assertEmailOtpSigningSessionAuthLane, y as resolveThresholdEcdsaSigningQueueKey, z as buildEmailOtpRoutePlan } from "./signEvmFamily-CwJEkCP7.js";
52
+ import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-DVlqSMOs.js";
53
+ import { A as resolveExactOwnerLaneScope, B as ensureSealedRefreshStartupParityForThresholdEcdsaBootstrap, C as buildFreshEmailOtpRoutePlan, D as buildExactLinkedEmailOtpOwnerLaneScope, E as buildExactEcdsaPasskeyOwnerLaneScope, F as authorizeEvmFamilyEcdsaSigningCapability, G as removeLinkedEcdsaHolderRuntimeV1, H as clearLinkedEcdsaHolderRuntimesV1, I as buildCanonicalEvmFamilyEcdsaSigningCapability, K as resolveLinkedEcdsaHolderRuntimeV1, L as buildExactEcdsaDirectCapabilityRuntime, M as buildPersistedEcdsaRoleLocalMaterial, N as ecdsaRoleLocalPersistedMaterialSource, O as buildExactPasskeyOwnerLaneScope, P as resolveEcdsaRoleLocalMaterial, R as buildExactEvmFamilyWalletSessionAuthorization, S as buildEmailOtpSigningSessionRoutePlan, T as throwEmailOtpSigningSessionAuthStateError, U as installLinkedEcdsaHolderRuntimeV1, V as isRetryableSealedRefreshCapabilityFetchError, W as listLinkedEcdsaHolderRuntimesV1, _ as resolveEmailOtpEcdsaSigningSessionAuth, a as reportTempoFinalized, b as withThresholdEcdsaSigningQueue, c as resolveActiveWalletAuthorityEcdsaRuntimeV1, d as createActiveEcdsaCapabilityRuntimeForChainResolver, f as createActiveEcdsaCapabilityRuntimeResolver, g as requestEmailOtpSigningSessionChallenge$1, h as refreshEmailOtpSigningSession$1, i as reportTempoDroppedOrReplaced, j as resolveExactWalletAuthAuthority$1, k as isOwnerRelinkRequiredError, l as issueEcdsaOperationStepUpAuthorization, m as resolveExactEcdsaSealedRuntime, n as reportTempoBroadcastAccepted, o as signEvmFamily, p as resolveExactEcdsaCapabilityRuntime, r as reportTempoBroadcastRejected, t as reconcileTempoNonceLane, u as prepareEcdsaOperationStepUp, v as clearThresholdEcdsaSigningQueue, w as emailOtpEcdsaBootstrapRouteAuthFromRoutePlan, x as assertEmailOtpSigningSessionAuthLane, y as resolveThresholdEcdsaSigningQueueKey, z as buildEmailOtpRoutePlan } from "./signEvmFamily-CIlzzMEd.js";
54
54
  import { o as signingAuthModeFromSigningAuthPlan, t as SigningAuthPlanKind } from "./types-De9wwznV.js";
55
55
  import { A as buildEmailOtpAuthContextForCanonicalWallet, B as laneCandidateStateFromRuntimePolicy, C as requireAuthoritativeExpiredWalletSessionAuthorizationBoundary, D as buildNearTransactionSigningLane, F as emailOtpAuthContextProviderUserId, I as emailOtpAuthContextRetention, K as emitSigningSessionFlowFailure, L as isEmailOtpPendingSingleUseAuthContext, M as emailOtpAuthContextConsumedAtMs, N as emailOtpAuthContextEmailHashHex, P as emailOtpAuthContextProvider, R as isEmailOtpSessionAuthContext, S as parseWalletSessionAuthorizationBoundary, V as selectedEcdsaLane, _ as readAvailableSigningLanes, b as buildAuthorizedNearEd25519YaoSigningPreparation, d as availableEd25519SigningLaneAuthMethod, f as ecdsaAvailableLaneCandidatesForTarget, g as isConcreteAvailableSigningLane, h as ecdsaAvailableLaneTargets, j as buildEmailOtpAuthContextForWalletAuthMethod, k as buildEmailOtpAuthContext, l as activeWalletAuthorityAvailableLaneFromProjection, m as ecdsaAvailableLaneIdentityKey, p as ecdsaAvailableLaneForTarget, q as emitSigningSessionFlowTrace, u as availableEcdsaSigningLaneAuthMethod, v as buildActiveNearEd25519WalletSessionAuthorization, x as nearEd25519SessionMatchesMaterialActivation, y as buildAuthorizationRequiredNearEd25519YaoSigningPreparation } from "./transactionState-CqOJIG_c.js";
56
56
  import "./operationFingerprint-IujbIwg_.js";
57
57
  import { d as WalletSessionFailureError, h as WALLET_SESSION_FAILURE_CODES, m as walletSessionFailureFromError, p as walletSessionFailureFromCode } from "./routerAbNormalSigning-BuCjxFf_.js";
58
58
  import { t as bytesToHex } from "./bytes-BGPfIYh5.js";
59
- import { a as PENDING_CHALLENGE_B64U, c as consumeIntentDigestPreparation, l as registerIntentDigestPreparation, n as EvmFamilyEcdsaMaterialSupersededError, o as PENDING_INTENT_DIGEST, s as clearIntentDigestPreparation, u as createEvmNonceBackend } from "./signatureUses-BsYpH81W.js";
59
+ import { a as PENDING_CHALLENGE_B64U, c as consumeIntentDigestPreparation, l as registerIntentDigestPreparation, n as EvmFamilyEcdsaMaterialSupersededError, o as PENDING_INTENT_DIGEST, s as clearIntentDigestPreparation, u as createEvmNonceBackend } from "./signatureUses-Dg0S52Mp.js";
60
60
  import { n as removeExportViewerHostIfPresent, t as isExportViewerSessionOpen } from "./export-viewer-host-CEOLFmXD.js";
61
61
  import { r as webAuthnPromptCoordinator, t as handleRegistrationFlow } from "./registration-CpmMkcWY.js";
62
62
  import { n as generateSessionId, t as cacheCredentialBoundarySetupExportPrfFirst } from "./prfCache-hJwwaEqO.js";
@@ -13285,31 +13285,6 @@ function exactWalletSessionWithOperationCredentialOrThrow(result, message) {
13285
13285
  case "upgrade_required": throw new WalletSessionAuthorizationUpgradeRequiredError(message);
13286
13286
  }
13287
13287
  }
13288
- async function readExactOwnerLaneWalletSession(args) {
13289
- const read = await walletSessionAuthorizations.readExactActiveForWallet({
13290
- walletId: args.walletId,
13291
- authorityId: args.authorityId,
13292
- authMethodId: args.authMethodId
13293
- });
13294
- switch (read.kind) {
13295
- case "found":
13296
- if (!exactWalletSessionMatchesAuthorityScope({
13297
- record: read.record,
13298
- operationCredential: read.operationCredential,
13299
- scope: args
13300
- })) throw new Error("[SigningEngine] selected Wallet Authority session identity mismatch");
13301
- if (read.record.expiresAtMs <= Date.now()) throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: expired");
13302
- return;
13303
- case "missing": throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: missing");
13304
- case "upgrade_required": throw new WalletSessionAuthorizationUpgradeRequiredError("[SigningEngine] selected Wallet Authority Wallet Session requires a newer client");
13305
- case "corrupt": throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: corrupt");
13306
- case "persistence_unavailable": throw new Error("[SigningEngine] selected Wallet Authority session is unavailable: persistence_unavailable");
13307
- default: return assertNeverWalletSessionAuthorizationRead(read);
13308
- }
13309
- }
13310
- function assertNeverWalletSessionAuthorizationRead(value) {
13311
- throw new Error(`Unknown exact Wallet Session authorization read: ${String(value)}`);
13312
- }
13313
13288
  //#endregion
13314
13289
  //#region src/core/signingEngine/session/emailOtp/zeroize.ts
13315
13290
  function zeroizeBytes(bytes) {
@@ -14291,7 +14266,7 @@ async function handleIntentDigestSigningFlow(ctx, request, worker, opts) {
14291
14266
  };
14292
14267
  const promptDecisionPromise = session.promptUser({
14293
14268
  securityContext,
14294
- loading: !!intentPreparation,
14269
+ loading: !!intentPreparation && signingAuthMode !== "warmSession",
14295
14270
  onMounted: () => {
14296
14271
  markPromptReady();
14297
14272
  }
@@ -29688,7 +29663,7 @@ var BrowserSigningSurface = class {
29688
29663
  emailOtpSessions: this.emailOtpSessions,
29689
29664
  sealedSigningSessionStore: deps.sealedSigningSessionStore
29690
29665
  }, input),
29691
- resolveOwnerLaneScope: (walletId) => this.resolveActiveOwnerLaneScope(walletId)
29666
+ resolveOwnerLaneScope: (walletId) => this.resolveSelectedOwnerLaneScope(walletId)
29692
29667
  });
29693
29668
  this.enginePorts = createBrowserSigningSurfaceEnginePorts({
29694
29669
  runtimePorts: this.runtimePorts,
@@ -29714,7 +29689,7 @@ var BrowserSigningSurface = class {
29714
29689
  workerWarmupPolicy: deps.workerWarmupPolicy,
29715
29690
  getTheme: () => this.appearance.theme.mode,
29716
29691
  ensureSealedRefreshStartupParity: () => this.ensureSealedRefreshStartupParity(),
29717
- resolveOwnerLaneScope: (walletId) => this.resolveActiveOwnerLaneScope(walletId),
29692
+ resolveOwnerLaneScope: (walletId) => this.resolveSelectedOwnerLaneScope(walletId),
29718
29693
  getEnginePorts: () => this.enginePorts,
29719
29694
  getRegistrationPublicDeps: () => this.registrationPublicDeps,
29720
29695
  prepareNearEd25519YaoMaterialBoundary: this.prepareExactNearEd25519YaoMaterialBoundary.bind(this)
@@ -30035,11 +30010,11 @@ var BrowserSigningSurface = class {
30035
30010
  return await readOwnerScopedSigningLanes(this.sessionPublicDeps, args);
30036
30011
  }
30037
30012
  /**
30038
- * R103C derivation chain for post-login operations: the unique active Wallet
30039
- * Session authority resolves through the active wallet auth method to one
30040
- * exact owner scope. Callers never supply credential or slot hints.
30013
+ * Resolves the selected active Wallet Authority and auth method to one exact
30014
+ * owner scope. Session availability is resolved by the lane inventory so an
30015
+ * expired session can enter operation step-up.
30041
30016
  */
30042
- async resolveActiveOwnerLaneScope(walletId) {
30017
+ async resolveSelectedOwnerLaneScope(walletId) {
30043
30018
  const parsedWalletId = parseWalletId(walletId);
30044
30019
  if (!parsedWalletId.ok) throw new Error(parsedWalletId.error.message);
30045
30020
  const stores = {
@@ -30053,13 +30028,6 @@ var BrowserSigningSurface = class {
30053
30028
  const { selection, authMethod, authority } = selected;
30054
30029
  if (selection.walletId !== parsedWalletId.value || selection.walletAuthMethodId !== authMethod.walletAuthMethodId || authMethod.walletId !== parsedWalletId.value || authMethod.walletAuthorityId !== authority.authorityId || authority.walletId !== parsedWalletId.value) throw new Error("[SigningEngine] selected Wallet Authority identity mismatch");
30055
30030
  if (selection.lockState !== "unlocked" || authMethod.status !== "active" || authority.state !== "active") throw new Error("[SigningEngine] selected Wallet Authority is inactive or locked");
30056
- await readExactOwnerLaneWalletSession({
30057
- walletId: parsedWalletId.value,
30058
- authorityId: authority.authorityId,
30059
- authMethodId: authMethod.walletAuthMethodId,
30060
- authorityDigestB64u: authority.authorityDigestB64u,
30061
- authorityRevocationEpoch: authority.revocationEpoch
30062
- });
30063
30031
  if (authority.provenance.kind === "device_link" && authMethod.kind === "passkey" && authority.signerActivations.ed25519) return buildExactPasskeyOwnerLaneScope({
30064
30032
  authMethod,
30065
30033
  signerSlot: await resolveLinkedPasskeyOwnerSignerSlot({
@@ -40882,32 +40850,32 @@ function createSigningRuntime(deps) {
40882
40850
  storeWalletEmailOtpEcdsaRegistrationData: async (input) => (await getEcdsaWalletRecords()).storeWalletEmailOtpEcdsaRegistrationData(input)
40883
40851
  };
40884
40852
  const nearSigning = { signNear: async (request) => {
40885
- const { signNear } = await import("./signNear-B04A4qzs.js").then((n) => n.n);
40853
+ const { signNear } = await import("./signNear-d9Xz3SDg.js").then((n) => n.n);
40886
40854
  return signNear(deps.signing.near.getDeps(), request);
40887
40855
  } };
40888
40856
  const evmFamilySigning = {
40889
40857
  signEvmFamily: async (args) => {
40890
- const { signEvmFamily } = await import("./signEvmFamily-CwJEkCP7.js").then((n) => n.s);
40858
+ const { signEvmFamily } = await import("./signEvmFamily-CIlzzMEd.js").then((n) => n.s);
40891
40859
  return signEvmFamily(deps.signing.evmFamily.getDeps(), args);
40892
40860
  },
40893
40861
  reportTempoBroadcastAccepted: async (args) => {
40894
- const { reportTempoBroadcastAccepted } = await import("./signEvmFamily-CwJEkCP7.js").then((n) => n.s);
40862
+ const { reportTempoBroadcastAccepted } = await import("./signEvmFamily-CIlzzMEd.js").then((n) => n.s);
40895
40863
  return reportTempoBroadcastAccepted(deps.signing.evmFamily.getDeps(), args);
40896
40864
  },
40897
40865
  reportTempoBroadcastRejected: async (args) => {
40898
- const { reportTempoBroadcastRejected } = await import("./signEvmFamily-CwJEkCP7.js").then((n) => n.s);
40866
+ const { reportTempoBroadcastRejected } = await import("./signEvmFamily-CIlzzMEd.js").then((n) => n.s);
40899
40867
  return reportTempoBroadcastRejected(deps.signing.evmFamily.getDeps(), args);
40900
40868
  },
40901
40869
  reportTempoFinalized: async (args) => {
40902
- const { reportTempoFinalized } = await import("./signEvmFamily-CwJEkCP7.js").then((n) => n.s);
40870
+ const { reportTempoFinalized } = await import("./signEvmFamily-CIlzzMEd.js").then((n) => n.s);
40903
40871
  return reportTempoFinalized(deps.signing.evmFamily.getDeps(), args);
40904
40872
  },
40905
40873
  reportTempoDroppedOrReplaced: async (args) => {
40906
- const { reportTempoDroppedOrReplaced } = await import("./signEvmFamily-CwJEkCP7.js").then((n) => n.s);
40874
+ const { reportTempoDroppedOrReplaced } = await import("./signEvmFamily-CIlzzMEd.js").then((n) => n.s);
40907
40875
  return reportTempoDroppedOrReplaced(deps.signing.evmFamily.getDeps(), args);
40908
40876
  },
40909
40877
  reconcileTempoNonceLane: async (args) => {
40910
- const { reconcileTempoNonceLane } = await import("./signEvmFamily-CwJEkCP7.js").then((n) => n.s);
40878
+ const { reconcileTempoNonceLane } = await import("./signEvmFamily-CIlzzMEd.js").then((n) => n.s);
40911
40879
  return reconcileTempoNonceLane(deps.signing.evmFamily.getDeps(), args);
40912
40880
  }
40913
40881
  };
@@ -21,19 +21,19 @@ async function preloadWalletHostRecoveryCodeSurface() {
21
21
  await recoveryCodeSurfacePromise;
22
22
  }
23
23
  async function preloadRegistrationPreparation() {
24
- registrationPreparationPromise ??= import("./registrationPreparationPreload-u3ruCmpF.js");
24
+ registrationPreparationPromise ??= import("./registrationPreparationPreload-9iIiVEzP.js");
25
25
  await (await registrationPreparationPromise).preloadWalletHostRegistrationPreparation();
26
26
  }
27
27
  function loadRuntimeForKind(kind) {
28
28
  switch (kind) {
29
- case "auth": return import("./runtime-auth-Da9yQyaD.js");
30
- case "near": return import("./runtime-near-DBJ4KfFv.js");
31
- case "ecdsa": return import("./runtime-ecdsa-tempo-B7dBVcCI.js");
32
- case "email_otp": return import("./runtime-email-otp-CckVQZJC.js");
33
- case "recovery": return import("./runtime-recovery-kPgl9nTT.js");
34
- case "export": return import("./runtime-export-WAiBwZL_.js");
35
- case "device_link": return import("./runtime-device-link-DNlzlwrr.js");
36
- case "preferences": return import("./runtime-preferences-DmH7eMHH.js");
29
+ case "auth": return import("./runtime-auth-CqJzUZit.js");
30
+ case "near": return import("./runtime-near-DOmJffsR.js");
31
+ case "ecdsa": return import("./runtime-ecdsa-tempo-CV2jjenL.js");
32
+ case "email_otp": return import("./runtime-email-otp-CRXxFJfB.js");
33
+ case "recovery": return import("./runtime-recovery-wZqjlB5u.js");
34
+ case "export": return import("./runtime-export-DDRRvQHJ.js");
35
+ case "device_link": return import("./runtime-device-link-BDex3l39.js");
36
+ case "preferences": return import("./runtime-preferences-CPxDZqxr.js");
37
37
  }
38
38
  return assertNever(kind);
39
39
  }
@@ -17,14 +17,14 @@ import { a as toIndexedDbChainTargetKey } from "./normalization-CtQuSab0.js";
17
17
  import { t as demoEmailOtpCodeFromDelivery } from "./challengeDelivery-CUYbTM4u.js";
18
18
  import { t as buildReadySecp256k1SigningMaterial, y as openEcdsaRoleLocalSigningMaterialWasm } from "./secp256k1-DaLqpj1T.js";
19
19
  import { D as projectEcdsaRoleLocalPublicFactsToChainTarget, y as routerAbEcdsaDerivationPublicCapabilitiesEqual } from "./ecdsaCapabilityManifest-BQdcnCxz.js";
20
- import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-BhF6IFbD.js";
20
+ import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-DVlqSMOs.js";
21
21
  import { i as isPasskeySigningAuthPlan, r as isEmailOtpSigningAuthPlan, t as SigningAuthPlanKind } from "./types-De9wwznV.js";
22
22
  import { C as requireAuthoritativeExpiredWalletSessionAuthorizationBoundary, E as buildEvmTransactionSigningLane, G as emitSigningPlannerDecisionTrace, H as createSigningBoundaryTraceEvent, K as emitSigningSessionFlowFailure, O as buildTempoTransactionSigningLane, T as withThresholdCommitQueue, U as emitSigningBoundaryTrace, V as selectedEcdsaLane, W as emitSigningLaneResolutionTrace, f as ecdsaAvailableLaneCandidatesForTarget, g as isConcreteAvailableSigningLane, o as selectEvmFamilyEcdsaMaterialCandidate, q as emitSigningSessionFlowTrace, r as prepareTransactionSigningOperation, u as availableEcdsaSigningLaneAuthMethod, w as clearThresholdCommitQueue, z as laneCandidateAuthMethod } from "./transactionState-CqOJIG_c.js";
23
23
  import { f as signingAuthPlanFromSigningSessionPlan, i as parseSigningOperationFingerprintDigest, t as computeSigningOperationFingerprint } from "./operationFingerprint-IujbIwg_.js";
24
24
  import { _ as buildOperationAuthorizationQueueKey, b as decideWalletSessionQuotaAdmissionFailure, f as walletSessionFailureErrorFromPayload, g as WalletSessionQuotaAdmissionError, h as WALLET_SESSION_FAILURE_CODES, m as walletSessionFailureFromError, y as classifyWalletSessionQuotaAdmissionFailure } from "./routerAbNormalSigning-BuCjxFf_.js";
25
25
  import { t as bytesToHex } from "./bytes-BGPfIYh5.js";
26
- import { d as fromManagedNonceReservationSnapshot, f as reserveNonceInputFromBoundary, p as buildEvmDisplayModel, r as isEvmFamilyEcdsaMaterialSupersededError, t as requiredEvmFamilyRequestSignatureUses } from "./signatureUses-BsYpH81W.js";
27
- import { t as buildTempoDisplayModel } from "./display-rIXVrumh.js";
26
+ import { d as fromManagedNonceReservationSnapshot, f as reserveNonceInputFromBoundary, p as buildEvmDisplayModel, r as isEvmFamilyEcdsaMaterialSupersededError, t as requiredEvmFamilyRequestSignatureUses } from "./signatureUses-Dg0S52Mp.js";
27
+ import { t as buildTempoDisplayModel } from "./display-CV_FRBAv.js";
28
28
  //#region src/core/signingEngine/session/material/linkedEcdsaHolderRuntime.ts
29
29
  const linkedHolderRuntimes = /* @__PURE__ */ new Map();
30
30
  function runtimeKey(input) {
@@ -11,8 +11,8 @@ import "./signingSessionSeal-C3reoPeZ.js";
11
11
  import { t as executeWorkerOperation } from "./executeWorkerOperation-AM59l0J2.js";
12
12
  import "./operationFingerprint-IujbIwg_.js";
13
13
  import { t as bytesToHex } from "./bytes-BGPfIYh5.js";
14
- import { i as signEvmFamilyWithUiConfirm, p as buildEvmDisplayModel, t as requiredEvmFamilyRequestSignatureUses } from "./signatureUses-BsYpH81W.js";
15
- import { t as buildTempoDisplayModel } from "./display-rIXVrumh.js";
14
+ import { i as signEvmFamilyWithUiConfirm, p as buildEvmDisplayModel, t as requiredEvmFamilyRequestSignatureUses } from "./signatureUses-Dg0S52Mp.js";
15
+ import { t as buildTempoDisplayModel } from "./display-CV_FRBAv.js";
16
16
  import { i as decodeCoseP256PublicKeyWasm } from "./evmCryptoWasm-Dq4lGE_A.js";
17
17
  import { t as EvmAdapter } from "./evmAdapter-CUJEi4gT.js";
18
18
  //#region src/core/signingEngine/chains/tempo/tempoSignerWasm.ts
@@ -7,7 +7,7 @@ import "./exactSigningLaneIdentity-DoHwMciz.js";
7
7
  import "./ecdsaDerivationRoleLocalBootstrap-BBmajMQa.js";
8
8
  import "./signingSessionSeal-C3reoPeZ.js";
9
9
  import "./operationFingerprint-IujbIwg_.js";
10
- import { i as signEvmFamilyWithUiConfirm, p as buildEvmDisplayModel, t as requiredEvmFamilyRequestSignatureUses } from "./signatureUses-BsYpH81W.js";
10
+ import { i as signEvmFamilyWithUiConfirm, p as buildEvmDisplayModel, t as requiredEvmFamilyRequestSignatureUses } from "./signatureUses-Dg0S52Mp.js";
11
11
  import { t as EvmAdapter } from "./evmAdapter-CUJEi4gT.js";
12
12
  //#region src/core/signingEngine/flows/signEvmFamily/signEvmWithUiConfirm.ts
13
13
  async function signEvmWithUiConfirm(args) {