@seams/wallet 0.6.0 → 0.6.2

package/dist/esm/sdk/{registration-D8nYJKec.js → registration-PIBMSsQR.js}

@@ -13,24 +13,24 @@ import { _ as parseUnixMs, a as deriveSigningRootId, l as requireEvmFamilySignin
 import { L as buildEnvelopeAAD, M as WALLET_CUSTODY_ED25519_MATERIAL_KEY_KIND, d as prepareWalletEd25519RegistrationProjectionPublication, f as prepareWalletEd25519RegistrationPublication, p as prepareWalletEmailOtpEd25519RegistrationPublication, u as prepareWalletEcdsaRegistrationPublication } from "./accountLifecycle-Ddavc_FC.js";
 import { t as toAccountId } from "./accountIds-Ck4GAQfm.js";
 import { o as normalizeThresholdRuntimePolicyScope, t as DEFAULT_THRESHOLD_SESSION_POLICY, v as parseWalletAuthorityV1 } from "./sessionPolicy-B4FsPuk2.js";
-import { $ as parseRouterAbEcdsaCredentialFreeSessionActivationResponseV1, At as buildEmailOtpWalletAuthAuthority, Bt as parseWalletAuthAuthorityRef, Cn as sameRouterAbMpcMaterialActivationRef, Dt as sameRouterAbEcdsaRegistrationActivationReceiptV1, Ft as isEmailOtpWalletAuthAuthority, Gt as ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, Ht as walletAuthAuthorityRef, Jt as ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1, Lt as parseEmailOtpWalletAuthAuthority, Ot as sameRouterAbEcdsaVerifiedClientActivationFactsV1, Qt as ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, R as parseWalletSessionOperationCredentialV1, Rt as parsePasskeyWalletAuthAuthority, Sn as routerAbMpcMaterialActivationRefToWire, Tt as sameRouterAbEcdsaDerivationPublicCapabilityV1, Ut as ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, Wt as ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1, Xt as ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1, an as parseRouterAbEd25519YaoExportResultV1, d as parseActiveWalletSessionV1, dt as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, fn as parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1, ft as parseRouterAbEcdsaRegistrationActivationReceiptV1, gn as parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1, gt as parseRouterAbEcdsaVerifiedClientActivationFactsV1, hn as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, in as parseRouterAbEd25519YaoExportExecuteRequestV1, it as parseRouterAbEcdsaDerivationPublicCapabilityV1, jt as buildPasskeyWalletAuthAuthority, lt as parseRouterAbEcdsaPostRegistrationSessionActivationPolicyV1, r as cloneAuthenticatorOptions, rn as parseRouterAbEd25519YaoExportAdmissionReceiptV1, rt as parseRouterAbEcdsaDerivationNormalSigningStateV1, wt as sameRouterAbEcdsaDerivationNormalSigningStateV1, xn as routerAbMpcMaterialActivationRefFromWire } from "./ecdsaPresignLifecycle-D_KCktCj.js";
+import { $ as parseRouterAbEcdsaCredentialFreeSessionActivationResponseV1, At as buildEmailOtpWalletAuthAuthority, Bt as parseWalletAuthAuthorityRef, Cn as routerAbMpcMaterialActivationRefToWire, Dt as sameRouterAbEcdsaRegistrationActivationReceiptV1, Ft as isEmailOtpWalletAuthAuthority, Gt as ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, Ht as walletAuthAuthorityRef, Jt as ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1, Lt as parseEmailOtpWalletAuthAuthority, Ot as sameRouterAbEcdsaVerifiedClientActivationFactsV1, Qt as ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, R as parseWalletSessionOperationCredentialV1, Rt as parsePasskeyWalletAuthAuthority, Sn as routerAbMpcMaterialActivationRefFromWire, Tt as sameRouterAbEcdsaDerivationPublicCapabilityV1, Ut as ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, Wt as ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1, Xt as ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1, an as parseRouterAbEd25519YaoExportResultV1, d as parseActiveWalletSessionV1, dt as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, fn as parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1, ft as parseRouterAbEcdsaRegistrationActivationReceiptV1, gn as parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1, gt as parseRouterAbEcdsaVerifiedClientActivationFactsV1, hn as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, in as parseRouterAbEd25519YaoExportExecuteRequestV1, it as parseRouterAbEcdsaDerivationPublicCapabilityV1, jt as buildPasskeyWalletAuthAuthority, lt as parseRouterAbEcdsaPostRegistrationSessionActivationPolicyV1, r as cloneAuthenticatorOptions, rn as parseRouterAbEd25519YaoExportAdmissionReceiptV1, rt as parseRouterAbEcdsaDerivationNormalSigningStateV1, vn as sameRouterAbEd25519YaoRegistrationAdmissionRequestV1, wn as sameRouterAbMpcMaterialActivationRef, wt as sameRouterAbEcdsaDerivationNormalSigningStateV1 } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
 import { d as parseMpcWalletSigningQuotaId, g as parseWalletSessionMintId, h as parseWalletSessionId, m as parseWalletSessionAuthorizationId } from "./capabilityKinds-jwCEaqBU.js";
 import { E as SigningSessionIds, H as isExactEcdsaSigningLaneIdentity, U as nearEd25519SignerBindingFromBoundaryFields, b as toParticipantId, bt as parseSdkEcdsaDerivationSigningRootId, j as signingLaneAuthMethod, ot as parseCanonicalEcdsaServerActivationRequest, x as toRpId, xt as parseSdkEcdsaDerivationSigningRootVersion } from "./evmFamilyEcdsaIdentity-_kuKSW35.js";
 import { a as buildEmailOtpEnvelopeFactor, c as buildPasskeyEnvelopeFactor, d as parsePasskeyCustodyEnvelopeRecord, f as parseWalletCustodyEnvelopeOwnershipWireV1, h as isWalletCustodySeedBinding, l as custodyEnvelopeBindingJsonV1, n as walletCustodyCommitPayloadWithRecoveryBackupAcknowledgement, r as WALLET_CUSTODY_ENVELOPE_VERSION_V2, u as custodyEnvelopeOwnershipWireV1 } from "./passkey-custody-BaHyYMhj.js";
 import { a as parseEcdsaRelayerKeyId, c as parseEcdsaRoleLocalMaterialHandle, d as parseEcdsaThresholdKeyId, l as parseEcdsaRoleLocalPersistedMaterialRef, n as parseEcdsaClientVerifyingPublicKey33B64u, o as parseEcdsaRoleLocalBindingDigest } from "./keyMaterialBrands-BbjCfzXv.js";
 import { i as RegistrationEventPhase, p as createRegistrationFlowEvent } from "./sdkSentEvents-5Pi-hjHB.js";
-import { C as preparePendingNearRegistration, E as parseRouterAbTraceContextV1, S as planPendingNearRegistration, T as createRouterAbTraceContextV1, a as resolveAccountKeyMaterialTarget, b as assertPendingWalletRegistrationIdentity, g as prepareWalletCustodyEcdsaContinuity, s as IndexedDBManager, v as walletSessionAuthorizations, w as ROUTER_AB_TRACE_ID_HEADER_V1, x as parsePendingWalletRegistrationCommitV1 } from "./ed25519SeedMaterial-0VmS6K9P.js";
+import { C as preparePendingNearRegistration, E as parseRouterAbTraceContextV1, S as planPendingNearRegistration, T as createRouterAbTraceContextV1, a as resolveAccountKeyMaterialTarget, b as assertPendingWalletRegistrationIdentity, g as prepareWalletCustodyEcdsaContinuity, s as IndexedDBManager, v as walletSessionAuthorizations, w as ROUTER_AB_TRACE_ID_HEADER_V1, x as parsePendingWalletRegistrationCommitV1 } from "./ed25519SeedMaterial-Cghz8-XB.js";
 import { t as parseSignerSlot } from "./signerSlot-DbNAs-kc.js";
 import { a as SIGNING_SESSION_SEAL_ALG, c as SIGNING_SESSION_SECRET_KIND, l as parseRouterAbEd25519NormalSigningState, o as SIGNING_SESSION_SEAL_GROUP_ID, s as SIGNING_SESSION_SEAL_STORAGE_SCOPE, u as requireRouterAbEd25519NormalSigningState } from "./signingSessionSeal-CdtgXHSL.js";
 import { n as parseEmailOtpChallengeDelivery } from "./challengeDelivery-BjLKoou3.js";
 import { l as getPrfFirstB64uFromCredential, o as redactedPasskeyRegistrationCredential, u as redactCredentialExtensionOutputs } from "./helpers-DpRjHMBx.js";
 import { i as buildNearAccountRefs } from "./profileAccountProjection-C9rVhbeJ.js";
-import { C as respondWalletAddSignerEcdsa, E as setupWalletRegistration, O as startWalletAddSigner, b as isEmailOtpWalletRegistrationFinalizeResponse, c as parseWalletUnlockAlreadyCommittedResponseV1, d as activateWalletRegistration, f as completeWalletRegistrationNearProvisioning, m as createWalletAddSignerIntent, n as nearEd25519YaoRuntimeRef, r as resolveNearEd25519YaoCapabilityHydrationV1, s as parseWalletSessionAlreadyCommittedResponseV1, t as nearEd25519YaoMaterialActivationFromMetadata, u as activateWalletAddSignerEcdsa, v as finalizeWalletAddSigner, w as respondWalletRegistration, x as parseWalletRegistrationEcdsaDerivationRespond } from "./nearEd25519YaoMaterialActivation-4AuGG2DG.js";
+import { C as respondWalletAddSignerEcdsa, E as setupWalletRegistration, O as startWalletAddSigner, b as isEmailOtpWalletRegistrationFinalizeResponse, c as parseWalletUnlockAlreadyCommittedResponseV1, d as activateWalletRegistration, f as completeWalletRegistrationNearProvisioning, m as createWalletAddSignerIntent, n as nearEd25519YaoRuntimeRef, r as resolveNearEd25519YaoCapabilityHydrationV1, s as parseWalletSessionAlreadyCommittedResponseV1, t as nearEd25519YaoMaterialActivationFromMetadata, u as activateWalletAddSignerEcdsa, v as finalizeWalletAddSigner, w as respondWalletRegistration, x as parseWalletRegistrationEcdsaDerivationRespond } from "./nearEd25519YaoMaterialActivation-Cz5UJQ_7.js";
 import { n as buildRelayerJsonPostRequestInit, r as normalizeRelayerBaseUrl, t as buildBearerAuthorizationHeader } from "./relayerHttp-LsVTZCxA.js";
-import { a as nearEd25519SessionMatchesMaterialActivation, h as emailOtpAuthContextProviderUserId, l as buildEmailOtpAuthContext, m as emailOtpAuthContextProvider, p as emailOtpAuthContextEmailHashHex, s as buildNearTransactionSigningLane } from "./nearEd25519YaoSigningPreparation-jiGcQylO.js";
+import { a as nearEd25519SessionMatchesMaterialActivation, h as emailOtpAuthContextProviderUserId, l as buildEmailOtpAuthContext, m as emailOtpAuthContextProvider, p as emailOtpAuthContextEmailHashHex, s as buildNearTransactionSigningLane } from "./nearEd25519YaoSigningPreparation-DX6xG-IW.js";
 import { o as buildEmailOtpRoutePlan, r as buildFreshEmailOtpRoutePlan } from "./routePlan-nLpPFHB-.js";
-import { n as generateSessionId } from "./prfCache-Dwwauj4v.js";
-import { l as emitSigningSessionFlowTrace } from "./trace-DWnDLSuV.js";
+import { n as generateSessionId } from "./prfCache-CgAr-VEU.js";
+import { u as emitSigningSessionFlowTrace } from "./trace-08ayoiNp.js";
 import { t as webAuthnPromptCoordinator } from "./webauthnPromptCoordinator-CLeba8ru.js";
 import { t as computeAddSignerIntentDigest } from "./intentDigest-A1MbbJPu.js";
 import { n as showWalletRecoveryCodeBackupUi, t as pendingWalletRecoveryCodeBackupRepository } from "./pendingWalletRecoveryCodeBackup-DyvRysWg.js";
@@ -106,7 +106,7 @@ function isRegistrationBenchmarkDiagnosticsEnabled() {
 function recordWalletCustodyTiming(ceremonyId, stage, startedAt) {
 	if (!isRegistrationBenchmarkDiagnosticsEnabled()) return;
 	try {
-		console.debug("[WalletCustody] timing " + JSON.stringify({
+		console.info("[WalletCustody] timing " + JSON.stringify({
 			event: "wallet_custody_timing",
 			ceremonyId,
 			stage: `custody.${stage}`,
@@ -5039,7 +5039,14 @@ const YAO_SERVER_TIMING_BUCKET_BY_METRIC = new Map(Object.entries({
 	ecdsa_b_total: "ecdsaDeriverBTotalMs",
 	ecdsa_sw_parse: "ecdsaSigningWorkerParseMs",
 	ecdsa_sw_activate: "ecdsaSigningWorkerActivateMs",
-	ecdsa_sw_total: "ecdsaSigningWorkerTotalMs"
+	ecdsa_sw_total: "ecdsaSigningWorkerTotalMs",
+	near_finalize_authority: "nearFinalizeAuthorityMs",
+	near_finalize_fingerprint: "nearFinalizeFingerprintMs",
+	near_finalize_side_effect: "nearFinalizeSideEffectMs",
+	near_finalize_cleanup: "nearFinalizeCleanupMs",
+	near_finalize_session_projection: "nearFinalizeSessionProjectionMs",
+	near_finalize_session_seal: "nearFinalizeSessionSealMs",
+	near_finalize_total: "nearFinalizeTotalMs"
 }));
 /**
 * Parses a `Server-Timing` header into bucket durations. Diagnostics only: a
@@ -5061,6 +5068,9 @@ function recordStrictEcdsaServerTimingBuckets(recorder, leg, header) {
 	});
 	recordServerTimingBuckets(recorder, header);
 }
+function recordRegistrationServerTimingBuckets(recorder, header) {
+	recordServerTimingBuckets(recorder, header);
+}
 function parseYaoServerTimingBuckets(header) {
 	if (!header) return [];
 	const parsed = [];
@@ -5281,6 +5291,13 @@ function createZeroRegistrationTimingBucketValues() {
 		ecdsaSigningWorkerParseMs: 0,
 		ecdsaSigningWorkerActivateMs: 0,
 		ecdsaSigningWorkerTotalMs: 0,
+		nearFinalizeAuthorityMs: 0,
+		nearFinalizeFingerprintMs: 0,
+		nearFinalizeSideEffectMs: 0,
+		nearFinalizeCleanupMs: 0,
+		nearFinalizeSessionProjectionMs: 0,
+		nearFinalizeSessionSealMs: 0,
+		nearFinalizeTotalMs: 0,
 		walletRegisterStartMs: 0,
 		ecdsaClientBootstrapMs: 0,
 		ecdsaRegistrationTotalMs: 0,
@@ -5405,6 +5422,13 @@ function copyRegistrationTimingBucketValues(buckets) {
 		ecdsaSigningWorkerParseMs: buckets.ecdsaSigningWorkerParseMs,
 		ecdsaSigningWorkerActivateMs: buckets.ecdsaSigningWorkerActivateMs,
 		ecdsaSigningWorkerTotalMs: buckets.ecdsaSigningWorkerTotalMs,
+		nearFinalizeAuthorityMs: buckets.nearFinalizeAuthorityMs,
+		nearFinalizeFingerprintMs: buckets.nearFinalizeFingerprintMs,
+		nearFinalizeSideEffectMs: buckets.nearFinalizeSideEffectMs,
+		nearFinalizeCleanupMs: buckets.nearFinalizeCleanupMs,
+		nearFinalizeSessionProjectionMs: buckets.nearFinalizeSessionProjectionMs,
+		nearFinalizeSessionSealMs: buckets.nearFinalizeSessionSealMs,
+		nearFinalizeTotalMs: buckets.nearFinalizeTotalMs,
 		walletRegisterStartMs: buckets.walletRegisterStartMs,
 		ecdsaClientBootstrapMs: buckets.ecdsaClientBootstrapMs,
 		ecdsaRegistrationTotalMs: buckets.ecdsaRegistrationTotalMs,
@@ -5746,6 +5770,13 @@ function buildRegistrationTimingBuckets(input) {
 		ecdsaSigningWorkerParseMs: buckets.ecdsaSigningWorkerParseMs,
 		ecdsaSigningWorkerActivateMs: buckets.ecdsaSigningWorkerActivateMs,
 		ecdsaSigningWorkerTotalMs: buckets.ecdsaSigningWorkerTotalMs,
+		nearFinalizeAuthorityMs: buckets.nearFinalizeAuthorityMs,
+		nearFinalizeFingerprintMs: buckets.nearFinalizeFingerprintMs,
+		nearFinalizeSideEffectMs: buckets.nearFinalizeSideEffectMs,
+		nearFinalizeCleanupMs: buckets.nearFinalizeCleanupMs,
+		nearFinalizeSessionProjectionMs: buckets.nearFinalizeSessionProjectionMs,
+		nearFinalizeSessionSealMs: buckets.nearFinalizeSessionSealMs,
+		nearFinalizeTotalMs: buckets.nearFinalizeTotalMs,
 		walletRegisterStartMs: buckets.walletRegisterStartMs,
 		ecdsaClientBootstrapMs: buckets.ecdsaClientBootstrapMs,
 		ecdsaRegistrationTotalMs: buckets.ecdsaRegistrationTotalMs,
@@ -11047,6 +11078,35 @@ function awaitHostedPasskeyRegistrationStage(args) {
 		args.operation.then(resolveOnce, rejectOnce);
 	});
 }
+function startHostedPreparedEcdsaClientCeremony(args) {
+	switch (args.setup.kind) {
+		case "near_ed25519": return { kind: "not_required" };
+		case "evm_family_ecdsa":
+		case "near_ed25519_and_evm_family_ecdsa": {
+			const ceremonyId = args.setup.registrationCeremonyId;
+			const ecdsaPrepare = materializeWalletRegistrationSetupEcdsaPrepare(args.setup.ecdsa);
+			const operation = args.context.signingEngine.createRouterAbEcdsaRegistrationCeremony({
+				kind: "create_router_ab_ecdsa_registration_ceremony_v1",
+				ceremonyId,
+				registration: ecdsaPrepare.strictRegistration
+			});
+			operation.catch(() => void 0);
+			return {
+				kind: "started",
+				ceremonyId,
+				operation
+			};
+		}
+		default: return assertNever(args.setup);
+	}
+}
+function closeHostedPreparedEcdsaClientCeremony(args) {
+	if (args.ceremony.kind === "not_required") return;
+	closeStrictEcdsaRegistrationCeremony({
+		context: args.context,
+		ceremonyId: args.ceremony.ceremonyId
+	});
+}
 async function prepareHostedPasskeyRegistration(args) {
 	const authMethod = args.authMethod;
 	const rpId = requireWebAuthnRpId(String(authMethod.rpId));
@@ -11063,6 +11123,7 @@ async function prepareHostedPasskeyRegistration(args) {
 	const controller = new AbortController();
 	let prepared = null;
 	let reservation = null;
+	let ecdsaClientCeremony = { kind: "not_required" };
 	const onHostCancellation = () => {
 		controller.abort();
 		if (prepared) cancelHostedPasskeyRegistration(prepared);
@@ -11090,6 +11151,10 @@ async function prepareHostedPasskeyRegistration(args) {
 		const challengeB64u = String(setup.setup.registrationIntentDigestB64u || "").trim();
 		if (!challengeB64u) throw new Error("Hosted passkey registration setup returned no challenge");
 		if (signerSlot !== registrationPreparationSignerSlot(args.signerSelection)) throw new Error("Hosted passkey registration signer slot changed during preparation");
+		ecdsaClientCeremony = startHostedPreparedEcdsaClientCeremony({
+			context: args.context,
+			setup: setup.setup
+		});
 		observeRegistrationWarmup({
 			recorder,
 			warmup: setup.registrationWarmup
@@ -11140,13 +11205,18 @@ async function prepareHostedPasskeyRegistration(args) {
 			binding,
 			lifecycle: "ready",
 			authority: null,
-			registrationStarted: false
+			registrationStarted: false,
+			ecdsaClientCeremony
 		});
 		prepared = preparedValue;
 		return preparedValue;
 	} catch (error) {
 		controller.abort();
 		removeExternalCancellationListener();
+		closeHostedPreparedEcdsaClientCeremony({
+			context: args.context,
+			ceremony: ecdsaClientCeremony
+		});
 		if (prepared) cancelHostedPasskeyRegistration(prepared);
 		else if (reservation) webAuthnPromptCoordinator.releaseReservation(reservation);
 		throw error;
@@ -11159,6 +11229,10 @@ function cancelHostedPasskeyRegistration(prepared) {
 	state.controller.abort();
 	state.removeExternalCancellationListener?.();
 	state.removeExternalCancellationListener = null;
+	closeHostedPreparedEcdsaClientCeremony({
+		context: state.context,
+		ceremony: state.ecdsaClientCeremony
+	});
 	webAuthnPromptCoordinator.releaseReservation(prepared.reservation);
 }
 /**
@@ -11208,6 +11282,10 @@ async function registerPreparedHostedPasskeyRegistration(args) {
 		});
 	} finally {
 		state.lifecycle = "finished";
+		closeHostedPreparedEcdsaClientCeremony({
+			context: state.context,
+			ceremony: state.ecdsaClientCeremony
+		});
 		state.controller.abort();
 		state.removeExternalCancellationListener?.();
 		state.removeExternalCancellationListener = null;
@@ -11334,6 +11412,42 @@ function registrationThreeRouteAuthorityPayload(authority) {
 		default: return assertNever(authority);
 	}
 }
+async function startNearRegistrationAdmission(args) {
+	const startedAt = performance.now();
+	try {
+		const admissionReceipt = await admitDeferredNearRegistration(args.deferredNear, {
+			routerOrigin: new URL(args.relayerUrl).origin,
+			authorization: {
+				kind: "bearer",
+				value: `Bearer ${args.signedSetup}`
+			},
+			fetch: globalThis.fetch,
+			...args.traceContext ? { traceContext: args.traceContext } : {}
+		});
+		emitNearRegistrationTiming({
+			ceremonyId: args.registrationCeremonyId,
+			stage: "early_admission",
+			startedAt,
+			outcome: "success"
+		});
+		return {
+			deferredNear: args.deferredNear,
+			admissionReceipt
+		};
+	} catch (error) {
+		emitNearRegistrationTiming({
+			ceremonyId: args.registrationCeremonyId,
+			stage: "early_admission",
+			startedAt,
+			outcome: "failure"
+		});
+		throw error;
+	}
+}
+function requireNearRegistrationAdmission(admission) {
+	if (!admission) throw new Error("Mixed registration did not start NEAR admission");
+	return admission;
+}
 function registrationEd25519LaneAuthorization(auth, passkeyCredentialIdB64u, session) {
 	switch (auth.kind) {
 		case "passkey": return { auth: {
@@ -11464,6 +11578,32 @@ async function setupRegistrationForPasskeyExecution(args) {
 	}) !== state.binding || String(intent.walletId) !== String(args.passkeyExecution.prepared.walletId) || challengeB64u !== args.passkeyExecution.prepared.challengeB64u) throw new Error("Hosted passkey registration preparation binding changed");
 	return setup;
 }
+function ecdsaRegistrationClientCeremonyForExecution(args) {
+	if (args.passkeyExecution.kind === "collect_during_registration") return { kind: "create_after_authority" };
+	const state = hostedPasskeyRegistrationState(args.passkeyExecution.prepared);
+	if (state.ecdsaClientCeremony.kind !== "started" || state.ecdsaClientCeremony.ceremonyId !== args.ceremonyId) throw new Error("Hosted passkey registration has no matching ECDSA client ceremony");
+	return {
+		kind: "use_hosted_preparation",
+		ceremonyId: state.ecdsaClientCeremony.ceremonyId,
+		operation: state.ecdsaClientCeremony.operation
+	};
+}
+async function awaitHostedPreparedEcdsaClientCeremony(operation) {
+	return await operation;
+}
+function ecdsaRegistrationClientCeremonyOperation(args) {
+	switch (args.clientCeremony.kind) {
+		case "create_after_authority": return args.context.signingEngine.createRouterAbEcdsaRegistrationCeremony.bind(args.context.signingEngine, {
+			kind: "create_router_ab_ecdsa_registration_ceremony_v1",
+			ceremonyId: args.ceremonyId,
+			registration: args.registration
+		});
+		case "use_hosted_preparation":
+			if (args.clientCeremony.ceremonyId !== args.ceremonyId) throw new Error("Prepared ECDSA client ceremony identity changed");
+			return awaitHostedPreparedEcdsaClientCeremony.bind(void 0, args.clientCeremony.operation);
+		default: return assertNever(args.clientCeremony);
+	}
+}
 async function runEcdsaEnabledThreeRouteRegistrationCeremony(args) {
 	const [firstChainTarget, ...remainingChainTargets] = args.ecdsaPrepare.chainTargets;
 	if (!firstChainTarget) throw new Error("Strict ECDSA ceremony requires at least one EVM-family target");
@@ -11474,10 +11614,11 @@ async function runEcdsaEnabledThreeRouteRegistrationCeremony(args) {
 		const created = await measureStrictEcdsaCeremonyStep({
 			registrationTiming: args.registrationTiming,
 			bucket: "ecdsaRegistrationClientCreateMs",
-			operation: args.context.signingEngine.createRouterAbEcdsaRegistrationCeremony.bind(args.context.signingEngine, {
-				kind: "create_router_ab_ecdsa_registration_ceremony_v1",
+			operation: ecdsaRegistrationClientCeremonyOperation({
+				context: args.context,
 				ceremonyId,
-				registration: args.ecdsaPrepare.strictRegistration
+				registration: args.ecdsaPrepare.strictRegistration,
+				clientCeremony: args.clientCeremony
 			})
 		});
 		const responded = await measureStrictEcdsaCeremonyStep({
@@ -11500,6 +11641,14 @@ async function runEcdsaEnabledThreeRouteRegistrationCeremony(args) {
 		});
 		if (responded.kind === "near_ed25519") throw new Error("ECDSA registration ceremony received an Ed25519-only respond result");
 		const deferredNear = responded.kind === "near_ed25519_and_evm_family_ecdsa" ? responded.ed25519 : null;
+		const nearAdmission = deferredNear ? startNearRegistrationAdmission({
+			relayerUrl: args.relayerUrl,
+			registrationCeremonyId: ceremonyId,
+			signedSetup: args.signedSetup,
+			deferredNear,
+			traceContext: args.traceContext
+		}) : null;
+		nearAdmission?.catch(ignoreNearCustodyFailure);
 		const verified = await measureStrictEcdsaCeremonyStep({
 			registrationTiming: args.registrationTiming,
 			bucket: "ecdsaRegistrationClientProofVerifyMs",
@@ -11560,7 +11709,7 @@ async function runEcdsaEnabledThreeRouteRegistrationCeremony(args) {
 						deferredNear
 					});
 					deferredNearCustodyWork = args.startDeferredNearCustody({
-						deferredNear,
+						admission: requireNearRegistrationAdmission(nearAdmission),
 						establishedEvmCustodyCommit: bootstrap.preActivationCommitPayload
 					});
 					deferredNearCustodyWork.catch(ignoreNearCustodyFailure);
@@ -11858,13 +12007,23 @@ async function startDeferredNearWalletCustody(base, input) {
 			operation: "near_provisioning"
 		});
 		if (!pending || pending.operation !== "near_provisioning" || pending.phase !== "planned") throw new Error("NEAR registration has no planned continuation");
+		let preAdmittedReceipt;
+		try {
+			const admitted = await input.admission;
+			if (!sameRouterAbEd25519YaoRegistrationAdmissionRequestV1(admitted.deferredNear.admissionRequest, pending.admissionRequest)) throw new Error("NEAR admission changed the authorized request");
+			preAdmittedReceipt = admitted.admissionReceipt;
+		} catch (error) {
+			if (error instanceof Error && error.message === "NEAR admission changed the authorized request") throw error;
+			preAdmittedReceipt = void 0;
+		}
 		const { joined, admissionReceipt } = await continueNearRegistrationCustody({
 			pending,
 			signingEngine: base.context.signingEngine,
 			relayerUrl: base.relayerUrl,
 			credential: base.signedSetup,
 			traceContext: base.traceContext,
-			factorSecret
+			factorSecret,
+			...preAdmittedReceipt ? { admitted: preAdmittedReceipt } : {}
 		});
 		outcome = "success";
 		return {
@@ -11890,16 +12049,12 @@ async function startDeferredNearWalletCustody(base, input) {
 		});
 	}
 }
-async function continueNearRegistrationCustody(args) {
-	const journal = args.pending;
-	if (journal.phase === "joined" && journal.completion.kind !== "encrypted_checkpoint") throw new Error("Joined material has no encrypted execution checkpoint");
-	const pending = journal.phase === "joined" && journal.completion.kind === "encrypted_checkpoint" ? journal.completion.prepared : journal;
-	if (pending.phase === "joined") throw new Error("Invalid NEAR continuation phase");
-	const admission = pending.admissionRequest;
-	const admissionStartedAt = performance.now();
-	const admissionReceipt = pending.phase === "execution_prepared" ? pending.admissionReceipt : await admitDeferredNearRegistration({
+async function resolveNearRegistrationAdmissionReceipt(args) {
+	if (args.pending.phase === "execution_prepared") return args.pending.admissionReceipt;
+	if (args.admitted) return args.admitted;
+	return await admitDeferredNearRegistration({
 		status: "deferred",
-		admissionRequest: pending.admissionRequest
+		admissionRequest: args.pending.admissionRequest
 	}, {
 		routerOrigin: new URL(args.relayerUrl).origin,
 		authorization: {
@@ -11909,6 +12064,21 @@ async function continueNearRegistrationCustody(args) {
 		fetch: globalThis.fetch,
 		traceContext: args.traceContext
 	});
+}
+async function continueNearRegistrationCustody(args) {
+	const journal = args.pending;
+	if (journal.phase === "joined" && journal.completion.kind !== "encrypted_checkpoint") throw new Error("Joined material has no encrypted execution checkpoint");
+	const pending = journal.phase === "joined" && journal.completion.kind === "encrypted_checkpoint" ? journal.completion.prepared : journal;
+	if (pending.phase === "joined") throw new Error("Invalid NEAR continuation phase");
+	const admission = pending.admissionRequest;
+	const admissionStartedAt = performance.now();
+	const admissionReceipt = await resolveNearRegistrationAdmissionReceipt({
+		pending,
+		relayerUrl: args.relayerUrl,
+		credential: args.credential,
+		traceContext: args.traceContext,
+		...args.admitted ? { admitted: args.admitted } : {}
+	});
 	recordWalletCustodyTiming(pending.registrationCeremonyId, "admission", admissionStartedAt);
 	const joined = await args.signingEngine.joinWalletCustodyNearEd25519KeySet({
 		...pending.phase === "planned" ? {
@@ -12079,6 +12249,7 @@ async function resumeNearRegistrationAfterUnlock(args) {
 				walletId: pending.walletId,
 				commit: {
 					context: args.context,
+					registrationTiming: null,
 					registrationStartedAt: startedAt,
 					clientPrewarm: Promise.resolve(),
 					relayerUrl,
@@ -12328,8 +12499,30 @@ async function commitDeferredEd25519Registration(args) {
 			thresholdSessionId: joined.metadata.scope.threshold_session_id,
 			prfFirstB64u: auth.prfFirstB64u
 		});
+		let preparedSessionSeal;
+		if (preparation.kind === "preparing") {
+			const preparationWaitStartedAt = performance.now();
+			const prepared = await preparation.result;
+			emitNearRegistrationTiming({
+				ceremonyId: args.registrationCeremonyId,
+				stage: "session_seal_preparation_wait",
+				startedAt: preparationWaitStartedAt,
+				outcome: prepared.kind === "completed" ? "success" : "failure"
+			});
+			if (prepared.kind === "failed") throw prepared.error;
+			await requireCurrentNearRegistrationSession(args.sessionAuthority);
+			const clientSeal = await args.context.signingEngine.readPreparedSigningSessionHydration({
+				thresholdSessionId: preparation.thresholdSessionId,
+				preparationId: preparation.preparationId
+			});
+			preparedSessionSeal = {
+				preparationId: preparation.preparationId,
+				thresholdSessionId: preparation.thresholdSessionId,
+				ciphertext: clientSeal.ciphertext
+			};
+		}
 		const finalizationStartedAt = performance.now();
-		const completed = await completeWalletRegistrationNearProvisioning({
+		const nearProvisioningRequest = {
 			relayerUrl: args.relayerUrl,
 			registrationCeremonyId: args.registrationCeremonyId,
 			signedSetup: args.signedSetup,
@@ -12339,8 +12532,23 @@ async function commitDeferredEd25519Registration(args) {
 			},
 			idempotencyKey: nearProvisioningIdempotencyKey,
 			ed25519: { activationReference },
-			auth: args.authMaterial,
-			walletCustodyCommit: joined.commitPayload
+			walletCustodyCommit: joined.commitPayload,
+			onServerTiming: recordRegistrationServerTimingBuckets.bind(void 0, args.registrationTiming)
+		};
+		let completed;
+		if (preparedSessionSeal) {
+			if (args.authMaterial.kind !== "passkey") throw new Error("Prepared session sealing requires a passkey authority");
+			completed = await completeWalletRegistrationNearProvisioning({
+				...nearProvisioningRequest,
+				auth: { kind: "passkey" },
+				sessionSeal: {
+					thresholdSessionId: preparedSessionSeal.thresholdSessionId,
+					ciphertext: preparedSessionSeal.ciphertext
+				}
+			});
+		} else completed = await completeWalletRegistrationNearProvisioning({
+			...nearProvisioningRequest,
+			auth: args.authMaterial
 		});
 		if (!completed.ok) throw new Error("Deferred NEAR provisioning did not complete");
 		const finalized = completed;
@@ -12349,6 +12557,7 @@ async function commitDeferredEd25519Registration(args) {
 			const status = finalized.walletCustody?.status ?? "not_reported";
 			throw new Error(`Deferred NEAR custody join did not commit (${status})`);
 		}
+		if (preparedSessionSeal && !finalized.sessionSeal) throw new Error("Deferred NEAR finalization did not return the prepared session seal");
 		emitNearRegistrationTiming({
 			ceremonyId: args.registrationCeremonyId,
 			stage: "server_finalize",
@@ -12429,18 +12638,6 @@ async function commitDeferredEd25519Registration(args) {
 		});
 		await requireCurrentNearRegistrationSession(args.sessionAuthority);
 		if (args.authMaterial.kind === "passkey" && registrationSession.remainingUses > 0) {
-			if (preparation.kind === "preparing") {
-				const preparationWaitStartedAt = performance.now();
-				const prepared = await preparation.result;
-				emitNearRegistrationTiming({
-					ceremonyId: args.registrationCeremonyId,
-					stage: "session_seal_preparation_wait",
-					startedAt: preparationWaitStartedAt,
-					outcome: prepared.kind === "completed" ? "success" : "failure"
-				});
-				if (prepared.kind === "failed") throw prepared.error;
-				await requireCurrentNearRegistrationSession(args.sessionAuthority);
-			}
 			const registrationEd25519Session = registrationEstablishedEd25519Session(registrationSession);
 			hydration = hydrateDeferredNearRegistrationSession({
 				signingEngine: args.context.signingEngine,
@@ -12451,6 +12648,10 @@ async function commitDeferredEd25519Registration(args) {
 					prfFirstB64u: args.authMaterial.prfFirstB64u,
 					expiresAtMs: registrationSession.expiresAtMs,
 					remainingUses: registrationSession.remainingUses,
+					...preparedSessionSeal && finalized.sessionSeal ? { preparedServerSeal: {
+						preparationId: preparedSessionSeal.preparationId,
+						...finalized.sessionSeal
+					} } : {},
 					transport: {
 						curve: "ed25519",
 						authMethod: "passkey",
@@ -12749,7 +12950,11 @@ async function registerEcdsaOrMixedWallet(args) {
 			warmup: prepared.registrationWarmup
 		});
 		const { relayerUrl, setup } = prepared;
-		const ecdsaSetup = requireEcdsaRegistrationSetup(setup, args.kind);
+		const ecdsaPrepare = materializeWalletRegistrationSetupEcdsaPrepare(requireEcdsaRegistrationSetup(setup, args.kind).ecdsa);
+		const ecdsaClientCeremony = ecdsaRegistrationClientCeremonyForExecution({
+			passkeyExecution: args.passkeyExecution,
+			ceremonyId: setup.registrationCeremonyId
+		});
 		const intentResponse = {
 			intent: setup.intent,
 			registrationIntentDigestB64u: setup.registrationIntentDigestB64u
@@ -12884,7 +13089,8 @@ async function registerEcdsaOrMixedWallet(args) {
 				registrationCeremonyId: setup.registrationCeremonyId,
 				signerPlanKind: args.kind,
 				signedSetup: setup.signedSetup,
-				ecdsaPrepare: materializeWalletRegistrationSetupEcdsaPrepare(ecdsaSetup.ecdsa),
+				ecdsaPrepare,
+				clientCeremony: ecdsaClientCeremony,
 				authority: startAuthority,
 				materialAuthority,
 				idempotencyKey: finalizeIdempotencyKey,
@@ -13085,6 +13291,7 @@ async function registerEcdsaOrMixedWallet(args) {
 					walletId: deferredWalletId,
 					commit: {
 						context,
+						registrationTiming,
 						registrationStartedAt: startedAt,
 						clientPrewarm,
 						relayerUrl,

package/dist/esm/sdk/{registrationPreparationPreload-DDe0sbZi.js → registrationPreparationPreload-BZfAC_ba.js}

@@ -1,8 +1,8 @@
-import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-C_w8vuhm.js";
+import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-D_w-SfR9.js";
 //#region src/SeamsWeb/walletIframe/host/registrationPreparationPreload.ts
 async function preloadWalletHostRegistrationPreparation() {
 	await Promise.all([
-		import("./runtime-ecdsa-tempo-B-qMRrmx.js").catch(() => void 0),
+		import("./runtime-ecdsa-tempo-tUWnafRo.js").catch(() => void 0),
 		loadSignEvmFamilyWithUiConfirmForTempo().catch(() => void 0),
 		loadSignEvmWithUiConfirm().catch(() => void 0),
 		loadSecp256k1EngineCtor().catch(() => void 0),

package/dist/{public/sdk/router-DeX_cJ2f.js → esm/sdk/router-CeFS9SgT.js}

@@ -11,15 +11,15 @@ import { c as toWalletId, s as thresholdEcdsaChainTargetsEqual } from "./ecdsaCh
 import "./signerDomain-DDLiwuYS.js";
 import "./participants-Bcnsa_ip.js";
 import "./sessionPolicy-B4FsPuk2.js";
-import { A as parseLinkedDeviceRevokeResultV1, E as parseLinkedDeviceListResultV1, R as parseWalletSessionOperationCredentialV1, T as parseLinkedDeviceListRequestV1, k as parseLinkedDeviceRevokeRequestV1 } from "./ecdsaPresignLifecycle-D_KCktCj.js";
+import { A as parseLinkedDeviceRevokeResultV1, E as parseLinkedDeviceListResultV1, R as parseWalletSessionOperationCredentialV1, T as parseLinkedDeviceListRequestV1, k as parseLinkedDeviceRevokeRequestV1 } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
 import "./capabilityKinds-jwCEaqBU.js";
 import { G as parseExactEcdsaSigningLaneIdentity, K as parseExactEd25519ExportMaterialIdentity } from "./evmFamilyEcdsaIdentity-_kuKSW35.js";
 import { _ as isWalletFlowEvent, c as classifyLinkDeviceFlowEvent, d as createLinkDeviceFlowEvent, g as createUnlockFlowEvent, i as RegistrationEventPhase, l as createAccountSyncFlowEvent, m as createSigningFlowEvent, n as KeyExportEventPhase, o as SigningEventPhase, p as createRegistrationFlowEvent, r as LinkDeviceEventPhase, s as UnlockEventPhase, t as AccountSyncEventPhase, u as createKeyExportFlowEvent, v as parseNearProvisioningState, y as parseSdkLifecycleEvent } from "./sdkSentEvents-5Pi-hjHB.js";
 import "./signingSessionSeal-CdtgXHSL.js";
 import { c as serializeRegistrationCredentialWithPRF, s as serializeAuthenticationCredentialWithPRF } from "./helpers-DpRjHMBx.js";
-import { S as requireTempoFeeTokenPreferenceSigningRequest, _ as provisionalWalletIframeSurfaceGeometry, a as parseWalletIframeExactSessionState, c as buildPMUnlockPayload, f as needsExplicitActivation, g as isWalletIframeModalGeometry, h as anchorWalletIframeModalGeometry, i as parseWalletIframeExactSessionLockResult, m as ensureOverlayBase, o as parseWalletSessionFromBoundary, p as OverlayController, t as WalletIframeSessionExpiredRequestError, v as resolveWalletIframeSurfaceGeometry, w as WebAuthnBridgeMessage } from "./exactSessionState-C2aAv_ED.js";
+import { S as requireTempoFeeTokenPreferenceSigningRequest, _ as provisionalWalletIframeSurfaceGeometry, a as parseWalletIframeExactSessionState, c as buildPMUnlockPayload, f as needsExplicitActivation, g as isWalletIframeModalGeometry, h as anchorWalletIframeModalGeometry, i as parseWalletIframeExactSessionLockResult, m as ensureOverlayBase, o as parseWalletSessionFromBoundary, p as OverlayController, t as WalletIframeSessionExpiredRequestError, v as resolveWalletIframeSurfaceGeometry, w as WebAuthnBridgeMessage } from "./exactSessionState-Bt0HforB.js";
 import { n as SignedTransaction } from "./NearClient-BQgcqAzG.js";
-import { n as PASSKEY_MANAGER_DEFAULT_CONFIGS } from "./defaultConfigs-DJCLCrg9.js";
+import { n as PASSKEY_MANAGER_DEFAULT_CONFIGS } from "./defaultConfigs-CyNOW4Sy.js";
 //#region src/SeamsWeb/walletIframe/client/transactionReviewReservation.ts
 var TransactionReviewReservation = class {
 	constructor(connectionId, identity, slot, title, validity, confirmationConfig, generation, lease, assertCurrent, cancelRequest, finishRequest, resumeRequest) {

package/dist/{public/sdk/routerAbNormalSigning-BGpRKRAj.js → esm/sdk/routerAbNormalSigning-DktZKnf1.js}

@@ -1,6 +1,6 @@
 import { i as base64UrlEncode, r as base64UrlDecode, t as base64Decode } from "./base64-Clm8C-e9.js";
 import { A as alphabetizeStringify } from "./registrationIntent-DwAIMQYh.js";
-import { bn as parseRouterAbNormalSigningAuthorization, bt as routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1, ct as parseRouterAbEcdsaOperationStepUpPreparationV1, et as parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1, tt as parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreRequestV1, yn as parseRouterAbMpcMaterialActivationRef, yt as routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestDigestV1 } from "./ecdsaPresignLifecycle-D_KCktCj.js";
+import { bn as parseRouterAbMpcMaterialActivationRef, bt as routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1, ct as parseRouterAbEcdsaOperationStepUpPreparationV1, et as parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1, tt as parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreRequestV1, xn as parseRouterAbNormalSigningAuthorization, yt as routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestDigestV1 } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
 import { n as buildRelayerJsonPostRequestInit, r as normalizeRelayerBaseUrl, t as buildBearerAuthorizationHeader } from "./relayerHttp-LsVTZCxA.js";
 //#region src/core/signingEngine/session/operationState/authorizationAdmission.ts
 const WALLET_SESSION_QUOTA_EXHAUSTED_ERROR = "[WalletSessionQuotaAdmission] wallet-session quota is exhausted";

package/dist/{public/sdk/runtime-auth-Ch00YcH5.js → esm/sdk/runtime-auth-D_lUQQlc.js}

@@ -3,8 +3,8 @@ import { t as walletIframeRequestIdFromBoundary } from "./walletIframeIdentity-U
 import "./validation-BphUDXs7.js";
 import { _ as parseHostedAuthMenuExternalAuthResolution, h as parseHostedAuthMenuErrorEvent, o as hostedAuthMenuExternalAuthRequestIdFromBoundary, p as parseHostedAuthMenuCancelPayload, v as parseHostedAuthMenuOpenRequest } from "./messages-B3UbNZYc.js";
 import "./errors-93h9uAW9.js";
-import { r as preloadWalletHostRegistrationSurface } from "./runtimeLoader-Dxn8UA8B.js";
-import { i as registerPreparedHostedPasskeyRegistration, n as cancelHostedPasskeyRegistration, r as prepareHostedPasskeyRegistration, s as startHostedPasskeyRegistrationCredential, ut as WalletSessionStatusReadScope } from "./registration-D8nYJKec.js";
+import { r as preloadWalletHostRegistrationSurface } from "./runtimeLoader-ZXsvx9zX.js";
+import { i as registerPreparedHostedPasskeyRegistration, n as cancelHostedPasskeyRegistration, r as prepareHostedPasskeyRegistration, s as startHostedPasskeyRegistrationCredential, ut as WalletSessionStatusReadScope } from "./registration-PIBMSsQR.js";
 import { l as activeWalletSessionV1RecordsEqual } from "./device-linking-DpVGjSeq.js";
 import { k as walletIdFromString, l as createReadableWalletId } from "./registrationIntent-DwAIMQYh.js";
 import { c as toWalletId, u as walletSessionRefFromSession } from "./ecdsaChainTarget-BOTPGIU_.js";
@@ -12,22 +12,22 @@ import { a as WALLET_AUTH_METHODS } from "./signerDomain-DDLiwuYS.js";
 import "./wallet-recovery-CKqoHbxT.js";
 import "./participants-Bcnsa_ip.js";
 import "./sessionPolicy-B4FsPuk2.js";
-import { R as parseWalletSessionOperationCredentialV1 } from "./ecdsaPresignLifecycle-D_KCktCj.js";
+import { R as parseWalletSessionOperationCredentialV1 } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
 import "./capabilityKinds-jwCEaqBU.js";
 import "./evmFamilyEcdsaIdentity-_kuKSW35.js";
 import "./passkey-custody-BaHyYMhj.js";
 import { c as classifyLinkDeviceFlowEvent, s as UnlockEventPhase } from "./sdkSentEvents-5Pi-hjHB.js";
-import { s as IndexedDBManager, v as walletSessionAuthorizations } from "./ed25519SeedMaterial-0VmS6K9P.js";
+import { s as IndexedDBManager, v as walletSessionAuthorizations } from "./ed25519SeedMaterial-Cghz8-XB.js";
 import "./keccak-DY5wDsym.js";
 import "./signingSessionSeal-CdtgXHSL.js";
-import { l as pmUnlockPayloadToLoginHooksOptions, n as exactSessionIdentitiesMatch, r as parseWalletIframeExactSessionIdentity, s as readSelectedWalletIframeExactSessionState, u as requirePMUnlockPayload } from "./exactSessionState-C2aAv_ED.js";
-import "./nearEd25519YaoMaterialActivation-4AuGG2DG.js";
+import { l as pmUnlockPayloadToLoginHooksOptions, n as exactSessionIdentitiesMatch, r as parseWalletIframeExactSessionIdentity, s as readSelectedWalletIframeExactSessionState, u as requirePMUnlockPayload } from "./exactSessionState-Bt0HforB.js";
+import "./nearEd25519YaoMaterialActivation-Cz5UJQ_7.js";
 import "./operationFingerprint-CsYO6b0a.js";
 import "./actions-DsBQcjBn.js";
 import { t as createWalletIframeSurfaceMeasurementReporter } from "./surface-measurement-reporter-D7BNehf4.js";
 import { n as getDefaultCspNonce, r as appearanceTokenCssRule, t as createCspStylesheetManager } from "./csp-stylesheet-DLj_a6t_.js";
 import { a as R, o as S, r as C, t as u } from "./jsxRuntime.module-FAP0NE9p.js";
-import { a as syncAccountWithPreparedCredential, c as listLocalLoginAuthMethods, d as unlockLinkedDevicePasskey, f as unlockResolvedWalletSubjectSet, g as normalizeLinkedDeviceTargetEmailAddressV1, h as isLinkedDeviceTargetEmailAddressV1, handleWalletHostRuntimeRequestWithHandlers, i as prepareSyncAccountChallenge, l as resolveLinkedDevicePasskeyAuthoritySelection, m as DeviceLinkingErrorCode, n as clearHostedWalletSessions, o as buildNearWalletRegistrationSignerSetSelection, p as resolveWalletUnlockSubjectSet, s as resolvePasskeyRegistrationAccountProvisioning, t as activeHostedWalletSessionOperationCredential, u as resolveLinkedDeviceUnlockSubjectSet } from "./runtimeContext-BdTaYxJD.js";
+import { a as syncAccountWithPreparedCredential, c as listLocalLoginAuthMethods, d as unlockLinkedDevicePasskey, f as unlockResolvedWalletSubjectSet, g as normalizeLinkedDeviceTargetEmailAddressV1, h as isLinkedDeviceTargetEmailAddressV1, handleWalletHostRuntimeRequestWithHandlers, i as prepareSyncAccountChallenge, l as resolveLinkedDevicePasskeyAuthoritySelection, m as DeviceLinkingErrorCode, n as clearHostedWalletSessions, o as buildNearWalletRegistrationSignerSetSelection, p as resolveWalletUnlockSubjectSet, s as resolvePasskeyRegistrationAccountProvisioning, t as activeHostedWalletSessionOperationCredential, u as resolveLinkedDeviceUnlockSubjectSet } from "./runtimeContext-CTt9ON27.js";
 import { n as respondOkResult, r as withProgress, t as respondOk } from "./shared-Qy1DGMqH.js";
 //#region src/SeamsWeb/walletIframe/shared/exactSessionReconciliation.ts
 /**
@@ -5082,7 +5082,7 @@ function passkeyRecentWalletId(recentUnlocks) {
 //#endregion
 //#region src/SeamsWeb/walletIframe/host/auth-menu/controller.ts
 async function loadHostedRecoveryPort(getSeamsWeb) {
-	const recoveryEntrypoint = await import("./recovery-entrypoint-CFTX6PFZ.js");
+	const recoveryEntrypoint = await import("./recovery-entrypoint-D39R1avB.js");
 	const seamsWeb = getSeamsWeb();
 	return recoveryEntrypoint.createHostedRecoveryPort({
 		context: seamsWeb.getContext(),

package/dist/esm/sdk/{runtime-device-link-CEhVZYAw.js → runtime-device-link-CEph1iM0.js}

@@ -7,19 +7,19 @@ import "./signerDomain-DDLiwuYS.js";
 import "./wallet-recovery-CKqoHbxT.js";
 import "./participants-Bcnsa_ip.js";
 import "./sessionPolicy-B4FsPuk2.js";
-import { A as parseLinkedDeviceRevokeResultV1, E as parseLinkedDeviceListResultV1, L as parseQrLinkedDeviceSessionPayloadV5, T as parseLinkedDeviceListRequestV1, k as parseLinkedDeviceRevokeRequestV1 } from "./ecdsaPresignLifecycle-D_KCktCj.js";
+import { A as parseLinkedDeviceRevokeResultV1, E as parseLinkedDeviceListResultV1, L as parseQrLinkedDeviceSessionPayloadV5, T as parseLinkedDeviceListRequestV1, k as parseLinkedDeviceRevokeRequestV1 } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
 import "./capabilityKinds-jwCEaqBU.js";
 import "./evmFamilyEcdsaIdentity-_kuKSW35.js";
 import "./passkey-custody-BaHyYMhj.js";
 import { c as classifyLinkDeviceFlowEvent } from "./sdkSentEvents-5Pi-hjHB.js";
-import "./ed25519SeedMaterial-0VmS6K9P.js";
+import "./ed25519SeedMaterial-Cghz8-XB.js";
 import "./keccak-DY5wDsym.js";
 import "./signingSessionSeal-CdtgXHSL.js";
-import "./nearEd25519YaoMaterialActivation-4AuGG2DG.js";
+import "./nearEd25519YaoMaterialActivation-Cz5UJQ_7.js";
 import "./operationFingerprint-CsYO6b0a.js";
 import "./actions-DsBQcjBn.js";
 import "./jsxRuntime.module-FAP0NE9p.js";
-import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-BdTaYxJD.js";
+import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-CTt9ON27.js";
 import { n as respondOkResult, r as withProgress, t as respondOk } from "./shared-Qy1DGMqH.js";
 //#region src/SeamsWeb/walletIframe/host/handlers/deviceLink.ts
 /** The QR payload's own lifetime; a selection older than this blocks nothing. */