@seams/wallet 0.6.1 → 0.7.1

package/dist/esm/core/rpcClients/relayer/routerAbNormalSigning.js

@@ -1,8 +1,9 @@
+import { coerceNonEmptyString } from "../../../shared-ts/src/utils/validation.js";
 import { base64Decode, base64UrlDecode, base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
 import { alphabetizeStringify } from "../../../shared-ts/src/utils/digests.js";
+import { buildBearerAuthorizationHeader, buildRelayerJsonPostRequestInit, normalizeRelayerBaseUrl } from "./relayerHttp.js";
 import { parseRouterAbMpcMaterialActivationRef, parseRouterAbNormalSigningAuthorization } from "../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
 import { parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1, parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreRequestV1, parseRouterAbEcdsaOperationStepUpPreparationV1, routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestDigestV1, routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
-import { buildBearerAuthorizationHeader, buildRelayerJsonPostRequestInit, normalizeRelayerBaseUrl } from "./relayerHttp.js";
 import { WalletSessionQuotaAdmissionError } from "../../signingEngine/session/operationState/authorizationAdmission.js";
 import { walletSessionFailureErrorFromPayload } from "../../signingEngine/session/lifecycle/walletSessionFailure.js";
 //#region src/core/rpcClients/relayer/routerAbNormalSigning.ts
@@ -42,11 +43,6 @@ function routerAbNormalSigningAdmissionErrorFromPayload(args) {
 		default: return null;
 	}
 }
-function requireNonEmptyString(value, label) {
-	const normalized = String(value || "").trim();
-	if (!normalized) throw new Error(`${label} is required`);
-	return normalized;
-}
 function requirePositiveInteger(value, label) {
 	const parsed = Math.floor(Number(value));
 	if (!Number.isSafeInteger(parsed) || parsed <= 0) throw new Error(`${label} must be a positive integer`);
@@ -60,17 +56,17 @@ function requireByteArray(value, label, byteLength) {
 	return bytes;
 }
 function requireDigestB64u(value, label) {
-	const normalized = requireNonEmptyString(value, label);
+	const normalized = coerceNonEmptyString(value, label);
 	if (base64UrlDecode(normalized).length !== 32) throw new Error(`${label} must decode to 32 bytes`);
 	return normalized;
 }
 function requireBase64UrlNonEmpty(value, label) {
-	const normalized = requireNonEmptyString(value, label);
+	const normalized = coerceNonEmptyString(value, label);
 	if (base64UrlDecode(normalized).length === 0) throw new Error(`${label} must decode to non-empty bytes`);
 	return normalized;
 }
 function normalizeNonceToB64u(value, label) {
-	const normalized = requireNonEmptyString(value, label);
+	const normalized = coerceNonEmptyString(value, label);
 	let bytes;
 	try {
 		bytes = base64Decode(normalized);
@@ -90,10 +86,10 @@ async function routerAbNormalSigningActionFingerprint(value) {
 	return base64UrlEncode(await sha256Bytes(new TextEncoder().encode(alphabetizeStringify(value))));
 }
 function routerAbEd25519Nep413CanonicalMessageB64uV2(args) {
-	const message = requireNonEmptyString(args.message, "nep413.message");
-	const recipient = requireNonEmptyString(args.recipient, "nep413.recipient");
+	const message = coerceNonEmptyString(args.message, "nep413.message");
+	const recipient = coerceNonEmptyString(args.recipient, "nep413.recipient");
 	const nonce = base64UrlDecode(normalizeNonceToB64u(args.nonce, "nep413.nonce"));
-	const callbackUrl = args.callbackUrl == null ? void 0 : requireNonEmptyString(args.callbackUrl, "callbackUrl");
+	const callbackUrl = args.callbackUrl == null ? void 0 : coerceNonEmptyString(args.callbackUrl, "callbackUrl");
 	const out = [];
 	pushU32Le(out, NEP413_PREFIX);
 	pushBorshString(out, message);
@@ -112,13 +108,13 @@ async function buildRouterAbEd25519NearTransactionPrepareRequestV2(args) {
 		display_digest: routerAbDigest32Wire(base64UrlDecode(requireDigestB64u(args.displayDigestB64u, "displayDigestB64u"))),
 		intent: {
 			kind: "near_transaction_v1",
-			operation_id: requireNonEmptyString(args.operationId, "operationId"),
-			operation_fingerprint: requireNonEmptyString(args.operationFingerprint, "operationFingerprint"),
-			near_account_id: requireNonEmptyString(args.nearAccountId, "nearAccountId"),
+			operation_id: coerceNonEmptyString(args.operationId, "operationId"),
+			operation_fingerprint: coerceNonEmptyString(args.operationFingerprint, "operationFingerprint"),
+			near_account_id: coerceNonEmptyString(args.nearAccountId, "nearAccountId"),
 			near_network_id: args.nearNetworkId,
 			transactions: args.transactions.map((transaction, index) => ({
-				receiver_id: requireNonEmptyString(transaction.receiverId, `transactions[${index}].receiverId`),
-				action_fingerprint: requireNonEmptyString(transaction.actionFingerprint, `transactions[${index}].actionFingerprint`)
+				receiver_id: coerceNonEmptyString(transaction.receiverId, `transactions[${index}].receiverId`),
+				action_fingerprint: coerceNonEmptyString(transaction.actionFingerprint, `transactions[${index}].actionFingerprint`)
 			})),
 			unsigned_transaction_borsh_b64u: requireBase64UrlNonEmpty(args.unsignedTransactionBorshB64u, "unsignedTransactionBorshB64u")
 		},
@@ -135,7 +131,7 @@ async function buildRouterAbEd25519NearTransactionPrepareRequestV2(args) {
 }
 async function buildRouterAbEd25519Nep413PrepareRequestV2(args) {
 	const nonceB64u = normalizeNonceToB64u(args.nonce, "nonce");
-	const callbackUrl = args.callbackUrl == null ? void 0 : requireNonEmptyString(args.callbackUrl, "callbackUrl");
+	const callbackUrl = args.callbackUrl == null ? void 0 : coerceNonEmptyString(args.callbackUrl, "callbackUrl");
 	const canonicalMessageB64u = routerAbEd25519Nep413CanonicalMessageB64uV2({
 		message: args.message,
 		recipient: args.recipient,
@@ -148,12 +144,12 @@ async function buildRouterAbEd25519Nep413PrepareRequestV2(args) {
 		display_digest: routerAbDigest32Wire(base64UrlDecode(requireDigestB64u(args.displayDigestB64u, "displayDigestB64u"))),
 		intent: {
 			kind: "nep413_v1",
-			operation_id: requireNonEmptyString(args.operationId, "operationId"),
-			operation_fingerprint: requireNonEmptyString(args.operationFingerprint, "operationFingerprint"),
-			near_account_id: requireNonEmptyString(args.nearAccountId, "nearAccountId"),
+			operation_id: coerceNonEmptyString(args.operationId, "operationId"),
+			operation_fingerprint: coerceNonEmptyString(args.operationFingerprint, "operationFingerprint"),
+			near_account_id: coerceNonEmptyString(args.nearAccountId, "nearAccountId"),
 			near_network_id: args.nearNetworkId,
-			recipient: requireNonEmptyString(args.recipient, "recipient"),
-			message: requireNonEmptyString(args.message, "message"),
+			recipient: coerceNonEmptyString(args.recipient, "recipient"),
+			message: coerceNonEmptyString(args.message, "message"),
 			nonce_b64u: nonceB64u,
 			...callbackUrl ? { callback_url: callbackUrl } : {}
 		},
@@ -176,17 +172,17 @@ async function buildRouterAbEd25519DelegateActionPrepareRequestV2(args) {
 		display_digest: routerAbDigest32Wire(base64UrlDecode(requireDigestB64u(args.displayDigestB64u, "displayDigestB64u"))),
 		intent: {
 			kind: "near_delegate_action_v1",
-			operation_id: requireNonEmptyString(args.operationId, "operationId"),
-			operation_fingerprint: requireNonEmptyString(args.operationFingerprint, "operationFingerprint"),
-			near_account_id: requireNonEmptyString(args.nearAccountId, "nearAccountId"),
+			operation_id: coerceNonEmptyString(args.operationId, "operationId"),
+			operation_fingerprint: coerceNonEmptyString(args.operationFingerprint, "operationFingerprint"),
+			near_account_id: coerceNonEmptyString(args.nearAccountId, "nearAccountId"),
 			near_network_id: args.nearNetworkId,
 			delegate: {
-				sender_id: requireNonEmptyString(args.delegate.senderId, "delegate.senderId"),
-				receiver_id: requireNonEmptyString(args.delegate.receiverId, "delegate.receiverId"),
-				public_key: requireNonEmptyString(args.delegate.publicKey, "delegate.publicKey"),
-				nonce: requireNonEmptyString(args.delegate.nonce, "delegate.nonce"),
-				max_block_height: requireNonEmptyString(args.delegate.maxBlockHeight, "delegate.maxBlockHeight"),
-				action_fingerprint: requireNonEmptyString(args.delegate.actionFingerprint, "delegate.actionFingerprint"),
+				sender_id: coerceNonEmptyString(args.delegate.senderId, "delegate.senderId"),
+				receiver_id: coerceNonEmptyString(args.delegate.receiverId, "delegate.receiverId"),
+				public_key: coerceNonEmptyString(args.delegate.publicKey, "delegate.publicKey"),
+				nonce: coerceNonEmptyString(args.delegate.nonce, "delegate.nonce"),
+				max_block_height: coerceNonEmptyString(args.delegate.maxBlockHeight, "delegate.maxBlockHeight"),
+				action_fingerprint: coerceNonEmptyString(args.delegate.actionFingerprint, "delegate.actionFingerprint"),
 				canonical_delegate_borsh_b64u: canonicalDelegateBorshB64u
 			}
 		},
@@ -207,7 +203,7 @@ function buildRouterAbEd25519NormalSigningFinalizeRequestV2(args) {
 		scope,
 		expires_at_ms: requirePositiveInteger(args.expiresAtMs, "expiresAtMs"),
 		prepare_binding: {
-			server_round1_handle: requireNonEmptyString(args.prepareResponse.server_round1_handle, "server_round1_handle"),
+			server_round1_handle: coerceNonEmptyString(args.prepareResponse.server_round1_handle, "server_round1_handle"),
 			round1_binding_digest: parseDigest32(args.prepareResponse.round1_binding_digest, "round1_binding_digest"),
 			intent_digest: parseDigest32(args.admissionMaterial.intentDigest, "intent_digest"),
 			signing_payload_digest: parseDigest32(args.admissionMaterial.signingPayloadDigest, "signing_payload_digest")
@@ -216,9 +212,9 @@ function buildRouterAbEd25519NormalSigningFinalizeRequestV2(args) {
 			kind: "ed25519_two_party_frost_finalize_v1",
 			client_commitments: parseCommitments(args.clientCommitments, "clientCommitments"),
 			server_commitments: parseCommitments(args.prepareResponse.server_commitments, "serverCommitments"),
-			client_verifying_share_b64u: requireNonEmptyString(args.clientVerifyingShareB64u, "clientVerifyingShareB64u"),
-			server_verifying_share_b64u: requireNonEmptyString(args.prepareResponse.server_verifying_share_b64u, "serverVerifyingShareB64u"),
-			client_signature_share_b64u: requireNonEmptyString(args.clientSignatureShareB64u, "clientSignatureShareB64u")
+			client_verifying_share_b64u: coerceNonEmptyString(args.clientVerifyingShareB64u, "clientVerifyingShareB64u"),
+			server_verifying_share_b64u: coerceNonEmptyString(args.prepareResponse.server_verifying_share_b64u, "serverVerifyingShareB64u"),
+			client_signature_share_b64u: coerceNonEmptyString(args.clientSignatureShareB64u, "clientSignatureShareB64u")
 		}
 	};
 	if (scope.authorization.kind === "reusable_wallet_session" && args.prepareResponse.scope.authorization.kind === "reusable_wallet_session") return {
@@ -267,11 +263,11 @@ function parseScope(value, label) {
 		"signing_worker_id"
 	], label);
 	const scope = {
-		request_id: requireNonEmptyString(record.request_id, `${label}.request_id`),
-		account_id: requireNonEmptyString(record.account_id, `${label}.account_id`),
+		request_id: coerceNonEmptyString(record.request_id, `${label}.request_id`),
+		account_id: coerceNonEmptyString(record.account_id, `${label}.account_id`),
 		authorization: parseRouterAbNormalSigningAuthorization(record.authorization),
 		material_activation: parseRouterAbMpcMaterialActivationRef(record.material_activation),
-		signing_worker_id: requireNonEmptyString(record.signing_worker_id, `${label}.signing_worker_id`)
+		signing_worker_id: coerceNonEmptyString(record.signing_worker_id, `${label}.signing_worker_id`)
 	};
 	if (scope.material_activation.signing_worker !== scope.signing_worker_id) throw new Error(`${label} material activation SigningWorker mismatch`);
 	return scope;
@@ -292,17 +288,17 @@ function parseCommitments(value, label) {
 	const record = value && typeof value === "object" ? value : null;
 	if (!record) throw new Error(`${label} must be an object`);
 	return {
-		hiding: requireNonEmptyString(record.hiding, `${label}.hiding`),
-		binding: requireNonEmptyString(record.binding, `${label}.binding`)
+		hiding: coerceNonEmptyString(record.hiding, `${label}.hiding`),
+		binding: coerceNonEmptyString(record.binding, `${label}.binding`)
 	};
 }
 function parseServerIdentity(value, label) {
 	const record = value && typeof value === "object" ? value : null;
 	if (!record) throw new Error(`${label} must be an object`);
 	return {
-		server_id: requireNonEmptyString(record.server_id, `${label}.server_id`),
-		key_epoch: requireNonEmptyString(record.key_epoch, `${label}.key_epoch`),
-		recipient_encryption_key: requireNonEmptyString(record.recipient_encryption_key, `${label}.recipient_encryption_key`)
+		server_id: coerceNonEmptyString(record.server_id, `${label}.server_id`),
+		key_epoch: coerceNonEmptyString(record.key_epoch, `${label}.key_epoch`),
+		recipient_encryption_key: coerceNonEmptyString(record.recipient_encryption_key, `${label}.recipient_encryption_key`)
 	};
 }
 function parseReusableWalletSessionAuthorizedOperation(value, label) {
@@ -319,16 +315,16 @@ function parseReusableWalletSessionAuthorizedOperation(value, label) {
 		"display_digest_b64u",
 		"operation_fingerprint_digest"
 	], label);
-	const kind = requireNonEmptyString(record.kind, `${label}.kind`);
+	const kind = coerceNonEmptyString(record.kind, `${label}.kind`);
 	if (kind !== "reusable_wallet_session_authorized_operation_v1") throw new Error(`${label}.kind is invalid`);
-	const capabilityKind = requireNonEmptyString(record.capability_kind, `${label}.capability_kind`);
+	const capabilityKind = coerceNonEmptyString(record.capability_kind, `${label}.capability_kind`);
 	if (capabilityKind !== "near_ed25519_mpc_signing") throw new Error(`${label}.capability_kind is invalid`);
-	const operationKind = requireNonEmptyString(record.operation_kind, `${label}.operation_kind`);
+	const operationKind = coerceNonEmptyString(record.operation_kind, `${label}.operation_kind`);
 	if (operationKind !== "near.sign_transaction" && operationKind !== "near.sign_delegate_action" && operationKind !== "near.sign_nep413_message") throw new Error(`${label}.operation_kind is invalid`);
 	return {
 		kind,
-		authorized_operation_id: requireNonEmptyString(record.authorized_operation_id, `${label}.authorized_operation_id`),
-		operation_id: requireNonEmptyString(record.operation_id, `${label}.operation_id`),
+		authorized_operation_id: coerceNonEmptyString(record.authorized_operation_id, `${label}.authorized_operation_id`),
+		operation_id: coerceNonEmptyString(record.operation_id, `${label}.operation_id`),
 		capability_kind: capabilityKind,
 		operation_kind: operationKind,
 		lane_digest_b64u: requireDigestB64u(record.lane_digest_b64u, `${label}.lane_digest_b64u`),
@@ -353,16 +349,16 @@ function parseVerifiedStepUpAuthorizedOperation(value, label) {
 		"display_digest_b64u",
 		"operation_fingerprint_digest"
 	], label);
-	if (requireNonEmptyString(record.kind, `${label}.kind`) !== "verified_step_up_authorized_operation_v1") throw new Error(`${label}.kind is invalid`);
-	if (requireNonEmptyString(record.capability_kind, `${label}.capability_kind`) !== "near_ed25519_mpc_signing") throw new Error(`${label}.capability_kind is invalid`);
-	const operationKind = requireNonEmptyString(record.operation_kind, `${label}.operation_kind`);
+	if (coerceNonEmptyString(record.kind, `${label}.kind`) !== "verified_step_up_authorized_operation_v1") throw new Error(`${label}.kind is invalid`);
+	if (coerceNonEmptyString(record.capability_kind, `${label}.capability_kind`) !== "near_ed25519_mpc_signing") throw new Error(`${label}.capability_kind is invalid`);
+	const operationKind = coerceNonEmptyString(record.operation_kind, `${label}.operation_kind`);
 	if (operationKind !== "near.sign_transaction" && operationKind !== "near.sign_delegate_action" && operationKind !== "near.sign_nep413_message") throw new Error(`${label}.operation_kind is invalid`);
 	return {
 		kind: "verified_step_up_authorized_operation_v1",
-		authorization_session_id: requireNonEmptyString(record.authorization_session_id, `${label}.authorization_session_id`),
+		authorization_session_id: coerceNonEmptyString(record.authorization_session_id, `${label}.authorization_session_id`),
 		evidence_set_digest: requireDigestB64u(record.evidence_set_digest, `${label}.evidence_set_digest`),
-		authorized_operation_id: requireNonEmptyString(record.authorized_operation_id, `${label}.authorized_operation_id`),
-		operation_id: requireNonEmptyString(record.operation_id, `${label}.operation_id`),
+		authorized_operation_id: coerceNonEmptyString(record.authorized_operation_id, `${label}.authorized_operation_id`),
+		operation_id: coerceNonEmptyString(record.operation_id, `${label}.operation_id`),
 		capability_kind: "near_ed25519_mpc_signing",
 		operation_kind: operationKind,
 		lane_digest_b64u: requireDigestB64u(record.lane_digest_b64u, `${label}.lane_digest_b64u`),
@@ -374,7 +370,7 @@ function parseVerifiedStepUpAuthorizedOperation(value, label) {
 function parsePrepareResponse(value) {
 	const record = value && typeof value === "object" ? value : null;
 	if (!record) throw new Error("Router A/B normal-signing prepare response must be an object");
-	const signatureScheme = requireNonEmptyString(record.signature_scheme, "signature_scheme");
+	const signatureScheme = coerceNonEmptyString(record.signature_scheme, "signature_scheme");
 	if (signatureScheme !== "ed25519_v1") throw new Error(`Unsupported Router A/B normal-signing signature scheme: ${signatureScheme}`);
 	const scope = parseScope(record.scope, "scope");
 	const base = {
@@ -382,9 +378,9 @@ function parsePrepareResponse(value) {
 		signing_payload_digest: parseDigest32(record.signing_payload_digest, "signing_payload_digest"),
 		round1_binding_digest: parseDigest32(record.round1_binding_digest, "round1_binding_digest"),
 		signing_worker: parseServerIdentity(record.signing_worker, "signing_worker"),
-		server_round1_handle: requireNonEmptyString(record.server_round1_handle, "server_round1_handle"),
+		server_round1_handle: coerceNonEmptyString(record.server_round1_handle, "server_round1_handle"),
 		server_commitments: parseCommitments(record.server_commitments, "server_commitments"),
-		server_verifying_share_b64u: requireNonEmptyString(record.server_verifying_share_b64u, "server_verifying_share_b64u"),
+		server_verifying_share_b64u: coerceNonEmptyString(record.server_verifying_share_b64u, "server_verifying_share_b64u"),
 		signature_scheme: "ed25519_v1",
 		prepared_at_ms: requirePositiveInteger(record.prepared_at_ms, "prepared_at_ms"),
 		expires_at_ms: requirePositiveInteger(record.expires_at_ms, "expires_at_ms")
@@ -447,7 +443,7 @@ function parseNormalSigningResponse(value) {
 		"signature",
 		"signed_at_ms"
 	], "Router A/B normal-signing response");
-	const signatureScheme = requireNonEmptyString(record.signature_scheme, "signature_scheme");
+	const signatureScheme = coerceNonEmptyString(record.signature_scheme, "signature_scheme");
 	if (signatureScheme !== "ed25519_v1") throw new Error(`Unsupported Router A/B normal-signing signature scheme: ${signatureScheme}`);
 	return {
 		scope: parseScope(record.scope, "scope"),
@@ -636,7 +632,7 @@ function routerAbSigningHttpError(args) {
 }
 async function postRouterAbNormalSigningJson(args) {
 	if (typeof fetch !== "function") throw new Error("fetch is not available for Router A/B normal-signing request");
-	const base = normalizeRelayerBaseUrl(requireNonEmptyString(args.relayServerUrl, "relayServerUrl"));
+	const base = normalizeRelayerBaseUrl(coerceNonEmptyString(args.relayServerUrl, "relayServerUrl"));
 	const response = await fetch(`${base}${args.path}`, {
 		...buildRouterAbRequestInit({
 			credential: args.credential,
@@ -677,31 +673,6 @@ async function prepareRouterAbEcdsaDerivationEvmDigestSigningV1(args) {
 		parse: (value) => parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1(args.request, value)
 	});
 }
-async function parseFinalBatchPrepareResponse(request, value) {
-	if (!value || typeof value !== "object" || !("prepared_response" in value) || !("outgoing_messages_b64u" in value)) throw new Error("Invalid terminal prepare response");
-	const messages = value.outgoing_messages_b64u;
-	if (!Array.isArray(messages) || messages.length !== 1 || typeof messages[0] !== "string" || !/^[A-Za-z0-9_-]+$/.test(messages[0])) throw new Error("Terminal prepare response must contain one protocol message");
-	return {
-		preparedResponse: await parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1(request, value.prepared_response),
-		outgoingMessagesB64u: [messages[0]]
-	};
-}
-async function prepareRouterAbEcdsaFinalPresignBatchV1(args) {
-	await routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1(args.request);
-	const timeoutMs = Math.min(5e3, args.source.batch.ceremony_expires_at_ms - Date.now());
-	if (timeoutMs <= 0) throw new Error("Terminal presign ceremony expired before prepare");
-	return postRouterAbNormalSigningJson({
-		signal: AbortSignal.timeout(Math.floor(timeoutMs)),
-		relayServerUrl: args.relayServerUrl,
-		path: "/router-ab/ecdsa-derivation/sign/prepare",
-		credential: args.credential,
-		body: {
-			...args.request,
-			presign_source: args.source
-		},
-		parse: parseFinalBatchPrepareResponse.bind(void 0, args.request)
-	});
-}
 async function finalizeRouterAbNormalSigningV2(args) {
 	return postRouterAbNormalSigningJson({
 		relayServerUrl: args.relayServerUrl,
@@ -836,6 +807,6 @@ function sameBytes(left, right) {
 	return left.length === right.length && left.every((byte, index) => byte === right[index]);
 }
 //#endregion
-export { RouterAbSigningRequestError, buildRouterAbEd25519DelegateActionPrepareRequestV2, buildRouterAbEd25519NearTransactionPrepareRequestV2, buildRouterAbEd25519Nep413PrepareRequestV2, buildRouterAbEd25519NormalSigningFinalizeRequestV2, finalizeRouterAbEcdsaDerivationEvmDigestSigningV1, finalizeRouterAbNormalSigningV2, prepareRouterAbEcdsaDerivationEvmDigestSigningV1, prepareRouterAbEcdsaFinalPresignBatchV1, prepareRouterAbNormalSigningV2, routerAbCanonicalWireBytesToB64u, routerAbNormalSigningActionFingerprint };
+export { RouterAbSigningRequestError, buildRouterAbEd25519DelegateActionPrepareRequestV2, buildRouterAbEd25519NearTransactionPrepareRequestV2, buildRouterAbEd25519Nep413PrepareRequestV2, buildRouterAbEd25519NormalSigningFinalizeRequestV2, finalizeRouterAbEcdsaDerivationEvmDigestSigningV1, finalizeRouterAbNormalSigningV2, prepareRouterAbEcdsaDerivationEvmDigestSigningV1, prepareRouterAbNormalSigningV2, routerAbCanonicalWireBytesToB64u, routerAbNormalSigningActionFingerprint };
 
 //# sourceMappingURL=routerAbNormalSigning.js.map

package/dist/esm/core/rpcClients/relayer/thresholdEcdsa.js

@@ -1,7 +1,7 @@
 import { parseRootShareEpoch } from "../../../shared-ts/src/utils/domainIds.js";
-import { ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, requireRouterAbEcdsaDerivationNormalSigningStateV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
 import { buildBearerAuthorizationHeader, buildRelayerJsonPostRequestInit, normalizeRelayerBaseUrl } from "./relayerHttp.js";
 import { toWalletId } from "../../signingEngine/interfaces/ecdsaChainTarget.js";
+import { ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, requireRouterAbEcdsaDerivationNormalSigningStateV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
 import { toEcdsaDerivationThresholdKeyId } from "../../signingEngine/session/identity/emailOtpEcdsaDerivationIdentity.js";
 import { errorMessage } from "../../../shared-ts/src/utils/errors.js";
 //#region src/core/rpcClients/relayer/thresholdEcdsa.ts

package/dist/esm/core/rpcClients/relayer/walletRecoveryPrepare.js

@@ -2,18 +2,18 @@ import { parseWalletAuthMethodId, parseWalletAuthorityId, parseWalletId, parseWa
 import { parseDeviceId } from "../../../shared-ts/src/authorization/capabilityKinds.js";
 import { base64UrlDecode, base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
 import { parseDigestField, parseEnvelopeCiphertextB64u, parseEnvelopeNonceB64u, parseUnixMs } from "../../../shared-ts/src/passkey-custody/primitives.js";
+import { buildRelayerJsonPostRequestInit, normalizeRelayerBaseUrl } from "./relayerHttp.js";
+import { PASSKEY_PRF_FIRST_SALT_V1, PASSKEY_PRF_SECOND_SALT_V1 } from "../../../shared-ts/src/utils/signingSessionSeal.js";
 import "../../../shared-ts/src/utils/encoders.js";
-import { parseRouterAbMpcMaterialActivationRef } from "../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
-import { requireEvmFamilySigningKeySlotId } from "../../../shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js";
-import { ecdsaClientRootPublicKey33B64uFromString, parseSdkEcdsaDerivationSigningRootId, parseSdkEcdsaDerivationSigningRootVersion, parseSdkEcdsaDerivationThresholdKeyId } from "../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import { normalizeRuntimePolicyScope } from "../../../shared-ts/src/threshold/signingRootScope.js";
 import { parseEcdsaServerGeneration } from "../../../shared-ts/src/utils/ecdsaCapabilityActivation.js";
-import { parseRouterAbEcdsaDerivationPublicCapabilityV1, parseRouterAbEcdsaRegistrationActivationReceiptV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
-import { buildRelayerJsonPostRequestInit, normalizeRelayerBaseUrl } from "./relayerHttp.js";
-import { PASSKEY_PRF_FIRST_SALT_V1, PASSKEY_PRF_SECOND_SALT_V1 } from "../../../shared-ts/src/utils/signingSessionSeal.js";
+import { requireEvmFamilySigningKeySlotId } from "../../../shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js";
+import { ecdsaClientRootPublicKey33B64uFromString, parseSdkEcdsaDerivationSigningRootId, parseSdkEcdsaDerivationSigningRootVersion, parseSdkEcdsaDerivationThresholdKeyId } from "../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import "../../../shared-ts/src/signing-lanes/index.js";
 import { parseRecoveryCodeReservationId } from "../../../shared-ts/src/wallet-recovery/recoveryCodeReservation.js";
 import "../../../shared-ts/src/passkey-custody/index.js";
+import { parseRouterAbMpcMaterialActivationRef } from "../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
+import { parseRouterAbEcdsaDerivationPublicCapabilityV1, parseRouterAbEcdsaRegistrationActivationReceiptV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
 import { parseWalletRecoveryEcdsaPossessionChallengeV1 } from "../../../shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.js";
 import { parseWalletRecoveryEnvelopeEntry } from "../../../shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.js";
 import "../../../shared-ts/src/wallet-recovery/index.js";

package/dist/esm/core/rpcClients/relayer/walletRecoveryRotate.js

@@ -1,5 +1,4 @@
 import { buildRelayerJsonPostRequestInit, normalizeRelayerBaseUrl } from "./relayerHttp.js";
-import "../../../shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.js";
 //#region src/core/rpcClients/relayer/walletRecoveryRotate.ts
 const WALLET_RECOVERY_ROTATE_PATH = "/wallets/recovery/rotate";
 const WALLET_RECOVERY_ACK_PATH = "/wallets/recovery/acknowledge-backup";

package/dist/esm/core/rpcClients/relayer/walletRegistration.js

@@ -1,18 +1,22 @@
 import { parseWalletAuthMethodId, parseWalletId, parseWebAuthnCredentialIdB64u, parseWebAuthnRpId } from "../../../shared-ts/src/utils/domainIds.js";
-import { parseDigestB64u } from "../../../shared-ts/src/utils/canonicalPrimitives.js";
-import { parseWalletAddAuthMethodRegistrationOptions } from "../../../shared-ts/src/utils/addAuthMethodRegistration.js";
 import { parseImplicitNearAccountId, parseNamedNearAccountId } from "../../../shared-ts/src/utils/near.js";
-import { addAuthMethodIntentGrantFromString, addSignerIntentGrantFromString, computeRegistrationIntentDigestB64u, normalizeRegistrationAuthMethodInput, normalizeRegistrationSignerPlan, parseAddAuthMethodIntentV1, parseAddSignerIntentV1, registrationSignerSetSelectionFromPlan, sameAddAuthMethodIntentV1, sameAddSignerIntentV1, walletIdFromString } from "../../../shared-ts/src/utils/registrationIntent.js";
-import { parseWebAuthnAuthenticatorDeviceInfo } from "../../../shared-ts/src/utils/webauthnDeviceInfo.js";
-import { parseRouterAbEd25519YaoRegistrationAdmissionRequestV1 } from "../../../shared-ts/src/utils/routerAbEd25519Yao.js";
-import { parseWalletAuthAuthority } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
-import { parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, parseRouterAbEcdsaRegistrationRequestFactsV1, parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, requireRouterAbEcdsaDerivationNormalSigningStateV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
+import { parseDigestB64u } from "../../../shared-ts/src/utils/canonicalPrimitives.js";
 import { buildBearerAuthorizationHeader, buildRelayerJsonPostRequestInit, normalizeRelayerBaseUrl } from "./relayerHttp.js";
+import { walletIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
 import { thresholdEcdsaChainTargetsEqual } from "../../signingEngine/interfaces/ecdsaChainTarget.js";
 import { normalizeThresholdRuntimePolicyScope } from "../../signingEngine/threshold/sessionPolicy.js";
 import { parsePasskeyCustodyEnvelopeRecord } from "../../../shared-ts/src/passkey-custody/custodyEnvelope.js";
 import { parseWalletCustodyRegistrationOutcome } from "../../../shared-ts/src/passkey-custody/ceremonyCommitPayload.js";
 import "../../../shared-ts/src/passkey-custody/index.js";
+import { parseRouterAbEd25519YaoRegistrationAdmissionRequestV1 } from "../../../shared-ts/src/utils/routerAbEd25519Yao.js";
+import { parseWalletAuthAuthority } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
+import { parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, parseRouterAbEcdsaRegistrationRequestFactsV1, parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, requireRouterAbEcdsaDerivationNormalSigningStateV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
+import { parseWalletAddAuthMethodRegistrationOptions } from "../../../shared-ts/src/utils/addAuthMethodRegistration.js";
+import { normalizeRegistrationAuthMethodInput } from "../../../shared-ts/src/utils/registrationAuthMethodInput.js";
+import { parseWalletAuthorityV1 } from "../../../shared-ts/src/authorization/walletAuthority.js";
+import { parseWebAuthnAuthenticatorDeviceInfo } from "../../../shared-ts/src/utils/webauthnDeviceInfo.js";
+import { normalizeRegistrationSignerPlan, registrationSignerSetSelectionFromPlan } from "../../../shared-ts/src/utils/registrationSignerPlan.js";
+import { addAuthMethodIntentGrantFromString, addSignerIntentGrantFromString, computeRegistrationIntentDigestB64u, parseAddAuthMethodIntentV1, parseAddSignerIntentV1, sameAddAuthMethodIntentV1, sameAddSignerIntentV1 } from "../../../shared-ts/src/utils/registrationIntent.js";
 import { parseRegistrationEstablishedSessionResultV2 } from "../../../shared-ts/src/utils/registrationEstablishedSession.js";
 import { parseThresholdEcdsaKeyIdentityTargets } from "../../signingEngine/session/passkey/ecdsaKeyFactsInventory.js";
 import { parseThresholdEcdsaDerivationRoleLocalBootstrapValue } from "./thresholdEcdsa.js";
@@ -29,7 +33,6 @@ const ROUTE_PAYLOAD_BREAKDOWN_MAX_DEPTH = 2;
 const ROUTE_PAYLOAD_BREAKDOWN_MAX_FIELDS = 64;
 const WALLET_REGISTRATION_SETUP_PATH = "/wallets/register/setup";
 const WALLET_REGISTRATION_RESPOND_PATH = "/wallets/register/respond";
-const WALLET_REGISTRATION_NEAR_ADMISSION_PATH = "/wallets/register/near-admission";
 const WALLET_REGISTRATION_ACTIVATE_PATH = "/wallets/register/activate";
 const WALLET_REGISTRATION_NEAR_PROVISIONING_PATH = "/wallets/register/near-provisioning";
 /** Managed environment id header for Router API `api_credentials` auth. */
@@ -252,7 +255,7 @@ function readWalletRegistrationResponseField(record, field, label) {
 	if (!Object.keys(record).includes(field)) throw new Error(`${label} is missing ${field}`);
 	return Reflect.get(record, field);
 }
-function readOptionalWalletRegistrationResponseField(record, field, label) {
+function readOptionalWalletRegistrationResponseField(record, field, _label) {
 	if (!Object.keys(record).includes(field)) return void 0;
 	return Reflect.get(record, field);
 }
@@ -1315,7 +1318,8 @@ function parseWalletAddSignerFinalizeResponse(args) {
 		"rpId",
 		"credentialIdB64u",
 		"ed25519",
-		"ecdsa"
+		"ecdsa",
+		"authority"
 	], responseName);
 	const ok = readWalletRegistrationResponseField(record, "ok", responseName);
 	const kind = readWalletRegistrationResponseField(record, "kind", responseName);
@@ -1328,7 +1332,7 @@ function parseWalletAddSignerFinalizeResponse(args) {
 	const rpId = requireResponseRpId(readWalletRegistrationResponseField(record, "rpId", responseName), responseName);
 	switch (kind) {
 		case "near_ed25519": {
-			if (readOptionalWalletRegistrationResponseField(record, "ecdsa", responseName) !== void 0) throw new Error(`${responseName} response mixed signer branches`);
+			if (readOptionalWalletRegistrationResponseField(record, "ecdsa", responseName) !== void 0 || readOptionalWalletRegistrationResponseField(record, "authority", responseName) !== void 0) throw new Error(`${responseName} response mixed signer branches`);
 			const ed25519 = parseWalletEd25519YaoSignerPublicResult(readWalletRegistrationResponseField(record, "ed25519", responseName), "Wallet add-signer Ed25519 finalize");
 			return {
 				ok: true,
@@ -1353,12 +1357,15 @@ function parseWalletAddSignerFinalizeResponse(args) {
 			assertWalletRegistrationResponseKeys(ecdsa, ["walletKeys"], responseName);
 			const walletKeys = requireWalletRegistrationResponseArray(readWalletRegistrationResponseField(ecdsa, "walletKeys", responseName), `${responseName} walletKeys`);
 			if (walletKeys.length === 0) throw new Error(`${responseName} response has invalid walletKeys`);
+			const authority = parseWalletAuthorityV1(readWalletRegistrationResponseField(record, "authority", responseName));
+			if (!authority.ok || authority.value.state !== "active" || authority.value.walletId !== walletId) throw new Error(`${responseName} response has invalid authority`);
 			return {
 				ok: true,
 				walletId,
 				kind: "evm_family_ecdsa",
 				rpId,
-				ecdsa: { walletKeys: walletKeys.map(parseWalletAddSignerEcdsaFinalizeWalletKey) }
+				ecdsa: { walletKeys: walletKeys.map(parseWalletAddSignerEcdsaFinalizeWalletKey) },
+				authority: authority.value
 			};
 		}
 		default: throw new Error(`${responseName} response has invalid kind`);
@@ -1469,8 +1476,8 @@ function parseWalletEcdsaKeyFactsInventoryResponse(args) {
 	};
 }
 /**
-* Refactor 94C. `POST /wallets/register/setup` — the single admitted entry
-* point replacing the grant, intent, and start calls below.
+* `POST /wallets/register/setup` — the single admitted entry point replacing
+* the grant, intent, and start calls below.
 *
 * It is called *before* the WebAuthn create prompt, because its response
 * carries the challenge that create must sign. The server-side preparation
@@ -1576,7 +1583,7 @@ function parseRevokeWalletAuthMethodResponse(value) {
 	}
 }
 /**
-* R109C: revoke one auth method using a proof from a different active one.
+* Revoke one auth method using a proof from a different active one.
 *
 * The route is the wallet's own auth-method management, not device linking:
 * a sibling on the same device is not a device, and the linked-device
@@ -1587,7 +1594,7 @@ async function revokeWalletAuthMethod(args) {
 	const walletId = String(args.walletId || "").trim();
 	const walletAuthMethodId = String(args.walletAuthMethodId || "").trim();
 	if (!walletId || !walletAuthMethodId) throw new Error("auth-method revoke requires a wallet and a target method");
-	return parseRevokeWalletAuthMethodResponse(await postJson({
+	const request = {
 		relayerUrl: args.relayerUrl,
 		path: `/wallets/${encodeURIComponent(walletId)}/auth-methods/${encodeURIComponent(walletAuthMethodId)}/revoke`,
 		body: {
@@ -1596,7 +1603,15 @@ async function revokeWalletAuthMethod(args) {
 			requestedAtMs: args.requestedAtMs,
 			sourceProof: args.sourceProof
 		}
-	}));
+	};
+	let response;
+	try {
+		response = await postJson(request);
+	} catch (error) {
+		if (!(error instanceof TypeError)) throw error;
+		response = await postJson(request);
+	}
+	return parseRevokeWalletAuthMethodResponse(response);
 }
 async function createWalletAddAuthMethodIntent(args) {
 	const walletId = String(args.walletId || "").trim();
@@ -1732,47 +1747,6 @@ async function respondWalletRegistration(args) {
 		onServerTiming: args.onServerTiming
 	}));
 }
-async function authorizeWalletRegistrationNearAdmission(args) {
-	const body = {
-		registrationCeremonyId: args.registrationCeremonyId,
-		signedSetup: args.signedSetup
-	};
-	switch (args.kind) {
-		case "passkey":
-			body.webauthn_registration = args.webauthnRegistration;
-			break;
-		case "email_otp":
-			body.emailOtpRegistrationProof = args.emailOtpRegistrationProof;
-			break;
-	}
-	const response = await postJson({
-		relayerUrl: args.relayerUrl,
-		path: WALLET_REGISTRATION_NEAR_ADMISSION_PATH,
-		headers: args.headers,
-		body
-	});
-	const responseName = "Wallet registration NEAR admission";
-	const record = requireWalletRegistrationResponseObject({
-		responseName,
-		field: "body",
-		value: response
-	});
-	assertWalletRegistrationResponseKeys(record, [
-		"ok",
-		"registrationCeremonyId",
-		"ed25519"
-	], responseName);
-	if (readWalletRegistrationResponseField(record, "ok", responseName) !== true) throw new Error(`${responseName} response is not successful`);
-	return {
-		ok: true,
-		registrationCeremonyId: requireResponseString({
-			responseName,
-			field: "registrationCeremonyId",
-			value: readWalletRegistrationResponseField(record, "registrationCeremonyId", responseName)
-		}),
-		ed25519: parseWalletRegistrationRespondEd25519DeferredWork(readWalletRegistrationResponseField(record, "ed25519", responseName))
-	};
-}
 function parseRegistrationEstablishedSessionResult(value, expectedWalletId) {
 	const responseName = "Wallet registration established session";
 	const parsed = parseRegistrationEstablishedSessionResultV2(value);
@@ -2300,11 +2274,19 @@ async function finalizeWalletAddAuthMethod(args) {
 		webauthnRegistration: args.webauthnRegistration,
 		custodyEnvelope: parsePasskeyCustodyEnvelopeRecord(args.custodyEnvelope)
 	};
-	return parseWalletAddAuthMethodFinalizeResponse(await postJson({
+	const request = {
 		relayerUrl: args.relayerUrl,
 		path: `/wallets/${encodeURIComponent(walletId)}/auth-methods/finalize`,
 		body
-	}));
+	};
+	let response;
+	try {
+		response = await postJson(request);
+	} catch (error) {
+		if (!(error instanceof TypeError)) throw error;
+		response = await postJson(request);
+	}
+	return parseWalletAddAuthMethodFinalizeResponse(response);
 }
 async function fetchWalletEcdsaKeyFactsInventoryWithOperationCredential(args) {
 	const walletId = String(args.walletId || "").trim();
@@ -2362,6 +2344,6 @@ async function fetchWalletEcdsaKeyFactsInventoryWithWebAuthn(args) {
 	});
 }
 //#endregion
-export { activateWalletAddSignerEcdsa, activateWalletRegistration, authorizeWalletRegistrationNearAdmission, completeWalletRegistrationNearProvisioning, createWalletAddAuthMethodIntent, createWalletAddSignerIntent, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn, finalizeWalletAddAuthMethod, finalizeWalletAddSigner, fundImplicitNearAccountForTesting, isEmailOtpWalletRegistrationFinalizeResponse, parseWalletRegistrationEcdsaDerivationRespond, requestAddAuthMethodEmailOtpChallenge, respondWalletAddSignerEcdsa, respondWalletRegistration, revokeWalletAuthMethod, setupWalletRegistration, startWalletAddAuthMethod, startWalletAddSigner };
+export { activateWalletAddSignerEcdsa, activateWalletRegistration, completeWalletRegistrationNearProvisioning, createWalletAddAuthMethodIntent, createWalletAddSignerIntent, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn, finalizeWalletAddAuthMethod, finalizeWalletAddSigner, fundImplicitNearAccountForTesting, isEmailOtpWalletRegistrationFinalizeResponse, parseWalletRegistrationEcdsaDerivationRespond, requestAddAuthMethodEmailOtpChallenge, respondWalletAddSignerEcdsa, respondWalletRegistration, revokeWalletAuthMethod, setupWalletRegistration, startWalletAddAuthMethod, startWalletAddSigner };
 
 //# sourceMappingURL=walletRegistration.js.map

package/dist/esm/core/rpcClients/relayer/walletRegistrationTerminalResponse.js

@@ -1,24 +1,18 @@
 import { parseThresholdEd25519SessionId, parseWebAuthnRpId } from "../../../shared-ts/src/utils/domainIds.js";
-import { base64UrlDecode } from "../../../shared-ts/src/utils/base64.js";
-import { parseWalletAuthorityV1 } from "../../../shared-ts/src/authorization/walletAuthority.js";
 import { parseImplicitNearAccountId, parseNamedNearAccountId } from "../../../shared-ts/src/utils/near.js";
-import { parseNearEd25519SigningKeyId, parseWalletAuthMethodRecordV2, walletIdFromString } from "../../../shared-ts/src/utils/registrationIntent.js";
 import { isPlainObject } from "../../../shared-ts/src/utils/validation.js";
-import { isPasskeyWalletAuthAuthority, parseWalletAuthAuthority } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
-import { parseRouterAbEcdsaDerivationPublicCapabilityV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
+import { base64UrlDecode } from "../../../shared-ts/src/utils/base64.js";
 import { requireRouterAbEd25519NormalSigningState } from "../../../shared-ts/src/utils/signingSessionSeal.js";
+import { parseNearEd25519SigningKeyId, walletIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
 import { thresholdEcdsaChainTargetFromRequest, thresholdEcdsaChainTargetKey } from "../../signingEngine/interfaces/ecdsaChainTarget.js";
 import { normalizeThresholdRuntimePolicyScope } from "../../signingEngine/threshold/sessionPolicy.js";
 import { parseWalletCustodyRegistrationOutcome } from "../../../shared-ts/src/passkey-custody/ceremonyCommitPayload.js";
 import "../../../shared-ts/src/passkey-custody/index.js";
+import { isPasskeyWalletAuthAuthority, parseWalletAuthAuthority } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
+import { parseRouterAbEcdsaDerivationPublicCapabilityV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
+import { parseWalletAuthMethodRecordV2 } from "../../../shared-ts/src/utils/walletAuthMethodRecord.js";
+import { parseWalletAuthorityV1 } from "../../../shared-ts/src/authorization/walletAuthority.js";
 //#region src/core/rpcClients/relayer/walletRegistrationTerminalResponse.ts
-/**
-* Strict terminal response parsing for wallet registration.
-*
-* The registration RPC orchestration remains in `walletRegistration.ts`; this
-* module owns the response boundary validators and the terminal finalize
-* projection used by registration activation and provisioning.
-*/
 function requireResponseString(args) {
 	const value = String(args.value || "").trim();
 	if (!value) throw new Error(`${args.responseName} response missing ${args.field}`);

package/dist/esm/core/rpcClients/relayer/walletSessionAuthorizationStatus.js

@@ -1,5 +1,5 @@
 import { parseMpcWalletSigningQuotaId, parseWalletSessionId } from "../../../shared-ts/src/authorization/capabilityKinds.js";
-import { parseActiveWalletSessionV1, parseWalletSessionOperationCredentialV1 } from "../../../shared-ts/src/device-linking/parsers.js";
+import { parseActiveWalletSessionV1, parseWalletSessionOperationCredentialV1 } from "../../../shared-ts/src/device-linking/activeWalletSession.js";
 import { buildBearerAuthorizationHeader, buildRelayerJsonPostRequestInit, normalizeRelayerBaseUrl } from "./relayerHttp.js";
 //#region src/core/rpcClients/relayer/walletSessionAuthorizationStatus.ts
 const EXACT_WALLET_SESSION_STATUS_PATH = "/wallet/session/status";

package/dist/esm/core/signingEngine/assembly/ports/evmFamily.js

@@ -1,6 +1,6 @@
 import { mpcMaterialActivationRefsEqual } from "../../../../shared-ts/src/utils/domainIds.js";
-import { isEmailOtpWalletAuthAuthority, walletAuthAuthoritiesMatch } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { thresholdEcdsaChainTargetsEqual } from "../../interfaces/ecdsaChainTarget.js";
+import { isEmailOtpWalletAuthAuthority, walletAuthAuthoritiesMatch } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { authorizeEvmFamilyEcdsaSigningCapability } from "../../session/material/ecdsaSigningCapability.js";
 import { browserExactWalletSessionReadPorts } from "./emailOtp.js";
 //#region src/core/signingEngine/assembly/ports/evmFamily.ts

package/dist/esm/core/signingEngine/assembly/ports/stepUpRuntime.js

@@ -40,7 +40,6 @@ function createStepUpRuntime(args) {
 		listExactSealedSessionsForWallet: args.sealedSessionStore.listExactSealedSessionsForWallet,
 		acquireSigningSessionRestoreLease: args.sealedSessionStore.acquireSigningSessionRestoreLease,
 		releaseSigningSessionRestoreLease: args.sealedSessionStore.releaseSigningSessionRestoreLease,
-		deleteDurableSealedSessionRecord: args.sealedSessionStore.deleteDurableSealedSessionRecord,
 		updateExactSealedSessionPolicy: args.sealedSessionStore.updateExactSealedSessionPolicy
 	});
 	const passkeyMpcSession = createWarmSessionAwarePasskeyMpcSession({