@seams/wallet 0.6.1 → 0.7.1

package/dist/esm/react/core/rpcClients/relayer/walletRegistration.js

@@ -2,17 +2,21 @@ import { parseImplicitNearAccountId, parseNamedNearAccountId } from "../../../sh
 import { normalizeThresholdRuntimePolicyScope } from "../../signingEngine/threshold/sessionPolicy.js";
 import { parseWalletAuthMethodId, parseWalletId, parseWebAuthnCredentialIdB64u, parseWebAuthnRpId } from "../../../shared-ts/src/utils/domainIds.js";
 import { parseDigestB64u } from "../../../shared-ts/src/utils/canonicalPrimitives.js";
-import { parseWalletAddAuthMethodRegistrationOptions } from "../../../shared-ts/src/utils/addAuthMethodRegistration.js";
-import { addAuthMethodIntentGrantFromString, addSignerIntentGrantFromString, computeRegistrationIntentDigestB64u, normalizeRegistrationAuthMethodInput, normalizeRegistrationSignerPlan, parseAddAuthMethodIntentV1, parseAddSignerIntentV1, registrationSignerSetSelectionFromPlan, sameAddAuthMethodIntentV1, sameAddSignerIntentV1, walletIdFromString } from "../../../shared-ts/src/utils/registrationIntent.js";
-import { parseWebAuthnAuthenticatorDeviceInfo } from "../../../shared-ts/src/utils/webauthnDeviceInfo.js";
-import { parseRouterAbEd25519YaoRegistrationAdmissionRequestV1 } from "../../../shared-ts/src/utils/routerAbEd25519Yao.js";
 import { parseWalletAuthAuthority } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, parseRouterAbEcdsaRegistrationRequestFactsV1, parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, requireRouterAbEcdsaDerivationNormalSigningStateV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
+import { walletIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
 import { thresholdEcdsaChainTargetsEqual } from "../../signingEngine/interfaces/ecdsaChainTarget.js";
+import { normalizeRegistrationAuthMethodInput } from "../../../shared-ts/src/utils/registrationAuthMethodInput.js";
 import { parsePasskeyCustodyEnvelopeRecord } from "../../../shared-ts/src/passkey-custody/custodyEnvelope.js";
 import { parseWalletCustodyRegistrationOutcome } from "../../../shared-ts/src/passkey-custody/ceremonyCommitPayload.js";
 import "../../../shared-ts/src/passkey-custody/index.js";
+import { parseWalletAddAuthMethodRegistrationOptions } from "../../../shared-ts/src/utils/addAuthMethodRegistration.js";
+import { parseRouterAbEd25519YaoRegistrationAdmissionRequestV1 } from "../../../shared-ts/src/utils/routerAbEd25519Yao.js";
+import { parseWalletAuthorityV1 } from "../../../shared-ts/src/authorization/walletAuthority.js";
+import { parseWebAuthnAuthenticatorDeviceInfo } from "../../../shared-ts/src/utils/webauthnDeviceInfo.js";
 import { buildBearerAuthorizationHeader, buildRelayerJsonPostRequestInit, normalizeRelayerBaseUrl } from "./relayerHttp.js";
+import { normalizeRegistrationSignerPlan, registrationSignerSetSelectionFromPlan } from "../../../shared-ts/src/utils/registrationSignerPlan.js";
+import { addAuthMethodIntentGrantFromString, addSignerIntentGrantFromString, computeRegistrationIntentDigestB64u, parseAddAuthMethodIntentV1, parseAddSignerIntentV1, sameAddAuthMethodIntentV1, sameAddSignerIntentV1 } from "../../../shared-ts/src/utils/registrationIntent.js";
 import { parseRegistrationEstablishedSessionResultV2 } from "../../../shared-ts/src/utils/registrationEstablishedSession.js";
 import { parseThresholdEcdsaKeyIdentityTargets } from "../../signingEngine/session/passkey/ecdsaKeyFactsInventory.js";
 import { parseThresholdEcdsaDerivationRoleLocalBootstrapValue } from "./thresholdEcdsa.js";
@@ -29,7 +33,6 @@ const ROUTE_PAYLOAD_BREAKDOWN_MAX_DEPTH = 2;
 const ROUTE_PAYLOAD_BREAKDOWN_MAX_FIELDS = 64;
 const WALLET_REGISTRATION_SETUP_PATH = "/wallets/register/setup";
 const WALLET_REGISTRATION_RESPOND_PATH = "/wallets/register/respond";
-const WALLET_REGISTRATION_NEAR_ADMISSION_PATH = "/wallets/register/near-admission";
 const WALLET_REGISTRATION_ACTIVATE_PATH = "/wallets/register/activate";
 const WALLET_REGISTRATION_NEAR_PROVISIONING_PATH = "/wallets/register/near-provisioning";
 /** Managed environment id header for Router API `api_credentials` auth. */
@@ -252,7 +255,7 @@ function readWalletRegistrationResponseField(record, field, label) {
 	if (!Object.keys(record).includes(field)) throw new Error(`${label} is missing ${field}`);
 	return Reflect.get(record, field);
 }
-function readOptionalWalletRegistrationResponseField(record, field, label) {
+function readOptionalWalletRegistrationResponseField(record, field, _label) {
 	if (!Object.keys(record).includes(field)) return void 0;
 	return Reflect.get(record, field);
 }
@@ -1315,7 +1318,8 @@ function parseWalletAddSignerFinalizeResponse(args) {
 		"rpId",
 		"credentialIdB64u",
 		"ed25519",
-		"ecdsa"
+		"ecdsa",
+		"authority"
 	], responseName);
 	const ok = readWalletRegistrationResponseField(record, "ok", responseName);
 	const kind = readWalletRegistrationResponseField(record, "kind", responseName);
@@ -1328,7 +1332,7 @@ function parseWalletAddSignerFinalizeResponse(args) {
 	const rpId = requireResponseRpId(readWalletRegistrationResponseField(record, "rpId", responseName), responseName);
 	switch (kind) {
 		case "near_ed25519": {
-			if (readOptionalWalletRegistrationResponseField(record, "ecdsa", responseName) !== void 0) throw new Error(`${responseName} response mixed signer branches`);
+			if (readOptionalWalletRegistrationResponseField(record, "ecdsa", responseName) !== void 0 || readOptionalWalletRegistrationResponseField(record, "authority", responseName) !== void 0) throw new Error(`${responseName} response mixed signer branches`);
 			const ed25519 = parseWalletEd25519YaoSignerPublicResult(readWalletRegistrationResponseField(record, "ed25519", responseName), "Wallet add-signer Ed25519 finalize");
 			return {
 				ok: true,
@@ -1353,12 +1357,15 @@ function parseWalletAddSignerFinalizeResponse(args) {
 			assertWalletRegistrationResponseKeys(ecdsa, ["walletKeys"], responseName);
 			const walletKeys = requireWalletRegistrationResponseArray(readWalletRegistrationResponseField(ecdsa, "walletKeys", responseName), `${responseName} walletKeys`);
 			if (walletKeys.length === 0) throw new Error(`${responseName} response has invalid walletKeys`);
+			const authority = parseWalletAuthorityV1(readWalletRegistrationResponseField(record, "authority", responseName));
+			if (!authority.ok || authority.value.state !== "active" || authority.value.walletId !== walletId) throw new Error(`${responseName} response has invalid authority`);
 			return {
 				ok: true,
 				walletId,
 				kind: "evm_family_ecdsa",
 				rpId,
-				ecdsa: { walletKeys: walletKeys.map(parseWalletAddSignerEcdsaFinalizeWalletKey) }
+				ecdsa: { walletKeys: walletKeys.map(parseWalletAddSignerEcdsaFinalizeWalletKey) },
+				authority: authority.value
 			};
 		}
 		default: throw new Error(`${responseName} response has invalid kind`);
@@ -1469,8 +1476,8 @@ function parseWalletEcdsaKeyFactsInventoryResponse(args) {
 	};
 }
 /**
-* Refactor 94C. `POST /wallets/register/setup` — the single admitted entry
-* point replacing the grant, intent, and start calls below.
+* `POST /wallets/register/setup` — the single admitted entry point replacing
+* the grant, intent, and start calls below.
 *
 * It is called *before* the WebAuthn create prompt, because its response
 * carries the challenge that create must sign. The server-side preparation
@@ -1576,7 +1583,7 @@ function parseRevokeWalletAuthMethodResponse(value) {
 	}
 }
 /**
-* R109C: revoke one auth method using a proof from a different active one.
+* Revoke one auth method using a proof from a different active one.
 *
 * The route is the wallet's own auth-method management, not device linking:
 * a sibling on the same device is not a device, and the linked-device
@@ -1587,7 +1594,7 @@ async function revokeWalletAuthMethod(args) {
 	const walletId = String(args.walletId || "").trim();
 	const walletAuthMethodId = String(args.walletAuthMethodId || "").trim();
 	if (!walletId || !walletAuthMethodId) throw new Error("auth-method revoke requires a wallet and a target method");
-	return parseRevokeWalletAuthMethodResponse(await postJson({
+	const request = {
 		relayerUrl: args.relayerUrl,
 		path: `/wallets/${encodeURIComponent(walletId)}/auth-methods/${encodeURIComponent(walletAuthMethodId)}/revoke`,
 		body: {
@@ -1596,7 +1603,15 @@ async function revokeWalletAuthMethod(args) {
 			requestedAtMs: args.requestedAtMs,
 			sourceProof: args.sourceProof
 		}
-	}));
+	};
+	let response;
+	try {
+		response = await postJson(request);
+	} catch (error) {
+		if (!(error instanceof TypeError)) throw error;
+		response = await postJson(request);
+	}
+	return parseRevokeWalletAuthMethodResponse(response);
 }
 async function createWalletAddAuthMethodIntent(args) {
 	const walletId = String(args.walletId || "").trim();
@@ -1732,47 +1747,6 @@ async function respondWalletRegistration(args) {
 		onServerTiming: args.onServerTiming
 	}));
 }
-async function authorizeWalletRegistrationNearAdmission(args) {
-	const body = {
-		registrationCeremonyId: args.registrationCeremonyId,
-		signedSetup: args.signedSetup
-	};
-	switch (args.kind) {
-		case "passkey":
-			body.webauthn_registration = args.webauthnRegistration;
-			break;
-		case "email_otp":
-			body.emailOtpRegistrationProof = args.emailOtpRegistrationProof;
-			break;
-	}
-	const response = await postJson({
-		relayerUrl: args.relayerUrl,
-		path: WALLET_REGISTRATION_NEAR_ADMISSION_PATH,
-		headers: args.headers,
-		body
-	});
-	const responseName = "Wallet registration NEAR admission";
-	const record = requireWalletRegistrationResponseObject({
-		responseName,
-		field: "body",
-		value: response
-	});
-	assertWalletRegistrationResponseKeys(record, [
-		"ok",
-		"registrationCeremonyId",
-		"ed25519"
-	], responseName);
-	if (readWalletRegistrationResponseField(record, "ok", responseName) !== true) throw new Error(`${responseName} response is not successful`);
-	return {
-		ok: true,
-		registrationCeremonyId: requireResponseString({
-			responseName,
-			field: "registrationCeremonyId",
-			value: readWalletRegistrationResponseField(record, "registrationCeremonyId", responseName)
-		}),
-		ed25519: parseWalletRegistrationRespondEd25519DeferredWork(readWalletRegistrationResponseField(record, "ed25519", responseName))
-	};
-}
 function parseRegistrationEstablishedSessionResult(value, expectedWalletId) {
 	const responseName = "Wallet registration established session";
 	const parsed = parseRegistrationEstablishedSessionResultV2(value);
@@ -2300,11 +2274,19 @@ async function finalizeWalletAddAuthMethod(args) {
 		webauthnRegistration: args.webauthnRegistration,
 		custodyEnvelope: parsePasskeyCustodyEnvelopeRecord(args.custodyEnvelope)
 	};
-	return parseWalletAddAuthMethodFinalizeResponse(await postJson({
+	const request = {
 		relayerUrl: args.relayerUrl,
 		path: `/wallets/${encodeURIComponent(walletId)}/auth-methods/finalize`,
 		body
-	}));
+	};
+	let response;
+	try {
+		response = await postJson(request);
+	} catch (error) {
+		if (!(error instanceof TypeError)) throw error;
+		response = await postJson(request);
+	}
+	return parseWalletAddAuthMethodFinalizeResponse(response);
 }
 async function fetchWalletEcdsaKeyFactsInventoryWithOperationCredential(args) {
 	const walletId = String(args.walletId || "").trim();
@@ -2362,6 +2344,6 @@ async function fetchWalletEcdsaKeyFactsInventoryWithWebAuthn(args) {
 	});
 }
 //#endregion
-export { activateWalletAddSignerEcdsa, activateWalletRegistration, authorizeWalletRegistrationNearAdmission, completeWalletRegistrationNearProvisioning, createWalletAddAuthMethodIntent, createWalletAddSignerIntent, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn, finalizeWalletAddAuthMethod, finalizeWalletAddSigner, fundImplicitNearAccountForTesting, isEmailOtpWalletRegistrationFinalizeResponse, parseWalletRegistrationEcdsaDerivationRespond, requestAddAuthMethodEmailOtpChallenge, respondWalletAddSignerEcdsa, respondWalletRegistration, revokeWalletAuthMethod, setupWalletRegistration, startWalletAddAuthMethod, startWalletAddSigner };
+export { activateWalletAddSignerEcdsa, activateWalletRegistration, completeWalletRegistrationNearProvisioning, createWalletAddAuthMethodIntent, createWalletAddSignerIntent, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn, finalizeWalletAddAuthMethod, finalizeWalletAddSigner, fundImplicitNearAccountForTesting, isEmailOtpWalletRegistrationFinalizeResponse, parseWalletRegistrationEcdsaDerivationRespond, requestAddAuthMethodEmailOtpChallenge, respondWalletAddSignerEcdsa, respondWalletRegistration, revokeWalletAuthMethod, setupWalletRegistration, startWalletAddAuthMethod, startWalletAddSigner };
 
 //# sourceMappingURL=walletRegistration.js.map

package/dist/esm/react/core/rpcClients/relayer/walletRegistrationTerminalResponse.js

@@ -1,24 +1,18 @@
-import { base64UrlDecode } from "../../../shared-ts/src/utils/base64.js";
 import { parseImplicitNearAccountId, parseNamedNearAccountId } from "../../../shared-ts/src/utils/near.js";
+import { base64UrlDecode } from "../../../shared-ts/src/utils/base64.js";
 import { isPlainObject } from "../../../shared-ts/src/utils/validation.js";
 import { normalizeThresholdRuntimePolicyScope } from "../../signingEngine/threshold/sessionPolicy.js";
 import { requireRouterAbEd25519NormalSigningState } from "../../../shared-ts/src/utils/signingSessionSeal.js";
 import { parseThresholdEd25519SessionId, parseWebAuthnRpId } from "../../../shared-ts/src/utils/domainIds.js";
-import { parseWalletAuthorityV1 } from "../../../shared-ts/src/authorization/walletAuthority.js";
-import { parseNearEd25519SigningKeyId, parseWalletAuthMethodRecordV2, walletIdFromString } from "../../../shared-ts/src/utils/registrationIntent.js";
 import { isPasskeyWalletAuthAuthority, parseWalletAuthAuthority } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { parseRouterAbEcdsaDerivationPublicCapabilityV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
+import { parseNearEd25519SigningKeyId, walletIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
 import { thresholdEcdsaChainTargetFromRequest, thresholdEcdsaChainTargetKey } from "../../signingEngine/interfaces/ecdsaChainTarget.js";
+import { parseWalletAuthMethodRecordV2 } from "../../../shared-ts/src/utils/walletAuthMethodRecord.js";
 import { parseWalletCustodyRegistrationOutcome } from "../../../shared-ts/src/passkey-custody/ceremonyCommitPayload.js";
 import "../../../shared-ts/src/passkey-custody/index.js";
+import { parseWalletAuthorityV1 } from "../../../shared-ts/src/authorization/walletAuthority.js";
 //#region src/core/rpcClients/relayer/walletRegistrationTerminalResponse.ts
-/**
-* Strict terminal response parsing for wallet registration.
-*
-* The registration RPC orchestration remains in `walletRegistration.ts`; this
-* module owns the response boundary validators and the terminal finalize
-* projection used by registration activation and provisioning.
-*/
 function requireResponseString(args) {
 	const value = String(args.value || "").trim();
 	if (!value) throw new Error(`${args.responseName} response missing ${args.field}`);

package/dist/esm/react/core/rpcClients/relayer/walletSessionAuthorizationStatus.js

@@ -1,5 +1,5 @@
 import { parseMpcWalletSigningQuotaId, parseWalletSessionId } from "../../../shared-ts/src/authorization/capabilityKinds.js";
-import { parseActiveWalletSessionV1, parseWalletSessionOperationCredentialV1 } from "../../../shared-ts/src/device-linking/parsers.js";
+import { parseActiveWalletSessionV1, parseWalletSessionOperationCredentialV1 } from "../../../shared-ts/src/device-linking/activeWalletSession.js";
 import { buildBearerAuthorizationHeader, buildRelayerJsonPostRequestInit, normalizeRelayerBaseUrl } from "./relayerHttp.js";
 //#region src/core/rpcClients/relayer/walletSessionAuthorizationStatus.ts
 const EXACT_WALLET_SESSION_STATUS_PATH = "/wallet/session/status";

package/dist/esm/react/core/signingEngine/assembly/ports/stepUpRuntime.js

@@ -40,7 +40,6 @@ function createStepUpRuntime(args) {
 		listExactSealedSessionsForWallet: args.sealedSessionStore.listExactSealedSessionsForWallet,
 		acquireSigningSessionRestoreLease: args.sealedSessionStore.acquireSigningSessionRestoreLease,
 		releaseSigningSessionRestoreLease: args.sealedSessionStore.releaseSigningSessionRestoreLease,
-		deleteDurableSealedSessionRecord: args.sealedSessionStore.deleteDurableSealedSessionRecord,
 		updateExactSealedSessionPolicy: args.sealedSessionStore.updateExactSealedSessionPolicy
 	});
 	const passkeyMpcSession = createWarmSessionAwarePasskeyMpcSession({

package/dist/esm/react/core/signingEngine/chains/evm/display/evmTx.js

@@ -19,11 +19,6 @@ function makeField(label, value, copyValue) {
 		...typeof copyValue === "string" && copyValue.trim() ? { copyValue } : {}
 	};
 }
-function shortenHexAddress(address) {
-	const normalized = String(address || "").trim();
-	if (!/^0x[0-9a-fA-F]{40}$/.test(normalized)) return normalized;
-	return `${normalized.slice(0, 8)}...${normalized.slice(-4)}`;
-}
 function buildAbiDecodeHint(args) {
 	const normalizedDataHex = normalizeHexData(args.dataHex);
 	if (normalizedDataHex === "0x") return void 0;
@@ -37,7 +32,7 @@ function buildDefaultContractCallOperation(args) {
 	const functionLabel = resolveFunctionDisplayName(args.selector, args.to);
 	const hasCallData = !!args.to && args.dataHex !== "0x";
 	const formattedGasLimit = formatCompactGas(args.tx.gasLimit);
-	const rowLabel = args.to ? `Transaction to contract ${shortenHexAddress(args.to)}` : "Contract Deployment";
+	const rowLabel = args.to ? "Transaction to contract" : "Contract Deployment";
 	const dataField = makeField("Data", formatCalldataForDisplay(args.dataHex), args.dataHex);
 	if (dataField) {
 		dataField.renderAs = "file-content";

package/dist/esm/react/core/signingEngine/chains/near/display.js

@@ -229,7 +229,20 @@ function buildNearMessageDisplayModel(args) {
 		operations: [operation]
 	};
 }
+function buildNearPreparationDisplayModel(args) {
+	try {
+		return buildNearDisplayModel(args);
+	} catch {
+		return {
+			chain: "near",
+			signerAccount: args.signerAccount,
+			...args.title ? { title: args.title } : {},
+			...args.subtitle ? { subtitle: args.subtitle } : {},
+			operations: []
+		};
+	}
+}
 //#endregion
-export { buildNearDisplayModel, buildNearMessageDisplayModel };
+export { buildNearDisplayModel, buildNearMessageDisplayModel, buildNearPreparationDisplayModel };
 
 //# sourceMappingURL=display.js.map

package/dist/esm/react/core/signingEngine/chains/tempo/display.js

@@ -28,11 +28,6 @@ function buildAbiDecodeHint(args) {
 		abi: args.abi
 	};
 }
-function shortenHexAddress(address) {
-	const normalized = String(address || "").trim();
-	if (!/^0x[0-9a-fA-F]{40}$/.test(normalized)) return normalized;
-	return `${normalized.slice(0, 8)}...${normalized.slice(-4)}`;
-}
 function buildTempoCallDetailsOperation(args) {
 	const { rootId, call, tx } = args;
 	const to = String(call.to || "").trim();
@@ -73,7 +68,7 @@ function buildTempoCallOperation(args) {
 	const { call, callIndex, callCount, tx } = args;
 	const id = `tempo.tx.${callIndex}`;
 	const to = String(call.to || "").trim();
-	const rowLabel = `${callCount > 1 ? `Transaction ${callIndex + 1} to contract ` : "Transaction to contract "}${shortenHexAddress(to) || "unknown contract"}`;
+	const rowLabel = callCount > 1 ? `Transaction ${callIndex + 1} to contract` : "Transaction to contract";
 	const child = buildTempoCallDetailsOperation({
 		rootId: id,
 		call,

package/dist/esm/react/core/signingEngine/flows/recovery/ecdsaDerivationExport.js

@@ -14,7 +14,7 @@ import { ecdsaRoleLocalPersistedMaterialSource, resolveEcdsaRoleLocalMaterial }
 const ECDSA_DERIVATION_EXPORT_CONFIRMATION_DIGEST_VERSION = "ecdsa-derivation:role-local:product-export-confirmation:v5";
 const ECDSA_DERIVATION_EXPORT_AUTHORIZATION_DIGEST_VERSION = "ecdsa-derivation:role-local:product-export-authorization:v5";
 const ECDSA_DERIVATION_EXPORT_AUTH_TTL_MS = 6e4;
-function exportAuthorizationWire(authorization) {
+function exportAuthorizationWire(_authorization) {
 	return { kind: "operation_step_up" };
 }
 function exportAuthorizationDigestFields(authorization) {

package/dist/esm/react/core/signingEngine/flows/recovery/ecdsaExportFlow.js

@@ -1,12 +1,11 @@
-import { base64UrlEncode } from "../../../../shared-ts/src/utils/base64.js";
-import { alphabetizeStringify, sha256BytesUtf8 } from "../../../../shared-ts/src/utils/digests.js";
+import { alphabetizeStringify } from "../../../../shared-ts/src/utils/digests.js";
 import { mpcMaterialActivationRefsEqual } from "../../../../shared-ts/src/utils/domainIds.js";
-import { parseDigestB64u } from "../../../../shared-ts/src/utils/canonicalPrimitives.js";
-import { sameWalletAuthMethodRecordV2 } from "../../../../shared-ts/src/utils/registrationIntent.js";
+import { sha256Utf8DigestB64u } from "../../../../shared-ts/src/utils/canonicalPrimitives.js";
+import { activeWalletSessionV1RecordsEqual } from "../../../../shared-ts/src/device-linking/activeWalletSession.js";
 import { isEmailOtpWalletAuthAuthority, isPasskeyWalletAuthAuthority, walletAuthAuthoritiesMatch } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { sameRouterAbEcdsaDerivationNormalSigningStateV1 } from "../../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
 import { thresholdEcdsaChainTargetKey, walletSessionRefFromSession } from "../../interfaces/ecdsaChainTarget.js";
-import { activeWalletSessionV1RecordsEqual } from "../../../../shared-ts/src/device-linking/activeWalletSession.js";
+import { sameWalletAuthMethodRecordV2 } from "../../../../shared-ts/src/utils/walletAuthMethodRecord.js";
 import { KeyExportEventPhase } from "../../../types/sdkSentEvents.js";
 import { resolveThresholdEcdsaSigningQueueKey } from "../../threshold/ecdsa/signingQueue.js";
 import { issueEcdsaOperationStepUpAuthorization, prepareEcdsaOperationStepUp } from "../../threshold/ecdsa/operationStepUp.js";
@@ -163,7 +162,7 @@ function requirePasskeyEcdsaExportAuth(exportLane) {
 	return auth;
 }
 async function exportOperationDigest(value) {
-	return parseDigestB64u(base64UrlEncode(await sha256BytesUtf8(alphabetizeStringify(value))));
+	return sha256Utf8DigestB64u(alphabetizeStringify(value));
 }
 async function prepareExplicitEcdsaExportOperationWithRuntime(args) {
 	const chainTargetKey = thresholdEcdsaChainTargetKey(args.chainTarget);

package/dist/esm/react/core/signingEngine/flows/recovery/exportLaneSelection.js

@@ -1,7 +1,7 @@
+import { signingLaneAuthBindingKey } from "../../session/identity/signingLaneAuthBinding.js";
 import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
 import { deriveEvmFamilyKeyFingerprintFromPublicFacts } from "../../session/identity/evmFamilyEcdsaIdentity.js";
 import { buildEvmFamilyEcdsaSignerBinding, exactEcdsaSigningLaneIdentity, exactEd25519ExportMaterialIdentity, exactSigningLaneIdentityKey, nearEd25519SignerBindingFromBoundaryFields } from "../../session/identity/exactSigningLaneIdentity.js";
-import { signingLaneAuthBindingKey } from "../../session/identity/signingLaneAuthBinding.js";
 import { emitSigningSessionFlowFailure, emitSigningSessionFlowTrace } from "../../session/operationState/trace.js";
 import { availableEcdsaSigningLaneAuthMethod, ecdsaAvailableLaneCandidatesForTarget, isConcreteAvailableSigningLane } from "../../session/availability/availableSigningLanes.js";
 import { isOwnerRelinkRequiredError } from "../../session/identity/ownerLaneScope.js";

package/dist/esm/react/core/signingEngine/flows/recovery/passkeyEd25519YaoRecovery.js

@@ -1,20 +1,21 @@
 import { base58Encode } from "../../../../shared-ts/src/utils/base58.js";
-import { isPlainObject } from "../../../../shared-ts/src/utils/validation.js";
+import { requireRecord, requireTrimmedString } from "../../../../shared-ts/src/utils/validation.js";
 import { normalizeRuntimePolicyScope, signingRootScopeFromRuntimePolicyScope } from "../../../../shared-ts/src/threshold/signingRootScope.js";
 import { parseRouterAbEd25519NormalSigningState } from "../../../../shared-ts/src/utils/signingSessionSeal.js";
 import { mpcMaterialActivationRefsEqual, parseWalletAuthMethodId, parseWalletAuthorityId } from "../../../../shared-ts/src/utils/domainIds.js";
 import { parseMpcWalletSigningQuotaId, parseWalletSessionId } from "../../../../shared-ts/src/authorization/capabilityKinds.js";
-import { parseWalletAuthorityV1 } from "../../../../shared-ts/src/authorization/walletAuthority.js";
-import { nearEd25519SigningKeyIdFromString, parseWalletAuthMethodRecordV2, walletIdFromString } from "../../../../shared-ts/src/utils/registrationIntent.js";
-import { parseActiveWalletSessionV1, parseWalletSessionOperationCredentialV1 } from "../../../../shared-ts/src/device-linking/parsers.js";
+import { parseActiveWalletSessionV1, parseWalletSessionOperationCredentialV1 } from "../../../../shared-ts/src/device-linking/activeWalletSession.js";
 import { parseWalletAuthAuthorityRef } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
+import { nearEd25519SigningKeyIdFromString, walletIdFromString } from "../../../../shared-ts/src/utils/registrationIds.js";
 import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
 import { toRpId } from "../../session/identity/evmFamilyEcdsaIdentity.js";
 import { buildRouterAbEd25519SigningWalletSession } from "../../session/routerAbSigningWalletSession.js";
 import { toAccountId } from "../../../types/accountIds.js";
 import { buildPasskeyRouterAbEd25519WalletSessionState } from "../../session/warmCapabilities/routerAbEd25519WalletSessionState.js";
+import { parseWalletAuthMethodRecordV2 } from "../../../../shared-ts/src/utils/walletAuthMethodRecord.js";
 import { parsePasskeyCustodyEnvelopeRecord } from "../../../../shared-ts/src/passkey-custody/custodyEnvelope.js";
 import "../../../../shared-ts/src/passkey-custody/index.js";
+import { parseWalletAuthorityV1 } from "../../../../shared-ts/src/authorization/walletAuthority.js";
 import "../../../../shared-ts/src/device-linking/index.js";
 import { parseEd25519YaoRecoveryCapabilityV1 } from "../../session/passkey/ed25519YaoRecoveryCapability.js";
 //#region src/core/signingEngine/flows/recovery/passkeyEd25519YaoRecovery.ts
@@ -37,11 +38,6 @@ function passkeyEd25519YaoLaneReferenceFromRecovery(args) {
 		signerSlot: signer.signerSlot
 	};
 }
-function requireString(value, label) {
-	const parsed = typeof value === "string" ? value.trim() : "";
-	if (!parsed) throw new Error(`${label} is required`);
-	return parsed;
-}
 function requirePositiveInteger(value, label) {
 	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1) throw new Error(`${label} must be a positive integer`);
 	return value;
@@ -50,16 +46,12 @@ function requireParticipantIds(value) {
 	if (!Array.isArray(value) || value.length !== 2 || !Number.isSafeInteger(value[0]) || !Number.isSafeInteger(value[1]) || value[0] < 1 || value[1] < 1 || value[0] === value[1]) throw new Error("participantIds must contain two distinct positive integers");
 	return [Number(value[0]), Number(value[1])];
 }
-function requireRecord(value, label) {
-	if (!isPlainObject(value)) throw new Error(`${label} must be an object`);
-	return value;
-}
 function isEd25519SignWalletCapabilitySubject(subject) {
 	return subject.kind === "sign" && subject.keyFamily === "ed25519";
 }
 function parseExactRecoverySession(raw, participantIds, identity, walletSession, operationCredential, expected) {
 	if ("sessionKind" in raw || "walletSessionToken" in raw) throw new Error("sync-account signer bootstrap must not carry a Wallet Session bearer");
-	if (requireString(raw.walletId, "session.walletId") !== identity.walletId || requireString(raw.nearAccountId, "session.nearAccountId") !== identity.nearAccountId || requireString(raw.nearEd25519SigningKeyId, "session.nearEd25519SigningKeyId") !== identity.nearEd25519SigningKeyId) throw new Error("Yao recovery session identity does not match the verified passkey");
+	if (requireTrimmedString(raw.walletId, "session.walletId") !== identity.walletId || requireTrimmedString(raw.nearAccountId, "session.nearAccountId") !== identity.nearAccountId || requireTrimmedString(raw.nearEd25519SigningKeyId, "session.nearEd25519SigningKeyId") !== identity.nearEd25519SigningKeyId) throw new Error("Yao recovery session identity does not match the verified passkey");
 	const runtimePolicyScope = normalizeRuntimePolicyScope(requireRecord(raw.runtimePolicyScope, "session.runtimePolicyScope"));
 	const routerAbNormalSigning = parseRouterAbEd25519NormalSigningState(raw.routerAbNormalSigning);
 	if (!routerAbNormalSigning) throw new Error("Yao recovery session signing state is invalid");
@@ -71,7 +63,7 @@ function parseExactRecoverySession(raw, participantIds, identity, walletSession,
 	const ed25519SignSubject = walletSession.capabilitySubjects.find(isEd25519SignWalletCapabilitySubject);
 	if (walletSession.walletId !== identity.walletId || walletSession.authorityId !== expected.walletAuthorityId || walletSession.authMethodId !== expected.walletAuthMethodId || walletSession.authorityDigestB64u !== expected.authorityDigestB64u || walletSession.authorityRevocationEpoch !== expected.authorityRevocationEpoch || walletSession.expiresAtMs !== expiresAtMs || operationCredential.walletSessionId !== walletSessionId.value || !ed25519SignSubject || !mpcMaterialActivationRefsEqual(ed25519SignSubject.materialActivation, expected.materialActivation)) throw new Error("Yao recovery session does not match the exact Wallet Session");
 	return {
-		thresholdSessionId: requireString(raw.thresholdSessionId, "session.thresholdSessionId"),
+		thresholdSessionId: requireTrimmedString(raw.thresholdSessionId, "session.thresholdSessionId"),
 		authorizationId: walletSession.authorizationId,
 		walletSessionId: operationCredential.walletSessionId,
 		quotaId: quotaId.value,
@@ -107,9 +99,9 @@ function walletSessionTokenForSigning(session) {
 function parsePasskeyEd25519YaoSyncResponseV1(raw) {
 	const response = requireRecord(raw, "sync-account response");
 	if (response.ok !== true || response.verified !== true) throw new Error("sync-account response is not verified");
-	const walletId = walletIdFromString(requireString(response.walletId, "walletId"));
-	const nearAccountId = toAccountId(requireString(response.nearAccountId, "nearAccountId"));
-	const nearEd25519SigningKeyId = requireString(response.nearEd25519SigningKeyId, "nearEd25519SigningKeyId");
+	const walletId = walletIdFromString(requireTrimmedString(response.walletId, "walletId"));
+	const nearAccountId = toAccountId(requireTrimmedString(response.nearAccountId, "nearAccountId"));
+	const nearEd25519SigningKeyId = requireTrimmedString(response.nearEd25519SigningKeyId, "nearEd25519SigningKeyId");
 	const threshold = requireRecord(response.thresholdEd25519, "thresholdEd25519");
 	const participantIds = requireParticipantIds(threshold.participantIds);
 	const recovery = requireRecord(response.ed25519YaoRecovery, "ed25519YaoRecovery");
@@ -136,11 +128,11 @@ function parsePasskeyEd25519YaoSyncResponseV1(raw) {
 		nearAccountId,
 		nearEd25519SigningKeyId,
 		signerSlot: requirePositiveInteger(response.signerSlot, "signerSlot"),
-		operationalPublicKey: requireString(response.publicKey, "publicKey"),
-		relayerKeyId: requireString(threshold.relayerKeyId, "thresholdEd25519.relayerKeyId"),
-		keyVersion: requireString(threshold.keyVersion, "thresholdEd25519.keyVersion"),
-		credentialIdB64u: requireString(response.credentialIdB64u, "credentialIdB64u"),
-		credentialPublicKeyB64u: requireString(response.credentialPublicKeyB64u, "credentialPublicKeyB64u"),
+		operationalPublicKey: requireTrimmedString(response.publicKey, "publicKey"),
+		relayerKeyId: requireTrimmedString(threshold.relayerKeyId, "thresholdEd25519.relayerKeyId"),
+		keyVersion: requireTrimmedString(threshold.keyVersion, "thresholdEd25519.keyVersion"),
+		credentialIdB64u: requireTrimmedString(response.credentialIdB64u, "credentialIdB64u"),
+		credentialPublicKeyB64u: requireTrimmedString(response.credentialPublicKeyB64u, "credentialPublicKeyB64u"),
 		session: parseExactRecoverySession(requireRecord(threshold.session, "thresholdEd25519.session"), participantIds, {
 			walletId: String(walletId),
 			nearAccountId: String(nearAccountId),
@@ -157,7 +149,7 @@ function parsePasskeyEd25519YaoSyncResponseV1(raw) {
 		operationCredential,
 		walletCustody: {
 			envelope: parsePasskeyCustodyEnvelopeRecord(custody.envelope),
-			storeVersion: requireString(custody.storeVersion, "walletCustody.storeVersion")
+			storeVersion: requireTrimmedString(custody.storeVersion, "walletCustody.storeVersion")
 		}
 	};
 	assertEd25519YaoRecoveryDescriptorContinuity(parsed);