@seams/wallet 0.6.1 → 0.7.1

package/dist/esm/react/core/signingEngine/session/postconditions/runtimePostconditions.js

@@ -1,5 +1,5 @@
-import { thresholdEcdsaChainTargetKey } from "../../interfaces/ecdsaChainTarget.js";
 import { signingLaneAuthMethod } from "../identity/signingLaneAuthBinding.js";
+import { thresholdEcdsaChainTargetKey } from "../../interfaces/ecdsaChainTarget.js";
 import { availableEcdsaSigningLaneAuthMethod, availableEd25519SigningLaneAuthMethod } from "../availability/availableSigningLanes.js";
 //#region src/core/signingEngine/session/postconditions/runtimePostconditions.ts
 var WalletRuntimePostconditionError = class extends Error {

package/dist/esm/react/core/signingEngine/session/public.js

@@ -1,5 +1,5 @@
-import { toWalletId } from "../interfaces/ecdsaChainTarget.js";
 import { SIGNER_AUTH_METHODS } from "../../../shared-ts/src/utils/signerDomain.js";
+import { toWalletId } from "../interfaces/ecdsaChainTarget.js";
 import { readOwnerScopedAvailableSigningLanes, readPersistedAvailableSigningLanes as readPersistedAvailableSigningLanes$1 } from "./availability/persistedAvailableSigningLanes.js";
 import "./authority/authorityOperationResolver.js";
 //#region src/core/signingEngine/session/public.ts
@@ -29,7 +29,7 @@ async function discoverPersistedSessionsForWallet(deps, args) {
 async function readPersistedAvailableSigningLanes(deps, args) {
 	return await readPersistedAvailableSigningLanes$1(deps.availableLanes, args, deps.getConfiguredEcdsaChainTargets());
 }
-/** R103C human operational read: one exact owner, configured ECDSA targets. */
+/** Human operational read: one exact owner, configured ECDSA targets. */
 async function readOwnerScopedSigningLanes(deps, args, statusReads) {
 	return await readOwnerScopedAvailableSigningLanes(deps.availableLanes, {
 		walletId: args.walletId,

package/dist/esm/react/core/signingEngine/session/warmCapabilities/capabilityReaderCore.js

@@ -34,7 +34,7 @@ async function resolveEcdsaAuthorizationForResolution(args) {
 }
 /** The PRF claim for a resolved ECDSA capability. Correlation has already proved
 * the material, so the claim is the sealed runtime's own allowance and expiry --
-* the same facts the shared Refactor 92 rule classifies. A blocked resolution
+* the same facts the shared runtime-policy rule classifies. A blocked resolution
 * has no runtime and so no claim to report.
 *
 * The wallet-scoped relayer claim is not consulted here. It is read by lane, and

package/dist/esm/react/core/signingEngine/session/warmCapabilities/ecdsaBootstrapPersistence.js

@@ -1,5 +1,5 @@
-import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
 import { SIGNER_KINDS } from "../../../../shared-ts/src/utils/signerDomain.js";
+import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
 import { resolveThresholdSigningRootBindingFromRecord } from "../identity/evmFamilyEcdsaIdentity.js";
 import { normalizeIndexedDbAccountAddress, toIndexedDbChainTargetKey } from "../../../indexedDB/normalization.js";
 //#region src/core/signingEngine/session/warmCapabilities/ecdsaBootstrapPersistence.ts

package/dist/esm/react/core/signingEngine/session/warmCapabilities/ecdsaLoginPrefill.js

@@ -1,6 +1,7 @@
 import { MAX_DURABLE_CLIENT_PRESIGNATURE_LIFETIME_MS } from "../../workerManager/ecdsaPresignLifecycle.js";
 import { routerAbMpcMaterialActivationRefToWire } from "../../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
-import { parseEcdsaClientVerifyingShareB64u, parseEcdsaKeyHandle, parseEcdsaThresholdKeyId } from "../keyMaterialBrands.js";
+import { parseEcdsaClientVerifyingShareB64u, parseEcdsaKeyHandle } from "../../../../shared-ts/src/threshold/keyMaterialBrands.js";
+import { parseEcdsaThresholdKeyId } from "../keyMaterialBrands.js";
 import { resolveRouterAbEcdsaDerivationPresignaturePoolPolicy, scheduleRouterAbEcdsaDerivationClientPresignaturePoolRefill, waitForRouterAbEcdsaDerivationClientPresignaturePoolReady } from "../../routerAb/ecdsaDerivation/presignaturePool.js";
 //#region src/core/signingEngine/session/warmCapabilities/ecdsaLoginPrefill.ts
 async function scheduleRouterAbEcdsaDerivationLoginPresignaturePrefill(deps, args) {

package/dist/esm/react/core/signingEngine/session/warmCapabilities/ecdsaProvisionPlan.js

@@ -1,4 +1,3 @@
-import "../../../../shared-ts/src/threshold/participants.js";
 import { SigningSessionIds } from "../operationState/types.js";
 //#region src/core/signingEngine/session/warmCapabilities/ecdsaProvisionPlan.ts
 function buildEcdsaSessionIdentity(args) {

package/dist/esm/react/core/signingEngine/session/warmCapabilities/ed25519SealedSessionRuntime.js

@@ -2,12 +2,12 @@ import { normalizeThresholdEd25519ParticipantIds } from "../../../../shared-ts/s
 import { signingRootScopeFromRuntimePolicyScope } from "../../../../shared-ts/src/threshold/signingRootScope.js";
 import { normalizeThresholdRuntimePolicyScope } from "../../threshold/sessionPolicy.js";
 import { parseRouterAbEd25519NormalSigningState } from "../../../../shared-ts/src/utils/signingSessionSeal.js";
-import { nearEd25519SigningKeyIdFromString } from "../../../../shared-ts/src/utils/registrationIntent.js";
 import { parseEmailOtpWalletAuthAuthority, parsePasskeyWalletAuthAuthority, walletAuthAuthorityRef } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
-import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
 import { SIGNER_AUTH_METHODS } from "../../../../shared-ts/src/utils/signerDomain.js";
-import { toRpId } from "../identity/evmFamilyEcdsaIdentity.js";
 import { SigningSessionIds } from "../operationState/types.js";
+import { nearEd25519SigningKeyIdFromString } from "../../../../shared-ts/src/utils/registrationIds.js";
+import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
+import { toRpId } from "../identity/evmFamilyEcdsaIdentity.js";
 import { parseSignerSlot } from "../../../../shared-ts/src/utils/signerSlot.js";
 import { toAccountId } from "../../../types/accountIds.js";
 import { listExactSealedSessionsForWallet } from "../persistence/sealedSessionStore.js";

package/dist/esm/react/core/signingEngine/session/warmCapabilities/nearEd25519CapabilityRehydration.js

@@ -1,7 +1,7 @@
 import { mpcMaterialActivationRefsEqual } from "../../../../shared-ts/src/utils/domainIds.js";
-import { exactEd25519SigningLaneIdentity, exactSigningLaneIdentityKey, exactSigningLaneIdentityMatches, nearEd25519SignerBindingFromBoundaryFields } from "../identity/exactSigningLaneIdentity.js";
 import { signingLaneAuthBindingKey } from "../identity/signingLaneAuthBinding.js";
 import { SigningSessionIds } from "../operationState/types.js";
+import { exactEd25519SigningLaneIdentity, exactSigningLaneIdentityKey, exactSigningLaneIdentityMatches, nearEd25519SignerBindingFromBoundaryFields } from "../identity/exactSigningLaneIdentity.js";
 import { isConcreteAvailableSigningLane } from "../availability/availableSigningLanes.js";
 import { materialActivationKey } from "../sealedRecovery/materialActivationKey.js";
 //#region src/core/signingEngine/session/warmCapabilities/nearEd25519CapabilityRehydration.ts

package/dist/esm/react/core/signingEngine/session/warmCapabilities/sealedRefreshParity.js

@@ -1,5 +1,5 @@
-import { thresholdEcdsaChainTargetKey } from "../../interfaces/ecdsaChainTarget.js";
 import { SIGNER_AUTH_METHODS } from "../../../../shared-ts/src/utils/signerDomain.js";
+import { thresholdEcdsaChainTargetKey } from "../../interfaces/ecdsaChainTarget.js";
 //#region src/core/signingEngine/session/warmCapabilities/sealedRefreshParity.ts
 function isRetryableSealedRefreshCapabilityFetchError(error) {
 	const code = error && typeof error === "object" && "code" in error ? String(error.code || "").trim() : "";

package/dist/esm/react/core/signingEngine/session/warmCapabilities/types.js

@@ -1,6 +1,5 @@
-import { thresholdEcdsaChainTargetsEqual } from "../../interfaces/ecdsaChainTarget.js";
-import "../../../../shared-ts/src/utils/signerDomain.js";
 import { signingLaneAuthMethod } from "../identity/signingLaneAuthBinding.js";
+import { thresholdEcdsaChainTargetsEqual } from "../../interfaces/ecdsaChainTarget.js";
 import { laneCandidateStateFromRuntimePolicy } from "../identity/laneIdentity.js";
 //#region src/core/signingEngine/session/warmCapabilities/types.ts
 function expectedPresentCapabilityState(args) {

package/dist/esm/react/core/signingEngine/session/warmCapabilities/volatileWarmMaterialCommands.js

@@ -1,10 +1,8 @@
+import { asRecordOrArray } from "../../../../shared-ts/src/utils/validation.js";
 import { parseThresholdSessionId } from "../../../../shared-ts/src/utils/domainIds.js";
 //#region src/core/signingEngine/session/warmCapabilities/volatileWarmMaterialCommands.ts
-function asRecord(value) {
-	return typeof value === "object" && value !== null ? value : null;
-}
 function parseVolatileWarmSessionScope(value) {
-	const raw = asRecord(value);
+	const raw = asRecordOrArray(value);
 	if (!raw) return null;
 	if (raw.kind === "all") return { kind: "all" };
 	if (raw.kind !== "session") return null;
@@ -16,7 +14,7 @@ function parseVolatileWarmSessionScope(value) {
 	};
 }
 function parseClearVolatileWarmMaterialCommand(value) {
-	const raw = asRecord(value);
+	const raw = asRecordOrArray(value);
 	if (!raw || raw.kind !== "clear_volatile_warm_material") return null;
 	if (raw.durableRecord != null || raw.resolvedIdentity != null || raw.deleteReason != null) return null;
 	const scope = parseVolatileWarmSessionScope(raw.scope);

package/dist/esm/react/core/signingEngine/stepUpConfirmation/passkeyPrompt/touchIdPrompt.js

@@ -1,7 +1,7 @@
 import { base64UrlDecode } from "../../../../shared-ts/src/utils/base64.js";
 import { secureRandomBase36 } from "../../../../shared-ts/src/utils/secureRandomId.js";
 import "../../../../shared-ts/src/utils/encoders.js";
-import { walletIdFromString } from "../../../../shared-ts/src/utils/registrationIntent.js";
+import { walletIdFromString } from "../../../../shared-ts/src/utils/registrationIds.js";
 import { getPrfFirstSaltV1, getPrfSecondSaltV1, serializeAuthenticationCredentialWithPRF } from "../../webauthnAuth/credentials/helpers.js";
 import { executeWebAuthnWithParentFallbacksSafari } from "../../webauthnAuth/fallbacks/safari-fallbacks.js";
 import { webAuthnPromptCoordinator } from "./webauthnPromptCoordinator.js";
@@ -30,9 +30,8 @@ function requireExpectedPasskeyRegistrationUser(input) {
 * and generates credentials, and PRF Outputs
 */
 var TouchIdPrompt = class TouchIdPrompt {
-	constructor(rpIdOverride, safariGetWebauthnRegistrationFallback = false) {
+	constructor(rpIdOverride, _safariGetWebauthnRegistrationFallback = false) {
 		this.rpIdOverride = rpIdOverride;
-		this.safariGetWebauthnRegistrationFallback = safariGetWebauthnRegistrationFallback === true;
 	}
 	getRpId() {
 		try {

package/dist/esm/react/core/signingEngine/threshold/crypto/ecdsaDerivationClientWasm.js

@@ -266,7 +266,8 @@ async function prepareLinkedDeviceEcdsaSourceContributionWasm(input) {
 			timeoutMs: ECDSA_DERIVATION_CLIENT_WORKER_TIMEOUT_MS,
 			payload: {
 				kind: "prepare_linked_device_ecdsa_source_contribution_v1",
-				preparation: input.preparation
+				preparation: input.preparation,
+				...input.linkedHolderHandleId === void 0 ? {} : { linkedHolderHandleId: input.linkedHolderHandleId }
 			}
 		}
 	});

package/dist/esm/react/core/signingEngine/threshold/crypto/ed25519YaoLaneWasm.js

@@ -1,6 +1,6 @@
-import "../../../../shared-ts/src/utils/routerAbEd25519Yao.js";
-import "../../../../shared-ts/src/signing-lanes/rotationParsers.js";
+import "../../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
 import "../../../../shared-ts/src/signing-lanes/rotationDigests.js";
+import "../../../../shared-ts/src/utils/routerAbEd25519YaoDigests.js";
 import { executeWorkerOperation } from "../../workerManager/executeWorkerOperation.js";
 //#region src/core/signingEngine/threshold/crypto/ed25519YaoLaneWasm.ts
 function requestJson(value) {

package/dist/esm/react/core/signingEngine/threshold/ecdsa/activation.js

@@ -2,7 +2,8 @@ import { parseDigestB64u } from "../../../../shared-ts/src/utils/canonicalPrimit
 import { parseRouterAbEcdsaOperationStepUpPreparationV1 } from "../../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
 import { thresholdEcdsaChainTargetKey, toWalletId } from "../../interfaces/ecdsaChainTarget.js";
 import { deriveEvmFamilyKeyFingerprint } from "../../session/identity/evmFamilyEcdsaIdentity.js";
-import { parseEcdsaClientVerifyingShareB64u, parseEcdsaKeyHandle, parseEcdsaRelayerKeyId, parseEcdsaThresholdKeyId } from "../../session/keyMaterialBrands.js";
+import { parseEcdsaClientVerifyingShareB64u, parseEcdsaKeyHandle, parseEcdsaRelayerKeyId } from "../../../../shared-ts/src/threshold/keyMaterialBrands.js";
+import { parseEcdsaThresholdKeyId } from "../../session/keyMaterialBrands.js";
 import { buildEcdsaRoleLocalEmailOtpAuthMethod, buildEcdsaRoleLocalPasskeyAuthMethod, buildEcdsaRoleLocalPublicFacts } from "../../session/persistence/ecdsaRoleLocalRecords.js";
 import { bootstrapEcdsaSession } from "./bootstrapSession.js";
 //#region src/core/signingEngine/threshold/ecdsa/activation.ts

package/dist/esm/react/core/signingEngine/threshold/ecdsa/bootstrapSession.js

@@ -1,8 +1,8 @@
 import { base64UrlDecode } from "../../../../shared-ts/src/utils/base64.js";
 import { secureRandomId } from "../../../../shared-ts/src/utils/secureRandomId.js";
 import { normalizeThresholdRuntimePolicyScope } from "../sessionPolicy.js";
-import { computeEcdsaDerivationRoleLocalRelayerKeyId } from "../../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import { parseWalletSessionMintId } from "../../../../shared-ts/src/authorization/capabilityKinds.js";
+import { computeEcdsaDerivationRoleLocalRelayerKeyId } from "../../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import { bytesToHex } from "../../chains/evm/bytes.js";
 import { activateStrictEcdsaPostRegistrationSession, adoptStrictEcdsaCredentialFreePostRegistrationSession, adoptStrictEcdsaPostRegistrationSession, isEcdsaCredentialFreeSessionActivationAuthorization } from "./postRegistrationSessionActivation.js";
 //#region src/core/signingEngine/threshold/ecdsa/bootstrapSession.ts

package/dist/esm/react/core/signingEngine/threshold/ed25519/walletSession.js

@@ -7,7 +7,7 @@ import { getPrfFirstB64uFromCredential, redactCredentialExtensionOutputs } from
 import { parseThresholdEd25519SessionId } from "../../../../shared-ts/src/utils/domainIds.js";
 import { parseDigestB64u } from "../../../../shared-ts/src/utils/canonicalPrimitives.js";
 import { parseMpcWalletSigningQuotaId, parseWalletSessionAuthorizationId, parseWalletSessionId } from "../../../../shared-ts/src/authorization/capabilityKinds.js";
-import { parseWalletSessionOperationCredentialV1 } from "../../../../shared-ts/src/device-linking/parsers.js";
+import { parseWalletSessionOperationCredentialV1 } from "../../../../shared-ts/src/device-linking/activeWalletSession.js";
 import { toRpId } from "../../session/identity/evmFamilyEcdsaIdentity.js";
 import "../../../../shared-ts/src/device-linking/index.js";
 import { parseWalletSessionAlreadyCommittedResponseV1 } from "../../../../shared-ts/src/authorization/walletSessionIssuance.js";

package/dist/esm/react/core/signingEngine/threshold/ed25519/yaoPublicCapabilityReferences.js

@@ -1,6 +1,7 @@
+import { requireCanonicalString, requireRecord } from "../../../../shared-ts/src/utils/validation.js";
 import { normalizeThresholdRuntimePolicyScope } from "../sessionPolicy.js";
 import { parseMpcMaterialActivationRef, parseThresholdEd25519SessionId } from "../../../../shared-ts/src/utils/domainIds.js";
-import { nearEd25519SigningKeyIdFromString } from "../../../../shared-ts/src/utils/registrationIntent.js";
+import { nearEd25519SigningKeyIdFromString } from "../../../../shared-ts/src/utils/registrationIds.js";
 import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
 import { toRpId } from "../../session/identity/evmFamilyEcdsaIdentity.js";
 import { parseSignerSlot } from "../../../../shared-ts/src/utils/signerSlot.js";
@@ -28,19 +29,11 @@ async function publishEd25519YaoPublicCapabilityReferenceAndLane(store, referenc
 	await store.upsert(identity);
 	await store.upsertLane(reference);
 }
-function requireRecord(value, label) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label} must be an object`);
-	return value;
-}
 function requireExactKeys(record, expectedKeys, label) {
 	const actual = Object.keys(record).sort();
 	const expected = [...expectedKeys].sort();
 	if (actual.length !== expected.length || actual.some((key, index) => key !== expected[index])) throw new Error(`${label} contains unexpected fields`);
 }
-function requireNonEmptyString(value, label) {
-	if (typeof value !== "string" || value.trim() !== value || value.length === 0) throw new Error(`${label} must be a non-empty normalized string`);
-	return value;
-}
 function requireNonNegativeInteger(value, label) {
 	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 0) throw new Error(`${label} must be a non-negative integer`);
 	return value;
@@ -51,7 +44,7 @@ function requirePositiveInteger(value, label) {
 }
 function parseSigningLaneAuth(value, label) {
 	const record = requireRecord(value, label);
-	const kind = requireNonEmptyString(record.kind, `${label}.kind`);
+	const kind = requireCanonicalString(record.kind, `${label}.kind`, "must be a non-empty normalized string");
 	switch (kind) {
 		case "passkey":
 			requireExactKeys(record, [
@@ -61,14 +54,14 @@ function parseSigningLaneAuth(value, label) {
 			], label);
 			return {
 				kind,
-				rpId: toRpId(requireNonEmptyString(record.rpId, `${label}.rpId`)),
-				credentialIdB64u: requireNonEmptyString(record.credentialIdB64u, `${label}.credentialIdB64u`)
+				rpId: toRpId(requireCanonicalString(record.rpId, `${label}.rpId`, "must be a non-empty normalized string")),
+				credentialIdB64u: requireCanonicalString(record.credentialIdB64u, `${label}.credentialIdB64u`, "must be a non-empty normalized string")
 			};
 		case "email_otp":
 			requireExactKeys(record, ["kind", "providerSubjectId"], label);
 			return {
 				kind,
-				providerSubjectId: requireNonEmptyString(record.providerSubjectId, `${label}.providerSubjectId`)
+				providerSubjectId: requireCanonicalString(record.providerSubjectId, `${label}.providerSubjectId`, "must be a non-empty normalized string")
 			};
 		default: throw new Error(`${label}.kind is invalid`);
 	}
@@ -89,8 +82,8 @@ function parsePublicCapabilityIdentity(value, label) {
 	const runtimePolicyScope = normalizeThresholdRuntimePolicyScope(record.runtimePolicyScope);
 	if (!runtimePolicyScope) throw new Error(`${label}.runtimePolicyScope is invalid`);
 	return {
-		walletId: toWalletId(requireNonEmptyString(record.walletId, `${label}.walletId`)),
-		nearAccountId: toAccountId(requireNonEmptyString(record.nearAccountId, `${label}.nearAccountId`)),
+		walletId: toWalletId(requireCanonicalString(record.walletId, `${label}.walletId`, "must be a non-empty normalized string")),
+		nearAccountId: toAccountId(requireCanonicalString(record.nearAccountId, `${label}.nearAccountId`, "must be a non-empty normalized string")),
 		thresholdSessionId: thresholdSessionId.value,
 		runtimePolicyScope,
 		materialActivation: materialActivation.value
@@ -121,7 +114,7 @@ function parsePublicCapabilityLane(value, label) {
 	if (signerSlot === null) throw new Error(`${label}.signerSlot is invalid`);
 	const common = {
 		...base,
-		nearEd25519SigningKeyId: nearEd25519SigningKeyIdFromString(requireNonEmptyString(record.nearEd25519SigningKeyId, `${label}.nearEd25519SigningKeyId`)),
+		nearEd25519SigningKeyId: nearEd25519SigningKeyIdFromString(requireCanonicalString(record.nearEd25519SigningKeyId, `${label}.nearEd25519SigningKeyId`, "must be a non-empty normalized string")),
 		signerSlot
 	};
 	switch (auth.kind) {
@@ -141,7 +134,7 @@ function parsePublicCapabilityLane(value, label) {
 function parseEd25519YaoPublicCapabilityReferencesV1(value) {
 	const record = requireRecord(value, "Ed25519 Yao public capability references");
 	requireExactKeys(record, ["kind", "identities"], "Ed25519 Yao public capability references");
-	if (record.kind !== "ed25519_yao_public_capability_references_v1") throw new Error("Ed25519 Yao public capability references kind is invalid");
+	if (record.kind !== ED25519_YAO_PUBLIC_CAPABILITY_REFERENCES_KIND_V1) throw new Error("Ed25519 Yao public capability references kind is invalid");
 	if (!Array.isArray(record.identities)) throw new Error("Ed25519 Yao public capability identities must be an array");
 	if (record.identities.length > MAX_PUBLIC_CAPABILITY_REFERENCES) throw new Error("Ed25519 Yao public capability reference capacity is exceeded");
 	const identities = record.identities.map((identity, index) => parsePublicCapabilityIdentity(identity, `Ed25519 Yao public capability identity ${index}`));
@@ -154,7 +147,7 @@ function parseEd25519YaoPublicCapabilityReferencesV1(value) {
 function parseEd25519YaoPublicCapabilityLanesV1(value) {
 	const record = requireRecord(value, "Ed25519 Yao public capability lanes");
 	requireExactKeys(record, ["kind", "lanes"], "Ed25519 Yao public capability lanes");
-	if (record.kind !== "ed25519_yao_public_capability_lanes_v1") throw new Error("Ed25519 Yao public capability lanes kind is invalid");
+	if (record.kind !== ED25519_YAO_PUBLIC_CAPABILITY_LANES_KIND_V1) throw new Error("Ed25519 Yao public capability lanes kind is invalid");
 	if (!Array.isArray(record.lanes)) throw new Error("Ed25519 Yao public capability lanes must be an array");
 	if (record.lanes.length > MAX_PUBLIC_CAPABILITY_LANES) throw new Error("Ed25519 Yao public capability lane capacity is exceeded");
 	const lanes = record.lanes.map((lane, index) => parsePublicCapabilityLane(lane, `Ed25519 Yao public capability lane ${index}`));
@@ -197,7 +190,7 @@ function clonePublicCapabilityLane(lane) {
 }
 async function upsertEd25519YaoPublicCapabilityReferenceInTransaction(store, identity) {
 	const currentRow = await store.get(ED25519_YAO_PUBLIC_CAPABILITY_REFERENCES_APP_STATE_KEY);
-	if (currentRow !== void 0 && currentRow.key !== "ed25519YaoPublicCapabilityReferencesV1") throw new Error("Ed25519 Yao public capability reference app-state key is inconsistent");
+	if (currentRow !== void 0 && currentRow.key !== ED25519_YAO_PUBLIC_CAPABILITY_REFERENCES_APP_STATE_KEY) throw new Error("Ed25519 Yao public capability reference app-state key is inconsistent");
 	const current = currentRow === void 0 ? emptyPublicCapabilityReferences() : parseEd25519YaoPublicCapabilityReferencesV1(currentRow.value);
 	const normalized = clonePublicCapabilityIdentity(identity);
 	const identities = current.identities.filter((candidate) => String(candidate.walletId) !== String(normalized.walletId) || String(candidate.nearAccountId) !== String(normalized.nearAccountId));

package/dist/esm/react/core/signingEngine/uiConfirm/PasskeyMpcSessionDurableState.js

@@ -3,7 +3,8 @@ import { SIGNING_SESSION_SEAL_GROUP_ID } from "../../../shared-ts/src/utils/sign
 import { mpcMaterialActivationRefsEqual } from "../../../shared-ts/src/utils/domainIds.js";
 import { sameRouterAbEcdsaDerivationNormalSigningStateV1, sameRouterAbEcdsaDerivationPublicCapabilityV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
 import { thresholdEcdsaChainTargetKey, thresholdEcdsaChainTargetsEqual } from "../interfaces/ecdsaChainTarget.js";
-import { buildCurrentSealedSessionRecord, readExactEd25519SealedSession, readExactSealedSession, updateExactEd25519SealedSessionPolicy, updateExactSealedSessionPolicy, writeExactSealedSession } from "../session/persistence/sealedSessionStore.js";
+import { buildCurrentSealedSessionRecord } from "../session/persistence/sealedSessionRecords.js";
+import { readExactEd25519SealedSession, readExactSealedSession, updateExactEd25519SealedSessionPolicy, updateExactSealedSessionPolicy, writeExactSealedSession } from "../session/persistence/sealedSessionStore.js";
 import { ed25519DurableMaterialLocator, materialActivationKey } from "../session/sealedRecovery/materialActivationKey.js";
 //#region src/core/signingEngine/uiConfirm/PasskeyMpcSessionDurableState.ts
 const signingSessionSealPersistSingleFlight = /* @__PURE__ */ new Map();

package/dist/esm/react/core/signingEngine/uiConfirm/PasskeyMpcSessionManager.js

@@ -2,7 +2,7 @@ import { mpcMaterialActivationRefsEqual } from "../../../shared-ts/src/utils/dom
 import { walletAuthAuthorityRef } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { thresholdEcdsaChainTargetKey, thresholdEcdsaChainTargetsEqual, toWalletId } from "../interfaces/ecdsaChainTarget.js";
 import { createDeleteDurableSealedSessionCommand } from "../session/persistence/durableSealedSessionCommands.js";
-import { parseSigningSessionSealKeyVersion } from "../session/keyMaterialBrands.js";
+import { parseSigningSessionSealKeyVersion } from "../../../shared-ts/src/threshold/keyMaterialBrands.js";
 import { acquireSigningSessionRestoreLease, deleteDurableSealedSessionRecord, listExactSealedSessionsForWallet, releaseSigningSessionRestoreLease } from "../session/persistence/sealedSessionStore.js";
 import { walletSessionAuthorizations } from "../../indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
 import { IndexedDBManager } from "../../indexedDB/index.js";

package/dist/esm/react/core/signingEngine/uiConfirm/handlers/flows/adapters/adapters.js

@@ -1,6 +1,7 @@
 import { errorMessage } from "../../../../../../shared-ts/src/utils/errors.js";
 import { isObject } from "../../../../../../shared-ts/src/utils/validation.js";
 import { nonceLeaseToRef } from "../../../../nonce/nonceLaneKeys.js";
+import { emitSigningSessionFlowTrace } from "../../../../session/operationState/trace.js";
 import { buildNearNonceLane } from "../../../../nonce/nearNonceLaneIdentity.js";
 import { UserConfirmationType } from "../../../../stepUpConfirmation/userConfirmationType.js";
 import { assertNeverConfirmationConfig } from "../../../../../types/confirmationConfig.js";
@@ -189,6 +190,12 @@ async function renderInteractiveConfirmUI(args) {
 		emailOtpPrompt: args.emailOtpPrompt,
 		surface: args.surface
 	});
+	if (args.request.type === UserConfirmationType.SIGN_TRANSACTION && getSignTransactionPayload(args.request).signingKind === "transaction") emitSigningSessionFlowTrace("near", {
+		event: "near_confirmation_prompt_timing",
+		mountMs: diagnostics.mountMs,
+		decisionWaitMs: diagnostics.decisionWaitMs,
+		confirmed
+	});
 	return {
 		confirmed,
 		confirmHandle: handle,

package/dist/esm/react/core/signingEngine/uiConfirm/handlers/flows/localOnly.js

@@ -1,5 +1,5 @@
-import { base64UrlEncode } from "../../../../../shared-ts/src/utils/base64.js";
 import { errorMessage } from "../../../../../shared-ts/src/utils/errors.js";
+import { base64UrlEncode } from "../../../../../shared-ts/src/utils/base64.js";
 import "../../../../../shared-ts/src/utils/encoders.js";
 import { UserConfirmationType } from "../../../stepUpConfirmation/userConfirmationType.js";
 import { resolveUiAppearance } from "../../ui/appearance.js";

package/dist/esm/react/core/signingEngine/uiConfirm/handlers/flows/signing.js

@@ -179,9 +179,6 @@ async function handleTransactionSigningFlow(ctx, request, worker, opts) {
 		let nearContextFailed = false;
 		const confirmationReadiness = consumeConfirmationReadiness(request.requestId);
 		let confirmationReadinessPending = !!confirmationReadiness;
-		const originalBody = String(transactionSummary.body || "").trim();
-		const confirmationReadinessBody = String(confirmationReadiness?.body || "").trim();
-		const restoreOriginalBody = () => ({ body: originalBody });
 		const confirmationReadinessPromise = confirmationReadiness ? Promise.resolve(confirmationReadiness.promise) : void 0;
 		const walletSessionExpiryPromise = confirmationReadinessPromise ? waitForWalletSessionExpiry(confirmationReadinessPromise) : void 0;
 		const markPromptReady = () => {
@@ -194,10 +191,7 @@ async function handleTransactionSigningFlow(ctx, request, worker, opts) {
 			loading: false,
 			onMounted: () => {
 				markPromptReady();
-				if (confirmationReadinessPending && confirmationReadinessBody) session.updateUI({
-					loading: false,
-					body: confirmationReadinessBody
-				});
+				if (confirmationReadinessPending) session.updateUI({ preparing: true });
 			}
 		}) : Promise.resolve({ confirmed: true });
 		if (reviewPromptRequired) promptDecisionPromise.finally(markPromptReady);
@@ -238,20 +232,19 @@ async function handleTransactionSigningFlow(ctx, request, worker, opts) {
 		if (confirmationReadinessPromise) confirmationReadinessPromise.then(async () => {
 			confirmationReadinessPending = false;
 			await promptReady;
-			if (decisionResolved || nearContextFailed) return;
-			session.updateUI({
-				...restoreOriginalBody(),
-				loading: false,
-				errorMessage: ""
-			});
+			if (decisionResolved) return;
+			session.updateUI({ preparing: false });
 		}).catch(async (error) => {
 			confirmationReadinessPending = false;
 			await promptReady;
-			if (decisionResolved || nearContextFailed) return;
+			if (decisionResolved) return;
+			if (nearContextFailed) {
+				session.updateUI({ preparing: false });
+				return;
+			}
 			const message = String(toError(error)?.message || "NEAR signing session could not be finalized");
 			session.updateUI({
-				...restoreOriginalBody(),
-				loading: false,
+				preparing: false,
 				errorMessage: `NEAR signing session could not be finalized: ${message}`
 			});
 		});

package/dist/esm/react/core/signingEngine/uiConfirm/ui/confirm-surface-resize.js

@@ -132,14 +132,14 @@ function createSurfaceHeightReflow(args) {
 			capturedCssPx = null;
 			const element = args.element();
 			if (!element || fromCssPx === null) return;
-			if (document.documentElement.classList.contains("seams-confirm-surface-pinned-root")) return;
-			if (element.parentElement?.closest(`.seams-surface-height-driven`)) return;
+			if (document.documentElement.classList.contains(CONFIRM_SURFACE_PINNED_ROOT_CLASS)) return;
+			if (element.parentElement?.closest(`.${CONFIRM_SURFACE_HEIGHT_DRIVEN_CLASS}`)) return;
 			clampedElement = element;
 			element.classList.add(CONFIRM_SURFACE_HEIGHT_DRIVEN_CLASS);
 			args.setHeightCssPx(fromCssPx);
 			Promise.resolve(args.settled?.()).then(() => new Promise((resolve) => requestAnimationFrame(() => resolve()))).then(() => {
 				if (clampedElement !== element) return;
-				if (document.documentElement.classList.contains("seams-confirm-surface-pinned-root")) {
+				if (document.documentElement.classList.contains(CONFIRM_SURFACE_PINNED_ROOT_CLASS)) {
 					release();
 					return;
 				}
@@ -174,7 +174,7 @@ function announceClampedSurfaceResize(args) {
 	const { element, fromCssPx, toCssPx } = args;
 	if (!Number.isFinite(fromCssPx) || !Number.isFinite(toCssPx)) return false;
 	if (Math.abs(toCssPx - fromCssPx) < MIN_ANNOUNCED_DELTA_CSS_PX) return false;
-	const drivenClasses = args.drivenClasses ?? ["seams-surface-height-driven"];
+	const drivenClasses = args.drivenClasses ?? [CONFIRM_SURFACE_HEIGHT_DRIVEN_CLASS];
 	const addedClasses = drivenClasses.filter((name) => !element.classList.contains(name));
 	element.classList.add(...addedClasses);
 	args.setHeightCssPx(fromCssPx);
@@ -200,7 +200,7 @@ const surfaceMotionDiagnostics = {
 			const startedAt = performance.now();
 			const tick = () => {
 				const host = diagnosticHost;
-				const pinned = host?.classList.contains("seams-confirm-surface-pinned") ? "*" : "";
+				const pinned = host?.classList.contains(CONFIRM_SURFACE_PINNED_CLASS) ? "*" : "";
 				lines.push(`${Math.round(performance.now() - startedAt)}: box=${document.documentElement.clientHeight} content=${host ? Math.round(host.getBoundingClientRect().height) : "-"}${pinned}`);
 				if (performance.now() - startedAt < durationMs) requestAnimationFrame(tick);
 				else resolve(lines);

package/dist/esm/react/core/signingEngine/uiConfirm/ui/confirmation-model.js

@@ -89,7 +89,7 @@ function normalizeConfirmationModel(input) {
 						tempo: source.tempoExplorerUrl,
 						evm: source.evmExplorerUrl
 					},
-					decision: source.loading ? { kind: "preparing" } : {
+					decision: source.loading || source.preparing ? { kind: "preparing" } : {
 						kind: "ready",
 						onConfirm: input.callbacks.confirm
 					},

package/dist/esm/react/core/signingEngine/uiConfirm/ui/preact/ConfirmationModal.js

@@ -44,6 +44,7 @@ var ModalShell = class extends Component {
 			children: /* @__PURE__ */ jsx("div", {
 				id: this.containerId,
 				class: "modal-container-root",
+				tabIndex: -1,
 				children: this.props.children
 			})
 		});

package/dist/esm/react/core/signingEngine/uiConfirm/ui/preact/TransactionLabel.js

@@ -153,6 +153,6 @@ function TransactionLabel({ node, explorers }) {
 	return node.label;
 }
 //#endregion
-export { TransactionLabel, transactionLabelTitle };
+export { TransactionLabel, contractPrefix, transactionLabelTitle };
 
 //# sourceMappingURL=TransactionLabel.js.map

package/dist/esm/react/core/signingEngine/uiConfirm/ui/preact/TransactionReceipt.js

@@ -1,13 +1,20 @@
+import { confirmationDocumentStyles } from "./confirmation-styles.js";
+import { announceClampedSurfaceResize } from "../confirm-surface-resize.js";
 import { ReviewDisclosure } from "./ReviewDisclosure.js";
-import { CopyReviewValue, ReviewAddress, ReviewAmount, ReviewIcon, WalletReceiptFooter, reviewNetwork, reviewRecipient } from "./TransactionReview.js";
+import { CopyReviewValue, ReviewAmount, ReviewIcon, ReviewMiddleTruncated, WalletReceiptFooter, reviewNetwork, reviewRecipient } from "./TransactionReview.js";
 import { receiptCompletedStages, receiptDescription, receiptHeading, receiptIsPending } from "../transaction-receipt.js";
-import { Component } from "preact";
+import { Component, createRef } from "preact";
 import { Fragment, jsx, jsxs } from "preact/jsx-runtime";
 //#region src/core/signingEngine/uiConfirm/ui/preact/TransactionReceipt.tsx
 /** @jsxImportSource preact */
+const EXPLORER_REVEAL_MS = 240;
+const EXPLORER_REVEAL_EASING = "cubic-bezier(0.22, 1, 0.36, 1)";
+let nextExplorerRowId = 0;
 var TransactionReceipt = class extends Component {
 	constructor(..._args) {
 		super(..._args);
+		this.explorerRow = createRef();
+		this.explorerRowId = `seams-receipt-explorer-row-${++nextExplorerRowId}`;
 		this.minimize = () => {
 			this.props.receipt.onView("toast");
 		};
@@ -18,6 +25,61 @@ var TransactionReceipt = class extends Component {
 			if (receiptIsPending(this.props.receipt.state)) this.minimize();
 			else this.props.receipt.onDismiss();
 		};
+		this.setExplorerRowHeight = (height) => {
+			const row = this.explorerRow.current;
+			if (!row) return;
+			confirmationDocumentStyles(row.ownerDocument).setDynamicDeclarations(this.explorerRowId, `#${this.explorerRowId}`, { "--seams-receipt-explorer-height": `${height}px` });
+		};
+		this.releaseExplorerRow = () => {
+			const row = this.explorerRow.current;
+			if (!row) return;
+			delete row.dataset.opening;
+			confirmationDocumentStyles(row.ownerDocument).deleteDynamicRule(this.explorerRowId);
+		};
+	}
+	componentDidUpdate(previous) {
+		const { receipt } = this.props;
+		if (receipt.view === "expanded" && previous.receipt.view === "expanded" && receipt.state.kind === "confirmed" && previous.receipt.state.kind !== "confirmed") this.revealExplorerLink();
+	}
+	componentWillUnmount() {
+		this.releaseExplorerRow();
+	}
+	revealExplorerLink() {
+		const row = this.explorerRow.current;
+		const link = row?.firstElementChild;
+		if (!row || !link) return;
+		if (row.ownerDocument.defaultView?.matchMedia("(prefers-reduced-motion: reduce)").matches) return;
+		const height = row.getBoundingClientRect().height;
+		row.dataset.opening = "";
+		if (!announceClampedSurfaceResize({
+			reason: "receipt-explorer",
+			element: row,
+			fromCssPx: 0,
+			toCssPx: height,
+			drivenClasses: ["seams-receipt-explorer-driven"],
+			setHeightCssPx: this.setExplorerRowHeight,
+			onSettled: this.releaseExplorerRow
+		})) {
+			const opening = row.animate([{ height: "0px" }, { height: `${height}px` }], {
+				duration: EXPLORER_REVEAL_MS,
+				easing: EXPLORER_REVEAL_EASING
+			});
+			opening.onfinish = opening.oncancel = this.releaseExplorerRow;
+		}
+		link.animate([{
+			opacity: 0,
+			filter: "blur(4px)",
+			transform: "translateY(6px)"
+		}, {
+			opacity: 1,
+			filter: "blur(0)",
+			transform: "translateY(0)"
+		}], {
+			duration: EXPLORER_REVEAL_MS,
+			delay: 60,
+			easing: EXPLORER_REVEAL_EASING,
+			fill: "backwards"
+		});
 	}
 	render() {
 		const { receipt, data } = this.props;
@@ -152,7 +214,10 @@ var TransactionReceipt = class extends Component {
 									label: `Copy recipient address ${recipient}`
 								})
 							})] }),
-							receipt.state.hash && /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("dt", { children: "Transaction" }), /* @__PURE__ */ jsxs("dd", { children: [/* @__PURE__ */ jsx(ReviewAddress, { value: receipt.state.hash }), /* @__PURE__ */ jsx(CopyReviewValue, { value: receipt.state.hash })] })] }),
+							receipt.state.hash && /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("dt", { children: "Transaction" }), /* @__PURE__ */ jsxs("dd", { children: [/* @__PURE__ */ jsx(ReviewMiddleTruncated, {
+								value: receipt.state.hash,
+								class: "seams-review-hash"
+							}), /* @__PURE__ */ jsx(CopyReviewValue, { value: receipt.state.hash })] })] }),
 							/* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("dt", { children: "Status" }), /* @__PURE__ */ jsx("dd", { children: heading })] })
 						]
 					})
@@ -163,12 +228,17 @@ var TransactionReceipt = class extends Component {
 					onClick: this.close,
 					children: receiptIsPending(receipt.state) ? "Continue in background" : "Done"
 				}),
-				explorerHref && /* @__PURE__ */ jsxs("a", {
-					class: "seams-receipt-explorer",
-					href: explorerHref,
-					target: "_blank",
-					rel: "noopener noreferrer",
-					children: ["View transaction ", /* @__PURE__ */ jsx(ReviewIcon, { kind: "arrow" })]
+				explorerHref && /* @__PURE__ */ jsx("div", {
+					id: this.explorerRowId,
+					class: "seams-receipt-explorer-row",
+					ref: this.explorerRow,
+					children: /* @__PURE__ */ jsxs("a", {
+						class: "seams-receipt-explorer",
+						href: explorerHref,
+						target: "_blank",
+						rel: "noopener noreferrer",
+						children: ["View transaction ", /* @__PURE__ */ jsx(ReviewIcon, { kind: "arrow" })]
+					})
 				}),
 				/* @__PURE__ */ jsx(WalletReceiptFooter, {})
 			]