@seams/wallet 0.6.1 → 0.7.1

package/dist/{public/sdk/routerAbNormalSigning-DktZKnf1.js → esm/sdk/routerAbNormalSigning-fhvpDtmY.js}

@@ -1,7 +1,8 @@
+import { i as coerceNonEmptyString } from "./validation-gat4LEKm.js";
 import { i as base64UrlEncode, r as base64UrlDecode, t as base64Decode } from "./base64-Clm8C-e9.js";
-import { A as alphabetizeStringify } from "./registrationIntent-DwAIMQYh.js";
-import { bn as parseRouterAbMpcMaterialActivationRef, bt as routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1, ct as parseRouterAbEcdsaOperationStepUpPreparationV1, et as parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1, tt as parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreRequestV1, xn as parseRouterAbNormalSigningAuthorization, yt as routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestDigestV1 } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
-import { n as buildRelayerJsonPostRequestInit, r as normalizeRelayerBaseUrl, t as buildBearerAuthorizationHeader } from "./relayerHttp-LsVTZCxA.js";
+import { N as routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestDigestV1, P as routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1, S as parseRouterAbEcdsaOperationStepUpPreparationV1, St as parseRouterAbNormalSigningAuthorization, h as parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreRequestV1, m as parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1, xt as parseRouterAbMpcMaterialActivationRef } from "./ecdsaPresignLifecycle-BFOTNYCK.js";
+import { f as alphabetizeStringify } from "./chains-BMh3btVo.js";
+import { n as buildRelayerJsonPostRequestInit, r as normalizeRelayerBaseUrl, t as buildBearerAuthorizationHeader } from "./relayerHttp-VC8Holz1.js";
 //#region src/core/signingEngine/session/operationState/authorizationAdmission.ts
 const WALLET_SESSION_QUOTA_EXHAUSTED_ERROR = "[WalletSessionQuotaAdmission] wallet-session quota is exhausted";
 const WALLET_SESSION_QUOTA_IN_FLIGHT_ERROR = "[WalletSessionQuotaAdmission] wallet-session quota is reserved by an in-flight operation";
@@ -26,16 +27,16 @@ function walletSessionQuotaAdmissionFailureMessage(failure) {
 function classifyWalletSessionQuotaAdmissionFailure(error) {
 	if (isWalletSessionQuotaAdmissionError(error)) return error.failure;
 	const message = error instanceof Error ? error.message : String(error || "");
-	if (message.includes("[WalletSessionQuotaAdmission] wallet-session quota is reserved by an in-flight operation")) return {
+	if (message.includes(WALLET_SESSION_QUOTA_IN_FLIGHT_ERROR)) return {
 		kind: "in_flight",
 		source: "local_projection",
-		detail: message || "[WalletSessionQuotaAdmission] wallet-session quota is reserved by an in-flight operation",
+		detail: message || WALLET_SESSION_QUOTA_IN_FLIGHT_ERROR,
 		retryAfterMs: 150
 	};
-	if (message.includes("[WalletSessionQuotaAdmission] wallet-session quota is exhausted")) return {
+	if (message.includes(WALLET_SESSION_QUOTA_EXHAUSTED_ERROR)) return {
 		kind: "exhausted",
 		source: "local_projection",
-		detail: message || "[WalletSessionQuotaAdmission] wallet-session quota is exhausted"
+		detail: message || WALLET_SESSION_QUOTA_EXHAUSTED_ERROR
 	};
 	return null;
 }
@@ -224,11 +225,6 @@ function routerAbNormalSigningAdmissionErrorFromPayload(args) {
 		default: return null;
 	}
 }
-function requireNonEmptyString(value, label) {
-	const normalized = String(value || "").trim();
-	if (!normalized) throw new Error(`${label} is required`);
-	return normalized;
-}
 function requirePositiveInteger(value, label) {
 	const parsed = Math.floor(Number(value));
 	if (!Number.isSafeInteger(parsed) || parsed <= 0) throw new Error(`${label} must be a positive integer`);
@@ -242,17 +238,17 @@ function requireByteArray(value, label, byteLength) {
 	return bytes;
 }
 function requireDigestB64u(value, label) {
-	const normalized = requireNonEmptyString(value, label);
+	const normalized = coerceNonEmptyString(value, label);
 	if (base64UrlDecode(normalized).length !== 32) throw new Error(`${label} must decode to 32 bytes`);
 	return normalized;
 }
 function requireBase64UrlNonEmpty(value, label) {
-	const normalized = requireNonEmptyString(value, label);
+	const normalized = coerceNonEmptyString(value, label);
 	if (base64UrlDecode(normalized).length === 0) throw new Error(`${label} must decode to non-empty bytes`);
 	return normalized;
 }
 function normalizeNonceToB64u(value, label) {
-	const normalized = requireNonEmptyString(value, label);
+	const normalized = coerceNonEmptyString(value, label);
 	let bytes;
 	try {
 		bytes = base64Decode(normalized);
@@ -272,10 +268,10 @@ async function routerAbNormalSigningActionFingerprint(value) {
 	return base64UrlEncode(await sha256Bytes(new TextEncoder().encode(alphabetizeStringify(value))));
 }
 function routerAbEd25519Nep413CanonicalMessageB64uV2(args) {
-	const message = requireNonEmptyString(args.message, "nep413.message");
-	const recipient = requireNonEmptyString(args.recipient, "nep413.recipient");
+	const message = coerceNonEmptyString(args.message, "nep413.message");
+	const recipient = coerceNonEmptyString(args.recipient, "nep413.recipient");
 	const nonce = base64UrlDecode(normalizeNonceToB64u(args.nonce, "nep413.nonce"));
-	const callbackUrl = args.callbackUrl == null ? void 0 : requireNonEmptyString(args.callbackUrl, "callbackUrl");
+	const callbackUrl = args.callbackUrl == null ? void 0 : coerceNonEmptyString(args.callbackUrl, "callbackUrl");
 	const out = [];
 	pushU32Le(out, NEP413_PREFIX);
 	pushBorshString(out, message);
@@ -294,13 +290,13 @@ async function buildRouterAbEd25519NearTransactionPrepareRequestV2(args) {
 		display_digest: routerAbDigest32Wire(base64UrlDecode(requireDigestB64u(args.displayDigestB64u, "displayDigestB64u"))),
 		intent: {
 			kind: "near_transaction_v1",
-			operation_id: requireNonEmptyString(args.operationId, "operationId"),
-			operation_fingerprint: requireNonEmptyString(args.operationFingerprint, "operationFingerprint"),
-			near_account_id: requireNonEmptyString(args.nearAccountId, "nearAccountId"),
+			operation_id: coerceNonEmptyString(args.operationId, "operationId"),
+			operation_fingerprint: coerceNonEmptyString(args.operationFingerprint, "operationFingerprint"),
+			near_account_id: coerceNonEmptyString(args.nearAccountId, "nearAccountId"),
 			near_network_id: args.nearNetworkId,
 			transactions: args.transactions.map((transaction, index) => ({
-				receiver_id: requireNonEmptyString(transaction.receiverId, `transactions[${index}].receiverId`),
-				action_fingerprint: requireNonEmptyString(transaction.actionFingerprint, `transactions[${index}].actionFingerprint`)
+				receiver_id: coerceNonEmptyString(transaction.receiverId, `transactions[${index}].receiverId`),
+				action_fingerprint: coerceNonEmptyString(transaction.actionFingerprint, `transactions[${index}].actionFingerprint`)
 			})),
 			unsigned_transaction_borsh_b64u: requireBase64UrlNonEmpty(args.unsignedTransactionBorshB64u, "unsignedTransactionBorshB64u")
 		},
@@ -317,7 +313,7 @@ async function buildRouterAbEd25519NearTransactionPrepareRequestV2(args) {
 }
 async function buildRouterAbEd25519Nep413PrepareRequestV2(args) {
 	const nonceB64u = normalizeNonceToB64u(args.nonce, "nonce");
-	const callbackUrl = args.callbackUrl == null ? void 0 : requireNonEmptyString(args.callbackUrl, "callbackUrl");
+	const callbackUrl = args.callbackUrl == null ? void 0 : coerceNonEmptyString(args.callbackUrl, "callbackUrl");
 	const canonicalMessageB64u = routerAbEd25519Nep413CanonicalMessageB64uV2({
 		message: args.message,
 		recipient: args.recipient,
@@ -330,12 +326,12 @@ async function buildRouterAbEd25519Nep413PrepareRequestV2(args) {
 		display_digest: routerAbDigest32Wire(base64UrlDecode(requireDigestB64u(args.displayDigestB64u, "displayDigestB64u"))),
 		intent: {
 			kind: "nep413_v1",
-			operation_id: requireNonEmptyString(args.operationId, "operationId"),
-			operation_fingerprint: requireNonEmptyString(args.operationFingerprint, "operationFingerprint"),
-			near_account_id: requireNonEmptyString(args.nearAccountId, "nearAccountId"),
+			operation_id: coerceNonEmptyString(args.operationId, "operationId"),
+			operation_fingerprint: coerceNonEmptyString(args.operationFingerprint, "operationFingerprint"),
+			near_account_id: coerceNonEmptyString(args.nearAccountId, "nearAccountId"),
 			near_network_id: args.nearNetworkId,
-			recipient: requireNonEmptyString(args.recipient, "recipient"),
-			message: requireNonEmptyString(args.message, "message"),
+			recipient: coerceNonEmptyString(args.recipient, "recipient"),
+			message: coerceNonEmptyString(args.message, "message"),
 			nonce_b64u: nonceB64u,
 			...callbackUrl ? { callback_url: callbackUrl } : {}
 		},
@@ -358,17 +354,17 @@ async function buildRouterAbEd25519DelegateActionPrepareRequestV2(args) {
 		display_digest: routerAbDigest32Wire(base64UrlDecode(requireDigestB64u(args.displayDigestB64u, "displayDigestB64u"))),
 		intent: {
 			kind: "near_delegate_action_v1",
-			operation_id: requireNonEmptyString(args.operationId, "operationId"),
-			operation_fingerprint: requireNonEmptyString(args.operationFingerprint, "operationFingerprint"),
-			near_account_id: requireNonEmptyString(args.nearAccountId, "nearAccountId"),
+			operation_id: coerceNonEmptyString(args.operationId, "operationId"),
+			operation_fingerprint: coerceNonEmptyString(args.operationFingerprint, "operationFingerprint"),
+			near_account_id: coerceNonEmptyString(args.nearAccountId, "nearAccountId"),
 			near_network_id: args.nearNetworkId,
 			delegate: {
-				sender_id: requireNonEmptyString(args.delegate.senderId, "delegate.senderId"),
-				receiver_id: requireNonEmptyString(args.delegate.receiverId, "delegate.receiverId"),
-				public_key: requireNonEmptyString(args.delegate.publicKey, "delegate.publicKey"),
-				nonce: requireNonEmptyString(args.delegate.nonce, "delegate.nonce"),
-				max_block_height: requireNonEmptyString(args.delegate.maxBlockHeight, "delegate.maxBlockHeight"),
-				action_fingerprint: requireNonEmptyString(args.delegate.actionFingerprint, "delegate.actionFingerprint"),
+				sender_id: coerceNonEmptyString(args.delegate.senderId, "delegate.senderId"),
+				receiver_id: coerceNonEmptyString(args.delegate.receiverId, "delegate.receiverId"),
+				public_key: coerceNonEmptyString(args.delegate.publicKey, "delegate.publicKey"),
+				nonce: coerceNonEmptyString(args.delegate.nonce, "delegate.nonce"),
+				max_block_height: coerceNonEmptyString(args.delegate.maxBlockHeight, "delegate.maxBlockHeight"),
+				action_fingerprint: coerceNonEmptyString(args.delegate.actionFingerprint, "delegate.actionFingerprint"),
 				canonical_delegate_borsh_b64u: canonicalDelegateBorshB64u
 			}
 		},
@@ -389,7 +385,7 @@ function buildRouterAbEd25519NormalSigningFinalizeRequestV2(args) {
 		scope,
 		expires_at_ms: requirePositiveInteger(args.expiresAtMs, "expiresAtMs"),
 		prepare_binding: {
-			server_round1_handle: requireNonEmptyString(args.prepareResponse.server_round1_handle, "server_round1_handle"),
+			server_round1_handle: coerceNonEmptyString(args.prepareResponse.server_round1_handle, "server_round1_handle"),
 			round1_binding_digest: parseDigest32(args.prepareResponse.round1_binding_digest, "round1_binding_digest"),
 			intent_digest: parseDigest32(args.admissionMaterial.intentDigest, "intent_digest"),
 			signing_payload_digest: parseDigest32(args.admissionMaterial.signingPayloadDigest, "signing_payload_digest")
@@ -398,9 +394,9 @@ function buildRouterAbEd25519NormalSigningFinalizeRequestV2(args) {
 			kind: "ed25519_two_party_frost_finalize_v1",
 			client_commitments: parseCommitments(args.clientCommitments, "clientCommitments"),
 			server_commitments: parseCommitments(args.prepareResponse.server_commitments, "serverCommitments"),
-			client_verifying_share_b64u: requireNonEmptyString(args.clientVerifyingShareB64u, "clientVerifyingShareB64u"),
-			server_verifying_share_b64u: requireNonEmptyString(args.prepareResponse.server_verifying_share_b64u, "serverVerifyingShareB64u"),
-			client_signature_share_b64u: requireNonEmptyString(args.clientSignatureShareB64u, "clientSignatureShareB64u")
+			client_verifying_share_b64u: coerceNonEmptyString(args.clientVerifyingShareB64u, "clientVerifyingShareB64u"),
+			server_verifying_share_b64u: coerceNonEmptyString(args.prepareResponse.server_verifying_share_b64u, "serverVerifyingShareB64u"),
+			client_signature_share_b64u: coerceNonEmptyString(args.clientSignatureShareB64u, "clientSignatureShareB64u")
 		}
 	};
 	if (scope.authorization.kind === "reusable_wallet_session" && args.prepareResponse.scope.authorization.kind === "reusable_wallet_session") return {
@@ -449,11 +445,11 @@ function parseScope(value, label) {
 		"signing_worker_id"
 	], label);
 	const scope = {
-		request_id: requireNonEmptyString(record.request_id, `${label}.request_id`),
-		account_id: requireNonEmptyString(record.account_id, `${label}.account_id`),
+		request_id: coerceNonEmptyString(record.request_id, `${label}.request_id`),
+		account_id: coerceNonEmptyString(record.account_id, `${label}.account_id`),
 		authorization: parseRouterAbNormalSigningAuthorization(record.authorization),
 		material_activation: parseRouterAbMpcMaterialActivationRef(record.material_activation),
-		signing_worker_id: requireNonEmptyString(record.signing_worker_id, `${label}.signing_worker_id`)
+		signing_worker_id: coerceNonEmptyString(record.signing_worker_id, `${label}.signing_worker_id`)
 	};
 	if (scope.material_activation.signing_worker !== scope.signing_worker_id) throw new Error(`${label} material activation SigningWorker mismatch`);
 	return scope;
@@ -474,17 +470,17 @@ function parseCommitments(value, label) {
 	const record = value && typeof value === "object" ? value : null;
 	if (!record) throw new Error(`${label} must be an object`);
 	return {
-		hiding: requireNonEmptyString(record.hiding, `${label}.hiding`),
-		binding: requireNonEmptyString(record.binding, `${label}.binding`)
+		hiding: coerceNonEmptyString(record.hiding, `${label}.hiding`),
+		binding: coerceNonEmptyString(record.binding, `${label}.binding`)
 	};
 }
 function parseServerIdentity(value, label) {
 	const record = value && typeof value === "object" ? value : null;
 	if (!record) throw new Error(`${label} must be an object`);
 	return {
-		server_id: requireNonEmptyString(record.server_id, `${label}.server_id`),
-		key_epoch: requireNonEmptyString(record.key_epoch, `${label}.key_epoch`),
-		recipient_encryption_key: requireNonEmptyString(record.recipient_encryption_key, `${label}.recipient_encryption_key`)
+		server_id: coerceNonEmptyString(record.server_id, `${label}.server_id`),
+		key_epoch: coerceNonEmptyString(record.key_epoch, `${label}.key_epoch`),
+		recipient_encryption_key: coerceNonEmptyString(record.recipient_encryption_key, `${label}.recipient_encryption_key`)
 	};
 }
 function parseReusableWalletSessionAuthorizedOperation(value, label) {
@@ -501,16 +497,16 @@ function parseReusableWalletSessionAuthorizedOperation(value, label) {
 		"display_digest_b64u",
 		"operation_fingerprint_digest"
 	], label);
-	const kind = requireNonEmptyString(record.kind, `${label}.kind`);
+	const kind = coerceNonEmptyString(record.kind, `${label}.kind`);
 	if (kind !== "reusable_wallet_session_authorized_operation_v1") throw new Error(`${label}.kind is invalid`);
-	const capabilityKind = requireNonEmptyString(record.capability_kind, `${label}.capability_kind`);
+	const capabilityKind = coerceNonEmptyString(record.capability_kind, `${label}.capability_kind`);
 	if (capabilityKind !== "near_ed25519_mpc_signing") throw new Error(`${label}.capability_kind is invalid`);
-	const operationKind = requireNonEmptyString(record.operation_kind, `${label}.operation_kind`);
+	const operationKind = coerceNonEmptyString(record.operation_kind, `${label}.operation_kind`);
 	if (operationKind !== "near.sign_transaction" && operationKind !== "near.sign_delegate_action" && operationKind !== "near.sign_nep413_message") throw new Error(`${label}.operation_kind is invalid`);
 	return {
 		kind,
-		authorized_operation_id: requireNonEmptyString(record.authorized_operation_id, `${label}.authorized_operation_id`),
-		operation_id: requireNonEmptyString(record.operation_id, `${label}.operation_id`),
+		authorized_operation_id: coerceNonEmptyString(record.authorized_operation_id, `${label}.authorized_operation_id`),
+		operation_id: coerceNonEmptyString(record.operation_id, `${label}.operation_id`),
 		capability_kind: capabilityKind,
 		operation_kind: operationKind,
 		lane_digest_b64u: requireDigestB64u(record.lane_digest_b64u, `${label}.lane_digest_b64u`),
@@ -535,16 +531,16 @@ function parseVerifiedStepUpAuthorizedOperation(value, label) {
 		"display_digest_b64u",
 		"operation_fingerprint_digest"
 	], label);
-	if (requireNonEmptyString(record.kind, `${label}.kind`) !== "verified_step_up_authorized_operation_v1") throw new Error(`${label}.kind is invalid`);
-	if (requireNonEmptyString(record.capability_kind, `${label}.capability_kind`) !== "near_ed25519_mpc_signing") throw new Error(`${label}.capability_kind is invalid`);
-	const operationKind = requireNonEmptyString(record.operation_kind, `${label}.operation_kind`);
+	if (coerceNonEmptyString(record.kind, `${label}.kind`) !== "verified_step_up_authorized_operation_v1") throw new Error(`${label}.kind is invalid`);
+	if (coerceNonEmptyString(record.capability_kind, `${label}.capability_kind`) !== "near_ed25519_mpc_signing") throw new Error(`${label}.capability_kind is invalid`);
+	const operationKind = coerceNonEmptyString(record.operation_kind, `${label}.operation_kind`);
 	if (operationKind !== "near.sign_transaction" && operationKind !== "near.sign_delegate_action" && operationKind !== "near.sign_nep413_message") throw new Error(`${label}.operation_kind is invalid`);
 	return {
 		kind: "verified_step_up_authorized_operation_v1",
-		authorization_session_id: requireNonEmptyString(record.authorization_session_id, `${label}.authorization_session_id`),
+		authorization_session_id: coerceNonEmptyString(record.authorization_session_id, `${label}.authorization_session_id`),
 		evidence_set_digest: requireDigestB64u(record.evidence_set_digest, `${label}.evidence_set_digest`),
-		authorized_operation_id: requireNonEmptyString(record.authorized_operation_id, `${label}.authorized_operation_id`),
-		operation_id: requireNonEmptyString(record.operation_id, `${label}.operation_id`),
+		authorized_operation_id: coerceNonEmptyString(record.authorized_operation_id, `${label}.authorized_operation_id`),
+		operation_id: coerceNonEmptyString(record.operation_id, `${label}.operation_id`),
 		capability_kind: "near_ed25519_mpc_signing",
 		operation_kind: operationKind,
 		lane_digest_b64u: requireDigestB64u(record.lane_digest_b64u, `${label}.lane_digest_b64u`),
@@ -556,7 +552,7 @@ function parseVerifiedStepUpAuthorizedOperation(value, label) {
 function parsePrepareResponse(value) {
 	const record = value && typeof value === "object" ? value : null;
 	if (!record) throw new Error("Router A/B normal-signing prepare response must be an object");
-	const signatureScheme = requireNonEmptyString(record.signature_scheme, "signature_scheme");
+	const signatureScheme = coerceNonEmptyString(record.signature_scheme, "signature_scheme");
 	if (signatureScheme !== "ed25519_v1") throw new Error(`Unsupported Router A/B normal-signing signature scheme: ${signatureScheme}`);
 	const scope = parseScope(record.scope, "scope");
 	const base = {
@@ -564,9 +560,9 @@ function parsePrepareResponse(value) {
 		signing_payload_digest: parseDigest32(record.signing_payload_digest, "signing_payload_digest"),
 		round1_binding_digest: parseDigest32(record.round1_binding_digest, "round1_binding_digest"),
 		signing_worker: parseServerIdentity(record.signing_worker, "signing_worker"),
-		server_round1_handle: requireNonEmptyString(record.server_round1_handle, "server_round1_handle"),
+		server_round1_handle: coerceNonEmptyString(record.server_round1_handle, "server_round1_handle"),
 		server_commitments: parseCommitments(record.server_commitments, "server_commitments"),
-		server_verifying_share_b64u: requireNonEmptyString(record.server_verifying_share_b64u, "server_verifying_share_b64u"),
+		server_verifying_share_b64u: coerceNonEmptyString(record.server_verifying_share_b64u, "server_verifying_share_b64u"),
 		signature_scheme: "ed25519_v1",
 		prepared_at_ms: requirePositiveInteger(record.prepared_at_ms, "prepared_at_ms"),
 		expires_at_ms: requirePositiveInteger(record.expires_at_ms, "expires_at_ms")
@@ -629,7 +625,7 @@ function parseNormalSigningResponse(value) {
 		"signature",
 		"signed_at_ms"
 	], "Router A/B normal-signing response");
-	const signatureScheme = requireNonEmptyString(record.signature_scheme, "signature_scheme");
+	const signatureScheme = coerceNonEmptyString(record.signature_scheme, "signature_scheme");
 	if (signatureScheme !== "ed25519_v1") throw new Error(`Unsupported Router A/B normal-signing signature scheme: ${signatureScheme}`);
 	return {
 		scope: parseScope(record.scope, "scope"),
@@ -818,7 +814,7 @@ function routerAbSigningHttpError(args) {
 }
 async function postRouterAbNormalSigningJson(args) {
 	if (typeof fetch !== "function") throw new Error("fetch is not available for Router A/B normal-signing request");
-	const base = normalizeRelayerBaseUrl(requireNonEmptyString(args.relayServerUrl, "relayServerUrl"));
+	const base = normalizeRelayerBaseUrl(coerceNonEmptyString(args.relayServerUrl, "relayServerUrl"));
 	const response = await fetch(`${base}${args.path}`, {
 		...buildRouterAbRequestInit({
 			credential: args.credential,
@@ -859,31 +855,6 @@ async function prepareRouterAbEcdsaDerivationEvmDigestSigningV1(args) {
 		parse: (value) => parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1(args.request, value)
 	});
 }
-async function parseFinalBatchPrepareResponse(request, value) {
-	if (!value || typeof value !== "object" || !("prepared_response" in value) || !("outgoing_messages_b64u" in value)) throw new Error("Invalid terminal prepare response");
-	const messages = value.outgoing_messages_b64u;
-	if (!Array.isArray(messages) || messages.length !== 1 || typeof messages[0] !== "string" || !/^[A-Za-z0-9_-]+$/.test(messages[0])) throw new Error("Terminal prepare response must contain one protocol message");
-	return {
-		preparedResponse: await parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1(request, value.prepared_response),
-		outgoingMessagesB64u: [messages[0]]
-	};
-}
-async function prepareRouterAbEcdsaFinalPresignBatchV1(args) {
-	await routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1(args.request);
-	const timeoutMs = Math.min(5e3, args.source.batch.ceremony_expires_at_ms - Date.now());
-	if (timeoutMs <= 0) throw new Error("Terminal presign ceremony expired before prepare");
-	return postRouterAbNormalSigningJson({
-		signal: AbortSignal.timeout(Math.floor(timeoutMs)),
-		relayServerUrl: args.relayServerUrl,
-		path: "/router-ab/ecdsa-derivation/sign/prepare",
-		credential: args.credential,
-		body: {
-			...args.request,
-			presign_source: args.source
-		},
-		parse: parseFinalBatchPrepareResponse.bind(void 0, args.request)
-	});
-}
 async function finalizeRouterAbNormalSigningV2(args) {
 	return postRouterAbNormalSigningJson({
 		relayServerUrl: args.relayServerUrl,
@@ -1018,4 +989,4 @@ function sameBytes(left, right) {
 	return left.length === right.length && left.every((byte, index) => byte === right[index]);
 }
 //#endregion
-export { waitForWalletSessionQuotaAdmissionRetry as C, decideWalletSessionQuotaAdmissionFailure as S, WALLET_SESSION_FAILURE_CODES as _, buildRouterAbEd25519NormalSigningFinalizeRequestV2 as a, buildWalletSessionQuotaAdmissionQueueKey as b, prepareRouterAbEcdsaDerivationEvmDigestSigningV1 as c, routerAbCanonicalWireBytesToB64u as d, routerAbNormalSigningActionFingerprint as f, walletSessionFailureFromError as g, walletSessionFailureFromCode as h, buildRouterAbEd25519Nep413PrepareRequestV2 as i, prepareRouterAbEcdsaFinalPresignBatchV1 as l, walletSessionFailureErrorFromPayload as m, buildRouterAbEd25519DelegateActionPrepareRequestV2 as n, finalizeRouterAbEcdsaDerivationEvmDigestSigningV1 as o, WalletSessionFailureError as p, buildRouterAbEd25519NearTransactionPrepareRequestV2 as r, finalizeRouterAbNormalSigningV2 as s, RouterAbSigningRequestError as t, prepareRouterAbNormalSigningV2 as u, WalletSessionQuotaAdmissionError as v, classifyWalletSessionQuotaAdmissionFailure as x, buildOperationAuthorizationQueueKey as y };
+export { waitForWalletSessionQuotaAdmissionRetry as S, WalletSessionQuotaAdmissionError as _, buildRouterAbEd25519NormalSigningFinalizeRequestV2 as a, classifyWalletSessionQuotaAdmissionFailure as b, prepareRouterAbEcdsaDerivationEvmDigestSigningV1 as c, routerAbNormalSigningActionFingerprint as d, WalletSessionFailureError as f, WALLET_SESSION_FAILURE_CODES as g, walletSessionFailureFromError as h, buildRouterAbEd25519Nep413PrepareRequestV2 as i, prepareRouterAbNormalSigningV2 as l, walletSessionFailureFromCode as m, buildRouterAbEd25519DelegateActionPrepareRequestV2 as n, finalizeRouterAbEcdsaDerivationEvmDigestSigningV1 as o, walletSessionFailureErrorFromPayload as p, buildRouterAbEd25519NearTransactionPrepareRequestV2 as r, finalizeRouterAbNormalSigningV2 as s, RouterAbSigningRequestError as t, routerAbCanonicalWireBytesToB64u as u, buildOperationAuthorizationQueueKey as v, decideWalletSessionQuotaAdmissionFailure as x, buildWalletSessionQuotaAdmissionQueueKey as y };

package/dist/{public/sdk/runtime-auth-B7z1ANNp.js → esm/sdk/runtime-auth-DFTqwj3u.js}

@@ -1,34 +1,37 @@
-import { H as parseWebAuthnRpId, R as parseWalletId } from "./normalize-BephcEIF.js";
-import { t as walletIframeRequestIdFromBoundary } from "./walletIframeIdentity-UmQTJsHc.js";
-import "./validation-BphUDXs7.js";
-import { _ as parseHostedAuthMenuExternalAuthResolution, h as parseHostedAuthMenuErrorEvent, o as hostedAuthMenuExternalAuthRequestIdFromBoundary, p as parseHostedAuthMenuCancelPayload, v as parseHostedAuthMenuOpenRequest } from "./messages-B3UbNZYc.js";
+import { M as parseWebAuthnRpId, O as parseWalletId } from "./domainIds-lcrFg6Sa.js";
+import "./validation-gat4LEKm.js";
+import { t as walletIframeRequestIdFromBoundary } from "./walletIframeIdentity-DB6Z2EC9.js";
+import { _ as parseHostedAuthMenuExternalAuthResolution, h as parseHostedAuthMenuErrorEvent, o as hostedAuthMenuExternalAuthRequestIdFromBoundary, p as parseHostedAuthMenuCancelPayload, v as parseHostedAuthMenuOpenRequest } from "./messages-C7Dbx9iN.js";
 import "./errors-93h9uAW9.js";
-import { r as preloadWalletHostRegistrationSurface } from "./runtimeLoader-BFAmJAbu.js";
-import { i as registerPreparedHostedPasskeyRegistration, n as cancelHostedPasskeyRegistration, r as prepareHostedPasskeyRegistration, s as startHostedPasskeyRegistrationCredential, ut as WalletSessionStatusReadScope } from "./registration-D-istkMZ.js";
-import { l as activeWalletSessionV1RecordsEqual } from "./device-linking-DpVGjSeq.js";
-import { k as walletIdFromString, l as createReadableWalletId } from "./registrationIntent-DwAIMQYh.js";
-import { c as toWalletId, u as walletSessionRefFromSession } from "./ecdsaChainTarget-BOTPGIU_.js";
-import { a as WALLET_AUTH_METHODS } from "./signerDomain-DDLiwuYS.js";
-import "./wallet-recovery-CKqoHbxT.js";
-import "./participants-Bcnsa_ip.js";
-import "./sessionPolicy-B4FsPuk2.js";
-import { R as parseWalletSessionOperationCredentialV1 } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
-import "./capabilityKinds-jwCEaqBU.js";
-import "./evmFamilyEcdsaIdentity-_kuKSW35.js";
-import "./passkey-custody-BaHyYMhj.js";
-import { c as classifyLinkDeviceFlowEvent, s as UnlockEventPhase } from "./sdkSentEvents-5Pi-hjHB.js";
-import { s as IndexedDBManager, v as walletSessionAuthorizations } from "./ed25519SeedMaterial-Cghz8-XB.js";
-import "./keccak-DY5wDsym.js";
-import "./signingSessionSeal-CdtgXHSL.js";
-import { l as pmUnlockPayloadToLoginHooksOptions, n as exactSessionIdentitiesMatch, r as parseWalletIframeExactSessionIdentity, s as readSelectedWalletIframeExactSessionState, u as requirePMUnlockPayload } from "./exactSessionState-Bt0HforB.js";
-import "./nearEd25519YaoMaterialActivation-BLxVE6E5.js";
-import "./operationFingerprint-CsYO6b0a.js";
-import "./actions-DsBQcjBn.js";
-import { t as createWalletIframeSurfaceMeasurementReporter } from "./surface-measurement-reporter-D7BNehf4.js";
-import { n as getDefaultCspNonce, r as appearanceTokenCssRule, t as createCspStylesheetManager } from "./csp-stylesheet-DLj_a6t_.js";
-import { a as R, o as S, r as C, t as u } from "./jsxRuntime.module-FAP0NE9p.js";
-import { a as syncAccountWithPreparedCredential, c as listLocalLoginAuthMethods, d as unlockLinkedDevicePasskey, f as unlockResolvedWalletSubjectSet, g as normalizeLinkedDeviceTargetEmailAddressV1, h as isLinkedDeviceTargetEmailAddressV1, handleWalletHostRuntimeRequestWithHandlers, i as prepareSyncAccountChallenge, l as resolveLinkedDevicePasskeyAuthoritySelection, m as DeviceLinkingErrorCode, n as clearHostedWalletSessions, o as buildNearWalletRegistrationSignerSetSelection, p as resolveWalletUnlockSubjectSet, s as resolvePasskeyRegistrationAccountProvisioning, t as activeHostedWalletSessionOperationCredential, u as resolveLinkedDeviceUnlockSubjectSet } from "./runtimeContext-CH97jPZ0.js";
-import { n as respondOkResult, r as withProgress, t as respondOk } from "./shared-Qy1DGMqH.js";
+import { r as preloadWalletHostRegistrationSurface } from "./runtimeLoader-hod6T2-m.js";
+import { dt as WalletSessionStatusReadScope, i as registerPreparedHostedPasskeyRegistration, n as cancelHostedPasskeyRegistration, r as prepareHostedPasskeyRegistration, s as startHostedPasskeyRegistrationCredential } from "./registration-BZDzDv91.js";
+import "./sessionPolicy-CHiilOAB.js";
+import { Dt as activeWalletSessionV1RecordsEqual, kt as parseWalletSessionOperationCredentialV1 } from "./ecdsaPresignLifecycle-BFOTNYCK.js";
+import "./capabilityKinds-hvYqa6S_.js";
+import { c as toWalletId, u as walletSessionRefFromSession } from "./ecdsaChainTarget-Bl-JWyuw.js";
+import { a as WALLET_AUTH_METHODS } from "./signerDomain-IEAVrOrc.js";
+import "./wallet-recovery-Bz9qKgaL.js";
+import "./evmFamilyEcdsaIdentity-Co5XDcEA.js";
+import "./walletAuthority-BQBxgUBn.js";
+import "./encoders-D8d07vpx.js";
+import { n as createReadableWalletId, o as walletIdFromString } from "./registrationIds-DLSdEKSv.js";
+import "./passkey-custody-Bk1jAknm.js";
+import { c as classifyLinkDeviceFlowEvent, s as UnlockEventPhase } from "./sdkSentEvents-MqDkbQg1.js";
+import { b as walletSessionAuthorizations, u as IndexedDBManager } from "./walletCustodyEcdsaContinuity-Hn4ORIbf.js";
+import "./keccak-DUL3d8SF.js";
+import "./signingSessionSeal-Cu-GHm6y.js";
+import "./registrationSignerPlan-CAikVZZQ.js";
+import "./registrationIntent-D0PxwEY4.js";
+import "./signNear-Bblwn2kT.js";
+import { l as pmUnlockPayloadToLoginHooksOptions, n as exactSessionIdentitiesMatch, r as parseWalletIframeExactSessionIdentity, s as readSelectedWalletIframeExactSessionState, u as requirePMUnlockPayload } from "./exactSessionState-CiD5fBEs.js";
+import "./nearEd25519YaoMaterialActivation-DPb0s3hQ.js";
+import "./actions-CCvThiKe.js";
+import { t as createWalletIframeSurfaceMeasurementReporter } from "./surface-measurement-reporter-CSTyRsMa.js";
+import "./NearClient-DY4NfHeD.js";
+import { n as getDefaultCspNonce, r as appearanceTokenCssRule, t as createCspStylesheetManager } from "./csp-stylesheet-btENhsNp.js";
+import { a as R, o as S, r as C, t as u } from "./jsxRuntime.module-CuH5ZEIA.js";
+import { a as syncAccountWithPreparedCredential, c as listLocalLoginAuthMethods, d as unlockLinkedDevicePasskey, f as unlockResolvedWalletSubjectSet, g as normalizeLinkedDeviceTargetEmailAddressV1, h as isLinkedDeviceTargetEmailAddressV1, handleWalletHostRuntimeRequestWithHandlers, i as prepareSyncAccountChallenge, l as resolveLinkedDevicePasskeyAuthoritySelection, m as DeviceLinkingErrorCode, n as clearHostedWalletSessions, o as buildNearWalletRegistrationSignerSetSelection, p as resolveWalletUnlockSubjectSet, s as resolvePasskeyRegistrationAccountProvisioning, t as activeHostedWalletSessionOperationCredential, u as resolveLinkedDeviceUnlockSubjectSet } from "./runtimeContext-iLXnxVlZ.js";
+import { n as respondOkResult, r as withProgress, t as respondOk } from "./shared-DkbeLCI3.js";
 //#region src/SeamsWeb/walletIframe/shared/exactSessionReconciliation.ts
 /**
 * Reconciles every locally stored exact session for the selected authority.
@@ -1272,7 +1275,7 @@ var AuthMenuSurface = class extends C {
 			})
 		}) });
 	}
-	renderOtherOptions(viewModel) {
+	renderOtherOptions(_viewModel) {
 		return /* @__PURE__ */ u(S, { children: /* @__PURE__ */ u("div", {
 			class: "seams-scan-device-row",
 			children: [/* @__PURE__ */ u("div", {
@@ -2587,7 +2590,6 @@ var AuthMenuSession = class {
 		this.outcomeResolver = null;
 		this.outcomePromise = null;
 		this.cleanedUp = false;
-		this.externalAuthResolution = null;
 		this.prepared = null;
 		this.preparePasskey = null;
 		this.registrationPreparation = null;
@@ -2767,9 +2769,6 @@ var AuthMenuSession = class {
 	get state() {
 		return this.stateValue;
 	}
-	get externalResolution() {
-		return this.externalAuthResolution;
-	}
 	setRegistrationPreparation(prepare) {
 		this.registrationPreparation = prepare;
 		if (this.stateValue.kind !== "complete" && this.currentViewModel().mode === "register") {
@@ -3173,7 +3172,6 @@ var AuthMenuSession = class {
 		const state = this.stateValue;
 		if (state.kind === "recovery" && state.stage === "google_external_auth") {
 			if (state.request.authMenuSessionId !== resolution.authMenuSessionId || state.request.externalAuthRequestId !== resolution.externalAuthRequestId || this.identity.requestId !== resolution.requestId) return false;
-			this.externalAuthResolution = resolution;
 			if (resolution.evidence.kind === "google_id_token") {
 				this.startRecoveryGoogleVerification(state, resolution.evidence.idToken);
 				return true;
@@ -3200,7 +3198,6 @@ var AuthMenuSession = class {
 			return true;
 		}
 		if (state.kind !== "awaiting_external_auth" || state.viewModel.kind !== "passkey" || state.request.authMenuSessionId !== resolution.authMenuSessionId || state.request.externalAuthRequestId !== resolution.externalAuthRequestId || this.identity.requestId !== resolution.requestId) return false;
-		this.externalAuthResolution = resolution;
 		switch (resolution.evidence.kind) {
 			case "google_id_token":
 				this.startGoogleFlow(resolution.evidence.idToken, state.authTarget);
@@ -3364,7 +3361,6 @@ var AuthMenuSession = class {
 		if (this.stateValue.kind === "complete" || this.stateValue.kind === "link_device") return;
 		const currentViewModel = this.currentViewModel();
 		this.invalidatePreparation();
-		this.externalAuthResolution = null;
 		const nextViewModel = createPreparingViewModel({
 			request: {
 				...this.request,
@@ -5082,7 +5078,7 @@ function passkeyRecentWalletId(recentUnlocks) {
 //#endregion
 //#region src/SeamsWeb/walletIframe/host/auth-menu/controller.ts
 async function loadHostedRecoveryPort(getSeamsWeb) {
-	const recoveryEntrypoint = await import("./recovery-entrypoint-D39R1avB.js");
+	const recoveryEntrypoint = await import("./recovery-entrypoint-DW2tGyMs.js");
 	const seamsWeb = getSeamsWeb();
 	return recoveryEntrypoint.createHostedRecoveryPort({
 		context: seamsWeb.getContext(),
@@ -5163,9 +5159,6 @@ var AuthMenuController = class {
 		});
 		this.cancelDeviceLinking = async () => await this.deps.getSeamsWeb().devices.cancelDeviceLinking();
 	}
-	get activeSessionCount() {
-		return this.sessions.size;
-	}
 	async open(args) {
 		if (!args.requestId) throw new Error("Hosted auth-menu open request requires requestId");
 		const requestId = walletIframeRequestIdFromBoundary(args.requestId);
@@ -5318,9 +5311,6 @@ var AuthMenuController = class {
 		if (!session || session.identity.requestId !== resolution.requestId) return false;
 		return session.acceptExternalAuthResolution(resolution);
 	}
-	cancelByRequestId(requestId, reason) {
-		for (const session of this.sessions.values()) if (session.identity.requestId === requestId) session.cancel(reason);
-	}
 };
 //#endregion
 //#region src/SeamsWeb/walletIframe/host/handlers/authMenu.ts

package/dist/esm/sdk/{runtime-device-link-B8HGDakg.js → runtime-device-link-C1Oub8Lw.js}

@@ -1,26 +1,29 @@
-import "./validation-BphUDXs7.js";
-import { d as parseDeviceLinkEmailOtpBaseFactorActionPayloadV1, f as parseDeviceLinkTargetFactorActionPayloadV1 } from "./messages-B3UbNZYc.js";
+import "./validation-gat4LEKm.js";
+import { d as parseDeviceLinkEmailOtpBaseFactorActionPayloadV1, f as parseDeviceLinkTargetFactorActionPayloadV1 } from "./messages-C7Dbx9iN.js";
 import "./errors-93h9uAW9.js";
-import "./device-linking-DpVGjSeq.js";
-import "./registrationIntent-DwAIMQYh.js";
-import "./signerDomain-DDLiwuYS.js";
-import "./wallet-recovery-CKqoHbxT.js";
-import "./participants-Bcnsa_ip.js";
-import "./sessionPolicy-B4FsPuk2.js";
-import { A as parseLinkedDeviceRevokeResultV1, E as parseLinkedDeviceListResultV1, L as parseQrLinkedDeviceSessionPayloadV5, T as parseLinkedDeviceListRequestV1, k as parseLinkedDeviceRevokeRequestV1 } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
-import "./capabilityKinds-jwCEaqBU.js";
-import "./evmFamilyEcdsaIdentity-_kuKSW35.js";
-import "./passkey-custody-BaHyYMhj.js";
-import { c as classifyLinkDeviceFlowEvent } from "./sdkSentEvents-5Pi-hjHB.js";
-import "./ed25519SeedMaterial-Cghz8-XB.js";
-import "./keccak-DY5wDsym.js";
-import "./signingSessionSeal-CdtgXHSL.js";
-import "./nearEd25519YaoMaterialActivation-BLxVE6E5.js";
-import "./operationFingerprint-CsYO6b0a.js";
-import "./actions-DsBQcjBn.js";
-import "./jsxRuntime.module-FAP0NE9p.js";
-import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-CH97jPZ0.js";
-import { n as respondOkResult, r as withProgress, t as respondOk } from "./shared-Qy1DGMqH.js";
+import "./sessionPolicy-CHiilOAB.js";
+import "./ecdsaPresignLifecycle-BFOTNYCK.js";
+import "./capabilityKinds-hvYqa6S_.js";
+import "./signerDomain-IEAVrOrc.js";
+import "./wallet-recovery-Bz9qKgaL.js";
+import { $ as parseLinkedDeviceListRequestV1, et as parseLinkedDeviceListResultV1, kt as parseQrLinkedDeviceSessionPayloadV5, nt as parseLinkedDeviceRevokeResultV1, tt as parseLinkedDeviceRevokeRequestV1 } from "./evmFamilyEcdsaIdentity-Co5XDcEA.js";
+import "./walletAuthority-BQBxgUBn.js";
+import "./encoders-D8d07vpx.js";
+import "./registrationIds-DLSdEKSv.js";
+import "./passkey-custody-Bk1jAknm.js";
+import { c as classifyLinkDeviceFlowEvent } from "./sdkSentEvents-MqDkbQg1.js";
+import "./walletCustodyEcdsaContinuity-Hn4ORIbf.js";
+import "./keccak-DUL3d8SF.js";
+import "./signingSessionSeal-Cu-GHm6y.js";
+import "./registrationSignerPlan-CAikVZZQ.js";
+import "./registrationIntent-D0PxwEY4.js";
+import "./signNear-Bblwn2kT.js";
+import "./nearEd25519YaoMaterialActivation-DPb0s3hQ.js";
+import "./actions-CCvThiKe.js";
+import "./NearClient-DY4NfHeD.js";
+import "./jsxRuntime.module-CuH5ZEIA.js";
+import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-iLXnxVlZ.js";
+import { n as respondOkResult, r as withProgress, t as respondOk } from "./shared-DkbeLCI3.js";
 //#region src/SeamsWeb/walletIframe/host/handlers/deviceLink.ts
 /** The QR payload's own lifetime; a selection older than this blocks nothing. */
 const EMAIL_OTP_BASE_FACTOR_SELECTION_DEADLINE_MS = 900 * 1e3;

package/dist/{public/sdk/runtime-ecdsa-tempo-DKdS5-us.js → esm/sdk/runtime-ecdsa-tempo-rkWwolw1.js}

@@ -1,25 +1,28 @@
-import "./validation-BphUDXs7.js";
+import "./validation-gat4LEKm.js";
 import "./errors-93h9uAW9.js";
-import "./device-linking-DpVGjSeq.js";
-import "./registrationIntent-DwAIMQYh.js";
-import "./signerDomain-DDLiwuYS.js";
-import "./wallet-recovery-CKqoHbxT.js";
-import "./participants-Bcnsa_ip.js";
-import "./sessionPolicy-B4FsPuk2.js";
-import "./ecdsaPresignLifecycle-CnSnzoRJ.js";
-import "./capabilityKinds-jwCEaqBU.js";
-import "./evmFamilyEcdsaIdentity-_kuKSW35.js";
-import "./passkey-custody-BaHyYMhj.js";
-import "./ed25519SeedMaterial-Cghz8-XB.js";
-import "./keccak-DY5wDsym.js";
-import "./signingSessionSeal-CdtgXHSL.js";
-import { S as requireTempoFeeTokenPreferenceSigningRequest } from "./exactSessionState-Bt0HforB.js";
-import "./nearEd25519YaoMaterialActivation-BLxVE6E5.js";
-import "./operationFingerprint-CsYO6b0a.js";
-import "./actions-DsBQcjBn.js";
-import "./jsxRuntime.module-FAP0NE9p.js";
-import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-CH97jPZ0.js";
-import { n as respondOkResult, t as respondOk } from "./shared-Qy1DGMqH.js";
+import "./sessionPolicy-CHiilOAB.js";
+import "./ecdsaPresignLifecycle-BFOTNYCK.js";
+import "./capabilityKinds-hvYqa6S_.js";
+import "./signerDomain-IEAVrOrc.js";
+import "./wallet-recovery-Bz9qKgaL.js";
+import "./evmFamilyEcdsaIdentity-Co5XDcEA.js";
+import "./walletAuthority-BQBxgUBn.js";
+import "./encoders-D8d07vpx.js";
+import "./registrationIds-DLSdEKSv.js";
+import "./passkey-custody-Bk1jAknm.js";
+import "./walletCustodyEcdsaContinuity-Hn4ORIbf.js";
+import "./keccak-DUL3d8SF.js";
+import "./signingSessionSeal-Cu-GHm6y.js";
+import "./registrationSignerPlan-CAikVZZQ.js";
+import "./registrationIntent-D0PxwEY4.js";
+import "./signNear-Bblwn2kT.js";
+import { S as requireTempoFeeTokenPreferenceSigningRequest } from "./exactSessionState-CiD5fBEs.js";
+import "./nearEd25519YaoMaterialActivation-DPb0s3hQ.js";
+import "./actions-CCvThiKe.js";
+import "./NearClient-DY4NfHeD.js";
+import "./jsxRuntime.module-CuH5ZEIA.js";
+import { handleWalletHostRuntimeRequestWithHandlers } from "./runtimeContext-iLXnxVlZ.js";
+import { n as respondOkResult, t as respondOk } from "./shared-DkbeLCI3.js";
 //#region src/SeamsWeb/walletIframe/host/handlers/ecdsaTempo.ts
 function createEcdsaTempoWalletIframeHandlers(deps) {
 	return {