@seams/wallet 0.6.1 → 0.7.1

package/dist/esm/SeamsWeb/publicApi/awaitNearReady.js

@@ -1,3 +1,5 @@
+//#region src/SeamsWeb/publicApi/awaitNearReady.ts
+const DEFAULT_AWAIT_NEAR_READY_TIMEOUT_MS = 12e4;
 function outcomeFor(state) {
 	if (!state) return null;
 	if (state.status === "near_ready") return {
@@ -21,7 +23,7 @@ function outcomeFor(state) {
 async function awaitNearReady(deps, args) {
 	const walletId = String(args.walletId || "").trim();
 	if (!walletId) throw new Error("[seams] awaitNearReady requires a walletId");
-	const timeoutMs = Math.max(1, Math.floor(Number(args.timeoutMs) || 0)) || 12e4;
+	const timeoutMs = Math.max(1, Math.floor(Number(args.timeoutMs) || 0)) || DEFAULT_AWAIT_NEAR_READY_TIMEOUT_MS;
 	let unsubscribe = null;
 	let timer = null;
 	let onAbort = null;

package/dist/esm/SeamsWeb/publicApi/devices.js

@@ -1,5 +1,5 @@
 import { parseWalletAuthMethodId, parseWalletId } from "../../shared-ts/src/utils/domainIds.js";
-import { parseLinkedDeviceListRequestV1, parseLinkedDeviceListResultV1, parseLinkedDeviceRevokeRequestV1, parseLinkedDeviceRevokeResultV1 } from "../../shared-ts/src/device-linking/parsers.js";
+import { parseLinkedDeviceListRequestV1, parseLinkedDeviceListResultV1, parseLinkedDeviceRevokeRequestV1, parseLinkedDeviceRevokeResultV1 } from "../../shared-ts/src/device-linking/deviceManagement.js";
 import "../../shared-ts/src/device-linking/index.js";
 import { DeviceLinkingDomain } from "../operations/devices/linkDevice.js";
 //#region src/SeamsWeb/publicApi/devices.ts

package/dist/esm/SeamsWeb/signingSurface/BrowserSigningSurface.js

@@ -1,13 +1,9 @@
 import { mpcMaterialActivationRefsEqual, parseThresholdEd25519SessionId, parseWalletId } from "../../shared-ts/src/utils/domainIds.js";
 import { parseWalletSessionAuthorizationId, parseWalletSessionMintId } from "../../shared-ts/src/authorization/capabilityKinds.js";
+import { base58Encode } from "../../shared-ts/src/utils/base58.js";
 import { base64UrlDecode, base64UrlEncode } from "../../shared-ts/src/utils/base64.js";
 import { sha256HexUtf8 } from "../../shared-ts/src/utils/digests.js";
-import { base58Encode } from "../../shared-ts/src/utils/base58.js";
-import { NEAR_ED25519_YAO_KEY_VERSION_V1, nearEd25519SigningKeyIdFromString } from "../../shared-ts/src/utils/registrationIntent.js";
-import { routerAbMpcMaterialActivationRefFromWire } from "../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
-import { ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1 } from "../../shared-ts/src/utils/routerAbEd25519Yao.js";
-import { signingRootScopeFromRuntimePolicyScope } from "../../shared-ts/src/threshold/signingRootScope.js";
-import { isEmailOtpWalletAuthAuthority, parseWalletAuthAuthorityRef, walletAuthAuthorityRef } from "../../shared-ts/src/utils/walletAuthAuthority.js";
+import { activeWalletSessionV1RecordsEqual } from "../../shared-ts/src/device-linking/activeWalletSession.js";
 import { WalletSessionStatusReadScope, createRelayerExactWalletSessionStatusPort } from "../../core/rpcClients/relayer/walletSessionAuthorizationStatus.js";
 import { ROUTER_AB_ED25519_NORMAL_SIGNING_STATE_KIND, SIGNING_SESSION_SEAL_GROUP_ID } from "../../shared-ts/src/utils/signingSessionSeal.js";
 import { toAccountId } from "../../core/types/accountIds.js";
@@ -15,8 +11,10 @@ import { WALLET_EMAIL_OTP_UNLOCK_OPERATION } from "../../shared-ts/src/utils/ema
 import { WALLET_AUTH_METHODS } from "../../shared-ts/src/utils/signerDomain.js";
 import { createNearProvisioningStateChangedEvent } from "../../core/types/sdkSentEvents.js";
 import { subscribeToNearProvisioning } from "../../core/signingEngine/flows/registration/nearProvisioningRegistry.js";
+import { nearEd25519SigningKeyIdFromString } from "../../shared-ts/src/utils/registrationIds.js";
 import { toWalletId } from "../../core/signingEngine/interfaces/ecdsaChainTarget.js";
 import { buildThresholdEd25519Participants2pV1 } from "../../shared-ts/src/threshold/participants.js";
+import { signingRootScopeFromRuntimePolicyScope } from "../../shared-ts/src/threshold/signingRootScope.js";
 import { SigningSessionIds } from "../../core/signingEngine/session/operationState/types.js";
 import { exactEd25519ExportMaterialIdentity } from "../../core/signingEngine/session/identity/exactSigningLaneIdentity.js";
 import { secureRandomId } from "../../shared-ts/src/utils/secureRandomId.js";
@@ -28,19 +26,23 @@ import { isWalletCustodySeedBinding } from "../../shared-ts/src/passkey-custody/
 import "../../shared-ts/src/passkey-custody/index.js";
 import { establishEvmFamilyCustodyV1, establishNearEd25519CustodyV1, joinEvmFamilyCustodyV1, joinNearEd25519CustodyV1, rejoinEvmFamilyCustodyV1, rejoinNearEd25519CustodyV1 } from "../../core/signingEngine/walletCustody/registrationCeremony.js";
 import { requestWalletCustodyCeremonyOperation, walletCustodyCeremonyStepRunner } from "../../core/signingEngine/walletCustody/ceremonyStepRunner.js";
+import { routerAbMpcMaterialActivationRefFromWire } from "../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
+import { ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1 } from "../../shared-ts/src/utils/routerAbEd25519Yao.js";
 import { RouterAbEd25519YaoHttpActivationTransportV1 } from "../../core/signingEngine/threshold/ed25519/yaoClient.js";
 import { walletCustodyEd25519ActiveClientMetadataV1, walletRecoveryEd25519ActiveClientMetadataV1 } from "../../core/signingEngine/walletCustody/ceremonyActiveClientMetadata.js";
 import { activateWalletRecoveryEd25519V1, admitWalletRecoveryEd25519V1, buildWalletSessionEd25519RecoveryAdmissionRequestV1, executeWalletRecoveryEd25519RoundV1 } from "../../core/signingEngine/walletCustody/walletRecoveryEd25519.js";
-import { parseSigningSessionSealKeyVersion } from "../../core/signingEngine/session/keyMaterialBrands.js";
+import { parseSigningSessionSealKeyVersion } from "../../shared-ts/src/threshold/keyMaterialBrands.js";
+import { isEmailOtpWalletAuthAuthority, parseWalletAuthAuthorityRef, walletAuthAuthorityRef } from "../../shared-ts/src/utils/walletAuthAuthority.js";
 import { clearLinkedDeviceEcdsaHolderMaterialsWasm, destroyLinkedDeviceEcdsaHolderMaterialsWasm, openEcdsaRoleLocalSigningMaterialWasm } from "../../core/signingEngine/threshold/crypto/ecdsaDerivationClientWasm.js";
 import { recoverWalletCustodyManifestV1 } from "../../core/signingEngine/walletCustody/walletRecoveryManifest.js";
 import { deleteWalletCustodyEd25519MaterialV1, loadWalletCustodyEd25519MaterialV1, persistWalletCustodyEd25519MaterialV1 } from "../../core/signingEngine/walletCustody/ed25519SeedMaterial.js";
-import { activeWalletSessionV1RecordsEqual } from "../../shared-ts/src/device-linking/activeWalletSession.js";
 import "../../shared-ts/src/device-linking/index.js";
+import { NEAR_ED25519_YAO_KEY_VERSION_V1 } from "../../shared-ts/src/utils/registrationSignerPlan.js";
 import { WalletSessionAuthorizationUpgradeRequiredError, walletSessionAuthorizations } from "../../core/indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
 import { IndexedDBManager } from "../../core/indexedDB/index.js";
 import { redactedPasskeyRegistrationCredential, serializeRegistrationCredentialWithPRF } from "../../core/signingEngine/webauthnAuth/credentials/helpers.js";
-import { IndexedDbEcdsaCapabilityManifestStore, importWalletCustodyEcdsaContinuity } from "../../core/indexedDB/seamsWalletDB/ecdsaCapabilityManifestStore.js";
+import { IndexedDbEcdsaCapabilityManifestStore } from "../../core/indexedDB/seamsWalletDB/ecdsaCapabilityManifestStore.js";
+import { importWalletCustodyEcdsaContinuity } from "../../core/indexedDB/seamsWalletDB/walletCustodyEcdsaContinuity.js";
 import { clearLinkedEcdsaHolderRuntimesV1, listLinkedEcdsaHolderRuntimesV1, removeLinkedEcdsaHolderRuntimeV1, resolveLinkedEcdsaHolderRuntimeV1 } from "../../core/signingEngine/session/material/linkedEcdsaHolderRuntime.js";
 import { SigningAuthPlanKind } from "../../core/signingEngine/stepUpConfirmation/types.js";
 import { fullWalletLoginRequired, invalidWalletSigningMaterial, isWalletSigningStateFailure, walletSigningMaterialBlockError } from "../../core/signingEngine/session/material/walletSigningStateFailure.js";
@@ -1109,11 +1111,9 @@ var BrowserSigningSurface = class {
 			getNearSigningDeps: () => this.enginePorts.nearSigningDeps,
 			getEvmFamilySigningDeps: () => this.enginePorts.tempoSigningDeps
 		});
-		this.signingRuntime = signingRuntime;
 		runtimePortsForUiConfirm.current = signingRuntime.runtimePorts;
 		const ecdsaExportArtifactStore = signingRuntime.state.ecdsaSessions;
 		this.runtimePorts = signingRuntime.runtimePorts;
-		this.thresholdEcdsaExportArtifactByLane = signingRuntime.state.ecdsaSessions.exportArtifactsByLane;
 		const stepUpRuntime = createBrowserStepUpRuntime({
 			seamsWebConfigs: this.seamsWebConfigs,
 			touchIdPrompt: this.touchIdPrompt,
@@ -1564,9 +1564,6 @@ var BrowserSigningSurface = class {
 				throw new Error("Unsupported Ed25519 public capability auth method");
 		}
 	}
-	hasActiveNearEd25519YaoMaterial(args) {
-		return this.enginePorts.ed25519YaoActiveClients.resolve(args) !== null;
-	}
 	async readPersistedAvailableSigningLanes(args) {
 		return await readPersistedAvailableSigningLanes(this.sessionPublicDeps, args);
 	}
@@ -1699,15 +1696,16 @@ var BrowserSigningSurface = class {
 		return { requestOperation: requestWalletCustodyCeremonyOperation.bind(void 0, workerContext) };
 	}
 	/**
-	* Refactor 103 zero-prompt handoff: parks the wallet custody seed inside the
-	* ceremony worker for the lifetime of the just-activated owner Wallet
-	* Session, reusing the factor secret this registration or unlock already
-	* collected. Failure is absorbed: the wallet stays usable, and device
-	* linking fails closed with `wallet_unlock_required` until the next unlock.
+	* Parks the wallet custody seed inside the ceremony worker for the lifetime of
+	* the just-activated owner Wallet Session, reusing the factor secret this
+	* registration or unlock already collected. Failure is absorbed: the wallet
+	* stays usable, and device linking fails closed with `wallet_unlock_required`
+	* until the next unlock.
 	*/
 	async establishUnlockedWalletEd25519ExportRootCapabilityV1(input) {
 		try {
-			if (!isWalletCustodySeedBinding(input.existingEnvelope.binding)) return;
+			const binding = input.existingEnvelope.binding;
+			if (!isWalletCustodySeedBinding(binding) && binding.kind !== "ed25519_yao_client_root_v1") return;
 			if (input.existingEnvelope.factor.kind !== "passkey") throw new Error("unlocked export-root capability requires a passkey envelope factor");
 			const existingFactorSecret = base64UrlDecode(input.passkeyPrfFirstB64u);
 			try {
@@ -1727,7 +1725,7 @@ var BrowserSigningSurface = class {
 		}
 	}
 	/**
-	* Stores a resealed pre-109C envelope under the method that opened it.
+	* Stores the reseal of an unbound envelope under the method that opened it.
 	*
 	* Absorbed the same way establishment is, and for the same reason: the V2 row
 	* still opens the wallet, so a failure here costs a retry at the next unlock
@@ -3517,8 +3515,8 @@ var BrowserSigningSurface = class {
 		}, args.walletSession, args.providerSubjectId, activation);
 	}
 	/**
-	* R109C: what an owner authority needs to have its Ed25519 runtime built
-	* inside the unlock that verifies its factor.
+	* What an owner authority needs to have its Ed25519 runtime built inside the
+	* unlock that verifies its factor.
 	*
 	* Assembled here rather than by the caller because every field is read off
 	* the exact authority projection - the identity, its runtime policy scope,
@@ -3560,7 +3558,7 @@ var BrowserSigningSurface = class {
 		};
 	}
 	/**
-	* R109C: activate the runtime an owner authority's unlock built.
+	* Activate the runtime an owner authority's unlock built.
 	*
 	* The identity it is checked against comes from the same authority projection
 	* that produced the unlock request, not from the bootstrap being checked -

package/dist/esm/SeamsWeb/walletIframe/client/progress/on-events-progress-bus.js

@@ -104,10 +104,6 @@ var OnEventsProgressBus = class {
 		});
 		return false;
 	}
-	getStats(requestId) {
-		const sub = this.subs.get(requestId);
-		return sub ? sub.stats : null;
-	}
 	findSticky(requestId) {
 		const sub = this.subs.get(requestId);
 		if (sub && sub.sticky) return sub;

package/dist/esm/SeamsWeb/walletIframe/client/router.js

@@ -1,13 +1,14 @@
 import { parseMpcMaterialActivationRef } from "../../../shared-ts/src/utils/domainIds.js";
-import { walletIdFromString } from "../../../shared-ts/src/utils/registrationIntent.js";
 import { joinNormalizedUrl, stripTrailingSlashes, toBasePath } from "../../../shared-ts/src/utils/normalize.js";
 import { extractBorshBytesFromPlainSignedTx, isBoolean, isObject, isPlainSignedTransactionLike, stripFunctionsShallow } from "../../../shared-ts/src/utils/validation.js";
-import { parseLinkedDeviceListRequestV1, parseLinkedDeviceListResultV1, parseLinkedDeviceRevokeRequestV1, parseLinkedDeviceRevokeResultV1, parseWalletSessionOperationCredentialV1 } from "../../../shared-ts/src/device-linking/parsers.js";
+import { parseWalletSessionOperationCredentialV1 } from "../../../shared-ts/src/device-linking/activeWalletSession.js";
 import { AccountSyncEventPhase, KeyExportEventPhase, LinkDeviceEventPhase, RegistrationEventPhase, SigningEventPhase, UnlockEventPhase, classifyLinkDeviceFlowEvent, createAccountSyncFlowEvent, createKeyExportFlowEvent, createLinkDeviceFlowEvent, createRegistrationFlowEvent, createSigningFlowEvent, createUnlockFlowEvent, isWalletFlowEvent, parseNearProvisioningState, parseSdkLifecycleEvent } from "../../../core/types/sdkSentEvents.js";
+import { walletIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
 import { cloneResolvedChainConfig } from "../../../core/config/chains.js";
 import { thresholdEcdsaChainTargetsEqual, toWalletId } from "../../../core/signingEngine/interfaces/ecdsaChainTarget.js";
 import { parseExactEcdsaSigningLaneIdentity, parseExactEd25519ExportMaterialIdentity } from "../../../core/signingEngine/session/identity/exactSigningLaneIdentity.js";
 import { secureRandomBase36 } from "../../../shared-ts/src/utils/secureRandomId.js";
+import { parseLinkedDeviceListRequestV1, parseLinkedDeviceListResultV1, parseLinkedDeviceRevokeRequestV1, parseLinkedDeviceRevokeResultV1 } from "../../../shared-ts/src/device-linking/deviceManagement.js";
 import "../../../shared-ts/src/device-linking/index.js";
 import { toError } from "../../../shared-ts/src/utils/errors.js";
 import { TransactionReviewError, assertTransactionReviewValid, parseTransactionReviewState, reviewedConfirmationConfig, sameTransactionReviewIdentity, transactionReviewCancellationCode } from "../shared/transactionReview.js";
@@ -183,7 +184,7 @@ function documentCoordinateAuthMenuGeometry(geometry) {
 function publishHostedAuthMenuAnchorHeight(anchor, heightCssPx) {
 	if (!anchor?.isConnected || !Number.isFinite(heightCssPx) || heightCssPx <= 0) return;
 	const next = `${Math.round(heightCssPx)}px`;
-	if (anchor.style.getPropertyValue("--seams-auth-menu-height") === next) return;
+	if (anchor.style.getPropertyValue(HOSTED_AUTH_MENU_ANCHOR_HEIGHT_CSS_VAR) === next) return;
 	anchor.style.setProperty(HOSTED_AUTH_MENU_ANCHOR_HEIGHT_CSS_VAR, next);
 }
 function buildSignTempoIframePayload(payload) {

package/dist/esm/SeamsWeb/walletIframe/client/surface/geometry.js

@@ -13,13 +13,6 @@ function isFinitePositive(value) {
 function isFiniteNumber(value) {
 	return typeof value === "number" && Number.isFinite(value);
 }
-function isPlainRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
-function hasOnlyKeys(record, keys) {
-	const allowed = new Set(keys);
-	return Object.keys(record).every((key) => allowed.has(key));
-}
 function roundCssPx(value) {
 	return Math.max(0, Math.round(value));
 }
@@ -38,81 +31,6 @@ function normalizedViewport(viewport) {
 		offsetTopCssPx: viewport.offsetTopCssPx
 	};
 }
-function parseWalletIframeSurfaceViewport(value) {
-	if (!isPlainRecord(value)) return null;
-	if (!hasOnlyKeys(value, [
-		"widthCssPx",
-		"heightCssPx",
-		"offsetLeftCssPx",
-		"offsetTopCssPx"
-	]) || !isFinitePositive(value.widthCssPx) || !isFinitePositive(value.heightCssPx) || !isFiniteNumber(value.offsetLeftCssPx) || !isFiniteNumber(value.offsetTopCssPx)) return null;
-	return {
-		widthCssPx: value.widthCssPx,
-		heightCssPx: value.heightCssPx,
-		offsetLeftCssPx: value.offsetLeftCssPx,
-		offsetTopCssPx: value.offsetTopCssPx
-	};
-}
-function parseGeometryNumbers(record) {
-	if (!isFinitePositive(record.widthCssPx) || !isFinitePositive(record.heightCssPx) || !isFiniteNumber(record.topCssPx) || !isFiniteNumber(record.leftCssPx) || record.topCssPx < 0 || record.leftCssPx < 0) return null;
-	return {
-		widthCssPx: record.widthCssPx,
-		heightCssPx: record.heightCssPx,
-		topCssPx: record.topCssPx,
-		leftCssPx: record.leftCssPx
-	};
-}
-function parseWalletIframeSurfaceGeometry(value) {
-	if (!isPlainRecord(value) || typeof value.kind !== "string") return null;
-	if (value.kind === "hidden") return hasOnlyKeys(value, ["kind"]) ? { kind: "hidden" } : null;
-	if (value.kind === "provisional_centered_modal" || value.kind === "centered_modal") {
-		if (!hasOnlyKeys(value, [
-			"kind",
-			"widthCssPx",
-			"heightCssPx",
-			"topCssPx",
-			"leftCssPx"
-		])) return null;
-		const geometry = parseGeometryNumbers(value);
-		return geometry ? {
-			kind: value.kind,
-			...geometry
-		} : null;
-	}
-	if (value.kind === "provisional_bottom_drawer" || value.kind === "bottom_drawer") {
-		if (!hasOnlyKeys(value, [
-			"kind",
-			"edge",
-			"widthCssPx",
-			"heightCssPx",
-			"topCssPx",
-			"leftCssPx"
-		]) || value.edge !== "bottom") return null;
-		const geometry = parseGeometryNumbers(value);
-		return geometry ? {
-			kind: value.kind,
-			edge: "bottom",
-			...geometry
-		} : null;
-	}
-	if (value.kind === "viewport_fallback") {
-		if (!hasOnlyKeys(value, [
-			"kind",
-			"reason",
-			"widthCssPx",
-			"heightCssPx",
-			"topCssPx",
-			"leftCssPx"
-		]) || value.reason !== "small_visual_viewport" && value.reason !== "measurement_unavailable") return null;
-		const geometry = parseGeometryNumbers(value);
-		return geometry ? {
-			kind: value.kind,
-			reason: value.reason,
-			...geometry
-		} : null;
-	}
-	return null;
-}
 function fallbackGeometry(viewport, reason) {
 	const widthCssPx = Math.max(1, viewport.widthCssPx - 32);
 	const heightCssPx = Math.max(1, viewport.heightCssPx - 32);
@@ -126,7 +44,7 @@ function fallbackGeometry(viewport, reason) {
 	};
 }
 function viewportCannotFitCompactSurface(viewport) {
-	return viewport.widthCssPx - 32 < 280 || viewport.heightCssPx - 32 < 280;
+	return viewport.widthCssPx - 32 < WALLET_IFRAME_SURFACE_MIN_COMPACT_WIDTH_CSS_PX || viewport.heightCssPx - 32 < WALLET_IFRAME_SURFACE_MIN_COMPACT_HEIGHT_CSS_PX;
 }
 function centeredGeometry(viewport, widthCssPx, heightCssPx, kind) {
 	return {
@@ -161,22 +79,22 @@ function fullViewportDrawerGeometry(viewport, kind) {
 function isDrawerPresentation(presentation) {
 	return presentation.kind === "drawer";
 }
-function provisionalWalletIframeSurfaceGeometry(presentation, viewportInput, maxModalWidthCssPx = 560) {
+function provisionalWalletIframeSurfaceGeometry(presentation, viewportInput, maxModalWidthCssPx = WALLET_IFRAME_SURFACE_MAX_MODAL_WIDTH_CSS_PX) {
 	const viewport = normalizedViewport(viewportInput);
 	if (isDrawerPresentation(presentation)) return fullViewportDrawerGeometry(viewport, "provisional_bottom_drawer");
 	if (viewportCannotFitCompactSurface(viewport)) return fallbackGeometry(viewport, "small_visual_viewport");
 	const availableWidth = viewport.widthCssPx - 32;
 	const availableHeight = viewport.heightCssPx - 32;
-	return centeredGeometry(viewport, clamp(maxModalWidthCssPx, 280, Math.min(maxModalWidthCssPx, availableWidth)), Math.min(320, availableHeight), "provisional_centered_modal");
+	return centeredGeometry(viewport, clamp(maxModalWidthCssPx, WALLET_IFRAME_SURFACE_MIN_COMPACT_WIDTH_CSS_PX, Math.min(maxModalWidthCssPx, availableWidth)), Math.min(320, availableHeight), "provisional_centered_modal");
 }
-function measuredWalletIframeSurfaceGeometry(presentation, viewportInput, measurement, maxModalWidthCssPx = 560) {
+function measuredWalletIframeSurfaceGeometry(presentation, viewportInput, measurement, maxModalWidthCssPx = WALLET_IFRAME_SURFACE_MAX_MODAL_WIDTH_CSS_PX) {
 	const viewport = normalizedViewport(viewportInput);
 	if (isDrawerPresentation(presentation)) return fullViewportDrawerGeometry(viewport, "bottom_drawer");
 	if (!isFinitePositive(measurement.widthCssPx) || !isFinitePositive(measurement.heightCssPx)) throw new Error("Wallet iframe surface measurement is invalid");
 	if (viewportCannotFitCompactSurface(viewport)) return fallbackGeometry(viewport, "small_visual_viewport");
 	const availableWidth = viewport.widthCssPx - 32;
 	const availableHeight = viewport.heightCssPx - 32;
-	return centeredGeometry(viewport, clamp(measurement.widthCssPx, 280, Math.min(maxModalWidthCssPx, availableWidth)), clamp(measurement.heightCssPx, 1, availableHeight), "centered_modal");
+	return centeredGeometry(viewport, clamp(measurement.widthCssPx, WALLET_IFRAME_SURFACE_MIN_COMPACT_WIDTH_CSS_PX, Math.min(maxModalWidthCssPx, availableWidth)), clamp(measurement.heightCssPx, 1, availableHeight), "centered_modal");
 }
 function resolveWalletIframeSurfaceGeometry(args) {
 	const measurement = args.measurement;
@@ -208,6 +126,6 @@ function walletIframeSurfaceGeometryEqual(left, right, epsilonCssPx = 1) {
 	return Math.abs(left.widthCssPx - right.widthCssPx) < epsilonCssPx && Math.abs(left.heightCssPx - right.heightCssPx) < epsilonCssPx && Math.abs(left.topCssPx - right.topCssPx) < epsilonCssPx && Math.abs(left.leftCssPx - right.leftCssPx) < epsilonCssPx;
 }
 //#endregion
-export { WALLET_IFRAME_SURFACE_INSET_CSS_PX, WALLET_IFRAME_SURFACE_MAX_MODAL_WIDTH_CSS_PX, WALLET_IFRAME_SURFACE_MIN_COMPACT_HEIGHT_CSS_PX, WALLET_IFRAME_SURFACE_MIN_COMPACT_WIDTH_CSS_PX, WALLET_IFRAME_SURFACE_PROVISIONAL_HEIGHT_CSS_PX, anchorWalletIframeModalGeometry, isWalletIframeModalGeometry, measuredWalletIframeSurfaceGeometry, parseWalletIframeSurfaceGeometry, parseWalletIframeSurfaceViewport, provisionalWalletIframeSurfaceGeometry, resolveWalletIframeSurfaceGeometry, walletIframeSurfaceGeometryEqual };
+export { WALLET_IFRAME_SURFACE_INSET_CSS_PX, WALLET_IFRAME_SURFACE_PROVISIONAL_HEIGHT_CSS_PX, anchorWalletIframeModalGeometry, isWalletIframeModalGeometry, measuredWalletIframeSurfaceGeometry, provisionalWalletIframeSurfaceGeometry, resolveWalletIframeSurfaceGeometry, walletIframeSurfaceGeometryEqual };
 
 //# sourceMappingURL=geometry.js.map

package/dist/esm/SeamsWeb/walletIframe/host/ui/auth-menu/AuthMenuSurface.js

@@ -940,7 +940,7 @@ var AuthMenuSurface = class extends Component {
 			})
 		}) });
 	}
-	renderOtherOptions(viewModel) {
+	renderOtherOptions(_viewModel) {
 		return /* @__PURE__ */ jsx(Fragment$1, { children: /* @__PURE__ */ jsxs("div", {
 			class: "seams-scan-device-row",
 			children: [/* @__PURE__ */ jsx("div", {

package/dist/esm/SeamsWeb/walletIframe/shared/exactSessionState.js

@@ -1,13 +1,15 @@
 import { parseCapabilityInstanceRef, parseWalletId } from "../../../shared-ts/src/utils/domainIds.js";
 import { parseWalletSessionAuthorizationId, parseWalletSessionId } from "../../../shared-ts/src/authorization/capabilityKinds.js";
-import { parseNearEd25519SigningKeyId } from "../../../shared-ts/src/utils/registrationIntent.js";
-import { parseWalletAuthAuthorityRef } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
+import { requireArray, requireNonEmptyString, requireRecordCopy } from "../../../shared-ts/src/utils/validation.js";
+import "../../../shared-ts/src/device-linking/activeWalletSession.js";
 import { toAccountId } from "../../../core/types/accountIds.js";
 import { isWalletAuthMethod } from "../../../shared-ts/src/utils/signerDomain.js";
+import { parseNearEd25519SigningKeyId } from "../../../shared-ts/src/utils/registrationIds.js";
 import { walletAuthMethodBindingFromRaw } from "../../../shared-ts/src/utils/walletCapabilityBindings.js";
 import { thresholdEcdsaChainTargetFromRequest } from "../../../core/signingEngine/interfaces/ecdsaChainTarget.js";
 import { parseSignerSlot } from "../../../shared-ts/src/utils/signerSlot.js";
 import { parseEcdsaThresholdKeyId } from "../../../core/signingEngine/session/keyMaterialBrands.js";
+import { parseWalletAuthAuthorityRef } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { NonceCoordinatorDegradationReason, NonceCoordinatorFallback, NonceLeaseState } from "../../../core/signingEngine/nonce/nonceTypes.js";
 //#region src/SeamsWeb/walletIframe/shared/exactSessionState.ts
 var WalletIframeSessionExpiredRequestError = class extends Error {
@@ -118,7 +120,7 @@ function parseWalletIframeExactSessionLockResult(value) {
 	}
 }
 function parseWalletSessionAppIdentity(value) {
-	const record = requireRecord(value, "Wallet Session appIdentity");
+	const record = requireRecordCopy(value, "Wallet Session appIdentity");
 	switch (record.kind) {
 		case "anonymous": return { kind: "anonymous" };
 		case "unresolvable": return {
@@ -145,7 +147,7 @@ function parseWalletSessionAppIdentity(value) {
 	}
 }
 function parseWalletSessionCapabilityProjection(value) {
-	const record = requireRecord(value, "Wallet Session capabilityProjection");
+	const record = requireRecordCopy(value, "Wallet Session capabilityProjection");
 	switch (record.kind) {
 		case "not_requested": return { kind: "not_requested" };
 		case "unresolvable": return {
@@ -166,7 +168,7 @@ function parseWalletSessionCapabilityProjection(value) {
 	}
 }
 function parseWalletUnlockSubjectSet(value) {
-	const record = requireRecord(value, "wallet unlock subject set");
+	const record = requireRecordCopy(value, "wallet unlock subject set");
 	if (record.kind !== "wallet_unlock_subject_set") throw new Error("Wallet unlock subject set kind is invalid");
 	const walletId = requireWalletId(record.walletId);
 	const subjects = requireNonEmptyArray(record.subjects, "wallet unlock subjects").map(parseWalletUnlockSubject);
@@ -180,7 +182,7 @@ function parseWalletUnlockSubjectSet(value) {
 	};
 }
 function parseWalletUnlockSubject(value) {
-	const record = requireRecord(value, "wallet unlock subject");
+	const record = requireRecordCopy(value, "wallet unlock subject");
 	const walletId = requireWalletId(record.walletId);
 	switch (record.kind) {
 		case "near_ed25519_wallet": {
@@ -211,7 +213,7 @@ function parseWalletUnlockSubject(value) {
 	}
 }
 function parseWalletSessionCapabilityReadiness(value) {
-	const record = requireRecord(value, "Wallet Session capability readiness");
+	const record = requireRecordCopy(value, "Wallet Session capability readiness");
 	switch (record.kind) {
 		case "near_ed25519": return {
 			kind: "near_ed25519",
@@ -237,7 +239,7 @@ function parseEcdsaWalletUnlockSubject(value) {
 	return subject;
 }
 function parseEcdsaCapabilityTargets(value) {
-	const record = requireRecord(value, "ECDSA capability targets");
+	const record = requireRecordCopy(value, "ECDSA capability targets");
 	switch (record.kind) {
 		case "no_configured_target": return { kind: "no_configured_target" };
 		case "configured_targets": {
@@ -253,14 +255,14 @@ function parseEcdsaCapabilityTargets(value) {
 	}
 }
 function parseEcdsaCapabilityTargetLane(value) {
-	const record = requireRecord(value, "ECDSA capability target lane");
+	const record = requireRecordCopy(value, "ECDSA capability target lane");
 	return {
-		chainTarget: thresholdEcdsaChainTargetFromRequest(requireRecord(record.chainTarget, "ECDSA chain target")),
+		chainTarget: thresholdEcdsaChainTargetFromRequest(requireRecordCopy(record.chainTarget, "ECDSA chain target")),
 		readiness: parseWalletSessionCapabilityLaneReadiness(record.readiness)
 	};
 }
 function parseWalletSessionCapabilityLaneReadiness(value) {
-	const record = requireRecord(value, "Wallet Session capability lane readiness");
+	const record = requireRecordCopy(value, "Wallet Session capability lane readiness");
 	switch (record.kind) {
 		case "ready": return { kind: "ready" };
 		case "pending": return {
@@ -310,10 +312,10 @@ function walletIdFromAuthBinding(binding) {
 }
 function parseNullableClientUserData(value, expectedWalletId) {
 	if (value === null) return null;
-	const record = requireRecord(value, "Wallet Session userData");
+	const record = requireRecordCopy(value, "Wallet Session userData");
 	const walletId = requireWalletId(record.walletId);
 	if (walletId !== expectedWalletId) throw new Error("Wallet Session userData wallet identity disagrees");
-	const passkeyCredential = requireRecord(record.passkeyCredential, "passkeyCredential");
+	const passkeyCredential = requireRecordCopy(record.passkeyCredential, "passkeyCredential");
 	const signerSlot = parseSignerSlot(record.signerSlot);
 	if (signerSlot === null) throw new Error("Wallet Session userData signerSlot is invalid");
 	const authMethod = parseNullableWalletAuthMethod(record.authMethod);
@@ -343,10 +345,10 @@ function parseNullableWalletAuthMethod(value) {
 	return value;
 }
 function parseUserPreferences(value) {
-	const record = requireRecord(value, "Wallet Session user preferences");
+	const record = requireRecordCopy(value, "Wallet Session user preferences");
 	if (typeof record.useRelayer !== "boolean") throw new Error("Wallet Session user preferences useRelayer is invalid");
 	if (record.useNetwork !== "testnet" && record.useNetwork !== "mainnet") throw new Error("Wallet Session user preferences useNetwork is invalid");
-	const confirmation = requireRecord(record.confirmationConfig, "Wallet Session confirmationConfig");
+	const confirmation = requireRecordCopy(record.confirmationConfig, "Wallet Session confirmationConfig");
 	if (confirmation.uiMode !== "none" && confirmation.uiMode !== "modal" && confirmation.uiMode !== "drawer") throw new Error("Wallet Session confirmationConfig uiMode is invalid");
 	if (confirmation.behavior !== "requireClick" && confirmation.behavior !== "skipClick") throw new Error("Wallet Session confirmationConfig behavior is invalid");
 	const autoProceedDelay = confirmation.autoProceedDelay === void 0 ? void 0 : requireNonNegativeSafeInteger(confirmation.autoProceedDelay, "confirmationConfig.autoProceedDelay");
@@ -362,8 +364,8 @@ function parseUserPreferences(value) {
 }
 function parseNullableNonceDiagnostics(value) {
 	if (value === null) return null;
-	const record = requireRecord(value, "Wallet Session nonce diagnostics");
-	const near = requireRecord(record.near, "near nonce diagnostics");
+	const record = requireRecordCopy(value, "Wallet Session nonce diagnostics");
+	const near = requireRecordCopy(record.near, "near nonce diagnostics");
 	return {
 		leaseCount: requireNonNegativeSafeInteger(record.leaseCount, "nonce leaseCount"),
 		leasesByState: parseRequiredNonceStateCounts(record.leasesByState),
@@ -381,7 +383,7 @@ function parseNullableNonceDiagnostics(value) {
 	};
 }
 function parseNonceMetrics(value) {
-	const record = requireRecord(value, "nonce metrics");
+	const record = requireRecordCopy(value, "nonce metrics");
 	return {
 		atMs: requireNonNegativeSafeInteger(record.atMs, "nonce metrics atMs"),
 		...record.accountId === void 0 ? {} : { accountId: requireNonEmptyString(record.accountId, "nonce metrics accountId") },
@@ -402,7 +404,7 @@ function parseNonceMetrics(value) {
 	};
 }
 function parseNonceOutcomeMetrics(value) {
-	const record = requireRecord(value, "nonce outcome metrics");
+	const record = requireRecordCopy(value, "nonce outcome metrics");
 	return {
 		droppedCount: requireNonNegativeSafeInteger(record.droppedCount, "droppedCount"),
 		replacedCount: requireNonNegativeSafeInteger(record.replacedCount, "replacedCount"),
@@ -416,7 +418,7 @@ function parseNonceOutcomeMetrics(value) {
 	};
 }
 function parseStringCountMap(value, label) {
-	const record = requireRecord(value, label);
+	const record = requireRecordCopy(value, label);
 	const parsed = {};
 	for (const [key, count] of Object.entries(record)) {
 		if (!key) throw new Error(`${label} key must be non-empty`);
@@ -425,7 +427,7 @@ function parseStringCountMap(value, label) {
 	return parsed;
 }
 function parseNonceCoordinationWarning(value) {
-	const record = requireRecord(value, "nonce coordination warning");
+	const record = requireRecordCopy(value, "nonce coordination warning");
 	return {
 		reason: requireNonceDegradationReason(record.reason),
 		...record.laneFamily === void 0 ? {} : { laneFamily: requireNonceLaneFamily(record.laneFamily) },
@@ -435,7 +437,7 @@ function parseNonceCoordinationWarning(value) {
 	};
 }
 function parseNonceDiagnosticLane(value) {
-	const record = requireRecord(value, "nonce diagnostic lane");
+	const record = requireRecordCopy(value, "nonce diagnostic lane");
 	const family = requireNonceLaneFamily(record.family);
 	const chain = record.chain === void 0 ? void 0 : requireEvmNonceChain(record.chain);
 	if (family === "near" && (chain !== void 0 || record.chainId !== void 0)) throw new Error("Near nonce diagnostic lane cannot contain EVM chain identity");
@@ -450,7 +452,7 @@ function parseNonceDiagnosticLane(value) {
 	};
 }
 function parseRequiredNonceStateCounts(value) {
-	const record = requireRecord(value, "nonce state counts");
+	const record = requireRecordCopy(value, "nonce state counts");
 	return {
 		[NonceLeaseState.Reserved]: requireNonceStateCount(record, NonceLeaseState.Reserved),
 		[NonceLeaseState.Released]: requireNonceStateCount(record, NonceLeaseState.Released),
@@ -466,7 +468,7 @@ function parseRequiredNonceStateCounts(value) {
 	};
 }
 function parsePartialNonceStateCounts(value) {
-	const record = requireRecord(value, "nonce state counts");
+	const record = requireRecordCopy(value, "nonce state counts");
 	return {
 		...record[NonceLeaseState.Reserved] === void 0 ? {} : { [NonceLeaseState.Reserved]: requireNonceStateCount(record, NonceLeaseState.Reserved) },
 		...record[NonceLeaseState.Released] === void 0 ? {} : { [NonceLeaseState.Released]: requireNonceStateCount(record, NonceLeaseState.Released) },
@@ -561,24 +563,12 @@ function requireFailedCapabilityLaneReason(value) {
 		default: throw new Error("Failed capability lane reason is invalid");
 	}
 }
-function requireRecord(value, label) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label} must be an object`);
-	return Object.fromEntries(Object.entries(value));
-}
-function requireArray(value, label) {
-	if (!Array.isArray(value)) throw new Error(`${label} must be an array`);
-	return value;
-}
 function requireNonEmptyArray(value, label) {
 	const values = requireArray(value, label);
 	const first = values[0];
 	if (first === void 0) throw new Error(`${label} must be non-empty`);
 	return [first, ...values.slice(1)];
 }
-function requireNonEmptyString(value, label) {
-	if (typeof value !== "string" || !value.trim()) throw new Error(`${label} must be a non-empty string`);
-	return value.trim();
-}
 function requireNullableString(value, label) {
 	if (value === null) return null;
 	return requireNonEmptyString(value, label);

package/dist/esm/SeamsWeb/walletIframe/shared/messages.js

@@ -1,6 +1,8 @@
 import { parseWalletAuthMethodId, parseWalletId } from "../../../shared-ts/src/utils/domainIds.js";
 import { isPlainObject } from "../../../shared-ts/src/utils/validation.js";
 import { walletIframeRequestIdFromBoundary } from "../../../core/types/walletIframeIdentity.js";
+//#region src/SeamsWeb/walletIframe/shared/messages.ts
+const WALLET_IFRAME_SURFACE_MEASUREMENT_MAX_CSS_PX = 4096;
 const HOSTED_AUTH_MENU_ERROR_EVENT = "seams:hosted-auth-menu-error";
 const DEFAULT_HOSTED_AUTH_MENU_COPY = {
 	login: {
@@ -40,7 +42,7 @@ function positiveSafeSequence(value) {
 	return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : null;
 }
 function boundedPositiveCssPx(value) {
-	return typeof value === "number" && Number.isFinite(value) && value > 0 && value <= 4096 ? value : null;
+	return typeof value === "number" && Number.isFinite(value) && value > 0 && value <= WALLET_IFRAME_SURFACE_MEASUREMENT_MAX_CSS_PX ? value : null;
 }
 function parseWalletIframeSurfaceMeasurement(value) {
 	const record = recordFromBoundary(value);

package/dist/esm/SeamsWeb/walletIframe/shared/transactionReview.js

@@ -1,3 +1,4 @@
+import { isPlainObject } from "../../../shared-ts/src/utils/validation.js";
 //#region src/SeamsWeb/walletIframe/shared/transactionReview.ts
 var TransactionReviewError = class extends Error {
 	constructor(code, message, options) {
@@ -6,9 +7,6 @@ var TransactionReviewError = class extends Error {
 		this.name = "TransactionReviewError";
 	}
 };
-function isRecord(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
-}
 function onlyKeys(value, keys) {
 	for (const key of Object.keys(value)) if (!keys.includes(key)) return false;
 	return true;
@@ -26,7 +24,7 @@ function parseIdentity(value) {
 	});
 }
 function parseTransactionReviewState(value) {
-	if (!isRecord(value) || !onlyKeys(value, [
+	if (!isPlainObject(value) || !onlyKeys(value, [
 		"connectionId",
 		"requestId",
 		"surfaceId",

package/dist/esm/advanced.js

@@ -1,11 +1,12 @@
 import { parseWebAuthnRpId } from "./shared-ts/src/utils/domainIds.js";
+import { normalizeLowercaseString, normalizeTrimmedString } from "./shared-ts/src/utils/normalize.js";
 import { base64UrlDecode, base64UrlEncode } from "./shared-ts/src/utils/base64.js";
 import "./shared-ts/src/utils/encoders.js";
-import { normalizeLowercaseString, normalizeTrimmedString } from "./shared-ts/src/utils/normalize.js";
 import { nearAccountRefFromAccountId, thresholdEcdsaChainTargetFromConfig, toWalletId, walletIdFromWalletProfile, walletSessionRefFromSession } from "./core/signingEngine/interfaces/ecdsaChainTarget.js";
 import { DEFAULT_WALLET_SESSION_REMAINING_USES, DEFAULT_WALLET_SESSION_TTL_MS, MAX_WALLET_SESSION_REMAINING_USES, MAX_WALLET_SESSION_TTL_MS } from "./shared-ts/src/threshold/sessionPolicy.js";
 import { keccak256Bytes } from "./shared-ts/src/utils/keccak.js";
-import { MinimalNearClient, encodeSignedTransactionBase64 } from "./core/rpcClients/near/NearClient.js";
+import { encodeSignedTransactionBase64 } from "./shared-ts/src/near/nearClient.js";
+import { MinimalNearClient } from "./core/rpcClients/near/NearClient.js";
 import { parseRpcHexQuantity } from "./shared-ts/src/utils/evmRpcResults.js";
 import { createEvmClient } from "./core/rpcClients/evm/EvmClient.js";
 import { TEMPO_ALPHA_USD_FEE_TOKEN, TEMPO_FEE_MANAGER_ABI, TEMPO_FEE_MANAGER_CONTRACT, TEMPO_SET_USER_TOKEN_SELECTOR, TEMPO_TOKEN_CURRENCY_SELECTOR, TEMPO_TOKEN_PAUSED_SELECTOR, TEMPO_USER_TOKENS_SELECTOR, buildTempoSetUserTokenCall, buildTempoSetUserTokenRequest, decodeTempoUserTokenResult, encodeTempoSetUserTokenCalldata, encodeTempoUserTokensCalldata, readTempoFeeTokenPreference, validateTempoFeeToken } from "./core/signingEngine/chains/tempo/feeToken.js";

package/dist/esm/core/accountData/near/keyMaterial.js

@@ -1,5 +1,5 @@
-import { ensureEd25519Prefix } from "../../../shared-ts/src/utils/near.js";
 import { normalizeTrimmedString } from "../../../shared-ts/src/utils/normalize.js";
+import { ensureEd25519Prefix } from "../../../shared-ts/src/utils/near.js";
 import "../../../shared-ts/src/utils/validation.js";
 import { buildThresholdEd25519Participants2pV1, parseThresholdEd25519ParticipantsV1 } from "../../../shared-ts/src/threshold/participants.js";
 import { buildNearAccountRefs } from "./accountRefs.js";
@@ -166,6 +166,6 @@ async function storeNearThresholdKeyMaterial(deps, input) {
 	await storeNearKeyMaterial(deps, mappedInput);
 }
 //#endregion
-export { getNearThresholdKeyMaterial, storeNearKeyMaterial, storeNearThresholdKeyMaterial };
+export { getNearThresholdKeyMaterial, storeNearThresholdKeyMaterial };
 
 //# sourceMappingURL=keyMaterial.js.map