@seams/wallet 0.6.2 → 0.7.1

package/dist/types/wallet/src/SeamsWeb/operations/registration/registrationTiming.d.ts

@@ -1,9 +1,9 @@
 /**
  * Registration timing, diagnostics, and span accounting.
  *
- * Moved verbatim out of `registration.ts` so the registration flow itself is
- * readable. This module records and shapes measurements; it makes no protocol
- * decisions and holds no registration state.
+ * Moved out of `registration.ts` so the registration flow itself is readable.
+ * This module records and shapes measurements; it makes no protocol decisions
+ * and holds no registration state.
  *
  * `assertNever` lives here despite its generic name because its message names
  * a timing branch — it is a timing helper, not a general utility.
@@ -13,24 +13,32 @@ import type { RegistrationHooksOptions, RegistrationTimingSpanV1 } from '../../.
 import type { WorkerResourceWarmupDiagnostics } from '../../../core/signingEngine/assembly/warmup';
 import type { WarmSessionMaterialWriteDiagnosticBucket } from '../../../core/signingEngine/session/passkey/warmSessionMaterialWriter';
 import type { EmailOtpYaoPrewarmOutcome } from '../../../core/signingEngine/workerManager/workerTypes';
-import type { RegistrationAuthMethodInput, RegistrationSignerPlan } from '../../../../../shared-ts/src/utils/registrationIntent';
+import type { RegistrationSignerPlan } from '../../../../../shared-ts/src/utils/registrationSignerPlan';
+import type { RegistrationAuthMethodInput } from '../../../../../shared-ts/src/utils/registrationAuthMethodInput';
 import { type WalletRegistrationRouteDiagnostics } from '../../../core/rpcClients/relayer/walletRegistration';
 import { type PasskeyRegistrationAuthorityDiagnostics } from '../authMethods/passkey/registrationAuthority';
 import { type RouterAbTraceContextV1 } from '../../../../../shared-ts/src/utils/routerAbTraceContext';
 export declare const REGISTRATION_TIMING_LABEL = "[Registration] wallet timing summary";
+type TimingBucketRecorder = {
+    record: (bucket: RegistrationTimingBucketName, durationMs: number) => void;
+};
 type StrictEcdsaServerTimingLeg = 'respond' | 'activate';
 /** Records fixed timing buckets and reports only whether the raw header arrived. */
-export declare function recordStrictEcdsaServerTimingBuckets(recorder: {
-    record: (bucket: RegistrationTimingBucketName, durationMs: number) => void;
-} | null, leg: StrictEcdsaServerTimingLeg, header: string | null): void;
-export declare function recordRegistrationServerTimingBuckets(recorder: {
-    record: (bucket: RegistrationTimingBucketName, durationMs: number) => void;
-} | null, header: string | null): void;
+export declare function recordStrictEcdsaServerTimingBuckets(recorder: TimingBucketRecorder | null, leg: StrictEcdsaServerTimingLeg, header: string | null): void;
+/**
+ * Folds a raw `Server-Timing` header into the registration timing recorder.
+ * Shared by the Yao and ECDSA paths; unrecognised metrics are dropped.
+ */
+export declare function recordRegistrationServerTimingBuckets(recorder: TimingBucketRecorder | null, header: string | null): void;
+/**
+ * Parses a `Server-Timing` header into bucket durations. Diagnostics only: a
+ * malformed or absent header yields an empty list and never throws.
+ */
 export declare function parseYaoServerTimingBuckets(header: string | null | undefined): ReadonlyArray<readonly [RegistrationTimingBucketName, number]>;
 export declare const WALLET_IFRAME_TRANSPORT_TIMING_LABEL = "[Registration] wallet iframe transport timing summary";
 export declare function emitNearRegistrationTiming(input: {
     ceremonyId: string;
-    stage: 'early_admission' | 'custody_join' | 'server_finalize' | 'local_publication' | 'session_install' | 'session_seal_preparation' | 'session_seal_preparation_wait' | 'session_hydration_wait' | 'session_hydration' | 'signer_activation' | 'durable_ready' | 'provisioning_total' | 'registration_total';
+    stage: `near_only.${'setup' | 'authentication' | 'respond' | 'custody' | 'backup_and_checkpoint' | 'activate' | 'provision_checkpoint' | 'finalize' | 'publication' | 'session_hydration' | 'material_activation' | 'export_capability' | 'wallet_ready'}` | 'early_admission' | 'custody_join' | 'server_finalize' | 'local_publication' | 'session_install' | 'session_seal_preparation' | 'session_seal_preparation_wait' | 'session_hydration_wait' | 'session_hydration' | 'signer_activation' | 'durable_ready' | 'provisioning_total' | 'registration_total';
     startedAt: number;
     outcome: 'success' | 'failure';
 }): void;
@@ -41,136 +49,18 @@ type RegistrationTimingSignerSet = {
     kind: 'signer_set';
     branches: readonly RegistrationTimingSignerBranch[];
 };
-type RegistrationTimingBucketValues = {
-    registrationWarmupMs: number;
-    registrationWarmupWaitMs: number;
-    registrationWarmupAuthenticatedWalletStateMs: number;
-    registrationWarmupNoncePrefetchMs: number;
-    registrationWarmupKeyMaterialReadMs: number;
-    registrationWarmupUiConfirmPrewarmMs: number;
-    registrationWarmupSignerWorkerPrewarmMs: number;
-    registrationWarmupEmailOtpWorkerPrewarmMs: number;
-    registrationWarmupEmailOtpYaoWasmInitMs: number;
-    managedRegistrationGrantMs: number;
-    registrationIntentMs: number;
-    registrationIntentDigestMs: number;
-    authProofMs: number;
-    passkeyAuthConfirmationMs: number;
-    passkeyAuthPrfExtractionMs: number;
-    passkeyAuthCredentialRedactionMs: number;
-    passkeyAuthWorkerReadyMs: number;
-    passkeyAuthWorkerRequestRoundTripMs: number;
-    passkeyAuthWorkerResponseValidationMs: number;
-    passkeyAuthRequestSetupMs: number;
-    passkeyAuthPromptUserMs: number;
-    passkeyAuthPromptElementDefineMs: number;
-    passkeyAuthPromptMountMs: number;
-    passkeyAuthPromptHostFirstUpdateMs: number;
-    passkeyAuthPromptHostInteractiveMs: number;
-    passkeyAuthPromptConfirmEventMs: number;
-    passkeyAuthPromptDecisionWaitMs: number;
-    passkeyAuthCredentialCreateStartMs: number;
-    passkeyAuthCredentialCreateMs: number;
-    passkeyAuthCredentialSerializeMs: number;
-    passkeyAuthDuplicateRetryCount: number;
-    passkeyAuthMainThreadTotalMs: number;
-    emailOtpEnrollmentMaterialMs: number;
-    emailOtpYaoEnrollmentMaterialWaitMs: number;
-    emailOtpYaoWorkerRegistrationMs: number;
-    emailOtpYaoTotalMs: number;
-    yaoBranchTotalMs: number;
-    yaoAdmissionMs: number;
-    yaoClientSessionCreateMs: number;
-    yaoClientCompletionMs: number;
-    yaoServerCredentialDigestMs: number;
-    yaoServerRequestDigestMs: number;
-    yaoServerD1ClaimMs: number;
-    yaoServerRouterExecutionMs: number;
-    yaoServerResultReconstructionMs: number;
-    yaoServerD1TerminalCommitMs: number;
-    yaoServerRouterPreparePairMs: number;
-    yaoServerRouterVerifyReadinessMs: number;
-    yaoServerRouterRoleExecutionMs: number;
-    yaoServerRouterSigningWorkerDeliveryMs: number;
-    ecdsaRespondD1ClaimMs: number;
-    ecdsaRespondReconcileMs: number;
-    ecdsaRespondRouterMs: number;
-    ecdsaRespondD1CommitMs: number;
-    ecdsaRespondTotalMs: number;
-    ecdsaActivateD1ClaimMs: number;
-    ecdsaActivateReconcileMs: number;
-    ecdsaActivateRouterMs: number;
-    ecdsaActivateBootstrapMs: number;
-    ecdsaActivateSessionProvisionMs: number;
-    ecdsaActivateD1CommitMs: number;
-    ecdsaActivatePolicyLookupMs: number;
-    ecdsaActivateJwtMintMs: number;
-    ecdsaActivateTotalMs: number;
-    ecdsaRtAuthorizeMs: number;
-    ecdsaRtAdmissionMs: number;
-    ecdsaRtDeriversMs: number;
-    ecdsaRtDeriverAMs: number;
-    ecdsaRtDeriverBMs: number;
-    ecdsaRtCompletionMs: number;
-    ecdsaRtTotalMs: number;
-    ecdsaRtActSessionMs: number;
-    ecdsaRtActWorkerMs: number;
-    ecdsaRtActTotalMs: number;
-    ecdsaDeriverAParseMs: number;
-    ecdsaDeriverAPreloadMs: number;
-    ecdsaDeriverAExecuteMs: number;
-    ecdsaDeriverATotalMs: number;
-    ecdsaDeriverBParseMs: number;
-    ecdsaDeriverBPreloadMs: number;
-    ecdsaDeriverBExecuteMs: number;
-    ecdsaDeriverBTotalMs: number;
-    ecdsaSigningWorkerParseMs: number;
-    ecdsaSigningWorkerActivateMs: number;
-    ecdsaSigningWorkerTotalMs: number;
-    nearFinalizeAuthorityMs: number;
-    nearFinalizeFingerprintMs: number;
-    nearFinalizeSideEffectMs: number;
-    nearFinalizeCleanupMs: number;
-    nearFinalizeSessionProjectionMs: number;
-    nearFinalizeSessionSealMs: number;
-    nearFinalizeTotalMs: number;
-    walletRegisterStartMs: number;
-    ecdsaClientBootstrapMs: number;
-    ecdsaRegistrationTotalMs: number;
-    ecdsaRegistrationClientCreateMs: number;
-    ecdsaRegistrationGatewayRespondMs: number;
-    ecdsaRegistrationClientProofVerifyMs: number;
-    ecdsaRegistrationGatewayActivateMs: number;
-    ecdsaRegistrationClientActivationFinalizeMs: number;
-    emailOtpRecoveryCodeBackupMs: number;
-    walletRegisterFinalizeMs: number;
-    ecdsaRegistrationPersistenceMs: number;
-    ecdsaRegistrationSessionFinalizeMs: number;
-    ecdsaRegistrationLocalRecordPersistenceMs: number;
-    ecdsaRegistrationTargetCount: number;
-    ecdsaRegistrationClientFinalizeMs: number;
-    ecdsaRegistrationClientMaterialStoreMs: number;
-    ecdsaRegistrationServerBootstrapMs: number;
-    ecdsaRegistrationPasskeyBootstrapStoreMs: number;
-    ecdsaRegistrationRoleLocalRecordPersistenceMs: number;
-    ecdsaRegistrationWarmSessionHydrationMs: number;
-    ecdsaRegistrationWarmSessionWorkerReadyMs: number;
-    ecdsaRegistrationWarmSessionWorkerPutMs: number;
-    ecdsaRegistrationWarmSessionSealedRecordPersistMs: number;
-    ecdsaRegistrationWarmSessionSealResolveTransportMs: number;
-    ecdsaRegistrationWarmSessionSealExistingRecordReadMs: number;
-    ecdsaRegistrationWarmSessionSealPolicyReadMs: number;
-    ecdsaRegistrationWarmSessionSealApplyServerSealMs: number;
-    ecdsaRegistrationWarmSessionSealApplyRuntimeSetupMs: number;
-    ecdsaRegistrationWarmSessionSealApplyClientSealMs: number;
-    ecdsaRegistrationWarmSessionSealApplyServerRouteMs: number;
-    ecdsaRegistrationWarmSessionSealApplyClientUnsealMs: number;
-    ecdsaRegistrationWarmSessionSealApplyPolicyUpdateMs: number;
-    ecdsaRegistrationWarmSessionSealRegisterMs: number;
-    ecdsaRegistrationWarmSessionSealVerifyReadMs: number;
-    ecdsaRegistrationEmailOtpSessionCommitMs: number;
-};
-type RegistrationTimingBucketName = keyof RegistrationTimingBucketValues;
+/** Passkey-only auth buckets; an Email OTP registration's `auth` block reports them as zeros. */
+declare const PASSKEY_AUTH_TIMING_BUCKETS: readonly ["passkeyAuthConfirmationMs", "passkeyAuthPrfExtractionMs", "passkeyAuthCredentialRedactionMs", "passkeyAuthWorkerReadyMs", "passkeyAuthWorkerRequestRoundTripMs", "passkeyAuthWorkerResponseValidationMs", "passkeyAuthRequestSetupMs", "passkeyAuthPromptUserMs", "passkeyAuthPromptElementDefineMs", "passkeyAuthPromptMountMs", "passkeyAuthPromptHostFirstUpdateMs", "passkeyAuthPromptHostInteractiveMs", "passkeyAuthPromptConfirmEventMs", "passkeyAuthPromptDecisionWaitMs", "passkeyAuthCredentialCreateStartMs", "passkeyAuthCredentialCreateMs", "passkeyAuthCredentialSerializeMs", "passkeyAuthDuplicateRetryCount", "passkeyAuthMainThreadTotalMs"];
+/** Reported in the `ed25519` block only when the signer set has a NEAR Ed25519 branch. */
+declare const ED25519_TIMING_BUCKETS: readonly ["emailOtpYaoEnrollmentMaterialWaitMs", "emailOtpYaoWorkerRegistrationMs", "emailOtpYaoTotalMs"];
+declare const ECDSA_TIMING_BUCKETS: readonly ["ecdsaClientBootstrapMs", "ecdsaRegistrationTotalMs", "ecdsaRegistrationClientCreateMs", "ecdsaRegistrationGatewayRespondMs", "ecdsaRegistrationClientProofVerifyMs", "ecdsaRegistrationGatewayActivateMs", "ecdsaRegistrationClientActivationFinalizeMs", "ecdsaRegistrationPersistenceMs", "ecdsaRegistrationSessionFinalizeMs", "ecdsaRegistrationLocalRecordPersistenceMs", "ecdsaRegistrationTargetCount", "ecdsaRegistrationClientFinalizeMs", "ecdsaRegistrationClientMaterialStoreMs", "ecdsaRegistrationServerBootstrapMs", "ecdsaRegistrationPasskeyBootstrapStoreMs", "ecdsaRegistrationRoleLocalRecordPersistenceMs", "ecdsaRegistrationWarmSessionHydrationMs", "ecdsaRegistrationWarmSessionWorkerReadyMs", "ecdsaRegistrationWarmSessionWorkerPutMs", "ecdsaRegistrationWarmSessionSealedRecordPersistMs", "ecdsaRegistrationWarmSessionSealResolveTransportMs", "ecdsaRegistrationWarmSessionSealExistingRecordReadMs", "ecdsaRegistrationWarmSessionSealPolicyReadMs", "ecdsaRegistrationWarmSessionSealApplyServerSealMs", "ecdsaRegistrationWarmSessionSealApplyRuntimeSetupMs", "ecdsaRegistrationWarmSessionSealApplyClientSealMs", "ecdsaRegistrationWarmSessionSealApplyServerRouteMs", "ecdsaRegistrationWarmSessionSealApplyClientUnsealMs", "ecdsaRegistrationWarmSessionSealApplyPolicyUpdateMs", "ecdsaRegistrationWarmSessionSealRegisterMs", "ecdsaRegistrationWarmSessionSealVerifyReadMs", "ecdsaRegistrationEmailOtpSessionCommitMs"];
+/**
+ * Every timing bucket, in the order the summary emits them. Tests and
+ * dashboards read the summary as JSON, so the order is part of its format.
+ */
+declare const REGISTRATION_TIMING_BUCKETS: readonly ["registrationWarmupMs", "registrationWarmupWaitMs", "registrationWarmupAuthenticatedWalletStateMs", "registrationWarmupNoncePrefetchMs", "registrationWarmupKeyMaterialReadMs", "registrationWarmupUiConfirmPrewarmMs", "registrationWarmupSignerWorkerPrewarmMs", "registrationWarmupEmailOtpWorkerPrewarmMs", "registrationWarmupEmailOtpYaoWasmInitMs", "managedRegistrationGrantMs", "registrationIntentMs", "registrationIntentDigestMs", "authProofMs", "passkeyAuthConfirmationMs", "passkeyAuthPrfExtractionMs", "passkeyAuthCredentialRedactionMs", "passkeyAuthWorkerReadyMs", "passkeyAuthWorkerRequestRoundTripMs", "passkeyAuthWorkerResponseValidationMs", "passkeyAuthRequestSetupMs", "passkeyAuthPromptUserMs", "passkeyAuthPromptElementDefineMs", "passkeyAuthPromptMountMs", "passkeyAuthPromptHostFirstUpdateMs", "passkeyAuthPromptHostInteractiveMs", "passkeyAuthPromptConfirmEventMs", "passkeyAuthPromptDecisionWaitMs", "passkeyAuthCredentialCreateStartMs", "passkeyAuthCredentialCreateMs", "passkeyAuthCredentialSerializeMs", "passkeyAuthDuplicateRetryCount", "passkeyAuthMainThreadTotalMs", "emailOtpEnrollmentMaterialMs", "emailOtpYaoEnrollmentMaterialWaitMs", "emailOtpYaoWorkerRegistrationMs", "emailOtpYaoTotalMs", "yaoBranchTotalMs", "yaoAdmissionMs", "yaoClientSessionCreateMs", "yaoClientCompletionMs", "yaoServerCredentialDigestMs", "yaoServerD1AdmissionReadMs", "yaoServerRouterExecutionMs", "yaoServerResultReconstructionMs", "yaoServerRouterPreparePairMs", "yaoServerRouterVerifyReadinessMs", "yaoServerRouterRoleExecutionMs", "yaoServerRouterSigningWorkerDeliveryMs", "ecdsaRespondD1ClaimMs", "ecdsaRespondReconcileMs", "ecdsaRespondRouterMs", "ecdsaRespondD1CommitMs", "ecdsaRespondTotalMs", "ecdsaActivateD1ClaimMs", "ecdsaActivateReconcileMs", "ecdsaActivateRouterMs", "ecdsaActivateBootstrapMs", "ecdsaActivateSessionProvisionMs", "ecdsaActivateD1CommitMs", "ecdsaActivatePolicyLookupMs", "ecdsaActivateJwtMintMs", "ecdsaActivateTotalMs", "ecdsaRtAuthorizeMs", "ecdsaRtAdmissionMs", "ecdsaRtDeriversMs", "ecdsaRtDeriverAMs", "ecdsaRtDeriverBMs", "ecdsaRtCompletionMs", "ecdsaRtTotalMs", "ecdsaRtActSessionMs", "ecdsaRtActWorkerMs", "ecdsaRtActTotalMs", "ecdsaDeriverAParseMs", "ecdsaDeriverAPreloadMs", "ecdsaDeriverAExecuteMs", "ecdsaDeriverATotalMs", "ecdsaDeriverBParseMs", "ecdsaDeriverBPreloadMs", "ecdsaDeriverBExecuteMs", "ecdsaDeriverBTotalMs", "ecdsaSigningWorkerParseMs", "ecdsaSigningWorkerActivateMs", "ecdsaSigningWorkerTotalMs", "nearFinalizeAuthorityMs", "nearFinalizeFingerprintMs", "nearFinalizeSideEffectMs", "nearFinalizeCleanupMs", "nearFinalizeSessionProjectionMs", "nearFinalizeSessionSealMs", "nearFinalizeTotalMs", "walletRegisterStartMs", "ecdsaClientBootstrapMs", "ecdsaRegistrationTotalMs", "ecdsaRegistrationClientCreateMs", "ecdsaRegistrationGatewayRespondMs", "ecdsaRegistrationClientProofVerifyMs", "ecdsaRegistrationGatewayActivateMs", "ecdsaRegistrationClientActivationFinalizeMs", "emailOtpRecoveryCodeBackupMs", "walletRegisterFinalizeMs", "ecdsaRegistrationPersistenceMs", "ecdsaRegistrationSessionFinalizeMs", "ecdsaRegistrationLocalRecordPersistenceMs", "ecdsaRegistrationTargetCount", "ecdsaRegistrationClientFinalizeMs", "ecdsaRegistrationClientMaterialStoreMs", "ecdsaRegistrationServerBootstrapMs", "ecdsaRegistrationPasskeyBootstrapStoreMs", "ecdsaRegistrationRoleLocalRecordPersistenceMs", "ecdsaRegistrationWarmSessionHydrationMs", "ecdsaRegistrationWarmSessionWorkerReadyMs", "ecdsaRegistrationWarmSessionWorkerPutMs", "ecdsaRegistrationWarmSessionSealedRecordPersistMs", "ecdsaRegistrationWarmSessionSealResolveTransportMs", "ecdsaRegistrationWarmSessionSealExistingRecordReadMs", "ecdsaRegistrationWarmSessionSealPolicyReadMs", "ecdsaRegistrationWarmSessionSealApplyServerSealMs", "ecdsaRegistrationWarmSessionSealApplyRuntimeSetupMs", "ecdsaRegistrationWarmSessionSealApplyClientSealMs", "ecdsaRegistrationWarmSessionSealApplyServerRouteMs", "ecdsaRegistrationWarmSessionSealApplyClientUnsealMs", "ecdsaRegistrationWarmSessionSealApplyPolicyUpdateMs", "ecdsaRegistrationWarmSessionSealRegisterMs", "ecdsaRegistrationWarmSessionSealVerifyReadMs", "ecdsaRegistrationEmailOtpSessionCommitMs"];
+type RegistrationTimingBucketName = (typeof REGISTRATION_TIMING_BUCKETS)[number];
+type RegistrationTimingBucketValues = Record<RegistrationTimingBucketName, number>;
 type RegistrationTimingSpanKind = 'warmup' | 'auth' | 'ed25519_yao' | 'ecdsa' | 'registration';
 type RegistrationTimingSpan = {
     name: RegistrationTimingBucketName;
@@ -193,139 +83,24 @@ type RegistrationCriticalPathSummary = {
     topBuckets: readonly RegistrationCriticalPathBucket[];
     spans: readonly RegistrationTimingSpan[];
 };
-type PasskeyRegistrationAuthTiming = {
-    kind: 'passkey';
-    authProofMs: number;
-    passkeyAuthConfirmationMs: number;
-    passkeyAuthPrfExtractionMs: number;
-    passkeyAuthCredentialRedactionMs: number;
-    passkeyAuthWorkerReadyMs: number;
-    passkeyAuthWorkerRequestRoundTripMs: number;
-    passkeyAuthWorkerResponseValidationMs: number;
-    passkeyAuthRequestSetupMs: number;
-    passkeyAuthPromptUserMs: number;
-    passkeyAuthPromptElementDefineMs: number;
-    passkeyAuthPromptMountMs: number;
-    passkeyAuthPromptHostFirstUpdateMs: number;
-    passkeyAuthPromptHostInteractiveMs: number;
-    passkeyAuthPromptConfirmEventMs: number;
-    passkeyAuthPromptDecisionWaitMs: number;
-    passkeyAuthCredentialCreateStartMs: number;
-    passkeyAuthCredentialCreateMs: number;
-    passkeyAuthCredentialSerializeMs: number;
-    passkeyAuthDuplicateRetryCount: number;
-    passkeyAuthMainThreadTotalMs: number;
-    emailOtpEnrollmentMaterialMs: 0;
-    emailOtpRecoveryCodeBackupMs: 0;
+/** Spells an intersection out as one object type. */
+type Flat<T> = {
+    [K in keyof T]: T[K];
 };
-type EmailOtpRegistrationAuthTiming = {
-    kind: 'email_otp';
+type PasskeyAuthTimingBucketName = (typeof PASSKEY_AUTH_TIMING_BUCKETS)[number];
+type EmailOtpAuthTimingBucketName = 'emailOtpEnrollmentMaterialMs' | 'emailOtpRecoveryCodeBackupMs';
+/** The `auth` block: the method used reports its buckets, the other method's are zeros. */
+type AuthMethodTiming<Kind extends RegistrationTimingAuthMethod, Passkey extends number, EmailOtp extends number> = Flat<{
+    kind: Kind;
     authProofMs: number;
-    passkeyAuthConfirmationMs: 0;
-    passkeyAuthPrfExtractionMs: 0;
-    passkeyAuthCredentialRedactionMs: 0;
-    passkeyAuthWorkerReadyMs: 0;
-    passkeyAuthWorkerRequestRoundTripMs: 0;
-    passkeyAuthWorkerResponseValidationMs: 0;
-    passkeyAuthRequestSetupMs: 0;
-    passkeyAuthPromptUserMs: 0;
-    passkeyAuthPromptElementDefineMs: 0;
-    passkeyAuthPromptMountMs: 0;
-    passkeyAuthPromptHostFirstUpdateMs: 0;
-    passkeyAuthPromptHostInteractiveMs: 0;
-    passkeyAuthPromptConfirmEventMs: 0;
-    passkeyAuthPromptDecisionWaitMs: 0;
-    passkeyAuthCredentialCreateStartMs: 0;
-    passkeyAuthCredentialCreateMs: 0;
-    passkeyAuthCredentialSerializeMs: 0;
-    passkeyAuthDuplicateRetryCount: 0;
-    passkeyAuthMainThreadTotalMs: 0;
-    emailOtpEnrollmentMaterialMs: number;
-    emailOtpRecoveryCodeBackupMs: number;
-};
-type RegistrationAuthTiming = PasskeyRegistrationAuthTiming | EmailOtpRegistrationAuthTiming;
-type RegistrationEd25519Timing = {
-    kind: 'ed25519_yao_enabled';
-    emailOtpYaoEnrollmentMaterialWaitMs: number;
-    emailOtpYaoWorkerRegistrationMs: number;
-    emailOtpYaoTotalMs: number;
-} | {
-    kind: 'ed25519_disabled';
-    emailOtpYaoEnrollmentMaterialWaitMs: 0;
-    emailOtpYaoWorkerRegistrationMs: 0;
-    emailOtpYaoTotalMs: 0;
-};
-type EcdsaEnabledRegistrationTiming = {
-    kind: 'ecdsa_enabled';
-    ecdsaClientBootstrapMs: number;
-    ecdsaRegistrationTotalMs: number;
-    ecdsaRegistrationClientCreateMs: number;
-    ecdsaRegistrationGatewayRespondMs: number;
-    ecdsaRegistrationClientProofVerifyMs: number;
-    ecdsaRegistrationGatewayActivateMs: number;
-    ecdsaRegistrationClientActivationFinalizeMs: number;
-    ecdsaRegistrationPersistenceMs: number;
-    ecdsaRegistrationSessionFinalizeMs: number;
-    ecdsaRegistrationLocalRecordPersistenceMs: number;
-    ecdsaRegistrationTargetCount: number;
-    ecdsaRegistrationClientFinalizeMs: number;
-    ecdsaRegistrationClientMaterialStoreMs: number;
-    ecdsaRegistrationServerBootstrapMs: number;
-    ecdsaRegistrationPasskeyBootstrapStoreMs: number;
-    ecdsaRegistrationRoleLocalRecordPersistenceMs: number;
-    ecdsaRegistrationWarmSessionHydrationMs: number;
-    ecdsaRegistrationWarmSessionWorkerReadyMs: number;
-    ecdsaRegistrationWarmSessionWorkerPutMs: number;
-    ecdsaRegistrationWarmSessionSealedRecordPersistMs: number;
-    ecdsaRegistrationWarmSessionSealResolveTransportMs: number;
-    ecdsaRegistrationWarmSessionSealExistingRecordReadMs: number;
-    ecdsaRegistrationWarmSessionSealPolicyReadMs: number;
-    ecdsaRegistrationWarmSessionSealApplyServerSealMs: number;
-    ecdsaRegistrationWarmSessionSealApplyRuntimeSetupMs: number;
-    ecdsaRegistrationWarmSessionSealApplyClientSealMs: number;
-    ecdsaRegistrationWarmSessionSealApplyServerRouteMs: number;
-    ecdsaRegistrationWarmSessionSealApplyClientUnsealMs: number;
-    ecdsaRegistrationWarmSessionSealApplyPolicyUpdateMs: number;
-    ecdsaRegistrationWarmSessionSealRegisterMs: number;
-    ecdsaRegistrationWarmSessionSealVerifyReadMs: number;
-    ecdsaRegistrationEmailOtpSessionCommitMs: number;
-};
-type EcdsaDisabledRegistrationTiming = {
-    kind: 'ecdsa_disabled';
-    ecdsaClientBootstrapMs: 0;
-    ecdsaRegistrationTotalMs: 0;
-    ecdsaRegistrationClientCreateMs: 0;
-    ecdsaRegistrationGatewayRespondMs: 0;
-    ecdsaRegistrationClientProofVerifyMs: 0;
-    ecdsaRegistrationGatewayActivateMs: 0;
-    ecdsaRegistrationClientActivationFinalizeMs: 0;
-    ecdsaRegistrationPersistenceMs: 0;
-    ecdsaRegistrationSessionFinalizeMs: 0;
-    ecdsaRegistrationLocalRecordPersistenceMs: 0;
-    ecdsaRegistrationTargetCount: 0;
-    ecdsaRegistrationClientFinalizeMs: 0;
-    ecdsaRegistrationClientMaterialStoreMs: 0;
-    ecdsaRegistrationServerBootstrapMs: 0;
-    ecdsaRegistrationPasskeyBootstrapStoreMs: 0;
-    ecdsaRegistrationRoleLocalRecordPersistenceMs: 0;
-    ecdsaRegistrationWarmSessionHydrationMs: 0;
-    ecdsaRegistrationWarmSessionWorkerReadyMs: 0;
-    ecdsaRegistrationWarmSessionWorkerPutMs: 0;
-    ecdsaRegistrationWarmSessionSealedRecordPersistMs: 0;
-    ecdsaRegistrationWarmSessionSealResolveTransportMs: 0;
-    ecdsaRegistrationWarmSessionSealExistingRecordReadMs: 0;
-    ecdsaRegistrationWarmSessionSealPolicyReadMs: 0;
-    ecdsaRegistrationWarmSessionSealApplyServerSealMs: 0;
-    ecdsaRegistrationWarmSessionSealApplyRuntimeSetupMs: 0;
-    ecdsaRegistrationWarmSessionSealApplyClientSealMs: 0;
-    ecdsaRegistrationWarmSessionSealApplyServerRouteMs: 0;
-    ecdsaRegistrationWarmSessionSealApplyClientUnsealMs: 0;
-    ecdsaRegistrationWarmSessionSealApplyPolicyUpdateMs: 0;
-    ecdsaRegistrationWarmSessionSealRegisterMs: 0;
-    ecdsaRegistrationWarmSessionSealVerifyReadMs: 0;
-    ecdsaRegistrationEmailOtpSessionCommitMs: 0;
-};
-type RegistrationEcdsaTiming = EcdsaEnabledRegistrationTiming | EcdsaDisabledRegistrationTiming;
+} & Record<PasskeyAuthTimingBucketName, Passkey> & Record<EmailOtpAuthTimingBucketName, EmailOtp>>;
+type RegistrationAuthTiming = AuthMethodTiming<'passkey', number, 0> | AuthMethodTiming<'email_otp', 0, number>;
+/** A signer branch's buckets: measured when the branch ran, zeros when it did not. */
+type SignerBranchTiming<Kind extends string, Buckets extends readonly RegistrationTimingBucketName[], Value extends number> = Flat<{
+    kind: Kind;
+} & Record<Buckets[number], Value>>;
+type RegistrationEd25519Timing = SignerBranchTiming<'ed25519_yao_enabled', typeof ED25519_TIMING_BUCKETS, number> | SignerBranchTiming<'ed25519_disabled', typeof ED25519_TIMING_BUCKETS, 0>;
+type RegistrationEcdsaTiming = SignerBranchTiming<'ecdsa_enabled', typeof ECDSA_TIMING_BUCKETS, number> | SignerBranchTiming<'ecdsa_disabled', typeof ECDSA_TIMING_BUCKETS, 0>;
 type RegistrationTimingBuckets = RegistrationTimingBucketValues & {
     auth: RegistrationAuthTiming;
     ed25519: RegistrationEd25519Timing;
@@ -360,20 +135,19 @@ export declare function registrationTimingSignerSetFromPlan(plan: RegistrationSi
 export declare function roundDurationMs(startedAt: number): number;
 export declare class RegistrationTimingRecorder {
     private readonly startedAt;
+    private nearStageStartedAt;
     private readonly buckets;
     private readonly relayDiagnostics;
     private readonly spans;
     private emailOtpYaoPrewarm;
     constructor(startedAt: number);
+    markNearStage(ceremonyId: string, stage: Parameters<typeof emitNearRegistrationTiming>[0]['stage']): void;
     measure<K extends RegistrationTimingBucketName, T>(bucket: K, operation: () => Promise<T>): Promise<T>;
-    measureSync<K extends RegistrationTimingBucketName, T>(bucket: K, operation: () => T): T;
     record<K extends RegistrationTimingBucketName>(bucket: K, durationMs: number): void;
     snapshot(): RegistrationTimingBucketValues;
     spansSnapshot(): readonly RegistrationTimingSpan[];
     private recordSpan;
-    mergeSnapshot(snapshot: RegistrationTimingBucketValues): void;
     captureRouteDiagnostics(value: unknown): void;
-    captureRouteDiagnosticsSnapshot(snapshot: readonly WalletRegistrationRouteDiagnostics[]): void;
     captureWarmupDiagnostics(diagnostics: RegistrationWarmupDiagnostics): void;
     emailOtpYaoPrewarmSnapshot(): EmailOtpYaoPrewarmOutcome;
     capturePasskeyAuthDiagnostics(diagnostics: PasskeyRegistrationAuthorityDiagnostics): void;

package/dist/types/wallet/src/SeamsWeb/operations/session/thresholdEcdsaProvisioning.d.ts

@@ -1,11 +1,11 @@
 import type { SeamsChainConfig } from '../../../core/types/seams';
 import { type ThresholdEcdsaChainTarget } from '../../../core/signingEngine/interfaces/ecdsaChainTarget';
 import type { EcdsaSignerProvisioningDefaults, EcdsaSignerProvisioningPolicy } from '../../../core/types/ecdsaSignerProvisioningDefaults';
-export type ThresholdEcdsaProvisionTarget = {
+type ThresholdEcdsaProvisionTarget = {
     chainTarget: ThresholdEcdsaChainTarget;
     options: EcdsaSignerProvisioningPolicy;
 };
-export type EcdsaSessionPublicationTarget = {
+type EcdsaSessionPublicationTarget = {
     chainTarget: ThresholdEcdsaChainTarget;
 };
 export declare function listConfiguredThresholdEcdsaPublicationTargets(chains: readonly SeamsChainConfig[]): EcdsaSessionPublicationTarget[];
@@ -13,4 +13,5 @@ export declare function listThresholdEcdsaProvisionTargets(args: {
     signerOptions: EcdsaSignerProvisioningDefaults;
     chains: readonly SeamsChainConfig[];
 }): ThresholdEcdsaProvisionTarget[];
+export {};
 //# sourceMappingURL=thresholdEcdsaProvisioning.d.ts.map

package/dist/types/wallet/src/SeamsWeb/operations/tempo/executeEvmFamilyTransaction.d.ts

@@ -46,7 +46,7 @@ type WithResolvedSubject<T> = T extends unknown ? Omit<T, 'chainTarget' | 'walle
     walletSession: WalletSessionRef;
     request: EvmSigningRequest | TempoSigningRequest;
 } : never;
-export type ResolvedExecuteEvmFamilyTransactionArgs = WithResolvedSubject<ExecuteEvmFamilyTransactionArgs>;
+type ResolvedExecuteEvmFamilyTransactionArgs = WithResolvedSubject<ExecuteEvmFamilyTransactionArgs>;
 export declare function executeEvmFamilyTransactionLifecycle(args: {
     lifecycle: TempoLifecycleDeps;
     chains: readonly SeamsChainConfig[];

package/dist/types/wallet/src/SeamsWeb/publicApi/awaitNearReady.d.ts

@@ -1,5 +1,4 @@
 import type { RegistrationCapability } from './types';
-export declare const DEFAULT_AWAIT_NEAR_READY_TIMEOUT_MS = 120000;
 export type AwaitNearReadyResult = {
     kind: 'near_ready';
     nearAccountId: string;

package/dist/types/wallet/src/SeamsWeb/publicApi/capabilitySelection.d.ts

@@ -10,7 +10,7 @@ type EvmBrowserCapabilityOperation = Extract<CapabilityOperationRef, {
 type VaultBrowserCapabilityOperation = Extract<CapabilityOperationRef, {
     readonly capabilityKind: typeof CAPABILITY_KINDS.vaultAccess;
 }>;
-export type BrowserCapabilitySelectionRequest = (NearBrowserCapabilityOperation & {
+type BrowserCapabilitySelectionRequest = (NearBrowserCapabilityOperation & {
     readonly chainTarget?: never;
 }) | (EvmBrowserCapabilityOperation & {
     readonly chainTarget: ThresholdEcdsaChainTarget;

package/dist/types/wallet/src/SeamsWeb/publicApi/currentWallet.d.ts

@@ -1,7 +1,7 @@
 import { type NearAccountRef, type WalletSessionRef } from '../../core/signingEngine/interfaces/ecdsaChainTarget';
 import type { WalletSession } from '../../core/types/seams';
 /** A NEAR account named exactly, or by its account id. */
-export type NearAccountInput = NearAccountRef | string;
+type NearAccountInput = NearAccountRef | string;
 /**
  * A wallet named exactly, or by its wallet id.
  *
@@ -32,4 +32,5 @@ export interface CurrentWalletResolver {
 export declare function createCurrentWalletResolver(deps: {
     getWalletSession: (walletId?: string) => Promise<WalletSession>;
 }): CurrentWalletResolver;
+export {};
 //# sourceMappingURL=currentWallet.d.ts.map

package/dist/types/wallet/src/SeamsWeb/publicApi/devices.d.ts

@@ -3,7 +3,7 @@ import type { DeviceLinkingWebContext, DevicesCapability } from '../signingSurfa
 import type { WalletIframeCoordinator } from '../walletIframe/coordinator';
 import { type WalletAuthMethodId, type WalletId } from '../../../../shared-ts/src/utils/domainIds';
 import type { LinkedDeviceListResultV1, LinkedDeviceRevokeResultV1 } from '../../../../shared-ts/src/device-linking';
-import type { WalletAuthMethodRevocationProof } from '../../../../shared-ts/src/utils/registrationIntent';
+import type { WalletAuthMethodRevocationProof } from '../../../../shared-ts/src/utils/walletAuthMethodRecord';
 export { parseLinkedDeviceListRequestV1, parseLinkedDeviceListResultV1, parseLinkedDeviceRevokeRequestV1, parseLinkedDeviceRevokeResultV1, parseLinkedDeviceSummaryV1, } from '../../../../shared-ts/src/device-linking';
 export type { LinkedDeviceListRequestV1, LinkedDeviceListResultV1, LinkedDeviceManagementRequestV1, LinkedDeviceRevokeRequestV1, LinkedDeviceRevokeResultV1, LinkedDeviceSummaryV1, } from '../../../../shared-ts/src/device-linking';
 export type LinkedDeviceManagementPortV1 = {

package/dist/types/wallet/src/SeamsWeb/publicApi/keyExport.d.ts

@@ -1,5 +1,5 @@
 import type { SeamsConfigsReadonly } from '../../core/types/seams';
-import type { KeyExportCapability, ResolveExactKeyExportLaneInput, ResolveExactKeyExportLaneResult, ExportKeypairWithUIInput } from './types';
+import type { KeyExportCapability, ResolveExactKeyExportLaneInput, ResolveExactKeyExportLaneResult } from './types';
 import type { SigningEngineExportKeypairWithUIInput } from '../../core/signingEngine/flows/recovery/public';
 import type { CurrentWalletResolver } from './currentWallet';
 /**
@@ -10,8 +10,6 @@ export type KeyExportDomainMethods = {
     resolveExactKeyExportLane(input: ResolveExactKeyExportLaneInput): Promise<ResolveExactKeyExportLaneResult>;
     exportKeypairWithUI(input: SigningEngineExportKeypairWithUIInput): Promise<void>;
 };
-type KeyExportCapabilitySelectionInput = ResolveExactKeyExportLaneInput | ExportKeypairWithUIInput | SigningEngineExportKeypairWithUIInput;
-export declare function requireKeyExportCapability(configs: SeamsConfigsReadonly, input: KeyExportCapabilitySelectionInput): void;
 /**
  * Builds the public key-export capability.
  *
@@ -29,5 +27,4 @@ export declare function createKeyExportCapability(deps: {
     currentWallet: CurrentWalletResolver;
     domain: KeyExportDomainMethods;
 }): KeyExportCapability;
-export {};
 //# sourceMappingURL=keyExport.d.ts.map

package/dist/types/wallet/src/SeamsWeb/publicApi/near.d.ts

@@ -2,15 +2,7 @@ import type { TransactionDispatch } from '../walletIframe/client/transactionRevi
 import type { NearSignerCapability, NearSigningSurface, NearSigningWebContext, RegistrationSigningSurface, UserAccountLookupSurface } from '../signingSurface/types';
 import type { SeamsConfigsReadonly, ThemeMode } from '../../core/types/seams';
 import type { WalletIframeCoordinator } from '../walletIframe/coordinator';
-import { fundImplicitNearAccountForTesting } from '../../core/rpcClients/relayer/walletRegistration';
-import type { NearAccountRef, WalletSessionRef } from '../../core/signingEngine/interfaces/ecdsaChainTarget';
 import type { CurrentWalletResolver } from './currentWallet';
-export declare function fundImplicitNearAccountFromCurrentSession(args: {
-    configs: SeamsConfigsReadonly;
-    walletSession: WalletSessionRef;
-    nearAccount: NearAccountRef;
-    nearPublicKey: string;
-}): ReturnType<typeof fundImplicitNearAccountForTesting>;
 export declare function createNearSignerCapability(deps: {
     signingEngine: RegistrationSigningSurface & NearSigningSurface & UserAccountLookupSurface;
     nearClient: NearSigningWebContext['nearClient'];

package/dist/types/wallet/src/SeamsWeb/publicApi/transactionReview.d.ts

@@ -6,10 +6,11 @@ export type TransactionReviewCapabilities = {
     readonly evm: EvmSignerCapability;
     readonly tempo: TempoSignerCapability;
 };
-export type TransactionReviewBridge = {
+type TransactionReviewBridge = {
     readonly getWalletIframe: () => WalletIframeCoordinator;
     readonly createCapabilities: (reservation: TransactionReviewReservation) => TransactionReviewCapabilities;
 };
 export declare function registerTransactionReviewBridge(near: NearSignerCapability, bridge: TransactionReviewBridge): void;
 export declare function getTransactionReviewBridge(near: NearSignerCapability): TransactionReviewBridge | undefined;
+export {};
 //# sourceMappingURL=transactionReview.d.ts.map