@seams/wallet 0.6.2 → 0.7.1

package/dist/esm/react/core/signingEngine/uiConfirm/ui/preact/TransactionReview.js

@@ -1,9 +1,9 @@
-import { transactionLabelTitle } from "./TransactionLabel.js";
+import { contractPrefix, transactionLabelTitle } from "./TransactionLabel.js";
 import { copySurfaceText } from "./clipboard.js";
 import { CopyStatusIcon } from "./CopyStatusIcon.js";
 import { ReviewDisclosure } from "./ReviewDisclosure.js";
 import { SeamsWordmark } from "./SeamsWordmark.js";
-import { Component, createRef } from "preact";
+import { Component } from "preact";
 import { Fragment, jsx, jsxs } from "preact/jsx-runtime";
 //#region src/core/signingEngine/uiConfirm/ui/preact/TransactionReview.tsx
 /** @jsxImportSource preact */
@@ -44,79 +44,15 @@ function reviewRecipient(model) {
 	const operation = model.operations[0];
 	return operation.kind === "generic.contractCall" || operation.kind === "tempo.eip2718" ? operation.to ?? null : null;
 }
-var ReviewAddress = class extends Component {
-	constructor(..._args) {
-		super(..._args);
-		this.root = createRef();
-		this.motion = null;
-		this.observer = null;
-		this.measure = () => {
-			const root = this.root.current;
-			if (!root) return;
-			this.clear();
-			const overflowing = (root.firstElementChild?.scrollWidth ?? 0) > root.clientWidth + 1;
-			root.dataset.overflowing = String(overflowing);
-			root.tabIndex = overflowing ? 0 : -1;
-		};
-		this.reveal = () => {
-			const root = this.root.current;
-			const text = root?.firstElementChild;
-			if (!root || !(text instanceof HTMLElement)) return;
-			const overflow = text.scrollWidth - root.clientWidth;
-			if (overflow <= 1 || this.motion) return;
-			root.dataset.revealing = "true";
-			const reduced = root.ownerDocument.defaultView?.matchMedia("(prefers-reduced-motion: reduce)").matches;
-			this.motion = text.animate([{ transform: "translateX(0)" }, { transform: `translateX(-${overflow}px)` }], {
-				duration: reduced ? 0 : 200,
-				easing: "linear",
-				fill: "forwards"
-			});
-			this.motion.onfinish = this.reachedEnd;
-		};
-		this.reachedEnd = () => {
-			if (this.root.current) this.root.current.dataset.revealEnd = "true";
-		};
-		this.reset = () => {
-			if (this.root.current?.matches(":hover, :focus")) return;
-			this.clear();
-		};
-	}
-	componentDidMount() {
-		this.measure();
-		this.observer = new ResizeObserver(this.measure);
-		if (this.root.current) this.observer.observe(this.root.current);
-	}
-	clear() {
-		if (this.motion) this.motion.onfinish = null;
-		this.motion?.cancel();
-		this.motion = null;
-		if (this.root.current) {
-			delete this.root.current.dataset.revealing;
-			delete this.root.current.dataset.revealEnd;
-		}
-	}
-	componentDidUpdate(previous) {
-		if (previous.value !== this.props.value) this.measure();
-	}
-	componentWillUnmount() {
-		this.observer?.disconnect();
-		this.clear();
-	}
-	render() {
-		return /* @__PURE__ */ jsx("span", {
-			ref: this.root,
-			class: "seams-review-address",
-			dir: "ltr",
-			title: this.props.value,
-			"aria-label": this.props.value,
-			onMouseEnter: this.reveal,
-			onMouseLeave: this.reset,
-			onFocus: this.reveal,
-			onBlur: this.reset,
-			children: /* @__PURE__ */ jsx("span", { children: this.props.value })
-		});
-	}
-};
+/** The whole value when it fits; otherwise the middle truncates and the last eight characters stay. */
+function ReviewMiddleTruncated({ value, class: className }) {
+	return /* @__PURE__ */ jsxs("bdi", {
+		class: `seams-review-middle ${className}`,
+		dir: "ltr",
+		title: value,
+		children: [/* @__PURE__ */ jsx("span", { children: value.slice(0, -8) }), /* @__PURE__ */ jsx("span", { children: value.slice(-8) })]
+	});
+}
 function TokenIcon({ symbol }) {
 	if (symbol === "ETH") return /* @__PURE__ */ jsxs("svg", {
 		class: "seams-review-token",
@@ -208,8 +144,8 @@ function reviewAmount(model) {
 	};
 }
 var CopyReviewValue = class extends Component {
-	constructor(..._args2) {
-		super(..._args2);
+	constructor(..._args) {
+		super(..._args);
 		this.state = { copied: false };
 		this.lifetime = new AbortController();
 		this.timer = null;
@@ -257,6 +193,23 @@ var CopyReviewValue = class extends Component {
 };
 function ReviewDetailLabel({ node }) {
 	if (node.action || node.transaction) return /* @__PURE__ */ jsx(Fragment, { children: transactionLabelTitle(node) });
+	const contract = contractPrefix(node);
+	if (contract && node.contractAddress) {
+		const address = node.contractAddress;
+		return /* @__PURE__ */ jsxs("span", {
+			class: "seams-review-contract",
+			children: [contract.trim(), /* @__PURE__ */ jsxs("span", {
+				class: "seams-review-contract-value",
+				children: [/* @__PURE__ */ jsx(ReviewMiddleTruncated, {
+					value: address,
+					class: "seams-review-contract-address"
+				}), /* @__PURE__ */ jsx(CopyReviewValue, {
+					value: address,
+					label: `Copy contract address ${address}`
+				})]
+			})]
+		});
+	}
 	if (node.fieldLabel) {
 		const value = node.label.slice(node.fieldLabel.length);
 		return /* @__PURE__ */ jsxs(Fragment, { children: [node.fieldLabel, node.fieldLabel === "Method:" ? /* @__PURE__ */ jsx("span", {
@@ -353,6 +306,6 @@ function TransactionReview({ data, details = true }) {
 	});
 }
 //#endregion
-export { CopyReviewValue, ReviewAddress, ReviewAmount, ReviewIcon, TransactionReview, WalletReceiptFooter, reviewNetwork, reviewRecipient };
+export { CopyReviewValue, ReviewAmount, ReviewIcon, ReviewMiddleTruncated, TransactionReview, WalletReceiptFooter, reviewNetwork, reviewRecipient };
 
 //# sourceMappingURL=TransactionReview.js.map

package/dist/esm/react/core/signingEngine/uiConfirm/ui/preact/confirmation-controller.js

@@ -57,6 +57,7 @@ function mergeConfirmationPresentation(current, update) {
 		model: Object.hasOwn(update, "model") ? update.model : current.model,
 		securityContext: Object.hasOwn(update, "securityContext") ? update.securityContext : current.securityContext,
 		loading: Object.hasOwn(update, "loading") ? update.loading : current.loading,
+		preparing: Object.hasOwn(update, "preparing") ? update.preparing : current.preparing,
 		title: Object.hasOwn(update, "title") ? update.title : current.title,
 		body: Object.hasOwn(update, "body") ? update.body : current.body,
 		errorMessage: Object.hasOwn(update, "errorMessage") ? update.errorMessage : current.errorMessage,

package/dist/esm/react/core/signingEngine/walletCustody/activateEd25519Capability.js

@@ -1,9 +1,10 @@
 import { base58Encode } from "../../../shared-ts/src/utils/base58.js";
 import { mpcMaterialActivationRefsEqual, parseThresholdEd25519SessionId } from "../../../shared-ts/src/utils/domainIds.js";
-import { nearEd25519SigningKeyIdFromString, registrationNearEd25519BranchKey } from "../../../shared-ts/src/utils/registrationIntent.js";
+import { nearEd25519SigningKeyIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
 import { buildRouterAbEd25519SigningWalletSession } from "../session/routerAbSigningWalletSession.js";
 import { toAccountId } from "../../types/accountIds.js";
 import { buildEmailOtpRouterAbEd25519WalletSessionState } from "../session/warmCapabilities/routerAbEd25519WalletSessionState.js";
+import { registrationNearEd25519BranchKey } from "../../../shared-ts/src/utils/registrationSignerPlan.js";
 import { WalletCustodyEd25519ActiveClientV1 } from "./ed25519ActiveClient.js";
 //#region src/core/signingEngine/walletCustody/activateEd25519Capability.ts
 function requireNonEmpty(value, label) {

package/dist/esm/react/core/signingEngine/walletCustody/ceremonyActiveClientMetadata.js

@@ -11,10 +11,9 @@ import { ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1 } from "../threshold/ed2551
 * this run registered under, and the Router's activation result.
 *
 * **Every identity here comes from the Router's receipt, not from this side.**
-* That matters most for `materialActivation`: it is a Refactor 90 identity, and
-* the boundary that mints it is the Router, exactly as on the PRF path. Nothing
-* here invents one — a locally minted activation ref would be a second owner
-* for state Refactor 90 owns.
+* That matters most for `materialActivation`: the boundary that mints it is the
+* Router, exactly as on the PRF path. Nothing here invents one — a locally
+* minted activation ref would give that state a second owner.
 */
 function walletCustodyEd25519ActiveClientMetadataV1(input) {
 	let raw;

package/dist/esm/react/core/signingEngine/walletCustody/emailOtpLink.js

@@ -7,8 +7,8 @@ import "../../../shared-ts/src/passkey-custody/index.js";
 import { finalizeWalletAddAuthMethod, startWalletAddAuthMethod } from "../../rpcClients/relayer/walletRegistration.js";
 //#region src/core/signingEngine/walletCustody/emailOtpLink.ts
 /**
-* Refactor 109C: sealing the wallet's existing custody seed under a newly
-* verified Email OTP factor.
+* Sealing the wallet's existing custody seed under a newly verified
+* Email OTP factor.
 *
 * The mirror of `passkeyLink`, and deliberately the same shape: open the source
 * envelope with the factor secret the caller already collected, reseal the same

package/dist/esm/react/core/signingEngine/walletCustody/recoveryReplacementEnvelope.js

@@ -1,4 +1,5 @@
-import { rejectUnknownFields, requireRecord } from "../../../shared-ts/src/passkey-custody/primitives.js";
+import { requireRecord } from "../../../shared-ts/src/utils/validation.js";
+import { rejectUnknownFields } from "../../../shared-ts/src/utils/exactRecord.js";
 import { WALLET_CUSTODY_ENVELOPE_VERSION_V2, parsePasskeyCustodyEnvelopeRecord, parseWalletCustodyEnvelopeOwnershipWireV1 } from "../../../shared-ts/src/passkey-custody/custodyEnvelope.js";
 import "../../../shared-ts/src/passkey-custody/index.js";
 //#region src/core/signingEngine/walletCustody/recoveryReplacementEnvelope.ts

package/dist/esm/react/core/signingEngine/walletCustody/unlockedEd25519ExportRootCapability.js

@@ -24,6 +24,7 @@ function setUnlockedCustodyEnvelopeUpgradeSinkV1(sink) {
 function forwardUpgradedEnvelope(capability) {
 	const sink = currentUpgradedEnvelopeSink;
 	if (!sink) return;
+	if (capability.kind !== "unlocked_wallet_ed25519_export_root_capability_v1") return;
 	const upgraded = capability.upgradedEnvelope;
 	if (upgraded === void 0) return;
 	try {
@@ -69,6 +70,7 @@ function scheduleCurrentCapabilityExpiry(capability, transport) {
 }
 function parseCapabilityReference(value) {
 	if (!isPlainObject(value)) return null;
+	if (value.kind === "unlocked_linked_device_ed25519_client_root_capability_v1") return parseLinkedDeviceClientRootCapabilityReference(value);
 	const fields = Object.keys(value);
 	const hasUpgradedEnvelope = fields.includes("upgradedEnvelope");
 	const expectedFields = hasUpgradedEnvelope ? [
@@ -114,11 +116,44 @@ function parseCapabilityReference(value) {
 		...upgradedEnvelope ? { upgradedEnvelope } : {}
 	};
 }
+/** A linked device's reference: the same public facts, no envelope upgrade. */
+function parseLinkedDeviceClientRootCapabilityReference(value) {
+	const expectedFields = [
+		"kind",
+		"capabilityHandleId",
+		"walletId",
+		"walletAuthMethodId",
+		"walletSessionId",
+		"expiresAtMs"
+	];
+	const fields = Object.keys(value);
+	if (fields.length !== expectedFields.length || fields.some((field) => !expectedFields.includes(field))) return null;
+	const capabilityHandleId = parseCapabilityInstanceRef(value.capabilityHandleId);
+	const walletId = parseWalletId(value.walletId);
+	const walletAuthMethodId = parseWalletAuthMethodId(value.walletAuthMethodId);
+	const walletSessionId = parseWalletSessionId(value.walletSessionId);
+	if (!capabilityHandleId.ok || !walletId.ok || !walletAuthMethodId.ok || !walletSessionId.ok) return null;
+	let expiresAtMs;
+	try {
+		expiresAtMs = parseUnixMs(value.expiresAtMs, "unlocked Ed25519 Client-root capability expiry");
+	} catch {
+		return null;
+	}
+	return {
+		kind: "unlocked_linked_device_ed25519_client_root_capability_v1",
+		capabilityHandleId: capabilityHandleId.value,
+		walletId: walletId.value,
+		walletAuthMethodId: walletAuthMethodId.value,
+		walletSessionId: walletSessionId.value,
+		expiresAtMs
+	};
+}
 /**
-* Opens a wallet-custody-seed envelope inside the worker with the factor secret
-* already present in the calling operation, and records the returned reference
-* as the current capability. Client-root envelopes belong to the exact sealed
-* export-root path and do not establish this seed-backed capability.
+* Opens this device's own custody envelope inside the worker with the factor
+* secret already present in the calling operation, and records the returned
+* reference as the current capability. A wallet custody seed yields the
+* seed-backed capability; a linked device's Client-root envelope yields the
+* linked-device capability, which only linking accepts.
 * The caller still owns `existingFactorSecret` and zeroes it; the worker zeroes
 * its own copy.
 *
@@ -126,7 +161,8 @@ function parseCapabilityReference(value) {
 * adds no authenticator or OTP interaction.
 */
 async function establishUnlockedWalletEd25519ExportRootCapabilityV1(transport, input) {
-	if (!isWalletCustodySeedBinding(input.existingEnvelope.binding)) return void 0;
+	const binding = input.existingEnvelope.binding;
+	if (!isWalletCustodySeedBinding(binding) && binding.kind !== "ed25519_yao_client_root_v1") return;
 	const workerFactorSecret = input.existingFactorSecret.slice();
 	let established;
 	try {
@@ -158,10 +194,21 @@ async function establishUnlockedWalletEd25519ExportRootCapabilityV1(transport, i
 	return capability;
 }
 /**
-* The current capability for this exact wallet, or undefined when the wallet
-* has none — never a prompt, and never a stale or expired reference.
+* The current seed-backed capability for this exact wallet, or undefined when
+* the wallet has none — never a prompt, and never a stale or expired
+* reference. A linked device's Client-root capability is never returned here:
+* seed reseals and auth-method additions cannot use it.
 */
 function readUnlockedWalletEd25519ExportRootCapabilityV1(walletId) {
+	const capability = readUnlockedEd25519ExportRootLinkingCapabilityV1(walletId);
+	return capability?.kind === "unlocked_wallet_ed25519_export_root_capability_v1" ? capability : void 0;
+}
+/**
+* The current capability a device approving a link seals the export root
+* from, of either kind, for this exact wallet — never a prompt, and never a
+* stale or expired reference.
+*/
+function readUnlockedEd25519ExportRootLinkingCapabilityV1(walletId) {
 	const capability = currentCapability;
 	if (!capability) return void 0;
 	if (capability.walletId !== walletId) return void 0;
@@ -206,6 +253,6 @@ async function destroyUnlockedWalletEd25519ExportRootCapabilitiesV1(transport, s
 	} catch {}
 }
 //#endregion
-export { destroyUnlockedWalletEd25519ExportRootCapabilitiesV1, dropUnlockedWalletEd25519ExportRootCapabilityReferenceV1, establishUnlockedWalletEd25519ExportRootCapabilityV1, readUnlockedWalletEd25519ExportRootCapabilityV1, setUnlockedCustodyEnvelopeUpgradeSinkV1, walletCustodyCeremonyTransportFromWorkerContextV1 };
+export { destroyUnlockedWalletEd25519ExportRootCapabilitiesV1, dropUnlockedWalletEd25519ExportRootCapabilityReferenceV1, establishUnlockedWalletEd25519ExportRootCapabilityV1, readUnlockedEd25519ExportRootLinkingCapabilityV1, readUnlockedWalletEd25519ExportRootCapabilityV1, setUnlockedCustodyEnvelopeUpgradeSinkV1, walletCustodyCeremonyTransportFromWorkerContextV1 };
 
 //# sourceMappingURL=unlockedEd25519ExportRootCapability.js.map

package/dist/esm/react/core/signingEngine/walletCustody/walletRecoveryRotation.js

@@ -17,50 +17,15 @@ async function rotateWalletRecoverySetWithActiveFactorV1(input) {
 	let issued = issueWalletRecoveryCodes();
 	const factorSecret = new Uint8Array(input.factorSecret.slice(0));
 	try {
-		const current = await readWalletRecoveryCodeStatus({
-			relayUrl: input.relayUrl,
-			walletId: input.walletId,
-			...input.fetchImpl ? { fetchImpl: input.fetchImpl } : {}
+		return await rotateWithIssuedCodes(input, issued, (codeBytes) => {
+			const custody = joinCustodyWireFromEnvelopeRecord(input.custodyEnvelope);
+			if (!custody.ok) throw new Error(custody.reason);
+			return input.worker.rotateRecoverySet({
+				custodyJson: custody.custodyJson,
+				factorSecret: factorSecret.buffer.slice(0),
+				recoveryCodesJson: recoveryCodesJson(codeBytes)
+			});
 		});
-		if (current.kind !== "ready") return current.kind === "unauthorized" ? {
-			kind: "transport_failed",
-			message: current.message
-		} : current;
-		const custody = joinCustodyWireFromEnvelopeRecord(input.custodyEnvelope);
-		if (!custody.ok) throw new Error(custody.reason);
-		const replacement = walletRecoverySetRotationWireFromWorkerResultV1(await input.worker.rotateRecoverySet({
-			custodyJson: custody.custodyJson,
-			factorSecret: factorSecret.buffer.slice(0),
-			recoveryCodesJson: JSON.stringify(issued.codeBytes.map((bytes) => ({ codeBytesB64u: base64UrlEncode(bytes) })))
-		}));
-		if (replacement.walletId !== input.walletId) throw new Error("Recovery rotation worker returned a different wallet");
-		const recoveryCodeLocators = await deriveRecoveryCodeLocators(issued.codeBytes, replacement.manifestKekWraps);
-		const rotated = await rotateWalletRecoverySet({
-			relayUrl: input.relayUrl,
-			walletId: input.walletId,
-			factorProof: await input.factorProof({
-				operation: "recovery_rotate",
-				payload: {
-					walletId: input.walletId,
-					expectedStoreVersion: current.storeVersion,
-					manifestKekWraps: replacement.manifestKekWraps,
-					entries: [replacement.entry],
-					recoveryCodeLocators
-				}
-			}),
-			expectedStoreVersion: current.storeVersion,
-			replacement,
-			recoveryCodeLocators,
-			...input.fetchImpl ? { fetchImpl: input.fetchImpl } : {}
-		});
-		if (rotated.kind !== "rotated") return rotated;
-		return {
-			kind: "rotated",
-			walletId: input.walletId,
-			recoveryCodes: issued.codes,
-			issuedAtMs: rotated.issuedAtMs,
-			storeVersion: rotated.storeVersion
-		};
 	} finally {
 		factorSecret.fill(0);
 		if (issued) zeroizeIssuedWalletRecoveryCodes(issued);
@@ -70,49 +35,55 @@ async function rotateWalletRecoverySetWithActiveFactorV1(input) {
 async function rotateWalletRecoverySetWithEmailOtpV1(input) {
 	let issued = issueWalletRecoveryCodes();
 	try {
-		const current = await readWalletRecoveryCodeStatus({
-			relayUrl: input.relayUrl,
-			walletId: input.walletId,
-			...input.fetchImpl ? { fetchImpl: input.fetchImpl } : {}
-		});
-		if (current.kind !== "ready") return current.kind === "unauthorized" ? {
-			kind: "transport_failed",
-			message: current.message
-		} : current;
-		const replacement = walletRecoverySetRotationWireFromWorkerResultV1(await input.worker.rotateRecoverySet({ recoveryCodesJson: JSON.stringify(issued.codeBytes.map((bytes) => ({ codeBytesB64u: base64UrlEncode(bytes) }))) }));
-		if (replacement.walletId !== input.walletId) throw new Error("Recovery rotation worker returned a different wallet");
-		const recoveryCodeLocators = await deriveRecoveryCodeLocators(issued.codeBytes, replacement.manifestKekWraps);
-		const rotated = await rotateWalletRecoverySet({
-			relayUrl: input.relayUrl,
-			walletId: input.walletId,
-			factorProof: await input.factorProof({
-				operation: "recovery_rotate",
-				payload: {
-					walletId: input.walletId,
-					expectedStoreVersion: current.storeVersion,
-					manifestKekWraps: replacement.manifestKekWraps,
-					entries: [replacement.entry],
-					recoveryCodeLocators
-				}
-			}),
-			expectedStoreVersion: current.storeVersion,
-			replacement,
-			recoveryCodeLocators,
-			...input.fetchImpl ? { fetchImpl: input.fetchImpl } : {}
-		});
-		if (rotated.kind !== "rotated") return rotated;
-		return {
-			kind: "rotated",
-			walletId: input.walletId,
-			recoveryCodes: issued.codes,
-			issuedAtMs: rotated.issuedAtMs,
-			storeVersion: rotated.storeVersion
-		};
+		return await rotateWithIssuedCodes(input, issued, (codeBytes) => input.worker.rotateRecoverySet({ recoveryCodesJson: recoveryCodesJson(codeBytes) }));
 	} finally {
 		if (issued) zeroizeIssuedWalletRecoveryCodes(issued);
 		issued = null;
 	}
 }
+async function rotateWithIssuedCodes(input, issued, rotateInWorker) {
+	const current = await readWalletRecoveryCodeStatus({
+		relayUrl: input.relayUrl,
+		walletId: input.walletId,
+		...input.fetchImpl ? { fetchImpl: input.fetchImpl } : {}
+	});
+	if (current.kind !== "ready") return current.kind === "unauthorized" ? {
+		kind: "transport_failed",
+		message: current.message
+	} : current;
+	const replacement = walletRecoverySetRotationWireFromWorkerResultV1(await rotateInWorker(issued.codeBytes));
+	if (replacement.walletId !== input.walletId) throw new Error("Recovery rotation worker returned a different wallet");
+	const recoveryCodeLocators = await deriveRecoveryCodeLocators(issued.codeBytes, replacement.manifestKekWraps);
+	const rotated = await rotateWalletRecoverySet({
+		relayUrl: input.relayUrl,
+		walletId: input.walletId,
+		factorProof: await input.factorProof({
+			operation: "recovery_rotate",
+			payload: {
+				walletId: input.walletId,
+				expectedStoreVersion: current.storeVersion,
+				manifestKekWraps: replacement.manifestKekWraps,
+				entries: [replacement.entry],
+				recoveryCodeLocators
+			}
+		}),
+		expectedStoreVersion: current.storeVersion,
+		replacement,
+		recoveryCodeLocators,
+		...input.fetchImpl ? { fetchImpl: input.fetchImpl } : {}
+	});
+	if (rotated.kind !== "rotated") return rotated;
+	return {
+		kind: "rotated",
+		walletId: input.walletId,
+		recoveryCodes: issued.codes,
+		issuedAtMs: rotated.issuedAtMs,
+		storeVersion: rotated.storeVersion
+	};
+}
+function recoveryCodesJson(codeBytes) {
+	return JSON.stringify(codeBytes.map((bytes) => ({ codeBytesB64u: base64UrlEncode(bytes) })));
+}
 async function deriveRecoveryCodeLocators(codeBytes, wraps) {
 	if (codeBytes.length !== wraps.length) throw new Error("Recovery code locators do not match the replacement wraps");
 	const recoveryCodeLocators = await Promise.all(codeBytes.map(async (bytes, index) => {

package/dist/esm/react/core/signingEngine/webauthnAuth/credentials/credentialExtensions.js

@@ -1,10 +1,8 @@
+import { asRecordOrArray } from "../../../../shared-ts/src/utils/validation.js";
 //#region src/core/signingEngine/webauthnAuth/credentials/credentialExtensions.ts
-function asRecord(value) {
-	return value && typeof value === "object" ? value : null;
-}
 function getPrfResultsFromCredential(credential) {
 	try {
-		const results = asRecord(asRecord(asRecord(asRecord(credential)?.clientExtensionResults)?.prf)?.results);
+		const results = asRecordOrArray(asRecordOrArray(asRecordOrArray(asRecordOrArray(credential)?.clientExtensionResults)?.prf)?.results);
 		if (!results) return {};
 		const first = typeof results.first === "string" ? results.first.trim() : "";
 		const second = typeof results.second === "string" ? results.second.trim() : "";

package/dist/esm/react/core/signingEngine/workerManager/deviceLinkingPorts.js

@@ -1,10 +1,11 @@
 import { base64UrlDecode, base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
+import { requireCanonicalString } from "../../../shared-ts/src/utils/validation.js";
 import { parseWalletAuthMethodId, parseWalletAuthorityId, parseWalletKeyId } from "../../../shared-ts/src/utils/domainIds.js";
 import { parseDigestB64u } from "../../../shared-ts/src/utils/canonicalPrimitives.js";
-import { parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationV1 } from "../../../shared-ts/src/device-linking/sourceContribution.js";
-import { parseCommittedAuthorityPackagesV1 } from "../../../shared-ts/src/device-linking/committedSignerPackages.js";
 import { parsePasskeyCustodyEnvelopeRecord } from "../../../shared-ts/src/passkey-custody/custodyEnvelope.js";
 import "../../../shared-ts/src/passkey-custody/index.js";
+import { parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationV1 } from "../../../shared-ts/src/device-linking/sourceContribution.js";
+import { parseCommittedAuthorityPackagesV1 } from "../../../shared-ts/src/device-linking/committedSignerPackages.js";
 import { parseWalletAuthorityLinkedSignerMaterialRecordV1 } from "../../indexedDB/linkedAuthoritySignerMaterial.js";
 //#region src/core/signingEngine/workerManager/deviceLinkingPorts.ts
 function targetFactorBindingV1(targetFactor) {
@@ -37,7 +38,7 @@ function createDeviceLinkingOrdinaryMaterialWorkerPortV1(send) {
 			const transfer = [input.factorSecret, ...recipientInputTransferables(recipientInputs)];
 			return parsePreparationResult(await send({
 				kind: "device_linking_ordinary_signer_material_prepare_private_v1",
-				handleId: requireString(input.keyMaterial.handleId, "keyMaterial.handleId"),
+				handleId: requireCanonicalString(input.keyMaterial.handleId, "keyMaterial.handleId", "is required"),
 				targetFactor: targetFactorBindingV1(input.targetFactor),
 				preparations,
 				recipientRequests,
@@ -48,7 +49,7 @@ function createDeviceLinkingOrdinaryMaterialWorkerPortV1(send) {
 		async createOrdinarySignerMaterialRecipientRequestsV1(input) {
 			return parseRecipientPreparationResult(await send({
 				kind: "device_linking_ordinary_signer_material_recipient_prepare_v1",
-				handleId: requireString(input.keyMaterial.handleId, "keyMaterial.handleId"),
+				handleId: requireCanonicalString(input.keyMaterial.handleId, "keyMaterial.handleId", "is required"),
 				requirements: parseRecipientRequirementTuple(input.requirements)
 			}));
 		},
@@ -56,7 +57,7 @@ function createDeviceLinkingOrdinaryMaterialWorkerPortV1(send) {
 			const committed = parseCommittedAuthorityPackagesV1(input.committed);
 			return parseSealedLocalAuthorityMaterialSetV1(await send({
 				kind: "device_linking_ordinary_signer_material_seal_v1",
-				handleId: requireString(input.keyMaterial.handleId, "keyMaterial.handleId"),
+				handleId: requireCanonicalString(input.keyMaterial.handleId, "keyMaterial.handleId", "is required"),
 				committed,
 				targetFactor: targetFactorBindingV1(input.targetFactor),
 				resealedExportRoot: parseOrdinaryResealedExportRootRecordV1(input.resealedExportRoot)
@@ -109,7 +110,7 @@ function parseRecipientRequirementTuple(value) {
 }
 function parseRecipientRequestTuple(value) {
 	if (!Array.isArray(value) || value.length === 0 || value.length > 2) throw new Error("ordinary signer material recipient requests must contain one or two entries");
-	const requests = value.map((entry, index) => {
+	const requests = value.map((entry) => {
 		if (isOrdinaryEd25519RecipientRequestRecordV1(entry)) {
 			if (entry.kind !== "ordinary_ed25519_signer_material_recipient_request_v1" || entry.keyFamily !== "ed25519") throw new Error("ordinary Ed25519 recipient request kind is invalid");
 			return {
@@ -125,7 +126,7 @@ function parseRecipientRequestTuple(value) {
 				kind: "ordinary_ecdsa_signer_material_recipient_request_v1",
 				keyFamily: "ecdsa_secp256k1",
 				walletKeyId: parseWalletKey(entry.walletKeyId),
-				clientEphemeralPublicKey: requireString(entry.clientEphemeralPublicKey, "ECDSA client ephemeral public key")
+				clientEphemeralPublicKey: requireCanonicalString(entry.clientEphemeralPublicKey, "ECDSA client ephemeral public key", "is required")
 			};
 		}
 		throw new Error("ordinary recipient request key family is invalid");
@@ -148,7 +149,7 @@ function parseRecipientPreparationResult(value) {
 }
 function parseRecipientInputTuple(value) {
 	if (!Array.isArray(value) || value.length === 0 || value.length > 2) throw new Error("ordinary signer material recipient inputs must contain one or two entries");
-	const inputs = value.map((entry, index) => {
+	const inputs = value.map((entry) => {
 		if (isOrdinaryEd25519RecipientInputRecordV1(entry)) {
 			if (entry.kind !== "ordinary_ed25519_signer_material_recipient_input_v1" || entry.keyFamily !== "ed25519") throw new Error("ordinary Ed25519 recipient input kind is invalid");
 			return {
@@ -215,7 +216,7 @@ function parseTargetFactorBindingV1(value) {
 			kind: "passkey",
 			walletAuthMethodId: authMethod.value,
 			verificationDigestB64u,
-			rpId: requireString(value.rpId, "ordinary target factor rpId"),
+			rpId: requireCanonicalString(value.rpId, "ordinary target factor rpId", "is required"),
 			credentialIdB64u: parseB64u(value.credentialIdB64u, "ordinary target factor credentialIdB64u")
 		};
 	}
@@ -224,14 +225,14 @@ function parseTargetFactorBindingV1(value) {
 		const authMethod = parseWalletAuthMethodId(value.walletAuthMethodId);
 		if (!authMethod.ok) throw new Error(authMethod.error.message);
 		const verificationDigestB64u = parseDigestB64u(value.verificationDigestB64u);
-		const emailHashHex = requireString(value.emailHashHex, "ordinary target factor emailHashHex");
+		const emailHashHex = requireCanonicalString(value.emailHashHex, "ordinary target factor emailHashHex", "is required");
 		if (!/^[0-9a-f]{64}$/.test(emailHashHex)) throw new Error("ordinary target factor emailHashHex is invalid");
 		return {
 			kind: "email_otp",
 			walletAuthMethodId: authMethod.value,
 			verificationDigestB64u,
 			emailHashHex,
-			registrationAuthorityId: requireString(value.registrationAuthorityId, "ordinary target factor registrationAuthorityId")
+			registrationAuthorityId: requireCanonicalString(value.registrationAuthorityId, "ordinary target factor registrationAuthorityId", "is required")
 		};
 	}
 	throw new Error("ordinary material target factor kind is unsupported");
@@ -266,7 +267,7 @@ function parseSealedLocalAuthorityMaterialSetV1(value) {
 	};
 }
 function parseB64u(value, label) {
-	const encoded = requireString(value, label);
+	const encoded = requireCanonicalString(value, label, "is required");
 	let decoded;
 	try {
 		decoded = base64UrlDecode(encoded);
@@ -316,10 +317,6 @@ function isWalletAuthorityExportRootRecordV1(value) {
 function isSealedLocalAuthorityMaterialSetRecordV1(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "exportRoot|installedRecordSetDigestB64u|signerMaterials";
 }
-function requireString(value, label) {
-	if (typeof value !== "string" || value.trim() !== value || value.length === 0) throw new Error(`${label} is required`);
-	return value;
-}
 //#endregion
 export { createDeviceLinkingOrdinaryMaterialWorkerPortV1 };
 

package/dist/esm/react/core/signingEngine/workerManager/deviceLinkingSourceContribution.js

@@ -1,17 +1,19 @@
 import { base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
 import { mpcMaterialActivationRefsEqual, parseWalletKeyId } from "../../../shared-ts/src/utils/domainIds.js";
-import { deriveEvmFamilySigningKeySlotId } from "../../../shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js";
 import { parseDigestB64u } from "../../../shared-ts/src/utils/canonicalPrimitives.js";
-import { deriveRouterAbEd25519YaoApplicationBindingDigestV1 } from "../../../shared-ts/src/utils/routerAbEd25519Yao.js";
-import { parseLinkedDeviceEd25519SourcePreservingReservationV1 } from "../../../shared-ts/src/device-linking/sourceContribution.js";
+import { deriveEvmFamilySigningKeySlotId } from "../../../shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js";
 import "../../../shared-ts/src/signing-lanes/index.js";
 import { parseEcdsaThresholdKeyId } from "../session/keyMaterialBrands.js";
+import { deriveRouterAbEd25519YaoApplicationBindingDigestV1 } from "../../../shared-ts/src/utils/routerAbEd25519YaoDigests.js";
+import { parseLinkedDeviceEd25519SourcePreservingReservationV1 } from "../../../shared-ts/src/device-linking/sourceContribution.js";
 import { prepareLinkedDeviceEcdsaSourceContributionWasm } from "../threshold/crypto/ecdsaDerivationClientWasm.js";
 import { openEd25519YaoLaneWorkerSourceFromUnlockedCapabilityV1 } from "../threshold/crypto/ed25519YaoLaneWasm.js";
 //#region src/core/signingEngine/workerManager/deviceLinkingSourceContribution.ts
 function createDeviceLinkingEcdsaSourceContributionMetadataReaderV1(context) {
 	return async ({ preparation }) => {
 		const sourceActivation = preparation.source.activation;
+		const linked = context.readLinkedEcdsaHolderV1({ materialActivation: sourceActivation });
+		if (linked) return linkedEcdsaSourceMetadataV1(linked, sourceActivation);
 		const manifest = await context.readActiveEcdsaCapabilityManifestV1({ materialActivation: sourceActivation });
 		assertExactEcdsaSourceMetadataContextV1({
 			sourceActivation,
@@ -28,6 +30,28 @@ function createDeviceLinkingEcdsaSourceContributionMetadataReaderV1(context) {
 		};
 	};
 }
+function linkedEcdsaSourceMetadataV1(holder, sourceActivation) {
+	if (!mpcMaterialActivationRefsEqual(holder.materialActivation, sourceActivation)) throw new Error("linked ECDSA holder activation does not match preparation");
+	const normalSigning = holder.activationReceipt.normalSigning;
+	const scope = normalSigning.scope;
+	const signingKeySlotId = deriveEvmFamilySigningKeySlotId({
+		walletId: holder.walletId,
+		signingRootId: scope.signing_root_id,
+		signingRootVersion: scope.signing_root_version
+	});
+	const walletKeyId = parseWalletKeyId(`wallet-key:ecdsa:${holder.walletId}:${signingKeySlotId}`);
+	if (!walletKeyId.ok) throw new Error(`linked ECDSA source wallet key identity: ${walletKeyId.error.message}`);
+	return {
+		walletKeyId: walletKeyId.value,
+		sourceDerivation: {
+			applicationBindingDigestB64u: parseDigestB64u(scope.context.application_binding_digest_b64u),
+			clientShareRetryCounter: scope.public_identity.client_share_retry_counter,
+			ecdsaThresholdKeyId: parseEcdsaThresholdKeyId(holder.ecdsaThresholdKeyId),
+			sourceNormalSigning: normalSigning
+		},
+		linkedHolderHandleId: holder.holderHandleId
+	};
+}
 function assertExactEcdsaSourceMetadataContextV1(input) {
 	if (!mpcMaterialActivationRefsEqual(input.manifest.activation.materialActivation, input.sourceActivation)) throw new Error("ECDSA capability manifest activation does not match preparation");
 }
@@ -107,7 +131,8 @@ async function produceEcdsaSourceContributionV1(input) {
 	const metadata = await input.readMetadataV1({ preparation: input.preparation });
 	const prepared = await prepareLinkedDeviceEcdsaSourceContributionWasm({
 		preparation: input.preparation,
-		workerCtx: input.workerContext
+		workerCtx: input.workerContext,
+		...metadata.linkedHolderHandleId === void 0 ? {} : { linkedHolderHandleId: metadata.linkedHolderHandleId }
 	});
 	return {
 		kind: "linked_device_ecdsa_source_contribution_v1",