@seams/wallet 0.6.2 → 0.7.3

package/dist/public/sdk/{helpers-DpRjHMBx.js → helpers-ZrowMnev.js}

@@ -1,13 +1,10 @@
-import { l as isString, o as isObject, r as isArray } from "./validation-BphUDXs7.js";
+import { n as asRecordOrArray, p as isString, s as isArray, u as isObject } from "./validation-gat4LEKm.js";
 import { i as base64UrlEncode } from "./base64-Clm8C-e9.js";
-import { n as PASSKEY_PRF_SECOND_SALT_V1, t as PASSKEY_PRF_FIRST_SALT_V1 } from "./signingSessionSeal-CdtgXHSL.js";
+import { n as PASSKEY_PRF_SECOND_SALT_V1, t as PASSKEY_PRF_FIRST_SALT_V1 } from "./signingSessionSeal-Cu-GHm6y.js";
 //#region src/core/signingEngine/webauthnAuth/credentials/credentialExtensions.ts
-function asRecord(value) {
-	return value && typeof value === "object" ? value : null;
-}
 function getPrfResultsFromCredential(credential) {
 	try {
-		const results = asRecord(asRecord(asRecord(asRecord(credential)?.clientExtensionResults)?.prf)?.results);
+		const results = asRecordOrArray(asRecordOrArray(asRecordOrArray(asRecordOrArray(credential)?.clientExtensionResults)?.prf)?.results);
 		if (!results) return {};
 		const first = typeof results.first === "string" ? results.first.trim() : "";
 		const second = typeof results.second === "string" ? results.second.trim() : "";

package/dist/{esm/sdk/host-BPC1zSVg.js → public/sdk/host-CnV8nAUe.js}

@@ -1,12 +1,12 @@
-import { i as parseTransactionReviewWire, n as assertTransactionReviewValid, o as sameTransactionReviewIdentity, r as parseTransactionReviewState, s as transactionReviewCancellationCode, t as TransactionReviewError } from "./transactionReview-UoZQ2opj.js";
-import { t as WalletIframeDomEvents } from "./events-Z_Rmy0Hn.js";
-import { i as transactionReviewAdmission, n as cancelTransactionReviews, t as TransactionReviewAdmission } from "./transactionReviewAdmission-Cv9kTr4c.js";
-import { a as setEmbeddedBase, i as setEmbeddedAssetVersion, n as getEmbeddedBase } from "./base-CMsoJcVv.js";
-import { t as walletIframeRequestIdFromBoundary } from "./walletIframeIdentity-UmQTJsHc.js";
-import { o as isObject, s as isPlainObject } from "./validation-BphUDXs7.js";
-import { _ as parseHostedAuthMenuExternalAuthResolution, n as WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH, p as parseHostedAuthMenuCancelPayload, r as WALLET_PROTOCOL_VERSION, v as parseHostedAuthMenuOpenRequest } from "./messages-B3UbNZYc.js";
+import { d as isPlainObject, u as isObject } from "./validation-gat4LEKm.js";
+import { i as parseTransactionReviewWire, n as assertTransactionReviewValid, o as sameTransactionReviewIdentity, r as parseTransactionReviewState, s as transactionReviewCancellationCode, t as TransactionReviewError } from "./transactionReview-DpHLTznU.js";
+import { t as WalletIframeDomEvents } from "./events-DYoBL2HO.js";
+import { i as transactionReviewAdmission, n as cancelTransactionReviews, t as TransactionReviewAdmission } from "./transactionReviewAdmission-BCPvl8OZ.js";
+import { a as setEmbeddedBase, i as setEmbeddedAssetVersion, n as getEmbeddedBase } from "./base-D1B5mGin.js";
+import { t as walletIframeRequestIdFromBoundary } from "./walletIframeIdentity-DB6Z2EC9.js";
+import { _ as parseHostedAuthMenuExternalAuthResolution, n as WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH, p as parseHostedAuthMenuCancelPayload, r as WALLET_PROTOCOL_VERSION, v as parseHostedAuthMenuOpenRequest } from "./messages-C7Dbx9iN.js";
 import { t as errorMessage } from "./errors-93h9uAW9.js";
-import { n as preloadWalletHostRecoveryCodeSurface, t as loadWalletHostRuntime } from "./runtimeLoader-ZXsvx9zX.js";
+import { n as preloadWalletHostRecoveryCodeSurface, t as loadWalletHostRuntime } from "./runtimeLoader-DQVEFVaW.js";
 //#region src/SeamsWeb/walletIframe/host/bootstrap.ts
 /**
 * Bootstrap tasks for the wallet iframe host.
@@ -387,7 +387,7 @@ function initWalletIFrame(options = {}) {
 						...state.walletConfigs || {},
 						...route.request.payload
 					};
-					if (CONFIRM_UI_SURFACES.some(({ selector }) => document.querySelector(selector))) (await import("./runtimeContext-CTt9ON27.js")).syncActiveWalletHostRuntimeConfig(state);
+					if (CONFIRM_UI_SURFACES.some(({ selector }) => document.querySelector(selector))) (await import("./runtimeContext-D3TBExQ6.js")).syncActiveWalletHostRuntimeConfig(state);
 					post({
 						type: "PONG",
 						requestId
@@ -442,13 +442,13 @@ function initWalletIFrame(options = {}) {
 					const payload = route.request.payload;
 					const target = payload && typeof payload === "object" ? Reflect.get(payload, "requestId") : null;
 					const view = payload && typeof payload === "object" ? Reflect.get(payload, "view") : null;
-					if (typeof target === "string" && (view === "toast" || view === "closed")) (await import("./transaction-activity-DKgIGpKG.js").then((n) => n.o)).setTransactionActivityView(target, view);
+					if (typeof target === "string" && (view === "toast" || view === "closed")) (await import("./transaction-activity-CSMCveBn.js").then((n) => n.o)).setTransactionActivityView(target, view);
 					return;
 				}
 				case "PM_TRANSACTION_BROADCAST_STARTED": {
 					const payload = route.request.payload;
 					const signedTransaction = payload && typeof payload === "object" ? Reflect.get(payload, "signedTransaction") : null;
-					if (typeof signedTransaction === "string") (await import("./transaction-activity-DKgIGpKG.js").then((n) => n.o)).transactionBroadcastStarted(signedTransaction);
+					if (typeof signedTransaction === "string") (await import("./transaction-activity-CSMCveBn.js").then((n) => n.o)).transactionBroadcastStarted(signedTransaction);
 					return;
 				}
 			}
@@ -473,7 +473,7 @@ function initWalletIFrame(options = {}) {
 			});
 		} catch (err) {
 			if (reviewAdmission?.cancelled) return;
-			const canonicalSignerErrors = await import("./canonicalSignerErrorCode-DAzYzisf.js");
+			const canonicalSignerErrors = await import("./canonicalSignerErrorCode-BBIk365e.js");
 			const codeRaw = err && typeof err === "object" && "code" in err ? err.code : void 0;
 			const message = errorMessage(err);
 			const code = canonicalSignerErrors.resolveWalletBoundaryErrorCode({

package/dist/{esm/sdk/intentDigest-A1MbbJPu.js → public/sdk/intentDigest-CvOSNlCH.js}

@@ -1,6 +1,6 @@
 import { i as base64UrlEncode } from "./base64-Clm8C-e9.js";
-import { A as alphabetizeStringify, M as sha256BytesUtf8 } from "./registrationIntent-DwAIMQYh.js";
-import { t as ActionType } from "./actions-DsBQcjBn.js";
+import { f as alphabetizeStringify, m as sha256BytesUtf8 } from "./chains-BMh3btVo.js";
+import { t as ActionType } from "./actions-CCvThiKe.js";
 //#region src/utils/intentDigest.ts
 async function sha256Base64UrlUtf8(input) {
 	return base64UrlEncode(await sha256BytesUtf8(input));

package/dist/public/sdk/{jsxRuntime.module-FAP0NE9p.js → jsxRuntime.module-CuH5ZEIA.js}

@@ -1,4 +1,4 @@
-import { n as getDefaultCspNonce, t as createCspStylesheetManager } from "./csp-stylesheet-DLj_a6t_.js";
+import { n as getDefaultCspNonce, t as createCspStylesheetManager } from "./csp-stylesheet-btENhsNp.js";
 //#region ../../node_modules/preact/dist/preact.module.js
 var n, l, u$1, i$1, r, o$1, e, f$1, c, a, s, h, p, v, d = {}, w = [], _ = /acit|ex(?:s|g|n|p|$)|rph|grid|ows|mnc|ntw|ine[ch]|zoo|^ord|itera/i, g = Array.isArray;
 function m(n, l) {

package/dist/public/sdk/{keyMaterialBrands-BbjCfzXv.js → keyMaterialBrands-CogGAAZn.js}

@@ -1,7 +1,7 @@
-import { T as parseMpcMaterialActivationRef } from "./normalize-BephcEIF.js";
+import { h as parseMpcMaterialActivationRef } from "./domainIds-lcrFg6Sa.js";
 import { i as base64UrlEncode, r as base64UrlDecode } from "./base64-Clm8C-e9.js";
-import { St as parseSdkEcdsaDerivationThresholdKeyId } from "./evmFamilyEcdsaIdentity-_kuKSW35.js";
-//#region src/core/signingEngine/session/keyMaterialBrands.ts
+import { xt as parseSdkEcdsaDerivationThresholdKeyId } from "./ecdsaPresignLifecycle-Bfx2AQKb.js";
+//#region ../shared-ts/src/threshold/keyMaterialBrands.ts
 function parseNonEmptyBrand(value, label) {
 	const normalized = String(value ?? "").trim();
 	if (!normalized) throw new Error(`${label} must be a non-empty string`);
@@ -13,6 +13,17 @@ function parseSigningSessionSealKeyVersion(value) {
 function parseEcdsaClientVerifyingShareB64u(value) {
 	return parseNonEmptyBrand(value, "ECDSA client verifying share");
 }
+function parseEcdsaRelayerKeyId(value) {
+	return parseNonEmptyBrand(value, "ECDSA relayer key id");
+}
+function parseEcdsaKeyHandle(value) {
+	return parseNonEmptyBrand(value, "ECDSA key handle");
+}
+function formatEcdsaKeyHandleForWire(value) {
+	return value;
+}
+//#endregion
+//#region src/core/signingEngine/session/keyMaterialBrands.ts
 function parseEcdsaClientVerifyingPublicKey33B64u(value) {
 	if (typeof value !== "string") throw new Error("ECDSA client verifying public key must be a string");
 	const normalized = value.trim();
@@ -27,15 +38,9 @@ function parseEcdsaClientVerifyingPublicKey33B64u(value) {
 	if (bytes[0] !== 2 && bytes[0] !== 3) throw new Error("ECDSA client verifying public key must be compressed secp256k1");
 	return normalized;
 }
-function parseEcdsaRelayerKeyId(value) {
-	return parseNonEmptyBrand(value, "ECDSA relayer key id");
-}
 function parseEcdsaThresholdKeyId(value) {
 	return parseSdkEcdsaDerivationThresholdKeyId(value);
 }
-function parseEcdsaKeyHandle(value) {
-	return parseNonEmptyBrand(value, "ECDSA key handle");
-}
 function parseEcdsaRoleLocalMaterialHandle(value) {
 	return parseNonEmptyBrand(value, "ECDSA role-local material handle");
 }
@@ -85,8 +90,5 @@ function parseEcdsaRoleLocalWorkerHandle(value) {
 		durableMaterialRef: parseEcdsaRoleLocalDurableMaterialRef(record.durableMaterialRef)
 	};
 }
-function formatEcdsaKeyHandleForWire(value) {
-	return value;
-}
 //#endregion
-export { parseEcdsaRelayerKeyId as a, parseEcdsaRoleLocalMaterialHandle as c, parseEcdsaThresholdKeyId as d, parseSigningSessionSealKeyVersion as f, parseEcdsaKeyHandle as i, parseEcdsaRoleLocalPersistedMaterialRef as l, parseEcdsaClientVerifyingPublicKey33B64u as n, parseEcdsaRoleLocalBindingDigest as o, parseEcdsaClientVerifyingShareB64u as r, parseEcdsaRoleLocalDurableMaterialRef as s, formatEcdsaKeyHandleForWire as t, parseEcdsaRoleLocalWorkerHandle as u };
+export { parseEcdsaRoleLocalPersistedMaterialRef as a, formatEcdsaKeyHandleForWire as c, parseEcdsaRelayerKeyId as d, parseSigningSessionSealKeyVersion as f, parseEcdsaRoleLocalMaterialHandle as i, parseEcdsaClientVerifyingShareB64u as l, parseEcdsaRoleLocalBindingDigest as n, parseEcdsaRoleLocalWorkerHandle as o, parseEcdsaRoleLocalDurableMaterialRef as r, parseEcdsaThresholdKeyId as s, parseEcdsaClientVerifyingPublicKey33B64u as t, parseEcdsaKeyHandle as u };

package/dist/public/sdk/{localOnly-CbLYTVbo.js → localOnly-DTpa2jD5.js}

@@ -1,15 +1,13 @@
-import "./validation-BphUDXs7.js";
+import "./validation-gat4LEKm.js";
 import { t as errorMessage } from "./errors-93h9uAW9.js";
 import { i as base64UrlEncode } from "./base64-Clm8C-e9.js";
-import "./registrationIntent-DwAIMQYh.js";
-import "./signerDomain-DDLiwuYS.js";
-import "./participants-Bcnsa_ip.js";
-import "./capabilityKinds-jwCEaqBU.js";
-import "./evmFamilyEcdsaIdentity-_kuKSW35.js";
-import "./actions-DsBQcjBn.js";
-import { N as silentConfirmationConfig, O as resolveUiAppearance, f as ERROR_MESSAGES, j as UserConfirmationType, l as collectAuthenticationCredentialForExactNearChallengeB64u, m as isUserCancelledUserConfirm, n as createConfirmTxFlowAdapters, o as __isWalletIframeHostMode, t as createConfirmSession, u as collectAuthenticationCredentialForExactWalletChallengeB64u, x as getIntentDigest } from "./adapters-m94YFj70.js";
-import { n as removeExportViewerHostIfPresent, r as upsertExportViewerHost } from "./export-viewer-host-CbqG8ZQV.js";
-import "./jsxRuntime.module-FAP0NE9p.js";
+import "./capabilityKinds-hvYqa6S_.js";
+import "./signerDomain-IEAVrOrc.js";
+import "./encoders-D8d07vpx.js";
+import "./actions-CCvThiKe.js";
+import { N as silentConfirmationConfig, O as resolveUiAppearance, f as ERROR_MESSAGES, j as UserConfirmationType, l as collectAuthenticationCredentialForExactNearChallengeB64u, m as isUserCancelledUserConfirm, n as createConfirmTxFlowAdapters, o as __isWalletIframeHostMode, t as createConfirmSession, u as collectAuthenticationCredentialForExactWalletChallengeB64u, x as getIntentDigest } from "./adapters-Dli9XAZp.js";
+import { n as removeExportViewerHostIfPresent, r as upsertExportViewerHost } from "./export-viewer-host-rWMSQQMP.js";
+import "./jsxRuntime.module-CuH5ZEIA.js";
 //#region src/core/signingEngine/uiConfirm/handlers/flows/localOnly.ts
 function createRandomChallengeB64u() {
 	return base64UrlEncode(crypto.getRandomValues(new Uint8Array(32)).buffer);

package/dist/{esm/sdk/messages-B3UbNZYc.js → public/sdk/messages-C7Dbx9iN.js}

@@ -1,6 +1,8 @@
-import { F as parseWalletAuthMethodId, R as parseWalletId } from "./normalize-BephcEIF.js";
-import { t as walletIframeRequestIdFromBoundary } from "./walletIframeIdentity-UmQTJsHc.js";
-import { s as isPlainObject } from "./validation-BphUDXs7.js";
+import { O as parseWalletId, T as parseWalletAuthMethodId } from "./domainIds-lcrFg6Sa.js";
+import { d as isPlainObject } from "./validation-gat4LEKm.js";
+import { t as walletIframeRequestIdFromBoundary } from "./walletIframeIdentity-DB6Z2EC9.js";
+//#region src/SeamsWeb/walletIframe/shared/messages.ts
+const WALLET_IFRAME_SURFACE_MEASUREMENT_MAX_CSS_PX = 4096;
 const HOSTED_AUTH_MENU_ERROR_EVENT = "seams:hosted-auth-menu-error";
 const DEFAULT_HOSTED_AUTH_MENU_COPY = {
 	login: {
@@ -40,7 +42,7 @@ function positiveSafeSequence(value) {
 	return typeof value === "number" && Number.isSafeInteger(value) && value > 0 ? value : null;
 }
 function boundedPositiveCssPx(value) {
-	return typeof value === "number" && Number.isFinite(value) && value > 0 && value <= 4096 ? value : null;
+	return typeof value === "number" && Number.isFinite(value) && value > 0 && value <= WALLET_IFRAME_SURFACE_MEASUREMENT_MAX_CSS_PX ? value : null;
 }
 function parseWalletIframeSurfaceMeasurement(value) {
 	const record = recordFromBoundary(value);

package/dist/{esm/sdk/mountExportPrivateKeySurface-CNc6Mch4.js → public/sdk/mountExportPrivateKeySurface-DgX-IBG_.js}

@@ -1,7 +1,7 @@
-import { t as WalletIframeDomEvents } from "./events-Z_Rmy0Hn.js";
-import { r as appearanceTokenCssRule } from "./csp-stylesheet-DLj_a6t_.js";
-import { a as R, i as M, n as confirmationDocumentStyles, o as S, r as C, t as u } from "./jsxRuntime.module-FAP0NE9p.js";
-import { i as copySurfaceText, n as ConfirmationModal, r as CopyStatusIcon, t as ConfirmationDrawer } from "./ConfirmationDrawer-G0bT0Dbu.js";
+import { t as WalletIframeDomEvents } from "./events-DYoBL2HO.js";
+import { r as appearanceTokenCssRule } from "./csp-stylesheet-btENhsNp.js";
+import { a as R, i as M, n as confirmationDocumentStyles, o as S, r as C, t as u } from "./jsxRuntime.module-CuH5ZEIA.js";
+import { i as copySurfaceText, n as ConfirmationModal, r as CopyStatusIcon, t as ConfirmationDrawer } from "./ConfirmationDrawer-MgFTBwwK.js";
 //#region src/core/signingEngine/uiConfirm/ui/export-private-key-reveal.ts
 const HEX_REEL_ALPHABET = "0123456789abcdef";
 const BASE58_REEL_ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";

package/dist/{esm/sdk/mountRecoveryCodeBackupSurface-ChwzwnYG.js → public/sdk/mountRecoveryCodeBackupSurface-DXrExiJ7.js}

@@ -1,5 +1,5 @@
-import { r as appearanceTokenCssRule } from "./csp-stylesheet-DLj_a6t_.js";
-import { a as R, i as M, n as confirmationDocumentStyles, o as S, r as C, t as u } from "./jsxRuntime.module-FAP0NE9p.js";
+import { r as appearanceTokenCssRule } from "./csp-stylesheet-btENhsNp.js";
+import { a as R, i as M, n as confirmationDocumentStyles, o as S, r as C, t as u } from "./jsxRuntime.module-CuH5ZEIA.js";
 //#region src/core/signingEngine/uiConfirm/ui/preact/RecoveryCodeBackupSurface.tsx
 /** @jsxImportSource preact */
 const COPIED_FLASH_MS = 1800;

package/dist/{esm/sdk/nearEd25519YaoMaterialActivation-Cz5UJQ_7.js → public/sdk/nearEd25519YaoMaterialActivation-B5GecIvq.js}

@@ -1,26 +1,30 @@
-import { F as parseWalletAuthMethodId, H as parseWebAuthnRpId, L as parseWalletAuthorityId, M as parseThresholdEd25519SessionId, R as parseWalletId, S as parseMpcCapabilityRuntimeRef, T as parseMpcMaterialActivationRef, V as parseWebAuthnCredentialIdB64u, j as parseThresholdEcdsaSessionId, k as parseRootShareEpoch, p as mpcMaterialActivationRefsEqual } from "./normalize-BephcEIF.js";
-import { b as parseNearAccountId, o as isObject, s as isPlainObject, v as parseImplicitNearAccountId, y as parseNamedNearAccountId } from "./validation-BphUDXs7.js";
+import { D as parseWalletAuthorityId, M as parseWebAuthnRpId, O as parseWalletId, S as parseThresholdEd25519SessionId, T as parseWalletAuthMethodId, f as parseMpcCapabilityRuntimeRef, h as parseMpcMaterialActivationRef, j as parseWebAuthnCredentialIdB64u, r as mpcMaterialActivationRefsEqual, x as parseThresholdEcdsaSessionId, y as parseRootShareEpoch } from "./domainIds-lcrFg6Sa.js";
+import { D as parseImplicitNearAccountId, O as parseNamedNearAccountId, d as isPlainObject, k as parseNearAccountId, u as isObject } from "./validation-gat4LEKm.js";
 import { t as errorMessage } from "./errors-93h9uAW9.js";
-import { i as base64UrlEncode, r as base64UrlDecode } from "./base64-Clm8C-e9.js";
-import { A as alphabetizeStringify, E as sameAddSignerIntentV1, I as parseDigestB64u, M as sha256BytesUtf8, T as sameAddAuthMethodIntentV1, _ as parseAddAuthMethodIntentV1, b as parseWalletAuthMethodRecordV2, g as normalizeRegistrationSignerPlan, h as normalizeRegistrationAuthMethodInput, k as walletIdFromString, n as addAuthMethodIntentGrantFromString, r as addSignerIntentGrantFromString, s as computeRegistrationIntentDigestB64u, v as parseAddSignerIntentV1, w as registrationSignerSetSelectionFromPlan, y as parseNearEd25519SigningKeyId } from "./registrationIntent-DwAIMQYh.js";
-import { a as thresholdEcdsaChainTargetFromRequest, c as toWalletId, l as walletIdFromWalletProfile, o as thresholdEcdsaChainTargetKey, s as thresholdEcdsaChainTargetsEqual } from "./ecdsaChainTarget-BOTPGIU_.js";
-import { n as SIGNER_AUTH_METHODS, r as SIGNER_KINDS } from "./signerDomain-DDLiwuYS.js";
-import { o as normalizeRuntimePolicyScope } from "./participants-Bcnsa_ip.js";
-import { o as normalizeThresholdRuntimePolicyScope, v as parseWalletAuthorityV1 } from "./sessionPolicy-B4FsPuk2.js";
-import { It as isPasskeyWalletAuthAuthority, R as parseWalletSessionOperationCredentialV1, Sn as routerAbMpcMaterialActivationRefFromWire, Tn as parseWebAuthnAuthenticatorDeviceInfo, Y as ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, _t as requireRouterAbEcdsaDerivationNormalSigningStateV1, d as parseActiveWalletSessionV1, dt as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, hn as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, ht as parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, it as parseRouterAbEcdsaDerivationPublicCapabilityV1, kn as parseWalletAddAuthMethodRegistrationOptions, mt as parseRouterAbEcdsaRegistrationRequestFactsV1, pt as parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, rt as parseRouterAbEcdsaDerivationNormalSigningStateV1, zt as parseWalletAuthAuthority } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
-import { d as parseMpcWalletSigningQuotaId, g as parseWalletSessionMintId, h as parseWalletSessionId, m as parseWalletSessionAuthorizationId } from "./capabilityKinds-jwCEaqBU.js";
-import { Q as parseThresholdEcdsaKeyHandle, S as toThresholdEcdsaPublicKeyB64u, a as buildEvmFamilyEcdsaWalletKey, g as resolveThresholdEcdsaKeyIdFromRecord, h as parseThresholdSigningRootBinding, y as toEvmFamilyEcdsaKeyHandle } from "./evmFamilyEcdsaIdentity-_kuKSW35.js";
-import { d as parsePasskeyCustodyEnvelopeRecord, t as parseWalletCustodyRegistrationOutcome } from "./passkey-custody-BaHyYMhj.js";
-import { l as parseRouterAbEd25519NormalSigningState, u as requireRouterAbEd25519NormalSigningState } from "./signingSessionSeal-CdtgXHSL.js";
-import { a as toEcdsaDerivationThresholdKeyId } from "./challengeDelivery-BjLKoou3.js";
-import { n as buildRelayerJsonPostRequestInit, r as normalizeRelayerBaseUrl, t as buildBearerAuthorizationHeader } from "./relayerHttp-LsVTZCxA.js";
+import { r as base64UrlDecode } from "./base64-Clm8C-e9.js";
+import { h as normalizeRuntimePolicyScope, o as normalizeThresholdRuntimePolicyScope } from "./sessionPolicy-DO-MkL65.js";
+import { At as parseActiveWalletSessionV1, D as parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, O as parseRouterAbEcdsaRegistrationRequestFactsV1, Q as isPasskeyWalletAuthAuthority, T as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, Tt as routerAbMpcMaterialActivationRefFromWire, _ as parseRouterAbEcdsaDerivationNormalSigningStateV1, c as ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, j as requireRouterAbEcdsaDerivationNormalSigningStateV1, jt as parseWalletSessionOperationCredentialV1, k as parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, tt as parseWalletAuthAuthority, v as parseRouterAbEcdsaDerivationPublicCapabilityV1 } from "./ecdsaPresignLifecycle-Bfx2AQKb.js";
+import { d as parseMpcWalletSigningQuotaId, g as parseWalletSessionMintId, h as parseWalletSessionId, m as parseWalletSessionAuthorizationId } from "./capabilityKinds-hvYqa6S_.js";
+import { f as alphabetizeStringify } from "./chains-BMh3btVo.js";
+import { o as sha256Utf8DigestB64u, r as parseDigestB64u } from "./canonicalPrimitives-BTHWz80v.js";
+import { a as thresholdEcdsaChainTargetFromRequest, c as toWalletId, l as walletIdFromWalletProfile, o as thresholdEcdsaChainTargetKey, s as thresholdEcdsaChainTargetsEqual } from "./ecdsaChainTarget-Bl-JWyuw.js";
+import { n as SIGNER_AUTH_METHODS, r as SIGNER_KINDS } from "./signerDomain-IEAVrOrc.js";
+import { O as parseThresholdEcdsaKeyHandle, S as toThresholdEcdsaPublicKeyB64u, a as buildEvmFamilyEcdsaWalletKey, g as resolveThresholdEcdsaKeyIdFromRecord, h as parseThresholdSigningRootBinding, ln as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, mn as parseWalletAddAuthMethodRegistrationOptions, rt as parseWebAuthnAuthenticatorDeviceInfo, y as toEvmFamilyEcdsaKeyHandle } from "./evmFamilyEcdsaIdentity-CqGafQsI.js";
+import { u as parseWalletAuthorityV1, w as parseWalletAuthMethodRecordV2 } from "./walletAuthority-DD9T25F6.js";
+import { a as parseNearEd25519SigningKeyId, l as normalizeRegistrationAuthMethodInput, o as walletIdFromString } from "./registrationIds-DLSdEKSv.js";
+import { d as parsePasskeyCustodyEnvelopeRecord, t as parseWalletCustodyRegistrationOutcome } from "./passkey-custody-UUHbC0pk.js";
+import { l as parseRouterAbEd25519NormalSigningState, u as requireRouterAbEd25519NormalSigningState } from "./signingSessionSeal-Cu-GHm6y.js";
+import { o as normalizeRegistrationSignerPlan, u as registrationSignerSetSelectionFromPlan } from "./registrationSignerPlan-DhV8VAob.js";
+import { a as parseAddAuthMethodIntentV1, c as sameAddSignerIntentV1, i as computeRegistrationIntentDigestB64u, n as addSignerIntentGrantFromString, o as parseAddSignerIntentV1, s as sameAddAuthMethodIntentV1, t as addAuthMethodIntentGrantFromString } from "./registrationIntent-4zwk16zQ.js";
+import { a as toEcdsaDerivationThresholdKeyId } from "./challengeDelivery-DZtopOAG.js";
+import { n as buildRelayerJsonPostRequestInit, r as normalizeRelayerBaseUrl, t as buildBearerAuthorizationHeader } from "./relayerHttp-VC8Holz1.js";
 //#region ../shared-ts/src/utils/registrationEstablishedSession.ts
 function parseRegistrationEstablishedSessionResultV2(raw) {
 	const result = inspectRawObject(raw);
 	if (!result || !("kind" in result) || typeof result.kind !== "string") return null;
 	switch (result.kind) {
 		case "issued": {
-			if (!hasExactKeys(result, ["kind", "session"]) || !("session" in result)) return null;
+			if (!hasExactKeys$1(result, ["kind", "session"]) || !("session" in result)) return null;
 			const session = parseRegistrationEstablishedSessionV2(result.session);
 			return session === null ? null : {
 				kind: "issued",
@@ -28,7 +32,7 @@ function parseRegistrationEstablishedSessionResultV2(raw) {
 			};
 		}
 		case "already_committed": {
-			if (!hasExactKeys(result, [
+			if (!hasExactKeys$1(result, [
 				"kind",
 				"session",
 				"next"
@@ -47,7 +51,7 @@ function parseRegistrationEstablishedSessionResultV2(raw) {
 function parseRegistrationEstablishedSessionV2(raw) {
 	try {
 		const record = inspectRawObject(raw);
-		if (!record || !hasExactKeys(record, [
+		if (!record || !hasExactKeys$1(record, [
 			"kind",
 			"walletId",
 			"authorizationId",
@@ -106,7 +110,7 @@ function hasUnexpectedRegistrationSigningFamily(walletSession, ...allowedFamilie
 function parseRegistrationEstablishedSessionProjectionV2(raw) {
 	try {
 		const record = inspectRawObject(raw);
-		if (!record || !hasExactKeys(record, [
+		if (!record || !hasExactKeys$1(record, [
 			"kind",
 			"walletId",
 			"authorizationId",
@@ -152,7 +156,7 @@ function parseRegistrationEstablishedSessionProjectionTokensV2(raw) {
 	if (!record || !("kind" in record) || typeof record.kind !== "string") return null;
 	switch (record.kind) {
 		case "evm_family_ecdsa": {
-			if (!hasExactKeys(record, ["kind", "ecdsa"]) || !("ecdsa" in record)) return null;
+			if (!hasExactKeys$1(record, ["kind", "ecdsa"]) || !("ecdsa" in record)) return null;
 			const ecdsa = parseRegistrationEstablishedEcdsaSessionProjectionV2(record.ecdsa);
 			return ecdsa === null ? null : {
 				kind: "evm_family_ecdsa",
@@ -160,7 +164,7 @@ function parseRegistrationEstablishedSessionProjectionTokensV2(raw) {
 			};
 		}
 		case "near_ed25519": {
-			if (!hasExactKeys(record, ["kind", "ed25519"]) || !("ed25519" in record)) return null;
+			if (!hasExactKeys$1(record, ["kind", "ed25519"]) || !("ed25519" in record)) return null;
 			const ed25519 = parseRegistrationEstablishedEd25519SessionProjectionV2(record.ed25519);
 			return ed25519 === null ? null : {
 				kind: "near_ed25519",
@@ -168,7 +172,7 @@ function parseRegistrationEstablishedSessionProjectionTokensV2(raw) {
 			};
 		}
 		case "near_ed25519_and_evm_family_ecdsa": {
-			if (!hasExactKeys(record, [
+			if (!hasExactKeys$1(record, [
 				"kind",
 				"ecdsa",
 				"ed25519"
@@ -186,7 +190,7 @@ function parseRegistrationEstablishedSessionProjectionTokensV2(raw) {
 }
 function parseRegistrationEstablishedEcdsaSessionProjectionV2(raw) {
 	const record = inspectRawObject(raw);
-	if (!record || !hasExactKeys(record, [
+	if (!record || !hasExactKeys$1(record, [
 		"sessionKind",
 		"thresholdSessionId",
 		"keyHandle",
@@ -219,7 +223,7 @@ function parseRegistrationEstablishedEcdsaSessionProjectionV2(raw) {
 }
 function parseRegistrationEstablishedEd25519SessionProjectionV2(raw) {
 	const record = inspectRawObject(raw);
-	if (!record || !hasExactKeys(record, [
+	if (!record || !hasExactKeys$1(record, [
 		"sessionKind",
 		"thresholdSessionId",
 		"nearAccountId",
@@ -253,7 +257,7 @@ function parseRegistrationEstablishedEd25519SessionProjectionV2(raw) {
 }
 function parseRuntimePolicyScopeProjection(raw) {
 	const record = inspectRawObject(raw);
-	if (!record || !hasExactKeys(record, [
+	if (!record || !hasExactKeys$1(record, [
 		"orgId",
 		"projectId",
 		"envId",
@@ -272,7 +276,7 @@ function parseNonNegativeSafeInteger(raw) {
 function inspectRawObject(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
-function hasExactKeys(record, expectedKeys) {
+function hasExactKeys$1(record, expectedKeys) {
 	return Object.keys(record).length === expectedKeys.length && expectedKeys.every((key) => Object.prototype.hasOwnProperty.call(record, key));
 }
 //#endregion
@@ -703,13 +707,6 @@ function parseJsonText$1(text) {
 }
 //#endregion
 //#region src/core/rpcClients/relayer/walletRegistrationTerminalResponse.ts
-/**
-* Strict terminal response parsing for wallet registration.
-*
-* The registration RPC orchestration remains in `walletRegistration.ts`; this
-* module owns the response boundary validators and the terminal finalize
-* projection used by registration activation and provisioning.
-*/
 function requireResponseString(args) {
 	const value = String(args.value || "").trim();
 	if (!value) throw new Error(`${args.responseName} response missing ${args.field}`);
@@ -1645,7 +1642,7 @@ function readWalletRegistrationResponseField(record, field, label) {
 	if (!Object.keys(record).includes(field)) throw new Error(`${label} is missing ${field}`);
 	return Reflect.get(record, field);
 }
-function readOptionalWalletRegistrationResponseField(record, field, label) {
+function readOptionalWalletRegistrationResponseField(record, field, _label) {
 	if (!Object.keys(record).includes(field)) return void 0;
 	return Reflect.get(record, field);
 }
@@ -2708,7 +2705,8 @@ function parseWalletAddSignerFinalizeResponse(args) {
 		"rpId",
 		"credentialIdB64u",
 		"ed25519",
-		"ecdsa"
+		"ecdsa",
+		"authority"
 	], responseName);
 	const ok = readWalletRegistrationResponseField(record, "ok", responseName);
 	const kind = readWalletRegistrationResponseField(record, "kind", responseName);
@@ -2721,7 +2719,7 @@ function parseWalletAddSignerFinalizeResponse(args) {
 	const rpId = requireResponseRpId(readWalletRegistrationResponseField(record, "rpId", responseName), responseName);
 	switch (kind) {
 		case "near_ed25519": {
-			if (readOptionalWalletRegistrationResponseField(record, "ecdsa", responseName) !== void 0) throw new Error(`${responseName} response mixed signer branches`);
+			if (readOptionalWalletRegistrationResponseField(record, "ecdsa", responseName) !== void 0 || readOptionalWalletRegistrationResponseField(record, "authority", responseName) !== void 0) throw new Error(`${responseName} response mixed signer branches`);
 			const ed25519 = parseWalletEd25519YaoSignerPublicResult(readWalletRegistrationResponseField(record, "ed25519", responseName), "Wallet add-signer Ed25519 finalize");
 			return {
 				ok: true,
@@ -2746,12 +2744,15 @@ function parseWalletAddSignerFinalizeResponse(args) {
 			assertWalletRegistrationResponseKeys(ecdsa, ["walletKeys"], responseName);
 			const walletKeys = requireWalletRegistrationResponseArray(readWalletRegistrationResponseField(ecdsa, "walletKeys", responseName), `${responseName} walletKeys`);
 			if (walletKeys.length === 0) throw new Error(`${responseName} response has invalid walletKeys`);
+			const authority = parseWalletAuthorityV1(readWalletRegistrationResponseField(record, "authority", responseName));
+			if (!authority.ok || authority.value.state !== "active" || authority.value.walletId !== walletId) throw new Error(`${responseName} response has invalid authority`);
 			return {
 				ok: true,
 				walletId,
 				kind: "evm_family_ecdsa",
 				rpId,
-				ecdsa: { walletKeys: walletKeys.map(parseWalletAddSignerEcdsaFinalizeWalletKey) }
+				ecdsa: { walletKeys: walletKeys.map(parseWalletAddSignerEcdsaFinalizeWalletKey) },
+				authority: authority.value
 			};
 		}
 		default: throw new Error(`${responseName} response has invalid kind`);
@@ -2862,8 +2863,8 @@ function parseWalletEcdsaKeyFactsInventoryResponse(args) {
 	};
 }
 /**
-* Refactor 94C. `POST /wallets/register/setup` — the single admitted entry
-* point replacing the grant, intent, and start calls below.
+* `POST /wallets/register/setup` — the single admitted entry point replacing
+* the grant, intent, and start calls below.
 *
 * It is called *before* the WebAuthn create prompt, because its response
 * carries the challenge that create must sign. The server-side preparation
@@ -2969,7 +2970,7 @@ function parseRevokeWalletAuthMethodResponse(value) {
 	}
 }
 /**
-* R109C: revoke one auth method using a proof from a different active one.
+* Revoke one auth method using a proof from a different active one.
 *
 * The route is the wallet's own auth-method management, not device linking:
 * a sibling on the same device is not a device, and the linked-device
@@ -2980,7 +2981,7 @@ async function revokeWalletAuthMethod(args) {
 	const walletId = String(args.walletId || "").trim();
 	const walletAuthMethodId = String(args.walletAuthMethodId || "").trim();
 	if (!walletId || !walletAuthMethodId) throw new Error("auth-method revoke requires a wallet and a target method");
-	return parseRevokeWalletAuthMethodResponse(await postJson({
+	const request = {
 		relayerUrl: args.relayerUrl,
 		path: `/wallets/${encodeURIComponent(walletId)}/auth-methods/${encodeURIComponent(walletAuthMethodId)}/revoke`,
 		body: {
@@ -2989,7 +2990,15 @@ async function revokeWalletAuthMethod(args) {
 			requestedAtMs: args.requestedAtMs,
 			sourceProof: args.sourceProof
 		}
-	}));
+	};
+	let response;
+	try {
+		response = await postJson(request);
+	} catch (error) {
+		if (!(error instanceof TypeError)) throw error;
+		response = await postJson(request);
+	}
+	return parseRevokeWalletAuthMethodResponse(response);
 }
 async function createWalletAddAuthMethodIntent(args) {
 	const walletId = String(args.walletId || "").trim();
@@ -3652,11 +3661,19 @@ async function finalizeWalletAddAuthMethod(args) {
 		webauthnRegistration: args.webauthnRegistration,
 		custodyEnvelope: parsePasskeyCustodyEnvelopeRecord(args.custodyEnvelope)
 	};
-	return parseWalletAddAuthMethodFinalizeResponse(await postJson({
+	const request = {
 		relayerUrl: args.relayerUrl,
 		path: `/wallets/${encodeURIComponent(walletId)}/auth-methods/finalize`,
 		body
-	}));
+	};
+	let response;
+	try {
+		response = await postJson(request);
+	} catch (error) {
+		if (!(error instanceof TypeError)) throw error;
+		response = await postJson(request);
+	}
+	return parseWalletAddAuthMethodFinalizeResponse(response);
 }
 async function fetchWalletEcdsaKeyFactsInventoryWithOperationCredential(args) {
 	const walletId = String(args.walletId || "").trim();
@@ -3717,12 +3734,26 @@ async function fetchWalletEcdsaKeyFactsInventoryWithWebAuthn(args) {
 //#region ../shared-ts/src/authorization/walletCustodyOperation.ts
 /** Public challenge digest for a single wallet-administration factor proof. */
 async function computeWalletCustodyAdminChallengeDigest(input) {
-	return parseDigestB64u(base64UrlEncode(await sha256BytesUtf8(`seams:wallet-custody:challenge:v1|${alphabetizeStringify({
+	return sha256Utf8DigestB64u(`seams:wallet-custody:challenge:v1|${alphabetizeStringify({
 		walletId: input.walletId,
 		operation: input.operation,
 		payload: input.payload,
 		requestOrigin: input.requestOrigin
-	})}`)));
+	})}`);
+}
+//#endregion
+//#region ../shared-ts/src/utils/exactKeys.ts
+/**
+* True when `value` is a non-array object whose own enumerable string keys are exactly `keys`.
+*
+* A key whose value is `undefined` still counts as present. Symbol, non-enumerable and inherited
+* keys are not counted, and the prototype is not checked. A list that repeats a key never matches.
+* Kept apart from validation.ts, which the wallet iframe's boot path loads.
+*/
+function hasExactKeys(value, keys) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+	const actual = Object.keys(value);
+	return actual.length === keys.length && actual.every((key) => keys.includes(key));
 }
 //#endregion
 //#region ../shared-ts/src/authorization/walletSessionIssuance.ts
@@ -3762,12 +3793,8 @@ const UNLOCK_FLAT_RESPONSE_FIELDS = [
 	"unlocked",
 	"unlockBackend"
 ];
-function hasOnlyFields(record, fields) {
-	const actual = Object.keys(record);
-	return actual.length === new Set(fields).size && actual.every((field) => fields.includes(field));
-}
 function parseCommittedIdentity(value) {
-	if (!isPlainObject(value) || !hasOnlyFields(value, COMMITTED_IDENTITY_FIELDS)) return null;
+	if (!isPlainObject(value) || !hasExactKeys(value, COMMITTED_IDENTITY_FIELDS)) return null;
 	if (value.kind !== "already_committed_wallet_session_v1") return null;
 	const walletId = parseWalletId(value.walletId);
 	const authorityId = parseWalletAuthorityId(value.authorityId);
@@ -3798,8 +3825,8 @@ function parseResponseEnvelope(value) {
 	};
 }
 function parseFlatCommittedIdentity(value) {
-	if (!hasOnlyFields(value, FLAT_RESPONSE_FIELDS) && !hasOnlyFields(value, UNLOCK_FLAT_RESPONSE_FIELDS)) return null;
-	if (hasOnlyFields(value, UNLOCK_FLAT_RESPONSE_FIELDS) && (value.unlocked !== false || value.unlockBackend !== "passkey" && value.unlockBackend !== "email_otp")) return null;
+	if (!hasExactKeys(value, FLAT_RESPONSE_FIELDS) && !hasExactKeys(value, UNLOCK_FLAT_RESPONSE_FIELDS)) return null;
+	if (hasExactKeys(value, UNLOCK_FLAT_RESPONSE_FIELDS) && (value.unlocked !== false || value.unlockBackend !== "passkey" && value.unlockBackend !== "email_otp")) return null;
 	if (value.kind !== "already_committed") return null;
 	return parseCommittedIdentity({
 		kind: "already_committed_wallet_session_v1",
@@ -3825,7 +3852,7 @@ function parseWalletSessionAlreadyCommittedResponseV1(value) {
 	if (!isPlainObject(value)) return null;
 	const envelope = parseResponseEnvelope(value);
 	if (!envelope) return null;
-	if (!hasOnlyFields(value, NESTED_RESPONSE_FIELDS)) return null;
+	if (!hasExactKeys(value, NESTED_RESPONSE_FIELDS)) return null;
 	const committed = parseCommittedIdentity(value.committed);
 	return committed ? buildAlreadyCommittedResponse(envelope, committed) : null;
 }
@@ -3988,4 +4015,4 @@ function resolveNearEd25519YaoCapabilityHydrationV1(input) {
 	throw new Error("Unsupported Near Ed25519 unlock-source observation");
 }
 //#endregion
-export { parseProfileContinuityEcdsaWarmKey as A, respondWalletAddSignerEcdsa as C, startWalletAddAuthMethod as D, setupWalletRegistration as E, startWalletAddSigner as O, requestAddAuthMethodEmailOtpChallenge as S, revokeWalletAuthMethod as T, finalizeWalletAddAuthMethod as _, buildRehydrateMaterialActivationHydrationPlan as a, isEmailOtpWalletRegistrationFinalizeResponse as b, parseWalletUnlockAlreadyCommittedResponseV1 as c, activateWalletRegistration as d, completeWalletRegistrationNearProvisioning as f, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn as g, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential as h, buildBlockedMpcCapabilityHydrationPlan as i, activateRouterAbEcdsaPostRegistrationSession as k, computeWalletCustodyAdminChallengeDigest as l, createWalletAddSignerIntent as m, nearEd25519YaoRuntimeRef as n, buildUseLiveRuntimeHydrationPlan as o, createWalletAddAuthMethodIntent as p, resolveNearEd25519YaoCapabilityHydrationV1 as r, parseWalletSessionAlreadyCommittedResponseV1 as s, nearEd25519YaoMaterialActivationFromMetadata as t, activateWalletAddSignerEcdsa as u, finalizeWalletAddSigner as v, respondWalletRegistration as w, parseWalletRegistrationEcdsaDerivationRespond as x, fundImplicitNearAccountForTesting as y };
+export { activateRouterAbEcdsaPostRegistrationSession as A, requestAddAuthMethodEmailOtpChallenge as C, setupWalletRegistration as D, revokeWalletAuthMethod as E, startWalletAddAuthMethod as O, parseWalletRegistrationEcdsaDerivationRespond as S, respondWalletRegistration as T, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn as _, buildRehydrateMaterialActivationHydrationPlan as a, fundImplicitNearAccountForTesting as b, parseWalletUnlockAlreadyCommittedResponseV1 as c, activateWalletAddSignerEcdsa as d, activateWalletRegistration as f, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential as g, createWalletAddSignerIntent as h, buildBlockedMpcCapabilityHydrationPlan as i, parseProfileContinuityEcdsaWarmKey as j, startWalletAddSigner as k, hasExactKeys as l, createWalletAddAuthMethodIntent as m, nearEd25519YaoRuntimeRef as n, buildUseLiveRuntimeHydrationPlan as o, completeWalletRegistrationNearProvisioning as p, resolveNearEd25519YaoCapabilityHydrationV1 as r, parseWalletSessionAlreadyCommittedResponseV1 as s, nearEd25519YaoMaterialActivationFromMetadata as t, computeWalletCustodyAdminChallengeDigest as u, finalizeWalletAddAuthMethod as v, respondWalletAddSignerEcdsa as w, isEmailOtpWalletRegistrationFinalizeResponse as x, finalizeWalletAddSigner as y };

package/dist/{esm/sdk/nearEd25519YaoSigningPreparation-DX6xG-IW.js → public/sdk/nearEd25519YaoSigningPreparation-CdOT5RuC.js}

@@ -1,8 +1,10 @@
-import { p as mpcMaterialActivationRefsEqual } from "./normalize-BephcEIF.js";
-import { l as activeWalletSessionV1RecordsEqual } from "./device-linking-DpVGjSeq.js";
-import { At as buildEmailOtpWalletAuthAuthority, Ht as walletAuthAuthorityRef, Mt as emailOtpWalletAuthAuthorityEmailHashHex, Nt as emailOtpWalletAuthAuthorityProvider, Pt as emailOtpWalletAuthAuthorityProviderUserId } from "./ecdsaPresignLifecycle-CnSnzoRJ.js";
-import { E as SigningSessionIds, I as exactEd25519SigningLaneIdentity, M as buildEvmFamilyEcdsaSignerBinding, N as exactEcdsaSigningLaneIdentity, U as nearEd25519SignerBindingFromBoundaryFields, j as signingLaneAuthMethod, y as toEvmFamilyEcdsaKeyHandle } from "./evmFamilyEcdsaIdentity-_kuKSW35.js";
-import { t as parseSignerSlot } from "./signerSlot-DbNAs-kc.js";
+import { r as mpcMaterialActivationRefsEqual } from "./domainIds-lcrFg6Sa.js";
+import { J as emailOtpWalletAuthAuthorityEmailHashHex, K as buildEmailOtpWalletAuthAuthority, X as emailOtpWalletAuthAuthorityProviderUserId, Y as emailOtpWalletAuthAuthorityProvider, it as walletAuthAuthorityRef, kt as activeWalletSessionV1RecordsEqual } from "./ecdsaPresignLifecycle-Bfx2AQKb.js";
+import { y as toEvmFamilyEcdsaKeyHandle } from "./evmFamilyEcdsaIdentity-CqGafQsI.js";
+import { t as parseSignerSlot } from "./signerSlot-_ovonwVX.js";
+import { c as signingLaneAuthMethod, r as SigningSessionIds } from "./types-Dx9fczU7.js";
+import { a as exactEd25519SigningLaneIdentity, f as nearEd25519SignerBindingFromBoundaryFields, n as exactEcdsaSigningLaneIdentity, t as buildEvmFamilyEcdsaSignerBinding } from "./exactSigningLaneIdentity-m6uTXV_A.js";
+//#region src/core/signingEngine/session/identity/laneIdentity.ts
 function emailOtpAuthContextProviderUserId(context) {
 	return String(emailOtpWalletAuthAuthorityProviderUserId(context.authority));
 }
@@ -148,9 +150,9 @@ function selectedEcdsaLane(input) {
 		authorization: input.authorization
 	};
 }
-/** Shared Refactor 92 classification of a session's runtime allowance and
-* expiry. Expiry is checked before exhaustion so an expired session is never
-* reported as merely out of uses. */
+/** Shared classification of a session's runtime allowance and expiry. Expiry
+* is checked before exhaustion so an expired session is never reported as
+* merely out of uses. */
 function laneCandidateStateFromRuntimePolicy(args) {
 	const nowMs = Math.floor(Number(args.nowMs) || Date.now());
 	if (args.expiresAtMs <= nowMs) return "expired";

package/dist/{esm/sdk/nonceLaneKeys-B_RcSS6M.js → public/sdk/nonceLaneKeys-C3c9lG6u.js}

@@ -1,5 +1,5 @@
 import { r as secureRandomId } from "./secureRandomId-BORsmdS4.js";
-import { o as thresholdEcdsaChainTargetKey } from "./ecdsaChainTarget-BOTPGIU_.js";
+import { o as thresholdEcdsaChainTargetKey } from "./ecdsaChainTarget-Bl-JWyuw.js";
 //#region src/core/signingEngine/nonce/nonceTypes.ts
 const NonceLeaseState = {
 	Reserved: "reserved",

package/dist/{esm/sdk/normalization-oJyXl3Vn.js → public/sdk/normalization-CBt413-z.js}

@@ -1,5 +1,5 @@
-import { a as normalizeLowercaseString, o as normalizeOptionalNonEmptyString } from "./normalize-BephcEIF.js";
-import { o as thresholdEcdsaChainTargetKey } from "./ecdsaChainTarget-BOTPGIU_.js";
+import { L as normalizeLowercaseString, R as normalizeOptionalNonEmptyString } from "./domainIds-lcrFg6Sa.js";
+import { o as thresholdEcdsaChainTargetKey } from "./ecdsaChainTarget-Bl-JWyuw.js";
 //#region src/core/indexedDB/normalization.ts
 function normalizeLastUserScope(scope) {
 	const normalized = normalizeOptionalNonEmptyString(scope);