@seams/wallet 0.6.2 → 0.7.3

package/dist/esm/react/core/signingEngine/uiConfirm/handlers/flows/localOnly.js

@@ -1,5 +1,5 @@
-import { base64UrlEncode } from "../../../../../shared-ts/src/utils/base64.js";
 import { errorMessage } from "../../../../../shared-ts/src/utils/errors.js";
+import { base64UrlEncode } from "../../../../../shared-ts/src/utils/base64.js";
 import "../../../../../shared-ts/src/utils/encoders.js";
 import { UserConfirmationType } from "../../../stepUpConfirmation/userConfirmationType.js";
 import { resolveUiAppearance } from "../../ui/appearance.js";

package/dist/esm/react/core/signingEngine/uiConfirm/handlers/flows/signing.js

@@ -179,9 +179,6 @@ async function handleTransactionSigningFlow(ctx, request, worker, opts) {
 		let nearContextFailed = false;
 		const confirmationReadiness = consumeConfirmationReadiness(request.requestId);
 		let confirmationReadinessPending = !!confirmationReadiness;
-		const originalBody = String(transactionSummary.body || "").trim();
-		const confirmationReadinessBody = String(confirmationReadiness?.body || "").trim();
-		const restoreOriginalBody = () => ({ body: originalBody });
 		const confirmationReadinessPromise = confirmationReadiness ? Promise.resolve(confirmationReadiness.promise) : void 0;
 		const walletSessionExpiryPromise = confirmationReadinessPromise ? waitForWalletSessionExpiry(confirmationReadinessPromise) : void 0;
 		const markPromptReady = () => {
@@ -194,10 +191,7 @@ async function handleTransactionSigningFlow(ctx, request, worker, opts) {
 			loading: false,
 			onMounted: () => {
 				markPromptReady();
-				if (confirmationReadinessPending && confirmationReadinessBody) session.updateUI({
-					loading: false,
-					body: confirmationReadinessBody
-				});
+				if (confirmationReadinessPending) session.updateUI({ preparing: true });
 			}
 		}) : Promise.resolve({ confirmed: true });
 		if (reviewPromptRequired) promptDecisionPromise.finally(markPromptReady);
@@ -238,20 +232,19 @@ async function handleTransactionSigningFlow(ctx, request, worker, opts) {
 		if (confirmationReadinessPromise) confirmationReadinessPromise.then(async () => {
 			confirmationReadinessPending = false;
 			await promptReady;
-			if (decisionResolved || nearContextFailed) return;
-			session.updateUI({
-				...restoreOriginalBody(),
-				loading: false,
-				errorMessage: ""
-			});
+			if (decisionResolved) return;
+			session.updateUI({ preparing: false });
 		}).catch(async (error) => {
 			confirmationReadinessPending = false;
 			await promptReady;
-			if (decisionResolved || nearContextFailed) return;
+			if (decisionResolved) return;
+			if (nearContextFailed) {
+				session.updateUI({ preparing: false });
+				return;
+			}
 			const message = String(toError(error)?.message || "NEAR signing session could not be finalized");
 			session.updateUI({
-				...restoreOriginalBody(),
-				loading: false,
+				preparing: false,
 				errorMessage: `NEAR signing session could not be finalized: ${message}`
 			});
 		});

package/dist/esm/react/core/signingEngine/uiConfirm/ui/confirm-surface-resize.js

@@ -132,14 +132,14 @@ function createSurfaceHeightReflow(args) {
 			capturedCssPx = null;
 			const element = args.element();
 			if (!element || fromCssPx === null) return;
-			if (document.documentElement.classList.contains("seams-confirm-surface-pinned-root")) return;
-			if (element.parentElement?.closest(`.seams-surface-height-driven`)) return;
+			if (document.documentElement.classList.contains(CONFIRM_SURFACE_PINNED_ROOT_CLASS)) return;
+			if (element.parentElement?.closest(`.${CONFIRM_SURFACE_HEIGHT_DRIVEN_CLASS}`)) return;
 			clampedElement = element;
 			element.classList.add(CONFIRM_SURFACE_HEIGHT_DRIVEN_CLASS);
 			args.setHeightCssPx(fromCssPx);
 			Promise.resolve(args.settled?.()).then(() => new Promise((resolve) => requestAnimationFrame(() => resolve()))).then(() => {
 				if (clampedElement !== element) return;
-				if (document.documentElement.classList.contains("seams-confirm-surface-pinned-root")) {
+				if (document.documentElement.classList.contains(CONFIRM_SURFACE_PINNED_ROOT_CLASS)) {
 					release();
 					return;
 				}
@@ -174,7 +174,7 @@ function announceClampedSurfaceResize(args) {
 	const { element, fromCssPx, toCssPx } = args;
 	if (!Number.isFinite(fromCssPx) || !Number.isFinite(toCssPx)) return false;
 	if (Math.abs(toCssPx - fromCssPx) < MIN_ANNOUNCED_DELTA_CSS_PX) return false;
-	const drivenClasses = args.drivenClasses ?? ["seams-surface-height-driven"];
+	const drivenClasses = args.drivenClasses ?? [CONFIRM_SURFACE_HEIGHT_DRIVEN_CLASS];
 	const addedClasses = drivenClasses.filter((name) => !element.classList.contains(name));
 	element.classList.add(...addedClasses);
 	args.setHeightCssPx(fromCssPx);
@@ -200,7 +200,7 @@ const surfaceMotionDiagnostics = {
 			const startedAt = performance.now();
 			const tick = () => {
 				const host = diagnosticHost;
-				const pinned = host?.classList.contains("seams-confirm-surface-pinned") ? "*" : "";
+				const pinned = host?.classList.contains(CONFIRM_SURFACE_PINNED_CLASS) ? "*" : "";
 				lines.push(`${Math.round(performance.now() - startedAt)}: box=${document.documentElement.clientHeight} content=${host ? Math.round(host.getBoundingClientRect().height) : "-"}${pinned}`);
 				if (performance.now() - startedAt < durationMs) requestAnimationFrame(tick);
 				else resolve(lines);

package/dist/esm/react/core/signingEngine/uiConfirm/ui/confirmation-model.js

@@ -89,7 +89,7 @@ function normalizeConfirmationModel(input) {
 						tempo: source.tempoExplorerUrl,
 						evm: source.evmExplorerUrl
 					},
-					decision: source.loading ? { kind: "preparing" } : {
+					decision: source.loading || source.preparing ? { kind: "preparing" } : {
 						kind: "ready",
 						onConfirm: input.callbacks.confirm
 					},

package/dist/esm/react/core/signingEngine/uiConfirm/ui/preact/ConfirmationModal.js

@@ -44,6 +44,7 @@ var ModalShell = class extends Component {
 			children: /* @__PURE__ */ jsx("div", {
 				id: this.containerId,
 				class: "modal-container-root",
+				tabIndex: -1,
 				children: this.props.children
 			})
 		});

package/dist/esm/react/core/signingEngine/uiConfirm/ui/preact/TransactionLabel.js

@@ -153,6 +153,6 @@ function TransactionLabel({ node, explorers }) {
 	return node.label;
 }
 //#endregion
-export { TransactionLabel, transactionLabelTitle };
+export { TransactionLabel, contractPrefix, transactionLabelTitle };
 
 //# sourceMappingURL=TransactionLabel.js.map

package/dist/esm/react/core/signingEngine/uiConfirm/ui/preact/TransactionReceipt.js

@@ -1,13 +1,20 @@
+import { confirmationDocumentStyles } from "./confirmation-styles.js";
+import { announceClampedSurfaceResize } from "../confirm-surface-resize.js";
 import { ReviewDisclosure } from "./ReviewDisclosure.js";
-import { CopyReviewValue, ReviewAddress, ReviewAmount, ReviewIcon, WalletReceiptFooter, reviewNetwork, reviewRecipient } from "./TransactionReview.js";
+import { CopyReviewValue, ReviewAmount, ReviewIcon, ReviewMiddleTruncated, WalletReceiptFooter, reviewNetwork, reviewRecipient } from "./TransactionReview.js";
 import { receiptCompletedStages, receiptDescription, receiptHeading, receiptIsPending } from "../transaction-receipt.js";
-import { Component } from "preact";
+import { Component, createRef } from "preact";
 import { Fragment, jsx, jsxs } from "preact/jsx-runtime";
 //#region src/core/signingEngine/uiConfirm/ui/preact/TransactionReceipt.tsx
 /** @jsxImportSource preact */
+const EXPLORER_REVEAL_MS = 240;
+const EXPLORER_REVEAL_EASING = "cubic-bezier(0.22, 1, 0.36, 1)";
+let nextExplorerRowId = 0;
 var TransactionReceipt = class extends Component {
 	constructor(..._args) {
 		super(..._args);
+		this.explorerRow = createRef();
+		this.explorerRowId = `seams-receipt-explorer-row-${++nextExplorerRowId}`;
 		this.minimize = () => {
 			this.props.receipt.onView("toast");
 		};
@@ -18,6 +25,63 @@ var TransactionReceipt = class extends Component {
 			if (receiptIsPending(this.props.receipt.state)) this.minimize();
 			else this.props.receipt.onDismiss();
 		};
+		this.setExplorerRowHeight = (height) => {
+			const row = this.explorerRow.current;
+			if (!row) return;
+			confirmationDocumentStyles(row.ownerDocument).setDynamicDeclarations(this.explorerRowId, `#${this.explorerRowId}`, { "--seams-receipt-explorer-height": `${height}px` });
+		};
+		this.releaseExplorerRow = () => {
+			const row = this.explorerRow.current;
+			if (!row) return;
+			delete row.dataset.opening;
+			confirmationDocumentStyles(row.ownerDocument).deleteDynamicRule(this.explorerRowId);
+		};
+	}
+	componentDidUpdate(previous) {
+		const { receipt } = this.props;
+		if (receipt.view === "expanded" && previous.receipt.view === "expanded" && receipt.state.kind === "confirmed" && previous.receipt.state.kind !== "confirmed") this.revealExplorerLink();
+	}
+	componentWillUnmount() {
+		this.releaseExplorerRow();
+	}
+	revealExplorerLink() {
+		const row = this.explorerRow.current;
+		const link = row?.firstElementChild;
+		if (!row || !link) return;
+		if (row.ownerDocument.defaultView?.matchMedia("(prefers-reduced-motion: reduce)").matches) return;
+		const height = row.getBoundingClientRect().height;
+		row.dataset.opening = "";
+		const showLink = () => {
+			this.releaseExplorerRow();
+			link.animate([{
+				opacity: 0,
+				filter: "blur(4px)",
+				transform: "translateY(6px)"
+			}, {
+				opacity: 1,
+				filter: "blur(0)",
+				transform: "translateY(0)"
+			}], {
+				duration: EXPLORER_REVEAL_MS,
+				easing: EXPLORER_REVEAL_EASING
+			});
+		};
+		if (!announceClampedSurfaceResize({
+			reason: "receipt-explorer",
+			element: row,
+			fromCssPx: 0,
+			toCssPx: height,
+			drivenClasses: ["seams-receipt-explorer-driven"],
+			setHeightCssPx: this.setExplorerRowHeight,
+			onSettled: showLink
+		})) {
+			const opening = row.animate([{ height: "0px" }, { height: `${height}px` }], {
+				duration: EXPLORER_REVEAL_MS,
+				easing: EXPLORER_REVEAL_EASING
+			});
+			opening.onfinish = showLink;
+			opening.oncancel = this.releaseExplorerRow;
+		}
 	}
 	render() {
 		const { receipt, data } = this.props;
@@ -152,7 +216,10 @@ var TransactionReceipt = class extends Component {
 									label: `Copy recipient address ${recipient}`
 								})
 							})] }),
-							receipt.state.hash && /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("dt", { children: "Transaction" }), /* @__PURE__ */ jsxs("dd", { children: [/* @__PURE__ */ jsx(ReviewAddress, { value: receipt.state.hash }), /* @__PURE__ */ jsx(CopyReviewValue, { value: receipt.state.hash })] })] }),
+							receipt.state.hash && /* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("dt", { children: "Transaction" }), /* @__PURE__ */ jsxs("dd", { children: [/* @__PURE__ */ jsx(ReviewMiddleTruncated, {
+								value: receipt.state.hash,
+								class: "seams-review-hash"
+							}), /* @__PURE__ */ jsx(CopyReviewValue, { value: receipt.state.hash })] })] }),
 							/* @__PURE__ */ jsxs("div", { children: [/* @__PURE__ */ jsx("dt", { children: "Status" }), /* @__PURE__ */ jsx("dd", { children: heading })] })
 						]
 					})
@@ -163,12 +230,17 @@ var TransactionReceipt = class extends Component {
 					onClick: this.close,
 					children: receiptIsPending(receipt.state) ? "Continue in background" : "Done"
 				}),
-				explorerHref && /* @__PURE__ */ jsxs("a", {
-					class: "seams-receipt-explorer",
-					href: explorerHref,
-					target: "_blank",
-					rel: "noopener noreferrer",
-					children: ["View transaction ", /* @__PURE__ */ jsx(ReviewIcon, { kind: "arrow" })]
+				explorerHref && /* @__PURE__ */ jsx("div", {
+					id: this.explorerRowId,
+					class: "seams-receipt-explorer-row",
+					ref: this.explorerRow,
+					children: /* @__PURE__ */ jsxs("a", {
+						class: "seams-receipt-explorer",
+						href: explorerHref,
+						target: "_blank",
+						rel: "noopener noreferrer",
+						children: ["View transaction ", /* @__PURE__ */ jsx(ReviewIcon, { kind: "arrow" })]
+					})
 				}),
 				/* @__PURE__ */ jsx(WalletReceiptFooter, {})
 			]

package/dist/esm/react/core/signingEngine/uiConfirm/ui/preact/TransactionReview.js

@@ -1,9 +1,9 @@
-import { transactionLabelTitle } from "./TransactionLabel.js";
+import { contractPrefix, transactionLabelTitle } from "./TransactionLabel.js";
 import { copySurfaceText } from "./clipboard.js";
 import { CopyStatusIcon } from "./CopyStatusIcon.js";
 import { ReviewDisclosure } from "./ReviewDisclosure.js";
 import { SeamsWordmark } from "./SeamsWordmark.js";
-import { Component, createRef } from "preact";
+import { Component } from "preact";
 import { Fragment, jsx, jsxs } from "preact/jsx-runtime";
 //#region src/core/signingEngine/uiConfirm/ui/preact/TransactionReview.tsx
 /** @jsxImportSource preact */
@@ -44,79 +44,15 @@ function reviewRecipient(model) {
 	const operation = model.operations[0];
 	return operation.kind === "generic.contractCall" || operation.kind === "tempo.eip2718" ? operation.to ?? null : null;
 }
-var ReviewAddress = class extends Component {
-	constructor(..._args) {
-		super(..._args);
-		this.root = createRef();
-		this.motion = null;
-		this.observer = null;
-		this.measure = () => {
-			const root = this.root.current;
-			if (!root) return;
-			this.clear();
-			const overflowing = (root.firstElementChild?.scrollWidth ?? 0) > root.clientWidth + 1;
-			root.dataset.overflowing = String(overflowing);
-			root.tabIndex = overflowing ? 0 : -1;
-		};
-		this.reveal = () => {
-			const root = this.root.current;
-			const text = root?.firstElementChild;
-			if (!root || !(text instanceof HTMLElement)) return;
-			const overflow = text.scrollWidth - root.clientWidth;
-			if (overflow <= 1 || this.motion) return;
-			root.dataset.revealing = "true";
-			const reduced = root.ownerDocument.defaultView?.matchMedia("(prefers-reduced-motion: reduce)").matches;
-			this.motion = text.animate([{ transform: "translateX(0)" }, { transform: `translateX(-${overflow}px)` }], {
-				duration: reduced ? 0 : 200,
-				easing: "linear",
-				fill: "forwards"
-			});
-			this.motion.onfinish = this.reachedEnd;
-		};
-		this.reachedEnd = () => {
-			if (this.root.current) this.root.current.dataset.revealEnd = "true";
-		};
-		this.reset = () => {
-			if (this.root.current?.matches(":hover, :focus")) return;
-			this.clear();
-		};
-	}
-	componentDidMount() {
-		this.measure();
-		this.observer = new ResizeObserver(this.measure);
-		if (this.root.current) this.observer.observe(this.root.current);
-	}
-	clear() {
-		if (this.motion) this.motion.onfinish = null;
-		this.motion?.cancel();
-		this.motion = null;
-		if (this.root.current) {
-			delete this.root.current.dataset.revealing;
-			delete this.root.current.dataset.revealEnd;
-		}
-	}
-	componentDidUpdate(previous) {
-		if (previous.value !== this.props.value) this.measure();
-	}
-	componentWillUnmount() {
-		this.observer?.disconnect();
-		this.clear();
-	}
-	render() {
-		return /* @__PURE__ */ jsx("span", {
-			ref: this.root,
-			class: "seams-review-address",
-			dir: "ltr",
-			title: this.props.value,
-			"aria-label": this.props.value,
-			onMouseEnter: this.reveal,
-			onMouseLeave: this.reset,
-			onFocus: this.reveal,
-			onBlur: this.reset,
-			children: /* @__PURE__ */ jsx("span", { children: this.props.value })
-		});
-	}
-};
+/** The whole value when it fits; otherwise the middle truncates and the last eight characters stay. */
+function ReviewMiddleTruncated({ value, class: className }) {
+	return /* @__PURE__ */ jsxs("bdi", {
+		class: `seams-review-middle ${className}`,
+		dir: "ltr",
+		title: value,
+		children: [/* @__PURE__ */ jsx("span", { children: value.slice(0, -8) }), /* @__PURE__ */ jsx("span", { children: value.slice(-8) })]
+	});
+}
 function TokenIcon({ symbol }) {
 	if (symbol === "ETH") return /* @__PURE__ */ jsxs("svg", {
 		class: "seams-review-token",
@@ -208,8 +144,8 @@ function reviewAmount(model) {
 	};
 }
 var CopyReviewValue = class extends Component {
-	constructor(..._args2) {
-		super(..._args2);
+	constructor(..._args) {
+		super(..._args);
 		this.state = { copied: false };
 		this.lifetime = new AbortController();
 		this.timer = null;
@@ -257,6 +193,23 @@ var CopyReviewValue = class extends Component {
 };
 function ReviewDetailLabel({ node }) {
 	if (node.action || node.transaction) return /* @__PURE__ */ jsx(Fragment, { children: transactionLabelTitle(node) });
+	const contract = contractPrefix(node);
+	if (contract && node.contractAddress) {
+		const address = node.contractAddress;
+		return /* @__PURE__ */ jsxs("span", {
+			class: "seams-review-contract",
+			children: [contract.trim(), /* @__PURE__ */ jsxs("span", {
+				class: "seams-review-contract-value",
+				children: [/* @__PURE__ */ jsx(ReviewMiddleTruncated, {
+					value: address,
+					class: "seams-review-contract-address"
+				}), /* @__PURE__ */ jsx(CopyReviewValue, {
+					value: address,
+					label: `Copy contract address ${address}`
+				})]
+			})]
+		});
+	}
 	if (node.fieldLabel) {
 		const value = node.label.slice(node.fieldLabel.length);
 		return /* @__PURE__ */ jsxs(Fragment, { children: [node.fieldLabel, node.fieldLabel === "Method:" ? /* @__PURE__ */ jsx("span", {
@@ -353,6 +306,6 @@ function TransactionReview({ data, details = true }) {
 	});
 }
 //#endregion
-export { CopyReviewValue, ReviewAddress, ReviewAmount, ReviewIcon, TransactionReview, WalletReceiptFooter, reviewNetwork, reviewRecipient };
+export { CopyReviewValue, ReviewAmount, ReviewIcon, ReviewMiddleTruncated, TransactionReview, WalletReceiptFooter, reviewNetwork, reviewRecipient };
 
 //# sourceMappingURL=TransactionReview.js.map

package/dist/esm/react/core/signingEngine/uiConfirm/ui/preact/confirmation-controller.js

@@ -57,6 +57,7 @@ function mergeConfirmationPresentation(current, update) {
 		model: Object.hasOwn(update, "model") ? update.model : current.model,
 		securityContext: Object.hasOwn(update, "securityContext") ? update.securityContext : current.securityContext,
 		loading: Object.hasOwn(update, "loading") ? update.loading : current.loading,
+		preparing: Object.hasOwn(update, "preparing") ? update.preparing : current.preparing,
 		title: Object.hasOwn(update, "title") ? update.title : current.title,
 		body: Object.hasOwn(update, "body") ? update.body : current.body,
 		errorMessage: Object.hasOwn(update, "errorMessage") ? update.errorMessage : current.errorMessage,

package/dist/esm/react/core/signingEngine/uiConfirm/ui/transaction-display/tree.js

@@ -1,9 +1,6 @@
 import { isString } from "../../../../../shared-ts/src/utils/validation.js";
 import { formatArgs, formatCodeSize, shortenPubkey } from "./formatters.js";
 import { renderFallbackDisplayOperation } from "./renderers/fallback.js";
-import { isNearDisplayOperation, renderNearDisplayOperation } from "./renderers/near.js";
-import { isEvmDisplayOperation, renderEvmDisplayOperation } from "./renderers/evm.js";
-import { isTempoDisplayOperation, renderTempoDisplayOperation } from "./renderers/tempo.js";
 //#region src/core/signingEngine/uiConfirm/ui/transaction-display/tree.ts
 function toChainLabel(chain) {
 	switch (chain) {
@@ -28,14 +25,8 @@ function buildWarningNodes(warnings) {
 		}))
 	}];
 }
-function selectOperationRenderer(operation) {
-	if (isNearDisplayOperation(operation)) return renderNearDisplayOperation;
-	if (isEvmDisplayOperation(operation)) return renderEvmDisplayOperation;
-	if (isTempoDisplayOperation(operation)) return renderTempoDisplayOperation;
-	return renderFallbackDisplayOperation;
-}
 function renderOperationNode(operation, depth, path) {
-	return selectOperationRenderer(operation)({
+	return renderFallbackDisplayOperation({
 		operation,
 		depth,
 		path,

package/dist/esm/react/core/signingEngine/walletCustody/activateEd25519Capability.js

@@ -1,9 +1,10 @@
 import { base58Encode } from "../../../shared-ts/src/utils/base58.js";
 import { mpcMaterialActivationRefsEqual, parseThresholdEd25519SessionId } from "../../../shared-ts/src/utils/domainIds.js";
-import { nearEd25519SigningKeyIdFromString, registrationNearEd25519BranchKey } from "../../../shared-ts/src/utils/registrationIntent.js";
+import { nearEd25519SigningKeyIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
 import { buildRouterAbEd25519SigningWalletSession } from "../session/routerAbSigningWalletSession.js";
 import { toAccountId } from "../../types/accountIds.js";
 import { buildEmailOtpRouterAbEd25519WalletSessionState } from "../session/warmCapabilities/routerAbEd25519WalletSessionState.js";
+import { registrationNearEd25519BranchKey } from "../../../shared-ts/src/utils/registrationSignerPlan.js";
 import { WalletCustodyEd25519ActiveClientV1 } from "./ed25519ActiveClient.js";
 //#region src/core/signingEngine/walletCustody/activateEd25519Capability.ts
 function requireNonEmpty(value, label) {

package/dist/esm/react/core/signingEngine/walletCustody/ceremonyActiveClientMetadata.js

@@ -11,10 +11,9 @@ import { ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1 } from "../threshold/ed2551
 * this run registered under, and the Router's activation result.
 *
 * **Every identity here comes from the Router's receipt, not from this side.**
-* That matters most for `materialActivation`: it is a Refactor 90 identity, and
-* the boundary that mints it is the Router, exactly as on the PRF path. Nothing
-* here invents one — a locally minted activation ref would be a second owner
-* for state Refactor 90 owns.
+* That matters most for `materialActivation`: the boundary that mints it is the
+* Router, exactly as on the PRF path. Nothing here invents one — a locally
+* minted activation ref would give that state a second owner.
 */
 function walletCustodyEd25519ActiveClientMetadataV1(input) {
 	let raw;

package/dist/esm/react/core/signingEngine/walletCustody/emailOtpLink.js

@@ -7,8 +7,8 @@ import "../../../shared-ts/src/passkey-custody/index.js";
 import { finalizeWalletAddAuthMethod, startWalletAddAuthMethod } from "../../rpcClients/relayer/walletRegistration.js";
 //#region src/core/signingEngine/walletCustody/emailOtpLink.ts
 /**
-* Refactor 109C: sealing the wallet's existing custody seed under a newly
-* verified Email OTP factor.
+* Sealing the wallet's existing custody seed under a newly verified
+* Email OTP factor.
 *
 * The mirror of `passkeyLink`, and deliberately the same shape: open the source
 * envelope with the factor secret the caller already collected, reseal the same

package/dist/esm/react/core/signingEngine/walletCustody/recoveryReplacementEnvelope.js

@@ -1,4 +1,5 @@
-import { rejectUnknownFields, requireRecord } from "../../../shared-ts/src/passkey-custody/primitives.js";
+import { requireRecord } from "../../../shared-ts/src/utils/validation.js";
+import { rejectUnknownFields } from "../../../shared-ts/src/utils/exactRecord.js";
 import { WALLET_CUSTODY_ENVELOPE_VERSION_V2, parsePasskeyCustodyEnvelopeRecord, parseWalletCustodyEnvelopeOwnershipWireV1 } from "../../../shared-ts/src/passkey-custody/custodyEnvelope.js";
 import "../../../shared-ts/src/passkey-custody/index.js";
 //#region src/core/signingEngine/walletCustody/recoveryReplacementEnvelope.ts

package/dist/esm/react/core/signingEngine/walletCustody/unlockedEd25519ExportRootCapability.js

@@ -24,6 +24,7 @@ function setUnlockedCustodyEnvelopeUpgradeSinkV1(sink) {
 function forwardUpgradedEnvelope(capability) {
 	const sink = currentUpgradedEnvelopeSink;
 	if (!sink) return;
+	if (capability.kind !== "unlocked_wallet_ed25519_export_root_capability_v1") return;
 	const upgraded = capability.upgradedEnvelope;
 	if (upgraded === void 0) return;
 	try {
@@ -69,6 +70,7 @@ function scheduleCurrentCapabilityExpiry(capability, transport) {
 }
 function parseCapabilityReference(value) {
 	if (!isPlainObject(value)) return null;
+	if (value.kind === "unlocked_linked_device_ed25519_client_root_capability_v1") return parseLinkedDeviceClientRootCapabilityReference(value);
 	const fields = Object.keys(value);
 	const hasUpgradedEnvelope = fields.includes("upgradedEnvelope");
 	const expectedFields = hasUpgradedEnvelope ? [
@@ -114,11 +116,44 @@ function parseCapabilityReference(value) {
 		...upgradedEnvelope ? { upgradedEnvelope } : {}
 	};
 }
+/** A linked device's reference: the same public facts, no envelope upgrade. */
+function parseLinkedDeviceClientRootCapabilityReference(value) {
+	const expectedFields = [
+		"kind",
+		"capabilityHandleId",
+		"walletId",
+		"walletAuthMethodId",
+		"walletSessionId",
+		"expiresAtMs"
+	];
+	const fields = Object.keys(value);
+	if (fields.length !== expectedFields.length || fields.some((field) => !expectedFields.includes(field))) return null;
+	const capabilityHandleId = parseCapabilityInstanceRef(value.capabilityHandleId);
+	const walletId = parseWalletId(value.walletId);
+	const walletAuthMethodId = parseWalletAuthMethodId(value.walletAuthMethodId);
+	const walletSessionId = parseWalletSessionId(value.walletSessionId);
+	if (!capabilityHandleId.ok || !walletId.ok || !walletAuthMethodId.ok || !walletSessionId.ok) return null;
+	let expiresAtMs;
+	try {
+		expiresAtMs = parseUnixMs(value.expiresAtMs, "unlocked Ed25519 Client-root capability expiry");
+	} catch {
+		return null;
+	}
+	return {
+		kind: "unlocked_linked_device_ed25519_client_root_capability_v1",
+		capabilityHandleId: capabilityHandleId.value,
+		walletId: walletId.value,
+		walletAuthMethodId: walletAuthMethodId.value,
+		walletSessionId: walletSessionId.value,
+		expiresAtMs
+	};
+}
 /**
-* Opens a wallet-custody-seed envelope inside the worker with the factor secret
-* already present in the calling operation, and records the returned reference
-* as the current capability. Client-root envelopes belong to the exact sealed
-* export-root path and do not establish this seed-backed capability.
+* Opens this device's own custody envelope inside the worker with the factor
+* secret already present in the calling operation, and records the returned
+* reference as the current capability. A wallet custody seed yields the
+* seed-backed capability; a linked device's Client-root envelope yields the
+* linked-device capability, which only linking accepts.
 * The caller still owns `existingFactorSecret` and zeroes it; the worker zeroes
 * its own copy.
 *
@@ -126,7 +161,8 @@ function parseCapabilityReference(value) {
 * adds no authenticator or OTP interaction.
 */
 async function establishUnlockedWalletEd25519ExportRootCapabilityV1(transport, input) {
-	if (!isWalletCustodySeedBinding(input.existingEnvelope.binding)) return void 0;
+	const binding = input.existingEnvelope.binding;
+	if (!isWalletCustodySeedBinding(binding) && binding.kind !== "ed25519_yao_client_root_v1") return;
 	const workerFactorSecret = input.existingFactorSecret.slice();
 	let established;
 	try {
@@ -158,10 +194,21 @@ async function establishUnlockedWalletEd25519ExportRootCapabilityV1(transport, i
 	return capability;
 }
 /**
-* The current capability for this exact wallet, or undefined when the wallet
-* has none — never a prompt, and never a stale or expired reference.
+* The current seed-backed capability for this exact wallet, or undefined when
+* the wallet has none — never a prompt, and never a stale or expired
+* reference. A linked device's Client-root capability is never returned here:
+* seed reseals and auth-method additions cannot use it.
 */
 function readUnlockedWalletEd25519ExportRootCapabilityV1(walletId) {
+	const capability = readUnlockedEd25519ExportRootLinkingCapabilityV1(walletId);
+	return capability?.kind === "unlocked_wallet_ed25519_export_root_capability_v1" ? capability : void 0;
+}
+/**
+* The current capability a device approving a link seals the export root
+* from, of either kind, for this exact wallet — never a prompt, and never a
+* stale or expired reference.
+*/
+function readUnlockedEd25519ExportRootLinkingCapabilityV1(walletId) {
 	const capability = currentCapability;
 	if (!capability) return void 0;
 	if (capability.walletId !== walletId) return void 0;
@@ -206,6 +253,6 @@ async function destroyUnlockedWalletEd25519ExportRootCapabilitiesV1(transport, s
 	} catch {}
 }
 //#endregion
-export { destroyUnlockedWalletEd25519ExportRootCapabilitiesV1, dropUnlockedWalletEd25519ExportRootCapabilityReferenceV1, establishUnlockedWalletEd25519ExportRootCapabilityV1, readUnlockedWalletEd25519ExportRootCapabilityV1, setUnlockedCustodyEnvelopeUpgradeSinkV1, walletCustodyCeremonyTransportFromWorkerContextV1 };
+export { destroyUnlockedWalletEd25519ExportRootCapabilitiesV1, dropUnlockedWalletEd25519ExportRootCapabilityReferenceV1, establishUnlockedWalletEd25519ExportRootCapabilityV1, readUnlockedEd25519ExportRootLinkingCapabilityV1, readUnlockedWalletEd25519ExportRootCapabilityV1, setUnlockedCustodyEnvelopeUpgradeSinkV1, walletCustodyCeremonyTransportFromWorkerContextV1 };
 
 //# sourceMappingURL=unlockedEd25519ExportRootCapability.js.map