@seams/wallet 0.7.1 → 0.7.3

package/dist/esm/react/core/signingEngine/threshold/ed25519/commitQueue.js

@@ -1,52 +1,16 @@
 import { withThresholdCommitQueue } from "../commitQueueShared.js";
 //#region src/core/signingEngine/threshold/ed25519/commitQueue.ts
-function createThresholdEd25519CommitQueueOverflowError(nearAccountId, queueKey, maxQueueLength) {
-	const accountId = String(nearAccountId);
-	const err = /* @__PURE__ */ new Error(`[SigningEngine] threshold Ed25519 commit queue overflow for ${accountId} (queueKey=${queueKey}, max=${maxQueueLength})`);
-	err.code = "commit_queue_overflow";
-	return err;
-}
-function createThresholdEd25519CommitQueueTimeoutError(nearAccountId, queueKey, timeoutMs) {
-	const accountId = String(nearAccountId);
-	const err = /* @__PURE__ */ new Error(`[SigningEngine] threshold Ed25519 commit queue timeout for ${accountId} (queueKey=${queueKey}, waited>${timeoutMs}ms before start)`);
-	err.code = "commit_queue_timeout";
-	return err;
-}
-function createThresholdEd25519CommitQueueCancelledError(nearAccountId, queueKey, reason = "cancelled") {
-	const accountId = String(nearAccountId);
-	const message = reason === "queue_cleared" ? `[SigningEngine] threshold Ed25519 queued commit cancelled for ${accountId} (queueKey=${queueKey}, queue_cleared)` : `[SigningEngine] threshold Ed25519 queued commit cancelled for ${accountId} (queueKey=${queueKey})`;
-	const err = new Error(message);
-	err.code = "cancelled";
-	return err;
-}
-function resolveThresholdEd25519CommitQueueKey(args) {
-	return [
-		"material",
-		encodeURIComponent(String(args.materialActivation.materialOwner)),
-		encodeURIComponent(String(args.materialActivation.capability)),
-		encodeURIComponent(String(args.materialActivation.activationId))
-	].join(":");
-}
 async function withThresholdEd25519CommitQueue(args) {
-	const queueKey = String(args.queueKey || "").trim();
-	if (!queueKey) throw new Error("[SigningEngine] threshold Ed25519 commit queue requires non-empty queueKey");
-	const accountKey = String(args.nearAccountId);
 	return await withThresholdCommitQueue({
-		queueByKey: args.queueByKey,
-		queueKey,
-		enabled: args.enabled,
-		shouldAbort: args.shouldAbort,
-		maxQueueLength: args.maxQueueLength,
-		queueTimeoutMs: args.queueTimeoutMs,
-		task: args.task,
-		errors: {
-			makeOverflowError: (queueKey, maxQueueLength) => createThresholdEd25519CommitQueueOverflowError(accountKey, queueKey, maxQueueLength),
-			makeTimeoutError: (queueKey, timeoutMs) => createThresholdEd25519CommitQueueTimeoutError(accountKey, queueKey, timeoutMs),
-			makeCancelledError: (queueKey, reason) => createThresholdEd25519CommitQueueCancelledError(accountKey, queueKey, reason)
-		}
+		...args,
+		labels: {
+			queue: "threshold Ed25519 commit queue",
+			queuedOperation: "threshold Ed25519 queued commit"
+		},
+		owner: String(args.nearAccountId)
 	});
 }
 //#endregion
-export { resolveThresholdEd25519CommitQueueKey, withThresholdEd25519CommitQueue };
+export { withThresholdEd25519CommitQueue };
 
 //# sourceMappingURL=commitQueue.js.map

package/dist/esm/react/core/signingEngine/uiConfirm/PasskeyMpcSessionManager.js

@@ -6,8 +6,9 @@ import { parseSigningSessionSealKeyVersion } from "../../../shared-ts/src/thresh
 import { acquireSigningSessionRestoreLease, deleteDurableSealedSessionRecord, listExactSealedSessionsForWallet, releaseSigningSessionRestoreLease } from "../session/persistence/sealedSessionStore.js";
 import { walletSessionAuthorizations } from "../../indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
 import { IndexedDBManager } from "../../indexedDB/index.js";
+import { resolveThresholdCommitQueueKey } from "../threshold/commitQueueShared.js";
 import { materialActivationKey } from "../session/sealedRecovery/materialActivationKey.js";
-import { resolveThresholdEcdsaSigningQueueKey, withThresholdEcdsaSigningQueue } from "../threshold/ecdsa/signingQueue.js";
+import { withThresholdEcdsaSigningQueue } from "../threshold/ecdsa/signingQueue.js";
 import { parseUserConfirmWorkerResponse } from "../../types/secure-confirm-worker.js";
 import BUILD_PATHS from "../../../build-paths.js";
 import { resolveWorkerUrl } from "../../walletRuntimePaths/workers.js";
@@ -369,7 +370,7 @@ var PasskeyMpcSessionManagerImpl = class {
 			if (inFlight) return requirePasskeyEcdsaRestoreOutcome(await inFlight, "ready");
 			const task = withThresholdEcdsaSigningQueue({
 				queueByKey: this.deps.thresholdEcdsaSigningQueueByKey,
-				queueKey: resolveThresholdEcdsaSigningQueueKey({ materialActivation: record.roleLocalMaterialRef.materialActivation }),
+				queueKey: resolveThresholdCommitQueueKey({ materialActivation: record.roleLocalMaterialRef.materialActivation }),
 				walletId: toWalletId(args.walletId),
 				enabled: true,
 				task: async () => await this.restorePasskeyEcdsaRecord({

package/dist/esm/react/core/signingEngine/uiConfirm/ui/preact/TransactionReceipt.js

@@ -51,6 +51,21 @@ var TransactionReceipt = class extends Component {
 		if (row.ownerDocument.defaultView?.matchMedia("(prefers-reduced-motion: reduce)").matches) return;
 		const height = row.getBoundingClientRect().height;
 		row.dataset.opening = "";
+		const showLink = () => {
+			this.releaseExplorerRow();
+			link.animate([{
+				opacity: 0,
+				filter: "blur(4px)",
+				transform: "translateY(6px)"
+			}, {
+				opacity: 1,
+				filter: "blur(0)",
+				transform: "translateY(0)"
+			}], {
+				duration: EXPLORER_REVEAL_MS,
+				easing: EXPLORER_REVEAL_EASING
+			});
+		};
 		if (!announceClampedSurfaceResize({
 			reason: "receipt-explorer",
 			element: row,
@@ -58,28 +73,15 @@ var TransactionReceipt = class extends Component {
 			toCssPx: height,
 			drivenClasses: ["seams-receipt-explorer-driven"],
 			setHeightCssPx: this.setExplorerRowHeight,
-			onSettled: this.releaseExplorerRow
+			onSettled: showLink
 		})) {
 			const opening = row.animate([{ height: "0px" }, { height: `${height}px` }], {
 				duration: EXPLORER_REVEAL_MS,
 				easing: EXPLORER_REVEAL_EASING
 			});
-			opening.onfinish = opening.oncancel = this.releaseExplorerRow;
+			opening.onfinish = showLink;
+			opening.oncancel = this.releaseExplorerRow;
 		}
-		link.animate([{
-			opacity: 0,
-			filter: "blur(4px)",
-			transform: "translateY(6px)"
-		}, {
-			opacity: 1,
-			filter: "blur(0)",
-			transform: "translateY(0)"
-		}], {
-			duration: EXPLORER_REVEAL_MS,
-			delay: 60,
-			easing: EXPLORER_REVEAL_EASING,
-			fill: "backwards"
-		});
 	}
 	render() {
 		const { receipt, data } = this.props;

package/dist/esm/react/core/signingEngine/uiConfirm/ui/transaction-display/tree.js

@@ -1,9 +1,6 @@
 import { isString } from "../../../../../shared-ts/src/utils/validation.js";
 import { formatArgs, formatCodeSize, shortenPubkey } from "./formatters.js";
 import { renderFallbackDisplayOperation } from "./renderers/fallback.js";
-import { isNearDisplayOperation, renderNearDisplayOperation } from "./renderers/near.js";
-import { isEvmDisplayOperation, renderEvmDisplayOperation } from "./renderers/evm.js";
-import { isTempoDisplayOperation, renderTempoDisplayOperation } from "./renderers/tempo.js";
 //#region src/core/signingEngine/uiConfirm/ui/transaction-display/tree.ts
 function toChainLabel(chain) {
 	switch (chain) {
@@ -28,14 +25,8 @@ function buildWarningNodes(warnings) {
 		}))
 	}];
 }
-function selectOperationRenderer(operation) {
-	if (isNearDisplayOperation(operation)) return renderNearDisplayOperation;
-	if (isEvmDisplayOperation(operation)) return renderEvmDisplayOperation;
-	if (isTempoDisplayOperation(operation)) return renderTempoDisplayOperation;
-	return renderFallbackDisplayOperation;
-}
 function renderOperationNode(operation, depth, path) {
-	return selectOperationRenderer(operation)({
+	return renderFallbackDisplayOperation({
 		operation,
 		depth,
 		path,

package/dist/esm/react/core/signingEngine/workerManager/deviceLinkingPorts.js

@@ -6,6 +6,7 @@ import { parsePasskeyCustodyEnvelopeRecord } from "../../../shared-ts/src/passke
 import "../../../shared-ts/src/passkey-custody/index.js";
 import { parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationV1 } from "../../../shared-ts/src/device-linking/sourceContribution.js";
 import { parseCommittedAuthorityPackagesV1 } from "../../../shared-ts/src/device-linking/committedSignerPackages.js";
+import { hasExactKeys } from "../../../shared-ts/src/utils/exactKeys.js";
 import { parseWalletAuthorityLinkedSignerMaterialRecordV1 } from "../../indexedDB/linkedAuthoritySignerMaterial.js";
 //#region src/core/signingEngine/workerManager/deviceLinkingPorts.ts
 function targetFactorBindingV1(targetFactor) {
@@ -67,11 +68,15 @@ function createDeviceLinkingOrdinaryMaterialWorkerPortV1(send) {
 }
 function parseOrdinaryResealedExportRootRecordV1(value) {
 	if (value === null) return null;
-	if (!isOrdinaryResealedExportRootRecordV1(value)) throw new Error("ordinary material resealed export root has unsupported fields");
+	if (!hasExactKeys(value, ["envelope"])) throw new Error("ordinary material resealed export root has unsupported fields");
 	return { envelope: parsePasskeyCustodyEnvelopeRecord(value.envelope) };
 }
 function parsePreparationResult(value) {
-	if (!isOrdinaryMaterialPreparationResultRecordV1(value)) throw new Error("ordinary material preparation result has invalid fields");
+	if (!hasExactKeys(value, [
+		"kind",
+		"targetFactor",
+		"preparations"
+	])) throw new Error("ordinary material preparation result has invalid fields");
 	if (value.kind !== "device_linking_ordinary_signer_material_preparation_v1") throw new Error("ordinary material preparation result kind is invalid");
 	return {
 		kind: "device_linking_ordinary_signer_material_preparation_v1",
@@ -93,7 +98,11 @@ function parsePreparationTuple(value) {
 function parseRecipientRequirementTuple(value) {
 	if (!Array.isArray(value) || value.length === 0 || value.length > 2) throw new Error("ordinary signer material recipient requirements must contain one or two entries");
 	const requirements = value.map((entry, index) => {
-		if (!isOrdinaryRecipientRequirementRecordV1(entry)) throw new Error(`ordinary recipient requirement ${index} has invalid fields`);
+		if (!hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId"
+		])) throw new Error(`ordinary recipient requirement ${index} has invalid fields`);
 		if (entry.kind !== "ordinary_signer_material_recipient_requirement_v1") throw new Error("ordinary recipient requirement kind is invalid");
 		if (entry.keyFamily !== "ed25519" && entry.keyFamily !== "ecdsa_secp256k1") throw new Error("ordinary recipient requirement key family is invalid");
 		const walletKeyId = parseWalletKey(entry.walletKeyId);
@@ -111,7 +120,12 @@ function parseRecipientRequirementTuple(value) {
 function parseRecipientRequestTuple(value) {
 	if (!Array.isArray(value) || value.length === 0 || value.length > 2) throw new Error("ordinary signer material recipient requests must contain one or two entries");
 	const requests = value.map((entry) => {
-		if (isOrdinaryEd25519RecipientRequestRecordV1(entry)) {
+		if (hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId",
+			"recipientPublicKeyB64u"
+		])) {
 			if (entry.kind !== "ordinary_ed25519_signer_material_recipient_request_v1" || entry.keyFamily !== "ed25519") throw new Error("ordinary Ed25519 recipient request kind is invalid");
 			return {
 				kind: "ordinary_ed25519_signer_material_recipient_request_v1",
@@ -120,7 +134,12 @@ function parseRecipientRequestTuple(value) {
 				recipientPublicKeyB64u: parseB64u(entry.recipientPublicKeyB64u, "Ed25519 recipient public key")
 			};
 		}
-		if (isOrdinaryEcdsaRecipientRequestRecordV1(entry)) {
+		if (hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId",
+			"clientEphemeralPublicKey"
+		])) {
 			if (entry.kind !== "ordinary_ecdsa_signer_material_recipient_request_v1" || entry.keyFamily !== "ecdsa_secp256k1") throw new Error("ordinary ECDSA recipient request kind is invalid");
 			return {
 				kind: "ordinary_ecdsa_signer_material_recipient_request_v1",
@@ -137,7 +156,11 @@ function parseRecipientRequestTuple(value) {
 	return [first, ...requests.slice(1)];
 }
 function parseRecipientPreparationResult(value) {
-	if (!isOrdinaryRecipientPreparationResultRecordV1(value)) throw new Error("ordinary recipient preparation result has invalid fields");
+	if (!hasExactKeys(value, [
+		"kind",
+		"recipientRequests",
+		"recipientInputs"
+	])) throw new Error("ordinary recipient preparation result has invalid fields");
 	if (value.kind !== "device_linking_ordinary_signer_material_recipient_preparation_v1") throw new Error("ordinary recipient preparation result kind is invalid");
 	const recipientRequests = parseRecipientRequestTuple(value.recipientRequests);
 	const recipientInputs = parseRecipientInputTuple(value.recipientInputs);
@@ -150,7 +173,12 @@ function parseRecipientPreparationResult(value) {
 function parseRecipientInputTuple(value) {
 	if (!Array.isArray(value) || value.length === 0 || value.length > 2) throw new Error("ordinary signer material recipient inputs must contain one or two entries");
 	const inputs = value.map((entry) => {
-		if (isOrdinaryEd25519RecipientInputRecordV1(entry)) {
+		if (hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId",
+			"recipientPrivateKey"
+		])) {
 			if (entry.kind !== "ordinary_ed25519_signer_material_recipient_input_v1" || entry.keyFamily !== "ed25519") throw new Error("ordinary Ed25519 recipient input kind is invalid");
 			return {
 				kind: "ordinary_ed25519_signer_material_recipient_input_v1",
@@ -159,7 +187,12 @@ function parseRecipientInputTuple(value) {
 				recipientPrivateKey: parsePrivateKeyBuffer(entry.recipientPrivateKey, "Ed25519 recipient private key")
 			};
 		}
-		if (isOrdinaryEcdsaRecipientInputRecordV1(entry)) {
+		if (hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId",
+			"clientEphemeralPrivateKey"
+		])) {
 			if (entry.kind !== "ordinary_ecdsa_signer_material_recipient_input_v1" || entry.keyFamily !== "ecdsa_secp256k1") throw new Error("ordinary ECDSA recipient input kind is invalid");
 			return {
 				kind: "ordinary_ecdsa_signer_material_recipient_input_v1",
@@ -207,7 +240,13 @@ function parsePreparation(value) {
 	return parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationV1(value);
 }
 function parseTargetFactorBindingV1(value) {
-	if (isOrdinaryPasskeyTargetFactorRecordV1(value)) {
+	if (hasExactKeys(value, [
+		"kind",
+		"walletAuthMethodId",
+		"verificationDigestB64u",
+		"rpId",
+		"credentialIdB64u"
+	])) {
 		if (value.kind !== "passkey") throw new Error("ordinary material target factor kind is unsupported");
 		const authMethod = parseWalletAuthMethodId(value.walletAuthMethodId);
 		if (!authMethod.ok) throw new Error(authMethod.error.message);
@@ -220,7 +259,13 @@ function parseTargetFactorBindingV1(value) {
 			credentialIdB64u: parseB64u(value.credentialIdB64u, "ordinary target factor credentialIdB64u")
 		};
 	}
-	if (isOrdinaryEmailOtpTargetFactorRecordV1(value)) {
+	if (hasExactKeys(value, [
+		"kind",
+		"walletAuthMethodId",
+		"verificationDigestB64u",
+		"emailHashHex",
+		"registrationAuthorityId"
+	])) {
 		if (value.kind !== "email_otp") throw new Error("ordinary material target factor kind is unsupported");
 		const authMethod = parseWalletAuthMethodId(value.walletAuthMethodId);
 		if (!authMethod.ok) throw new Error(authMethod.error.message);
@@ -238,7 +283,13 @@ function parseTargetFactorBindingV1(value) {
 	throw new Error("ordinary material target factor kind is unsupported");
 }
 function parseWalletAuthorityExportRootRecordV1(value) {
-	if (!isWalletAuthorityExportRootRecordV1(value)) throw new Error("ordinary material export-root record has invalid fields");
+	if (!hasExactKeys(value, [
+		"kind",
+		"authorityId",
+		"walletAuthMethodId",
+		"walletKeyId",
+		"envelope"
+	])) throw new Error("ordinary material export-root record has invalid fields");
 	if (value.kind !== "wallet_authority_export_root_v1") throw new Error("ordinary material export-root record kind is invalid");
 	const authorityId = parseWalletAuthorityId(value.authorityId);
 	if (!authorityId.ok) throw new Error(authorityId.error.message);
@@ -255,7 +306,11 @@ function parseWalletAuthorityExportRootRecordV1(value) {
 	};
 }
 function parseSealedLocalAuthorityMaterialSetV1(value) {
-	if (!isSealedLocalAuthorityMaterialSetRecordV1(value)) throw new Error("ordinary material worker returned an invalid sealed record set");
+	if (!hasExactKeys(value, [
+		"signerMaterials",
+		"exportRoot",
+		"installedRecordSetDigestB64u"
+	])) throw new Error("ordinary material worker returned an invalid sealed record set");
 	if (!Array.isArray(value.signerMaterials) || value.signerMaterials.length === 0) throw new Error("ordinary material worker returned an invalid sealed record set");
 	const signerMaterials = value.signerMaterials.map((entry) => parseWalletAuthorityLinkedSignerMaterialRecordV1(entry));
 	const firstSignerMaterial = signerMaterials[0];
@@ -281,42 +336,6 @@ function parseB64u(value, label) {
 	decoded.fill(0);
 	return encoded;
 }
-function isOrdinaryResealedExportRootRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "envelope";
-}
-function isOrdinaryMaterialPreparationResultRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "kind|preparations|targetFactor";
-}
-function isOrdinaryRecipientRequirementRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "keyFamily|kind|walletKeyId";
-}
-function isOrdinaryEd25519RecipientRequestRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "keyFamily|kind|recipientPublicKeyB64u|walletKeyId";
-}
-function isOrdinaryEcdsaRecipientRequestRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "clientEphemeralPublicKey|keyFamily|kind|walletKeyId";
-}
-function isOrdinaryRecipientPreparationResultRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "kind|recipientInputs|recipientRequests";
-}
-function isOrdinaryEd25519RecipientInputRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "keyFamily|kind|recipientPrivateKey|walletKeyId";
-}
-function isOrdinaryEcdsaRecipientInputRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "clientEphemeralPrivateKey|keyFamily|kind|walletKeyId";
-}
-function isOrdinaryPasskeyTargetFactorRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "credentialIdB64u|kind|rpId|verificationDigestB64u|walletAuthMethodId";
-}
-function isOrdinaryEmailOtpTargetFactorRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "emailHashHex|kind|registrationAuthorityId|verificationDigestB64u|walletAuthMethodId";
-}
-function isWalletAuthorityExportRootRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "authorityId|envelope|kind|walletAuthMethodId|walletKeyId";
-}
-function isSealedLocalAuthorityMaterialSetRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "exportRoot|installedRecordSetDigestB64u|signerMaterials";
-}
 //#endregion
 export { createDeviceLinkingOrdinaryMaterialWorkerPortV1 };
 

package/dist/esm/react/core/signingEngine/workerManager/workerTransport.js

@@ -384,11 +384,7 @@ var WorkerTransport = class {
 		return worker;
 	}
 	connectPresignAuthorityChannel(request) {
-		if (request.type === EcdsaPresignClientRequestType.ListAvailable && this.presignAuthorityKind === null) {
-			this.connectDerivationPresignChannel(this.getOrCreateWorker("ecdsaPresignClient"), "role_local_derivation_handle");
-			return;
-		}
-		if (request.type !== EcdsaPresignClientRequestType.SessionInit) return;
+		if (request.type !== EcdsaPresignClientRequestType.ListAvailable && request.type !== EcdsaPresignClientRequestType.SessionInit) return;
 		const presignWorker = this.getOrCreateWorker("ecdsaPresignClient");
 		const authorityKind = this.parsePresignAuthorityKind(request.payload);
 		switch (authorityKind) {

package/dist/esm/react/shared-ts/src/authorization/walletSessionIssuance.js

@@ -1,6 +1,7 @@
 import { isPlainObject } from "../utils/validation.js";
 import { parseWalletAuthMethodId, parseWalletAuthorityId, parseWalletId } from "../utils/domainIds.js";
 import { parseMpcWalletSigningQuotaId, parseWalletSessionAuthorizationId, parseWalletSessionId, parseWalletSessionMintId } from "./capabilityKinds.js";
+import { hasExactKeys } from "../utils/exactKeys.js";
 //#region ../shared-ts/src/authorization/walletSessionIssuance.ts
 const COMMITTED_IDENTITY_FIELDS = [
 	"kind",
@@ -38,12 +39,8 @@ const UNLOCK_FLAT_RESPONSE_FIELDS = [
 	"unlocked",
 	"unlockBackend"
 ];
-function hasOnlyFields(record, fields) {
-	const actual = Object.keys(record);
-	return actual.length === new Set(fields).size && actual.every((field) => fields.includes(field));
-}
 function parseCommittedIdentity(value) {
-	if (!isPlainObject(value) || !hasOnlyFields(value, COMMITTED_IDENTITY_FIELDS)) return null;
+	if (!isPlainObject(value) || !hasExactKeys(value, COMMITTED_IDENTITY_FIELDS)) return null;
 	if (value.kind !== "already_committed_wallet_session_v1") return null;
 	const walletId = parseWalletId(value.walletId);
 	const authorityId = parseWalletAuthorityId(value.authorityId);
@@ -74,8 +71,8 @@ function parseResponseEnvelope(value) {
 	};
 }
 function parseFlatCommittedIdentity(value) {
-	if (!hasOnlyFields(value, FLAT_RESPONSE_FIELDS) && !hasOnlyFields(value, UNLOCK_FLAT_RESPONSE_FIELDS)) return null;
-	if (hasOnlyFields(value, UNLOCK_FLAT_RESPONSE_FIELDS) && (value.unlocked !== false || value.unlockBackend !== "passkey" && value.unlockBackend !== "email_otp")) return null;
+	if (!hasExactKeys(value, FLAT_RESPONSE_FIELDS) && !hasExactKeys(value, UNLOCK_FLAT_RESPONSE_FIELDS)) return null;
+	if (hasExactKeys(value, UNLOCK_FLAT_RESPONSE_FIELDS) && (value.unlocked !== false || value.unlockBackend !== "passkey" && value.unlockBackend !== "email_otp")) return null;
 	if (value.kind !== "already_committed") return null;
 	return parseCommittedIdentity({
 		kind: "already_committed_wallet_session_v1",
@@ -101,7 +98,7 @@ function parseWalletSessionAlreadyCommittedResponseV1(value) {
 	if (!isPlainObject(value)) return null;
 	const envelope = parseResponseEnvelope(value);
 	if (!envelope) return null;
-	if (!hasOnlyFields(value, NESTED_RESPONSE_FIELDS)) return null;
+	if (!hasExactKeys(value, NESTED_RESPONSE_FIELDS)) return null;
 	const committed = parseCommittedIdentity(value.committed);
 	return committed ? buildAlreadyCommittedResponse(envelope, committed) : null;
 }

package/dist/esm/react/shared-ts/src/authorization/walletSignerActivationEquality.js

@@ -0,0 +1,12 @@
+import { mpcMaterialActivationRefsEqual } from "../utils/domainIds.js";
+//#region ../shared-ts/src/authorization/walletSignerActivationEquality.ts
+function sameWalletEd25519SignerActivationV1(left, right) {
+	return left.kind === right.kind && left.signer.kind === right.signer.kind && left.signer.keyFamily === right.signer.keyFamily && left.signer.walletId === right.signer.walletId && left.signer.walletKeyId === right.signer.walletKeyId && left.signer.registeredPublicKeyB64u === right.signer.registeredPublicKeyB64u && mpcMaterialActivationRefsEqual(left.materialActivation, right.materialActivation);
+}
+function sameWalletEcdsaSignerActivationV1(left, right) {
+	return left.kind === right.kind && left.signer.kind === right.signer.kind && left.signer.keyFamily === right.signer.keyFamily && left.signer.walletId === right.signer.walletId && left.signer.walletKeyId === right.signer.walletKeyId && left.signer.thresholdPublicKey33B64u === right.signer.thresholdPublicKey33B64u && left.signer.evmAddress === right.signer.evmAddress && mpcMaterialActivationRefsEqual(left.materialActivation, right.materialActivation);
+}
+//#endregion
+export { sameWalletEcdsaSignerActivationV1, sameWalletEd25519SignerActivationV1 };
+
+//# sourceMappingURL=walletSignerActivationEquality.js.map

package/dist/esm/react/shared-ts/src/device-linking/committedSignerPackages.js

@@ -3,7 +3,7 @@ import { parseDigestB64u } from "../utils/canonicalPrimitives.js";
 import { routerAbMpcMaterialActivationRefFromWire } from "../utils/routerAbNormalSigningIdentity.js";
 import { parseWalletAuthMethodRecordV2 } from "../utils/walletAuthMethodRecord.js";
 import { parseLinkedDeviceEd25519ExportRootPackageV1 } from "./ed25519ExportRoot.js";
-import { parseRouterAbEd25519YaoActivationPublicReceiptV1, parseRouterAbEd25519YaoApplicationBindingFactsV1, parseRouterAbEd25519YaoCeremonyBindingV1, parseRouterAbEd25519YaoEncryptedPackageV1, parseRouterAbEd25519YaoParticipantIdsV1 } from "../utils/routerAbEd25519Yao.js";
+import { parseRouterAbEd25519YaoActivationPublicReceiptV1, parseRouterAbEd25519YaoApplicationBindingFactsV1, parseRouterAbEd25519YaoCeremonyBindingV1, parseRouterAbEd25519YaoEncryptedPackageV1, parseRouterAbEd25519YaoParticipantIdsV1, sameRouterAbEd25519YaoByteSequence } from "../utils/routerAbEd25519Yao.js";
 import { parseLinkedDeviceEcdsaEncryptedSourceContributionV1, parseLinkedDeviceEcdsaSourcePreservingActivationReceiptV1 } from "./sourceContribution.js";
 import { parseWalletAuthorityV1 } from "../authorization/walletAuthority.js";
 //#region ../shared-ts/src/device-linking/committedSignerPackages.ts
@@ -91,7 +91,7 @@ function parseEd25519Package(raw) {
 	if (!mpcMaterialActivationRefsEqual(materialActivation, routerAbMpcMaterialActivationRefFromWire(targetBinding.material_activation))) throw new Error("CommittedEd25519SignerPackageV1 target binding does not match material");
 	const deriverA = parseEd25519ClientPackage(record.deriver_a_client_package, "deriver_a_client_package", "deriver_a");
 	const deriverB = parseEd25519ClientPackage(record.deriver_b_client_package, "deriver_b_client_package", "deriver_b");
-	if (!sameBytes(activationReceipt.transcript, deriverA.transcript) || !sameBytes(activationReceipt.transcript, deriverB.transcript)) throw new Error("CommittedEd25519SignerPackageV1 receipt transcript does not match packages");
+	if (!sameRouterAbEd25519YaoByteSequence(activationReceipt.transcript, deriverA.transcript) || !sameRouterAbEd25519YaoByteSequence(activationReceipt.transcript, deriverB.transcript)) throw new Error("CommittedEd25519SignerPackageV1 receipt transcript does not match packages");
 	return {
 		kind: "committed_ed25519_signer_package_v1",
 		materialActivation,
@@ -257,9 +257,6 @@ function parseCommittedEcdsaSignerPackageWireV1(raw) {
 function inspectRawObject(raw) {
 	return raw !== null && typeof raw === "object" && !Array.isArray(raw) ? raw : null;
 }
-function sameBytes(left, right) {
-	return left.length === right.length && left.every((value, index) => value === right[index]);
-}
 function requireExactWireFields(record, keys, label) {
 	const expected = new Set(keys);
 	const actual = Object.keys(record);

package/dist/esm/react/shared-ts/src/device-linking/delegatedActivationPlan.js

@@ -1,7 +1,7 @@
 import { requireRecord } from "../utils/validation.js";
 import { parseWalletId, parseWalletKeyId } from "../utils/domainIds.js";
 import { rejectUnknownFields } from "../utils/exactRecord.js";
-import { parseEd25519PublicKeyB64u, parseSecp256k1CompressedPublicKeyB64u } from "../passkey-custody/primitives.js";
+import { parseEd25519PublicKeyB64u, parseSecp256k1CompressedPublicKeyB64u, requireParsed } from "../passkey-custody/primitives.js";
 //#region ../shared-ts/src/device-linking/delegatedActivationPlan.ts
 const MANIFEST_FIELDS = [
 	"kind",
@@ -124,10 +124,6 @@ function exactRecord(raw, fields, label) {
 	for (const field of fields) if (!(field in record)) throw new Error(`${label}.${field} is required`);
 	return record;
 }
-function requireParsed(parsed, label) {
-	if (!parsed.ok) throw new Error(`${label} ${parsed.error.message}`);
-	return parsed.value;
-}
 //#endregion
 export { buildExactAdministeredSignerManifestV1, parseExactAdministeredSignerManifestV1 };
 

package/dist/esm/react/shared-ts/src/device-linking/ed25519ExportRoot.js

@@ -2,7 +2,7 @@ import { base64UrlDecode, base64UrlEncode } from "../utils/base64.js";
 import { requireRecord } from "../utils/validation.js";
 import { parseLinkDeviceSessionId, parseLinkedDeviceEnrollmentId, parseLinkedDeviceId, parseWalletId, parseWalletKeyId } from "../utils/domainIds.js";
 import { rejectUnknownFields } from "../utils/exactRecord.js";
-import { parseDigestField, parseEd25519PublicKeyB64u, parseEnvelopeCiphertextB64u, parseEnvelopeNonceB64u } from "../passkey-custody/primitives.js";
+import { parseDigestField, parseEd25519PublicKeyB64u, parseEnvelopeCiphertextB64u, parseEnvelopeNonceB64u, requireParsed } from "../passkey-custody/primitives.js";
 //#region ../shared-ts/src/device-linking/ed25519ExportRoot.ts
 /**
 * Authenticated relay records for the cross-device Ed25519 Yao Client export
@@ -95,11 +95,11 @@ function parseLinkedDeviceEd25519ExportRootRecipientV1(raw) {
 	requireTransferAlg(record.transferAlg, "LinkedDeviceEd25519ExportRootRecipientV1.transferAlg");
 	return {
 		kind: "linked_device_ed25519_export_root_recipient_v1",
-		linkSessionId: parseRequired(parseLinkDeviceSessionId(record.linkSessionId), "LinkedDeviceEd25519ExportRootRecipientV1.linkSessionId"),
-		walletId: parseRequired(parseWalletId(record.walletId), "walletId"),
-		walletKeyId: parseRequired(parseWalletKeyId(record.walletKeyId), "walletKeyId"),
-		enrollmentId: parseRequired(parseLinkedDeviceEnrollmentId(record.enrollmentId), "enrollmentId"),
-		deviceId: parseRequired(parseLinkedDeviceId(record.deviceId), "deviceId"),
+		linkSessionId: requireParsed(parseLinkDeviceSessionId(record.linkSessionId), "LinkedDeviceEd25519ExportRootRecipientV1.linkSessionId"),
+		walletId: requireParsed(parseWalletId(record.walletId), "walletId"),
+		walletKeyId: requireParsed(parseWalletKeyId(record.walletKeyId), "walletKeyId"),
+		enrollmentId: requireParsed(parseLinkedDeviceEnrollmentId(record.enrollmentId), "enrollmentId"),
+		deviceId: requireParsed(parseLinkedDeviceId(record.deviceId), "deviceId"),
 		transferAlg: LINKED_DEVICE_ED25519_EXPORT_ROOT_TRANSFER_ALG_V1,
 		applicationBindingDigestB64u: parseDigestField(record.applicationBindingDigestB64u, "applicationBindingDigestB64u"),
 		registeredPublicKeyB64u: parseEd25519PublicKeyB64u(record.registeredPublicKeyB64u, "registeredPublicKeyB64u"),
@@ -118,11 +118,11 @@ function parseLinkedDeviceEd25519ExportRootPackageV1(raw) {
 	if (recipientPublicKeyB64u === ephemeralPublicKeyB64u) throw new Error("ephemeralPublicKeyB64u repeats the recipient key");
 	return {
 		kind: "linked_device_ed25519_export_root_package_v1",
-		linkSessionId: parseRequired(parseLinkDeviceSessionId(record.linkSessionId), "linkSessionId"),
-		walletId: parseRequired(parseWalletId(record.walletId), "walletId"),
-		walletKeyId: parseRequired(parseWalletKeyId(record.walletKeyId), "walletKeyId"),
-		enrollmentId: parseRequired(parseLinkedDeviceEnrollmentId(record.enrollmentId), "enrollmentId"),
-		deviceId: parseRequired(parseLinkedDeviceId(record.deviceId), "deviceId"),
+		linkSessionId: requireParsed(parseLinkDeviceSessionId(record.linkSessionId), "linkSessionId"),
+		walletId: requireParsed(parseWalletId(record.walletId), "walletId"),
+		walletKeyId: requireParsed(parseWalletKeyId(record.walletKeyId), "walletKeyId"),
+		enrollmentId: requireParsed(parseLinkedDeviceEnrollmentId(record.enrollmentId), "enrollmentId"),
+		deviceId: requireParsed(parseLinkedDeviceId(record.deviceId), "deviceId"),
 		transferAlg: LINKED_DEVICE_ED25519_EXPORT_ROOT_TRANSFER_ALG_V1,
 		applicationBindingDigestB64u: parseDigestField(record.applicationBindingDigestB64u, "applicationBindingDigestB64u"),
 		registeredPublicKeyB64u: parseEd25519PublicKeyB64u(record.registeredPublicKeyB64u, "registeredPublicKeyB64u"),
@@ -161,10 +161,6 @@ function parseUnixMs(value, label) {
 	if (typeof value !== "number" || !Number.isSafeInteger(value) || value <= 0) throw new Error(`${label} must be a positive unix-millisecond timestamp`);
 	return value;
 }
-function parseRequired(parsed, label) {
-	if (!parsed.ok) throw new Error(`${label} ${parsed.error.message}`);
-	return parsed.value;
-}
 //#endregion
 export { LINKED_DEVICE_ED25519_EXPORT_ROOT_TRANSFER_ALG_V1, buildLinkedDeviceEd25519ExportRootTransferBindingV1, parseLinkedDeviceEd25519ExportRootPackageV1, parseLinkedDeviceEd25519ExportRootRecipientPublicKeyB64u, parseLinkedDeviceEd25519ExportRootRecipientV1, serializeLinkedDeviceEd25519ExportRootTransferBindingV1 };
 

package/dist/esm/react/shared-ts/src/device-linking/sourceContribution.js

@@ -7,7 +7,7 @@ import { parseDeviceId } from "../authorization/capabilityKinds.js";
 import { parseEd25519PublicKeyB64u, parseEnvelopeCiphertextB64u, parseSecp256k1CompressedPublicKeyB64u } from "../passkey-custody/primitives.js";
 import { requireRouterAbEcdsaDerivationNormalSigningStateV1 } from "../utils/routerAbEcdsaDerivation.js";
 import { parseSdkEcdsaDerivationThresholdKeyId } from "../threshold/ecdsaDerivationRoleLocalBootstrap.js";
-import { parseRouterAbEd25519YaoActivationPublicReceiptV1, parseRouterAbEd25519YaoApplicationBindingFactsV1, parseRouterAbEd25519YaoCeremonyBindingV1, parseRouterAbEd25519YaoEncryptedPackageV1, parseRouterAbEd25519YaoParticipantIdsV1, parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1 } from "../utils/routerAbEd25519Yao.js";
+import { parseRouterAbEd25519YaoActivationPublicReceiptV1, parseRouterAbEd25519YaoApplicationBindingFactsV1, parseRouterAbEd25519YaoCeremonyBindingV1, parseRouterAbEd25519YaoEncryptedPackageV1, parseRouterAbEd25519YaoParticipantIdsV1, parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1, sameRouterAbEd25519YaoByteSequence } from "../utils/routerAbEd25519Yao.js";
 //#region ../shared-ts/src/device-linking/sourceContribution.ts
 /** Exact discriminator accepted by the ECDSA source-contribution core. */
 const LINKED_DEVICE_ECDSA_SOURCE_CONTRIBUTION_ENVELOPE_KIND_V1 = "seams/linked-device/ecdsa-source-contribution-envelope/v1";
@@ -33,7 +33,7 @@ function parseLinkedDeviceEd25519SourcePreservingReservationV1(raw) {
 	const participantIds = parseRouterAbEd25519YaoParticipantIdsV1(record.participant_ids);
 	const deriverA = parseEd25519ClientPackage(record.deriver_a_client_package, "deriver_a");
 	const deriverB = parseEd25519ClientPackage(record.deriver_b_client_package, "deriver_b");
-	if (!sameBytes(activationReceipt.transcript, deriverA.transcript) || !sameBytes(activationReceipt.transcript, deriverB.transcript)) throw new Error("linked-device Ed25519 reservation packages have mismatched transcripts");
+	if (!sameRouterAbEd25519YaoByteSequence(activationReceipt.transcript, deriverA.transcript) || !sameRouterAbEd25519YaoByteSequence(activationReceipt.transcript, deriverB.transcript)) throw new Error("linked-device Ed25519 reservation packages have mismatched transcripts");
 	return {
 		state: "inactive",
 		reservationId: requireText(record.reservation_id, "reservation_id"),
@@ -192,10 +192,10 @@ function parseEd25519Contribution(record) {
 	if (!sameEdStableIdentity(sourceBinding, targetBinding)) throw new Error("linked-device Ed25519 source contribution stable identity differs");
 	if (!mpcMaterialActivationRefsEqual(routerAbMpcMaterialActivationRefFromWire(activationReceipt.material_activation), targetMaterialActivation)) throw new Error("linked-device Ed25519 source contribution receipt activation differs");
 	const sourceRegisteredPublicKeyB64u = parseEd25519PublicKeyB64u(record.sourceRegisteredPublicKeyB64u, "sourceRegisteredPublicKeyB64u");
-	if (!sameBytes(activationReceipt.registered_public_key, Array.from(base64UrlDecode(sourceRegisteredPublicKeyB64u)))) throw new Error("linked-device Ed25519 source contribution receipt public key differs");
+	if (!sameRouterAbEd25519YaoByteSequence(activationReceipt.registered_public_key, Array.from(base64UrlDecode(sourceRegisteredPublicKeyB64u)))) throw new Error("linked-device Ed25519 source contribution receipt public key differs");
 	const deriverA = parseEd25519ClientPackage(record.deriver_a_client_package, "deriver_a");
 	const deriverB = parseEd25519ClientPackage(record.deriver_b_client_package, "deriver_b");
-	if (!sameBytes(activationReceipt.transcript, deriverA.transcript) || !sameBytes(activationReceipt.transcript, deriverB.transcript)) throw new Error("linked-device Ed25519 source contribution package transcript differs");
+	if (!sameRouterAbEd25519YaoByteSequence(activationReceipt.transcript, deriverA.transcript) || !sameRouterAbEd25519YaoByteSequence(activationReceipt.transcript, deriverB.transcript)) throw new Error("linked-device Ed25519 source contribution package transcript differs");
 	if (sourceBinding.material_activation.activation_id === targetMaterialActivation.activationId) throw new Error("linked-device Ed25519 source contribution reuses the source activation");
 	return {
 		kind: "linked_device_ed25519_source_contribution_v1",
@@ -522,9 +522,6 @@ function parseFixedBase64(raw, byteLength, label) {
 	if (decoded.length !== byteLength || base64UrlEncode(decoded) !== raw) throw new Error(`${label} must decode to ${byteLength} bytes`);
 	return raw;
 }
-function sameBytes(left, right) {
-	return left.length === right.length && left.every((value, index) => value === right[index]);
-}
 function requireText(raw, label) {
 	if (typeof raw !== "string" || raw.length === 0 || raw.trim() !== raw || [...raw].some((character) => {
 		const code = character.charCodeAt(0);
@@ -540,6 +537,6 @@ function exactRecord(raw, keys, label) {
 	return record;
 }
 //#endregion
-export { parseLinkedDeviceEcdsaEncryptedSourceContributionV1, parseLinkedDeviceEcdsaSourceContributionBindingV1, parseLinkedDeviceEcdsaSourceContributionPackageV1, parseLinkedDeviceEcdsaSourceContributionPreparationV1, parseLinkedDeviceEcdsaSourceDerivationV1, parseLinkedDeviceEcdsaSourcePreservingActivationReceiptV1, parseLinkedDeviceEd25519SourcePreservingReservationV1, parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationTupleV1, parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationV1, parseLinkedDeviceOrdinaryMaterialSourceContributionTupleV1, parseLinkedDeviceOrdinaryMaterialSourceContributionV1 };
+export { parseLinkedDeviceEcdsaEncryptedSourceContributionV1, parseLinkedDeviceEcdsaSourceContributionBindingV1, parseLinkedDeviceEcdsaSourceContributionPackageV1, parseLinkedDeviceEcdsaSourceContributionPreparationV1, parseLinkedDeviceEcdsaSourceDerivationV1, parseLinkedDeviceEcdsaSourcePreservingActivationReceiptV1, parseLinkedDeviceEd25519SourcePreservingReservationV1, parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationTupleV1, parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationV1, parseLinkedDeviceOrdinaryMaterialSourceContributionTupleV1, parseLinkedDeviceOrdinaryMaterialSourceContributionV1, sameEcdsaSourceSigner, sameEcdsaTarget };
 
 //# sourceMappingURL=sourceContribution.js.map

package/dist/esm/react/shared-ts/src/passkey-custody/primitives.js

@@ -13,6 +13,10 @@ function requireCanonicalBase64Url(value, label) {
 	if (base64UrlEncode(decoded) !== value) throw new Error(`${label} must be canonical base64url`);
 	return decoded;
 }
+function requireParsed(result, label) {
+	if (result.ok) return result.value;
+	throw new Error(`${label} ${result.error.message}`);
+}
 function parseDigestField(value, label) {
 	try {
 		return parseDigestB64u(value);
@@ -53,6 +57,6 @@ function parseUnixMs(value, label) {
 	return value;
 }
 //#endregion
-export { parseDigestField, parseEd25519PublicKeyB64u, parseEnvelopeCiphertextB64u, parseEnvelopeNonceB64u, parseEnvelopeRevision, parseKeyCreationSignerSlot, parseSecp256k1CompressedPublicKeyB64u, parseUnixMs };
+export { parseDigestField, parseEd25519PublicKeyB64u, parseEnvelopeCiphertextB64u, parseEnvelopeNonceB64u, parseEnvelopeRevision, parseKeyCreationSignerSlot, parseSecp256k1CompressedPublicKeyB64u, parseUnixMs, requireParsed };
 
 //# sourceMappingURL=primitives.js.map