@seams/wallet 0.7.1 → 0.7.3

package/dist/esm/react/shared-ts/src/signing-lanes/ownerContinuity.js

@@ -1,7 +1,7 @@
 import { requireRecord } from "../utils/validation.js";
 import { hasWhitespaceOrControlCharacters, parseMpcSigningWorkerRef } from "../utils/domainIds.js";
 import { rejectUnknownFields } from "../utils/exactRecord.js";
-import { parseDigestField } from "../passkey-custody/primitives.js";
+import { parseDigestField, requireParsed } from "../passkey-custody/primitives.js";
 import "./participants.js";
 import "../utils/digestEncoding.js";
 import "./participantDigest.js";
@@ -14,10 +14,6 @@ const OWNER_LANE_PARTICIPANT_CONTINUITY_FIELDS = [
 	"custodyKeyManifestDigestB64u",
 	"sourceIdentityDigestB64u"
 ];
-function requireResult(result, label) {
-	if (result.ok) return result.value;
-	throw new Error(`${label} ${result.error.message}`);
-}
 /** Parse the owner signer identity without widening it into a generic string. */
 function parseWalletSignerId(raw, label = "walletSignerId") {
 	if (typeof raw !== "string") throw new Error(`${label} must be a string`);
@@ -43,7 +39,7 @@ function buildOwnerLaneParticipantContinuityV1(args) {
 		kind: "owner_lane_participant_continuity_v1",
 		signerId: parseWalletSignerId(args.signerId),
 		participantIds,
-		signingWorkerId: requireResult(parseMpcSigningWorkerRef(args.signingWorkerId), "signingWorkerId"),
+		signingWorkerId: requireParsed(parseMpcSigningWorkerRef(args.signingWorkerId), "signingWorkerId"),
 		custodyKeyManifestDigestB64u: parseDigestField(args.custodyKeyManifestDigestB64u, "custodyKeyManifestDigestB64u"),
 		sourceIdentityDigestB64u: parseDigestField(args.sourceIdentityDigestB64u, "sourceIdentityDigestB64u")
 	};
@@ -55,7 +51,7 @@ function parseOwnerLaneParticipantContinuityV1(raw, label = "ownerParticipantCon
 	return buildOwnerLaneParticipantContinuityV1({
 		signerId: parseWalletSignerId(record.signerId, `${label}.signerId`),
 		participantIds: parseParticipantIds(record.participantIds, `${label}.participantIds`),
-		signingWorkerId: requireResult(parseMpcSigningWorkerRef(record.signingWorkerId), `${label}.signingWorkerId`),
+		signingWorkerId: requireParsed(parseMpcSigningWorkerRef(record.signingWorkerId), `${label}.signingWorkerId`),
 		custodyKeyManifestDigestB64u: parseDigestField(record.custodyKeyManifestDigestB64u, `${label}.custodyKeyManifestDigestB64u`),
 		sourceIdentityDigestB64u: parseDigestField(record.sourceIdentityDigestB64u, `${label}.sourceIdentityDigestB64u`)
 	});

package/dist/esm/react/shared-ts/src/signing-lanes/recordParsers.js

@@ -1,7 +1,7 @@
 import { requireRecord } from "../utils/validation.js";
 import { hasWhitespaceOrControlCharacters, parseLaneShareEpoch, parseLinkedDeviceId, parseSigningLaneId, parseWalletAuthMethodId, parseWalletId, parseWalletKeyId } from "../utils/domainIds.js";
 import { rejectUnknownFields } from "../utils/exactRecord.js";
-import { parseDigestField, parseEd25519PublicKeyB64u, parseKeyCreationSignerSlot, parseSecp256k1CompressedPublicKeyB64u, parseUnixMs } from "../passkey-custody/primitives.js";
+import { parseDigestField, parseEd25519PublicKeyB64u, parseKeyCreationSignerSlot, parseSecp256k1CompressedPublicKeyB64u, parseUnixMs, requireParsed } from "../passkey-custody/primitives.js";
 import { parseLaneHolderParticipantRecordV1, parseLaneParticipantBindingDigestB64u, parseSigningWorkerParticipantRecordV1 } from "./participants.js";
 import { parseNearEd25519SigningKeyId } from "../utils/registrationIds.js";
 import { requireEvmFamilySigningKeySlotId } from "./evmFamilySigningKeySlotId.js";
@@ -88,10 +88,6 @@ function signingLaneRecordFields(laneKind) {
 		case "delegated_execution": return DELEGATED_SIGNING_LANE_FIELDS;
 	}
 }
-function requireResult(result, label) {
-	if (result.ok) return result.value;
-	throw new Error(`${label} ${result.error.message}`);
-}
 function parseRequiredDomainId(raw, label) {
 	if (raw === void 0 || raw === null) throw new Error(`${label} is required`);
 	if (typeof raw !== "string") throw new Error(`${label} must be a string`);
@@ -191,12 +187,12 @@ function parseSigningLaneLifecycleState(raw, label) {
 function parseSigningLaneReferenceFields(record, label) {
 	if (record.kind !== "signing_lane_reference_v1") throw new Error(`${label}.kind must be signing_lane_reference_v1`);
 	return buildSigningLaneReference({
-		walletId: requireResult(parseWalletId(record.walletId), `${label}.walletId`),
-		walletKeyId: requireResult(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
-		laneId: requireResult(parseSigningLaneId(record.laneId), `${label}.laneId`),
-		laneShareEpoch: requireResult(parseLaneShareEpoch(record.laneShareEpoch), `${label}.laneShareEpoch`),
+		walletId: requireParsed(parseWalletId(record.walletId), `${label}.walletId`),
+		walletKeyId: requireParsed(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
+		laneId: requireParsed(parseSigningLaneId(record.laneId), `${label}.laneId`),
+		laneShareEpoch: requireParsed(parseLaneShareEpoch(record.laneShareEpoch), `${label}.laneShareEpoch`),
 		laneKind: parseSigningLaneKind(record.laneKind, `${label}.laneKind`),
-		participantBindingDigestB64u: requireResult(parseLaneParticipantBindingDigestB64u(record.participantBindingDigestB64u), `${label}.participantBindingDigestB64u`)
+		participantBindingDigestB64u: requireParsed(parseLaneParticipantBindingDigestB64u(record.participantBindingDigestB64u), `${label}.participantBindingDigestB64u`)
 	});
 }
 function parseSigningLaneRecordCommon(record, label) {
@@ -215,7 +211,7 @@ function parseOwnerAuthSigningLaneRecordBase(record, label) {
 	const walletAuthMethodId = parseWalletAuthMethodId(record.walletAuthMethodId);
 	return {
 		...common,
-		walletAuthMethodId: requireResult(walletAuthMethodId, `${label}.walletAuthMethodId`),
+		walletAuthMethodId: requireParsed(walletAuthMethodId, `${label}.walletAuthMethodId`),
 		ownerParticipantContinuity: parseOwnerLaneParticipantContinuityV1(record.ownerParticipantContinuity, `${label}.ownerParticipantContinuity`)
 	};
 }
@@ -411,8 +407,8 @@ function parseWalletKeyRecord(raw, label = "walletKeyRecord") {
 	if (record.keyFamily === "ed25519") {
 		rejectUnknownFields(record, ED25519_WALLET_KEY_FIELDS, label, ALL_WALLET_KEY_FIELDS);
 		return buildEd25519WalletKeyRecord({
-			walletId: requireResult(parseWalletId(record.walletId), `${label}.walletId`),
-			walletKeyId: requireResult(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
+			walletId: requireParsed(parseWalletId(record.walletId), `${label}.walletId`),
+			walletKeyId: requireParsed(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
 			walletKeyVersion: parseWalletKeyVersion(record.walletKeyVersion, `${label}.walletKeyVersion`),
 			nearEd25519SigningKeyId: parseNearEd25519SigningKeyId(record.nearEd25519SigningKeyId),
 			keyCreationSignerSlot: parseKeyCreationSignerSlot(record.keyCreationSignerSlot, `${label}.keyCreationSignerSlot`),
@@ -423,8 +419,8 @@ function parseWalletKeyRecord(raw, label = "walletKeyRecord") {
 	if (record.keyFamily === "ecdsa_secp256k1") {
 		rejectUnknownFields(record, EVM_WALLET_KEY_FIELDS, label, ALL_WALLET_KEY_FIELDS);
 		return buildEvmFamilyWalletKeyRecord({
-			walletId: requireResult(parseWalletId(record.walletId), `${label}.walletId`),
-			walletKeyId: requireResult(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
+			walletId: requireParsed(parseWalletId(record.walletId), `${label}.walletId`),
+			walletKeyId: requireParsed(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
 			walletKeyVersion: parseWalletKeyVersion(record.walletKeyVersion, `${label}.walletKeyVersion`),
 			evmFamilySigningKeySlotId: requireEvmFamilySigningKeySlotId(record.evmFamilySigningKeySlotId, `${label}.evmFamilySigningKeySlotId`),
 			thresholdPublicKey33B64u: parseSecp256k1CompressedPublicKeyB64u(record.thresholdPublicKey33B64u, `${label}.thresholdPublicKey33B64u`),
@@ -453,7 +449,7 @@ function parseSigningLaneRecord(raw, label = "signingLaneRecord") {
 				holderParticipant: base.holderParticipant,
 				serverParticipant: base.serverParticipant,
 				lifecycle: base.lifecycle,
-				linkedDeviceId: requireResult(parseLinkedDeviceId(record.linkedDeviceId), `${label}.linkedDeviceId`)
+				linkedDeviceId: requireParsed(parseLinkedDeviceId(record.linkedDeviceId), `${label}.linkedDeviceId`)
 			});
 		}
 		case "delegated_execution": {

package/dist/esm/react/shared-ts/src/threshold/signingRootScope.js

@@ -28,6 +28,9 @@ function normalizeRuntimePolicyScopeFields(input) {
 		...normalizeOptionalTrimmedString(scope.signingRootVersion) ? { signingRootVersion: normalizeOptionalTrimmedString(scope.signingRootVersion) } : {}
 	};
 }
+function sameRuntimePolicyScope(left, right) {
+	return left.orgId === right.orgId && left.projectId === right.projectId && left.envId === right.envId && left.signingRootVersion === right.signingRootVersion;
+}
 function signingRootScopeFromRuntimePolicyScope(scope) {
 	return {
 		signingRootId: deriveSigningRootId(scope),
@@ -35,6 +38,6 @@ function signingRootScopeFromRuntimePolicyScope(scope) {
 	};
 }
 //#endregion
-export { deriveSigningRootId, normalizeRuntimePolicyScope, signingRootScopeFromRuntimePolicyScope };
+export { deriveSigningRootId, normalizeRuntimePolicyScope, sameRuntimePolicyScope, signingRootScopeFromRuntimePolicyScope };
 
 //# sourceMappingURL=signingRootScope.js.map

package/dist/esm/react/shared-ts/src/utils/ecdsaKeyFactsInventory.js

@@ -1,10 +1,8 @@
 import { base64UrlEncode } from "./base64.js";
 import { alphabetizeStringify, sha256BytesUtf8 } from "./digests.js";
 import "./encoders.js";
+import { thresholdEcdsaChainTargetKey } from "./thresholdEcdsaChainTarget.js";
 //#region ../shared-ts/src/utils/ecdsaKeyFactsInventory.ts
-function chainTargetKey(target) {
-	return target.kind === "evm" ? `evm:eip155:${target.chainId}` : `tempo:${target.chainId}`;
-}
 function normalizeChainTarget(target) {
 	if (target.kind === "evm") return {
 		kind: "evm",
@@ -22,7 +20,7 @@ function canonicalizeWalletEcdsaKeyFactsInventoryChallenge(input) {
 	const keyTargets = input.keyTargets.map((target) => ({
 		keyHandle: target.keyHandle,
 		chainTarget: normalizeChainTarget(target.chainTarget),
-		targetKey: chainTargetKey(target.chainTarget)
+		targetKey: thresholdEcdsaChainTargetKey(target.chainTarget)
 	})).sort((left, right) => {
 		const leftKey = `${left.keyHandle}:${left.targetKey}`;
 		const rightKey = `${right.keyHandle}:${right.targetKey}`;

package/dist/esm/react/shared-ts/src/utils/ecdsaServerTiming.js

@@ -5,7 +5,6 @@ const ECDSA_TIMING_METRICS = new Set([
 	"ecdsa_sign_proxy",
 	"ecdsa_sign_complete",
 	"ecdsa_sign_total",
-	"ecdsa_presign_queue",
 	"ecdsa_presign_authenticate",
 	"ecdsa_presign_material",
 	"ecdsa_presign_admit",

package/dist/esm/react/shared-ts/src/utils/exactKeys.js

@@ -0,0 +1,17 @@
+//#region ../shared-ts/src/utils/exactKeys.ts
+/**
+* True when `value` is a non-array object whose own enumerable string keys are exactly `keys`.
+*
+* A key whose value is `undefined` still counts as present. Symbol, non-enumerable and inherited
+* keys are not counted, and the prototype is not checked. A list that repeats a key never matches.
+* Kept apart from validation.ts, which the wallet iframe's boot path loads.
+*/
+function hasExactKeys(value, keys) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+	const actual = Object.keys(value);
+	return actual.length === keys.length && actual.every((key) => keys.includes(key));
+}
+//#endregion
+export { hasExactKeys };
+
+//# sourceMappingURL=exactKeys.js.map

package/dist/esm/react/shared-ts/src/utils/registrationIntent.js

@@ -11,17 +11,11 @@ function addAuthMethodIntentGrantFromString(value) {
 function addSignerIntentGrantFromString(value) {
 	return String(value || "").trim();
 }
-function serializeRegistrationIntentV1(intent) {
-	return alphabetizeStringify(intent);
-}
-function serializeAddAuthMethodIntentV1(intent) {
-	return alphabetizeStringify(intent);
-}
 async function computeRegistrationIntentDigestB64u(intent) {
-	return base64UrlEncode(await sha256BytesUtf8(serializeRegistrationIntentV1(intent)));
+	return base64UrlEncode(await sha256BytesUtf8(alphabetizeStringify(intent)));
 }
 async function computeAddAuthMethodIntentDigestB64u(intent) {
-	return base64UrlEncode(await sha256BytesUtf8(serializeAddAuthMethodIntentV1(intent)));
+	return base64UrlEncode(await sha256BytesUtf8(alphabetizeStringify(intent)));
 }
 function normalizeAddAuthMethodIntentCaller(raw) {
 	const record = inspectRawObject(raw);

package/dist/esm/react/shared-ts/src/utils/registrationSignerPlan.js

@@ -75,11 +75,8 @@ function registrationSignerBranchKeyFromString(value) {
 function registrationNearEd25519BranchKey(signerSlot) {
 	return registrationSignerBranchKeyFromString(`near_ed25519:slot:${signerSlot}`);
 }
-function registrationEvmFamilyEcdsaTargetKey(target) {
-	return alphabetizeStringify(target);
-}
 function registrationEvmFamilyEcdsaBranchKey(chainTargets) {
-	return registrationSignerBranchKeyFromString(`evm_family_ecdsa:${chainTargets.map(registrationEvmFamilyEcdsaTargetKey).join("|")}`);
+	return registrationSignerBranchKeyFromString(`evm_family_ecdsa:${chainTargets.map(alphabetizeStringify).join("|")}`);
 }
 function registrationSignerPlanFromRequests(signers) {
 	return registrationSignerPlanFromBranches(signers.map(registrationSignerPlanBranchFromRequest));
@@ -163,7 +160,7 @@ function findDuplicateRegistrationSignerBranch(branch, branchKeys) {
 }
 function findDuplicateRegistrationEcdsaTarget(branch, ecdsaTargetKeys) {
 	for (const target of branch.chainTargets) {
-		const targetKey = registrationEvmFamilyEcdsaTargetKey(target);
+		const targetKey = alphabetizeStringify(target);
 		if (ecdsaTargetKeys.has(targetKey)) return {
 			ok: false,
 			code: "invalid_body",

package/dist/esm/react/shared-ts/src/utils/routerAbEcdsaDerivation.js

@@ -1329,6 +1329,6 @@ async function parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreReques
 	return response;
 }
 //#endregion
-export { ROUTER_AB_ECDSA_DERIVATION_EXPORT_PATH, ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_STATE_KIND_V1, ROUTER_AB_ECDSA_DERIVATION_OPERATION_STEP_UP_PATH, ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_INIT_PATH, ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_STEP_PATH, ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, ROUTER_AB_ECDSA_PRESIGN_CEREMONY_MAX_LIFETIME_MS, buildRouterAbEcdsaDerivationActiveStateIdV1, buildRouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1, buildRouterAbEcdsaDerivationEvmDigestSigningRequestV1, computeRouterAbEcdsaOperationStepUpChallengeB64u, parseRouterAbEcdsaCredentialFreeSessionActivationResponseV1, parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1, parseRouterAbEcdsaDerivationEvmDigestSigningRequestV1, parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreRequestV1, parseRouterAbEcdsaDerivationNormalSigningScopeV1, parseRouterAbEcdsaDerivationNormalSigningStateV1, parseRouterAbEcdsaDerivationPublicCapabilityV1, parseRouterAbEcdsaExplicitExportForwardedResponseV1, parseRouterAbEcdsaOperationStepUpAuthorizationRequestV1, parseRouterAbEcdsaOperationStepUpAuthorizationResponseV1, parseRouterAbEcdsaOperationStepUpPreparationV1, parseRouterAbEcdsaPostRegistrationSessionActivationPolicyV1, parseRouterAbEcdsaPostRegistrationSessionActivationRequestV1, parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, parseRouterAbEcdsaRegistrationActivationReceiptV1, parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, parseRouterAbEcdsaRegistrationRequestFactsV1, parseRouterAbEcdsaSigningWorkerExportShareEnvelopeV1, parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, parseRouterAbEcdsaVerifiedClientActivationFactsV1, requireRouterAbEcdsaDerivationNormalSigningStateV1, routerAbEcdsaDerivationActiveStateId, routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestDigestV1, routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1, routerAbEcdsaDerivationNormalSigningScopeCanonicalBytesV1, routerAbEcdsaRerandomizationClientCommitmentV1, sameRouterAbEcdsaDerivationNormalSigningScopeV1, sameRouterAbEcdsaDerivationNormalSigningStateV1, sameRouterAbEcdsaDerivationPublicCapabilityV1, sameRouterAbEcdsaDerivationPublicIdentityV1, sameRouterAbEcdsaRegistrationActivationReceiptV1, sameRouterAbEcdsaVerifiedClientActivationFactsV1, sameRouterAbPublicDigest32V1Wire, sameRouterAbServerIdentityV1 };
+export { ROUTER_AB_ECDSA_DERIVATION_EXPORT_PATH, ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_STATE_KIND_V1, ROUTER_AB_ECDSA_DERIVATION_OPERATION_STEP_UP_PATH, ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_INIT_PATH, ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_STEP_PATH, ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, ROUTER_AB_ECDSA_PRESIGN_CEREMONY_MAX_LIFETIME_MS, buildRouterAbEcdsaDerivationActiveStateIdV1, buildRouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1, buildRouterAbEcdsaDerivationEvmDigestSigningRequestV1, computeRouterAbEcdsaOperationStepUpChallengeB64u, parseRouterAbEcdsaCredentialFreeSessionActivationResponseV1, parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1, parseRouterAbEcdsaDerivationEvmDigestSigningRequestV1, parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreRequestV1, parseRouterAbEcdsaDerivationNormalSigningScopeV1, parseRouterAbEcdsaDerivationNormalSigningStateV1, parseRouterAbEcdsaDerivationPublicCapabilityV1, parseRouterAbEcdsaExplicitExportForwardedResponseV1, parseRouterAbEcdsaOperationStepUpAuthorizationRequestV1, parseRouterAbEcdsaOperationStepUpAuthorizationResponseV1, parseRouterAbEcdsaOperationStepUpPreparationV1, parseRouterAbEcdsaPostRegistrationSessionActivationPolicyV1, parseRouterAbEcdsaPostRegistrationSessionActivationRequestV1, parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, parseRouterAbEcdsaRegistrationActivationReceiptV1, parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, parseRouterAbEcdsaRegistrationRequestFactsV1, parseRouterAbEcdsaSigningWorkerExportShareEnvelopeV1, parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, parseRouterAbEcdsaVerifiedClientActivationFactsV1, requireRouterAbEcdsaDerivationNormalSigningStateV1, routerAbEcdsaDerivationActiveStateId, routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestDigestV1, routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1, routerAbEcdsaDerivationNormalSigningScopeCanonicalBytesV1, routerAbEcdsaRerandomizationClientCommitmentV1, sameRegistrationRecipientKeys, sameRegistrationSignerSet, sameRouterAbEcdsaDerivationNormalSigningScopeV1, sameRouterAbEcdsaDerivationNormalSigningStateV1, sameRouterAbEcdsaDerivationPublicCapabilityV1, sameRouterAbEcdsaDerivationPublicIdentityV1, sameRouterAbEcdsaRegistrationActivationReceiptV1, sameRouterAbEcdsaVerifiedClientActivationFactsV1, sameRouterAbPublicDigest32V1Wire, sameRouterAbServerIdentityV1 };
 
 //# sourceMappingURL=routerAbEcdsaDerivation.js.map

package/dist/esm/react/shared-ts/src/utils/routerAbEd25519Yao.js

@@ -742,6 +742,6 @@ function parseEncryptedPackageValue(value) {
 	return parseEncryptedPackage(value, "encrypted_package");
 }
 //#endregion
-export { ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1, ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, parseRouterAbEd25519YaoActivationPublicReceiptV1, parseRouterAbEd25519YaoActivationResultV1, parseRouterAbEd25519YaoApplicationBindingFactsV1, parseRouterAbEd25519YaoCeremonyBindingV1, parseRouterAbEd25519YaoEncryptedPackageV1, parseRouterAbEd25519YaoExportAdmissionReceiptV1, parseRouterAbEd25519YaoExportExecuteRequestV1, parseRouterAbEd25519YaoExportResultV1, parseRouterAbEd25519YaoParticipantIdsV1, parseRouterAbEd25519YaoRecoveryActivationAdmissionReceiptV1, parseRouterAbEd25519YaoRecoveryActivationExecuteRequestV1, parseRouterAbEd25519YaoRecoveryActivationReceiptV1, parseRouterAbEd25519YaoRecoveryActivationResultV1, parseRouterAbEd25519YaoRecoveryAdmissionRequestV1, parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1, parseRouterAbEd25519YaoRegistrationActivationExecuteRequestV1, parseRouterAbEd25519YaoRegistrationActivationResultV1, parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1, sameRouterAbEd25519YaoActivationBindingV1, sameRouterAbEd25519YaoRegistrationAdmissionRequestV1 };
+export { ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1, ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, parseRouterAbEd25519YaoActivationPublicReceiptV1, parseRouterAbEd25519YaoActivationResultV1, parseRouterAbEd25519YaoApplicationBindingFactsV1, parseRouterAbEd25519YaoCeremonyBindingV1, parseRouterAbEd25519YaoEncryptedPackageV1, parseRouterAbEd25519YaoExportAdmissionReceiptV1, parseRouterAbEd25519YaoExportExecuteRequestV1, parseRouterAbEd25519YaoExportResultV1, parseRouterAbEd25519YaoParticipantIdsV1, parseRouterAbEd25519YaoRecoveryActivationAdmissionReceiptV1, parseRouterAbEd25519YaoRecoveryActivationExecuteRequestV1, parseRouterAbEd25519YaoRecoveryActivationReceiptV1, parseRouterAbEd25519YaoRecoveryActivationResultV1, parseRouterAbEd25519YaoRecoveryAdmissionRequestV1, parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1, parseRouterAbEd25519YaoRegistrationActivationExecuteRequestV1, parseRouterAbEd25519YaoRegistrationActivationResultV1, parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1, sameRouterAbEd25519YaoActivationBindingV1, sameRouterAbEd25519YaoByteSequence, sameRouterAbEd25519YaoRegistrationAdmissionRequestV1 };
 
 //# sourceMappingURL=routerAbEd25519Yao.js.map

package/dist/esm/react/shared-ts/src/utils/thresholdEcdsaChainTarget.js

@@ -0,0 +1,9 @@
+//#region ../shared-ts/src/utils/thresholdEcdsaChainTarget.ts
+function thresholdEcdsaChainTargetKey(target) {
+	if (target.kind === "evm") return `evm:eip155:${target.chainId}`;
+	return `tempo:${target.chainId}`;
+}
+//#endregion
+export { thresholdEcdsaChainTargetKey };
+
+//# sourceMappingURL=thresholdEcdsaChainTarget.js.map

package/dist/esm/react/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js

@@ -47,7 +47,7 @@ function buildGoogleEmailOtpProjection(input) {
 			providerSubject: input.providerSubject,
 			emailHashHex: requireEmailHash(input.emailHashHex),
 			registrationAuthorityId: requireTrimmedString(input.registrationAuthorityId, "registrationAuthorityId", "is invalid"),
-			enrollment: buildEnrollmentReference(input.enrollment)
+			enrollment: parseEnrollmentReference(input.enrollment)
 		}
 	};
 	assertProjectionShape(projection);
@@ -133,9 +133,6 @@ function parseEnrollmentReference(raw) {
 		enrollmentSealKeyVersion: requireTrimmedString(record.enrollmentSealKeyVersion, "enrollment.enrollmentSealKeyVersion", "is invalid")
 	};
 }
-function buildEnrollmentReference(value) {
-	return parseEnrollmentReference(value);
-}
 function assertExpectedIdentity(projection, expected) {
 	if (projection.kind !== expected.kind || projection.walletId !== expected.walletId || projection.recoveryOperationId !== expected.recoveryOperationId || projection.targetDeviceId !== expected.targetDeviceId || projection.targetAuthorityId !== expected.targetAuthorityId || projection.targetWalletAuthMethodId !== expected.targetWalletAuthMethodId) throw new Error("wallet recovery committed projection identity changed");
 	if (projection.kind === "passkey" && expected.kind === "passkey") {

package/dist/esm/react/styles/styles.css

@@ -233,6 +233,23 @@
   background: color-mix(in srgb, var(--seams-colors-focus), transparent 65%);
 }
 
+/* A chosen item blinks once, highlight off then on, before its menu closes
+   (blinkMenuItem). No transition, so each phase lands on its own frame. */
+.seams-dropdown-menu-item[data-blink] {
+  transition: none;
+}
+
+.seams-dropdown-menu-item[data-blink='off'],
+.seams-dropdown-menu-item[data-blink='off']:hover {
+  background: transparent;
+  box-shadow: none;
+}
+
+.seams-dropdown-menu-item[data-blink='on'],
+.seams-dropdown-menu-item[data-blink='on']:hover {
+  background: var(--seams-colors-hover);
+}
+
 /* Menu item animation states (within ProfileDropdown) */
 
 .seams-profile-dropdown-morphed[data-state='closed'] .seams-dropdown-menu-item {
@@ -544,11 +561,6 @@ body[data-seams-theme-pulse='1'] .seams-profile-dropdown-menu {
   transition: color 0.1s ease;
 }
 
-.seams-user-account-button-trigger:hover .seams-profile-button-icon,
-.seams-user-account-button-trigger:hover .seams-profile-button-username {
-  color: inherit;
-}
-
 .seams-user-account-button-trigger:hover svg {
   color: inherit;
 }
@@ -723,58 +735,6 @@ body[data-seams-theme-pulse='1'] .seams-profile-dropdown-menu {
   border-color: var(--seams-colors-borderHover);
 }
 
-.seams-profile-button-icon {
-  flex-shrink: 0;
-}
-
-.seams-profile-button-icon svg {
-  overflow: visible;
-}
-
-.seams-profile-button-username {
-  white-space: nowrap;
-  overflow: hidden;
-  display: inline-block;
-}
-
-.seams-profile-button-icon {
-  color: var(--seams-colors-textSecondary);
-}
-
-.seams-profile-button-username {
-  display: block;
-  color: var(--seams-colors-textSecondary);
-}
-
-.seams-profile-button-username.hidden {
-  display: none;
-}
-
-.seams-user-account--toggle-content {
-  display: flex;
-  flex-direction: column;
-  align-items: flex-start;
-  justify-content: space-between;
-  transition: opacity 0.15s ease-in-out;
-}
-
-.seams-user-account--toggle-text {
-  flex: 1;
-}
-
-.seams-user-account--toggle-title {
-  font-weight: 500;
-  color: var(--seams-colors-textPrimary);
-  font-size: 14px;
-  margin: 0;
-}
-
-.seams-user-account--toggle-description {
-  font-size: 14px;
-  color: var(--seams-colors-textMuted);
-  margin: 0;
-}
-
 .seams-settings-page {
   min-height: 100dvh;
   color: var(--seams-colors-textPrimary);
@@ -1631,13 +1591,6 @@ body[data-seams-theme-pulse='1'] .seams-profile-dropdown-menu {
   max-width: 220px;
 }
 
-.qr-scanner-mode-controls {
-  margin-top: 20px;
-  display: flex;
-  gap: 10px;
-  justify-content: center;
-}
-
 .qr-scanner-close {
   position: absolute;
   top: 20px;
@@ -1673,14 +1626,6 @@ body[data-seams-theme-pulse='1'] .seams-profile-dropdown-menu {
   outline-offset: 3px;
 }
 
-.qr-scanner-error-container {
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  min-height: 300px;
-  padding: 20px;
-}
-
 .qr-scanner-error-message {
   background-color: var(--seams-colors-error);
   color: var(--seams-colors-textButton);
@@ -2070,20 +2015,6 @@ body[data-seams-theme-pulse='1'] .seams-profile-dropdown-menu {
   background: var(--seams-colors-surface2, #f1f5f9);
 }
 
-/* Responsive Design */
-@media (max-width: 768px) {
-  .qr-modal-content {
-    margin: 1rem;
-    max-width: calc(100vw - 2rem);
-  }
-
-  @supports (width: 1dvw) {
-    .qr-modal-content {
-      max-width: calc(100dvw - 2rem);
-    }
-  }
-}
-
 
 /* Global default z-index tokens for wallet overlay + SDK modals */
 :root {

package/dist/esm/react/utils/menuItemBlink.js

@@ -0,0 +1,24 @@
+//#region src/utils/menuItemBlink.ts
+const MENU_ITEM_BLINK_PHASE_MS = 90;
+const waitForBlinkPhase = () => new Promise((resolve) => setTimeout(resolve, MENU_ITEM_BLINK_PHASE_MS));
+/**
+* Blinks a chosen menu item once, highlight off and then on again, so the menu
+* confirms which item was picked before it closes, as macOS menus do. The item's
+* stylesheet renders `data-blink="off"` and `data-blink="on"`.
+*
+* Returns null while the item is already blinking, so a double click commits once.
+*/
+function blinkMenuItem(item) {
+	if (item.dataset.blink) return null;
+	item.dataset.blink = "off";
+	return waitForBlinkPhase().then(() => {
+		item.dataset.blink = "on";
+		return waitForBlinkPhase();
+	}).then(() => {
+		delete item.dataset.blink;
+	});
+}
+//#endregion
+export { blinkMenuItem };
+
+//# sourceMappingURL=menuItemBlink.js.map

package/dist/esm/sdk/{accountLifecycle-BAGG_rbk.js → accountLifecycle-zthG08aC.js}

@@ -8,7 +8,7 @@ import { a as toIndexedDbChainTargetKey, t as normalizeIndexedDbAccountAddress }
 import { t as toAccountId } from "./accountIds-DhIPGOSN.js";
 import { i as nearEd25519SigningKeyIdFromString } from "./registrationIds-DLSdEKSv.js";
 import { t as parseSignerSlot } from "./signerSlot-_ovonwVX.js";
-import { t as NEAR_ED25519_YAO_KEY_VERSION_V1 } from "./registrationSignerPlan-CAikVZZQ.js";
+import { t as NEAR_ED25519_YAO_KEY_VERSION_V1 } from "./registrationSignerPlan-DhV8VAob.js";
 import { a as getNearChainCandidates, i as buildNearAccountRefs, n as resolveProfileAccountContextFromCandidates, o as inferNearChainIdKey, r as resolveProfileAccountProjection, t as getLastSelectedProfileAccountByChain } from "./profileAccountProjection-uZVJuBvS.js";
 //#region src/core/accountData/near/profileId.ts
 const NEAR_PROFILE_PREFIX = "near-profile";

package/dist/esm/sdk/{adapters-B4JeK1nJ.js → adapters-Dli9XAZp.js}

@@ -6,7 +6,7 @@ import { c as resolveExplorerUrlForChainFamily } from "./chains-BMh3btVo.js";
 import { t as toAccountId } from "./accountIds-DhIPGOSN.js";
 import { p as nonceLeaseToRef } from "./nonceLaneKeys-C3c9lG6u.js";
 import { i as buildNearAccountRefs, n as resolveProfileAccountContextFromCandidates } from "./profileAccountProjection-uZVJuBvS.js";
-import { u as emitSigningSessionFlowTrace } from "./trace-rHe0wz7q.js";
+import { u as emitSigningSessionFlowTrace } from "./trace-DKLQZvec.js";
 import { a as toActionArgsWasm, i as isActionArgsWasm, r as fromTransactionInputsWasm, t as ActionType } from "./actions-CCvThiKe.js";
 import { i as orderActionForDigest, r as computeUiIntentDigestFromTxs } from "./intentDigest-CvOSNlCH.js";
 import { t as createWalletIframeSurfaceMeasurementReporter } from "./surface-measurement-reporter-CSTyRsMa.js";
@@ -630,30 +630,6 @@ const renderFallbackDisplayOperation = ({ operation, depth, path, renderChild })
 	};
 };
 //#endregion
-//#region src/core/signingEngine/uiConfirm/ui/transaction-display/renderers/near.ts
-function isNearDisplayOperation(operation) {
-	return operation.kind === "near.action";
-}
-const renderNearDisplayOperation = (args) => {
-	return renderFallbackDisplayOperation(args);
-};
-//#endregion
-//#region src/core/signingEngine/uiConfirm/ui/transaction-display/renderers/evm.ts
-function isEvmDisplayOperation(operation) {
-	return operation.kind === "generic.contractCall";
-}
-const renderEvmDisplayOperation = (args) => {
-	return renderFallbackDisplayOperation(args);
-};
-//#endregion
-//#region src/core/signingEngine/uiConfirm/ui/transaction-display/renderers/tempo.ts
-function isTempoDisplayOperation(operation) {
-	return operation.kind === "tempo.eip2718";
-}
-const renderTempoDisplayOperation = (args) => {
-	return renderFallbackDisplayOperation(args);
-};
-//#endregion
 //#region src/core/signingEngine/uiConfirm/ui/transaction-display/tree.ts
 function toChainLabel(chain) {
 	switch (chain) {
@@ -678,14 +654,8 @@ function buildWarningNodes(warnings) {
 		}))
 	}];
 }
-function selectOperationRenderer(operation) {
-	if (isNearDisplayOperation(operation)) return renderNearDisplayOperation;
-	if (isEvmDisplayOperation(operation)) return renderEvmDisplayOperation;
-	if (isTempoDisplayOperation(operation)) return renderTempoDisplayOperation;
-	return renderFallbackDisplayOperation;
-}
 function renderOperationNode(operation, depth, path) {
-	return selectOperationRenderer(operation)({
+	return renderFallbackDisplayOperation({
 		operation,
 		depth,
 		path,
@@ -3449,6 +3419,21 @@ var TransactionReceipt = class extends C {
 		if (row.ownerDocument.defaultView?.matchMedia("(prefers-reduced-motion: reduce)").matches) return;
 		const height = row.getBoundingClientRect().height;
 		row.dataset.opening = "";
+		const showLink = () => {
+			this.releaseExplorerRow();
+			link.animate([{
+				opacity: 0,
+				filter: "blur(4px)",
+				transform: "translateY(6px)"
+			}, {
+				opacity: 1,
+				filter: "blur(0)",
+				transform: "translateY(0)"
+			}], {
+				duration: EXPLORER_REVEAL_MS,
+				easing: EXPLORER_REVEAL_EASING
+			});
+		};
 		if (!announceClampedSurfaceResize({
 			reason: "receipt-explorer",
 			element: row,
@@ -3456,28 +3441,15 @@ var TransactionReceipt = class extends C {
 			toCssPx: height,
 			drivenClasses: ["seams-receipt-explorer-driven"],
 			setHeightCssPx: this.setExplorerRowHeight,
-			onSettled: this.releaseExplorerRow
+			onSettled: showLink
 		})) {
 			const opening = row.animate([{ height: "0px" }, { height: `${height}px` }], {
 				duration: EXPLORER_REVEAL_MS,
 				easing: EXPLORER_REVEAL_EASING
 			});
-			opening.onfinish = opening.oncancel = this.releaseExplorerRow;
+			opening.onfinish = showLink;
+			opening.oncancel = this.releaseExplorerRow;
 		}
-		link.animate([{
-			opacity: 0,
-			filter: "blur(4px)",
-			transform: "translateY(6px)"
-		}, {
-			opacity: 1,
-			filter: "blur(0)",
-			transform: "translateY(0)"
-		}], {
-			duration: EXPLORER_REVEAL_MS,
-			delay: 60,
-			easing: EXPLORER_REVEAL_EASING,
-			fill: "backwards"
-		});
 	}
 	render() {
 		const { receipt, data } = this.props;

package/dist/{public/sdk/canonicalSignerErrorCode-CRoJMVpp.js → esm/sdk/canonicalSignerErrorCode-BBIk365e.js}

@@ -15,20 +15,6 @@ const CANONICAL_SIGNER_CODES = new Set([
 	"rpc_request_failed",
 	"cancelled"
 ]);
-const SIGNER_BOUNDARY_REQUEST_TYPES = new Set([
-	"PM_SIGN_TEMPO",
-	"PM_REPORT_TEMPO_BROADCAST_ACCEPTED",
-	"PM_REPORT_TEMPO_BROADCAST_REJECTED",
-	"PM_REPORT_TEMPO_FINALIZED",
-	"PM_REPORT_TEMPO_DROPPED_OR_REPLACED",
-	"PM_RECONCILE_TEMPO_NONCE_LANE",
-	"PM_SIGN_TX_WITH_ACTIONS",
-	"PM_SIGN_AND_SEND_TX",
-	"PM_SEND_TRANSACTION",
-	"PM_EXECUTE_ACTION",
-	"PM_SIGN_DELEGATE_ACTION",
-	"PM_SIGN_NEP413"
-]);
 const THRESHOLD_ECDSA_REQUEST_TYPES = new Set([
 	"PM_SIGN_TEMPO",
 	"PM_REPORT_TEMPO_BROADCAST_ACCEPTED",
@@ -117,7 +103,7 @@ function inferCanonicalCodeFromMessage(args) {
 	return null;
 }
 function isWalletSignerBoundaryRequestType(value) {
-	return typeof value === "string" && SIGNER_BOUNDARY_REQUEST_TYPES.has(value);
+	return typeof value === "string" && (THRESHOLD_ECDSA_REQUEST_TYPES.has(value) || THRESHOLD_ED25519_REQUEST_TYPES.has(value));
 }
 function resolveCanonicalWalletSignerErrorCode(args) {
 	const fromMessage = isWalletSignerBoundaryRequestType(args.requestType) ? inferCanonicalCodeFromMessage({

package/dist/esm/sdk/{challengeDelivery-Dd0586fo.js → challengeDelivery-DZtopOAG.js}

@@ -1,5 +1,5 @@
 import { y as requireTrimmedString } from "./validation-gat4LEKm.js";
-import { _t as parseSdkEcdsaDerivationSigningRootId, vt as parseSdkEcdsaDerivationSigningRootVersion, yt as parseSdkEcdsaDerivationThresholdKeyId } from "./ecdsaPresignLifecycle-BFOTNYCK.js";
+import { bt as parseSdkEcdsaDerivationSigningRootVersion, xt as parseSdkEcdsaDerivationThresholdKeyId, yt as parseSdkEcdsaDerivationSigningRootId } from "./ecdsaPresignLifecycle-Bfx2AQKb.js";
 //#region src/core/signingEngine/session/identity/emailOtpEcdsaDerivationIdentity.ts
 function requiredEmailOtpDerivationString(value, field) {
 	const normalized = String(value ?? "").trim();

package/dist/{public/sdk/configHelpers-vAQCzUD0.js → esm/sdk/configHelpers-D1EqxVxg.js}

@@ -1,5 +1,5 @@
 import { B as normalizeTrimmedString } from "./domainIds-lcrFg6Sa.js";
-import { p as coerceThemeMode, s as parsePositiveSessionUses } from "./sessionPolicy-CHiilOAB.js";
+import { p as coerceThemeMode, s as parsePositiveSessionUses } from "./sessionPolicy-DO-MkL65.js";
 import { a as isNearChainNetwork, i as isEvmChainNetwork, o as isSeamsChainNetwork, s as isTempoChainNetwork } from "./chains-BMh3btVo.js";
 //#region src/core/config/configHelpers.ts
 function resolveIntegerInRange(args) {

package/dist/{public/sdk/defaultConfigs-B3c16M_8.js → esm/sdk/defaultConfigs-D_33pPT9.js}

@@ -1,8 +1,8 @@
 import { B as normalizeTrimmedString } from "./domainIds-lcrFg6Sa.js";
-import { n as DEFAULT_THRESHOLD_SESSION_TTL_MS } from "./sessionPolicy-CHiilOAB.js";
-import { n as UserVerificationPolicy } from "./ecdsaPresignLifecycle-BFOTNYCK.js";
+import { n as DEFAULT_THRESHOLD_SESSION_TTL_MS } from "./sessionPolicy-DO-MkL65.js";
+import { n as UserVerificationPolicy } from "./ecdsaPresignLifecycle-Bfx2AQKb.js";
 import { a as SIGNING_SESSION_SEAL_ALG, o as SIGNING_SESSION_SEAL_GROUP_ID } from "./signingSessionSeal-Cu-GHm6y.js";
-import { a as resolveIntegerInRange, i as resolveChains, n as resolveAppearanceTheme, o as resolveThemePalette, r as resolveBoolean, t as copyEcdsaSignerProvisioningDefaults } from "./configHelpers-vAQCzUD0.js";
+import { a as resolveIntegerInRange, i as resolveChains, n as resolveAppearanceTheme, o as resolveThemePalette, r as resolveBoolean, t as copyEcdsaSignerProvisioningDefaults } from "./configHelpers-D1EqxVxg.js";
 //#region src/core/browser/walletIframe/hostVariant.ts
 function normalizeWalletHostVariant(value) {
 	const normalized = String(value || "").trim().toLowerCase();

package/dist/esm/sdk/{display-KdIL0ff7.js → display-P4nQF-yc.js}

@@ -1,5 +1,5 @@
 import { i as normalizeHexData } from "./bytes-qKxKn4gg.js";
-import { f as formatCompactGas, h as selectorFromHexData, m as resolveFunctionDisplayName, p as formatCalldataForDisplay } from "./signingFlow-rZfPegH9.js";
+import { f as formatCompactGas, h as selectorFromHexData, m as resolveFunctionDisplayName, p as formatCalldataForDisplay } from "./signingFlow-SZ8t_lxv.js";
 //#region src/core/signingEngine/chains/tempo/display.ts
 function toSafeJson(value) {
 	try {