@seams/wallet 0.7.1 → 0.7.3

package/dist/esm/sdk/{nearEd25519YaoMaterialActivation-DPb0s3hQ.js → nearEd25519YaoMaterialActivation-B5GecIvq.js}

@@ -2,21 +2,21 @@ import { D as parseWalletAuthorityId, M as parseWebAuthnRpId, O as parseWalletId
 import { D as parseImplicitNearAccountId, O as parseNamedNearAccountId, d as isPlainObject, k as parseNearAccountId, u as isObject } from "./validation-gat4LEKm.js";
 import { t as errorMessage } from "./errors-93h9uAW9.js";
 import { r as base64UrlDecode } from "./base64-Clm8C-e9.js";
-import { h as normalizeRuntimePolicyScope, o as normalizeThresholdRuntimePolicyScope } from "./sessionPolicy-CHiilOAB.js";
-import { $ as parseWalletAuthAuthority, Ct as routerAbMpcMaterialActivationRefFromWire, D as parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, O as parseRouterAbEcdsaRegistrationRequestFactsV1, Ot as parseActiveWalletSessionV1, T as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, X as isPasskeyWalletAuthAuthority, _ as parseRouterAbEcdsaDerivationNormalSigningStateV1, c as ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, j as requireRouterAbEcdsaDerivationNormalSigningStateV1, k as parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, kt as parseWalletSessionOperationCredentialV1, v as parseRouterAbEcdsaDerivationPublicCapabilityV1 } from "./ecdsaPresignLifecycle-BFOTNYCK.js";
+import { h as normalizeRuntimePolicyScope, o as normalizeThresholdRuntimePolicyScope } from "./sessionPolicy-DO-MkL65.js";
+import { At as parseActiveWalletSessionV1, D as parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, O as parseRouterAbEcdsaRegistrationRequestFactsV1, Q as isPasskeyWalletAuthAuthority, T as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, Tt as routerAbMpcMaterialActivationRefFromWire, _ as parseRouterAbEcdsaDerivationNormalSigningStateV1, c as ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, j as requireRouterAbEcdsaDerivationNormalSigningStateV1, jt as parseWalletSessionOperationCredentialV1, k as parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, tt as parseWalletAuthAuthority, v as parseRouterAbEcdsaDerivationPublicCapabilityV1 } from "./ecdsaPresignLifecycle-Bfx2AQKb.js";
 import { d as parseMpcWalletSigningQuotaId, g as parseWalletSessionMintId, h as parseWalletSessionId, m as parseWalletSessionAuthorizationId } from "./capabilityKinds-hvYqa6S_.js";
 import { f as alphabetizeStringify } from "./chains-BMh3btVo.js";
 import { o as sha256Utf8DigestB64u, r as parseDigestB64u } from "./canonicalPrimitives-BTHWz80v.js";
 import { a as thresholdEcdsaChainTargetFromRequest, c as toWalletId, l as walletIdFromWalletProfile, o as thresholdEcdsaChainTargetKey, s as thresholdEcdsaChainTargetsEqual } from "./ecdsaChainTarget-Bl-JWyuw.js";
 import { n as SIGNER_AUTH_METHODS, r as SIGNER_KINDS } from "./signerDomain-IEAVrOrc.js";
-import { O as parseThresholdEcdsaKeyHandle, S as toThresholdEcdsaPublicKeyB64u, a as buildEvmFamilyEcdsaWalletKey, fn as parseWalletAddAuthMethodRegistrationOptions, g as resolveThresholdEcdsaKeyIdFromRecord, h as parseThresholdSigningRootBinding, rt as parseWebAuthnAuthenticatorDeviceInfo, sn as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, y as toEvmFamilyEcdsaKeyHandle } from "./evmFamilyEcdsaIdentity-Co5XDcEA.js";
-import { u as parseWalletAuthorityV1, w as parseWalletAuthMethodRecordV2 } from "./walletAuthority-BQBxgUBn.js";
+import { O as parseThresholdEcdsaKeyHandle, S as toThresholdEcdsaPublicKeyB64u, a as buildEvmFamilyEcdsaWalletKey, g as resolveThresholdEcdsaKeyIdFromRecord, h as parseThresholdSigningRootBinding, ln as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, mn as parseWalletAddAuthMethodRegistrationOptions, rt as parseWebAuthnAuthenticatorDeviceInfo, y as toEvmFamilyEcdsaKeyHandle } from "./evmFamilyEcdsaIdentity-CqGafQsI.js";
+import { u as parseWalletAuthorityV1, w as parseWalletAuthMethodRecordV2 } from "./walletAuthority-DD9T25F6.js";
 import { a as parseNearEd25519SigningKeyId, l as normalizeRegistrationAuthMethodInput, o as walletIdFromString } from "./registrationIds-DLSdEKSv.js";
-import { d as parsePasskeyCustodyEnvelopeRecord, t as parseWalletCustodyRegistrationOutcome } from "./passkey-custody-Bk1jAknm.js";
+import { d as parsePasskeyCustodyEnvelopeRecord, t as parseWalletCustodyRegistrationOutcome } from "./passkey-custody-UUHbC0pk.js";
 import { l as parseRouterAbEd25519NormalSigningState, u as requireRouterAbEd25519NormalSigningState } from "./signingSessionSeal-Cu-GHm6y.js";
-import { o as normalizeRegistrationSignerPlan, u as registrationSignerSetSelectionFromPlan } from "./registrationSignerPlan-CAikVZZQ.js";
-import { a as parseAddAuthMethodIntentV1, c as sameAddSignerIntentV1, i as computeRegistrationIntentDigestB64u, n as addSignerIntentGrantFromString, o as parseAddSignerIntentV1, s as sameAddAuthMethodIntentV1, t as addAuthMethodIntentGrantFromString } from "./registrationIntent-D0PxwEY4.js";
-import { a as toEcdsaDerivationThresholdKeyId } from "./challengeDelivery-Dd0586fo.js";
+import { o as normalizeRegistrationSignerPlan, u as registrationSignerSetSelectionFromPlan } from "./registrationSignerPlan-DhV8VAob.js";
+import { a as parseAddAuthMethodIntentV1, c as sameAddSignerIntentV1, i as computeRegistrationIntentDigestB64u, n as addSignerIntentGrantFromString, o as parseAddSignerIntentV1, s as sameAddAuthMethodIntentV1, t as addAuthMethodIntentGrantFromString } from "./registrationIntent-4zwk16zQ.js";
+import { a as toEcdsaDerivationThresholdKeyId } from "./challengeDelivery-DZtopOAG.js";
 import { n as buildRelayerJsonPostRequestInit, r as normalizeRelayerBaseUrl, t as buildBearerAuthorizationHeader } from "./relayerHttp-VC8Holz1.js";
 //#region ../shared-ts/src/utils/registrationEstablishedSession.ts
 function parseRegistrationEstablishedSessionResultV2(raw) {
@@ -24,7 +24,7 @@ function parseRegistrationEstablishedSessionResultV2(raw) {
 	if (!result || !("kind" in result) || typeof result.kind !== "string") return null;
 	switch (result.kind) {
 		case "issued": {
-			if (!hasExactKeys(result, ["kind", "session"]) || !("session" in result)) return null;
+			if (!hasExactKeys$1(result, ["kind", "session"]) || !("session" in result)) return null;
 			const session = parseRegistrationEstablishedSessionV2(result.session);
 			return session === null ? null : {
 				kind: "issued",
@@ -32,7 +32,7 @@ function parseRegistrationEstablishedSessionResultV2(raw) {
 			};
 		}
 		case "already_committed": {
-			if (!hasExactKeys(result, [
+			if (!hasExactKeys$1(result, [
 				"kind",
 				"session",
 				"next"
@@ -51,7 +51,7 @@ function parseRegistrationEstablishedSessionResultV2(raw) {
 function parseRegistrationEstablishedSessionV2(raw) {
 	try {
 		const record = inspectRawObject(raw);
-		if (!record || !hasExactKeys(record, [
+		if (!record || !hasExactKeys$1(record, [
 			"kind",
 			"walletId",
 			"authorizationId",
@@ -110,7 +110,7 @@ function hasUnexpectedRegistrationSigningFamily(walletSession, ...allowedFamilie
 function parseRegistrationEstablishedSessionProjectionV2(raw) {
 	try {
 		const record = inspectRawObject(raw);
-		if (!record || !hasExactKeys(record, [
+		if (!record || !hasExactKeys$1(record, [
 			"kind",
 			"walletId",
 			"authorizationId",
@@ -156,7 +156,7 @@ function parseRegistrationEstablishedSessionProjectionTokensV2(raw) {
 	if (!record || !("kind" in record) || typeof record.kind !== "string") return null;
 	switch (record.kind) {
 		case "evm_family_ecdsa": {
-			if (!hasExactKeys(record, ["kind", "ecdsa"]) || !("ecdsa" in record)) return null;
+			if (!hasExactKeys$1(record, ["kind", "ecdsa"]) || !("ecdsa" in record)) return null;
 			const ecdsa = parseRegistrationEstablishedEcdsaSessionProjectionV2(record.ecdsa);
 			return ecdsa === null ? null : {
 				kind: "evm_family_ecdsa",
@@ -164,7 +164,7 @@ function parseRegistrationEstablishedSessionProjectionTokensV2(raw) {
 			};
 		}
 		case "near_ed25519": {
-			if (!hasExactKeys(record, ["kind", "ed25519"]) || !("ed25519" in record)) return null;
+			if (!hasExactKeys$1(record, ["kind", "ed25519"]) || !("ed25519" in record)) return null;
 			const ed25519 = parseRegistrationEstablishedEd25519SessionProjectionV2(record.ed25519);
 			return ed25519 === null ? null : {
 				kind: "near_ed25519",
@@ -172,7 +172,7 @@ function parseRegistrationEstablishedSessionProjectionTokensV2(raw) {
 			};
 		}
 		case "near_ed25519_and_evm_family_ecdsa": {
-			if (!hasExactKeys(record, [
+			if (!hasExactKeys$1(record, [
 				"kind",
 				"ecdsa",
 				"ed25519"
@@ -190,7 +190,7 @@ function parseRegistrationEstablishedSessionProjectionTokensV2(raw) {
 }
 function parseRegistrationEstablishedEcdsaSessionProjectionV2(raw) {
 	const record = inspectRawObject(raw);
-	if (!record || !hasExactKeys(record, [
+	if (!record || !hasExactKeys$1(record, [
 		"sessionKind",
 		"thresholdSessionId",
 		"keyHandle",
@@ -223,7 +223,7 @@ function parseRegistrationEstablishedEcdsaSessionProjectionV2(raw) {
 }
 function parseRegistrationEstablishedEd25519SessionProjectionV2(raw) {
 	const record = inspectRawObject(raw);
-	if (!record || !hasExactKeys(record, [
+	if (!record || !hasExactKeys$1(record, [
 		"sessionKind",
 		"thresholdSessionId",
 		"nearAccountId",
@@ -257,7 +257,7 @@ function parseRegistrationEstablishedEd25519SessionProjectionV2(raw) {
 }
 function parseRuntimePolicyScopeProjection(raw) {
 	const record = inspectRawObject(raw);
-	if (!record || !hasExactKeys(record, [
+	if (!record || !hasExactKeys$1(record, [
 		"orgId",
 		"projectId",
 		"envId",
@@ -276,7 +276,7 @@ function parseNonNegativeSafeInteger(raw) {
 function inspectRawObject(value) {
 	return value !== null && typeof value === "object" && !Array.isArray(value) ? value : null;
 }
-function hasExactKeys(record, expectedKeys) {
+function hasExactKeys$1(record, expectedKeys) {
 	return Object.keys(record).length === expectedKeys.length && expectedKeys.every((key) => Object.prototype.hasOwnProperty.call(record, key));
 }
 //#endregion
@@ -3742,6 +3742,20 @@ async function computeWalletCustodyAdminChallengeDigest(input) {
 	})}`);
 }
 //#endregion
+//#region ../shared-ts/src/utils/exactKeys.ts
+/**
+* True when `value` is a non-array object whose own enumerable string keys are exactly `keys`.
+*
+* A key whose value is `undefined` still counts as present. Symbol, non-enumerable and inherited
+* keys are not counted, and the prototype is not checked. A list that repeats a key never matches.
+* Kept apart from validation.ts, which the wallet iframe's boot path loads.
+*/
+function hasExactKeys(value, keys) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+	const actual = Object.keys(value);
+	return actual.length === keys.length && actual.every((key) => keys.includes(key));
+}
+//#endregion
 //#region ../shared-ts/src/authorization/walletSessionIssuance.ts
 const COMMITTED_IDENTITY_FIELDS = [
 	"kind",
@@ -3779,12 +3793,8 @@ const UNLOCK_FLAT_RESPONSE_FIELDS = [
 	"unlocked",
 	"unlockBackend"
 ];
-function hasOnlyFields(record, fields) {
-	const actual = Object.keys(record);
-	return actual.length === new Set(fields).size && actual.every((field) => fields.includes(field));
-}
 function parseCommittedIdentity(value) {
-	if (!isPlainObject(value) || !hasOnlyFields(value, COMMITTED_IDENTITY_FIELDS)) return null;
+	if (!isPlainObject(value) || !hasExactKeys(value, COMMITTED_IDENTITY_FIELDS)) return null;
 	if (value.kind !== "already_committed_wallet_session_v1") return null;
 	const walletId = parseWalletId(value.walletId);
 	const authorityId = parseWalletAuthorityId(value.authorityId);
@@ -3815,8 +3825,8 @@ function parseResponseEnvelope(value) {
 	};
 }
 function parseFlatCommittedIdentity(value) {
-	if (!hasOnlyFields(value, FLAT_RESPONSE_FIELDS) && !hasOnlyFields(value, UNLOCK_FLAT_RESPONSE_FIELDS)) return null;
-	if (hasOnlyFields(value, UNLOCK_FLAT_RESPONSE_FIELDS) && (value.unlocked !== false || value.unlockBackend !== "passkey" && value.unlockBackend !== "email_otp")) return null;
+	if (!hasExactKeys(value, FLAT_RESPONSE_FIELDS) && !hasExactKeys(value, UNLOCK_FLAT_RESPONSE_FIELDS)) return null;
+	if (hasExactKeys(value, UNLOCK_FLAT_RESPONSE_FIELDS) && (value.unlocked !== false || value.unlockBackend !== "passkey" && value.unlockBackend !== "email_otp")) return null;
 	if (value.kind !== "already_committed") return null;
 	return parseCommittedIdentity({
 		kind: "already_committed_wallet_session_v1",
@@ -3842,7 +3852,7 @@ function parseWalletSessionAlreadyCommittedResponseV1(value) {
 	if (!isPlainObject(value)) return null;
 	const envelope = parseResponseEnvelope(value);
 	if (!envelope) return null;
-	if (!hasOnlyFields(value, NESTED_RESPONSE_FIELDS)) return null;
+	if (!hasExactKeys(value, NESTED_RESPONSE_FIELDS)) return null;
 	const committed = parseCommittedIdentity(value.committed);
 	return committed ? buildAlreadyCommittedResponse(envelope, committed) : null;
 }
@@ -4005,4 +4015,4 @@ function resolveNearEd25519YaoCapabilityHydrationV1(input) {
 	throw new Error("Unsupported Near Ed25519 unlock-source observation");
 }
 //#endregion
-export { parseProfileContinuityEcdsaWarmKey as A, respondWalletAddSignerEcdsa as C, startWalletAddAuthMethod as D, setupWalletRegistration as E, startWalletAddSigner as O, requestAddAuthMethodEmailOtpChallenge as S, revokeWalletAuthMethod as T, finalizeWalletAddAuthMethod as _, buildRehydrateMaterialActivationHydrationPlan as a, isEmailOtpWalletRegistrationFinalizeResponse as b, parseWalletUnlockAlreadyCommittedResponseV1 as c, activateWalletRegistration as d, completeWalletRegistrationNearProvisioning as f, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn as g, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential as h, buildBlockedMpcCapabilityHydrationPlan as i, activateRouterAbEcdsaPostRegistrationSession as k, computeWalletCustodyAdminChallengeDigest as l, createWalletAddSignerIntent as m, nearEd25519YaoRuntimeRef as n, buildUseLiveRuntimeHydrationPlan as o, createWalletAddAuthMethodIntent as p, resolveNearEd25519YaoCapabilityHydrationV1 as r, parseWalletSessionAlreadyCommittedResponseV1 as s, nearEd25519YaoMaterialActivationFromMetadata as t, activateWalletAddSignerEcdsa as u, finalizeWalletAddSigner as v, respondWalletRegistration as w, parseWalletRegistrationEcdsaDerivationRespond as x, fundImplicitNearAccountForTesting as y };
+export { activateRouterAbEcdsaPostRegistrationSession as A, requestAddAuthMethodEmailOtpChallenge as C, setupWalletRegistration as D, revokeWalletAuthMethod as E, startWalletAddAuthMethod as O, parseWalletRegistrationEcdsaDerivationRespond as S, respondWalletRegistration as T, fetchWalletEcdsaKeyFactsInventoryWithWebAuthn as _, buildRehydrateMaterialActivationHydrationPlan as a, fundImplicitNearAccountForTesting as b, parseWalletUnlockAlreadyCommittedResponseV1 as c, activateWalletAddSignerEcdsa as d, activateWalletRegistration as f, fetchWalletEcdsaKeyFactsInventoryWithOperationCredential as g, createWalletAddSignerIntent as h, buildBlockedMpcCapabilityHydrationPlan as i, parseProfileContinuityEcdsaWarmKey as j, startWalletAddSigner as k, hasExactKeys as l, createWalletAddAuthMethodIntent as m, nearEd25519YaoRuntimeRef as n, buildUseLiveRuntimeHydrationPlan as o, completeWalletRegistrationNearProvisioning as p, resolveNearEd25519YaoCapabilityHydrationV1 as r, parseWalletSessionAlreadyCommittedResponseV1 as s, nearEd25519YaoMaterialActivationFromMetadata as t, computeWalletCustodyAdminChallengeDigest as u, finalizeWalletAddAuthMethod as v, respondWalletAddSignerEcdsa as w, isEmailOtpWalletRegistrationFinalizeResponse as x, finalizeWalletAddSigner as y };

package/dist/esm/sdk/{nearEd25519YaoSigningPreparation-BeD-SmbK.js → nearEd25519YaoSigningPreparation-CdOT5RuC.js}

@@ -1,9 +1,9 @@
 import { r as mpcMaterialActivationRefsEqual } from "./domainIds-lcrFg6Sa.js";
-import { Dt as activeWalletSessionV1RecordsEqual, J as emailOtpWalletAuthAuthorityProviderUserId, K as emailOtpWalletAuthAuthorityEmailHashHex, W as buildEmailOtpWalletAuthAuthority, nt as walletAuthAuthorityRef, q as emailOtpWalletAuthAuthorityProvider } from "./ecdsaPresignLifecycle-BFOTNYCK.js";
-import { y as toEvmFamilyEcdsaKeyHandle } from "./evmFamilyEcdsaIdentity-Co5XDcEA.js";
+import { J as emailOtpWalletAuthAuthorityEmailHashHex, K as buildEmailOtpWalletAuthAuthority, X as emailOtpWalletAuthAuthorityProviderUserId, Y as emailOtpWalletAuthAuthorityProvider, it as walletAuthAuthorityRef, kt as activeWalletSessionV1RecordsEqual } from "./ecdsaPresignLifecycle-Bfx2AQKb.js";
+import { y as toEvmFamilyEcdsaKeyHandle } from "./evmFamilyEcdsaIdentity-CqGafQsI.js";
 import { t as parseSignerSlot } from "./signerSlot-_ovonwVX.js";
 import { c as signingLaneAuthMethod, r as SigningSessionIds } from "./types-Dx9fczU7.js";
-import { a as exactEd25519SigningLaneIdentity, f as nearEd25519SignerBindingFromBoundaryFields, n as exactEcdsaSigningLaneIdentity, t as buildEvmFamilyEcdsaSignerBinding } from "./exactSigningLaneIdentity-DQeqPMST.js";
+import { a as exactEd25519SigningLaneIdentity, f as nearEd25519SignerBindingFromBoundaryFields, n as exactEcdsaSigningLaneIdentity, t as buildEvmFamilyEcdsaSignerBinding } from "./exactSigningLaneIdentity-m6uTXV_A.js";
 //#region src/core/signingEngine/session/identity/laneIdentity.ts
 function emailOtpAuthContextProviderUserId(context) {
 	return String(emailOtpWalletAuthAuthorityProviderUserId(context.authority));

package/dist/esm/sdk/{passkey-custody-Bk1jAknm.js → passkey-custody-UUHbC0pk.js}

@@ -1,6 +1,6 @@
 import { M as parseWebAuthnRpId, O as parseWalletId, T as parseWalletAuthMethodId, b as parseSigningLaneId, c as parseLaneShareEpoch, d as parseLinkedDeviceId, j as parseWebAuthnCredentialIdB64u, k as parseWalletKeyId, l as parseLinkDeviceSessionId, u as parseLinkedDeviceEnrollmentId, v as parsePasskeyEnvelopeId, x as parseThresholdEcdsaSessionId } from "./domainIds-lcrFg6Sa.js";
 import { _ as requireRecord } from "./validation-gat4LEKm.js";
-import { C as parseEnvelopeRevision, E as parseUnixMs, P as rejectUnknownFields, S as parseEnvelopeNonceB64u, T as parseSecp256k1CompressedPublicKeyB64u, b as parseEd25519PublicKeyB64u, v as requireEvmFamilySigningKeySlotId, x as parseEnvelopeCiphertextB64u, y as parseDigestField } from "./sessionPolicy-CHiilOAB.js";
+import { C as parseEnvelopeNonceB64u, D as parseUnixMs, E as parseSecp256k1CompressedPublicKeyB64u, I as rejectUnknownFields, S as parseEnvelopeCiphertextB64u, b as parseDigestField, w as parseEnvelopeRevision, x as parseEd25519PublicKeyB64u, y as requireEvmFamilySigningKeySlotId } from "./sessionPolicy-DO-MkL65.js";
 import { a as parseNearEd25519SigningKeyId } from "./registrationIds-DLSdEKSv.js";
 //#region ../shared-ts/src/passkey-custody/custodySecretBinding.ts
 /** The only derivation scheme owner custody supports. */

package/dist/esm/sdk/{pendingWalletRecoveryCodeBackup-DLzBb3WQ.js → pendingWalletRecoveryCodeBackup-BWluQMbt.js}

@@ -1,4 +1,4 @@
-import { h as seamsWalletDB, p as buildEmailOtpRecoveryCodeSet, v as SEAMS_WALLET_STORES } from "./wallet-recovery-Bz9qKgaL.js";
+import { h as seamsWalletDB, p as buildEmailOtpRecoveryCodeSet, v as SEAMS_WALLET_STORES } from "./wallet-recovery-BX61-79p.js";
 import { t as createWalletIframeSurfaceMeasurementReporter } from "./surface-measurement-reporter-CSTyRsMa.js";
 //#region src/SeamsWeb/operations/recovery/walletRecoveryCodeBackup.ts
 const CANCELLED_MESSAGE = "Recovery-code backup was cancelled before acknowledgement";

package/dist/esm/sdk/{recovery-entrypoint-DW2tGyMs.js → recovery-entrypoint-C3fydnRC.js}

@@ -3,23 +3,23 @@ import "./validation-gat4LEKm.js";
 import "./errors-93h9uAW9.js";
 import { i as base64UrlEncode } from "./base64-Clm8C-e9.js";
 import { r as secureRandomId } from "./secureRandomId-BORsmdS4.js";
-import "./sessionPolicy-CHiilOAB.js";
-import "./ecdsaPresignLifecycle-BFOTNYCK.js";
+import "./sessionPolicy-DO-MkL65.js";
+import "./ecdsaPresignLifecycle-Bfx2AQKb.js";
 import "./capabilityKinds-hvYqa6S_.js";
 import { h as sha256HexUtf8, p as sha256Bytes } from "./chains-BMh3btVo.js";
 import "./signerDomain-IEAVrOrc.js";
-import { f as parseRecoveryCodeReservationId, m as decodeEmailOtpRecoveryKey } from "./wallet-recovery-Bz9qKgaL.js";
-import "./evmFamilyEcdsaIdentity-Co5XDcEA.js";
-import "./walletAuthority-BQBxgUBn.js";
+import { f as parseRecoveryCodeReservationId, m as decodeEmailOtpRecoveryKey } from "./wallet-recovery-BX61-79p.js";
+import "./evmFamilyEcdsaIdentity-CqGafQsI.js";
+import "./walletAuthority-DD9T25F6.js";
 import "./encoders-D8d07vpx.js";
 import "./registrationIds-DLSdEKSv.js";
-import { a as buildEmailOtpEnvelopeFactor, c as buildPasskeyEnvelopeFactor } from "./passkey-custody-Bk1jAknm.js";
-import { u as IndexedDBManager } from "./walletCustodyEcdsaContinuity-Hn4ORIbf.js";
+import { a as buildEmailOtpEnvelopeFactor, c as buildPasskeyEnvelopeFactor } from "./passkey-custody-UUHbC0pk.js";
+import { u as IndexedDBManager } from "./walletCustodyEcdsaContinuity-CF4bv9OI.js";
 import "./keccak-DUL3d8SF.js";
 import "./signingSessionSeal-Cu-GHm6y.js";
-import "./registrationSignerPlan-CAikVZZQ.js";
-import "./registrationIntent-D0PxwEY4.js";
-import { a as finalizeWalletRecoveryGoogleEmailOtp, c as isDurablePasskeyPayload, d as prepareWalletRecoveryWithCode, l as finalizeWalletRecovery, n as promoteWalletRecoveryCommit, o as verifyWalletRecoveryEmailOtp, r as restoreAndPublishWalletRecoveryCommit, s as verifyWalletRecoveryGoogle, t as createAwaitingWalletRecoveryCommit, u as buildWalletRecoveryCeremonyCustodyJson } from "./walletRecoveryCommit-sjGNTHUj.js";
+import "./registrationSignerPlan-DhV8VAob.js";
+import "./registrationIntent-4zwk16zQ.js";
+import { a as finalizeWalletRecoveryGoogleEmailOtp, c as isDurablePasskeyPayload, d as prepareWalletRecoveryWithCode, l as finalizeWalletRecovery, n as promoteWalletRecoveryCommit, o as verifyWalletRecoveryEmailOtp, r as restoreAndPublishWalletRecoveryCommit, s as verifyWalletRecoveryGoogle, t as createAwaitingWalletRecoveryCommit, u as buildWalletRecoveryCeremonyCustodyJson } from "./walletRecoveryCommit-AI1AtIRP.js";
 //#region src/SeamsWeb/operations/recovery/walletRecovery.ts
 const RECOVERY_PREPARE_RETRY_TTL_MS = 300 * 1e3;
 function assertNever(value) {

package/dist/esm/sdk/{registration-BZDzDv91.js → registration-Ct_7LdGf.js}

@@ -4,41 +4,41 @@ import { C as deriveImplicitNearAccountIdFromEd25519PublicKey, M as base58Encode
 import { n as getUserFriendlyErrorMessage, t as errorMessage } from "./errors-93h9uAW9.js";
 import { i as base64UrlEncode, r as base64UrlDecode } from "./base64-Clm8C-e9.js";
 import { r as secureRandomId } from "./secureRandomId-BORsmdS4.js";
-import { E as parseUnixMs, P as rejectUnknownFields, d as normalizeThresholdEd25519ParticipantIds, g as signingRootScopeFromRuntimePolicyScope, h as normalizeRuntimePolicyScope, m as deriveSigningRootId, o as normalizeThresholdRuntimePolicyScope, t as DEFAULT_THRESHOLD_SESSION_POLICY, v as requireEvmFamilySigningKeySlotId } from "./sessionPolicy-CHiilOAB.js";
-import { A as parseRouterAbEcdsaVerifiedClientActivationFactsV1, At as walletSessionPreservesCapabilities, C as parseRouterAbEcdsaPostRegistrationSessionActivationPolicyV1, Ct as routerAbMpcMaterialActivationRefFromWire, E as parseRouterAbEcdsaRegistrationActivationReceiptV1, G as buildPasskeyWalletAuthAuthority, H as sameRouterAbEcdsaVerifiedClientActivationFactsV1, Ot as parseActiveWalletSessionV1, Q as parsePasskeyWalletAuthAuthority, R as sameRouterAbEcdsaDerivationNormalSigningStateV1, T as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, Tt as sameRouterAbMpcMaterialActivationRef, V as sameRouterAbEcdsaRegistrationActivationReceiptV1, W as buildEmailOtpWalletAuthAuthority, Y as isEmailOtpWalletAuthAuthority, Z as parseEmailOtpWalletAuthAuthority, _ as parseRouterAbEcdsaDerivationNormalSigningStateV1, _t as parseSdkEcdsaDerivationSigningRootId, et as parseWalletAuthAuthorityRef, kt as parseWalletSessionOperationCredentialV1, nt as walletAuthAuthorityRef, p as parseRouterAbEcdsaCredentialFreeSessionActivationResponseV1, r as cloneAuthenticatorOptions, rt as parseCanonicalEcdsaServerActivationRequest, v as parseRouterAbEcdsaDerivationPublicCapabilityV1, vt as parseSdkEcdsaDerivationSigningRootVersion, wt as routerAbMpcMaterialActivationRefToWire, z as sameRouterAbEcdsaDerivationPublicCapabilityV1 } from "./ecdsaPresignLifecycle-BFOTNYCK.js";
+import { D as parseUnixMs, I as rejectUnknownFields, _ as signingRootScopeFromRuntimePolicyScope, d as normalizeThresholdEd25519ParticipantIds, g as sameRuntimePolicyScope$1, h as normalizeRuntimePolicyScope, m as deriveSigningRootId, o as normalizeThresholdRuntimePolicyScope, t as DEFAULT_THRESHOLD_SESSION_POLICY, y as requireEvmFamilySigningKeySlotId } from "./sessionPolicy-DO-MkL65.js";
+import { $ as parseEmailOtpWalletAuthAuthority, A as parseRouterAbEcdsaVerifiedClientActivationFactsV1, At as parseActiveWalletSessionV1, B as sameRouterAbEcdsaDerivationNormalSigningStateV1, C as parseRouterAbEcdsaPostRegistrationSessionActivationPolicyV1, Dt as sameRouterAbMpcMaterialActivationRef, E as parseRouterAbEcdsaRegistrationActivationReceiptV1, Et as routerAbMpcMaterialActivationRefToWire, K as buildEmailOtpWalletAuthAuthority, Mt as walletSessionPreservesCapabilities, T as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, Tt as routerAbMpcMaterialActivationRefFromWire, U as sameRouterAbEcdsaRegistrationActivationReceiptV1, V as sameRouterAbEcdsaDerivationPublicCapabilityV1, W as sameRouterAbEcdsaVerifiedClientActivationFactsV1, Z as isEmailOtpWalletAuthAuthority, _ as parseRouterAbEcdsaDerivationNormalSigningStateV1, at as parseCanonicalEcdsaServerActivationRequest, bt as parseSdkEcdsaDerivationSigningRootVersion, et as parsePasskeyWalletAuthAuthority, it as walletAuthAuthorityRef, jt as parseWalletSessionOperationCredentialV1, nt as parseWalletAuthAuthorityRef, p as parseRouterAbEcdsaCredentialFreeSessionActivationResponseV1, q as buildPasskeyWalletAuthAuthority, r as cloneAuthenticatorOptions, v as parseRouterAbEcdsaDerivationPublicCapabilityV1, yt as parseSdkEcdsaDerivationSigningRootId } from "./ecdsaPresignLifecycle-Bfx2AQKb.js";
 import { d as parseMpcWalletSigningQuotaId, g as parseWalletSessionMintId, h as parseWalletSessionId, m as parseWalletSessionAuthorizationId } from "./capabilityKinds-hvYqa6S_.js";
 import { f as alphabetizeStringify, h as sha256HexUtf8, m as sha256BytesUtf8, p as sha256Bytes, t as chainFamilyFromNetwork } from "./chains-BMh3btVo.js";
 import { i as parseIsoTimestamp, n as parseCorrelationId, r as parseDigestB64u } from "./canonicalPrimitives-BTHWz80v.js";
 import { a as thresholdEcdsaChainTargetFromRequest, c as toWalletId, i as thresholdEcdsaChainTargetFromConfig, o as thresholdEcdsaChainTargetKey, r as thresholdEcdsaChainTargetFromChainFamily, s as thresholdEcdsaChainTargetsEqual } from "./ecdsaChainTarget-Bl-JWyuw.js";
 import { c as WALLET_EMAIL_OTP_ACTIONS, d as WALLET_EMAIL_OTP_REGISTRATION_OPERATION, n as SIGNER_AUTH_METHODS, p as WALLET_EMAIL_OTP_UNLOCK_OPERATION, s as EMAIL_OTP_CHANNEL } from "./signerDomain-IEAVrOrc.js";
-import { _ as SEAMS_WALLET_INDEXES, c as zeroizeIssuedWalletRecoveryCodes, h as seamsWalletDB, o as deriveRecoveryCodeLocatorV1FromBytes, s as issueWalletRecoveryCodes, v as SEAMS_WALLET_STORES, y as unwrap } from "./wallet-recovery-Bz9qKgaL.js";
-import { L as buildEnvelopeAAD, M as WALLET_CUSTODY_ED25519_MATERIAL_KEY_KIND, d as prepareWalletEd25519RegistrationProjectionPublication, f as prepareWalletEd25519RegistrationPublication, p as prepareWalletEmailOtpEd25519RegistrationPublication, u as prepareWalletEcdsaRegistrationPublication } from "./accountLifecycle-BAGG_rbk.js";
+import { _ as SEAMS_WALLET_INDEXES, c as zeroizeIssuedWalletRecoveryCodes, h as seamsWalletDB, o as deriveRecoveryCodeLocatorV1FromBytes, s as issueWalletRecoveryCodes, v as SEAMS_WALLET_STORES, y as unwrap } from "./wallet-recovery-BX61-79p.js";
+import { L as buildEnvelopeAAD, M as WALLET_CUSTODY_ED25519_MATERIAL_KEY_KIND, d as prepareWalletEd25519RegistrationProjectionPublication, f as prepareWalletEd25519RegistrationPublication, p as prepareWalletEmailOtpEd25519RegistrationPublication, u as prepareWalletEcdsaRegistrationPublication } from "./accountLifecycle-zthG08aC.js";
 import { t as toAccountId } from "./accountIds-DhIPGOSN.js";
-import { Gt as ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, It as ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, Lt as ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1, Rt as ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, Ut as ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1, Vt as ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1, Xt as parseRouterAbEd25519YaoExportExecuteRequestV1, Yt as parseRouterAbEd25519YaoExportAdmissionReceiptV1, Zt as parseRouterAbEd25519YaoExportResultV1, b as toParticipantId, cn as parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1, in as parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1, sn as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, un as sameRouterAbEd25519YaoRegistrationAdmissionRequestV1, x as toRpId } from "./evmFamilyEcdsaIdentity-Co5XDcEA.js";
-import { u as parseWalletAuthorityV1, w as parseWalletAuthMethodRecordV2 } from "./walletAuthority-BQBxgUBn.js";
+import { $t as parseRouterAbEd25519YaoExportResultV1, Bt as ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, Gt as ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1, Qt as parseRouterAbEd25519YaoExportExecuteRequestV1, Rt as ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, Ut as ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1, Zt as parseRouterAbEd25519YaoExportAdmissionReceiptV1, b as toParticipantId, fn as sameRouterAbEd25519YaoRegistrationAdmissionRequestV1, ln as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, on as parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1, qt as ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, un as parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1, x as toRpId, zt as ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1 } from "./evmFamilyEcdsaIdentity-CqGafQsI.js";
+import { u as parseWalletAuthorityV1, w as parseWalletAuthMethodRecordV2 } from "./walletAuthority-DD9T25F6.js";
 import { a as parseNearEd25519SigningKeyId, i as nearEd25519SigningKeyIdFromString, o as walletIdFromString, t as computeAddSignerNearEd25519SigningKeyId } from "./registrationIds-DLSdEKSv.js";
-import { a as buildEmailOtpEnvelopeFactor, c as buildPasskeyEnvelopeFactor, d as parsePasskeyCustodyEnvelopeRecord, f as parseWalletCustodyEnvelopeOwnershipWireV1, h as isWalletCustodySeedBinding, l as custodyEnvelopeBindingJsonV1, n as walletCustodyCommitPayloadWithRecoveryBackupAcknowledgement, r as WALLET_CUSTODY_ENVELOPE_VERSION_V2, u as custodyEnvelopeOwnershipWireV1 } from "./passkey-custody-Bk1jAknm.js";
-import { a as parseEcdsaRoleLocalPersistedMaterialRef, d as parseEcdsaRelayerKeyId, i as parseEcdsaRoleLocalMaterialHandle, n as parseEcdsaRoleLocalBindingDigest, s as parseEcdsaThresholdKeyId, t as parseEcdsaClientVerifyingPublicKey33B64u } from "./keyMaterialBrands-CX41hur6.js";
+import { a as buildEmailOtpEnvelopeFactor, c as buildPasskeyEnvelopeFactor, d as parsePasskeyCustodyEnvelopeRecord, f as parseWalletCustodyEnvelopeOwnershipWireV1, h as isWalletCustodySeedBinding, l as custodyEnvelopeBindingJsonV1, n as walletCustodyCommitPayloadWithRecoveryBackupAcknowledgement, r as WALLET_CUSTODY_ENVELOPE_VERSION_V2, u as custodyEnvelopeOwnershipWireV1 } from "./passkey-custody-UUHbC0pk.js";
+import { a as parseEcdsaRoleLocalPersistedMaterialRef, d as parseEcdsaRelayerKeyId, i as parseEcdsaRoleLocalMaterialHandle, n as parseEcdsaRoleLocalBindingDigest, s as parseEcdsaThresholdKeyId, t as parseEcdsaClientVerifyingPublicKey33B64u } from "./keyMaterialBrands-CogGAAZn.js";
 import { i as RegistrationEventPhase, p as createRegistrationFlowEvent } from "./sdkSentEvents-MqDkbQg1.js";
-import { C as parsePendingWalletRegistrationCommitV1, D as createRouterAbTraceContextV1, E as ROUTER_AB_TRACE_ID_HEADER_V1, O as parseRouterAbTraceContextV1, S as assertPendingWalletRegistrationIdentity, T as preparePendingNearRegistration, _ as ecdsaCapabilityScopesMatch, b as walletSessionAuthorizations, c as resolveAccountKeyMaterialTarget, g as IndexedDbEcdsaCapabilityManifestStore, r as prepareWalletCustodyEcdsaContinuity, u as IndexedDBManager, v as runtimePolicyScopesMatch, w as planPendingNearRegistration } from "./walletCustodyEcdsaContinuity-Hn4ORIbf.js";
+import { C as parsePendingWalletRegistrationCommitV1, D as createRouterAbTraceContextV1, E as ROUTER_AB_TRACE_ID_HEADER_V1, O as parseRouterAbTraceContextV1, S as assertPendingWalletRegistrationIdentity, T as preparePendingNearRegistration, _ as ecdsaCapabilityScopesMatch, b as walletSessionAuthorizations, c as resolveAccountKeyMaterialTarget, g as IndexedDbEcdsaCapabilityManifestStore, r as prepareWalletCustodyEcdsaContinuity, u as IndexedDBManager, v as runtimePolicyScopesMatch, w as planPendingNearRegistration } from "./walletCustodyEcdsaContinuity-CF4bv9OI.js";
 import { t as parseSignerSlot } from "./signerSlot-_ovonwVX.js";
 import { a as SIGNING_SESSION_SEAL_ALG, c as SIGNING_SESSION_SECRET_KIND, l as parseRouterAbEd25519NormalSigningState, o as SIGNING_SESSION_SEAL_GROUP_ID, s as SIGNING_SESSION_SEAL_STORAGE_SCOPE, u as requireRouterAbEd25519NormalSigningState } from "./signingSessionSeal-Cu-GHm6y.js";
-import { c as registrationNearEd25519BranchKey, l as registrationSignerPlanFromSelection, n as findRegistrationSignerPlanEvmFamilyEcdsaBranch, r as findRegistrationSignerPlanNearEd25519Branch, s as registrationEvmFamilyEcdsaBranchKey } from "./registrationSignerPlan-CAikVZZQ.js";
+import { c as registrationNearEd25519BranchKey, l as registrationSignerPlanFromSelection, n as findRegistrationSignerPlanEvmFamilyEcdsaBranch, r as findRegistrationSignerPlanNearEd25519Branch, s as registrationEvmFamilyEcdsaBranchKey } from "./registrationSignerPlan-DhV8VAob.js";
 import { c as signingLaneAuthMethod, r as SigningSessionIds } from "./types-Dx9fczU7.js";
-import { n as parseEmailOtpChallengeDelivery } from "./challengeDelivery-Dd0586fo.js";
+import { n as parseEmailOtpChallengeDelivery } from "./challengeDelivery-DZtopOAG.js";
 import { l as getPrfFirstB64uFromCredential, o as redactedPasskeyRegistrationCredential, u as redactCredentialExtensionOutputs } from "./helpers-ZrowMnev.js";
-import { i as buildEcdsaCapabilityScope } from "./ecdsaCapabilityManifest-kzO_fW09.js";
+import { i as buildEcdsaCapabilityScope } from "./ecdsaCapabilityManifest-DuMs0VtU.js";
 import { i as buildNearAccountRefs } from "./profileAccountProjection-uZVJuBvS.js";
-import { C as respondWalletAddSignerEcdsa, E as setupWalletRegistration, O as startWalletAddSigner, b as isEmailOtpWalletRegistrationFinalizeResponse, c as parseWalletUnlockAlreadyCommittedResponseV1, d as activateWalletRegistration, f as completeWalletRegistrationNearProvisioning, m as createWalletAddSignerIntent, n as nearEd25519YaoRuntimeRef, r as resolveNearEd25519YaoCapabilityHydrationV1, s as parseWalletSessionAlreadyCommittedResponseV1, t as nearEd25519YaoMaterialActivationFromMetadata, u as activateWalletAddSignerEcdsa, v as finalizeWalletAddSigner, w as respondWalletRegistration, x as parseWalletRegistrationEcdsaDerivationRespond } from "./nearEd25519YaoMaterialActivation-DPb0s3hQ.js";
+import { D as setupWalletRegistration, S as parseWalletRegistrationEcdsaDerivationRespond, T as respondWalletRegistration, c as parseWalletUnlockAlreadyCommittedResponseV1, d as activateWalletAddSignerEcdsa, f as activateWalletRegistration, h as createWalletAddSignerIntent, k as startWalletAddSigner, n as nearEd25519YaoRuntimeRef, p as completeWalletRegistrationNearProvisioning, r as resolveNearEd25519YaoCapabilityHydrationV1, s as parseWalletSessionAlreadyCommittedResponseV1, t as nearEd25519YaoMaterialActivationFromMetadata, w as respondWalletAddSignerEcdsa, x as isEmailOtpWalletRegistrationFinalizeResponse, y as finalizeWalletAddSigner } from "./nearEd25519YaoMaterialActivation-B5GecIvq.js";
 import { n as buildRelayerJsonPostRequestInit, r as normalizeRelayerBaseUrl, t as buildBearerAuthorizationHeader } from "./relayerHttp-VC8Holz1.js";
-import { d as isExactEcdsaSigningLaneIdentity, f as nearEd25519SignerBindingFromBoundaryFields } from "./exactSigningLaneIdentity-DQeqPMST.js";
-import { a as nearEd25519SessionMatchesMaterialActivation, h as emailOtpAuthContextProviderUserId, l as buildEmailOtpAuthContext, m as emailOtpAuthContextProvider, p as emailOtpAuthContextEmailHashHex, s as buildNearTransactionSigningLane } from "./nearEd25519YaoSigningPreparation-BeD-SmbK.js";
+import { d as isExactEcdsaSigningLaneIdentity, f as nearEd25519SignerBindingFromBoundaryFields } from "./exactSigningLaneIdentity-m6uTXV_A.js";
+import { a as nearEd25519SessionMatchesMaterialActivation, h as emailOtpAuthContextProviderUserId, l as buildEmailOtpAuthContext, m as emailOtpAuthContextProvider, p as emailOtpAuthContextEmailHashHex, s as buildNearTransactionSigningLane } from "./nearEd25519YaoSigningPreparation-CdOT5RuC.js";
 import { o as buildEmailOtpRoutePlan, r as buildFreshEmailOtpRoutePlan } from "./routePlan-D59x5xzQ.js";
 import { n as generateSessionId } from "./prfCache-wqQSjYLn.js";
-import { u as emitSigningSessionFlowTrace } from "./trace-rHe0wz7q.js";
+import { u as emitSigningSessionFlowTrace } from "./trace-DKLQZvec.js";
 import { t as webAuthnPromptCoordinator } from "./webauthnPromptCoordinator-L96oVvLz.js";
 import { t as computeAddSignerIntentDigest } from "./intentDigest-CvOSNlCH.js";
-import { n as showWalletRecoveryCodeBackupUi, t as pendingWalletRecoveryCodeBackupRepository } from "./pendingWalletRecoveryCodeBackup-DLzBb3WQ.js";
+import { n as showWalletRecoveryCodeBackupUi, t as pendingWalletRecoveryCodeBackupRepository } from "./pendingWalletRecoveryCodeBackup-BWluQMbt.js";
 //#region src/core/signingEngine/walletCustody/ceremonyDriver.ts
 function ignoreDiscardFailure() {}
 function requireNearBegunRun(begun) {
@@ -3942,24 +3942,21 @@ function storagePayloadFromSealedStoreRow(value) {
 	const obj = asRecord(value);
 	return obj && SEALED_RECORD_PAYLOAD_FIELD in obj ? obj[SEALED_RECORD_PAYLOAD_FIELD] : value;
 }
-function optionalStringForIndex(value) {
-	return normalizeOptionalNonEmptyString(value);
-}
 function durableLaneStorageRow(record) {
 	const ecdsaChainTarget = record.ecdsaRestore?.chainTarget;
-	const ecdsaThresholdSessionId = optionalStringForIndex(record.thresholdSessionIds.ecdsa);
-	const ed25519ThresholdSessionId = optionalStringForIndex(record.thresholdSessionIds.ed25519);
+	const ecdsaThresholdSessionId = normalizeOptionalNonEmptyString(record.thresholdSessionIds.ecdsa);
+	const ed25519ThresholdSessionId = normalizeOptionalNonEmptyString(record.thresholdSessionIds.ed25519);
 	return {
 		store_key: record.storeKey,
 		wallet_id: record.walletId,
 		auth_method: record.authMethod,
 		curve: record.curve,
-		signing_root_id: optionalStringForIndex("signingRootId" in record ? record.signingRootId : void 0),
-		signing_root_version: optionalStringForIndex("signingRootVersion" in record ? record.signingRootVersion : void 0),
+		signing_root_id: normalizeOptionalNonEmptyString("signingRootId" in record ? record.signingRootId : void 0),
+		signing_root_version: normalizeOptionalNonEmptyString("signingRootVersion" in record ? record.signingRootVersion : void 0),
 		ed25519_threshold_session_id: ed25519ThresholdSessionId,
 		ecdsa_threshold_session_id: ecdsaThresholdSessionId,
 		threshold_session_id: ecdsaThresholdSessionId || ed25519ThresholdSessionId,
-		key_handle: optionalStringForIndex(record.ecdsaRestore?.keyHandle),
+		key_handle: normalizeOptionalNonEmptyString(record.ecdsaRestore?.keyHandle),
 		chain_target_key: ecdsaChainTarget ? thresholdEcdsaChainTargetKey(ecdsaChainTarget) : void 0,
 		expires_at_ms: record.expiresAtMs,
 		updated_at: record.updatedAtMs,
@@ -6042,10 +6039,10 @@ function assertRegistrationEcdsaSessionMatchesWalletKeys(args) {
 	const [firstWalletKey] = args.walletKeys;
 	if (!firstWalletKey) throw new Error("ECDSA registration did not return wallet key material");
 	const token = registrationEstablishedEcdsaSession(args.session.registrationEstablishedSession);
-	if (String(args.session.registrationEstablishedSession.walletId) !== firstWalletKey.walletId || token.thresholdSessionId !== args.session.activatedThresholdSessionId || token.keyHandle !== firstWalletKey.keyHandle || !sameRuntimePolicyScope$1(token.runtimePolicyScope, args.session.clientBootstrap.runtimePolicyScope) || !sameRouterAbEcdsaDerivationNormalSigningStateV1(token.routerAbEcdsaDerivationNormalSigning, args.session.bootstrap.routerAbEcdsaDerivationNormalSigning)) throw new Error("Registration-established ECDSA session changed the signer identity");
+	if (String(args.session.registrationEstablishedSession.walletId) !== firstWalletKey.walletId || token.thresholdSessionId !== args.session.activatedThresholdSessionId || token.keyHandle !== firstWalletKey.keyHandle || !sameRuntimePolicyScope(token.runtimePolicyScope, args.session.clientBootstrap.runtimePolicyScope) || !sameRouterAbEcdsaDerivationNormalSigningStateV1(token.routerAbEcdsaDerivationNormalSigning, args.session.bootstrap.routerAbEcdsaDerivationNormalSigning)) throw new Error("Registration-established ECDSA session changed the signer identity");
 	for (const walletKey of args.walletKeys) if (walletKey.walletId !== firstWalletKey.walletId || walletKey.keyHandle !== token.keyHandle || walletKey.ecdsaThresholdKeyId !== firstWalletKey.ecdsaThresholdKeyId) throw new Error("ECDSA registration material changed the established session identity");
 }
-function sameRuntimePolicyScope$1(left, right) {
+function sameRuntimePolicyScope(left, right) {
 	return left.orgId === right.orgId && left.projectId === right.projectId && left.envId === right.envId && left.signingRootVersion === right.signingRootVersion;
 }
 //#endregion
@@ -6067,7 +6064,7 @@ function registrationEd25519MaterialFacts(args) {
 	if (!thresholdSessionId.ok) throw new Error("Ed25519 registration threshold-session identity is invalid");
 	const participantIds = admission.participant_ids;
 	const finalizedRuntimePolicyScope = normalizeRuntimePolicyScope(args.finalized.runtimePolicyScope);
-	if (admission.application_binding.wallet_id !== args.walletId || admission.application_binding.near_ed25519_signing_key_id !== args.finalized.nearEd25519SigningKeyId || admission.application_binding.key_creation_signer_slot !== args.finalized.signerSlot || participantIds[0] !== args.finalized.participantIds[0] || participantIds[1] !== args.finalized.participantIds[1] || !sameRuntimePolicyScope$1(finalizedRuntimePolicyScope, args.expectedRuntimePolicyScope) || admission.application_binding.signing_root_id !== `${finalizedRuntimePolicyScope.projectId}:${finalizedRuntimePolicyScope.envId}` || admission.scope.root_share_epoch !== finalizedRuntimePolicyScope.signingRootVersion || admission.scope.signing_worker_id !== args.finalized.routerAbNormalSigning.signingWorkerId || args.finalized.relayerKeyId !== args.finalized.routerAbNormalSigning.signingWorkerId) throw new Error("Ed25519 registration material changed the admitted signer identity");
+	if (admission.application_binding.wallet_id !== args.walletId || admission.application_binding.near_ed25519_signing_key_id !== args.finalized.nearEd25519SigningKeyId || admission.application_binding.key_creation_signer_slot !== args.finalized.signerSlot || participantIds[0] !== args.finalized.participantIds[0] || participantIds[1] !== args.finalized.participantIds[1] || !sameRuntimePolicyScope(finalizedRuntimePolicyScope, args.expectedRuntimePolicyScope) || admission.application_binding.signing_root_id !== `${finalizedRuntimePolicyScope.projectId}:${finalizedRuntimePolicyScope.envId}` || admission.scope.root_share_epoch !== finalizedRuntimePolicyScope.signingRootVersion || admission.scope.signing_worker_id !== args.finalized.routerAbNormalSigning.signingWorkerId || args.finalized.relayerKeyId !== args.finalized.routerAbNormalSigning.signingWorkerId) throw new Error("Ed25519 registration material changed the admitted signer identity");
 	return {
 		identity: {
 			walletId: String(args.walletId),
@@ -6097,7 +6094,7 @@ function registrationEstablishedEd25519Session(session) {
 }
 async function buildRegistrationEmailOtpEd25519SessionState(args) {
 	const token = registrationEstablishedEd25519Session(args.registrationEstablishedSession);
-	if (token.nearAccountId !== String(args.nearAccountId) || token.nearEd25519SigningKeyId !== String(args.nearEd25519SigningKeyId) || token.thresholdSessionId !== String(args.thresholdSessionId) || !sameRuntimePolicyScope$1(token.runtimePolicyScope, args.runtimePolicyScope)) throw new Error("Registration-established Email OTP Ed25519 session changed signer identity");
+	if (token.nearAccountId !== String(args.nearAccountId) || token.nearEd25519SigningKeyId !== String(args.nearEd25519SigningKeyId) || token.thresholdSessionId !== String(args.thresholdSessionId) || !sameRuntimePolicyScope(token.runtimePolicyScope, args.runtimePolicyScope)) throw new Error("Registration-established Email OTP Ed25519 session changed signer identity");
 	const signingRoot = signingRootScopeFromRuntimePolicyScope(token.runtimePolicyScope);
 	const signingRootVersion = signingRoot.signingRootVersion;
 	if (!signingRootVersion) throw new Error("Registration-established Ed25519 session is missing a signing-root version");
@@ -7371,14 +7368,11 @@ function parseExactRecoverySession(raw, participantIds, identity, walletSession,
 		operationCredential
 	};
 }
-function sameRuntimePolicyScope(left, right) {
-	return left.orgId === right.orgId && left.projectId === right.projectId && left.envId === right.envId && left.signingRootVersion === right.signingRootVersion;
-}
 function assertEd25519YaoRecoveryDescriptorStableIdentity(parsed) {
 	const capability = parsed.capability;
 	const session = parsed.session;
 	const signingRoot = signingRootScopeFromRuntimePolicyScope(session.runtimePolicyScope);
-	if (!signingRoot || capability.applicationBinding.wallet_id !== String(parsed.walletId) || capability.applicationBinding.near_ed25519_signing_key_id !== parsed.nearEd25519SigningKeyId || capability.applicationBinding.key_creation_signer_slot !== parsed.signerSlot || capability.nearAccountId !== parsed.nearAccountId || capability.lifecycle.accountId !== String(parsed.walletId) || capability.lifecycle.signingWorkerId !== parsed.relayerKeyId || session.routerAbNormalSigning?.signingWorkerId !== parsed.relayerKeyId || session.participantIds[0] !== capability.participantIds[0] || session.participantIds[1] !== capability.participantIds[1] || !sameRuntimePolicyScope(session.runtimePolicyScope, capability.runtimePolicyScope) || session.runtimePolicyScope.signingRootVersion !== capability.lifecycle.rootShareEpoch || capability.applicationBinding.signing_root_id !== signingRoot.signingRootId || parsed.operationalPublicKey !== `ed25519:${base58Encode(Uint8Array.from(capability.registeredPublicKey))}`) throw new Error("Yao recovery response does not preserve the registered wallet identity");
+	if (!signingRoot || capability.applicationBinding.wallet_id !== String(parsed.walletId) || capability.applicationBinding.near_ed25519_signing_key_id !== parsed.nearEd25519SigningKeyId || capability.applicationBinding.key_creation_signer_slot !== parsed.signerSlot || capability.nearAccountId !== parsed.nearAccountId || capability.lifecycle.accountId !== String(parsed.walletId) || capability.lifecycle.signingWorkerId !== parsed.relayerKeyId || session.routerAbNormalSigning?.signingWorkerId !== parsed.relayerKeyId || session.participantIds[0] !== capability.participantIds[0] || session.participantIds[1] !== capability.participantIds[1] || !sameRuntimePolicyScope$1(session.runtimePolicyScope, capability.runtimePolicyScope) || session.runtimePolicyScope.signingRootVersion !== capability.lifecycle.rootShareEpoch || capability.applicationBinding.signing_root_id !== signingRoot.signingRootId || parsed.operationalPublicKey !== `ed25519:${base58Encode(Uint8Array.from(capability.registeredPublicKey))}`) throw new Error("Yao recovery response does not preserve the registered wallet identity");
 }
 function assertEd25519YaoRecoveryDescriptorContinuity(parsed) {
 	assertEd25519YaoRecoveryDescriptorStableIdentity(parsed);
@@ -8095,19 +8089,13 @@ async function unlockPendingEcdsaRegistration(args) {
 //#region src/SeamsWeb/operations/registration/pendingRegistrationRecovery.ts
 const defaultPendingRegistrationRecoveryPorts = {
 	listPendingWalletRegistrationCommits,
-	completeWalletRegistrationNearProvisioning: completePendingWalletRegistrationNearProvisioning,
+	completeWalletRegistrationNearProvisioning,
 	publishPendingWalletRegistrationCommit
 };
 async function listPendingWalletRegistrationCommits() {
 	await IndexedDBManager.initialize();
 	return await IndexedDBManager.listPendingWalletRegistrationCommits();
 }
-async function completePendingWalletRegistrationNearProvisioning(input) {
-	return await completeWalletRegistrationNearProvisioning(input);
-}
-async function activatePendingWalletRegistration(input) {
-	return await activateWalletRegistration(input);
-}
 async function publishPendingWalletRegistrationCommit(input) {
 	return await IndexedDBManager.publishPendingWalletRegistrationCommit(input);
 }
@@ -8402,7 +8390,7 @@ async function resumePendingNearRegistrations(args) {
 	return results;
 }
 const defaultPendingEcdsaRegistrationRecoveryPorts = {
-	activateWalletRegistration: activatePendingWalletRegistration,
+	activateWalletRegistration,
 	publishPendingWalletRegistrationCommit,
 	unlockPendingEcdsaRegistration
 };
@@ -14411,4 +14399,4 @@ async function addWalletSigner(args) {
 	}
 }
 //#endregion
-export { unlockEmailOtpAuthorityWallet as $, listThresholdEcdsaProvisionTargets as $t, resolveGoogleEmailOtpProvider as A, readExactEd25519SealedSession as At, subscribeToNearProvisioning as B, resolveExactWalletSessionOperationCredential as Bt, persistPasskeyEd25519YaoSignerMaterialV1 as C, resolveExactEd25519SealedSessionRuntimeForLane as Ct, collectEmailOtpRegistrationAuthority as D, deleteDurableSealedSessionRecord as Dt, buildRestorableMpcMaterialRefInternal as E, acquireSigningSessionRestoreLease as Et, exactPasskeyWalletAuthAuthorityRefForCredential as F, writeExactSealedSession as Ft, passkeyPrfFirstB64uFromCredential as G, openWalletCustodyEd25519ActiveClientV1 as Gt, resumePendingEcdsaRegistrationFromStoredCommit as H, buildPasskeyEd25519RestoreMetadata as Ht, exactPasskeyWalletAuthMethodForCredential as I, buildCurrentSealedSessionRecord as It, verifyPasskeyWalletUnlock as J, ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1 as Jt, requirePasskeyPrfFirstB64u as K, walletCustodyActivationFactsFromActiveClientMetadataV1 as Kt, resolveManagedRuntimeScopeBootstrap as L, createDeleteDurableSealedSessionCommand as Lt, readPasskeyCustodySessionEnvelope as M, releaseSigningSessionRestoreLease as Mt, rememberPasskeyCustodySessionEnvelope as N, updateExactEd25519SealedSessionPolicy as Nt, requestEmailOtpChallenge as O, listEcdsaSealedSessionsForWallet as Ot, buildRecoveredCustodyEnvelopeRecord as P, updateExactSealedSessionPolicy as Pt, passkeyEd25519YaoLaneReferenceFromRecovery as Q, listConfiguredThresholdEcdsaPublicationTargets as Qt, awaitNearProvisioningInFlight as R, buildRouterAbEd25519SigningWalletSession as Rt, hydratePasskeyEd25519YaoLocalMaterialV1 as S, parseExactEd25519SealedSessionRuntime as St, readPasskeyEd25519YaoLocalMaterialLocatorV1 as T, resolveExactEd25519SealedSessionRuntimeForWalletSubject as Tt, resumePendingNearRegistrations as U, persistPasskeyEd25519YaoSessionForRefresh as Ut, scheduleEcdsaSessionPresignaturePrefill as V, WALLET_IFRAME_TRANSPORT_TIMING_LABEL as Vt, passkeyCredentialIdB64uFromAuthentication as W, openOrRejoinWalletCustodyEd25519V1 as Wt, buildRecoveredWalletSessionState as X, RouterAbEd25519YaoHttpActivationTransportV1 as Xt, assertEd25519YaoWarmRecoveryDescriptorStableMaterialContinuity as Y, RouterAbEd25519YaoClientV1 as Yt, parsePasskeyEd25519YaoSyncResponseV1 as Z, parseEd25519YaoRecoveryCapabilityV1 as Zt, setUnlockedCustodyEnvelopeUpgradeSinkV1 as _, nearEd25519YaoOperationMaterialFacts as _t, registerWallet as a, joinEvmFamilyCustodyV1 as at, walletCustodyCeremonyStepRunner as b, ed25519AuthorizationIdentityMatchesRuntime as bt, exactWalletSessionAuthorityIdentity as c, recoverNearEd25519CustodyV1 as ct, validateExactWalletSessionAuthorization as d, WalletSessionStatusReadScope as dt, isRegistrationBenchmarkDiagnosticsEnabled as en, unlockEmailOtpEd25519YaoCapability as et, destroyUnlockedWalletEd25519ExportRootCapabilitiesV1 as f, createRelayerExactWalletSessionStatusPort as ft, readUnlockedWalletEd25519ExportRootCapabilityV1 as g, buildPasskeyRouterAbEd25519WalletSessionState as gt, readUnlockedEd25519ExportRootLinkingCapabilityV1 as h, buildEmailOtpRouterAbEd25519WalletSessionState as ht, registerPreparedHostedPasskeyRegistration as i, establishNearEd25519CustodyV1 as it, configurePasskeyCustodySessionCachePersistence as j, readExactSealedSession as jt, requestEmailOtpEnrollmentChallenge as k, listExactSealedSessionsForWallet as kt, persistExactWalletSessionAuthorizationFromEcdsaBootstrap as l, rejoinEvmFamilyCustodyV1 as lt, establishUnlockedWalletEd25519ExportRootCapabilityV1 as m, joinCustodyWireFromEnvelopeRecord as mt, cancelHostedPasskeyRegistration as n, unlockEmailOtpWalletCapabilities as nt, registration_exports as o, joinNearEd25519CustodyV1 as ot, dropUnlockedWalletEd25519ExportRootCapabilityReferenceV1 as p, sameRuntimePolicyScope$1 as pt, verifyLinkedDevicePasskeyWalletSession as q, walletCustodyCacheEnvelopeFromRecordV1 as qt, prepareHostedPasskeyRegistration as r, establishEvmFamilyCustodyV1 as rt, startHostedPasskeyRegistrationCredential as s, recoverEvmFamilyCustodyV1 as st, addWalletSigner as t, unlockEmailOtpWallet as tt, validateExactWalletSessionAuthorityIdentity as u, rejoinNearEd25519CustodyV1 as ut, walletCustodyCeremonyTransportFromWorkerContextV1 as v, rebindRouterAbEd25519WalletSessionStateFromExactRuntime as vt, preparePasskeyEd25519YaoLocalMaterialRehydrationV1 as w, resolveExactEd25519SealedSessionRuntimeForWallet as wt, ed25519YaoLocalMaterialIdentityFromWalletSession as x, ed25519SealedRuntimeAuthorityRef as xt, requestWalletCustodyCeremonyOperation as y, resolveActiveAuthorizedRouterAbEd25519WalletSessionState as yt, readNearProvisioningState as z, requiredSigningSubjectForExactSigningLane as zt };
+export { unlockEmailOtpAuthorityWallet as $, listThresholdEcdsaProvisionTargets as $t, resolveGoogleEmailOtpProvider as A, readExactEd25519SealedSession as At, subscribeToNearProvisioning as B, resolveExactWalletSessionOperationCredential as Bt, persistPasskeyEd25519YaoSignerMaterialV1 as C, resolveExactEd25519SealedSessionRuntimeForLane as Ct, collectEmailOtpRegistrationAuthority as D, deleteDurableSealedSessionRecord as Dt, buildRestorableMpcMaterialRefInternal as E, acquireSigningSessionRestoreLease as Et, exactPasskeyWalletAuthAuthorityRefForCredential as F, writeExactSealedSession as Ft, passkeyPrfFirstB64uFromCredential as G, openWalletCustodyEd25519ActiveClientV1 as Gt, resumePendingEcdsaRegistrationFromStoredCommit as H, buildPasskeyEd25519RestoreMetadata as Ht, exactPasskeyWalletAuthMethodForCredential as I, buildCurrentSealedSessionRecord as It, verifyPasskeyWalletUnlock as J, ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1 as Jt, requirePasskeyPrfFirstB64u as K, walletCustodyActivationFactsFromActiveClientMetadataV1 as Kt, resolveManagedRuntimeScopeBootstrap as L, createDeleteDurableSealedSessionCommand as Lt, readPasskeyCustodySessionEnvelope as M, releaseSigningSessionRestoreLease as Mt, rememberPasskeyCustodySessionEnvelope as N, updateExactEd25519SealedSessionPolicy as Nt, requestEmailOtpChallenge as O, listEcdsaSealedSessionsForWallet as Ot, buildRecoveredCustodyEnvelopeRecord as P, updateExactSealedSessionPolicy as Pt, passkeyEd25519YaoLaneReferenceFromRecovery as Q, listConfiguredThresholdEcdsaPublicationTargets as Qt, awaitNearProvisioningInFlight as R, buildRouterAbEd25519SigningWalletSession as Rt, hydratePasskeyEd25519YaoLocalMaterialV1 as S, parseExactEd25519SealedSessionRuntime as St, readPasskeyEd25519YaoLocalMaterialLocatorV1 as T, resolveExactEd25519SealedSessionRuntimeForWalletSubject as Tt, resumePendingNearRegistrations as U, persistPasskeyEd25519YaoSessionForRefresh as Ut, scheduleEcdsaSessionPresignaturePrefill as V, WALLET_IFRAME_TRANSPORT_TIMING_LABEL as Vt, passkeyCredentialIdB64uFromAuthentication as W, openOrRejoinWalletCustodyEd25519V1 as Wt, buildRecoveredWalletSessionState as X, RouterAbEd25519YaoHttpActivationTransportV1 as Xt, assertEd25519YaoWarmRecoveryDescriptorStableMaterialContinuity as Y, RouterAbEd25519YaoClientV1 as Yt, parsePasskeyEd25519YaoSyncResponseV1 as Z, parseEd25519YaoRecoveryCapabilityV1 as Zt, setUnlockedCustodyEnvelopeUpgradeSinkV1 as _, nearEd25519YaoOperationMaterialFacts as _t, registerWallet as a, joinEvmFamilyCustodyV1 as at, walletCustodyCeremonyStepRunner as b, ed25519AuthorizationIdentityMatchesRuntime as bt, exactWalletSessionAuthorityIdentity as c, recoverNearEd25519CustodyV1 as ct, validateExactWalletSessionAuthorization as d, WalletSessionStatusReadScope as dt, isRegistrationBenchmarkDiagnosticsEnabled as en, unlockEmailOtpEd25519YaoCapability as et, destroyUnlockedWalletEd25519ExportRootCapabilitiesV1 as f, createRelayerExactWalletSessionStatusPort as ft, readUnlockedWalletEd25519ExportRootCapabilityV1 as g, buildPasskeyRouterAbEd25519WalletSessionState as gt, readUnlockedEd25519ExportRootLinkingCapabilityV1 as h, buildEmailOtpRouterAbEd25519WalletSessionState as ht, registerPreparedHostedPasskeyRegistration as i, establishNearEd25519CustodyV1 as it, configurePasskeyCustodySessionCachePersistence as j, readExactSealedSession as jt, requestEmailOtpEnrollmentChallenge as k, listExactSealedSessionsForWallet as kt, persistExactWalletSessionAuthorizationFromEcdsaBootstrap as l, rejoinEvmFamilyCustodyV1 as lt, establishUnlockedWalletEd25519ExportRootCapabilityV1 as m, joinCustodyWireFromEnvelopeRecord as mt, cancelHostedPasskeyRegistration as n, unlockEmailOtpWalletCapabilities as nt, registration_exports as o, joinNearEd25519CustodyV1 as ot, dropUnlockedWalletEd25519ExportRootCapabilityReferenceV1 as p, sameRuntimePolicyScope as pt, verifyLinkedDevicePasskeyWalletSession as q, walletCustodyCacheEnvelopeFromRecordV1 as qt, prepareHostedPasskeyRegistration as r, establishEvmFamilyCustodyV1 as rt, startHostedPasskeyRegistrationCredential as s, recoverEvmFamilyCustodyV1 as st, addWalletSigner as t, unlockEmailOtpWallet as tt, validateExactWalletSessionAuthorityIdentity as u, rejoinNearEd25519CustodyV1 as ut, walletCustodyCeremonyTransportFromWorkerContextV1 as v, rebindRouterAbEd25519WalletSessionStateFromExactRuntime as vt, preparePasskeyEd25519YaoLocalMaterialRehydrationV1 as w, resolveExactEd25519SealedSessionRuntimeForWallet as wt, ed25519YaoLocalMaterialIdentityFromWalletSession as x, ed25519SealedRuntimeAuthorityRef as xt, requestWalletCustodyCeremonyOperation as y, resolveActiveAuthorizedRouterAbEd25519WalletSessionState as yt, readNearProvisioningState as z, requiredSigningSubjectForExactSigningLane as zt };

package/dist/esm/sdk/{registration-BzVHODuD.js → registration-DHERU8R_.js}

@@ -2,7 +2,7 @@ import { n as __exportAll } from "./chunk-BtrIJ4_z.js";
 import { o as toError } from "./errors-93h9uAW9.js";
 import { c as serializeRegistrationCredentialWithPRF, r as isSerializedRegistrationCredential } from "./helpers-ZrowMnev.js";
 import { t as webAuthnPromptCoordinator } from "./webauthnPromptCoordinator-L96oVvLz.js";
-import { D as getWalletId, S as getNearAccountId, f as ERROR_MESSAGES, m as isUserCancelledUserConfirm, n as createConfirmTxFlowAdapters, t as createConfirmSession, x as getIntentDigest } from "./adapters-B4JeK1nJ.js";
+import { D as getWalletId, S as getNearAccountId, f as ERROR_MESSAGES, m as isUserCancelledUserConfirm, n as createConfirmTxFlowAdapters, t as createConfirmSession, x as getIntentDigest } from "./adapters-Dli9XAZp.js";
 import { a as sha256Base64UrlUtf8 } from "./intentDigest-CvOSNlCH.js";
 //#region src/core/signingEngine/uiConfirm/handlers/flows/registration.ts
 var registration_exports = /* @__PURE__ */ __exportAll({ handleRegistrationFlow: () => handleRegistrationFlow });

package/dist/esm/sdk/{registrationAccounts-CKku_Sgy.js → registrationAccounts-DmWPzf3T.js}

@@ -1,9 +1,9 @@
 import "./validation-gat4LEKm.js";
 import "./signerDomain-IEAVrOrc.js";
-import { O as storeWalletEmailOtpEd25519RegistrationData, T as storeWalletEd25519RegistrationData, _ as rollbackWalletEd25519SignerRegistration, a as getLastUser, b as storeAuthenticator, c as hasPasskeyCredential, g as rollbackUserRegistration, i as getAllUsers, k as storeWalletEmailOtpMixedRegistrationData, l as nearAuthenticatorsByAccount, o as getUserBySignerSlot, r as finalizeWalletEd25519SignerRegistration, s as getWalletNearProvisioningState, t as activateAuthenticatedWalletState, v as setLastUser, w as storeWalletEd25519RecoveryRegistrationData, x as storeUserData, y as setWalletNearProvisioningState } from "./accountLifecycle-BAGG_rbk.js";
+import { O as storeWalletEmailOtpEd25519RegistrationData, T as storeWalletEd25519RegistrationData, _ as rollbackWalletEd25519SignerRegistration, a as getLastUser, b as storeAuthenticator, c as hasPasskeyCredential, g as rollbackUserRegistration, i as getAllUsers, k as storeWalletEmailOtpMixedRegistrationData, l as nearAuthenticatorsByAccount, o as getUserBySignerSlot, r as finalizeWalletEd25519SignerRegistration, s as getWalletNearProvisioningState, t as activateAuthenticatedWalletState, v as setLastUser, w as storeWalletEd25519RecoveryRegistrationData, x as storeUserData, y as setWalletNearProvisioningState } from "./accountLifecycle-zthG08aC.js";
 import "./encoders-D8d07vpx.js";
 import "./registrationIds-DLSdEKSv.js";
-import "./registrationSignerPlan-CAikVZZQ.js";
+import "./registrationSignerPlan-DhV8VAob.js";
 //#region src/core/signingEngine/flows/registration/services/registrationAccounts.ts
 function createRegistrationAccountsService(accountLifecycle) {
 	return {

package/dist/esm/sdk/{registrationIntent-D0PxwEY4.js → registrationIntent-4zwk16zQ.js}

@@ -2,7 +2,7 @@ import { D as parseWalletAuthorityId, M as parseWebAuthnRpId, O as parseWalletId
 import { i as base64UrlEncode } from "./base64-Clm8C-e9.js";
 import { f as alphabetizeStringify, m as sha256BytesUtf8 } from "./chains-BMh3btVo.js";
 import { c as normalizeAddAuthMethodInput, s as inspectRawObject, u as trimString } from "./registrationIds-DLSdEKSv.js";
-import { a as normalizeAddSignerSelection } from "./registrationSignerPlan-CAikVZZQ.js";
+import { a as normalizeAddSignerSelection } from "./registrationSignerPlan-DhV8VAob.js";
 //#region ../shared-ts/src/utils/registrationIntent.ts
 function addAuthMethodIntentGrantFromString(value) {
 	return String(value || "").trim();
@@ -10,17 +10,11 @@ function addAuthMethodIntentGrantFromString(value) {
 function addSignerIntentGrantFromString(value) {
 	return String(value || "").trim();
 }
-function serializeRegistrationIntentV1(intent) {
-	return alphabetizeStringify(intent);
-}
-function serializeAddAuthMethodIntentV1(intent) {
-	return alphabetizeStringify(intent);
-}
 async function computeRegistrationIntentDigestB64u(intent) {
-	return base64UrlEncode(await sha256BytesUtf8(serializeRegistrationIntentV1(intent)));
+	return base64UrlEncode(await sha256BytesUtf8(alphabetizeStringify(intent)));
 }
 async function computeAddAuthMethodIntentDigestB64u(intent) {
-	return base64UrlEncode(await sha256BytesUtf8(serializeAddAuthMethodIntentV1(intent)));
+	return base64UrlEncode(await sha256BytesUtf8(alphabetizeStringify(intent)));
 }
 function normalizeAddAuthMethodIntentCaller(raw) {
 	const record = inspectRawObject(raw);

package/dist/esm/sdk/{registrationPreparationPreload-CIAuRlxI.js → registrationPreparationPreload-D6zpWp4O.js}

@@ -1,8 +1,8 @@
-import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-D7Aey0FD.js";
+import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-B7orgq5Z.js";
 //#region src/SeamsWeb/walletIframe/host/registrationPreparationPreload.ts
 async function preloadWalletHostRegistrationPreparation() {
 	await Promise.all([
-		import("./runtime-ecdsa-tempo-rkWwolw1.js").catch(() => void 0),
+		import("./runtime-ecdsa-tempo-BGLsTAWR.js").catch(() => void 0),
 		loadSignEvmFamilyWithUiConfirmForTempo().catch(() => void 0),
 		loadSignEvmWithUiConfirm().catch(() => void 0),
 		loadSecp256k1EngineCtor().catch(() => void 0),

package/dist/esm/sdk/{registrationSignerPlan-CAikVZZQ.js → registrationSignerPlan-DhV8VAob.js}

@@ -75,11 +75,8 @@ function registrationSignerBranchKeyFromString(value) {
 function registrationNearEd25519BranchKey(signerSlot) {
 	return registrationSignerBranchKeyFromString(`near_ed25519:slot:${signerSlot}`);
 }
-function registrationEvmFamilyEcdsaTargetKey(target) {
-	return alphabetizeStringify(target);
-}
 function registrationEvmFamilyEcdsaBranchKey(chainTargets) {
-	return registrationSignerBranchKeyFromString(`evm_family_ecdsa:${chainTargets.map(registrationEvmFamilyEcdsaTargetKey).join("|")}`);
+	return registrationSignerBranchKeyFromString(`evm_family_ecdsa:${chainTargets.map(alphabetizeStringify).join("|")}`);
 }
 function registrationSignerPlanFromRequests(signers) {
 	return registrationSignerPlanFromBranches(signers.map(registrationSignerPlanBranchFromRequest));
@@ -163,7 +160,7 @@ function findDuplicateRegistrationSignerBranch(branch, branchKeys) {
 }
 function findDuplicateRegistrationEcdsaTarget(branch, ecdsaTargetKeys) {
 	for (const target of branch.chainTargets) {
-		const targetKey = registrationEvmFamilyEcdsaTargetKey(target);
+		const targetKey = alphabetizeStringify(target);
 		if (ecdsaTargetKeys.has(targetKey)) return {
 			ok: false,
 			code: "invalid_body",