@seams/wallet 0.7.1 → 0.7.3

package/dist/esm/sdk/{runtimeContext-iLXnxVlZ.js → runtimeContext-D3TBExQ6.js}

@@ -8,71 +8,71 @@ import { b as parsePMRedeemHostedWalletSeamsSessionPayload } from "./messages-C7
 import { i as isUserCancellationError, n as getUserFriendlyErrorMessage, o as toError, t as errorMessage } from "./errors-93h9uAW9.js";
 import { i as base64UrlEncode, n as base64Encode, r as base64UrlDecode } from "./base64-Clm8C-e9.js";
 import { n as secureRandomBase64Url, r as secureRandomId, t as secureRandomBase36 } from "./secureRandomId-BORsmdS4.js";
-import { $ as unlockEmailOtpAuthorityWallet, $t as listThresholdEcdsaProvisionTargets, A as resolveGoogleEmailOtpProvider, At as readExactEd25519SealedSession, B as subscribeToNearProvisioning, Bt as resolveExactWalletSessionOperationCredential, C as persistPasskeyEd25519YaoSignerMaterialV1, Ct as resolveExactEd25519SealedSessionRuntimeForLane, D as collectEmailOtpRegistrationAuthority, Dt as deleteDurableSealedSessionRecord, E as buildRestorableMpcMaterialRefInternal, Et as acquireSigningSessionRestoreLease, F as exactPasskeyWalletAuthAuthorityRefForCredential, Ft as writeExactSealedSession, G as passkeyPrfFirstB64uFromCredential, Gt as openWalletCustodyEd25519ActiveClientV1, H as resumePendingEcdsaRegistrationFromStoredCommit, Ht as buildPasskeyEd25519RestoreMetadata, I as exactPasskeyWalletAuthMethodForCredential, It as buildCurrentSealedSessionRecord, J as verifyPasskeyWalletUnlock, Jt as ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1, K as requirePasskeyPrfFirstB64u, Kt as walletCustodyActivationFactsFromActiveClientMetadataV1, L as resolveManagedRuntimeScopeBootstrap, Lt as createDeleteDurableSealedSessionCommand, M as readPasskeyCustodySessionEnvelope, Mt as releaseSigningSessionRestoreLease, N as rememberPasskeyCustodySessionEnvelope, Nt as updateExactEd25519SealedSessionPolicy, O as requestEmailOtpChallenge, Ot as listEcdsaSealedSessionsForWallet, P as buildRecoveredCustodyEnvelopeRecord, Pt as updateExactSealedSessionPolicy, Q as passkeyEd25519YaoLaneReferenceFromRecovery, Qt as listConfiguredThresholdEcdsaPublicationTargets, R as awaitNearProvisioningInFlight, Rt as buildRouterAbEd25519SigningWalletSession, S as hydratePasskeyEd25519YaoLocalMaterialV1, St as parseExactEd25519SealedSessionRuntime, T as readPasskeyEd25519YaoLocalMaterialLocatorV1, Tt as resolveExactEd25519SealedSessionRuntimeForWalletSubject, U as resumePendingNearRegistrations, Ut as persistPasskeyEd25519YaoSessionForRefresh, V as scheduleEcdsaSessionPresignaturePrefill, Vt as WALLET_IFRAME_TRANSPORT_TIMING_LABEL, W as passkeyCredentialIdB64uFromAuthentication, Wt as openOrRejoinWalletCustodyEd25519V1, X as buildRecoveredWalletSessionState, Xt as RouterAbEd25519YaoHttpActivationTransportV1, Y as assertEd25519YaoWarmRecoveryDescriptorStableMaterialContinuity, Yt as RouterAbEd25519YaoClientV1, Z as parsePasskeyEd25519YaoSyncResponseV1, Zt as parseEd25519YaoRecoveryCapabilityV1, _ as setUnlockedCustodyEnvelopeUpgradeSinkV1, _t as nearEd25519YaoOperationMaterialFacts, a as registerWallet, at as joinEvmFamilyCustodyV1, b as walletCustodyCeremonyStepRunner, bt as ed25519AuthorizationIdentityMatchesRuntime, c as exactWalletSessionAuthorityIdentity, ct as recoverNearEd25519CustodyV1, d as validateExactWalletSessionAuthorization, dt as WalletSessionStatusReadScope, en as isRegistrationBenchmarkDiagnosticsEnabled, et as unlockEmailOtpEd25519YaoCapability, f as destroyUnlockedWalletEd25519ExportRootCapabilitiesV1, ft as createRelayerExactWalletSessionStatusPort, g as readUnlockedWalletEd25519ExportRootCapabilityV1, gt as buildPasskeyRouterAbEd25519WalletSessionState, h as readUnlockedEd25519ExportRootLinkingCapabilityV1, ht as buildEmailOtpRouterAbEd25519WalletSessionState, it as establishNearEd25519CustodyV1, j as configurePasskeyCustodySessionCachePersistence, jt as readExactSealedSession, k as requestEmailOtpEnrollmentChallenge, kt as listExactSealedSessionsForWallet, l as persistExactWalletSessionAuthorizationFromEcdsaBootstrap, lt as rejoinEvmFamilyCustodyV1, m as establishUnlockedWalletEd25519ExportRootCapabilityV1, mt as joinCustodyWireFromEnvelopeRecord, nt as unlockEmailOtpWalletCapabilities, ot as joinNearEd25519CustodyV1, p as dropUnlockedWalletEd25519ExportRootCapabilityReferenceV1, pt as sameRuntimePolicyScope$1, q as verifyLinkedDevicePasskeyWalletSession, qt as walletCustodyCacheEnvelopeFromRecordV1, rt as establishEvmFamilyCustodyV1, st as recoverEvmFamilyCustodyV1, t as addWalletSigner, tt as unlockEmailOtpWallet, u as validateExactWalletSessionAuthorityIdentity, ut as rejoinNearEd25519CustodyV1, v as walletCustodyCeremonyTransportFromWorkerContextV1, vt as rebindRouterAbEd25519WalletSessionStateFromExactRuntime, w as preparePasskeyEd25519YaoLocalMaterialRehydrationV1, wt as resolveExactEd25519SealedSessionRuntimeForWallet, x as ed25519YaoLocalMaterialIdentityFromWalletSession, xt as ed25519SealedRuntimeAuthorityRef, y as requestWalletCustodyCeremonyOperation, yt as resolveActiveAuthorizedRouterAbEd25519WalletSessionState, z as readNearProvisioningState, zt as requiredSigningSubjectForExactSigningLane } from "./registration-BZDzDv91.js";
-import { C as parseEnvelopeRevision, D as buildFullOwnerDelegatedWalletAuthorityV1, E as parseUnixMs, P as rejectUnknownFields, S as parseEnvelopeNonceB64u, T as parseSecp256k1CompressedPublicKeyB64u, _ as deriveEvmFamilySigningKeySlotId, a as clampThresholdSessionPolicy, b as parseEd25519PublicKeyB64u, c as resolveWalletUnlockSessionUsesFromRequestedUses, d as normalizeThresholdEd25519ParticipantIds, f as parseThresholdEd25519ParticipantsV1, g as signingRootScopeFromRuntimePolicyScope, h as normalizeRuntimePolicyScope, i as buildEd25519SessionPolicy, k as hasDelegatedWalletPermissionV1, l as THRESHOLD_ED25519_2P_PARTICIPANT_IDS, o as normalizeThresholdRuntimePolicyScope, p as coerceThemeMode$1, r as DEFAULT_UNLOCK_REMAINING_USES, t as DEFAULT_THRESHOLD_SESSION_POLICY, u as buildThresholdEd25519Participants2pV1, v as requireEvmFamilySigningKeySlotId, w as parseKeyCreationSignerSlot, x as parseEnvelopeCiphertextB64u, y as parseDigestField } from "./sessionPolicy-CHiilOAB.js";
-import { B as sameRouterAbEcdsaDerivationPublicIdentityV1, Ct as routerAbMpcMaterialActivationRefFromWire, Dt as activeWalletSessionV1RecordsEqual, E as parseRouterAbEcdsaRegistrationActivationReceiptV1, G as buildPasskeyWalletAuthAuthority, M as routerAbEcdsaDerivationActiveStateId, R as sameRouterAbEcdsaDerivationNormalSigningStateV1, S as parseRouterAbEcdsaOperationStepUpPreparationV1, Tt as sameRouterAbMpcMaterialActivationRef, U as sameRouterAbServerIdentityV1, V as sameRouterAbEcdsaRegistrationActivationReceiptV1, W as buildEmailOtpWalletAuthAuthority, X as isPasskeyWalletAuthAuthority, Y as isEmailOtpWalletAuthAuthority, Z as parseEmailOtpWalletAuthAuthority, _ as parseRouterAbEcdsaDerivationNormalSigningStateV1, _t as parseSdkEcdsaDerivationSigningRootId, et as parseWalletAuthAuthorityRef, ht as computeEcdsaDerivationRoleLocalRelayerKeyId, i as ROUTER_AB_ECDSA_DERIVATION_EXPORT_PATH, kt as parseWalletSessionOperationCredentialV1, nt as walletAuthAuthorityRef, p as parseRouterAbEcdsaCredentialFreeSessionActivationResponseV1, r as cloneAuthenticatorOptions, t as MAX_DURABLE_CLIENT_PRESIGNATURE_LIFETIME_MS, tt as walletAuthAuthoritiesMatch, v as parseRouterAbEcdsaDerivationPublicCapabilityV1, vt as parseSdkEcdsaDerivationSigningRootVersion, w as parseRouterAbEcdsaPostRegistrationSessionActivationRequestV1, wt as routerAbMpcMaterialActivationRefToWire, y as parseRouterAbEcdsaExplicitExportForwardedResponseV1, yt as parseSdkEcdsaDerivationThresholdKeyId, z as sameRouterAbEcdsaDerivationPublicCapabilityV1 } from "./ecdsaPresignLifecycle-BFOTNYCK.js";
+import { $ as unlockEmailOtpAuthorityWallet, $t as listThresholdEcdsaProvisionTargets, A as resolveGoogleEmailOtpProvider, At as readExactEd25519SealedSession, B as subscribeToNearProvisioning, Bt as resolveExactWalletSessionOperationCredential, C as persistPasskeyEd25519YaoSignerMaterialV1, Ct as resolveExactEd25519SealedSessionRuntimeForLane, D as collectEmailOtpRegistrationAuthority, Dt as deleteDurableSealedSessionRecord, E as buildRestorableMpcMaterialRefInternal, Et as acquireSigningSessionRestoreLease, F as exactPasskeyWalletAuthAuthorityRefForCredential, Ft as writeExactSealedSession, G as passkeyPrfFirstB64uFromCredential, Gt as openWalletCustodyEd25519ActiveClientV1, H as resumePendingEcdsaRegistrationFromStoredCommit, Ht as buildPasskeyEd25519RestoreMetadata, I as exactPasskeyWalletAuthMethodForCredential, It as buildCurrentSealedSessionRecord, J as verifyPasskeyWalletUnlock, Jt as ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1, K as requirePasskeyPrfFirstB64u, Kt as walletCustodyActivationFactsFromActiveClientMetadataV1, L as resolveManagedRuntimeScopeBootstrap, Lt as createDeleteDurableSealedSessionCommand, M as readPasskeyCustodySessionEnvelope, Mt as releaseSigningSessionRestoreLease, N as rememberPasskeyCustodySessionEnvelope, Nt as updateExactEd25519SealedSessionPolicy, O as requestEmailOtpChallenge, Ot as listEcdsaSealedSessionsForWallet, P as buildRecoveredCustodyEnvelopeRecord, Pt as updateExactSealedSessionPolicy, Q as passkeyEd25519YaoLaneReferenceFromRecovery, Qt as listConfiguredThresholdEcdsaPublicationTargets, R as awaitNearProvisioningInFlight, Rt as buildRouterAbEd25519SigningWalletSession, S as hydratePasskeyEd25519YaoLocalMaterialV1, St as parseExactEd25519SealedSessionRuntime, T as readPasskeyEd25519YaoLocalMaterialLocatorV1, Tt as resolveExactEd25519SealedSessionRuntimeForWalletSubject, U as resumePendingNearRegistrations, Ut as persistPasskeyEd25519YaoSessionForRefresh, V as scheduleEcdsaSessionPresignaturePrefill, Vt as WALLET_IFRAME_TRANSPORT_TIMING_LABEL, W as passkeyCredentialIdB64uFromAuthentication, Wt as openOrRejoinWalletCustodyEd25519V1, X as buildRecoveredWalletSessionState, Xt as RouterAbEd25519YaoHttpActivationTransportV1, Y as assertEd25519YaoWarmRecoveryDescriptorStableMaterialContinuity, Yt as RouterAbEd25519YaoClientV1, Z as parsePasskeyEd25519YaoSyncResponseV1, Zt as parseEd25519YaoRecoveryCapabilityV1, _ as setUnlockedCustodyEnvelopeUpgradeSinkV1, _t as nearEd25519YaoOperationMaterialFacts, a as registerWallet, at as joinEvmFamilyCustodyV1, b as walletCustodyCeremonyStepRunner, bt as ed25519AuthorizationIdentityMatchesRuntime, c as exactWalletSessionAuthorityIdentity, ct as recoverNearEd25519CustodyV1, d as validateExactWalletSessionAuthorization, dt as WalletSessionStatusReadScope, en as isRegistrationBenchmarkDiagnosticsEnabled, et as unlockEmailOtpEd25519YaoCapability, f as destroyUnlockedWalletEd25519ExportRootCapabilitiesV1, ft as createRelayerExactWalletSessionStatusPort, g as readUnlockedWalletEd25519ExportRootCapabilityV1, gt as buildPasskeyRouterAbEd25519WalletSessionState, h as readUnlockedEd25519ExportRootLinkingCapabilityV1, ht as buildEmailOtpRouterAbEd25519WalletSessionState, it as establishNearEd25519CustodyV1, j as configurePasskeyCustodySessionCachePersistence, jt as readExactSealedSession, k as requestEmailOtpEnrollmentChallenge, kt as listExactSealedSessionsForWallet, l as persistExactWalletSessionAuthorizationFromEcdsaBootstrap, lt as rejoinEvmFamilyCustodyV1, m as establishUnlockedWalletEd25519ExportRootCapabilityV1, mt as joinCustodyWireFromEnvelopeRecord, nt as unlockEmailOtpWalletCapabilities, ot as joinNearEd25519CustodyV1, p as dropUnlockedWalletEd25519ExportRootCapabilityReferenceV1, pt as sameRuntimePolicyScope, q as verifyLinkedDevicePasskeyWalletSession, qt as walletCustodyCacheEnvelopeFromRecordV1, rt as establishEvmFamilyCustodyV1, st as recoverEvmFamilyCustodyV1, t as addWalletSigner, tt as unlockEmailOtpWallet, u as validateExactWalletSessionAuthorityIdentity, ut as rejoinNearEd25519CustodyV1, v as walletCustodyCeremonyTransportFromWorkerContextV1, vt as rebindRouterAbEd25519WalletSessionStateFromExactRuntime, w as preparePasskeyEd25519YaoLocalMaterialRehydrationV1, wt as resolveExactEd25519SealedSessionRuntimeForWallet, x as ed25519YaoLocalMaterialIdentityFromWalletSession, xt as ed25519SealedRuntimeAuthorityRef, y as requestWalletCustodyCeremonyOperation, yt as resolveActiveAuthorizedRouterAbEd25519WalletSessionState, z as readNearProvisioningState, zt as requiredSigningSubjectForExactSigningLane } from "./registration-Ct_7LdGf.js";
+import { C as parseEnvelopeNonceB64u, D as parseUnixMs, E as parseSecp256k1CompressedPublicKeyB64u, I as rejectUnknownFields, O as requireParsed$1, S as parseEnvelopeCiphertextB64u, T as parseKeyCreationSignerSlot, _ as signingRootScopeFromRuntimePolicyScope, a as clampThresholdSessionPolicy, b as parseDigestField, c as resolveWalletUnlockSessionUsesFromRequestedUses, d as normalizeThresholdEd25519ParticipantIds, f as parseThresholdEd25519ParticipantsV1, g as sameRuntimePolicyScope$1, h as normalizeRuntimePolicyScope, i as buildEd25519SessionPolicy, j as hasDelegatedWalletPermissionV1, k as buildFullOwnerDelegatedWalletAuthorityV1, l as THRESHOLD_ED25519_2P_PARTICIPANT_IDS, o as normalizeThresholdRuntimePolicyScope, p as coerceThemeMode$1, r as DEFAULT_UNLOCK_REMAINING_USES, t as DEFAULT_THRESHOLD_SESSION_POLICY, u as buildThresholdEd25519Participants2pV1, v as deriveEvmFamilySigningKeySlotId, w as parseEnvelopeRevision, x as parseEd25519PublicKeyB64u, y as requireEvmFamilySigningKeySlotId } from "./sessionPolicy-DO-MkL65.js";
+import { $ as parseEmailOtpWalletAuthAuthority, B as sameRouterAbEcdsaDerivationNormalSigningStateV1, Dt as sameRouterAbMpcMaterialActivationRef, E as parseRouterAbEcdsaRegistrationActivationReceiptV1, Et as routerAbMpcMaterialActivationRefToWire, G as sameRouterAbServerIdentityV1, H as sameRouterAbEcdsaDerivationPublicIdentityV1, K as buildEmailOtpWalletAuthAuthority, M as routerAbEcdsaDerivationActiveStateId, Q as isPasskeyWalletAuthAuthority, S as parseRouterAbEcdsaOperationStepUpPreparationV1, Tt as routerAbMpcMaterialActivationRefFromWire, U as sameRouterAbEcdsaRegistrationActivationReceiptV1, V as sameRouterAbEcdsaDerivationPublicCapabilityV1, Z as isEmailOtpWalletAuthAuthority, _ as parseRouterAbEcdsaDerivationNormalSigningStateV1, _t as computeEcdsaDerivationRoleLocalRelayerKeyId, bt as parseSdkEcdsaDerivationSigningRootVersion, i as ROUTER_AB_ECDSA_DERIVATION_EXPORT_PATH, it as walletAuthAuthorityRef, jt as parseWalletSessionOperationCredentialV1, kt as activeWalletSessionV1RecordsEqual, nt as parseWalletAuthAuthorityRef, p as parseRouterAbEcdsaCredentialFreeSessionActivationResponseV1, q as buildPasskeyWalletAuthAuthority, r as cloneAuthenticatorOptions, rt as walletAuthAuthoritiesMatch, t as MAX_DURABLE_CLIENT_PRESIGNATURE_LIFETIME_MS, v as parseRouterAbEcdsaDerivationPublicCapabilityV1, w as parseRouterAbEcdsaPostRegistrationSessionActivationRequestV1, xt as parseSdkEcdsaDerivationThresholdKeyId, y as parseRouterAbEcdsaExplicitExportForwardedResponseV1, yt as parseSdkEcdsaDerivationSigningRootId } from "./ecdsaPresignLifecycle-Bfx2AQKb.js";
 import { a as buildNearEd25519MpcOperationRef, d as parseMpcWalletSigningQuotaId, g as parseWalletSessionMintId, h as parseWalletSessionId, i as buildEvmEcdsaMpcOperationRef, l as parseDeviceId, m as parseWalletSessionAuthorizationId, n as EVM_ECDSA_MPC_OPERATION_KINDS, o as buildVaultOperationRef, r as NEAR_ED25519_MPC_OPERATION_KINDS, t as CAPABILITY_KINDS } from "./capabilityKinds-hvYqa6S_.js";
 import { d as resolvePrimaryNearRpcUrl, f as alphabetizeStringify, h as sha256HexUtf8, m as sha256BytesUtf8, n as cloneChainConfig, t as chainFamilyFromNetwork, u as resolvePrimaryExplorerUrl } from "./chains-BMh3btVo.js";
 import { a as sha256DigestB64u, o as sha256Utf8DigestB64u, r as parseDigestB64u } from "./canonicalPrimitives-BTHWz80v.js";
 import { a as thresholdEcdsaChainTargetFromRequest, c as toWalletId, i as thresholdEcdsaChainTargetFromConfig, n as nearAccountRefFromAccountId, o as thresholdEcdsaChainTargetKey, s as thresholdEcdsaChainTargetsEqual, t as configuredThresholdEcdsaChainTargets, u as walletSessionRefFromSession } from "./ecdsaChainTarget-Bl-JWyuw.js";
 import { a as WALLET_AUTH_METHODS, d as WALLET_EMAIL_OTP_REGISTRATION_OPERATION, f as WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION, i as SIGNER_SOURCES, l as WALLET_EMAIL_OTP_DEVICE_LINK_OPERATION, n as SIGNER_AUTH_METHODS, p as WALLET_EMAIL_OTP_UNLOCK_OPERATION, r as SIGNER_KINDS, s as EMAIL_OTP_CHANNEL, u as WALLET_EMAIL_OTP_EXPORT_OPERATION } from "./signerDomain-IEAVrOrc.js";
 import { a as toIndexedDbChainTargetKey, t as normalizeIndexedDbAccountAddress } from "./normalization-CBt413-z.js";
-import { c as zeroizeIssuedWalletRecoveryCodes, d as deriveWalletRecoveryKeyLifecycleId, f as parseRecoveryCodeReservationId, i as walletRecoverySetRotationWireFromWorkerResultV1, o as deriveRecoveryCodeLocatorV1FromBytes, r as walletRecoveryEcdsaPossessionChallengeDigestB64uV1, s as issueWalletRecoveryCodes, t as parseWalletRecoveryEcdsaPossessionChallengeV1 } from "./wallet-recovery-Bz9qKgaL.js";
-import { A as storeWalletMixedRegistrationData$1, C as storeWalletEcdsaSignerRecords$1, D as storeWalletEmailOtpEcdsaSignerRecords$1, E as storeWalletEmailOtpEcdsaRegistrationData$1, F as getLastSelectedNearAccount, I as getNearAccountProjection, M as WALLET_CUSTODY_ED25519_MATERIAL_KEY_KIND, O as storeWalletEmailOtpEd25519RegistrationData$1, S as storeWalletEcdsaRecoverySignerRecords$1, T as storeWalletEd25519RegistrationData$1, _ as rollbackWalletEd25519SignerRegistration$1, a as getLastUser$1, b as storeAuthenticator$1, c as hasPasskeyCredential$1, g as rollbackUserRegistration$1, i as getAllUsers$1, k as storeWalletEmailOtpMixedRegistrationData$1, l as nearAuthenticatorsByAccount$1, n as finalizeWalletEcdsaRegistration$1, o as getUserBySignerSlot$1, r as finalizeWalletEd25519SignerRegistration$1, s as getWalletNearProvisioningState$1, t as activateAuthenticatedWalletState$1, v as setLastUser$1, w as storeWalletEd25519RecoveryRegistrationData$1, x as storeUserData$1, y as setWalletNearProvisioningState$1 } from "./accountLifecycle-BAGG_rbk.js";
+import { c as zeroizeIssuedWalletRecoveryCodes, d as deriveWalletRecoveryKeyLifecycleId, f as parseRecoveryCodeReservationId, i as walletRecoverySetRotationWireFromWorkerResultV1, o as deriveRecoveryCodeLocatorV1FromBytes, r as walletRecoveryEcdsaPossessionChallengeDigestB64uV1, s as issueWalletRecoveryCodes, t as parseWalletRecoveryEcdsaPossessionChallengeV1 } from "./wallet-recovery-BX61-79p.js";
+import { A as storeWalletMixedRegistrationData$1, C as storeWalletEcdsaSignerRecords$1, D as storeWalletEmailOtpEcdsaSignerRecords$1, E as storeWalletEmailOtpEcdsaRegistrationData$1, F as getLastSelectedNearAccount, I as getNearAccountProjection, M as WALLET_CUSTODY_ED25519_MATERIAL_KEY_KIND, O as storeWalletEmailOtpEd25519RegistrationData$1, S as storeWalletEcdsaRecoverySignerRecords$1, T as storeWalletEd25519RegistrationData$1, _ as rollbackWalletEd25519SignerRegistration$1, a as getLastUser$1, b as storeAuthenticator$1, c as hasPasskeyCredential$1, g as rollbackUserRegistration$1, i as getAllUsers$1, k as storeWalletEmailOtpMixedRegistrationData$1, l as nearAuthenticatorsByAccount$1, n as finalizeWalletEcdsaRegistration$1, o as getUserBySignerSlot$1, r as finalizeWalletEd25519SignerRegistration$1, s as getWalletNearProvisioningState$1, t as activateAuthenticatedWalletState$1, v as setLastUser$1, w as storeWalletEd25519RecoveryRegistrationData$1, x as storeUserData$1, y as setWalletNearProvisioningState$1 } from "./accountLifecycle-zthG08aC.js";
 import { t as toAccountId } from "./accountIds-DhIPGOSN.js";
-import { $ as parseLinkedDeviceListRequestV1, $t as parseRouterAbEd25519YaoRecoveryActivationAdmissionReceiptV1, At as serializeQrLinkedDeviceSessionPayloadV5, Bt as ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1, Ct as parseLinkedDeviceOwnerAuthorizationRequestV1, D as parseSigningWorkerParticipantRecordV1, Dt as parseLinkedDeviceTargetPreparationRequestV1, E as parseLaneParticipantBindingDigestB64u, Et as parseLinkedDeviceTargetCredentialRegistrationResultV1, F as buildWalletIdentity, Ft as parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationV1, G as computeWalletSessionInstallationReceiptDigestB64u, Gt as ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, H as LINKED_DEVICE_REQUEST_PROOF_MAX_TTL_MS_V1, Ht as ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1, I as nearAccountBindingFromRaw, It as ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, J as parseLocalAuthorityActivationFinalAckV1, K as computeWalletSessionOperationCredentialDigestB64u, N as buildPasskeyAuthScope, Nt as parseLinkedDeviceEd25519SourcePreservingReservationV1, Ot as parseLinkedDeviceTargetPreparationV1, P as buildPasskeyWalletAuthMethodBinding, Pt as parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationTupleV1, Q as parseLinkedDeviceWalletSessionCredentialDeliveryV1, R as parseRpId, St as parseLinkedDeviceEmailOtpVerificationResultV1, T as parseLaneHolderParticipantRecordV1, Tt as parseLinkedDeviceSessionClaimV1, U as computeLinkedDevicePublicKeyDigestV1, V as LINKED_DEVICE_REQUEST_PROOF_HEADER_V1, W as computeLinkedDeviceTargetPreparationDigestV1, Wt as ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1, X as assertLinkedDeviceWalletSessionCredentialDeliveryIntegrityV1, Y as parseLocalAuthorityInstallationReceiptV1, Z as parseLinkedDeviceWalletSessionCredentialDeliveryBindingV1, _ as resolveThresholdSigningRootBindingFromRecord, _n as parseLinkedDeviceEd25519ExportRootRecipientV1, _t as parseLinkedDeviceEmailOtpChallengeResultV1, a as buildEvmFamilyEcdsaWalletKey, at as buildLinkedDeviceSessionCancelClaimedRequestV1, bt as parseLinkedDeviceEmailOtpFactorReleaseEnvelopeV1, c as buildResolvedEvmFamilyEcdsaKey, cn as parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1, ct as buildLinkedDeviceTargetCredentialRegistrationV1, d as deriveEvmFamilyKeyFingerprint, dn as deriveRouterAbEd25519YaoApplicationBindingDigestV1, dt as parseLinkSessionProjectionV1, en as parseRouterAbEd25519YaoRecoveryActivationExecuteRequestV1, et as parseLinkedDeviceListResultV1, f as deriveEvmFamilyKeyFingerprintFromPublicFacts, ft as parseLinkSessionTransportEventV1, gn as parseLinkedDeviceEd25519ExportRootRecipientPublicKeyB64u, gt as parseLinkedDeviceEmailOtpChallengeResendRequestV1, hn as parseLinkedDeviceEd25519ExportRootPackageV1, ht as parseLinkedDeviceEmailOtpBaseFactorResolutionResultV1, i as buildEvmFamilyEcdsaSessionLanePolicy, it as buildLinkedDeviceApprovalV1, jt as parseCommittedAuthorityPackagesV1, k as buildEmailOtpWalletAuthMethodBinding, kt as parseQrLinkedDeviceSessionPayloadV5, lt as buildQrLinkedDeviceSessionPayloadV5, m as evmFamilyEcdsaWalletKeyToIdentity, mn as buildLinkedDeviceEd25519ExportRootTransferBindingV1, mt as parseLinkedDeviceApprovalResultV1, n as buildBaseEvmFamilyEcdsaKeyIdentity, nn as parseRouterAbEd25519YaoRecoveryActivationResultV1, nt as parseLinkedDeviceRevokeResultV1, on as parseRouterAbEd25519YaoRegistrationActivationResultV1, ot as buildLinkedDeviceSessionCancelUnclaimedRequestV1, p as deriveEvmFamilySigningKeySlotId$1, pn as LINKED_DEVICE_ED25519_EXPORT_ROOT_TRANSFER_ALG_V1, pt as parseLinkedDeviceApprovalDeliveryV1, q as parseActivateInstalledAuthorityResultV1, r as buildEvmFamilyEcdsaRecoveredMaterialLanePolicy, rn as parseRouterAbEd25519YaoRecoveryAdmissionRequestV1, s as buildPasskeyEcdsaAuthBinding, st as buildLinkedDeviceSessionClaimRequestV1, t as assertMatchingVerifiedEcdsaPublicFacts, tn as parseRouterAbEd25519YaoRecoveryActivationReceiptV1, tt as parseLinkedDeviceRevokeRequestV1, ut as parseLinkDevicePublicKeyB64u, v as resolveThresholdSigningRootBindingFromRuntimePolicyScope, vn as serializeLinkedDeviceEd25519ExportRootTransferBindingV1, vt as parseLinkedDeviceEmailOtpChallengeStartRequestV1, w as parseOwnerLaneParticipantContinuityV1, wt as parseLinkedDeviceOwnerAuthorizationSourceV1, x as toRpId, xt as parseLinkedDeviceEmailOtpVerificationGrantV1, y as toEvmFamilyEcdsaKeyHandle, yn as assertNeverLinkSessionStateV1, yt as parseLinkedDeviceEmailOtpChallengeVerifyRequestV1, zt as ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1 } from "./evmFamilyEcdsaIdentity-Co5XDcEA.js";
-import { C as computeWalletAuthMethodRevokeOperationFingerprintV1, E as parseExactAdministeredSignerManifestV1, S as buildWalletAuthMethodRecordV2, T as sameWalletAuthMethodRecordV2, d as parseWalletSignerActivationSetV1, f as replaceActiveWalletAuthorityEd25519MaterialActivationV1, n as computeWalletSignerActivationSetDigestB64u, o as isActiveRecoveredWalletAuthorityV1, r as encodeWalletSignerActivationSetV1, t as computeWalletAuthorityDigestB64u, w as parseWalletAuthMethodRecordV2 } from "./walletAuthority-BQBxgUBn.js";
+import { $ as parseLinkedDeviceListRequestV1, At as serializeQrLinkedDeviceSessionPayloadV5, Ct as parseLinkedDeviceOwnerAuthorizationRequestV1, D as parseSigningWorkerParticipantRecordV1, Dt as parseLinkedDeviceTargetPreparationRequestV1, E as parseLaneParticipantBindingDigestB64u, Et as parseLinkedDeviceTargetCredentialRegistrationResultV1, F as buildWalletIdentity, Ft as parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationV1, G as computeWalletSessionInstallationReceiptDigestB64u, H as LINKED_DEVICE_REQUEST_PROOF_MAX_TTL_MS_V1, Ht as ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1, I as nearAccountBindingFromRaw, J as parseLocalAuthorityActivationFinalAckV1, K as computeWalletSessionOperationCredentialDigestB64u, Kt as ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1, N as buildPasskeyAuthScope, Nt as parseLinkedDeviceEd25519SourcePreservingReservationV1, Ot as parseLinkedDeviceTargetPreparationV1, P as buildPasskeyWalletAuthMethodBinding, Pt as parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationTupleV1, Q as parseLinkedDeviceWalletSessionCredentialDeliveryV1, R as parseRpId, Rt as ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, St as parseLinkedDeviceEmailOtpVerificationResultV1, T as parseLaneHolderParticipantRecordV1, Tt as parseLinkedDeviceSessionClaimV1, U as computeLinkedDevicePublicKeyDigestV1, V as LINKED_DEVICE_REQUEST_PROOF_HEADER_V1, Vt as ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1, W as computeLinkedDeviceTargetPreparationDigestV1, Wt as ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1, X as assertLinkedDeviceWalletSessionCredentialDeliveryIntegrityV1, Y as parseLocalAuthorityInstallationReceiptV1, Z as parseLinkedDeviceWalletSessionCredentialDeliveryBindingV1, _ as resolveThresholdSigningRootBindingFromRecord, _n as parseLinkedDeviceEd25519ExportRootPackageV1, _t as parseLinkedDeviceEmailOtpChallengeResultV1, a as buildEvmFamilyEcdsaWalletKey, an as parseRouterAbEd25519YaoRecoveryAdmissionRequestV1, at as buildLinkedDeviceSessionCancelClaimedRequestV1, bn as serializeLinkedDeviceEd25519ExportRootTransferBindingV1, bt as parseLinkedDeviceEmailOtpFactorReleaseEnvelopeV1, c as buildResolvedEvmFamilyEcdsaKey, cn as parseRouterAbEd25519YaoRegistrationActivationResultV1, ct as buildLinkedDeviceTargetCredentialRegistrationV1, d as deriveEvmFamilyKeyFingerprint, dt as parseLinkSessionProjectionV1, et as parseLinkedDeviceListResultV1, f as deriveEvmFamilyKeyFingerprintFromPublicFacts, ft as parseLinkSessionTransportEventV1, gn as buildLinkedDeviceEd25519ExportRootTransferBindingV1, gt as parseLinkedDeviceEmailOtpChallengeResendRequestV1, hn as LINKED_DEVICE_ED25519_EXPORT_ROOT_TRANSFER_ALG_V1, ht as parseLinkedDeviceEmailOtpBaseFactorResolutionResultV1, i as buildEvmFamilyEcdsaSessionLanePolicy, in as parseRouterAbEd25519YaoRecoveryActivationResultV1, it as buildLinkedDeviceApprovalV1, jt as parseCommittedAuthorityPackagesV1, k as buildEmailOtpWalletAuthMethodBinding, kt as parseQrLinkedDeviceSessionPayloadV5, lt as buildQrLinkedDeviceSessionPayloadV5, m as evmFamilyEcdsaWalletKeyToIdentity, mt as parseLinkedDeviceApprovalResultV1, n as buildBaseEvmFamilyEcdsaKeyIdentity, nn as parseRouterAbEd25519YaoRecoveryActivationExecuteRequestV1, nt as parseLinkedDeviceRevokeResultV1, ot as buildLinkedDeviceSessionCancelUnclaimedRequestV1, p as deriveEvmFamilySigningKeySlotId$1, pn as deriveRouterAbEd25519YaoApplicationBindingDigestV1, pt as parseLinkedDeviceApprovalDeliveryV1, q as parseActivateInstalledAuthorityResultV1, qt as ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, r as buildEvmFamilyEcdsaRecoveredMaterialLanePolicy, rn as parseRouterAbEd25519YaoRecoveryActivationReceiptV1, s as buildPasskeyEcdsaAuthBinding, st as buildLinkedDeviceSessionClaimRequestV1, t as assertMatchingVerifiedEcdsaPublicFacts, tn as parseRouterAbEd25519YaoRecoveryActivationAdmissionReceiptV1, tt as parseLinkedDeviceRevokeRequestV1, u as deriveEvmFamilyEcdsaKeyHandle, un as parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1, ut as parseLinkDevicePublicKeyB64u, v as resolveThresholdSigningRootBindingFromRuntimePolicyScope, vn as parseLinkedDeviceEd25519ExportRootRecipientPublicKeyB64u, vt as parseLinkedDeviceEmailOtpChallengeStartRequestV1, w as parseOwnerLaneParticipantContinuityV1, wt as parseLinkedDeviceOwnerAuthorizationSourceV1, x as toRpId, xn as assertNeverLinkSessionStateV1, xt as parseLinkedDeviceEmailOtpVerificationGrantV1, y as toEvmFamilyEcdsaKeyHandle, yn as parseLinkedDeviceEd25519ExportRootRecipientV1, yt as parseLinkedDeviceEmailOtpChallengeVerifyRequestV1 } from "./evmFamilyEcdsaIdentity-CqGafQsI.js";
+import { C as computeWalletAuthMethodRevokeOperationFingerprintV1, E as parseExactAdministeredSignerManifestV1, S as buildWalletAuthMethodRecordV2, T as sameWalletAuthMethodRecordV2, d as parseWalletSignerActivationSetV1, f as replaceActiveWalletAuthorityEd25519MaterialActivationV1, n as computeWalletSignerActivationSetDigestB64u, o as isActiveRecoveredWalletAuthorityV1, r as encodeWalletSignerActivationSetV1, t as computeWalletAuthorityDigestB64u, w as parseWalletAuthMethodRecordV2 } from "./walletAuthority-DD9T25F6.js";
 import "./encoders-D8d07vpx.js";
 import { a as parseNearEd25519SigningKeyId, i as nearEd25519SigningKeyIdFromString, o as walletIdFromString, r as createServerAllocatedWalletId } from "./registrationIds-DLSdEKSv.js";
-import { a as buildEmailOtpEnvelopeFactor, c as buildPasskeyEnvelopeFactor, d as parsePasskeyCustodyEnvelopeRecord, h as isWalletCustodySeedBinding, i as buildActiveEnvelopeLifecycle, l as custodyEnvelopeBindingJsonV1, m as buildEd25519YaoClientRootBinding, o as buildMethodBoundEnvelopeOwnership, s as buildPasskeyCustodyEnvelopeRecord } from "./passkey-custody-Bk1jAknm.js";
-import { a as parseEcdsaRoleLocalPersistedMaterialRef, d as parseEcdsaRelayerKeyId, f as parseSigningSessionSealKeyVersion, i as parseEcdsaRoleLocalMaterialHandle, l as parseEcdsaClientVerifyingShareB64u, n as parseEcdsaRoleLocalBindingDigest, r as parseEcdsaRoleLocalDurableMaterialRef, s as parseEcdsaThresholdKeyId, u as parseEcdsaKeyHandle } from "./keyMaterialBrands-CX41hur6.js";
+import { a as buildEmailOtpEnvelopeFactor, c as buildPasskeyEnvelopeFactor, d as parsePasskeyCustodyEnvelopeRecord, h as isWalletCustodySeedBinding, i as buildActiveEnvelopeLifecycle, l as custodyEnvelopeBindingJsonV1, m as buildEd25519YaoClientRootBinding, o as buildMethodBoundEnvelopeOwnership, s as buildPasskeyCustodyEnvelopeRecord } from "./passkey-custody-UUHbC0pk.js";
+import { a as parseEcdsaRoleLocalPersistedMaterialRef, d as parseEcdsaRelayerKeyId, f as parseSigningSessionSealKeyVersion, i as parseEcdsaRoleLocalMaterialHandle, l as parseEcdsaClientVerifyingShareB64u, n as parseEcdsaRoleLocalBindingDigest, r as parseEcdsaRoleLocalDurableMaterialRef, s as parseEcdsaThresholdKeyId, u as parseEcdsaKeyHandle } from "./keyMaterialBrands-CogGAAZn.js";
 import { a as SIGNING_SESSION_EXPIRY_DETECTION_SOURCES, d as createLinkDeviceFlowEvent, f as createNearProvisioningStateChangedEvent, g as createUnlockFlowEvent, h as createSigningSessionExpiredEvent, i as RegistrationEventPhase, l as createAccountSyncFlowEvent, m as createSigningFlowEvent, n as KeyExportEventPhase, o as SigningEventPhase, p as createRegistrationFlowEvent, r as LinkDeviceEventPhase, s as UnlockEventPhase, t as AccountSyncEventPhase, u as createKeyExportFlowEvent } from "./sdkSentEvents-MqDkbQg1.js";
-import { A as openWalletAuthorityLinkedSignerMaterialV1, a as loadWalletCustodyEd25519MaterialV1, b as walletSessionAuthorizations, d as configureIndexedDB, f as createIndexedDBNonceLaneCoordinationStore, g as IndexedDbEcdsaCapabilityManifestStore, h as readEmailOtpProviderSubjectForWalletV1, i as deleteWalletCustodyEd25519MaterialV1, j as parseWalletAuthorityLinkedSignerMaterialRecordV1, k as computeWalletEcdsaKeyFactsInventoryChallengeDigestB64u, l as storeAccountKeyMaterial, m as publishEd25519YaoPublicCapabilityReferenceAndLane, n as importWalletCustodyEcdsaContinuity, o as persistWalletCustodyEd25519MaterialV1, p as IndexedDbEd25519YaoPublicCapabilityReferenceStore, s as getAccountKeyMaterial, t as copyWalletCustodyEcdsaContinuityToAuthMethod, u as IndexedDBManager, y as WalletSessionAuthorizationUpgradeRequiredError } from "./walletCustodyEcdsaContinuity-Hn4ORIbf.js";
+import { M as parseWalletAuthorityLinkedSignerMaterialRecordV1, a as loadWalletCustodyEd25519MaterialV1, b as walletSessionAuthorizations, d as configureIndexedDB, f as createIndexedDBNonceLaneCoordinationStore, g as IndexedDbEcdsaCapabilityManifestStore, h as readEmailOtpProviderSubjectForWalletV1, i as deleteWalletCustodyEd25519MaterialV1, j as openWalletAuthorityLinkedSignerMaterialV1, k as computeWalletEcdsaKeyFactsInventoryChallengeDigestB64u, l as storeAccountKeyMaterial, m as publishEd25519YaoPublicCapabilityReferenceAndLane, n as importWalletCustodyEcdsaContinuity, o as persistWalletCustodyEd25519MaterialV1, p as IndexedDbEd25519YaoPublicCapabilityReferenceStore, s as getAccountKeyMaterial, t as copyWalletCustodyEcdsaContinuityToAuthMethod, u as IndexedDBManager, y as WalletSessionAuthorizationUpgradeRequiredError } from "./walletCustodyEcdsaContinuity-CF4bv9OI.js";
 import { t as parseSignerSlot } from "./signerSlot-_ovonwVX.js";
 import "./keccak-DUL3d8SF.js";
 import { a as SIGNING_SESSION_SEAL_ALG, l as parseRouterAbEd25519NormalSigningState, n as PASSKEY_PRF_SECOND_SALT_V1, o as SIGNING_SESSION_SEAL_GROUP_ID, r as ROUTER_AB_ED25519_NORMAL_SIGNING_STATE_KIND, t as PASSKEY_PRF_FIRST_SALT_V1 } from "./signingSessionSeal-Cu-GHm6y.js";
-import { c as registrationNearEd25519BranchKey, d as sponsoredNamedNearAccountProvisioning, i as implicitNearAccountProvisioning, t as NEAR_ED25519_YAO_KEY_VERSION_V1 } from "./registrationSignerPlan-CAikVZZQ.js";
-import { r as computeAddAuthMethodIntentDigestB64u } from "./registrationIntent-D0PxwEY4.js";
+import { c as registrationNearEd25519BranchKey, d as sponsoredNamedNearAccountProvisioning, i as implicitNearAccountProvisioning, t as NEAR_ED25519_YAO_KEY_VERSION_V1 } from "./registrationSignerPlan-DhV8VAob.js";
+import { r as computeAddAuthMethodIntentDigestB64u } from "./registrationIntent-4zwk16zQ.js";
 import { c as signingLaneAuthMethod, n as SigningOperationIntent, r as SigningSessionIds, s as signingLaneAuthBindingKey } from "./types-Dx9fczU7.js";
-import { t as demoEmailOtpCodeFromDelivery } from "./challengeDelivery-Dd0586fo.js";
-import { S as parseEmailOtpWorkerIssuedSessionHandle, _ as DEFAULT_CONFIRMATION_CONFIG, a as createSigningPlannerDecisionTraceEvent, b as isWorkerSuccess, c as nearImplicitAccountFundingPort, d as mintEd25519WalletSession, f as nearOperationStepUpPreparationPort, g as buildNearMessageDisplayModel, h as buildNearDisplayModel, i as withThresholdEd25519CommitQueue, l as buildThresholdEd25519WebAuthnPrfSecretSource, m as getLastLoggedInSignerSlot, o as planSigningSession, p as deriveThresholdEd25519ClientVerifyingShareWasm, r as resolveThresholdEd25519CommitQueueKey, s as parseAndValidateRegistrationCredentialConfirmationPayload, t as signNear, u as localPrfFirstForEd25519WalletSessionMintAuthorization, v as isWorkerError, x as parseEmailOtpEcdsaExportWorkerIssuedSessionHandle, y as isWorkerProgress } from "./signNear-Bblwn2kT.js";
+import { t as demoEmailOtpCodeFromDelivery } from "./challengeDelivery-DZtopOAG.js";
+import { _ as isWorkerError, a as planSigningSession, b as parseEmailOtpEcdsaExportWorkerIssuedSessionHandle, c as buildThresholdEd25519WebAuthnPrfSecretSource, d as nearOperationStepUpPreparationPort, f as deriveThresholdEd25519ClientVerifyingShareWasm, g as DEFAULT_CONFIRMATION_CONFIG, h as buildNearMessageDisplayModel, i as createSigningPlannerDecisionTraceEvent, l as localPrfFirstForEd25519WalletSessionMintAuthorization, m as buildNearDisplayModel, o as parseAndValidateRegistrationCredentialConfirmationPayload, p as getLastLoggedInSignerSlot, r as withThresholdEd25519CommitQueue, s as nearImplicitAccountFundingPort, t as signNear, u as mintEd25519WalletSession, v as isWorkerProgress, x as parseEmailOtpWorkerIssuedSessionHandle, y as isWorkerSuccess } from "./signNear-Bmb2fj_a.js";
 import { t as executeWorkerOperation } from "./executeWorkerOperation-Cl9whMK7.js";
-import { A as thresholdEcdsaRoleLocalComputeSignatureShareFromPresignatureHandleWasm, B as SignerWorkerOperationError, C as prepareLinkedDeviceEcdsaSourceContributionWasm, D as storeLinkedDeviceEcdsaHolderMaterialWasm, E as storeEcdsaRoleLocalSigningMaterialWasm, F as thresholdEcdsaRoleLocalPresignSessionStepWasm, H as getSignerWorkerOperationCoreCode, I as thresholdEcdsaRoleLocalReservePresignatureWasm, L as verifyRouterAbEcdsaRegistrationClientProofsWasm, M as thresholdEcdsaRoleLocalListAvailablePresignaturesWasm, N as thresholdEcdsaRoleLocalPresignSessionAbortWasm, O as thresholdEcdsaRoleLocalAdmitPresignatureWasm, P as thresholdEcdsaRoleLocalPresignSessionInitFromMaterialHandleWasm, R as EcdsaDerivationClientCustomRequestType, S as prepareEcdsaClientBootstrapCommandWasm, T as signWalletRecoveryEcdsaMaterialPossessionProofWasm, U as getSignerWorkerOperationErrorCode, V as WorkerControlMessage, _ as finalizeEcdsaHolderOrdinaryExportWasm, a as resolveRouterAbEcdsaDerivationPresignaturePoolPolicy, b as openEcdsaRoleLocalSigningMaterialWasm, c as clearLinkedDeviceEcdsaHolderMaterialsWasm, d as createEcdsaHolderOrdinaryExportRequestWasm, f as createRouterAbEcdsaPostRegistrationCeremonyWasm, g as finalizeEcdsaClientBootstrapCommandWasm, h as destroyLinkedDeviceEcdsaHolderMaterialsWasm, i as clearRouterAbEcdsaDerivationClientPresignaturesForWallet, j as thresholdEcdsaRoleLocalDestroyPresignatureWasm, k as thresholdEcdsaRoleLocalCommitPresignatureWasm, l as closeRouterAbEcdsaPostRegistrationCeremonyWasm, m as destroyLinkedDeviceEcdsaHolderMaterialWasm, o as scheduleRouterAbEcdsaDerivationClientPresignaturePoolRefill, p as createRouterAbEcdsaRegistrationCeremonyWasm, r as clearAllRouterAbEcdsaDerivationClientPresignatures, s as waitForRouterAbEcdsaDerivationClientPresignaturePoolReady, u as closeRouterAbEcdsaRegistrationCeremonyWasm, v as finalizeRouterAbEcdsaExplicitExportWasm, w as reconcileCanonicalEcdsaActivationWasm, x as persistInitialCanonicalEcdsaActivationWasm, y as finalizeRouterAbEcdsaRegistrationActivationWasm, z as EcdsaPresignClientRequestType } from "./secp256k1-el9aE4Sv.js";
+import { A as thresholdEcdsaRoleLocalAdmitPresignatureWasm, B as EcdsaPresignClientRequestType, C as prepareEcdsaClientBootstrapCommandWasm, D as storeEcdsaRoleLocalSigningMaterialWasm, E as signWalletRecoveryEcdsaMaterialPossessionProofWasm, F as thresholdEcdsaRoleLocalPresignSessionInitFromMaterialHandleWasm, H as WorkerControlMessage, I as thresholdEcdsaRoleLocalPresignSessionStepWasm, L as thresholdEcdsaRoleLocalReservePresignatureWasm, M as thresholdEcdsaRoleLocalComputeSignatureShareFromPresignatureHandleWasm, N as thresholdEcdsaRoleLocalDestroyPresignatureWasm, O as storeLinkedDeviceEcdsaHolderMaterialWasm, P as thresholdEcdsaRoleLocalPresignSessionAbortWasm, R as verifyRouterAbEcdsaRegistrationClientProofsWasm, S as persistInitialCanonicalEcdsaActivationWasm, T as reconcileCanonicalEcdsaActivationWasm, U as getSignerWorkerOperationCoreCode, V as SignerWorkerOperationError, W as getSignerWorkerOperationErrorCode, _ as finalizeEcdsaClientBootstrapCommandWasm, a as clearRouterAbEcdsaDerivationClientPresignaturesForWallet, b as finalizeRouterAbEcdsaRegistrationActivationWasm, c as waitForRouterAbEcdsaDerivationClientPresignaturePoolReady, d as closeRouterAbEcdsaRegistrationCeremonyWasm, f as createEcdsaHolderOrdinaryExportRequestWasm, g as destroyLinkedDeviceEcdsaHolderMaterialsWasm, h as destroyLinkedDeviceEcdsaHolderMaterialWasm, i as clearAllRouterAbEcdsaDerivationClientPresignatures, j as thresholdEcdsaRoleLocalCommitPresignatureWasm, k as thresholdEcdsaListAvailablePresignaturesWasm, l as clearLinkedDeviceEcdsaHolderMaterialsWasm, m as createRouterAbEcdsaRegistrationCeremonyWasm, o as resolveRouterAbEcdsaDerivationPresignaturePoolPolicy, p as createRouterAbEcdsaPostRegistrationCeremonyWasm, r as createLinkedHolderClientSigningMaterialSource, s as scheduleRouterAbEcdsaDerivationClientPresignaturePoolRefill, u as closeRouterAbEcdsaPostRegistrationCeremonyWasm, v as finalizeEcdsaHolderOrdinaryExportWasm, w as prepareLinkedDeviceEcdsaSourceContributionWasm, x as openEcdsaRoleLocalSigningMaterialWasm, y as finalizeRouterAbEcdsaExplicitExportWasm, z as EcdsaDerivationClientCustomRequestType } from "./secp256k1-D-I6Gh4D.js";
 import { c as serializeRegistrationCredentialWithPRF, i as normalizeAuthenticationCredential, l as getPrfFirstB64uFromCredential, n as getPrfSecondSaltV1, o as redactedPasskeyRegistrationCredential, r as isSerializedRegistrationCredential, s as serializeAuthenticationCredentialWithPRF, t as getPrfFirstSaltV1, u as redactCredentialExtensionOutputs } from "./helpers-ZrowMnev.js";
-import { C as validateTempoFeeToken, D as requestParentDomainWebAuthn, E as executeWebAuthnWithParentFallbacksSafari, S as requireTempoFeeTokenPreferenceSigningRequest, T as WindowParentDomainWebAuthnClient, b as parseTempoEvmAddress, d as walletIframeUnlockRequestFromLoginHooks, f as needsExplicitActivation, p as OverlayController, r as parseWalletIframeExactSessionIdentity, x as readTempoFeeTokenPreference, y as buildTempoSetUserTokenRequest } from "./exactSessionState-CiD5fBEs.js";
-import { C as buildEcdsaRoleLocalPublicFacts, D as parseEcdsaRoleLocalReadyRecord, E as ecdsaRoleLocalReadyRecordStorageKeyFacts, S as buildEcdsaRoleLocalPasskeyAuthMethod, T as ecdsaRoleLocalReadyRecordStorageKey, k as serializeEcdsaRoleLocalReadyRecord, w as ecdsaRoleLocalReadyRecordMatchesInput, x as buildEcdsaRoleLocalEmailOtpAuthMethod, y as routerAbEcdsaDerivationPublicCapabilitiesEqual } from "./ecdsaCapabilityManifest-kzO_fW09.js";
+import { C as validateTempoFeeToken, D as requestParentDomainWebAuthn, E as executeWebAuthnWithParentFallbacksSafari, S as requireTempoFeeTokenPreferenceSigningRequest, T as WindowParentDomainWebAuthnClient, b as parseTempoEvmAddress, d as walletIframeUnlockRequestFromLoginHooks, f as needsExplicitActivation, p as OverlayController, r as parseWalletIframeExactSessionIdentity, x as readTempoFeeTokenPreference, y as buildTempoSetUserTokenRequest } from "./exactSessionState-LWDUXydN.js";
+import { C as buildEcdsaRoleLocalPublicFacts, D as parseEcdsaRoleLocalReadyRecord, E as ecdsaRoleLocalReadyRecordStorageKeyFacts, S as buildEcdsaRoleLocalPasskeyAuthMethod, T as ecdsaRoleLocalReadyRecordStorageKey, k as serializeEcdsaRoleLocalReadyRecord, w as ecdsaRoleLocalReadyRecordMatchesInput, x as buildEcdsaRoleLocalEmailOtpAuthMethod, y as routerAbEcdsaDerivationPublicCapabilitiesEqual } from "./ecdsaCapabilityManifest-DuMs0VtU.js";
 import { i as buildNearAccountRefs } from "./profileAccountProjection-uZVJuBvS.js";
-import { A as parseProfileContinuityEcdsaWarmKey, D as startWalletAddAuthMethod, S as requestAddAuthMethodEmailOtpChallenge, T as revokeWalletAuthMethod, _ as finalizeWalletAddAuthMethod, a as buildRehydrateMaterialActivationHydrationPlan, g as fetchWalletEcdsaKeyFactsInventoryWithWebAuthn, h as fetchWalletEcdsaKeyFactsInventoryWithOperationCredential, i as buildBlockedMpcCapabilityHydrationPlan, k as activateRouterAbEcdsaPostRegistrationSession, l as computeWalletCustodyAdminChallengeDigest, n as nearEd25519YaoRuntimeRef, o as buildUseLiveRuntimeHydrationPlan, p as createWalletAddAuthMethodIntent, r as resolveNearEd25519YaoCapabilityHydrationV1, t as nearEd25519YaoMaterialActivationFromMetadata, y as fundImplicitNearAccountForTesting } from "./nearEd25519YaoMaterialActivation-DPb0s3hQ.js";
+import { A as activateRouterAbEcdsaPostRegistrationSession, C as requestAddAuthMethodEmailOtpChallenge, E as revokeWalletAuthMethod, O as startWalletAddAuthMethod, _ as fetchWalletEcdsaKeyFactsInventoryWithWebAuthn, a as buildRehydrateMaterialActivationHydrationPlan, b as fundImplicitNearAccountForTesting, g as fetchWalletEcdsaKeyFactsInventoryWithOperationCredential, i as buildBlockedMpcCapabilityHydrationPlan, j as parseProfileContinuityEcdsaWarmKey, l as hasExactKeys, m as createWalletAddAuthMethodIntent, n as nearEd25519YaoRuntimeRef, o as buildUseLiveRuntimeHydrationPlan, r as resolveNearEd25519YaoCapabilityHydrationV1, t as nearEd25519YaoMaterialActivationFromMetadata, u as computeWalletCustodyAdminChallengeDigest, v as finalizeWalletAddAuthMethod } from "./nearEd25519YaoMaterialActivation-B5GecIvq.js";
 import { n as buildRelayerJsonPostRequestInit, r as normalizeRelayerBaseUrl, t as buildBearerAuthorizationHeader } from "./relayerHttp-VC8Holz1.js";
-import { a as exactEd25519SigningLaneIdentity, c as exactSigningLaneIdentityKey, f as nearEd25519SignerBindingFromBoundaryFields, h as parseExactEd25519ExportMaterialIdentity, i as exactEd25519ExportMaterialIdentity, l as exactSigningLaneIdentityMatches, m as parseExactEcdsaSigningLaneIdentity, n as exactEcdsaSigningLaneIdentity, p as nearProtocolProjectionFromExactLane, t as buildEvmFamilyEcdsaSignerBinding, u as exactSigningLaneWalletId } from "./exactSigningLaneIdentity-DQeqPMST.js";
-import { _ as isEmailOtpPendingSingleUseAuthContext, a as nearEd25519SessionMatchesMaterialActivation, b as laneCandidateStateFromRuntimePolicy, d as buildEmailOtpAuthContextForWalletAuthMethod, f as emailOtpAuthContextConsumedAtMs, g as emailOtpAuthContextRetention, h as emailOtpAuthContextProviderUserId, i as classifyNearEd25519WalletSessionAuthorization, m as emailOtpAuthContextProvider, n as buildAuthorizationRequiredNearEd25519YaoSigningPreparation, p as emailOtpAuthContextEmailHashHex, r as buildAuthorizedNearEd25519YaoSigningPreparation, t as buildActiveNearEd25519WalletSessionAuthorization, u as buildEmailOtpAuthContextForCanonicalWallet, v as isEmailOtpSessionAuthContext, x as selectedEcdsaLane } from "./nearEd25519YaoSigningPreparation-BeD-SmbK.js";
+import { a as exactEd25519SigningLaneIdentity, c as exactSigningLaneIdentityKey, f as nearEd25519SignerBindingFromBoundaryFields, h as parseExactEd25519ExportMaterialIdentity, i as exactEd25519ExportMaterialIdentity, l as exactSigningLaneIdentityMatches, m as parseExactEcdsaSigningLaneIdentity, n as exactEcdsaSigningLaneIdentity, p as nearProtocolProjectionFromExactLane, t as buildEvmFamilyEcdsaSignerBinding, u as exactSigningLaneWalletId } from "./exactSigningLaneIdentity-m6uTXV_A.js";
+import { _ as isEmailOtpPendingSingleUseAuthContext, a as nearEd25519SessionMatchesMaterialActivation, b as laneCandidateStateFromRuntimePolicy, d as buildEmailOtpAuthContextForWalletAuthMethod, f as emailOtpAuthContextConsumedAtMs, g as emailOtpAuthContextRetention, h as emailOtpAuthContextProviderUserId, i as classifyNearEd25519WalletSessionAuthorization, m as emailOtpAuthContextProvider, n as buildAuthorizationRequiredNearEd25519YaoSigningPreparation, p as emailOtpAuthContextEmailHashHex, r as buildAuthorizedNearEd25519YaoSigningPreparation, t as buildActiveNearEd25519WalletSessionAuthorization, u as buildEmailOtpAuthContextForCanonicalWallet, v as isEmailOtpSessionAuthContext, x as selectedEcdsaLane } from "./nearEd25519YaoSigningPreparation-CdOT5RuC.js";
 import { a as throwEmailOtpSigningSessionAuthStateError, i as emailOtpEcdsaBootstrapRouteAuthFromRoutePlan, n as buildEmailOtpSigningSessionRoutePlan, o as buildEmailOtpRoutePlan, r as buildFreshEmailOtpRoutePlan, t as assertEmailOtpSigningSessionAuthLane } from "./routePlan-D59x5xzQ.js";
 import { n as generateSessionId, t as cacheCredentialBoundarySetupExportPrfFirst } from "./prfCache-wqQSjYLn.js";
-import { l as emitSigningSessionFlowFailure, u as emitSigningSessionFlowTrace } from "./trace-rHe0wz7q.js";
+import { l as emitSigningSessionFlowFailure, u as emitSigningSessionFlowTrace } from "./trace-DKLQZvec.js";
 import { t as webAuthnPromptCoordinator } from "./webauthnPromptCoordinator-L96oVvLz.js";
 import { a as toActionArgsWasm, t as ActionType } from "./actions-CCvThiKe.js";
-import { A as UserConfirmMessageType, C as getSignIntentDigestSubject, E as getTxCount, M as normalizeConfirmationConfig, S as getNearAccountId, T as getSigningAuthMode, _ as sendConfirmProgress, a as formatNearAccountFundingProgressNotice, b as assertSigningRequestContext, c as collectAuthenticationCredentialForChallengeB64u, d as collectAuthenticationCredentialForWalletChallengeB64u, f as ERROR_MESSAGES, g as sanitizeForPostMessage, h as parseTransactionSummary, i as formatNearAccountFundingNotice, j as UserConfirmationType, m as isUserCancelledUserConfirm, n as createConfirmTxFlowAdapters, o as __isWalletIframeHostMode, p as createUserConfirmScopedWorker, r as mountConfirmUI, s as __setWalletIframeHostMode, t as createConfirmSession, v as sendConfirmResponse, w as getSignTransactionPayload, x as getIntentDigest, y as assertNoForbiddenMainThreadSigningSecrets } from "./adapters-B4JeK1nJ.js";
+import { A as UserConfirmMessageType, C as getSignIntentDigestSubject, E as getTxCount, M as normalizeConfirmationConfig, S as getNearAccountId, T as getSigningAuthMode, _ as sendConfirmProgress, a as formatNearAccountFundingProgressNotice, b as assertSigningRequestContext, c as collectAuthenticationCredentialForChallengeB64u, d as collectAuthenticationCredentialForWalletChallengeB64u, f as ERROR_MESSAGES, g as sanitizeForPostMessage, h as parseTransactionSummary, i as formatNearAccountFundingNotice, j as UserConfirmationType, m as isUserCancelledUserConfirm, n as createConfirmTxFlowAdapters, o as __isWalletIframeHostMode, p as createUserConfirmScopedWorker, r as mountConfirmUI, s as __setWalletIframeHostMode, t as createConfirmSession, v as sendConfirmResponse, w as getSignTransactionPayload, x as getIntentDigest, y as assertNoForbiddenMainThreadSigningSecrets } from "./adapters-Dli9XAZp.js";
 import { i as orderActionForDigest, n as computeUiIntentDigestFromNep413, r as computeUiIntentDigestFromTxs } from "./intentDigest-CvOSNlCH.js";
-import { r as showWalletRecoveryCodesUi, t as pendingWalletRecoveryCodeBackupRepository } from "./pendingWalletRecoveryCodeBackup-DLzBb3WQ.js";
+import { r as showWalletRecoveryCodesUi, t as pendingWalletRecoveryCodeBackupRepository } from "./pendingWalletRecoveryCodeBackup-BWluQMbt.js";
 import { t as MinimalNearClient } from "./NearClient-DY4NfHeD.js";
 import { t as createEvmClient } from "./EvmClient-f3gUhS2L.js";
-import { n as resolveAppearanceTheme, o as resolveThemePalette } from "./configHelpers-vAQCzUD0.js";
+import { n as resolveAppearanceTheme, o as resolveThemePalette } from "./configHelpers-D1EqxVxg.js";
 import { n as getDefaultCspNonce, t as createCspStylesheetManager } from "./csp-stylesheet-btENhsNp.js";
-import { r as buildConfigsFromEnv } from "./defaultConfigs-B3c16M_8.js";
+import { r as buildConfigsFromEnv } from "./defaultConfigs-D_33pPT9.js";
 import { t as createNonceCoordinator } from "./NonceCoordinator-4XWPhYww.js";
-import { i as resumePendingWalletRecoveries } from "./walletRecoveryCommit-sjGNTHUj.js";
-import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-D7Aey0FD.js";
-import { A as authorizeEvmFamilyEcdsaSigningCapability, B as listLinkedEcdsaHolderRuntimesV1, C as buildExactPasskeyOwnerLaneScope, D as buildPersistedEcdsaRoleLocalMaterial, E as resolveExactWalletAuthAuthority$1, F as signingAuthorizationFromPreprocessing, H as resolveLinkedEcdsaHolderRuntimeV1, I as ensureSealedRefreshStartupParityForThresholdEcdsaBootstrap, L as isRetryableSealedRefreshCapabilityFetchError, M as buildEcdsaPreprocessingCapability, N as buildExactEcdsaDirectCapabilityRuntime, O as ecdsaRoleLocalPersistedMaterialSource, P as buildExactEvmFamilyWalletSessionAuthorization, R as clearLinkedEcdsaHolderRuntimesV1, S as buildExactLinkedEmailOtpOwnerLaneScope, T as resolveExactOwnerLaneScope, V as removeLinkedEcdsaHolderRuntimeV1, _ as resolveEmailOtpEcdsaSigningSessionAuth, a as reportTempoFinalized, b as withThresholdEcdsaSigningQueue, c as resolveActiveWalletAuthorityEcdsaRuntimeV1, d as createActiveEcdsaCapabilityRuntimeForChainResolver, f as createActiveEcdsaCapabilityRuntimeResolver, g as requestEmailOtpSigningSessionChallenge$1, h as refreshEmailOtpSigningSession$1, i as reportTempoDroppedOrReplaced, j as buildCanonicalEvmFamilyEcdsaSigningCapability, k as resolveEcdsaRoleLocalMaterial, l as issueEcdsaOperationStepUpAuthorization, m as resolveExactEcdsaSealedRuntime, n as reportTempoBroadcastAccepted, o as signEvmFamily, p as resolveExactEcdsaCapabilityRuntime, r as reportTempoBroadcastRejected, t as reconcileTempoNonceLane, u as prepareEcdsaOperationStepUp, v as clearThresholdEcdsaSigningQueue, w as isOwnerRelinkRequiredError, x as buildExactEcdsaPasskeyOwnerLaneScope, y as resolveThresholdEcdsaSigningQueueKey, z as installLinkedEcdsaHolderRuntimeV1 } from "./signEvmFamily-e4IWWsZs.js";
+import { i as resumePendingWalletRecoveries } from "./walletRecoveryCommit-AI1AtIRP.js";
+import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-B7orgq5Z.js";
+import { A as buildCanonicalEvmFamilyEcdsaSigningCapability, B as removeLinkedEcdsaHolderRuntimeV1, C as isOwnerRelinkRequiredError, D as ecdsaRoleLocalPersistedMaterialSource, E as buildPersistedEcdsaRoleLocalMaterial, F as ensureSealedRefreshStartupParityForThresholdEcdsaBootstrap, I as isRetryableSealedRefreshCapabilityFetchError, L as clearLinkedEcdsaHolderRuntimesV1, M as buildExactEcdsaDirectCapabilityRuntime, N as buildExactEvmFamilyWalletSessionAuthorization, O as resolveEcdsaRoleLocalMaterial, P as signingAuthorizationFromPreprocessing, R as installLinkedEcdsaHolderRuntimeV1, S as buildExactPasskeyOwnerLaneScope, T as resolveExactWalletAuthAuthority$1, V as resolveLinkedEcdsaHolderRuntimeV1, _ as requestEmailOtpSigningSessionChallenge$1, a as reportTempoFinalized, b as buildExactEcdsaPasskeyOwnerLaneScope, c as resolveActiveWalletAuthorityEcdsaRuntimeV1, d as createActiveEcdsaCapabilityRuntimeForChainResolver, f as createActiveEcdsaCapabilityRuntimeResolver, g as refreshEmailOtpSigningSession$1, h as buildRouterAbEcdsaDerivationSigningMaterialRef, i as reportTempoDroppedOrReplaced, j as buildEcdsaPreprocessingCapability, k as authorizeEvmFamilyEcdsaSigningCapability, l as issueEcdsaOperationStepUpAuthorization, m as resolveExactEcdsaSealedRuntime, n as reportTempoBroadcastAccepted, o as signEvmFamily, p as resolveExactEcdsaCapabilityRuntime, r as reportTempoBroadcastRejected, t as reconcileTempoNonceLane, u as prepareEcdsaOperationStepUp, v as resolveEmailOtpEcdsaSigningSessionAuth, w as resolveExactOwnerLaneScope, x as buildExactLinkedEmailOtpOwnerLaneScope, y as withThresholdEcdsaSigningQueue, z as listLinkedEcdsaHolderRuntimesV1 } from "./signEvmFamily-C3C97Th-.js";
 import { n as SigningAuthPlanKind } from "./promptText-CuRa_ivd.js";
 import { C as isSigningOperationReviewApprovedStateKind, d as fullWalletLoginRequired, f as invalidWalletSigningMaterial, m as walletSigningMaterialBlockError, p as isWalletSigningStateFailure, v as SigningOperationInteractionEventKind } from "./operationFingerprint-C8Trar4R.js";
-import { f as WalletSessionFailureError, g as WALLET_SESSION_FAILURE_CODES, h as walletSessionFailureFromError, m as walletSessionFailureFromCode } from "./routerAbNormalSigning-fhvpDtmY.js";
-import { _ as parseWalletSessionAuthorizationBoundary, d as availableEd25519SigningLaneAuthMethod, f as ecdsaAvailableLaneCandidatesForTarget, g as readAvailableSigningLanes, h as isConcreteAvailableSigningLane, l as activeWalletAuthorityAvailableLaneFromProjection, m as ecdsaAvailableLaneIdentityKey, p as ecdsaAvailableLaneForTarget, u as availableEcdsaSigningLaneAuthMethod, v as requireAuthoritativeExpiredWalletSessionAuthorizationBoundary } from "./transactionState-DP9O8F6f.js";
+import { f as WalletSessionFailureError, g as WALLET_SESSION_FAILURE_CODES, h as walletSessionFailureFromError, m as walletSessionFailureFromCode } from "./routerAbNormalSigning-CVFEOZ2m.js";
+import { S as resolveThresholdCommitQueueKey, _ as ed25519DurableMaterialLocator, b as requireAuthoritativeExpiredWalletSessionAuthorizationBoundary, d as availableEd25519SigningLaneAuthMethod, f as ecdsaAvailableLaneCandidatesForTarget, g as readAvailableSigningLanes, h as isConcreteAvailableSigningLane, l as activeWalletAuthorityAvailableLaneFromProjection, m as ecdsaAvailableLaneIdentityKey, p as ecdsaAvailableLaneForTarget, u as availableEcdsaSigningLaneAuthMethod, v as materialActivationKey, x as clearThresholdCommitQueue, y as parseWalletSessionAuthorizationBoundary } from "./transactionState-CJ4U8pcl.js";
 import { t as bytesToHex } from "./bytes-qKxKn4gg.js";
-import { c as createEvmNonceBackend, i as PENDING_CHALLENGE_B64U, o as clearIntentDigestPreparation, s as consumeIntentDigestPreparation, t as EvmFamilyEcdsaMaterialSupersededError } from "./signingFlow-rZfPegH9.js";
-import { n as removeExportViewerHostIfPresent, t as isExportViewerSessionOpen } from "./export-viewer-host-ZqA2Yz3H.js";
+import { c as createEvmNonceBackend, i as PENDING_CHALLENGE_B64U, o as clearIntentDigestPreparation, s as consumeIntentDigestPreparation, t as EvmFamilyEcdsaMaterialSupersededError } from "./signingFlow-SZ8t_lxv.js";
+import { n as removeExportViewerHostIfPresent, t as isExportViewerSessionOpen } from "./export-viewer-host-rWMSQQMP.js";
 import { i as observeTransactionLifecycleReport, n as failTransactionActivity, r as observeTransactionActivity, t as beginTransactionActivity } from "./transaction-activity-CSMCveBn.js";
 import "./jsxRuntime.module-CuH5ZEIA.js";
-import { t as handleRegistrationFlow } from "./registration-BzVHODuD.js";
+import { t as handleRegistrationFlow } from "./registration-DHERU8R_.js";
 import { i as rotateWalletRecoverySet, n as readWalletRecoveryCodeStatus, r as requestWalletCustodyEmailOtpChallenge, t as acknowledgeWalletRecoveryBackup } from "./walletRecoveryRotate-BgLlW5ih.js";
 //#region src/core/walletRuntimePaths/workers.ts
 /**
@@ -1344,25 +1344,6 @@ async function recoverWalletCustodyManifestV1(input) {
 	};
 }
 //#endregion
-//#region src/core/signingEngine/session/sealedRecovery/materialActivationKey.ts
-function ed25519DurableMaterialLocator(args) {
-	return {
-		kind: "ed25519_durable_material",
-		authMethod: args.authMethod,
-		materialActivation: args.materialActivation
-	};
-}
-function materialActivationKey(activation) {
-	return [
-		activation.activationId,
-		activation.capability,
-		activation.materialOwner,
-		activation.keyBinding,
-		activation.lifecycleBinding,
-		activation.signingWorker
-	].map((part) => encodeURIComponent(String(part))).join(":");
-}
-//#endregion
 //#region src/core/signingEngine/session/passkey/ed25519YaoWarmRecovery.ts
 function requirePositiveInteger$2(value, label) {
 	if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1) throw new Error(`${label} must be a positive integer`);
@@ -1515,9 +1496,6 @@ async function parseJsonResponseOrNull(response) {
 		return null;
 	}
 }
-function sameRuntimePolicyScope(left, right) {
-	return left.orgId === right.orgId && left.projectId === right.projectId && left.envId === right.envId && left.signingRootVersion === right.signingRootVersion;
-}
 async function parseWarmRecoveryDescriptor(args) {
 	const record = args.record;
 	const response = args.response;
@@ -1539,7 +1517,7 @@ async function parseWarmRecoveryDescriptor(args) {
 	const quotaId = parseMpcWalletSigningQuotaId(response.quotaId);
 	const capability = parseEd25519YaoRecoveryCapabilityV1(response.capability);
 	const walletSessionToken = args.authorization.operationCredential.token;
-	if (!walletSessionId.ok || !quotaId.ok || args.expectedAuthorityRef.walletId !== record.walletId || String(walletSessionId.value) !== String(args.authorization.operationCredential.walletSessionId) || String(quotaId.value) !== String(args.authorization.record.quotaId) || !routerAbNormalSigning || walletId !== record.walletId || nearAccountId !== restore.nearAccountId || nearEd25519SigningKeyId !== restore.nearEd25519SigningKeyId || signerSlot !== restore.signerSlot || thresholdSessionId !== String(args.expectedThresholdSessionId) || !walletSessionToken || signingWorkerId !== restore.relayerKeyId || signingWorkerId !== restore.routerAbNormalSigning.signingWorkerId || routerAbNormalSigning.signingWorkerId !== signingWorkerId || record.expiresAtMs > thresholdExpiresAtMs || participantIds[0] !== restore.participantIds[0] || participantIds[1] !== restore.participantIds[1] || !sameRuntimePolicyScope(responseRuntimePolicyScope, sealedRuntimePolicyScope)) throw new Error("warm recovery bootstrap does not match the exact sealed Ed25519 lane");
+	if (!walletSessionId.ok || !quotaId.ok || args.expectedAuthorityRef.walletId !== record.walletId || String(walletSessionId.value) !== String(args.authorization.operationCredential.walletSessionId) || String(quotaId.value) !== String(args.authorization.record.quotaId) || !routerAbNormalSigning || walletId !== record.walletId || nearAccountId !== restore.nearAccountId || nearEd25519SigningKeyId !== restore.nearEd25519SigningKeyId || signerSlot !== restore.signerSlot || thresholdSessionId !== String(args.expectedThresholdSessionId) || !walletSessionToken || signingWorkerId !== restore.relayerKeyId || signingWorkerId !== restore.routerAbNormalSigning.signingWorkerId || routerAbNormalSigning.signingWorkerId !== signingWorkerId || record.expiresAtMs > thresholdExpiresAtMs || participantIds[0] !== restore.participantIds[0] || participantIds[1] !== restore.participantIds[1] || !sameRuntimePolicyScope$1(responseRuntimePolicyScope, sealedRuntimePolicyScope)) throw new Error("warm recovery bootstrap does not match the exact sealed Ed25519 lane");
 	if (!signingRootScopeFromRuntimePolicyScope(responseRuntimePolicyScope)) throw new Error("warm recovery bootstrap signing-root scope is invalid");
 	if (!walletSessionToken) throw new Error("[SigningEngine][near] active Wallet Session authorization is unavailable");
 	const descriptor = {
@@ -1816,10 +1794,6 @@ function signingLaneRecordFields(laneKind) {
 		case "delegated_execution": return DELEGATED_SIGNING_LANE_FIELDS;
 	}
 }
-function requireResult(result, label) {
-	if (result.ok) return result.value;
-	throw new Error(`${label} ${result.error.message}`);
-}
 function parseRequiredDomainId(raw, label) {
 	if (raw === void 0 || raw === null) throw new Error(`${label} is required`);
 	if (typeof raw !== "string") throw new Error(`${label} must be a string`);
@@ -1919,12 +1893,12 @@ function parseSigningLaneLifecycleState(raw, label) {
 function parseSigningLaneReferenceFields(record, label) {
 	if (record.kind !== "signing_lane_reference_v1") throw new Error(`${label}.kind must be signing_lane_reference_v1`);
 	return buildSigningLaneReference({
-		walletId: requireResult(parseWalletId(record.walletId), `${label}.walletId`),
-		walletKeyId: requireResult(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
-		laneId: requireResult(parseSigningLaneId(record.laneId), `${label}.laneId`),
-		laneShareEpoch: requireResult(parseLaneShareEpoch(record.laneShareEpoch), `${label}.laneShareEpoch`),
+		walletId: requireParsed$1(parseWalletId(record.walletId), `${label}.walletId`),
+		walletKeyId: requireParsed$1(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
+		laneId: requireParsed$1(parseSigningLaneId(record.laneId), `${label}.laneId`),
+		laneShareEpoch: requireParsed$1(parseLaneShareEpoch(record.laneShareEpoch), `${label}.laneShareEpoch`),
 		laneKind: parseSigningLaneKind(record.laneKind, `${label}.laneKind`),
-		participantBindingDigestB64u: requireResult(parseLaneParticipantBindingDigestB64u(record.participantBindingDigestB64u), `${label}.participantBindingDigestB64u`)
+		participantBindingDigestB64u: requireParsed$1(parseLaneParticipantBindingDigestB64u(record.participantBindingDigestB64u), `${label}.participantBindingDigestB64u`)
 	});
 }
 function parseSigningLaneRecordCommon(record, label) {
@@ -1943,7 +1917,7 @@ function parseOwnerAuthSigningLaneRecordBase(record, label) {
 	const walletAuthMethodId = parseWalletAuthMethodId(record.walletAuthMethodId);
 	return {
 		...common,
-		walletAuthMethodId: requireResult(walletAuthMethodId, `${label}.walletAuthMethodId`),
+		walletAuthMethodId: requireParsed$1(walletAuthMethodId, `${label}.walletAuthMethodId`),
 		ownerParticipantContinuity: parseOwnerLaneParticipantContinuityV1(record.ownerParticipantContinuity, `${label}.ownerParticipantContinuity`)
 	};
 }
@@ -2139,8 +2113,8 @@ function parseWalletKeyRecord(raw, label = "walletKeyRecord") {
 	if (record.keyFamily === "ed25519") {
 		rejectUnknownFields(record, ED25519_WALLET_KEY_FIELDS, label, ALL_WALLET_KEY_FIELDS);
 		return buildEd25519WalletKeyRecord({
-			walletId: requireResult(parseWalletId(record.walletId), `${label}.walletId`),
-			walletKeyId: requireResult(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
+			walletId: requireParsed$1(parseWalletId(record.walletId), `${label}.walletId`),
+			walletKeyId: requireParsed$1(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
 			walletKeyVersion: parseWalletKeyVersion(record.walletKeyVersion, `${label}.walletKeyVersion`),
 			nearEd25519SigningKeyId: parseNearEd25519SigningKeyId(record.nearEd25519SigningKeyId),
 			keyCreationSignerSlot: parseKeyCreationSignerSlot(record.keyCreationSignerSlot, `${label}.keyCreationSignerSlot`),
@@ -2151,8 +2125,8 @@ function parseWalletKeyRecord(raw, label = "walletKeyRecord") {
 	if (record.keyFamily === "ecdsa_secp256k1") {
 		rejectUnknownFields(record, EVM_WALLET_KEY_FIELDS, label, ALL_WALLET_KEY_FIELDS);
 		return buildEvmFamilyWalletKeyRecord({
-			walletId: requireResult(parseWalletId(record.walletId), `${label}.walletId`),
-			walletKeyId: requireResult(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
+			walletId: requireParsed$1(parseWalletId(record.walletId), `${label}.walletId`),
+			walletKeyId: requireParsed$1(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
 			walletKeyVersion: parseWalletKeyVersion(record.walletKeyVersion, `${label}.walletKeyVersion`),
 			evmFamilySigningKeySlotId: requireEvmFamilySigningKeySlotId(record.evmFamilySigningKeySlotId, `${label}.evmFamilySigningKeySlotId`),
 			thresholdPublicKey33B64u: parseSecp256k1CompressedPublicKeyB64u(record.thresholdPublicKey33B64u, `${label}.thresholdPublicKey33B64u`),
@@ -2181,7 +2155,7 @@ function parseSigningLaneRecord(raw, label = "signingLaneRecord") {
 				holderParticipant: base.holderParticipant,
 				serverParticipant: base.serverParticipant,
 				lifecycle: base.lifecycle,
-				linkedDeviceId: requireResult(parseLinkedDeviceId(record.linkedDeviceId), `${label}.linkedDeviceId`)
+				linkedDeviceId: requireParsed$1(parseLinkedDeviceId(record.linkedDeviceId), `${label}.linkedDeviceId`)
 			});
 		}
 		case "delegated_execution": {
@@ -2721,26 +2695,42 @@ function exactEcdsaParticipantIds(value) {
 	if (!Number.isSafeInteger(first) || !Number.isSafeInteger(second) || first <= 0 || second <= 0 || first === second) throw new Error("[SigningEngine][ecdsa-export] ECDSA participant set is invalid");
 	return [first, second];
 }
-function resolveCanonicalEmailOtpEcdsaExportMaterialForLane(args) {
-	const { exportLane } = args;
+function requireCanonicalEcdsaExportLane(args) {
+	const { exportLane, label } = args;
 	const capability = exportLane.capability;
-	if (!isEmailOtpWalletAuthAuthority(capability.authority)) throw new Error("[SigningEngine][ecdsa-export] Email OTP capability authority mismatch");
 	const signer = capability.manifest.signer;
-	if (signer.walletId !== exportLane.key.walletId || !signer.scope.targetMemberships.some((target) => thresholdEcdsaChainTargetsEqual(target, exportLane.chainTarget))) throw new Error("[SigningEngine][ecdsa-export] Email OTP capability target mismatch");
-	if (exportLane.laneIdentity.auth.kind !== "email_otp" || exportLane.laneIdentity.auth.providerSubjectId !== capability.authority.factor.providerUserId) throw new Error("[SigningEngine][ecdsa-export] Email OTP capability auth mismatch");
-	if (!mpcMaterialActivationRefsEqual(capability.manifest.activation.materialActivation, exportLane.laneIdentity.signer.materialActivation)) throw new Error("[SigningEngine][ecdsa-export] Email OTP material activation mismatch");
+	if (signer.walletId !== exportLane.key.walletId || !signer.scope.targetMemberships.some((target) => thresholdEcdsaChainTargetsEqual(target, exportLane.chainTarget))) throw new Error(`[SigningEngine][ecdsa-export] ${label} capability target mismatch`);
+	if (!args.authMatches()) throw new Error(`[SigningEngine][ecdsa-export] ${label} capability auth mismatch`);
+	if (!mpcMaterialActivationRefsEqual(capability.manifest.activation.materialActivation, exportLane.laneIdentity.signer.materialActivation)) throw new Error(`[SigningEngine][ecdsa-export] ${label} material activation mismatch`);
 	assertMatchingVerifiedEcdsaPublicFacts({
 		expected: exportLane.publicFacts,
-		actual: capability.manifest.signer.registeredPublicFacts,
-		context: "canonical Email OTP export lane"
+		actual: signer.registeredPublicFacts,
+		context: `canonical ${label} export lane`
 	});
 	const materialFacts = capability.material.publicFacts;
-	if (materialFacts.walletId !== signer.walletId || String(materialFacts.keyHandle) !== String(exportLane.publicFacts.keyHandle) || String(materialFacts.groupPublicKey33B64u) !== String(exportLane.publicFacts.publicKeyB64u) || String(materialFacts.ethereumAddress) !== String(exportLane.publicFacts.thresholdOwnerAddress) || materialFacts.participantIds.length !== exportLane.publicFacts.participantIds.length || materialFacts.participantIds.some((participantId, index) => participantId !== exportLane.publicFacts.participantIds[index])) throw new Error("[SigningEngine][ecdsa-export] canonical Email OTP export material mismatch");
+	if (materialFacts.walletId !== signer.walletId || String(materialFacts.keyHandle) !== String(exportLane.publicFacts.keyHandle) || String(materialFacts.groupPublicKey33B64u) !== String(exportLane.publicFacts.publicKeyB64u) || String(materialFacts.ethereumAddress) !== String(exportLane.publicFacts.thresholdOwnerAddress) || materialFacts.participantIds.length !== exportLane.publicFacts.participantIds.length || materialFacts.participantIds.some((participantId, index) => participantId !== exportLane.publicFacts.participantIds[index])) throw new Error(`[SigningEngine][ecdsa-export] canonical ${label} export material mismatch`);
 	const durable = capability.manifest.durableMaterial;
 	const runtimePolicyScope = durable.runtimePolicyScope;
 	const relayerUrl = String(args.deps.relayerUrl).trim().replace(/\/+$/g, "");
-	if (!runtimePolicyScope) throw new Error("[SigningEngine][ecdsa-export] Email OTP runtime policy scope is missing");
-	if (!relayerUrl) throw new Error("[SigningEngine][ecdsa-export] Email OTP export relayer URL is missing");
+	if (!runtimePolicyScope) throw new Error(`[SigningEngine][ecdsa-export] ${label} runtime policy scope is missing`);
+	if (!relayerUrl) throw new Error(`[SigningEngine][ecdsa-export] ${label} export relayer URL is missing`);
+	return {
+		durable,
+		runtimePolicyScope,
+		relayerUrl
+	};
+}
+function resolveCanonicalEmailOtpEcdsaExportMaterialForLane(args) {
+	const { exportLane } = args;
+	const capability = exportLane.capability;
+	const authority = capability.authority;
+	if (!isEmailOtpWalletAuthAuthority(authority)) throw new Error("[SigningEngine][ecdsa-export] Email OTP capability authority mismatch");
+	const { durable, runtimePolicyScope, relayerUrl } = requireCanonicalEcdsaExportLane({
+		deps: args.deps,
+		exportLane,
+		label: "Email OTP",
+		authMatches: () => exportLane.laneIdentity.auth.kind === "email_otp" && exportLane.laneIdentity.auth.providerSubjectId === authority.factor.providerUserId
+	});
 	return {
 		source: "canonical_capability",
 		kind: "fresh_email_otp_route_auth_ready",
@@ -2754,30 +2744,21 @@ function resolveCanonicalEmailOtpEcdsaExportMaterialForLane(args) {
 		relayerUrl,
 		authorization: {
 			kind: "fresh_operation_authorization_required",
-			authority: capability.authority
+			authority
 		}
 	};
 }
 function resolveCanonicalPasskeyEcdsaExportMaterialForLane(args) {
 	const { exportLane } = args;
 	const capability = exportLane.capability;
-	if (!isPasskeyWalletAuthAuthority(capability.authority)) throw new Error("[SigningEngine][ecdsa-export] passkey capability authority mismatch");
-	const signer = capability.manifest.signer;
-	if (signer.walletId !== exportLane.key.walletId || !signer.scope.targetMemberships.some((target) => thresholdEcdsaChainTargetsEqual(target, exportLane.chainTarget))) throw new Error("[SigningEngine][ecdsa-export] passkey capability target mismatch");
-	if (exportLane.laneIdentity.auth.kind !== "passkey" || exportLane.laneIdentity.auth.credentialIdB64u !== capability.authority.factor.credentialIdB64u) throw new Error("[SigningEngine][ecdsa-export] passkey capability auth mismatch");
-	if (!mpcMaterialActivationRefsEqual(capability.manifest.activation.materialActivation, exportLane.laneIdentity.signer.materialActivation)) throw new Error("[SigningEngine][ecdsa-export] passkey material activation mismatch");
-	assertMatchingVerifiedEcdsaPublicFacts({
-		expected: exportLane.publicFacts,
-		actual: signer.registeredPublicFacts,
-		context: "canonical passkey export lane"
+	const authority = capability.authority;
+	if (!isPasskeyWalletAuthAuthority(authority)) throw new Error("[SigningEngine][ecdsa-export] passkey capability authority mismatch");
+	const { durable, runtimePolicyScope, relayerUrl } = requireCanonicalEcdsaExportLane({
+		deps: args.deps,
+		exportLane,
+		label: "passkey",
+		authMatches: () => exportLane.laneIdentity.auth.kind === "passkey" && exportLane.laneIdentity.auth.credentialIdB64u === authority.factor.credentialIdB64u
 	});
-	const materialFacts = capability.material.publicFacts;
-	if (materialFacts.walletId !== signer.walletId || String(materialFacts.keyHandle) !== String(exportLane.publicFacts.keyHandle) || String(materialFacts.groupPublicKey33B64u) !== String(exportLane.publicFacts.publicKeyB64u) || String(materialFacts.ethereumAddress) !== String(exportLane.publicFacts.thresholdOwnerAddress) || materialFacts.participantIds.length !== exportLane.publicFacts.participantIds.length || materialFacts.participantIds.some((participantId, index) => participantId !== exportLane.publicFacts.participantIds[index])) throw new Error("[SigningEngine][ecdsa-export] canonical passkey export material mismatch");
-	const durable = capability.manifest.durableMaterial;
-	const runtimePolicyScope = durable.runtimePolicyScope;
-	const relayerUrl = String(args.deps.relayerUrl).trim().replace(/\/+$/g, "");
-	if (!runtimePolicyScope) throw new Error("[SigningEngine][ecdsa-export] passkey runtime policy scope is missing");
-	if (!relayerUrl) throw new Error("[SigningEngine][ecdsa-export] passkey export relayer URL is missing");
 	return {
 		source: "canonical_capability",
 		kind: "fresh_passkey_needs_authorization",
@@ -4958,7 +4939,7 @@ async function prepareAndShowEcdsaExportArtifact(deps, args) {
 		});
 		const materialActivation = args.exportLane.laneIdentity.signer.materialActivation;
 		const artifact = await deps.withThresholdEcdsaSigningQueue({
-			queueKey: resolveThresholdEcdsaSigningQueueKey({ materialActivation }),
+			queueKey: resolveThresholdCommitQueueKey({ materialActivation }),
 			walletId: args.exportLane.key.walletId,
 			enabled: true,
 			task: async () => {
@@ -5975,7 +5956,7 @@ async function exportEd25519YaoKeyWithFreshAuthorization(deps, args) {
 		}
 	});
 	const result = await deps.withThresholdEd25519CommitQueue({
-		queueKey: resolveThresholdEd25519CommitQueueKey({ materialActivation: passkeyEd25519ExportMaterialActivation(resolved) }),
+		queueKey: resolveThresholdCommitQueueKey({ materialActivation: passkeyEd25519ExportMaterialActivation(resolved) }),
 		nearAccountId: args.nearAccountId,
 		enabled: true,
 		task: () => deps.passkeyMpcExport.exportPrivateKeysWithUi(buildWorkerPayload({
@@ -6071,7 +6052,7 @@ async function exportEd25519YaoKeyWithFreshEmailOtp(deps, args) {
 			onEvent: args.onEvent
 		});
 		const artifact = await deps.withThresholdEd25519CommitQueue({
-			queueKey: resolveThresholdEd25519CommitQueueKey({ materialActivation: emailOtpEd25519ExportMaterialActivation(resolved.context) }),
+			queueKey: resolveThresholdCommitQueueKey({ materialActivation: emailOtpEd25519ExportMaterialActivation(resolved.context) }),
 			nearAccountId: args.nearAccountId,
 			enabled: resolved.context.material.kind === "active_capability",
 			task: () => deps.emailOtp.exportSeedWithFreshAuthorization({
@@ -6307,14 +6288,11 @@ async function exportEd25519KeypairWithFlowId(deps, args) {
 		onEvent: args.options.onEvent
 	});
 }
-async function exportEd25519KeypairWithSessionLifecycle(deps, args) {
-	return await exportEd25519KeypairWithFlowId(deps, args);
-}
 async function exportKeypairWithUI$1(deps, input) {
 	return await runKeyExportWithFlowEvents(input, async (args) => {
 		switch (args.kind) {
 			case "ecdsa": return await exportEcdsaKeypairWithSessionLifecycle(deps, args, { kind: "initial" });
-			case "ed25519": return await exportEd25519KeypairWithSessionLifecycle(deps, args);
+			case "ed25519": return await exportEd25519KeypairWithFlowId(deps, args);
 		}
 	});
 }
@@ -6784,7 +6762,6 @@ const BUILD_PATHS = {
 		WASM_SIGNER: "../../wasm/near_signer",
 		ED25519_YAO_CLIENT: "../../crates/router-ab-ed25519-yao-client",
 		WASM_ECDSA_CLIENT: "../../wasm/router_ab_ecdsa_client",
-		WASM_ECDSA_SIGNING_WORKER: "../../wasm/router_ab_ecdsa_signing_worker",
 		WASM_EVM_CRYPTO: "../../wasm/evm_crypto",
 		WASM_TEMPO_SIGNER: "../../wasm/tempo_signer",
 		WASM_SHAMIR3PASS_RUNTIME: "../../wasm/shamir3pass_runtime",
@@ -6800,7 +6777,6 @@ const BUILD_PATHS = {
 			"../../crates/router-ab-ed25519-yao-client",
 			"../../wasm/near_signer",
 			"../../wasm/router_ab_ecdsa_client",
-			"../../wasm/router_ab_ecdsa_signing_worker",
 			"../../wasm/evm_crypto",
 			"../../wasm/tempo_signer",
 			"../../wasm/shamir3pass_runtime",
@@ -7700,13 +7676,13 @@ async function handlePromptFromWorker(ctx, message, worker, options) {
 		switch (request.type) {
 			case UserConfirmationType.AUTHORIZE_KEY_EXPORT:
 			case UserConfirmationType.SHOW_SECURE_PRIVATE_KEY_UI: {
-				const { handleLocalOnlyFlow } = await import("./localOnly-Bg8UuLZ5.js");
+				const { handleLocalOnlyFlow } = await import("./localOnly-DTpa2jD5.js");
 				await handleLocalOnlyFlow(ctx, request, scopedWorker, flowOptions);
 				break;
 			}
 			case UserConfirmationType.REGISTER_ACCOUNT:
 			case UserConfirmationType.LINK_DEVICE: {
-				const { handleRegistrationFlow } = await import("./registration-BzVHODuD.js").then((n) => n.n);
+				const { handleRegistrationFlow } = await import("./registration-DHERU8R_.js").then((n) => n.n);
 				await handleRegistrationFlow(ctx, request, scopedWorker, flowOptions);
 				break;
 			}
@@ -10783,7 +10759,7 @@ var PasskeyMpcSessionManagerImpl = class {
 			if (inFlight) return requirePasskeyEcdsaRestoreOutcome(await inFlight, "ready");
 			const task = withThresholdEcdsaSigningQueue({
 				queueByKey: this.deps.thresholdEcdsaSigningQueueByKey,
-				queueKey: resolveThresholdEcdsaSigningQueueKey({ materialActivation: record.roleLocalMaterialRef.materialActivation }),
+				queueKey: resolveThresholdCommitQueueKey({ materialActivation: record.roleLocalMaterialRef.materialActivation }),
 				walletId: toWalletId(args.walletId),
 				enabled: true,
 				task: async () => await this.restorePasskeyEcdsaRecord({
@@ -11990,11 +11966,7 @@ var WorkerTransport = class {
 		return worker;
 	}
 	connectPresignAuthorityChannel(request) {
-		if (request.type === EcdsaPresignClientRequestType.ListAvailable && this.presignAuthorityKind === null) {
-			this.connectDerivationPresignChannel(this.getOrCreateWorker("ecdsaPresignClient"), "role_local_derivation_handle");
-			return;
-		}
-		if (request.type !== EcdsaPresignClientRequestType.SessionInit) return;
+		if (request.type !== EcdsaPresignClientRequestType.ListAvailable && request.type !== EcdsaPresignClientRequestType.SessionInit) return;
 		const presignWorker = this.getOrCreateWorker("ecdsaPresignClient");
 		const authorityKind = this.parsePresignAuthorityKind(request.payload);
 		switch (authorityKind) {
@@ -13638,7 +13610,7 @@ async function readPersistedAvailableSigningLanes$1(deps, args, ecdsaChainTarget
 		...args,
 		ecdsaChainTargets,
 		requiredEcdsaCapability: "sign"
-	}, new WalletSessionStatusReadScope());
+	}, new WalletSessionStatusReadScope(), "all");
 }
 /**
 * Human operational read: lanes for one exact owner. The auth-method
@@ -13653,7 +13625,7 @@ async function readOwnerScopedAvailableSigningLanes(deps, args, statusReads) {
 		ecdsaChainTargets: args.ecdsaChainTargets,
 		requiredEcdsaCapability: args.requiredEcdsaCapability,
 		...args.nowMs !== void 0 ? { nowMs: args.nowMs } : {}
-	}, statusReads);
+	}, statusReads, "all");
 }
 async function readPersistedAvailableSigningLanesForSigning(deps, args, defaultEcdsaChainTargets) {
 	if (args.curve === "ecdsa") {
@@ -13664,7 +13636,7 @@ async function readPersistedAvailableSigningLanesForSigning(deps, args, defaultE
 			...availableLanesArgs,
 			ecdsaChainTargets: [...ecdsaChainTargetsByKey.values()],
 			requiredEcdsaCapability: "sign"
-		}, new WalletSessionStatusReadScope());
+		}, new WalletSessionStatusReadScope(), "ecdsa");
 	}
 	const { curve, ...availableLanesArgs } = args;
 	return await readPersistedAvailableSigningLanes$1(deps, availableLanesArgs, []);
@@ -13689,17 +13661,18 @@ function filterEmailOtpCompanionEcdsaRecords(records, chainTargets) {
 	}
 	return matchingRecords;
 }
-async function readPersistedAvailableSigningLanesForTargets(deps, args, statusReads) {
+async function readPersistedAvailableSigningLanesForTargets(deps, args, statusReads, curves) {
 	const walletId = String(toWalletId(args.walletId)).trim();
 	return await readAvailableSigningLanes({
 		...args,
 		walletId,
 		ecdsaChainTargets: args.ecdsaChainTargets
 	}, {
-		listPublicCapabilityReferences: deps.ed25519YaoPublicCapabilityLanes ? deps.ed25519YaoPublicCapabilityLanes.listLanes.bind(deps.ed25519YaoPublicCapabilityLanes) : void 0,
+		listPublicCapabilityReferences: curves === "all" && deps.ed25519YaoPublicCapabilityLanes ? deps.ed25519YaoPublicCapabilityLanes.listLanes.bind(deps.ed25519YaoPublicCapabilityLanes) : void 0,
 		isPublicCapabilityActive: deps.isEd25519YaoPublicCapabilityActive,
-		readActiveWalletSessionAuthorization: deps.readActiveWalletSessionAuthorization?.bind(null, statusReads),
+		readActiveWalletSessionAuthorization: curves === "all" ? deps.readActiveWalletSessionAuthorization?.bind(null, statusReads) : void 0,
 		listSealedRecordsForWallet: async ({ walletId: recordWalletId, filter }) => {
+			if (curves === "ecdsa") return [];
 			const listByAuthMethod = async (authMethod) => {
 				const ed25519Records = await listExactSealedSessionsForWallet({
 					walletId: recordWalletId,
@@ -15964,7 +15937,7 @@ function createEcdsaLoginPrefillClientSigningMaterialSource(args) {
 		destroyClientPresignature: thresholdEcdsaRoleLocalDestroyPresignatureWasm,
 		reserveClientPresignature: thresholdEcdsaRoleLocalReservePresignatureWasm,
 		commitClientPresignature: thresholdEcdsaRoleLocalCommitPresignatureWasm,
-		listAvailableClientPresignatures: thresholdEcdsaRoleLocalListAvailablePresignaturesWasm,
+		listAvailableClientPresignatures: thresholdEcdsaListAvailablePresignaturesWasm.bind(void 0, "role_local_derivation_handle"),
 		computeSignatureShareFromPresignatureHandle: thresholdEcdsaRoleLocalComputeSignatureShareFromPresignatureHandleWasm
 	};
 }
@@ -16767,7 +16740,7 @@ function createRecoveryPublicDeps(args) {
 			}, {
 				...completeConfiguredEcdsaTargets(availableLanesArgs),
 				requiredEcdsaCapability: "export_keys"
-			}, new WalletSessionStatusReadScope()),
+			}, new WalletSessionStatusReadScope(), "all"),
 			readOwnerScopedAvailableSigningLanesForTargets: async (availableLanesArgs) => await readOwnerScopedAvailableSigningLanes({
 				activeWalletAuthorityEcdsaRuntimeReadPorts: browserExactWalletSessionReadPorts,
 				ed25519YaoPublicCapabilityLanes: args.ed25519YaoPublicCapabilityLanes,
@@ -19008,12 +18981,9 @@ function requireEmailOtpEcdsaCustodySigner(continuity, walletId, keyHandle) {
 	const first = continuity.signers[0];
 	if (!first) throw new Error("Email OTP ECDSA custody continuity is empty");
 	if (first.walletKey.walletId !== walletId || first.walletKey.keyHandle !== keyHandle) throw new Error("Email OTP ECDSA custody continuity changed the requested wallet key");
-	for (const signer of continuity.signers) if (signer.walletKey.walletId !== first.walletKey.walletId || signer.walletKey.keyHandle !== first.walletKey.keyHandle || signer.walletKey.ecdsaThresholdKeyId !== first.walletKey.ecdsaThresholdKeyId || signer.walletKey.signingRootId !== first.walletKey.signingRootId || signer.walletKey.signingRootVersion !== first.walletKey.signingRootVersion || signer.walletKey.relayerKeyId !== first.walletKey.relayerKeyId || !sameRouterAbEcdsaDerivationPublicCapabilityV1(signer.walletKey.publicCapability, first.walletKey.publicCapability) || !sameRouterAbEcdsaRegistrationActivationReceiptV1(signer.activationReceipt, first.activationReceipt) || !sameEmailOtpRuntimePolicyScope(signer.runtimePolicyScope, first.runtimePolicyScope)) throw new Error("Email OTP ECDSA custody continuity conflicts across targets");
+	for (const signer of continuity.signers) if (signer.walletKey.walletId !== first.walletKey.walletId || signer.walletKey.keyHandle !== first.walletKey.keyHandle || signer.walletKey.ecdsaThresholdKeyId !== first.walletKey.ecdsaThresholdKeyId || signer.walletKey.signingRootId !== first.walletKey.signingRootId || signer.walletKey.signingRootVersion !== first.walletKey.signingRootVersion || signer.walletKey.relayerKeyId !== first.walletKey.relayerKeyId || !sameRouterAbEcdsaDerivationPublicCapabilityV1(signer.walletKey.publicCapability, first.walletKey.publicCapability) || !sameRouterAbEcdsaRegistrationActivationReceiptV1(signer.activationReceipt, first.activationReceipt) || !sameRuntimePolicyScope$1(signer.runtimePolicyScope, first.runtimePolicyScope)) throw new Error("Email OTP ECDSA custody continuity conflicts across targets");
 	return first;
 }
-function sameEmailOtpRuntimePolicyScope(left, right) {
-	return left.orgId === right.orgId && left.projectId === right.projectId && left.envId === right.envId && left.signingRootVersion === right.signingRootVersion;
-}
 function nonEmptyEmailOtpEcdsaChainTargets(continuity) {
 	const [first, ...rest] = continuity.signers;
 	if (!first) throw new Error("Email OTP ECDSA custody continuity is empty");
@@ -19224,7 +19194,7 @@ async function provisionEmailOtpExistingKeySessions(args) {
 		},
 		authorization: additionalAuthorization
 	};
-	const bootstraps = [primaryBootstrap, ...await Promise.all(args.publicationChainTargets.slice(1).map(provisionEmailOtpAdditionalExistingKeySessionForTarget.bind(null, additionalContext)))];
+	const bootstraps = [primaryBootstrap, ...await Promise.all(args.publicationChainTargets.slice(1).map(provisionEmailOtpExistingKeySessionForTarget.bind(null, additionalContext)))];
 	if (!primaryBootstrap) throw new Error("Email OTP ECDSA activation did not return a primary warm session");
 	return bootstraps;
 }
@@ -19246,9 +19216,6 @@ async function provisionEmailOtpExistingKeySessionForTarget(context, chainTarget
 		authorization: context.authorization
 	}));
 }
-async function provisionEmailOtpAdditionalExistingKeySessionForTarget(context, chainTarget) {
-	return await provisionEmailOtpExistingKeySessionForTarget(context, chainTarget);
-}
 async function provisionEmailOtpExplicitExportSession(args) {
 	return await args.ports.provisionEmailOtpEcdsaExplicitExportSession(buildEmailOtpExplicitExportEcdsaActivation({
 		relayerUrl: args.relayerUrl,
@@ -19790,7 +19757,7 @@ async function restoreEmailOtpEcdsaSigningSessionMaterialFromSealedRecord(args)
 	if (sealedRecord.authMethod !== "email_otp" || sealedRecord.curve !== "ecdsa") return null;
 	const materialActivation = sealedRecord.roleLocalMaterialRef.materialActivation;
 	return await args.withThresholdEcdsaSigningQueue({
-		queueKey: resolveThresholdEcdsaSigningQueueKey({ materialActivation }),
+		queueKey: resolveThresholdCommitQueueKey({ materialActivation }),
 		walletId: toWalletId(sealedRecord.walletId),
 		enabled: true,
 		task: async () => await restoreEmailOtpEcdsaSigningSessionMaterialFromSealedRecordInQueue(args)
@@ -20733,8 +20700,8 @@ function warmSessionMaterialTarget(target) {
 	};
 }
 //#endregion
-//#region src/core/signingEngine/session/emailOtp/coordinatorRuntime.ts
-var EmailOtpWalletSessionRuntime = class {
+//#region src/core/signingEngine/session/emailOtp/EmailOtpWalletSessionCoordinator.ts
+var EmailOtpWalletSessionCoordinator = class {
 	constructor(deps) {
 		this.sealedRefreshDiagnosticLogAtMsByKey = /* @__PURE__ */ new Map();
 		this.runtimeConfig = new EmailOtpRuntimeConfig({
@@ -20853,49 +20820,6 @@ var EmailOtpWalletSessionRuntime = class {
 	}
 };
 //#endregion
-//#region src/core/signingEngine/session/emailOtp/EmailOtpWalletSessionCoordinator.ts
-var EmailOtpWalletSessionCoordinator = class {
-	constructor(deps) {
-		this.runtime = new EmailOtpWalletSessionRuntime(deps);
-	}
-	persistEcdsaSessionForRefresh(args) {
-		return this.runtime.persistEcdsaSessionForRefresh(args);
-	}
-	discoverPersistedSessionsForWallet(args) {
-		return this.runtime.discoverPersistedSessionsForWallet(args);
-	}
-	restorePersistedSessionForSigning(args) {
-		return this.runtime.restorePersistedSessionForSigning(args);
-	}
-	readWarmSessionStatusOnly(target) {
-		return this.runtime.readWarmSessionStatusOnly(target);
-	}
-	consumeWarmSessionUses(args) {
-		return this.runtime.consumeWarmSessionUses(args);
-	}
-	clearVolatileWarmSessionMaterial(target) {
-		return this.runtime.clearVolatileWarmSessionMaterial(target);
-	}
-	async requestTransactionSigningChallenge(args) {
-		return await this.runtime.requestTransactionSigningChallenge(args);
-	}
-	async requestExportChallenge(args) {
-		return await this.runtime.requestExportChallenge(args);
-	}
-	exportEcdsaKeyWithDurableAuthorization(args) {
-		return this.runtime.exportEcdsaKeyWithDurableAuthorization(args);
-	}
-	exportEd25519YaoSeedWithFreshEmailOtpLane(args) {
-		return this.runtime.exportEd25519YaoSeedWithFreshEmailOtpLane(args);
-	}
-	loginWithEcdsaCapabilityForSigning(args) {
-		return this.runtime.loginWithEcdsaCapabilityForSigning(args);
-	}
-	loginWithEcdsaCapabilityInternal(args) {
-		return this.runtime.loginWithEcdsaCapabilityInternal(args);
-	}
-};
-//#endregion
 //#region src/core/signingEngine/assembly/ports/stepUpRuntime.ts
 function createStepUpRuntime(args) {
 	const emailOtpSessions = new EmailOtpWalletSessionCoordinator({
@@ -23060,18 +22984,15 @@ var BrowserSigningSurface = class {
 		const rehydrationKey = nearEd25519CapabilityRehydrationKey(subject);
 		const existingRehydration = this.nearEd25519CapabilityRehydrationBySubject.get(rehydrationKey);
 		if (existingRehydration) {
-			const reboundSubject = await existingRehydration;
-			const rehydrated = await this.resolveActiveNearEd25519YaoSigningLane(reboundSubject);
+			const rebound = await existingRehydration;
+			const rehydrated = await this.resolveActiveNearEd25519YaoSigningLane(rebound.subject);
 			if (rehydrated) return rehydrated;
 			throw new Error("[SigningEngine][near] joined rehydration did not publish an active lane");
 		}
 		const rehydration = this.rehydrateNearEd25519YaoCapabilityForSigning(subject);
 		this.nearEd25519CapabilityRehydrationBySubject.set(rehydrationKey, rehydration);
 		try {
-			const reboundSubject = await rehydration;
-			const rehydrated = await this.resolveActiveNearEd25519YaoSigningLane(reboundSubject);
-			if (rehydrated) return rehydrated;
-			throw new Error("[SigningEngine][near] local material rehydration did not publish a lane");
+			return (await rehydration).material;
 		} finally {
 			if (this.nearEd25519CapabilityRehydrationBySubject.get(rehydrationKey) === rehydration) this.nearEd25519CapabilityRehydrationBySubject.delete(rehydrationKey);
 		}
@@ -24397,7 +24318,14 @@ var BrowserSigningSurface = class {
 				passkeyPrfFirstB64u: warmSessionClaim.prfFirstB64u
 			} : { kind: "unavailable" }
 		});
-		if (liveHydration.kind === "live") return subject;
+		if (liveHydration.kind === "live") {
+			const material = await this.resolveActiveNearEd25519YaoSigningLane(subject);
+			if (!material) throw new Error("[SigningEngine][near] local material rehydration did not publish a lane");
+			return {
+				subject,
+				material
+			};
+		}
 		if (liveHydration.kind === "rehydrated") {
 			if (!warmSessionClaim.ok) {
 				liveHydration.activeClient.dispose();
@@ -24430,8 +24358,12 @@ var BrowserSigningSurface = class {
 					subject,
 					walletSessionState
 				});
-				if (!await this.resolveActiveNearEd25519YaoSigningLane(reboundSubject)) throw new Error("[SigningEngine][near] local material rehydration did not publish an active lane");
-				return reboundSubject;
+				const published = await this.resolveActiveNearEd25519YaoSigningLane(reboundSubject);
+				if (!published) throw new Error("[SigningEngine][near] local material rehydration did not publish an active lane");
+				return {
+					subject: reboundSubject,
+					material: published
+				};
 			} catch (error) {
 				liveHydration.activeClient.dispose();
 				throw error;
@@ -24578,7 +24510,7 @@ var BrowserSigningSurface = class {
 	async withExactEd25519MaterialOwner(args) {
 		return await withThresholdEd25519CommitQueue({
 			queueByKey: this.thresholdEd25519CommitQueueByKey,
-			queueKey: resolveThresholdEd25519CommitQueueKey({ materialActivation: args.materialActivation }),
+			queueKey: resolveThresholdCommitQueueKey({ materialActivation: args.materialActivation }),
 			nearAccountId: args.nearAccountId,
 			enabled: true,
 			task: args.task
@@ -24877,7 +24809,7 @@ var BrowserSigningSurface = class {
 		if (args.credentialExpectation.kind === "expect_exact_operation_credential" && (args.credentialExpectation.operationCredential.walletSessionId !== exactAuthorization.operationCredential.walletSessionId || args.credentialExpectation.operationCredential.token !== exactAuthorization.operationCredential.token)) throw new Error("[SigningEngine][near] expected Email OTP operation credential changed");
 		return await withThresholdEd25519CommitQueue({
 			queueByKey: this.thresholdEd25519CommitQueueByKey,
-			queueKey: resolveThresholdEd25519CommitQueueKey({ materialActivation: args.metadata.materialActivation }),
+			queueKey: resolveThresholdCommitQueueKey({ materialActivation: args.metadata.materialActivation }),
 			nearAccountId: toAccountId(args.bootstrap.session.nearAccountId),
 			enabled: args.commitQueue === "acquire",
 			task: async () => {
@@ -25097,7 +25029,7 @@ var BrowserSigningSurface = class {
 		this.ed25519YaoPageLifecycleOwner.dispose();
 	}
 	clearThresholdEcdsaSigningQueue() {
-		clearThresholdEcdsaSigningQueue(this.thresholdEcdsaSigningQueueByKey);
+		clearThresholdCommitQueue(this.thresholdEcdsaSigningQueueByKey);
 	}
 	async clearLinkedEcdsaHolderMaterials() {
 		await clearLinkedDeviceEcdsaHolderMaterialsWasm({ workerCtx: this.signerWorkerManager.getContext() });
@@ -26281,7 +26213,7 @@ function warnIfSameOriginWallet(walletOrigin) {
 }
 async function createWalletIframeRouter(args) {
 	warnIfSameOriginWallet(args.walletOrigin);
-	const { WalletIframeRouter } = await import("./router-C5lF_J_u.js");
+	const { WalletIframeRouter } = await import("./router-B4ZWFy9E.js");
 	const signingSessionPersistenceMode = args.configs.signing.sessionPersistenceMode;
 	return new WalletIframeRouter({
 		walletOrigin: args.walletOrigin,
@@ -26587,7 +26519,7 @@ function createSigningRuntime(deps) {
 	});
 	const warmSessions = { hydrateSigningSession: async (input) => (await getWarmSessions()).hydrateSigningSession(input) };
 	const getRegistrationAccounts = memoizeService(async () => {
-		const { createRegistrationAccountsService } = await import("./registrationAccounts-CKku_Sgy.js");
+		const { createRegistrationAccountsService } = await import("./registrationAccounts-DmWPzf3T.js");
 		return createRegistrationAccountsService(deps.registration.accountLifecycle);
 	});
 	const registrationAccounts = {
@@ -26611,7 +26543,7 @@ function createSigningRuntime(deps) {
 		rollbackWalletEd25519SignerRegistration: async (receipt) => (await getRegistrationAccounts()).rollbackWalletEd25519SignerRegistration(receipt)
 	};
 	const getEcdsaWalletRecords = memoizeService(async () => {
-		const { createEcdsaWalletRecordsService } = await import("./ecdsaWalletRecords-Cz4m6bIz.js");
+		const { createEcdsaWalletRecordsService } = await import("./ecdsaWalletRecords-D42rtA9z.js");
 		return createEcdsaWalletRecordsService({ accountLifecycle: deps.registration.accountLifecycle });
 	});
 	const ecdsaWalletRecords = {
@@ -26622,32 +26554,32 @@ function createSigningRuntime(deps) {
 		storeWalletEmailOtpEcdsaRegistrationData: async (input) => (await getEcdsaWalletRecords()).storeWalletEmailOtpEcdsaRegistrationData(input)
 	};
 	const nearSigning = { signNear: async (request) => {
-		const { signNear } = await import("./signNear-Bblwn2kT.js").then((n) => n.n);
+		const { signNear } = await import("./signNear-Bmb2fj_a.js").then((n) => n.n);
 		return signNear(deps.signing.near.getDeps(), request);
 	} };
 	const evmFamilySigning = {
 		signEvmFamily: async (args) => {
-			const { signEvmFamily } = await import("./signEvmFamily-e4IWWsZs.js").then((n) => n.s);
+			const { signEvmFamily } = await import("./signEvmFamily-C3C97Th-.js").then((n) => n.s);
 			return signEvmFamily(deps.signing.evmFamily.getDeps(), args);
 		},
 		reportTempoBroadcastAccepted: async (args) => {
-			const { reportTempoBroadcastAccepted } = await import("./signEvmFamily-e4IWWsZs.js").then((n) => n.s);
+			const { reportTempoBroadcastAccepted } = await import("./signEvmFamily-C3C97Th-.js").then((n) => n.s);
 			return reportTempoBroadcastAccepted(deps.signing.evmFamily.getDeps(), args);
 		},
 		reportTempoBroadcastRejected: async (args) => {
-			const { reportTempoBroadcastRejected } = await import("./signEvmFamily-e4IWWsZs.js").then((n) => n.s);
+			const { reportTempoBroadcastRejected } = await import("./signEvmFamily-C3C97Th-.js").then((n) => n.s);
 			return reportTempoBroadcastRejected(deps.signing.evmFamily.getDeps(), args);
 		},
 		reportTempoFinalized: async (args) => {
-			const { reportTempoFinalized } = await import("./signEvmFamily-e4IWWsZs.js").then((n) => n.s);
+			const { reportTempoFinalized } = await import("./signEvmFamily-C3C97Th-.js").then((n) => n.s);
 			return reportTempoFinalized(deps.signing.evmFamily.getDeps(), args);
 		},
 		reportTempoDroppedOrReplaced: async (args) => {
-			const { reportTempoDroppedOrReplaced } = await import("./signEvmFamily-e4IWWsZs.js").then((n) => n.s);
+			const { reportTempoDroppedOrReplaced } = await import("./signEvmFamily-C3C97Th-.js").then((n) => n.s);
 			return reportTempoDroppedOrReplaced(deps.signing.evmFamily.getDeps(), args);
 		},
 		reconcileTempoNonceLane: async (args) => {
-			const { reconcileTempoNonceLane } = await import("./signEvmFamily-e4IWWsZs.js").then((n) => n.s);
+			const { reconcileTempoNonceLane } = await import("./signEvmFamily-C3C97Th-.js").then((n) => n.s);
 			return reconcileTempoNonceLane(deps.signing.evmFamily.getDeps(), args);
 		}
 	};
@@ -26699,6 +26631,30 @@ function createBrowserSigningRuntime(args) {
 	});
 }
 //#endregion
+//#region src/SeamsWeb/walletIframe/host/restoredSessionPresignaturePrefill.ts
+async function scheduleRestoredSessionPresignaturePrefills(args) {
+	switch (args.state.kind) {
+		case "active_session": break;
+		case "wallet_unlocked_without_signing_session":
+			if (args.state.reason !== "exhausted") return;
+			break;
+		case "wallet_locked":
+		case "wallet_authenticated_identity_unresolvable":
+		case "expired_session": return;
+		default:
+			args.state;
+			return;
+	}
+	const walletSession = walletSessionRefFromSession({ walletId: args.state.walletId });
+	const statusReads = new WalletSessionStatusReadScope();
+	const prefills = [];
+	for (const chainTarget of args.chainTargets) prefills.push(args.prefill({
+		walletSession,
+		chainTarget
+	}, statusReads));
+	await Promise.all(prefills);
+}
+//#endregion
 //#region src/SeamsWeb/assembly/createBrowserSigningStores.ts
 function createBrowserSigningStores(indexedDB) {
 	return {
@@ -26745,6 +26701,58 @@ function initializeBrowserSigningRuntime(args) {
 	if (!(args.config.wallet.mode === "iframe" && !__isWalletIframeHostMode())) args.userPreferencesManager.initFromIndexedDB().catch(() => void 0);
 }
 //#endregion
+//#region src/SeamsWeb/operations/auth/scheduleLinkedDevicePresignaturePrefill.ts
+async function scheduleLinkedDevicePresignaturePrefill(args) {
+	try {
+		const scope = args.runtime.activationReceipt.normalSigning.scope;
+		const material = buildRouterAbEcdsaDerivationSigningMaterialRef({ routerAbState: args.runtime.activationReceipt.normalSigning });
+		const keyHandle = await deriveEvmFamilyEcdsaKeyHandle({
+			ecdsaThresholdKeyId: scope.ecdsa_threshold_key_id,
+			signingRootId: scope.signing_root_id,
+			signingRootVersion: scope.signing_root_version
+		});
+		if (resolveLinkedEcdsaHolderRuntimeV1(args.runtime) !== args.runtime) return;
+		const result = scheduleRouterAbEcdsaDerivationClientPresignaturePoolRefill({
+			relayerUrl: args.relayerUrl,
+			keyHandle: parseEcdsaKeyHandle(keyHandle),
+			ecdsaThresholdKeyId: material.ecdsaThresholdKeyId,
+			clientVerifyingShareB64u: material.clientVerifier33B64u,
+			clientSigningMaterial: createLinkedHolderClientSigningMaterialSource(args.runtime.holderHandleId),
+			thresholdEcdsaPublicKeyB64u: material.thresholdVerifier33B64u,
+			relayerVerifyingShareB64u: material.serverVerifier33B64u,
+			credential: {
+				kind: "wallet_session_opaque",
+				walletSessionToken: args.operationCredential.token
+			},
+			authorization: {
+				kind: "reusable_wallet_session",
+				wallet_session_id: args.operationCredential.walletSessionId
+			},
+			materialActivation: routerAbMpcMaterialActivationRefToWire(args.runtime.materialActivation),
+			routerAbEcdsaDerivationPoolFill: {
+				kind: "router_ab_ecdsa_derivation_signing_worker_pool",
+				scope,
+				ceremonyExpiresAtMs: args.expiresAtMs,
+				materialExpiresAtMs: Date.now() + MAX_DURABLE_CLIENT_PRESIGNATURE_LIFETIME_MS
+			},
+			workerCtx: args.workerCtx
+		});
+		emitSigningSessionFlowTrace("evm-family", {
+			event: "ecdsa_linked_device_prefill",
+			scheduled: result.scheduled,
+			reason: result.reason,
+			depth: result.depth,
+			targetDepth: result.targetDepth
+		});
+	} catch {
+		emitSigningSessionFlowTrace("evm-family", {
+			event: "ecdsa_linked_device_prefill",
+			scheduled: false,
+			reason: "unexpected_error"
+		});
+	}
+}
+//#endregion
 //#region src/SeamsWeb/operations/session/thresholdWarmSessionBootstrap.ts
 function assertNeverNormalSigning(value) {
 	throw new Error(`Unexpected Router A/B normal-signing config branch: ${String(value)}`);
@@ -27195,7 +27203,7 @@ async function collectFreshLocalPasskeyUnlockCredential(args) {
 //#endregion
 //#region src/SeamsWeb/operations/auth/walletUnlockEcdsaSubject.ts
 const ecdsaCapabilityManifestStore$1 = new IndexedDbEcdsaCapabilityManifestStore();
-async function listEvmFamilyEcdsaWalletUnlockSubjects(walletId) {
+async function resolveEvmFamilyEcdsaWalletUnlockSubjects(walletId) {
 	const resolved = await ecdsaCapabilityManifestStore$1.listActiveWalletCapabilitySubjects(walletId);
 	if (resolved.kind === "persistence_unavailable") return {
 		kind: "failed",
@@ -27218,9 +27226,6 @@ async function listEvmFamilyEcdsaWalletUnlockSubjects(walletId) {
 		subjects
 	};
 }
-async function resolveEvmFamilyEcdsaWalletUnlockSubjects(walletId) {
-	return await listEvmFamilyEcdsaWalletUnlockSubjects(walletId);
-}
 async function resolveEcdsaActivationJournalSelectors(walletId) {
 	return await ecdsaCapabilityManifestStore$1.listWalletActivationJournalSelectors(walletId);
 }
@@ -28816,12 +28821,21 @@ async function activateLinkedDeviceSignerRuntimesAfterLink(args) {
 			...providerIdentity ? { providerIdentity } : {}
 		});
 		const ecdsaMaterial = linkedDeviceEcdsaMaterial(openedMaterials);
-		if (ecdsaMaterial) await activateLinkedDeviceEcdsaHolderRuntime({
-			context: args.context,
-			selection,
-			factorAuthority,
-			material: ecdsaMaterial
-		});
+		if (ecdsaMaterial) {
+			const { runtime } = await activateLinkedDeviceEcdsaHolderRuntime({
+				context: args.context,
+				selection,
+				factorAuthority,
+				material: ecdsaMaterial
+			});
+			scheduleLinkedDevicePresignaturePrefill({
+				runtime,
+				operationCredential: args.operationCredential,
+				expiresAtMs: args.walletSession.expiresAtMs,
+				relayerUrl,
+				workerCtx: args.context.signingEngine.getSignerWorkerContext()
+			});
+		}
 		const ed25519Material = linkedDeviceEd25519Material(openedMaterials);
 		if (ed25519Material) {
 			const session = await linkedDeviceEd25519SessionAfterLink({
@@ -32111,7 +32125,7 @@ async function logout(context) {
 }
 async function resumeNearAfterSuccessfulUnlock(args) {
 	try {
-		await (await import("./registration-BZDzDv91.js").then((n) => n.o)).resumeNearRegistrationAfterUnlock(args);
+		await (await import("./registration-Ct_7LdGf.js").then((n) => n.o)).resumeNearRegistrationAfterUnlock(args);
 	} catch (error) {
 		console.warn("[login] NEAR continuation could not start", error instanceof Error ? error.message : "module unavailable");
 	} finally {
@@ -32235,7 +32249,7 @@ async function getRecentUnlocksDomain(deps) {
 	}
 	return await getRecentUnlocks(deps.getContext());
 }
-async function prefillRouterAbEcdsaDerivationPresignaturePoolDomain(deps, args) {
+async function prefillRouterAbEcdsaDerivationPresignaturePoolDomain(deps, args, statusReads) {
 	if (deps.walletIframe.shouldUseWalletIframe()) return await (await deps.walletIframe.requireRouter(args.walletSession.walletId)).prefillRouterAbEcdsaDerivationPresignaturePool({
 		walletSession: args.walletSession,
 		options: {
@@ -32248,7 +32262,7 @@ async function prefillRouterAbEcdsaDerivationPresignaturePoolDomain(deps, args)
 		walletId,
 		chainTarget: args.chainTarget,
 		...typeof args.waitForPoolReady === "boolean" ? { waitForPoolReady: args.waitForPoolReady } : {}
-	}, new WalletSessionStatusReadScope());
+	}, statusReads);
 }
 //#endregion
 //#region src/SeamsWeb/publicApi/transactionReview.ts
@@ -32266,7 +32280,7 @@ function createAuthCapability(deps) {
 		getWalletSession: async (walletId) => await getWalletSessionDomain(deps.getWalletAuthDeps(), walletId),
 		getRecentUnlocks: async () => await getRecentUnlocksDomain(deps.getWalletAuthDeps()),
 		hasPasskeyCredential: async (walletId) => await hasPasskeyCredentialDomain(deps.getWalletAuthDeps(), walletId),
-		prefillRouterAbEcdsaDerivationPresignaturePool: async (args) => await prefillRouterAbEcdsaDerivationPresignaturePoolDomain(deps.getWalletAuthDeps(), args),
+		prefillRouterAbEcdsaDerivationPresignaturePool: async (args) => await prefillRouterAbEcdsaDerivationPresignaturePoolDomain(deps.getWalletAuthDeps(), args, new WalletSessionStatusReadScope()),
 		requestEmailOtpChallenge: deps.domain.requestEmailOtpChallenge,
 		requestEmailOtpSigningSessionChallenge: deps.domain.requestEmailOtpSigningSessionChallenge,
 		refreshEmailOtpSigningSession: deps.domain.refreshEmailOtpSigningSession,
@@ -32692,7 +32706,7 @@ async function createPollingSubscriptionV1(input) {
 function parseSessionMutationEnvelopeV1(raw) {
 	const record = asPlainDeviceLinkingResponse(raw);
 	if (record === null) throw new Error("linked-device response must be an object");
-	if (!hasExactKeys$1(record, SESSION_MUTATION_RESPONSE_FIELDS)) throw new Error("linked-device response contains invalid fields");
+	if (!hasExactResponseKeys(record, SESSION_MUTATION_RESPONSE_FIELDS)) throw new Error("linked-device response contains invalid fields");
 	if (record.ok !== true) throw new Error("linked-device response outcome is invalid");
 	switch (record.outcome) {
 		case "applied": return {
@@ -32711,7 +32725,7 @@ function parseSessionMutationEnvelopeV1(raw) {
 function parseTargetCredentialRegistrationResponseV1(raw) {
 	const record = asPlainDeviceLinkingResponse(raw);
 	if (record === null) throw new Error("linked-device target credential response must be an object");
-	if (!hasExactKeys$1(record, TARGET_CREDENTIAL_RESPONSE_FIELDS)) throw new Error("linked-device target credential response contains invalid fields");
+	if (!hasExactResponseKeys(record, TARGET_CREDENTIAL_RESPONSE_FIELDS)) throw new Error("linked-device target credential response contains invalid fields");
 	if (record.ok !== true) throw new Error("linked-device target credential response outcome is invalid");
 	switch (record.outcome) {
 		case "applied": return parseTargetCredentialRegistrationResponseBranch(record, "applied");
@@ -32729,20 +32743,20 @@ function parseTargetCredentialRegistrationResponseBranch(record, outcome) {
 function parseHttpFailureMessageV1(response) {
 	const record = asPlainDeviceLinkingResponse(response.body);
 	if (record === null || record.ok !== false) return `linked-device request failed with HTTP ${response.status}`;
-	if (hasExactKeys$1(record, CODED_FAILURE_RESPONSE_FIELDS) && typeof record.code === "string" && typeof record.message === "string" && record.message.trim()) return `linked-device request failed: ${record.message}`;
-	if (hasExactKeys$1(record, OUTCOME_FAILURE_RESPONSE_FIELDS) && typeof record.outcome === "string" && typeof record.code === "string" && typeof record.message === "string" && record.message.trim()) return `linked-device request failed: ${record.message}`;
+	if (hasExactResponseKeys(record, CODED_FAILURE_RESPONSE_FIELDS) && typeof record.code === "string" && typeof record.message === "string" && record.message.trim()) return `linked-device request failed: ${record.message}`;
+	if (hasExactResponseKeys(record, OUTCOME_FAILURE_RESPONSE_FIELDS) && typeof record.outcome === "string" && typeof record.code === "string" && typeof record.message === "string" && record.message.trim()) return `linked-device request failed: ${record.message}`;
 	switch (record.outcome) {
 		case "conflict":
-			if (hasExactKeys$1(record, SESSION_CONFLICT_FAILURE_FIELDS)) return "linked-device request failed: conflict";
+			if (hasExactResponseKeys(record, SESSION_CONFLICT_FAILURE_FIELDS)) return "linked-device request failed: conflict";
 			break;
 		case "expired":
-			if (hasExactKeys$1(record, SESSION_EXPIRED_FAILURE_FIELDS)) return "linked-device request failed: expired";
+			if (hasExactResponseKeys(record, SESSION_EXPIRED_FAILURE_FIELDS)) return "linked-device request failed: expired";
 			break;
 		case "invalid_state":
-			if (hasExactKeys$1(record, SESSION_INVALID_STATE_FAILURE_FIELDS)) return "linked-device request failed: invalid_state";
+			if (hasExactResponseKeys(record, SESSION_INVALID_STATE_FAILURE_FIELDS)) return "linked-device request failed: invalid_state";
 			break;
 		case "integrity_error":
-			if (hasExactKeys$1(record, SESSION_INTEGRITY_FAILURE_FIELDS)) return "linked-device request failed: integrity_error";
+			if (hasExactResponseKeys(record, SESSION_INTEGRITY_FAILURE_FIELDS)) return "linked-device request failed: integrity_error";
 			break;
 		default: break;
 	}
@@ -32760,11 +32774,9 @@ function isPlainDeviceLinkingResponse(value) {
 		return false;
 	}
 }
-function hasExactKeys$1(record, expectedKeys) {
+function hasExactResponseKeys(record, expectedKeys) {
 	try {
-		const actualKeys = Object.keys(record).sort();
-		const expected = [...expectedKeys].sort();
-		return actualKeys.length === expected.length && actualKeys.every((key, index) => key === expected[index]);
+		return hasExactKeys(record, expectedKeys);
 	} catch {
 		return false;
 	}
@@ -33604,11 +33616,6 @@ function isPlainDeviceLinkingResumeRecord(value) {
 		return false;
 	}
 }
-function hasExactKeys(record, expectedKeys) {
-	const actual = Object.keys(record).sort();
-	const expected = [...expectedKeys].sort();
-	return actual.length === expected.length && actual.every((key, index) => key === expected[index]);
-}
 function sameSignerActivations(left, right) {
 	const leftBytes = encodeWalletSignerActivationSetV1(left);
 	const rightBytes = encodeWalletSignerActivationSetV1(right);
@@ -37932,7 +37939,7 @@ function assertOneEcdsaCustodyIdentity(continuity) {
 	if (continuity.state === "absent") return null;
 	const first = continuity.signers[0];
 	const chainTargets = /* @__PURE__ */ new Set();
-	for (const signer of continuity.signers.slice(1)) if (signer.walletKey.keyHandle !== first.walletKey.keyHandle || !sameRouterAbEcdsaDerivationPublicCapabilityV1(signer.walletKey.publicCapability, first.walletKey.publicCapability) || !sameRouterAbEcdsaRegistrationActivationReceiptV1(signer.activationReceipt, first.activationReceipt) || !sameRuntimePolicyScope$1(signer.runtimePolicyScope, first.runtimePolicyScope)) throw new Error("sync-account returned conflicting ECDSA custody identities");
+	for (const signer of continuity.signers.slice(1)) if (signer.walletKey.keyHandle !== first.walletKey.keyHandle || !sameRouterAbEcdsaDerivationPublicCapabilityV1(signer.walletKey.publicCapability, first.walletKey.publicCapability) || !sameRouterAbEcdsaRegistrationActivationReceiptV1(signer.activationReceipt, first.activationReceipt) || !sameRuntimePolicyScope(signer.runtimePolicyScope, first.runtimePolicyScope)) throw new Error("sync-account returned conflicting ECDSA custody identities");
 	for (const signer of continuity.signers) {
 		const key = thresholdEcdsaChainTargetKey(signer.chainTarget);
 		if (chainTargets.has(key)) throw new Error("sync-account returned duplicate ECDSA custody chain targets");
@@ -38753,7 +38760,10 @@ async function executeEvmFamilyTransactionLifecycle(args) {
 			}
 		});
 		const rawTxHex = assertRawTxHexOrThrow(signedResult.rawTxHex);
-		args.lifecycle.onBroadcastStarted?.(signedResult);
+		args.lifecycle.onBroadcastStarted({
+			walletSession: args.input.walletSession,
+			signedResult
+		});
 		txHash = normalizeTxHashOrThrow(await client.request({
 			method: "eth_sendRawTransaction",
 			params: [rawTxHex]
@@ -39099,6 +39109,11 @@ function createTempoSignerCapability(deps, transactionDispatch = { kind: "ordina
 		...args,
 		chainTarget: resolveTempoChainTarget(deps.configs.network.chains, args.chainTarget)
 	}));
+	const onBroadcastStarted = (args) => {
+		const walletIframe = deps.getWalletIframe();
+		if (!walletIframe.shouldUseWalletIframe()) return;
+		walletIframe.requireRouter(toWalletId(args.walletSession.walletId)).then((router) => router.notifyTransactionBroadcastStarted(args.signedResult)).catch(() => {});
+	};
 	const reportBroadcastAccepted = async (args) => {
 		const walletIframe = deps.getWalletIframe();
 		const walletId = toWalletId(args.walletSession.walletId);
@@ -39214,6 +39229,7 @@ function createTempoSignerCapability(deps, transactionDispatch = { kind: "ordina
 		}
 	};
 	const lifecycle = {
+		onBroadcastStarted,
 		signEvmFamily,
 		reportBroadcastAccepted,
 		reportBroadcastRejected,
@@ -39643,11 +39659,15 @@ function createDeviceLinkingOrdinaryMaterialWorkerPortV1(send) {
 }
 function parseOrdinaryResealedExportRootRecordV1(value) {
 	if (value === null) return null;
-	if (!isOrdinaryResealedExportRootRecordV1(value)) throw new Error("ordinary material resealed export root has unsupported fields");
+	if (!hasExactKeys(value, ["envelope"])) throw new Error("ordinary material resealed export root has unsupported fields");
 	return { envelope: parsePasskeyCustodyEnvelopeRecord(value.envelope) };
 }
 function parsePreparationResult(value) {
-	if (!isOrdinaryMaterialPreparationResultRecordV1(value)) throw new Error("ordinary material preparation result has invalid fields");
+	if (!hasExactKeys(value, [
+		"kind",
+		"targetFactor",
+		"preparations"
+	])) throw new Error("ordinary material preparation result has invalid fields");
 	if (value.kind !== "device_linking_ordinary_signer_material_preparation_v1") throw new Error("ordinary material preparation result kind is invalid");
 	return {
 		kind: "device_linking_ordinary_signer_material_preparation_v1",
@@ -39669,7 +39689,11 @@ function parsePreparationTuple(value) {
 function parseRecipientRequirementTuple(value) {
 	if (!Array.isArray(value) || value.length === 0 || value.length > 2) throw new Error("ordinary signer material recipient requirements must contain one or two entries");
 	const requirements = value.map((entry, index) => {
-		if (!isOrdinaryRecipientRequirementRecordV1(entry)) throw new Error(`ordinary recipient requirement ${index} has invalid fields`);
+		if (!hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId"
+		])) throw new Error(`ordinary recipient requirement ${index} has invalid fields`);
 		if (entry.kind !== "ordinary_signer_material_recipient_requirement_v1") throw new Error("ordinary recipient requirement kind is invalid");
 		if (entry.keyFamily !== "ed25519" && entry.keyFamily !== "ecdsa_secp256k1") throw new Error("ordinary recipient requirement key family is invalid");
 		const walletKeyId = parseWalletKey(entry.walletKeyId);
@@ -39687,7 +39711,12 @@ function parseRecipientRequirementTuple(value) {
 function parseRecipientRequestTuple(value) {
 	if (!Array.isArray(value) || value.length === 0 || value.length > 2) throw new Error("ordinary signer material recipient requests must contain one or two entries");
 	const requests = value.map((entry) => {
-		if (isOrdinaryEd25519RecipientRequestRecordV1(entry)) {
+		if (hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId",
+			"recipientPublicKeyB64u"
+		])) {
 			if (entry.kind !== "ordinary_ed25519_signer_material_recipient_request_v1" || entry.keyFamily !== "ed25519") throw new Error("ordinary Ed25519 recipient request kind is invalid");
 			return {
 				kind: "ordinary_ed25519_signer_material_recipient_request_v1",
@@ -39696,7 +39725,12 @@ function parseRecipientRequestTuple(value) {
 				recipientPublicKeyB64u: parseB64u(entry.recipientPublicKeyB64u, "Ed25519 recipient public key")
 			};
 		}
-		if (isOrdinaryEcdsaRecipientRequestRecordV1(entry)) {
+		if (hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId",
+			"clientEphemeralPublicKey"
+		])) {
 			if (entry.kind !== "ordinary_ecdsa_signer_material_recipient_request_v1" || entry.keyFamily !== "ecdsa_secp256k1") throw new Error("ordinary ECDSA recipient request kind is invalid");
 			return {
 				kind: "ordinary_ecdsa_signer_material_recipient_request_v1",
@@ -39713,7 +39747,11 @@ function parseRecipientRequestTuple(value) {
 	return [first, ...requests.slice(1)];
 }
 function parseRecipientPreparationResult(value) {
-	if (!isOrdinaryRecipientPreparationResultRecordV1(value)) throw new Error("ordinary recipient preparation result has invalid fields");
+	if (!hasExactKeys(value, [
+		"kind",
+		"recipientRequests",
+		"recipientInputs"
+	])) throw new Error("ordinary recipient preparation result has invalid fields");
 	if (value.kind !== "device_linking_ordinary_signer_material_recipient_preparation_v1") throw new Error("ordinary recipient preparation result kind is invalid");
 	const recipientRequests = parseRecipientRequestTuple(value.recipientRequests);
 	const recipientInputs = parseRecipientInputTuple(value.recipientInputs);
@@ -39726,7 +39764,12 @@ function parseRecipientPreparationResult(value) {
 function parseRecipientInputTuple(value) {
 	if (!Array.isArray(value) || value.length === 0 || value.length > 2) throw new Error("ordinary signer material recipient inputs must contain one or two entries");
 	const inputs = value.map((entry) => {
-		if (isOrdinaryEd25519RecipientInputRecordV1(entry)) {
+		if (hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId",
+			"recipientPrivateKey"
+		])) {
 			if (entry.kind !== "ordinary_ed25519_signer_material_recipient_input_v1" || entry.keyFamily !== "ed25519") throw new Error("ordinary Ed25519 recipient input kind is invalid");
 			return {
 				kind: "ordinary_ed25519_signer_material_recipient_input_v1",
@@ -39735,7 +39778,12 @@ function parseRecipientInputTuple(value) {
 				recipientPrivateKey: parsePrivateKeyBuffer(entry.recipientPrivateKey, "Ed25519 recipient private key")
 			};
 		}
-		if (isOrdinaryEcdsaRecipientInputRecordV1(entry)) {
+		if (hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId",
+			"clientEphemeralPrivateKey"
+		])) {
 			if (entry.kind !== "ordinary_ecdsa_signer_material_recipient_input_v1" || entry.keyFamily !== "ecdsa_secp256k1") throw new Error("ordinary ECDSA recipient input kind is invalid");
 			return {
 				kind: "ordinary_ecdsa_signer_material_recipient_input_v1",
@@ -39783,7 +39831,13 @@ function parsePreparation(value) {
 	return parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationV1(value);
 }
 function parseTargetFactorBindingV1(value) {
-	if (isOrdinaryPasskeyTargetFactorRecordV1(value)) {
+	if (hasExactKeys(value, [
+		"kind",
+		"walletAuthMethodId",
+		"verificationDigestB64u",
+		"rpId",
+		"credentialIdB64u"
+	])) {
 		if (value.kind !== "passkey") throw new Error("ordinary material target factor kind is unsupported");
 		const authMethod = parseWalletAuthMethodId(value.walletAuthMethodId);
 		if (!authMethod.ok) throw new Error(authMethod.error.message);
@@ -39796,7 +39850,13 @@ function parseTargetFactorBindingV1(value) {
 			credentialIdB64u: parseB64u(value.credentialIdB64u, "ordinary target factor credentialIdB64u")
 		};
 	}
-	if (isOrdinaryEmailOtpTargetFactorRecordV1(value)) {
+	if (hasExactKeys(value, [
+		"kind",
+		"walletAuthMethodId",
+		"verificationDigestB64u",
+		"emailHashHex",
+		"registrationAuthorityId"
+	])) {
 		if (value.kind !== "email_otp") throw new Error("ordinary material target factor kind is unsupported");
 		const authMethod = parseWalletAuthMethodId(value.walletAuthMethodId);
 		if (!authMethod.ok) throw new Error(authMethod.error.message);
@@ -39814,7 +39874,13 @@ function parseTargetFactorBindingV1(value) {
 	throw new Error("ordinary material target factor kind is unsupported");
 }
 function parseWalletAuthorityExportRootRecordV1(value) {
-	if (!isWalletAuthorityExportRootRecordV1(value)) throw new Error("ordinary material export-root record has invalid fields");
+	if (!hasExactKeys(value, [
+		"kind",
+		"authorityId",
+		"walletAuthMethodId",
+		"walletKeyId",
+		"envelope"
+	])) throw new Error("ordinary material export-root record has invalid fields");
 	if (value.kind !== "wallet_authority_export_root_v1") throw new Error("ordinary material export-root record kind is invalid");
 	const authorityId = parseWalletAuthorityId(value.authorityId);
 	if (!authorityId.ok) throw new Error(authorityId.error.message);
@@ -39831,7 +39897,11 @@ function parseWalletAuthorityExportRootRecordV1(value) {
 	};
 }
 function parseSealedLocalAuthorityMaterialSetV1(value) {
-	if (!isSealedLocalAuthorityMaterialSetRecordV1(value)) throw new Error("ordinary material worker returned an invalid sealed record set");
+	if (!hasExactKeys(value, [
+		"signerMaterials",
+		"exportRoot",
+		"installedRecordSetDigestB64u"
+	])) throw new Error("ordinary material worker returned an invalid sealed record set");
 	if (!Array.isArray(value.signerMaterials) || value.signerMaterials.length === 0) throw new Error("ordinary material worker returned an invalid sealed record set");
 	const signerMaterials = value.signerMaterials.map((entry) => parseWalletAuthorityLinkedSignerMaterialRecordV1(entry));
 	const firstSignerMaterial = signerMaterials[0];
@@ -39857,62 +39927,8 @@ function parseB64u(value, label) {
 	decoded.fill(0);
 	return encoded;
 }
-function isOrdinaryResealedExportRootRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "envelope";
-}
-function isOrdinaryMaterialPreparationResultRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "kind|preparations|targetFactor";
-}
-function isOrdinaryRecipientRequirementRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "keyFamily|kind|walletKeyId";
-}
-function isOrdinaryEd25519RecipientRequestRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "keyFamily|kind|recipientPublicKeyB64u|walletKeyId";
-}
-function isOrdinaryEcdsaRecipientRequestRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "clientEphemeralPublicKey|keyFamily|kind|walletKeyId";
-}
-function isOrdinaryRecipientPreparationResultRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "kind|recipientInputs|recipientRequests";
-}
-function isOrdinaryEd25519RecipientInputRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "keyFamily|kind|recipientPrivateKey|walletKeyId";
-}
-function isOrdinaryEcdsaRecipientInputRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "clientEphemeralPrivateKey|keyFamily|kind|walletKeyId";
-}
-function isOrdinaryPasskeyTargetFactorRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "credentialIdB64u|kind|rpId|verificationDigestB64u|walletAuthMethodId";
-}
-function isOrdinaryEmailOtpTargetFactorRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "emailHashHex|kind|registrationAuthorityId|verificationDigestB64u|walletAuthMethodId";
-}
-function isWalletAuthorityExportRootRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "authorityId|envelope|kind|walletAuthMethodId|walletKeyId";
-}
-function isSealedLocalAuthorityMaterialSetRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "exportRoot|installedRecordSetDigestB64u|signerMaterials";
-}
 //#endregion
 //#region src/SeamsWeb/operations/devices/deviceLinkingWorkerChannels.ts
-function isDeviceLinkingKeyHandleRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "handleId|kind";
-}
-function isDeviceLinkingKeyCreateResultRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "deliveryRecipientPublicKey65B64u|devicePublicKeyB64u|handleId|linkPublicKeyB64u";
-}
-function isDeviceLinkingEmailOtpFactorReleaseResultRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "factorSecret|kind|verificationGrant";
-}
-function isDeviceLinkingRequestSignatureResultRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "signatureB64u";
-}
-function isDeviceLinkingWorkerSuccessFrameRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "id|ok|result" && "ok" in value && value.ok === true;
-}
-function isDeviceLinkingWorkerFailureFrameRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "error|id|ok" && "ok" in value && value.ok === false;
-}
 function nonEmpty(value, label) {
 	if (typeof value !== "string" || value.trim() !== value || value.length === 0) throw new Error(`${label} is required`);
 	return value;
@@ -39938,7 +39954,7 @@ function parseFixedB64u(value, length, label) {
 	return encoded;
 }
 function parseHandle(value) {
-	if (!isDeviceLinkingKeyHandleRecordV1(value)) throw new Error("device-linking key handle has invalid fields");
+	if (!hasExactKeys(value, ["kind", "handleId"])) throw new Error("device-linking key handle has invalid fields");
 	const record = value;
 	if (record.kind !== "device_linking_key_material_handle_v1") throw new Error("device-linking key handle kind is invalid");
 	return {
@@ -39947,7 +39963,12 @@ function parseHandle(value) {
 	};
 }
 function parseCreateResult(value) {
-	if (!isDeviceLinkingKeyCreateResultRecordV1(value)) throw new Error("device-linking key create response has invalid fields");
+	if (!hasExactKeys(value, [
+		"handleId",
+		"linkPublicKeyB64u",
+		"devicePublicKeyB64u",
+		"deliveryRecipientPublicKey65B64u"
+	])) throw new Error("device-linking key create response has invalid fields");
 	const record = value;
 	return {
 		handle: {
@@ -39960,7 +39981,11 @@ function parseCreateResult(value) {
 	};
 }
 function parseEmailOtpFactorReleaseResult(value) {
-	if (!isDeviceLinkingEmailOtpFactorReleaseResultRecordV1(value)) throw new Error("device-linking Email OTP factor release response has invalid fields");
+	if (!hasExactKeys(value, [
+		"kind",
+		"verificationGrant",
+		"factorSecret"
+	])) throw new Error("device-linking Email OTP factor release response has invalid fields");
 	const record = value;
 	if (record.kind !== "device_linking_email_otp_factor_release_result_v1") throw new Error("device-linking Email OTP factor release response kind is invalid");
 	if (!(record.factorSecret instanceof ArrayBuffer) || record.factorSecret.byteLength !== 32) throw new Error("device-linking Email OTP factor release secret is invalid");
@@ -39974,11 +39999,15 @@ function parseWalletSessionCredentialDeliveryResult(value) {
 	return parseWalletSessionOperationCredentialV1(value);
 }
 function parseSignatureResult(value) {
-	if (!isDeviceLinkingRequestSignatureResultRecordV1(value)) throw new Error("device-linking request signature response has invalid fields");
+	if (!hasExactKeys(value, ["signatureB64u"])) throw new Error("device-linking request signature response has invalid fields");
 	return { signatureB64u: parseFixedB64u(value.signatureB64u, 64, "signatureB64u") };
 }
 function parseResponseFrame(value) {
-	if (isDeviceLinkingWorkerSuccessFrameRecordV1(value)) {
+	if (hasExactKeys(value, [
+		"id",
+		"ok",
+		"result"
+	]) && value.ok === true) {
 		const id = value.id;
 		if (typeof id !== "string" || id.trim() !== id || id.length === 0) return null;
 		return {
@@ -39987,7 +40016,11 @@ function parseResponseFrame(value) {
 			result: value.result
 		};
 	}
-	if (isDeviceLinkingWorkerFailureFrameRecordV1(value)) {
+	if (hasExactKeys(value, [
+		"id",
+		"ok",
+		"error"
+	]) && value.ok === false) {
 		const id = value.id;
 		if (typeof id !== "string" || id.trim() !== id || id.length === 0) return null;
 		if (typeof value.error !== "string" || !value.error.trim()) return null;
@@ -42486,6 +42519,14 @@ var SeamsWeb = class {
 	async getWalletIframeExactSessionState() {
 		return await this.walletIframe.getExactSessionState();
 	}
+	/** @internal One wallet-host restore owns all configured-chain prefills. */
+	async prefillRestoredWalletSession(state) {
+		await scheduleRestoredSessionPresignaturePrefills({
+			state,
+			chainTargets: this.configuredChainTargets(),
+			prefill: prefillRouterAbEcdsaDerivationPresignaturePoolDomain.bind(null, this.getWalletAuthDeps())
+		});
+	}
 	async openHostedAuthMenu(request, anchorElement) {
 		return await this.walletIframe.openHostedAuthMenu(request, anchorElement);
 	}