@seams/wallet 0.7.1 → 0.7.3

package/dist/public/sdk/{registration-BZDzDv91.js → registration-Ct_7LdGf.js}

@@ -4,41 +4,41 @@ import { C as deriveImplicitNearAccountIdFromEd25519PublicKey, M as base58Encode
 import { n as getUserFriendlyErrorMessage, t as errorMessage } from "./errors-93h9uAW9.js";
 import { i as base64UrlEncode, r as base64UrlDecode } from "./base64-Clm8C-e9.js";
 import { r as secureRandomId } from "./secureRandomId-BORsmdS4.js";
-import { E as parseUnixMs, P as rejectUnknownFields, d as normalizeThresholdEd25519ParticipantIds, g as signingRootScopeFromRuntimePolicyScope, h as normalizeRuntimePolicyScope, m as deriveSigningRootId, o as normalizeThresholdRuntimePolicyScope, t as DEFAULT_THRESHOLD_SESSION_POLICY, v as requireEvmFamilySigningKeySlotId } from "./sessionPolicy-CHiilOAB.js";
-import { A as parseRouterAbEcdsaVerifiedClientActivationFactsV1, At as walletSessionPreservesCapabilities, C as parseRouterAbEcdsaPostRegistrationSessionActivationPolicyV1, Ct as routerAbMpcMaterialActivationRefFromWire, E as parseRouterAbEcdsaRegistrationActivationReceiptV1, G as buildPasskeyWalletAuthAuthority, H as sameRouterAbEcdsaVerifiedClientActivationFactsV1, Ot as parseActiveWalletSessionV1, Q as parsePasskeyWalletAuthAuthority, R as sameRouterAbEcdsaDerivationNormalSigningStateV1, T as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, Tt as sameRouterAbMpcMaterialActivationRef, V as sameRouterAbEcdsaRegistrationActivationReceiptV1, W as buildEmailOtpWalletAuthAuthority, Y as isEmailOtpWalletAuthAuthority, Z as parseEmailOtpWalletAuthAuthority, _ as parseRouterAbEcdsaDerivationNormalSigningStateV1, _t as parseSdkEcdsaDerivationSigningRootId, et as parseWalletAuthAuthorityRef, kt as parseWalletSessionOperationCredentialV1, nt as walletAuthAuthorityRef, p as parseRouterAbEcdsaCredentialFreeSessionActivationResponseV1, r as cloneAuthenticatorOptions, rt as parseCanonicalEcdsaServerActivationRequest, v as parseRouterAbEcdsaDerivationPublicCapabilityV1, vt as parseSdkEcdsaDerivationSigningRootVersion, wt as routerAbMpcMaterialActivationRefToWire, z as sameRouterAbEcdsaDerivationPublicCapabilityV1 } from "./ecdsaPresignLifecycle-BFOTNYCK.js";
+import { D as parseUnixMs, I as rejectUnknownFields, _ as signingRootScopeFromRuntimePolicyScope, d as normalizeThresholdEd25519ParticipantIds, g as sameRuntimePolicyScope$1, h as normalizeRuntimePolicyScope, m as deriveSigningRootId, o as normalizeThresholdRuntimePolicyScope, t as DEFAULT_THRESHOLD_SESSION_POLICY, y as requireEvmFamilySigningKeySlotId } from "./sessionPolicy-DO-MkL65.js";
+import { $ as parseEmailOtpWalletAuthAuthority, A as parseRouterAbEcdsaVerifiedClientActivationFactsV1, At as parseActiveWalletSessionV1, B as sameRouterAbEcdsaDerivationNormalSigningStateV1, C as parseRouterAbEcdsaPostRegistrationSessionActivationPolicyV1, Dt as sameRouterAbMpcMaterialActivationRef, E as parseRouterAbEcdsaRegistrationActivationReceiptV1, Et as routerAbMpcMaterialActivationRefToWire, K as buildEmailOtpWalletAuthAuthority, Mt as walletSessionPreservesCapabilities, T as parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, Tt as routerAbMpcMaterialActivationRefFromWire, U as sameRouterAbEcdsaRegistrationActivationReceiptV1, V as sameRouterAbEcdsaDerivationPublicCapabilityV1, W as sameRouterAbEcdsaVerifiedClientActivationFactsV1, Z as isEmailOtpWalletAuthAuthority, _ as parseRouterAbEcdsaDerivationNormalSigningStateV1, at as parseCanonicalEcdsaServerActivationRequest, bt as parseSdkEcdsaDerivationSigningRootVersion, et as parsePasskeyWalletAuthAuthority, it as walletAuthAuthorityRef, jt as parseWalletSessionOperationCredentialV1, nt as parseWalletAuthAuthorityRef, p as parseRouterAbEcdsaCredentialFreeSessionActivationResponseV1, q as buildPasskeyWalletAuthAuthority, r as cloneAuthenticatorOptions, v as parseRouterAbEcdsaDerivationPublicCapabilityV1, yt as parseSdkEcdsaDerivationSigningRootId } from "./ecdsaPresignLifecycle-Bfx2AQKb.js";
 import { d as parseMpcWalletSigningQuotaId, g as parseWalletSessionMintId, h as parseWalletSessionId, m as parseWalletSessionAuthorizationId } from "./capabilityKinds-hvYqa6S_.js";
 import { f as alphabetizeStringify, h as sha256HexUtf8, m as sha256BytesUtf8, p as sha256Bytes, t as chainFamilyFromNetwork } from "./chains-BMh3btVo.js";
 import { i as parseIsoTimestamp, n as parseCorrelationId, r as parseDigestB64u } from "./canonicalPrimitives-BTHWz80v.js";
 import { a as thresholdEcdsaChainTargetFromRequest, c as toWalletId, i as thresholdEcdsaChainTargetFromConfig, o as thresholdEcdsaChainTargetKey, r as thresholdEcdsaChainTargetFromChainFamily, s as thresholdEcdsaChainTargetsEqual } from "./ecdsaChainTarget-Bl-JWyuw.js";
 import { c as WALLET_EMAIL_OTP_ACTIONS, d as WALLET_EMAIL_OTP_REGISTRATION_OPERATION, n as SIGNER_AUTH_METHODS, p as WALLET_EMAIL_OTP_UNLOCK_OPERATION, s as EMAIL_OTP_CHANNEL } from "./signerDomain-IEAVrOrc.js";
-import { _ as SEAMS_WALLET_INDEXES, c as zeroizeIssuedWalletRecoveryCodes, h as seamsWalletDB, o as deriveRecoveryCodeLocatorV1FromBytes, s as issueWalletRecoveryCodes, v as SEAMS_WALLET_STORES, y as unwrap } from "./wallet-recovery-Bz9qKgaL.js";
-import { L as buildEnvelopeAAD, M as WALLET_CUSTODY_ED25519_MATERIAL_KEY_KIND, d as prepareWalletEd25519RegistrationProjectionPublication, f as prepareWalletEd25519RegistrationPublication, p as prepareWalletEmailOtpEd25519RegistrationPublication, u as prepareWalletEcdsaRegistrationPublication } from "./accountLifecycle-BAGG_rbk.js";
+import { _ as SEAMS_WALLET_INDEXES, c as zeroizeIssuedWalletRecoveryCodes, h as seamsWalletDB, o as deriveRecoveryCodeLocatorV1FromBytes, s as issueWalletRecoveryCodes, v as SEAMS_WALLET_STORES, y as unwrap } from "./wallet-recovery-BX61-79p.js";
+import { L as buildEnvelopeAAD, M as WALLET_CUSTODY_ED25519_MATERIAL_KEY_KIND, d as prepareWalletEd25519RegistrationProjectionPublication, f as prepareWalletEd25519RegistrationPublication, p as prepareWalletEmailOtpEd25519RegistrationPublication, u as prepareWalletEcdsaRegistrationPublication } from "./accountLifecycle-zthG08aC.js";
 import { t as toAccountId } from "./accountIds-DhIPGOSN.js";
-import { Gt as ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, It as ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, Lt as ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1, Rt as ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, Ut as ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1, Vt as ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1, Xt as parseRouterAbEd25519YaoExportExecuteRequestV1, Yt as parseRouterAbEd25519YaoExportAdmissionReceiptV1, Zt as parseRouterAbEd25519YaoExportResultV1, b as toParticipantId, cn as parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1, in as parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1, sn as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, un as sameRouterAbEd25519YaoRegistrationAdmissionRequestV1, x as toRpId } from "./evmFamilyEcdsaIdentity-Co5XDcEA.js";
-import { u as parseWalletAuthorityV1, w as parseWalletAuthMethodRecordV2 } from "./walletAuthority-BQBxgUBn.js";
+import { $t as parseRouterAbEd25519YaoExportResultV1, Bt as ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, Gt as ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1, Qt as parseRouterAbEd25519YaoExportExecuteRequestV1, Rt as ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, Ut as ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1, Zt as parseRouterAbEd25519YaoExportAdmissionReceiptV1, b as toParticipantId, fn as sameRouterAbEd25519YaoRegistrationAdmissionRequestV1, ln as parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, on as parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1, qt as ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, un as parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1, x as toRpId, zt as ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1 } from "./evmFamilyEcdsaIdentity-CqGafQsI.js";
+import { u as parseWalletAuthorityV1, w as parseWalletAuthMethodRecordV2 } from "./walletAuthority-DD9T25F6.js";
 import { a as parseNearEd25519SigningKeyId, i as nearEd25519SigningKeyIdFromString, o as walletIdFromString, t as computeAddSignerNearEd25519SigningKeyId } from "./registrationIds-DLSdEKSv.js";
-import { a as buildEmailOtpEnvelopeFactor, c as buildPasskeyEnvelopeFactor, d as parsePasskeyCustodyEnvelopeRecord, f as parseWalletCustodyEnvelopeOwnershipWireV1, h as isWalletCustodySeedBinding, l as custodyEnvelopeBindingJsonV1, n as walletCustodyCommitPayloadWithRecoveryBackupAcknowledgement, r as WALLET_CUSTODY_ENVELOPE_VERSION_V2, u as custodyEnvelopeOwnershipWireV1 } from "./passkey-custody-Bk1jAknm.js";
-import { a as parseEcdsaRoleLocalPersistedMaterialRef, d as parseEcdsaRelayerKeyId, i as parseEcdsaRoleLocalMaterialHandle, n as parseEcdsaRoleLocalBindingDigest, s as parseEcdsaThresholdKeyId, t as parseEcdsaClientVerifyingPublicKey33B64u } from "./keyMaterialBrands-CX41hur6.js";
+import { a as buildEmailOtpEnvelopeFactor, c as buildPasskeyEnvelopeFactor, d as parsePasskeyCustodyEnvelopeRecord, f as parseWalletCustodyEnvelopeOwnershipWireV1, h as isWalletCustodySeedBinding, l as custodyEnvelopeBindingJsonV1, n as walletCustodyCommitPayloadWithRecoveryBackupAcknowledgement, r as WALLET_CUSTODY_ENVELOPE_VERSION_V2, u as custodyEnvelopeOwnershipWireV1 } from "./passkey-custody-UUHbC0pk.js";
+import { a as parseEcdsaRoleLocalPersistedMaterialRef, d as parseEcdsaRelayerKeyId, i as parseEcdsaRoleLocalMaterialHandle, n as parseEcdsaRoleLocalBindingDigest, s as parseEcdsaThresholdKeyId, t as parseEcdsaClientVerifyingPublicKey33B64u } from "./keyMaterialBrands-CogGAAZn.js";
 import { i as RegistrationEventPhase, p as createRegistrationFlowEvent } from "./sdkSentEvents-MqDkbQg1.js";
-import { C as parsePendingWalletRegistrationCommitV1, D as createRouterAbTraceContextV1, E as ROUTER_AB_TRACE_ID_HEADER_V1, O as parseRouterAbTraceContextV1, S as assertPendingWalletRegistrationIdentity, T as preparePendingNearRegistration, _ as ecdsaCapabilityScopesMatch, b as walletSessionAuthorizations, c as resolveAccountKeyMaterialTarget, g as IndexedDbEcdsaCapabilityManifestStore, r as prepareWalletCustodyEcdsaContinuity, u as IndexedDBManager, v as runtimePolicyScopesMatch, w as planPendingNearRegistration } from "./walletCustodyEcdsaContinuity-Hn4ORIbf.js";
+import { C as parsePendingWalletRegistrationCommitV1, D as createRouterAbTraceContextV1, E as ROUTER_AB_TRACE_ID_HEADER_V1, O as parseRouterAbTraceContextV1, S as assertPendingWalletRegistrationIdentity, T as preparePendingNearRegistration, _ as ecdsaCapabilityScopesMatch, b as walletSessionAuthorizations, c as resolveAccountKeyMaterialTarget, g as IndexedDbEcdsaCapabilityManifestStore, r as prepareWalletCustodyEcdsaContinuity, u as IndexedDBManager, v as runtimePolicyScopesMatch, w as planPendingNearRegistration } from "./walletCustodyEcdsaContinuity-CF4bv9OI.js";
 import { t as parseSignerSlot } from "./signerSlot-_ovonwVX.js";
 import { a as SIGNING_SESSION_SEAL_ALG, c as SIGNING_SESSION_SECRET_KIND, l as parseRouterAbEd25519NormalSigningState, o as SIGNING_SESSION_SEAL_GROUP_ID, s as SIGNING_SESSION_SEAL_STORAGE_SCOPE, u as requireRouterAbEd25519NormalSigningState } from "./signingSessionSeal-Cu-GHm6y.js";
-import { c as registrationNearEd25519BranchKey, l as registrationSignerPlanFromSelection, n as findRegistrationSignerPlanEvmFamilyEcdsaBranch, r as findRegistrationSignerPlanNearEd25519Branch, s as registrationEvmFamilyEcdsaBranchKey } from "./registrationSignerPlan-CAikVZZQ.js";
+import { c as registrationNearEd25519BranchKey, l as registrationSignerPlanFromSelection, n as findRegistrationSignerPlanEvmFamilyEcdsaBranch, r as findRegistrationSignerPlanNearEd25519Branch, s as registrationEvmFamilyEcdsaBranchKey } from "./registrationSignerPlan-DhV8VAob.js";
 import { c as signingLaneAuthMethod, r as SigningSessionIds } from "./types-Dx9fczU7.js";
-import { n as parseEmailOtpChallengeDelivery } from "./challengeDelivery-Dd0586fo.js";
+import { n as parseEmailOtpChallengeDelivery } from "./challengeDelivery-DZtopOAG.js";
 import { l as getPrfFirstB64uFromCredential, o as redactedPasskeyRegistrationCredential, u as redactCredentialExtensionOutputs } from "./helpers-ZrowMnev.js";
-import { i as buildEcdsaCapabilityScope } from "./ecdsaCapabilityManifest-kzO_fW09.js";
+import { i as buildEcdsaCapabilityScope } from "./ecdsaCapabilityManifest-DuMs0VtU.js";
 import { i as buildNearAccountRefs } from "./profileAccountProjection-uZVJuBvS.js";
-import { C as respondWalletAddSignerEcdsa, E as setupWalletRegistration, O as startWalletAddSigner, b as isEmailOtpWalletRegistrationFinalizeResponse, c as parseWalletUnlockAlreadyCommittedResponseV1, d as activateWalletRegistration, f as completeWalletRegistrationNearProvisioning, m as createWalletAddSignerIntent, n as nearEd25519YaoRuntimeRef, r as resolveNearEd25519YaoCapabilityHydrationV1, s as parseWalletSessionAlreadyCommittedResponseV1, t as nearEd25519YaoMaterialActivationFromMetadata, u as activateWalletAddSignerEcdsa, v as finalizeWalletAddSigner, w as respondWalletRegistration, x as parseWalletRegistrationEcdsaDerivationRespond } from "./nearEd25519YaoMaterialActivation-DPb0s3hQ.js";
+import { D as setupWalletRegistration, S as parseWalletRegistrationEcdsaDerivationRespond, T as respondWalletRegistration, c as parseWalletUnlockAlreadyCommittedResponseV1, d as activateWalletAddSignerEcdsa, f as activateWalletRegistration, h as createWalletAddSignerIntent, k as startWalletAddSigner, n as nearEd25519YaoRuntimeRef, p as completeWalletRegistrationNearProvisioning, r as resolveNearEd25519YaoCapabilityHydrationV1, s as parseWalletSessionAlreadyCommittedResponseV1, t as nearEd25519YaoMaterialActivationFromMetadata, w as respondWalletAddSignerEcdsa, x as isEmailOtpWalletRegistrationFinalizeResponse, y as finalizeWalletAddSigner } from "./nearEd25519YaoMaterialActivation-B5GecIvq.js";
 import { n as buildRelayerJsonPostRequestInit, r as normalizeRelayerBaseUrl, t as buildBearerAuthorizationHeader } from "./relayerHttp-VC8Holz1.js";
-import { d as isExactEcdsaSigningLaneIdentity, f as nearEd25519SignerBindingFromBoundaryFields } from "./exactSigningLaneIdentity-DQeqPMST.js";
-import { a as nearEd25519SessionMatchesMaterialActivation, h as emailOtpAuthContextProviderUserId, l as buildEmailOtpAuthContext, m as emailOtpAuthContextProvider, p as emailOtpAuthContextEmailHashHex, s as buildNearTransactionSigningLane } from "./nearEd25519YaoSigningPreparation-BeD-SmbK.js";
+import { d as isExactEcdsaSigningLaneIdentity, f as nearEd25519SignerBindingFromBoundaryFields } from "./exactSigningLaneIdentity-m6uTXV_A.js";
+import { a as nearEd25519SessionMatchesMaterialActivation, h as emailOtpAuthContextProviderUserId, l as buildEmailOtpAuthContext, m as emailOtpAuthContextProvider, p as emailOtpAuthContextEmailHashHex, s as buildNearTransactionSigningLane } from "./nearEd25519YaoSigningPreparation-CdOT5RuC.js";
 import { o as buildEmailOtpRoutePlan, r as buildFreshEmailOtpRoutePlan } from "./routePlan-D59x5xzQ.js";
 import { n as generateSessionId } from "./prfCache-wqQSjYLn.js";
-import { u as emitSigningSessionFlowTrace } from "./trace-rHe0wz7q.js";
+import { u as emitSigningSessionFlowTrace } from "./trace-DKLQZvec.js";
 import { t as webAuthnPromptCoordinator } from "./webauthnPromptCoordinator-L96oVvLz.js";
 import { t as computeAddSignerIntentDigest } from "./intentDigest-CvOSNlCH.js";
-import { n as showWalletRecoveryCodeBackupUi, t as pendingWalletRecoveryCodeBackupRepository } from "./pendingWalletRecoveryCodeBackup-DLzBb3WQ.js";
+import { n as showWalletRecoveryCodeBackupUi, t as pendingWalletRecoveryCodeBackupRepository } from "./pendingWalletRecoveryCodeBackup-BWluQMbt.js";
 //#region src/core/signingEngine/walletCustody/ceremonyDriver.ts
 function ignoreDiscardFailure() {}
 function requireNearBegunRun(begun) {
@@ -3942,24 +3942,21 @@ function storagePayloadFromSealedStoreRow(value) {
 	const obj = asRecord(value);
 	return obj && SEALED_RECORD_PAYLOAD_FIELD in obj ? obj[SEALED_RECORD_PAYLOAD_FIELD] : value;
 }
-function optionalStringForIndex(value) {
-	return normalizeOptionalNonEmptyString(value);
-}
 function durableLaneStorageRow(record) {
 	const ecdsaChainTarget = record.ecdsaRestore?.chainTarget;
-	const ecdsaThresholdSessionId = optionalStringForIndex(record.thresholdSessionIds.ecdsa);
-	const ed25519ThresholdSessionId = optionalStringForIndex(record.thresholdSessionIds.ed25519);
+	const ecdsaThresholdSessionId = normalizeOptionalNonEmptyString(record.thresholdSessionIds.ecdsa);
+	const ed25519ThresholdSessionId = normalizeOptionalNonEmptyString(record.thresholdSessionIds.ed25519);
 	return {
 		store_key: record.storeKey,
 		wallet_id: record.walletId,
 		auth_method: record.authMethod,
 		curve: record.curve,
-		signing_root_id: optionalStringForIndex("signingRootId" in record ? record.signingRootId : void 0),
-		signing_root_version: optionalStringForIndex("signingRootVersion" in record ? record.signingRootVersion : void 0),
+		signing_root_id: normalizeOptionalNonEmptyString("signingRootId" in record ? record.signingRootId : void 0),
+		signing_root_version: normalizeOptionalNonEmptyString("signingRootVersion" in record ? record.signingRootVersion : void 0),
 		ed25519_threshold_session_id: ed25519ThresholdSessionId,
 		ecdsa_threshold_session_id: ecdsaThresholdSessionId,
 		threshold_session_id: ecdsaThresholdSessionId || ed25519ThresholdSessionId,
-		key_handle: optionalStringForIndex(record.ecdsaRestore?.keyHandle),
+		key_handle: normalizeOptionalNonEmptyString(record.ecdsaRestore?.keyHandle),
 		chain_target_key: ecdsaChainTarget ? thresholdEcdsaChainTargetKey(ecdsaChainTarget) : void 0,
 		expires_at_ms: record.expiresAtMs,
 		updated_at: record.updatedAtMs,
@@ -6042,10 +6039,10 @@ function assertRegistrationEcdsaSessionMatchesWalletKeys(args) {
 	const [firstWalletKey] = args.walletKeys;
 	if (!firstWalletKey) throw new Error("ECDSA registration did not return wallet key material");
 	const token = registrationEstablishedEcdsaSession(args.session.registrationEstablishedSession);
-	if (String(args.session.registrationEstablishedSession.walletId) !== firstWalletKey.walletId || token.thresholdSessionId !== args.session.activatedThresholdSessionId || token.keyHandle !== firstWalletKey.keyHandle || !sameRuntimePolicyScope$1(token.runtimePolicyScope, args.session.clientBootstrap.runtimePolicyScope) || !sameRouterAbEcdsaDerivationNormalSigningStateV1(token.routerAbEcdsaDerivationNormalSigning, args.session.bootstrap.routerAbEcdsaDerivationNormalSigning)) throw new Error("Registration-established ECDSA session changed the signer identity");
+	if (String(args.session.registrationEstablishedSession.walletId) !== firstWalletKey.walletId || token.thresholdSessionId !== args.session.activatedThresholdSessionId || token.keyHandle !== firstWalletKey.keyHandle || !sameRuntimePolicyScope(token.runtimePolicyScope, args.session.clientBootstrap.runtimePolicyScope) || !sameRouterAbEcdsaDerivationNormalSigningStateV1(token.routerAbEcdsaDerivationNormalSigning, args.session.bootstrap.routerAbEcdsaDerivationNormalSigning)) throw new Error("Registration-established ECDSA session changed the signer identity");
 	for (const walletKey of args.walletKeys) if (walletKey.walletId !== firstWalletKey.walletId || walletKey.keyHandle !== token.keyHandle || walletKey.ecdsaThresholdKeyId !== firstWalletKey.ecdsaThresholdKeyId) throw new Error("ECDSA registration material changed the established session identity");
 }
-function sameRuntimePolicyScope$1(left, right) {
+function sameRuntimePolicyScope(left, right) {
 	return left.orgId === right.orgId && left.projectId === right.projectId && left.envId === right.envId && left.signingRootVersion === right.signingRootVersion;
 }
 //#endregion
@@ -6067,7 +6064,7 @@ function registrationEd25519MaterialFacts(args) {
 	if (!thresholdSessionId.ok) throw new Error("Ed25519 registration threshold-session identity is invalid");
 	const participantIds = admission.participant_ids;
 	const finalizedRuntimePolicyScope = normalizeRuntimePolicyScope(args.finalized.runtimePolicyScope);
-	if (admission.application_binding.wallet_id !== args.walletId || admission.application_binding.near_ed25519_signing_key_id !== args.finalized.nearEd25519SigningKeyId || admission.application_binding.key_creation_signer_slot !== args.finalized.signerSlot || participantIds[0] !== args.finalized.participantIds[0] || participantIds[1] !== args.finalized.participantIds[1] || !sameRuntimePolicyScope$1(finalizedRuntimePolicyScope, args.expectedRuntimePolicyScope) || admission.application_binding.signing_root_id !== `${finalizedRuntimePolicyScope.projectId}:${finalizedRuntimePolicyScope.envId}` || admission.scope.root_share_epoch !== finalizedRuntimePolicyScope.signingRootVersion || admission.scope.signing_worker_id !== args.finalized.routerAbNormalSigning.signingWorkerId || args.finalized.relayerKeyId !== args.finalized.routerAbNormalSigning.signingWorkerId) throw new Error("Ed25519 registration material changed the admitted signer identity");
+	if (admission.application_binding.wallet_id !== args.walletId || admission.application_binding.near_ed25519_signing_key_id !== args.finalized.nearEd25519SigningKeyId || admission.application_binding.key_creation_signer_slot !== args.finalized.signerSlot || participantIds[0] !== args.finalized.participantIds[0] || participantIds[1] !== args.finalized.participantIds[1] || !sameRuntimePolicyScope(finalizedRuntimePolicyScope, args.expectedRuntimePolicyScope) || admission.application_binding.signing_root_id !== `${finalizedRuntimePolicyScope.projectId}:${finalizedRuntimePolicyScope.envId}` || admission.scope.root_share_epoch !== finalizedRuntimePolicyScope.signingRootVersion || admission.scope.signing_worker_id !== args.finalized.routerAbNormalSigning.signingWorkerId || args.finalized.relayerKeyId !== args.finalized.routerAbNormalSigning.signingWorkerId) throw new Error("Ed25519 registration material changed the admitted signer identity");
 	return {
 		identity: {
 			walletId: String(args.walletId),
@@ -6097,7 +6094,7 @@ function registrationEstablishedEd25519Session(session) {
 }
 async function buildRegistrationEmailOtpEd25519SessionState(args) {
 	const token = registrationEstablishedEd25519Session(args.registrationEstablishedSession);
-	if (token.nearAccountId !== String(args.nearAccountId) || token.nearEd25519SigningKeyId !== String(args.nearEd25519SigningKeyId) || token.thresholdSessionId !== String(args.thresholdSessionId) || !sameRuntimePolicyScope$1(token.runtimePolicyScope, args.runtimePolicyScope)) throw new Error("Registration-established Email OTP Ed25519 session changed signer identity");
+	if (token.nearAccountId !== String(args.nearAccountId) || token.nearEd25519SigningKeyId !== String(args.nearEd25519SigningKeyId) || token.thresholdSessionId !== String(args.thresholdSessionId) || !sameRuntimePolicyScope(token.runtimePolicyScope, args.runtimePolicyScope)) throw new Error("Registration-established Email OTP Ed25519 session changed signer identity");
 	const signingRoot = signingRootScopeFromRuntimePolicyScope(token.runtimePolicyScope);
 	const signingRootVersion = signingRoot.signingRootVersion;
 	if (!signingRootVersion) throw new Error("Registration-established Ed25519 session is missing a signing-root version");
@@ -7371,14 +7368,11 @@ function parseExactRecoverySession(raw, participantIds, identity, walletSession,
 		operationCredential
 	};
 }
-function sameRuntimePolicyScope(left, right) {
-	return left.orgId === right.orgId && left.projectId === right.projectId && left.envId === right.envId && left.signingRootVersion === right.signingRootVersion;
-}
 function assertEd25519YaoRecoveryDescriptorStableIdentity(parsed) {
 	const capability = parsed.capability;
 	const session = parsed.session;
 	const signingRoot = signingRootScopeFromRuntimePolicyScope(session.runtimePolicyScope);
-	if (!signingRoot || capability.applicationBinding.wallet_id !== String(parsed.walletId) || capability.applicationBinding.near_ed25519_signing_key_id !== parsed.nearEd25519SigningKeyId || capability.applicationBinding.key_creation_signer_slot !== parsed.signerSlot || capability.nearAccountId !== parsed.nearAccountId || capability.lifecycle.accountId !== String(parsed.walletId) || capability.lifecycle.signingWorkerId !== parsed.relayerKeyId || session.routerAbNormalSigning?.signingWorkerId !== parsed.relayerKeyId || session.participantIds[0] !== capability.participantIds[0] || session.participantIds[1] !== capability.participantIds[1] || !sameRuntimePolicyScope(session.runtimePolicyScope, capability.runtimePolicyScope) || session.runtimePolicyScope.signingRootVersion !== capability.lifecycle.rootShareEpoch || capability.applicationBinding.signing_root_id !== signingRoot.signingRootId || parsed.operationalPublicKey !== `ed25519:${base58Encode(Uint8Array.from(capability.registeredPublicKey))}`) throw new Error("Yao recovery response does not preserve the registered wallet identity");
+	if (!signingRoot || capability.applicationBinding.wallet_id !== String(parsed.walletId) || capability.applicationBinding.near_ed25519_signing_key_id !== parsed.nearEd25519SigningKeyId || capability.applicationBinding.key_creation_signer_slot !== parsed.signerSlot || capability.nearAccountId !== parsed.nearAccountId || capability.lifecycle.accountId !== String(parsed.walletId) || capability.lifecycle.signingWorkerId !== parsed.relayerKeyId || session.routerAbNormalSigning?.signingWorkerId !== parsed.relayerKeyId || session.participantIds[0] !== capability.participantIds[0] || session.participantIds[1] !== capability.participantIds[1] || !sameRuntimePolicyScope$1(session.runtimePolicyScope, capability.runtimePolicyScope) || session.runtimePolicyScope.signingRootVersion !== capability.lifecycle.rootShareEpoch || capability.applicationBinding.signing_root_id !== signingRoot.signingRootId || parsed.operationalPublicKey !== `ed25519:${base58Encode(Uint8Array.from(capability.registeredPublicKey))}`) throw new Error("Yao recovery response does not preserve the registered wallet identity");
 }
 function assertEd25519YaoRecoveryDescriptorContinuity(parsed) {
 	assertEd25519YaoRecoveryDescriptorStableIdentity(parsed);
@@ -8095,19 +8089,13 @@ async function unlockPendingEcdsaRegistration(args) {
 //#region src/SeamsWeb/operations/registration/pendingRegistrationRecovery.ts
 const defaultPendingRegistrationRecoveryPorts = {
 	listPendingWalletRegistrationCommits,
-	completeWalletRegistrationNearProvisioning: completePendingWalletRegistrationNearProvisioning,
+	completeWalletRegistrationNearProvisioning,
 	publishPendingWalletRegistrationCommit
 };
 async function listPendingWalletRegistrationCommits() {
 	await IndexedDBManager.initialize();
 	return await IndexedDBManager.listPendingWalletRegistrationCommits();
 }
-async function completePendingWalletRegistrationNearProvisioning(input) {
-	return await completeWalletRegistrationNearProvisioning(input);
-}
-async function activatePendingWalletRegistration(input) {
-	return await activateWalletRegistration(input);
-}
 async function publishPendingWalletRegistrationCommit(input) {
 	return await IndexedDBManager.publishPendingWalletRegistrationCommit(input);
 }
@@ -8402,7 +8390,7 @@ async function resumePendingNearRegistrations(args) {
 	return results;
 }
 const defaultPendingEcdsaRegistrationRecoveryPorts = {
-	activateWalletRegistration: activatePendingWalletRegistration,
+	activateWalletRegistration,
 	publishPendingWalletRegistrationCommit,
 	unlockPendingEcdsaRegistration
 };
@@ -14411,4 +14399,4 @@ async function addWalletSigner(args) {
 	}
 }
 //#endregion
-export { unlockEmailOtpAuthorityWallet as $, listThresholdEcdsaProvisionTargets as $t, resolveGoogleEmailOtpProvider as A, readExactEd25519SealedSession as At, subscribeToNearProvisioning as B, resolveExactWalletSessionOperationCredential as Bt, persistPasskeyEd25519YaoSignerMaterialV1 as C, resolveExactEd25519SealedSessionRuntimeForLane as Ct, collectEmailOtpRegistrationAuthority as D, deleteDurableSealedSessionRecord as Dt, buildRestorableMpcMaterialRefInternal as E, acquireSigningSessionRestoreLease as Et, exactPasskeyWalletAuthAuthorityRefForCredential as F, writeExactSealedSession as Ft, passkeyPrfFirstB64uFromCredential as G, openWalletCustodyEd25519ActiveClientV1 as Gt, resumePendingEcdsaRegistrationFromStoredCommit as H, buildPasskeyEd25519RestoreMetadata as Ht, exactPasskeyWalletAuthMethodForCredential as I, buildCurrentSealedSessionRecord as It, verifyPasskeyWalletUnlock as J, ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1 as Jt, requirePasskeyPrfFirstB64u as K, walletCustodyActivationFactsFromActiveClientMetadataV1 as Kt, resolveManagedRuntimeScopeBootstrap as L, createDeleteDurableSealedSessionCommand as Lt, readPasskeyCustodySessionEnvelope as M, releaseSigningSessionRestoreLease as Mt, rememberPasskeyCustodySessionEnvelope as N, updateExactEd25519SealedSessionPolicy as Nt, requestEmailOtpChallenge as O, listEcdsaSealedSessionsForWallet as Ot, buildRecoveredCustodyEnvelopeRecord as P, updateExactSealedSessionPolicy as Pt, passkeyEd25519YaoLaneReferenceFromRecovery as Q, listConfiguredThresholdEcdsaPublicationTargets as Qt, awaitNearProvisioningInFlight as R, buildRouterAbEd25519SigningWalletSession as Rt, hydratePasskeyEd25519YaoLocalMaterialV1 as S, parseExactEd25519SealedSessionRuntime as St, readPasskeyEd25519YaoLocalMaterialLocatorV1 as T, resolveExactEd25519SealedSessionRuntimeForWalletSubject as Tt, resumePendingNearRegistrations as U, persistPasskeyEd25519YaoSessionForRefresh as Ut, scheduleEcdsaSessionPresignaturePrefill as V, WALLET_IFRAME_TRANSPORT_TIMING_LABEL as Vt, passkeyCredentialIdB64uFromAuthentication as W, openOrRejoinWalletCustodyEd25519V1 as Wt, buildRecoveredWalletSessionState as X, RouterAbEd25519YaoHttpActivationTransportV1 as Xt, assertEd25519YaoWarmRecoveryDescriptorStableMaterialContinuity as Y, RouterAbEd25519YaoClientV1 as Yt, parsePasskeyEd25519YaoSyncResponseV1 as Z, parseEd25519YaoRecoveryCapabilityV1 as Zt, setUnlockedCustodyEnvelopeUpgradeSinkV1 as _, nearEd25519YaoOperationMaterialFacts as _t, registerWallet as a, joinEvmFamilyCustodyV1 as at, walletCustodyCeremonyStepRunner as b, ed25519AuthorizationIdentityMatchesRuntime as bt, exactWalletSessionAuthorityIdentity as c, recoverNearEd25519CustodyV1 as ct, validateExactWalletSessionAuthorization as d, WalletSessionStatusReadScope as dt, isRegistrationBenchmarkDiagnosticsEnabled as en, unlockEmailOtpEd25519YaoCapability as et, destroyUnlockedWalletEd25519ExportRootCapabilitiesV1 as f, createRelayerExactWalletSessionStatusPort as ft, readUnlockedWalletEd25519ExportRootCapabilityV1 as g, buildPasskeyRouterAbEd25519WalletSessionState as gt, readUnlockedEd25519ExportRootLinkingCapabilityV1 as h, buildEmailOtpRouterAbEd25519WalletSessionState as ht, registerPreparedHostedPasskeyRegistration as i, establishNearEd25519CustodyV1 as it, configurePasskeyCustodySessionCachePersistence as j, readExactSealedSession as jt, requestEmailOtpEnrollmentChallenge as k, listExactSealedSessionsForWallet as kt, persistExactWalletSessionAuthorizationFromEcdsaBootstrap as l, rejoinEvmFamilyCustodyV1 as lt, establishUnlockedWalletEd25519ExportRootCapabilityV1 as m, joinCustodyWireFromEnvelopeRecord as mt, cancelHostedPasskeyRegistration as n, unlockEmailOtpWalletCapabilities as nt, registration_exports as o, joinNearEd25519CustodyV1 as ot, dropUnlockedWalletEd25519ExportRootCapabilityReferenceV1 as p, sameRuntimePolicyScope$1 as pt, verifyLinkedDevicePasskeyWalletSession as q, walletCustodyCacheEnvelopeFromRecordV1 as qt, prepareHostedPasskeyRegistration as r, establishEvmFamilyCustodyV1 as rt, startHostedPasskeyRegistrationCredential as s, recoverEvmFamilyCustodyV1 as st, addWalletSigner as t, unlockEmailOtpWallet as tt, validateExactWalletSessionAuthorityIdentity as u, rejoinNearEd25519CustodyV1 as ut, walletCustodyCeremonyTransportFromWorkerContextV1 as v, rebindRouterAbEd25519WalletSessionStateFromExactRuntime as vt, preparePasskeyEd25519YaoLocalMaterialRehydrationV1 as w, resolveExactEd25519SealedSessionRuntimeForWallet as wt, ed25519YaoLocalMaterialIdentityFromWalletSession as x, ed25519SealedRuntimeAuthorityRef as xt, requestWalletCustodyCeremonyOperation as y, resolveActiveAuthorizedRouterAbEd25519WalletSessionState as yt, readNearProvisioningState as z, requiredSigningSubjectForExactSigningLane as zt };
+export { unlockEmailOtpAuthorityWallet as $, listThresholdEcdsaProvisionTargets as $t, resolveGoogleEmailOtpProvider as A, readExactEd25519SealedSession as At, subscribeToNearProvisioning as B, resolveExactWalletSessionOperationCredential as Bt, persistPasskeyEd25519YaoSignerMaterialV1 as C, resolveExactEd25519SealedSessionRuntimeForLane as Ct, collectEmailOtpRegistrationAuthority as D, deleteDurableSealedSessionRecord as Dt, buildRestorableMpcMaterialRefInternal as E, acquireSigningSessionRestoreLease as Et, exactPasskeyWalletAuthAuthorityRefForCredential as F, writeExactSealedSession as Ft, passkeyPrfFirstB64uFromCredential as G, openWalletCustodyEd25519ActiveClientV1 as Gt, resumePendingEcdsaRegistrationFromStoredCommit as H, buildPasskeyEd25519RestoreMetadata as Ht, exactPasskeyWalletAuthMethodForCredential as I, buildCurrentSealedSessionRecord as It, verifyPasskeyWalletUnlock as J, ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1 as Jt, requirePasskeyPrfFirstB64u as K, walletCustodyActivationFactsFromActiveClientMetadataV1 as Kt, resolveManagedRuntimeScopeBootstrap as L, createDeleteDurableSealedSessionCommand as Lt, readPasskeyCustodySessionEnvelope as M, releaseSigningSessionRestoreLease as Mt, rememberPasskeyCustodySessionEnvelope as N, updateExactEd25519SealedSessionPolicy as Nt, requestEmailOtpChallenge as O, listEcdsaSealedSessionsForWallet as Ot, buildRecoveredCustodyEnvelopeRecord as P, updateExactSealedSessionPolicy as Pt, passkeyEd25519YaoLaneReferenceFromRecovery as Q, listConfiguredThresholdEcdsaPublicationTargets as Qt, awaitNearProvisioningInFlight as R, buildRouterAbEd25519SigningWalletSession as Rt, hydratePasskeyEd25519YaoLocalMaterialV1 as S, parseExactEd25519SealedSessionRuntime as St, readPasskeyEd25519YaoLocalMaterialLocatorV1 as T, resolveExactEd25519SealedSessionRuntimeForWalletSubject as Tt, resumePendingNearRegistrations as U, persistPasskeyEd25519YaoSessionForRefresh as Ut, scheduleEcdsaSessionPresignaturePrefill as V, WALLET_IFRAME_TRANSPORT_TIMING_LABEL as Vt, passkeyCredentialIdB64uFromAuthentication as W, openOrRejoinWalletCustodyEd25519V1 as Wt, buildRecoveredWalletSessionState as X, RouterAbEd25519YaoHttpActivationTransportV1 as Xt, assertEd25519YaoWarmRecoveryDescriptorStableMaterialContinuity as Y, RouterAbEd25519YaoClientV1 as Yt, parsePasskeyEd25519YaoSyncResponseV1 as Z, parseEd25519YaoRecoveryCapabilityV1 as Zt, setUnlockedCustodyEnvelopeUpgradeSinkV1 as _, nearEd25519YaoOperationMaterialFacts as _t, registerWallet as a, joinEvmFamilyCustodyV1 as at, walletCustodyCeremonyStepRunner as b, ed25519AuthorizationIdentityMatchesRuntime as bt, exactWalletSessionAuthorityIdentity as c, recoverNearEd25519CustodyV1 as ct, validateExactWalletSessionAuthorization as d, WalletSessionStatusReadScope as dt, isRegistrationBenchmarkDiagnosticsEnabled as en, unlockEmailOtpEd25519YaoCapability as et, destroyUnlockedWalletEd25519ExportRootCapabilitiesV1 as f, createRelayerExactWalletSessionStatusPort as ft, readUnlockedWalletEd25519ExportRootCapabilityV1 as g, buildPasskeyRouterAbEd25519WalletSessionState as gt, readUnlockedEd25519ExportRootLinkingCapabilityV1 as h, buildEmailOtpRouterAbEd25519WalletSessionState as ht, registerPreparedHostedPasskeyRegistration as i, establishNearEd25519CustodyV1 as it, configurePasskeyCustodySessionCachePersistence as j, readExactSealedSession as jt, requestEmailOtpEnrollmentChallenge as k, listExactSealedSessionsForWallet as kt, persistExactWalletSessionAuthorizationFromEcdsaBootstrap as l, rejoinEvmFamilyCustodyV1 as lt, establishUnlockedWalletEd25519ExportRootCapabilityV1 as m, joinCustodyWireFromEnvelopeRecord as mt, cancelHostedPasskeyRegistration as n, unlockEmailOtpWalletCapabilities as nt, registration_exports as o, joinNearEd25519CustodyV1 as ot, dropUnlockedWalletEd25519ExportRootCapabilityReferenceV1 as p, sameRuntimePolicyScope as pt, verifyLinkedDevicePasskeyWalletSession as q, walletCustodyCacheEnvelopeFromRecordV1 as qt, prepareHostedPasskeyRegistration as r, establishEvmFamilyCustodyV1 as rt, startHostedPasskeyRegistrationCredential as s, recoverEvmFamilyCustodyV1 as st, addWalletSigner as t, unlockEmailOtpWallet as tt, validateExactWalletSessionAuthorityIdentity as u, rejoinNearEd25519CustodyV1 as ut, walletCustodyCeremonyTransportFromWorkerContextV1 as v, rebindRouterAbEd25519WalletSessionStateFromExactRuntime as vt, preparePasskeyEd25519YaoLocalMaterialRehydrationV1 as w, resolveExactEd25519SealedSessionRuntimeForWallet as wt, ed25519YaoLocalMaterialIdentityFromWalletSession as x, ed25519SealedRuntimeAuthorityRef as xt, requestWalletCustodyCeremonyOperation as y, resolveActiveAuthorizedRouterAbEd25519WalletSessionState as yt, readNearProvisioningState as z, requiredSigningSubjectForExactSigningLane as zt };

package/dist/public/sdk/{registration-BzVHODuD.js → registration-DHERU8R_.js}

@@ -2,7 +2,7 @@ import { n as __exportAll } from "./chunk-BtrIJ4_z.js";
 import { o as toError } from "./errors-93h9uAW9.js";
 import { c as serializeRegistrationCredentialWithPRF, r as isSerializedRegistrationCredential } from "./helpers-ZrowMnev.js";
 import { t as webAuthnPromptCoordinator } from "./webauthnPromptCoordinator-L96oVvLz.js";
-import { D as getWalletId, S as getNearAccountId, f as ERROR_MESSAGES, m as isUserCancelledUserConfirm, n as createConfirmTxFlowAdapters, t as createConfirmSession, x as getIntentDigest } from "./adapters-B4JeK1nJ.js";
+import { D as getWalletId, S as getNearAccountId, f as ERROR_MESSAGES, m as isUserCancelledUserConfirm, n as createConfirmTxFlowAdapters, t as createConfirmSession, x as getIntentDigest } from "./adapters-Dli9XAZp.js";
 import { a as sha256Base64UrlUtf8 } from "./intentDigest-CvOSNlCH.js";
 //#region src/core/signingEngine/uiConfirm/handlers/flows/registration.ts
 var registration_exports = /* @__PURE__ */ __exportAll({ handleRegistrationFlow: () => handleRegistrationFlow });

package/dist/public/sdk/{registrationAccounts-CKku_Sgy.js → registrationAccounts-DmWPzf3T.js}

@@ -1,9 +1,9 @@
 import "./validation-gat4LEKm.js";
 import "./signerDomain-IEAVrOrc.js";
-import { O as storeWalletEmailOtpEd25519RegistrationData, T as storeWalletEd25519RegistrationData, _ as rollbackWalletEd25519SignerRegistration, a as getLastUser, b as storeAuthenticator, c as hasPasskeyCredential, g as rollbackUserRegistration, i as getAllUsers, k as storeWalletEmailOtpMixedRegistrationData, l as nearAuthenticatorsByAccount, o as getUserBySignerSlot, r as finalizeWalletEd25519SignerRegistration, s as getWalletNearProvisioningState, t as activateAuthenticatedWalletState, v as setLastUser, w as storeWalletEd25519RecoveryRegistrationData, x as storeUserData, y as setWalletNearProvisioningState } from "./accountLifecycle-BAGG_rbk.js";
+import { O as storeWalletEmailOtpEd25519RegistrationData, T as storeWalletEd25519RegistrationData, _ as rollbackWalletEd25519SignerRegistration, a as getLastUser, b as storeAuthenticator, c as hasPasskeyCredential, g as rollbackUserRegistration, i as getAllUsers, k as storeWalletEmailOtpMixedRegistrationData, l as nearAuthenticatorsByAccount, o as getUserBySignerSlot, r as finalizeWalletEd25519SignerRegistration, s as getWalletNearProvisioningState, t as activateAuthenticatedWalletState, v as setLastUser, w as storeWalletEd25519RecoveryRegistrationData, x as storeUserData, y as setWalletNearProvisioningState } from "./accountLifecycle-zthG08aC.js";
 import "./encoders-D8d07vpx.js";
 import "./registrationIds-DLSdEKSv.js";
-import "./registrationSignerPlan-CAikVZZQ.js";
+import "./registrationSignerPlan-DhV8VAob.js";
 //#region src/core/signingEngine/flows/registration/services/registrationAccounts.ts
 function createRegistrationAccountsService(accountLifecycle) {
 	return {

package/dist/public/sdk/{registrationIntent-D0PxwEY4.js → registrationIntent-4zwk16zQ.js}

@@ -2,7 +2,7 @@ import { D as parseWalletAuthorityId, M as parseWebAuthnRpId, O as parseWalletId
 import { i as base64UrlEncode } from "./base64-Clm8C-e9.js";
 import { f as alphabetizeStringify, m as sha256BytesUtf8 } from "./chains-BMh3btVo.js";
 import { c as normalizeAddAuthMethodInput, s as inspectRawObject, u as trimString } from "./registrationIds-DLSdEKSv.js";
-import { a as normalizeAddSignerSelection } from "./registrationSignerPlan-CAikVZZQ.js";
+import { a as normalizeAddSignerSelection } from "./registrationSignerPlan-DhV8VAob.js";
 //#region ../shared-ts/src/utils/registrationIntent.ts
 function addAuthMethodIntentGrantFromString(value) {
 	return String(value || "").trim();
@@ -10,17 +10,11 @@ function addAuthMethodIntentGrantFromString(value) {
 function addSignerIntentGrantFromString(value) {
 	return String(value || "").trim();
 }
-function serializeRegistrationIntentV1(intent) {
-	return alphabetizeStringify(intent);
-}
-function serializeAddAuthMethodIntentV1(intent) {
-	return alphabetizeStringify(intent);
-}
 async function computeRegistrationIntentDigestB64u(intent) {
-	return base64UrlEncode(await sha256BytesUtf8(serializeRegistrationIntentV1(intent)));
+	return base64UrlEncode(await sha256BytesUtf8(alphabetizeStringify(intent)));
 }
 async function computeAddAuthMethodIntentDigestB64u(intent) {
-	return base64UrlEncode(await sha256BytesUtf8(serializeAddAuthMethodIntentV1(intent)));
+	return base64UrlEncode(await sha256BytesUtf8(alphabetizeStringify(intent)));
 }
 function normalizeAddAuthMethodIntentCaller(raw) {
 	const record = inspectRawObject(raw);

package/dist/public/sdk/{registrationPreparationPreload-CIAuRlxI.js → registrationPreparationPreload-D6zpWp4O.js}

@@ -1,8 +1,8 @@
-import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-D7Aey0FD.js";
+import { i as loadWebAuthnP256EngineCtor, n as loadSignEvmFamilyWithUiConfirmForTempo, r as loadSignEvmWithUiConfirm, t as loadSecp256k1EngineCtor } from "./signerLoader-B7orgq5Z.js";
 //#region src/SeamsWeb/walletIframe/host/registrationPreparationPreload.ts
 async function preloadWalletHostRegistrationPreparation() {
 	await Promise.all([
-		import("./runtime-ecdsa-tempo-rkWwolw1.js").catch(() => void 0),
+		import("./runtime-ecdsa-tempo-BGLsTAWR.js").catch(() => void 0),
 		loadSignEvmFamilyWithUiConfirmForTempo().catch(() => void 0),
 		loadSignEvmWithUiConfirm().catch(() => void 0),
 		loadSecp256k1EngineCtor().catch(() => void 0),

package/dist/public/sdk/{registrationSignerPlan-CAikVZZQ.js → registrationSignerPlan-DhV8VAob.js}

@@ -75,11 +75,8 @@ function registrationSignerBranchKeyFromString(value) {
 function registrationNearEd25519BranchKey(signerSlot) {
 	return registrationSignerBranchKeyFromString(`near_ed25519:slot:${signerSlot}`);
 }
-function registrationEvmFamilyEcdsaTargetKey(target) {
-	return alphabetizeStringify(target);
-}
 function registrationEvmFamilyEcdsaBranchKey(chainTargets) {
-	return registrationSignerBranchKeyFromString(`evm_family_ecdsa:${chainTargets.map(registrationEvmFamilyEcdsaTargetKey).join("|")}`);
+	return registrationSignerBranchKeyFromString(`evm_family_ecdsa:${chainTargets.map(alphabetizeStringify).join("|")}`);
 }
 function registrationSignerPlanFromRequests(signers) {
 	return registrationSignerPlanFromBranches(signers.map(registrationSignerPlanBranchFromRequest));
@@ -163,7 +160,7 @@ function findDuplicateRegistrationSignerBranch(branch, branchKeys) {
 }
 function findDuplicateRegistrationEcdsaTarget(branch, ecdsaTargetKeys) {
 	for (const target of branch.chainTargets) {
-		const targetKey = registrationEvmFamilyEcdsaTargetKey(target);
+		const targetKey = alphabetizeStringify(target);
 		if (ecdsaTargetKeys.has(targetKey)) return {
 			ok: false,
 			code: "invalid_body",

package/dist/{esm/sdk/router-C5lF_J_u.js → public/sdk/router-B4ZWFy9E.js}

@@ -5,23 +5,23 @@ import { n as walletIframeSurfaceIdFromBoundary } from "./walletIframeIdentity-D
 import { _ as parseHostedAuthMenuExternalAuthResolution, a as buildPMRedeemHostedWalletSeamsSessionPayload, c as isDeviceLinkEmailOtpBaseFactorSelectionProgressV1, g as parseHostedAuthMenuExternalAuthRequest, h as parseHostedAuthMenuErrorEvent, i as buildHostedAuthMenuCancelPayload, l as isDeviceLinkTargetFactorActivationProgressV1, m as parseHostedAuthMenuDemoEmailOtpDelivery, n as WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH, r as WALLET_PROTOCOL_VERSION, s as hostedAuthMenuSessionIdFromBoundary, t as HOSTED_AUTH_MENU_ERROR_EVENT, u as isRegistrationTimingSpanV1, v as parseHostedAuthMenuOpenRequest, x as parseWalletIframeSurfaceMeasurement, y as parseHostedAuthMenuOutcome } from "./messages-C7Dbx9iN.js";
 import { o as toError } from "./errors-93h9uAW9.js";
 import { t as secureRandomBase36 } from "./secureRandomId-BORsmdS4.js";
-import "./sessionPolicy-CHiilOAB.js";
-import { kt as parseWalletSessionOperationCredentialV1 } from "./ecdsaPresignLifecycle-BFOTNYCK.js";
+import "./sessionPolicy-DO-MkL65.js";
+import { jt as parseWalletSessionOperationCredentialV1 } from "./ecdsaPresignLifecycle-Bfx2AQKb.js";
 import "./capabilityKinds-hvYqa6S_.js";
 import { r as cloneResolvedChainConfig } from "./chains-BMh3btVo.js";
 import { c as toWalletId, s as thresholdEcdsaChainTargetsEqual } from "./ecdsaChainTarget-Bl-JWyuw.js";
 import "./signerDomain-IEAVrOrc.js";
-import { $ as parseLinkedDeviceListRequestV1, et as parseLinkedDeviceListResultV1, nt as parseLinkedDeviceRevokeResultV1, tt as parseLinkedDeviceRevokeRequestV1 } from "./evmFamilyEcdsaIdentity-Co5XDcEA.js";
-import "./walletAuthority-BQBxgUBn.js";
+import { $ as parseLinkedDeviceListRequestV1, et as parseLinkedDeviceListResultV1, nt as parseLinkedDeviceRevokeResultV1, tt as parseLinkedDeviceRevokeRequestV1 } from "./evmFamilyEcdsaIdentity-CqGafQsI.js";
+import "./walletAuthority-DD9T25F6.js";
 import "./encoders-D8d07vpx.js";
 import { o as walletIdFromString } from "./registrationIds-DLSdEKSv.js";
 import { _ as isWalletFlowEvent, c as classifyLinkDeviceFlowEvent, d as createLinkDeviceFlowEvent, g as createUnlockFlowEvent, i as RegistrationEventPhase, l as createAccountSyncFlowEvent, m as createSigningFlowEvent, n as KeyExportEventPhase, o as SigningEventPhase, p as createRegistrationFlowEvent, r as LinkDeviceEventPhase, s as UnlockEventPhase, t as AccountSyncEventPhase, u as createKeyExportFlowEvent, v as parseNearProvisioningState, y as parseSdkLifecycleEvent } from "./sdkSentEvents-MqDkbQg1.js";
 import "./signingSessionSeal-Cu-GHm6y.js";
 import { c as serializeRegistrationCredentialWithPRF, s as serializeAuthenticationCredentialWithPRF } from "./helpers-ZrowMnev.js";
-import { S as requireTempoFeeTokenPreferenceSigningRequest, _ as provisionalWalletIframeSurfaceGeometry, a as parseWalletIframeExactSessionState, c as buildPMUnlockPayload, f as needsExplicitActivation, g as isWalletIframeModalGeometry, h as anchorWalletIframeModalGeometry, i as parseWalletIframeExactSessionLockResult, m as ensureOverlayBase, o as parseWalletSessionFromBoundary, p as OverlayController, t as WalletIframeSessionExpiredRequestError, v as resolveWalletIframeSurfaceGeometry, w as WebAuthnBridgeMessage } from "./exactSessionState-CiD5fBEs.js";
-import { h as parseExactEd25519ExportMaterialIdentity, m as parseExactEcdsaSigningLaneIdentity } from "./exactSigningLaneIdentity-DQeqPMST.js";
+import { S as requireTempoFeeTokenPreferenceSigningRequest, _ as provisionalWalletIframeSurfaceGeometry, a as parseWalletIframeExactSessionState, c as buildPMUnlockPayload, f as needsExplicitActivation, g as isWalletIframeModalGeometry, h as anchorWalletIframeModalGeometry, i as parseWalletIframeExactSessionLockResult, m as ensureOverlayBase, o as parseWalletSessionFromBoundary, p as OverlayController, t as WalletIframeSessionExpiredRequestError, v as resolveWalletIframeSurfaceGeometry, w as WebAuthnBridgeMessage } from "./exactSessionState-LWDUXydN.js";
+import { h as parseExactEd25519ExportMaterialIdentity, m as parseExactEcdsaSigningLaneIdentity } from "./exactSigningLaneIdentity-m6uTXV_A.js";
 import { n as SignedTransaction } from "./NearClient-DY4NfHeD.js";
-import { n as PASSKEY_MANAGER_DEFAULT_CONFIGS } from "./defaultConfigs-B3c16M_8.js";
+import { n as PASSKEY_MANAGER_DEFAULT_CONFIGS } from "./defaultConfigs-D_33pPT9.js";
 //#region src/SeamsWeb/walletIframe/client/transactionReviewReservation.ts
 var TransactionReviewReservation = class {
 	constructor(connectionId, identity, slot, title, validity, confirmationConfig, generation, lease, assertCurrent, cancelRequest, finishRequest, resumeRequest) {

package/dist/{esm/sdk/routerAbNormalSigning-fhvpDtmY.js → public/sdk/routerAbNormalSigning-CVFEOZ2m.js}

@@ -1,6 +1,6 @@
 import { i as coerceNonEmptyString } from "./validation-gat4LEKm.js";
 import { i as base64UrlEncode, r as base64UrlDecode, t as base64Decode } from "./base64-Clm8C-e9.js";
-import { N as routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestDigestV1, P as routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1, S as parseRouterAbEcdsaOperationStepUpPreparationV1, St as parseRouterAbNormalSigningAuthorization, h as parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreRequestV1, m as parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1, xt as parseRouterAbMpcMaterialActivationRef } from "./ecdsaPresignLifecycle-BFOTNYCK.js";
+import { Ct as parseRouterAbMpcMaterialActivationRef, N as routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestDigestV1, P as routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1, S as parseRouterAbEcdsaOperationStepUpPreparationV1, h as parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreRequestV1, m as parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1, wt as parseRouterAbNormalSigningAuthorization } from "./ecdsaPresignLifecycle-Bfx2AQKb.js";
 import { f as alphabetizeStringify } from "./chains-BMh3btVo.js";
 import { n as buildRelayerJsonPostRequestInit, r as normalizeRelayerBaseUrl, t as buildBearerAuthorizationHeader } from "./relayerHttp-VC8Holz1.js";
 //#region src/core/signingEngine/session/operationState/authorizationAdmission.ts