@seams/wallet 0.7.1 → 0.7.3

package/dist/types/wallet/src/react/hooks/useAccountInput.d.ts

@@ -1,22 +1,5 @@
 import type { SeamsWeb } from '../../SeamsWeb';
-import type { StoredAccountOption } from '../types';
-export interface AccountInputState {
-    inputUsername: string;
-    lastLoggedInUsername: string;
-    lastLoggedInDomain: string;
-    /** Sponsored named NEAR account target used only by named-account registration. */
-    targetAccountId: string;
-    /** Wallet identity used for passkey login/session operations. */
-    targetWalletId: string;
-    displayPostfix: string;
-    isUsingExistingAccount: boolean;
-    /** On-chain NEAR account existence for sponsored named-account registration. */
-    accountExists: boolean;
-    /** Local passkey credential existence for wallet-scoped passkey login. */
-    passkeyCredentialExists: boolean;
-    indexDBAccounts: string[];
-    indexDBAccountOptions: StoredAccountOption[];
-}
+import type { UseAccountInputReturn } from '../types';
 interface UseAccountInputOptions {
     seams: SeamsWeb;
     /**
@@ -27,10 +10,6 @@ interface UseAccountInputOptions {
     currentWalletId?: string | null;
     isLoggedIn: boolean;
 }
-export interface UseAccountInputReturn extends AccountInputState {
-    setInputUsername: (username: string) => void;
-    refreshAccountData: () => Promise<void>;
-}
 export declare function useAccountInput({ seams, accountDomain, currentWalletId, isLoggedIn, }: UseAccountInputOptions): UseAccountInputReturn;
 export {};
 //# sourceMappingURL=useAccountInput.d.ts.map

package/dist/types/wallet/src/react/transactionReview/controller.d.ts

@@ -3,14 +3,12 @@ import type { SeamsWeb } from '../../SeamsWeb';
 import { type TransactionReviewCapabilities } from '../../SeamsWeb/publicApi/transactionReview';
 import type { TransactionReviewReservation } from '../../SeamsWeb/walletIframe/client/transactionReviewReservation';
 import { TransactionReviewError, type TransactionReview, type TransactionReviewControls } from './contract';
-export type ReviewCallState = {
+import type { ReadonlyExclusiveUnion } from '../../../../shared-ts/src/utils/variant';
+export type ReviewCallState = ReadonlyExclusiveUnion<{
     readonly kind: 'queued';
-    readonly reservation?: never;
-    readonly error?: never;
 } | {
     readonly kind: 'reviewing';
     readonly reservation: TransactionReviewReservation;
-    readonly error?: never;
 } | {
     readonly kind: 'review_failed';
     readonly reservation: TransactionReviewReservation;
@@ -18,20 +16,15 @@ export type ReviewCallState = {
 } | {
     readonly kind: 'preparing_approval';
     readonly reservation: TransactionReviewReservation;
-    readonly error?: never;
 } | {
     readonly kind: 'wallet_approval';
     readonly reservation: TransactionReviewReservation;
-    readonly error?: never;
 } | {
     readonly kind: 'signing';
     readonly reservation: TransactionReviewReservation;
-    readonly error?: never;
 } | {
     readonly kind: 'settled';
-    readonly reservation?: never;
-    readonly error?: never;
-};
+}>;
 export interface ReviewCallView {
     readonly review: TransactionReview;
     readonly controls: TransactionReviewControls;

package/dist/types/wallet/src/utils/menuItemBlink.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Blinks a chosen menu item once, highlight off and then on again, so the menu
+ * confirms which item was picked before it closes, as macOS menus do. The item's
+ * stylesheet renders `data-blink="off"` and `data-blink="on"`.
+ *
+ * Returns null while the item is already blinking, so a double click commits once.
+ */
+export declare function blinkMenuItem(item: HTMLElement): Promise<void> | null;
+//# sourceMappingURL=menuItemBlink.d.ts.map

package/dist/workers/device-linking-key.worker.js

@@ -782,6 +782,11 @@ function requireCanonicalBase64Url(value, label) {
   }
   return decoded;
 }
+function requireParsed(result, label) {
+  if (result.ok)
+    return result.value;
+  throw new Error(`${label} ${result.error.message}`);
+}
 function parseDigestField(value, label) {
   try {
     return parseDigestB64u(value);
@@ -946,11 +951,11 @@ function parseLinkedDeviceEd25519ExportRootPackageV1(raw) {
   }
   return {
     kind: "linked_device_ed25519_export_root_package_v1",
-    linkSessionId: parseRequired(parseLinkDeviceSessionId(record.linkSessionId), "linkSessionId"),
-    walletId: parseRequired(parseWalletId(record.walletId), "walletId"),
-    walletKeyId: parseRequired(parseWalletKeyId(record.walletKeyId), "walletKeyId"),
-    enrollmentId: parseRequired(parseLinkedDeviceEnrollmentId(record.enrollmentId), "enrollmentId"),
-    deviceId: parseRequired(parseLinkedDeviceId(record.deviceId), "deviceId"),
+    linkSessionId: requireParsed(parseLinkDeviceSessionId(record.linkSessionId), "linkSessionId"),
+    walletId: requireParsed(parseWalletId(record.walletId), "walletId"),
+    walletKeyId: requireParsed(parseWalletKeyId(record.walletKeyId), "walletKeyId"),
+    enrollmentId: requireParsed(parseLinkedDeviceEnrollmentId(record.enrollmentId), "enrollmentId"),
+    deviceId: requireParsed(parseLinkedDeviceId(record.deviceId), "deviceId"),
     transferAlg: LINKED_DEVICE_ED25519_EXPORT_ROOT_TRANSFER_ALG_V1,
     applicationBindingDigestB64u: parseDigestField(record.applicationBindingDigestB64u, "applicationBindingDigestB64u"),
     registeredPublicKeyB64u: parseEd25519PublicKeyB64u(record.registeredPublicKeyB64u, "registeredPublicKeyB64u"),
@@ -1002,11 +1007,6 @@ function parseUnixMs2(value, label) {
   }
   return value;
 }
-function parseRequired(parsed, label) {
-  if (!parsed.ok)
-    throw new Error(`${label} ${parsed.error.message}`);
-  return parsed.value;
-}
 // ../shared-ts/src/device-linking/delegatedActivationPlan.ts
 var MANIFEST_FIELDS = ["kind", "keyFamilies", "signers"];
 var ED25519_SIGNER_FIELDS = [
@@ -1173,11 +1173,6 @@ function exactRecord3(raw, fields, label) {
   }
   return record;
 }
-function requireParsed(parsed, label) {
-  if (!parsed.ok)
-    throw new Error(`${label} ${parsed.error.message}`);
-  return parsed.value;
-}
 // ../shared-ts/src/utils/routerAbPublicKeyset.ts
 function requireRouterAbX25519PublicKey(value, label) {
   const publicKey = coerceNonEmptyString(value, label);
@@ -3005,7 +3000,7 @@ function parseEd25519Package(raw) {
   }
   const deriverA = parseEd25519ClientPackage(record.deriver_a_client_package, "deriver_a_client_package", "deriver_a");
   const deriverB = parseEd25519ClientPackage(record.deriver_b_client_package, "deriver_b_client_package", "deriver_b");
-  if (!sameBytes(activationReceipt.transcript, deriverA.transcript) || !sameBytes(activationReceipt.transcript, deriverB.transcript)) {
+  if (!sameRouterAbEd25519YaoByteSequence(activationReceipt.transcript, deriverA.transcript) || !sameRouterAbEd25519YaoByteSequence(activationReceipt.transcript, deriverB.transcript)) {
     throw new Error("CommittedEd25519SignerPackageV1 receipt transcript does not match packages");
   }
   return {
@@ -3178,9 +3173,6 @@ function parseCommittedEcdsaSignerPackageWireV1(raw) {
 function inspectRawObject2(raw) {
   return raw !== null && typeof raw === "object" && !Array.isArray(raw) ? raw : null;
 }
-function sameBytes(left, right) {
-  return left.length === right.length && left.every((value, index) => value === right[index]);
-}
 function requireExactWireFields(record, keys, label) {
   const expected = new Set(keys);
   const actual = Object.keys(record);
@@ -3642,6 +3634,9 @@ function u642(value, label) {
 function lp322(value, label) {
   return concat([u322(value.length, `${label}.length`), value]);
 }
+// ../shared-ts/src/utils/emailOtpDomain.ts
+var EMAIL_OTP_FACTOR_RELEASE_AAD_DOMAIN_V1 = "seams/email-otp/factor-release/v1";
+
 // ../../wasm/near_signer/pkg/wasm_signer_worker.js
 var wasm;
 var WASM_VECTOR_LEN = 0;
@@ -6822,9 +6817,17 @@ function parsePasskeyCustodyEnvelopeRecord(raw, label = "walletCustodyEnvelope")
     updatedAtMs
   });
 }
+// ../shared-ts/src/utils/exactKeys.ts
+function hasExactKeys(value, keys) {
+  if (value === null || typeof value !== "object" || Array.isArray(value))
+    return false;
+  const actual = Object.keys(value);
+  return actual.length === keys.length && actual.every((key) => keys.includes(key));
+}
+
 // src/core/signingEngine/workerManager/deviceLinkingPorts.ts
 function parseOrdinaryMaterialWorkerRequestV1(value) {
-  if (isOrdinaryMaterialRecipientPrepareRecordV1(value)) {
+  if (hasExactKeys(value, ["kind", "handleId", "requirements"])) {
     if (value.kind !== "device_linking_ordinary_signer_material_recipient_prepare_v1") {
       throw new Error("ordinary material worker request kind is unsupported");
     }
@@ -6834,7 +6837,7 @@ function parseOrdinaryMaterialWorkerRequestV1(value) {
       requirements: parseRecipientRequirementTuple(value.requirements)
     };
   }
-  if (isOrdinaryMaterialSealRecordV1(value)) {
+  if (hasExactKeys(value, ["kind", "handleId", "committed", "targetFactor", "resealedExportRoot"])) {
     if (value.kind !== "device_linking_ordinary_signer_material_seal_v1") {
       throw new Error("ordinary material worker request kind is unsupported");
     }
@@ -6857,7 +6860,15 @@ function parseOrdinaryMaterialWorkerRequestV1(value) {
   throw new Error("ordinary material worker request kind is unsupported");
 }
 function parseOrdinaryMaterialWorkerPrivateRequestV1(value) {
-  if (!isOrdinaryMaterialPrivateRequestRecordV1(value)) {
+  if (!hasExactKeys(value, [
+    "kind",
+    "handleId",
+    "targetFactor",
+    "preparations",
+    "recipientRequests",
+    "recipientInputs",
+    "factorSecret"
+  ])) {
     throw new Error("ordinary material private worker request has invalid fields");
   }
   if (value.kind !== "device_linking_ordinary_signer_material_prepare_private_v1") {
@@ -6914,7 +6925,7 @@ function assertOrdinaryExportRootResealingMatchesIdentityV1(input) {
 function parseOrdinaryResealedExportRootRecordV1(value) {
   if (value === null)
     return null;
-  if (!isOrdinaryResealedExportRootRecordV1(value)) {
+  if (!hasExactKeys(value, ["envelope"])) {
     throw new Error("ordinary material resealed export root has unsupported fields");
   }
   return {
@@ -6944,7 +6955,7 @@ function parseRecipientRequirementTuple(value) {
     throw new Error("ordinary signer material recipient requirements must contain one or two entries");
   }
   const requirements = value.map((entry, index) => {
-    if (!isOrdinaryRecipientRequirementRecordV1(entry)) {
+    if (!hasExactKeys(entry, ["kind", "keyFamily", "walletKeyId"])) {
       throw new Error(`ordinary recipient requirement ${index} has invalid fields`);
     }
     if (entry.kind !== "ordinary_signer_material_recipient_requirement_v1") {
@@ -6967,7 +6978,7 @@ function parseRecipientRequestTuple(value) {
     throw new Error("ordinary signer material recipient requests must contain one or two entries");
   }
   const requests = value.map((entry) => {
-    if (isOrdinaryEd25519RecipientRequestRecordV1(entry)) {
+    if (hasExactKeys(entry, ["kind", "keyFamily", "walletKeyId", "recipientPublicKeyB64u"])) {
       if (entry.kind !== "ordinary_ed25519_signer_material_recipient_request_v1" || entry.keyFamily !== "ed25519") {
         throw new Error("ordinary Ed25519 recipient request kind is invalid");
       }
@@ -6978,7 +6989,7 @@ function parseRecipientRequestTuple(value) {
         recipientPublicKeyB64u: parseB64u(entry.recipientPublicKeyB64u, "Ed25519 recipient public key")
       };
     }
-    if (isOrdinaryEcdsaRecipientRequestRecordV1(entry)) {
+    if (hasExactKeys(entry, ["kind", "keyFamily", "walletKeyId", "clientEphemeralPublicKey"])) {
       if (entry.kind !== "ordinary_ecdsa_signer_material_recipient_request_v1" || entry.keyFamily !== "ecdsa_secp256k1") {
         throw new Error("ordinary ECDSA recipient request kind is invalid");
       }
@@ -7002,7 +7013,7 @@ function parseRecipientInputTuple(value) {
     throw new Error("ordinary signer material recipient inputs must contain one or two entries");
   }
   const inputs = value.map((entry) => {
-    if (isOrdinaryEd25519RecipientInputRecordV1(entry)) {
+    if (hasExactKeys(entry, ["kind", "keyFamily", "walletKeyId", "recipientPrivateKey"])) {
       if (entry.kind !== "ordinary_ed25519_signer_material_recipient_input_v1" || entry.keyFamily !== "ed25519") {
         throw new Error("ordinary Ed25519 recipient input kind is invalid");
       }
@@ -7013,7 +7024,7 @@ function parseRecipientInputTuple(value) {
         recipientPrivateKey: parsePrivateKeyBuffer(entry.recipientPrivateKey, "Ed25519 recipient private key")
       };
     }
-    if (isOrdinaryEcdsaRecipientInputRecordV1(entry)) {
+    if (hasExactKeys(entry, ["kind", "keyFamily", "walletKeyId", "clientEphemeralPrivateKey"])) {
       if (entry.kind !== "ordinary_ecdsa_signer_material_recipient_input_v1" || entry.keyFamily !== "ecdsa_secp256k1") {
         throw new Error("ordinary ECDSA recipient input kind is invalid");
       }
@@ -7075,7 +7086,13 @@ function parsePreparation(value) {
   return parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationV1(value);
 }
 function parseTargetFactorBindingV1(value) {
-  if (isOrdinaryPasskeyTargetFactorRecordV1(value)) {
+  if (hasExactKeys(value, [
+    "kind",
+    "walletAuthMethodId",
+    "verificationDigestB64u",
+    "rpId",
+    "credentialIdB64u"
+  ])) {
     if (value.kind !== "passkey") {
       throw new Error("ordinary material target factor kind is unsupported");
     }
@@ -7091,7 +7108,13 @@ function parseTargetFactorBindingV1(value) {
       credentialIdB64u: parseB64u(value.credentialIdB64u, "ordinary target factor credentialIdB64u")
     };
   }
-  if (isOrdinaryEmailOtpTargetFactorRecordV1(value)) {
+  if (hasExactKeys(value, [
+    "kind",
+    "walletAuthMethodId",
+    "verificationDigestB64u",
+    "emailHashHex",
+    "registrationAuthorityId"
+  ])) {
     if (value.kind !== "email_otp") {
       throw new Error("ordinary material target factor kind is unsupported");
     }
@@ -7128,39 +7151,6 @@ function parseB64u(value, label) {
   decoded.fill(0);
   return encoded;
 }
-function isOrdinaryMaterialRecipientPrepareRecordV1(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "handleId|kind|requirements";
-}
-function isOrdinaryMaterialSealRecordV1(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "committed|handleId|kind|resealedExportRoot|targetFactor";
-}
-function isOrdinaryMaterialPrivateRequestRecordV1(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "factorSecret|handleId|kind|preparations|recipientInputs|recipientRequests|targetFactor";
-}
-function isOrdinaryResealedExportRootRecordV1(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "envelope";
-}
-function isOrdinaryRecipientRequirementRecordV1(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "keyFamily|kind|walletKeyId";
-}
-function isOrdinaryEd25519RecipientRequestRecordV1(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "keyFamily|kind|recipientPublicKeyB64u|walletKeyId";
-}
-function isOrdinaryEcdsaRecipientRequestRecordV1(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "clientEphemeralPublicKey|keyFamily|kind|walletKeyId";
-}
-function isOrdinaryEd25519RecipientInputRecordV1(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "keyFamily|kind|recipientPrivateKey|walletKeyId";
-}
-function isOrdinaryEcdsaRecipientInputRecordV1(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "clientEphemeralPrivateKey|keyFamily|kind|walletKeyId";
-}
-function isOrdinaryPasskeyTargetFactorRecordV1(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "credentialIdB64u|kind|rpId|verificationDigestB64u|walletAuthMethodId";
-}
-function isOrdinaryEmailOtpTargetFactorRecordV1(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "emailHashHex|kind|registrationAuthorityId|verificationDigestB64u|walletAuthMethodId";
-}
 
 // src/core/signingEngine/workerManager/workers/device-linking-key/ecdsaTargetShareHpke.ts
 var LINKED_DEVICE_ECDSA_SOURCE_CONTRIBUTION_HPKE_INFO_V1 = new TextEncoder().encode("seams/linked-device/ecdsa-source-contribution/hpke-x25519-hkdf-sha256-aes256gcm/v1");
@@ -7372,14 +7362,11 @@ function sameOrdinaryPreparations(left, right) {
   return true;
 }
 function sameOrdinaryEd25519SourceBinding(left, right) {
-  return left.operation === right.operation && sameNumberArray(left.session_id, right.session_id) && sameNumberArray(left.stable_key_context_binding, right.stable_key_context_binding) && left.lifecycle.lifecycle_id === right.lifecycle.lifecycle_id && left.lifecycle.work_kind === right.lifecycle.work_kind && left.lifecycle.primitive_request_kind === right.lifecycle.primitive_request_kind && left.lifecycle.root_share_epoch === right.lifecycle.root_share_epoch && left.lifecycle.account_id === right.lifecycle.account_id && left.lifecycle.session_id === right.lifecycle.session_id && left.lifecycle.signer_set_id === right.lifecycle.signer_set_id && left.lifecycle.selected_server_id === right.lifecycle.selected_server_id && sameRouterAbMpcMaterialActivationRef(left.material_activation, right.material_activation);
+  return left.operation === right.operation && sameRouterAbEd25519YaoByteSequence(left.session_id, right.session_id) && sameRouterAbEd25519YaoByteSequence(left.stable_key_context_binding, right.stable_key_context_binding) && left.lifecycle.lifecycle_id === right.lifecycle.lifecycle_id && left.lifecycle.work_kind === right.lifecycle.work_kind && left.lifecycle.primitive_request_kind === right.lifecycle.primitive_request_kind && left.lifecycle.root_share_epoch === right.lifecycle.root_share_epoch && left.lifecycle.account_id === right.lifecycle.account_id && left.lifecycle.session_id === right.lifecycle.session_id && left.lifecycle.signer_set_id === right.lifecycle.signer_set_id && left.lifecycle.selected_server_id === right.lifecycle.selected_server_id && sameRouterAbMpcMaterialActivationRef(left.material_activation, right.material_activation);
 }
 function sameOrdinaryEd25519ApplicationBinding(left, right) {
   return left.wallet_id === right.wallet_id && left.near_ed25519_signing_key_id === right.near_ed25519_signing_key_id && left.signing_root_id === right.signing_root_id && left.key_creation_signer_slot === right.key_creation_signer_slot;
 }
-function sameNumberArray(left, right) {
-  return left.length === right.length && left.every((value, index) => value === right[index]);
-}
 function sameOrdinaryTargetFactorAndPreparations(left, right) {
   return sameOrdinaryTargetFactor(left.targetFactor, right.targetFactor) && sameOrdinaryPreparations(left.preparations, right.preparations);
 }
@@ -7394,30 +7381,18 @@ function sameEcdsaTargetRecipientPreparation(left, right) {
 }
 
 // src/core/signingEngine/workerManager/workers/device-linking-key/requests.ts
-function isDeviceLinkingSignRequestRecordV1(value) {
-  return hasExactKeys(value, "bodyDigestB64u|canonicalPath|challengeB64u|devicePublicKeyDigestB64u|expiresAtMs|handleId|issuedAtMs|kind|linkSessionId|method");
-}
-function isDeviceLinkingCreateRequestRecordV1(value) {
-  return hasExactKeys(value, "kind");
-}
-function isDeviceLinkingHandleRequestRecordV1(value) {
-  return hasExactKeys(value, "handleId|kind");
-}
-function isDeviceLinkingEmailOtpFactorReleaseRequestRecordV1(value) {
-  return hasExactKeys(value, "baseWalletAuthMethodId|deviceId|enrollmentId|expectedChallengeId|factorRelease|handleId|kind|linkSessionId|targetPreparationDigestB64u|verificationGrant|walletAuthMethodId|walletId");
-}
-function isDeviceLinkingWalletSessionDeliveryRequestRecordV1(value) {
-  return hasExactKeys(value, "delivery|expected|handleId|kind");
-}
-function isDeviceLinkingWalletSessionExpectedRecordV1(value) {
-  return hasExactKeys(value, "authorityId|authorizationId|credentialDigestB64u|deliveryBinding|expiresAtMs|installationReceiptDigestB64u|issuedAtMs|linkSessionId|quotaId|recipientPublicKey65B64u|walletAuthMethodId|walletId|walletSessionId");
-}
-function isDeviceLinkingWorkerFrameRecordV1(value) {
-  return hasExactKeys(value, "id|request");
-}
-function hasExactKeys(value, sortedKeys) {
-  return isPlainObject(value) && Object.keys(value).sort().join("|") === sortedKeys;
-}
+var SIGN_REQUEST_FIELDS = [
+  "kind",
+  "handleId",
+  "linkSessionId",
+  "method",
+  "canonicalPath",
+  "bodyDigestB64u",
+  "devicePublicKeyDigestB64u",
+  "challengeB64u",
+  "issuedAtMs",
+  "expiresAtMs"
+];
 function parseHandleId(value) {
   const handleId = requireCanonicalString(value, "handleId", "is required");
   if (handleId.length > 256)
@@ -7468,7 +7443,7 @@ function parseTimestamp2(value, label) {
   return Number(value);
 }
 function parseSignRequest(value) {
-  if (!isDeviceLinkingSignRequestRecordV1(value)) {
+  if (!hasExactKeys(value, SIGN_REQUEST_FIELDS)) {
     throw new Error("device-linking sign request has invalid fields");
   }
   if (value.kind !== "device_linking_request_sign_v1") {
@@ -7496,7 +7471,7 @@ function parseSignRequest(value) {
   };
 }
 function parseFrame(value) {
-  if (!isDeviceLinkingWorkerFrameRecordV1(value)) {
+  if (!hasExactKeys(value, ["id", "request"])) {
     throw new Error("device-linking worker frame has invalid fields");
   }
   const frame = value;
@@ -7506,13 +7481,13 @@ function parseFrame(value) {
   };
 }
 function parseRequest(value) {
-  if (isDeviceLinkingCreateRequestRecordV1(value)) {
+  if (hasExactKeys(value, ["kind"])) {
     if (value.kind !== "device_linking_key_material_create_v1") {
       throw new Error("device-linking worker request kind is unsupported");
     }
     return { kind: "device_linking_key_material_create_v1" };
   }
-  if (isDeviceLinkingHandleRequestRecordV1(value) && value.kind === "device_linking_key_material_discard_v1") {
+  if (hasExactKeys(value, ["kind", "handleId"]) && value.kind === "device_linking_key_material_discard_v1") {
     return {
       kind: "device_linking_key_material_discard_v1",
       handleId: parseHandleId(value.handleId)
@@ -7537,17 +7512,30 @@ function parseRequest(value) {
       throw error;
     }
   }
-  if (isDeviceLinkingHandleRequestRecordV1(value) && value.kind === "device_linking_email_otp_export_root_recipient_create_v1") {
+  if (hasExactKeys(value, ["kind", "handleId"]) && value.kind === "device_linking_email_otp_export_root_recipient_create_v1") {
     return {
       kind: "device_linking_email_otp_export_root_recipient_create_v1",
       handleId: parseHandleId(value.handleId)
     };
   }
-  if (isDeviceLinkingSignRequestRecordV1(value)) {
+  if (hasExactKeys(value, SIGN_REQUEST_FIELDS)) {
     const parsed = parseSignRequest(value);
     return { kind: "device_linking_request_sign_v1", ...parsed };
   }
-  if (isDeviceLinkingEmailOtpFactorReleaseRequestRecordV1(value)) {
+  if (hasExactKeys(value, [
+    "kind",
+    "handleId",
+    "walletId",
+    "linkSessionId",
+    "enrollmentId",
+    "deviceId",
+    "walletAuthMethodId",
+    "baseWalletAuthMethodId",
+    "targetPreparationDigestB64u",
+    "expectedChallengeId",
+    "verificationGrant",
+    "factorRelease"
+  ])) {
     if (value.kind !== "device_linking_email_otp_factor_release_open_v1") {
       throw new Error("device-linking worker request kind is unsupported");
     }
@@ -7584,11 +7572,25 @@ function parseRequest(value) {
       factorRelease: parseLinkedDeviceEmailOtpFactorReleaseEnvelopeV1(value.factorRelease)
     };
   }
-  if (isDeviceLinkingWalletSessionDeliveryRequestRecordV1(value)) {
+  if (hasExactKeys(value, ["kind", "handleId", "delivery", "expected"])) {
     if (value.kind !== "device_linking_wallet_session_credential_delivery_open_v1") {
       throw new Error("device-linking worker request kind is unsupported");
     }
-    if (!isDeviceLinkingWalletSessionExpectedRecordV1(value.expected)) {
+    if (!hasExactKeys(value.expected, [
+      "linkSessionId",
+      "walletId",
+      "authorityId",
+      "walletAuthMethodId",
+      "authorizationId",
+      "walletSessionId",
+      "quotaId",
+      "deliveryBinding",
+      "credentialDigestB64u",
+      "installationReceiptDigestB64u",
+      "recipientPublicKey65B64u",
+      "issuedAtMs",
+      "expiresAtMs"
+    ])) {
       throw new Error("device-linking Wallet Session credential delivery expected identity has invalid fields");
     }
     const expected = value.expected;
@@ -8070,7 +8072,7 @@ async function prepareOrdinarySignerMaterial(request) {
       })) {
         throw new Error("ordinary signer material preparation conflicts with the existing activation reference");
       }
-      if (!sameBytes2(factorSecret, existing.factorSecret)) {
+      if (!sameBytes(factorSecret, existing.factorSecret)) {
         throw new Error("ordinary signer material preparation conflicts with the existing factor secret");
       }
       factorSecret.fill(0);
@@ -8109,7 +8111,7 @@ function assertOrdinaryRecipientPreparationMatchesRequest(prepared, request) {
   }
   for (const expected of prepared.recipientInputs) {
     const actual = request.recipientInputs.find((input) => input.keyFamily === expected.keyFamily && input.walletKeyId === expected.walletKeyId);
-    if (!actual || !sameBytes2(recipientPrivateBytes(expected), recipientPrivateBytes(actual))) {
+    if (!actual || !sameBytes(recipientPrivateBytes(expected), recipientPrivateBytes(actual))) {
       throw new Error("ordinary signer material recipient input changed before preparation");
     }
   }
@@ -8117,7 +8119,7 @@ function assertOrdinaryRecipientPreparationMatchesRequest(prepared, request) {
 function recipientPrivateBytes(input) {
   return new Uint8Array(input.kind === "ordinary_ed25519_signer_material_recipient_input_v1" ? input.recipientPrivateKey : input.clientEphemeralPrivateKey);
 }
-function sameBytes2(left, right) {
+function sameBytes(left, right) {
   if (left.length !== right.length)
     return false;
   let difference = 0;
@@ -8264,7 +8266,6 @@ async function createEmailOtpEd25519ExportRootRecipient(handleId) {
   slot.emailOtpExportRootRecipient = recipient;
   return { recipientPublicKeyB64u: recipient.public_key_b64u() };
 }
-var EMAIL_OTP_FACTOR_RELEASE_AAD_PREFIX = "seams/email-otp/factor-release/v1";
 async function decryptEmailOtpFactorReleaseEnvelope(input) {
   const release = input.factorRelease;
   if (input.expectedChallengeId !== release.challengeId) {
@@ -8273,7 +8274,7 @@ async function decryptEmailOtpFactorReleaseEnvelope(input) {
   const factorSecret = await openDeliveryRecipientEnvelope({
     slot: input.slot,
     envelope: release,
-    aad: () => `${EMAIL_OTP_FACTOR_RELEASE_AAD_PREFIX}\x00${input.walletId}\x00${release.enrollmentId}\x00${release.enrollmentSealKeyVersion}\x00${release.challengeId}`
+    aad: () => `${EMAIL_OTP_FACTOR_RELEASE_AAD_DOMAIN_V1}\x00${input.walletId}\x00${release.enrollmentId}\x00${release.enrollmentSealKeyVersion}\x00${release.challengeId}`
   });
   if (factorSecret.length !== 32) {
     factorSecret.fill(0);