@seams/wallet 0.7.1 → 0.8.0

package/dist/esm/core/signingEngine/uiConfirm/ui/transaction-display/abi/abiDecode.js

@@ -293,29 +293,19 @@ function decodeCallDataWithAbi(args) {
 	let argsBytes;
 	try {
 		const bytes = hexToBytes(normalizedDataHex);
-		if (bytes.length < 4) return {
-			functionLabel: `${matched.name}()`,
-			selector: matched.selector
-		};
+		if (bytes.length < 4) return { functionLabel: `${matched.name}()` };
 		argsBytes = bytes.slice(4);
 	} catch {
-		return {
-			functionLabel: `${matched.name}()`,
-			selector: matched.selector
-		};
+		return { functionLabel: `${matched.name}()` };
 	}
 	const decodedValues = decodeTupleComponents(matched.inputs, argsBytes, 0);
-	if (!decodedValues) return {
-		functionLabel: `${matched.name}()`,
-		selector: matched.selector
-	};
+	if (!decodedValues) return { functionLabel: `${matched.name}()` };
 	const decodedArguments = matched.inputs.map((input, index) => ({
 		key: String(input.name || "").trim() || `arg${index}`,
 		value: decodedValues[index]
 	}));
 	return {
 		functionLabel: `${matched.name}()`,
-		selector: matched.selector,
 		decodedArgumentsJsonText: formatDecodedArgumentsJsonText(decodedArguments)
 	};
 }

package/dist/esm/core/signingEngine/uiConfirm/ui/transaction-display/tree.js

@@ -1,9 +1,6 @@
 import { isString } from "../../../../../shared-ts/src/utils/validation.js";
 import { formatArgs, formatCodeSize, shortenPubkey } from "./formatters.js";
 import { renderFallbackDisplayOperation } from "./renderers/fallback.js";
-import { isNearDisplayOperation, renderNearDisplayOperation } from "./renderers/near.js";
-import { isEvmDisplayOperation, renderEvmDisplayOperation } from "./renderers/evm.js";
-import { isTempoDisplayOperation, renderTempoDisplayOperation } from "./renderers/tempo.js";
 //#region src/core/signingEngine/uiConfirm/ui/transaction-display/tree.ts
 function toChainLabel(chain) {
 	switch (chain) {
@@ -28,14 +25,8 @@ function buildWarningNodes(warnings) {
 		}))
 	}];
 }
-function selectOperationRenderer(operation) {
-	if (isNearDisplayOperation(operation)) return renderNearDisplayOperation;
-	if (isEvmDisplayOperation(operation)) return renderEvmDisplayOperation;
-	if (isTempoDisplayOperation(operation)) return renderTempoDisplayOperation;
-	return renderFallbackDisplayOperation;
-}
 function renderOperationNode(operation, depth, path) {
-	return selectOperationRenderer(operation)({
+	return renderFallbackDisplayOperation({
 		operation,
 		depth,
 		path,

package/dist/esm/core/signingEngine/walletCustody/activateEd25519Capability.js

@@ -96,7 +96,6 @@ async function activateWalletCustodyEd25519CapabilityV1(args) {
 	if (args.metadata.applicationBinding.wallet_id !== String(args.walletSession.walletId) || args.metadata.applicationBinding.key_creation_signer_slot !== identity.signerSlot || args.metadata.scope.threshold_session_id !== identity.expectedThresholdSessionId || !mpcMaterialActivationRefsEqual(args.metadata.materialActivation, args.bootstrap.capability.materialActivation)) throw new Error("Wallet custody Ed25519 active client metadata changed");
 	const walletSessionState = await buildWalletSessionState({
 		bootstrap: args.bootstrap,
-		identity,
 		operationCredential: args.operationCredential,
 		providerSubject: args.providerSubject,
 		relayerUrl: args.relayerUrl,

package/dist/esm/core/signingEngine/walletCustody/emailOtpLink.js

@@ -115,19 +115,16 @@ async function linkWalletEmailOtpCustody(input) {
 		createdAtMs: nowMs,
 		updatedAtMs: nowMs
 	}));
-	return {
-		finalized: await finalizeWalletAddAuthMethod({
-			relayerUrl: input.relayerUrl,
-			walletId: input.walletId,
-			addAuthMethodCeremonyId: started.addAuthMethodCeremonyId,
-			custodyEnvelope,
-			emailOtpTarget: {
-				kind: "new_enrollment",
-				enrollment: enrollment.emailOtpEnrollment
-			}
-		}),
-		enrollmentId: enrollment.enrollmentId
-	};
+	return { finalized: await finalizeWalletAddAuthMethod({
+		relayerUrl: input.relayerUrl,
+		walletId: input.walletId,
+		addAuthMethodCeremonyId: started.addAuthMethodCeremonyId,
+		custodyEnvelope,
+		emailOtpTarget: {
+			kind: "new_enrollment",
+			enrollment: enrollment.emailOtpEnrollment
+		}
+	}) };
 }
 //#endregion
 export { linkWalletEmailOtpCustody };

package/dist/esm/core/signingEngine/walletCustody/openCustodyCache.js

@@ -108,10 +108,7 @@ async function openOrRejoinWalletCustodyEd25519V1(input) {
 	const cached = await input.loadCachedMaterial();
 	if (cached.kind !== "found") {
 		input.ownedFactorSecret.fill(0);
-		return {
-			kind: "rejoin_required",
-			reason: cached.kind === "absent" ? "no cached custody material on this device" : cached.reason
-		};
+		return { kind: "rejoin_required" };
 	}
 	return {
 		kind: "opened",
@@ -120,8 +117,7 @@ async function openOrRejoinWalletCustodyEd25519V1(input) {
 			activation: input.activation,
 			envelope: input.envelope,
 			ownedFactorSecret: input.ownedFactorSecret
-		}),
-		usedCache: true
+		})
 	};
 }
 //#endregion

package/dist/esm/core/signingEngine/walletCustody/passkeyLink.js

@@ -166,16 +166,13 @@ async function linkWalletPasskeyCustody(input) {
 		...input.createRegistrationCredential ? { registrationCredential: await input.createRegistrationCredential(started.registration) } : {},
 		nowMs: input.nowMs
 	});
-	return {
-		finalized: await finalizeWalletAddAuthMethod({
-			relayerUrl: input.relayerUrl,
-			walletId: input.walletId,
-			addAuthMethodCeremonyId: started.addAuthMethodCeremonyId,
-			webauthnRegistration: linked.registration,
-			custodyEnvelope: linked.custodyEnvelope
-		}),
-		registration: linked.registration
-	};
+	return { finalized: await finalizeWalletAddAuthMethod({
+		relayerUrl: input.relayerUrl,
+		walletId: input.walletId,
+		addAuthMethodCeremonyId: started.addAuthMethodCeremonyId,
+		webauthnRegistration: linked.registration,
+		custodyEnvelope: linked.custodyEnvelope
+	}) };
 }
 //#endregion
 export { linkWalletPasskeyCustody };

package/dist/esm/core/signingEngine/walletCustody/registrationCeremony.js

@@ -1,6 +1,5 @@
 import { base64UrlDecode, base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
 import { sha256Bytes } from "../../../shared-ts/src/utils/digests.js";
-import "../../../shared-ts/src/utils/encoders.js";
 import { issueWalletRecoveryCodes, zeroizeIssuedWalletRecoveryCodes } from "../../../shared-ts/src/wallet-recovery/recoveryCodeIssuance.js";
 import "../../../shared-ts/src/wallet-recovery/recoveryCodes.js";
 import { deriveRecoveryCodeLocatorV1FromBytes } from "../../../shared-ts/src/wallet-recovery/recoveryCodeLocator.js";

package/dist/esm/core/signingEngine/walletCustody/walletRecoveryCredential.js

@@ -1,6 +1,5 @@
 import { parseWebAuthnCredentialIdB64u } from "../../../shared-ts/src/utils/domainIds.js";
 import { base64UrlDecode } from "../../../shared-ts/src/utils/base64.js";
-import "../../../shared-ts/src/utils/encoders.js";
 //#region src/core/signingEngine/walletCustody/walletRecoveryCredential.ts
 function recoveryFactorSecret(registration) {
 	const first = registration.clientExtensionResults.prf?.results?.first;

package/dist/esm/core/signingEngine/walletCustody/walletRecoveryEcdsa.js

@@ -1,6 +1,5 @@
 import { base64UrlDecode, base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
 import { alphabetizeStringify, sha256BytesUtf8 } from "../../../shared-ts/src/utils/digests.js";
-import "../../../shared-ts/src/utils/encoders.js";
 import { sameRouterAbMpcMaterialActivationRef } from "../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
 import { signWalletRecoveryEcdsaMaterialPossessionProofWasm } from "../threshold/crypto/ecdsaDerivationClientWasm.js";
 import { parseRouterAbEcdsaDerivationPublicCapabilityV1, parseRouterAbEcdsaRegistrationActivationReceiptV1, sameRouterAbEcdsaDerivationPublicIdentityV1, sameRouterAbServerIdentityV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";

package/dist/esm/core/signingEngine/walletCustody/walletRecoveryEd25519.js

@@ -1,8 +1,8 @@
 import { buildMpcMaterialActivationRef, parseMpcLifecycleBindingRef, parseMpcMaterialActivationId } from "../../../shared-ts/src/utils/domainIds.js";
 import { secureRandomId } from "../../../shared-ts/src/utils/secureRandomId.js";
-import { deriveWalletRecoveryKeyLifecycleId, parseRecoveryCodeReservationId } from "../../../shared-ts/src/wallet-recovery/recoveryCodeReservation.js";
 import { routerAbMpcMaterialActivationRefFromWire, routerAbMpcMaterialActivationRefToWire, sameRouterAbMpcMaterialActivationRef } from "../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
 import { ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1, parseRouterAbEd25519YaoRecoveryActivationAdmissionReceiptV1, parseRouterAbEd25519YaoRecoveryActivationExecuteRequestV1, parseRouterAbEd25519YaoRecoveryActivationReceiptV1, parseRouterAbEd25519YaoRecoveryActivationResultV1, parseRouterAbEd25519YaoRecoveryAdmissionRequestV1 } from "../../../shared-ts/src/utils/routerAbEd25519Yao.js";
+import { deriveWalletRecoveryKeyLifecycleId, parseRecoveryCodeReservationId } from "../../../shared-ts/src/wallet-recovery/recoveryCodeReservation.js";
 //#region src/core/signingEngine/walletCustody/walletRecoveryEd25519.ts
 async function buildEd25519RecoveryAdmissionRequestV1(input) {
 	const currentActivation = routerAbMpcMaterialActivationRefFromWire(input.currentScope.material_activation);

package/dist/esm/core/signingEngine/walletCustody/walletRecoveryManifest.js

@@ -1,5 +1,4 @@
 import { base64UrlDecode, base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
-import "../../../shared-ts/src/utils/encoders.js";
 import { recoverEvmFamilyCustodyV1, recoverNearEd25519CustodyV1 } from "./registrationCeremony.js";
 import { RouterAbEd25519YaoHttpActivationTransportV1 } from "../threshold/ed25519/yaoClient.js";
 import { walletRecoveryEd25519ActiveClientMetadataV1 } from "./ceremonyActiveClientMetadata.js";
@@ -80,7 +79,6 @@ async function recoverWalletCustodyManifestV1(input) {
 						recordedKeyManifestDigestB64u: entry.recordedKeyManifestDigestB64u,
 						factorReplacement: replacement,
 						nearEd25519SigningKeyId: entry.recoveryBasis.applicationBinding.near_ed25519_signing_key_id,
-						recoveryLifecycleId: request.scope.lifecycle_id,
 						yaoAdmission: admitted.receipt,
 						yaoApplication: admitted.request.application_binding,
 						participantIds: admitted.request.participant_ids,

package/dist/esm/core/signingEngine/walletCustody/walletRecoveryRotation.js

@@ -1,5 +1,4 @@
 import { base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
-import "../../../shared-ts/src/utils/encoders.js";
 import { issueWalletRecoveryCodes, zeroizeIssuedWalletRecoveryCodes } from "../../../shared-ts/src/wallet-recovery/recoveryCodeIssuance.js";
 import "../../../shared-ts/src/wallet-recovery/recoveryCodes.js";
 import { deriveRecoveryCodeLocatorV1FromBytes } from "../../../shared-ts/src/wallet-recovery/recoveryCodeLocator.js";

package/dist/esm/core/signingEngine/webauthnAuth/walletOriginWebAuthn.js

@@ -0,0 +1,109 @@
+//#region src/core/signingEngine/webauthnAuth/walletOriginWebAuthn.ts
+var WalletOriginWebAuthnUnavailableError = class extends Error {
+	constructor(message) {
+		super(message);
+		this.code = "wallet_origin_webauthn_unavailable";
+		this.name = "WalletOriginWebAuthnUnavailableError";
+	}
+};
+async function executeWalletOriginWebAuthn(kind, publicKey, deps) {
+	const publicKeyForAttempt = clonePublicKeyOptions(kind, publicKey);
+	try {
+		if (kind === "create") return await navigator.credentials.create({
+			publicKey: publicKeyForAttempt,
+			...deps.abortSignal ? { signal: deps.abortSignal } : {}
+		});
+		return await navigator.credentials.get({
+			publicKey: publicKeyForAttempt,
+			...deps.abortSignal ? { signal: deps.abortSignal } : {}
+		});
+	} catch (error) {
+		if (kind === "create" && (isAncestorOriginError(error) || isDocumentNotFocusedError(error))) throw new WalletOriginWebAuthnUnavailableError(`Wallet-origin WebAuthn registration is unavailable: ${safeMessage(error)}`);
+		throw error;
+	}
+}
+function clonePublicKeyOptions(kind, publicKey) {
+	return kind === "create" ? cloneCreationOptions(publicKey) : cloneRequestOptions(publicKey);
+}
+function cloneCreationOptions(publicKey) {
+	return {
+		...publicKey,
+		challenge: cloneBufferSource(publicKey.challenge),
+		user: {
+			...publicKey.user,
+			id: cloneBufferSource(publicKey.user.id)
+		},
+		excludeCredentials: publicKey.excludeCredentials?.map(cloneCredentialDescriptor),
+		extensions: cloneCredentialExtensions(publicKey.extensions)
+	};
+}
+function cloneRequestOptions(publicKey) {
+	return {
+		...publicKey,
+		challenge: cloneBufferSource(publicKey.challenge),
+		allowCredentials: publicKey.allowCredentials?.map(cloneCredentialDescriptor),
+		extensions: cloneCredentialExtensions(publicKey.extensions)
+	};
+}
+function cloneCredentialDescriptor(descriptor) {
+	return {
+		...descriptor,
+		id: cloneBufferSource(descriptor.id)
+	};
+}
+function cloneCredentialExtensions(extensions) {
+	if (!extensions) return extensions;
+	const cloned = { ...extensions };
+	const prf = cloned.prf;
+	if (prf && typeof prf === "object") {
+		const prfRecord = { ...prf };
+		if (prfRecord.eval && typeof prfRecord.eval === "object") prfRecord.eval = clonePrfEval(prfRecord.eval);
+		if (prfRecord.evalByCredential && typeof prfRecord.evalByCredential === "object") {
+			const evalByCredential = {};
+			for (const [credentialId, evalValue] of Object.entries(prfRecord.evalByCredential)) evalByCredential[credentialId] = evalValue && typeof evalValue === "object" ? clonePrfEval(evalValue) : evalValue;
+			prfRecord.evalByCredential = evalByCredential;
+		}
+		cloned.prf = prfRecord;
+	}
+	return cloned;
+}
+function clonePrfEval(input) {
+	return {
+		...input,
+		...isBufferSource(input.first) ? { first: cloneBufferSource(input.first) } : {},
+		...isBufferSource(input.second) ? { second: cloneBufferSource(input.second) } : {}
+	};
+}
+function isBufferSource(value) {
+	return value instanceof ArrayBuffer || ArrayBuffer.isView(value);
+}
+function cloneBufferSource(value) {
+	if (value instanceof ArrayBuffer) return value.slice(0);
+	const view = value;
+	const clonedBytes = new Uint8Array(view.buffer, view.byteOffset, view.byteLength).slice();
+	if (value instanceof DataView) return new DataView(clonedBytes.buffer);
+	const ViewCtor = Object.getPrototypeOf(value).constructor;
+	return new ViewCtor(clonedBytes.buffer);
+}
+function isAncestorOriginError(err) {
+	const msg = safeMessage(err);
+	return /origin of the document is not the same as its ancestors/i.test(msg);
+}
+function isDocumentNotFocusedError(err) {
+	const name = safeName(err);
+	const msg = safeMessage(err);
+	const isNotAllowed = name === "NotAllowedError";
+	const mentionsFocus = /document is not focused|not focused|focus/i.test(msg);
+	return Boolean(isNotAllowed && mentionsFocus);
+}
+function safeMessage(err) {
+	return String(err?.message || "");
+}
+function safeName(err) {
+	const name = err?.name;
+	return typeof name === "string" ? name : "";
+}
+//#endregion
+export { executeWalletOriginWebAuthn };
+
+//# sourceMappingURL=walletOriginWebAuthn.js.map

package/dist/esm/core/signingEngine/workerManager/SignerWorkerManager.js

@@ -1,4 +1,3 @@
-import { createNearKeyOps } from "./nearKeyOps/createNearKeyOps.js";
 //#region src/core/signingEngine/workerManager/SignerWorkerManager.ts
 /**
 * WebAuthnWorkers handles PRF, workers, and COSE operations
@@ -23,7 +22,6 @@ var SignerWorkerManager = class {
 		this.evmExplorerUrl = deps.evmExplorerUrl;
 		this.getTheme = deps.getTheme;
 		this.workerTransport = deps.workerTransport;
-		this.nearKeyOps = createNearKeyOps(() => this.getContext());
 	}
 	setWorkerBaseOrigin(origin) {
 		this.workerTransport.setWorkerBaseOrigin(origin);

package/dist/esm/core/signingEngine/workerManager/deviceLinkingPorts.js

@@ -7,6 +7,7 @@ import "../../../shared-ts/src/passkey-custody/index.js";
 import { parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationV1 } from "../../../shared-ts/src/device-linking/sourceContribution.js";
 import { parseCommittedAuthorityPackagesV1 } from "../../../shared-ts/src/device-linking/committedSignerPackages.js";
 import { parseWalletAuthorityLinkedSignerMaterialRecordV1 } from "../../indexedDB/linkedAuthoritySignerMaterial.js";
+import { hasExactKeys } from "../../../shared-ts/src/utils/exactKeys.js";
 //#region src/core/signingEngine/workerManager/deviceLinkingPorts.ts
 function targetFactorBindingV1(targetFactor) {
 	const authMethod = parseWalletAuthMethodId(targetFactor.authMethod.walletAuthMethodId);
@@ -67,11 +68,15 @@ function createDeviceLinkingOrdinaryMaterialWorkerPortV1(send) {
 }
 function parseOrdinaryResealedExportRootRecordV1(value) {
 	if (value === null) return null;
-	if (!isOrdinaryResealedExportRootRecordV1(value)) throw new Error("ordinary material resealed export root has unsupported fields");
+	if (!hasExactKeys(value, ["envelope"])) throw new Error("ordinary material resealed export root has unsupported fields");
 	return { envelope: parsePasskeyCustodyEnvelopeRecord(value.envelope) };
 }
 function parsePreparationResult(value) {
-	if (!isOrdinaryMaterialPreparationResultRecordV1(value)) throw new Error("ordinary material preparation result has invalid fields");
+	if (!hasExactKeys(value, [
+		"kind",
+		"targetFactor",
+		"preparations"
+	])) throw new Error("ordinary material preparation result has invalid fields");
 	if (value.kind !== "device_linking_ordinary_signer_material_preparation_v1") throw new Error("ordinary material preparation result kind is invalid");
 	return {
 		kind: "device_linking_ordinary_signer_material_preparation_v1",
@@ -93,7 +98,11 @@ function parsePreparationTuple(value) {
 function parseRecipientRequirementTuple(value) {
 	if (!Array.isArray(value) || value.length === 0 || value.length > 2) throw new Error("ordinary signer material recipient requirements must contain one or two entries");
 	const requirements = value.map((entry, index) => {
-		if (!isOrdinaryRecipientRequirementRecordV1(entry)) throw new Error(`ordinary recipient requirement ${index} has invalid fields`);
+		if (!hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId"
+		])) throw new Error(`ordinary recipient requirement ${index} has invalid fields`);
 		if (entry.kind !== "ordinary_signer_material_recipient_requirement_v1") throw new Error("ordinary recipient requirement kind is invalid");
 		if (entry.keyFamily !== "ed25519" && entry.keyFamily !== "ecdsa_secp256k1") throw new Error("ordinary recipient requirement key family is invalid");
 		const walletKeyId = parseWalletKey(entry.walletKeyId);
@@ -111,7 +120,12 @@ function parseRecipientRequirementTuple(value) {
 function parseRecipientRequestTuple(value) {
 	if (!Array.isArray(value) || value.length === 0 || value.length > 2) throw new Error("ordinary signer material recipient requests must contain one or two entries");
 	const requests = value.map((entry) => {
-		if (isOrdinaryEd25519RecipientRequestRecordV1(entry)) {
+		if (hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId",
+			"recipientPublicKeyB64u"
+		])) {
 			if (entry.kind !== "ordinary_ed25519_signer_material_recipient_request_v1" || entry.keyFamily !== "ed25519") throw new Error("ordinary Ed25519 recipient request kind is invalid");
 			return {
 				kind: "ordinary_ed25519_signer_material_recipient_request_v1",
@@ -120,7 +134,12 @@ function parseRecipientRequestTuple(value) {
 				recipientPublicKeyB64u: parseB64u(entry.recipientPublicKeyB64u, "Ed25519 recipient public key")
 			};
 		}
-		if (isOrdinaryEcdsaRecipientRequestRecordV1(entry)) {
+		if (hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId",
+			"clientEphemeralPublicKey"
+		])) {
 			if (entry.kind !== "ordinary_ecdsa_signer_material_recipient_request_v1" || entry.keyFamily !== "ecdsa_secp256k1") throw new Error("ordinary ECDSA recipient request kind is invalid");
 			return {
 				kind: "ordinary_ecdsa_signer_material_recipient_request_v1",
@@ -137,7 +156,11 @@ function parseRecipientRequestTuple(value) {
 	return [first, ...requests.slice(1)];
 }
 function parseRecipientPreparationResult(value) {
-	if (!isOrdinaryRecipientPreparationResultRecordV1(value)) throw new Error("ordinary recipient preparation result has invalid fields");
+	if (!hasExactKeys(value, [
+		"kind",
+		"recipientRequests",
+		"recipientInputs"
+	])) throw new Error("ordinary recipient preparation result has invalid fields");
 	if (value.kind !== "device_linking_ordinary_signer_material_recipient_preparation_v1") throw new Error("ordinary recipient preparation result kind is invalid");
 	const recipientRequests = parseRecipientRequestTuple(value.recipientRequests);
 	const recipientInputs = parseRecipientInputTuple(value.recipientInputs);
@@ -150,7 +173,12 @@ function parseRecipientPreparationResult(value) {
 function parseRecipientInputTuple(value) {
 	if (!Array.isArray(value) || value.length === 0 || value.length > 2) throw new Error("ordinary signer material recipient inputs must contain one or two entries");
 	const inputs = value.map((entry) => {
-		if (isOrdinaryEd25519RecipientInputRecordV1(entry)) {
+		if (hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId",
+			"recipientPrivateKey"
+		])) {
 			if (entry.kind !== "ordinary_ed25519_signer_material_recipient_input_v1" || entry.keyFamily !== "ed25519") throw new Error("ordinary Ed25519 recipient input kind is invalid");
 			return {
 				kind: "ordinary_ed25519_signer_material_recipient_input_v1",
@@ -159,7 +187,12 @@ function parseRecipientInputTuple(value) {
 				recipientPrivateKey: parsePrivateKeyBuffer(entry.recipientPrivateKey, "Ed25519 recipient private key")
 			};
 		}
-		if (isOrdinaryEcdsaRecipientInputRecordV1(entry)) {
+		if (hasExactKeys(entry, [
+			"kind",
+			"keyFamily",
+			"walletKeyId",
+			"clientEphemeralPrivateKey"
+		])) {
 			if (entry.kind !== "ordinary_ecdsa_signer_material_recipient_input_v1" || entry.keyFamily !== "ecdsa_secp256k1") throw new Error("ordinary ECDSA recipient input kind is invalid");
 			return {
 				kind: "ordinary_ecdsa_signer_material_recipient_input_v1",
@@ -207,7 +240,13 @@ function parsePreparation(value) {
 	return parseLinkedDeviceOrdinaryMaterialSourceContributionPreparationV1(value);
 }
 function parseTargetFactorBindingV1(value) {
-	if (isOrdinaryPasskeyTargetFactorRecordV1(value)) {
+	if (hasExactKeys(value, [
+		"kind",
+		"walletAuthMethodId",
+		"verificationDigestB64u",
+		"rpId",
+		"credentialIdB64u"
+	])) {
 		if (value.kind !== "passkey") throw new Error("ordinary material target factor kind is unsupported");
 		const authMethod = parseWalletAuthMethodId(value.walletAuthMethodId);
 		if (!authMethod.ok) throw new Error(authMethod.error.message);
@@ -220,7 +259,13 @@ function parseTargetFactorBindingV1(value) {
 			credentialIdB64u: parseB64u(value.credentialIdB64u, "ordinary target factor credentialIdB64u")
 		};
 	}
-	if (isOrdinaryEmailOtpTargetFactorRecordV1(value)) {
+	if (hasExactKeys(value, [
+		"kind",
+		"walletAuthMethodId",
+		"verificationDigestB64u",
+		"emailHashHex",
+		"registrationAuthorityId"
+	])) {
 		if (value.kind !== "email_otp") throw new Error("ordinary material target factor kind is unsupported");
 		const authMethod = parseWalletAuthMethodId(value.walletAuthMethodId);
 		if (!authMethod.ok) throw new Error(authMethod.error.message);
@@ -238,7 +283,13 @@ function parseTargetFactorBindingV1(value) {
 	throw new Error("ordinary material target factor kind is unsupported");
 }
 function parseWalletAuthorityExportRootRecordV1(value) {
-	if (!isWalletAuthorityExportRootRecordV1(value)) throw new Error("ordinary material export-root record has invalid fields");
+	if (!hasExactKeys(value, [
+		"kind",
+		"authorityId",
+		"walletAuthMethodId",
+		"walletKeyId",
+		"envelope"
+	])) throw new Error("ordinary material export-root record has invalid fields");
 	if (value.kind !== "wallet_authority_export_root_v1") throw new Error("ordinary material export-root record kind is invalid");
 	const authorityId = parseWalletAuthorityId(value.authorityId);
 	if (!authorityId.ok) throw new Error(authorityId.error.message);
@@ -255,7 +306,11 @@ function parseWalletAuthorityExportRootRecordV1(value) {
 	};
 }
 function parseSealedLocalAuthorityMaterialSetV1(value) {
-	if (!isSealedLocalAuthorityMaterialSetRecordV1(value)) throw new Error("ordinary material worker returned an invalid sealed record set");
+	if (!hasExactKeys(value, [
+		"signerMaterials",
+		"exportRoot",
+		"installedRecordSetDigestB64u"
+	])) throw new Error("ordinary material worker returned an invalid sealed record set");
 	if (!Array.isArray(value.signerMaterials) || value.signerMaterials.length === 0) throw new Error("ordinary material worker returned an invalid sealed record set");
 	const signerMaterials = value.signerMaterials.map((entry) => parseWalletAuthorityLinkedSignerMaterialRecordV1(entry));
 	const firstSignerMaterial = signerMaterials[0];
@@ -281,42 +336,6 @@ function parseB64u(value, label) {
 	decoded.fill(0);
 	return encoded;
 }
-function isOrdinaryResealedExportRootRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "envelope";
-}
-function isOrdinaryMaterialPreparationResultRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "kind|preparations|targetFactor";
-}
-function isOrdinaryRecipientRequirementRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "keyFamily|kind|walletKeyId";
-}
-function isOrdinaryEd25519RecipientRequestRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "keyFamily|kind|recipientPublicKeyB64u|walletKeyId";
-}
-function isOrdinaryEcdsaRecipientRequestRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "clientEphemeralPublicKey|keyFamily|kind|walletKeyId";
-}
-function isOrdinaryRecipientPreparationResultRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "kind|recipientInputs|recipientRequests";
-}
-function isOrdinaryEd25519RecipientInputRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "keyFamily|kind|recipientPrivateKey|walletKeyId";
-}
-function isOrdinaryEcdsaRecipientInputRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "clientEphemeralPrivateKey|keyFamily|kind|walletKeyId";
-}
-function isOrdinaryPasskeyTargetFactorRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "credentialIdB64u|kind|rpId|verificationDigestB64u|walletAuthMethodId";
-}
-function isOrdinaryEmailOtpTargetFactorRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "emailHashHex|kind|registrationAuthorityId|verificationDigestB64u|walletAuthMethodId";
-}
-function isWalletAuthorityExportRootRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "authorityId|envelope|kind|walletAuthMethodId|walletKeyId";
-}
-function isSealedLocalAuthorityMaterialSetRecordV1(value) {
-	return value !== null && typeof value === "object" && !Array.isArray(value) && Object.keys(value).sort().join("|") === "exportRoot|installedRecordSetDigestB64u|signerMaterials";
-}
 //#endregion
 export { createDeviceLinkingOrdinaryMaterialWorkerPortV1 };
 

package/dist/esm/core/signingEngine/workerManager/ecdsaClientWorkerChannels.js

@@ -1,7 +1,3 @@
-import "../../../shared-ts/src/utils/validation.js";
-import "../../../shared-ts/src/signing-lanes/rotationProtocolParsers.js";
-import "../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
-import "../../../shared-ts/src/utils/routerAbPublicKeyset.js";
 import "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
 import "../../../shared-ts/src/device-linking/sourceContribution.js";
 //#region src/core/signingEngine/workerManager/ecdsaClientWorkerChannels.ts

package/dist/esm/core/signingEngine/workerManager/validation.js

@@ -1,6 +1,6 @@
+import { assertString, isObject } from "../../../shared-ts/src/utils/validation.js";
 import { base58Encode } from "../../../shared-ts/src/utils/base58.js";
 import { ensureEd25519Prefix } from "../../../shared-ts/src/utils/near.js";
-import { assertString, isObject } from "../../../shared-ts/src/utils/validation.js";
 import { normalizeRegistrationCredential } from "../webauthnAuth/credentials/helpers.js";
 //#region src/core/signingEngine/workerManager/validation.ts
 const toPublicKeyString = (pk) => {

package/dist/esm/core/signingEngine/workerManager/workerTransport.js

@@ -2,7 +2,6 @@ import { isObject } from "../../../shared-ts/src/utils/validation.js";
 import { secureRandomId } from "../../../shared-ts/src/utils/secureRandomId.js";
 import { EcdsaDerivationClientCustomRequestType, EcdsaPresignClientRequestType, SignerWorkerOperationError, WorkerControlMessage } from "./workerTypes.js";
 import { errorMessage } from "../../../shared-ts/src/utils/errors.js";
-import { isWorkerError, isWorkerProgress, isWorkerSuccess } from "../../types/signer-worker.js";
 import { clearAllRouterAbEcdsaDerivationClientPresignatures, clearRouterAbEcdsaDerivationClientPresignaturesForWallet } from "../routerAb/ecdsaDerivation/presignaturePool.js";
 import { resolveWorkerUrl } from "../../walletRuntimePaths/workers.js";
 import { dropUnlockedWalletEd25519ExportRootCapabilityReferenceV1 } from "../walletCustody/unlockedEd25519ExportRootCapability.js";
@@ -278,8 +277,7 @@ var WorkerTransport = class {
 				resolve: (value) => resolve(value),
 				reject,
 				onEvent: onEvent ? (update) => onEvent(update) : void 0,
-				timeoutId,
-				nearDirectResult: typeof type === "string"
+				timeoutId
 			});
 			try {
 				worker.postMessage({
@@ -384,11 +382,7 @@ var WorkerTransport = class {
 		return worker;
 	}
 	connectPresignAuthorityChannel(request) {
-		if (request.type === EcdsaPresignClientRequestType.ListAvailable && this.presignAuthorityKind === null) {
-			this.connectDerivationPresignChannel(this.getOrCreateWorker("ecdsaPresignClient"), "role_local_derivation_handle");
-			return;
-		}
-		if (request.type !== EcdsaPresignClientRequestType.SessionInit) return;
+		if (request.type !== EcdsaPresignClientRequestType.ListAvailable && request.type !== EcdsaPresignClientRequestType.SessionInit) return;
 		const presignWorker = this.getOrCreateWorker("ecdsaPresignClient");
 		const authorityKind = this.parsePresignAuthorityKind(request.payload);
 		switch (authorityKind) {
@@ -638,45 +632,8 @@ var WorkerTransport = class {
 		this.resetWorker("ecdsaDerivationClient");
 	}
 	resolveNearResponse(requestId, response) {
-		const pending = this.getPendingMap("nearSigner").get(requestId);
-		if (!pending) return;
-		if (pending.nearDirectResult) {
-			this.resolveRequest("nearSigner", requestId, response);
-			return;
-		}
-		const workerResponse = response;
-		if (isWorkerProgress(workerResponse)) {
-			const progressResponse = workerResponse;
-			pending.onEvent?.(progressResponse.payload);
-			return;
-		}
-		if (isWorkerError(workerResponse)) {
-			const errorResponse = workerResponse;
-			this.rejectRequest("nearSigner", requestId, new SignerWorkerOperationError({
-				message: errorResponse.payload.error,
-				code: String(errorResponse.payload.errorCode || "").trim() || void 0,
-				workerKind: "nearSigner"
-			}));
-			return;
-		}
-		if (isWorkerSuccess(workerResponse)) {
-			this.resolveRequest("nearSigner", requestId, workerResponse);
-			return;
-		}
-		if (isObject(response) && "message" in response && "stack" in response) {
-			const message = String(response.message ?? "Unknown error");
-			this.rejectRequest("nearSigner", requestId, new SignerWorkerOperationError({
-				message: `Worker sent generic error: ${message}`,
-				code: "WORKER_PROTOCOL_ERROR",
-				workerKind: "nearSigner"
-			}));
-			return;
-		}
-		this.rejectRequest("nearSigner", requestId, new SignerWorkerOperationError({
-			message: `Unknown worker response format: ${JSON.stringify(response)}`,
-			code: "WORKER_PROTOCOL_ERROR",
-			workerKind: "nearSigner"
-		}));
+		if (!this.getPendingMap("nearSigner").get(requestId)) return;
+		this.resolveRequest("nearSigner", requestId, response);
 	}
 	handleWorkerError(kind, event) {
 		const runtimeError = new SignerWorkerOperationError({