@seams/wallet 0.7.1 → 0.8.0

package/dist/esm/SeamsWeb/operations/registration/pendingRegistrationRecovery.js

@@ -1,14 +1,14 @@
 import { mpcMaterialActivationRefsEqual } from "../../../shared-ts/src/utils/domainIds.js";
-import { base58Encode } from "../../../shared-ts/src/utils/base58.js";
 import { base64UrlDecode, base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
+import { base58Encode } from "../../../shared-ts/src/utils/base58.js";
 import { toAccountId } from "../../../core/types/accountIds.js";
 import { ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1 } from "../../../shared-ts/src/utils/routerAbEd25519Yao.js";
 import { parseEmailOtpWalletAuthAuthority } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { WALLET_CUSTODY_ED25519_MATERIAL_KEY_KIND } from "../../../core/indexedDB/walletCustodyEd25519MaterialRecord.js";
 import { assertPendingWalletRegistrationIdentity } from "../../../core/indexedDB/pendingWalletRegistrationCommit.js";
-import { IndexedDBManager } from "../../../core/indexedDB/index.js";
 import { activateWalletRegistration, completeWalletRegistrationNearProvisioning } from "../../../core/rpcClients/relayer/walletRegistration.js";
 import { parseEd25519YaoRecoveryCapabilityV1 } from "../../../core/signingEngine/session/passkey/ed25519YaoRecoveryCapability.js";
+import { IndexedDBManager } from "../../../core/indexedDB/index.js";
 import { prepareWalletEd25519RegistrationProjectionPublication, prepareWalletEmailOtpEd25519RegistrationPublication } from "../../../core/signingEngine/flows/registration/accountLifecycle.js";
 import { walletCustodyActiveClientMetadataV1 } from "../../../core/signingEngine/walletCustody/openCustodyCache.js";
 import { requireEd25519YaoRegistrationPublicResultMatches, requireEmailOtpEd25519YaoRegistrationPublicResultMatches } from "./registrationEd25519Yao.js";
@@ -18,19 +18,13 @@ import { unlockPendingEcdsaRegistration } from "./pendingEcdsaRegistrationRecove
 //#region src/SeamsWeb/operations/registration/pendingRegistrationRecovery.ts
 const defaultPendingRegistrationRecoveryPorts = {
 	listPendingWalletRegistrationCommits,
-	completeWalletRegistrationNearProvisioning: completePendingWalletRegistrationNearProvisioning,
+	completeWalletRegistrationNearProvisioning,
 	publishPendingWalletRegistrationCommit
 };
 async function listPendingWalletRegistrationCommits() {
 	await IndexedDBManager.initialize();
 	return await IndexedDBManager.listPendingWalletRegistrationCommits();
 }
-async function completePendingWalletRegistrationNearProvisioning(input) {
-	return await completeWalletRegistrationNearProvisioning(input);
-}
-async function activatePendingWalletRegistration(input) {
-	return await activateWalletRegistration(input);
-}
 async function publishPendingWalletRegistrationCommit(input) {
 	return await IndexedDBManager.publishPendingWalletRegistrationCommit(input);
 }
@@ -271,9 +265,7 @@ async function replayPendingNearProvisioning(args) {
 	await args.ports.publishPendingWalletRegistrationCommit(publicationInputFromPending(args.pending, finalized, registration));
 	return {
 		kind: "published",
-		registrationCeremonyId: args.pending.registrationCeremonyId,
-		walletId: args.pending.walletId,
-		sessionResult: finalized.registrationEstablishedSession.kind
+		registrationCeremonyId: args.pending.registrationCeremonyId
 	};
 }
 async function resumePendingNearRegistrations(args) {
@@ -285,12 +277,7 @@ async function resumePendingNearRegistrations(args) {
 			results.push({
 				kind: "unlock_required",
 				registrationCeremonyId: pending.registrationCeremonyId,
-				walletId: pending.walletId,
 				keyFamilies: pending.localMaterial.keyFamilies,
-				activationJournalId: pending.localMaterial.ecdsa.activationJournalId,
-				activationRequestDigestB64u: pending.localMaterial.ecdsa.activationRequestDigestB64u,
-				clientActivation: pending.localMaterial.ecdsa.clientActivation,
-				walletAuthMethodId: pending.walletAuthMethodId,
 				next: "unlock_exact_method",
 				reason: "ecdsa_local_finalization"
 			});
@@ -301,8 +288,6 @@ async function resumePendingNearRegistrations(args) {
 				kind: "unlock_required",
 				reason: "near_provisioning",
 				registrationCeremonyId: pending.registrationCeremonyId,
-				walletId: pending.walletId,
-				walletAuthMethodId: pending.walletAuthMethodId,
 				next: "unlock_exact_method"
 			});
 			continue;
@@ -325,7 +310,7 @@ async function resumePendingNearRegistrations(args) {
 	return results;
 }
 const defaultPendingEcdsaRegistrationRecoveryPorts = {
-	activateWalletRegistration: activatePendingWalletRegistration,
+	activateWalletRegistration,
 	publishPendingWalletRegistrationCommit,
 	unlockPendingEcdsaRegistration
 };

package/dist/esm/SeamsWeb/operations/registration/registration.js

@@ -1,21 +1,19 @@
 import { parseThresholdEd25519SessionId, parseWalletAuthMethodId, parseWebAuthnCredentialIdB64u } from "../../../shared-ts/src/utils/domainIds.js";
-import { base58Encode } from "../../../shared-ts/src/utils/base58.js";
-import { deriveImplicitNearAccountIdFromEd25519PublicKey } from "../../../shared-ts/src/utils/near.js";
 import { isObject } from "../../../shared-ts/src/utils/validation.js";
 import { base64UrlDecode, base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
 import { alphabetizeStringify, sha256BytesUtf8, sha256HexUtf8 } from "../../../shared-ts/src/utils/digests.js";
 import { parseCorrelationId, parseDigestB64u, parseIsoTimestamp } from "../../../shared-ts/src/utils/canonicalPrimitives.js";
 import { walletSessionPreservesCapabilities } from "../../../shared-ts/src/device-linking/activeWalletSession.js";
 import { WalletSessionStatusReadScope } from "../../../core/rpcClients/relayer/walletSessionAuthorizationStatus.js";
+import { base58Encode } from "../../../shared-ts/src/utils/base58.js";
+import { deriveImplicitNearAccountIdFromEd25519PublicKey } from "../../../shared-ts/src/utils/near.js";
 import { toAccountId } from "../../../core/types/accountIds.js";
 import { RegistrationEventPhase, createRegistrationFlowEvent } from "../../../core/types/sdkSentEvents.js";
 import { publishNearProvisioningState, runSingleFlightNearProvisioning } from "../../../core/signingEngine/flows/registration/nearProvisioningRegistry.js";
 import { parseNearEd25519SigningKeyId, walletIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
 import { thresholdEcdsaChainTargetFromChainFamily, toWalletId } from "../../../core/signingEngine/interfaces/ecdsaChainTarget.js";
 import { normalizeRuntimePolicyScope } from "../../../shared-ts/src/threshold/signingRootScope.js";
-import { parseCanonicalEcdsaServerActivationRequest } from "../../../shared-ts/src/utils/ecdsaCapabilityActivation.js";
 import { requireEvmFamilySigningKeySlotId } from "../../../shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js";
-import { parseSdkEcdsaDerivationSigningRootId, parseSdkEcdsaDerivationSigningRootVersion } from "../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import "../../../shared-ts/src/signing-lanes/index.js";
 import { toParticipantId, toRpId } from "../../../core/signingEngine/session/identity/evmFamilyEcdsaIdentity.js";
 import { nearEd25519SignerBindingFromBoundaryFields } from "../../../core/signingEngine/session/identity/exactSigningLaneIdentity.js";
@@ -28,9 +26,11 @@ import { ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, sameRouterA
 import { redactCredentialExtensionOutputs } from "../../../core/signingEngine/webauthnAuth/credentials/credentialExtensions.js";
 import { createRouterAbTraceContextV1 } from "../../../shared-ts/src/utils/routerAbTraceContext.js";
 import { RouterAbEd25519YaoClientV1 } from "../../../core/signingEngine/threshold/ed25519/yaoClient.js";
+import { parseSdkEcdsaDerivationSigningRootId, parseSdkEcdsaDerivationSigningRootVersion } from "../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import { parseEcdsaRelayerKeyId } from "../../../shared-ts/src/threshold/keyMaterialBrands.js";
 import { parseEcdsaClientVerifyingPublicKey33B64u, parseEcdsaRoleLocalBindingDigest, parseEcdsaThresholdKeyId } from "../../../core/signingEngine/session/keyMaterialBrands.js";
 import { buildEmailOtpWalletAuthAuthority, parseEmailOtpWalletAuthAuthority, walletAuthAuthorityRef } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
+import { parseCanonicalEcdsaServerActivationRequest } from "../../../shared-ts/src/utils/ecdsaCapabilityActivation.js";
 import { parseRouterAbEcdsaVerifiedClientActivationFactsV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
 import { buildRecoveredCustodyEnvelopeRecord } from "../../../core/signingEngine/walletCustody/recoveryReplacementEnvelope.js";
 import { WALLET_CUSTODY_ED25519_MATERIAL_KEY_KIND } from "../../../core/indexedDB/walletCustodyEd25519MaterialRecord.js";
@@ -38,11 +38,11 @@ import { getUserFriendlyErrorMessage } from "../../../shared-ts/src/utils/errors
 import { findRegistrationSignerPlanEvmFamilyEcdsaBranch, findRegistrationSignerPlanNearEd25519Branch, registrationSignerPlanFromSelection } from "../../../shared-ts/src/utils/registrationSignerPlan.js";
 import { planPendingNearRegistration, preparePendingNearRegistration } from "../../../core/indexedDB/pendingWalletRegistrationCommit.js";
 import { walletSessionAuthorizations } from "../../../core/indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
-import { IndexedDBManager } from "../../../core/indexedDB/index.js";
 import { nearEd25519YaoMaterialActivationFromMetadata } from "../../../core/signingEngine/session/material/nearEd25519YaoMaterialActivation.js";
 import { activateWalletRegistration, completeWalletRegistrationNearProvisioning, createWalletAddSignerIntent, finalizeWalletAddSigner, isEmailOtpWalletRegistrationFinalizeResponse, parseWalletRegistrationEcdsaDerivationRespond, respondWalletRegistration, setupWalletRegistration, startWalletAddSigner } from "../../../core/rpcClients/relayer/walletRegistration.js";
 import { buildEmailOtpAuthContext, emailOtpAuthContextEmailHashHex, emailOtpAuthContextProvider, emailOtpAuthContextProviderUserId } from "../../../core/signingEngine/session/identity/laneIdentity.js";
 import { persistPasskeyEd25519YaoSignerMaterialV1 } from "../../../core/signingEngine/session/passkey/ed25519YaoLocalMaterial.js";
+import { IndexedDBManager } from "../../../core/indexedDB/index.js";
 import { prepareWalletEcdsaRegistrationPublication, prepareWalletEd25519RegistrationPublication, prepareWalletEmailOtpEd25519RegistrationPublication } from "../../../core/signingEngine/flows/registration/accountLifecycle.js";
 import { computeAddSignerIntentDigest } from "../../../utils/intentDigest.js";
 import { establishUnlockedWalletEd25519ExportRootCapabilityV1, walletCustodyCeremonyTransportFromWorkerContextV1 } from "../../../core/signingEngine/walletCustody/unlockedEd25519ExportRootCapability.js";

package/dist/esm/SeamsWeb/operations/registration/registrationStrictEcdsa.js

@@ -2,11 +2,11 @@ import { base64UrlDecode } from "../../../shared-ts/src/utils/base64.js";
 import { parseCorrelationId, parseDigestB64u, parseIsoTimestamp } from "../../../shared-ts/src/utils/canonicalPrimitives.js";
 import { thresholdEcdsaChainTargetKey } from "../../../core/signingEngine/interfaces/ecdsaChainTarget.js";
 import { requireEvmFamilySigningKeySlotId } from "../../../shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js";
-import { parseSdkEcdsaDerivationSigningRootId, parseSdkEcdsaDerivationSigningRootVersion } from "../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import "../../../shared-ts/src/signing-lanes/index.js";
 import { toParticipantId } from "../../../core/signingEngine/session/identity/evmFamilyEcdsaIdentity.js";
 import { isRegistrationBenchmarkDiagnosticsEnabled } from "../../../core/signingEngine/walletCustody/ceremonyDriver.js";
 import { ROUTER_AB_TRACE_ID_HEADER_V1 } from "../../../shared-ts/src/utils/routerAbTraceContext.js";
+import { parseSdkEcdsaDerivationSigningRootId, parseSdkEcdsaDerivationSigningRootVersion } from "../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import { parseEcdsaRelayerKeyId } from "../../../shared-ts/src/threshold/keyMaterialBrands.js";
 import { parseEcdsaClientVerifyingPublicKey33B64u, parseEcdsaRoleLocalBindingDigest, parseEcdsaThresholdKeyId } from "../../../core/signingEngine/session/keyMaterialBrands.js";
 import { parseRouterAbEcdsaVerifiedClientActivationFactsV1, sameRouterAbEcdsaDerivationNormalSigningStateV1, sameRouterAbEcdsaDerivationPublicCapabilityV1 } from "../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";

package/dist/esm/SeamsWeb/operations/registration/registrationTerminalCommit.js

@@ -3,8 +3,8 @@ import { toWalletId } from "../../../core/signingEngine/interfaces/ecdsaChainTar
 import { isEmailOtpWalletAuthAuthority, parseEmailOtpWalletAuthAuthority } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { parsePendingWalletRegistrationCommitV1 } from "../../../core/indexedDB/pendingWalletRegistrationCommit.js";
 import { walletSessionAuthorizations } from "../../../core/indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
-import { IndexedDBManager } from "../../../core/indexedDB/index.js";
 import { buildEmailOtpAuthContext } from "../../../core/signingEngine/session/identity/laneIdentity.js";
+import { IndexedDBManager } from "../../../core/indexedDB/index.js";
 import { persistActiveWalletSessionAuthorizationFromDirectRegistration } from "../../../core/signingEngine/session/persistence/walletSessionAuthorizationProjection.js";
 import { assertNever, roundDurationMs } from "./registrationTiming.js";
 import { assertRegistrationEcdsaSessionMatchesWalletKeys, assertRegistrationWalletKeyCapabilities, assertSharedRegistrationEvmFamilyWalletKeyMaterial, registrationChainTargetListsMatch } from "./registrationStrictEcdsa.js";

package/dist/esm/SeamsWeb/operations/session/thresholdEcdsaProvisioning.js

@@ -21,16 +21,12 @@ function listThresholdEcdsaProvisionTargets(args) {
 	for (const chainConfig of args.chains) {
 		const family = chainFamilyFromNetwork(chainConfig.network);
 		if (family !== "evm" && family !== "tempo") continue;
-		const options = family === "tempo" ? args.signerOptions.tempo : args.signerOptions.evm;
-		if (!options.enabled) continue;
+		if (!(family === "tempo" ? args.signerOptions.tempo : args.signerOptions.evm).enabled) continue;
 		const chainTarget = thresholdEcdsaChainTargetFromConfig(chainConfig);
 		const key = thresholdEcdsaChainTargetKey(chainTarget);
 		if (seen.has(key)) continue;
 		seen.add(key);
-		targets.push({
-			chainTarget,
-			options
-		});
+		targets.push({ chainTarget });
 	}
 	return targets;
 }

package/dist/esm/SeamsWeb/operations/tempo/executeEvmFamilyTransaction.js

@@ -369,7 +369,10 @@ async function executeEvmFamilyTransactionLifecycle(args) {
 			}
 		});
 		const rawTxHex = assertRawTxHexOrThrow(signedResult.rawTxHex);
-		args.lifecycle.onBroadcastStarted?.(signedResult);
+		args.lifecycle.onBroadcastStarted({
+			walletSession: args.input.walletSession,
+			signedResult
+		});
 		txHash = normalizeTxHashOrThrow(await client.request({
 			method: "eth_sendRawTransaction",
 			params: [rawTxHex]

package/dist/esm/SeamsWeb/publicApi/auth.js

@@ -1,3 +1,4 @@
+import { WalletSessionStatusReadScope } from "../../core/rpcClients/relayer/walletSessionAuthorizationStatus.js";
 import { getRecentUnlocksDomain, getWalletSessionDomain, hasPasskeyCredentialDomain, lockDomain, logoutDomain, prefillRouterAbEcdsaDerivationPresignaturePoolDomain, unlockDomain } from "../operations/auth/walletAuth.js";
 //#region src/SeamsWeb/publicApi/auth.ts
 function createAuthCapability(deps) {
@@ -8,7 +9,7 @@ function createAuthCapability(deps) {
 		getWalletSession: async (walletId) => await getWalletSessionDomain(deps.getWalletAuthDeps(), walletId),
 		getRecentUnlocks: async () => await getRecentUnlocksDomain(deps.getWalletAuthDeps()),
 		hasPasskeyCredential: async (walletId) => await hasPasskeyCredentialDomain(deps.getWalletAuthDeps(), walletId),
-		prefillRouterAbEcdsaDerivationPresignaturePool: async (args) => await prefillRouterAbEcdsaDerivationPresignaturePoolDomain(deps.getWalletAuthDeps(), args),
+		prefillRouterAbEcdsaDerivationPresignaturePool: async (args) => await prefillRouterAbEcdsaDerivationPresignaturePoolDomain(deps.getWalletAuthDeps(), args, new WalletSessionStatusReadScope()),
 		requestEmailOtpChallenge: deps.domain.requestEmailOtpChallenge,
 		requestEmailOtpSigningSessionChallenge: deps.domain.requestEmailOtpSigningSessionChallenge,
 		refreshEmailOtpSigningSession: deps.domain.refreshEmailOtpSigningSession,

package/dist/esm/SeamsWeb/publicApi/near.js

@@ -3,8 +3,8 @@ import { toAccountId } from "../../core/types/accountIds.js";
 import { toError } from "../../shared-ts/src/utils/errors.js";
 import { cloneAuthenticatorOptions } from "../../shared-ts/src/utils/authenticatorOptions.js";
 import { walletSessionAuthorizations } from "../../core/indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
-import { IndexedDBManager } from "../../core/indexedDB/index.js";
 import { fundImplicitNearAccountForTesting } from "../../core/rpcClients/relayer/walletRegistration.js";
+import { IndexedDBManager } from "../../core/indexedDB/index.js";
 import { registerWallet } from "../operations/registration/registration.js";
 import { requireBrowserCapabilityOperation } from "./capabilitySelection.js";
 import { resolveNearCommandSubject } from "../operations/near/commandSubject.js";

package/dist/esm/SeamsWeb/publicApi/tempo.js

@@ -63,6 +63,11 @@ function createTempoSignerCapability(deps, transactionDispatch = { kind: "ordina
 		...args,
 		chainTarget: resolveTempoChainTarget(deps.configs.network.chains, args.chainTarget)
 	}));
+	const onBroadcastStarted = (args) => {
+		const walletIframe = deps.getWalletIframe();
+		if (!walletIframe.shouldUseWalletIframe()) return;
+		walletIframe.requireRouter(toWalletId(args.walletSession.walletId)).then((router) => router.notifyTransactionBroadcastStarted(args.signedResult)).catch(() => {});
+	};
 	const reportBroadcastAccepted = async (args) => {
 		const walletIframe = deps.getWalletIframe();
 		const walletId = toWalletId(args.walletSession.walletId);
@@ -178,6 +183,7 @@ function createTempoSignerCapability(deps, transactionDispatch = { kind: "ordina
 		}
 	};
 	const lifecycle = {
+		onBroadcastStarted,
 		signEvmFamily,
 		reportBroadcastAccepted,
 		reportBroadcastRejected,

package/dist/esm/SeamsWeb/publicApi/transactionReview.js

@@ -3,7 +3,10 @@ const bridges = /* @__PURE__ */ new WeakMap();
 function registerTransactionReviewBridge(near, bridge) {
 	bridges.set(near, bridge);
 }
+function getTransactionReviewBridge(near) {
+	return bridges.get(near);
+}
 //#endregion
-export { registerTransactionReviewBridge };
+export { getTransactionReviewBridge, registerTransactionReviewBridge };
 
 //# sourceMappingURL=transactionReview.js.map

package/dist/esm/SeamsWeb/signingSurface/BrowserSigningSurface.js

@@ -1,11 +1,11 @@
 import { mpcMaterialActivationRefsEqual, parseThresholdEd25519SessionId, parseWalletId } from "../../shared-ts/src/utils/domainIds.js";
 import { parseWalletSessionAuthorizationId, parseWalletSessionMintId } from "../../shared-ts/src/authorization/capabilityKinds.js";
-import { base58Encode } from "../../shared-ts/src/utils/base58.js";
 import { base64UrlDecode, base64UrlEncode } from "../../shared-ts/src/utils/base64.js";
 import { sha256HexUtf8 } from "../../shared-ts/src/utils/digests.js";
 import { activeWalletSessionV1RecordsEqual } from "../../shared-ts/src/device-linking/activeWalletSession.js";
 import { WalletSessionStatusReadScope, createRelayerExactWalletSessionStatusPort } from "../../core/rpcClients/relayer/walletSessionAuthorizationStatus.js";
 import { ROUTER_AB_ED25519_NORMAL_SIGNING_STATE_KIND, SIGNING_SESSION_SEAL_GROUP_ID } from "../../shared-ts/src/utils/signingSessionSeal.js";
+import { base58Encode } from "../../shared-ts/src/utils/base58.js";
 import { toAccountId } from "../../core/types/accountIds.js";
 import { WALLET_EMAIL_OTP_UNLOCK_OPERATION } from "../../shared-ts/src/utils/emailOtpDomain.js";
 import { WALLET_AUTH_METHODS } from "../../shared-ts/src/utils/signerDomain.js";
@@ -36,24 +36,24 @@ import { isEmailOtpWalletAuthAuthority, parseWalletAuthAuthorityRef, walletAuthA
 import { clearLinkedDeviceEcdsaHolderMaterialsWasm, destroyLinkedDeviceEcdsaHolderMaterialsWasm, openEcdsaRoleLocalSigningMaterialWasm } from "../../core/signingEngine/threshold/crypto/ecdsaDerivationClientWasm.js";
 import { recoverWalletCustodyManifestV1 } from "../../core/signingEngine/walletCustody/walletRecoveryManifest.js";
 import { deleteWalletCustodyEd25519MaterialV1, loadWalletCustodyEd25519MaterialV1, persistWalletCustodyEd25519MaterialV1 } from "../../core/signingEngine/walletCustody/ed25519SeedMaterial.js";
+import { IndexedDbEcdsaCapabilityManifestStore } from "../../core/indexedDB/seamsWalletDB/ecdsaCapabilityManifestStore.js";
 import "../../shared-ts/src/device-linking/index.js";
 import { NEAR_ED25519_YAO_KEY_VERSION_V1 } from "../../shared-ts/src/utils/registrationSignerPlan.js";
 import { WalletSessionAuthorizationUpgradeRequiredError, walletSessionAuthorizations } from "../../core/indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
-import { IndexedDBManager } from "../../core/indexedDB/index.js";
-import { redactedPasskeyRegistrationCredential, serializeRegistrationCredentialWithPRF } from "../../core/signingEngine/webauthnAuth/credentials/helpers.js";
-import { IndexedDbEcdsaCapabilityManifestStore } from "../../core/indexedDB/seamsWalletDB/ecdsaCapabilityManifestStore.js";
 import { importWalletCustodyEcdsaContinuity } from "../../core/indexedDB/seamsWalletDB/walletCustodyEcdsaContinuity.js";
 import { clearLinkedEcdsaHolderRuntimesV1, listLinkedEcdsaHolderRuntimesV1, removeLinkedEcdsaHolderRuntimeV1, resolveLinkedEcdsaHolderRuntimeV1 } from "../../core/signingEngine/session/material/linkedEcdsaHolderRuntime.js";
 import { SigningAuthPlanKind } from "../../core/signingEngine/stepUpConfirmation/types.js";
 import { fullWalletLoginRequired, invalidWalletSigningMaterial, isWalletSigningStateFailure, walletSigningMaterialBlockError } from "../../core/signingEngine/session/material/walletSigningStateFailure.js";
+import { redactedPasskeyRegistrationCredential, serializeRegistrationCredentialWithPRF } from "../../core/signingEngine/webauthnAuth/credentials/helpers.js";
 import { buildBlockedMpcCapabilityHydrationPlan, buildRehydrateMaterialActivationHydrationPlan, buildUseLiveRuntimeHydrationPlan } from "../../core/signingEngine/session/material/mpcCapabilityHydration.js";
 import { nearEd25519YaoMaterialActivationFromMetadata, nearEd25519YaoRuntimeRef, resolveNearEd25519YaoCapabilityHydrationV1 } from "../../core/signingEngine/session/material/nearEd25519YaoMaterialActivation.js";
 import { buildThresholdEd25519WebAuthnPrfSecretSource } from "../../core/signingEngine/threshold/ed25519/walletSession.js";
-import { resolveThresholdEd25519CommitQueueKey, withThresholdEd25519CommitQueue } from "../../core/signingEngine/threshold/ed25519/commitQueue.js";
+import { clearThresholdCommitQueue, resolveThresholdCommitQueueKey } from "../../core/signingEngine/threshold/commitQueueShared.js";
+import { withThresholdEd25519CommitQueue } from "../../core/signingEngine/threshold/ed25519/commitQueue.js";
 import { buildAuthorizationRequiredNearEd25519YaoSigningPreparation, buildAuthorizedNearEd25519YaoSigningPreparation, classifyNearEd25519WalletSessionAuthorization, nearEd25519SessionMatchesMaterialActivation } from "../../core/signingEngine/session/material/nearEd25519YaoSigningPreparation.js";
+import { ed25519DurableMaterialLocator } from "../../core/signingEngine/session/sealedRecovery/materialActivationKey.js";
 import { isConcreteAvailableSigningLane } from "../../core/signingEngine/session/availability/availableSigningLanes.js";
 import { signNear } from "../../core/signingEngine/flows/signNear/signNear.js";
-import { ed25519DurableMaterialLocator } from "../../core/signingEngine/session/sealedRecovery/materialActivationKey.js";
 import { buildRouterAbEd25519SigningWalletSession } from "../../core/signingEngine/session/routerAbSigningWalletSession.js";
 import { listExactSealedSessionsForWallet, readExactEd25519SealedSession } from "../../core/signingEngine/session/persistence/sealedSessionStore.js";
 import { ed25519SealedRuntimeAuthorityRef, parseExactEd25519SealedSessionRuntime, resolveExactEd25519SealedSessionRuntimeForLane, resolveExactEd25519SealedSessionRuntimeForWalletSubject } from "../../core/signingEngine/session/warmCapabilities/ed25519SealedSessionRuntime.js";
@@ -64,12 +64,13 @@ import { buildPasskeyEd25519RestoreMetadata, persistPasskeyEd25519YaoSessionForR
 import { buildRestorableMpcMaterialRefForHydration } from "../../core/signingEngine/session/material/ecdsaCapabilityHydration.js";
 import { readOwnerWalletExecutionLaneProjectionV1 } from "../../core/rpcClients/relayer/ownerWalletExecutionLanePreflight.js";
 import { hydrateWalletExecutionLane } from "../../core/signingEngine/session/lanes/walletExecutionLaneHydration.js";
+import { IndexedDBManager } from "../../core/indexedDB/index.js";
 import { storeNearThresholdKeyMaterial } from "../../core/accountData/near/keyMaterial.js";
 import { persistVerifiedEmailOtpAuthorityAfterUnlock, walletAuthAuthorityRefForVerifiedEmailOtpUnlock } from "../operations/authMethods/emailOtp/walletActivation.js";
 import { isRetryableSealedRefreshCapabilityFetchError } from "../../core/signingEngine/session/warmCapabilities/sealedRefreshParity.js";
 import { buildExactEcdsaPasskeyOwnerLaneScope, buildExactLinkedEmailOtpOwnerLaneScope, buildExactPasskeyOwnerLaneScope, resolveExactOwnerLaneScope, resolveExactWalletAuthAuthority } from "../../core/signingEngine/session/identity/ownerLaneScope.js";
 import { buildFreshEmailOtpRoutePlan } from "../../core/signingEngine/session/emailOtp/routePlan.js";
-import { clearThresholdEcdsaSigningQueue, withThresholdEcdsaSigningQueue } from "../../core/signingEngine/threshold/ecdsa/signingQueue.js";
+import { withThresholdEcdsaSigningQueue } from "../../core/signingEngine/threshold/ecdsa/signingQueue.js";
 import { reconcileTempoNonceLane, reportTempoBroadcastAccepted, reportTempoBroadcastRejected, reportTempoDroppedOrReplaced, reportTempoFinalized, signEvmFamily } from "../../core/signingEngine/flows/signEvmFamily/signEvmFamily.js";
 import { UserConfirmationType } from "../../core/signingEngine/stepUpConfirmation/userConfirmationType.js";
 import { exportKeypairWithUI, resolveExactKeyExportLane } from "../../core/signingEngine/flows/recovery/public.js";
@@ -1844,18 +1845,15 @@ var BrowserSigningSurface = class {
 		const rehydrationKey = nearEd25519CapabilityRehydrationKey(subject);
 		const existingRehydration = this.nearEd25519CapabilityRehydrationBySubject.get(rehydrationKey);
 		if (existingRehydration) {
-			const reboundSubject = await existingRehydration;
-			const rehydrated = await this.resolveActiveNearEd25519YaoSigningLane(reboundSubject);
+			const rebound = await existingRehydration;
+			const rehydrated = await this.resolveActiveNearEd25519YaoSigningLane(rebound.subject);
 			if (rehydrated) return rehydrated;
 			throw new Error("[SigningEngine][near] joined rehydration did not publish an active lane");
 		}
 		const rehydration = this.rehydrateNearEd25519YaoCapabilityForSigning(subject);
 		this.nearEd25519CapabilityRehydrationBySubject.set(rehydrationKey, rehydration);
 		try {
-			const reboundSubject = await rehydration;
-			const rehydrated = await this.resolveActiveNearEd25519YaoSigningLane(reboundSubject);
-			if (rehydrated) return rehydrated;
-			throw new Error("[SigningEngine][near] local material rehydration did not publish a lane");
+			return (await rehydration).material;
 		} finally {
 			if (this.nearEd25519CapabilityRehydrationBySubject.get(rehydrationKey) === rehydration) this.nearEd25519CapabilityRehydrationBySubject.delete(rehydrationKey);
 		}
@@ -3181,7 +3179,14 @@ var BrowserSigningSurface = class {
 				passkeyPrfFirstB64u: warmSessionClaim.prfFirstB64u
 			} : { kind: "unavailable" }
 		});
-		if (liveHydration.kind === "live") return subject;
+		if (liveHydration.kind === "live") {
+			const material = await this.resolveActiveNearEd25519YaoSigningLane(subject);
+			if (!material) throw new Error("[SigningEngine][near] local material rehydration did not publish a lane");
+			return {
+				subject,
+				material
+			};
+		}
 		if (liveHydration.kind === "rehydrated") {
 			if (!warmSessionClaim.ok) {
 				liveHydration.activeClient.dispose();
@@ -3214,8 +3219,12 @@ var BrowserSigningSurface = class {
 					subject,
 					walletSessionState
 				});
-				if (!await this.resolveActiveNearEd25519YaoSigningLane(reboundSubject)) throw new Error("[SigningEngine][near] local material rehydration did not publish an active lane");
-				return reboundSubject;
+				const published = await this.resolveActiveNearEd25519YaoSigningLane(reboundSubject);
+				if (!published) throw new Error("[SigningEngine][near] local material rehydration did not publish an active lane");
+				return {
+					subject: reboundSubject,
+					material: published
+				};
 			} catch (error) {
 				liveHydration.activeClient.dispose();
 				throw error;
@@ -3362,7 +3371,7 @@ var BrowserSigningSurface = class {
 	async withExactEd25519MaterialOwner(args) {
 		return await withThresholdEd25519CommitQueue({
 			queueByKey: this.thresholdEd25519CommitQueueByKey,
-			queueKey: resolveThresholdEd25519CommitQueueKey({ materialActivation: args.materialActivation }),
+			queueKey: resolveThresholdCommitQueueKey({ materialActivation: args.materialActivation }),
 			nearAccountId: args.nearAccountId,
 			enabled: true,
 			task: args.task
@@ -3661,7 +3670,7 @@ var BrowserSigningSurface = class {
 		if (args.credentialExpectation.kind === "expect_exact_operation_credential" && (args.credentialExpectation.operationCredential.walletSessionId !== exactAuthorization.operationCredential.walletSessionId || args.credentialExpectation.operationCredential.token !== exactAuthorization.operationCredential.token)) throw new Error("[SigningEngine][near] expected Email OTP operation credential changed");
 		return await withThresholdEd25519CommitQueue({
 			queueByKey: this.thresholdEd25519CommitQueueByKey,
-			queueKey: resolveThresholdEd25519CommitQueueKey({ materialActivation: args.metadata.materialActivation }),
+			queueKey: resolveThresholdCommitQueueKey({ materialActivation: args.metadata.materialActivation }),
 			nearAccountId: toAccountId(args.bootstrap.session.nearAccountId),
 			enabled: args.commitQueue === "acquire",
 			task: async () => {
@@ -3881,7 +3890,7 @@ var BrowserSigningSurface = class {
 		this.ed25519YaoPageLifecycleOwner.dispose();
 	}
 	clearThresholdEcdsaSigningQueue() {
-		clearThresholdEcdsaSigningQueue(this.thresholdEcdsaSigningQueueByKey);
+		clearThresholdCommitQueue(this.thresholdEcdsaSigningQueueByKey);
 	}
 	async clearLinkedEcdsaHolderMaterials() {
 		await clearLinkedDeviceEcdsaHolderMaterialsWasm({ workerCtx: this.signerWorkerManager.getContext() });

package/dist/esm/SeamsWeb/walletIframe/client/router.js

@@ -344,8 +344,7 @@ function parseHostedWalletExchangeDelivery(value, expected) {
 		exchangeCode: requireCompactExchangeValue(delivery.exchangeCode, "delivery.exchangeCode"),
 		nonce: requireCompactExchangeValue(delivery.nonce, "delivery.nonce"),
 		appOrigin,
-		walletOrigin,
-		expiresAtMs
+		walletOrigin
 	};
 }
 function parseHostedWalletSeamsSessionRedemption(value) {

package/dist/esm/SeamsWeb/walletIframe/client/surface/domain.js

@@ -245,8 +245,6 @@ function reduceWalletIframeSurface(current, event) {
 			presentation: event.presentation,
 			authMenuSessionId: event.authMenuSessionId
 		})));
-		case "auth_menu_request_completed":
-		case "auth_menu_request_closed":
 		case "auth_menu_request_cancelled": return authMenuEventOwnsSurface(current, event) ? {
 			kind: "applied",
 			surface: hiddenWalletIframeSurface()

package/dist/esm/SeamsWeb/walletIframe/client/transport/IframeTransport.js

@@ -1,9 +1,7 @@
 import { isObject } from "../../../../shared-ts/src/utils/validation.js";
-import { WebAuthnBridgeMessage } from "../../../../core/signingEngine/webauthnAuth/fallbacks/safari-fallbacks.js";
 import { WALLET_PROTOCOL_VERSION } from "../../shared/messages.js";
 import { createWalletIframe, removeExistingOverlaysForOrigin } from "./iframe-transport-dom.js";
 import { performHandshake, waitForBootHint, waitForLoad } from "./iframe-transport-handshake.js";
-import { handleWebAuthnBridgeMessage } from "./webauthn-bridge.js";
 //#region src/SeamsWeb/walletIframe/client/transport/IframeTransport.ts
 /**
 * IframeTransport - Client-Side Communication Layer
@@ -102,7 +100,6 @@ var IframeTransport = class {
 				if (this.debug) console.debug("[IframeTransport][wallet-log]", data.payload);
 				return;
 			}
-			if (type === WebAuthnBridgeMessage.Create || type === WebAuthnBridgeMessage.Get) handleWebAuthnBridgeMessage(type, data, e);
 		};
 		this.opts = {
 			servicePath: "/wallet-service",
@@ -201,7 +198,6 @@ var IframeTransport = class {
 			const port = await performHandshake({
 				iframe,
 				connectTimeoutMs: this.opts.connectTimeoutMs,
-				walletOrigin: this.walletOrigin,
 				walletServiceUrl: this.walletServiceUrl,
 				expectedProtocolVersion: WALLET_PROTOCOL_VERSION,
 				getTargetOrigin: (attempt) => this.getConnectTargetOrigin(attempt),

package/dist/esm/SeamsWeb/walletIframe/client/transport/iframe-transport-handshake.js

@@ -142,7 +142,7 @@ async function performHandshake(opts) {
 			break;
 		}
 		attempt += 1;
-		opts.onAttempt?.(attempt, elapsed);
+		opts.onAttempt?.(attempt);
 		const channel = new MessageChannel();
 		const port1 = channel.port1;
 		const port2 = channel.port2;

package/dist/esm/SeamsWeb/walletIframe/host/restoredSessionPresignaturePrefill.js

@@ -0,0 +1,29 @@
+import { WalletSessionStatusReadScope } from "../../../core/rpcClients/relayer/walletSessionAuthorizationStatus.js";
+import { walletSessionRefFromSession } from "../../../core/signingEngine/interfaces/ecdsaChainTarget.js";
+//#region src/SeamsWeb/walletIframe/host/restoredSessionPresignaturePrefill.ts
+async function scheduleRestoredSessionPresignaturePrefills(args) {
+	switch (args.state.kind) {
+		case "active_session": break;
+		case "wallet_unlocked_without_signing_session":
+			if (args.state.reason !== "exhausted") return;
+			break;
+		case "wallet_locked":
+		case "wallet_authenticated_identity_unresolvable":
+		case "expired_session": return;
+		default:
+			args.state;
+			return;
+	}
+	const walletSession = walletSessionRefFromSession({ walletId: args.state.walletId });
+	const statusReads = new WalletSessionStatusReadScope();
+	const prefills = [];
+	for (const chainTarget of args.chainTargets) prefills.push(args.prefill({
+		walletSession,
+		chainTarget
+	}, statusReads));
+	await Promise.all(prefills);
+}
+//#endregion
+export { scheduleRestoredSessionPresignaturePrefills };
+
+//# sourceMappingURL=restoredSessionPresignaturePrefill.js.map

package/dist/esm/SeamsWeb/walletIframe/host/ui/auth-menu/AuthMenuFooter.js

@@ -0,0 +1,64 @@
+import { SeamsWordmark } from "../../../../../core/signingEngine/uiConfirm/ui/preact/SeamsWordmark.js";
+import { alertIcon, shieldIcon } from "./icons.js";
+import { Component } from "preact";
+import { jsx, jsxs } from "preact/jsx-runtime";
+//#region src/SeamsWeb/walletIframe/host/ui/auth-menu/AuthMenuFooter.tsx
+/** @jsxImportSource preact */
+/**
+* The strip along the card's bottom edge. It names who secures the menu, and a
+* failure takes that line over, so reporting one never moves the controls.
+*/
+var AuthMenuFooter = class extends Component {
+	constructor(..._args) {
+		super(..._args);
+		this.shownNotice = "";
+	}
+	render() {
+		const { notice, onRetry } = this.props;
+		if (notice) this.shownNotice = notice;
+		return /* @__PURE__ */ jsxs("div", {
+			class: "seams-auth-footer",
+			"data-state": notice ? "notice" : "brand",
+			children: [
+				/* @__PURE__ */ jsxs("div", {
+					class: "seams-auth-footer-brand",
+					"aria-hidden": notice ? "true" : void 0,
+					children: [
+						shieldIcon(),
+						" ",
+						/* @__PURE__ */ jsx("span", { children: "Secured by" }),
+						" ",
+						/* @__PURE__ */ jsx(SeamsWordmark, {})
+					]
+				}),
+				/* @__PURE__ */ jsxs("div", {
+					class: "seams-auth-footer-notice",
+					children: [
+						alertIcon(),
+						/* @__PURE__ */ jsx("span", {
+							class: "seams-auth-footer-text",
+							"aria-hidden": "true",
+							children: this.shownNotice
+						}),
+						/* @__PURE__ */ jsx("button", {
+							class: "seams-auth-footer-action",
+							type: "button",
+							disabled: !notice,
+							onClick: onRetry,
+							children: "Try again"
+						})
+					]
+				}),
+				notice ? /* @__PURE__ */ jsx("p", {
+					class: "sr-only",
+					role: "alert",
+					children: notice
+				}) : null
+			]
+		});
+	}
+};
+//#endregion
+export { AuthMenuFooter };
+
+//# sourceMappingURL=AuthMenuFooter.js.map