@seams/wallet 0.7.1 → 0.8.0

package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js

@@ -1,10 +1,10 @@
 import { hasWhitespaceOrControlCharacters, parseLaneShareEpoch, parseLinkedDeviceId, parseSigningLaneId, parseWalletAuthMethodId, parseWalletId, parseWalletKeyId } from "../utils/domainIds.js";
 import { requireRecord } from "../utils/validation.js";
 import { rejectUnknownFields } from "../utils/exactRecord.js";
-import { parseDigestField, parseEd25519PublicKeyB64u, parseKeyCreationSignerSlot, parseSecp256k1CompressedPublicKeyB64u, parseUnixMs } from "../passkey-custody/primitives.js";
+import { parseDigestField, parseEd25519PublicKeyB64u, parseKeyCreationSignerSlot, parseSecp256k1CompressedPublicKeyB64u, parseUnixMs, requireParsed } from "../passkey-custody/primitives.js";
 import { parseNearEd25519SigningKeyId } from "../utils/registrationIds.js";
-import { parseLaneHolderParticipantRecordV1, parseLaneParticipantBindingDigestB64u, parseSigningWorkerParticipantRecordV1 } from "./participants.js";
 import { requireEvmFamilySigningKeySlotId } from "./evmFamilySigningKeySlotId.js";
+import { parseLaneHolderParticipantRecordV1, parseLaneParticipantBindingDigestB64u, parseSigningWorkerParticipantRecordV1 } from "./participants.js";
 import { parseOwnerLaneParticipantContinuityV1 } from "./ownerContinuity.js";
 //#region ../shared-ts/src/signing-lanes/recordParsers.ts
 const WALLET_KEY_COMMON_FIELDS = [
@@ -88,10 +88,6 @@ function signingLaneRecordFields(laneKind) {
 		case "delegated_execution": return DELEGATED_SIGNING_LANE_FIELDS;
 	}
 }
-function requireResult(result, label) {
-	if (result.ok) return result.value;
-	throw new Error(`${label} ${result.error.message}`);
-}
 function parseRequiredDomainId(raw, label) {
 	if (raw === void 0 || raw === null) throw new Error(`${label} is required`);
 	if (typeof raw !== "string") throw new Error(`${label} must be a string`);
@@ -191,12 +187,12 @@ function parseSigningLaneLifecycleState(raw, label) {
 function parseSigningLaneReferenceFields(record, label) {
 	if (record.kind !== "signing_lane_reference_v1") throw new Error(`${label}.kind must be signing_lane_reference_v1`);
 	return buildSigningLaneReference({
-		walletId: requireResult(parseWalletId(record.walletId), `${label}.walletId`),
-		walletKeyId: requireResult(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
-		laneId: requireResult(parseSigningLaneId(record.laneId), `${label}.laneId`),
-		laneShareEpoch: requireResult(parseLaneShareEpoch(record.laneShareEpoch), `${label}.laneShareEpoch`),
+		walletId: requireParsed(parseWalletId(record.walletId), `${label}.walletId`),
+		walletKeyId: requireParsed(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
+		laneId: requireParsed(parseSigningLaneId(record.laneId), `${label}.laneId`),
+		laneShareEpoch: requireParsed(parseLaneShareEpoch(record.laneShareEpoch), `${label}.laneShareEpoch`),
 		laneKind: parseSigningLaneKind(record.laneKind, `${label}.laneKind`),
-		participantBindingDigestB64u: requireResult(parseLaneParticipantBindingDigestB64u(record.participantBindingDigestB64u), `${label}.participantBindingDigestB64u`)
+		participantBindingDigestB64u: requireParsed(parseLaneParticipantBindingDigestB64u(record.participantBindingDigestB64u), `${label}.participantBindingDigestB64u`)
 	});
 }
 function parseSigningLaneRecordCommon(record, label) {
@@ -215,7 +211,7 @@ function parseOwnerAuthSigningLaneRecordBase(record, label) {
 	const walletAuthMethodId = parseWalletAuthMethodId(record.walletAuthMethodId);
 	return {
 		...common,
-		walletAuthMethodId: requireResult(walletAuthMethodId, `${label}.walletAuthMethodId`),
+		walletAuthMethodId: requireParsed(walletAuthMethodId, `${label}.walletAuthMethodId`),
 		ownerParticipantContinuity: parseOwnerLaneParticipantContinuityV1(record.ownerParticipantContinuity, `${label}.ownerParticipantContinuity`)
 	};
 }
@@ -411,8 +407,8 @@ function parseWalletKeyRecord(raw, label = "walletKeyRecord") {
 	if (record.keyFamily === "ed25519") {
 		rejectUnknownFields(record, ED25519_WALLET_KEY_FIELDS, label, ALL_WALLET_KEY_FIELDS);
 		return buildEd25519WalletKeyRecord({
-			walletId: requireResult(parseWalletId(record.walletId), `${label}.walletId`),
-			walletKeyId: requireResult(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
+			walletId: requireParsed(parseWalletId(record.walletId), `${label}.walletId`),
+			walletKeyId: requireParsed(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
 			walletKeyVersion: parseWalletKeyVersion(record.walletKeyVersion, `${label}.walletKeyVersion`),
 			nearEd25519SigningKeyId: parseNearEd25519SigningKeyId(record.nearEd25519SigningKeyId),
 			keyCreationSignerSlot: parseKeyCreationSignerSlot(record.keyCreationSignerSlot, `${label}.keyCreationSignerSlot`),
@@ -423,8 +419,8 @@ function parseWalletKeyRecord(raw, label = "walletKeyRecord") {
 	if (record.keyFamily === "ecdsa_secp256k1") {
 		rejectUnknownFields(record, EVM_WALLET_KEY_FIELDS, label, ALL_WALLET_KEY_FIELDS);
 		return buildEvmFamilyWalletKeyRecord({
-			walletId: requireResult(parseWalletId(record.walletId), `${label}.walletId`),
-			walletKeyId: requireResult(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
+			walletId: requireParsed(parseWalletId(record.walletId), `${label}.walletId`),
+			walletKeyId: requireParsed(parseWalletKeyId(record.walletKeyId), `${label}.walletKeyId`),
 			walletKeyVersion: parseWalletKeyVersion(record.walletKeyVersion, `${label}.walletKeyVersion`),
 			evmFamilySigningKeySlotId: requireEvmFamilySigningKeySlotId(record.evmFamilySigningKeySlotId, `${label}.evmFamilySigningKeySlotId`),
 			thresholdPublicKey33B64u: parseSecp256k1CompressedPublicKeyB64u(record.thresholdPublicKey33B64u, `${label}.thresholdPublicKey33B64u`),
@@ -453,7 +449,7 @@ function parseSigningLaneRecord(raw, label = "signingLaneRecord") {
 				holderParticipant: base.holderParticipant,
 				serverParticipant: base.serverParticipant,
 				lifecycle: base.lifecycle,
-				linkedDeviceId: requireResult(parseLinkedDeviceId(record.linkedDeviceId), `${label}.linkedDeviceId`)
+				linkedDeviceId: requireParsed(parseLinkedDeviceId(record.linkedDeviceId), `${label}.linkedDeviceId`)
 			});
 		}
 		case "delegated_execution": {

package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js

@@ -1,6 +1,5 @@
 import { base64UrlDecode, base64UrlEncode } from "../utils/base64.js";
 import { alphabetizeStringify, sha256BytesUtf8 } from "../utils/digests.js";
-import "../utils/encoders.js";
 import { deriveEvmFamilySigningKeySlotId } from "../signing-lanes/evmFamilySigningKeySlotId.js";
 //#region ../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.ts
 const THRESHOLD_SECP256K1_ECDSA_2P_V1_SCHEME_ID = "threshold-secp256k1-ecdsa-2p-v1";

package/dist/esm/shared-ts/src/threshold/participants.js

@@ -1,5 +1,4 @@
 import { normalizeOptionalTrimmedString } from "../utils/normalize.js";
-import "../utils/validation.js";
 const THRESHOLD_ED25519_2P_PARTICIPANT_IDS = [1, 2];
 function normalizeThresholdEd25519ParticipantId(id) {
 	const n = Number(id);

package/dist/esm/shared-ts/src/threshold/signingRootScope.js

@@ -1,5 +1,4 @@
 import { normalizeOptionalTrimmedString } from "../utils/normalize.js";
-import "../utils/validation.js";
 //#region ../shared-ts/src/threshold/signingRootScope.ts
 function requireScopeField(label, value) {
 	const normalized = normalizeOptionalTrimmedString(value);
@@ -28,6 +27,9 @@ function normalizeRuntimePolicyScopeFields(input) {
 		...normalizeOptionalTrimmedString(scope.signingRootVersion) ? { signingRootVersion: normalizeOptionalTrimmedString(scope.signingRootVersion) } : {}
 	};
 }
+function sameRuntimePolicyScope(left, right) {
+	return left.orgId === right.orgId && left.projectId === right.projectId && left.envId === right.envId && left.signingRootVersion === right.signingRootVersion;
+}
 function signingRootScopeFromRuntimePolicyScope(scope) {
 	return {
 		signingRootId: deriveSigningRootId(scope),
@@ -35,6 +37,6 @@ function signingRootScopeFromRuntimePolicyScope(scope) {
 	};
 }
 //#endregion
-export { deriveSigningRootId, normalizeRuntimePolicyScope, signingRootScopeFromRuntimePolicyScope };
+export { deriveSigningRootId, normalizeRuntimePolicyScope, sameRuntimePolicyScope, signingRootScopeFromRuntimePolicyScope };
 
 //# sourceMappingURL=signingRootScope.js.map

package/dist/esm/shared-ts/src/utils/domainIds.js

@@ -242,12 +242,6 @@ function parseLaneShareEpoch(raw) {
 function parseLinkedDeviceId(raw) {
 	return parseDomainId(raw, "linkedDeviceId");
 }
-function parseLaneOperationId(raw) {
-	return parseDomainId(raw, "laneOperationId");
-}
-function parseLaneEnrollmentId(raw) {
-	return parseDomainId(raw, "laneEnrollmentId");
-}
 function parseLinkedDeviceEnrollmentId(raw) {
 	return parseDomainId(raw, "linkedDeviceEnrollmentId");
 }
@@ -258,6 +252,6 @@ function parseLinkDeviceSessionId(raw) {
 	return parseDomainId(raw, "linkDeviceSessionId");
 }
 //#endregion
-export { buildMpcMaterialActivationRef, hasControlCharacter, hasWhitespaceOrControlCharacters, mpcMaterialActivationRefsEqual, parseCapabilityInstanceRef, parseEcdsaActiveStateId, parseEmailOtpChallengeId, parseEmailOtpProviderUserId, parseLaneEnrollmentId, parseLaneOperationId, parseLaneShareEpoch, parseLinkDeviceSessionId, parseLinkedDeviceEnrollmentId, parseLinkedDeviceId, parseMpcCapabilityRuntimeRef, parseMpcKeyBindingRef, parseMpcLifecycleBindingRef, parseMpcMaterialActivationId, parseMpcMaterialActivationRef, parseMpcMaterialOwnerRef, parseMpcSigningWorkerRef, parsePasskeyEnvelopeId, parseRootShareEpoch, parseSigningLaneId, parseThresholdEcdsaSessionId, parseThresholdEd25519SessionId, parseThresholdSessionId, parseVerifiedEmailAddress, parseWalletAuthMethodId, parseWalletAuthorityBindingDigest, parseWalletAuthorityId, parseWalletId, parseWalletKeyId, parseWalletRecoveryOperationId, parseWebAuthnCredentialIdB64u, parseWebAuthnRpId };
+export { buildMpcMaterialActivationRef, hasControlCharacter, hasWhitespaceOrControlCharacters, mpcMaterialActivationRefsEqual, parseCapabilityInstanceRef, parseEcdsaActiveStateId, parseEmailOtpChallengeId, parseEmailOtpProviderUserId, parseLaneShareEpoch, parseLinkDeviceSessionId, parseLinkedDeviceEnrollmentId, parseLinkedDeviceId, parseMpcCapabilityRuntimeRef, parseMpcKeyBindingRef, parseMpcLifecycleBindingRef, parseMpcMaterialActivationId, parseMpcMaterialActivationRef, parseMpcMaterialOwnerRef, parseMpcSigningWorkerRef, parsePasskeyEnvelopeId, parseRootShareEpoch, parseSigningLaneId, parseThresholdEcdsaSessionId, parseThresholdEd25519SessionId, parseThresholdSessionId, parseVerifiedEmailAddress, parseWalletAuthMethodId, parseWalletAuthorityBindingDigest, parseWalletAuthorityId, parseWalletId, parseWalletKeyId, parseWalletRecoveryOperationId, parseWebAuthnCredentialIdB64u, parseWebAuthnRpId };
 
 //# sourceMappingURL=domainIds.js.map

package/dist/esm/shared-ts/src/utils/ecdsaKeyFactsInventory.js

@@ -1,10 +1,7 @@
 import { base64UrlEncode } from "./base64.js";
 import { alphabetizeStringify, sha256BytesUtf8 } from "./digests.js";
-import "./encoders.js";
+import { thresholdEcdsaChainTargetKey } from "./thresholdEcdsaChainTarget.js";
 //#region ../shared-ts/src/utils/ecdsaKeyFactsInventory.ts
-function chainTargetKey(target) {
-	return target.kind === "evm" ? `evm:eip155:${target.chainId}` : `tempo:${target.chainId}`;
-}
 function normalizeChainTarget(target) {
 	if (target.kind === "evm") return {
 		kind: "evm",
@@ -22,7 +19,7 @@ function canonicalizeWalletEcdsaKeyFactsInventoryChallenge(input) {
 	const keyTargets = input.keyTargets.map((target) => ({
 		keyHandle: target.keyHandle,
 		chainTarget: normalizeChainTarget(target.chainTarget),
-		targetKey: chainTargetKey(target.chainTarget)
+		targetKey: thresholdEcdsaChainTargetKey(target.chainTarget)
 	})).sort((left, right) => {
 		const leftKey = `${left.keyHandle}:${left.targetKey}`;
 		const rightKey = `${right.keyHandle}:${right.targetKey}`;

package/dist/esm/shared-ts/src/utils/ecdsaServerTiming.js

@@ -5,7 +5,6 @@ const ECDSA_TIMING_METRICS = new Set([
 	"ecdsa_sign_proxy",
 	"ecdsa_sign_complete",
 	"ecdsa_sign_total",
-	"ecdsa_presign_queue",
 	"ecdsa_presign_authenticate",
 	"ecdsa_presign_material",
 	"ecdsa_presign_admit",

package/dist/esm/shared-ts/src/utils/encoders.js

@@ -1,2 +1,2 @@
-import "./base58.js";
 import "./base64.js";
+import "./base58.js";

package/dist/esm/shared-ts/src/utils/errors.js

@@ -1,4 +1,3 @@
-import "./near.js";
 //#region ../shared-ts/src/utils/errors.ts
 /**
 * Best-effort error message extractor without relying on `any`.

package/dist/esm/shared-ts/src/utils/exactKeys.js

@@ -0,0 +1,17 @@
+//#region ../shared-ts/src/utils/exactKeys.ts
+/**
+* True when `value` is a non-array object whose own enumerable string keys are exactly `keys`.
+*
+* A key whose value is `undefined` still counts as present. Symbol, non-enumerable and inherited
+* keys are not counted, and the prototype is not checked. A list that repeats a key never matches.
+* Kept apart from validation.ts, which the wallet iframe's boot path loads.
+*/
+function hasExactKeys(value, keys) {
+	if (value === null || typeof value !== "object" || Array.isArray(value)) return false;
+	const actual = Object.keys(value);
+	return actual.length === keys.length && actual.every((key) => keys.includes(key));
+}
+//#endregion
+export { hasExactKeys };
+
+//# sourceMappingURL=exactKeys.js.map

package/dist/esm/shared-ts/src/utils/index.js

@@ -1,18 +1,16 @@
 import "./domainIds.js";
 import "./normalize.js";
-import "./base58.js";
-import "./near.js";
 import "./validation.js";
 import "./base64.js";
 import "./digests.js";
 import "./canonicalPrimitives.js";
 import "./signingSessionSeal.js";
+import "./base58.js";
+import "./near.js";
 import "./emailOtpDomain.js";
 import "./signerDomain.js";
-import "./encoders.js";
 import "./registrationIds.js";
 import "./walletCapabilityBindings.js";
-import "./ecdsaCapabilityActivation.js";
 import "./secureRandomId.js";
 import "./signerSlot.js";
 import "./emailOtpRecoveryKey.js";
@@ -21,17 +19,18 @@ import "./routerAbEd25519Yao.js";
 import "./routerAbTraceContext.js";
 import "./walletAuthAuthority.js";
 import "./routerAbPublicKeyset.js";
+import "./ecdsaCapabilityActivation.js";
 import "./routerAbEcdsaDerivation.js";
 import "./addAuthMethodRegistration.js";
 import "./registrationAuthMethodInput.js";
 import "./walletAuthMethodRecord.js";
 import "./webauthnDeviceInfo.js";
+import "./encoders.js";
 import "./errors.js";
 import "./theme.js";
 import "./keccak.js";
 import "./jsonRpc.js";
 import "./nearRpcResults.js";
-import "./addWalletAuthMethod.js";
 import "./registrationSignerPlan.js";
 import "./registrationIntent.js";
 import "./ecdsaKeyFactsInventory.js";

package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js

@@ -1,8 +1,8 @@
 import { mpcMaterialActivationRefsEqual, parseMpcMaterialActivationRef, parseThresholdEcdsaSessionId, parseThresholdEd25519SessionId, parseWalletId } from "./domainIds.js";
 import { parseMpcWalletSigningQuotaId, parseWalletSessionAuthorizationId, parseWalletSessionId } from "../authorization/capabilityKinds.js";
-import { parseNearAccountId } from "./near.js";
 import { parseActiveWalletSessionV1, parseWalletSessionOperationCredentialV1 } from "../device-linking/activeWalletSession.js";
 import { parseRouterAbEd25519NormalSigningState } from "./signingSessionSeal.js";
+import { parseNearAccountId } from "./near.js";
 import { parseNearEd25519SigningKeyId } from "./registrationIds.js";
 import { normalizeRuntimePolicyScope } from "../threshold/signingRootScope.js";
 import { parseThresholdEcdsaKeyHandle } from "./thresholdEcdsaKeyHandle.js";

package/dist/esm/shared-ts/src/utils/registrationIds.js

@@ -1,7 +1,6 @@
 import { parseWalletId } from "./domainIds.js";
 import { base64UrlEncode } from "./base64.js";
 import { alphabetizeStringify, sha256BytesUtf8 } from "./digests.js";
-import "./encoders.js";
 //#region ../shared-ts/src/utils/registrationIds.ts
 function walletIdFromString(value) {
 	const parsed = parseWalletId(value);
@@ -161,10 +160,7 @@ function parseServerAllocatedWalletId(raw) {
 	const suffix = match?.[3] || "";
 	if (!match || !SERVER_ALLOCATED_WALLET_ADJECTIVE_SET.has(adjective) || !SERVER_ALLOCATED_WALLET_NOUN_SET.has(noun) || !serverAllocatedWalletSuffixIsValid(suffix)) return {
 		ok: false,
-		error: {
-			code: "invalid",
-			message: "server-allocated walletId must match the approved readable word-word-suffix allocation format"
-		}
+		error: { message: "server-allocated walletId must match the approved readable word-word-suffix allocation format" }
 	};
 	return {
 		ok: true,

package/dist/esm/shared-ts/src/utils/registrationIntent.js

@@ -1,7 +1,6 @@
 import { parseWalletAuthMethodId, parseWalletAuthorityId, parseWalletId, parseWebAuthnRpId } from "./domainIds.js";
 import { base64UrlEncode } from "./base64.js";
 import { alphabetizeStringify, sha256BytesUtf8 } from "./digests.js";
-import "./encoders.js";
 import { inspectRawObject, normalizeAddAuthMethodInput, trimString } from "./registrationAuthMethodInput.js";
 import { normalizeAddSignerSelection } from "./registrationSignerPlan.js";
 //#region ../shared-ts/src/utils/registrationIntent.ts
@@ -11,17 +10,11 @@ function addAuthMethodIntentGrantFromString(value) {
 function addSignerIntentGrantFromString(value) {
 	return String(value || "").trim();
 }
-function serializeRegistrationIntentV1(intent) {
-	return alphabetizeStringify(intent);
-}
-function serializeAddAuthMethodIntentV1(intent) {
-	return alphabetizeStringify(intent);
-}
 async function computeRegistrationIntentDigestB64u(intent) {
-	return base64UrlEncode(await sha256BytesUtf8(serializeRegistrationIntentV1(intent)));
+	return base64UrlEncode(await sha256BytesUtf8(alphabetizeStringify(intent)));
 }
 async function computeAddAuthMethodIntentDigestB64u(intent) {
-	return base64UrlEncode(await sha256BytesUtf8(serializeAddAuthMethodIntentV1(intent)));
+	return base64UrlEncode(await sha256BytesUtf8(alphabetizeStringify(intent)));
 }
 function normalizeAddAuthMethodIntentCaller(raw) {
 	const record = inspectRawObject(raw);

package/dist/esm/shared-ts/src/utils/registrationSetupOperation.js

@@ -0,0 +1,12 @@
+import { secureRandomBase64Url } from "./secureRandomId.js";
+//#region ../shared-ts/src/utils/registrationSetupOperation.ts
+function parseRegistrationSetupOperationId(value) {
+	return typeof value === "string" && /^wreg_[A-Za-z0-9_-]{43}$/u.test(value) ? value : null;
+}
+function createRegistrationSetupOperationId() {
+	return `wreg_${secureRandomBase64Url(32)}`;
+}
+//#endregion
+export { createRegistrationSetupOperationId, parseRegistrationSetupOperationId };
+
+//# sourceMappingURL=registrationSetupOperation.js.map

package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js

@@ -1,5 +1,5 @@
-import { parseNamedNearAccountId } from "./near.js";
 import { alphabetizeStringify } from "./digests.js";
+import { parseNamedNearAccountId } from "./near.js";
 import { inspectRawObject, trimString } from "./registrationAuthMethodInput.js";
 //#region ../shared-ts/src/utils/registrationSignerPlan.ts
 function implicitNearAccountProvisioning() {
@@ -75,11 +75,8 @@ function registrationSignerBranchKeyFromString(value) {
 function registrationNearEd25519BranchKey(signerSlot) {
 	return registrationSignerBranchKeyFromString(`near_ed25519:slot:${signerSlot}`);
 }
-function registrationEvmFamilyEcdsaTargetKey(target) {
-	return alphabetizeStringify(target);
-}
 function registrationEvmFamilyEcdsaBranchKey(chainTargets) {
-	return registrationSignerBranchKeyFromString(`evm_family_ecdsa:${chainTargets.map(registrationEvmFamilyEcdsaTargetKey).join("|")}`);
+	return registrationSignerBranchKeyFromString(`evm_family_ecdsa:${chainTargets.map(alphabetizeStringify).join("|")}`);
 }
 function registrationSignerPlanFromRequests(signers) {
 	return registrationSignerPlanFromBranches(signers.map(registrationSignerPlanBranchFromRequest));
@@ -163,7 +160,7 @@ function findDuplicateRegistrationSignerBranch(branch, branchKeys) {
 }
 function findDuplicateRegistrationEcdsaTarget(branch, ecdsaTargetKeys) {
 	for (const target of branch.chainTargets) {
-		const targetKey = registrationEvmFamilyEcdsaTargetKey(target);
+		const targetKey = alphabetizeStringify(target);
 		if (ecdsaTargetKeys.has(targetKey)) return {
 			ok: false,
 			code: "invalid_body",

package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js

@@ -5,12 +5,11 @@ import { base64UrlDecode, base64UrlEncode } from "./base64.js";
 import { alphabetizeStringify, sha256BytesUtf8 } from "./digests.js";
 import { parseCorrelationId, parseDigestB64u } from "./canonicalPrimitives.js";
 import { parseActiveWalletSessionV1, parseWalletSessionOperationCredentialV1 } from "../device-linking/activeWalletSession.js";
-import "./encoders.js";
 import { normalizeRuntimePolicyScope } from "../threshold/signingRootScope.js";
-import { parseEcdsaServerGeneration } from "./ecdsaCapabilityActivation.js";
 import { canonicalRouterAbMpcMaterialActivationRefBytes, canonicalRouterAbNormalSigningAuthorizationBytes, parseRouterAbMpcMaterialActivationRef, parseRouterAbNormalSigningAuthorization, routerAbMpcMaterialActivationRefToWire, sameRouterAbMpcMaterialActivationRef } from "./routerAbNormalSigningIdentity.js";
 import { isEmailOtpWalletAuthAuthority, isPasskeyWalletAuthAuthority, parseWalletAuthAuthority } from "./walletAuthAuthority.js";
 import { requireRouterAbX25519PublicKey } from "./routerAbPublicKeyset.js";
+import { parseEcdsaServerGeneration } from "./ecdsaCapabilityActivation.js";
 //#region ../shared-ts/src/utils/routerAbEcdsaDerivation.ts
 /**
 * The longest an ECDSA presignature ceremony may run. The Gateway authorizes a
@@ -1329,6 +1328,6 @@ async function parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreReques
 	return response;
 }
 //#endregion
-export { ROUTER_AB_ECDSA_DERIVATION_EXPORT_PATH, ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_STATE_KIND_V1, ROUTER_AB_ECDSA_DERIVATION_OPERATION_STEP_UP_PATH, ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_INIT_PATH, ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_STEP_PATH, ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, ROUTER_AB_ECDSA_PRESIGN_CEREMONY_MAX_LIFETIME_MS, buildRouterAbEcdsaDerivationActiveStateIdV1, buildRouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1, buildRouterAbEcdsaDerivationEvmDigestSigningRequestV1, computeRouterAbEcdsaOperationStepUpChallengeB64u, parseRouterAbEcdsaCredentialFreeSessionActivationResponseV1, parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1, parseRouterAbEcdsaDerivationEvmDigestSigningRequestV1, parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreRequestV1, parseRouterAbEcdsaDerivationNormalSigningScopeV1, parseRouterAbEcdsaDerivationNormalSigningStateV1, parseRouterAbEcdsaDerivationPublicCapabilityV1, parseRouterAbEcdsaExplicitExportForwardedResponseV1, parseRouterAbEcdsaOperationStepUpAuthorizationRequestV1, parseRouterAbEcdsaOperationStepUpAuthorizationResponseV1, parseRouterAbEcdsaOperationStepUpPreparationV1, parseRouterAbEcdsaPostRegistrationSessionActivationPolicyV1, parseRouterAbEcdsaPostRegistrationSessionActivationRequestV1, parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, parseRouterAbEcdsaRegistrationActivationReceiptV1, parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, parseRouterAbEcdsaRegistrationRequestFactsV1, parseRouterAbEcdsaSigningWorkerExportShareEnvelopeV1, parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, parseRouterAbEcdsaVerifiedClientActivationFactsV1, requireRouterAbEcdsaDerivationNormalSigningStateV1, routerAbEcdsaDerivationActiveStateId, routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestDigestV1, routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1, routerAbEcdsaDerivationNormalSigningScopeCanonicalBytesV1, routerAbEcdsaRerandomizationClientCommitmentV1, sameRouterAbEcdsaDerivationNormalSigningScopeV1, sameRouterAbEcdsaDerivationNormalSigningStateV1, sameRouterAbEcdsaDerivationPublicCapabilityV1, sameRouterAbEcdsaDerivationPublicIdentityV1, sameRouterAbEcdsaRegistrationActivationReceiptV1, sameRouterAbEcdsaVerifiedClientActivationFactsV1, sameRouterAbPublicDigest32V1Wire, sameRouterAbServerIdentityV1 };
+export { ROUTER_AB_ECDSA_DERIVATION_EXPORT_PATH, ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_STATE_KIND_V1, ROUTER_AB_ECDSA_DERIVATION_OPERATION_STEP_UP_PATH, ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_INIT_PATH, ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_STEP_PATH, ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH, ROUTER_AB_ECDSA_PRESIGN_CEREMONY_MAX_LIFETIME_MS, buildRouterAbEcdsaDerivationActiveStateIdV1, buildRouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1, buildRouterAbEcdsaDerivationEvmDigestSigningRequestV1, computeRouterAbEcdsaOperationStepUpChallengeB64u, parseRouterAbEcdsaCredentialFreeSessionActivationResponseV1, parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1, parseRouterAbEcdsaDerivationEvmDigestSigningRequestV1, parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreRequestV1, parseRouterAbEcdsaDerivationNormalSigningScopeV1, parseRouterAbEcdsaDerivationNormalSigningStateV1, parseRouterAbEcdsaDerivationPublicCapabilityV1, parseRouterAbEcdsaExplicitExportForwardedResponseV1, parseRouterAbEcdsaOperationStepUpAuthorizationRequestV1, parseRouterAbEcdsaOperationStepUpAuthorizationResponseV1, parseRouterAbEcdsaOperationStepUpPreparationV1, parseRouterAbEcdsaPostRegistrationSessionActivationPolicyV1, parseRouterAbEcdsaPostRegistrationSessionActivationRequestV1, parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1, parseRouterAbEcdsaRegistrationActivationReceiptV1, parseRouterAbEcdsaRegistrationPublicActivationReceiptV1, parseRouterAbEcdsaRegistrationRequestFactsV1, parseRouterAbEcdsaSigningWorkerExportShareEnvelopeV1, parseRouterAbEcdsaStrictForwardedRegistrationResponseV1, parseRouterAbEcdsaVerifiedClientActivationFactsV1, requireRouterAbEcdsaDerivationNormalSigningStateV1, routerAbEcdsaDerivationActiveStateId, routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestDigestV1, routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1, routerAbEcdsaDerivationNormalSigningScopeCanonicalBytesV1, routerAbEcdsaRerandomizationClientCommitmentV1, sameRegistrationRecipientKeys, sameRegistrationSignerSet, sameRouterAbEcdsaDerivationNormalSigningScopeV1, sameRouterAbEcdsaDerivationNormalSigningStateV1, sameRouterAbEcdsaDerivationPublicCapabilityV1, sameRouterAbEcdsaDerivationPublicIdentityV1, sameRouterAbEcdsaRegistrationActivationReceiptV1, sameRouterAbEcdsaVerifiedClientActivationFactsV1, sameRouterAbPublicDigest32V1Wire, sameRouterAbServerIdentityV1 };
 
 //# sourceMappingURL=routerAbEcdsaDerivation.js.map

package/dist/esm/shared-ts/src/utils/routerAbEd25519Yao.js

@@ -742,6 +742,6 @@ function parseEncryptedPackageValue(value) {
 	return parseEncryptedPackage(value, "encrypted_package");
 }
 //#endregion
-export { ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1, ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, parseRouterAbEd25519YaoActivationPublicReceiptV1, parseRouterAbEd25519YaoActivationResultV1, parseRouterAbEd25519YaoApplicationBindingFactsV1, parseRouterAbEd25519YaoCeremonyBindingV1, parseRouterAbEd25519YaoEncryptedPackageV1, parseRouterAbEd25519YaoExportAdmissionReceiptV1, parseRouterAbEd25519YaoExportExecuteRequestV1, parseRouterAbEd25519YaoExportResultV1, parseRouterAbEd25519YaoParticipantIdsV1, parseRouterAbEd25519YaoRecoveryActivationAdmissionReceiptV1, parseRouterAbEd25519YaoRecoveryActivationExecuteRequestV1, parseRouterAbEd25519YaoRecoveryActivationReceiptV1, parseRouterAbEd25519YaoRecoveryActivationResultV1, parseRouterAbEd25519YaoRecoveryAdmissionRequestV1, parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1, parseRouterAbEd25519YaoRegistrationActivationExecuteRequestV1, parseRouterAbEd25519YaoRegistrationActivationResultV1, parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1, sameRouterAbEd25519YaoActivationBindingV1, sameRouterAbEd25519YaoRegistrationAdmissionRequestV1 };
+export { ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1, ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, parseRouterAbEd25519YaoActivationPublicReceiptV1, parseRouterAbEd25519YaoActivationResultV1, parseRouterAbEd25519YaoApplicationBindingFactsV1, parseRouterAbEd25519YaoCeremonyBindingV1, parseRouterAbEd25519YaoEncryptedPackageV1, parseRouterAbEd25519YaoExportAdmissionReceiptV1, parseRouterAbEd25519YaoExportExecuteRequestV1, parseRouterAbEd25519YaoExportResultV1, parseRouterAbEd25519YaoParticipantIdsV1, parseRouterAbEd25519YaoRecoveryActivationAdmissionReceiptV1, parseRouterAbEd25519YaoRecoveryActivationExecuteRequestV1, parseRouterAbEd25519YaoRecoveryActivationReceiptV1, parseRouterAbEd25519YaoRecoveryActivationResultV1, parseRouterAbEd25519YaoRecoveryAdmissionRequestV1, parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1, parseRouterAbEd25519YaoRegistrationActivationExecuteRequestV1, parseRouterAbEd25519YaoRegistrationActivationResultV1, parseRouterAbEd25519YaoRegistrationAdmissionRequestV1, parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1, sameRouterAbEd25519YaoActivationBindingV1, sameRouterAbEd25519YaoByteSequence, sameRouterAbEd25519YaoRegistrationAdmissionRequestV1 };
 
 //# sourceMappingURL=routerAbEd25519Yao.js.map

package/dist/esm/shared-ts/src/utils/thresholdEcdsaChainTarget.js

@@ -0,0 +1,9 @@
+//#region ../shared-ts/src/utils/thresholdEcdsaChainTarget.ts
+function thresholdEcdsaChainTargetKey(target) {
+	if (target.kind === "evm") return `evm:eip155:${target.chainId}`;
+	return `tempo:${target.chainId}`;
+}
+//#endregion
+export { thresholdEcdsaChainTargetKey };
+
+//# sourceMappingURL=thresholdEcdsaChainTarget.js.map

package/dist/esm/shared-ts/src/utils/validation.js

@@ -1,5 +1,4 @@
 import { normalizeOptionalTrimmedString, normalizeTrimmedString } from "./normalize.js";
-import "./near.js";
 //#region ../shared-ts/src/utils/validation.ts
 function requireTrimmedString(value, label, message = "is required") {
 	const parsed = normalizeOptionalTrimmedString(value);

package/dist/esm/shared-ts/src/utils/walletAuthAuthority.js

@@ -1,7 +1,6 @@
 import { parseEmailOtpProviderUserId, parseWalletAuthMethodId, parseWalletAuthorityBindingDigest, parseWalletId, parseWebAuthnCredentialIdB64u, parseWebAuthnRpId } from "./domainIds.js";
 import { base64UrlEncode } from "./base64.js";
 import { alphabetizeStringify, sha256BytesUtf8 } from "./digests.js";
-import "./encoders.js";
 //#region ../shared-ts/src/utils/walletAuthAuthority.ts
 const WALLET_AUTHORITY_BINDING_DIGEST_DOMAIN = "seams:wallet-authority-binding:v1|";
 function isPasskeyWalletAuthAuthority(authority) {

package/dist/esm/shared-ts/src/utils/walletCapabilityBindings.js

@@ -172,6 +172,15 @@ function walletAuthMethodBindingFromRaw(raw) {
 		}
 	};
 }
+function buildNoCurrentWalletAuthMethod() {
+	return { kind: "none" };
+}
+function buildSelectedCurrentWalletAuthMethod(args) {
+	return {
+		kind: "selected",
+		binding: args.binding
+	};
+}
 function buildImplicitNearAccountBinding(args) {
 	return {
 		kind: "implicit_near_account",
@@ -263,6 +272,6 @@ function nearEd25519SignerBindingFromRaw(raw) {
 	};
 }
 //#endregion
-export { buildEmailOtpWalletAuthMethodBinding, buildImplicitNearAccountBinding, buildNamedNearAccountBinding, buildNearEd25519SignerBinding, buildPasskeyAuthScope, buildPasskeyWalletAuthMethodBinding, buildWalletIdentity, nearAccountBindingFromRaw, nearEd25519SignerBindingFromRaw, parseRpId, walletAuthMethodBindingFromRaw };
+export { buildEmailOtpWalletAuthMethodBinding, buildImplicitNearAccountBinding, buildNamedNearAccountBinding, buildNearEd25519SignerBinding, buildNoCurrentWalletAuthMethod, buildPasskeyAuthScope, buildPasskeyWalletAuthMethodBinding, buildSelectedCurrentWalletAuthMethod, buildWalletIdentity, nearAccountBindingFromRaw, nearEd25519SignerBindingFromRaw, parseRpId, walletAuthMethodBindingFromRaw };
 
 //# sourceMappingURL=walletCapabilityBindings.js.map

package/dist/esm/shared-ts/src/utils/walletManagementProtocol.js

@@ -0,0 +1,6 @@
+//#region ../shared-ts/src/utils/walletManagementProtocol.ts
+const WALLET_MANAGEMENT_PROTOCOL_HEADER = "X-Seams-Wallet-Protocol";
+//#endregion
+export { WALLET_MANAGEMENT_PROTOCOL_HEADER };
+
+//# sourceMappingURL=walletManagementProtocol.js.map

package/dist/esm/shared-ts/src/wallet-recovery/index.js

@@ -1,9 +1,9 @@
 import "../utils/emailOtpRecoveryKey.js";
 import "./recoveryKeyId.js";
 import "./recoveryCodeIssuance.js";
-import "./recoveryCodeReservation.js";
 import "./recoveryCodes.js";
 import "./recoveryCodeLocator.js";
+import "./recoveryCodeReservation.js";
 import "./walletRecoveryEcdsaPossession.js";
 import "./walletRecoveryCommittedProjection.js";
 import "./walletRecoveryEnvelopeSet.js";

package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js

@@ -1,7 +1,6 @@
 import { base64UrlEncode } from "../utils/base64.js";
 import { sha256Bytes } from "../utils/digests.js";
 import { parseDigestB64u } from "../utils/canonicalPrimitives.js";
-import "../utils/encoders.js";
 import "../utils/emailOtpRecoveryKey.js";
 //#region ../shared-ts/src/wallet-recovery/recoveryCodeLocator.ts
 const RECOVERY_CODE_LOCATOR_CONTEXT_V1 = "seams/wallet-recovery/code-locator/v1";

package/dist/esm/shared-ts/src/wallet-recovery/recoveryKeyId.js

@@ -1,6 +1,4 @@
 import "../utils/signingSessionSeal.js";
-import "../utils/encoders.js";
-import "../utils/emailOtpRecoveryKey.js";
 //#region ../shared-ts/src/wallet-recovery/recoveryKeyId.ts
 /** The prefix plus unpadded base64url over one SHA-256 digest. */
 const DERIVED_WALLET_RECOVERY_KEY_ID_PATTERN = /^wallet-rkid-v1-[A-Za-z0-9_-]{43}$/;

package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js

@@ -47,7 +47,7 @@ function buildGoogleEmailOtpProjection(input) {
 			providerSubject: input.providerSubject,
 			emailHashHex: requireEmailHash(input.emailHashHex),
 			registrationAuthorityId: requireTrimmedString(input.registrationAuthorityId, "registrationAuthorityId", "is invalid"),
-			enrollment: buildEnrollmentReference(input.enrollment)
+			enrollment: parseEnrollmentReference(input.enrollment)
 		}
 	};
 	assertProjectionShape(projection);
@@ -133,9 +133,6 @@ function parseEnrollmentReference(raw) {
 		enrollmentSealKeyVersion: requireTrimmedString(record.enrollmentSealKeyVersion, "enrollment.enrollmentSealKeyVersion", "is invalid")
 	};
 }
-function buildEnrollmentReference(value) {
-	return parseEnrollmentReference(value);
-}
 function assertExpectedIdentity(projection, expected) {
 	if (projection.kind !== expected.kind || projection.walletId !== expected.walletId || projection.recoveryOperationId !== expected.recoveryOperationId || projection.targetDeviceId !== expected.targetDeviceId || projection.targetAuthorityId !== expected.targetAuthorityId || projection.targetWalletAuthMethodId !== expected.targetWalletAuthMethodId) throw new Error("wallet recovery committed projection identity changed");
 	if (projection.kind === "passkey" && expected.kind === "passkey") {

package/dist/esm/theme/base-styles.js

@@ -31,23 +31,23 @@ function createThemeTokens(palette) {
 			textPrimary: GREY_COLORS.grey75,
 			textSecondary: GREY_COLORS.grey500,
 			textMuted: GREY_COLORS.grey650,
-			textButton: GREY_COLORS.grey75,
+			textButton: GREY_COLORS.grey975,
 			colorBackground: GREY_COLORS.grey800,
 			surface: GREY_COLORS.slate700,
 			surface2: GREY_COLORS.slate750,
 			txDetailsBackground: GREY_COLORS.slate750,
 			surface3: GREY_COLORS.slate800,
 			surface4: GREY_COLORS.slate825,
-			primary: CHROMA_COLORS.blue650,
-			primaryHover: CHROMA_COLORS.blue600,
+			primary: GREY_COLORS.grey25,
+			primaryHover: GREY_COLORS.grey200,
 			secondary: CHROMA_COLORS.violet600,
 			secondaryHover: CHROMA_COLORS.violet500,
 			accent: CHROMA_COLORS.green400,
-			buttonBackground: CHROMA_COLORS.blue500,
-			buttonHoverBackground: CHROMA_COLORS.blue450,
+			buttonBackground: GREY_COLORS.grey25,
+			buttonHoverBackground: GREY_COLORS.grey200,
 			hover: GREY_COLORS.grey850,
 			active: GREY_COLORS.grey650,
-			focus: CHROMA_COLORS.blue400,
+			focus: GREY_COLORS.grey350,
 			success: CHROMA_COLORS.blue400,
 			warning: (palette.yellow || {})["400"],
 			error: CHROMA_COLORS.red400,
@@ -77,16 +77,16 @@ function createThemeTokens(palette) {
 			txDetailsBackground: "#f8f8f7",
 			surface3: GREY_COLORS.slate200,
 			surface4: GREY_COLORS.slate250,
-			primary: CHROMA_COLORS.blue600,
-			primaryHover: CHROMA_COLORS.blue500,
+			primary: GREY_COLORS.grey975,
+			primaryHover: GREY_COLORS.grey750,
 			secondary: CHROMA_COLORS.violet600,
 			secondaryHover: CHROMA_COLORS.violet500,
 			accent: CHROMA_COLORS.green400,
-			buttonBackground: CHROMA_COLORS.blue500,
-			buttonHoverBackground: CHROMA_COLORS.blue450,
+			buttonBackground: GREY_COLORS.grey975,
+			buttonHoverBackground: GREY_COLORS.grey750,
 			hover: GREY_COLORS.grey100,
 			active: GREY_COLORS.grey200,
-			focus: CHROMA_COLORS.blue400,
+			focus: GREY_COLORS.grey600,
 			success: CHROMA_COLORS.blue500,
 			warning: (palette.yellow || {})["500"],
 			error: CHROMA_COLORS.red500,

package/dist/esm/utils/deviceDetection.js

@@ -69,12 +69,27 @@ const needsExplicitActivation = () => {
 	}
 };
 /**
+* Determines optimal camera facing mode based on device type
+* - Mobile/Tablet: Back camera (environment) for QR scanning
+* - Desktop/Laptop: Front camera (user) for video calls/selfies
+*/
+const getOptimalCameraFacingMode = () => {
+	const deviceType = detectDeviceType();
+	switch (deviceType) {
+		case "mobile":
+		case "tablet":
+			console.log(`${deviceType} device detected - using back camera (environment)`);
+			return "environment";
+		default: return "user";
+	}
+};
+/**
 * Check if the current device is likely mobile
 */
 const isMobileDevice = () => {
 	return detectDeviceType() === "mobile";
 };
 //#endregion
-export { needsExplicitActivation };
+export { getOptimalCameraFacingMode, needsExplicitActivation };
 
 //# sourceMappingURL=deviceDetection.js.map

package/dist/esm/utils/menuItemBlink.js

@@ -0,0 +1,24 @@
+//#region src/utils/menuItemBlink.ts
+const MENU_ITEM_BLINK_PHASE_MS = 90;
+const waitForBlinkPhase = () => new Promise((resolve) => setTimeout(resolve, MENU_ITEM_BLINK_PHASE_MS));
+/**
+* Blinks a chosen menu item once, highlight off and then on again, so the menu
+* confirms which item was picked before it closes, as macOS menus do. The item's
+* stylesheet renders `data-blink="off"` and `data-blink="on"`.
+*
+* Returns null while the item is already blinking, so a double click commits once.
+*/
+function blinkMenuItem(item) {
+	if (item.dataset.blink) return null;
+	item.dataset.blink = "off";
+	return waitForBlinkPhase().then(() => {
+		item.dataset.blink = "on";
+		return waitForBlinkPhase();
+	}).then(() => {
+		delete item.dataset.blink;
+	});
+}
+//#endregion
+export { blinkMenuItem };
+
+//# sourceMappingURL=menuItemBlink.js.map