npm - @seams/wallet - Versions diffs - 0.7.1 → 0.8.0 - Mend

@seams/wallet 0.7.1 → 0.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (1880) hide show

package/dist/public/sdk/workers/ecdsa-derivation-client.worker.js CHANGED Viewed

@@ -157,51 +157,6 @@ function passArray8ToWasm0(arg, malloc) {
   return ptr;
 }
 var EcdsaLaneHolderSessionV1Finalization = typeof FinalizationRegistry === "undefined" ? { register: () => {}, unregister: () => {} } : new FinalizationRegistry((ptr) => wasm.__wbg_ecdsalaneholdersessionv1_free(ptr >>> 0, 1));
-class EcdsaLaneHolderSessionV1 {
-  __destroy_into_raw() {
-    const ptr = this.__wbg_ptr;
-    this.__wbg_ptr = 0;
-    EcdsaLaneHolderSessionV1Finalization.unregister(this);
-    return ptr;
-  }
-  free() {
-    const ptr = this.__destroy_into_raw();
-    wasm.__wbg_ecdsalaneholdersessionv1_free(ptr, 0);
-  }
-  constructor(state_blob_b64u) {
-    const ptr0 = passStringToWasm0(state_blob_b64u, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-    const len0 = WASM_VECTOR_LEN;
-    const ret = wasm.ecdsalaneholdersessionv1_new(ptr0, len0);
-    if (ret[2]) {
-      throw takeFromExternrefTable0(ret[1]);
-    }
-    this.__wbg_ptr = ret[0] >>> 0;
-    EcdsaLaneHolderSessionV1Finalization.register(this, this.__wbg_ptr, this);
-    return this;
-  }
-  prepare(input_json) {
-    let deferred3_0;
-    let deferred3_1;
-    try {
-      const ptr0 = passStringToWasm0(input_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-      const len0 = WASM_VECTOR_LEN;
-      const ret = wasm.ecdsalaneholdersessionv1_prepare(this.__wbg_ptr, ptr0, len0);
-      var ptr2 = ret[0];
-      var len2 = ret[1];
-      if (ret[3]) {
-        ptr2 = 0;
-        len2 = 0;
-        throw takeFromExternrefTable0(ret[2]);
-      }
-      deferred3_0 = ptr2;
-      deferred3_1 = len2;
-      return getStringFromWasm0(ptr2, len2);
-    } finally {
-      wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
-    }
-  }
-}
 var EcdsaLinkedHolderMaterialV1Finalization = typeof FinalizationRegistry === "undefined" ? { register: () => {}, unregister: () => {} } : new FinalizationRegistry((ptr) => wasm.__wbg_ecdsalinkedholdermaterialv1_free(ptr >>> 0, 1));
 class EcdsaLinkedHolderMaterialV1 {
@@ -494,13 +449,6 @@ class LinkedDeviceEcdsaSourceContributionSessionV1 {
 var RouterAbEcdsaClientCeremonyV1Finalization = typeof FinalizationRegistry === "undefined" ? { register: () => {}, unregister: () => {} } : new FinalizationRegistry((ptr) => wasm.__wbg_routerabecdsaclientceremonyv1_free(ptr >>> 0, 1));
 class RouterAbEcdsaClientCeremonyV1 {
-  static __wrap(ptr) {
-    ptr = ptr >>> 0;
-    const obj = Object.create(RouterAbEcdsaClientCeremonyV1.prototype);
-    obj.__wbg_ptr = ptr;
-    RouterAbEcdsaClientCeremonyV1Finalization.register(obj, obj.__wbg_ptr, obj);
-    return obj;
-  }
   __destroy_into_raw() {
     const ptr = this.__wbg_ptr;
     this.__wbg_ptr = 0;
@@ -591,15 +539,6 @@ class RouterAbEcdsaClientCeremonyV1 {
       wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
     }
   }
-  static fromRecipientPrivateKey(recipient_private_key) {
-    const ptr0 = passArray8ToWasm0(recipient_private_key, wasm.__wbindgen_malloc);
-    const len0 = WASM_VECTOR_LEN;
-    const ret = wasm.routerabecdsaclientceremonyv1_fromRecipientPrivateKey(ptr0, len0);
-    if (ret[2]) {
-      throw takeFromExternrefTable0(ret[1]);
-    }
-    return RouterAbEcdsaClientCeremonyV1.__wrap(ret[0]);
-  }
   build_explicit_export_request(input_json) {
     let deferred3_0;
     let deferred3_1;
@@ -621,15 +560,6 @@ class RouterAbEcdsaClientCeremonyV1 {
       wasm.__wbindgen_free(deferred3_0, deferred3_1, 1);
     }
   }
-  open_committed_role_envelopes(input_json) {
-    const ptr0 = passStringToWasm0(input_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-    const len0 = WASM_VECTOR_LEN;
-    const ret = wasm.routerabecdsaclientceremonyv1_open_committed_role_envelopes(this.__wbg_ptr, ptr0, len0);
-    if (ret[2]) {
-      throw takeFromExternrefTable0(ret[1]);
-    }
-    return WasmOrdinaryEcdsaClientMaterialV1.__wrap(ret[0]);
-  }
   verify_encrypted_proof_bundles(input_json) {
     const ptr0 = passStringToWasm0(input_json, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
     const len0 = WASM_VECTOR_LEN;
@@ -718,57 +648,6 @@ class RouterAbEcdsaClientCeremonyV1 {
     wasm.routerabecdsaclientceremonyv1_close(this.__wbg_ptr);
   }
 }
-var WasmOrdinaryEcdsaClientMaterialV1Finalization = typeof FinalizationRegistry === "undefined" ? { register: () => {}, unregister: () => {} } : new FinalizationRegistry((ptr) => wasm.__wbg_wasmordinaryecdsaclientmaterialv1_free(ptr >>> 0, 1));
-class WasmOrdinaryEcdsaClientMaterialV1 {
-  static __wrap(ptr) {
-    ptr = ptr >>> 0;
-    const obj = Object.create(WasmOrdinaryEcdsaClientMaterialV1.prototype);
-    obj.__wbg_ptr = ptr;
-    WasmOrdinaryEcdsaClientMaterialV1Finalization.register(obj, obj.__wbg_ptr, obj);
-    return obj;
-  }
-  __destroy_into_raw() {
-    const ptr = this.__wbg_ptr;
-    this.__wbg_ptr = 0;
-    WasmOrdinaryEcdsaClientMaterialV1Finalization.unregister(this);
-    return ptr;
-  }
-  free() {
-    const ptr = this.__destroy_into_raw();
-    wasm.__wbg_wasmordinaryecdsaclientmaterialv1_free(ptr, 0);
-  }
-  transcript() {
-    const ret = wasm.wasmordinaryecdsaclientmaterialv1_transcript(this.__wbg_ptr);
-    var v1 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
-    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
-    return v1;
-  }
-  activation_id() {
-    let deferred1_0;
-    let deferred1_1;
-    try {
-      const ret = wasm.wasmordinaryecdsaclientmaterialv1_activation_id(this.__wbg_ptr);
-      deferred1_0 = ret[0];
-      deferred1_1 = ret[1];
-      return getStringFromWasm0(ret[0], ret[1]);
-    } finally {
-      wasm.__wbindgen_free(deferred1_0, deferred1_1, 1);
-    }
-  }
-  take_client_material() {
-    const ret = wasm.wasmordinaryecdsaclientmaterialv1_take_client_material(this.__wbg_ptr);
-    if (ret[3]) {
-      throw takeFromExternrefTable0(ret[2]);
-    }
-    var v1 = getArrayU8FromWasm0(ret[0], ret[1]).slice();
-    wasm.__wbindgen_free(ret[0], ret[1] * 1, 1);
-    return v1;
-  }
-  destroy() {
-    wasm.wasmordinaryecdsaclientmaterialv1_destroy(this.__wbg_ptr);
-  }
-}
 async function __wbg_load(module, imports) {
   if (typeof Response === "function" && module instanceof Response) {
     if (typeof WebAssembly.instantiateStreaming === "function") {
@@ -1380,166 +1259,13 @@ function parseRootShareEpoch(raw) {
 function parseWalletKeyId(raw) {
   return parseDomainId(raw, "walletKeyId");
 }
-function parseSigningLaneId(raw) {
-  return parseDomainId(raw, "signingLaneId");
-}
-function parseLaneShareEpoch(raw) {
-  return parseDomainId(raw, "laneShareEpoch");
-}
-function parseLaneOperationId(raw) {
-  return parseDomainId(raw, "laneOperationId");
-}
-function parseLaneEnrollmentId(raw) {
-  return parseDomainId(raw, "laneEnrollmentId");
-}
-function parseLaneOperationIdempotencyKey(raw) {
-  return parseDomainId(raw, "laneOperationIdempotencyKey");
-}
 function parseLinkedDeviceEnrollmentId(raw) {
   return parseDomainId(raw, "linkedDeviceEnrollmentId");
 }
-function parseEd25519YaoSuiteId(raw) {
-  return parseDomainId(raw, "ed25519YaoSuiteId");
-}
-function parseEcdsaRelayerKeyId(raw) {
-  return parseDomainId(raw, "ecdsaRelayerKeyId");
-}
 function parseLinkDeviceSessionId(raw) {
   return parseDomainId(raw, "linkDeviceSessionId");
 }
-// ../../node_modules/base-x/src/esm/index.js
-function base(ALPHABET) {
-  if (ALPHABET.length >= 255) {
-    throw new TypeError("Alphabet too long");
-  }
-  const BASE_MAP = new Uint8Array(256);
-  for (let j = 0;j < BASE_MAP.length; j++) {
-    BASE_MAP[j] = 255;
-  }
-  for (let i = 0;i < ALPHABET.length; i++) {
-    const x = ALPHABET.charAt(i);
-    const xc = x.charCodeAt(0);
-    if (BASE_MAP[xc] !== 255) {
-      throw new TypeError(x + " is ambiguous");
-    }
-    BASE_MAP[xc] = i;
-  }
-  const BASE = ALPHABET.length;
-  const LEADER = ALPHABET.charAt(0);
-  const FACTOR = Math.log(BASE) / Math.log(256);
-  const iFACTOR = Math.log(256) / Math.log(BASE);
-  function encode(source) {
-    if (source instanceof Uint8Array) {} else if (ArrayBuffer.isView(source)) {
-      source = new Uint8Array(source.buffer, source.byteOffset, source.byteLength);
-    } else if (Array.isArray(source)) {
-      source = Uint8Array.from(source);
-    }
-    if (!(source instanceof Uint8Array)) {
-      throw new TypeError("Expected Uint8Array");
-    }
-    if (source.length === 0) {
-      return "";
-    }
-    let zeroes = 0;
-    let length = 0;
-    let pbegin = 0;
-    const pend = source.length;
-    while (pbegin !== pend && source[pbegin] === 0) {
-      pbegin++;
-      zeroes++;
-    }
-    const size = (pend - pbegin) * iFACTOR + 1 >>> 0;
-    const b58 = new Uint8Array(size);
-    while (pbegin !== pend) {
-      let carry = source[pbegin];
-      let i = 0;
-      for (let it1 = size - 1;(carry !== 0 || i < length) && it1 !== -1; it1--, i++) {
-        carry += 256 * b58[it1] >>> 0;
-        b58[it1] = carry % BASE >>> 0;
-        carry = carry / BASE >>> 0;
-      }
-      if (carry !== 0) {
-        throw new Error("Non-zero carry");
-      }
-      length = i;
-      pbegin++;
-    }
-    let it2 = size - length;
-    while (it2 !== size && b58[it2] === 0) {
-      it2++;
-    }
-    let str = LEADER.repeat(zeroes);
-    for (;it2 < size; ++it2) {
-      str += ALPHABET.charAt(b58[it2]);
-    }
-    return str;
-  }
-  function decodeUnsafe(source) {
-    if (typeof source !== "string") {
-      throw new TypeError("Expected String");
-    }
-    if (source.length === 0) {
-      return new Uint8Array;
-    }
-    let psz = 0;
-    let zeroes = 0;
-    let length = 0;
-    while (source[psz] === LEADER) {
-      zeroes++;
-      psz++;
-    }
-    const size = (source.length - psz) * FACTOR + 1 >>> 0;
-    const b256 = new Uint8Array(size);
-    while (psz < source.length) {
-      const charCode = source.charCodeAt(psz);
-      if (charCode > 255) {
-        return;
-      }
-      let carry = BASE_MAP[charCode];
-      if (carry === 255) {
-        return;
-      }
-      let i = 0;
-      for (let it3 = size - 1;(carry !== 0 || i < length) && it3 !== -1; it3--, i++) {
-        carry += BASE * b256[it3] >>> 0;
-        b256[it3] = carry % 256 >>> 0;
-        carry = carry / 256 >>> 0;
-      }
-      if (carry !== 0) {
-        throw new Error("Non-zero carry");
-      }
-      length = i;
-      psz++;
-    }
-    let it4 = size - length;
-    while (it4 !== size && b256[it4] === 0) {
-      it4++;
-    }
-    const vch = new Uint8Array(zeroes + (size - it4));
-    let j = zeroes;
-    while (it4 !== size) {
-      vch[j++] = b256[it4++];
-    }
-    return vch;
-  }
-  function decode(string) {
-    const buffer = decodeUnsafe(string);
-    if (buffer) {
-      return buffer;
-    }
-    throw new Error("Non-base" + BASE + " character");
-  }
-  return {
-    encode,
-    decodeUnsafe,
-    decode
-  };
-}
-var esm_default = base;
-// ../../node_modules/bs58/src/esm/index.js
-var ALPHABET = "123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz";
-var esm_default2 = esm_default(ALPHABET);
 // ../shared-ts/src/utils/walletAuthAuthority.ts
 function parseWalletAuthAuthorityRef(raw) {
   if (!raw || typeof raw !== "object" || Array.isArray(raw))
@@ -1934,13 +1660,6 @@ function requireCanonicalBase64Url(value, label) {
   }
   return decoded;
 }
-function parseDigestField(value, label) {
-  try {
-    return parseDigestB64u(value);
-  } catch (error) {
-    throw new Error(`${label} ${error instanceof Error ? error.message : "is not a digest"}`);
-  }
-}
 var PASSKEY_CUSTODY_WRAP_TAG_LENGTH = 16;
 function parseEnvelopeCiphertextB64u(value, label = "ciphertextB64u") {
   const decoded = requireCanonicalBase64Url(value, label);
@@ -1949,13 +1668,6 @@ function parseEnvelopeCiphertextB64u(value, label = "ciphertextB64u") {
   }
   return value;
 }
-function parseEd25519PublicKeyB64u(value, label = "registeredPublicKeyB64u") {
-  const decoded = requireCanonicalBase64Url(value, label);
-  if (decoded.length !== 32) {
-    throw new Error(`${label} must decode to a 32-byte Ed25519 public key`);
-  }
-  return value;
-}
 function parseSecp256k1CompressedPublicKeyB64u(value, label = "publicKey33B64u") {
   const decoded = requireCanonicalBase64Url(value, label);
   if (decoded.length !== 33) {
@@ -1966,12 +1678,6 @@ function parseSecp256k1CompressedPublicKeyB64u(value, label = "publicKey33B64u")
   }
   return value;
 }
-function parseKeyCreationSignerSlot(value, label = "keyCreationSignerSlot") {
-  if (typeof value !== "number" || !Number.isSafeInteger(value) || value <= 0 || value > 4294967295) {
-    throw new Error(`${label} must be a positive u32`);
-  }
-  return value;
-}
 // ../shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.ts
 function isEvmFamilySigningKeySlotIdShape(value) {
   const parts = value.split(":");
@@ -2136,60 +1842,6 @@ var SERVER_ALLOCATED_WALLET_NOUNS = [
 ];
 var SERVER_ALLOCATED_WALLET_ADJECTIVE_SET = new Set(SERVER_ALLOCATED_WALLET_ADJECTIVES);
 var SERVER_ALLOCATED_WALLET_NOUN_SET = new Set(SERVER_ALLOCATED_WALLET_NOUNS);
-function nearEd25519SigningKeyIdFromString(value) {
-  const normalized = String(value || "").trim();
-  if (!normalized) {
-    throw new Error("nearEd25519SigningKeyId is required");
-  }
-  return normalized;
-}
-function parseNearEd25519SigningKeyId(value) {
-  if (typeof value !== "string") {
-    throw new Error("nearEd25519SigningKeyId must be a string");
-  }
-  return nearEd25519SigningKeyIdFromString(value);
-}
-// ../shared-ts/src/utils/exactRecord.ts
-var SECRET_BEARING_FIELD_SUBSTRINGS = [
-  "prf",
-  "kek",
-  "seed",
-  "scalar",
-  "secretkey",
-  "privatekey",
-  "plaintext",
-  "recoverycode",
-  "clientroot",
-  "holdershare"
-];
-function rejectUnknownFields(record, allowed, label, knownOnOtherBranches = []) {
-  const allowedSet = new Set(allowed);
-  const knownSet = new Set(knownOnOtherBranches);
-  for (const field of Object.keys(record)) {
-    if (allowedSet.has(field))
-      continue;
-    if (knownSet.has(field)) {
-      throw new Error(`${label}.${field} is not part of ${label}`);
-    }
-    const normalized = field.toLowerCase().replace(/_/g, "");
-    const namesAPublicKey = normalized.includes("publickey");
-    if (!namesAPublicKey && SECRET_BEARING_FIELD_SUBSTRINGS.some((substring) => normalized.includes(substring))) {
-      throw new Error(`${label}.${field} must never carry plaintext custody material`);
-    }
-    throw new Error(`${label}.${field} is not part of ${label}`);
-  }
-}
-function exactRecord(raw, fields, label) {
-  const record = requireRecord(raw, label);
-  rejectUnknownFields(record, fields, label);
-  for (const field of fields) {
-    if (!Object.prototype.hasOwnProperty.call(record, field) || record[field] === undefined) {
-      throw new Error(`${label}.${field} is required`);
-    }
-  }
-  return record;
-}
 // ../shared-ts/src/passkey-custody/custodySecretBinding.ts
 var LANE_SCOPE_FIELDS = ["kind", "walletKeyId", "laneId", "laneShareEpoch"];
@@ -2294,7 +1946,6 @@ var EcdsaDerivationClientCustomRequestType = {
   PrewarmEcdsaRegistrationCrypto: 70018,
   VerifyRouterAbEcdsaPostRegistrationProofs: 70019,
   SignWalletRecoveryEcdsaMaterialPossessionProof: 70020,
-  PrepareEcdsaAdditiveLaneHolder: 70021,
   PrepareLinkedDeviceEcdsaSourceContribution: 70022,
   StoreLinkedDeviceEcdsaHolderMaterial: 70023,
   DisposeLinkedDeviceEcdsaHolderMaterials: 70024,
@@ -2318,7 +1969,6 @@ var EcdsaDerivationClientCustomResponseType = {
   PrewarmEcdsaRegistrationCryptoSuccess: 70118,
   VerifyRouterAbEcdsaPostRegistrationProofsSuccess: 70119,
   SignWalletRecoveryEcdsaMaterialPossessionProofSuccess: 70120,
-  PrepareEcdsaAdditiveLaneHolderSuccess: 70121,
   PrepareLinkedDeviceEcdsaSourceContributionSuccess: 70122,
   StoreLinkedDeviceEcdsaHolderMaterialSuccess: 70123,
   DisposeLinkedDeviceEcdsaHolderMaterialsSuccess: 70124,
@@ -2480,9 +2130,6 @@ var AUTHORIZATION_EVIDENCE_KIND_VALUES = Object.values(AUTHORIZATION_EVIDENCE_KI
 function parseDeviceId(value) {
   return parseAuthorizationId(value, "deviceId");
 }
-function parseAuthorizedOperationId(value) {
-  return parseAuthorizationId(value, "authorizedOperationId");
-}
 function parseAuthorizationId(value, fieldName) {
   if (typeof value !== "string") {
     return {
@@ -2515,75 +2162,6 @@ function parseAuthorizationId(value, fieldName) {
   return { ok: true, value: normalized };
 }
-// ../shared-ts/src/utils/wireSchema.ts
-function wireLiteral(...literals) {
-  const parse = (raw, label) => {
-    if (!literals.includes(raw))
-      throw new Error(`${label} is invalid`);
-    return raw;
-  };
-  return Object.assign(parse, { literals });
-}
-function wireObject(shape, refine) {
-  const keys = Object.keys(shape);
-  const order = [
-    ...keys.filter((key) => ("literals" in shape[key])),
-    ...keys.filter((key) => !("literals" in shape[key]))
-  ];
-  const parse = (raw, label) => {
-    const record = exactRecord(raw, keys, label);
-    const parsed = new Map;
-    for (const key of order)
-      parsed.set(key, shape[key](record[key], `${label}.${key}`));
-    const value = Object.fromEntries(keys.map((key) => [key, parsed.get(key)]));
-    refine?.(value, label);
-    return value;
-  };
-  return Object.assign(parse, { shape });
-}
-function wireUnion(tag, variants) {
-  const byTag = new Map;
-  for (const variant of variants) {
-    for (const literal of variant.shape[tag].literals)
-      byTag.set(literal, variant);
-  }
-  return (raw, label) => {
-    const record = requireRecord(raw, label);
-    const variant = byTag.get(record[tag]);
-    if (!variant)
-      throw new Error(`${label}.${tag} is invalid`);
-    return variant(record, label);
-  };
-}
-function wireNonEmptyArray(item, refine) {
-  return (raw, label) => {
-    const entries = requireArray(raw, label);
-    if (entries.length === 0)
-      throw new Error(`${label} must be non-empty`);
-    const [first, ...rest] = entries.map((entry, index) => item(entry, `${label}[${index}]`));
-    const items = [first, ...rest];
-    refine?.(items, label);
-    return items;
-  };
-}
-function wireResult(parse) {
-  return (raw, label) => {
-    const result = parse(raw);
-    if (result.ok)
-      return result.value;
-    throw new Error(`${label} ${result.error.message}`);
-  };
-}
-function wireLabeled(parse) {
-  return (raw, label) => {
-    try {
-      return parse(raw);
-    } catch (error) {
-      throw new Error(`${label} ${error instanceof Error ? error.message : "is invalid"}`);
-    }
-  };
-}
 // ../shared-ts/src/authorization/delegatedAuthority.ts
 var FULL_OWNER_PERMISSIONS = Object.freeze([
   "export_keys",
@@ -3198,6 +2776,9 @@ function parseRouterAbEcdsaRegistrationActivationReceiptV1(value) {
 function sameRouterAbServerIdentityV1(left, right) {
   return left.server_id === right.server_id && left.key_epoch === right.key_epoch && left.recipient_encryption_key === right.recipient_encryption_key;
 }
+function sameRouterAbEcdsaVerifiedClientActivationFactsV1(left, right) {
+  return left.registrationRequestDigestB64u === right.registrationRequestDigestB64u && left.proofTranscriptDigestB64u === right.proofTranscriptDigestB64u && left.contextBinding32B64u === right.contextBinding32B64u && left.derivationClientSharePublicKey33B64u === right.derivationClientSharePublicKey33B64u && left.clientShareRetryCounter === right.clientShareRetryCounter && left.participantId === right.participantId;
+}
 function sameRegistrationSignerSet(left, right) {
   return left.signer_set_id === right.signer_set_id && left.policy === right.policy && left.signer_a.role === right.signer_a.role && left.signer_a.signer_id === right.signer_a.signer_id && left.signer_a.key_epoch === right.signer_a.key_epoch && left.signer_b.role === right.signer_b.role && left.signer_b.signer_id === right.signer_b.signer_id && left.signer_b.key_epoch === right.signer_b.key_epoch && sameRouterAbServerIdentityV1(left.selected_server, right.selected_server);
 }
@@ -3583,6 +3164,12 @@ function requireEcdsaOperationStepUpKind(value) {
   }
 }
+// ../shared-ts/src/utils/routerAbEd25519YaoDigests.ts
+var UTF8 = new TextEncoder;
+// ../shared-ts/src/utils/routerAbEd25519Yao.ts
+var ED25519_YAO_CONTROL_CIPHERTEXT_MAX_BYTES_V1 = 64 * 1024;
 // ../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.ts
 function requireSdkBindingFactString(value, field) {
   const normalized = String(value ?? "").trim();
@@ -3600,652 +3187,70 @@ function parseSdkEcdsaDerivationSigningRootVersion(value) {
   return requireSdkBindingFactString(value, "signingRootVersion");
 }
-// ../shared-ts/src/signing-lanes/participants.ts
-function missing(field) {
-  return { code: "missing", message: `${field} is required` };
-}
-function invalid(field, reason) {
-  return { code: "invalid", message: `${field} ${reason}` };
-}
-function parseIdentityId(raw, field) {
-  if (raw === undefined || raw === null)
-    return { ok: false, error: missing(field) };
-  if (typeof raw !== "string")
-    return { ok: false, error: invalid(field, "must be a string") };
-  const value = raw.trim();
-  if (!value)
-    return { ok: false, error: missing(field) };
-  if (hasWhitespaceOrControlCharacters(value)) {
-    return { ok: false, error: invalid(field, "must not contain whitespace or control characters") };
-  }
-  return { ok: true, value };
+// ../shared-ts/src/device-linking/sourceContribution.ts
+var LINKED_DEVICE_ECDSA_SOURCE_CONTRIBUTION_ENVELOPE_KIND_V1 = "seams/linked-device/ecdsa-source-contribution-envelope/v1";
+function parseLinkedDeviceEcdsaSourceContributionPreparationV1(raw) {
+  const record = exactRecord2(raw, [
+    "linkSessionId",
+    "enrollmentId",
+    "sourceAuthorityId",
+    "source",
+    "target"
+  ], "linked-device ECDSA source contribution preparation");
+  const source = parseEcdsaSourceSigner(record.source);
+  const target = parseEcdsaTarget(record.target);
+  assertEcdsaSourceTargetActivations(source.activation, target.activation);
+  return {
+    linkSessionId: parseSessionId(record.linkSessionId),
+    enrollmentId: parseEnrollmentId(record.enrollmentId),
+    sourceAuthorityId: parseAuthorityId(record.sourceAuthorityId),
+    source,
+    target
+  };
 }
-function parseHpkePublicKey(raw, field) {
-  if (raw === undefined || raw === null)
-    return { ok: false, error: missing(field) };
-  if (typeof raw !== "string" || raw.length === 0) {
-    return { ok: false, error: invalid(field, "must be non-empty base64url") };
-  }
-  try {
-    const bytes = base64UrlDecode(raw);
-    if (bytes.length === 0 || base64UrlEncode(bytes) !== raw) {
-      return { ok: false, error: invalid(field, "must be canonical unpadded base64url") };
-    }
-  } catch {
-    return { ok: false, error: invalid(field, "must be canonical unpadded base64url") };
+function parseLinkedDeviceEcdsaSourceContributionPackageV1(raw) {
+  const record = exactRecord2(raw, ["binding", "encryptedDelta", "encryptedTargetClientShare"], "linked-device ECDSA source contribution package");
+  const binding = parseLinkedDeviceEcdsaSourceContributionBindingV1(record.binding);
+  const encryptedDelta = parseLinkedDeviceEcdsaEncryptedSourceContributionV1(record.encryptedDelta, "encryptedDelta");
+  const encryptedTargetClientShare = parseLinkedDeviceEcdsaEncryptedSourceContributionV1(record.encryptedTargetClientShare, "encryptedTargetClientShare");
+  const bindingDigest = encryptedDelta.bindingDigestB64u;
+  if (encryptedTargetClientShare.bindingDigestB64u !== bindingDigest) {
+    throw new Error("linked-device ECDSA source contribution envelope bindings differ");
   }
-  return { ok: true, value: raw };
-}
-function parseDigest(raw, field, brand) {
-  if (raw === undefined || raw === null)
-    return { ok: false, error: missing(field) };
-  try {
-    return { ok: true, value: brand(parseDigestB64u(raw)) };
-  } catch {
-    return { ok: false, error: invalid(field, "must be canonical base64url for 32 bytes") };
+  if (encryptedDelta.recipientPublicKeyB64u !== binding.target.signingWorkerRecipientPublicKeyB64u || encryptedTargetClientShare.recipientPublicKeyB64u !== binding.target.clientRecipientPublicKeyB64u) {
+    throw new Error("linked-device ECDSA source contribution envelope recipients differ");
   }
+  return { binding, encryptedDelta, encryptedTargetClientShare };
 }
-function brandLaneCustodyDigest(value) {
-  return value;
-}
-function brandRecipientDigest(value) {
-  return value;
-}
-function brandParticipantDigest(value) {
-  return value;
-}
-function parseLaneHolderParticipantId(raw) {
-  return parseIdentityId(raw, "laneHolderParticipantId");
-}
-function parseSigningWorkerParticipantId(raw) {
-  return parseIdentityId(raw, "signingWorkerParticipantId");
-}
-function parseSigningWorkerRecipientKeyId(raw) {
-  return parseIdentityId(raw, "signingWorkerRecipientKeyId");
-}
-function parseLaneHolderCustodyBindingId(raw) {
-  return parseIdentityId(raw, "laneHolderCustodyBindingId");
-}
-function parseHpkePublicKeyB64u(raw) {
-  return parseHpkePublicKey(raw, "hpkePublicKeyB64u");
-}
-function parseLaneParticipantBindingDigestB64u(raw) {
-  return parseDigest(raw, "participantBindingDigestB64u", brandParticipantDigest);
-}
-function parseLaneCustodyBindingDigestB64u(raw) {
-  return parseDigest(raw, "custodyBindingDigestB64u", brandLaneCustodyDigest);
+function parseLinkedDeviceEcdsaSourceContributionBindingV1(raw) {
+  const record = exactRecord2(raw, ["linkSessionId", "enrollmentId", "sourceAuthorityId", "source", "target", "targetClientPublicKey33B64u"], "linked-device ECDSA source contribution binding");
+  const source = parseEcdsaSourceSigner(record.source);
+  const target = parseEcdsaTarget(record.target);
+  assertEcdsaSourceTargetActivations(source.activation, target.activation);
+  return {
+    linkSessionId: requireText(record.linkSessionId, "binding.linkSessionId"),
+    enrollmentId: requireText(record.enrollmentId, "binding.enrollmentId"),
+    sourceAuthorityId: requireText(record.sourceAuthorityId, "binding.sourceAuthorityId"),
+    source,
+    target,
+    targetClientPublicKey33B64u: parseSecp256k1CompressedPublicKeyB64u(record.targetClientPublicKey33B64u, "binding.targetClientPublicKey33B64u")
+  };
 }
-function parseSigningWorkerRecipientKeyDigestB64u(raw) {
-  return parseDigest(raw, "hpkePublicKeyDigestB64u", brandRecipientDigest);
-}
-// ../shared-ts/src/utils/digestEncoding.ts
-var TEXT_ENCODER = new TextEncoder;
-// ../shared-ts/src/signing-lanes/ownerContinuity.ts
-var OWNER_LANE_PARTICIPANT_CONTINUITY_FIELDS = [
-  "kind",
-  "signerId",
-  "participantIds",
-  "signingWorkerId",
-  "custodyKeyManifestDigestB64u",
-  "sourceIdentityDigestB64u"
-];
-function requireResult(result, label) {
-  if (result.ok)
-    return result.value;
-  throw new Error(`${label} ${result.error.message}`);
-}
-function parseWalletSignerId(raw, label = "walletSignerId") {
-  if (typeof raw !== "string")
-    throw new Error(`${label} must be a string`);
-  const value = raw.trim();
-  if (!value)
-    throw new Error(`${label} is required`);
-  if (hasWhitespaceOrControlCharacters(value)) {
-    throw new Error(`${label} must not contain whitespace or control characters`);
-  }
-  return value;
-}
-function parseParticipantId(raw, label) {
-  if (typeof raw !== "number" || !Number.isSafeInteger(raw) || raw <= 0) {
-    throw new Error(`${label} must be a positive safe integer`);
-  }
-  return raw;
-}
-function parseParticipantIds(raw, label) {
-  if (!Array.isArray(raw) || raw.length !== 2) {
-    throw new Error(`${label} must contain exactly two participant ids`);
-  }
-  const first = parseParticipantId(raw[0], `${label}[0]`);
-  const second = parseParticipantId(raw[1], `${label}[1]`);
-  if (first === second)
-    throw new Error(`${label} must contain distinct participant ids`);
-  return [first, second];
-}
-function buildOwnerLaneParticipantContinuityV1(args) {
-  const participantIds = parseParticipantIds(args.participantIds, "participantIds");
-  return {
-    kind: "owner_lane_participant_continuity_v1",
-    signerId: parseWalletSignerId(args.signerId),
-    participantIds,
-    signingWorkerId: requireResult(parseMpcSigningWorkerRef(args.signingWorkerId), "signingWorkerId"),
-    custodyKeyManifestDigestB64u: parseDigestField(args.custodyKeyManifestDigestB64u, "custodyKeyManifestDigestB64u"),
-    sourceIdentityDigestB64u: parseDigestField(args.sourceIdentityDigestB64u, "sourceIdentityDigestB64u")
-  };
-}
-function parseOwnerLaneParticipantContinuityV1(raw, label = "ownerParticipantContinuity") {
-  const record = requireRecord(raw, label);
-  rejectUnknownFields(record, OWNER_LANE_PARTICIPANT_CONTINUITY_FIELDS, label);
-  if (record.kind !== "owner_lane_participant_continuity_v1") {
-    throw new Error(`${label}.kind must be owner_lane_participant_continuity_v1`);
-  }
-  return buildOwnerLaneParticipantContinuityV1({
-    signerId: parseWalletSignerId(record.signerId, `${label}.signerId`),
-    participantIds: parseParticipantIds(record.participantIds, `${label}.participantIds`),
-    signingWorkerId: requireResult(parseMpcSigningWorkerRef(record.signingWorkerId), `${label}.signingWorkerId`),
-    custodyKeyManifestDigestB64u: parseDigestField(record.custodyKeyManifestDigestB64u, `${label}.custodyKeyManifestDigestB64u`),
-    sourceIdentityDigestB64u: parseDigestField(record.sourceIdentityDigestB64u, `${label}.sourceIdentityDigestB64u`)
-  });
-}
-// ../shared-ts/src/signing-lanes/rotationWireFields.ts
-function requiredString(raw, label) {
-  if (typeof raw !== "string")
-    throw new Error(`${label} must be a string`);
-  const value = raw.trim();
-  if (!value)
-    throw new Error(`${label} is required`);
-  if (hasWhitespaceOrControlCharacters(value)) {
-    throw new Error(`${label} must not contain whitespace or control characters`);
-  }
-  return value;
-}
-function requiredInteger(raw, label) {
-  if (!Number.isSafeInteger(raw) || Number(raw) < 0) {
-    throw new Error(`${label} must be a non-negative safe integer`);
-  }
-  return Number(raw);
-}
-function parseLaneKind(raw, label) {
-  switch (raw) {
-    case "owner_passkey":
-    case "owner_email_otp":
-    case "linked_device":
-    case "delegated_execution":
-    case "recovery":
-    case "break_glass":
-      return raw;
-    default:
-      throw new Error(`${label} must be a known signing lane kind`);
-  }
-}
-var laneOperationId = /* @__PURE__ */ wireResult(parseLaneOperationId);
-var laneEnrollmentId = /* @__PURE__ */ wireResult(parseLaneEnrollmentId);
-var walletId2 = /* @__PURE__ */ wireResult(parseWalletId);
-var walletKeyId = /* @__PURE__ */ wireResult(parseWalletKeyId);
-var signingLaneId = /* @__PURE__ */ wireResult(parseSigningLaneId);
-var laneShareEpoch = /* @__PURE__ */ wireResult(parseLaneShareEpoch);
-var materialActivationId = /* @__PURE__ */ wireResult(parseMpcMaterialActivationId);
-var materialActivation2 = /* @__PURE__ */ wireResult(parseMpcMaterialActivationRef);
-var laneParticipantBindingDigest = /* @__PURE__ */ wireResult(parseLaneParticipantBindingDigestB64u);
-var digest2 = /* @__PURE__ */ wireLabeled(parseDigestB64u);
-var digestString = digest2;
-var authorizedOperationId = /* @__PURE__ */ wireResult(parseAuthorizedOperationId);
-function laneOperationAuthorizationBindingV1() {
-  return wireUnion("kind", [
-    wireObject({
-      kind: wireLiteral("linked_device_enrollment"),
-      authorizedOperationId,
-      linkedDeviceEnrollmentId: wireResult(parseLinkedDeviceEnrollmentId),
-      linkedDevicePermissionDigestB64u: digestString
-    }),
-    wireObject({
-      kind: wireLiteral("owner_lane_refresh"),
-      authorizedOperationId,
-      ownerLaneRefreshDigestB64u: digestString
-    })
-  ]);
-}
-function parseAuthorization(raw, label) {
-  return laneOperationAuthorizationBindingV1()(raw, label);
-}
-// ../shared-ts/src/signing-lanes/rotationProtocolParsers.ts
-function opaqueJson(raw, label) {
-  if (typeof raw !== "string" || raw.length === 0) {
-    throw new Error(`${label} must be a non-empty JSON string`);
-  }
-  try {
-    const parsed = JSON.parse(raw);
-    if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) {
-      throw new Error("top-level value must be an object");
-    }
-  } catch (error) {
-    throw new Error(`${label} must contain valid object JSON: ${error instanceof Error ? error.message : "invalid JSON"}`);
-  }
-  return raw;
-}
-var hpkePublicKey = /* @__PURE__ */ wireResult(parseHpkePublicKeyB64u);
-var hpkePublicKeyDigest = /* @__PURE__ */ wireResult(parseSigningWorkerRecipientKeyDigestB64u);
-var signingWorkerRecipientKeyId = /* @__PURE__ */ wireResult(parseSigningWorkerRecipientKeyId);
-var laneHolderParticipantId = /* @__PURE__ */ wireResult(parseLaneHolderParticipantId);
-var signingWorkerParticipantId = /* @__PURE__ */ wireResult(parseSigningWorkerParticipantId);
-var laneOperationIdempotencyKey = /* @__PURE__ */ wireResult(parseLaneOperationIdempotencyKey);
-var ed25519YaoSuiteId = /* @__PURE__ */ wireResult(parseEd25519YaoSuiteId);
-var compressedPointString = (raw) => parseSecp256k1CompressedPublicKeyB64u(raw);
-function sourceKind(expected) {
-  return (raw, label) => {
-    if (raw !== expected)
-      throw new Error(`${label} must be ${expected}`);
-    return expected;
-  };
-}
-var participantBindingDigestString = laneParticipantBindingDigest;
-function ownerLaneProtocolSourceV1() {
-  return wireObject({
-    sourceKind: sourceKind("owner_registration"),
-    laneId: signingLaneId,
-    laneKind: wireLiteral("owner_passkey", "owner_email_otp"),
-    laneShareEpoch,
-    revocationEpoch: requiredInteger,
-    ownerParticipantContinuity: parseOwnerLaneParticipantContinuityV1,
-    participantBindingDigestB64u: participantBindingDigestString,
-    materialActivation: materialActivation2
-  });
-}
-function provisionedLaneProtocolSourceV1() {
-  return wireObject({
-    sourceKind: sourceKind("provisioned_lane"),
-    laneId: signingLaneId,
-    laneKind: wireLiteral("linked_device", "delegated_execution", "recovery", "break_glass"),
-    laneShareEpoch,
-    revocationEpoch: requiredInteger,
-    holderParticipantId: laneHolderParticipantId,
-    signingWorkerParticipantId,
-    signingWorkerRecipientKeyId,
-    participantBindingDigestB64u: participantBindingDigestString,
-    materialActivation: materialActivation2
-  });
-}
-function parseSource(raw, label) {
-  const record = requireRecord(raw, label);
-  const laneKind = parseLaneKind(record.laneKind, `${label}.laneKind`);
-  return laneKind === "owner_passkey" || laneKind === "owner_email_otp" ? ownerLaneProtocolSourceV1()(record, label) : provisionedLaneProtocolSourceV1()(record, label);
-}
-function laneTargetHolderV1() {
-  return wireObject({
-    participantId: laneHolderParticipantId,
-    participantBindingDigestB64u: laneParticipantBindingDigest,
-    custodyBindingId: wireResult(parseLaneHolderCustodyBindingId),
-    custodyBindingDigestB64u: wireResult(parseLaneCustodyBindingDigestB64u),
-    hpkePublicKeyB64u: hpkePublicKey,
-    hpkePublicKeyDigestB64u: hpkePublicKeyDigest
-  });
-}
-function laneTargetSigningWorkerV1() {
-  return wireObject({
-    participantId: signingWorkerParticipantId,
-    participantBindingDigestB64u: laneParticipantBindingDigest,
-    recipientKeyId: signingWorkerRecipientKeyId,
-    hpkePublicKeyB64u: hpkePublicKey,
-    hpkePublicKeyDigestB64u: hpkePublicKeyDigest
-  });
-}
-function buildLaneCreationTargetV1(args) {
-  return {
-    operation: "create_lane",
-    laneId: args.laneId,
-    laneKind: "linked_device",
-    laneShareEpoch: args.laneShareEpoch,
-    expectedTargetState: "absent"
-  };
-}
-function buildLaneRefreshTargetV1(args) {
-  return {
-    operation: "refresh_lane",
-    laneId: args.laneId,
-    laneKind: args.laneKind,
-    laneShareEpoch: args.laneShareEpoch,
-    expectedTargetState: "active_previous_epoch",
-    priorMaterialActivation: args.priorMaterialActivation
-  };
-}
-function parseTarget(raw, source, label) {
-  const record = requireRecord(raw, label);
-  if (record.operation === "create_lane") {
-    const value = exactRecord(record, ["operation", "laneId", "laneKind", "laneShareEpoch", "expectedTargetState"], label);
-    if (value.laneKind !== "linked_device" || value.expectedTargetState !== "absent") {
-      throw new Error(`${label} create branch has invalid target state`);
-    }
-    const target = buildLaneCreationTargetV1({
-      laneId: signingLaneId(value.laneId, `${label}.laneId`),
-      laneShareEpoch: laneShareEpoch(value.laneShareEpoch, `${label}.laneShareEpoch`)
-    });
-    if (source.laneKind === "linked_device" || source.laneKind === "delegated_execution") {
-      throw new Error(`${label} creation requires an owner-controlled source lane`);
-    }
-    if (String(target.laneId) === String(source.laneId)) {
-      throw new Error(`${label}.laneId must differ from source.laneId for creation`);
-    }
-    return target;
-  }
-  if (record.operation === "refresh_lane") {
-    const value = exactRecord(record, [
-      "operation",
-      "laneId",
-      "laneKind",
-      "laneShareEpoch",
-      "expectedTargetState",
-      "priorMaterialActivation"
-    ], label);
-    if (value.expectedTargetState !== "active_previous_epoch") {
-      throw new Error(`${label} refresh branch has invalid target state`);
-    }
-    const laneId = signingLaneId(value.laneId, `${label}.laneId`);
-    if (String(laneId) !== String(source.laneId)) {
-      throw new Error(`${label}.laneId must match source.laneId for refresh`);
-    }
-    const shareEpoch = laneShareEpoch(value.laneShareEpoch, `${label}.laneShareEpoch`);
-    if (String(shareEpoch) === String(source.laneShareEpoch)) {
-      throw new Error(`${label}.laneShareEpoch must advance source.laneShareEpoch`);
-    }
-    const laneKind = parseLaneKind(value.laneKind, `${label}.laneKind`);
-    if (laneKind !== source.laneKind) {
-      throw new Error(`${label}.laneKind must match source.laneKind for refresh`);
-    }
-    if (laneKind !== "delegated_execution") {
-      return buildLaneRefreshTargetV1({
-        laneId,
-        laneKind,
-        laneShareEpoch: shareEpoch,
-        priorMaterialActivation: materialActivation2(value.priorMaterialActivation, `${label}.priorMaterialActivation`)
-      });
-    }
-  }
-  throw new Error(`${label}.operation is invalid`);
-}
-function parseOperation(rawTarget, rawAuthorization, source, label) {
-  const target = parseTarget(rawTarget, source, `${label}.target`);
-  const authorization = parseAuthorization(rawAuthorization, `${label}.authorization`);
-  if (target.operation === "create_lane") {
-    if (authorization.kind !== "linked_device_enrollment") {
-      throw new Error(`${label}.authorization must be linked-device enrollment for creation`);
-    }
-    return { target, authorization };
-  }
-  if (authorization.kind !== "owner_lane_refresh") {
-    throw new Error(`${label}.authorization must be owner refresh for refresh`);
-  }
-  return { target, authorization };
-}
-function isParsedCreationOperation(value) {
-  return value.target.operation === "create_lane";
-}
-function parseCommonJob(record, label) {
-  const source = parseSource(record.source, `${label}.source`);
-  const targetHolder = laneTargetHolderV1()(record.targetHolder, `${label}.targetHolder`);
-  const targetSigningWorker = laneTargetSigningWorkerV1()(record.targetSigningWorker, `${label}.targetSigningWorker`);
-  const targetMaterialActivationId = materialActivationId(record.targetMaterialActivationId, `${label}.targetMaterialActivationId`);
-  if (String(targetMaterialActivationId) === String(source.materialActivation.activationId)) {
-    throw new Error(`${label}.targetMaterialActivationId must be fresh`);
-  }
-  if (record.protocolVersion !== "rotatable_signing_lane_protocol_v1") {
-    throw new Error(`${label}.protocolVersion is invalid`);
-  }
-  return {
-    operationId: laneOperationId(record.operationId, `${label}.operationId`),
-    enrollmentId: laneEnrollmentId(record.enrollmentId, `${label}.enrollmentId`),
-    idempotencyKey: laneOperationIdempotencyKey(record.idempotencyKey, `${label}.idempotencyKey`),
-    walletId: walletId2(record.walletId, `${label}.walletId`),
-    walletKeyId: walletKeyId(record.walletKeyId, `${label}.walletKeyId`),
-    source,
-    targetHolder,
-    targetSigningWorker,
-    targetMaterialActivationId,
-    protocolVersion: "rotatable_signing_lane_protocol_v1",
-    expiresAtMs: requiredInteger(record.expiresAtMs, `${label}.expiresAtMs`)
-  };
-}
-function ecdsaSourceCapabilityBindingV1() {
-  return wireObject({
-    manifestId: parseEcdsaCapabilityManifestId,
-    manifestRevision: parseEcdsaCapabilityManifestRevision,
-    serverGeneration: parseEcdsaServerGeneration,
-    ecdsaThresholdKeyId: parseSdkEcdsaDerivationThresholdKeyId,
-    relayerKeyId: wireResult(parseEcdsaRelayerKeyId)
-  });
-}
-function thresholdEcdsaChainTarget() {
-  return wireUnion("kind", [
-    wireObject({
-      kind: wireLiteral("evm"),
-      namespace: wireLiteral("eip155"),
-      chainId: requiredInteger,
-      networkSlug: requiredString
-    }),
-    wireObject({
-      kind: wireLiteral("tempo"),
-      chainId: requiredInteger,
-      networkSlug: requiredString
-    })
-  ]);
-}
-function ecdsaTargetCapabilityBindingV1() {
-  return wireObject({
-    manifestId: parseEcdsaCapabilityManifestId,
-    manifestRevision: parseEcdsaCapabilityManifestRevision,
-    ecdsaThresholdKeyId: parseSdkEcdsaDerivationThresholdKeyId,
-    orderedThresholdSessions: wireNonEmptyArray(wireObject({
-      chainTarget: thresholdEcdsaChainTarget(),
-      thresholdSessionId: wireResult(parseThresholdEcdsaSessionId),
-      participantBindingDigestB64u: digestString
-    }))
-  });
-}
-var LANE_JOB_FIELDS = [
-  "kind",
-  "keyFamily",
-  "operationId",
-  "enrollmentId",
-  "idempotencyKey",
-  "walletId",
-  "walletKeyId",
-  "source",
-  "targetHolder",
-  "targetSigningWorker",
-  "targetMaterialActivationId",
-  "protocolVersion",
-  "expiresAtMs",
-  "target",
-  "authorization"
-];
-function parseEcdsaJob(record, label) {
-  const value = exactRecord(record, [
-    ...LANE_JOB_FIELDS,
-    "evmFamilySigningKeySlotId",
-    "thresholdPublicKey33B64u",
-    "evmAddress",
-    "sourceCapability",
-    "targetCapability",
-    "sourceHolderVerifyingShare33B64u",
-    "sourceServerVerifyingShare33B64u",
-    "reshareChannelBindingDigestB64u",
-    "transcriptEncoding"
-  ], label);
-  if (value.kind !== "ecdsa_additive_lane_job_v1" || value.keyFamily !== "ecdsa_secp256k1") {
-    throw new Error(`${label} kind/keyFamily is invalid`);
-  }
-  if (value.transcriptEncoding !== "ecdsa_additive_lane_transcript_v1") {
-    throw new Error(`${label}.transcriptEncoding is invalid`);
-  }
-  const common = parseCommonJob(value, label);
-  const operation = parseOperation(value.target, value.authorization, common.source, `${label}.operation`);
-  const curve = {
-    kind: "ecdsa_additive_lane_job_v1",
-    keyFamily: "ecdsa_secp256k1",
-    evmFamilySigningKeySlotId: (() => {
-      const parsed = parseEvmFamilySigningKeySlotId(value.evmFamilySigningKeySlotId);
-      if (parsed.ok)
-        return parsed.value;
-      throw new Error(`${label}.evmFamilySigningKeySlotId is invalid`);
-    })(),
-    thresholdPublicKey33B64u: parseSecp256k1CompressedPublicKeyB64u(value.thresholdPublicKey33B64u),
-    evmAddress: requiredString(value.evmAddress, `${label}.evmAddress`),
-    sourceCapability: ecdsaSourceCapabilityBindingV1()(value.sourceCapability, `${label}.sourceCapability`),
-    targetCapability: ecdsaTargetCapabilityBindingV1()(value.targetCapability, `${label}.targetCapability`),
-    sourceHolderVerifyingShare33B64u: parseSecp256k1CompressedPublicKeyB64u(value.sourceHolderVerifyingShare33B64u, `${label}.sourceHolderVerifyingShare33B64u`),
-    sourceServerVerifyingShare33B64u: parseSecp256k1CompressedPublicKeyB64u(value.sourceServerVerifyingShare33B64u, `${label}.sourceServerVerifyingShare33B64u`),
-    reshareChannelBindingDigestB64u: digest2(value.reshareChannelBindingDigestB64u, `${label}.reshareChannelBindingDigestB64u`),
-    transcriptEncoding: "ecdsa_additive_lane_transcript_v1"
-  };
-  return { ...common, ...operation, ...curve };
-}
-function parseEdJob(record, label) {
-  const value = exactRecord(record, [
-    ...LANE_JOB_FIELDS,
-    "yaoRequestKind",
-    "registeredPublicKeyB64u",
-    "nearEd25519SigningKeyId",
-    "keyCreationSignerSlot",
-    "stableContextBindingB64u",
-    "yaoSuiteId",
-    "circuitDigestB64u"
-  ], label);
-  if (value.kind !== "ed25519_yao_lane_job_v1" || value.keyFamily !== "ed25519") {
-    throw new Error(`${label} kind/keyFamily is invalid`);
-  }
-  const common = parseCommonJob(value, label);
-  const operation = parseOperation(value.target, value.authorization, common.source, `${label}.operation`);
-  const yaoRequestKind = requiredString(value.yaoRequestKind, `${label}.yaoRequestKind`);
-  const curve = {
-    kind: "ed25519_yao_lane_job_v1",
-    keyFamily: "ed25519",
-    registeredPublicKeyB64u: parseEd25519PublicKeyB64u(value.registeredPublicKeyB64u),
-    nearEd25519SigningKeyId: parseNearEd25519SigningKeyId(value.nearEd25519SigningKeyId),
-    keyCreationSignerSlot: parseKeyCreationSignerSlot(value.keyCreationSignerSlot),
-    stableContextBindingB64u: digest2(value.stableContextBindingB64u, `${label}.stableContextBindingB64u`),
-    yaoSuiteId: ed25519YaoSuiteId(value.yaoSuiteId, `${label}.yaoSuiteId`),
-    circuitDigestB64u: digest2(value.circuitDigestB64u, `${label}.circuitDigestB64u`)
-  };
-  if (isParsedCreationOperation(operation)) {
-    if (yaoRequestKind !== "lane_provisioning")
-      throw new Error(`${label}.yaoRequestKind must be lane_provisioning for creation`);
-    return { ...common, ...operation, yaoRequestKind, ...curve };
-  }
-  if (yaoRequestKind !== "lane_refresh")
-    throw new Error(`${label}.yaoRequestKind must be lane_refresh for refresh`);
-  return { ...common, ...operation, yaoRequestKind, ...curve };
-}
-function parseRotatableSigningLaneJobV1(raw, label = "laneProtocolJob") {
-  const record = requireRecord(raw, label);
-  if (record.kind === "ed25519_yao_lane_job_v1")
-    return parseEdJob(record, label);
-  if (record.kind === "ecdsa_additive_lane_job_v1")
-    return parseEcdsaJob(record, label);
-  throw new Error(`${label}.kind is invalid`);
-}
-function laneHolderPackageWireV1() {
-  return wireUnion("kind", [
-    wireObject({
-      kind: wireLiteral("ed25519_yao_lane_holder_package_set_v1"),
-      deriverAEncryptedPackageJson: opaqueJson,
-      deriverBEncryptedPackageJson: opaqueJson
-    }),
-    wireObject({
-      kind: wireLiteral("ecdsa_additive_lane_holder_package_v1"),
-      ecdsaEncryptedMaterialEnvelopeJson: opaqueJson
-    })
-  ]);
-}
-function parseLaneHolderPackageWireV1(raw, label = "laneHolderPackage") {
-  return laneHolderPackageWireV1()(raw, label);
-}
-function ecdsaAdditiveLaneHolderRoundV1() {
-  return wireObject({
-    kind: wireLiteral("ecdsa_additive_lane_holder_round_v1"),
-    preambleHashB64u: digestString,
-    targetHolderPublicCommitment33B64u: compressedPointString,
-    encryptedDeltaCiphertextDigestB64u: digestString,
-    sealedTargetHolderMaterialDigestB64u: digestString,
-    holderAttestationB64u: requiredString,
-    holderCommittedAtMs: requiredInteger
-  });
-}
-function parseEcdsaAdditiveLaneHolderRoundV1(raw, label = "ecdsaHolderRound") {
-  return ecdsaAdditiveLaneHolderRoundV1()(raw, label);
-}
-// ../shared-ts/src/utils/routerAbEd25519YaoDigests.ts
-var UTF8 = new TextEncoder;
-// ../shared-ts/src/utils/routerAbEd25519Yao.ts
-var ED25519_YAO_CONTROL_CIPHERTEXT_MAX_BYTES_V1 = 64 * 1024;
-// ../shared-ts/src/device-linking/sourceContribution.ts
-var LINKED_DEVICE_ECDSA_SOURCE_CONTRIBUTION_ENVELOPE_KIND_V1 = "seams/linked-device/ecdsa-source-contribution-envelope/v1";
-function parseLinkedDeviceEcdsaSourceContributionPreparationV1(raw) {
-  const record = exactRecord2(raw, [
-    "linkSessionId",
-    "enrollmentId",
-    "sourceAuthorityId",
-    "source",
-    "target"
-  ], "linked-device ECDSA source contribution preparation");
-  const source = parseEcdsaSourceSigner(record.source);
-  const target = parseEcdsaTarget(record.target);
-  assertEcdsaSourceTargetActivations(source.activation, target.activation);
-  return {
-    linkSessionId: parseSessionId(record.linkSessionId),
-    enrollmentId: parseEnrollmentId(record.enrollmentId),
-    sourceAuthorityId: parseAuthorityId(record.sourceAuthorityId),
-    source,
-    target
-  };
-}
-function parseLinkedDeviceEcdsaSourceContributionPackageV1(raw) {
-  const record = exactRecord2(raw, ["binding", "encryptedDelta", "encryptedTargetClientShare"], "linked-device ECDSA source contribution package");
-  const binding = parseLinkedDeviceEcdsaSourceContributionBindingV1(record.binding);
-  const encryptedDelta = parseLinkedDeviceEcdsaEncryptedSourceContributionV1(record.encryptedDelta, "encryptedDelta");
-  const encryptedTargetClientShare = parseLinkedDeviceEcdsaEncryptedSourceContributionV1(record.encryptedTargetClientShare, "encryptedTargetClientShare");
-  const bindingDigest = encryptedDelta.bindingDigestB64u;
-  if (encryptedTargetClientShare.bindingDigestB64u !== bindingDigest) {
-    throw new Error("linked-device ECDSA source contribution envelope bindings differ");
-  }
-  if (encryptedDelta.recipientPublicKeyB64u !== binding.target.signingWorkerRecipientPublicKeyB64u || encryptedTargetClientShare.recipientPublicKeyB64u !== binding.target.clientRecipientPublicKeyB64u) {
-    throw new Error("linked-device ECDSA source contribution envelope recipients differ");
-  }
-  return { binding, encryptedDelta, encryptedTargetClientShare };
-}
-function parseLinkedDeviceEcdsaSourceContributionBindingV1(raw) {
-  const record = exactRecord2(raw, ["linkSessionId", "enrollmentId", "sourceAuthorityId", "source", "target", "targetClientPublicKey33B64u"], "linked-device ECDSA source contribution binding");
-  const source = parseEcdsaSourceSigner(record.source);
-  const target = parseEcdsaTarget(record.target);
-  assertEcdsaSourceTargetActivations(source.activation, target.activation);
-  return {
-    linkSessionId: requireText(record.linkSessionId, "binding.linkSessionId"),
-    enrollmentId: requireText(record.enrollmentId, "binding.enrollmentId"),
-    sourceAuthorityId: requireText(record.sourceAuthorityId, "binding.sourceAuthorityId"),
-    source,
-    target,
-    targetClientPublicKey33B64u: parseSecp256k1CompressedPublicKeyB64u(record.targetClientPublicKey33B64u, "binding.targetClientPublicKey33B64u")
-  };
-}
-function parseEcdsaSourceSigner(raw) {
-  const record = exactRecord2(raw, [
-    "activation",
-    "clientPublicKey33B64u",
-    "relayerPublicKey33B64u",
-    "thresholdPublicKey33B64u",
-    "thresholdEthereumAddress20B64u"
-  ], "linked-device ECDSA source signer");
-  return {
-    activation: parseActivation(record.activation, "source.activation"),
-    clientPublicKey33B64u: parseSecp256k1CompressedPublicKeyB64u(record.clientPublicKey33B64u, "source.clientPublicKey33B64u"),
-    relayerPublicKey33B64u: parseSecp256k1CompressedPublicKeyB64u(record.relayerPublicKey33B64u, "source.relayerPublicKey33B64u"),
-    thresholdPublicKey33B64u: parseSecp256k1CompressedPublicKeyB64u(record.thresholdPublicKey33B64u, "source.thresholdPublicKey33B64u"),
-    thresholdEthereumAddress20B64u: parseFixedBase64(record.thresholdEthereumAddress20B64u, 20, "source.thresholdEthereumAddress20B64u")
-  };
+function parseEcdsaSourceSigner(raw) {
+  const record = exactRecord2(raw, [
+    "activation",
+    "clientPublicKey33B64u",
+    "relayerPublicKey33B64u",
+    "thresholdPublicKey33B64u",
+    "thresholdEthereumAddress20B64u"
+  ], "linked-device ECDSA source signer");
+  return {
+    activation: parseActivation(record.activation, "source.activation"),
+    clientPublicKey33B64u: parseSecp256k1CompressedPublicKeyB64u(record.clientPublicKey33B64u, "source.clientPublicKey33B64u"),
+    relayerPublicKey33B64u: parseSecp256k1CompressedPublicKeyB64u(record.relayerPublicKey33B64u, "source.relayerPublicKey33B64u"),
+    thresholdPublicKey33B64u: parseSecp256k1CompressedPublicKeyB64u(record.thresholdPublicKey33B64u, "source.thresholdPublicKey33B64u"),
+    thresholdEthereumAddress20B64u: parseFixedBase64(record.thresholdEthereumAddress20B64u, 20, "source.thresholdEthereumAddress20B64u")
+  };
 }
 function parseEcdsaTarget(raw) {
   const record = exactRecord2(raw, [
@@ -4363,31 +3368,6 @@ var EcdsaClientWorkerControlKind = {
   AttachLinkedHolderToPresign: "attach_linked_holder_to_ecdsa_presign_v1",
   AttachPresignToOnline: "attach_ecdsa_presign_to_online_v1"
 };
-function parsePrepareEcdsaAdditiveLaneHolderRequestV1(raw) {
-  if (!isObject(raw) || Array.isArray(raw)) {
-    throw new Error("ECDSA lane holder request must be an object");
-  }
-  const fields = Object.keys(raw);
-  if (fields.length !== 3 || !fields.includes("kind") || !fields.includes("job") || !fields.includes("holderCommittedAtMs")) {
-    throw new Error("ECDSA lane holder request has invalid fields");
-  }
-  if (raw.kind !== "prepare_ecdsa_additive_lane_holder_v1") {
-    throw new Error("ECDSA lane holder request kind is invalid");
-  }
-  const job = parseRotatableSigningLaneJobV1(raw.job, "ecdsaLaneHolderRequest.job");
-  if (job.keyFamily !== "ecdsa_secp256k1") {
-    throw new Error("ECDSA lane holder request requires an ECDSA lane job");
-  }
-  const holderCommittedAtMs = raw.holderCommittedAtMs;
-  if (typeof holderCommittedAtMs !== "number" || !Number.isSafeInteger(holderCommittedAtMs) || holderCommittedAtMs < 0) {
-    throw new Error("ECDSA lane holder request holderCommittedAtMs is invalid");
-  }
-  return {
-    kind: "prepare_ecdsa_additive_lane_holder_v1",
-    job,
-    holderCommittedAtMs
-  };
-}
 function parsePrepareLinkedDeviceEcdsaSourceContributionRequestV1(raw) {
   if (!isObject(raw) || Array.isArray(raw)) {
     throw new Error("linked-device ECDSA source contribution request must be an object");
@@ -4771,70 +3751,6 @@ function isAttachLinkedHolderToPresignPort(value) {
   return parsed?.kind === EcdsaClientWorkerControlKind.AttachLinkedHolderToPresign && parsed.port instanceof MessagePort;
 }
-// src/core/signingEngine/threshold/crypto/ecdsaLaneWasm.ts
-function assertEcdsaHolderRound(value) {
-  return parseEcdsaAdditiveLaneHolderRoundV1(value);
-}
-function nonEmpty(value, label) {
-  if (typeof value !== "string" || !value.trim())
-    throw new Error(`${label} is required`);
-  return value;
-}
-function parseEcdsaAdditiveLaneHolderPreparationV1(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    throw new Error("ECDSA holder preparation must be an object");
-  }
-  const allowed = new Set(["kind", "holderRound", "holderPackage", "encryptedDeltaPackageJson"]);
-  for (const key of Object.keys(value)) {
-    if (!allowed.has(key))
-      throw new Error(`ECDSA holder preparation.${key} is not allowed`);
-  }
-  const kind = Reflect.get(value, "kind");
-  if (kind !== "ecdsa_additive_lane_holder_preparation_v1") {
-    throw new Error("ECDSA holder preparation kind is invalid");
-  }
-  const holderPackage = parseLaneHolderPackageWireV1(Reflect.get(value, "holderPackage"));
-  if (holderPackage.kind !== "ecdsa_additive_lane_holder_package_v1") {
-    throw new Error("ECDSA holder preparation returned the wrong package family");
-  }
-  return {
-    kind,
-    holderRound: assertEcdsaHolderRound(Reflect.get(value, "holderRound")),
-    holderPackage,
-    encryptedDeltaPackageJson: nonEmpty(Reflect.get(value, "encryptedDeltaPackageJson"), "encryptedDeltaPackageJson")
-  };
-}
-// src/core/signingEngine/workerManager/workers/ecdsaLaneHolderWorkerRuntime.ts
-function resolveExactEcdsaLaneSourceMaterialV1(request, candidates) {
-  const matches = [];
-  for (const candidate of candidates) {
-    if (mpcMaterialActivationRefsEqual(candidate.materialActivation, request.job.source.materialActivation)) {
-      matches.push(candidate);
-    }
-  }
-  if (matches.length === 0) {
-    throw new Error("ECDSA lane source material is not loaded for the exact activation");
-  }
-  if (matches.length !== 1) {
-    throw new Error("ECDSA lane source activation resolves to multiple loaded materials");
-  }
-  return matches[0];
-}
-function prepareEcdsaLaneHolderInWorkerV1(args) {
-  const source = resolveExactEcdsaLaneSourceMaterialV1(args.request, args.candidates);
-  const session = args.sessionFactory.create(source.stateBlobB64u);
-  try {
-    const output = JSON.parse(session.prepare(JSON.stringify({
-      job: args.request.job,
-      holderCommittedAtMs: args.request.holderCommittedAtMs
-    })));
-    return parseEcdsaAdditiveLaneHolderPreparationV1(output);
-  } finally {
-    session.free();
-  }
-}
 // src/core/platform/signerCoreCommandAdapters.ts
 function requireBase64UrlBytes(value, field, byteLength) {
   const normalized = String(value || "").trim();
@@ -5182,7 +4098,7 @@ var WALLET_AUTH_METHODS = {
 var WALLET_AUTH_METHOD_VALUES = Object.values(WALLET_AUTH_METHODS);
 // ../shared-ts/src/utils/thresholdEcdsaKeyHandle.ts
-function requiredString2(value, field) {
+function requiredString(value, field) {
   const normalized = String(value ?? "").trim();
   if (!normalized)
     throw new Error(`[threshold-ecdsa-key-handle] ${field} is required`);
@@ -5194,17 +4110,17 @@ function normalizedSigningRootVersion(value) {
 async function deriveThresholdEcdsaKeyHandle(input) {
   const canonical = alphabetizeStringify({
     domain: "seams.threshold_ecdsa.key_handle.v1",
-    ecdsaThresholdKeyId: requiredString2(input.ecdsaThresholdKeyId, "ecdsaThresholdKeyId"),
-    signingRootId: requiredString2(input.signingRootId, "signingRootId"),
+    ecdsaThresholdKeyId: requiredString(input.ecdsaThresholdKeyId, "ecdsaThresholdKeyId"),
+    signingRootId: requiredString(input.signingRootId, "signingRootId"),
     signingRootVersion: normalizedSigningRootVersion(input.signingRootVersion)
   });
   const digest = await sha256BytesUtf8(canonical);
   return `ederivation-key-${base64UrlEncode(digest)}`;
 }
-// ../shared-ts/src/signing-lanes/rotationDigests.ts
-var TEXT_ENCODER2 = new TextEncoder;
+// ../shared-ts/src/utils/digestEncoding.ts
+var TEXT_ENCODER = new TextEncoder;
 // src/core/signingEngine/session/identity/evmFamilyEcdsaIdentity.ts
-function requiredString3(value, field) {
+function requiredString2(value, field) {
   const normalized = String(value ?? "").trim();
   if (!normalized)
     throw new Error(`[evm-family-ecdsa] ${field} is required`);
@@ -5218,10 +4134,10 @@ function normalizeThresholdOwnerAddress(value) {
   return normalized;
 }
 function toEvmFamilyEcdsaKeyHandle(value) {
-  return requiredString3(value, "keyHandle");
+  return requiredString2(value, "keyHandle");
 }
 function toThresholdEcdsaPublicKeyB64u(value) {
-  const normalized = requiredString3(value, "thresholdEcdsaPublicKeyB64u");
+  const normalized = requiredString2(value, "thresholdEcdsaPublicKeyB64u");
   let bytes;
   try {
     bytes = base64UrlDecode(normalized);
@@ -5268,1612 +4184,1585 @@ function toEcdsaDerivationSigningRootVersion(value) {
   return parseSdkEcdsaDerivationSigningRootVersion(value);
 }
-// ../../node_modules/idb/build/index.js
-var instanceOfAny = (object, constructors) => constructors.some((c) => object instanceof c);
-var idbProxyableTypes;
-var cursorAdvanceMethods;
-function getIdbProxyableTypes() {
-  return idbProxyableTypes || (idbProxyableTypes = [
-    IDBDatabase,
-    IDBObjectStore,
-    IDBIndex,
-    IDBCursor,
-    IDBTransaction
-  ]);
+// src/core/signingEngine/session/persistence/ecdsaRoleLocalRecords.ts
+function requiredString3(value, field) {
+  if (typeof value !== "string" || !value.trim()) {
+    throw new Error(`[platform][ecdsa-role-local] ${field} is required`);
+  }
+  return value.trim();
 }
-function getCursorAdvanceMethods() {
-  return cursorAdvanceMethods || (cursorAdvanceMethods = [
-    IDBCursor.prototype.advance,
-    IDBCursor.prototype.continue,
-    IDBCursor.prototype.continuePrimaryKey
-  ]);
+function parseBase64UrlBytes(value, field, byteLength) {
+  const normalized = requiredString3(value, field);
+  const decoded = base64UrlDecode(normalized);
+  if (decoded.length !== byteLength) {
+    throw new Error(`[platform][ecdsa-role-local] ${field} must decode to ${byteLength} bytes`);
+  }
+  return normalized;
 }
-var transactionDoneMap = new WeakMap;
-var transformCache = new WeakMap;
-var reverseTransformCache = new WeakMap;
-function promisifyRequest(request) {
-  const promise = new Promise((resolve, reject) => {
-    const unlisten = () => {
-      request.removeEventListener("success", success);
-      request.removeEventListener("error", error);
-    };
-    const success = () => {
-      resolve(wrap(request.result));
-      unlisten();
-    };
-    const error = () => {
-      reject(request.error);
-      unlisten();
-    };
-    request.addEventListener("success", success);
-    request.addEventListener("error", error);
-  });
-  reverseTransformCache.set(promise, request);
-  return promise;
+function parseCompressedSecp256k1PublicKey(value, field) {
+  const normalized = requiredString3(value, field);
+  const decoded = base64UrlDecode(normalized);
+  if (decoded.length !== 33) {
+    throw new Error(`[platform][ecdsa-role-local] ${field} must decode to 33 bytes`);
+  }
+  if (decoded[0] !== 2 && decoded[0] !== 3) {
+    throw new Error(`[platform][ecdsa-role-local] ${field} must be a compressed SEC1 key`);
+  }
+  return normalized;
 }
-function cacheDonePromiseForTransaction(tx) {
-  if (transactionDoneMap.has(tx))
-    return;
-  const done = new Promise((resolve, reject) => {
-    const unlisten = () => {
-      tx.removeEventListener("complete", complete);
-      tx.removeEventListener("error", error);
-      tx.removeEventListener("abort", error);
-    };
-    const complete = () => {
-      resolve();
-      unlisten();
-    };
-    const error = () => {
-      reject(tx.error || new DOMException("AbortError", "AbortError"));
-      unlisten();
-    };
-    tx.addEventListener("complete", complete);
-    tx.addEventListener("error", error);
-    tx.addEventListener("abort", error);
-  });
-  transactionDoneMap.set(tx, done);
+function parseEcdsaDerivationClientSharePublicKey(value) {
+  return parseCompressedSecp256k1PublicKey(value, "derivationClientSharePublicKey33B64u");
 }
-var idbProxyTraps = {
-  get(target, prop, receiver) {
-    if (target instanceof IDBTransaction) {
-      if (prop === "done")
-        return transactionDoneMap.get(target);
-      if (prop === "store") {
-        return receiver.objectStoreNames[1] ? undefined : receiver.objectStore(receiver.objectStoreNames[0]);
+function parseRelayerEcdsaDerivationPublicKey(value) {
+  return parseCompressedSecp256k1PublicKey(value, "relayerPublicKey33B64u");
+}
+function parseGroupPublicKey(value) {
+  return parseCompressedSecp256k1PublicKey(value, "groupPublicKey33B64u");
+}
+function parseEthereumAddress2(value) {
+  const normalized = requiredString3(value, "ethereumAddress").toLowerCase();
+  if (!/^0x[0-9a-f]{40}$/.test(normalized)) {
+    throw new Error("[platform][ecdsa-role-local] ethereumAddress must be an EVM address");
+  }
+  return normalized;
+}
+function parseParticipantIds(value) {
+  if (!Array.isArray(value) || value.length !== 2 || value[0] !== 1 || value[1] !== 2) {
+    throw new Error("[platform][ecdsa-role-local] participantIds must be [1, 2]");
+  }
+  return [1, 2];
+}
+function parseChainTarget(input) {
+  if (input === null || typeof input !== "object" || Array.isArray(input)) {
+    throw new Error("[platform][ecdsa-role-local] chainTarget must be an object");
+  }
+  const kind = requiredString3(Reflect.get(input, "kind"), "chainTarget.kind").toLowerCase();
+  switch (kind) {
+    case "evm": {
+      const fields = Object.keys(input).sort();
+      if (fields.join(",") !== "chainId,kind,namespace,networkSlug") {
+        throw new Error("[platform][ecdsa-role-local] EVM chainTarget fields are invalid");
       }
+      return thresholdEcdsaChainTargetFromRequest({
+        kind: Reflect.get(input, "kind"),
+        namespace: Reflect.get(input, "namespace"),
+        chainId: Reflect.get(input, "chainId"),
+        networkSlug: Reflect.get(input, "networkSlug")
+      });
     }
-    return wrap(target[prop]);
-  },
-  set(target, prop, value) {
-    target[prop] = value;
-    return true;
-  },
-  has(target, prop) {
-    if (target instanceof IDBTransaction && (prop === "done" || prop === "store")) {
-      return true;
+    case "tempo": {
+      const fields = Object.keys(input).sort();
+      if (fields.join(",") !== "chainId,kind,networkSlug") {
+        throw new Error("[platform][ecdsa-role-local] Tempo chainTarget fields are invalid");
+      }
+      return thresholdEcdsaChainTargetFromRequest({
+        kind: Reflect.get(input, "kind"),
+        chainId: Reflect.get(input, "chainId"),
+        networkSlug: Reflect.get(input, "networkSlug")
+      });
     }
-    return prop in target;
+    default:
+      throw new Error("[platform][ecdsa-role-local] chainTarget kind is invalid");
   }
-};
-function replaceTraps(callback) {
-  idbProxyTraps = callback(idbProxyTraps);
 }
-function wrapFunction(func) {
-  if (getCursorAdvanceMethods().includes(func)) {
-    return function(...args) {
-      func.apply(unwrap(this), args);
-      return wrap(this.request);
-    };
+function parsePublicFacts(input) {
+  if (input === null || typeof input !== "object" || Array.isArray(input)) {
+    throw new Error("[platform][ecdsa-role-local] publicFacts must be an object");
   }
-  return function(...args) {
-    return wrap(func.apply(unwrap(this), args));
+  const fields = Object.keys(input).sort();
+  if (fields.join(",") !== "applicationBindingDigestB64u,chainTarget,clientParticipantId,contextBinding32B64u,derivationClientSharePublicKey33B64u,ecdsaThresholdKeyId,ethereumAddress,groupPublicKey33B64u,keyHandle,participantIds,publicCapability,relayerParticipantId,relayerPublicKey33B64u,signingRootId,signingRootVersion,walletId") {
+    throw new Error("[platform][ecdsa-role-local] publicFacts fields are invalid");
+  }
+  if (Reflect.get(input, "clientParticipantId") !== 1) {
+    throw new Error("[platform][ecdsa-role-local] clientParticipantId must be 1");
+  }
+  if (Reflect.get(input, "relayerParticipantId") !== 2) {
+    throw new Error("[platform][ecdsa-role-local] relayerParticipantId must be 2");
+  }
+  const derivationClientSharePublicKey33B64u = parseEcdsaDerivationClientSharePublicKey(Reflect.get(input, "derivationClientSharePublicKey33B64u"));
+  const relayerPublicKey33B64u = parseRelayerEcdsaDerivationPublicKey(Reflect.get(input, "relayerPublicKey33B64u"));
+  if (String(derivationClientSharePublicKey33B64u) === String(relayerPublicKey33B64u)) {
+    throw new Error("[platform][ecdsa-role-local] relayerPublicKey33B64u must differ from derivationClientSharePublicKey33B64u");
+  }
+  return {
+    walletId: toWalletId(Reflect.get(input, "walletId")),
+    chainTarget: parseChainTarget(Reflect.get(input, "chainTarget")),
+    keyHandle: requiredString3(Reflect.get(input, "keyHandle"), "keyHandle"),
+    ecdsaThresholdKeyId: toEcdsaDerivationThresholdKeyId(Reflect.get(input, "ecdsaThresholdKeyId")),
+    signingRootId: toEcdsaDerivationSigningRootId(Reflect.get(input, "signingRootId")),
+    signingRootVersion: toEcdsaDerivationSigningRootVersion(Reflect.get(input, "signingRootVersion")),
+    applicationBindingDigestB64u: parseBase64UrlBytes(Reflect.get(input, "applicationBindingDigestB64u"), "applicationBindingDigestB64u", 32),
+    clientParticipantId: 1,
+    relayerParticipantId: 2,
+    participantIds: parseParticipantIds(Reflect.get(input, "participantIds")),
+    contextBinding32B64u: parseBase64UrlBytes(Reflect.get(input, "contextBinding32B64u"), "contextBinding32B64u", 32),
+    derivationClientSharePublicKey33B64u,
+    relayerPublicKey33B64u,
+    groupPublicKey33B64u: parseGroupPublicKey(Reflect.get(input, "groupPublicKey33B64u")),
+    ethereumAddress: parseEthereumAddress2(Reflect.get(input, "ethereumAddress")),
+    publicCapability: parseRouterAbEcdsaDerivationPublicCapabilityV1(Reflect.get(input, "publicCapability"))
   };
 }
-function transformCachableValue(value) {
-  if (typeof value === "function")
-    return wrapFunction(value);
-  if (value instanceof IDBTransaction)
-    cacheDonePromiseForTransaction(value);
-  if (instanceOfAny(value, getIdbProxyableTypes()))
-    return new Proxy(value, idbProxyTraps);
-  return value;
+function buildEcdsaRoleLocalPublicFacts(input) {
+  return parsePublicFacts(input);
 }
-function wrap(value) {
-  if (value instanceof IDBRequest)
-    return promisifyRequest(value);
-  if (transformCache.has(value))
-    return transformCache.get(value);
-  const newValue = transformCachableValue(value);
-  if (newValue !== value) {
-    transformCache.set(value, newValue);
-    reverseTransformCache.set(newValue, value);
+// src/core/signingEngine/session/material/ecdsaCapabilityManifest.ts
+class EcdsaCapabilityManifestProof {
+  retainProof() {
+    return true;
+  }
+  constructor() {
+    this.retainProof();
   }
-  return newValue;
 }
-var unwrap = (value) => reverseTransformCache.get(value);
-function openDB(name, version, { blocked, upgrade, blocking, terminated } = {}) {
-  const request = indexedDB.open(name, version);
-  const openPromise = wrap(request);
-  if (upgrade) {
-    request.addEventListener("upgradeneeded", (event) => {
-      upgrade(wrap(request.result), event.oldVersion, event.newVersion, wrap(request.transaction), event);
-    });
+class EcdsaCapabilityScopeProof extends EcdsaCapabilityManifestProof {
+  constructor(targetMemberships) {
+    super();
+    this.kind = "evm_family";
+    this.targetMemberships = targetMemberships;
   }
-  if (blocked) {
-    request.addEventListener("blocked", (event) => blocked(event.oldVersion, event.newVersion, event));
+}
+class EcdsaManifestIdentityProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.manifestId = fields.manifestId;
+    this.manifestRevision = fields.manifestRevision;
   }
-  openPromise.then((db) => {
-    if (terminated)
-      db.addEventListener("close", () => terminated());
-    if (blocking) {
-      db.addEventListener("versionchange", (event) => blocking(event.oldVersion, event.newVersion, event));
-    }
-  }).catch(() => {});
-  return openPromise;
 }
-var readMethods = ["get", "getKey", "getAll", "getAllKeys", "count"];
-var writeMethods = ["put", "add", "delete", "clear"];
-var cachedMethods = new Map;
-function getMethod(target, prop) {
-  if (!(target instanceof IDBDatabase && !(prop in target) && typeof prop === "string")) {
-    return;
+class NoCurrentEcdsaManifestExpectationProof extends EcdsaCapabilityManifestProof {
+  constructor() {
+    super(...arguments);
+    this.kind = "no_current_manifest";
   }
-  if (cachedMethods.get(prop))
-    return cachedMethods.get(prop);
-  const targetFuncName = prop.replace(/FromIndex$/, "");
-  const useIndex = prop !== targetFuncName;
-  const isWrite = writeMethods.includes(targetFuncName);
-  if (!(targetFuncName in (useIndex ? IDBIndex : IDBObjectStore).prototype) || !(isWrite || readMethods.includes(targetFuncName))) {
-    return;
+}
+class ExactEcdsaManifestExpectationProof extends EcdsaCapabilityManifestProof {
+  constructor(identity) {
+    super();
+    this.kind = "exact_manifest";
+    this.manifestId = identity.manifestId;
+    this.manifestRevision = identity.manifestRevision;
   }
-  const method = async function(storeName, ...args) {
-    const tx = this.transaction(storeName, isWrite ? "readwrite" : "readonly");
-    let target = tx.store;
-    if (useIndex)
-      target = target.index(args.shift());
-    return (await Promise.all([
-      target[targetFuncName](...args),
-      isWrite && tx.done
-    ]))[0];
-  };
-  cachedMethods.set(prop, method);
-  return method;
 }
-replaceTraps((oldTraps) => ({
-  ...oldTraps,
-  get: (target, prop, receiver) => getMethod(target, prop) || oldTraps.get(target, prop, receiver),
-  has: (target, prop) => !!getMethod(target, prop) || oldTraps.has(target, prop)
-}));
-var advanceMethodProps = ["continue", "continuePrimaryKey", "advance"];
-var methodMap = {};
-var advanceResults = new WeakMap;
-var ittrProxiedCursorToOriginalProxy = new WeakMap;
-var cursorIteratorTraps = {
-  get(target, prop) {
-    if (!advanceMethodProps.includes(prop))
-      return target[prop];
-    let cachedFunc = methodMap[prop];
-    if (!cachedFunc) {
-      cachedFunc = methodMap[prop] = function(...args) {
-        advanceResults.set(this, ittrProxiedCursorToOriginalProxy.get(this)[prop](...args));
-      };
-    }
-    return cachedFunc;
+class NoCurrentEcdsaServerGenerationExpectationProof extends EcdsaCapabilityManifestProof {
+  constructor() {
+    super(...arguments);
+    this.kind = "no_current_generation";
   }
-};
-async function* iterate(...args) {
-  let cursor = this;
-  if (!(cursor instanceof IDBCursor)) {
-    cursor = await cursor.openCursor(...args);
+}
+class ExactEcdsaServerGenerationExpectationProof extends EcdsaCapabilityManifestProof {
+  constructor(serverGeneration) {
+    super();
+    this.kind = "exact_generation";
+    this.serverGeneration = serverGeneration;
   }
-  if (!cursor)
-    return;
-  cursor = cursor;
-  const proxiedCursor = new Proxy(cursor, cursorIteratorTraps);
-  ittrProxiedCursorToOriginalProxy.set(proxiedCursor, cursor);
-  reverseTransformCache.set(proxiedCursor, unwrap(cursor));
-  while (cursor) {
-    yield proxiedCursor;
-    cursor = await (advanceResults.get(proxiedCursor) || cursor.continue());
-    advanceResults.delete(proxiedCursor);
+}
+class EcdsaRoleLocalMaterialBindingProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "ecdsa_role_local_material_binding";
+    this.keyHandle = fields.keyHandle;
+    this.ecdsaThresholdKeyId = fields.ecdsaThresholdKeyId;
+    this.clientVerifyingPublicKey33B64u = fields.clientVerifyingPublicKey33B64u;
+    this.participantIds = fields.participantIds;
+    this.relayerKeyId = fields.relayerKeyId;
   }
 }
-function isIteratorProp(target, prop) {
-  return prop === Symbol.asyncIterator && instanceOfAny(target, [IDBIndex, IDBObjectStore, IDBCursor]) || prop === "iterate" && instanceOfAny(target, [IDBIndex, IDBObjectStore]);
+class PreparedEvmFamilySignerProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "prepared_evm_family_signer";
+    this.capability = fields.capability;
+    this.signerId = fields.signerId;
+    this.walletId = fields.authority.walletId;
+    this.authority = fields.authority;
+    this.scope = fields.scope;
+    this.materialOwner = fields.materialOwner;
+    this.signingRootId = fields.signingRootId;
+    this.signingRootVersion = fields.signingRootVersion;
+  }
 }
-replaceTraps((oldTraps) => ({
-  ...oldTraps,
-  get(target, prop, receiver) {
-    if (isIteratorProp(target, prop))
-      return iterate;
-    return oldTraps.get(target, prop, receiver);
-  },
-  has(target, prop) {
-    return isIteratorProp(target, prop) || oldTraps.has(target, prop);
+class RegisteredEvmFamilySignerProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "registered_evm_family_signer";
+    this.capability = fields.preparedSigner.capability;
+    this.signerId = fields.preparedSigner.signerId;
+    this.walletId = fields.preparedSigner.walletId;
+    this.authority = fields.preparedSigner.authority;
+    this.scope = fields.preparedSigner.scope;
+    this.materialOwner = fields.preparedSigner.materialOwner;
+    this.signingRootId = fields.preparedSigner.signingRootId;
+    this.signingRootVersion = fields.preparedSigner.signingRootVersion;
+    this.registeredPublicFacts = fields.registeredPublicFacts;
   }
-}));
+}
-// src/core/indexedDB/schemaNames.ts
-var SEAMS_WALLET_DB_NAME = "seams_wallet";
-var SEAMS_WALLET_DB_VERSION = 24;
-var SEAMS_WALLET_STORES = {
-  appState: "app_state",
-  wallets: "wallets",
-  walletAuthorities: "wallet_authorities",
-  walletAuthMethods: "wallet_auth_methods",
-  walletAuthoritySignerMaterials: "wallet_authority_signer_materials",
-  walletAuthorityExportRoots: "wallet_authority_export_roots",
-  walletAuthorityInstallationReceipts: "wallet_authority_installation_receipts",
-  walletSelections: "wallet_selections",
-  walletSigners: "wallet_signers",
-  nearAccountProjections: "near_accounts",
-  signerOpsOutbox: "signer_ops_outbox",
-  nonceLaneLeases: "nonce_lane_leases",
-  nonceLaneLocks: "nonce_lane_locks",
-  keyMaterial: "key_material",
-  signingSessionSeals: "signing_session_seals",
-  signingSessionRestoreLeases: "signing_session_restore_leases",
-  pendingWalletRecoveryCodeBackups: "email_otp_pending_recovery_code_backups",
-  walletSessionAuthorizations: "wallet_session_authorizations",
-  ecdsaCapabilityManifests: "ecdsa_capability_manifests",
-  ecdsaCurrentCapabilityManifests: "ecdsa_current_capability_manifests",
-  ecdsaRoleLocalMaterial: "ecdsa_role_local_material",
-  ecdsaActivationCommitJournals: "ecdsa_activation_commit_journals",
-  ecdsaMaterialSealingKeys: "ecdsa_material_sealing_keys",
-  ecdsaClientPresignatures: "ecdsa_client_presignatures"
-};
-var SEAMS_WALLET_INDEXES = {
-  profileId: "profile_id",
-  credentialId: "credential_id",
-  credentialIdB64u: "credential_id_b64u",
-  profileIdCredentialId: "profile_id_credential_id",
-  profileIdSignerSlot: "profile_id_signer_slot",
-  updatedAt: "updated_at",
-  walletId: "wallet_id",
-  walletIdRpId: "wallet_id_rp_id",
-  walletIdKind: "wallet_id_kind",
-  walletKindNearSignerSlot: "wallet_kind_near_signer_slot",
-  walletKindNearEd25519SigningKeyId: "wallet_kind_near_ed25519_signing_key_id",
-  walletKindChainTargetKeyHandle: "wallet_kind_chain_target_key_handle",
-  walletKindChainTargetKeyFacts: "wallet_kind_chain_target_key_facts",
-  walletSignerId: "wallet_signer_id",
-  nearEd25519SigningKeyId: "near_ed25519_signing_key_id",
-  nearAccountId: "near_account_id",
-  rpId: "rp_id",
-  rpIdCredentialId: "rp_id_credential_id",
-  chainIdKey: "chain_id_key",
-  chainIdKeyAccountAddress: "chain_id_key_account_address",
-  profileIdChainIdKey: "profile_id_chain_id_key",
-  chainIdKeyAccountAddressStatus: "chain_id_key_account_address_status",
-  chainTargetKey: "chain_target_key",
-  keyHandle: "key_handle",
-  thresholdOwnerAddress: "threshold_owner_address",
-  ecdsaThresholdKeyId: "ecdsa_threshold_key_id",
-  status: "status",
-  nextAttemptAt: "next_attempt_at",
-  statusNextAttemptAt: "status_next_attempt_at",
-  idempotencyKey: "idempotency_key",
-  laneKey: "lane_key",
-  accountId: "account_id",
-  state: "state",
-  expiresAtMs: "expires_at_ms",
-  recoveryCodesIssuedAtMs: "recovery_codes_issued_at_ms",
-  laneState: "lane_state",
-  walletExpiresAt: "wallet_expires_at",
-  ownerId: "owner_id",
-  chainIdKeyKeyKind: "chain_id_key_key_kind",
-  publicKey: "public_key",
-  userId: "user_id",
-  authMethod: "auth_method",
-  curve: "curve",
-  signingRootId: "signing_root_id",
-  signingRootVersion: "signing_root_version",
-  walletSigningRootAuthMethod: "wallet_signing_root_auth_method",
-  ed25519ThresholdSessionId: "ed25519_threshold_session_id",
-  ecdsaThresholdSessionId: "ecdsa_threshold_session_id",
-  thresholdSessionId: "threshold_session_id",
-  exactSigningLaneIdentityKey: "exact_signing_lane_identity_key",
-  budgetReservationKey: "budget_reservation_key",
-  authSubjectId: "auth_subject_id",
-  enrollmentId: "enrollment_id",
-  walletIdEnrollmentId: "wallet_id_enrollment_id",
-  walletIdAuthSubjectId: "wallet_id_auth_subject_id",
-  walletIdAuthSubjectIdEnrollmentId: "wallet_id_auth_subject_id_enrollment_id",
-  authIdentifierKey: "auth_identifier_key",
-  kindRpIdAuthIdentifier: "kind_rp_id_auth_identifier",
-  passkeyRpIdCredentialId: "passkey_rp_id_credential_id",
-  capabilityWallet: "capability_wallet",
-  capabilityWalletAuthorityState: "capability_wallet_authority_state",
-  capabilityWalletAuthority: "capability_wallet_authority",
-  walletAuthorityId: "wallet_authority_id",
-  walletAuthMethodId: "wallet_auth_method_id",
-  walletIdAuthorityId: "wallet_id_authority_id",
-  walletIdAuthorityStatus: "wallet_id_authority_status",
-  walletIdAuthMethodId: "wallet_id_auth_method_id",
-  walletAuthorityAuthMethodId: "wallet_authority_auth_method_id",
-  activationId: "activation_id",
-  walletAuthorityActivationId: "wallet_authority_activation_id",
-  walletIdDeviceId: "wallet_id_device_id",
-  packageSetDigest: "package_set_digest",
-  walletKeyId: "wallet_key_id",
-  walletIdLockGeneration: "wallet_id_lock_generation",
-  authorityDigest: "authority_digest",
-  revocationEpoch: "revocation_epoch",
-  poolIdentityKey: "pool_identity_key",
-  walletMaterialActivationId: "wallet_material_activation_id"
-};
-var SEAMS_WALLET_SCHEMA_MANIFEST = [
-  {
-    store: SEAMS_WALLET_STORES.appState,
-    keyPath: "key",
-    indexes: []
-  },
-  {
-    store: SEAMS_WALLET_STORES.wallets,
-    keyPath: "wallet_id",
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.rpId, keyPath: "rp_id", unique: false },
-      { name: SEAMS_WALLET_INDEXES.status, keyPath: "status", unique: false },
-      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.walletAuthorities,
-    keyPath: "authority_id",
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
-      { name: SEAMS_WALLET_INDEXES.walletAuthorityId, keyPath: "authority_id", unique: true },
-      {
-        name: SEAMS_WALLET_INDEXES.walletIdAuthorityId,
-        keyPath: ["wallet_id", "authority_id"],
-        unique: true
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.walletIdAuthorityStatus,
-        keyPath: ["wallet_id", "state"],
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.walletIdDeviceId,
-        keyPath: ["wallet_id", "device_id"],
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.walletAuthMethods,
-    keyPath: "wallet_auth_method_id",
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.walletIdKind,
-        keyPath: ["wallet_id", "kind"],
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.authMethod, keyPath: "auth_method", unique: false },
-      { name: SEAMS_WALLET_INDEXES.rpId, keyPath: "rp_id", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.authIdentifierKey,
-        keyPath: "auth_identifier_key",
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.kindRpIdAuthIdentifier,
-        keyPath: ["kind", "rp_id", "auth_identifier_key"],
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.passkeyRpIdCredentialId,
-        keyPath: ["kind", "rp_id", "credential_id_b64u"],
-        unique: true
-      },
-      { name: SEAMS_WALLET_INDEXES.status, keyPath: "status", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.walletAuthorityId,
-        keyPath: "wallet_authority_id",
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.walletIdAuthMethodId,
-        keyPath: ["wallet_id", "wallet_auth_method_id"],
-        unique: true
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.walletIdAuthorityStatus,
-        keyPath: ["wallet_id", "wallet_authority_id", "status"],
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.walletAuthoritySignerMaterials,
-    keyPath: ["wallet_authority_id", "wallet_auth_method_id", "activation_id"],
-    indexes: [
-      {
-        name: SEAMS_WALLET_INDEXES.walletAuthorityId,
-        keyPath: "wallet_authority_id",
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.walletAuthorityAuthMethodId,
-        keyPath: ["wallet_authority_id", "wallet_auth_method_id"],
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.activationId, keyPath: "activation_id", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.walletAuthorityActivationId,
-        keyPath: ["wallet_authority_id", "activation_id"],
-        unique: true
-      }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.walletAuthorityExportRoots,
-    keyPath: ["wallet_authority_id", "wallet_auth_method_id", "wallet_key_id"],
-    indexes: [
-      {
-        name: SEAMS_WALLET_INDEXES.walletAuthorityId,
-        keyPath: "wallet_authority_id",
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.walletAuthorityAuthMethodId,
-        keyPath: ["wallet_authority_id", "wallet_auth_method_id"],
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.walletKeyId, keyPath: "wallet_key_id", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.walletAuthorityInstallationReceipts,
-    keyPath: "authority_id",
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.walletAuthorityId, keyPath: "authority_id", unique: true },
-      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.walletAuthMethodId,
-        keyPath: "wallet_auth_method_id",
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.walletIdDeviceId,
-        keyPath: ["wallet_id", "device_id"],
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.packageSetDigest,
-        keyPath: "package_set_digest_b64u",
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "installed_at_ms", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.walletSelections,
-    keyPath: "wallet_id",
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: true },
-      {
-        name: SEAMS_WALLET_INDEXES.walletAuthMethodId,
-        keyPath: "wallet_auth_method_id",
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.walletIdLockGeneration,
-        keyPath: ["wallet_id", "lock_generation"],
-        unique: true
-      }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.walletSigners,
-    keyPath: "wallet_signer_id",
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.walletIdKind,
-        keyPath: ["wallet_id", "kind"],
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.walletKindNearSignerSlot,
-        keyPath: ["wallet_id", "kind", "near_signer_slot"],
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.walletKindNearEd25519SigningKeyId,
-        keyPath: ["wallet_id", "kind", "near_ed25519_signing_key_id"],
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.walletKindChainTargetKeyHandle,
-        keyPath: ["wallet_id", "kind", "chain_target_key", "key_handle"],
-        unique: true
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.walletKindChainTargetKeyFacts,
-        keyPath: ["wallet_id", "kind", "chain_target_key", "ecdsa_threshold_key_id"],
-        unique: true
-      },
-      { name: SEAMS_WALLET_INDEXES.chainTargetKey, keyPath: "chain_target_key", unique: false },
-      { name: SEAMS_WALLET_INDEXES.keyHandle, keyPath: "key_handle", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.thresholdOwnerAddress,
-        keyPath: "threshold_owner_address",
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.status, keyPath: "status", unique: false },
-      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.nearAccountProjections,
-    keyPath: ["wallet_id", "near_account_id", "signer_slot"],
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.nearAccountId, keyPath: "near_account_id", unique: false },
-      { name: SEAMS_WALLET_INDEXES.profileId, keyPath: "profile_id", unique: false },
-      { name: SEAMS_WALLET_INDEXES.publicKey, keyPath: "public_key", unique: false },
-      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.signerOpsOutbox,
-    keyPath: "op_id",
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.status, keyPath: "status", unique: false },
-      { name: SEAMS_WALLET_INDEXES.nextAttemptAt, keyPath: "next_attempt_at", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.statusNextAttemptAt,
-        keyPath: ["status", "next_attempt_at"],
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.idempotencyKey, keyPath: "idempotency_key", unique: true },
-      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
-      { name: SEAMS_WALLET_INDEXES.chainTargetKey, keyPath: "chain_target_key", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.nonceLaneLeases,
-    keyPath: "lease_id",
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.laneKey, keyPath: "lane_key", unique: false },
-      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
-      { name: SEAMS_WALLET_INDEXES.nearAccountId, keyPath: "near_account_id", unique: false },
-      { name: SEAMS_WALLET_INDEXES.state, keyPath: "state", unique: false },
-      { name: SEAMS_WALLET_INDEXES.expiresAtMs, keyPath: "expires_at_ms", unique: false },
-      { name: SEAMS_WALLET_INDEXES.laneState, keyPath: ["lane_key", "state"], unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.walletExpiresAt,
-        keyPath: ["wallet_id", "expires_at_ms"],
-        unique: false
-      }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.nonceLaneLocks,
-    keyPath: "lock_key",
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.expiresAtMs, keyPath: "expires_at_ms", unique: false },
-      { name: SEAMS_WALLET_INDEXES.ownerId, keyPath: "owner_id", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.keyMaterial,
-    keyPath: "key_material_id",
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
-      { name: SEAMS_WALLET_INDEXES.walletSignerId, keyPath: "wallet_signer_id", unique: false },
-      { name: SEAMS_WALLET_INDEXES.chainTargetKey, keyPath: "chain_target_key", unique: false },
-      { name: SEAMS_WALLET_INDEXES.keyHandle, keyPath: "key_handle", unique: false },
-      { name: SEAMS_WALLET_INDEXES.publicKey, keyPath: "public_key", unique: false },
-      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.signingSessionSeals,
-    keyPath: "store_key",
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
-      { name: SEAMS_WALLET_INDEXES.authMethod, keyPath: "auth_method", unique: false },
-      { name: SEAMS_WALLET_INDEXES.curve, keyPath: "curve", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.ed25519ThresholdSessionId,
-        keyPath: "ed25519_threshold_session_id",
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.ecdsaThresholdSessionId,
-        keyPath: "ecdsa_threshold_session_id",
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.thresholdSessionId,
-        keyPath: "threshold_session_id",
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.enrollmentId, keyPath: "enrollmentId", unique: false },
-      { name: SEAMS_WALLET_INDEXES.keyHandle, keyPath: "key_handle", unique: false },
-      { name: SEAMS_WALLET_INDEXES.chainTargetKey, keyPath: "chain_target_key", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.exactSigningLaneIdentityKey,
-        keyPath: "exact_signing_lane_identity_key",
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.expiresAtMs, keyPath: "expires_at_ms", unique: false },
-      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.signingSessionRestoreLeases,
-    keyPath: "lease_key",
-    indexes: [
-      {
-        name: SEAMS_WALLET_INDEXES.thresholdSessionId,
-        keyPath: "threshold_session_id",
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.ownerId, keyPath: "owner_id", unique: false },
-      { name: SEAMS_WALLET_INDEXES.expiresAtMs, keyPath: "expires_at_ms", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.pendingWalletRecoveryCodeBackups,
-    keyPath: ["wallet_id", "enrollment_id"],
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
-      { name: SEAMS_WALLET_INDEXES.enrollmentId, keyPath: "enrollment_id", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.walletIdEnrollmentId,
-        keyPath: ["wallet_id", "enrollment_id"],
-        unique: true
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.recoveryCodesIssuedAtMs,
-        keyPath: "recovery_codes_issued_at_ms",
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.status, keyPath: "status", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.walletSessionAuthorizations,
-    keyPath: "wallet_session_id",
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.walletAuthorityId,
-        keyPath: "wallet_authority_id",
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.walletAuthMethodId,
-        keyPath: "wallet_auth_method_id",
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.authorityDigest,
-        keyPath: "authority_digest_b64u",
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.revocationEpoch,
-        keyPath: "authority_revocation_epoch",
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.status, keyPath: "status", unique: false },
-      { name: SEAMS_WALLET_INDEXES.expiresAtMs, keyPath: "expires_at_ms", unique: false }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.ecdsaCapabilityManifests,
-    keyPath: "manifest_id",
-    indexes: [
-      {
-        name: SEAMS_WALLET_INDEXES.capabilityWallet,
-        keyPath: ["capability_ref", "wallet_id"],
-        unique: false
-      },
-      {
-        name: SEAMS_WALLET_INDEXES.capabilityWalletAuthorityState,
-        keyPath: ["capability_ref", "wallet_id", "authority_digest", "manifest_state"],
-        unique: false
-      }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.ecdsaCurrentCapabilityManifests,
-    keyPath: ["capability_ref", "wallet_id", "authority_digest"],
-    indexes: [{ name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false }]
-  },
-  {
-    store: SEAMS_WALLET_STORES.ecdsaRoleLocalMaterial,
-    keyPath: "durable_material_ref",
-    indexes: []
-  },
-  {
-    store: SEAMS_WALLET_STORES.ecdsaActivationCommitJournals,
-    keyPath: "journal_id",
-    indexes: [
-      {
-        name: SEAMS_WALLET_INDEXES.capabilityWalletAuthority,
-        keyPath: ["capability_ref", "wallet_id", "authority_digest"],
-        unique: true
-      }
-    ]
-  },
-  {
-    store: SEAMS_WALLET_STORES.ecdsaMaterialSealingKeys,
-    keyPath: "key_id",
-    indexes: []
-  },
-  {
-    store: SEAMS_WALLET_STORES.ecdsaClientPresignatures,
-    keyPath: "record_id",
-    indexes: [
-      { name: SEAMS_WALLET_INDEXES.poolIdentityKey, keyPath: "pool_identity_key", unique: false },
-      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.walletMaterialActivationId,
-        keyPath: ["wallet_id", "material_activation_id"],
-        unique: false
-      },
-      { name: SEAMS_WALLET_INDEXES.expiresAtMs, keyPath: "expires_at_ms", unique: false },
-      {
-        name: SEAMS_WALLET_INDEXES.walletExpiresAt,
-        keyPath: ["wallet_id", "expires_at_ms"],
-        unique: false
-      }
-    ]
+class EncryptedEcdsaPendingCandidateProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "encrypted_ecdsa_pending_candidate";
+    this.sealingKeyId = fields.sealingKeyId;
+    this.iv12B64u = fields.iv12B64u;
+    this.ciphertextB64u = fields.ciphertextB64u;
+    this.ciphertextDigest = fields.ciphertextDigest;
   }
-];
-// src/core/indexedDB/seamsWalletDB/schema.ts
-var SEAMS_WALLET_DB_CONFIG = {
-  dbName: SEAMS_WALLET_DB_NAME,
-  dbVersion: SEAMS_WALLET_DB_VERSION
-};
-function keyPathForIndexedDB(keyPath) {
-  return typeof keyPath === "string" ? keyPath : [...keyPath];
 }
-function createCanonicalStore(db, definition) {
-  const store = db.createObjectStore(definition.store, {
-    keyPath: keyPathForIndexedDB(definition.keyPath)
-  });
-  for (const index of definition.indexes) {
-    store.createIndex(index.name, keyPathForIndexedDB(index.keyPath), { unique: index.unique });
+class EcdsaActivationBindingProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "ecdsa_activation_binding";
+    this.targetManifest = fields.targetManifest;
+    this.signer = fields.signer;
+    this.roleLocalBinding = fields.roleLocalBinding;
+    this.bindingDigest = fields.bindingDigest;
+    this.durableMaterialRef = fields.durableMaterialRef;
   }
 }
-function upgradeSeamsWalletDBSchema(db) {
-  for (const definition of SEAMS_WALLET_SCHEMA_MANIFEST) {
-    if (db.objectStoreNames.contains(definition.store))
-      continue;
-    createCanonicalStore(db, definition);
+class PreparedEcdsaActivationCandidateProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "prepared_ecdsa_activation_candidate";
+    this.activationBinding = fields.activationBinding;
+    this.encryptedPending = fields.encryptedPending;
   }
 }
-// src/core/indexedDB/seamsWalletDB/manager.ts
-var INDEXED_DB_BLOCKED_OPEN_TIMEOUT_MS = 3000;
-var INDEXED_DB_OPEN_TIMEOUT_MS = 8000;
-var INDEXED_DB_TRANSACTION_TIMEOUT_MS = 8000;
-function seamsWalletDbOpenBlockedError(dbName) {
-  return new Error(`[SeamsWalletDBManager] IndexedDB open is blocked for ${dbName}. Close other tabs using this app and retry.`);
-}
-function indexedDbTimeoutError(message) {
-  return new Error(message);
-}
-async function withTimeout(promise, ms, error, onTimeout) {
-  let settled = false;
-  let timeout = null;
-  const timeoutPromise = new Promise((_resolve, reject) => {
-    timeout = setTimeout(() => {
-      if (settled)
-        return;
-      onTimeout?.();
-      reject(error);
-    }, ms);
-  });
-  try {
-    return await Promise.race([promise, timeoutPromise]);
-  } finally {
-    settled = true;
-    if (timeout)
-      clearTimeout(timeout);
+class EcdsaServerActivationCommandProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "ecdsa_server_activation_command";
+    this.correlationId = fields.correlationId;
+    this.expectedGeneration = fields.expectedGeneration;
+    this.requestDigest = fields.requestDigest;
+    this.canonicalRequest = fields.canonicalRequest;
   }
 }
-async function runIndexedDbTransactionTask(context, task) {
-  const result = await task(context);
-  await context.tx.done;
-  return result;
-}
-class SeamsWalletDBManager {
-  constructor(config = SEAMS_WALLET_DB_CONFIG) {
-    this.dbPromise = null;
-    this.disabled = false;
-    this.config = config;
-  }
-  getDbName() {
-    return this.config.dbName;
-  }
-  setDbName(dbName) {
-    if (this.config.dbName === dbName)
-      return;
-    this.close();
-    this.config = { ...this.config, dbName };
-  }
-  setDisabled(disabled) {
-    this.disabled = disabled;
-    if (disabled)
-      this.close();
-  }
-  isDisabled() {
-    return this.disabled;
-  }
-  close() {
-    if (this.dbPromise) {
-      this.dbPromise.then((db) => db.close()).catch(() => {
-        return;
-      });
-      this.dbPromise = null;
-    }
+class EcdsaServerActivationReceiptProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "ecdsa_server_activation_receipt";
+    this.lifecycleId = fields.lifecycleId;
+    this.activationDigest = fields.activationDigest;
+    this.activatedAt = fields.activatedAt;
+    this.protocolReceipt = fields.protocolReceipt;
   }
-  async getDB() {
-    if (this.disabled) {
-      throw new Error("[SeamsWalletDBManager] IndexedDB is disabled in this environment.");
-    }
-    if (!this.dbPromise) {
-      const dbName = this.config.dbName;
-      const dbVersion = this.config.dbVersion;
-      let blockedTimer = null;
-      let rejectBlockedOpen = null;
-      const blockedOpen = new Promise((_resolve, reject) => {
-        rejectBlockedOpen = reject;
-      });
-      const openPromise = openDB(dbName, dbVersion, {
-        upgrade(db) {
-          upgradeSeamsWalletDBSchema(db);
-        },
-        blocked() {
-          console.warn("[SeamsWalletDBManager] IndexedDB open is blocked.", {
-            dbName,
-            dbVersion
-          });
-          blockedTimer = setTimeout(() => {
-            rejectBlockedOpen?.(seamsWalletDbOpenBlockedError(dbName));
-          }, INDEXED_DB_BLOCKED_OPEN_TIMEOUT_MS);
-        },
-        blocking: () => {
-          console.warn("[SeamsWalletDBManager] IndexedDB connection is blocking an upgrade.", {
-            dbName,
-            dbVersion
-          });
-          this.close();
-        },
-        terminated() {
-          console.warn("[SeamsWalletDBManager] IndexedDB connection has been terminated.", {
-            dbName,
-            dbVersion
-          });
-        }
-      });
-      const guardedOpen = withTimeout(Promise.race([openPromise, blockedOpen]).finally(() => {
-        if (blockedTimer)
-          clearTimeout(blockedTimer);
-      }), INDEXED_DB_OPEN_TIMEOUT_MS, indexedDbTimeoutError(`[SeamsWalletDBManager] IndexedDB open timed out for ${dbName}. Close other tabs using this app and retry.`));
-      this.dbPromise = guardedOpen.catch((error) => {
-        this.dbPromise = null;
-        openPromise.then((db) => db.close()).catch(() => {
-          return;
-        });
-        throw error;
-      });
-    }
-    return await this.dbPromise;
+}
+class EcdsaServerActivationCommitProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "ecdsa_server_activation_commit";
+    this.correlationId = fields.correlationId;
+    this.activationRequestDigest = fields.activationRequestDigest;
+    this.serverGeneration = fields.serverGeneration;
+    this.serverActivationReceipt = fields.serverActivationReceipt;
   }
-  async runTransaction(stores, mode, task, options) {
-    const db = await withTimeout(this.getDB(), INDEXED_DB_OPEN_TIMEOUT_MS, indexedDbTimeoutError(`[SeamsWalletDBManager] IndexedDB connection timed out for ${this.config.dbName}. Close other tabs using this app and retry.`));
-    const tx = db.transaction([...stores], mode, options);
-    const context = {
-      db,
-      tx,
-      store(name) {
-        return tx.objectStore(name);
-      }
-    };
-    try {
-      return await withTimeout(runIndexedDbTransactionTask(context, task), INDEXED_DB_TRANSACTION_TIMEOUT_MS, indexedDbTimeoutError(`[SeamsWalletDBManager] IndexedDB transaction timed out for ${this.config.dbName}. Close other tabs using this app and retry.`), () => {
-        try {
-          tx.abort();
-        } catch {}
-      });
-    } catch (error) {
-      try {
-        tx.abort();
-      } catch {}
-      await tx.done.catch(() => {
-        return;
-      });
-      throw error;
-    }
+}
+class PreparedEcdsaActivationJournalProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "activation_prepared";
+    this.journalId = fields.journalId;
+    this.expectedManifest = fields.expectedManifest;
+    this.activationCommand = fields.activationCommand;
+    this.candidate = fields.candidate;
+    this.createdAt = fields.createdAt;
   }
 }
-// src/core/indexedDB/singletons.ts
-var seamsWalletDB = new SeamsWalletDBManager;
+class ServerCommittedEcdsaActivationJournalProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "server_activation_committed";
+    this.journalId = fields.journalId;
+    this.expectedManifest = fields.expectedManifest;
+    this.activationCommand = fields.activationCommand;
+    this.candidate = fields.candidate;
+    this.createdAt = fields.createdAt;
+    this.serverActivation = fields.serverActivation;
+  }
+}
-// src/core/signingEngine/session/persistence/ecdsaRoleLocalRecords.ts
-function requiredString4(value, field) {
-  if (typeof value !== "string" || !value.trim()) {
-    throw new Error(`[platform][ecdsa-role-local] ${field} is required`);
+class DurableEcdsaMaterialBindingProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "durable_ecdsa_material";
+    this.materialActivation = fields.materialActivation;
+    this.routerAbEcdsaDerivationNormalSigning = fields.routerAbEcdsaDerivationNormalSigning;
+    this.roleLocalPublicFacts = fields.roleLocalPublicFacts;
+    this.roleLocalBinding = fields.roleLocalBinding;
+    this.durableMaterialRef = fields.durableMaterialRef;
+    this.bindingDigest = fields.bindingDigest;
+    this.lifecycleId = fields.lifecycleId;
+    this.ciphertextDigest = fields.ciphertextDigest;
+    this.activationDigest = fields.activationDigest;
+    this.activatedAt = fields.activatedAt;
+    this.runtimePolicyScope = fields.runtimePolicyScope;
   }
-  return value.trim();
 }
-function parseBase64UrlBytes(value, field, byteLength) {
-  const normalized = requiredString4(value, field);
-  const decoded = base64UrlDecode(normalized);
-  if (decoded.length !== byteLength) {
-    throw new Error(`[platform][ecdsa-role-local] ${field} must decode to ${byteLength} bytes`);
+class ValidatedEncryptedEcdsaReadyMaterialProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "encrypted_ecdsa_ready_material";
+    this.binding = fields.binding;
+    this.sealingKeyId = fields.sealingKeyId;
+    this.iv12B64u = fields.iv12B64u;
+    this.ciphertextB64u = fields.ciphertextB64u;
   }
-  return normalized;
 }
-function parseCompressedSecp256k1PublicKey(value, field) {
-  const normalized = requiredString4(value, field);
-  const decoded = base64UrlDecode(normalized);
-  if (decoded.length !== 33) {
-    throw new Error(`[platform][ecdsa-role-local] ${field} must decode to 33 bytes`);
+class ActiveEcdsaCapabilityManifestProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "active_ecdsa_capability_manifest";
+    this.identity = fields.identity;
+    this.signer = fields.signer;
+    this.activation = fields.activation;
+    this.durableMaterial = fields.durableMaterial;
+    this.committedAt = fields.committedAt;
   }
-  if (decoded[0] !== 2 && decoded[0] !== 3) {
-    throw new Error(`[platform][ecdsa-role-local] ${field} must be a compressed SEC1 key`);
+}
+class ReplacedEcdsaCapabilityManifestProof extends EcdsaCapabilityManifestProof {
+  constructor(fields) {
+    super();
+    this.kind = "replaced_ecdsa_capability_manifest";
+    this.identity = fields.identity;
+    this.signer = fields.signer;
+    this.retirement = fields.retirement;
   }
-  return normalized;
 }
-function parseEcdsaDerivationClientSharePublicKey(value) {
-  return parseCompressedSecp256k1PublicKey(value, "derivationClientSharePublicKey33B64u");
+function unwrapDomainId(result) {
+  if (!result.ok)
+    throw new Error(result.error.message);
+  return result.value;
 }
-function parseRelayerEcdsaDerivationPublicKey(value) {
-  return parseCompressedSecp256k1PublicKey(value, "relayerPublicKey33B64u");
+function buildEcdsaCapabilityScope(input) {
+  assertUniqueEcdsaTargetMemberships(input.targetMemberships);
+  return new EcdsaCapabilityScopeProof([...input.targetMemberships]);
 }
-function parseGroupPublicKey(value) {
-  return parseCompressedSecp256k1PublicKey(value, "groupPublicKey33B64u");
+function buildEcdsaManifestIdentity(input) {
+  return new EcdsaManifestIdentityProof(input);
 }
-function parseEthereumAddress2(value) {
-  const normalized = requiredString4(value, "ethereumAddress").toLowerCase();
-  if (!/^0x[0-9a-f]{40}$/.test(normalized)) {
-    throw new Error("[platform][ecdsa-role-local] ethereumAddress must be an EVM address");
-  }
-  return normalized;
+function buildNoCurrentEcdsaManifestExpectation() {
+  return new NoCurrentEcdsaManifestExpectationProof;
 }
-function parseParticipantIds2(value) {
-  if (!Array.isArray(value) || value.length !== 2 || value[0] !== 1 || value[1] !== 2) {
-    throw new Error("[platform][ecdsa-role-local] participantIds must be [1, 2]");
-  }
-  return [1, 2];
+function buildExactEcdsaManifestExpectation(identity) {
+  return new ExactEcdsaManifestExpectationProof(identity);
 }
-function parseChainTarget(input) {
-  if (input === null || typeof input !== "object" || Array.isArray(input)) {
-    throw new Error("[platform][ecdsa-role-local] chainTarget must be an object");
-  }
-  const kind = requiredString4(Reflect.get(input, "kind"), "chainTarget.kind").toLowerCase();
-  switch (kind) {
-    case "evm": {
-      const fields = Object.keys(input).sort();
-      if (fields.join(",") !== "chainId,kind,namespace,networkSlug") {
-        throw new Error("[platform][ecdsa-role-local] EVM chainTarget fields are invalid");
-      }
-      return thresholdEcdsaChainTargetFromRequest({
-        kind: Reflect.get(input, "kind"),
-        namespace: Reflect.get(input, "namespace"),
-        chainId: Reflect.get(input, "chainId"),
-        networkSlug: Reflect.get(input, "networkSlug")
-      });
-    }
-    case "tempo": {
-      const fields = Object.keys(input).sort();
-      if (fields.join(",") !== "chainId,kind,networkSlug") {
-        throw new Error("[platform][ecdsa-role-local] Tempo chainTarget fields are invalid");
-      }
-      return thresholdEcdsaChainTargetFromRequest({
-        kind: Reflect.get(input, "kind"),
-        chainId: Reflect.get(input, "chainId"),
-        networkSlug: Reflect.get(input, "networkSlug")
-      });
-    }
-    default:
-      throw new Error("[platform][ecdsa-role-local] chainTarget kind is invalid");
-  }
+function buildNoCurrentEcdsaServerGenerationExpectation() {
+  return new NoCurrentEcdsaServerGenerationExpectationProof;
 }
-function parsePublicFacts(input) {
-  if (input === null || typeof input !== "object" || Array.isArray(input)) {
-    throw new Error("[platform][ecdsa-role-local] publicFacts must be an object");
-  }
-  const fields = Object.keys(input).sort();
-  if (fields.join(",") !== "applicationBindingDigestB64u,chainTarget,clientParticipantId,contextBinding32B64u,derivationClientSharePublicKey33B64u,ecdsaThresholdKeyId,ethereumAddress,groupPublicKey33B64u,keyHandle,participantIds,publicCapability,relayerParticipantId,relayerPublicKey33B64u,signingRootId,signingRootVersion,walletId") {
-    throw new Error("[platform][ecdsa-role-local] publicFacts fields are invalid");
-  }
-  if (Reflect.get(input, "clientParticipantId") !== 1) {
-    throw new Error("[platform][ecdsa-role-local] clientParticipantId must be 1");
-  }
-  if (Reflect.get(input, "relayerParticipantId") !== 2) {
-    throw new Error("[platform][ecdsa-role-local] relayerParticipantId must be 2");
-  }
-  const derivationClientSharePublicKey33B64u = parseEcdsaDerivationClientSharePublicKey(Reflect.get(input, "derivationClientSharePublicKey33B64u"));
-  const relayerPublicKey33B64u = parseRelayerEcdsaDerivationPublicKey(Reflect.get(input, "relayerPublicKey33B64u"));
-  if (String(derivationClientSharePublicKey33B64u) === String(relayerPublicKey33B64u)) {
-    throw new Error("[platform][ecdsa-role-local] relayerPublicKey33B64u must differ from derivationClientSharePublicKey33B64u");
-  }
-  return {
-    walletId: toWalletId(Reflect.get(input, "walletId")),
-    chainTarget: parseChainTarget(Reflect.get(input, "chainTarget")),
-    keyHandle: requiredString4(Reflect.get(input, "keyHandle"), "keyHandle"),
-    ecdsaThresholdKeyId: toEcdsaDerivationThresholdKeyId(Reflect.get(input, "ecdsaThresholdKeyId")),
-    signingRootId: toEcdsaDerivationSigningRootId(Reflect.get(input, "signingRootId")),
-    signingRootVersion: toEcdsaDerivationSigningRootVersion(Reflect.get(input, "signingRootVersion")),
-    applicationBindingDigestB64u: parseBase64UrlBytes(Reflect.get(input, "applicationBindingDigestB64u"), "applicationBindingDigestB64u", 32),
-    clientParticipantId: 1,
-    relayerParticipantId: 2,
-    participantIds: parseParticipantIds2(Reflect.get(input, "participantIds")),
-    contextBinding32B64u: parseBase64UrlBytes(Reflect.get(input, "contextBinding32B64u"), "contextBinding32B64u", 32),
-    derivationClientSharePublicKey33B64u,
-    relayerPublicKey33B64u,
-    groupPublicKey33B64u: parseGroupPublicKey(Reflect.get(input, "groupPublicKey33B64u")),
-    ethereumAddress: parseEthereumAddress2(Reflect.get(input, "ethereumAddress")),
-    publicCapability: parseRouterAbEcdsaDerivationPublicCapabilityV1(Reflect.get(input, "publicCapability"))
-  };
+function buildExactEcdsaServerGenerationExpectation(serverGeneration) {
+  return new ExactEcdsaServerGenerationExpectationProof(serverGeneration);
 }
-function buildEcdsaRoleLocalPublicFacts(input) {
-  return parsePublicFacts(input);
+function buildEcdsaRoleLocalMaterialBinding(input) {
+  assertUniqueParticipantIds(input.participantIds);
+  return new EcdsaRoleLocalMaterialBindingProof({
+    keyHandle: input.keyHandle,
+    ecdsaThresholdKeyId: input.ecdsaThresholdKeyId,
+    clientVerifyingPublicKey33B64u: input.clientVerifyingPublicKey33B64u,
+    participantIds: [...input.participantIds],
+    relayerKeyId: input.relayerKeyId
+  });
 }
-// src/core/signingEngine/session/material/ecdsaCapabilityManifest.ts
-class EcdsaCapabilityManifestProof {
-  retainProof() {
-    return true;
-  }
-  constructor() {
-    this.retainProof();
-  }
+function buildPreparedEvmFamilySigner(input) {
+  return new PreparedEvmFamilySignerProof(input);
 }
-class EcdsaCapabilityScopeProof extends EcdsaCapabilityManifestProof {
-  constructor(targetMemberships) {
-    super();
-    this.kind = "evm_family";
-    this.targetMemberships = targetMemberships;
-  }
+function buildEncryptedEcdsaPendingCandidate(input) {
+  return new EncryptedEcdsaPendingCandidateProof(input);
+}
+function buildEcdsaActivationBinding(input) {
+  return new EcdsaActivationBindingProof(input);
+}
+function buildPreparedEcdsaActivationCandidate(input) {
+  return new PreparedEcdsaActivationCandidateProof(input);
+}
+function buildPreparedEcdsaActivationJournal(input) {
+  assertTargetManifestTransition(input.expectedManifest, input.candidate.activationBinding.targetManifest);
+  assertExpectedStatePair(input.expectedManifest, input.expectedGeneration);
+  const activationCommand = new EcdsaServerActivationCommandProof({
+    correlationId: input.journalId,
+    expectedGeneration: input.expectedGeneration,
+    requestDigest: input.requestDigest,
+    canonicalRequest: input.canonicalRequest
+  });
+  return new PreparedEcdsaActivationJournalProof({
+    journalId: input.journalId,
+    expectedManifest: input.expectedManifest,
+    activationCommand,
+    candidate: input.candidate,
+    createdAt: input.createdAt
+  });
+}
+function buildEcdsaServerActivationCommit(input) {
+  const protocolReceipt = parseRouterAbEcdsaRegistrationActivationReceiptV1(input.serverCommit.protocolReceipt);
+  assertProtocolReceiptMatchesServerCommit(protocolReceipt, input.serverCommit);
+  assertProtocolReceiptMatchesActivationBinding(protocolReceipt, input.activationBinding);
+  const serverActivationReceipt = new EcdsaServerActivationReceiptProof({
+    lifecycleId: lifecycleIdFromProtocolReceipt(protocolReceipt),
+    activationDigest: activationDigestFromProtocolReceipt(protocolReceipt),
+    activatedAt: isoTimestampFromUnixMs(protocolReceipt.ecdsa_activation.activated_at_ms),
+    protocolReceipt
+  });
+  return new EcdsaServerActivationCommitProof({
+    correlationId: input.serverCommit.correlationId,
+    activationRequestDigest: input.serverCommit.activationRequestDigest,
+    serverGeneration: input.serverCommit.serverGeneration,
+    serverActivationReceipt
+  });
+}
+function buildServerCommittedEcdsaActivationJournal(input) {
+  assertServerCommitMatchesPreparedCommand(input.serverCommit, input.preparedJournal);
+  const serverActivation = buildEcdsaServerActivationCommit({
+    activationBinding: input.preparedJournal.candidate.activationBinding,
+    serverCommit: input.serverCommit
+  });
+  return new ServerCommittedEcdsaActivationJournalProof({
+    journalId: input.preparedJournal.journalId,
+    expectedManifest: input.preparedJournal.expectedManifest,
+    activationCommand: input.preparedJournal.activationCommand,
+    candidate: input.preparedJournal.candidate,
+    createdAt: input.preparedJournal.createdAt,
+    serverActivation
+  });
 }
-class EcdsaManifestIdentityProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.manifestId = fields.manifestId;
-    this.manifestRevision = fields.manifestRevision;
+function buildDurableEcdsaMaterialBinding(input) {
+  assertServerActivationMatchesBinding(input.serverActivation, input.activationBinding);
+  const facts = input.roleLocalPublicFacts;
+  const binding = input.activationBinding;
+  const runtimePolicyScope = normalizeRuntimePolicyScope(input.runtimePolicyScope);
+  if (facts.walletId !== binding.signer.walletId || facts.keyHandle !== binding.roleLocalBinding.keyHandle || facts.ecdsaThresholdKeyId !== binding.roleLocalBinding.ecdsaThresholdKeyId || facts.signingRootId !== binding.signer.signingRootId || facts.signingRootVersion !== binding.signer.signingRootVersion || deriveSigningRootId(runtimePolicyScope) !== binding.signer.signingRootId || runtimePolicyScope.signingRootVersion !== binding.signer.signingRootVersion || facts.contextBinding32B64u !== binding.bindingDigest || !participantIdsMatch(facts.participantIds, binding.roleLocalBinding.participantIds) || !binding.signer.scope.targetMemberships.some((target) => ecdsaTargetMembershipKey(target) === ecdsaTargetMembershipKey(facts.chainTarget))) {
+    throw new Error("ECDSA role-local public facts do not match their activation");
   }
+  const receipt = input.serverActivation.serverActivationReceipt;
+  assertNormalSigningMatchesActivation({
+    normalSigning: input.routerAbEcdsaDerivationNormalSigning,
+    activationBinding: binding,
+    roleLocalPublicFacts: facts,
+    receipt: receipt.protocolReceipt
+  });
+  return new DurableEcdsaMaterialBindingProof({
+    materialActivation: materialActivationFromCommit(receipt.protocolReceipt),
+    routerAbEcdsaDerivationNormalSigning: input.routerAbEcdsaDerivationNormalSigning,
+    roleLocalPublicFacts: input.roleLocalPublicFacts,
+    roleLocalBinding: input.activationBinding.roleLocalBinding,
+    durableMaterialRef: input.activationBinding.durableMaterialRef,
+    bindingDigest: input.activationBinding.bindingDigest,
+    lifecycleId: receipt.lifecycleId,
+    ciphertextDigest: input.ciphertextDigest,
+    activationDigest: receipt.activationDigest,
+    activatedAt: receipt.activatedAt,
+    runtimePolicyScope
+  });
 }
-class NoCurrentEcdsaManifestExpectationProof extends EcdsaCapabilityManifestProof {
-  constructor() {
-    super(...arguments);
-    this.kind = "no_current_manifest";
-  }
+function buildValidatedEncryptedEcdsaReadyMaterial(input) {
+  return new ValidatedEncryptedEcdsaReadyMaterialProof({
+    binding: input.binding,
+    sealingKeyId: input.sealingKeyId,
+    iv12B64u: input.iv12B64u,
+    ciphertextB64u: input.ciphertextB64u
+  });
 }
-class ExactEcdsaManifestExpectationProof extends EcdsaCapabilityManifestProof {
-  constructor(identity) {
-    super();
-    this.kind = "exact_manifest";
-    this.manifestId = identity.manifestId;
-    this.manifestRevision = identity.manifestRevision;
-  }
+function buildActiveEcdsaCapabilityManifest(input) {
+  assertRegisteredPublicFactsMatchBinding(input.registeredPublicFacts, input.activationBinding.roleLocalBinding, input.serverActivation);
+  assertDurableMaterialMatchesActivation(input.durableMaterial, input.activationBinding, input.serverActivation);
+  const signer = new RegisteredEvmFamilySignerProof({
+    preparedSigner: input.activationBinding.signer,
+    registeredPublicFacts: input.registeredPublicFacts
+  });
+  const activation = {
+    kind: "active_ecdsa_material_activation",
+    materialActivation: input.durableMaterial.materialActivation,
+    serverActivation: input.serverActivation,
+    retention: "retained"
+  };
+  return new ActiveEcdsaCapabilityManifestProof({
+    identity: input.activationBinding.targetManifest,
+    signer,
+    activation,
+    durableMaterial: input.durableMaterial,
+    committedAt: input.committedAt
+  });
 }
-class NoCurrentEcdsaServerGenerationExpectationProof extends EcdsaCapabilityManifestProof {
-  constructor() {
-    super(...arguments);
-    this.kind = "no_current_generation";
-  }
+function buildReplacedEcdsaCapabilityManifest(input) {
+  assertValidEcdsaReplacement(input.activeManifest, input.replacementManifest);
+  return new ReplacedEcdsaCapabilityManifestProof({
+    identity: input.activeManifest.identity,
+    signer: input.activeManifest.signer,
+    retirement: {
+      kind: "replaced",
+      replacementManifest: input.replacementManifest.identity,
+      replacementActivation: input.replacementManifest.activation.serverActivation
+    }
+  });
 }
-class ExactEcdsaServerGenerationExpectationProof extends EcdsaCapabilityManifestProof {
-  constructor(serverGeneration) {
-    super();
-    this.kind = "exact_generation";
-    this.serverGeneration = serverGeneration;
+function assertUniqueEcdsaTargetMemberships(targetMemberships) {
+  const targetKeys = targetMemberships.map(ecdsaTargetMembershipKey);
+  if (new Set(targetKeys).size !== targetKeys.length) {
+    throw new Error("ECDSA capability target memberships must be unique");
   }
 }
-class EcdsaRoleLocalMaterialBindingProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "ecdsa_role_local_material_binding";
-    this.keyHandle = fields.keyHandle;
-    this.ecdsaThresholdKeyId = fields.ecdsaThresholdKeyId;
-    this.clientVerifyingPublicKey33B64u = fields.clientVerifyingPublicKey33B64u;
-    this.participantIds = fields.participantIds;
-    this.relayerKeyId = fields.relayerKeyId;
+function ecdsaTargetMembershipKey(target) {
+  switch (target.kind) {
+    case "evm":
+      return `evm:${target.namespace}:${target.chainId}:${target.networkSlug}`;
+    case "tempo":
+      return `tempo:${target.chainId}:${target.networkSlug}`;
+    default:
+      return assertNever(target);
   }
 }
-class PreparedEvmFamilySignerProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "prepared_evm_family_signer";
-    this.capability = fields.capability;
-    this.signerId = fields.signerId;
-    this.walletId = fields.authority.walletId;
-    this.authority = fields.authority;
-    this.scope = fields.scope;
-    this.materialOwner = fields.materialOwner;
-    this.signingRootId = fields.signingRootId;
-    this.signingRootVersion = fields.signingRootVersion;
+function assertUniqueParticipantIds(participantIds) {
+  const normalizedIds = participantIds.map(Number);
+  if (normalizedIds.some((participantId) => !Number.isSafeInteger(participantId) || participantId < 1) || new Set(normalizedIds).size !== normalizedIds.length) {
+    throw new Error("ECDSA participant ids must be unique positive integers");
   }
 }
-class RegisteredEvmFamilySignerProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "registered_evm_family_signer";
-    this.capability = fields.preparedSigner.capability;
-    this.signerId = fields.preparedSigner.signerId;
-    this.walletId = fields.preparedSigner.walletId;
-    this.authority = fields.preparedSigner.authority;
-    this.scope = fields.preparedSigner.scope;
-    this.materialOwner = fields.preparedSigner.materialOwner;
-    this.signingRootId = fields.preparedSigner.signingRootId;
-    this.signingRootVersion = fields.preparedSigner.signingRootVersion;
-    this.registeredPublicFacts = fields.registeredPublicFacts;
+function assertTargetManifestTransition(expected, target) {
+  switch (expected.kind) {
+    case "no_current_manifest":
+      if (Number(target.manifestRevision) !== 1) {
+        throw new Error("Initial ECDSA manifest revision must be 1");
+      }
+      return;
+    case "exact_manifest":
+      if (target.manifestId === expected.manifestId || Number(target.manifestRevision) !== Number(expected.manifestRevision) + 1) {
+        throw new Error("Replacement ECDSA manifest must use a fresh id and next revision");
+      }
+      return;
+    default:
+      return assertNever(expected);
   }
 }
-class EncryptedEcdsaPendingCandidateProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "encrypted_ecdsa_pending_candidate";
-    this.sealingKeyId = fields.sealingKeyId;
-    this.iv12B64u = fields.iv12B64u;
-    this.ciphertextB64u = fields.ciphertextB64u;
-    this.ciphertextDigest = fields.ciphertextDigest;
+function assertExpectedStatePair(expectedManifest, expectedGeneration) {
+  switch (expectedManifest.kind) {
+    case "no_current_manifest":
+      if (expectedGeneration.kind !== "no_current_generation") {
+        throw new Error("Initial ECDSA activation cannot expect a server generation");
+      }
+      return;
+    case "exact_manifest":
+      if (expectedGeneration.kind !== "exact_generation") {
+        throw new Error("Replacement ECDSA activation requires an exact server generation");
+      }
+      return;
+    default:
+      return assertNever(expectedManifest);
   }
 }
-class EcdsaActivationBindingProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "ecdsa_activation_binding";
-    this.targetManifest = fields.targetManifest;
-    this.signer = fields.signer;
-    this.roleLocalBinding = fields.roleLocalBinding;
-    this.bindingDigest = fields.bindingDigest;
-    this.durableMaterialRef = fields.durableMaterialRef;
+function assertServerCommitMatchesPreparedCommand(serverCommit, journal) {
+  const canonicalRequest = JSON.parse(journal.activationCommand.canonicalRequest);
+  const requestDigestNamesOuterOperation = canonicalRequest.operation === "wallet_registration_activate_v2";
+  if (serverCommit.correlationId !== journal.activationCommand.correlationId || !requestDigestNamesOuterOperation && serverCommit.activationRequestDigest !== journal.activationCommand.requestDigest) {
+    throw new Error("ECDSA server activation commit does not match the prepared command");
   }
 }
-class PreparedEcdsaActivationCandidateProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "prepared_ecdsa_activation_candidate";
-    this.activationBinding = fields.activationBinding;
-    this.encryptedPending = fields.encryptedPending;
+function assertProtocolReceiptMatchesActivationBinding(receipt, activationBinding) {
+  const publicIdentity = receipt.ecdsa_activation.public_identity;
+  const materialActivation = receipt.ecdsa_activation.material_activation;
+  materialActivationFromCommit(receipt);
+  if (publicIdentity.context_binding_b64u !== String(activationBinding.bindingDigest) || publicIdentity.derivation_client_share_public_key33_b64u !== String(activationBinding.roleLocalBinding.clientVerifyingPublicKey33B64u) || materialActivation.material_owner !== String(activationBinding.signer.materialOwner) || materialActivation.key_binding !== String(activationBinding.bindingDigest) || materialActivation.lifecycle_binding !== receipt.lifecycle_id || materialActivation.signing_worker !== receipt.ecdsa_activation.signing_worker.server_id) {
+    throw new Error("ECDSA activation receipt does not match the prepared material binding");
   }
 }
-class EcdsaServerActivationCommandProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "ecdsa_server_activation_command";
-    this.correlationId = fields.correlationId;
-    this.expectedGeneration = fields.expectedGeneration;
-    this.requestDigest = fields.requestDigest;
-    this.canonicalRequest = fields.canonicalRequest;
+function assertProtocolReceiptMatchesServerCommit(receipt, serverCommit) {
+  const receiptRequestDigest = base64UrlEncode(Uint8Array.from(receipt.activation_request_digest.bytes));
+  if (receipt.activation_correlation_id !== serverCommit.correlationId || receiptRequestDigest !== serverCommit.activationRequestDigest || receipt.server_generation !== serverCommit.serverGeneration) {
+    throw new Error("ECDSA activation receipt does not match the server activation commit");
   }
 }
-class EcdsaServerActivationReceiptProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "ecdsa_server_activation_receipt";
-    this.lifecycleId = fields.lifecycleId;
-    this.activationDigest = fields.activationDigest;
-    this.activatedAt = fields.activatedAt;
-    this.protocolReceipt = fields.protocolReceipt;
-  }
+function lifecycleIdFromProtocolReceipt(receipt) {
+  return parseEcdsaLifecycleId(receipt.lifecycle_id);
 }
-class EcdsaServerActivationCommitProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "ecdsa_server_activation_commit";
-    this.correlationId = fields.correlationId;
-    this.activationRequestDigest = fields.activationRequestDigest;
-    this.serverGeneration = fields.serverGeneration;
-    this.serverActivationReceipt = fields.serverActivationReceipt;
-  }
+function activationDigestFromProtocolReceipt(receipt) {
+  return parseEcdsaActivationDigest(receipt.ecdsa_activation.activation_digest_b64u);
 }
-class PreparedEcdsaActivationJournalProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "activation_prepared";
-    this.journalId = fields.journalId;
-    this.expectedManifest = fields.expectedManifest;
-    this.activationCommand = fields.activationCommand;
-    this.candidate = fields.candidate;
-    this.createdAt = fields.createdAt;
+function materialActivationFromCommit(receipt) {
+  return routerAbMpcMaterialActivationRefFromWire(receipt.ecdsa_activation.material_activation);
+}
+function assertRegisteredPublicFactsMatchBinding(publicFacts, binding, serverActivation) {
+  const receiptPublicIdentity = serverActivation.serverActivationReceipt.protocolReceipt.ecdsa_activation.public_identity;
+  if (String(publicFacts.keyHandle) !== String(binding.keyHandle) || String(publicFacts.publicKeyB64u) !== receiptPublicIdentity.threshold_public_key33_b64u || String(binding.clientVerifyingPublicKey33B64u) !== receiptPublicIdentity.derivation_client_share_public_key33_b64u || !participantIdsMatch(publicFacts.participantIds, binding.participantIds)) {
+    throw new Error("Registered ECDSA public facts do not match role-local material");
   }
 }
-class ServerCommittedEcdsaActivationJournalProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "server_activation_committed";
-    this.journalId = fields.journalId;
-    this.expectedManifest = fields.expectedManifest;
-    this.activationCommand = fields.activationCommand;
-    this.candidate = fields.candidate;
-    this.createdAt = fields.createdAt;
-    this.serverActivation = fields.serverActivation;
+function participantIdsMatch(left, right) {
+  if (left.length !== right.length)
+    return false;
+  return left.every((participantId, index) => Number(participantId) === Number(right[index]));
+}
+function assertServerActivationMatchesBinding(serverActivation, activationBinding) {
+  assertProtocolReceiptMatchesActivationBinding(serverActivation.serverActivationReceipt.protocolReceipt, activationBinding);
+}
+function assertDurableMaterialMatchesActivation(durableMaterial, activationBinding, serverActivation) {
+  const receipt = serverActivation.serverActivationReceipt;
+  const committedMaterialActivation = materialActivationFromCommit(receipt.protocolReceipt);
+  if (!mpcMaterialActivationRefsEqual(durableMaterial.materialActivation, committedMaterialActivation) || durableMaterial.roleLocalBinding !== activationBinding.roleLocalBinding || durableMaterial.durableMaterialRef !== activationBinding.durableMaterialRef || durableMaterial.bindingDigest !== activationBinding.bindingDigest || durableMaterial.lifecycleId !== receipt.lifecycleId || durableMaterial.activationDigest !== receipt.activationDigest || durableMaterial.activatedAt !== receipt.activatedAt) {
+    throw new Error("Durable ECDSA material does not match its activation");
   }
+  assertNormalSigningMatchesActivation({
+    normalSigning: durableMaterial.routerAbEcdsaDerivationNormalSigning,
+    activationBinding,
+    roleLocalPublicFacts: durableMaterial.roleLocalPublicFacts,
+    receipt: receipt.protocolReceipt
+  });
 }
-class DurableEcdsaMaterialBindingProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "durable_ecdsa_material";
-    this.materialActivation = fields.materialActivation;
-    this.routerAbEcdsaDerivationNormalSigning = fields.routerAbEcdsaDerivationNormalSigning;
-    this.roleLocalPublicFacts = fields.roleLocalPublicFacts;
-    this.roleLocalBinding = fields.roleLocalBinding;
-    this.durableMaterialRef = fields.durableMaterialRef;
-    this.bindingDigest = fields.bindingDigest;
-    this.lifecycleId = fields.lifecycleId;
-    this.ciphertextDigest = fields.ciphertextDigest;
-    this.activationDigest = fields.activationDigest;
-    this.activatedAt = fields.activatedAt;
-    this.runtimePolicyScope = fields.runtimePolicyScope;
+function assertNormalSigningMatchesActivation(input) {
+  const scope = input.normalSigning.scope;
+  const facts = input.roleLocalPublicFacts;
+  const expectedMaterialActivation = materialActivationFromCommit(input.receipt);
+  const expectedMaterialActivationWire = routerAbMpcMaterialActivationRefToWire({
+    kind: expectedMaterialActivation.kind,
+    activationId: expectedMaterialActivation.activationId,
+    capability: expectedMaterialActivation.capability,
+    materialOwner: expectedMaterialActivation.materialOwner,
+    keyBinding: expectedMaterialActivation.keyBinding,
+    lifecycleBinding: expectedMaterialActivation.lifecycleBinding,
+    signingWorker: expectedMaterialActivation.signingWorker
+  });
+  if (scope.wallet_id !== String(input.activationBinding.signer.walletId) || scope.ecdsa_threshold_key_id !== String(input.activationBinding.roleLocalBinding.ecdsaThresholdKeyId) || scope.signing_root_id !== String(input.activationBinding.signer.signingRootId) || scope.signing_root_version !== String(input.activationBinding.signer.signingRootVersion) || scope.context.application_binding_digest_b64u !== input.receipt.ecdsa_activation.context.application_binding_digest_b64u || !sameRouterAbEcdsaDerivationPublicIdentityV1(scope.public_identity, input.receipt.ecdsa_activation.public_identity) || !sameRouterAbServerIdentityV1(scope.signing_worker, input.receipt.ecdsa_activation.signing_worker) || scope.activation_epoch !== input.receipt.ecdsa_activation.activation_epoch || scope.public_identity.context_binding_b64u !== facts.contextBinding32B64u || scope.public_identity.derivation_client_share_public_key33_b64u !== facts.derivationClientSharePublicKey33B64u || scope.public_identity.server_public_key33_b64u !== facts.relayerPublicKey33B64u || scope.public_identity.threshold_public_key33_b64u !== facts.groupPublicKey33B64u || !sameRouterAbMpcMaterialActivationRef(scope.material_activation, expectedMaterialActivationWire)) {
+    throw new Error("ECDSA normal-signing runtime does not match its activation");
   }
 }
-class ValidatedEncryptedEcdsaReadyMaterialProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "encrypted_ecdsa_ready_material";
-    this.binding = fields.binding;
-    this.sealingKeyId = fields.sealingKeyId;
-    this.iv12B64u = fields.iv12B64u;
-    this.ciphertextB64u = fields.ciphertextB64u;
+function assertValidEcdsaReplacement(active, replacement) {
+  if (active.identity.manifestId === replacement.identity.manifestId || Number(replacement.identity.manifestRevision) !== Number(active.identity.manifestRevision) + 1 || active.signer.capability !== replacement.signer.capability || active.signer.signerId !== replacement.signer.signerId || active.signer.walletId !== replacement.signer.walletId || active.signer.authority.authorityDigest !== replacement.signer.authority.authorityDigest || active.signer.materialOwner !== replacement.signer.materialOwner || active.durableMaterial.durableMaterialRef === replacement.durableMaterial.durableMaterialRef || active.activation.serverActivation.serverGeneration === replacement.activation.serverActivation.serverGeneration) {
+    throw new Error("ECDSA replacement manifest does not exactly replace the active manifest");
   }
 }
+function assertNever(value) {
+  throw new Error(`Unexpected ECDSA capability branch: ${String(value)}`);
+}
-class ActiveEcdsaCapabilityManifestProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "active_ecdsa_capability_manifest";
-    this.identity = fields.identity;
-    this.signer = fields.signer;
-    this.activation = fields.activation;
-    this.durableMaterial = fields.durableMaterial;
-    this.committedAt = fields.committedAt;
+// src/core/indexedDB/schemaNames.ts
+var SEAMS_WALLET_DB_NAME = "seams_wallet";
+var SEAMS_WALLET_DB_VERSION = 24;
+var SEAMS_WALLET_STORES = {
+  appState: "app_state",
+  wallets: "wallets",
+  walletAuthorities: "wallet_authorities",
+  walletAuthMethods: "wallet_auth_methods",
+  walletAuthoritySignerMaterials: "wallet_authority_signer_materials",
+  walletAuthorityExportRoots: "wallet_authority_export_roots",
+  walletAuthorityInstallationReceipts: "wallet_authority_installation_receipts",
+  walletSelections: "wallet_selections",
+  walletSigners: "wallet_signers",
+  nearAccountProjections: "near_accounts",
+  signerOpsOutbox: "signer_ops_outbox",
+  nonceLaneLeases: "nonce_lane_leases",
+  nonceLaneLocks: "nonce_lane_locks",
+  keyMaterial: "key_material",
+  signingSessionSeals: "signing_session_seals",
+  signingSessionRestoreLeases: "signing_session_restore_leases",
+  pendingWalletRecoveryCodeBackups: "email_otp_pending_recovery_code_backups",
+  walletSessionAuthorizations: "wallet_session_authorizations",
+  ecdsaCapabilityManifests: "ecdsa_capability_manifests",
+  ecdsaCurrentCapabilityManifests: "ecdsa_current_capability_manifests",
+  ecdsaRoleLocalMaterial: "ecdsa_role_local_material",
+  ecdsaActivationCommitJournals: "ecdsa_activation_commit_journals",
+  ecdsaMaterialSealingKeys: "ecdsa_material_sealing_keys",
+  ecdsaClientPresignatures: "ecdsa_client_presignatures"
+};
+var SEAMS_WALLET_INDEXES = {
+  profileId: "profile_id",
+  updatedAt: "updated_at",
+  walletId: "wallet_id",
+  walletIdKind: "wallet_id_kind",
+  walletKindNearSignerSlot: "wallet_kind_near_signer_slot",
+  walletKindNearEd25519SigningKeyId: "wallet_kind_near_ed25519_signing_key_id",
+  walletKindChainTargetKeyHandle: "wallet_kind_chain_target_key_handle",
+  walletKindChainTargetKeyFacts: "wallet_kind_chain_target_key_facts",
+  walletSignerId: "wallet_signer_id",
+  nearAccountId: "near_account_id",
+  rpId: "rp_id",
+  chainTargetKey: "chain_target_key",
+  keyHandle: "key_handle",
+  thresholdOwnerAddress: "threshold_owner_address",
+  status: "status",
+  nextAttemptAt: "next_attempt_at",
+  statusNextAttemptAt: "status_next_attempt_at",
+  idempotencyKey: "idempotency_key",
+  laneKey: "lane_key",
+  state: "state",
+  expiresAtMs: "expires_at_ms",
+  recoveryCodesIssuedAtMs: "recovery_codes_issued_at_ms",
+  laneState: "lane_state",
+  walletExpiresAt: "wallet_expires_at",
+  ownerId: "owner_id",
+  publicKey: "public_key",
+  authMethod: "auth_method",
+  curve: "curve",
+  ed25519ThresholdSessionId: "ed25519_threshold_session_id",
+  ecdsaThresholdSessionId: "ecdsa_threshold_session_id",
+  thresholdSessionId: "threshold_session_id",
+  exactSigningLaneIdentityKey: "exact_signing_lane_identity_key",
+  enrollmentId: "enrollment_id",
+  walletIdEnrollmentId: "wallet_id_enrollment_id",
+  authIdentifierKey: "auth_identifier_key",
+  kindRpIdAuthIdentifier: "kind_rp_id_auth_identifier",
+  passkeyRpIdCredentialId: "passkey_rp_id_credential_id",
+  capabilityWallet: "capability_wallet",
+  capabilityWalletAuthorityState: "capability_wallet_authority_state",
+  capabilityWalletAuthority: "capability_wallet_authority",
+  walletAuthorityId: "wallet_authority_id",
+  walletAuthMethodId: "wallet_auth_method_id",
+  walletIdAuthorityId: "wallet_id_authority_id",
+  walletIdAuthorityStatus: "wallet_id_authority_status",
+  walletIdAuthMethodId: "wallet_id_auth_method_id",
+  walletAuthorityAuthMethodId: "wallet_authority_auth_method_id",
+  activationId: "activation_id",
+  walletAuthorityActivationId: "wallet_authority_activation_id",
+  walletIdDeviceId: "wallet_id_device_id",
+  packageSetDigest: "package_set_digest",
+  walletKeyId: "wallet_key_id",
+  walletIdLockGeneration: "wallet_id_lock_generation",
+  authorityDigest: "authority_digest",
+  revocationEpoch: "revocation_epoch",
+  poolIdentityKey: "pool_identity_key",
+  walletMaterialActivationId: "wallet_material_activation_id"
+};
+var SEAMS_WALLET_SCHEMA_MANIFEST = [
+  {
+    store: SEAMS_WALLET_STORES.appState,
+    keyPath: "key",
+    indexes: []
+  },
+  {
+    store: SEAMS_WALLET_STORES.wallets,
+    keyPath: "wallet_id",
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.rpId, keyPath: "rp_id", unique: false },
+      { name: SEAMS_WALLET_INDEXES.status, keyPath: "status", unique: false },
+      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.walletAuthorities,
+    keyPath: "authority_id",
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
+      { name: SEAMS_WALLET_INDEXES.walletAuthorityId, keyPath: "authority_id", unique: true },
+      {
+        name: SEAMS_WALLET_INDEXES.walletIdAuthorityId,
+        keyPath: ["wallet_id", "authority_id"],
+        unique: true
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.walletIdAuthorityStatus,
+        keyPath: ["wallet_id", "state"],
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.walletIdDeviceId,
+        keyPath: ["wallet_id", "device_id"],
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.walletAuthMethods,
+    keyPath: "wallet_auth_method_id",
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.walletIdKind,
+        keyPath: ["wallet_id", "kind"],
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.authMethod, keyPath: "auth_method", unique: false },
+      { name: SEAMS_WALLET_INDEXES.rpId, keyPath: "rp_id", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.authIdentifierKey,
+        keyPath: "auth_identifier_key",
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.kindRpIdAuthIdentifier,
+        keyPath: ["kind", "rp_id", "auth_identifier_key"],
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.passkeyRpIdCredentialId,
+        keyPath: ["kind", "rp_id", "credential_id_b64u"],
+        unique: true
+      },
+      { name: SEAMS_WALLET_INDEXES.status, keyPath: "status", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.walletAuthorityId,
+        keyPath: "wallet_authority_id",
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.walletIdAuthMethodId,
+        keyPath: ["wallet_id", "wallet_auth_method_id"],
+        unique: true
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.walletIdAuthorityStatus,
+        keyPath: ["wallet_id", "wallet_authority_id", "status"],
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.walletAuthoritySignerMaterials,
+    keyPath: ["wallet_authority_id", "wallet_auth_method_id", "activation_id"],
+    indexes: [
+      {
+        name: SEAMS_WALLET_INDEXES.walletAuthorityId,
+        keyPath: "wallet_authority_id",
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.walletAuthorityAuthMethodId,
+        keyPath: ["wallet_authority_id", "wallet_auth_method_id"],
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.activationId, keyPath: "activation_id", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.walletAuthorityActivationId,
+        keyPath: ["wallet_authority_id", "activation_id"],
+        unique: true
+      }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.walletAuthorityExportRoots,
+    keyPath: ["wallet_authority_id", "wallet_auth_method_id", "wallet_key_id"],
+    indexes: [
+      {
+        name: SEAMS_WALLET_INDEXES.walletAuthorityId,
+        keyPath: "wallet_authority_id",
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.walletAuthorityAuthMethodId,
+        keyPath: ["wallet_authority_id", "wallet_auth_method_id"],
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.walletKeyId, keyPath: "wallet_key_id", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.walletAuthorityInstallationReceipts,
+    keyPath: "authority_id",
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.walletAuthorityId, keyPath: "authority_id", unique: true },
+      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.walletAuthMethodId,
+        keyPath: "wallet_auth_method_id",
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.walletIdDeviceId,
+        keyPath: ["wallet_id", "device_id"],
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.packageSetDigest,
+        keyPath: "package_set_digest_b64u",
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "installed_at_ms", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.walletSelections,
+    keyPath: "wallet_id",
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: true },
+      {
+        name: SEAMS_WALLET_INDEXES.walletAuthMethodId,
+        keyPath: "wallet_auth_method_id",
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.walletIdLockGeneration,
+        keyPath: ["wallet_id", "lock_generation"],
+        unique: true
+      }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.walletSigners,
+    keyPath: "wallet_signer_id",
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.walletIdKind,
+        keyPath: ["wallet_id", "kind"],
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.walletKindNearSignerSlot,
+        keyPath: ["wallet_id", "kind", "near_signer_slot"],
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.walletKindNearEd25519SigningKeyId,
+        keyPath: ["wallet_id", "kind", "near_ed25519_signing_key_id"],
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.walletKindChainTargetKeyHandle,
+        keyPath: ["wallet_id", "kind", "chain_target_key", "key_handle"],
+        unique: true
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.walletKindChainTargetKeyFacts,
+        keyPath: ["wallet_id", "kind", "chain_target_key", "ecdsa_threshold_key_id"],
+        unique: true
+      },
+      { name: SEAMS_WALLET_INDEXES.chainTargetKey, keyPath: "chain_target_key", unique: false },
+      { name: SEAMS_WALLET_INDEXES.keyHandle, keyPath: "key_handle", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.thresholdOwnerAddress,
+        keyPath: "threshold_owner_address",
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.status, keyPath: "status", unique: false },
+      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.nearAccountProjections,
+    keyPath: ["wallet_id", "near_account_id", "signer_slot"],
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.nearAccountId, keyPath: "near_account_id", unique: false },
+      { name: SEAMS_WALLET_INDEXES.profileId, keyPath: "profile_id", unique: false },
+      { name: SEAMS_WALLET_INDEXES.publicKey, keyPath: "public_key", unique: false },
+      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.signerOpsOutbox,
+    keyPath: "op_id",
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.status, keyPath: "status", unique: false },
+      { name: SEAMS_WALLET_INDEXES.nextAttemptAt, keyPath: "next_attempt_at", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.statusNextAttemptAt,
+        keyPath: ["status", "next_attempt_at"],
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.idempotencyKey, keyPath: "idempotency_key", unique: true },
+      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
+      { name: SEAMS_WALLET_INDEXES.chainTargetKey, keyPath: "chain_target_key", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.nonceLaneLeases,
+    keyPath: "lease_id",
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.laneKey, keyPath: "lane_key", unique: false },
+      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
+      { name: SEAMS_WALLET_INDEXES.nearAccountId, keyPath: "near_account_id", unique: false },
+      { name: SEAMS_WALLET_INDEXES.state, keyPath: "state", unique: false },
+      { name: SEAMS_WALLET_INDEXES.expiresAtMs, keyPath: "expires_at_ms", unique: false },
+      { name: SEAMS_WALLET_INDEXES.laneState, keyPath: ["lane_key", "state"], unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.walletExpiresAt,
+        keyPath: ["wallet_id", "expires_at_ms"],
+        unique: false
+      }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.nonceLaneLocks,
+    keyPath: "lock_key",
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.expiresAtMs, keyPath: "expires_at_ms", unique: false },
+      { name: SEAMS_WALLET_INDEXES.ownerId, keyPath: "owner_id", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.keyMaterial,
+    keyPath: "key_material_id",
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
+      { name: SEAMS_WALLET_INDEXES.walletSignerId, keyPath: "wallet_signer_id", unique: false },
+      { name: SEAMS_WALLET_INDEXES.chainTargetKey, keyPath: "chain_target_key", unique: false },
+      { name: SEAMS_WALLET_INDEXES.keyHandle, keyPath: "key_handle", unique: false },
+      { name: SEAMS_WALLET_INDEXES.publicKey, keyPath: "public_key", unique: false },
+      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.signingSessionSeals,
+    keyPath: "store_key",
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
+      { name: SEAMS_WALLET_INDEXES.authMethod, keyPath: "auth_method", unique: false },
+      { name: SEAMS_WALLET_INDEXES.curve, keyPath: "curve", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.ed25519ThresholdSessionId,
+        keyPath: "ed25519_threshold_session_id",
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.ecdsaThresholdSessionId,
+        keyPath: "ecdsa_threshold_session_id",
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.thresholdSessionId,
+        keyPath: "threshold_session_id",
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.enrollmentId, keyPath: "enrollmentId", unique: false },
+      { name: SEAMS_WALLET_INDEXES.keyHandle, keyPath: "key_handle", unique: false },
+      { name: SEAMS_WALLET_INDEXES.chainTargetKey, keyPath: "chain_target_key", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.exactSigningLaneIdentityKey,
+        keyPath: "exact_signing_lane_identity_key",
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.expiresAtMs, keyPath: "expires_at_ms", unique: false },
+      { name: SEAMS_WALLET_INDEXES.updatedAt, keyPath: "updated_at", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.signingSessionRestoreLeases,
+    keyPath: "lease_key",
+    indexes: [
+      {
+        name: SEAMS_WALLET_INDEXES.thresholdSessionId,
+        keyPath: "threshold_session_id",
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.ownerId, keyPath: "owner_id", unique: false },
+      { name: SEAMS_WALLET_INDEXES.expiresAtMs, keyPath: "expires_at_ms", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.pendingWalletRecoveryCodeBackups,
+    keyPath: ["wallet_id", "enrollment_id"],
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
+      { name: SEAMS_WALLET_INDEXES.enrollmentId, keyPath: "enrollment_id", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.walletIdEnrollmentId,
+        keyPath: ["wallet_id", "enrollment_id"],
+        unique: true
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.recoveryCodesIssuedAtMs,
+        keyPath: "recovery_codes_issued_at_ms",
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.status, keyPath: "status", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.walletSessionAuthorizations,
+    keyPath: "wallet_session_id",
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.walletAuthorityId,
+        keyPath: "wallet_authority_id",
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.walletAuthMethodId,
+        keyPath: "wallet_auth_method_id",
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.authorityDigest,
+        keyPath: "authority_digest_b64u",
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.revocationEpoch,
+        keyPath: "authority_revocation_epoch",
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.status, keyPath: "status", unique: false },
+      { name: SEAMS_WALLET_INDEXES.expiresAtMs, keyPath: "expires_at_ms", unique: false }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.ecdsaCapabilityManifests,
+    keyPath: "manifest_id",
+    indexes: [
+      {
+        name: SEAMS_WALLET_INDEXES.capabilityWallet,
+        keyPath: ["capability_ref", "wallet_id"],
+        unique: false
+      },
+      {
+        name: SEAMS_WALLET_INDEXES.capabilityWalletAuthorityState,
+        keyPath: ["capability_ref", "wallet_id", "authority_digest", "manifest_state"],
+        unique: false
+      }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.ecdsaCurrentCapabilityManifests,
+    keyPath: ["capability_ref", "wallet_id", "authority_digest"],
+    indexes: [{ name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false }]
+  },
+  {
+    store: SEAMS_WALLET_STORES.ecdsaRoleLocalMaterial,
+    keyPath: "durable_material_ref",
+    indexes: []
+  },
+  {
+    store: SEAMS_WALLET_STORES.ecdsaActivationCommitJournals,
+    keyPath: "journal_id",
+    indexes: [
+      {
+        name: SEAMS_WALLET_INDEXES.capabilityWalletAuthority,
+        keyPath: ["capability_ref", "wallet_id", "authority_digest"],
+        unique: true
+      }
+    ]
+  },
+  {
+    store: SEAMS_WALLET_STORES.ecdsaMaterialSealingKeys,
+    keyPath: "key_id",
+    indexes: []
+  },
+  {
+    store: SEAMS_WALLET_STORES.ecdsaClientPresignatures,
+    keyPath: "record_id",
+    indexes: [
+      { name: SEAMS_WALLET_INDEXES.poolIdentityKey, keyPath: "pool_identity_key", unique: false },
+      { name: SEAMS_WALLET_INDEXES.walletId, keyPath: "wallet_id", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.walletMaterialActivationId,
+        keyPath: ["wallet_id", "material_activation_id"],
+        unique: false
+      },
+      { name: SEAMS_WALLET_INDEXES.expiresAtMs, keyPath: "expires_at_ms", unique: false },
+      {
+        name: SEAMS_WALLET_INDEXES.walletExpiresAt,
+        keyPath: ["wallet_id", "expires_at_ms"],
+        unique: false
+      }
+    ]
   }
-}
+];
-class ReplacedEcdsaCapabilityManifestProof extends EcdsaCapabilityManifestProof {
-  constructor(fields) {
-    super();
-    this.kind = "replaced_ecdsa_capability_manifest";
-    this.identity = fields.identity;
-    this.signer = fields.signer;
-    this.retirement = fields.retirement;
-  }
-}
-function unwrapDomainId(result) {
-  if (!result.ok)
-    throw new Error(result.error.message);
-  return result.value;
-}
-function buildEcdsaCapabilityScope(input) {
-  assertUniqueEcdsaTargetMemberships(input.targetMemberships);
-  return new EcdsaCapabilityScopeProof([...input.targetMemberships]);
-}
-function buildEcdsaManifestIdentity(input) {
-  return new EcdsaManifestIdentityProof(input);
-}
-function buildNoCurrentEcdsaManifestExpectation() {
-  return new NoCurrentEcdsaManifestExpectationProof;
-}
-function buildExactEcdsaManifestExpectation(identity) {
-  return new ExactEcdsaManifestExpectationProof(identity);
-}
-function buildNoCurrentEcdsaServerGenerationExpectation() {
-  return new NoCurrentEcdsaServerGenerationExpectationProof;
-}
-function buildExactEcdsaServerGenerationExpectation(serverGeneration) {
-  return new ExactEcdsaServerGenerationExpectationProof(serverGeneration);
-}
-function buildEcdsaRoleLocalMaterialBinding(input) {
-  assertUniqueParticipantIds(input.participantIds);
-  return new EcdsaRoleLocalMaterialBindingProof({
-    keyHandle: input.keyHandle,
-    ecdsaThresholdKeyId: input.ecdsaThresholdKeyId,
-    clientVerifyingPublicKey33B64u: input.clientVerifyingPublicKey33B64u,
-    participantIds: [...input.participantIds],
-    relayerKeyId: input.relayerKeyId
-  });
-}
-function buildPreparedEvmFamilySigner(input) {
-  return new PreparedEvmFamilySignerProof(input);
-}
-function buildEncryptedEcdsaPendingCandidate(input) {
-  return new EncryptedEcdsaPendingCandidateProof(input);
-}
-function buildEcdsaActivationBinding(input) {
-  return new EcdsaActivationBindingProof(input);
-}
-function buildPreparedEcdsaActivationCandidate(input) {
-  return new PreparedEcdsaActivationCandidateProof(input);
-}
-function buildPreparedEcdsaActivationJournal(input) {
-  assertTargetManifestTransition(input.expectedManifest, input.candidate.activationBinding.targetManifest);
-  assertExpectedStatePair(input.expectedManifest, input.expectedGeneration);
-  const activationCommand = new EcdsaServerActivationCommandProof({
-    correlationId: input.journalId,
-    expectedGeneration: input.expectedGeneration,
-    requestDigest: input.requestDigest,
-    canonicalRequest: input.canonicalRequest
-  });
-  return new PreparedEcdsaActivationJournalProof({
-    journalId: input.journalId,
-    expectedManifest: input.expectedManifest,
-    activationCommand,
-    candidate: input.candidate,
-    createdAt: input.createdAt
-  });
-}
-function buildEcdsaServerActivationCommit(input) {
-  const protocolReceipt = parseRouterAbEcdsaRegistrationActivationReceiptV1(input.serverCommit.protocolReceipt);
-  assertProtocolReceiptMatchesServerCommit(protocolReceipt, input.serverCommit);
-  assertProtocolReceiptMatchesActivationBinding(protocolReceipt, input.activationBinding);
-  const serverActivationReceipt = new EcdsaServerActivationReceiptProof({
-    lifecycleId: lifecycleIdFromProtocolReceipt(protocolReceipt),
-    activationDigest: activationDigestFromProtocolReceipt(protocolReceipt),
-    activatedAt: isoTimestampFromUnixMs(protocolReceipt.ecdsa_activation.activated_at_ms),
-    protocolReceipt
-  });
-  return new EcdsaServerActivationCommitProof({
-    correlationId: input.serverCommit.correlationId,
-    activationRequestDigest: input.serverCommit.activationRequestDigest,
-    serverGeneration: input.serverCommit.serverGeneration,
-    serverActivationReceipt
-  });
-}
-function buildServerCommittedEcdsaActivationJournal(input) {
-  assertServerCommitMatchesPreparedCommand(input.serverCommit, input.preparedJournal);
-  const serverActivation = buildEcdsaServerActivationCommit({
-    activationBinding: input.preparedJournal.candidate.activationBinding,
-    serverCommit: input.serverCommit
-  });
-  return new ServerCommittedEcdsaActivationJournalProof({
-    journalId: input.preparedJournal.journalId,
-    expectedManifest: input.preparedJournal.expectedManifest,
-    activationCommand: input.preparedJournal.activationCommand,
-    candidate: input.preparedJournal.candidate,
-    createdAt: input.preparedJournal.createdAt,
-    serverActivation
-  });
-}
-function buildDurableEcdsaMaterialBinding(input) {
-  assertServerActivationMatchesBinding(input.serverActivation, input.activationBinding);
-  const facts = input.roleLocalPublicFacts;
-  const binding = input.activationBinding;
-  const runtimePolicyScope = normalizeRuntimePolicyScope(input.runtimePolicyScope);
-  if (facts.walletId !== binding.signer.walletId || facts.keyHandle !== binding.roleLocalBinding.keyHandle || facts.ecdsaThresholdKeyId !== binding.roleLocalBinding.ecdsaThresholdKeyId || facts.signingRootId !== binding.signer.signingRootId || facts.signingRootVersion !== binding.signer.signingRootVersion || deriveSigningRootId(runtimePolicyScope) !== binding.signer.signingRootId || runtimePolicyScope.signingRootVersion !== binding.signer.signingRootVersion || facts.contextBinding32B64u !== binding.bindingDigest || !participantIdsMatch(facts.participantIds, binding.roleLocalBinding.participantIds) || !binding.signer.scope.targetMemberships.some((target) => ecdsaTargetMembershipKey(target) === ecdsaTargetMembershipKey(facts.chainTarget))) {
-    throw new Error("ECDSA role-local public facts do not match their activation");
-  }
-  const receipt = input.serverActivation.serverActivationReceipt;
-  assertNormalSigningMatchesActivation({
-    normalSigning: input.routerAbEcdsaDerivationNormalSigning,
-    activationBinding: binding,
-    roleLocalPublicFacts: facts,
-    receipt: receipt.protocolReceipt
-  });
-  return new DurableEcdsaMaterialBindingProof({
-    materialActivation: materialActivationFromCommit(receipt.protocolReceipt),
-    routerAbEcdsaDerivationNormalSigning: input.routerAbEcdsaDerivationNormalSigning,
-    roleLocalPublicFacts: input.roleLocalPublicFacts,
-    roleLocalBinding: input.activationBinding.roleLocalBinding,
-    durableMaterialRef: input.activationBinding.durableMaterialRef,
-    bindingDigest: input.activationBinding.bindingDigest,
-    lifecycleId: receipt.lifecycleId,
-    ciphertextDigest: input.ciphertextDigest,
-    activationDigest: receipt.activationDigest,
-    activatedAt: receipt.activatedAt,
-    runtimePolicyScope
-  });
+// ../../node_modules/idb/build/index.js
+var instanceOfAny = (object, constructors) => constructors.some((c) => object instanceof c);
+var idbProxyableTypes;
+var cursorAdvanceMethods;
+function getIdbProxyableTypes() {
+  return idbProxyableTypes || (idbProxyableTypes = [
+    IDBDatabase,
+    IDBObjectStore,
+    IDBIndex,
+    IDBCursor,
+    IDBTransaction
+  ]);
 }
-function buildValidatedEncryptedEcdsaReadyMaterial(input) {
-  return new ValidatedEncryptedEcdsaReadyMaterialProof({
-    binding: input.binding,
-    sealingKeyId: input.sealingKeyId,
-    iv12B64u: input.iv12B64u,
-    ciphertextB64u: input.ciphertextB64u
-  });
+function getCursorAdvanceMethods() {
+  return cursorAdvanceMethods || (cursorAdvanceMethods = [
+    IDBCursor.prototype.advance,
+    IDBCursor.prototype.continue,
+    IDBCursor.prototype.continuePrimaryKey
+  ]);
 }
-function buildActiveEcdsaCapabilityManifest(input) {
-  assertRegisteredPublicFactsMatchBinding(input.registeredPublicFacts, input.activationBinding.roleLocalBinding, input.serverActivation);
-  assertDurableMaterialMatchesActivation(input.durableMaterial, input.activationBinding, input.serverActivation);
-  const signer = new RegisteredEvmFamilySignerProof({
-    preparedSigner: input.activationBinding.signer,
-    registeredPublicFacts: input.registeredPublicFacts
-  });
-  const activation = {
-    kind: "active_ecdsa_material_activation",
-    materialActivation: input.durableMaterial.materialActivation,
-    serverActivation: input.serverActivation,
-    retention: "retained"
-  };
-  return new ActiveEcdsaCapabilityManifestProof({
-    identity: input.activationBinding.targetManifest,
-    signer,
-    activation,
-    durableMaterial: input.durableMaterial,
-    committedAt: input.committedAt
+var transactionDoneMap = new WeakMap;
+var transformCache = new WeakMap;
+var reverseTransformCache = new WeakMap;
+function promisifyRequest(request) {
+  const promise = new Promise((resolve, reject) => {
+    const unlisten = () => {
+      request.removeEventListener("success", success);
+      request.removeEventListener("error", error);
+    };
+    const success = () => {
+      resolve(wrap(request.result));
+      unlisten();
+    };
+    const error = () => {
+      reject(request.error);
+      unlisten();
+    };
+    request.addEventListener("success", success);
+    request.addEventListener("error", error);
   });
+  reverseTransformCache.set(promise, request);
+  return promise;
 }
-function buildReplacedEcdsaCapabilityManifest(input) {
-  assertValidEcdsaReplacement(input.activeManifest, input.replacementManifest);
-  return new ReplacedEcdsaCapabilityManifestProof({
-    identity: input.activeManifest.identity,
-    signer: input.activeManifest.signer,
-    retirement: {
-      kind: "replaced",
-      replacementManifest: input.replacementManifest.identity,
-      replacementActivation: input.replacementManifest.activation.serverActivation
-    }
+function cacheDonePromiseForTransaction(tx) {
+  if (transactionDoneMap.has(tx))
+    return;
+  const done = new Promise((resolve, reject) => {
+    const unlisten = () => {
+      tx.removeEventListener("complete", complete);
+      tx.removeEventListener("error", error);
+      tx.removeEventListener("abort", error);
+    };
+    const complete = () => {
+      resolve();
+      unlisten();
+    };
+    const error = () => {
+      reject(tx.error || new DOMException("AbortError", "AbortError"));
+      unlisten();
+    };
+    tx.addEventListener("complete", complete);
+    tx.addEventListener("error", error);
+    tx.addEventListener("abort", error);
   });
+  transactionDoneMap.set(tx, done);
 }
-function assertUniqueEcdsaTargetMemberships(targetMemberships) {
-  const targetKeys = targetMemberships.map(ecdsaTargetMembershipKey);
-  if (new Set(targetKeys).size !== targetKeys.length) {
-    throw new Error("ECDSA capability target memberships must be unique");
+var idbProxyTraps = {
+  get(target, prop, receiver) {
+    if (target instanceof IDBTransaction) {
+      if (prop === "done")
+        return transactionDoneMap.get(target);
+      if (prop === "store") {
+        return receiver.objectStoreNames[1] ? undefined : receiver.objectStore(receiver.objectStoreNames[0]);
+      }
+    }
+    return wrap(target[prop]);
+  },
+  set(target, prop, value) {
+    target[prop] = value;
+    return true;
+  },
+  has(target, prop) {
+    if (target instanceof IDBTransaction && (prop === "done" || prop === "store")) {
+      return true;
+    }
+    return prop in target;
   }
+};
+function replaceTraps(callback) {
+  idbProxyTraps = callback(idbProxyTraps);
 }
-function ecdsaTargetMembershipKey(target) {
-  switch (target.kind) {
-    case "evm":
-      return `evm:${target.namespace}:${target.chainId}:${target.networkSlug}`;
-    case "tempo":
-      return `tempo:${target.chainId}:${target.networkSlug}`;
-    default:
-      return assertNever(target);
+function wrapFunction(func) {
+  if (getCursorAdvanceMethods().includes(func)) {
+    return function(...args) {
+      func.apply(unwrap(this), args);
+      return wrap(this.request);
+    };
   }
+  return function(...args) {
+    return wrap(func.apply(unwrap(this), args));
+  };
 }
-function assertUniqueParticipantIds(participantIds) {
-  const normalizedIds = participantIds.map(Number);
-  if (normalizedIds.some((participantId) => !Number.isSafeInteger(participantId) || participantId < 1) || new Set(normalizedIds).size !== normalizedIds.length) {
-    throw new Error("ECDSA participant ids must be unique positive integers");
-  }
+function transformCachableValue(value) {
+  if (typeof value === "function")
+    return wrapFunction(value);
+  if (value instanceof IDBTransaction)
+    cacheDonePromiseForTransaction(value);
+  if (instanceOfAny(value, getIdbProxyableTypes()))
+    return new Proxy(value, idbProxyTraps);
+  return value;
 }
-function assertTargetManifestTransition(expected, target) {
-  switch (expected.kind) {
-    case "no_current_manifest":
-      if (Number(target.manifestRevision) !== 1) {
-        throw new Error("Initial ECDSA manifest revision must be 1");
-      }
-      return;
-    case "exact_manifest":
-      if (target.manifestId === expected.manifestId || Number(target.manifestRevision) !== Number(expected.manifestRevision) + 1) {
-        throw new Error("Replacement ECDSA manifest must use a fresh id and next revision");
-      }
-      return;
-    default:
-      return assertNever(expected);
+function wrap(value) {
+  if (value instanceof IDBRequest)
+    return promisifyRequest(value);
+  if (transformCache.has(value))
+    return transformCache.get(value);
+  const newValue = transformCachableValue(value);
+  if (newValue !== value) {
+    transformCache.set(value, newValue);
+    reverseTransformCache.set(newValue, value);
   }
+  return newValue;
 }
-function assertExpectedStatePair(expectedManifest, expectedGeneration) {
-  switch (expectedManifest.kind) {
-    case "no_current_manifest":
-      if (expectedGeneration.kind !== "no_current_generation") {
-        throw new Error("Initial ECDSA activation cannot expect a server generation");
-      }
-      return;
-    case "exact_manifest":
-      if (expectedGeneration.kind !== "exact_generation") {
-        throw new Error("Replacement ECDSA activation requires an exact server generation");
-      }
-      return;
-    default:
-      return assertNever(expectedManifest);
+var unwrap = (value) => reverseTransformCache.get(value);
+function openDB(name, version, { blocked, upgrade, blocking, terminated } = {}) {
+  const request = indexedDB.open(name, version);
+  const openPromise = wrap(request);
+  if (upgrade) {
+    request.addEventListener("upgradeneeded", (event) => {
+      upgrade(wrap(request.result), event.oldVersion, event.newVersion, wrap(request.transaction), event);
+    });
   }
-}
-function assertServerCommitMatchesPreparedCommand(serverCommit, journal) {
-  const canonicalRequest = JSON.parse(journal.activationCommand.canonicalRequest);
-  const requestDigestNamesOuterOperation = canonicalRequest.operation === "wallet_registration_activate_v2";
-  if (serverCommit.correlationId !== journal.activationCommand.correlationId || !requestDigestNamesOuterOperation && serverCommit.activationRequestDigest !== journal.activationCommand.requestDigest) {
-    throw new Error("ECDSA server activation commit does not match the prepared command");
+  if (blocked) {
+    request.addEventListener("blocked", (event) => blocked(event.oldVersion, event.newVersion, event));
   }
+  openPromise.then((db) => {
+    if (terminated)
+      db.addEventListener("close", () => terminated());
+    if (blocking) {
+      db.addEventListener("versionchange", (event) => blocking(event.oldVersion, event.newVersion, event));
+    }
+  }).catch(() => {});
+  return openPromise;
 }
-function assertProtocolReceiptMatchesActivationBinding(receipt, activationBinding) {
-  const publicIdentity = receipt.ecdsa_activation.public_identity;
-  const materialActivation = receipt.ecdsa_activation.material_activation;
-  materialActivationFromCommit(receipt);
-  if (publicIdentity.context_binding_b64u !== String(activationBinding.bindingDigest) || publicIdentity.derivation_client_share_public_key33_b64u !== String(activationBinding.roleLocalBinding.clientVerifyingPublicKey33B64u) || materialActivation.material_owner !== String(activationBinding.signer.materialOwner) || materialActivation.key_binding !== String(activationBinding.bindingDigest) || materialActivation.lifecycle_binding !== receipt.lifecycle_id || materialActivation.signing_worker !== receipt.ecdsa_activation.signing_worker.server_id) {
-    throw new Error("ECDSA activation receipt does not match the prepared material binding");
+var readMethods = ["get", "getKey", "getAll", "getAllKeys", "count"];
+var writeMethods = ["put", "add", "delete", "clear"];
+var cachedMethods = new Map;
+function getMethod(target, prop) {
+  if (!(target instanceof IDBDatabase && !(prop in target) && typeof prop === "string")) {
+    return;
+  }
+  if (cachedMethods.get(prop))
+    return cachedMethods.get(prop);
+  const targetFuncName = prop.replace(/FromIndex$/, "");
+  const useIndex = prop !== targetFuncName;
+  const isWrite = writeMethods.includes(targetFuncName);
+  if (!(targetFuncName in (useIndex ? IDBIndex : IDBObjectStore).prototype) || !(isWrite || readMethods.includes(targetFuncName))) {
+    return;
   }
+  const method = async function(storeName, ...args) {
+    const tx = this.transaction(storeName, isWrite ? "readwrite" : "readonly");
+    let target = tx.store;
+    if (useIndex)
+      target = target.index(args.shift());
+    return (await Promise.all([
+      target[targetFuncName](...args),
+      isWrite && tx.done
+    ]))[0];
+  };
+  cachedMethods.set(prop, method);
+  return method;
 }
-function assertProtocolReceiptMatchesServerCommit(receipt, serverCommit) {
-  const receiptRequestDigest = base64UrlEncode(Uint8Array.from(receipt.activation_request_digest.bytes));
-  if (receipt.activation_correlation_id !== serverCommit.correlationId || receiptRequestDigest !== serverCommit.activationRequestDigest || receipt.server_generation !== serverCommit.serverGeneration) {
-    throw new Error("ECDSA activation receipt does not match the server activation commit");
+replaceTraps((oldTraps) => ({
+  ...oldTraps,
+  get: (target, prop, receiver) => getMethod(target, prop) || oldTraps.get(target, prop, receiver),
+  has: (target, prop) => !!getMethod(target, prop) || oldTraps.has(target, prop)
+}));
+var advanceMethodProps = ["continue", "continuePrimaryKey", "advance"];
+var methodMap = {};
+var advanceResults = new WeakMap;
+var ittrProxiedCursorToOriginalProxy = new WeakMap;
+var cursorIteratorTraps = {
+  get(target, prop) {
+    if (!advanceMethodProps.includes(prop))
+      return target[prop];
+    let cachedFunc = methodMap[prop];
+    if (!cachedFunc) {
+      cachedFunc = methodMap[prop] = function(...args) {
+        advanceResults.set(this, ittrProxiedCursorToOriginalProxy.get(this)[prop](...args));
+      };
+    }
+    return cachedFunc;
+  }
+};
+async function* iterate(...args) {
+  let cursor = this;
+  if (!(cursor instanceof IDBCursor)) {
+    cursor = await cursor.openCursor(...args);
+  }
+  if (!cursor)
+    return;
+  cursor = cursor;
+  const proxiedCursor = new Proxy(cursor, cursorIteratorTraps);
+  ittrProxiedCursorToOriginalProxy.set(proxiedCursor, cursor);
+  reverseTransformCache.set(proxiedCursor, unwrap(cursor));
+  while (cursor) {
+    yield proxiedCursor;
+    cursor = await (advanceResults.get(proxiedCursor) || cursor.continue());
+    advanceResults.delete(proxiedCursor);
   }
 }
-function lifecycleIdFromProtocolReceipt(receipt) {
-  return parseEcdsaLifecycleId(receipt.lifecycle_id);
-}
-function activationDigestFromProtocolReceipt(receipt) {
-  return parseEcdsaActivationDigest(receipt.ecdsa_activation.activation_digest_b64u);
-}
-function materialActivationFromCommit(receipt) {
-  return routerAbMpcMaterialActivationRefFromWire(receipt.ecdsa_activation.material_activation);
+function isIteratorProp(target, prop) {
+  return prop === Symbol.asyncIterator && instanceOfAny(target, [IDBIndex, IDBObjectStore, IDBCursor]) || prop === "iterate" && instanceOfAny(target, [IDBIndex, IDBObjectStore]);
 }
-function assertRegisteredPublicFactsMatchBinding(publicFacts, binding, serverActivation) {
-  const receiptPublicIdentity = serverActivation.serverActivationReceipt.protocolReceipt.ecdsa_activation.public_identity;
-  if (String(publicFacts.keyHandle) !== String(binding.keyHandle) || String(publicFacts.publicKeyB64u) !== receiptPublicIdentity.threshold_public_key33_b64u || String(binding.clientVerifyingPublicKey33B64u) !== receiptPublicIdentity.derivation_client_share_public_key33_b64u || !participantIdsMatch(publicFacts.participantIds, binding.participantIds)) {
-    throw new Error("Registered ECDSA public facts do not match role-local material");
+replaceTraps((oldTraps) => ({
+  ...oldTraps,
+  get(target, prop, receiver) {
+    if (isIteratorProp(target, prop))
+      return iterate;
+    return oldTraps.get(target, prop, receiver);
+  },
+  has(target, prop) {
+    return isIteratorProp(target, prop) || oldTraps.has(target, prop);
   }
+}));
+// src/core/indexedDB/seamsWalletDB/schema.ts
+var SEAMS_WALLET_DB_CONFIG = {
+  dbName: SEAMS_WALLET_DB_NAME,
+  dbVersion: SEAMS_WALLET_DB_VERSION
+};
+function keyPathForIndexedDB(keyPath) {
+  return typeof keyPath === "string" ? keyPath : [...keyPath];
 }
-function participantIdsMatch(left, right) {
-  if (left.length !== right.length)
-    return false;
-  return left.every((participantId, index) => Number(participantId) === Number(right[index]));
-}
-function assertServerActivationMatchesBinding(serverActivation, activationBinding) {
-  assertProtocolReceiptMatchesActivationBinding(serverActivation.serverActivationReceipt.protocolReceipt, activationBinding);
+function createCanonicalStore(db, definition) {
+  const store = db.createObjectStore(definition.store, {
+    keyPath: keyPathForIndexedDB(definition.keyPath)
+  });
+  for (const index of definition.indexes) {
+    store.createIndex(index.name, keyPathForIndexedDB(index.keyPath), { unique: index.unique });
+  }
 }
-function assertDurableMaterialMatchesActivation(durableMaterial, activationBinding, serverActivation) {
-  const receipt = serverActivation.serverActivationReceipt;
-  const committedMaterialActivation = materialActivationFromCommit(receipt.protocolReceipt);
-  if (!mpcMaterialActivationRefsEqual(durableMaterial.materialActivation, committedMaterialActivation) || durableMaterial.roleLocalBinding !== activationBinding.roleLocalBinding || durableMaterial.durableMaterialRef !== activationBinding.durableMaterialRef || durableMaterial.bindingDigest !== activationBinding.bindingDigest || durableMaterial.lifecycleId !== receipt.lifecycleId || durableMaterial.activationDigest !== receipt.activationDigest || durableMaterial.activatedAt !== receipt.activatedAt) {
-    throw new Error("Durable ECDSA material does not match its activation");
+function upgradeSeamsWalletDBSchema(db) {
+  for (const definition of SEAMS_WALLET_SCHEMA_MANIFEST) {
+    if (db.objectStoreNames.contains(definition.store))
+      continue;
+    createCanonicalStore(db, definition);
   }
-  assertNormalSigningMatchesActivation({
-    normalSigning: durableMaterial.routerAbEcdsaDerivationNormalSigning,
-    activationBinding,
-    roleLocalPublicFacts: durableMaterial.roleLocalPublicFacts,
-    receipt: receipt.protocolReceipt
-  });
 }
-function routerAbEcdsaPublicIdentitiesEqual(left, right) {
-  return left.context_binding_b64u === right.context_binding_b64u && left.derivation_client_share_public_key33_b64u === right.derivation_client_share_public_key33_b64u && left.server_public_key33_b64u === right.server_public_key33_b64u && left.threshold_public_key33_b64u === right.threshold_public_key33_b64u && left.ethereum_address20_b64u === right.ethereum_address20_b64u && left.client_share_retry_counter === right.client_share_retry_counter && left.server_share_retry_counter === right.server_share_retry_counter;
+// src/core/indexedDB/seamsWalletDB/manager.ts
+var INDEXED_DB_BLOCKED_OPEN_TIMEOUT_MS = 3000;
+var INDEXED_DB_OPEN_TIMEOUT_MS = 8000;
+var INDEXED_DB_TRANSACTION_TIMEOUT_MS = 8000;
+function seamsWalletDbOpenBlockedError(dbName) {
+  return new Error(`[SeamsWalletDBManager] IndexedDB open is blocked for ${dbName}. Close other tabs using this app and retry.`);
 }
-function routerAbServerIdentitiesEqual(left, right) {
-  return left.server_id === right.server_id && left.key_epoch === right.key_epoch && left.recipient_encryption_key === right.recipient_encryption_key;
+function indexedDbTimeoutError(message) {
+  return new Error(message);
 }
-function assertNormalSigningMatchesActivation(input) {
-  const scope = input.normalSigning.scope;
-  const facts = input.roleLocalPublicFacts;
-  const expectedMaterialActivation = materialActivationFromCommit(input.receipt);
-  const expectedMaterialActivationWire = routerAbMpcMaterialActivationRefToWire({
-    kind: expectedMaterialActivation.kind,
-    activationId: expectedMaterialActivation.activationId,
-    capability: expectedMaterialActivation.capability,
-    materialOwner: expectedMaterialActivation.materialOwner,
-    keyBinding: expectedMaterialActivation.keyBinding,
-    lifecycleBinding: expectedMaterialActivation.lifecycleBinding,
-    signingWorker: expectedMaterialActivation.signingWorker
+async function withTimeout(promise, ms, error, onTimeout) {
+  let settled = false;
+  let timeout = null;
+  const timeoutPromise = new Promise((_resolve, reject) => {
+    timeout = setTimeout(() => {
+      if (settled)
+        return;
+      onTimeout?.();
+      reject(error);
+    }, ms);
   });
-  if (scope.wallet_id !== String(input.activationBinding.signer.walletId) || scope.ecdsa_threshold_key_id !== String(input.activationBinding.roleLocalBinding.ecdsaThresholdKeyId) || scope.signing_root_id !== String(input.activationBinding.signer.signingRootId) || scope.signing_root_version !== String(input.activationBinding.signer.signingRootVersion) || scope.context.application_binding_digest_b64u !== input.receipt.ecdsa_activation.context.application_binding_digest_b64u || !routerAbEcdsaPublicIdentitiesEqual(scope.public_identity, input.receipt.ecdsa_activation.public_identity) || !routerAbServerIdentitiesEqual(scope.signing_worker, input.receipt.ecdsa_activation.signing_worker) || scope.activation_epoch !== input.receipt.ecdsa_activation.activation_epoch || scope.public_identity.context_binding_b64u !== facts.contextBinding32B64u || scope.public_identity.derivation_client_share_public_key33_b64u !== facts.derivationClientSharePublicKey33B64u || scope.public_identity.server_public_key33_b64u !== facts.relayerPublicKey33B64u || scope.public_identity.threshold_public_key33_b64u !== facts.groupPublicKey33B64u || !sameRouterAbMpcMaterialActivationRef(scope.material_activation, expectedMaterialActivationWire)) {
-    throw new Error("ECDSA normal-signing runtime does not match its activation");
+  try {
+    return await Promise.race([promise, timeoutPromise]);
+  } finally {
+    settled = true;
+    if (timeout)
+      clearTimeout(timeout);
   }
 }
-function assertValidEcdsaReplacement(active, replacement) {
-  if (active.identity.manifestId === replacement.identity.manifestId || Number(replacement.identity.manifestRevision) !== Number(active.identity.manifestRevision) + 1 || active.signer.capability !== replacement.signer.capability || active.signer.signerId !== replacement.signer.signerId || active.signer.walletId !== replacement.signer.walletId || active.signer.authority.authorityDigest !== replacement.signer.authority.authorityDigest || active.signer.materialOwner !== replacement.signer.materialOwner || active.durableMaterial.durableMaterialRef === replacement.durableMaterial.durableMaterialRef || active.activation.serverActivation.serverGeneration === replacement.activation.serverActivation.serverGeneration) {
-    throw new Error("ECDSA replacement manifest does not exactly replace the active manifest");
-  }
+async function runIndexedDbTransactionTask(context, task) {
+  const result = await task(context);
+  await context.tx.done;
+  return result;
 }
-function assertNever(value) {
-  throw new Error(`Unexpected ECDSA capability branch: ${String(value)}`);
+class SeamsWalletDBManager {
+  constructor(config = SEAMS_WALLET_DB_CONFIG) {
+    this.dbPromise = null;
+    this.disabled = false;
+    this.config = config;
+  }
+  getDbName() {
+    return this.config.dbName;
+  }
+  setDbName(dbName) {
+    if (this.config.dbName === dbName)
+      return;
+    this.close();
+    this.config = { ...this.config, dbName };
+  }
+  setDisabled(disabled) {
+    this.disabled = disabled;
+    if (disabled)
+      this.close();
+  }
+  isDisabled() {
+    return this.disabled;
+  }
+  close() {
+    if (this.dbPromise) {
+      this.dbPromise.then((db) => db.close()).catch(() => {
+        return;
+      });
+      this.dbPromise = null;
+    }
+  }
+  async getDB() {
+    if (this.disabled) {
+      throw new Error("[SeamsWalletDBManager] IndexedDB is disabled in this environment.");
+    }
+    if (!this.dbPromise) {
+      const dbName = this.config.dbName;
+      const dbVersion = this.config.dbVersion;
+      let blockedTimer = null;
+      let rejectBlockedOpen = null;
+      const blockedOpen = new Promise((_resolve, reject) => {
+        rejectBlockedOpen = reject;
+      });
+      const openPromise = openDB(dbName, dbVersion, {
+        upgrade(db) {
+          upgradeSeamsWalletDBSchema(db);
+        },
+        blocked() {
+          console.warn("[SeamsWalletDBManager] IndexedDB open is blocked.", {
+            dbName,
+            dbVersion
+          });
+          blockedTimer = setTimeout(() => {
+            rejectBlockedOpen?.(seamsWalletDbOpenBlockedError(dbName));
+          }, INDEXED_DB_BLOCKED_OPEN_TIMEOUT_MS);
+        },
+        blocking: () => {
+          console.warn("[SeamsWalletDBManager] IndexedDB connection is blocking an upgrade.", {
+            dbName,
+            dbVersion
+          });
+          this.close();
+        },
+        terminated() {
+          console.warn("[SeamsWalletDBManager] IndexedDB connection has been terminated.", {
+            dbName,
+            dbVersion
+          });
+        }
+      });
+      const guardedOpen = withTimeout(Promise.race([openPromise, blockedOpen]).finally(() => {
+        if (blockedTimer)
+          clearTimeout(blockedTimer);
+      }), INDEXED_DB_OPEN_TIMEOUT_MS, indexedDbTimeoutError(`[SeamsWalletDBManager] IndexedDB open timed out for ${dbName}. Close other tabs using this app and retry.`));
+      this.dbPromise = guardedOpen.catch((error) => {
+        this.dbPromise = null;
+        openPromise.then((db) => db.close()).catch(() => {
+          return;
+        });
+        throw error;
+      });
+    }
+    return await this.dbPromise;
+  }
+  async runTransaction(stores, mode, task, options) {
+    const db = await withTimeout(this.getDB(), INDEXED_DB_OPEN_TIMEOUT_MS, indexedDbTimeoutError(`[SeamsWalletDBManager] IndexedDB connection timed out for ${this.config.dbName}. Close other tabs using this app and retry.`));
+    const tx = db.transaction([...stores], mode, options);
+    const context = {
+      db,
+      tx,
+      store(name) {
+        return tx.objectStore(name);
+      }
+    };
+    try {
+      return await withTimeout(runIndexedDbTransactionTask(context, task), INDEXED_DB_TRANSACTION_TIMEOUT_MS, indexedDbTimeoutError(`[SeamsWalletDBManager] IndexedDB transaction timed out for ${this.config.dbName}. Close other tabs using this app and retry.`), () => {
+        try {
+          tx.abort();
+        } catch {}
+      });
+    } catch (error) {
+      try {
+        tx.abort();
+      } catch {}
+      await tx.done.catch(() => {
+        return;
+      });
+      throw error;
+    }
+  }
 }
+// src/core/indexedDB/singletons.ts
+var seamsWalletDB = new SeamsWalletDBManager;
 // src/core/signingEngine/workerManager/ecdsaPresignPoolIdentity.ts
 var FIXED_ECDSA_PRESIGN_PROTOCOL_ID = "seams/router-ab-ecdsa-presign/fixed-2of2/v1";
 function requireIdentityString(value, label) {
@@ -9697,9 +8586,6 @@ function requireNonEmptyCanonicalString(value, label) {
   }
   return value;
 }
-function verifiedClientActivationFactsEqual(left, right) {
-  return left.registrationRequestDigestB64u === right.registrationRequestDigestB64u && left.proofTranscriptDigestB64u === right.proofTranscriptDigestB64u && left.contextBinding32B64u === right.contextBinding32B64u && left.derivationClientSharePublicKey33B64u === right.derivationClientSharePublicKey33B64u && left.clientShareRetryCounter === right.clientShareRetryCounter && left.participantId === right.participantId;
-}
 function requireExactKeys4(record, label, keys) {
   const actual = Object.keys(record).sort();
   const expected = [...keys].sort();
@@ -9766,7 +8652,7 @@ function assertCanonicalRequestMatchesVerifiedCeremony(input) {
       throw new Error("ECDSA activation operation requires an idempotency key");
     }
     const publicFacts = parseRouterAbEcdsaVerifiedClientActivationFactsV1(request.publicFacts);
-    if (!verifiedClientActivationFactsEqual(publicFacts, input.clientActivation)) {
+    if (!sameRouterAbEcdsaVerifiedClientActivationFactsV1(publicFacts, input.clientActivation)) {
       throw new Error("ECDSA activation operation changed the verified client facts");
     }
     return;
@@ -9776,7 +8662,7 @@ function assertCanonicalRequestMatchesVerifiedCeremony(input) {
       throw new Error("ECDSA activation operation changed the activation correlation");
     }
     const publicFacts = parseRouterAbEcdsaVerifiedClientActivationFactsV1(request.publicFacts);
-    if (!verifiedClientActivationFactsEqual(publicFacts, input.clientActivation)) {
+    if (!sameRouterAbEcdsaVerifiedClientActivationFactsV1(publicFacts, input.clientActivation)) {
       throw new Error("ECDSA activation operation changed the verified client facts");
     }
     return;
@@ -9798,7 +8684,7 @@ function assertCanonicalRequestMatchesVerifiedCeremony(input) {
     throw new Error("ECDSA activation commit request changed the prepared request digest");
   }
   const publicFacts = parseRouterAbEcdsaVerifiedClientActivationFactsV1(ecdsa.publicFacts);
-  if (!verifiedClientActivationFactsEqual(publicFacts, input.clientActivation)) {
+  if (!sameRouterAbEcdsaVerifiedClientActivationFactsV1(publicFacts, input.clientActivation)) {
     throw new Error("ECDSA activation commit request changed the verified client facts");
   }
 }
@@ -11327,33 +10213,6 @@ function signWalletRecoveryEcdsaMaterialPossessionProof(request) {
     derivationClientSharePublicKey33B64u
   };
 }
-function collectCanonicalEcdsaLaneSourceMaterials() {
-  const candidates = [];
-  for (const material of ecdsaRoleLocalSigningMaterialStore.values()) {
-    if (!material.materialActivation)
-      continue;
-    if (material.activationBinding.kind !== "strict_router_ab_activation_v1")
-      continue;
-    candidates.push({
-      materialActivation: material.materialActivation,
-      stateBlobB64u: material.stateBlobB64u
-    });
-  }
-  return candidates;
-}
-var ecdsaLaneHolderSessionFactory = {
-  create(stateBlobB64u) {
-    return new EcdsaLaneHolderSessionV1(stateBlobB64u);
-  }
-};
-function prepareEcdsaAdditiveLaneHolder(raw) {
-  const request = parsePrepareEcdsaAdditiveLaneHolderRequestV1(raw);
-  return prepareEcdsaLaneHolderInWorkerV1({
-    request,
-    candidates: collectCanonicalEcdsaLaneSourceMaterials(),
-    sessionFactory: ecdsaLaneHolderSessionFactory
-  });
-}
 function resolveLinkedDeviceEcdsaSourceMaterial(preparation) {
   const matches = [];
   for (const material of ecdsaRoleLocalSigningMaterialStore.values()) {
@@ -11815,7 +10674,6 @@ async function initializeEcdsaDerivationOperationWasm(operationType) {
     case EcdsaDerivationClientCustomRequestType.PrepareThresholdEcdsaDerivationRoleLocalClientBootstrap:
     case EcdsaDerivationClientCustomRequestType.FinalizeThresholdEcdsaDerivationRoleLocalClientBootstrap:
     case EcdsaDerivationClientCustomRequestType.SignWalletRecoveryEcdsaMaterialPossessionProof:
-    case EcdsaDerivationClientCustomRequestType.PrepareEcdsaAdditiveLaneHolder:
     case EcdsaDerivationClientCustomRequestType.PrepareLinkedDeviceEcdsaSourceContribution:
     case EcdsaDerivationClientCustomRequestType.StoreLinkedDeviceEcdsaHolderMaterial:
     case EcdsaDerivationClientCustomRequestType.CreateEcdsaHolderOrdinaryExportRequest:
@@ -11915,11 +10773,6 @@ async function executeEcdsaDerivationRequest(request) {
         type: EcdsaDerivationClientCustomResponseType.FinalizeThresholdEcdsaDerivationRoleLocalClientBootstrapSuccess,
         payload: JSON.parse(finalize_ecdsa_client_bootstrap_v1(JSON.stringify(request.payload)))
       };
-    case EcdsaDerivationClientCustomRequestType.PrepareEcdsaAdditiveLaneHolder:
-      return {
-        type: EcdsaDerivationClientCustomResponseType.PrepareEcdsaAdditiveLaneHolderSuccess,
-        payload: prepareEcdsaAdditiveLaneHolder(request.payload)
-      };
     case EcdsaDerivationClientCustomRequestType.PrepareLinkedDeviceEcdsaSourceContribution:
       return {
         type: EcdsaDerivationClientCustomResponseType.PrepareLinkedDeviceEcdsaSourceContributionSuccess,
@@ -11968,7 +10821,6 @@ function parseEcdsaDerivationOperationType(value) {
     case EcdsaDerivationClientCustomRequestType.SignWalletRecoveryEcdsaMaterialPossessionProof:
     case EcdsaDerivationClientCustomRequestType.PrepareThresholdEcdsaDerivationRoleLocalClientBootstrap:
     case EcdsaDerivationClientCustomRequestType.FinalizeThresholdEcdsaDerivationRoleLocalClientBootstrap:
-    case EcdsaDerivationClientCustomRequestType.PrepareEcdsaAdditiveLaneHolder:
     case EcdsaDerivationClientCustomRequestType.PrepareLinkedDeviceEcdsaSourceContribution:
     case EcdsaDerivationClientCustomRequestType.StoreLinkedDeviceEcdsaHolderMaterial:
     case EcdsaDerivationClientCustomRequestType.DisposeLinkedDeviceEcdsaHolderMaterials:
@@ -12354,12 +11206,6 @@ function parseEcdsaDerivationClientWorkerRequest(value) {
         type: requestType,
         payload: parseGeneratedFinalizeEcdsaClientBootstrapCommand(record.payload)
       };
-    case EcdsaDerivationClientCustomRequestType.PrepareEcdsaAdditiveLaneHolder:
-      return {
-        id: requestId,
-        type: requestType,
-        payload: parsePrepareEcdsaAdditiveLaneHolderRequestV1(record.payload)
-      };
     case EcdsaDerivationClientCustomRequestType.PrepareLinkedDeviceEcdsaSourceContribution:
       return {
         id: requestId,