@seams/wallet 0.7.3 → 0.8.0

package/dist/esm/core/signingEngine/session/authority/authorityOperationResolver.js

@@ -4,69 +4,38 @@ async function resolveWalletAuthorityOperation(input) {
 	const { authMethod, authority } = input.selected;
 	if (authority.state !== "active") return {
 		kind: "rejected",
-		reason: {
-			kind: "authority_not_active",
-			authorityId: authority.authorityId
-		}
+		reason: { kind: "authority_not_active" }
 	};
 	if (authMethod.status !== "active") return {
 		kind: "rejected",
-		reason: {
-			kind: "auth_method_not_active",
-			authMethodId: authMethod.walletAuthMethodId
-		}
+		reason: { kind: "auth_method_not_active" }
 	};
 	if (authority.walletId !== authMethod.walletId) return {
 		kind: "rejected",
-		reason: {
-			kind: "wallet_id_mismatch",
-			authorityWalletId: authority.walletId,
-			authMethodWalletId: authMethod.walletId
-		}
+		reason: { kind: "wallet_id_mismatch" }
 	};
 	if (authority.authorityId !== authMethod.walletAuthorityId) return {
 		kind: "rejected",
-		reason: {
-			kind: "authority_id_mismatch",
-			authorityId: authority.authorityId,
-			authMethodAuthorityId: authMethod.walletAuthorityId
-		}
+		reason: { kind: "authority_id_mismatch" }
 	};
-	const activationDigest = await computeWalletSignerActivationSetDigestB64u(authority.signerActivations);
-	if (activationDigest !== authority.signerActivationSetDigestB64u) return {
+	if (await computeWalletSignerActivationSetDigestB64u(authority.signerActivations) !== authority.signerActivationSetDigestB64u) return {
 		kind: "rejected",
-		reason: {
-			kind: "authority_activation_set_digest_mismatch",
-			authorityId: authority.authorityId,
-			expected: authority.signerActivationSetDigestB64u,
-			actual: activationDigest
-		}
+		reason: { kind: "authority_activation_set_digest_mismatch" }
 	};
-	const authorityDigest = await computeWalletAuthorityDigestB64u(authority);
-	if (authorityDigest !== authority.authorityDigestB64u) return {
+	if (await computeWalletAuthorityDigestB64u(authority) !== authority.authorityDigestB64u) return {
 		kind: "rejected",
-		reason: {
-			kind: "authority_digest_mismatch",
-			authorityId: authority.authorityId,
-			expected: authority.authorityDigestB64u,
-			actual: authorityDigest
-		}
+		reason: { kind: "authority_digest_mismatch" }
 	};
 	const requiredPermission = requiredPermissionForOperation(input.operation);
 	if (!authority.permissions.includes(requiredPermission)) return {
 		kind: "rejected",
-		reason: {
-			kind: "permission_missing",
-			authorityId: authority.authorityId,
-			requiredPermission,
-			operation: input.operation.operation
-		}
+		reason: { kind: "permission_missing" }
 	};
 	switch (input.operation.kind) {
 		case "near_sign":
-		case "near_export": return resolveEd25519Operation(input.operation, authority, authMethod);
+		case "near_export": return resolveEd25519Operation(authority, authMethod);
 		case "evm_sign":
-		case "evm_export": return resolveEcdsaOperation(input.operation, authority, authMethod);
+		case "evm_export": return resolveEcdsaOperation(authority, authMethod);
 		default: return assertNeverOperation(input.operation);
 	}
 }
@@ -79,68 +48,48 @@ function requiredPermissionForOperation(operation) {
 		default: return assertNeverOperation(operation);
 	}
 }
-function resolveEd25519Operation(operation, authority, authMethod) {
+function resolveEd25519Operation(authority, authMethod) {
 	const activation = ed25519Activation(authority.signerActivations);
 	if (activation === null) return {
 		kind: "rejected",
-		reason: {
-			kind: "signer_family_unavailable",
-			authorityId: authority.authorityId,
-			keyFamily: operation.keyFamily
-		}
+		reason: { kind: "signer_family_unavailable" }
 	};
 	if (activation.signer.walletId !== authority.walletId) return {
 		kind: "rejected",
-		reason: {
-			kind: "signer_wallet_id_mismatch",
-			authorityId: authority.authorityId,
-			signerWalletId: activation.signer.walletId
-		}
+		reason: { kind: "signer_wallet_id_mismatch" }
 	};
 	return {
 		kind: "resolved",
 		value: {
 			kind: "resolved",
-			operation: operation.operation,
 			keyFamily: "ed25519",
 			walletId: authority.walletId,
 			authorityId: authority.authorityId,
 			authMethodId: authMethod.walletAuthMethodId,
 			materialActivation: activation.materialActivation,
-			walletKeyId: activation.signer.walletKeyId,
 			registeredPublicKeyB64u: activation.signer.registeredPublicKeyB64u
 		}
 	};
 }
-function resolveEcdsaOperation(operation, authority, authMethod) {
+function resolveEcdsaOperation(authority, authMethod) {
 	const activation = ecdsaActivation(authority.signerActivations);
 	if (activation === null) return {
 		kind: "rejected",
-		reason: {
-			kind: "signer_family_unavailable",
-			authorityId: authority.authorityId,
-			keyFamily: operation.keyFamily
-		}
+		reason: { kind: "signer_family_unavailable" }
 	};
 	if (activation.signer.walletId !== authority.walletId) return {
 		kind: "rejected",
-		reason: {
-			kind: "signer_wallet_id_mismatch",
-			authorityId: authority.authorityId,
-			signerWalletId: activation.signer.walletId
-		}
+		reason: { kind: "signer_wallet_id_mismatch" }
 	};
 	return {
 		kind: "resolved",
 		value: {
 			kind: "resolved",
-			operation: operation.operation,
 			keyFamily: "ecdsa_secp256k1",
 			walletId: authority.walletId,
 			authorityId: authority.authorityId,
 			authMethodId: authMethod.walletAuthMethodId,
 			materialActivation: activation.materialActivation,
-			walletKeyId: activation.signer.walletKeyId,
 			thresholdPublicKey33B64u: activation.signer.thresholdPublicKey33B64u,
 			evmAddress: activation.signer.evmAddress
 		}

package/dist/esm/core/signingEngine/session/emailOtp/EmailOtpWalletSessionCoordinator.js

@@ -44,7 +44,6 @@ var EmailOtpWalletSessionCoordinator = class {
 			prepareEcdsaExportCapability: (request) => this.ecdsaLifecycleRuntime.prepareEcdsaExportCapability(request)
 		});
 		const restoreEcdsaSigningSessionMaterialFromSealedRecord = createEmailOtpEcdsaSigningSessionMaterialRestorer({
-			configs: deps.configs,
 			withThresholdEcdsaSigningQueue: deps.withThresholdEcdsaSigningQueue,
 			getSignerWorkerContext: deps.getSignerWorkerContext,
 			resolveSelectedWalletAuthority: deps.resolveSelectedWalletAuthority,

package/dist/esm/core/signingEngine/session/emailOtp/ecdsaBootstrapCommit.js

@@ -1,6 +1,6 @@
 import { SIGNER_AUTH_METHODS, SIGNER_SOURCES } from "../../../../shared-ts/src/utils/signerDomain.js";
-import { walletSessionAuthorizations } from "../../../indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
 import { ecdsaRoleLocalReadyRecordStorageKeyFacts } from "../persistence/ecdsaRoleLocalRecords.js";
+import { walletSessionAuthorizations } from "../../../indexedDB/seamsWalletDB/walletSessionAuthorizationStore.js";
 import { persistExactWalletSessionAuthorizationFromEcdsaBootstrap } from "../persistence/walletSessionAuthorizationProjection.js";
 import { withThresholdEcdsaBootstrapQueue } from "../warmCapabilities/ecdsaBootstrapQueue.js";
 import { persistThresholdEcdsaBootstrapForWalletTarget } from "../warmCapabilities/ecdsaBootstrapPersistence.js";

package/dist/esm/core/signingEngine/session/emailOtp/ecdsaLifecycleRuntime.js

@@ -6,7 +6,6 @@ var EmailOtpEcdsaLifecycleRuntime = class {
 	}
 	async loginWithEcdsaCapabilityForSigning(args) {
 		return await loginWithEmailOtpEcdsaCapabilityForSigning(args, {
-			requireRelayUrl: () => this.ports.runtimeConfig.requireRelayUrl(),
 			resolveCurrentEcdsaCapabilityRuntime: this.ports.resolveCurrentEcdsaCapabilityRuntime,
 			loginWithEcdsaCapabilityInternal: (request) => this.loginWithEcdsaCapabilityInternal(request)
 		});
@@ -23,7 +22,6 @@ var EmailOtpEcdsaLifecycleRuntime = class {
 			requireSigningSessionSealGroupId: () => this.ports.runtimeConfig.requireSigningSessionSealGroupId(),
 			ownerLaneScopeStores: this.ports.ownerLaneScopeStores,
 			resolveSelectedWalletAuthority: this.ports.resolveSelectedWalletAuthority,
-			resolveCurrentEcdsaCapabilityRuntime: this.ports.resolveCurrentEcdsaCapabilityRuntime,
 			publicationPorts: this.ports.publicationPorts()
 		});
 	}
@@ -39,7 +37,6 @@ var EmailOtpEcdsaLifecycleRuntime = class {
 			requireSigningSessionSealGroupId: () => this.ports.runtimeConfig.requireSigningSessionSealGroupId(),
 			ownerLaneScopeStores: this.ports.ownerLaneScopeStores,
 			resolveSelectedWalletAuthority: this.ports.resolveSelectedWalletAuthority,
-			resolveCurrentEcdsaCapabilityRuntime: this.ports.resolveCurrentEcdsaCapabilityRuntime,
 			publicationPorts: this.ports.publicationPorts()
 		});
 	}

package/dist/esm/core/signingEngine/session/emailOtp/ecdsaLogin.js

@@ -829,10 +829,7 @@ async function runEmailOtpEcdsaCapability(args, ports) {
 			ttlMs: args.ttlMs,
 			remainingUses
 		}) : resolveEmailOtpLoginSigningBudget({
-			ecdsaResult: workerResult,
 			ed25519YaoResult,
-			emailOtpAuthPolicy,
-			routePlan,
 			requestedTtlMs: args.ttlMs,
 			requestedRemainingUses: remainingUses
 		});
@@ -849,10 +846,7 @@ async function runEmailOtpEcdsaCapability(args, ports) {
 			addEmailOtpThresholdEcdsaLoginTiming(timings, "ecdsaMaterialRestoreMs", timingStartedAtMs);
 			return {
 				kind: "transient_export",
-				value: {
-					bootstrap,
-					timings
-				}
+				value: { bootstrap }
 			};
 		}
 		const bootstraps = await provisionEmailOtpExistingKeySessions({

package/dist/esm/core/signingEngine/session/emailOtp/ecdsaRecovery.js

@@ -1,11 +1,11 @@
 import { mpcMaterialActivationRefsEqual } from "../../../../shared-ts/src/utils/domainIds.js";
 import { thresholdEcdsaChainTargetsEqual, toWalletId } from "../../interfaces/ecdsaChainTarget.js";
-import { parseSdkEcdsaDerivationSigningRootId, parseSdkEcdsaDerivationSigningRootVersion, parseSdkEcdsaDerivationThresholdKeyId } from "../../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import { buildEvmFamilyEcdsaWalletKey } from "../identity/evmFamilyEcdsaIdentity.js";
+import { parseSdkEcdsaDerivationSigningRootId, parseSdkEcdsaDerivationSigningRootVersion, parseSdkEcdsaDerivationThresholdKeyId } from "../../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import { parseSigningSessionSealKeyVersion } from "../../../../shared-ts/src/threshold/keyMaterialBrands.js";
 import { walletAuthAuthorityRef } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
-import { parseEmailOtpWorkerIssuedSessionHandle } from "../../../platform/secretSources.js";
 import { buildEcdsaRoleLocalPublicFacts } from "../persistence/ecdsaRoleLocalRecords.js";
+import { parseEmailOtpWorkerIssuedSessionHandle } from "../../../platform/secretSources.js";
 import { buildEmailOtpAuthContextForWalletAuthMethod, emailOtpAuthContextProviderUserId, emailOtpAuthContextRetention } from "../identity/laneIdentity.js";
 import { resolveThresholdCommitQueueKey } from "../../threshold/commitQueueShared.js";
 import { buildCanonicalEvmFamilyEcdsaSigningCapability, buildExactEvmFamilyWalletSessionAuthorization } from "../material/ecdsaSigningCapability.js";
@@ -100,8 +100,6 @@ function buildSealedRecordEmailOtpEcdsaRestoreSource(args) {
 		relayerUrl: sealedRecord.relayerUrl,
 		chainTarget: sealedRecord.chainTarget,
 		keyHandle: sealedRecord.keyHandle,
-		relayerKeyId: sealedRecord.relayerKeyId,
-		participantIds: [...sealedRecord.participantIds],
 		...transport,
 		...sealedRecord.runtimePolicyScope ? { runtimePolicyScope: sealedRecord.runtimePolicyScope } : {}
 	};
@@ -247,17 +245,15 @@ async function restoreEmailOtpEcdsaSigningSessionMaterialFromSealedRecordInQueue
 		authority: existingKey.persistedRoleLocalMaterial.authority,
 		emailOtpAuthContext: restoreSource.emailOtpAuthContext
 	});
-	const committedAuthorization = buildExactEvmFamilyWalletSessionAuthorization({
-		capability,
-		selected,
-		session: committed.bootstrap.session.walletSession,
-		operationCredential: committed.bootstrap.session.operationCredential,
-		runtime: currentBeforeCommit.runtime,
-		nowMs: Date.now()
-	});
 	return {
-		bootstrap: committed.bootstrap,
-		authorization: committedAuthorization,
+		authorization: buildExactEvmFamilyWalletSessionAuthorization({
+			capability,
+			selected,
+			session: committed.bootstrap.session.walletSession,
+			operationCredential: committed.bootstrap.session.operationCredential,
+			runtime: currentBeforeCommit.runtime,
+			nowMs: Date.now()
+		}),
 		remainingUses: committed.bootstrap.session.remainingUses,
 		expiresAtMs: committed.bootstrap.session.expiresAtMs
 	};

package/dist/esm/core/signingEngine/session/emailOtp/ed25519ExportContext.js

@@ -311,7 +311,6 @@ async function resolveWalletCustodyEd25519ExportContextV1(input) {
 		return {
 			kind: "wallet_custody_ed25519_export_context_v1",
 			lane: input.subject,
-			selectedLaneMaterialActivation: input.expectedMaterialActivation,
 			authorization: exactAuthorization,
 			material: {
 				kind: "sealed_export_root",
@@ -326,7 +325,6 @@ async function resolveWalletCustodyEd25519ExportContextV1(input) {
 		return {
 			kind: "wallet_custody_ed25519_export_context_v1",
 			lane: input.subject,
-			selectedLaneMaterialActivation: input.expectedMaterialActivation,
 			authorization: exactAuthorization,
 			material: {
 				kind: "active_capability",
@@ -348,7 +346,6 @@ async function resolveWalletCustodyEd25519ExportContextV1(input) {
 	return {
 		kind: "wallet_custody_ed25519_export_context_v1",
 		lane: input.subject,
-		selectedLaneMaterialActivation: input.expectedMaterialActivation,
 		authorization: exactAuthorization,
 		material: {
 			kind: "sealed_custody",

package/dist/esm/core/signingEngine/session/emailOtp/exportRecovery.js

@@ -63,7 +63,6 @@ async function requestTransactionSigningChallenge(ports, args) {
 	return args.kind === "near_account_challenge" ? await requestEmailOtpChallengeWithRoutePlan(ports, {
 		kind: "near_account",
 		walletSession: args.walletSession,
-		nearAccountId: args.nearAccountId,
 		routePlan,
 		...args.operationFingerprintDigest ? { operationFingerprintDigest: args.operationFingerprintDigest } : {}
 	}) : args.kind === "wallet_export_challenge" ? await requestEmailOtpChallengeWithRoutePlan(ports, {
@@ -99,7 +98,6 @@ async function requestExportChallenge(ports, args) {
 	return args.kind === "near_account_challenge" ? await requestEmailOtpChallengeWithRoutePlan(ports, {
 		kind: "near_account",
 		walletSession: args.walletSession,
-		nearAccountId: args.nearAccountId,
 		routePlan
 	}) : args.kind === "wallet_export_challenge" ? await requestEmailOtpChallengeWithRoutePlan(ports, {
 		kind: "wallet_session",

package/dist/esm/core/signingEngine/session/identity/clientSessionPersistenceState.js

@@ -21,8 +21,7 @@ function authorizationIdentity(source) {
 function invalidAuthorization(args) {
 	return {
 		kind: "invalid",
-		...authorizationIdentity(args.source),
-		reason: args.reason
+		...authorizationIdentity(args.source)
 	};
 }
 function parseBoundaryTime(value) {
@@ -45,10 +44,7 @@ function requireAuthoritativeExpiredWalletSessionAuthorizationBoundary(args) {
 }
 function parseFoundAuthorization(args) {
 	const expiresAtMs = parseBoundaryTime(args.observation.expiresAtMs);
-	if (expiresAtMs === null || expiresAtMs === 0) return invalidAuthorization({
-		source: args.observation.source,
-		reason: "malformed"
-	});
+	if (expiresAtMs === null || expiresAtMs === 0) return invalidAuthorization({ source: args.observation.source });
 	const identity = authorizationIdentity(args.observation.source);
 	if (expiresAtMs <= args.nowMs) return {
 		kind: "expired",
@@ -64,10 +60,7 @@ function parseFoundAuthorization(args) {
 }
 function parseWalletSessionAuthorizationBoundary(args) {
 	const nowMs = parseBoundaryTime(args.nowMs);
-	if (nowMs === null) return invalidAuthorization({
-		source: args.observation.source,
-		reason: "malformed"
-	});
+	if (nowMs === null) return invalidAuthorization({ source: args.observation.source });
 	switch (args.observation.kind) {
 		case "found": return parseFoundAuthorization({
 			observation: args.observation,
@@ -79,13 +72,9 @@ function parseWalletSessionAuthorizationBoundary(args) {
 		};
 		case "unavailable": return {
 			kind: "unavailable",
-			...authorizationIdentity(args.observation.source),
-			reason: args.observation.reason
+			...authorizationIdentity(args.observation.source)
 		};
-		case "invalid": return invalidAuthorization({
-			source: args.observation.source,
-			reason: args.observation.reason
-		});
+		case "invalid": return invalidAuthorization({ source: args.observation.source });
 		default: return args.observation;
 	}
 }

package/dist/esm/core/signingEngine/session/identity/evmFamilyEcdsaIdentity.js

@@ -204,7 +204,6 @@ function buildHydratedEcdsaSignerMaterial(input) {
 		walletId: input.walletId,
 		materialActivation: input.materialActivation,
 		publicFacts: input.publicFacts,
-		chainTarget: input.chainTarget,
 		transport: input.transport,
 		clientShare: input.clientShare,
 		routerAbEcdsaDerivationNormalSigning: input.routerAbEcdsaDerivationNormalSigning

package/dist/esm/core/signingEngine/session/identity/exactSigningLaneIdentity.js

@@ -1,6 +1,6 @@
 import { parseMpcMaterialActivationRef } from "../../../../shared-ts/src/utils/domainIds.js";
-import { isImplicitNearAccountId, parseNearAccountId } from "../../../../shared-ts/src/utils/near.js";
 import { alphabetizeStringify } from "../../../../shared-ts/src/utils/digests.js";
+import { isImplicitNearAccountId, parseNearAccountId } from "../../../../shared-ts/src/utils/near.js";
 import { buildImplicitNearAccountBinding, buildNamedNearAccountBinding, buildNearEd25519SignerBinding, buildWalletIdentity, nearEd25519SignerBindingFromRaw } from "../../../../shared-ts/src/utils/walletCapabilityBindings.js";
 import { thresholdEcdsaChainTargetFromRequest, thresholdEcdsaChainTargetKey, toWalletId } from "../../interfaces/ecdsaChainTarget.js";
 import { SigningSessionIds } from "../operationState/types.js";

package/dist/esm/core/signingEngine/session/identity/exactWalletSessionCredential.js

@@ -90,8 +90,6 @@ async function resolveExactWalletSessionOperationCredential(args) {
 	return {
 		kind: "resolved",
 		resolved: {
-			walletId: input.walletId,
-			authority: selected.authority,
 			authMethod: selected.authMethod,
 			session,
 			operationCredential,

package/dist/esm/core/signingEngine/session/material/activeWalletAuthorityEcdsaRuntime.js

@@ -1,9 +1,9 @@
 import { mpcMaterialActivationRefsEqual } from "../../../../shared-ts/src/utils/domainIds.js";
 import { base64UrlDecode } from "../../../../shared-ts/src/utils/base64.js";
 import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
-import { computeEcdsaDerivationRoleLocalRelayerKeyId } from "../../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import { buildBaseEvmFamilyEcdsaKeyIdentity, buildPasskeyEcdsaAuthBinding, buildResolvedEvmFamilyEcdsaKey, buildVerifiedEcdsaPublicFacts, deriveEvmFamilyEcdsaKeyHandle, toRpId, toThresholdOwnerAddress } from "../identity/evmFamilyEcdsaIdentity.js";
 import { routerAbMpcMaterialActivationRefFromWire } from "../../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
+import { computeEcdsaDerivationRoleLocalRelayerKeyId } from "../../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import { isEmailOtpWalletAuthAuthority, isPasskeyWalletAuthAuthority, walletAuthAuthorityRef } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { sameRouterAbEcdsaDerivationNormalSigningScopeV1 } from "../../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
 import { sameEcdsaSourceSigner, sameEcdsaTarget } from "../../../../shared-ts/src/device-linking/sourceContribution.js";
@@ -39,7 +39,6 @@ function exactAuthorityResolution(value) {
 	if (value.authMethod.status !== "active") return blocked("auth_method_inactive");
 	if (value.authority.state !== "active") return blocked("authority_inactive");
 	return {
-		selection: value.selection,
 		authMethod: value.authMethod,
 		authority: value.authority,
 		signerMaterials: value.signerMaterials

package/dist/esm/core/signingEngine/session/material/ecdsaCapabilityManifest.js

@@ -2,8 +2,8 @@ import { mpcMaterialActivationRefsEqual } from "../../../../shared-ts/src/utils/
 import { base64UrlEncode } from "../../../../shared-ts/src/utils/base64.js";
 import { isoTimestampFromUnixMs } from "../../../../shared-ts/src/utils/canonicalPrimitives.js";
 import { deriveSigningRootId, normalizeRuntimePolicyScope } from "../../../../shared-ts/src/threshold/signingRootScope.js";
-import { parseEcdsaActivationDigest, parseEcdsaLifecycleId } from "../../../../shared-ts/src/utils/ecdsaCapabilityActivation.js";
 import { routerAbMpcMaterialActivationRefFromWire, routerAbMpcMaterialActivationRefToWire, sameRouterAbMpcMaterialActivationRef } from "../../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
+import { parseEcdsaActivationDigest, parseEcdsaLifecycleId } from "../../../../shared-ts/src/utils/ecdsaCapabilityActivation.js";
 import { parseRouterAbEcdsaRegistrationActivationReceiptV1, sameRegistrationRecipientKeys, sameRegistrationSignerSet, sameRouterAbEcdsaDerivationPublicIdentityV1, sameRouterAbServerIdentityV1 } from "../../../../shared-ts/src/utils/routerAbEcdsaDerivation.js";
 //#region src/core/signingEngine/session/material/ecdsaCapabilityManifest.ts
 var EcdsaCapabilityManifestProof = class {

package/dist/esm/core/signingEngine/session/material/ecdsaRoleLocalMaterialResolver.js

@@ -15,7 +15,6 @@ function errorMessage(error) {
 function corruptResolution(args) {
 	return {
 		kind: "corrupt",
-		purpose: args.purpose,
 		reason: args.reason,
 		message: args.message
 	};
@@ -24,21 +23,17 @@ function resolutionFromRehydrationFailure(args) {
 	switch (args.failure.reason) {
 		case "missing": return {
 			kind: "device_link_required",
-			purpose: args.purpose,
 			reason: "missing_local_material"
 		};
 		case "expired": return corruptResolution({
-			purpose: args.purpose,
 			reason: "expired",
 			message: "ECDSA role-local persisted material has expired"
 		});
 		case "binding_mismatch": return corruptResolution({
-			purpose: args.purpose,
 			reason: "binding_mismatch",
 			message: "ECDSA role-local persisted material binding does not match its public facts"
 		});
 		case "corrupt": return corruptResolution({
-			purpose: args.purpose,
 			reason: "corrupt_persistence",
 			message: "ECDSA role-local persisted material is corrupt"
 		});
@@ -74,7 +69,6 @@ async function resolveEcdsaRoleLocalMaterial(input) {
 	switch (input.source.kind) {
 		case "unavailable": return {
 			kind: "device_link_required",
-			purpose: input.purpose,
 			reason: input.source.reason
 		};
 		case "persisted": try {
@@ -83,29 +77,22 @@ async function resolveEcdsaRoleLocalMaterial(input) {
 				materialActivation: input.source.materialActivation,
 				workerCtx: input.workerCtx
 			});
-			if (!rehydrated.ok) return resolutionFromRehydrationFailure({
-				purpose: input.purpose,
-				failure: rehydrated
-			});
+			if (!rehydrated.ok) return resolutionFromRehydrationFailure({ failure: rehydrated });
 			if (!mpcMaterialActivationRefsEqual(rehydrated.materialRef.materialActivation, input.source.materialActivation) || !materialRefMatchesPublicFacts(rehydrated.materialRef, input.source.publicFacts)) return corruptResolution({
-				purpose: input.purpose,
 				reason: "worker_identity_mismatch",
 				message: "ECDSA role-local worker restored a different material identity"
 			});
 			if (!liveHandleMatchesMaterialRef(rehydrated.liveHandle, rehydrated.materialRef)) return corruptResolution({
-				purpose: input.purpose,
 				reason: "worker_identity_mismatch",
 				message: "ECDSA role-local worker restored a different durable material"
 			});
 			return {
 				kind: "rehydrated",
-				purpose: input.purpose,
 				liveHandle: rehydrated.liveHandle,
 				materialRef: rehydrated.materialRef
 			};
 		} catch (error) {
 			return corruptResolution({
-				purpose: input.purpose,
 				reason: "persistence_unavailable",
 				message: errorMessage(error)
 			});

package/dist/esm/core/signingEngine/session/operationState/preparedOperation.js

@@ -1,10 +1,7 @@
 import { signingLaneAuthMethod } from "../identity/signingLaneAuthBinding.js";
 //#region src/core/signingEngine/session/operationState/preparedOperation.ts
 async function prepareThresholdSigningOperation(args) {
-	const lifecycle = await args.lifecycleAdapter.prepare({
-		intent: args.intent,
-		...args.operation ? { operation: args.operation } : {}
-	});
+	const lifecycle = await args.lifecycleAdapter.prepare({ ...args.operation ? { operation: args.operation } : {} });
 	if (lifecycle.lane.curve !== lifecycle.readiness.readiness.curve) throw new Error("[SigningSession] prepared lane and readiness curves do not match");
 	const coordinatorInput = {
 		lane: lifecycle.lane,
@@ -19,7 +16,6 @@ async function prepareThresholdSigningOperation(args) {
 	};
 	const resolved = await args.coordinator.resolveAuthPlanFromReadiness(coordinatorInput, args.onPlannerTrace);
 	return {
-		intent: args.intent,
 		...args.operation ? { operation: args.operation } : {},
 		lane: lifecycle.lane,
 		authMethod: signingLaneAuthMethod(lifecycle.lane.auth),

package/dist/esm/core/signingEngine/session/passkey/ecdsaBootstrap.js

@@ -74,8 +74,7 @@ function toActivateEcdsaSessionRequest(request, relayerUrl) {
 			existingRoleLocalMaterial: exactRequest.existingRoleLocalMaterial,
 			...exactRequest.requestId ? { requestId: exactRequest.requestId } : {},
 			...auth,
-			...walletSessionRouteAuth ? { walletSessionRouteAuth } : {},
-			runtimeScopeBootstrap: exactRequest.runtimeScopeBootstrap
+			...walletSessionRouteAuth ? { walletSessionRouteAuth } : {}
 		};
 	};
 	const preauthorizedExactSessionRequest = (exactRequest) => ({
@@ -90,8 +89,7 @@ function toActivateEcdsaSessionRequest(request, relayerUrl) {
 		...exactRequest.requestId ? { requestId: exactRequest.requestId } : {},
 		authKind: "passkey",
 		passkeyCredentialIdB64u: exactRequest.passkeyCredentialIdB64u,
-		preauthorizedSessionActivation: exactRequest.sessionActivation,
-		runtimeScopeBootstrap: exactRequest.runtimeScopeBootstrap
+		preauthorizedSessionActivation: exactRequest.sessionActivation
 	});
 	switch (request.kind) {
 		case "passkey_fresh_ecdsa_bootstrap": return exactSessionRequest(request, request.routeAuth, {
@@ -119,8 +117,7 @@ function toActivateEcdsaSessionRequest(request, relayerUrl) {
 				existingRoleLocalMaterial: request.existingRoleLocalMaterial,
 				...request.requestId ? { requestId: request.requestId } : {},
 				...auth,
-				preauthorizedSessionActivation: request.sessionActivation,
-				runtimeScopeBootstrap: request.runtimeScopeBootstrap
+				preauthorizedSessionActivation: request.sessionActivation
 			} : exactSessionRequest(request, request.routeAuth, auth);
 		}
 	}

package/dist/esm/core/signingEngine/session/passkey/ecdsaKeyFactsInventory.js

@@ -105,7 +105,6 @@ function parseProfileContinuityEcdsaWarmKey(args) {
 		reason: keyHandleResolution.reason
 	};
 	const walletKey = parseProfileContinuityEvmFamilyEcdsaWalletKey({
-		walletId: args.walletId,
 		metadata,
 		keyHandle: keyHandleResolution.keyHandle,
 		chainTarget

package/dist/esm/core/signingEngine/session/passkey/ecdsaRecovery.js

@@ -18,10 +18,7 @@ async function checkCurrentPasskeyEcdsaRuntime(args) {
 		walletId: toWalletId(args.record.walletId),
 		chainTarget: args.record.chainTarget
 	});
-	if (resolution.kind === "resolved" && mpcMaterialActivationRefsEqual(resolution.runtime.materialActivation, args.record.roleLocalMaterialRef.materialActivation)) return {
-		kind: "current",
-		resolution
-	};
+	if (resolution.kind === "resolved" && mpcMaterialActivationRefsEqual(resolution.runtime.materialActivation, args.record.roleLocalMaterialRef.materialActivation)) return { kind: "current" };
 	return {
 		kind: "superseded",
 		status: {

package/dist/esm/core/signingEngine/session/passkey/ed25519SessionProvision.js

@@ -108,7 +108,6 @@ async function provisionThresholdEd25519Session(deps, args) {
 		touchIdPrompt: deps.touchIdPrompt,
 		relayerUrl,
 		relayerKeyId: args.relayerKeyId,
-		walletId: protocol.walletId,
 		nearEd25519SigningKeyId: protocol.nearEd25519SigningKeyId,
 		authority: args.authority,
 		...args.auth ? { auth: args.auth } : {},

package/dist/esm/core/signingEngine/session/passkey/ed25519YaoLocalMaterial.js

@@ -1,8 +1,8 @@
 import { mpcMaterialActivationRefsEqual, parseMpcMaterialActivationRef, parseThresholdEd25519SessionId } from "../../../../shared-ts/src/utils/domainIds.js";
-import { base58Encode } from "../../../../shared-ts/src/utils/base58.js";
 import { asRecord } from "../../../../shared-ts/src/utils/validation.js";
 import { base64UrlDecode, base64UrlEncode } from "../../../../shared-ts/src/utils/base64.js";
 import { requireRouterAbEd25519NormalSigningState } from "../../../../shared-ts/src/utils/signingSessionSeal.js";
+import { base58Encode } from "../../../../shared-ts/src/utils/base58.js";
 import { normalizeThresholdRuntimePolicyScope } from "../../threshold/sessionPolicy.js";
 import { routerAbMpcMaterialActivationRefToWire } from "../../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
 import { ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1, RouterAbEd25519YaoClientV1 } from "../../threshold/ed25519/yaoClient.js";
@@ -466,8 +466,7 @@ async function hydratePasskeyEd25519YaoLocalMaterialV1(input) {
 			if (!material || material.activeClient.status().kind !== "active" || !mpcMaterialActivationRefsEqual(plan.materialActivation, nearEd25519YaoMaterialActivationFromMetadata(material.activeClient.metadata()))) throw new Error("Near Ed25519 live hydration plan lost its exact runtime");
 			return {
 				kind: "live",
-				plan,
-				material
+				plan
 			};
 		}
 		case "rehydrate_material_activation": {