@seams/wallet 0.8.0 → 0.9.0

package/dist/esm/core/indexedDB/seamsWalletDB/repositories.js

@@ -1,36 +1,38 @@
-import { mpcMaterialActivationRefsEqual, parseMpcMaterialActivationRef, parseVerifiedEmailAddress, parseWalletAuthMethodId, parseWalletAuthorityId, parseWalletId, parseWalletKeyId, parseWalletRecoveryOperationId, parseWebAuthnCredentialIdB64u, parseWebAuthnRpId } from "../../../shared-ts/src/utils/domainIds.js";
 import { normalizeTrimmedString } from "../../../shared-ts/src/utils/normalize.js";
 import { sameDelegatedWalletAuthorityV1 } from "../../../shared-ts/src/authorization/delegatedAuthority.js";
+import { mpcMaterialActivationRefsEqual, parseMpcMaterialActivationRef, parseVerifiedEmailAddress, parseWalletAuthMethodId, parseWalletAuthorityId, parseWalletId, parseWalletKeyId, parseWalletRecoveryOperationId, parseWebAuthnCredentialIdB64u, parseWebAuthnRpId } from "../../../shared-ts/src/utils/domainIds.js";
 import { base64UrlDecode, base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
 import { sha256HexUtf8 } from "../../../shared-ts/src/utils/digests.js";
 import { parseDigestB64u } from "../../../shared-ts/src/utils/canonicalPrimitives.js";
 import { parseEd25519PublicKeyB64u } from "../../../shared-ts/src/passkey-custody/primitives.js";
 import { walletSessionPreservesCapabilities } from "../../../shared-ts/src/device-linking/activeWalletSession.js";
+import { isEmailOtpWalletAuthAuthority, isPasskeyWalletAuthAuthority, parseEmailOtpWalletAuthAuthority, parseWalletAuthAuthority, walletAuthAuthoritiesMatch } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
+import { parseWalletAuthMethodRecordV2 } from "../../../shared-ts/src/utils/walletAuthMethodRecord.js";
+import { encodeWalletSignerActivationSetV1, extendEcdsaWalletAuthorityWithEd25519, isActiveEcdsaWalletAuthorityV1, isActiveRecoveredWalletAuthorityV1, isEcdsaExtensionOfEd25519WalletAuthority, parseWalletAuthorityV1, walletAuthorityDigestsMatchV1 } from "../../../shared-ts/src/authorization/walletAuthority.js";
+import { parseLocalAuthorityInstallationReceiptV1 } from "../../../shared-ts/src/device-linking/authorityActivation.js";
+import "../../../shared-ts/src/device-linking/index.js";
 import { toAccountId } from "../../types/accountIds.js";
 import { SIGNER_KINDS } from "../../../shared-ts/src/utils/signerDomain.js";
 import { parseNearProvisioningState } from "../../types/sdkSentEvents.js";
+import { parseEcdsaThresholdKeyId } from "../../signingEngine/session/keyMaterialBrands.js";
 import { walletIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
-import { thresholdEcdsaChainTargetFromRequest } from "../../signingEngine/interfaces/ecdsaChainTarget.js";
-import { upsertEd25519YaoPublicCapabilityReferenceInTransaction } from "../../signingEngine/threshold/ed25519/yaoPublicCapabilityReferences.js";
+import { SEAMS_WALLET_INDEXES, SEAMS_WALLET_STORES } from "../schemaNames.js";
+import { normalizeIndexedDbAccountAddress, normalizeIndexedDbAccountModel, normalizeIndexedDbChainIdKey, normalizeLastUserScope, parseStoredNonEmptyString, signerChainTargetKey, toIndexedDbChainTargetKey } from "../normalization.js";
+import { buildNearProfileId } from "../../accountData/near/profileId.js";
 import { parsePasskeyCustodyEnvelopeRecord, sameWalletCustodyEnvelopeOwnership } from "../../../shared-ts/src/passkey-custody/custodyEnvelope.js";
 import "../../../shared-ts/src/passkey-custody/index.js";
-import { parseEcdsaThresholdKeyId } from "../../signingEngine/session/keyMaterialBrands.js";
-import { isEmailOtpWalletAuthAuthority, isPasskeyWalletAuthAuthority, parseEmailOtpWalletAuthAuthority, parseWalletAuthAuthority, walletAuthAuthoritiesMatch } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { buildEnvelopeAAD, normalizePayloadEnvelope, sanitizePayload } from "../keyMaterialEnvelope.js";
-import { SEAMS_WALLET_INDEXES, SEAMS_WALLET_STORES } from "../schemaNames.js";
-import { persistPreparedImportedWalletCustodyEcdsaContinuityInTransaction } from "./ecdsaCapabilityManifestStore.js";
-import { buildNearProfileId } from "../../accountData/near/profileId.js";
-import { parseWalletAuthMethodRecordV2 } from "../../../shared-ts/src/utils/walletAuthMethodRecord.js";
-import { encodeWalletSignerActivationSetV1, extendEcdsaWalletAuthorityWithEd25519, isActiveEcdsaWalletAuthorityV1, isActiveRecoveredWalletAuthorityV1, isEcdsaExtensionOfEd25519WalletAuthority, parseWalletAuthorityV1, walletAuthorityDigestsMatchV1 } from "../../../shared-ts/src/authorization/walletAuthority.js";
-import { parseLocalAuthorityInstallationReceiptV1 } from "../../../shared-ts/src/device-linking/authorityActivation.js";
-import "../../../shared-ts/src/device-linking/index.js";
 import { parseWalletAuthorityLinkedSignerMaterialRecordV1 } from "../linkedAuthoritySignerMaterial.js";
 import { planAccountSignerActivation } from "../accountSignerLifecycle.js";
-import { normalizeIndexedDbAccountAddress, normalizeIndexedDbAccountModel, normalizeIndexedDbChainIdKey, normalizeLastUserScope, toIndexedDbChainTargetKey } from "../normalization.js";
 import { parseLastProfileState } from "../lastProfileState.js";
 import { assertPendingWalletRegistrationIdentity, buildPendingWalletRegistrationCommitV1, parsePendingWalletRegistrationCommitAppStateRow, pendingWalletRegistrationCommitAppStateKey, splitPersistedMixedRegistrationRow, toPendingWalletRegistrationCommitAppStateRow } from "../pendingWalletRegistrationCommit.js";
 import { buildPendingWalletRecoveryCommitV1, parsePendingWalletRecoveryCommitAppStateRow, pendingWalletRecoveryCommitAppStateKey, pendingWalletRecoveryCommitAppStateRowsMatch, pendingWalletRecoveryCommitIdentityMatches, toPendingWalletRecoveryCommitAppStateRow } from "../pendingWalletRecoveryCommit.js";
 import { parseStoredExactWalletSessionAuthorizationRowV6, readExactActiveWalletSessionForScopeInTransaction, replaceExactActiveWalletSessionAuthorizationInTransaction, toStoredExactWalletSessionAuthorizationRowV6 } from "./walletSessionAuthorizationStore.js";
+import { persistPreparedImportedWalletCustodyEcdsaContinuityInTransaction } from "./ecdsaCapabilityManifestStore.js";
+import { upsertEd25519YaoPublicCapabilityReferenceInTransaction } from "../../signingEngine/threshold/ed25519/yaoPublicCapabilityReferences.js";
+import { nonceLeaseRow, parseNonceLaneLockRow, parseNonceLeaseRow } from "./nonceLeaseRows.js";
+import { parseSignerOutboxRow, signerOutboxRow } from "./signerOutboxRows.js";
+import { accountSignerRow, chainAccountProjectionId, chainAccountProjectionRow, normalizeEcdsaChainTargetKey, parseAccountSignerRow, parseChainAccountProjectionRow, walletSignerId } from "./accountSignerRows.js";
 //#region src/core/indexedDB/seamsWalletDB/repositories.ts
 function assertNever(value) {
 	throw new Error(`Unhandled wallet auth method branch: ${String(value)}`);
@@ -129,12 +131,6 @@ function assertPendingWalletRecoveryPublicationMatchesProjection(input) {
 	const localAuthority = parseEmailOtpWalletAuthAuthority(initialMethod.authority);
 	if (!localAuthority || localAuthority.walletId !== projection.walletId || localAuthority.factor.provider !== "google" || localAuthority.factor.providerUserId !== projection.target.providerSubject || localAuthority.verifier.emailHashHex !== projection.target.emailHashHex) throw new Error("recovery Email OTP factor does not match the committed projection");
 }
-function shouldDeletePublishedPendingWalletRegistrationCommit(pending) {
-	switch (pending.operation) {
-		case "near_provisioning": return true;
-		case "registration_activate": return pending.signerPlanKind !== "near_ed25519";
-	}
-}
 function assertCredentialFreeRegistrationSessionProjectionMatchesExisting(input) {
 	if (input.incoming.walletId !== input.existing.walletId || input.incoming.authorityId !== input.existing.authorityId || input.incoming.authMethodId !== input.existing.authMethodId || input.incoming.authorizationId !== input.existing.authorizationId || input.incoming.quotaId !== input.existing.quotaId || input.incoming.issuedAtMs !== input.existing.issuedAtMs || input.incoming.expiresAtMs !== input.existing.expiresAtMs || input.incoming.expiresAtMs <= Date.now() || input.incoming.authorityRevocationEpoch !== input.existing.authorityRevocationEpoch || !walletSessionPreservesCapabilities(input.existing, input.incoming)) throw new Error("Credential-free registration projection changed immutable session identity");
 }
@@ -162,6 +158,7 @@ const WALLET_REGISTRATION_PUBLICATION_STORES = [
 	SEAMS_WALLET_STORES.signerOpsOutbox,
 	SEAMS_WALLET_STORES.keyMaterial,
 	SEAMS_WALLET_STORES.walletSessionAuthorizations,
+	SEAMS_WALLET_STORES.ecdsaClientPresignatures,
 	SEAMS_WALLET_STORES.ecdsaCapabilityManifests,
 	SEAMS_WALLET_STORES.ecdsaCurrentCapabilityManifests,
 	SEAMS_WALLET_STORES.ecdsaRoleLocalMaterial,
@@ -189,7 +186,6 @@ function requireWebAuthnRpId(value) {
 	if (!parsed.ok) throw new Error(parsed.error.message);
 	return parsed.value;
 }
-const CHAIN_ACCOUNT_PROJECTION_SIGNER_SLOT = 0;
 var SeamsWalletDBConstraintError = class extends Error {
 	constructor(code, message, details) {
 		super(message);
@@ -206,233 +202,17 @@ function createRandomToken(prefix) {
 	crypto.getRandomValues(bytes);
 	return `${prefix}-${Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("")}`;
 }
-function nonceLeaseWalletId(record) {
-	if (record.family === "near") return record.walletId;
-	return record.accountId;
-}
-function nonceLeaseNearAccountId(record) {
-	return record.family === "near" ? record.nearAccountId : "";
-}
-function nonceLeaseRow(record) {
-	const leaseId = normalizeTrimmedString(record.leaseId || "");
-	const laneKey = normalizeTrimmedString(record.laneKey || "");
-	const walletId = normalizeTrimmedString(nonceLeaseWalletId(record) || "");
-	const nearAccountId = normalizeTrimmedString(nonceLeaseNearAccountId(record) || "");
-	if (!leaseId || !laneKey || !walletId) throw new Error("[SeamsWalletDB] nonce lease requires leaseId, laneKey, and wallet identity");
-	return {
-		lease_id: leaseId,
-		lane_key: laneKey,
-		wallet_id: walletId,
-		...nearAccountId ? { near_account_id: nearAccountId } : {},
-		state: record.state,
-		expires_at_ms: Math.floor(Number(record.expiresAtMs)),
-		record
-	};
-}
-function parseStoredNonEmptyString(value) {
-	return typeof value === "string" && value.length > 0 && value.trim() === value ? value : null;
-}
-function parseNonceLaneLockRow(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
-	const lockKey = parseStoredNonEmptyString(Reflect.get(value, "lock_key"));
-	const ownerId = parseStoredNonEmptyString(Reflect.get(value, "owner_id"));
-	const fencingToken = parseStoredNonEmptyString(Reflect.get(value, "fencing_token"));
-	const acquiredAtMs = Reflect.get(value, "acquired_at_ms");
-	const expiresAtMs = Reflect.get(value, "expires_at_ms");
-	const updatedAtMs = Reflect.get(value, "updated_at_ms");
-	if (!lockKey || !ownerId || !fencingToken || !Number.isSafeInteger(acquiredAtMs) || acquiredAtMs < 0 || !Number.isSafeInteger(expiresAtMs) || expiresAtMs < 0 || !Number.isSafeInteger(updatedAtMs) || updatedAtMs < 0) return null;
-	return {
-		lock_key: lockKey,
-		owner_id: ownerId,
-		fencing_token: fencingToken,
-		acquired_at_ms: acquiredAtMs,
-		expires_at_ms: expiresAtMs,
-		updated_at_ms: updatedAtMs
-	};
-}
-function parseStoredThresholdEcdsaChainTarget(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
-	try {
-		return thresholdEcdsaChainTargetFromRequest({
-			kind: Reflect.get(value, "kind"),
-			namespace: Reflect.get(value, "namespace"),
-			chainId: Reflect.get(value, "chainId"),
-			networkSlug: Reflect.get(value, "networkSlug")
-		});
-	} catch {
-		return null;
-	}
-}
-function parseNonceLeaseRecord(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
-	const version = Reflect.get(value, "v");
-	const leaseId = parseStoredNonEmptyString(Reflect.get(value, "leaseId"));
-	const laneKey = parseStoredNonEmptyString(Reflect.get(value, "laneKey"));
-	const networkKey = parseStoredNonEmptyString(Reflect.get(value, "networkKey"));
-	const nonce = parseStoredNonEmptyString(Reflect.get(value, "nonce"));
-	const operationId = parseStoredNonEmptyString(Reflect.get(value, "operationId"));
-	const operationFingerprint = parseStoredNonEmptyString(Reflect.get(value, "operationFingerprint"));
-	const reservedAtMs = Reflect.get(value, "reservedAtMs");
-	const expiresAtMs = Reflect.get(value, "expiresAtMs");
-	const updatedAtMs = Reflect.get(value, "updatedAtMs");
-	const state = Reflect.get(value, "state");
-	if (version !== 1 || !leaseId || !laneKey || !networkKey || !nonce || !operationId || !operationFingerprint || !Number.isSafeInteger(reservedAtMs) || !Number.isSafeInteger(expiresAtMs) || !Number.isSafeInteger(updatedAtMs) || state !== "reserved" && state !== "signed" && state !== "broadcast_accepted") return null;
-	const txHash = Reflect.get(value, "txHash");
-	if (state === "broadcast_accepted" && !parseStoredNonEmptyString(txHash)) return null;
-	if (state !== "broadcast_accepted" && txHash !== void 0) return null;
-	const runtimeId = Reflect.get(value, "runtimeId");
-	const fencingToken = Reflect.get(value, "fencingToken");
-	const batchId = Reflect.get(value, "batchId");
-	const txIndex = Reflect.get(value, "txIndex");
-	if (runtimeId !== void 0 && !parseStoredNonEmptyString(runtimeId) || fencingToken !== void 0 && !parseStoredNonEmptyString(fencingToken) || batchId !== void 0 && !parseStoredNonEmptyString(batchId) || txIndex !== void 0 && !Number.isSafeInteger(txIndex)) return null;
-	const family = Reflect.get(value, "family");
-	if (family === "near") {
-		const walletId = parseStoredNonEmptyString(Reflect.get(value, "walletId"));
-		const nearAccountId = parseStoredNonEmptyString(Reflect.get(value, "nearAccountId"));
-		const publicKey = parseStoredNonEmptyString(Reflect.get(value, "publicKey"));
-		if (!walletId || !nearAccountId || !publicKey) return null;
-		return {
-			v: 1,
-			leaseId,
-			laneKey,
-			networkKey,
-			nonce,
-			operationId,
-			operationFingerprint,
-			reservedAtMs,
-			expiresAtMs,
-			updatedAtMs,
-			family: "near",
-			walletId,
-			nearAccountId,
-			publicKey,
-			state,
-			...runtimeId === void 0 ? {} : { runtimeId },
-			...fencingToken === void 0 ? {} : { fencingToken },
-			...batchId === void 0 ? {} : { batchId },
-			...txIndex === void 0 ? {} : { txIndex },
-			...state === "broadcast_accepted" ? { txHash } : {}
-		};
-	}
-	if (family !== "evm") return null;
-	const chainTarget = parseStoredThresholdEcdsaChainTarget(Reflect.get(value, "chainTarget"));
-	const sender = parseStoredNonEmptyString(Reflect.get(value, "sender"));
-	const accountId = parseStoredNonEmptyString(Reflect.get(value, "accountId"));
-	if (!chainTarget || !sender || !accountId) return null;
-	const nonceKey = Reflect.get(value, "nonceKey");
-	if (nonceKey !== void 0 && !parseStoredNonEmptyString(nonceKey)) return null;
-	return {
-		v: 1,
-		leaseId,
-		laneKey,
-		networkKey,
-		nonce,
-		operationId,
-		operationFingerprint,
-		reservedAtMs,
-		expiresAtMs,
-		updatedAtMs,
-		family: "evm",
-		chainTarget,
-		sender,
-		accountId,
-		state,
-		...runtimeId === void 0 ? {} : { runtimeId },
-		...fencingToken === void 0 ? {} : { fencingToken },
-		...batchId === void 0 ? {} : { batchId },
-		...txIndex === void 0 ? {} : { txIndex },
-		...nonceKey === void 0 ? {} : { nonceKey },
-		...state === "broadcast_accepted" ? { txHash } : {}
-	};
-}
-function parseNonceLeaseRow(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
-	const record = parseNonceLeaseRecord(Reflect.get(value, "record"));
-	if (!record) return null;
-	if (Reflect.get(value, "lease_id") !== record.leaseId) return null;
-	if (Reflect.get(value, "lane_key") !== record.laneKey) return null;
-	if (Reflect.get(value, "wallet_id") !== nonceLeaseWalletId(record)) return null;
-	if ((Reflect.get(value, "near_account_id") || "") !== nonceLeaseNearAccountId(record)) return null;
-	if (Reflect.get(value, "state") !== record.state) return null;
-	if (Reflect.get(value, "expires_at_ms") !== Math.floor(Number(record.expiresAtMs))) return null;
-	return record;
-}
 function keyRangeUpperBound(value) {
 	return IDBKeyRange.upperBound(value);
 }
 async function deleteRowsByIndex(args) {
-	let cursor = await args.store.index(args.indexName).openCursor(args.key);
-	while (cursor) {
-		await cursor.delete();
-		cursor = await cursor.continue();
-	}
+	const keys = await args.store.index(args.indexName).getAllKeys(args.key);
+	for (const key of keys) await args.store.delete(key);
 }
 function scopedLastProfileStateAppStateKey(scope) {
 	const normalized = normalizeLastUserScope(scope);
 	return normalized ? `${LAST_PROFILE_STATE_APP_STATE_KEY}::${normalized}` : LAST_PROFILE_STATE_APP_STATE_KEY;
 }
-function chainAccountProjectionId(args) {
-	return `${args.chainIdKey}\0${args.accountAddress}`;
-}
-function walletSignerId(args) {
-	return [
-		args.chainIdKey,
-		args.accountAddress,
-		args.signerId
-	].join("\0");
-}
-function signerChainTargetKey(args) {
-	return [args.chainIdKey, args.accountAddress].join("\0");
-}
-function normalizeEcdsaChainTargetKey(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) return "";
-	const kind = normalizeTrimmedString(Reflect.get(value, "kind") || "");
-	const chainId = Number(Reflect.get(value, "chainId"));
-	if (!Number.isSafeInteger(chainId) || chainId <= 0) return "";
-	if (kind === "evm") {
-		if (normalizeTrimmedString(Reflect.get(value, "namespace") || "") !== "eip155") return "";
-		return toIndexedDbChainTargetKey({
-			kind: "evm",
-			namespace: "eip155",
-			chainId,
-			networkSlug: normalizeTrimmedString(Reflect.get(value, "networkSlug") || "")
-		});
-	}
-	if (kind === "tempo") return toIndexedDbChainTargetKey({
-		kind: "tempo",
-		chainId,
-		networkSlug: normalizeTrimmedString(Reflect.get(value, "networkSlug") || "")
-	});
-	return "";
-}
-function walletSignerScalarMirrors(record) {
-	if (record.signerKind === SIGNER_KINDS.thresholdEcdsa) {
-		const metadata = record.metadata || {};
-		const keyHandle = normalizeTrimmedString(metadata.keyHandle || "");
-		const ecdsaThresholdKeyId = normalizeTrimmedString(metadata.ecdsaThresholdKeyId || "");
-		const thresholdOwnerAddress = normalizeIndexedDbAccountAddress(metadata.thresholdOwnerAddress || "");
-		const chainTargetKey = normalizeEcdsaChainTargetKey(metadata.chainTarget);
-		if (!keyHandle || !ecdsaThresholdKeyId || !thresholdOwnerAddress || !chainTargetKey) throw new Error("[SeamsWalletDB] threshold ECDSA signer requires keyHandle, ecdsaThresholdKeyId, thresholdOwnerAddress, and chainTarget");
-		return {
-			chainTargetKey,
-			keyHandle,
-			ecdsaThresholdKeyId,
-			thresholdOwnerAddress
-		};
-	}
-	const signerSlot = Number(record.signerSlot);
-	if (!Number.isSafeInteger(signerSlot) || signerSlot < 1) throw new Error("[SeamsWalletDB] Ed25519 signer requires a positive signerSlot");
-	const nearEd25519SigningKeyId = normalizeTrimmedString(record.metadata?.nearEd25519SigningKeyId || "");
-	if (!nearEd25519SigningKeyId) throw new Error("[SeamsWalletDB] Ed25519 signer requires nearEd25519SigningKeyId");
-	return {
-		chainTargetKey: signerChainTargetKey({
-			chainIdKey: record.chainIdKey,
-			accountAddress: record.accountAddress
-		}),
-		nearSignerSlot: signerSlot,
-		nearEd25519SigningKeyId
-	};
-}
 function shouldWriteNearAccountProjection(args) {
 	return args.accountModel === "near-native" || args.chainIdKey.startsWith("near:");
 }
@@ -569,15 +349,15 @@ function parseStoredProfilePreferences(value) {
 	const useRelayer = Reflect.get(value, "useRelayer");
 	const useNetwork = Reflect.get(value, "useNetwork");
 	const confirmationConfig = Reflect.get(value, "confirmationConfig");
-	if (typeof useRelayer !== "boolean" || useNetwork !== "testnet" && useNetwork !== "mainnet" || confirmationConfig === null || typeof confirmationConfig !== "object" || Array.isArray(confirmationConfig)) return null;
+	if (useRelayer !== void 0 && typeof useRelayer !== "boolean" || useNetwork !== void 0 && useNetwork !== "testnet" && useNetwork !== "mainnet" || confirmationConfig === null || typeof confirmationConfig !== "object" || Array.isArray(confirmationConfig)) return null;
 	const uiMode = Reflect.get(confirmationConfig, "uiMode");
 	const behavior = Reflect.get(confirmationConfig, "behavior");
 	const autoProceedDelay = Reflect.get(confirmationConfig, "autoProceedDelay");
 	const parsedAutoProceedDelay = autoProceedDelay === void 0 ? void 0 : typeof autoProceedDelay === "number" && Number.isSafeInteger(autoProceedDelay) && autoProceedDelay >= 0 ? autoProceedDelay : null;
 	if (uiMode !== "none" && uiMode !== "modal" && uiMode !== "drawer" || behavior !== "requireClick" && behavior !== "skipClick" || parsedAutoProceedDelay === null) return null;
 	return {
-		useRelayer,
-		useNetwork,
+		...useRelayer === void 0 ? {} : { useRelayer },
+		...useNetwork === void 0 ? {} : { useNetwork },
 		confirmationConfig: {
 			uiMode,
 			behavior,
@@ -1678,201 +1458,6 @@ function walletAuthMethodRowsForRegistrationFinalize(input) {
 	}
 	return [...rows.values()];
 }
-function chainAccountProjectionRow(input, existing) {
-	const profileId = normalizeTrimmedString(input.profileId || "");
-	const chainIdKey = normalizeIndexedDbChainIdKey(input.chainIdKey);
-	const accountAddress = normalizeIndexedDbAccountAddress(input.accountAddress);
-	const accountModel = normalizeIndexedDbAccountModel(input.accountModel);
-	if (!profileId || !chainIdKey || !accountAddress) throw new Error("[SeamsWalletDB] profileId, chainIdKey, and accountAddress are required");
-	if (!accountModel) throw new Error("[SeamsWalletDB] accountModel is required");
-	const now = Date.now();
-	const record = {
-		profileId,
-		chainIdKey,
-		accountAddress,
-		accountModel,
-		isPrimary: input.isPrimary ?? existing?.isPrimary ?? false,
-		createdAt: existing?.createdAt ?? now,
-		updatedAt: now
-	};
-	return {
-		wallet_id: profileId,
-		near_account_id: chainAccountProjectionId({
-			chainIdKey,
-			accountAddress
-		}),
-		signer_slot: CHAIN_ACCOUNT_PROJECTION_SIGNER_SLOT,
-		profile_id: profileId,
-		chain_id_key: chainIdKey,
-		account_address: accountAddress,
-		account_model: accountModel,
-		is_primary: !!record.isPrimary,
-		updated_at: record.updatedAt,
-		record
-	};
-}
-function parseStoredChainAccountRecord(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
-	const profileId = parseStoredNonEmptyString(Reflect.get(value, "profileId"));
-	const chainIdKey = normalizeIndexedDbChainIdKey(Reflect.get(value, "chainIdKey"));
-	const accountAddress = normalizeIndexedDbAccountAddress(Reflect.get(value, "accountAddress"));
-	const accountModel = normalizeIndexedDbAccountModel(Reflect.get(value, "accountModel"));
-	const createdAt = Reflect.get(value, "createdAt");
-	const updatedAt = Reflect.get(value, "updatedAt");
-	const isPrimary = Reflect.get(value, "isPrimary");
-	if (!profileId || !chainIdKey || !accountAddress || !accountModel || !Number.isSafeInteger(createdAt) || Number(createdAt) < 0 || !Number.isSafeInteger(updatedAt) || Number(updatedAt) < 0 || isPrimary !== void 0 && typeof isPrimary !== "boolean") return null;
-	return {
-		profileId,
-		chainIdKey,
-		accountAddress,
-		accountModel,
-		...isPrimary === void 0 ? {} : { isPrimary },
-		createdAt: Number(createdAt),
-		updatedAt: Number(updatedAt)
-	};
-}
-function parseChainAccountProjectionRow(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
-	const record = parseStoredChainAccountRecord(Reflect.get(value, "record"));
-	if (!record) return null;
-	if (Reflect.get(value, "wallet_id") !== record.profileId) return null;
-	if (Reflect.get(value, "profile_id") !== record.profileId) return null;
-	if (Reflect.get(value, "chain_id_key") !== record.chainIdKey) return null;
-	if (Reflect.get(value, "account_address") !== record.accountAddress) return null;
-	if (Reflect.get(value, "account_model") !== record.accountModel) return null;
-	if (Reflect.get(value, "is_primary") !== !!record.isPrimary) return null;
-	if (Reflect.get(value, "updated_at") !== record.updatedAt) return null;
-	if (Reflect.get(value, "near_account_id") !== chainAccountProjectionId({
-		chainIdKey: record.chainIdKey,
-		accountAddress: record.accountAddress
-	})) return null;
-	return record;
-}
-function accountSignerRow(record) {
-	const profileId = normalizeTrimmedString(record.profileId || "");
-	const chainIdKey = normalizeIndexedDbChainIdKey(record.chainIdKey);
-	const accountAddress = normalizeIndexedDbAccountAddress(record.accountAddress);
-	const signerId = normalizeTrimmedString(record.signerId || "");
-	const signerKind = normalizeTrimmedString(record.signerKind || "");
-	if (!profileId || !chainIdKey || !accountAddress || !signerId || !signerKind) throw new Error("[SeamsWalletDB] signer requires profileId, chainIdKey, accountAddress, signerId, and signerKind");
-	const mirrors = walletSignerScalarMirrors({
-		...record,
-		profileId,
-		chainIdKey,
-		accountAddress,
-		signerId
-	});
-	const isActive = record.status === "active";
-	return {
-		wallet_signer_id: walletSignerId({
-			chainIdKey,
-			accountAddress,
-			signerId
-		}),
-		wallet_id: profileId,
-		kind: signerKind,
-		chain_target_key: mirrors.chainTargetKey,
-		...isActive && mirrors.nearSignerSlot != null ? { near_signer_slot: mirrors.nearSignerSlot } : {},
-		...isActive && mirrors.nearEd25519SigningKeyId ? { near_ed25519_signing_key_id: mirrors.nearEd25519SigningKeyId } : {},
-		...isActive && mirrors.keyHandle ? { key_handle: mirrors.keyHandle } : {},
-		...isActive && mirrors.ecdsaThresholdKeyId ? { ecdsa_threshold_key_id: mirrors.ecdsaThresholdKeyId } : {},
-		...isActive && mirrors.thresholdOwnerAddress ? { threshold_owner_address: mirrors.thresholdOwnerAddress } : {},
-		status: record.status,
-		updated_at: record.updatedAt,
-		record: {
-			...record,
-			profileId,
-			chainIdKey,
-			accountAddress,
-			signerId
-		}
-	};
-}
-function parseStoredAccountSignerRecord(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
-	const profileId = parseStoredNonEmptyString(Reflect.get(value, "profileId"));
-	const chainIdKey = normalizeIndexedDbChainIdKey(Reflect.get(value, "chainIdKey"));
-	const accountAddress = normalizeIndexedDbAccountAddress(Reflect.get(value, "accountAddress"));
-	const signerId = parseStoredNonEmptyString(Reflect.get(value, "signerId"));
-	const signerSlot = Reflect.get(value, "signerSlot");
-	const signerType = parseStoredNonEmptyString(Reflect.get(value, "signerType"));
-	const signerKind = Reflect.get(value, "signerKind");
-	const signerAuthMethod = Reflect.get(value, "signerAuthMethod");
-	const signerSource = Reflect.get(value, "signerSource");
-	const status = Reflect.get(value, "status");
-	const addedAt = Reflect.get(value, "addedAt");
-	const updatedAt = Reflect.get(value, "updatedAt");
-	if (!profileId || !chainIdKey || !accountAddress || !signerId || !Number.isSafeInteger(signerSlot) || Number(signerSlot) < 1 || !signerType || signerKind !== SIGNER_KINDS.thresholdEd25519 && signerKind !== SIGNER_KINDS.thresholdEcdsa || signerAuthMethod !== "passkey" && signerAuthMethod !== "email_otp" || signerSource !== "passkey_registration" && signerSource !== "email_otp_registration" && signerSource !== "self_hosted_import" || status !== "active" && status !== "pending" && status !== "revoked" || !Number.isSafeInteger(addedAt) || Number(addedAt) < 0 || !Number.isSafeInteger(updatedAt) || Number(updatedAt) < 0) return null;
-	const metadataRaw = Reflect.get(value, "metadata");
-	let metadata;
-	if (metadataRaw !== void 0) {
-		if (metadataRaw === null || typeof metadataRaw !== "object" || Array.isArray(metadataRaw)) return null;
-		metadata = {};
-		for (const key of Object.keys(metadataRaw)) metadata[key] = Reflect.get(metadataRaw, key);
-	}
-	const removedAt = Reflect.get(value, "removedAt");
-	const revocationReason = Reflect.get(value, "revocationReason");
-	if (removedAt !== void 0 && (!Number.isSafeInteger(removedAt) || Number(removedAt) < 0) || revocationReason !== void 0 && typeof revocationReason !== "string") return null;
-	return {
-		profileId,
-		chainIdKey,
-		accountAddress,
-		signerId,
-		signerSlot: Number(signerSlot),
-		signerType,
-		signerKind,
-		signerAuthMethod,
-		signerSource,
-		status,
-		addedAt: Number(addedAt),
-		updatedAt: Number(updatedAt),
-		...removedAt === void 0 ? {} : { removedAt: Number(removedAt) },
-		...revocationReason === void 0 ? {} : { revocationReason },
-		...metadata === void 0 ? {} : { metadata }
-	};
-}
-function parseAccountSignerRow(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
-	const record = parseStoredAccountSignerRecord(Reflect.get(value, "record"));
-	if (!record) return null;
-	if (Reflect.get(value, "wallet_signer_id") !== walletSignerId({
-		chainIdKey: record.chainIdKey,
-		accountAddress: record.accountAddress,
-		signerId: record.signerId
-	})) return null;
-	if (Reflect.get(value, "wallet_id") !== record.profileId) return null;
-	if (Reflect.get(value, "kind") !== record.signerKind) return null;
-	let mirrors;
-	try {
-		mirrors = walletSignerScalarMirrors(record);
-	} catch {
-		return null;
-	}
-	const requiresActiveMirrors = record.status === "active";
-	if (record.signerKind === SIGNER_KINDS.thresholdEd25519) {
-		const chainTargetKey = Reflect.get(value, "chain_target_key");
-		const nearSignerSlot = Reflect.get(value, "near_signer_slot");
-		const nearEd25519SigningKeyId = Reflect.get(value, "near_ed25519_signing_key_id");
-		if (chainTargetKey !== void 0 && chainTargetKey !== mirrors.chainTargetKey) return null;
-		if (requiresActiveMirrors && nearSignerSlot !== mirrors.nearSignerSlot) return null;
-		if (!requiresActiveMirrors && nearSignerSlot !== void 0 && nearSignerSlot !== mirrors.nearSignerSlot) return null;
-		if (requiresActiveMirrors && nearEd25519SigningKeyId !== mirrors.nearEd25519SigningKeyId) return null;
-		if (!requiresActiveMirrors && nearEd25519SigningKeyId !== void 0 && nearEd25519SigningKeyId !== mirrors.nearEd25519SigningKeyId) return null;
-	} else if (requiresActiveMirrors && Reflect.get(value, "chain_target_key") !== mirrors.chainTargetKey) return null;
-	else if (!requiresActiveMirrors && Reflect.get(value, "chain_target_key") !== void 0 && Reflect.get(value, "chain_target_key") !== mirrors.chainTargetKey) return null;
-	const keyHandle = Reflect.get(value, "key_handle");
-	const ecdsaThresholdKeyId = Reflect.get(value, "ecdsa_threshold_key_id");
-	const thresholdOwnerAddress = Reflect.get(value, "threshold_owner_address");
-	if (requiresActiveMirrors && keyHandle !== mirrors.keyHandle) return null;
-	if (!requiresActiveMirrors && keyHandle !== void 0 && keyHandle !== mirrors.keyHandle) return null;
-	if (requiresActiveMirrors && ecdsaThresholdKeyId !== mirrors.ecdsaThresholdKeyId) return null;
-	if (!requiresActiveMirrors && ecdsaThresholdKeyId !== void 0 && ecdsaThresholdKeyId !== mirrors.ecdsaThresholdKeyId) return null;
-	if (requiresActiveMirrors && thresholdOwnerAddress !== mirrors.thresholdOwnerAddress) return null;
-	if (!requiresActiveMirrors && thresholdOwnerAddress !== void 0 && thresholdOwnerAddress !== mirrors.thresholdOwnerAddress) return null;
-	if (Reflect.get(value, "status") !== record.status) return null;
-	if (Reflect.get(value, "updated_at") !== record.updatedAt) return null;
-	return record;
-}
 async function deleteConflictingThresholdEcdsaSignerRows(args) {
 	const row = args.nextRow;
 	if (row.kind !== SIGNER_KINDS.thresholdEcdsa || row.status === "revoked") return;
@@ -1889,88 +1474,6 @@ async function deleteConflictingThresholdEcdsaSignerRows(args) {
 	}
 	for (const rowId of conflictingRowIds) await args.store.delete(rowId);
 }
-function signerOutboxRow(record) {
-	const opId = normalizeTrimmedString(record.opId || "");
-	const idempotencyKey = normalizeTrimmedString(record.idempotencyKey || "");
-	const chainIdKey = normalizeIndexedDbChainIdKey(record.chainIdKey);
-	const accountAddress = normalizeIndexedDbAccountAddress(record.accountAddress);
-	const signerId = normalizeTrimmedString(record.signerId || "");
-	if (!opId || !idempotencyKey || !chainIdKey || !accountAddress || !signerId) throw new Error("[SeamsWalletDB] signer op requires opId, idempotencyKey, chainIdKey, accountAddress, and signerId");
-	return {
-		op_id: opId,
-		idempotency_key: idempotencyKey,
-		status: record.status,
-		next_attempt_at: record.nextAttemptAt,
-		wallet_id: normalizeTrimmedString(String(record.payload?.profileId || "")),
-		chain_target_key: signerChainTargetKey({
-			chainIdKey,
-			accountAddress
-		}),
-		updated_at: record.updatedAt,
-		record: {
-			...record,
-			opId,
-			idempotencyKey,
-			chainIdKey,
-			accountAddress,
-			signerId
-		}
-	};
-}
-function parseStoredSignerOutboxRecord(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
-	const opId = parseStoredNonEmptyString(Reflect.get(value, "opId"));
-	const idempotencyKey = parseStoredNonEmptyString(Reflect.get(value, "idempotencyKey"));
-	const opType = parseStoredNonEmptyString(Reflect.get(value, "opType"));
-	const chainIdKey = normalizeIndexedDbChainIdKey(Reflect.get(value, "chainIdKey"));
-	const accountAddress = normalizeIndexedDbAccountAddress(Reflect.get(value, "accountAddress"));
-	const signerId = parseStoredNonEmptyString(Reflect.get(value, "signerId"));
-	const status = Reflect.get(value, "status");
-	const attemptCount = Reflect.get(value, "attemptCount");
-	const nextAttemptAt = Reflect.get(value, "nextAttemptAt");
-	const createdAt = Reflect.get(value, "createdAt");
-	const updatedAt = Reflect.get(value, "updatedAt");
-	if (!opId || !idempotencyKey || !opType || !chainIdKey || !accountAddress || !signerId || status !== "queued" && status !== "submitted" && status !== "confirmed" && status !== "failed" && status !== "dead-letter" || !Number.isSafeInteger(attemptCount) || Number(attemptCount) < 0 || !Number.isSafeInteger(nextAttemptAt) || Number(nextAttemptAt) < 0 || !Number.isSafeInteger(createdAt) || Number(createdAt) < 0 || !Number.isSafeInteger(updatedAt) || Number(updatedAt) < 0) return null;
-	const payloadRaw = Reflect.get(value, "payload");
-	const payload = sanitizePayload(payloadRaw);
-	if (payloadRaw !== void 0 && (payloadRaw === null || typeof payloadRaw !== "object" || Array.isArray(payloadRaw))) return null;
-	const lastError = Reflect.get(value, "lastError");
-	const txHash = Reflect.get(value, "txHash");
-	if (lastError !== void 0 && typeof lastError !== "string" || txHash !== void 0 && typeof txHash !== "string") return null;
-	return {
-		opId,
-		idempotencyKey,
-		opType,
-		chainIdKey,
-		accountAddress,
-		signerId,
-		status,
-		attemptCount: Number(attemptCount),
-		nextAttemptAt: Number(nextAttemptAt),
-		createdAt: Number(createdAt),
-		updatedAt: Number(updatedAt),
-		...payload === void 0 ? {} : { payload },
-		...lastError === void 0 ? {} : { lastError },
-		...txHash === void 0 ? {} : { txHash }
-	};
-}
-function parseSignerOutboxRow(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) return null;
-	const record = parseStoredSignerOutboxRecord(Reflect.get(value, "record"));
-	if (!record) return null;
-	if (Reflect.get(value, "op_id") !== record.opId) return null;
-	if (Reflect.get(value, "idempotency_key") !== record.idempotencyKey) return null;
-	if (Reflect.get(value, "status") !== record.status) return null;
-	if (Reflect.get(value, "next_attempt_at") !== record.nextAttemptAt) return null;
-	if (Reflect.get(value, "chain_target_key") !== signerChainTargetKey({
-		chainIdKey: record.chainIdKey,
-		accountAddress: record.accountAddress
-	})) return null;
-	const payloadProfileId = normalizeTrimmedString(String(record.payload && Reflect.get(record.payload, "profileId") ? Reflect.get(record.payload, "profileId") : ""));
-	if (Reflect.get(value, "wallet_id") !== payloadProfileId) return null;
-	if (Reflect.get(value, "updated_at") !== record.updatedAt) return null;
-	return record;
-}
 function keyMaterialId(args) {
 	return [args.walletSignerId, args.keyKind].join("\0");
 }
@@ -2723,6 +2226,18 @@ var SeamsWalletRepositories = class {
 		const authMethodStore = ctx.store(SEAMS_WALLET_STORES.walletAuthMethods);
 		await authMethodStore.put(await walletAuthMethodV2StorageRowForStore(authMethodStore, input.authMethod));
 		if (selectionPolicy === "preserve") return;
+		if (selectionPolicy === "restore_locked") {
+			const selections = ctx.store(SEAMS_WALLET_STORES.walletSelections);
+			if (!await selections.get(input.authority.walletId)) await selections.put(walletSelectionStorageRow({
+				kind: "wallet_selection_v1",
+				walletId: input.authority.walletId,
+				walletAuthMethodId: input.authMethod.walletAuthMethodId,
+				lockGeneration: 0,
+				lockState: "locked",
+				updatedAtMs: input.authMethod.activatedAtMs
+			}));
+			return;
+		}
 		await ctx.store(SEAMS_WALLET_STORES.walletSelections).put(walletSelectionStorageRow({
 			kind: "wallet_selection_v1",
 			walletId: input.authority.walletId,
@@ -3087,8 +2602,10 @@ var SeamsWalletRepositories = class {
 	*/
 	async replaceExactActiveWalletSessionFromStatus(input) {
 		return await this.manager.runTransaction([
+			SEAMS_WALLET_STORES.appState,
 			SEAMS_WALLET_STORES.walletAuthorities,
 			SEAMS_WALLET_STORES.walletSessionAuthorizations,
+			SEAMS_WALLET_STORES.ecdsaClientPresignatures,
 			SEAMS_WALLET_STORES.walletSelections
 		], "readwrite", this.replaceExactActiveWalletSessionFromStatusInTransaction.bind(this, input));
 	}
@@ -3130,6 +2647,7 @@ var SeamsWalletRepositories = class {
 				SEAMS_WALLET_STORES.appState,
 				SEAMS_WALLET_STORES.walletAuthorities,
 				SEAMS_WALLET_STORES.walletSessionAuthorizations,
+				SEAMS_WALLET_STORES.ecdsaClientPresignatures,
 				SEAMS_WALLET_STORES.walletSelections
 			], "readwrite", this.reconcilePendingNearRegistrationAuthorityInTransaction.bind(this, {
 				pending,
@@ -3168,6 +2686,7 @@ var SeamsWalletRepositories = class {
 			SEAMS_WALLET_STORES.appState,
 			SEAMS_WALLET_STORES.wallets,
 			SEAMS_WALLET_STORES.walletSessionAuthorizations,
+			SEAMS_WALLET_STORES.ecdsaClientPresignatures,
 			SEAMS_WALLET_STORES.walletSelections
 		], "readwrite", this.completePendingNearRegistrationInTransaction.bind(this, input));
 	}
@@ -3335,7 +2854,7 @@ var SeamsWalletRepositories = class {
 			const next = chainAccountProjectionRow(input, parseChainAccountProjectionRow(await store.get([
 				profileId,
 				projectionId,
-				CHAIN_ACCOUNT_PROJECTION_SIGNER_SLOT
+				0
 			])) || void 0);
 			written = next.record;
 			if (next.record.isPrimary) {
@@ -3385,7 +2904,7 @@ var SeamsWalletRepositories = class {
 				chainIdKey,
 				accountAddress
 			}),
-			CHAIN_ACCOUNT_PROJECTION_SIGNER_SLOT
+			0
 		]));
 	}
 	async resolveProfileAccountContext(accountRef) {
@@ -3567,7 +3086,7 @@ var SeamsWalletRepositories = class {
 					chainIdKey,
 					accountAddress
 				}),
-				CHAIN_ACCOUNT_PROJECTION_SIGNER_SLOT
+				0
 			]));
 			const chainAccount = chainAccountProjectionRow({
 				profileId,
@@ -3777,7 +3296,7 @@ var SeamsWalletRepositories = class {
 					chainIdKey,
 					accountAddress
 				}),
-				CHAIN_ACCOUNT_PROJECTION_SIGNER_SLOT
+				0
 			]));
 			const chainAccount = chainAccountProjectionRow({
 				profileId,
@@ -4196,35 +3715,60 @@ var SeamsWalletRepositories = class {
 		const storedPending = storedPendingRow?.record;
 		if (storedPending) assertPendingWalletRegistrationRequestIdentity(storedPending, input.request);
 		if (!storedPendingRow || !storedPending || storedPendingRow?.registration_ceremony_id !== input.request.registrationCeremonyId || storedPendingRow.operation !== input.request.operation || storedPendingRow.wallet_id !== input.request.walletId || storedPendingRow.wallet_auth_method_id !== input.request.walletAuthMethodId || storedPendingRow.updated_at_ms !== input.pending.updatedAtMs || storedPending.idempotencyKey !== input.pending.idempotencyKey || storedPending.signerPlanKind !== input.pending.signerPlanKind) throw new Error("stored pending wallet registration commit does not match the expected row");
-		let credentialFreeSessionReconciled = false;
-		if (input.walletSessionPublication.kind === "issued") await replaceExactActiveWalletSessionAuthorizationInTransaction({
-			ctx,
-			active: input.walletSessionPublication.walletSession,
-			operationCredential: input.walletSessionPublication.operationCredential
-		});
-		else {
+		let sessionPublication;
+		if (input.walletSessionPublication.kind === "issued") {
+			sessionPublication = "issued";
+			await replaceExactActiveWalletSessionAuthorizationInTransaction({
+				ctx,
+				active: input.walletSessionPublication.walletSession,
+				operationCredential: input.walletSessionPublication.operationCredential
+			});
+		} else {
 			const existingSession = await readExactActiveWalletSessionForScopeInTransaction({
 				ctx,
 				walletId: input.pending.walletId,
 				authorityId: input.foundingAuthority.authority.authorityId,
 				authMethodId: input.pending.walletAuthMethodId
 			});
-			if (existingSession.kind !== "found") throw new Error("Credential-free registration projection has no exact local Wallet Session");
-			assertCredentialFreeRegistrationSessionProjectionMatchesExisting({
-				incoming: input.walletSessionPublication.walletSession,
-				existing: existingSession.record
-			});
-			await replaceExactActiveWalletSessionAuthorizationInTransaction({
-				ctx,
-				active: input.walletSessionPublication.walletSession,
-				operationCredential: existingSession.operationCredential
-			});
-			credentialFreeSessionReconciled = true;
+			switch (existingSession.kind) {
+				case "found":
+					assertCredentialFreeRegistrationSessionProjectionMatchesExisting({
+						incoming: input.walletSessionPublication.walletSession,
+						existing: existingSession.record
+					});
+					await replaceExactActiveWalletSessionAuthorizationInTransaction({
+						ctx,
+						active: input.walletSessionPublication.walletSession,
+						operationCredential: existingSession.operationCredential
+					});
+					sessionPublication = "reconciled";
+					break;
+				case "missing":
+					if (input.pending.operation !== "near_provisioning" || input.pending.signerPlanKind !== "near_ed25519") throw new Error("Credential-free registration projection has no exact local Wallet Session");
+					sessionPublication = "locked_identity";
+					break;
+				case "corrupt":
+				case "upgrade_required": throw new Error("Credential-free registration projection cannot read the exact local Wallet Session");
+				default: return assertNever(existingSession);
+			}
 		}
 		const result = await this.persistWalletRegistrationFinalizeInTransaction(input.registration, ctx);
-		await this.persistFoundingWalletAuthorityInTransaction(input.foundingAuthority, input.walletSessionPublication.kind === "credential_free_projection" ? "preserve" : "activate", ctx);
+		let selectionPolicy;
+		switch (sessionPublication) {
+			case "issued":
+				selectionPolicy = "activate";
+				break;
+			case "reconciled":
+				selectionPolicy = "preserve";
+				break;
+			case "locked_identity":
+				selectionPolicy = "restore_locked";
+				break;
+			default: return assertNever(sessionPublication);
+		}
+		await this.persistFoundingWalletAuthorityInTransaction(input.foundingAuthority, selectionPolicy, ctx);
 		for (const continuity of input.ecdsaContinuity) await persistPreparedImportedWalletCustodyEcdsaContinuityInTransaction(ctx, continuity);
-		if (input.deletePending && (input.walletSessionPublication.kind === "issued" ? shouldDeletePublishedPendingWalletRegistrationCommit(input.pending) : credentialFreeSessionReconciled)) await ctx.store(SEAMS_WALLET_STORES.appState).delete(pendingKey);
+		if (input.deletePending) await ctx.store(SEAMS_WALLET_STORES.appState).delete(pendingKey);
 		return result;
 	}
 	async publishPendingWalletRecoveryCommitInTransaction(input, ctx) {
@@ -4424,11 +3968,11 @@ var SeamsWalletRepositories = class {
 		const normalizedProfileId = normalizeTrimmedString(profileId || "");
 		if (!normalizedProfileId) return;
 		await this.manager.runTransaction([SEAMS_WALLET_STORES.walletAuthMethods], "readwrite", async (ctx) => {
-			let cursor = await ctx.store(SEAMS_WALLET_STORES.walletAuthMethods).index(SEAMS_WALLET_INDEXES.walletIdKind).openCursor(IDBKeyRange.only([normalizedProfileId, "passkey"]));
-			while (cursor) {
-				await cursor.delete();
-				cursor = await cursor.continue();
-			}
+			await deleteRowsByIndex({
+				store: ctx.store(SEAMS_WALLET_STORES.walletAuthMethods),
+				indexName: SEAMS_WALLET_INDEXES.walletIdKind,
+				key: IDBKeyRange.only([normalizedProfileId, "passkey"])
+			});
 		});
 	}
 	async selectProfileAuthenticatorsForPrompt(args) {