@seams/wallet 0.8.0 → 0.9.0

package/dist/esm/SeamsWeb/operations/recovery/walletRecoveryCommit.js

@@ -1,38 +1,19 @@
 import { parseEmailOtpProviderUserId, parseThresholdEd25519SessionId } from "../../../shared-ts/src/utils/domainIds.js";
 import { base64UrlDecode } from "../../../shared-ts/src/utils/base64.js";
-import { base58Encode } from "../../../shared-ts/src/utils/base58.js";
-import { toAccountId } from "../../../core/types/accountIds.js";
 import { routerAbMpcMaterialActivationRefFromWire } from "../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
 import { computeEcdsaDerivationRoleLocalRelayerKeyId } from "../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 import { buildEmailOtpWalletAuthAuthority, walletAuthAuthorityRef } from "../../../shared-ts/src/utils/walletAuthAuthority.js";
-import { buildEcdsaRoleLocalPublicFacts } from "../../../core/signingEngine/session/persistence/ecdsaRoleLocalRecords.js";
-import { sameWalletAuthMethodRecordV2 } from "../../../shared-ts/src/utils/walletAuthMethodRecord.js";
-import { sameVerifiedActiveWalletAuthorityV1 } from "../../../shared-ts/src/authorization/walletAuthority.js";
+import "../../../shared-ts/src/authorization/walletAuthority.js";
+import { base58Encode } from "../../../shared-ts/src/utils/base58.js";
+import { toAccountId } from "../../../core/types/accountIds.js";
 import { buildWalletRecoveryCommittedProjectionV1 } from "../../../shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js";
-import { prepareWalletCustodyEcdsaContinuity } from "../../../core/indexedDB/seamsWalletDB/walletCustodyEcdsaContinuity.js";
+import { buildEcdsaRoleLocalPublicFacts } from "../../../core/signingEngine/session/persistence/ecdsaRoleLocalRecords.js";
 import { IndexedDBManager } from "../../../core/indexedDB/index.js";
-import { prepareWalletRecoveryEmailOtpPublication, prepareWalletRecoveryPasskeyPublication } from "../../../core/signingEngine/flows/registration/accountLifecycle.js";
-import { finalizeWalletRecovery, replayWalletRecovery } from "../../../core/rpcClients/relayer/walletRecoveryFinalize.js";
-import { finalizeWalletRecoveryGoogleEmailOtp, replayWalletRecoveryGoogleEmailOtp } from "../../../core/rpcClients/relayer/walletRecoveryGoogleEmailOtp.js";
 import { durableEmailEnrollmentReference, isDurablePasskeyPayload, walletRecoveryDurablePayloadFromOperation } from "./walletRecoveryDurablePayload.js";
-import { awaitingPendingWalletRecoveryCommit, decryptWalletRecoveryDurablePayload, encryptWalletRecoveryDurablePayload, promotedPendingWalletRecoveryCommit, requireWalletRecoveryOperationId } from "./walletRecoveryJournal.js";
+import { awaitingPendingWalletRecoveryCommit, encryptWalletRecoveryDurablePayload, promotedPendingWalletRecoveryCommit, requireWalletRecoveryOperationId } from "./walletRecoveryJournal.js";
+import { prepareWalletRecoveryEmailOtpPublication, prepareWalletRecoveryPasskeyPublication } from "../../../core/signingEngine/flows/registration/accountLifecycle.js";
+import { prepareWalletCustodyEcdsaContinuity } from "../../../core/indexedDB/seamsWalletDB/walletCustodyEcdsaContinuity.js";
 //#region src/SeamsWeb/operations/recovery/walletRecoveryCommit.ts
-async function sameWalletRecoveryCommittedProjectionV1(left, right) {
-	if (left.version !== right.version || left.storeVersion !== right.storeVersion || left.walletId !== right.walletId || left.recoveryOperationId !== right.recoveryOperationId || left.targetDeviceId !== right.targetDeviceId || left.targetAuthorityId !== right.targetAuthorityId || left.targetWalletAuthMethodId !== right.targetWalletAuthMethodId || !await sameVerifiedActiveWalletAuthorityV1(left.authority, right.authority) || !sameWalletAuthMethodRecordV2(left.authMethod, right.authMethod)) return false;
-	if (left.kind !== right.kind) return false;
-	switch (left.kind) {
-		case "passkey":
-			if (right.kind !== "passkey") return false;
-			return left.target.kind === right.target.kind && left.target.rpId === right.target.rpId && left.target.credentialIdB64u === right.target.credentialIdB64u;
-		case "google_email_otp":
-			if (right.kind !== "google_email_otp") return false;
-			return left.target.kind === right.target.kind && left.target.provider === right.target.provider && left.target.providerSubject === right.target.providerSubject && left.target.emailHashHex === right.target.emailHashHex && left.target.registrationAuthorityId === right.target.registrationAuthorityId && left.target.enrollment.kind === right.target.enrollment.kind && left.target.enrollment.enrollmentId === right.target.enrollment.enrollmentId && left.target.enrollment.enrollmentSealKeyVersion === right.target.enrollment.enrollmentSealKeyVersion;
-		default: return assertNeverWalletRecoveryProjection(left);
-	}
-}
-function assertNeverWalletRecoveryProjection(value) {
-	throw new Error(`unsupported wallet recovery projection: ${String(value)}`);
-}
 function committedProjectionFromPromotion(input) {
 	const recoveryOperationId = requireWalletRecoveryOperationId(input.payload.recoveryOperationId);
 	switch (input.kind) {
@@ -68,134 +49,6 @@ function committedProjectionFromPromotion(input) {
 		}
 	}
 }
-function ecdsaPossessionProofs(payload) {
-	return payload.ecdsaKeySets.map((keySet) => ({
-		keySetId: keySet.entry.keySetId,
-		proof: keySet.possessionProof
-	}));
-}
-function webAuthnRegistrationFromPayload(payload) {
-	return {
-		id: payload.registration.id,
-		rawId: payload.registration.rawId,
-		type: payload.registration.type,
-		authenticatorAttachment: payload.registration.authenticatorAttachment ?? void 0,
-		response: {
-			clientDataJSON: payload.registration.response.clientDataJSON,
-			attestationObject: payload.registration.response.attestationObject,
-			transports: [...payload.registration.response.transports]
-		},
-		clientExtensionResults: { prf: { results: {
-			first: void 0,
-			second: void 0
-		} } }
-	};
-}
-async function finalizeAwaitingCommit(input) {
-	const { payload } = input;
-	if (isDurablePasskeyPayload(payload)) {
-		const promotion = await finalizeWalletRecovery({
-			relayUrl: input.relayUrl,
-			walletId: String(payload.walletId),
-			reservationId: String(payload.reservationId),
-			recoveryOperationId: requireWalletRecoveryOperationId(payload.recoveryOperationId),
-			targetDeviceId: String(payload.targetDeviceId),
-			targetAuthorityId: String(payload.targetAuthorityId),
-			targetWalletAuthMethodId: String(payload.targetWalletAuthMethodId),
-			challengeId: payload.challengeId,
-			replacementId: payload.replacementId,
-			webauthnRegistration: webAuthnRegistrationFromPayload(payload),
-			replacementEnvelope: payload.replacementEnvelope,
-			ecdsaMaterialPossessionProofs: ecdsaPossessionProofs(payload),
-			fetchImpl: input.fetchImpl
-		});
-		if (promotion.kind !== "promoted") return promotion;
-		return {
-			kind: "passkey",
-			payload,
-			promotion
-		};
-	}
-	const promotion = await finalizeWalletRecoveryGoogleEmailOtp({
-		relayUrl: input.relayUrl,
-		recoveryOperationId: requireWalletRecoveryOperationId(payload.recoveryOperationId),
-		reservationId: payload.reservationId,
-		walletId: payload.walletId,
-		targetDeviceId: payload.targetDeviceId,
-		targetAuthorityId: payload.targetAuthorityId,
-		targetWalletAuthMethodId: payload.targetWalletAuthMethodId,
-		expectedProviderSubject: payload.providerSubject,
-		expectedEmailHashHex: payload.emailHashHex,
-		expectedRegistrationAuthorityId: payload.registrationAuthorityId,
-		replacementEnvelope: payload.replacementEnvelope,
-		ecdsaMaterialPossessionProofs: ecdsaPossessionProofs(payload),
-		emailOtpEnrollment: emailOtpEnrollmentMaterial(payload.enrollment),
-		fetchImpl: input.fetchImpl
-	});
-	if (promotion.kind !== "promoted") return promotion;
-	return {
-		kind: "google_email_otp",
-		payload,
-		promotion
-	};
-}
-function emailOtpEnrollmentMaterial(enrollment) {
-	return enrollment.kind === "create" ? {
-		kind: "create",
-		material: enrollment.material
-	} : null;
-}
-async function replayPromotedCommit(input) {
-	const { payload } = input;
-	if (isDurablePasskeyPayload(payload)) {
-		const promotion = await replayWalletRecovery({
-			relayUrl: input.relayUrl,
-			walletId: String(payload.walletId),
-			reservationId: String(payload.reservationId),
-			recoveryOperationId: requireWalletRecoveryOperationId(payload.recoveryOperationId),
-			targetDeviceId: String(payload.targetDeviceId),
-			targetAuthorityId: String(payload.targetAuthorityId),
-			targetWalletAuthMethodId: String(payload.targetWalletAuthMethodId),
-			replacementId: payload.replacementId,
-			replacementEnvelope: payload.replacementEnvelope,
-			fetchImpl: input.fetchImpl
-		});
-		if (promotion.kind !== "promoted") return promotion;
-		return {
-			kind: "passkey",
-			payload,
-			promotion
-		};
-	}
-	const promotion = await replayWalletRecoveryGoogleEmailOtp({
-		relayUrl: input.relayUrl,
-		recoveryOperationId: requireWalletRecoveryOperationId(payload.recoveryOperationId),
-		reservationId: payload.reservationId,
-		walletId: payload.walletId,
-		targetDeviceId: payload.targetDeviceId,
-		targetAuthorityId: payload.targetAuthorityId,
-		targetWalletAuthMethodId: payload.targetWalletAuthMethodId,
-		expectedProviderSubject: payload.providerSubject,
-		expectedEmailHashHex: payload.emailHashHex,
-		expectedRegistrationAuthorityId: payload.registrationAuthorityId,
-		replacementEnvelope: payload.replacementEnvelope,
-		fetchImpl: input.fetchImpl
-	});
-	if (promotion.kind !== "promoted") return promotion;
-	return {
-		kind: "google_email_otp",
-		payload,
-		promotion
-	};
-}
-function isWalletRecoveryCommitPromotion(value) {
-	return value.kind === "passkey" || value.kind === "google_email_otp";
-}
-async function resumeAwaitingCommit(input) {
-	const replay = await replayPromotedCommit(input);
-	if (isWalletRecoveryCommitPromotion(replay) || replay.kind !== "refused") return replay;
-	return await finalizeAwaitingCommit(input);
-}
 function passkeyAuthority(payload, projection) {
 	return {
 		walletId: payload.walletId,
@@ -416,60 +269,6 @@ async function restoreAndPublishWalletRecoveryCommit(input) {
 		ed25519PublicCapabilityReferences: input.payload.nearKeySets.map((keySet) => ed25519PublicCapabilityReference(input.payload, keySet))
 	});
 }
-async function resumePendingWalletRecoveries(input) {
-	const pending = await IndexedDBManager.listPendingWalletRecoveryCommits();
-	const results = [];
-	for (const record of pending) try {
-		const payload = await decryptWalletRecoveryDurablePayload(record);
-		const promotion = record.stage === "awaiting_server_promotion" ? await resumeAwaitingCommit({
-			relayUrl: input.relayUrl,
-			payload,
-			fetchImpl: input.fetchImpl
-		}) : await replayPromotedCommit({
-			relayUrl: input.relayUrl,
-			payload,
-			fetchImpl: input.fetchImpl
-		});
-		if (!isWalletRecoveryCommitPromotion(promotion)) {
-			if (promotion.kind === "refused") {
-				await IndexedDBManager.deletePendingWalletRecoveryCommit(record.recoveryOperationId);
-				results.push({
-					kind: "discarded",
-					recoveryOperationId: String(record.recoveryOperationId)
-				});
-				continue;
-			}
-			results.push({
-				kind: "pending",
-				recoveryOperationId: String(record.recoveryOperationId),
-				failure: promotion
-			});
-			continue;
-		}
-		const commitPromotion = promotion;
-		const projection = committedProjectionFromPromotion(commitPromotion);
-		const promoted = record.stage === "awaiting_server_promotion" ? await IndexedDBManager.advancePendingWalletRecoveryCommit({
-			awaiting: record,
-			promoted: promotedPendingWalletRecoveryCommit(record, commitPromotion.payload, projection, record.updatedAtMs + 1)
-		}) : record;
-		if (record.stage === "server_promoted" && !await sameWalletRecoveryCommittedProjectionV1(record.projection, projection)) throw new Error("wallet recovery replay projection changed");
-		await restoreAndPublishWalletRecoveryCommit({
-			pending: promoted,
-			payload: commitPromotion.payload
-		});
-		results.push({
-			kind: "completed",
-			recoveryOperationId: String(record.recoveryOperationId)
-		});
-	} catch (error) {
-		console.warn("[SeamsWeb] pending wallet recovery replay failed before classification:", String(record.recoveryOperationId), error instanceof Error ? error.message : String(error || "unknown error"));
-		results.push({
-			kind: "corrupt",
-			recoveryOperationId: String(record.recoveryOperationId)
-		});
-	}
-	return results;
-}
 async function createAwaitingWalletRecoveryCommit(input) {
 	const payload = await walletRecoveryDurablePayloadFromOperation(input.operation);
 	return {
@@ -485,6 +284,6 @@ async function promoteWalletRecoveryCommit(input) {
 	});
 }
 //#endregion
-export { createAwaitingWalletRecoveryCommit, promoteWalletRecoveryCommit, restoreAndPublishWalletRecoveryCommit, resumePendingWalletRecoveries };
+export { createAwaitingWalletRecoveryCommit, promoteWalletRecoveryCommit, restoreAndPublishWalletRecoveryCommit };
 
 //# sourceMappingURL=walletRecoveryCommit.js.map

package/dist/esm/SeamsWeb/operations/recovery/walletRecoveryDurablePayload.js

@@ -1,18 +1,18 @@
+import { requireRecord } from "../../../shared-ts/src/utils/validation.js";
 import { parseEmailOtpProviderUserId, parseThresholdEd25519SessionId, parseWalletAuthMethodId, parseWalletAuthorityId, parseWalletId, parseWalletRecoveryOperationId, parseWebAuthnCredentialIdB64u, parseWebAuthnRpId } from "../../../shared-ts/src/utils/domainIds.js";
 import { parseDeviceId } from "../../../shared-ts/src/authorization/capabilityKinds.js";
-import { requireRecord } from "../../../shared-ts/src/utils/validation.js";
-import { rejectUnknownFields } from "../../../shared-ts/src/utils/exactRecord.js";
 import { base64UrlDecode, base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
 import { sha256HexUtf8 } from "../../../shared-ts/src/utils/digests.js";
 import { parseDigestField, parseEd25519PublicKeyB64u, parseEnvelopeCiphertextB64u, parseEnvelopeNonceB64u, parseKeyCreationSignerSlot, parseSecp256k1CompressedPublicKeyB64u } from "../../../shared-ts/src/passkey-custody/primitives.js";
+import { rejectUnknownFields } from "../../../shared-ts/src/utils/exactRecord.js";
 import { normalizeThresholdRuntimePolicyScope } from "../../../core/signingEngine/threshold/sessionPolicy.js";
+import { parseRouterAbMpcMaterialActivationRef, routerAbMpcMaterialActivationRefToWire } from "../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
 import { parsePasskeyCustodyEnvelopeRecord } from "../../../shared-ts/src/passkey-custody/custodyEnvelope.js";
 import "../../../shared-ts/src/passkey-custody/index.js";
-import { parseRouterAbMpcMaterialActivationRef, routerAbMpcMaterialActivationRefToWire } from "../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
 import { parseRecoveryCodeReservationId } from "../../../shared-ts/src/wallet-recovery/recoveryCodeReservation.js";
 import { parseWalletRecoveryEcdsaPossessionProofV1 } from "../../../shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.js";
-import { WALLET_CUSTODY_ED25519_MATERIAL_KEY_KIND } from "../../../core/indexedDB/walletCustodyEd25519MaterialRecord.js";
 import { parseWalletRecoveryPreparationKeyManifest } from "../../../core/rpcClients/relayer/walletRecoveryPrepare.js";
+import { WALLET_CUSTODY_ED25519_MATERIAL_KEY_KIND } from "../../../core/indexedDB/walletCustodyEd25519MaterialRecord.js";
 function isDurablePasskeyPayload(payload) {
 	return payload.target.kind === "passkey";
 }
@@ -532,6 +532,6 @@ async function walletRecoveryDurablePayloadFromOperation(operation) {
 	return payload;
 }
 //#endregion
-export { durableEmailEnrollmentReference, durablePayloadIdentityTarget, isDurablePasskeyPayload, parseWalletRecoveryDurablePayload, validateWalletRecoveryDurablePayloadBindings, walletRecoveryDurablePayloadFromOperation, walletRecoveryDurablePayloadWireForm };
+export { durableEmailEnrollmentReference, durablePayloadIdentityTarget, isDurablePasskeyPayload, walletRecoveryDurablePayloadFromOperation, walletRecoveryDurablePayloadWireForm };
 
 //# sourceMappingURL=walletRecoveryDurablePayload.js.map

package/dist/esm/SeamsWeb/operations/recovery/walletRecoveryJournal.js

@@ -1,7 +1,6 @@
 import { parseWalletRecoveryOperationId } from "../../../shared-ts/src/utils/domainIds.js";
 import { alphabetizeStringify } from "../../../shared-ts/src/utils/digests.js";
-import { pendingWalletRecoveryCommitIdentityMatches } from "../../../core/indexedDB/pendingWalletRecoveryCommit.js";
-import { durablePayloadIdentityTarget, isDurablePasskeyPayload, parseWalletRecoveryDurablePayload, validateWalletRecoveryDurablePayloadBindings, walletRecoveryDurablePayloadWireForm } from "./walletRecoveryDurablePayload.js";
+import { durablePayloadIdentityTarget, isDurablePasskeyPayload, walletRecoveryDurablePayloadWireForm } from "./walletRecoveryDurablePayload.js";
 //#region src/SeamsWeb/operations/recovery/walletRecoveryJournal.ts
 const WALLET_RECOVERY_DURABLE_PAYLOAD_AAD_KIND = "pending_wallet_recovery_commit_v1";
 const WALLET_RECOVERY_DURABLE_AES_GCM_IV_BYTES = 12;
@@ -42,72 +41,11 @@ async function encryptWalletRecoveryDurablePayload(payload) {
 		}, key, plaintext))
 	};
 }
-async function decryptWalletRecoveryDurablePayload(record) {
-	const plaintext = await crypto.subtle.decrypt({
-		name: "AES-GCM",
-		iv: record.localMaterial.iv,
-		additionalData: durablePayloadAadForPendingRecord(record)
-	}, record.localMaterial.key, record.localMaterial.ciphertext);
-	const payload = parseWalletRecoveryDurablePayload(JSON.parse(new TextDecoder().decode(plaintext)));
-	await validateWalletRecoveryDurablePayloadBindings(payload);
-	if (!pendingRecordMatchesDurablePayload(record, payload)) throw new Error("wallet recovery durable payload identity does not match its journal");
-	return payload;
-}
-function durablePayloadAadForPendingRecord(record) {
-	return walletRecoveryDurableAad({
-		recoveryOperationId: record.recoveryOperationId,
-		walletId: record.walletId,
-		reservationId: record.reservationId,
-		targetDeviceId: record.targetDeviceId,
-		targetAuthorityId: record.targetAuthorityId,
-		targetWalletAuthMethodId: record.targetWalletAuthMethodId,
-		target: record.target
-	});
-}
 function requireWalletRecoveryOperationId(value) {
 	const parsed = parseWalletRecoveryOperationId(value);
 	if (!parsed.ok) throw new Error("wallet recovery operation id is invalid");
 	return parsed.value;
 }
-function pendingRecordMatchesDurablePayload(record, payload) {
-	const common = {
-		kind: "pending_wallet_recovery_commit_v1",
-		version: 1,
-		recoveryOperationId: requireWalletRecoveryOperationId(payload.recoveryOperationId),
-		walletId: payload.walletId,
-		reservationId: payload.reservationId,
-		targetDeviceId: payload.targetDeviceId,
-		targetAuthorityId: payload.targetAuthorityId,
-		targetWalletAuthMethodId: payload.targetWalletAuthMethodId,
-		localMaterial: record.localMaterial,
-		createdAtMs: record.createdAtMs,
-		updatedAtMs: record.updatedAtMs
-	};
-	const target = durablePayloadIdentityTarget(payload);
-	if (record.stage === "awaiting_server_promotion") return pendingWalletRecoveryCommitIdentityMatches(record, {
-		...common,
-		stage: "awaiting_server_promotion",
-		target
-	});
-	switch (target.kind) {
-		case "passkey":
-			if (record.projection.kind !== "passkey") return false;
-			return pendingWalletRecoveryCommitIdentityMatches(record, {
-				...common,
-				stage: "server_promoted",
-				target,
-				projection: record.projection
-			});
-		case "google_email_otp":
-			if (record.projection.kind !== "google_email_otp") return false;
-			return pendingWalletRecoveryCommitIdentityMatches(record, {
-				...common,
-				stage: "server_promoted",
-				target,
-				projection: record.projection
-			});
-	}
-}
 function pendingWalletRecoveryCommonFromPayload(payload, localMaterial, createdAtMs, updatedAtMs) {
 	return {
 		kind: "pending_wallet_recovery_commit_v1",
@@ -150,6 +88,6 @@ function promotedPendingWalletRecoveryCommit(awaiting, payload, projection, nowM
 	};
 }
 //#endregion
-export { awaitingPendingWalletRecoveryCommit, decryptWalletRecoveryDurablePayload, encryptWalletRecoveryDurablePayload, promotedPendingWalletRecoveryCommit, requireWalletRecoveryOperationId };
+export { awaitingPendingWalletRecoveryCommit, encryptWalletRecoveryDurablePayload, promotedPendingWalletRecoveryCommit, requireWalletRecoveryOperationId };
 
 //# sourceMappingURL=walletRecoveryJournal.js.map

package/dist/esm/SeamsWeb/operations/tempo/executeEvmFamilyTransaction.js

@@ -1,6 +1,6 @@
-import { SigningEventPhase, createSigningFlowEvent } from "../../../core/types/sdkSentEvents.js";
 import { chainFamilyFromNetwork } from "../../../core/config/chains.js";
 import { thresholdEcdsaChainTargetFromConfig, thresholdEcdsaChainTargetKey, toWalletId } from "../../../core/signingEngine/interfaces/ecdsaChainTarget.js";
+import { SigningEventPhase, createSigningFlowEvent } from "../../../core/types/sdkSentEvents.js";
 import { createEvmClient } from "../../../core/rpcClients/evm/EvmClient.js";
 //#region src/SeamsWeb/operations/tempo/executeEvmFamilyTransaction.ts
 /**

package/dist/esm/SeamsWeb/operations/tempo/index.js

@@ -21,19 +21,7 @@ function toSerializableTempoError(error) {
 	}
 	return { message: String(error) };
 }
-function buildTempoBootstrapArgs(configs, args) {
-	const managedRegistration = configs.registration.mode === "managed" ? configs.registration : null;
-	const runtimeScopeBootstrap = args.runtimeScopeBootstrap || (managedRegistration ? {
-		projectEnvironmentId: managedRegistration.projectEnvironmentId,
-		publishableKey: managedRegistration.publishableKey
-	} : void 0);
-	if (args.chainTarget.kind !== "tempo") throw new Error("[SeamsWeb][tempo] bootstrapEcdsaSession requires a Tempo chainTarget");
-	return {
-		...args,
-		...runtimeScopeBootstrap ? { runtimeScopeBootstrap } : {}
-	};
-}
 //#endregion
-export { buildTempoBootstrapArgs, toSerializableTempoError };
+export { toSerializableTempoError };
 
 //# sourceMappingURL=index.js.map

package/dist/esm/SeamsWeb/publicApi/auth.js

@@ -1,24 +1,8 @@
-import { WalletSessionStatusReadScope } from "../../core/rpcClients/relayer/walletSessionAuthorizationStatus.js";
-import { getRecentUnlocksDomain, getWalletSessionDomain, hasPasskeyCredentialDomain, lockDomain, logoutDomain, prefillRouterAbEcdsaDerivationPresignaturePoolDomain, unlockDomain } from "../operations/auth/walletAuth.js";
 //#region src/SeamsWeb/publicApi/auth.ts
-function createAuthCapability(deps) {
-	return {
-		unlock: async (walletId, options) => await unlockDomain(deps.getWalletAuthDeps(), walletId, options),
-		lock: async () => await lockDomain(deps.getWalletAuthDeps()),
-		logout: async () => await logoutDomain(deps.getWalletAuthDeps()),
-		getWalletSession: async (walletId) => await getWalletSessionDomain(deps.getWalletAuthDeps(), walletId),
-		getRecentUnlocks: async () => await getRecentUnlocksDomain(deps.getWalletAuthDeps()),
-		hasPasskeyCredential: async (walletId) => await hasPasskeyCredentialDomain(deps.getWalletAuthDeps(), walletId),
-		prefillRouterAbEcdsaDerivationPresignaturePool: async (args) => await prefillRouterAbEcdsaDerivationPresignaturePoolDomain(deps.getWalletAuthDeps(), args, new WalletSessionStatusReadScope()),
-		requestEmailOtpChallenge: deps.domain.requestEmailOtpChallenge,
-		requestEmailOtpSigningSessionChallenge: deps.domain.requestEmailOtpSigningSessionChallenge,
-		refreshEmailOtpSigningSession: deps.domain.refreshEmailOtpSigningSession,
-		loginWithEmailOtpEcdsaCapability: deps.domain.loginWithEmailOtpEcdsaCapability,
-		unlockAddedEmailOtpWallet: deps.domain.unlockAddedEmailOtpWallet,
-		beginGoogleEmailOtpWalletAuth: deps.domain.beginGoogleEmailOtpWalletAuth
-	};
+async function unlockWithEmailCode(args) {
+	return await args.challenge.submit({ otpCode: args.code });
 }
 //#endregion
-export { createAuthCapability };
+export { unlockWithEmailCode };
 
 //# sourceMappingURL=auth.js.map

package/dist/esm/SeamsWeb/publicApi/createPublicApi.js

@@ -1,98 +1,45 @@
-import { registerTransactionReviewBridge } from "./transactionReview.js";
-import { createAuthCapability } from "./auth.js";
-import { createDevicesCapability } from "./devices.js";
-import { createEvmSignerCapability } from "./evm.js";
-import { createNearSignerCapability } from "./near.js";
-import { createPreferencesCapability } from "./preferences.js";
-import { createRecoveryCapability } from "./recovery.js";
-import { createTempoSignerCapability } from "./tempo.js";
+import { waitForNearAccount } from "./waitForNearAccount.js";
 import { createCurrentWalletResolver } from "./currentWallet.js";
-import { awaitNearReady } from "./awaitNearReady.js";
+import { createDevicesCapability } from "./devices.js";
 import { createKeyExportCapability } from "./keyExport.js";
+import { createNearSignerCapability } from "./near.js";
+import { createEvmFamilyCapabilities } from "./tempo.js";
+import { registerTransactionReviewBridge } from "./transactionReview.js";
 //#region src/SeamsWeb/publicApi/createPublicApi.ts
-function createWalletIframeRoutingSurface(getWalletIframe) {
-	return {
-		shouldUseWalletIframe: () => getWalletIframe().shouldUseWalletIframe(),
-		requireRouter: async (walletId) => await getWalletIframe().requireRouter(walletId)
-	};
-}
 function createPublicApi(deps) {
-	const getAccountSyncContext = () => ({
-		signingEngine: deps.signingEngine,
-		nearClient: deps.nearClient,
-		configs: deps.configs,
-		theme: deps.getTheme()
-	});
-	const getDeviceLinkingContext = () => ({
-		signingEngine: deps.signingEngine,
-		nearClient: deps.nearClient,
-		configs: deps.configs,
-		theme: deps.getTheme()
-	});
-	const walletIframeRoutingSurface = createWalletIframeRoutingSurface(deps.getWalletIframe);
-	const auth = createAuthCapability({
-		getWalletAuthDeps: deps.getWalletAuthDeps,
-		domain: deps.auth
-	});
-	const devices = createDevicesCapability({
-		getContext: getDeviceLinkingContext,
-		walletIframe: walletIframeRoutingSurface,
-		domain: deps.devices
-	});
-	const currentWallet = createCurrentWalletResolver({ getWalletSession: auth.getWalletSession });
+	const auth = deps.auth;
+	const devices = createDevicesCapability(deps.devices);
+	const currentWallet = createCurrentWalletResolver({ getWalletSession: auth.getSession });
 	const signingDeps = {
-		signingEngine: deps.signingEngine,
+		createNearCommands: deps.createNearCommands,
+		createEvmFamilyCommands: deps.createEvmFamilyCommands,
 		nearClient: deps.nearClient,
 		configs: deps.configs,
-		getTheme: deps.getTheme,
-		getWalletIframe: deps.getWalletIframe,
 		currentWallet
 	};
-	const near = createNearSignerCapability(signingDeps);
-	const evmFamily = createTempoSignerCapability(signingDeps);
-	registerTransactionReviewBridge(near, {
-		getWalletIframe: deps.getWalletIframe,
-		createCapabilities: createReviewedCapabilities.bind(null, signingDeps)
+	const near = createNearSignerCapability({
+		...signingDeps,
+		commands: deps.createNearCommands({ kind: "ordinary" })
+	});
+	const commands = deps.createEvmFamilyCommands({ kind: "ordinary" });
+	const evmFamily = createEvmFamilyCapabilities({
+		...signingDeps,
+		commands
 	});
 	return {
-		walletIframeControls: {
-			initWalletIframe: async (walletId) => await deps.getWalletIframe().init(walletId),
-			isWalletIframeReady: () => deps.getWalletIframe().isReady(),
-			onWalletIframeReady: (listener) => deps.getWalletIframe().onReady(listener),
-			onWalletIframeLoginStatusChanged: (listener) => deps.getWalletIframe().onLoginStatusChanged(listener),
-			onWalletIframePreferencesChanged: (listener) => deps.getWalletIframe().onPreferencesChanged(listener)
-		},
-		preferences: createPreferencesCapability({
-			userPreferences: deps.userPreferences,
-			getWalletIframe: deps.getWalletIframe
-		}),
+		preferences: deps.preferences,
 		auth,
 		registration: {
-			resumePendingEcdsaRegistration: deps.registration.resumePendingEcdsaRegistration,
-			getNearProvisioningState: deps.registration.getNearProvisioningState,
-			onNearProvisioningStateChanged: deps.registration.onNearProvisioningStateChanged,
-			awaitNearReady: async (args) => await awaitNearReady({
-				getNearProvisioningState: deps.registration.getNearProvisioningState,
-				onNearProvisioningStateChanged: deps.registration.onNearProvisioningStateChanged
-			}, {
-				...args,
-				walletId: String(args.walletId)
-			}),
-			addWalletSigner: deps.registration.addWalletSigner,
+			getNearAccountState: deps.registration.getNearAccountState,
+			onNearAccountChange: deps.registration.onNearAccountChange,
+			waitForNearAccount: waitForNearAccount.bind(null, deps.registration),
+			addSigner: deps.registration.addSigner,
 			addPasskey: deps.registration.addPasskey,
-			addEmailOtp: deps.registration.addEmailOtp,
-			revokeAuthMethod: deps.registration.revokeAuthMethod,
-			registerWallet: deps.registration.registerWallet,
-			registerWithEmailOtp: deps.registration.registerWallet,
-			registerPasskey: deps.registration.registerPasskey,
-			requestEmailOtpEnrollmentChallenge: deps.registration.requestEmailOtpEnrollmentChallenge,
-			enrollEmailOtp: deps.registration.enrollEmailOtp
+			addEmail: deps.registration.addEmail,
+			removeAuthMethod: deps.registration.removeAuthMethod,
+			registerWallet: deps.registration.registerWallet
 		},
-		recovery: createRecoveryCapability({
-			getContext: getAccountSyncContext,
-			walletIframe: walletIframeRoutingSurface,
-			domain: deps.recovery
-		}),
+		recovery: deps.recovery,
 		devices,
 		keys: createKeyExportCapability({
 			configs: deps.configs,
@@ -100,16 +47,30 @@ function createPublicApi(deps) {
 			domain: deps.keys
 		}),
 		near,
-		tempo: evmFamily,
-		evm: createEvmSignerCapability({
-			signingEngine: deps.signingEngine,
+		tempo: evmFamily.tempo,
+		evm: evmFamily.evm
+	};
+}
+function createApplicationPublicApi(deps) {
+	const api = createPublicApi(deps);
+	const currentWallet = createCurrentWalletResolver({ getWalletSession: deps.auth.getSession });
+	registerTransactionReviewBridge(api.near, {
+		getWalletIframe: deps.getWalletIframe,
+		createCapabilities: createReviewedCapabilities.bind(null, {
 			nearClient: deps.nearClient,
 			configs: deps.configs,
-			getTheme: deps.getTheme,
-			getWalletIframe: deps.getWalletIframe,
-			currentWallet,
-			evmFamily
+			createNearCommands: deps.createNearCommands,
+			createEvmFamilyCommands: deps.createEvmFamilyCommands,
+			currentWallet
 		})
+	});
+	const coordinator = deps.getWalletIframe();
+	return {
+		...api,
+		auth: {
+			...api.auth,
+			onSessionChange: coordinator.onSessionChange.bind(coordinator)
+		}
 	};
 }
 function createReviewedCapabilities(deps, reservation) {
@@ -117,17 +78,21 @@ function createReviewedCapabilities(deps, reservation) {
 		kind: "reviewed",
 		reservation
 	};
-	const tempo = createTempoSignerCapability(deps, dispatch);
+	const commands = deps.createEvmFamilyCommands(dispatch);
+	const evmFamily = createEvmFamilyCapabilities({
+		...deps,
+		commands
+	});
 	return {
-		near: createNearSignerCapability(deps, dispatch),
-		tempo,
-		evm: createEvmSignerCapability({
+		near: createNearSignerCapability({
 			...deps,
-			evmFamily: tempo
-		}, dispatch)
+			commands: deps.createNearCommands(dispatch)
+		}),
+		tempo: evmFamily.tempo,
+		evm: evmFamily.evm
 	};
 }
 //#endregion
-export { createPublicApi };
+export { createApplicationPublicApi };
 
 //# sourceMappingURL=createPublicApi.js.map

package/dist/esm/SeamsWeb/publicApi/currentWallet.js

@@ -32,7 +32,7 @@ function createCurrentWalletResolver(deps) {
 			};
 			const identity = session.appIdentity;
 			if (identity.kind !== "resolved" || String(identity.walletId) !== String(authenticatedWalletId)) throw new Error("[seams] the authenticated wallet has no resolved NEAR account: pass an explicit `nearAccount`.");
-			if (!identity.nearAccountId) throw new Error("[seams] this wallet has no NEAR account yet (NEAR provisioning may still be pending): pass an explicit `nearAccount`, or await `seams.registration.awaitNearReady`.");
+			if (!identity.nearAccountId) throw new Error("[seams] this wallet has no NEAR account yet (NEAR provisioning may still be pending): pass an explicit `nearAccount`, or await `seams.registration.waitForNearAccount`.");
 			return {
 				walletSession: resolvedSession,
 				nearAccount: nearAccountRefFromAccountId(identity.nearAccountId)