@seams/wallet 0.8.0 → 0.9.1

package/dist/esm/SeamsWeb/walletIframe/shared/facadeBoundary.js

@@ -0,0 +1,96 @@
+import { parseMpcMaterialActivationRef } from "../../../shared-ts/src/utils/domainIds.js";
+import { resolveAppearanceTheme, resolveThemePalette } from "../../../core/config/configHelpers.js";
+import { nearAccountRefFromAccountId, thresholdEcdsaChainTargetFromRequest, thresholdEcdsaChainTargetsEqual, walletSessionRefFromSession } from "../../../core/signingEngine/interfaces/ecdsaChainTarget.js";
+import { parseExactEcdsaSigningLaneIdentity, parseExactEd25519ExportMaterialIdentity } from "../../../core/signingEngine/session/identity/exactSigningLaneIdentity.js";
+//#region src/SeamsWeb/walletIframe/shared/facadeBoundary.ts
+function normalizeResolveExactKeyExportLaneInput(input) {
+	switch (input.kind) {
+		case "ecdsa": return {
+			kind: "ecdsa",
+			walletSession: walletSessionRefFromSession(input.walletSession),
+			chainTarget: thresholdEcdsaChainTargetFromRequest(input.chainTarget)
+		};
+		case "ed25519": return {
+			kind: "ed25519",
+			walletSession: walletSessionRefFromSession(input.walletSession),
+			nearAccount: nearAccountRefFromAccountId(input.nearAccount.accountId)
+		};
+	}
+}
+function normalizeResolveExactKeyExportLaneResult(result) {
+	switch (result.kind) {
+		case "relink_required": return {
+			kind: "relink_required",
+			reason: result.reason
+		};
+		case "ecdsa": return {
+			kind: "ecdsa",
+			laneIdentity: parseExactEcdsaSigningLaneIdentity(result.laneIdentity)
+		};
+		case "ed25519": {
+			const materialActivation = parseMpcMaterialActivationRef(result.materialActivation);
+			if (!materialActivation.ok) throw new Error(materialActivation.error.message);
+			return {
+				kind: "ed25519",
+				laneIdentity: parseExactEd25519ExportMaterialIdentity(result.laneIdentity),
+				materialActivation: materialActivation.value
+			};
+		}
+	}
+}
+function normalizeExportKeypairWithUIInput(input, theme) {
+	const resolvedOptions = {
+		...input.options,
+		theme: input.options.theme ?? theme
+	};
+	switch (input.kind) {
+		case "ecdsa": {
+			const laneIdentity = parseExactEcdsaSigningLaneIdentity(input.laneIdentity);
+			if (String(laneIdentity.signer.walletId) !== String(input.walletSession.walletId)) throw new Error("[SeamsWeb] key export lane wallet does not match wallet session");
+			if (!thresholdEcdsaChainTargetsEqual(laneIdentity.signer.chainTarget, input.chainTarget)) throw new Error("[SeamsWeb] key export lane chain target does not match request target");
+			return {
+				kind: "ecdsa",
+				chainTarget: input.chainTarget,
+				walletSession: input.walletSession,
+				laneIdentity,
+				options: resolvedOptions
+			};
+		}
+		case "ed25519": {
+			const laneIdentity = parseExactEd25519ExportMaterialIdentity(input.laneIdentity);
+			const materialActivation = parseMpcMaterialActivationRef(input.materialActivation);
+			if (!materialActivation.ok) throw new Error(materialActivation.error.message);
+			if (String(laneIdentity.signer.account.wallet.walletId) !== String(input.walletSession.walletId)) throw new Error("[SeamsWeb] Ed25519 export lane wallet does not match wallet session");
+			if (String(laneIdentity.signer.account.nearAccountId) !== String(input.nearAccount.accountId)) throw new Error("[SeamsWeb] Ed25519 export lane does not match the NEAR account");
+			return {
+				kind: "ed25519",
+				nearAccount: nearAccountRefFromAccountId(input.nearAccount.accountId),
+				walletSession: input.walletSession,
+				laneIdentity,
+				materialActivation: materialActivation.value,
+				options: resolvedOptions
+			};
+		}
+	}
+}
+function resolveRuntimeAppearance(current, input) {
+	const rawInput = input;
+	return {
+		theme: resolveAppearanceTheme({
+			value: rawInput.theme,
+			fallback: current.theme,
+			legacyTokens: rawInput.tokens
+		}),
+		palette: resolveThemePalette({
+			value: rawInput.palette,
+			fallback: current.palette
+		})
+	};
+}
+function deliverNearProvisioningStateChanged(listener, event) {
+	if (event.event === "registration.near_provisioning_changed") listener(event);
+}
+//#endregion
+export { deliverNearProvisioningStateChanged, normalizeExportKeypairWithUIInput, normalizeResolveExactKeyExportLaneInput, normalizeResolveExactKeyExportLaneResult, resolveRuntimeAppearance };
+
+//# sourceMappingURL=facadeBoundary.js.map

package/dist/esm/SeamsWeb/walletIframe/shared/messages.js

@@ -1,5 +1,6 @@
-import { parseWalletAuthMethodId, parseWalletId } from "../../../shared-ts/src/utils/domainIds.js";
 import { isPlainObject } from "../../../shared-ts/src/utils/validation.js";
+import { parseWalletAuthMethodId, parseWalletId } from "../../../shared-ts/src/utils/domainIds.js";
+import { parseWalletSessionHome } from "../../../shared-ts/src/device-linking/activeWalletSession.js";
 import { walletIframeRequestIdFromBoundary } from "../../../core/types/walletIframeIdentity.js";
 //#region src/SeamsWeb/walletIframe/shared/messages.ts
 const WALLET_IFRAME_SURFACE_MEASUREMENT_MAX_CSS_PX = 4096;
@@ -286,35 +287,6 @@ function parseHostedAuthMenuExternalAuthRequest(value) {
 		mode
 	};
 }
-function parseHostedAuthMenuDemoEmailOtpDelivery(value) {
-	const record = recordFromBoundary(value);
-	if (!record || !isWireSerializable(record) || record.kind !== "hosted_auth_menu_demo_email_otp_delivery_v1" || !hasOnlyKeys(record, [
-		"kind",
-		"authMenuSessionId",
-		"delivery"
-	])) return null;
-	const authMenuSessionId = hostedAuthMenuSessionIdFromBoundary(record.authMenuSessionId);
-	const delivery = recordFromBoundary(record.delivery);
-	if (!authMenuSessionId || !delivery || !hasOnlyKeys(delivery, [
-		"kind",
-		"status",
-		"emailHint",
-		"otpCode"
-	]) || delivery.kind !== "demo_code_response" && delivery.kind !== "provider_and_demo_code" || delivery.status !== "sent" && delivery.status !== "reused") return null;
-	const emailHint = boundaryString(delivery.emailHint, "emailHint");
-	const otpCode = boundaryString(delivery.otpCode, "otpCode");
-	if (!emailHint || !otpCode || !/^\d{6}$/.test(otpCode)) return null;
-	return {
-		kind: record.kind,
-		authMenuSessionId,
-		delivery: {
-			kind: delivery.kind,
-			status: delivery.status,
-			emailHint,
-			otpCode
-		}
-	};
-}
 function parseHostedAuthMenuErrorEvent(value) {
 	const record = recordFromBoundary(value);
 	if (!record || !isWireSerializable(record) || record.kind !== "hosted_auth_menu_error_v1" || !hasOnlyKeys(record, [
@@ -486,9 +458,10 @@ function parseHostedAuthMenuOutcome(value) {
 		default: return null;
 	}
 }
-const WALLET_PROTOCOL_VERSION = "2.0.0";
+const WALLET_PROTOCOL_VERSION = "15.0.0";
 const WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH = "WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH";
 const HOSTED_WALLET_REDEMPTION_PAYLOAD_FIELDS = [
+	"home",
 	"exchangeCode",
 	"nonce",
 	"appOrigin",
@@ -515,6 +488,7 @@ function parsePMRedeemHostedWalletSeamsSessionPayload(value) {
 	if (Object.keys(value).length !== HOSTED_WALLET_REDEMPTION_PAYLOAD_FIELDS.length) throw new Error("hosted-wallet redemption payload fields are invalid");
 	for (const field of HOSTED_WALLET_REDEMPTION_PAYLOAD_FIELDS) if (!Object.hasOwn(value, field)) throw new Error("hosted-wallet redemption payload fields are invalid");
 	return {
+		home: parseWalletSessionHome(value.home),
 		exchangeCode: compactHostedWalletExchangeValue(value.exchangeCode, "exchangeCode"),
 		nonce: compactHostedWalletExchangeValue(value.nonce, "nonce"),
 		appOrigin: canonicalHostedWalletOrigin(value.appOrigin, "appOrigin"),
@@ -583,6 +557,6 @@ function isRegistrationTimingSpanV1(value) {
 	return span.event === "seams_registration_timing_span_v1" && (span.span === "registration.post_touch_id" || span.span === "frontend.wallet_ready") && span.operation === "registration" && (span.outcome === "success" || span.outcome === "failure") && typeof span.duration_ms === "number" && Number.isFinite(span.duration_ms) && typeof span.trace_id === "string" && /^[0-9a-f]{32}$/.test(span.trace_id);
 }
 //#endregion
-export { HOSTED_AUTH_MENU_ERROR_EVENT, WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH, WALLET_PROTOCOL_VERSION, buildHostedAuthMenuCancelPayload, buildHostedAuthMenuOpenRequest, buildPMRedeemHostedWalletSeamsSessionPayload, hostedAuthMenuExternalAuthRequestIdFromBoundary, hostedAuthMenuSessionIdFromBoundary, isDeviceLinkEmailOtpBaseFactorSelectionProgressV1, isDeviceLinkTargetFactorActivationProgressV1, isRegistrationTimingSpanV1, parseHostedAuthMenuDemoEmailOtpDelivery, parseHostedAuthMenuErrorEvent, parseHostedAuthMenuExternalAuthRequest, parseHostedAuthMenuExternalAuthResolution, parseHostedAuthMenuOpenRequest, parseHostedAuthMenuOutcome, parseWalletIframeSurfaceMeasurement };
+export { HOSTED_AUTH_MENU_ERROR_EVENT, WALLET_IFRAME_PROTOCOL_VERSION_MISMATCH, WALLET_PROTOCOL_VERSION, buildHostedAuthMenuCancelPayload, buildHostedAuthMenuOpenRequest, buildPMRedeemHostedWalletSeamsSessionPayload, hostedAuthMenuExternalAuthRequestIdFromBoundary, hostedAuthMenuSessionIdFromBoundary, isDeviceLinkEmailOtpBaseFactorSelectionProgressV1, isDeviceLinkTargetFactorActivationProgressV1, isRegistrationTimingSpanV1, parseHostedAuthMenuErrorEvent, parseHostedAuthMenuExternalAuthRequest, parseHostedAuthMenuExternalAuthResolution, parseHostedAuthMenuOpenRequest, parseHostedAuthMenuOutcome, parseWalletIframeSurfaceMeasurement };
 
 //# sourceMappingURL=messages.js.map

package/dist/esm/advanced.js

@@ -1,13 +1,13 @@
-import { parseWebAuthnRpId } from "./shared-ts/src/utils/domainIds.js";
 import { normalizeLowercaseString, normalizeTrimmedString } from "./shared-ts/src/utils/normalize.js";
+import { parseWebAuthnRpId } from "./shared-ts/src/utils/domainIds.js";
 import { base64UrlDecode, base64UrlEncode } from "./shared-ts/src/utils/base64.js";
-import { nearAccountRefFromAccountId, thresholdEcdsaChainTargetFromConfig, toWalletId, walletIdFromWalletProfile, walletSessionRefFromSession } from "./core/signingEngine/interfaces/ecdsaChainTarget.js";
 import { DEFAULT_WALLET_SESSION_REMAINING_USES, DEFAULT_WALLET_SESSION_TTL_MS, MAX_WALLET_SESSION_REMAINING_USES, MAX_WALLET_SESSION_TTL_MS } from "./shared-ts/src/threshold/sessionPolicy.js";
-import { keccak256Bytes } from "./shared-ts/src/utils/keccak.js";
 import { encodeSignedTransactionBase64 } from "./shared-ts/src/near/nearClient.js";
 import { MinimalNearClient } from "./core/rpcClients/near/NearClient.js";
+import { nearAccountRefFromAccountId, thresholdEcdsaChainTargetFromConfig, toWalletId, walletIdFromWalletProfile, walletSessionRefFromSession } from "./core/signingEngine/interfaces/ecdsaChainTarget.js";
 import { parseRpcHexQuantity } from "./shared-ts/src/utils/evmRpcResults.js";
 import { createEvmClient } from "./core/rpcClients/evm/EvmClient.js";
 import { TEMPO_ALPHA_USD_FEE_TOKEN, TEMPO_FEE_MANAGER_ABI, TEMPO_FEE_MANAGER_CONTRACT, TEMPO_SET_USER_TOKEN_SELECTOR, TEMPO_TOKEN_CURRENCY_SELECTOR, TEMPO_TOKEN_PAUSED_SELECTOR, TEMPO_USER_TOKENS_SELECTOR, buildTempoSetUserTokenCall, buildTempoSetUserTokenRequest, decodeTempoUserTokenResult, encodeTempoSetUserTokenCalldata, encodeTempoUserTokensCalldata, readTempoFeeTokenPreference, validateTempoFeeToken } from "./core/signingEngine/chains/tempo/feeToken.js";
+import { keccak256Bytes } from "./shared-ts/src/utils/keccak.js";
 import { createIntentId } from "./core/idempotency/createIntentId.js";
 export { DEFAULT_WALLET_SESSION_REMAINING_USES, DEFAULT_WALLET_SESSION_TTL_MS, MAX_WALLET_SESSION_REMAINING_USES, MAX_WALLET_SESSION_TTL_MS, MinimalNearClient, TEMPO_ALPHA_USD_FEE_TOKEN, TEMPO_FEE_MANAGER_ABI, TEMPO_FEE_MANAGER_CONTRACT, TEMPO_SET_USER_TOKEN_SELECTOR, TEMPO_TOKEN_CURRENCY_SELECTOR, TEMPO_TOKEN_PAUSED_SELECTOR, TEMPO_USER_TOKENS_SELECTOR, base64UrlDecode, base64UrlEncode, buildTempoSetUserTokenCall, buildTempoSetUserTokenRequest, createEvmClient, createIntentId, decodeTempoUserTokenResult, encodeSignedTransactionBase64, encodeTempoSetUserTokenCalldata, encodeTempoUserTokensCalldata, keccak256Bytes, nearAccountRefFromAccountId, normalizeLowercaseString, normalizeTrimmedString, parseRpcHexQuantity as parseEvmRpcHexQuantity, parseWebAuthnRpId, readTempoFeeTokenPreference, thresholdEcdsaChainTargetFromConfig, toWalletId, validateTempoFeeToken, walletIdFromWalletProfile, walletSessionRefFromSession };

package/dist/esm/build-paths.js

@@ -68,9 +68,7 @@ const BUILD_PATHS = {
 		ED25519_YAO_CLIENT_WASM: "router_ab_ed25519_yao_client_bg.wasm",
 		ECDSA_CLIENT_JS: "router_ab_ecdsa_client.js",
 		ECDSA_CLIENT_WASM: "router_ab_ecdsa_client_bg.wasm",
-		WASM_EVM_CRYPTO_WASM: "evm_crypto.wasm",
 		WASM_EVM_CRYPTO_BG_WASM: "evm_crypto_bg.wasm",
-		WASM_TEMPO_SIGNER_WASM: "tempo_signer.wasm",
 		WASM_TEMPO_SIGNER_BG_WASM: "tempo_signer_bg.wasm",
 		EMAIL_OTP_RUNTIME_JS: "email_otp_runtime.js",
 		EMAIL_OTP_RUNTIME_WASM: "email_otp_runtime_bg.wasm",
@@ -94,9 +92,7 @@ const BUILD_PATHS = {
 		ED25519_YAO_CLIENT_WASM: "/sdk/workers/router_ab_ed25519_yao_client_bg.wasm",
 		ECDSA_CLIENT_JS: "/sdk/workers/router_ab_ecdsa_client.js",
 		ECDSA_CLIENT_WASM: "/sdk/workers/router_ab_ecdsa_client_bg.wasm",
-		WASM_EVM_CRYPTO_WASM: "/sdk/workers/evm_crypto.wasm",
 		WASM_EVM_CRYPTO_BG_WASM: "/sdk/workers/evm_crypto_bg.wasm",
-		WASM_TEMPO_SIGNER_WASM: "/sdk/workers/tempo_signer.wasm",
 		WASM_TEMPO_SIGNER_BG_WASM: "/sdk/workers/tempo_signer_bg.wasm",
 		EMAIL_OTP_RUNTIME_JS: "/sdk/workers/email_otp_runtime.js",
 		EMAIL_OTP_RUNTIME_WASM: "/sdk/workers/email_otp_runtime_bg.wasm",

package/dist/esm/core/accountData/near/accountProjection.js

@@ -1,9 +1,9 @@
 import { normalizeTrimmedString } from "../../../shared-ts/src/utils/normalize.js";
 import { toAccountId } from "../../types/accountIds.js";
 import { SIGNER_AUTH_METHODS, SIGNER_KINDS } from "../../../shared-ts/src/utils/signerDomain.js";
-import { getNearChainCandidates } from "./accountRefs.js";
-import { getLastSelectedProfileAccountByChain, resolveProfileAccountProjection } from "../../indexedDB/profileAccountProjection.js";
 import { normalizeIndexedDbAccountAddress } from "../../indexedDB/normalization.js";
+import { getLastSelectedProfileAccountByChain, resolveProfileAccountProjection } from "../../indexedDB/profileAccountProjection.js";
+import { getNearChainCandidates } from "./accountRefs.js";
 //#region src/core/accountData/near/accountProjection.ts
 function toWalletAuthMethod(authMethod) {
 	if (authMethod === SIGNER_AUTH_METHODS.emailOtp) return SIGNER_AUTH_METHODS.emailOtp;
@@ -113,6 +113,6 @@ async function listNearAccountProjections(clientDB) {
 	return users;
 }
 //#endregion
-export { getLastSelectedNearAccount, getLastSelectedNearAccountProjection, getNearAccountProjection, listNearAccountProjections };
+export { getLastSelectedNearAccountProjection, getNearAccountProjection, listNearAccountProjections };
 
 //# sourceMappingURL=accountProjection.js.map

package/dist/esm/core/accountData/near/keyMaterial.js

@@ -1,8 +1,8 @@
 import { normalizeTrimmedString } from "../../../shared-ts/src/utils/normalize.js";
-import { ensureEd25519Prefix } from "../../../shared-ts/src/utils/near.js";
 import { buildThresholdEd25519Participants2pV1, parseThresholdEd25519ParticipantsV1 } from "../../../shared-ts/src/threshold/participants.js";
-import { buildNearAccountRefs } from "./accountRefs.js";
+import { ensureEd25519Prefix } from "../../../shared-ts/src/utils/near.js";
 import { getAccountKeyMaterial, storeAccountKeyMaterial } from "../../indexedDB/accountKeyMaterial.js";
+import { buildNearAccountRefs } from "./accountRefs.js";
 //#region src/core/accountData/near/keyMaterial.ts
 function applyOptionalNearKeyMaterialFields(target, input) {
 	if (input.wrapKeySalt) target.wrapKeySalt = input.wrapKeySalt;

package/dist/esm/core/config/chains.js

@@ -56,34 +56,7 @@ function resolvePrimaryExplorerUrl(chains, family) {
 	if (!chain) return void 0;
 	return normalizeTrimmedString(chain.explorerUrl) || void 0;
 }
-function normalizeChainIdToken(chainId) {
-	if (typeof chainId === "bigint") return chainId >= 0n ? chainId.toString() : void 0;
-	if (typeof chainId === "number") {
-		if (!Number.isSafeInteger(chainId) || chainId < 0) return void 0;
-		return String(chainId);
-	}
-}
-function resolveExplorerUrlForChainFamily(args) {
-	const chains = args.chains;
-	if (!Array.isArray(chains) || chains.length === 0) return void 0;
-	const normalizedChainId = normalizeChainIdToken(args.chainId);
-	if (normalizedChainId) for (const chain of chains) {
-		if (chainFamilyFromNetwork(chain.network) !== args.family) continue;
-		const configuredChainId = normalizeChainIdToken(chain.chainId);
-		if (!configuredChainId || configuredChainId !== normalizedChainId) continue;
-		const explorerUrl = normalizeTrimmedString(chain.explorerUrl);
-		if (explorerUrl) return explorerUrl;
-	}
-	return resolvePrimaryExplorerUrl(chains, args.family);
-}
-function cloneResolvedChainConfig(chain) {
-	const maybeChainId = "chainId" in chain ? chain.chainId : void 0;
-	return {
-		...chain,
-		...typeof maybeChainId === "number" ? { chainId: maybeChainId } : {}
-	};
-}
 //#endregion
-export { chainFamilyFromNetwork, cloneResolvedChainConfig, isEvmChainNetwork, isNearChainNetwork, isSeamsChainNetwork, isTempoChainNetwork, requirePrimaryChainByFamily, resolveExplorerUrlForChainFamily, resolveNearNetwork, resolvePrimaryExplorerUrl, resolvePrimaryNearRpcUrl };
+export { chainFamilyFromNetwork, isEvmChainNetwork, isNearChainNetwork, isSeamsChainNetwork, isTempoChainNetwork, requirePrimaryChainByFamily, resolveNearNetwork, resolvePrimaryExplorerUrl, resolvePrimaryNearRpcUrl };
 
 //# sourceMappingURL=chains.js.map

package/dist/esm/core/config/configBuilder.js

@@ -1,7 +1,7 @@
 import { normalizeTrimmedString } from "../../shared-ts/src/utils/normalize.js";
-import { SIGNING_SESSION_SEAL_ALG, SIGNING_SESSION_SEAL_GROUP_ID } from "../../shared-ts/src/utils/signingSessionSeal.js";
 import { copyEcdsaSignerProvisioningDefaults, resolveAppearanceTheme, resolveBoolean, resolveChains, resolveIntegerInRange, resolveThemePalette } from "./configHelpers.js";
 import { normalizeWalletHostVariant } from "../browser/walletIframe/hostVariant.js";
+import { SIGNING_SESSION_SEAL_ALG, SIGNING_SESSION_SEAL_GROUP_ID } from "../../shared-ts/src/utils/signingSessionSeal.js";
 //#region src/core/config/configBuilder.ts
 const THRESHOLD_ECDSA_PRESIGN_POOL_LIMITS = {
 	targetDepth: {
@@ -98,7 +98,6 @@ function resolveRouterAbNormalSigningConfig(args) {
 function buildConfigsFromDefaults(args) {
 	const defaults = args.defaults;
 	const overrides = args.overrides ?? {};
-	const allowDirectWalletMode = args.options?.allowDirectWalletMode === "wallet_host";
 	const chains = resolveChains(defaults.network.chains, overrides.chains);
 	const relayerUrl = normalizeTrimmedString(overrides.relayer?.url ?? defaults.network.relayer.url);
 	const relayerAccount = normalizeTrimmedString(overrides.relayerAccount) || normalizeTrimmedString(defaults.network.relayer.accountId);
@@ -145,13 +144,12 @@ function buildConfigsFromDefaults(args) {
 	});
 	const walletOriginRaw = overrides.iframeWallet?.walletOrigin;
 	const walletOrigin = normalizeTrimmedString(walletOriginRaw);
-	const walletMode = walletOrigin ? "iframe" : allowDirectWalletMode ? "direct" : "iframe";
 	const walletRpIdOverride = overrides.iframeWallet?.rpIdOverride ?? defaults.wallet.iframe.rpIdOverride;
 	const walletServicePath = normalizeTrimmedString(overrides.iframeWallet?.walletServicePath) || normalizeTrimmedString(defaults.wallet.iframe.servicePath) || "/wallet-service";
 	const walletSdkBasePath = normalizeTrimmedString(overrides.iframeWallet?.sdkBasePath) || normalizeTrimmedString(defaults.wallet.iframe.sdkBasePath) || "/sdk";
 	const walletHostVariant = normalizeWalletHostVariant(overrides.iframeWallet?.walletHostVariant || defaults.wallet.iframe.walletHostVariant);
 	if (!relayerUrl) throw new Error("[configPresets] Missing required config: relayer.url");
-	if (walletMode === "iframe" && !walletOrigin) throw new HostedWalletOriginRequiredError();
+	if (!walletOrigin) throw new HostedWalletOriginRequiredError();
 	const registration = resolveRegistrationConfig({
 		overrides,
 		defaults
@@ -199,7 +197,7 @@ function buildConfigsFromDefaults(args) {
 			thresholdEcdsa: { provisioningDefaults }
 		},
 		webauthn: { authenticatorOptions: overrides.authenticatorOptions ?? defaults.webauthn.authenticatorOptions },
-		wallet: walletMode === "iframe" ? {
+		wallet: {
 			mode: "iframe",
 			iframe: {
 				origin: walletOrigin,
@@ -208,15 +206,6 @@ function buildConfigsFromDefaults(args) {
 				walletHostVariant,
 				rpIdOverride: walletRpIdOverride
 			}
-		} : {
-			mode: "direct",
-			iframe: {
-				...walletOrigin ? { origin: walletOrigin } : {},
-				servicePath: walletServicePath,
-				sdkBasePath: walletSdkBasePath,
-				walletHostVariant,
-				rpIdOverride: walletRpIdOverride
-			}
 		},
 		ui: { appearance: {
 			theme: appearanceTheme,

package/dist/esm/core/config/defaultConfigs.js

@@ -1,6 +1,5 @@
-import "../../shared-ts/src/threshold/participants.js";
-import { DEFAULT_THRESHOLD_SESSION_TTL_MS } from "../signingEngine/threshold/sessionPolicy.js";
 import { UserVerificationPolicy } from "../../shared-ts/src/utils/authenticatorOptions.js";
+import { DEFAULT_THRESHOLD_SESSION_TTL_MS } from "../signingEngine/threshold/sessionPolicy.js";
 import { buildConfigsFromDefaults } from "./configBuilder.js";
 //#region src/core/config/defaultConfigs.ts
 const DEFAULT_ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_POLICY = {
@@ -80,7 +79,7 @@ const PASSKEY_MANAGER_DEFAULT_CONFIGS = {
 		} }
 	},
 	wallet: {
-		mode: "direct",
+		mode: "iframe",
 		iframe: {
 			origin: "https://wallet.example.localhost",
 			servicePath: "/wallet-service",
@@ -106,12 +105,11 @@ const PASSKEY_MANAGER_DEFAULT_CONFIGS = {
 		palette: "default"
 	} }
 };
-function buildConfigsFromEnv(overrides = {}, options) {
+function buildConfigsFromEnv(overrides = {}) {
 	return buildConfigsFromDefaults({
 		defaults: PASSKEY_MANAGER_DEFAULT_CONFIGS,
 		overrides,
-		fallbackRouterAbEcdsaDerivationPresignaturePoolPolicy: DEFAULT_ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_POLICY,
-		options
+		fallbackRouterAbEcdsaDerivationPresignaturePoolPolicy: DEFAULT_ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_POLICY
 	});
 }
 //#endregion

package/dist/esm/core/{signingEngine/workerManager/ecdsaPresignLifecycle.js → config/presignatures.js}

@@ -1,6 +1,6 @@
-//#region src/core/signingEngine/workerManager/ecdsaPresignLifecycle.ts
+//#region src/core/config/presignatures.ts
 const MAX_DURABLE_CLIENT_PRESIGNATURE_LIFETIME_MS = 2160 * 60 * 6e4;
 //#endregion
 export { MAX_DURABLE_CLIENT_PRESIGNATURE_LIFETIME_MS };
 
-//# sourceMappingURL=ecdsaPresignLifecycle.js.map
+//# sourceMappingURL=presignatures.js.map

package/dist/esm/core/diagnostics/registration.js

@@ -0,0 +1,8 @@
+//#region src/core/diagnostics/registration.ts
+function isRegistrationBenchmarkDiagnosticsEnabled() {
+	return Reflect.get(globalThis, "__SEAMS_REGISTRATION_BENCHMARK_DIAGNOSTICS") === true;
+}
+//#endregion
+export { isRegistrationBenchmarkDiagnosticsEnabled };
+
+//# sourceMappingURL=registration.js.map

package/dist/esm/core/indexedDB/accountKeyMaterial.js

@@ -62,6 +62,6 @@ async function storeAccountKeyMaterial(deps, input) {
 	await deps.keyMaterialStore.storeKeyMaterial(record);
 }
 //#endregion
-export { getAccountKeyMaterial, resolveAccountKeyMaterialTarget, storeAccountKeyMaterial };
+export { getAccountKeyMaterial, storeAccountKeyMaterial };
 
 //# sourceMappingURL=accountKeyMaterial.js.map

package/dist/esm/core/indexedDB/linkedAuthoritySignerMaterial.js

@@ -1,26 +1,13 @@
-import { mpcMaterialActivationRefsEqual, parseMpcMaterialActivationRef, parseWalletAuthMethodId, parseWalletAuthorityId, parseWebAuthnCredentialIdB64u, parseWebAuthnRpId } from "../../shared-ts/src/utils/domainIds.js";
 import { requireCanonicalString, requireRecord } from "../../shared-ts/src/utils/validation.js";
+import { mpcMaterialActivationRefsEqual, parseMpcMaterialActivationRef, parseWalletAuthMethodId, parseWalletAuthorityId, parseWebAuthnCredentialIdB64u, parseWebAuthnRpId } from "../../shared-ts/src/utils/domainIds.js";
 import { base64UrlDecode, base64UrlEncode } from "../../shared-ts/src/utils/base64.js";
-import { alphabetizeStringify, sha256Bytes } from "../../shared-ts/src/utils/digests.js";
-import { parseDigestB64u, sha256DigestB64u } from "../../shared-ts/src/utils/canonicalPrimitives.js";
+import { parseDigestB64u } from "../../shared-ts/src/utils/canonicalPrimitives.js";
 import { routerAbMpcMaterialActivationRefFromWire } from "../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
 import { parseRouterAbEd25519YaoActivationPublicReceiptV1, parseRouterAbEd25519YaoApplicationBindingFactsV1, parseRouterAbEd25519YaoCeremonyBindingV1, parseRouterAbEd25519YaoParticipantIdsV1 } from "../../shared-ts/src/utils/routerAbEd25519Yao.js";
-import { parseEcdsaThresholdKeyId } from "../signingEngine/session/keyMaterialBrands.js";
 import { parseLinkedDeviceEcdsaSourcePreservingActivationReceiptV1 } from "../../shared-ts/src/device-linking/sourceContribution.js";
 import "../../shared-ts/src/device-linking/index.js";
+import { parseEcdsaThresholdKeyId } from "../signingEngine/session/keyMaterialBrands.js";
 //#region src/core/indexedDB/linkedAuthoritySignerMaterial.ts
-function linkedAuthorityMaterialSealAadV1(input) {
-	return alphabetizeStringify({
-		domain: "seams/wallet/ordinary-authority-material-seal-aad/v1",
-		authorityId: String(input.authorityId),
-		walletId: String(input.walletId),
-		walletAuthMethodId: String(input.walletAuthMethodId),
-		packageSetDigestB64u: String(input.packageSetDigestB64u),
-		targetFactor: input.targetFactor,
-		keyFamily: input.keyFamily,
-		materialActivation: input.materialActivation
-	});
-}
 function parseWalletAuthorityLinkedSignerMaterialRecordV1(value) {
 	const record = requireRecord(value, "linked signer material record");
 	if (record.kind !== "wallet_authority_linked_signer_material_v1") throw new Error("linked signer material record kind is invalid");
@@ -83,99 +70,6 @@ function parseWalletAuthorityLinkedSignerMaterialRecordV1(value) {
 		publicFacts
 	};
 }
-async function openWalletAuthorityLinkedSignerMaterialV1(input) {
-	const record = input.record;
-	if (record.authorityId !== input.expected.authorityId || record.walletAuthMethodId !== input.expected.walletAuthMethodId || record.keyFamily !== input.expected.keyFamily || !mpcMaterialActivationRefsEqual(record.materialActivation, input.expected.materialActivation)) return {
-		kind: "wallet_authority_linked_signer_material_open_failed_v1",
-		reason: "identity_mismatch"
-	};
-	if (!sameLinkedAuthorityMaterialTargetFactorV1(record.targetFactor, input.expected.targetFactor)) return {
-		kind: "wallet_authority_linked_signer_material_open_failed_v1",
-		reason: "target_factor_mismatch"
-	};
-	if (record.packageSetDigestB64u !== input.expected.packageSetDigestB64u) return {
-		kind: "wallet_authority_linked_signer_material_open_failed_v1",
-		reason: "package_digest_mismatch"
-	};
-	if (input.factorSecret.byteLength !== 32) return {
-		kind: "wallet_authority_linked_signer_material_open_failed_v1",
-		reason: "factor_secret_invalid"
-	};
-	let sealed;
-	try {
-		sealed = base64UrlDecode(record.sealedMaterialB64u);
-	} catch {
-		return {
-			kind: "wallet_authority_linked_signer_material_open_failed_v1",
-			reason: "sealed_material_invalid"
-		};
-	}
-	if (sealed.length < 29) {
-		sealed.fill(0);
-		return {
-			kind: "wallet_authority_linked_signer_material_open_failed_v1",
-			reason: "sealed_material_invalid"
-		};
-	}
-	if (await sha256DigestB64u(sealed) !== record.sealedMaterialDigestB64u) {
-		sealed.fill(0);
-		return {
-			kind: "wallet_authority_linked_signer_material_open_failed_v1",
-			reason: "sealed_material_digest_mismatch"
-		};
-	}
-	const encoder = new TextEncoder();
-	const aad = encoder.encode(linkedAuthorityMaterialSealAadV1(input.expected));
-	const salt = await sha256Bytes(aad);
-	const nonce = sealed.slice(0, 12);
-	const ciphertext = sealed.slice(12);
-	try {
-		const factorKey = await globalThis.crypto.subtle.importKey("raw", input.factorSecret, { name: "HKDF" }, false, ["deriveKey"]);
-		const openKey = await globalThis.crypto.subtle.deriveKey({
-			name: "HKDF",
-			hash: "SHA-256",
-			salt,
-			info: encoder.encode("seams/wallet/ordinary-authority-material-seal/v1")
-		}, factorKey, {
-			name: "AES-GCM",
-			length: 256
-		}, false, ["decrypt"]);
-		const material = new Uint8Array(await globalThis.crypto.subtle.decrypt({
-			name: "AES-GCM",
-			iv: nonce,
-			additionalData: aad
-		}, openKey, ciphertext));
-		if (record.keyFamily === "ed25519") return {
-			kind: "opened_wallet_authority_linked_signer_material_v1",
-			authorityId: record.authorityId,
-			walletAuthMethodId: record.walletAuthMethodId,
-			keyFamily: "ed25519",
-			materialActivation: record.materialActivation,
-			publicFacts: record.publicFacts,
-			material
-		};
-		return {
-			kind: "opened_wallet_authority_linked_signer_material_v1",
-			authorityId: record.authorityId,
-			walletAuthMethodId: record.walletAuthMethodId,
-			keyFamily: "ecdsa_secp256k1",
-			materialActivation: record.materialActivation,
-			publicFacts: record.publicFacts,
-			material
-		};
-	} catch {
-		return {
-			kind: "wallet_authority_linked_signer_material_open_failed_v1",
-			reason: "sealed_material_authentication_failed"
-		};
-	} finally {
-		sealed.fill(0);
-		aad.fill(0);
-		salt.fill(0);
-		nonce.fill(0);
-		ciphertext.fill(0);
-	}
-}
 function parseWalletAuthorityLinkedMaterialTargetFactorV1(value) {
 	const record = requireRecord(value, "linked signer material target factor");
 	if (record.kind === "passkey") {
@@ -270,22 +164,7 @@ function exactKeys(record, keys, label) {
 	const actual = Object.keys(record);
 	if (actual.length !== keys.length || keys.some((key) => !actual.includes(key))) throw new Error(`${label} fields are invalid`);
 }
-function sameLinkedAuthorityMaterialTargetFactorV1(left, right) {
-	if (left.kind !== right.kind) return false;
-	switch (left.kind) {
-		case "passkey":
-			if (right.kind !== "passkey") return false;
-			return left.walletAuthMethodId === right.walletAuthMethodId && left.verificationDigestB64u === right.verificationDigestB64u && left.rpId === right.rpId && left.credentialIdB64u === right.credentialIdB64u;
-		case "email_otp":
-			if (right.kind !== "email_otp") return false;
-			return left.walletAuthMethodId === right.walletAuthMethodId && left.verificationDigestB64u === right.verificationDigestB64u && left.emailHashHex === right.emailHashHex && left.registrationAuthorityId === right.registrationAuthorityId;
-		default: return assertNeverLinkedAuthorityMaterialTargetFactor(left);
-	}
-}
-function assertNeverLinkedAuthorityMaterialTargetFactor(value) {
-	throw new Error(`unsupported linked authority material target factor: ${String(value)}`);
-}
 //#endregion
-export { openWalletAuthorityLinkedSignerMaterialV1, parseWalletAuthorityLinkedSignerMaterialRecordV1 };
+export { parseWalletAuthorityLinkedSignerMaterialRecordV1 };
 
 //# sourceMappingURL=linkedAuthoritySignerMaterial.js.map

package/dist/esm/core/indexedDB/normalization.js

@@ -18,7 +18,13 @@ function normalizeIndexedDbAccountModel(model) {
 function toIndexedDbChainTargetKey(chainTarget) {
 	return thresholdEcdsaChainTargetKey(chainTarget);
 }
+function parseStoredNonEmptyString(value) {
+	return typeof value === "string" && value.length > 0 && value.trim() === value ? value : null;
+}
+function signerChainTargetKey(args) {
+	return [args.chainIdKey, args.accountAddress].join("\0");
+}
 //#endregion
-export { normalizeIndexedDbAccountAddress, normalizeIndexedDbAccountModel, normalizeIndexedDbChainIdKey, normalizeLastUserScope, toIndexedDbChainTargetKey };
+export { normalizeIndexedDbAccountAddress, normalizeIndexedDbAccountModel, normalizeIndexedDbChainIdKey, normalizeLastUserScope, parseStoredNonEmptyString, signerChainTargetKey, toIndexedDbChainTargetKey };
 
 //# sourceMappingURL=normalization.js.map

package/dist/esm/core/indexedDB/pendingWalletRecoveryCommit.js

@@ -1,9 +1,9 @@
 import { parseEmailOtpProviderUserId, parseWalletAuthMethodId, parseWalletAuthorityId, parseWalletId, parseWalletRecoveryOperationId, parseWebAuthnCredentialIdB64u, parseWebAuthnRpId } from "../../shared-ts/src/utils/domainIds.js";
 import { parseDeviceId } from "../../shared-ts/src/authorization/capabilityKinds.js";
-import { parseRecoveryCodeReservationId } from "../../shared-ts/src/wallet-recovery/recoveryCodeReservation.js";
 import { parseWalletAuthMethodRecordV2, sameWalletAuthMethodRecordV2 } from "../../shared-ts/src/utils/walletAuthMethodRecord.js";
 import { isActiveRecoveredWalletAuthorityV1, parseWalletAuthorityV1 } from "../../shared-ts/src/authorization/walletAuthority.js";
 import { sameWalletEcdsaSignerActivationV1, sameWalletEd25519SignerActivationV1 } from "../../shared-ts/src/authorization/walletSignerActivationEquality.js";
+import { parseRecoveryCodeReservationId } from "../../shared-ts/src/wallet-recovery/recoveryCodeReservation.js";
 import { parseWalletRecoveryCommittedProjectionV1 } from "../../shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js";
 //#region src/core/indexedDB/pendingWalletRecoveryCommit.ts
 const RECORD_KIND = "pending_wallet_recovery_commit_v1";