@seams/wallet 0.8.0 → 0.9.1

package/dist/esm/core/signingEngine/uiConfirm/ui/preact/mountRecoveryCodeBackupSurface.js

@@ -1,82 +0,0 @@
-import { confirmationDocumentStyles } from "./confirmation-styles.js";
-import { appearanceTokenCssRule } from "../appearance-token-vars.js";
-import { RecoveryCodeBackupSurface } from "./RecoveryCodeBackupSurface.js";
-import { render } from "preact";
-import { jsx } from "preact/jsx-runtime";
-//#region src/core/signingEngine/uiConfirm/ui/preact/mountRecoveryCodeBackupSurface.tsx
-/** @jsxImportSource preact */
-let nextRecoverySurfaceId = 0;
-var MountedRecoveryCodeBackupSurface = class {
-	constructor(input) {
-		this.state = "mounted";
-		this.handleCancel = (event) => {
-			event.preventDefault();
-			this.input.onCancel();
-		};
-		this.handleStageChange = (stage) => {
-			if (this.state === "disposed") return;
-			this.dialog.dataset.seamsRecoveryStage = stage;
-		};
-		this.input = input;
-		this.document = input.parent.ownerDocument;
-		this.element = this.document.createElement("div");
-		this.element.id = `seams-recovery-surface-${++nextRecoverySurfaceId}`;
-		this.element.className = "seams-wallet-ui seams-recovery-code-backup-host";
-		this.element.dataset.seamsRecoverySurface = input.surface;
-		if (input.appearance) {
-			this.element.dataset.theme = input.appearance.theme.mode;
-			confirmationDocumentStyles(this.document).setDynamicRule(this.element.id, appearanceTokenCssRule(this.element.id, input.appearance));
-		}
-		this.dialog = this.document.createElement("dialog");
-		this.dialog.className = "seams-host-themed-dialog";
-		this.dialog.tabIndex = -1;
-		this.dialog.setAttribute("data-seams-wallet-recovery-backup-dialog", "");
-		this.dialog.dataset.seamsRecoverySurface = input.surface;
-		this.dialog.setAttribute("aria-labelledby", "seams-wallet-recovery-title");
-		this.dialog.setAttribute("aria-describedby", "seams-wallet-recovery-description");
-		this.dialog.addEventListener("cancel", this.handleCancel);
-		this.element.appendChild(this.dialog);
-		input.parent.appendChild(this.element);
-		try {
-			this.render(input.experience);
-			this.dialog.showModal();
-			this.focusTitle();
-			input.onShown(this.dialog);
-		} catch (error) {
-			this.dispose();
-			throw error;
-		}
-	}
-	update(experience) {
-		if (this.state === "disposed") return;
-		this.render(experience);
-	}
-	dispose() {
-		if (this.state === "disposed") return;
-		this.state = "disposed";
-		this.dialog.removeEventListener("cancel", this.handleCancel);
-		render(null, this.dialog);
-		if (this.dialog.open) this.dialog.close();
-		confirmationDocumentStyles(this.document).deleteDynamicRule(this.element.id);
-		this.element.remove();
-	}
-	render(experience) {
-		if (this.state === "disposed") return;
-		this.element.dataset.seamsRecoveryEntry = experience.kind;
-		render(/* @__PURE__ */ jsx(RecoveryCodeBackupSurface, {
-			experience,
-			onClose: this.input.onClose,
-			onStageChange: this.handleStageChange
-		}), this.dialog);
-	}
-	focusTitle() {
-		this.dialog.querySelector(".recovery-backup-title")?.focus();
-	}
-};
-function mountRecoveryCodeBackupSurface(input) {
-	return new MountedRecoveryCodeBackupSurface(input);
-}
-//#endregion
-export { mountRecoveryCodeBackupSurface };
-
-//# sourceMappingURL=mountRecoveryCodeBackupSurface.js.map

package/dist/esm/core/signingEngine/uiConfirm/ui/surface-measurement-binding.js

@@ -1,12 +0,0 @@
-//#region src/core/signingEngine/uiConfirm/ui/surface-measurement-binding.ts
-function sameSurfaceMeasurementBinding(left, right) {
-	if (!left || left.kind !== right.kind) return false;
-	switch (left.kind) {
-		case "disabled": return right.kind === "disabled";
-		case "wallet_iframe": return right.kind === "wallet_iframe" && left.requestId === right.requestId && left.postMeasurement === right.postMeasurement && left.hostSurfaceVariant === right.hostSurfaceVariant;
-	}
-}
-//#endregion
-export { sameSurfaceMeasurementBinding };
-
-//# sourceMappingURL=surface-measurement-binding.js.map

package/dist/esm/core/signingEngine/uiConfirm/ui/transaction-activity.js

@@ -1,46 +0,0 @@
-//#region src/core/signingEngine/uiConfirm/ui/transaction-activity.ts
-let activity = null;
-function retainTransactionActivity(requestId, surface) {
-	if (!activity || activity.requestId !== requestId) return false;
-	activity.surface = surface;
-	activity.retained = true;
-	publishActivity();
-	return true;
-}
-function publishActivity() {
-	if (!activity?.retained || !activity.surface) return;
-	if (!activity.surface.element.isConnected) {
-		activity = null;
-		return;
-	}
-	activity.surface.showReceipt({
-		state: activity.state,
-		view: activity.view,
-		onView: changeView,
-		onDismiss: dismissActivity
-	});
-	activity.post({
-		type: "TRANSACTION_ACTIVITY",
-		requestId: activity.requestId,
-		payload: activity.view
-	});
-}
-function changeView(view) {
-	if (!activity) return;
-	activity.view = view;
-	publishActivity();
-}
-function dismissActivity() {
-	const current = activity;
-	activity = null;
-	current?.surface?.dispose();
-	if (current?.retained) current.post({
-		type: "TRANSACTION_ACTIVITY",
-		requestId: current.requestId,
-		payload: "closed"
-	});
-}
-//#endregion
-export { retainTransactionActivity };
-
-//# sourceMappingURL=transaction-activity.js.map

package/dist/esm/core/signingEngine/uiConfirm/ui/transaction-display/confirmation-tree.js

@@ -1,27 +0,0 @@
-import { fromTransactionInputsWasm } from "../../../../../shared-ts/src/near/actions.js";
-import { buildDisplayTreeFromModel, buildDisplayTreeFromTxPayloads } from "./tree.js";
-//#region src/core/signingEngine/uiConfirm/ui/transaction-display/confirmation-tree.ts
-function operationHasAbiDecodeHint(operation) {
-	const hint = operation.abiDecodeHint;
-	if (hint && Array.isArray(hint.abi) && hint.abi.length > 0) {
-		const dataHex = String(hint.dataHex || "").trim();
-		if (dataHex && dataHex !== "0x") return true;
-	}
-	return (Array.isArray(operation.children) ? operation.children : []).some(operationHasAbiDecodeHint);
-}
-function modelHasAbiDecodeHints(model) {
-	return (Array.isArray(model.operations) ? model.operations : []).some(operationHasAbiDecodeHint);
-}
-function buildConfirmationTree(input) {
-	const txs = Array.isArray(input.txSigningRequests) ? input.txSigningRequests : [];
-	if (txs.length > 0) return buildDisplayTreeFromTxPayloads(fromTransactionInputsWasm(txs));
-	const model = input.model;
-	if (!model) return null;
-	const operations = Array.isArray(model.operations) ? model.operations : [];
-	const warnings = Array.isArray(model.warnings) ? model.warnings : [];
-	return operations.length > 0 || warnings.length > 0 ? buildDisplayTreeFromModel(model) : null;
-}
-//#endregion
-export { buildConfirmationTree, modelHasAbiDecodeHints };
-
-//# sourceMappingURL=confirmation-tree.js.map

package/dist/esm/core/signingEngine/uiConfirm/warmSessionUiConfirm.js

@@ -1,65 +0,0 @@
-//#region src/core/signingEngine/uiConfirm/warmSessionUiConfirm.ts
-function shouldReadPrimaryWarmSessionStatus(result) {
-	return !result.ok && (result.code === "not_found" || result.code === "worker_error");
-}
-function createWarmSessionAwarePasskeyMpcSession(args) {
-	const { base, secondary } = args;
-	const getWarmSessionStatus = async (statusArgs) => {
-		const secondaryStatus = await secondary.readWarmSessionStatusOnly(statusArgs.thresholdSessionId);
-		if (!shouldReadPrimaryWarmSessionStatus(secondaryStatus)) return secondaryStatus;
-		return await base.getWarmSessionStatus(statusArgs);
-	};
-	const getWarmSessionStatuses = async (statusArgs) => {
-		const secondaryResults = await Promise.all(statusArgs.thresholdSessionIds.map(async (thresholdSessionId) => ({
-			thresholdSessionId,
-			result: await secondary.readWarmSessionStatusOnly(thresholdSessionId)
-		})));
-		const unresolvedSessionIds = secondaryResults.filter((entry) => shouldReadPrimaryWarmSessionStatus(entry.result)).map((entry) => entry.thresholdSessionId);
-		const primary = unresolvedSessionIds.length === 0 ? { results: [] } : typeof base.getWarmSessionStatuses === "function" ? await base.getWarmSessionStatuses({ thresholdSessionIds: unresolvedSessionIds }) : { results: await Promise.all(unresolvedSessionIds.map(async (thresholdSessionId) => ({
-			thresholdSessionId,
-			result: await base.getWarmSessionStatus({ thresholdSessionId })
-		}))) };
-		const primaryByThresholdSessionId = new Map(primary.results.map((entry) => [entry.thresholdSessionId, entry]));
-		return { results: secondaryResults.map((entry) => shouldReadPrimaryWarmSessionStatus(entry.result) ? primaryByThresholdSessionId.get(entry.thresholdSessionId) || entry : entry) };
-	};
-	const clearVolatileWarmSessionMaterial = async (command) => {
-		await Promise.all([base.clearVolatileWarmSessionMaterial(command).catch(() => void 0), secondary.clearVolatileWarmSessionMaterial(command).catch(() => void 0)]);
-	};
-	return new Proxy(base, { get: (target, prop, receiver) => {
-		if (prop === "getWarmSessionStatus") return getWarmSessionStatus;
-		if (prop === "getWarmSessionStatuses") return getWarmSessionStatuses;
-		if (prop === "clearVolatileWarmSessionMaterial") return clearVolatileWarmSessionMaterial;
-		const value = Reflect.get(target, prop, receiver);
-		return typeof value === "function" ? value.bind(target) : value;
-	} });
-}
-function createWarmSessionStatusOnlyUiConfirm(args) {
-	const { base, secondary } = args;
-	const readCombinedWarmSessionStatusOnly = async (statusArgs) => {
-		const secondaryStatus = await secondary.readWarmSessionStatusOnly(statusArgs.thresholdSessionId);
-		if (!shouldReadPrimaryWarmSessionStatus(secondaryStatus)) return secondaryStatus;
-		return await base.getWarmSessionStatus(statusArgs);
-	};
-	const readCombinedWarmSessionStatusesOnly = async (statusArgs) => {
-		const normalizedThresholdSessionIds = Array.from(new Set((Array.isArray(statusArgs.thresholdSessionIds) ? statusArgs.thresholdSessionIds : []).map((thresholdSessionId) => String(thresholdSessionId || "").trim()).filter(Boolean)));
-		const secondaryResults = await Promise.all(normalizedThresholdSessionIds.map(async (thresholdSessionId) => ({
-			thresholdSessionId,
-			result: await secondary.readWarmSessionStatusOnly(thresholdSessionId)
-		})));
-		const unresolvedSessionIds = secondaryResults.filter((entry) => shouldReadPrimaryWarmSessionStatus(entry.result)).map((entry) => entry.thresholdSessionId);
-		const primaryResults = unresolvedSessionIds.length === 0 ? { results: [] } : await base.getWarmSessionStatuses({ thresholdSessionIds: unresolvedSessionIds });
-		const primaryByThresholdSessionId = new Map(primaryResults.results.map((entry) => [entry.thresholdSessionId, entry.result]));
-		return { results: secondaryResults.map((entry) => shouldReadPrimaryWarmSessionStatus(entry.result) ? {
-			thresholdSessionId: entry.thresholdSessionId,
-			result: primaryByThresholdSessionId.get(entry.thresholdSessionId) || entry.result
-		} : entry) };
-	};
-	return {
-		getWarmSessionStatus: readCombinedWarmSessionStatusOnly,
-		getWarmSessionStatuses: readCombinedWarmSessionStatusesOnly
-	};
-}
-//#endregion
-export { createWarmSessionAwarePasskeyMpcSession, createWarmSessionStatusOnlyUiConfirm };
-
-//# sourceMappingURL=warmSessionUiConfirm.js.map

package/dist/esm/core/signingEngine/walletCustody/activateEd25519Capability.js

@@ -1,122 +0,0 @@
-import { mpcMaterialActivationRefsEqual, parseThresholdEd25519SessionId } from "../../../shared-ts/src/utils/domainIds.js";
-import { base58Encode } from "../../../shared-ts/src/utils/base58.js";
-import { toAccountId } from "../../types/accountIds.js";
-import { nearEd25519SigningKeyIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
-import { registrationNearEd25519BranchKey } from "../../../shared-ts/src/utils/registrationSignerPlan.js";
-import { buildRouterAbEd25519SigningWalletSession } from "../session/routerAbSigningWalletSession.js";
-import { buildEmailOtpRouterAbEd25519WalletSessionState } from "../session/warmCapabilities/routerAbEd25519WalletSessionState.js";
-import { WalletCustodyEd25519ActiveClientV1 } from "./ed25519ActiveClient.js";
-//#region src/core/signingEngine/walletCustody/activateEd25519Capability.ts
-function requireNonEmpty(value, label) {
-	const normalized = String(value ?? "").trim();
-	if (!normalized) throw new Error(`${label} is required`);
-	return normalized;
-}
-function requirePositiveInteger(value, label) {
-	const parsed = Number(value);
-	if (!Number.isSafeInteger(parsed) || parsed < 1) throw new Error(`${label} must be a positive integer`);
-	return parsed;
-}
-function requireThresholdSessionId(value) {
-	const parsed = parseThresholdEd25519SessionId(value);
-	if (!parsed.ok) throw new Error("thresholdSessionId is invalid");
-	return parsed.value;
-}
-function assertBootstrapIdentity(args) {
-	const session = args.bootstrap.session;
-	const capability = args.bootstrap.capability;
-	if (!session.walletId || !session.walletSessionId || !session.quotaId || !session.thresholdSessionId) throw new Error("Wallet custody Ed25519 bootstrap Wallet Session binding is invalid");
-	if (args.operationCredential.walletSessionId !== session.walletSessionId) throw new Error("Wallet custody Ed25519 operation credential does not identify the bootstrap session");
-	const expectedWalletId = String(args.identity.walletId);
-	if (String(session.walletId) !== expectedWalletId || session.nearAccountId !== String(args.identity.nearAccountId) || session.thresholdSessionId !== args.identity.expectedThresholdSessionId || capability.applicationBinding.wallet_id !== expectedWalletId || capability.applicationBinding.key_creation_signer_slot !== args.identity.signerSlot || capability.nearAccountId !== String(args.identity.nearAccountId) || capability.lifecycle.accountId !== expectedWalletId || capability.lifecycle.thresholdSessionId !== args.identity.expectedThresholdSessionId || capability.lifecycle.signerSetId !== String(registrationNearEd25519BranchKey(args.identity.signerSlot)) || `ed25519:${base58Encode(Uint8Array.from(capability.registeredPublicKey))}` !== args.identity.expectedOperationalPublicKey) throw new Error("Wallet custody Ed25519 bootstrap identity changed");
-}
-async function buildWalletSessionState(args) {
-	const session = args.bootstrap.session;
-	const authorityScope = session.authorityScope;
-	if (authorityScope.kind !== "email_otp") throw new Error("Wallet custody Ed25519 bootstrap returned another authority kind");
-	const providerSubject = requireNonEmpty(args.providerSubject, "providerSubject");
-	if (authorityScope.providerUserId !== providerSubject) throw new Error("Wallet custody Ed25519 bootstrap provider subject changed");
-	if (args.authority.walletId !== session.walletId) throw new Error("Wallet custody Ed25519 Wallet Session authority changed wallets");
-	const signingWalletSession = buildRouterAbEd25519SigningWalletSession({
-		walletId: String(session.walletId),
-		nearAccountId: session.nearAccountId,
-		nearEd25519SigningKeyId: session.nearEd25519SigningKeyId,
-		walletSessionId: session.walletSessionId,
-		authorizationId: session.authorizationId,
-		quotaId: session.quotaId,
-		thresholdSessionId: session.thresholdSessionId,
-		remainingUses: session.remainingUses,
-		expiresAtMs: session.expiresAtMs,
-		runtimePolicyScope: session.runtimePolicyScope,
-		signingRootId: session.signingRootId,
-		signingRootVersion: session.signingRootVersion,
-		routerAbNormalSigning: session.routerAbNormalSigning,
-		walletSessionToken: args.operationCredential.token,
-		nowMs: Date.now()
-	});
-	if (!signingWalletSession.ok) throw new Error(`Wallet custody Ed25519 Wallet Session is unusable (${signingWalletSession.reason})`);
-	return buildEmailOtpRouterAbEd25519WalletSessionState({
-		walletId: session.walletId,
-		nearAccountId: toAccountId(session.nearAccountId),
-		nearEd25519SigningKeyId: nearEd25519SigningKeyIdFromString(session.nearEd25519SigningKeyId),
-		providerSubjectId: providerSubject,
-		signerSlot: requirePositiveInteger(args.bootstrap.capability.applicationBinding.key_creation_signer_slot, "server capability signerSlot"),
-		relayerUrl: requireNonEmpty(args.relayerUrl, "relayerUrl"),
-		authority: args.authority,
-		signingWalletSession: signingWalletSession.value
-	});
-}
-function buildMaterial(walletSessionState, activeClient) {
-	return {
-		activeClient,
-		facts: {
-			thresholdSessionId: walletSessionState.thresholdSessionId,
-			signer: walletSessionState.signingLane.identity.signer,
-			signingRootId: walletSessionState.signingRootId,
-			signingRootVersion: walletSessionState.signingRootVersion,
-			routerAbNormalSigning: walletSessionState.routerAbNormalSigning,
-			runtimePolicyScope: walletSessionState.runtimePolicyScope,
-			relayerUrl: walletSessionState.relayerUrl
-		}
-	};
-}
-async function activateWalletCustodyEd25519CapabilityV1(args) {
-	const identity = {
-		walletId: args.walletSession.walletId,
-		nearAccountId: requireNonEmpty(args.nearAccountId, "nearAccountId"),
-		signerSlot: requirePositiveInteger(args.signerSlot, "signerSlot"),
-		expectedOperationalPublicKey: requireNonEmpty(args.expectedOperationalPublicKey, "expectedOperationalPublicKey"),
-		expectedThresholdSessionId: requireNonEmpty(args.expectedThresholdSessionId, "expectedThresholdSessionId")
-	};
-	assertBootstrapIdentity({
-		bootstrap: args.bootstrap,
-		identity,
-		operationCredential: args.operationCredential
-	});
-	if (args.metadata.applicationBinding.wallet_id !== String(args.walletSession.walletId) || args.metadata.applicationBinding.key_creation_signer_slot !== identity.signerSlot || args.metadata.scope.threshold_session_id !== identity.expectedThresholdSessionId || !mpcMaterialActivationRefsEqual(args.metadata.materialActivation, args.bootstrap.capability.materialActivation)) throw new Error("Wallet custody Ed25519 active client metadata changed");
-	const walletSessionState = await buildWalletSessionState({
-		bootstrap: args.bootstrap,
-		operationCredential: args.operationCredential,
-		providerSubject: args.providerSubject,
-		relayerUrl: args.relayerUrl,
-		authority: args.authority
-	});
-	let activeClient = new WalletCustodyEd25519ActiveClientV1(args.workerContext, args.activeClientHandle, args.metadata);
-	try {
-		const material = buildMaterial(walletSessionState, activeClient);
-		const activatedIdentity = await args.activateCapability(material);
-		if (String(activatedIdentity.walletId) !== String(identity.walletId) || String(activatedIdentity.nearAccountId) !== identity.nearAccountId || !mpcMaterialActivationRefsEqual(activatedIdentity.materialActivation, args.metadata.materialActivation)) throw new Error("Wallet custody Ed25519 active client identity changed during activation");
-		activeClient = null;
-		return {
-			thresholdSessionId: requireThresholdSessionId(walletSessionState.thresholdSessionId),
-			material,
-			walletSessionState
-		};
-	} finally {
-		activeClient?.dispose();
-	}
-}
-//#endregion
-export { activateWalletCustodyEd25519CapabilityV1 };
-
-//# sourceMappingURL=activateEd25519Capability.js.map

package/dist/esm/core/signingEngine/walletCustody/ceremonyActiveClientMetadata.js

@@ -1,94 +0,0 @@
-import { parseMpcMaterialActivationRef } from "../../../shared-ts/src/utils/domainIds.js";
-import { parseRouterAbEd25519YaoRecoveryActivationResultV1, parseRouterAbEd25519YaoRegistrationActivationResultV1 } from "../../../shared-ts/src/utils/routerAbEd25519Yao.js";
-import { ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1 } from "../threshold/ed25519/yaoClient.js";
-//#region src/core/signingEngine/walletCustody/ceremonyActiveClientMetadata.ts
-/**
-* The active-client metadata for a key set the ceremony registered.
-*
-* The PRF-derived path read this off the live client it kept. A ceremony keeps
-* no client — it seals the material and returns public facts — so the metadata
-* has to be rebuilt from the two things that produced it: the admission request
-* this run registered under, and the Router's activation result.
-*
-* **Every identity here comes from the Router's receipt, not from this side.**
-* That matters most for `materialActivation`: the boundary that mints it is the
-* Router, exactly as on the PRF path. Nothing here invents one — a locally
-* minted activation ref would give that state a second owner.
-*/
-function walletCustodyEd25519ActiveClientMetadataV1(input) {
-	let raw;
-	try {
-		raw = JSON.parse(input.activationResultJson);
-	} catch {
-		throw new Error("the Router activation result is not JSON");
-	}
-	const result = parseRouterAbEd25519YaoRegistrationActivationResultV1(raw);
-	if (!result.ok) throw new Error(`Router activation result is invalid: ${result.message}`);
-	const activation = result.value;
-	const receipt = activation.public_receipt;
-	if (activation.binding.lifecycle.lifecycle_id !== input.admissionRequest.scope.lifecycle_id) throw new Error("the Router activation result belongs to another lifecycle");
-	const wire = receipt.material_activation;
-	const materialActivation = parseMpcMaterialActivationRef({
-		kind: wire.kind,
-		activationId: wire.activation_id,
-		capability: wire.capability,
-		materialOwner: wire.material_owner,
-		keyBinding: wire.key_binding,
-		lifecycleBinding: wire.lifecycle_binding,
-		signingWorker: wire.signing_worker
-	});
-	if (!materialActivation.ok) throw new Error(`Invalid activation material reference: ${materialActivation.error.message}`);
-	const participantIds = input.admissionRequest.participant_ids;
-	if (participantIds.length !== 2) throw new Error("an Ed25519 Yao registration has exactly two participants");
-	return {
-		kind: ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1,
-		scope: input.admissionRequest.scope,
-		applicationBinding: input.admissionRequest.application_binding,
-		participantIds: [participantIds[0], participantIds[1]],
-		registeredPublicKey: Uint8Array.from(receipt.registered_public_key),
-		signingWorkerVerifyingShare: Uint8Array.from(receipt.signing_worker_verifying_share),
-		stateEpoch: BigInt(receipt.state_epoch),
-		transcript: Uint8Array.from(receipt.transcript),
-		activeCapabilityBinding: activation.binding.session_id,
-		materialActivation: materialActivation.value
-	};
-}
-function walletRecoveryEd25519ActiveClientMetadataV1(input) {
-	let raw;
-	try {
-		raw = JSON.parse(input.activationResultJson);
-	} catch {
-		throw new Error("the Router recovery result is not JSON");
-	}
-	const parsed = parseRouterAbEd25519YaoRecoveryActivationResultV1(raw);
-	if (!parsed.ok) throw new Error(`Router recovery result is invalid: ${parsed.message}`);
-	if (parsed.value.binding.lifecycle.lifecycle_id !== input.admissionRequest.scope.lifecycle_id) throw new Error("the Router recovery result belongs to another lifecycle");
-	if (input.activationReceipt.binding.lifecycle.lifecycle_id !== input.admissionRequest.scope.lifecycle_id) throw new Error("the Router recovery activation belongs to another lifecycle");
-	const receipt = input.activationReceipt.public_receipt;
-	const materialActivation = parseMpcMaterialActivationRef({
-		kind: receipt.material_activation.kind,
-		activationId: receipt.material_activation.activation_id,
-		capability: receipt.material_activation.capability,
-		materialOwner: receipt.material_activation.material_owner,
-		keyBinding: receipt.material_activation.key_binding,
-		lifecycleBinding: receipt.material_activation.lifecycle_binding,
-		signingWorker: receipt.material_activation.signing_worker
-	});
-	if (!materialActivation.ok) throw new Error(`Invalid recovery material reference: ${materialActivation.error.message}`);
-	return {
-		kind: ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1,
-		scope: input.admissionRequest.scope,
-		applicationBinding: input.admissionRequest.application_binding,
-		participantIds: [input.admissionRequest.participant_ids[0], input.admissionRequest.participant_ids[1]],
-		registeredPublicKey: Uint8Array.from(receipt.registered_public_key),
-		signingWorkerVerifyingShare: Uint8Array.from(receipt.signing_worker_verifying_share),
-		stateEpoch: BigInt(receipt.state_epoch),
-		transcript: Uint8Array.from(receipt.transcript),
-		activeCapabilityBinding: [...input.activationReceipt.active_capability_binding],
-		materialActivation: materialActivation.value
-	};
-}
-//#endregion
-export { walletCustodyEd25519ActiveClientMetadataV1, walletRecoveryEd25519ActiveClientMetadataV1 };
-
-//# sourceMappingURL=ceremonyActiveClientMetadata.js.map

package/dist/esm/core/signingEngine/walletCustody/ceremonyDriver.js

@@ -1,171 +0,0 @@
-import { secureRandomId } from "../../../shared-ts/src/utils/secureRandomId.js";
-//#region src/core/signingEngine/walletCustody/ceremonyDriver.ts
-function ignoreDiscardFailure() {}
-function requireNearBegunRun(begun) {
-	if (begun.keySet !== "near_ed25519_v1") throw new Error("The custody worker began an EVM run for a NEAR request");
-	return begun;
-}
-function requireEvmBegunRun(begun) {
-	if (begun.keySet !== "evm_family_ecdsa_v1") throw new Error("The custody worker began a NEAR run for an EVM request");
-	return begun;
-}
-function requireEvmCompletedRun(completed) {
-	if (completed.keySet !== "evm_family_ecdsa_v1") throw new Error("The custody worker completed a NEAR run for an EVM request");
-	return completed;
-}
-function buildNearBeginCustody(custody) {
-	switch (custody.origin) {
-		case "establish": return {
-			origin: "establish",
-			walletId: custody.walletId
-		};
-		case "join": return {
-			origin: "join",
-			custodyJson: custody.custodyJson,
-			factorSecret: custody.factorSecret
-		};
-		case "recover": return {
-			origin: "recover",
-			custodyJson: custody.custodyJson,
-			recoveryCode: custody.recoveryCode
-		};
-		case "recover_and_reseal": return {
-			origin: "recover_and_reseal",
-			custodyJson: custody.custodyJson,
-			recoveryCode: custody.recoveryCode,
-			replacementFactorJson: custody.replacementFactorJson,
-			replacementFactorSecret: custody.replacementFactorSecret
-		};
-		default: return assertNeverCustodyOrigin(custody);
-	}
-}
-function buildFinishCustody(custody) {
-	switch (custody.origin) {
-		case "establish": return {
-			kind: "establish",
-			factorJson: custody.factorJson,
-			factorSecret: custody.factorSecret,
-			recoveryCodesJson: custody.recoveryCodesJson
-		};
-		case "join":
-		case "recover": return { kind: "existing" };
-		case "recover_and_reseal": return {
-			kind: "recover_reseal",
-			replacementFactorJson: custody.replacementFactorJson,
-			replacementFactorSecret: custody.replacementFactorSecret
-		};
-		default: return assertNeverCustodyOrigin(custody);
-	}
-}
-function assertNeverCustodyOrigin(value) {
-	throw new Error(`Unsupported wallet custody origin: ${String(value)}`);
-}
-function assertEvmCompletionMatchesCommit(preActivation, completion) {
-	if (preActivation.walletId !== completion.activation.walletId) throw new Error("EVM custody activation changed the wallet identity");
-	if (preActivation.keyManifestDigestB64u !== completion.activation.keyManifestDigestB64u) throw new Error("EVM custody activation changed the key manifest digest");
-	if (preActivation.clientRootPublicKey33B64u !== completion.activation.clientRootPublicKey33B64u) throw new Error("EVM custody activation changed the client root public key");
-}
-function isRegistrationBenchmarkDiagnosticsEnabled() {
-	return Reflect.get(globalThis, "__SEAMS_REGISTRATION_BENCHMARK_DIAGNOSTICS") === true;
-}
-function recordWalletCustodyTiming(ceremonyId, stage, startedAt) {
-	if (!isRegistrationBenchmarkDiagnosticsEnabled()) return;
-	try {
-		console.info("[WalletCustody] timing " + JSON.stringify({
-			event: "wallet_custody_timing",
-			ceremonyId,
-			stage: `custody.${stage}`,
-			durationMs: Math.round((performance.now() - startedAt) * 10) / 10,
-			outcome: "success"
-		}));
-	} catch {}
-}
-async function runWalletCustodyKeySetCeremony(input) {
-	const ceremonyId = input.ceremonyId || secureRandomId("wallet-custody-ceremony", 32, "wallet custody ceremony IDs");
-	const { custody, keySetRun } = input;
-	let workerAcceptedBegin = false;
-	try {
-		if (keySetRun.keySet === "near_ed25519_v1") {
-			let stageStartedAt = performance.now();
-			let executeRequestJson;
-			if (keySetRun.checkpointJson !== void 0) {
-				if (custody.origin !== "join") throw new Error("Checkpoint restoration requires existing custody");
-				executeRequestJson = (await input.runStep("restoreNearRegistration", {
-					ceremonyId,
-					custodyJson: custody.custodyJson,
-					factorSecret: custody.factorSecret,
-					checkpointJson: keySetRun.checkpointJson
-				})).yaoExecuteRequestJson;
-			} else executeRequestJson = requireNearBegunRun(await input.runStep("beginWalletCustodyKeySetRun", {
-				ceremonyId,
-				keySet: "near_ed25519_v1",
-				custody: buildNearBeginCustody(custody),
-				protocolInputsJson: keySetRun.protocolInputsJson
-			})).yaoExecuteRequestJson;
-			recordWalletCustodyTiming(ceremonyId, "begin", stageStartedAt);
-			workerAcceptedBegin = true;
-			if (keySetRun.beforeRouterRound) {
-				stageStartedAt = performance.now();
-				const checkpoint = await input.runStep("checkpointNearRegistration", { ceremonyId });
-				recordWalletCustodyTiming(ceremonyId, "checkpoint", stageStartedAt);
-				await keySetRun.beforeRouterRound(checkpoint.checkpointJson);
-			}
-			stageStartedAt = performance.now();
-			const protocolResultJson = await keySetRun.runRouterRound(executeRequestJson);
-			recordWalletCustodyTiming(ceremonyId, "router_round", stageStartedAt);
-			stageStartedAt = performance.now();
-			await input.runStep("completeWalletCustodyKeySetRun", {
-				ceremonyId,
-				keySet: "near_ed25519_v1",
-				protocolResultJson,
-				nearEd25519SigningKeyId: keySetRun.nearEd25519SigningKeyId,
-				recordedKeyManifestDigestB64u: input.recordedKeyManifestDigestB64u
-			});
-			recordWalletCustodyTiming(ceremonyId, "complete", stageStartedAt);
-			await keySetRun.afterRouterRoundCompleted?.(protocolResultJson);
-			stageStartedAt = performance.now();
-			const finished = await input.runStep("finishWalletCustodyKeySetRun", {
-				ceremonyId,
-				finish: buildFinishCustody(custody)
-			});
-			recordWalletCustodyTiming(ceremonyId, "finish", stageStartedAt);
-			return finished;
-		}
-		const begunResult = await input.runStep("beginWalletCustodyKeySetRun", {
-			ceremonyId,
-			keySet: "evm_family_ecdsa_v1",
-			custody,
-			protocolInputsJson: keySetRun.protocolInputsJson,
-			evmFamilySigningKeySlotId: keySetRun.evmFamilySigningKeySlotId,
-			recordedKeyManifestDigestB64u: input.recordedKeyManifestDigestB64u
-		});
-		workerAcceptedBegin = true;
-		const begun = requireEvmBegunRun(begunResult);
-		await keySetRun.beforeRelayerRound();
-		const protocolResultJson = await keySetRun.runRelayerRound({
-			contextBinding32B64u: begun.ecdsaContextBinding32B64u,
-			clientSharePublicKey33B64u: begun.ecdsaClientSharePublicKey33B64u,
-			clientShareRetryCounter: begun.ecdsaClientShareRetryCounter,
-			preActivationCommitPayload: begun.preActivationCommitPayload
-		});
-		const completed = requireEvmCompletedRun(await input.runStep("completeWalletCustodyKeySetRun", {
-			ceremonyId,
-			keySet: "evm_family_ecdsa_v1",
-			protocolResultJson
-		}));
-		assertEvmCompletionMatchesCommit(begun.preActivationCommitPayload, completed);
-		return {
-			...begun.preActivationCommitPayload,
-			clientRootPublicKey33B64u: completed.activation.clientRootPublicKey33B64u,
-			ecdsaReadyStateBlobB64u: completed.activation.ecdsaReadyStateBlobB64u,
-			ecdsaPublicFacts: completed.activation.ecdsaPublicFacts
-		};
-	} catch (error) {
-		if (workerAcceptedBegin) await input.runStep("discardWalletCustodyCeremony", { ceremonyId }).catch(ignoreDiscardFailure);
-		throw error;
-	}
-}
-//#endregion
-export { isRegistrationBenchmarkDiagnosticsEnabled, recordWalletCustodyTiming, runWalletCustodyKeySetCeremony };
-
-//# sourceMappingURL=ceremonyDriver.js.map

package/dist/esm/core/signingEngine/walletCustody/ceremonyStepRunner.js

@@ -1,20 +0,0 @@
-//#region src/core/signingEngine/walletCustody/ceremonyStepRunner.ts
-function requestWalletCustodyCeremonyOperation(workerContext, operation) {
-	return workerContext.requestWorkerOperation(operation);
-}
-function runWalletCustodyCeremonyStep(transport, type, payload) {
-	return transport.requestOperation({
-		kind: "walletCustodyCeremony",
-		request: {
-			type,
-			payload
-		}
-	});
-}
-function walletCustodyCeremonyStepRunner(transport) {
-	return runWalletCustodyCeremonyStep.bind(void 0, transport);
-}
-//#endregion
-export { requestWalletCustodyCeremonyOperation, walletCustodyCeremonyStepRunner };
-
-//# sourceMappingURL=ceremonyStepRunner.js.map