@seams/wallet 0.8.0 → 0.9.1

package/dist/types/wallet/src/core/signingEngine/interfaces/near.d.ts

@@ -1,3 +1,4 @@
+import type { WalletSessionHome } from '../../../../../shared-ts/src/device-linking/contracts';
 import type { SignedTransaction } from '../../rpcClients/near/NearClient';
 import type { AccountId } from '../../types/accountIds';
 import type { TransactionInputWasm } from '../../types/actions';
@@ -34,6 +35,7 @@ import type { SigningOperationStateRef } from '../flows/shared/signingStateMachi
 import type { ExclusiveUnion } from '../../../../../shared-ts/src/utils/variant';
 type NearResolvedEd25519WalletSessionAuth = {
     kind: 'wallet_session_opaque';
+    home: WalletSessionHome;
     walletSessionToken: string;
 };
 export type NearPasskeyOperationStepUpPlan = {
@@ -238,6 +240,7 @@ export type NearNep413Payload = {
         message: string;
         recipient: string;
         nonce: string;
+        callbackUrl: string | null;
         state: string | null;
         accountId: string;
         signerSlot?: number;

package/dist/types/wallet/src/core/signingEngine/nonce/nearTransactionReadiness.d.ts

@@ -22,5 +22,8 @@ export type NearTransactionReadiness = ExclusiveUnion<{
     kind: 'funding_required';
     request: NearFundingRequest;
 }>;
+export type NearTransactionContextReady = Extract<NearTransactionReadiness, {
+    kind: 'context_ready';
+}>;
 export {};
 //# sourceMappingURL=nearTransactionReadiness.d.ts.map

package/dist/types/wallet/src/core/signingEngine/routerAb/ecdsaDerivation/presignaturePool.d.ts

@@ -1,3 +1,4 @@
+import type { PreparedWalletSessionStatus } from '../../../rpcClients/relayer/walletSessionAuthorizationStatus';
 import { type RouterAbEcdsaDerivationOperationDigestsV1Wire, type RouterAbEcdsaDerivationNormalSigningScopeV1, type RouterAbEcdsaOperationStepUpPreparationV1Wire } from '../../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
 import type { RouterAbMpcMaterialActivationRefWire, RouterAbNormalSigningAuthorizationWire } from '../../../../../../shared-ts/src/utils/routerAbNormalSigningIdentity';
 import type { RouterAbEcdsaDerivationPresignaturePoolPolicy, RouterAbEcdsaDerivationPresignaturePoolPolicyInput } from '../../../types/seams';
@@ -6,7 +7,7 @@ import type { WorkerOperationContext } from '../../workerManager/executeWorkerOp
 import { type EcdsaClientPresignPoolIdentity } from '../../workerManager/ecdsaPresignPoolIdentity';
 import type { EcdsaClientPresignAdmissionStorage, EcdsaClientPresignReservationResult } from '../../workerManager/ecdsaPresignLifecycle';
 import { type RouterAbEcdsaDerivationPoolFillAuthorization, type RouterAbEcdsaDerivationPresignaturePoolFill } from './poolFillRoutes';
-import { type RouterAbOwnerNormalSigningCredential } from '../../../rpcClients/relayer/routerAbNormalSigning';
+import { type RouterAbEcdsaPresignCredential } from '../../../rpcClients/relayer/routerAbNormalSigning';
 import { type EcdsaClientVerifyingShareB64u, type EcdsaKeyHandle, type EcdsaThresholdKeyId } from '../../session/keyMaterialBrands';
 type RouterAbEcdsaDerivationClientPresignatureRefillInputBase = {
     relayerUrl: string;
@@ -16,7 +17,7 @@ type RouterAbEcdsaDerivationClientPresignatureRefillInputBase = {
     clientSigningMaterial: RouterAbEcdsaDerivationClientSigningMaterialSource;
     thresholdEcdsaPublicKeyB64u?: string;
     relayerVerifyingShareB64u?: string;
-    credential: RouterAbOwnerNormalSigningCredential;
+    credential: RouterAbEcdsaPresignCredential;
     materialActivation: RouterAbMpcMaterialActivationRefWire;
     routerAbEcdsaDerivationPoolFill: RouterAbEcdsaDerivationPresignaturePoolFill;
     workerCtx: WorkerOperationContext;
@@ -26,12 +27,14 @@ type RouterAbEcdsaDerivationSigningAuthorization = {
     readonly authorization: Extract<RouterAbNormalSigningAuthorizationWire, {
         readonly kind: 'reusable_wallet_session';
     }>;
+    readonly reconcileSession: (status: PreparedWalletSessionStatus) => Promise<void>;
     readonly operation?: never;
 } | {
     readonly authorization: Extract<RouterAbNormalSigningAuthorizationWire, {
         readonly kind: 'operation_step_up';
     }>;
     readonly operation: RouterAbEcdsaOperationStepUpPreparationV1Wire;
+    readonly reconcileSession?: never;
 };
 type RouterAbEcdsaDerivationClientPresignatureRefillNotScheduledReason = 'disabled' | 'depth_above_trigger' | 'depth_at_or_above_target' | 'in_flight_for_pool_key' | 'global_in_flight_limit' | 'invalid_args';
 export type RouterAbEcdsaDerivationClientPresignatureRefillScheduleResult = {
@@ -130,8 +133,8 @@ type RouterAbEcdsaDerivationCoordinatorOk = {
     recId: number;
 };
 type RouterAbEcdsaDerivationCoordinatorResult = RouterAbEcdsaDerivationCoordinatorOk | RouterAbEcdsaDerivationCoordinatorError;
-export declare function resolveRouterAbEcdsaDerivationPresignaturePoolPolicy(input?: RouterAbEcdsaDerivationPresignaturePoolPolicyInput | RouterAbEcdsaDerivationPresignaturePoolPolicy): RouterAbEcdsaDerivationPresignaturePoolPolicy;
 export declare function waitForRouterAbEcdsaDerivationClientPresignaturePoolReady(args: {
+    ownershipGeneration: number;
     relayerUrl: string;
     scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
     materialActivation: RouterAbMpcMaterialActivationRefWire;
@@ -139,6 +142,7 @@ export declare function waitForRouterAbEcdsaDerivationClientPresignaturePoolRead
 export declare function clearAllRouterAbEcdsaDerivationClientPresignatures(): void;
 export declare function clearRouterAbEcdsaDerivationClientPresignaturesForWallet(walletIdInput: string): void;
 export declare function getRouterAbEcdsaDerivationClientPresignaturePoolDepth(args: {
+    ownershipGeneration: number;
     relayerUrl: string;
     scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
     materialActivation: RouterAbMpcMaterialActivationRefWire;
@@ -155,7 +159,7 @@ type EcdsaPoolSigningInput = {
     operationId: string;
     operationDigests: RouterAbEcdsaDerivationOperationDigestsV1Wire;
     materialActivation: RouterAbMpcMaterialActivationRefWire;
-    credential: RouterAbOwnerNormalSigningCredential;
+    credential: RouterAbEcdsaPresignCredential;
     signingDigest32: Uint8Array;
     clientSigningMaterial: RouterAbEcdsaDerivationClientSigningMaterialSource;
     expiresAtMs?: number;
@@ -168,7 +172,7 @@ export declare function signRouterAbEcdsaDerivationDigestWithPool(args: {
     operationId: string;
     operationDigests: RouterAbEcdsaDerivationOperationDigestsV1Wire;
     materialActivation: RouterAbMpcMaterialActivationRefWire;
-    credential: RouterAbOwnerNormalSigningCredential;
+    credential: RouterAbEcdsaPresignCredential;
     keyHandle: EcdsaKeyHandle;
     signingDigest32: Uint8Array;
     clientSigningMaterial: RouterAbEcdsaDerivationClientSigningMaterialSource;

package/dist/types/wallet/src/core/signingEngine/routerAb/ecdsaDerivation/presignaturePoolPolicy.d.ts

@@ -0,0 +1,5 @@
+import type { RouterAbEcdsaDerivationPresignaturePoolPolicy, RouterAbEcdsaDerivationPresignaturePoolPolicyInput } from '../../../types/seams';
+export declare function normalizePresignPoolTargetDepth(value: unknown, fallback: number): number;
+export declare function normalizePresignPoolLowWatermark(value: unknown, fallback: number, targetDepth: number): number;
+export declare function resolveRouterAbEcdsaDerivationPresignaturePoolPolicy(input?: RouterAbEcdsaDerivationPresignaturePoolPolicyInput | RouterAbEcdsaDerivationPresignaturePoolPolicy): RouterAbEcdsaDerivationPresignaturePoolPolicy;
+//# sourceMappingURL=presignaturePoolPolicy.d.ts.map

package/dist/types/wallet/src/core/signingEngine/session/SigningSessionCoordinator.d.ts

@@ -2,7 +2,7 @@ import type { SigningSessionStatus } from '../../types/seams';
 import type { MpcWalletSigningQuotaId, WalletSessionId } from '../../../../../shared-ts/src/authorization/capabilityKinds';
 import { type SdkLifecycleEventListener, type SigningSessionExpiredEvent, type SigningSessionExpiryDetectionSource } from '../../types/sdkSentEvents';
 import { type SigningPlannerDecisionTraceEvent, type EcdsaSigningSessionReadiness, type Ed25519SigningSessionReadiness, type SigningSessionPlannerInput, type SigningSessionReadiness } from './planning/planner';
-import { type SigningSessionStatusCheck, type SigningSessionStatusReader, type WalletSessionStatusIdentity } from './lifecycle/walletSessionStatus';
+import { type SigningSessionStatusCheck, type SigningSessionStatusReader } from './lifecycle/walletSessionStatus';
 import type { SigningAdmissionQueueKey } from './operationState/authorizationAdmission';
 import { type WalletSessionReadinessDeps } from './availability/readiness';
 import { type ClientWalletSessionExpiryInvalidationResult, type ClientWalletSessionInvalidationReadinessDeps } from './availability/clientSessionExpiryInvalidator';
@@ -17,11 +17,8 @@ export type { SigningSessionReadiness };
 type ResolveSigningSessionAuthPlanFromReadinessOptions = {
     expiresAtMs?: number;
     remainingUses?: number;
-    usesNeeded?: number;
-    trustedStatusAuth?: WalletSessionStatusIdentity;
     forceFreshAuth?: boolean;
     sensitiveOperationPolicy?: SigningSessionPlannerInput['sensitiveOperationPolicy'];
-    missingWhenExpiresAtMissing?: boolean;
 };
 type ResolveEd25519SigningSessionAuthPlanFromReadinessInput = ResolveSigningSessionAuthPlanFromReadinessOptions & {
     lane: SelectedEd25519SigningSessionPlanningLane;
@@ -49,7 +46,6 @@ type SigningSessionStatusPort = {
         walletSessionId: WalletSessionId;
         quotaId: MpcWalletSigningQuotaId;
         targetThresholdSessionIds?: string[];
-        trustedStatusAuth?: WalletSessionStatusIdentity;
         sessionStatusCheck?: SigningSessionStatusCheck;
     }): Promise<SigningSessionStatus | null>;
     getLaneClaimsForWallet(walletId: WalletId | string): Promise<Map<string, WarmSessionPrfClaim | null>>;
@@ -104,12 +100,10 @@ export declare class SigningSessionCoordinator implements SigningSessionStatusPo
         operationId: SigningOperationId;
         operationFingerprint: SigningOperationFingerprint;
     }): void;
-    private readWalletSessionStatus;
     runWalletSessionQuotaAdmissionRetry<TValue>(args: {
         queueKey: SigningAdmissionQueueKey;
         refresh: () => Promise<TValue>;
         retryAfterRefresh: () => Promise<TValue>;
     }): Promise<TValue>;
-    private applyWalletSessionStatusToEd25519Readiness;
 }
 //# sourceMappingURL=SigningSessionCoordinator.d.ts.map

package/dist/types/wallet/src/core/signingEngine/session/availability/persistedAvailableSigningLanes.d.ts

@@ -19,7 +19,7 @@ export type PersistedAvailableSigningLanesDeps = {
         authMethod?: SignerAuthMethod;
     }, statusReads: WalletSessionStatusReadScope) => Promise<readonly EvmFamilyEcdsaSigningCapabilityAvailability[]>;
 };
-export declare function readPersistedAvailableSigningLanes(deps: PersistedAvailableSigningLanesDeps, args: Omit<ReadAvailableSigningLanesInput, 'ecdsaChainTargets'>, ecdsaChainTargets: readonly ThresholdEcdsaChainTarget[]): Promise<AvailableSigningLanes>;
+export declare function readPersistedAvailableSigningLanes(deps: PersistedAvailableSigningLanesDeps, args: Omit<ReadAvailableSigningLanesInput, 'ecdsaChainTargets'>, ecdsaChainTargets: readonly ThresholdEcdsaChainTarget[], statusReads: WalletSessionStatusReadScope): Promise<AvailableSigningLanes>;
 /**
  * Human operational read: lanes for one exact owner. The auth-method
  * narrowing and the owner filter both derive from the scope — callers supply

package/dist/types/wallet/src/core/signingEngine/session/availability/readiness.d.ts

@@ -8,8 +8,6 @@ import type { ExactWalletSessionReadPorts } from '../identity/exactWalletSession
 import { type WarmSessionReadPortsInput } from '../warmCapabilities/readModel';
 import { type WalletSessionStatusOwner } from '../lifecycle/walletSessionStatus';
 import type { MpcWalletSigningQuotaId, WalletSessionId } from '../../../../../../shared-ts/src/authorization/capabilityKinds';
-import type { Ed25519SigningSessionReadiness } from '../planning/planner';
-import type { ThresholdEd25519SessionId } from '../operationState/types';
 import { type MpcMaterialActivationRef } from '../../../../../../shared-ts/src/utils/domainIds';
 import type { WalletId } from '../../interfaces/ecdsaChainTarget';
 type SigningSessionLane = {
@@ -44,27 +42,12 @@ type WalletSessionClaimReaderDeps = {
     touchConfirm?: WarmSessionReadPortsInput;
     getEmailOtpWarmSessionStatus?: (thresholdSessionId: string) => Promise<WarmSessionStatusResult>;
 };
-type SigningSessionReadinessWithStatus = {
-    readiness: Ed25519SigningSessionReadiness;
-    expiresAtMs: number;
-    remainingUses: number;
-};
 export declare function normalizeNonEmpty(value: unknown): string;
 export declare function warmClaimFromRecordPolicy(args: {
     thresholdSessionId: string;
     remainingUses: number;
     expiresAtMs: number;
 }): WarmSessionPrfClaim;
-export declare function applyWalletSessionStatusToSigningSessionReadiness(args: {
-    status: Ed25519SigningSessionReadiness['status'];
-    thresholdSessionId: ThresholdEd25519SessionId;
-    expiresAtMs: number;
-    remainingUses: number;
-    walletSessionStatus?: SigningSessionStatus | null;
-    usesNeeded?: number;
-    nowMs?: number;
-    missingWhenExpiresAtMissing?: boolean;
-}): SigningSessionReadinessWithStatus;
 export declare function discoverLanesForWallet(deps: WalletSessionReadinessDeps, walletId: WalletId): Promise<DiscoveredSigningSessionLane[]>;
 export declare function walletScopedClaimsForLanes(args: {
     lanes: DiscoveredSigningSessionLane[];

package/dist/types/wallet/src/core/signingEngine/session/emailOtp/EmailOtpWalletSessionCoordinator.d.ts

@@ -4,7 +4,7 @@ import type { EmailOtpWalletSessionCoordinatorDeps } from './ports';
 import type { EmailOtpWarmMaterialTarget } from '../../workerManager/workerTypes';
 import type { EmailOtpTransactionSigningChallenge } from './publicTypes';
 import { type EmailOtpThresholdEcdsaLoginResult, type LoginEmailOtpEcdsaCapabilityArgs, type LoginEmailOtpEcdsaCapabilityForSigningArgs } from './ecdsaLogin';
-import { type EmailOtpEcdsaExportArtifact, type ExportEcdsaKeyWithDurableAuthorizationArgs, type ExportEd25519YaoSeedWithFreshEmailOtpLaneArgs, type RequestEmailOtpChallengeArgs, type RequestEmailOtpExportChallengeArgs } from './exportRecoveryRuntime';
+import { type EmailOtpEcdsaExportArtifact, type ExportEcdsaKeyWithDurableAuthorizationArgs, type ExportEd25519YaoSeedWithFreshEmailOtpLaneArgs, type RequestEmailOtpTransactionChallengeArgs, type RequestEmailOtpExportChallengeArgs } from './exportRecoveryRuntime';
 import { EmailOtpSealedSessionRegistry } from './sealedSessionRegistry';
 import type { WarmSessionMaterialOperationTarget } from './sealedRuntimePurpose';
 export type { EmailOtpThresholdEcdsaLoginResult, LoginEmailOtpEcdsaCapabilityArgs, } from './ecdsaLogin';
@@ -29,7 +29,7 @@ export declare class EmailOtpWalletSessionCoordinator {
         uses?: number;
     }): Promise<WarmSessionStatusResult>;
     clearVolatileWarmSessionMaterial(target: EmailOtpWarmMaterialTarget): Promise<void>;
-    requestTransactionSigningChallenge(args: RequestEmailOtpChallengeArgs): Promise<EmailOtpTransactionSigningChallenge>;
+    requestTransactionSigningChallenge(args: RequestEmailOtpTransactionChallengeArgs): Promise<EmailOtpTransactionSigningChallenge>;
     requestExportChallenge(args: RequestEmailOtpExportChallengeArgs): Promise<EmailOtpTransactionSigningChallenge>;
     exportEcdsaKeyWithDurableAuthorization(args: ExportEcdsaKeyWithDurableAuthorizationArgs): Promise<EmailOtpEcdsaExportArtifact>;
     exportEd25519YaoSeedWithFreshEmailOtpLane(args: ExportEd25519YaoSeedWithFreshEmailOtpLaneArgs): Promise<{

package/dist/types/wallet/src/core/signingEngine/session/emailOtp/ecdsaSigningSessionAuthority.d.ts

@@ -1,38 +1,7 @@
-import { type EmailOtpAuthLane } from '../../stepUpConfirmation/otpPrompt/authLane';
-import type { ExactEcdsaSealedRuntime } from '../material/ecdsaSealedRuntime';
-import type { ActiveEcdsaCapabilityManifest } from '../material/ecdsaCapabilityManifest';
-import { type ExactEvmFamilyWalletSessionAuthorization } from '../material/ecdsaSigningCapability';
-import type { WalletSessionAuthorizationExactOperationCredentialReadResult } from '../../../indexedDB/seamsWalletDB/walletSessionAuthorizationStore';
-import { type OwnerLaneScopeStores } from '../identity/ownerLaneScope';
-import type { ResolveSelectedWalletAuthorityResultV1 } from '../../../indexedDB/seamsWalletDB/repositories';
-import type { ActiveWalletAuthorityV1 } from '../../../../../../shared-ts/src/authorization/walletAuthority';
-import { type ThresholdEcdsaChainTarget } from '../../interfaces/ecdsaChainTarget';
-import type { WalletId } from '../../interfaces/ecdsaChainTarget';
-import type { ActiveEcdsaCapabilityRuntimeResolver } from '../material/activeEcdsaCapabilityRuntime';
-import type { ActiveWalletAuthMethodRecordV2 } from '../../../../../../shared-ts/src/utils/walletAuthMethodRecord';
-export type EmailOtpEcdsaSigningSessionAuthorityPorts = {
-    readonly resolveActiveEcdsaCapabilityRuntime: ActiveEcdsaCapabilityRuntimeResolver;
-    readonly factorStores: OwnerLaneScopeStores;
-    readonly resolveSelectedWalletAuthority: (walletId: string) => Promise<ResolveSelectedWalletAuthorityResultV1>;
-    readonly readExactWalletSessionAuthorization: (input: {
-        walletId: WalletId;
-        authorityId: ActiveWalletAuthorityV1['authorityId'];
-        authMethodId: ActiveWalletAuthMethodRecordV2['walletAuthMethodId'];
-    }) => Promise<WalletSessionAuthorizationExactOperationCredentialReadResult>;
-};
+import type { EmailOtpAuthLane } from '../../stepUpConfirmation/otpPrompt/authLane';
+import type { ExactEvmFamilyWalletSessionAuthorization } from '../material/ecdsaSigningCapability';
 export declare function emailOtpEcdsaSigningSessionAuthLane(authorization: ExactEvmFamilyWalletSessionAuthorization): Extract<EmailOtpAuthLane, {
     kind: 'signing_session';
     curve: 'ecdsa';
 }>;
-/**
- * The sealed runtime and capability manifest identify the material and Email
- * OTP authority. The selected authority and exact Wallet Session record must
- * reproduce that tuple before the signing-session lane can be built.
- */
-export declare function resolveExactEmailOtpEcdsaSigningSessionAuthority(ports: EmailOtpEcdsaSigningSessionAuthorityPorts, args: {
-    readonly walletId: WalletId;
-    readonly chainTarget: ThresholdEcdsaChainTarget;
-    readonly manifest: ActiveEcdsaCapabilityManifest;
-    readonly runtime: ExactEcdsaSealedRuntime;
-}): Promise<ExactEvmFamilyWalletSessionAuthorization | null>;
 //# sourceMappingURL=ecdsaSigningSessionAuthority.d.ts.map

package/dist/types/wallet/src/core/signingEngine/session/emailOtp/exportRecovery.d.ts

@@ -6,7 +6,7 @@ import type { WorkerOperationContext } from '../../workerManager/executeWorkerOp
 import type { ResolvedWalletCustodyEd25519ExportV1 } from './ed25519ExportContext';
 import { type WalletEmailOtpExportOperation, type WalletEmailOtpTransactionSignOperation } from '../../../../../../shared-ts/src/utils/emailOtpDomain';
 import { type EmailOtpRoutePlan, type EmailOtpSigningSessionAuthLane } from '../../stepUpConfirmation/otpPrompt/authLane';
-import type { RequestEmailOtpChallengeArgs, RequestEmailOtpExportChallengeArgs } from './exportRecoveryRuntime';
+import type { RequestEmailOtpTransactionChallengeArgs, RequestEmailOtpExportChallengeArgs } from './exportRecoveryRuntime';
 import type { EmailOtpThresholdEcdsaExportPreparation, PrepareEmailOtpEcdsaExportCapabilityArgs } from './ecdsaLogin';
 import type { EmailOtpWalletAuthAuthority } from '../../../../../../shared-ts/src/utils/walletAuthAuthority';
 import type { EmailOtpTransactionSigningChallenge } from './publicTypes';
@@ -29,7 +29,7 @@ type EmailOtpWorkerPorts = {
         operation: EmailOtpSigningSessionChallengeOperation;
     }) => EmailOtpRoutePlan;
 };
-export declare function requestTransactionSigningChallenge(ports: EmailOtpWorkerPorts, args: RequestEmailOtpChallengeArgs): Promise<EmailOtpTransactionSigningChallenge>;
+export declare function requestTransactionSigningChallenge(ports: EmailOtpWorkerPorts, args: RequestEmailOtpTransactionChallengeArgs): Promise<EmailOtpTransactionSigningChallenge>;
 export declare function requestExportChallenge(ports: EmailOtpWorkerPorts, args: RequestEmailOtpExportChallengeArgs): Promise<EmailOtpTransactionSigningChallenge>;
 export declare function exportEd25519YaoSeedWithFreshEmailOtpLane(ports: Pick<EmailOtpWorkerPorts, 'getSignerWorkerContext' | 'requireRelayUrl'>, args: {
     challengeId: string;

package/dist/types/wallet/src/core/signingEngine/session/emailOtp/exportRecoveryRuntime.d.ts

@@ -1,3 +1,5 @@
+import type { Variant } from '../../../../../../shared-ts/src/utils/variant';
+import type { WalletSessionOperationCredentialV1 } from '../../../../../../shared-ts/src/device-linking';
 import type { AccountId } from '../../../types/accountIds';
 import type { ThresholdEcdsaChainTarget, WalletId, WalletSessionRef } from '../../interfaces/ecdsaChainTarget';
 import type { ThresholdRuntimePolicyScope } from '../../threshold/sessionPolicy';
@@ -16,7 +18,13 @@ import type { ResolveSelectedWalletAuthorityResultV1 } from '../../../indexedDB/
 export type { EmailOtpEcdsaExportArtifact } from './exportRecovery';
 type EmailOtpEcdsaRouteChain = ThresholdEcdsaChainTarget['kind'];
 export type EmailOtpRouteChain = 'near' | EmailOtpEcdsaRouteChain;
-export type RequestEmailOtpChallengeArgs = {
+type RequestEmailOtpChallengeArgs = {
+    kind: 'wallet_operation_challenge';
+    walletSession: WalletSessionRef;
+    chain: EmailOtpRouteChain;
+    operationCredential: WalletSessionOperationCredentialV1;
+    operationFingerprintDigest: DigestB64u;
+} | {
     kind: 'wallet_login_challenge';
     walletSession: WalletSessionRef;
     chain: EmailOtpRouteChain;
@@ -49,7 +57,10 @@ export type RequestEmailOtpChallengeArgs = {
     operationFingerprintDigest?: never;
     routeAuth?: never;
 };
-export type RequestEmailOtpExportChallengeArgs = RequestEmailOtpChallengeArgs;
+export type RequestEmailOtpTransactionChallengeArgs = Variant<RequestEmailOtpChallengeArgs, 'kind', 'wallet_operation_challenge' | 'wallet_session_challenge' | 'near_account_challenge'>;
+export type RequestEmailOtpExportChallengeArgs = Exclude<RequestEmailOtpChallengeArgs, {
+    kind: 'wallet_operation_challenge';
+}>;
 export type ExportEcdsaKeyWithDurableAuthorizationArgs = {
     walletSession: WalletSessionRef;
     chainTarget: ThresholdEcdsaChainTarget;
@@ -75,7 +86,7 @@ export declare class EmailOtpExportRecoveryRuntime {
         resolveSelectedWalletAuthority: (walletId: string) => Promise<ResolveSelectedWalletAuthorityResultV1>;
         prepareEcdsaExportCapability: (args: PrepareEmailOtpEcdsaExportCapabilityArgs) => Promise<EmailOtpThresholdEcdsaExportPreparation>;
     });
-    requestTransactionSigningChallenge(args: RequestEmailOtpChallengeArgs): Promise<EmailOtpTransactionSigningChallenge>;
+    requestTransactionSigningChallenge(args: RequestEmailOtpTransactionChallengeArgs): Promise<EmailOtpTransactionSigningChallenge>;
     requestExportChallenge(args: RequestEmailOtpExportChallengeArgs): Promise<EmailOtpTransactionSigningChallenge>;
     exportEcdsaKeyWithDurableAuthorization(args: ExportEcdsaKeyWithDurableAuthorizationArgs): Promise<EmailOtpEcdsaExportArtifact>;
     exportEd25519YaoSeedWithFreshEmailOtpLane(args: ExportEd25519YaoSeedWithFreshEmailOtpLaneArgs): Promise<{

package/dist/types/wallet/src/core/signingEngine/session/emailOtp/publicTypes.d.ts

@@ -57,8 +57,7 @@ export type EmailOtpTransactionSigningChallenge = {
     emailHint: string;
     delivery: EmailOtpChallengeDelivery;
 };
-export type EmailOtpEnrollmentResult = {
-    challengeId: string;
+export type EmailOtpEnrollmentMaterial = {
     otpChannel: WalletEmailOtpChannel;
     enrollmentId: string;
     enrollmentSealKeyVersion: string;

package/dist/types/wallet/src/core/signingEngine/session/emailOtp/workerEnrollment.d.ts

@@ -1,18 +1,6 @@
 import { type WalletEmailOtpChannel } from '../../../../../../shared-ts/src/utils/emailOtpDomain';
 import type { WorkerOperationContext } from '../../workerManager/executeWorkerOperation';
 import type { EmailOtpWalletRegistrationEcdsaPrepareHandleRequest, EmailOtpWalletRegistrationEcdsaPrepareHandleResult } from '../../workerManager/workerTypes';
-import type { EmailOtpEnrollmentResult } from './publicTypes';
-export declare function enrollEmailOtpWallet(args: {
-    relayUrl: string;
-    walletId: string;
-    userId: string;
-    challengeId?: string;
-    otpCode: string;
-    groupId: string;
-    workerCtx: WorkerOperationContext;
-    otpChannel?: WalletEmailOtpChannel;
-    clientSecret32?: Uint8Array;
-}): Promise<EmailOtpEnrollmentResult>;
 export declare function prepareEmailOtpRegistrationEnrollmentMaterial(args: {
     relayUrl: string;
     walletId: string;

package/dist/types/wallet/src/core/signingEngine/session/lanes/walletExecutionLaneHydration.d.ts

@@ -1,17 +1,9 @@
 import { type LaneShareEpoch } from '../../../../../../shared-ts/src/signing-lanes/ids';
-import type { ActiveSigningLaneReference, Ed25519WalletKeyRecord, EvmFamilyWalletKeyRecord, OwnerLaneParticipantContinuityV1, SigningLaneRecord, WalletKeyRecord } from '../../../../../../shared-ts/src/signing-lanes';
+import type { ActiveSigningLaneReference, EvmFamilyWalletKeyRecord, OwnerLaneParticipantContinuityV1, SigningLaneRecord, WalletKeyRecord } from '../../../../../../shared-ts/src/signing-lanes';
 import { type MpcMaterialActivationRef } from '../../../../../../shared-ts/src/utils/domainIds';
-import type { RouterAbEd25519YaoActiveClientMetadataV1 } from '../../threshold/ed25519/yaoClient';
-import { type NearEd25519YaoCapabilityHydrationInputV1 } from '../material/nearEd25519YaoMaterialActivation';
 import { type EcdsaCapabilityRuntimeObservation } from '../material/ecdsaCapabilityHydration';
 import type { EcdsaCapabilityManifestLookup } from '../../../indexedDB/seamsWalletDB/ecdsaCapabilityManifestLookups';
 type WalletExecutionLaneMaterialHydrationInput = {
-    readonly keyFamily: 'ed25519';
-    /** The lane epoch carried by the exact Yao lane manifest. */
-    readonly laneShareEpoch: unknown;
-    readonly metadata: RouterAbEd25519YaoActiveClientMetadataV1;
-    readonly hydration: NearEd25519YaoCapabilityHydrationInputV1;
-} | {
     readonly keyFamily: 'ecdsa_secp256k1';
     /** The lane epoch carried by the exact ECDSA capability manifest. */
     readonly laneShareEpoch: unknown;
@@ -23,7 +15,7 @@ export type WalletExecutionLaneHydrationInput = {
     readonly lane: unknown;
     readonly material: WalletExecutionLaneMaterialHydrationInput;
 };
-type WalletExecutionLaneRefusalReason = 'invalid_boundary_record' | 'wallet_key_inactive' | 'lane_inactive' | 'wallet_key_mismatch' | 'key_family_mismatch' | 'unsupported_lane_kind' | 'share_epoch_mismatch' | 'participant_binding_mismatch' | 'hydration_blocked' | 'material_activation_mismatch' | 'public_identity_mismatch' | 'activation_receipt_mismatch';
+type WalletExecutionLaneRefusalReason = 'invalid_boundary_record' | 'wallet_key_inactive' | 'lane_inactive' | 'wallet_key_mismatch' | 'key_family_mismatch' | 'unsupported_lane_kind' | 'share_epoch_mismatch' | 'participant_binding_mismatch' | 'hydration_blocked' | 'activation_receipt_mismatch';
 type WalletExecutionLaneRefusalWithoutIdentity = {
     readonly kind: 'wallet_execution_lane_refused_v1';
     readonly reason: 'invalid_boundary_record';
@@ -38,27 +30,21 @@ type WalletExecutionLaneRefusal = WalletExecutionLaneRefusalWithoutIdentity | {
     readonly walletKeyId: WalletKeyRecord['walletKeyId'];
     readonly laneId: SigningLaneRecord['laneId'];
 };
-type WalletExecutionLanePublicIdentity = {
-    readonly keyFamily: 'ed25519';
-    readonly registeredPublicKeyB64u: Ed25519WalletKeyRecord['registeredPublicKeyB64u'];
-    readonly nearEd25519SigningKeyId: Ed25519WalletKeyRecord['nearEd25519SigningKeyId'];
-    readonly keyCreationSignerSlot: Ed25519WalletKeyRecord['keyCreationSignerSlot'];
-} | {
-    readonly keyFamily: 'ecdsa_secp256k1';
-    readonly thresholdPublicKey33B64u: EvmFamilyWalletKeyRecord['thresholdPublicKey33B64u'];
-    readonly evmAddress: EvmFamilyWalletKeyRecord['evmAddress'];
-    readonly evmFamilySigningKeySlotId: EvmFamilyWalletKeyRecord['evmFamilySigningKeySlotId'];
-};
-export type ActiveWalletExecutionLaneHydration = {
+type ActiveWalletExecutionLaneHydration = {
     readonly kind: 'active_wallet_execution_lane_v1';
-    readonly keyFamily: WalletKeyRecord['keyFamily'];
-    readonly walletKey: WalletKeyRecord;
+    readonly keyFamily: 'ecdsa_secp256k1';
+    readonly walletKey: EvmFamilyWalletKeyRecord;
     readonly lane: ActiveSigningLaneReference;
     readonly ownerParticipantContinuity: OwnerLaneParticipantContinuityV1;
     readonly materialActivation: MpcMaterialActivationRef;
     readonly laneShareEpoch: LaneShareEpoch;
     readonly activationReceiptDigestB64u: string;
-    readonly publicIdentity: WalletExecutionLanePublicIdentity;
+    readonly publicIdentity: {
+        readonly keyFamily: 'ecdsa_secp256k1';
+        readonly thresholdPublicKey33B64u: EvmFamilyWalletKeyRecord['thresholdPublicKey33B64u'];
+        readonly evmAddress: EvmFamilyWalletKeyRecord['evmAddress'];
+        readonly evmFamilySigningKeySlotId: EvmFamilyWalletKeyRecord['evmFamilySigningKeySlotId'];
+    };
 };
 export type WalletExecutionLaneHydrationResult = ActiveWalletExecutionLaneHydration | WalletExecutionLaneRefusal;
 export declare function hydrateWalletExecutionLane(input: WalletExecutionLaneHydrationInput): WalletExecutionLaneHydrationResult;

package/dist/types/wallet/src/core/signingEngine/session/lifecycle/walletSessionStatus.d.ts

@@ -1,6 +1,5 @@
 import type { SigningSessionStatus } from '../../../types/seams';
 import { type MpcWalletSigningQuotaId, type WalletSessionId } from '../../../../../../shared-ts/src/authorization/capabilityKinds';
-import type { SelectedEd25519SigningSessionPlanningLane } from '../operationState/types';
 import type { ExactWalletSessionStatus } from '../../../rpcClients/relayer/walletSessionAuthorizationStatus';
 import { type WalletId } from '../../interfaces/ecdsaChainTarget';
 type Ed25519WalletSessionStatusOwner = {
@@ -29,16 +28,9 @@ export declare function buildWalletSessionStatusCheck(args: {
     authorization: WalletSessionStatusIdentity;
 }): SigningSessionStatusCheck;
 export declare function ed25519WalletSessionStatusOwner(walletId: WalletId | string): Ed25519WalletSessionStatusOwner;
-export declare function walletSessionStatusOwnerForLane(lane: SelectedEd25519SigningSessionPlanningLane): WalletSessionStatusOwner;
 export declare function walletSessionStatusOwnerKey(owner: WalletSessionStatusOwner): string;
 export declare function walletSessionStatusIdentityKey(identity: WalletSessionStatusIdentity): string;
 export declare function signingSessionStatusFromWalletSessionStatus(status: ExactWalletSessionStatus): SigningSessionStatus;
-export declare function unknownSigningSessionStatus(args: {
-    walletSessionId: WalletSessionId | string;
-    reason: string;
-}): SigningSessionStatus & {
-    status: 'status_unknown';
-};
 export declare function getWalletSessionStatus(deps: WalletSigningSessionStatusDeps, args: SigningSessionStatusCheck): Promise<SigningSessionStatus | null>;
 export declare function mergeWalletSigningSessionStatus<TStatus extends SigningSessionStatus>(status: TStatus, sessionStatus: SigningSessionStatus | null): TStatus;
 export declare function buildWalletSessionStatusCheckForSession(args: {

package/dist/types/wallet/src/core/signingEngine/session/material/ecdsaSigningCapability.d.ts

@@ -4,7 +4,7 @@ import { type MpcMaterialActivationRef } from '../../../../../../shared-ts/src/u
 import type { ActiveWalletSessionV1, WalletSessionOperationCredentialV1 } from '../../../../../../shared-ts/src/device-linking/contracts';
 import type { ResolveSelectedWalletAuthorityResultV1 } from '../../../indexedDB/seamsWalletDB/repositories';
 import type { ExactEcdsaCapabilityRuntime, ExactEcdsaDirectCapabilityRuntime, ExactEcdsaSealedRuntimeAuthBinding, ExactEcdsaWalletSessionRuntime } from './ecdsaSealedRuntime';
-import type { ActiveWalletSessionQuotaStatusV1 } from '../../../rpcClients/relayer/walletSessionAuthorizationStatus';
+import type { ActiveWalletSessionQuotaStatusV1, WalletSessionStatusReadScope } from '../../../rpcClients/relayer/walletSessionAuthorizationStatus';
 import type { ActiveWalletAuthorityV1 } from '../../../../../../shared-ts/src/authorization/walletAuthority';
 import { type WalletAuthAuthority } from '../../../../../../shared-ts/src/utils/walletAuthAuthority';
 import { type ThresholdEcdsaChainTarget, type WalletId } from '../../interfaces/ecdsaChainTarget';
@@ -39,7 +39,7 @@ type ExactEcdsaWalletSessionAuthorizationLookup = {
     readonly chainTarget: ThresholdEcdsaChainTarget;
     readonly materialActivation: MpcMaterialActivationRef;
 };
-export type ExactEcdsaWalletSessionAuthorizationResolver = (input: ExactEcdsaWalletSessionAuthorizationLookup) => Promise<ExactEvmFamilyWalletSessionAuthorization | null>;
+export type ExactEcdsaWalletSessionAuthorizationResolver = (input: ExactEcdsaWalletSessionAuthorizationLookup, statusReads: WalletSessionStatusReadScope) => Promise<ExactEvmFamilyWalletSessionAuthorization | null>;
 export type CanonicalEvmFamilyEcdsaSigningCapability = {
     readonly kind: 'canonical_evm_family_ecdsa_signing_capability';
     readonly authority: WalletAuthAuthority;

package/dist/types/wallet/src/core/signingEngine/session/operationState/preparedOperation.d.ts

@@ -1,5 +1,4 @@
 import type { SensitiveOperationPolicy, SignerAuthMethod } from '../../../../../../shared-ts/src/utils/signerDomain';
-import type { WalletSessionStatusIdentity } from '../lifecycle/walletSessionStatus';
 import type { SigningPlannerDecisionTraceEvent, SigningSessionReadiness } from '../planning/planner';
 import type { SigningChainFamily, SigningCurve, SelectedSigningSessionPlanningLane, SigningOperationContext, SigningSessionPlan } from './types';
 type ThresholdSigningIntent = {
@@ -19,8 +18,6 @@ export type ThresholdSigningReadinessInput = {
     readiness: SigningSessionReadiness;
     expiresAtMs?: number;
     remainingUses?: number;
-    usesNeeded?: number;
-    trustedStatusAuth?: WalletSessionStatusIdentity;
 };
 export type ThresholdSigningOperationCoordinator = {
     resolveAuthPlanFromReadiness(input: {
@@ -28,11 +25,8 @@ export type ThresholdSigningOperationCoordinator = {
         readiness: SigningSessionReadiness;
         expiresAtMs?: number;
         remainingUses?: number;
-        usesNeeded?: number;
-        trustedStatusAuth?: WalletSessionStatusIdentity;
         forceFreshAuth?: boolean;
         sensitiveOperationPolicy?: SensitiveOperationPolicy | null;
-        missingWhenExpiresAtMissing?: boolean;
     }, onTrace?: (event: SigningPlannerDecisionTraceEvent) => void): Promise<{
         signingSessionPlan: SigningSessionPlan;
         readiness: SigningSessionReadiness;
@@ -48,7 +42,6 @@ export type PreparedThresholdSigningOperation<TLane extends SelectedSigningSessi
     readiness: SigningSessionReadiness;
     expiresAtMs: number;
     remainingUses: number;
-    trustedStatusAuth?: WalletSessionStatusIdentity;
     availableLanesGeneration: number;
     metadata: TMetadata;
 };
@@ -70,7 +63,6 @@ export declare function prepareThresholdSigningOperation<TLane extends SelectedS
     operation?: SigningOperationContext;
     forceFreshAuth?: boolean;
     sensitiveOperationPolicy?: SensitiveOperationPolicy | null;
-    missingWhenExpiresAtMissing?: boolean;
     onPlannerTrace?: (event: SigningPlannerDecisionTraceEvent) => void;
 }): Promise<PreparedThresholdSigningOperation<TLane, TMetadata>>;
 export {};

package/dist/types/wallet/src/core/signingEngine/session/operationState/trace.d.ts

@@ -5,7 +5,7 @@ export declare function emitEcdsaServerTiming(operationId: string, phase: 'prepa
 export declare function emitEcdsaPresignServerTiming(presignSessionId: string, phase: 'init' | 'step', header: string | null): void;
 type EcdsaSigningTimingStage = 'material_queue' | 'material_authorization' | 'material_load' | 'public_key_validation' | 'pool_lookup' | 'pool_restore' | 'refill_wait' | 'foreground_refill' | 'presignature_reserve' | 'prepare' | 'presignature_commit' | 'client_share' | 'finalize' | 'signature_verify' | 'sign_total' | 'transaction_assembly' | 'commit_total';
 export declare function emitEcdsaSigningTiming(operationId: string, stage: EcdsaSigningTimingStage, startedAt: number, outcome?: 'succeeded' | 'failed'): void;
-type Ed25519SigningTimingStage = 'preparation_modal' | 'authorization_probe' | 'execution_setup' | 'lane_preparation' | 'pre_confirmation' | 'confirmation' | 'confirmed_to_signed' | 'durable_lease_recovery_wait' | 'material_resolution_wait' | 'transaction_context' | 'wallet_session_authorization' | 'prepare' | 'client_share' | 'finalize' | 'signature_total' | 'nonce_lease_commit' | 'transaction_assembly';
+type Ed25519SigningTimingStage = 'preparation_modal' | 'authorization_probe' | 'execution_setup' | 'lane_preparation' | 'pre_confirmation' | 'confirmation' | 'confirmed_to_signed' | 'durable_lease_recovery_wait' | 'material_resolution_wait' | 'transaction_context' | 'wallet_session_authorization' | 'prepare_sent' | 'prepare' | 'client_share' | 'finalize' | 'signature_total' | 'nonce_lease_commit' | 'transaction_assembly';
 export declare function emitEd25519SigningTiming(operationId: string, stage: Ed25519SigningTimingStage, startedAt: number, outcome?: 'succeeded' | 'failed'): void;
 type SigningBoundaryTraceEvent = {
     event: 'pre_confirm_readiness_checked' | 'auth_side_effect_started';

package/dist/types/wallet/src/core/signingEngine/session/operationState/transactionState.d.ts

@@ -130,7 +130,6 @@ export declare function prepareTransactionSigningOperation<TLane extends Transac
     operation?: SigningOperationContext;
     forceFreshAuth?: boolean;
     sensitiveOperationPolicy?: SensitiveOperationPolicy | null;
-    missingWhenExpiresAtMissing?: boolean;
     onPlannerTrace?: (event: SigningPlannerDecisionTraceEvent) => void;
 }): Promise<PreparedTransactionSigningOperation<TLane, TSigningLane, TMetadata>>;
 export {};

package/dist/types/wallet/src/core/signingEngine/session/passkey/ed25519YaoRecoveryCapability.d.ts

@@ -1,3 +1,4 @@
+import type { WalletSessionHome } from '../../../../../../shared-ts/src/device-linking/contracts';
 import { type AccountId } from '../../../types/accountIds';
 import { type MpcMaterialActivationRef, type ThresholdEd25519SessionId } from '../../../../../../shared-ts/src/utils/domainIds';
 import { type RouterAbEd25519YaoActivationAdmissionReceiptV1, type RouterAbEd25519YaoRegistrationAdmissionRequestV1 } from '../../../../../../shared-ts/src/utils/routerAbEd25519Yao';
@@ -19,6 +20,7 @@ export type ParsedYaoRecoverySessionBaseV1 = {
 export type ParsedYaoRecoverySessionV1 = ParsedYaoRecoverySessionBaseV1 & {
     readonly sessionKind: 'opaque';
     readonly walletSessionToken: string;
+    readonly home: WalletSessionHome;
 };
 export type ParsedExactYaoRecoverySessionV1 = ParsedYaoRecoverySessionBaseV1 & {
     readonly walletSession: ActiveWalletSessionV1;

package/dist/types/wallet/src/core/signingEngine/session/public.d.ts

@@ -26,7 +26,7 @@ export type SessionPublicDeps = {
     };
 };
 export declare function discoverPersistedSessionsForWallet(deps: SessionPublicDeps, args: DiscoverPersistedSessionsForWalletInput): Promise<DiscoverPersistedSessionsForWalletResult>;
-export declare function readPersistedAvailableSigningLanes(deps: SessionPublicDeps, args: Omit<ReadAvailableSigningLanesInput, 'ecdsaChainTargets'>): Promise<AvailableSigningLanes>;
+export declare function readPersistedAvailableSigningLanes(deps: SessionPublicDeps, args: Omit<ReadAvailableSigningLanesInput, 'ecdsaChainTargets'>, statusReads: WalletSessionStatusReadScope): Promise<AvailableSigningLanes>;
 /** Human operational read: one exact owner, configured ECDSA targets. */
 export declare function readOwnerScopedSigningLanes(deps: SessionPublicDeps, args: {
     readonly walletId: WalletId | string;

package/dist/types/wallet/src/core/signingEngine/session/routerAbSigningWalletSession.d.ts

@@ -1,3 +1,4 @@
+import type { WalletSessionHome } from '../../../../../shared-ts/src/device-linking/contracts';
 import type { RouterAbWalletSessionCredential } from '../../rpcClients/relayer/routerAbNormalSigning';
 import type { RouterAbEd25519NormalSigningState } from '../threshold/ed25519/routerAbNormalSigningState';
 import type { ThresholdRuntimePolicyScope } from '../threshold/sessionPolicy';
@@ -45,6 +46,7 @@ type BuildRouterAbEd25519SigningWalletSessionInput = {
     signingRootVersion: string;
     routerAbNormalSigning: RouterAbEd25519NormalSigningState;
     walletSessionToken: string;
+    home: WalletSessionHome;
     nowMs: number;
 };
 export declare function buildRouterAbEd25519SigningWalletSession(input: BuildRouterAbEd25519SigningWalletSessionInput): RouterAbSigningWalletSessionResult<RouterAbEd25519SigningWalletSession>;

package/dist/types/wallet/src/core/signingEngine/session/userPreferences.d.ts

@@ -13,7 +13,7 @@ export type UserPreferencesStorePort = ProfileLastSelectionPort & {
     updateWalletPreferences: (args: {
         walletId: WalletId;
         preferences: Partial<UserPreferences>;
-    }) => Promise<unknown>;
+    }) => Promise<UserPreferences | null>;
 };
 type UserPreferencesManagerDeps = {
     store: UserPreferencesStorePort;
@@ -23,6 +23,8 @@ export declare class UserPreferencesManager {
     private confirmationConfigChangeListeners;
     private currentWalletChangeListeners;
     private currentWalletId;
+    private lifecycle;
+    private writeQueue;
     private confirmationConfig;
     private unsubscribeFromIndexedDB?;
     constructor(deps: UserPreferencesManagerDeps);
@@ -38,21 +40,16 @@ export declare class UserPreferencesManager {
     destroy(): void;
     getCurrentWalletId(): WalletId | null;
     getConfirmationConfig(): ConfirmationConfig;
-    applyWalletHostConfirmationConfig(args: {
-        walletId?: WalletId | null;
-        confirmationConfig: ConfirmationConfig;
-    } | undefined): void;
     setCurrentWallet(walletId: WalletId): void;
     projectCurrentWallet(walletId: WalletId): void;
-    private applyStoredPreferences;
+    private assertActive;
+    private invalidateReads;
     private loadSettingsForWallet;
     reloadUserSettings(): Promise<void>;
-    setConfirmBehavior(behavior: 'requireClick' | 'skipClick'): void;
-    setConfirmationConfig(config: Partial<ConfirmationConfig>, opts?: {
-        persist?: boolean;
-    }): void;
+    setConfirmationBehavior(behavior: 'requireClick' | 'skipClick'): Promise<void>;
+    setConfirmationConfig(config: Partial<ConfirmationConfig>): Promise<void>;
+    private commitConfirmationConfig;
     loadUserSettings(): Promise<void>;
-    saveUserSettings(): Promise<void>;
 }
 export {};
 //# sourceMappingURL=userPreferences.d.ts.map