@tatchi-xyz/sdk 0.16.0 → 0.17.0

package/dist/esm/sdk/{transactions-jH38BZ-Q.js → transactions-BIqKZeR0.js}

@@ -1,7 +1,7 @@
 import { ERROR_MESSAGES, SecureConfirmationType, getIntentDigest, getNearAccountId, getSignTransactionPayload, getTxCount, isUserCancelledSecureConfirm, toAccountId, toError } from "./requestHelpers-aUKhXiEl.js";
 import "./validation-DhPPUba7.js";
-import { PASSKEY_MANAGER_DEFAULT_CONFIGS, getLastLoggedInDeviceNumber } from "./getDeviceNumber-CkWRT17I.js";
-import { createConfirmSession, createConfirmTxFlowAdapters } from "./createAdapters-pNiL2KNq.js";
+import { PASSKEY_MANAGER_DEFAULT_CONFIGS, getLastLoggedInDeviceNumber } from "./getDeviceNumber-fXizNGQl.js";
+import { createConfirmSession, createConfirmTxFlowAdapters } from "./createAdapters-BumKM2ft.js";
 import "./css-loader-BrMMlG4X.js";
 import "./lit-events-BKobq01K.js";
 import "./tx-tree-themes-i3It4IYY.js";
@@ -106,20 +106,10 @@ async function handleTransactionSigningFlow(ctx, request, worker, opts) {
 		if (!uiVrfChallenge) throw new Error("Missing vrfChallenge for WebAuthn signing flow");
 		const serializedCredential = await adapters.webauthn.collectAuthenticationCredentialWithPRF({
 			nearAccountId,
-			vrfChallenge: uiVrfChallenge,
-			onBeforePrompt: ({ authenticatorsForPrompt, vrfChallenge }) => {
-				console.debug("[SigningFlow] Authenticators for transaction signing", {
-					nearAccountId,
-					authenticatorCount: authenticatorsForPrompt.length,
-					authenticators: authenticatorsForPrompt.map((a) => ({
-						deviceNumber: a.deviceNumber,
-						vrfPublicKey: a.vrfPublicKey,
-						credentialId: a.credentialId
-					})),
-					vrfChallengePublicKey: vrfChallenge.vrfPublicKey
-				});
-			}
+			vrfChallenge: uiVrfChallenge
 		});
+		let contractId;
+		let nearRpcUrl;
 		try {
 			const vrfStatus = await adapters.vrf.checkVrfStatus();
 			if (!vrfStatus.active) throw new Error("VRF keypair not active in memory. VRF session may have expired or was not properly initialized. Please refresh and try again.");
@@ -128,8 +118,6 @@ async function handleTransactionSigningFlow(ctx, request, worker, opts) {
 			const encryptedKeyData = await ctx.indexedDB.nearKeysDB.getEncryptedKey(nearAccountId, deviceNumber);
 			const wrapKeySalt = encryptedKeyData?.wrapKeySalt || "";
 			if (!wrapKeySalt) throw new Error("Missing wrapKeySalt in vault; re-register to upgrade vault format.");
-			let contractId;
-			let nearRpcUrl;
 			if (request.type === SecureConfirmationType.SIGN_TRANSACTION) {
 				const payload = getSignTransactionPayload(request);
 				contractId = payload?.rpcCall?.contractId;
@@ -175,4 +163,4 @@ async function handleTransactionSigningFlow(ctx, request, worker, opts) {
 
 //#endregion
 export { handleTransactionSigningFlow };
-//# sourceMappingURL=transactions-jH38BZ-Q.js.map
+//# sourceMappingURL=transactions-BIqKZeR0.js.map

package/dist/esm/sdk/transactions-BIqKZeR0.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactions-BIqKZeR0.js","names":["uiVrfChallenge: VRFChallenge | undefined","uiVrfChallengeForUi: Partial<VRFChallenge> | undefined","err: unknown","contractId: string | undefined","nearRpcUrl: string | undefined"],"sources":["../../../src/core/WebAuthnManager/VrfWorkerManager/confirmTxFlow/flows/transactions.ts"],"sourcesContent":["import type { VrfWorkerManagerContext } from '../../';\nimport type { ConfirmationConfig } from '../../../../types/signer-worker';\nimport {\n  SecureConfirmationType,\n  TransactionSummary,\n  SigningSecureConfirmRequest,\n  SigningAuthMode,\n} from '../types';\nimport { VRFChallenge, TransactionContext } from '../../../../types';\nimport {\n  getNearAccountId,\n  getIntentDigest,\n  getTxCount,\n  isUserCancelledSecureConfirm,\n  ERROR_MESSAGES,\n  getSignTransactionPayload,\n} from './index';\nimport { toAccountId } from '../../../../types/accountIds';\nimport { getLastLoggedInDeviceNumber } from '../../../SignerWorkerManager/getDeviceNumber';\nimport { toError } from '../../../../../utils/errors';\nimport { PASSKEY_MANAGER_DEFAULT_CONFIGS } from '../../../../defaultConfigs';\nimport { createConfirmSession } from '../adapters/session';\nimport { createConfirmTxFlowAdapters } from '../adapters/createAdapters';\n\nfunction getSigningAuthMode(request: SigningSecureConfirmRequest): SigningAuthMode {\n  if (request.type === SecureConfirmationType.SIGN_TRANSACTION) {\n    return getSignTransactionPayload(request).signingAuthMode ?? 'webauthn';\n  }\n  if (request.type === SecureConfirmationType.SIGN_NEP413_MESSAGE) {\n    const p = request.payload as any;\n    return (p?.signingAuthMode as SigningAuthMode | undefined) ?? 'webauthn';\n  }\n  return 'webauthn';\n}\n\nexport async function handleTransactionSigningFlow(\n  ctx: VrfWorkerManagerContext,\n  request: SigningSecureConfirmRequest,\n  worker: Worker,\n  opts: { confirmationConfig: ConfirmationConfig; transactionSummary: TransactionSummary },\n): Promise<void> {\n  const { confirmationConfig, transactionSummary } = opts;\n  const adapters = createConfirmTxFlowAdapters(ctx);\n  const session = createConfirmSession({\n    adapters,\n    worker,\n    request,\n    confirmationConfig,\n    transactionSummary,\n  });\n  const nearAccountId = getNearAccountId(request);\n  const signingAuthMode = getSigningAuthMode(request);\n  const usesNeeded = getTxCount(request);\n\n  // 1) NEAR context + nonce reservation\n  const nearRpc = await adapters.near.fetchNearContext({ nearAccountId, txCount: usesNeeded, reserveNonces: true });\n  if (nearRpc.error && !nearRpc.transactionContext) {\n    // eslint-disable-next-line no-console\n    console.error('[SigningFlow] fetchNearContext failed', { error: nearRpc.error, details: nearRpc.details });\n    return session.confirmAndCloseModal({\n      requestId: request.requestId,\n      intentDigest: getIntentDigest(request),\n      confirmed: false,\n      error: `${ERROR_MESSAGES.nearRpcFailed}: ${nearRpc.details}`,\n    });\n  }\n  session.setReservedNonces(nearRpc.reservedNonces);\n  let transactionContext = nearRpc.transactionContext as TransactionContext;\n\n  // 2) Security context shown in the confirmer (rpId + block height).\n  // For warmSession signing we still want to show this context even though\n  // we won't collect a WebAuthn credential.\n  const rpId = adapters.vrf.getRpId();\n  let uiVrfChallenge: VRFChallenge | undefined;\n  let uiVrfChallengeForUi: Partial<VRFChallenge> | undefined = rpId\n    ? {\n        userId: nearAccountId,\n        rpId,\n        blockHeight: transactionContext.txBlockHeight,\n        blockHash: transactionContext.txBlockHash,\n      }\n    : undefined;\n\n  // Initial VRF challenge (only needed for WebAuthn credential collection)\n  if (signingAuthMode === 'webauthn') {\n    uiVrfChallenge = await adapters.vrf.generateVrfChallengeForSession(\n      {\n        userId: nearAccountId,\n        rpId,\n        blockHeight: transactionContext.txBlockHeight,\n        blockHash: transactionContext.txBlockHash,\n      },\n      request.requestId,\n    );\n    uiVrfChallengeForUi = uiVrfChallenge;\n  }\n\n  // 3) UI confirm\n  const { confirmed, error: uiError } = await session.promptUser({ vrfChallenge: uiVrfChallengeForUi });\n  if (!confirmed) {\n    return session.confirmAndCloseModal({\n      requestId: request.requestId,\n      intentDigest: getIntentDigest(request),\n      confirmed: false,\n      error: uiError,\n    });\n  }\n\n  // 4) Warm session: dispense WrapKeySeed and skip WebAuthn\n  if (signingAuthMode === 'warmSession') {\n    try {\n      await adapters.vrf.dispenseSessionKey({ sessionId: request.requestId, uses: usesNeeded });\n    } catch (err: unknown) {\n      const msg = String((toError(err))?.message || err || '');\n      return session.confirmAndCloseModal({\n        requestId: request.requestId,\n        intentDigest: getIntentDigest(request),\n        confirmed: false,\n        error: msg || 'Failed to dispense warm session key',\n      });\n    }\n\n    session.confirmAndCloseModal({\n      requestId: request.requestId,\n      intentDigest: getIntentDigest(request),\n      confirmed: true,\n      transactionContext,\n    });\n    return;\n  }\n\n  // 5) JIT refresh VRF + ctx (best-effort)\n  try {\n    const refreshed = await adapters.vrf.maybeRefreshVrfChallenge(request, nearAccountId);\n    uiVrfChallenge = refreshed.vrfChallenge;\n    transactionContext = refreshed.transactionContext;\n    session.updateUI({ vrfChallenge: uiVrfChallenge });\n  } catch (e) {\n    console.debug('[SigningFlow] VRF JIT refresh skipped', e);\n  }\n\n  // 6) Collect authentication credential\n  try {\n    if (!uiVrfChallenge) {\n      throw new Error('Missing vrfChallenge for WebAuthn signing flow');\n    }\n    const serializedCredential = await adapters.webauthn.collectAuthenticationCredentialWithPRF({\n      nearAccountId,\n      vrfChallenge: uiVrfChallenge,\n    });\n\n    // 5c) Derive WrapKeySeed inside the VRF worker and deliver it to the signer worker via\n    // the reserved WrapKeySeed MessagePort. Main thread only sees wrapKeySalt metadata.\n    let contractId: string | undefined;\n    let nearRpcUrl: string | undefined;\n    try {\n      // Ensure VRF session is active and bound to the same account we are signing for.\n      const vrfStatus = await adapters.vrf.checkVrfStatus();\n      if (!vrfStatus.active) {\n        throw new Error('VRF keypair not active in memory. VRF session may have expired or was not properly initialized. Please refresh and try again.');\n      }\n      if (!vrfStatus.nearAccountId || String(vrfStatus.nearAccountId) !== String(toAccountId(nearAccountId))) {\n        throw new Error('VRF session is active but bound to a different account than the one being signed. Please log in again on this device.');\n      }\n\n      const deviceNumber = await getLastLoggedInDeviceNumber(toAccountId(nearAccountId), ctx.indexedDB.clientDB);\n      const encryptedKeyData = await ctx.indexedDB.nearKeysDB.getEncryptedKey(nearAccountId, deviceNumber);\n      // For v2+ vaults, wrapKeySalt is the canonical salt.\n      const wrapKeySalt = encryptedKeyData?.wrapKeySalt || '';\n      if (!wrapKeySalt) {\n        throw new Error('Missing wrapKeySalt in vault; re-register to upgrade vault format.');\n      }\n\n      // Extract contract verification context when available.\n      // - SIGN_TRANSACTION: use per-request rpcCall (already normalized by caller).\n      // - SIGN_NEP413_MESSAGE: allow per-request override; fall back to PASSKEY_MANAGER_DEFAULT_CONFIGS.\n      if (request.type === SecureConfirmationType.SIGN_TRANSACTION) {\n        const payload = getSignTransactionPayload(request);\n        contractId = payload?.rpcCall?.contractId;\n        nearRpcUrl = payload?.rpcCall?.nearRpcUrl;\n      } else if (request.type === SecureConfirmationType.SIGN_NEP413_MESSAGE) {\n        const payload = request.payload as any;\n        contractId = payload?.contractId\n          || PASSKEY_MANAGER_DEFAULT_CONFIGS.contractId;\n        nearRpcUrl = payload?.nearRpcUrl\n          || PASSKEY_MANAGER_DEFAULT_CONFIGS.nearRpcUrl;\n      }\n\n      await adapters.vrf.mintSessionKeysAndSendToSigner({\n        sessionId: request.requestId,\n        wrapKeySalt,\n        contractId,\n        nearRpcUrl,\n        credential: serializedCredential,\n      });\n\t    } catch (err) {\n\t      console.error('[SigningFlow] WrapKeySeed derivation failed:', err);\n\t      throw err; // Don't silently ignore - propagate the error\n\t    }\n\n    // 6) Respond; keep nonces reserved for worker to use\n    session.confirmAndCloseModal({\n      requestId: request.requestId,\n      intentDigest: getIntentDigest(request),\n      confirmed: true,\n      credential: serializedCredential,\n      // prfOutput intentionally omitted to keep signer PRF-free\n      // WrapKeySeed travels only over the dedicated VRF→Signer MessagePort; do not echo in the main-thread envelope\n      vrfChallenge: uiVrfChallenge,\n      transactionContext,\n    });\n  } catch (err: unknown) {\n    // Treat TouchID/FaceID cancellation and related errors as a negative decision\n    const cancelled = isUserCancelledSecureConfirm(err);\n    // For missing PRF outputs, surface the error to caller (defensive path tests expect a throw)\n    const msg = String((toError(err))?.message || err || '');\n    if (/Missing PRF result/i.test(msg) || /Missing PRF results/i.test(msg)) {\n      // Ensure UI is closed and nonces released, then rethrow\n      return session.cleanupAndRethrow(err);\n    }\n    if (cancelled) {\n      window.parent?.postMessage({ type: 'WALLET_UI_CLOSED' }, '*');\n    }\n    const isWrongPasskeyError = /multiple passkeys \\(devicenumbers\\) for account/i.test(msg);\n    return session.confirmAndCloseModal({\n      requestId: request.requestId,\n      intentDigest: getIntentDigest(request),\n      confirmed: false,\n      error: cancelled\n        ? ERROR_MESSAGES.cancelled\n        : (isWrongPasskeyError ? msg : ERROR_MESSAGES.collectCredentialsFailed),\n    });\n  }\n}\n"],"mappings":";;;;;;;;;AAwBA,SAAS,mBAAmB,SAAuD;AACjF,KAAI,QAAQ,SAAS,uBAAuB,iBAC1C,QAAO,0BAA0B,SAAS,mBAAmB;AAE/D,KAAI,QAAQ,SAAS,uBAAuB,qBAAqB;EAC/D,MAAM,IAAI,QAAQ;AAClB,SAAQ,GAAG,mBAAmD;;AAEhE,QAAO;;AAGT,eAAsB,6BACpB,KACA,SACA,QACA,MACe;CACf,MAAM,EAAE,oBAAoB,uBAAuB;CACnD,MAAM,WAAW,4BAA4B;CAC7C,MAAM,UAAU,qBAAqB;EACnC;EACA;EACA;EACA;EACA;;CAEF,MAAM,gBAAgB,iBAAiB;CACvC,MAAM,kBAAkB,mBAAmB;CAC3C,MAAM,aAAa,WAAW;CAG9B,MAAM,UAAU,MAAM,SAAS,KAAK,iBAAiB;EAAE;EAAe,SAAS;EAAY,eAAe;;AAC1G,KAAI,QAAQ,SAAS,CAAC,QAAQ,oBAAoB;AAEhD,UAAQ,MAAM,yCAAyC;GAAE,OAAO,QAAQ;GAAO,SAAS,QAAQ;;AAChG,SAAO,QAAQ,qBAAqB;GAClC,WAAW,QAAQ;GACnB,cAAc,gBAAgB;GAC9B,WAAW;GACX,OAAO,GAAG,eAAe,cAAc,IAAI,QAAQ;;;AAGvD,SAAQ,kBAAkB,QAAQ;CAClC,IAAI,qBAAqB,QAAQ;CAKjC,MAAM,OAAO,SAAS,IAAI;CAC1B,IAAIA;CACJ,IAAIC,sBAAyD,OACzD;EACE,QAAQ;EACR;EACA,aAAa,mBAAmB;EAChC,WAAW,mBAAmB;KAEhC;AAGJ,KAAI,oBAAoB,YAAY;AAClC,mBAAiB,MAAM,SAAS,IAAI,+BAClC;GACE,QAAQ;GACR;GACA,aAAa,mBAAmB;GAChC,WAAW,mBAAmB;KAEhC,QAAQ;AAEV,wBAAsB;;CAIxB,MAAM,EAAE,WAAW,OAAO,YAAY,MAAM,QAAQ,WAAW,EAAE,cAAc;AAC/E,KAAI,CAAC,UACH,QAAO,QAAQ,qBAAqB;EAClC,WAAW,QAAQ;EACnB,cAAc,gBAAgB;EAC9B,WAAW;EACX,OAAO;;AAKX,KAAI,oBAAoB,eAAe;AACrC,MAAI;AACF,SAAM,SAAS,IAAI,mBAAmB;IAAE,WAAW,QAAQ;IAAW,MAAM;;WACrEC,KAAc;GACrB,MAAM,MAAM,OAAQ,QAAQ,MAAO,WAAW,OAAO;AACrD,UAAO,QAAQ,qBAAqB;IAClC,WAAW,QAAQ;IACnB,cAAc,gBAAgB;IAC9B,WAAW;IACX,OAAO,OAAO;;;AAIlB,UAAQ,qBAAqB;GAC3B,WAAW,QAAQ;GACnB,cAAc,gBAAgB;GAC9B,WAAW;GACX;;AAEF;;AAIF,KAAI;EACF,MAAM,YAAY,MAAM,SAAS,IAAI,yBAAyB,SAAS;AACvE,mBAAiB,UAAU;AAC3B,uBAAqB,UAAU;AAC/B,UAAQ,SAAS,EAAE,cAAc;UAC1B,GAAG;AACV,UAAQ,MAAM,yCAAyC;;AAIzD,KAAI;AACF,MAAI,CAAC,eACH,OAAM,IAAI,MAAM;EAElB,MAAM,uBAAuB,MAAM,SAAS,SAAS,uCAAuC;GAC1F;GACA,cAAc;;EAKhB,IAAIC;EACJ,IAAIC;AACJ,MAAI;GAEF,MAAM,YAAY,MAAM,SAAS,IAAI;AACrC,OAAI,CAAC,UAAU,OACb,OAAM,IAAI,MAAM;AAElB,OAAI,CAAC,UAAU,iBAAiB,OAAO,UAAU,mBAAmB,OAAO,YAAY,gBACrF,OAAM,IAAI,MAAM;GAGlB,MAAM,eAAe,MAAM,4BAA4B,YAAY,gBAAgB,IAAI,UAAU;GACjG,MAAM,mBAAmB,MAAM,IAAI,UAAU,WAAW,gBAAgB,eAAe;GAEvF,MAAM,cAAc,kBAAkB,eAAe;AACrD,OAAI,CAAC,YACH,OAAM,IAAI,MAAM;AAMlB,OAAI,QAAQ,SAAS,uBAAuB,kBAAkB;IAC5D,MAAM,UAAU,0BAA0B;AAC1C,iBAAa,SAAS,SAAS;AAC/B,iBAAa,SAAS,SAAS;cACtB,QAAQ,SAAS,uBAAuB,qBAAqB;IACtE,MAAM,UAAU,QAAQ;AACxB,iBAAa,SAAS,cACjB,gCAAgC;AACrC,iBAAa,SAAS,cACjB,gCAAgC;;AAGvC,SAAM,SAAS,IAAI,+BAA+B;IAChD,WAAW,QAAQ;IACnB;IACA;IACA;IACA,YAAY;;WAEN,KAAK;AACZ,WAAQ,MAAM,gDAAgD;AAC9D,SAAM;;AAIT,UAAQ,qBAAqB;GAC3B,WAAW,QAAQ;GACnB,cAAc,gBAAgB;GAC9B,WAAW;GACX,YAAY;GAGZ,cAAc;GACd;;UAEKF,KAAc;EAErB,MAAM,YAAY,6BAA6B;EAE/C,MAAM,MAAM,OAAQ,QAAQ,MAAO,WAAW,OAAO;AACrD,MAAI,sBAAsB,KAAK,QAAQ,uBAAuB,KAAK,KAEjE,QAAO,QAAQ,kBAAkB;AAEnC,MAAI,UACF,QAAO,QAAQ,YAAY,EAAE,MAAM,sBAAsB;EAE3D,MAAM,sBAAsB,mDAAmD,KAAK;AACpF,SAAO,QAAQ,qBAAqB;GAClC,WAAW,QAAQ;GACnB,cAAc,gBAAgB;GAC9B,WAAW;GACX,OAAO,YACH,eAAe,YACd,sBAAsB,MAAM,eAAe"}

package/dist/esm/sdk/{transactions-CzZAt1Yn.js → transactions-Bk-VavcV.js}

@@ -7,16 +7,17 @@ import "./txDigest-CxjhSCgm.js";
 import "./base64-DBPGuXh4.js";
 import "./actions-O1FD5Bq8.js";
 import "./lit-events-C-jpeT5r.js";
-import "./tx-confirmer-wrapper-CqfVBUaA.js";
+import "./tx-confirmer-wrapper-lHNgz9i4.js";
 import { init_errors, toError } from "./errors-D9ar28Dr.js";
-import "./safari-fallbacks-oQKu9xUs.js";
-import { ERROR_MESSAGES, SecureConfirmationType, getIntentDigest, getNearAccountId, getSignTransactionPayload, getTxCount, init_accountIds, isUserCancelledSecureConfirm, toAccountId } from "./requestHelpers-DLBGBHMw.js";
-import { PASSKEY_MANAGER_DEFAULT_CONFIGS, init_defaultConfigs } from "./defaultConfigs-VzvDejmy.js";
-import { getLastLoggedInDeviceNumber } from "./getDeviceNumber-CfmlgfMX.js";
-import { createConfirmSession, createConfirmTxFlowAdapters } from "./createAdapters-BWLe9Ddo.js";
+import "./WebAuthnFallbacks-Bl4BTsNt.js";
+import { ERROR_MESSAGES, SecureConfirmationType, getIntentDigest, getNearAccountId, getSignTransactionPayload, getTxCount, init_accountIds, isUserCancelledSecureConfirm, toAccountId } from "./requestHelpers-Dh1hEYL9.js";
+import { PASSKEY_MANAGER_DEFAULT_CONFIGS, init_defaultConfigs } from "./defaultConfigs-DpslkAQd.js";
+import { getLastLoggedInDeviceNumber, init_getDeviceNumber } from "./getDeviceNumber-zsOHT_Um.js";
+import { createConfirmSession, createConfirmTxFlowAdapters } from "./createAdapters-qVGD6i0g.js";
 
 //#region src/core/WebAuthnManager/VrfWorkerManager/confirmTxFlow/flows/transactions.ts
 init_accountIds();
+init_getDeviceNumber();
 init_errors();
 init_defaultConfigs();
 function getSigningAuthMode(request) {
@@ -118,20 +119,10 @@ async function handleTransactionSigningFlow(ctx, request, worker, opts) {
 		if (!uiVrfChallenge) throw new Error("Missing vrfChallenge for WebAuthn signing flow");
 		const serializedCredential = await adapters.webauthn.collectAuthenticationCredentialWithPRF({
 			nearAccountId,
-			vrfChallenge: uiVrfChallenge,
-			onBeforePrompt: ({ authenticatorsForPrompt, vrfChallenge }) => {
-				console.debug("[SigningFlow] Authenticators for transaction signing", {
-					nearAccountId,
-					authenticatorCount: authenticatorsForPrompt.length,
-					authenticators: authenticatorsForPrompt.map((a) => ({
-						deviceNumber: a.deviceNumber,
-						vrfPublicKey: a.vrfPublicKey,
-						credentialId: a.credentialId
-					})),
-					vrfChallengePublicKey: vrfChallenge.vrfPublicKey
-				});
-			}
+			vrfChallenge: uiVrfChallenge
 		});
+		let contractId;
+		let nearRpcUrl;
 		try {
 			const vrfStatus = await adapters.vrf.checkVrfStatus();
 			if (!vrfStatus.active) throw new Error("VRF keypair not active in memory. VRF session may have expired or was not properly initialized. Please refresh and try again.");
@@ -140,8 +131,6 @@ async function handleTransactionSigningFlow(ctx, request, worker, opts) {
 			const encryptedKeyData = await ctx.indexedDB.nearKeysDB.getEncryptedKey(nearAccountId, deviceNumber);
 			const wrapKeySalt = encryptedKeyData?.wrapKeySalt || "";
 			if (!wrapKeySalt) throw new Error("Missing wrapKeySalt in vault; re-register to upgrade vault format.");
-			let contractId;
-			let nearRpcUrl;
 			if (request.type === SecureConfirmationType.SIGN_TRANSACTION) {
 				const payload = getSignTransactionPayload(request);
 				contractId = payload?.rpcCall?.contractId;

package/dist/esm/sdk/tx-confirm-ui.js

@@ -3937,8 +3937,8 @@ var DrawerTxConfirmerElement = class extends LitElementWithProps {
                   ${this.vrfChallenge?.blockHeight ? x`block ${this.vrfChallenge.blockHeight}` : ""}
                 </span>
               </div>
-              ${this.body && this.body.trim() ? x`<div class="rpid-body">${this.body}</div>` : ""}
             </div>
+            ${this.body && this.body.trim() ? x`<div class="confirmation-body">${this.body}</div>` : ""}
           </div>
           <div class="section responsive-card responsive-card-center">
             <w3a-tx-confirm-content
@@ -4374,68 +4374,68 @@ var ModalTxConfirmElement = class extends LitElementWithProps {
         <div class="modal-container-root">
 
           <div class="responsive-card">
-              <div class="hero">
-                <w3a-passkey-halo-loading
-                  .theme=${this.theme}
-                  .animated=${!this.errorMessage ? true : false}
-                  .ringGap=${4}
-                  .ringWidth=${4}
-                  .ringBorderRadius=${"1.125rem"}
-                  .ringBackground=${"var(--w3a-modal__passkey-halo-loading__ring-background)"}
-                  .innerPadding=${"0px"}
-                  .innerBackground=${"var(--w3a-modal__passkey-halo-loading__inner-background)"}
-                  .height=${36}
-                  .width=${36}
-                ></w3a-passkey-halo-loading>
-                <div class="hero-container">
-                  <!-- Hero heading -->
-                  ${(() => {
+            <div class="hero">
+              <w3a-passkey-halo-loading
+                .theme=${this.theme}
+                .animated=${!this.errorMessage ? true : false}
+                .ringGap=${4}
+                .ringWidth=${4}
+                .ringBorderRadius=${"1.125rem"}
+                .ringBackground=${"var(--w3a-modal__passkey-halo-loading__ring-background)"}
+                .innerPadding=${"0px"}
+                .innerBackground=${"var(--w3a-modal__passkey-halo-loading__inner-background)"}
+                .height=${36}
+                .width=${36}
+              ></w3a-passkey-halo-loading>
+              <div class="hero-container">
+                <!-- Hero heading -->
+                ${(() => {
 			const isRegistration = (this.txSigningRequests?.length || 0) === 0;
 			const fallback = isRegistration ? "Register with Passkey" : "Confirm with Passkey";
 			const titleText = (this.title || "").trim();
 			const heading = titleText || fallback;
 			return x`<h2 class="hero-heading">${heading}</h2>`;
 		})()}
-                  ${this.errorMessage ? x`<div class="error-banner">${this.errorMessage}</div>` : ""}
-                  <!-- RpID Section -->
-                  <div class="rpid-wrapper">
-                    <div class="rpid">
-                      <div class="secure-indicator">
-                        <svg xmlns="http://www.w3.org/2000/svg"
-                          class="padlock-icon"
-                          viewBox="0 0 24 24"
-                          fill="none"
-                          stroke="currentColor"
-                          stroke-width="2"
-                          stroke-linecap="round"
-                          stroke-linejoin="round"
-                        >
-                          <rect width="18" height="11" x="3" y="11" rx="2" ry="2"/>
-                          <path d="M7 11V7a5 5 0 0 1 10 0v4"/>
-                        </svg>
-                        ${this.vrfChallenge?.rpId ? x`<span class="domain-text">${this.vrfChallenge.rpId}</span>` : ""}
-                      </div>
-                      <span class="security-details">
-                        <svg xmlns="http://www.w3.org/2000/svg"
-                          class="block-height-icon"
-                          viewBox="0 0 24 24"
-                          fill="none"
-                          stroke="currentColor"
-                          stroke-width="2"
-                          stroke-linecap="round"
-                          stroke-linejoin="round"
-                        >
-                          <path d="M21 8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A 2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16Z"/>
-                          <path d="m3.3 7 8.7 5 8.7-5"/>
-                          <path d="M12 22V12"/>
-                        </svg>
-                        ${this.vrfChallenge?.blockHeight ? x`block ${this.vrfChallenge.blockHeight}` : ""}
-                      </span>
+                ${this.errorMessage ? x`<div class="error-banner">${this.errorMessage}</div>` : ""}
+                <!-- RpID Section -->
+                <div class="rpid-wrapper">
+                  <div class="rpid">
+                    <div class="secure-indicator">
+                      <svg xmlns="http://www.w3.org/2000/svg"
+                        class="padlock-icon"
+                        viewBox="0 0 24 24"
+                        fill="none"
+                        stroke="currentColor"
+                        stroke-width="2"
+                        stroke-linecap="round"
+                        stroke-linejoin="round"
+                      >
+                        <rect width="18" height="11" x="3" y="11" rx="2" ry="2"/>
+                        <path d="M7 11V7a5 5 0 0 1 10 0v4"/>
+                      </svg>
+                      ${this.vrfChallenge?.rpId ? x`<span class="domain-text">${this.vrfChallenge.rpId}</span>` : ""}
                     </div>
-                    ${this.body && this.body.trim() ? x`<div class="rpid-body">${this.body}</div>` : ""}
+                    <span class="security-details">
+                      <svg xmlns="http://www.w3.org/2000/svg"
+                        class="block-height-icon"
+                        viewBox="0 0 24 24"
+                        fill="none"
+                        stroke="currentColor"
+                        stroke-width="2"
+                        stroke-linecap="round"
+                        stroke-linejoin="round"
+                      >
+                        <path d="M21 8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A 2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16Z"/>
+                        <path d="m3.3 7 8.7 5 8.7-5"/>
+                        <path d="M12 22V12"/>
+                      </svg>
+                      ${this.vrfChallenge?.blockHeight ? x`block ${this.vrfChallenge.blockHeight}` : ""}
+                    </span>
                   </div>
                 </div>
               </div>
+            </div>
+            ${this.body && this.body.trim() ? x`<div class="confirmation-body">${this.body}</div>` : ""}
           </div>
 
           <div class="responsive-card">

package/dist/esm/sdk/{tx-confirmer-wrapper-CqfVBUaA.js → tx-confirmer-wrapper-lHNgz9i4.js}

@@ -1885,8 +1885,8 @@ var DrawerTxConfirmerElement = class extends LitElementWithProps {
                   ${this.vrfChallenge?.blockHeight ? x`block ${this.vrfChallenge.blockHeight}` : ""}
                 </span>
               </div>
-              ${this.body && this.body.trim() ? x`<div class="rpid-body">${this.body}</div>` : ""}
             </div>
+            ${this.body && this.body.trim() ? x`<div class="confirmation-body">${this.body}</div>` : ""}
           </div>
           <div class="section responsive-card responsive-card-center">
             <w3a-tx-confirm-content
@@ -2322,68 +2322,68 @@ var ModalTxConfirmElement = class extends LitElementWithProps {
         <div class="modal-container-root">
 
           <div class="responsive-card">
-              <div class="hero">
-                <w3a-passkey-halo-loading
-                  .theme=${this.theme}
-                  .animated=${!this.errorMessage ? true : false}
-                  .ringGap=${4}
-                  .ringWidth=${4}
-                  .ringBorderRadius=${"1.125rem"}
-                  .ringBackground=${"var(--w3a-modal__passkey-halo-loading__ring-background)"}
-                  .innerPadding=${"0px"}
-                  .innerBackground=${"var(--w3a-modal__passkey-halo-loading__inner-background)"}
-                  .height=${36}
-                  .width=${36}
-                ></w3a-passkey-halo-loading>
-                <div class="hero-container">
-                  <!-- Hero heading -->
-                  ${(() => {
+            <div class="hero">
+              <w3a-passkey-halo-loading
+                .theme=${this.theme}
+                .animated=${!this.errorMessage ? true : false}
+                .ringGap=${4}
+                .ringWidth=${4}
+                .ringBorderRadius=${"1.125rem"}
+                .ringBackground=${"var(--w3a-modal__passkey-halo-loading__ring-background)"}
+                .innerPadding=${"0px"}
+                .innerBackground=${"var(--w3a-modal__passkey-halo-loading__inner-background)"}
+                .height=${36}
+                .width=${36}
+              ></w3a-passkey-halo-loading>
+              <div class="hero-container">
+                <!-- Hero heading -->
+                ${(() => {
 			const isRegistration = (this.txSigningRequests?.length || 0) === 0;
 			const fallback = isRegistration ? "Register with Passkey" : "Confirm with Passkey";
 			const titleText = (this.title || "").trim();
 			const heading = titleText || fallback;
 			return x`<h2 class="hero-heading">${heading}</h2>`;
 		})()}
-                  ${this.errorMessage ? x`<div class="error-banner">${this.errorMessage}</div>` : ""}
-                  <!-- RpID Section -->
-                  <div class="rpid-wrapper">
-                    <div class="rpid">
-                      <div class="secure-indicator">
-                        <svg xmlns="http://www.w3.org/2000/svg"
-                          class="padlock-icon"
-                          viewBox="0 0 24 24"
-                          fill="none"
-                          stroke="currentColor"
-                          stroke-width="2"
-                          stroke-linecap="round"
-                          stroke-linejoin="round"
-                        >
-                          <rect width="18" height="11" x="3" y="11" rx="2" ry="2"/>
-                          <path d="M7 11V7a5 5 0 0 1 10 0v4"/>
-                        </svg>
-                        ${this.vrfChallenge?.rpId ? x`<span class="domain-text">${this.vrfChallenge.rpId}</span>` : ""}
-                      </div>
-                      <span class="security-details">
-                        <svg xmlns="http://www.w3.org/2000/svg"
-                          class="block-height-icon"
-                          viewBox="0 0 24 24"
-                          fill="none"
-                          stroke="currentColor"
-                          stroke-width="2"
-                          stroke-linecap="round"
-                          stroke-linejoin="round"
-                        >
-                          <path d="M21 8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A 2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16Z"/>
-                          <path d="m3.3 7 8.7 5 8.7-5"/>
-                          <path d="M12 22V12"/>
-                        </svg>
-                        ${this.vrfChallenge?.blockHeight ? x`block ${this.vrfChallenge.blockHeight}` : ""}
-                      </span>
+                ${this.errorMessage ? x`<div class="error-banner">${this.errorMessage}</div>` : ""}
+                <!-- RpID Section -->
+                <div class="rpid-wrapper">
+                  <div class="rpid">
+                    <div class="secure-indicator">
+                      <svg xmlns="http://www.w3.org/2000/svg"
+                        class="padlock-icon"
+                        viewBox="0 0 24 24"
+                        fill="none"
+                        stroke="currentColor"
+                        stroke-width="2"
+                        stroke-linecap="round"
+                        stroke-linejoin="round"
+                      >
+                        <rect width="18" height="11" x="3" y="11" rx="2" ry="2"/>
+                        <path d="M7 11V7a5 5 0 0 1 10 0v4"/>
+                      </svg>
+                      ${this.vrfChallenge?.rpId ? x`<span class="domain-text">${this.vrfChallenge.rpId}</span>` : ""}
                     </div>
-                    ${this.body && this.body.trim() ? x`<div class="rpid-body">${this.body}</div>` : ""}
+                    <span class="security-details">
+                      <svg xmlns="http://www.w3.org/2000/svg"
+                        class="block-height-icon"
+                        viewBox="0 0 24 24"
+                        fill="none"
+                        stroke="currentColor"
+                        stroke-width="2"
+                        stroke-linecap="round"
+                        stroke-linejoin="round"
+                      >
+                        <path d="M21 8a2 2 0 0 0-1-1.73l-7-4a2 2 0 0 0-2 0l-7 4A 2 2 0 0 0 3 8v8a2 2 0 0 0 1 1.73l7 4a2 2 0 0 0 2 0l7-4A2 2 0 0 0 21 16Z"/>
+                        <path d="m3.3 7 8.7 5 8.7-5"/>
+                        <path d="M12 22V12"/>
+                      </svg>
+                      ${this.vrfChallenge?.blockHeight ? x`block ${this.vrfChallenge.blockHeight}` : ""}
+                    </span>
                   </div>
                 </div>
               </div>
+            </div>
+            ${this.body && this.body.trim() ? x`<div class="confirmation-body">${this.body}</div>` : ""}
           </div>
 
           <div class="responsive-card">

package/dist/esm/sdk/tx-confirmer.css

@@ -292,7 +292,6 @@ w3a-drawer-tx-confirmer[theme="light"] .modal-container-root {
   min-height: 48px;
   display: grid;
   align-items: flex-start;
-  margin-right: 1rem;
   margin-top: 0.5rem;
 }
 .hero-heading {
@@ -739,6 +738,7 @@ w3a-drawer {
 }
 .responsive-card {
   position: relative;
+  justify-content: flex-end;
   /* Scales with viewport and root font size under text zoom */
   max-width: clamp(20rem, 90vw, 26rem);
   min-width: 0;
@@ -759,13 +759,15 @@ w3a-drawer {
 .rpid-wrapper {
   margin-bottom: 1rem;
 }
-.rpid-body {
+.confirmation-body {
   margin-top: 0.5rem;
   font-size: 0.8rem;
   line-height: 1.35;
   color: var(--w3a-colors-textSecondary);
-  overflow-wrap: anywhere;
-  hyphens: auto;
+  max-width: 340px;
+  margin: 0.5rem;
+  /* overflow-wrap: anywhere; */
+  /* hyphens: auto; */
   white-space: pre-line;
 }
 .drawer-tx-confirmer-root .rpid {

package/dist/esm/sdk/w3a-tx-confirmer.js

@@ -7,6 +7,6 @@ import "./txDigest-CxjhSCgm.js";
 import "./base64-DBPGuXh4.js";
 import "./actions-O1FD5Bq8.js";
 import "./lit-events-C-jpeT5r.js";
-import { TxConfirmerWrapperElement } from "./tx-confirmer-wrapper-CqfVBUaA.js";
+import { TxConfirmerWrapperElement } from "./tx-confirmer-wrapper-lHNgz9i4.js";
 
 export { TxConfirmerWrapperElement };