@bitgo-beta/sdk-core 8.2.1-beta.21 → 8.2.1-beta.2100

package/dist/src/bitgo/utils/tss/eddsa/typesEddsaMPCv2.d.ts

@@ -0,0 +1,75 @@
+import * as t from 'io-ts';
+import { type EddsaMPCv2DeriveRound1Request, type EddsaMPCv2DeriveRound1Response, type EddsaMPCv2DeriveRound2Request, type EddsaMPCv2DeriveRound2Response } from '@bitgo/public-types';
+export declare const generateEddsaMPCv2KeyRequestBody: t.UnionC<[t.IntersectionC<[t.TypeC<{
+    userGpgPublicKey: import("io-ts-types").NonEmptyStringC;
+    backupGpgPublicKey: import("io-ts-types").NonEmptyStringC;
+    userMsg1: t.TypeC<{
+        message: t.StringC;
+        signature: t.StringC;
+    }>;
+    backupMsg1: t.TypeC<{
+        message: t.StringC;
+        signature: t.StringC;
+    }>;
+}>, t.PartialC<{
+    userVrfMsg1: t.TypeC<{
+        message: t.StringC;
+        signature: t.StringC;
+    }>;
+    backupVrfMsg1: t.TypeC<{
+        message: t.StringC;
+        signature: t.StringC;
+    }>;
+}>]>, t.IntersectionC<[t.TypeC<{
+    sessionId: import("io-ts-types").NonEmptyStringC;
+    userMsg2: t.TypeC<{
+        message: t.StringC;
+        signature: t.StringC;
+    }>;
+    backupMsg2: t.TypeC<{
+        message: t.StringC;
+        signature: t.StringC;
+    }>;
+}>, t.PartialC<{
+    userVrfMsg2: t.TypeC<{
+        message: t.StringC;
+        signature: t.StringC;
+    }>;
+    backupVrfMsg2: t.TypeC<{
+        message: t.StringC;
+        signature: t.StringC;
+    }>;
+}>]>]>;
+export type GenerateEddsaMPCv2KeyRequestBody = t.TypeOf<typeof generateEddsaMPCv2KeyRequestBody>;
+export declare const generateEddsaMPCv2KeyRequestResponse: t.UnionC<[t.IntersectionC<[t.TypeC<{
+    sessionId: import("io-ts-types").NonEmptyStringC;
+    bitgoMsg1: t.TypeC<{
+        message: t.StringC;
+        signature: t.StringC;
+    }>;
+}>, t.PartialC<{
+    bitgoVrfMsg1: t.TypeC<{
+        message: t.StringC;
+        signature: t.StringC;
+    }>;
+}>]>, t.IntersectionC<[t.TypeC<{
+    sessionId: import("io-ts-types").NonEmptyStringC;
+    commonPublicKeychain: import("io-ts-types").NonEmptyStringC;
+    bitgoMsg2: t.TypeC<{
+        message: t.StringC;
+        signature: t.StringC;
+    }>;
+}>, t.PartialC<{
+    bitgoVrfMsgToUser: t.TypeC<{
+        message: t.StringC;
+        signature: t.StringC;
+    }>;
+    bitgoVrfMsgToBackup: t.TypeC<{
+        message: t.StringC;
+        signature: t.StringC;
+    }>;
+}>]>]>;
+export type GenerateEddsaMPCv2KeyRequestResponse = t.TypeOf<typeof generateEddsaMPCv2KeyRequestResponse>;
+export type GenerateEddsaMPCv2DeriveKeyRequest = EddsaMPCv2DeriveRound1Request | EddsaMPCv2DeriveRound2Request;
+export type GenerateEddsaMPCv2DeriveKeyRequestResponse = EddsaMPCv2DeriveRound1Response | EddsaMPCv2DeriveRound2Response;
+//# sourceMappingURL=typesEddsaMPCv2.d.ts.map

package/dist/src/bitgo/utils/tss/eddsa/typesEddsaMPCv2.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typesEddsaMPCv2.d.ts","sourceRoot":"","sources":["../../../../../../src/bitgo/utils/tss/eddsa/typesEddsaMPCv2.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,CAAC,MAAM,OAAO,CAAC;AAC3B,OAAO,EACL,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EACnC,KAAK,6BAA6B,EAClC,KAAK,8BAA8B,EAKpC,MAAM,qBAAqB,CAAC;AAE7B,eAAO,MAAM,gCAAgC;6BAe+9I,aAAa;+BAAkD,aAAa;cAAgC,EAAG,KAAK;iBAAmB,EAAG,OAAO;mBAAoB,EAAG,OAAO;;gBAAyB,EAAG,KAAK;iBAAmB,EAAG,OAAO;mBAAoB,EAAG,OAAO;;;iBAA2C,EAAG,KAAK;iBAAmB,EAAG,OAAO;mBAAoB,EAAG,OAAO;;mBAA4B,EAAG,KAAK;iBAAmB,EAAG,OAAO;mBAAoB,EAAG,OAAO;;;sBAAqoB,aAAa;cAAgC,EAAG,KAAK;iBAAmB,EAAG,OAAO;mBAAoB,EAAG,OAAO;;gBAAyB,EAAG,KAAK;iBAAmB,EAAG,OAAO;mBAAoB,EAAG,OAAO;;;iBAA2C,EAAG,KAAK;iBAAmB,EAAG,OAAO;mBAAoB,EAAG,OAAO;;mBAA4B,EAAG,KAAK;iBAAmB,EAAG,OAAO;mBAAoB,EAAG,OAAO;;MAf34L,CAAC;AAExH,MAAM,MAAM,gCAAgC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,gCAAgC,CAAC,CAAC;AAEjG,eAAO,MAAM,oCAAoC;sBAWqoK,aAAa;eAAiC,EAAG,KAAK;iBAAmB,EAAG,OAAO;mBAAoB,EAAG,OAAO;;;kBAA4C,EAAG,KAAK;iBAAmB,EAAG,OAAO;mBAAoB,EAAG,OAAO;;;sBAA8zB,aAAa;iCAAoD,aAAa;eAAiC,EAAG,KAAK;iBAAmB,EAAG,OAAO;mBAAoB,EAAG,OAAO;;;uBAAiD,EAAG,KAAK;iBAAmB,EAAG,OAAO;mBAAoB,EAAG,OAAO;;yBAAkC,EAAG,KAAK;iBAAmB,EAAG,OAAO;mBAAoB,EAAG,OAAO;;MAR7lN,CAAC;AAEH,MAAM,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,oCAAoC,CAAC,CAAC;AAEzG,MAAM,MAAM,kCAAkC,GAAG,6BAA6B,GAAG,6BAA6B,CAAC;AAC/G,MAAM,MAAM,0CAA0C,GAClD,8BAA8B,GAC9B,8BAA8B,CAAC"}

package/dist/src/bitgo/utils/tss/eddsa/typesEddsaMPCv2.js

@@ -0,0 +1,44 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateEddsaMPCv2KeyRequestResponse = exports.generateEddsaMPCv2KeyRequestBody = void 0;
+const t = __importStar(require("io-ts"));
+const public_types_1 = require("@bitgo/public-types");
+exports.generateEddsaMPCv2KeyRequestBody = t.union([public_types_1.EddsaMPCv2KeyGenRound1Request, public_types_1.EddsaMPCv2KeyGenRound2Request]);
+exports.generateEddsaMPCv2KeyRequestResponse = t.union([
+    public_types_1.EddsaMPCv2KeyGenRound1Response,
+    public_types_1.EddsaMPCv2KeyGenRound2Response,
+]);
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/bitgo/utils/tss/index.d.ts

@@ -1,6 +1,7 @@
 import TssUtils, { TssUtilsTypes, EddsaUtilsTypes } from './eddsa';
 export * as ECDSAUtils from './ecdsa';
 export * as EDDSAUtils from './eddsa';
+export * as RedpallasUtils from './redpallas';
 /** @deprecated use EDDSAUtils */
 export { TssUtils };
 /** @deprecated use EDDSAUtilsTypes */
@@ -10,4 +11,10 @@ export { EddsaUtilsTypes };
 export { ITssUtils, IEddsaUtils, TxRequest, EddsaUnsignedTransaction } from './eddsa';
 export * as BaseTssUtils from './baseTSSUtils';
 export * from './baseTypes';
+export * from './addressVerification';
+export * from './keyVerification';
+export * from './preHashedSignable';
+export * from './recipientUtils';
+export * from './keyShareEnvelope';
+export * from './signableConsistency';
 //# sourceMappingURL=index.d.ts.map

package/dist/src/bitgo/utils/tss/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/bitgo/utils/tss/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,KAAK,UAAU,MAAM,SAAS,CAAC;AACtC,OAAO,KAAK,UAAU,MAAM,SAAS,CAAC;AAEtC,iCAAiC;AACjC,OAAO,EAAE,QAAQ,EAAE,CAAC;AACpB,sCAAsC;AACtC,OAAO,EAAE,aAAa,EAAE,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,CAAC;AAG3B,+CAA+C;AAC/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAEtF,OAAO,KAAK,YAAY,MAAM,gBAAgB,CAAC;AAC/C,cAAc,aAAa,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/bitgo/utils/tss/index.ts"],"names":[],"mappings":"AAAA,OAAO,QAAQ,EAAE,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,KAAK,UAAU,MAAM,SAAS,CAAC;AACtC,OAAO,KAAK,UAAU,MAAM,SAAS,CAAC;AACtC,OAAO,KAAK,cAAc,MAAM,aAAa,CAAC;AAE9C,iCAAiC;AACjC,OAAO,EAAE,QAAQ,EAAE,CAAC;AACpB,sCAAsC;AACtC,OAAO,EAAE,aAAa,EAAE,CAAC;AACzB,OAAO,EAAE,eAAe,EAAE,CAAC;AAG3B,+CAA+C;AAC/C,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,SAAS,EAAE,wBAAwB,EAAE,MAAM,SAAS,CAAC;AAEtF,OAAO,KAAK,YAAY,MAAM,gBAAgB,CAAC;AAC/C,cAAc,aAAa,CAAC;AAC5B,cAAc,uBAAuB,CAAC;AACtC,cAAc,mBAAmB,CAAC;AAClC,cAAc,qBAAqB,CAAC;AACpC,cAAc,kBAAkB,CAAC;AACjC,cAAc,oBAAoB,CAAC;AACnC,cAAc,uBAAuB,CAAC"}

package/dist/src/bitgo/utils/tss/index.js

@@ -1,7 +1,11 @@
 "use strict";
 var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
-    Object.defineProperty(o, k2, { enumerable: true, get: function() { return m[k]; } });
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
 }) : (function(o, m, k, k2) {
     if (k2 === undefined) k2 = k;
     o[k2] = m[k];
@@ -11,24 +15,41 @@ var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (
 }) : function(o, v) {
     o["default"] = v;
 });
-var __importStar = (this && this.__importStar) || function (mod) {
-    if (mod && mod.__esModule) return mod;
-    var result = {};
-    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
-    __setModuleDefault(result, mod);
-    return result;
-};
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
 var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.BaseTssUtils = exports.EddsaUtilsTypes = exports.TssUtilsTypes = exports.TssUtils = exports.EDDSAUtils = exports.ECDSAUtils = void 0;
+exports.BaseTssUtils = exports.EddsaUtilsTypes = exports.TssUtilsTypes = exports.TssUtils = exports.RedpallasUtils = exports.EDDSAUtils = exports.ECDSAUtils = void 0;
 const eddsa_1 = __importStar(require("./eddsa"));
 exports.TssUtils = eddsa_1.default;
 Object.defineProperty(exports, "TssUtilsTypes", { enumerable: true, get: function () { return eddsa_1.TssUtilsTypes; } });
 Object.defineProperty(exports, "EddsaUtilsTypes", { enumerable: true, get: function () { return eddsa_1.EddsaUtilsTypes; } });
 exports.ECDSAUtils = __importStar(require("./ecdsa"));
 exports.EDDSAUtils = __importStar(require("./eddsa"));
+exports.RedpallasUtils = __importStar(require("./redpallas"));
 exports.BaseTssUtils = __importStar(require("./baseTSSUtils"));
 __exportStar(require("./baseTypes"), exports);
-//# sourceMappingURL=data:application/json;base64,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
+__exportStar(require("./addressVerification"), exports);
+__exportStar(require("./keyVerification"), exports);
+__exportStar(require("./preHashedSignable"), exports);
+__exportStar(require("./recipientUtils"), exports);
+__exportStar(require("./keyShareEnvelope"), exports);
+__exportStar(require("./signableConsistency"), exports);
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/bitgo/utils/tss/keyShareEnvelope.d.ts

@@ -0,0 +1,40 @@
+import { Buffer } from 'buffer';
+/** Version of the Safe MPC keyshare envelope that carries VRF material. */
+export declare const SAFE_MPC_KEY_ENVELOPE_VERSION = 1;
+export interface ParsedMpcV2KeyShare {
+    /** Serialized MPC signing keyshare (DKLS or MPS) or reduced signing keyshare. */
+    signingKeyShare: Buffer;
+    /** Serialized VRF keyshare, present in Safe-root envelopes. */
+    vrfKeyShare?: Buffer;
+}
+/**
+ * Combines a signing keyshare with a VRF keyshare into the Safe MPC CBOR envelope
+ * (`{ version, prvKeyShare, vrf }`). `envelope` wraps the full signing share for
+ * `encryptedPrv`. `reducedEnvelope` wraps the reduced signing share for
+ * `reducedEncryptedPrv`, which is what Safe keycards store.
+ */
+export declare function buildSafeMpcKeyEnvelopes(privateMaterial: Buffer, reducedPrivateMaterial: Buffer, vrfKeyShare: Buffer): {
+    envelope: Buffer;
+    reducedEnvelope: Buffer;
+};
+/**
+ * Parses a decrypted Safe MPC root blob produced by {@link buildSafeMpcKeyEnvelopes}.
+ * Throws if the blob is not a versioned envelope with both shares. Wallet-card recovery
+ * uses {@link parseMpcV2KeyShareEnvelope} instead, because legacy cards have no VRF share.
+ */
+export declare function parseSafeMpcKeyEnvelopes(decryptedBlob: string): {
+    signing: Buffer;
+    vrf: Buffer;
+};
+/**
+ * Parses decrypted MPCv2 key material from a wallet or Safe keycard.
+ *
+ * Legacy MPCv2 cards contain base64(CBOR ReducedKeyShare). Safe-root cards contain
+ * base64(CBOR({ version: 1, prvKeyShare, vrf })); the signing share remains reduced,
+ * while `vrf` is the complete serialized VrfKeyshare required by the VRF wasm API.
+ *
+ * The legacy path is intentionally retained because existing wallet cards do not have
+ * VRF material and must continue to recover as before.
+ */
+export declare function parseMpcV2KeyShareEnvelope(decryptedKeyShare: string): ParsedMpcV2KeyShare;
+//# sourceMappingURL=keyShareEnvelope.d.ts.map

package/dist/src/bitgo/utils/tss/keyShareEnvelope.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyShareEnvelope.d.ts","sourceRoot":"","sources":["../../../../../src/bitgo/utils/tss/keyShareEnvelope.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAEhC,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C,MAAM,WAAW,mBAAmB;IAClC,iFAAiF;IACjF,eAAe,EAAE,MAAM,CAAC;IACxB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAkCD;;;;;GAKG;AACH,wBAAgB,wBAAwB,CACtC,eAAe,EAAE,MAAM,EACvB,sBAAsB,EAAE,MAAM,EAC9B,WAAW,EAAE,MAAM,GAClB;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,eAAe,EAAE,MAAM,CAAA;CAAE,CAY/C;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,aAAa,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAoBhG;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,CAAC,iBAAiB,EAAE,MAAM,GAAG,mBAAmB,CAkBzF"}

package/dist/src/bitgo/utils/tss/keyShareEnvelope.js

@@ -0,0 +1,103 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SAFE_MPC_KEY_ENVELOPE_VERSION = void 0;
+exports.buildSafeMpcKeyEnvelopes = buildSafeMpcKeyEnvelopes;
+exports.parseSafeMpcKeyEnvelopes = parseSafeMpcKeyEnvelopes;
+exports.parseMpcV2KeyShareEnvelope = parseMpcV2KeyShareEnvelope;
+const cbor_x_1 = require("cbor-x");
+const buffer_1 = require("buffer");
+/** Version of the Safe MPC keyshare envelope that carries VRF material. */
+exports.SAFE_MPC_KEY_ENVELOPE_VERSION = 1;
+function isRecord(value) {
+    return typeof value === 'object' && value !== null;
+}
+function isSafeMpcKeyEnvelope(value) {
+    return isRecord(value) && 'version' in value && 'prvKeyShare' in value && 'vrf' in value;
+}
+function asBuffer(value, field) {
+    if (!(value instanceof Uint8Array)) {
+        throw new Error(`Invalid MPC keyshare envelope: ${field} must be a byte string`);
+    }
+    return buffer_1.Buffer.from(value);
+}
+function tryDecodeCbor(decryptedKeyShare) {
+    const encoded = buffer_1.Buffer.from(decryptedKeyShare, 'base64');
+    try {
+        return { encoded, decoded: (0, cbor_x_1.decode)(encoded) };
+    }
+    catch (error) {
+        return { encoded, error };
+    }
+}
+/**
+ * Combines a signing keyshare with a VRF keyshare into the Safe MPC CBOR envelope
+ * (`{ version, prvKeyShare, vrf }`). `envelope` wraps the full signing share for
+ * `encryptedPrv`. `reducedEnvelope` wraps the reduced signing share for
+ * `reducedEncryptedPrv`, which is what Safe keycards store.
+ */
+function buildSafeMpcKeyEnvelopes(privateMaterial, reducedPrivateMaterial, vrfKeyShare) {
+    const envelope = (0, cbor_x_1.encode)({
+        version: exports.SAFE_MPC_KEY_ENVELOPE_VERSION,
+        prvKeyShare: new Uint8Array(privateMaterial),
+        vrf: new Uint8Array(vrfKeyShare),
+    });
+    const reducedEnvelope = (0, cbor_x_1.encode)({
+        version: exports.SAFE_MPC_KEY_ENVELOPE_VERSION,
+        prvKeyShare: new Uint8Array(reducedPrivateMaterial),
+        vrf: new Uint8Array(vrfKeyShare),
+    });
+    return { envelope: buffer_1.Buffer.from(envelope), reducedEnvelope: buffer_1.Buffer.from(reducedEnvelope) };
+}
+/**
+ * Parses a decrypted Safe MPC root blob produced by {@link buildSafeMpcKeyEnvelopes}.
+ * Throws if the blob is not a versioned envelope with both shares. Wallet-card recovery
+ * uses {@link parseMpcV2KeyShareEnvelope} instead, because legacy cards have no VRF share.
+ */
+function parseSafeMpcKeyEnvelopes(decryptedBlob) {
+    const decoded = tryDecodeCbor(decryptedBlob);
+    if ('error' in decoded) {
+        const message = decoded.error instanceof Error ? decoded.error.message : String(decoded.error);
+        throw new Error(`Failed to decode safe MPC root key envelope: ${message}`);
+    }
+    if (!isSafeMpcKeyEnvelope(decoded.decoded)) {
+        throw new Error('Invalid safe MPC root key envelope: expected version, signing keyshare, and VRF keyshare');
+    }
+    const { version, prvKeyShare, vrf } = decoded.decoded;
+    if (version !== exports.SAFE_MPC_KEY_ENVELOPE_VERSION) {
+        throw new Error(`Unsupported safe MPC root key envelope version: ${String(version)}`);
+    }
+    if (!(prvKeyShare instanceof Uint8Array) || prvKeyShare.length === 0) {
+        throw new Error('Safe MPC root key envelope is missing a signing keyshare');
+    }
+    if (!(vrf instanceof Uint8Array) || vrf.length === 0) {
+        throw new Error('Safe MPC root key envelope is missing a VRF keyshare');
+    }
+    return { signing: buffer_1.Buffer.from(prvKeyShare), vrf: buffer_1.Buffer.from(vrf) };
+}
+/**
+ * Parses decrypted MPCv2 key material from a wallet or Safe keycard.
+ *
+ * Legacy MPCv2 cards contain base64(CBOR ReducedKeyShare). Safe-root cards contain
+ * base64(CBOR({ version: 1, prvKeyShare, vrf })); the signing share remains reduced,
+ * while `vrf` is the complete serialized VrfKeyshare required by the VRF wasm API.
+ *
+ * The legacy path is intentionally retained because existing wallet cards do not have
+ * VRF material and must continue to recover as before.
+ */
+function parseMpcV2KeyShareEnvelope(decryptedKeyShare) {
+    const decoded = tryDecodeCbor(decryptedKeyShare);
+    if ('error' in decoded) {
+        return { signingKeyShare: decoded.encoded };
+    }
+    if (!isRecord(decoded.decoded) || !('version' in decoded.decoded)) {
+        return { signingKeyShare: decoded.encoded };
+    }
+    if (decoded.decoded.version !== exports.SAFE_MPC_KEY_ENVELOPE_VERSION) {
+        throw new Error(`Unsupported MPC keyshare envelope version: ${String(decoded.decoded.version)}`);
+    }
+    return {
+        signingKeyShare: asBuffer(decoded.decoded.prvKeyShare, 'prvKeyShare'),
+        vrfKeyShare: asBuffer(decoded.decoded.vrf, 'vrf'),
+    };
+}
+//# sourceMappingURL=data:application/json;base64,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

package/dist/src/bitgo/utils/tss/keyVerification.d.ts

@@ -0,0 +1,45 @@
+import { UserSigningMaterial } from '../../tss/eddsa/types';
+/**
+ * Parses the user TSS EdDSA signing material that a client passes as `prv` when signing,
+ * and rejects anything that does not decode as user signing material.
+ *
+ * Decoding is a shape check only, but it keeps malformed input away from the combine routine,
+ * which throws raw, input-interpolating errors for malformed shares.
+ *
+ * The input is private key material, so no error message may interpolate any part of it.
+ * In particular, JSON.parse errors on Node >= 20 include the raw input in their message,
+ * which is why parse failures are rethrown with a constant message.
+ *
+ * @param prv - stringified user signing material (`uShare`, `bitgoYShare`, `backupYShare`)
+ */
+export declare function parseEddsaUserSigningMaterial(prv: string): UserSigningMaterial;
+/**
+ * Verifies that user TSS EdDSA signing material (`prv`) recombines to a given commonKeychain.
+ *
+ * Recombines the user's share with the BitGo and backup Y shares — the same computation the
+ * SDK performs when creating the user keychain or signing — and compares the result against
+ * the wallet's commonKeychain. Returns false rather than throwing when the keys do not match.
+ * Shares that pass the shape check but are cryptographically inconsistent are rejected with
+ * a constant message: the combine routine throws raw errors, some of which interpolate
+ * submitter-controlled fields, which must not surface through the API.
+ *
+ * Recombination alone is not proof of possession, so two further checks run first. The seed is
+ * bound to `uShare.y`, and the Y shares must carry their VSS commitment `v` — `keyCombine`
+ * verifies a Y share's secret `u` only when `v` is present, so material without `v` cannot be
+ * verified at all and throws a distinct error rather than being judged a non-match. Genuine
+ * shares produced by `keyShare` always carry `v`.
+ *
+ * A true result is a consistency check for a caller inspecting its own material, not proof of
+ * possession, and must never be used as an authorization signal: a caller who knows only the
+ * wallet's public commonKeychain can construct material that passes — an `uShare` whose seed
+ * matches its `y`, plus Y shares with a chosen secret `u` and the `v` solved from it, whose
+ * `y` values sum to the common key.
+ *
+ * @param params.prv - stringified user signing material, as passed as `prv` when signing
+ * @param params.commonKeychain - the wallet's user keychain commonKeychain
+ */
+export declare function eddsaUserSigningMaterialMatchesCommonKeychain(params: {
+    prv: string;
+    commonKeychain: string;
+}): Promise<boolean>;
+//# sourceMappingURL=keyVerification.d.ts.map

package/dist/src/bitgo/utils/tss/keyVerification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyVerification.d.ts","sourceRoot":"","sources":["../../../../../src/bitgo/utils/tss/keyVerification.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAiE5D;;;;;;;;;;;;GAYG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,mBAAmB,CAY9E;AAuBD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAsB,6CAA6C,CAAC,MAAM,EAAE;IAC1E,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,MAAM,CAAC;CACxB,GAAG,OAAO,CAAC,OAAO,CAAC,CAmBnB"}