@invisible-labs/sdk 0.6.0-devnet.2 → 0.6.0-devnet.4

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/version.ts","../src/core/session.ts","../src/transport/inMemoryTransport.ts","../src/attestation/index.ts","../src/coordinator/index.ts"],"names":[],"mappings":";;;;;;;;;;AAIO,IAAM,UAAA,GAAa;;;AC2BnB,SAAS,WAAW,OAAA,EAA2B;AACpD,EAAA,OAAO,OAAA,CAAQ,QAAA;AACjB;;;ACEO,SAAS,iBAAA,CAAkB,OAAA,GAAoC,EAAC,EAA4B;AACjG,EAAA,MAAM,EAAA,GAAK,sBAAsB,MAAM,CAAA;AACvC,EAAA,MAAM,gBAAA,uBAAuB,GAAA,EAAiC;AAE9D,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,MAAM,EAAA,CAAG,GAAA,EAAI;AAAA,IACpB,aAAA,EAAe,CAAC,QAAA,KAAa,EAAA,CAAG,SAAS,QAAQ,CAAA;AAAA,IACjD,UAAU,QAAA,EAAuB;AAC/B,MAAA,gBAAA,CAAiB,IAAI,QAAQ,CAAA;AAC7B,MAAA,OAAO,MAAM,gBAAA,CAAiB,MAAA,CAAO,QAAQ,CAAA;AAAA,IAC/C,CAAA;AAAA,IACA,QAAQ,KAAA,EAAyB;AAC/B,MAAA,KAAA,MAAW,QAAA,IAAY,gBAAA,EAAkB,QAAA,CAAS,KAAK,CAAA;AAAA,IACzD,CAAA;AAAA,IACA,MAAM,QAAQ,MAAA,EAAQ;AACpB,MAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,QAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,mCAAmC,CAAA;AAAA,MACjF;AACA,MAAA,IAAI,EAAA,CAAG,GAAA,EAAI,KAAM,MAAA,EAAQ;AACzB,MAAA,EAAA,CAAG,IAAI,YAAY,CAAA;AACnB,MAAA,EAAA,CAAG,IAAI,MAAM,CAAA;AAAA,IACf,CAAA;AAAA,IACA,KAAK,KAAA,EAAyB;AAC5B,MAAA,IAAI,EAAA,CAAG,GAAA,EAAI,KAAM,MAAA,EAAQ;AACvB,QAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,qCAAqC,CAAA;AAAA,MACnF;AACA,MAAA,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,IACtB,CAAA;AAAA,IACA,KAAA,GAAQ;AACN,MAAA,IAAI,EAAA,CAAG,GAAA,EAAI,KAAM,QAAA,EAAU;AAC3B,MAAA,EAAA,CAAG,IAAI,SAAS,CAAA;AAChB,MAAA,EAAA,CAAG,IAAI,QAAQ,CAAA;AAAA,IACjB;AAAA,GACF;AACF;;;ACrDO,IAAM,WAAA,GAAc;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQzB,MAAM,YAAY,OAAA,EAA8C;AAC9D,IAAA,MAAM,KAAA,GAAQ,gBAAgB,OAAO,CAAA;AACrC,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,SAAA,CAAU,CAAC,CAAA;AACvC,IAAA,IAAI;AACF,MAAA,MAAM,SAAS,MAAM,kBAAA,CAAmB,OAAO,QAAA,EAAU,KAAA,CAAM,KAAK,uBAAuB,CAAA;AAC3F,MAAA,KAAA,CAAM,WAAA,GAAc,MAAA;AACpB,MAAA,KAAA,CAAM,QAAA,GAAW,IAAA;AACjB,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,KAAA,GAAQ,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAChE,MAAA,iBAAA,CAAkB,OAAO,KAAK,CAAA;AAC9B,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF,CAAA;AAAA;AAAA,EAGA,QAAQ,OAAA,EAA4C;AAClD,IAAA,OAAO,eAAA,CAAgB,OAAO,CAAA,CAAE,WAAA;AAAA,EAClC,CAAA;AAAA;AAAA,EAGA,OAAO,OAAA,EAAyC;AAC9C,IAAA,OAAO,gBAAgB,OAAO,CAAA,CAAE,IAAA,CAAK,SAAA,CAAU,CAAC,CAAA,CAAG,UAAA;AAAA,EACrD,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,iBAAA,CAAkB,SAAkB,OAAA,EAA8C;AAChF,IAAA,MAAM,QAAA,GAAW,eAAA,CAAgB,OAAO,CAAA,CAAE,uBAAA;AAC1C,IAAA,QAAA,CAAS,IAAI,OAAO,CAAA;AACpB,IAAA,OAAO,MAAM,QAAA,CAAS,MAAA,CAAO,OAAO,CAAA;AAAA,EACtC;AACF;;;ACrCO,IAAM,WAAA,GAAc;AAAA;AAAA,EAEzB,UAAU,OAAA,EAAkD;AAC1D,IAAA,OAAO,eAAA,CAAgB,OAAO,CAAA,CAAE,IAAA,CAAK,SAAA;AAAA,EACvC,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,cAAc,QAAA,EAAwD;AACpE,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,2BAA2B,CAAC,CAAA;AAAA,EAC5E,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,QAAQ,QAAA,EAAgD;AACtD,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,qBAAqB,CAAC,CAAA;AAAA,EACtE,CAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,cAAc,QAAA,EAAkC;AAC9C,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,2BAA2B,CAAC,CAAA;AAAA,EAC5E;AACF","file":"index.js","sourcesContent":["/**\n * The API surface version this build implements. Bumped only on a breaking\n * surface change. See docs/sdk-specification.md section 12.\n */\nexport const apiVersion = \"v0\" as const;\n\n/** Literal type of {@link apiVersion}. */\nexport type ApiVersion = typeof apiVersion;\n","/**\n * The opaque session handle.\n *\n * A `Session` is the single stateful object the functional surface threads\n * through every call: `fn(session, args)`. It owns the transport, the\n * attestation state, and (later) the leader-epoch bookkeeping. Consumers treat\n * it as opaque - they read `session.attested` and pass it back to SDK\n * functions, but never reach inside. The internal state map and constructor\n * live alongside `createSession` (added in a later ticket); this module only\n * fixes the public shape so the rest of the surface can type against it.\n */\n\ndeclare const sessionBrand: unique symbol;\n\n/**\n * Opaque, attested session handle. Obtain one from `createSession`; pass it as\n * the first argument to every actor command. The only field consumers read is\n * {@link Session.attested}.\n */\nexport interface Session {\n  /**\n   * Whether the current Noise session has passed full TDX attestation. Sensitive\n   * commands refuse to run until this is `true`. Re-handshake or failover resets\n   * it to `false` until a fresh attestation completes.\n   */\n  readonly attested: boolean;\n  /** @internal Opacity brand; not constructable by consumers. */\n  readonly [sessionBrand]: true;\n}\n\n/** Convenience predicate mirroring {@link Session.attested}. */\nexport function isAttested(session: Session): boolean {\n  return session.attested;\n}\n","/**\n * In-memory transport.\n *\n * A zero-network channel used by unit tests. It transitions straight to `open`\n * on connect. `send` delivers the raw frame bytes to an optional peer sink: the\n * WebSocket message boundary is the frame boundary, so there is no extra length\n * prefix (matching the production transport). Noise lives above this pure byte\n * channel, never inside it.\n *\n * With no peer wired in, `send` is a silent no-op (legacy stub behaviour for\n * tests that never exchange frames). A paired loopback coordinator supplies a\n * `peer` sink so a real Noise XX handshake can run in-process (see the\n * `testLoopback` fixture).\n */\n\nimport { TransportError } from \"../core/errors.js\";\nimport { createStateController } from \"./stateController.js\";\nimport type { Transport, Unsubscribe } from \"./types.js\";\n\n/** Options for {@link inMemoryTransport}. Test-only paired-loopback wiring. */\nexport interface InMemoryTransportOptions {\n  /**\n   * Sink for frames written via `send()`. A paired in-process coordinator sets\n   * this so the client's raw bytes reach the responder. When omitted, `send`\n   * is a no-op so legacy stub-only tests keep working.\n   */\n  readonly peer?: (frame: Uint8Array) => void;\n}\n\n/** In-memory transport with a hook to feed inbound frames into `onMessage`. */\nexport interface InMemoryTransportHandle extends Transport {\n  /** Deliver a frame to this transport's `onMessage` listeners (peer -> client). */\n  readonly deliver: (frame: Uint8Array) => void;\n}\n\nexport function inMemoryTransport(options: InMemoryTransportOptions = {}): InMemoryTransportHandle {\n  const sc = createStateController(\"idle\");\n  const messageListeners = new Set<(frame: Uint8Array) => void>();\n\n  return {\n    state: () => sc.get(),\n    onStateChange: (listener) => sc.onChange(listener),\n    onMessage(listener): Unsubscribe {\n      messageListeners.add(listener);\n      return () => messageListeners.delete(listener);\n    },\n    deliver(frame: Uint8Array): void {\n      for (const listener of messageListeners) listener(frame);\n    },\n    async connect(signal) {\n      if (signal?.aborted) {\n        throw new TransportError(\"CONNECTION_LOST\", \"connect aborted before it started\");\n      }\n      if (sc.get() === \"open\") return;\n      sc.set(\"connecting\");\n      sc.set(\"open\");\n    },\n    send(frame: Uint8Array): void {\n      if (sc.get() !== \"open\") {\n        throw new TransportError(\"CONNECTION_LOST\", \"cannot send on a non-open transport\");\n      }\n      options.peer?.(frame);\n    },\n    close() {\n      if (sc.get() === \"closed\") return;\n      sc.set(\"closing\");\n      sc.set(\"closed\");\n    },\n  };\n}\n","/**\n * `attestation` - read controls and verification triggers (spec section 4.1).\n *\n * Grouped as a small object of free functions over the opaque `Session`. The\n * read accessors (`current`, `policy`) report the last verified result and the\n * active pin; `assertValid` re-runs attestation over the live channel and\n * `onPolicyViolation` subscribes to out-of-band re-attestation failures.\n */\n\nimport type { Session } from \"../core/session.js\";\nimport type { Unsubscribe } from \"../transport/types.js\";\nimport type { AttestationResult } from \"../transport/handshake.js\";\nimport type { CoordinatorReleasePin } from \"../schemas/types.generated.js\";\nimport { failSessionClosed, getSessionState } from \"../session/state.js\";\nimport { reattestSerialized } from \"./reattest.js\";\n\nexport const attestation = {\n  /**\n   * Force-verify the current session against the active policy by re-running\n   * attestation over the live channel. Updates the stored result on success.\n   *\n   * @throws AttestationError if verification fails.\n   * @throws TransportError if the session has no live attested channel.\n   */\n  async assertValid(session: Session): Promise<AttestationResult> {\n    const state = getSessionState(session);\n    const endpoint = state.pool.endpoints[0]!;\n    try {\n      const result = await reattestSerialized(state, endpoint, state.pool.noiseTransportTimeoutMs);\n      state.attestation = result;\n      state.attested = true;\n      return result;\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      failSessionClosed(state, error);\n      throw error;\n    }\n  },\n\n  /** The last verified attestation result, or `null` before first attestation. */\n  current(session: Session): AttestationResult | null {\n    return getSessionState(session).attestation;\n  },\n\n  /** The release pin the active leader endpoint is verified against. Read-only. */\n  policy(session: Session): CoordinatorReleasePin {\n    return getSessionState(session).pool.endpoints[0]!.releasePin;\n  },\n\n  /**\n   * Subscribe to out-of-band attestation failures (e.g. during periodic\n   * re-attestation). The handler fires with the verification error; returns an\n   * unsubscribe function.\n   */\n  onPolicyViolation(session: Session, handler: (error: Error) => void): Unsubscribe {\n    const handlers = getSessionState(session).policyViolationHandlers;\n    handlers.add(handler);\n    return () => handlers.delete(handler);\n  },\n};\n","/**\n * `coordinator` - endpoint pool inspection and failover (spec section 4.2).\n *\n * `endpoints` is a read accessor that works today. Leader discovery, version\n * reporting, and failover depend on the coordinator network surface and are\n * deferred (marked 🟡 V0-target in the spec).\n */\n\nimport { NotImplementedError } from \"../core/errors.js\";\nimport type { Session } from \"../core/session.js\";\nimport type { CoordinatorEndpoint } from \"../schemas/types.generated.js\";\nimport { getSessionState } from \"../session/state.js\";\n\n/** Coordinator-reported version and role snapshot. */\nexport interface CoordinatorVersion {\n  readonly mode: \"prod\" | \"dev\";\n  readonly protocolVersion: string;\n  readonly schemaVersion: string;\n  readonly hostname: string;\n  readonly leaderEpoch: number;\n}\n\nexport const coordinator = {\n  /** All configured endpoints, in the order supplied. Read-only. */\n  endpoints(session: Session): readonly CoordinatorEndpoint[] {\n    return getSessionState(session).pool.endpoints;\n  },\n\n  /**\n   * The endpoint currently accepting mutating commands.\n   *\n   * @throws NotImplementedError - deferred (coordinator-pending).\n   */\n  currentLeader(_session: Session): Promise<CoordinatorEndpoint | null> {\n    return Promise.reject(new NotImplementedError(\"coordinator.currentLeader\"));\n  },\n\n  /**\n   * The coordinator-reported version snapshot.\n   *\n   * @throws NotImplementedError - deferred (coordinator-pending).\n   */\n  version(_session: Session): Promise<CoordinatorVersion> {\n    return Promise.reject(new NotImplementedError(\"coordinator.version\"));\n  },\n\n  /**\n   * Tear down the active session and reconnect through the next healthy\n   * endpoint, forcing a fresh attestation.\n   *\n   * @throws NotImplementedError - deferred (coordinator-pending).\n   */\n  forceFailover(_session: Session): Promise<void> {\n    return Promise.reject(new NotImplementedError(\"coordinator.forceFailover\"));\n  },\n};\n"]}
+{"version":3,"sources":["../src/core/version.ts","../src/core/session.ts","../src/transport/inMemoryTransport.ts","../src/presets/productionBinaryHash.ts","../src/presets/productionMrtd.ts","../src/session/publicReleasePolicy.ts","../src/session/publicSession.ts","../src/attestation/public.ts","../src/coordinator/public.ts"],"names":[],"mappings":";;;;;;;;;;;AAIO,IAAM,UAAA,GAAa;;;AC2BnB,SAAS,WAAW,OAAA,EAA2B;AACpD,EAAA,OAAO,OAAA,CAAQ,QAAA;AACjB;;;ACEO,SAAS,iBAAA,CAAkB,OAAA,GAAoC,EAAC,EAA4B;AACjG,EAAA,MAAM,EAAA,GAAK,sBAAsB,MAAM,CAAA;AACvC,EAAA,MAAM,gBAAA,uBAAuB,GAAA,EAAiC;AAE9D,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,MAAM,EAAA,CAAG,GAAA,EAAI;AAAA,IACpB,aAAA,EAAe,CAAC,QAAA,KAAa,EAAA,CAAG,SAAS,QAAQ,CAAA;AAAA,IACjD,UAAU,QAAA,EAAuB;AAC/B,MAAA,gBAAA,CAAiB,IAAI,QAAQ,CAAA;AAC7B,MAAA,OAAO,MAAM,gBAAA,CAAiB,MAAA,CAAO,QAAQ,CAAA;AAAA,IAC/C,CAAA;AAAA,IACA,QAAQ,KAAA,EAAyB;AAC/B,MAAA,KAAA,MAAW,QAAA,IAAY,gBAAA,EAAkB,QAAA,CAAS,KAAK,CAAA;AAAA,IACzD,CAAA;AAAA,IACA,MAAM,QAAQ,MAAA,EAAQ;AACpB,MAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,QAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,mCAAmC,CAAA;AAAA,MACjF;AACA,MAAA,IAAI,EAAA,CAAG,GAAA,EAAI,KAAM,MAAA,EAAQ;AACzB,MAAA,EAAA,CAAG,IAAI,YAAY,CAAA;AACnB,MAAA,EAAA,CAAG,IAAI,MAAM,CAAA;AAAA,IACf,CAAA;AAAA,IACA,KAAK,KAAA,EAAyB;AAC5B,MAAA,IAAI,EAAA,CAAG,GAAA,EAAI,KAAM,MAAA,EAAQ;AACvB,QAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,qCAAqC,CAAA;AAAA,MACnF;AACA,MAAA,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,IACtB,CAAA;AAAA,IACA,KAAA,GAAQ;AACN,MAAA,IAAI,EAAA,CAAG,GAAA,EAAI,KAAM,QAAA,EAAU;AAC3B,MAAA,EAAA,CAAG,IAAI,SAAS,CAAA;AAChB,MAAA,EAAA,CAAG,IAAI,QAAQ,CAAA;AAAA,IACjB;AAAA,GACF;AACF;;;ACjEO,IAAM,2CAAA,GAEP,kEAAA,CAAyC,WAAA,EAAY,CACrD;;;ACHC,IAAM,oCAAA,GAEP,kGAAA,CAAkC,WAAA,EAAY,CAC9C;;;ACIC,SAAS,6BAAA,GAA+D;AAC7E,EAAA,OAAO;AAAA,IACL,YAAA,EAAc,oCAAA;AAAA,IACd,kBAAA,EAAoB,2CAAA;AAAA,IACpB,sBAAA,EAAwB;AAAA,GAC1B;AACF;;;ACPA,IAAM,6CAA6B,IAAI,GAAA,CAAI,CAAC,gBAAA,EAAkB,SAAA,EAAW,QAAQ,CAAC,CAAA;AAClF,IAAM,+BAAA,GAAkC,MAAA;AACxC,IAAM,4BAAA,GACJ,wEAAA;AAcF,eAAsB,cAAc,OAAA,EAAuD;AACzF,EAAA,mBAAA,CAAoB,OAAO,CAAA;AAC3B,EAAA,MAAM,SAAA,GAAY,yBAAA,CAA0B,OAAA,CAAQ,cAAc,CAAA;AAClE,EAAA,MAAM,gBAAgB,6BAAA,EAA8B;AACpD,EAAA,MAAM,WAAW,6BAAA,CAA8B;AAAA,IAC7C,OAAO,OAAA,CAAQ,cAAA;AAAA,IACf,kBAAkB,SAAA,CAAU,QAAA;AAAA,IAC5B,oBAAoB,aAAA,CAAc,kBAAA;AAAA,IAClC,cAAc,aAAA,CAAc;AAAA,GAC7B,CAAA;AAED,EAAA,MAAM,eAAA,GAAgD;AAAA,IACpD,WAAA,EAAa,EAAE,SAAA,EAAW,CAAC,QAAQ,CAAA,EAAE;AAAA,IACrC,GAAI,QAAQ,OAAA,KAAY,MAAA,GAAY,EAAC,GAAI,EAAE,OAAA,EAAS,OAAA,CAAQ,OAAA,EAAQ;AAAA,IACpE,GAAI,QAAQ,MAAA,KAAW,MAAA,GAAY,EAAC,GAAI,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA;AAAO,GACnE;AACA,EAAA,OAAO,sBAAsB,eAAe,CAAA;AAC9C;AAIA,SAAS,oBAAoB,OAAA,EAAiE;AAC5F,EAAA,IAAI,OAAO,YAAY,QAAA,IAAY,OAAA,KAAY,QAAQ,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC7E,IAAA,MAAM,IAAI,UAAU,oDAAoD,CAAA;AAAA,EAC1E;AACA,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,IAAA,IAAI,CAAC,0BAAA,CAA2B,GAAA,CAAI,GAAG,CAAA,EAAG;AACxC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gDAAA,EAAmD,GAAG,CAAA,CAAE,CAAA;AAAA,IAC1E;AAAA,EACF;AACA,EAAA,MAAM,iBAAkB,OAAA,CAAyC,cAAA;AACjE,EAAA,IAAI,OAAO,mBAAmB,QAAA,EAAU;AACtC,IAAA,MAAM,IAAI,UAAU,kDAAkD,CAAA;AAAA,EACxE;AACF;AAEA,SAAS,0BAA0B,KAAA,EAAoB;AACrD,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,KAAK,CAAA;AAAA,EACxB,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,4BAA4B,CAAA;AACpD,IAAC,MAA8B,KAAA,GAAQ,KAAA;AACvC,IAAA,MAAM,KAAA;AAAA,EACR;AACA,EAAA,IAAI,MAAA,CAAO,QAAA,KAAa,+BAAA,IAAmC,aAAA,CAAc,KAAK,CAAA,EAAG;AAC/E,IAAA,MAAM,IAAI,MAAM,4BAA4B,CAAA;AAAA,EAC9C;AACA,EAAA,OAAO,MAAA;AACT;;;ACnDO,IAAM,WAAA,GAAc;AAAA,EACzB,gBAAA,GAAkD;AAChD,IAAA,OAAO,6BAAA,EAA8B;AAAA,EACvC,CAAA;AAAA,EAEA,MAAM,YAAY,OAAA,EAA8C;AAC9D,IAAA,MAAM,KAAA,GAAQ,gBAAgB,OAAO,CAAA;AACrC,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,SAAA,CAAU,CAAC,CAAA;AACvC,IAAA,IAAI;AACF,MAAA,MAAM,SAAS,MAAM,kBAAA,CAAmB,OAAO,QAAA,EAAU,KAAA,CAAM,KAAK,uBAAuB,CAAA;AAC3F,MAAA,KAAA,CAAM,WAAA,GAAc,MAAA;AACpB,MAAA,KAAA,CAAM,QAAA,GAAW,IAAA;AACjB,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,KAAA,GAAQ,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAChE,MAAA,iBAAA,CAAkB,OAAO,KAAK,CAAA;AAC9B,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF,CAAA;AAAA,EAEA,QAAQ,OAAA,EAA4C;AAClD,IAAA,OAAO,eAAA,CAAgB,OAAO,CAAA,CAAE,WAAA;AAAA,EAClC,CAAA;AAAA,EAEA,OAAO,OAAA,EAA2C;AAChD,IAAA,MAAM,MAAM,eAAA,CAAgB,OAAO,EAAE,IAAA,CAAK,SAAA,CAAU,CAAC,CAAA,CAAG,UAAA;AACxD,IAAA,OAAO;AAAA,MACL,cAAc,GAAA,CAAI,IAAA;AAAA,MAClB,GAAI,IAAI,UAAA,KAAe,MAAA,GAAY,EAAC,GAAI,EAAE,kBAAA,EAAoB,GAAA,CAAI,UAAA,EAAW;AAAA,MAC7E,GAAI,IAAI,cAAA,KAAmB,MAAA,GAAY,EAAC,GAAI,EAAE,sBAAA,EAAwB,GAAA,CAAI,cAAA,EAAe;AAAA,MACzF,GAAI,IAAI,oBAAA,KAAyB,MAAA,GAC7B,EAAC,GACD,EAAE,oBAAA,EAAsB,GAAA,CAAI,oBAAA,EAAqB;AAAA,MACrD,GAAI,GAAA,CAAI,QAAA,KAAa,MAAA,GACjB,EAAC,GACD;AAAA,QACE,QAAA,EAAU;AAAA,UACR,cAAA,EAAgB,IAAI,QAAA,CAAS,MAAA;AAAA,UAC7B,eAAA,EAAiB,IAAI,QAAA,CAAS,OAAA;AAAA,UAC9B,kBAAA,EAAoB,IAAI,QAAA,CAAS;AAAA;AACnC;AACF,KACN;AAAA,EACF,CAAA;AAAA,EAEA,iBAAA,CAAkB,SAAkB,OAAA,EAA8C;AAChF,IAAA,MAAM,QAAA,GAAW,eAAA,CAAgB,OAAO,CAAA,CAAE,uBAAA;AAC1C,IAAA,QAAA,CAAS,IAAI,OAAO,CAAA;AACpB,IAAA,OAAO,MAAM,QAAA,CAAS,MAAA,CAAO,OAAO,CAAA;AAAA,EACtC;AACF;;;ACzDO,IAAM,WAAA,GAAc;AAAA,EACzB,UAAU,OAAA,EAAwD;AAChE,IAAA,OAAO,gBAAgB,OAAO,CAAA,CAAE,KAAK,SAAA,CAAU,GAAA,CAAI,CAAC,QAAA,MAAc;AAAA,MAChE,gBAAgB,QAAA,CAAS,KAAA;AAAA,MACzB,GAAI,SAAS,QAAA,KAAa,MAAA,GAAY,EAAC,GAAI,EAAE,QAAA,EAAU,QAAA,CAAS,QAAA,EAAS;AAAA,MACzE,GAAI,SAAS,MAAA,KAAW,MAAA,GAAY,EAAC,GAAI,EAAE,MAAA,EAAQ,QAAA,CAAS,MAAA;AAAO,KACrE,CAAE,CAAA;AAAA,EACJ,CAAA;AAAA,EAEA,cAAc,QAAA,EAA8D;AAC1E,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,2BAA2B,CAAC,CAAA;AAAA,EAC5E,CAAA;AAAA,EAEA,QAAQ,QAAA,EAAgD;AACtD,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,qBAAqB,CAAC,CAAA;AAAA,EACtE,CAAA;AAAA,EAEA,cAAc,QAAA,EAAkC;AAC9C,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,2BAA2B,CAAC,CAAA;AAAA,EAC5E;AACF","file":"index.js","sourcesContent":["/**\n * The API surface version this build implements. Bumped only on a breaking\n * surface change. See docs/sdk-specification.md section 12.\n */\nexport const apiVersion = \"v0\" as const;\n\n/** Literal type of {@link apiVersion}. */\nexport type ApiVersion = typeof apiVersion;\n","/**\n * The opaque session handle.\n *\n * A `Session` is the single stateful object the functional surface threads\n * through every call: `fn(session, args)`. It owns the transport, the\n * attestation state, and (later) the leader-epoch bookkeeping. Consumers treat\n * it as opaque - they read `session.attested` and pass it back to SDK\n * functions, but never reach inside. The internal state map and constructor\n * live alongside `createSession` (added in a later ticket); this module only\n * fixes the public shape so the rest of the surface can type against it.\n */\n\ndeclare const sessionBrand: unique symbol;\n\n/**\n * Opaque, attested session handle. Obtain one from `createSession`; pass it as\n * the first argument to every actor command. The only field consumers read is\n * {@link Session.attested}.\n */\nexport interface Session {\n  /**\n   * Whether the current Noise session has passed full TDX attestation. Sensitive\n   * commands refuse to run until this is `true`. Re-handshake or failover resets\n   * it to `false` until a fresh attestation completes.\n   */\n  readonly attested: boolean;\n  /** @internal Opacity brand; not constructable by consumers. */\n  readonly [sessionBrand]: true;\n}\n\n/** Convenience predicate mirroring {@link Session.attested}. */\nexport function isAttested(session: Session): boolean {\n  return session.attested;\n}\n","/**\n * In-memory transport.\n *\n * A zero-network channel used by unit tests. It transitions straight to `open`\n * on connect. `send` delivers the raw frame bytes to an optional peer sink: the\n * WebSocket message boundary is the frame boundary, so there is no extra length\n * prefix (matching the production transport). Noise lives above this pure byte\n * channel, never inside it.\n *\n * With no peer wired in, `send` is a silent no-op (legacy stub behaviour for\n * tests that never exchange frames). A paired loopback coordinator supplies a\n * `peer` sink so a real Noise XX handshake can run in-process (see the\n * `testLoopback` fixture).\n */\n\nimport { TransportError } from \"../core/errors.js\";\nimport { createStateController } from \"./stateController.js\";\nimport type { Transport, Unsubscribe } from \"./types.js\";\n\n/** Options for {@link inMemoryTransport}. Test-only paired-loopback wiring. */\nexport interface InMemoryTransportOptions {\n  /**\n   * Sink for frames written via `send()`. A paired in-process coordinator sets\n   * this so the client's raw bytes reach the responder. When omitted, `send`\n   * is a no-op so legacy stub-only tests keep working.\n   */\n  readonly peer?: (frame: Uint8Array) => void;\n}\n\n/** In-memory transport with a hook to feed inbound frames into `onMessage`. */\nexport interface InMemoryTransportHandle extends Transport {\n  /** Deliver a frame to this transport's `onMessage` listeners (peer -> client). */\n  readonly deliver: (frame: Uint8Array) => void;\n}\n\nexport function inMemoryTransport(options: InMemoryTransportOptions = {}): InMemoryTransportHandle {\n  const sc = createStateController(\"idle\");\n  const messageListeners = new Set<(frame: Uint8Array) => void>();\n\n  return {\n    state: () => sc.get(),\n    onStateChange: (listener) => sc.onChange(listener),\n    onMessage(listener): Unsubscribe {\n      messageListeners.add(listener);\n      return () => messageListeners.delete(listener);\n    },\n    deliver(frame: Uint8Array): void {\n      for (const listener of messageListeners) listener(frame);\n    },\n    async connect(signal) {\n      if (signal?.aborted) {\n        throw new TransportError(\"CONNECTION_LOST\", \"connect aborted before it started\");\n      }\n      if (sc.get() === \"open\") return;\n      sc.set(\"connecting\");\n      sc.set(\"open\");\n    },\n    send(frame: Uint8Array): void {\n      if (sc.get() !== \"open\") {\n        throw new TransportError(\"CONNECTION_LOST\", \"cannot send on a non-open transport\");\n      }\n      options.peer?.(frame);\n    },\n    close() {\n      if (sc.get() === \"closed\") return;\n      sc.set(\"closing\");\n      sc.set(\"closed\");\n    },\n  };\n}\n","/** Build-time projection of the approved coordinator binary hash. */\n\ndeclare const __INVISIBLE_SDK_PRODUCTION_BINARY_HASH__: string | undefined;\n\nexport const APPROVED_PRODUCTION_COORDINATOR_BINARY_HASH =\n  typeof __INVISIBLE_SDK_PRODUCTION_BINARY_HASH__ === \"string\"\n    ? __INVISIBLE_SDK_PRODUCTION_BINARY_HASH__.toLowerCase()\n    : \"\";\n","/** Build-time projection of the approved production coordinator MRTD. */\n\ndeclare const __INVISIBLE_SDK_PRODUCTION_MRTD__: string | undefined;\n\nexport const APPROVED_PRODUCTION_COORDINATOR_MRTD =\n  typeof __INVISIBLE_SDK_PRODUCTION_MRTD__ === \"string\"\n    ? __INVISIBLE_SDK_PRODUCTION_MRTD__.toLowerCase()\n    : \"\";\n","import { APPROVED_PRODUCTION_COORDINATOR_BINARY_HASH } from \"../presets/productionBinaryHash.js\";\nimport { APPROVED_PRODUCTION_COORDINATOR_MRTD } from \"../presets/productionMrtd.js\";\nimport { APPROVED_PRODUCTION_RUNTIME_PROFILE } from \"../presets/productionRuntimeProfile.js\";\n\nexport interface PublicProductionReleasePolicy {\n  readonly expectedMrtd: string;\n  readonly expectedBinaryHash: string;\n  readonly expectedRuntimeProfile: \"prod-hardened\" | \"prod-devnet-simplified\";\n}\n\n/** The build-bound production tuple used by the public session constructor. */\nexport function publicProductionReleasePolicy(): PublicProductionReleasePolicy {\n  return {\n    expectedMrtd: APPROVED_PRODUCTION_COORDINATOR_MRTD,\n    expectedBinaryHash: APPROVED_PRODUCTION_COORDINATOR_BINARY_HASH,\n    expectedRuntimeProfile: APPROVED_PRODUCTION_RUNTIME_PROFILE,\n  };\n}\n","import type { Session } from \"../core/session.js\";\nimport { createAzureProductionEndpoint } from \"../presets/production.js\";\nimport { isLoopbackUrl } from \"./secureChannel.js\";\nimport { publicProductionReleasePolicy } from \"./publicReleasePolicy.js\";\nimport {\n  closeSession,\n  createSessionInternal,\n  type CreateSessionOptions as InternalCreateSessionOptions,\n} from \"./createSession.js\";\n\nconst PUBLIC_SESSION_OPTION_KEYS = new Set([\"coordinatorUrl\", \"storage\", \"wallet\"]);\nconst PUBLIC_COORDINATOR_URL_PROTOCOL = \"wss:\";\nconst PUBLIC_COORDINATOR_URL_ERROR =\n  \"public SDK createSession requires a non-loopback wss:// coordinatorUrl\";\n\nexport interface PublicCreateSessionOptions {\n  readonly coordinatorUrl: string;\n  readonly storage?: unknown;\n  readonly wallet?: unknown;\n}\n\n/**\n * Open a production-only public SDK session.\n *\n * The caller supplies only the route and public adapters. The Azure\n * production release policy is embedded by the selected SDK build.\n */\nexport async function createSession(options: PublicCreateSessionOptions): Promise<Session> {\n  assertPublicOptions(options);\n  const parsedUrl = parsePublicCoordinatorUrl(options.coordinatorUrl);\n  const releasePolicy = publicProductionReleasePolicy();\n  const endpoint = createAzureProductionEndpoint({\n    wsUrl: options.coordinatorUrl,\n    expectedHostname: parsedUrl.hostname,\n    approvedBinaryHash: releasePolicy.expectedBinaryHash,\n    approvedMrtd: releasePolicy.expectedMrtd,\n  });\n\n  const internalOptions: InternalCreateSessionOptions = {\n    coordinator: { endpoints: [endpoint] },\n    ...(options.storage === undefined ? {} : { storage: options.storage }),\n    ...(options.wallet === undefined ? {} : { wallet: options.wallet }),\n  };\n  return createSessionInternal(internalOptions);\n}\n\nexport { closeSession };\n\nfunction assertPublicOptions(options: unknown): asserts options is PublicCreateSessionOptions {\n  if (typeof options !== \"object\" || options === null || Array.isArray(options)) {\n    throw new TypeError(\"public SDK createSession options must be an object\");\n  }\n  for (const key of Object.keys(options)) {\n    if (!PUBLIC_SESSION_OPTION_KEYS.has(key)) {\n      throw new Error(`public SDK createSession does not accept option ${key}`);\n    }\n  }\n  const coordinatorUrl = (options as { coordinatorUrl?: unknown }).coordinatorUrl;\n  if (typeof coordinatorUrl !== \"string\") {\n    throw new TypeError(\"public SDK createSession requires coordinatorUrl\");\n  }\n}\n\nfunction parsePublicCoordinatorUrl(value: string): URL {\n  let parsed: URL;\n  try {\n    parsed = new URL(value);\n  } catch (cause) {\n    const error = new Error(PUBLIC_COORDINATOR_URL_ERROR);\n    (error as { cause?: unknown }).cause = cause;\n    throw error;\n  }\n  if (parsed.protocol !== PUBLIC_COORDINATOR_URL_PROTOCOL || isLoopbackUrl(value)) {\n    throw new Error(PUBLIC_COORDINATOR_URL_ERROR);\n  }\n  return parsed;\n}\n","import type { Session } from \"../core/session.js\";\nimport type { AttestationResult } from \"../transport/handshake.js\";\nimport type { Unsubscribe } from \"../transport/types.js\";\nimport { reattestSerialized } from \"./reattest.js\";\nimport { failSessionClosed, getSessionState } from \"../session/state.js\";\nimport {\n  publicProductionReleasePolicy,\n  type PublicProductionReleasePolicy,\n} from \"../session/publicReleasePolicy.js\";\n\nexport type { AttestationResult } from \"../transport/handshake.js\";\n\nexport interface PublicAttestationPolicy {\n  readonly expectedMrtd: string;\n  readonly expectedBinaryHash?: string;\n  readonly expectedRuntimeProfile?: \"prod-hardened\" | \"prod-devnet-simplified\";\n  readonly intelRootFingerprint?: string;\n  readonly azureMaa?: {\n    readonly expectedIssuer: string;\n    readonly expectedJwksUrl: string;\n    readonly expectedPolicyHash: string;\n  };\n}\n\n/** Public attestation read controls. Policy construction remains internal. */\nexport const attestation = {\n  productionPolicy(): PublicProductionReleasePolicy {\n    return publicProductionReleasePolicy();\n  },\n\n  async assertValid(session: Session): Promise<AttestationResult> {\n    const state = getSessionState(session);\n    const endpoint = state.pool.endpoints[0]!;\n    try {\n      const result = await reattestSerialized(state, endpoint, state.pool.noiseTransportTimeoutMs);\n      state.attestation = result;\n      state.attested = true;\n      return result;\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      failSessionClosed(state, error);\n      throw error;\n    }\n  },\n\n  current(session: Session): AttestationResult | null {\n    return getSessionState(session).attestation;\n  },\n\n  policy(session: Session): PublicAttestationPolicy {\n    const pin = getSessionState(session).pool.endpoints[0]!.releasePin;\n    return {\n      expectedMrtd: pin.mrtd,\n      ...(pin.binaryHash === undefined ? {} : { expectedBinaryHash: pin.binaryHash }),\n      ...(pin.runtimeProfile === undefined ? {} : { expectedRuntimeProfile: pin.runtimeProfile }),\n      ...(pin.intelRootFingerprint === undefined\n        ? {}\n        : { intelRootFingerprint: pin.intelRootFingerprint }),\n      ...(pin.azureMaa === undefined\n        ? {}\n        : {\n            azureMaa: {\n              expectedIssuer: pin.azureMaa.issuer,\n              expectedJwksUrl: pin.azureMaa.jwksUrl,\n              expectedPolicyHash: pin.azureMaa.policyHash,\n            },\n          }),\n    };\n  },\n\n  onPolicyViolation(session: Session, handler: (error: Error) => void): Unsubscribe {\n    const handlers = getSessionState(session).policyViolationHandlers;\n    handlers.add(handler);\n    return () => handlers.delete(handler);\n  },\n};\n","import { NotImplementedError } from \"../core/errors.js\";\nimport type { Session } from \"../core/session.js\";\nimport { getSessionState } from \"../session/state.js\";\n\nexport interface PublicCoordinatorEndpoint {\n  readonly coordinatorUrl: string;\n  readonly roleHint?: \"leader\" | \"watcher\";\n  readonly weight?: number;\n}\n\nexport interface CoordinatorVersion {\n  readonly mode: \"prod\" | \"dev\";\n  readonly protocolVersion: string;\n  readonly schemaVersion: string;\n  readonly hostname: string;\n  readonly leaderEpoch: number;\n}\n\nexport const coordinator = {\n  endpoints(session: Session): readonly PublicCoordinatorEndpoint[] {\n    return getSessionState(session).pool.endpoints.map((endpoint) => ({\n      coordinatorUrl: endpoint.wsUrl,\n      ...(endpoint.roleHint === undefined ? {} : { roleHint: endpoint.roleHint }),\n      ...(endpoint.weight === undefined ? {} : { weight: endpoint.weight }),\n    }));\n  },\n\n  currentLeader(_session: Session): Promise<PublicCoordinatorEndpoint | null> {\n    return Promise.reject(new NotImplementedError(\"coordinator.currentLeader\"));\n  },\n\n  version(_session: Session): Promise<CoordinatorVersion> {\n    return Promise.reject(new NotImplementedError(\"coordinator.version\"));\n  },\n\n  forceFailover(_session: Session): Promise<void> {\n    return Promise.reject(new NotImplementedError(\"coordinator.forceFailover\"));\n  },\n};\n"]}

package/dist/lp.d.ts

@@ -19,6 +19,7 @@ declare function bytesToHex(bytes: Uint8Array): string;
 declare function signLpCommandBytes(auth: LpPositionCodeAuth, bytes: Uint8Array): Promise<Uint8Array>;
 
 type SourceLiquidityUse = "not_materialized" | "available" | "locked_for_payout" | "pending_finality" | "spent" | "released";
+type LpWithdrawalMode = "exact" | "max_available";
 type LpInventoryShard = {
     kind: "lp";
     lpPositionId: string;
@@ -56,6 +57,8 @@ type LpActorSyncView = {
     lifetimeEarnedLamports: number;
     redeemablePrincipalSourceCount: number;
     redeemableFeeSourceCount: number;
+    /** Distinct physical sources contributing to the full redeemable claim. */
+    redeemableSourceCount?: number;
     pendingReservationCount: number;
     reservedPayoutLamports: number;
     estimatedNetworkFeeLamports: number;
@@ -78,6 +81,7 @@ type LpActorSyncView = {
 type LpRedemptionHistoryView = {
     redemptionId: string;
     state: "requested" | "match_requested" | "reserved" | "pending" | "confirmed" | "rejected";
+    withdrawalMode?: LpWithdrawalMode;
     acceptedLamports: number;
     acceptedDepositPrincipalLamports: number;
     acceptedEarnedFeeLamports: number;
@@ -140,6 +144,9 @@ type FinalizeLpDkgBatchInput = {
 type LpWithdrawalExecutionView = {
     withdrawalId: string;
     txSignatures: string[];
+    acceptedLamports: number;
+    acceptedDepositPrincipalLamports: number;
+    acceptedEarnedFeeLamports: number;
 };
 type LpDkgClient = {
     initDkg(input: {
@@ -148,6 +155,9 @@ type LpDkgClient = {
     }, auth: LpPositionCodeAuth): Promise<{
         sessionId: string;
     }>;
+    abortDkgSessions(lpPositionId: string, auth: LpPositionCodeAuth): Promise<{
+        abortedSessionCount: number;
+    }>;
     dkgRound1(input: {
         sessionId: string;
         package: number[];
@@ -168,7 +178,7 @@ type LpDkgClient = {
 };
 type LpCoordinatorClient = LpDkgClient & {
     openPosition(input: OpenLpPositionInput, auth: LpPositionCodeAuth): Promise<LpPositionView>;
-    getPosition(lpPositionId: string, auth: LpPositionCodeAuth): Promise<LpPositionView>;
+    getPosition(lpPositionId: string, auth: LpPositionCodeAuth, options?: LpPositionRequestOptions): Promise<LpPositionView>;
     finalizeDkgBatch(input: FinalizeLpDkgBatchInput, auth: LpPositionCodeAuth): Promise<LpPositionView>;
     refillPosition(input: RefillLpPositionInput, auth: LpPositionCodeAuth): Promise<LpPositionView>;
     reconcileFunding(lpPositionId: string, auth: LpPositionCodeAuth): Promise<LpPositionView>;
@@ -192,13 +202,20 @@ type LpCoordinatorClient = LpDkgClient & {
         destinationAddresses: string[];
         depositPrincipalLamports: number;
         earnedFeeLamports: number;
+        withdrawalMode: LpWithdrawalMode;
         requestedAtMs: number;
         allowManyToOne?: boolean;
     }, auth: LpPositionCodeAuth): Promise<LpWithdrawalExecutionView>;
 };
+interface LpPositionRequestOptions {
+    readonly deadlineMs?: number;
+    readonly signal?: AbortSignal;
+    readonly timeoutMs?: number;
+}
 
 declare const LP_REDEMPTION_RECONCILING_MESSAGE = "LP redemption is still settling on the coordinator; it will reconcile from sync";
 declare const LP_MISSING_POSITION_CODE_MESSAGE = "Save or recover the LP Position Code before using LP funds";
+declare const LP_FEE_SOURCE_COUNT_UNAVAILABLE_MESSAGE = "LP earned-fee source count is not available; pass allowManyToOne: true to acknowledge many-to-one withdrawal risk";
 type LpLifecycleDkgProgress = {
     readonly phase: "dkg";
     readonly lpPositionId: string;
@@ -248,9 +265,11 @@ interface LpTopUpRequest {
     readonly status: "watching" | "funded" | "expired";
 }
 interface WithdrawPositionArgs {
-    /** Accepted LP deposit-principal bucket claim. Computed from the position when omitted. */
+    /** Signed intent mode. The coordinator resolves max_available from sealed state. */
+    readonly withdrawalMode: LpWithdrawalMode;
+    /** Exact LP deposit-principal bucket claim. Required for exact mode. */
     readonly depositPrincipalLamports?: number;
-    /** Accepted earned-fee bucket claim. Computed from the position when omitted. */
+    /** Exact earned-fee bucket claim. Required for exact mode. */
     readonly earnedFeeLamports?: number;
     readonly destinationAddresses: string[];
     /** Required to accept a privacy-degrading single-destination withdrawal. */
@@ -265,6 +284,9 @@ interface RefillArgs {
 interface WithdrawalExecution {
     readonly withdrawalId: string;
     readonly txSignatures: string[];
+    readonly acceptedLamports?: number;
+    readonly acceptedDepositPrincipalLamports?: number;
+    readonly acceptedEarnedFeeLamports?: number;
 }
 interface LpWithdrawalRecord {
     readonly redemptionId: string;
@@ -310,19 +332,36 @@ interface WaitForWithdrawalConfirmationOptions {
     readonly onPosition?: (position: LpPositionView) => void;
     readonly onRedemptionUpdate?: (record: LpWithdrawalRecord) => void;
     readonly redemptionRecord?: LpWithdrawalRecord;
+    /** Caller-owned absolute deadline preserved across client/session retries. */
+    readonly deadlineMs?: number;
+    readonly signal?: AbortSignal;
+}
+interface RecoverPositionArgs {
+    readonly code: string;
+    readonly deadlineMs?: number;
+    readonly signal?: AbortSignal;
 }
 interface WaitForTopUpOptions {
     readonly signal?: AbortSignal;
     readonly pollIntervalMs?: number;
     readonly positionId?: string;
 }
+interface LpWithdrawalPlanPreviewArgs {
+    readonly depositPrincipalLamports?: number;
+    readonly earnedFeeLamports?: number;
+    readonly allowManyToOne?: boolean;
+}
+interface LpWithdrawalPlanPreview {
+    readonly depositPrincipalLamports: number;
+    readonly earnedFeeLamports: number;
+    readonly sourceCount: number;
+}
 declare function isLpRedemptionReconcilingError(error: unknown): boolean;
 declare function isLpPositionAuthMissingError(error: unknown): boolean;
+declare function previewLpWithdrawalPlan(position: LpPositionView, args?: LpWithdrawalPlanPreviewArgs): LpWithdrawalPlanPreview;
 interface LpLifecycleClient {
     createPosition(args?: CreatePositionArgs): Promise<CreatePositionResult>;
-    recoverPosition(args: {
-        readonly code: string;
-    }): Promise<LpPositionView>;
+    recoverPosition(args: RecoverPositionArgs): Promise<LpPositionView>;
     confirmPositionCodeSaved(positionId: string): void;
     completeDkgBatch(positionId: string, options?: CompleteDkgBatchOptions): Promise<LpPositionView>;
     refreshPosition(positionId: string): Promise<LpPositionView>;
@@ -342,6 +381,7 @@ declare function createLpLifecycleClient(session: Session, runtime?: LpLifecycle
 declare function defaultLpLifecycleClient(session: Session): LpLifecycleClient;
 
 declare const LP_COMMAND_REQUEST_TIMEOUT_MS = 120000;
+declare const LP_DKG_ABORT_REQUEST_TIMEOUT_MS = 10000;
 declare function createLpCoordinatorClient(session: Session): LpCoordinatorClient;
 
 type LpDkgProgress = {
@@ -360,12 +400,13 @@ type CreateLpDkgBatchInput = {
     useDeterministicTestAddresses?: boolean;
     onProgress?: (progress: LpDkgProgress) => void;
 };
+declare const LP_DKG_WORKER_REQUEST_TIMEOUT_MS = 30000;
+declare const LP_DKG_WORKER_REQUEST_TIMEOUT_MESSAGE = "LP DKG worker request timed out";
+declare const LP_DKG_ABORT_CLEANUP_TIMEOUT_MS = 10000;
 declare function createLpDkgBatch(input: CreateLpDkgBatchInput): Promise<string[]>;
 
 declare function createPosition(session: Session, args?: CreatePositionArgs): Promise<CreatePositionResult>;
-declare function recoverPosition(session: Session, args: {
-    readonly code: string;
-}): Promise<LpPositionView>;
+declare function recoverPosition(session: Session, args: RecoverPositionArgs): Promise<LpPositionView>;
 declare function confirmPositionCodeSaved(session: Session, positionId: string): void;
 declare function completeDkgBatch(session: Session, positionId: string, opts?: CompleteDkgBatchOptions): Promise<LpPositionView>;
 declare function refreshPosition(session: Session, positionId: string): Promise<LpPositionView>;
@@ -385,4 +426,4 @@ declare function withdrawFees(session: Session, positionId: string, args: {
 }): Promise<never>;
 declare function listPositions(session: Session): Promise<LpPositionView[]>;
 
-export { type CompleteDkgBatchOptions, type CreateLpDkgBatchInput, type CreatePositionArgs, type CreatePositionResult, type FinalizeLpDkgBatchInput, type FundingConfirmationInput, type InitialFundingPlan, LP_COMMAND_REQUEST_TIMEOUT_MS, LP_MISSING_POSITION_CODE_MESSAGE, LP_REDEMPTION_RECONCILING_MESSAGE, type LpActorSyncView, type LpCoordinatorClient, type LpDkgClient, type LpDkgProgress, type LpInventoryShard, type LpLifecycleClient, type LpLifecycleDkgProgress, type LpLifecycleRuntime, type LpPositionCode, type LpPositionCodeAuth, type LpPositionView, type LpRedemptionHistoryView, type LpTopUpRequest, type LpWithdrawalExecutionView, type LpWithdrawalRecord, type OpenLpPositionInput, type RefillArgs, type RefillLpPositionInput, type SourceLiquidityUse, type WaitForTopUpOptions, type WaitForWithdrawalConfirmationOptions, type WithdrawPositionArgs, type WithdrawPositionResult, type WithdrawalConfirmation, type WithdrawalExecution, bytesToHex, completeDkgBatch, confirmPositionCodeSaved, createLpCoordinatorClient, createLpDkgBatch, createLpLifecycleClient, createPosition, defaultLpLifecycleClient, deriveLpPositionCodeAuth, generateLpPositionCode, isLpPositionAuthMissingError, isLpRedemptionReconcilingError, listPositions, normalizeLpPositionCode, prepareInitialFunding, prepareTopUp, reconcileFunding, recoverPosition, refill, refreshPosition, signLpCommandBytes, waitForTopUp, waitForWithdrawalConfirmation, withdrawFees, withdrawPosition };
+export { type CompleteDkgBatchOptions, type CreateLpDkgBatchInput, type CreatePositionArgs, type CreatePositionResult, type FinalizeLpDkgBatchInput, type FundingConfirmationInput, type InitialFundingPlan, LP_COMMAND_REQUEST_TIMEOUT_MS, LP_DKG_ABORT_CLEANUP_TIMEOUT_MS, LP_DKG_ABORT_REQUEST_TIMEOUT_MS, LP_DKG_WORKER_REQUEST_TIMEOUT_MESSAGE, LP_DKG_WORKER_REQUEST_TIMEOUT_MS, LP_FEE_SOURCE_COUNT_UNAVAILABLE_MESSAGE, LP_MISSING_POSITION_CODE_MESSAGE, LP_REDEMPTION_RECONCILING_MESSAGE, type LpActorSyncView, type LpCoordinatorClient, type LpDkgClient, type LpDkgProgress, type LpInventoryShard, type LpLifecycleClient, type LpLifecycleDkgProgress, type LpLifecycleRuntime, type LpPositionCode, type LpPositionCodeAuth, type LpPositionRequestOptions, type LpPositionView, type LpRedemptionHistoryView, type LpTopUpRequest, type LpWithdrawalExecutionView, type LpWithdrawalMode, type LpWithdrawalPlanPreview, type LpWithdrawalPlanPreviewArgs, type LpWithdrawalRecord, type OpenLpPositionInput, type RecoverPositionArgs, type RefillArgs, type RefillLpPositionInput, type SourceLiquidityUse, type WaitForTopUpOptions, type WaitForWithdrawalConfirmationOptions, type WithdrawPositionArgs, type WithdrawPositionResult, type WithdrawalConfirmation, type WithdrawalExecution, bytesToHex, completeDkgBatch, confirmPositionCodeSaved, createLpCoordinatorClient, createLpDkgBatch, createLpLifecycleClient, createPosition, defaultLpLifecycleClient, deriveLpPositionCodeAuth, generateLpPositionCode, isLpPositionAuthMissingError, isLpRedemptionReconcilingError, listPositions, normalizeLpPositionCode, prepareInitialFunding, prepareTopUp, previewLpWithdrawalPlan, reconcileFunding, recoverPosition, refill, refreshPosition, signLpCommandBytes, waitForTopUp, waitForWithdrawalConfirmation, withdrawFees, withdrawPosition };