@seams/wallet-server 0.5.0

package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts

@@ -0,0 +1,715 @@
+import { type SdkEcdsaDerivationBindingFacts } from '../threshold/ecdsaDerivationRoleLocalBootstrap';
+import { type RuntimePolicyScope } from '../threshold/signingRootScope';
+import { type EcdsaActiveStateId, type RootShareEpoch, type ThresholdEcdsaSessionId } from './domainIds';
+import { type CorrelationId, type DigestB64u } from './canonicalPrimitives';
+import { type EcdsaServerGeneration } from './ecdsaCapabilityActivation';
+import { type RouterAbMpcMaterialActivationRefWire, type RouterAbNormalSigningAuthorizationWire } from './routerAbNormalSigningIdentity';
+import { type EvmEcdsaMpcOperationKind, type MpcWalletSigningQuotaId, type WalletSessionMintId, type EcdsaAuthorizationSessionId, type WalletSessionAuthorizationId, type WalletSessionId } from '../authorization/capabilityKinds';
+import type { ActiveWalletSessionV1, WalletSessionOperationCredentialV1 } from '../device-linking/contracts';
+import { type EmailOtpWalletAuthAuthority, type PasskeyWalletAuthAuthority } from './walletAuthAuthority';
+export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_STATE_KIND_V1: "router_ab_ecdsa_derivation_normal_signing_v1";
+export declare const ROUTER_AB_ECDSA_DERIVATION_KEY_SCOPE_V1: "evm-family";
+export declare const ROUTER_AB_ECDSA_DERIVATION_HEALTH_PATH: "/router-ab/ecdsa-derivation/healthz";
+export declare const ROUTER_AB_ECDSA_DERIVATION_BOOTSTRAP_PATH: "/router-ab/ecdsa-derivation/bootstrap";
+export declare const ROUTER_AB_ECDSA_DERIVATION_EXPORT_PATH: "/router-ab/ecdsa-derivation/export";
+export declare const ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_INIT_PATH: "/router-ab/ecdsa-derivation/presignature-pool/fill/init";
+export declare const ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_STEP_PATH: "/router-ab/ecdsa-derivation/presignature-pool/fill/step";
+export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_PREPARE_PATH: "/router-ab/ecdsa-derivation/sign/prepare";
+export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_PATH: "/router-ab/ecdsa-derivation/sign";
+export declare const ROUTER_AB_ECDSA_DERIVATION_REFRESH_PATH: "/router-ab/ecdsa-derivation/refresh";
+export declare const ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH: "/router-ab/ecdsa-derivation/session/activate";
+export declare const ROUTER_AB_ECDSA_DERIVATION_OPERATION_STEP_UP_PATH: "/router-ab/ecdsa-derivation/operation-step-up";
+export type RouterAbEcdsaDerivationStableKeyContextV1 = {
+    application_binding_digest_b64u: string;
+};
+export type RouterAbEcdsaDerivationPublicIdentityV1 = {
+    context_binding_b64u: string;
+    derivation_client_share_public_key33_b64u: string;
+    server_public_key33_b64u: string;
+    threshold_public_key33_b64u: string;
+    ethereum_address20_b64u: string;
+    client_share_retry_counter: number;
+    server_share_retry_counter: number;
+};
+export type RouterAbServerIdentityV1 = {
+    server_id: string;
+    key_epoch: string;
+    recipient_encryption_key: string;
+};
+export type RouterAbEcdsaDerivationPostRegistrationLifecycleScopeV1<WorkKind extends 'key_export' | 'recovery' | 'server_share_refresh', PrimitiveRequestKind extends 'export' | 'recovery' | 'refresh'> = {
+    lifecycle_id: string;
+    work_kind: WorkKind;
+    primitive_request_kind: PrimitiveRequestKind;
+    root_share_epoch: RootShareEpoch;
+    account_id: string;
+    session_id: ThresholdEcdsaSessionId;
+    signer_set_id: string;
+    selected_server_id: string;
+};
+export type RouterAbEcdsaDerivationExportLifecycleScopeV1 = RouterAbEcdsaDerivationPostRegistrationLifecycleScopeV1<'key_export', 'export'>;
+export type RouterAbEcdsaDerivationRefreshLifecycleScopeV1 = RouterAbEcdsaDerivationPostRegistrationLifecycleScopeV1<'server_share_refresh', 'refresh'>;
+export type RouterAbEcdsaDerivationSignerIdentityV1<Role extends 'signer_a' | 'signer_b'> = {
+    role: Role;
+    signer_id: string;
+    key_epoch: string;
+};
+export type RouterAbEcdsaDerivationSignerSetV1 = {
+    signer_set_id: string;
+    policy: 'all_2';
+    signer_a: RouterAbEcdsaDerivationSignerIdentityV1<'signer_a'>;
+    signer_b: RouterAbEcdsaDerivationSignerIdentityV1<'signer_b'>;
+    selected_server: RouterAbServerIdentityV1;
+};
+export type RouterAbEcdsaRegistrationPurposeV1 = 'wallet_registration' | 'wallet_add_signer';
+export type RouterAbEcdsaRegistrationLifecycleV1 = {
+    lifecycle_id: string;
+    work_kind: 'registration_prepare';
+    primitive_request_kind: 'registration';
+    root_share_epoch: RootShareEpoch;
+    account_id: string;
+    session_id: string;
+    signer_set_id: string;
+    selected_server_id: string;
+};
+export type RouterAbEcdsaRegistrationRecipientKeysV1 = {
+    deriver_a: {
+        role: 'signer_a';
+        key_epoch: string;
+        public_key: string;
+    };
+    deriver_b: {
+        role: 'signer_b';
+        key_epoch: string;
+        public_key: string;
+    };
+};
+export type RouterAbEcdsaRegistrationRequestFactsV1 = {
+    registration_purpose: RouterAbEcdsaRegistrationPurposeV1;
+    context: RouterAbEcdsaDerivationStableKeyContextV1;
+    lifecycle: RouterAbEcdsaRegistrationLifecycleV1;
+    signer_set: RouterAbEcdsaDerivationSignerSetV1;
+    router_id: string;
+    client_id: string;
+    replay_nonce: string;
+    expires_at_ms: number;
+    deriver_recipient_keys: RouterAbEcdsaRegistrationRecipientKeysV1;
+};
+export type RouterAbEcdsaRegistrationRequestV1 = Omit<RouterAbEcdsaRegistrationRequestFactsV1, 'deriver_recipient_keys'> & {
+    client_ephemeral_public_key: string;
+    deriver_a_envelope: RouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<'signer_a'>;
+    deriver_b_envelope: RouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<'signer_b'>;
+};
+export type RouterAbEcdsaClientProofBundleV1 = {
+    kind: 'recipient_proof_bundle';
+    transcriptDigestB64u: string;
+    payloadB64u: string;
+};
+export type RouterAbEcdsaClientProofBundlePairV1 = {
+    signerA: RouterAbEcdsaClientProofBundleV1;
+    signerB: RouterAbEcdsaClientProofBundleV1;
+};
+export type RouterAbEcdsaClientProofFinalizationV1 = {
+    kind: 'finalize_encrypted_client_proof_bundles_v1';
+    bundles: RouterAbEcdsaClientProofBundlePairV1;
+};
+export type RouterAbEcdsaStableClientProofFinalizationV2 = {
+    kind: 'finalize_encrypted_client_proof_bundles_v2';
+    bundles: RouterAbEcdsaClientProofBundlePairV1;
+};
+export type RouterAbEcdsaRegistrationPublicIdentityV1 = {
+    relayerKeyId: string;
+    relayerPublicKey33B64u: string;
+    groupPublicKey33B64u: string;
+    ethereumAddress: `0x${string}`;
+    relayerShareRetryCounter: number;
+};
+export type RouterAbEcdsaVerifiedClientActivationFactsV1 = {
+    registrationRequestDigestB64u: string;
+    proofTranscriptDigestB64u: string;
+    contextBinding32B64u: string;
+    derivationClientSharePublicKey33B64u: string;
+    clientShareRetryCounter: number;
+    participantId: 1;
+};
+export type RouterAbEcdsaStrictForwardedRegistrationResponseV1 = {
+    result: 'forwarded';
+    response: {
+        bundles: RouterAbEcdsaClientProofBundlePairV1;
+    };
+};
+export type RouterAbEcdsaStrictForwardedProofResponseV1 = RouterAbEcdsaStrictForwardedRegistrationResponseV1;
+export type RouterAbEcdsaSigningWorkerExportShareBindingV1 = {
+    wallet_id: string;
+    key_handle: string;
+    ecdsa_threshold_key_id: string;
+    signing_root_id: string;
+    signing_root_version: string;
+    activation_epoch: RootShareEpoch;
+    signing_worker_id: string;
+    context_binding_b64u: string;
+    threshold_public_key33_b64u: string;
+    export_request_digest_b64u: string;
+    export_authorization_digest_b64u: string;
+    export_nonce: string;
+    authorization_kind: 'reusable_wallet_session' | 'verified_step_up';
+    authorization_id: string;
+    material_activation: RouterAbMpcMaterialActivationRefWire;
+    lifecycle_id: string;
+    recipient_identity: string;
+    recipient_public_key: string;
+    expires_at_ms: number;
+};
+export type RouterAbEcdsaSigningWorkerExportShareEnvelopeV1 = {
+    version: 'router-ab-ecdsa-derivation/signing-worker-export-share-envelope/v1';
+    algorithm: 'hpke_x25519_hkdf_sha256_aes256gcm_v1';
+    binding: RouterAbEcdsaSigningWorkerExportShareBindingV1;
+    ciphertext_and_tag: number[];
+};
+export type RouterAbEcdsaExplicitExportForwardedResponseV1 = {
+    result: 'forwarded';
+    response: RouterAbEcdsaStrictForwardedRegistrationResponseV1['response'];
+    signing_worker_export: RouterAbEcdsaSigningWorkerExportShareEnvelopeV1;
+};
+export type RouterAbEcdsaDerivationActivationRefreshForwardedResponseV1 = {
+    result: 'forwarded';
+    response: RouterAbEcdsaStrictForwardedProofResponseV1['response'];
+    signing_worker_activation: RouterAbEcdsaRegistrationActivationReceiptV1;
+};
+export type RouterAbEcdsaRegistrationActivationRequestV1 = {
+    registrationCeremonyId: string;
+    ecdsa: {
+        kind: 'router_ab_ecdsa_registration_activation_v1';
+        activationCorrelationId: CorrelationId;
+        publicFacts: RouterAbEcdsaVerifiedClientActivationFactsV1;
+    };
+};
+export type RouterAbEcdsaRegistrationActivationReceiptV1 = {
+    activation_correlation_id: CorrelationId;
+    activation_request_digest: RouterAbPublicDigest32V1Wire;
+    server_generation: EcdsaServerGeneration;
+    ecdsa_activation: {
+        context: RouterAbEcdsaDerivationStableKeyContextV1;
+        public_identity: RouterAbEcdsaDerivationPublicIdentityV1;
+        signing_worker: RouterAbServerIdentityV1;
+        material_activation: RouterAbMpcMaterialActivationRefWire;
+        activation_epoch: RootShareEpoch;
+        activation_digest_b64u: string;
+        activated_at_ms: number;
+    };
+    lifecycle_id: string;
+    transcript_digest: RouterAbPublicDigest32V1Wire;
+};
+export type RouterAbEcdsaDerivationActivationPrepareResultV1 = {
+    activation_correlation_id: CorrelationId;
+    activation_request_digest: RouterAbPublicDigest32V1Wire;
+};
+export type RouterAbEcdsaDerivationActivationCommitQueryResultV1 = {
+    kind: 'committed';
+    receipt: RouterAbEcdsaRegistrationActivationReceiptV1;
+    activation_correlation_id?: never;
+    activation_request_digest?: never;
+} | {
+    kind: 'not_committed';
+    activation_correlation_id: CorrelationId;
+    activation_request_digest: RouterAbPublicDigest32V1Wire;
+    receipt?: never;
+} | {
+    kind: 'correlation_conflict';
+    activation_correlation_id: CorrelationId;
+    activation_request_digest: RouterAbPublicDigest32V1Wire;
+    receipt?: never;
+};
+export type RouterAbEcdsaRegistrationPublicActivationReceiptV1 = RouterAbEcdsaRegistrationActivationReceiptV1;
+export type RouterAbEcdsaDerivationPublicCapabilityV1 = {
+    kind: 'router_ab_ecdsa_derivation_public_capability_v1';
+    context: RouterAbEcdsaDerivationStableKeyContextV1;
+    public_identity: RouterAbEcdsaDerivationPublicIdentityV1;
+    material_activation: RouterAbMpcMaterialActivationRefWire;
+    signer_set: RouterAbEcdsaDerivationSignerSetV1;
+    deriver_recipient_keys: RouterAbEcdsaRegistrationRecipientKeysV1;
+    router_id: string;
+    client_id: string;
+    activation_epoch: RootShareEpoch;
+    registration_request_digest_b64u: string;
+    proof_transcript_digest_b64u: string;
+};
+export type RouterAbEcdsaPostRegistrationSessionPolicyV1 = {
+    threshold_session_id: ThresholdEcdsaSessionId;
+    wallet_session_mint_id: WalletSessionMintId;
+    ttl_ms: number;
+    remaining_uses: number;
+    runtime_policy_scope: RuntimePolicyScope;
+};
+/**
+ * Unlock callers select a persisted key by its exact handle and provide only
+ * the session budget. The authenticated router resolves the public capability
+ * before constructing the canonical activation request.
+ */
+export type RouterAbEcdsaPostRegistrationSessionActivationPolicyV1 = {
+    kind: 'router_ab_ecdsa_post_registration_session_activation_policy_v1';
+    key_handle: string;
+    session_policy: RouterAbEcdsaPostRegistrationSessionPolicyV1;
+};
+export type RouterAbEcdsaPostRegistrationSessionActivationRequestV1 = {
+    kind: 'router_ab_ecdsa_post_registration_session_activation_v1';
+    public_capability: RouterAbEcdsaDerivationPublicCapabilityV1;
+    session_policy: RouterAbEcdsaPostRegistrationSessionPolicyV1;
+};
+export type RouterAbEcdsaPostRegistrationSessionActivationResponseV1 = {
+    kind: 'router_ab_ecdsa_post_registration_session_activated_v1';
+    public_capability: RouterAbEcdsaDerivationPublicCapabilityV1;
+    session: {
+        authorization_session_id: EcdsaAuthorizationSessionId;
+        authorization_id: WalletSessionAuthorizationId;
+        threshold_session_id: ThresholdEcdsaSessionId;
+        wallet_session_id: WalletSessionId;
+        quota_id: MpcWalletSigningQuotaId;
+        expires_at_ms: number;
+        remaining_uses: number;
+        wallet_session: ActiveWalletSessionV1;
+        operation_credential: WalletSessionOperationCredentialV1;
+    };
+    normal_signing: RouterAbEcdsaDerivationNormalSigningStateV1;
+};
+export type RouterAbEcdsaCredentialFreeSessionActivationResponseV1 = {
+    kind: 'router_ab_ecdsa_credential_free_session_activated_v1';
+    public_capability: RouterAbEcdsaDerivationPublicCapabilityV1;
+    session: {
+        authorization_session_id: EcdsaAuthorizationSessionId;
+        authorization_id: WalletSessionAuthorizationId;
+        threshold_session_id: ThresholdEcdsaSessionId;
+        wallet_session_id: WalletSessionId;
+        quota_id: MpcWalletSigningQuotaId;
+        expires_at_ms: number;
+        remaining_uses: number;
+    };
+    normal_signing: RouterAbEcdsaDerivationNormalSigningStateV1;
+};
+export type RouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<Role extends 'signer_a' | 'signer_b'> = {
+    recipient_role: Role;
+    header_digest: RouterAbPublicDigest32V1Wire;
+    aad_digest: RouterAbPublicDigest32V1Wire;
+    ciphertext: {
+        bytes: number[];
+    };
+};
+export type RouterAbEcdsaDerivationExplicitExportRequestBaseV1 = {
+    context: RouterAbEcdsaDerivationStableKeyContextV1;
+    lifecycle: RouterAbEcdsaDerivationExportLifecycleScopeV1;
+    public_identity: RouterAbEcdsaDerivationPublicIdentityV1;
+    signer_set: RouterAbEcdsaDerivationSignerSetV1;
+    router_id: string;
+    client_id: string;
+    client_ephemeral_public_key: string;
+    material_activation: RouterAbMpcMaterialActivationRefWire;
+    export_authorization_digest_b64u: string;
+    export_nonce: string;
+    expires_at_ms: number;
+    deriver_a_export_envelope: RouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<'signer_a'>;
+    deriver_b_export_envelope: RouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<'signer_b'>;
+};
+/**
+ * Exact explicit-export request carried by the Rust Router A/B protocol.
+ * Operation preparation is a Gateway authorization input and never crosses
+ * into the protocol request or its canonical digest.
+ */
+export type RouterAbEcdsaDerivationExplicitExportProtocolRequestV1 = RouterAbEcdsaDerivationExplicitExportRequestBaseV1 & {
+    authorization: RouterAbNormalSigningAuthorizationWire;
+};
+export type RouterAbEcdsaDerivationExplicitExportRequestV1 = (RouterAbEcdsaDerivationExplicitExportRequestBaseV1 & {
+    authorization: Extract<RouterAbNormalSigningAuthorizationWire, {
+        readonly kind: 'reusable_wallet_session';
+    }>;
+    operation?: never;
+}) | (RouterAbEcdsaDerivationExplicitExportRequestBaseV1 & {
+    authorization: Extract<RouterAbNormalSigningAuthorizationWire, {
+        readonly kind: 'operation_step_up';
+    }>;
+    operation: RouterAbEcdsaOperationStepUpPreparationV1Wire;
+});
+export declare function projectRouterAbEcdsaDerivationExplicitExportRequestToProtocolV1(request: RouterAbEcdsaDerivationExplicitExportRequestV1): RouterAbEcdsaDerivationExplicitExportProtocolRequestV1;
+export type RouterAbEcdsaDerivationActivationRefreshRequestV1 = {
+    context: RouterAbEcdsaDerivationStableKeyContextV1;
+    lifecycle: RouterAbEcdsaDerivationRefreshLifecycleScopeV1;
+    public_identity: RouterAbEcdsaDerivationPublicIdentityV1;
+    signer_set: RouterAbEcdsaDerivationSignerSetV1;
+    router_id: string;
+    client_id: string;
+    signing_worker_ephemeral_public_key: string;
+    refresh_authorization_digest_b64u: string;
+    refresh_nonce: string;
+    previous_activation_epoch: RootShareEpoch;
+    next_activation_epoch: RootShareEpoch;
+    material_activation: RouterAbMpcMaterialActivationRefWire;
+    expires_at_ms: number;
+    deriver_a_refresh_envelope: RouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<'signer_a'>;
+    deriver_b_refresh_envelope: RouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<'signer_b'>;
+};
+export type RouterAbEcdsaDerivationActivationRefreshCommitRequestV1 = {
+    activation_correlation_id: CorrelationId;
+    expected_server_generation: EcdsaServerGeneration;
+    refresh_request: RouterAbEcdsaDerivationActivationRefreshRequestV1;
+};
+export type RouterAbEcdsaDerivationActivationRefreshActivationCommittedResponseV1 = {
+    result: 'activation_committed';
+    signing_worker_activation: RouterAbEcdsaRegistrationActivationReceiptV1;
+    response?: never;
+    replay?: never;
+    lifecycle?: never;
+    decision?: never;
+};
+export type RouterAbEcdsaDerivationActivationRefreshStoppedResponseV1 = {
+    result: 'stopped';
+    replay: {
+        request_id: string;
+        reserved: boolean;
+    };
+    lifecycle: {
+        lifecycle_id: string;
+        stored: boolean;
+    };
+    decision: {
+        kind: 'accepted';
+        request_id: string;
+        existing_lifecycle_id?: never;
+        reason?: never;
+        retry_after_ms?: never;
+    } | {
+        kind: 'reuse_existing';
+        request_id: string;
+        existing_lifecycle_id: string;
+        reason?: never;
+        retry_after_ms?: never;
+    } | {
+        kind: 'defer';
+        reason: 'short_window_saturated' | 'signer_queue_saturated';
+        request_id?: never;
+        existing_lifecycle_id?: never;
+        retry_after_ms?: never;
+    } | {
+        kind: 'rejected';
+        reason: 'rate_limited' | 'abuse_policy';
+        retry_after_ms: number;
+        request_id?: never;
+        existing_lifecycle_id?: never;
+    };
+    response?: never;
+    signing_worker_activation?: never;
+};
+export type RouterAbEcdsaDerivationActivationRefreshResponseV1 = RouterAbEcdsaDerivationActivationRefreshForwardedResponseV1 | RouterAbEcdsaDerivationActivationRefreshActivationCommittedResponseV1 | RouterAbEcdsaDerivationActivationRefreshStoppedResponseV1;
+export type RouterAbPublicDigest32V1Wire = {
+    bytes: number[];
+};
+export type RouterAbActiveSigningWorkerStateV1 = {
+    account_id: string;
+    material_activation: RouterAbMpcMaterialActivationRefWire;
+    account_public_key: string;
+    signing_worker: RouterAbServerIdentityV1;
+    activation_transcript_digest: RouterAbPublicDigest32V1Wire;
+    activation_digest: RouterAbPublicDigest32V1Wire;
+    signing_worker_material_handle: string;
+    activated_at_ms: number;
+};
+export type RouterAbEcdsaDerivationNormalSigningScopeV1 = {
+    wallet_id: string;
+    ecdsa_threshold_key_id: string;
+    signing_root_id: string;
+    signing_root_version: string;
+    context: RouterAbEcdsaDerivationStableKeyContextV1;
+    public_identity: RouterAbEcdsaDerivationPublicIdentityV1;
+    material_activation: RouterAbMpcMaterialActivationRefWire;
+    signing_worker: RouterAbServerIdentityV1;
+    activation_epoch: RootShareEpoch;
+};
+export type RouterAbEcdsaDerivationNormalSigningStateV1 = {
+    kind: typeof ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_STATE_KIND_V1;
+    scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
+};
+export type RouterAbEcdsaDerivationServerPresignatureShareV1 = {
+    serverKeyId: string;
+    presignatureId: string;
+    bigRB64u: string;
+    kShareB64u: string;
+    sigmaShareB64u: string;
+    createdAtMs: number;
+};
+export type CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1Wire = {
+    scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
+    server_presignature_id: string;
+    server_big_r33_b64u: string;
+    server_k_share32_b64u: string;
+    server_sigma_share32_b64u: string;
+    expires_at_ms: number;
+};
+export type CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutReceiptV1Wire = {
+    active_signing_worker_state: RouterAbActiveSigningWorkerStateV1;
+    server_presignature_id: string;
+    server_big_r33_b64u: string;
+    stored: boolean;
+};
+export type RouterAbEcdsaDerivationSignatureSchemeV1Wire = 'ecdsa_secp256k1_recoverable_v1';
+export type RouterAbEcdsaDerivationOperationDigestsV1Wire = {
+    lane_digest_b64u: string;
+    intent_digest_b64u: string;
+    display_digest_b64u: string;
+};
+type RouterAbEcdsaDerivationEvmDigestSigningRequestBaseV1Wire = {
+    scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
+    request_id: string;
+    operation_id: string;
+    operation_digests: RouterAbEcdsaDerivationOperationDigestsV1Wire;
+    material_activation: RouterAbMpcMaterialActivationRefWire;
+    client_presignature_id: string;
+    expires_at_ms: number;
+    signing_digest_b64u: string;
+    client_rerandomization_commitment32_b64u: string;
+};
+export type RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire = RouterAbEcdsaDerivationEvmDigestSigningRequestBaseV1Wire & {
+    authorization: RouterAbNormalSigningAuthorizationWire;
+};
+export type RouterAbEcdsaOperationStepUpWebAuthnCredentialV1Wire = {
+    readonly id: string;
+    readonly rawId: string;
+    readonly type: string;
+    readonly authenticatorAttachment: string | null;
+    readonly response: {
+        readonly clientDataJSON: string;
+        readonly authenticatorData: string;
+        readonly signature: string;
+        readonly userHandle: string | null;
+    };
+    readonly clientExtensionResults: unknown | null;
+};
+export type RouterAbEcdsaOperationStepUpPreparationV1Wire = {
+    readonly wallet_id: string;
+    readonly operation_kind: EvmEcdsaMpcOperationKind;
+    readonly operation_id: string;
+    readonly operation_digests: RouterAbEcdsaDerivationOperationDigestsV1Wire;
+    readonly material_activation: RouterAbMpcMaterialActivationRefWire;
+    readonly normal_signing_scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
+    readonly signing_worker_id: string;
+    readonly key_handle: string;
+    readonly relayer_key_id: string;
+    readonly participant_ids: readonly [number, number];
+    readonly expires_at_ms: number;
+};
+export type RouterAbOwnerOperationAuthorizationDecisionV1Wire = {
+    readonly kind: 'authorized';
+    readonly operation: {
+        readonly kind: 'authorized_operation';
+        readonly operation_id: string;
+        readonly authorized_operation_id: string;
+        readonly operation_fingerprint_digest: string;
+    };
+    readonly source: {
+        readonly kind: 'reusable_wallet_session';
+        readonly wallet_session_id: string;
+        readonly quota_id: string;
+    };
+} | {
+    readonly kind: 'step_up_required';
+    readonly reason: 'wallet_session_missing' | 'wallet_session_expired' | 'wallet_session_exhausted' | 'wallet_session_ended' | 'wallet_session_superseded';
+    readonly step_up: RouterAbEcdsaOperationStepUpPreparationV1Wire;
+} | {
+    readonly kind: 'denied';
+    readonly denial: {
+        readonly code: 'invalid_identity' | 'invalid_authority' | 'invalid_operation' | 'inactive_material' | 'replayed_step_up' | 'authorization_unavailable';
+        readonly message: string;
+    };
+};
+export type RouterAbEcdsaOperationStepUpProofV1Wire = {
+    readonly kind: 'passkey';
+    readonly authority: PasskeyWalletAuthAuthority;
+    readonly webauthn_authentication: RouterAbEcdsaOperationStepUpWebAuthnCredentialV1Wire;
+    readonly challenge_id?: never;
+    readonly otp_code?: never;
+} | {
+    readonly kind: 'email_otp';
+    readonly authority: EmailOtpWalletAuthAuthority;
+    readonly challenge_id: string;
+    readonly otp_code: string;
+    readonly webauthn_authentication?: never;
+};
+export type RouterAbEcdsaOperationStepUpAuthorizationRequestV1Wire = {
+    readonly kind: 'router_ab_ecdsa_operation_step_up_v1';
+    readonly operation: RouterAbEcdsaOperationStepUpPreparationV1Wire;
+    readonly proof: RouterAbEcdsaOperationStepUpProofV1Wire;
+};
+export type RouterAbEcdsaOperationStepUpUnsealV1Wire = {
+    readonly kind: 'not_requested';
+} | {
+    readonly kind: 'email_otp_grant';
+    readonly grant: string;
+    readonly challenge_id: string;
+};
+export type RouterAbEcdsaOperationStepUpExportTopologyV1Wire = {
+    readonly signer_set: RouterAbEcdsaDerivationSignerSetV1;
+    readonly deriver_recipient_keys: RouterAbEcdsaRegistrationRecipientKeysV1;
+    readonly router_id: string;
+};
+export type RouterAbEcdsaOperationStepUpAuthorizationV1Wire = {
+    readonly kind: 'operation_step_up';
+    readonly evidence_set_digest: DigestB64u;
+    readonly unseal: RouterAbEcdsaOperationStepUpUnsealV1Wire;
+};
+type RouterAbEcdsaOperationStepUpAuthorizationResponseBaseV1Wire = {
+    readonly ok: true;
+    readonly kind: 'verified_step_up';
+    readonly authorization: RouterAbEcdsaOperationStepUpAuthorizationV1Wire;
+    readonly expires_at_ms: number;
+};
+export type RouterAbEcdsaOperationStepUpAuthorizationResponseV1Wire = (RouterAbEcdsaOperationStepUpAuthorizationResponseBaseV1Wire & {
+    readonly operation_kind: 'evm.sign_transaction';
+    readonly export_topology?: never;
+}) | (RouterAbEcdsaOperationStepUpAuthorizationResponseBaseV1Wire & {
+    readonly operation_kind: 'evm.export_key';
+    readonly export_topology: RouterAbEcdsaOperationStepUpExportTopologyV1Wire;
+});
+export declare function parseRouterAbEcdsaOperationStepUpAuthorizationResponseV1(value: unknown): RouterAbEcdsaOperationStepUpAuthorizationResponseV1Wire;
+export declare function computeRouterAbEcdsaOperationStepUpChallengeB64u(value: RouterAbEcdsaOperationStepUpPreparationV1Wire): Promise<string>;
+type RouterAbEcdsaDerivationEvmDigestSigningFinalizeBaseV1Wire = {
+    scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
+    request_id: string;
+    operation_id: string;
+    operation_digests: RouterAbEcdsaDerivationOperationDigestsV1Wire;
+    material_activation: RouterAbMpcMaterialActivationRefWire;
+    expires_at_ms: number;
+    signing_digest_b64u: string;
+    server_presignature_id: string;
+    client_signature_share32_b64u: string;
+    client_rerandomization_contribution32_b64u: string;
+};
+export type RouterAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestV1Wire = RouterAbEcdsaDerivationEvmDigestSigningFinalizeBaseV1Wire & {
+    authorization: RouterAbNormalSigningAuthorizationWire;
+};
+export type RouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1Wire = RouterAbEcdsaDerivationEvmDigestSigningFinalizeBaseV1Wire & {
+    authorization: RouterAbNormalSigningAuthorizationWire;
+};
+export type RouterAbEcdsaDerivationEvmDigestSigningPrepareResponseV1Wire = {
+    scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
+    request_id: string;
+    request_digest: RouterAbPublicDigest32V1Wire;
+    signing_digest: RouterAbPublicDigest32V1Wire;
+    server_presignature_id: string;
+    server_big_r33_b64u: string;
+    signing_worker_rerandomization_contribution32_b64u: string;
+    signature_scheme: RouterAbEcdsaDerivationSignatureSchemeV1Wire;
+    prepared_at_ms: number;
+    expires_at_ms: number;
+};
+export type RouterAbEcdsaDerivationEvmDigestSigningResponseV1Wire = {
+    scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
+    request_id: string;
+    request_digest: RouterAbPublicDigest32V1Wire;
+    signing_digest: RouterAbPublicDigest32V1Wire;
+    signature_scheme: RouterAbEcdsaDerivationSignatureSchemeV1Wire;
+    signature65_b64u: string;
+};
+export declare function parseRouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<Role extends 'signer_a' | 'signer_b'>(value: unknown, label: string, expectedRole: Role): RouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<Role>;
+export declare function parseRouterAbEcdsaRegistrationRequestFactsV1(value: unknown): RouterAbEcdsaRegistrationRequestFactsV1;
+export declare function parseRouterAbEcdsaRegistrationRequestV1(value: unknown): RouterAbEcdsaRegistrationRequestV1;
+export declare function parseRouterAbEcdsaStrictForwardedRegistrationResponseV1(value: unknown): RouterAbEcdsaStrictForwardedRegistrationResponseV1;
+export declare function parseRouterAbEcdsaExplicitExportForwardedResponseV1(value: unknown): RouterAbEcdsaExplicitExportForwardedResponseV1;
+export declare function parseRouterAbEcdsaExplicitExportProtocolForwardedResponseV1(value: unknown): RouterAbEcdsaExplicitExportForwardedResponseV1;
+export declare function parseRouterAbEcdsaSigningWorkerExportShareEnvelopeV1(value: unknown): RouterAbEcdsaSigningWorkerExportShareEnvelopeV1;
+export declare function parseRouterAbEcdsaSigningWorkerProtocolExportShareEnvelopeV1(value: unknown): RouterAbEcdsaSigningWorkerExportShareEnvelopeV1;
+export declare function parseRouterAbEcdsaSigningWorkerExportShareBindingV1(value: unknown): RouterAbEcdsaSigningWorkerExportShareBindingV1;
+export declare function parseRouterAbEcdsaDerivationActivationRefreshResponseV1(value: unknown): RouterAbEcdsaDerivationActivationRefreshResponseV1;
+export declare function parseRouterAbEcdsaVerifiedClientActivationFactsV1(value: unknown): RouterAbEcdsaVerifiedClientActivationFactsV1;
+export declare function parseRouterAbEcdsaRegistrationActivationRequestV1(value: unknown): RouterAbEcdsaRegistrationActivationRequestV1;
+export declare function parseRouterAbEcdsaRegistrationActivationReceiptV1(value: unknown): RouterAbEcdsaRegistrationActivationReceiptV1;
+export declare function parseRouterAbEcdsaDerivationActivationPrepareResultV1(value: unknown): RouterAbEcdsaDerivationActivationPrepareResultV1;
+export declare function parseRouterAbEcdsaDerivationActivationCommitQueryResultV1(value: unknown): RouterAbEcdsaDerivationActivationCommitQueryResultV1;
+export declare function parseRouterAbEcdsaRegistrationPublicActivationReceiptV1(value: unknown): RouterAbEcdsaRegistrationPublicActivationReceiptV1;
+export declare function sameRouterAbServerIdentityV1(left: RouterAbServerIdentityV1, right: RouterAbServerIdentityV1): boolean;
+export declare function sameRouterAbEcdsaVerifiedClientActivationFactsV1(left: RouterAbEcdsaVerifiedClientActivationFactsV1, right: RouterAbEcdsaVerifiedClientActivationFactsV1): boolean;
+export declare function sameRouterAbEcdsaRegistrationRequestFactsV1(left: RouterAbEcdsaRegistrationRequestFactsV1, right: RouterAbEcdsaRegistrationRequestFactsV1): boolean;
+export declare function assertRouterAbEcdsaRegistrationFactsMatchRequestV1(input: {
+    facts: RouterAbEcdsaRegistrationRequestFactsV1;
+    request: RouterAbEcdsaRegistrationRequestV1;
+}): void;
+export declare function parseRouterAbEcdsaDerivationPublicCapabilityV1(value: unknown): RouterAbEcdsaDerivationPublicCapabilityV1;
+export declare function parseRouterAbEcdsaPostRegistrationSessionActivationPolicyV1(value: unknown): RouterAbEcdsaPostRegistrationSessionActivationPolicyV1;
+export declare function sameRouterAbEcdsaDerivationPublicIdentityV1(left: RouterAbEcdsaDerivationPublicIdentityV1, right: RouterAbEcdsaDerivationPublicIdentityV1): boolean;
+export declare function parseRouterAbEcdsaPostRegistrationSessionActivationRequestV1(value: unknown): RouterAbEcdsaPostRegistrationSessionActivationRequestV1;
+export declare function parseRouterAbEcdsaPostRegistrationSessionActivationResponseV1(value: unknown): RouterAbEcdsaPostRegistrationSessionActivationResponseV1;
+export declare function parseRouterAbEcdsaCredentialFreeSessionActivationResponseV1(value: unknown): RouterAbEcdsaCredentialFreeSessionActivationResponseV1;
+export declare function buildRouterAbEcdsaDerivationPublicCapabilityV1(input: {
+    registrationFacts: RouterAbEcdsaRegistrationRequestFactsV1;
+    registrationRequest: RouterAbEcdsaRegistrationRequestV1;
+    clientActivation: RouterAbEcdsaVerifiedClientActivationFactsV1;
+    activationReceipt: RouterAbEcdsaRegistrationActivationReceiptV1;
+}): RouterAbEcdsaDerivationPublicCapabilityV1;
+export declare function parseRouterAbEcdsaDerivationExplicitExportRequestV1(value: unknown): RouterAbEcdsaDerivationExplicitExportRequestV1;
+export declare function parseRouterAbEcdsaDerivationExplicitExportProtocolRequestV1(value: unknown): RouterAbEcdsaDerivationExplicitExportProtocolRequestV1;
+export declare function parseRouterAbEcdsaDerivationActivationRefreshRequestV1(value: unknown): RouterAbEcdsaDerivationActivationRefreshRequestV1;
+export declare function parseRouterAbEcdsaDerivationActivationRefreshCommitRequestV1(value: unknown): RouterAbEcdsaDerivationActivationRefreshCommitRequestV1;
+export declare function sameRouterAbPublicDigest32V1Wire(left: RouterAbPublicDigest32V1Wire, right: RouterAbPublicDigest32V1Wire): boolean;
+export declare function sameRouterAbEcdsaRegistrationActivationReceiptV1(left: RouterAbEcdsaRegistrationActivationReceiptV1, right: RouterAbEcdsaRegistrationActivationReceiptV1): boolean;
+export declare function sameRouterAbEcdsaDerivationNormalSigningStateV1(left: RouterAbEcdsaDerivationNormalSigningStateV1, right: RouterAbEcdsaDerivationNormalSigningStateV1): boolean;
+export declare function sameRouterAbEcdsaDerivationPublicCapabilityV1(left: RouterAbEcdsaDerivationPublicCapabilityV1, right: RouterAbEcdsaDerivationPublicCapabilityV1): boolean;
+export declare function routerAbEcdsaRerandomizationClientCommitmentV1(contribution32: Uint8Array): Promise<Uint8Array>;
+export declare function routerAbEcdsaDerivationStableKeyContextFromSdkFactsV1(facts: SdkEcdsaDerivationBindingFacts): Promise<RouterAbEcdsaDerivationStableKeyContextV1>;
+export declare function routerAbEcdsaDerivationContextBindingDigestV1(context: RouterAbEcdsaDerivationStableKeyContextV1): Promise<RouterAbPublicDigest32V1Wire>;
+export declare function routerAbEcdsaDerivationContextBindingB64uV1(context: RouterAbEcdsaDerivationStableKeyContextV1): Promise<string>;
+export declare function routerAbEcdsaDerivationNormalSigningScopeCanonicalBytesV1(scope: RouterAbEcdsaDerivationNormalSigningScopeV1): Uint8Array;
+export declare function sameRouterAbEcdsaDerivationNormalSigningScopeV1(left: RouterAbEcdsaDerivationNormalSigningScopeV1, right: RouterAbEcdsaDerivationNormalSigningScopeV1): boolean;
+export declare function verifyRouterAbEcdsaDerivationNormalSigningScopeContextBindingV1(scope: RouterAbEcdsaDerivationNormalSigningScopeV1): Promise<RouterAbEcdsaDerivationNormalSigningScopeV1>;
+export declare function routerAbEcdsaDerivationEvmDigestSigningRequestCanonicalBytesV1(request: RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire): Uint8Array;
+export declare function routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1(request: RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire): Promise<RouterAbPublicDigest32V1Wire>;
+export declare function routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestCanonicalBytesV1(request: RouterAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestV1Wire): Uint8Array;
+export declare function routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestDigestV1(request: RouterAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestV1Wire): Promise<RouterAbPublicDigest32V1Wire>;
+export declare function parseRouterAbEcdsaDerivationNormalSigningScopeV1(value: unknown): RouterAbEcdsaDerivationNormalSigningScopeV1;
+export declare function parseRouterAbEcdsaDerivationNormalSigningStateV1(value: unknown): RouterAbEcdsaDerivationNormalSigningStateV1 | null;
+export declare function requireRouterAbEcdsaDerivationNormalSigningStateV1(value: unknown): RouterAbEcdsaDerivationNormalSigningStateV1;
+export declare function buildRouterAbEcdsaDerivationActiveStateIdV1(input: {
+    ecdsaThresholdKeyId: string;
+    signingRootId: string;
+    signingRootVersion: string;
+    activationEpoch: RootShareEpoch;
+}): EcdsaActiveStateId;
+export declare function routerAbEcdsaDerivationActiveStateId(state: RouterAbEcdsaDerivationNormalSigningStateV1): EcdsaActiveStateId;
+export declare function buildRouterAbEcdsaDerivationEvmDigestSigningRequestV1(input: {
+    scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
+    requestId: string;
+    operationId: string;
+    operationDigests: RouterAbEcdsaDerivationOperationDigestsV1Wire;
+    authorization: RouterAbNormalSigningAuthorizationWire;
+    materialActivation: RouterAbMpcMaterialActivationRefWire;
+    clientPresignatureId: string;
+    expiresAtMs: number;
+    signingDigest32: Uint8Array;
+    clientRerandomizationCommitment32: Uint8Array;
+}): RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire;
+export declare function parseRouterAbEcdsaDerivationEvmDigestSigningRequestV1(value: unknown): RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire;
+export declare function parseRouterAbEcdsaOperationStepUpAuthorizationRequestV1(value: unknown): RouterAbEcdsaOperationStepUpAuthorizationRequestV1Wire;
+export declare function parseRouterAbEcdsaOperationStepUpPreparationV1(value: unknown): RouterAbEcdsaOperationStepUpPreparationV1Wire;
+export declare function buildRouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1(input: {
+    scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
+    requestId: string;
+    operationId: string;
+    operationDigests: RouterAbEcdsaDerivationOperationDigestsV1Wire;
+    authorization: RouterAbNormalSigningAuthorizationWire;
+    materialActivation: RouterAbMpcMaterialActivationRefWire;
+    expiresAtMs: number;
+    signingDigest32: Uint8Array;
+    serverPresignatureId: string;
+    clientSignatureShare32: Uint8Array;
+    clientRerandomizationContribution32: Uint8Array;
+}): RouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1Wire;
+export declare function parseRouterAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestV1(value: unknown): RouterAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestV1Wire;
+export declare function parseRouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1(value: unknown): RouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1Wire;
+export declare function parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseV1(value: unknown): RouterAbEcdsaDerivationEvmDigestSigningPrepareResponseV1Wire;
+export declare function parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1(request: RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire, value: unknown): Promise<RouterAbEcdsaDerivationEvmDigestSigningPrepareResponseV1Wire>;
+export declare function parseRouterAbEcdsaDerivationEvmDigestSigningResponseV1(value: unknown): RouterAbEcdsaDerivationEvmDigestSigningResponseV1Wire;
+export declare function parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreRequestV1(request: RouterAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestV1Wire, value: unknown): Promise<RouterAbEcdsaDerivationEvmDigestSigningResponseV1Wire>;
+export declare function buildCloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1(input: {
+    scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
+    presignature: RouterAbEcdsaDerivationServerPresignatureShareV1;
+    expiresAtMs: number;
+}): CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1Wire;
+export declare function parseCloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1(value: unknown): CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1Wire;
+export declare function parseCloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutReceiptV1(value: unknown): CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutReceiptV1Wire;
+export declare function parseCloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutReceiptForRequestV1(request: CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1Wire, value: unknown): CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutReceiptV1Wire;
+export {};
+//# sourceMappingURL=routerAbEcdsaDerivation.d.ts.map