@seams/wallet-server 0.5.0

package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.typecheck.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=routerAbEcdsaDerivation.typecheck.d.ts.map

package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivationRefresh.typecheck.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=routerAbEcdsaDerivationRefresh.typecheck.d.ts.map

package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts

@@ -0,0 +1,339 @@
+import type { RouterAbEd25519YaoAdmittedLifecycleV1, RouterAbEd25519YaoCeremonyBindingV1 as GeneratedRouterAbEd25519YaoCeremonyBindingV1, RouterAbEd25519YaoInputPairBindingV1, RouterAbEd25519YaoOperationV1, RouterAbEd25519YaoPublicDigestV1, RouterAbEd25519YaoBytes32V1 } from './generated/routerAbEd25519YaoCore';
+import { type RouterAbMpcMaterialActivationRefWire } from './routerAbNormalSigningIdentity';
+export type { RouterAbEd25519YaoAdmittedLifecycleV1, RouterAbEd25519YaoCeremonyIdentityV1, RouterAbEd25519YaoCircuitFamilyV1, RouterAbEd25519YaoCircuitIdV1, RouterAbEd25519YaoInputPairBindingV1, RouterAbEd25519YaoOperationV1, RouterAbEd25519YaoPrimitiveRequestKindV1, RouterAbEd25519YaoProtocolIdV1, RouterAbEd25519YaoPublicDigestV1, RouterAbRequestPolicyClaimsV1, RouterAbEd25519YaoSessionIdV1, RouterAbEd25519YaoStableKeyContextBindingV1, RouterAbEd25519YaoWorkKindV1, RouterAbEd25519YaoBytes32V1, } from './generated/routerAbEd25519YaoCore';
+export type RouterAbEd25519YaoCeremonyBindingV1 = GeneratedRouterAbEd25519YaoCeremonyBindingV1 & {
+    material_activation: RouterAbMpcMaterialActivationRefWire;
+};
+export declare const ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1: "/router-ab/ed25519/yao/registration/admit";
+export declare const ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1: "/router-ab/ed25519/yao/registration/execute";
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1: "/router-ab/ed25519/yao/recovery/admit";
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1: "/router-ab/ed25519/yao/recovery/execute";
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1: "/router-ab/ed25519/yao/recovery/activate";
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_STATUS_PATH_V1: "/router-ab/ed25519/yao/recovery/status";
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1: "x-seams-wallet-recovery-challenge-id";
+export declare const ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1: "/router-ab/ed25519/yao/recovery/bootstrap";
+export declare const ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1: "router_ab_ed25519_yao_email_otp_recovery_v1";
+export declare const ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1: "/router-ab/ed25519/yao/export/admit";
+export declare const ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1: "/router-ab/ed25519/yao/export/execute";
+export declare const ED25519_YAO_CONTROL_CIPHERTEXT_MAX_BYTES_V1: number;
+export type RouterAbEd25519YaoDeriverRoleV1 = 'deriver_a' | 'deriver_b';
+export type RouterAbEd25519YaoInputKindV1 = 'activation' | 'export';
+export type RouterAbEd25519YaoPackageKindV1 = 'activation_client' | 'activation_signing_worker' | 'export_client';
+export type RouterAbEd25519YaoApplicationBindingFactsV1 = {
+    wallet_id: string;
+    near_ed25519_signing_key_id: string;
+    signing_root_id: string;
+    key_creation_signer_slot: number;
+};
+export type RouterAbEd25519YaoLifecycleScopeV1 = {
+    lifecycle_id: string;
+    root_share_epoch: string;
+    account_id: string;
+    threshold_session_id: string;
+    signer_set_id: string;
+    signing_worker_id: string;
+    material_activation: RouterAbMpcMaterialActivationRefWire;
+};
+export type RouterAbEd25519YaoRegistrationAdmissionRequestV1 = {
+    scope: RouterAbEd25519YaoLifecycleScopeV1;
+    application_binding: RouterAbEd25519YaoApplicationBindingFactsV1;
+    participant_ids: readonly [number, number];
+};
+export type RouterAbEd25519YaoRecoveryAdmissionRequestV1 = {
+    scope: RouterAbEd25519YaoLifecycleScopeV1;
+    active_material_activation: RouterAbMpcMaterialActivationRefWire;
+    application_binding: RouterAbEd25519YaoApplicationBindingFactsV1;
+    participant_ids: readonly [number, number];
+    active_capability_binding: RouterAbEd25519YaoBytes32V1;
+    replacement_capability_binding: RouterAbEd25519YaoBytes32V1;
+    registered_public_key: RouterAbEd25519YaoBytes32V1;
+};
+export type RouterAbEd25519YaoWarmRecoveryBootstrapRequestV1 = {
+    readonly kind: 'router_ab_ed25519_yao_warm_recovery_bootstrap_request_v1';
+    readonly walletId: string;
+    readonly nearAccountId: string;
+    readonly nearEd25519SigningKeyId: string;
+    readonly signerSlot: number;
+    readonly thresholdSessionId: string;
+    readonly signingWorkerId: string;
+    readonly participantIds: readonly [number, number];
+};
+export type RouterAbEd25519YaoExportAuthorizationV1 = {
+    confirmation_digest: RouterAbEd25519YaoBytes32V1;
+    authorization_digest: RouterAbEd25519YaoBytes32V1;
+    nonce: RouterAbEd25519YaoBytes32V1;
+    issued_at_ms: number;
+    expires_at_ms: number;
+};
+export type RouterAbEd25519YaoExportAdmissionRequestV1 = {
+    scope: RouterAbEd25519YaoLifecycleScopeV1;
+    application_binding: RouterAbEd25519YaoApplicationBindingFactsV1;
+    participant_ids: readonly [number, number];
+    registered_public_key: RouterAbEd25519YaoBytes32V1;
+    state_epoch: number;
+    runtime_policy_binding: RouterAbEd25519YaoBytes32V1;
+    authorization: RouterAbEd25519YaoExportAuthorizationV1;
+};
+export type RouterAbEd25519YaoExportAuthorizationIdentityV1 = Omit<RouterAbEd25519YaoExportAdmissionRequestV1, 'authorization'>;
+export type RouterAbEd25519YaoExportAuthorityBindingV1 = {
+    readonly kind: 'passkey';
+    readonly credentialIdB64u: string;
+    readonly providerSubjectId?: never;
+} | {
+    readonly kind: 'email_otp';
+    readonly providerSubjectId: string;
+    readonly credentialIdB64u?: never;
+};
+export type RouterAbEd25519YaoRegistrationLifecycleV1 = Omit<RouterAbEd25519YaoAdmittedLifecycleV1, 'work_kind' | 'primitive_request_kind'> & {
+    work_kind: 'registration_prepare';
+    primitive_request_kind: 'registration';
+};
+export type RouterAbEd25519YaoRecoveryLifecycleV1 = Omit<RouterAbEd25519YaoAdmittedLifecycleV1, 'work_kind' | 'primitive_request_kind'> & {
+    work_kind: 'recovery';
+    primitive_request_kind: 'recovery';
+};
+export type RouterAbEd25519YaoExportLifecycleV1 = Omit<RouterAbEd25519YaoAdmittedLifecycleV1, 'work_kind' | 'primitive_request_kind'> & {
+    work_kind: 'key_export';
+    primitive_request_kind: 'export';
+};
+export type RouterAbEd25519YaoExportCeremonyBindingV1 = Omit<RouterAbEd25519YaoCeremonyBindingV1, 'lifecycle' | 'operation'> & {
+    lifecycle: RouterAbEd25519YaoExportLifecycleV1;
+    operation: 'export';
+};
+export type RouterAbEd25519YaoExportBindingV1 = {
+    ceremony: RouterAbEd25519YaoExportCeremonyBindingV1;
+    registered_public_key: RouterAbEd25519YaoBytes32V1;
+    state_epoch: number;
+    runtime_policy_binding: RouterAbEd25519YaoBytes32V1;
+    authorization_digest: RouterAbEd25519YaoBytes32V1;
+};
+export type RouterAbEd25519YaoActivationOperationV1 = 'registration' | 'recovery';
+type RouterAbEd25519YaoActivationLifecycleForV1<Operation extends RouterAbEd25519YaoActivationOperationV1> = Operation extends 'registration' ? RouterAbEd25519YaoRegistrationLifecycleV1 : RouterAbEd25519YaoRecoveryLifecycleV1;
+export type RouterAbEd25519YaoActivationBindingV1<Operation extends RouterAbEd25519YaoActivationOperationV1 = RouterAbEd25519YaoActivationOperationV1> = Operation extends RouterAbEd25519YaoActivationOperationV1 ? Omit<RouterAbEd25519YaoCeremonyBindingV1, 'lifecycle' | 'operation'> & {
+    lifecycle: RouterAbEd25519YaoActivationLifecycleForV1<Operation>;
+    operation: Operation;
+} : never;
+export declare function sameRouterAbEd25519YaoActivationBindingV1(left: RouterAbEd25519YaoActivationBindingV1, right: RouterAbEd25519YaoActivationBindingV1): boolean;
+export declare function sameRouterAbEd25519YaoRegistrationAdmissionRequestV1(left: RouterAbEd25519YaoRegistrationAdmissionRequestV1, right: RouterAbEd25519YaoRegistrationAdmissionRequestV1): boolean;
+export declare function sameRouterAbEd25519YaoRecoveryAdmissionRequestV1(left: RouterAbEd25519YaoRecoveryAdmissionRequestV1, right: RouterAbEd25519YaoRecoveryAdmissionRequestV1): boolean;
+export declare function sameRouterAbEd25519YaoActivationKeysetV1(left: RouterAbEd25519YaoActivationKeysetV1, right: RouterAbEd25519YaoActivationKeysetV1): boolean;
+export declare function sameRouterAbEd25519YaoActivationPublicReceiptV1(left: RouterAbEd25519YaoActivationPublicReceiptV1, right: RouterAbEd25519YaoActivationPublicReceiptV1): boolean;
+export type RouterAbEd25519YaoActivationKeysetV1 = {
+    deriver_a_input_public_key: RouterAbEd25519YaoBytes32V1;
+    deriver_b_input_public_key: RouterAbEd25519YaoBytes32V1;
+    signing_worker_recipient_public_key: RouterAbEd25519YaoBytes32V1;
+};
+export type RouterAbEd25519YaoActivationAdmissionReceiptV1<Operation extends RouterAbEd25519YaoActivationOperationV1 = RouterAbEd25519YaoActivationOperationV1> = Operation extends RouterAbEd25519YaoActivationOperationV1 ? {
+    binding: RouterAbEd25519YaoActivationBindingV1<Operation>;
+    keyset: RouterAbEd25519YaoActivationKeysetV1;
+} : never;
+export type RouterAbEd25519YaoExportAdmissionReceiptV1 = {
+    binding: RouterAbEd25519YaoExportBindingV1;
+    keyset: RouterAbEd25519YaoActivationKeysetV1;
+};
+export type RouterAbEd25519YaoEncryptedInputV1 = {
+    kind: RouterAbEd25519YaoInputKindV1;
+    deriver: RouterAbEd25519YaoDeriverRoleV1;
+    operation: RouterAbEd25519YaoOperationV1;
+    session: RouterAbEd25519YaoBytes32V1;
+    stable_context_binding: RouterAbEd25519YaoBytes32V1;
+    encapsulated_key: RouterAbEd25519YaoBytes32V1;
+    ciphertext: readonly number[];
+};
+export type RouterAbEd25519YaoActivationEncryptedInputV1<Role extends RouterAbEd25519YaoDeriverRoleV1, Operation extends RouterAbEd25519YaoActivationOperationV1 = RouterAbEd25519YaoActivationOperationV1> = Operation extends RouterAbEd25519YaoActivationOperationV1 ? Omit<RouterAbEd25519YaoEncryptedInputV1, 'kind' | 'deriver' | 'operation'> & {
+    kind: 'activation';
+    deriver: Role;
+    operation: Operation;
+} : never;
+export type RouterAbEd25519YaoActivationExecuteRequestV1<Operation extends RouterAbEd25519YaoActivationOperationV1 = RouterAbEd25519YaoActivationOperationV1> = Operation extends RouterAbEd25519YaoActivationOperationV1 ? {
+    binding: RouterAbEd25519YaoActivationBindingV1<Operation>;
+    deriver_a_input: RouterAbEd25519YaoActivationEncryptedInputV1<'deriver_a', Operation>;
+    deriver_b_input: RouterAbEd25519YaoActivationEncryptedInputV1<'deriver_b', Operation>;
+} : never;
+export type RouterAbEd25519YaoExportEncryptedInputV1<Role extends RouterAbEd25519YaoDeriverRoleV1> = Omit<RouterAbEd25519YaoEncryptedInputV1, 'kind' | 'deriver' | 'operation'> & {
+    kind: 'export';
+    deriver: Role;
+    operation: 'export';
+};
+export type RouterAbEd25519YaoExportExecuteRequestV1 = {
+    binding: RouterAbEd25519YaoExportBindingV1;
+    deriver_a_input: RouterAbEd25519YaoExportEncryptedInputV1<'deriver_a'>;
+    deriver_b_input: RouterAbEd25519YaoExportEncryptedInputV1<'deriver_b'>;
+};
+export type RouterAbEd25519YaoEncryptedPackageV1 = {
+    kind: RouterAbEd25519YaoPackageKindV1;
+    deriver: RouterAbEd25519YaoDeriverRoleV1;
+    session: RouterAbEd25519YaoBytes32V1;
+    transcript: RouterAbEd25519YaoBytes32V1;
+    encapsulated_key: RouterAbEd25519YaoBytes32V1;
+    ciphertext: readonly number[];
+};
+export type RouterAbEd25519YaoActivationClientPackageV1<Role extends RouterAbEd25519YaoDeriverRoleV1> = Omit<RouterAbEd25519YaoEncryptedPackageV1, 'kind' | 'deriver'> & {
+    kind: 'activation_client';
+    deriver: Role;
+};
+export type RouterAbEd25519YaoExportClientPackageV1<Role extends RouterAbEd25519YaoDeriverRoleV1> = Omit<RouterAbEd25519YaoEncryptedPackageV1, 'kind' | 'deriver'> & {
+    kind: 'export_client';
+    deriver: Role;
+};
+export type RouterAbEd25519YaoExportResultV1 = {
+    binding: RouterAbEd25519YaoExportBindingV1;
+    transcript: RouterAbEd25519YaoBytes32V1;
+    deriver_a_client_package: RouterAbEd25519YaoExportClientPackageV1<'deriver_a'>;
+    deriver_b_client_package: RouterAbEd25519YaoExportClientPackageV1<'deriver_b'>;
+};
+export type RouterAbEd25519YaoActivationPublicReceiptV1 = {
+    transcript: RouterAbEd25519YaoBytes32V1;
+    registered_public_key: RouterAbEd25519YaoBytes32V1;
+    joined_client_commitment: RouterAbEd25519YaoBytes32V1;
+    joined_signing_worker_commitment: RouterAbEd25519YaoBytes32V1;
+    signing_worker_verifying_share: RouterAbEd25519YaoBytes32V1;
+    state_epoch: number;
+    material_activation: RouterAbMpcMaterialActivationRefWire;
+};
+export type RouterAbEd25519YaoActivationResultV1<Operation extends RouterAbEd25519YaoActivationOperationV1 = RouterAbEd25519YaoActivationOperationV1> = Operation extends RouterAbEd25519YaoActivationOperationV1 ? {
+    binding: RouterAbEd25519YaoActivationBindingV1<Operation>;
+    deriver_a_client_package: RouterAbEd25519YaoActivationClientPackageV1<'deriver_a'>;
+    deriver_b_client_package: RouterAbEd25519YaoActivationClientPackageV1<'deriver_b'>;
+    public_receipt: RouterAbEd25519YaoActivationPublicReceiptV1;
+} : never;
+export type RouterAbEd25519YaoRecoveryActivationRequestV1 = {
+    binding: RouterAbEd25519YaoActivationBindingV1<'recovery'>;
+    public_receipt: RouterAbEd25519YaoActivationPublicReceiptV1;
+};
+export type RouterAbEd25519YaoRecoveryActivationReceiptV1 = {
+    binding: RouterAbEd25519YaoActivationBindingV1<'recovery'>;
+    public_receipt: RouterAbEd25519YaoActivationPublicReceiptV1;
+    active_capability_binding: RouterAbEd25519YaoBytes32V1;
+    retired_capability_binding: RouterAbEd25519YaoBytes32V1;
+};
+export type RouterAbEd25519YaoRecoveryStatusRequestV1 = {
+    readonly kind: 'router_ab_ed25519_yao_recovery_status_request_v1';
+    readonly admission: RouterAbEd25519YaoRecoveryAdmissionRequestV1;
+};
+export type RouterAbEd25519YaoRecoveryStatusV1 = {
+    readonly stage: 'missing';
+    readonly lifecycle_id: string;
+} | {
+    readonly stage: 'admitted';
+    readonly lifecycle_id: string;
+    readonly admission_receipt: RouterAbEd25519YaoActivationAdmissionReceiptV1<'recovery'>;
+} | {
+    readonly stage: 'executed';
+    readonly lifecycle_id: string;
+    readonly admission_receipt: RouterAbEd25519YaoActivationAdmissionReceiptV1<'recovery'>;
+    readonly execution_result: RouterAbEd25519YaoActivationResultV1<'recovery'>;
+} | {
+    readonly stage: 'promoted';
+    readonly lifecycle_id: string;
+    readonly admission_receipt: RouterAbEd25519YaoActivationAdmissionReceiptV1<'recovery'>;
+    readonly execution_result: RouterAbEd25519YaoActivationResultV1<'recovery'>;
+    readonly activation_receipt: RouterAbEd25519YaoRecoveryActivationReceiptV1;
+};
+export type RouterAbEd25519YaoExecutionAuthorityV1 = {
+    authority_digest: RouterAbEd25519YaoPublicDigestV1;
+    issued_at_ms: number;
+    expires_at_ms: number;
+};
+type RouterAbEd25519YaoRouterExecuteCommonV1 = {
+    authority: RouterAbEd25519YaoExecutionAuthorityV1;
+    pair_binding: RouterAbEd25519YaoInputPairBindingV1;
+};
+export type RouterAbEd25519YaoRouterExecuteRequestV1 = (RouterAbEd25519YaoRouterExecuteCommonV1 & {
+    operation: 'registration';
+    binding: RouterAbEd25519YaoActivationBindingV1<'registration'>;
+    deriver_a_input: RouterAbEd25519YaoActivationEncryptedInputV1<'deriver_a', 'registration'>;
+    deriver_b_input: RouterAbEd25519YaoActivationEncryptedInputV1<'deriver_b', 'registration'>;
+}) | (RouterAbEd25519YaoRouterExecuteCommonV1 & {
+    operation: 'recovery';
+    binding: RouterAbEd25519YaoActivationBindingV1<'recovery'>;
+    deriver_a_input: RouterAbEd25519YaoActivationEncryptedInputV1<'deriver_a', 'recovery'>;
+    deriver_b_input: RouterAbEd25519YaoActivationEncryptedInputV1<'deriver_b', 'recovery'>;
+}) | (RouterAbEd25519YaoRouterExecuteCommonV1 & {
+    operation: 'export';
+    binding: RouterAbEd25519YaoExportBindingV1;
+    deriver_a_input: RouterAbEd25519YaoExportEncryptedInputV1<'deriver_a'>;
+    deriver_b_input: RouterAbEd25519YaoExportEncryptedInputV1<'deriver_b'>;
+});
+export type RouterAbEd25519YaoRouterExecuteSuccessV1 = {
+    operation: 'registration';
+    result: RouterAbEd25519YaoActivationResultV1<'registration'>;
+} | {
+    operation: 'recovery';
+    result: RouterAbEd25519YaoActivationResultV1<'recovery'>;
+} | {
+    operation: 'export';
+    result: RouterAbEd25519YaoExportResultV1;
+};
+export type RouterAbEd25519YaoRouterExecuteResultV1 = {
+    status: 'succeeded';
+    result: RouterAbEd25519YaoRouterExecuteSuccessV1;
+} | {
+    status: 'recoverable_failure';
+    code: 'service_unavailable' | 'conflicting_pair' | 'missing_preparation' | 'ceremony_expired' | 'signing_worker_uncertain' | 'terminal_role_failure' | 'authorization_rejected';
+    retry_after_ms: number;
+} | {
+    status: 'rejected';
+    code: 'service_unavailable' | 'conflicting_pair' | 'missing_preparation' | 'ceremony_expired' | 'signing_worker_uncertain' | 'terminal_role_failure' | 'authorization_rejected';
+} | {
+    status: 'burned';
+    execution_id: RouterAbEd25519YaoBytes32V1;
+    reason: 'caller_disconnected' | 'peer_uncertain' | 'protocol_failure';
+};
+export type RouterAbEd25519YaoParseResult<T> = {
+    ok: true;
+    value: T;
+} | {
+    ok: false;
+    code: 'invalid_body';
+    message: string;
+};
+export declare function deriveRouterAbEd25519YaoApplicationBindingDigestV1(facts: RouterAbEd25519YaoApplicationBindingFactsV1): Promise<number[]>;
+export declare function deriveRouterAbEd25519YaoStableContextBindingV1(applicationBinding: RouterAbEd25519YaoApplicationBindingFactsV1, participantIds: readonly [number, number]): Promise<number[]>;
+export declare function deriveRouterAbEd25519YaoRuntimePolicyBindingV1(input: {
+    readonly orgId: string;
+    readonly projectId: string;
+    readonly envId: string;
+    readonly signingRootVersion: string;
+}): Promise<number[]>;
+export declare function deriveRouterAbEd25519YaoExportConfirmationDigestV1(input: {
+    readonly identity: RouterAbEd25519YaoExportAuthorizationIdentityV1;
+    readonly nonce: RouterAbEd25519YaoBytes32V1;
+    readonly issuedAtMs: number;
+    readonly expiresAtMs: number;
+}): Promise<number[]>;
+export declare function deriveRouterAbEd25519YaoExportAuthorizationDigestV1(input: {
+    readonly identity: RouterAbEd25519YaoExportAuthorizationIdentityV1;
+    readonly confirmationDigest: RouterAbEd25519YaoBytes32V1;
+    readonly nonce: RouterAbEd25519YaoBytes32V1;
+    readonly issuedAtMs: number;
+    readonly expiresAtMs: number;
+    readonly authority: RouterAbEd25519YaoExportAuthorityBindingV1;
+}): Promise<number[]>;
+export declare function parseRouterAbEd25519YaoApplicationBindingFactsV1(value: unknown): RouterAbEd25519YaoApplicationBindingFactsV1;
+export declare function parseRouterAbEd25519YaoParticipantIdsV1(value: unknown): readonly [number, number];
+export declare function parseRouterAbEd25519YaoCeremonyBindingV1(value: unknown): RouterAbEd25519YaoCeremonyBindingV1;
+export declare function parseRouterAbEd25519YaoActivationKeysetV1(value: unknown): RouterAbEd25519YaoActivationKeysetV1;
+export declare function parseRouterAbEd25519YaoActivationPublicReceiptV1(value: unknown): RouterAbEd25519YaoActivationPublicReceiptV1;
+export declare function parseRouterAbEd25519YaoRegistrationAdmissionRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoRegistrationAdmissionRequestV1>;
+export declare function parseRouterAbEd25519YaoRecoveryAdmissionRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoRecoveryAdmissionRequestV1>;
+export declare function parseRouterAbEd25519YaoRecoveryStatusRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoRecoveryStatusRequestV1>;
+export declare function parseRouterAbEd25519YaoWarmRecoveryBootstrapRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoWarmRecoveryBootstrapRequestV1>;
+export declare function parseRouterAbEd25519YaoExportAdmissionRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoExportAdmissionRequestV1>;
+export declare function parseRouterAbEd25519YaoExportAdmissionReceiptV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoExportAdmissionReceiptV1>;
+export declare function parseRouterAbEd25519YaoExportExecuteRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoExportExecuteRequestV1>;
+export declare function parseRouterAbEd25519YaoExportResultV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoExportResultV1>;
+export declare function parseRouterAbEd25519YaoActivationAdmissionReceiptV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationAdmissionReceiptV1>;
+export declare function parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationAdmissionReceiptV1<'registration'>>;
+export declare function parseRouterAbEd25519YaoRecoveryActivationAdmissionReceiptV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationAdmissionReceiptV1<'recovery'>>;
+export declare function parseRouterAbEd25519YaoActivationExecuteRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationExecuteRequestV1>;
+export declare function parseRouterAbEd25519YaoRegistrationActivationExecuteRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationExecuteRequestV1<'registration'>>;
+export declare function parseRouterAbEd25519YaoRecoveryActivationExecuteRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationExecuteRequestV1<'recovery'>>;
+export declare function parseRouterAbEd25519YaoActivationResultV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationResultV1>;
+export declare function parseRouterAbEd25519YaoRegistrationActivationResultV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationResultV1<'registration'>>;
+export declare function parseRouterAbEd25519YaoRecoveryActivationResultV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationResultV1<'recovery'>>;
+export declare function parseRouterAbEd25519YaoRecoveryActivationRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoRecoveryActivationRequestV1>;
+export declare function parseRouterAbEd25519YaoRecoveryActivationReceiptV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoRecoveryActivationReceiptV1>;
+export declare function parseRouterAbEd25519YaoRecoveryStatusV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoRecoveryStatusV1>;
+export declare function parseRouterAbEd25519YaoEncryptedPackageV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoEncryptedPackageV1>;
+//# sourceMappingURL=routerAbEd25519Yao.d.ts.map

package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.typecheck.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=routerAbEd25519Yao.typecheck.d.ts.map

package/dist/types/shared-ts/src/utils/routerAbNormalSigningIdentity.d.ts

@@ -0,0 +1,71 @@
+import { type MpcMaterialActivationRef } from './domainIds';
+export type RouterAbNormalSigningAuthorizationWire = {
+    readonly kind: 'reusable_wallet_session';
+    readonly wallet_session_id: string;
+} | {
+    readonly kind: 'operation_step_up';
+    readonly evidence_set_digest?: never;
+    readonly wallet_session_id?: never;
+};
+export type RouterAbMpcMaterialActivationRefWire = {
+    readonly kind: 'mpc_material_activation_ref';
+    readonly activation_id: string;
+    readonly capability: string;
+    readonly material_owner: string;
+    readonly key_binding: string;
+    readonly lifecycle_binding: string;
+    readonly signing_worker: string;
+};
+export type RouterAbEd25519OperationStepUpPreparationV1Wire = {
+    readonly wallet_id: string;
+    readonly operation_kind: 'near.sign_transaction' | 'near.sign_delegate_action' | 'near.sign_nep413_message';
+    readonly operation_id: string;
+    readonly request_id: string;
+    readonly account_id: string;
+    readonly material_activation: RouterAbMpcMaterialActivationRefWire;
+    readonly signing_worker_id: string;
+    readonly near_account_id: string;
+    readonly signer_slot: number;
+    readonly participant_ids: readonly [number, number];
+    readonly expires_at_ms: number;
+};
+export type RouterAbEd25519OwnerOperationAuthorizationDecisionV1Wire = {
+    readonly kind: 'authorized';
+    readonly operation: {
+        readonly kind: 'authorized_operation';
+        readonly operation_id: string;
+        readonly authorized_operation_id: string;
+        readonly operation_fingerprint_digest: string;
+    };
+    readonly source: {
+        readonly kind: 'reusable_wallet_session';
+        readonly wallet_session_id: string;
+        readonly quota_id: string;
+    };
+} | {
+    readonly kind: 'step_up_required';
+    readonly reason: 'wallet_session_missing' | 'wallet_session_expired' | 'wallet_session_exhausted' | 'wallet_session_ended' | 'wallet_session_superseded';
+    readonly step_up: RouterAbEd25519OperationStepUpPreparationV1Wire;
+} | {
+    readonly kind: 'denied';
+    readonly denial: {
+        readonly code: 'invalid_identity' | 'invalid_authority' | 'invalid_operation' | 'inactive_material' | 'replayed_step_up' | 'authorization_unavailable';
+        readonly message: string;
+    };
+};
+export declare function parseRouterAbNormalSigningAuthorization(value: unknown): RouterAbNormalSigningAuthorizationWire;
+export declare function parseRouterAbMpcMaterialActivationRef(value: unknown): RouterAbMpcMaterialActivationRefWire;
+export declare function routerAbMpcMaterialActivationRefToWire(input: {
+    readonly kind: 'mpc_material_activation_ref';
+    readonly activationId: string;
+    readonly capability: string;
+    readonly materialOwner: string;
+    readonly keyBinding: string;
+    readonly lifecycleBinding: string;
+    readonly signingWorker: string;
+}): RouterAbMpcMaterialActivationRefWire;
+export declare function routerAbMpcMaterialActivationRefFromWire(value: unknown): MpcMaterialActivationRef;
+export declare function canonicalRouterAbNormalSigningAuthorizationBytes(value: RouterAbNormalSigningAuthorizationWire): Uint8Array;
+export declare function canonicalRouterAbMpcMaterialActivationRefBytes(value: RouterAbMpcMaterialActivationRefWire): Uint8Array;
+export declare function sameRouterAbMpcMaterialActivationRef(left: RouterAbMpcMaterialActivationRefWire, right: RouterAbMpcMaterialActivationRefWire): boolean;
+//# sourceMappingURL=routerAbNormalSigningIdentity.d.ts.map

package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts

@@ -0,0 +1,51 @@
+export declare const ROUTER_AB_PUBLIC_KEYSET_VERSION_V2: "router_ab_keyset_v2";
+export declare const ROUTER_AB_PUBLIC_KEYSET_WELL_KNOWN_PATH: "/.well-known/router-ab/keyset";
+export declare const ROUTER_AB_PUBLIC_KEYSET_PATH: "/router-ab/keyset";
+export type RouterAbSignerRoleV1 = 'signer_a' | 'signer_b';
+export type RouterAbSignerEnvelopeHpkePublicKeyV1 = {
+    role: RouterAbSignerRoleV1;
+    key_epoch: string;
+    public_key: string;
+};
+export type RouterAbSignerEnvelopeHpkePublicKeySetV1 = {
+    deriver_a: RouterAbSignerEnvelopeHpkePublicKeyV1;
+    deriver_b: RouterAbSignerEnvelopeHpkePublicKeyV1;
+};
+export type RouterAbSignerEnvelopeHpkeCurrentPublicKeySetV1 = {
+    current: RouterAbSignerEnvelopeHpkePublicKeySetV1;
+    previous?: never;
+    previous_retire_at_ms?: never;
+};
+export type RouterAbSignerEnvelopeHpkeRotatingPublicKeySetV1 = {
+    current: RouterAbSignerEnvelopeHpkePublicKeySetV1;
+    previous: RouterAbSignerEnvelopeHpkePublicKeySetV1;
+    previous_retire_at_ms: number;
+};
+export type RouterAbSignerEnvelopeHpkeRotationPublicKeySetV1 = RouterAbSignerEnvelopeHpkeCurrentPublicKeySetV1 | RouterAbSignerEnvelopeHpkeRotatingPublicKeySetV1;
+export type RouterAbSignerPeerVerifyingKeyHexV1 = {
+    role: RouterAbSignerRoleV1;
+    verifying_key_hex: string;
+};
+export type RouterAbSignerPeerVerifyingKeyHexSetV1 = {
+    deriver_a: RouterAbSignerPeerVerifyingKeyHexV1;
+    deriver_b: RouterAbSignerPeerVerifyingKeyHexV1;
+};
+export type RouterAbPublicHpkeKeyDescriptorV1 = {
+    key_epoch: string;
+    public_key: string;
+};
+export type RouterAbPublicKeysetV2 = {
+    keyset_version: typeof ROUTER_AB_PUBLIC_KEYSET_VERSION_V2;
+    signer_envelope_hpke: RouterAbSignerEnvelopeHpkeRotationPublicKeySetV1;
+    signer_peer_verifying_keys: RouterAbSignerPeerVerifyingKeyHexSetV1;
+    signing_worker_server_output_hpke: RouterAbPublicHpkeKeyDescriptorV1;
+};
+export declare function requireRouterAbX25519PublicKey(value: unknown, label: string): string;
+export declare function parseRouterAbPublicKeysetV2(value: unknown): RouterAbPublicKeysetV2;
+export declare function selectRouterAbSignerEnvelopeHpkeKeyForEpoch(args: {
+    keyset: RouterAbSignerEnvelopeHpkeRotationPublicKeySetV1;
+    role: RouterAbSignerRoleV1;
+    keyEpoch: string;
+    nowMs: number;
+}): RouterAbSignerEnvelopeHpkePublicKeyV1;
+//# sourceMappingURL=routerAbPublicKeyset.d.ts.map

package/dist/types/shared-ts/src/utils/routerAbTraceContext.d.ts

@@ -0,0 +1,16 @@
+export declare const ROUTER_AB_TRACE_ID_HEADER_V1: "x-seams-trace-id";
+export type RouterAbTraceContextV1 = {
+    readonly kind: 'router_ab_trace_context_v1';
+    readonly value: string;
+};
+export type RouterAbTraceContextParseResultV1 = {
+    readonly ok: true;
+    readonly value: RouterAbTraceContextV1;
+} | {
+    readonly ok: false;
+    readonly reason: 'missing' | 'invalid';
+    readonly message: string;
+};
+export declare function parseRouterAbTraceContextV1(raw: unknown): RouterAbTraceContextParseResultV1;
+export declare function createRouterAbTraceContextV1(): RouterAbTraceContextV1;
+//# sourceMappingURL=routerAbTraceContext.d.ts.map

package/dist/types/shared-ts/src/utils/secureRandomId.d.ts

@@ -0,0 +1,6 @@
+export declare function secureRandomBytes(length?: number, label?: string): Uint8Array;
+export declare function secureRandomBase64Url(byteLength?: number, label?: string): string;
+export declare function secureRandomId(prefix: string, byteLength?: number, label?: string): string;
+export declare function secureRandomUintBelow(maxExclusive: number, label?: string): number;
+export declare function secureRandomBase36(length: number, label?: string): string;
+//# sourceMappingURL=secureRandomId.d.ts.map

package/dist/types/shared-ts/src/utils/signerDomain.d.ts

@@ -0,0 +1,75 @@
+export declare const SIGNER_KINDS: {
+    readonly thresholdEd25519: "threshold-ed25519";
+    readonly thresholdEcdsa: "threshold-ecdsa";
+};
+export type SignerKind = (typeof SIGNER_KINDS)[keyof typeof SIGNER_KINDS];
+export declare const SIGNER_AUTH_METHODS: {
+    readonly passkey: "passkey";
+    readonly emailOtp: "email_otp";
+};
+/** Authentication methods that can authorize a signer capability. */
+export type SignerAuthMethod = (typeof SIGNER_AUTH_METHODS)[keyof typeof SIGNER_AUTH_METHODS];
+export declare const WALLET_AUTH_METHODS: {
+    readonly passkey: "passkey";
+    readonly emailOtp: "email_otp";
+};
+/** Authentication methods that can be enrolled on a wallet. */
+export type WalletAuthMethod = (typeof WALLET_AUTH_METHODS)[keyof typeof WALLET_AUTH_METHODS];
+export type WalletAuthMethodSignerResolution = {
+    kind: 'supported';
+    walletAuthMethod: typeof WALLET_AUTH_METHODS.passkey;
+    signerAuthMethod: typeof SIGNER_AUTH_METHODS.passkey;
+} | {
+    kind: 'supported';
+    walletAuthMethod: typeof WALLET_AUTH_METHODS.emailOtp;
+    signerAuthMethod: typeof SIGNER_AUTH_METHODS.emailOtp;
+} | {
+    kind: 'unsupported';
+    walletAuthMethod: Exclude<WalletAuthMethod, SignerAuthMethod>;
+    signerAuthMethod?: never;
+};
+export declare const WALLET_AUTH_PROOF_METHODS: {
+    readonly passkey: "passkey";
+    readonly emailOtp: "email_otp";
+    readonly session: "session";
+};
+export type WalletAuthProofMethod = (typeof WALLET_AUTH_PROOF_METHODS)[keyof typeof WALLET_AUTH_PROOF_METHODS];
+export declare const SIGNING_SESSION_RETENTIONS: {
+    readonly session: "session";
+    readonly singleUse: "single_use";
+};
+export type SigningSessionRetention = (typeof SIGNING_SESSION_RETENTIONS)[keyof typeof SIGNING_SESSION_RETENTIONS];
+export declare const SIGNING_SESSION_POLICIES: {
+    readonly session: "session";
+    readonly perOperation: "per_operation";
+};
+export type SigningSessionPolicy = (typeof SIGNING_SESSION_POLICIES)[keyof typeof SIGNING_SESSION_POLICIES];
+export declare const SENSITIVE_OPERATION_POLICIES: {
+    readonly inheritSessionPolicy: "inherit_session_policy";
+    readonly requireFreshSameMethod: "require_fresh_same_method";
+    readonly requirePasskey: "require_passkey";
+    readonly denyEmailOtp: "deny_email_otp";
+};
+export type SensitiveOperationPolicy = (typeof SENSITIVE_OPERATION_POLICIES)[keyof typeof SENSITIVE_OPERATION_POLICIES];
+export declare const SIGNER_SOURCES: {
+    readonly passkeyRegistration: "passkey_registration";
+    readonly emailOtpRegistration: "email_otp_registration";
+    readonly selfHostedImport: "self_hosted_import";
+};
+export type SignerSource = (typeof SIGNER_SOURCES)[keyof typeof SIGNER_SOURCES];
+export declare const SIGNER_KIND_VALUES: readonly SignerKind[];
+export declare const SIGNER_AUTH_METHOD_VALUES: readonly SignerAuthMethod[];
+export declare const WALLET_AUTH_METHOD_VALUES: readonly WalletAuthMethod[];
+export declare const WALLET_AUTH_PROOF_METHOD_VALUES: readonly WalletAuthProofMethod[];
+export declare const SIGNER_SOURCE_VALUES: readonly SignerSource[];
+export declare const SIGNING_SESSION_POLICY_VALUES: readonly SigningSessionPolicy[];
+export declare const SENSITIVE_OPERATION_POLICY_VALUES: readonly SensitiveOperationPolicy[];
+export declare function isSignerKind(value: unknown): value is SignerKind;
+export declare function isSignerAuthMethod(value: unknown): value is SignerAuthMethod;
+export declare function isWalletAuthMethod(value: unknown): value is WalletAuthMethod;
+export declare function resolveSignerAuthMethodForWalletAuthMethod(walletAuthMethod: WalletAuthMethod): WalletAuthMethodSignerResolution;
+export declare function isWalletAuthProofMethod(value: unknown): value is WalletAuthProofMethod;
+export declare function isSignerSource(value: unknown): value is SignerSource;
+export declare function isSigningSessionPolicy(value: unknown): value is SigningSessionPolicy;
+export declare function isSensitiveOperationPolicy(value: unknown): value is SensitiveOperationPolicy;
+//# sourceMappingURL=signerDomain.d.ts.map

package/dist/types/shared-ts/src/utils/signerDomain.typecheck.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=signerDomain.typecheck.d.ts.map

package/dist/types/shared-ts/src/utils/signerSlot.d.ts

@@ -0,0 +1,11 @@
+export type SignerSlot = number & {
+    readonly __brand: 'SignerSlot';
+};
+export declare function parseSignerSlot(value: unknown, options?: {
+    min?: number;
+}): SignerSlot | null;
+export declare function coerceSignerSlot(value: unknown, options?: {
+    min?: number;
+    fallback?: number;
+}): number;
+//# sourceMappingURL=signerSlot.d.ts.map