@seams/wallet-server 0.6.2 → 0.7.1

package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker.js

@@ -1,414 +0,0 @@
-//#region ../../wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker.js
-let wasm;
-let WASM_VECTOR_LEN = 0;
-let cachedUint8ArrayMemory0 = null;
-function getUint8ArrayMemory0() {
-	if (cachedUint8ArrayMemory0 === null || cachedUint8ArrayMemory0.byteLength === 0) cachedUint8ArrayMemory0 = new Uint8Array(wasm.memory.buffer);
-	return cachedUint8ArrayMemory0;
-}
-const cachedTextEncoder = typeof TextEncoder !== "undefined" ? new TextEncoder("utf-8") : { encode: () => {
-	throw Error("TextEncoder not available");
-} };
-const encodeString = typeof cachedTextEncoder.encodeInto === "function" ? function(arg, view) {
-	return cachedTextEncoder.encodeInto(arg, view);
-} : function(arg, view) {
-	const buf = cachedTextEncoder.encode(arg);
-	view.set(buf);
-	return {
-		read: arg.length,
-		written: buf.length
-	};
-};
-function passStringToWasm0(arg, malloc, realloc) {
-	if (realloc === void 0) {
-		const buf = cachedTextEncoder.encode(arg);
-		const ptr = malloc(buf.length, 1) >>> 0;
-		getUint8ArrayMemory0().subarray(ptr, ptr + buf.length).set(buf);
-		WASM_VECTOR_LEN = buf.length;
-		return ptr;
-	}
-	let len = arg.length;
-	let ptr = malloc(len, 1) >>> 0;
-	const mem = getUint8ArrayMemory0();
-	let offset = 0;
-	for (; offset < len; offset++) {
-		const code = arg.charCodeAt(offset);
-		if (code > 127) break;
-		mem[ptr + offset] = code;
-	}
-	if (offset !== len) {
-		if (offset !== 0) arg = arg.slice(offset);
-		ptr = realloc(ptr, len, len = offset + arg.length * 3, 1) >>> 0;
-		const view = getUint8ArrayMemory0().subarray(ptr + offset, ptr + len);
-		const ret = encodeString(arg, view);
-		offset += ret.written;
-		ptr = realloc(ptr, len, offset, 1) >>> 0;
-	}
-	WASM_VECTOR_LEN = offset;
-	return ptr;
-}
-let cachedDataViewMemory0 = null;
-function getDataViewMemory0() {
-	if (cachedDataViewMemory0 === null || cachedDataViewMemory0.buffer.detached === true || cachedDataViewMemory0.buffer.detached === void 0 && cachedDataViewMemory0.buffer !== wasm.memory.buffer) cachedDataViewMemory0 = new DataView(wasm.memory.buffer);
-	return cachedDataViewMemory0;
-}
-function addToExternrefTable0(obj) {
-	const idx = wasm.__externref_table_alloc();
-	wasm.__wbindgen_export_4.set(idx, obj);
-	return idx;
-}
-function handleError(f, args) {
-	try {
-		return f.apply(this, args);
-	} catch (e) {
-		const idx = addToExternrefTable0(e);
-		wasm.__wbindgen_exn_store(idx);
-	}
-}
-const cachedTextDecoder = typeof TextDecoder !== "undefined" ? new TextDecoder("utf-8", {
-	ignoreBOM: true,
-	fatal: true
-}) : { decode: () => {
-	throw Error("TextDecoder not available");
-} };
-if (typeof TextDecoder !== "undefined") cachedTextDecoder.decode();
-function getStringFromWasm0(ptr, len) {
-	ptr = ptr >>> 0;
-	return cachedTextDecoder.decode(getUint8ArrayMemory0().subarray(ptr, ptr + len));
-}
-function isLikeNone(x) {
-	return x === void 0 || x === null;
-}
-function debugString(val) {
-	const type = typeof val;
-	if (type == "number" || type == "boolean" || val == null) return `${val}`;
-	if (type == "string") return `"${val}"`;
-	if (type == "symbol") {
-		const description = val.description;
-		if (description == null) return "Symbol";
-		else return `Symbol(${description})`;
-	}
-	if (type == "function") {
-		const name = val.name;
-		if (typeof name == "string" && name.length > 0) return `Function(${name})`;
-		else return "Function";
-	}
-	if (Array.isArray(val)) {
-		const length = val.length;
-		let debug = "[";
-		if (length > 0) debug += debugString(val[0]);
-		for (let i = 1; i < length; i++) debug += ", " + debugString(val[i]);
-		debug += "]";
-		return debug;
-	}
-	const builtInMatches = /\[object ([^\]]+)\]/.exec(toString.call(val));
-	let className;
-	if (builtInMatches && builtInMatches.length > 1) className = builtInMatches[1];
-	else return toString.call(val);
-	if (className == "Object") try {
-		return "Object(" + JSON.stringify(val) + ")";
-	} catch (_) {
-		return "Object";
-	}
-	if (val instanceof Error) return `${val.name}: ${val.message}\n${val.stack}`;
-	return className;
-}
-function init_router_ab_ecdsa_signing_worker() {
-	wasm.init_router_ab_ecdsa_signing_worker();
-}
-function takeFromExternrefTable0(idx) {
-	const value = wasm.__wbindgen_export_4.get(idx);
-	wasm.__externref_table_dealloc(idx);
-	return value;
-}
-/**
-* @param {any} payload
-* @returns {any}
-*/
-function router_ab_ecdsa_derivation_relayer_bootstrap(payload) {
-	const ret = wasm.router_ab_ecdsa_derivation_relayer_bootstrap(payload);
-	if (ret[2]) throw takeFromExternrefTable0(ret[1]);
-	return takeFromExternrefTable0(ret[0]);
-}
-typeof FinalizationRegistry === "undefined" || new FinalizationRegistry((ptr) => wasm.__wbg_ecdsalanesigningworkersessionv1_free(ptr >>> 0, 1));
-typeof FinalizationRegistry === "undefined" || new FinalizationRegistry((ptr) => wasm.__wbg_linkeddeviceecdsasourcecontributionworkersessionv1_free(ptr >>> 0, 1));
-typeof FinalizationRegistry === "undefined" || new FinalizationRegistry((ptr) => wasm.__wbg_signingworkerpresignsession_free(ptr >>> 0, 1));
-async function __wbg_load(module, imports) {
-	if (typeof Response === "function" && module instanceof Response) {
-		if (typeof WebAssembly.instantiateStreaming === "function") try {
-			return await WebAssembly.instantiateStreaming(module, imports);
-		} catch (e) {
-			if (module.headers.get("Content-Type") != "application/wasm") console.warn("`WebAssembly.instantiateStreaming` failed because your server does not serve Wasm with `application/wasm` MIME type. Falling back to `WebAssembly.instantiate` which is slower. Original error:\n", e);
-			else throw e;
-		}
-		const bytes = await module.arrayBuffer();
-		return await WebAssembly.instantiate(bytes, imports);
-	} else {
-		const instance = await WebAssembly.instantiate(module, imports);
-		if (instance instanceof WebAssembly.Instance) return {
-			instance,
-			module
-		};
-		else return instance;
-	}
-}
-function __wbg_get_imports() {
-	const imports = {};
-	imports.wbg = {};
-	imports.wbg.__wbg_String_8f0eb39a4a4c2f66 = function(arg0, arg1) {
-		const ptr1 = passStringToWasm0(String(arg1), wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-		const len1 = WASM_VECTOR_LEN;
-		getDataViewMemory0().setInt32(arg0 + 4, len1, true);
-		getDataViewMemory0().setInt32(arg0 + 0, ptr1, true);
-	};
-	imports.wbg.__wbg_buffer_609cc3eee51ed158 = function(arg0) {
-		return arg0.buffer;
-	};
-	imports.wbg.__wbg_call_672a4d21634d4a24 = function() {
-		return handleError(function(arg0, arg1) {
-			return arg0.call(arg1);
-		}, arguments);
-	};
-	imports.wbg.__wbg_call_7cccdd69e0791ae2 = function() {
-		return handleError(function(arg0, arg1, arg2) {
-			return arg0.call(arg1, arg2);
-		}, arguments);
-	};
-	imports.wbg.__wbg_crypto_86f2631e91b51511 = function(arg0) {
-		return arg0.crypto;
-	};
-	imports.wbg.__wbg_done_769e5ede4b31c67b = function(arg0) {
-		return arg0.done;
-	};
-	imports.wbg.__wbg_getRandomValues_b3f15fcbfabb0f8b = function() {
-		return handleError(function(arg0, arg1) {
-			arg0.getRandomValues(arg1);
-		}, arguments);
-	};
-	imports.wbg.__wbg_get_67b2ba62fc30de12 = function() {
-		return handleError(function(arg0, arg1) {
-			return Reflect.get(arg0, arg1);
-		}, arguments);
-	};
-	imports.wbg.__wbg_get_b9b93047fe3cf45b = function(arg0, arg1) {
-		return arg0[arg1 >>> 0];
-	};
-	imports.wbg.__wbg_getwithrefkey_1dc361bd10053bfe = function(arg0, arg1) {
-		return arg0[arg1];
-	};
-	imports.wbg.__wbg_instanceof_ArrayBuffer_e14585432e3737fc = function(arg0) {
-		let result;
-		try {
-			result = arg0 instanceof ArrayBuffer;
-		} catch (_) {
-			result = false;
-		}
-		return result;
-	};
-	imports.wbg.__wbg_instanceof_Uint8Array_17156bcf118086a9 = function(arg0) {
-		let result;
-		try {
-			result = arg0 instanceof Uint8Array;
-		} catch (_) {
-			result = false;
-		}
-		return result;
-	};
-	imports.wbg.__wbg_isArray_a1eab7e0d067391b = function(arg0) {
-		return Array.isArray(arg0);
-	};
-	imports.wbg.__wbg_isSafeInteger_343e2beeeece1bb0 = function(arg0) {
-		return Number.isSafeInteger(arg0);
-	};
-	imports.wbg.__wbg_iterator_9a24c88df860dc65 = function() {
-		return Symbol.iterator;
-	};
-	imports.wbg.__wbg_length_a446193dc22c12f8 = function(arg0) {
-		return arg0.length;
-	};
-	imports.wbg.__wbg_length_e2d2a49132c1b256 = function(arg0) {
-		return arg0.length;
-	};
-	imports.wbg.__wbg_msCrypto_d562bbe83e0d4b91 = function(arg0) {
-		return arg0.msCrypto;
-	};
-	imports.wbg.__wbg_new_405e22f390576ce2 = function() {
-		return /* @__PURE__ */ new Object();
-	};
-	imports.wbg.__wbg_new_78feb108b6472713 = function() {
-		return new Array();
-	};
-	imports.wbg.__wbg_new_a12002a7f91c75be = function(arg0) {
-		return new Uint8Array(arg0);
-	};
-	imports.wbg.__wbg_newnoargs_105ed471475aaf50 = function(arg0, arg1) {
-		return new Function(getStringFromWasm0(arg0, arg1));
-	};
-	imports.wbg.__wbg_newwithbyteoffsetandlength_d97e637ebe145a9a = function(arg0, arg1, arg2) {
-		return new Uint8Array(arg0, arg1 >>> 0, arg2 >>> 0);
-	};
-	imports.wbg.__wbg_newwithlength_a381634e90c276d4 = function(arg0) {
-		return new Uint8Array(arg0 >>> 0);
-	};
-	imports.wbg.__wbg_next_25feadfc0913fea9 = function(arg0) {
-		return arg0.next;
-	};
-	imports.wbg.__wbg_next_6574e1a8a62d1055 = function() {
-		return handleError(function(arg0) {
-			return arg0.next();
-		}, arguments);
-	};
-	imports.wbg.__wbg_node_e1f24f89a7336c2e = function(arg0) {
-		return arg0.node;
-	};
-	imports.wbg.__wbg_process_3975fd6c72f520aa = function(arg0) {
-		return arg0.process;
-	};
-	imports.wbg.__wbg_push_737cfc8c1432c2c6 = function(arg0, arg1) {
-		return arg0.push(arg1);
-	};
-	imports.wbg.__wbg_randomFillSync_f8c153b79f285817 = function() {
-		return handleError(function(arg0, arg1) {
-			arg0.randomFillSync(arg1);
-		}, arguments);
-	};
-	imports.wbg.__wbg_require_b74f47fc2d022fd6 = function() {
-		return handleError(function() {
-			return module.require;
-		}, arguments);
-	};
-	imports.wbg.__wbg_set_37837023f3d740e8 = function(arg0, arg1, arg2) {
-		arg0[arg1 >>> 0] = arg2;
-	};
-	imports.wbg.__wbg_set_3f1d0b984ed272ed = function(arg0, arg1, arg2) {
-		arg0[arg1] = arg2;
-	};
-	imports.wbg.__wbg_set_65595bdd868b3009 = function(arg0, arg1, arg2) {
-		arg0.set(arg1, arg2 >>> 0);
-	};
-	imports.wbg.__wbg_set_bb8cecf6a62b9f46 = function() {
-		return handleError(function(arg0, arg1, arg2) {
-			return Reflect.set(arg0, arg1, arg2);
-		}, arguments);
-	};
-	imports.wbg.__wbg_static_accessor_GLOBAL_88a902d13a557d07 = function() {
-		const ret = typeof global === "undefined" ? null : global;
-		return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
-	};
-	imports.wbg.__wbg_static_accessor_GLOBAL_THIS_56578be7e9f832b0 = function() {
-		const ret = typeof globalThis === "undefined" ? null : globalThis;
-		return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
-	};
-	imports.wbg.__wbg_static_accessor_SELF_37c5d418e4bf5819 = function() {
-		const ret = typeof self === "undefined" ? null : self;
-		return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
-	};
-	imports.wbg.__wbg_static_accessor_WINDOW_5de37043a91a9c40 = function() {
-		const ret = typeof window === "undefined" ? null : window;
-		return isLikeNone(ret) ? 0 : addToExternrefTable0(ret);
-	};
-	imports.wbg.__wbg_subarray_aa9065fa9dc5df96 = function(arg0, arg1, arg2) {
-		return arg0.subarray(arg1 >>> 0, arg2 >>> 0);
-	};
-	imports.wbg.__wbg_value_cd1ffa7b1ab794f1 = function(arg0) {
-		return arg0.value;
-	};
-	imports.wbg.__wbg_versions_4e31226f5e8dc909 = function(arg0) {
-		return arg0.versions;
-	};
-	imports.wbg.__wbindgen_as_number = function(arg0) {
-		return +arg0;
-	};
-	imports.wbg.__wbindgen_boolean_get = function(arg0) {
-		const v = arg0;
-		return typeof v === "boolean" ? v ? 1 : 0 : 2;
-	};
-	imports.wbg.__wbindgen_debug_string = function(arg0, arg1) {
-		const ptr1 = passStringToWasm0(debugString(arg1), wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-		const len1 = WASM_VECTOR_LEN;
-		getDataViewMemory0().setInt32(arg0 + 4, len1, true);
-		getDataViewMemory0().setInt32(arg0 + 0, ptr1, true);
-	};
-	imports.wbg.__wbindgen_error_new = function(arg0, arg1) {
-		return new Error(getStringFromWasm0(arg0, arg1));
-	};
-	imports.wbg.__wbindgen_in = function(arg0, arg1) {
-		return arg0 in arg1;
-	};
-	imports.wbg.__wbindgen_init_externref_table = function() {
-		const table = wasm.__wbindgen_export_4;
-		const offset = table.grow(4);
-		table.set(0, void 0);
-		table.set(offset + 0, void 0);
-		table.set(offset + 1, null);
-		table.set(offset + 2, true);
-		table.set(offset + 3, false);
-	};
-	imports.wbg.__wbindgen_is_function = function(arg0) {
-		return typeof arg0 === "function";
-	};
-	imports.wbg.__wbindgen_is_object = function(arg0) {
-		const val = arg0;
-		return typeof val === "object" && val !== null;
-	};
-	imports.wbg.__wbindgen_is_string = function(arg0) {
-		return typeof arg0 === "string";
-	};
-	imports.wbg.__wbindgen_is_undefined = function(arg0) {
-		return arg0 === void 0;
-	};
-	imports.wbg.__wbindgen_jsval_loose_eq = function(arg0, arg1) {
-		return arg0 == arg1;
-	};
-	imports.wbg.__wbindgen_memory = function() {
-		return wasm.memory;
-	};
-	imports.wbg.__wbindgen_number_get = function(arg0, arg1) {
-		const obj = arg1;
-		const ret = typeof obj === "number" ? obj : void 0;
-		getDataViewMemory0().setFloat64(arg0 + 8, isLikeNone(ret) ? 0 : ret, true);
-		getDataViewMemory0().setInt32(arg0 + 0, !isLikeNone(ret), true);
-	};
-	imports.wbg.__wbindgen_number_new = function(arg0) {
-		return arg0;
-	};
-	imports.wbg.__wbindgen_string_get = function(arg0, arg1) {
-		const obj = arg1;
-		const ret = typeof obj === "string" ? obj : void 0;
-		var ptr1 = isLikeNone(ret) ? 0 : passStringToWasm0(ret, wasm.__wbindgen_malloc, wasm.__wbindgen_realloc);
-		var len1 = WASM_VECTOR_LEN;
-		getDataViewMemory0().setInt32(arg0 + 4, len1, true);
-		getDataViewMemory0().setInt32(arg0 + 0, ptr1, true);
-	};
-	imports.wbg.__wbindgen_string_new = function(arg0, arg1) {
-		return getStringFromWasm0(arg0, arg1);
-	};
-	imports.wbg.__wbindgen_throw = function(arg0, arg1) {
-		throw new Error(getStringFromWasm0(arg0, arg1));
-	};
-	return imports;
-}
-function __wbg_init_memory(imports, memory) {}
-function __wbg_finalize_init(instance, module) {
-	wasm = instance.exports;
-	__wbg_init.__wbindgen_wasm_module = module;
-	cachedDataViewMemory0 = null;
-	cachedUint8ArrayMemory0 = null;
-	wasm.__wbindgen_start();
-	return wasm;
-}
-async function __wbg_init(module_or_path) {
-	if (wasm !== void 0) return wasm;
-	if (typeof module_or_path !== "undefined") if (Object.getPrototypeOf(module_or_path) === Object.prototype) ({module_or_path} = module_or_path);
-	else console.warn("using deprecated parameters for the initialization function; pass a single object instead");
-	if (typeof module_or_path === "undefined") module_or_path = new URL("router_ab_ecdsa_signing_worker_bg.wasm", import.meta.url);
-	const imports = __wbg_get_imports();
-	if (typeof module_or_path === "string" || typeof Request === "function" && module_or_path instanceof Request || typeof URL === "function" && module_or_path instanceof URL) module_or_path = fetch(module_or_path);
-	__wbg_init_memory(imports);
-	const { instance, module } = await __wbg_load(await module_or_path, imports);
-	return __wbg_finalize_init(instance, module);
-}
-//#endregion
-export { __wbg_init as default, init_router_ab_ecdsa_signing_worker, router_ab_ecdsa_derivation_relayer_bootstrap };
-
-//# sourceMappingURL=router_ab_ecdsa_signing_worker.js.map

package/dist/types/shared-ts/src/passkey-custody/credentialObservations.d.ts

@@ -1,74 +0,0 @@
-import type { PasskeyEnvelopeId, WebAuthnCredentialIdB64u, WebAuthnRpId } from '../utils/domainIds';
-import type { EnvelopeRevision } from './primitives';
-/**
- * Advisory credential metadata observed at registration.
- *
- * WebAuthn's backup-eligibility (BE) and backup-state (BS) flags describe how a
- * provider may sync a credential. They do NOT prove that the provider will
- * return the same PRF result on another device, so nothing in this module may
- * be used to conclude that cross-device custody works. That conclusion has one
- * source: an actual PRF result has sealed a server-held envelope.
- */
-export type PasskeyCredentialObservationRecord = {
-    kind: 'passkey_credential_observation_v1';
-    rpId: WebAuthnRpId;
-    credentialIdB64u: WebAuthnCredentialIdB64u;
-    /** Whether the credential returned a usable PRF result when it was created. */
-    prfSupported: boolean;
-    /** WebAuthn BE flag: the provider may back this credential up. Advisory. */
-    backupEligible: boolean;
-    /** WebAuthn BS flag: the provider reports it is backed up now. Advisory. */
-    backupState: boolean;
-    observedAtMs: number;
-};
-/**
- * Whether this wallet's custody can be opened on another device.
- *
- * `ready` is reachable only by presenting the active server-held envelope that
- * a real PRF result sealed. Backup flags are not an input to this type, by
- * construction: there is no branch they could satisfy.
- */
-export type CrossDeviceCustodyReadiness = {
-    state: 'ready';
-    sealedEnvelopeId: PasskeyEnvelopeId;
-    envelopeRevision: EnvelopeRevision;
-} | {
-    state: 'not_ready';
-    reason: 'prf_unsupported' | 'no_sealed_envelope';
-};
-export declare function buildPasskeyCredentialObservationRecord(args: {
-    rpId: WebAuthnRpId;
-    credentialIdB64u: WebAuthnCredentialIdB64u;
-    prfSupported: boolean;
-    backupEligible: boolean;
-    backupState: boolean;
-    observedAtMs: number;
-}): PasskeyCredentialObservationRecord;
-export declare function parsePasskeyCredentialObservationRecord(raw: unknown, label?: string): PasskeyCredentialObservationRecord;
-export type WebAuthnBackupFlags = {
-    backupEligible: boolean;
-    backupState: boolean;
-};
-/**
- * Reads the BE and BS flags from raw authenticator data.
- *
- * A credential reporting backed-up state is still not evidence of cross-device
- * PRF continuity — see `resolveCrossDeviceCustodyReadiness`.
- */
-export declare function parseWebAuthnBackupFlags(authenticatorData: Uint8Array): WebAuthnBackupFlags;
-/**
- * Resolves cross-device custody readiness.
- *
- * Note the inputs: PRF support, and the active sealed envelope — never the
- * backup flags. Registration may observe a backup-eligible, backed-up
- * credential and this still returns `not_ready` until a PRF result has actually
- * sealed a server-held envelope.
- */
-export declare function resolveCrossDeviceCustodyReadiness(args: {
-    prfSupported: boolean;
-    activeSealedEnvelope: {
-        envelopeId: PasskeyEnvelopeId;
-        envelopeRevision: EnvelopeRevision;
-    } | null;
-}): CrossDeviceCustodyReadiness;
-//# sourceMappingURL=credentialObservations.d.ts.map

package/dist/types/shared-ts/src/passkey-custody/kekContext.d.ts

@@ -1,34 +0,0 @@
-import type { PasskeyEnvelopeId, WalletId } from '../utils/domainIds';
-import type { EmailOtpFactorKekVersion, PasskeyCustodyEnvelopeRecord, PasskeyPrfKekVersion, WalletCustodyEnvelopeFactor } from './custodyEnvelope';
-import type { PasskeyCustodySecretKind } from './custodySecretBinding';
-export type PasskeyCustodyKekPurpose = PasskeyCustodySecretKind;
-/**
- * The exact HKDF `info` inputs for one envelope's KEK:
- *
- *   factor_kek = HKDF-SHA256(
- *     ikm  = the factor secret (WebAuthn PRF.first, or the Email OTP factor key),
- *     salt = versioned application salt,
- *     info = hash(factor identity, walletId, envelopeId, purpose, version))
- *
- * The factor secret and the salt are not part of this record: the context is
- * public binding data, and only the secure worker ever holds the secret.
- *
- * The factor branch is carried whole rather than flattened, so a passkey
- * context can never be built from an Email OTP envelope's identity — the two
- * factors wrap the same seed but must never derive the same KEK.
- */
-export type PasskeyCustodyKekDerivationContext = {
-    kind: 'wallet_custody_kek_derivation_context_v2';
-    walletId: WalletId;
-    envelopeId: PasskeyEnvelopeId;
-    factor: WalletCustodyEnvelopeFactor;
-    purpose: PasskeyCustodyKekPurpose;
-    kekVersion: PasskeyPrfKekVersion | EmailOtpFactorKekVersion;
-};
-/**
- * Derives the KEK context from a parsed envelope. Callers cannot assemble one
- * field by field, so a KEK is always bound to the factor, wallet, envelope, and
- * custody branch the ciphertext was sealed under.
- */
-export declare function buildPasskeyCustodyKekDerivationContext(envelope: PasskeyCustodyEnvelopeRecord): PasskeyCustodyKekDerivationContext;
-//# sourceMappingURL=kekContext.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.d.ts

@@ -1,62 +0,0 @@
-import type { MpcMaterialActivationRef, MpcMaterialActivationId, WalletId } from '../utils/domainIds';
-import { type LaneEnrollmentId, type LaneOperationId, type LaneShareEpoch, type SigningLaneId, type WalletKeyId } from './ids';
-import { type DigestB64u } from '../utils/canonicalPrimitives';
-import { type Secp256k1CompressedPublicKeyB64u } from '../passkey-custody/primitives';
-import { type LaneHolderParticipantId, type HpkePublicKeyB64u, type LaneParticipantBindingDigestB64u, type SigningWorkerParticipantId, type SigningWorkerRecipientKeyDigestB64u, type SigningWorkerRecipientKeyId } from './participants';
-import type { EcdsaTargetCapabilityBindingV1 } from './rotation';
-type LinkedEcdsaScopeOwnerFieldsForbiddenV1 = {
-    readonly signingRootId?: never;
-    readonly signingRootVersion?: never;
-    readonly context?: never;
-    readonly publicIdentity?: never;
-    readonly signingWorker?: never;
-    readonly activationEpoch?: never;
-    readonly keyHandle?: never;
-    readonly relayerKeyId?: never;
-    readonly participantIds?: never;
-    readonly runtimePolicyScope?: never;
-    readonly authorization?: never;
-};
-/**
- * Trusted public identity for a linked ECDSA lane.
- *
- * The scope intentionally models the activated lane rather than the owner
- * derivation root. Root metadata and owner public-identity bags are forbidden
- * at the type level and rejected by the exact parser at runtime.
- */
-export type LinkedDeviceEcdsaNormalSigningScopeV1 = LinkedEcdsaScopeOwnerFieldsForbiddenV1 & {
-    readonly kind: 'linked_device_ecdsa_normal_signing_scope_v1';
-    readonly keyFamily: 'ecdsa_secp256k1';
-    readonly laneKind: 'linked_device';
-    readonly walletId: WalletId;
-    readonly walletKeyId: WalletKeyId;
-    readonly enrollmentId: LaneEnrollmentId;
-    readonly operationId: LaneOperationId;
-    readonly laneId: SigningLaneId;
-    readonly laneShareEpoch: LaneShareEpoch;
-    readonly revocationEpoch: number;
-    readonly targetMaterialActivationId: MpcMaterialActivationId;
-    readonly materialActivation: MpcMaterialActivationRef;
-    readonly targetCapability: EcdsaTargetCapabilityBindingV1;
-    readonly thresholdPublicKey33B64u: Secp256k1CompressedPublicKeyB64u;
-    readonly evmAddress: string;
-    readonly publicIdentityDigestB64u: DigestB64u;
-    readonly targetHolderPublicCommitmentB64u: Secp256k1CompressedPublicKeyB64u;
-    readonly targetServerPublicCommitmentB64u: Secp256k1CompressedPublicKeyB64u;
-    readonly holderParticipantId: LaneHolderParticipantId;
-    readonly signingWorkerParticipantId: SigningWorkerParticipantId;
-    readonly holderParticipantBindingDigestB64u: LaneParticipantBindingDigestB64u;
-    readonly signingWorkerParticipantBindingDigestB64u: LaneParticipantBindingDigestB64u;
-    readonly holderRecipientKeyDigestB64u: SigningWorkerRecipientKeyDigestB64u;
-    readonly serverRecipientKeyDigestB64u: SigningWorkerRecipientKeyDigestB64u;
-    readonly signingWorkerRecipientKeyId: SigningWorkerRecipientKeyId;
-    readonly signingWorkerHpkePublicKeyB64u: HpkePublicKeyB64u;
-    readonly transcriptHashB64u: DigestB64u;
-    readonly protocolCommitReceiptDigestB64u: DigestB64u;
-};
-export type LinkedDeviceEcdsaNormalSigningScopeInputV1 = Omit<LinkedDeviceEcdsaNormalSigningScopeV1, 'kind' | 'keyFamily' | 'laneKind'>;
-export declare function buildLinkedDeviceEcdsaNormalSigningScopeV1(input: LinkedDeviceEcdsaNormalSigningScopeInputV1): LinkedDeviceEcdsaNormalSigningScopeV1;
-export declare function validateLinkedDeviceEcdsaNormalSigningScopeV1(scope: LinkedDeviceEcdsaNormalSigningScopeV1): void;
-export declare function parseLinkedDeviceEcdsaNormalSigningScopeV1(value: unknown, label?: string): LinkedDeviceEcdsaNormalSigningScopeV1;
-export {};
-//# sourceMappingURL=linkedEcdsaScope.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.typecheck.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=linkedEcdsaScope.typecheck.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/validation.d.ts

@@ -1,11 +0,0 @@
-import { type WalletKeyId } from './ids';
-export declare function parseWalletKeyIdOrNull(value: unknown): WalletKeyId | null;
-export declare function requireWalletKeyId(value: unknown, label?: string): WalletKeyId;
-export declare function assertMatchingWalletKeyId(args: {
-    expected: unknown;
-    actual: unknown;
-    expectedLabel?: string;
-    actualLabel?: string;
-    message?: string;
-}): WalletKeyId;
-//# sourceMappingURL=validation.d.ts.map

package/dist/types/shared-ts/src/utils/bigint.d.ts

@@ -1,3 +0,0 @@
-export declare function bytesToNumberBE(bytes: Uint8Array): bigint;
-export declare function numberToBytesBE(n: number | bigint, len: number): Uint8Array;
-//# sourceMappingURL=bigint.d.ts.map

package/dist/types/shared-ts/src/utils/paillier.d.ts

@@ -1,37 +0,0 @@
-export declare const RECOVERY_SHARE_DOMAIN_MODULUS: bigint;
-export declare const PAILLIER_MIN_KEY_BITS = 2048;
-export type PaillierPublicKey = {
-    n: bigint;
-    g: bigint;
-    nSquared: bigint;
-    modulusBits: number;
-};
-export type PaillierPrivateKey = {
-    lambda: bigint;
-    mu: bigint;
-};
-export type PaillierKeyPair = {
-    publicKey: PaillierPublicKey;
-    privateKey: PaillierPrivateKey;
-};
-type RandomBytesFn = (length: number) => Uint8Array;
-export declare function generatePaillierKeyPair(input?: {
-    bits?: number;
-    rounds?: number;
-    randomBytes?: RandomBytesFn;
-}): Promise<PaillierKeyPair>;
-export declare function serializePaillierPublicKeyB64u(publicKey: PaillierPublicKey): string;
-export declare function parsePaillierPublicKeyB64u(value: string): PaillierPublicKey;
-export declare function serializePaillierCiphertextB64u(publicKey: PaillierPublicKey, ciphertext: bigint): string;
-export declare function parsePaillierCiphertextB64u(publicKey: PaillierPublicKey, value: string): bigint;
-export declare function paillierEncrypt(publicKey: PaillierPublicKey, plaintext: bigint, input?: {
-    randomBytes?: RandomBytesFn;
-}): bigint;
-export declare function paillierAddConst(publicKey: PaillierPublicKey, ciphertext: bigint, addend: bigint): bigint;
-export declare function paillierDecrypt(keyPair: PaillierKeyPair, ciphertext: bigint): bigint;
-export declare function destroyPaillierPrivateKey(privateKey: PaillierPrivateKey | null | undefined): void;
-export declare function destroyPaillierKeyPair(keyPair: PaillierKeyPair | null | undefined): void;
-export declare function decodeU256Le(bytes: Uint8Array): bigint;
-export declare function encodeU256Le(value: bigint): Uint8Array;
-export {};
-//# sourceMappingURL=paillier.d.ts.map

package/dist/types/shared-ts/src/utils/recoveryDomain.d.ts

@@ -1,12 +0,0 @@
-export type RecoverySubjectBinding = {
-    nearAccountId: string;
-    recoverySessionId: string;
-    deadlineEpochSeconds: number;
-    scope?: string;
-};
-export type RecoveryTargetKeySet = {
-    newNearPublicKey: string;
-    newEvmOwnerAddress: string;
-};
-export type MultichainRecoveryPayloadFields = RecoverySubjectBinding & RecoveryTargetKeySet;
-//# sourceMappingURL=recoveryDomain.d.ts.map

package/dist/types/shared-ts/src/utils/signerDomain.typecheck.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=signerDomain.typecheck.d.ts.map