@seams/wallet-server 0.6.2 → 0.7.3

package/dist/esm/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.js

@@ -1,115 +0,0 @@
-import __wbg_init, { init_router_ab_ecdsa_signing_worker, router_ab_ecdsa_derivation_relayer_bootstrap } from "../../wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker.js";
-//#region src/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.ts
-const WASM_PATH_CANDIDATES = [
-	"../../wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm",
-	"../../wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm",
-	"../../wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm"
-];
-let initPromise = null;
-let isReady = false;
-function isNodeEnvironment() {
-	const processObject = globalThis.process;
-	const webSocketPair = globalThis.WebSocketPair;
-	const navigatorObject = globalThis.navigator;
-	const isCloudflareWorker = typeof webSocketPair !== "undefined" || typeof navigatorObject?.userAgent === "string" && navigatorObject.userAgent.includes("Cloudflare-Workers");
-	return Boolean(processObject?.versions?.node) && !isCloudflareWorker;
-}
-function resolveWasmUrls() {
-	const baseUrl = import.meta.url;
-	const resolved = [];
-	for (const candidate of WASM_PATH_CANDIDATES) try {
-		resolved.push(new URL(candidate, baseUrl));
-	} catch {
-		continue;
-	}
-	return resolved;
-}
-async function loadBundledModule() {
-	try {
-		const imported = await import("../../wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm");
-		return imported.default instanceof WebAssembly.Module ? imported.default : null;
-	} catch {
-		return null;
-	}
-}
-async function initializeCompiledModule(module) {
-	await __wbg_init({ module_or_path: module });
-	init_router_ab_ecdsa_signing_worker();
-	isReady = true;
-}
-async function initializeNodeWasm(urls) {
-	const { fileURLToPath } = await import("node:url");
-	const { readFile } = await import("node:fs/promises");
-	for (const url of urls) try {
-		const bytes = await readFile(fileURLToPath(url));
-		const moduleBytes = new ArrayBuffer(bytes.byteLength);
-		new Uint8Array(moduleBytes).set(bytes);
-		await initializeCompiledModule(await WebAssembly.compile(moduleBytes));
-		return;
-	} catch {
-		continue;
-	}
-	throw new Error(`[threshold-ecdsa] Failed to initialize Router A/B signing worker WASM: ${urls.map(String).join(", ")}`);
-}
-async function initializeWorkerWasm(urls) {
-	let lastError = null;
-	const bundledModule = await loadBundledModule();
-	if (bundledModule) try {
-		await initializeCompiledModule(bundledModule);
-		return;
-	} catch (error) {
-		lastError = error;
-	}
-	for (const url of urls) try {
-		await __wbg_init({ module_or_path: url });
-		init_router_ab_ecdsa_signing_worker();
-		isReady = true;
-		return;
-	} catch (error) {
-		lastError = error;
-	}
-	throw lastError instanceof Error ? lastError : /* @__PURE__ */ new Error("Failed to initialize Router A/B signing worker WASM");
-}
-async function initializeWasm() {
-	const urls = resolveWasmUrls();
-	if (isNodeEnvironment()) {
-		await initializeNodeWasm(urls);
-		return;
-	}
-	await initializeWorkerWasm(urls);
-}
-function ensureRouterAbEcdsaSigningWorkerWasm() {
-	initPromise ??= initializeWasm();
-	return initPromise;
-}
-function requireReady() {
-	if (!isReady) throw new Error("[threshold-ecdsa] Router A/B signing worker WASM is not ready");
-}
-function checkedBytes(label, value, expectedLength) {
-	if (value.length !== expectedLength) throw new Error(`${label} must be ${expectedLength} bytes (got ${value.length})`);
-	return value;
-}
-async function roleLocalThresholdEcdsaDerivationRelayerBootstrap(input) {
-	await ensureRouterAbEcdsaSigningWorkerWasm();
-	requireReady();
-	const raw = router_ab_ecdsa_derivation_relayer_bootstrap({
-		applicationBindingDigest: Array.from(checkedBytes("applicationBindingDigest", input.applicationBindingDigest, 32)),
-		relayerKeyId: input.relayerKeyId,
-		yRelayer32Le: Array.from(checkedBytes("yRelayer32Le", input.yRelayer32Le, 32)),
-		clientPublicKey33: Array.from(checkedBytes("clientPublicKey33", input.clientPublicKey33, 33)),
-		clientShareRetryCounter: input.clientShareRetryCounter
-	});
-	return {
-		contextBinding32: checkedBytes("contextBinding32", raw.contextBinding32, 32),
-		relayerShare32: checkedBytes("relayerShare32", raw.relayerShare32, 32),
-		relayerPublicKey33: checkedBytes("relayerPublicKey33", raw.relayerPublicKey33, 33),
-		groupPublicKey33: checkedBytes("groupPublicKey33", raw.groupPublicKey33, 33),
-		ethereumAddress20: checkedBytes("ethereumAddress20", raw.ethereumAddress20, 20),
-		relayerShareRetryCounter: raw.relayerShareRetryCounter,
-		publicTranscriptDigest32: checkedBytes("publicTranscriptDigest32", raw.publicTranscriptDigest32, 32)
-	};
-}
-//#endregion
-export { ensureRouterAbEcdsaSigningWorkerWasm, roleLocalThresholdEcdsaDerivationRelayerBootstrap };
-
-//# sourceMappingURL=routerAbEcdsaSigningWorkerWasm.js.map

package/dist/esm/core/ThresholdService/secureRandomId.js

@@ -1,9 +0,0 @@
-import { secureRandomBase64Url } from "../../shared-ts/src/utils/secureRandomId.js";
-//#region src/core/ThresholdService/secureRandomId.ts
-function secureRandomIdFragment() {
-	return secureRandomBase64Url(32, "threshold session IDs");
-}
-//#endregion
-export { secureRandomIdFragment };
-
-//# sourceMappingURL=secureRandomId.js.map

package/dist/esm/core/authService/record.js

@@ -1,8 +0,0 @@
-//#region src/core/authService/record.ts
-function isObject(v) {
-	return !!v && typeof v === "object" && !Array.isArray(v);
-}
-//#endregion
-export { isObject };
-
-//# sourceMappingURL=record.js.map

package/dist/esm/core/authService/thresholdRuntimePolicy.js

@@ -1,19 +0,0 @@
-import { normalizeRuntimePolicyScope } from "../../shared-ts/src/threshold/signingRootScope.js";
-//#region src/core/authService/thresholdRuntimePolicy.ts
-function normalizeThresholdRuntimePolicyScope(raw) {
-	try {
-		return normalizeRuntimePolicyScope(raw);
-	} catch {
-		return;
-	}
-}
-function thresholdRuntimePolicyScopesEqual(leftRaw, rightRaw) {
-	const left = normalizeThresholdRuntimePolicyScope(leftRaw);
-	const right = normalizeThresholdRuntimePolicyScope(rightRaw);
-	if (!left || !right) return !left && !right;
-	return left.orgId === right.orgId && left.projectId === right.projectId && left.envId === right.envId && left.signingRootVersion === right.signingRootVersion;
-}
-//#endregion
-export { normalizeThresholdRuntimePolicyScope, thresholdRuntimePolicyScopesEqual };
-
-//# sourceMappingURL=thresholdRuntimePolicy.js.map

package/dist/esm/core/authService/walletRegistrationPlanning.js

@@ -1,49 +0,0 @@
-import { normalizeOptionalTrimmedString } from "../../shared-ts/src/utils/normalize.js";
-import "../../shared-ts/src/utils/validation.js";
-import { thresholdEcdsaChainTargetFromValue } from "../thresholdEcdsaChainTarget.js";
-import { isObject } from "./record.js";
-import { normalizeThresholdRuntimePolicyScope } from "./thresholdRuntimePolicy.js";
-//#region src/core/authService/walletRegistrationPlanning.ts
-function normalizeAdjacentFlowEcdsaPrepareSpec(raw) {
-	if (raw == null) return {
-		ok: true,
-		value: null
-	};
-	if (!isObject(raw)) return {
-		ok: false,
-		code: "invalid_body",
-		message: "threshold_ecdsa_prepare must be an object"
-	};
-	const chainTargetRaw = raw.chainTargets ?? raw.chain_targets;
-	const participantIdRaw = raw.participantIds ?? raw.participant_ids;
-	const chainTargets = Array.isArray(chainTargetRaw) ? chainTargetRaw.map((target) => thresholdEcdsaChainTargetFromValue(target)) : [];
-	const normalizedChainTargets = chainTargets.filter((target) => Boolean(target));
-	if (normalizedChainTargets.length === 0 || normalizedChainTargets.length !== chainTargets.length) return {
-		ok: false,
-		code: "invalid_body",
-		message: "threshold_ecdsa_prepare.chainTargets must contain valid chain targets"
-	};
-	const participantIds = Array.isArray(participantIdRaw) ? participantIdRaw.map((id) => Number(id)).filter((id) => Number.isInteger(id) && id > 0) : [];
-	if (participantIds.length === 0) return {
-		ok: false,
-		code: "invalid_body",
-		message: "threshold_ecdsa_prepare.participantIds must contain positive integers"
-	};
-	const runtimePolicyScope = normalizeThresholdRuntimePolicyScope(raw.runtimePolicyScope ?? raw.runtime_policy_scope);
-	const signingRootId = normalizeOptionalTrimmedString(raw.signingRootId ?? raw.signing_root_id);
-	const signingRootVersion = normalizeOptionalTrimmedString(raw.signingRootVersion ?? raw.signing_root_version);
-	return {
-		ok: true,
-		value: {
-			chainTargets: normalizedChainTargets,
-			participantIds: Array.from(new Set(participantIds)).sort((a, b) => a - b),
-			...runtimePolicyScope ? { runtimePolicyScope } : {},
-			...signingRootId ? { signingRootId } : {},
-			...signingRootVersion ? { signingRootVersion } : {}
-		}
-	};
-}
-//#endregion
-export { normalizeAdjacentFlowEcdsaPrepareSpec };
-
-//# sourceMappingURL=walletRegistrationPlanning.js.map

package/dist/esm/core/deviceLinking/index.js

@@ -1,5 +0,0 @@
-import { LINKED_DEVICE_CLOCK_SKEW_TOLERANCE_MS_V1, LINKED_DEVICE_REQUEST_PROOF_HEADER_V1, LINKED_DEVICE_REQUEST_PROOF_MAX_TTL_MS_V1, computeLinkedDevicePublicKeyDigestV1, computeLinkedDeviceRequestProofDigestV1, encodeLinkedDeviceRequestProofV1 } from "../../shared-ts/src/device-linking/requestProof.js";
-import { LinkedDeviceRequestProofVerifierV1, parseLinkedDeviceRequestProofV1 } from "./requestProof.js";
-import { LinkedDeviceListCursorError, LinkedDeviceManagementServiceV1, MAX_LINKED_DEVICE_LIST_LIMIT_V1, decodeLinkedDeviceListCursorV1, encodeLinkedDeviceListCursorV1 } from "./linkedDeviceManagement.js";
-import { LinkedDeviceRetiredSessionShapeErrorV1, LinkedDeviceSessionServiceV1, buildAuthorityActiveSessionRecordV1, buildAuthorityPendingLocalInstallSessionRecordV1, buildUnclaimedSessionRecordV1, digestTranscriptV1, linkedDeviceQrPayloadsEqualV1, parseLinkedDeviceSessionRecordV1, sourceKeyManifestDigestForFamilyV1 } from "./linkedDeviceSession.js";
-export { LINKED_DEVICE_CLOCK_SKEW_TOLERANCE_MS_V1, LINKED_DEVICE_REQUEST_PROOF_HEADER_V1, LINKED_DEVICE_REQUEST_PROOF_MAX_TTL_MS_V1, LinkedDeviceListCursorError, LinkedDeviceManagementServiceV1, LinkedDeviceRequestProofVerifierV1, LinkedDeviceRetiredSessionShapeErrorV1, LinkedDeviceSessionServiceV1, MAX_LINKED_DEVICE_LIST_LIMIT_V1, buildAuthorityActiveSessionRecordV1, buildAuthorityPendingLocalInstallSessionRecordV1, buildUnclaimedSessionRecordV1, computeLinkedDevicePublicKeyDigestV1, computeLinkedDeviceRequestProofDigestV1, decodeLinkedDeviceListCursorV1, digestTranscriptV1, encodeLinkedDeviceListCursorV1, encodeLinkedDeviceRequestProofV1, linkedDeviceQrPayloadsEqualV1, parseLinkedDeviceRequestProofV1, parseLinkedDeviceSessionRecordV1, sourceKeyManifestDigestForFamilyV1 };

package/dist/esm/core/errors.js

@@ -1,54 +0,0 @@
-import { isObject, isString } from "../shared-ts/src/utils/validation.js";
-//#region src/core/errors.ts
-/**
-* Parse a NEAR FinalExecutionOutcome and surface a human-readable error
-* string when common contract/account failures are detected.
-*
-* This helper is intentionally conservative: it never throws, and returns
-* null when it cannot confidently extract a useful message.
-*/
-function parseContractExecutionError(result, accountId) {
-	try {
-		if (result.status && isObject(result.status) && "Failure" in result.status) {
-			console.log(`Transaction failed:`, result.status.Failure);
-			return `Transaction failed: ${JSON.stringify(result.status.Failure)}`;
-		}
-		const receipts = result.receipts_outcome || [];
-		for (const receipt of receipts) {
-			const status = receipt.outcome?.status;
-			if (status?.Failure) {
-				const failure = status.Failure;
-				console.log(`Receipt failure detected:`, failure);
-				if (failure.ActionError?.kind) {
-					const actionKind = failure.ActionError.kind;
-					if (actionKind.AccountAlreadyExists) {
-						const info = actionKind.AccountAlreadyExists;
-						return `Account ${info.accountId ?? info.account_id ?? accountId} already exists on NEAR network`;
-					}
-					if (actionKind.AccountDoesNotExist) return `Referenced account ${actionKind.AccountDoesNotExist.account_id ?? accountId} does not exist`;
-					if (actionKind.InsufficientStake) return `Insufficient stake for account creation: ${actionKind.InsufficientStake.account_id ?? accountId}`;
-					if (actionKind.LackBalanceForState) return `Insufficient balance for account state: ${actionKind.LackBalanceForState.account_id ?? accountId}`;
-					const executionError = actionKind?.FunctionCallError?.ExecutionError;
-					if (typeof executionError === "string" && executionError.includes("missing field `source`")) return "Contract input JSON is missing required field `source` (Outlayer `request_execution` accepts `source`; `code_source` is not supported).";
-					return `Account creation failed: ${JSON.stringify(actionKind)}`;
-				}
-				return `Contract execution failed: ${JSON.stringify(failure)}`;
-			}
-			const logs = receipt.outcome?.logs || [];
-			for (const log of logs) if (isString(log)) {
-				if (log.includes("AccountAlreadyExists") || log.includes("account already exists")) return `Account ${accountId} already exists`;
-				if (log.includes("AccountDoesNotExist")) return `Referenced account does not exist`;
-				if (log.includes("Cannot deserialize the contract state")) return `Contract state deserialization failed. This may be due to a contract upgrade. Please try again or contact support.`;
-				if (log.includes("GuestPanic")) return `Contract execution panic: ${log}`;
-			}
-		}
-		return null;
-	} catch (parseError) {
-		console.warn(`Error parsing contract execution results:`, parseError);
-		return null;
-	}
-}
-//#endregion
-export { parseContractExecutionError };
-
-//# sourceMappingURL=errors.js.map

package/dist/esm/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.js

@@ -1,39 +0,0 @@
-import { coerceLogger } from "../logger.js";
-import { RouterAbEcdsaPresignRuntime, parseRouterAbEcdsaPresignRuntimeConfig } from "./RouterAbEcdsaPresignRuntime.js";
-import { createCloudflareDurableObjectThresholdEcdsaStores, createCloudflareDurableObjectThresholdEd25519Stores } from "../ThresholdService/stores/CloudflareDurableObjectStore.js";
-import { RouterAbNormalSigningRuntime, parseRouterAbNormalSigningRuntimeConfig, requireRouterAbConfiguredSigningWorkerPrivateTransport } from "./RouterAbNormalSigningRuntime.js";
-//#region src/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.ts
-async function ensureCloudflareRouterAbSigningRuntimeReady() {
-	await this.getRelayerAccount();
-}
-function createCloudflareDurableObjectRouterAbSigningRuntimes(input) {
-	const logger = coerceLogger(input.logger);
-	const ed25519Stores = createCloudflareDurableObjectThresholdEd25519Stores({
-		config: input.thresholdStore,
-		logger
-	});
-	const ecdsaStores = createCloudflareDurableObjectThresholdEcdsaStores({
-		config: input.thresholdStore,
-		logger
-	});
-	if (!ed25519Stores || !ecdsaStores) throw new Error("Cloudflare D1 Router API thresholdStore must use kind: \"cloudflare-do\"");
-	const ensureReady = ensureCloudflareRouterAbSigningRuntimeReady.bind(input.auth);
-	const normalSigningConfig = parseRouterAbNormalSigningRuntimeConfig(input.thresholdStore);
-	const signingWorkerTransport = requireRouterAbConfiguredSigningWorkerPrivateTransport(normalSigningConfig.signingWorkerTransport);
-	return {
-		normalSigning: new RouterAbNormalSigningRuntime({
-			walletSessionStore: ed25519Stores.walletSessionStore,
-			ecdsaWalletSessionStore: ecdsaStores.walletSessionStore,
-			config: normalSigningConfig
-		}),
-		ecdsaPresign: new RouterAbEcdsaPresignRuntime({
-			config: parseRouterAbEcdsaPresignRuntimeConfig(input.thresholdStore),
-			signingWorkerTransport,
-			ensureReady
-		})
-	};
-}
-//#endregion
-export { createCloudflareDurableObjectRouterAbSigningRuntimes };
-
-//# sourceMappingURL=createCloudflareDurableObjectRouterAbSigningRuntimes.js.map

package/dist/esm/core/signingLanes/index.js

@@ -1,8 +0,0 @@
-import { LaneLifecycleApplicationService } from "./LaneLifecycleApplicationService.js";
-import { projectActiveOwnerWalletExecutionLane, resolveActiveOwnerWalletExecutionLane, resolveWalletAuthMethodIdForAuthority } from "./WalletExecutionLaneProjection.js";
-import { assertEcdsaServerRetirementReceiptMatchesExpectationV1, buildEcdsaServerRetirementRequestV1, parseAndVerifyEcdsaServerRetirementEffectV1 } from "./ecdsaServerRetirement.js";
-import { LaneEnrollmentActivation } from "./LaneEnrollmentActivation.js";
-import { LaneEnrollmentRevocation } from "./LaneEnrollmentRevocation.js";
-import { LaneAggregateRevocationApplicationService } from "./LaneAggregateRevocationApplicationService.js";
-import { assertNonEmptyVersion, protocolCasResultToAdmissionResult } from "./LaneLifecycleStore.js";
-export { LaneAggregateRevocationApplicationService, LaneEnrollmentActivation, LaneEnrollmentRevocation, LaneLifecycleApplicationService, assertEcdsaServerRetirementReceiptMatchesExpectationV1, assertNonEmptyVersion, buildEcdsaServerRetirementRequestV1, parseAndVerifyEcdsaServerRetirementEffectV1, projectActiveOwnerWalletExecutionLane, protocolCasResultToAdmissionResult, resolveActiveOwnerWalletExecutionLane, resolveWalletAuthMethodIdForAuthority };

package/dist/esm/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.js

@@ -1,55 +0,0 @@
-import { routerAbMpcMaterialActivationRefToWire, sameRouterAbMpcMaterialActivationRef } from "../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
-import { findForbiddenTenantRootSelectorFieldV1, resolveTenantRootIdentityV1 } from "./tenantRootIdentityResolution.js";
-//#region src/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.ts
-function compositionFailure(code, message) {
-	return {
-		ok: false,
-		code,
-		message
-	};
-}
-function ecdsaWalletSessionWalletId(admission) {
-	return String(admission.context.authorization.session.walletId);
-}
-function ecdsaWalletSessionMaterialActivation(admission) {
-	return routerAbMpcMaterialActivationRefToWire(admission.admission.materialActivation);
-}
-function b5MaterialMatchesEcdsaWalletSessionAdmission(input) {
-	if (!sameRouterAbMpcMaterialActivationRef(input.activeMaterial.materialActivation, input.materialActivation)) return compositionFailure("material_activation_mismatch", "B5 material activation does not match the exact B4 admission");
-	const normalSigning = input.activeMaterial.routerAbEcdsaDerivationNormalSigning;
-	const signer = input.admission.admission.signer;
-	if (normalSigning.scope.wallet_id !== String(signer.walletId)) return compositionFailure("wallet_mismatch", "B5 normal-signing wallet ID does not match the B4 signer");
-	if (normalSigning.scope.public_identity.threshold_public_key33_b64u !== signer.thresholdPublicKey33B64u) return compositionFailure("threshold_public_key_mismatch", "B5 normal-signing threshold public key does not match the B4 signer");
-	return null;
-}
-async function resolveTenantRootEcdsaWalletSessionCompositionV1(input) {
-	const forbiddenSelector = findForbiddenTenantRootSelectorFieldV1(input);
-	if (forbiddenSelector) return compositionFailure("caller_selected_tenant_root", `Caller-supplied tenant-root selector field is forbidden: ${forbiddenSelector}`);
-	const materialActivation = ecdsaWalletSessionMaterialActivation(input.admission);
-	const activeMaterial = await input.resolveEcdsaMaterialActivation({
-		walletId: ecdsaWalletSessionWalletId(input.admission),
-		materialActivation
-	});
-	if (!activeMaterial.ok) return compositionFailure(activeMaterial.code, activeMaterial.message);
-	const admissionMismatch = b5MaterialMatchesEcdsaWalletSessionAdmission({
-		admission: input.admission,
-		activeMaterial,
-		materialActivation
-	});
-	if (admissionMismatch) return admissionMismatch;
-	const identity = resolveTenantRootIdentityV1({
-		kind: "ecdsa_b5_active_material",
-		activeMaterial
-	});
-	if (!identity.ok) return compositionFailure(identity.code, identity.message);
-	return {
-		ok: true,
-		admission: input.admission,
-		activeMaterial,
-		tenantRootIdentity: identity.identity
-	};
-}
-//#endregion
-export { resolveTenantRootEcdsaWalletSessionCompositionV1 };
-
-//# sourceMappingURL=tenantRootEcdsaWalletSessionComposition.js.map

package/dist/esm/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.js

@@ -1,56 +0,0 @@
-import { base64UrlEncode } from "../../../shared-ts/src/utils/base64.js";
-import { routerAbMpcMaterialActivationRefToWire, sameRouterAbMpcMaterialActivationRef } from "../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
-import { findForbiddenTenantRootSelectorFieldV1, resolveTenantRootIdentityV1 } from "./tenantRootIdentityResolution.js";
-//#region src/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.ts
-function compositionFailure(code, message) {
-	return {
-		ok: false,
-		code,
-		message
-	};
-}
-function ed25519WalletSessionWalletId(admission) {
-	return String(admission.context.authorization.session.walletId);
-}
-function ed25519WalletSessionMaterialActivation(admission) {
-	return routerAbMpcMaterialActivationRefToWire(admission.admission.materialActivation);
-}
-function b5MaterialMatchesEd25519WalletSessionAdmission(input) {
-	if (!sameRouterAbMpcMaterialActivationRef(input.activeMaterial.materialActivation, input.materialActivation)) return compositionFailure("material_activation_mismatch", "B5 material activation does not match the exact B4 admission");
-	const exportIdentity = input.activeMaterial.exportIdentity;
-	const signer = input.admission.admission.signer;
-	if (exportIdentity.scope.account_id !== String(signer.walletId) || exportIdentity.application_binding.wallet_id !== String(signer.walletId)) return compositionFailure("wallet_mismatch", "B5 Ed25519 wallet ID does not match the B4 signer");
-	if (base64UrlEncode(Uint8Array.from(exportIdentity.registered_public_key)) !== signer.registeredPublicKeyB64u) return compositionFailure("registered_public_key_mismatch", "B5 Ed25519 public key does not match the B4 signer");
-	return null;
-}
-async function resolveTenantRootEd25519WalletSessionCompositionV1(input) {
-	const forbiddenSelector = findForbiddenTenantRootSelectorFieldV1(input);
-	if (forbiddenSelector) return compositionFailure("caller_selected_tenant_root", `Caller-supplied tenant-root selector field is forbidden: ${forbiddenSelector}`);
-	const materialActivation = ed25519WalletSessionMaterialActivation(input.admission);
-	const activeMaterial = await input.resolveEd25519MaterialActivation({
-		walletId: ed25519WalletSessionWalletId(input.admission),
-		materialActivation
-	});
-	if (!activeMaterial.ok) return compositionFailure(activeMaterial.code, activeMaterial.message);
-	const admissionMismatch = b5MaterialMatchesEd25519WalletSessionAdmission({
-		admission: input.admission,
-		activeMaterial,
-		materialActivation
-	});
-	if (admissionMismatch) return admissionMismatch;
-	const identity = resolveTenantRootIdentityV1({
-		kind: "ed25519_b5_active_material",
-		activeMaterial
-	});
-	if (!identity.ok) return compositionFailure(identity.code, identity.message);
-	return {
-		ok: true,
-		admission: input.admission,
-		activeMaterial,
-		tenantRootIdentity: identity.identity
-	};
-}
-//#endregion
-export { resolveTenantRootEd25519WalletSessionCompositionV1 };
-
-//# sourceMappingURL=tenantRootEd25519WalletSessionComposition.js.map

package/dist/esm/shared-ts/src/signing-lanes/linkedEcdsaScope.js

@@ -1 +0,0 @@
-import "./rotationParsers.js";