@seams/wallet-server 0.7.1 → 0.8.0

package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts

@@ -44,10 +44,6 @@ export type CapabilityOperationRef = {
         readonly operationKind: CapabilityOperationKindByCapability[K];
     };
 }[CapabilityKind];
-export declare const AUTH_FACTOR_KINDS: {
-    readonly passkey: "passkey";
-    readonly emailOtp: "email_otp";
-};
 export declare const AUTHORIZATION_EVIDENCE_KINDS: {
     readonly seamsSession: "seams_session";
     readonly passkeyAssertion: "passkey_assertion";

package/dist/types/shared-ts/src/authorization/delegatedAuthority.d.ts

@@ -1,5 +1,6 @@
 import type { AuthorizationParseResult } from './capabilityKinds';
-export type DelegatedWalletPermissionV1 = 'sign' | 'export_keys' | 'link_devices' | 'revoke_devices';
+export type DelegatedWalletPermissionV1 = (typeof DELEGATED_WALLET_PERMISSION_VALUES)[number];
+declare const DELEGATED_WALLET_PERMISSION_VALUES: readonly ["export_keys", "link_devices", "revoke_devices", "sign"];
 type CanonicalPermissionTuple = readonly [
     DelegatedWalletPermissionV1,
     ...DelegatedWalletPermissionV1[]

package/dist/types/shared-ts/src/authorization/walletSessionIssuance.d.ts

@@ -16,14 +16,21 @@ export type WalletSessionCommittedIdentityV1 = {
     readonly quotaId: MpcWalletSigningQuotaId;
 };
 /** The credential-free retry signal shared by issuer response boundaries. */
-type WalletSessionAlreadyCommittedResponseV1 = {
+export type WalletSessionAlreadyCommittedResponseV1 = {
     readonly ok: false;
     readonly code: 'already_committed';
     readonly message: string;
     readonly next: 'unlock_exact_method';
     readonly committed: WalletSessionCommittedIdentityV1;
 };
+/** An issuer rejection that carries no committed identity to retry against. */
+export type WalletSessionRejectionV1 = {
+    readonly ok: false;
+    readonly code: string;
+    readonly message: string;
+    readonly next?: never;
+    readonly committed?: never;
+};
 export declare function parseWalletSessionAlreadyCommittedResponseV1(value: unknown): WalletSessionAlreadyCommittedResponseV1 | null;
 export declare function parseWalletUnlockAlreadyCommittedResponseV1(value: unknown): WalletSessionAlreadyCommittedResponseV1 | null;
-export {};
 //# sourceMappingURL=walletSessionIssuance.d.ts.map

package/dist/types/shared-ts/src/authorization/walletSignerActivationEquality.d.ts

@@ -0,0 +1,4 @@
+import type { WalletEcdsaSignerActivationV1, WalletEd25519SignerActivationV1 } from './walletAuthority';
+export declare function sameWalletEd25519SignerActivationV1(left: WalletEd25519SignerActivationV1, right: WalletEd25519SignerActivationV1): boolean;
+export declare function sameWalletEcdsaSignerActivationV1(left: WalletEcdsaSignerActivationV1, right: WalletEcdsaSignerActivationV1): boolean;
+//# sourceMappingURL=walletSignerActivationEquality.d.ts.map

package/dist/types/shared-ts/src/device-linking/committedSignerPackages.d.ts

@@ -7,6 +7,7 @@ import { type PendingWalletAuthMethodRecordV2 } from '../utils/walletAuthMethodR
 import { type LinkedDeviceEd25519ExportRootPackageV1 } from './ed25519ExportRoot';
 import { type LinkedDeviceEcdsaEncryptedSourceContributionV1, type LinkedDeviceEcdsaSourcePreservingActivationReceiptV1 } from './sourceContribution';
 import { type RouterAbEd25519YaoApplicationBindingFactsV1, type RouterAbEd25519YaoActivationPublicReceiptV1, type RouterAbEd25519YaoActivationClientPackageV1, type RouterAbEd25519YaoCeremonyBindingV1 } from '../utils/routerAbEd25519Yao';
+import type { ReadonlyExclusiveUnion } from '../utils/variant';
 export type CommittedEd25519SignerPackageV1 = {
     readonly kind: 'committed_ed25519_signer_package_v1';
     readonly materialActivation: MpcMaterialActivationRef;
@@ -23,22 +24,20 @@ export type CommittedEcdsaSignerPackageV1 = {
     readonly encryptedTargetClientShare: LinkedDeviceEcdsaEncryptedSourceContributionV1;
     readonly activationReceipt: LinkedDeviceEcdsaSourcePreservingActivationReceiptV1;
 };
-export type CommittedSignerPackageSetV1 = {
+export type CommittedSignerPackageSetV1 = ReadonlyExclusiveUnion<{
     readonly kind: 'committed_signer_package_set_v1';
     readonly keyFamilies: readonly ['ed25519'];
     readonly ed25519: CommittedEd25519SignerPackageV1;
-    readonly ecdsa?: never;
 } | {
     readonly kind: 'committed_signer_package_set_v1';
     readonly keyFamilies: readonly ['ecdsa_secp256k1'];
-    readonly ed25519?: never;
     readonly ecdsa: CommittedEcdsaSignerPackageV1;
 } | {
     readonly kind: 'committed_signer_package_set_v1';
     readonly keyFamilies: readonly ['ed25519', 'ecdsa_secp256k1'];
     readonly ed25519: CommittedEd25519SignerPackageV1;
     readonly ecdsa: CommittedEcdsaSignerPackageV1;
-};
+}>;
 export type CommittedAuthorityPackagesV1 = {
     readonly kind: 'committed_authority_packages_v1';
     readonly authority: PendingWalletAuthorityV1;

package/dist/types/shared-ts/src/device-linking/contracts.d.ts

@@ -14,6 +14,7 @@ import type { WalletEmailOtpEnrollmentMaterialV1 } from '../utils/registrationAu
 import type { VerifiedEmailAddress } from '../utils/domainIds';
 import type { LinkedDeviceOrdinaryMaterialSourceContributionPreparationV1, LinkedDeviceOrdinaryMaterialSourceContributionTupleV1 } from './sourceContribution';
 import type { LinkedDeviceWalletSessionCredentialDeliveryBindingV1, LinkedDeviceWalletSessionCredentialDeliveryV1 } from './walletSessionCredentialDelivery';
+import type { ReadonlyExclusiveUnion } from '../utils/variant';
 export type { LinkedDeviceEcdsaSourceContributionBindingV1, LinkedDeviceEcdsaSourceContributionPackageV1, LinkedDeviceEcdsaSourceContributionPreparationV1, LinkedDeviceEcdsaSourceDerivationV1, LinkedDeviceEcdsaSourcePreservingActivationReceiptV1, LinkedDeviceEcdsaSourceContributionV1, LinkedDeviceEcdsaSourceSignerIdentityV1, LinkedDeviceEcdsaTargetRecipientPreparationV1, LinkedDeviceEd25519SourceContributionPreparationV1, LinkedDeviceEd25519SourceContributionV1, LinkedDeviceOrdinaryMaterialSourceContributionPreparationV1, LinkedDeviceOrdinaryMaterialSourceContributionPreparationTupleV1, LinkedDeviceOrdinaryMaterialSourceContributionTupleV1, LinkedDeviceOrdinaryMaterialSourceContributionV1, } from './sourceContribution';
 export type { CommittedAuthorityPackagesV1, CommittedEd25519SignerPackageV1, CommittedEcdsaSignerPackageV1, CommittedSignerPackageSetDigestInputV1, CommittedSignerPackageSetV1, } from './committedSignerPackages';
 /** Public key bytes carried by the link session, encoded as canonical base64url. */
@@ -531,97 +532,40 @@ export type LinkPrecommitFailureV1 = {
     readonly reason: string;
 };
 /** The only durable states retained by the linear link-session boundary. */
-export type LinkSessionStateV1 = {
+export type LinkSessionStateV1 = ReadonlyExclusiveUnion<{
     readonly state: 'displaying_qr';
-    readonly deviceId?: never;
-    readonly authorityId?: never;
-    readonly packageSetDigestB64u?: never;
-    readonly activatedAtMs?: never;
-    readonly error?: never;
-    readonly cancelledAtMs?: never;
-    readonly expiredAtMs?: never;
 } | {
     readonly state: 'claimed';
     readonly deviceId: DeviceId;
-    readonly authorityId?: never;
-    readonly packageSetDigestB64u?: never;
-    readonly activatedAtMs?: never;
-    readonly error?: never;
-    readonly cancelledAtMs?: never;
-    readonly expiredAtMs?: never;
 } | {
     readonly state: 'awaiting_target_factor';
     readonly deviceId: DeviceId;
-    readonly authorityId?: never;
-    readonly packageSetDigestB64u?: never;
-    readonly activatedAtMs?: never;
-    readonly error?: never;
-    readonly cancelledAtMs?: never;
-    readonly expiredAtMs?: never;
 } | {
     readonly state: 'awaiting_source_contribution';
     readonly deviceId: DeviceId;
-    readonly authorityId?: never;
-    readonly packageSetDigestB64u?: never;
-    readonly activatedAtMs?: never;
-    readonly error?: never;
-    readonly cancelledAtMs?: never;
-    readonly expiredAtMs?: never;
 } | {
     readonly state: 'provisioning';
     readonly deviceId: DeviceId;
-    readonly authorityId?: never;
-    readonly packageSetDigestB64u?: never;
-    readonly activatedAtMs?: never;
-    readonly error?: never;
-    readonly cancelledAtMs?: never;
-    readonly expiredAtMs?: never;
 } | {
     readonly state: 'authority_pending_local_install';
     readonly deviceId: DeviceId;
     readonly authorityId: WalletAuthorityId;
     readonly packageSetDigestB64u: DigestB64u;
-    readonly activatedAtMs?: never;
-    readonly error?: never;
-    readonly cancelledAtMs?: never;
-    readonly expiredAtMs?: never;
 } | {
     readonly state: 'active';
     readonly deviceId: DeviceId;
     readonly authorityId: WalletAuthorityId;
     readonly activatedAtMs: number;
-    readonly packageSetDigestB64u?: never;
-    readonly error?: never;
-    readonly cancelledAtMs?: never;
-    readonly expiredAtMs?: never;
 } | {
     readonly state: 'failed_before_commit';
     readonly error: LinkPrecommitFailureV1;
-    readonly deviceId?: never;
-    readonly authorityId?: never;
-    readonly packageSetDigestB64u?: never;
-    readonly activatedAtMs?: never;
-    readonly cancelledAtMs?: never;
-    readonly expiredAtMs?: never;
 } | {
     readonly state: 'cancelled';
     readonly cancelledAtMs: number;
-    readonly deviceId?: never;
-    readonly authorityId?: never;
-    readonly packageSetDigestB64u?: never;
-    readonly activatedAtMs?: never;
-    readonly error?: never;
-    readonly expiredAtMs?: never;
 } | {
     readonly state: 'expired';
     readonly expiredAtMs: number;
-    readonly deviceId?: never;
-    readonly authorityId?: never;
-    readonly packageSetDigestB64u?: never;
-    readonly activatedAtMs?: never;
-    readonly error?: never;
-    readonly cancelledAtMs?: never;
-};
+}>;
 export type VerifiedSourceAuthorityV1 = {
     readonly authority: ActiveWalletAuthorityV1;
     readonly authMethodId: WalletAuthMethodId;
@@ -702,7 +646,7 @@ export type LinkedDeviceTargetCredentialRegistrationResultV1 = {
     readonly keyManifestDigestB64u: DigestB64u;
 };
 /** The ordinary session issued by activation and persisted by the browser. */
-export type WalletCapabilitySubjectV1 = {
+export type WalletCapabilitySubjectV1 = ReadonlyExclusiveUnion<{
     readonly kind: 'sign';
     readonly keyFamily: 'ed25519' | 'ecdsa_secp256k1';
     readonly materialActivation: MpcMaterialActivationRef;
@@ -712,9 +656,7 @@ export type WalletCapabilitySubjectV1 = {
     readonly materialActivation: MpcMaterialActivationRef;
 } | {
     readonly kind: 'link_devices' | 'revoke_devices';
-    readonly keyFamily?: never;
-    readonly materialActivation?: never;
-};
+}>;
 export type ActiveWalletSessionV1 = {
     readonly kind: 'active_wallet_session_v1';
     readonly walletId: WalletId;
@@ -816,6 +758,7 @@ export type LocalAuthorityActivationFinalAckV1 = {
     readonly installationReceiptDigestB64u: DigestB64u;
     readonly acknowledgedAtMs: number;
 };
+export declare function isLinkSessionTerminalFailureV1(state: LinkSessionStateV1): boolean;
 export declare function assertNeverLinkSessionStateV1(value: never): never;
 /**
  * Authenticated Device 2 projection for the linear link lifecycle. The

package/dist/types/shared-ts/src/device-linking/sourceContribution.d.ts

@@ -179,5 +179,7 @@ export declare function parseLinkedDeviceEcdsaSourcePreservingActivationReceiptV
 export declare function parseLinkedDeviceEcdsaSourceContributionPackageV1(raw: unknown): LinkedDeviceEcdsaSourceContributionPackageV1;
 export declare function parseLinkedDeviceEcdsaSourceContributionBindingV1(raw: unknown): LinkedDeviceEcdsaSourceContributionBindingV1;
 export declare function parseLinkedDeviceEcdsaEncryptedSourceContributionV1(raw: unknown, label: string): LinkedDeviceEcdsaEncryptedSourceContributionV1;
+export declare function sameEcdsaSourceSigner(left: LinkedDeviceEcdsaSourceSignerIdentityV1, right: LinkedDeviceEcdsaSourceSignerIdentityV1): boolean;
+export declare function sameEcdsaTarget(left: LinkedDeviceEcdsaTargetRecipientPreparationV1, right: LinkedDeviceEcdsaTargetRecipientPreparationV1): boolean;
 export {};
 //# sourceMappingURL=sourceContribution.d.ts.map

package/dist/types/shared-ts/src/passkey-custody/custodyEnvelope.d.ts

@@ -2,6 +2,7 @@ import type { PasskeyEnvelopeId, WalletAuthMethodId, WalletId, WebAuthnCredentia
 import type { DigestB64u } from '../utils/canonicalPrimitives';
 import type { PasskeyCustodySecretBinding } from './custodySecretBinding';
 import type { EnvelopeCiphertextB64u, EnvelopeNonceB64u, EnvelopeRevision } from './primitives';
+import type { ExclusiveUnion } from '../utils/variant';
 export declare const WALLET_CUSTODY_ENVELOPE_VERSION_V2: "wallet_custody_envelope_v2";
 declare const PASSKEY_PRF_KEK_VERSION_V1: "passkey_prf_kek_hkdf_sha256_v1";
 declare const EMAIL_OTP_FACTOR_KEK_VERSION_V1: "email_otp_factor_kek_hkdf_sha256_v1";
@@ -34,37 +35,29 @@ export type WalletCustodyEnvelopeOwnership = {
     readonly kind: 'method_bound';
     readonly walletAuthMethodId: WalletAuthMethodId;
 };
-export type WalletCustodyEnvelopeFactor = {
+export type WalletCustodyEnvelopeFactor = ExclusiveUnion<{
     kind: 'passkey';
     rpId: WebAuthnRpId;
     credentialIdB64u: WebAuthnCredentialIdB64u;
     kekVersion: PasskeyPrfKekVersion;
-    enrollmentId?: never;
-    enrollmentSealKeyVersion?: never;
 } | {
     kind: 'email_otp';
     enrollmentId: string;
     enrollmentSealKeyVersion: string;
     kekVersion: EmailOtpFactorKekVersion;
-    rpId?: never;
-    credentialIdB64u?: never;
-};
-export type PasskeyCustodyEnvelopeLifecycle = {
+}>;
+export type PasskeyCustodyEnvelopeLifecycle = ExclusiveUnion<{
     state: 'active';
     activatedAtMs: number;
-    retiredAtMs?: never;
-    revokedAtMs?: never;
 } | {
     state: 'retired';
     activatedAtMs: number;
     retiredAtMs: number;
-    revokedAtMs?: never;
 } | {
     state: 'revoked';
     activatedAtMs: number;
     revokedAtMs: number;
-    retiredAtMs?: never;
-};
+}>;
 /**
  * Ciphertext plus public binding data for one factor-sealed custody secret.
  *

package/dist/types/shared-ts/src/passkey-custody/primitives.d.ts

@@ -8,6 +8,15 @@ export type Ed25519PublicKeyB64u = string & PasskeyCustodyBrand<'Ed25519PublicKe
 export type Secp256k1CompressedPublicKeyB64u = string & PasskeyCustodyBrand<'Secp256k1CompressedPublicKeyB64u'>;
 export type KeyCreationSignerSlot = number & PasskeyCustodyBrand<'KeyCreationSignerSlot'>;
 export type EnvelopeRevision = number & PasskeyCustodyBrand<'EnvelopeRevision'>;
+export declare function requireParsed<T>(result: {
+    readonly ok: true;
+    readonly value: T;
+} | {
+    readonly ok: false;
+    readonly error: {
+        readonly message: string;
+    };
+}, label: string): T;
 export declare function parseDigestField(value: unknown, label: string): DigestB64u;
 export declare function parseEnvelopeNonceB64u(value: unknown, label?: string): EnvelopeNonceB64u;
 export declare function parseEnvelopeCiphertextB64u(value: unknown, label?: string): EnvelopeCiphertextB64u;

package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts

@@ -1,8 +1,6 @@
-import type { DomainIdParseResult } from '../utils/domainIds';
 export type EvmFamilySigningKeySlotId = string & {
     readonly __evmFamilySigningKeySlotIdBrand: 'EvmFamilySigningKeySlotId';
 };
-export declare function parseEvmFamilySigningKeySlotId(raw: unknown): DomainIdParseResult<EvmFamilySigningKeySlotId>;
 export declare function requireEvmFamilySigningKeySlotId(value: unknown, label?: string): EvmFamilySigningKeySlotId;
 export declare function deriveEvmFamilySigningKeySlotId(input: {
     walletId: unknown;

package/dist/types/shared-ts/src/signing-lanes/execution.d.ts

@@ -1,8 +1,17 @@
 import type { AuthorizedOperationId, CapabilityId } from '../authorization/capabilityKinds';
 import type { CapabilityOperationFingerprintDigest } from '../authorization/operationFingerprint';
+import type { DigestB64u } from '../utils/canonicalPrimitives';
 import type { MpcMaterialActivationRef } from '../utils/domainIds';
-import type { LinkedDeviceEnrollmentId } from './ids';
-import type { ActiveSigningLaneReference } from './records';
+import type { ActiveSigningLaneReference, SigningLaneRecord, WalletKeyRecord } from './records';
+export type OwnerWalletExecutionLaneProjectionV1 = {
+    readonly kind: 'active_owner_wallet_execution_lane_projection_v1';
+    readonly walletKey: WalletKeyRecord;
+    readonly lane: Extract<SigningLaneRecord, {
+        readonly laneKind: 'owner_passkey' | 'owner_email_otp';
+    }>;
+    readonly materialActivation: MpcMaterialActivationRef;
+    readonly verifiedActivationReceiptDigestB64u: DigestB64u;
+};
 export type ClaimedWalletExecutionAuthorization = {
     readonly kind: 'claimed_wallet_execution_authorization_v1';
     readonly authorizedOperationId: AuthorizedOperationId;
@@ -23,16 +32,6 @@ export type PreparedOwnerWalletExecution = PreparedWalletExecutionBase & {
     readonly delegatedAuthorizationId?: never;
     readonly budgetClaim?: never;
 };
-export type PreparedLinkedDeviceWalletExecution = PreparedWalletExecutionBase & {
-    readonly kind: 'prepared_linked_device_wallet_execution';
-    readonly laneKind: 'linked_device';
-    readonly lane: ActiveSigningLaneReference & {
-        readonly laneKind: 'linked_device';
-    };
-    readonly linkedDeviceEnrollmentId: LinkedDeviceEnrollmentId;
-    readonly delegatedAuthorizationId?: never;
-    readonly budgetClaim?: never;
-};
 export declare function buildPreparedOwnerWalletExecution(input: {
     readonly authorization: ClaimedWalletExecutionAuthorization;
     readonly materialActivation: MpcMaterialActivationRef;

package/dist/types/shared-ts/src/signing-lanes/ids.d.ts

@@ -1,18 +1,4 @@
-import type { EcdsaCapabilityManifestId, EcdsaCapabilityManifestRevision } from '../utils/ecdsaCapabilityActivation';
-export type { LaneShareEpoch, LaneEnrollmentId, LaneOperationId, LaneOperationIdempotencyKey, LinkedDeviceId, LinkedDeviceEnrollmentId, LinkDeviceSessionId, SigningLaneId, WalletKeyId, Ed25519YaoSuiteId, EcdsaRelayerKeyId, } from '../utils/domainIds';
-export type EcdsaManifestIdentity = {
-    manifestId: EcdsaCapabilityManifestId;
-    manifestRevision: EcdsaCapabilityManifestRevision;
-};
-export type ThresholdEcdsaChainTarget = {
-    kind: 'evm';
-    namespace: 'eip155';
-    chainId: number;
-    networkSlug: string;
-} | {
-    kind: 'tempo';
-    chainId: number;
-    networkSlug: string;
-};
-export { parseLaneShareEpoch, parseLaneEnrollmentId, parseLaneOperationId, parseLaneOperationIdempotencyKey, parseLinkedDeviceId, parseLinkedDeviceEnrollmentId, parseLinkDeviceSessionId, parseSigningLaneId, parseWalletKeyId, parseEd25519YaoSuiteId, parseEcdsaRelayerKeyId, } from '../utils/domainIds';
+export type { LaneShareEpoch, LinkedDeviceId, LinkedDeviceEnrollmentId, LinkDeviceSessionId, SigningLaneId, WalletKeyId, EcdsaRelayerKeyId, } from '../utils/domainIds';
+export type { ThresholdEcdsaChainTarget } from '../utils/thresholdEcdsaChainTarget';
+export { parseLaneShareEpoch, parseLinkedDeviceId, parseLinkedDeviceEnrollmentId, parseLinkDeviceSessionId, parseSigningLaneId, parseWalletKeyId, parseEcdsaRelayerKeyId, } from '../utils/domainIds';
 //# sourceMappingURL=ids.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/index.d.ts

@@ -1,10 +1,6 @@
 export * from './ids';
 export * from './records';
 export * from './rotation';
-export * from './rotationParsers';
-export * from './rotationProtocolParsers';
-export * from './rotationDigests';
-export * from './rotationLifecycle';
 export * from './evmFamilySigningKeySlotId';
 export * from './participants';
 export * from './participantDigest';

package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts

@@ -24,6 +24,5 @@ export declare function buildOwnerLaneParticipantContinuityV1(args: {
     readonly sourceIdentityDigestB64u: DigestB64u;
 }): OwnerLaneParticipantContinuityV1;
 export declare function parseOwnerLaneParticipantContinuityV1(raw: unknown, label?: string): OwnerLaneParticipantContinuityV1;
-export declare function ownerLaneParticipantContinuityCanonicalBytesV1(input: OwnerLaneParticipantContinuityV1): Uint8Array;
 export declare function computeOwnerLaneParticipantBindingDigestV1(input: OwnerLaneParticipantContinuityV1): Promise<LaneParticipantBindingDigestB64u>;
 //# sourceMappingURL=ownerContinuity.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts

@@ -1,26 +1,8 @@
 import { type DigestB64u } from '../utils/canonicalPrimitives';
-import { type HpkePublicKeyB64u, type LaneHolderCustodyIdentityV1, type LaneHolderParticipantId, type LaneHolderParticipantRecordV1, type LaneParticipantBindingDigestB64u, type SigningWorkerParticipantId, type SigningWorkerParticipantRecordV1, type SigningWorkerRecipientIdentityV1, type SigningWorkerRecipientKeyDigestB64u } from './participants';
-type LaneHolderParticipantBindingInputV1 = {
-    readonly participantId: LaneHolderParticipantId;
-    readonly custody: LaneHolderCustodyIdentityV1;
-    readonly hpkePublicKeyB64u: HpkePublicKeyB64u;
-    readonly hpkePublicKeyDigestB64u: SigningWorkerRecipientKeyDigestB64u;
-};
-type SigningWorkerParticipantBindingInputV1 = {
-    readonly participantId: SigningWorkerParticipantId;
-    readonly recipient: SigningWorkerRecipientIdentityV1;
-};
 /** LP32(UTF8(value)) from the canonical lane encoding. */
 export declare function encodeLaneCanonicalTextV1(value: string): Uint8Array;
 /** LP32(BASE64URL_DECODE_CANONICAL_32(value)) from the canonical lane encoding. */
 export declare function encodeLaneCanonicalDigestV1(value: DigestB64u): Uint8Array;
 /** U64(value), encoded as unsigned big-endian bytes. */
 export declare function encodeLaneCanonicalU64V1(value: number): Uint8Array;
-export declare function computeLaneHolderParticipantBindingDigestV1(input: LaneHolderParticipantBindingInputV1): Promise<LaneParticipantBindingDigestB64u>;
-export declare function computeLaneParticipantSetBindingDigestV1(input: {
-    readonly holderParticipant: LaneHolderParticipantRecordV1;
-    readonly signingWorkerParticipant: SigningWorkerParticipantRecordV1;
-}): Promise<LaneParticipantBindingDigestB64u>;
-export declare function buildSigningWorkerParticipantRecordWithDigestV1(input: SigningWorkerParticipantBindingInputV1): Promise<SigningWorkerParticipantRecordV1>;
-export {};
 //# sourceMappingURL=participantDigest.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/participants.d.ts

@@ -7,33 +7,22 @@ export type SigningWorkerParticipantId = DomainId<'SigningWorkerParticipantId'>;
 /** The recipient-key identity used to deliver material to one SigningWorker. */
 export type SigningWorkerRecipientKeyId = DomainId<'SigningWorkerRecipientKeyId'>;
 /** The custody identity to which a holder package is sealed. */
-export type LaneHolderCustodyBindingId = DomainId<'LaneHolderCustodyBindingId'>;
+type LaneHolderCustodyBindingId = DomainId<'LaneHolderCustodyBindingId'>;
 /** HPKE public keys are opaque suite-specific bytes carried as canonical base64url. */
-export type HpkePublicKeyB64u = string & {
+type HpkePublicKeyB64u = string & {
     readonly __signingLaneHpkePublicKeyB64uBrand: 'SigningLaneHpkePublicKeyB64u';
 };
 export type LaneParticipantBindingDigestB64u = DigestB64u & {
     readonly __laneParticipantBindingDigestB64uBrand: 'LaneParticipantBindingDigestB64u';
 };
-export type LaneCustodyBindingDigestB64u = DigestB64u & {
+type LaneCustodyBindingDigestB64u = DigestB64u & {
     readonly __laneCustodyBindingDigestB64uBrand: 'LaneCustodyBindingDigestB64u';
 };
-export type HpkePublicKeyDigestB64u = DigestB64u & {
+type HpkePublicKeyDigestB64u = DigestB64u & {
     readonly __hpkePublicKeyDigestB64uBrand: 'HpkePublicKeyDigestB64u';
 };
 /** Alias retained for callers that need the worker-recipient-specific name. */
-export type SigningWorkerRecipientKeyDigestB64u = HpkePublicKeyDigestB64u;
-export type LaneHolderCustodyIdentityV1 = {
-    readonly kind: 'lane_holder_custody_identity_v1';
-    readonly custodyBindingId: LaneHolderCustodyBindingId;
-    readonly custodyBindingDigestB64u: LaneCustodyBindingDigestB64u;
-};
-export type SigningWorkerRecipientIdentityV1 = {
-    readonly kind: 'signing_worker_recipient_identity_v1';
-    readonly recipientKeyId: SigningWorkerRecipientKeyId;
-    readonly hpkePublicKeyB64u: HpkePublicKeyB64u;
-    readonly hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
-};
+type SigningWorkerRecipientKeyDigestB64u = HpkePublicKeyDigestB64u;
 /** Complete holder-side participant binding persisted beside a lane. */
 export type LaneHolderParticipantRecordV1 = {
     readonly kind: 'lane_holder_participant_v1';
@@ -53,26 +42,8 @@ export type SigningWorkerParticipantRecordV1 = {
     readonly hpkePublicKeyDigestB64u: SigningWorkerRecipientKeyDigestB64u;
     readonly participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
 };
-export declare function parseLaneHolderParticipantId(raw: unknown): DomainIdParseResult<LaneHolderParticipantId>;
-export declare function parseSigningWorkerParticipantId(raw: unknown): DomainIdParseResult<SigningWorkerParticipantId>;
-export declare function parseSigningWorkerRecipientKeyId(raw: unknown): DomainIdParseResult<SigningWorkerRecipientKeyId>;
-export declare function parseLaneHolderCustodyBindingId(raw: unknown): DomainIdParseResult<LaneHolderCustodyBindingId>;
-export declare function parseHpkePublicKeyB64u(raw: unknown): DomainIdParseResult<HpkePublicKeyB64u>;
 export declare function parseLaneParticipantBindingDigestB64u(raw: unknown): DomainIdParseResult<LaneParticipantBindingDigestB64u>;
-export declare function parseLaneCustodyBindingDigestB64u(raw: unknown): DomainIdParseResult<LaneCustodyBindingDigestB64u>;
-export declare function parseSigningWorkerRecipientKeyDigestB64u(raw: unknown): DomainIdParseResult<SigningWorkerRecipientKeyDigestB64u>;
-export declare function buildLaneHolderParticipantRecordV1(args: {
-    readonly participantId: LaneHolderParticipantId;
-    readonly custody: LaneHolderCustodyIdentityV1;
-    readonly hpkePublicKeyB64u: HpkePublicKeyB64u;
-    readonly hpkePublicKeyDigestB64u: SigningWorkerRecipientKeyDigestB64u;
-    readonly participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
-}): LaneHolderParticipantRecordV1;
-export declare function buildSigningWorkerParticipantRecordV1(args: {
-    readonly participantId: SigningWorkerParticipantId;
-    readonly recipient: SigningWorkerRecipientIdentityV1;
-    readonly participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
-}): SigningWorkerParticipantRecordV1;
 export declare function parseLaneHolderParticipantRecordV1(raw: unknown, label?: string): LaneHolderParticipantRecordV1;
 export declare function parseSigningWorkerParticipantRecordV1(raw: unknown, label?: string): SigningWorkerParticipantRecordV1;
+export {};
 //# sourceMappingURL=participants.d.ts.map