@seams/wallet-server 0.7.3 → 0.9.0

package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts

@@ -44,10 +44,6 @@ export type CapabilityOperationRef = {
         readonly operationKind: CapabilityOperationKindByCapability[K];
     };
 }[CapabilityKind];
-export declare const AUTH_FACTOR_KINDS: {
-    readonly passkey: "passkey";
-    readonly emailOtp: "email_otp";
-};
 export declare const AUTHORIZATION_EVIDENCE_KINDS: {
     readonly seamsSession: "seams_session";
     readonly passkeyAssertion: "passkey_assertion";

package/dist/types/shared-ts/src/device-linking/activeWalletSession.d.ts

@@ -1,6 +1,7 @@
-import type { ActiveWalletSessionV1, WalletSessionOperationCredentialV1 } from './contracts';
+import type { ActiveWalletSessionV1, WalletSessionOperationCredentialV1, WalletSessionHome } from './contracts';
 export declare function activeWalletSessionV1RecordsEqual(left: ActiveWalletSessionV1, right: ActiveWalletSessionV1): boolean;
 export declare function walletSessionPreservesCapabilities(previous: ActiveWalletSessionV1, next: ActiveWalletSessionV1): boolean;
+export declare function parseWalletSessionHome(raw: unknown): WalletSessionHome;
 export declare function parseWalletSessionOperationCredentialV1(raw: unknown): WalletSessionOperationCredentialV1;
 export declare function parseActiveWalletSessionV1(raw: unknown): ActiveWalletSessionV1;
 //# sourceMappingURL=activeWalletSession.d.ts.map

package/dist/types/shared-ts/src/device-linking/contracts.d.ts

@@ -670,9 +670,19 @@ export type ActiveWalletSessionV1 = {
     readonly issuedAtMs: number;
     readonly expiresAtMs: number;
 };
+/** Routing metadata selects an endpoint and grants no execution authority. */
+export type WalletSessionHome = {
+    readonly kind: 'direct';
+    readonly region?: never;
+} | {
+    readonly kind: 'regional';
+    readonly region: 'US' | 'WEUR' | 'APAC' | 'OC';
+};
 /** The bearer used to authenticate ordinary operations for an active session. */
 export type WalletSessionOperationCredentialV1 = {
     readonly kind: 'opaque_wallet_session_operation_credential_v1';
+    readonly ownershipGeneration: number;
+    readonly home: WalletSessionHome;
     readonly token: string;
     readonly walletSessionId: WalletSessionId;
 };
@@ -758,6 +768,7 @@ export type LocalAuthorityActivationFinalAckV1 = {
     readonly installationReceiptDigestB64u: DigestB64u;
     readonly acknowledgedAtMs: number;
 };
+export declare function isLinkSessionTerminalFailureV1(state: LinkSessionStateV1): boolean;
 export declare function assertNeverLinkSessionStateV1(value: never): never;
 /**
  * Authenticated Device 2 projection for the linear link lifecycle. The

package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts

@@ -1,8 +1,6 @@
-import type { DomainIdParseResult } from '../utils/domainIds';
 export type EvmFamilySigningKeySlotId = string & {
     readonly __evmFamilySigningKeySlotIdBrand: 'EvmFamilySigningKeySlotId';
 };
-export declare function parseEvmFamilySigningKeySlotId(raw: unknown): DomainIdParseResult<EvmFamilySigningKeySlotId>;
 export declare function requireEvmFamilySigningKeySlotId(value: unknown, label?: string): EvmFamilySigningKeySlotId;
 export declare function deriveEvmFamilySigningKeySlotId(input: {
     walletId: unknown;

package/dist/types/shared-ts/src/signing-lanes/execution.d.ts

@@ -2,7 +2,6 @@ import type { AuthorizedOperationId, CapabilityId } from '../authorization/capab
 import type { CapabilityOperationFingerprintDigest } from '../authorization/operationFingerprint';
 import type { DigestB64u } from '../utils/canonicalPrimitives';
 import type { MpcMaterialActivationRef } from '../utils/domainIds';
-import type { LinkedDeviceEnrollmentId } from './ids';
 import type { ActiveSigningLaneReference, SigningLaneRecord, WalletKeyRecord } from './records';
 export type OwnerWalletExecutionLaneProjectionV1 = {
     readonly kind: 'active_owner_wallet_execution_lane_projection_v1';
@@ -33,16 +32,6 @@ export type PreparedOwnerWalletExecution = PreparedWalletExecutionBase & {
     readonly delegatedAuthorizationId?: never;
     readonly budgetClaim?: never;
 };
-export type PreparedLinkedDeviceWalletExecution = PreparedWalletExecutionBase & {
-    readonly kind: 'prepared_linked_device_wallet_execution';
-    readonly laneKind: 'linked_device';
-    readonly lane: ActiveSigningLaneReference & {
-        readonly laneKind: 'linked_device';
-    };
-    readonly linkedDeviceEnrollmentId: LinkedDeviceEnrollmentId;
-    readonly delegatedAuthorizationId?: never;
-    readonly budgetClaim?: never;
-};
 export declare function buildPreparedOwnerWalletExecution(input: {
     readonly authorization: ClaimedWalletExecutionAuthorization;
     readonly materialActivation: MpcMaterialActivationRef;

package/dist/types/shared-ts/src/signing-lanes/ids.d.ts

@@ -1,9 +1,4 @@
-import type { EcdsaCapabilityManifestId, EcdsaCapabilityManifestRevision } from '../utils/ecdsaCapabilityActivation';
-export type { LaneShareEpoch, LaneEnrollmentId, LaneOperationId, LaneOperationIdempotencyKey, LinkedDeviceId, LinkedDeviceEnrollmentId, LinkDeviceSessionId, SigningLaneId, WalletKeyId, Ed25519YaoSuiteId, EcdsaRelayerKeyId, } from '../utils/domainIds';
-export type EcdsaManifestIdentity = {
-    manifestId: EcdsaCapabilityManifestId;
-    manifestRevision: EcdsaCapabilityManifestRevision;
-};
+export type { LaneShareEpoch, LinkedDeviceId, LinkedDeviceEnrollmentId, LinkDeviceSessionId, SigningLaneId, WalletKeyId, EcdsaRelayerKeyId, } from '../utils/domainIds';
 export type { ThresholdEcdsaChainTarget } from '../utils/thresholdEcdsaChainTarget';
-export { parseLaneShareEpoch, parseLaneEnrollmentId, parseLaneOperationId, parseLaneOperationIdempotencyKey, parseLinkedDeviceId, parseLinkedDeviceEnrollmentId, parseLinkDeviceSessionId, parseSigningLaneId, parseWalletKeyId, parseEd25519YaoSuiteId, parseEcdsaRelayerKeyId, } from '../utils/domainIds';
+export { parseLaneShareEpoch, parseLinkedDeviceId, parseLinkedDeviceEnrollmentId, parseLinkDeviceSessionId, parseSigningLaneId, parseWalletKeyId, parseEcdsaRelayerKeyId, } from '../utils/domainIds';
 //# sourceMappingURL=ids.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/index.d.ts

@@ -1,10 +1,6 @@
 export * from './ids';
 export * from './records';
 export * from './rotation';
-export * from './rotationParsers';
-export * from './rotationProtocolParsers';
-export * from './rotationDigests';
-export * from './rotationLifecycle';
 export * from './evmFamilySigningKeySlotId';
 export * from './participants';
 export * from './participantDigest';

package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts

@@ -24,6 +24,5 @@ export declare function buildOwnerLaneParticipantContinuityV1(args: {
     readonly sourceIdentityDigestB64u: DigestB64u;
 }): OwnerLaneParticipantContinuityV1;
 export declare function parseOwnerLaneParticipantContinuityV1(raw: unknown, label?: string): OwnerLaneParticipantContinuityV1;
-export declare function ownerLaneParticipantContinuityCanonicalBytesV1(input: OwnerLaneParticipantContinuityV1): Uint8Array;
 export declare function computeOwnerLaneParticipantBindingDigestV1(input: OwnerLaneParticipantContinuityV1): Promise<LaneParticipantBindingDigestB64u>;
 //# sourceMappingURL=ownerContinuity.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts

@@ -1,26 +1,8 @@
 import { type DigestB64u } from '../utils/canonicalPrimitives';
-import { type HpkePublicKeyB64u, type LaneHolderCustodyIdentityV1, type LaneHolderParticipantId, type LaneHolderParticipantRecordV1, type LaneParticipantBindingDigestB64u, type SigningWorkerParticipantId, type SigningWorkerParticipantRecordV1, type SigningWorkerRecipientIdentityV1, type SigningWorkerRecipientKeyDigestB64u } from './participants';
-type LaneHolderParticipantBindingInputV1 = {
-    readonly participantId: LaneHolderParticipantId;
-    readonly custody: LaneHolderCustodyIdentityV1;
-    readonly hpkePublicKeyB64u: HpkePublicKeyB64u;
-    readonly hpkePublicKeyDigestB64u: SigningWorkerRecipientKeyDigestB64u;
-};
-type SigningWorkerParticipantBindingInputV1 = {
-    readonly participantId: SigningWorkerParticipantId;
-    readonly recipient: SigningWorkerRecipientIdentityV1;
-};
 /** LP32(UTF8(value)) from the canonical lane encoding. */
 export declare function encodeLaneCanonicalTextV1(value: string): Uint8Array;
 /** LP32(BASE64URL_DECODE_CANONICAL_32(value)) from the canonical lane encoding. */
 export declare function encodeLaneCanonicalDigestV1(value: DigestB64u): Uint8Array;
 /** U64(value), encoded as unsigned big-endian bytes. */
 export declare function encodeLaneCanonicalU64V1(value: number): Uint8Array;
-export declare function computeLaneHolderParticipantBindingDigestV1(input: LaneHolderParticipantBindingInputV1): Promise<LaneParticipantBindingDigestB64u>;
-export declare function computeLaneParticipantSetBindingDigestV1(input: {
-    readonly holderParticipant: LaneHolderParticipantRecordV1;
-    readonly signingWorkerParticipant: SigningWorkerParticipantRecordV1;
-}): Promise<LaneParticipantBindingDigestB64u>;
-export declare function buildSigningWorkerParticipantRecordWithDigestV1(input: SigningWorkerParticipantBindingInputV1): Promise<SigningWorkerParticipantRecordV1>;
-export {};
 //# sourceMappingURL=participantDigest.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/participants.d.ts

@@ -7,33 +7,22 @@ export type SigningWorkerParticipantId = DomainId<'SigningWorkerParticipantId'>;
 /** The recipient-key identity used to deliver material to one SigningWorker. */
 export type SigningWorkerRecipientKeyId = DomainId<'SigningWorkerRecipientKeyId'>;
 /** The custody identity to which a holder package is sealed. */
-export type LaneHolderCustodyBindingId = DomainId<'LaneHolderCustodyBindingId'>;
+type LaneHolderCustodyBindingId = DomainId<'LaneHolderCustodyBindingId'>;
 /** HPKE public keys are opaque suite-specific bytes carried as canonical base64url. */
-export type HpkePublicKeyB64u = string & {
+type HpkePublicKeyB64u = string & {
     readonly __signingLaneHpkePublicKeyB64uBrand: 'SigningLaneHpkePublicKeyB64u';
 };
 export type LaneParticipantBindingDigestB64u = DigestB64u & {
     readonly __laneParticipantBindingDigestB64uBrand: 'LaneParticipantBindingDigestB64u';
 };
-export type LaneCustodyBindingDigestB64u = DigestB64u & {
+type LaneCustodyBindingDigestB64u = DigestB64u & {
     readonly __laneCustodyBindingDigestB64uBrand: 'LaneCustodyBindingDigestB64u';
 };
-export type HpkePublicKeyDigestB64u = DigestB64u & {
+type HpkePublicKeyDigestB64u = DigestB64u & {
     readonly __hpkePublicKeyDigestB64uBrand: 'HpkePublicKeyDigestB64u';
 };
 /** Alias retained for callers that need the worker-recipient-specific name. */
-export type SigningWorkerRecipientKeyDigestB64u = HpkePublicKeyDigestB64u;
-export type LaneHolderCustodyIdentityV1 = {
-    readonly kind: 'lane_holder_custody_identity_v1';
-    readonly custodyBindingId: LaneHolderCustodyBindingId;
-    readonly custodyBindingDigestB64u: LaneCustodyBindingDigestB64u;
-};
-export type SigningWorkerRecipientIdentityV1 = {
-    readonly kind: 'signing_worker_recipient_identity_v1';
-    readonly recipientKeyId: SigningWorkerRecipientKeyId;
-    readonly hpkePublicKeyB64u: HpkePublicKeyB64u;
-    readonly hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
-};
+type SigningWorkerRecipientKeyDigestB64u = HpkePublicKeyDigestB64u;
 /** Complete holder-side participant binding persisted beside a lane. */
 export type LaneHolderParticipantRecordV1 = {
     readonly kind: 'lane_holder_participant_v1';
@@ -53,26 +42,8 @@ export type SigningWorkerParticipantRecordV1 = {
     readonly hpkePublicKeyDigestB64u: SigningWorkerRecipientKeyDigestB64u;
     readonly participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
 };
-export declare function parseLaneHolderParticipantId(raw: unknown): DomainIdParseResult<LaneHolderParticipantId>;
-export declare function parseSigningWorkerParticipantId(raw: unknown): DomainIdParseResult<SigningWorkerParticipantId>;
-export declare function parseSigningWorkerRecipientKeyId(raw: unknown): DomainIdParseResult<SigningWorkerRecipientKeyId>;
-export declare function parseLaneHolderCustodyBindingId(raw: unknown): DomainIdParseResult<LaneHolderCustodyBindingId>;
-export declare function parseHpkePublicKeyB64u(raw: unknown): DomainIdParseResult<HpkePublicKeyB64u>;
 export declare function parseLaneParticipantBindingDigestB64u(raw: unknown): DomainIdParseResult<LaneParticipantBindingDigestB64u>;
-export declare function parseLaneCustodyBindingDigestB64u(raw: unknown): DomainIdParseResult<LaneCustodyBindingDigestB64u>;
-export declare function parseSigningWorkerRecipientKeyDigestB64u(raw: unknown): DomainIdParseResult<SigningWorkerRecipientKeyDigestB64u>;
-export declare function buildLaneHolderParticipantRecordV1(args: {
-    readonly participantId: LaneHolderParticipantId;
-    readonly custody: LaneHolderCustodyIdentityV1;
-    readonly hpkePublicKeyB64u: HpkePublicKeyB64u;
-    readonly hpkePublicKeyDigestB64u: SigningWorkerRecipientKeyDigestB64u;
-    readonly participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
-}): LaneHolderParticipantRecordV1;
-export declare function buildSigningWorkerParticipantRecordV1(args: {
-    readonly participantId: SigningWorkerParticipantId;
-    readonly recipient: SigningWorkerRecipientIdentityV1;
-    readonly participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
-}): SigningWorkerParticipantRecordV1;
 export declare function parseLaneHolderParticipantRecordV1(raw: unknown, label?: string): LaneHolderParticipantRecordV1;
 export declare function parseSigningWorkerParticipantRecordV1(raw: unknown, label?: string): SigningWorkerParticipantRecordV1;
+export {};
 //# sourceMappingURL=participants.d.ts.map