@seams/wallet 0.15.6 → 0.17.0

package/dist/public/wallet-service/index.html

@@ -5,14 +5,14 @@
     <meta name="viewport" content="width=device-width, initial-scale=1" />
     <title>Web3Authn Wallet Service</title>
     <!-- Surface styles are external so strict CSP can keep style-src 'self' -->
-    <link rel="stylesheet" href="/sdk/wallet-ui.css?v=0.15.6" />
+    <link rel="stylesheet" href="/sdk/wallet-ui.css?v=0.17.0" />
     <!-- Minimal shims some ESM bundles expect (externalized to enable strict CSP) -->
-    <script src="/sdk/wallet-shims.js?v=0.15.6"></script>
+    <script src="/sdk/wallet-shims.js?v=0.17.0"></script>
     <!-- Hint the browser to fetch the host script earlier -->
-    <link rel="modulepreload" href="/sdk/wallet-iframe-host-runtime.js?v=0.15.6" crossorigin>
+    <link rel="modulepreload" href="/sdk/wallet-iframe-host-runtime.js?v=0.17.0" crossorigin>
   </head>
   <body>
     <!-- sdkBasePath points to the SDK root (e.g. '/sdk'). Load the host directly. -->
-    <script type="module" src="/sdk/wallet-iframe-host-runtime.js?v=0.15.6"></script>
+    <script type="module" src="/sdk/wallet-iframe-host-runtime.js?v=0.17.0"></script>
   </body>
 </html>

package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts

@@ -11,26 +11,26 @@ export type AuthorizationParseResult<T> = {
     readonly error: AuthorizationParseError;
 };
 export declare const CAPABILITY_KINDS: {
-    readonly vaultAccess: "vault_access";
-    readonly nearEd25519MpcSigning: "near_ed25519_mpc_signing";
-    readonly evmEcdsaMpcSigning: "evm_ecdsa_mpc_signing";
+    readonly vaultAccess: 'vault_access';
+    readonly nearEd25519MpcSigning: 'near_ed25519_mpc_signing';
+    readonly evmEcdsaMpcSigning: 'evm_ecdsa_mpc_signing';
 };
 type CapabilityKind = (typeof CAPABILITY_KINDS)[keyof typeof CAPABILITY_KINDS];
 export declare const VAULT_OPERATION_KINDS: {
-    readonly proxyUse: "vault.proxy_use";
-    readonly reveal: "vault.reveal";
+    readonly proxyUse: 'vault.proxy_use';
+    readonly reveal: 'vault.reveal';
 };
 type VaultOperationKind = (typeof VAULT_OPERATION_KINDS)[keyof typeof VAULT_OPERATION_KINDS];
 export declare const NEAR_ED25519_MPC_OPERATION_KINDS: {
-    readonly signTransaction: "near.sign_transaction";
-    readonly signDelegateAction: "near.sign_delegate_action";
-    readonly signNep413Message: "near.sign_nep413_message";
-    readonly exportKey: "near.export_key";
+    readonly signTransaction: 'near.sign_transaction';
+    readonly signDelegateAction: 'near.sign_delegate_action';
+    readonly signNep413Message: 'near.sign_nep413_message';
+    readonly exportKey: 'near.export_key';
 };
 export type NearEd25519MpcOperationKind = (typeof NEAR_ED25519_MPC_OPERATION_KINDS)[keyof typeof NEAR_ED25519_MPC_OPERATION_KINDS];
 export declare const EVM_ECDSA_MPC_OPERATION_KINDS: {
-    readonly signTransaction: "evm.sign_transaction";
-    readonly exportKey: "evm.export_key";
+    readonly signTransaction: 'evm.sign_transaction';
+    readonly exportKey: 'evm.export_key';
 };
 export type EvmEcdsaMpcOperationKind = (typeof EVM_ECDSA_MPC_OPERATION_KINDS)[keyof typeof EVM_ECDSA_MPC_OPERATION_KINDS];
 type CapabilityOperationKindByCapability = {
@@ -45,9 +45,9 @@ export type CapabilityOperationRef = {
     };
 }[CapabilityKind];
 export declare const AUTHORIZATION_EVIDENCE_KINDS: {
-    readonly seamsSession: "seams_session";
-    readonly passkeyAssertion: "passkey_assertion";
-    readonly emailOtp: "email_otp";
+    readonly seamsSession: 'seams_session';
+    readonly passkeyAssertion: 'passkey_assertion';
+    readonly emailOtp: 'email_otp';
 };
 type SessionAuthorizationEvidenceKind = typeof AUTHORIZATION_EVIDENCE_KINDS.seamsSession;
 type InteractiveAuthorizationEvidenceKind = typeof AUTHORIZATION_EVIDENCE_KINDS.passkeyAssertion | typeof AUTHORIZATION_EVIDENCE_KINDS.emailOtp;

package/dist/types/shared-ts/src/authorization/delegatedAuthority.d.ts

@@ -1,6 +1,6 @@
 import type { AuthorizationParseResult } from './capabilityKinds';
 export type DelegatedWalletPermissionV1 = (typeof DELEGATED_WALLET_PERMISSION_VALUES)[number];
-declare const DELEGATED_WALLET_PERMISSION_VALUES: readonly ["export_keys", "link_devices", "revoke_devices", "sign"];
+declare const DELEGATED_WALLET_PERMISSION_VALUES: readonly ['export_keys', 'link_devices', 'revoke_devices', 'sign'];
 type CanonicalPermissionTuple = readonly [
     DelegatedWalletPermissionV1,
     ...DelegatedWalletPermissionV1[]

package/dist/types/shared-ts/src/device-linking/ed25519ExportRoot.d.ts

@@ -9,7 +9,7 @@ import { type LinkedDeviceEnrollmentId, type LinkedDeviceId, type LinkDeviceSess
 import { type WalletId } from '../utils/domainIds';
 import type { LinkedDeviceTargetFactorV1 } from './contracts';
 /** Frozen by signer-core's Ed25519 Yao Client-root transfer module. */
-export declare const LINKED_DEVICE_ED25519_EXPORT_ROOT_TRANSFER_ALG_V1: "x25519-hkdf-sha256-chacha20poly1305-v1";
+export declare const LINKED_DEVICE_ED25519_EXPORT_ROOT_TRANSFER_ALG_V1: 'x25519-hkdf-sha256-chacha20poly1305-v1';
 /** One-use X25519 public key generated and retained by Device 2's worker. */
 type LinkedDeviceEd25519ExportRootRecipientPublicKeyB64u = string & {
     readonly __linkedDeviceEd25519ExportRootRecipientPublicKeyB64uBrand: 'LinkedDeviceEd25519ExportRootRecipientPublicKeyB64u';

package/dist/types/shared-ts/src/device-linking/requestProof.d.ts

@@ -19,7 +19,7 @@ export type LinkedDeviceRequestProofV1 = {
     readonly expiresAtMs: number;
     readonly signatureB64u: string;
 };
-export declare function encodeLinkedDeviceRequestProofV1(proof: LinkedDeviceRequestProofV1): Uint8Array;
+export declare function encodeLinkedDeviceRequestProofV1(proof: LinkedDeviceRequestProofV1): Uint8Array<ArrayBuffer>;
 export declare function computeLinkedDeviceRequestProofDigestV1(proof: LinkedDeviceRequestProofV1): Promise<DigestB64u>;
 export declare function computeLinkedDevicePublicKeyDigestV1(publicKeyB64u: LinkDevicePublicKeyB64u | string): Promise<DigestB64u>;
 //# sourceMappingURL=requestProof.d.ts.map

package/dist/types/shared-ts/src/device-linking/sourceContribution.d.ts

@@ -3,11 +3,11 @@ import { type LinkedDeviceEnrollmentId, type LinkDeviceSessionId, type WalletKey
 import { type MpcMaterialActivationRef, type WalletAuthorityId } from '../utils/domainIds';
 import { type DigestB64u } from '../utils/canonicalPrimitives';
 import { type Ed25519PublicKeyB64u, type Secp256k1CompressedPublicKeyB64u } from '../passkey-custody/primitives';
-import { type RouterAbEd25519YaoCeremonyBindingV1, type RouterAbEd25519YaoActivationAdmissionReceiptV1, type RouterAbEd25519YaoActivationPublicReceiptV1, type RouterAbEd25519YaoApplicationBindingFactsV1, type RouterAbEd25519YaoActivationClientPackageV1 } from '../utils/routerAbEd25519Yao';
+import { type RouterAbEd25519YaoActivationBindingV1, type RouterAbEd25519YaoActivationAdmissionReceiptV1, type RouterAbEd25519YaoActivationPublicReceiptV1, type RouterAbEd25519YaoApplicationBindingFactsV1, type RouterAbEd25519YaoActivationClientPackageV1 } from '../utils/routerAbEd25519Yao';
 import { type EcdsaThresholdKeyId } from '../threshold/ecdsaDerivationRoleLocalBootstrap';
 import { type RouterAbEcdsaDerivationNormalSigningStateV1 } from '../utils/routerAbEcdsaDerivation';
 /** Exact discriminator accepted by the ECDSA source-contribution core. */
-declare const LINKED_DEVICE_ECDSA_SOURCE_CONTRIBUTION_ENVELOPE_KIND_V1: "seams/linked-device/ecdsa-source-contribution-envelope/v1";
+declare const LINKED_DEVICE_ECDSA_SOURCE_CONTRIBUTION_ENVELOPE_KIND_V1: 'seams/linked-device/ecdsa-source-contribution-envelope/v1';
 /** Source derivation facts required by the Cloudflare ECDSA reservation wire. */
 export type LinkedDeviceEcdsaSourceDerivationV1 = {
     readonly applicationBindingDigestB64u: DigestB64u;
@@ -50,7 +50,7 @@ export type LinkedDeviceEd25519SourceContributionPreparationV1 = {
     readonly walletKeyId: WalletKeyId;
     readonly targetDeviceId: DeviceId;
     readonly targetFactorVerificationDigestB64u: DigestB64u;
-    readonly sourceBinding: RouterAbEd25519YaoCeremonyBindingV1;
+    readonly sourceBinding: RouterAbEd25519YaoActivationBindingV1;
     readonly targetAdmission: RouterAbEd25519YaoActivationAdmissionReceiptV1<'registration'>;
     readonly applicationBinding: RouterAbEd25519YaoApplicationBindingFactsV1;
     readonly sourceRevocationEpoch: number;
@@ -120,10 +120,10 @@ export type LinkedDeviceEd25519SourceContributionV1 = {
     readonly targetClientRecipientPublicKeyB64u: string;
     readonly targetSigningWorkerRecipientPublicKeyB64u: string;
     readonly sourceRegisteredPublicKeyB64u: Ed25519PublicKeyB64u;
-    readonly sourceBinding: RouterAbEd25519YaoCeremonyBindingV1;
+    readonly sourceBinding: RouterAbEd25519YaoActivationBindingV1;
     /** Exact inactive reservation returned by Router source-preserving execution. */
     readonly reservationId: string;
-    readonly targetBinding: RouterAbEd25519YaoCeremonyBindingV1;
+    readonly targetBinding: RouterAbEd25519YaoActivationBindingV1<'registration'>;
     readonly activationReceipt: RouterAbEd25519YaoActivationPublicReceiptV1;
     readonly participantIds: readonly [number, number];
     readonly deriver_a_client_package: RouterAbEd25519YaoActivationClientPackageV1<'deriver_a'>;

package/dist/types/shared-ts/src/passkey-custody/custodyEnvelope.d.ts

@@ -3,9 +3,9 @@ import type { DigestB64u } from '../utils/canonicalPrimitives';
 import type { PasskeyCustodySecretBinding } from './custodySecretBinding';
 import type { EnvelopeCiphertextB64u, EnvelopeNonceB64u, EnvelopeRevision } from './primitives';
 import type { ExclusiveUnion } from '../utils/variant';
-export declare const WALLET_CUSTODY_ENVELOPE_VERSION_V2: "wallet_custody_envelope_v2";
-declare const PASSKEY_PRF_KEK_VERSION_V1: "passkey_prf_kek_hkdf_sha256_v1";
-declare const EMAIL_OTP_FACTOR_KEK_VERSION_V1: "email_otp_factor_kek_hkdf_sha256_v1";
+export declare const WALLET_CUSTODY_ENVELOPE_VERSION_V2: 'wallet_custody_envelope_v2';
+declare const PASSKEY_PRF_KEK_VERSION_V1: 'passkey_prf_kek_hkdf_sha256_v1';
+declare const EMAIL_OTP_FACTOR_KEK_VERSION_V1: 'email_otp_factor_kek_hkdf_sha256_v1';
 type WalletCustodyEnvelopeVersion = typeof WALLET_CUSTODY_ENVELOPE_VERSION_V2;
 type PasskeyPrfKekVersion = typeof PASSKEY_PRF_KEK_VERSION_V1;
 type EmailOtpFactorKekVersion = typeof EMAIL_OTP_FACTOR_KEK_VERSION_V1;

package/dist/types/shared-ts/src/passkey-custody/custodySecretBinding.d.ts

@@ -14,7 +14,7 @@ import type { Ed25519PublicKeyB64u, Secp256k1CompressedPublicKeyB64u } from './p
  */
 export type PasskeyCustodySecretKind = 'wallet_custody_seed_v1' | 'ed25519_yao_client_root_v1' | 'ed25519_lane_holder_share_v1' | 'ecdsa_lane_holder_share_v1';
 /** The only derivation scheme owner custody supports. */
-declare const WALLET_SEED_DERIVATION_SCHEME_V1: "wallet_seed_parallel_hkdf_sha256_v1";
+declare const WALLET_SEED_DERIVATION_SCHEME_V1: 'wallet_seed_parallel_hkdf_sha256_v1';
 type WalletSeedDerivationScheme = typeof WALLET_SEED_DERIVATION_SCHEME_V1;
 export type PasskeyCustodySecretBinding = {
     /**

package/dist/types/shared-ts/src/tenant-root/tenantRootIdentity.d.ts

@@ -67,6 +67,6 @@ export declare function buildTenantRootIdentityFromAuthenticatedDeploymentV1(inp
 /** Decodes the exact private wire/persistence representation of the identity. */
 export declare function decodeTenantRootIdentityWireV1(value: unknown): TenantRootIdentityDecodeResultV1<TenantRootIdentityV1>;
 /** Encodes the exact Rust-compatible canonical identity bytes. */
-export declare function encodeTenantRootIdentityV1(identity: TenantRootIdentityV1): Uint8Array;
+export declare function encodeTenantRootIdentityV1(identity: TenantRootIdentityV1): Uint8Array<ArrayBuffer>;
 export {};
 //# sourceMappingURL=tenantRootIdentity.d.ts.map

package/dist/types/shared-ts/src/tenant-root/tenantRootOperationRecord.d.ts

@@ -18,7 +18,7 @@ export type TenantRootOperationSubjectV1 = {
 };
 /** The single Deriver role a role-local operation acts on. */
 export type TenantRootDeriverRoleV1 = 'deriver_a' | 'deriver_b';
-export declare const TENANT_ROOT_RESTORE_ROLE_IMPORT_KEY_ISSUE_OPERATION_KIND_V1: "tenant_root_restore_role_import_key_issue_v1";
+export declare const TENANT_ROOT_RESTORE_ROLE_IMPORT_KEY_ISSUE_OPERATION_KIND_V1: 'tenant_root_restore_role_import_key_issue_v1';
 type TenantRootOperationRecordWithActiveRootV1 = {
     readonly formatVersion: typeof TENANT_ROOT_OPERATION_RECORD_FORMAT_V1;
     readonly operationKind: Exclude<TenantRootOperationKindV1, typeof TENANT_ROOT_RESTORE_ROLE_IMPORT_KEY_ISSUE_OPERATION_KIND_V1>;
@@ -157,7 +157,7 @@ export type TenantRootRestoreRoleImportKeyIssueOperationInputV1 = {
 };
 /** Inputs the console resolves before building a record. */
 export type TenantRootOperationRecordInputV1 = TenantRootOperationRecordInputWithActiveRootV1 | TenantRootRestoreRoleImportKeyIssueOperationInputV1;
-declare const TENANT_ROOT_OPERATION_KINDS_V1: readonly ["tenant_root_operational_share_rotation_v1", "tenant_root_recovery_governance_change_v1", "tenant_root_recovery_recipient_pair_enroll_v1", "tenant_root_recovery_recipient_pair_replace_v1", "tenant_root_recovery_backup_create_v1", "tenant_root_recovery_backup_replace_v1", "tenant_root_recovery_role_package_download_v1", "tenant_root_recovery_manifest_download_v1", "tenant_root_restore_session_start_v1", "tenant_root_restore_manifest_register_v1", "tenant_root_restore_role_import_key_issue_v1", "tenant_root_restore_role_import_v1", "tenant_root_restore_activate_v1", "tenant_root_source_lineage_retire_v1"];
+declare const TENANT_ROOT_OPERATION_KINDS_V1: readonly ['tenant_root_operational_share_rotation_v1', 'tenant_root_recovery_governance_change_v1', 'tenant_root_recovery_recipient_pair_enroll_v1', 'tenant_root_recovery_recipient_pair_replace_v1', 'tenant_root_recovery_backup_create_v1', 'tenant_root_recovery_backup_replace_v1', 'tenant_root_recovery_role_package_download_v1', 'tenant_root_recovery_manifest_download_v1', 'tenant_root_restore_session_start_v1', 'tenant_root_restore_manifest_register_v1', 'tenant_root_restore_role_import_key_issue_v1', 'tenant_root_restore_role_import_v1', 'tenant_root_restore_activate_v1', 'tenant_root_source_lineage_retire_v1'];
 /** Returns the four operations that follow the tenant's recovery governance. */
 export declare function tenantRootOperationFollowsGovernanceV1(kind: TenantRootOperationKindV1): boolean;
 /** Returns the maximum authorization lifetime for one operation. */

package/dist/types/shared-ts/src/utils/base64.d.ts

@@ -17,7 +17,7 @@ export declare const base64Encode: (value: ArrayBufferLike | ArrayBufferView) =>
  * @returns Uint8Array containing the decoded bytes
  * @throws Error if decoding fails due to invalid base64 input
  */
-export declare function base64Decode(base64: string): Uint8Array;
+export declare function base64Decode(base64: string): Uint8Array<ArrayBuffer>;
 /**
  * Encodes an ArrayBuffer into a base64url string.
  * Converts binary data to base64 then replaces standard base64 characters with URL-safe ones:
@@ -40,7 +40,7 @@ export declare const base64UrlEncode: (value: ArrayBufferLike | ArrayBufferView)
  * @returns Uint8Array containing the decoded bytes
  * @throws Error if decoding fails due to invalid base64url input
  */
-export declare function base64UrlDecode(base64Url: string): Uint8Array;
+export declare function base64UrlDecode(base64Url: string): Uint8Array<ArrayBuffer>;
 /**
  * Converts an ArrayBuffer or ArrayBufferLike object to a plain number array for WASM compatibility.
  * WASM bindings require plain number arrays rather than TypedArrays for memory safety and direct access.

package/dist/types/shared-ts/src/utils/digestEncoding.d.ts

@@ -1,5 +1,5 @@
 import { type DigestB64u } from './canonicalPrimitives';
-export declare function concat(parts: readonly Uint8Array[]): Uint8Array;
+export declare function concat(parts: readonly Uint8Array[]): Uint8Array<ArrayBuffer>;
 export declare function u32(value: number, label: string): Uint8Array;
 export declare function u64(value: number, label: string): Uint8Array;
 export declare function lp32(value: Uint8Array, label: string): Uint8Array;

package/dist/types/shared-ts/src/utils/digests.d.ts

@@ -1,6 +1,6 @@
 export declare function alphabetizeStringify(input: unknown): string;
-export declare function sha256BytesUtf8(input: string): Promise<Uint8Array>;
-export declare function sha256Bytes(input: Uint8Array): Promise<Uint8Array>;
+export declare function sha256BytesUtf8(input: string): Promise<Uint8Array<ArrayBuffer>>;
+export declare function sha256Bytes(input: Uint8Array): Promise<Uint8Array<ArrayBuffer>>;
 export declare function bytesToUnprefixedHex(bytes: Uint8Array): string;
 export declare function sha256HexUtf8(input: string): Promise<string>;
 //# sourceMappingURL=digests.d.ts.map

package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts

@@ -1,31 +1,31 @@
-export declare const EMAIL_OTP_CHANNEL: "email_otp";
-export declare const EMAIL_OTP_INITIAL_ENROLLMENT_VERSION: "1";
+export declare const EMAIL_OTP_CHANNEL: 'email_otp';
+export declare const EMAIL_OTP_INITIAL_ENROLLMENT_VERSION: '1';
 export declare function emailOtpDeviceEnrollmentId(walletId: string, providerSubject: string): string;
 /** Domain label that opens the AAD binding a released Email OTP factor to its challenge. */
 export declare const EMAIL_OTP_FACTOR_RELEASE_AAD_DOMAIN_V1 = "seams/email-otp/factor-release/v1";
-declare const WALLET_UNLOCK_BACKENDS: readonly ["passkey", "email_otp"];
+declare const WALLET_UNLOCK_BACKENDS: readonly ['passkey', "email_otp"];
 export type WalletUnlockBackend = (typeof WALLET_UNLOCK_BACKENDS)[number];
 export type WalletEmailOtpChannel = typeof EMAIL_OTP_CHANNEL;
-declare const WALLET_EMAIL_OTP_LOGIN_OPERATIONS: readonly ["wallet_unlock", "transaction_sign", "export_key"];
+declare const WALLET_EMAIL_OTP_LOGIN_OPERATIONS: readonly ['wallet_unlock', 'transaction_sign', 'export_key'];
 export type WalletEmailOtpLoginOperation = (typeof WALLET_EMAIL_OTP_LOGIN_OPERATIONS)[number];
-export declare const WALLET_EMAIL_OTP_REGISTRATION_OPERATION: "registration";
+export declare const WALLET_EMAIL_OTP_REGISTRATION_OPERATION: 'registration';
 /** Linked-device enrollment: prove control of the wallet's enrolled email
  * destination to complete one device link. */
-export declare const WALLET_EMAIL_OTP_DEVICE_LINK_OPERATION: "device_link";
-export declare const WALLET_EMAIL_OTP_RELOCATION_OPERATION: "wallet_relocation";
+export declare const WALLET_EMAIL_OTP_DEVICE_LINK_OPERATION: 'device_link';
+export declare const WALLET_EMAIL_OTP_RELOCATION_OPERATION: 'wallet_relocation';
 export type WalletEmailOtpOperation = WalletEmailOtpLoginOperation | typeof WALLET_EMAIL_OTP_REGISTRATION_OPERATION | typeof WALLET_EMAIL_OTP_DEVICE_LINK_OPERATION | typeof WALLET_EMAIL_OTP_RELOCATION_OPERATION;
 export declare const WALLET_EMAIL_OTP_ACTIONS: {
-    readonly login: "wallet_email_otp_login";
-    readonly registration: "wallet_email_otp_registration";
-    readonly recoveryBootstrap: "wallet_email_otp_recovery_bootstrap";
-    readonly unseal: "wallet_email_otp_unseal";
-    readonly deviceLink: "wallet_email_otp_device_link";
-    readonly relocation: "wallet_email_otp_relocation";
+    readonly login: 'wallet_email_otp_login';
+    readonly registration: 'wallet_email_otp_registration';
+    readonly recoveryBootstrap: 'wallet_email_otp_recovery_bootstrap';
+    readonly unseal: 'wallet_email_otp_unseal';
+    readonly deviceLink: 'wallet_email_otp_device_link';
+    readonly relocation: 'wallet_email_otp_relocation';
 };
 export type WalletEmailOtpAction = (typeof WALLET_EMAIL_OTP_ACTIONS)[keyof typeof WALLET_EMAIL_OTP_ACTIONS];
-export declare const WALLET_EMAIL_OTP_EXPORT_OPERATION: "export_key";
-export declare const WALLET_EMAIL_OTP_UNLOCK_OPERATION: "wallet_unlock";
-export declare const WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION: "transaction_sign";
+export declare const WALLET_EMAIL_OTP_EXPORT_OPERATION: 'export_key';
+export declare const WALLET_EMAIL_OTP_UNLOCK_OPERATION: 'wallet_unlock';
+export declare const WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION: 'transaction_sign';
 export type WalletEmailOtpExportOperation = typeof WALLET_EMAIL_OTP_EXPORT_OPERATION;
 export type WalletEmailOtpTransactionSignOperation = typeof WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION;
 export declare function isWalletUnlockBackend(value: string): value is WalletUnlockBackend;

package/dist/types/shared-ts/src/utils/emailOtpRecoveryKey.d.ts

@@ -3,7 +3,7 @@ export declare const EMAIL_OTP_RECOVERY_KEY_BYTE_LENGTH: 20;
 export declare const EMAIL_OTP_RECOVERY_KEY_CHAR_LENGTH: 32;
 export declare const EMAIL_OTP_RECOVERY_KEY_GROUP_COUNT: 8;
 export declare const EMAIL_OTP_RECOVERY_KEY_GROUP_LENGTH: 4;
-export declare const EMAIL_OTP_RECOVERY_KEY_ALPHABET: "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+export declare const EMAIL_OTP_RECOVERY_KEY_ALPHABET: '0123456789ABCDEFGHJKMNPQRSTVWXYZ';
 declare const emailOtpRecoveryCodeBrand: unique symbol;
 export type EmailOtpRecoveryCode = string & {
     readonly [emailOtpRecoveryCodeBrand]: 'EmailOtpRecoveryCode';

package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts

@@ -11,16 +11,16 @@ import { type EmailOtpWalletAuthAuthority, type PasskeyWalletAuthAuthority } fro
  * pool fill only when the requested ceremony deadline is within this limit.
  */
 export declare const ROUTER_AB_ECDSA_PRESIGN_CEREMONY_MAX_LIFETIME_MS: number;
-export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_STATE_KIND_V1: "router_ab_ecdsa_derivation_normal_signing_v1";
-export declare const ROUTER_AB_ECDSA_DERIVATION_HEALTH_PATH: "/router-ab/ecdsa-derivation/healthz";
-export declare const ROUTER_AB_ECDSA_DERIVATION_EXPORT_PATH: "/router-ab/ecdsa-derivation/export";
-export declare const ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_INIT_PATH: "/router-ab/ecdsa-derivation/presignature-pool/fill/init";
-export declare const ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_STEP_PATH: "/router-ab/ecdsa-derivation/presignature-pool/fill/step";
-export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_PREPARE_PATH: "/router-ab/ecdsa-derivation/sign/prepare";
-export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_PATH: "/router-ab/ecdsa-derivation/sign";
-export declare const ROUTER_AB_ECDSA_DERIVATION_REFRESH_PATH: "/router-ab/ecdsa-derivation/refresh";
-export declare const ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH: "/router-ab/ecdsa-derivation/session/activate";
-export declare const ROUTER_AB_ECDSA_DERIVATION_OPERATION_STEP_UP_PATH: "/router-ab/ecdsa-derivation/operation-step-up";
+export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_STATE_KIND_V1: 'router_ab_ecdsa_derivation_normal_signing_v1';
+export declare const ROUTER_AB_ECDSA_DERIVATION_HEALTH_PATH: '/router-ab/ecdsa-derivation/healthz';
+export declare const ROUTER_AB_ECDSA_DERIVATION_EXPORT_PATH: '/router-ab/ecdsa-derivation/export';
+export declare const ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_INIT_PATH: '/router-ab/ecdsa-derivation/presignature-pool/fill/init';
+export declare const ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_STEP_PATH: '/router-ab/ecdsa-derivation/presignature-pool/fill/step';
+export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_PREPARE_PATH: '/router-ab/ecdsa-derivation/sign/prepare';
+export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_PATH: '/router-ab/ecdsa-derivation/sign';
+export declare const ROUTER_AB_ECDSA_DERIVATION_REFRESH_PATH: '/router-ab/ecdsa-derivation/refresh';
+export declare const ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH: '/router-ab/ecdsa-derivation/session/activate';
+export declare const ROUTER_AB_ECDSA_DERIVATION_OPERATION_STEP_UP_PATH: '/router-ab/ecdsa-derivation/operation-step-up';
 type RouterAbEcdsaDerivationStableKeyContextV1 = {
     application_binding_digest_b64u: string;
 };

package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts

@@ -4,17 +4,17 @@ export type { RouterAbEd25519YaoAdmittedLifecycleV1, RouterAbEd25519YaoCeremonyI
 export type RouterAbEd25519YaoCeremonyBindingV1 = GeneratedRouterAbEd25519YaoCeremonyBindingV1 & {
     material_activation: RouterAbMpcMaterialActivationRefWire;
 };
-export declare const ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1: "/router-ab/ed25519/yao/registration/admit";
-export declare const ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1: "/router-ab/ed25519/yao/registration/execute";
-export declare const ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1: "/router-ab/ed25519/yao/recovery/admit";
-export declare const ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1: "/router-ab/ed25519/yao/recovery/execute";
-export declare const ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1: "/router-ab/ed25519/yao/recovery/activate";
-export declare const ROUTER_AB_ED25519_YAO_RECOVERY_STATUS_PATH_V1: "/router-ab/ed25519/yao/recovery/status";
-export declare const ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1: "x-seams-wallet-recovery-challenge-id";
-export declare const ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1: "/router-ab/ed25519/yao/recovery/bootstrap";
-export declare const ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1: "router_ab_ed25519_yao_email_otp_recovery_v1";
-export declare const ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1: "/router-ab/ed25519/yao/export/admit";
-export declare const ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1: "/router-ab/ed25519/yao/export/execute";
+export declare const ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1: '/router-ab/ed25519/yao/registration/admit';
+export declare const ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1: '/router-ab/ed25519/yao/registration/execute';
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1: '/router-ab/ed25519/yao/recovery/admit';
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1: '/router-ab/ed25519/yao/recovery/execute';
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1: '/router-ab/ed25519/yao/recovery/activate';
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_STATUS_PATH_V1: '/router-ab/ed25519/yao/recovery/status';
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1: 'x-seams-wallet-recovery-challenge-id';
+export declare const ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1: '/router-ab/ed25519/yao/recovery/bootstrap';
+export declare const ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1: 'router_ab_ed25519_yao_email_otp_recovery_v1';
+export declare const ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1: '/router-ab/ed25519/yao/export/admit';
+export declare const ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1: '/router-ab/ed25519/yao/export/execute';
 type RouterAbEd25519YaoDeriverRoleV1 = 'deriver_a' | 'deriver_b';
 type RouterAbEd25519YaoInputKindV1 = 'activation' | 'export';
 type RouterAbEd25519YaoPackageKindV1 = 'activation_client' | 'activation_signing_worker' | 'export_client';
@@ -232,6 +232,7 @@ type RouterAbEd25519YaoParseResult<T> = {
 export declare function parseRouterAbEd25519YaoApplicationBindingFactsV1(value: unknown): RouterAbEd25519YaoApplicationBindingFactsV1;
 export declare function parseRouterAbEd25519YaoParticipantIdsV1(value: unknown): readonly [number, number];
 export declare function parseRouterAbEd25519YaoCeremonyBindingV1(value: unknown): RouterAbEd25519YaoCeremonyBindingV1;
+export declare function parseRouterAbEd25519YaoActivationBindingV1(value: unknown): RouterAbEd25519YaoActivationBindingV1;
 export declare function parseRouterAbEd25519YaoActivationKeysetV1(value: unknown): RouterAbEd25519YaoActivationKeysetV1;
 export declare function parseRouterAbEd25519YaoActivationPublicReceiptV1(value: unknown): RouterAbEd25519YaoActivationPublicReceiptV1;
 export declare function parseRouterAbEd25519YaoRegistrationAdmissionRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoRegistrationAdmissionRequestV1>;

package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts

@@ -1,6 +1,6 @@
-export declare const ROUTER_AB_PUBLIC_KEYSET_VERSION_V2: "router_ab_keyset_v2";
-export declare const ROUTER_AB_PUBLIC_KEYSET_WELL_KNOWN_PATH: "/.well-known/router-ab/keyset";
-export declare const ROUTER_AB_PUBLIC_KEYSET_PATH: "/router-ab/keyset";
+export declare const ROUTER_AB_PUBLIC_KEYSET_VERSION_V2: 'router_ab_keyset_v2';
+export declare const ROUTER_AB_PUBLIC_KEYSET_WELL_KNOWN_PATH: '/.well-known/router-ab/keyset';
+export declare const ROUTER_AB_PUBLIC_KEYSET_PATH: '/router-ab/keyset';
 type RouterAbSignerRoleV1 = 'signer_a' | 'signer_b';
 type RouterAbSignerEnvelopeHpkePublicKeyV1 = {
     role: RouterAbSignerRoleV1;

package/dist/types/shared-ts/src/utils/routerAbTraceContext.d.ts

@@ -1,4 +1,4 @@
-export declare const ROUTER_AB_TRACE_ID_HEADER_V1: "x-seams-trace-id";
+export declare const ROUTER_AB_TRACE_ID_HEADER_V1: 'x-seams-trace-id';
 export type RouterAbTraceContextV1 = {
     readonly kind: 'router_ab_trace_context_v1';
     readonly value: string;

package/dist/types/shared-ts/src/utils/signerDomain.d.ts

@@ -1,41 +1,41 @@
 export declare const SIGNER_KINDS: {
-    readonly thresholdEd25519: "threshold-ed25519";
-    readonly thresholdEcdsa: "threshold-ecdsa";
+    readonly thresholdEd25519: 'threshold-ed25519';
+    readonly thresholdEcdsa: 'threshold-ecdsa';
 };
 export type SignerKind = (typeof SIGNER_KINDS)[keyof typeof SIGNER_KINDS];
 export declare const SIGNER_AUTH_METHODS: {
-    readonly passkey: "passkey";
+    readonly passkey: 'passkey';
     readonly emailOtp: "email_otp";
 };
 /** Authentication methods that can authorize a signer capability. */
 export type SignerAuthMethod = (typeof SIGNER_AUTH_METHODS)[keyof typeof SIGNER_AUTH_METHODS];
 export declare const WALLET_AUTH_METHODS: {
-    readonly passkey: "passkey";
+    readonly passkey: 'passkey';
     readonly emailOtp: "email_otp";
 };
 /** Authentication methods that can be enrolled on a wallet. */
 export type WalletAuthMethod = (typeof WALLET_AUTH_METHODS)[keyof typeof WALLET_AUTH_METHODS];
 declare const SIGNING_SESSION_RETENTIONS: {
-    readonly session: "session";
-    readonly singleUse: "single_use";
+    readonly session: 'session';
+    readonly singleUse: 'single_use';
 };
 export type SigningSessionRetention = (typeof SIGNING_SESSION_RETENTIONS)[keyof typeof SIGNING_SESSION_RETENTIONS];
 declare const SIGNING_SESSION_POLICIES: {
-    readonly session: "session";
-    readonly perOperation: "per_operation";
+    readonly session: 'session';
+    readonly perOperation: 'per_operation';
 };
 export type SigningSessionPolicy = (typeof SIGNING_SESSION_POLICIES)[keyof typeof SIGNING_SESSION_POLICIES];
 export declare const SENSITIVE_OPERATION_POLICIES: {
-    readonly inheritSessionPolicy: "inherit_session_policy";
-    readonly requireFreshSameMethod: "require_fresh_same_method";
-    readonly requirePasskey: "require_passkey";
-    readonly denyEmailOtp: "deny_email_otp";
+    readonly inheritSessionPolicy: 'inherit_session_policy';
+    readonly requireFreshSameMethod: 'require_fresh_same_method';
+    readonly requirePasskey: 'require_passkey';
+    readonly denyEmailOtp: 'deny_email_otp';
 };
 export type SensitiveOperationPolicy = (typeof SENSITIVE_OPERATION_POLICIES)[keyof typeof SENSITIVE_OPERATION_POLICIES];
 export declare const SIGNER_SOURCES: {
-    readonly passkeyRegistration: "passkey_registration";
-    readonly emailOtpRegistration: "email_otp_registration";
-    readonly selfHostedImport: "self_hosted_import";
+    readonly passkeyRegistration: 'passkey_registration';
+    readonly emailOtpRegistration: 'email_otp_registration';
+    readonly selfHostedImport: 'self_hosted_import';
 };
 export type SignerSource = (typeof SIGNER_SOURCES)[keyof typeof SIGNER_SOURCES];
 export declare function isWalletAuthMethod(value: unknown): value is WalletAuthMethod;

package/dist/types/shared-ts/src/utils/signingSessionSeal.d.ts

@@ -4,17 +4,17 @@ import type { MpcMaterialActivationRef } from './domainIds';
 import type { ThresholdEcdsaChainTarget } from './thresholdEcdsaChainTarget';
 import { SIGNER_AUTH_METHODS, type SignerAuthMethod } from './signerDomain';
 export declare const SIGNING_SESSION_SEALED_RECORD_VERSION: 2;
-export declare const SIGNING_SESSION_SEAL_ALG: "shamir3pass-v2";
-export declare const SIGNING_SESSION_SEAL_GROUP_ID: "rfc2409-group2";
-export declare const SIGNING_SESSION_SEAL_STORAGE_SCOPE: "iframe_origin_indexeddb";
-export declare const SIGNING_SESSION_SECRET_KIND: "signing_session_secret32";
-export declare const ROUTER_AB_ED25519_NORMAL_SIGNING_STATE_KIND: "router_ab_ed25519_normal_signing_v1";
-export declare const ROUTER_AB_ED25519_HEALTH_PATH: "/router-ab/ed25519/healthz";
-export declare const ROUTER_AB_ED25519_WALLET_SESSION_PATH: "/router-ab/wallet-session/ed25519";
-export declare const ROUTER_AB_ED25519_NORMAL_SIGNING_PREPARE_PATH: "/router-ab/ed25519/sign/prepare";
-export declare const ROUTER_AB_ED25519_NORMAL_SIGNING_PATH: "/router-ab/ed25519/sign";
-export declare const WALLET_SESSION_SEAL_BASE_PATH: "/wallet-session/seal";
-export declare function decodeSigningSessionSecret32(plaintext: Uint8Array): Uint8Array | null;
+export declare const SIGNING_SESSION_SEAL_ALG: 'shamir3pass-v2';
+export declare const SIGNING_SESSION_SEAL_GROUP_ID: 'rfc2409-group2';
+export declare const SIGNING_SESSION_SEAL_STORAGE_SCOPE: 'iframe_origin_indexeddb';
+export declare const SIGNING_SESSION_SECRET_KIND: 'signing_session_secret32';
+export declare const ROUTER_AB_ED25519_NORMAL_SIGNING_STATE_KIND: 'router_ab_ed25519_normal_signing_v1';
+export declare const ROUTER_AB_ED25519_HEALTH_PATH: '/router-ab/ed25519/healthz';
+export declare const ROUTER_AB_ED25519_WALLET_SESSION_PATH: '/router-ab/wallet-session/ed25519';
+export declare const ROUTER_AB_ED25519_NORMAL_SIGNING_PREPARE_PATH: '/router-ab/ed25519/sign/prepare';
+export declare const ROUTER_AB_ED25519_NORMAL_SIGNING_PATH: '/router-ab/ed25519/sign';
+export declare const WALLET_SESSION_SEAL_BASE_PATH: '/wallet-session/seal';
+export declare function decodeSigningSessionSecret32(plaintext: Uint8Array): Uint8Array<ArrayBuffer> | null;
 export declare const PASSKEY_PRF_FIRST_SALT_V1: Uint8Array<ArrayBuffer>;
 export declare const PASSKEY_PRF_SECOND_SALT_V1: Uint8Array<ArrayBuffer>;
 export type SigningSessionSealAuthMethod = Extract<SignerAuthMethod, typeof SIGNER_AUTH_METHODS.passkey | typeof SIGNER_AUTH_METHODS.emailOtp>;

package/dist/types/shared-ts/src/utils/walletSessionFailure.d.ts

@@ -1,12 +1,12 @@
 export declare const WALLET_SESSION_FAILURE_CODES: {
-    readonly missing: "wallet_session_missing";
-    readonly signatureInvalid: "wallet_session_signature_invalid";
-    readonly claimsInvalid: "wallet_session_claims_invalid";
-    readonly invalid: "wallet_session_invalid";
-    readonly expired: "wallet_session_expired";
-    readonly scopeMismatch: "wallet_session_scope_mismatch";
-    readonly unavailable: "wallet_session_unavailable";
-    readonly budgetExhausted: "wallet_budget_exhausted";
+    readonly missing: 'wallet_session_missing';
+    readonly signatureInvalid: 'wallet_session_signature_invalid';
+    readonly claimsInvalid: 'wallet_session_claims_invalid';
+    readonly invalid: 'wallet_session_invalid';
+    readonly expired: 'wallet_session_expired';
+    readonly scopeMismatch: 'wallet_session_scope_mismatch';
+    readonly unavailable: 'wallet_session_unavailable';
+    readonly budgetExhausted: 'wallet_budget_exhausted';
 };
 export type WalletSessionFailureCode = (typeof WALLET_SESSION_FAILURE_CODES)[keyof typeof WALLET_SESSION_FAILURE_CODES];
 export declare function isWalletSessionFailureCode(value: unknown): value is WalletSessionFailureCode;

package/dist/types/shared-ts/src/utils/webauthnDeviceInfo.d.ts

@@ -26,8 +26,8 @@ export type WebAuthnAuthenticatorDeviceInfo = {
     /** Display name for the provider, e.g. "iCloud Keychain". */
     providerLabel?: string;
 };
-declare const WEBAUTHN_DEVICE_BROWSERS: readonly ["chrome", "safari", "firefox", "edge", "other"];
-declare const WEBAUTHN_DEVICE_OSES: readonly ["macos", "ios", "windows", "android", "linux", "other"];
+declare const WEBAUTHN_DEVICE_BROWSERS: readonly ['chrome', 'safari', 'firefox', 'edge', 'other'];
+declare const WEBAUTHN_DEVICE_OSES: readonly ['macos', 'ios', 'windows', 'android', 'linux', 'other'];
 export declare function deriveWebAuthnAuthenticatorDeviceInfo(input: {
     userAgent?: string;
     aaguid?: string;

package/dist/types/shared-ts/src/utils/wireSchema.d.ts

@@ -14,7 +14,7 @@ type ParseResult<T> = {
         readonly message: string;
     };
 };
-type Equal<A, B> = (<T>() => T extends A ? 1 : 2) extends <T>() => T extends B ? 1 : 2 ? true : false;
+type Equal<A, B> = (<T>() => T extends A ? 1 : 2) extends <T>() => (T extends B ? 1 : 2) ? true : false;
 type NeverPaddingKeys<T> = {
     [K in keyof T]-?: [T[K]] extends [undefined] ? K : never;
 }[keyof T];

package/dist/types/shared-ts/src/wallet-recovery/recoveryKeyId.d.ts

@@ -23,7 +23,7 @@ declare const walletRecoveryKeyIdBrand: unique symbol;
 export type DerivedWalletRecoveryKeyId = string & {
     readonly [walletRecoveryKeyIdBrand]: 'DerivedWalletRecoveryKeyId';
 };
-export declare const WALLET_RECOVERY_KEY_ID_PREFIX_V1: "wallet-rkid-v1-";
+export declare const WALLET_RECOVERY_KEY_ID_PREFIX_V1: 'wallet-rkid-v1-';
 export declare function parseDerivedWalletRecoveryKeyId(value: unknown, label?: string): DerivedWalletRecoveryKeyId;
 /**
  * Derives one code's id within a wallet's recovery set, from the decoded code