@seams/wallet 0.29.0 → 0.31.0

package/dist/{public/sdk/walletSessionAuthorizationStore-BivTUoKY.js → esm/sdk/walletSessionAuthorizationStore-CGt-s5fX.js}

@@ -1 +1 @@
-import{E as e,O as t,g as n,k as r}from"./domainIds-t1lp25yU.js";import{i,t as a}from"./activeWalletSession-BJ4B-nJo.js";import{d as o,h as s,m as c}from"./capabilityKinds-DVlGMspk.js";import{r as l}from"./canonicalPrimitives-Jd3i_Ngz.js";import{a as u,i as d,n as f}from"./presignatures-CkhuZ0YQ.js";import{t as p}from"./walletOwnershipGeneration-BZc6UKqX.js";var m=class extends Error{kind=`upgrade_required`;code=`upgrade_required`;constructor(e){super(e),this.name=`WalletSessionAuthorizationUpgradeRequiredError`}};const h=u.walletSessionAuthorizations;function g(e,t){if(typeof e!=`object`||!e||Array.isArray(e))return null;let n=Object.keys(e);if(n.length!==t.length||n.some(e=>!t.includes(e)))return null;let r=new Map;for(let t of n)r.set(t,Reflect.get(e,t));return r}function _(e,t){if(!(typeof e!=`object`||!e||Array.isArray(e)))return Reflect.get(e,t)}function v(e){switch(e){case`expired`:case`exhausted`:case`replaced`:case`wallet_locked`:case`invalidated`:return e;default:return null}}const y=[`kind`,`walletId`,`authorityId`,`authMethodId`,`authorizationId`,`quotaId`,`authorityDigestB64u`,`authorityRevocationEpoch`,`capabilitySubjects`,`issuedAtMs`,`expiresAtMs`],b=[...y,`retiredAtMs`,`retirementReason`],x=[`record_version`,`wallet_session_id`,`authorization_id`,`wallet_id`,`wallet_authority_id`,`wallet_auth_method_id`,`authority_digest_b64u`,`authority_revocation_epoch`,`status`,`issued_at_ms`,`expires_at_ms`,`record`,`operation_credential`],S=/^wallet_session_authorization_v([0-9]+)$/;function C(e){if(typeof e!=`string`)return null;let t=S.exec(e);if(!t)return null;let n=Number(t[1]);return Number.isSafeInteger(n)?n:null}function w(e){let t=typeof e==`object`&&!!e&&!Array.isArray(e)&&Object.prototype.hasOwnProperty.call(e,`record_version`),n=C(_(e,`record_version`)),r=t?null:C(_(_(e,`record`),`recordVersion`)),i=n??r;return i===null?{kind:`unknown`}:i>=3&&i<6?{kind:`legacy`,version:i}:t&&i===6?{kind:`current`,version:i}:t&&i>6?{kind:`future`,version:i}:{kind:`unknown`}}function T(e,t){if(w(e).kind!==`future`||_(e,`wallet_id`)!==t.walletId)return!1;let n=_(e,`wallet_authority_id`),r=_(e,`wallet_auth_method_id`);return typeof n!=`string`||typeof r!=`string`?!0:n===t.authorityId&&r===t.authMethodId}function E(e){return typeof e==`number`&&Number.isSafeInteger(e)&&e>=0}function D(e){let t=_(e,`wallet_session_id`);if(typeof t!=`string`)throw Error(`Stored Wallet Session authorization key is invalid`);return t}function O(e){switch(e.kind){case`sign`:case`export_keys`:return`${e.kind}:${e.keyFamily}:${e.materialActivation.activationId}`;case`link_devices`:case`revoke_devices`:return e.kind;default:return k(e)}}function k(e){throw Error(`Unknown Wallet Capability subject: ${String(e)}`)}function A(e){let t=_(e,`kind`);if(t===`sign`||t===`export_keys`){let r=g(e,[`kind`,`keyFamily`,`materialActivation`]);if(!r)return null;let i=r.get(`keyFamily`);if(i!==`ed25519`&&i!==`ecdsa_secp256k1`)return null;let a=n(r.get(`materialActivation`));return a.ok?{kind:t,keyFamily:i,materialActivation:a.value}:null}return(t===`link_devices`||t===`revoke_devices`)&&g(e,[`kind`])?{kind:t}:null}function j(e){if(!Array.isArray(e)||e.length===0)return null;let t=[];for(let n of e){let e=A(n);if(!e)return null;t.push(e)}let n=new Set;for(let e of t){let t=O(e);if(n.has(t))return null;n.add(t)}let[r,...i]=t;return r?[r,...i]:null}function M(n){let i=_(n,`kind`),a=i===`active_wallet_session_v1`?g(n,y):i===`retired_wallet_session_v1`?g(n,b):null;if(!a)return null;let s=r(a.get(`walletId`)),u=t(a.get(`authorityId`)),d=e(a.get(`authMethodId`)),f=c(a.get(`authorizationId`)),p=o(a.get(`quotaId`));if(!s.ok||!u.ok||!d.ok||!f.ok||!p.ok)return null;let m;try{m=l(a.get(`authorityDigestB64u`))}catch{return null}let h=j(a.get(`capabilitySubjects`)),x=a.get(`authorityRevocationEpoch`),S=a.get(`issuedAtMs`),C=a.get(`expiresAtMs`);if(!h||!E(x)||!E(S)||!E(C)||C<=S)return null;let w={walletId:s.value,authorityId:u.value,authMethodId:d.value,authorizationId:f.value,quotaId:p.value,authorityDigestB64u:m,authorityRevocationEpoch:x,capabilitySubjects:h,issuedAtMs:S,expiresAtMs:C};if(i===`active_wallet_session_v1`)return{kind:`active_wallet_session_v1`,walletId:w.walletId,authorityId:w.authorityId,authMethodId:w.authMethodId,authorizationId:w.authorizationId,quotaId:w.quotaId,authorityDigestB64u:w.authorityDigestB64u,authorityRevocationEpoch:w.authorityRevocationEpoch,capabilitySubjects:w.capabilitySubjects,issuedAtMs:w.issuedAtMs,expiresAtMs:w.expiresAtMs};if(i===`retired_wallet_session_v1`){let e=a.get(`retiredAtMs`);if(!E(e)||e<w.issuedAtMs)return null;let t=v(a.get(`retirementReason`));return!t||t===`expired`&&e<w.expiresAtMs?null:{kind:`retired_wallet_session_v1`,walletId:w.walletId,authorityId:w.authorityId,authMethodId:w.authMethodId,authorizationId:w.authorizationId,quotaId:w.quotaId,authorityDigestB64u:w.authorityDigestB64u,authorityRevocationEpoch:w.authorityRevocationEpoch,capabilitySubjects:w.capabilitySubjects,issuedAtMs:w.issuedAtMs,expiresAtMs:w.expiresAtMs,retiredAtMs:e,retirementReason:t}}return null}function N(e){if(!E(e.retiredAtMs))throw Error(`Retired Wallet Session v1 time is invalid`);let t=M({kind:`retired_wallet_session_v1`,walletId:e.active.walletId,authorityId:e.active.authorityId,authMethodId:e.active.authMethodId,authorizationId:e.active.authorizationId,quotaId:e.active.quotaId,authorityDigestB64u:e.active.authorityDigestB64u,authorityRevocationEpoch:e.active.authorityRevocationEpoch,capabilitySubjects:e.active.capabilitySubjects,issuedAtMs:e.active.issuedAtMs,expiresAtMs:e.active.expiresAtMs,retiredAtMs:e.retiredAtMs,retirementReason:e.reason});if(!t||t.kind!==`retired_wallet_session_v1`)throw Error(`Retired Wallet Session v1 is invalid`);return t}function P(e,t){let n=M(e);if(!n||n.kind!==`active_wallet_session_v1`)throw Error(`Active Wallet Session v1 is invalid`);let r;try{r=i(t)}catch{throw Error(`Wallet Session operation credential is invalid`)}let a={record_version:`wallet_session_authorization_v6`,wallet_session_id:r.walletSessionId,authorization_id:n.authorizationId,wallet_id:n.walletId,wallet_authority_id:n.authorityId,wallet_auth_method_id:n.authMethodId,authority_digest_b64u:n.authorityDigestB64u,authority_revocation_epoch:n.authorityRevocationEpoch,status:`active`,issued_at_ms:n.issuedAtMs,expires_at_ms:n.expiresAtMs,record:{kind:n.kind,walletId:n.walletId,authorityId:n.authorityId,authMethodId:n.authMethodId,authorizationId:n.authorizationId,walletSessionId:r.walletSessionId,quotaId:n.quotaId,authorityDigestB64u:n.authorityDigestB64u,authorityRevocationEpoch:n.authorityRevocationEpoch,capabilitySubjects:n.capabilitySubjects,issuedAtMs:n.issuedAtMs,expiresAtMs:n.expiresAtMs},operation_credential:r};if(!F(a))throw Error(`Wallet Session authorization v6 is invalid`);return a}function F(e){let t=g(e,x);if(!t||t.get(`record_version`)!==`wallet_session_authorization_v6`||t.get(`status`)!==`active`)return null;let n=s(t.get(`wallet_session_id`)),r=c(t.get(`authorization_id`));if(!n.ok||!r.ok)return null;let a;try{a=i(t.get(`operation_credential`))}catch{return null}if(n.value!==a.walletSessionId)return null;let o=g(t.get(`record`),[...y,`walletSessionId`]);if(!o)return null;let l=s(o.get(`walletSessionId`));if(!l.ok||l.value!==n.value)return null;let u=M({kind:o.get(`kind`),walletId:o.get(`walletId`),authorityId:o.get(`authorityId`),authMethodId:o.get(`authMethodId`),authorizationId:o.get(`authorizationId`),quotaId:o.get(`quotaId`),authorityDigestB64u:o.get(`authorityDigestB64u`),authorityRevocationEpoch:o.get(`authorityRevocationEpoch`),capabilitySubjects:o.get(`capabilitySubjects`),issuedAtMs:o.get(`issuedAtMs`),expiresAtMs:o.get(`expiresAtMs`)});return!u||u.kind!==`active_wallet_session_v1`||t.get(`wallet_id`)!==u.walletId||t.get(`wallet_authority_id`)!==u.authorityId||t.get(`wallet_auth_method_id`)!==u.authMethodId||t.get(`authority_digest_b64u`)!==u.authorityDigestB64u||t.get(`authority_revocation_epoch`)!==u.authorityRevocationEpoch||t.get(`issued_at_ms`)!==u.issuedAtMs||t.get(`expires_at_ms`)!==u.expiresAtMs||r.value!==u.authorizationId?null:{record:u,operationCredential:a,physicalKey:n.value}}async function I(e){let t=M(e.active);if(!t||t.kind!==`active_wallet_session_v1`)throw Error(`Active Wallet Session v1 is invalid`);let n=i(e.operationCredential);await p(e.ctx,t.walletId,n.ownershipGeneration);let r=P(t,n),o=!0,s=e.ctx.store(h),c=await s.index(d.walletId).getAll(t.walletId);for(let e of c){let r=w(e);if(r.kind===`future`)continue;if(r.kind===`legacy`){await s.delete(D(e));continue}if(r.kind!==`current`)throw Error(`Stored Wallet Session authorization row is corrupt`);let i=F(e);if(!i)throw Error(`Stored Wallet Session authorization v6 is corrupt`);let c=i.record;if(i.operationCredential.walletSessionId===n.walletSessionId&&(i.operationCredential.token!==n.token||i.operationCredential.ownershipGeneration!==n.ownershipGeneration))throw Error(`Stored Wallet Session conflicts with the issued operation credential`);if(i.operationCredential.ownershipGeneration<n.ownershipGeneration){await s.delete(i.physicalKey);continue}if(!(c.kind!==`active_wallet_session_v1`||c.authorityId!==t.authorityId||c.authMethodId!==t.authMethodId)){if(c.authorizationId===t.authorizationId&&i.operationCredential.walletSessionId===n.walletSessionId){o=!a(c,t);continue}await s.delete(i.physicalKey)}}return o&&await s.put(r),t}async function L(e){let t=e.ctx.store(h),n=await t.index(d.walletId).getAll(e.walletId),r=null,i=!1;for(let a of n){if(T(a,e)){i=!0;continue}let n=w(a);if(n.kind===`legacy`){await t.delete(D(a));continue}if(n.kind!==`current`)return{kind:`corrupt`};let o=F(a);if(!o)return{kind:`corrupt`};if(!(o.record.walletId!==e.walletId||o.record.authorityId!==e.authorityId||o.record.authMethodId!==e.authMethodId)){if(r)return{kind:`corrupt`};r=o}}return i?{kind:`upgrade_required`}:r?{kind:`found`,...r}:{kind:`missing`}}var R=class{constructor(e=f){this.manager=e}async writeExactWithOperationCredential(e){let t=M(e.record);if(!t||t.kind!==`active_wallet_session_v1`)throw Error(`Active Wallet Session v1 is invalid`);let n=i(e.operationCredential);return await this.replaceExactActive({active:t,operationCredential:n}),t}async refreshExactWithOperationCredential(e){let t=M(e.expected),n=M(e.record);if(!t||t.kind!==`active_wallet_session_v1`||!n||n.kind!==`active_wallet_session_v1`)throw Error(`Active Wallet Session refresh is invalid`);for(let e of y)if(!(e===`kind`||e===`capabilitySubjects`)&&t[e]!==n[e])throw Error(`Wallet Session refresh changed its exact identity`);let r=P(n,i(e.operationCredential));return this.manager.runTransaction([h],`readwrite`,B.bind(null,t,r))}async readExact(e){return this.manager.runTransaction([h],`readwrite`,V.bind(null,e))}async readExactWithOperationCredential(e){let t=await this.readExactActiveForWallet(e);switch(t.kind){case`found`:case`missing`:case`upgrade_required`:return t;case`corrupt`:throw Error(`Stored Wallet Session authorization v6 is corrupt`);case`persistence_unavailable`:throw Error(`Wallet Session authorization persistence is unavailable`)}}async readExactActiveForWallet(e){try{return await this.manager.runTransaction([h],`readwrite`,H.bind(null,e))}catch(e){return e instanceof z?{kind:`corrupt`}:{kind:`persistence_unavailable`}}}async retireExactActiveForWallet(e){if(!E(e.retiredAtMs))throw Error(`Wallet Session v1 retirement time is invalid`);return this.manager.runTransaction([h],`readwrite`,U.bind(null,e))}async replaceExactActive(e){return this.manager.runTransaction([h,u.appState,u.ecdsaClientPresignatures],`readwrite`,W.bind(null,e))}async clearWallet(e){await this.manager.runTransaction([h],`readwrite`,G.bind(null,e))}async clearAll(){await this.manager.runTransaction([h],`readwrite`,K)}},z=class extends Error{};async function B(e,t,n){let r=n.store(h),i=t.operation_credential,o=await r.get(i.walletSessionId);if(o===void 0)return`superseded`;let s=F(o);if(!s)throw Error(`Stored Wallet Session authorization v6 is corrupt`);return!a(s.record,e)||s.operationCredential.token!==i.token?`superseded`:(await r.put(t),`updated`)}async function V(e,t){let n=t.store(h),r=await n.get(e);if(r===void 0)return null;switch(w(r).kind){case`future`:throw new m(`Wallet Session authorization requires a newer client`);case`legacy`:return await n.delete(D(r)),null;case`current`:break;case`unknown`:throw Error(`Stored Wallet Session authorization v6 is corrupt`)}let i=F(r);if(!i)throw Error(`Stored Wallet Session authorization v6 is corrupt`);return i.record}async function H(e,t){let n=await L({ctx:t,walletId:e.walletId,authorityId:e.authorityId,authMethodId:e.authMethodId});if(n.kind===`corrupt`)throw new z(`Stored Wallet Session authorization v6 is corrupt`);return n}async function U(e,t){let n=t.store(h),r=[],i=await n.index(d.walletId).getAll(e.walletId);for(let t of i){let i=w(t);if(i.kind===`future`)continue;if(i.kind===`legacy`){await n.delete(D(t));continue}if(i.kind!==`current`)continue;let a=F(t);if(!a)throw Error(`Stored Wallet Session authorization v6 is corrupt`);let o=a.record;if(o.kind!==`active_wallet_session_v1`)continue;let s=N({active:o,reason:e.reason,retiredAtMs:e.retiredAtMs});await n.delete(a.physicalKey),r.push(s)}return r}function W(e,t){return I({ctx:t,active:e.active,operationCredential:e.operationCredential})}async function G(e,t){let n=t.store(h),r=await n.index(d.walletId).getAllKeys(e);for(let e of r)await n.delete(e)}function K(e){return e.store(h).clear()}const q=new R;export{P as a,I as i,F as n,q as o,L as r,m as t};
+import{E as e,O as t,g as n,k as r}from"./domainIds-t1lp25yU.js";import{i,t as a}from"./activeWalletSession-HAOgRKzn.js";import{d as o,h as s,m as c}from"./capabilityKinds-Cafn86Y1.js";import{r as l}from"./canonicalPrimitives-DKeS3M40.js";import{a as u,i as d,n as f}from"./presignatures-B9KnQyfE.js";import{t as p}from"./walletOwnershipGeneration-B3uE9GRG.js";var m=class extends Error{kind=`upgrade_required`;code=`upgrade_required`;constructor(e){super(e),this.name=`WalletSessionAuthorizationUpgradeRequiredError`}};const h=u.walletSessionAuthorizations;function g(e,t){if(typeof e!=`object`||!e||Array.isArray(e))return null;let n=Object.keys(e);if(n.length!==t.length||n.some(e=>!t.includes(e)))return null;let r=new Map;for(let t of n)r.set(t,Reflect.get(e,t));return r}function _(e,t){if(!(typeof e!=`object`||!e||Array.isArray(e)))return Reflect.get(e,t)}function v(e){switch(e){case`expired`:case`exhausted`:case`replaced`:case`wallet_locked`:case`invalidated`:return e;default:return null}}const y=[`kind`,`walletId`,`authorityId`,`authMethodId`,`authorizationId`,`quotaId`,`authorityDigestB64u`,`authorityRevocationEpoch`,`capabilitySubjects`,`issuedAtMs`,`expiresAtMs`],b=[...y,`retiredAtMs`,`retirementReason`],x=[`record_version`,`wallet_session_id`,`authorization_id`,`wallet_id`,`wallet_authority_id`,`wallet_auth_method_id`,`authority_digest_b64u`,`authority_revocation_epoch`,`status`,`issued_at_ms`,`expires_at_ms`,`record`,`operation_credential`],S=/^wallet_session_authorization_v([0-9]+)$/;function C(e){if(typeof e!=`string`)return null;let t=S.exec(e);if(!t)return null;let n=Number(t[1]);return Number.isSafeInteger(n)?n:null}function w(e){let t=typeof e==`object`&&!!e&&!Array.isArray(e)&&Object.prototype.hasOwnProperty.call(e,`record_version`),n=C(_(e,`record_version`)),r=t?null:C(_(_(e,`record`),`recordVersion`)),i=n??r;return i===null?{kind:`unknown`}:i>=3&&i<6?{kind:`legacy`,version:i}:t&&i===6?{kind:`current`,version:i}:t&&i>6?{kind:`future`,version:i}:{kind:`unknown`}}function T(e,t){if(w(e).kind!==`future`||_(e,`wallet_id`)!==t.walletId)return!1;let n=_(e,`wallet_authority_id`),r=_(e,`wallet_auth_method_id`);return typeof n!=`string`||typeof r!=`string`?!0:n===t.authorityId&&r===t.authMethodId}function E(e){return typeof e==`number`&&Number.isSafeInteger(e)&&e>=0}function D(e){let t=_(e,`wallet_session_id`);if(typeof t!=`string`)throw Error(`Stored Wallet Session authorization key is invalid`);return t}function O(e){switch(e.kind){case`sign`:case`export_keys`:return`${e.kind}:${e.keyFamily}:${e.materialActivation.activationId}`;case`link_devices`:case`revoke_devices`:return e.kind;default:return k(e)}}function k(e){throw Error(`Unknown Wallet Capability subject: ${String(e)}`)}function A(e){let t=_(e,`kind`);if(t===`sign`||t===`export_keys`){let r=g(e,[`kind`,`keyFamily`,`materialActivation`]);if(!r)return null;let i=r.get(`keyFamily`);if(i!==`ed25519`&&i!==`ecdsa_secp256k1`)return null;let a=n(r.get(`materialActivation`));return a.ok?{kind:t,keyFamily:i,materialActivation:a.value}:null}return(t===`link_devices`||t===`revoke_devices`)&&g(e,[`kind`])?{kind:t}:null}function j(e){if(!Array.isArray(e)||e.length===0)return null;let t=[];for(let n of e){let e=A(n);if(!e)return null;t.push(e)}let n=new Set;for(let e of t){let t=O(e);if(n.has(t))return null;n.add(t)}let[r,...i]=t;return r?[r,...i]:null}function M(n){let i=_(n,`kind`),a=i===`active_wallet_session_v1`?g(n,y):i===`retired_wallet_session_v1`?g(n,b):null;if(!a)return null;let s=r(a.get(`walletId`)),u=t(a.get(`authorityId`)),d=e(a.get(`authMethodId`)),f=c(a.get(`authorizationId`)),p=o(a.get(`quotaId`));if(!s.ok||!u.ok||!d.ok||!f.ok||!p.ok)return null;let m;try{m=l(a.get(`authorityDigestB64u`))}catch{return null}let h=j(a.get(`capabilitySubjects`)),x=a.get(`authorityRevocationEpoch`),S=a.get(`issuedAtMs`),C=a.get(`expiresAtMs`);if(!h||!E(x)||!E(S)||!E(C)||C<=S)return null;let w={walletId:s.value,authorityId:u.value,authMethodId:d.value,authorizationId:f.value,quotaId:p.value,authorityDigestB64u:m,authorityRevocationEpoch:x,capabilitySubjects:h,issuedAtMs:S,expiresAtMs:C};if(i===`active_wallet_session_v1`)return{kind:`active_wallet_session_v1`,walletId:w.walletId,authorityId:w.authorityId,authMethodId:w.authMethodId,authorizationId:w.authorizationId,quotaId:w.quotaId,authorityDigestB64u:w.authorityDigestB64u,authorityRevocationEpoch:w.authorityRevocationEpoch,capabilitySubjects:w.capabilitySubjects,issuedAtMs:w.issuedAtMs,expiresAtMs:w.expiresAtMs};if(i===`retired_wallet_session_v1`){let e=a.get(`retiredAtMs`);if(!E(e)||e<w.issuedAtMs)return null;let t=v(a.get(`retirementReason`));return!t||t===`expired`&&e<w.expiresAtMs?null:{kind:`retired_wallet_session_v1`,walletId:w.walletId,authorityId:w.authorityId,authMethodId:w.authMethodId,authorizationId:w.authorizationId,quotaId:w.quotaId,authorityDigestB64u:w.authorityDigestB64u,authorityRevocationEpoch:w.authorityRevocationEpoch,capabilitySubjects:w.capabilitySubjects,issuedAtMs:w.issuedAtMs,expiresAtMs:w.expiresAtMs,retiredAtMs:e,retirementReason:t}}return null}function N(e){if(!E(e.retiredAtMs))throw Error(`Retired Wallet Session v1 time is invalid`);let t=M({kind:`retired_wallet_session_v1`,walletId:e.active.walletId,authorityId:e.active.authorityId,authMethodId:e.active.authMethodId,authorizationId:e.active.authorizationId,quotaId:e.active.quotaId,authorityDigestB64u:e.active.authorityDigestB64u,authorityRevocationEpoch:e.active.authorityRevocationEpoch,capabilitySubjects:e.active.capabilitySubjects,issuedAtMs:e.active.issuedAtMs,expiresAtMs:e.active.expiresAtMs,retiredAtMs:e.retiredAtMs,retirementReason:e.reason});if(!t||t.kind!==`retired_wallet_session_v1`)throw Error(`Retired Wallet Session v1 is invalid`);return t}function P(e,t){let n=M(e);if(!n||n.kind!==`active_wallet_session_v1`)throw Error(`Active Wallet Session v1 is invalid`);let r;try{r=i(t)}catch{throw Error(`Wallet Session operation credential is invalid`)}let a={record_version:`wallet_session_authorization_v6`,wallet_session_id:r.walletSessionId,authorization_id:n.authorizationId,wallet_id:n.walletId,wallet_authority_id:n.authorityId,wallet_auth_method_id:n.authMethodId,authority_digest_b64u:n.authorityDigestB64u,authority_revocation_epoch:n.authorityRevocationEpoch,status:`active`,issued_at_ms:n.issuedAtMs,expires_at_ms:n.expiresAtMs,record:{kind:n.kind,walletId:n.walletId,authorityId:n.authorityId,authMethodId:n.authMethodId,authorizationId:n.authorizationId,walletSessionId:r.walletSessionId,quotaId:n.quotaId,authorityDigestB64u:n.authorityDigestB64u,authorityRevocationEpoch:n.authorityRevocationEpoch,capabilitySubjects:n.capabilitySubjects,issuedAtMs:n.issuedAtMs,expiresAtMs:n.expiresAtMs},operation_credential:r};if(!F(a))throw Error(`Wallet Session authorization v6 is invalid`);return a}function F(e){let t=g(e,x);if(!t||t.get(`record_version`)!==`wallet_session_authorization_v6`||t.get(`status`)!==`active`)return null;let n=s(t.get(`wallet_session_id`)),r=c(t.get(`authorization_id`));if(!n.ok||!r.ok)return null;let a;try{a=i(t.get(`operation_credential`))}catch{return null}if(n.value!==a.walletSessionId)return null;let o=g(t.get(`record`),[...y,`walletSessionId`]);if(!o)return null;let l=s(o.get(`walletSessionId`));if(!l.ok||l.value!==n.value)return null;let u=M({kind:o.get(`kind`),walletId:o.get(`walletId`),authorityId:o.get(`authorityId`),authMethodId:o.get(`authMethodId`),authorizationId:o.get(`authorizationId`),quotaId:o.get(`quotaId`),authorityDigestB64u:o.get(`authorityDigestB64u`),authorityRevocationEpoch:o.get(`authorityRevocationEpoch`),capabilitySubjects:o.get(`capabilitySubjects`),issuedAtMs:o.get(`issuedAtMs`),expiresAtMs:o.get(`expiresAtMs`)});return!u||u.kind!==`active_wallet_session_v1`||t.get(`wallet_id`)!==u.walletId||t.get(`wallet_authority_id`)!==u.authorityId||t.get(`wallet_auth_method_id`)!==u.authMethodId||t.get(`authority_digest_b64u`)!==u.authorityDigestB64u||t.get(`authority_revocation_epoch`)!==u.authorityRevocationEpoch||t.get(`issued_at_ms`)!==u.issuedAtMs||t.get(`expires_at_ms`)!==u.expiresAtMs||r.value!==u.authorizationId?null:{record:u,operationCredential:a,physicalKey:n.value}}async function I(e){let t=M(e.active);if(!t||t.kind!==`active_wallet_session_v1`)throw Error(`Active Wallet Session v1 is invalid`);let n=i(e.operationCredential);await p(e.ctx,t.walletId,n.ownershipGeneration);let r=P(t,n),o=!0,s=e.ctx.store(h),c=await s.index(d.walletId).getAll(t.walletId);for(let e of c){let r=w(e);if(r.kind===`future`)continue;if(r.kind===`legacy`){await s.delete(D(e));continue}if(r.kind!==`current`)throw Error(`Stored Wallet Session authorization row is corrupt`);let i=F(e);if(!i)throw Error(`Stored Wallet Session authorization v6 is corrupt`);let c=i.record;if(i.operationCredential.walletSessionId===n.walletSessionId&&(i.operationCredential.token!==n.token||i.operationCredential.ownershipGeneration!==n.ownershipGeneration))throw Error(`Stored Wallet Session conflicts with the issued operation credential`);if(i.operationCredential.ownershipGeneration<n.ownershipGeneration){await s.delete(i.physicalKey);continue}if(!(c.kind!==`active_wallet_session_v1`||c.authorityId!==t.authorityId||c.authMethodId!==t.authMethodId)){if(c.authorizationId===t.authorizationId&&i.operationCredential.walletSessionId===n.walletSessionId){o=!a(c,t);continue}await s.delete(i.physicalKey)}}return o&&await s.put(r),t}async function L(e){let t=e.ctx.store(h),n=await t.index(d.walletId).getAll(e.walletId),r=null,i=!1;for(let a of n){if(T(a,e)){i=!0;continue}let n=w(a);if(n.kind===`legacy`){await t.delete(D(a));continue}if(n.kind!==`current`)return{kind:`corrupt`};let o=F(a);if(!o)return{kind:`corrupt`};if(!(o.record.walletId!==e.walletId||o.record.authorityId!==e.authorityId||o.record.authMethodId!==e.authMethodId)){if(r)return{kind:`corrupt`};r=o}}return i?{kind:`upgrade_required`}:r?{kind:`found`,...r}:{kind:`missing`}}var R=class{constructor(e=f){this.manager=e}async writeExactWithOperationCredential(e){let t=M(e.record);if(!t||t.kind!==`active_wallet_session_v1`)throw Error(`Active Wallet Session v1 is invalid`);let n=i(e.operationCredential);return await this.replaceExactActive({active:t,operationCredential:n}),t}async refreshExactWithOperationCredential(e){let t=M(e.expected),n=M(e.record);if(!t||t.kind!==`active_wallet_session_v1`||!n||n.kind!==`active_wallet_session_v1`)throw Error(`Active Wallet Session refresh is invalid`);for(let e of y)if(!(e===`kind`||e===`capabilitySubjects`)&&t[e]!==n[e])throw Error(`Wallet Session refresh changed its exact identity`);let r=P(n,i(e.operationCredential));return this.manager.runTransaction([h],`readwrite`,B.bind(null,t,r))}async readExact(e){return this.manager.runTransaction([h],`readwrite`,V.bind(null,e))}async readExactWithOperationCredential(e){let t=await this.readExactActiveForWallet(e);switch(t.kind){case`found`:case`missing`:case`upgrade_required`:return t;case`corrupt`:throw Error(`Stored Wallet Session authorization v6 is corrupt`);case`persistence_unavailable`:throw Error(`Wallet Session authorization persistence is unavailable`)}}async readExactActiveForWallet(e){try{return await this.manager.runTransaction([h],`readwrite`,H.bind(null,e))}catch(e){return e instanceof z?{kind:`corrupt`}:{kind:`persistence_unavailable`}}}async retireExactActiveForWallet(e){if(!E(e.retiredAtMs))throw Error(`Wallet Session v1 retirement time is invalid`);return this.manager.runTransaction([h],`readwrite`,U.bind(null,e))}async replaceExactActive(e){return this.manager.runTransaction([h,u.appState,u.ecdsaClientPresignatures],`readwrite`,W.bind(null,e))}async clearWallet(e){await this.manager.runTransaction([h],`readwrite`,G.bind(null,e))}async clearAll(){await this.manager.runTransaction([h],`readwrite`,K)}},z=class extends Error{};async function B(e,t,n){let r=n.store(h),i=t.operation_credential,o=await r.get(i.walletSessionId);if(o===void 0)return`superseded`;let s=F(o);if(!s)throw Error(`Stored Wallet Session authorization v6 is corrupt`);return!a(s.record,e)||s.operationCredential.token!==i.token?`superseded`:(await r.put(t),`updated`)}async function V(e,t){let n=t.store(h),r=await n.get(e);if(r===void 0)return null;switch(w(r).kind){case`future`:throw new m(`Wallet Session authorization requires a newer client`);case`legacy`:return await n.delete(D(r)),null;case`current`:break;case`unknown`:throw Error(`Stored Wallet Session authorization v6 is corrupt`)}let i=F(r);if(!i)throw Error(`Stored Wallet Session authorization v6 is corrupt`);return i.record}async function H(e,t){let n=await L({ctx:t,walletId:e.walletId,authorityId:e.authorityId,authMethodId:e.authMethodId});if(n.kind===`corrupt`)throw new z(`Stored Wallet Session authorization v6 is corrupt`);return n}async function U(e,t){let n=t.store(h),r=[],i=await n.index(d.walletId).getAll(e.walletId);for(let t of i){let i=w(t);if(i.kind===`future`)continue;if(i.kind===`legacy`){await n.delete(D(t));continue}if(i.kind!==`current`)continue;let a=F(t);if(!a)throw Error(`Stored Wallet Session authorization v6 is corrupt`);let o=a.record;if(o.kind!==`active_wallet_session_v1`)continue;let s=N({active:o,reason:e.reason,retiredAtMs:e.retiredAtMs});await n.delete(a.physicalKey),r.push(s)}return r}function W(e,t){return I({ctx:t,active:e.active,operationCredential:e.operationCredential})}async function G(e,t){let n=t.store(h),r=await n.index(d.walletId).getAllKeys(e);for(let e of r)await n.delete(e)}function K(e){return e.store(h).clear()}const q=new R;export{P as a,I as i,F as n,q as o,L as r,m as t};

package/dist/esm/shared-ts/src/utils/index.js

@@ -8,8 +8,8 @@ import "./errors.js";
 import "./nearRpcResults.js";
 import "./authenticatorOptions.js";
 import "./secureRandomId.js";
-import "./theme.js";
 import "./signingSessionSeal.js";
+import "./theme.js";
 import "./jsonRpc.js";
 import "./routerAbPublicKeyset.js";
 import "./routerAbEd25519YaoDigests.js";

package/dist/esm/wasm/router_ab_ed25519_yao_client/pkg/router_ab_ed25519_yao_client.d.ts

@@ -1,61 +1,85 @@
 /* tslint:disable */
 /* eslint-disable */
-
+/**
+ * Opens the wallet's Ed25519 continuity cache with any enrolled factor.
+ *
+ * **The unlock read side, and deliberately one call.** The custody seed
+ * exists only between opening the envelope and deriving the cache key.
+ * Splitting this into "open the envelope" and "open the cache" would put the
+ * seed in a caller's hands, and every caller here is JavaScript.
+ *
+ * Exported from *this* module rather than the ceremony's because the handle
+ * it returns has to be the one the signing path already uses: two wasm
+ * modules each define their own `WasmActivatedClientV1`, and a handle from
+ * the wrong module cannot sign.
+ *
+ * The caller never assembles the cache seal binding. It is rebuilt here from
+ * the record's own fields, because it is both HKDF input and AEAD associated
+ * data — a caller that assembled it even slightly differently would hold a
+ * record that never opens, and the failure would read as a bad factor.
+ *
+ * Any factor works, which is the point of sealing under the seed: a passkey
+ * enrolled long after registration opens the cache the Email OTP enrollment
+ * wrote, and the reverse.
+ */
+export function openWalletCustodyEd25519MaterialV1(factor_secret: Uint8Array, envelope_binding_json: string, envelope_nonce: Uint8Array, envelope_ciphertext: Uint8Array, envelope_aad_hash: Uint8Array, envelope_ciphertext_digest: Uint8Array, application_binding_digest: Uint8Array, registered_public_key: Uint8Array, state_epoch: bigint, client_participant_id: number, signing_worker_participant_id: number, signing_worker_verifying_share: Uint8Array, cache_nonce: Uint8Array, cache_ciphertext: Uint8Array): WasmActivatedClientV1;
+/**
+ * Opens a verified owner custody-seed envelope and derives the exact Client
+ * root for an approved lane job. This is the owner-capability branch; ordinary
+ * factor opens continue to require a dedicated Client-root envelope.
+ */
+export function ed25519_yao_lane_source_from_wallet_seed_v1(factor_secret: Uint8Array, envelope_binding_json: string, envelope_nonce: Uint8Array, envelope_ciphertext: Uint8Array, envelope_aad_hash: Uint8Array, envelope_ciphertext_digest: Uint8Array, application_binding_digest: Uint8Array, wallet_key_id: string, enrollment_id: string, revocation_epoch: bigint, registered_public_key: Uint8Array): WasmEd25519YaoLaneSourceV1;
 /**
  * Verified Client activation material retained inside the browser WASM boundary.
  */
 export class WasmActivatedClientV1 {
-    private constructor();
-    free(): void;
-    [Symbol.dispose](): void;
-    /**
-     * Creates a signature share while retaining the Client scalar inside WASM.
-     */
-    create_signing_share(client_participant_id: number, signing_worker_participant_id: number, admitted_digest: Uint8Array, signing_worker_commitments_json: string, signing_worker_verifying_share: Uint8Array): WasmClientSigningShareV1;
-    /**
-     * Imports one linked-device Client share after verifying the complete
-     * public threshold relation carried by its activation receipt.
-     */
-    static import_linked_material(client_scalar_share: Uint8Array, client_participant_id: number, signing_worker_participant_id: number, public_receipt_json: string): WasmActivatedClientV1;
-    /**
-     * Opens a same-device envelope and re-verifies its public threshold relation.
-     */
-    static import_local_material(passkey_prf_first: Uint8Array, binding: Uint8Array, nonce: Uint8Array, ciphertext: Uint8Array, expected_registered_public_key: Uint8Array, expected_state_epoch: bigint, client_participant_id: number, signing_worker_participant_id: number, signing_worker_verifying_share: Uint8Array): WasmActivatedClientV1;
-    /**
-     * Returns the verified 32-byte Ed25519 public key.
-     */
-    registered_public_key(): Uint8Array;
-    /**
-     * Authenticates and encrypts the active Client material for same-device rehydration.
-     */
-    seal_local_material(passkey_prf_first: Uint8Array, binding: Uint8Array, nonce: Uint8Array): Uint8Array;
-    /**
-     * Returns the activated SigningWorker state epoch.
-     */
-    state_epoch(): bigint;
+  private constructor();
+  free(): void;
+  /**
+   * Returns the activated SigningWorker state epoch.
+   */
+  state_epoch(): bigint;
+  /**
+   * Authenticates and encrypts the active Client material for same-device rehydration.
+   */
+  seal_local_material(passkey_prf_first: Uint8Array, binding: Uint8Array, nonce: Uint8Array): Uint8Array;
+  /**
+   * Creates a signature share while retaining the Client scalar inside WASM.
+   */
+  create_signing_share(client_participant_id: number, signing_worker_participant_id: number, admitted_digest: Uint8Array, signing_worker_commitments_json: string, signing_worker_verifying_share: Uint8Array): WasmClientSigningShareV1;
+  /**
+   * Opens a same-device envelope and re-verifies its public threshold relation.
+   */
+  static import_local_material(passkey_prf_first: Uint8Array, binding: Uint8Array, nonce: Uint8Array, ciphertext: Uint8Array, expected_registered_public_key: Uint8Array, expected_state_epoch: bigint, client_participant_id: number, signing_worker_participant_id: number, signing_worker_verifying_share: Uint8Array): WasmActivatedClientV1;
+  /**
+   * Returns the verified 32-byte Ed25519 public key.
+   */
+  registered_public_key(): Uint8Array;
+  /**
+   * Imports one linked-device Client share after verifying the complete
+   * public threshold relation carried by its activation receipt.
+   */
+  static import_linked_material(client_scalar_share: Uint8Array, client_participant_id: number, signing_worker_participant_id: number, public_receipt_json: string): WasmActivatedClientV1;
 }
-
 /**
  * One Client FROST share created from activated Yao material.
  */
 export class WasmClientSigningShareV1 {
-    private constructor();
-    free(): void;
-    [Symbol.dispose](): void;
-    /**
-     * Returns the Client FROST commitments as canonical JSON.
-     */
-    client_commitments_json(): string;
-    /**
-     * Returns the canonical Client signature share.
-     */
-    client_signature_share_b64u(): string;
-    /**
-     * Returns the public Client verifying share.
-     */
-    client_verifying_share(): Uint8Array;
+  private constructor();
+  free(): void;
+  /**
+   * Returns the public Client verifying share.
+   */
+  client_verifying_share(): Uint8Array;
+  /**
+   * Returns the Client FROST commitments as canonical JSON.
+   */
+  client_commitments_json(): string;
+  /**
+   * Returns the canonical Client signature share.
+   */
+  client_signature_share_b64u(): string;
 }
-
 /**
  * One-use explicit export session opened from a factor-sealed Ed25519 Yao
  * Client root.
@@ -64,22 +88,20 @@ export class WasmClientSigningShareV1 {
  * is accepted or reconstructed on this ordinary export path.
  */
 export class WasmEd25519YaoClientRootExportSessionV1 {
-    free(): void;
-    [Symbol.dispose](): void;
-    /**
-     * Consumes the session and returns the verified exported seed.
-     */
-    complete(result_json: string): WasmExportedEd25519SeedV1;
-    /**
-     * Returns the serialized request to execute through the Router A/B export protocol.
-     */
-    execute_request_json(): string;
-    /**
-     * Opens the factor-sealed Client root and prepares a one-use export request.
-     */
-    constructor(admission_json: string, application_json: string, client_participant_id: number, signing_worker_participant_id: number, factor_secret: Uint8Array, envelope_binding_json: string, envelope_nonce: Uint8Array, envelope_ciphertext: Uint8Array, envelope_aad_hash: Uint8Array, envelope_ciphertext_digest: Uint8Array, recipient_key_material: Uint8Array, deriver_a_seal_seed: Uint8Array, deriver_b_seal_seed: Uint8Array);
+  free(): void;
+  /**
+   * Returns the serialized request to execute through the Router A/B export protocol.
+   */
+  execute_request_json(): string;
+  /**
+   * Opens the factor-sealed Client root and prepares a one-use export request.
+   */
+  constructor(admission_json: string, application_json: string, client_participant_id: number, signing_worker_participant_id: number, factor_secret: Uint8Array, envelope_binding_json: string, envelope_nonce: Uint8Array, envelope_ciphertext: Uint8Array, envelope_aad_hash: Uint8Array, envelope_ciphertext_digest: Uint8Array, recipient_key_material: Uint8Array, deriver_a_seal_seed: Uint8Array, deriver_b_seal_seed: Uint8Array);
+  /**
+   * Consumes the session and returns the verified exported seed.
+   */
+  complete(result_json: string): WasmExportedEd25519SeedV1;
 }
-
 /**
  * One-use WASM typestate client for Ed25519 Yao lane provisioning/refresh.
  *
@@ -87,29 +109,27 @@ export class WasmEd25519YaoClientRootExportSessionV1 {
  * returned request contains only recipient-encrypted Deriver inputs.
  */
 export class WasmEd25519YaoLaneClientV1 {
-    free(): void;
-    [Symbol.dispose](): void;
-    /**
-     * Consumes the one-use state and returns the immutable receipt plus the
-     * opaque holder package set required for later delivery.
-     */
-    complete(result_input: any): any;
-    /**
-     * Returns the prepared request JSON for callers that use the Rust-style
-     * getter convention.
-     */
-    execute_request_json(): string;
-    /**
-     * Creates an empty one-use lane client.
-     */
-    constructor();
-    /**
-     * Prepares the exact authenticated internal dispatch artifact and returns
-     * `{ requestJson }` for Router execution.
-     */
-    prepare(job_input: any, binding_input: any, application_input: any, client_participant_id: number, signing_worker_participant_id: number, source: WasmEd25519YaoLaneSourceV1, deriver_a_input_public_key: Uint8Array, deriver_b_input_public_key: Uint8Array, deriver_a_seal_seed: Uint8Array, deriver_b_seal_seed: Uint8Array): any;
+  free(): void;
+  /**
+   * Returns the prepared request JSON for callers that use the Rust-style
+   * getter convention.
+   */
+  execute_request_json(): string;
+  /**
+   * Creates an empty one-use lane client.
+   */
+  constructor();
+  /**
+   * Prepares the exact authenticated internal dispatch artifact and returns
+   * `{ requestJson }` for Router execution.
+   */
+  prepare(job_input: any, binding_input: any, application_input: any, client_participant_id: number, signing_worker_participant_id: number, source: WasmEd25519YaoLaneSourceV1, deriver_a_input_public_key: Uint8Array, deriver_b_input_public_key: Uint8Array, deriver_a_seal_seed: Uint8Array, deriver_b_seal_seed: Uint8Array): any;
+  /**
+   * Consumes the one-use state and returns the immutable receipt plus the
+   * opaque holder package set required for later delivery.
+   */
+  complete(result_input: any): any;
 }
-
 /**
  * Opaque wallet-custody source for Ed25519 Yao lane preparation.
  *
@@ -117,45 +137,39 @@ export class WasmEd25519YaoLaneClientV1 {
  * worker. Neither the custody seed nor stable Client root crosses into JS.
  */
 export class WasmEd25519YaoLaneSourceV1 {
-    free(): void;
-    [Symbol.dispose](): void;
-    /**
-     * Opens the custody envelope and retains only the derived Client root.
-     */
-    constructor(factor_secret: Uint8Array, envelope_binding_json: string, envelope_nonce: Uint8Array, envelope_ciphertext: Uint8Array, envelope_aad_hash: Uint8Array, envelope_ciphertext_digest: Uint8Array);
+  free(): void;
+  /**
+   * Opens the custody envelope and retains only the derived Client root.
+   */
+  constructor(factor_secret: Uint8Array, envelope_binding_json: string, envelope_nonce: Uint8Array, envelope_ciphertext: Uint8Array, envelope_aad_hash: Uint8Array, envelope_ciphertext_digest: Uint8Array);
 }
-
 /**
  * One-use source-preserving registration request prepared from an opaque
  * owner source. The root is borrowed only while the request is sealed and is
  * never retained by this session or returned to JavaScript.
  */
 export class WasmEd25519YaoSourcePreservingRegistrationSessionV1 {
-    free(): void;
-    [Symbol.dispose](): void;
-    /**
-     * Seals one target registration request to Device 2's recipient key.
-     */
-    constructor(admission_input: any, application_input: any, client_participant_id: number, signing_worker_participant_id: number, source: WasmEd25519YaoLaneSourceV1, expected_registered_public_key: Uint8Array, target_client_recipient_public_key: Uint8Array, deriver_a_seal_seed: Uint8Array, deriver_b_seal_seed: Uint8Array);
-    /**
-     * Consumes the one-use session and returns the opaque Router request JSON.
-     */
-    take_execute_request_json(): string;
+  free(): void;
+  /**
+   * Consumes the one-use session and returns the opaque Router request JSON.
+   */
+  take_execute_request_json(): string;
+  /**
+   * Seals one target registration request to Device 2's recipient key.
+   */
+  constructor(admission_input: any, application_input: any, client_participant_id: number, signing_worker_participant_id: number, source: WasmEd25519YaoLaneSourceV1, expected_registered_public_key: Uint8Array, target_client_recipient_public_key: Uint8Array, deriver_a_seal_seed: Uint8Array, deriver_b_seal_seed: Uint8Array);
 }
-
 /**
  * One-use verified Ed25519 seed returned to the secure export viewer boundary.
  */
 export class WasmExportedEd25519SeedV1 {
-    private constructor();
-    free(): void;
-    [Symbol.dispose](): void;
-    /**
-     * Builds the standard verified NEAR export artifact exactly once.
-     */
-    take_export_artifact_json(): string;
+  private constructor();
+  free(): void;
+  /**
+   * Builds the standard verified NEAR export artifact exactly once.
+   */
+  take_export_artifact_json(): string;
 }
-
 /**
  * Worker-owned Client material completed from one exact ordinary activation.
  *
@@ -163,146 +177,111 @@ export class WasmExportedEd25519SeedV1 {
  * for its local factor-sealing operation.
  */
 export class WasmOrdinaryEd25519ActivationClientMaterialV1 {
-    free(): void;
-    [Symbol.dispose](): void;
-    /**
-     * Zeroizes the retained Client share before normal object collection.
-     */
-    destroy(): void;
-    /**
-     * Opens and combines the two Client packages for one admitted activation.
-     * The binding, receipt, and participant IDs provide the public relation
-     * needed before local factor sealing. The recipient private key is
-     * consumed only in Rust/WASM.
-     */
-    constructor(binding_json: string, deriver_a_client_package_json: string, deriver_b_client_package_json: string, recipient_private_key: Uint8Array, participant_ids_json: string, public_receipt_json: string);
-    /**
-     * Consumes the local scalar for the worker's factor-sealing primitive.
-     */
-    take_client_material(): Uint8Array;
+  free(): void;
+  /**
+   * Consumes the local scalar for the worker's factor-sealing primitive.
+   */
+  take_client_material(): Uint8Array;
+  /**
+   * Opens and combines the two Client packages for one admitted activation.
+   * The binding, receipt, and participant IDs provide the public relation
+   * needed before local factor sealing. The recipient private key is
+   * consumed only in Rust/WASM.
+   */
+  constructor(binding_json: string, deriver_a_client_package_json: string, deriver_b_client_package_json: string, recipient_private_key: Uint8Array, participant_ids_json: string, public_receipt_json: string);
+  /**
+   * Zeroizes the retained Client share before normal object collection.
+   */
+  destroy(): void;
 }
-
 /**
  * One-use owner export session opened from a factor-sealed wallet custody
  * seed. Linked-device export uses the dedicated Client-root session below.
  */
 export class WasmWalletCustodySeedExportSessionV1 {
-    free(): void;
-    [Symbol.dispose](): void;
-    /**
-     * Consumes the session and returns the verified exported seed.
-     */
-    complete(result_json: string): WasmExportedEd25519SeedV1;
-    /**
-     * Returns the serialized request to execute through the Router A/B export protocol.
-     */
-    execute_request_json(): string;
-    /**
-     * Opens the wallet custody seed and prepares a one-use export request.
-     */
-    constructor(admission_json: string, application_json: string, client_participant_id: number, signing_worker_participant_id: number, factor_secret: Uint8Array, envelope_binding_json: string, envelope_nonce: Uint8Array, envelope_ciphertext: Uint8Array, envelope_aad_hash: Uint8Array, envelope_ciphertext_digest: Uint8Array, recipient_key_material: Uint8Array, deriver_a_seal_seed: Uint8Array, deriver_b_seal_seed: Uint8Array);
+  free(): void;
+  /**
+   * Returns the serialized request to execute through the Router A/B export protocol.
+   */
+  execute_request_json(): string;
+  /**
+   * Opens the wallet custody seed and prepares a one-use export request.
+   */
+  constructor(admission_json: string, application_json: string, client_participant_id: number, signing_worker_participant_id: number, factor_secret: Uint8Array, envelope_binding_json: string, envelope_nonce: Uint8Array, envelope_ciphertext: Uint8Array, envelope_aad_hash: Uint8Array, envelope_ciphertext_digest: Uint8Array, recipient_key_material: Uint8Array, deriver_a_seal_seed: Uint8Array, deriver_b_seal_seed: Uint8Array);
+  /**
+   * Consumes the session and returns the verified exported seed.
+   */
+  complete(result_json: string): WasmExportedEd25519SeedV1;
 }
 
-/**
- * Opens a verified owner custody-seed envelope and derives the exact Client
- * root for an approved lane job. This is the owner-capability branch; ordinary
- * factor opens continue to require a dedicated Client-root envelope.
- */
-export function ed25519_yao_lane_source_from_wallet_seed_v1(factor_secret: Uint8Array, envelope_binding_json: string, envelope_nonce: Uint8Array, envelope_ciphertext: Uint8Array, envelope_aad_hash: Uint8Array, envelope_ciphertext_digest: Uint8Array, application_binding_digest: Uint8Array, wallet_key_id: string, enrollment_id: string, revocation_epoch: bigint, registered_public_key: Uint8Array): WasmEd25519YaoLaneSourceV1;
-
-/**
- * Opens the wallet's Ed25519 continuity cache with any enrolled factor.
- *
- * **The unlock read side, and deliberately one call.** The custody seed
- * exists only between opening the envelope and deriving the cache key.
- * Splitting this into "open the envelope" and "open the cache" would put the
- * seed in a caller's hands, and every caller here is JavaScript.
- *
- * Exported from *this* module rather than the ceremony's because the handle
- * it returns has to be the one the signing path already uses: two wasm
- * modules each define their own `WasmActivatedClientV1`, and a handle from
- * the wrong module cannot sign.
- *
- * The caller never assembles the cache seal binding. It is rebuilt here from
- * the record's own fields, because it is both HKDF input and AEAD associated
- * data — a caller that assembled it even slightly differently would hold a
- * record that never opens, and the failure would read as a bad factor.
- *
- * Any factor works, which is the point of sealing under the seed: a passkey
- * enrolled long after registration opens the cache the Email OTP enrollment
- * wrote, and the reverse.
- */
-export function openWalletCustodyEd25519MaterialV1(factor_secret: Uint8Array, envelope_binding_json: string, envelope_nonce: Uint8Array, envelope_ciphertext: Uint8Array, envelope_aad_hash: Uint8Array, envelope_ciphertext_digest: Uint8Array, application_binding_digest: Uint8Array, registered_public_key: Uint8Array, state_epoch: bigint, client_participant_id: number, signing_worker_participant_id: number, signing_worker_verifying_share: Uint8Array, cache_nonce: Uint8Array, cache_ciphertext: Uint8Array): WasmActivatedClientV1;
-
 export type InitInput = RequestInfo | URL | Response | BufferSource | WebAssembly.Module;
 
 export interface InitOutput {
-    readonly memory: WebAssembly.Memory;
-    readonly __wbg_wasmactivatedclientv1_free: (a: number, b: number) => void;
-    readonly __wbg_wasmclientsigningsharev1_free: (a: number, b: number) => void;
-    readonly __wbg_wasmed25519yaoclientrootexportsessionv1_free: (a: number, b: number) => void;
-    readonly __wbg_wasmed25519yaolaneclientv1_free: (a: number, b: number) => void;
-    readonly __wbg_wasmed25519yaolanesourcev1_free: (a: number, b: number) => void;
-    readonly __wbg_wasmed25519yaosourcepreservingregistrationsessionv1_free: (a: number, b: number) => void;
-    readonly __wbg_wasmexporteded25519seedv1_free: (a: number, b: number) => void;
-    readonly ed25519_yao_lane_source_from_wallet_seed_v1: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number, p: number, q: number, r: number, s: bigint, t: number, u: number) => [number, number, number];
-    readonly openWalletCustodyEd25519MaterialV1: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number, p: number, q: bigint, r: number, s: number, t: number, u: number, v: number, w: number, x: number, y: number) => [number, number, number];
-    readonly wasmactivatedclientv1_create_signing_share: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => [number, number, number];
-    readonly wasmactivatedclientv1_import_linked_material: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
-    readonly wasmactivatedclientv1_import_local_material: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: bigint, l: number, m: number, n: number, o: number) => [number, number, number];
-    readonly wasmactivatedclientv1_registered_public_key: (a: number) => [number, number];
-    readonly wasmactivatedclientv1_seal_local_material: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => [number, number, number, number];
-    readonly wasmactivatedclientv1_state_epoch: (a: number) => bigint;
-    readonly wasmclientsigningsharev1_client_commitments_json: (a: number) => [number, number];
-    readonly wasmclientsigningsharev1_client_signature_share_b64u: (a: number) => [number, number];
-    readonly wasmclientsigningsharev1_client_verifying_share: (a: number) => [number, number];
-    readonly wasmed25519yaoclientrootexportsessionv1_complete: (a: number, b: number, c: number) => [number, number, number];
-    readonly wasmed25519yaoclientrootexportsessionv1_execute_request_json: (a: number) => [number, number];
-    readonly wasmed25519yaoclientrootexportsessionv1_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number, p: number, q: number, r: number, s: number, t: number, u: number, v: number, w: number, x: number) => [number, number, number];
-    readonly wasmed25519yaolaneclientv1_complete: (a: number, b: any) => [number, number, number];
-    readonly wasmed25519yaolaneclientv1_execute_request_json: (a: number) => [number, number, number, number];
-    readonly wasmed25519yaolaneclientv1_new: () => number;
-    readonly wasmed25519yaolaneclientv1_prepare: (a: number, b: any, c: any, d: any, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number) => [number, number, number];
-    readonly wasmed25519yaolanesourcev1_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number];
-    readonly wasmed25519yaosourcepreservingregistrationsessionv1_new: (a: any, b: any, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => [number, number, number];
-    readonly wasmed25519yaosourcepreservingregistrationsessionv1_take_execute_request_json: (a: number) => [number, number, number, number];
-    readonly wasmexporteded25519seedv1_take_export_artifact_json: (a: number) => [number, number, number, number];
-    readonly wasmordinaryed25519activationclientmaterialv1_destroy: (a: number) => void;
-    readonly wasmordinaryed25519activationclientmaterialv1_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number];
-    readonly wasmordinaryed25519activationclientmaterialv1_take_client_material: (a: number) => [number, number, number, number];
-    readonly wasmwalletcustodyseedexportsessionv1_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number, p: number, q: number, r: number, s: number, t: number, u: number, v: number, w: number, x: number) => [number, number, number];
-    readonly __wbg_wasmwalletcustodyseedexportsessionv1_free: (a: number, b: number) => void;
-    readonly __wbg_wasmordinaryed25519activationclientmaterialv1_free: (a: number, b: number) => void;
-    readonly wasmwalletcustodyseedexportsessionv1_execute_request_json: (a: number) => [number, number];
-    readonly wasmwalletcustodyseedexportsessionv1_complete: (a: number, b: number, c: number) => [number, number, number];
-    readonly __wbindgen_malloc: (a: number, b: number) => number;
-    readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
-    readonly __wbindgen_exn_store: (a: number) => void;
-    readonly __externref_table_alloc: () => number;
-    readonly __wbindgen_externrefs: WebAssembly.Table;
-    readonly __externref_table_dealloc: (a: number) => void;
-    readonly __wbindgen_free: (a: number, b: number, c: number) => void;
-    readonly __wbindgen_start: () => void;
+  readonly memory: WebAssembly.Memory;
+  readonly __wbg_wasmactivatedclientv1_free: (a: number, b: number) => void;
+  readonly __wbg_wasmclientsigningsharev1_free: (a: number, b: number) => void;
+  readonly __wbg_wasmed25519yaoclientrootexportsessionv1_free: (a: number, b: number) => void;
+  readonly __wbg_wasmed25519yaolaneclientv1_free: (a: number, b: number) => void;
+  readonly __wbg_wasmed25519yaolanesourcev1_free: (a: number, b: number) => void;
+  readonly __wbg_wasmed25519yaosourcepreservingregistrationsessionv1_free: (a: number, b: number) => void;
+  readonly __wbg_wasmexporteded25519seedv1_free: (a: number, b: number) => void;
+  readonly ed25519_yao_lane_source_from_wallet_seed_v1: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number, p: number, q: number, r: number, s: bigint, t: number, u: number) => [number, number, number];
+  readonly openWalletCustodyEd25519MaterialV1: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number, p: number, q: bigint, r: number, s: number, t: number, u: number, v: number, w: number, x: number, y: number) => [number, number, number];
+  readonly wasmactivatedclientv1_create_signing_share: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number) => [number, number, number];
+  readonly wasmactivatedclientv1_import_linked_material: (a: number, b: number, c: number, d: number, e: number, f: number) => [number, number, number];
+  readonly wasmactivatedclientv1_import_local_material: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: bigint, l: number, m: number, n: number, o: number) => [number, number, number];
+  readonly wasmactivatedclientv1_registered_public_key: (a: number) => [number, number];
+  readonly wasmactivatedclientv1_seal_local_material: (a: number, b: number, c: number, d: number, e: number, f: number, g: number) => [number, number, number, number];
+  readonly wasmactivatedclientv1_state_epoch: (a: number) => bigint;
+  readonly wasmclientsigningsharev1_client_commitments_json: (a: number) => [number, number];
+  readonly wasmclientsigningsharev1_client_signature_share_b64u: (a: number) => [number, number];
+  readonly wasmclientsigningsharev1_client_verifying_share: (a: number) => [number, number];
+  readonly wasmed25519yaoclientrootexportsessionv1_complete: (a: number, b: number, c: number) => [number, number, number];
+  readonly wasmed25519yaoclientrootexportsessionv1_execute_request_json: (a: number) => [number, number];
+  readonly wasmed25519yaoclientrootexportsessionv1_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number, p: number, q: number, r: number, s: number, t: number, u: number, v: number, w: number, x: number) => [number, number, number];
+  readonly wasmed25519yaolaneclientv1_complete: (a: number, b: any) => [number, number, number];
+  readonly wasmed25519yaolaneclientv1_execute_request_json: (a: number) => [number, number, number, number];
+  readonly wasmed25519yaolaneclientv1_new: () => number;
+  readonly wasmed25519yaolaneclientv1_prepare: (a: number, b: any, c: any, d: any, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number) => [number, number, number];
+  readonly wasmed25519yaolanesourcev1_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number];
+  readonly wasmed25519yaosourcepreservingregistrationsessionv1_new: (a: any, b: any, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number) => [number, number, number];
+  readonly wasmed25519yaosourcepreservingregistrationsessionv1_take_execute_request_json: (a: number) => [number, number, number, number];
+  readonly wasmexporteded25519seedv1_take_export_artifact_json: (a: number) => [number, number, number, number];
+  readonly wasmordinaryed25519activationclientmaterialv1_destroy: (a: number) => void;
+  readonly wasmordinaryed25519activationclientmaterialv1_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number) => [number, number, number];
+  readonly wasmordinaryed25519activationclientmaterialv1_take_client_material: (a: number) => [number, number, number, number];
+  readonly wasmwalletcustodyseedexportsessionv1_new: (a: number, b: number, c: number, d: number, e: number, f: number, g: number, h: number, i: number, j: number, k: number, l: number, m: number, n: number, o: number, p: number, q: number, r: number, s: number, t: number, u: number, v: number, w: number, x: number) => [number, number, number];
+  readonly __wbg_wasmwalletcustodyseedexportsessionv1_free: (a: number, b: number) => void;
+  readonly wasmwalletcustodyseedexportsessionv1_complete: (a: number, b: number, c: number) => [number, number, number];
+  readonly __wbg_wasmordinaryed25519activationclientmaterialv1_free: (a: number, b: number) => void;
+  readonly wasmwalletcustodyseedexportsessionv1_execute_request_json: (a: number) => [number, number];
+  readonly __wbindgen_malloc: (a: number, b: number) => number;
+  readonly __wbindgen_realloc: (a: number, b: number, c: number, d: number) => number;
+  readonly __wbindgen_exn_store: (a: number) => void;
+  readonly __externref_table_alloc: () => number;
+  readonly __wbindgen_export_4: WebAssembly.Table;
+  readonly __externref_table_dealloc: (a: number) => void;
+  readonly __wbindgen_free: (a: number, b: number, c: number) => void;
+  readonly __wbindgen_start: () => void;
 }
 
 export type SyncInitInput = BufferSource | WebAssembly.Module;
-
 /**
- * Instantiates the given `module`, which can either be bytes or
- * a precompiled `WebAssembly.Module`.
- *
- * @param {{ module: SyncInitInput }} module - Passing `SyncInitInput` directly is deprecated.
- *
- * @returns {InitOutput}
- */
+* Instantiates the given `module`, which can either be bytes or
+* a precompiled `WebAssembly.Module`.
+*
+* @param {{ module: SyncInitInput }} module - Passing `SyncInitInput` directly is deprecated.
+*
+* @returns {InitOutput}
+*/
 export function initSync(module: { module: SyncInitInput } | SyncInitInput): InitOutput;
 
 /**
- * If `module_or_path` is {RequestInfo} or {URL}, makes a request and
- * for everything else, calls `WebAssembly.instantiate` directly.
- *
- * @param {{ module_or_path: InitInput | Promise<InitInput> }} module_or_path - Passing `InitInput` directly is deprecated.
- *
- * @returns {Promise<InitOutput>}
- */
+* If `module_or_path` is {RequestInfo} or {URL}, makes a request and
+* for everything else, calls `WebAssembly.instantiate` directly.
+*
+* @param {{ module_or_path: InitInput | Promise<InitInput> }} module_or_path - Passing `InitInput` directly is deprecated.
+*
+* @returns {Promise<InitOutput>}
+*/
 export default function __wbg_init (module_or_path?: { module_or_path: InitInput | Promise<InitInput> } | InitInput | Promise<InitInput>): Promise<InitOutput>;