@seams/wallet 0.6.2 → 0.7.1

package/dist/public/sdk/signer-worker-DYRteieu.js

@@ -1,48 +0,0 @@
-//#region src/core/types/signer-worker.ts
-let WorkerRequestType = /* @__PURE__ */ function(WorkerRequestType) {
-	WorkerRequestType[WorkerRequestType["SignTransactionsWithActions"] = 0] = "SignTransactionsWithActions";
-	WorkerRequestType[WorkerRequestType["SignNep413Message"] = 1] = "SignNep413Message";
-	WorkerRequestType[WorkerRequestType["SignDelegateAction"] = 2] = "SignDelegateAction";
-	WorkerRequestType[WorkerRequestType["DeriveThresholdEd25519ClientVerifyingShare"] = 3] = "DeriveThresholdEd25519ClientVerifyingShare";
-	return WorkerRequestType;
-}({});
-let WorkerResponseType = /* @__PURE__ */ function(WorkerResponseType) {
-	WorkerResponseType[WorkerResponseType["SignTransactionsWithActionsSuccess"] = 0] = "SignTransactionsWithActionsSuccess";
-	WorkerResponseType[WorkerResponseType["SignNep413MessageSuccess"] = 1] = "SignNep413MessageSuccess";
-	WorkerResponseType[WorkerResponseType["SignDelegateActionSuccess"] = 2] = "SignDelegateActionSuccess";
-	WorkerResponseType[WorkerResponseType["SignTransactionsWithActionsFailure"] = 3] = "SignTransactionsWithActionsFailure";
-	WorkerResponseType[WorkerResponseType["SignNep413MessageFailure"] = 4] = "SignNep413MessageFailure";
-	WorkerResponseType[WorkerResponseType["SignDelegateActionFailure"] = 5] = "SignDelegateActionFailure";
-	WorkerResponseType[WorkerResponseType["RegistrationProgress"] = 6] = "RegistrationProgress";
-	WorkerResponseType[WorkerResponseType["RegistrationComplete"] = 7] = "RegistrationComplete";
-	WorkerResponseType[WorkerResponseType["ExecuteActionsProgress"] = 8] = "ExecuteActionsProgress";
-	WorkerResponseType[WorkerResponseType["ExecuteActionsComplete"] = 9] = "ExecuteActionsComplete";
-	WorkerResponseType[WorkerResponseType["DeriveThresholdEd25519ClientVerifyingShareSuccess"] = 10] = "DeriveThresholdEd25519ClientVerifyingShareSuccess";
-	WorkerResponseType[WorkerResponseType["DeriveThresholdEd25519ClientVerifyingShareFailure"] = 11] = "DeriveThresholdEd25519ClientVerifyingShareFailure";
-	return WorkerResponseType;
-}({});
-const NearSignerWorkerCustomRequestType = {
-	ThresholdEd25519ComputeNep413SigningDigest: "thresholdEd25519ComputeNep413SigningDigest",
-	ThresholdEd25519ComputeDelegateSigningDigest: "thresholdEd25519ComputeDelegateSigningDigest",
-	ThresholdEd25519BuildDelegateSigningPayload: "thresholdEd25519BuildDelegateSigningPayload",
-	ThresholdEd25519FinalizeDelegateFromSignature: "thresholdEd25519FinalizeDelegateFromSignature",
-	ThresholdEd25519FinalizeNearTxFromSignature: "thresholdEd25519FinalizeNearTxFromSignature",
-	ThresholdEd25519BuildNearTxUnsignedBorsh: "thresholdEd25519BuildNearTxUnsignedBorsh",
-	ThresholdEd25519DecodeSignedNearTxBorsh: "thresholdEd25519DecodeSignedNearTxBorsh"
-};
-const DEFAULT_CONFIRMATION_CONFIG = {
-	uiMode: "modal",
-	behavior: "requireClick",
-	autoProceedDelay: 0
-};
-function isWorkerProgress(response) {
-	return response.type === WorkerResponseType.RegistrationProgress || response.type === WorkerResponseType.RegistrationComplete || response.type === WorkerResponseType.ExecuteActionsProgress || response.type === WorkerResponseType.ExecuteActionsComplete;
-}
-function isWorkerSuccess(response) {
-	return response.type === WorkerResponseType.SignTransactionsWithActionsSuccess || response.type === WorkerResponseType.SignDelegateActionSuccess || response.type === WorkerResponseType.SignNep413MessageSuccess || response.type === WorkerResponseType.DeriveThresholdEd25519ClientVerifyingShareSuccess;
-}
-function isWorkerError(response) {
-	return response.type === WorkerResponseType.SignTransactionsWithActionsFailure || response.type === WorkerResponseType.SignDelegateActionFailure || response.type === WorkerResponseType.SignNep413MessageFailure || response.type === WorkerResponseType.DeriveThresholdEd25519ClientVerifyingShareFailure;
-}
-//#endregion
-export { isWorkerError as a, WorkerResponseType as i, NearSignerWorkerCustomRequestType as n, isWorkerProgress as o, WorkerRequestType as r, isWorkerSuccess as s, DEFAULT_CONFIRMATION_CONFIG as t };

package/dist/types/shared-ts/src/passkey-custody/credentialObservations.d.ts

@@ -1,74 +0,0 @@
-import type { PasskeyEnvelopeId, WebAuthnCredentialIdB64u, WebAuthnRpId } from '../utils/domainIds';
-import type { EnvelopeRevision } from './primitives';
-/**
- * Advisory credential metadata observed at registration.
- *
- * WebAuthn's backup-eligibility (BE) and backup-state (BS) flags describe how a
- * provider may sync a credential. They do NOT prove that the provider will
- * return the same PRF result on another device, so nothing in this module may
- * be used to conclude that cross-device custody works. That conclusion has one
- * source: an actual PRF result has sealed a server-held envelope.
- */
-export type PasskeyCredentialObservationRecord = {
-    kind: 'passkey_credential_observation_v1';
-    rpId: WebAuthnRpId;
-    credentialIdB64u: WebAuthnCredentialIdB64u;
-    /** Whether the credential returned a usable PRF result when it was created. */
-    prfSupported: boolean;
-    /** WebAuthn BE flag: the provider may back this credential up. Advisory. */
-    backupEligible: boolean;
-    /** WebAuthn BS flag: the provider reports it is backed up now. Advisory. */
-    backupState: boolean;
-    observedAtMs: number;
-};
-/**
- * Whether this wallet's custody can be opened on another device.
- *
- * `ready` is reachable only by presenting the active server-held envelope that
- * a real PRF result sealed. Backup flags are not an input to this type, by
- * construction: there is no branch they could satisfy.
- */
-export type CrossDeviceCustodyReadiness = {
-    state: 'ready';
-    sealedEnvelopeId: PasskeyEnvelopeId;
-    envelopeRevision: EnvelopeRevision;
-} | {
-    state: 'not_ready';
-    reason: 'prf_unsupported' | 'no_sealed_envelope';
-};
-export declare function buildPasskeyCredentialObservationRecord(args: {
-    rpId: WebAuthnRpId;
-    credentialIdB64u: WebAuthnCredentialIdB64u;
-    prfSupported: boolean;
-    backupEligible: boolean;
-    backupState: boolean;
-    observedAtMs: number;
-}): PasskeyCredentialObservationRecord;
-export declare function parsePasskeyCredentialObservationRecord(raw: unknown, label?: string): PasskeyCredentialObservationRecord;
-export type WebAuthnBackupFlags = {
-    backupEligible: boolean;
-    backupState: boolean;
-};
-/**
- * Reads the BE and BS flags from raw authenticator data.
- *
- * A credential reporting backed-up state is still not evidence of cross-device
- * PRF continuity — see `resolveCrossDeviceCustodyReadiness`.
- */
-export declare function parseWebAuthnBackupFlags(authenticatorData: Uint8Array): WebAuthnBackupFlags;
-/**
- * Resolves cross-device custody readiness.
- *
- * Note the inputs: PRF support, and the active sealed envelope — never the
- * backup flags. Registration may observe a backup-eligible, backed-up
- * credential and this still returns `not_ready` until a PRF result has actually
- * sealed a server-held envelope.
- */
-export declare function resolveCrossDeviceCustodyReadiness(args: {
-    prfSupported: boolean;
-    activeSealedEnvelope: {
-        envelopeId: PasskeyEnvelopeId;
-        envelopeRevision: EnvelopeRevision;
-    } | null;
-}): CrossDeviceCustodyReadiness;
-//# sourceMappingURL=credentialObservations.d.ts.map

package/dist/types/shared-ts/src/passkey-custody/kekContext.d.ts

@@ -1,34 +0,0 @@
-import type { PasskeyEnvelopeId, WalletId } from '../utils/domainIds';
-import type { EmailOtpFactorKekVersion, PasskeyCustodyEnvelopeRecord, PasskeyPrfKekVersion, WalletCustodyEnvelopeFactor } from './custodyEnvelope';
-import type { PasskeyCustodySecretKind } from './custodySecretBinding';
-export type PasskeyCustodyKekPurpose = PasskeyCustodySecretKind;
-/**
- * The exact HKDF `info` inputs for one envelope's KEK:
- *
- *   factor_kek = HKDF-SHA256(
- *     ikm  = the factor secret (WebAuthn PRF.first, or the Email OTP factor key),
- *     salt = versioned application salt,
- *     info = hash(factor identity, walletId, envelopeId, purpose, version))
- *
- * The factor secret and the salt are not part of this record: the context is
- * public binding data, and only the secure worker ever holds the secret.
- *
- * The factor branch is carried whole rather than flattened, so a passkey
- * context can never be built from an Email OTP envelope's identity — the two
- * factors wrap the same seed but must never derive the same KEK.
- */
-export type PasskeyCustodyKekDerivationContext = {
-    kind: 'wallet_custody_kek_derivation_context_v2';
-    walletId: WalletId;
-    envelopeId: PasskeyEnvelopeId;
-    factor: WalletCustodyEnvelopeFactor;
-    purpose: PasskeyCustodyKekPurpose;
-    kekVersion: PasskeyPrfKekVersion | EmailOtpFactorKekVersion;
-};
-/**
- * Derives the KEK context from a parsed envelope. Callers cannot assemble one
- * field by field, so a KEK is always bound to the factor, wallet, envelope, and
- * custody branch the ciphertext was sealed under.
- */
-export declare function buildPasskeyCustodyKekDerivationContext(envelope: PasskeyCustodyEnvelopeRecord): PasskeyCustodyKekDerivationContext;
-//# sourceMappingURL=kekContext.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.d.ts

@@ -1,62 +0,0 @@
-import type { MpcMaterialActivationRef, MpcMaterialActivationId, WalletId } from '../utils/domainIds';
-import { type LaneEnrollmentId, type LaneOperationId, type LaneShareEpoch, type SigningLaneId, type WalletKeyId } from './ids';
-import { type DigestB64u } from '../utils/canonicalPrimitives';
-import { type Secp256k1CompressedPublicKeyB64u } from '../passkey-custody/primitives';
-import { type LaneHolderParticipantId, type HpkePublicKeyB64u, type LaneParticipantBindingDigestB64u, type SigningWorkerParticipantId, type SigningWorkerRecipientKeyDigestB64u, type SigningWorkerRecipientKeyId } from './participants';
-import type { EcdsaTargetCapabilityBindingV1 } from './rotation';
-type LinkedEcdsaScopeOwnerFieldsForbiddenV1 = {
-    readonly signingRootId?: never;
-    readonly signingRootVersion?: never;
-    readonly context?: never;
-    readonly publicIdentity?: never;
-    readonly signingWorker?: never;
-    readonly activationEpoch?: never;
-    readonly keyHandle?: never;
-    readonly relayerKeyId?: never;
-    readonly participantIds?: never;
-    readonly runtimePolicyScope?: never;
-    readonly authorization?: never;
-};
-/**
- * Trusted public identity for a linked ECDSA lane.
- *
- * The scope intentionally models the activated lane rather than the owner
- * derivation root. Root metadata and owner public-identity bags are forbidden
- * at the type level and rejected by the exact parser at runtime.
- */
-export type LinkedDeviceEcdsaNormalSigningScopeV1 = LinkedEcdsaScopeOwnerFieldsForbiddenV1 & {
-    readonly kind: 'linked_device_ecdsa_normal_signing_scope_v1';
-    readonly keyFamily: 'ecdsa_secp256k1';
-    readonly laneKind: 'linked_device';
-    readonly walletId: WalletId;
-    readonly walletKeyId: WalletKeyId;
-    readonly enrollmentId: LaneEnrollmentId;
-    readonly operationId: LaneOperationId;
-    readonly laneId: SigningLaneId;
-    readonly laneShareEpoch: LaneShareEpoch;
-    readonly revocationEpoch: number;
-    readonly targetMaterialActivationId: MpcMaterialActivationId;
-    readonly materialActivation: MpcMaterialActivationRef;
-    readonly targetCapability: EcdsaTargetCapabilityBindingV1;
-    readonly thresholdPublicKey33B64u: Secp256k1CompressedPublicKeyB64u;
-    readonly evmAddress: string;
-    readonly publicIdentityDigestB64u: DigestB64u;
-    readonly targetHolderPublicCommitmentB64u: Secp256k1CompressedPublicKeyB64u;
-    readonly targetServerPublicCommitmentB64u: Secp256k1CompressedPublicKeyB64u;
-    readonly holderParticipantId: LaneHolderParticipantId;
-    readonly signingWorkerParticipantId: SigningWorkerParticipantId;
-    readonly holderParticipantBindingDigestB64u: LaneParticipantBindingDigestB64u;
-    readonly signingWorkerParticipantBindingDigestB64u: LaneParticipantBindingDigestB64u;
-    readonly holderRecipientKeyDigestB64u: SigningWorkerRecipientKeyDigestB64u;
-    readonly serverRecipientKeyDigestB64u: SigningWorkerRecipientKeyDigestB64u;
-    readonly signingWorkerRecipientKeyId: SigningWorkerRecipientKeyId;
-    readonly signingWorkerHpkePublicKeyB64u: HpkePublicKeyB64u;
-    readonly transcriptHashB64u: DigestB64u;
-    readonly protocolCommitReceiptDigestB64u: DigestB64u;
-};
-export type LinkedDeviceEcdsaNormalSigningScopeInputV1 = Omit<LinkedDeviceEcdsaNormalSigningScopeV1, 'kind' | 'keyFamily' | 'laneKind'>;
-export declare function buildLinkedDeviceEcdsaNormalSigningScopeV1(input: LinkedDeviceEcdsaNormalSigningScopeInputV1): LinkedDeviceEcdsaNormalSigningScopeV1;
-export declare function validateLinkedDeviceEcdsaNormalSigningScopeV1(scope: LinkedDeviceEcdsaNormalSigningScopeV1): void;
-export declare function parseLinkedDeviceEcdsaNormalSigningScopeV1(value: unknown, label?: string): LinkedDeviceEcdsaNormalSigningScopeV1;
-export {};
-//# sourceMappingURL=linkedEcdsaScope.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.typecheck.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=linkedEcdsaScope.typecheck.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/validation.d.ts

@@ -1,11 +0,0 @@
-import { type WalletKeyId } from './ids';
-export declare function parseWalletKeyIdOrNull(value: unknown): WalletKeyId | null;
-export declare function requireWalletKeyId(value: unknown, label?: string): WalletKeyId;
-export declare function assertMatchingWalletKeyId(args: {
-    expected: unknown;
-    actual: unknown;
-    expectedLabel?: string;
-    actualLabel?: string;
-    message?: string;
-}): WalletKeyId;
-//# sourceMappingURL=validation.d.ts.map

package/dist/types/shared-ts/src/utils/bigint.d.ts

@@ -1,3 +0,0 @@
-export declare function bytesToNumberBE(bytes: Uint8Array): bigint;
-export declare function numberToBytesBE(n: number | bigint, len: number): Uint8Array;
-//# sourceMappingURL=bigint.d.ts.map

package/dist/types/shared-ts/src/utils/paillier.d.ts

@@ -1,37 +0,0 @@
-export declare const RECOVERY_SHARE_DOMAIN_MODULUS: bigint;
-export declare const PAILLIER_MIN_KEY_BITS = 2048;
-export type PaillierPublicKey = {
-    n: bigint;
-    g: bigint;
-    nSquared: bigint;
-    modulusBits: number;
-};
-export type PaillierPrivateKey = {
-    lambda: bigint;
-    mu: bigint;
-};
-export type PaillierKeyPair = {
-    publicKey: PaillierPublicKey;
-    privateKey: PaillierPrivateKey;
-};
-type RandomBytesFn = (length: number) => Uint8Array;
-export declare function generatePaillierKeyPair(input?: {
-    bits?: number;
-    rounds?: number;
-    randomBytes?: RandomBytesFn;
-}): Promise<PaillierKeyPair>;
-export declare function serializePaillierPublicKeyB64u(publicKey: PaillierPublicKey): string;
-export declare function parsePaillierPublicKeyB64u(value: string): PaillierPublicKey;
-export declare function serializePaillierCiphertextB64u(publicKey: PaillierPublicKey, ciphertext: bigint): string;
-export declare function parsePaillierCiphertextB64u(publicKey: PaillierPublicKey, value: string): bigint;
-export declare function paillierEncrypt(publicKey: PaillierPublicKey, plaintext: bigint, input?: {
-    randomBytes?: RandomBytesFn;
-}): bigint;
-export declare function paillierAddConst(publicKey: PaillierPublicKey, ciphertext: bigint, addend: bigint): bigint;
-export declare function paillierDecrypt(keyPair: PaillierKeyPair, ciphertext: bigint): bigint;
-export declare function destroyPaillierPrivateKey(privateKey: PaillierPrivateKey | null | undefined): void;
-export declare function destroyPaillierKeyPair(keyPair: PaillierKeyPair | null | undefined): void;
-export declare function decodeU256Le(bytes: Uint8Array): bigint;
-export declare function encodeU256Le(value: bigint): Uint8Array;
-export {};
-//# sourceMappingURL=paillier.d.ts.map

package/dist/types/shared-ts/src/utils/recoveryDomain.d.ts

@@ -1,12 +0,0 @@
-export type RecoverySubjectBinding = {
-    nearAccountId: string;
-    recoverySessionId: string;
-    deadlineEpochSeconds: number;
-    scope?: string;
-};
-export type RecoveryTargetKeySet = {
-    newNearPublicKey: string;
-    newEvmOwnerAddress: string;
-};
-export type MultichainRecoveryPayloadFields = RecoverySubjectBinding & RecoveryTargetKeySet;
-//# sourceMappingURL=recoveryDomain.d.ts.map

package/dist/types/shared-ts/src/utils/signerDomain.typecheck.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=signerDomain.typecheck.d.ts.map

package/dist/types/shared-ts/src/wallet-recovery/recoveryKekContext.d.ts

@@ -1,37 +0,0 @@
-import type { WalletId } from '../utils/domainIds';
-import type { DerivedWalletRecoveryKeyId } from './recoveryCodes';
-import type { WalletRecoveryEnvelopeEntry } from './walletRecoveryEnvelopeSet';
-/**
- * Frozen two-level recovery wrap:
- *
- *   recovery code --HKDF--> code KEK --opens--> manifest KEK
- *   manifest KEK --HKDF--> entry KEK --opens--> one custody secret
- *
- * A recovery code never wraps a custody entry directly, so rotating codes
- * rewraps only the 32-byte manifest KEK and never re-opens plaintext roots.
- */
-/** KEK inputs for one recovery code's wrap of the manifest KEK. */
-export type WalletRecoveryCodeKekDerivationContext = {
-    kind: 'wallet_recovery_code_kek_derivation_context_v1';
-    walletId: WalletId;
-    recoveryKeyId: DerivedWalletRecoveryKeyId;
-    purpose: 'wallet_recovery_manifest_kek';
-};
-/**
- * KEK inputs for the seed entry's wrap under the manifest KEK.
- *
- * A recovery set carries one entry — the wallet custody seed — so the purpose
- * is fixed. It is still encoded rather than assumed, so adding a second entry
- * kind later cannot silently reuse this context.
- */
-export type WalletRecoveryEntryKekDerivationContext = {
-    kind: 'wallet_recovery_entry_kek_derivation_context_v1';
-    walletId: WalletId;
-    purpose: 'wallet_custody_seed_v1';
-};
-/** Derives the entry-level KEK context from a parsed set entry. */
-export declare function buildWalletRecoveryEntryKekDerivationContext(args: {
-    walletId: WalletId;
-    entry: WalletRecoveryEnvelopeEntry;
-}): WalletRecoveryEntryKekDerivationContext;
-//# sourceMappingURL=recoveryKekContext.d.ts.map

package/dist/types/wallet/src/SeamsWeb/operations/devices/qrLinkSession.d.ts

@@ -1,7 +0,0 @@
-/**
- * QR is a single shared boundary. Keep this module as a local import seam for
- * browser callers; all parsing and branch selection lives in shared-ts.
- */
-export { buildQrLinkedDeviceSessionPayloadV5, parseQrLinkedDeviceSessionPayloadV5, } from '../../../../../shared-ts/src/device-linking';
-export type { LinkDevicePublicKeyB64u, QrLinkedDeviceSessionPayloadV5, } from '../../../../../shared-ts/src/device-linking';
-//# sourceMappingURL=qrLinkSession.d.ts.map

package/dist/types/wallet/src/SeamsWeb/operations/session/thresholdWarmSessionDefaults.d.ts

@@ -1,11 +0,0 @@
-import type { SeamsConfigsReadonly } from '../../../core/types/seams';
-type ThresholdWarmSessionConfigContext = {
-    configs: SeamsConfigsReadonly;
-};
-export declare function resolveThresholdWarmSessionDefaults(context: ThresholdWarmSessionConfigContext): {
-    ttlMs: number;
-    remainingUses: number;
-} | null;
-export declare function shouldRequireThresholdWarmSession(context: ThresholdWarmSessionConfigContext): boolean;
-export {};
-//# sourceMappingURL=thresholdWarmSessionDefaults.d.ts.map

package/dist/types/wallet/src/SeamsWeb/walletIframe/SeamsWebIframe.d.ts

@@ -1,113 +0,0 @@
-/**
- * SeamsWebIframe - Entry Point Layer
- *
- * This is the main API that developers interact with when using the WalletIframe system.
- * It provides the same interface as the regular SeamsWeb for core wallet actions, and routes calls to
- * a secure iframe for enhanced security and WebAuthn compatibility.
- *
- * Key Responsibilities:
- * - Acts as a transparent proxy to the real SeamsWeb running in the iframe
- * - Handles hook callbacks (afterCall, onError, onEvent) locally
- * - Avoids app-origin IndexedDB persistence (no silent fallbacks)
- * - Manages theme state and user settings synchronization
- * - Bridges progress events from iframe back to developer callbacks
- *
- * Architecture:
- * - Uses WalletIframeRouter for all iframe communication
- * - Maintains local state for immediate synchronous access (theme, config)
- * - Does not fall back to app-origin persistence when the iframe is unavailable
- */
-import type { WalletIframeExactSessionIdentity, WalletIframeExactSessionLockResult, WalletIframeExactSessionState } from './shared/exactSessionState';
-import type { ThemeMode, AppearanceConfigInput, SeamsConfigsReadonly, SeamsConfigsInput } from '../../core/types/seams';
-import type { SdkLifecycleEventListener } from '../../core/types/sdkSentEvents';
-import { type ConfirmationConfig } from '../../core/types/signer-worker';
-import type { AuthCapability, DevicesCapability, RecoveryCapability, EvmSignerCapability, KeyExportCapability, NearSignerCapability, PreferencesCapability, RegistrationCapability, TempoSignerCapability } from '..';
-export declare class SeamsWebIframe {
-    readonly configs: SeamsConfigsReadonly;
-    /**
-     * Fills in the wallet for calls that do not name one. Reads the authenticated
-     * session through the router, never the parent-page current-wallet mirror.
-     */
-    private readonly currentWallet;
-    private appearance;
-    theme: ThemeMode;
-    private router;
-    private lastConfirmationConfig;
-    private prefsUnsubscribe;
-    readonly near: NearSignerCapability;
-    readonly tempo: TempoSignerCapability;
-    readonly evm: EvmSignerCapability;
-    readonly auth: AuthCapability;
-    readonly registration: RegistrationCapability;
-    readonly recovery: RecoveryCapability;
-    readonly devices: DevicesCapability;
-    readonly keys: KeyExportCapability;
-    readonly preferences: PreferencesCapability;
-    private currentWalletId;
-    private readonly currentWalletListeners;
-    private readonly confirmationConfigListeners;
-    private applyRemoteCurrentWalletId;
-    private applyRemotePreferences;
-    get userPreferences(): {
-        setConfirmBehavior: (b: "requireClick" | "skipClick") => void;
-        setConfirmationConfig: (c: ConfirmationConfig) => void;
-        getConfirmationConfig: () => ConfirmationConfig;
-    };
-    constructor(configs: SeamsConfigsInput);
-    private resolveRegistrationRpId;
-    initWalletIframe(): Promise<WalletIframeExactSessionState>;
-    getWalletIframeExactSessionState(): Promise<WalletIframeExactSessionState>;
-    lockWalletIframeExactSession(identity: WalletIframeExactSessionIdentity): Promise<WalletIframeExactSessionLockResult>;
-    private requireRouterReady;
-    isReady(): boolean;
-    onReady(cb: () => void): () => void;
-    onLoginStatusChanged(cb: (status: {
-        isLoggedIn: boolean;
-        walletId: string | null;
-    }) => void): () => void;
-    onSdkLifecycleEvent(listener: SdkLifecycleEventListener): () => void;
-    private registerPasskeyDomain;
-    private getNearProvisioningStateDomain;
-    private resumePendingEcdsaRegistrationDomain;
-    private registerWalletDomain;
-    private addWalletSignerDomain;
-    private addEmailOtpDomain;
-    private addPasskeyDomain;
-    private unlockDomain;
-    private lockDomain;
-    private logoutDomain;
-    private getWalletSessionDomain;
-    private resolveNearSigningWalletId;
-    private prefillRouterAbEcdsaDerivationPresignaturePoolDomain;
-    private signTransactionWithActionsDomain;
-    private signNEP413MessageDomain;
-    private signDelegateActionDomain;
-    private sendDelegateActionViaRelayerDomain;
-    private signAndSendDelegateActionDomain;
-    private signTempoDomain;
-    private signEvmTransactionDomain;
-    private signTempoFeeTokenPreferenceDomain;
-    private executeEvmFamilyTransactionDomain;
-    private reportTempoBroadcastAcceptedDomain;
-    private reportTempoBroadcastRejectedDomain;
-    private reportTempoFinalizedDomain;
-    private reportTempoDroppedOrReplacedDomain;
-    private reconcileTempoNonceLaneDomain;
-    private bootstrapEcdsaSessionDomain;
-    private setConfirmBehaviorDomain;
-    setTheme(next: ThemeMode): void;
-    setAppearance(appearance: AppearanceConfigInput): void;
-    private setConfirmationConfigDomain;
-    private getConfirmationConfigDomain;
-    prefetchBlockheight(): Promise<void>;
-    private getRecentUnlocksDomain;
-    private hasPasskeyCredentialDomain;
-    private executeActionDomain;
-    private sendTransactionDomain;
-    private exportKeypairWithUIDomain;
-    private resolveExactKeyExportLaneDomain;
-    private signAndSendTransactionDomain;
-    private applyRemoteConfirmationConfig;
-    private refreshConfirmationConfig;
-}
-//# sourceMappingURL=SeamsWebIframe.d.ts.map

package/dist/types/wallet/src/SeamsWeb/walletIframe/client/env.d.ts

@@ -1,7 +0,0 @@
-export interface WalletEnvConfig {
-    walletOrigin?: string;
-    walletServicePath?: string;
-    sdkBasePath?: string;
-}
-export declare function readWalletConfigFromEnv(): WalletEnvConfig;
-//# sourceMappingURL=env.d.ts.map

package/dist/types/wallet/src/SeamsWeb/walletIframe/client/index.d.ts

@@ -1,12 +0,0 @@
-/**
- * Wallet iframe client entrypoint.
- *
- * Typical flow:
- * 1) Create a WalletIframeRouter with options.
- * 2) Call init() to establish CONNECT/READY and push config to the host.
- */
-import { WalletIframeRouter, type WalletIframeRouterOptions } from './router';
-export * from './router';
-export * from './env';
-export declare function initWalletIframeClient(options: WalletIframeRouterOptions): Promise<WalletIframeRouter>;
-//# sourceMappingURL=index.d.ts.map

package/dist/types/wallet/src/SeamsWeb/walletIframe/index.d.ts

@@ -1,21 +0,0 @@
-/**
- * WalletIframe - Entry Point Layer
- *
- * This is the main entry point for the WalletIframe system. It exports all the
- * public APIs and types that developers need to use the iframe-based wallet.
- *
- * Key Exports:
- * - SeamsWebIframe: Main API class for developers
- * - WalletIframeRouter: Communication layer (for advanced use cases)
- * - Message types: For custom message handling
- * - Environment utilities: For configuration
- * - Sanitization utilities: For security
- *
- * Note: wallet-iframe-host-runtime is intentionally NOT exported here as it's meant
- * to be bundled separately into the wallet origin page, not the parent SDK.
- */
-export * from './shared/messages';
-export * from './client';
-export * from './sanitization';
-export { SeamsWebIframe } from './SeamsWebIframe';
-//# sourceMappingURL=index.d.ts.map

package/dist/types/wallet/src/core/platform/webCryptoHkdf.d.ts

@@ -1,7 +0,0 @@
-export declare function deriveWebCryptoHkdfSha256Bits256(args: {
-    ikm32: Uint8Array;
-    salt: Uint8Array;
-    info: Uint8Array;
-    unavailableMessage: string;
-}): Promise<Uint8Array>;
-//# sourceMappingURL=webCryptoHkdf.d.ts.map

package/dist/types/wallet/src/core/rpcClients/relayer/routerAbPublicKeyset.d.ts

@@ -1,5 +0,0 @@
-import { type RouterAbPublicKeysetV2 } from '../../../../../shared-ts/src/utils/routerAbPublicKeyset';
-export declare function fetchRouterAbPublicKeysetV2(args: {
-    relayerUrl: string;
-}): Promise<RouterAbPublicKeysetV2>;
-//# sourceMappingURL=routerAbPublicKeyset.d.ts.map

package/dist/types/wallet/src/core/rpcClients/relayer/thresholdEcdsa.typecheck.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=thresholdEcdsa.typecheck.d.ts.map

package/dist/types/wallet/src/core/rpcClients/relayer/walletCredentialActivity.d.ts

@@ -1,48 +0,0 @@
-import { type PasskeyDeviceEnvelopeIndexRecord } from '../../../../../shared-ts/src/passkey-custody';
-import { type WalletCredentialActivityRecordV1 } from '../../../../../shared-ts/src/passkey-custody/credentialActivity';
-import type { WalletCustodyFactorProof } from './walletRecoveryRotate';
-export type WalletCredentialActivityProjection = {
-    readonly index: PasskeyDeviceEnvelopeIndexRecord;
-    readonly activity: WalletCredentialActivityRecordV1;
-};
-export type WalletCredentialActivityListResult = {
-    readonly kind: 'listed';
-    readonly credentials: readonly WalletCredentialActivityProjection[];
-} | {
-    readonly kind: 'unauthorized';
-    readonly message: string;
-} | {
-    readonly kind: 'transport_failed';
-    readonly message: string;
-};
-export type WalletCredentialRenameResult = {
-    readonly kind: 'renamed';
-    readonly credential: WalletCredentialActivityProjection;
-} | {
-    readonly kind: 'missing';
-    readonly message: string;
-} | {
-    readonly kind: 'conflict';
-    readonly message: string;
-} | {
-    readonly kind: 'rejected';
-    readonly message: string;
-} | {
-    readonly kind: 'transport_failed';
-    readonly message: string;
-};
-export declare function listWalletCredentialActivity(args: {
-    readonly relayUrl: string;
-    readonly walletId: string;
-    readonly factorProof: WalletCustodyFactorProof;
-    readonly fetchImpl?: typeof fetch;
-}): Promise<WalletCredentialActivityListResult>;
-export declare function renameWalletCredential(args: {
-    readonly relayUrl: string;
-    readonly walletId: string;
-    readonly envelopeId: string;
-    readonly label?: string;
-    readonly factorProof: WalletCustodyFactorProof;
-    readonly fetchImpl?: typeof fetch;
-}): Promise<WalletCredentialRenameResult>;
-//# sourceMappingURL=walletCredentialActivity.d.ts.map

package/dist/types/wallet/src/core/signingEngine/flows/recovery/recoveryStorePorts.d.ts

@@ -1,7 +0,0 @@
-import type { AccountKeyMaterialStorePort } from '../../../indexedDB/accountKeyMaterial';
-import type { LastProfileState } from '../../../indexedDB/passkeyClientDB.types';
-import type { ProfileAccountContextPort } from '../../../indexedDB/profileAccountProjection';
-export type RecoveryNearKeyMaterialStorePort = ProfileAccountContextPort & AccountKeyMaterialStorePort & {
-    getLastProfileState: () => Promise<LastProfileState | null>;
-};
-//# sourceMappingURL=recoveryStorePorts.d.ts.map

package/dist/types/wallet/src/core/signingEngine/session/holderShares/holderShareEnvelopeAad.d.ts

@@ -1,14 +0,0 @@
-import type { LaneShareEpoch, SigningLaneId, WalletKeyId } from '../../../../../../shared-ts/src/signing-lanes';
-import type { WalletId } from '../../../../../../shared-ts/src/utils/domainIds';
-export type SealedHolderShareEnvelopeAad = {
-    kind: 'sealed_holder_share_envelope_aad_v1';
-    walletId: WalletId;
-    walletKeyId: WalletKeyId;
-    laneId: SigningLaneId;
-    laneShareEpoch: LaneShareEpoch;
-    holderShareCommitmentB64u: string;
-    envelopeKind: string;
-    envelopeVersion: string;
-};
-export declare function computeSealedHolderShareEnvelopeAadHash(aad: SealedHolderShareEnvelopeAad): Promise<string>;
-//# sourceMappingURL=holderShareEnvelopeAad.d.ts.map

package/dist/types/wallet/src/core/signingEngine/session/identity/ecdsaDerivationSigningMaterialHandle.d.ts

@@ -1,19 +0,0 @@
-import { type EcdsaClientVerifyingPublicKey33B64u, type EcdsaKeyHandle, type EcdsaRelayerKeyId, type EcdsaRoleLocalWorkerHandle, type EcdsaThresholdKeyId } from '../keyMaterialBrands';
-export type BuildEcdsaRoleLocalSigningMaterialHandleInput = {
-    keyHandle: EcdsaKeyHandle;
-    clientVerifyingPublicKey33B64u: EcdsaClientVerifyingPublicKey33B64u;
-    ecdsaThresholdKeyId: EcdsaThresholdKeyId;
-    participantIds: readonly [number, ...number[]];
-    relayerKeyId: EcdsaRelayerKeyId;
-    evmFamilySigningKeySlotId?: never;
-    chainTarget?: never;
-    walletId?: never;
-    thresholdSessionId?: never;
-    activeStateId?: never;
-    capabilityGrantId?: never;
-    mpcWalletSigningQuotaId?: never;
-    remainingUses?: never;
-    expiresAtMs?: never;
-};
-export declare function buildEcdsaRoleLocalSigningMaterialHandle(input: BuildEcdsaRoleLocalSigningMaterialHandleInput): EcdsaRoleLocalWorkerHandle;
-//# sourceMappingURL=ecdsaDerivationSigningMaterialHandle.d.ts.map

package/dist/types/wallet/src/core/signingEngine/session/identity/ecdsaDerivationSigningMaterialHandle.typecheck.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=ecdsaDerivationSigningMaterialHandle.typecheck.d.ts.map

package/dist/types/wallet/src/core/signingEngine/session/lanes/laneRecords.d.ts

@@ -1,3 +0,0 @@
-export type { ActiveSigningLaneReference, BreakGlassSigningLaneRecord, DelegatedExecutionSigningLaneRecord, Ed25519WalletKeyRecord, EvmFamilyWalletKeyRecord, LinkedDeviceSigningLaneRecord, OwnerEmailOtpSigningLaneRecord, OwnerPasskeySigningLaneRecord, RecoverySigningLaneRecord, SigningLaneRecord, SigningLaneReference, SigningLaneLifecycle, WalletKeyLifecycle, WalletKeyRecord, } from '../../../../../../shared-ts/src/signing-lanes';
-export { assertNeverSigningLane } from '../../../../../../shared-ts/src/signing-lanes';
-//# sourceMappingURL=laneRecords.d.ts.map