@seams/wallet 0.6.2 → 0.7.3

package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/repositories.d.ts

@@ -1,9 +1,9 @@
-import { type WalletRecoveryOperationId, type WalletAuthMethodId, type WalletAuthorityId, type WalletId } from '../../../../../shared-ts/src/utils/domainIds';
-import { type WalletAuthMethodRecordV2 } from '../../../../../shared-ts/src/utils/registrationIntent';
-import { type ActiveRecoveredWalletAuthorityV1, type PendingWalletAuthorityV1, type WalletAuthorityV1 } from '../../../../../shared-ts/src/authorization/walletAuthority';
+import { type WalletRecoveryOperationId, type MpcMaterialActivationRef, type WalletAuthMethodId, type WalletAuthorityId, type WalletId } from '../../../../../shared-ts/src/utils/domainIds';
+import { type ActiveWalletAuthMethodRecordV2, type PendingWalletAuthMethodRecordV2, type WalletAuthMethodRecordV2 } from '../../../../../shared-ts/src/utils/walletAuthMethodRecord';
+import { type ActiveRecoveredWalletAuthorityV1, type ActiveWalletAuthorityV1, type PendingWalletAuthorityV1, type WalletAuthorityV1 } from '../../../../../shared-ts/src/authorization/walletAuthority';
 import { type WalletAuthAuthority } from '../../../../../shared-ts/src/utils/walletAuthAuthority';
 import type { KeyMaterialKind, KeyMaterialRecord } from '../keyMaterial.types';
-import type { AccountRef, AccountSignerRecord, AccountSignerStatus, ChainAccountRecord, DBConstraintErrorCode, EnqueueSignerOperationInput, LastProfileState, LocalAuthorityInstallationReceiptV1, LocalWalletAuthMethodRecord, LocalWalletAuthMethodProjectionV2, NonceLaneLeaseStoreRecord, ProfileAuthenticatorRecord, ProfileContinuitySnapshot, ProfileRecord, RetainVerifiedEmailOtpLocalPresentationInputV1, RetainVerifiedEmailOtpLocalPresentationResultV1, SignerMutationOptions, SignerOperationStatus, SignerOpOutboxRecord, UpsertChainAccountInput, UpsertProfileInput, UserPreferences, WalletAuthorityExportRootRecordV1, WalletAuthoritySignerMaterialRecordV1, WalletSelectionRecordV1, WalletSignerLookup } from '../passkeyClientDB.types';
+import type { AccountRef, AccountSignerRecord, AccountSignerStatus, ChainAccountRecord, EnqueueSignerOperationInput, LastProfileState, LocalAuthorityInstallationReceiptV1, LocalWalletAuthMethodRecord, LocalWalletAuthMethodProjectionV2, NonceLaneLeaseStoreRecord, ProfileAuthenticatorRecord, ProfileContinuitySnapshot, ProfileRecord, RetainVerifiedEmailOtpLocalPresentationInputV1, RetainVerifiedEmailOtpLocalPresentationResultV1, SignerMutationOptions, SignerOperationStatus, SignerOpOutboxRecord, UpsertChainAccountInput, UpsertProfileInput, UserPreferences, WalletAuthorityExportRootRecordV1, WalletAuthoritySignerMaterialRecordV1, WalletSelectionRecordV1, WalletSignerLookup } from '../passkeyClientDB.types';
 import type { ThresholdEcdsaChainTarget } from '../../signingEngine/interfaces/ecdsaChainTarget';
 import { type ActivateAccountSignerInput, type ActivateAccountSignerResult, type StageAccountSignerInput, type StageAccountSignerResult } from '../accountSignerLifecycle';
 import { type PendingWalletRegistrationCommitV1 } from '../pendingWalletRegistrationCommit';
@@ -19,9 +19,7 @@ type AppStateRow<T = unknown> = {
 };
 export type LocalAuthorityInstallationInputV1 = {
     readonly authority: PendingWalletAuthorityV1;
-    readonly authMethod: Extract<WalletAuthMethodRecordV2, {
-        status: 'pending_local_install';
-    }>;
+    readonly authMethod: PendingWalletAuthMethodRecordV2;
     readonly profile: UpsertProfileInput;
     readonly authenticator: ProfileAuthenticatorRecord | null;
     readonly localAuthMethod: Extract<LocalWalletAuthMethodRecord, {
@@ -47,23 +45,15 @@ export type LocalAuthorityInstallationResultV1 = {
     readonly reason: string;
 };
 export type LocalAuthorityActivationFinalizationInputV1 = {
-    readonly authority: Extract<WalletAuthorityV1, {
-        readonly state: 'active';
-    }>;
-    readonly authMethod: Extract<WalletAuthMethodRecordV2, {
-        readonly status: 'active';
-    }>;
+    readonly authority: ActiveWalletAuthorityV1;
+    readonly authMethod: ActiveWalletAuthMethodRecordV2;
     readonly walletSession: ActiveWalletSessionV1;
     readonly operationCredential: WalletSessionOperationCredentialV1;
     readonly expectedLockGeneration: number;
 };
 export type LocalAuthorityActivationPublicationInputV1 = {
-    readonly authority: Extract<WalletAuthorityV1, {
-        readonly state: 'active';
-    }>;
-    readonly authMethod: Extract<WalletAuthMethodRecordV2, {
-        readonly status: 'active';
-    }>;
+    readonly authority: ActiveWalletAuthorityV1;
+    readonly authMethod: ActiveWalletAuthMethodRecordV2;
     readonly expectedLockGeneration: number;
 };
 export type LocalAuthorityActivationPublicationResultV1 = {
@@ -92,9 +82,7 @@ export type WalletLockGenerationAdvanceInputV1 = {
 };
 export type RecoveredWalletAuthorityProjectionInputV1 = {
     readonly authority: ActiveRecoveredWalletAuthorityV1;
-    readonly authMethod: Extract<WalletAuthMethodRecordV2, {
-        readonly status: 'active';
-    }>;
+    readonly authMethod: ActiveWalletAuthMethodRecordV2;
     readonly recoveredAtMs: number;
 };
 export type ResolveSelectedWalletAuthorityResultV1 = {
@@ -117,12 +105,8 @@ export type ResolveSelectedWalletAuthorityResultV1 = {
     readonly reason: string;
 };
 export type PersistFoundingWalletAuthorityInputV1 = {
-    readonly authority: Extract<WalletAuthorityV1, {
-        readonly state: 'active';
-    }>;
-    readonly authMethod: Extract<WalletAuthMethodRecordV2, {
-        readonly status: 'active';
-    }>;
+    readonly authority: ActiveWalletAuthorityV1;
+    readonly authMethod: ActiveWalletAuthMethodRecordV2;
 };
 export type StoreWalletRegistrationFinalizeBatchInput = {
     profiles: readonly UpsertProfileInput[];
@@ -136,7 +120,7 @@ export type StoreWalletRegistrationFinalizeBatchInput = {
         scope?: string | null;
     };
 };
-export type WalletRegistrationCommitPublicationRequestV1 = {
+type WalletRegistrationCommitPublicationRequestV1 = {
     readonly operation: PendingWalletRegistrationCommitV1['operation'];
     readonly registrationCeremonyId: string;
     readonly idempotencyKey: string;
@@ -150,7 +134,7 @@ export type StoreWalletRegistrationPublicationInputV1 = Omit<StoreWalletRegistra
         readonly scope: string | null;
     };
 };
-export type WalletRegistrationSessionPublicationV1 = {
+type WalletRegistrationSessionPublicationV1 = {
     readonly kind: 'issued';
     readonly walletSession: ActiveWalletSessionV1;
     readonly operationCredential: WalletSessionOperationCredentialV1;
@@ -172,9 +156,7 @@ export type PublishPendingWalletRecoveryCommitInputV1 = {
         readonly stage: 'server_promoted';
     }>;
     readonly authority: ActiveRecoveredWalletAuthorityV1;
-    readonly authMethod: Extract<WalletAuthMethodRecordV2, {
-        readonly status: 'active';
-    }>;
+    readonly authMethod: ActiveWalletAuthMethodRecordV2;
     readonly registration: StoreWalletRegistrationPublicationInputV1;
     readonly ecdsaContinuity: readonly PreparedImportedWalletCustodyEcdsaContinuity[];
     readonly ed25519PublicCapabilityReferences: readonly Ed25519YaoPublicCapabilityReferenceV1[];
@@ -189,23 +171,23 @@ export type StoreWalletSignerFinalizeBatchInput = {
         scope?: string | null;
     };
 };
-export type AccountSignerRollbackMetadataBaselineV1 = {
+type AccountSignerRollbackMetadataBaselineV1 = {
     readonly kind: 'account_signer_rollback_metadata_absent_v1';
 } | {
     readonly kind: 'account_signer_rollback_metadata_json_v1';
     readonly json: string;
 };
-export type KeyMaterialRollbackPayloadBaselineV1 = {
+type KeyMaterialRollbackPayloadBaselineV1 = {
     readonly kind: 'key_material_rollback_payload_absent_v1';
 } | {
     readonly kind: 'key_material_rollback_payload_json_v1';
     readonly json: string;
 };
-export type AccountSignerRollbackEntryV1 = {
+type AccountSignerRollbackEntryV1 = {
     readonly committed: AccountSignerRecord;
     readonly metadataBaseline: AccountSignerRollbackMetadataBaselineV1;
 };
-export type KeyMaterialRollbackEntryV1 = {
+type KeyMaterialRollbackEntryV1 = {
     readonly committed: KeyMaterialRecord;
     readonly payloadBaseline: KeyMaterialRollbackPayloadBaselineV1;
 };
@@ -230,11 +212,6 @@ export type StoreWalletSignerFinalizeBatchResult = StoreWalletRegistrationFinali
 export type StoreWalletRegistrationFinalizeBatchResult = {
     signerActivations: ActivateAccountSignerResult[];
 };
-export declare class SeamsWalletDBConstraintError extends Error {
-    readonly code: DBConstraintErrorCode;
-    readonly details?: Record<string, unknown>;
-    constructor(code: DBConstraintErrorCode, message: string, details?: Record<string, unknown>);
-}
 export declare class SeamsWalletRepositories {
     private readonly manager;
     constructor(manager: SeamsWalletDBManager);
@@ -268,8 +245,7 @@ export declare class SeamsWalletRepositories {
     retainVerifiedEmailOtpLocalPresentation(input: RetainVerifiedEmailOtpLocalPresentationInputV1): Promise<RetainVerifiedEmailOtpLocalPresentationResultV1>;
     resolveSelectedWalletAuthority(walletId: string): Promise<ResolveSelectedWalletAuthorityResultV1>;
     /**
-     * R109C: resolve the authority as a named method rather than as the selected
-     * one.
+     * Resolve the authority as a named method rather than as the selected one.
      *
      * Unlocking a sibling is how an added method comes into use - invariant 9
      * makes lock and unlock the route - and the unlock moves the selection to it.
@@ -304,6 +280,35 @@ export declare class SeamsWalletRepositories {
         registrationCeremonyId: string;
         operation: PendingWalletRegistrationCommitV1['operation'];
     }): Promise<void>;
+    /**
+     * Adopts the authority the Gateway returned after this wallet added an ECDSA
+     * signer: the local authority extended with exactly the activation this
+     * device made, nothing else changed. The Gateway promoted the wallet's live
+     * Wallet Sessions to it; the next exact status read carries that promotion
+     * into the local session, which keeps its operation credential.
+     */
+    adoptAddedEcdsaSignerAuthority(input: {
+        readonly authority: WalletAuthorityV1;
+        readonly materialActivation: MpcMaterialActivationRef;
+    }): Promise<void>;
+    /**
+     * Replaces the exact active Wallet Session with the one a status read
+     * returned, only while it still binds the wallet's stored authority and its
+     * unlocked selection. The status crosses the network, and a publication
+     * can commit meanwhile: deferred NEAR provisioning extends the authority
+     * and rebinds the session in one transaction. Writing the older status
+     * after it would bind the session to an authority digest no longer stored,
+     * and every exact-session check would refuse it until another status read.
+     */
+    replaceExactActiveWalletSessionFromStatus(input: {
+        readonly active: ActiveWalletSessionV1;
+        readonly operationCredential: WalletSessionOperationCredentialV1;
+    }): Promise<{
+        readonly kind: 'replaced';
+    } | {
+        readonly kind: 'superseded';
+    }>;
+    private replaceExactActiveWalletSessionFromStatusInTransaction;
     reconcilePendingNearRegistrationAuthority(input: {
         readonly walletSession: ActiveWalletSessionV1;
         readonly operationCredential: WalletSessionOperationCredentialV1;

package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/signingSessionSeals.d.ts

@@ -2,7 +2,7 @@ export type StoredRawSealedRecordEntry = {
     primaryKey: unknown;
     value: unknown;
 };
-export type SigningSessionRestoreLeaseTransaction = {
+type SigningSessionRestoreLeaseTransaction = {
     entries: StoredRawSealedRecordEntry[];
     getRawRestoreLease(leaseKey: string): Promise<unknown>;
     putRestoreLease(row: Record<string, unknown>): void;
@@ -33,4 +33,5 @@ export declare class SigningSessionSealsRepository {
     clearAll(): Promise<void>;
 }
 export declare const signingSessionSealsRepository: SigningSessionSealsRepository;
+export {};
 //# sourceMappingURL=signingSessionSeals.d.ts.map

package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/walletCustodyEcdsaContinuity.d.ts

@@ -0,0 +1,47 @@
+import { type WalletAuthMethodId, type WalletAuthorityId, type WalletId } from '../../../../../shared-ts/src/utils/domainIds';
+import { type RuntimePolicyScope } from '../../../../../shared-ts/src/threshold/signingRootScope';
+import { type RouterAbEcdsaDerivationPublicCapabilityV1, type RouterAbEcdsaRegistrationActivationReceiptV1 } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
+import { type WalletAuthAuthorityRef } from '../../../../../shared-ts/src/utils/walletAuthAuthority';
+import type { ThresholdEcdsaChainTarget } from '../../platform/types';
+import type { WalletCustodyEvmFamilyPublicFacts } from '../../../../../shared-ts/src/passkey-custody';
+import type { EcdsaCapabilityActivationFinalizationResult } from './ecdsaCapabilityManifestLookups';
+import { type PreparedImportedWalletCustodyEcdsaContinuity, IndexedDbEcdsaCapabilityManifestStore } from './ecdsaCapabilityManifestStore';
+export type ImportWalletCustodyEcdsaContinuityInput = {
+    readonly store: IndexedDbEcdsaCapabilityManifestStore;
+    readonly authority: WalletAuthAuthorityRef;
+    readonly chainTargets: readonly [ThresholdEcdsaChainTarget, ...ThresholdEcdsaChainTarget[]];
+    readonly walletId: string;
+    readonly keyHandle: string;
+    readonly ecdsaThresholdKeyId: string;
+    readonly signingRootId: string;
+    readonly signingRootVersion: string;
+    readonly relayerKeyId: string;
+    readonly participantIds: readonly [number, number];
+    readonly publicCapability: RouterAbEcdsaDerivationPublicCapabilityV1;
+    readonly activationReceipt: RouterAbEcdsaRegistrationActivationReceiptV1;
+    readonly runtimePolicyScope: RuntimePolicyScope;
+    readonly readyStateBlobB64u: string;
+    readonly publicFacts: WalletCustodyEvmFamilyPublicFacts;
+};
+type WalletCustodyEcdsaContinuityInput = Omit<ImportWalletCustodyEcdsaContinuityInput, 'store'>;
+export declare function prepareWalletCustodyEcdsaContinuity(input: WalletCustodyEcdsaContinuityInput): Promise<PreparedImportedWalletCustodyEcdsaContinuity>;
+export declare function importWalletCustodyEcdsaContinuity(input: ImportWalletCustodyEcdsaContinuityInput): Promise<EcdsaCapabilityActivationFinalizationResult>;
+/**
+ * Give an added auth method its own encrypted access projection over the
+ * activation the wallet already has. The activation is not re-created and the
+ * source credential's authority is not widened; only a second method-bound
+ * record over the same material appears.
+ *
+ * The membership check is the whole safety argument. Copying access to a method
+ * on another wallet authority would hand that credential custody it was never
+ * granted, so both methods are read back and required to be active members of
+ * the exact same authority before anything is opened.
+ */
+export declare function copyWalletCustodyEcdsaContinuityToAuthMethod(input: {
+    readonly walletId: WalletId;
+    readonly walletAuthorityId: WalletAuthorityId;
+    readonly sourceWalletAuthMethodId: WalletAuthMethodId;
+    readonly targetAuthority: WalletAuthAuthorityRef;
+}): Promise<void>;
+export {};
+//# sourceMappingURL=walletCustodyEcdsaContinuity.d.ts.map

package/dist/types/wallet/src/core/indexedDB/seamsWalletDB/walletSessionAuthorizationStore.d.ts

@@ -3,6 +3,7 @@ import { type WalletAuthMethodId, type WalletAuthorityId, type WalletId } from '
 import { type DigestB64u } from '../../../../../shared-ts/src/utils/canonicalPrimitives';
 import type { SeamsWalletDBManager, SeamsWalletTransactionContext } from './manager';
 import type { ActiveWalletSessionV1, WalletSessionOperationCredentialV1, WalletCapabilitySubjectV1 } from '../../../../../shared-ts/src/device-linking/contracts';
+import type { ReadonlyExclusiveUnion } from '../../../../../shared-ts/src/utils/variant';
 export type { ActiveWalletSessionV1, WalletSessionOperationCredentialV1, WalletCapabilitySubjectV1, } from '../../../../../shared-ts/src/device-linking/contracts';
 export declare const WALLET_SESSION_AUTHORIZATION_RECORD_VERSION_V6: "wallet_session_authorization_v6";
 export type WalletSessionAuthorizationRetirementReason = 'expired' | 'exhausted' | 'replaced' | 'wallet_locked' | 'invalidated';
@@ -22,19 +23,15 @@ export type RetiredWalletSessionV1 = {
     readonly retirementReason: WalletSessionAuthorizationRetirementReason;
 };
 export type WalletSessionAuthorizationRecord = ActiveWalletSessionV1 | RetiredWalletSessionV1;
-export type WalletSessionAuthorizationExactOperationCredentialReadResult = {
+export type WalletSessionAuthorizationExactOperationCredentialReadResult = ReadonlyExclusiveUnion<{
     readonly kind: 'found';
     readonly record: ActiveWalletSessionV1;
     readonly operationCredential: WalletSessionOperationCredentialV1;
 } | {
     readonly kind: 'missing';
-    readonly record?: never;
-    readonly operationCredential?: never;
 } | {
     readonly kind: 'upgrade_required';
-    readonly record?: never;
-    readonly operationCredential?: never;
-};
+}>;
 export type WalletSessionAuthorizationExactActiveReadResult = Extract<WalletSessionAuthorizationExactOperationCredentialReadResult, {
     readonly kind: 'found' | 'missing' | 'upgrade_required';
 }> | {
@@ -54,7 +51,7 @@ export declare class WalletSessionAuthorizationUpgradeRequiredError extends Erro
 type StoredActiveWalletSessionV6 = ActiveWalletSessionV1 & {
     readonly walletSessionId: WalletSessionId;
 };
-export type StoredExactWalletSessionAuthorizationRowV6 = {
+type StoredExactWalletSessionAuthorizationRowV6 = {
     readonly record_version: typeof WALLET_SESSION_AUTHORIZATION_RECORD_VERSION_V6;
     readonly wallet_session_id: string;
     readonly authorization_id: string;
@@ -86,7 +83,7 @@ export declare function replaceExactActiveWalletSessionAuthorizationInTransactio
     readonly active: ActiveWalletSessionV1;
     readonly operationCredential: WalletSessionOperationCredentialV1;
 }): Promise<ActiveWalletSessionV1>;
-export type ExactActiveWalletSessionAuthorizationInTransactionRead = {
+type ExactActiveWalletSessionAuthorizationInTransactionRead = {
     readonly kind: 'found';
     readonly record: ActiveWalletSessionV1;
     readonly operationCredential: WalletSessionOperationCredentialV1;

package/dist/types/wallet/src/core/indexedDB/unifiedIndexedDBManager.d.ts

@@ -8,11 +8,11 @@ import type { ActivateAccountSignerInput as AccountSignerLifecycleInput, Activat
 import { type KeyMaterialKind, type KeyMaterialRecord } from './keyMaterial.types';
 import type { SeamsWalletDBManager } from './seamsWalletDB/manager';
 import { SeamsWalletRepositories, type StoreWalletSignerFinalizeBatchResult, type StoreWalletSignerFinalizeBatchInput, type StoreWalletSignerFinalizeRollbackReceipt, type StoreWalletRegistrationFinalizeBatchInput, type StoreWalletRegistrationFinalizeBatchResult, type PublishPendingWalletRegistrationCommitInputV1, type PublishPendingWalletRecoveryCommitInputV1, type LocalAuthorityInstallationInputV1, type PersistFoundingWalletAuthorityInputV1, type LocalAuthorityInstallationResultV1, type LocalAuthorityActivationFinalizationInputV1, type LocalAuthorityActivationFinalizationResultV1, type LocalAuthorityActivationPublicationInputV1, type LocalAuthorityActivationPublicationResultV1, type WalletLockGenerationAdvanceInputV1, type RecoveredWalletAuthorityProjectionInputV1, type ResolveSelectedWalletAuthorityResultV1 } from './seamsWalletDB/repositories';
-export interface UnifiedIndexedDBManagerDeps {
+interface UnifiedIndexedDBManagerDeps {
     seamsWalletDB: SeamsWalletDBManager;
 }
-export type LocalSignerReconciliationIssueCode = 'duplicate_active_signer_slot' | 'active_signer_missing_key_material' | 'key_material_without_active_signer' | 'stale_pending_signer';
-export type LocalSignerReconciliationIssue = {
+type LocalSignerReconciliationIssueCode = 'duplicate_active_signer_slot' | 'active_signer_missing_key_material' | 'key_material_without_active_signer' | 'stale_pending_signer';
+type LocalSignerReconciliationIssue = {
     code: LocalSignerReconciliationIssueCode;
     profileId: string;
     chainIdKey?: string;
@@ -22,7 +22,7 @@ export type LocalSignerReconciliationIssue = {
     keyKind?: string;
     message: string;
 };
-export type LocalSignerReconciliationSummary = {
+type LocalSignerReconciliationSummary = {
     scannedProfiles: number;
     scannedSigners: number;
     scannedKeyMaterials: number;
@@ -200,6 +200,8 @@ export declare class UnifiedIndexedDBManager {
     persistWalletRegistrationFinalize(input: StoreWalletRegistrationFinalizeBatchInput): Promise<StoreWalletRegistrationFinalizeBatchResult>;
     publishPendingWalletRegistrationCommit(input: PublishPendingWalletRegistrationCommitInputV1): Promise<StoreWalletRegistrationFinalizeBatchResult>;
     publishPendingWalletRegistrationCommitAndRetain(input: PublishPendingWalletRegistrationCommitInputV1): Promise<StoreWalletRegistrationFinalizeBatchResult>;
+    adoptAddedEcdsaSignerAuthority(input: Parameters<SeamsWalletRepositories['adoptAddedEcdsaSignerAuthority']>[0]): Promise<void>;
+    replaceExactActiveWalletSessionFromStatus(input: Parameters<SeamsWalletRepositories['replaceExactActiveWalletSessionFromStatus']>[0]): ReturnType<SeamsWalletRepositories['replaceExactActiveWalletSessionFromStatus']>;
     reconcilePendingNearRegistrationAuthority(input: Parameters<SeamsWalletRepositories['reconcilePendingNearRegistrationAuthority']>[0]): Promise<void>;
     completePendingNearRegistration(input: Parameters<SeamsWalletRepositories['completePendingNearRegistration']>[0]): Promise<void>;
     publishPendingWalletRecoveryCommit(input: PublishPendingWalletRecoveryCommitInputV1): Promise<StoreWalletRegistrationFinalizeBatchResult>;
@@ -258,4 +260,5 @@ export declare class UnifiedIndexedDBManager {
         deadLettered: number;
     }>;
 }
+export {};
 //# sourceMappingURL=unifiedIndexedDBManager.d.ts.map

package/dist/types/wallet/src/core/platform/ecdsaRoleLocalRecords.d.ts

@@ -1,21 +1,14 @@
 import type { EcdsaThresholdKeyId, DerivationClientSharePublicKey33B64u, EcdsaDerivationRelayerPublicKey33B64u, SigningRootId, SigningRootVersion } from '../../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap';
-import type { MpcMaterialActivationRef, WalletId } from '../../../../shared-ts/src/utils/domainIds';
+import type { WalletId } from '../../../../shared-ts/src/utils/domainIds';
 import type { PlatformResult } from './http';
 import type { RouterAbEcdsaDerivationPublicCapabilityV1 } from '../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
+import type { EcdsaRoleLocalReadyStateBlob } from './generated/signerCoreCommands';
+import type { ThresholdEcdsaChainTarget } from '../../../../shared-ts/src/utils/thresholdEcdsaChainTarget';
+import type { ExclusiveUnion } from '../../../../shared-ts/src/utils/variant';
 export type { EcdsaThresholdKeyId, SigningRootId, SigningRootVersion, } from '../../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap';
 export type { WalletId } from '../../../../shared-ts/src/utils/domainIds';
-export type EvmEip155ChainTarget = {
-    kind: 'evm';
-    namespace: 'eip155';
-    chainId: number;
-    networkSlug: string;
-};
-export type TempoChainTarget = {
-    kind: 'tempo';
-    chainId: number;
-    networkSlug: string;
-};
-export type ThresholdEcdsaChainTarget = EvmEip155ChainTarget | TempoChainTarget;
+export type { EvmEip155ChainTarget, TempoChainTarget, ThresholdEcdsaChainTarget, } from '../../../../shared-ts/src/utils/thresholdEcdsaChainTarget';
+export type { EcdsaRoleLocalPendingStateBlob, EcdsaRoleLocalReadyStateBlob, } from './generated/signerCoreCommands';
 export type CredentialIdB64u = string & {
     readonly __brand: 'CredentialIdB64u';
 };
@@ -31,20 +24,6 @@ export type EcdsaGroupPublicKey33B64u = string & {
 export type RelayerKeyId = string & {
     readonly __brand: 'RelayerKeyId';
 };
-export type EcdsaRoleLocalPendingStateBlob = {
-    kind: 'ecdsa_role_local_pending_state_blob_v1';
-    curve: 'secp256k1';
-    encoding: 'base64url';
-    producer: 'signer_core';
-    stateBlobB64u: string;
-};
-export type EcdsaRoleLocalReadyStateBlob = {
-    kind: 'ecdsa_role_local_state_blob_v1';
-    curve: 'secp256k1';
-    encoding: 'base64url';
-    producer: 'signer_core';
-    stateBlobB64u: string;
-};
 export type EcdsaRoleLocalPublicFacts = {
     walletId: WalletId;
     chainTarget: ThresholdEcdsaChainTarget;
@@ -63,17 +42,14 @@ export type EcdsaRoleLocalPublicFacts = {
     ethereumAddress: `0x${string}`;
     publicCapability: RouterAbEcdsaDerivationPublicCapabilityV1;
 };
-export type EcdsaRoleLocalAuthMethod = {
+export type EcdsaRoleLocalAuthMethod = ExclusiveUnion<{
     kind: 'passkey';
     credentialIdB64u: CredentialIdB64u;
     rpId: RpId;
-    authSubjectId?: never;
 } | {
     kind: 'email_otp';
     authSubjectId: EmailOtpAuthSubjectId;
-    credentialIdB64u?: never;
-    rpId?: never;
-};
+}>;
 export type EcdsaRoleLocalReadyRecord = {
     kind: 'ecdsa_role_local_ready_passkey_v1';
     stateBlob: EcdsaRoleLocalReadyStateBlob;
@@ -111,62 +87,18 @@ export type EcdsaRoleLocalMaterialState = {
     record?: never;
     reauth?: never;
 };
-export type EcdsaRoleLocalSessionRecordState = {
-    kind: 'ready_passkey_role_local_material_v1';
-    authMethod: Extract<EcdsaRoleLocalAuthMethod, {
-        kind: 'passkey';
-    }>;
-    publicFacts: EcdsaRoleLocalPublicFacts;
-    materialActivation: MpcMaterialActivationRef;
-    readyRecord?: never;
-    inlineSigningMaterial?: never;
-    reauth?: never;
-    cleanup?: never;
-} | {
-    kind: 'ready_email_otp_role_local_material_v1';
-    authMethod: Extract<EcdsaRoleLocalAuthMethod, {
-        kind: 'email_otp';
-    }>;
-    publicFacts: EcdsaRoleLocalPublicFacts;
-    materialActivation: MpcMaterialActivationRef;
-    readyRecord?: never;
-    inlineSigningMaterial?: never;
-    reauth?: never;
-    cleanup?: never;
-} | {
-    kind: 'reauth_required_role_local_material_v1';
-    authMethod: EcdsaRoleLocalAuthMethod;
-    publicFacts: EcdsaRoleLocalPublicFacts;
-    reason: 'missing_worker_share' | 'missing_durable_material' | 'expired' | 'exhausted' | 'unsupported_material_owner';
-    readyRecord?: never;
-    inlineSigningMaterial?: never;
-    cleanup?: never;
-} | {
-    kind: 'cleanup_only_raw_role_local_record_v1';
-    reason: 'malformed_record' | 'legacy_after_reset' | 'identity_mismatch';
-    message: string;
-    authMethod?: never;
-    readyRecord?: never;
-    inlineSigningMaterial?: never;
-    reauth?: never;
-};
-export type EcdsaRoleLocalRecordParseResult = {
+export type EcdsaRoleLocalRecordParseResult = ExclusiveUnion<{
     ok: true;
     source: 'ready_record';
     state: Extract<EcdsaRoleLocalMaterialState, {
         kind: 'ready' | 'reauth_required';
     }>;
-    code?: never;
-    message?: never;
-    cleanup?: never;
 } | {
     ok: false;
     code: 'malformed_record';
     message: string;
     cleanup: CleanupMalformedEcdsaRoleLocalRecordInput;
-    source?: never;
-    state?: never;
-};
+}>;
 export type LoadEcdsaRoleLocalReadyRecordInput = {
     walletId: WalletId;
     chainTarget: ThresholdEcdsaChainTarget;

package/dist/types/wallet/src/core/platform/http.d.ts

@@ -1,14 +1,12 @@
-export type PlatformResult<Ok, Code extends string> = {
+import type { ExclusiveUnion } from '../../../../shared-ts/src/utils/variant';
+export type PlatformResult<Ok, Code extends string> = ExclusiveUnion<{
     ok: true;
     value: Ok;
-    code?: never;
-    message?: never;
 } | {
     ok: false;
     code: Code;
     message: string;
-    value?: never;
-};
+}>;
 export type HttpTransport = {
     kind: 'http_transport';
     request(input: {

package/dist/types/wallet/src/core/platform/ports.d.ts

@@ -11,27 +11,23 @@ import type { CleanupMalformedEcdsaRoleLocalRecordInput, CleanupMalformedEcdsaRo
 import type { EcdsaRoleLocalWorkerHandle } from '../signingEngine/session/keyMaterialBrands';
 import type { EcdsaBootstrapSecretSource } from './secretSources';
 import type { WalletAddAuthMethodRegistrationOptions } from '../../../../shared-ts/src/utils/addAuthMethodRegistration';
+import type { ExclusiveUnion } from '../../../../shared-ts/src/utils/variant';
 export type { CredentialIdB64u } from './ecdsaRoleLocalRecords';
 export type SignerCryptoInvocationErrorCode = 'unavailable' | 'worker_transport_failure' | 'native_binding_failure' | 'timeout';
-export type SignerCryptoResult<Ok, CommandCode extends string> = {
+export type SignerCryptoResult<Ok, CommandCode extends string> = ExclusiveUnion<{
     ok: true;
     value: Ok;
-    failure?: never;
-    code?: never;
-    message?: never;
 } | {
     ok: false;
     failure: 'command';
     code: CommandCode;
     message: string;
-    value?: never;
 } | {
     ok: false;
     failure: 'invocation';
     code: SignerCryptoInvocationErrorCode;
     message: string;
-    value?: never;
-};
+}>;
 export type DurableRecordStore = {
     kind: 'durable_record_store';
     loadEcdsaRoleLocalReadyRecord(input: LoadEcdsaRoleLocalReadyRecordInput): Promise<LoadEcdsaRoleLocalReadyRecordResult>;

package/dist/types/wallet/src/core/platform/secretSources.d.ts

@@ -99,7 +99,7 @@ export type EmailOtpWorkerIssuedSessionHandleInput = EmailOtpEcdsaRuntimeWorkerI
 };
 export type ClientSecretSource = WebAuthnPrfFirstSecretSource | SecureEnclaveWrappedSecretSource | Fido2HmacSecretSource | EmailOtpWorkerSessionSecretSource;
 export type EcdsaBootstrapSecretSource = ThresholdPrfXClientBaseSecretSource;
-export type RequiredPrfSecretSourceInput = {
+type RequiredPrfSecretSourceInput = {
     prf: {
         prfFirstB64u: string;
     };

package/dist/types/wallet/src/core/platform/signerCoreCommandAdapters.typecheck.d.ts

@@ -1,2 +1,27 @@
+import type { FinalizeEcdsaClientBootstrapCommand as RawFinalizeEcdsaClientBootstrapCommand, FinalizeEcdsaClientBootstrapOutput as RawFinalizeEcdsaClientBootstrapOutput, PrepareEcdsaClientBootstrapCommand as RawPrepareEcdsaClientBootstrapCommand, PrepareEcdsaClientBootstrapOutput as RawPrepareEcdsaClientBootstrapOutput } from './generated/signerCoreCommands';
+import type { FinalizeEcdsaClientBootstrapInput, FinalizeEcdsaClientBootstrapOutput, PrepareEcdsaClientBootstrapInput, PrepareEcdsaClientBootstrapOutput, ThresholdPrfXClientBaseSecretSource } from './types';
+type StringKeys<T> = Extract<keyof T, string>;
+type AssertNever<T extends never> = T;
+export type _PrepareInputNoExtraTopLevel = AssertNever<Exclude<StringKeys<PrepareEcdsaClientBootstrapInput>, StringKeys<RawPrepareEcdsaClientBootstrapCommand>>>;
+export type _PrepareInputNoMissingTopLevel = AssertNever<Exclude<StringKeys<RawPrepareEcdsaClientBootstrapCommand>, StringKeys<PrepareEcdsaClientBootstrapInput>>>;
+export type _PrepareContextNoExtra = AssertNever<Exclude<StringKeys<PrepareEcdsaClientBootstrapInput['context']>, StringKeys<RawPrepareEcdsaClientBootstrapCommand['context']>>>;
+export type _PrepareContextNoMissing = AssertNever<Exclude<StringKeys<RawPrepareEcdsaClientBootstrapCommand['context']>, StringKeys<PrepareEcdsaClientBootstrapInput['context']>>>;
+export type _PrepareParticipantsNoExtra = AssertNever<Exclude<StringKeys<PrepareEcdsaClientBootstrapInput['participants']>, StringKeys<RawPrepareEcdsaClientBootstrapCommand['participants']>>>;
+export type _PrepareParticipantsNoMissing = AssertNever<Exclude<StringKeys<RawPrepareEcdsaClientBootstrapCommand['participants']>, StringKeys<PrepareEcdsaClientBootstrapInput['participants']>>>;
+export type _ThresholdPrfSecretSourceNoExtra = AssertNever<Exclude<StringKeys<ThresholdPrfXClientBaseSecretSource>, StringKeys<Extract<RawPrepareEcdsaClientBootstrapCommand['secretSource'], {
+    kind: 'threshold_prf_x_client_base';
+}>>>>;
+export type _ThresholdPrfSecretSourceNoMissing = AssertNever<Exclude<StringKeys<Extract<RawPrepareEcdsaClientBootstrapCommand['secretSource'], {
+    kind: 'threshold_prf_x_client_base';
+}>>, StringKeys<ThresholdPrfXClientBaseSecretSource>>>;
+export type _GeneratedPrepareSecretSourceIsOnlyThresholdPrf = AssertNever<Extract<RawPrepareEcdsaClientBootstrapCommand['secretSource'], {
+    kind: 'email_otp_worker_session' | 'webauthn_prf_first' | 'secure_enclave_wrapped_secret' | 'fido2_hmac_secret';
+}>>;
+export type _PrepareOutputNoExtraTopLevel = AssertNever<Exclude<StringKeys<PrepareEcdsaClientBootstrapOutput>, StringKeys<RawPrepareEcdsaClientBootstrapOutput>>>;
+export type _PrepareOutputNoMissingTopLevel = AssertNever<Exclude<StringKeys<RawPrepareEcdsaClientBootstrapOutput>, StringKeys<PrepareEcdsaClientBootstrapOutput>>>;
+export type _FinalizeInputNoExtraTopLevel = AssertNever<Exclude<StringKeys<FinalizeEcdsaClientBootstrapInput>, StringKeys<RawFinalizeEcdsaClientBootstrapCommand>>>;
+export type _FinalizeInputNoMissingTopLevel = AssertNever<Exclude<StringKeys<RawFinalizeEcdsaClientBootstrapCommand>, StringKeys<FinalizeEcdsaClientBootstrapInput>>>;
+export type _FinalizeOutputNoExtraTopLevel = AssertNever<Exclude<StringKeys<FinalizeEcdsaClientBootstrapOutput>, StringKeys<RawFinalizeEcdsaClientBootstrapOutput>>>;
+export type _FinalizeOutputNoMissingTopLevel = AssertNever<Exclude<StringKeys<RawFinalizeEcdsaClientBootstrapOutput>, StringKeys<FinalizeEcdsaClientBootstrapOutput>>>;
 export {};
 //# sourceMappingURL=signerCoreCommandAdapters.typecheck.d.ts.map

package/dist/types/wallet/src/core/rpcClients/evm/EvmClient.d.ts

@@ -1,6 +1,6 @@
 import { type EvmTransactionReceipt, type EvmBlockHeader, type EvmTransactionByHash } from '../../../../../shared-ts/src/utils/evmRpcResults';
 export { parseRpcHexQuantity, type EvmTransactionReceipt, type EvmBlockHeader, type EvmTransactionByHash, } from '../../../../../shared-ts/src/utils/evmRpcResults';
-export type EvmBlockTag = 'latest' | 'pending' | 'safe' | 'finalized' | 'earliest';
+type EvmBlockTag = 'latest' | 'pending' | 'safe' | 'finalized' | 'earliest';
 export type WaitForEvmTransactionReceiptArgs = {
     txHash: `0x${string}`;
     timeoutMs?: number;
@@ -11,7 +11,6 @@ export type WaitForEvmTransactionReceiptArgs = {
     transactionSenderAddress?: `0x${string}`;
     nonceHint?: bigint;
 };
-export type EvmTransactionWaitErrorBranch = 'dropped_nonce_advanced' | 'dropped_hash_disappeared' | 'dropped_nonce_gap' | 'underpriced_fee' | 'timeout';
 export interface EvmClient {
     request(args: {
         method: string;

package/dist/types/wallet/src/core/rpcClients/evm/nonceBackend.d.ts

@@ -7,17 +7,17 @@ export type ReserveNonceInput = {
     sender: `0x${string}`;
     nonceKey?: bigint;
 };
-export type EvmBroadcastTransactionLookupInput = ReserveNonceInput & {
+type EvmBroadcastTransactionLookupInput = ReserveNonceInput & {
     txHash: `0x${string}`;
 };
-export type EvmBroadcastTransactionStatus = {
+type EvmBroadcastTransactionStatus = {
     kind: 'finalized';
 } | {
     kind: 'pending';
 } | {
     kind: 'missing';
 };
-export type ReserveNonceBoundaryInput = {
+type ReserveNonceBoundaryInput = {
     chain: EvmNonceChain;
     networkKey: string;
     chainId: number;
@@ -37,7 +37,7 @@ export type ManagedNonceReservationSnapshot = {
     reservedAtMs?: number;
     expiresAtMs?: number;
 };
-export type ManagedNonceReservationSnapshotInput = Omit<ManagedNonceReservationSnapshot, 'chainTarget' | 'leaseId' | 'operationId' | 'operationFingerprint' | 'subjectId'> & {
+type ManagedNonceReservationSnapshotInput = Omit<ManagedNonceReservationSnapshot, 'chainTarget' | 'leaseId' | 'operationId' | 'operationFingerprint' | 'subjectId'> & {
     chainTarget?: ThresholdEcdsaChainTarget;
     leaseId?: string;
     operationId?: string;
@@ -66,29 +66,13 @@ export type NonceLaneStatus = {
     blocked: boolean;
     blockedNonce?: bigint;
 };
-export type EvmNonceBackendFetchInput = {
-    chain: EvmNonceChain;
-    networkKey: string;
-    chainId: number;
-    sender: `0x${string}`;
-    nonceKey: bigint;
-    walletId: string;
-};
-export type FetchChainNoncePort = (input: EvmNonceBackendFetchInput) => Promise<bigint>;
-export type FetchBroadcastTransactionStatusPort = (input: EvmNonceBackendFetchInput & {
-    txHash: `0x${string}`;
-}) => Promise<EvmBroadcastTransactionStatus>;
-export type CreateEvmNonceBackendWithFetcherArgs = {
-    fetchChainNonce: FetchChainNoncePort;
-    fetchBroadcastTransactionStatus: FetchBroadcastTransactionStatusPort;
-};
-export type CreateEvmNonceBackendArgs = {
+type CreateEvmNonceBackendArgs = {
     chains: readonly SeamsChainConfig[];
     fetchImpl?: typeof fetch;
 };
 export declare function toManagedNonceReservationSnapshot(input: ManagedNonceReservation): ManagedNonceReservationSnapshot;
 export declare function fromManagedNonceReservationSnapshot(snapshot: ManagedNonceReservationSnapshotInput): ManagedNonceReservation;
 export declare function reserveNonceInputFromBoundary(input: ReserveNonceBoundaryInput): ReserveNonceInput;
-export declare function createEvmNonceBackendWithFetcher(args: CreateEvmNonceBackendWithFetcherArgs): EvmNonceBackend;
 export declare function createEvmNonceBackend(args: CreateEvmNonceBackendArgs): EvmNonceBackend;
+export {};
 //# sourceMappingURL=nonceBackend.d.ts.map