@seams/wallet 0.6.2 → 0.7.3

package/dist/types/wallet/src/core/rpcClients/near/NearClient.d.ts

@@ -1,55 +1,11 @@
-/**
- * Minimal NEAR RPC client that replaces @near-js/providers
- * Only includes the methods actually used by SeamsWeb
- *
- * If needed, we can just wrap @near-js if we require more complex
- * functionality and type definitions
- */
-import type { TxExecutionStatus, AccessKeyView, AccessKeyInfoView, AccessKeyList, FunctionCallPermissionView, AccountView, BlockReference, RpcQueryRequest, FinalityReference } from '@near-js/types';
-import { type DecodedNearFinalExecutionOutcome, type DecodedNearBlockReference, type NearRpcResultDecoder } from '../../../../../shared-ts/src/utils/nearRpcResults';
+import type { JsonRpcErrorDetails } from '../../../../../shared-ts/src/utils/jsonRpc';
+import type { DecodedNearFinalExecutionOutcome } from '../../../../../shared-ts/src/utils/nearRpcResults';
+import { NearJsonRpcClient, SignedTransaction as SharedSignedTransaction, type NearClient as SharedNearClient } from '../../../../../shared-ts/src/near/nearClient';
 import { WasmTransaction, WasmSignature } from '../../../../../../esm/wasm/near_signer/pkg/wasm_signer_worker.js';
 import type { NonceLeaseRef } from '../../signingEngine/nonce/NonceCoordinator';
+export { encodeSignedTransactionBase64 } from '../../../../../shared-ts/src/near/nearClient';
 export type { AccessKeyList } from '@near-js/types';
-export interface ViewAccountParams {
-    account: string;
-    block_id?: string;
-}
-export type FullAccessKey = Omit<AccessKeyInfoView, 'access_key'> & {
-    access_key: Omit<AccessKeyView, 'permission'> & {
-        permission: 'FullAccess';
-    };
-};
-export type FunctionCallAccessKey = Omit<AccessKeyInfoView, 'access_key'> & {
-    access_key: Omit<AccessKeyView, 'permission'> & {
-        permission: FunctionCallPermissionView;
-    };
-};
-export declare enum RpcCallType {
-    Query = "query",
-    View = "view",
-    Send = "send_tx",
-    Block = "block",
-    Call = "call_function"
-}
-export declare class SignedTransaction {
-    transaction: WasmTransaction;
-    signature: WasmSignature;
-    borsh_bytes: number[];
-    nonceLease?: NonceLeaseRef;
-    serverDispatch?: {
-        transactionHash: string;
-        rpcResult: unknown;
-    };
-    constructor(data: {
-        transaction: WasmTransaction;
-        signature: WasmSignature;
-        borsh_bytes: number[];
-        nonceLease?: NonceLeaseRef;
-        serverDispatch?: {
-            transactionHash: string;
-            rpcResult: unknown;
-        };
-    });
+export declare class SignedTransaction extends SharedSignedTransaction<WasmTransaction, WasmSignature, NonceLeaseRef> {
     static fromPlain(input: {
         transaction: unknown;
         signature: unknown;
@@ -60,90 +16,14 @@ export declare class SignedTransaction {
             rpcResult: unknown;
         };
     }): SignedTransaction;
-    encode(): ArrayBuffer;
-    base64Encode(): string;
-    static decode(bytes: Uint8Array): SignedTransaction;
-}
-/**
- * Serialize a signed transaction-like object to base64.
- * Accepts either our SignedTransaction instance or a plain object
- * with borsh bytes (borsh_bytes | borshBytes) from cross-origin RPC.
- *
- * Implementation notes / pitfalls:
- * - We always bind `this` correctly when calling .base64Encode() / .encode()
- *   so methods defined on SignedTransaction can safely call this.encode().
- * - The underlying base64Encode() helper is implemented to avoid spreading large
- *   Uint8Arrays into String.fromCharCode(...), which can overflow the JS call
- *   stack for big WASM binaries or large transactions.
- * - As a fallback, we accept raw borsh bytes in multiple shapes to keep the
- *   serializer resilient to different runtimes (plain objects, typed arrays, etc.).
- */
-export type EncodableSignedTx = SignedTransaction | {
-    borsh_bytes?: unknown;
-    borshBytes?: unknown;
-    encode?: () => ArrayBuffer;
-    base64Encode?: () => string;
-};
-export declare function toArrayBufferFromUnknownBytes(bytes: unknown): ArrayBuffer | SharedArrayBuffer | null;
-export declare function encodeSignedTransactionBase64(signed: EncodableSignedTx): string;
-/**
- * MinimalNearClient provides a simplified interface for NEAR protocol interactions
- */
-export interface NearClient {
-    viewAccessKey(accountId: string, publicKey: string, finalityQuery?: FinalityReference): Promise<AccessKeyView>;
-    viewAccessKeyList(accountId: string, finalityQuery?: FinalityReference): Promise<AccessKeyList>;
-    viewAccount(accountId: string): Promise<AccountView>;
-    viewCode(accountId: string, finalityQuery?: FinalityReference): Promise<Uint8Array>;
-    viewBlock(params: BlockReference): Promise<DecodedNearBlockReference>;
-    sendTransaction(signedTransaction: SignedTransaction, waitUntil?: TxExecutionStatus): Promise<DecodedNearFinalExecutionOutcome>;
-    txStatus(txHash: string, senderAccountId: string): Promise<DecodedNearFinalExecutionOutcome>;
-    query<T>(params: RpcQueryRequest, decodeResult: NearRpcResultDecoder<T>): Promise<T>;
-    callFunction<A, T>(accountId: string, method: string, args: A, decodeResult: NearRpcResultDecoder<T>, blockQuery?: BlockReference): Promise<T>;
-    view<A, T>(params: {
-        account: string;
-        method: string;
-        args: A;
-        decodeResult: NearRpcResultDecoder<T>;
-    }): Promise<T>;
-    getAccessKeys(params: ViewAccountParams): Promise<{
-        fullAccessKeys: FullAccessKey[];
-        functionCallAccessKeys: FunctionCallAccessKey[];
-    }>;
+    static decode(): SignedTransaction;
 }
-export declare class MinimalNearClient implements NearClient {
-    private readonly rpcUrls;
-    constructor(rpcUrl: string | string[]);
-    private static normalizeRpcUrls;
-    /** Build a JSON-RPC 2.0 POST body (stringified). */
-    private buildRequestBody;
-    /** Perform a single POST to one endpoint and decode its JSON-RPC envelope. */
-    private postOnce;
-    /** Try each configured RPC endpoint in order and return the first decoded envelope. */
-    private requestWithFallback;
-    /** Unwrap an envelope while keeping the method result unknown. */
-    private unwrapRpcResult;
-    /**
-     * Execute RPC call with proper error handling and result extraction
-     */
-    private makeRpcCall;
-    query<T>(params: RpcQueryRequest, decodeResult: NearRpcResultDecoder<T>): Promise<T>;
-    viewAccessKey(accountId: string, publicKey: string, finalityQuery?: FinalityReference): Promise<AccessKeyView>;
-    viewAccessKeyList(accountId: string, finalityQuery?: FinalityReference): Promise<AccessKeyList>;
-    viewAccount(accountId: string): Promise<AccountView>;
-    viewCode(accountId: string, finalityQuery?: FinalityReference): Promise<Uint8Array>;
-    viewBlock(params: BlockReference): Promise<DecodedNearBlockReference>;
-    sendTransaction(signedTransaction: SignedTransaction, waitUntil?: TxExecutionStatus): Promise<DecodedNearFinalExecutionOutcome>;
-    txStatus(txHash: string, senderAccountId: string): Promise<DecodedNearFinalExecutionOutcome>;
-    callFunction<A, T>(accountId: string, method: string, args: A, decodeResult: NearRpcResultDecoder<T>, blockQuery?: BlockReference): Promise<T>;
-    view<A, T>(params: {
-        account: string;
-        method: string;
-        args: A;
-        decodeResult: NearRpcResultDecoder<T>;
-    }): Promise<T>;
-    getAccessKeys({ account, block_id }: ViewAccountParams): Promise<{
-        fullAccessKeys: FullAccessKey[];
-        functionCallAccessKeys: FunctionCallAccessKey[];
-    }>;
+export type NearClient = SharedNearClient<SignedTransaction>;
+export declare class MinimalNearClient extends NearJsonRpcClient<SignedTransaction> {
+    protected errorFromRpc(operationName: string, error: JsonRpcErrorDetails): Error;
+    protected errorFromWrappedResult(message: string): Error;
+    protected errorFromOutcome(operationName: string, outcome: DecodedNearFinalExecutionOutcome, failure: unknown): Error;
+    protected errorFromHttpStatus(response: Response): Error;
+    protected sendWithRetry<T>(send: () => Promise<T>): Promise<T>;
 }
 //# sourceMappingURL=NearClient.d.ts.map

package/dist/types/wallet/src/core/rpcClients/near/NearRpcError.d.ts

@@ -1,5 +1,5 @@
 import type { JsonRpcErrorDetails } from '../../../../../shared-ts/src/utils/jsonRpc';
-type NearRpcErrorType = 'InvalidTxError' | 'ActionError' | 'TxExecutionError' | 'RpcError' | 'Failure' | 'Unknown';
+import type { NearRpcErrorType } from '../../../../../shared-ts/src/utils/nearRpcResults';
 export declare class NearRpcError extends Error {
     code?: number;
     type: NearRpcErrorType;
@@ -22,5 +22,4 @@ export declare class NearRpcError extends Error {
     static fromOutcome(operationName: string, outcome: any, failure: any): NearRpcError;
     static fromRpcError(operationName: string, err: JsonRpcErrorDetails): NearRpcError;
 }
-export {};
 //# sourceMappingURL=NearRpcError.d.ts.map

package/dist/types/wallet/src/core/rpcClients/near/rpcCalls.d.ts

@@ -7,10 +7,8 @@
  * Wallet unlock verification and NEAR RPC helpers share this transport module.
  */
 import type { NearClient } from './NearClient';
-import type { AccountId } from '../../types/accountIds';
 import type { WebAuthnAuthenticationCredential } from '../../types/webauthn';
 import type { ThresholdEcdsaChainTarget } from '../../platform';
-import { TransactionContext } from '../../types/rpc';
 import { type RouterAbEcdsaCredentialFreeSessionActivationResponseV1, type RouterAbEcdsaPostRegistrationSessionActivationPolicyV1, type RouterAbEcdsaPostRegistrationSessionActivationResponseV1, type RouterAbEcdsaRegistrationActivationReceiptV1, type RouterAbEcdsaDerivationPublicCapabilityV1 } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
 import { type RuntimePolicyScope } from '../../../../../shared-ts/src/threshold/signingRootScope';
 import { type ParsedYaoRecoveryCapabilityV1 } from '../../signingEngine/flows/recovery/passkeyEd25519YaoRecovery';
@@ -22,17 +20,6 @@ import type { ExactWalletSessionAuthorization } from '../../signingEngine/sessio
 import { type WalletSessionCommittedIdentityV1 } from '../../../../../shared-ts/src/authorization';
 import { type ThresholdEd25519SessionId } from '../../../../../shared-ts/src/utils/domainIds';
 import { type RouterAbEd25519NormalSigningState } from '../../../../../shared-ts/src/utils/signingSessionSeal';
-export declare function fetchNonceBlockHashAndHeight({ nearClient, nearPublicKeyStr, nearAccountId, }: {
-    nearClient: NearClient;
-    nearPublicKeyStr: string;
-    nearAccountId: AccountId;
-}): Promise<TransactionContext>;
-export type AccessKeyWaitOptions = {
-    attempts?: number;
-    delayMs?: number;
-};
-export declare function hasAccessKey(nearClient: NearClient, nearAccountId: string, publicKey: string, opts?: AccessKeyWaitOptions): Promise<boolean>;
-export declare function waitForAccessKeyAbsent(nearClient: NearClient, nearAccountId: string, publicKey: string, opts?: AccessKeyWaitOptions): Promise<boolean>;
 /**
  * Best-effort on-chain account existence check.
  *
@@ -162,26 +149,21 @@ export type PasskeySessionEcdsaCustodyContinuityV1 = {
     readonly kind: 'wallet_custody_ecdsa_sync_continuity_v1';
     readonly signers: readonly PasskeySessionEcdsaCustodySignerV1[];
 };
-export type WalletUnlockSuccessWithoutEcdsaActivation = WalletUnlockSuccessCore & {
-    ecdsaSession?: never;
-    walletCustody?: never;
-    walletSessionAuthorization?: never;
-};
-export type WalletUnlockSuccessWithEcdsaActivation = WalletUnlockSuccessCore & {
+type WalletUnlockSuccessWithEcdsaActivation = WalletUnlockSuccessCore & {
     ecdsaSession: RouterAbEcdsaPostRegistrationSessionActivationResponseV1;
     ecdsaActivationReceipt: RouterAbEcdsaRegistrationActivationReceiptV1;
     ecdsaCustody: PasskeySessionEcdsaCustodyContinuityV1;
     walletCustody: PasskeySessionCustodyUnlockV1;
     walletSessionAuthorization?: never;
 };
-export type PasskeyWalletUnlockSuccessWithCredentialFreeEcdsaActivation = WalletUnlockSuccessCore & {
+type PasskeyWalletUnlockSuccessWithCredentialFreeEcdsaActivation = WalletUnlockSuccessCore & {
     ecdsaSession: RouterAbEcdsaCredentialFreeSessionActivationResponseV1;
     ecdsaActivationReceipt: RouterAbEcdsaRegistrationActivationReceiptV1;
     ecdsaCustody: PasskeySessionEcdsaCustodyContinuityV1;
     walletCustody: PasskeySessionCustodyUnlockV1;
     walletSessionAuthorization: ExactWalletSessionAuthorization;
 };
-export type PasskeyWalletUnlockSuccessWithoutEcdsaActivation = (Omit<WalletUnlockSuccessCore, 'ed25519Session'> & {
+type PasskeyWalletUnlockSuccessWithoutEcdsaActivation = (Omit<WalletUnlockSuccessCore, 'ed25519Session'> & {
     ed25519Session: PasskeyWalletUnlockEd25519Session;
     ecdsaSession?: never;
     walletCustody: PasskeySessionCustodyUnlockV1;
@@ -192,8 +174,7 @@ export type PasskeyWalletUnlockSuccessWithoutEcdsaActivation = (Omit<WalletUnloc
     walletCustody: PasskeySessionCustodyUnlockV1;
     walletSessionAuthorization?: never;
 });
-export type WalletUnlockResult = WalletUnlockFailure | WalletUnlockSuccessWithoutEcdsaActivation | PasskeyWalletUnlockSuccessWithoutEcdsaActivation | WalletUnlockSuccessWithEcdsaActivation | PasskeyWalletUnlockSuccessWithCredentialFreeEcdsaActivation;
-export type WalletUnlockResultFor<Input extends PasskeyWalletUnlockInput> = Input extends PasskeyWalletUnlockInputWithEcdsaActivation ? WalletUnlockFailure | WalletUnlockSuccessWithEcdsaActivation | PasskeyWalletUnlockSuccessWithCredentialFreeEcdsaActivation : WalletUnlockFailure | PasskeyWalletUnlockSuccessWithoutEcdsaActivation;
+type WalletUnlockResultFor<Input extends PasskeyWalletUnlockInput> = Input extends PasskeyWalletUnlockInputWithEcdsaActivation ? WalletUnlockFailure | WalletUnlockSuccessWithEcdsaActivation | PasskeyWalletUnlockSuccessWithCredentialFreeEcdsaActivation : WalletUnlockFailure | PasskeyWalletUnlockSuccessWithoutEcdsaActivation;
 export declare function verifyPasskeyWalletUnlock<Input extends PasskeyWalletUnlockInput>(relayServerUrl: string, input: Input, statusReads: WalletSessionStatusReadScope): Promise<WalletUnlockResultFor<Input>>;
 export type LinkedDevicePasskeyWalletSessionUnlockInput = {
     readonly challengeId: string;
@@ -206,7 +187,7 @@ export type LinkedDevicePasskeyWalletSessionUnlockInput = {
     };
     readonly expected_origin?: string;
 };
-export type LinkedDevicePasskeyWalletSessionUnlockResult = {
+type LinkedDevicePasskeyWalletSessionUnlockResult = {
     readonly success: false;
     readonly kind?: never;
     readonly code?: never;
@@ -234,12 +215,5 @@ export type LinkedDevicePasskeyWalletSessionUnlockResult = {
  * belongs to the caller's local material opener.
  */
 export declare function verifyLinkedDevicePasskeyWalletSession(relayServerUrl: string, input: LinkedDevicePasskeyWalletSessionUnlockInput): Promise<LinkedDevicePasskeyWalletSessionUnlockResult>;
-export interface CredentialIdsResult {
-    credentialIds: string[];
-}
-export interface AuthenticatorsResult {
-    authenticators: Array<[string, ContractStoredAuthenticator]>;
-}
-export type ContractStoredAuthenticator = Record<string, unknown>;
 export {};
 //# sourceMappingURL=rpcCalls.d.ts.map

package/dist/types/wallet/src/core/rpcClients/relayer/ownerWalletExecutionLanePreflight.d.ts

@@ -1,21 +1,11 @@
-import type { SigningLaneRecord, WalletKeyRecord } from '../../../../../shared-ts/src/signing-lanes';
+import type { OwnerWalletExecutionLaneProjectionV1 } from '../../../../../shared-ts/src/signing-lanes';
 import { type MpcMaterialActivationRef } from '../../../../../shared-ts/src/utils/domainIds';
-import { type DigestB64u } from '../../../../../shared-ts/src/utils/canonicalPrimitives';
 export declare const OWNER_WALLET_EXECUTION_LANE_PREFLIGHT_PATH = "/wallet/execution-lane/owner";
-export type OwnerWalletExecutionLaneProjectionV1 = {
-    readonly kind: 'active_owner_wallet_execution_lane_projection_v1';
-    readonly walletKey: WalletKeyRecord;
-    readonly lane: Extract<SigningLaneRecord, {
-        readonly laneKind: 'owner_passkey' | 'owner_email_otp';
-    }>;
-    readonly materialActivation: MpcMaterialActivationRef;
-    readonly verifiedActivationReceiptDigestB64u: DigestB64u;
-};
+export type { OwnerWalletExecutionLaneProjectionV1 };
 export declare function readOwnerWalletExecutionLaneProjectionV1(input: {
     readonly relayerUrl: string;
     readonly walletSessionToken: string;
     readonly curve: 'ed25519' | 'ecdsa_secp256k1';
     readonly expectedMaterialActivation: MpcMaterialActivationRef;
 }): Promise<OwnerWalletExecutionLaneProjectionV1>;
-export declare function parseOwnerWalletExecutionLaneProjectionResponseV1(value: unknown, curve: 'ed25519' | 'ecdsa_secp256k1'): OwnerWalletExecutionLaneProjectionV1;
 //# sourceMappingURL=ownerWalletExecutionLanePreflight.d.ts.map

package/dist/types/wallet/src/core/rpcClients/relayer/passkeyCustodyEnvelope.d.ts

@@ -1,5 +1,5 @@
 import { type PasskeyCustodyEnvelopeRecord } from '../../../../../shared-ts/src/passkey-custody';
-export type PasskeyCustodyEnvelopeFetchResult = {
+type PasskeyCustodyEnvelopeFetchResult = {
     readonly kind: 'active';
     /** The sealed record is structurally validated before it reaches the worker. */
     readonly envelope: PasskeyCustodyEnvelopeRecord;
@@ -44,7 +44,7 @@ export declare function fetchPasskeyCustodyEnvelope(args: {
     readonly fetchImpl?: typeof fetch;
 }): Promise<PasskeyCustodyEnvelopeFetchResult>;
 /**
- * Refactor 109C: hands a resealed pre-109C envelope to the server.
+ * Hands a formerly unbound envelope, now resealed, to the server.
  *
  * The unlock that opened an `unbound` envelope has already resealed it under
  * the exact method that authenticated. This is the only thing left to do with
@@ -55,7 +55,7 @@ export declare function fetchPasskeyCustodyEnvelope(args: {
  * none of them is worth surfacing to the user: the V2 row stands, the wallet
  * still opens, and the next unlock tries again. The caller logs and moves on.
  */
-export type WalletCustodyEnvelopeOwnershipUpgradeOutcome = {
+type WalletCustodyEnvelopeOwnershipUpgradeOutcome = {
     readonly kind: 'upgraded';
     readonly envelopeRevision: number;
 }
@@ -77,4 +77,5 @@ export declare function upgradeWalletCustodyEnvelopeOwnership(args: {
     readonly envelope: unknown;
     readonly fetchImpl?: typeof fetch;
 }): Promise<WalletCustodyEnvelopeOwnershipUpgradeOutcome>;
+export {};
 //# sourceMappingURL=passkeyCustodyEnvelope.d.ts.map

package/dist/types/wallet/src/core/rpcClients/relayer/registrationSignerSetRequest.d.ts

@@ -1,4 +1,5 @@
-import type { RegistrationSignerSetSelection } from '../../../../../shared-ts/src/utils/registrationIntent';
-export type RegistrationSignerSetRequest = RegistrationSignerSetSelection;
+import type { RegistrationSignerSetSelection } from '../../../../../shared-ts/src/utils/registrationSignerPlan';
+type RegistrationSignerSetRequest = RegistrationSignerSetSelection;
 export declare function registrationSignerSetRequestSelection(selection: RegistrationSignerSetRequest): RegistrationSignerSetSelection;
+export {};
 //# sourceMappingURL=registrationSignerSetRequest.d.ts.map

package/dist/types/wallet/src/core/rpcClients/relayer/relayerHttp.d.ts

@@ -1,4 +1,4 @@
-export type RelayerHttpHeaders = Readonly<Record<string, string>>;
+type RelayerHttpHeaders = Readonly<Record<string, string>>;
 export declare function normalizeRelayerBaseUrl(value: unknown, options?: {
     trim: boolean;
 }): string;
@@ -6,10 +6,10 @@ export declare function buildBearerAuthorizationHeader(args: {
     token: unknown;
     missingMessage: string;
 }): Record<string, string>;
-export declare function buildRelayerJsonGetRequestInit(): RequestInit;
 export declare function buildRelayerJsonPostRequestInit(args: {
     body: unknown;
     headers?: RelayerHttpHeaders;
     bodyJson?: string;
 }): RequestInit;
+export {};
 //# sourceMappingURL=relayerHttp.d.ts.map

package/dist/types/wallet/src/core/rpcClients/relayer/routerAbNormalSigning.d.ts

@@ -1,6 +1,4 @@
-import { type RouterAbEcdsaPrepareSourceV1, type RouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1Wire, type RouterAbEcdsaDerivationEvmDigestSigningPrepareResponseV1Wire, type RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire, type RouterAbEcdsaDerivationEvmDigestSigningResponseV1Wire, type RouterAbOwnerOperationAuthorizationDecisionV1Wire } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
-import type { RouterAbEd25519OwnerOperationAuthorizationDecisionV1Wire } from '../../../../../shared-ts/src/utils/routerAbNormalSigningIdentity';
-import { WalletSessionQuotaAdmissionError } from '../../signingEngine/session/operationState/authorizationAdmission';
+import { type RouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1Wire, type RouterAbEcdsaDerivationEvmDigestSigningPrepareResponseV1Wire, type RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire, type RouterAbEcdsaDerivationEvmDigestSigningResponseV1Wire } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
 import { type RouterAbMpcMaterialActivationRefWire, type RouterAbNormalSigningAuthorizationWire } from '../../../../../shared-ts/src/utils/routerAbNormalSigningIdentity';
 export declare class RouterAbSigningRequestError extends Error {
     readonly code: string;
@@ -13,14 +11,7 @@ export declare class RouterAbSigningRequestError extends Error {
         status: number;
     });
 }
-export declare function routerAbNormalSigningAdmissionErrorFromPayload(args: {
-    code: string;
-    message: string;
-    path: string;
-    status: number;
-    authorizationDecision?: RouterAbOwnerOperationAuthorizationDecisionV1Wire | RouterAbEd25519OwnerOperationAuthorizationDecisionV1Wire;
-}): WalletSessionQuotaAdmissionError | null;
-export type RouterAbOpaqueWalletSessionCredential = {
+type RouterAbOpaqueWalletSessionCredential = {
     kind: 'wallet_session_opaque';
     walletSessionToken: string;
 };
@@ -34,7 +25,7 @@ export type RouterAbOwnerNormalSigningCredential = RouterAbOpaqueWalletSessionCr
 export type RouterAbPublicDigest32Wire = {
     bytes: readonly number[];
 };
-export type RouterAbCanonicalWireBytesV1Wire = {
+type RouterAbCanonicalWireBytesV1Wire = {
     bytes: readonly number[];
 };
 export type RouterAbNormalSigningScopeV2Wire = {
@@ -44,11 +35,11 @@ export type RouterAbNormalSigningScopeV2Wire = {
     material_activation: RouterAbMpcMaterialActivationRefWire;
     signing_worker_id: string;
 };
-export type RouterAbNormalSigningCommitmentsV1Wire = {
+type RouterAbNormalSigningCommitmentsV1Wire = {
     hiding: string;
     binding: string;
 };
-export type RouterAbServerIdentityV1Wire = {
+type RouterAbServerIdentityV1Wire = {
     server_id: string;
     key_epoch: string;
     recipient_encryption_key: string;
@@ -113,13 +104,13 @@ export type RouterAbNormalSigningPrepareRequestV2Wire = {
     intent: RouterAbEd25519NormalSigningIntentV2Wire;
     signing_payload: RouterAbEd25519SigningPayloadV2Wire;
 };
-export type RouterAbEd25519NormalSigningPrepareBindingV2Wire = {
+type RouterAbEd25519NormalSigningPrepareBindingV2Wire = {
     server_round1_handle: string;
     round1_binding_digest: RouterAbPublicDigest32Wire;
     intent_digest: RouterAbPublicDigest32Wire;
     signing_payload_digest: RouterAbPublicDigest32Wire;
 };
-export type RouterAbEd25519NormalSigningFinalizeProtocolV2Wire = {
+type RouterAbEd25519NormalSigningFinalizeProtocolV2Wire = {
     kind: 'ed25519_two_party_frost_finalize_v1';
     client_commitments: RouterAbNormalSigningCommitmentsV1Wire;
     server_commitments: RouterAbNormalSigningCommitmentsV1Wire;
@@ -127,7 +118,7 @@ export type RouterAbEd25519NormalSigningFinalizeProtocolV2Wire = {
     server_verifying_share_b64u: string;
     client_signature_share_b64u: string;
 };
-export type RouterAbReusableWalletSessionAuthorizedOperationV1Wire = {
+type RouterAbReusableWalletSessionAuthorizedOperationV1Wire = {
     kind: 'reusable_wallet_session_authorized_operation_v1';
     authorized_operation_id: string;
     operation_id: string;
@@ -138,7 +129,7 @@ export type RouterAbReusableWalletSessionAuthorizedOperationV1Wire = {
     display_digest_b64u: string;
     operation_fingerprint_digest: string;
 };
-export type RouterAbVerifiedStepUpAuthorizedOperationV1Wire = {
+type RouterAbVerifiedStepUpAuthorizedOperationV1Wire = {
     kind: 'verified_step_up_authorized_operation_v1';
     authorization_session_id: string;
     evidence_set_digest: string;
@@ -207,7 +198,7 @@ export type RouterAbNormalSigningResponseV1Wire = {
     signature: RouterAbCanonicalWireBytesV1Wire;
     signed_at_ms: number;
 };
-export type RouterAbEd25519NormalSigningAdmissionMaterialV2Wire = {
+type RouterAbEd25519NormalSigningAdmissionMaterialV2Wire = {
     intentDigest: RouterAbPublicDigest32Wire;
     signingPayloadDigest: RouterAbPublicDigest32Wire;
     admittedSigningDigest: RouterAbPublicDigest32Wire;
@@ -216,15 +207,8 @@ export type RouterAbNormalSigningPrepareRequestV2BuildResult = {
     request: RouterAbNormalSigningPrepareRequestV2Wire;
     admissionMaterial: RouterAbEd25519NormalSigningAdmissionMaterialV2Wire;
 };
-export declare function routerAbDigest32Wire(bytes: Uint8Array): RouterAbPublicDigest32Wire;
 export declare function routerAbCanonicalWireBytesToB64u(value: RouterAbCanonicalWireBytesV1Wire, label: string): string;
 export declare function routerAbNormalSigningActionFingerprint(value: unknown): Promise<string>;
-export declare function routerAbEd25519Nep413CanonicalMessageB64uV2(args: {
-    message: string;
-    recipient: string;
-    nonce: string;
-    callbackUrl?: string | null;
-}): string;
 export declare function buildRouterAbEd25519NearTransactionPrepareRequestV2(args: {
     scope: RouterAbNormalSigningScopeV2Wire;
     expiresAtMs: number;
@@ -282,7 +266,6 @@ export declare function buildRouterAbEd25519NormalSigningFinalizeRequestV2(args:
     clientVerifyingShareB64u: string;
     clientSignatureShareB64u: string;
 }): RouterAbNormalSigningFinalizeRequestV2Wire;
-export declare function deriveRouterAbNormalSigningAdmissionMaterialV2(request: RouterAbNormalSigningPrepareRequestV2Wire): Promise<RouterAbEd25519NormalSigningAdmissionMaterialV2Wire>;
 export declare function prepareRouterAbNormalSigningV2(args: {
     relayServerUrl: string;
     credential: RouterAbEd25519NormalSigningCredential;
@@ -294,18 +277,6 @@ export declare function prepareRouterAbEcdsaDerivationEvmDigestSigningV1(args: {
     request: RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire;
     onServerTiming?: (header: string | null) => void;
 }): Promise<RouterAbEcdsaDerivationEvmDigestSigningPrepareResponseV1Wire>;
-export type RouterAbEcdsaFinalBatchPrepareResponse = {
-    preparedResponse: RouterAbEcdsaDerivationEvmDigestSigningPrepareResponseV1Wire;
-    outgoingMessagesB64u: [string];
-};
-export declare function prepareRouterAbEcdsaFinalPresignBatchV1(args: {
-    relayServerUrl: string;
-    credential: RouterAbOwnerNormalSigningCredential;
-    request: RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire;
-    source: Extract<RouterAbEcdsaPrepareSourceV1, {
-        kind: 'final_presign_batch';
-    }>;
-}): Promise<RouterAbEcdsaFinalBatchPrepareResponse>;
 export declare function finalizeRouterAbNormalSigningV2(args: {
     relayServerUrl: string;
     credential: RouterAbEd25519NormalSigningCredential;

package/dist/types/wallet/src/core/rpcClients/relayer/sealedRefreshCapabilities.d.ts

@@ -1,23 +1,9 @@
 import type { SeamsConfigsReadonly } from '../../types/seams';
-import { type SigningSessionSealProtocol } from '../../../../../shared-ts/src/utils/signingSessionSeal';
-export type RelayerSigningSessionSealCapabilities = {
-    mode: 'none';
-} | {
-    mode: 'sealed_refresh_v1';
-    protocol: SigningSessionSealProtocol;
-    currentKeyVersion: string;
-};
 type VerifySealedRefreshStartupParityArgs = {
     configs: SeamsConfigsReadonly;
     fetchImpl?: typeof fetch;
     timeoutMs?: number;
 };
-type FetchRelayerSigningSessionSealCapabilitiesArgs = {
-    relayerUrl: string;
-    fetchImpl?: typeof fetch;
-    timeoutMs?: number;
-};
-export declare function fetchRelayerSigningSessionSealCapabilities(args: FetchRelayerSigningSessionSealCapabilitiesArgs): Promise<RelayerSigningSessionSealCapabilities>;
 export declare function verifySealedRefreshStartupParity(args: VerifySealedRefreshStartupParityArgs): Promise<void>;
 export {};
 //# sourceMappingURL=sealedRefreshCapabilities.d.ts.map

package/dist/types/wallet/src/core/rpcClients/relayer/thresholdEcdsa.d.ts

@@ -1,67 +1,10 @@
-import type { WebAuthnAuthenticationCredential } from '../../types/webauthn';
 import type { WalletSessionOperationCredentialV1 } from '../../../../../shared-ts/src/device-linking';
 import { type RootShareEpoch } from '../../../../../shared-ts/src/utils/domainIds';
-import { type RouterAbEcdsaExplicitExportForwardedResponseV1, type RouterAbEcdsaDerivationExplicitExportRequestV1, type RouterAbEcdsaDerivationNormalSigningStateV1, type RouterAbEcdsaDerivationActivationRefreshCommitRequestV1, type RouterAbEcdsaDerivationActivationRefreshResponseV1, type RouterAbEcdsaPostRegistrationSessionActivationRequestV1, type RouterAbEcdsaPostRegistrationSessionActivationResponseV1 } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
-import type { ThresholdRuntimePolicyScope } from '../../signingEngine/threshold/sessionPolicy';
+import { type RouterAbEcdsaDerivationNormalSigningStateV1, type RouterAbEcdsaPostRegistrationSessionActivationRequestV1, type RouterAbEcdsaPostRegistrationSessionActivationResponseV1 } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
 import { type WalletId } from '../../signingEngine/interfaces/ecdsaChainTarget';
 import type { EcdsaThresholdKeyId } from '../../signingEngine/session/identity/emailOtpEcdsaDerivationIdentity';
-import type { EcdsaClientRootPublicKey33B64u, DerivationClientSharePublicKey33B64u, EcdsaDerivationRelayerPublicKey33B64u } from '../../../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap';
-export type EcdsaDerivationRoleLocalPublicIdentity = {
-    derivationClientSharePublicKey33B64u: DerivationClientSharePublicKey33B64u;
-    relayerPublicKey33B64u: EcdsaDerivationRelayerPublicKey33B64u;
-    groupPublicKey33B64u: string;
-    ethereumAddress: string;
-};
-export type ThresholdEcdsaDerivationRoleLocalClientRootProof = {
-    version: 'ecdsa-derivation:role-local:first-bootstrap-root-proof:v2';
-    clientRootPublicKey33B64u: EcdsaClientRootPublicKey33B64u;
-    digest32B64u: string;
-    signature65B64u: string;
-};
-export type ThresholdEcdsaDerivationRoleLocalPasskeyBootstrapAuthorization = {
-    kind: 'passkey_bootstrap';
-    rpId: string;
-    webauthn_authentication: WebAuthnAuthenticationCredential;
-    runtimePolicyScope: ThresholdRuntimePolicyScope;
-    projectEnvironmentId?: never;
-    projectEnvironmentPublishableKey?: never;
-} | {
-    kind: 'passkey_bootstrap';
-    rpId: string;
-    webauthn_authentication: WebAuthnAuthenticationCredential;
-    projectEnvironmentId: string;
-    projectEnvironmentPublishableKey: string;
-    runtimePolicyScope?: never;
-};
-export type ThresholdEcdsaDerivationRoleLocalBootstrapRequest = {
-    formatVersion: 'ecdsa-derivation-role-local';
-    walletId: WalletId;
-    evmFamilySigningKeySlotId: string;
-    ecdsaThresholdKeyId: EcdsaThresholdKeyId;
-    signingRootId: string;
-    signingRootVersion: string;
-    keyScope: 'evm-family';
-    relayerKeyId: string;
-    derivationClientSharePublicKey33B64u: DerivationClientSharePublicKey33B64u;
-    clientShareRetryCounter: number;
-    contextBinding32B64u: string;
-    requestId: string;
-    sessionId: string;
-    ttlMs: number;
-    remainingUses: number;
-    participantIds: number[];
-    auth?: ThresholdEcdsaDerivationRouteAuth;
-    runtimePolicyScope?: ThresholdRuntimePolicyScope;
-} & ({
-    clientRootProof: ThresholdEcdsaDerivationRoleLocalClientRootProof;
-    passkeyBootstrapAuthorization?: never;
-} | {
-    clientRootProof?: never;
-    passkeyBootstrapAuthorization: ThresholdEcdsaDerivationRoleLocalPasskeyBootstrapAuthorization;
-} | {
-    clientRootProof?: never;
-    passkeyBootstrapAuthorization?: never;
-});
+import type { EcdsaDerivationRoleLocalPublicIdentity } from '../../../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap';
+export type { EcdsaDerivationRoleLocalPublicIdentity };
 export type ThresholdEcdsaDerivationRoleLocalBootstrapValue = {
     formatVersion: 'ecdsa-derivation-role-local';
     walletId: WalletId;
@@ -88,7 +31,7 @@ export type ThresholdEcdsaDerivationRoleLocalBootstrapValue = {
     remainingUses: number;
     routerAbEcdsaDerivationNormalSigning: RouterAbEcdsaDerivationNormalSigningStateV1;
 };
-export type ThresholdEcdsaDerivationRoleLocalRouteResult<T> = {
+type ThresholdEcdsaDerivationRoleLocalRouteResult<T> = {
     ok: true;
     value: T;
 } | {
@@ -102,19 +45,8 @@ export type ThresholdEcdsaDerivationRouteAuth = WalletSessionOperationCredential
     token: string;
 };
 export declare function parseThresholdEcdsaDerivationRoleLocalBootstrapValue(value: unknown): ThresholdEcdsaDerivationRoleLocalBootstrapValue;
-export declare function routerAbEcdsaExplicitExport(relayServerUrl: string, input: {
-    readonly request: RouterAbEcdsaDerivationExplicitExportRequestV1;
-    readonly requestDigestB64u: string;
-    readonly auth: ThresholdEcdsaDerivationRouteAuth;
-}): Promise<ThresholdEcdsaDerivationRoleLocalRouteResult<RouterAbEcdsaExplicitExportForwardedResponseV1>>;
-export declare function routerAbEcdsaActivationRefresh(relayServerUrl: string, input: {
-    readonly request: RouterAbEcdsaDerivationActivationRefreshCommitRequestV1;
-    readonly requestDigestB64u: string;
-    readonly auth: ThresholdEcdsaDerivationRouteAuth;
-}): Promise<ThresholdEcdsaDerivationRoleLocalRouteResult<RouterAbEcdsaDerivationActivationRefreshResponseV1>>;
 export declare function activateRouterAbEcdsaPostRegistrationSession(relayServerUrl: string, input: {
     readonly request: RouterAbEcdsaPostRegistrationSessionActivationRequestV1;
     readonly auth: ThresholdEcdsaDerivationRouteAuth;
 }): Promise<ThresholdEcdsaDerivationRoleLocalRouteResult<RouterAbEcdsaPostRegistrationSessionActivationResponseV1>>;
-export declare function thresholdEcdsaDerivationRoleLocalBootstrap(relayServerUrl: string, args: ThresholdEcdsaDerivationRoleLocalBootstrapRequest): Promise<ThresholdEcdsaDerivationRoleLocalRouteResult<ThresholdEcdsaDerivationRoleLocalBootstrapValue>>;
 //# sourceMappingURL=thresholdEcdsa.d.ts.map

package/dist/types/wallet/src/core/rpcClients/relayer/walletRecoveryFinalize.d.ts

@@ -3,7 +3,7 @@ import { type PasskeyCustodyEnvelopeRecord } from '../../../../../shared-ts/src/
 import { type WalletRecoveryEcdsaPossessionProofV1 } from '../../../../../shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession';
 import type { WalletRecoveryAttemptFailure } from './walletRecoveryPrepare';
 import type { ActiveRecoveredWalletAuthorityV1 } from '../../../../../shared-ts/src/authorization/walletAuthority';
-import type { WalletAuthMethodRecordV2 } from '../../../../../shared-ts/src/utils/registrationIntent';
+import type { ActivePasskeyWalletAuthMethodRecordV2 } from '../../../../../shared-ts/src/utils/walletAuthMethodRecord';
 export type WalletRecoveryEcdsaMaterialPossessionProofInputV1 = {
     readonly keySetId: `evm_family_ecdsa:${string}`;
     readonly proof: WalletRecoveryEcdsaPossessionProofV1;
@@ -12,10 +12,7 @@ export type WalletRecoveryFinalizeResult = {
     readonly kind: 'promoted';
     readonly storeVersion: string;
     readonly authority: ActiveRecoveredWalletAuthorityV1;
-    readonly authMethod: Extract<WalletAuthMethodRecordV2, {
-        readonly kind: 'passkey';
-        readonly status: 'active';
-    }>;
+    readonly authMethod: ActivePasskeyWalletAuthMethodRecordV2;
 } | WalletRecoveryAttemptFailure;
 export declare function finalizeWalletRecovery(args: {
     readonly relayUrl: string;