@seams/wallet 0.6.2 → 0.7.3

package/dist/types/wallet/src/core/rpcClients/relayer/walletRecoveryGoogleEmailOtp.d.ts

@@ -2,7 +2,7 @@ import { type PasskeyCustodyEnvelopeRecord } from '../../../../../shared-ts/src/
 import { type EmailOtpChallengeId, type WalletId, type WalletRecoveryOperationId } from '../../../../../shared-ts/src/utils/domainIds';
 import type { DeviceId } from '../../../../../shared-ts/src/authorization/capabilityKinds';
 import type { WalletAuthMethodId, WalletAuthorityId } from '../../../../../shared-ts/src/utils/domainIds';
-import type { WalletAuthMethodRecordV2 } from '../../../../../shared-ts/src/utils/registrationIntent';
+import type { ActiveEmailOtpWalletAuthMethodRecordV2 } from '../../../../../shared-ts/src/utils/walletAuthMethodRecord';
 import { type RecoveryCodeReservationId } from '../../../../../shared-ts/src/wallet-recovery/recoveryCodeReservation';
 import { type WalletRecoveryEcdsaPossessionProofV1 } from '../../../../../shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession';
 import type { EmailOtpChallengeDelivery } from '../../signingEngine/session/emailOtp/publicTypes';
@@ -14,7 +14,7 @@ type RecoveryOperationInput = {
     readonly reservationId: RecoveryCodeReservationId;
     readonly fetchImpl?: typeof fetch;
 };
-export type WalletRecoveryGoogleVerifyResult = {
+type WalletRecoveryGoogleVerifyResult = {
     readonly kind: 'verified';
     readonly recoveryOperationId: WalletRecoveryOperationId;
     readonly reservationId: RecoveryCodeReservationId;
@@ -22,7 +22,7 @@ export type WalletRecoveryGoogleVerifyResult = {
     readonly delivery: EmailOtpChallengeDelivery;
     readonly expiresAtMs: number;
 } | WalletRecoveryAttemptFailure;
-export type WalletRecoveryEmailOtpVerifyResult = {
+type WalletRecoveryEmailOtpVerifyResult = {
     readonly kind: 'verified';
     readonly recoveryOperationId: WalletRecoveryOperationId;
     readonly reservationId: RecoveryCodeReservationId;
@@ -38,10 +38,7 @@ export type WalletRecoveryGoogleEmailOtpFinalizeResult = {
     readonly kind: 'promoted';
     readonly storeVersion: string;
     readonly authority: ActiveRecoveredWalletAuthorityV1;
-    readonly authMethod: Extract<WalletAuthMethodRecordV2, {
-        readonly kind: 'email_otp';
-        readonly status: 'active';
-    }>;
+    readonly authMethod: ActiveEmailOtpWalletAuthMethodRecordV2;
 } | WalletRecoveryAttemptFailure;
 export declare function verifyWalletRecoveryGoogle(args: RecoveryOperationInput & {
     readonly idToken: string;

package/dist/types/wallet/src/core/rpcClients/relayer/walletRecoveryPrepare.d.ts

@@ -1,7 +1,7 @@
 import { type EnvelopeCiphertextB64u, type EnvelopeNonceB64u } from '../../../../../shared-ts/src/passkey-custody';
 import { type WalletRecoveryEnvelopeEntry } from '../../../../../shared-ts/src/wallet-recovery';
 import type { DigestB64u } from '../../../../../shared-ts/src/utils';
-import type { RouterAbEd25519YaoApplicationBindingFactsV1, RouterAbEd25519YaoBytes32V1, RouterAbEd25519YaoLifecycleScopeV1 } from '../../../../../shared-ts/src/utils/routerAbEd25519Yao';
+import type { WalletRecoveryPreparationNearRecoveryBasisV1 } from '../../../../../shared-ts/src/wallet-recovery/walletRecoveryPreparation';
 import { type RouterAbEcdsaRegistrationActivationReceiptV1, type RouterAbEcdsaDerivationPublicCapabilityV1 } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
 import { type WalletRecoveryEcdsaPossessionChallengeV1 } from '../../../../../shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession';
 import { type EcdsaServerGeneration } from '../../../../../shared-ts/src/utils/ecdsaCapabilityActivation';
@@ -18,7 +18,7 @@ export type WalletRecoveryPreparationKeyManifestEntry = {
     readonly signerId: string;
     readonly nearAccountId: string;
     readonly recordedKeyManifestDigestB64u: DigestB64u;
-    readonly recoveryBasis: WalletRecoveryPreparationNearRecoveryBasis;
+    readonly recoveryBasis: WalletRecoveryPreparationNearRecoveryBasisV1;
 } | {
     readonly kind: 'evm_family_ecdsa';
     readonly keySetId: `evm_family_ecdsa:${string}`;
@@ -27,19 +27,7 @@ export type WalletRecoveryPreparationKeyManifestEntry = {
     readonly recordedKeyManifestDigestB64u: DigestB64u;
     readonly recoveryBasis: WalletRecoveryPreparationEcdsaRecoveryBasis;
 };
-export type WalletRecoveryPreparationNearRecoveryBasis = {
-    readonly capabilityKind: 'registration' | 'recovery';
-    readonly activeCapabilityBinding: RouterAbEd25519YaoBytes32V1;
-    readonly scope: RouterAbEd25519YaoLifecycleScopeV1;
-    readonly applicationBinding: RouterAbEd25519YaoApplicationBindingFactsV1;
-    readonly participantIds: readonly [number, number];
-    readonly registeredPublicKey: RouterAbEd25519YaoBytes32V1;
-    readonly runtimePolicyScope: RuntimePolicyScope;
-    readonly activationTranscript: RouterAbEd25519YaoBytes32V1;
-    readonly activationStateEpoch: number;
-    readonly signingWorkerVerifyingShare: RouterAbEd25519YaoBytes32V1;
-};
-export type WalletRecoveryPreparationEcdsaRecoveryBasis = {
+type WalletRecoveryPreparationEcdsaRecoveryBasis = {
     readonly publicCapability: RouterAbEcdsaDerivationPublicCapabilityV1;
     readonly activationReceipt: RouterAbEcdsaRegistrationActivationReceiptV1;
     readonly serverGeneration: EcdsaServerGeneration;
@@ -82,7 +70,7 @@ export type WalletRecoveryPreparationKeyManifest = {
     readonly walletId: string;
     readonly entries: readonly WalletRecoveryPreparationKeyManifestEntry[];
 };
-export type WalletRecoveryRegistrationCredentialDescriptor = {
+type WalletRecoveryRegistrationCredentialDescriptor = {
     readonly type: 'public-key';
     readonly id: WebAuthnCredentialIdB64u;
 };
@@ -131,7 +119,7 @@ export type WalletRecoveryAttemptFailure = {
 } | {
     readonly kind: 'transport_uncertain';
 };
-export type WalletRecoveryPrepareResult = (WalletRecoveryPrepareResultCommon & {
+type WalletRecoveryPrepareResult = (WalletRecoveryPrepareResultCommon & {
     readonly target: Extract<WalletRecoveryTargetV1, {
         readonly kind: 'passkey';
     }>;

package/dist/types/wallet/src/core/rpcClients/relayer/walletRecoveryRotate.d.ts

@@ -1,4 +1,4 @@
-import { type WalletRecoverySetRotationWireV1, type WalletRecoveryEnvelopeSetRecord } from '../../../../../shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet';
+import { type WalletRecoverySetRotationWireV1 } from '../../../../../shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet';
 import type { WalletCustodyAdminOperation } from '../../../../../shared-ts/src/authorization/walletCustodyOperation';
 import type { WebAuthnAuthenticationCredential } from '../../types/webauthn';
 export type WalletCustodyFactorProof = {
@@ -80,23 +80,6 @@ export declare function acknowledgeWalletRecoveryBackup(args: {
     readonly walletId: string;
     readonly fetchImpl?: typeof fetch;
 }): Promise<WalletRecoveryBackupAcknowledgementResult>;
-export type WalletRecoverySetReadResult = {
-    readonly kind: 'ready';
-    readonly recoverySet: WalletRecoveryEnvelopeSetRecord;
-    readonly storeVersion: string;
-} | {
-    readonly kind: 'no_recovery_set';
-    readonly message: string;
-} | {
-    readonly kind: 'transport_failed';
-    readonly message: string;
-};
-export declare function readWalletRecoverySet(args: {
-    readonly relayUrl: string;
-    readonly walletId: string;
-    readonly factorProof: WalletCustodyFactorProof;
-    readonly fetchImpl?: typeof fetch;
-}): Promise<WalletRecoverySetReadResult>;
 export type WalletRecoverySetRotateResult = {
     readonly kind: 'rotated';
     readonly issuedAtMs: number;
@@ -114,7 +97,7 @@ export type WalletRecoverySetRotateResult = {
     readonly kind: 'transport_failed';
     readonly message: string;
 };
-export type WalletRecoveryCodeLocatorPayload = {
+type WalletRecoveryCodeLocatorPayload = {
     readonly locatorB64u: string;
     readonly recoveryKeyId: string;
 };
@@ -127,4 +110,5 @@ export declare function rotateWalletRecoverySet(args: {
     readonly recoveryCodeLocators: readonly WalletRecoveryCodeLocatorPayload[];
     readonly fetchImpl?: typeof fetch;
 }): Promise<WalletRecoverySetRotateResult>;
+export {};
 //# sourceMappingURL=walletRecoveryRotate.d.ts.map

package/dist/types/wallet/src/core/rpcClients/relayer/walletRegistration.d.ts

@@ -1,15 +1,17 @@
-import type { AddAuthMethodInput, AddAuthMethodIntentGrant, AddAuthMethodIntentCallerV1, AddAuthMethodIntentV1, WalletAddAuthMethodEmailOtpTargetV1, AddSignerIntentV1, AddSignerIntentGrant, EmailOtpRegistrationProof, RegistrationAuthMethodInput, RegisterWalletInput, RegistrationIntentGrant, RegistrationIntentV1, RegistrationNearAccountProvisioning, ResolvedRegistrationNearAccount, WalletAuthMethodRecordV2, WalletId, WebAuthnRpId } from '../../../../../shared-ts/src/utils/registrationIntent';
-import { type WalletAuthMethodRevocationProof } from '../../../../../shared-ts/src/utils/registrationIntent';
-import type { ActiveWalletAuthorityV1 } from '../../../../../shared-ts/src/authorization/walletAuthority';
+import type { AddAuthMethodIntentGrant, AddAuthMethodIntentCallerV1, AddAuthMethodIntentV1, AddSignerIntentV1, AddSignerIntentGrant, RegistrationIntentGrant, RegistrationIntentV1, WalletId, WebAuthnRpId } from '../../../../../shared-ts/src/utils/registrationIntent';
+import type { ActiveWalletAuthMethodRecordV2 } from '../../../../../shared-ts/src/utils/walletAuthMethodRecord';
+import type { RegistrationNearAccountProvisioning, ResolvedRegistrationNearAccount } from '../../../../../shared-ts/src/utils/registrationSignerPlan';
+import type { AddAuthMethodInput, WalletAddAuthMethodEmailOtpTargetV1, EmailOtpRegistrationProof, RegisterWalletInput } from '../../../../../shared-ts/src/utils/registrationAuthMethodInput';
+import { type WalletAuthMethodRevocationProof } from '../../../../../shared-ts/src/utils/walletAuthMethodRecord';
+import { type ActiveWalletAuthorityV1 } from '../../../../../shared-ts/src/authorization/walletAuthority';
 import { type PasskeyCustodyEnvelopeRecord, type WalletCustodyCeremonyCommitPayload, type WalletCustodyRegistrationOutcome } from '../../../../../shared-ts/src/passkey-custody';
 import { type CorrelationId } from '../../../../../shared-ts/src/utils/canonicalPrimitives';
 import type { RegistrationEstablishedSessionResultV2 } from '../../../../../shared-ts/src/utils/registrationEstablishedSession';
 import { type RootShareEpoch, type ThresholdEd25519SessionId, type WalletAuthMethodId } from '../../../../../shared-ts/src/utils/domainIds';
 import { type WebAuthnAuthenticatorDeviceInfo } from '../../../../../shared-ts/src/utils/webauthnDeviceInfo';
-import type { WalletSessionOperationCredentialV1 } from '../../../../../shared-ts/src/device-linking';
 import type { EcdsaKeyFactsInventoryWalletSessionCredential } from '../../types/sdkSentEvents';
-import type { MpcWalletSigningQuotaId, WalletSessionAuthorizationId, WalletSessionId } from '../../../../../shared-ts/src/authorization/capabilityKinds';
-import { type RouterAbEd25519YaoActivationAdmissionReceiptV1, type RouterAbEd25519YaoBytes32V1, type RouterAbEd25519YaoRegistrationAdmissionRequestV1 } from '../../../../../shared-ts/src/utils/routerAbEd25519Yao';
+import { type RouterAbEd25519YaoRegistrationAdmissionRequestV1 } from '../../../../../shared-ts/src/utils/routerAbEd25519Yao';
+import type { CreateRegistrationIntentRequest, WalletEd25519YaoSignerPublicResult, WalletRegistrationEd25519YaoActivationReference, WalletRegistrationEd25519YaoStart, WalletRegistrationFinalizeAuthMethod } from '../../../../../shared-ts/src/utils/registrationContracts';
 import { type WalletAuthAuthority } from '../../../../../shared-ts/src/utils/walletAuthAuthority';
 import { type RouterAbEd25519NormalSigningState } from '../../../../../shared-ts/src/utils/signingSessionSeal';
 import { type RouterAbEcdsaRegistrationRequestFactsV1, type RouterAbEcdsaRegistrationRequestV1, type RouterAbEcdsaRegistrationPublicActivationReceiptV1, type RouterAbEcdsaVerifiedClientActivationFactsV1, type RouterAbEcdsaStrictForwardedRegistrationResponseV1, type RouterAbEcdsaDerivationPublicCapabilityV1, type RouterAbEcdsaDerivationNormalSigningStateV1, type RouterAbPublicDigest32V1Wire } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
@@ -18,14 +20,8 @@ import { type ThresholdEcdsaKeyIdentityInventoryEntry } from '../../signingEngin
 import { type ThresholdEcdsaChainTarget } from '../../signingEngine/interfaces/ecdsaChainTarget';
 import { type Ed25519AuthorityScope, type ThresholdRuntimePolicyScope } from '../../signingEngine/threshold/sessionPolicy';
 import type { EcdsaDerivationRoleLocalPublicIdentity, ThresholdEcdsaDerivationRoleLocalBootstrapValue } from './thresholdEcdsa';
-import { type RegistrationSignerSetRequest } from './registrationSignerSetRequest';
 import { parseWalletRegistrationFinalizeResponse } from './walletRegistrationTerminalResponse';
 export { parseWalletRegistrationFinalizeResponse };
-export type CreateRegistrationIntentRequest = {
-    wallet: RegisterWalletInput;
-    authMethod: RegistrationAuthMethodInput;
-    signerSelection: RegistrationSignerSetRequest;
-};
 export type CreateRegistrationIntentResponse = {
     ok: true;
     intent: RegistrationIntentV1;
@@ -38,7 +34,7 @@ export type CancelRegistrationIntentResponse = {
     cancelled: boolean;
     releasedServerAllocatedWalletId: boolean;
 };
-export type FundImplicitNearAccountForTestingResponse = {
+type FundImplicitNearAccountForTestingResponse = {
     ok: true;
     walletId: string;
     nearAccountId: string;
@@ -50,7 +46,6 @@ export type FundImplicitNearAccountForTestingResponse = {
     code: string;
     message: string;
 };
-export declare function parseFundImplicitNearAccountForTestingResponse(value: unknown): FundImplicitNearAccountForTestingResponse;
 export declare function fundImplicitNearAccountForTesting(args: {
     relayerUrl: string;
     walletId: WalletId | string;
@@ -71,10 +66,6 @@ export type WalletRegistrationRouteDiagnostics = {
         durationMs: number;
     }[];
 };
-export type WalletRegistrationEd25519YaoStart = {
-    admissionRequest: RouterAbEd25519YaoRegistrationAdmissionRequestV1;
-    admissionReceipt: RouterAbEd25519YaoActivationAdmissionReceiptV1<'registration'>;
-};
 export type WalletRegistrationEcdsaPreparePayload = {
     kind: 'evm_family_ecdsa_keygen';
     chainTargets: readonly [ThresholdEcdsaChainTarget, ...ThresholdEcdsaChainTarget[]];
@@ -117,7 +108,7 @@ export type WalletRegistrationStartResponse = WalletRegistrationStartResponseBas
     ecdsa: WalletRegistrationEcdsaPreparePayload;
 });
 /**
- * Refactor 94C. The `/wallets/register/setup` response.
+ * The `/wallets/register/setup` response.
  *
  * `signedSetup` is opaque to the client: it is carried to routes 2 and 3 and
  * echoed verbatim, never parsed. `registrationIntentDigestB64u` is the
@@ -132,70 +123,19 @@ type WalletRegistrationSetupSuccessBase = {
     intent: RegistrationIntentV1;
     signedSetup: string;
 };
-export type WalletRegistrationSetupResponseV2 = (WalletRegistrationSetupSuccessBase & {
+export type WalletRegistrationSetupSuccessV2 = (WalletRegistrationSetupSuccessBase & {
     kind: 'evm_family_ecdsa' | 'near_ed25519_and_evm_family_ecdsa';
     ecdsa: WalletRegistrationSetupEcdsaPreparePayload;
 }) | (WalletRegistrationSetupSuccessBase & {
     kind: 'near_ed25519';
     ecdsa?: never;
-}) | {
+});
+export type WalletRegistrationSetupResponseV2 = WalletRegistrationSetupSuccessV2 | {
     ok: false;
     code: string;
     message: string;
     retryAfterMs?: number;
 };
-export type WalletRegistrationFinalizeAuthMethod = {
-    kind: 'passkey';
-    credentialIdB64u: string;
-    credentialPublicKeyB64u: string;
-} | {
-    kind: 'email_otp';
-    registrationAuthorityId: string;
-};
-export type WalletRegistrationEd25519YaoActivationReference = {
-    kind: 'router_ab_ed25519_yao_activation_reference_v1';
-    lifecycle_id: string;
-    session_id: RouterAbEd25519YaoBytes32V1;
-};
-export type WalletRegistrationEd25519YaoSignerRuntimeBootstrap = {
-    walletId: WalletId;
-    nearAccountId: string;
-    nearEd25519SigningKeyId: string;
-    authorityScope: Ed25519AuthorityScope;
-    thresholdSessionId: string;
-    authorizationId: WalletSessionAuthorizationId;
-    walletSessionId: WalletSessionId;
-    quotaId: MpcWalletSigningQuotaId;
-    expiresAtMs: number;
-    participantIds: readonly [number, number];
-    remainingUses: number;
-    signingRootId: string;
-    signingRootVersion: string;
-    runtimePolicyScope: ThresholdRuntimePolicyScope;
-    routerAbNormalSigning: RouterAbEd25519NormalSigningState;
-};
-/**
- * The response branch is retained alongside signer-runtime bootstrap facts.
- * A reused response carries no new credential; the caller's exact credential
- * remains the only admission proof for that existing session.
- */
-export type WalletRegistrationEd25519YaoBootstrapSession = (WalletRegistrationEd25519YaoSignerRuntimeBootstrap & {
-    sessionKind: 'issued_exact_wallet_session';
-    operationCredential: WalletSessionOperationCredentialV1;
-}) | (WalletRegistrationEd25519YaoSignerRuntimeBootstrap & {
-    sessionKind: 'already_committed_exact_wallet_session';
-    operationCredential?: never;
-});
-export type WalletEd25519YaoSignerPublicResult = {
-    signerSlot: number;
-    nearAccountId: string;
-    nearEd25519SigningKeyId: string;
-    publicKey: string;
-    relayerKeyId: string;
-    keyVersion: string;
-    recoveryExportCapable: true;
-    participantIds: readonly [number, number];
-};
 export type WalletRegistrationEd25519YaoPublicResult = WalletEd25519YaoSignerPublicResult & {
     thresholdSessionId: ThresholdEd25519SessionId;
     runtimePolicyScope: ThresholdRuntimePolicyScope;
@@ -206,9 +146,7 @@ type WalletRegistrationFinalizeResponseBase = {
     walletId: WalletId;
     authority: WalletAuthAuthority;
     foundingAuthority: ActiveWalletAuthorityV1;
-    foundingAuthMethod: Extract<WalletAuthMethodRecordV2, {
-        readonly status: 'active';
-    }>;
+    foundingAuthMethod: ActiveWalletAuthMethodRecordV2;
     registrationDiagnostics?: WalletRegistrationRouteDiagnostics;
     /**
      * What became of the custody run that rode this leg, when one did. Absent
@@ -234,7 +172,7 @@ type WalletRegistrationFinalizeManifest = {
      */
     custodyKeyManifestDigestB64u?: string;
 };
-export type WalletRegistrationFinalizeResponseAuthority = {
+type WalletRegistrationFinalizeResponseAuthority = {
     rpId: string;
     authMethod: Extract<WalletRegistrationFinalizeAuthMethod, {
         kind: 'passkey';
@@ -262,7 +200,7 @@ type WalletRegistrationFinalizeSignerResult = {
     resolvedAccount?: never;
     ed25519?: never;
 };
-export type EmailOtpWalletRegistrationFinalizeResponse = WalletRegistrationFinalizeResponseBase & WalletRegistrationFinalizeManifest & Extract<WalletRegistrationFinalizeResponseAuthority, {
+type EmailOtpWalletRegistrationFinalizeResponse = WalletRegistrationFinalizeResponseBase & WalletRegistrationFinalizeManifest & Extract<WalletRegistrationFinalizeResponseAuthority, {
     authMethod: {
         kind: 'email_otp';
     };
@@ -386,10 +324,6 @@ export type WalletAddAuthMethodFinalizeResponse = {
         status: 'active';
     };
 };
-export declare function parseWalletAddAuthMethodStartResponse(args: {
-    readonly value: unknown;
-    readonly expectedIntent: AddAuthMethodIntentV1;
-}): WalletAddAuthMethodStartResponse;
 type WalletAddSignerStartResponseBase = {
     ok: true;
     addSignerCeremonyId: string;
@@ -411,7 +345,7 @@ export type WalletAddSignerStartResponse = (WalletAddSignerStartResponseBase & {
     };
     ed25519?: never;
 });
-export type WalletAddSignerEcdsaRespondResponse = {
+type WalletAddSignerEcdsaRespondResponse = {
     ok: true;
     addSignerCeremonyId: string;
     ecdsa: {
@@ -443,16 +377,14 @@ export type WalletAddSignerFinalizeResponse = {
     ecdsa: {
         walletKeys: WalletRegistrationEcdsaWalletKey[];
     };
+    /** The authorizing authority, extended with the added ECDSA signer. */
+    authority: ActiveWalletAuthorityV1;
     ed25519?: never;
 });
 export declare function parseWalletAddSignerStartResponse(args: {
     value: unknown;
     expectedIntent: AddSignerIntentV1;
 }): WalletAddSignerStartResponse;
-export declare function parseWalletAddSignerFinalizeResponse(args: {
-    value: unknown;
-    expectedKind: FinalizeWalletAddSignerArgs['kind'];
-}): WalletAddSignerFinalizeResponse;
 export type WalletRegistrationEcdsaPrepareContext = {
     formatVersion: 'ecdsa-derivation-role-local';
     walletId: string;
@@ -497,11 +429,6 @@ export type WalletRegistrationEcdsaWalletKey = {
     participantIds: readonly [number, number];
     publicCapability: RouterAbEcdsaDerivationPublicCapabilityV1;
 };
-export type WalletRegistrationEcdsaCompletedBootstrap = {
-    bootstrap: ThresholdEcdsaDerivationRoleLocalBootstrapValue;
-    publicIdentity: EcdsaDerivationRoleLocalPublicIdentity;
-    relayerShareRetryCounter: number;
-};
 type WalletRegistrationStartAuthority = {
     kind: 'passkey';
     webauthnRegistration: unknown;
@@ -545,8 +472,8 @@ export type WalletEcdsaKeyFactsInventoryResponse = {
     diagnostics: unknown;
 };
 /**
- * Refactor 94C. `POST /wallets/register/setup` — the single admitted entry
- * point replacing the grant, intent, and start calls below.
+ * `POST /wallets/register/setup` — the single admitted entry point replacing
+ * the grant, intent, and start calls below.
  *
  * It is called *before* the WebAuthn create prompt, because its response
  * carries the challenge that create must sign. The server-side preparation
@@ -581,7 +508,7 @@ export declare function createWalletAddSignerIntent(args: {
         environmentId: string;
     };
 }): Promise<CreateAddSignerIntentResponse>;
-export type RevokeWalletAuthMethodResponse = {
+type RevokeWalletAuthMethodResponse = {
     readonly ok: true;
     readonly walletId: WalletId;
     readonly authMethod: {
@@ -599,7 +526,7 @@ export type RevokeWalletAuthMethodResponse = {
     readonly rpId?: never;
 };
 /**
- * R109C: revoke one auth method using a proof from a different active one.
+ * Revoke one auth method using a proof from a different active one.
  *
  * The route is the wallet's own auth-method management, not device linking:
  * a sibling on the same device is not a device, and the linked-device
@@ -623,10 +550,9 @@ export declare function createWalletAddAuthMethodIntent(args: {
     };
 }): Promise<CreateAddAuthMethodIntentResponse>;
 /**
- * Refactor 94C route 2. Authenticated respond: the proof the client just
- * collected against setup's challenge travels with the ECDSA registration
- * request, so one round trip both establishes the verified authority and runs
- * the Router leg.
+ * Route 2. Authenticated respond: the proof the client just collected against
+ * setup's challenge travels with the ECDSA registration request, so one round
+ * trip both establishes the verified authority and runs the Router leg.
  *
  * The result is a discriminated signer plan, not a bundle with an optional
  * Ed25519 member. A mixed plan always carries deferred NEAR work; an
@@ -690,9 +616,9 @@ type RespondWalletRegistrationArgs = (RespondWalletRegistrationArgsBase & {
 export declare function respondWalletRegistration(args: RespondWalletRegistrationArgs): Promise<WalletRegistrationRespondResponseV2>;
 export declare function authorizeWalletRegistrationNearAdmission(args: RespondWalletRegistrationArgsBase): Promise<WalletRegistrationNearAdmissionResponseV2>;
 /**
- * Refactor 94C route 3. Activate absorbs finalize: one call carries the
- * browser-verified activation facts and the Email OTP enrollment material that
- * used to ride a separate finalize request, and returns the terminal wallet.
+ * Route 3. Activate absorbs finalize: one call carries the browser-verified
+ * activation facts and the Email OTP enrollment material that used to ride a
+ * separate finalize request, and returns the terminal wallet.
  *
  * `nearProvisioning` is a snapshot only. It never carries NEAR identifiers
  * before readiness — those appear once deferred provisioning reaches
@@ -777,8 +703,8 @@ type ActivateWalletRegistrationArgs = (ActivateWalletRegistrationArgsBase & {
 });
 export declare function activateWalletRegistration(args: ActivateWalletRegistrationArgs): Promise<WalletRegistrationActivateResponseV2>;
 /**
- * Refactor 94C route 4. The deferred NEAR completion, called once the Yao
- * computation the client started after respond has finished.
+ * Route 4. The deferred NEAR completion, called once the Yao computation the
+ * client started after respond has finished.
  *
  * One completion path serves both plans: an Ed25519-only wallet installs its
  * sole signer here, and a mixed wallet's NEAR arm lands here too. It carries
@@ -819,7 +745,7 @@ export type WalletRegistrationNearProvisioningResponseV2 = (Extract<WalletRegist
         status: 'near_failed_retryable';
     };
 };
-export type WalletRegistrationSessionSealResponse = {
+type WalletRegistrationSessionSealResponse = {
     readonly ciphertext: string;
     readonly keyVersion: string;
     readonly expiresAtMs: number;

package/dist/types/wallet/src/core/rpcClients/relayer/walletRegistrationTerminalResponse.d.ts

@@ -9,7 +9,8 @@ import { type WalletId } from '../../../../../shared-ts/src/utils/registrationIn
 import { type WebAuthnRpId } from '../../../../../shared-ts/src/utils/domainIds';
 import { type WalletAuthAuthority } from '../../../../../shared-ts/src/utils/walletAuthAuthority';
 import { type ThresholdEcdsaChainTarget } from '../../signingEngine/interfaces/ecdsaChainTarget';
-import type { FinalizeWalletRegistrationArgs, WalletEd25519YaoSignerPublicResult, WalletRegistrationEcdsaWalletKey, WalletRegistrationFinalizeAuthMethod, WalletRegistrationFinalizeResponse, WalletRegistrationRouteDiagnostics } from './walletRegistration';
+import type { FinalizeWalletRegistrationArgs, WalletRegistrationEcdsaWalletKey, WalletRegistrationFinalizeResponse, WalletRegistrationRouteDiagnostics } from './walletRegistration';
+import type { WalletEd25519YaoSignerPublicResult, WalletRegistrationFinalizeAuthMethod } from '../../../../../shared-ts/src/utils/registrationContracts';
 export declare function requireResponseString(args: {
     responseName: string;
     field: string;
@@ -20,7 +21,6 @@ export declare function requireResponseRecord(args: {
     field: string;
     value: unknown;
 }): Record<string, unknown>;
-export declare function assertExactResponseKeys(record: Record<string, unknown>, allowedKeys: readonly string[], responseName: string): void;
 export declare function requireResponseSafeInteger(args: {
     responseName: string;
     field: string;

package/dist/types/wallet/src/core/rpcClients/relayer/walletSessionAuthorizationStatus.d.ts

@@ -1,6 +1,5 @@
 import { type MpcWalletSigningQuotaId, type WalletSessionId } from '../../../../../shared-ts/src/authorization/capabilityKinds';
 import type { ActiveWalletSessionV1, WalletSessionOperationCredentialV1 } from '../../../../../shared-ts/src/device-linking/contracts';
-export declare const EXACT_WALLET_SESSION_STATUS_PATH: "/wallet/session/status";
 type ExactWalletSessionStatusIdentity = {
     readonly walletSessionId: WalletSessionId;
     readonly quotaId: MpcWalletSigningQuotaId;
@@ -46,10 +45,10 @@ export type ExactWalletSessionStatus = (ActiveWalletSessionQuotaStatusV1 & Obser
     readonly quotaLifecycle?: never;
     readonly authorization?: never;
 });
-export interface ExactWalletSessionStatusPort {
+interface ExactWalletSessionStatusPort {
     read(input: ExactWalletSessionStatusIdentity): Promise<ExactWalletSessionStatus>;
 }
-export type RelayerExactWalletSessionStatusPortOptions = {
+type RelayerExactWalletSessionStatusPortOptions = {
     readonly relayerUrl: string;
     readonly operationCredential: WalletSessionOperationCredentialV1;
     readonly fetchImpl?: typeof fetch;
@@ -60,13 +59,6 @@ export declare class WalletSessionStatusReadScope {
     read(options: RelayerExactWalletSessionStatusPortOptions, identity: ExactWalletSessionStatusIdentity): Promise<ExactWalletSessionStatus>;
 }
 export declare function parseExactWalletSessionStatusResponse(value: unknown, expected: ExactWalletSessionStatusIdentity): ExactWalletSessionStatus | null;
-export declare class RelayerExactWalletSessionStatusPort implements ExactWalletSessionStatusPort {
-    private readonly relayerUrl;
-    private readonly operationCredential;
-    private readonly fetchImpl;
-    constructor(options: RelayerExactWalletSessionStatusPortOptions);
-    read(input: ExactWalletSessionStatusIdentity): Promise<ExactWalletSessionStatus>;
-}
 export declare function createRelayerExactWalletSessionStatusPort(options: RelayerExactWalletSessionStatusPortOptions): ExactWalletSessionStatusPort;
 export {};
 //# sourceMappingURL=walletSessionAuthorizationStatus.d.ts.map

package/dist/types/wallet/src/core/runtime/runtime.types.d.ts

@@ -35,16 +35,16 @@ export type SigningRuntimeWarmSessionUiPorts = {
 export type SigningRuntimeUiDeps = {
     warmSessions: SigningRuntimeWarmSessionUiPorts;
 };
-export type SigningRuntimeWorkerPorts = {
+type SigningRuntimeWorkerPorts = {
     emailOtp: WorkerOperationContext;
 };
-export type SigningRuntimeNearSigningDeps = {
+type SigningRuntimeNearSigningDeps = {
     getDeps: () => NearSigningApiDeps;
 };
-export type SigningRuntimeEvmFamilySigningDeps = {
+type SigningRuntimeEvmFamilySigningDeps = {
     getDeps: () => TempoSigningDeps;
 };
-export type SigningRuntimeSignEvmFamilyArgs = {
+type SigningRuntimeSignEvmFamilyArgs = {
     walletSession: WalletSessionRef;
     request: TempoSigningRequest | EvmSigningRequest;
     chainTarget: ThresholdEcdsaChainTarget;
@@ -52,10 +52,10 @@ export type SigningRuntimeSignEvmFamilyArgs = {
     shouldAbort?: () => boolean;
     onEvent?: (event: SigningFlowEvent) => void;
 };
-export type SigningRuntimeNearSigningService = {
+type SigningRuntimeNearSigningService = {
     signNear<TRequest extends NearSignIntentRequest>(request: TRequest): Promise<NearSignIntentResult<TRequest>>;
 };
-export type SigningRuntimeEvmFamilySigningService = {
+type SigningRuntimeEvmFamilySigningService = {
     signEvmFamily(args: SigningRuntimeSignEvmFamilyArgs): Promise<TempoSignedResult | EvmSignedResult>;
     reportTempoBroadcastAccepted(args: ReportTempoBroadcastAcceptedArgs): Promise<void>;
     reportTempoBroadcastRejected(args: ReportTempoBroadcastRejectedArgs): Promise<void>;
@@ -88,4 +88,5 @@ export type SigningRuntimeDeps = {
 export type SigningRuntime = SigningRuntimeDeps & {
     services: SigningRuntimeServices;
 };
+export {};
 //# sourceMappingURL=runtime.types.d.ts.map

package/dist/types/wallet/src/core/signingEngine/assembly/createManagers.d.ts

@@ -11,7 +11,7 @@ import type { NonceLaneCoordinationStore } from '../nonce/NonceCoordinator';
 import type { DurableRecordStore } from '../../platform';
 import type { ThresholdEcdsaSigningQueueByKey } from '../threshold/ecdsa/signingQueue';
 import type { ActiveEcdsaCapabilityRuntimeResolver } from '../session/material/activeEcdsaCapabilityRuntime';
-export type ManagerAssembly = {
+type ManagerAssembly = {
     touchIdPrompt: TouchIdPrompt;
     userPreferencesManager: UserPreferencesManager;
     nonceCoordinator: NonceCoordinator;
@@ -38,4 +38,5 @@ export declare function createManagerAssembly(args: {
     getAppearance: () => AppearanceConfig;
     thresholdEcdsaSigningQueueByKey: ThresholdEcdsaSigningQueueByKey;
 }): ManagerAssembly;
+export {};
 //# sourceMappingURL=createManagers.d.ts.map

package/dist/types/wallet/src/core/signingEngine/assembly/ports/warmSigning.d.ts

@@ -14,7 +14,7 @@ import type { DurableRecordStore } from '../../../platform';
 import type { ExactEcdsaWalletSessionAuthorizationResolver } from '../../session/material/ecdsaSigningCapability';
 import type { ExactNearEd25519WalletSessionAuthorization } from '../../session/material/nearEd25519YaoSigningPreparation';
 import type { EmailOtpWarmMaterialTarget } from '../../workerManager/workerTypes';
-export type EcdsaExportArtifactStorePorts = {
+type EcdsaExportArtifactStorePorts = {
     exportArtifactsByLane: Map<string, ThresholdEcdsaCanonicalExportArtifact>;
 };
 type WarmSigningEd25519AuthorizationResolver = (walletId: import('../../interfaces/ecdsaChainTarget').WalletId) => Promise<ExactNearEd25519WalletSessionAuthorization | null>;

package/dist/types/wallet/src/core/signingEngine/assembly/warmup.d.ts

@@ -9,7 +9,7 @@ import type { NearAccountBinding } from '../../../../../shared-ts/src/utils/wall
 export type WorkerResourceWarmupStorePort = ProfileAccountContextPort & AccountKeyMaterialStorePort & {
     getLastProfileState: () => Promise<LastProfileState | null>;
 };
-export type WorkerResourceWarmupPredicate = (workerBaseOrigin: string) => boolean;
+type WorkerResourceWarmupPredicate = (workerBaseOrigin: string) => boolean;
 export type WorkerResourceWarmupPolicy = {
     kind: 'local_worker_warmup_disabled';
     shouldPrewarmWorkers: WorkerResourceWarmupPredicate;
@@ -51,4 +51,5 @@ export type WorkerResourceWarmupAccountContext = {
 };
 export declare function prewarmSignerWorkers(deps: WorkerResourceWarmupDeps): void;
 export declare function warmCriticalResources(deps: WorkerResourceWarmupDeps, accountContext?: WorkerResourceWarmupAccountContext): Promise<WorkerResourceWarmupDiagnostics>;
+export {};
 //# sourceMappingURL=warmup.d.ts.map

package/dist/types/wallet/src/core/signingEngine/chains/evm/bytes.d.ts

@@ -1,5 +1,3 @@
-export declare function concatBytes(parts: Uint8Array[]): Uint8Array;
 export declare function hexToBytes(hex: string): Uint8Array;
 export declare function bytesToHex(bytes: Uint8Array): string;
-export declare function bigintToBytesBE(v: bigint): Uint8Array;
 //# sourceMappingURL=bytes.d.ts.map

package/dist/types/wallet/src/core/signingEngine/chains/evm/display/evmTx.d.ts

@@ -1,6 +1,6 @@
 import type { EvmSigningRequest } from '../evmSigning.types';
 import type { TxDisplayModel } from '../../../interfaces/display';
-export type BuildEvmDisplayModelArgs = {
+type BuildEvmDisplayModelArgs = {
     request: EvmSigningRequest;
     intentDigest?: string;
     signerAccount?: string;
@@ -8,4 +8,5 @@ export type BuildEvmDisplayModelArgs = {
     subtitle?: string;
 };
 export declare function buildEvmDisplayModel(args: BuildEvmDisplayModelArgs): TxDisplayModel;
+export {};
 //# sourceMappingURL=evmTx.d.ts.map

package/dist/types/wallet/src/core/signingEngine/chains/evm/display/functionSelectors.d.ts

@@ -1,4 +1,3 @@
 export declare function selectorFromHexData(data: string | undefined): string | undefined;
-export declare function resolveFunctionSignature(selector: string | undefined, contractAddress?: string): string | undefined;
 export declare function resolveFunctionDisplayName(selector: string | undefined, contractAddress?: string): string | undefined;
 //# sourceMappingURL=functionSelectors.d.ts.map

package/dist/types/wallet/src/core/signingEngine/chains/evm/evmAdapter.d.ts

@@ -9,7 +9,7 @@ export type EvmSignedResult = {
     rawTxHex: string;
     managedNonce?: ManagedNonceReservationSnapshot;
 };
-export type EvmIntentUiModel = {
+type EvmIntentUiModel = {
     kind: 'eip1559';
     tx: Eip1559UnsignedTx;
 };
@@ -19,4 +19,5 @@ export declare class EvmAdapter implements ChainAdapter<EvmSigningRequest, EvmIn
     constructor(workerCtx: WorkerOperationContext);
     buildIntent(request: EvmSigningRequest): Promise<SigningIntent<EvmIntentUiModel, EvmSignedResult>>;
 }
+export {};
 //# sourceMappingURL=evmAdapter.d.ts.map

package/dist/types/wallet/src/core/signingEngine/chains/evm/evmCryptoWasm.d.ts

@@ -6,21 +6,12 @@ export declare function encodeEip1559SignedTxFromSignature65Wasm(args: {
     signature65: Uint8Array;
     workerCtx: WorkerOperationContext;
 }): Promise<Uint8Array>;
-export declare function signSecp256k1RecoverableWasm(args: {
-    digest32: Uint8Array;
-    privateKey32: Uint8Array;
-    workerCtx: WorkerOperationContext;
-}): Promise<Uint8Array>;
 export declare function verifySecp256k1RecoverableSignatureAgainstPublicKey33Wasm(args: {
     digest32: Uint8Array;
     signature65: Uint8Array;
     publicKey33: Uint8Array;
     workerCtx: WorkerOperationContext;
 }): Promise<Uint8Array>;
-export declare function secp256k1PrivateKey32ToPublicKey33Wasm(args: {
-    privateKey32: Uint8Array;
-    workerCtx: WorkerOperationContext;
-}): Promise<Uint8Array>;
 export declare function validateSecp256k1PublicKey33Wasm(args: {
     publicKey33: Uint8Array;
     workerCtx: WorkerOperationContext;