@seams/wallet 0.6.2 → 0.7.3

package/dist/types/wallet/src/core/signingEngine/session/identity/clientSessionPersistenceState.d.ts

@@ -3,14 +3,14 @@ import type { WalletId } from '../../interfaces/ecdsaChainTarget';
 import { type ExactEcdsaSigningLaneIdentity, type ExactEd25519SigningLaneIdentity, type ExactSigningLaneIdentity } from './exactSigningLaneIdentity';
 import type { MpcWalletSigningQuotaId, WalletSessionId } from '../../../../../../shared-ts/src/authorization/capabilityKinds';
 import type { ExactEvmFamilyWalletSessionAuthorization } from '../material/ecdsaSigningCapability';
-export type WalletSessionAuthorizationUnavailableReason = 'network' | 'server_unavailable' | 'persistence_unavailable';
-export type WalletSessionAuthorizationInvalidReason = 'malformed' | 'signature_invalid' | 'scope_mismatch' | 'authority_mismatch';
+type WalletSessionAuthorizationUnavailableReason = 'network' | 'server_unavailable' | 'persistence_unavailable';
+type WalletSessionAuthorizationInvalidReason = 'malformed' | 'signature_invalid' | 'scope_mismatch' | 'authority_mismatch';
 type CommonWalletSessionAuthorizationIdentity = {
     readonly walletId: WalletId;
     readonly authMethod: SignerAuthMethod;
     readonly laneIdentity: ExactSigningLaneIdentity;
 };
-export type WalletSessionAuthorizationIdentity = CommonWalletSessionAuthorizationIdentity & {
+type WalletSessionAuthorizationIdentity = CommonWalletSessionAuthorizationIdentity & {
     readonly walletSessionId: WalletSessionId;
     readonly quotaId: MpcWalletSigningQuotaId;
 };
@@ -48,14 +48,14 @@ export type ExpiredWalletSessionAuthorizationState = WalletSessionAuthorizationB
     readonly kind: 'expired';
     readonly detectedAtMs: number;
 };
-export type MissingWalletSessionAuthorizationState = WalletSessionAuthorizationIdentity & {
+type MissingWalletSessionAuthorizationState = WalletSessionAuthorizationIdentity & {
     readonly kind: 'missing';
 };
-export type UnavailableWalletSessionAuthorizationState = WalletSessionAuthorizationIdentity & {
+type UnavailableWalletSessionAuthorizationState = WalletSessionAuthorizationIdentity & {
     readonly kind: 'unavailable';
     readonly reason: WalletSessionAuthorizationUnavailableReason;
 };
-export type InvalidWalletSessionAuthorizationState = WalletSessionAuthorizationIdentity & {
+type InvalidWalletSessionAuthorizationState = WalletSessionAuthorizationIdentity & {
     readonly kind: 'invalid';
     readonly reason: WalletSessionAuthorizationInvalidReason;
 };
@@ -69,6 +69,5 @@ export declare function parseWalletSessionAuthorizationBoundary(args: {
     readonly observation: WalletSessionAuthorizationObservation;
     readonly nowMs: number;
 }): WalletSessionAuthorizationState;
-export declare function requireActiveWalletSessionAuthorization(state: ActiveWalletSessionAuthorizationState): ActiveWalletSessionAuthorizationState;
 export {};
 //# sourceMappingURL=clientSessionPersistenceState.d.ts.map

package/dist/types/wallet/src/core/signingEngine/session/identity/emailOtpEcdsaDerivationIdentity.d.ts

@@ -4,11 +4,8 @@ export type { EcdsaThresholdKeyId, EmailOtpAuthSubjectId, SigningRootId, Signing
 export type WalletSessionUserId = string & {
     readonly __brand: 'WalletSessionUserId';
 };
-export declare function toWalletSessionUserId(value: unknown): WalletSessionUserId;
 export declare function toEmailOtpAuthSubjectId(value: unknown): EmailOtpAuthSubjectId;
 export declare function toEcdsaDerivationThresholdKeyId(value: unknown): EcdsaThresholdKeyId;
 export declare function toEcdsaDerivationSigningRootId(value: unknown): SigningRootId;
 export declare function toEcdsaDerivationSigningRootVersion(value: unknown): SigningRootVersion;
-export declare function toEcdsaDerivationThresholdSessionId(value: unknown): ThresholdEcdsaSessionId;
-export declare function toEcdsaDerivationThresholdOwnerAddress(value: unknown): ThresholdOwnerAddress;
 //# sourceMappingURL=emailOtpEcdsaDerivationIdentity.d.ts.map

package/dist/types/wallet/src/core/signingEngine/session/identity/evmFamilyEcdsaIdentity.d.ts

@@ -10,6 +10,7 @@ import { type ThresholdEcdsaChainTarget, type WalletId } from '../../interfaces/
 import { type ThresholdEcdsaSessionId } from '../operationState/types';
 import { type EcdsaRoleLocalPersistedMaterialRef, type EcdsaRoleLocalWorkerHandle } from '../keyMaterialBrands';
 import type { ThresholdRuntimePolicyScope } from '../../threshold/sessionPolicy';
+import type { ExclusiveUnion } from '../../../../../../shared-ts/src/utils/variant';
 export type { EcdsaThresholdKeyId, EmailOtpAuthSubjectId, RpId, SigningRootId, SigningRootVersion, WalletId, ThresholdEcdsaSessionId, EvmFamilySigningKeySlotId, };
 export type ParticipantId = number & {
     readonly __brand: 'ParticipantId';
@@ -23,13 +24,13 @@ export type ThresholdEcdsaPublicKeyB64u = string & {
 export type EvmFamilyEcdsaKeyHandle = string & {
     readonly __brand: 'EvmFamilyEcdsaKeyHandle';
 };
-export type EmailOtpProviderId = string & {
+type EmailOtpProviderId = string & {
     readonly __brand: 'EmailOtpProviderId';
 };
 export type BaseEcdsaSubjectId = WalletId & {
     readonly __baseEcdsaSubjectIdBrand: 'BaseEcdsaSubjectId';
 };
-export type EvmFamilyKeyScope = 'evm-family';
+type EvmFamilyKeyScope = 'evm-family';
 export type EvmFamilyKeyFingerprint = string & {
     readonly __brand: 'EvmFamilyKeyFingerprint';
 };
@@ -101,17 +102,7 @@ export type EmailOtpEcdsaAuthBinding = {
     participantIds?: never;
     thresholdOwnerAddress?: never;
 };
-export type EvmFamilyEcdsaAuthBinding = PasskeyEcdsaAuthBinding | EmailOtpEcdsaAuthBinding;
-export type EcdsaWalletSignerRecord = {
-    kind: 'ecdsa_wallet_signer_record';
-    walletKey: EvmFamilyEcdsaWalletKey;
-    authBinding: EvmFamilyEcdsaAuthBinding;
-    keyHandle?: never;
-    keyFacts?: never;
-    chainTarget?: never;
-    subjectId?: never;
-    ecdsaThresholdKeyId?: never;
-};
+type EvmFamilyEcdsaAuthBinding = PasskeyEcdsaAuthBinding | EmailOtpEcdsaAuthBinding;
 export type ResolvedEvmFamilyEcdsaKey<TAuthBinding extends EvmFamilyEcdsaAuthBinding = EvmFamilyEcdsaAuthBinding> = {
     kind: 'resolved_evm_family_ecdsa_key';
     walletId: WalletId;
@@ -124,35 +115,32 @@ export type ResolvedEvmFamilyEcdsaKey<TAuthBinding extends EvmFamilyEcdsaAuthBin
     subjectId?: never;
     rpId?: never;
 };
-export type ThresholdEcdsaRoleLocalWorkerMaterial = {
+type ThresholdEcdsaRoleLocalWorkerMaterial = ExclusiveUnion<{
     kind: 'worker_loaded';
     materialRef: EcdsaRoleLocalPersistedMaterialRef;
-    stateBlob?: never;
-    ecdsaRoleLocalReadyRecord?: never;
 } | {
     kind: 'ready_state_blob';
     stateBlob: EcdsaRoleLocalReadyStateBlob;
     ecdsaRoleLocalReadyRecord: EcdsaRoleLocalReadyRecord;
-    materialRef?: never;
-};
+}>;
 export type ThresholdEcdsaRoleLocalWorkerShare = {
     kind: 'role_local_worker_share';
     handle: EcdsaRoleLocalWorkerHandle;
     material: ThresholdEcdsaRoleLocalWorkerMaterial;
 };
-export type ThresholdEcdsaLinkedHolderWorkerShare = {
+type ThresholdEcdsaLinkedHolderWorkerShare = {
     readonly kind: 'linked_holder_worker_share';
     readonly holderHandleId: string;
 };
-export type ThresholdEcdsaSignerClientShare = ThresholdEcdsaRoleLocalWorkerShare | ThresholdEcdsaLinkedHolderWorkerShare;
-export type HydratedEcdsaSignerTransport = {
+type ThresholdEcdsaSignerClientShare = ThresholdEcdsaRoleLocalWorkerShare | ThresholdEcdsaLinkedHolderWorkerShare;
+type HydratedEcdsaSignerTransport = {
     readonly kind: 'threshold_ecdsa_signer_transport';
     readonly relayerUrl: string;
     readonly relayerKeyId: string;
     readonly signingMaterial: RouterAbEcdsaDerivationSigningMaterialRef;
     readonly relayerVerifyingShareB64u: string;
 };
-export type HydratedRouterAbEcdsaDerivationNormalSigning = {
+type HydratedRouterAbEcdsaDerivationNormalSigning = {
     readonly kind: 'router_ab_ecdsa_derivation_normal_signing_hydrated_v1';
     readonly state: RouterAbEcdsaDerivationNormalSigningStateV1;
     readonly activeStateId: EcdsaActiveStateId;
@@ -197,7 +185,7 @@ export type EvmFamilyEcdsaSessionLanePolicy = {
 };
 export type EvmFamilyEcdsaRecoveredMaterialLanePolicy = EvmFamilyEcdsaSessionLanePolicy;
 export type EvmFamilyEcdsaActivationLanePolicy = EvmFamilyEcdsaSessionLanePolicy | EvmFamilyEcdsaRecoveredMaterialLanePolicy;
-export type BuildEvmFamilyEcdsaKeyIdentityInput = {
+type BuildEvmFamilyEcdsaKeyIdentityInput = {
     walletId: unknown;
     ecdsaThresholdKeyId: unknown;
     signingRootId: unknown;
@@ -205,31 +193,31 @@ export type BuildEvmFamilyEcdsaKeyIdentityInput = {
     participantIds: unknown;
     thresholdOwnerAddress: unknown;
 };
-export type BuildVerifiedEcdsaPublicFactsInput = {
+type BuildVerifiedEcdsaPublicFactsInput = {
     keyHandle: EvmFamilyEcdsaKeyHandle;
     publicKeyB64u: unknown;
     participantIds: unknown;
     thresholdOwnerAddress: unknown;
 };
-export type BuildEvmFamilyEcdsaWalletKeyInput = BuildEvmFamilyEcdsaKeyIdentityInput & {
+type BuildEvmFamilyEcdsaWalletKeyInput = BuildEvmFamilyEcdsaKeyIdentityInput & {
     keyHandle: unknown;
     chainTarget: ThresholdEcdsaChainTarget;
     thresholdEcdsaPublicKeyB64u: unknown;
 };
-export type BuildEvmFamilyKeyFingerprintFromPublicFactsInput = {
+type BuildEvmFamilyKeyFingerprintFromPublicFactsInput = {
     walletId: unknown;
     publicFacts: VerifiedEcdsaPublicFacts;
 };
-export type BuildEmailOtpEcdsaAuthBindingInput = {
+type BuildEmailOtpEcdsaAuthBindingInput = {
     authSubjectId: unknown;
     providerId: unknown;
 };
-export type BuildResolvedEvmFamilyEcdsaKeyInput<TAuthBinding extends EvmFamilyEcdsaAuthBinding = EvmFamilyEcdsaAuthBinding> = {
+type BuildResolvedEvmFamilyEcdsaKeyInput<TAuthBinding extends EvmFamilyEcdsaAuthBinding = EvmFamilyEcdsaAuthBinding> = {
     walletId: unknown;
     publicFacts: VerifiedEcdsaPublicFacts;
     authBinding: TAuthBinding;
 };
-export type BuildHydratedEcdsaSignerMaterialInput = {
+type BuildHydratedEcdsaSignerMaterialInput = {
     readonly walletId: WalletId;
     readonly materialActivation: MpcMaterialActivationRef;
     readonly publicFacts: VerifiedEcdsaPublicFacts;
@@ -240,23 +228,19 @@ export type BuildHydratedEcdsaSignerMaterialInput = {
     readonly authorization?: never;
     readonly credential?: never;
 };
-export type BuildEvmFamilyEcdsaSessionLanePolicyInput = {
+type BuildEvmFamilyEcdsaSessionLanePolicyInput = {
     chainTarget: ThresholdEcdsaChainTarget;
     thresholdSessionId: unknown;
     ttlMs: unknown;
     remainingUses: unknown;
     runtimePolicyScope: ThresholdRuntimePolicyScope;
 };
-export type BuildEvmFamilyEcdsaRecoveredMaterialLanePolicyInput = BuildEvmFamilyEcdsaSessionLanePolicyInput;
+type BuildEvmFamilyEcdsaRecoveredMaterialLanePolicyInput = BuildEvmFamilyEcdsaSessionLanePolicyInput;
 export declare function deriveEvmFamilySigningKeySlotId(input: {
     walletId: unknown;
     signingRootId: unknown;
     signingRootVersion: unknown;
 }): EvmFamilySigningKeySlotId;
-export declare function deriveEvmFamilySigningKeySlotIdFromRuntimePolicyScope(input: {
-    walletId: unknown;
-    runtimePolicyScope: Parameters<typeof signingRootScopeFromRuntimePolicyScope>[0];
-}): EvmFamilySigningKeySlotId;
 export declare function toThresholdOwnerAddress(value: unknown): ThresholdOwnerAddress;
 export declare function toRpId(value: unknown): RpId;
 export declare function toEmailOtpAuthSubjectId(value: unknown): EmailOtpAuthSubjectId;

package/dist/types/wallet/src/core/signingEngine/session/identity/exactSigningLaneIdentity.d.ts

@@ -5,14 +5,13 @@ import { type ThresholdEcdsaChainTarget } from '../../interfaces/ecdsaChainTarge
 import type { EvmFamilyEcdsaKeyHandle, EvmFamilyEcdsaKeyIdentity, WalletId } from './evmFamilyEcdsaIdentity';
 import type { SelectedEcdsaLane, SelectedEd25519Lane, SelectedLane } from './laneIdentity';
 import type { SigningLaneAuthBinding } from './signingLaneAuthBinding';
-import type { NearEd25519SigningKeyId } from '../../../../../../shared-ts/src/utils/registrationIntent';
-import { type ThresholdEd25519SessionId, type ThresholdSessionId } from '../operationState/types';
+import type { NearEd25519SigningKeyId } from '../../../../../../shared-ts/src/utils/registrationIds';
+import { type ThresholdEd25519SessionId } from '../operationState/types';
 import type { MpcWalletSigningQuotaId, WalletSessionId } from '../../../../../../shared-ts/src/authorization/capabilityKinds';
-export type ExactSigningLaneIdentityKey = string & {
+type ExactSigningLaneIdentityKey = string & {
     readonly __brand: 'ExactSigningLaneIdentityKey';
 };
-export type NonEmptyThresholdSessionIds = readonly [ThresholdSessionId, ...ThresholdSessionId[]];
-export type EvmFamilyEcdsaSignerBinding = {
+type EvmFamilyEcdsaSignerBinding = {
     readonly kind: 'evm_family_ecdsa_signer';
     readonly walletId: WalletId;
     readonly chainTarget: ThresholdEcdsaChainTarget;
@@ -54,23 +53,23 @@ type ExactEd25519SigningLaneIdentityCarrier = {
 type ExactEcdsaSigningLaneIdentityCarrier = {
     readonly identity: ExactEcdsaSigningLaneIdentity;
 };
-export type ExactEd25519SigningLaneIdentityInput<A extends SigningLaneAuthBinding = SigningLaneAuthBinding> = {
+type ExactEd25519SigningLaneIdentityInput<A extends SigningLaneAuthBinding = SigningLaneAuthBinding> = {
     signer: NearEd25519SignerBinding;
     auth: A;
     walletSessionId: unknown;
     quotaId: unknown;
     thresholdSessionId: unknown;
 };
-export type ExactEd25519ExportMaterialIdentityInput<A extends SigningLaneAuthBinding = SigningLaneAuthBinding> = {
+type ExactEd25519ExportMaterialIdentityInput<A extends SigningLaneAuthBinding = SigningLaneAuthBinding> = {
     signer: NearEd25519SignerBinding;
     auth: A;
     thresholdSessionId: unknown;
 };
-export type ExactEcdsaSigningLaneIdentityInput = {
+type ExactEcdsaSigningLaneIdentityInput = {
     signer: EvmFamilyEcdsaSignerBinding;
     auth: SigningLaneAuthBinding;
 };
-export type NearEd25519SignerBoundaryFields = {
+type NearEd25519SignerBoundaryFields = {
     walletId: WalletId;
     nearAccountId: NearAccountId | string;
     nearEd25519SigningKeyId: NearEd25519SigningKeyId;
@@ -83,13 +82,10 @@ type EvmFamilyEcdsaSignerBindingInput = {
     key: EvmFamilyEcdsaKeyIdentity;
     materialActivation: MpcMaterialActivationRef;
 };
-export type ExactSigningLaneIdentityInput = ExactEd25519SigningLaneIdentityInput | ExactEcdsaSigningLaneIdentityInput;
+type ExactSigningLaneIdentityInput = ExactEd25519SigningLaneIdentityInput | ExactEcdsaSigningLaneIdentityInput;
 export declare function nearEd25519SignerBindingFromBoundaryFields(input: NearEd25519SignerBoundaryFields): NearEd25519SignerBinding;
 export declare function buildEvmFamilyEcdsaSignerBinding(args: EvmFamilyEcdsaSignerBindingInput): EvmFamilyEcdsaSignerBinding;
 export declare function exactSigningLaneIdentityKey(identity: ExactSigningLaneIdentity): ExactSigningLaneIdentityKey;
-export declare function deferredEd25519MaterialIdentityKey(input: {
-    materialActivation: MpcMaterialActivationRef;
-}): ExactSigningLaneIdentityKey;
 export declare function exactEd25519SigningLaneIdentity<A extends SigningLaneAuthBinding>(lane: ExactEd25519SigningLaneIdentityInput<A>): ExactEd25519SigningLaneIdentity<A>;
 export declare function exactEd25519ExportMaterialIdentity<A extends SigningLaneAuthBinding>(lane: ExactEd25519ExportMaterialIdentityInput<A>): ExactEd25519ExportMaterialIdentity<A>;
 export declare function exactEcdsaSigningLaneIdentity(lane: ExactEcdsaSigningLaneIdentityInput): ExactEcdsaSigningLaneIdentity;
@@ -97,32 +93,19 @@ export declare function exactSigningLaneIdentity(lane: ExactSigningLaneIdentityI
 export declare function exactSigningLaneIdentityFromSelectedLane(lane: SelectedLane | ExactSigningLaneIdentityCarrier): ExactSigningLaneIdentity;
 export declare function exactEd25519SigningLaneIdentityFromSelectedLane(lane: SelectedEd25519Lane | ExactEd25519SigningLaneIdentityCarrier): ExactEd25519SigningLaneIdentity;
 export declare function exactEcdsaSigningLaneIdentityFromSelectedLane(lane: SelectedEcdsaLane | ExactEcdsaSigningLaneIdentityCarrier): ExactEcdsaSigningLaneIdentity;
-export declare function parseExactEd25519SigningLaneIdentity(value: unknown): ExactEd25519SigningLaneIdentity;
 export declare function parseExactEd25519ExportMaterialIdentity(value: unknown): ExactEd25519ExportMaterialIdentity;
 export declare function parseExactEcdsaSigningLaneIdentity(value: unknown): ExactEcdsaSigningLaneIdentity;
-export declare function parseExactSigningLaneIdentity(value: unknown): ExactSigningLaneIdentity;
 export declare function isExactEd25519SigningLaneIdentity(identity: ExactSigningLaneIdentity): identity is ExactEd25519SigningLaneIdentity;
 export declare function isExactEcdsaSigningLaneIdentity(identity: ExactSigningLaneIdentity): identity is ExactEcdsaSigningLaneIdentity;
 export declare function exactSigningLaneWalletId(identity: ExactSigningLaneIdentity): WalletId;
-export type ExactSigningLaneCurve = 'ed25519' | 'ecdsa';
-export declare function exactSigningLaneCurve(identity: ExactSigningLaneIdentity): ExactSigningLaneCurve;
 export declare function requireEvmFamilyEcdsaSigner(identity: ExactSigningLaneIdentity, context: string): EvmFamilyEcdsaSignerBinding;
-export declare function requireNearEd25519Signer(identity: ExactSigningLaneIdentity, context: string): NearEd25519SignerBinding;
-export type NearProtocolProjection = {
+type NearProtocolProjection = {
     walletId: WalletId;
     nearAccountId: NearEd25519SignerBinding['account']['nearAccountId'];
     nearEd25519SigningKeyId: NearEd25519SigningKeyId;
     signerSlot: number;
 };
 export declare function nearProtocolProjectionFromExactLane(identity: ExactSigningLaneIdentity, context?: string): NearProtocolProjection;
-export type EvmFamilyProtocolProjection = {
-    walletId: WalletId;
-    chainTarget: ThresholdEcdsaChainTarget;
-    keyHandle: EvmFamilyEcdsaKeyHandle;
-    key: EvmFamilyEcdsaKeyIdentity;
-};
-export declare function evmFamilyProtocolProjectionFromExactLane(identity: ExactSigningLaneIdentity, context?: string): EvmFamilyProtocolProjection;
-export declare function thresholdSessionIdsFromExactSigningLaneIdentity(identity: ExactSigningLaneIdentity): NonEmptyThresholdSessionIds;
 export declare function exactSigningLaneIdentityMatches(left: ExactSigningLaneIdentity, right: ExactSigningLaneIdentity): boolean;
 export {};
 //# sourceMappingURL=exactSigningLaneIdentity.d.ts.map

package/dist/types/wallet/src/core/signingEngine/session/identity/exactWalletSessionCredential.d.ts

@@ -1,5 +1,5 @@
 /**
- * R103F: the one exact Wallet Session credential a signing-session operation is
+ * The one exact Wallet Session credential a signing-session operation is
  * allowed to act on.
  *
  * The wallet-wide active projection cannot answer this question. It selects a
@@ -23,16 +23,17 @@ import { type MpcMaterialActivationRef } from '../../../../../../shared-ts/src/u
 import type { SignerAuthMethod } from '../../../../../../shared-ts/src/utils/signerDomain';
 import type { WalletId } from '../../interfaces/ecdsaChainTarget';
 import { type ExactSigningLaneIdentity } from './exactSigningLaneIdentity';
-import type { ActiveWalletAuthMethodV2 } from './ownerLaneScope';
+import type { ActiveWalletAuthMethodRecordV2 } from '../../../../../../shared-ts/src/utils/walletAuthMethodRecord';
+import type { ReadonlyExclusiveUnion } from '../../../../../../shared-ts/src/utils/variant';
 /** The signer material one operation needs the exact session to authorize. */
-export type RequiredExactWalletSessionSigningSubject = {
+type RequiredExactWalletSessionSigningSubject = {
     readonly keyFamily: 'ed25519';
     readonly materialActivation?: never;
 } | {
     readonly keyFamily: 'ecdsa_secp256k1';
     readonly materialActivation: MpcMaterialActivationRef;
 };
-export type ExactWalletSessionExpiryRequirement = {
+type ExactWalletSessionExpiryRequirement = {
     readonly kind: 'unexpired';
     readonly nowMs: number;
 } | {
@@ -40,25 +41,23 @@ export type ExactWalletSessionExpiryRequirement = {
     readonly nowMs: number;
 };
 export type ExactWalletSessionCredentialUnavailableReason = 'selected_authority_missing' | 'selected_authority_invalid' | 'wallet_locked' | 'auth_method_inactive' | 'auth_method_mismatch' | 'authority_inactive' | 'authority_identity_mismatch' | 'signer_material_missing' | 'signer_material_mismatch' | 'wallet_session_missing' | 'wallet_session_upgrade_required' | 'wallet_session_identity_mismatch' | 'wallet_session_expired' | 'wallet_session_not_expired' | 'wallet_session_capability_mismatch' | 'persistence_unavailable';
-export type ResolvedExactWalletSessionCredential = {
+type ResolvedExactWalletSessionCredential = {
     readonly walletId: WalletId;
     readonly authority: ActiveWalletAuthorityV1;
-    readonly authMethod: ActiveWalletAuthMethodV2;
+    readonly authMethod: ActiveWalletAuthMethodRecordV2;
     readonly session: ActiveWalletSessionV1;
     readonly operationCredential: WalletSessionOperationCredentialV1;
     readonly walletSessionId: WalletSessionId;
     readonly materialActivation: MpcMaterialActivationRef;
 };
-export type ExactWalletSessionCredentialResolution = {
+type ExactWalletSessionCredentialResolution = ReadonlyExclusiveUnion<{
     readonly kind: 'resolved';
     readonly resolved: ResolvedExactWalletSessionCredential;
-    readonly reason?: never;
 } | {
     readonly kind: 'unavailable';
     readonly reason: ExactWalletSessionCredentialUnavailableReason;
-    readonly resolved?: never;
-};
-export type ResolveExactWalletSessionCredentialInput = {
+}>;
+type ResolveExactWalletSessionCredentialInput = {
     readonly walletId: WalletId;
     readonly authMethod: SignerAuthMethod;
     readonly walletSessionId: WalletSessionId;
@@ -76,4 +75,5 @@ export declare function resolveExactWalletSessionOperationCredential(args: {
     readonly input: ResolveExactWalletSessionCredentialInput;
     readonly ports: ExactWalletSessionReadPorts;
 }): Promise<ExactWalletSessionCredentialResolution>;
+export {};
 //# sourceMappingURL=exactWalletSessionCredential.d.ts.map

package/dist/types/wallet/src/core/signingEngine/session/identity/exactWalletSessionReader.d.ts

@@ -3,7 +3,8 @@ import { type WalletSessionAuthorizationExactOperationCredentialReadResult } fro
 import type { WalletAuthMethodId } from '../../../../../../shared-ts/src/utils/domainIds';
 import type { WalletId } from '../../interfaces/ecdsaChainTarget';
 import type { ExactWalletSessionReadPorts } from './exactWalletSessionCredential';
-export type ExactWalletSessionAuthenticationReadResult = {
+import type { ReadonlyExclusiveUnion } from '../../../../../../shared-ts/src/utils/variant';
+export type ExactWalletSessionAuthenticationReadResult = ReadonlyExclusiveUnion<{
     readonly kind: 'authenticated';
     readonly state: Extract<WalletAuthenticationState, {
         readonly kind: 'authenticated';
@@ -13,13 +14,9 @@ export type ExactWalletSessionAuthenticationReadResult = {
     readonly walletAuthMethodId: WalletAuthMethodId;
 } | {
     readonly kind: 'missing';
-    readonly state?: never;
-    readonly walletAuthMethodId?: never;
 } | {
     readonly kind: 'upgrade_required';
-    readonly state?: never;
-    readonly walletAuthMethodId?: never;
-};
+}>;
 export declare function readExactWalletSessionAuthentication(args: {
     readonly walletId: WalletId;
     readonly ports: ExactWalletSessionReadPorts;

package/dist/types/wallet/src/core/signingEngine/session/identity/laneIdentity.d.ts

@@ -13,7 +13,8 @@ import type { MpcMaterialActivationRef } from '../../../../../../shared-ts/src/u
 import type { ExactEvmFamilyWalletSessionAuthorization } from '../material/ecdsaSigningCapability';
 import type { ActiveWalletAuthorityEcdsaRuntimeV1 } from '../material/activeWalletAuthorityEcdsaRuntime';
 import type { ExactNearEd25519WalletSessionAuthorization } from '../material/nearEd25519YaoSigningPreparation';
-import type { NearEd25519SigningKeyId } from '../../../../../../shared-ts/src/utils/registrationIntent';
+import type { NearEd25519SigningKeyId } from '../../../../../../shared-ts/src/utils/registrationIds';
+import type { ExclusiveUnion } from '../../../../../../shared-ts/src/utils/variant';
 export type { SigningCurve };
 export type { EcdsaThresholdKeyId };
 export type SigningRootId = string & {
@@ -23,8 +24,6 @@ export type SigningRootVersion = string & {
     readonly __brand?: 'SigningRootVersion';
 };
 export type ThresholdEcdsaSessionStoreSource = 'login' | 'registration' | 'manual-bootstrap' | 'email_otp';
-export declare const THRESHOLD_ECDSA_PASSKEY_SESSION_STORE_SOURCES: readonly ["login", "registration", "manual-bootstrap"];
-export declare const THRESHOLD_ECDSA_SESSION_STORE_SOURCES: readonly ["email_otp", "login", "registration", "manual-bootstrap"];
 export type ThresholdEd25519SessionStoreSource = 'login' | 'registration' | 'add-signer' | 'manual-connect' | 'bootstrap' | 'email_otp' | 'sealed_restore';
 export type ThresholdEcdsaEmailOtpAuthContext = {
     policy: EmailOtpAuthPolicy;
@@ -51,7 +50,7 @@ export type ThresholdEcdsaEmailOtpPendingSingleUseAuthContext = ThresholdEcdsaEm
         kind: 'single_use_pending';
     }>;
 };
-export type ThresholdEcdsaEmailOtpConsumedSingleUseAuthContext = ThresholdEcdsaEmailOtpAuthContext & {
+type ThresholdEcdsaEmailOtpConsumedSingleUseAuthContext = ThresholdEcdsaEmailOtpAuthContext & {
     use: Extract<EmailOtpAuthUse, {
         kind: 'single_use_consumed';
     }>;
@@ -59,12 +58,10 @@ export type ThresholdEcdsaEmailOtpConsumedSingleUseAuthContext = ThresholdEcdsaE
 export declare function emailOtpAuthContextProviderUserId(context: ThresholdEcdsaEmailOtpAuthContext): string;
 export declare function emailOtpAuthContextProvider(context: ThresholdEcdsaEmailOtpAuthContext): EmailOtpProvider;
 export declare function emailOtpAuthContextEmailHashHex(context: ThresholdEcdsaEmailOtpAuthContext): string;
-export declare function emailOtpAuthContextReason(context: ThresholdEcdsaEmailOtpAuthContext): 'login' | 'sign';
 export declare function emailOtpAuthContextRetention(context: ThresholdEcdsaEmailOtpAuthContext): 'session' | 'single_use';
 export declare function emailOtpAuthContextConsumedAtMs(context: ThresholdEcdsaEmailOtpAuthContext): number | null;
 export declare function isEmailOtpSessionAuthContext(context: ThresholdEcdsaEmailOtpAuthContext): context is ThresholdEcdsaEmailOtpSessionAuthContext;
 export declare function isEmailOtpPendingSingleUseAuthContext(context: ThresholdEcdsaEmailOtpAuthContext): context is ThresholdEcdsaEmailOtpPendingSingleUseAuthContext;
-export declare function isEmailOtpConsumedSingleUseAuthContext(context: ThresholdEcdsaEmailOtpAuthContext): context is ThresholdEcdsaEmailOtpConsumedSingleUseAuthContext;
 type BuildEmailOtpSessionAuthContextArgs = {
     policy: EmailOtpAuthPolicy;
     reason: 'login' | 'sign';
@@ -93,27 +90,23 @@ type BuildEmailOtpAuthContextForWalletAuthMethodArgs = {
     emailHashHex: unknown;
     provider: EmailOtpProvider;
     providerUserId: unknown;
-} & ({
+} & ExclusiveUnion<{
     retention: 'session';
     reason: 'login' | 'sign';
-    consumedAtMs?: never;
 } | {
     retention: 'single_use';
-    reason?: never;
     consumedAtMs?: number;
-});
+}>;
 type BuildEmailOtpAuthContextFromExactAuthorityArgs = {
     policy: EmailOtpAuthPolicy;
     authority: EmailOtpWalletAuthAuthority;
-} & ({
+} & ExclusiveUnion<{
     retention: 'session';
     reason: 'login' | 'sign';
-    consumedAtMs?: never;
 } | {
     retention: 'single_use';
-    reason?: never;
     consumedAtMs?: number;
-});
+}>;
 export declare function buildEmailOtpAuthContext(args: BuildEmailOtpSessionAuthContextArgs): ThresholdEcdsaEmailOtpSessionAuthContext;
 export declare function buildEmailOtpAuthContext(args: BuildEmailOtpPendingSingleUseAuthContextArgs): ThresholdEcdsaEmailOtpPendingSingleUseAuthContext;
 export declare function buildEmailOtpAuthContext(args: BuildEmailOtpConsumedSingleUseAuthContextArgs): ThresholdEcdsaEmailOtpConsumedSingleUseAuthContext;
@@ -177,7 +170,7 @@ type CommonSelectedLane = {
     auth: SigningLaneAuthBinding;
     curve: SigningCurve;
 };
-export type BaseSelectedLane = CommonSelectedLane & {
+type BaseSelectedLane = CommonSelectedLane & {
     walletSessionId: WalletSessionId;
     quotaId: MpcWalletSigningQuotaId;
     thresholdSessionId: ThresholdSessionId;
@@ -197,7 +190,7 @@ export type SelectedEcdsaLane = CommonSelectedLane & {
     authorization: ExactEvmFamilyWalletSessionAuthorization;
 };
 export type SelectedLane = SelectedEd25519Lane | SelectedEcdsaLane;
-export type SelectedEd25519LaneInput = {
+type SelectedEd25519LaneInput = {
     walletId: WalletId;
     nearAccountId: AccountId;
     nearEd25519SigningKeyId: NearEd25519SigningKeyId;
@@ -219,9 +212,9 @@ export type SelectedEcdsaLaneInput = {
 export declare function selectedEd25519Lane(input: SelectedEd25519LaneInput): SelectedEd25519Lane;
 export declare function selectedEcdsaLane(input: SelectedEcdsaLaneInput): SelectedEcdsaLane;
 export type LaneCandidateState = 'ready' | 'restorable' | 'deferred' | 'expired' | 'exhausted';
-/** Shared Refactor 92 classification of a session's runtime allowance and
- * expiry. Expiry is checked before exhaustion so an expired session is never
- * reported as merely out of uses. */
+/** Shared classification of a session's runtime allowance and expiry. Expiry
+ * is checked before exhaustion so an expired session is never reported as
+ * merely out of uses. */
 export declare function laneCandidateStateFromRuntimePolicy(args: {
     remainingUses: number;
     expiresAtMs: number;
@@ -235,7 +228,7 @@ type CommonLaneCandidate = {
     state: LaneCandidateState;
     source: LaneCandidateSource;
 };
-export type BaseLaneCandidate = CommonLaneCandidate & {
+type BaseLaneCandidate = CommonLaneCandidate & {
     thresholdSessionId: string;
     remainingUses: number | null;
     expiresAtMs: number | null;

package/dist/types/wallet/src/core/signingEngine/session/identity/ownerLaneScope.d.ts

@@ -1,5 +1,5 @@
 import { type EmailOtpWalletAuthAuthority, type WalletAuthAuthorityRef, type WalletAuthAuthority } from '../../../../../../shared-ts/src/utils/walletAuthAuthority';
-import type { WalletAuthMethodRecordV2 } from '../../../../../../shared-ts/src/utils/registrationIntent';
+import type { ActiveEmailOtpWalletAuthMethodRecordV2, ActivePasskeyWalletAuthMethodRecordV2, ActiveWalletAuthMethodRecordV2, WalletAuthMethodRecordV2 } from '../../../../../../shared-ts/src/utils/walletAuthMethodRecord';
 import { type SignerSlot } from '../../../../../../shared-ts/src/utils/signerSlot';
 import type { LocalWalletAuthMethodRecord } from '../../../indexedDB/passkeyClientDB.types';
 import type { OwnerLaneScope } from './signingLaneAuthBinding';
@@ -22,9 +22,6 @@ export type OwnerLaneScopeStores = {
      */
     readEmailOtpProviderSubjectForWallet?(walletId: string): Promise<string | null>;
 };
-export type ActiveWalletAuthMethodV2 = Extract<WalletAuthMethodRecordV2, {
-    readonly status: 'active';
-}>;
 export declare class OwnerLaneScopeIntegrityError extends Error {
     constructor(message: string);
 }
@@ -36,20 +33,18 @@ export declare class OwnerLaneScopeIntegrityError extends Error {
  * boundaries and the UI can surface "link this device again" instead of a
  * generic integrity failure.
  */
-export declare class OwnerRelinkRequiredError extends Error {
+declare class OwnerRelinkRequiredError extends Error {
     readonly code: "relink_required";
     readonly reason: "missing_canonical_owner_binding";
     constructor(walletAuthMethodId: string);
 }
 export declare function isOwnerRelinkRequiredError(error: unknown): error is OwnerRelinkRequiredError;
 export declare function resolveExactWalletAuthAuthority(args: {
-    readonly authMethod: ActiveWalletAuthMethodV2;
+    readonly authMethod: ActiveWalletAuthMethodRecordV2;
     readonly stores: OwnerLaneScopeStores;
 }): Promise<WalletAuthAuthority>;
 export declare function buildExactPasskeyOwnerLaneScope(args: {
-    readonly authMethod: Extract<ActiveWalletAuthMethodV2, {
-        readonly kind: 'passkey';
-    }>;
+    readonly authMethod: ActivePasskeyWalletAuthMethodRecordV2;
     readonly signerSlot: SignerSlot;
 }): Extract<OwnerLaneScope, {
     readonly auth: {
@@ -57,16 +52,12 @@ export declare function buildExactPasskeyOwnerLaneScope(args: {
     };
 }>;
 export declare function buildExactEcdsaPasskeyOwnerLaneScope(args: {
-    readonly authMethod: Extract<ActiveWalletAuthMethodV2, {
-        readonly kind: 'passkey';
-    }>;
+    readonly authMethod: ActivePasskeyWalletAuthMethodRecordV2;
 }): Extract<OwnerLaneScope, {
     readonly keyFamily: 'ecdsa';
 }>;
 export declare function buildExactLinkedEmailOtpOwnerLaneScope(args: {
-    readonly authMethod: Extract<ActiveWalletAuthMethodV2, {
-        readonly kind: 'email_otp';
-    }>;
+    readonly authMethod: ActiveEmailOtpWalletAuthMethodRecordV2;
     readonly factorAuthority: EmailOtpWalletAuthAuthority;
     readonly authorityRef: WalletAuthAuthorityRef;
 }): Extract<OwnerLaneScope, {
@@ -75,11 +66,11 @@ export declare function buildExactLinkedEmailOtpOwnerLaneScope(args: {
     };
 }>;
 export declare function resolveExactOwnerLaneScope(args: {
-    readonly authMethod: ActiveWalletAuthMethodV2;
+    readonly authMethod: ActiveWalletAuthMethodRecordV2;
     readonly stores: OwnerLaneScopeStores;
 }): Promise<OwnerLaneScope>;
 /**
- * R103C owner derivation chain: active Wallet Session authority -> one active
+ * Owner derivation chain: active Wallet Session authority -> one active
  * wallet auth method -> exact credential -> exact local authenticator and
  * signer slot (Passkey only). Every value comes from the previous link, and
  * the resolved method must reproduce the authority digest the active session
@@ -90,4 +81,5 @@ export declare function resolveOwnerLaneScope(args: {
     readonly authorityRef: WalletAuthAuthorityRef;
     readonly stores: OwnerLaneScopeStores;
 }): Promise<OwnerLaneScope>;
+export {};
 //# sourceMappingURL=ownerLaneScope.d.ts.map