@seams/wallet 0.6.2 → 0.7.3

package/dist/types/wallet/src/core/signingEngine/workerManager/workerTypes.d.ts

@@ -19,7 +19,7 @@ import type { RouterAbEd25519YaoActiveClientMetadataV1, RouterAbEd25519YaoClient
 import { ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1, type RouterAbEd25519YaoApplicationBindingFactsV1, type RouterAbEd25519YaoCeremonyBindingV1, type RouterAbEd25519YaoActivationAdmissionReceiptV1, type RouterAbEd25519YaoBytes32V1, type RouterAbEd25519YaoRegistrationAdmissionRequestV1 } from '../../../../../shared-ts/src/utils/routerAbEd25519Yao';
 import type { Ed25519YaoLaneClientCompletionV1, Ed25519YaoLaneJobV1 } from '../../../../../shared-ts/src/signing-lanes/rotation';
 import type { ExactWalletSessionAuthorization } from '../session/persistence/walletSessionAuthorizationProjection';
-import type { WalletRegistrationEd25519YaoSignerRuntimeBootstrap } from '../../rpcClients/relayer/walletRegistration';
+import type { WalletRegistrationEd25519YaoSignerRuntimeBootstrap } from '../../../../../shared-ts/src/utils/registrationContracts';
 import type { WebAuthnRegistrationCredential } from '../../types/webauthn';
 import type { WalletRecoverySetRotationWorkerResultV1 } from '../../../../../shared-ts/src/wallet-recovery/walletRecoveryRotation';
 import type { RouterAbEcdsaCredentialFreeSessionActivationResponseV1, RouterAbEcdsaPostRegistrationSessionActivationPolicyV1, RouterAbEcdsaPostRegistrationSessionActivationResponseV1, RouterAbEcdsaDerivationPublicCapabilityV1, RouterAbEcdsaRegistrationActivationReceiptV1 } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
@@ -239,9 +239,7 @@ export type EmailOtpWalletUnlockMaterialResult = ({
 export declare const WorkerControlMessage: {
     readonly WORKER_READY: "WORKER_READY";
 };
-export type WorkerControlMessageType = (typeof WorkerControlMessage)[keyof typeof WorkerControlMessage];
-export type ThresholdEcdsaPresignStage = 'triples' | 'triples_done' | 'presign' | 'done';
-export type ThresholdEcdsaPresignEvent = 'none' | 'triples_done' | 'final_batch_ready' | 'presign_done';
+type ThresholdEcdsaPresignStage = 'triples' | 'triples_done' | 'presign' | 'done';
 export type ThresholdEcdsaPresignProgressResult<Bytes = ArrayBuffer> = {
     outgoingMessages: Bytes[];
 } & ({
@@ -273,7 +271,7 @@ export type RpcSignerWorkerProgressEvent = {
     message: string;
     data?: Record<string, unknown>;
 };
-export interface EvmCryptoWorkerOperationMap {
+interface EvmCryptoWorkerOperationMap {
     computeEip1559TxHash: {
         payload: {
             tx: unknown;
@@ -339,7 +337,7 @@ export interface EvmCryptoWorkerOperationMap {
         result: ArrayBuffer;
     };
 }
-export interface TempoSignerWorkerOperationMap {
+interface TempoSignerWorkerOperationMap {
     computeTempoSenderHash: {
         payload: {
             tx: unknown;
@@ -387,7 +385,6 @@ export type EmailOtpWalletRegistrationEcdsaPrepareHandlePayload = {
     keyScope: 'evm-family';
     chainTarget: ThresholdEcdsaChainTarget;
 };
-export type EmailOtpWorkerIssuedSessionHandlePayload = EmailOtpEcdsaSessionBootstrapHandlePayload | EmailOtpWalletRegistrationEcdsaPrepareHandlePayload;
 type EmailOtpEcdsaSessionBootstrapHandleBindingBase = {
     authSubjectId: string;
     action?: 'threshold_ecdsa_bootstrap';
@@ -409,11 +406,11 @@ export type EmailOtpWalletRegistrationEcdsaPrepareHandleBinding = {
     keyScope: 'evm-family';
     chainTarget: ThresholdEcdsaChainTarget;
 };
-export type EmailOtpWalletRegistrationEcdsaPrepareHandleBindings = readonly [
+type EmailOtpWalletRegistrationEcdsaPrepareHandleBindings = readonly [
     EmailOtpWalletRegistrationEcdsaPrepareHandleBinding,
     ...EmailOtpWalletRegistrationEcdsaPrepareHandleBinding[]
 ];
-export type EmailOtpWalletRegistrationEcdsaPrepareHandlePayloads = readonly [
+type EmailOtpWalletRegistrationEcdsaPrepareHandlePayloads = readonly [
     EmailOtpWalletRegistrationEcdsaPrepareHandlePayload,
     ...EmailOtpWalletRegistrationEcdsaPrepareHandlePayload[]
 ];
@@ -434,13 +431,13 @@ export type EmailOtpWalletRegistrationEcdsaPrepareHandleResult = {
     handles?: never;
 };
 export type EmailOtpEcdsaSessionHandleBinding = EmailOtpEcdsaSessionBootstrapHandleBinding | EmailOtpWalletRegistrationEcdsaPrepareHandleBinding;
-export type EmailOtpYaoPrewarmFailureStage = 'worker_ready' | 'yao_wasm_init';
+type EmailOtpYaoPrewarmFailureStage = 'worker_ready' | 'yao_wasm_init';
 export type EmailOtpYaoPrewarmRequest = {
     kind: 'not_requested';
 } | {
     kind: 'requested';
 };
-export type EmailOtpYaoPrewarmWorkerResult = {
+type EmailOtpYaoPrewarmWorkerResult = {
     kind: 'succeeded';
     elapsedMs: number;
     failureStage?: never;
@@ -966,7 +963,7 @@ export interface EmailOtpWorkerOperationMap {
         };
     };
 }
-export type EmailOtpWorkerOperationRequestEnvelopeFor<T extends keyof EmailOtpWorkerOperationMap> = {
+type EmailOtpWorkerOperationRequestEnvelopeFor<T extends keyof EmailOtpWorkerOperationMap> = {
     id: string;
     type: T;
     payload: EmailOtpWorkerOperationMap[T]['payload'];
@@ -974,7 +971,7 @@ export type EmailOtpWorkerOperationRequestEnvelopeFor<T extends keyof EmailOtpWo
 export type EmailOtpWorkerOperationRequestEnvelope = {
     [T in keyof EmailOtpWorkerOperationMap]: EmailOtpWorkerOperationRequestEnvelopeFor<T>;
 }[keyof EmailOtpWorkerOperationMap];
-export interface MultichainSignerWorkerOperationMapByKind {
+interface MultichainSignerWorkerOperationMapByKind {
     evmCrypto: EvmCryptoWorkerOperationMap;
     tempoSigner: TempoSignerWorkerOperationMap;
 }
@@ -994,30 +991,14 @@ export type MultichainWorkerOperationRequest<K extends MultichainWorkerKind, T e
     transfer?: Transferable[];
 };
 export type MultichainWorkerOperationResult<K extends MultichainWorkerKind, T extends MultichainOperationType<K>> = MultichainWorkerOperationEntry<K, T>['result'];
-export type EvmCryptoTransactionOperationType = 'computeEip1559TxHash' | 'encodeEip1559SignedTxFromSignature65';
-export type EvmCryptoLocalSecp256k1OperationType = 'signSecp256k1Recoverable' | 'verifySecp256k1RecoverableSignatureAgainstPublicKey33' | 'secp256k1PrivateKey32ToPublicKey33' | 'validateSecp256k1PublicKey33' | 'addSecp256k1PublicKeys33' | 'buildWebauthnP256Signature' | 'decodeCoseP256PublicKey';
-export type EvmCryptoDomainOperationType = EvmCryptoTransactionOperationType | EvmCryptoLocalSecp256k1OperationType;
-export type EvmCryptoTransactionOperationRequest<T extends EvmCryptoTransactionOperationType> = MultichainWorkerOperationRequest<'evmCrypto', T>;
-export type EvmCryptoLocalSecp256k1OperationRequest<T extends EvmCryptoLocalSecp256k1OperationType> = MultichainWorkerOperationRequest<'evmCrypto', T>;
-export type TempoSignerTransactionOperationType = 'computeTempoSenderHash' | 'encodeTempoSignedTx';
-export type TempoSignerTransactionOperationRequest<T extends TempoSignerTransactionOperationType> = MultichainWorkerOperationRequest<'tempoSigner', T>;
-export type EmailOtpChallengeOperationType = 'requestEmailOtpChallenge' | 'requestEmailOtpEnrollmentChallenge';
-export type EmailOtpEnrollmentOperationType = 'enrollEmailOtpWallet' | 'prepareEmailOtpRegistrationEnrollmentMaterial' | 'createEmailOtpEd25519YaoSigningShare' | 'disposeEmailOtpEd25519YaoActiveClient' | 'prepareEmailOtpPasskeyCustodyLink' | 'completeEmailOtpPasskeyCustodyLink' | 'discardEmailOtpPasskeyCustodyLink' | 'rotateEmailOtpWalletRecoverySet';
-export type EmailOtpWarmSessionOperationType = 'loginWithEmailOtpWallet' | 'getEmailOtpWarmSessionStatus' | 'consumeEmailOtpWarmSessionUses' | 'sealEmailOtpWarmSessionMaterial' | 'rehydrateEmailOtpEcdsaWarmSessionMaterial' | 'rehydrateEmailOtpEd25519YaoOperationMaterial' | 'rehydrateActiveEmailOtpEd25519YaoSessionMaterial' | 'activateEmailOtpEd25519YaoRegistrationMaterial' | 'clearEmailOtpWarmSessionMaterial';
-export type EmailOtpExportOperationType = 'exportEmailOtpEd25519YaoSeed';
-export type EmailOtpDomainOperationType = EmailOtpChallengeOperationType | EmailOtpEnrollmentOperationType | EmailOtpWarmSessionOperationType | EmailOtpExportOperationType;
-export type EmailOtpChallengeOperationRequest<T extends EmailOtpChallengeOperationType> = EmailOtpWorkerOperationRequestEnvelopeFor<T>;
-export type EmailOtpEnrollmentOperationRequest<T extends EmailOtpEnrollmentOperationType> = EmailOtpWorkerOperationRequestEnvelopeFor<T>;
-export type EmailOtpWarmSessionOperationRequest<T extends EmailOtpWarmSessionOperationType> = EmailOtpWorkerOperationRequestEnvelopeFor<T>;
-export type EmailOtpExportOperationRequest<T extends EmailOtpExportOperationType> = EmailOtpWorkerOperationRequestEnvelopeFor<T>;
 type NearSignerWorkerPublicWasmOperationType = keyof WorkerRequestTypeMap;
-export type NearSignerWorkerWasmOperationMap = {
+type NearSignerWorkerWasmOperationMap = {
     [T in NearSignerWorkerPublicWasmOperationType]: {
         payload: WorkerRequestTypeMap[T]['request'];
         result: WorkerResponseForRequest<T>;
     };
 };
-export type NearSignerWorkerCustomOperationMap = {
+type NearSignerWorkerCustomOperationMap = {
     [NearSignerWorkerCustomRequestType.ThresholdEd25519ComputeNep413SigningDigest]: {
         payload: ThresholdEd25519ComputeNep413SigningDigestRequest;
         result: ThresholdEd25519ComputeSigningDigestResult;
@@ -1049,7 +1030,7 @@ export type NearSignerWorkerCustomOperationMap = {
         result: ThresholdEd25519DecodeSignedNearTxBorshResult;
     };
 };
-export type NearSignerWorkerOperationMap = NearSignerWorkerWasmOperationMap & NearSignerWorkerCustomOperationMap;
+type NearSignerWorkerOperationMap = NearSignerWorkerWasmOperationMap & NearSignerWorkerCustomOperationMap;
 export type NearWorkerOperationType = keyof NearSignerWorkerOperationMap;
 type NearWorkerOperationEntry<T extends NearWorkerOperationType> = NearSignerWorkerOperationMap[T];
 export type NearWorkerOperationRequest<T extends NearWorkerOperationType> = {
@@ -1060,10 +1041,6 @@ export type NearWorkerOperationRequest<T extends NearWorkerOperationType> = {
     transfer?: Transferable[];
 };
 export type NearWorkerOperationResult<T extends NearWorkerOperationType> = NearWorkerOperationEntry<T>['result'];
-export type NearEd25519DigestOperationType = typeof NearSignerWorkerCustomRequestType.ThresholdEd25519ComputeNep413SigningDigest | typeof NearSignerWorkerCustomRequestType.ThresholdEd25519ComputeDelegateSigningDigest | typeof NearSignerWorkerCustomRequestType.ThresholdEd25519BuildDelegateSigningPayload;
-export type NearEd25519FinalizeOperationType = typeof NearSignerWorkerCustomRequestType.ThresholdEd25519FinalizeDelegateFromSignature | typeof NearSignerWorkerCustomRequestType.ThresholdEd25519FinalizeNearTxFromSignature | typeof NearSignerWorkerCustomRequestType.ThresholdEd25519BuildNearTxUnsignedBorsh | typeof NearSignerWorkerCustomRequestType.ThresholdEd25519DecodeSignedNearTxBorsh;
-export type NearEd25519DigestOperationRequest<T extends NearEd25519DigestOperationType> = NearWorkerOperationRequest<T>;
-export type NearEd25519FinalizeOperationRequest<T extends NearEd25519FinalizeOperationType> = NearWorkerOperationRequest<T>;
 export declare const EcdsaDerivationClientCustomRequestType: {
     readonly PrepareThresholdEcdsaDerivationRoleLocalClientBootstrap: 70000;
     readonly FinalizeThresholdEcdsaDerivationRoleLocalClientBootstrap: 70001;
@@ -1123,7 +1100,7 @@ export type StoreThresholdEcdsaRoleLocalSigningMaterialResult = {
     materialHandle: string;
     bindingDigest: string;
 };
-export type StoreThresholdEcdsaRoleLocalSigningMaterialResponse = {
+type StoreThresholdEcdsaRoleLocalSigningMaterialResponse = {
     type: typeof EcdsaDerivationClientCustomResponseType.StoreThresholdEcdsaRoleLocalSigningMaterialSuccess;
     payload: StoreThresholdEcdsaRoleLocalSigningMaterialResult;
     diagnostics?: WorkerResponseDiagnostics;
@@ -1133,7 +1110,7 @@ export type StoreLinkedDeviceEcdsaHolderMaterialRequestV1 = {
     readonly ownedSigningShare32: ArrayBuffer;
     readonly activationReceiptJson: string;
 };
-export type StoreLinkedDeviceEcdsaHolderMaterialResponseV1 = {
+type StoreLinkedDeviceEcdsaHolderMaterialResponseV1 = {
     readonly type: typeof EcdsaDerivationClientCustomResponseType.StoreLinkedDeviceEcdsaHolderMaterialSuccess;
     readonly payload: {
         readonly holderHandleId: string;
@@ -1147,7 +1124,7 @@ export type DisposeLinkedDeviceEcdsaHolderMaterialsRequestV1 = {
     readonly kind: 'one';
     readonly holderHandleId: string;
 };
-export type DisposeLinkedDeviceEcdsaHolderMaterialsResponseV1 = {
+type DisposeLinkedDeviceEcdsaHolderMaterialsResponseV1 = {
     readonly type: typeof EcdsaDerivationClientCustomResponseType.DisposeLinkedDeviceEcdsaHolderMaterialsSuccess;
     readonly payload: {
         readonly kind: 'all';
@@ -1158,14 +1135,14 @@ export type DisposeLinkedDeviceEcdsaHolderMaterialsResponseV1 = {
     };
     readonly diagnostics?: WorkerResponseDiagnostics;
 };
-export type CreateEcdsaHolderOrdinaryExportRequestWorkerV1 = CreateEcdsaHolderOrdinaryExportRequestV1;
-export type CreateEcdsaHolderOrdinaryExportResponseWorkerV1 = {
+type CreateEcdsaHolderOrdinaryExportRequestWorkerV1 = CreateEcdsaHolderOrdinaryExportRequestV1;
+type CreateEcdsaHolderOrdinaryExportResponseWorkerV1 = {
     readonly type: typeof EcdsaDerivationClientCustomResponseType.CreateEcdsaHolderOrdinaryExportRequestSuccess;
     readonly payload: CreateEcdsaHolderOrdinaryExportResultV1;
     readonly diagnostics?: WorkerResponseDiagnostics;
 };
-export type FinalizeEcdsaHolderOrdinaryExportRequestWorkerV1 = FinalizeEcdsaHolderOrdinaryExportRequestV1;
-export type FinalizeEcdsaHolderOrdinaryExportResponseWorkerV1 = {
+type FinalizeEcdsaHolderOrdinaryExportRequestWorkerV1 = FinalizeEcdsaHolderOrdinaryExportRequestV1;
+type FinalizeEcdsaHolderOrdinaryExportResponseWorkerV1 = {
     readonly type: typeof EcdsaDerivationClientCustomResponseType.FinalizeEcdsaHolderOrdinaryExportSuccess;
     readonly payload: FinalizeEcdsaHolderOrdinaryExportResultV1;
     readonly diagnostics?: WorkerResponseDiagnostics;
@@ -1199,7 +1176,7 @@ export type EcdsaPresignClientSessionInitRequest = EcdsaPresignClientSessionPara
         material?: never;
     };
 });
-export type EcdsaPresignClientSessionInitResult = {
+type EcdsaPresignClientSessionInitResult = {
     authority: {
         kind: 'role_local_derivation_handle';
     };
@@ -1210,7 +1187,7 @@ export type EcdsaPresignClientSessionInitResult = {
     };
     progress: ThresholdEcdsaPresignProgressResult;
 };
-export type EcdsaPresignClientSessionInitResponse = {
+type EcdsaPresignClientSessionInitResponse = {
     type: typeof EcdsaPresignClientResponseType.SessionInitSuccess;
     payload: EcdsaPresignClientSessionInitResult;
     diagnostics?: WorkerResponseDiagnostics;
@@ -1220,26 +1197,26 @@ export type EcdsaPresignClientSessionStepRequest = {
     stage: 'triples' | 'presign';
     incomingMessages: ArrayBuffer[];
 };
-export type EcdsaPresignClientSessionStepResponse = {
+type EcdsaPresignClientSessionStepResponse = {
     type: typeof EcdsaPresignClientResponseType.SessionStepSuccess;
     payload: ThresholdEcdsaPresignProgressResult;
     diagnostics?: WorkerResponseDiagnostics;
 };
-export type EcdsaPresignClientSessionAbortRequest = {
+type EcdsaPresignClientSessionAbortRequest = {
     sessionId: string;
 };
-export type EcdsaPresignClientSessionAbortResponse = {
+type EcdsaPresignClientSessionAbortResponse = {
     type: typeof EcdsaPresignClientResponseType.SessionAbortSuccess;
     payload: ThresholdEcdsaPresignAbortResult;
     diagnostics?: WorkerResponseDiagnostics;
 };
-export type EcdsaPresignClientAdmitRequest = {
+type EcdsaPresignClientAdmitRequest = {
     materialHandle: string;
     expectedPresignatureId: string;
     poolIdentity: EcdsaClientPresignPoolIdentity;
     admissionMode: 'durable' | 'resident';
 };
-export type EcdsaPresignClientAdmitResponse = {
+type EcdsaPresignClientAdmitResponse = {
     type: typeof EcdsaPresignClientResponseType.AdmitSuccess;
     payload: {
         kind: 'ecdsa_client_presignature_admitted_v1';
@@ -1249,11 +1226,11 @@ export type EcdsaPresignClientAdmitResponse = {
     };
     diagnostics?: WorkerResponseDiagnostics;
 };
-export type EcdsaPresignClientDestroyRequest = {
+type EcdsaPresignClientDestroyRequest = {
     materialHandle: string;
     poolIdentity: EcdsaClientPresignPoolIdentity;
 };
-export type EcdsaPresignClientDestroyResponse = {
+type EcdsaPresignClientDestroyResponse = {
     type: typeof EcdsaPresignClientResponseType.DestroySuccess;
     payload: {
         kind: 'ecdsa_client_presignature_destroyed_v1';
@@ -1261,10 +1238,10 @@ export type EcdsaPresignClientDestroyResponse = {
     };
     diagnostics?: WorkerResponseDiagnostics;
 };
-export type EcdsaPresignClientClearWalletRequest = {
+type EcdsaPresignClientClearWalletRequest = {
     walletId: string;
 };
-export type EcdsaPresignClientClearWalletResponse = {
+type EcdsaPresignClientClearWalletResponse = {
     type: typeof EcdsaPresignClientResponseType.ClearWalletSuccess;
     payload: {
         kind: 'ecdsa_client_wallet_worker_state_cleared_v1';
@@ -1273,22 +1250,22 @@ export type EcdsaPresignClientClearWalletResponse = {
     };
     diagnostics?: WorkerResponseDiagnostics;
 };
-export type EcdsaPresignClientUseBinding = {
+type EcdsaPresignClientUseBinding = {
     materialHandle: string;
     poolIdentity: EcdsaClientPresignPoolIdentity;
     requestBinding: string;
     reservationId: string;
 };
-export type EcdsaPresignClientReserveRequest = EcdsaPresignClientUseBinding & {
+type EcdsaPresignClientReserveRequest = EcdsaPresignClientUseBinding & {
     expectedPresignatureId: string;
     leaseExpiresAtMs: number;
 };
-export type EcdsaPresignClientReserveResponse = {
+type EcdsaPresignClientReserveResponse = {
     type: typeof EcdsaPresignClientResponseType.ReserveSuccess;
     payload: EcdsaClientPresignReservationResult;
     diagnostics?: WorkerResponseDiagnostics;
 };
-export type EcdsaPresignClientCommitResponse = {
+type EcdsaPresignClientCommitResponse = {
     type: typeof EcdsaPresignClientResponseType.CommitSuccess;
     payload: {
         kind: 'ecdsa_client_presignature_lifecycle_advanced_v1';
@@ -1296,10 +1273,13 @@ export type EcdsaPresignClientCommitResponse = {
     };
     diagnostics?: WorkerResponseDiagnostics;
 };
-export type EcdsaPresignClientListAvailableRequest = {
+type EcdsaPresignClientListAvailableRequest = {
+    authority: {
+        kind: 'role_local_derivation_handle' | 'linked_holder_signing_material';
+    };
     poolIdentity: EcdsaClientPresignPoolIdentity;
 };
-export type EcdsaPresignClientListAvailableResponse = {
+type EcdsaPresignClientListAvailableResponse = {
     type: typeof EcdsaPresignClientResponseType.ListAvailableSuccess;
     payload: Array<{
         presignatureId: string;
@@ -1310,7 +1290,7 @@ export type EcdsaPresignClientListAvailableResponse = {
     }>;
     diagnostics?: WorkerResponseDiagnostics;
 };
-export type EcdsaOnlineClientComputeSignatureShareRequest = {
+type EcdsaOnlineClientComputeSignatureShareRequest = {
     materialHandle: string;
     poolIdentity: EcdsaClientPresignPoolIdentity;
     requestBinding: string;
@@ -1321,7 +1301,7 @@ export type EcdsaOnlineClientComputeSignatureShareRequest = {
     clientRerandomizationContribution32: ArrayBuffer;
     signingWorkerRerandomizationContribution32: ArrayBuffer;
 };
-export type EcdsaOnlineClientComputeSignatureShareResponse = {
+type EcdsaOnlineClientComputeSignatureShareResponse = {
     type: typeof EcdsaOnlineClientResponseType.ComputeSignatureShareSuccess;
     payload: ArrayBuffer;
     diagnostics?: WorkerResponseDiagnostics;
@@ -1568,7 +1548,7 @@ export type EcdsaDerivationWorkerOperationRequest<T extends EcdsaDerivationWorke
     transfer?: Transferable[];
 };
 export type EcdsaDerivationWorkerOperationResult<T extends EcdsaDerivationWorkerOperationType> = EcdsaDerivationWorkerOperationEntry<T>['result'];
-export type DerivationSignerWorkerOperationMap = {
+type DerivationSignerWorkerOperationMap = {
     [T in EcdsaDerivationWorkerOperationType]: {
         payload: EcdsaDerivationWorkerOperationEntry<T>['payload'];
         result: EcdsaDerivationWorkerOperationEntry<T>['result'];
@@ -1579,8 +1559,7 @@ export type EcdsaDerivationRoleLocalMaterialOperationRequest<T extends EcdsaDeri
 export type EcdsaHolderOrdinaryExportOperationType = typeof EcdsaDerivationClientCustomRequestType.CreateEcdsaHolderOrdinaryExportRequest | typeof EcdsaDerivationClientCustomRequestType.FinalizeEcdsaHolderOrdinaryExport;
 export type EcdsaDerivationHolderOrdinaryExportOperationRequest<T extends EcdsaHolderOrdinaryExportOperationType> = EcdsaDerivationWorkerOperationRequest<T>;
 /**
- * Refactor 103 zero-prompt handoff — the public reference to an unlocked
- * wallet Ed25519 export-root capability.
+ * The public reference to an unlocked wallet Ed25519 export-root capability.
  *
  * The worker owns the opened custody-seed handle; this reference carries only
  * the opaque handle id and the binding facts the worker will re-verify before
@@ -1597,13 +1576,29 @@ export type UnlockedWalletEd25519ExportRootCapabilityV1 = {
     readonly walletSessionId: string;
     readonly expiresAtMs: number;
     /**
-     * Present only when this unlock opened a pre-109C envelope and resealed it
+     * Present only when this unlock opened an unbound envelope and resealed it
      * under the method that authenticated. The caller persists it; until it does,
      * the old row stands and the next unlock produces the upgrade again, so a
      * failed write costs a retry rather than access.
      */
     readonly upgradedEnvelope?: PasskeyCustodyEnvelopeRecord;
 };
+/**
+ * A linked device's unlocked export-root capability: the Ed25519 Yao Client
+ * root that device opened from its own envelope at an unlock. It carries the
+ * same public binding facts as the seed-backed reference. Only linking
+ * accepts it — never a seed reseal or an auth-method addition.
+ */
+type UnlockedLinkedDeviceEd25519ClientRootCapabilityV1 = {
+    readonly kind: 'unlocked_linked_device_ed25519_client_root_capability_v1';
+    readonly capabilityHandleId: string;
+    readonly walletId: string;
+    readonly walletAuthMethodId: string;
+    readonly walletSessionId: string;
+    readonly expiresAtMs: number;
+};
+/** The unlocked capability a device approving a link seals the export root from. */
+export type UnlockedEd25519ExportRootLinkingCapabilityV1 = UnlockedWalletEd25519ExportRootCapabilityV1 | UnlockedLinkedDeviceEd25519ClientRootCapabilityV1;
 /**
  * What a destroy call invalidates. Lock and logout destroy by wallet, session
  * retirement or replacement by Wallet Session, failed activation by capability
@@ -1649,7 +1644,7 @@ export interface WalletCustodyCeremonyWorkerOperationMap {
             applicationBindingDigestB64u: string;
         } | {
             kind: 'unlocked_ed25519_export_root_capability';
-            capability: UnlockedWalletEd25519ExportRootCapabilityV1;
+            capability: UnlockedEd25519ExportRootLinkingCapabilityV1;
             applicationBindingDigestB64u: string;
             walletKeyId: string;
             enrollmentId: string;
@@ -1856,11 +1851,15 @@ export interface WalletCustodyCeremonyWorkerOperationMap {
         };
     };
     /**
-     * Refactor 103 zero-prompt handoff: opens the wallet custody seed envelope
-     * with the factor secret already present in registration or ordinary unlock,
-     * and parks the opened handle inside this worker for the lifetime of the
-     * owner Wallet Session that authorized it. The result is the public
-     * reference only — no seed bytes, and no serializable secret.
+     * Opens the wallet custody seed envelope with the factor secret already
+     * present in registration or ordinary unlock, and parks the opened handle
+     * inside this worker for the lifetime of the owner Wallet Session that
+     * authorized it. The result is the public reference only — no seed bytes,
+     * and no serializable secret.
+     *
+     * A linked device's unlock opens its own Ed25519 Yao Client-root envelope
+     * the same way, into the distinct linked-device capability that only
+     * linking accepts.
      *
      * At most one capability exists per wallet and owner Wallet Session;
      * establishing a new one destroys the previous handle first.
@@ -1874,7 +1873,7 @@ export interface WalletCustodyCeremonyWorkerOperationMap {
             walletSessionId: string;
             expiresAtMs: number;
         };
-        result: UnlockedWalletEd25519ExportRootCapabilityV1;
+        result: UnlockedEd25519ExportRootLinkingCapabilityV1;
     };
     /**
      * Destroys unlocked Ed25519 export-root capabilities. Wired into lock, logout,
@@ -1897,8 +1896,8 @@ export interface WalletCustodyCeremonyWorkerOperationMap {
      * draws a fresh X25519 ephemeral key and nonce.
      */
     /**
-     * Refactor 109C: reseals this wallet's seed under a new factor, from the
-     * capability an unlock already opened.
+     * Reseals this wallet's seed under a new factor, from the capability an
+     * unlock already opened.
      *
      * For an addition whose source is Email OTP. The source factor secret is
      * already in the worker, so the addition costs no factor release and no
@@ -1920,7 +1919,7 @@ export interface WalletCustodyCeremonyWorkerOperationMap {
     };
     sealEd25519ExportRootForLinkedDevice: {
         payload: {
-            capability: UnlockedWalletEd25519ExportRootCapabilityV1;
+            capability: UnlockedEd25519ExportRootLinkingCapabilityV1;
             transferBindingJson: string;
         };
         result: {
@@ -1984,7 +1983,7 @@ export interface WalletCustodyCeremonyWorkerOperationMap {
         };
     };
 }
-export interface SignerWorkerOperationMapByKind {
+interface SignerWorkerOperationMapByKind {
     nearSigner: NearSignerWorkerOperationMap;
     ecdsaDerivationClient: DerivationSignerWorkerOperationMap;
     ecdsaPresignClient: EcdsaPresignClientOperationMap;
@@ -1996,7 +1995,7 @@ export interface SignerWorkerOperationMapByKind {
 }
 export type SignerWorkerKind = keyof SignerWorkerOperationMapByKind;
 export type SignerWorkerOperationType<K extends SignerWorkerKind> = keyof SignerWorkerOperationMapByKind[K];
-export type SignerWorkerProgressEvent<K extends SignerWorkerKind> = K extends 'nearSigner' ? NearWorkerProgressEvent : K extends 'evmCrypto' | 'tempoSigner' ? RpcSignerWorkerProgressEvent : K extends 'emailOtp' ? EmailOtpWorkerProgressEvent : never;
+type SignerWorkerProgressEvent<K extends SignerWorkerKind> = K extends 'nearSigner' ? NearWorkerProgressEvent : K extends 'evmCrypto' | 'tempoSigner' ? RpcSignerWorkerProgressEvent : K extends 'emailOtp' ? EmailOtpWorkerProgressEvent : never;
 type SignerWorkerOperationEntry<K extends SignerWorkerKind, T extends SignerWorkerOperationType<K>> = SignerWorkerOperationMapByKind[K][T] extends {
     payload: infer P;
     result: infer R;
@@ -2017,7 +2016,7 @@ export type SignerWorkerOperationRequest<K extends SignerWorkerKind, T extends S
     transfer?: Transferable[];
 };
 export type SignerWorkerOperationResult<K extends SignerWorkerKind, T extends SignerWorkerOperationType<K>> = SignerWorkerOperationEntry<K, T>['result'];
-export type EmailOtpYaoPrewarmDiagnostics = {
+type EmailOtpYaoPrewarmDiagnostics = {
     workerPrewarmMs: number;
     yaoWasmInitMs: number;
 };
@@ -2043,8 +2042,6 @@ export interface SignerWorkerTransportProtocol {
         request: SignerWorkerOperationRequest<K, T>;
     }): Promise<SignerWorkerOperationResult<K, T>>;
 }
-export type SignerHostErrorCode = 'SIGNER_INVALID_INPUT' | 'SIGNER_INVALID_LENGTH' | 'SIGNER_DECODE_ERROR' | 'SIGNER_ENCODE_ERROR' | 'SIGNER_KDF_ERROR' | 'SIGNER_CRYPTO_ERROR' | 'SIGNER_UTF8_ERROR' | 'SIGNER_UNSUPPORTED' | 'SIGNER_INTERNAL' | 'WORKER_RUNTIME_ERROR' | 'WORKER_POSTMESSAGE_ERROR' | 'WORKER_PROTOCOL_ERROR' | 'TIMEOUT';
-export declare const DEFAULT_SIGNER_HOST_ERROR_CODE: SignerHostErrorCode;
 export declare class SignerWorkerOperationError extends Error {
     readonly code: string;
     readonly coreCode?: string;

package/dist/types/wallet/src/core/signingEngine/workerManager/workers/device-linking-key/ecdsaTargetShareHpke.d.ts

@@ -0,0 +1,7 @@
+import type { CommittedEcdsaSignerPackageV1 } from '../../../../../../../shared-ts/src/device-linking';
+export declare function openLinkedDeviceEcdsaTargetClientShare(input: {
+    readonly envelope: CommittedEcdsaSignerPackageV1['encryptedTargetClientShare'];
+    readonly recipientPrivateKey: Uint8Array;
+}): Promise<Uint8Array>;
+export declare function extractX25519PrivateKey(pkcs8: Uint8Array): Uint8Array;
+//# sourceMappingURL=ecdsaTargetShareHpke.d.ts.map

package/dist/types/wallet/src/core/signingEngine/workerManager/workers/device-linking-key/ordinaryMaterialState.d.ts

@@ -0,0 +1,50 @@
+import type { CommittedAuthorityPackagesV1, CommittedEcdsaSignerPackageV1, OrdinarySignerMaterialRecipientRequirementV1 } from '../../../../../../../shared-ts/src/device-linking';
+import type { DeviceLinkingOrdinarySignerMaterialRecipientPreparationV1, DeviceLinkingOrdinarySignerMaterialRecipientInputTupleV1, DeviceLinkingOrdinaryMaterialWorkerRequestV1, DeviceLinkingOrdinaryTargetFactorBindingV1, DeviceLinkingOrdinarySignerMaterialReservationPreparationV1, SealedLocalAuthorityMaterialSetV1 } from '../../deviceLinkingPorts';
+type OrdinaryRecipientRequirementsV1 = readonly [
+    OrdinarySignerMaterialRecipientRequirementV1,
+    ...OrdinarySignerMaterialRecipientRequirementV1[]
+];
+type OrdinaryRecipientRequestsV1 = DeviceLinkingOrdinarySignerMaterialRecipientPreparationV1['recipientRequests'];
+type OrdinaryPreparationsV1 = readonly [
+    DeviceLinkingOrdinarySignerMaterialReservationPreparationV1,
+    ...DeviceLinkingOrdinarySignerMaterialReservationPreparationV1[]
+];
+type OrdinaryResealedExportRootV1 = Extract<DeviceLinkingOrdinaryMaterialWorkerRequestV1, {
+    readonly kind: 'device_linking_ordinary_signer_material_seal_v1';
+}>['resealedExportRoot'];
+type OrdinaryCommittedAndResealedExportRootV1 = {
+    readonly committed: CommittedAuthorityPackagesV1;
+    readonly resealedExportRoot: OrdinaryResealedExportRootV1;
+};
+export type DeviceLinkingOrdinarySignerMaterialRecipientPreparationStateV1 = DeviceLinkingOrdinarySignerMaterialRecipientPreparationV1 & {
+    readonly requirements: OrdinaryRecipientRequirementsV1;
+};
+export type DeviceLinkingOrdinaryMaterialStateV1 = {
+    readonly targetFactor: DeviceLinkingOrdinaryTargetFactorBindingV1;
+    readonly preparations: OrdinaryPreparationsV1;
+    readonly recipientInputs: DeviceLinkingOrdinarySignerMaterialRecipientInputTupleV1;
+    readonly factorSecret: Uint8Array;
+};
+type DeviceLinkingSealReplayIdentityV1 = string & {
+    readonly __deviceLinkingSealReplayIdentityV1: true;
+};
+export type DeviceLinkingOrdinaryMaterialSealStateV1 = {
+    readonly committed: CommittedAuthorityPackagesV1;
+    readonly targetFactor: DeviceLinkingOrdinaryTargetFactorBindingV1;
+    readonly resealedExportRoot: OrdinaryResealedExportRootV1;
+    readonly result: SealedLocalAuthorityMaterialSetV1;
+    readonly committedAndResealedExportRootReplayIdentity: DeviceLinkingSealReplayIdentityV1;
+};
+export declare function deviceLinkingSealReplayIdentityV1(value: OrdinaryCommittedAndResealedExportRootV1): DeviceLinkingSealReplayIdentityV1;
+export declare function sameOrdinaryRecipientRequirements(left: OrdinaryRecipientRequirementsV1, right: OrdinaryRecipientRequirementsV1): boolean;
+export declare function sameOrdinaryRecipientRequests(left: OrdinaryRecipientRequestsV1, right: OrdinaryRecipientRequestsV1): boolean;
+export declare function sameOrdinaryTargetFactor(left: DeviceLinkingOrdinaryTargetFactorBindingV1, right: DeviceLinkingOrdinaryTargetFactorBindingV1): boolean;
+export declare function sameOrdinaryTargetFactorAndPreparations(left: Pick<DeviceLinkingOrdinaryMaterialStateV1, 'targetFactor' | 'preparations'>, right: Pick<DeviceLinkingOrdinaryMaterialStateV1, 'targetFactor' | 'preparations'>): boolean;
+export declare function sameEcdsaSourceSignerIdentity(left: Exclude<DeviceLinkingOrdinarySignerMaterialReservationPreparationV1, {
+    readonly kind: string;
+}>['source'], right: CommittedEcdsaSignerPackageV1['activationReceipt']['binding']['source']): boolean;
+export declare function sameEcdsaTargetRecipientPreparation(left: Exclude<DeviceLinkingOrdinarySignerMaterialReservationPreparationV1, {
+    readonly kind: string;
+}>['target'], right: CommittedEcdsaSignerPackageV1['activationReceipt']['binding']['target']): boolean;
+export {};
+//# sourceMappingURL=ordinaryMaterialState.d.ts.map

package/dist/types/wallet/src/core/signingEngine/workerManager/workers/device-linking-key/requests.d.ts

@@ -0,0 +1,89 @@
+import { type LinkedDeviceEmailOtpFactorReleaseEnvelopeV1, type LinkedDeviceEmailOtpVerificationGrantV1, type LinkedDeviceWalletSessionCredentialDeliveryV1, type LinkedDeviceWalletSessionCredentialDeliveryBindingV1, type WalletSessionOperationCredentialV1, type LinkDevicePublicKeyB64u } from '../../../../../../../shared-ts/src/device-linking';
+import { type DigestB64u } from '../../../../../../../shared-ts/src/utils/canonicalPrimitives';
+import { type MpcWalletSigningQuotaId, type WalletSessionAuthorizationId, type WalletSessionId } from '../../../../../../../shared-ts/src/authorization/capabilityKinds';
+import { type WalletAuthMethodId, type WalletAuthorityId, type WalletId } from '../../../../../../../shared-ts/src/utils/domainIds';
+import { type LinkedDeviceEnrollmentId, type LinkedDeviceId, type LinkDeviceSessionId } from '../../../../../../../shared-ts/src/signing-lanes/ids';
+import { type DeviceLinkingOrdinaryMaterialWorkerPrivateRequestV1, type DeviceLinkingOrdinarySignerMaterialRecipientPreparationV1, type DeviceLinkingOrdinaryMaterialWorkerRequestV1, type DeviceLinkingOrdinaryTargetFactorBindingV1, type DeviceLinkingOrdinarySignerMaterialReservationPreparationV1, type SealedLocalAuthorityMaterialSetV1 } from '../../deviceLinkingPorts';
+export type DeviceLinkingKeyWorkerRequestV1 = {
+    readonly kind: 'device_linking_key_material_create_v1';
+} | DeviceLinkingOrdinaryMaterialWorkerRequestV1 | DeviceLinkingOrdinaryMaterialWorkerPrivateRequestV1 | {
+    readonly kind: 'device_linking_email_otp_export_root_recipient_create_v1';
+    readonly handleId: string;
+} | {
+    readonly kind: 'device_linking_request_sign_v1';
+    readonly handleId: string;
+    readonly linkSessionId: LinkDeviceSessionId;
+    readonly method: 'GET' | 'POST';
+    readonly canonicalPath: string;
+    readonly bodyDigestB64u: DigestB64u;
+    readonly devicePublicKeyDigestB64u: DigestB64u;
+    readonly challengeB64u: string;
+    readonly issuedAtMs: number;
+    readonly expiresAtMs: number;
+} | {
+    readonly kind: 'device_linking_email_otp_factor_release_open_v1';
+    readonly handleId: string;
+    readonly walletId: WalletId;
+    readonly linkSessionId: LinkDeviceSessionId;
+    readonly enrollmentId: LinkedDeviceEnrollmentId;
+    readonly deviceId: LinkedDeviceId;
+    readonly walletAuthMethodId: WalletAuthMethodId;
+    readonly baseWalletAuthMethodId: WalletAuthMethodId;
+    readonly targetPreparationDigestB64u: DigestB64u;
+    readonly expectedChallengeId: string;
+    readonly verificationGrant: LinkedDeviceEmailOtpVerificationGrantV1;
+    readonly factorRelease: LinkedDeviceEmailOtpFactorReleaseEnvelopeV1;
+} | {
+    readonly kind: 'device_linking_wallet_session_credential_delivery_open_v1';
+    readonly handleId: string;
+    readonly delivery: LinkedDeviceWalletSessionCredentialDeliveryV1;
+    readonly expected: {
+        readonly linkSessionId: LinkDeviceSessionId;
+        readonly walletId: WalletId;
+        readonly authorityId: WalletAuthorityId;
+        readonly walletAuthMethodId: WalletAuthMethodId;
+        readonly authorizationId: WalletSessionAuthorizationId;
+        readonly walletSessionId: WalletSessionId;
+        readonly quotaId: MpcWalletSigningQuotaId;
+        readonly deliveryBinding: LinkedDeviceWalletSessionCredentialDeliveryBindingV1;
+        readonly credentialDigestB64u: DigestB64u;
+        readonly installationReceiptDigestB64u: DigestB64u;
+        readonly recipientPublicKey65B64u: string;
+        readonly issuedAtMs: number;
+        readonly expiresAtMs: number;
+    };
+} | {
+    readonly kind: 'device_linking_key_material_discard_v1';
+    readonly handleId: string;
+};
+export type DeviceLinkingKeyWorkerResponseV1 = SealedLocalAuthorityMaterialSetV1 | (DeviceLinkingOrdinarySignerMaterialRecipientPreparationV1 & {
+    readonly kind: 'device_linking_ordinary_signer_material_recipient_preparation_v1';
+}) | {
+    readonly kind: 'device_linking_ordinary_signer_material_preparation_v1';
+    readonly targetFactor: DeviceLinkingOrdinaryTargetFactorBindingV1;
+    readonly preparations: readonly [
+        DeviceLinkingOrdinarySignerMaterialReservationPreparationV1,
+        ...DeviceLinkingOrdinarySignerMaterialReservationPreparationV1[]
+    ];
+} | {
+    readonly kind: 'device_linking_email_otp_factor_release_result_v1';
+    readonly verificationGrant: LinkedDeviceEmailOtpVerificationGrantV1;
+    readonly factorSecret: ArrayBuffer;
+} | WalletSessionOperationCredentialV1 | {
+    readonly handleId: string;
+    readonly linkPublicKeyB64u: LinkDevicePublicKeyB64u;
+    readonly devicePublicKeyB64u: LinkDevicePublicKeyB64u;
+    readonly deliveryRecipientPublicKey65B64u: string;
+} | {
+    readonly recipientPublicKeyB64u: string;
+} | {
+    readonly signatureB64u: string;
+};
+type DeviceLinkingKeyWorkerFrameV1 = {
+    readonly id: string;
+    readonly request: unknown;
+};
+export declare function parseFrame(value: unknown): DeviceLinkingKeyWorkerFrameV1;
+export declare function parseRequest(value: unknown): DeviceLinkingKeyWorkerRequestV1;
+export {};
+//# sourceMappingURL=requests.d.ts.map

package/dist/types/wallet/src/core/signingEngine/workerManager/workers/device-linking-key.worker.d.ts

@@ -1,11 +1,2 @@
-import { type DeviceLinkingOrdinaryMaterialSealerV1 } from '../deviceLinkingPorts';
-export type DeviceLinkingKeyWorkerScopeV1 = {
-    postMessage(message: unknown): void;
-    addEventListener(type: 'message', listener: (event: MessageEvent) => void): void;
-    removeEventListener(type: 'message', listener: (event: MessageEvent) => void): void;
-};
-export type InstalledDeviceLinkingKeyWorkerV1 = {
-    close(): Promise<void>;
-};
-export declare function installDeviceLinkingKeyWorkerV1(scope: DeviceLinkingKeyWorkerScopeV1, ordinaryMaterialSealer?: DeviceLinkingOrdinaryMaterialSealerV1): InstalledDeviceLinkingKeyWorkerV1;
+export {};
 //# sourceMappingURL=device-linking-key.worker.d.ts.map

package/dist/types/wallet/src/core/signingEngine/workerManager/workers/ecdsaLaneHolderWorkerRuntime.d.ts

@@ -4,17 +4,17 @@ export type CanonicalEcdsaLaneSourceMaterialV1 = {
     readonly materialActivation: MpcMaterialActivationRef;
     readonly stateBlobB64u: string;
 };
-export type EcdsaLaneHolderSessionPortV1 = {
+type EcdsaLaneHolderSessionPortV1 = {
     prepare(inputJson: string): string;
     free(): void;
 };
 export type EcdsaLaneHolderSessionFactoryV1 = {
     create(stateBlobB64u: string): EcdsaLaneHolderSessionPortV1;
 };
-export declare function resolveExactEcdsaLaneSourceMaterialV1(request: PrepareEcdsaAdditiveLaneHolderRequestV1, candidates: readonly CanonicalEcdsaLaneSourceMaterialV1[]): CanonicalEcdsaLaneSourceMaterialV1;
 export declare function prepareEcdsaLaneHolderInWorkerV1(args: {
     readonly request: PrepareEcdsaAdditiveLaneHolderRequestV1;
     readonly candidates: readonly CanonicalEcdsaLaneSourceMaterialV1[];
     readonly sessionFactory: EcdsaLaneHolderSessionFactoryV1;
 }): PrepareEcdsaAdditiveLaneHolderResultV1;
+export {};
 //# sourceMappingURL=ecdsaLaneHolderWorkerRuntime.d.ts.map