@seams/wallet 0.7.3 → 0.8.0

package/dist/public/sdk/walletRecoveryRotate-BgLlW5ih.js

@@ -1,309 +0,0 @@
-import { n as buildRelayerJsonPostRequestInit, r as normalizeRelayerBaseUrl } from "./relayerHttp-VC8Holz1.js";
-//#region src/core/rpcClients/relayer/walletRecoveryRotate.ts
-const WALLET_RECOVERY_ROTATE_PATH = "/wallets/recovery/rotate";
-const WALLET_RECOVERY_ACK_PATH = "/wallets/recovery/acknowledge-backup";
-const WALLET_CUSTODY_EMAIL_OTP_CHALLENGE_PATH = "/wallets/custody/email-otp/challenge";
-function decodeWalletCustodyEmailOtpChallengeResponse(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value) || Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) return { kind: "invalid" };
-	const fields = new Map(Object.entries(value));
-	const names = [...fields.keys()];
-	if (fields.size === 5 && names.every((name) => [
-		"ok",
-		"challengeId",
-		"challenge_digest",
-		"expiresAtMs",
-		"otpChannel"
-	].includes(name)) && fields.get("ok") === true) return {
-		kind: "success",
-		challengeId: fields.get("challengeId"),
-		challengeDigest: fields.get("challenge_digest"),
-		expiresAtMs: fields.get("expiresAtMs"),
-		otpChannel: fields.get("otpChannel")
-	};
-	const failureFields = [
-		"ok",
-		"code",
-		"message",
-		"retryAfterMs"
-	];
-	if ((fields.size === 3 || fields.size === 4) && names.every((name) => failureFields.includes(name)) && fields.get("ok") === false && typeof fields.get("code") === "string" && typeof fields.get("message") === "string" && (fields.size === 3 || typeof fields.get("retryAfterMs") === "number")) {
-		const message = fields.get("message");
-		return {
-			kind: "failure",
-			message: typeof message === "string" && message.trim() ? message.trim() : null
-		};
-	}
-	return { kind: "invalid" };
-}
-async function requestWalletCustodyEmailOtpChallenge(args) {
-	let response;
-	try {
-		response = await postWalletRecoveryRoute({
-			relayUrl: args.relayUrl,
-			path: WALLET_CUSTODY_EMAIL_OTP_CHALLENGE_PATH,
-			body: {
-				walletId: args.walletId,
-				providerSubjectId: args.providerSubjectId,
-				operation: args.operation,
-				payload: args.payload,
-				...args.requestOrigin ? { requestOrigin: args.requestOrigin } : {}
-			},
-			fetchImpl: args.fetchImpl
-		});
-	} catch (error) {
-		return {
-			kind: "transport_failed",
-			message: error instanceof Error ? error.message : "Email OTP challenge request failed"
-		};
-	}
-	const body = decodeWalletCustodyEmailOtpChallengeResponse(await response.json().catch(() => null));
-	const message = body.kind === "failure" && body.message ? body.message : "";
-	if (response.status !== 200 || body.kind !== "success") return {
-		kind: response.status >= 400 && response.status < 500 ? "rejected" : "transport_failed",
-		message: message || `Email OTP challenge failed (HTTP ${response.status})`
-	};
-	const challengeId = typeof body.challengeId === "string" ? body.challengeId.trim() : "";
-	const challengeDigest = typeof body.challengeDigest === "string" ? body.challengeDigest.trim() : "";
-	const expiresAtMs = Number(body.expiresAtMs);
-	const otpChannel = typeof body.otpChannel === "string" ? body.otpChannel.trim() : "";
-	if (!challengeId || !challengeDigest || !Number.isSafeInteger(expiresAtMs) || expiresAtMs <= 0 || !otpChannel) return {
-		kind: "transport_failed",
-		message: "Email OTP challenge returned an unusable payload"
-	};
-	return {
-		kind: "ready",
-		challengeId,
-		challenge_digest: challengeDigest,
-		expiresAtMs,
-		otpChannel
-	};
-}
-function decodeWalletRecoveryCodeStatusResponse(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value) || Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) return { kind: "invalid" };
-	const fields = new Map(Object.entries(value));
-	const successFields = [
-		"ok",
-		"activeCodeCount",
-		"totalCodeCount",
-		"issuedAtMs",
-		"storeVersion",
-		"backupOutstanding"
-	];
-	const names = [...fields.keys()];
-	if (fields.size === successFields.length && names.every((name) => successFields.includes(name)) && fields.get("ok") === true) return {
-		kind: "success",
-		activeCodeCount: fields.get("activeCodeCount"),
-		totalCodeCount: fields.get("totalCodeCount"),
-		issuedAtMs: fields.get("issuedAtMs"),
-		storeVersion: fields.get("storeVersion"),
-		backupOutstanding: fields.get("backupOutstanding")
-	};
-	const failureFields = [
-		"ok",
-		"code",
-		"message"
-	];
-	if (fields.size === failureFields.length && names.every((name) => failureFields.includes(name)) && fields.get("ok") === false && typeof fields.get("code") === "string") {
-		const message = fields.get("message");
-		return {
-			kind: "failure",
-			message: typeof message === "string" && message.trim() ? message.trim() : null
-		};
-	}
-	return { kind: "invalid" };
-}
-async function readWalletRecoveryCodeStatus(args) {
-	const url = `${normalizeRelayerBaseUrl(args.relayUrl)}/wallets/${encodeURIComponent(args.walletId)}/recovery/status`;
-	const doFetch = args.fetchImpl || fetch;
-	let response;
-	try {
-		response = await doFetch(url, {
-			method: "GET",
-			credentials: "include",
-			headers: { Accept: "application/json" }
-		});
-	} catch (error) {
-		return {
-			kind: "transport_failed",
-			message: error instanceof Error ? error.message : "recovery status request failed"
-		};
-	}
-	const body = decodeWalletRecoveryCodeStatusResponse(await response.json().catch(() => null));
-	const message = body.kind === "failure" && body.message ? body.message : "";
-	if (response.status === 401 || response.status === 403) return {
-		kind: "unauthorized",
-		message: message || "recovery status is unauthorized"
-	};
-	if (response.status === 404) return {
-		kind: "no_recovery_set",
-		message: message || "this wallet has no recovery set"
-	};
-	if (response.status !== 200) return {
-		kind: "transport_failed",
-		message: message || `recovery status failed (HTTP ${response.status})`
-	};
-	if (body.kind !== "success") return {
-		kind: "transport_failed",
-		message: "recovery status returned an unusable payload"
-	};
-	const activeCodeCount = Number(body.activeCodeCount);
-	const totalCodeCount = Number(body.totalCodeCount);
-	const issuedAtMs = Number(body.issuedAtMs);
-	const storeVersion = typeof body.storeVersion === "string" ? body.storeVersion.trim() : "";
-	if (!Number.isSafeInteger(activeCodeCount) || activeCodeCount < 0 || !Number.isSafeInteger(totalCodeCount) || totalCodeCount < activeCodeCount || !Number.isSafeInteger(issuedAtMs) || issuedAtMs <= 0 || !storeVersion || typeof body.backupOutstanding !== "boolean") return {
-		kind: "transport_failed",
-		message: "recovery status returned an unusable payload"
-	};
-	return {
-		kind: "ready",
-		walletId: args.walletId,
-		activeCodeCount,
-		totalCodeCount,
-		issuedAtMs,
-		storeVersion,
-		backupOutstanding: body.backupOutstanding,
-		pendingLocalBackup: false
-	};
-}
-function decodeWalletRecoveryBackupAcknowledgementResponse(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value) || Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) return { kind: "invalid" };
-	const fields = new Map(Object.entries(value));
-	const names = [...fields.keys()];
-	if (fields.size === 2 && names.includes("ok") && names.includes("issuedAtMs") && fields.get("ok") === true) return {
-		kind: "success",
-		issuedAtMs: fields.get("issuedAtMs")
-	};
-	if (fields.size === 3 && names.includes("ok") && names.includes("code") && names.includes("message") && fields.get("ok") === false && typeof fields.get("code") === "string") {
-		const message = fields.get("message");
-		return {
-			kind: "failure",
-			message: typeof message === "string" && message.trim() ? message.trim() : null
-		};
-	}
-	return { kind: "invalid" };
-}
-async function acknowledgeWalletRecoveryBackup(args) {
-	let response;
-	try {
-		response = await postWalletRecoveryRoute({
-			relayUrl: args.relayUrl,
-			path: WALLET_RECOVERY_ACK_PATH,
-			body: { walletId: args.walletId },
-			fetchImpl: args.fetchImpl
-		});
-	} catch (error) {
-		return {
-			kind: "transport_failed",
-			message: error instanceof Error ? error.message : "recovery backup acknowledgement failed"
-		};
-	}
-	const body = decodeWalletRecoveryBackupAcknowledgementResponse(await response.json().catch(() => null));
-	const message = body.kind === "failure" && body.message ? body.message : "";
-	if (response.status === 401 || response.status === 403) return {
-		kind: "unauthorized",
-		message: message || "recovery backup acknowledgement is unauthorized"
-	};
-	if (response.status === 404) return {
-		kind: "no_recovery_set",
-		message: message || "this wallet has no recovery set"
-	};
-	if (response.status !== 200) return {
-		kind: "transport_failed",
-		message: message || `recovery backup acknowledgement failed (HTTP ${response.status})`
-	};
-	if (body.kind !== "success") return {
-		kind: "transport_failed",
-		message: "recovery backup acknowledgement returned an unusable payload"
-	};
-	const issuedAtMs = Number(body.issuedAtMs);
-	if (!Number.isSafeInteger(issuedAtMs) || issuedAtMs <= 0) return {
-		kind: "transport_failed",
-		message: "recovery backup acknowledgement returned an unusable payload"
-	};
-	return {
-		kind: "acknowledged",
-		walletId: args.walletId,
-		issuedAtMs
-	};
-}
-function decodeWalletRecoverySetRotateResponse(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value) || Object.getPrototypeOf(value) !== Object.prototype && Object.getPrototypeOf(value) !== null) return { kind: "invalid" };
-	const fields = new Map(Object.entries(value));
-	const names = [...fields.keys()];
-	if (fields.size === 3 && names.every((name) => [
-		"ok",
-		"issuedAtMs",
-		"storeVersion"
-	].includes(name)) && fields.get("ok") === true) return {
-		kind: "success",
-		issuedAtMs: fields.get("issuedAtMs"),
-		storeVersion: fields.get("storeVersion")
-	};
-	if (fields.size === 3 && names.every((name) => [
-		"ok",
-		"code",
-		"message"
-	].includes(name)) && fields.get("ok") === false && typeof fields.get("code") === "string") {
-		const message = fields.get("message");
-		return {
-			kind: "failure",
-			message: typeof message === "string" && message.trim() ? message.trim() : null
-		};
-	}
-	return { kind: "invalid" };
-}
-async function rotateWalletRecoverySet(args) {
-	const response = await postWalletRecoveryRoute({
-		relayUrl: args.relayUrl,
-		path: WALLET_RECOVERY_ROTATE_PATH,
-		body: {
-			walletId: args.walletId,
-			expectedStoreVersion: args.expectedStoreVersion,
-			manifestKekWraps: args.replacement.manifestKekWraps,
-			entries: [args.replacement.entry],
-			recoveryCodeLocators: args.recoveryCodeLocators,
-			factorProof: args.factorProof
-		},
-		fetchImpl: args.fetchImpl
-	});
-	const body = decodeWalletRecoverySetRotateResponse(await response.json().catch(() => null));
-	const message = body.kind === "failure" && body.message ? body.message : "";
-	if (response.status === 200 && body.kind === "success") {
-		const issuedAtMs = Number(body.issuedAtMs);
-		const storeVersion = typeof body.storeVersion === "string" ? body.storeVersion.trim() : "";
-		if (!Number.isSafeInteger(issuedAtMs) || issuedAtMs <= 0 || !storeVersion) return {
-			kind: "transport_failed",
-			message: "rotation returned an unusable response"
-		};
-		return {
-			kind: "rotated",
-			issuedAtMs,
-			storeVersion
-		};
-	}
-	if (response.status === 404) return {
-		kind: "no_recovery_set",
-		message: message || "no recovery set"
-	};
-	if (response.status === 409) return {
-		kind: "conflict",
-		message: message || "recovery set changed"
-	};
-	if (response.status === 400) return {
-		kind: "rejected",
-		message: message || "rotation rejected"
-	};
-	return {
-		kind: "transport_failed",
-		message: message || `rotation failed (HTTP ${response.status})`
-	};
-}
-async function postWalletRecoveryRoute(args) {
-	const url = `${normalizeRelayerBaseUrl(args.relayUrl)}${args.path}`;
-	return await (args.fetchImpl || fetch)(url, buildRelayerJsonPostRequestInit({
-		headers: { Accept: "application/json" },
-		body: args.body
-	}));
-}
-//#endregion
-export { rotateWalletRecoverySet as i, readWalletRecoveryCodeStatus as n, requestWalletCustodyEmailOtpChallenge as r, acknowledgeWalletRecoveryBackup as t };

package/dist/public/sdk/warmSessionHydration-Os8niEm7.js

@@ -1,7 +0,0 @@
-import { t as cacheCredentialBoundarySetupExportPrfFirst } from "./prfCache-wqQSjYLn.js";
-//#region src/core/signingEngine/session/passkey/warmSessionHydration.ts
-function createWarmSessionHydrationService(deps) {
-	return { hydrateSigningSession: (input) => cacheCredentialBoundarySetupExportPrfFirst(deps.getWarmSessionMaterialWriter(), input) };
-}
-//#endregion
-export { createWarmSessionHydrationService };

package/dist/public/sdk/webauthnP256-DC5EIbKN.js

@@ -1,82 +0,0 @@
-import { r as base64UrlDecode, t as base64Decode } from "./base64-Clm8C-e9.js";
-import { n as buildWebauthnP256SignatureWasm } from "./evmCryptoWasm-DWklhEEb.js";
-//#region src/core/signingEngine/flows/signEvmFamily/signers/webauthnP256.ts
-function bytesEq(a, b) {
-	if (a.length !== b.length) return false;
-	for (let i = 0; i < a.length; i++) if (a[i] !== b[i]) return false;
-	return true;
-}
-var WebAuthnP256Engine = class {
-	constructor(workerCtx, beforeSigning) {
-		this.workerCtx = workerCtx;
-		this.beforeSigning = beforeSigning;
-		this.algorithm = "webauthnP256";
-	}
-	async buildWebauthnSignature(args) {
-		if (!this.workerCtx) throw new Error("[WebAuthnP256Engine] workerCtx is required for wasm-backed WebAuthn signature packing");
-		return await buildWebauthnP256SignatureWasm({
-			challenge32: args.challenge32,
-			authenticatorData: args.authenticatorData,
-			clientDataJSON: args.clientDataJSON,
-			signatureDer: args.signatureDer,
-			pubKeyX32: args.pubKeyX32,
-			pubKeyY32: args.pubKeyY32,
-			workerCtx: this.workerCtx
-		});
-	}
-	async sign(req, keyRef) {
-		if (req.kind !== "webauthn" || req.algorithm !== "webauthnP256") throw new Error("[WebAuthnP256Engine] unsupported sign request");
-		if (req.challenge32.length !== 32) throw new Error("[WebAuthnP256Engine] challenge32 must be 32 bytes");
-		if (keyRef.type !== "webauthnP256") throw new Error("[WebAuthnP256Engine] keyRef must be webauthnP256");
-		if (keyRef.pubKeyX.length !== 32 || keyRef.pubKeyY.length !== 32) throw new Error("[WebAuthnP256Engine] pubKeyX/pubKeyY must be 32 bytes each");
-		if (keyRef.credentialId.length === 0) throw new Error("[WebAuthnP256Engine] credentialId must be non-empty");
-		const fromSerializedCredential = async (credential) => {
-			const serialized = credential && typeof credential === "object" ? credential : {};
-			if (!bytesEq(base64Decode(String(serialized.rawId || "").trim()), keyRef.credentialId)) throw new Error("[WebAuthnP256Engine] WebAuthn credential rawId does not match keyRef");
-			const response = serialized.response;
-			const authenticatorData = base64UrlDecode(String(response?.authenticatorData || ""));
-			const clientDataJSON = base64UrlDecode(String(response?.clientDataJSON || ""));
-			const signatureDer = base64UrlDecode(String(response?.signature || ""));
-			if (authenticatorData.length === 0 || clientDataJSON.length === 0 || signatureDer.length === 0) throw new Error("[WebAuthnP256Engine] missing authenticatorData/clientDataJSON/signature in credential");
-			return await this.buildWebauthnSignature({
-				challenge32: req.challenge32,
-				authenticatorData,
-				clientDataJSON,
-				signatureDer,
-				pubKeyX32: keyRef.pubKeyX,
-				pubKeyY32: keyRef.pubKeyY
-			});
-		};
-		if (req.credential) return await fromSerializedCredential(req.credential);
-		if (typeof navigator === "undefined" || !navigator.credentials || typeof navigator.credentials.get !== "function") throw new Error("[WebAuthnP256Engine] WebAuthn not available (must run in a browser context)");
-		const challenge = new Uint8Array(req.challenge32);
-		const allowCredentialId = new Uint8Array(keyRef.credentialId);
-		this.beforeSigning?.();
-		const assertion = await navigator.credentials.get({ publicKey: {
-			challenge,
-			allowCredentials: [{
-				type: "public-key",
-				id: allowCredentialId
-			}],
-			rpId: req.rpId ?? keyRef.rpId,
-			userVerification: "preferred"
-		} });
-		if (!assertion) throw new Error("[WebAuthnP256Engine] user cancelled WebAuthn assertion");
-		if (!bytesEq(new Uint8Array(assertion.rawId), keyRef.credentialId)) throw new Error("[WebAuthnP256Engine] WebAuthn assertion returned unexpected credentialId");
-		const resp = assertion.response;
-		if (!resp || !resp.authenticatorData || !resp.clientDataJSON || !resp.signature) throw new Error("[WebAuthnP256Engine] invalid WebAuthn assertion response");
-		const authenticatorData = new Uint8Array(resp.authenticatorData);
-		const clientDataJSON = new Uint8Array(resp.clientDataJSON);
-		const signatureDer = new Uint8Array(resp.signature);
-		return await this.buildWebauthnSignature({
-			challenge32: req.challenge32,
-			authenticatorData,
-			clientDataJSON,
-			signatureDer,
-			pubKeyX32: keyRef.pubKeyX,
-			pubKeyY32: keyRef.pubKeyY
-		});
-	}
-};
-//#endregion
-export { WebAuthnP256Engine };

package/dist/public/sdk/webauthnPromptCoordinator-L96oVvLz.js

@@ -1,168 +0,0 @@
-import { t as secureRandomBase36 } from "./secureRandomId-BORsmdS4.js";
-//#region src/core/signingEngine/stepUpConfirmation/passkeyPrompt/webauthnPromptCoordinator.ts
-var WebAuthnPromptCoordinatorError = class extends Error {
-	constructor(code, message) {
-		super(message);
-		this.name = "WebAuthnPromptCoordinatorError";
-		this.code = code;
-	}
-};
-function registrationPromptOwnersEqual(left, right) {
-	switch (left.kind) {
-		case "registration_modal": return right.kind === "registration_modal" && left.requestId === right.requestId;
-		case "hosted_auth_menu_registration": return right.kind === "hosted_auth_menu_registration" && left.authMenuSessionId === right.authMenuSessionId && left.requestId === right.requestId;
-		default: return assertNeverRegistrationWebAuthnPromptOwner(left);
-	}
-}
-function assertNeverRegistrationWebAuthnPromptOwner(value) {
-	throw new Error(`Unknown registration WebAuthn prompt owner: ${String(value)}`);
-}
-function createReservationId() {
-	return `webauthn-reservation-${secureRandomBase36(18, "WebAuthn reservation IDs")}`;
-}
-function createOperationId() {
-	return `webauthn-operation-${secureRandomBase36(18, "WebAuthn operation IDs")}`;
-}
-var WebAuthnPromptCoordinator = class {
-	constructor() {
-		this.state = { kind: "idle" };
-		this.idleWaiters = /* @__PURE__ */ new Set();
-		this.reservationExpiryTimer = null;
-		this.consumedReservationIds = /* @__PURE__ */ new Set();
-	}
-	snapshot() {
-		return this.state;
-	}
-	async reserveRegistrationPrompt(args) {
-		this.throwIfReservationCancelled(args.cancellation);
-		if (Date.now() >= args.expiresAtMs) throw new WebAuthnPromptCoordinatorError("webauthn_prompt_reservation_expired", "WebAuthn prompt reservation expired before acquisition");
-		while (this.state.kind !== "idle") {
-			await this.waitUntilIdle(args.expiresAtMs, args.cancellation);
-			this.throwIfReservationCancelled(args.cancellation);
-		}
-		const reservation = {
-			kind: "reserved_registration_webauthn_prompt_v1",
-			reservationId: createReservationId(),
-			owner: args.owner,
-			expiresAtMs: args.expiresAtMs
-		};
-		this.state = {
-			kind: "reserved",
-			reservation
-		};
-		this.armReservationExpiry(reservation);
-		return reservation;
-	}
-	releaseReservation(reservation) {
-		if (this.state.kind !== "reserved") return;
-		if (this.state.reservation.reservationId !== reservation.reservationId) return;
-		this.clearReservationExpiry();
-		this.state = { kind: "idle" };
-		this.notifyIdle();
-	}
-	isLiveReservation(args) {
-		return Date.now() < args.reservation.expiresAtMs && this.state.kind === "reserved" && this.state.reservation.reservationId === args.reservation.reservationId && registrationPromptOwnersEqual(args.reservation.owner, args.owner);
-	}
-	runReserved(args) {
-		this.assertLiveReservation(args.reservation, args.owner);
-		const operationId = createOperationId();
-		this.consumedReservationIds.add(args.reservation.reservationId);
-		this.clearReservationExpiry();
-		this.state = {
-			kind: "running",
-			operationId,
-			owner: args.owner
-		};
-		return this.startOperation(operationId, args.operation);
-	}
-	runImmediate(args) {
-		if (this.state.kind !== "idle") throw new WebAuthnPromptCoordinatorError("webauthn_prompt_busy", "Another WebAuthn prompt owns the coordinator");
-		const operationId = createOperationId();
-		this.state = {
-			kind: "running",
-			operationId,
-			owner: args.owner
-		};
-		return this.startOperation(operationId, args.operation);
-	}
-	startOperation(operationId, operation) {
-		let result;
-		try {
-			result = operation();
-		} catch (error) {
-			this.finishOperation(operationId);
-			throw error;
-		}
-		const finish = this.finishOperation.bind(this, operationId);
-		result.then(finish, finish);
-		return result;
-	}
-	assertLiveReservation(reservation, owner) {
-		if (this.consumedReservationIds.has(reservation.reservationId)) throw new WebAuthnPromptCoordinatorError("webauthn_prompt_reservation_reused", "WebAuthn prompt reservation was already consumed");
-		if (Date.now() >= reservation.expiresAtMs) {
-			this.releaseReservation(reservation);
-			throw new WebAuthnPromptCoordinatorError("webauthn_prompt_reservation_expired", "WebAuthn prompt reservation expired");
-		}
-		if (this.state.kind !== "reserved" || this.state.reservation.reservationId !== reservation.reservationId) throw new WebAuthnPromptCoordinatorError("webauthn_prompt_reservation_reused", "WebAuthn prompt reservation is no longer active");
-		if (!registrationPromptOwnersEqual(reservation.owner, owner)) throw new WebAuthnPromptCoordinatorError("webauthn_prompt_reservation_owner_mismatch", "WebAuthn prompt reservation owner does not match");
-	}
-	finishOperation(operationId) {
-		if (this.state.kind !== "running" || this.state.operationId !== operationId) return;
-		this.state = { kind: "idle" };
-		this.notifyIdle();
-	}
-	waitUntilIdle(expiresAtMs, cancellation) {
-		const timeoutMs = Math.max(1, expiresAtMs - Date.now());
-		return new Promise((resolve, reject) => {
-			const waiter = {
-				resolve,
-				reject,
-				signal: cancellation.kind === "abort_signal" ? cancellation.signal : null,
-				onAbort: null,
-				timer: setTimeout(() => {
-					this.idleWaiters.delete(waiter);
-					this.removeWaiterAbortListener(waiter);
-					reject(new WebAuthnPromptCoordinatorError("webauthn_prompt_reservation_expired", "WebAuthn prompt reservation expired while waiting for the coordinator"));
-				}, timeoutMs)
-			};
-			if (waiter.signal) {
-				waiter.onAbort = () => {
-					this.idleWaiters.delete(waiter);
-					clearTimeout(waiter.timer);
-					this.removeWaiterAbortListener(waiter);
-					reject(/* @__PURE__ */ new Error("WebAuthn prompt reservation acquisition cancelled"));
-				};
-				waiter.signal.addEventListener("abort", waiter.onAbort, { once: true });
-			}
-			this.idleWaiters.add(waiter);
-		});
-	}
-	notifyIdle() {
-		for (const waiter of this.idleWaiters) {
-			clearTimeout(waiter.timer);
-			this.removeWaiterAbortListener(waiter);
-			waiter.resolve();
-		}
-		this.idleWaiters.clear();
-	}
-	armReservationExpiry(reservation) {
-		this.clearReservationExpiry();
-		this.reservationExpiryTimer = setTimeout(this.releaseReservation.bind(this, reservation), Math.max(1, reservation.expiresAtMs - Date.now()));
-	}
-	clearReservationExpiry() {
-		if (this.reservationExpiryTimer === null) return;
-		clearTimeout(this.reservationExpiryTimer);
-		this.reservationExpiryTimer = null;
-	}
-	throwIfReservationCancelled(cancellation) {
-		if (cancellation.kind === "abort_signal" && cancellation.signal.aborted) throw new Error("WebAuthn prompt reservation acquisition cancelled");
-	}
-	removeWaiterAbortListener(waiter) {
-		if (!waiter.signal || !waiter.onAbort) return;
-		waiter.signal.removeEventListener("abort", waiter.onAbort);
-		waiter.onAbort = null;
-	}
-};
-const webAuthnPromptCoordinator = new WebAuthnPromptCoordinator();
-//#endregion
-export { webAuthnPromptCoordinator as t };

package/dist/types/shared-ts/src/signing-lanes/participantDigest.typecheck.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=participantDigest.typecheck.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/rotation.typecheck.d.ts

@@ -1,2 +0,0 @@
-export {};
-//# sourceMappingURL=rotation.typecheck.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts

@@ -1,13 +0,0 @@
-import { type DigestB64u } from '../utils/canonicalPrimitives';
-import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, EcdsaServerRetirementReceiptV1, Ed25519ServerRetirementReceiptV1, Ed25519YaoLaneJobV1, LaneEnrollmentManifestV1, RevokeSigningLaneV1 } from './rotation';
-export declare function computeEd25519YaoLaneSessionDigestV1(value: Ed25519YaoLaneJobV1): Promise<string>;
-export declare function computeLaneEnrollmentManifestDigestV1(value: LaneEnrollmentManifestV1): Promise<string>;
-export declare function computeAggregateLaneActivationReceiptDigestV1(value: AggregateLaneActivationReceiptV1): Promise<string>;
-export declare function computeAggregateLaneRevocationReceiptDigestV1(value: AggregateLaneRevocationReceiptV1): Promise<string>;
-export declare function computeRevokeSigningLaneDigestV1(value: RevokeSigningLaneV1): Promise<string>;
-export declare function encodeLaneProtocolCommitReceiptV1(value: import('./rotation').LaneProtocolCommitReceiptV1): Uint8Array;
-export declare function encodeLaneHolderDeliveryReceiptV1(value: import('./rotation').LaneHolderDeliveryReceiptV1): Uint8Array;
-export declare function encodeLaneServerActivationReceiptV1(value: import('./rotation').LaneServerActivationReceiptV1): Uint8Array;
-export declare function computeEcdsaServerRetirementReceiptDigestV1(value: EcdsaServerRetirementReceiptV1): Promise<DigestB64u>;
-export declare function computeEd25519ServerRetirementReceiptDigestV1(value: Ed25519ServerRetirementReceiptV1): Promise<DigestB64u>;
-//# sourceMappingURL=rotationDigests.d.ts.map

package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts

@@ -1,78 +0,0 @@
-import type { LaneEnrollmentLifecycleV1, LaneProductEpochActiveV1, LaneProductEpochPendingVisibilityV1, LaneProductEpochRevocationPendingV1, LaneProductEpochRetiredV1, LaneProductEpochRevokedV1, LaneProtocolLifecycle } from './rotation';
-import type { LaneOperationId } from './ids';
-type LaneProtocolLifecycleTransitionV1 = {
-    action: 'await_protocol_commitment';
-    atMs: number;
-} | {
-    action: 'record_commit';
-    committedAtMs: number;
-    transcriptHashB64u: string;
-    protocolCommitReceiptDigestB64u: string;
-} | {
-    action: 'record_holder_delivery';
-    holderReceiptAtMs: number;
-    holderDeliveryReceiptDigestB64u: string;
-} | {
-    action: 'record_server_activation';
-    serverActivatedAtMs: number;
-    serverActivationReceiptDigestB64u: string;
-} | {
-    action: 'activate';
-    activatedAtMs: number;
-    aggregateActivationReceiptDigestB64u: string;
-} | {
-    action: 'abort_precommit';
-    abortedAtMs: number;
-    abortReason: 'cancelled' | 'expired' | 'revoked_before_commit';
-} | {
-    action: 'require_completion';
-    recoveryReason: 'exact_redelivery_required' | 'recovery_required';
-} | {
-    action: 'resume_completion';
-    atMs: number;
-};
-export declare function transitionLaneProtocolLifecycleV1(current: LaneProtocolLifecycle, transition: LaneProtocolLifecycleTransitionV1): LaneProtocolLifecycle;
-type LaneEnrollmentLifecycleTransitionV1 = {
-    action: 'mark_committed_completion_required';
-    committedChildOperationIds: readonly [LaneOperationId, ...LaneOperationId[]];
-    markedAtMs: number;
-} | {
-    action: 'mark_ready_for_visibility';
-    aggregateReceiptDigestB64u: string;
-    readyAtMs: number;
-} | {
-    action: 'activate';
-    activatedAtMs: number;
-} | {
-    action: 'cancel_precommit';
-    cancelledAtMs: number;
-} | {
-    action: 'begin_revocation';
-    reason: 'cancelled_after_commit' | 'expired_after_commit' | 'revoked_during_activation';
-    markedAtMs: number;
-} | {
-    action: 'revoke';
-    aggregateRevocationReceiptDigestB64u: string;
-    revokedAtMs: number;
-};
-export declare function transitionLaneEnrollmentLifecycleV1(current: LaneEnrollmentLifecycleV1, transition: LaneEnrollmentLifecycleTransitionV1): LaneEnrollmentLifecycleV1;
-export declare function activateLaneProductEpochV1(current: LaneProductEpochPendingVisibilityV1, args: {
-    readonly aggregateActivationReceiptDigestB64u: string;
-    readonly activatedAtMs: number;
-}): LaneProductEpochActiveV1;
-export declare function retireFencedLaneProductEpochV1(current: LaneProductEpochRevocationPendingV1, args: {
-    readonly retirementReceiptDigestB64u: string;
-    readonly retiredAtMs: number;
-}): LaneProductEpochRetiredV1;
-export declare function beginLaneProductEpochRevocationV1(current: LaneProductEpochPendingVisibilityV1 | LaneProductEpochActiveV1, args: {
-    readonly revocationEpoch: number;
-    readonly revocationReason: LaneProductEpochRevokedV1['revocationReason'];
-    readonly retirementEffectBindingDigestB64u: string;
-    readonly revocationRequestedAtMs: number;
-}): LaneProductEpochRevocationPendingV1;
-export declare function completeLaneProductEpochRevocationV1(current: LaneProductEpochRevocationPendingV1, args: {
-    readonly revocationReceiptDigestB64u: string;
-    readonly revokedAtMs: number;
-}): LaneProductEpochRevokedV1;
-export {};
-//# sourceMappingURL=rotationLifecycle.d.ts.map