@seams/wallet 0.8.0 → 0.9.0

package/dist/esm/core/signingEngine/threshold/ed25519/yaoClient.js

@@ -1,563 +0,0 @@
-import { sameRouterAbMpcMaterialActivationRef } from "../../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
-import { ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1, parseRouterAbEd25519YaoExportAdmissionReceiptV1, parseRouterAbEd25519YaoExportExecuteRequestV1, parseRouterAbEd25519YaoExportResultV1 } from "../../../../shared-ts/src/utils/routerAbEd25519Yao.js";
-import { WasmActivatedClientV1, WasmEd25519YaoClientRootExportSessionV1, WasmWalletCustodySeedExportSessionV1, __wbg_init, openWalletCustodyEd25519MaterialV1 } from "../../../../wasm/router_ab_ed25519_yao_client/pkg/router_ab_ed25519_yao_client.js";
-import { redactCredentialExtensionOutputs } from "../../webauthnAuth/credentials/credentialExtensions.js";
-import { ROUTER_AB_TRACE_ID_HEADER_V1, createRouterAbTraceContextV1, parseRouterAbTraceContextV1 } from "../../../../shared-ts/src/utils/routerAbTraceContext.js";
-//#region src/core/signingEngine/threshold/ed25519/yaoClient.ts
-const ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1 = "router_ab_ed25519_yao_active_client_v1";
-function buildRouterAbEd25519YaoExportAdmissionBodyV1(args) {
-	switch (args.authorization.kind) {
-		case "passkey": return {
-			protocol: args.protocol,
-			authorization: {
-				kind: "passkey",
-				webauthnAuthentication: redactCredentialExtensionOutputs(args.authorization.webauthnAuthentication)
-			}
-		};
-		case "email_otp_factor": return {
-			protocol: args.protocol,
-			authorization: {
-				kind: "email_otp_factor",
-				providerSubjectId: args.authorization.providerSubjectId,
-				walletAuthMethodId: args.authorization.walletAuthMethodId,
-				challengeId: args.authorization.challengeId,
-				otpCode: args.authorization.otpCode
-			}
-		};
-	}
-}
-const ACTIVE_CLIENT_CONSTRUCTION = Symbol("router-ab-ed25519-yao-active-client-construction");
-function requireBytes32(value, label) {
-	if (!(value instanceof Uint8Array) || value.length !== 32) throw new Error(`${label} must contain 32 bytes`);
-	return value;
-}
-function isPasskeyExportSeedInput(input) {
-	return input.authorization.kind === "passkey";
-}
-function exportSessionConstructorForCustodyEnvelopeV1(envelope) {
-	switch (envelope.kind) {
-		case "wallet_custody_seed_v1": return WasmWalletCustodySeedExportSessionV1;
-		case "ed25519_yao_client_root_v1": return WasmEd25519YaoClientRootExportSessionV1;
-		default: return assertNever(envelope.kind);
-	}
-}
-function createExportSession(args) {
-	const common = [
-		JSON.stringify(args.admission),
-		JSON.stringify(args.applicationBinding),
-		args.participantIds[0],
-		args.participantIds[1],
-		args.custodyEnvelope.factorSecret,
-		args.custodyEnvelope.bindingJson,
-		args.custodyEnvelope.nonce,
-		args.custodyEnvelope.ciphertext,
-		args.custodyEnvelope.aadHash,
-		args.custodyEnvelope.ciphertextDigest,
-		args.entropy.recipientKeyMaterial,
-		args.entropy.deriverASealSeed,
-		args.entropy.deriverBSealSeed
-	];
-	return new (exportSessionConstructorForCustodyEnvelopeV1(args.custodyEnvelope))(...common);
-}
-function parseRouterAbEd25519YaoClientEmailOtpFactorReleaseV1(value) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
-	const fields = Object.keys(value);
-	if (fields.length !== 4 || ![
-		"kind",
-		"challengeId",
-		"loginGrant",
-		"expiresAtMs"
-	].every((field) => fields.includes(field)) || Reflect.get(value, "kind") !== "email_otp_login_grant") return null;
-	const challengeId = Reflect.get(value, "challengeId");
-	const loginGrant = Reflect.get(value, "loginGrant");
-	const expiresAtMs = Reflect.get(value, "expiresAtMs");
-	if (typeof challengeId !== "string" || challengeId.trim().length === 0 || typeof loginGrant !== "string" || loginGrant.trim().length === 0 || typeof expiresAtMs !== "number" || !Number.isSafeInteger(expiresAtMs) || expiresAtMs <= 0) return null;
-	return {
-		kind: "email_otp_login_grant",
-		challengeId,
-		loginGrant
-	};
-}
-function parseRouterAbEd25519YaoClientExportAdmissionEnvelopeV1(value) {
-	if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error("Router export admission response must be an object");
-	const fields = Object.keys(value);
-	const protocolOnly = fields.length === 1 && fields[0] === "protocol";
-	const protocolWithFactorRelease = fields.length === 2 && fields.includes("protocol") && fields.includes("factorRelease");
-	if (!protocolOnly && !protocolWithFactorRelease) throw new Error("Router export admission response contains unexpected fields");
-	const admission = parseRouterAbEd25519YaoExportAdmissionReceiptV1(Reflect.get(value, "protocol"));
-	if (!admission.ok) throw new Error(admission.message);
-	if (protocolOnly) return {
-		kind: "protocol_only",
-		protocol: admission.value
-	};
-	return {
-		kind: "protocol_with_factor_release",
-		protocol: admission.value,
-		factorRelease: parseRouterAbEd25519YaoClientEmailOtpFactorReleaseV1(Reflect.get(value, "factorRelease"))
-	};
-}
-function createRouterAbEd25519YaoActivationEntropyV1() {
-	return {
-		recipientKeyMaterial: randomNonzeroBytes32(),
-		deriverASealSeed: randomNonzeroBytes32(),
-		deriverBSealSeed: randomNonzeroBytes32()
-	};
-}
-function zeroizeRouterAbEd25519YaoActivationEntropyV1(entropy) {
-	entropy.recipientKeyMaterial.fill(0);
-	entropy.deriverASealSeed.fill(0);
-	entropy.deriverBSealSeed.fill(0);
-}
-function equalBytes(left, right) {
-	if (left.length !== right.length) return false;
-	let difference = 0;
-	for (let index = 0; index < left.length; index += 1) difference |= left[index] ^ right[index];
-	return difference === 0;
-}
-function assertNever(value) {
-	throw new Error(`Unhandled Ed25519 Yao Client lifecycle: ${String(value)}`);
-}
-function requireActiveRegistration(lifecycle) {
-	switch (lifecycle.kind) {
-		case "active": return lifecycle.activated;
-		case "disposed": throw new Error("Ed25519 Yao Client state is disposed");
-		default: return assertNever(lifecycle);
-	}
-}
-function randomNonzeroBytes32() {
-	const output = new Uint8Array(32);
-	do
-		globalThis.crypto.getRandomValues(output);
-	while (output.every(isZeroByte));
-	return output;
-}
-function isZeroByte(byte) {
-	return byte === 0;
-}
-function parseRouterAbEd25519YaoClientCommitmentsV1(value) {
-	const parsed = JSON.parse(value);
-	if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("Client commitments must be an object");
-	const fields = Object.keys(parsed);
-	if (fields.length !== 2 || !fields.includes("hiding") || !fields.includes("binding")) throw new Error("Client commitments contain unexpected fields");
-	const hiding = Reflect.get(parsed, "hiding");
-	const binding = Reflect.get(parsed, "binding");
-	if (typeof hiding !== "string" || typeof binding !== "string") throw new Error("Client commitments must contain hiding and binding strings");
-	return {
-		hiding,
-		binding
-	};
-}
-function exportAdmissionMatchesRequest(request, receipt) {
-	const lifecycle = receipt.binding.ceremony.lifecycle;
-	return lifecycle.lifecycle_id === request.scope.lifecycle_id && lifecycle.root_share_epoch === request.scope.root_share_epoch && lifecycle.account_id === request.scope.account_id && lifecycle.session_id === request.scope.threshold_session_id && lifecycle.signer_set_id === request.scope.signer_set_id && lifecycle.selected_server_id === request.scope.signing_worker_id && sameRouterAbMpcMaterialActivationRef(receipt.binding.ceremony.material_activation, request.scope.material_activation) && receipt.binding.state_epoch === request.state_epoch && equalBytes(receipt.binding.registered_public_key, request.registered_public_key) && equalBytes(receipt.binding.runtime_policy_binding, request.runtime_policy_binding) && equalBytes(receipt.binding.authorization_digest, request.authorization.authorization_digest);
-}
-function parseRouterAbEd25519YaoClientExportArtifactV1(value) {
-	const parsed = JSON.parse(value);
-	if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed)) throw new Error("Ed25519 Yao export artifact must be an object");
-	const keys = Object.keys(parsed).sort();
-	const expectedKeys = [
-		"artifactKind",
-		"privateKey",
-		"publicKey"
-	];
-	if (keys.length !== expectedKeys.length || keys.some((key, index) => key !== expectedKeys[index])) throw new Error("Ed25519 Yao export artifact contains unexpected fields");
-	if (Reflect.get(parsed, "artifactKind") !== "near-ed25519-seed-v1" || typeof Reflect.get(parsed, "publicKey") !== "string" || typeof Reflect.get(parsed, "privateKey") !== "string" || !String(Reflect.get(parsed, "publicKey")).startsWith("ed25519:") || !String(Reflect.get(parsed, "privateKey")).startsWith("ed25519:")) throw new Error("Ed25519 Yao export artifact is invalid");
-	const publicKey = Reflect.get(parsed, "publicKey");
-	const privateKey = Reflect.get(parsed, "privateKey");
-	if (typeof publicKey !== "string" || typeof privateKey !== "string") throw new Error("Ed25519 Yao export artifact is invalid");
-	return {
-		artifactKind: "near-ed25519-seed-v1",
-		publicKey,
-		privateKey
-	};
-}
-function parseHttpTransportConfig(config) {
-	const origin = new URL(config.routerOrigin);
-	if (origin.protocol !== "http:" && origin.protocol !== "https:" || origin.pathname !== "/") throw new Error("Router origin must be an HTTP origin without a path");
-	if (origin.search || origin.hash) throw new Error("Router origin must not contain query or hash");
-	if (typeof config.fetch !== "function") throw new Error("Router fetch is required");
-	switch (config.authorization.kind) {
-		case "bearer":
-			if (!config.authorization.value.trim()) throw new Error("Router bearer authorization is required");
-			break;
-		case "recovery_challenge":
-			if (!config.authorization.challengeId.trim()) throw new Error("Router recovery challenge ID is required");
-			break;
-		case "cookies": break;
-	}
-	return {
-		routerOrigin: origin.origin,
-		authorization: config.authorization,
-		fetch: config.fetch,
-		traceContext: resolveHttpTraceContext(config.traceContext)
-	};
-}
-function resolveHttpTraceContext(traceContext) {
-	if (!traceContext) return createRouterAbTraceContextV1();
-	if (traceContext.kind !== "router_ab_trace_context_v1") throw new Error("Router trace context kind is invalid");
-	const parsed = parseRouterAbTraceContextV1(traceContext.value);
-	if (!parsed.ok) throw new Error(parsed.message);
-	return parsed.value;
-}
-async function parseHttpResponse(response) {
-	const rawServerTiming = response.headers.get("Server-Timing");
-	let value;
-	try {
-		value = await response.json();
-	} catch (error) {
-		return {
-			ok: false,
-			message: error instanceof Error ? error.message : String(error)
-		};
-	}
-	if (response.ok) {
-		const serverTiming = rawServerTiming || resourceServerTiming(response.url);
-		return {
-			ok: true,
-			value,
-			...serverTiming ? { serverTiming } : {}
-		};
-	}
-	return {
-		ok: false,
-		message: JSON.stringify(value)
-	};
-}
-function resourceServerTiming(responseUrl) {
-	if (!responseUrl || typeof performance === "undefined" || typeof performance.getEntriesByName !== "function") return null;
-	const entries = performance.getEntriesByName(responseUrl, "resource");
-	for (let index = entries.length - 1; index >= 0; index -= 1) {
-		const entry = entries[index];
-		if (!entry || entry.entryType !== "resource") continue;
-		const serialized = serializePerformanceServerTiming(Reflect.get(entry, "serverTiming"));
-		if (serialized) return serialized;
-	}
-	return null;
-}
-function serializePerformanceServerTiming(value) {
-	if (!Array.isArray(value)) return null;
-	const serialized = [];
-	for (const rawMetric of value) {
-		if (typeof rawMetric !== "object" || rawMetric === null) continue;
-		const name = String(Reflect.get(rawMetric, "name") || "").trim();
-		const duration = Number(Reflect.get(rawMetric, "duration"));
-		if (!/^[a-z0-9_]+$/.test(name)) continue;
-		if (!Number.isFinite(duration) || duration < 0) continue;
-		serialized.push(`${name};dur=${duration}`);
-	}
-	return serialized.length > 0 ? serialized.join(", ") : null;
-}
-var RouterAbEd25519YaoHttpActivationTransportV1 = class {
-	constructor(config) {
-		this.config = parseHttpTransportConfig(config);
-	}
-	async send(request) {
-		let response;
-		try {
-			const bearerAuthorization = !(request.kind === "export_admit" || request.kind === "export_execute") && this.config.authorization.kind === "bearer" ? this.config.authorization.value : null;
-			const recoveryChallengeId = request.kind === "recovery_admit" && this.config.authorization.kind === "recovery_challenge" ? this.config.authorization.challengeId : null;
-			const usesCookies = this.config.authorization.kind === "cookies";
-			response = await this.config.fetch.call(globalThis, new URL(request.path, this.config.routerOrigin), {
-				method: "POST",
-				headers: {
-					...bearerAuthorization ? { authorization: bearerAuthorization } : {},
-					...recoveryChallengeId ? { [ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1]: recoveryChallengeId } : {},
-					"content-type": "application/json",
-					[ROUTER_AB_TRACE_ID_HEADER_V1]: this.config.traceContext.value
-				},
-				credentials: usesCookies ? "include" : "omit",
-				body: JSON.stringify(request.body)
-			});
-		} catch (error) {
-			return {
-				ok: false,
-				message: error instanceof Error ? error.message : String(error)
-			};
-		}
-		return parseHttpResponse(response);
-	}
-};
-var WasmRouterAbEd25519YaoActiveClientV1 = class {
-	constructor(args) {
-		if (args[ACTIVE_CLIENT_CONSTRUCTION] !== true) throw new Error("Ed25519 Yao Client state requires verified WASM completion");
-		this.activeMetadata = {
-			kind: args.metadata.kind,
-			scope: {
-				lifecycle_id: args.metadata.scope.lifecycle_id,
-				root_share_epoch: args.metadata.scope.root_share_epoch,
-				account_id: args.metadata.scope.account_id,
-				threshold_session_id: args.metadata.scope.threshold_session_id,
-				signer_set_id: args.metadata.scope.signer_set_id,
-				signing_worker_id: args.metadata.scope.signing_worker_id,
-				material_activation: args.metadata.scope.material_activation
-			},
-			applicationBinding: {
-				wallet_id: args.metadata.applicationBinding.wallet_id,
-				near_ed25519_signing_key_id: args.metadata.applicationBinding.near_ed25519_signing_key_id,
-				signing_root_id: args.metadata.applicationBinding.signing_root_id,
-				key_creation_signer_slot: args.metadata.applicationBinding.key_creation_signer_slot
-			},
-			participantIds: [args.metadata.participantIds[0], args.metadata.participantIds[1]],
-			registeredPublicKey: args.metadata.registeredPublicKey.slice(),
-			signingWorkerVerifyingShare: args.metadata.signingWorkerVerifyingShare.slice(),
-			stateEpoch: args.metadata.stateEpoch,
-			transcript: args.metadata.transcript.slice(),
-			activeCapabilityBinding: [...args.metadata.activeCapabilityBinding],
-			materialActivation: args.metadata.materialActivation
-		};
-		this.lifecycle = {
-			kind: "active",
-			activated: args.activated
-		};
-	}
-	sealLocalMaterial(input) {
-		const activated = requireActiveRegistration(this.lifecycle);
-		try {
-			return {
-				kind: "router_ab_ed25519_yao_sealed_local_material_v1",
-				nonce: input.nonce.slice(),
-				ciphertext: activated.seal_local_material(requireBytes32(input.ownedPasskeyPrfFirst, "passkey PRF.first"), input.binding, input.nonce)
-			};
-		} finally {
-			input.ownedPasskeyPrfFirst.fill(0);
-		}
-	}
-	async createSigningShare(input) {
-		const activated = requireActiveRegistration(this.lifecycle);
-		const admittedDigest = requireBytes32(input.admittedDigest, "admitted digest");
-		const signingWorkerVerifyingShare = requireBytes32(input.signingWorkerVerifyingShare, "SigningWorker verifying share");
-		if (!equalBytes(signingWorkerVerifyingShare, this.activeMetadata.signingWorkerVerifyingShare)) throw new Error("SigningWorker verifying share does not match activated Client state");
-		const output = activated.create_signing_share(this.activeMetadata.participantIds[0], this.activeMetadata.participantIds[1], admittedDigest, JSON.stringify(input.signingWorkerCommitments), signingWorkerVerifyingShare);
-		try {
-			return {
-				clientCommitments: parseRouterAbEd25519YaoClientCommitmentsV1(output.client_commitments_json()),
-				clientVerifyingShare: output.client_verifying_share(),
-				clientSignatureShareB64u: output.client_signature_share_b64u()
-			};
-		} finally {
-			output.free();
-		}
-	}
-	metadata() {
-		return {
-			kind: this.activeMetadata.kind,
-			scope: {
-				lifecycle_id: this.activeMetadata.scope.lifecycle_id,
-				root_share_epoch: this.activeMetadata.scope.root_share_epoch,
-				account_id: this.activeMetadata.scope.account_id,
-				threshold_session_id: this.activeMetadata.scope.threshold_session_id,
-				signer_set_id: this.activeMetadata.scope.signer_set_id,
-				signing_worker_id: this.activeMetadata.scope.signing_worker_id,
-				material_activation: this.activeMetadata.scope.material_activation
-			},
-			applicationBinding: {
-				wallet_id: this.activeMetadata.applicationBinding.wallet_id,
-				near_ed25519_signing_key_id: this.activeMetadata.applicationBinding.near_ed25519_signing_key_id,
-				signing_root_id: this.activeMetadata.applicationBinding.signing_root_id,
-				key_creation_signer_slot: this.activeMetadata.applicationBinding.key_creation_signer_slot
-			},
-			participantIds: [this.activeMetadata.participantIds[0], this.activeMetadata.participantIds[1]],
-			registeredPublicKey: this.activeMetadata.registeredPublicKey.slice(),
-			signingWorkerVerifyingShare: this.activeMetadata.signingWorkerVerifyingShare.slice(),
-			stateEpoch: this.activeMetadata.stateEpoch,
-			transcript: this.activeMetadata.transcript.slice(),
-			activeCapabilityBinding: [...this.activeMetadata.activeCapabilityBinding],
-			materialActivation: this.activeMetadata.materialActivation
-		};
-	}
-	status() {
-		switch (this.lifecycle.kind) {
-			case "active": return { kind: "active" };
-			case "disposed": return { kind: "disposed" };
-			default: return assertNever(this.lifecycle);
-		}
-	}
-	dispose() {
-		switch (this.lifecycle.kind) {
-			case "active": {
-				const activated = this.lifecycle.activated;
-				this.lifecycle = { kind: "disposed" };
-				activated.free();
-				return;
-			}
-			case "disposed": return;
-			default: return assertNever(this.lifecycle);
-		}
-	}
-};
-function importVerifiedActiveClient(input) {
-	let activated = null;
-	try {
-		activated = WasmActivatedClientV1.import_local_material(requireBytes32(input.ownedPasskeyPrfFirst, "passkey PRF.first"), input.binding, input.sealed.nonce, input.sealed.ciphertext, input.metadata.registeredPublicKey, input.metadata.stateEpoch, input.metadata.participantIds[0], input.metadata.participantIds[1], input.metadata.signingWorkerVerifyingShare);
-		return new WasmRouterAbEd25519YaoActiveClientV1({
-			[ACTIVE_CLIENT_CONSTRUCTION]: true,
-			metadata: input.metadata,
-			activated
-		});
-	} catch (error) {
-		activated?.free();
-		throw error;
-	} finally {
-		input.ownedPasskeyPrfFirst.fill(0);
-	}
-}
-function importVerifiedLinkedActiveClient(input) {
-	let activated = null;
-	try {
-		activated = WasmActivatedClientV1.import_linked_material(requireBytes32(input.ownedClientScalarShare, "linked-device Ed25519 Client share"), input.metadata.participantIds[0], input.metadata.participantIds[1], JSON.stringify(input.publicReceipt));
-		if (activated.state_epoch() !== input.metadata.stateEpoch || !equalBytes(activated.registered_public_key(), input.metadata.registeredPublicKey) || !equalBytes(input.publicReceipt.signing_worker_verifying_share, input.metadata.signingWorkerVerifyingShare)) throw new Error("linked-device Ed25519 material metadata does not match its receipt");
-		return new WasmRouterAbEd25519YaoActiveClientV1({
-			[ACTIVE_CLIENT_CONSTRUCTION]: true,
-			metadata: input.metadata,
-			activated
-		});
-	} catch (error) {
-		activated?.free();
-		throw error;
-	} finally {
-		input.ownedClientScalarShare.fill(0);
-	}
-}
-function openVerifiedCustodyCacheActiveClient(input) {
-	let activated = null;
-	try {
-		activated = openWalletCustodyEd25519MaterialV1(input.ownedFactorSecret, input.envelope.bindingJson, input.envelope.nonce, input.envelope.ciphertext, input.envelope.aadHash, input.envelope.ciphertextDigest, input.applicationBindingDigest, input.metadata.registeredPublicKey, input.metadata.stateEpoch, input.metadata.participantIds[0], input.metadata.participantIds[1], input.metadata.signingWorkerVerifyingShare, input.sealed.nonce, input.sealed.ciphertext);
-		return new WasmRouterAbEd25519YaoActiveClientV1({
-			[ACTIVE_CLIENT_CONSTRUCTION]: true,
-			metadata: input.metadata,
-			activated
-		});
-	} catch (error) {
-		activated?.free();
-		throw error;
-	} finally {
-		input.ownedFactorSecret.fill(0);
-	}
-}
-var RouterAbEd25519YaoClientV1 = class RouterAbEd25519YaoClientV1 {
-	constructor() {}
-	static async initializeBundled() {
-		await __wbg_init();
-		return new RouterAbEd25519YaoClientV1();
-	}
-	importLocalMaterial(input) {
-		return importVerifiedActiveClient(input);
-	}
-	importLinkedMaterial(input) {
-		return importVerifiedLinkedActiveClient(input);
-	}
-	/**
-	* Opens the wallet continuity cache with any factor that opens its custody
-	* envelope — the read side cold and warm unlock share.
-	*/
-	openCustodyCache(input) {
-		return openVerifiedCustodyCacheActiveClient(input);
-	}
-	async exportSeed(args) {
-		const admissionResponse = await args.transport.send({
-			kind: "export_admit",
-			path: ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1,
-			body: buildRouterAbEd25519YaoExportAdmissionBodyV1({
-				protocol: args.request,
-				authorization: args.authorization
-			})
-		});
-		if (!admissionResponse.ok) return admissionResponse;
-		let admissionEnvelope;
-		try {
-			admissionEnvelope = parseRouterAbEd25519YaoClientExportAdmissionEnvelopeV1(admissionResponse.value);
-		} catch (error) {
-			return {
-				ok: false,
-				message: error instanceof Error ? error.message : String(error)
-			};
-		}
-		if (!exportAdmissionMatchesRequest(args.request, admissionEnvelope.protocol)) return {
-			ok: false,
-			message: "Router export admission does not match the requested exact capability"
-		};
-		let custodyEnvelope;
-		if (isPasskeyExportSeedInput(args)) {
-			if (admissionEnvelope.kind !== "protocol_only") return {
-				ok: false,
-				message: "Passkey export admission returned an Email OTP factor release"
-			};
-			custodyEnvelope = args.custodyEnvelope;
-		} else {
-			if (admissionEnvelope.kind !== "protocol_with_factor_release") return {
-				ok: false,
-				message: "Email OTP export admission did not return the matching factor release"
-			};
-			const factorRelease = admissionEnvelope.factorRelease;
-			if (!factorRelease || factorRelease.challengeId !== args.authorization.challengeId) return {
-				ok: false,
-				message: "Email OTP export admission did not return the matching factor release"
-			};
-			try {
-				custodyEnvelope = await args.resolveCustodyEnvelope(factorRelease);
-			} catch (error) {
-				return {
-					ok: false,
-					message: error instanceof Error ? error.message : String(error)
-				};
-			}
-		}
-		const entropy = createRouterAbEd25519YaoActivationEntropyV1();
-		let session;
-		try {
-			session = createExportSession({
-				admission: admissionEnvelope.protocol,
-				applicationBinding: args.request.application_binding,
-				participantIds: args.request.participant_ids,
-				custodyEnvelope,
-				entropy
-			});
-		} catch (error) {
-			return {
-				ok: false,
-				message: error instanceof Error ? error.message : String(error)
-			};
-		} finally {
-			custodyEnvelope.factorSecret.fill(0);
-			zeroizeRouterAbEd25519YaoActivationEntropyV1(entropy);
-		}
-		try {
-			const executeRequest = parseRouterAbEd25519YaoExportExecuteRequestV1(JSON.parse(session.execute_request_json()));
-			if (!executeRequest.ok) return {
-				ok: false,
-				message: executeRequest.message
-			};
-			const executeResponse = await args.transport.send({
-				kind: "export_execute",
-				path: ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1,
-				body: { protocol: executeRequest.value }
-			});
-			if (!executeResponse.ok) return executeResponse;
-			const result = parseRouterAbEd25519YaoExportResultV1(executeResponse.value);
-			if (!result.ok) return {
-				ok: false,
-				message: result.message
-			};
-			const exported = session.complete(JSON.stringify(result.value));
-			try {
-				return {
-					ok: true,
-					artifact: parseRouterAbEd25519YaoClientExportArtifactV1(exported.take_export_artifact_json())
-				};
-			} finally {
-				exported.free();
-			}
-		} catch (error) {
-			return {
-				ok: false,
-				message: error instanceof Error ? error.message : String(error)
-			};
-		} finally {
-			session.free();
-		}
-	}
-};
-//#endregion
-export { ROUTER_AB_ED25519_YAO_ACTIVE_CLIENT_KIND_V1, RouterAbEd25519YaoClientV1, RouterAbEd25519YaoHttpActivationTransportV1 };
-
-//# sourceMappingURL=yaoClient.js.map

package/dist/esm/core/signingEngine/threshold/ed25519/yaoPageLifecycleOwner.js

@@ -1,23 +0,0 @@
-//#region src/core/signingEngine/threshold/ed25519/yaoPageLifecycleOwner.ts
-var Ed25519YaoPageLifecycleOwner = class {
-	constructor(eventTarget, clientOwner) {
-		this.eventTarget = eventTarget;
-		this.clientOwner = clientOwner;
-		this.state = { kind: "active" };
-		this.handlePageHideBound = this.handlePageHide.bind(this);
-		this.eventTarget?.addEventListener("pagehide", this.handlePageHideBound);
-	}
-	handlePageHide() {
-		this.dispose();
-	}
-	dispose() {
-		if (this.state.kind === "disposed") return;
-		this.state = { kind: "disposed" };
-		this.eventTarget?.removeEventListener("pagehide", this.handlePageHideBound);
-		this.clientOwner.dispose();
-	}
-};
-//#endregion
-export { Ed25519YaoPageLifecycleOwner };
-
-//# sourceMappingURL=yaoPageLifecycleOwner.js.map