@seams/wallet 0.8.0 → 0.9.0

package/dist/esm/core/signingEngine/session/emailOtp/challengeDelivery.js

@@ -1,48 +1,4 @@
-import { requireTrimmedString } from "../../../../shared-ts/src/utils/validation.js";
 //#region src/core/signingEngine/session/emailOtp/challengeDelivery.ts
-function requireDeliveryObject(value, label) {
-	if (!value || typeof value !== "object" || Array.isArray(value)) throw new Error(`${label} must be an object`);
-	return value;
-}
-function parseDeliveryStatus(value, label) {
-	const status = requireTrimmedString(value, label);
-	switch (status) {
-		case "sent":
-		case "reused": return status;
-		default: throw new Error(`${label} must be sent or reused`);
-	}
-}
-function providerDelivery(status, emailHint) {
-	return {
-		kind: "provider",
-		status,
-		emailHint
-	};
-}
-function parseEmailOtpChallengeDelivery(value, label) {
-	const delivery = requireDeliveryObject(value, label);
-	const kind = requireTrimmedString(delivery.kind, `${label}.kind`);
-	const status = parseDeliveryStatus(delivery.status, `${label}.status`);
-	const emailHint = requireTrimmedString(delivery.emailHint, `${label}.emailHint`);
-	switch (kind) {
-		case "provider":
-		case "development":
-			if (delivery.otpCode !== void 0) throw new Error(`${label}.otpCode is only valid for code-bearing delivery`);
-			return providerDelivery(status, emailHint);
-		case "demo_code_response":
-		case "provider_and_demo_code": {
-			const otpCode = requireTrimmedString(delivery.otpCode, `${label}.otpCode`);
-			if (!/^\d{6}$/.test(otpCode)) throw new Error(`${label}.otpCode must be a 6-digit code`);
-			return {
-				kind,
-				status,
-				emailHint,
-				otpCode
-			};
-		}
-		default: throw new Error(`${label}.kind is invalid`);
-	}
-}
 function demoEmailOtpCodeFromDelivery(delivery) {
 	switch (delivery.kind) {
 		case "provider": return null;
@@ -51,6 +7,6 @@ function demoEmailOtpCodeFromDelivery(delivery) {
 	}
 }
 //#endregion
-export { demoEmailOtpCodeFromDelivery, parseEmailOtpChallengeDelivery };
+export { demoEmailOtpCodeFromDelivery };
 
 //# sourceMappingURL=challengeDelivery.js.map

package/dist/esm/core/signingEngine/session/emailOtp/ecdsaSigningSessionAuthority.js

@@ -1,13 +1,4 @@
-import { mpcMaterialActivationRefsEqual } from "../../../../shared-ts/src/utils/domainIds.js";
-import { thresholdEcdsaChainTargetsEqual } from "../../interfaces/ecdsaChainTarget.js";
-import { walletAuthAuthoritiesMatch, walletAuthAuthorityRef } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
-import { buildCanonicalEvmFamilyEcdsaSigningCapability, buildExactEvmFamilyWalletSessionAuthorization } from "../material/ecdsaSigningCapability.js";
-import { buildPersistedEcdsaRoleLocalMaterial } from "../material/ecdsaRoleLocalMaterialResolver.js";
-import { resolveExactWalletAuthAuthority } from "../identity/ownerLaneScope.js";
 //#region src/core/signingEngine/session/emailOtp/ecdsaSigningSessionAuthority.ts
-function isExactSelectedWalletAuthority(selected) {
-	return selected.kind === "resolved" && selected.authMethod.status === "active" && selected.authority.state === "active";
-}
 function emailOtpEcdsaSigningSessionAuthLane(authorization) {
 	if (authorization.selectedAuthMethod.kind !== "email_otp" || authorization.runtime.kind !== "exact_ecdsa_sealed_runtime_v1" || authorization.runtime.authBinding.kind !== "email_otp" || authorization.operationCredential.token.trim().length === 0 || authorization.runtime.sealedRecord.thresholdSessionId.trim().length === 0) throw new Error("Exact Email OTP ECDSA signing-session authorization is incomplete");
 	return {
@@ -18,78 +9,7 @@ function emailOtpEcdsaSigningSessionAuthLane(authorization) {
 		chainTarget: authorization.runtime.chainTarget
 	};
 }
-/**
-* The sealed runtime and capability manifest identify the material and Email
-* OTP authority. The selected authority and exact Wallet Session record must
-* reproduce that tuple before the signing-session lane can be built.
-*/
-async function resolveExactEmailOtpEcdsaSigningSessionAuthority(ports, args) {
-	if (args.runtime.kind !== "exact_ecdsa_sealed_runtime_v1" || args.runtime.walletId !== args.walletId || !thresholdEcdsaChainTargetsEqual(args.runtime.chainTarget, args.chainTarget) || !mpcMaterialActivationRefsEqual(args.runtime.materialActivation, args.manifest.activation.materialActivation) || args.manifest.signer.walletId !== args.walletId) return null;
-	if (args.runtime.authBinding.kind !== "email_otp") return null;
-	let runtimeAuthorityRef;
-	try {
-		runtimeAuthorityRef = await walletAuthAuthorityRef({ authority: args.runtime.authBinding.emailOtpAuthority });
-	} catch {
-		return null;
-	}
-	const manifestAuthorityRef = args.manifest.signer.authority;
-	if (runtimeAuthorityRef.walletId !== args.walletId || runtimeAuthorityRef.walletAuthMethodId !== manifestAuthorityRef.walletAuthMethodId || runtimeAuthorityRef.authorityDigest !== manifestAuthorityRef.authorityDigest || manifestAuthorityRef.walletId !== args.walletId) return null;
-	let selected;
-	try {
-		selected = await ports.resolveSelectedWalletAuthority(String(args.walletId));
-	} catch {
-		return null;
-	}
-	if (!isExactSelectedWalletAuthority(selected)) return null;
-	const { selection, authMethod, authority } = selected;
-	const ecdsaActivation = authority.signerActivations.ecdsa;
-	if (selection.lockState !== "unlocked" || selection.walletId !== args.walletId || authMethod.kind !== "email_otp" || authMethod.status !== "active" || authMethod.walletId !== args.walletId || authority.state !== "active" || authority.walletId !== args.walletId || selection.walletAuthMethodId !== authMethod.walletAuthMethodId || authMethod.walletAuthorityId !== authority.authorityId || authMethod.walletAuthMethodId !== runtimeAuthorityRef.walletAuthMethodId || !ecdsaActivation || ecdsaActivation.signer.walletId !== args.walletId || !mpcMaterialActivationRefsEqual(ecdsaActivation.materialActivation, args.runtime.materialActivation)) return null;
-	let selectedFactorAuthority;
-	try {
-		selectedFactorAuthority = await resolveExactWalletAuthAuthority({
-			authMethod,
-			stores: ports.factorStores
-		});
-	} catch {
-		return null;
-	}
-	if (!walletAuthAuthoritiesMatch(selectedFactorAuthority, args.runtime.authBinding.emailOtpAuthority)) return null;
-	let authorizationRead;
-	try {
-		authorizationRead = await ports.readExactWalletSessionAuthorization({
-			walletId: args.walletId,
-			authorityId: authority.authorityId,
-			authMethodId: authMethod.walletAuthMethodId
-		});
-	} catch {
-		return null;
-	}
-	if (authorizationRead.kind !== "found") return null;
-	const { record, operationCredential } = authorizationRead;
-	if (record.walletId !== args.walletId || record.authorityId !== authority.authorityId || record.authMethodId !== authMethod.walletAuthMethodId || record.authorityDigestB64u !== authority.authorityDigestB64u || record.authorityRevocationEpoch !== authority.revocationEpoch || record.expiresAtMs <= Date.now() || operationCredential.walletSessionId.trim().length === 0 || operationCredential.token.trim().length === 0) return null;
-	if (record.capabilitySubjects.filter((subject) => subject.kind === "sign" && subject.keyFamily === "ecdsa_secp256k1" && mpcMaterialActivationRefsEqual(subject.materialActivation, args.runtime.materialActivation)).length !== 1) return null;
-	try {
-		return buildExactEvmFamilyWalletSessionAuthorization({
-			capability: await buildCanonicalEvmFamilyEcdsaSigningCapability({
-				authority: args.runtime.authBinding.emailOtpAuthority,
-				manifest: args.manifest,
-				material: buildPersistedEcdsaRoleLocalMaterial({
-					authority: args.manifest.signer.authority,
-					materialActivation: args.manifest.activation.materialActivation,
-					publicFacts: args.manifest.durableMaterial.roleLocalPublicFacts
-				})
-			}),
-			selected,
-			session: record,
-			operationCredential,
-			runtime: args.runtime,
-			nowMs: Date.now()
-		});
-	} catch {
-		return null;
-	}
-}
 //#endregion
-export { emailOtpEcdsaSigningSessionAuthLane, resolveExactEmailOtpEcdsaSigningSessionAuthority };
+export { emailOtpEcdsaSigningSessionAuthLane };
 
 //# sourceMappingURL=ecdsaSigningSessionAuthority.js.map

package/dist/esm/core/signingEngine/session/identity/clientSessionPersistenceState.js

@@ -18,12 +18,6 @@ function authorizationIdentity(source) {
 		quotaId: source.laneIdentity.quotaId
 	};
 }
-function invalidAuthorization(args) {
-	return {
-		kind: "invalid",
-		...authorizationIdentity(args.source)
-	};
-}
 function parseBoundaryTime(value) {
 	const parsed = Number(value);
 	if (!Number.isSafeInteger(parsed) || parsed < 0) return null;
@@ -42,43 +36,7 @@ function requireAuthoritativeExpiredWalletSessionAuthorizationBoundary(args) {
 		detectedAtMs
 	};
 }
-function parseFoundAuthorization(args) {
-	const expiresAtMs = parseBoundaryTime(args.observation.expiresAtMs);
-	if (expiresAtMs === null || expiresAtMs === 0) return invalidAuthorization({ source: args.observation.source });
-	const identity = authorizationIdentity(args.observation.source);
-	if (expiresAtMs <= args.nowMs) return {
-		kind: "expired",
-		...identity,
-		expiresAtMs,
-		detectedAtMs: args.nowMs
-	};
-	return {
-		kind: "active",
-		...identity,
-		expiresAtMs
-	};
-}
-function parseWalletSessionAuthorizationBoundary(args) {
-	const nowMs = parseBoundaryTime(args.nowMs);
-	if (nowMs === null) return invalidAuthorization({ source: args.observation.source });
-	switch (args.observation.kind) {
-		case "found": return parseFoundAuthorization({
-			observation: args.observation,
-			nowMs
-		});
-		case "missing": return {
-			kind: "missing",
-			...authorizationIdentity(args.observation.source)
-		};
-		case "unavailable": return {
-			kind: "unavailable",
-			...authorizationIdentity(args.observation.source)
-		};
-		case "invalid": return invalidAuthorization({ source: args.observation.source });
-		default: return args.observation;
-	}
-}
 //#endregion
-export { parseWalletSessionAuthorizationBoundary, requireAuthoritativeExpiredWalletSessionAuthorizationBoundary };
+export { requireAuthoritativeExpiredWalletSessionAuthorizationBoundary };
 
 //# sourceMappingURL=clientSessionPersistenceState.js.map

package/dist/esm/core/signingEngine/session/identity/emailOtpEcdsaDerivationIdentity.js

@@ -1,13 +1,5 @@
 import { parseSdkEcdsaDerivationSigningRootId, parseSdkEcdsaDerivationSigningRootVersion, parseSdkEcdsaDerivationThresholdKeyId } from "../../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js";
 //#region src/core/signingEngine/session/identity/emailOtpEcdsaDerivationIdentity.ts
-function requiredEmailOtpDerivationString(value, field) {
-	const normalized = String(value ?? "").trim();
-	if (!normalized) throw new Error(`[email-otp-derivation] ${field} is required`);
-	return normalized;
-}
-function toEmailOtpAuthSubjectId(value) {
-	return requiredEmailOtpDerivationString(value, "authSubjectId");
-}
 function toEcdsaDerivationThresholdKeyId(value) {
 	return parseSdkEcdsaDerivationThresholdKeyId(value);
 }
@@ -18,6 +10,6 @@ function toEcdsaDerivationSigningRootVersion(value) {
 	return parseSdkEcdsaDerivationSigningRootVersion(value);
 }
 //#endregion
-export { toEcdsaDerivationSigningRootId, toEcdsaDerivationSigningRootVersion, toEcdsaDerivationThresholdKeyId, toEmailOtpAuthSubjectId };
+export { toEcdsaDerivationSigningRootId, toEcdsaDerivationSigningRootVersion, toEcdsaDerivationThresholdKeyId };
 
 //# sourceMappingURL=emailOtpEcdsaDerivationIdentity.js.map

package/dist/esm/core/signingEngine/session/identity/evmFamilyEcdsaIdentity.js

@@ -1,13 +1,10 @@
 import { base64UrlDecode } from "../../../../shared-ts/src/utils/base64.js";
 import { alphabetizeStringify } from "../../../../shared-ts/src/utils/digests.js";
-import { SIGNER_AUTH_METHODS } from "../../../../shared-ts/src/utils/signerDomain.js";
-import { toWalletId, walletIdFromWalletProfile } from "../../interfaces/ecdsaChainTarget.js";
 import { normalizeThresholdEd25519ParticipantIds } from "../../../../shared-ts/src/threshold/participants.js";
-import { signingRootScopeFromRuntimePolicyScope } from "../../../../shared-ts/src/threshold/signingRootScope.js";
+import { toWalletId } from "../../interfaces/ecdsaChainTarget.js";
+import { SIGNER_AUTH_METHODS } from "../../../../shared-ts/src/utils/signerDomain.js";
 import { deriveThresholdEcdsaKeyHandle } from "../../../../shared-ts/src/utils/thresholdEcdsaKeyHandle.js";
-import { deriveEvmFamilySigningKeySlotId as deriveEvmFamilySigningKeySlotId$1 } from "../../../../shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js";
 import "../../../../shared-ts/src/signing-lanes/index.js";
-import { SigningSessionIds } from "../operationState/types.js";
 //#region src/core/signingEngine/session/identity/evmFamilyEcdsaIdentity.ts
 function requiredString(value, field) {
 	const normalized = String(value ?? "").trim();
@@ -17,13 +14,6 @@ function requiredString(value, field) {
 function normalizeRpId(value) {
 	return requiredString(value, "rpId");
 }
-function deriveEvmFamilySigningKeySlotId(input) {
-	return deriveEvmFamilySigningKeySlotId$1({
-		walletId: toWalletId(input.walletId),
-		signingRootId: normalizeSigningRootId(input.signingRootId),
-		signingRootVersion: normalizeSigningRootVersion(input.signingRootVersion)
-	});
-}
 function normalizeEcdsaThresholdKeyId(value) {
 	return requiredString(value, "ecdsaThresholdKeyId");
 }
@@ -47,28 +37,6 @@ function toRpId(value) {
 function toEvmFamilyEcdsaKeyHandle(value) {
 	return requiredString(value, "keyHandle");
 }
-function resolveThresholdEcdsaKeyIdFromRecord(args) {
-	return normalizeEcdsaThresholdKeyId(String(args.record.ecdsaThresholdKeyId ?? "").trim());
-}
-function parseThresholdSigningRootBinding(input) {
-	return {
-		signingRootId: normalizeSigningRootId(input.signingRootId),
-		signingRootVersion: normalizeSigningRootVersion(input.signingRootVersion)
-	};
-}
-function resolveThresholdSigningRootBindingFromRecord(args) {
-	return parseThresholdSigningRootBinding({
-		signingRootId: args.record.signingRootId,
-		signingRootVersion: args.record.signingRootVersion
-	});
-}
-function resolveThresholdSigningRootBindingFromRuntimePolicyScope(args) {
-	const scopeBinding = signingRootScopeFromRuntimePolicyScope(args.runtimePolicyScope);
-	return parseThresholdSigningRootBinding({
-		signingRootId: scopeBinding.signingRootId,
-		signingRootVersion: scopeBinding.signingRootVersion
-	});
-}
 function toThresholdEcdsaPublicKeyB64u(value) {
 	const normalized = requiredString(value, "thresholdEcdsaPublicKeyB64u");
 	let bytes;
@@ -90,9 +58,6 @@ function normalizeParticipantIds(value) {
 	if (!participantIds?.length) throw new Error("[evm-family-ecdsa] participantIds are required");
 	return participantIds.map(toParticipantId);
 }
-function participantIdKey(participantIds) {
-	return participantIds.map((id) => String(Number(id))).join(",");
-}
 function fnv1a32Hex(input) {
 	let hash = 2166136261;
 	for (let index = 0; index < input.length; index += 1) {
@@ -122,9 +87,6 @@ function buildBaseEvmFamilyEcdsaKeyIdentity(input) {
 		thresholdOwnerAddress: input.thresholdOwnerAddress
 	});
 }
-function deriveBaseEcdsaSubjectIdFromWalletId(walletId) {
-	return walletIdFromWalletProfile({ walletId: toWalletId(walletId) });
-}
 async function deriveEvmFamilyEcdsaKeyHandle(input) {
 	return await deriveThresholdEcdsaKeyHandle(input);
 }
@@ -137,51 +99,6 @@ function buildVerifiedEcdsaPublicFacts(input) {
 		thresholdOwnerAddress: normalizeThresholdOwnerAddress(input.thresholdOwnerAddress)
 	};
 }
-function evmFamilyEcdsaWalletKeyToIdentity(walletKey) {
-	return {
-		walletId: walletKey.walletId,
-		keyScope: walletKey.keyFacts.keyScope,
-		ecdsaThresholdKeyId: walletKey.keyFacts.ecdsaThresholdKeyId,
-		signingRootId: walletKey.keyFacts.signingRootId,
-		signingRootVersion: walletKey.keyFacts.signingRootVersion,
-		participantIds: walletKey.keyFacts.participantIds,
-		thresholdOwnerAddress: walletKey.keyFacts.thresholdOwnerAddress
-	};
-}
-function buildEvmFamilyEcdsaWalletKey(input) {
-	const keyHandle = toEvmFamilyEcdsaKeyHandle(input.keyHandle);
-	const keyIdentity = buildBaseEvmFamilyEcdsaKeyIdentity(input);
-	const publicFacts = buildVerifiedEcdsaPublicFacts({
-		keyHandle,
-		publicKeyB64u: input.thresholdEcdsaPublicKeyB64u,
-		participantIds: keyIdentity.participantIds,
-		thresholdOwnerAddress: keyIdentity.thresholdOwnerAddress
-	});
-	return {
-		kind: "evm_family_ecdsa_wallet_key",
-		walletId: keyIdentity.walletId,
-		keyHandle,
-		chainTarget: input.chainTarget,
-		keyFacts: {
-			kind: "evm_family_ecdsa_key_facts",
-			keyScope: keyIdentity.keyScope,
-			ecdsaThresholdKeyId: keyIdentity.ecdsaThresholdKeyId,
-			signingRootId: keyIdentity.signingRootId,
-			signingRootVersion: keyIdentity.signingRootVersion,
-			participantIds: publicFacts.participantIds,
-			thresholdOwnerAddress: publicFacts.thresholdOwnerAddress,
-			thresholdEcdsaPublicKeyB64u: publicFacts.publicKeyB64u
-		}
-	};
-}
-function assertMatchingVerifiedEcdsaPublicFacts(args) {
-	const mismatches = [];
-	if (String(args.expected.keyHandle) !== String(args.actual.keyHandle)) mismatches.push("keyHandle");
-	if (String(args.expected.publicKeyB64u) !== String(args.actual.publicKeyB64u)) mismatches.push("publicKeyB64u");
-	if (participantIdKey(args.expected.participantIds) !== participantIdKey(args.actual.participantIds)) mismatches.push("participantIds");
-	if (String(args.expected.thresholdOwnerAddress) !== String(args.actual.thresholdOwnerAddress)) mismatches.push("thresholdOwnerAddress");
-	if (mismatches.length) throw new Error(`[evm-family-ecdsa] ${args.context} public facts mismatch: ${mismatches.join(", ")}`);
-}
 function buildPasskeyEcdsaAuthBinding(args) {
 	return {
 		kind: "passkey_ecdsa_auth_binding",
@@ -209,45 +126,6 @@ function buildHydratedEcdsaSignerMaterial(input) {
 		routerAbEcdsaDerivationNormalSigning: input.routerAbEcdsaDerivationNormalSigning
 	};
 }
-function buildEvmFamilyEcdsaSessionLanePolicy(input) {
-	const ttlMs = Math.floor(Number(input.ttlMs));
-	const remainingUses = Math.floor(Number(input.remainingUses));
-	if (!Number.isFinite(ttlMs) || ttlMs <= 0) throw new Error("[evm-family-ecdsa] ttlMs must be a positive finite value");
-	if (!Number.isFinite(remainingUses) || remainingUses <= 0) throw new Error("[evm-family-ecdsa] remainingUses must be a positive finite value");
-	return {
-		chainTarget: input.chainTarget,
-		thresholdSessionId: SigningSessionIds.thresholdEcdsaSession(input.thresholdSessionId),
-		ttlMs,
-		remainingUses,
-		runtimePolicyScope: input.runtimePolicyScope
-	};
-}
-function buildEvmFamilyEcdsaRecoveredMaterialLanePolicy(input) {
-	const ttlMs = Math.floor(Number(input.ttlMs));
-	const remainingUses = Math.floor(Number(input.remainingUses));
-	if (!Number.isFinite(ttlMs) || ttlMs <= 0) throw new Error("[evm-family-ecdsa] ttlMs must be a positive finite value");
-	if (!Number.isFinite(remainingUses) || remainingUses <= 0) throw new Error("[evm-family-ecdsa] remainingUses must be a positive finite value");
-	return {
-		chainTarget: input.chainTarget,
-		thresholdSessionId: SigningSessionIds.thresholdEcdsaSession(input.thresholdSessionId),
-		ttlMs,
-		remainingUses,
-		runtimePolicyScope: input.runtimePolicyScope
-	};
-}
-function deriveEvmFamilyKeyFingerprint(key) {
-	return `evmfam-ecdsa:${fnv1a32Hex(alphabetizeStringify({
-		version: "evm_family_ecdsa_key_fingerprint_v2",
-		walletId: String(key.walletId),
-		baseEcdsaSubjectId: String(deriveBaseEcdsaSubjectIdFromWalletId(key.walletId)),
-		keyScope: key.keyScope,
-		ecdsaThresholdKeyId: String(key.ecdsaThresholdKeyId),
-		signingRootId: String(key.signingRootId),
-		signingRootVersion: String(key.signingRootVersion),
-		participantIds: key.participantIds.map((id) => Number(id)),
-		thresholdOwnerAddress: String(key.thresholdOwnerAddress)
-	}))}`;
-}
 function deriveEvmFamilyKeyFingerprintFromPublicFacts(input) {
 	return `evmfam-ecdsa:${fnv1a32Hex(alphabetizeStringify({
 		version: "evm_family_ecdsa_public_facts_fingerprint_v1",
@@ -259,6 +137,6 @@ function deriveEvmFamilyKeyFingerprintFromPublicFacts(input) {
 	}))}`;
 }
 //#endregion
-export { assertMatchingVerifiedEcdsaPublicFacts, buildBaseEvmFamilyEcdsaKeyIdentity, buildEvmFamilyEcdsaRecoveredMaterialLanePolicy, buildEvmFamilyEcdsaSessionLanePolicy, buildEvmFamilyEcdsaWalletKey, buildHydratedEcdsaSignerMaterial, buildPasskeyEcdsaAuthBinding, buildResolvedEvmFamilyEcdsaKey, buildVerifiedEcdsaPublicFacts, deriveEvmFamilyEcdsaKeyHandle, deriveEvmFamilyKeyFingerprint, deriveEvmFamilyKeyFingerprintFromPublicFacts, deriveEvmFamilySigningKeySlotId, evmFamilyEcdsaWalletKeyToIdentity, parseThresholdSigningRootBinding, resolveThresholdEcdsaKeyIdFromRecord, resolveThresholdSigningRootBindingFromRecord, resolveThresholdSigningRootBindingFromRuntimePolicyScope, toEvmFamilyEcdsaKeyHandle, toParticipantId, toRpId, toThresholdEcdsaPublicKeyB64u, toThresholdOwnerAddress };
+export { buildBaseEvmFamilyEcdsaKeyIdentity, buildHydratedEcdsaSignerMaterial, buildPasskeyEcdsaAuthBinding, buildResolvedEvmFamilyEcdsaKey, buildVerifiedEcdsaPublicFacts, deriveEvmFamilyEcdsaKeyHandle, deriveEvmFamilyKeyFingerprintFromPublicFacts, toEvmFamilyEcdsaKeyHandle, toParticipantId, toRpId, toThresholdOwnerAddress };
 
 //# sourceMappingURL=evmFamilyEcdsaIdentity.js.map

package/dist/esm/core/signingEngine/session/identity/exactSigningLaneIdentity.js

@@ -1,9 +1,9 @@
 import { parseMpcMaterialActivationRef } from "../../../../shared-ts/src/utils/domainIds.js";
 import { alphabetizeStringify } from "../../../../shared-ts/src/utils/digests.js";
-import { isImplicitNearAccountId, parseNearAccountId } from "../../../../shared-ts/src/utils/near.js";
-import { buildImplicitNearAccountBinding, buildNamedNearAccountBinding, buildNearEd25519SignerBinding, buildWalletIdentity, nearEd25519SignerBindingFromRaw } from "../../../../shared-ts/src/utils/walletCapabilityBindings.js";
 import { thresholdEcdsaChainTargetFromRequest, thresholdEcdsaChainTargetKey, toWalletId } from "../../interfaces/ecdsaChainTarget.js";
+import { isImplicitNearAccountId, parseNearAccountId } from "../../../../shared-ts/src/utils/near.js";
 import { SigningSessionIds } from "../operationState/types.js";
+import { buildImplicitNearAccountBinding, buildNamedNearAccountBinding, buildNearEd25519SignerBinding, buildWalletIdentity, nearEd25519SignerBindingFromRaw } from "../../../../shared-ts/src/utils/walletCapabilityBindings.js";
 import { buildBaseEvmFamilyEcdsaKeyIdentity, toEvmFamilyEcdsaKeyHandle, toRpId } from "./evmFamilyEcdsaIdentity.js";
 //#region src/core/signingEngine/session/identity/exactSigningLaneIdentity.ts
 function assertNeverExactLane(value) {
@@ -316,23 +316,7 @@ function requireEvmFamilyEcdsaSigner(identity, context) {
 	if (identity.signer.kind !== "evm_family_ecdsa_signer") throw new Error(`[SigningSession] ${context} requires an EVM-family ECDSA signer`);
 	return identity.signer;
 }
-function requireNearEd25519Signer(identity, context) {
-	if (identity.signer.kind !== "near_ed25519_signer") throw new Error(`[SigningSession] ${context} requires a NEAR Ed25519 signer`);
-	return identity.signer;
-}
-function nearProtocolProjectionFromExactLane(identity, context = "NEAR protocol projection") {
-	const signer = requireNearEd25519Signer(identity, context);
-	return {
-		walletId: signer.account.wallet.walletId,
-		nearAccountId: signer.account.nearAccountId,
-		nearEd25519SigningKeyId: signer.nearEd25519SigningKeyId,
-		signerSlot: signer.signerSlot
-	};
-}
-function exactSigningLaneIdentityMatches(left, right) {
-	return exactSigningLaneIdentityKey(left) === exactSigningLaneIdentityKey(right);
-}
 //#endregion
-export { buildEvmFamilyEcdsaSignerBinding, exactEcdsaSigningLaneIdentity, exactEcdsaSigningLaneIdentityFromSelectedLane, exactEd25519ExportMaterialIdentity, exactEd25519SigningLaneIdentity, exactEd25519SigningLaneIdentityFromSelectedLane, exactSigningLaneIdentityFromSelectedLane, exactSigningLaneIdentityKey, exactSigningLaneIdentityMatches, exactSigningLaneWalletId, isExactEcdsaSigningLaneIdentity, nearEd25519SignerBindingFromBoundaryFields, nearProtocolProjectionFromExactLane, parseExactEcdsaSigningLaneIdentity, parseExactEd25519ExportMaterialIdentity, requireEvmFamilyEcdsaSigner };
+export { buildEvmFamilyEcdsaSignerBinding, exactEcdsaSigningLaneIdentity, exactEcdsaSigningLaneIdentityFromSelectedLane, exactEd25519SigningLaneIdentity, exactEd25519SigningLaneIdentityFromSelectedLane, exactSigningLaneIdentityFromSelectedLane, exactSigningLaneIdentityKey, exactSigningLaneWalletId, nearEd25519SignerBindingFromBoundaryFields, parseExactEcdsaSigningLaneIdentity, parseExactEd25519ExportMaterialIdentity, requireEvmFamilyEcdsaSigner };
 
 //# sourceMappingURL=exactSigningLaneIdentity.js.map

package/dist/esm/core/signingEngine/session/identity/laneIdentity.js

@@ -1,104 +1,9 @@
 import { signingLaneAuthMethod } from "./signingLaneAuthBinding.js";
 import { SigningSessionIds } from "../operationState/types.js";
+import { parseSignerSlot } from "../../../../shared-ts/src/utils/signerSlot.js";
 import { toEvmFamilyEcdsaKeyHandle } from "./evmFamilyEcdsaIdentity.js";
 import { buildEvmFamilyEcdsaSignerBinding, exactEcdsaSigningLaneIdentity, exactEd25519SigningLaneIdentity, nearEd25519SignerBindingFromBoundaryFields } from "./exactSigningLaneIdentity.js";
-import { parseSignerSlot } from "../../../../shared-ts/src/utils/signerSlot.js";
-import { buildEmailOtpWalletAuthAuthority, emailOtpWalletAuthAuthorityEmailHashHex, emailOtpWalletAuthAuthorityProvider, emailOtpWalletAuthAuthorityProviderUserId } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
 //#region src/core/signingEngine/session/identity/laneIdentity.ts
-function emailOtpAuthContextProviderUserId(context) {
-	return String(emailOtpWalletAuthAuthorityProviderUserId(context.authority));
-}
-function emailOtpAuthContextProvider(context) {
-	return emailOtpWalletAuthAuthorityProvider(context.authority);
-}
-function emailOtpAuthContextEmailHashHex(context) {
-	return emailOtpWalletAuthAuthorityEmailHashHex(context.authority);
-}
-function emailOtpAuthContextRetention(context) {
-	switch (context.use.kind) {
-		case "session": return "session";
-		case "single_use_pending":
-		case "single_use_consumed": return "single_use";
-	}
-	context.use;
-	throw new Error("[SigningSession] unsupported Email OTP auth use");
-}
-function emailOtpAuthContextConsumedAtMs(context) {
-	return context.use.kind === "single_use_consumed" ? context.use.consumedAtMs : null;
-}
-function isEmailOtpSessionAuthContext(context) {
-	return context.use.kind === "session";
-}
-function isEmailOtpPendingSingleUseAuthContext(context) {
-	return context.use.kind === "single_use_pending";
-}
-function buildEmailOtpAuthContext(args) {
-	if (args.policy === "per_operation" && args.retention !== "single_use") throw new Error("Invalid Email OTP auth context: per-operation sessions must be single-use");
-	if (args.retention === "single_use" && Object.prototype.hasOwnProperty.call(args, "reason")) throw new Error("Invalid Email OTP auth context: single-use sessions must not carry reason");
-	const consumedAtMs = Math.floor(Number(args.consumedAtMs) || 0);
-	const use = args.retention === "session" ? {
-		kind: "session",
-		reason: args.reason
-	} : consumedAtMs > 0 ? {
-		kind: "single_use_consumed",
-		consumedAtMs
-	} : { kind: "single_use_pending" };
-	return {
-		policy: args.policy,
-		authMethod: "email_otp",
-		authority: args.authority,
-		use
-	};
-}
-function buildEmailOtpAuthContextForWalletAuthMethod(args) {
-	const authority = args.authority;
-	if (args.retention === "session") return buildEmailOtpAuthContext({
-		policy: args.policy,
-		reason: args.reason,
-		retention: "session",
-		authority
-	});
-	if (Object.prototype.hasOwnProperty.call(args, "reason")) throw new Error("Invalid Email OTP auth context: single-use sessions must not carry reason");
-	const consumedAtMs = Math.floor(Number(args.consumedAtMs) || 0);
-	if (consumedAtMs > 0) return buildEmailOtpAuthContext({
-		policy: args.policy,
-		retention: "single_use",
-		authority,
-		consumedAtMs
-	});
-	return buildEmailOtpAuthContext({
-		policy: args.policy,
-		retention: "single_use",
-		authority
-	});
-}
-function buildEmailOtpAuthContextForCanonicalWallet(args) {
-	const authority = buildEmailOtpWalletAuthAuthority({
-		walletId: args.walletId,
-		provider: args.provider,
-		providerUserId: args.providerUserId,
-		emailHashHex: args.emailHashHex
-	});
-	if (args.retention === "session") return buildEmailOtpAuthContext({
-		policy: args.policy,
-		reason: args.reason,
-		retention: "session",
-		authority
-	});
-	if (Object.prototype.hasOwnProperty.call(args, "reason")) throw new Error("Invalid Email OTP auth context: single-use sessions must not carry reason");
-	const consumedAtMs = Math.floor(Number(args.consumedAtMs) || 0);
-	if (consumedAtMs > 0) return buildEmailOtpAuthContext({
-		policy: args.policy,
-		retention: "single_use",
-		authority,
-		consumedAtMs
-	});
-	return buildEmailOtpAuthContext({
-		policy: args.policy,
-		retention: "single_use",
-		authority
-	});
-}
 function selectedEd25519Lane(input) {
 	const signerSlot = parseSignerSlot(input.signerSlot);
 	if (signerSlot == null) throw new Error("[SigningSession] selected Ed25519 lane requires signerSlot >= 1");
@@ -150,19 +55,10 @@ function selectedEcdsaLane(input) {
 		authorization: input.authorization
 	};
 }
-/** Shared classification of a session's runtime allowance and expiry. Expiry
-* is checked before exhaustion so an expired session is never reported as
-* merely out of uses. */
-function laneCandidateStateFromRuntimePolicy(args) {
-	const nowMs = Math.floor(Number(args.nowMs) || Date.now());
-	if (args.expiresAtMs <= nowMs) return "expired";
-	if (args.remainingUses <= 0) return "exhausted";
-	return "ready";
-}
 function laneCandidateAuthMethod(candidate) {
 	return signingLaneAuthMethod(candidate.auth);
 }
 //#endregion
-export { buildEmailOtpAuthContext, buildEmailOtpAuthContextForCanonicalWallet, buildEmailOtpAuthContextForWalletAuthMethod, emailOtpAuthContextConsumedAtMs, emailOtpAuthContextEmailHashHex, emailOtpAuthContextProvider, emailOtpAuthContextProviderUserId, emailOtpAuthContextRetention, isEmailOtpPendingSingleUseAuthContext, isEmailOtpSessionAuthContext, laneCandidateAuthMethod, laneCandidateStateFromRuntimePolicy, selectedEcdsaLane, selectedEd25519Lane };
+export { laneCandidateAuthMethod, selectedEcdsaLane, selectedEd25519Lane };
 
 //# sourceMappingURL=laneIdentity.js.map

package/dist/esm/core/signingEngine/session/keyMaterialBrands.js

@@ -70,6 +70,6 @@ function parseEcdsaRoleLocalWorkerHandle(value) {
 	};
 }
 //#endregion
-export { parseEcdsaClientVerifyingPublicKey33B64u, parseEcdsaRoleLocalBindingDigest, parseEcdsaRoleLocalDurableMaterialRef, parseEcdsaRoleLocalMaterialHandle, parseEcdsaRoleLocalPersistedMaterialRef, parseEcdsaRoleLocalWorkerHandle, parseEcdsaThresholdKeyId };
+export { parseEcdsaClientVerifyingPublicKey33B64u, parseEcdsaRoleLocalBindingDigest, parseEcdsaRoleLocalDurableMaterialRef, parseEcdsaRoleLocalPersistedMaterialRef, parseEcdsaRoleLocalWorkerHandle, parseEcdsaThresholdKeyId };
 
 //# sourceMappingURL=keyMaterialBrands.js.map

package/dist/esm/core/signingEngine/session/lifecycle/walletSessionFailure.js

@@ -64,6 +64,6 @@ function walletSessionFailureFromError(error) {
 	return null;
 }
 //#endregion
-export { WalletSessionFailureError, walletSessionFailureErrorFromPayload, walletSessionFailureFromCode, walletSessionFailureFromError };
+export { WalletSessionFailureError, walletSessionFailureErrorFromPayload, walletSessionFailureFromError };
 
 //# sourceMappingURL=walletSessionFailure.js.map