@tatchi-xyz/sdk 0.21.0 → 0.31.0

package/dist/types/src/server/router/express-adaptor.d.ts

@@ -1,55 +1,5 @@
-import type { Router as ExpressRouter } from 'express';
-import type { AuthService } from '../core/AuthService';
-import type { DelegateActionPolicy } from '../delegateAction';
-import type { RouterLogger } from './logger';
-export interface RelayRouterOptions {
-    healthz?: boolean;
-    readyz?: boolean;
-    corsOrigins?: Array<string | undefined>;
-    /**
-     * Optional route for submitting NEP-461 SignedDelegate meta-transactions.
-     *
-     * - When omitted: disabled.
-     * - When set: enabled at `route`.
-     *
-     * `policy` is server-controlled and is never read from the request body.
-     */
-    signedDelegate?: {
-        route: string;
-        policy?: DelegateActionPolicy;
-    };
-    sessionRoutes?: {
-        auth?: string;
-        logout?: string;
-    };
-    session?: SessionAdapter | null;
-    logger?: RouterLogger | null;
-}
-export interface SessionAdapter {
-    signJwt(sub: string, extra?: Record<string, unknown>): Promise<string>;
-    parse(headers: Record<string, string | string[] | undefined>): Promise<{
-        ok: boolean;
-        claims?: any;
-    } | {
-        ok: false;
-    }>;
-    buildSetCookie(token: string): string;
-    buildClearCookie(): string;
-    refresh(headers: Record<string, string | string[] | undefined>): Promise<{
-        ok: boolean;
-        jwt?: string;
-        code?: string;
-        message?: string;
-    }>;
-}
-export declare function createRelayRouter(service: AuthService, opts?: RelayRouterOptions): ExpressRouter;
-export interface KeyRotationCronOptions {
-    enabled?: boolean;
-    intervalMinutes?: number;
-    maxGraceKeys?: number;
-    logger?: RouterLogger | null;
-}
-export declare function startKeyRotationCronjob(service: AuthService, opts?: KeyRotationCronOptions): {
-    stop(): void;
-};
+export type { RelayRouterOptions, SessionAdapter, ThresholdSigningAdapter, ThresholdEd25519RegistrationKeygenResult, } from './relay';
+export { createRelayRouter } from './express/createRelayRouter';
+export type { KeyRotationCronOptions } from './express/cron';
+export { startKeyRotationCronjob } from './express/cron';
 //# sourceMappingURL=express-adaptor.d.ts.map

package/dist/types/src/server/router/express-adaptor.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"express-adaptor.d.ts","sourceRoot":"","sources":["../../../../../src/server/router/express-adaptor.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAqB,MAAM,IAAI,aAAa,EAAE,MAAM,SAAS,CAAC;AAE1E,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AAWvD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAG7C,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IAGjB,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;;;;;;OAOG;IACH,cAAc,CAAC,EAAE;QACf,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,oBAAoB,CAAC;KAC/B,CAAC;IACF,aAAa,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAEhC,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CAC9B;AAkCD,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,MAAM,CAAC,EAAE,GAAG,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;IACtH,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,gBAAgB,IAAI,MAAM,CAAC;IAC3B,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1I;AAED,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,GAAE,kBAAuB,GAAG,aAAa,CAiYpG;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CAC9B;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,WAAW,EACpB,IAAI,GAAE,sBAA2B,GAChC;IAAE,IAAI,IAAI,IAAI,CAAA;CAAE,CA6DlB"}
+{"version":3,"file":"express-adaptor.d.ts","sourceRoot":"","sources":["../../../../../src/server/router/express-adaptor.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,kBAAkB,EAClB,cAAc,EACd,uBAAuB,EACvB,wCAAwC,GACzC,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,iBAAiB,EAAE,MAAM,6BAA6B,CAAC;AAChE,YAAY,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC"}

package/dist/types/src/server/router/logger.d.ts

@@ -1,6 +1,7 @@
 import type { Logger, NormalizedLogger } from '../core/logger';
-import { normalizeLogger } from '../core/logger';
 export type RouterLogger = Logger;
 export type NormalizedRouterLogger = NormalizedLogger;
-export declare const normalizeRouterLogger: typeof normalizeLogger;
+export declare const coerceRouterLogger: typeof import("../core/logger").normalizeLogger;
+/** @deprecated use `coerceRouterLogger` */
+export declare const normalizeRouterLogger: typeof import("../core/logger").normalizeLogger;
 //# sourceMappingURL=logger.d.ts.map

package/dist/types/src/server/router/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../../../src/server/router/logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAC/D,OAAO,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEjD,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAClC,MAAM,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AACtD,eAAO,MAAM,qBAAqB,wBAAkB,CAAC"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../../../../src/server/router/logger.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AAG/D,MAAM,MAAM,YAAY,GAAG,MAAM,CAAC;AAClC,MAAM,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AACtD,eAAO,MAAM,kBAAkB,iDAAe,CAAC;AAC/C,2CAA2C;AAC3C,eAAO,MAAM,qBAAqB,iDAAqB,CAAC"}

package/dist/types/src/server/router/relay.d.ts

@@ -0,0 +1,93 @@
+import type { DelegateActionPolicy } from '../delegateAction';
+import type { RouterLogger } from './logger';
+import type { ThresholdEd25519AuthorizeWithSessionRequest, ThresholdEd25519AuthorizeRequest, ThresholdEd25519AuthorizeResponse, ThresholdEd25519CosignFinalizeRequest, ThresholdEd25519CosignFinalizeResponse, ThresholdEd25519CosignInitRequest, ThresholdEd25519CosignInitResponse, ThresholdEd25519KeygenRequest, ThresholdEd25519KeygenResponse, ThresholdEd25519SessionRequest, ThresholdEd25519SessionResponse, ThresholdEd25519SignFinalizeRequest, ThresholdEd25519SignFinalizeResponse, ThresholdEd25519SignInitRequest, ThresholdEd25519SignInitResponse } from '../core/types';
+export type SessionClaims = Record<string, unknown>;
+export type SessionKind = 'cookie' | 'jwt';
+export declare function parseSessionKind(body: unknown): SessionKind;
+export interface SessionAdapter {
+    signJwt(sub: string, extra?: Record<string, unknown>): Promise<string>;
+    parse(headers: Record<string, string | string[] | undefined>): Promise<{
+        ok: true;
+        claims: SessionClaims;
+    } | {
+        ok: false;
+    }>;
+    buildSetCookie(token: string): string;
+    buildClearCookie(): string;
+    refresh(headers: Record<string, string | string[] | undefined>): Promise<{
+        ok: boolean;
+        jwt?: string;
+        code?: string;
+        message?: string;
+    }>;
+}
+export type ThresholdEd25519RegistrationKeygenResult = {
+    ok: true;
+    clientParticipantId: number;
+    relayerParticipantId: number;
+    participantIds: number[];
+    relayerKeyId: string;
+    publicKey: string;
+    relayerSigningShareB64u: string;
+    relayerVerifyingShareB64u: string;
+} | {
+    ok: false;
+    code: string;
+    message: string;
+};
+export interface ThresholdSigningAdapter {
+    keygenFromClientVerifyingShareForRegistration(input: {
+        nearAccountId: string;
+        rpId: string;
+        clientVerifyingShareB64u: string;
+    }): Promise<ThresholdEd25519RegistrationKeygenResult>;
+    putRelayerKeyMaterial(input: {
+        relayerKeyId: string;
+        publicKey: string;
+        relayerSigningShareB64u: string;
+        relayerVerifyingShareB64u: string;
+    }): Promise<void>;
+    thresholdEd25519Keygen(request: ThresholdEd25519KeygenRequest): Promise<ThresholdEd25519KeygenResponse>;
+    authorizeThresholdEd25519(request: ThresholdEd25519AuthorizeRequest): Promise<ThresholdEd25519AuthorizeResponse>;
+    authorizeThresholdEd25519WithSession(input: {
+        sessionId: string;
+        userId: string;
+        request: ThresholdEd25519AuthorizeWithSessionRequest;
+    }): Promise<ThresholdEd25519AuthorizeResponse>;
+    thresholdEd25519Session(request: ThresholdEd25519SessionRequest): Promise<ThresholdEd25519SessionResponse>;
+    thresholdEd25519SignInit(request: ThresholdEd25519SignInitRequest): Promise<ThresholdEd25519SignInitResponse>;
+    thresholdEd25519SignFinalize(request: ThresholdEd25519SignFinalizeRequest): Promise<ThresholdEd25519SignFinalizeResponse>;
+    /**
+     * Internal coordinator→cosigner cosigning API (optional).
+     * When omitted, relayer-fleet cosigning mode is unsupported.
+     */
+    thresholdEd25519CosignInit?: (request: ThresholdEd25519CosignInitRequest) => Promise<ThresholdEd25519CosignInitResponse>;
+    thresholdEd25519CosignFinalize?: (request: ThresholdEd25519CosignFinalizeRequest) => Promise<ThresholdEd25519CosignFinalizeResponse>;
+}
+export interface RelayRouterOptions {
+    healthz?: boolean;
+    readyz?: boolean;
+    /**
+     * Optional list(s) of CORS origins (CSV strings or literal origins).
+     * Pass raw strings; the router normalizes/merges internally.
+     */
+    corsOrigins?: Array<string | undefined>;
+    /**
+     * Optional route for submitting NEP-461 SignedDelegate meta-transactions.
+     * - When omitted: disabled.
+     * - When set: enabled at `route`.
+     * `policy` is server-controlled and is never read from the request body.
+     */
+    signedDelegate?: {
+        route: string;
+        policy?: DelegateActionPolicy;
+    };
+    sessionRoutes?: {
+        auth?: string;
+        logout?: string;
+    };
+    session?: SessionAdapter | null;
+    threshold?: ThresholdSigningAdapter | null;
+    logger?: RouterLogger | null;
+}
+//# sourceMappingURL=relay.d.ts.map

package/dist/types/src/server/router/relay.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"relay.d.ts","sourceRoot":"","sources":["../../../../../src/server/router/relay.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAC;AAC9D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAC;AAC7C,OAAO,KAAK,EACV,2CAA2C,EAC3C,gCAAgC,EAChC,iCAAiC,EACjC,qCAAqC,EACrC,sCAAsC,EACtC,iCAAiC,EACjC,kCAAkC,EAClC,6BAA6B,EAC7B,8BAA8B,EAC9B,8BAA8B,EAC9B,+BAA+B,EAC/B,mCAAmC,EACnC,oCAAoC,EACpC,+BAA+B,EAC/B,gCAAgC,EACjC,MAAM,eAAe,CAAC;AAGvB,MAAM,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAEpD,MAAM,MAAM,WAAW,GAAG,QAAQ,GAAG,KAAK,CAAC;AAE3C,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,OAAO,GAAG,WAAW,CAM3D;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACvE,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,IAAI,CAAC;QAAC,MAAM,EAAE,aAAa,CAAA;KAAE,GAAG;QAAE,EAAE,EAAE,KAAK,CAAA;KAAE,CAAC,CAAC;IAC5H,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAAC;IACtC,gBAAgB,IAAI,MAAM,CAAC;IAC3B,OAAO,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GAAG,SAAS,CAAC,GAAG,OAAO,CAAC;QAAE,EAAE,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC1I;AAED,MAAM,MAAM,wCAAwC,GAChD;IACE,EAAE,EAAE,IAAI,CAAC;IACT,mBAAmB,EAAE,MAAM,CAAC;IAC5B,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,MAAM,CAAC;IAChC,yBAAyB,EAAE,MAAM,CAAC;CACnC,GACD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAEjD,MAAM,WAAW,uBAAuB;IACtC,6CAA6C,CAAC,KAAK,EAAE;QACnD,aAAa,EAAE,MAAM,CAAC;QACtB,IAAI,EAAE,MAAM,CAAC;QACb,wBAAwB,EAAE,MAAM,CAAC;KAClC,GAAG,OAAO,CAAC,wCAAwC,CAAC,CAAC;IACtD,qBAAqB,CAAC,KAAK,EAAE;QAC3B,YAAY,EAAE,MAAM,CAAC;QACrB,SAAS,EAAE,MAAM,CAAC;QAClB,uBAAuB,EAAE,MAAM,CAAC;QAChC,yBAAyB,EAAE,MAAM,CAAC;KACnC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAClB,sBAAsB,CAAC,OAAO,EAAE,6BAA6B,GAAG,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACxG,yBAAyB,CAAC,OAAO,EAAE,gCAAgC,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;IACjH,oCAAoC,CAAC,KAAK,EAAE;QAC1C,SAAS,EAAE,MAAM,CAAC;QAClB,MAAM,EAAE,MAAM,CAAC;QACf,OAAO,EAAE,2CAA2C,CAAC;KACtD,GAAG,OAAO,CAAC,iCAAiC,CAAC,CAAC;IAC/C,uBAAuB,CAAC,OAAO,EAAE,8BAA8B,GAAG,OAAO,CAAC,+BAA+B,CAAC,CAAC;IAC3G,wBAAwB,CAAC,OAAO,EAAE,+BAA+B,GAAG,OAAO,CAAC,gCAAgC,CAAC,CAAC;IAC9G,4BAA4B,CAAC,OAAO,EAAE,mCAAmC,GAAG,OAAO,CAAC,oCAAoC,CAAC,CAAC;IAC1H;;;OAGG;IACH,0BAA0B,CAAC,EAAE,CAAC,OAAO,EAAE,iCAAiC,KAAK,OAAO,CAAC,kCAAkC,CAAC,CAAC;IACzH,8BAA8B,CAAC,EAAE,CAAC,OAAO,EAAE,qCAAqC,KAAK,OAAO,CAAC,sCAAsC,CAAC,CAAC;CACtI;AAED,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB;;;OAGG;IACH,WAAW,CAAC,EAAE,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;;;;OAKG;IACH,cAAc,CAAC,EAAE;QACf,KAAK,EAAE,MAAM,CAAC;QACd,MAAM,CAAC,EAAE,oBAAoB,CAAC;KAC/B,CAAC;IAEF,aAAa,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAEnD,OAAO,CAAC,EAAE,cAAc,GAAG,IAAI,CAAC;IAEhC,SAAS,CAAC,EAAE,uBAAuB,GAAG,IAAI,CAAC;IAE3C,MAAM,CAAC,EAAE,YAAY,GAAG,IAAI,CAAC;CAC9B"}

package/dist/types/src/server/router/routerOptions.d.ts

@@ -0,0 +1,4 @@
+import type { AuthService } from '../core/AuthService';
+import type { RelayRouterOptions } from './relay';
+export declare function resolveThresholdOption(service: AuthService, opts: RelayRouterOptions): RelayRouterOptions['threshold'];
+//# sourceMappingURL=routerOptions.d.ts.map

package/dist/types/src/server/router/routerOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routerOptions.d.ts","sourceRoot":"","sources":["../../../../../src/server/router/routerOptions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,qBAAqB,CAAC;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,SAAS,CAAC;AAElD,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,kBAAkB,GAAG,kBAAkB,CAAC,WAAW,CAAC,CAKtH"}

package/dist/types/src/server/threshold/statusCodes.d.ts

@@ -0,0 +1,6 @@
+export type ThresholdEd25519RouteResult = {
+    ok: boolean;
+    code?: string;
+};
+export declare function thresholdEd25519StatusCode(result: ThresholdEd25519RouteResult): number;
+//# sourceMappingURL=statusCodes.d.ts.map

package/dist/types/src/server/threshold/statusCodes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"statusCodes.d.ts","sourceRoot":"","sources":["../../../../../src/server/threshold/statusCodes.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,2BAA2B,GAAG;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEzE,wBAAgB,0BAA0B,CAAC,MAAM,EAAE,2BAA2B,GAAG,MAAM,CAgBtF"}

package/dist/types/src/threshold/participants.d.ts

@@ -0,0 +1,41 @@
+export type ThresholdParticipantRole = 'client' | 'relayer';
+import { THRESHOLD_ED25519_CLIENT_PARTICIPANT_ID, THRESHOLD_ED25519_RELAYER_PARTICIPANT_ID, THRESHOLD_ED25519_2P_PARTICIPANT_IDS } from '../core/defaultConfigs';
+export { THRESHOLD_ED25519_CLIENT_PARTICIPANT_ID, THRESHOLD_ED25519_RELAYER_PARTICIPANT_ID, THRESHOLD_ED25519_2P_PARTICIPANT_IDS, };
+/**
+ * Metadata describing how a participant share is derived/stored.
+ * This is informational in v1 and may be used for validation/policy later.
+ */
+export type ThresholdEd25519ShareDerivation = 'prf_first_v1' | 'derived_master_secret_v1' | 'kv_random_v1' | 'unknown';
+export interface ThresholdEd25519ParticipantV1 {
+    /** FROST identifier (1-indexed). */
+    id: number;
+    role: ThresholdParticipantRole;
+    /** Optional relayer endpoint for this participant (future multi-relayer support). */
+    relayerUrl?: string;
+    /** Key/share identifier understood by this participant (e.g. relayerKeyId). */
+    relayerKeyId?: string;
+    /** Base64url-encoded 32-byte verifying share (compressed EdwardsY). */
+    verifyingShareB64u?: string;
+    shareDerivation?: ThresholdEd25519ShareDerivation;
+}
+export declare const THRESHOLD_ED25519_PARTICIPANT_SET_V1: "threshold_ed25519_participants_v1";
+export interface ThresholdEd25519ParticipantSetV1 {
+    version: typeof THRESHOLD_ED25519_PARTICIPANT_SET_V1;
+    groupPublicKey: string;
+    participants: ThresholdEd25519ParticipantV1[];
+}
+export declare function normalizeThresholdEd25519ParticipantId(id: unknown): number | null;
+export declare function normalizeThresholdEd25519ParticipantIds(input: unknown): number[] | null;
+export declare function areThresholdEd25519ParticipantIds2p(participantIds: number[] | null | undefined, expected?: readonly number[]): boolean;
+export declare function parseThresholdEd25519ParticipantsV1(input: unknown): ThresholdEd25519ParticipantV1[] | null;
+export declare function buildThresholdEd25519Participants2pV1(input: {
+    clientParticipantId?: number | null;
+    relayerParticipantId?: number | null;
+    relayerKeyId: string;
+    relayerUrl?: string | null;
+    clientVerifyingShareB64u?: string | null;
+    relayerVerifyingShareB64u?: string | null;
+    clientShareDerivation?: ThresholdEd25519ShareDerivation | null;
+    relayerShareDerivation?: ThresholdEd25519ShareDerivation | null;
+}): ThresholdEd25519ParticipantV1[];
+//# sourceMappingURL=participants.d.ts.map

package/dist/types/src/threshold/participants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"participants.d.ts","sourceRoot":"","sources":["../../../../src/threshold/participants.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,wBAAwB,GAAG,QAAQ,GAAG,SAAS,CAAC;AAG5D,OAAO,EACL,uCAAuC,EACvC,wCAAwC,EACxC,oCAAoC,EACrC,MAAM,wBAAwB,CAAC;AAEhC,OAAO,EACL,uCAAuC,EACvC,wCAAwC,EACxC,oCAAoC,GACrC,CAAC;AAEF;;;GAGG;AACH,MAAM,MAAM,+BAA+B,GACvC,cAAc,GACd,0BAA0B,GAC1B,cAAc,GACd,SAAS,CAAC;AAEd,MAAM,WAAW,6BAA6B;IAC5C,oCAAoC;IACpC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,wBAAwB,CAAC;IAC/B,qFAAqF;IACrF,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,+EAA+E;IAC/E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,kBAAkB,CAAC,EAAE,MAAM,CAAC;IAC5B,eAAe,CAAC,EAAE,+BAA+B,CAAC;CACnD;AAED,eAAO,MAAM,oCAAoC,EAAG,mCAA4C,CAAC;AAEjG,MAAM,WAAW,gCAAgC;IAC/C,OAAO,EAAE,OAAO,oCAAoC,CAAC;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,6BAA6B,EAAE,CAAC;CAC/C;AAED,wBAAgB,sCAAsC,CAAC,EAAE,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAIjF;AAED,wBAAgB,uCAAuC,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,GAAG,IAAI,CAcvF;AAED,wBAAgB,mCAAmC,CACjD,cAAc,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,EAC3C,QAAQ,GAAE,SAAS,MAAM,EAAyC,GACjE,OAAO,CAMT;AAED,wBAAgB,mCAAmC,CAAC,KAAK,EAAE,OAAO,GAAG,6BAA6B,EAAE,GAAG,IAAI,CAwC1G;AAED,wBAAgB,qCAAqC,CAAC,KAAK,EAAE;IAC3D,mBAAmB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpC,oBAAoB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,wBAAwB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzC,yBAAyB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1C,qBAAqB,CAAC,EAAE,+BAA+B,GAAG,IAAI,CAAC;IAC/D,sBAAsB,CAAC,EAAE,+BAA+B,GAAG,IAAI,CAAC;CACjE,GAAG,6BAA6B,EAAE,CA2BlC"}

package/dist/types/src/utils/digests.d.ts

@@ -0,0 +1,3 @@
+export declare function alphabetizeStringify(input: unknown): string;
+export declare function sha256BytesUtf8(input: string): Promise<Uint8Array>;
+//# sourceMappingURL=digests.d.ts.map

package/dist/types/src/utils/digests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"digests.d.ts","sourceRoot":"","sources":["../../../../src/utils/digests.ts"],"names":[],"mappings":"AAYA,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAiB3D;AAED,wBAAsB,eAAe,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,CAAC,CAIxE"}

package/dist/types/src/utils/index.d.ts

@@ -1,5 +1,6 @@
 export * from './encoders';
 export * from './validation';
 export * from './errors';
+export * from './digests';
 export * from '../react/deviceDetection';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/src/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,0BAA0B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,0BAA0B,CAAC"}

package/dist/types/src/utils/validation.d.ts

@@ -2,6 +2,37 @@ export interface ValidationResult {
     valid: boolean;
     error?: string;
 }
+/** Strict string coercion: returns the value only when it's already a string. */
+export declare function toOptionalString(value: unknown): string;
+/** Strict string coercion + trimming. */
+export declare function toOptionalTrimmedString(value: unknown): string;
+/** String coercion + trimming (useful at IO boundaries). */
+export declare function toTrimmedString(value: unknown): string;
+/** Remove trailing `/` characters (e.g. base URL normalization). */
+export declare function stripTrailingSlashes(value: string): string;
+/** Ensure a non-empty string starts with `/` (path normalization). */
+export declare function ensureLeadingSlash(value: string): string;
+/** Normalize an app base path like `/sdk` (leading slash, no trailing slashes except `/`). */
+export declare function toBasePath(value?: string, fallback?: string): string;
+/** Best-effort origin normalization (used by CSP/Permissions-Policy helpers). */
+export declare function toOriginOrUndefined(input?: string): string | undefined;
+/**
+ * Strict origin sanitizer for Related Origin Requests (ROR).
+ * - Allows `https://<host>[:port]` and `http://localhost[:port]` only.
+ * - Rejects paths (except `/`), queries, and hashes.
+ * - Normalizes hostname casing.
+ */
+export declare function toRorOriginOrNull(value: unknown): string | null;
+/** Collapse a string into a single line by normalizing whitespace. */
+export declare function toSingleLine(value: unknown): string;
+/**
+ * Ensure a key string has the NEAR Ed25519 prefix (`ed25519:`).
+ *
+ * - Accepts either `ed25519:<base58>` or a bare `<base58>` string.
+ * - Canonicalizes `ED25519:` → `ed25519:`.
+ * - If a different prefix is present (e.g. `secp256k1:`), returns the input unchanged.
+ */
+export declare function ensureEd25519Prefix(value: string): string;
 export interface NearAccountValidationOptions {
     /** Restrict to specific suffixes (e.g., ['testnet', 'near']) */
     allowedSuffixes?: string[];
@@ -14,4 +45,33 @@ export interface NearAccountValidationOptions {
  * @param options - Optional validation constraints
  */
 export declare function validateNearAccountId(nearAccountId: string, options?: NearAccountValidationOptions): ValidationResult;
+/**
+ * Lightweight NEAR account ID validation used by server-side helpers.
+ * - length: 2..64
+ * - chars: lowercase letters, digits, `_`, `.`, `-`
+ */
+export declare function isValidAccountId(accountId: unknown): accountId is string;
+export declare function isObject(x: unknown): x is Record<string, unknown>;
+export declare function isString(x: unknown): x is string;
+export declare function isNonEmptyString(x: unknown): x is string;
+export declare function isNumber(x: unknown): x is number;
+export declare function isFiniteNumber(x: unknown): x is number;
+export declare function isFunction(x: unknown): x is Function;
+export declare function isBoolean(x: unknown): x is boolean;
+export declare function isArray<T = unknown>(x: unknown): x is T[];
+export declare function assertString(val: unknown, name?: string): string;
+export declare function assertNumber(val: unknown, name?: string): number;
+export declare function assertBoolean(val: unknown, name?: string): boolean;
+export declare function assertObject<T extends Record<string, unknown> = Record<string, unknown>>(val: unknown, name?: string): T;
+export declare function assertArray<T = unknown>(val: unknown, name?: string): T[];
+export declare function stripFunctionsShallow<T extends Record<string, unknown>>(obj?: T): Partial<T> | undefined;
+export interface PlainSignedTransactionLike {
+    transaction: unknown;
+    signature: unknown;
+    borsh_bytes?: unknown;
+    borshBytes?: unknown;
+    base64Encode?: unknown;
+}
+export declare function isPlainSignedTransactionLike(x: unknown): x is PlainSignedTransactionLike;
+export declare function extractBorshBytesFromPlainSignedTx(x: PlainSignedTransactionLike): number[];
 //# sourceMappingURL=validation.d.ts.map

package/dist/types/src/utils/validation.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../src/utils/validation.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,4BAA4B;IAC3C,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,sGAAsG;IACtG,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,4BAGR,GACA,gBAAgB,CA0DlB"}
+{"version":3,"file":"validation.d.ts","sourceRoot":"","sources":["../../../../src/utils/validation.ts"],"names":[],"mappings":"AACA,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAMD,iFAAiF;AACjF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEvD;AAED,yCAAyC;AACzC,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE9D;AAED,4DAA4D;AAC5D,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEtD;AAED,oEAAoE;AACpE,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAE1D;AAED,sEAAsE;AACtE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAIxD;AAED,8FAA8F;AAC9F,wBAAgB,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,SAAS,GAAG,MAAM,CAIpE;AAED,iFAAiF;AACjF,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAStE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAiB/D;AAED,sEAAsE;AACtE,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKnD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAYzD;AAED,MAAM,WAAW,4BAA4B;IAC3C,gEAAgE;IAChE,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B,sGAAsG;IACtG,qBAAqB,CAAC,EAAE,OAAO,CAAC;CACjC;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE,4BAGR,GACA,gBAAgB,CA0DlB;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,OAAO,GAAG,SAAS,IAAI,MAAM,CAIxE;AAMD,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEjE;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAEhD;AAED,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAExD;AAED,wBAAgB,QAAQ,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAEhD;AAED,wBAAgB,cAAc,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,MAAM,CAEtD;AAED,wBAAgB,UAAU,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,QAAQ,CAEpD;AAED,wBAAgB,SAAS,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,OAAO,CAElD;AAED,wBAAgB,OAAO,CAAC,CAAC,GAAG,OAAO,EAAE,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,CAAC,EAAE,CAEzD;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,SAAU,GAAG,MAAM,CAGjE;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,SAAU,GAAG,MAAM,CAGjE;AAED,wBAAgB,aAAa,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,SAAU,GAAG,OAAO,CAGnE;AAED,wBAAgB,YAAY,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,SAAU,GAAG,CAAC,CAGzH;AAED,wBAAgB,WAAW,CAAC,CAAC,GAAG,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,SAAU,GAAG,CAAC,EAAE,CAG1E;AAED,wBAAgB,qBAAqB,CAAC,CAAC,SAAS,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC,GAAG,SAAS,CAOxG;AAED,MAAM,WAAW,0BAA0B;IACzC,WAAW,EAAE,OAAO,CAAC;IACrB,SAAS,EAAE,OAAO,CAAC;IACnB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAED,wBAAgB,4BAA4B,CAAC,CAAC,EAAE,OAAO,GAAG,CAAC,IAAI,0BAA0B,CAQxF;AAED,wBAAgB,kCAAkC,CAAC,CAAC,EAAE,0BAA0B,GAAG,MAAM,EAAE,CAK1F"}