tin-private-controller API

Source-derived exports, parameter and result types, public methods and source links.

This reference is generated from the checked-out TypeScript exports. Types and signatures describe the package contract; source presence does not establish deployment or service availability. Error expressions below are direct throws, not an exhaustive list of failures from dependencies.

Source module. See the reference index for package import boundaries and verification scope.

buildTinV1OwnerEncryptionMessage

Import from @trustlink/tsn-sdk. Implementation, line 47.

buildTinV1OwnerEncryptionMessage(params: { ownerPublicKey: string; displayName: string; } & ({ resourceCommitment: string; nonce?: never; } | { nonce: Uint8Array; resourceCommitment?: never; })): Uint8Array<ArrayBuffer>

Direct failure expressions:

new Error("displayName must be a single printable line of at most 100 characters")
new Error("resourceCommitment must be 32-byte hex")

configureTinMasterSeedThresholdProvider

Import from @trustlink/tsn-sdk. Implementation, line 220.

configureTinMasterSeedThresholdProvider(provider: TinMasterSeedThresholdProvider | null): void

createTinPrivateIdentity

Import from @trustlink/tsn-sdk. Implementation, line 304.

createTinPrivateIdentity(params: { tin: string; routeVersion: number; routeNonce: string; ownerWallet: TinOwnerWallet; nodeRoutingPublicKeyBase64: string; masterSeed?: Uint8Array; }): Promise<{ pruConfigurationHash: string; encryptedMasterSeed: Uint8Array<ArrayBuffer>; encryptedPublicRouteEnvelope: Uint8Array<ArrayBuffer>; publicRoute: TinPublicRoutePayload; }>

createTinV1OwnerSeedEnvelope

Creates the owner-recoverable seed envelope for a new TIN V1 intent. The seed and signature-derived key stay in this runtime; only the encrypted envelope is returned for inclusion in the owner-authorized creation intent.

Import from @trustlink/tsn-sdk. Implementation, line 106.

createTinV1OwnerSeedEnvelope(params: { ownerWallet: TinOwnerWallet; displayName: string; nonce: Uint8Array; }): Promise<{ resourceCommitment: string; encryptedMasterSeed: Uint8Array<ArrayBuffer>; gpruElgamalKeyVersion: 1; gpruElgamalPublicKey: Uint8Array<ArrayBufferLike>; gpruElgamalKeyCommitment: Uint8Array<ArrayBufferLike>; gpruBalanceScanKeyVersion: 1; gpruBalanceScanPublicKeyX: Uint8Array<ArrayBufferLike>; gpruBalanceScanPublicKeyY: Uint8Array<ArrayBufferLike>; }>

getTinMasterSeedThresholdProvider

Import from @trustlink/tsn-sdk. Implementation, line 226.

getTinMasterSeedThresholdProvider(): TinMasterSeedThresholdProvider

Direct failure expressions:

new Error( "Authorized-device threshold encryption is not configured. TIN private data remains locked.", )

loadTinPrivateTokenBalances

Import from @trustlink/tsn-sdk. Implementation, line 722.

loadTinPrivateTokenBalances(params: { tin: string; pruConfigurationHash: string; envelope: TinMasterSeedEnvelope | Uint8Array; ownerWallet: TinOwnerWallet; authorizedDevice?: TinAuthorizedDeviceSigner; thresholdProvider?: TinMasterSeedThresholdProvider; connection: Connection; tokens: TinBalanceTokenInput[]; signal?: AbortSignal; onProgress?: (message: string) => void; }): Promise<{ tokenBalances: { mint: string; decimals: number; balanceBaseUnits: string; }[]; pruBalances: { pruIndex: number; publicKey: string; mint: string; balanceBaseUnits: string; }[]; pruCount: number; activePruCount: number; nonZeroPruCount: number; }>

Direct failure expressions:

new DOMException("Aborted", "AbortError")

prepareTinV1OwnerSeedAccess

Stable, reproducible wallet approval used to encrypt a TIN seed for later recovery.

Import from @trustlink/tsn-sdk. Implementation, line 84.

prepareTinV1OwnerSeedAccess(params: { ownerPublicKey: string; displayName: string; nonce: Uint8Array; }): Promise<{ resourceCommitment: string; message: string; }>

Direct failure expressions:

new Error("nonce must be 32 bytes")

rewrapTinPrivateIdentityForWalletOwner

Re-encrypt an existing TIN seed for wallet-owned, any-device access without changing its derived PRUs. A legacy device is used only once to open its old envelope; it is never made part of the new envelope.

Import from @trustlink/tsn-sdk. Implementation, line 391.

rewrapTinPrivateIdentityForWalletOwner(params: { tin: string; pruConfigurationHash: string; envelope: TinMasterSeedEnvelope | Uint8Array; ownerWallet: TinOwnerWallet; routeVersion: number; routeNonce: string; nodeRoutingPublicKeyBase64: string; authorizedDevice?: TinAuthorizedDeviceSigner; thresholdProvider?: TinMasterSeedThresholdProvider; }): Promise<{ pruConfigurationHash: string; encryptedMasterSeed: Uint8Array<ArrayBuffer>; encryptedPublicRouteEnvelope: Uint8Array<ArrayBuffer>; publicRoute: TinPublicRoutePayload; }>

Direct failure expressions:

new Error( "This legacy TIN needs its existing device for a one-time any-device upgrade", )
new Error( `TIN master seed requires the ${envelope.provider} provider`, )
new Error( "The existing TIN seed does not match its registered PRU route", )

TinBalanceTokenInput

Import from @trustlink/tsn-sdk. Implementation, line 717.

export type TinBalanceTokenInput = {
  mint: string;
  decimals: number;
};

TinMasterSeedAccessContext

Import from @trustlink/tsn-sdk. Implementation, line 183.

export type TinMasterSeedAccessContext = {
  tin: string;
  ownerPublicKey: string;
  routeVersion: number;
  pruConfigurationHash: string;
  deviceSessionBinding: string;
  walletAuthorizationMessage: Uint8Array;
  walletAuthorizationSignature: Uint8Array;
  deviceAccessProof: TinDeviceAccessProof;
  resourceCommitment: string;
};

TinMasterSeedThresholdProvider

The provider protects only a random data-encryption key. The master seed is encrypted and decrypted locally by this controller and is never an input to a threshold provider, Lit Action, TSN Node, backend, or Cranker.

Import from @trustlink/tsn-sdk. Implementation, line 200.

TinMasterSeedThresholdProvider.id

Source, line 201.

id: string

TinMasterSeedThresholdProvider.getDeviceSessionBinding

Source, line 202.

getDeviceSessionBinding(): Promise<string>

TinMasterSeedThresholdProvider.protectKey

Source, line 203.

protectKey(params: TinMasterSeedAccessContext): Promise<{ protectedKey: string; protectedKeyCommitment: string; accessControlHash: string; deviceKeyEnvelope: TinDeviceKeyEnvelope; }>

TinMasterSeedThresholdProvider.releaseKey

Source, line 209.

releaseKey(params: TinMasterSeedAccessContext & { protectedKey: string; protectedKeyCommitment: string; accessControlHash: string; }): Promise<TinDeviceKeyEnvelope>

TinOwnerWallet

Import from @trustlink/tsn-sdk. Implementation, line 42.

export type TinOwnerWallet = {
  publicKey: string;
  signMessage(message: Uint8Array): Promise<Uint8Array>;
};

unlockTinPrivateRoute

Import from @trustlink/tsn-sdk. Implementation, line 511.

unlockTinPrivateRoute(params: { tin: string; pruConfigurationHash: string; envelope: TinMasterSeedEnvelope | Uint8Array; ownerWallet: TinOwnerWallet; authorizedDevice?: TinAuthorizedDeviceSigner; thresholdProvider?: TinMasterSeedThresholdProvider; }): Promise<{ prus: TinPublicRouteEntry[]; }>

Direct failure expressions:

new Error( "This legacy TIN needs a one-time wallet-authorized migration before it can be opened on any device", )
new Error( `TIN master seed requires the ${envelope.provider} provider`, )
new Error( "Locally derived PRUs do not match the TIN PRU configuration commitment", )

withTinOwnerMasterSeed

Run an owner-only operation with the TIN master seed in memory. The SDK asks the connected wallet to authorize access, verifies the envelope bindings, and clears both the derived key and seed when the callback completes. Callers should use this instead of exporting or persisting the seed.

Import from @trustlink/tsn-sdk. Implementation, line 634.

withTinOwnerMasterSeed<T>(params: { tin: string; displayName: string; pruConfigurationHash: string; envelope: TinMasterSeedEnvelope | Uint8Array; ownerWallet: TinOwnerWallet; }, use: (masterSeed: Uint8Array) => Promise<T>): Promise<T>

Direct failure expressions:

new Error("TIN_MASTER_SEED_ENVELOPE_IDENTITY_MISMATCH")
new Error("TIN_MASTER_SEED_PROVIDER_REQUIRES_MIGRATION")
new Error("TIN_MASTER_SEED_REAUTHORIZATION_REQUIRED")
new Error("TIN_MASTER_SEED_ROUTE_COMMITMENT_MISMATCH")