@seams/wallet-server 0.15.6 → 0.17.0

package/dist/esm/core/ThresholdService/kv.js

@@ -13,6 +13,8 @@ function readResult(json) {
 	return v === void 0 || v === null ? null : v;
 }
 var UpstashRedisRestClient = class {
+	url;
+	token;
 	constructor(input) {
 		const url = String(input.url || "").trim();
 		const token = String(input.token || "").trim();

package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js

@@ -215,6 +215,9 @@ function sameParticipantIds(a, b) {
 	return true;
 }
 var RouterAbEcdsaDerivationPoolFillHandlers = class {
+	participantIds2p;
+	ensureReady;
+	signingWorkerTransport;
 	constructor(input) {
 		this.participantIds2p = input.participantIds2p;
 		this.ensureReady = input.ensureReady;

package/dist/esm/core/d1IdentityStore.js

@@ -77,8 +77,10 @@ function buildIdentitySubjectRecord(input) {
 	};
 }
 var D1IdentityStore = class {
+	adapterKind = "d1";
+	table;
+	now;
 	constructor(input) {
-		this.adapterKind = "d1";
 		this.table = new D1TenantTable(input, IDENTITY_D1_STORE, IDENTITY_STORE_D1_SCHEMA_SQL);
 		this.now = input.now || defaultNow;
 	}

package/dist/esm/core/d1TenantStore.js

@@ -20,11 +20,11 @@ async function ensureD1Schema(database, statements) {
 }
 /** A schema a store creates once, on first use, unless its caller manages it (`enabled: false`). */
 var D1Schema = class {
+	ready = false;
 	constructor(database, statements, enabled = true) {
 		this.database = database;
 		this.statements = statements;
 		this.enabled = enabled;
-		this.ready = false;
 	}
 	async ensure() {
 		if (!this.enabled || this.ready) return;
@@ -41,6 +41,9 @@ function prepareD1TenantStatement(database, scope, sql, values = []) {
 * and the schema is created on first use unless the caller manages it (`ensureSchema: false`).
 */
 var D1TenantTable = class {
+	database;
+	scope;
+	schema;
 	constructor(input, store, schema) {
 		this.database = input.database;
 		this.scope = requireD1TenantScope(input, store);

package/dist/esm/core/d1WalletAuthMethodStore.js

@@ -486,8 +486,10 @@ function prepareD1InsertCasGuardStatement(database) {
 	return database.prepare(D1_BATCH_CAS_GUARD_SQL);
 }
 var D1WalletAuthMethodStore = class {
+	adapterKind = "d1";
+	table;
+	v2Schema;
 	constructor(input) {
-		this.adapterKind = "d1";
 		this.table = new D1TenantTable(input, WALLET_AUTH_METHOD_D1_STORE, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_SQL);
 		this.v2Schema = new D1Schema(input.database, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_V2_SQL, input.ensureSchema !== false);
 	}

package/dist/esm/core/d1WalletStore.js

@@ -387,9 +387,12 @@ function buildWalletEcdsaSignerRecord(input) {
 	};
 }
 var D1WalletStore = class {
+	adapterKind = "d1";
+	database;
+	scope;
+	ensureSchemaOnUse;
+	schemaReady = false;
 	constructor(input) {
-		this.adapterKind = "d1";
-		this.schemaReady = false;
 		const normalized = normalizeD1WalletStoreOptions(input);
 		this.database = normalized.database;
 		this.scope = {

package/dist/esm/core/deviceLinking/linkedDeviceManagement.js

@@ -4,10 +4,7 @@ import { base64UrlDecode, base64UrlEncode } from "../../shared-ts/src/utils/base
 //#region src/core/deviceLinking/linkedDeviceManagement.ts
 const MAX_LINKED_DEVICE_LIST_LIMIT_V1 = 50;
 var LinkedDeviceListCursorError = class extends Error {
-	constructor(..._args) {
-		super(..._args);
-		this.kind = "linked_device_list_cursor_error_v1";
-	}
+	kind = "linked_device_list_cursor_error_v1";
 };
 var LinkedDeviceManagementServiceV1 = class {
 	constructor(options) {

package/dist/esm/core/deviceLinking/linkedDeviceSession.js

@@ -7,6 +7,8 @@ import { activeStateV1, approvalTranscriptMatchesDigest, authorityPendingStateV1
 import { validateApprovalMatchesSession, validateLinkedDeviceRequestedAuthorityV1, validateSourceContributionApprovalMatchesSession, validateSourceContributionPreparationMatchesApproval } from "./linkedDeviceSessionApproval.js";
 //#region src/core/deviceLinking/linkedDeviceSession.ts
 var LinkedDeviceSessionServiceV1 = class {
+	store;
+	authorization;
 	constructor(input) {
 		this.store = input.store;
 		this.authorization = input.authorization;

package/dist/esm/core/deviceLinking/requestProof.js

@@ -5,6 +5,7 @@ import { LINKED_DEVICE_CLOCK_SKEW_TOLERANCE_MS_V1, LINKED_DEVICE_REQUEST_PROOF_H
 import { hasExactKeys } from "../../shared-ts/src/utils/exactKeys.js";
 //#region src/core/deviceLinking/requestProof.ts
 var LinkedDeviceRequestProofVerifierV1 = class {
+	nonceStore;
 	constructor(input) {
 		this.nonceStore = input.nonceStore;
 	}

package/dist/esm/core/routerAbSigning/RouterAbEcdsaPresignRuntime.js

@@ -18,6 +18,8 @@ function resolveSigningWorkerTransport(input) {
 	};
 }
 var RouterAbEcdsaPresignRuntime = class {
+	handlers;
+	signingWorkerTransport;
 	constructor(input) {
 		this.signingWorkerTransport = resolveSigningWorkerTransport(input.signingWorkerTransport);
 		this.handlers = new RouterAbEcdsaDerivationPoolFillHandlers({

package/dist/esm/core/routerAbSigning/RouterAbNormalSigningRuntime.js

@@ -3,6 +3,9 @@ import { MAX_WALLET_SESSION_REMAINING_USES, MAX_WALLET_SESSION_TTL_MS } from "..
 import { validateRouterAbNormalSigningServerPolicy } from "../ThresholdService/routerAbNormalSigningPolicy.js";
 //#region src/core/routerAbSigning/RouterAbNormalSigningRuntime.ts
 var RouterAbNormalSigningRuntime = class {
+	walletSessionStore;
+	ecdsaWalletSessionStore;
+	config;
 	constructor(input) {
 		this.walletSessionStore = input.walletSessionStore;
 		this.ecdsaWalletSessionStore = input.ecdsaWalletSessionStore;

package/dist/esm/core/rpcClients/near/NearClient.js

@@ -10,6 +10,14 @@ function firstKey(o) {
 	return keys.length ? keys[0] : void 0;
 }
 var NearRpcError = class NearRpcError extends Error {
+	code;
+	type;
+	kind;
+	index;
+	short;
+	details;
+	operation;
+	failureKind;
 	constructor(params) {
 		super(params.message);
 		this.name = params.name || "NearRpcError";

package/dist/esm/core/signingMaterial/ordinaryInactiveSignerMaterialReservation.js

@@ -93,7 +93,6 @@ function validateOrdinaryInactiveSignerMaterialReservationRequestV1(request) {
 			const targetBinding = parseRouterAbEd25519YaoCeremonyBindingV1(request.preparation.targetBinding);
 			if (targetBinding.operation !== "registration") throw new Error("ordinary Ed25519 target binding must use registration");
 			assertMaterialActivationMatchesV1(request.plannedActivationRef, routerAbMpcMaterialActivationRefFromWire(targetBinding.material_activation));
-			if (request.preparation.sourceContribution.sourceBinding.operation !== "registration") throw new Error("ordinary Ed25519 source contribution must use registration");
 			parseRouterAbEd25519YaoParticipantIdsV1(request.preparation.sourceContribution.participantIds);
 			return;
 		}

package/dist/esm/localHostedWalletGatewayHandler.js

@@ -25,9 +25,9 @@ const ECDSA_REGISTRATION_PATH = "/router-ab/ecdsa-derivation/register";
 const REGISTRATION_RESPOND_PATH = "/wallets/register/respond";
 const LINK_SOURCE_CONTRIBUTION_EXECUTE_PATH = /^\/wallet\/device-linking\/v1\/sessions\/[^/]+\/source-contribution\/execute$/;
 var DropEcdsaRouterReply = class {
+	observed = false;
 	constructor(baseFetch) {
 		this.baseFetch = baseFetch;
-		this.observed = false;
 	}
 	async fetch(input, init) {
 		const request = new Request(input, init);
@@ -42,9 +42,9 @@ var DropEcdsaRouterReply = class {
 	}
 };
 var UnavailableTenantRootLineage = class {
+	lookups = 0;
 	constructor(base) {
 		this.base = base;
-		this.lookups = 0;
 	}
 	async fetch(input, init) {
 		const request = input instanceof Request ? input : new Request(input, init);

package/dist/esm/localIntendedEcdsaFinalizeFault.js

@@ -11,9 +11,9 @@ function parseLocalIntendedEcdsaFinalizeFaultTokenV1(value) {
 	return isLocalIntendedYaoFaultTokenV1(value) ? value : null;
 }
 var LocalIntendedEcdsaFinalizeFaultControllerV1 = class {
+	state = { kind: "armed" };
 	constructor(baseFetch) {
 		this.baseFetch = baseFetch;
-		this.state = { kind: "armed" };
 	}
 	async fetch(input, init) {
 		const request = new Request(input, init);

package/dist/esm/localIntendedLinkExecuteFault.js

@@ -18,9 +18,9 @@ function parseLocalIntendedLinkExecuteFaultTokenV1(value) {
 	return { value };
 }
 var LocalIntendedLinkExecuteFaultControllerV1 = class {
+	state = { kind: "armed" };
 	constructor(baseFetch) {
 		this.baseFetch = baseFetch;
-		this.state = { kind: "armed" };
 	}
 	async fetch(input, init) {
 		const request = new Request(input, init);

package/dist/esm/localIntendedMaterialAdmissionFault.js

@@ -22,11 +22,11 @@ function localMaterialAdmissionFault(request, database) {
 }
 /** Retire material after resolution and before one admission statement, then restore it. */
 var LocalMaterialAdmissionFaultDatabase = class {
+	scope = null;
+	state = { kind: "armed" };
 	constructor(base, mode) {
 		this.base = base;
 		this.mode = mode;
-		this.scope = null;
-		this.state = { kind: "armed" };
 	}
 	prepare(query) {
 		const inner = this.base.prepare(query);

package/dist/esm/localIntendedRevokeFault.js

@@ -16,9 +16,9 @@ function parseLocalIntendedRevokeFaultTokenV1(value) {
 }
 /** The signer database, refusing one auth-method revocation's batch. */
 var LocalIntendedRevokeFaultDatabaseV1 = class {
+	state = { kind: "armed" };
 	constructor(base) {
 		this.base = base;
-		this.state = { kind: "armed" };
 	}
 	prepare(query) {
 		return new LocalIntendedRevokeFaultStatementV1(this, RECORD_ANSWER_PATTERN.test(query), SPEND_CODE_PATTERN.test(query), this.base.prepare(query));

package/dist/esm/localIntendedSessionAdmissionFault.js

@@ -16,9 +16,9 @@ function parseLocalIntendedSessionAdmissionFaultTokenV1(value) {
 }
 /** The signer database, holding one request after its session read. */
 var LocalIntendedSessionAdmissionFaultDatabaseV1 = class {
+	state = { kind: "armed" };
 	constructor(base) {
 		this.base = base;
-		this.state = { kind: "armed" };
 	}
 	prepare(query) {
 		const inner = this.base.prepare(query);

package/dist/esm/localIntendedYaoExportFault.js

@@ -13,9 +13,9 @@ function parseLocalIntendedYaoExportFaultTokenV1(value) {
 }
 /** The signer database, losing itself once after an export authorization commits. */
 var LocalIntendedYaoExportFaultDatabaseV1 = class {
+	state = { kind: "armed" };
 	constructor(base) {
 		this.base = base;
-		this.state = { kind: "armed" };
 	}
 	prepare(query) {
 		return new LocalIntendedYaoExportFaultStatementV1(this, statementRole(query), this.base.prepare(query));

package/dist/esm/localIntendedYaoFault.js

@@ -44,10 +44,10 @@ function parseLocalIntendedKeptRouterRequestV1(value) {
 	});
 }
 var LocalIntendedYaoFaultControllerV1 = class {
+	state = { kind: "idle" };
 	constructor(baseFetch, keepRunning) {
 		this.baseFetch = baseFetch;
 		this.keepRunning = keepRunning;
-		this.state = { kind: "idle" };
 	}
 	arm(mode) {
 		if (this.state.kind !== "idle") {

package/dist/esm/localIntendedYaoFinalizeFault.js

@@ -13,9 +13,9 @@ function parseLocalIntendedYaoFinalizeFaultTokenV1(value) {
 }
 /** The signer database, losing itself once after a Yao decision commits. */
 var LocalIntendedYaoFinalizeFaultDatabaseV1 = class {
+	state = { kind: "armed" };
 	constructor(base) {
 		this.base = base;
-		this.state = { kind: "armed" };
 	}
 	prepare(query) {
 		return new LocalIntendedYaoFinalizeFaultStatementV1(this, DECISION_INSERT_PATTERN.test(query), this.base.prepare(query));

package/dist/esm/localIntendedYaoRecoveryFault.js

@@ -20,14 +20,14 @@ function parseLocalIntendedYaoRecoveryFaultTokenV1(value) {
 }
 /** The Gateway's Router binding, faulting every call to a recovery execution. */
 var LocalIntendedYaoRecoveryFaultControllerV1 = class {
+	executed = false;
+	failed = false;
+	kept = false;
 	constructor(baseFetch, mode, token, storage) {
 		this.baseFetch = baseFetch;
 		this.mode = mode;
 		this.token = token;
 		this.storage = storage;
-		this.executed = false;
-		this.failed = false;
-		this.kept = false;
 	}
 	async fetch(input, init) {
 		const request = new Request(input, init);

package/dist/esm/localIntendedYaoSigningFault.js

@@ -20,12 +20,12 @@ function parseLocalIntendedYaoSigningFaultTokenV1(value) {
 }
 /** The Gateway's Router binding, keeping the first NEAR finalize it carries. */
 var LocalIntendedYaoSigningFaultControllerV1 = class {
+	kept = false;
 	constructor(baseFetch, mode, token, storage) {
 		this.baseFetch = baseFetch;
 		this.mode = mode;
 		this.token = token;
 		this.storage = storage;
-		this.kept = false;
 	}
 	async fetch(input, init) {
 		const request = new Request(input, init);

package/dist/esm/localRegistrationSetupAuthority.js

@@ -4,6 +4,7 @@ import { parseWalletRegistrationSetupReservation, proposeWalletRegistrationSetup
 /** The standalone host never relocates a wallet, so every wallet keeps its first generation. */
 const LOCAL_OWNERSHIP_GENERATION = 1;
 var LocalRegistrationSetupAuthority = class {
+	storage;
 	constructor(database, scope) {
 		this.scope = scope;
 		this.storage = new D1RegistrationCeremonyRecordStore({

package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js

@@ -283,10 +283,10 @@ function createD1LinkedDeviceComposition(input) {
 	};
 }
 var CloudflareD1SignedDelegateExecutor = class {
+	signerWasmState = { signerWasmReady: false };
+	logger = normalizeLogger();
 	constructor(options) {
 		this.options = options;
-		this.signerWasmState = { signerWasmReady: false };
-		this.logger = normalizeLogger();
 	}
 	async execute(input) {
 		const relayerAccount = this.options.relayerAccount;

package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js

@@ -78,6 +78,11 @@ function activeV2AuthorityMethodBindings(scope, session) {
 	];
 }
 var CloudflareD1AuthorizationStore = class {
+	database;
+	namespace;
+	walletSignerScope;
+	walletStore;
+	getLinkedDeviceAuthorityReader;
 	constructor(options) {
 		this.getLinkedDeviceAuthorityReader = options.getLinkedDeviceAuthorityReader ?? (() => null);
 		this.database = options.database;

package/dist/esm/router/cloudflare/d1/authorization/d1VaultProxyStore.js

@@ -8,6 +8,7 @@ const VAULT_PROXY_SECRET_AAD_DOMAIN_V1 = "seams:vault:proxy-secret:v1";
 const AES_GCM_NONCE_BYTES = 12;
 const AES_GCM_KEY_BYTES = 32;
 var CloudflareD1VaultProxyStore = class {
+	key;
 	constructor(database, namespace, encryptionKey) {
 		this.database = database;
 		this.namespace = namespace;

package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js

@@ -39,6 +39,7 @@ var LinkedDeviceActivationIntegrityErrorV1 = class extends Error {
 /** Exact-method cleanup remains available for five minutes after server receipt creation. */
 const LINKED_DEVICE_ACKNOWLEDGEMENT_CLEANUP_WINDOW_MS = 300 * 1e3;
 var D1LinkedDeviceAuthorityInstallServiceV1 = class {
+	nowV1;
 	constructor(options) {
 		this.options = options;
 		this.nowV1 = options.nowV1 ?? Date.now;

package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEd25519ExportRootStore.js

@@ -3,6 +3,8 @@ import { d1ChangedRows, queryD1One } from "../../../../storage/d1Sql.js";
 //#region src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEd25519ExportRootStore.ts
 const TRANSFER_TABLE = "linked_device_ed25519_export_root_transfers";
 var D1LinkedDeviceEd25519ExportRootStoreV1 = class {
+	database;
+	scope;
 	constructor(options) {
 		this.database = options.database;
 		this.scope = normalizeScope(options.scope);

package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js

@@ -12,6 +12,8 @@ import { parseLinkedDeviceEmailOtpGrantRecordV1 } from "../../../../core/deviceL
 */
 const GRANT_TABLE = "linked_device_email_otp_grants";
 var D1LinkedDeviceEmailOtpGrantStoreV1 = class {
+	database;
+	scope;
 	constructor(input) {
 		this.database = input.database;
 		this.scope = input.scope;

package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js

@@ -15,6 +15,9 @@ function resolveSentEmailOtpChallengeV1(session, challengeId) {
 	return challenge;
 }
 var D1LinkedDeviceEmailOtpTargetFactorV1 = class {
+	options;
+	grantTtlMs;
+	resendCooldownMs;
 	constructor(options) {
 		this.options = options;
 		this.grantTtlMs = requirePositiveMs(options.grantTtlMs ?? DEFAULT_GRANT_TTL_MS, "grantTtlMs");

package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js

@@ -7,6 +7,7 @@ import { parseDigestB64u } from "../../../../shared-ts/src/utils/canonicalPrimit
 import { parseSecp256k1CompressedPublicKeyB64u } from "../../../../shared-ts/src/passkey-custody/primitives.js";
 import { routerAbMpcMaterialActivationRefFromWire } from "../../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
 import { deriveRouterAbEd25519YaoApplicationBindingDigestV1 } from "../../../../shared-ts/src/utils/routerAbEd25519YaoDigests.js";
+import { parseRouterAbEd25519YaoActivationBindingV1 } from "../../../../shared-ts/src/utils/routerAbEd25519Yao.js";
 import { buildEmailOtpWalletAuthAuthority, buildPasskeyWalletAuthAuthority, walletAuthAuthorityRef } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { walletAuthorityDigestsMatchV1 } from "../../../../shared-ts/src/authorization/walletAuthority.js";
 import { buildWalletSessionLinkedDeviceOwnerAuthorizationV1, parseQrLinkedDeviceSessionPayloadV5 } from "../../../../shared-ts/src/device-linking/parsers.js";
@@ -91,7 +92,7 @@ async function readD1LinkedDeviceOwnerSourceChildV1(projectionSource, linkedSour
 * lane stays the wallet's.
 */
 function linkedEd25519SourceChildResolutionV1(resolution, linked) {
-	const binding = linked.targetBinding;
+	const binding = parseRouterAbEd25519YaoActivationBindingV1(linked.targetBinding);
 	if (binding.operation !== "registration" || base64UrlEncode(Uint8Array.from(binding.stable_key_context_binding)) !== resolution.stableContextBindingB64u || base64UrlEncode(Uint8Array.from(linked.activationReceipt.registered_public_key)) !== resolution.registeredPublicKeyB64u) return null;
 	return {
 		...resolution,
@@ -158,9 +159,7 @@ async function sourceChildResolutionFromSignerV1(input) {
 	const source = ownerLaneProtocolSourceV1(input.projection);
 	if (input.signer.version === "wallet_signer_ed25519_v1") {
 		if (input.projection.walletKey.keyFamily !== "ed25519") return null;
-		if (input.signer.activeYaoCapability.activationResult.binding.operation !== "registration") return null;
 		const capability = input.signer.activeYaoCapability;
-		if (capability.version !== "wallet_ed25519_yao_registration_capability_v1") return null;
 		const application = capability.admissionRequest.application_binding;
 		const applicationBindingDigestB64u = parseDigestB64u(base64UrlEncode(Uint8Array.from(await deriveRouterAbEd25519YaoApplicationBindingDigestV1(application))));
 		const stableContextBindingB64u = parseDigestB64u(base64UrlEncode(Uint8Array.from(capability.activationResult.binding.stable_key_context_binding)));

package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js

@@ -7,6 +7,8 @@ import { d1ChangedRows } from "../../../../storage/d1Sql.js";
 const NONCE_TABLE = "linked_device_request_proof_nonces";
 const NONCE_EXPIRY_CLEANUP_BATCH_LIMIT_V1 = 64;
 var D1LinkedDeviceRequestProofNonceStoreV1 = class {
+	database;
+	scope;
 	constructor(options) {
 		this.database = options.database;
 		this.scope = normalizeScope(options.scope);

package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js

@@ -29,6 +29,9 @@ const PRECOMMIT_STATES = [
 	"provisioning"
 ];
 var D1LinkedDeviceSessionStoreV1 = class {
+	bootstrap;
+	database;
+	scope;
 	constructor(options) {
 		this.bootstrap = options.bootstrap;
 		this.database = options.database;

package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.js

@@ -12,6 +12,10 @@ import { secureRandomBase64Url } from "../../../../shared-ts/src/utils/secureRan
 * copied from the verified owner lane.
 */
 var D1LinkedDeviceSourceContributionPreparationPlannerV1 = class {
+	resolveOwnerSourceChildV1;
+	deriverAInputPublicKeyB64u;
+	deriverBInputPublicKeyB64u;
+	signingWorkerRecipientPublicKeyB64u;
 	constructor(input) {
 		this.resolveOwnerSourceChildV1 = input.resolveOwnerSourceChildV1;
 		this.deriverAInputPublicKeyB64u = requireCanonicalBytes32(input.deriverAInputPublicKeyB64u, "deriver A input public key");
@@ -147,8 +151,8 @@ function bindingWithMaterialActivation(source, materialActivation) {
 	return {
 		lifecycle: {
 			lifecycle_id: `linked-device-source-preserving:${ceremonyIdentity}`,
-			work_kind: source.lifecycle.work_kind,
-			primitive_request_kind: source.lifecycle.primitive_request_kind,
+			work_kind: "registration_prepare",
+			primitive_request_kind: "registration",
 			root_share_epoch: source.lifecycle.root_share_epoch,
 			account_id: source.lifecycle.account_id,
 			session_id: `linked-device-source-preserving:${ceremonyIdentity}`,

package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetAuthenticatorStore.js

@@ -4,6 +4,9 @@ import { d1ChangedRows } from "../../../../storage/d1Sql.js";
 //#region src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetAuthenticatorStore.ts
 const TARGET_CREDENTIAL_TABLE = "linked_device_target_credentials";
 var D1LinkedDeviceTargetAuthenticatorStoreV1 = class {
+	database;
+	scope;
+	target;
 	constructor(input) {
 		this.database = input.database;
 		this.scope = input.scope;

package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js

@@ -18,6 +18,7 @@ import { buildVerifiedLinkInputV1, buildVerifiedTargetFactorV1 } from "./d1Linke
 //#region src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.ts
 /** Verifies the browser-signed ceremony origin against the configured RP ID. */
 var LinkedDeviceWebAuthnRegistrationVerifierV1 = class {
+	expectedRpId;
 	constructor(expectedRpId) {
 		this.expectedRpId = expectedRpId;
 	}
@@ -109,15 +110,22 @@ const TARGET_COMMIT_RESERVATION_TABLE = "linked_device_target_commit_reservation
 const TARGET_COMMIT_WAIT_ATTEMPTS = 25;
 const TARGET_COMMIT_WAIT_MS = 10;
 var LinkedDeviceRetiredTargetRegistrationShapeErrorV1 = class extends Error {
+	kind = "retired_target_registration_shape";
 	constructor() {
 		super("relink_required:retired_target_registration_shape");
-		this.kind = "retired_target_registration_shape";
 		this.name = "LinkedDeviceRetiredTargetRegistrationShapeErrorV1";
 	}
 };
 var D1LinkedDeviceTargetCredentialProviderV1 = class {
+	database;
+	scope;
+	verifier;
+	emailOtpGrants;
+	planner;
+	sourceContributionPreparationPlanner;
+	verifiedLinkBuilder;
+	inFlightCommits = /* @__PURE__ */ new Map();
 	constructor(input) {
-		this.inFlightCommits = /* @__PURE__ */ new Map();
 		this.database = input.database;
 		this.scope = normalizeScope(input.scope);
 		this.verifier = input.verifier;

package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.js

@@ -13,6 +13,9 @@ const DEFAULT_TARGET_PREPARATION_TTL_MS = 300 * 1e3;
 * reservation identities are derived only after Device 2 verifies its factor.
 */
 var D1LinkedDeviceTargetPlannerV1 = class {
+	resolveOwnerSourceChildV1;
+	targetPasskeyRpId;
+	preparationTtlMs;
 	constructor(input) {
 		this.resolveOwnerSourceChildV1 = input.resolveOwnerSourceChildV1;
 		const targetPasskeyRpId = parseWebAuthnRpId(input.targetPasskeyRpId);

package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js

@@ -66,8 +66,13 @@ function parseRecordJson(value) {
 	return JSON.parse(value);
 }
 var CloudflareD1RouterAbEd25519YaoCapabilityPersistence = class {
+	database;
+	scope;
+	walletStore;
+	ensureSchemaOnUse;
+	now;
+	schemaReady = false;
 	constructor(options) {
-		this.schemaReady = false;
 		this.database = options.database;
 		this.scope = options.scope;
 		this.walletStore = options.walletStore;

package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.js

@@ -6,6 +6,8 @@ import { D1_BATCH_CAS_GUARD_SQL } from "../../../../storage/d1Sql.js";
 * visible, and never changes.
 */
 var CloudflareD1Ed25519YaoLifecycleDecisionStoreV1 = class {
+	database;
+	scope;
 	constructor(input) {
 		this.database = input.database;
 		this.scope = {

package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.js

@@ -7,10 +7,10 @@ function createRouterAbEd25519YaoProductRegistrationPartitionedStateStoreFromD1V
 	return createRouterAbEd25519YaoProductRegistrationPartitionedStateStoreV1(new D1LifecycleRecords(options, createD1Ed25519YaoLifecycleRecords(options)));
 }
 var D1LifecycleRecords = class {
+	observed = /* @__PURE__ */ new Map();
 	constructor(options, records) {
 		this.options = options;
 		this.records = records;
-		this.observed = /* @__PURE__ */ new Map();
 	}
 	async readMany(keys) {
 		const entries = await this.records.readMany(keys);

package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.js

@@ -14,6 +14,11 @@ function emailOtpProviderIdentityMismatch() {
 	return failure("provider_identity_mismatch", "Email OTP enrollment does not match the requested provider user");
 }
 var CloudflareD1EmailOtpChallengeIssuer = class {
+	config;
+	emailOtpChallenges;
+	emailOtpDelivery;
+	emailOtpEnrollments;
+	emailOtpRateLimits;
 	constructor(input) {
 		this.config = input.config;
 		this.emailOtpChallenges = input.emailOtpChallenges;

package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.js

@@ -8,6 +8,14 @@ function errorMessage(error) {
 	return error instanceof Error ? error.message : String(error || "");
 }
 var CloudflareD1EmailOtpChallengeService = class {
+	challenges;
+	devOutboxEnabled;
+	finalizer;
+	grantTtlMs;
+	grants;
+	issuer;
+	registrationAttempts;
+	verifier;
 	constructor(input) {
 		this.challenges = input.challenges;
 		this.devOutboxEnabled = input.devOutboxEnabled;

package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js

@@ -8,8 +8,12 @@ const REGISTRATION_CEREMONY_CAS_GUARD_SQL = `INSERT INTO registration_ceremony_c
 SELECT 1
  WHERE changes() = 0`;
 var CloudflareD1EmailOtpChallengeStore = class {
+	database;
+	namespace;
+	orgId;
+	projectId;
+	envId;
 	constructor(input) {
-		this.prepare = (sql, values) => this.database.prepare(sql).bind(...this.scopeValues(values));
 		this.database = input.database;
 		this.namespace = input.namespace;
 		this.orgId = input.orgId;
@@ -277,6 +281,7 @@ var CloudflareD1EmailOtpChallengeStore = class {
             )
         RETURNING record_json, expires_at_ms`).bind(...this.scopeValues([]), ...this.scopeValues([...emailOtpChallengeContextValues(input), input.nowMs])).first());
 	}
+	prepare = (sql, values) => this.database.prepare(sql).bind(...this.scopeValues(values));
 	scopeValues(values) {
 		return [
 			this.namespace,

package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js

@@ -39,6 +39,10 @@ function emailOtpProviderIdentityMismatch() {
 	};
 }
 var CloudflareD1EmailOtpChallengeVerifier = class {
+	emailOtpChallenges;
+	emailOtpEnrollments;
+	emailOtpRateLimits;
+	lockoutTtlMs;
 	constructor(input) {
 		this.emailOtpChallenges = input.emailOtpChallenges;
 		this.emailOtpEnrollments = input.emailOtpEnrollments;