@seams/wallet-server 0.15.6 → 0.18.0

package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts

@@ -1,31 +1,31 @@
-export declare const EMAIL_OTP_CHANNEL: "email_otp";
-export declare const EMAIL_OTP_INITIAL_ENROLLMENT_VERSION: "1";
+export declare const EMAIL_OTP_CHANNEL: 'email_otp';
+export declare const EMAIL_OTP_INITIAL_ENROLLMENT_VERSION: '1';
 export declare function emailOtpDeviceEnrollmentId(walletId: string, providerSubject: string): string;
 /** Domain label that opens the AAD binding a released Email OTP factor to its challenge. */
 export declare const EMAIL_OTP_FACTOR_RELEASE_AAD_DOMAIN_V1 = "seams/email-otp/factor-release/v1";
-declare const WALLET_UNLOCK_BACKENDS: readonly ["passkey", "email_otp"];
+declare const WALLET_UNLOCK_BACKENDS: readonly ['passkey', "email_otp"];
 export type WalletUnlockBackend = (typeof WALLET_UNLOCK_BACKENDS)[number];
 export type WalletEmailOtpChannel = typeof EMAIL_OTP_CHANNEL;
-declare const WALLET_EMAIL_OTP_LOGIN_OPERATIONS: readonly ["wallet_unlock", "transaction_sign", "export_key"];
+declare const WALLET_EMAIL_OTP_LOGIN_OPERATIONS: readonly ['wallet_unlock', 'transaction_sign', 'export_key'];
 export type WalletEmailOtpLoginOperation = (typeof WALLET_EMAIL_OTP_LOGIN_OPERATIONS)[number];
-export declare const WALLET_EMAIL_OTP_REGISTRATION_OPERATION: "registration";
+export declare const WALLET_EMAIL_OTP_REGISTRATION_OPERATION: 'registration';
 /** Linked-device enrollment: prove control of the wallet's enrolled email
  * destination to complete one device link. */
-export declare const WALLET_EMAIL_OTP_DEVICE_LINK_OPERATION: "device_link";
-export declare const WALLET_EMAIL_OTP_RELOCATION_OPERATION: "wallet_relocation";
+export declare const WALLET_EMAIL_OTP_DEVICE_LINK_OPERATION: 'device_link';
+export declare const WALLET_EMAIL_OTP_RELOCATION_OPERATION: 'wallet_relocation';
 export type WalletEmailOtpOperation = WalletEmailOtpLoginOperation | typeof WALLET_EMAIL_OTP_REGISTRATION_OPERATION | typeof WALLET_EMAIL_OTP_DEVICE_LINK_OPERATION | typeof WALLET_EMAIL_OTP_RELOCATION_OPERATION;
 export declare const WALLET_EMAIL_OTP_ACTIONS: {
-    readonly login: "wallet_email_otp_login";
-    readonly registration: "wallet_email_otp_registration";
-    readonly recoveryBootstrap: "wallet_email_otp_recovery_bootstrap";
-    readonly unseal: "wallet_email_otp_unseal";
-    readonly deviceLink: "wallet_email_otp_device_link";
-    readonly relocation: "wallet_email_otp_relocation";
+    readonly login: 'wallet_email_otp_login';
+    readonly registration: 'wallet_email_otp_registration';
+    readonly recoveryBootstrap: 'wallet_email_otp_recovery_bootstrap';
+    readonly unseal: 'wallet_email_otp_unseal';
+    readonly deviceLink: 'wallet_email_otp_device_link';
+    readonly relocation: 'wallet_email_otp_relocation';
 };
 export type WalletEmailOtpAction = (typeof WALLET_EMAIL_OTP_ACTIONS)[keyof typeof WALLET_EMAIL_OTP_ACTIONS];
-export declare const WALLET_EMAIL_OTP_EXPORT_OPERATION: "export_key";
-export declare const WALLET_EMAIL_OTP_UNLOCK_OPERATION: "wallet_unlock";
-export declare const WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION: "transaction_sign";
+export declare const WALLET_EMAIL_OTP_EXPORT_OPERATION: 'export_key';
+export declare const WALLET_EMAIL_OTP_UNLOCK_OPERATION: 'wallet_unlock';
+export declare const WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION: 'transaction_sign';
 export type WalletEmailOtpExportOperation = typeof WALLET_EMAIL_OTP_EXPORT_OPERATION;
 export type WalletEmailOtpTransactionSignOperation = typeof WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION;
 export declare function isWalletUnlockBackend(value: string): value is WalletUnlockBackend;

package/dist/types/shared-ts/src/utils/emailOtpRecoveryKey.d.ts

@@ -3,7 +3,7 @@ export declare const EMAIL_OTP_RECOVERY_KEY_BYTE_LENGTH: 20;
 export declare const EMAIL_OTP_RECOVERY_KEY_CHAR_LENGTH: 32;
 export declare const EMAIL_OTP_RECOVERY_KEY_GROUP_COUNT: 8;
 export declare const EMAIL_OTP_RECOVERY_KEY_GROUP_LENGTH: 4;
-export declare const EMAIL_OTP_RECOVERY_KEY_ALPHABET: "0123456789ABCDEFGHJKMNPQRSTVWXYZ";
+export declare const EMAIL_OTP_RECOVERY_KEY_ALPHABET: '0123456789ABCDEFGHJKMNPQRSTVWXYZ';
 declare const emailOtpRecoveryCodeBrand: unique symbol;
 export type EmailOtpRecoveryCode = string & {
     readonly [emailOtpRecoveryCodeBrand]: 'EmailOtpRecoveryCode';

package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts

@@ -11,16 +11,16 @@ import { type EmailOtpWalletAuthAuthority, type PasskeyWalletAuthAuthority } fro
  * pool fill only when the requested ceremony deadline is within this limit.
  */
 export declare const ROUTER_AB_ECDSA_PRESIGN_CEREMONY_MAX_LIFETIME_MS: number;
-export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_STATE_KIND_V1: "router_ab_ecdsa_derivation_normal_signing_v1";
-export declare const ROUTER_AB_ECDSA_DERIVATION_HEALTH_PATH: "/router-ab/ecdsa-derivation/healthz";
-export declare const ROUTER_AB_ECDSA_DERIVATION_EXPORT_PATH: "/router-ab/ecdsa-derivation/export";
-export declare const ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_INIT_PATH: "/router-ab/ecdsa-derivation/presignature-pool/fill/init";
-export declare const ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_STEP_PATH: "/router-ab/ecdsa-derivation/presignature-pool/fill/step";
-export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_PREPARE_PATH: "/router-ab/ecdsa-derivation/sign/prepare";
-export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_PATH: "/router-ab/ecdsa-derivation/sign";
-export declare const ROUTER_AB_ECDSA_DERIVATION_REFRESH_PATH: "/router-ab/ecdsa-derivation/refresh";
-export declare const ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH: "/router-ab/ecdsa-derivation/session/activate";
-export declare const ROUTER_AB_ECDSA_DERIVATION_OPERATION_STEP_UP_PATH: "/router-ab/ecdsa-derivation/operation-step-up";
+export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_STATE_KIND_V1: 'router_ab_ecdsa_derivation_normal_signing_v1';
+export declare const ROUTER_AB_ECDSA_DERIVATION_HEALTH_PATH: '/router-ab/ecdsa-derivation/healthz';
+export declare const ROUTER_AB_ECDSA_DERIVATION_EXPORT_PATH: '/router-ab/ecdsa-derivation/export';
+export declare const ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_INIT_PATH: '/router-ab/ecdsa-derivation/presignature-pool/fill/init';
+export declare const ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_STEP_PATH: '/router-ab/ecdsa-derivation/presignature-pool/fill/step';
+export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_PREPARE_PATH: '/router-ab/ecdsa-derivation/sign/prepare';
+export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_PATH: '/router-ab/ecdsa-derivation/sign';
+export declare const ROUTER_AB_ECDSA_DERIVATION_REFRESH_PATH: '/router-ab/ecdsa-derivation/refresh';
+export declare const ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH: '/router-ab/ecdsa-derivation/session/activate';
+export declare const ROUTER_AB_ECDSA_DERIVATION_OPERATION_STEP_UP_PATH: '/router-ab/ecdsa-derivation/operation-step-up';
 type RouterAbEcdsaDerivationStableKeyContextV1 = {
     application_binding_digest_b64u: string;
 };

package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts

@@ -4,17 +4,17 @@ export type { RouterAbEd25519YaoAdmittedLifecycleV1, RouterAbEd25519YaoCeremonyI
 export type RouterAbEd25519YaoCeremonyBindingV1 = GeneratedRouterAbEd25519YaoCeremonyBindingV1 & {
     material_activation: RouterAbMpcMaterialActivationRefWire;
 };
-export declare const ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1: "/router-ab/ed25519/yao/registration/admit";
-export declare const ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1: "/router-ab/ed25519/yao/registration/execute";
-export declare const ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1: "/router-ab/ed25519/yao/recovery/admit";
-export declare const ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1: "/router-ab/ed25519/yao/recovery/execute";
-export declare const ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1: "/router-ab/ed25519/yao/recovery/activate";
-export declare const ROUTER_AB_ED25519_YAO_RECOVERY_STATUS_PATH_V1: "/router-ab/ed25519/yao/recovery/status";
-export declare const ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1: "x-seams-wallet-recovery-challenge-id";
-export declare const ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1: "/router-ab/ed25519/yao/recovery/bootstrap";
-export declare const ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1: "router_ab_ed25519_yao_email_otp_recovery_v1";
-export declare const ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1: "/router-ab/ed25519/yao/export/admit";
-export declare const ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1: "/router-ab/ed25519/yao/export/execute";
+export declare const ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1: '/router-ab/ed25519/yao/registration/admit';
+export declare const ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1: '/router-ab/ed25519/yao/registration/execute';
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1: '/router-ab/ed25519/yao/recovery/admit';
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1: '/router-ab/ed25519/yao/recovery/execute';
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1: '/router-ab/ed25519/yao/recovery/activate';
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_STATUS_PATH_V1: '/router-ab/ed25519/yao/recovery/status';
+export declare const ROUTER_AB_ED25519_YAO_RECOVERY_CHALLENGE_ID_HEADER_V1: 'x-seams-wallet-recovery-challenge-id';
+export declare const ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1: '/router-ab/ed25519/yao/recovery/bootstrap';
+export declare const ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1: 'router_ab_ed25519_yao_email_otp_recovery_v1';
+export declare const ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1: '/router-ab/ed25519/yao/export/admit';
+export declare const ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1: '/router-ab/ed25519/yao/export/execute';
 type RouterAbEd25519YaoDeriverRoleV1 = 'deriver_a' | 'deriver_b';
 type RouterAbEd25519YaoInputKindV1 = 'activation' | 'export';
 type RouterAbEd25519YaoPackageKindV1 = 'activation_client' | 'activation_signing_worker' | 'export_client';
@@ -232,6 +232,7 @@ type RouterAbEd25519YaoParseResult<T> = {
 export declare function parseRouterAbEd25519YaoApplicationBindingFactsV1(value: unknown): RouterAbEd25519YaoApplicationBindingFactsV1;
 export declare function parseRouterAbEd25519YaoParticipantIdsV1(value: unknown): readonly [number, number];
 export declare function parseRouterAbEd25519YaoCeremonyBindingV1(value: unknown): RouterAbEd25519YaoCeremonyBindingV1;
+export declare function parseRouterAbEd25519YaoActivationBindingV1(value: unknown): RouterAbEd25519YaoActivationBindingV1;
 export declare function parseRouterAbEd25519YaoActivationKeysetV1(value: unknown): RouterAbEd25519YaoActivationKeysetV1;
 export declare function parseRouterAbEd25519YaoActivationPublicReceiptV1(value: unknown): RouterAbEd25519YaoActivationPublicReceiptV1;
 export declare function parseRouterAbEd25519YaoRegistrationAdmissionRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoRegistrationAdmissionRequestV1>;

package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts

@@ -1,6 +1,6 @@
-export declare const ROUTER_AB_PUBLIC_KEYSET_VERSION_V2: "router_ab_keyset_v2";
-export declare const ROUTER_AB_PUBLIC_KEYSET_WELL_KNOWN_PATH: "/.well-known/router-ab/keyset";
-export declare const ROUTER_AB_PUBLIC_KEYSET_PATH: "/router-ab/keyset";
+export declare const ROUTER_AB_PUBLIC_KEYSET_VERSION_V2: 'router_ab_keyset_v2';
+export declare const ROUTER_AB_PUBLIC_KEYSET_WELL_KNOWN_PATH: '/.well-known/router-ab/keyset';
+export declare const ROUTER_AB_PUBLIC_KEYSET_PATH: '/router-ab/keyset';
 type RouterAbSignerRoleV1 = 'signer_a' | 'signer_b';
 type RouterAbSignerEnvelopeHpkePublicKeyV1 = {
     role: RouterAbSignerRoleV1;

package/dist/types/shared-ts/src/utils/routerAbTraceContext.d.ts

@@ -1,4 +1,4 @@
-export declare const ROUTER_AB_TRACE_ID_HEADER_V1: "x-seams-trace-id";
+export declare const ROUTER_AB_TRACE_ID_HEADER_V1: 'x-seams-trace-id';
 export type RouterAbTraceContextV1 = {
     readonly kind: 'router_ab_trace_context_v1';
     readonly value: string;

package/dist/types/shared-ts/src/utils/signerDomain.d.ts

@@ -1,41 +1,41 @@
 export declare const SIGNER_KINDS: {
-    readonly thresholdEd25519: "threshold-ed25519";
-    readonly thresholdEcdsa: "threshold-ecdsa";
+    readonly thresholdEd25519: 'threshold-ed25519';
+    readonly thresholdEcdsa: 'threshold-ecdsa';
 };
 export type SignerKind = (typeof SIGNER_KINDS)[keyof typeof SIGNER_KINDS];
 export declare const SIGNER_AUTH_METHODS: {
-    readonly passkey: "passkey";
+    readonly passkey: 'passkey';
     readonly emailOtp: "email_otp";
 };
 /** Authentication methods that can authorize a signer capability. */
 export type SignerAuthMethod = (typeof SIGNER_AUTH_METHODS)[keyof typeof SIGNER_AUTH_METHODS];
 export declare const WALLET_AUTH_METHODS: {
-    readonly passkey: "passkey";
+    readonly passkey: 'passkey';
     readonly emailOtp: "email_otp";
 };
 /** Authentication methods that can be enrolled on a wallet. */
 export type WalletAuthMethod = (typeof WALLET_AUTH_METHODS)[keyof typeof WALLET_AUTH_METHODS];
 declare const SIGNING_SESSION_RETENTIONS: {
-    readonly session: "session";
-    readonly singleUse: "single_use";
+    readonly session: 'session';
+    readonly singleUse: 'single_use';
 };
 export type SigningSessionRetention = (typeof SIGNING_SESSION_RETENTIONS)[keyof typeof SIGNING_SESSION_RETENTIONS];
 declare const SIGNING_SESSION_POLICIES: {
-    readonly session: "session";
-    readonly perOperation: "per_operation";
+    readonly session: 'session';
+    readonly perOperation: 'per_operation';
 };
 export type SigningSessionPolicy = (typeof SIGNING_SESSION_POLICIES)[keyof typeof SIGNING_SESSION_POLICIES];
 export declare const SENSITIVE_OPERATION_POLICIES: {
-    readonly inheritSessionPolicy: "inherit_session_policy";
-    readonly requireFreshSameMethod: "require_fresh_same_method";
-    readonly requirePasskey: "require_passkey";
-    readonly denyEmailOtp: "deny_email_otp";
+    readonly inheritSessionPolicy: 'inherit_session_policy';
+    readonly requireFreshSameMethod: 'require_fresh_same_method';
+    readonly requirePasskey: 'require_passkey';
+    readonly denyEmailOtp: 'deny_email_otp';
 };
 export type SensitiveOperationPolicy = (typeof SENSITIVE_OPERATION_POLICIES)[keyof typeof SENSITIVE_OPERATION_POLICIES];
 export declare const SIGNER_SOURCES: {
-    readonly passkeyRegistration: "passkey_registration";
-    readonly emailOtpRegistration: "email_otp_registration";
-    readonly selfHostedImport: "self_hosted_import";
+    readonly passkeyRegistration: 'passkey_registration';
+    readonly emailOtpRegistration: 'email_otp_registration';
+    readonly selfHostedImport: 'self_hosted_import';
 };
 export type SignerSource = (typeof SIGNER_SOURCES)[keyof typeof SIGNER_SOURCES];
 export declare function isWalletAuthMethod(value: unknown): value is WalletAuthMethod;

package/dist/types/shared-ts/src/utils/signingSessionSeal.d.ts

@@ -4,17 +4,17 @@ import type { MpcMaterialActivationRef } from './domainIds';
 import type { ThresholdEcdsaChainTarget } from './thresholdEcdsaChainTarget';
 import { SIGNER_AUTH_METHODS, type SignerAuthMethod } from './signerDomain';
 export declare const SIGNING_SESSION_SEALED_RECORD_VERSION: 2;
-export declare const SIGNING_SESSION_SEAL_ALG: "shamir3pass-v2";
-export declare const SIGNING_SESSION_SEAL_GROUP_ID: "rfc2409-group2";
-export declare const SIGNING_SESSION_SEAL_STORAGE_SCOPE: "iframe_origin_indexeddb";
-export declare const SIGNING_SESSION_SECRET_KIND: "signing_session_secret32";
-export declare const ROUTER_AB_ED25519_NORMAL_SIGNING_STATE_KIND: "router_ab_ed25519_normal_signing_v1";
-export declare const ROUTER_AB_ED25519_HEALTH_PATH: "/router-ab/ed25519/healthz";
-export declare const ROUTER_AB_ED25519_WALLET_SESSION_PATH: "/router-ab/wallet-session/ed25519";
-export declare const ROUTER_AB_ED25519_NORMAL_SIGNING_PREPARE_PATH: "/router-ab/ed25519/sign/prepare";
-export declare const ROUTER_AB_ED25519_NORMAL_SIGNING_PATH: "/router-ab/ed25519/sign";
-export declare const WALLET_SESSION_SEAL_BASE_PATH: "/wallet-session/seal";
-export declare function decodeSigningSessionSecret32(plaintext: Uint8Array): Uint8Array | null;
+export declare const SIGNING_SESSION_SEAL_ALG: 'shamir3pass-v2';
+export declare const SIGNING_SESSION_SEAL_GROUP_ID: 'rfc2409-group2';
+export declare const SIGNING_SESSION_SEAL_STORAGE_SCOPE: 'iframe_origin_indexeddb';
+export declare const SIGNING_SESSION_SECRET_KIND: 'signing_session_secret32';
+export declare const ROUTER_AB_ED25519_NORMAL_SIGNING_STATE_KIND: 'router_ab_ed25519_normal_signing_v1';
+export declare const ROUTER_AB_ED25519_HEALTH_PATH: '/router-ab/ed25519/healthz';
+export declare const ROUTER_AB_ED25519_WALLET_SESSION_PATH: '/router-ab/wallet-session/ed25519';
+export declare const ROUTER_AB_ED25519_NORMAL_SIGNING_PREPARE_PATH: '/router-ab/ed25519/sign/prepare';
+export declare const ROUTER_AB_ED25519_NORMAL_SIGNING_PATH: '/router-ab/ed25519/sign';
+export declare const WALLET_SESSION_SEAL_BASE_PATH: '/wallet-session/seal';
+export declare function decodeSigningSessionSecret32(plaintext: Uint8Array): Uint8Array<ArrayBuffer> | null;
 export declare const PASSKEY_PRF_FIRST_SALT_V1: Uint8Array<ArrayBuffer>;
 export declare const PASSKEY_PRF_SECOND_SALT_V1: Uint8Array<ArrayBuffer>;
 export type SigningSessionSealAuthMethod = Extract<SignerAuthMethod, typeof SIGNER_AUTH_METHODS.passkey | typeof SIGNER_AUTH_METHODS.emailOtp>;

package/dist/types/shared-ts/src/utils/walletSessionFailure.d.ts

@@ -1,12 +1,12 @@
 export declare const WALLET_SESSION_FAILURE_CODES: {
-    readonly missing: "wallet_session_missing";
-    readonly signatureInvalid: "wallet_session_signature_invalid";
-    readonly claimsInvalid: "wallet_session_claims_invalid";
-    readonly invalid: "wallet_session_invalid";
-    readonly expired: "wallet_session_expired";
-    readonly scopeMismatch: "wallet_session_scope_mismatch";
-    readonly unavailable: "wallet_session_unavailable";
-    readonly budgetExhausted: "wallet_budget_exhausted";
+    readonly missing: 'wallet_session_missing';
+    readonly signatureInvalid: 'wallet_session_signature_invalid';
+    readonly claimsInvalid: 'wallet_session_claims_invalid';
+    readonly invalid: 'wallet_session_invalid';
+    readonly expired: 'wallet_session_expired';
+    readonly scopeMismatch: 'wallet_session_scope_mismatch';
+    readonly unavailable: 'wallet_session_unavailable';
+    readonly budgetExhausted: 'wallet_budget_exhausted';
 };
 export type WalletSessionFailureCode = (typeof WALLET_SESSION_FAILURE_CODES)[keyof typeof WALLET_SESSION_FAILURE_CODES];
 export declare function isWalletSessionFailureCode(value: unknown): value is WalletSessionFailureCode;

package/dist/types/shared-ts/src/utils/webauthnDeviceInfo.d.ts

@@ -26,8 +26,8 @@ export type WebAuthnAuthenticatorDeviceInfo = {
     /** Display name for the provider, e.g. "iCloud Keychain". */
     providerLabel?: string;
 };
-declare const WEBAUTHN_DEVICE_BROWSERS: readonly ["chrome", "safari", "firefox", "edge", "other"];
-declare const WEBAUTHN_DEVICE_OSES: readonly ["macos", "ios", "windows", "android", "linux", "other"];
+declare const WEBAUTHN_DEVICE_BROWSERS: readonly ['chrome', 'safari', 'firefox', 'edge', 'other'];
+declare const WEBAUTHN_DEVICE_OSES: readonly ['macos', 'ios', 'windows', 'android', 'linux', 'other'];
 export declare function deriveWebAuthnAuthenticatorDeviceInfo(input: {
     userAgent?: string;
     aaguid?: string;

package/dist/types/shared-ts/src/utils/wireSchema.d.ts

@@ -14,7 +14,7 @@ type ParseResult<T> = {
         readonly message: string;
     };
 };
-type Equal<A, B> = (<T>() => T extends A ? 1 : 2) extends <T>() => T extends B ? 1 : 2 ? true : false;
+type Equal<A, B> = (<T>() => T extends A ? 1 : 2) extends <T>() => (T extends B ? 1 : 2) ? true : false;
 type NeverPaddingKeys<T> = {
     [K in keyof T]-?: [T[K]] extends [undefined] ? K : never;
 }[keyof T];

package/dist/types/shared-ts/src/wallet-recovery/recoveryKeyId.d.ts

@@ -23,7 +23,7 @@ declare const walletRecoveryKeyIdBrand: unique symbol;
 export type DerivedWalletRecoveryKeyId = string & {
     readonly [walletRecoveryKeyIdBrand]: 'DerivedWalletRecoveryKeyId';
 };
-export declare const WALLET_RECOVERY_KEY_ID_PREFIX_V1: "wallet-rkid-v1-";
+export declare const WALLET_RECOVERY_KEY_ID_PREFIX_V1: 'wallet-rkid-v1-';
 export declare function parseDerivedWalletRecoveryKeyId(value: unknown, label?: string): DerivedWalletRecoveryKeyId;
 /**
  * Derives one code's id within a wallet's recovery set, from the decoded code

package/dist/types/wallet-server/src/authorization/factorEvidence.d.ts

@@ -23,7 +23,7 @@ type VerifiedWalletOperationEvidenceSetFields = {
     readonly expiresAtMs: number;
 };
 declare class VerifiedWalletOperationEvidenceSetProof {
-    readonly kind: "verified_wallet_operation_evidence_set";
+    readonly kind: 'verified_wallet_operation_evidence_set';
     readonly tenantId: TenantId;
     readonly principalId: PrincipalId;
     readonly walletId: WalletId;
@@ -37,7 +37,7 @@ declare class VerifiedWalletOperationEvidenceSetProof {
     readonly laneDigest: DigestB64u;
     readonly intentDigest: DigestB64u;
     readonly displayDigest: DigestB64u;
-    readonly assurance: "step_up";
+    readonly assurance: 'step_up';
     readonly verifiedAtMs: number;
     readonly expiresAtMs: number;
     private retainVerifiedEvidenceProof;
@@ -111,7 +111,7 @@ export declare function buildVerifiedWalletSessionEmailOtpFactorResult(fields: O
 /** Nominal server-only owner proofs; private constructors block browser forgery. */
 declare class VerifiedOwnerWalletSessionProof {
     protected readonly __proofBrand = true;
-    readonly kind: "verified_owner_proof_v1";
+    readonly kind: 'verified_owner_proof_v1';
     readonly proofId: VerifiedOwnerProofId;
     readonly method: VerifiedOwnerProofMethod;
     readonly authSource: VerifiedOwnerProofFields['authSource'];
@@ -124,7 +124,7 @@ declare class VerifiedOwnerWalletSessionProof {
     readonly replayIdentity: string;
     readonly verifiedAtMs: number;
     readonly expiresAtMs: number;
-    readonly purpose: "wallet_session";
+    readonly purpose: 'wallet_session';
     readonly operation?: never;
     constructor(fields: Extract<VerifiedOwnerProofFields, {
         readonly purpose: 'wallet_session';
@@ -132,7 +132,7 @@ declare class VerifiedOwnerWalletSessionProof {
 }
 declare class VerifiedOwnerOperationProof {
     protected readonly __proofBrand = true;
-    readonly kind: "verified_owner_proof_v1";
+    readonly kind: 'verified_owner_proof_v1';
     readonly proofId: VerifiedOwnerProofId;
     readonly method: VerifiedOwnerProofMethod;
     readonly authSource: VerifiedOwnerProofFields['authSource'];
@@ -145,7 +145,7 @@ declare class VerifiedOwnerOperationProof {
     readonly replayIdentity: string;
     readonly verifiedAtMs: number;
     readonly expiresAtMs: number;
-    readonly purpose: "operation";
+    readonly purpose: 'operation';
     readonly operation: OwnerOperationBinding;
     constructor(fields: Extract<VerifiedOwnerProofFields, {
         readonly purpose: 'operation';

package/dist/types/wallet-server/src/core/ecdsaMaterialReadSnapshot.d.ts

@@ -1,6 +1,6 @@
 import type { WalletId } from '../../../shared-ts/src/utils/domainIds';
 import type { D1WalletStoreScope } from './d1WalletStore';
-export declare const ECDSA_INSTALLATION_SNAPSHOT_COLUMNS: readonly ["link_session_id", "authority_id", "wallet_id", "auth_method_id", "device_id", "package_set_digest_b64u", "target_factor_verification_digest_b64u", "target_factor_verified_at_ms", "source_manifest_digest_b64u", "delivery_recipient_public_key_b64u", "packages_json", "server_reservation_ids_json", "installed_record_set_digest_b64u", "activated_at_ms"];
+export declare const ECDSA_INSTALLATION_SNAPSHOT_COLUMNS: readonly ['link_session_id', 'authority_id', 'wallet_id', 'auth_method_id', 'device_id', 'package_set_digest_b64u', 'target_factor_verification_digest_b64u', 'target_factor_verified_at_ms', 'source_manifest_digest_b64u', 'delivery_recipient_public_key_b64u', 'packages_json', 'server_reservation_ids_json', 'installed_record_set_digest_b64u', 'activated_at_ms'];
 type SqlCondition = {
     readonly sql: string;
     readonly bindings: readonly unknown[];

package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts

@@ -7,7 +7,7 @@
  */
 import type { WalletRegistrationCommittedInstallationProjectionV1 } from './threeRouteRegistrationContracts';
 export declare const _threeRouteRequestFixtures: readonly [WalletRegistrationCommittedInstallationProjectionV1, ({
-    readonly kind: "ecdsa_ready";
+    readonly kind: 'ecdsa_ready';
     readonly ecdsa: {
         readonly walletKeys: readonly import("./registrationContracts").WalletRegistrationEcdsaWalletKey[];
         readonly activation: import("../../../shared-ts/src/utils").RouterAbEcdsaRegistrationActivationReceiptV1;
@@ -18,7 +18,7 @@ export declare const _threeRouteRequestFixtures: readonly [WalletRegistrationCom
     readonly nearProvisioning?: never;
     readonly installation?: never;
 }) | ({
-    readonly kind: "ecdsa_ready";
+    readonly kind: 'ecdsa_ready';
     readonly ecdsa: {
         readonly walletKeys: readonly import("./registrationContracts").WalletRegistrationEcdsaWalletKey[];
         readonly activation: import("../../../shared-ts/src/utils").RouterAbEcdsaRegistrationActivationReceiptV1;
@@ -27,11 +27,11 @@ export declare const _threeRouteRequestFixtures: readonly [WalletRegistrationCom
     readonly session: import("../../../shared-ts/src/utils/registrationEstablishedSession").RegistrationEstablishedSessionProjectionV2;
 } & {
     readonly nearProvisioning: {
-        readonly status: "near_pending";
+        readonly status: 'near_pending';
     };
     readonly installation: WalletRegistrationCommittedInstallationProjectionV1;
 }), ({
-    readonly kind: "ecdsa_ready";
+    readonly kind: 'ecdsa_ready';
     readonly ecdsa: {
         readonly walletKeys: readonly import("./registrationContracts").WalletRegistrationEcdsaWalletKey[];
         readonly activation: import("../../../shared-ts/src/utils").RouterAbEcdsaRegistrationActivationReceiptV1;
@@ -42,7 +42,7 @@ export declare const _threeRouteRequestFixtures: readonly [WalletRegistrationCom
     readonly nearProvisioning?: never;
     readonly installation?: never;
 }) | ({
-    readonly kind: "ecdsa_ready";
+    readonly kind: 'ecdsa_ready';
     readonly ecdsa: {
         readonly walletKeys: readonly import("./registrationContracts").WalletRegistrationEcdsaWalletKey[];
         readonly activation: import("../../../shared-ts/src/utils").RouterAbEcdsaRegistrationActivationReceiptV1;
@@ -51,7 +51,7 @@ export declare const _threeRouteRequestFixtures: readonly [WalletRegistrationCom
     readonly session: import("../../../shared-ts/src/utils/registrationEstablishedSession").RegistrationEstablishedSessionProjectionV2;
 } & {
     readonly nearProvisioning: {
-        readonly status: "near_pending";
+        readonly status: 'near_pending';
     };
     readonly installation: WalletRegistrationCommittedInstallationProjectionV1;
 })];

package/dist/types/wallet-server/src/router/auth/webAuthnCredentialCodecs.d.ts

@@ -12,7 +12,7 @@ type WebAuthnClientDataJson = {
     readonly origin: string;
     readonly type: string;
 };
-export declare function decodeWebAuthnBase64UrlOrBase64(input: string, fieldName: string): Uint8Array;
+export declare function decodeWebAuthnBase64UrlOrBase64(input: string, fieldName: string): Uint8Array<ArrayBuffer>;
 export declare function parseWebAuthnClientDataJsonBase64url(clientDataJSONB64u: string): WebAuthnClientDataJson;
 export declare function webAuthnOriginHostnameOrEmpty(origin: string): string;
 export declare function webAuthnCredentialIdB64uFromCredential(input: unknown): WebAuthnCredentialIdParseResult;

package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.d.ts

@@ -145,7 +145,7 @@ type TargetCredentialRegistrationSuccessV1 = {
     readonly targetCredential: LinkedDeviceTargetCredentialRegistrationResultV1;
 };
 export declare class LinkedDeviceRetiredTargetRegistrationShapeErrorV1 extends Error {
-    readonly kind: "retired_target_registration_shape";
+    readonly kind: 'retired_target_registration_shape';
     constructor();
 }
 export declare class D1LinkedDeviceTargetCredentialProviderV1 implements DeviceLinkingTargetCredentialProviderV1 {

package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts

@@ -5,7 +5,7 @@ import type { ActiveLaneProtocolSourceV1 } from '../../../../../../shared-ts/src
 import type { EvmFamilySigningKeySlotId } from '../../../../../../shared-ts/src/signing-lanes/evmFamilySigningKeySlotId';
 import type { KeyCreationSignerSlot } from '../../../../../../shared-ts/src/passkey-custody/primitives';
 import type { Ed25519PublicKeyB64u } from '../../../../../../shared-ts/src/passkey-custody/primitives';
-import type { RouterAbEd25519YaoActivationBindingV1, RouterAbEd25519YaoApplicationBindingFactsV1, RouterAbEd25519YaoCeremonyBindingV1 } from '../../../../../../shared-ts/src/utils/routerAbEd25519Yao';
+import type { RouterAbEd25519YaoActivationBindingV1, RouterAbEd25519YaoApplicationBindingFactsV1 } from '../../../../../../shared-ts/src/utils/routerAbEd25519Yao';
 import type { NearEd25519SigningKeyId } from '../../../../../../shared-ts/src/utils/registrationIds';
 import type { WalletKeyId } from '../../../../../../shared-ts/src/signing-lanes/ids';
 import type { LinkedDeviceSessionRecordV1 } from '../../../../core/deviceLinking/linkedDeviceSessionRecord';
@@ -25,10 +25,10 @@ type LinkedDeviceOwnerEd25519SourceChildResolutionV1 = LinkedDeviceOwnerSourceCh
     readonly nearEd25519SigningKeyId: NearEd25519SigningKeyId;
     readonly keyCreationSignerSlot: KeyCreationSignerSlot;
     readonly stableContextBindingB64u: string;
-    readonly sourceBinding: RouterAbEd25519YaoActivationBindingV1<'registration'>;
+    readonly sourceBinding: RouterAbEd25519YaoActivationBindingV1;
     readonly applicationBinding: RouterAbEd25519YaoApplicationBindingFactsV1;
     /** A linked device's own registration binding, when that device is the source. */
-    readonly linkedSourceBinding?: RouterAbEd25519YaoCeremonyBindingV1;
+    readonly linkedSourceBinding?: RouterAbEd25519YaoActivationBindingV1<'registration'>;
 };
 type LinkedDeviceOwnerEcdsaSourceChildResolutionV1 = LinkedDeviceOwnerSourceChildResolutionBaseV1 & {
     readonly keyFamily: 'ecdsa_secp256k1';

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationRead.d.ts

@@ -41,10 +41,10 @@ export declare class D1WalletRegistrationRead {
         ok: true;
         operation: import("../../../cloudflare-adaptor").VersionedJsonRecordReadResult<D1WalletRegistrationNearProvisioningSideEffectRecord>;
         readFounding: () => {
-            readonly kind: "snapshot";
+            readonly kind: 'snapshot';
             readonly records: {
-                readonly walletAuthMethodId: import("../../../../../../shared-ts/src/utils").WalletAuthMethodId;
                 readonly walletAuthorityId: import("../../../../../../shared-ts/src/utils").WalletAuthorityId;
+                readonly walletAuthMethodId: import("../../../../../../shared-ts/src/utils").WalletAuthMethodId;
             } & {
                 readonly authorityRow: {
                     readonly record_json?: unknown;

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.d.ts

@@ -43,9 +43,9 @@ type InitialEd25519RegistrationSessionInput = {
 export declare function commitInitialEd25519RegistrationSession(input: InitialEd25519RegistrationSessionInput, commitSession?: AuthorizationGrantPort['commitDirectReplayableWalletSessionAuthorizationV2']): Promise<{
     readonly result: DirectV2IssueResult;
     readonly publication: import("../../../../cloud-host").WalletSessionLocatorPublication & {
-        readonly kind: "credential";
+        readonly kind: 'credential';
     };
-    readonly registration: import("../../../..").DirectV2CommitResult["registration"];
+    readonly registration: import("../../../..").DirectV2CommitResult['registration'];
 }>;
 export declare function walletSessionPrincipalId(authority: WalletAuthAuthority): PrincipalId;
 export declare function buildRegistrationOwnerProof(input: {

package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/authorizationSnapshotLayout.d.ts

@@ -1,5 +1,5 @@
 import type { D1DatabaseLike } from '../../../../storage/tenantRoute';
-declare const TABLES: readonly ["wallet_email_otp_rate_limits", "email_otp_wallet_enrollments", "email_otp_auth_states", "wallets", "wallet_signers", "wallet_recovery_code_locators", "wallet_authorities", "wallet_auth_methods", "wallet_relocation_approvals", "webauthn_credential_bindings", "webauthn_authenticators", "router_ab_yao_versioned_json_records", "authorization_wallet_session_quotas", "wallet_session_authorizations_v2", "wallet_session_hosted_credentials_v2", "wallet_session_hosted_exchange_codes_v2", "verified_wallet_operation_evidence_sets", "authorized_operations", "authorized_operation_audit_events", "linked_device_sessions", "linked_device_authority_allocations", "linked_device_authority_installations", "linked_device_target_credentials", "linked_device_target_commit_reservations", "linked_device_session_transcripts", "linked_device_ed25519_export_root_transfers", "linked_device_email_otp_grants", "linked_device_request_proof_nonces", "linked_device_bootstrap_imports", "linked_device_wallet_session_credential_deliveries_v1"];
+declare const TABLES: readonly ['wallet_email_otp_rate_limits', 'email_otp_wallet_enrollments', 'email_otp_auth_states', 'wallets', 'wallet_signers', 'wallet_recovery_code_locators', 'wallet_authorities', 'wallet_auth_methods', 'wallet_relocation_approvals', 'webauthn_credential_bindings', 'webauthn_authenticators', 'router_ab_yao_versioned_json_records', 'authorization_wallet_session_quotas', 'wallet_session_authorizations_v2', 'wallet_session_hosted_credentials_v2', 'wallet_session_hosted_exchange_codes_v2', 'verified_wallet_operation_evidence_sets', 'authorized_operations', 'authorized_operation_audit_events', 'linked_device_sessions', 'linked_device_authority_allocations', 'linked_device_authority_installations', 'linked_device_target_credentials', 'linked_device_target_commit_reservations', 'linked_device_session_transcripts', 'linked_device_ed25519_export_root_transfers', 'linked_device_email_otp_grants', 'linked_device_request_proof_nonces', 'linked_device_bootstrap_imports', 'linked_device_wallet_session_credential_deliveries_v1'];
 type Table = (typeof TABLES)[number];
 export declare class AuthorizationSnapshotLayout {
     #private;

package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationOwner.d.ts

@@ -15,7 +15,7 @@ export type WalletRelocationFactorVerification = {
 };
 export declare function readWalletRelocationOwner(database: D1DatabaseLike, scope: D1TenantScope, binding: WalletRelocationChallengeBinding): Promise<{
     method: ({
-        readonly version: "wallet_auth_method_v2";
+        readonly version: 'wallet_auth_method_v2';
         readonly walletAuthMethodId: import("../../../../../../shared-ts/src/utils").WalletAuthMethodId;
         readonly walletId: import("../../../../../../shared-ts/src/utils").WalletId;
         readonly walletAuthorityId: import("../../../../../../shared-ts/src/utils").WalletAuthorityId;
@@ -26,7 +26,7 @@ export declare function readWalletRelocationOwner(database: D1DatabaseLike, scop
         readonly walletId: import("../../../../../../shared-ts/src/utils").WalletId;
         readonly createdAtMs: number;
     } & {
-        readonly kind: "passkey";
+        readonly kind: 'passkey';
         readonly rpId: import("../../../../../../shared-ts/src/utils").WebAuthnRpId;
         readonly credentialIdB64u: import("../../../../../../shared-ts/src/utils").WebAuthnCredentialIdB64u;
         readonly credentialPublicKeyB64u: string;
@@ -34,11 +34,11 @@ export declare function readWalletRelocationOwner(database: D1DatabaseLike, scop
         readonly emailHashHex?: never;
         readonly registrationAuthorityId?: never;
     } & {
-        readonly status: "active";
+        readonly status: 'active';
         readonly activatedAtMs: number;
         readonly revokedAtMs?: undefined;
     }) | ({
-        readonly version: "wallet_auth_method_v2";
+        readonly version: 'wallet_auth_method_v2';
         readonly walletAuthMethodId: import("../../../../../../shared-ts/src/utils").WalletAuthMethodId;
         readonly walletId: import("../../../../../../shared-ts/src/utils").WalletId;
         readonly walletAuthorityId: import("../../../../../../shared-ts/src/utils").WalletAuthorityId;
@@ -49,7 +49,7 @@ export declare function readWalletRelocationOwner(database: D1DatabaseLike, scop
         readonly walletId: import("../../../../../../shared-ts/src/utils").WalletId;
         readonly createdAtMs: number;
     } & {
-        readonly kind: "email_otp";
+        readonly kind: 'email_otp';
         readonly emailHashHex: string;
         readonly registrationAuthorityId: string;
         readonly rpId?: never;
@@ -57,16 +57,16 @@ export declare function readWalletRelocationOwner(database: D1DatabaseLike, scop
         readonly credentialPublicKeyB64u?: never;
         readonly counter?: never;
     } & {
-        readonly status: "active";
+        readonly status: 'active';
         readonly activatedAtMs: number;
         readonly revokedAtMs?: undefined;
     });
     authority: {
-        readonly kind: "wallet_authority_v1";
+        readonly kind: 'wallet_authority_v1';
         readonly authorityId: import("../../../../../../shared-ts/src/utils").WalletAuthorityId;
         readonly walletId: import("../../../../../../shared-ts/src/utils").WalletId;
         readonly principal: {
-            readonly kind: "owner_device";
+            readonly kind: 'owner_device';
             readonly deviceId: import("../../../../../../shared-ts/src/authorization").DeviceId;
         };
         readonly provenance: import("../../../../../../shared-ts/src/authorization").WalletAuthorityProvenanceV1;
@@ -78,7 +78,7 @@ export declare function readWalletRelocationOwner(database: D1DatabaseLike, scop
         readonly createdAtMs: number;
         readonly updatedAtMs: number;
     } & {
-        readonly state: "active";
+        readonly state: 'active';
         readonly localInstallPackageSetDigestB64u?: never;
         readonly activatedAtMs: number;
         readonly revokedAtMs?: never;

package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.d.ts

@@ -6,12 +6,12 @@ import type { OrdinaryInactiveSignerMaterialActivationPortV1 } from '../d1/devic
 import { type RouterAbEd25519YaoResolvedTenantRootV1 } from '../../domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope';
 import type { OrdinaryEcdsaSignerMaterialReservationPreparationV1, OrdinaryEd25519SignerMaterialReservationPreparationV1 } from '../../../core/signingMaterial/ordinaryInactiveSignerMaterialReservation';
 /** Source-preserving ordinary material paths implemented by the Cloudflare workers. */
-export declare const CLOUDFLARE_ROUTER_ED25519_YAO_SOURCE_PRESERVING_EXECUTE_PATH_V1: "/router-ab/router/ed25519-yao/execute-source-preserving";
-export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_RESERVE_INACTIVE_SOURCE_PRESERVING_PATH_V1: "/router-ab/signing-worker/ecdsa-derivation/reserve-inactive-source-preserving";
-export declare const CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_ACTIVATE_RESERVATION_PATH_V1: "/router-ab/signing-worker/ed25519-yao/activate-reservation";
-export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_ACTIVATE_RESERVATION_PATH_V1: "/router-ab/signing-worker/ecdsa-derivation/activate-reservation";
-export declare const CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_DEACTIVATE_RESERVATION_PATH_V1: "/router-ab/signing-worker/ed25519-yao/deactivate-reservation";
-export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_DEACTIVATE_RESERVATION_PATH_V1: "/router-ab/signing-worker/ecdsa-derivation/deactivate-reservation";
+export declare const CLOUDFLARE_ROUTER_ED25519_YAO_SOURCE_PRESERVING_EXECUTE_PATH_V1: '/router-ab/router/ed25519-yao/execute-source-preserving';
+export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_RESERVE_INACTIVE_SOURCE_PRESERVING_PATH_V1: '/router-ab/signing-worker/ecdsa-derivation/reserve-inactive-source-preserving';
+export declare const CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_ACTIVATE_RESERVATION_PATH_V1: '/router-ab/signing-worker/ed25519-yao/activate-reservation';
+export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_ACTIVATE_RESERVATION_PATH_V1: '/router-ab/signing-worker/ecdsa-derivation/activate-reservation';
+export declare const CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_DEACTIVATE_RESERVATION_PATH_V1: '/router-ab/signing-worker/ed25519-yao/deactivate-reservation';
+export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_DEACTIVATE_RESERVATION_PATH_V1: '/router-ab/signing-worker/ecdsa-derivation/deactivate-reservation';
 /**
  * The tenant this Gateway serves. With one of its wallets it names the
  * SigningWorker wallet object that holds that wallet's material, and the