@seams/wallet-server 0.5.0

package/dist/esm/cloud-host.js

@@ -0,0 +1,126 @@
+import { parseOrgId, parseWalletId, parseWebAuthnRpId } from "./shared-ts/src/utils/domainIds.js";
+import { base64UrlDecode, base64UrlEncode } from "./shared-ts/src/utils/base64.js";
+import { sha256Bytes } from "./shared-ts/src/utils/digests.js";
+import "./shared-ts/src/utils/encoders.js";
+import { ROUTER_AB_PUBLIC_KEYSET_PATH, ROUTER_AB_PUBLIC_KEYSET_VERSION_V2, ROUTER_AB_PUBLIC_KEYSET_WELL_KNOWN_PATH, parseRouterAbPublicKeysetV2 } from "./shared-ts/src/utils/routerAbPublicKeyset.js";
+import { ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_STATUS_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1 } from "./shared-ts/src/utils/routerAbEd25519Yao.js";
+import { ensureLeadingSlash, normalizeBoundedPositiveInteger, normalizeLowercaseString, normalizeOptionalTrimmedString, normalizeTrimmedString } from "./shared-ts/src/utils/normalize.js";
+import { isPlainObject } from "./shared-ts/src/utils/validation.js";
+import { secureRandomBase36, secureRandomBase64Url } from "./shared-ts/src/utils/secureRandomId.js";
+import { ROUTER_API_CREDENTIAL_SCOPES } from "./router/framework/apiCredentialPorts.js";
+import { API_CREDENTIAL_ROUTE_SCOPES, API_CREDENTIAL_TYPES, PUBLIC_PROOF_TYPES } from "./router/framework/routeAuthPolicy.js";
+import { ROUTE_SERVICE_KEYS } from "./router/framework/routeExecutionContext.js";
+import { createRouterApiRouteDefinitions, defineRoute, defineRouteExtension, findRouteDefinitionById, findRouteDefinitionForRequest, matchesRouteDefinitionRequest } from "./router/framework/routeDefinitions.js";
+import { SessionService, buildCorsOrigins, normalizeCorsOrigin, parseCsvList } from "./core/SessionService.js";
+import { addSecp256k1PublicKeys33, computeEip1559TxHash, encodeEip1559SignedTxFromSignature65, ensureEvmCryptoWasm, secp256k1PrivateKey32ToPublicKey33, secp256k1PublicKey33ToEthereumAddress, sha256BytesSync, signSecp256k1Recoverable, validateSecp256k1PublicKey33, verifySecp256k1Bip340SignatureAgainstPublicKey33, verifySecp256k1RecoverableSignatureAgainstPublicKey33 } from "./core/ThresholdService/evmCryptoWasm.js";
+import { d1ChangedRows, d1Integer, d1Number, formatD1ExecStatement, isD1DatabaseLike, parseD1JsonArrayColumn, parseD1JsonColumn, parseD1JsonObjectColumn, queryD1All, queryD1One, resolveD1DatabaseFromConfig } from "./storage/d1Sql.js";
+import { D1WalletStore, WALLET_STORE_D1_SCHEMA_SQL, buildWalletEcdsaSignerRecord, ensureWalletStoreD1Schema, parseWalletEd25519SignerRecord, prepareD1WalletPutSignerStatement, prepareD1WalletPutSubjectStatement } from "./core/d1WalletStore.js";
+import { D1WalletAuthMethodStore, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_SQL, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_V2_SQL, bindWalletAuthMethodIdentity, bindWalletAuthMethodIdentityV2, ensureWalletAuthMethodStoreD1Schema, ensureWalletAuthMethodStoreD1SchemaV2, normalizeWalletAuthMethod, normalizeWalletAuthMethodV2, prepareD1WalletAuthMethodInsertStatement, prepareD1WalletAuthMethodPutStatement, prepareD1WalletAuthMethodV2PutStatement, walletAuthMethodId, walletAuthMethodV2Id } from "./core/d1WalletAuthMethodStore.js";
+import { coerceLogger, normalizeLogger } from "./core/logger.js";
+import { parseHpkePublicKeyB64u, parseSigningWorkerParticipantId, parseSigningWorkerRecipientKeyDigestB64u, parseSigningWorkerRecipientKeyId } from "./shared-ts/src/signing-lanes/participants.js";
+import { buildSigningWorkerParticipantRecordWithDigestV1 } from "./shared-ts/src/signing-lanes/participantDigest.js";
+import { LaneLifecycleApplicationService } from "./core/signingLanes/LaneLifecycleApplicationService.js";
+import { RouterAbEcdsaPresignRuntime, parseRouterAbEcdsaPresignRuntimeConfig } from "./core/routerAbSigning/RouterAbEcdsaPresignRuntime.js";
+import { registrationPreparationIdFromString } from "./core/types.js";
+import { ActionType } from "./shared-ts/src/near/actions.js";
+import { enforceDelegatePolicy, executeSignedDelegateWithRelayer, normalizeHashToBytes, validateDelegateExpiryAndNonce } from "./delegateAction/index.js";
+import { applyRouteMetering } from "./router/framework/applyRouteMetering.js";
+import { InMemoryRouterAbNormalSigningAdmissionStore, abusePrincipalKey, createInMemoryRouterAbNormalSigningAdmissionAdapter, createInMemoryRouterAbNormalSigningAdmissionStore, createRouterAbNormalSigningAdmissionAdapter, runtimePolicyScopeKey } from "./router/domains/signingOperations/routerAbNormalSigningAdmissionCore.js";
+import { CloudflareD1RouterAbNormalSigningAdmissionStore, createCloudflareD1RouterAbNormalSigningAdmissionStore } from "./router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js";
+import { assertUniqueRouterApiRouteDefinitions, getRouterApiRouteExtensionDefinitions, getRouterApiRouteExtensionRoutes, getRouterApiRouteExtensionsForTransport } from "./router/framework/routeExtensions.js";
+import { coerceRouterLogger } from "./router/framework/logger.js";
+import { buildTenantRootIdentityFromAuthenticatedDeploymentV1, encodeTenantRootIdentityV1 } from "./shared-ts/src/tenant-root/tenantRootIdentity.js";
+import { WALLET_CONSOLE_OPS_BASE_PATH_V1, WALLET_CONSOLE_OP_PATHS_V1, WALLET_CONSOLE_SERVICE_ORIGIN_V1, decodeWalletConsoleTenantRootActiveLineageRequestV1, decodeWalletConsoleTenantRootActiveLineageResponseV1 } from "./router/cloudflare/runtime/walletConsoleOps.js";
+import { createWalletConsoleOpsClient } from "./router/cloudflare/runtime/walletConsoleOpsClient.js";
+import { ROUTER_AB_TRACE_ID_HEADER_V1 } from "./shared-ts/src/utils/routerAbTraceContext.js";
+import { headersToRecord, isObject, json, readJson, toResponse, withCors } from "./router/framework/http.js";
+import { extractBearerCredential, extractRouterApiEnvironmentId, normalizeSourceIp, resolveRequestOriginRateLimitKeyFromExpressRequest, resolveRequestOriginRateLimitKeyFromFetchHeaders, resolveSourceIpFromExpressRequest, resolveSourceIpFromFetchHeaders } from "./router/auth/routerApiKeyAuth.js";
+import { resolvePublishableKeyApiCredentialAuth, resolveSecretKeyApiCredentialAuth } from "./router/auth/routerApiCredentialAuth.js";
+import { enforceRoutePolicy } from "./router/framework/enforceRoutePolicy.js";
+import { routeError, routeJson, sendExpressRouteResponse, toFetchRouteResponse } from "./router/framework/routeResponses.js";
+import { ROUTER_AB_ECDSA_DERIVATION_PRIVATE_SIGNING_PATHS, ROUTER_AB_ED25519_PRIVATE_SIGNING_PATHS, admitRouterAbEcdsaReusableWalletSessionOperation, authenticateRouterAbEcdsaOperationStepUp, authenticateRouterAbEcdsaOperationStepUpWithExhaustedCandidate, authenticateRouterAbWalletOperationStepUp, authenticateRouterAbWalletOperationStepUpIdentity, authorizeRouterAbEcdsaDerivationNormalSigningRoute, authorizeRouterAbEd25519NormalSigningRoute, buildRouterAbEcdsaAcceptedAuthorizedOperationV1, buildRouterAbEcdsaDerivationPrivateSigningWorkerBody, buildRouterAbEcdsaOwnerOperationStepUpPreparation, buildRouterAbEd25519AcceptedAuthorizedOperationV1, buildRouterAbEd25519OwnerOperationStepUpPreparation, buildRouterAbEd25519PrivateSigningWorkerBody, claimRouterAbEcdsaOperationStepUp, completeRouterAbEcdsaOperation, computeRouterAbEd25519NormalSigningAdmissionMaterial, decideRouterAbEcdsaOwnerOperationAuthorization, decideRouterAbEd25519OwnerOperationAuthorization, evaluateRouterAbNormalSigningAdmission, handleRouterAbEcdsaDerivationNormalSigningRouteCore, parseRouterAbEd25519NormalSigningScopeV2, parseRouterAbEd25519OperationStepUpScope, parseRouterAbOperationStepUpOperation, postRouterAbSigningWorkerJson, resolveFreshRouterAbEcdsaMaterialActivation, routerAbEcdsaAtomicAuthorizationConfigured, routerAbEcdsaOperationInProgressResult, routerAbEcdsaOwnerOperationFailureResult, routerAbEcdsaRecordedResponse, routerAbEcdsaReplayHttpResponse, routerAbEcdsaReplayResult, routerAbEcdsaReplayUnavailableResult, routerAbEd25519OwnerOperationFailureResult, routerAbNormalSigningMaterialSourceFromActiveLaneV1 } from "./router/domains/signingOperations/routerAbPrivateSigningWorker.js";
+import { DEFAULT_WALLET_SESSION_REMAINING_USES, DEFAULT_WALLET_SESSION_TTL_MS, MAX_WALLET_SESSION_REMAINING_USES, MAX_WALLET_SESSION_TTL_MS } from "./shared-ts/src/threshold/sessionPolicy.js";
+import { LINKED_DEVICE_OWNER_AUTHORIZATION_PATH_V1, authenticateDeviceLinkingOwnerWalletSessionRequestV1, createDeviceLinkingOwnerRequestAuthenticatorV1 } from "./router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js";
+import { DEFAULT_SESSION_COOKIE_NAME, deriveJwtExpiresAtIso } from "./router/framework/routerApi.js";
+import { createRouterApiModule } from "./router/framework/modules.js";
+import { createCloudflareRouter } from "./router/cloudflare/runtime/createCloudflareRouter.js";
+import { DEFAULT_WALLET_CONSOLE_SIGNED_DELEGATE_ROUTE_V1, DEFAULT_WALLET_CONSOLE_SPONSORED_EVM_CALL_ROUTE_V1, WALLET_CONSOLE_API_WALLET_DETAIL_PREFIX_V1, WALLET_CONSOLE_SIGNED_DELEGATE_ROUTE_ID_V1, WALLET_CONSOLE_SPONSORED_EVM_CALL_ROUTE_ID_V1, createCloudflareWalletGatewayRouterV1, createWalletConsoleRelayProxyExtensionV1, walletConsoleApiWalletGetRouteDefinitionV1, walletConsoleApiWalletListRouteDefinitionV1, walletConsoleApiWalletSearchRouteDefinitionV1, walletConsoleRelayRouteDefinitionsV1, walletConsoleSignedDelegateRouteDefinitionV1, walletConsoleSponsoredEvmCallRouteDefinitionV1 } from "./router/cloudflare/runtime/walletGateway.js";
+import { WALLET_RUNTIME_OPS_BASE_PATH_V1, WALLET_RUNTIME_OP_PATHS_V1, WALLET_RUNTIME_SERVICE_ORIGIN_V1, parseWalletRuntimeExecuteSignedDelegateRequest, parseWalletRuntimeExecuteSignedDelegateResponse, parseWalletRuntimeExecuteSignedDelegateResult, parseWalletRuntimeRelayerAccount, parseWalletRuntimeWalletIdentitiesResult, parseWalletRuntimeWalletIdentityRequest } from "./router/cloudflare/runtime/walletRuntimeOps.js";
+import { createWalletRuntimeOpsHandler } from "./router/cloudflare/runtime/walletRuntimeOpsHandler.js";
+import { WALLET_CONTROL_AUTH_MARKER_V1, WALLET_CONTROL_BASE_PATH_V1, WALLET_CONTROL_SERVICE_ORIGIN_V1, createWalletControlClientBindings, handleWalletControlRequest } from "./router/cloudflare/runtime/walletControlOps.js";
+import { resolveRuntimeTenantRootLineage } from "./router/cloudflare/runtime/walletConsoleTenantRootLineage.js";
+import { ROUTER_AB_MPC_ROUTER_ORIGIN, ROUTER_AB_SIGNING_WORKER_ORIGIN, createRouterAbServiceBindingFetch } from "./router/cloudflare/runtime/routerAbServiceBindings.js";
+import { runRouterAbPrewarmScheduledV1 } from "./router/cloudflare/runtime/routerAbPrewarm.js";
+import { randomTenantRootCreationGrantBytesV1, signTenantRootCreationGrantV1, tenantRootIdentityDigestB64uV1 } from "./router/cloudflare/runtime/tenantRootCreationGrant.js";
+import { CrossSiteSessionCookieAdapter, encodeSessionJsonSegment, normalizeSessionString, normalizeSessionTtlSeconds, parseSessionJwt, requireNormalizedSessionString, sessionJwtTimeClaims, toSessionArrayBufferCopy } from "./router/cloudflare/runtime/sessionAdapterRuntime.js";
+import { readEnvironmentCsv, readEnvironmentString, requireEnvironmentString } from "./router/cloudflare/runtime/environment.js";
+import { createStaticWalletConsoleBindingV1, handleStaticWalletConsoleRequestV1, parseStaticWalletConsoleBindingConfigV1 } from "./router/cloudflare/runtime/staticWalletConsoleBinding.js";
+import { CloudflareD1WebAuthnStore, prepareD1WebAuthnAuthenticatorInsertStatement, prepareD1WebAuthnAuthenticatorPutStatement } from "./router/cloudflare/d1/webauthn/d1WebAuthnStore.js";
+import { CloudflareD1WebAuthnAuthService } from "./router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js";
+import { CloudflareD1AuthorizationStore } from "./router/cloudflare/d1/authorization/d1AuthorizationStore.js";
+import { CloudflareD1VaultProxyStore } from "./router/cloudflare/d1/authorization/d1VaultProxyStore.js";
+import { InMemoryRouterAbEd25519YaoRegistrationService, createRouterAbEd25519YaoRegistrationModule } from "./router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.js";
+import { InMemoryRouterAbEd25519YaoRegistrationIntentAuthorizationAdapter } from "./router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js";
+import { InMemoryRouterAbEd25519YaoExportService, InMemoryRouterAbEd25519YaoExportStateV1, RouterAbEd25519YaoExportOwnerProofAuthorizationAdapter, createRouterAbEd25519YaoExportModule, parseRouterAbEd25519YaoExportAdmissionEnvelopeV1, parseRouterAbEd25519YaoExportExecuteEnvelopeV1 } from "./router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js";
+import { buildRouterAbEd25519YaoAddSignerAdmissionRequestV1, buildRouterAbEd25519YaoProductAdmissionRequestV1, createRouterAbEd25519YaoMaterialActivationRefV1, createRouterAbEd25519YaoProductRegistrationCompositionFromPortsV1, createRouterAbEd25519YaoProductRegistrationRuntimeV1, createRouterAbEd25519YaoProductRegistrationStateFromPartsV1, createRouterAbEd25519YaoProductRegistrationStateV1, parseRouterAbEd25519YaoProductRegistrationStateV1, projectRouterAbEd25519YaoExactWalletSession, routerAbEd25519YaoPersistedCapabilityMatchesLookupV1 } from "./router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js";
+import { RouterAbEd25519YaoHttpRegistrationBackend, createRouterAbEd25519YaoHttpRegistrationBackendFromEnv, parseRouterAbEd25519YaoActivationKeysetFromEnvV1 } from "./router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.js";
+import { StaticCloudflareTenantStorageRouteResolver, createCloudflareTenantStorageRoute, createSignerD1DoStorageTarget, createStaticCloudflareTenantStorageRouteResolver, createStaticCloudflareTenantStorageRouteResolverFromBindings, tenantStorageRouteBackendFamily, tenantStorageRouteDiagnostic } from "./storage/tenantRoute.js";
+import { createInMemoryRouterApiRuntimeSnapshotConsumer, validateRuntimeSnapshotExpectation } from "./router/framework/runtimeSnapshotConsumer.js";
+import { createSelfHostedCloudflareSigningRouter, createSelfHostedCloudflareSigningWorker } from "./router/cloudflare/runtime/createSelfHostedCloudflareSigningWorker.js";
+import { ThresholdStoreDurableObject } from "./router/cloudflare/durableObjects/thresholdStore.js";
+import { CloudflareDurableObjectVersionedJsonRecordStore, CloudflareVersionedJsonRecordStoreError, createCloudflareDurableObjectVersionedJsonRecordStore } from "./router/cloudflare/durableObjects/versionedJsonRecordStore.js";
+import { CloudflareD1VersionedJsonRecordStore, CloudflareD1VersionedJsonRecordStoreError, createCloudflareD1VersionedJsonRecordStore } from "./router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.js";
+import { createRouterAbEd25519YaoCeremonyStateStoreV1, encodeRouterAbEd25519YaoProductRegistrationStateV1, parseRouterAbEd25519YaoCeremonyKeyV1, parseRouterAbEd25519YaoProductRegistrationStateJsonV1, resolveRouterAbEd25519YaoCeremonyKeyFromRequestV1 } from "./router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPersistence.js";
+import { mergeRouterAbEd25519YaoProductRegistrationStatePartitionV1, partitionRouterAbEd25519YaoProductRegistrationStateV1 } from "./router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js";
+import { ROUTER_AB_ED25519_YAO_SHARED_STATE_RECORD_KEY_V1, createRouterAbEd25519YaoProductRegistrationPartitionedStateStoreV1, encodeRouterAbEd25519YaoProductRegistrationPartitionRecordV1, parseRouterAbEd25519YaoProductRegistrationPartitionRecordJsonV1, parseRouterAbEd25519YaoProductRegistrationPartitionRecordV1, routerAbEd25519YaoPartitionedStateAfterStoredCommitV1, sameRouterAbEd25519YaoSharedStateCanonicalEncodingV1 } from "./router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js";
+import { createRouterAbEd25519YaoProductRegistrationPartitionedStateStoreFromD1V1 } from "./router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.js";
+import { runRouterAbEd25519YaoProductRegistrationRequestScopedV1 } from "./router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.js";
+import { createRouterAbEd25519YaoProductRegistrationRequestScopedRuntimeV1 } from "./router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.js";
+import { runRouterAbEd25519YaoRegistrationSideEffectV1 } from "./router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.js";
+import { runRouterAbEd25519YaoRegistrationTwoPhaseV1 } from "./router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.js";
+import { CLOUDFLARE_ROUTER_ED25519_YAO_SOURCE_PRESERVING_EXECUTE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_ACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_DEACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_RESERVE_INACTIVE_SOURCE_PRESERVING_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_ACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_DEACTIVATE_RESERVATION_PATH_V1, CloudflareOrdinaryInactiveSignerMaterialDeactivationWorkerV1, CloudflareOrdinaryInactiveSignerMaterialReservationWorkerV1, UnavailableOrdinaryInactiveSignerMaterialDeactivationWorkerV1, UnavailableOrdinaryInactiveSignerMaterialReservationWorkerV1, createCloudflareLinkedDeviceEd25519SourcePreservingRouterEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialActivationEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialActivationPortV1, createCloudflareOrdinaryInactiveSignerMaterialDeactivationEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialDeactivationPortV1, createCloudflareOrdinaryInactiveSignerMaterialReservationEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialReservationServiceV1, createUnavailableOrdinaryInactiveSignerMaterialDeactivationPortV1, createUnavailableOrdinaryInactiveSignerMaterialReservationWorkerV1 } from "./router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.js";
+import { handleRouterAbEd25519YaoRegistrationRequestScopedCloudflareV1 } from "./router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.js";
+import "./router/cloudflare-adaptor.js";
+import { CloudflareD1RouterAbEd25519YaoCapabilityPersistence, ROUTER_AB_ED25519_YAO_CAPABILITY_REPLACEMENT_TABLE_V1 } from "./router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js";
+import { CloudflareD1OidcJwksCache, parseBooleanJwtClaim, parseCacheControlMaxAgeSec, parseGoogleJwks, parseJwtAud, parseRs256JwtForVerification, validateGoogleIdTokenClaims, verifyRs256JwtSignature } from "./router/cloudflare/d1/oidc/d1OidcBoundary.js";
+import { createSigningSessionSealOptions, parseSigningSessionSealRootConfig } from "./threshold/session/signingSessionSeal/options.js";
+import { normalizeD1RouterApiAuthOptions, normalizeLinkedDevicePasskeyTargetConfigurationV1, parseBooleanFlag, requireD1RouterApiAuthScopeString } from "./router/cloudflare/d1/auth/d1RouterApiAuthConfig.js";
+import { decodeJsonRpcEnvelope } from "./shared-ts/src/utils/jsonRpc.js";
+import { createRouterAbEcdsaEd25519CeremonyTokenIssuer, createRouterAbEcdsaStrictPostRegistrationPort, createRouterAbEcdsaStrictRegistrationPort, parseRouterAbEcdsaEd25519PrivateJwk, parseRouterAbEcdsaStrictRegistrationTopology, parseStoredRouterAbEcdsaPendingActivationV1, routerAbEcdsaStrictRegistrationFactsBindingJson, routerAbEcdsaStrictRegistrationRequestBindingJson, routerAbEcdsaStrictRegistrationRequestMatchesFacts } from "./router/domains/ecdsa/routerAbEcdsaStrictRegistration.js";
+import { D1LinkedDeviceEd25519ExportRootStoreV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceEd25519ExportRootStore.js";
+import { D1LinkedDeviceRequestProofNonceStoreV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js";
+import { createD1LinkedDeviceSessionServiceV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionService.js";
+import { parseD1LinkedDeviceSessionRowV1, parseD1LinkedDeviceSessionTranscriptRowV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.js";
+import { D1LinkedDeviceSessionStoreV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js";
+import { createD1LinkedDeviceRouteServiceV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.js";
+import { D1LinkedDeviceSourceContributionPreparationPlannerV1, createD1LinkedDeviceSourceContributionPreparationPlannerV1, linkedDeviceX25519RecipientPublicKeyB64uV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.js";
+import { D1LinkedDeviceAuthorityInstallServiceV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js";
+import { LinkedDeviceSourceFamilyUnavailableErrorV1, createD1LinkedDeviceVerifiedLinkSourceReaderV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkSourceReader.js";
+import { buildVerifiedLinkInputV1, buildVerifiedTargetFactorV1, computeVerifiedTargetFactorVerificationDigestV1, linkedDeviceSignerManifestsEqualV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.js";
+import { D1LinkedDeviceTargetCredentialProviderV1, LinkedDeviceRetiredTargetRegistrationShapeErrorV1, LinkedDeviceWebAuthnRegistrationVerifierV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js";
+import { D1LinkedDeviceTargetPlannerV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.js";
+import { createD1LinkedDeviceOwnerAuthorizationMetadataSourceV1, createD1LinkedDeviceOwnerAuthorizationProviderV1, createD1LinkedDeviceOwnerSourceChildReaderV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js";
+import { createCloudflareD1RouterApiAuthService } from "./router/cloudflare/d1/auth/d1RouterApiAuthService.js";
+import { LANE_CAS_GUARD_SQL, assertD1Success, digestLaneEnrollmentRevocationCommand, equalLaneRecords, firstBatchResult, normalizeScope, parseEnrollmentRow, parseJsonRecord, parseProductEpochRow, parseProtocolRow, parseReceiptRow, parseRequiredString, parseTimestamp, parseVersion, requireD1LaneStoreOptions, scopeValues } from "./router/cloudflare/d1/signingLanes/d1LaneRecords.js";
+import { CloudflareD1LaneLifecycleStore } from "./router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js";
+import { CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_ACTIVATE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_EXECUTE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_RETIRE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_LANE_ACTIVATE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_LANE_RETIRE_PATH_V1, CloudflareSigningWorkerEcdsaLaneTransportV1, CloudflareSigningWorkerEcdsaRetirementTransportV1, LaneLifecycleStoreEcdsaLanePrivateBindingResolverV1, LaneLifecycleStoreEd25519LanePrivateBindingResolverV1, LaneLifecycleStoreNormalSigningLaneMaterialResolverV1, createCloudflareLaneCurveExecutionPortsV1, digestSigningWorkerLaneIdentityV1 } from "./router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js";
+import { createCloudflareD1EcdsaLanePrivateBindingResolverV1 } from "./router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.js";
+import { CloudflareD1LaneEffectJournalStore } from "./router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js";
+import { CloudflareD1LaneLockStore } from "./router/cloudflare/d1/signingLanes/d1LaneLockStore.js";
+import { CloudflareD1LaneEnrollmentGateway } from "./router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.js";
+import { createCloudflareD1LaneLifecycleApplicationService } from "./router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.js";
+import { createCloudflareD1LaneAggregateRevocationApplicationService } from "./router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.js";
+import { CloudflareEd25519LaneProtocolTransportV1, CloudflareLaneProtocolCommitterV1, ROUTER_AB_ED25519_YAO_LANE_EXECUTE_PATH_V1 } from "./router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js";
+import { createCloudflareD1LaneProtocolCommitterV1 } from "./router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.js";
+import "./router/cloudflare/d1/signingLanes/index.js";
+import { D1LinkedDeviceTargetAuthenticatorStoreV1 } from "./router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetAuthenticatorStore.js";
+import "./router/cloudflare/d1/deviceLinking/index.js";
+import { buildLinkedDeviceEd25519CeremonyBindingV1, createLinkedDeviceEd25519CeremonyBindingResolverV1 } from "./router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.js";
+import { loadCloudflareSignerWasmModule } from "./router/cloudflare/runtime/cloudflareSignerWasm.js";
+import { createEd25519SessionAdapter } from "./router/cloudflare/runtime/ed25519SessionAdapter.js";
+import { handleRouterAbEd25519YaoExportRequestScopedCloudflareV1 } from "./router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js";
+import { handleRouterAbEd25519YaoRecoveryRequestScopedCloudflareV1 } from "./router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js";
+import { RouterAbEd25519YaoRecoveryWalletSessionAuthorizationAdapter } from "./router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryWalletSessionAuthorization.js";
+import { keccak256Bytes } from "./shared-ts/src/utils/keccak.js";
+import { decodeEvmBlockHeader, decodeEvmTransactionByHash, decodeEvmTransactionCall, decodeEvmTransactionReceipt, parseRpcHexQuantity } from "./shared-ts/src/utils/evmRpcResults.js";
+export { API_CREDENTIAL_ROUTE_SCOPES, API_CREDENTIAL_TYPES, ActionType, CLOUDFLARE_ROUTER_ED25519_YAO_SOURCE_PRESERVING_EXECUTE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_ACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_DEACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_ACTIVATE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_EXECUTE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_RETIRE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_RESERVE_INACTIVE_SOURCE_PRESERVING_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_ACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_DEACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_LANE_ACTIVATE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_LANE_RETIRE_PATH_V1, CloudflareD1AuthorizationStore, CloudflareD1LaneEffectJournalStore, CloudflareD1LaneEnrollmentGateway, CloudflareD1LaneLifecycleStore, CloudflareD1LaneLockStore, CloudflareD1OidcJwksCache, CloudflareD1RouterAbEd25519YaoCapabilityPersistence, CloudflareD1RouterAbNormalSigningAdmissionStore, CloudflareD1VaultProxyStore, CloudflareD1VersionedJsonRecordStore, CloudflareD1VersionedJsonRecordStoreError, CloudflareD1WebAuthnAuthService, CloudflareD1WebAuthnStore, CloudflareDurableObjectVersionedJsonRecordStore, CloudflareEd25519LaneProtocolTransportV1, CloudflareLaneProtocolCommitterV1, CloudflareOrdinaryInactiveSignerMaterialDeactivationWorkerV1, CloudflareOrdinaryInactiveSignerMaterialReservationWorkerV1, CloudflareSigningWorkerEcdsaLaneTransportV1, CloudflareSigningWorkerEcdsaRetirementTransportV1, CloudflareVersionedJsonRecordStoreError, CrossSiteSessionCookieAdapter, D1LinkedDeviceAuthorityInstallServiceV1, D1LinkedDeviceEd25519ExportRootStoreV1, D1LinkedDeviceRequestProofNonceStoreV1, D1LinkedDeviceSessionStoreV1, D1LinkedDeviceSourceContributionPreparationPlannerV1, D1LinkedDeviceTargetAuthenticatorStoreV1, D1LinkedDeviceTargetCredentialProviderV1, D1LinkedDeviceTargetPlannerV1, D1WalletAuthMethodStore, D1WalletStore, DEFAULT_SESSION_COOKIE_NAME, DEFAULT_WALLET_CONSOLE_SIGNED_DELEGATE_ROUTE_V1, DEFAULT_WALLET_CONSOLE_SPONSORED_EVM_CALL_ROUTE_V1, DEFAULT_WALLET_SESSION_REMAINING_USES, DEFAULT_WALLET_SESSION_TTL_MS, InMemoryRouterAbEd25519YaoExportService, InMemoryRouterAbEd25519YaoExportStateV1, InMemoryRouterAbEd25519YaoRegistrationIntentAuthorizationAdapter, InMemoryRouterAbEd25519YaoRegistrationService, InMemoryRouterAbNormalSigningAdmissionStore, LANE_CAS_GUARD_SQL, LINKED_DEVICE_OWNER_AUTHORIZATION_PATH_V1, LaneLifecycleApplicationService, LaneLifecycleStoreEcdsaLanePrivateBindingResolverV1, LaneLifecycleStoreEd25519LanePrivateBindingResolverV1, LaneLifecycleStoreNormalSigningLaneMaterialResolverV1, LinkedDeviceRetiredTargetRegistrationShapeErrorV1, LinkedDeviceSourceFamilyUnavailableErrorV1, LinkedDeviceWebAuthnRegistrationVerifierV1, MAX_WALLET_SESSION_REMAINING_USES, MAX_WALLET_SESSION_TTL_MS, PUBLIC_PROOF_TYPES, ROUTER_AB_ECDSA_DERIVATION_PRIVATE_SIGNING_PATHS, ROUTER_AB_ED25519_PRIVATE_SIGNING_PATHS, ROUTER_AB_ED25519_YAO_CAPABILITY_REPLACEMENT_TABLE_V1, ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_LANE_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ACTIVATE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_RECOVERY_STATUS_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_ADMISSION_PATH_V1, ROUTER_AB_ED25519_YAO_REGISTRATION_EXECUTE_PATH_V1, ROUTER_AB_ED25519_YAO_SHARED_STATE_RECORD_KEY_V1, ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1, ROUTER_AB_MPC_ROUTER_ORIGIN, ROUTER_AB_PUBLIC_KEYSET_PATH, ROUTER_AB_PUBLIC_KEYSET_VERSION_V2, ROUTER_AB_PUBLIC_KEYSET_WELL_KNOWN_PATH, ROUTER_AB_SIGNING_WORKER_ORIGIN, ROUTER_AB_TRACE_ID_HEADER_V1, ROUTER_API_CREDENTIAL_SCOPES, ROUTE_SERVICE_KEYS, RouterAbEcdsaPresignRuntime, RouterAbEd25519YaoExportOwnerProofAuthorizationAdapter, RouterAbEd25519YaoHttpRegistrationBackend, RouterAbEd25519YaoRecoveryWalletSessionAuthorizationAdapter, SessionService, StaticCloudflareTenantStorageRouteResolver, ThresholdStoreDurableObject, UnavailableOrdinaryInactiveSignerMaterialDeactivationWorkerV1, UnavailableOrdinaryInactiveSignerMaterialReservationWorkerV1, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_SQL, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_V2_SQL, WALLET_CONSOLE_API_WALLET_DETAIL_PREFIX_V1, WALLET_CONSOLE_OPS_BASE_PATH_V1, WALLET_CONSOLE_OP_PATHS_V1, WALLET_CONSOLE_SERVICE_ORIGIN_V1, WALLET_CONSOLE_SIGNED_DELEGATE_ROUTE_ID_V1, WALLET_CONSOLE_SPONSORED_EVM_CALL_ROUTE_ID_V1, WALLET_CONTROL_AUTH_MARKER_V1, WALLET_CONTROL_BASE_PATH_V1, WALLET_CONTROL_SERVICE_ORIGIN_V1, WALLET_RUNTIME_OPS_BASE_PATH_V1, WALLET_RUNTIME_OP_PATHS_V1, WALLET_RUNTIME_SERVICE_ORIGIN_V1, WALLET_STORE_D1_SCHEMA_SQL, abusePrincipalKey, addSecp256k1PublicKeys33, admitRouterAbEcdsaReusableWalletSessionOperation, applyRouteMetering, assertD1Success, assertUniqueRouterApiRouteDefinitions, authenticateDeviceLinkingOwnerWalletSessionRequestV1, authenticateRouterAbEcdsaOperationStepUp, authenticateRouterAbEcdsaOperationStepUpWithExhaustedCandidate, authenticateRouterAbWalletOperationStepUp, authenticateRouterAbWalletOperationStepUpIdentity, authorizeRouterAbEcdsaDerivationNormalSigningRoute, authorizeRouterAbEd25519NormalSigningRoute, base64UrlDecode, base64UrlEncode, bindWalletAuthMethodIdentity, bindWalletAuthMethodIdentityV2, buildCorsOrigins, buildLinkedDeviceEd25519CeremonyBindingV1, buildRouterAbEcdsaAcceptedAuthorizedOperationV1, buildRouterAbEcdsaDerivationPrivateSigningWorkerBody, buildRouterAbEcdsaOwnerOperationStepUpPreparation, buildRouterAbEd25519AcceptedAuthorizedOperationV1, buildRouterAbEd25519OwnerOperationStepUpPreparation, buildRouterAbEd25519PrivateSigningWorkerBody, buildRouterAbEd25519YaoAddSignerAdmissionRequestV1, buildRouterAbEd25519YaoProductAdmissionRequestV1, buildSigningWorkerParticipantRecordWithDigestV1, buildTenantRootIdentityFromAuthenticatedDeploymentV1, buildVerifiedLinkInputV1, buildVerifiedTargetFactorV1, buildWalletEcdsaSignerRecord, claimRouterAbEcdsaOperationStepUp, coerceLogger, coerceRouterLogger, completeRouterAbEcdsaOperation, computeEip1559TxHash, computeRouterAbEd25519NormalSigningAdmissionMaterial, computeVerifiedTargetFactorVerificationDigestV1, createCloudflareD1EcdsaLanePrivateBindingResolverV1, createCloudflareD1LaneAggregateRevocationApplicationService, createCloudflareD1LaneLifecycleApplicationService, createCloudflareD1LaneProtocolCommitterV1, createCloudflareD1RouterAbNormalSigningAdmissionStore, createCloudflareD1RouterApiAuthService, createCloudflareD1VersionedJsonRecordStore, createCloudflareDurableObjectVersionedJsonRecordStore, createCloudflareLaneCurveExecutionPortsV1, createCloudflareLinkedDeviceEd25519SourcePreservingRouterEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialActivationEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialActivationPortV1, createCloudflareOrdinaryInactiveSignerMaterialDeactivationEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialDeactivationPortV1, createCloudflareOrdinaryInactiveSignerMaterialReservationEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialReservationServiceV1, createCloudflareRouter, createCloudflareTenantStorageRoute, createCloudflareWalletGatewayRouterV1, createD1LinkedDeviceOwnerAuthorizationMetadataSourceV1, createD1LinkedDeviceOwnerAuthorizationProviderV1, createD1LinkedDeviceOwnerSourceChildReaderV1, createD1LinkedDeviceRouteServiceV1, createD1LinkedDeviceSessionServiceV1, createD1LinkedDeviceSourceContributionPreparationPlannerV1, createD1LinkedDeviceVerifiedLinkSourceReaderV1, createDeviceLinkingOwnerRequestAuthenticatorV1, createEd25519SessionAdapter, createInMemoryRouterAbNormalSigningAdmissionAdapter, createInMemoryRouterAbNormalSigningAdmissionStore, createInMemoryRouterApiRuntimeSnapshotConsumer, createLinkedDeviceEd25519CeremonyBindingResolverV1, createRouterAbEcdsaEd25519CeremonyTokenIssuer, createRouterAbEcdsaStrictPostRegistrationPort, createRouterAbEcdsaStrictRegistrationPort, createRouterAbEd25519YaoCeremonyStateStoreV1, createRouterAbEd25519YaoExportModule, createRouterAbEd25519YaoHttpRegistrationBackendFromEnv, createRouterAbEd25519YaoMaterialActivationRefV1, createRouterAbEd25519YaoProductRegistrationCompositionFromPortsV1, createRouterAbEd25519YaoProductRegistrationPartitionedStateStoreFromD1V1, createRouterAbEd25519YaoProductRegistrationPartitionedStateStoreV1, createRouterAbEd25519YaoProductRegistrationRequestScopedRuntimeV1, createRouterAbEd25519YaoProductRegistrationRuntimeV1, createRouterAbEd25519YaoProductRegistrationStateFromPartsV1, createRouterAbEd25519YaoProductRegistrationStateV1, createRouterAbEd25519YaoRegistrationModule, createRouterAbNormalSigningAdmissionAdapter, createRouterAbServiceBindingFetch, createRouterApiModule, createRouterApiRouteDefinitions, createSelfHostedCloudflareSigningRouter, createSelfHostedCloudflareSigningWorker, createSignerD1DoStorageTarget, createSigningSessionSealOptions, createStaticCloudflareTenantStorageRouteResolver, createStaticCloudflareTenantStorageRouteResolverFromBindings, createStaticWalletConsoleBindingV1, createUnavailableOrdinaryInactiveSignerMaterialDeactivationPortV1, createUnavailableOrdinaryInactiveSignerMaterialReservationWorkerV1, createWalletConsoleOpsClient, createWalletConsoleRelayProxyExtensionV1, createWalletControlClientBindings, createWalletRuntimeOpsHandler, d1ChangedRows, d1Integer, d1Number, decideRouterAbEcdsaOwnerOperationAuthorization, decideRouterAbEd25519OwnerOperationAuthorization, decodeEvmBlockHeader, decodeEvmTransactionByHash, decodeEvmTransactionCall, decodeEvmTransactionReceipt, decodeJsonRpcEnvelope, decodeWalletConsoleTenantRootActiveLineageRequestV1, decodeWalletConsoleTenantRootActiveLineageResponseV1, defineRoute, defineRouteExtension, deriveJwtExpiresAtIso, digestLaneEnrollmentRevocationCommand, digestSigningWorkerLaneIdentityV1, encodeEip1559SignedTxFromSignature65, encodeRouterAbEd25519YaoProductRegistrationPartitionRecordV1, encodeRouterAbEd25519YaoProductRegistrationStateV1, encodeSessionJsonSegment, encodeTenantRootIdentityV1, enforceDelegatePolicy, enforceRoutePolicy, ensureEvmCryptoWasm, ensureLeadingSlash, ensureWalletAuthMethodStoreD1Schema, ensureWalletAuthMethodStoreD1SchemaV2, ensureWalletStoreD1Schema, equalLaneRecords, evaluateRouterAbNormalSigningAdmission, executeSignedDelegateWithRelayer, extractBearerCredential, extractRouterApiEnvironmentId, findRouteDefinitionById, findRouteDefinitionForRequest, firstBatchResult, formatD1ExecStatement, getRouterApiRouteExtensionDefinitions, getRouterApiRouteExtensionRoutes, getRouterApiRouteExtensionsForTransport, handleRouterAbEcdsaDerivationNormalSigningRouteCore, handleRouterAbEd25519YaoExportRequestScopedCloudflareV1, handleRouterAbEd25519YaoRecoveryRequestScopedCloudflareV1, handleRouterAbEd25519YaoRegistrationRequestScopedCloudflareV1, handleStaticWalletConsoleRequestV1, handleWalletControlRequest, headersToRecord, isD1DatabaseLike, isObject, isPlainObject, json, keccak256Bytes, linkedDeviceSignerManifestsEqualV1, linkedDeviceX25519RecipientPublicKeyB64uV1, loadCloudflareSignerWasmModule, matchesRouteDefinitionRequest, mergeRouterAbEd25519YaoProductRegistrationStatePartitionV1, normalizeBoundedPositiveInteger, normalizeCorsOrigin, normalizeD1RouterApiAuthOptions, normalizeHashToBytes, normalizeLinkedDevicePasskeyTargetConfigurationV1, normalizeLogger, normalizeLowercaseString, normalizeScope, normalizeSessionString, normalizeSessionTtlSeconds, normalizeSourceIp, normalizeTrimmedString, normalizeWalletAuthMethod, normalizeWalletAuthMethodV2, parseBooleanFlag, parseBooleanJwtClaim, parseCacheControlMaxAgeSec, parseCsvList, parseD1JsonArrayColumn, parseD1JsonColumn, parseD1JsonObjectColumn, parseD1LinkedDeviceSessionRowV1, parseD1LinkedDeviceSessionTranscriptRowV1, parseEnrollmentRow, parseGoogleJwks, parseHpkePublicKeyB64u, parseJsonRecord, parseJwtAud, parseOrgId, parseProductEpochRow, parseProtocolRow, parseReceiptRow, parseRequiredString, parseRouterAbEcdsaEd25519PrivateJwk, parseRouterAbEcdsaPresignRuntimeConfig, parseRouterAbEcdsaStrictRegistrationTopology, parseRouterAbEd25519NormalSigningScopeV2, parseRouterAbEd25519OperationStepUpScope, parseRouterAbEd25519YaoActivationKeysetFromEnvV1, parseRouterAbEd25519YaoCeremonyKeyV1, parseRouterAbEd25519YaoExportAdmissionEnvelopeV1, parseRouterAbEd25519YaoExportExecuteEnvelopeV1, parseRouterAbEd25519YaoProductRegistrationPartitionRecordJsonV1, parseRouterAbEd25519YaoProductRegistrationPartitionRecordV1, parseRouterAbEd25519YaoProductRegistrationStateJsonV1, parseRouterAbEd25519YaoProductRegistrationStateV1, parseRouterAbOperationStepUpOperation, parseRouterAbPublicKeysetV2, parseRpcHexQuantity, parseRs256JwtForVerification, parseSessionJwt, parseSigningSessionSealRootConfig, parseSigningWorkerParticipantId, parseSigningWorkerRecipientKeyDigestB64u, parseSigningWorkerRecipientKeyId, parseStaticWalletConsoleBindingConfigV1, parseStoredRouterAbEcdsaPendingActivationV1, parseTimestamp, parseVersion, parseWalletEd25519SignerRecord, parseWalletId, parseWalletRuntimeExecuteSignedDelegateRequest, parseWalletRuntimeExecuteSignedDelegateResponse, parseWalletRuntimeExecuteSignedDelegateResult, parseWalletRuntimeRelayerAccount, parseWalletRuntimeWalletIdentitiesResult, parseWalletRuntimeWalletIdentityRequest, parseWebAuthnRpId, partitionRouterAbEd25519YaoProductRegistrationStateV1, postRouterAbSigningWorkerJson, prepareD1WalletAuthMethodInsertStatement, prepareD1WalletAuthMethodPutStatement, prepareD1WalletAuthMethodV2PutStatement, prepareD1WalletPutSignerStatement, prepareD1WalletPutSubjectStatement, prepareD1WebAuthnAuthenticatorInsertStatement, prepareD1WebAuthnAuthenticatorPutStatement, projectRouterAbEd25519YaoExactWalletSession, queryD1All, queryD1One, randomTenantRootCreationGrantBytesV1, readEnvironmentCsv, readEnvironmentString, readJson, registrationPreparationIdFromString, requireD1LaneStoreOptions, requireD1RouterApiAuthScopeString, requireEnvironmentString, requireNormalizedSessionString, resolveD1DatabaseFromConfig, resolveFreshRouterAbEcdsaMaterialActivation, resolvePublishableKeyApiCredentialAuth, resolveRequestOriginRateLimitKeyFromExpressRequest, resolveRequestOriginRateLimitKeyFromFetchHeaders, resolveRouterAbEd25519YaoCeremonyKeyFromRequestV1, resolveRuntimeTenantRootLineage, resolveSecretKeyApiCredentialAuth, resolveSourceIpFromExpressRequest, resolveSourceIpFromFetchHeaders, routeError, routeJson, routerAbEcdsaAtomicAuthorizationConfigured, routerAbEcdsaOperationInProgressResult, routerAbEcdsaOwnerOperationFailureResult, routerAbEcdsaRecordedResponse, routerAbEcdsaReplayHttpResponse, routerAbEcdsaReplayResult, routerAbEcdsaReplayUnavailableResult, routerAbEcdsaStrictRegistrationFactsBindingJson, routerAbEcdsaStrictRegistrationRequestBindingJson, routerAbEcdsaStrictRegistrationRequestMatchesFacts, routerAbEd25519OwnerOperationFailureResult, routerAbEd25519YaoPartitionedStateAfterStoredCommitV1, routerAbEd25519YaoPersistedCapabilityMatchesLookupV1, routerAbNormalSigningMaterialSourceFromActiveLaneV1, runRouterAbEd25519YaoProductRegistrationRequestScopedV1, runRouterAbEd25519YaoRegistrationSideEffectV1, runRouterAbEd25519YaoRegistrationTwoPhaseV1, runRouterAbPrewarmScheduledV1, runtimePolicyScopeKey, sameRouterAbEd25519YaoSharedStateCanonicalEncodingV1, scopeValues, secp256k1PrivateKey32ToPublicKey33, secp256k1PublicKey33ToEthereumAddress, secureRandomBase36, secureRandomBase64Url, sendExpressRouteResponse, sessionJwtTimeClaims, sha256Bytes, sha256BytesSync, signSecp256k1Recoverable, signTenantRootCreationGrantV1, tenantRootIdentityDigestB64uV1, tenantStorageRouteBackendFamily, tenantStorageRouteDiagnostic, toFetchRouteResponse, normalizeOptionalTrimmedString as toOptionalTrimmedString, toResponse, toSessionArrayBufferCopy, validateDelegateExpiryAndNonce, validateGoogleIdTokenClaims, validateRuntimeSnapshotExpectation, validateSecp256k1PublicKey33, verifyRs256JwtSignature, verifySecp256k1Bip340SignatureAgainstPublicKey33, verifySecp256k1RecoverableSignatureAgainstPublicKey33, walletAuthMethodId, walletAuthMethodV2Id, walletConsoleApiWalletGetRouteDefinitionV1, walletConsoleApiWalletListRouteDefinitionV1, walletConsoleApiWalletSearchRouteDefinitionV1, walletConsoleRelayRouteDefinitionsV1, walletConsoleSignedDelegateRouteDefinitionV1, walletConsoleSponsoredEvmCallRouteDefinitionV1, withCors };

package/dist/esm/core/AuthService.js

@@ -0,0 +1,2 @@
+import { AuthService } from "./authService/AuthService.js";
+export { AuthService };

package/dist/esm/core/EmailOtpRecords.js

@@ -0,0 +1,361 @@
+import { normalizeOptionalTrimmedString } from "../shared-ts/src/utils/normalize.js";
+import "../shared-ts/src/utils/validation.js";
+import { EMAIL_OTP_CHANNEL, WALLET_EMAIL_OTP_ACTIONS, isWalletEmailOtpLoginOperation } from "../shared-ts/src/utils/emailOtpDomain.js";
+//#region src/core/EmailOtpRecords.ts
+function parseJsonRecord(raw) {
+	if (typeof raw !== "string") return raw;
+	try {
+		return JSON.parse(raw);
+	} catch {
+		return raw;
+	}
+}
+function toPositiveSafeInt(value) {
+	const parsed = Number(value);
+	if (!Number.isSafeInteger(parsed) || parsed <= 0) return null;
+	return parsed;
+}
+function toNonNegativeSafeInt(value) {
+	const parsed = Number(value);
+	if (!Number.isSafeInteger(parsed) || parsed < 0) return null;
+	return parsed;
+}
+function parseRuntimePolicyScope(raw) {
+	const parsed = parseJsonRecord(raw);
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return void 0;
+	const obj = parsed;
+	const orgId = normalizeOptionalTrimmedString(obj.orgId);
+	const projectId = normalizeOptionalTrimmedString(obj.projectId);
+	const envId = normalizeOptionalTrimmedString(obj.envId);
+	const signingRootVersion = normalizeOptionalTrimmedString(obj.signingRootVersion);
+	if (!orgId || !projectId || !envId || !signingRootVersion) return void 0;
+	return {
+		orgId,
+		projectId,
+		envId,
+		signingRootVersion
+	};
+}
+function hasOwnRecordField(record, field) {
+	return Object.prototype.hasOwnProperty.call(record, field);
+}
+function isB64uString(value) {
+	return /^[A-Za-z0-9_-]+$/.test(value);
+}
+function parseGoogleEmailOtpRegistrationOfferCandidates(raw) {
+	if (!Array.isArray(raw) || raw.length < 1) return null;
+	const candidates = [];
+	for (const candidate of raw) {
+		if (!candidate || typeof candidate !== "object" || Array.isArray(candidate)) return null;
+		const candidateRecord = candidate;
+		const candidateId = normalizeOptionalTrimmedString(candidateRecord.candidateId);
+		const candidateWalletId = normalizeOptionalTrimmedString(candidateRecord.walletId);
+		const candidateCollisionCounter = toNonNegativeSafeInt(candidateRecord.collisionCounter);
+		if (!candidateId || !candidateWalletId || candidateCollisionCounter == null) return null;
+		candidates.push({
+			candidateId,
+			walletId: candidateWalletId,
+			collisionCounter: candidateCollisionCounter
+		});
+	}
+	const [firstCandidate, ...remainingCandidates] = candidates;
+	if (!firstCandidate) return null;
+	return [firstCandidate, ...remainingCandidates];
+}
+function parseCurrentEmailOtpChallengeRecord(raw) {
+	const parsed = parseJsonRecord(raw);
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+	const obj = parsed;
+	const version = normalizeOptionalTrimmedString(obj.version);
+	const challengeId = normalizeOptionalTrimmedString(obj.challengeId);
+	const challengeSubjectId = normalizeOptionalTrimmedString(obj.challengeSubjectId);
+	const walletId = normalizeOptionalTrimmedString(obj.walletId);
+	const orgId = normalizeOptionalTrimmedString(obj.orgId) || void 0;
+	const otpChannel = normalizeOptionalTrimmedString(obj.otpChannel);
+	const email = normalizeOptionalTrimmedString(obj.email);
+	const otpCode = normalizeOptionalTrimmedString(obj.otpCode);
+	const ownerProofBindingDigest = normalizeOptionalTrimmedString(obj.ownerProofBindingDigest);
+	const action = normalizeOptionalTrimmedString(obj.action);
+	const operationRaw = normalizeOptionalTrimmedString(obj.operation);
+	const createdAtMs = toPositiveSafeInt(obj.createdAtMs);
+	const expiresAtMs = toPositiveSafeInt(obj.expiresAtMs);
+	const attemptCount = toNonNegativeSafeInt(obj.attemptCount);
+	const maxAttempts = toPositiveSafeInt(obj.maxAttempts);
+	if (version !== "email_otp_challenge_v1") return null;
+	if (!challengeId || !challengeSubjectId || !walletId || !email || !otpCode || !ownerProofBindingDigest || !action || !operationRaw || !createdAtMs || !expiresAtMs || attemptCount == null || !maxAttempts) return null;
+	if (otpChannel !== "email_otp") return null;
+	if (action !== WALLET_EMAIL_OTP_ACTIONS.login && action !== WALLET_EMAIL_OTP_ACTIONS.registration && action !== WALLET_EMAIL_OTP_ACTIONS.recoveryBootstrap && action !== WALLET_EMAIL_OTP_ACTIONS.deviceLink) return null;
+	const operation = isWalletEmailOtpLoginOperation(operationRaw) || operationRaw === "registration" || operationRaw === "wallet_unlock" || operationRaw === "device_link" ? operationRaw : null;
+	if (!operation) return null;
+	return {
+		version: "email_otp_challenge_v1",
+		challengeId,
+		challengeSubjectId,
+		walletId,
+		...orgId ? { orgId } : {},
+		otpChannel: EMAIL_OTP_CHANNEL,
+		email,
+		otpCode,
+		ownerProofBindingDigest,
+		action,
+		operation,
+		createdAtMs,
+		expiresAtMs,
+		attemptCount,
+		maxAttempts
+	};
+}
+function parseCurrentEmailOtpChallengeRow(input) {
+	const record = parseCurrentEmailOtpChallengeRecord(input.recordJson);
+	const expiresAtMs = toPositiveSafeInt(input.expiresAtMs);
+	if (!record || !expiresAtMs) return null;
+	if (record.expiresAtMs !== expiresAtMs) return null;
+	return record;
+}
+function parseCurrentEmailOtpGrantRecord(raw) {
+	const parsed = parseJsonRecord(raw);
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+	const obj = parsed;
+	const version = normalizeOptionalTrimmedString(obj.version);
+	const grantToken = normalizeOptionalTrimmedString(obj.grantToken);
+	const userId = normalizeOptionalTrimmedString(obj.userId);
+	const walletId = normalizeOptionalTrimmedString(obj.walletId);
+	const orgId = normalizeOptionalTrimmedString(obj.orgId) || void 0;
+	const challengeId = normalizeOptionalTrimmedString(obj.challengeId);
+	const otpChannel = normalizeOptionalTrimmedString(obj.otpChannel);
+	const ownerProofBindingDigest = normalizeOptionalTrimmedString(obj.ownerProofBindingDigest);
+	const action = normalizeOptionalTrimmedString(obj.action);
+	const issuedAtMs = toPositiveSafeInt(obj.issuedAtMs);
+	const expiresAtMs = toPositiveSafeInt(obj.expiresAtMs);
+	if (version !== "email_otp_grant_v1" || !grantToken || !userId || !walletId || !challengeId || !ownerProofBindingDigest || !action || !issuedAtMs || !expiresAtMs) return null;
+	if (otpChannel !== "email_otp") return null;
+	if (action !== WALLET_EMAIL_OTP_ACTIONS.unseal && action !== WALLET_EMAIL_OTP_ACTIONS.recoveryBootstrap) return null;
+	return {
+		version: "email_otp_grant_v1",
+		grantToken,
+		userId,
+		walletId,
+		...orgId ? { orgId } : {},
+		challengeId,
+		otpChannel: EMAIL_OTP_CHANNEL,
+		ownerProofBindingDigest,
+		action,
+		issuedAtMs,
+		expiresAtMs
+	};
+}
+function parseCurrentEmailOtpGrantRow(input) {
+	const record = parseCurrentEmailOtpGrantRecord(input.recordJson);
+	const expiresAtMs = toPositiveSafeInt(input.expiresAtMs);
+	if (!record || !expiresAtMs) return null;
+	if (record.expiresAtMs !== expiresAtMs) return null;
+	return record;
+}
+function parseCurrentEmailOtpUnlockChallengeRecord(raw) {
+	const parsed = parseJsonRecord(raw);
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+	const obj = parsed;
+	const version = normalizeOptionalTrimmedString(obj.version);
+	const challengeId = normalizeOptionalTrimmedString(obj.challengeId);
+	const walletId = normalizeOptionalTrimmedString(obj.walletId);
+	const userId = normalizeOptionalTrimmedString(obj.userId);
+	const orgId = normalizeOptionalTrimmedString(obj.orgId) || void 0;
+	const challengeB64u = normalizeOptionalTrimmedString(obj.challengeB64u);
+	const createdAtMs = toPositiveSafeInt(obj.createdAtMs);
+	const expiresAtMs = toPositiveSafeInt(obj.expiresAtMs);
+	if (version !== "email_otp_unlock_challenge_v1" || !challengeId || !walletId || !userId || !challengeB64u || !createdAtMs || !expiresAtMs) return null;
+	return {
+		version: "email_otp_unlock_challenge_v1",
+		challengeId,
+		walletId,
+		userId,
+		...orgId ? { orgId } : {},
+		challengeB64u,
+		createdAtMs,
+		expiresAtMs
+	};
+}
+function parseCurrentEmailOtpUnlockChallengeRow(input) {
+	const record = parseCurrentEmailOtpUnlockChallengeRecord(input.recordJson);
+	const expiresAtMs = toPositiveSafeInt(input.expiresAtMs);
+	if (!record || !expiresAtMs) return null;
+	if (record.expiresAtMs !== expiresAtMs) return null;
+	return record;
+}
+function parseCurrentGoogleEmailOtpRegistrationAttemptRecord(raw) {
+	const parsed = parseJsonRecord(raw);
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+	const obj = parsed;
+	const version = normalizeOptionalTrimmedString(obj.version);
+	const attemptId = normalizeOptionalTrimmedString(obj.attemptId);
+	const providerSubject = normalizeOptionalTrimmedString(obj.providerSubject);
+	const email = normalizeOptionalTrimmedString(obj.email);
+	const walletId = normalizeOptionalTrimmedString(obj.walletId);
+	const offerId = normalizeOptionalTrimmedString(obj.offerId);
+	const offerCandidates = parseGoogleEmailOtpRegistrationOfferCandidates(obj.offerCandidates);
+	const selectedCandidateId = normalizeOptionalTrimmedString(obj.selectedCandidateId);
+	const ownerProofBindingDigest = normalizeOptionalTrimmedString(obj.ownerProofBindingDigest);
+	const authProvider = normalizeOptionalTrimmedString(obj.authProvider);
+	const accountIdSlugVersion = normalizeOptionalTrimmedString(obj.accountIdSlugVersion);
+	const walletIdDerivationNonce = normalizeOptionalTrimmedString(obj.walletIdDerivationNonce);
+	const collisionCounter = toNonNegativeSafeInt(obj.collisionCounter);
+	const state = normalizeOptionalTrimmedString(obj.state);
+	const createdAtMs = toPositiveSafeInt(obj.createdAtMs);
+	const updatedAtMs = toPositiveSafeInt(obj.updatedAtMs);
+	const expiresAtMs = toPositiveSafeInt(obj.expiresAtMs);
+	const runtimePolicyScope = parseRuntimePolicyScope(obj.runtimePolicyScope);
+	const finalizedPublicKey = normalizeOptionalTrimmedString(obj.finalizedPublicKey) || void 0;
+	const failureCode = normalizeOptionalTrimmedString(obj.failureCode) || void 0;
+	if (version !== "google_email_otp_registration_attempt_v1" || !attemptId || !providerSubject || !email || !walletId || !offerId || !offerCandidates || !selectedCandidateId || !offerCandidates.some((candidate) => candidate.candidateId === selectedCandidateId) || !ownerProofBindingDigest || !authProvider || accountIdSlugVersion !== "hmac_readable_v1" || !walletIdDerivationNonce || !isB64uString(walletIdDerivationNonce) || collisionCounter == null || !state || !createdAtMs || !updatedAtMs || !expiresAtMs) return null;
+	if (state !== "started" && state !== "key_finalized" && state !== "active" && state !== "abandoned" && state !== "failed" && state !== "expired") return null;
+	if (updatedAtMs < createdAtMs) return null;
+	if (state === "key_finalized" && !finalizedPublicKey) return null;
+	if ((state === "abandoned" || state === "failed") && !failureCode) return null;
+	const base = {
+		version: "google_email_otp_registration_attempt_v1",
+		attemptId,
+		providerSubject,
+		email,
+		walletId,
+		offerId,
+		offerCandidates,
+		selectedCandidateId,
+		ownerProofBindingDigest,
+		authProvider,
+		accountIdSlugVersion: "hmac_readable_v1",
+		walletIdDerivationNonce,
+		collisionCounter,
+		createdAtMs,
+		updatedAtMs,
+		expiresAtMs,
+		...runtimePolicyScope ? { runtimePolicyScope } : {}
+	};
+	switch (state) {
+		case "started": return {
+			...base,
+			state
+		};
+		case "key_finalized":
+			if (!finalizedPublicKey) return null;
+			return {
+				...base,
+				state,
+				finalizedPublicKey
+			};
+		case "active": return {
+			...base,
+			state,
+			...finalizedPublicKey ? { finalizedPublicKey } : {}
+		};
+		case "abandoned":
+		case "failed":
+			if (!failureCode) return null;
+			return {
+				...base,
+				state,
+				...finalizedPublicKey ? { finalizedPublicKey } : {},
+				failureCode
+			};
+		case "expired": return {
+			...base,
+			state,
+			...finalizedPublicKey ? { finalizedPublicKey } : {},
+			...failureCode ? { failureCode } : {}
+		};
+	}
+}
+function parseCurrentGoogleEmailOtpRegistrationAttemptRow(input) {
+	const record = parseCurrentGoogleEmailOtpRegistrationAttemptRecord(input.recordJson);
+	const expiresAtMs = toPositiveSafeInt(input.expiresAtMs);
+	const updatedAtMs = toPositiveSafeInt(input.updatedAtMs);
+	if (!record || !expiresAtMs || !updatedAtMs) return null;
+	if (record.expiresAtMs !== expiresAtMs || record.updatedAtMs !== updatedAtMs) return null;
+	return record;
+}
+function parseCurrentEmailOtpWalletEnrollmentRecord(raw) {
+	const parsed = parseJsonRecord(raw);
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+	const obj = parsed;
+	if (hasOwnRecordField(obj, "enrollmentEscrowCiphertextB64u")) return null;
+	const version = normalizeOptionalTrimmedString(obj.version);
+	const walletId = normalizeOptionalTrimmedString(obj.walletId);
+	const providerUserId = normalizeOptionalTrimmedString(obj.providerUserId);
+	const orgId = normalizeOptionalTrimmedString(obj.orgId);
+	const verifiedEmail = normalizeOptionalTrimmedString(obj.verifiedEmail)?.toLowerCase() || "";
+	const enrollmentId = normalizeOptionalTrimmedString(obj.enrollmentId);
+	const enrollmentVersion = normalizeOptionalTrimmedString(obj.enrollmentVersion);
+	const enrollmentSealKeyVersion = normalizeOptionalTrimmedString(obj.enrollmentSealKeyVersion);
+	const serverSealedFactorCiphertextB64u = normalizeOptionalTrimmedString(obj.serverSealedFactorCiphertextB64u);
+	const clientUnlockPublicKeyB64u = normalizeOptionalTrimmedString(obj.clientUnlockPublicKeyB64u);
+	const unlockKeyVersion = normalizeOptionalTrimmedString(obj.unlockKeyVersion);
+	const createdAtMs = toPositiveSafeInt(obj.createdAtMs);
+	const updatedAtMs = toPositiveSafeInt(obj.updatedAtMs);
+	if (version !== "email_otp_wallet_enrollment_v1" || !walletId || !providerUserId || !orgId || !verifiedEmail || !enrollmentId || !enrollmentVersion || !enrollmentSealKeyVersion || !serverSealedFactorCiphertextB64u || !clientUnlockPublicKeyB64u || !unlockKeyVersion || !createdAtMs || !updatedAtMs) return null;
+	if (updatedAtMs < createdAtMs) return null;
+	return {
+		version: "email_otp_wallet_enrollment_v1",
+		walletId,
+		providerUserId,
+		orgId,
+		verifiedEmail,
+		enrollmentId,
+		enrollmentVersion,
+		enrollmentSealKeyVersion,
+		serverSealedFactorCiphertextB64u,
+		clientUnlockPublicKeyB64u,
+		unlockKeyVersion,
+		createdAtMs,
+		updatedAtMs
+	};
+}
+function parseCurrentEmailOtpWalletEnrollmentRow(input) {
+	const record = parseCurrentEmailOtpWalletEnrollmentRecord(input.recordJson);
+	const updatedAtMs = toPositiveSafeInt(input.updatedAtMs);
+	if (!record || !updatedAtMs) return null;
+	if (record.updatedAtMs !== updatedAtMs) return null;
+	return record;
+}
+function parseCurrentEmailOtpAuthStateRecord(raw) {
+	const parsed = parseJsonRecord(raw);
+	if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) return null;
+	const obj = parsed;
+	const version = normalizeOptionalTrimmedString(obj.version);
+	const walletId = normalizeOptionalTrimmedString(obj.walletId);
+	const providerUserId = normalizeOptionalTrimmedString(obj.providerUserId);
+	const orgId = normalizeOptionalTrimmedString(obj.orgId);
+	const createdAtMs = toPositiveSafeInt(obj.createdAtMs);
+	const updatedAtMs = toPositiveSafeInt(obj.updatedAtMs);
+	const otpFailureCount = obj.otpFailureCount == null ? void 0 : toNonNegativeSafeInt(obj.otpFailureCount);
+	const lastOtpFailureAtMs = obj.lastOtpFailureAtMs == null ? void 0 : toPositiveSafeInt(obj.lastOtpFailureAtMs);
+	const otpLockedUntilMs = obj.otpLockedUntilMs == null ? void 0 : toPositiveSafeInt(obj.otpLockedUntilMs);
+	const lastEmailOtpLoginAtMs = obj.lastEmailOtpLoginAtMs == null ? void 0 : toPositiveSafeInt(obj.lastEmailOtpLoginAtMs);
+	const lastStrongAuthAtMs = obj.lastStrongAuthAtMs == null ? void 0 : toPositiveSafeInt(obj.lastStrongAuthAtMs);
+	if (!raw || version !== "email_otp_auth_state_v1") return null;
+	if (!walletId || !providerUserId || !orgId || !createdAtMs || !updatedAtMs) return null;
+	if ("otpFailureCount" in obj && obj.otpFailureCount != null && otpFailureCount === void 0 || "lastOtpFailureAtMs" in obj && obj.lastOtpFailureAtMs != null && lastOtpFailureAtMs === void 0 || "otpLockedUntilMs" in obj && obj.otpLockedUntilMs != null && otpLockedUntilMs === void 0 || "lastEmailOtpLoginAtMs" in obj && obj.lastEmailOtpLoginAtMs != null && lastEmailOtpLoginAtMs === void 0 || "lastStrongAuthAtMs" in obj && obj.lastStrongAuthAtMs != null && lastStrongAuthAtMs === void 0) return null;
+	if (updatedAtMs < createdAtMs) return null;
+	return {
+		version: "email_otp_auth_state_v1",
+		walletId,
+		providerUserId,
+		orgId,
+		createdAtMs,
+		updatedAtMs,
+		...otpFailureCount != null ? { otpFailureCount } : {},
+		...lastOtpFailureAtMs != null ? { lastOtpFailureAtMs } : {},
+		...otpLockedUntilMs != null ? { otpLockedUntilMs } : {},
+		...lastEmailOtpLoginAtMs != null ? { lastEmailOtpLoginAtMs } : {},
+		...lastStrongAuthAtMs != null ? { lastStrongAuthAtMs } : {}
+	};
+}
+function parseCurrentEmailOtpAuthStateRow(input) {
+	const record = parseCurrentEmailOtpAuthStateRecord(input.recordJson);
+	const updatedAtMs = toPositiveSafeInt(input.updatedAtMs);
+	if (!record || !updatedAtMs) return null;
+	if (record.updatedAtMs !== updatedAtMs) return null;
+	return record;
+}
+//#endregion
+export { parseCurrentEmailOtpAuthStateRecord, parseCurrentEmailOtpAuthStateRow, parseCurrentEmailOtpChallengeRecord, parseCurrentEmailOtpChallengeRow, parseCurrentEmailOtpGrantRecord, parseCurrentEmailOtpGrantRow, parseCurrentEmailOtpUnlockChallengeRecord, parseCurrentEmailOtpUnlockChallengeRow, parseCurrentEmailOtpWalletEnrollmentRecord, parseCurrentEmailOtpWalletEnrollmentRow, parseCurrentGoogleEmailOtpRegistrationAttemptRecord, parseCurrentGoogleEmailOtpRegistrationAttemptRow };
+
+//# sourceMappingURL=EmailOtpRecords.js.map