@seams/wallet-server 0.6.1 → 0.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (705) hide show
  1. package/artifact-manifest.json +147 -32
  2. package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -0
  3. package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
  4. package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
  5. package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -0
  6. package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
  7. package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
  8. package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
  9. package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
  10. package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
  11. package/cloudflare-router-ab/build/router/build-stamp.json +1 -0
  12. package/cloudflare-router-ab/build/router/index.js +2 -2
  13. package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
  14. package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -0
  15. package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
  16. package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
  17. package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -0
  18. package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
  19. package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
  20. package/cloudflare-router-ab/migrations/deriver-a/0012_tenant_root_creation_tombstones.sql +20 -0
  21. package/cloudflare-router-ab/migrations/deriver-a/0013_tenant_root_root_use_admissions.sql +32 -0
  22. package/cloudflare-router-ab/migrations/deriver-a/0014_tenant_root_refresh_supersessions.sql +24 -0
  23. package/cloudflare-router-ab/migrations/deriver-a/0015_tenant_root_root_use_attempts.sql +56 -0
  24. package/cloudflare-router-ab/migrations/deriver-a/0016_tenant_root_root_use_admission_settlement.sql +5 -0
  25. package/cloudflare-router-ab/migrations/deriver-a/0017_tenant_root_root_use_admission_claims.sql +64 -0
  26. package/cloudflare-router-ab/migrations/deriver-a/0018_tenant_root_recovery_retention_keys.sql +12 -0
  27. package/cloudflare-router-ab/migrations/deriver-b/0012_tenant_root_creation_tombstones.sql +20 -0
  28. package/cloudflare-router-ab/migrations/deriver-b/0013_tenant_root_root_use_admissions.sql +32 -0
  29. package/cloudflare-router-ab/migrations/deriver-b/0014_tenant_root_refresh_supersessions.sql +24 -0
  30. package/cloudflare-router-ab/migrations/deriver-b/0015_tenant_root_root_use_attempts.sql +56 -0
  31. package/cloudflare-router-ab/migrations/deriver-b/0016_tenant_root_root_use_admission_settlement.sql +5 -0
  32. package/cloudflare-router-ab/migrations/deriver-b/0017_tenant_root_root_use_admission_claims.sql +64 -0
  33. package/cloudflare-router-ab/migrations/deriver-b/0018_tenant_root_recovery_retention_keys.sql +12 -0
  34. package/cloudflare-router-ab/scripts/bootstrap-local-tenant-root.mjs +81 -16
  35. package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +102 -9
  36. package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +4 -1
  37. package/cloudflare-router-ab/wrangler.deriver-a.toml +24 -0
  38. package/cloudflare-router-ab/wrangler.router.toml +13 -0
  39. package/dist/esm/authorization/capabilityPolicy.js +1 -1
  40. package/dist/esm/authorization/domain.js +2 -2
  41. package/dist/esm/authorization/factorEvidence.js +6 -100
  42. package/dist/esm/authorization/service.js +34 -2
  43. package/dist/esm/authorization/vaultProxyUse.js +3 -4
  44. package/dist/esm/cloud-host.js +16 -11
  45. package/dist/esm/core/EmailOtpRecords.js +19 -1
  46. package/dist/esm/core/EmailOtpStores.js +323 -924
  47. package/dist/esm/core/IdentityStore.js +44 -235
  48. package/dist/esm/core/NearPublicKeyStore.js +21 -63
  49. package/dist/esm/core/RegistrationCeremonyStore.js +3 -1793
  50. package/dist/esm/core/ThresholdService/config.js +1 -82
  51. package/dist/esm/core/ThresholdService/kv.js +3 -3
  52. package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +37 -5
  53. package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.js +4 -74
  54. package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +15 -51
  55. package/dist/esm/core/ThresholdService/stores/KeyStore.js +3 -3
  56. package/dist/esm/core/ThresholdService/stores/SessionStore.js +5 -81
  57. package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +185 -290
  58. package/dist/esm/core/ThresholdService/validation.js +18 -230
  59. package/dist/esm/core/WalletAuthMethodStore.js +22 -79
  60. package/dist/esm/core/WalletStore.js +58 -185
  61. package/dist/esm/core/WebAuthnAuthenticatorStore.js +57 -340
  62. package/dist/esm/core/WebAuthnCredentialBindingStore.js +90 -369
  63. package/dist/esm/core/WebAuthnLoginChallengeStore.js +17 -397
  64. package/dist/esm/core/WebAuthnSyncChallengeStore.js +17 -397
  65. package/dist/esm/core/authService/AuthService.js +2 -19
  66. package/dist/esm/core/authService/emailOtpChallengeProof.js +1 -1
  67. package/dist/esm/core/authService/emailOtpChallenges.js +1 -1
  68. package/dist/esm/core/authService/emailOtpConfig.js +1 -32
  69. package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +6 -153
  70. package/dist/esm/core/authService/googleEmailOtpRegistration.js +1 -1
  71. package/dist/esm/core/authService/nearPrivateKeySigning.js +7 -15
  72. package/dist/esm/core/authService/nearTransactions.js +2 -1
  73. package/dist/esm/core/authService/oidcVerification.js +3 -4
  74. package/dist/esm/core/authService/rateLimits.js +1 -31
  75. package/dist/esm/core/authService/registrationThresholdHelpers.js +2 -103
  76. package/dist/esm/core/authService/storeRegistry.js +2 -13
  77. package/dist/esm/core/authService/thresholdEcdsaKeyInventory.js +4 -5
  78. package/dist/esm/core/authService/webauthn.js +15 -50
  79. package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -6
  80. package/dist/esm/core/authService/webauthnVerificationOutcomes.js +60 -0
  81. package/dist/esm/core/authService/webauthnWalletBinding.js +2 -122
  82. package/dist/esm/core/d1IdentityStore.js +32 -66
  83. package/dist/esm/core/d1TenantStore.js +82 -0
  84. package/dist/esm/core/d1WalletAuthMethodStore.js +92 -143
  85. package/dist/esm/core/d1WalletStore.js +14 -12
  86. package/dist/esm/core/deviceLinking/linkedDeviceEmailOtpGrant.js +10 -8
  87. package/dist/esm/core/deviceLinking/linkedDeviceManagement.js +25 -3
  88. package/dist/esm/core/deviceLinking/linkedDeviceSession.js +6 -895
  89. package/dist/esm/core/deviceLinking/linkedDeviceSessionApproval.js +102 -0
  90. package/dist/esm/core/deviceLinking/linkedDeviceSessionRecord.js +668 -0
  91. package/dist/esm/core/emailOtpD1Statements.js +383 -0
  92. package/dist/esm/core/hostedAccountIds.js +2 -2
  93. package/dist/esm/core/keyMaterialBrands.js +2 -48
  94. package/dist/esm/core/nearRelayerAccountProvisioning.js +25 -150
  95. package/dist/esm/core/nearSignerWasmRuntime.js +1 -4
  96. package/dist/esm/core/rpcClients/near/NearClient.js +15 -218
  97. package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +1 -1
  98. package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +2 -4
  99. package/dist/esm/core/signingLanes/LaneLifecycleStore.js +0 -24
  100. package/dist/esm/core/signingLanes/WalletExecutionLaneProjection.js +5 -5
  101. package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +3 -8
  102. package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +1 -4
  103. package/dist/esm/core/storeBackends.js +208 -0
  104. package/dist/esm/core/thresholdEcdsaChainTarget.js +1 -7
  105. package/dist/esm/core/webAuthnD1Statements.js +92 -0
  106. package/dist/esm/core/webAuthnStoreBackends.js +198 -0
  107. package/dist/esm/hosted-wallet-gateway.js +33 -16
  108. package/dist/esm/index.js +2 -2
  109. package/dist/esm/local-hosted-wallet-gateway-worker.js +2 -23
  110. package/dist/esm/localHostedWalletGatewayHandler.js +299 -0
  111. package/dist/esm/localIntendedEcdsaFinalizeFault.js +85 -0
  112. package/dist/esm/localIntendedLinkExecuteFault.js +140 -0
  113. package/dist/esm/localIntendedRevokeFault.js +106 -0
  114. package/dist/esm/localIntendedSessionAdmissionFault.js +139 -0
  115. package/dist/esm/localIntendedYaoExportFault.js +117 -0
  116. package/dist/esm/localIntendedYaoFault.js +13 -16
  117. package/dist/esm/localIntendedYaoFinalizeFault.js +99 -0
  118. package/dist/esm/localIntendedYaoRecoveryFault.js +102 -0
  119. package/dist/esm/localIntendedYaoSigningFault.js +127 -0
  120. package/dist/esm/router/auth/authRequestValidation.js +1 -1
  121. package/dist/esm/router/auth/commonRouterUtils.js +10 -2
  122. package/dist/esm/router/auth/walletSessionFailure.js +1 -14
  123. package/dist/esm/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.js +23 -0
  124. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +86 -66
  125. package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +208 -0
  126. package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +246 -296
  127. package/dist/esm/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.js +14 -0
  128. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +62 -63
  129. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +3 -6
  130. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +1 -19
  131. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceManagementService.js +4 -3
  132. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +52 -9
  133. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -6
  134. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.js +100 -0
  135. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.js +7 -10
  136. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +33 -124
  137. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.js +2 -2
  138. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +9 -17
  139. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.js +6 -6
  140. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkSourceReader.js +3 -1
  141. package/dist/esm/router/cloudflare/d1/deviceLinking/index.js +3 -3
  142. package/dist/esm/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.js +69 -0
  143. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +39 -68
  144. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.js +69 -0
  145. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.js +2 -2
  146. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +26 -71
  147. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +20 -3
  148. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +7 -94
  149. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +5 -47
  150. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +26 -123
  151. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +0 -2
  152. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +2 -2
  153. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +15 -134
  154. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +54 -260
  155. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +1 -1
  156. package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +1 -28
  157. package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +2 -8
  158. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.js +1 -1
  159. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +3 -3
  160. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +23 -73
  161. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.js +15 -2
  162. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.js +12 -203
  163. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +16 -32
  164. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +29 -72
  165. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +4 -1
  166. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +3 -1
  167. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +6 -30
  168. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +261 -205
  169. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +5 -3
  170. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +2 -2
  171. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js +3 -3
  172. package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +43 -25
  173. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -1
  174. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +1 -1
  175. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +2 -1
  176. package/dist/esm/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.js +2 -60
  177. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +158 -19
  178. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.js +19 -49
  179. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.js +100 -0
  180. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +132 -33
  181. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +83 -4
  182. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +14 -49
  183. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +4 -4
  184. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +22 -116
  185. package/dist/esm/router/cloudflare/runtime/createSelfHostedCloudflareSigningWorker.js +1 -2
  186. package/dist/esm/router/cloudflare/runtime/walletConsoleTenantRootLineage.js +11 -2
  187. package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
  188. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +5 -6
  189. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +2 -1
  190. package/dist/esm/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.js +48 -21
  191. package/dist/esm/router/cloudflare.js +11480 -12853
  192. package/dist/esm/router/domains/ecdsa/routerAbEcdsaStrictRegistration.js +16 -5
  193. package/dist/esm/router/domains/ecdsa/thresholdEcdsaRequestValidation.js +2 -8
  194. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.js +33 -0
  195. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +17 -9
  196. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +29 -431
  197. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +7 -2
  198. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.js +2 -1
  199. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.js +70 -2
  200. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +134 -169
  201. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +77 -162
  202. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.js +205 -51
  203. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +29 -11
  204. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.js +182 -55
  205. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.js +2 -1
  206. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.js +63 -247
  207. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js +3 -2
  208. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.js +87 -132
  209. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.js +5 -4
  210. package/dist/esm/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.js +45 -0
  211. package/dist/esm/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.js +1 -1
  212. package/dist/esm/router/domains/emailOtp/emailOtpExportPolicy.js +1 -42
  213. package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +1 -6
  214. package/dist/esm/router/domains/emailOtp/emailOtpSessionRouteHelpers.js +1 -142
  215. package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.js +1 -1
  216. package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -2
  217. package/dist/esm/router/domains/passkeyCustody/walletRecoveryFinalization.js +23 -45
  218. package/dist/esm/router/domains/passkeyCustody/walletRecoveryKeyManifest.js +5 -5
  219. package/dist/esm/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.js +1 -1
  220. package/dist/esm/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.js +827 -0
  221. package/dist/esm/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.js +698 -0
  222. package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmission.js +209 -0
  223. package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.js +16 -15
  224. package/dist/esm/router/domains/signingOperations/routerAbOperationStepUp.js +313 -0
  225. package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +62 -2159
  226. package/dist/esm/router/domains/tenantRoot/tenantRootIdentityResolution.js +1 -1
  227. package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +18 -22
  228. package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +3 -4
  229. package/dist/esm/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.js +2 -2
  230. package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +97 -150
  231. package/dist/esm/router/express.js +5967 -6410
  232. package/dist/esm/router/framework/http.js +1 -4
  233. package/dist/esm/router/framework/ror/normalize.js +1 -1
  234. package/dist/esm/router/framework/routerApiRouteSurface.js +1 -1
  235. package/dist/esm/router/node/nodeHostedWalletGateway.js +64 -0
  236. package/dist/esm/router/node/nodeHostedWalletGatewayCheck.js +163 -0
  237. package/dist/esm/router/node/nodeHostedWalletGatewayMain.js +120 -0
  238. package/dist/esm/router/node/nodeHttp.js +79 -0
  239. package/dist/esm/router/node/nodeSqlite.js +43 -0
  240. package/dist/esm/router/node/signerSqlMigrations.js +48 -0
  241. package/dist/esm/router/transport/fetch/createFetchRouter.js +1 -1
  242. package/dist/esm/router/transport/fetch/routes/deviceLinking.js +16 -18
  243. package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +3 -5
  244. package/dist/esm/router/transport/fetch/routes/deviceManagement.js +15 -24
  245. package/dist/esm/router/transport/fetch/routes/normalSigningRouterProxy.js +3 -16
  246. package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +144 -461
  247. package/dist/esm/router/transport/fetch/routes/sessions.js +4 -4
  248. package/dist/esm/router/transport/fetch/routes/syncAccount.js +4 -6
  249. package/dist/esm/router/transport/fetch/routes/syncAccountBootstrap.js +2 -2
  250. package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +69 -23
  251. package/dist/esm/router/transport/fetch/routes/thresholdEd25519.js +52 -27
  252. package/dist/esm/shared-ts/src/authorization/capabilityKinds.js +1 -1
  253. package/dist/esm/shared-ts/src/authorization/delegatedAuthority.js +1 -1
  254. package/dist/esm/shared-ts/src/authorization/operationFingerprint.js +1 -2
  255. package/dist/esm/shared-ts/src/authorization/walletAuthority.js +99 -227
  256. package/dist/esm/shared-ts/src/authorization/walletCustodyOperation.js +4 -6
  257. package/dist/esm/shared-ts/src/device-linking/activeWalletSession.js +74 -0
  258. package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +50 -0
  259. package/dist/esm/shared-ts/src/device-linking/committedSignerPackages.js +8 -9
  260. package/dist/esm/shared-ts/src/device-linking/delegatedActivationPlan.js +3 -1
  261. package/dist/esm/shared-ts/src/device-linking/deviceManagement.js +55 -0
  262. package/dist/esm/shared-ts/src/device-linking/digests.js +10 -65
  263. package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +3 -1
  264. package/dist/esm/shared-ts/src/device-linking/index.js +4 -1
  265. package/dist/esm/shared-ts/src/device-linking/parsers.js +510 -1063
  266. package/dist/esm/shared-ts/src/device-linking/requestProof.js +5 -14
  267. package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +6 -9
  268. package/dist/esm/shared-ts/src/device-linking/walletSessionCredentialDelivery.js +9 -9
  269. package/dist/esm/shared-ts/src/device-linking/wireFields.js +59 -0
  270. package/dist/esm/shared-ts/src/near/nearClient.js +252 -0
  271. package/dist/esm/shared-ts/src/passkey-custody/credentialActivity.js +3 -1
  272. package/dist/esm/shared-ts/src/passkey-custody/custodyEnvelope.js +7 -5
  273. package/dist/esm/shared-ts/src/passkey-custody/custodySecretBinding.js +6 -4
  274. package/dist/esm/shared-ts/src/passkey-custody/primitives.js +5 -39
  275. package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -5
  276. package/dist/esm/shared-ts/src/signing-lanes/index.js +3 -3
  277. package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +5 -12
  278. package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +5 -14
  279. package/dist/esm/shared-ts/src/signing-lanes/participants.js +2 -5
  280. package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +7 -5
  281. package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +6 -45
  282. package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +423 -1511
  283. package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +323 -0
  284. package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +59 -0
  285. package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +1 -1
  286. package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +1 -2
  287. package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +49 -0
  288. package/dist/esm/shared-ts/src/utils/addAuthMethodRegistration.js +3 -4
  289. package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +8 -1
  290. package/dist/esm/shared-ts/src/utils/digestEncoding.js +63 -0
  291. package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +2 -2
  292. package/dist/esm/shared-ts/src/utils/exactRecord.js +44 -0
  293. package/dist/esm/shared-ts/src/utils/registrationAuthMethodInput.js +127 -0
  294. package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +2 -2
  295. package/dist/esm/shared-ts/src/utils/registrationIds.js +280 -0
  296. package/dist/esm/shared-ts/src/utils/registrationIntent.js +4 -1170
  297. package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +429 -0
  298. package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +11 -136
  299. package/dist/esm/shared-ts/src/utils/routerAbEd25519Yao.js +3 -163
  300. package/dist/esm/shared-ts/src/utils/routerAbEd25519YaoDigests.js +160 -0
  301. package/dist/esm/shared-ts/src/utils/routerAbNormalSigningIdentity.js +1 -4
  302. package/dist/esm/shared-ts/src/utils/routerAbPublicKeyset.js +7 -15
  303. package/dist/esm/shared-ts/src/utils/validation.js +37 -6
  304. package/dist/esm/shared-ts/src/utils/walletAuthMethodRecord.js +362 -0
  305. package/dist/esm/shared-ts/src/utils/wireSchema.js +77 -0
  306. package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +1 -1
  307. package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeReservation.js +1 -1
  308. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js +7 -11
  309. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.js +4 -8
  310. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.js +3 -1
  311. package/dist/esm/storage/d1Sql.js +10 -1
  312. package/dist/esm/storage/syncSqlite.js +79 -0
  313. package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +1 -1
  314. package/dist/esm/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.js +1 -1
  315. package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +1 -2
  316. package/dist/esm/threshold/session/signingSessionSeal/options.js +1 -1
  317. package/dist/esm/threshold/session/signingSessionSeal/transport/shared.js +18 -55
  318. package/dist/esm/threshold/statusCodes.js +1 -1
  319. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +3 -3
  320. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
  321. package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm +0 -0
  322. package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +8 -26
  323. package/dist/types/shared-ts/src/authorization/delegatedAuthority.d.ts +0 -8
  324. package/dist/types/shared-ts/src/authorization/operationFingerprint.d.ts +1 -3
  325. package/dist/types/shared-ts/src/authorization/walletAuthority.d.ts +25 -12
  326. package/dist/types/shared-ts/src/authorization/walletSessionIssuance.d.ts +2 -1
  327. package/dist/types/shared-ts/src/device-linking/activeWalletSession.d.ts +3 -2
  328. package/dist/types/shared-ts/src/device-linking/authorityActivation.d.ts +5 -0
  329. package/dist/types/shared-ts/src/device-linking/committedSignerPackages.d.ts +2 -5
  330. package/dist/types/shared-ts/src/device-linking/contracts.d.ts +8 -11
  331. package/dist/types/shared-ts/src/device-linking/contracts.typecheck.d.ts +2 -1
  332. package/dist/types/shared-ts/src/device-linking/deviceManagement.d.ts +7 -0
  333. package/dist/types/shared-ts/src/device-linking/digests.d.ts +0 -5
  334. package/dist/types/shared-ts/src/device-linking/ed25519ExportRoot.d.ts +3 -2
  335. package/dist/types/shared-ts/src/device-linking/index.d.ts +2 -0
  336. package/dist/types/shared-ts/src/device-linking/parsers.d.ts +4 -41
  337. package/dist/types/shared-ts/src/device-linking/requestProof.d.ts +0 -1
  338. package/dist/types/shared-ts/src/device-linking/sourceContribution.d.ts +3 -2
  339. package/dist/types/shared-ts/src/device-linking/walletSessionCredentialDelivery.d.ts +2 -1
  340. package/dist/types/shared-ts/src/device-linking/wireFields.d.ts +26 -0
  341. package/dist/types/shared-ts/src/near/actions.d.ts +4 -4
  342. package/dist/types/shared-ts/src/near/delegate.d.ts +3 -2
  343. package/dist/types/shared-ts/src/near/nearClient.d.ts +145 -0
  344. package/dist/types/shared-ts/src/passkey-custody/ceremonyCommitPayload.d.ts +0 -22
  345. package/dist/types/shared-ts/src/passkey-custody/credentialActivity.d.ts +2 -4
  346. package/dist/types/shared-ts/src/passkey-custody/custodyEnvelope.d.ts +9 -18
  347. package/dist/types/shared-ts/src/passkey-custody/custodySecretBinding.d.ts +8 -24
  348. package/dist/types/shared-ts/src/passkey-custody/index.d.ts +0 -2
  349. package/dist/types/shared-ts/src/passkey-custody/primitives.d.ts +0 -14
  350. package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -15
  351. package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +2 -51
  352. package/dist/types/shared-ts/src/signing-lanes/index.d.ts +1 -2
  353. package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +1 -2
  354. package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +5 -27
  355. package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +0 -11
  356. package/dist/types/shared-ts/src/signing-lanes/recordParsers.d.ts +6 -53
  357. package/dist/types/shared-ts/src/signing-lanes/records.d.ts +1 -2
  358. package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +15 -37
  359. package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +1 -20
  360. package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +4 -25
  361. package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +1 -41
  362. package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +6 -0
  363. package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +20 -0
  364. package/dist/types/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.d.ts +2 -35
  365. package/dist/types/shared-ts/src/threshold/ed25519OperationFingerprint.d.ts +8 -35
  366. package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +25 -0
  367. package/dist/types/shared-ts/src/threshold/participants.d.ts +3 -9
  368. package/dist/types/shared-ts/src/threshold/secp256k1.d.ts +0 -37
  369. package/dist/types/shared-ts/src/threshold/sessionPolicy.d.ts +24 -0
  370. package/dist/types/shared-ts/src/threshold/signingRootScope.d.ts +2 -5
  371. package/dist/types/shared-ts/src/utils/addAuthMethodRegistration.d.ts +3 -4
  372. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +7 -108
  373. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +16 -3
  374. package/dist/types/shared-ts/src/utils/canonicalPrimitives.d.ts +2 -0
  375. package/dist/types/shared-ts/src/utils/digestEncoding.d.ts +9 -0
  376. package/dist/types/shared-ts/src/utils/domainIds.d.ts +1 -2
  377. package/dist/types/shared-ts/src/utils/ecdsaKeyFactsInventory.d.ts +1 -2
  378. package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +5 -5
  379. package/dist/types/shared-ts/src/utils/emailOtpRecoveryKey.d.ts +0 -2
  380. package/dist/types/shared-ts/src/utils/errors.d.ts +0 -7
  381. package/dist/types/shared-ts/src/utils/exactRecord.d.ts +12 -0
  382. package/dist/types/shared-ts/src/utils/index.d.ts +5 -2
  383. package/dist/types/shared-ts/src/utils/jsonRpc.d.ts +3 -2
  384. package/dist/types/shared-ts/src/utils/near.d.ts +2 -1
  385. package/dist/types/shared-ts/src/utils/nearRpcResults.d.ts +7 -7
  386. package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -4
  387. package/dist/types/shared-ts/src/utils/registrationAuthMethodInput.d.ts +184 -0
  388. package/dist/types/shared-ts/src/utils/registrationContracts.d.ts +76 -0
  389. package/dist/types/shared-ts/src/utils/registrationEstablishedSession.d.ts +1 -2
  390. package/dist/types/shared-ts/src/utils/registrationIds.d.ts +56 -0
  391. package/dist/types/shared-ts/src/utils/registrationIntent.d.ts +9 -514
  392. package/dist/types/shared-ts/src/utils/registrationSignerPlan.d.ts +142 -0
  393. package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts +21 -92
  394. package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts +14 -99
  395. package/dist/types/shared-ts/src/utils/routerAbEd25519YaoDigests.d.ts +39 -0
  396. package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts +10 -15
  397. package/dist/types/shared-ts/src/utils/routerAbTraceContext.d.ts +2 -1
  398. package/dist/types/shared-ts/src/utils/secureRandomId.d.ts +0 -2
  399. package/dist/types/shared-ts/src/utils/signerDomain.d.ts +3 -35
  400. package/dist/types/shared-ts/src/utils/signerSlot.d.ts +0 -4
  401. package/dist/types/shared-ts/src/utils/signingSessionSeal.d.ts +1 -7
  402. package/dist/types/shared-ts/src/utils/validation.d.ts +10 -10
  403. package/dist/types/shared-ts/src/utils/variant.d.ts +11 -0
  404. package/dist/types/shared-ts/src/utils/variant.typecheck.d.ts +22 -0
  405. package/dist/types/shared-ts/src/utils/walletAddSignerActivation.d.ts +2 -2
  406. package/dist/types/shared-ts/src/utils/walletAuthAuthority.d.ts +1 -58
  407. package/dist/types/shared-ts/src/utils/walletAuthMethodRecord.d.ts +104 -0
  408. package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +3 -7
  409. package/dist/types/shared-ts/src/utils/webauthnDeviceInfo.d.ts +3 -4
  410. package/dist/types/shared-ts/src/utils/wireSchema.d.ts +60 -0
  411. package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +2 -1
  412. package/dist/types/shared-ts/src/wallet-recovery/index.d.ts +0 -1
  413. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeLocator.d.ts +0 -16
  414. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +2 -11
  415. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.d.ts +6 -18
  416. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.d.ts +0 -2
  417. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.d.ts +1 -3
  418. package/dist/types/wallet-server/src/authorization/capabilityPolicy.d.ts +0 -1
  419. package/dist/types/wallet-server/src/authorization/domain.d.ts +25 -5
  420. package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.d.ts +37 -0
  421. package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.typecheck.d.ts +2 -0
  422. package/dist/types/wallet-server/src/authorization/factorEvidence.d.ts +6 -7
  423. package/dist/types/wallet-server/src/authorization/service.d.ts +52 -3
  424. package/dist/types/wallet-server/src/cloud-host.d.ts +6 -2
  425. package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +10 -1
  426. package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +16 -116
  427. package/dist/types/wallet-server/src/core/IdentityStore.d.ts +2 -7
  428. package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +6 -16
  429. package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +29 -90
  430. package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -12
  431. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +10 -3
  432. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.d.ts +17 -48
  433. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/internalServiceHttp.d.ts +2 -1
  434. package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +4 -71
  435. package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +2 -1
  436. package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +4 -8
  437. package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +2 -1
  438. package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +1 -3
  439. package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +14 -47
  440. package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +2 -7
  441. package/dist/types/wallet-server/src/core/WalletStore.d.ts +3 -8
  442. package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +7 -22
  443. package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +14 -36
  444. package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +9 -34
  445. package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +9 -34
  446. package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -3
  447. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +6 -5
  448. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +9 -17
  449. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +3 -2
  450. package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +7 -23
  451. package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +3 -10
  452. package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +4 -3
  453. package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +4 -3
  454. package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +3 -70
  455. package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +3 -2
  456. package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +4 -3
  457. package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +5 -8
  458. package/dist/types/wallet-server/src/core/authService/nearPrivateKeySigning.d.ts +3 -2
  459. package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +2 -1
  460. package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +2 -1
  461. package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +4 -3
  462. package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -3
  463. package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -26
  464. package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -5
  465. package/dist/types/wallet-server/src/core/authService/thresholdEcdsaKeyInventory.d.ts +0 -23
  466. package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +8 -16
  467. package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +7 -7
  468. package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +43 -0
  469. package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +1 -28
  470. package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +6 -16
  471. package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +51 -0
  472. package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +11 -29
  473. package/dist/types/wallet-server/src/core/d1WalletStore.d.ts +6 -1
  474. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEd25519ExportRoot.d.ts +2 -1
  475. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEmailOtpGrant.d.ts +2 -1
  476. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceManagement.d.ts +44 -26
  477. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +19 -217
  478. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionApproval.d.ts +8 -0
  479. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionRecord.d.ts +259 -0
  480. package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -2
  481. package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +54 -0
  482. package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -15
  483. package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +4 -24
  484. package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +2 -3
  485. package/dist/types/wallet-server/src/core/nearSignerWasmRuntime.d.ts +0 -1
  486. package/dist/types/wallet-server/src/core/registrationContracts.d.ts +37 -108
  487. package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +5 -4
  488. package/dist/types/wallet-server/src/core/rpcClients/near/NearClient.d.ts +10 -106
  489. package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +4 -3
  490. package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +2 -3
  491. package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +2 -3
  492. package/dist/types/wallet-server/src/core/signingLanes/WalletExecutionLaneProjection.d.ts +3 -9
  493. package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +4 -4
  494. package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +3 -3
  495. package/dist/types/wallet-server/src/core/storeBackends.d.ts +83 -0
  496. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +13 -59
  497. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +51 -3
  498. package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +0 -1
  499. package/dist/types/wallet-server/src/core/types.d.ts +3 -24
  500. package/dist/types/wallet-server/src/core/webAuthnD1Statements.d.ts +29 -0
  501. package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +96 -0
  502. package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +11 -7
  503. package/dist/types/wallet-server/src/index.d.ts +1 -1
  504. package/dist/types/wallet-server/src/local-hosted-wallet-gateway-worker.d.ts +1 -4
  505. package/dist/types/wallet-server/src/localHostedWalletGatewayHandler.d.ts +12 -0
  506. package/dist/types/wallet-server/src/localIntendedEcdsaFinalizeFault.d.ts +33 -0
  507. package/dist/types/wallet-server/src/localIntendedLinkExecuteFault.d.ts +47 -0
  508. package/dist/types/wallet-server/src/localIntendedRevokeFault.d.ts +40 -0
  509. package/dist/types/wallet-server/src/localIntendedSessionAdmissionFault.d.ts +41 -0
  510. package/dist/types/wallet-server/src/localIntendedYaoExportFault.d.ts +41 -0
  511. package/dist/types/wallet-server/src/localIntendedYaoFault.d.ts +7 -1
  512. package/dist/types/wallet-server/src/localIntendedYaoFinalizeFault.d.ts +37 -0
  513. package/dist/types/wallet-server/src/localIntendedYaoRecoveryFault.d.ts +45 -0
  514. package/dist/types/wallet-server/src/localIntendedYaoSigningFault.d.ts +51 -0
  515. package/dist/types/wallet-server/src/router/auth/authRequestValidation.d.ts +10 -21
  516. package/dist/types/wallet-server/src/router/auth/commonRouterUtils.d.ts +5 -10
  517. package/dist/types/wallet-server/src/router/auth/walletSessionFailure.d.ts +1 -4
  518. package/dist/types/wallet-server/src/router/auth/webAuthnCredentialCodecs.d.ts +3 -2
  519. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.d.ts +12 -0
  520. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.d.ts +3 -2
  521. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +2 -2
  522. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthService.d.ts +1 -1
  523. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/authorizedOperationStatements.d.ts +30 -0
  524. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +45 -21
  525. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.d.ts +3 -0
  526. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/walletSessionAuthorityProjection.d.ts +2 -1
  527. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +57 -6
  528. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +2 -3
  529. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.d.ts +8 -21
  530. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.d.ts +14 -1
  531. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.d.ts +49 -0
  532. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.d.ts +1 -1
  533. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +4 -2
  534. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.d.ts +1 -1
  535. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.d.ts +2 -2
  536. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +8 -4
  537. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.d.ts +3 -5
  538. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.d.ts +7 -0
  539. package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.d.ts +1 -2
  540. package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.d.ts +33 -0
  541. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.d.ts +1 -1
  542. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +13 -3
  543. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.d.ts +24 -5
  544. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.d.ts +2 -3
  545. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +1 -3
  546. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +3 -4
  547. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.d.ts +9 -8
  548. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.d.ts +0 -2
  549. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.d.ts +5 -4
  550. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +1 -3
  551. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -21
  552. package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityRecords.d.ts +0 -23
  553. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +1 -2
  554. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.d.ts +11 -19
  555. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -54
  556. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +7 -19
  557. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.d.ts +4 -3
  558. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.d.ts +8 -12
  559. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +5 -8
  560. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -22
  561. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +6 -2
  562. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +10 -6
  563. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +15 -22
  564. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +5 -3
  565. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.d.ts +4 -3
  566. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.d.ts +5 -5
  567. package/dist/types/wallet-server/src/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.d.ts +3 -5
  568. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -1
  569. package/dist/types/wallet-server/src/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.d.ts +0 -16
  570. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +29 -14
  571. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.d.ts +15 -12
  572. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.d.ts +71 -0
  573. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +34 -24
  574. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +44 -26
  575. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +3 -7
  576. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +8 -19
  577. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleTenantRootLineage.d.ts +2 -1
  578. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -0
  579. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.d.ts +15 -2
  580. package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +2 -2
  581. package/dist/types/wallet-server/src/router/domains/ecdsa/routerAbEcdsaStrictRegistration.d.ts +9 -7
  582. package/dist/types/wallet-server/src/router/domains/ecdsa/thresholdEcdsaRequestValidation.d.ts +4 -4
  583. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.d.ts +46 -0
  584. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +5 -3
  585. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.d.ts +20 -79
  586. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -0
  587. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.d.ts +1 -1
  588. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.d.ts +4 -3
  589. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +62 -42
  590. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.d.ts +108 -32
  591. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryActivation.typecheck.d.ts +5 -0
  592. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.d.ts +36 -5
  593. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.d.ts +5 -4
  594. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.d.ts +41 -50
  595. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.d.ts +2 -2
  596. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.d.ts +3 -3
  597. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.d.ts +6 -5
  598. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.d.ts +14 -4
  599. package/dist/types/wallet-server/src/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.d.ts +12 -1
  600. package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/routerAbEd25519YaoWalletSession.d.ts +5 -5
  601. package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.d.ts +3 -4
  602. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpExportPolicy.d.ts +2 -27
  603. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRequestValidation.d.ts +1 -2
  604. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRouteHandlers.d.ts +2 -1
  605. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpSessionRouteHelpers.d.ts +2 -102
  606. package/dist/types/wallet-server/src/router/domains/passkeyCustody/envelopeRevocationAdmission.d.ts +2 -1
  607. package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +3 -2
  608. package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.d.ts +1 -9
  609. package/dist/types/wallet-server/src/router/domains/passkeyCustody/registrationCustodyOutcome.d.ts +2 -1
  610. package/dist/types/wallet-server/src/router/domains/passkeyCustody/verifiedCustodyFactor.d.ts +2 -1
  611. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationAdmission.d.ts +2 -1
  612. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +2 -28
  613. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryFinalization.d.ts +43 -1
  614. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryKeyManifest.d.ts +7 -7
  615. package/dist/types/wallet-server/src/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.d.ts +0 -3
  616. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.d.ts +165 -0
  617. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.d.ts +110 -0
  618. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmission.d.ts +360 -0
  619. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.d.ts +11 -10
  620. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.typecheck.d.ts +2 -0
  621. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbOperationStepUp.d.ts +165 -0
  622. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +16 -702
  623. package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +5 -12
  624. package/dist/types/wallet-server/src/router/domains/syncAccount/syncAccountRequestValidation.d.ts +5 -4
  625. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootCustodyLineage.d.ts +6 -1
  626. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootIdentityResolution.d.ts +4 -7
  627. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +2 -1
  628. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +8 -8
  629. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +4 -4
  630. package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.d.ts +4 -4
  631. package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRouteHandlers.d.ts +4 -62
  632. package/dist/types/wallet-server/src/router/express-adaptor.d.ts +2 -2
  633. package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +64 -61
  634. package/dist/types/wallet-server/src/router/framework/http.d.ts +0 -1
  635. package/dist/types/wallet-server/src/router/framework/ror/normalize.d.ts +2 -2
  636. package/dist/types/wallet-server/src/router/framework/routeMeteringPolicy.d.ts +3 -2
  637. package/dist/types/wallet-server/src/router/framework/routerApi.d.ts +1 -1
  638. package/dist/types/wallet-server/src/router/framework/routerApiRouteSurface.d.ts +3 -3
  639. package/dist/types/wallet-server/src/router/node/nodeHostedWalletGateway.d.ts +34 -0
  640. package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayCheck.d.ts +21 -0
  641. package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayMain.d.ts +2 -0
  642. package/dist/types/wallet-server/src/router/node/nodeHttp.d.ts +13 -0
  643. package/dist/types/wallet-server/src/router/node/nodeSqlite.d.ts +22 -0
  644. package/dist/types/wallet-server/src/router/node/signerSqlMigrations.d.ts +20 -0
  645. package/dist/types/wallet-server/src/router/transport/fetch/createFetchRouter.d.ts +1 -3
  646. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +5 -6
  647. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.d.ts +2 -2
  648. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceManagement.d.ts +14 -16
  649. package/dist/types/wallet-server/src/router/transport/fetch/routes/normalSigningRouterProxy.d.ts +0 -12
  650. package/dist/types/wallet-server/src/router/transport/fetch/routes/passkeyCustody.d.ts +1 -1
  651. package/dist/types/wallet-server/src/router/transport/fetch/routes/sessions.d.ts +2 -1
  652. package/dist/types/wallet-server/src/router/transport/fetch/routes/syncAccountBootstrap.d.ts +7 -13
  653. package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEcdsa.d.ts +3 -57
  654. package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEd25519.d.ts +0 -44
  655. package/dist/types/wallet-server/src/storage/d1Sql.d.ts +7 -0
  656. package/dist/types/wallet-server/src/storage/syncSqlite.d.ts +28 -0
  657. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.d.ts +0 -1
  658. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/idempotencyRecords.d.ts +5 -6
  659. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/transport/shared.d.ts +1 -0
  660. package/dist/types/wallet-server/src/threshold/statusCodes.d.ts +4 -4
  661. package/migrations/d1-signer/0036_r150_yao_lifecycle_decisions.sql +22 -0
  662. package/migrations/d1-signer/0037_r150_wallet_auth_method_revocation_replays.sql +26 -0
  663. package/migrations/d1-signer/0038_r150_registration_ceremony_cas_guard_seed.sql +8 -0
  664. package/migrations/d1-signer/0039_r150_revocation_replay_answer_kind.sql +9 -0
  665. package/package.json +1 -1
  666. package/dist/esm/core/ThresholdService/ecdsaClientRootProof.js +0 -27
  667. package/dist/esm/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.js +0 -115
  668. package/dist/esm/core/ThresholdService/secureRandomId.js +0 -9
  669. package/dist/esm/core/authService/record.js +0 -8
  670. package/dist/esm/core/authService/thresholdRuntimePolicy.js +0 -19
  671. package/dist/esm/core/authService/walletRegistrationPlanning.js +0 -49
  672. package/dist/esm/core/deviceLinking/index.js +0 -5
  673. package/dist/esm/core/errors.js +0 -54
  674. package/dist/esm/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.js +0 -39
  675. package/dist/esm/core/signingLanes/WalletKeyStore.js +0 -0
  676. package/dist/esm/core/signingLanes/index.js +0 -8
  677. package/dist/esm/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.js +0 -55
  678. package/dist/esm/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.js +0 -56
  679. package/dist/esm/shared-ts/src/signing-lanes/linkedEcdsaScope.js +0 -1
  680. package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker.js +0 -414
  681. package/dist/types/shared-ts/src/passkey-custody/credentialObservations.d.ts +0 -74
  682. package/dist/types/shared-ts/src/passkey-custody/kekContext.d.ts +0 -34
  683. package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.d.ts +0 -62
  684. package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.typecheck.d.ts +0 -2
  685. package/dist/types/shared-ts/src/signing-lanes/validation.d.ts +0 -11
  686. package/dist/types/shared-ts/src/utils/bigint.d.ts +0 -3
  687. package/dist/types/shared-ts/src/utils/paillier.d.ts +0 -37
  688. package/dist/types/shared-ts/src/utils/recoveryDomain.d.ts +0 -12
  689. package/dist/types/shared-ts/src/utils/signerDomain.typecheck.d.ts +0 -2
  690. package/dist/types/shared-ts/src/wallet-recovery/recoveryKekContext.d.ts +0 -37
  691. package/dist/types/wallet-server/src/core/ThresholdService/ecdsaClientRootProof.d.ts +0 -12
  692. package/dist/types/wallet-server/src/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.d.ts +0 -17
  693. package/dist/types/wallet-server/src/core/ThresholdService/secureRandomId.d.ts +0 -2
  694. package/dist/types/wallet-server/src/core/authService/record.d.ts +0 -2
  695. package/dist/types/wallet-server/src/core/authService/thresholdRuntimePolicy.d.ts +0 -4
  696. package/dist/types/wallet-server/src/core/authService/walletRegistrationPlanning.d.ts +0 -19
  697. package/dist/types/wallet-server/src/core/deviceLinking/index.d.ts +0 -5
  698. package/dist/types/wallet-server/src/core/errors.d.ts +0 -10
  699. package/dist/types/wallet-server/src/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.d.ts +0 -28
  700. package/dist/types/wallet-server/src/core/signingLanes/SigningLaneStore.d.ts +0 -15
  701. package/dist/types/wallet-server/src/core/signingLanes/WalletKeyStore.d.ts +0 -13
  702. package/dist/types/wallet-server/src/core/signingLanes/index.d.ts +0 -11
  703. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.d.ts +0 -35
  704. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.d.ts +0 -35
  705. /package/dist/esm/{core/signingLanes/SigningLaneStore.js → authorization/ecdsaWalletSessionAdmission.js} +0 -0
@@ -1,38 +1,14 @@
1
1
  import type { AuthorizedOperationId, CapabilityId } from '../authorization/capabilityKinds';
2
2
  import type { CapabilityOperationFingerprintDigest } from '../authorization/operationFingerprint';
3
- import type { DomainId, MpcMaterialActivationRef } from '../utils/domainIds';
3
+ import type { MpcMaterialActivationRef } from '../utils/domainIds';
4
4
  import type { LinkedDeviceEnrollmentId } from './ids';
5
- import type { LinkedDeviceId, LaneShareEpoch, SigningLaneId, WalletKeyId } from './ids';
6
- import type { ActiveSigningLaneReference, DelegatedSpendAuthorizationId } from './records';
7
- import { type RouterAbMpcMaterialActivationRefWire } from '../utils/routerAbNormalSigningIdentity';
8
- export type LinkedDeviceExecutionEnvelopeV1 = {
9
- readonly kind: 'linked_device_execution_v1';
10
- readonly enrollmentId: LinkedDeviceEnrollmentId;
11
- readonly deviceId: LinkedDeviceId;
12
- readonly walletKeyId: WalletKeyId;
13
- readonly laneId: SigningLaneId;
14
- readonly laneShareEpoch: LaneShareEpoch;
15
- readonly materialActivation: RouterAbMpcMaterialActivationRefWire;
16
- };
17
- export declare function buildLinkedDeviceExecutionEnvelopeV1(input: {
18
- readonly enrollmentId: LinkedDeviceEnrollmentId;
19
- readonly deviceId: LinkedDeviceId;
20
- readonly walletKeyId: WalletKeyId;
21
- readonly laneId: SigningLaneId;
22
- readonly laneShareEpoch: LaneShareEpoch;
23
- readonly materialActivation: MpcMaterialActivationRef;
24
- }): LinkedDeviceExecutionEnvelopeV1;
25
- export type DelegatedBudgetClaimId = DomainId<'DelegatedBudgetClaimId'>;
5
+ import type { ActiveSigningLaneReference } from './records';
26
6
  export type ClaimedWalletExecutionAuthorization = {
27
7
  readonly kind: 'claimed_wallet_execution_authorization_v1';
28
8
  readonly authorizedOperationId: AuthorizedOperationId;
29
9
  readonly operationFingerprintDigest: CapabilityOperationFingerprintDigest;
30
10
  readonly capabilityId: CapabilityId;
31
11
  };
32
- export type ReservedDelegatedBudgetClaim = {
33
- readonly kind: 'reserved_delegated_budget_claim_v1';
34
- readonly budgetClaimId: DelegatedBudgetClaimId;
35
- };
36
12
  type PreparedWalletExecutionBase = {
37
13
  readonly authorization: ClaimedWalletExecutionAuthorization;
38
14
  readonly materialActivation: MpcMaterialActivationRef;
@@ -57,35 +33,10 @@ export type PreparedLinkedDeviceWalletExecution = PreparedWalletExecutionBase &
57
33
  readonly delegatedAuthorizationId?: never;
58
34
  readonly budgetClaim?: never;
59
35
  };
60
- export type PreparedDelegatedWalletExecution = PreparedWalletExecutionBase & {
61
- readonly kind: 'prepared_delegated_wallet_execution';
62
- readonly laneKind: 'delegated_execution';
63
- readonly lane: ActiveSigningLaneReference & {
64
- readonly laneKind: 'delegated_execution';
65
- };
66
- readonly delegatedAuthorizationId: DelegatedSpendAuthorizationId;
67
- readonly budgetClaim: ReservedDelegatedBudgetClaim;
68
- readonly linkedDeviceEnrollmentId?: never;
69
- };
70
- export type PreparedWalletExecution = PreparedOwnerWalletExecution | PreparedLinkedDeviceWalletExecution | PreparedDelegatedWalletExecution;
71
36
  export declare function buildPreparedOwnerWalletExecution(input: {
72
37
  readonly authorization: ClaimedWalletExecutionAuthorization;
73
38
  readonly materialActivation: MpcMaterialActivationRef;
74
39
  readonly lane: PreparedOwnerWalletExecution['lane'];
75
40
  }): PreparedOwnerWalletExecution;
76
- export declare function buildPreparedLinkedDeviceWalletExecution(input: {
77
- readonly authorization: ClaimedWalletExecutionAuthorization;
78
- readonly materialActivation: MpcMaterialActivationRef;
79
- readonly lane: PreparedLinkedDeviceWalletExecution['lane'];
80
- readonly linkedDeviceEnrollmentId: LinkedDeviceEnrollmentId;
81
- }): PreparedLinkedDeviceWalletExecution;
82
- export declare function buildPreparedDelegatedWalletExecution(input: {
83
- readonly authorization: ClaimedWalletExecutionAuthorization;
84
- readonly materialActivation: MpcMaterialActivationRef;
85
- readonly lane: PreparedDelegatedWalletExecution['lane'];
86
- readonly delegatedAuthorizationId: DelegatedSpendAuthorizationId;
87
- readonly budgetClaim: ReservedDelegatedBudgetClaim;
88
- }): PreparedDelegatedWalletExecution;
89
- export declare function assertNeverPreparedWalletExecution(value: never): never;
90
41
  export {};
91
42
  //# sourceMappingURL=execution.d.ts.map
@@ -1,8 +1,8 @@
1
1
  export * from './ids';
2
- export * from './validation';
3
2
  export * from './records';
4
3
  export * from './rotation';
5
4
  export * from './rotationParsers';
5
+ export * from './rotationProtocolParsers';
6
6
  export * from './rotationDigests';
7
7
  export * from './rotationLifecycle';
8
8
  export * from './evmFamilySigningKeySlotId';
@@ -10,5 +10,4 @@ export * from './participants';
10
10
  export * from './participantDigest';
11
11
  export * from './execution';
12
12
  export * from './ownerContinuity';
13
- export * from './linkedEcdsaScope';
14
13
  //# sourceMappingURL=index.d.ts.map
@@ -5,7 +5,7 @@ import { type LaneParticipantBindingDigestB64u } from './participants';
5
5
  export type WalletSignerId = string & {
6
6
  readonly __ownerLaneWalletSignerIdBrand: 'WalletSignerId';
7
7
  };
8
- /** Owner lanes bind to signer facts that predate independently provisioned R102 lanes. */
8
+ /** Owner lanes bind to signer facts that predate independently provisioned lanes. */
9
9
  export type OwnerLaneParticipantContinuityV1 = {
10
10
  readonly kind: 'owner_lane_participant_continuity_v1';
11
11
  readonly signerId: WalletSignerId;
@@ -14,7 +14,6 @@ export type OwnerLaneParticipantContinuityV1 = {
14
14
  readonly custodyKeyManifestDigestB64u: DigestB64u;
15
15
  readonly sourceIdentityDigestB64u: DigestB64u;
16
16
  };
17
- export declare const OWNER_LANE_PARTICIPANT_BINDING_DOMAIN_V1: "seams/rotatable-signing-lanes/owner-lane-participant-continuity/v1";
18
17
  /** Parse the owner signer identity without widening it into a generic string. */
19
18
  export declare function parseWalletSignerId(raw: unknown, label?: string): WalletSignerId;
20
19
  export declare function buildOwnerLaneParticipantContinuityV1(args: {
@@ -1,48 +1,26 @@
1
1
  import { type DigestB64u } from '../utils/canonicalPrimitives';
2
2
  import { type HpkePublicKeyB64u, type LaneHolderCustodyIdentityV1, type LaneHolderParticipantId, type LaneHolderParticipantRecordV1, type LaneParticipantBindingDigestB64u, type SigningWorkerParticipantId, type SigningWorkerParticipantRecordV1, type SigningWorkerRecipientIdentityV1, type SigningWorkerRecipientKeyDigestB64u } from './participants';
3
- /** Domain tags are part of the wire contract and must never be shortened. */
4
- export declare const LANE_HOLDER_PARTICIPANT_BINDING_DOMAIN_V1: "seams/rotatable-signing-lanes/lane-holder-participant/v1";
5
- export declare const SIGNING_WORKER_PARTICIPANT_BINDING_DOMAIN_V1: "seams/rotatable-signing-lanes/signing-worker-participant/v1";
6
- /** The lane digest binds the fixed holder-then-SigningWorker participant set. */
7
- export declare const LANE_PARTICIPANT_SET_BINDING_DOMAIN_V1: "seams/rotatable-signing-lanes/lane-participant-set/v1";
8
- export type LaneHolderParticipantBindingInputV1 = {
3
+ type LaneHolderParticipantBindingInputV1 = {
9
4
  readonly participantId: LaneHolderParticipantId;
10
5
  readonly custody: LaneHolderCustodyIdentityV1;
11
6
  readonly hpkePublicKeyB64u: HpkePublicKeyB64u;
12
7
  readonly hpkePublicKeyDigestB64u: SigningWorkerRecipientKeyDigestB64u;
13
8
  };
14
- export type SigningWorkerParticipantBindingInputV1 = {
9
+ type SigningWorkerParticipantBindingInputV1 = {
15
10
  readonly participantId: SigningWorkerParticipantId;
16
11
  readonly recipient: SigningWorkerRecipientIdentityV1;
17
12
  };
18
- /** LP32(UTF8(value)) from the Refactor 102 canonical encoding. */
13
+ /** LP32(UTF8(value)) from the canonical lane encoding. */
19
14
  export declare function encodeLaneCanonicalTextV1(value: string): Uint8Array;
20
- /** LP32(BASE64URL_DECODE_CANONICAL_32(value)) from the Refactor 102 encoding. */
15
+ /** LP32(BASE64URL_DECODE_CANONICAL_32(value)) from the canonical lane encoding. */
21
16
  export declare function encodeLaneCanonicalDigestV1(value: DigestB64u): Uint8Array;
22
17
  /** U64(value), encoded as unsigned big-endian bytes. */
23
18
  export declare function encodeLaneCanonicalU64V1(value: number): Uint8Array;
24
- /** Nonempty array count encoding used by enrollment and receipt records. */
25
- export declare function encodeLaneCanonicalNonEmptyCountV1(count: number): Uint8Array;
26
- export declare function laneHolderParticipantCanonicalBytesV1(input: LaneHolderParticipantRecordV1): Uint8Array;
27
- export declare function signingWorkerParticipantCanonicalBytesV1(input: SigningWorkerParticipantRecordV1): Uint8Array;
28
- /**
29
- * Canonical bytes for the lane's complete participant set. The order is part
30
- * of the protocol: holder first, SigningWorker second. Individual participant
31
- * binding digests are included after their canonical identity bytes so a
32
- * verified record cannot be substituted while retaining the same identities.
33
- */
34
- export declare function laneParticipantSetCanonicalBytesV1(input: {
35
- readonly holderParticipant: LaneHolderParticipantRecordV1;
36
- readonly signingWorkerParticipant: SigningWorkerParticipantRecordV1;
37
- }): Uint8Array;
38
19
  export declare function computeLaneHolderParticipantBindingDigestV1(input: LaneHolderParticipantBindingInputV1): Promise<LaneParticipantBindingDigestB64u>;
39
- export declare function computeSigningWorkerParticipantBindingDigestV1(input: SigningWorkerParticipantBindingInputV1): Promise<LaneParticipantBindingDigestB64u>;
40
20
  export declare function computeLaneParticipantSetBindingDigestV1(input: {
41
21
  readonly holderParticipant: LaneHolderParticipantRecordV1;
42
22
  readonly signingWorkerParticipant: SigningWorkerParticipantRecordV1;
43
23
  }): Promise<LaneParticipantBindingDigestB64u>;
44
- export declare function buildLaneHolderParticipantRecordWithDigestV1(input: LaneHolderParticipantBindingInputV1): Promise<LaneHolderParticipantRecordV1>;
45
24
  export declare function buildSigningWorkerParticipantRecordWithDigestV1(input: SigningWorkerParticipantBindingInputV1): Promise<SigningWorkerParticipantRecordV1>;
46
- export declare function assertLaneHolderParticipantBindingDigestV1(record: LaneHolderParticipantRecordV1): Promise<LaneHolderParticipantRecordV1>;
47
- export declare function assertSigningWorkerParticipantBindingDigestV1(record: SigningWorkerParticipantRecordV1): Promise<SigningWorkerParticipantRecordV1>;
25
+ export {};
48
26
  //# sourceMappingURL=participantDigest.d.ts.map
@@ -61,17 +61,6 @@ export declare function parseHpkePublicKeyB64u(raw: unknown): DomainIdParseResul
61
61
  export declare function parseLaneParticipantBindingDigestB64u(raw: unknown): DomainIdParseResult<LaneParticipantBindingDigestB64u>;
62
62
  export declare function parseLaneCustodyBindingDigestB64u(raw: unknown): DomainIdParseResult<LaneCustodyBindingDigestB64u>;
63
63
  export declare function parseSigningWorkerRecipientKeyDigestB64u(raw: unknown): DomainIdParseResult<SigningWorkerRecipientKeyDigestB64u>;
64
- export declare function buildLaneHolderCustodyIdentityV1(args: {
65
- readonly custodyBindingId: LaneHolderCustodyBindingId;
66
- readonly custodyBindingDigestB64u: LaneCustodyBindingDigestB64u;
67
- }): LaneHolderCustodyIdentityV1;
68
- export declare function buildSigningWorkerRecipientIdentityV1(args: {
69
- readonly recipientKeyId: SigningWorkerRecipientKeyId;
70
- readonly hpkePublicKeyB64u: HpkePublicKeyB64u;
71
- readonly hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
72
- }): SigningWorkerRecipientIdentityV1;
73
- export declare function parseLaneHolderCustodyIdentityV1(raw: unknown, label?: string): LaneHolderCustodyIdentityV1;
74
- export declare function parseSigningWorkerRecipientIdentityV1(raw: unknown, label?: string): SigningWorkerRecipientIdentityV1;
75
64
  export declare function buildLaneHolderParticipantRecordV1(args: {
76
65
  readonly participantId: LaneHolderParticipantId;
77
66
  readonly custody: LaneHolderCustodyIdentityV1;
@@ -1,19 +1,13 @@
1
- import type { MpcMaterialActivationRef, WalletId } from '../utils/domainIds';
1
+ import type { WalletId } from '../utils/domainIds';
2
2
  import { type EvmFamilySigningKeySlotId } from './evmFamilySigningKeySlotId';
3
3
  import { type LaneHolderParticipantRecordV1, type LaneParticipantBindingDigestB64u, type SigningWorkerParticipantRecordV1 } from './participants';
4
4
  import { type LaneShareEpoch, type LinkedDeviceId, type SigningLaneId, type WalletKeyId } from './ids';
5
- import type { ActiveSigningLaneReference, AgentCustodyBindingId, AgentIdentityKeyId, BreakGlassSigningLaneRecord, DelegatedExecutionSigningLaneRecord, DelegatedSpendAuthorizationId, Ed25519WalletKeyRecord, EvmFamilyWalletKeyRecord, LinkedDeviceSigningLaneRecord, OwnerEmailOtpSigningLaneRecord, OwnerPasskeySigningLaneRecord, RecoverySigningLaneRecord, SigningLaneKind, SigningLaneLifecycle, SigningLaneRecord, SigningLaneReference, WalletKeyLifecycle, WalletKeyRecord, WalletKeyVersion } from './records';
5
+ import type { AgentCustodyBindingId, AgentIdentityKeyId, BreakGlassSigningLaneRecord, DelegatedExecutionSigningLaneRecord, DelegatedSpendAuthorizationId, Ed25519WalletKeyRecord, EvmFamilyWalletKeyRecord, LinkedDeviceSigningLaneRecord, OwnerEmailOtpSigningLaneRecord, OwnerPasskeySigningLaneRecord, RecoverySigningLaneRecord, SigningLaneLifecycle, SigningLaneRecord, WalletKeyLifecycle, WalletKeyRecord, WalletKeyVersion } from './records';
6
6
  import { type OwnerLaneParticipantContinuityV1 } from './ownerContinuity';
7
7
  type ActiveSigningLaneLifecycle = Extract<SigningLaneLifecycle, {
8
8
  readonly state: 'active';
9
9
  }>;
10
- export type WalletKeyReferenceBuilderArgs = {
11
- readonly walletId: WalletId;
12
- readonly walletKeyId: WalletKeyId;
13
- readonly walletKeyVersion: WalletKeyVersion;
14
- readonly lifecycle: WalletKeyLifecycle;
15
- };
16
- export type SigningLaneReferenceBuilderArgs = {
10
+ type SigningLaneReferenceBuilderArgs = {
17
11
  readonly walletId: WalletId;
18
12
  readonly walletKeyId: WalletKeyId;
19
13
  readonly laneId: SigningLaneId;
@@ -23,21 +17,17 @@ export type SigningLaneReferenceBuilderArgs = {
23
17
  type SigningLaneRecordBuilderCommonArgs = SigningLaneReferenceBuilderArgs & {
24
18
  readonly lifecycle: SigningLaneLifecycle;
25
19
  };
26
- export type RotatableSigningLaneRecordBuilderArgs = SigningLaneRecordBuilderCommonArgs & {
20
+ type RotatableSigningLaneRecordBuilderArgs = SigningLaneRecordBuilderCommonArgs & {
27
21
  readonly holderParticipant: LaneHolderParticipantRecordV1;
28
22
  readonly serverParticipant: SigningWorkerParticipantRecordV1;
29
23
  };
30
- export type OwnerAuthSigningLaneRecordBuilderArgs = SigningLaneRecordBuilderCommonArgs & {
24
+ type OwnerAuthSigningLaneRecordBuilderArgs = SigningLaneRecordBuilderCommonArgs & {
31
25
  readonly walletAuthMethodId: NonNullable<OwnerPasskeySigningLaneRecord['walletAuthMethodId']>;
32
26
  readonly ownerParticipantContinuity: OwnerLaneParticipantContinuityV1;
33
27
  };
34
- export type PrivilegedOwnerSigningLaneRecordBuilderArgs = SigningLaneRecordBuilderCommonArgs & {
28
+ type PrivilegedOwnerSigningLaneRecordBuilderArgs = SigningLaneRecordBuilderCommonArgs & {
35
29
  readonly ownerParticipantContinuity: OwnerLaneParticipantContinuityV1;
36
30
  };
37
- export type ActiveSigningLaneReferenceBuilderArgs = SigningLaneReferenceBuilderArgs & {
38
- readonly lifecycle: ActiveSigningLaneLifecycle;
39
- readonly materialActivation: MpcMaterialActivationRef;
40
- };
41
31
  export declare function parseWalletKeyVersion(raw: unknown, label?: string): WalletKeyVersion;
42
32
  export declare function buildActiveWalletKeyLifecycle(args: {
43
33
  readonly activatedAtMs: number;
@@ -49,11 +39,6 @@ export declare function buildRetiredWalletKeyLifecycle(args: {
49
39
  }): Extract<WalletKeyLifecycle, {
50
40
  readonly state: 'retired';
51
41
  }>;
52
- export declare function buildCompromisedWalletKeyLifecycle(args: {
53
- readonly compromisedAtMs: number;
54
- }): Extract<WalletKeyLifecycle, {
55
- readonly state: 'compromised';
56
- }>;
57
42
  export declare function buildEd25519WalletKeyRecord(args: {
58
43
  readonly walletId: WalletId;
59
44
  readonly walletKeyId: WalletKeyId;
@@ -72,36 +57,11 @@ export declare function buildEvmFamilyWalletKeyRecord(args: {
72
57
  readonly evmAddress: string;
73
58
  readonly lifecycle: WalletKeyLifecycle;
74
59
  }): EvmFamilyWalletKeyRecord;
75
- export declare function buildSigningLaneReference(args: SigningLaneReferenceBuilderArgs & {
76
- readonly laneKind: SigningLaneKind;
77
- }): SigningLaneReference;
78
- export declare function buildProvisioningSigningLaneLifecycle(args: {
79
- readonly revocationEpoch: number;
80
- readonly startedAtMs: number;
81
- }): Extract<SigningLaneLifecycle, {
82
- readonly state: 'provisioning';
83
- }>;
84
- export declare function buildPendingReceiptSigningLaneLifecycle(args: {
85
- readonly revocationEpoch: number;
86
- readonly startedAtMs: number;
87
- readonly deliveryDigestB64u: string;
88
- }): Extract<SigningLaneLifecycle, {
89
- readonly state: 'pending_receipt';
90
- }>;
91
60
  export declare function buildActiveSigningLaneLifecycle(args: {
92
61
  readonly revocationEpoch: number;
93
62
  readonly activatedAtMs: number;
94
63
  readonly activationReceiptDigestB64u: string;
95
64
  }): ActiveSigningLaneLifecycle;
96
- export declare function buildRevokedSigningLaneLifecycle(args: {
97
- readonly revocationEpoch: number;
98
- readonly revokedAtMs: number;
99
- readonly revokeReason: Extract<SigningLaneLifecycle, {
100
- readonly state: 'revoked';
101
- }>['revokeReason'];
102
- }): Extract<SigningLaneLifecycle, {
103
- readonly state: 'revoked';
104
- }>;
105
65
  export declare function buildOwnerPasskeySigningLaneRecord(args: OwnerAuthSigningLaneRecordBuilderArgs): OwnerPasskeySigningLaneRecord;
106
66
  export declare function buildOwnerEmailOtpSigningLaneRecord(args: OwnerAuthSigningLaneRecordBuilderArgs): OwnerEmailOtpSigningLaneRecord;
107
67
  export declare function buildLinkedDeviceSigningLaneRecord(args: RotatableSigningLaneRecordBuilderArgs & {
@@ -115,14 +75,7 @@ export declare function buildDelegatedExecutionSigningLaneRecord(args: Rotatable
115
75
  }): DelegatedExecutionSigningLaneRecord;
116
76
  export declare function buildRecoverySigningLaneRecord(args: PrivilegedOwnerSigningLaneRecordBuilderArgs): RecoverySigningLaneRecord;
117
77
  export declare function buildBreakGlassSigningLaneRecord(args: PrivilegedOwnerSigningLaneRecordBuilderArgs): BreakGlassSigningLaneRecord;
118
- export declare function buildActiveSigningLaneReference(args: ActiveSigningLaneReferenceBuilderArgs & {
119
- readonly laneKind: SigningLaneKind;
120
- }): ActiveSigningLaneReference;
121
- export declare function parseWalletKeyLifecycle(raw: unknown, label?: string): WalletKeyLifecycle;
122
- export declare function parseSigningLaneLifecycle(raw: unknown, label?: string): SigningLaneLifecycle;
123
78
  export declare function parseWalletKeyRecord(raw: unknown, label?: string): WalletKeyRecord;
124
- export declare function parseSigningLaneReference(raw: unknown, label?: string): SigningLaneReference;
125
79
  export declare function parseSigningLaneRecord(raw: unknown, label?: string): SigningLaneRecord;
126
- export declare function parseActiveSigningLaneReference(raw: unknown, label?: string): ActiveSigningLaneReference;
127
80
  export {};
128
81
  //# sourceMappingURL=recordParsers.d.ts.map
@@ -1,7 +1,7 @@
1
1
  import type { DomainId, MpcMaterialActivationRef, WalletAuthMethodId, WalletId } from '../utils/domainIds';
2
2
  import type { KeyCreationSignerSlot } from '../passkey-custody/primitives';
3
3
  import type { Ed25519PublicKeyB64u, Secp256k1CompressedPublicKeyB64u } from '../passkey-custody/primitives';
4
- import type { NearEd25519SigningKeyId } from '../utils/registrationIntent';
4
+ import type { NearEd25519SigningKeyId } from '../utils/registrationIds';
5
5
  import type { LaneHolderParticipantRecordV1, LaneParticipantBindingDigestB64u, SigningWorkerParticipantRecordV1 } from './participants';
6
6
  import type { LaneShareEpoch, LinkedDeviceId, SigningLaneId, WalletKeyId } from './ids';
7
7
  import type { EvmFamilySigningKeySlotId } from './evmFamilySigningKeySlotId';
@@ -155,6 +155,5 @@ export type BreakGlassSigningLaneRecord = PrivilegedOwnerSigningLaneRecordBase &
155
155
  readonly authorizationBindingDigestB64u?: never;
156
156
  };
157
157
  export type SigningLaneRecord = OwnerPasskeySigningLaneRecord | OwnerEmailOtpSigningLaneRecord | LinkedDeviceSigningLaneRecord | DelegatedExecutionSigningLaneRecord | RecoverySigningLaneRecord | BreakGlassSigningLaneRecord;
158
- export declare function assertNeverSigningLane(value: never): never;
159
158
  export {};
160
159
  //# sourceMappingURL=records.d.ts.map
@@ -3,7 +3,7 @@ import type { KeyCreationSignerSlot } from '../passkey-custody/primitives';
3
3
  import type { MpcMaterialActivationId, MpcMaterialActivationRef, ThresholdEcdsaSessionId, WalletId, LaneHolderRecipientHandleV1 } from '../utils/domainIds';
4
4
  import type { EcdsaCapabilityManifestId, EcdsaCapabilityManifestRevision, EcdsaLifecycleId, EcdsaServerGeneration } from '../utils/ecdsaCapabilityActivation';
5
5
  import type { CorrelationId, DigestB64u, IsoTimestamp } from '../utils/canonicalPrimitives';
6
- import type { NearEd25519SigningKeyId } from '../utils/registrationIntent';
6
+ import type { NearEd25519SigningKeyId } from '../utils/registrationIds';
7
7
  import type { EcdsaThresholdKeyId } from '../threshold/ecdsaDerivationRoleLocalBootstrap';
8
8
  import type { EcdsaManifestIdentity, EcdsaRelayerKeyId, Ed25519YaoSuiteId, LaneEnrollmentId, LaneOperationId, LaneOperationIdempotencyKey, LaneShareEpoch, LinkedDeviceEnrollmentId, SigningLaneId, ThresholdEcdsaChainTarget, WalletKeyId } from './ids';
9
9
  import type { LaneHolderParticipantId, HpkePublicKeyB64u, HpkePublicKeyDigestB64u, LaneCustodyBindingDigestB64u, LaneParticipantBindingDigestB64u, LaneHolderCustodyBindingId, SigningWorkerParticipantId, SigningWorkerRecipientKeyId, LaneHolderParticipantRecordV1, SigningWorkerParticipantRecordV1 } from './participants';
@@ -51,7 +51,7 @@ export type ProvisionedLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
51
51
  };
52
52
  export type ActiveLaneProtocolSourceV1 = OwnerLaneProtocolSourceV1 | ProvisionedLaneProtocolSourceV1;
53
53
  export declare function isProvisionedLaneProtocolSourceV1(source: ActiveLaneProtocolSourceV1): source is ProvisionedLaneProtocolSourceV1;
54
- export type LaneTargetHolderV1 = {
54
+ type LaneTargetHolderV1 = {
55
55
  participantId: LaneHolderParticipantId;
56
56
  participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
57
57
  custodyBindingId: LaneHolderCustodyBindingId;
@@ -82,7 +82,7 @@ export type LaneRefreshTargetV1 = {
82
82
  expectedTargetState: 'active_previous_epoch';
83
83
  priorMaterialActivation: MpcMaterialActivationRef;
84
84
  };
85
- export type EcdsaTargetThresholdSessionBindingV1 = {
85
+ type EcdsaTargetThresholdSessionBindingV1 = {
86
86
  chainTarget: ThresholdEcdsaChainTarget;
87
87
  thresholdSessionId: ThresholdEcdsaSessionId;
88
88
  participantBindingDigestB64u: string;
@@ -103,7 +103,7 @@ export type EcdsaTargetCapabilityBindingV1 = {
103
103
  ...EcdsaTargetThresholdSessionBindingV1[]
104
104
  ];
105
105
  };
106
- export type LaneProtocolJobCommonV1 = {
106
+ type LaneProtocolJobCommonV1 = {
107
107
  operationId: LaneOperationId;
108
108
  enrollmentId: LaneEnrollmentId;
109
109
  idempotencyKey: LaneOperationIdempotencyKey;
@@ -116,16 +116,15 @@ export type LaneProtocolJobCommonV1 = {
116
116
  protocolVersion: 'rotatable_signing_lane_protocol_v1';
117
117
  expiresAtMs: number;
118
118
  };
119
- export type LaneCreationOperationV1 = {
119
+ type LaneCreationOperationV1 = {
120
120
  target: LaneCreationTargetV1;
121
121
  authorization: LinkedDeviceLaneAuthorizationBindingV1;
122
122
  };
123
- export type LaneRefreshOperationV1 = {
123
+ type LaneRefreshOperationV1 = {
124
124
  target: LaneRefreshTargetV1;
125
125
  authorization: OwnerLaneRefreshAuthorizationBindingV1;
126
126
  };
127
- export type LaneProtocolOperationV1 = LaneCreationOperationV1 | LaneRefreshOperationV1;
128
- export type Ed25519YaoLaneJobCurveV1 = {
127
+ type Ed25519YaoLaneJobCurveV1 = {
129
128
  kind: 'ed25519_yao_lane_job_v1';
130
129
  keyFamily: 'ed25519';
131
130
  registeredPublicKeyB64u: string;
@@ -161,12 +160,12 @@ type EcdsaAdditiveLaneJobCurveV1 = {
161
160
  export type Ed25519YaoLaneCreationJobV1 = LaneProtocolJobCommonV1 & Ed25519YaoLaneJobCurveV1 & LaneCreationOperationV1 & {
162
161
  yaoRequestKind: 'lane_provisioning';
163
162
  };
164
- export type Ed25519YaoLaneRefreshJobV1 = LaneProtocolJobCommonV1 & Ed25519YaoLaneJobCurveV1 & LaneRefreshOperationV1 & {
163
+ type Ed25519YaoLaneRefreshJobV1 = LaneProtocolJobCommonV1 & Ed25519YaoLaneJobCurveV1 & LaneRefreshOperationV1 & {
165
164
  yaoRequestKind: 'lane_refresh';
166
165
  };
167
166
  export type Ed25519YaoLaneJobV1 = Ed25519YaoLaneCreationJobV1 | Ed25519YaoLaneRefreshJobV1;
168
167
  export type EcdsaAdditiveLaneCreationJobV1 = LaneProtocolJobCommonV1 & LaneCreationOperationV1 & EcdsaAdditiveLaneJobCurveV1;
169
- export type EcdsaAdditiveLaneRefreshJobV1 = LaneProtocolJobCommonV1 & LaneRefreshOperationV1 & EcdsaAdditiveLaneJobCurveV1;
168
+ type EcdsaAdditiveLaneRefreshJobV1 = LaneProtocolJobCommonV1 & LaneRefreshOperationV1 & EcdsaAdditiveLaneJobCurveV1;
170
169
  export type EcdsaAdditiveLaneJobV1 = EcdsaAdditiveLaneCreationJobV1 | EcdsaAdditiveLaneRefreshJobV1;
171
170
  export type RotatableSigningLaneJobV1 = Ed25519YaoLaneJobV1 | EcdsaAdditiveLaneJobV1;
172
171
  export type LaneProtocolCommitReceiptV1 = {
@@ -219,8 +218,8 @@ export type LaneServerActivationReceiptV1 = {
219
218
  transcriptHashB64u: string;
220
219
  activatedAtMs: number;
221
220
  };
222
- export type LaneProtocolAbortReason = 'cancelled' | 'expired' | 'revoked_before_commit';
223
- export type LaneProtocolCompletionReason = 'exact_redelivery_required' | 'recovery_required';
221
+ type LaneProtocolAbortReason = 'cancelled' | 'expired' | 'revoked_before_commit';
222
+ type LaneProtocolCompletionReason = 'exact_redelivery_required' | 'recovery_required';
224
223
  export type LaneProtocolLifecycle = {
225
224
  state: 'preparing';
226
225
  startedAtMs: number;
@@ -276,10 +275,6 @@ export type LaneProtocolRecordV1 = {
276
275
  job: RotatableSigningLaneJobV1;
277
276
  lifecycle: LaneProtocolLifecycle;
278
277
  };
279
- export type EcdsaAdditiveLaneTranscriptPreambleV1 = {
280
- kind: 'ecdsa_additive_lane_transcript_preamble_v1';
281
- job: EcdsaAdditiveLaneJobV1;
282
- };
283
278
  export type EcdsaAdditiveLaneHolderRoundV1 = {
284
279
  kind: 'ecdsa_additive_lane_holder_round_v1';
285
280
  preambleHashB64u: string;
@@ -289,23 +284,6 @@ export type EcdsaAdditiveLaneHolderRoundV1 = {
289
284
  holderAttestationB64u: string;
290
285
  holderCommittedAtMs: number;
291
286
  };
292
- export type EcdsaAdditiveLaneServerRoundV1 = {
293
- kind: 'ecdsa_additive_lane_server_round_v1';
294
- preambleHashB64u: string;
295
- holderRoundHashB64u: string;
296
- targetServerPublicCommitment33B64u: string;
297
- sealedTargetServerMaterialDigestB64u: string;
298
- targetThresholdSessionSetDigestB64u: string;
299
- publicIdentityRelationDigestB64u: string;
300
- serverAttestationB64u: string;
301
- serverCommittedAtMs: number;
302
- };
303
- export type EcdsaAdditiveLaneTranscriptV1 = {
304
- kind: 'ecdsa_additive_lane_transcript_v1';
305
- preambleHashB64u: string;
306
- holderRoundHashB64u: string;
307
- serverRoundHashB64u: string;
308
- };
309
287
  export type LaneEnrollmentManifestChildV1 = {
310
288
  operationId: LaneOperationId;
311
289
  walletKeyId: WalletKeyId;
@@ -446,7 +424,7 @@ export type Ed25519ServerRetirementReceiptV1 = {
446
424
  retiredAtMs: number;
447
425
  };
448
426
  export type LaneServerRetirementReceiptV1 = EcdsaServerRetirementReceiptV1 | Ed25519ServerRetirementReceiptV1;
449
- export type LaneProductEpochRecordCommonV1 = {
427
+ type LaneProductEpochRecordCommonV1 = {
450
428
  kind: 'lane_product_epoch_record_v1';
451
429
  walletId: WalletId;
452
430
  walletKeyId: WalletKeyId;
@@ -778,7 +756,7 @@ export type EcdsaLaneProtocolWasmV1 = {
778
756
  prepareEcdsaAdditiveLaneHolderRoundV1(input: EcdsaAdditiveLaneJobV1): Promise<EcdsaAdditiveLaneHolderPreparationV1>;
779
757
  };
780
758
  export type { LaneHolderRecipientHandleV1 } from '../utils/domainIds';
781
- export type LaneHolderRecipientDescriptorV1 = {
759
+ type LaneHolderRecipientDescriptorV1 = {
782
760
  recipientHandle: LaneHolderRecipientHandleV1;
783
761
  hpkePublicKeyB64u: HpkePublicKeyB64u;
784
762
  hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
@@ -808,12 +786,12 @@ export type Ed25519YaoLaneClientCompletionV1 = {
808
786
  kind: 'ed25519_yao_lane_holder_package_set_v1';
809
787
  }>;
810
788
  };
811
- export type SealedLaneHolderMaterialV1 = {
789
+ type SealedLaneHolderMaterialV1 = {
812
790
  sealedHolderMaterialB64u: string;
813
791
  sealedHolderRecordDigestB64u: DigestB64u;
814
792
  verifiedHolderCiphertextDigestSetB64u: DigestB64u;
815
793
  };
816
- export type VerifiedLaneHolderPackageV1 = {
794
+ type VerifiedLaneHolderPackageV1 = {
817
795
  verifiedHolderCiphertextDigestSetB64u: DigestB64u;
818
796
  };
819
797
  export type WasmEd25519YaoLaneClientV1 = {
@@ -1,32 +1,13 @@
1
1
  import { type DigestB64u } from '../utils/canonicalPrimitives';
2
- import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, EcdsaAdditiveLaneHolderRoundV1, EcdsaAdditiveLaneServerRoundV1, EcdsaAdditiveLaneTranscriptPreambleV1, EcdsaAdditiveLaneTranscriptV1, EcdsaServerRetirementReceiptV1, Ed25519ServerRetirementReceiptV1, Ed25519YaoLaneJobV1, LaneEnrollmentManifestV1, LaneProductEpochRecordV1, RevokeSigningLaneV1, SigningWorkerLaneMaterialIdentityV1 } from './rotation';
3
- export declare function encodeEd25519YaoLaneJobTranscriptV1(value: Ed25519YaoLaneJobV1): Uint8Array;
4
- export declare function computeEd25519YaoLaneJobTranscriptDigestV1(value: Ed25519YaoLaneJobV1): Promise<string>;
2
+ import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, EcdsaServerRetirementReceiptV1, Ed25519ServerRetirementReceiptV1, Ed25519YaoLaneJobV1, LaneEnrollmentManifestV1, RevokeSigningLaneV1 } from './rotation';
5
3
  export declare function computeEd25519YaoLaneSessionDigestV1(value: Ed25519YaoLaneJobV1): Promise<string>;
6
- export declare function encodeEcdsaAdditiveLaneTranscriptPreambleV1(value: EcdsaAdditiveLaneTranscriptPreambleV1): Uint8Array;
7
- export declare function encodeEcdsaAdditiveLaneHolderRoundV1(value: EcdsaAdditiveLaneHolderRoundV1): Uint8Array;
8
- export declare function encodeEcdsaAdditiveLaneServerRoundV1(value: EcdsaAdditiveLaneServerRoundV1): Uint8Array;
9
- export declare function encodeEcdsaAdditiveLaneTranscriptV1(value: EcdsaAdditiveLaneTranscriptV1): Uint8Array;
10
- export declare function computeEcdsaAdditiveLaneTranscriptPreambleDigestV1(value: EcdsaAdditiveLaneTranscriptPreambleV1): Promise<string>;
11
- export declare function computeEcdsaAdditiveLaneHolderRoundDigestV1(value: EcdsaAdditiveLaneHolderRoundV1): Promise<string>;
12
- export declare function computeEcdsaAdditiveLaneServerRoundDigestV1(value: EcdsaAdditiveLaneServerRoundV1): Promise<string>;
13
- export declare function computeEcdsaAdditiveLaneTranscriptDigestV1(value: EcdsaAdditiveLaneTranscriptV1): Promise<string>;
14
- export declare function encodeLaneEnrollmentManifestV1(value: LaneEnrollmentManifestV1): Uint8Array;
15
4
  export declare function computeLaneEnrollmentManifestDigestV1(value: LaneEnrollmentManifestV1): Promise<string>;
16
- export declare function encodeAggregateLaneActivationReceiptV1(value: AggregateLaneActivationReceiptV1): Uint8Array;
17
5
  export declare function computeAggregateLaneActivationReceiptDigestV1(value: AggregateLaneActivationReceiptV1): Promise<string>;
18
- export declare function encodeAggregateLaneRevocationReceiptV1(value: AggregateLaneRevocationReceiptV1): Uint8Array;
19
6
  export declare function computeAggregateLaneRevocationReceiptDigestV1(value: AggregateLaneRevocationReceiptV1): Promise<string>;
20
- export declare function encodeRevokeSigningLaneV1(value: RevokeSigningLaneV1): Uint8Array;
21
7
  export declare function computeRevokeSigningLaneDigestV1(value: RevokeSigningLaneV1): Promise<string>;
22
8
  export declare function encodeLaneProtocolCommitReceiptV1(value: import('./rotation').LaneProtocolCommitReceiptV1): Uint8Array;
23
- export declare function computeLaneProtocolCommitReceiptDigestV1(value: import('./rotation').LaneProtocolCommitReceiptV1): Promise<DigestB64u>;
24
9
  export declare function encodeLaneHolderDeliveryReceiptV1(value: import('./rotation').LaneHolderDeliveryReceiptV1): Uint8Array;
25
10
  export declare function encodeLaneServerActivationReceiptV1(value: import('./rotation').LaneServerActivationReceiptV1): Uint8Array;
26
- export declare function encodeEcdsaServerRetirementReceiptCanonicalPayloadV1(value: EcdsaServerRetirementReceiptV1): Uint8Array;
27
11
  export declare function computeEcdsaServerRetirementReceiptDigestV1(value: EcdsaServerRetirementReceiptV1): Promise<DigestB64u>;
28
- export declare function encodeSigningWorkerLaneMaterialIdentityV1(value: SigningWorkerLaneMaterialIdentityV1): Uint8Array;
29
- export declare function encodeEd25519ServerRetirementReceiptCanonicalPayloadV1(value: Ed25519ServerRetirementReceiptV1): Uint8Array;
30
12
  export declare function computeEd25519ServerRetirementReceiptDigestV1(value: Ed25519ServerRetirementReceiptV1): Promise<DigestB64u>;
31
- export declare function encodeLaneProductEpochRecordV1(value: LaneProductEpochRecordV1): Uint8Array;
32
13
  //# sourceMappingURL=rotationDigests.d.ts.map
@@ -1,6 +1,6 @@
1
- import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, LaneEnrollmentLifecycleV1, LaneProductEpochActiveV1, LaneProductEpochPendingVisibilityV1, LaneProductEpochRevocationPendingV1, LaneProductEpochRecordV1, LaneProductEpochRetiredV1, LaneProductEpochRevokedV1, LaneProtocolLifecycle } from './rotation';
1
+ import type { LaneEnrollmentLifecycleV1, LaneProductEpochActiveV1, LaneProductEpochPendingVisibilityV1, LaneProductEpochRevocationPendingV1, LaneProductEpochRetiredV1, LaneProductEpochRevokedV1, LaneProtocolLifecycle } from './rotation';
2
2
  import type { LaneOperationId } from './ids';
3
- export type LaneProtocolLifecycleTransitionV1 = {
3
+ type LaneProtocolLifecycleTransitionV1 = {
4
4
  action: 'await_protocol_commitment';
5
5
  atMs: number;
6
6
  } | {
@@ -32,20 +32,7 @@ export type LaneProtocolLifecycleTransitionV1 = {
32
32
  atMs: number;
33
33
  };
34
34
  export declare function transitionLaneProtocolLifecycleV1(current: LaneProtocolLifecycle, transition: LaneProtocolLifecycleTransitionV1): LaneProtocolLifecycle;
35
- export declare function beginLaneProtocolLifecycleV1(startedAtMs: number): Extract<LaneProtocolLifecycle, {
36
- state: 'preparing';
37
- }>;
38
- export declare function markLaneProtocolCompletionRequiredV1(current: Extract<LaneProtocolLifecycle, {
39
- state: 'committed_awaiting_holder_delivery';
40
- }>, recoveryReason: 'exact_redelivery_required' | 'recovery_required'): Extract<LaneProtocolLifecycle, {
41
- state: 'committed_completion_required';
42
- }>;
43
- export declare function resumeLaneProtocolCompletionV1(current: Extract<LaneProtocolLifecycle, {
44
- state: 'committed_completion_required';
45
- }>, atMs: number): Extract<LaneProtocolLifecycle, {
46
- state: 'committed_awaiting_holder_delivery';
47
- }>;
48
- export type LaneEnrollmentLifecycleTransitionV1 = {
35
+ type LaneEnrollmentLifecycleTransitionV1 = {
49
36
  action: 'mark_committed_completion_required';
50
37
  committedChildOperationIds: readonly [LaneOperationId, ...LaneOperationId[]];
51
38
  markedAtMs: number;
@@ -87,13 +74,5 @@ export declare function completeLaneProductEpochRevocationV1(current: LaneProduc
87
74
  readonly revocationReceiptDigestB64u: string;
88
75
  readonly revokedAtMs: number;
89
76
  }): LaneProductEpochRevokedV1;
90
- export declare function assertForwardOnlyLaneProductEpochV1(value: LaneProductEpochRecordV1): void;
91
- export type LaneActivationReceiptInputV1 = {
92
- readonly aggregateReceipt: AggregateLaneActivationReceiptV1;
93
- readonly manifestDigestB64u: string;
94
- };
95
- export type LaneRevocationReceiptInputV1 = {
96
- readonly aggregateReceipt: AggregateLaneRevocationReceiptV1;
97
- readonly manifestDigestB64u: string;
98
- };
77
+ export {};
99
78
  //# sourceMappingURL=rotationLifecycle.d.ts.map
@@ -1,34 +1,14 @@
1
- import { type MpcMaterialActivationRef } from '../utils/domainIds';
2
- import { type SigningLaneId, type LaneShareEpoch } from './ids';
3
- import type { SigningLaneKind } from './records';
4
- import type { AggregateLaneActivationChildReceiptV1, AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, CommitLaneEnrollmentActivationV1, CommitLaneEnrollmentRevocationV1, CompleteSigningLaneRevocationV1, EcdsaAdditiveLaneHolderRoundV1, EcdsaAdditiveLaneServerRoundV1, EcdsaAdditiveLaneTranscriptPreambleV1, EcdsaAdditiveLaneTranscriptV1, EcdsaServerRetirementReceiptV1, Ed25519ServerRetirementReceiptV1, EcdsaTargetCapabilityBindingV1, LaneCreationTargetV1, LaneEnrollmentLifecycleV1, LaneEnrollmentPreparationResultV1, LaneEnrollmentManifestV1, LaneHolderDeliveryReceiptV1, LaneHolderPackageWireV1, LaneProductEpochActiveV1, LaneProductEpochPendingVisibilityV1, LaneProductEpochRevocationPendingV1, LaneProductEpochRecordV1, LaneProductEpochRetiredV1, LaneProductEpochRevokedV1, LaneProtocolCommitReceiptV1, LaneProtocolCasResultV1, LaneProtocolLifecycle, LaneProtocolRecordV1, LaneRefreshTargetV1, LaneRefreshPredecessorRetirementV1, LaneServerActivationReceiptV1, LaneServerRetirementReceiptV1, SigningWorkerLaneMaterialIdentityV1, RevokeLaneEnrollmentV1, RevokeSigningLaneV1, RotatableSigningLaneJobV1 } from './rotation';
5
- export declare function buildLaneCreationTargetV1(args: {
6
- readonly laneId: SigningLaneId;
7
- readonly laneShareEpoch: LaneShareEpoch;
8
- }): LaneCreationTargetV1;
9
- export declare function buildLaneRefreshTargetV1(args: {
10
- readonly laneId: SigningLaneId;
11
- readonly laneKind: Exclude<SigningLaneKind, 'delegated_execution'>;
12
- readonly laneShareEpoch: LaneShareEpoch;
13
- readonly priorMaterialActivation: MpcMaterialActivationRef;
14
- }): LaneRefreshTargetV1;
15
- export declare function parseEcdsaTargetCapabilityBindingV1(raw: unknown, label: string): EcdsaTargetCapabilityBindingV1;
16
- export declare function parseRotatableSigningLaneJobV1(raw: unknown, label?: string): RotatableSigningLaneJobV1;
17
- export declare function parseLaneHolderPackageWireV1(raw: unknown, label?: string): LaneHolderPackageWireV1;
18
- export declare const parseLaneProtocolJobV1: typeof parseRotatableSigningLaneJobV1;
1
+ import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, CommitLaneEnrollmentRevocationV1, CompleteSigningLaneRevocationV1, EcdsaServerRetirementReceiptV1, Ed25519ServerRetirementReceiptV1, LaneEnrollmentLifecycleV1, LaneEnrollmentManifestV1, LaneHolderDeliveryReceiptV1, LaneProductEpochPendingVisibilityV1, LaneProductEpochRecordV1, LaneProductEpochRevokedV1, LaneProtocolCommitReceiptV1, LaneProtocolLifecycle, LaneProtocolRecordV1, LaneRefreshPredecessorRetirementV1, LaneServerActivationReceiptV1, LaneServerRetirementReceiptV1, RevokeLaneEnrollmentV1, RevokeSigningLaneV1, RotatableSigningLaneJobV1 } from './rotation';
19
2
  export declare function parseLaneProtocolCommitReceiptV1(raw: unknown, label?: string): LaneProtocolCommitReceiptV1;
20
3
  export declare function parseLaneHolderDeliveryReceiptV1(raw: unknown, label?: string): LaneHolderDeliveryReceiptV1;
21
4
  export declare function parseLaneServerActivationReceiptV1(raw: unknown, label?: string): LaneServerActivationReceiptV1;
22
5
  export declare function parseLaneEnrollmentManifestV1(raw: unknown, label?: string): LaneEnrollmentManifestV1;
23
- export declare function buildAggregateLaneActivationChildReceiptV1(input: AggregateLaneActivationChildReceiptV1): AggregateLaneActivationChildReceiptV1;
24
6
  export declare function parseAggregateLaneActivationReceiptV1(raw: unknown, label?: string): AggregateLaneActivationReceiptV1;
25
- export declare function parseCommitLaneEnrollmentActivationV1(raw: unknown, label?: string): CommitLaneEnrollmentActivationV1;
26
7
  export declare function parseLaneRefreshPredecessorRetirementV1(raw: unknown, label?: string): LaneRefreshPredecessorRetirementV1;
27
8
  export declare function parseAggregateLaneRevocationReceiptV1(raw: unknown, label?: string): AggregateLaneRevocationReceiptV1;
28
9
  export declare function parseRevokeLaneEnrollmentV1(raw: unknown, label?: string): RevokeLaneEnrollmentV1;
29
10
  export declare function parseRevokeSigningLaneV1(raw: unknown, label?: string): RevokeSigningLaneV1;
30
11
  export declare function parseCompleteSigningLaneRevocationV1(raw: unknown, label?: string): CompleteSigningLaneRevocationV1;
31
- export declare function parseCommitLaneEnrollmentRevocationV1(raw: unknown, label?: string): CommitLaneEnrollmentRevocationV1;
32
12
  export declare function parseLaneProductEpochRecordV1(raw: unknown, label?: string): LaneProductEpochRecordV1;
33
13
  export declare function parseLaneProtocolLifecycleV1(raw: unknown, label?: string): LaneProtocolLifecycle;
34
14
  export declare function parseLaneEnrollmentLifecycleV1(raw: unknown, label?: string): LaneEnrollmentLifecycleV1;
@@ -36,32 +16,12 @@ export declare function buildLaneProtocolRecordV1(args: {
36
16
  readonly job: RotatableSigningLaneJobV1;
37
17
  readonly lifecycle: LaneProtocolLifecycle;
38
18
  }): LaneProtocolRecordV1;
39
- export declare function parseLaneProtocolRecordV1(raw: unknown, label?: string): LaneProtocolRecordV1;
40
- export declare function parseLaneProtocolCasResultV1(raw: unknown, label?: string): LaneProtocolCasResultV1;
41
- export declare function parseLaneEnrollmentPreparationResultV1(raw: unknown, label?: string): LaneEnrollmentPreparationResultV1;
42
- export declare function buildRotatableSigningLaneJobV1(raw: unknown, label?: string): RotatableSigningLaneJobV1;
43
- export declare function buildLaneProtocolCommitReceiptV1(args: Omit<LaneProtocolCommitReceiptV1, 'kind'>): LaneProtocolCommitReceiptV1;
44
- export declare function buildLaneHolderDeliveryReceiptV1(args: Omit<LaneHolderDeliveryReceiptV1, 'kind'>): LaneHolderDeliveryReceiptV1;
45
- export declare function buildLaneServerActivationReceiptV1(args: Omit<LaneServerActivationReceiptV1, 'kind'>): LaneServerActivationReceiptV1;
46
- export declare function buildLaneEnrollmentManifestV1(args: Omit<LaneEnrollmentManifestV1, 'kind'>): LaneEnrollmentManifestV1;
47
- export declare function buildAggregateLaneActivationReceiptV1(args: Omit<AggregateLaneActivationReceiptV1, 'kind'>): AggregateLaneActivationReceiptV1;
48
- export declare function buildCommitLaneEnrollmentActivationV1(args: Omit<CommitLaneEnrollmentActivationV1, 'kind'>): CommitLaneEnrollmentActivationV1;
49
19
  export declare function buildAggregateLaneRevocationReceiptV1(args: Omit<AggregateLaneRevocationReceiptV1, 'kind'>): AggregateLaneRevocationReceiptV1;
50
- export declare function buildRevokeLaneEnrollmentV1(args: Omit<RevokeLaneEnrollmentV1, 'kind'>): RevokeLaneEnrollmentV1;
51
20
  export declare function buildRevokeSigningLaneV1(args: Omit<RevokeSigningLaneV1, 'kind'>): RevokeSigningLaneV1;
52
- export declare function buildCompleteSigningLaneRevocationV1(args: Omit<CompleteSigningLaneRevocationV1, 'kind'>): CompleteSigningLaneRevocationV1;
53
21
  export declare function buildCommitLaneEnrollmentRevocationV1(args: Omit<CommitLaneEnrollmentRevocationV1, 'kind'>): CommitLaneEnrollmentRevocationV1;
54
22
  export declare function buildLaneProductEpochPendingVisibilityV1(args: Omit<LaneProductEpochPendingVisibilityV1, 'kind' | 'state'>): LaneProductEpochPendingVisibilityV1;
55
- export declare function buildLaneProductEpochActiveV1(args: Omit<LaneProductEpochActiveV1, 'kind' | 'state'>): LaneProductEpochActiveV1;
56
- export declare function buildLaneProductEpochRetiredV1(args: Omit<LaneProductEpochRetiredV1, 'kind' | 'state'>): LaneProductEpochRetiredV1;
57
- export declare function buildLaneProductEpochRevocationPendingV1(args: Omit<LaneProductEpochRevocationPendingV1, 'kind' | 'state'>): LaneProductEpochRevocationPendingV1;
58
23
  export declare function buildLaneProductEpochRevokedV1(args: Omit<LaneProductEpochRevokedV1, 'kind' | 'state'>): LaneProductEpochRevokedV1;
59
- export declare function parseEcdsaAdditiveLaneTranscriptPreambleV1(raw: unknown, label?: string): EcdsaAdditiveLaneTranscriptPreambleV1;
60
- export declare function parseEcdsaAdditiveLaneHolderRoundV1(raw: unknown, label?: string): EcdsaAdditiveLaneHolderRoundV1;
61
- export declare function parseEcdsaAdditiveLaneServerRoundV1(raw: unknown, label?: string): EcdsaAdditiveLaneServerRoundV1;
62
- export declare function parseEcdsaAdditiveLaneTranscriptV1(raw: unknown, label?: string): EcdsaAdditiveLaneTranscriptV1;
63
24
  export declare function parseEcdsaServerRetirementReceiptV1(raw: unknown, label?: string): EcdsaServerRetirementReceiptV1;
64
- export declare function parseSigningWorkerLaneMaterialIdentityV1<TKeyFamily extends 'ed25519' | 'ecdsa_secp256k1'>(raw: unknown, expectedKeyFamily: TKeyFamily, label?: string): SigningWorkerLaneMaterialIdentityV1<TKeyFamily>;
65
25
  export declare function parseEd25519ServerRetirementReceiptV1(raw: unknown, label?: string): Ed25519ServerRetirementReceiptV1;
66
26
  export declare function parseLaneServerRetirementReceiptV1(raw: unknown, label?: string): LaneServerRetirementReceiptV1;
67
27
  //# sourceMappingURL=rotationParsers.d.ts.map
@@ -0,0 +1,6 @@
1
+ import type { EcdsaAdditiveLaneHolderRoundV1, LaneHolderPackageWireV1, RotatableSigningLaneJobV1 } from './rotation';
2
+ export declare function parseRotatableSigningLaneJobV1(raw: unknown, label?: string): RotatableSigningLaneJobV1;
3
+ export declare const parseLaneProtocolJobV1: typeof parseRotatableSigningLaneJobV1;
4
+ export declare function parseLaneHolderPackageWireV1(raw: unknown, label?: string): LaneHolderPackageWireV1;
5
+ export declare function parseEcdsaAdditiveLaneHolderRoundV1(raw: unknown, label?: string): EcdsaAdditiveLaneHolderRoundV1;
6
+ //# sourceMappingURL=rotationProtocolParsers.d.ts.map