@seams/wallet-server 0.6.1 → 0.7.1

package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.d.ts

@@ -1,59 +1,27 @@
-import { type CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutReceiptV1Wire, type CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1Wire, type RouterAbEcdsaDerivationServerPresignatureShareV1, type RouterAbEcdsaDerivationNormalSigningScopeV1, type RouterAbEcdsaSigningWorkerExportShareBindingV1, type RouterAbEcdsaSigningWorkerExportShareEnvelopeV1 } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
+import { type RouterAbEcdsaDerivationNormalSigningScopeV1, type RouterAbEcdsaSigningWorkerExportShareBindingV1, type RouterAbEcdsaSigningWorkerExportShareEnvelopeV1 } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
 export { ROUTER_AB_INTERNAL_SERVICE_AUTH_HEADER_V1 } from './internalServiceHttp';
-export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_DERIVATION_PRESIGNATURE_POOL_PUT_PATH: "/router-ab/signing-worker/ecdsa-derivation/presignature-pool/put";
-export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_PRESIGN_SESSION_INIT_PATH: "/router-ab/signing-worker/ecdsa-derivation/presignature-session/init";
-export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_PRESIGN_SESSION_STEP_PATH: "/router-ab/signing-worker/ecdsa-derivation/presignature-session/step";
-export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_LINKED_PRESIGN_SESSION_INIT_PATH: "/router-ab/signing-worker/ecdsa-derivation/linked-device/presignature-session/init";
-export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_LINKED_PRESIGN_SESSION_STEP_PATH: "/router-ab/signing-worker/ecdsa-derivation/linked-device/presignature-session/step";
-export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_LINKED_EXPORT_SHARE_PATH: "/router-ab/signing-worker/ecdsa-derivation/linked-device/export-share";
-export type RouterAbEcdsaDerivationPresignaturePoolFillInput = {
-    scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
-    presignature: RouterAbEcdsaDerivationServerPresignatureShareV1;
-    materialExpiresAtMs: number;
-};
-export declare function buildRouterAbEcdsaDerivationPresignaturePoolPutRequest(input: RouterAbEcdsaDerivationPresignaturePoolFillInput): CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1Wire;
 export type RouterAbEcdsaDerivationPresignaturePoolFillAuth = {
     kind: 'internal_service_auth_secret';
     secret: string;
 };
-export type RouterAbEcdsaDerivationPresignaturePoolFillHttpInput = {
-    signingWorkerBaseUrl: string;
-    request: CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1Wire;
-    auth: RouterAbEcdsaDerivationPresignaturePoolFillAuth;
-    fetchImpl: typeof fetch;
-};
-export type RouterAbEcdsaDerivationPresignaturePoolFillHttpResult = {
-    ok: true;
-    status: number;
-    receipt: CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutReceiptV1Wire & {
-        stored: true;
+export type RouterAbEcdsaPresignAuthorityV1 = {
+    readonly kind: 'owner_wallet_session';
+    readonly wallet_scope: {
+        readonly org_id: string;
+        readonly project_id: string;
+        readonly project_environment_id: string;
+        readonly wallet_id: string;
     };
 } | {
-    ok: false;
-    code: 'already_exists';
-    message: string;
-    status: number;
-    receipt: CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutReceiptV1Wire & {
-        stored: false;
+    readonly kind: 'operation_step_up';
+    readonly wallet_scope: {
+        readonly org_id: string;
+        readonly project_id: string;
+        readonly project_environment_id: string;
+        readonly wallet_id: string;
     };
-} | {
-    ok: false;
-    code: 'http_error';
-    message: string;
-    status: number;
-    bodyText: string;
-} | {
-    ok: false;
-    code: 'invalid_response';
-    message: string;
-    status: number;
-    bodyText: string;
-} | {
-    ok: false;
-    code: 'network_error';
-    message: string;
 };
-export type RouterAbEcdsaPresignSessionProgress = {
+type RouterAbEcdsaPresignSessionProgress = {
     kind: 'continue';
     presignSessionId: string;
     stage: 'triples' | 'triples_done' | 'presign';
@@ -95,6 +63,7 @@ export declare function exportRouterAbLinkedDeviceEcdsaShare(input: {
 export declare function startRouterAbEcdsaPresignSession(input: {
     signingWorkerBaseUrl: string;
     scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
+    authority: RouterAbEcdsaPresignAuthorityV1;
     presignSessionId: string;
     firstMessageB64u: string;
     ceremonyExpiresAtMs: number;
@@ -106,6 +75,7 @@ export declare function startRouterAbEcdsaPresignSession(input: {
 export declare function stepRouterAbEcdsaPresignSession(input: {
     signingWorkerBaseUrl: string;
     scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
+    authority: RouterAbEcdsaPresignAuthorityV1;
     presignSessionId: string;
     requestedStage: 'triples' | 'presign';
     outgoingMessagesB64u: string[];
@@ -140,5 +110,4 @@ export declare function stepRouterAbLinkedDeviceEcdsaPresignSession(input: {
     auth: RouterAbEcdsaDerivationPresignaturePoolFillAuth;
     fetchImpl: typeof fetch;
 }): Promise<RouterAbEcdsaPresignSessionHttpResult>;
-export declare function putRouterAbEcdsaDerivationPresignaturePoolFill(input: RouterAbEcdsaDerivationPresignaturePoolFillHttpInput): Promise<RouterAbEcdsaDerivationPresignaturePoolFillHttpResult>;
 //# sourceMappingURL=ecdsaDerivationPresignBridge.d.ts.map

package/dist/types/wallet-server/src/core/ThresholdService/routerAb/internalServiceHttp.d.ts

@@ -1,5 +1,5 @@
 export declare const ROUTER_AB_INTERNAL_SERVICE_AUTH_HEADER_V1 = "x-router-ab-internal-service-auth";
-export type RouterAbInternalServiceJsonResult = {
+type RouterAbInternalServiceJsonResult = {
     ok: true;
     status: number;
     bodyText: string;
@@ -28,4 +28,5 @@ export declare function postRouterAbInternalServiceJson(input: {
     fetchImpl: typeof fetch;
     onServerTiming?: (header: string | null) => void;
 }): Promise<RouterAbInternalServiceJsonResult>;
+export {};
 //# sourceMappingURL=internalServiceHttp.d.ts.map

package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts

@@ -1,74 +1,8 @@
 import type { NormalizedLogger } from '../../logger';
-import type { CloudflareDurableObjectNamespaceLike, ThresholdStoreConfigInput } from '../../types';
-import type { WalletSessionReplayGuardResult, WalletSessionConsumeUsesResult, EcdsaWalletSessionStore, Ed25519WalletSessionStore, WalletSessionRecord, WalletSessionRecordParser, WalletSessionStore, WalletSessionStatusLookupResult } from './WalletSessionStore';
-import type { ThresholdEd25519ReadyKeyRecord, ThresholdEd25519KeyStore } from './KeyStore';
-import type { ThresholdEd25519CoordinatorSigningSessionRecord, ThresholdEcdsaSessionStore, ThresholdMpcSessionRecord, ThresholdClaimMpcSessionResult, ThresholdEd25519MpcSessionRecord, ThresholdReadMpcSessionResult, ThresholdEd25519SessionStore, ThresholdEd25519SigningSessionRecord } from './SessionStore';
-export declare class CloudflareDurableObjectWalletSessionStore<TRecord extends WalletSessionRecord> implements WalletSessionStore<TRecord> {
-    private readonly stub;
-    private readonly keyPrefix;
-    private readonly parseRecord;
-    constructor(input: {
-        namespace: CloudflareDurableObjectNamespaceLike;
-        objectName: string;
-        keyPrefix: string;
-        parseRecord: WalletSessionRecordParser<TRecord>;
-    });
-    private key;
-    private replayGuardKey;
-    putSession(id: string, record: TRecord, opts: {
-        ttlMs: number;
-        remainingUses: number;
-    }): Promise<void>;
-    getSession(id: string): Promise<TRecord | null>;
-    getSessionStatus(id: string): Promise<WalletSessionStatusLookupResult<TRecord>>;
-    consumeUseCount(id: string): Promise<WalletSessionConsumeUsesResult>;
-    consumeUseCountOnce(id: string, idempotencyKey: string): Promise<WalletSessionConsumeUsesResult>;
-    hasConsumedUseCountOnce(id: string, idempotencyKey: string): Promise<{
-        ok: true;
-        consumed: boolean;
-    } | {
-        ok: false;
-        code: string;
-        message: string;
-    }>;
-    reserveReplayGuard(scopeId: string, replayKey: string, expiresAtMs: number): Promise<WalletSessionReplayGuardResult>;
-}
-type CloudflareDoMpcSessionRecordParser<TRecord extends ThresholdMpcSessionRecord> = (raw: unknown) => TRecord | null;
-export declare class CloudflareDurableObjectThresholdEd25519SessionStore<TMpcRecord extends ThresholdMpcSessionRecord = ThresholdEd25519MpcSessionRecord> {
-    private readonly stub;
-    private readonly keyPrefix;
-    private readonly coordinatorPrefix;
-    private readonly parseMpcSessionRecord;
-    constructor(input: {
-        namespace: CloudflareDurableObjectNamespaceLike;
-        objectName: string;
-        keyPrefix: string;
-        parseMpcSessionRecord?: CloudflareDoMpcSessionRecordParser<TMpcRecord>;
-    });
-    private key;
-    private coordKey;
-    putMpcSession(id: string, record: TMpcRecord, ttlMs: number): Promise<void>;
-    readMpcSession(id: string): Promise<ThresholdReadMpcSessionResult<TMpcRecord> | null>;
-    claimMpcSession(id: string, version: string): Promise<ThresholdClaimMpcSessionResult<TMpcRecord>>;
-    takeMpcSession(id: string): Promise<TMpcRecord | null>;
-    putSigningSession(id: string, record: ThresholdEd25519SigningSessionRecord, ttlMs: number): Promise<void>;
-    takeSigningSession(id: string): Promise<ThresholdEd25519SigningSessionRecord | null>;
-    putCoordinatorSigningSession(id: string, record: ThresholdEd25519CoordinatorSigningSessionRecord, ttlMs: number): Promise<void>;
-    takeCoordinatorSigningSession(id: string): Promise<ThresholdEd25519CoordinatorSigningSessionRecord | null>;
-}
-export declare class CloudflareDurableObjectThresholdEd25519KeyStore implements ThresholdEd25519KeyStore {
-    private readonly stub;
-    private readonly keyPrefix;
-    constructor(input: {
-        namespace: CloudflareDurableObjectNamespaceLike;
-        objectName: string;
-        keyPrefix: string;
-    });
-    private key;
-    get(relayerKeyId: string): Promise<ThresholdEd25519ReadyKeyRecord | null>;
-    put(relayerKeyId: string, record: ThresholdEd25519ReadyKeyRecord): Promise<void>;
-    del(relayerKeyId: string): Promise<void>;
-}
+import type { ThresholdStoreConfigInput } from '../../types';
+import type { EcdsaWalletSessionStore, Ed25519WalletSessionStore } from './WalletSessionStore';
+import type { ThresholdEd25519KeyStore } from './KeyStore';
+import type { ThresholdEcdsaSessionStore, ThresholdEd25519SessionStore } from './SessionStore';
 export declare function createCloudflareDurableObjectThresholdEd25519Stores(input: {
     config?: ThresholdStoreConfigInput | null;
     logger: NormalizedLogger;
@@ -84,5 +18,4 @@ export declare function createCloudflareDurableObjectThresholdEcdsaStores(input:
     sessionStore: ThresholdEcdsaSessionStore;
     walletSessionStore: EcdsaWalletSessionStore;
 } | null;
-export {};
 //# sourceMappingURL=CloudflareDurableObjectStore.d.ts.map

package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts

@@ -1,6 +1,6 @@
 import type { NormalizedLogger } from '../../logger';
 import type { ThresholdEd25519AuthorityScope, ThresholdStoreConfigInput } from '../../types';
-export type ThresholdEd25519ProvisioningKeyRecord = {
+type ThresholdEd25519ProvisioningKeyRecord = {
     kind: 'provisioning';
     walletId: string;
     nearAccountId: string;
@@ -36,4 +36,5 @@ export declare function createThresholdEd25519KeyStore(input: {
     logger: NormalizedLogger;
     isNode: boolean;
 }): ThresholdEd25519KeyStore;
+export {};
 //# sourceMappingURL=KeyStore.d.ts.map

package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts

@@ -4,8 +4,8 @@ export type ThresholdEd25519Commitments = {
     hiding: string;
     binding: string;
 };
-export type ThresholdEd25519CommitmentsById = Record<string, ThresholdEd25519Commitments>;
-export type ThresholdEd25519SigningShareMaterial = {
+type ThresholdEd25519CommitmentsById = Record<string, ThresholdEd25519Commitments>;
+type ThresholdEd25519SigningShareMaterial = {
     kind: 'key_store';
 } | {
     kind: 'embedded_cosigner_share';
@@ -76,7 +76,7 @@ export type ThresholdEd25519CoordinatorSigningSessionRecord = {
     cosignerCoordinatorGrantsById: Record<string, string>;
     relayerVerifyingSharesById: Record<string, string>;
 };
-export interface ThresholdMpcSessionStore<TRecord extends ThresholdMpcSessionRecord> {
+interface ThresholdMpcSessionStore<TRecord extends ThresholdMpcSessionRecord> {
     putMpcSession(id: string, record: TRecord, ttlMs: number): Promise<void>;
     readMpcSession(id: string): Promise<ThresholdReadMpcSessionResult<TRecord> | null>;
     claimMpcSession(id: string, version: string): Promise<ThresholdClaimMpcSessionResult<TRecord>>;
@@ -94,9 +94,5 @@ export declare function createThresholdEd25519SessionStore(input: {
     logger: NormalizedLogger;
     isNode: boolean;
 }): ThresholdEd25519SessionStore;
-export declare function createThresholdEcdsaSessionStore(input: {
-    config?: ThresholdStoreConfigInput | null;
-    logger: NormalizedLogger;
-    isNode: boolean;
-}): ThresholdEcdsaSessionStore;
+export {};
 //# sourceMappingURL=SessionStore.d.ts.map

package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts

@@ -1,3 +1,4 @@
-export type NonDurableObjectThresholdStoreKind = 'in-memory' | 'upstash-redis-rest' | 'redis-tcp';
+type NonDurableObjectThresholdStoreKind = 'in-memory' | 'upstash-redis-rest' | 'redis-tcp';
 export declare function readNonDurableObjectThresholdStoreKind(config: Record<string, unknown>, storeLabel: string): NonDurableObjectThresholdStoreKind | null;
+export {};
 //# sourceMappingURL=StoreConfig.d.ts.map

package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts

@@ -34,7 +34,7 @@ export type WalletSessionConsumeUsesResult = {
     code: string;
     message: string;
 };
-export type WalletSessionConsumedUseResult = {
+type WalletSessionConsumedUseResult = {
     ok: true;
     consumed: boolean;
 } | {
@@ -61,8 +61,6 @@ export type WalletSessionStatusLookupResult<TRecord extends WalletSessionRecord>
     ok: false;
     code: Extract<WalletSessionFailureCode, typeof WALLET_SESSION_FAILURE_CODES.missing | typeof WALLET_SESSION_FAILURE_CODES.expired | typeof WALLET_SESSION_FAILURE_CODES.unavailable>;
 };
-export type Ed25519WalletSessionStatus = WalletSessionStatus<Ed25519WalletSessionRecord>;
-export type EcdsaWalletSessionStatus = WalletSessionStatus<EcdsaWalletSessionRecord>;
 export interface WalletSessionStore<TRecord extends WalletSessionRecord> {
     putSession(id: string, record: TRecord, opts: {
         ttlMs: number;

package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts

@@ -1,18 +1,7 @@
 import { type WalletAuthAuthority } from '../../../../shared-ts/src/utils/walletAuthAuthority';
-import type { EcdsaDerivationClientBootstrapRequest, EcdsaDerivationPublicIdentity, ThresholdEd25519AuthorityScope } from '../types';
+import type { EcdsaDerivationPublicIdentity, ThresholdEd25519AuthorityScope } from '../types';
 import { type EcdsaKeyHandle } from '../keyMaterialBrands';
-export type ThresholdValidationOk = {
-    ok: true;
-};
-export type ThresholdValidationErr = {
-    ok: false;
-    code: string;
-    message: string;
-};
-export type ThresholdValidationResult = ThresholdValidationOk | ThresholdValidationErr;
-export declare function isObject(v: unknown): v is Record<string, unknown>;
-export declare function isValidNumber(v: unknown): v is number;
-export type ParsedThresholdEcdsaSigningRootMetadata = {
+type ParsedThresholdEcdsaSigningRootMetadata = {
     signingRootId: string;
     signingRootVersion?: string;
     walletKeyVersion: string;
@@ -24,27 +13,14 @@ export declare function toThresholdEd25519SessionPrefix(prefix: unknown): string
 export declare function toThresholdEd25519WalletSessionPrefix(prefix: unknown): string;
 export declare function toThresholdEd25519PrefixFromBase(basePrefix: unknown, kind: 'key' | 'sess' | 'wallet-session'): string;
 export declare function canonicalThresholdEd25519RelayerKeyId(relayerKeyId: unknown): string;
-export declare function toThresholdEcdsaKeyPrefix(prefix: unknown): string;
 export declare function toThresholdEcdsaSessionPrefix(prefix: unknown): string;
 export declare function toThresholdEcdsaWalletSessionPrefix(prefix: unknown): string;
-export declare function toThresholdEcdsaPresignPrefix(prefix: unknown): string;
 export declare function toThresholdEcdsaPrefixFromBase(basePrefix: unknown, kind: 'key' | 'sess' | 'wallet-session' | 'presign'): string;
-export type ParsedThresholdEd25519RouterMaterial = {
+type ParsedThresholdEd25519RouterMaterial = {
     signingShareB64u: string;
     verifyingShareB64u: string;
 };
-export type ParsedThresholdEd25519ProvisioningKeyRecord = {
-    kind: 'provisioning';
-    walletId: string;
-    nearAccountId: string;
-    nearEd25519SigningKeyId: string;
-    authorityScope: ThresholdEd25519AuthorityScope;
-    publicKey: string;
-    keyVersion: string;
-    routerMaterial?: never;
-    recoveryExportCapable?: never;
-};
-export type ParsedThresholdEd25519ReadyKeyRecord = {
+type ParsedThresholdEd25519ReadyKeyRecord = {
     kind: 'ready';
     walletId: string;
     nearAccountId: string;
@@ -55,22 +31,17 @@ export type ParsedThresholdEd25519ReadyKeyRecord = {
     keyVersion: string;
     recoveryExportCapable: true;
 };
-export type ParsedThresholdEd25519KeyRecord = ParsedThresholdEd25519ProvisioningKeyRecord | ParsedThresholdEd25519ReadyKeyRecord;
-export declare function parseThresholdEd25519ReadyKeyRecord(raw: unknown): ParsedThresholdEd25519ReadyKeyRecord | null;
 export declare function parseThresholdEd25519KeyRecord(raw: unknown): ParsedThresholdEd25519ReadyKeyRecord | null;
 export declare function parseEcdsaDerivationPublicIdentity(raw: unknown): EcdsaDerivationPublicIdentity | null;
-export declare function parseEcdsaDerivationClientBootstrapRequest(raw: unknown): EcdsaDerivationClientBootstrapRequest | null;
-export type ParsedThresholdEd25519Commitments = {
+type ParsedThresholdEd25519Commitments = {
     hiding: string;
     binding: string;
 };
-export declare function parseThresholdEd25519Commitments(raw: unknown): ParsedThresholdEd25519Commitments | null;
-export type ParsedThresholdEd25519CommitmentsById = Record<string, ParsedThresholdEd25519Commitments>;
-export declare function parseThresholdEd25519CommitmentsById(raw: unknown): ParsedThresholdEd25519CommitmentsById | null;
+type ParsedThresholdEd25519CommitmentsById = Record<string, ParsedThresholdEd25519Commitments>;
 export declare function parseThresholdEd25519AuthorityScope(raw: unknown): ThresholdEd25519AuthorityScope | null;
 export declare function thresholdEd25519AuthorityScopeFromWalletAuthAuthority(authority: WalletAuthAuthority): ThresholdEd25519AuthorityScope;
 export declare function thresholdEd25519AuthorityScopesMatch(left: ThresholdEd25519AuthorityScope, right: ThresholdEd25519AuthorityScope): boolean;
-export type ParsedThresholdEd25519MpcSessionRecord = {
+type ParsedThresholdEd25519MpcSessionRecord = {
     expiresAtMs: number;
     ecdsaThresholdKeyId?: string;
     keyHandle?: string;
@@ -83,7 +54,7 @@ export type ParsedThresholdEd25519MpcSessionRecord = {
     clientVerifyingShareB64u?: string;
     participantIds: number[];
 } & Partial<ParsedThresholdEcdsaSigningRootMetadata>;
-export type ParsedThresholdEcdsaMpcSessionRecord = {
+type ParsedThresholdEcdsaMpcSessionRecord = {
     expiresAtMs: number;
     ecdsaThresholdKeyId?: string;
     keyHandle?: string;
@@ -97,13 +68,13 @@ export type ParsedThresholdEcdsaMpcSessionRecord = {
 } & Partial<ParsedThresholdEcdsaSigningRootMetadata>;
 export declare function parseThresholdEd25519MpcSessionRecord(raw: unknown): ParsedThresholdEd25519MpcSessionRecord | null;
 export declare function parseThresholdEcdsaMpcSessionRecord(raw: unknown): ParsedThresholdEcdsaMpcSessionRecord | null;
-export type ParsedThresholdEd25519SigningShareMaterial = {
+type ParsedThresholdEd25519SigningShareMaterial = {
     kind: 'key_store';
 } | {
     kind: 'embedded_cosigner_share';
     relayerSigningShareB64u: string;
 };
-export type ParsedThresholdEd25519SigningSessionRecord = {
+type ParsedThresholdEd25519SigningSessionRecord = {
     expiresAtMs: number;
     mpcSessionId: string;
     relayerKeyId: string;
@@ -116,9 +87,8 @@ export type ParsedThresholdEd25519SigningSessionRecord = {
     participantIds: number[];
 };
 export declare function parseThresholdEd25519SigningSessionRecord(raw: unknown): ParsedThresholdEd25519SigningSessionRecord | null;
-export type ParsedThresholdEd25519StringById = Record<string, string>;
-export declare function parseThresholdEd25519StringById(raw: unknown): ParsedThresholdEd25519StringById | null;
-export type ParsedThresholdEd25519CoordinatorSigningSessionRecord = {
+type ParsedThresholdEd25519StringById = Record<string, string>;
+type ParsedThresholdEd25519CoordinatorSigningSessionRecord = {
     mode: 'cosigner';
     expiresAtMs: number;
     mpcSessionId: string;
@@ -135,7 +105,7 @@ export type ParsedThresholdEd25519CoordinatorSigningSessionRecord = {
     relayerVerifyingSharesById: ParsedThresholdEd25519StringById;
 };
 export declare function parseThresholdEd25519CoordinatorSigningSessionRecord(raw: unknown): ParsedThresholdEd25519CoordinatorSigningSessionRecord | null;
-export type ParsedEd25519WalletSessionRecord = {
+type ParsedEd25519WalletSessionRecord = {
     expiresAtMs: number;
     relayerKeyId: string;
     userId: string;
@@ -153,15 +123,12 @@ type ParsedEcdsaWalletSessionRecordCore = {
     keyHandle: EcdsaKeyHandle;
     participantIds: number[];
 };
-export type ParsedEcdsaWalletSessionRecord = ParsedEcdsaWalletSessionRecordCore & ({
+type ParsedEcdsaWalletSessionRecord = ParsedEcdsaWalletSessionRecordCore & ({
     signingRootId?: never;
     signingRootVersion?: never;
     walletKeyVersion?: never;
     derivationVersion?: never;
 } | ParsedThresholdEcdsaSigningRootMetadata);
 export declare function parseEcdsaWalletSessionRecord(raw: unknown): ParsedEcdsaWalletSessionRecord | null;
-export declare function normalizeByteArray32(input: unknown): Uint8Array | null;
-export declare function toNearPublicKeyStr(v: unknown): string;
-export declare function extractAuthorizeSigningPublicKey(purpose: string, signingPayload: unknown): string;
 export {};
 //# sourceMappingURL=validation.d.ts.map

package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts

@@ -1,12 +1,7 @@
-import type { ThresholdStoreConfigInput } from './types';
-import type { NormalizedLogger } from './logger';
 import type { WalletAuthMethodStore } from './d1WalletAuthMethodStore';
+import { type StoreFactoryInput } from './storeBackends';
 export { D1WalletAuthMethodStore, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_SQL, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_V2_SQL, ensureWalletAuthMethodStoreD1Schema, ensureWalletAuthMethodStoreD1SchemaV2, normalizeWalletAuthMethod, normalizeWalletAuthMethodV2, prepareD1WalletAuthMethodV2PutStatement, walletAuthMethodV2Id, } from './d1WalletAuthMethodStore';
 export type { D1WalletAuthMethodStoreOptions, D1WalletAuthMethodStoreSchemaOptions, WalletAuthMethodRecord, WalletAuthMethodRecordV2Owned, WalletAuthMethodStore, WalletAuthMethodV2Store, } from './d1WalletAuthMethodStore';
 export declare function resolveWalletAuthMethodStoreNamespace(config: Record<string, unknown>): string;
-export declare function createWalletAuthMethodStore(input: {
-    config?: ThresholdStoreConfigInput | null;
-    logger: NormalizedLogger;
-    isNode: boolean;
-}): WalletAuthMethodStore;
+export declare function createWalletAuthMethodStore(input: StoreFactoryInput): WalletAuthMethodStore;
 //# sourceMappingURL=WalletAuthMethodStore.d.ts.map

package/dist/types/wallet-server/src/core/WalletStore.d.ts

@@ -1,11 +1,11 @@
-import type { NormalizedLogger } from './logger';
-import type { ThresholdEcdsaChainTarget, ThresholdStoreConfigInput } from './types';
+import type { ThresholdEcdsaChainTarget } from './types';
 import type { WalletRegistrationEcdsaWalletKey, WalletId } from './registrationContracts';
 import { type EcdsaClientRootPublicKey33B64u } from '../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap';
 import { type RuntimePolicyScope } from '../../../shared-ts/src/threshold/signingRootScope';
 import type { RouterAbEd25519YaoActivationResultV1, RouterAbEd25519YaoActivationAdmissionReceiptV1, RouterAbEd25519YaoBytes32V1, RouterAbEd25519YaoRecoveryAdmissionRequestV1, RouterAbEd25519YaoRegistrationAdmissionRequestV1 } from '../../../shared-ts/src/utils/routerAbEd25519Yao';
 import { type RouterAbMpcMaterialActivationRefWire } from '../../../shared-ts/src/utils/routerAbNormalSigningIdentity';
 import { type RouterAbEcdsaDerivationActivationRefreshForwardedResponseV1, type RouterAbEcdsaDerivationActivationRefreshRequestV1, type RouterAbEcdsaDerivationPublicCapabilityV1, type RouterAbEcdsaRegistrationActivationReceiptV1 } from '../../../shared-ts/src/utils/routerAbEcdsaDerivation';
+import { type StoreFactoryInput } from './storeBackends';
 export { D1WalletStore, WALLET_STORE_D1_SCHEMA_SQL, buildWalletEcdsaSignerRecord, ensureWalletStoreD1Schema, } from './d1WalletStore';
 export type { D1WalletStoreOptions, D1WalletStoreSchemaOptions } from './d1WalletStore';
 export type WalletRecord = {
@@ -51,7 +51,6 @@ export type WalletEd25519SignerRecord = {
     createdAtMs: number;
     updatedAtMs: number;
 };
-export declare function sameWalletEd25519SignerRecordV1(left: WalletEd25519SignerRecord, right: WalletEd25519SignerRecord): boolean;
 export type WalletEcdsaSignerKey = Omit<WalletRegistrationEcdsaWalletKey, 'evmFamilySigningKeySlotId'> & {
     evmFamilySigningKeySlotId?: never;
 };
@@ -135,9 +134,5 @@ export declare function buildWalletEd25519SignerId(input: {
     nearAccountId: string;
     signerSlot: number;
 }): string;
-export declare function createWalletStore(input: {
-    config?: ThresholdStoreConfigInput | null;
-    logger: NormalizedLogger;
-    isNode: boolean;
-}): WalletStore;
+export declare function createWalletStore(input: StoreFactoryInput): WalletStore;
 //# sourceMappingURL=WalletStore.d.ts.map

package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts

@@ -1,7 +1,6 @@
-import type { NormalizedLogger } from './logger';
-import type { ThresholdStoreConfigInput } from './types';
 import { type WebAuthnAuthenticatorDeviceInfo } from '../../../shared-ts/src/utils/webauthnDeviceInfo';
-import type { D1DatabaseLike } from '../storage/tenantRoute';
+import type { StoreFactoryInput } from './storeBackends';
+import { type D1SchemaOptions, type D1TenantStoreOptions } from './d1TenantStore';
 export type WebAuthnAuthenticatorRecord = {
     version: 'webauthn_authenticator_v1';
     credentialIdB64u: string;
@@ -27,36 +26,22 @@ export interface WebAuthnAuthenticatorStore {
      */
     list?(userId: string): Promise<WebAuthnAuthenticatorRecord[]>;
 }
-export interface D1WebAuthnAuthenticatorStoreSchemaOptions {
-    readonly database: D1DatabaseLike;
+export interface D1WebAuthnAuthenticatorStoreSchemaOptions extends D1SchemaOptions {
 }
-export interface D1WebAuthnAuthenticatorStoreOptions {
-    readonly database: D1DatabaseLike;
-    readonly namespace: string;
-    readonly orgId: string;
-    readonly projectId: string;
-    readonly envId: string;
-    readonly ensureSchema?: boolean;
+export interface D1WebAuthnAuthenticatorStoreOptions extends D1TenantStoreOptions {
 }
 export declare const WEBAUTHN_AUTHENTICATOR_STORE_D1_SCHEMA_SQL: readonly ["\n    CREATE TABLE IF NOT EXISTS webauthn_authenticators (\n      namespace TEXT NOT NULL,\n      org_id TEXT NOT NULL,\n      project_id TEXT NOT NULL,\n      env_id TEXT NOT NULL,\n      user_id TEXT NOT NULL,\n      credential_id_b64u TEXT NOT NULL,\n      credential_public_key_b64u TEXT NOT NULL,\n      counter INTEGER NOT NULL,\n      created_at_ms INTEGER NOT NULL,\n      updated_at_ms INTEGER NOT NULL,\n      device_info_json TEXT NOT NULL DEFAULT '{}',\n      PRIMARY KEY (namespace, org_id, project_id, env_id, user_id, credential_id_b64u),\n      CHECK (length(user_id) > 0),\n      CHECK (length(credential_id_b64u) > 0),\n      CHECK (length(credential_public_key_b64u) > 0),\n      CHECK (counter >= 0),\n      CHECK (created_at_ms > 0),\n      CHECK (updated_at_ms > 0)\n    )\n  ", "\n    CREATE INDEX IF NOT EXISTS webauthn_authenticators_user_idx\n      ON webauthn_authenticators (\n        namespace,\n        org_id,\n        project_id,\n        env_id,\n        user_id,\n        created_at_ms\n      )\n  "];
 export declare function ensureWebAuthnAuthenticatorStoreD1Schema(options: D1WebAuthnAuthenticatorStoreSchemaOptions): Promise<void>;
 export declare function resolveWebAuthnAuthenticatorStoreNamespace(config: Record<string, unknown>): string;
 export declare class D1WebAuthnAuthenticatorStore implements WebAuthnAuthenticatorStore {
     readonly adapterKind = "d1";
-    private readonly database;
-    private readonly scope;
-    private readonly ensureSchemaOnUse;
-    private schemaReady;
+    private readonly table;
+    private readonly prepare;
     constructor(input: D1WebAuthnAuthenticatorStoreOptions);
-    private ensureSchema;
     get(userId: string, credentialIdB64u: string): Promise<WebAuthnAuthenticatorRecord | null>;
     put(userId: string, record: WebAuthnAuthenticatorRecord): Promise<void>;
     del(userId: string, credentialIdB64u: string): Promise<void>;
     list(userId: string): Promise<WebAuthnAuthenticatorRecord[]>;
 }
-export declare function createWebAuthnAuthenticatorStore(input: {
-    config?: ThresholdStoreConfigInput | null;
-    logger: NormalizedLogger;
-    isNode: boolean;
-}): WebAuthnAuthenticatorStore;
+export declare function createWebAuthnAuthenticatorStore(input: StoreFactoryInput): WebAuthnAuthenticatorStore;
 //# sourceMappingURL=WebAuthnAuthenticatorStore.d.ts.map

package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts

@@ -1,5 +1,6 @@
-import type { NormalizedLogger } from './logger';
-import type { ThresholdStoreConfigInput, ThresholdRuntimePolicyScope } from './types';
+import type { ThresholdRuntimePolicyScope } from './types';
+import type { StoreFactoryInput } from './storeBackends';
+import { type D1SchemaOptions, type D1TenantScope, type D1TenantStoreOptions } from './d1TenantStore';
 import type { D1DatabaseLike, D1PreparedStatementLike } from '../storage/tenantRoute';
 /**
  * The Ed25519 facts on a credential binding are denormalized from the wallet's
@@ -8,7 +9,7 @@ import type { D1DatabaseLike, D1PreparedStatementLike } from '../storage/tenantR
  * that signer is committed. They are written together or not at all — a
  * binding never carries a partial Ed25519 identity.
  */
-export type WebAuthnCredentialBindingEd25519Facts = {
+type WebAuthnCredentialBindingEd25519Facts = {
     nearAccountId: string;
     nearEd25519SigningKeyId: string;
     signerSlot: number;
@@ -56,45 +57,26 @@ export interface WebAuthnCredentialBindingStore {
         rpId?: string;
     }): Promise<WebAuthnCredentialBindingRecord[]>;
 }
-export interface D1WebAuthnCredentialBindingStoreSchemaOptions {
-    readonly database: D1DatabaseLike;
+export interface D1WebAuthnCredentialBindingStoreSchemaOptions extends D1SchemaOptions {
 }
-export interface D1WebAuthnCredentialBindingStoreOptions {
-    readonly database: D1DatabaseLike;
-    readonly namespace: string;
-    readonly orgId: string;
-    readonly projectId: string;
-    readonly envId: string;
-    readonly ensureSchema?: boolean;
+export interface D1WebAuthnCredentialBindingStoreOptions extends D1TenantStoreOptions {
 }
-export type D1WebAuthnCredentialBindingScope = {
-    readonly namespace: string;
-    readonly orgId: string;
-    readonly projectId: string;
-    readonly envId: string;
-};
-export declare function prepareD1WebAuthnCredentialBindingPutStatement(input: {
+type D1WebAuthnCredentialBindingWrite = {
     readonly database: D1DatabaseLike;
-    readonly scope: D1WebAuthnCredentialBindingScope;
+    readonly scope: D1TenantScope;
     readonly record: WebAuthnCredentialBindingRecord;
-}): D1PreparedStatementLike;
+};
+export declare function prepareD1WebAuthnCredentialBindingPutStatement(input: D1WebAuthnCredentialBindingWrite): D1PreparedStatementLike;
 /** Insert-only binding write for credential promotion. */
-export declare function prepareD1WebAuthnCredentialBindingInsertStatement(input: {
-    readonly database: D1DatabaseLike;
-    readonly scope: D1WebAuthnCredentialBindingScope;
-    readonly record: WebAuthnCredentialBindingRecord;
-}): D1PreparedStatementLike;
+export declare function prepareD1WebAuthnCredentialBindingInsertStatement(input: D1WebAuthnCredentialBindingWrite): D1PreparedStatementLike;
 export declare const WEBAUTHN_CREDENTIAL_BINDING_STORE_D1_SCHEMA_SQL: readonly ["\n    CREATE TABLE IF NOT EXISTS webauthn_credential_bindings (\n      namespace TEXT NOT NULL,\n      org_id TEXT NOT NULL,\n      project_id TEXT NOT NULL,\n      env_id TEXT NOT NULL,\n      rp_id TEXT NOT NULL,\n      credential_id_b64u TEXT NOT NULL,\n      user_id TEXT NOT NULL,\n      -- Nullable until the wallet's Ed25519 Yao ceremony settles.\n      signer_slot INTEGER,\n      record_json TEXT NOT NULL,\n      created_at_ms INTEGER NOT NULL,\n      updated_at_ms INTEGER NOT NULL,\n      PRIMARY KEY (namespace, org_id, project_id, env_id, rp_id, credential_id_b64u),\n      CHECK (length(rp_id) > 0),\n      CHECK (length(credential_id_b64u) > 0),\n      CHECK (length(user_id) > 0),\n      CHECK (signer_slot IS NULL OR signer_slot >= 1),\n      CHECK (json_valid(record_json)),\n      CHECK (created_at_ms > 0),\n      CHECK (updated_at_ms > 0)\n    )\n  ", "\n    CREATE INDEX IF NOT EXISTS webauthn_credential_bindings_user_idx\n      ON webauthn_credential_bindings (\n        namespace,\n        org_id,\n        project_id,\n        env_id,\n        user_id,\n        rp_id,\n        signer_slot\n      )\n  "];
 export declare function ensureWebAuthnCredentialBindingStoreD1Schema(options: D1WebAuthnCredentialBindingStoreSchemaOptions): Promise<void>;
 export declare function resolveWebAuthnCredentialBindingStoreNamespace(config: Record<string, unknown>): string;
 export declare class D1WebAuthnCredentialBindingStore implements WebAuthnCredentialBindingStore {
     readonly adapterKind = "d1";
-    private readonly database;
-    private readonly scope;
-    private readonly ensureSchemaOnUse;
-    private schemaReady;
+    private readonly table;
+    private readonly prepare;
     constructor(input: D1WebAuthnCredentialBindingStoreOptions);
-    private ensureSchema;
     get(rpId: string, credentialIdB64u: string): Promise<WebAuthnCredentialBindingRecord | null>;
     put(record: WebAuthnCredentialBindingRecord): Promise<void>;
     del(rpId: string, credentialIdB64u: string): Promise<void>;
@@ -107,10 +89,6 @@ export declare class D1WebAuthnCredentialBindingStore implements WebAuthnCredent
         rpId?: string;
     }): Promise<WebAuthnCredentialBindingRecord[]>;
 }
-export declare function createWebAuthnCredentialBindingStore(input: {
-    config?: ThresholdStoreConfigInput | null;
-    logger: NormalizedLogger;
-    isNode: boolean;
-}): WebAuthnCredentialBindingStore;
+export declare function createWebAuthnCredentialBindingStore(input: StoreFactoryInput): WebAuthnCredentialBindingStore;
 export {};
 //# sourceMappingURL=WebAuthnCredentialBindingStore.d.ts.map