@seams/wallet-server 0.6.2 → 0.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (705) hide show
  1. package/artifact-manifest.json +147 -32
  2. package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -0
  3. package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
  4. package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
  5. package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -0
  6. package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
  7. package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
  8. package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
  9. package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
  10. package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
  11. package/cloudflare-router-ab/build/router/build-stamp.json +1 -0
  12. package/cloudflare-router-ab/build/router/index.js +2 -2
  13. package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
  14. package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -0
  15. package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
  16. package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
  17. package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -0
  18. package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
  19. package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
  20. package/cloudflare-router-ab/migrations/deriver-a/0012_tenant_root_creation_tombstones.sql +20 -0
  21. package/cloudflare-router-ab/migrations/deriver-a/0013_tenant_root_root_use_admissions.sql +32 -0
  22. package/cloudflare-router-ab/migrations/deriver-a/0014_tenant_root_refresh_supersessions.sql +24 -0
  23. package/cloudflare-router-ab/migrations/deriver-a/0015_tenant_root_root_use_attempts.sql +56 -0
  24. package/cloudflare-router-ab/migrations/deriver-a/0016_tenant_root_root_use_admission_settlement.sql +5 -0
  25. package/cloudflare-router-ab/migrations/deriver-a/0017_tenant_root_root_use_admission_claims.sql +64 -0
  26. package/cloudflare-router-ab/migrations/deriver-a/0018_tenant_root_recovery_retention_keys.sql +12 -0
  27. package/cloudflare-router-ab/migrations/deriver-b/0012_tenant_root_creation_tombstones.sql +20 -0
  28. package/cloudflare-router-ab/migrations/deriver-b/0013_tenant_root_root_use_admissions.sql +32 -0
  29. package/cloudflare-router-ab/migrations/deriver-b/0014_tenant_root_refresh_supersessions.sql +24 -0
  30. package/cloudflare-router-ab/migrations/deriver-b/0015_tenant_root_root_use_attempts.sql +56 -0
  31. package/cloudflare-router-ab/migrations/deriver-b/0016_tenant_root_root_use_admission_settlement.sql +5 -0
  32. package/cloudflare-router-ab/migrations/deriver-b/0017_tenant_root_root_use_admission_claims.sql +64 -0
  33. package/cloudflare-router-ab/migrations/deriver-b/0018_tenant_root_recovery_retention_keys.sql +12 -0
  34. package/cloudflare-router-ab/scripts/bootstrap-local-tenant-root.mjs +81 -16
  35. package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +102 -9
  36. package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +4 -1
  37. package/cloudflare-router-ab/wrangler.deriver-a.toml +24 -0
  38. package/cloudflare-router-ab/wrangler.router.toml +13 -0
  39. package/dist/esm/authorization/capabilityPolicy.js +1 -1
  40. package/dist/esm/authorization/domain.js +2 -2
  41. package/dist/esm/authorization/factorEvidence.js +6 -100
  42. package/dist/esm/authorization/service.js +34 -2
  43. package/dist/esm/authorization/vaultProxyUse.js +3 -4
  44. package/dist/esm/cloud-host.js +16 -11
  45. package/dist/esm/core/EmailOtpRecords.js +19 -1
  46. package/dist/esm/core/EmailOtpStores.js +323 -924
  47. package/dist/esm/core/IdentityStore.js +44 -235
  48. package/dist/esm/core/NearPublicKeyStore.js +21 -63
  49. package/dist/esm/core/RegistrationCeremonyStore.js +3 -1793
  50. package/dist/esm/core/ThresholdService/config.js +1 -82
  51. package/dist/esm/core/ThresholdService/kv.js +3 -3
  52. package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +37 -5
  53. package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.js +4 -74
  54. package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +15 -51
  55. package/dist/esm/core/ThresholdService/stores/KeyStore.js +3 -3
  56. package/dist/esm/core/ThresholdService/stores/SessionStore.js +5 -81
  57. package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +185 -290
  58. package/dist/esm/core/ThresholdService/validation.js +18 -230
  59. package/dist/esm/core/WalletAuthMethodStore.js +22 -79
  60. package/dist/esm/core/WalletStore.js +58 -185
  61. package/dist/esm/core/WebAuthnAuthenticatorStore.js +57 -340
  62. package/dist/esm/core/WebAuthnCredentialBindingStore.js +90 -369
  63. package/dist/esm/core/WebAuthnLoginChallengeStore.js +17 -397
  64. package/dist/esm/core/WebAuthnSyncChallengeStore.js +17 -397
  65. package/dist/esm/core/authService/AuthService.js +2 -19
  66. package/dist/esm/core/authService/emailOtpChallengeProof.js +1 -1
  67. package/dist/esm/core/authService/emailOtpChallenges.js +1 -1
  68. package/dist/esm/core/authService/emailOtpConfig.js +1 -32
  69. package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +6 -153
  70. package/dist/esm/core/authService/googleEmailOtpRegistration.js +1 -1
  71. package/dist/esm/core/authService/nearPrivateKeySigning.js +7 -15
  72. package/dist/esm/core/authService/nearTransactions.js +2 -1
  73. package/dist/esm/core/authService/oidcVerification.js +3 -4
  74. package/dist/esm/core/authService/rateLimits.js +1 -31
  75. package/dist/esm/core/authService/registrationThresholdHelpers.js +2 -103
  76. package/dist/esm/core/authService/storeRegistry.js +2 -13
  77. package/dist/esm/core/authService/thresholdEcdsaKeyInventory.js +4 -5
  78. package/dist/esm/core/authService/webauthn.js +15 -50
  79. package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -6
  80. package/dist/esm/core/authService/webauthnVerificationOutcomes.js +60 -0
  81. package/dist/esm/core/authService/webauthnWalletBinding.js +2 -122
  82. package/dist/esm/core/d1IdentityStore.js +32 -66
  83. package/dist/esm/core/d1TenantStore.js +82 -0
  84. package/dist/esm/core/d1WalletAuthMethodStore.js +92 -143
  85. package/dist/esm/core/d1WalletStore.js +14 -12
  86. package/dist/esm/core/deviceLinking/linkedDeviceEmailOtpGrant.js +10 -8
  87. package/dist/esm/core/deviceLinking/linkedDeviceManagement.js +25 -3
  88. package/dist/esm/core/deviceLinking/linkedDeviceSession.js +6 -895
  89. package/dist/esm/core/deviceLinking/linkedDeviceSessionApproval.js +102 -0
  90. package/dist/esm/core/deviceLinking/linkedDeviceSessionRecord.js +668 -0
  91. package/dist/esm/core/emailOtpD1Statements.js +383 -0
  92. package/dist/esm/core/hostedAccountIds.js +2 -2
  93. package/dist/esm/core/keyMaterialBrands.js +2 -48
  94. package/dist/esm/core/nearRelayerAccountProvisioning.js +25 -150
  95. package/dist/esm/core/nearSignerWasmRuntime.js +1 -4
  96. package/dist/esm/core/rpcClients/near/NearClient.js +15 -218
  97. package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +1 -1
  98. package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +2 -4
  99. package/dist/esm/core/signingLanes/LaneLifecycleStore.js +0 -24
  100. package/dist/esm/core/signingLanes/WalletExecutionLaneProjection.js +5 -5
  101. package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +3 -8
  102. package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +1 -4
  103. package/dist/esm/core/storeBackends.js +208 -0
  104. package/dist/esm/core/thresholdEcdsaChainTarget.js +1 -7
  105. package/dist/esm/core/webAuthnD1Statements.js +92 -0
  106. package/dist/esm/core/webAuthnStoreBackends.js +198 -0
  107. package/dist/esm/hosted-wallet-gateway.js +33 -16
  108. package/dist/esm/index.js +2 -2
  109. package/dist/esm/local-hosted-wallet-gateway-worker.js +2 -23
  110. package/dist/esm/localHostedWalletGatewayHandler.js +299 -0
  111. package/dist/esm/localIntendedEcdsaFinalizeFault.js +85 -0
  112. package/dist/esm/localIntendedLinkExecuteFault.js +140 -0
  113. package/dist/esm/localIntendedRevokeFault.js +106 -0
  114. package/dist/esm/localIntendedSessionAdmissionFault.js +139 -0
  115. package/dist/esm/localIntendedYaoExportFault.js +117 -0
  116. package/dist/esm/localIntendedYaoFault.js +13 -16
  117. package/dist/esm/localIntendedYaoFinalizeFault.js +99 -0
  118. package/dist/esm/localIntendedYaoRecoveryFault.js +102 -0
  119. package/dist/esm/localIntendedYaoSigningFault.js +127 -0
  120. package/dist/esm/router/auth/authRequestValidation.js +1 -1
  121. package/dist/esm/router/auth/commonRouterUtils.js +10 -2
  122. package/dist/esm/router/auth/walletSessionFailure.js +1 -14
  123. package/dist/esm/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.js +23 -0
  124. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +86 -66
  125. package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +208 -0
  126. package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +246 -296
  127. package/dist/esm/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.js +14 -0
  128. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +62 -63
  129. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +3 -6
  130. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +1 -19
  131. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceManagementService.js +4 -3
  132. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +52 -9
  133. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -6
  134. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.js +100 -0
  135. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.js +7 -10
  136. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +33 -124
  137. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.js +2 -2
  138. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +9 -17
  139. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.js +6 -6
  140. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkSourceReader.js +3 -1
  141. package/dist/esm/router/cloudflare/d1/deviceLinking/index.js +3 -3
  142. package/dist/esm/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.js +69 -0
  143. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +39 -68
  144. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.js +69 -0
  145. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.js +2 -2
  146. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +26 -71
  147. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +20 -3
  148. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +7 -94
  149. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +5 -47
  150. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +26 -123
  151. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +0 -2
  152. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +2 -2
  153. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +15 -134
  154. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +54 -260
  155. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +1 -1
  156. package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +1 -28
  157. package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +2 -8
  158. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.js +1 -1
  159. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +3 -3
  160. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +23 -73
  161. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.js +15 -2
  162. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.js +12 -203
  163. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +16 -32
  164. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +29 -72
  165. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +4 -1
  166. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +3 -1
  167. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +6 -30
  168. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +261 -205
  169. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +5 -3
  170. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +2 -2
  171. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js +3 -3
  172. package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +43 -25
  173. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -1
  174. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +1 -1
  175. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +2 -1
  176. package/dist/esm/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.js +2 -60
  177. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +158 -19
  178. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.js +19 -49
  179. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.js +100 -0
  180. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +132 -33
  181. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +83 -4
  182. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +14 -49
  183. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +4 -4
  184. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +22 -116
  185. package/dist/esm/router/cloudflare/runtime/createSelfHostedCloudflareSigningWorker.js +1 -2
  186. package/dist/esm/router/cloudflare/runtime/walletConsoleTenantRootLineage.js +11 -2
  187. package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
  188. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +5 -6
  189. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +2 -1
  190. package/dist/esm/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.js +48 -21
  191. package/dist/esm/router/cloudflare.js +11480 -12853
  192. package/dist/esm/router/domains/ecdsa/routerAbEcdsaStrictRegistration.js +16 -5
  193. package/dist/esm/router/domains/ecdsa/thresholdEcdsaRequestValidation.js +2 -8
  194. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.js +33 -0
  195. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +17 -9
  196. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +29 -431
  197. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +7 -2
  198. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.js +2 -1
  199. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.js +70 -2
  200. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +134 -169
  201. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +77 -162
  202. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.js +205 -51
  203. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +29 -11
  204. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.js +182 -55
  205. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.js +2 -1
  206. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.js +63 -247
  207. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js +3 -2
  208. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.js +87 -132
  209. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.js +5 -4
  210. package/dist/esm/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.js +45 -0
  211. package/dist/esm/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.js +1 -1
  212. package/dist/esm/router/domains/emailOtp/emailOtpExportPolicy.js +1 -42
  213. package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +1 -6
  214. package/dist/esm/router/domains/emailOtp/emailOtpSessionRouteHelpers.js +1 -142
  215. package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.js +1 -1
  216. package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -2
  217. package/dist/esm/router/domains/passkeyCustody/walletRecoveryFinalization.js +23 -45
  218. package/dist/esm/router/domains/passkeyCustody/walletRecoveryKeyManifest.js +5 -5
  219. package/dist/esm/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.js +1 -1
  220. package/dist/esm/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.js +827 -0
  221. package/dist/esm/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.js +698 -0
  222. package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmission.js +209 -0
  223. package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.js +16 -15
  224. package/dist/esm/router/domains/signingOperations/routerAbOperationStepUp.js +313 -0
  225. package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +62 -2159
  226. package/dist/esm/router/domains/tenantRoot/tenantRootIdentityResolution.js +1 -1
  227. package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +18 -22
  228. package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +3 -4
  229. package/dist/esm/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.js +2 -2
  230. package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +97 -150
  231. package/dist/esm/router/express.js +5967 -6410
  232. package/dist/esm/router/framework/http.js +1 -4
  233. package/dist/esm/router/framework/ror/normalize.js +1 -1
  234. package/dist/esm/router/framework/routerApiRouteSurface.js +1 -1
  235. package/dist/esm/router/node/nodeHostedWalletGateway.js +64 -0
  236. package/dist/esm/router/node/nodeHostedWalletGatewayCheck.js +163 -0
  237. package/dist/esm/router/node/nodeHostedWalletGatewayMain.js +120 -0
  238. package/dist/esm/router/node/nodeHttp.js +79 -0
  239. package/dist/esm/router/node/nodeSqlite.js +43 -0
  240. package/dist/esm/router/node/signerSqlMigrations.js +48 -0
  241. package/dist/esm/router/transport/fetch/createFetchRouter.js +1 -1
  242. package/dist/esm/router/transport/fetch/routes/deviceLinking.js +16 -18
  243. package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +3 -5
  244. package/dist/esm/router/transport/fetch/routes/deviceManagement.js +15 -24
  245. package/dist/esm/router/transport/fetch/routes/normalSigningRouterProxy.js +3 -16
  246. package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +144 -461
  247. package/dist/esm/router/transport/fetch/routes/sessions.js +4 -4
  248. package/dist/esm/router/transport/fetch/routes/syncAccount.js +4 -6
  249. package/dist/esm/router/transport/fetch/routes/syncAccountBootstrap.js +2 -2
  250. package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +69 -23
  251. package/dist/esm/router/transport/fetch/routes/thresholdEd25519.js +52 -27
  252. package/dist/esm/shared-ts/src/authorization/capabilityKinds.js +1 -1
  253. package/dist/esm/shared-ts/src/authorization/delegatedAuthority.js +1 -1
  254. package/dist/esm/shared-ts/src/authorization/operationFingerprint.js +1 -2
  255. package/dist/esm/shared-ts/src/authorization/walletAuthority.js +99 -227
  256. package/dist/esm/shared-ts/src/authorization/walletCustodyOperation.js +4 -6
  257. package/dist/esm/shared-ts/src/device-linking/activeWalletSession.js +74 -0
  258. package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +50 -0
  259. package/dist/esm/shared-ts/src/device-linking/committedSignerPackages.js +8 -9
  260. package/dist/esm/shared-ts/src/device-linking/delegatedActivationPlan.js +3 -1
  261. package/dist/esm/shared-ts/src/device-linking/deviceManagement.js +55 -0
  262. package/dist/esm/shared-ts/src/device-linking/digests.js +10 -65
  263. package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +3 -1
  264. package/dist/esm/shared-ts/src/device-linking/index.js +4 -1
  265. package/dist/esm/shared-ts/src/device-linking/parsers.js +510 -1063
  266. package/dist/esm/shared-ts/src/device-linking/requestProof.js +5 -14
  267. package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +6 -9
  268. package/dist/esm/shared-ts/src/device-linking/walletSessionCredentialDelivery.js +9 -9
  269. package/dist/esm/shared-ts/src/device-linking/wireFields.js +59 -0
  270. package/dist/esm/shared-ts/src/near/nearClient.js +252 -0
  271. package/dist/esm/shared-ts/src/passkey-custody/credentialActivity.js +3 -1
  272. package/dist/esm/shared-ts/src/passkey-custody/custodyEnvelope.js +7 -5
  273. package/dist/esm/shared-ts/src/passkey-custody/custodySecretBinding.js +6 -4
  274. package/dist/esm/shared-ts/src/passkey-custody/primitives.js +5 -39
  275. package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -5
  276. package/dist/esm/shared-ts/src/signing-lanes/index.js +3 -3
  277. package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +5 -12
  278. package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +5 -14
  279. package/dist/esm/shared-ts/src/signing-lanes/participants.js +2 -5
  280. package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +7 -5
  281. package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +6 -45
  282. package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +423 -1511
  283. package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +323 -0
  284. package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +59 -0
  285. package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +1 -1
  286. package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +1 -2
  287. package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +49 -0
  288. package/dist/esm/shared-ts/src/utils/addAuthMethodRegistration.js +3 -4
  289. package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +8 -1
  290. package/dist/esm/shared-ts/src/utils/digestEncoding.js +63 -0
  291. package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +2 -2
  292. package/dist/esm/shared-ts/src/utils/exactRecord.js +44 -0
  293. package/dist/esm/shared-ts/src/utils/registrationAuthMethodInput.js +127 -0
  294. package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +2 -2
  295. package/dist/esm/shared-ts/src/utils/registrationIds.js +280 -0
  296. package/dist/esm/shared-ts/src/utils/registrationIntent.js +4 -1170
  297. package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +429 -0
  298. package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +11 -136
  299. package/dist/esm/shared-ts/src/utils/routerAbEd25519Yao.js +3 -163
  300. package/dist/esm/shared-ts/src/utils/routerAbEd25519YaoDigests.js +160 -0
  301. package/dist/esm/shared-ts/src/utils/routerAbNormalSigningIdentity.js +1 -4
  302. package/dist/esm/shared-ts/src/utils/routerAbPublicKeyset.js +7 -15
  303. package/dist/esm/shared-ts/src/utils/validation.js +37 -6
  304. package/dist/esm/shared-ts/src/utils/walletAuthMethodRecord.js +362 -0
  305. package/dist/esm/shared-ts/src/utils/wireSchema.js +77 -0
  306. package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +1 -1
  307. package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeReservation.js +1 -1
  308. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js +7 -11
  309. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.js +4 -8
  310. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.js +3 -1
  311. package/dist/esm/storage/d1Sql.js +10 -1
  312. package/dist/esm/storage/syncSqlite.js +79 -0
  313. package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +1 -1
  314. package/dist/esm/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.js +1 -1
  315. package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +1 -2
  316. package/dist/esm/threshold/session/signingSessionSeal/options.js +1 -1
  317. package/dist/esm/threshold/session/signingSessionSeal/transport/shared.js +18 -55
  318. package/dist/esm/threshold/statusCodes.js +1 -1
  319. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +3 -3
  320. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
  321. package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm +0 -0
  322. package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +8 -26
  323. package/dist/types/shared-ts/src/authorization/delegatedAuthority.d.ts +0 -8
  324. package/dist/types/shared-ts/src/authorization/operationFingerprint.d.ts +1 -3
  325. package/dist/types/shared-ts/src/authorization/walletAuthority.d.ts +25 -12
  326. package/dist/types/shared-ts/src/authorization/walletSessionIssuance.d.ts +2 -1
  327. package/dist/types/shared-ts/src/device-linking/activeWalletSession.d.ts +3 -2
  328. package/dist/types/shared-ts/src/device-linking/authorityActivation.d.ts +5 -0
  329. package/dist/types/shared-ts/src/device-linking/committedSignerPackages.d.ts +2 -5
  330. package/dist/types/shared-ts/src/device-linking/contracts.d.ts +8 -11
  331. package/dist/types/shared-ts/src/device-linking/contracts.typecheck.d.ts +2 -1
  332. package/dist/types/shared-ts/src/device-linking/deviceManagement.d.ts +7 -0
  333. package/dist/types/shared-ts/src/device-linking/digests.d.ts +0 -5
  334. package/dist/types/shared-ts/src/device-linking/ed25519ExportRoot.d.ts +3 -2
  335. package/dist/types/shared-ts/src/device-linking/index.d.ts +2 -0
  336. package/dist/types/shared-ts/src/device-linking/parsers.d.ts +4 -41
  337. package/dist/types/shared-ts/src/device-linking/requestProof.d.ts +0 -1
  338. package/dist/types/shared-ts/src/device-linking/sourceContribution.d.ts +3 -2
  339. package/dist/types/shared-ts/src/device-linking/walletSessionCredentialDelivery.d.ts +2 -1
  340. package/dist/types/shared-ts/src/device-linking/wireFields.d.ts +26 -0
  341. package/dist/types/shared-ts/src/near/actions.d.ts +4 -4
  342. package/dist/types/shared-ts/src/near/delegate.d.ts +3 -2
  343. package/dist/types/shared-ts/src/near/nearClient.d.ts +145 -0
  344. package/dist/types/shared-ts/src/passkey-custody/ceremonyCommitPayload.d.ts +0 -22
  345. package/dist/types/shared-ts/src/passkey-custody/credentialActivity.d.ts +2 -4
  346. package/dist/types/shared-ts/src/passkey-custody/custodyEnvelope.d.ts +9 -18
  347. package/dist/types/shared-ts/src/passkey-custody/custodySecretBinding.d.ts +8 -24
  348. package/dist/types/shared-ts/src/passkey-custody/index.d.ts +0 -2
  349. package/dist/types/shared-ts/src/passkey-custody/primitives.d.ts +0 -14
  350. package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -15
  351. package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +2 -51
  352. package/dist/types/shared-ts/src/signing-lanes/index.d.ts +1 -2
  353. package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +1 -2
  354. package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +5 -27
  355. package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +0 -11
  356. package/dist/types/shared-ts/src/signing-lanes/recordParsers.d.ts +6 -53
  357. package/dist/types/shared-ts/src/signing-lanes/records.d.ts +1 -2
  358. package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +15 -37
  359. package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +1 -20
  360. package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +4 -25
  361. package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +1 -41
  362. package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +6 -0
  363. package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +20 -0
  364. package/dist/types/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.d.ts +2 -35
  365. package/dist/types/shared-ts/src/threshold/ed25519OperationFingerprint.d.ts +8 -35
  366. package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +25 -0
  367. package/dist/types/shared-ts/src/threshold/participants.d.ts +3 -9
  368. package/dist/types/shared-ts/src/threshold/secp256k1.d.ts +0 -37
  369. package/dist/types/shared-ts/src/threshold/sessionPolicy.d.ts +24 -0
  370. package/dist/types/shared-ts/src/threshold/signingRootScope.d.ts +2 -5
  371. package/dist/types/shared-ts/src/utils/addAuthMethodRegistration.d.ts +3 -4
  372. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +7 -108
  373. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +16 -3
  374. package/dist/types/shared-ts/src/utils/canonicalPrimitives.d.ts +2 -0
  375. package/dist/types/shared-ts/src/utils/digestEncoding.d.ts +9 -0
  376. package/dist/types/shared-ts/src/utils/domainIds.d.ts +1 -2
  377. package/dist/types/shared-ts/src/utils/ecdsaKeyFactsInventory.d.ts +1 -2
  378. package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +5 -5
  379. package/dist/types/shared-ts/src/utils/emailOtpRecoveryKey.d.ts +0 -2
  380. package/dist/types/shared-ts/src/utils/errors.d.ts +0 -7
  381. package/dist/types/shared-ts/src/utils/exactRecord.d.ts +12 -0
  382. package/dist/types/shared-ts/src/utils/index.d.ts +5 -2
  383. package/dist/types/shared-ts/src/utils/jsonRpc.d.ts +3 -2
  384. package/dist/types/shared-ts/src/utils/near.d.ts +2 -1
  385. package/dist/types/shared-ts/src/utils/nearRpcResults.d.ts +7 -7
  386. package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -4
  387. package/dist/types/shared-ts/src/utils/registrationAuthMethodInput.d.ts +184 -0
  388. package/dist/types/shared-ts/src/utils/registrationContracts.d.ts +76 -0
  389. package/dist/types/shared-ts/src/utils/registrationEstablishedSession.d.ts +1 -2
  390. package/dist/types/shared-ts/src/utils/registrationIds.d.ts +56 -0
  391. package/dist/types/shared-ts/src/utils/registrationIntent.d.ts +9 -514
  392. package/dist/types/shared-ts/src/utils/registrationSignerPlan.d.ts +142 -0
  393. package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts +21 -92
  394. package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts +14 -99
  395. package/dist/types/shared-ts/src/utils/routerAbEd25519YaoDigests.d.ts +39 -0
  396. package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts +10 -15
  397. package/dist/types/shared-ts/src/utils/routerAbTraceContext.d.ts +2 -1
  398. package/dist/types/shared-ts/src/utils/secureRandomId.d.ts +0 -2
  399. package/dist/types/shared-ts/src/utils/signerDomain.d.ts +3 -35
  400. package/dist/types/shared-ts/src/utils/signerSlot.d.ts +0 -4
  401. package/dist/types/shared-ts/src/utils/signingSessionSeal.d.ts +1 -7
  402. package/dist/types/shared-ts/src/utils/validation.d.ts +10 -10
  403. package/dist/types/shared-ts/src/utils/variant.d.ts +11 -0
  404. package/dist/types/shared-ts/src/utils/variant.typecheck.d.ts +22 -0
  405. package/dist/types/shared-ts/src/utils/walletAddSignerActivation.d.ts +2 -2
  406. package/dist/types/shared-ts/src/utils/walletAuthAuthority.d.ts +1 -58
  407. package/dist/types/shared-ts/src/utils/walletAuthMethodRecord.d.ts +104 -0
  408. package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +3 -7
  409. package/dist/types/shared-ts/src/utils/webauthnDeviceInfo.d.ts +3 -4
  410. package/dist/types/shared-ts/src/utils/wireSchema.d.ts +60 -0
  411. package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +2 -1
  412. package/dist/types/shared-ts/src/wallet-recovery/index.d.ts +0 -1
  413. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeLocator.d.ts +0 -16
  414. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +2 -11
  415. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.d.ts +6 -18
  416. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.d.ts +0 -2
  417. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.d.ts +1 -3
  418. package/dist/types/wallet-server/src/authorization/capabilityPolicy.d.ts +0 -1
  419. package/dist/types/wallet-server/src/authorization/domain.d.ts +25 -5
  420. package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.d.ts +37 -0
  421. package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.typecheck.d.ts +2 -0
  422. package/dist/types/wallet-server/src/authorization/factorEvidence.d.ts +6 -7
  423. package/dist/types/wallet-server/src/authorization/service.d.ts +52 -3
  424. package/dist/types/wallet-server/src/cloud-host.d.ts +6 -2
  425. package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +10 -1
  426. package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +16 -116
  427. package/dist/types/wallet-server/src/core/IdentityStore.d.ts +2 -7
  428. package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +6 -16
  429. package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +29 -90
  430. package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -12
  431. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +10 -3
  432. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.d.ts +17 -48
  433. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/internalServiceHttp.d.ts +2 -1
  434. package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +4 -71
  435. package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +2 -1
  436. package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +4 -8
  437. package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +2 -1
  438. package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +1 -3
  439. package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +14 -47
  440. package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +2 -7
  441. package/dist/types/wallet-server/src/core/WalletStore.d.ts +3 -8
  442. package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +7 -22
  443. package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +14 -36
  444. package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +9 -34
  445. package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +9 -34
  446. package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -3
  447. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +6 -5
  448. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +9 -17
  449. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +3 -2
  450. package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +7 -23
  451. package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +3 -10
  452. package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +4 -3
  453. package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +4 -3
  454. package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +3 -70
  455. package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +3 -2
  456. package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +4 -3
  457. package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +5 -8
  458. package/dist/types/wallet-server/src/core/authService/nearPrivateKeySigning.d.ts +3 -2
  459. package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +2 -1
  460. package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +2 -1
  461. package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +4 -3
  462. package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -3
  463. package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -26
  464. package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -5
  465. package/dist/types/wallet-server/src/core/authService/thresholdEcdsaKeyInventory.d.ts +0 -23
  466. package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +8 -16
  467. package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +7 -7
  468. package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +43 -0
  469. package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +1 -28
  470. package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +6 -16
  471. package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +51 -0
  472. package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +11 -29
  473. package/dist/types/wallet-server/src/core/d1WalletStore.d.ts +6 -1
  474. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEd25519ExportRoot.d.ts +2 -1
  475. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEmailOtpGrant.d.ts +2 -1
  476. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceManagement.d.ts +44 -26
  477. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +19 -217
  478. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionApproval.d.ts +8 -0
  479. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionRecord.d.ts +259 -0
  480. package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -2
  481. package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +54 -0
  482. package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -15
  483. package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +4 -24
  484. package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +2 -3
  485. package/dist/types/wallet-server/src/core/nearSignerWasmRuntime.d.ts +0 -1
  486. package/dist/types/wallet-server/src/core/registrationContracts.d.ts +37 -108
  487. package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +5 -4
  488. package/dist/types/wallet-server/src/core/rpcClients/near/NearClient.d.ts +10 -106
  489. package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +4 -3
  490. package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +2 -3
  491. package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +2 -3
  492. package/dist/types/wallet-server/src/core/signingLanes/WalletExecutionLaneProjection.d.ts +3 -9
  493. package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +4 -4
  494. package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +3 -3
  495. package/dist/types/wallet-server/src/core/storeBackends.d.ts +83 -0
  496. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +13 -59
  497. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +51 -3
  498. package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +0 -1
  499. package/dist/types/wallet-server/src/core/types.d.ts +3 -24
  500. package/dist/types/wallet-server/src/core/webAuthnD1Statements.d.ts +29 -0
  501. package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +96 -0
  502. package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +11 -7
  503. package/dist/types/wallet-server/src/index.d.ts +1 -1
  504. package/dist/types/wallet-server/src/local-hosted-wallet-gateway-worker.d.ts +1 -4
  505. package/dist/types/wallet-server/src/localHostedWalletGatewayHandler.d.ts +12 -0
  506. package/dist/types/wallet-server/src/localIntendedEcdsaFinalizeFault.d.ts +33 -0
  507. package/dist/types/wallet-server/src/localIntendedLinkExecuteFault.d.ts +47 -0
  508. package/dist/types/wallet-server/src/localIntendedRevokeFault.d.ts +40 -0
  509. package/dist/types/wallet-server/src/localIntendedSessionAdmissionFault.d.ts +41 -0
  510. package/dist/types/wallet-server/src/localIntendedYaoExportFault.d.ts +41 -0
  511. package/dist/types/wallet-server/src/localIntendedYaoFault.d.ts +7 -1
  512. package/dist/types/wallet-server/src/localIntendedYaoFinalizeFault.d.ts +37 -0
  513. package/dist/types/wallet-server/src/localIntendedYaoRecoveryFault.d.ts +45 -0
  514. package/dist/types/wallet-server/src/localIntendedYaoSigningFault.d.ts +51 -0
  515. package/dist/types/wallet-server/src/router/auth/authRequestValidation.d.ts +10 -21
  516. package/dist/types/wallet-server/src/router/auth/commonRouterUtils.d.ts +5 -10
  517. package/dist/types/wallet-server/src/router/auth/walletSessionFailure.d.ts +1 -4
  518. package/dist/types/wallet-server/src/router/auth/webAuthnCredentialCodecs.d.ts +3 -2
  519. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.d.ts +12 -0
  520. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.d.ts +3 -2
  521. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +2 -2
  522. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthService.d.ts +1 -1
  523. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/authorizedOperationStatements.d.ts +30 -0
  524. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +45 -21
  525. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.d.ts +3 -0
  526. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/walletSessionAuthorityProjection.d.ts +2 -1
  527. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +57 -6
  528. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +2 -3
  529. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.d.ts +8 -21
  530. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.d.ts +14 -1
  531. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.d.ts +49 -0
  532. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.d.ts +1 -1
  533. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +4 -2
  534. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.d.ts +1 -1
  535. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.d.ts +2 -2
  536. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +8 -4
  537. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.d.ts +3 -5
  538. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.d.ts +7 -0
  539. package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.d.ts +1 -2
  540. package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.d.ts +33 -0
  541. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.d.ts +1 -1
  542. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +13 -3
  543. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.d.ts +24 -5
  544. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.d.ts +2 -3
  545. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +1 -3
  546. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +3 -4
  547. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.d.ts +9 -8
  548. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.d.ts +0 -2
  549. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.d.ts +5 -4
  550. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +1 -3
  551. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -21
  552. package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityRecords.d.ts +0 -23
  553. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +1 -2
  554. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.d.ts +11 -19
  555. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -54
  556. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +7 -19
  557. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.d.ts +4 -3
  558. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.d.ts +8 -12
  559. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +5 -8
  560. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -22
  561. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +6 -2
  562. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +10 -6
  563. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +15 -22
  564. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +5 -3
  565. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.d.ts +4 -3
  566. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.d.ts +5 -5
  567. package/dist/types/wallet-server/src/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.d.ts +3 -5
  568. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -1
  569. package/dist/types/wallet-server/src/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.d.ts +0 -16
  570. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +29 -14
  571. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.d.ts +15 -12
  572. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.d.ts +71 -0
  573. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +34 -24
  574. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +44 -26
  575. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +3 -7
  576. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +8 -19
  577. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleTenantRootLineage.d.ts +2 -1
  578. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -0
  579. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.d.ts +15 -2
  580. package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +2 -2
  581. package/dist/types/wallet-server/src/router/domains/ecdsa/routerAbEcdsaStrictRegistration.d.ts +9 -7
  582. package/dist/types/wallet-server/src/router/domains/ecdsa/thresholdEcdsaRequestValidation.d.ts +4 -4
  583. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.d.ts +46 -0
  584. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +5 -3
  585. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.d.ts +20 -79
  586. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -0
  587. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.d.ts +1 -1
  588. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.d.ts +4 -3
  589. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +62 -42
  590. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.d.ts +108 -32
  591. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryActivation.typecheck.d.ts +5 -0
  592. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.d.ts +36 -5
  593. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.d.ts +5 -4
  594. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.d.ts +41 -50
  595. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.d.ts +2 -2
  596. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.d.ts +3 -3
  597. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.d.ts +6 -5
  598. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.d.ts +14 -4
  599. package/dist/types/wallet-server/src/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.d.ts +12 -1
  600. package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/routerAbEd25519YaoWalletSession.d.ts +5 -5
  601. package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.d.ts +3 -4
  602. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpExportPolicy.d.ts +2 -27
  603. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRequestValidation.d.ts +1 -2
  604. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRouteHandlers.d.ts +2 -1
  605. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpSessionRouteHelpers.d.ts +2 -102
  606. package/dist/types/wallet-server/src/router/domains/passkeyCustody/envelopeRevocationAdmission.d.ts +2 -1
  607. package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +3 -2
  608. package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.d.ts +1 -9
  609. package/dist/types/wallet-server/src/router/domains/passkeyCustody/registrationCustodyOutcome.d.ts +2 -1
  610. package/dist/types/wallet-server/src/router/domains/passkeyCustody/verifiedCustodyFactor.d.ts +2 -1
  611. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationAdmission.d.ts +2 -1
  612. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +2 -28
  613. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryFinalization.d.ts +43 -1
  614. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryKeyManifest.d.ts +7 -7
  615. package/dist/types/wallet-server/src/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.d.ts +0 -3
  616. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.d.ts +165 -0
  617. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.d.ts +110 -0
  618. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmission.d.ts +360 -0
  619. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.d.ts +11 -10
  620. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.typecheck.d.ts +2 -0
  621. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbOperationStepUp.d.ts +165 -0
  622. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +16 -702
  623. package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +5 -12
  624. package/dist/types/wallet-server/src/router/domains/syncAccount/syncAccountRequestValidation.d.ts +5 -4
  625. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootCustodyLineage.d.ts +6 -1
  626. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootIdentityResolution.d.ts +4 -7
  627. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +2 -1
  628. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +8 -8
  629. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +4 -4
  630. package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.d.ts +4 -4
  631. package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRouteHandlers.d.ts +4 -62
  632. package/dist/types/wallet-server/src/router/express-adaptor.d.ts +2 -2
  633. package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +64 -61
  634. package/dist/types/wallet-server/src/router/framework/http.d.ts +0 -1
  635. package/dist/types/wallet-server/src/router/framework/ror/normalize.d.ts +2 -2
  636. package/dist/types/wallet-server/src/router/framework/routeMeteringPolicy.d.ts +3 -2
  637. package/dist/types/wallet-server/src/router/framework/routerApi.d.ts +1 -1
  638. package/dist/types/wallet-server/src/router/framework/routerApiRouteSurface.d.ts +3 -3
  639. package/dist/types/wallet-server/src/router/node/nodeHostedWalletGateway.d.ts +34 -0
  640. package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayCheck.d.ts +21 -0
  641. package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayMain.d.ts +2 -0
  642. package/dist/types/wallet-server/src/router/node/nodeHttp.d.ts +13 -0
  643. package/dist/types/wallet-server/src/router/node/nodeSqlite.d.ts +22 -0
  644. package/dist/types/wallet-server/src/router/node/signerSqlMigrations.d.ts +20 -0
  645. package/dist/types/wallet-server/src/router/transport/fetch/createFetchRouter.d.ts +1 -3
  646. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +5 -6
  647. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.d.ts +2 -2
  648. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceManagement.d.ts +14 -16
  649. package/dist/types/wallet-server/src/router/transport/fetch/routes/normalSigningRouterProxy.d.ts +0 -12
  650. package/dist/types/wallet-server/src/router/transport/fetch/routes/passkeyCustody.d.ts +1 -1
  651. package/dist/types/wallet-server/src/router/transport/fetch/routes/sessions.d.ts +2 -1
  652. package/dist/types/wallet-server/src/router/transport/fetch/routes/syncAccountBootstrap.d.ts +7 -13
  653. package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEcdsa.d.ts +3 -57
  654. package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEd25519.d.ts +0 -44
  655. package/dist/types/wallet-server/src/storage/d1Sql.d.ts +7 -0
  656. package/dist/types/wallet-server/src/storage/syncSqlite.d.ts +28 -0
  657. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.d.ts +0 -1
  658. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/idempotencyRecords.d.ts +5 -6
  659. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/transport/shared.d.ts +1 -0
  660. package/dist/types/wallet-server/src/threshold/statusCodes.d.ts +4 -4
  661. package/migrations/d1-signer/0036_r150_yao_lifecycle_decisions.sql +22 -0
  662. package/migrations/d1-signer/0037_r150_wallet_auth_method_revocation_replays.sql +26 -0
  663. package/migrations/d1-signer/0038_r150_registration_ceremony_cas_guard_seed.sql +8 -0
  664. package/migrations/d1-signer/0039_r150_revocation_replay_answer_kind.sql +9 -0
  665. package/package.json +1 -1
  666. package/dist/esm/core/ThresholdService/ecdsaClientRootProof.js +0 -27
  667. package/dist/esm/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.js +0 -115
  668. package/dist/esm/core/ThresholdService/secureRandomId.js +0 -9
  669. package/dist/esm/core/authService/record.js +0 -8
  670. package/dist/esm/core/authService/thresholdRuntimePolicy.js +0 -19
  671. package/dist/esm/core/authService/walletRegistrationPlanning.js +0 -49
  672. package/dist/esm/core/deviceLinking/index.js +0 -5
  673. package/dist/esm/core/errors.js +0 -54
  674. package/dist/esm/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.js +0 -39
  675. package/dist/esm/core/signingLanes/WalletKeyStore.js +0 -0
  676. package/dist/esm/core/signingLanes/index.js +0 -8
  677. package/dist/esm/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.js +0 -55
  678. package/dist/esm/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.js +0 -56
  679. package/dist/esm/shared-ts/src/signing-lanes/linkedEcdsaScope.js +0 -1
  680. package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker.js +0 -414
  681. package/dist/types/shared-ts/src/passkey-custody/credentialObservations.d.ts +0 -74
  682. package/dist/types/shared-ts/src/passkey-custody/kekContext.d.ts +0 -34
  683. package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.d.ts +0 -62
  684. package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.typecheck.d.ts +0 -2
  685. package/dist/types/shared-ts/src/signing-lanes/validation.d.ts +0 -11
  686. package/dist/types/shared-ts/src/utils/bigint.d.ts +0 -3
  687. package/dist/types/shared-ts/src/utils/paillier.d.ts +0 -37
  688. package/dist/types/shared-ts/src/utils/recoveryDomain.d.ts +0 -12
  689. package/dist/types/shared-ts/src/utils/signerDomain.typecheck.d.ts +0 -2
  690. package/dist/types/shared-ts/src/wallet-recovery/recoveryKekContext.d.ts +0 -37
  691. package/dist/types/wallet-server/src/core/ThresholdService/ecdsaClientRootProof.d.ts +0 -12
  692. package/dist/types/wallet-server/src/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.d.ts +0 -17
  693. package/dist/types/wallet-server/src/core/ThresholdService/secureRandomId.d.ts +0 -2
  694. package/dist/types/wallet-server/src/core/authService/record.d.ts +0 -2
  695. package/dist/types/wallet-server/src/core/authService/thresholdRuntimePolicy.d.ts +0 -4
  696. package/dist/types/wallet-server/src/core/authService/walletRegistrationPlanning.d.ts +0 -19
  697. package/dist/types/wallet-server/src/core/deviceLinking/index.d.ts +0 -5
  698. package/dist/types/wallet-server/src/core/errors.d.ts +0 -10
  699. package/dist/types/wallet-server/src/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.d.ts +0 -28
  700. package/dist/types/wallet-server/src/core/signingLanes/SigningLaneStore.d.ts +0 -15
  701. package/dist/types/wallet-server/src/core/signingLanes/WalletKeyStore.d.ts +0 -13
  702. package/dist/types/wallet-server/src/core/signingLanes/index.d.ts +0 -11
  703. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.d.ts +0 -35
  704. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.d.ts +0 -35
  705. /package/dist/esm/{core/signingLanes/SigningLaneStore.js → authorization/ecdsaWalletSessionAdmission.js} +0 -0
@@ -1,2 +1,2 @@
1
- import{WorkerEntrypoint as he}from"cloudflare:workers";var N=globalThis.__worker_init_state={criticalError:!1,instanceId:0};import K from"./index_bg.wasm";var I=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,ue.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_containerstartupoptions_free(e,0)}get enableInternet(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_containerstartupoptions_enableInternet(this.__wbg_ptr),e===16777215?void 0:e!==0}get entrypoint(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;s(),e=i.__wbg_get_containerstartupoptions_entrypoint(this.__wbg_ptr);var t=de(e[0],e[1]).slice();return i.__wbindgen_free(e[0],e[1]*4,4),t}get env(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_containerstartupoptions_env(this.__wbg_ptr),e}set enableInternet(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_containerstartupoptions_enableInternet(this.__wbg_ptr,b(e)?16777215:e?1:0)}set entrypoint(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t=we(e,i.__wbindgen_malloc),n=l;s(),i.__wbg_set_containerstartupoptions_entrypoint(this.__wbg_ptr,t,n)}set env(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_containerstartupoptions_env(this.__wbg_ptr,e)}};Symbol.dispose&&(I.prototype[Symbol.dispose]=I.prototype.free);var j=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,ae.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_intounderlyingbytesource_free(e,0)}get autoAllocateChunkSize(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.intounderlyingbytesource_autoAllocateChunkSize(this.__wbg_ptr),e>>>0}cancel(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e=this.__destroy_into_raw();s(),i.intounderlyingbytesource_cancel(e)}pull(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=i.intounderlyingbytesource_pull(this.__wbg_ptr,e),t}start(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.intounderlyingbytesource_start(this.__wbg_ptr,e)}get type(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.intounderlyingbytesource_type(this.__wbg_ptr),oe[e]}};Symbol.dispose&&(j.prototype[Symbol.dispose]=j.prototype.free);var R=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,be.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_intounderlyingsink_free(e,0)}abort(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t=this.__destroy_into_raw(),n;return s(),n=i.intounderlyingsink_abort(t,e),n}close(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e=this.__destroy_into_raw(),t;return s(),t=i.intounderlyingsink_close(e),t}write(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=i.intounderlyingsink_write(this.__wbg_ptr,e),t}};Symbol.dispose&&(R.prototype[Symbol.dispose]=R.prototype.free);var F=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,fe.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_intounderlyingsource_free(e,0)}cancel(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e=this.__destroy_into_raw();s(),i.intounderlyingsource_cancel(e)}pull(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=i.intounderlyingsource_pull(this.__wbg_ptr,e),t}};Symbol.dispose&&(F.prototype[Symbol.dispose]=F.prototype.free);var x=class r{static __wrap(e){let t=Object.create(r.prototype);return t.__wbg_ptr=e,Object.defineProperty(t,"__wbg_inst",{value:o,writable:!0}),J.register(t,{ptr:e,instance:o},t),t}__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,J.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_minifyconfig_free(e,0)}get css(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_minifyconfig_css(this.__wbg_ptr),e!==0}get html(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_minifyconfig_html(this.__wbg_ptr),e!==0}get js(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_minifyconfig_js(this.__wbg_ptr),e!==0}set css(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_minifyconfig_css(this.__wbg_ptr,e)}set html(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_minifyconfig_html(this.__wbg_ptr,e)}set js(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_minifyconfig_js(this.__wbg_ptr,e)}};Symbol.dispose&&(x.prototype[Symbol.dispose]=x.prototype.free);var E=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,ge.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_r2range_free(e,0)}get length(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_r2range_length(this.__wbg_ptr),e[0]===0?void 0:e[1]}get offset(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_r2range_offset(this.__wbg_ptr),e[0]===0?void 0:e[1]}get suffix(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_r2range_suffix(this.__wbg_ptr),e[0]===0?void 0:e[1]}set length(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_r2range_length(this.__wbg_ptr,!b(e),b(e)?0:e)}set offset(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_r2range_offset(this.__wbg_ptr,!b(e),b(e)?0:e)}set suffix(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_r2range_suffix(this.__wbg_ptr,!b(e),b(e)?0:e)}};Symbol.dispose&&(E.prototype[Symbol.dispose]=E.prototype.free);var S=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,$.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_routerabsigningworkerpresignsessiondurableobject_free(e,0)}alarm(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.routerabsigningworkerpresignsessiondurableobject_alarm(this.__wbg_ptr),e}fetch(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=i.routerabsigningworkerpresignsessiondurableobject_fetch(this.__wbg_ptr,e),t}constructor(e,t){let n;return s(),n=i.routerabsigningworkerpresignsessiondurableobject_new(e,t),this.__wbg_ptr=n,Object.defineProperty(this,"__wbg_inst",{value:o,writable:!0}),$.register(this,{ptr:n,instance:o},this),this}};Symbol.dispose&&(S.prototype[Symbol.dispose]=S.prototype.free);var k=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,H.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_routerabtenantrootcreationdurableobject_free(e,0)}fetch(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=i.routerabtenantrootcreationdurableobject_fetch(this.__wbg_ptr,e),t}constructor(e,t){let n;return s(),n=i.routerabtenantrootcreationdurableobject_new(e,t),this.__wbg_ptr=n,Object.defineProperty(this,"__wbg_inst",{value:o,writable:!0}),H.register(this,{ptr:n,instance:o},this),this}};Symbol.dispose&&(k.prototype[Symbol.dispose]=k.prototype.free);function q(){o++,v=null,A=null,typeof numBytesDecoded<"u"&&(numBytesDecoded=0),typeof l<"u"&&(l=0),ee=!1,V=new WebAssembly.Instance(K,Z()),i=V.exports,i.__wbindgen_start()}function Q(){let r;return s(),r=i.__worker_init_state(),r}function X(r,e,t){let n;return s(),n=i.fetch(r,e,t),n}function Y(){s(),i.init()}function Z(){return{__proto__:null,"./index_bg.js":{__proto__:null,__wbg_Error_9dc85fe1bc224456:function(e,t){return Error(d(e,t))},__wbg_Number_4779d427bae39753:function(e){return Number(e)},__wbg_String_8564e559799eccda:function(e,t){let n=String(t),_=m(n,i.__wbindgen_malloc,i.__wbindgen_realloc),u=l;f().setInt32(e+4,u,!0),f().setInt32(e+0,_,!0)},__wbg___wbindgen_bigint_get_as_i64_8ea6736501f396b6:function(e,t){let n=t,_=typeof n=="bigint"?n:void 0;f().setBigInt64(e+8,b(_)?BigInt(0):_,!0),f().setInt32(e+0,!b(_),!0)},__wbg___wbindgen_boolean_get_b131b2f36d6b2f55:function(e){let t=e,n=typeof t=="boolean"?t:void 0;return b(n)?16777215:n?1:0},__wbg___wbindgen_debug_string_56c147eb1a51f0c4:function(e,t){let n=C(t),_=m(n,i.__wbindgen_malloc,i.__wbindgen_realloc),u=l;f().setInt32(e+4,u,!0),f().setInt32(e+0,_,!0)},__wbg___wbindgen_in_ce8569b2fc6f5088:function(e,t){return e in t},__wbg___wbindgen_is_bigint_df272c65456269c2:function(e){return typeof e=="bigint"},__wbg___wbindgen_is_function_147961669f068cd4:function(e){return typeof e=="function"},__wbg___wbindgen_is_null_or_undefined_b02321d39cf26d8d:function(e){return e==null},__wbg___wbindgen_is_object_3a2c414391dbf751:function(e){let t=e;return typeof t=="object"&&t!==null},__wbg___wbindgen_is_string_6541b0f6ecd4e8e5:function(e){return typeof e=="string"},__wbg___wbindgen_is_undefined_4410e3c20a99fa97:function(e){return e===void 0},__wbg___wbindgen_jsval_eq_174c93ec61bab0c5:function(e,t){return e===t},__wbg___wbindgen_jsval_loose_eq_e07e3b1f5db6da6c:function(e,t){return e==t},__wbg___wbindgen_number_get_588ed6b97f0d7e14:function(e,t){let n=t,_=typeof n=="number"?n:void 0;f().setFloat64(e+8,b(_)?0:_,!0),f().setInt32(e+0,!b(_),!0)},__wbg___wbindgen_string_get_fa2687d531ed17a5:function(e,t){let n=t,_=typeof n=="string"?n:void 0;var u=b(_)?0:m(_,i.__wbindgen_malloc,i.__wbindgen_realloc),a=l;f().setInt32(e+4,a,!0),f().setInt32(e+0,u,!0)},__wbg___wbindgen_throw_bbadd78c1bac3a77:function(e,t){throw new Error(d(e,t))},__wbg__wbg_cb_unref_c2301a3c9b78104b:function(e){e._wbg_cb_unref()},__wbg_body_442a47f02322d7b0:function(e){let t=e.body;return b(t)?0:w(t)},__wbg_body_b06d3a9c5933702e:function(e){let t=e.body;return b(t)?0:w(t)},__wbg_buffer_8524b3453cde4918:function(e){return e.buffer},__wbg_byobRequest_cc72d210de793e64:function(e){let t=e.byobRequest;return b(t)?0:w(t)},__wbg_byteLength_96807b1d9ab24a4c:function(e){return e.byteLength},__wbg_byteOffset_a9c7002428843c41:function(e){return e.byteOffset},__wbg_call_91f00ddc43e01490:function(){return c(function(e,t){return e.call(t)},arguments)},__wbg_call_ec09a4cf93377d3a:function(){return c(function(e,t,n){return e.call(t,n)},arguments)},__wbg_cancel_f3a197b26dc88b39:function(e){return e.cancel()},__wbg_catch_66060324c27be6f7:function(e,t){return e.catch(t)},__wbg_cause_5f2ec35e043cc9cf:function(e){return e.cause},__wbg_cf_22a1527cd02b5acd:function(){return c(function(e){let t=e.cf;return b(t)?0:w(t)},arguments)},__wbg_cf_ee73de251a6dda8a:function(){return c(function(e){let t=e.cf;return b(t)?0:w(t)},arguments)},__wbg_close_388d99468213b286:function(){return c(function(e){e.close()},arguments)},__wbg_close_4857e22d08b71356:function(){return c(function(e){e.close()},arguments)},__wbg_constructor_04971ae0b51c1fc5:function(e){return e.constructor},__wbg_crypto_38df2bab126b63dc:function(e){return e.crypto},__wbg_delete_3854c950a92fa1b3:function(){return c(function(e,t,n){return e.delete(d(t,n))},arguments)},__wbg_delete_e21a892409559f6e:function(){return c(function(e,t,n){return e.delete(d(t,n))},arguments)},__wbg_done_6a8439e544ec6206:function(e){return e.done},__wbg_enqueue_bbeb09ba0b140f76:function(){return c(function(e,t){e.enqueue(t)},arguments)},__wbg_entries_5a6a7e7e0df09fe5:function(e){return Object.entries(e)},__wbg_error_6651fee1c71e5da9:function(e){console.error(e)},__wbg_error_9a99766f65a03031:function(e,t){console.error(e,t)},__wbg_fetch_b447ca2a0c0e6583:function(){return c(function(e,t){return e.fetch(t)},arguments)},__wbg_getByName_5f8a4ae327c50115:function(){return c(function(e,t,n){return e.getByName(d(t,n))},arguments)},__wbg_getRandomValues_c44a50d8cfdaebeb:function(){return c(function(e,t){e.getRandomValues(t)},arguments)},__wbg_getReader_bb0230851fbf986b:function(){return c(function(e){return e.getReader()},arguments)},__wbg_getTime_ef2e115ede346a26:function(e){return e.getTime()},__wbg_get_44e98e27bda25b5b:function(){return c(function(e,t){return Reflect.get(e,t)},arguments)},__wbg_get_4b90d6d8c5deb5d5:function(e,t){return e[t>>>0]},__wbg_get_52a8a619f7b88df6:function(){return c(function(e,t){return Reflect.get(e,t)},arguments)},__wbg_get_6e0eec3a0a32f612:function(){return c(function(e,t,n){return e.get(d(t,n))},arguments)},__wbg_get_a82defe8d6b5b2e5:function(){return c(function(e,t,n,_){let u=t.get(d(n,_));var a=b(u)?0:m(u,i.__wbindgen_malloc,i.__wbindgen_realloc),g=l;f().setInt32(e+4,g,!0),f().setInt32(e+0,a,!0)},arguments)},__wbg_get_a87a6c1024dddd3b:function(){return c(function(e,t,n){return e.get(d(t,n))},arguments)},__wbg_get_c538c7fb0359c222:function(){return c(function(e,t){let n=Reflect.get(e,t);return b(n)?0:w(n)},arguments)},__wbg_get_done_c21b9933fc9a9e9c:function(e){let t=e.done;return b(t)?16777215:t?1:0},__wbg_get_unchecked_46e778e3cec74b5e:function(e,t){return e[t>>>0]},__wbg_get_value_ad568c7d3db9073f:function(e){return e.value},__wbg_get_with_ref_key_6412cf3094599694:function(e,t){return e[t]},__wbg_headers_5b19cf40627ae54d:function(e){return e.headers},__wbg_headers_e1e94862a6a36f9e:function(e){return e.headers},__wbg_idFromName_32b0b5012b5f6535:function(){return c(function(e,t,n){return e.idFromName(d(t,n))},arguments)},__wbg_id_0c05f441a81ef0fc:function(){return c(function(e){return e.id},arguments)},__wbg_instanceId_3970204fcbf0c41d:function(e){return e.instanceId},__wbg_instanceof_ArrayBuffer_a581da923203f29f:function(e){let t;try{t=e instanceof ArrayBuffer}catch{t=!1}return t},__wbg_instanceof_Error_cb5ebd65d798655e:function(e){let t;try{t=e instanceof Error}catch{t=!1}return t},__wbg_instanceof_Map_7f94c740225003e2:function(e){let t;try{t=e instanceof Map}catch{t=!1}return t},__wbg_instanceof_ReadableStream_b1eab376911b1b77:function(e){let t;try{t=e instanceof ReadableStream}catch{t=!1}return t},__wbg_instanceof_Response_36a65a969abaa7c6:function(e){let t;try{t=e instanceof Response}catch{t=!1}return t},__wbg_instanceof_Uint8Array_b6fe1ac89eba107e:function(e){let t;try{t=e instanceof Uint8Array}catch{t=!1}return t},__wbg_isArray_139f48e3c057ede8:function(e){return Array.isArray(e)},__wbg_isSafeInteger_c22ccb4af2201fe9:function(e){return Number.isSafeInteger(e)},__wbg_iterator_9b36cebf3be7b7cd:function(){return Symbol.iterator},__wbg_json_d44033e4c5c27d14:function(){return c(function(e){return e.json()},arguments)},__wbg_keys_6fe253f5073ff078:function(e){return e.keys()},__wbg_length_68a9d5278d084f4f:function(e){return e.length},__wbg_length_fb04d16d7bdf6d4c:function(e){return e.length},__wbg_message_5c6ab4dd6c4b34e8:function(e){return e.message},__wbg_method_f687b49ca8e2b38d:function(e,t){let n=t.method,_=m(n,i.__wbindgen_malloc,i.__wbindgen_realloc),u=l;f().setInt32(e+4,u,!0),f().setInt32(e+0,_,!0)},__wbg_minifyconfig_new:function(e){return x.__wrap(e)},__wbg_msCrypto_bd5a034af96bcba6:function(e){return e.msCrypto},__wbg_name_72adaf2fce06bbe8:function(e){return e.name},__wbg_name_f60e249a46c5285a:function(e){return e.name},__wbg_new_0_878c6ec3a1c600f3:function(){return new Date},__wbg_new_0b303268aa395a38:function(){return new Array},__wbg_new_189262ff31890c23:function(){return c(function(){return new Headers},arguments)},__wbg_new_20b778a4c5c691c3:function(){return new Object},__wbg_new_5fae30e6b23db8df:function(e,t){return new Error(d(e,t))},__wbg_new_883c0db065f06efd:function(){return new Map},__wbg_new_a21cf41c5c809e4c:function(e){return new Date(e)},__wbg_new_b06772b280cc6e52:function(e){return new Uint8Array(e)},__wbg_new_typed_90c3f6c29ba36d19:function(e,t){try{var n={a:e,b:t},_=(a,g)=>{let p=n.a;n.a=0;try{return ie(p,n.b,a,g)}finally{n.a=p}};return new Promise(_)}finally{n.a=0}},__wbg_new_with_byte_offset_and_length_9e1e664fe1a5d385:function(e,t,n){return new Uint8Array(e,t>>>0,n>>>0)},__wbg_new_with_length_4b57a7a5dc67221c:function(e){return new Uint8Array(e>>>0)},__wbg_new_with_opt_buffer_source_and_init_f51f4fbe98d29f2e:function(){return c(function(e,t){return new Response(e,t)},arguments)},__wbg_new_with_opt_readable_stream_and_init_def67835ea705e4d:function(){return c(function(e,t){return new Response(e,t)},arguments)},__wbg_new_with_opt_str_and_init_11bb6f5faad68c85:function(){return c(function(e,t,n){return new Response(e===0?void 0:d(e,t),n)},arguments)},__wbg_new_with_str_and_init_df876572184fe639:function(){return c(function(e,t,n){return new Request(d(e,t),n)},arguments)},__wbg_next_8cb028b6ba50743f:function(){return c(function(e){return e.next()},arguments)},__wbg_next_cfd0b146c9538df8:function(e){return e.next},__wbg_node_84ea875411254db1:function(e){return e.node},__wbg_now_bce4dc999095ea77:function(){return Date.now()},__wbg_process_44c7a14e11e9f69e:function(e){return e.process},__wbg_prototypesetcall_956c7493c68e29b4:function(e,t,n){Uint8Array.prototype.set.call(D(e,t),n)},__wbg_put_27edc2ab773a21be:function(){return c(function(e,t,n,_){return e.put(d(t,n),_)},arguments)},__wbg_put_642b68b9295b5238:function(){return c(function(e,t,n,_){return e.put(d(t,n),_)},arguments)},__wbg_queueMicrotask_4698f900840e3286:function(e){queueMicrotask(e)},__wbg_queueMicrotask_477a5533c7100338:function(e){return e.queueMicrotask},__wbg_randomFillSync_6c25eac9869eb53c:function(){return c(function(e,t){e.randomFillSync(t)},arguments)},__wbg_read_8426c146431f2905:function(e){return e.read()},__wbg_releaseLock_188846ef719acb10:function(e){e.releaseLock()},__wbg_require_b4edbdcf3e2a1ef0:function(){return c(function(){return module.require},arguments)},__wbg_resolve_0183de2e8c6b1d54:function(e){return Promise.resolve(e)},__wbg_respond_3cdb4cf32683fd79:function(){return c(function(e,t){e.respond(t>>>0)},arguments)},__wbg_setAlarm_c9229fb49928e287:function(){return c(function(e,t,n){return e.setAlarm(t,n)},arguments)},__wbg_set_3ab3dfede3bae139:function(){return c(function(e,t,n,_,u){e.set(d(t,n),d(_,u))},arguments)},__wbg_set_5f806304fb633ab3:function(e,t,n){return e.set(t,n)},__wbg_set_6be42768c690e380:function(e,t,n){e[t]=n},__wbg_set_86698c227e5b9dad:function(e,t,n){e.set(D(t,n))},__wbg_set_a6ba3ac0e634b822:function(){return c(function(e,t,n){return Reflect.set(e,t,n)},arguments)},__wbg_set_body_d1153b16a2b95ca1:function(e,t){e.body=t},__wbg_set_cache_5a01a8b5e6ca6cf2:function(e,t){e.cache=se[t]},__wbg_set_criticalError_3b493d341796397b:function(e,t){e.criticalError=t!==0},__wbg_set_da33c120a6584674:function(e,t,n){e[t>>>0]=n},__wbg_set_headers_178db2684a27c112:function(e,t){e.headers=t},__wbg_set_headers_877ed41890d28af2:function(e,t){e.headers=t},__wbg_set_instanceId_2e5d2db011e9f6af:function(e,t){e.instanceId=t>>>0},__wbg_set_method_b4ede299b2064f37:function(e,t,n){e.method=d(t,n)},__wbg_set_redirect_97b881e7430f3438:function(e,t){e.redirect=ce[t]},__wbg_set_status_56097e6101a48227:function(e,t){e.status=t},__wbg_static_accessor_GLOBAL_60a4124bab7dcc9a:function(){let e=typeof global>"u"?null:global;return b(e)?0:w(e)},__wbg_static_accessor_GLOBAL_THIS_95ca6460658b5d13:function(){let e=typeof globalThis>"u"?null:globalThis;return b(e)?0:w(e)},__wbg_static_accessor_INIT_STATE_2271957acdc7fe6e:function(){return N},__wbg_static_accessor_SELF_4c95f759a91e9aae:function(){let e=typeof self>"u"?null:self;return b(e)?0:w(e)},__wbg_static_accessor_WINDOW_44b435597f9e9ee7:function(){let e=typeof window>"u"?null:window;return b(e)?0:w(e)},__wbg_status_9e6505cfa3e73a7c:function(e){return e.status},__wbg_storage_e350ca27f103b85e:function(){return c(function(e){return e.storage},arguments)},__wbg_subarray_42216645a367cd7a:function(e,t,n){return e.subarray(t>>>0,n>>>0)},__wbg_then_254bab9b266a77a5:function(e,t,n){return e.then(t,n)},__wbg_then_3ea18602c6a5123b:function(e,t){return e.then(t)},__wbg_toISOString_1c29c14154d57c76:function(e){return e.toISOString()},__wbg_toString_c3e29dc77827b5c7:function(){return c(function(e,t){let n=t.toString(),_=m(n,i.__wbindgen_malloc,i.__wbindgen_realloc),u=l;f().setInt32(e+4,u,!0),f().setInt32(e+0,_,!0)},arguments)},__wbg_transaction_afcd84163102ab81:function(){return c(function(e,t){return e.transaction(t)},arguments)},__wbg_url_74200ddca55ab638:function(e,t){let n=t.url,_=m(n,i.__wbindgen_malloc,i.__wbindgen_realloc),u=l;f().setInt32(e+4,u,!0),f().setInt32(e+0,_,!0)},__wbg_value_3d3defe09fb1ffca:function(e){return e.value},__wbg_versions_276b2795b1c6a219:function(e){return e.versions},__wbg_view_15fa5865c6b336e3:function(e){let t=e.view;return b(t)?0:w(t)},__wbg_webSocket_651aa54cd4107a97:function(){return c(function(e){let t=e.webSocket;return b(t)?0:w(t)},arguments)},__wbindgen_cast_0000000000000001:function(e,t){return M(e,t,re)},__wbindgen_cast_0000000000000002:function(e,t){return M(e,t,ne)},__wbindgen_cast_0000000000000003:function(e,t){return M(e,t,_e)},__wbindgen_cast_0000000000000004:function(e){return e},__wbindgen_cast_0000000000000005:function(e){return e},__wbindgen_cast_0000000000000006:function(e,t){return D(e,t)},__wbindgen_cast_0000000000000007:function(e,t){return d(e,t)},__wbindgen_cast_0000000000000008:function(e){return BigInt.asUintN(64,e)},__wbindgen_init_externref_table:function(){let e=i.__wbindgen_externrefs,t=e.grow(4);e.set(0,void 0),e.set(t+0,void 0),e.set(t+1,null),e.set(t+2,!0),e.set(t+3,!1)}}}}function s(){if(ee){q();return}}function ne(r,e,t){s(),i.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___wasm_bindgen_68f389e705008bcb___JsValue______true_(r,e,t)}function re(r,e,t){let n;return s(),n=i.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___worker_sys_a30a61bc3d743209___types__durable_object__transaction__DurableObjectTransaction__js_sys_95ed116970c1190___Promise__true_(r,e,t),n}function _e(r,e,t){let n;if(s(),n=i.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___wasm_bindgen_68f389e705008bcb___JsValue__core_ed718c3d60ebd546___result__Result_____wasm_bindgen_68f389e705008bcb___JsError___true_(r,e,t),n[1])throw le(n[0])}function ie(r,e,t,n){s(),i.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___js_sys_95ed116970c1190___Function_fn_wasm_bindgen_68f389e705008bcb___JsValue_____wasm_bindgen_68f389e705008bcb___sys__Undefined___js_sys_95ed116970c1190___Function_fn_wasm_bindgen_68f389e705008bcb___JsValue_____wasm_bindgen_68f389e705008bcb___sys__Undefined_______true_(r,e,t,n)}var oe=["bytes"],se=["default","no-store","reload","no-cache","force-cache","only-if-cached"],ce=["follow","error","manual"],o=0,ue=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_containerstartupoptions_free(r,1)}),ae=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_intounderlyingbytesource_free(r,1)}),be=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_intounderlyingsink_free(r,1)}),fe=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_intounderlyingsource_free(r,1)}),J=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_minifyconfig_free(r,1)}),ge=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_r2range_free(r,1)}),$=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_routerabsigningworkerpresignsessiondurableobject_free(r,1)}),H=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_routerabtenantrootcreationdurableobject_free(r,1)});function w(r){let e=i.__externref_table_alloc();return i.__wbindgen_externrefs.set(e,r),e}var G=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(r=>{r.instance===o&&i.__wbindgen_destroy_closure(r.a,r.b)});function C(r){let e=typeof r;if(e=="number"||e=="boolean"||r==null)return`${r}`;if(e=="string")return`"${r}"`;if(e=="symbol"){let _=r.description;return _==null?"Symbol":`Symbol(${_})`}if(e=="function"){let _=r.name;return typeof _=="string"&&_.length>0?`Function(${_})`:"Function"}if(Array.isArray(r)){let _=r.length,u="[";_>0&&(u+=C(r[0]));for(let a=1;a<_;a++)u+=", "+C(r[a]);return u+="]",u}let t=/\[object ([^\]]+)\]/.exec(toString.call(r)),n;if(t&&t.length>1)n=t[1];else return toString.call(r);if(n=="Object")try{return"Object("+JSON.stringify(r)+")"}catch{return"Object"}return r instanceof Error?`${r.name}: ${r.message}
2
- ${r.stack}`:n}function de(r,e){r=r>>>0;let t=f(),n=[];for(let _=r;_<r+4*e;_+=4)n.push(i.__wbindgen_externrefs.get(t.getUint32(_,!0)));return i.__externref_drop_slice(r,e),n}function D(r,e){return r=r>>>0,O().subarray(r/1,r/1+e)}var v=null;function f(){return(v===null||v.buffer.detached===!0||v.buffer.detached===void 0&&v.buffer!==i.memory.buffer)&&(v=new DataView(i.memory.buffer)),v}function d(r,e){return pe(r>>>0,e)}var A=null;function O(){return(A===null||A.byteLength===0)&&(A=new Uint8Array(i.memory.buffer)),A}function c(r,e){try{return r.apply(this,e)}catch(t){let n=w(t);i.__wbindgen_exn_store(n)}}function b(r){return r==null}function M(r,e,t){let n={a:r,b:e,cnt:1,instance:o},_=(...u)=>{if(n.instance!==o)throw new Error("Cannot invoke closure from previous WASM instance");n.cnt++;let a=n.a;n.a=0;try{return t(a,n.b,...u)}finally{n.a=a,_._wbg_cb_unref()}};return _._wbg_cb_unref=()=>{--n.cnt===0&&(i.__wbindgen_destroy_closure(n.a,n.b),n.a=0,G.unregister(n))},G.register(_,n,n),_}function we(r,e){let t=e(r.length*4,4)>>>0;for(let n=0;n<r.length;n++){let _=w(r[n]);f().setUint32(t+4*n,_,!0)}return l=r.length,t}function m(r,e,t){if(t===void 0){let g=P.encode(r),p=e(g.length,1)>>>0;return O().subarray(p,p+g.length).set(g),l=g.length,p}let n=r.length,_=e(n,1)>>>0,u=O(),a=0;for(;a<n;a++){let g=r.charCodeAt(a);if(g>127)break;u[_+a]=g}if(a!==n){a!==0&&(r=r.slice(a)),_=t(_,n,n=a+r.length*3,1)>>>0;let g=O().subarray(_+a,_+n),p=P.encodeInto(r,g);a+=p.written,_=t(_,n,a,1)>>>0}return l=a,_}var ee=!1;function le(r){let e=i.__wbindgen_externrefs.get(r);return i.__externref_table_dealloc(r),e}var te=new TextDecoder("utf-8",{ignoreBOM:!0,fatal:!0});te.decode();function pe(r,e){return te.decode(O().subarray(r,r+e))}var P=new TextEncoder;"encodeInto"in P||(P.encodeInto=function(r,e){let t=P.encode(r);return e.set(t),{read:r.length,written:t.length}});var l=0,V=new WebAssembly.Instance(K,Z()),i=V.exports;i.__wbindgen_start();Error.stackTraceLimit=100;var h=Q();function L(){h.criticalError&&(console.log("Reinitializing Wasm application"),q(),h.criticalError=!1,h.instanceId++)}addEventListener("error",r=>{B(r.error)});function B(r){r instanceof WebAssembly.RuntimeError&&(console.error("Critical",r),h.criticalError=!0)}var z=class extends he{};z.prototype.fetch=function(e){return X.call(this,e,this.env,this.ctx)};z.prototype.init=Y;var me={set:(r,e,t,n)=>Reflect.set(r.instance,e,t,n),has:(r,e)=>Reflect.has(r.instance,e),deleteProperty:(r,e)=>Reflect.deleteProperty(r.instance,e),apply:(r,e,t)=>Reflect.apply(r.instance,e,t),construct:(r,e,t)=>Reflect.construct(r.instance,e,t),getPrototypeOf:r=>Reflect.getPrototypeOf(r.instance),setPrototypeOf:(r,e)=>Reflect.setPrototypeOf(r.instance,e),isExtensible:r=>Reflect.isExtensible(r.instance),preventExtensions:r=>Reflect.preventExtensions(r.instance),getOwnPropertyDescriptor:(r,e)=>Reflect.getOwnPropertyDescriptor(r.instance,e),defineProperty:(r,e,t)=>Reflect.defineProperty(r.instance,e,t),ownKeys:r=>Reflect.ownKeys(r.instance)},y={construct(r,e,t){try{L();let n={instance:Reflect.construct(r,e,t),instanceId:h.instanceId,ctor:r,args:e,newTarget:t};return new Proxy(n,{...me,get(_,u,a){_.instanceId!==h.instanceId&&(_.instance=Reflect.construct(_.ctor,_.args,_.newTarget),_.instanceId=h.instanceId);let g=Reflect.get(_.instance,u,a);return typeof g!="function"?g:g.constructor===Function?new Proxy(g,{apply(p,T,U){L();try{return p.apply(T,U)}catch(W){throw B(W),W}}}):new Proxy(g,{async apply(p,T,U){L();try{return await p.apply(T,U)}catch(W){throw B(W),W}}})}})}catch(n){throw h.criticalError=!0,n}}},Re=new Proxy(z,y),Fe=new Proxy(I,y),Ee=new Proxy(j,y),Se=new Proxy(R,y),ke=new Proxy(F,y),We=new Proxy(x,y),Ae=new Proxy(E,y),Oe=new Proxy(S,y),Pe=new Proxy(k,y);export{Fe as ContainerStartupOptions,Ee as IntoUnderlyingByteSource,Se as IntoUnderlyingSink,ke as IntoUnderlyingSource,We as MinifyConfig,Ae as R2Range,Oe as RouterAbSigningWorkerPresignSessionDurableObject,Pe as RouterAbTenantRootCreationDurableObject,Re as default};
1
+ import{WorkerEntrypoint as ve}from"cloudflare:workers";var J=globalThis.__worker_init_state={criticalError:!1,instanceId:0};import X from"./index_bg.wasm";var x=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,be.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_containerstartupoptions_free(e,0)}get enableInternet(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_containerstartupoptions_enableInternet(this.__wbg_ptr),e===16777215?void 0:e!==0}get entrypoint(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;s(),e=_.__wbg_get_containerstartupoptions_entrypoint(this.__wbg_ptr);var t=le(e[0],e[1]).slice();return _.__wbindgen_free(e[0],e[1]*4,4),t}get env(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_containerstartupoptions_env(this.__wbg_ptr),e}set enableInternet(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_containerstartupoptions_enableInternet(this.__wbg_ptr,b(e)?16777215:e?1:0)}set entrypoint(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t=pe(e,_.__wbindgen_malloc),n=l;s(),_.__wbg_set_containerstartupoptions_entrypoint(this.__wbg_ptr,t,n)}set env(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_containerstartupoptions_env(this.__wbg_ptr,e)}};Symbol.dispose&&(x.prototype[Symbol.dispose]=x.prototype.free);var I=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,fe.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_intounderlyingbytesource_free(e,0)}get autoAllocateChunkSize(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.intounderlyingbytesource_autoAllocateChunkSize(this.__wbg_ptr),e>>>0}cancel(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e=this.__destroy_into_raw();s(),_.intounderlyingbytesource_cancel(e)}pull(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=_.intounderlyingbytesource_pull(this.__wbg_ptr,e),t}start(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.intounderlyingbytesource_start(this.__wbg_ptr,e)}get type(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.intounderlyingbytesource_type(this.__wbg_ptr),ce[e]}};Symbol.dispose&&(I.prototype[Symbol.dispose]=I.prototype.free);var R=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,ge.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_intounderlyingsink_free(e,0)}abort(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t=this.__destroy_into_raw(),n;return s(),n=_.intounderlyingsink_abort(t,e),n}close(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e=this.__destroy_into_raw(),t;return s(),t=_.intounderlyingsink_close(e),t}write(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=_.intounderlyingsink_write(this.__wbg_ptr,e),t}};Symbol.dispose&&(R.prototype[Symbol.dispose]=R.prototype.free);var E=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,we.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_intounderlyingsource_free(e,0)}cancel(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e=this.__destroy_into_raw();s(),_.intounderlyingsource_cancel(e)}pull(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=_.intounderlyingsource_pull(this.__wbg_ptr,e),t}};Symbol.dispose&&(E.prototype[Symbol.dispose]=E.prototype.free);var j=class r{static __wrap(e){let t=Object.create(r.prototype);return t.__wbg_ptr=e,Object.defineProperty(t,"__wbg_inst",{value:o,writable:!0}),$.register(t,{ptr:e,instance:o},t),t}__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,$.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_minifyconfig_free(e,0)}get css(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_minifyconfig_css(this.__wbg_ptr),e!==0}get html(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_minifyconfig_html(this.__wbg_ptr),e!==0}get js(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_minifyconfig_js(this.__wbg_ptr),e!==0}set css(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_minifyconfig_css(this.__wbg_ptr,e)}set html(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_minifyconfig_html(this.__wbg_ptr,e)}set js(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_minifyconfig_js(this.__wbg_ptr,e)}};Symbol.dispose&&(j.prototype[Symbol.dispose]=j.prototype.free);var F=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,de.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_r2range_free(e,0)}get length(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_r2range_length(this.__wbg_ptr),e[0]===0?void 0:e[1]}get offset(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_r2range_offset(this.__wbg_ptr),e[0]===0?void 0:e[1]}get suffix(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_r2range_suffix(this.__wbg_ptr),e[0]===0?void 0:e[1]}set length(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_r2range_length(this.__wbg_ptr,!b(e),b(e)?0:e)}set offset(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_r2range_offset(this.__wbg_ptr,!b(e),b(e)?0:e)}set suffix(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_r2range_suffix(this.__wbg_ptr,!b(e),b(e)?0:e)}};Symbol.dispose&&(F.prototype[Symbol.dispose]=F.prototype.free);var S=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,H.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_routerabrouterwalletdurableobject_free(e,0)}alarm(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.routerabrouterwalletdurableobject_alarm(this.__wbg_ptr),e}fetch(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=_.routerabrouterwalletdurableobject_fetch(this.__wbg_ptr,e),t}constructor(e,t){let n;return s(),n=_.routerabrouterwalletdurableobject_new(e,t),this.__wbg_ptr=n,Object.defineProperty(this,"__wbg_inst",{value:o,writable:!0}),H.register(this,{ptr:n,instance:o},this),this}webSocketClose(e,t,n,i){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let u=y(n,_.__wbindgen_malloc,_.__wbindgen_realloc),a=l,f;return s(),f=_.routerabrouterwalletdurableobject_webSocketClose(this.__wbg_ptr,e,t,u,a,i),f}webSocketError(e,t){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let n;return s(),n=_.routerabrouterwalletdurableobject_webSocketError(this.__wbg_ptr,e,t),n}webSocketMessage(e,t){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let n;return s(),n=_.routerabrouterwalletdurableobject_webSocketMessage(this.__wbg_ptr,e,t),n}};Symbol.dispose&&(S.prototype[Symbol.dispose]=S.prototype.free);var k=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,G.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_routerabsigningworkerpresignsessiondurableobject_free(e,0)}alarm(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.routerabsigningworkerpresignsessiondurableobject_alarm(this.__wbg_ptr),e}fetch(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=_.routerabsigningworkerpresignsessiondurableobject_fetch(this.__wbg_ptr,e),t}constructor(e,t){let n;return s(),n=_.routerabsigningworkerpresignsessiondurableobject_new(e,t),this.__wbg_ptr=n,Object.defineProperty(this,"__wbg_inst",{value:o,writable:!0}),G.register(this,{ptr:n,instance:o},this),this}};Symbol.dispose&&(k.prototype[Symbol.dispose]=k.prototype.free);var W=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,K.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_routerabtenantrootcreationdurableobject_free(e,0)}fetch(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=_.routerabtenantrootcreationdurableobject_fetch(this.__wbg_ptr,e),t}constructor(e,t){let n;return s(),n=_.routerabtenantrootcreationdurableobject_new(e,t),this.__wbg_ptr=n,Object.defineProperty(this,"__wbg_inst",{value:o,writable:!0}),K.register(this,{ptr:n,instance:o},this),this}};Symbol.dispose&&(W.prototype[Symbol.dispose]=W.prototype.free);function L(){o++,v=null,O=null,typeof numBytesDecoded<"u"&&(numBytesDecoded=0),typeof l<"u"&&(l=0),ne=!1,q=new WebAssembly.Instance(X,te()),_=q.exports,_.__wbindgen_start()}function Y(){let r;return s(),r=_.__worker_init_state(),r}function Z(r,e,t){let n;return s(),n=_.fetch(r,e,t),n}function ee(){s(),_.init()}function te(){return{__proto__:null,"./index_bg.js":{__proto__:null,__wbg_Error_9dc85fe1bc224456:function(e,t){return Error(w(e,t))},__wbg_Number_4779d427bae39753:function(e){return Number(e)},__wbg_String_8564e559799eccda:function(e,t){let n=String(t),i=y(n,_.__wbindgen_malloc,_.__wbindgen_realloc),u=l;g().setInt32(e+4,u,!0),g().setInt32(e+0,i,!0)},__wbg___wbindgen_bigint_get_as_i64_8ea6736501f396b6:function(e,t){let n=t,i=typeof n=="bigint"?n:void 0;g().setBigInt64(e+8,b(i)?BigInt(0):i,!0),g().setInt32(e+0,!b(i),!0)},__wbg___wbindgen_boolean_get_b131b2f36d6b2f55:function(e){let t=e,n=typeof t=="boolean"?t:void 0;return b(n)?16777215:n?1:0},__wbg___wbindgen_debug_string_56c147eb1a51f0c4:function(e,t){let n=V(t),i=y(n,_.__wbindgen_malloc,_.__wbindgen_realloc),u=l;g().setInt32(e+4,u,!0),g().setInt32(e+0,i,!0)},__wbg___wbindgen_in_ce8569b2fc6f5088:function(e,t){return e in t},__wbg___wbindgen_is_bigint_df272c65456269c2:function(e){return typeof e=="bigint"},__wbg___wbindgen_is_function_147961669f068cd4:function(e){return typeof e=="function"},__wbg___wbindgen_is_null_or_undefined_b02321d39cf26d8d:function(e){return e==null},__wbg___wbindgen_is_object_3a2c414391dbf751:function(e){let t=e;return typeof t=="object"&&t!==null},__wbg___wbindgen_is_string_6541b0f6ecd4e8e5:function(e){return typeof e=="string"},__wbg___wbindgen_is_undefined_4410e3c20a99fa97:function(e){return e===void 0},__wbg___wbindgen_jsval_eq_174c93ec61bab0c5:function(e,t){return e===t},__wbg___wbindgen_jsval_loose_eq_e07e3b1f5db6da6c:function(e,t){return e==t},__wbg___wbindgen_number_get_588ed6b97f0d7e14:function(e,t){let n=t,i=typeof n=="number"?n:void 0;g().setFloat64(e+8,b(i)?0:i,!0),g().setInt32(e+0,!b(i),!0)},__wbg___wbindgen_string_get_fa2687d531ed17a5:function(e,t){let n=t,i=typeof n=="string"?n:void 0;var u=b(i)?0:y(i,_.__wbindgen_malloc,_.__wbindgen_realloc),a=l;g().setInt32(e+4,a,!0),g().setInt32(e+0,u,!0)},__wbg___wbindgen_throw_bbadd78c1bac3a77:function(e,t){throw new Error(w(e,t))},__wbg__wbg_cb_unref_c2301a3c9b78104b:function(e){e._wbg_cb_unref()},__wbg_body_442a47f02322d7b0:function(e){let t=e.body;return b(t)?0:d(t)},__wbg_body_b06d3a9c5933702e:function(e){let t=e.body;return b(t)?0:d(t)},__wbg_buffer_8524b3453cde4918:function(e){return e.buffer},__wbg_byobRequest_cc72d210de793e64:function(e){let t=e.byobRequest;return b(t)?0:d(t)},__wbg_byteLength_96807b1d9ab24a4c:function(e){return e.byteLength},__wbg_byteOffset_a9c7002428843c41:function(e){return e.byteOffset},__wbg_call_91f00ddc43e01490:function(){return c(function(e,t){return e.call(t)},arguments)},__wbg_call_ec09a4cf93377d3a:function(){return c(function(e,t,n){return e.call(t,n)},arguments)},__wbg_cancel_f3a197b26dc88b39:function(e){return e.cancel()},__wbg_catch_66060324c27be6f7:function(e,t){return e.catch(t)},__wbg_cause_5f2ec35e043cc9cf:function(e){return e.cause},__wbg_cf_22a1527cd02b5acd:function(){return c(function(e){let t=e.cf;return b(t)?0:d(t)},arguments)},__wbg_cf_ee73de251a6dda8a:function(){return c(function(e){let t=e.cf;return b(t)?0:d(t)},arguments)},__wbg_close_388d99468213b286:function(){return c(function(e){e.close()},arguments)},__wbg_close_4857e22d08b71356:function(){return c(function(e){e.close()},arguments)},__wbg_constructor_04971ae0b51c1fc5:function(e){return e.constructor},__wbg_crypto_38df2bab126b63dc:function(e){return e.crypto},__wbg_delete_3854c950a92fa1b3:function(){return c(function(e,t,n){return e.delete(w(t,n))},arguments)},__wbg_delete_e21a892409559f6e:function(){return c(function(e,t,n){return e.delete(w(t,n))},arguments)},__wbg_done_6a8439e544ec6206:function(e){return e.done},__wbg_enqueue_bbeb09ba0b140f76:function(){return c(function(e,t){e.enqueue(t)},arguments)},__wbg_entries_5a6a7e7e0df09fe5:function(e){return Object.entries(e)},__wbg_error_6651fee1c71e5da9:function(e){console.error(e)},__wbg_error_9a99766f65a03031:function(e,t){console.error(e,t)},__wbg_fetch_b447ca2a0c0e6583:function(){return c(function(e,t){return e.fetch(t)},arguments)},__wbg_getByName_5f8a4ae327c50115:function(){return c(function(e,t,n){return e.getByName(w(t,n))},arguments)},__wbg_getRandomValues_c44a50d8cfdaebeb:function(){return c(function(e,t){e.getRandomValues(t)},arguments)},__wbg_getReader_bb0230851fbf986b:function(){return c(function(e){return e.getReader()},arguments)},__wbg_getTime_ef2e115ede346a26:function(e){return e.getTime()},__wbg_get_44e98e27bda25b5b:function(){return c(function(e,t){return Reflect.get(e,t)},arguments)},__wbg_get_4b90d6d8c5deb5d5:function(e,t){return e[t>>>0]},__wbg_get_52a8a619f7b88df6:function(){return c(function(e,t){return Reflect.get(e,t)},arguments)},__wbg_get_6e0eec3a0a32f612:function(){return c(function(e,t,n){return e.get(w(t,n))},arguments)},__wbg_get_a82defe8d6b5b2e5:function(){return c(function(e,t,n,i){let u=t.get(w(n,i));var a=b(u)?0:y(u,_.__wbindgen_malloc,_.__wbindgen_realloc),f=l;g().setInt32(e+4,f,!0),g().setInt32(e+0,a,!0)},arguments)},__wbg_get_a87a6c1024dddd3b:function(){return c(function(e,t,n){return e.get(w(t,n))},arguments)},__wbg_get_c538c7fb0359c222:function(){return c(function(e,t){let n=Reflect.get(e,t);return b(n)?0:d(n)},arguments)},__wbg_get_done_c21b9933fc9a9e9c:function(e){let t=e.done;return b(t)?16777215:t?1:0},__wbg_get_unchecked_46e778e3cec74b5e:function(e,t){return e[t>>>0]},__wbg_get_value_ad568c7d3db9073f:function(e){return e.value},__wbg_get_with_ref_key_6412cf3094599694:function(e,t){return e[t]},__wbg_headers_5b19cf40627ae54d:function(e){return e.headers},__wbg_headers_e1e94862a6a36f9e:function(e){return e.headers},__wbg_idFromName_32b0b5012b5f6535:function(){return c(function(e,t,n){return e.idFromName(w(t,n))},arguments)},__wbg_id_0c05f441a81ef0fc:function(){return c(function(e){return e.id},arguments)},__wbg_instanceId_3970204fcbf0c41d:function(e){return e.instanceId},__wbg_instanceof_ArrayBuffer_a581da923203f29f:function(e){let t;try{t=e instanceof ArrayBuffer}catch{t=!1}return t},__wbg_instanceof_Error_cb5ebd65d798655e:function(e){let t;try{t=e instanceof Error}catch{t=!1}return t},__wbg_instanceof_Map_7f94c740225003e2:function(e){let t;try{t=e instanceof Map}catch{t=!1}return t},__wbg_instanceof_ReadableStream_b1eab376911b1b77:function(e){let t;try{t=e instanceof ReadableStream}catch{t=!1}return t},__wbg_instanceof_Response_36a65a969abaa7c6:function(e){let t;try{t=e instanceof Response}catch{t=!1}return t},__wbg_instanceof_Uint8Array_b6fe1ac89eba107e:function(e){let t;try{t=e instanceof Uint8Array}catch{t=!1}return t},__wbg_isArray_139f48e3c057ede8:function(e){return Array.isArray(e)},__wbg_isSafeInteger_c22ccb4af2201fe9:function(e){return Number.isSafeInteger(e)},__wbg_iterator_9b36cebf3be7b7cd:function(){return Symbol.iterator},__wbg_json_d44033e4c5c27d14:function(){return c(function(e){return e.json()},arguments)},__wbg_keys_6fe253f5073ff078:function(e){return e.keys()},__wbg_length_68a9d5278d084f4f:function(e){return e.length},__wbg_length_fb04d16d7bdf6d4c:function(e){return e.length},__wbg_message_5c6ab4dd6c4b34e8:function(e){return e.message},__wbg_method_f687b49ca8e2b38d:function(e,t){let n=t.method,i=y(n,_.__wbindgen_malloc,_.__wbindgen_realloc),u=l;g().setInt32(e+4,u,!0),g().setInt32(e+0,i,!0)},__wbg_minifyconfig_new:function(e){return j.__wrap(e)},__wbg_msCrypto_bd5a034af96bcba6:function(e){return e.msCrypto},__wbg_name_72adaf2fce06bbe8:function(e){return e.name},__wbg_name_f60e249a46c5285a:function(e){return e.name},__wbg_new_0_878c6ec3a1c600f3:function(){return new Date},__wbg_new_0b303268aa395a38:function(){return new Array},__wbg_new_189262ff31890c23:function(){return c(function(){return new Headers},arguments)},__wbg_new_20b778a4c5c691c3:function(){return new Object},__wbg_new_5fae30e6b23db8df:function(e,t){return new Error(w(e,t))},__wbg_new_883c0db065f06efd:function(){return new Map},__wbg_new_a21cf41c5c809e4c:function(e){return new Date(e)},__wbg_new_b06772b280cc6e52:function(e){return new Uint8Array(e)},__wbg_new_typed_90c3f6c29ba36d19:function(e,t){try{var n={a:e,b:t},i=(a,f)=>{let p=n.a;n.a=0;try{return se(p,n.b,a,f)}finally{n.a=p}};return new Promise(i)}finally{n.a=0}},__wbg_new_with_byte_offset_and_length_9e1e664fe1a5d385:function(e,t,n){return new Uint8Array(e,t>>>0,n>>>0)},__wbg_new_with_length_4b57a7a5dc67221c:function(e){return new Uint8Array(e>>>0)},__wbg_new_with_opt_buffer_source_and_init_f51f4fbe98d29f2e:function(){return c(function(e,t){return new Response(e,t)},arguments)},__wbg_new_with_opt_readable_stream_and_init_def67835ea705e4d:function(){return c(function(e,t){return new Response(e,t)},arguments)},__wbg_new_with_opt_str_and_init_11bb6f5faad68c85:function(){return c(function(e,t,n){return new Response(e===0?void 0:w(e,t),n)},arguments)},__wbg_new_with_str_and_init_df876572184fe639:function(){return c(function(e,t,n){return new Request(w(e,t),n)},arguments)},__wbg_next_8cb028b6ba50743f:function(){return c(function(e){return e.next()},arguments)},__wbg_next_cfd0b146c9538df8:function(e){return e.next},__wbg_node_84ea875411254db1:function(e){return e.node},__wbg_now_bce4dc999095ea77:function(){return Date.now()},__wbg_process_44c7a14e11e9f69e:function(e){return e.process},__wbg_prototypesetcall_956c7493c68e29b4:function(e,t,n){Uint8Array.prototype.set.call(M(e,t),n)},__wbg_put_27edc2ab773a21be:function(){return c(function(e,t,n,i){return e.put(w(t,n),i)},arguments)},__wbg_queueMicrotask_4698f900840e3286:function(e){queueMicrotask(e)},__wbg_queueMicrotask_477a5533c7100338:function(e){return e.queueMicrotask},__wbg_randomFillSync_6c25eac9869eb53c:function(){return c(function(e,t){e.randomFillSync(t)},arguments)},__wbg_read_8426c146431f2905:function(e){return e.read()},__wbg_releaseLock_188846ef719acb10:function(e){e.releaseLock()},__wbg_require_b4edbdcf3e2a1ef0:function(){return c(function(){return module.require},arguments)},__wbg_resolve_0183de2e8c6b1d54:function(e){return Promise.resolve(e)},__wbg_respond_3cdb4cf32683fd79:function(){return c(function(e,t){e.respond(t>>>0)},arguments)},__wbg_setAlarm_c9229fb49928e287:function(){return c(function(e,t,n){return e.setAlarm(t,n)},arguments)},__wbg_set_3ab3dfede3bae139:function(){return c(function(e,t,n,i,u){e.set(w(t,n),w(i,u))},arguments)},__wbg_set_5f806304fb633ab3:function(e,t,n){return e.set(t,n)},__wbg_set_6be42768c690e380:function(e,t,n){e[t]=n},__wbg_set_86698c227e5b9dad:function(e,t,n){e.set(M(t,n))},__wbg_set_a6ba3ac0e634b822:function(){return c(function(e,t,n){return Reflect.set(e,t,n)},arguments)},__wbg_set_body_d1153b16a2b95ca1:function(e,t){e.body=t},__wbg_set_cache_5a01a8b5e6ca6cf2:function(e,t){e.cache=ue[t]},__wbg_set_criticalError_3b493d341796397b:function(e,t){e.criticalError=t!==0},__wbg_set_da33c120a6584674:function(e,t,n){e[t>>>0]=n},__wbg_set_headers_178db2684a27c112:function(e,t){e.headers=t},__wbg_set_headers_877ed41890d28af2:function(e,t){e.headers=t},__wbg_set_instanceId_2e5d2db011e9f6af:function(e,t){e.instanceId=t>>>0},__wbg_set_method_b4ede299b2064f37:function(e,t,n){e.method=w(t,n)},__wbg_set_redirect_97b881e7430f3438:function(e,t){e.redirect=ae[t]},__wbg_set_status_56097e6101a48227:function(e,t){e.status=t},__wbg_static_accessor_GLOBAL_60a4124bab7dcc9a:function(){let e=typeof global>"u"?null:global;return b(e)?0:d(e)},__wbg_static_accessor_GLOBAL_THIS_95ca6460658b5d13:function(){let e=typeof globalThis>"u"?null:globalThis;return b(e)?0:d(e)},__wbg_static_accessor_INIT_STATE_2271957acdc7fe6e:function(){return J},__wbg_static_accessor_SELF_4c95f759a91e9aae:function(){let e=typeof self>"u"?null:self;return b(e)?0:d(e)},__wbg_static_accessor_WINDOW_44b435597f9e9ee7:function(){let e=typeof window>"u"?null:window;return b(e)?0:d(e)},__wbg_status_9e6505cfa3e73a7c:function(e){return e.status},__wbg_storage_e350ca27f103b85e:function(){return c(function(e){return e.storage},arguments)},__wbg_subarray_42216645a367cd7a:function(e,t,n){return e.subarray(t>>>0,n>>>0)},__wbg_then_254bab9b266a77a5:function(e,t,n){return e.then(t,n)},__wbg_then_3ea18602c6a5123b:function(e,t){return e.then(t)},__wbg_toString_c3e29dc77827b5c7:function(){return c(function(e,t){let n=t.toString(),i=y(n,_.__wbindgen_malloc,_.__wbindgen_realloc),u=l;g().setInt32(e+4,u,!0),g().setInt32(e+0,i,!0)},arguments)},__wbg_transaction_afcd84163102ab81:function(){return c(function(e,t){return e.transaction(t)},arguments)},__wbg_url_74200ddca55ab638:function(e,t){let n=t.url,i=y(n,_.__wbindgen_malloc,_.__wbindgen_realloc),u=l;g().setInt32(e+4,u,!0),g().setInt32(e+0,i,!0)},__wbg_value_3d3defe09fb1ffca:function(e){return e.value},__wbg_versions_276b2795b1c6a219:function(e){return e.versions},__wbg_view_15fa5865c6b336e3:function(e){let t=e.view;return b(t)?0:d(t)},__wbg_webSocket_651aa54cd4107a97:function(){return c(function(e){let t=e.webSocket;return b(t)?0:d(t)},arguments)},__wbindgen_cast_0000000000000001:function(e,t){return C(e,t,ie)},__wbindgen_cast_0000000000000002:function(e,t){return C(e,t,_e)},__wbindgen_cast_0000000000000003:function(e,t){return C(e,t,oe)},__wbindgen_cast_0000000000000004:function(e){return e},__wbindgen_cast_0000000000000005:function(e){return e},__wbindgen_cast_0000000000000006:function(e,t){return M(e,t)},__wbindgen_cast_0000000000000007:function(e,t){return w(e,t)},__wbindgen_cast_0000000000000008:function(e){return BigInt.asUintN(64,e)},__wbindgen_init_externref_table:function(){let e=_.__wbindgen_externrefs,t=e.grow(4);e.set(0,void 0),e.set(t+0,void 0),e.set(t+1,null),e.set(t+2,!0),e.set(t+3,!1)}}}}function s(){if(ne){L();return}}function _e(r,e,t){s(),_.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___wasm_bindgen_68f389e705008bcb___JsValue______true_(r,e,t)}function ie(r,e,t){let n;return s(),n=_.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___worker_sys_a30a61bc3d743209___types__durable_object__transaction__DurableObjectTransaction__js_sys_95ed116970c1190___Promise__true_(r,e,t),n}function oe(r,e,t){let n;if(s(),n=_.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___wasm_bindgen_68f389e705008bcb___JsValue__core_ed718c3d60ebd546___result__Result_____wasm_bindgen_68f389e705008bcb___JsError___true_(r,e,t),n[1])throw he(n[0])}function se(r,e,t,n){s(),_.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___js_sys_95ed116970c1190___Function_fn_wasm_bindgen_68f389e705008bcb___JsValue_____wasm_bindgen_68f389e705008bcb___sys__Undefined___js_sys_95ed116970c1190___Function_fn_wasm_bindgen_68f389e705008bcb___JsValue_____wasm_bindgen_68f389e705008bcb___sys__Undefined_______true_(r,e,t,n)}var ce=["bytes"],ue=["default","no-store","reload","no-cache","force-cache","only-if-cached"],ae=["follow","error","manual"],o=0,be=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_containerstartupoptions_free(r,1)}),fe=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_intounderlyingbytesource_free(r,1)}),ge=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_intounderlyingsink_free(r,1)}),we=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_intounderlyingsource_free(r,1)}),$=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_minifyconfig_free(r,1)}),de=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_r2range_free(r,1)}),H=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_routerabrouterwalletdurableobject_free(r,1)}),G=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_routerabsigningworkerpresignsessiondurableobject_free(r,1)}),K=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_routerabtenantrootcreationdurableobject_free(r,1)});function d(r){let e=_.__externref_table_alloc();return _.__wbindgen_externrefs.set(e,r),e}var Q=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(r=>{r.instance===o&&_.__wbindgen_destroy_closure(r.a,r.b)});function V(r){let e=typeof r;if(e=="number"||e=="boolean"||r==null)return`${r}`;if(e=="string")return`"${r}"`;if(e=="symbol"){let i=r.description;return i==null?"Symbol":`Symbol(${i})`}if(e=="function"){let i=r.name;return typeof i=="string"&&i.length>0?`Function(${i})`:"Function"}if(Array.isArray(r)){let i=r.length,u="[";i>0&&(u+=V(r[0]));for(let a=1;a<i;a++)u+=", "+V(r[a]);return u+="]",u}let t=/\[object ([^\]]+)\]/.exec(toString.call(r)),n;if(t&&t.length>1)n=t[1];else return toString.call(r);if(n=="Object")try{return"Object("+JSON.stringify(r)+")"}catch{return"Object"}return r instanceof Error?`${r.name}: ${r.message}
2
+ ${r.stack}`:n}function le(r,e){r=r>>>0;let t=g(),n=[];for(let i=r;i<r+4*e;i+=4)n.push(_.__wbindgen_externrefs.get(t.getUint32(i,!0)));return _.__externref_drop_slice(r,e),n}function M(r,e){return r=r>>>0,P().subarray(r/1,r/1+e)}var v=null;function g(){return(v===null||v.buffer.detached===!0||v.buffer.detached===void 0&&v.buffer!==_.memory.buffer)&&(v=new DataView(_.memory.buffer)),v}function w(r,e){return ye(r>>>0,e)}var O=null;function P(){return(O===null||O.byteLength===0)&&(O=new Uint8Array(_.memory.buffer)),O}function c(r,e){try{return r.apply(this,e)}catch(t){let n=d(t);_.__wbindgen_exn_store(n)}}function b(r){return r==null}function C(r,e,t){let n={a:r,b:e,cnt:1,instance:o},i=(...u)=>{if(n.instance!==o)throw new Error("Cannot invoke closure from previous WASM instance");n.cnt++;let a=n.a;n.a=0;try{return t(a,n.b,...u)}finally{n.a=a,i._wbg_cb_unref()}};return i._wbg_cb_unref=()=>{--n.cnt===0&&(_.__wbindgen_destroy_closure(n.a,n.b),n.a=0,Q.unregister(n))},Q.register(i,n,n),i}function pe(r,e){let t=e(r.length*4,4)>>>0;for(let n=0;n<r.length;n++){let i=d(r[n]);g().setUint32(t+4*n,i,!0)}return l=r.length,t}function y(r,e,t){if(t===void 0){let f=z.encode(r),p=e(f.length,1)>>>0;return P().subarray(p,p+f.length).set(f),l=f.length,p}let n=r.length,i=e(n,1)>>>0,u=P(),a=0;for(;a<n;a++){let f=r.charCodeAt(a);if(f>127)break;u[i+a]=f}if(a!==n){a!==0&&(r=r.slice(a)),i=t(i,n,n=a+r.length*3,1)>>>0;let f=P().subarray(i+a,i+n),p=z.encodeInto(r,f);a+=p.written,i=t(i,n,a,1)>>>0}return l=a,i}var ne=!1;function he(r){let e=_.__wbindgen_externrefs.get(r);return _.__externref_table_dealloc(r),e}var re=new TextDecoder("utf-8",{ignoreBOM:!0,fatal:!0});re.decode();function ye(r,e){return re.decode(P().subarray(r,r+e))}var z=new TextEncoder;"encodeInto"in z||(z.encodeInto=function(r,e){let t=z.encode(r);return e.set(t),{read:r.length,written:t.length}});var l=0,q=new WebAssembly.Instance(X,te()),_=q.exports;_.__wbindgen_start();Error.stackTraceLimit=100;var m=Y();function B(){m.criticalError&&(console.log("Reinitializing Wasm application"),L(),m.criticalError=!1,m.instanceId++)}addEventListener("error",r=>{N(r.error)});function N(r){r instanceof WebAssembly.RuntimeError&&(console.error("Critical",r),m.criticalError=!0)}var T=class extends ve{};T.prototype.fetch=function(e){return Z.call(this,e,this.env,this.ctx)};T.prototype.init=ee;var je={set:(r,e,t,n)=>Reflect.set(r.instance,e,t,n),has:(r,e)=>Reflect.has(r.instance,e),deleteProperty:(r,e)=>Reflect.deleteProperty(r.instance,e),apply:(r,e,t)=>Reflect.apply(r.instance,e,t),construct:(r,e,t)=>Reflect.construct(r.instance,e,t),getPrototypeOf:r=>Reflect.getPrototypeOf(r.instance),setPrototypeOf:(r,e)=>Reflect.setPrototypeOf(r.instance,e),isExtensible:r=>Reflect.isExtensible(r.instance),preventExtensions:r=>Reflect.preventExtensions(r.instance),getOwnPropertyDescriptor:(r,e)=>Reflect.getOwnPropertyDescriptor(r.instance,e),defineProperty:(r,e,t)=>Reflect.defineProperty(r.instance,e,t),ownKeys:r=>Reflect.ownKeys(r.instance)},h={construct(r,e,t){try{B();let n={instance:Reflect.construct(r,e,t),instanceId:m.instanceId,ctor:r,args:e,newTarget:t};return new Proxy(n,{...je,get(i,u,a){i.instanceId!==m.instanceId&&(i.instance=Reflect.construct(i.ctor,i.args,i.newTarget),i.instanceId=m.instanceId);let f=Reflect.get(i.instance,u,a);return typeof f!="function"?f:f.constructor===Function?new Proxy(f,{apply(p,U,D){B();try{return p.apply(U,D)}catch(A){throw N(A),A}}}):new Proxy(f,{async apply(p,U,D){B();try{return await p.apply(U,D)}catch(A){throw N(A),A}}})}})}catch(n){throw m.criticalError=!0,n}}},Fe=new Proxy(T,h),Se=new Proxy(x,h),ke=new Proxy(I,h),We=new Proxy(R,h),Ae=new Proxy(E,h),Oe=new Proxy(j,h),Pe=new Proxy(F,h),ze=new Proxy(S,h),Te=new Proxy(k,h),Ue=new Proxy(W,h);export{Se as ContainerStartupOptions,ke as IntoUnderlyingByteSource,We as IntoUnderlyingSink,Ae as IntoUnderlyingSource,Oe as MinifyConfig,Pe as R2Range,ze as RouterAbRouterWalletDurableObject,Te as RouterAbSigningWorkerPresignSessionDurableObject,Ue as RouterAbTenantRootCreationDurableObject,Fe as default};
@@ -0,0 +1,20 @@
1
+ -- Abandoned tenant-root creation ceremonies. When the Router abandons an
2
+ -- uncommitted creation, this role's pending initial material for the
3
+ -- ceremony is removed and a tombstone is written in the same batch. The
4
+ -- initial pending insert refuses a lineage with a tombstone, so a creation
5
+ -- command admitted before the ceremony window closed cannot write its row
6
+ -- after the cleanup.
7
+ CREATE TABLE tenant_root_creation_tombstones (
8
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
9
+ length(tenant_identity_digest_hex) = 64
10
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
11
+ ),
12
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
13
+ role TEXT NOT NULL CHECK (role = 'deriver_a'),
14
+ session_id_hex TEXT NOT NULL CHECK (
15
+ length(session_id_hex) = 32
16
+ AND session_id_hex NOT GLOB '*[^0-9a-f]*'
17
+ ),
18
+ created_at_ms INTEGER NOT NULL CHECK (created_at_ms > 0),
19
+ PRIMARY KEY (tenant_identity_digest_hex, custody_lineage_b64u, role)
20
+ );
@@ -0,0 +1,32 @@
1
+ -- Root-using work admitted on an exact tenant-root epoch. An operation,
2
+ -- named by its authenticated custody binding, is admitted only while the
3
+ -- binding's epoch is active in this store: the insert is conditional on the
4
+ -- active row, so it is ordered exactly against the refresh swap that
5
+ -- retires the epoch. After the swap the retired share is readable only for
6
+ -- an operation admitted here before it, and an unused binding for the
7
+ -- retired epoch starts nothing. Admissions are the obligations a later
8
+ -- retirement must see settled before any erasure.
9
+ CREATE TABLE tenant_root_root_use_admissions (
10
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
11
+ length(tenant_identity_digest_hex) = 64
12
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
13
+ ),
14
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
15
+ role TEXT NOT NULL CHECK (role = 'deriver_a'),
16
+ custody_binding_digest_hex TEXT NOT NULL CHECK (
17
+ length(custody_binding_digest_hex) = 64
18
+ AND custody_binding_digest_hex NOT GLOB '*[^0-9a-f]*'
19
+ ),
20
+ tenant_root_share_epoch INTEGER NOT NULL CHECK (tenant_root_share_epoch > 0),
21
+ activation_receipt_digest_hex TEXT NOT NULL CHECK (
22
+ length(activation_receipt_digest_hex) = 64
23
+ AND activation_receipt_digest_hex NOT GLOB '*[^0-9a-f]*'
24
+ ),
25
+ admitted_at_ms INTEGER NOT NULL CHECK (admitted_at_ms > 0),
26
+ PRIMARY KEY (
27
+ tenant_identity_digest_hex,
28
+ custody_lineage_b64u,
29
+ role,
30
+ custody_binding_digest_hex
31
+ )
32
+ );
@@ -0,0 +1,24 @@
1
+ -- Refresh attempts replaced by a later attempt of the same epoch transition.
2
+ -- The Router abandons an attempt whose ceremony window closed before it was
3
+ -- committed, and reserves the next one. That next attempt, confirmed as the
4
+ -- Router's current attempt, records each older attempt here in the same batch
5
+ -- that replaces the pending row the older attempt left. A superseded attempt's
6
+ -- own checkpoints refuse from then on, so it cannot write that row back, and
7
+ -- only its exact backup and canary may be replaced at the epoch's coordinates.
8
+ CREATE TABLE tenant_root_refresh_supersessions (
9
+ replay_key_digest_hex TEXT PRIMARY KEY CHECK (
10
+ length(replay_key_digest_hex) = 64
11
+ AND replay_key_digest_hex NOT GLOB '*[^0-9a-f]*'
12
+ ),
13
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
14
+ length(tenant_identity_digest_hex) = 64
15
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
16
+ ),
17
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
18
+ role TEXT NOT NULL CHECK (role = 'deriver_a'),
19
+ superseded_by_replay_key_digest_hex TEXT NOT NULL CHECK (
20
+ length(superseded_by_replay_key_digest_hex) = 64
21
+ AND superseded_by_replay_key_digest_hex NOT GLOB '*[^0-9a-f]*'
22
+ ),
23
+ superseded_at_ms INTEGER NOT NULL CHECK (superseded_at_ms > 0)
24
+ );
@@ -0,0 +1,56 @@
1
+ -- Root-use admissions keyed by execution attempt (docs/refactor-150-admission-identity.md).
2
+ -- An Ed25519 Yao attempt is its canonical pair session, the pair stores' own
3
+ -- key, and stays on the epoch it was admitted on. An ECDSA attempt is its
4
+ -- operation on one epoch. Every other custody-binding field but the window is
5
+ -- compared through attempt_digest_hex; the first admitted binding's digest and
6
+ -- window are kept. Status moves once from 'admitted' when settlement lands.
7
+ -- Test wallets are disposable, so the table is recreated rather than migrated.
8
+ DROP TABLE tenant_root_root_use_admissions;
9
+
10
+ CREATE TABLE tenant_root_root_use_admissions (
11
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
12
+ length(tenant_identity_digest_hex) = 64
13
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
14
+ ),
15
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
16
+ role TEXT NOT NULL CHECK (role = 'deriver_a'),
17
+ attempt_kind TEXT NOT NULL CHECK (
18
+ attempt_kind IN ('ed25519_yao_pair_session', 'ecdsa_operation')
19
+ ),
20
+ attempt_key_hex TEXT NOT NULL CHECK (
21
+ length(attempt_key_hex) BETWEEN 32 AND 96
22
+ AND attempt_key_hex NOT GLOB '*[^0-9a-f]*'
23
+ ),
24
+ tenant_root_share_epoch INTEGER NOT NULL CHECK (tenant_root_share_epoch > 0),
25
+ activation_receipt_digest_hex TEXT NOT NULL CHECK (
26
+ length(activation_receipt_digest_hex) = 64
27
+ AND activation_receipt_digest_hex NOT GLOB '*[^0-9a-f]*'
28
+ ),
29
+ attempt_digest_hex TEXT NOT NULL CHECK (
30
+ length(attempt_digest_hex) = 64
31
+ AND attempt_digest_hex NOT GLOB '*[^0-9a-f]*'
32
+ ),
33
+ first_binding_digest_hex TEXT NOT NULL CHECK (
34
+ length(first_binding_digest_hex) = 64
35
+ AND first_binding_digest_hex NOT GLOB '*[^0-9a-f]*'
36
+ ),
37
+ issued_at_ms INTEGER NOT NULL CHECK (issued_at_ms > 0),
38
+ expires_at_ms INTEGER NOT NULL CHECK (expires_at_ms > issued_at_ms),
39
+ status TEXT NOT NULL CHECK (status IN ('admitted', 'settled', 'cancelled')),
40
+ admitted_at_ms INTEGER NOT NULL CHECK (admitted_at_ms > 0),
41
+ PRIMARY KEY (
42
+ tenant_identity_digest_hex,
43
+ custody_lineage_b64u,
44
+ role,
45
+ attempt_kind,
46
+ attempt_key_hex
47
+ )
48
+ );
49
+
50
+ CREATE INDEX tenant_root_root_use_admissions_by_epoch
51
+ ON tenant_root_root_use_admissions (
52
+ tenant_identity_digest_hex,
53
+ custody_lineage_b64u,
54
+ tenant_root_share_epoch,
55
+ status
56
+ );
@@ -0,0 +1,5 @@
1
+ -- A pair store settles an admission by its attempt when the pair's record
2
+ -- becomes terminal (docs/refactor-150-admission-identity.md). The lookup names
3
+ -- role, attempt kind and key; this index serves it.
4
+ CREATE INDEX tenant_root_root_use_admissions_by_attempt
5
+ ON tenant_root_root_use_admissions (role, attempt_kind, attempt_key_hex);
@@ -0,0 +1,64 @@
1
+ -- Root-use admissions gain the executor's claim and the pair's owner
2
+ -- (docs/refactor-150-admission-identity.md).
3
+ -- - 'claimed': Deriver A's executor claimed its pair, the last durable step
4
+ -- before its first protocol message. A claimed admission settles only when
5
+ -- its pair completes. Recovery never cancels it.
6
+ -- - pair_object_name: the wallet object that holds the attempt's pair.
7
+ -- NULL when the pair is in this role store; ECDSA admissions have no pair.
8
+ -- Test wallets are disposable, so the table is recreated rather than migrated.
9
+ DROP TABLE tenant_root_root_use_admissions;
10
+
11
+ CREATE TABLE tenant_root_root_use_admissions (
12
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
13
+ length(tenant_identity_digest_hex) = 64
14
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
15
+ ),
16
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
17
+ role TEXT NOT NULL CHECK (role = 'deriver_a'),
18
+ attempt_kind TEXT NOT NULL CHECK (
19
+ attempt_kind IN ('ed25519_yao_pair_session', 'ecdsa_operation')
20
+ ),
21
+ attempt_key_hex TEXT NOT NULL CHECK (
22
+ length(attempt_key_hex) BETWEEN 32 AND 96
23
+ AND attempt_key_hex NOT GLOB '*[^0-9a-f]*'
24
+ ),
25
+ tenant_root_share_epoch INTEGER NOT NULL CHECK (tenant_root_share_epoch > 0),
26
+ activation_receipt_digest_hex TEXT NOT NULL CHECK (
27
+ length(activation_receipt_digest_hex) = 64
28
+ AND activation_receipt_digest_hex NOT GLOB '*[^0-9a-f]*'
29
+ ),
30
+ attempt_digest_hex TEXT NOT NULL CHECK (
31
+ length(attempt_digest_hex) = 64
32
+ AND attempt_digest_hex NOT GLOB '*[^0-9a-f]*'
33
+ ),
34
+ first_binding_digest_hex TEXT NOT NULL CHECK (
35
+ length(first_binding_digest_hex) = 64
36
+ AND first_binding_digest_hex NOT GLOB '*[^0-9a-f]*'
37
+ ),
38
+ issued_at_ms INTEGER NOT NULL CHECK (issued_at_ms > 0),
39
+ expires_at_ms INTEGER NOT NULL CHECK (expires_at_ms > issued_at_ms),
40
+ status TEXT NOT NULL CHECK (status IN ('admitted', 'claimed', 'settled', 'cancelled')),
41
+ admitted_at_ms INTEGER NOT NULL CHECK (admitted_at_ms > 0),
42
+ pair_object_name TEXT CHECK (
43
+ pair_object_name IS NULL
44
+ OR (attempt_kind = 'ed25519_yao_pair_session' AND length(pair_object_name) BETWEEN 1 AND 128)
45
+ ),
46
+ PRIMARY KEY (
47
+ tenant_identity_digest_hex,
48
+ custody_lineage_b64u,
49
+ role,
50
+ attempt_kind,
51
+ attempt_key_hex
52
+ )
53
+ );
54
+
55
+ CREATE INDEX tenant_root_root_use_admissions_by_epoch
56
+ ON tenant_root_root_use_admissions (
57
+ tenant_identity_digest_hex,
58
+ custody_lineage_b64u,
59
+ tenant_root_share_epoch,
60
+ status
61
+ );
62
+
63
+ CREATE INDEX tenant_root_root_use_admissions_by_attempt
64
+ ON tenant_root_root_use_admissions (role, attempt_kind, attempt_key_hex);
@@ -0,0 +1,12 @@
1
+ -- A recovery set's retention key for this role, kept in the role store and
2
+ -- sealed to the role's own key, by a host without a destructible key provider
3
+ -- (the VM). Cloudflare keeps the key in Google Cloud KMS, and this table stays
4
+ -- empty there. Deleting a row is the only destruction such a host offers: a
5
+ -- snapshot or backup of the store may still hold it.
6
+ CREATE TABLE tenant_root_recovery_retention_keys (
7
+ recovery_set_id_b64u TEXT NOT NULL CHECK (length(recovery_set_id_b64u) = 22),
8
+ role TEXT NOT NULL CHECK (role = 'deriver_a'),
9
+ key_version INTEGER NOT NULL CHECK (key_version > 0),
10
+ sealed_key_json TEXT NOT NULL CHECK (length(sealed_key_json) BETWEEN 1 AND 4096),
11
+ PRIMARY KEY (recovery_set_id_b64u, key_version)
12
+ );
@@ -0,0 +1,20 @@
1
+ -- Abandoned tenant-root creation ceremonies. When the Router abandons an
2
+ -- uncommitted creation, this role's pending initial material for the
3
+ -- ceremony is removed and a tombstone is written in the same batch. The
4
+ -- initial pending insert refuses a lineage with a tombstone, so a creation
5
+ -- command admitted before the ceremony window closed cannot write its row
6
+ -- after the cleanup.
7
+ CREATE TABLE tenant_root_creation_tombstones (
8
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
9
+ length(tenant_identity_digest_hex) = 64
10
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
11
+ ),
12
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
13
+ role TEXT NOT NULL CHECK (role = 'deriver_b'),
14
+ session_id_hex TEXT NOT NULL CHECK (
15
+ length(session_id_hex) = 32
16
+ AND session_id_hex NOT GLOB '*[^0-9a-f]*'
17
+ ),
18
+ created_at_ms INTEGER NOT NULL CHECK (created_at_ms > 0),
19
+ PRIMARY KEY (tenant_identity_digest_hex, custody_lineage_b64u, role)
20
+ );
@@ -0,0 +1,32 @@
1
+ -- Root-using work admitted on an exact tenant-root epoch. An operation,
2
+ -- named by its authenticated custody binding, is admitted only while the
3
+ -- binding's epoch is active in this store: the insert is conditional on the
4
+ -- active row, so it is ordered exactly against the refresh swap that
5
+ -- retires the epoch. After the swap the retired share is readable only for
6
+ -- an operation admitted here before it, and an unused binding for the
7
+ -- retired epoch starts nothing. Admissions are the obligations a later
8
+ -- retirement must see settled before any erasure.
9
+ CREATE TABLE tenant_root_root_use_admissions (
10
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
11
+ length(tenant_identity_digest_hex) = 64
12
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
13
+ ),
14
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
15
+ role TEXT NOT NULL CHECK (role = 'deriver_b'),
16
+ custody_binding_digest_hex TEXT NOT NULL CHECK (
17
+ length(custody_binding_digest_hex) = 64
18
+ AND custody_binding_digest_hex NOT GLOB '*[^0-9a-f]*'
19
+ ),
20
+ tenant_root_share_epoch INTEGER NOT NULL CHECK (tenant_root_share_epoch > 0),
21
+ activation_receipt_digest_hex TEXT NOT NULL CHECK (
22
+ length(activation_receipt_digest_hex) = 64
23
+ AND activation_receipt_digest_hex NOT GLOB '*[^0-9a-f]*'
24
+ ),
25
+ admitted_at_ms INTEGER NOT NULL CHECK (admitted_at_ms > 0),
26
+ PRIMARY KEY (
27
+ tenant_identity_digest_hex,
28
+ custody_lineage_b64u,
29
+ role,
30
+ custody_binding_digest_hex
31
+ )
32
+ );
@@ -0,0 +1,24 @@
1
+ -- Refresh attempts replaced by a later attempt of the same epoch transition.
2
+ -- The Router abandons an attempt whose ceremony window closed before it was
3
+ -- committed, and reserves the next one. That next attempt, confirmed as the
4
+ -- Router's current attempt, records each older attempt here in the same batch
5
+ -- that replaces the pending row the older attempt left. A superseded attempt's
6
+ -- own checkpoints refuse from then on, so it cannot write that row back, and
7
+ -- only its exact backup and canary may be replaced at the epoch's coordinates.
8
+ CREATE TABLE tenant_root_refresh_supersessions (
9
+ replay_key_digest_hex TEXT PRIMARY KEY CHECK (
10
+ length(replay_key_digest_hex) = 64
11
+ AND replay_key_digest_hex NOT GLOB '*[^0-9a-f]*'
12
+ ),
13
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
14
+ length(tenant_identity_digest_hex) = 64
15
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
16
+ ),
17
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
18
+ role TEXT NOT NULL CHECK (role = 'deriver_b'),
19
+ superseded_by_replay_key_digest_hex TEXT NOT NULL CHECK (
20
+ length(superseded_by_replay_key_digest_hex) = 64
21
+ AND superseded_by_replay_key_digest_hex NOT GLOB '*[^0-9a-f]*'
22
+ ),
23
+ superseded_at_ms INTEGER NOT NULL CHECK (superseded_at_ms > 0)
24
+ );
@@ -0,0 +1,56 @@
1
+ -- Root-use admissions keyed by execution attempt (docs/refactor-150-admission-identity.md).
2
+ -- An Ed25519 Yao attempt is its canonical pair session, the pair stores' own
3
+ -- key, and stays on the epoch it was admitted on. An ECDSA attempt is its
4
+ -- operation on one epoch. Every other custody-binding field but the window is
5
+ -- compared through attempt_digest_hex; the first admitted binding's digest and
6
+ -- window are kept. Status moves once from 'admitted' when settlement lands.
7
+ -- Test wallets are disposable, so the table is recreated rather than migrated.
8
+ DROP TABLE tenant_root_root_use_admissions;
9
+
10
+ CREATE TABLE tenant_root_root_use_admissions (
11
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
12
+ length(tenant_identity_digest_hex) = 64
13
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
14
+ ),
15
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
16
+ role TEXT NOT NULL CHECK (role = 'deriver_b'),
17
+ attempt_kind TEXT NOT NULL CHECK (
18
+ attempt_kind IN ('ed25519_yao_pair_session', 'ecdsa_operation')
19
+ ),
20
+ attempt_key_hex TEXT NOT NULL CHECK (
21
+ length(attempt_key_hex) BETWEEN 32 AND 96
22
+ AND attempt_key_hex NOT GLOB '*[^0-9a-f]*'
23
+ ),
24
+ tenant_root_share_epoch INTEGER NOT NULL CHECK (tenant_root_share_epoch > 0),
25
+ activation_receipt_digest_hex TEXT NOT NULL CHECK (
26
+ length(activation_receipt_digest_hex) = 64
27
+ AND activation_receipt_digest_hex NOT GLOB '*[^0-9a-f]*'
28
+ ),
29
+ attempt_digest_hex TEXT NOT NULL CHECK (
30
+ length(attempt_digest_hex) = 64
31
+ AND attempt_digest_hex NOT GLOB '*[^0-9a-f]*'
32
+ ),
33
+ first_binding_digest_hex TEXT NOT NULL CHECK (
34
+ length(first_binding_digest_hex) = 64
35
+ AND first_binding_digest_hex NOT GLOB '*[^0-9a-f]*'
36
+ ),
37
+ issued_at_ms INTEGER NOT NULL CHECK (issued_at_ms > 0),
38
+ expires_at_ms INTEGER NOT NULL CHECK (expires_at_ms > issued_at_ms),
39
+ status TEXT NOT NULL CHECK (status IN ('admitted', 'settled', 'cancelled')),
40
+ admitted_at_ms INTEGER NOT NULL CHECK (admitted_at_ms > 0),
41
+ PRIMARY KEY (
42
+ tenant_identity_digest_hex,
43
+ custody_lineage_b64u,
44
+ role,
45
+ attempt_kind,
46
+ attempt_key_hex
47
+ )
48
+ );
49
+
50
+ CREATE INDEX tenant_root_root_use_admissions_by_epoch
51
+ ON tenant_root_root_use_admissions (
52
+ tenant_identity_digest_hex,
53
+ custody_lineage_b64u,
54
+ tenant_root_share_epoch,
55
+ status
56
+ );
@@ -0,0 +1,5 @@
1
+ -- A pair store settles an admission by its attempt when the pair's record
2
+ -- becomes terminal (docs/refactor-150-admission-identity.md). The lookup names
3
+ -- role, attempt kind and key; this index serves it.
4
+ CREATE INDEX tenant_root_root_use_admissions_by_attempt
5
+ ON tenant_root_root_use_admissions (role, attempt_kind, attempt_key_hex);
@@ -0,0 +1,64 @@
1
+ -- Root-use admissions gain the executor's claim and the pair's owner
2
+ -- (docs/refactor-150-admission-identity.md).
3
+ -- - 'claimed': Deriver A's executor claimed its pair, the last durable step
4
+ -- before its first protocol message. A claimed admission settles only when
5
+ -- its pair completes. Recovery never cancels it.
6
+ -- - pair_object_name: the wallet object that holds the attempt's pair.
7
+ -- NULL when the pair is in this role store; ECDSA admissions have no pair.
8
+ -- Test wallets are disposable, so the table is recreated rather than migrated.
9
+ DROP TABLE tenant_root_root_use_admissions;
10
+
11
+ CREATE TABLE tenant_root_root_use_admissions (
12
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
13
+ length(tenant_identity_digest_hex) = 64
14
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
15
+ ),
16
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
17
+ role TEXT NOT NULL CHECK (role = 'deriver_b'),
18
+ attempt_kind TEXT NOT NULL CHECK (
19
+ attempt_kind IN ('ed25519_yao_pair_session', 'ecdsa_operation')
20
+ ),
21
+ attempt_key_hex TEXT NOT NULL CHECK (
22
+ length(attempt_key_hex) BETWEEN 32 AND 96
23
+ AND attempt_key_hex NOT GLOB '*[^0-9a-f]*'
24
+ ),
25
+ tenant_root_share_epoch INTEGER NOT NULL CHECK (tenant_root_share_epoch > 0),
26
+ activation_receipt_digest_hex TEXT NOT NULL CHECK (
27
+ length(activation_receipt_digest_hex) = 64
28
+ AND activation_receipt_digest_hex NOT GLOB '*[^0-9a-f]*'
29
+ ),
30
+ attempt_digest_hex TEXT NOT NULL CHECK (
31
+ length(attempt_digest_hex) = 64
32
+ AND attempt_digest_hex NOT GLOB '*[^0-9a-f]*'
33
+ ),
34
+ first_binding_digest_hex TEXT NOT NULL CHECK (
35
+ length(first_binding_digest_hex) = 64
36
+ AND first_binding_digest_hex NOT GLOB '*[^0-9a-f]*'
37
+ ),
38
+ issued_at_ms INTEGER NOT NULL CHECK (issued_at_ms > 0),
39
+ expires_at_ms INTEGER NOT NULL CHECK (expires_at_ms > issued_at_ms),
40
+ status TEXT NOT NULL CHECK (status IN ('admitted', 'claimed', 'settled', 'cancelled')),
41
+ admitted_at_ms INTEGER NOT NULL CHECK (admitted_at_ms > 0),
42
+ pair_object_name TEXT CHECK (
43
+ pair_object_name IS NULL
44
+ OR (attempt_kind = 'ed25519_yao_pair_session' AND length(pair_object_name) BETWEEN 1 AND 128)
45
+ ),
46
+ PRIMARY KEY (
47
+ tenant_identity_digest_hex,
48
+ custody_lineage_b64u,
49
+ role,
50
+ attempt_kind,
51
+ attempt_key_hex
52
+ )
53
+ );
54
+
55
+ CREATE INDEX tenant_root_root_use_admissions_by_epoch
56
+ ON tenant_root_root_use_admissions (
57
+ tenant_identity_digest_hex,
58
+ custody_lineage_b64u,
59
+ tenant_root_share_epoch,
60
+ status
61
+ );
62
+
63
+ CREATE INDEX tenant_root_root_use_admissions_by_attempt
64
+ ON tenant_root_root_use_admissions (role, attempt_kind, attempt_key_hex);
@@ -0,0 +1,12 @@
1
+ -- A recovery set's retention key for this role, kept in the role store and
2
+ -- sealed to the role's own key, by a host without a destructible key provider
3
+ -- (the VM). Cloudflare keeps the key in Google Cloud KMS, and this table stays
4
+ -- empty there. Deleting a row is the only destruction such a host offers: a
5
+ -- snapshot or backup of the store may still hold it.
6
+ CREATE TABLE tenant_root_recovery_retention_keys (
7
+ recovery_set_id_b64u TEXT NOT NULL CHECK (length(recovery_set_id_b64u) = 22),
8
+ role TEXT NOT NULL CHECK (role = 'deriver_b'),
9
+ key_version INTEGER NOT NULL CHECK (key_version > 0),
10
+ sealed_key_json TEXT NOT NULL CHECK (length(sealed_key_json) BETWEEN 1 AND 4096),
11
+ PRIMARY KEY (recovery_set_id_b64u, key_version)
12
+ );