@seams/wallet-server 0.6.2 → 0.7.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/artifact-manifest.json +147 -32
- package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/router/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/router/index.js +2 -2
- package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
- package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
- package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
- package/cloudflare-router-ab/migrations/deriver-a/0012_tenant_root_creation_tombstones.sql +20 -0
- package/cloudflare-router-ab/migrations/deriver-a/0013_tenant_root_root_use_admissions.sql +32 -0
- package/cloudflare-router-ab/migrations/deriver-a/0014_tenant_root_refresh_supersessions.sql +24 -0
- package/cloudflare-router-ab/migrations/deriver-a/0015_tenant_root_root_use_attempts.sql +56 -0
- package/cloudflare-router-ab/migrations/deriver-a/0016_tenant_root_root_use_admission_settlement.sql +5 -0
- package/cloudflare-router-ab/migrations/deriver-a/0017_tenant_root_root_use_admission_claims.sql +64 -0
- package/cloudflare-router-ab/migrations/deriver-a/0018_tenant_root_recovery_retention_keys.sql +12 -0
- package/cloudflare-router-ab/migrations/deriver-b/0012_tenant_root_creation_tombstones.sql +20 -0
- package/cloudflare-router-ab/migrations/deriver-b/0013_tenant_root_root_use_admissions.sql +32 -0
- package/cloudflare-router-ab/migrations/deriver-b/0014_tenant_root_refresh_supersessions.sql +24 -0
- package/cloudflare-router-ab/migrations/deriver-b/0015_tenant_root_root_use_attempts.sql +56 -0
- package/cloudflare-router-ab/migrations/deriver-b/0016_tenant_root_root_use_admission_settlement.sql +5 -0
- package/cloudflare-router-ab/migrations/deriver-b/0017_tenant_root_root_use_admission_claims.sql +64 -0
- package/cloudflare-router-ab/migrations/deriver-b/0018_tenant_root_recovery_retention_keys.sql +12 -0
- package/cloudflare-router-ab/scripts/bootstrap-local-tenant-root.mjs +81 -16
- package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +102 -9
- package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +4 -1
- package/cloudflare-router-ab/wrangler.deriver-a.toml +24 -0
- package/cloudflare-router-ab/wrangler.router.toml +13 -0
- package/dist/esm/authorization/capabilityPolicy.js +1 -1
- package/dist/esm/authorization/domain.js +2 -2
- package/dist/esm/authorization/factorEvidence.js +6 -100
- package/dist/esm/authorization/service.js +34 -2
- package/dist/esm/authorization/vaultProxyUse.js +3 -4
- package/dist/esm/cloud-host.js +16 -11
- package/dist/esm/core/EmailOtpRecords.js +19 -1
- package/dist/esm/core/EmailOtpStores.js +323 -924
- package/dist/esm/core/IdentityStore.js +44 -235
- package/dist/esm/core/NearPublicKeyStore.js +21 -63
- package/dist/esm/core/RegistrationCeremonyStore.js +3 -1793
- package/dist/esm/core/ThresholdService/config.js +1 -82
- package/dist/esm/core/ThresholdService/kv.js +3 -3
- package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +37 -5
- package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.js +4 -74
- package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +15 -51
- package/dist/esm/core/ThresholdService/stores/KeyStore.js +3 -3
- package/dist/esm/core/ThresholdService/stores/SessionStore.js +5 -81
- package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +185 -290
- package/dist/esm/core/ThresholdService/validation.js +18 -230
- package/dist/esm/core/WalletAuthMethodStore.js +22 -79
- package/dist/esm/core/WalletStore.js +58 -185
- package/dist/esm/core/WebAuthnAuthenticatorStore.js +57 -340
- package/dist/esm/core/WebAuthnCredentialBindingStore.js +90 -369
- package/dist/esm/core/WebAuthnLoginChallengeStore.js +17 -397
- package/dist/esm/core/WebAuthnSyncChallengeStore.js +17 -397
- package/dist/esm/core/authService/AuthService.js +2 -19
- package/dist/esm/core/authService/emailOtpChallengeProof.js +1 -1
- package/dist/esm/core/authService/emailOtpChallenges.js +1 -1
- package/dist/esm/core/authService/emailOtpConfig.js +1 -32
- package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +6 -153
- package/dist/esm/core/authService/googleEmailOtpRegistration.js +1 -1
- package/dist/esm/core/authService/nearPrivateKeySigning.js +7 -15
- package/dist/esm/core/authService/nearTransactions.js +2 -1
- package/dist/esm/core/authService/oidcVerification.js +3 -4
- package/dist/esm/core/authService/rateLimits.js +1 -31
- package/dist/esm/core/authService/registrationThresholdHelpers.js +2 -103
- package/dist/esm/core/authService/storeRegistry.js +2 -13
- package/dist/esm/core/authService/thresholdEcdsaKeyInventory.js +4 -5
- package/dist/esm/core/authService/webauthn.js +15 -50
- package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -6
- package/dist/esm/core/authService/webauthnVerificationOutcomes.js +60 -0
- package/dist/esm/core/authService/webauthnWalletBinding.js +2 -122
- package/dist/esm/core/d1IdentityStore.js +32 -66
- package/dist/esm/core/d1TenantStore.js +82 -0
- package/dist/esm/core/d1WalletAuthMethodStore.js +92 -143
- package/dist/esm/core/d1WalletStore.js +14 -12
- package/dist/esm/core/deviceLinking/linkedDeviceEmailOtpGrant.js +10 -8
- package/dist/esm/core/deviceLinking/linkedDeviceManagement.js +25 -3
- package/dist/esm/core/deviceLinking/linkedDeviceSession.js +6 -895
- package/dist/esm/core/deviceLinking/linkedDeviceSessionApproval.js +102 -0
- package/dist/esm/core/deviceLinking/linkedDeviceSessionRecord.js +668 -0
- package/dist/esm/core/emailOtpD1Statements.js +383 -0
- package/dist/esm/core/hostedAccountIds.js +2 -2
- package/dist/esm/core/keyMaterialBrands.js +2 -48
- package/dist/esm/core/nearRelayerAccountProvisioning.js +25 -150
- package/dist/esm/core/nearSignerWasmRuntime.js +1 -4
- package/dist/esm/core/rpcClients/near/NearClient.js +15 -218
- package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +1 -1
- package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +2 -4
- package/dist/esm/core/signingLanes/LaneLifecycleStore.js +0 -24
- package/dist/esm/core/signingLanes/WalletExecutionLaneProjection.js +5 -5
- package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +3 -8
- package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +1 -4
- package/dist/esm/core/storeBackends.js +208 -0
- package/dist/esm/core/thresholdEcdsaChainTarget.js +1 -7
- package/dist/esm/core/webAuthnD1Statements.js +92 -0
- package/dist/esm/core/webAuthnStoreBackends.js +198 -0
- package/dist/esm/hosted-wallet-gateway.js +33 -16
- package/dist/esm/index.js +2 -2
- package/dist/esm/local-hosted-wallet-gateway-worker.js +2 -23
- package/dist/esm/localHostedWalletGatewayHandler.js +299 -0
- package/dist/esm/localIntendedEcdsaFinalizeFault.js +85 -0
- package/dist/esm/localIntendedLinkExecuteFault.js +140 -0
- package/dist/esm/localIntendedRevokeFault.js +106 -0
- package/dist/esm/localIntendedSessionAdmissionFault.js +139 -0
- package/dist/esm/localIntendedYaoExportFault.js +117 -0
- package/dist/esm/localIntendedYaoFault.js +13 -16
- package/dist/esm/localIntendedYaoFinalizeFault.js +99 -0
- package/dist/esm/localIntendedYaoRecoveryFault.js +102 -0
- package/dist/esm/localIntendedYaoSigningFault.js +127 -0
- package/dist/esm/router/auth/authRequestValidation.js +1 -1
- package/dist/esm/router/auth/commonRouterUtils.js +10 -2
- package/dist/esm/router/auth/walletSessionFailure.js +1 -14
- package/dist/esm/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.js +23 -0
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +86 -66
- package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +208 -0
- package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +246 -296
- package/dist/esm/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.js +14 -0
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +62 -63
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +3 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +1 -19
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceManagementService.js +4 -3
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +52 -9
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.js +100 -0
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.js +7 -10
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +33 -124
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.js +2 -2
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +9 -17
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.js +6 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkSourceReader.js +3 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/index.js +3 -3
- package/dist/esm/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.js +69 -0
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +39 -68
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.js +69 -0
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.js +2 -2
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +26 -71
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +20 -3
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +7 -94
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +5 -47
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +26 -123
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +0 -2
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +2 -2
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +15 -134
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +54 -260
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +1 -1
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +1 -28
- package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +2 -8
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +3 -3
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +23 -73
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.js +15 -2
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.js +12 -203
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +16 -32
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +29 -72
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +4 -1
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +3 -1
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +6 -30
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +261 -205
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +5 -3
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +2 -2
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js +3 -3
- package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +43 -25
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -1
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +2 -1
- package/dist/esm/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.js +2 -60
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +158 -19
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.js +19 -49
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.js +100 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +132 -33
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +83 -4
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +14 -49
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +4 -4
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +22 -116
- package/dist/esm/router/cloudflare/runtime/createSelfHostedCloudflareSigningWorker.js +1 -2
- package/dist/esm/router/cloudflare/runtime/walletConsoleTenantRootLineage.js +11 -2
- package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +5 -6
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +2 -1
- package/dist/esm/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.js +48 -21
- package/dist/esm/router/cloudflare.js +11480 -12853
- package/dist/esm/router/domains/ecdsa/routerAbEcdsaStrictRegistration.js +16 -5
- package/dist/esm/router/domains/ecdsa/thresholdEcdsaRequestValidation.js +2 -8
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.js +33 -0
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +17 -9
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +29 -431
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +7 -2
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.js +2 -1
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.js +70 -2
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +134 -169
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +77 -162
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.js +205 -51
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +29 -11
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.js +182 -55
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.js +2 -1
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.js +63 -247
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js +3 -2
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.js +87 -132
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.js +5 -4
- package/dist/esm/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.js +45 -0
- package/dist/esm/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.js +1 -1
- package/dist/esm/router/domains/emailOtp/emailOtpExportPolicy.js +1 -42
- package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +1 -6
- package/dist/esm/router/domains/emailOtp/emailOtpSessionRouteHelpers.js +1 -142
- package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.js +1 -1
- package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -2
- package/dist/esm/router/domains/passkeyCustody/walletRecoveryFinalization.js +23 -45
- package/dist/esm/router/domains/passkeyCustody/walletRecoveryKeyManifest.js +5 -5
- package/dist/esm/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.js +1 -1
- package/dist/esm/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.js +827 -0
- package/dist/esm/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.js +698 -0
- package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmission.js +209 -0
- package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.js +16 -15
- package/dist/esm/router/domains/signingOperations/routerAbOperationStepUp.js +313 -0
- package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +62 -2159
- package/dist/esm/router/domains/tenantRoot/tenantRootIdentityResolution.js +1 -1
- package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +18 -22
- package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +3 -4
- package/dist/esm/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.js +2 -2
- package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +97 -150
- package/dist/esm/router/express.js +5967 -6410
- package/dist/esm/router/framework/http.js +1 -4
- package/dist/esm/router/framework/ror/normalize.js +1 -1
- package/dist/esm/router/framework/routerApiRouteSurface.js +1 -1
- package/dist/esm/router/node/nodeHostedWalletGateway.js +64 -0
- package/dist/esm/router/node/nodeHostedWalletGatewayCheck.js +163 -0
- package/dist/esm/router/node/nodeHostedWalletGatewayMain.js +120 -0
- package/dist/esm/router/node/nodeHttp.js +79 -0
- package/dist/esm/router/node/nodeSqlite.js +43 -0
- package/dist/esm/router/node/signerSqlMigrations.js +48 -0
- package/dist/esm/router/transport/fetch/createFetchRouter.js +1 -1
- package/dist/esm/router/transport/fetch/routes/deviceLinking.js +16 -18
- package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +3 -5
- package/dist/esm/router/transport/fetch/routes/deviceManagement.js +15 -24
- package/dist/esm/router/transport/fetch/routes/normalSigningRouterProxy.js +3 -16
- package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +144 -461
- package/dist/esm/router/transport/fetch/routes/sessions.js +4 -4
- package/dist/esm/router/transport/fetch/routes/syncAccount.js +4 -6
- package/dist/esm/router/transport/fetch/routes/syncAccountBootstrap.js +2 -2
- package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +69 -23
- package/dist/esm/router/transport/fetch/routes/thresholdEd25519.js +52 -27
- package/dist/esm/shared-ts/src/authorization/capabilityKinds.js +1 -1
- package/dist/esm/shared-ts/src/authorization/delegatedAuthority.js +1 -1
- package/dist/esm/shared-ts/src/authorization/operationFingerprint.js +1 -2
- package/dist/esm/shared-ts/src/authorization/walletAuthority.js +99 -227
- package/dist/esm/shared-ts/src/authorization/walletCustodyOperation.js +4 -6
- package/dist/esm/shared-ts/src/device-linking/activeWalletSession.js +74 -0
- package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +50 -0
- package/dist/esm/shared-ts/src/device-linking/committedSignerPackages.js +8 -9
- package/dist/esm/shared-ts/src/device-linking/delegatedActivationPlan.js +3 -1
- package/dist/esm/shared-ts/src/device-linking/deviceManagement.js +55 -0
- package/dist/esm/shared-ts/src/device-linking/digests.js +10 -65
- package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +3 -1
- package/dist/esm/shared-ts/src/device-linking/index.js +4 -1
- package/dist/esm/shared-ts/src/device-linking/parsers.js +510 -1063
- package/dist/esm/shared-ts/src/device-linking/requestProof.js +5 -14
- package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +6 -9
- package/dist/esm/shared-ts/src/device-linking/walletSessionCredentialDelivery.js +9 -9
- package/dist/esm/shared-ts/src/device-linking/wireFields.js +59 -0
- package/dist/esm/shared-ts/src/near/nearClient.js +252 -0
- package/dist/esm/shared-ts/src/passkey-custody/credentialActivity.js +3 -1
- package/dist/esm/shared-ts/src/passkey-custody/custodyEnvelope.js +7 -5
- package/dist/esm/shared-ts/src/passkey-custody/custodySecretBinding.js +6 -4
- package/dist/esm/shared-ts/src/passkey-custody/primitives.js +5 -39
- package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -5
- package/dist/esm/shared-ts/src/signing-lanes/index.js +3 -3
- package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +5 -12
- package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +5 -14
- package/dist/esm/shared-ts/src/signing-lanes/participants.js +2 -5
- package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +7 -5
- package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +6 -45
- package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +423 -1511
- package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +323 -0
- package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +59 -0
- package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +1 -1
- package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +1 -2
- package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +49 -0
- package/dist/esm/shared-ts/src/utils/addAuthMethodRegistration.js +3 -4
- package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +8 -1
- package/dist/esm/shared-ts/src/utils/digestEncoding.js +63 -0
- package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +2 -2
- package/dist/esm/shared-ts/src/utils/exactRecord.js +44 -0
- package/dist/esm/shared-ts/src/utils/registrationAuthMethodInput.js +127 -0
- package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +2 -2
- package/dist/esm/shared-ts/src/utils/registrationIds.js +280 -0
- package/dist/esm/shared-ts/src/utils/registrationIntent.js +4 -1170
- package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +429 -0
- package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +11 -136
- package/dist/esm/shared-ts/src/utils/routerAbEd25519Yao.js +3 -163
- package/dist/esm/shared-ts/src/utils/routerAbEd25519YaoDigests.js +160 -0
- package/dist/esm/shared-ts/src/utils/routerAbNormalSigningIdentity.js +1 -4
- package/dist/esm/shared-ts/src/utils/routerAbPublicKeyset.js +7 -15
- package/dist/esm/shared-ts/src/utils/validation.js +37 -6
- package/dist/esm/shared-ts/src/utils/walletAuthMethodRecord.js +362 -0
- package/dist/esm/shared-ts/src/utils/wireSchema.js +77 -0
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +1 -1
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeReservation.js +1 -1
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js +7 -11
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.js +4 -8
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.js +3 -1
- package/dist/esm/storage/d1Sql.js +10 -1
- package/dist/esm/storage/syncSqlite.js +79 -0
- package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +1 -1
- package/dist/esm/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.js +1 -1
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +1 -2
- package/dist/esm/threshold/session/signingSessionSeal/options.js +1 -1
- package/dist/esm/threshold/session/signingSessionSeal/transport/shared.js +18 -55
- package/dist/esm/threshold/statusCodes.js +1 -1
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +3 -3
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
- package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm +0 -0
- package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +8 -26
- package/dist/types/shared-ts/src/authorization/delegatedAuthority.d.ts +0 -8
- package/dist/types/shared-ts/src/authorization/operationFingerprint.d.ts +1 -3
- package/dist/types/shared-ts/src/authorization/walletAuthority.d.ts +25 -12
- package/dist/types/shared-ts/src/authorization/walletSessionIssuance.d.ts +2 -1
- package/dist/types/shared-ts/src/device-linking/activeWalletSession.d.ts +3 -2
- package/dist/types/shared-ts/src/device-linking/authorityActivation.d.ts +5 -0
- package/dist/types/shared-ts/src/device-linking/committedSignerPackages.d.ts +2 -5
- package/dist/types/shared-ts/src/device-linking/contracts.d.ts +8 -11
- package/dist/types/shared-ts/src/device-linking/contracts.typecheck.d.ts +2 -1
- package/dist/types/shared-ts/src/device-linking/deviceManagement.d.ts +7 -0
- package/dist/types/shared-ts/src/device-linking/digests.d.ts +0 -5
- package/dist/types/shared-ts/src/device-linking/ed25519ExportRoot.d.ts +3 -2
- package/dist/types/shared-ts/src/device-linking/index.d.ts +2 -0
- package/dist/types/shared-ts/src/device-linking/parsers.d.ts +4 -41
- package/dist/types/shared-ts/src/device-linking/requestProof.d.ts +0 -1
- package/dist/types/shared-ts/src/device-linking/sourceContribution.d.ts +3 -2
- package/dist/types/shared-ts/src/device-linking/walletSessionCredentialDelivery.d.ts +2 -1
- package/dist/types/shared-ts/src/device-linking/wireFields.d.ts +26 -0
- package/dist/types/shared-ts/src/near/actions.d.ts +4 -4
- package/dist/types/shared-ts/src/near/delegate.d.ts +3 -2
- package/dist/types/shared-ts/src/near/nearClient.d.ts +145 -0
- package/dist/types/shared-ts/src/passkey-custody/ceremonyCommitPayload.d.ts +0 -22
- package/dist/types/shared-ts/src/passkey-custody/credentialActivity.d.ts +2 -4
- package/dist/types/shared-ts/src/passkey-custody/custodyEnvelope.d.ts +9 -18
- package/dist/types/shared-ts/src/passkey-custody/custodySecretBinding.d.ts +8 -24
- package/dist/types/shared-ts/src/passkey-custody/index.d.ts +0 -2
- package/dist/types/shared-ts/src/passkey-custody/primitives.d.ts +0 -14
- package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -15
- package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +2 -51
- package/dist/types/shared-ts/src/signing-lanes/index.d.ts +1 -2
- package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +1 -2
- package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +5 -27
- package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +0 -11
- package/dist/types/shared-ts/src/signing-lanes/recordParsers.d.ts +6 -53
- package/dist/types/shared-ts/src/signing-lanes/records.d.ts +1 -2
- package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +15 -37
- package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +1 -20
- package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +4 -25
- package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +1 -41
- package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +6 -0
- package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +20 -0
- package/dist/types/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.d.ts +2 -35
- package/dist/types/shared-ts/src/threshold/ed25519OperationFingerprint.d.ts +8 -35
- package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +25 -0
- package/dist/types/shared-ts/src/threshold/participants.d.ts +3 -9
- package/dist/types/shared-ts/src/threshold/secp256k1.d.ts +0 -37
- package/dist/types/shared-ts/src/threshold/sessionPolicy.d.ts +24 -0
- package/dist/types/shared-ts/src/threshold/signingRootScope.d.ts +2 -5
- package/dist/types/shared-ts/src/utils/addAuthMethodRegistration.d.ts +3 -4
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +7 -108
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +16 -3
- package/dist/types/shared-ts/src/utils/canonicalPrimitives.d.ts +2 -0
- package/dist/types/shared-ts/src/utils/digestEncoding.d.ts +9 -0
- package/dist/types/shared-ts/src/utils/domainIds.d.ts +1 -2
- package/dist/types/shared-ts/src/utils/ecdsaKeyFactsInventory.d.ts +1 -2
- package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +5 -5
- package/dist/types/shared-ts/src/utils/emailOtpRecoveryKey.d.ts +0 -2
- package/dist/types/shared-ts/src/utils/errors.d.ts +0 -7
- package/dist/types/shared-ts/src/utils/exactRecord.d.ts +12 -0
- package/dist/types/shared-ts/src/utils/index.d.ts +5 -2
- package/dist/types/shared-ts/src/utils/jsonRpc.d.ts +3 -2
- package/dist/types/shared-ts/src/utils/near.d.ts +2 -1
- package/dist/types/shared-ts/src/utils/nearRpcResults.d.ts +7 -7
- package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -4
- package/dist/types/shared-ts/src/utils/registrationAuthMethodInput.d.ts +184 -0
- package/dist/types/shared-ts/src/utils/registrationContracts.d.ts +76 -0
- package/dist/types/shared-ts/src/utils/registrationEstablishedSession.d.ts +1 -2
- package/dist/types/shared-ts/src/utils/registrationIds.d.ts +56 -0
- package/dist/types/shared-ts/src/utils/registrationIntent.d.ts +9 -514
- package/dist/types/shared-ts/src/utils/registrationSignerPlan.d.ts +142 -0
- package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts +21 -92
- package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts +14 -99
- package/dist/types/shared-ts/src/utils/routerAbEd25519YaoDigests.d.ts +39 -0
- package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts +10 -15
- package/dist/types/shared-ts/src/utils/routerAbTraceContext.d.ts +2 -1
- package/dist/types/shared-ts/src/utils/secureRandomId.d.ts +0 -2
- package/dist/types/shared-ts/src/utils/signerDomain.d.ts +3 -35
- package/dist/types/shared-ts/src/utils/signerSlot.d.ts +0 -4
- package/dist/types/shared-ts/src/utils/signingSessionSeal.d.ts +1 -7
- package/dist/types/shared-ts/src/utils/validation.d.ts +10 -10
- package/dist/types/shared-ts/src/utils/variant.d.ts +11 -0
- package/dist/types/shared-ts/src/utils/variant.typecheck.d.ts +22 -0
- package/dist/types/shared-ts/src/utils/walletAddSignerActivation.d.ts +2 -2
- package/dist/types/shared-ts/src/utils/walletAuthAuthority.d.ts +1 -58
- package/dist/types/shared-ts/src/utils/walletAuthMethodRecord.d.ts +104 -0
- package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +3 -7
- package/dist/types/shared-ts/src/utils/webauthnDeviceInfo.d.ts +3 -4
- package/dist/types/shared-ts/src/utils/wireSchema.d.ts +60 -0
- package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +2 -1
- package/dist/types/shared-ts/src/wallet-recovery/index.d.ts +0 -1
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeLocator.d.ts +0 -16
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +2 -11
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.d.ts +6 -18
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.d.ts +0 -2
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.d.ts +1 -3
- package/dist/types/wallet-server/src/authorization/capabilityPolicy.d.ts +0 -1
- package/dist/types/wallet-server/src/authorization/domain.d.ts +25 -5
- package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.d.ts +37 -0
- package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/authorization/factorEvidence.d.ts +6 -7
- package/dist/types/wallet-server/src/authorization/service.d.ts +52 -3
- package/dist/types/wallet-server/src/cloud-host.d.ts +6 -2
- package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +10 -1
- package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +16 -116
- package/dist/types/wallet-server/src/core/IdentityStore.d.ts +2 -7
- package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +6 -16
- package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +29 -90
- package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -12
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +10 -3
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.d.ts +17 -48
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/internalServiceHttp.d.ts +2 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +4 -71
- package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +2 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +4 -8
- package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +2 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +1 -3
- package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +14 -47
- package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +2 -7
- package/dist/types/wallet-server/src/core/WalletStore.d.ts +3 -8
- package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +7 -22
- package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +14 -36
- package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +9 -34
- package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +9 -34
- package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +6 -5
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +9 -17
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +3 -2
- package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +7 -23
- package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +3 -10
- package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +3 -70
- package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +3 -2
- package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +5 -8
- package/dist/types/wallet-server/src/core/authService/nearPrivateKeySigning.d.ts +3 -2
- package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -26
- package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -5
- package/dist/types/wallet-server/src/core/authService/thresholdEcdsaKeyInventory.d.ts +0 -23
- package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +8 -16
- package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +7 -7
- package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +43 -0
- package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +1 -28
- package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +6 -16
- package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +51 -0
- package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +11 -29
- package/dist/types/wallet-server/src/core/d1WalletStore.d.ts +6 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEd25519ExportRoot.d.ts +2 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEmailOtpGrant.d.ts +2 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceManagement.d.ts +44 -26
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +19 -217
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionApproval.d.ts +8 -0
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionRecord.d.ts +259 -0
- package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -2
- package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +54 -0
- package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -15
- package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +4 -24
- package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +2 -3
- package/dist/types/wallet-server/src/core/nearSignerWasmRuntime.d.ts +0 -1
- package/dist/types/wallet-server/src/core/registrationContracts.d.ts +37 -108
- package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +5 -4
- package/dist/types/wallet-server/src/core/rpcClients/near/NearClient.d.ts +10 -106
- package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +4 -3
- package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +2 -3
- package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +2 -3
- package/dist/types/wallet-server/src/core/signingLanes/WalletExecutionLaneProjection.d.ts +3 -9
- package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +4 -4
- package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +3 -3
- package/dist/types/wallet-server/src/core/storeBackends.d.ts +83 -0
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +13 -59
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +51 -3
- package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +0 -1
- package/dist/types/wallet-server/src/core/types.d.ts +3 -24
- package/dist/types/wallet-server/src/core/webAuthnD1Statements.d.ts +29 -0
- package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +96 -0
- package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +11 -7
- package/dist/types/wallet-server/src/index.d.ts +1 -1
- package/dist/types/wallet-server/src/local-hosted-wallet-gateway-worker.d.ts +1 -4
- package/dist/types/wallet-server/src/localHostedWalletGatewayHandler.d.ts +12 -0
- package/dist/types/wallet-server/src/localIntendedEcdsaFinalizeFault.d.ts +33 -0
- package/dist/types/wallet-server/src/localIntendedLinkExecuteFault.d.ts +47 -0
- package/dist/types/wallet-server/src/localIntendedRevokeFault.d.ts +40 -0
- package/dist/types/wallet-server/src/localIntendedSessionAdmissionFault.d.ts +41 -0
- package/dist/types/wallet-server/src/localIntendedYaoExportFault.d.ts +41 -0
- package/dist/types/wallet-server/src/localIntendedYaoFault.d.ts +7 -1
- package/dist/types/wallet-server/src/localIntendedYaoFinalizeFault.d.ts +37 -0
- package/dist/types/wallet-server/src/localIntendedYaoRecoveryFault.d.ts +45 -0
- package/dist/types/wallet-server/src/localIntendedYaoSigningFault.d.ts +51 -0
- package/dist/types/wallet-server/src/router/auth/authRequestValidation.d.ts +10 -21
- package/dist/types/wallet-server/src/router/auth/commonRouterUtils.d.ts +5 -10
- package/dist/types/wallet-server/src/router/auth/walletSessionFailure.d.ts +1 -4
- package/dist/types/wallet-server/src/router/auth/webAuthnCredentialCodecs.d.ts +3 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.d.ts +12 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.d.ts +3 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +2 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthService.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/authorizedOperationStatements.d.ts +30 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +45 -21
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/walletSessionAuthorityProjection.d.ts +2 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +57 -6
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +2 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.d.ts +8 -21
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.d.ts +14 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.d.ts +49 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +4 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.d.ts +2 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +8 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.d.ts +3 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.d.ts +7 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.d.ts +1 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.d.ts +33 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +13 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.d.ts +24 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.d.ts +2 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +1 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +3 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.d.ts +9 -8
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.d.ts +0 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.d.ts +5 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +1 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -21
- package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityRecords.d.ts +0 -23
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +1 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.d.ts +11 -19
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -54
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +7 -19
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.d.ts +4 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.d.ts +8 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +5 -8
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -22
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +6 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +10 -6
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +15 -22
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +5 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.d.ts +4 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.d.ts +5 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.d.ts +3 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.d.ts +0 -16
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +29 -14
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.d.ts +15 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.d.ts +71 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +34 -24
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +44 -26
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +3 -7
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +8 -19
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleTenantRootLineage.d.ts +2 -1
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -0
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.d.ts +15 -2
- package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ecdsa/routerAbEcdsaStrictRegistration.d.ts +9 -7
- package/dist/types/wallet-server/src/router/domains/ecdsa/thresholdEcdsaRequestValidation.d.ts +4 -4
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.d.ts +46 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +5 -3
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.d.ts +20 -79
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.d.ts +1 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.d.ts +4 -3
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +62 -42
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.d.ts +108 -32
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryActivation.typecheck.d.ts +5 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.d.ts +36 -5
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.d.ts +5 -4
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.d.ts +41 -50
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.d.ts +3 -3
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.d.ts +6 -5
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.d.ts +14 -4
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.d.ts +12 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/routerAbEd25519YaoWalletSession.d.ts +5 -5
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.d.ts +3 -4
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpExportPolicy.d.ts +2 -27
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRequestValidation.d.ts +1 -2
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRouteHandlers.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpSessionRouteHelpers.d.ts +2 -102
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/envelopeRevocationAdmission.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +3 -2
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.d.ts +1 -9
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/registrationCustodyOutcome.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/verifiedCustodyFactor.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationAdmission.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +2 -28
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryFinalization.d.ts +43 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryKeyManifest.d.ts +7 -7
- package/dist/types/wallet-server/src/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.d.ts +0 -3
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.d.ts +165 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.d.ts +110 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmission.d.ts +360 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.d.ts +11 -10
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbOperationStepUp.d.ts +165 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +16 -702
- package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +5 -12
- package/dist/types/wallet-server/src/router/domains/syncAccount/syncAccountRequestValidation.d.ts +5 -4
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootCustodyLineage.d.ts +6 -1
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootIdentityResolution.d.ts +4 -7
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +8 -8
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +4 -4
- package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.d.ts +4 -4
- package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRouteHandlers.d.ts +4 -62
- package/dist/types/wallet-server/src/router/express-adaptor.d.ts +2 -2
- package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +64 -61
- package/dist/types/wallet-server/src/router/framework/http.d.ts +0 -1
- package/dist/types/wallet-server/src/router/framework/ror/normalize.d.ts +2 -2
- package/dist/types/wallet-server/src/router/framework/routeMeteringPolicy.d.ts +3 -2
- package/dist/types/wallet-server/src/router/framework/routerApi.d.ts +1 -1
- package/dist/types/wallet-server/src/router/framework/routerApiRouteSurface.d.ts +3 -3
- package/dist/types/wallet-server/src/router/node/nodeHostedWalletGateway.d.ts +34 -0
- package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayCheck.d.ts +21 -0
- package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayMain.d.ts +2 -0
- package/dist/types/wallet-server/src/router/node/nodeHttp.d.ts +13 -0
- package/dist/types/wallet-server/src/router/node/nodeSqlite.d.ts +22 -0
- package/dist/types/wallet-server/src/router/node/signerSqlMigrations.d.ts +20 -0
- package/dist/types/wallet-server/src/router/transport/fetch/createFetchRouter.d.ts +1 -3
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +5 -6
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.d.ts +2 -2
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceManagement.d.ts +14 -16
- package/dist/types/wallet-server/src/router/transport/fetch/routes/normalSigningRouterProxy.d.ts +0 -12
- package/dist/types/wallet-server/src/router/transport/fetch/routes/passkeyCustody.d.ts +1 -1
- package/dist/types/wallet-server/src/router/transport/fetch/routes/sessions.d.ts +2 -1
- package/dist/types/wallet-server/src/router/transport/fetch/routes/syncAccountBootstrap.d.ts +7 -13
- package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEcdsa.d.ts +3 -57
- package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEd25519.d.ts +0 -44
- package/dist/types/wallet-server/src/storage/d1Sql.d.ts +7 -0
- package/dist/types/wallet-server/src/storage/syncSqlite.d.ts +28 -0
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.d.ts +0 -1
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/idempotencyRecords.d.ts +5 -6
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/transport/shared.d.ts +1 -0
- package/dist/types/wallet-server/src/threshold/statusCodes.d.ts +4 -4
- package/migrations/d1-signer/0036_r150_yao_lifecycle_decisions.sql +22 -0
- package/migrations/d1-signer/0037_r150_wallet_auth_method_revocation_replays.sql +26 -0
- package/migrations/d1-signer/0038_r150_registration_ceremony_cas_guard_seed.sql +8 -0
- package/migrations/d1-signer/0039_r150_revocation_replay_answer_kind.sql +9 -0
- package/package.json +1 -1
- package/dist/esm/core/ThresholdService/ecdsaClientRootProof.js +0 -27
- package/dist/esm/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.js +0 -115
- package/dist/esm/core/ThresholdService/secureRandomId.js +0 -9
- package/dist/esm/core/authService/record.js +0 -8
- package/dist/esm/core/authService/thresholdRuntimePolicy.js +0 -19
- package/dist/esm/core/authService/walletRegistrationPlanning.js +0 -49
- package/dist/esm/core/deviceLinking/index.js +0 -5
- package/dist/esm/core/errors.js +0 -54
- package/dist/esm/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.js +0 -39
- package/dist/esm/core/signingLanes/WalletKeyStore.js +0 -0
- package/dist/esm/core/signingLanes/index.js +0 -8
- package/dist/esm/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.js +0 -55
- package/dist/esm/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.js +0 -56
- package/dist/esm/shared-ts/src/signing-lanes/linkedEcdsaScope.js +0 -1
- package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker.js +0 -414
- package/dist/types/shared-ts/src/passkey-custody/credentialObservations.d.ts +0 -74
- package/dist/types/shared-ts/src/passkey-custody/kekContext.d.ts +0 -34
- package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.d.ts +0 -62
- package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/validation.d.ts +0 -11
- package/dist/types/shared-ts/src/utils/bigint.d.ts +0 -3
- package/dist/types/shared-ts/src/utils/paillier.d.ts +0 -37
- package/dist/types/shared-ts/src/utils/recoveryDomain.d.ts +0 -12
- package/dist/types/shared-ts/src/utils/signerDomain.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/wallet-recovery/recoveryKekContext.d.ts +0 -37
- package/dist/types/wallet-server/src/core/ThresholdService/ecdsaClientRootProof.d.ts +0 -12
- package/dist/types/wallet-server/src/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.d.ts +0 -17
- package/dist/types/wallet-server/src/core/ThresholdService/secureRandomId.d.ts +0 -2
- package/dist/types/wallet-server/src/core/authService/record.d.ts +0 -2
- package/dist/types/wallet-server/src/core/authService/thresholdRuntimePolicy.d.ts +0 -4
- package/dist/types/wallet-server/src/core/authService/walletRegistrationPlanning.d.ts +0 -19
- package/dist/types/wallet-server/src/core/deviceLinking/index.d.ts +0 -5
- package/dist/types/wallet-server/src/core/errors.d.ts +0 -10
- package/dist/types/wallet-server/src/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.d.ts +0 -28
- package/dist/types/wallet-server/src/core/signingLanes/SigningLaneStore.d.ts +0 -15
- package/dist/types/wallet-server/src/core/signingLanes/WalletKeyStore.d.ts +0 -13
- package/dist/types/wallet-server/src/core/signingLanes/index.d.ts +0 -11
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.d.ts +0 -35
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.d.ts +0 -35
- /package/dist/esm/{core/signingLanes/SigningLaneStore.js → authorization/ecdsaWalletSessionAdmission.js} +0 -0
|
@@ -1,38 +1,14 @@
|
|
|
1
1
|
import type { AuthorizedOperationId, CapabilityId } from '../authorization/capabilityKinds';
|
|
2
2
|
import type { CapabilityOperationFingerprintDigest } from '../authorization/operationFingerprint';
|
|
3
|
-
import type {
|
|
3
|
+
import type { MpcMaterialActivationRef } from '../utils/domainIds';
|
|
4
4
|
import type { LinkedDeviceEnrollmentId } from './ids';
|
|
5
|
-
import type {
|
|
6
|
-
import type { ActiveSigningLaneReference, DelegatedSpendAuthorizationId } from './records';
|
|
7
|
-
import { type RouterAbMpcMaterialActivationRefWire } from '../utils/routerAbNormalSigningIdentity';
|
|
8
|
-
export type LinkedDeviceExecutionEnvelopeV1 = {
|
|
9
|
-
readonly kind: 'linked_device_execution_v1';
|
|
10
|
-
readonly enrollmentId: LinkedDeviceEnrollmentId;
|
|
11
|
-
readonly deviceId: LinkedDeviceId;
|
|
12
|
-
readonly walletKeyId: WalletKeyId;
|
|
13
|
-
readonly laneId: SigningLaneId;
|
|
14
|
-
readonly laneShareEpoch: LaneShareEpoch;
|
|
15
|
-
readonly materialActivation: RouterAbMpcMaterialActivationRefWire;
|
|
16
|
-
};
|
|
17
|
-
export declare function buildLinkedDeviceExecutionEnvelopeV1(input: {
|
|
18
|
-
readonly enrollmentId: LinkedDeviceEnrollmentId;
|
|
19
|
-
readonly deviceId: LinkedDeviceId;
|
|
20
|
-
readonly walletKeyId: WalletKeyId;
|
|
21
|
-
readonly laneId: SigningLaneId;
|
|
22
|
-
readonly laneShareEpoch: LaneShareEpoch;
|
|
23
|
-
readonly materialActivation: MpcMaterialActivationRef;
|
|
24
|
-
}): LinkedDeviceExecutionEnvelopeV1;
|
|
25
|
-
export type DelegatedBudgetClaimId = DomainId<'DelegatedBudgetClaimId'>;
|
|
5
|
+
import type { ActiveSigningLaneReference } from './records';
|
|
26
6
|
export type ClaimedWalletExecutionAuthorization = {
|
|
27
7
|
readonly kind: 'claimed_wallet_execution_authorization_v1';
|
|
28
8
|
readonly authorizedOperationId: AuthorizedOperationId;
|
|
29
9
|
readonly operationFingerprintDigest: CapabilityOperationFingerprintDigest;
|
|
30
10
|
readonly capabilityId: CapabilityId;
|
|
31
11
|
};
|
|
32
|
-
export type ReservedDelegatedBudgetClaim = {
|
|
33
|
-
readonly kind: 'reserved_delegated_budget_claim_v1';
|
|
34
|
-
readonly budgetClaimId: DelegatedBudgetClaimId;
|
|
35
|
-
};
|
|
36
12
|
type PreparedWalletExecutionBase = {
|
|
37
13
|
readonly authorization: ClaimedWalletExecutionAuthorization;
|
|
38
14
|
readonly materialActivation: MpcMaterialActivationRef;
|
|
@@ -57,35 +33,10 @@ export type PreparedLinkedDeviceWalletExecution = PreparedWalletExecutionBase &
|
|
|
57
33
|
readonly delegatedAuthorizationId?: never;
|
|
58
34
|
readonly budgetClaim?: never;
|
|
59
35
|
};
|
|
60
|
-
export type PreparedDelegatedWalletExecution = PreparedWalletExecutionBase & {
|
|
61
|
-
readonly kind: 'prepared_delegated_wallet_execution';
|
|
62
|
-
readonly laneKind: 'delegated_execution';
|
|
63
|
-
readonly lane: ActiveSigningLaneReference & {
|
|
64
|
-
readonly laneKind: 'delegated_execution';
|
|
65
|
-
};
|
|
66
|
-
readonly delegatedAuthorizationId: DelegatedSpendAuthorizationId;
|
|
67
|
-
readonly budgetClaim: ReservedDelegatedBudgetClaim;
|
|
68
|
-
readonly linkedDeviceEnrollmentId?: never;
|
|
69
|
-
};
|
|
70
|
-
export type PreparedWalletExecution = PreparedOwnerWalletExecution | PreparedLinkedDeviceWalletExecution | PreparedDelegatedWalletExecution;
|
|
71
36
|
export declare function buildPreparedOwnerWalletExecution(input: {
|
|
72
37
|
readonly authorization: ClaimedWalletExecutionAuthorization;
|
|
73
38
|
readonly materialActivation: MpcMaterialActivationRef;
|
|
74
39
|
readonly lane: PreparedOwnerWalletExecution['lane'];
|
|
75
40
|
}): PreparedOwnerWalletExecution;
|
|
76
|
-
export declare function buildPreparedLinkedDeviceWalletExecution(input: {
|
|
77
|
-
readonly authorization: ClaimedWalletExecutionAuthorization;
|
|
78
|
-
readonly materialActivation: MpcMaterialActivationRef;
|
|
79
|
-
readonly lane: PreparedLinkedDeviceWalletExecution['lane'];
|
|
80
|
-
readonly linkedDeviceEnrollmentId: LinkedDeviceEnrollmentId;
|
|
81
|
-
}): PreparedLinkedDeviceWalletExecution;
|
|
82
|
-
export declare function buildPreparedDelegatedWalletExecution(input: {
|
|
83
|
-
readonly authorization: ClaimedWalletExecutionAuthorization;
|
|
84
|
-
readonly materialActivation: MpcMaterialActivationRef;
|
|
85
|
-
readonly lane: PreparedDelegatedWalletExecution['lane'];
|
|
86
|
-
readonly delegatedAuthorizationId: DelegatedSpendAuthorizationId;
|
|
87
|
-
readonly budgetClaim: ReservedDelegatedBudgetClaim;
|
|
88
|
-
}): PreparedDelegatedWalletExecution;
|
|
89
|
-
export declare function assertNeverPreparedWalletExecution(value: never): never;
|
|
90
41
|
export {};
|
|
91
42
|
//# sourceMappingURL=execution.d.ts.map
|
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
export * from './ids';
|
|
2
|
-
export * from './validation';
|
|
3
2
|
export * from './records';
|
|
4
3
|
export * from './rotation';
|
|
5
4
|
export * from './rotationParsers';
|
|
5
|
+
export * from './rotationProtocolParsers';
|
|
6
6
|
export * from './rotationDigests';
|
|
7
7
|
export * from './rotationLifecycle';
|
|
8
8
|
export * from './evmFamilySigningKeySlotId';
|
|
@@ -10,5 +10,4 @@ export * from './participants';
|
|
|
10
10
|
export * from './participantDigest';
|
|
11
11
|
export * from './execution';
|
|
12
12
|
export * from './ownerContinuity';
|
|
13
|
-
export * from './linkedEcdsaScope';
|
|
14
13
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -5,7 +5,7 @@ import { type LaneParticipantBindingDigestB64u } from './participants';
|
|
|
5
5
|
export type WalletSignerId = string & {
|
|
6
6
|
readonly __ownerLaneWalletSignerIdBrand: 'WalletSignerId';
|
|
7
7
|
};
|
|
8
|
-
/** Owner lanes bind to signer facts that predate independently provisioned
|
|
8
|
+
/** Owner lanes bind to signer facts that predate independently provisioned lanes. */
|
|
9
9
|
export type OwnerLaneParticipantContinuityV1 = {
|
|
10
10
|
readonly kind: 'owner_lane_participant_continuity_v1';
|
|
11
11
|
readonly signerId: WalletSignerId;
|
|
@@ -14,7 +14,6 @@ export type OwnerLaneParticipantContinuityV1 = {
|
|
|
14
14
|
readonly custodyKeyManifestDigestB64u: DigestB64u;
|
|
15
15
|
readonly sourceIdentityDigestB64u: DigestB64u;
|
|
16
16
|
};
|
|
17
|
-
export declare const OWNER_LANE_PARTICIPANT_BINDING_DOMAIN_V1: "seams/rotatable-signing-lanes/owner-lane-participant-continuity/v1";
|
|
18
17
|
/** Parse the owner signer identity without widening it into a generic string. */
|
|
19
18
|
export declare function parseWalletSignerId(raw: unknown, label?: string): WalletSignerId;
|
|
20
19
|
export declare function buildOwnerLaneParticipantContinuityV1(args: {
|
|
@@ -1,48 +1,26 @@
|
|
|
1
1
|
import { type DigestB64u } from '../utils/canonicalPrimitives';
|
|
2
2
|
import { type HpkePublicKeyB64u, type LaneHolderCustodyIdentityV1, type LaneHolderParticipantId, type LaneHolderParticipantRecordV1, type LaneParticipantBindingDigestB64u, type SigningWorkerParticipantId, type SigningWorkerParticipantRecordV1, type SigningWorkerRecipientIdentityV1, type SigningWorkerRecipientKeyDigestB64u } from './participants';
|
|
3
|
-
|
|
4
|
-
export declare const LANE_HOLDER_PARTICIPANT_BINDING_DOMAIN_V1: "seams/rotatable-signing-lanes/lane-holder-participant/v1";
|
|
5
|
-
export declare const SIGNING_WORKER_PARTICIPANT_BINDING_DOMAIN_V1: "seams/rotatable-signing-lanes/signing-worker-participant/v1";
|
|
6
|
-
/** The lane digest binds the fixed holder-then-SigningWorker participant set. */
|
|
7
|
-
export declare const LANE_PARTICIPANT_SET_BINDING_DOMAIN_V1: "seams/rotatable-signing-lanes/lane-participant-set/v1";
|
|
8
|
-
export type LaneHolderParticipantBindingInputV1 = {
|
|
3
|
+
type LaneHolderParticipantBindingInputV1 = {
|
|
9
4
|
readonly participantId: LaneHolderParticipantId;
|
|
10
5
|
readonly custody: LaneHolderCustodyIdentityV1;
|
|
11
6
|
readonly hpkePublicKeyB64u: HpkePublicKeyB64u;
|
|
12
7
|
readonly hpkePublicKeyDigestB64u: SigningWorkerRecipientKeyDigestB64u;
|
|
13
8
|
};
|
|
14
|
-
|
|
9
|
+
type SigningWorkerParticipantBindingInputV1 = {
|
|
15
10
|
readonly participantId: SigningWorkerParticipantId;
|
|
16
11
|
readonly recipient: SigningWorkerRecipientIdentityV1;
|
|
17
12
|
};
|
|
18
|
-
/** LP32(UTF8(value)) from the
|
|
13
|
+
/** LP32(UTF8(value)) from the canonical lane encoding. */
|
|
19
14
|
export declare function encodeLaneCanonicalTextV1(value: string): Uint8Array;
|
|
20
|
-
/** LP32(BASE64URL_DECODE_CANONICAL_32(value)) from the
|
|
15
|
+
/** LP32(BASE64URL_DECODE_CANONICAL_32(value)) from the canonical lane encoding. */
|
|
21
16
|
export declare function encodeLaneCanonicalDigestV1(value: DigestB64u): Uint8Array;
|
|
22
17
|
/** U64(value), encoded as unsigned big-endian bytes. */
|
|
23
18
|
export declare function encodeLaneCanonicalU64V1(value: number): Uint8Array;
|
|
24
|
-
/** Nonempty array count encoding used by enrollment and receipt records. */
|
|
25
|
-
export declare function encodeLaneCanonicalNonEmptyCountV1(count: number): Uint8Array;
|
|
26
|
-
export declare function laneHolderParticipantCanonicalBytesV1(input: LaneHolderParticipantRecordV1): Uint8Array;
|
|
27
|
-
export declare function signingWorkerParticipantCanonicalBytesV1(input: SigningWorkerParticipantRecordV1): Uint8Array;
|
|
28
|
-
/**
|
|
29
|
-
* Canonical bytes for the lane's complete participant set. The order is part
|
|
30
|
-
* of the protocol: holder first, SigningWorker second. Individual participant
|
|
31
|
-
* binding digests are included after their canonical identity bytes so a
|
|
32
|
-
* verified record cannot be substituted while retaining the same identities.
|
|
33
|
-
*/
|
|
34
|
-
export declare function laneParticipantSetCanonicalBytesV1(input: {
|
|
35
|
-
readonly holderParticipant: LaneHolderParticipantRecordV1;
|
|
36
|
-
readonly signingWorkerParticipant: SigningWorkerParticipantRecordV1;
|
|
37
|
-
}): Uint8Array;
|
|
38
19
|
export declare function computeLaneHolderParticipantBindingDigestV1(input: LaneHolderParticipantBindingInputV1): Promise<LaneParticipantBindingDigestB64u>;
|
|
39
|
-
export declare function computeSigningWorkerParticipantBindingDigestV1(input: SigningWorkerParticipantBindingInputV1): Promise<LaneParticipantBindingDigestB64u>;
|
|
40
20
|
export declare function computeLaneParticipantSetBindingDigestV1(input: {
|
|
41
21
|
readonly holderParticipant: LaneHolderParticipantRecordV1;
|
|
42
22
|
readonly signingWorkerParticipant: SigningWorkerParticipantRecordV1;
|
|
43
23
|
}): Promise<LaneParticipantBindingDigestB64u>;
|
|
44
|
-
export declare function buildLaneHolderParticipantRecordWithDigestV1(input: LaneHolderParticipantBindingInputV1): Promise<LaneHolderParticipantRecordV1>;
|
|
45
24
|
export declare function buildSigningWorkerParticipantRecordWithDigestV1(input: SigningWorkerParticipantBindingInputV1): Promise<SigningWorkerParticipantRecordV1>;
|
|
46
|
-
export
|
|
47
|
-
export declare function assertSigningWorkerParticipantBindingDigestV1(record: SigningWorkerParticipantRecordV1): Promise<SigningWorkerParticipantRecordV1>;
|
|
25
|
+
export {};
|
|
48
26
|
//# sourceMappingURL=participantDigest.d.ts.map
|
|
@@ -61,17 +61,6 @@ export declare function parseHpkePublicKeyB64u(raw: unknown): DomainIdParseResul
|
|
|
61
61
|
export declare function parseLaneParticipantBindingDigestB64u(raw: unknown): DomainIdParseResult<LaneParticipantBindingDigestB64u>;
|
|
62
62
|
export declare function parseLaneCustodyBindingDigestB64u(raw: unknown): DomainIdParseResult<LaneCustodyBindingDigestB64u>;
|
|
63
63
|
export declare function parseSigningWorkerRecipientKeyDigestB64u(raw: unknown): DomainIdParseResult<SigningWorkerRecipientKeyDigestB64u>;
|
|
64
|
-
export declare function buildLaneHolderCustodyIdentityV1(args: {
|
|
65
|
-
readonly custodyBindingId: LaneHolderCustodyBindingId;
|
|
66
|
-
readonly custodyBindingDigestB64u: LaneCustodyBindingDigestB64u;
|
|
67
|
-
}): LaneHolderCustodyIdentityV1;
|
|
68
|
-
export declare function buildSigningWorkerRecipientIdentityV1(args: {
|
|
69
|
-
readonly recipientKeyId: SigningWorkerRecipientKeyId;
|
|
70
|
-
readonly hpkePublicKeyB64u: HpkePublicKeyB64u;
|
|
71
|
-
readonly hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
|
|
72
|
-
}): SigningWorkerRecipientIdentityV1;
|
|
73
|
-
export declare function parseLaneHolderCustodyIdentityV1(raw: unknown, label?: string): LaneHolderCustodyIdentityV1;
|
|
74
|
-
export declare function parseSigningWorkerRecipientIdentityV1(raw: unknown, label?: string): SigningWorkerRecipientIdentityV1;
|
|
75
64
|
export declare function buildLaneHolderParticipantRecordV1(args: {
|
|
76
65
|
readonly participantId: LaneHolderParticipantId;
|
|
77
66
|
readonly custody: LaneHolderCustodyIdentityV1;
|
|
@@ -1,19 +1,13 @@
|
|
|
1
|
-
import type {
|
|
1
|
+
import type { WalletId } from '../utils/domainIds';
|
|
2
2
|
import { type EvmFamilySigningKeySlotId } from './evmFamilySigningKeySlotId';
|
|
3
3
|
import { type LaneHolderParticipantRecordV1, type LaneParticipantBindingDigestB64u, type SigningWorkerParticipantRecordV1 } from './participants';
|
|
4
4
|
import { type LaneShareEpoch, type LinkedDeviceId, type SigningLaneId, type WalletKeyId } from './ids';
|
|
5
|
-
import type {
|
|
5
|
+
import type { AgentCustodyBindingId, AgentIdentityKeyId, BreakGlassSigningLaneRecord, DelegatedExecutionSigningLaneRecord, DelegatedSpendAuthorizationId, Ed25519WalletKeyRecord, EvmFamilyWalletKeyRecord, LinkedDeviceSigningLaneRecord, OwnerEmailOtpSigningLaneRecord, OwnerPasskeySigningLaneRecord, RecoverySigningLaneRecord, SigningLaneLifecycle, SigningLaneRecord, WalletKeyLifecycle, WalletKeyRecord, WalletKeyVersion } from './records';
|
|
6
6
|
import { type OwnerLaneParticipantContinuityV1 } from './ownerContinuity';
|
|
7
7
|
type ActiveSigningLaneLifecycle = Extract<SigningLaneLifecycle, {
|
|
8
8
|
readonly state: 'active';
|
|
9
9
|
}>;
|
|
10
|
-
|
|
11
|
-
readonly walletId: WalletId;
|
|
12
|
-
readonly walletKeyId: WalletKeyId;
|
|
13
|
-
readonly walletKeyVersion: WalletKeyVersion;
|
|
14
|
-
readonly lifecycle: WalletKeyLifecycle;
|
|
15
|
-
};
|
|
16
|
-
export type SigningLaneReferenceBuilderArgs = {
|
|
10
|
+
type SigningLaneReferenceBuilderArgs = {
|
|
17
11
|
readonly walletId: WalletId;
|
|
18
12
|
readonly walletKeyId: WalletKeyId;
|
|
19
13
|
readonly laneId: SigningLaneId;
|
|
@@ -23,21 +17,17 @@ export type SigningLaneReferenceBuilderArgs = {
|
|
|
23
17
|
type SigningLaneRecordBuilderCommonArgs = SigningLaneReferenceBuilderArgs & {
|
|
24
18
|
readonly lifecycle: SigningLaneLifecycle;
|
|
25
19
|
};
|
|
26
|
-
|
|
20
|
+
type RotatableSigningLaneRecordBuilderArgs = SigningLaneRecordBuilderCommonArgs & {
|
|
27
21
|
readonly holderParticipant: LaneHolderParticipantRecordV1;
|
|
28
22
|
readonly serverParticipant: SigningWorkerParticipantRecordV1;
|
|
29
23
|
};
|
|
30
|
-
|
|
24
|
+
type OwnerAuthSigningLaneRecordBuilderArgs = SigningLaneRecordBuilderCommonArgs & {
|
|
31
25
|
readonly walletAuthMethodId: NonNullable<OwnerPasskeySigningLaneRecord['walletAuthMethodId']>;
|
|
32
26
|
readonly ownerParticipantContinuity: OwnerLaneParticipantContinuityV1;
|
|
33
27
|
};
|
|
34
|
-
|
|
28
|
+
type PrivilegedOwnerSigningLaneRecordBuilderArgs = SigningLaneRecordBuilderCommonArgs & {
|
|
35
29
|
readonly ownerParticipantContinuity: OwnerLaneParticipantContinuityV1;
|
|
36
30
|
};
|
|
37
|
-
export type ActiveSigningLaneReferenceBuilderArgs = SigningLaneReferenceBuilderArgs & {
|
|
38
|
-
readonly lifecycle: ActiveSigningLaneLifecycle;
|
|
39
|
-
readonly materialActivation: MpcMaterialActivationRef;
|
|
40
|
-
};
|
|
41
31
|
export declare function parseWalletKeyVersion(raw: unknown, label?: string): WalletKeyVersion;
|
|
42
32
|
export declare function buildActiveWalletKeyLifecycle(args: {
|
|
43
33
|
readonly activatedAtMs: number;
|
|
@@ -49,11 +39,6 @@ export declare function buildRetiredWalletKeyLifecycle(args: {
|
|
|
49
39
|
}): Extract<WalletKeyLifecycle, {
|
|
50
40
|
readonly state: 'retired';
|
|
51
41
|
}>;
|
|
52
|
-
export declare function buildCompromisedWalletKeyLifecycle(args: {
|
|
53
|
-
readonly compromisedAtMs: number;
|
|
54
|
-
}): Extract<WalletKeyLifecycle, {
|
|
55
|
-
readonly state: 'compromised';
|
|
56
|
-
}>;
|
|
57
42
|
export declare function buildEd25519WalletKeyRecord(args: {
|
|
58
43
|
readonly walletId: WalletId;
|
|
59
44
|
readonly walletKeyId: WalletKeyId;
|
|
@@ -72,36 +57,11 @@ export declare function buildEvmFamilyWalletKeyRecord(args: {
|
|
|
72
57
|
readonly evmAddress: string;
|
|
73
58
|
readonly lifecycle: WalletKeyLifecycle;
|
|
74
59
|
}): EvmFamilyWalletKeyRecord;
|
|
75
|
-
export declare function buildSigningLaneReference(args: SigningLaneReferenceBuilderArgs & {
|
|
76
|
-
readonly laneKind: SigningLaneKind;
|
|
77
|
-
}): SigningLaneReference;
|
|
78
|
-
export declare function buildProvisioningSigningLaneLifecycle(args: {
|
|
79
|
-
readonly revocationEpoch: number;
|
|
80
|
-
readonly startedAtMs: number;
|
|
81
|
-
}): Extract<SigningLaneLifecycle, {
|
|
82
|
-
readonly state: 'provisioning';
|
|
83
|
-
}>;
|
|
84
|
-
export declare function buildPendingReceiptSigningLaneLifecycle(args: {
|
|
85
|
-
readonly revocationEpoch: number;
|
|
86
|
-
readonly startedAtMs: number;
|
|
87
|
-
readonly deliveryDigestB64u: string;
|
|
88
|
-
}): Extract<SigningLaneLifecycle, {
|
|
89
|
-
readonly state: 'pending_receipt';
|
|
90
|
-
}>;
|
|
91
60
|
export declare function buildActiveSigningLaneLifecycle(args: {
|
|
92
61
|
readonly revocationEpoch: number;
|
|
93
62
|
readonly activatedAtMs: number;
|
|
94
63
|
readonly activationReceiptDigestB64u: string;
|
|
95
64
|
}): ActiveSigningLaneLifecycle;
|
|
96
|
-
export declare function buildRevokedSigningLaneLifecycle(args: {
|
|
97
|
-
readonly revocationEpoch: number;
|
|
98
|
-
readonly revokedAtMs: number;
|
|
99
|
-
readonly revokeReason: Extract<SigningLaneLifecycle, {
|
|
100
|
-
readonly state: 'revoked';
|
|
101
|
-
}>['revokeReason'];
|
|
102
|
-
}): Extract<SigningLaneLifecycle, {
|
|
103
|
-
readonly state: 'revoked';
|
|
104
|
-
}>;
|
|
105
65
|
export declare function buildOwnerPasskeySigningLaneRecord(args: OwnerAuthSigningLaneRecordBuilderArgs): OwnerPasskeySigningLaneRecord;
|
|
106
66
|
export declare function buildOwnerEmailOtpSigningLaneRecord(args: OwnerAuthSigningLaneRecordBuilderArgs): OwnerEmailOtpSigningLaneRecord;
|
|
107
67
|
export declare function buildLinkedDeviceSigningLaneRecord(args: RotatableSigningLaneRecordBuilderArgs & {
|
|
@@ -115,14 +75,7 @@ export declare function buildDelegatedExecutionSigningLaneRecord(args: Rotatable
|
|
|
115
75
|
}): DelegatedExecutionSigningLaneRecord;
|
|
116
76
|
export declare function buildRecoverySigningLaneRecord(args: PrivilegedOwnerSigningLaneRecordBuilderArgs): RecoverySigningLaneRecord;
|
|
117
77
|
export declare function buildBreakGlassSigningLaneRecord(args: PrivilegedOwnerSigningLaneRecordBuilderArgs): BreakGlassSigningLaneRecord;
|
|
118
|
-
export declare function buildActiveSigningLaneReference(args: ActiveSigningLaneReferenceBuilderArgs & {
|
|
119
|
-
readonly laneKind: SigningLaneKind;
|
|
120
|
-
}): ActiveSigningLaneReference;
|
|
121
|
-
export declare function parseWalletKeyLifecycle(raw: unknown, label?: string): WalletKeyLifecycle;
|
|
122
|
-
export declare function parseSigningLaneLifecycle(raw: unknown, label?: string): SigningLaneLifecycle;
|
|
123
78
|
export declare function parseWalletKeyRecord(raw: unknown, label?: string): WalletKeyRecord;
|
|
124
|
-
export declare function parseSigningLaneReference(raw: unknown, label?: string): SigningLaneReference;
|
|
125
79
|
export declare function parseSigningLaneRecord(raw: unknown, label?: string): SigningLaneRecord;
|
|
126
|
-
export declare function parseActiveSigningLaneReference(raw: unknown, label?: string): ActiveSigningLaneReference;
|
|
127
80
|
export {};
|
|
128
81
|
//# sourceMappingURL=recordParsers.d.ts.map
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import type { DomainId, MpcMaterialActivationRef, WalletAuthMethodId, WalletId } from '../utils/domainIds';
|
|
2
2
|
import type { KeyCreationSignerSlot } from '../passkey-custody/primitives';
|
|
3
3
|
import type { Ed25519PublicKeyB64u, Secp256k1CompressedPublicKeyB64u } from '../passkey-custody/primitives';
|
|
4
|
-
import type { NearEd25519SigningKeyId } from '../utils/
|
|
4
|
+
import type { NearEd25519SigningKeyId } from '../utils/registrationIds';
|
|
5
5
|
import type { LaneHolderParticipantRecordV1, LaneParticipantBindingDigestB64u, SigningWorkerParticipantRecordV1 } from './participants';
|
|
6
6
|
import type { LaneShareEpoch, LinkedDeviceId, SigningLaneId, WalletKeyId } from './ids';
|
|
7
7
|
import type { EvmFamilySigningKeySlotId } from './evmFamilySigningKeySlotId';
|
|
@@ -155,6 +155,5 @@ export type BreakGlassSigningLaneRecord = PrivilegedOwnerSigningLaneRecordBase &
|
|
|
155
155
|
readonly authorizationBindingDigestB64u?: never;
|
|
156
156
|
};
|
|
157
157
|
export type SigningLaneRecord = OwnerPasskeySigningLaneRecord | OwnerEmailOtpSigningLaneRecord | LinkedDeviceSigningLaneRecord | DelegatedExecutionSigningLaneRecord | RecoverySigningLaneRecord | BreakGlassSigningLaneRecord;
|
|
158
|
-
export declare function assertNeverSigningLane(value: never): never;
|
|
159
158
|
export {};
|
|
160
159
|
//# sourceMappingURL=records.d.ts.map
|
|
@@ -3,7 +3,7 @@ import type { KeyCreationSignerSlot } from '../passkey-custody/primitives';
|
|
|
3
3
|
import type { MpcMaterialActivationId, MpcMaterialActivationRef, ThresholdEcdsaSessionId, WalletId, LaneHolderRecipientHandleV1 } from '../utils/domainIds';
|
|
4
4
|
import type { EcdsaCapabilityManifestId, EcdsaCapabilityManifestRevision, EcdsaLifecycleId, EcdsaServerGeneration } from '../utils/ecdsaCapabilityActivation';
|
|
5
5
|
import type { CorrelationId, DigestB64u, IsoTimestamp } from '../utils/canonicalPrimitives';
|
|
6
|
-
import type { NearEd25519SigningKeyId } from '../utils/
|
|
6
|
+
import type { NearEd25519SigningKeyId } from '../utils/registrationIds';
|
|
7
7
|
import type { EcdsaThresholdKeyId } from '../threshold/ecdsaDerivationRoleLocalBootstrap';
|
|
8
8
|
import type { EcdsaManifestIdentity, EcdsaRelayerKeyId, Ed25519YaoSuiteId, LaneEnrollmentId, LaneOperationId, LaneOperationIdempotencyKey, LaneShareEpoch, LinkedDeviceEnrollmentId, SigningLaneId, ThresholdEcdsaChainTarget, WalletKeyId } from './ids';
|
|
9
9
|
import type { LaneHolderParticipantId, HpkePublicKeyB64u, HpkePublicKeyDigestB64u, LaneCustodyBindingDigestB64u, LaneParticipantBindingDigestB64u, LaneHolderCustodyBindingId, SigningWorkerParticipantId, SigningWorkerRecipientKeyId, LaneHolderParticipantRecordV1, SigningWorkerParticipantRecordV1 } from './participants';
|
|
@@ -51,7 +51,7 @@ export type ProvisionedLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
|
|
|
51
51
|
};
|
|
52
52
|
export type ActiveLaneProtocolSourceV1 = OwnerLaneProtocolSourceV1 | ProvisionedLaneProtocolSourceV1;
|
|
53
53
|
export declare function isProvisionedLaneProtocolSourceV1(source: ActiveLaneProtocolSourceV1): source is ProvisionedLaneProtocolSourceV1;
|
|
54
|
-
|
|
54
|
+
type LaneTargetHolderV1 = {
|
|
55
55
|
participantId: LaneHolderParticipantId;
|
|
56
56
|
participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
|
|
57
57
|
custodyBindingId: LaneHolderCustodyBindingId;
|
|
@@ -82,7 +82,7 @@ export type LaneRefreshTargetV1 = {
|
|
|
82
82
|
expectedTargetState: 'active_previous_epoch';
|
|
83
83
|
priorMaterialActivation: MpcMaterialActivationRef;
|
|
84
84
|
};
|
|
85
|
-
|
|
85
|
+
type EcdsaTargetThresholdSessionBindingV1 = {
|
|
86
86
|
chainTarget: ThresholdEcdsaChainTarget;
|
|
87
87
|
thresholdSessionId: ThresholdEcdsaSessionId;
|
|
88
88
|
participantBindingDigestB64u: string;
|
|
@@ -103,7 +103,7 @@ export type EcdsaTargetCapabilityBindingV1 = {
|
|
|
103
103
|
...EcdsaTargetThresholdSessionBindingV1[]
|
|
104
104
|
];
|
|
105
105
|
};
|
|
106
|
-
|
|
106
|
+
type LaneProtocolJobCommonV1 = {
|
|
107
107
|
operationId: LaneOperationId;
|
|
108
108
|
enrollmentId: LaneEnrollmentId;
|
|
109
109
|
idempotencyKey: LaneOperationIdempotencyKey;
|
|
@@ -116,16 +116,15 @@ export type LaneProtocolJobCommonV1 = {
|
|
|
116
116
|
protocolVersion: 'rotatable_signing_lane_protocol_v1';
|
|
117
117
|
expiresAtMs: number;
|
|
118
118
|
};
|
|
119
|
-
|
|
119
|
+
type LaneCreationOperationV1 = {
|
|
120
120
|
target: LaneCreationTargetV1;
|
|
121
121
|
authorization: LinkedDeviceLaneAuthorizationBindingV1;
|
|
122
122
|
};
|
|
123
|
-
|
|
123
|
+
type LaneRefreshOperationV1 = {
|
|
124
124
|
target: LaneRefreshTargetV1;
|
|
125
125
|
authorization: OwnerLaneRefreshAuthorizationBindingV1;
|
|
126
126
|
};
|
|
127
|
-
|
|
128
|
-
export type Ed25519YaoLaneJobCurveV1 = {
|
|
127
|
+
type Ed25519YaoLaneJobCurveV1 = {
|
|
129
128
|
kind: 'ed25519_yao_lane_job_v1';
|
|
130
129
|
keyFamily: 'ed25519';
|
|
131
130
|
registeredPublicKeyB64u: string;
|
|
@@ -161,12 +160,12 @@ type EcdsaAdditiveLaneJobCurveV1 = {
|
|
|
161
160
|
export type Ed25519YaoLaneCreationJobV1 = LaneProtocolJobCommonV1 & Ed25519YaoLaneJobCurveV1 & LaneCreationOperationV1 & {
|
|
162
161
|
yaoRequestKind: 'lane_provisioning';
|
|
163
162
|
};
|
|
164
|
-
|
|
163
|
+
type Ed25519YaoLaneRefreshJobV1 = LaneProtocolJobCommonV1 & Ed25519YaoLaneJobCurveV1 & LaneRefreshOperationV1 & {
|
|
165
164
|
yaoRequestKind: 'lane_refresh';
|
|
166
165
|
};
|
|
167
166
|
export type Ed25519YaoLaneJobV1 = Ed25519YaoLaneCreationJobV1 | Ed25519YaoLaneRefreshJobV1;
|
|
168
167
|
export type EcdsaAdditiveLaneCreationJobV1 = LaneProtocolJobCommonV1 & LaneCreationOperationV1 & EcdsaAdditiveLaneJobCurveV1;
|
|
169
|
-
|
|
168
|
+
type EcdsaAdditiveLaneRefreshJobV1 = LaneProtocolJobCommonV1 & LaneRefreshOperationV1 & EcdsaAdditiveLaneJobCurveV1;
|
|
170
169
|
export type EcdsaAdditiveLaneJobV1 = EcdsaAdditiveLaneCreationJobV1 | EcdsaAdditiveLaneRefreshJobV1;
|
|
171
170
|
export type RotatableSigningLaneJobV1 = Ed25519YaoLaneJobV1 | EcdsaAdditiveLaneJobV1;
|
|
172
171
|
export type LaneProtocolCommitReceiptV1 = {
|
|
@@ -219,8 +218,8 @@ export type LaneServerActivationReceiptV1 = {
|
|
|
219
218
|
transcriptHashB64u: string;
|
|
220
219
|
activatedAtMs: number;
|
|
221
220
|
};
|
|
222
|
-
|
|
223
|
-
|
|
221
|
+
type LaneProtocolAbortReason = 'cancelled' | 'expired' | 'revoked_before_commit';
|
|
222
|
+
type LaneProtocolCompletionReason = 'exact_redelivery_required' | 'recovery_required';
|
|
224
223
|
export type LaneProtocolLifecycle = {
|
|
225
224
|
state: 'preparing';
|
|
226
225
|
startedAtMs: number;
|
|
@@ -276,10 +275,6 @@ export type LaneProtocolRecordV1 = {
|
|
|
276
275
|
job: RotatableSigningLaneJobV1;
|
|
277
276
|
lifecycle: LaneProtocolLifecycle;
|
|
278
277
|
};
|
|
279
|
-
export type EcdsaAdditiveLaneTranscriptPreambleV1 = {
|
|
280
|
-
kind: 'ecdsa_additive_lane_transcript_preamble_v1';
|
|
281
|
-
job: EcdsaAdditiveLaneJobV1;
|
|
282
|
-
};
|
|
283
278
|
export type EcdsaAdditiveLaneHolderRoundV1 = {
|
|
284
279
|
kind: 'ecdsa_additive_lane_holder_round_v1';
|
|
285
280
|
preambleHashB64u: string;
|
|
@@ -289,23 +284,6 @@ export type EcdsaAdditiveLaneHolderRoundV1 = {
|
|
|
289
284
|
holderAttestationB64u: string;
|
|
290
285
|
holderCommittedAtMs: number;
|
|
291
286
|
};
|
|
292
|
-
export type EcdsaAdditiveLaneServerRoundV1 = {
|
|
293
|
-
kind: 'ecdsa_additive_lane_server_round_v1';
|
|
294
|
-
preambleHashB64u: string;
|
|
295
|
-
holderRoundHashB64u: string;
|
|
296
|
-
targetServerPublicCommitment33B64u: string;
|
|
297
|
-
sealedTargetServerMaterialDigestB64u: string;
|
|
298
|
-
targetThresholdSessionSetDigestB64u: string;
|
|
299
|
-
publicIdentityRelationDigestB64u: string;
|
|
300
|
-
serverAttestationB64u: string;
|
|
301
|
-
serverCommittedAtMs: number;
|
|
302
|
-
};
|
|
303
|
-
export type EcdsaAdditiveLaneTranscriptV1 = {
|
|
304
|
-
kind: 'ecdsa_additive_lane_transcript_v1';
|
|
305
|
-
preambleHashB64u: string;
|
|
306
|
-
holderRoundHashB64u: string;
|
|
307
|
-
serverRoundHashB64u: string;
|
|
308
|
-
};
|
|
309
287
|
export type LaneEnrollmentManifestChildV1 = {
|
|
310
288
|
operationId: LaneOperationId;
|
|
311
289
|
walletKeyId: WalletKeyId;
|
|
@@ -446,7 +424,7 @@ export type Ed25519ServerRetirementReceiptV1 = {
|
|
|
446
424
|
retiredAtMs: number;
|
|
447
425
|
};
|
|
448
426
|
export type LaneServerRetirementReceiptV1 = EcdsaServerRetirementReceiptV1 | Ed25519ServerRetirementReceiptV1;
|
|
449
|
-
|
|
427
|
+
type LaneProductEpochRecordCommonV1 = {
|
|
450
428
|
kind: 'lane_product_epoch_record_v1';
|
|
451
429
|
walletId: WalletId;
|
|
452
430
|
walletKeyId: WalletKeyId;
|
|
@@ -778,7 +756,7 @@ export type EcdsaLaneProtocolWasmV1 = {
|
|
|
778
756
|
prepareEcdsaAdditiveLaneHolderRoundV1(input: EcdsaAdditiveLaneJobV1): Promise<EcdsaAdditiveLaneHolderPreparationV1>;
|
|
779
757
|
};
|
|
780
758
|
export type { LaneHolderRecipientHandleV1 } from '../utils/domainIds';
|
|
781
|
-
|
|
759
|
+
type LaneHolderRecipientDescriptorV1 = {
|
|
782
760
|
recipientHandle: LaneHolderRecipientHandleV1;
|
|
783
761
|
hpkePublicKeyB64u: HpkePublicKeyB64u;
|
|
784
762
|
hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
|
|
@@ -808,12 +786,12 @@ export type Ed25519YaoLaneClientCompletionV1 = {
|
|
|
808
786
|
kind: 'ed25519_yao_lane_holder_package_set_v1';
|
|
809
787
|
}>;
|
|
810
788
|
};
|
|
811
|
-
|
|
789
|
+
type SealedLaneHolderMaterialV1 = {
|
|
812
790
|
sealedHolderMaterialB64u: string;
|
|
813
791
|
sealedHolderRecordDigestB64u: DigestB64u;
|
|
814
792
|
verifiedHolderCiphertextDigestSetB64u: DigestB64u;
|
|
815
793
|
};
|
|
816
|
-
|
|
794
|
+
type VerifiedLaneHolderPackageV1 = {
|
|
817
795
|
verifiedHolderCiphertextDigestSetB64u: DigestB64u;
|
|
818
796
|
};
|
|
819
797
|
export type WasmEd25519YaoLaneClientV1 = {
|
|
@@ -1,32 +1,13 @@
|
|
|
1
1
|
import { type DigestB64u } from '../utils/canonicalPrimitives';
|
|
2
|
-
import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1,
|
|
3
|
-
export declare function encodeEd25519YaoLaneJobTranscriptV1(value: Ed25519YaoLaneJobV1): Uint8Array;
|
|
4
|
-
export declare function computeEd25519YaoLaneJobTranscriptDigestV1(value: Ed25519YaoLaneJobV1): Promise<string>;
|
|
2
|
+
import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, EcdsaServerRetirementReceiptV1, Ed25519ServerRetirementReceiptV1, Ed25519YaoLaneJobV1, LaneEnrollmentManifestV1, RevokeSigningLaneV1 } from './rotation';
|
|
5
3
|
export declare function computeEd25519YaoLaneSessionDigestV1(value: Ed25519YaoLaneJobV1): Promise<string>;
|
|
6
|
-
export declare function encodeEcdsaAdditiveLaneTranscriptPreambleV1(value: EcdsaAdditiveLaneTranscriptPreambleV1): Uint8Array;
|
|
7
|
-
export declare function encodeEcdsaAdditiveLaneHolderRoundV1(value: EcdsaAdditiveLaneHolderRoundV1): Uint8Array;
|
|
8
|
-
export declare function encodeEcdsaAdditiveLaneServerRoundV1(value: EcdsaAdditiveLaneServerRoundV1): Uint8Array;
|
|
9
|
-
export declare function encodeEcdsaAdditiveLaneTranscriptV1(value: EcdsaAdditiveLaneTranscriptV1): Uint8Array;
|
|
10
|
-
export declare function computeEcdsaAdditiveLaneTranscriptPreambleDigestV1(value: EcdsaAdditiveLaneTranscriptPreambleV1): Promise<string>;
|
|
11
|
-
export declare function computeEcdsaAdditiveLaneHolderRoundDigestV1(value: EcdsaAdditiveLaneHolderRoundV1): Promise<string>;
|
|
12
|
-
export declare function computeEcdsaAdditiveLaneServerRoundDigestV1(value: EcdsaAdditiveLaneServerRoundV1): Promise<string>;
|
|
13
|
-
export declare function computeEcdsaAdditiveLaneTranscriptDigestV1(value: EcdsaAdditiveLaneTranscriptV1): Promise<string>;
|
|
14
|
-
export declare function encodeLaneEnrollmentManifestV1(value: LaneEnrollmentManifestV1): Uint8Array;
|
|
15
4
|
export declare function computeLaneEnrollmentManifestDigestV1(value: LaneEnrollmentManifestV1): Promise<string>;
|
|
16
|
-
export declare function encodeAggregateLaneActivationReceiptV1(value: AggregateLaneActivationReceiptV1): Uint8Array;
|
|
17
5
|
export declare function computeAggregateLaneActivationReceiptDigestV1(value: AggregateLaneActivationReceiptV1): Promise<string>;
|
|
18
|
-
export declare function encodeAggregateLaneRevocationReceiptV1(value: AggregateLaneRevocationReceiptV1): Uint8Array;
|
|
19
6
|
export declare function computeAggregateLaneRevocationReceiptDigestV1(value: AggregateLaneRevocationReceiptV1): Promise<string>;
|
|
20
|
-
export declare function encodeRevokeSigningLaneV1(value: RevokeSigningLaneV1): Uint8Array;
|
|
21
7
|
export declare function computeRevokeSigningLaneDigestV1(value: RevokeSigningLaneV1): Promise<string>;
|
|
22
8
|
export declare function encodeLaneProtocolCommitReceiptV1(value: import('./rotation').LaneProtocolCommitReceiptV1): Uint8Array;
|
|
23
|
-
export declare function computeLaneProtocolCommitReceiptDigestV1(value: import('./rotation').LaneProtocolCommitReceiptV1): Promise<DigestB64u>;
|
|
24
9
|
export declare function encodeLaneHolderDeliveryReceiptV1(value: import('./rotation').LaneHolderDeliveryReceiptV1): Uint8Array;
|
|
25
10
|
export declare function encodeLaneServerActivationReceiptV1(value: import('./rotation').LaneServerActivationReceiptV1): Uint8Array;
|
|
26
|
-
export declare function encodeEcdsaServerRetirementReceiptCanonicalPayloadV1(value: EcdsaServerRetirementReceiptV1): Uint8Array;
|
|
27
11
|
export declare function computeEcdsaServerRetirementReceiptDigestV1(value: EcdsaServerRetirementReceiptV1): Promise<DigestB64u>;
|
|
28
|
-
export declare function encodeSigningWorkerLaneMaterialIdentityV1(value: SigningWorkerLaneMaterialIdentityV1): Uint8Array;
|
|
29
|
-
export declare function encodeEd25519ServerRetirementReceiptCanonicalPayloadV1(value: Ed25519ServerRetirementReceiptV1): Uint8Array;
|
|
30
12
|
export declare function computeEd25519ServerRetirementReceiptDigestV1(value: Ed25519ServerRetirementReceiptV1): Promise<DigestB64u>;
|
|
31
|
-
export declare function encodeLaneProductEpochRecordV1(value: LaneProductEpochRecordV1): Uint8Array;
|
|
32
13
|
//# sourceMappingURL=rotationDigests.d.ts.map
|
|
@@ -1,6 +1,6 @@
|
|
|
1
|
-
import type {
|
|
1
|
+
import type { LaneEnrollmentLifecycleV1, LaneProductEpochActiveV1, LaneProductEpochPendingVisibilityV1, LaneProductEpochRevocationPendingV1, LaneProductEpochRetiredV1, LaneProductEpochRevokedV1, LaneProtocolLifecycle } from './rotation';
|
|
2
2
|
import type { LaneOperationId } from './ids';
|
|
3
|
-
|
|
3
|
+
type LaneProtocolLifecycleTransitionV1 = {
|
|
4
4
|
action: 'await_protocol_commitment';
|
|
5
5
|
atMs: number;
|
|
6
6
|
} | {
|
|
@@ -32,20 +32,7 @@ export type LaneProtocolLifecycleTransitionV1 = {
|
|
|
32
32
|
atMs: number;
|
|
33
33
|
};
|
|
34
34
|
export declare function transitionLaneProtocolLifecycleV1(current: LaneProtocolLifecycle, transition: LaneProtocolLifecycleTransitionV1): LaneProtocolLifecycle;
|
|
35
|
-
|
|
36
|
-
state: 'preparing';
|
|
37
|
-
}>;
|
|
38
|
-
export declare function markLaneProtocolCompletionRequiredV1(current: Extract<LaneProtocolLifecycle, {
|
|
39
|
-
state: 'committed_awaiting_holder_delivery';
|
|
40
|
-
}>, recoveryReason: 'exact_redelivery_required' | 'recovery_required'): Extract<LaneProtocolLifecycle, {
|
|
41
|
-
state: 'committed_completion_required';
|
|
42
|
-
}>;
|
|
43
|
-
export declare function resumeLaneProtocolCompletionV1(current: Extract<LaneProtocolLifecycle, {
|
|
44
|
-
state: 'committed_completion_required';
|
|
45
|
-
}>, atMs: number): Extract<LaneProtocolLifecycle, {
|
|
46
|
-
state: 'committed_awaiting_holder_delivery';
|
|
47
|
-
}>;
|
|
48
|
-
export type LaneEnrollmentLifecycleTransitionV1 = {
|
|
35
|
+
type LaneEnrollmentLifecycleTransitionV1 = {
|
|
49
36
|
action: 'mark_committed_completion_required';
|
|
50
37
|
committedChildOperationIds: readonly [LaneOperationId, ...LaneOperationId[]];
|
|
51
38
|
markedAtMs: number;
|
|
@@ -87,13 +74,5 @@ export declare function completeLaneProductEpochRevocationV1(current: LaneProduc
|
|
|
87
74
|
readonly revocationReceiptDigestB64u: string;
|
|
88
75
|
readonly revokedAtMs: number;
|
|
89
76
|
}): LaneProductEpochRevokedV1;
|
|
90
|
-
export
|
|
91
|
-
export type LaneActivationReceiptInputV1 = {
|
|
92
|
-
readonly aggregateReceipt: AggregateLaneActivationReceiptV1;
|
|
93
|
-
readonly manifestDigestB64u: string;
|
|
94
|
-
};
|
|
95
|
-
export type LaneRevocationReceiptInputV1 = {
|
|
96
|
-
readonly aggregateReceipt: AggregateLaneRevocationReceiptV1;
|
|
97
|
-
readonly manifestDigestB64u: string;
|
|
98
|
-
};
|
|
77
|
+
export {};
|
|
99
78
|
//# sourceMappingURL=rotationLifecycle.d.ts.map
|
|
@@ -1,34 +1,14 @@
|
|
|
1
|
-
import {
|
|
2
|
-
import { type SigningLaneId, type LaneShareEpoch } from './ids';
|
|
3
|
-
import type { SigningLaneKind } from './records';
|
|
4
|
-
import type { AggregateLaneActivationChildReceiptV1, AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, CommitLaneEnrollmentActivationV1, CommitLaneEnrollmentRevocationV1, CompleteSigningLaneRevocationV1, EcdsaAdditiveLaneHolderRoundV1, EcdsaAdditiveLaneServerRoundV1, EcdsaAdditiveLaneTranscriptPreambleV1, EcdsaAdditiveLaneTranscriptV1, EcdsaServerRetirementReceiptV1, Ed25519ServerRetirementReceiptV1, EcdsaTargetCapabilityBindingV1, LaneCreationTargetV1, LaneEnrollmentLifecycleV1, LaneEnrollmentPreparationResultV1, LaneEnrollmentManifestV1, LaneHolderDeliveryReceiptV1, LaneHolderPackageWireV1, LaneProductEpochActiveV1, LaneProductEpochPendingVisibilityV1, LaneProductEpochRevocationPendingV1, LaneProductEpochRecordV1, LaneProductEpochRetiredV1, LaneProductEpochRevokedV1, LaneProtocolCommitReceiptV1, LaneProtocolCasResultV1, LaneProtocolLifecycle, LaneProtocolRecordV1, LaneRefreshTargetV1, LaneRefreshPredecessorRetirementV1, LaneServerActivationReceiptV1, LaneServerRetirementReceiptV1, SigningWorkerLaneMaterialIdentityV1, RevokeLaneEnrollmentV1, RevokeSigningLaneV1, RotatableSigningLaneJobV1 } from './rotation';
|
|
5
|
-
export declare function buildLaneCreationTargetV1(args: {
|
|
6
|
-
readonly laneId: SigningLaneId;
|
|
7
|
-
readonly laneShareEpoch: LaneShareEpoch;
|
|
8
|
-
}): LaneCreationTargetV1;
|
|
9
|
-
export declare function buildLaneRefreshTargetV1(args: {
|
|
10
|
-
readonly laneId: SigningLaneId;
|
|
11
|
-
readonly laneKind: Exclude<SigningLaneKind, 'delegated_execution'>;
|
|
12
|
-
readonly laneShareEpoch: LaneShareEpoch;
|
|
13
|
-
readonly priorMaterialActivation: MpcMaterialActivationRef;
|
|
14
|
-
}): LaneRefreshTargetV1;
|
|
15
|
-
export declare function parseEcdsaTargetCapabilityBindingV1(raw: unknown, label: string): EcdsaTargetCapabilityBindingV1;
|
|
16
|
-
export declare function parseRotatableSigningLaneJobV1(raw: unknown, label?: string): RotatableSigningLaneJobV1;
|
|
17
|
-
export declare function parseLaneHolderPackageWireV1(raw: unknown, label?: string): LaneHolderPackageWireV1;
|
|
18
|
-
export declare const parseLaneProtocolJobV1: typeof parseRotatableSigningLaneJobV1;
|
|
1
|
+
import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, CommitLaneEnrollmentRevocationV1, CompleteSigningLaneRevocationV1, EcdsaServerRetirementReceiptV1, Ed25519ServerRetirementReceiptV1, LaneEnrollmentLifecycleV1, LaneEnrollmentManifestV1, LaneHolderDeliveryReceiptV1, LaneProductEpochPendingVisibilityV1, LaneProductEpochRecordV1, LaneProductEpochRevokedV1, LaneProtocolCommitReceiptV1, LaneProtocolLifecycle, LaneProtocolRecordV1, LaneRefreshPredecessorRetirementV1, LaneServerActivationReceiptV1, LaneServerRetirementReceiptV1, RevokeLaneEnrollmentV1, RevokeSigningLaneV1, RotatableSigningLaneJobV1 } from './rotation';
|
|
19
2
|
export declare function parseLaneProtocolCommitReceiptV1(raw: unknown, label?: string): LaneProtocolCommitReceiptV1;
|
|
20
3
|
export declare function parseLaneHolderDeliveryReceiptV1(raw: unknown, label?: string): LaneHolderDeliveryReceiptV1;
|
|
21
4
|
export declare function parseLaneServerActivationReceiptV1(raw: unknown, label?: string): LaneServerActivationReceiptV1;
|
|
22
5
|
export declare function parseLaneEnrollmentManifestV1(raw: unknown, label?: string): LaneEnrollmentManifestV1;
|
|
23
|
-
export declare function buildAggregateLaneActivationChildReceiptV1(input: AggregateLaneActivationChildReceiptV1): AggregateLaneActivationChildReceiptV1;
|
|
24
6
|
export declare function parseAggregateLaneActivationReceiptV1(raw: unknown, label?: string): AggregateLaneActivationReceiptV1;
|
|
25
|
-
export declare function parseCommitLaneEnrollmentActivationV1(raw: unknown, label?: string): CommitLaneEnrollmentActivationV1;
|
|
26
7
|
export declare function parseLaneRefreshPredecessorRetirementV1(raw: unknown, label?: string): LaneRefreshPredecessorRetirementV1;
|
|
27
8
|
export declare function parseAggregateLaneRevocationReceiptV1(raw: unknown, label?: string): AggregateLaneRevocationReceiptV1;
|
|
28
9
|
export declare function parseRevokeLaneEnrollmentV1(raw: unknown, label?: string): RevokeLaneEnrollmentV1;
|
|
29
10
|
export declare function parseRevokeSigningLaneV1(raw: unknown, label?: string): RevokeSigningLaneV1;
|
|
30
11
|
export declare function parseCompleteSigningLaneRevocationV1(raw: unknown, label?: string): CompleteSigningLaneRevocationV1;
|
|
31
|
-
export declare function parseCommitLaneEnrollmentRevocationV1(raw: unknown, label?: string): CommitLaneEnrollmentRevocationV1;
|
|
32
12
|
export declare function parseLaneProductEpochRecordV1(raw: unknown, label?: string): LaneProductEpochRecordV1;
|
|
33
13
|
export declare function parseLaneProtocolLifecycleV1(raw: unknown, label?: string): LaneProtocolLifecycle;
|
|
34
14
|
export declare function parseLaneEnrollmentLifecycleV1(raw: unknown, label?: string): LaneEnrollmentLifecycleV1;
|
|
@@ -36,32 +16,12 @@ export declare function buildLaneProtocolRecordV1(args: {
|
|
|
36
16
|
readonly job: RotatableSigningLaneJobV1;
|
|
37
17
|
readonly lifecycle: LaneProtocolLifecycle;
|
|
38
18
|
}): LaneProtocolRecordV1;
|
|
39
|
-
export declare function parseLaneProtocolRecordV1(raw: unknown, label?: string): LaneProtocolRecordV1;
|
|
40
|
-
export declare function parseLaneProtocolCasResultV1(raw: unknown, label?: string): LaneProtocolCasResultV1;
|
|
41
|
-
export declare function parseLaneEnrollmentPreparationResultV1(raw: unknown, label?: string): LaneEnrollmentPreparationResultV1;
|
|
42
|
-
export declare function buildRotatableSigningLaneJobV1(raw: unknown, label?: string): RotatableSigningLaneJobV1;
|
|
43
|
-
export declare function buildLaneProtocolCommitReceiptV1(args: Omit<LaneProtocolCommitReceiptV1, 'kind'>): LaneProtocolCommitReceiptV1;
|
|
44
|
-
export declare function buildLaneHolderDeliveryReceiptV1(args: Omit<LaneHolderDeliveryReceiptV1, 'kind'>): LaneHolderDeliveryReceiptV1;
|
|
45
|
-
export declare function buildLaneServerActivationReceiptV1(args: Omit<LaneServerActivationReceiptV1, 'kind'>): LaneServerActivationReceiptV1;
|
|
46
|
-
export declare function buildLaneEnrollmentManifestV1(args: Omit<LaneEnrollmentManifestV1, 'kind'>): LaneEnrollmentManifestV1;
|
|
47
|
-
export declare function buildAggregateLaneActivationReceiptV1(args: Omit<AggregateLaneActivationReceiptV1, 'kind'>): AggregateLaneActivationReceiptV1;
|
|
48
|
-
export declare function buildCommitLaneEnrollmentActivationV1(args: Omit<CommitLaneEnrollmentActivationV1, 'kind'>): CommitLaneEnrollmentActivationV1;
|
|
49
19
|
export declare function buildAggregateLaneRevocationReceiptV1(args: Omit<AggregateLaneRevocationReceiptV1, 'kind'>): AggregateLaneRevocationReceiptV1;
|
|
50
|
-
export declare function buildRevokeLaneEnrollmentV1(args: Omit<RevokeLaneEnrollmentV1, 'kind'>): RevokeLaneEnrollmentV1;
|
|
51
20
|
export declare function buildRevokeSigningLaneV1(args: Omit<RevokeSigningLaneV1, 'kind'>): RevokeSigningLaneV1;
|
|
52
|
-
export declare function buildCompleteSigningLaneRevocationV1(args: Omit<CompleteSigningLaneRevocationV1, 'kind'>): CompleteSigningLaneRevocationV1;
|
|
53
21
|
export declare function buildCommitLaneEnrollmentRevocationV1(args: Omit<CommitLaneEnrollmentRevocationV1, 'kind'>): CommitLaneEnrollmentRevocationV1;
|
|
54
22
|
export declare function buildLaneProductEpochPendingVisibilityV1(args: Omit<LaneProductEpochPendingVisibilityV1, 'kind' | 'state'>): LaneProductEpochPendingVisibilityV1;
|
|
55
|
-
export declare function buildLaneProductEpochActiveV1(args: Omit<LaneProductEpochActiveV1, 'kind' | 'state'>): LaneProductEpochActiveV1;
|
|
56
|
-
export declare function buildLaneProductEpochRetiredV1(args: Omit<LaneProductEpochRetiredV1, 'kind' | 'state'>): LaneProductEpochRetiredV1;
|
|
57
|
-
export declare function buildLaneProductEpochRevocationPendingV1(args: Omit<LaneProductEpochRevocationPendingV1, 'kind' | 'state'>): LaneProductEpochRevocationPendingV1;
|
|
58
23
|
export declare function buildLaneProductEpochRevokedV1(args: Omit<LaneProductEpochRevokedV1, 'kind' | 'state'>): LaneProductEpochRevokedV1;
|
|
59
|
-
export declare function parseEcdsaAdditiveLaneTranscriptPreambleV1(raw: unknown, label?: string): EcdsaAdditiveLaneTranscriptPreambleV1;
|
|
60
|
-
export declare function parseEcdsaAdditiveLaneHolderRoundV1(raw: unknown, label?: string): EcdsaAdditiveLaneHolderRoundV1;
|
|
61
|
-
export declare function parseEcdsaAdditiveLaneServerRoundV1(raw: unknown, label?: string): EcdsaAdditiveLaneServerRoundV1;
|
|
62
|
-
export declare function parseEcdsaAdditiveLaneTranscriptV1(raw: unknown, label?: string): EcdsaAdditiveLaneTranscriptV1;
|
|
63
24
|
export declare function parseEcdsaServerRetirementReceiptV1(raw: unknown, label?: string): EcdsaServerRetirementReceiptV1;
|
|
64
|
-
export declare function parseSigningWorkerLaneMaterialIdentityV1<TKeyFamily extends 'ed25519' | 'ecdsa_secp256k1'>(raw: unknown, expectedKeyFamily: TKeyFamily, label?: string): SigningWorkerLaneMaterialIdentityV1<TKeyFamily>;
|
|
65
25
|
export declare function parseEd25519ServerRetirementReceiptV1(raw: unknown, label?: string): Ed25519ServerRetirementReceiptV1;
|
|
66
26
|
export declare function parseLaneServerRetirementReceiptV1(raw: unknown, label?: string): LaneServerRetirementReceiptV1;
|
|
67
27
|
//# sourceMappingURL=rotationParsers.d.ts.map
|
|
@@ -0,0 +1,6 @@
|
|
|
1
|
+
import type { EcdsaAdditiveLaneHolderRoundV1, LaneHolderPackageWireV1, RotatableSigningLaneJobV1 } from './rotation';
|
|
2
|
+
export declare function parseRotatableSigningLaneJobV1(raw: unknown, label?: string): RotatableSigningLaneJobV1;
|
|
3
|
+
export declare const parseLaneProtocolJobV1: typeof parseRotatableSigningLaneJobV1;
|
|
4
|
+
export declare function parseLaneHolderPackageWireV1(raw: unknown, label?: string): LaneHolderPackageWireV1;
|
|
5
|
+
export declare function parseEcdsaAdditiveLaneHolderRoundV1(raw: unknown, label?: string): EcdsaAdditiveLaneHolderRoundV1;
|
|
6
|
+
//# sourceMappingURL=rotationProtocolParsers.d.ts.map
|