@seams/wallet-server 0.6.2 → 0.7.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (705) hide show
  1. package/artifact-manifest.json +147 -32
  2. package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -0
  3. package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
  4. package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
  5. package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -0
  6. package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
  7. package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
  8. package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
  9. package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
  10. package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
  11. package/cloudflare-router-ab/build/router/build-stamp.json +1 -0
  12. package/cloudflare-router-ab/build/router/index.js +2 -2
  13. package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
  14. package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -0
  15. package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
  16. package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
  17. package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -0
  18. package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
  19. package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
  20. package/cloudflare-router-ab/migrations/deriver-a/0012_tenant_root_creation_tombstones.sql +20 -0
  21. package/cloudflare-router-ab/migrations/deriver-a/0013_tenant_root_root_use_admissions.sql +32 -0
  22. package/cloudflare-router-ab/migrations/deriver-a/0014_tenant_root_refresh_supersessions.sql +24 -0
  23. package/cloudflare-router-ab/migrations/deriver-a/0015_tenant_root_root_use_attempts.sql +56 -0
  24. package/cloudflare-router-ab/migrations/deriver-a/0016_tenant_root_root_use_admission_settlement.sql +5 -0
  25. package/cloudflare-router-ab/migrations/deriver-a/0017_tenant_root_root_use_admission_claims.sql +64 -0
  26. package/cloudflare-router-ab/migrations/deriver-a/0018_tenant_root_recovery_retention_keys.sql +12 -0
  27. package/cloudflare-router-ab/migrations/deriver-b/0012_tenant_root_creation_tombstones.sql +20 -0
  28. package/cloudflare-router-ab/migrations/deriver-b/0013_tenant_root_root_use_admissions.sql +32 -0
  29. package/cloudflare-router-ab/migrations/deriver-b/0014_tenant_root_refresh_supersessions.sql +24 -0
  30. package/cloudflare-router-ab/migrations/deriver-b/0015_tenant_root_root_use_attempts.sql +56 -0
  31. package/cloudflare-router-ab/migrations/deriver-b/0016_tenant_root_root_use_admission_settlement.sql +5 -0
  32. package/cloudflare-router-ab/migrations/deriver-b/0017_tenant_root_root_use_admission_claims.sql +64 -0
  33. package/cloudflare-router-ab/migrations/deriver-b/0018_tenant_root_recovery_retention_keys.sql +12 -0
  34. package/cloudflare-router-ab/scripts/bootstrap-local-tenant-root.mjs +81 -16
  35. package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +102 -9
  36. package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +4 -1
  37. package/cloudflare-router-ab/wrangler.deriver-a.toml +24 -0
  38. package/cloudflare-router-ab/wrangler.router.toml +13 -0
  39. package/dist/esm/authorization/capabilityPolicy.js +1 -1
  40. package/dist/esm/authorization/domain.js +2 -2
  41. package/dist/esm/authorization/factorEvidence.js +6 -100
  42. package/dist/esm/authorization/service.js +34 -2
  43. package/dist/esm/authorization/vaultProxyUse.js +3 -4
  44. package/dist/esm/cloud-host.js +16 -11
  45. package/dist/esm/core/EmailOtpRecords.js +19 -1
  46. package/dist/esm/core/EmailOtpStores.js +323 -924
  47. package/dist/esm/core/IdentityStore.js +44 -235
  48. package/dist/esm/core/NearPublicKeyStore.js +21 -63
  49. package/dist/esm/core/RegistrationCeremonyStore.js +3 -1793
  50. package/dist/esm/core/ThresholdService/config.js +1 -82
  51. package/dist/esm/core/ThresholdService/kv.js +3 -3
  52. package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +37 -5
  53. package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.js +4 -74
  54. package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +15 -51
  55. package/dist/esm/core/ThresholdService/stores/KeyStore.js +3 -3
  56. package/dist/esm/core/ThresholdService/stores/SessionStore.js +5 -81
  57. package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +185 -290
  58. package/dist/esm/core/ThresholdService/validation.js +18 -230
  59. package/dist/esm/core/WalletAuthMethodStore.js +22 -79
  60. package/dist/esm/core/WalletStore.js +58 -185
  61. package/dist/esm/core/WebAuthnAuthenticatorStore.js +57 -340
  62. package/dist/esm/core/WebAuthnCredentialBindingStore.js +90 -369
  63. package/dist/esm/core/WebAuthnLoginChallengeStore.js +17 -397
  64. package/dist/esm/core/WebAuthnSyncChallengeStore.js +17 -397
  65. package/dist/esm/core/authService/AuthService.js +2 -19
  66. package/dist/esm/core/authService/emailOtpChallengeProof.js +1 -1
  67. package/dist/esm/core/authService/emailOtpChallenges.js +1 -1
  68. package/dist/esm/core/authService/emailOtpConfig.js +1 -32
  69. package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +6 -153
  70. package/dist/esm/core/authService/googleEmailOtpRegistration.js +1 -1
  71. package/dist/esm/core/authService/nearPrivateKeySigning.js +7 -15
  72. package/dist/esm/core/authService/nearTransactions.js +2 -1
  73. package/dist/esm/core/authService/oidcVerification.js +3 -4
  74. package/dist/esm/core/authService/rateLimits.js +1 -31
  75. package/dist/esm/core/authService/registrationThresholdHelpers.js +2 -103
  76. package/dist/esm/core/authService/storeRegistry.js +2 -13
  77. package/dist/esm/core/authService/thresholdEcdsaKeyInventory.js +4 -5
  78. package/dist/esm/core/authService/webauthn.js +15 -50
  79. package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -6
  80. package/dist/esm/core/authService/webauthnVerificationOutcomes.js +60 -0
  81. package/dist/esm/core/authService/webauthnWalletBinding.js +2 -122
  82. package/dist/esm/core/d1IdentityStore.js +32 -66
  83. package/dist/esm/core/d1TenantStore.js +82 -0
  84. package/dist/esm/core/d1WalletAuthMethodStore.js +92 -143
  85. package/dist/esm/core/d1WalletStore.js +14 -12
  86. package/dist/esm/core/deviceLinking/linkedDeviceEmailOtpGrant.js +10 -8
  87. package/dist/esm/core/deviceLinking/linkedDeviceManagement.js +25 -3
  88. package/dist/esm/core/deviceLinking/linkedDeviceSession.js +6 -895
  89. package/dist/esm/core/deviceLinking/linkedDeviceSessionApproval.js +102 -0
  90. package/dist/esm/core/deviceLinking/linkedDeviceSessionRecord.js +668 -0
  91. package/dist/esm/core/emailOtpD1Statements.js +383 -0
  92. package/dist/esm/core/hostedAccountIds.js +2 -2
  93. package/dist/esm/core/keyMaterialBrands.js +2 -48
  94. package/dist/esm/core/nearRelayerAccountProvisioning.js +25 -150
  95. package/dist/esm/core/nearSignerWasmRuntime.js +1 -4
  96. package/dist/esm/core/rpcClients/near/NearClient.js +15 -218
  97. package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +1 -1
  98. package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +2 -4
  99. package/dist/esm/core/signingLanes/LaneLifecycleStore.js +0 -24
  100. package/dist/esm/core/signingLanes/WalletExecutionLaneProjection.js +5 -5
  101. package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +3 -8
  102. package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +1 -4
  103. package/dist/esm/core/storeBackends.js +208 -0
  104. package/dist/esm/core/thresholdEcdsaChainTarget.js +1 -7
  105. package/dist/esm/core/webAuthnD1Statements.js +92 -0
  106. package/dist/esm/core/webAuthnStoreBackends.js +198 -0
  107. package/dist/esm/hosted-wallet-gateway.js +33 -16
  108. package/dist/esm/index.js +2 -2
  109. package/dist/esm/local-hosted-wallet-gateway-worker.js +2 -23
  110. package/dist/esm/localHostedWalletGatewayHandler.js +299 -0
  111. package/dist/esm/localIntendedEcdsaFinalizeFault.js +85 -0
  112. package/dist/esm/localIntendedLinkExecuteFault.js +140 -0
  113. package/dist/esm/localIntendedRevokeFault.js +106 -0
  114. package/dist/esm/localIntendedSessionAdmissionFault.js +139 -0
  115. package/dist/esm/localIntendedYaoExportFault.js +117 -0
  116. package/dist/esm/localIntendedYaoFault.js +13 -16
  117. package/dist/esm/localIntendedYaoFinalizeFault.js +99 -0
  118. package/dist/esm/localIntendedYaoRecoveryFault.js +102 -0
  119. package/dist/esm/localIntendedYaoSigningFault.js +127 -0
  120. package/dist/esm/router/auth/authRequestValidation.js +1 -1
  121. package/dist/esm/router/auth/commonRouterUtils.js +10 -2
  122. package/dist/esm/router/auth/walletSessionFailure.js +1 -14
  123. package/dist/esm/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.js +23 -0
  124. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +86 -66
  125. package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +208 -0
  126. package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +246 -296
  127. package/dist/esm/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.js +14 -0
  128. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +62 -63
  129. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +3 -6
  130. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +1 -19
  131. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceManagementService.js +4 -3
  132. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +52 -9
  133. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -6
  134. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.js +100 -0
  135. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.js +7 -10
  136. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +33 -124
  137. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.js +2 -2
  138. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +9 -17
  139. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.js +6 -6
  140. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkSourceReader.js +3 -1
  141. package/dist/esm/router/cloudflare/d1/deviceLinking/index.js +3 -3
  142. package/dist/esm/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.js +69 -0
  143. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +39 -68
  144. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.js +69 -0
  145. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.js +2 -2
  146. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +26 -71
  147. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +20 -3
  148. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +7 -94
  149. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +5 -47
  150. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +26 -123
  151. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +0 -2
  152. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +2 -2
  153. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +15 -134
  154. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +54 -260
  155. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +1 -1
  156. package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +1 -28
  157. package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +2 -8
  158. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.js +1 -1
  159. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +3 -3
  160. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +23 -73
  161. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.js +15 -2
  162. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.js +12 -203
  163. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +16 -32
  164. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +29 -72
  165. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +4 -1
  166. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +3 -1
  167. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +6 -30
  168. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +261 -205
  169. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +5 -3
  170. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +2 -2
  171. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js +3 -3
  172. package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +43 -25
  173. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -1
  174. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +1 -1
  175. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +2 -1
  176. package/dist/esm/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.js +2 -60
  177. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +158 -19
  178. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.js +19 -49
  179. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.js +100 -0
  180. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +132 -33
  181. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +83 -4
  182. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +14 -49
  183. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +4 -4
  184. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +22 -116
  185. package/dist/esm/router/cloudflare/runtime/createSelfHostedCloudflareSigningWorker.js +1 -2
  186. package/dist/esm/router/cloudflare/runtime/walletConsoleTenantRootLineage.js +11 -2
  187. package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
  188. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +5 -6
  189. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +2 -1
  190. package/dist/esm/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.js +48 -21
  191. package/dist/esm/router/cloudflare.js +11480 -12853
  192. package/dist/esm/router/domains/ecdsa/routerAbEcdsaStrictRegistration.js +16 -5
  193. package/dist/esm/router/domains/ecdsa/thresholdEcdsaRequestValidation.js +2 -8
  194. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.js +33 -0
  195. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +17 -9
  196. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +29 -431
  197. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +7 -2
  198. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.js +2 -1
  199. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.js +70 -2
  200. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +134 -169
  201. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +77 -162
  202. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.js +205 -51
  203. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +29 -11
  204. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.js +182 -55
  205. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.js +2 -1
  206. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.js +63 -247
  207. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js +3 -2
  208. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.js +87 -132
  209. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.js +5 -4
  210. package/dist/esm/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.js +45 -0
  211. package/dist/esm/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.js +1 -1
  212. package/dist/esm/router/domains/emailOtp/emailOtpExportPolicy.js +1 -42
  213. package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +1 -6
  214. package/dist/esm/router/domains/emailOtp/emailOtpSessionRouteHelpers.js +1 -142
  215. package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.js +1 -1
  216. package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -2
  217. package/dist/esm/router/domains/passkeyCustody/walletRecoveryFinalization.js +23 -45
  218. package/dist/esm/router/domains/passkeyCustody/walletRecoveryKeyManifest.js +5 -5
  219. package/dist/esm/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.js +1 -1
  220. package/dist/esm/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.js +827 -0
  221. package/dist/esm/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.js +698 -0
  222. package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmission.js +209 -0
  223. package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.js +16 -15
  224. package/dist/esm/router/domains/signingOperations/routerAbOperationStepUp.js +313 -0
  225. package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +62 -2159
  226. package/dist/esm/router/domains/tenantRoot/tenantRootIdentityResolution.js +1 -1
  227. package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +18 -22
  228. package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +3 -4
  229. package/dist/esm/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.js +2 -2
  230. package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +97 -150
  231. package/dist/esm/router/express.js +5967 -6410
  232. package/dist/esm/router/framework/http.js +1 -4
  233. package/dist/esm/router/framework/ror/normalize.js +1 -1
  234. package/dist/esm/router/framework/routerApiRouteSurface.js +1 -1
  235. package/dist/esm/router/node/nodeHostedWalletGateway.js +64 -0
  236. package/dist/esm/router/node/nodeHostedWalletGatewayCheck.js +163 -0
  237. package/dist/esm/router/node/nodeHostedWalletGatewayMain.js +120 -0
  238. package/dist/esm/router/node/nodeHttp.js +79 -0
  239. package/dist/esm/router/node/nodeSqlite.js +43 -0
  240. package/dist/esm/router/node/signerSqlMigrations.js +48 -0
  241. package/dist/esm/router/transport/fetch/createFetchRouter.js +1 -1
  242. package/dist/esm/router/transport/fetch/routes/deviceLinking.js +16 -18
  243. package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +3 -5
  244. package/dist/esm/router/transport/fetch/routes/deviceManagement.js +15 -24
  245. package/dist/esm/router/transport/fetch/routes/normalSigningRouterProxy.js +3 -16
  246. package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +144 -461
  247. package/dist/esm/router/transport/fetch/routes/sessions.js +4 -4
  248. package/dist/esm/router/transport/fetch/routes/syncAccount.js +4 -6
  249. package/dist/esm/router/transport/fetch/routes/syncAccountBootstrap.js +2 -2
  250. package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +69 -23
  251. package/dist/esm/router/transport/fetch/routes/thresholdEd25519.js +52 -27
  252. package/dist/esm/shared-ts/src/authorization/capabilityKinds.js +1 -1
  253. package/dist/esm/shared-ts/src/authorization/delegatedAuthority.js +1 -1
  254. package/dist/esm/shared-ts/src/authorization/operationFingerprint.js +1 -2
  255. package/dist/esm/shared-ts/src/authorization/walletAuthority.js +99 -227
  256. package/dist/esm/shared-ts/src/authorization/walletCustodyOperation.js +4 -6
  257. package/dist/esm/shared-ts/src/device-linking/activeWalletSession.js +74 -0
  258. package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +50 -0
  259. package/dist/esm/shared-ts/src/device-linking/committedSignerPackages.js +8 -9
  260. package/dist/esm/shared-ts/src/device-linking/delegatedActivationPlan.js +3 -1
  261. package/dist/esm/shared-ts/src/device-linking/deviceManagement.js +55 -0
  262. package/dist/esm/shared-ts/src/device-linking/digests.js +10 -65
  263. package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +3 -1
  264. package/dist/esm/shared-ts/src/device-linking/index.js +4 -1
  265. package/dist/esm/shared-ts/src/device-linking/parsers.js +510 -1063
  266. package/dist/esm/shared-ts/src/device-linking/requestProof.js +5 -14
  267. package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +6 -9
  268. package/dist/esm/shared-ts/src/device-linking/walletSessionCredentialDelivery.js +9 -9
  269. package/dist/esm/shared-ts/src/device-linking/wireFields.js +59 -0
  270. package/dist/esm/shared-ts/src/near/nearClient.js +252 -0
  271. package/dist/esm/shared-ts/src/passkey-custody/credentialActivity.js +3 -1
  272. package/dist/esm/shared-ts/src/passkey-custody/custodyEnvelope.js +7 -5
  273. package/dist/esm/shared-ts/src/passkey-custody/custodySecretBinding.js +6 -4
  274. package/dist/esm/shared-ts/src/passkey-custody/primitives.js +5 -39
  275. package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -5
  276. package/dist/esm/shared-ts/src/signing-lanes/index.js +3 -3
  277. package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +5 -12
  278. package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +5 -14
  279. package/dist/esm/shared-ts/src/signing-lanes/participants.js +2 -5
  280. package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +7 -5
  281. package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +6 -45
  282. package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +423 -1511
  283. package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +323 -0
  284. package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +59 -0
  285. package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +1 -1
  286. package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +1 -2
  287. package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +49 -0
  288. package/dist/esm/shared-ts/src/utils/addAuthMethodRegistration.js +3 -4
  289. package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +8 -1
  290. package/dist/esm/shared-ts/src/utils/digestEncoding.js +63 -0
  291. package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +2 -2
  292. package/dist/esm/shared-ts/src/utils/exactRecord.js +44 -0
  293. package/dist/esm/shared-ts/src/utils/registrationAuthMethodInput.js +127 -0
  294. package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +2 -2
  295. package/dist/esm/shared-ts/src/utils/registrationIds.js +280 -0
  296. package/dist/esm/shared-ts/src/utils/registrationIntent.js +4 -1170
  297. package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +429 -0
  298. package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +11 -136
  299. package/dist/esm/shared-ts/src/utils/routerAbEd25519Yao.js +3 -163
  300. package/dist/esm/shared-ts/src/utils/routerAbEd25519YaoDigests.js +160 -0
  301. package/dist/esm/shared-ts/src/utils/routerAbNormalSigningIdentity.js +1 -4
  302. package/dist/esm/shared-ts/src/utils/routerAbPublicKeyset.js +7 -15
  303. package/dist/esm/shared-ts/src/utils/validation.js +37 -6
  304. package/dist/esm/shared-ts/src/utils/walletAuthMethodRecord.js +362 -0
  305. package/dist/esm/shared-ts/src/utils/wireSchema.js +77 -0
  306. package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +1 -1
  307. package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeReservation.js +1 -1
  308. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js +7 -11
  309. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.js +4 -8
  310. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.js +3 -1
  311. package/dist/esm/storage/d1Sql.js +10 -1
  312. package/dist/esm/storage/syncSqlite.js +79 -0
  313. package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +1 -1
  314. package/dist/esm/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.js +1 -1
  315. package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +1 -2
  316. package/dist/esm/threshold/session/signingSessionSeal/options.js +1 -1
  317. package/dist/esm/threshold/session/signingSessionSeal/transport/shared.js +18 -55
  318. package/dist/esm/threshold/statusCodes.js +1 -1
  319. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +3 -3
  320. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
  321. package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm +0 -0
  322. package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +8 -26
  323. package/dist/types/shared-ts/src/authorization/delegatedAuthority.d.ts +0 -8
  324. package/dist/types/shared-ts/src/authorization/operationFingerprint.d.ts +1 -3
  325. package/dist/types/shared-ts/src/authorization/walletAuthority.d.ts +25 -12
  326. package/dist/types/shared-ts/src/authorization/walletSessionIssuance.d.ts +2 -1
  327. package/dist/types/shared-ts/src/device-linking/activeWalletSession.d.ts +3 -2
  328. package/dist/types/shared-ts/src/device-linking/authorityActivation.d.ts +5 -0
  329. package/dist/types/shared-ts/src/device-linking/committedSignerPackages.d.ts +2 -5
  330. package/dist/types/shared-ts/src/device-linking/contracts.d.ts +8 -11
  331. package/dist/types/shared-ts/src/device-linking/contracts.typecheck.d.ts +2 -1
  332. package/dist/types/shared-ts/src/device-linking/deviceManagement.d.ts +7 -0
  333. package/dist/types/shared-ts/src/device-linking/digests.d.ts +0 -5
  334. package/dist/types/shared-ts/src/device-linking/ed25519ExportRoot.d.ts +3 -2
  335. package/dist/types/shared-ts/src/device-linking/index.d.ts +2 -0
  336. package/dist/types/shared-ts/src/device-linking/parsers.d.ts +4 -41
  337. package/dist/types/shared-ts/src/device-linking/requestProof.d.ts +0 -1
  338. package/dist/types/shared-ts/src/device-linking/sourceContribution.d.ts +3 -2
  339. package/dist/types/shared-ts/src/device-linking/walletSessionCredentialDelivery.d.ts +2 -1
  340. package/dist/types/shared-ts/src/device-linking/wireFields.d.ts +26 -0
  341. package/dist/types/shared-ts/src/near/actions.d.ts +4 -4
  342. package/dist/types/shared-ts/src/near/delegate.d.ts +3 -2
  343. package/dist/types/shared-ts/src/near/nearClient.d.ts +145 -0
  344. package/dist/types/shared-ts/src/passkey-custody/ceremonyCommitPayload.d.ts +0 -22
  345. package/dist/types/shared-ts/src/passkey-custody/credentialActivity.d.ts +2 -4
  346. package/dist/types/shared-ts/src/passkey-custody/custodyEnvelope.d.ts +9 -18
  347. package/dist/types/shared-ts/src/passkey-custody/custodySecretBinding.d.ts +8 -24
  348. package/dist/types/shared-ts/src/passkey-custody/index.d.ts +0 -2
  349. package/dist/types/shared-ts/src/passkey-custody/primitives.d.ts +0 -14
  350. package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -15
  351. package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +2 -51
  352. package/dist/types/shared-ts/src/signing-lanes/index.d.ts +1 -2
  353. package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +1 -2
  354. package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +5 -27
  355. package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +0 -11
  356. package/dist/types/shared-ts/src/signing-lanes/recordParsers.d.ts +6 -53
  357. package/dist/types/shared-ts/src/signing-lanes/records.d.ts +1 -2
  358. package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +15 -37
  359. package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +1 -20
  360. package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +4 -25
  361. package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +1 -41
  362. package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +6 -0
  363. package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +20 -0
  364. package/dist/types/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.d.ts +2 -35
  365. package/dist/types/shared-ts/src/threshold/ed25519OperationFingerprint.d.ts +8 -35
  366. package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +25 -0
  367. package/dist/types/shared-ts/src/threshold/participants.d.ts +3 -9
  368. package/dist/types/shared-ts/src/threshold/secp256k1.d.ts +0 -37
  369. package/dist/types/shared-ts/src/threshold/sessionPolicy.d.ts +24 -0
  370. package/dist/types/shared-ts/src/threshold/signingRootScope.d.ts +2 -5
  371. package/dist/types/shared-ts/src/utils/addAuthMethodRegistration.d.ts +3 -4
  372. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +7 -108
  373. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +16 -3
  374. package/dist/types/shared-ts/src/utils/canonicalPrimitives.d.ts +2 -0
  375. package/dist/types/shared-ts/src/utils/digestEncoding.d.ts +9 -0
  376. package/dist/types/shared-ts/src/utils/domainIds.d.ts +1 -2
  377. package/dist/types/shared-ts/src/utils/ecdsaKeyFactsInventory.d.ts +1 -2
  378. package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +5 -5
  379. package/dist/types/shared-ts/src/utils/emailOtpRecoveryKey.d.ts +0 -2
  380. package/dist/types/shared-ts/src/utils/errors.d.ts +0 -7
  381. package/dist/types/shared-ts/src/utils/exactRecord.d.ts +12 -0
  382. package/dist/types/shared-ts/src/utils/index.d.ts +5 -2
  383. package/dist/types/shared-ts/src/utils/jsonRpc.d.ts +3 -2
  384. package/dist/types/shared-ts/src/utils/near.d.ts +2 -1
  385. package/dist/types/shared-ts/src/utils/nearRpcResults.d.ts +7 -7
  386. package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -4
  387. package/dist/types/shared-ts/src/utils/registrationAuthMethodInput.d.ts +184 -0
  388. package/dist/types/shared-ts/src/utils/registrationContracts.d.ts +76 -0
  389. package/dist/types/shared-ts/src/utils/registrationEstablishedSession.d.ts +1 -2
  390. package/dist/types/shared-ts/src/utils/registrationIds.d.ts +56 -0
  391. package/dist/types/shared-ts/src/utils/registrationIntent.d.ts +9 -514
  392. package/dist/types/shared-ts/src/utils/registrationSignerPlan.d.ts +142 -0
  393. package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts +21 -92
  394. package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts +14 -99
  395. package/dist/types/shared-ts/src/utils/routerAbEd25519YaoDigests.d.ts +39 -0
  396. package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts +10 -15
  397. package/dist/types/shared-ts/src/utils/routerAbTraceContext.d.ts +2 -1
  398. package/dist/types/shared-ts/src/utils/secureRandomId.d.ts +0 -2
  399. package/dist/types/shared-ts/src/utils/signerDomain.d.ts +3 -35
  400. package/dist/types/shared-ts/src/utils/signerSlot.d.ts +0 -4
  401. package/dist/types/shared-ts/src/utils/signingSessionSeal.d.ts +1 -7
  402. package/dist/types/shared-ts/src/utils/validation.d.ts +10 -10
  403. package/dist/types/shared-ts/src/utils/variant.d.ts +11 -0
  404. package/dist/types/shared-ts/src/utils/variant.typecheck.d.ts +22 -0
  405. package/dist/types/shared-ts/src/utils/walletAddSignerActivation.d.ts +2 -2
  406. package/dist/types/shared-ts/src/utils/walletAuthAuthority.d.ts +1 -58
  407. package/dist/types/shared-ts/src/utils/walletAuthMethodRecord.d.ts +104 -0
  408. package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +3 -7
  409. package/dist/types/shared-ts/src/utils/webauthnDeviceInfo.d.ts +3 -4
  410. package/dist/types/shared-ts/src/utils/wireSchema.d.ts +60 -0
  411. package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +2 -1
  412. package/dist/types/shared-ts/src/wallet-recovery/index.d.ts +0 -1
  413. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeLocator.d.ts +0 -16
  414. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +2 -11
  415. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.d.ts +6 -18
  416. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.d.ts +0 -2
  417. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.d.ts +1 -3
  418. package/dist/types/wallet-server/src/authorization/capabilityPolicy.d.ts +0 -1
  419. package/dist/types/wallet-server/src/authorization/domain.d.ts +25 -5
  420. package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.d.ts +37 -0
  421. package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.typecheck.d.ts +2 -0
  422. package/dist/types/wallet-server/src/authorization/factorEvidence.d.ts +6 -7
  423. package/dist/types/wallet-server/src/authorization/service.d.ts +52 -3
  424. package/dist/types/wallet-server/src/cloud-host.d.ts +6 -2
  425. package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +10 -1
  426. package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +16 -116
  427. package/dist/types/wallet-server/src/core/IdentityStore.d.ts +2 -7
  428. package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +6 -16
  429. package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +29 -90
  430. package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -12
  431. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +10 -3
  432. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.d.ts +17 -48
  433. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/internalServiceHttp.d.ts +2 -1
  434. package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +4 -71
  435. package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +2 -1
  436. package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +4 -8
  437. package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +2 -1
  438. package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +1 -3
  439. package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +14 -47
  440. package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +2 -7
  441. package/dist/types/wallet-server/src/core/WalletStore.d.ts +3 -8
  442. package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +7 -22
  443. package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +14 -36
  444. package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +9 -34
  445. package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +9 -34
  446. package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -3
  447. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +6 -5
  448. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +9 -17
  449. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +3 -2
  450. package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +7 -23
  451. package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +3 -10
  452. package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +4 -3
  453. package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +4 -3
  454. package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +3 -70
  455. package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +3 -2
  456. package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +4 -3
  457. package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +5 -8
  458. package/dist/types/wallet-server/src/core/authService/nearPrivateKeySigning.d.ts +3 -2
  459. package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +2 -1
  460. package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +2 -1
  461. package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +4 -3
  462. package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -3
  463. package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -26
  464. package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -5
  465. package/dist/types/wallet-server/src/core/authService/thresholdEcdsaKeyInventory.d.ts +0 -23
  466. package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +8 -16
  467. package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +7 -7
  468. package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +43 -0
  469. package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +1 -28
  470. package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +6 -16
  471. package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +51 -0
  472. package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +11 -29
  473. package/dist/types/wallet-server/src/core/d1WalletStore.d.ts +6 -1
  474. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEd25519ExportRoot.d.ts +2 -1
  475. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEmailOtpGrant.d.ts +2 -1
  476. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceManagement.d.ts +44 -26
  477. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +19 -217
  478. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionApproval.d.ts +8 -0
  479. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionRecord.d.ts +259 -0
  480. package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -2
  481. package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +54 -0
  482. package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -15
  483. package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +4 -24
  484. package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +2 -3
  485. package/dist/types/wallet-server/src/core/nearSignerWasmRuntime.d.ts +0 -1
  486. package/dist/types/wallet-server/src/core/registrationContracts.d.ts +37 -108
  487. package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +5 -4
  488. package/dist/types/wallet-server/src/core/rpcClients/near/NearClient.d.ts +10 -106
  489. package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +4 -3
  490. package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +2 -3
  491. package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +2 -3
  492. package/dist/types/wallet-server/src/core/signingLanes/WalletExecutionLaneProjection.d.ts +3 -9
  493. package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +4 -4
  494. package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +3 -3
  495. package/dist/types/wallet-server/src/core/storeBackends.d.ts +83 -0
  496. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +13 -59
  497. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +51 -3
  498. package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +0 -1
  499. package/dist/types/wallet-server/src/core/types.d.ts +3 -24
  500. package/dist/types/wallet-server/src/core/webAuthnD1Statements.d.ts +29 -0
  501. package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +96 -0
  502. package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +11 -7
  503. package/dist/types/wallet-server/src/index.d.ts +1 -1
  504. package/dist/types/wallet-server/src/local-hosted-wallet-gateway-worker.d.ts +1 -4
  505. package/dist/types/wallet-server/src/localHostedWalletGatewayHandler.d.ts +12 -0
  506. package/dist/types/wallet-server/src/localIntendedEcdsaFinalizeFault.d.ts +33 -0
  507. package/dist/types/wallet-server/src/localIntendedLinkExecuteFault.d.ts +47 -0
  508. package/dist/types/wallet-server/src/localIntendedRevokeFault.d.ts +40 -0
  509. package/dist/types/wallet-server/src/localIntendedSessionAdmissionFault.d.ts +41 -0
  510. package/dist/types/wallet-server/src/localIntendedYaoExportFault.d.ts +41 -0
  511. package/dist/types/wallet-server/src/localIntendedYaoFault.d.ts +7 -1
  512. package/dist/types/wallet-server/src/localIntendedYaoFinalizeFault.d.ts +37 -0
  513. package/dist/types/wallet-server/src/localIntendedYaoRecoveryFault.d.ts +45 -0
  514. package/dist/types/wallet-server/src/localIntendedYaoSigningFault.d.ts +51 -0
  515. package/dist/types/wallet-server/src/router/auth/authRequestValidation.d.ts +10 -21
  516. package/dist/types/wallet-server/src/router/auth/commonRouterUtils.d.ts +5 -10
  517. package/dist/types/wallet-server/src/router/auth/walletSessionFailure.d.ts +1 -4
  518. package/dist/types/wallet-server/src/router/auth/webAuthnCredentialCodecs.d.ts +3 -2
  519. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.d.ts +12 -0
  520. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.d.ts +3 -2
  521. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +2 -2
  522. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthService.d.ts +1 -1
  523. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/authorizedOperationStatements.d.ts +30 -0
  524. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +45 -21
  525. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.d.ts +3 -0
  526. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/walletSessionAuthorityProjection.d.ts +2 -1
  527. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +57 -6
  528. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +2 -3
  529. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.d.ts +8 -21
  530. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.d.ts +14 -1
  531. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.d.ts +49 -0
  532. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.d.ts +1 -1
  533. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +4 -2
  534. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.d.ts +1 -1
  535. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.d.ts +2 -2
  536. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +8 -4
  537. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.d.ts +3 -5
  538. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.d.ts +7 -0
  539. package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.d.ts +1 -2
  540. package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.d.ts +33 -0
  541. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.d.ts +1 -1
  542. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +13 -3
  543. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.d.ts +24 -5
  544. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.d.ts +2 -3
  545. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +1 -3
  546. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +3 -4
  547. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.d.ts +9 -8
  548. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.d.ts +0 -2
  549. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.d.ts +5 -4
  550. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +1 -3
  551. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -21
  552. package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityRecords.d.ts +0 -23
  553. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +1 -2
  554. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.d.ts +11 -19
  555. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -54
  556. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +7 -19
  557. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.d.ts +4 -3
  558. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.d.ts +8 -12
  559. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +5 -8
  560. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -22
  561. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +6 -2
  562. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +10 -6
  563. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +15 -22
  564. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +5 -3
  565. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.d.ts +4 -3
  566. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.d.ts +5 -5
  567. package/dist/types/wallet-server/src/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.d.ts +3 -5
  568. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -1
  569. package/dist/types/wallet-server/src/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.d.ts +0 -16
  570. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +29 -14
  571. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.d.ts +15 -12
  572. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.d.ts +71 -0
  573. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +34 -24
  574. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +44 -26
  575. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +3 -7
  576. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +8 -19
  577. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleTenantRootLineage.d.ts +2 -1
  578. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -0
  579. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.d.ts +15 -2
  580. package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +2 -2
  581. package/dist/types/wallet-server/src/router/domains/ecdsa/routerAbEcdsaStrictRegistration.d.ts +9 -7
  582. package/dist/types/wallet-server/src/router/domains/ecdsa/thresholdEcdsaRequestValidation.d.ts +4 -4
  583. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.d.ts +46 -0
  584. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +5 -3
  585. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.d.ts +20 -79
  586. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -0
  587. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.d.ts +1 -1
  588. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.d.ts +4 -3
  589. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +62 -42
  590. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.d.ts +108 -32
  591. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryActivation.typecheck.d.ts +5 -0
  592. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.d.ts +36 -5
  593. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.d.ts +5 -4
  594. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.d.ts +41 -50
  595. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.d.ts +2 -2
  596. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.d.ts +3 -3
  597. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.d.ts +6 -5
  598. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.d.ts +14 -4
  599. package/dist/types/wallet-server/src/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.d.ts +12 -1
  600. package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/routerAbEd25519YaoWalletSession.d.ts +5 -5
  601. package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.d.ts +3 -4
  602. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpExportPolicy.d.ts +2 -27
  603. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRequestValidation.d.ts +1 -2
  604. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRouteHandlers.d.ts +2 -1
  605. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpSessionRouteHelpers.d.ts +2 -102
  606. package/dist/types/wallet-server/src/router/domains/passkeyCustody/envelopeRevocationAdmission.d.ts +2 -1
  607. package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +3 -2
  608. package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.d.ts +1 -9
  609. package/dist/types/wallet-server/src/router/domains/passkeyCustody/registrationCustodyOutcome.d.ts +2 -1
  610. package/dist/types/wallet-server/src/router/domains/passkeyCustody/verifiedCustodyFactor.d.ts +2 -1
  611. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationAdmission.d.ts +2 -1
  612. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +2 -28
  613. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryFinalization.d.ts +43 -1
  614. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryKeyManifest.d.ts +7 -7
  615. package/dist/types/wallet-server/src/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.d.ts +0 -3
  616. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.d.ts +165 -0
  617. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.d.ts +110 -0
  618. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmission.d.ts +360 -0
  619. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.d.ts +11 -10
  620. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.typecheck.d.ts +2 -0
  621. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbOperationStepUp.d.ts +165 -0
  622. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +16 -702
  623. package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +5 -12
  624. package/dist/types/wallet-server/src/router/domains/syncAccount/syncAccountRequestValidation.d.ts +5 -4
  625. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootCustodyLineage.d.ts +6 -1
  626. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootIdentityResolution.d.ts +4 -7
  627. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +2 -1
  628. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +8 -8
  629. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +4 -4
  630. package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.d.ts +4 -4
  631. package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRouteHandlers.d.ts +4 -62
  632. package/dist/types/wallet-server/src/router/express-adaptor.d.ts +2 -2
  633. package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +64 -61
  634. package/dist/types/wallet-server/src/router/framework/http.d.ts +0 -1
  635. package/dist/types/wallet-server/src/router/framework/ror/normalize.d.ts +2 -2
  636. package/dist/types/wallet-server/src/router/framework/routeMeteringPolicy.d.ts +3 -2
  637. package/dist/types/wallet-server/src/router/framework/routerApi.d.ts +1 -1
  638. package/dist/types/wallet-server/src/router/framework/routerApiRouteSurface.d.ts +3 -3
  639. package/dist/types/wallet-server/src/router/node/nodeHostedWalletGateway.d.ts +34 -0
  640. package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayCheck.d.ts +21 -0
  641. package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayMain.d.ts +2 -0
  642. package/dist/types/wallet-server/src/router/node/nodeHttp.d.ts +13 -0
  643. package/dist/types/wallet-server/src/router/node/nodeSqlite.d.ts +22 -0
  644. package/dist/types/wallet-server/src/router/node/signerSqlMigrations.d.ts +20 -0
  645. package/dist/types/wallet-server/src/router/transport/fetch/createFetchRouter.d.ts +1 -3
  646. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +5 -6
  647. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.d.ts +2 -2
  648. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceManagement.d.ts +14 -16
  649. package/dist/types/wallet-server/src/router/transport/fetch/routes/normalSigningRouterProxy.d.ts +0 -12
  650. package/dist/types/wallet-server/src/router/transport/fetch/routes/passkeyCustody.d.ts +1 -1
  651. package/dist/types/wallet-server/src/router/transport/fetch/routes/sessions.d.ts +2 -1
  652. package/dist/types/wallet-server/src/router/transport/fetch/routes/syncAccountBootstrap.d.ts +7 -13
  653. package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEcdsa.d.ts +3 -57
  654. package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEd25519.d.ts +0 -44
  655. package/dist/types/wallet-server/src/storage/d1Sql.d.ts +7 -0
  656. package/dist/types/wallet-server/src/storage/syncSqlite.d.ts +28 -0
  657. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.d.ts +0 -1
  658. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/idempotencyRecords.d.ts +5 -6
  659. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/transport/shared.d.ts +1 -0
  660. package/dist/types/wallet-server/src/threshold/statusCodes.d.ts +4 -4
  661. package/migrations/d1-signer/0036_r150_yao_lifecycle_decisions.sql +22 -0
  662. package/migrations/d1-signer/0037_r150_wallet_auth_method_revocation_replays.sql +26 -0
  663. package/migrations/d1-signer/0038_r150_registration_ceremony_cas_guard_seed.sql +8 -0
  664. package/migrations/d1-signer/0039_r150_revocation_replay_answer_kind.sql +9 -0
  665. package/package.json +1 -1
  666. package/dist/esm/core/ThresholdService/ecdsaClientRootProof.js +0 -27
  667. package/dist/esm/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.js +0 -115
  668. package/dist/esm/core/ThresholdService/secureRandomId.js +0 -9
  669. package/dist/esm/core/authService/record.js +0 -8
  670. package/dist/esm/core/authService/thresholdRuntimePolicy.js +0 -19
  671. package/dist/esm/core/authService/walletRegistrationPlanning.js +0 -49
  672. package/dist/esm/core/deviceLinking/index.js +0 -5
  673. package/dist/esm/core/errors.js +0 -54
  674. package/dist/esm/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.js +0 -39
  675. package/dist/esm/core/signingLanes/WalletKeyStore.js +0 -0
  676. package/dist/esm/core/signingLanes/index.js +0 -8
  677. package/dist/esm/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.js +0 -55
  678. package/dist/esm/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.js +0 -56
  679. package/dist/esm/shared-ts/src/signing-lanes/linkedEcdsaScope.js +0 -1
  680. package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker.js +0 -414
  681. package/dist/types/shared-ts/src/passkey-custody/credentialObservations.d.ts +0 -74
  682. package/dist/types/shared-ts/src/passkey-custody/kekContext.d.ts +0 -34
  683. package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.d.ts +0 -62
  684. package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.typecheck.d.ts +0 -2
  685. package/dist/types/shared-ts/src/signing-lanes/validation.d.ts +0 -11
  686. package/dist/types/shared-ts/src/utils/bigint.d.ts +0 -3
  687. package/dist/types/shared-ts/src/utils/paillier.d.ts +0 -37
  688. package/dist/types/shared-ts/src/utils/recoveryDomain.d.ts +0 -12
  689. package/dist/types/shared-ts/src/utils/signerDomain.typecheck.d.ts +0 -2
  690. package/dist/types/shared-ts/src/wallet-recovery/recoveryKekContext.d.ts +0 -37
  691. package/dist/types/wallet-server/src/core/ThresholdService/ecdsaClientRootProof.d.ts +0 -12
  692. package/dist/types/wallet-server/src/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.d.ts +0 -17
  693. package/dist/types/wallet-server/src/core/ThresholdService/secureRandomId.d.ts +0 -2
  694. package/dist/types/wallet-server/src/core/authService/record.d.ts +0 -2
  695. package/dist/types/wallet-server/src/core/authService/thresholdRuntimePolicy.d.ts +0 -4
  696. package/dist/types/wallet-server/src/core/authService/walletRegistrationPlanning.d.ts +0 -19
  697. package/dist/types/wallet-server/src/core/deviceLinking/index.d.ts +0 -5
  698. package/dist/types/wallet-server/src/core/errors.d.ts +0 -10
  699. package/dist/types/wallet-server/src/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.d.ts +0 -28
  700. package/dist/types/wallet-server/src/core/signingLanes/SigningLaneStore.d.ts +0 -15
  701. package/dist/types/wallet-server/src/core/signingLanes/WalletKeyStore.d.ts +0 -13
  702. package/dist/types/wallet-server/src/core/signingLanes/index.d.ts +0 -11
  703. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.d.ts +0 -35
  704. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.d.ts +0 -35
  705. /package/dist/esm/{core/signingLanes/SigningLaneStore.js → authorization/ecdsaWalletSessionAdmission.js} +0 -0
@@ -1,5 +1,6 @@
1
1
  import type { PasskeyCustodyEnvelopeRecord, WalletCustodyRegistrationOutcome } from '../../../shared-ts/src/passkey-custody';
2
- import type { WalletAddAuthMethodEmailOtpTargetV1, WalletEmailOtpEnrollmentMaterialV1 } from '../../../shared-ts/src/utils/registrationIntent';
2
+ import type { ActiveWalletAuthMethodRecordV2 } from '../../../shared-ts/src/utils/walletAuthMethodRecord';
3
+ import type { WalletAddAuthMethodEmailOtpTargetV1, WalletEmailOtpEnrollmentMaterialV1 } from '../../../shared-ts/src/utils/registrationAuthMethodInput';
3
4
  import type { RuntimePolicyScope } from '../../../shared-ts/src/threshold/signingRootScope';
4
5
  import type { DerivationClientSharePublicKey33B64u } from '../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap';
5
6
  import type { WalletAuthMethodId, WebAuthnRpId } from '../../../shared-ts/src/utils/domainIds';
@@ -8,22 +9,19 @@ import type { ActiveWalletAuthorityV1 } from '../../../shared-ts/src/authorizati
8
9
  import type { WalletAuthAuthority, WalletAuthAuthorityRef } from '../../../shared-ts/src/utils/walletAuthAuthority';
9
10
  import type { WebAuthnAuthenticatorDeviceInfo } from '../../../shared-ts/src/utils/webauthnDeviceInfo';
10
11
  import type { WALLET_AUTH_METHODS } from '../../../shared-ts/src/utils/signerDomain';
11
- import type { RouterAbEd25519YaoActivationAdmissionReceiptV1, RouterAbEd25519YaoBytes32V1, RouterAbEd25519YaoRegistrationAdmissionRequestV1 } from '../../../shared-ts/src/utils/routerAbEd25519Yao';
12
+ import type { RouterAbEd25519YaoRegistrationAdmissionRequestV1 } from '../../../shared-ts/src/utils/routerAbEd25519Yao';
12
13
  import type { RouterAbEd25519NormalSigningState } from '../../../shared-ts/src/utils/signingSessionSeal';
13
- import type { MpcWalletSigningQuotaId, WalletSessionAuthorizationId, WalletSessionId } from '../../../shared-ts/src/authorization/capabilityKinds';
14
- import type { WalletSessionOperationCredentialV1 } from '../../../shared-ts/src/device-linking';
14
+ import type { EmailOtpWalletRegistrationFinalizeAuthMethod, PasskeyWalletRegistrationFinalizeAuthMethod, WalletEd25519YaoSignerPublicResult, WalletRegistrationEd25519YaoActivationReference, WalletRegistrationEd25519YaoStart } from '../../../shared-ts/src/utils/registrationContracts';
15
15
  import type { RouterAbEcdsaDerivationPublicCapabilityV1, RouterAbEcdsaRegistrationActivationRequestV1, RouterAbEcdsaRegistrationActivationReceiptV1, RouterAbEcdsaRegistrationRequestFactsV1, RouterAbEcdsaRegistrationRequestV1, RouterAbEcdsaStrictForwardedRegistrationResponseV1, RouterAbEcdsaVerifiedClientActivationFactsV1, RouterAbPublicDigest32V1Wire } from '../../../shared-ts/src/utils/routerAbEcdsaDerivation';
16
- import type { AddAuthMethodInput, AddAuthMethodIntentCallerV1, AddAuthMethodIntentGrant, AddAuthMethodIntentV1, AddSignerIntentGrant, AddSignerIntentV1, AddSignerSelection, EmailOtpRegistrationProof, RegistrationAuthMethodInput, RegistrationNearAccountProvisioning, RegisterWalletInput, RegistrationIntentGrant, RegistrationIntentV1, RegistrationSignerSetSelection, ResolvedRegistrationNearAccount, ThresholdEcdsaAddSignerSpec, ThresholdEd25519AddSignerSpec, WalletAuthMethodRecord, WalletAuthMethodRecordV2, WalletAuthMethodRevocationProof, WalletId } from '../../../shared-ts/src/utils/registrationIntent';
16
+ import type { AddAuthMethodIntentCallerV1, AddAuthMethodIntentGrant, AddAuthMethodIntentV1, AddSignerIntentGrant, AddSignerIntentV1, RegistrationIntentGrant, RegistrationIntentV1, WalletId } from '../../../shared-ts/src/utils/registrationIntent';
17
+ import type { WalletAuthMethodRecord, WalletAuthMethodRevocationProof } from '../../../shared-ts/src/utils/walletAuthMethodRecord';
18
+ import type { AddSignerSelection, RegistrationNearAccountProvisioning, RegistrationSignerSetSelection, ResolvedRegistrationNearAccount, ThresholdEcdsaAddSignerSpec, ThresholdEd25519AddSignerSpec } from '../../../shared-ts/src/utils/registrationSignerPlan';
19
+ import type { AddAuthMethodInput, EmailOtpRegistrationProof, RegisterWalletInput } from '../../../shared-ts/src/utils/registrationAuthMethodInput';
17
20
  import type { EcdsaDerivationKeyScope, EcdsaDerivationRoleLocalFormatVersion, EcdsaDerivationServerBootstrapResponse, EcdsaThresholdKeyId, ThresholdEd25519AuthorityScope, ThresholdRuntimePolicyScope, ThresholdEcdsaChainTarget, WebAuthnAuthenticationCredential, RegistrationPreparationId } from './types';
18
21
  import { registrationPreparationIdFromString } from './types';
19
22
  export { registrationPreparationIdFromString };
20
23
  export type { RegistrationPreparationId };
21
24
  export type { AddAuthMethodInput, AddAuthMethodIntentGrant, AddAuthMethodIntentV1, AddSignerIntentGrant, AddSignerIntentV1, AddSignerSelection, EmailOtpRegistrationProof, RegisterWalletInput, RegistrationIntentGrant, RegistrationIntentV1, RegistrationSignerSetSelection, ThresholdEcdsaAddSignerSpec, ThresholdEd25519AddSignerSpec, WalletId, };
22
- export type CreateRegistrationIntentRequest = {
23
- wallet: RegisterWalletInput;
24
- authMethod: RegistrationAuthMethodInput;
25
- signerSelection: RegistrationSignerSetSelection;
26
- };
27
25
  export type CreateRegistrationIntentResponse = {
28
26
  ok: true;
29
27
  intent: RegistrationIntentV1;
@@ -36,10 +34,6 @@ export type CreateRegistrationIntentResponse = {
36
34
  message: string;
37
35
  retryAfterMs?: number;
38
36
  };
39
- export type CancelRegistrationIntentRequest = {
40
- registrationIntentGrant: RegistrationIntentGrant;
41
- registrationIntentDigestB64u: string;
42
- };
43
37
  export type CancelRegistrationIntentResponse = {
44
38
  ok: true;
45
39
  cancelled: boolean;
@@ -83,7 +77,7 @@ export type CreateAddAuthMethodIntentResponse = {
83
77
  message: string;
84
78
  retryAfterMs?: number;
85
79
  };
86
- export type AddAuthMethodExistingAuth = {
80
+ type AddAuthMethodExistingAuth = {
87
81
  kind: 'webauthn_assertion';
88
82
  rpId: WebAuthnRpId;
89
83
  credential: WebAuthnAuthenticationCredential;
@@ -116,7 +110,7 @@ export type PasskeyWalletRegistrationAuthorityInput = Extract<WalletRegistration
116
110
  export type EmailOtpWalletRegistrationAuthorityInput = Extract<WalletRegistrationAuthorityInput, {
117
111
  kind: typeof WALLET_AUTH_METHODS.emailOtp;
118
112
  }>;
119
- export type WalletAddAuthMethodAuthorityInput = {
113
+ type WalletAddAuthMethodAuthorityInput = {
120
114
  kind: typeof WALLET_AUTH_METHODS.passkey;
121
115
  webauthnRegistration?: never;
122
116
  emailOtpRegistrationProof?: never;
@@ -168,10 +162,9 @@ export type WalletAddAuthMethodStartResponse = {
168
162
  }>;
169
163
  };
170
164
  /**
171
- * The source method's envelope. Refactor 109C's browser opens it with the
172
- * source factor and reseals the same custody seed under the verified
173
- * Email OTP factor, so an added Email OTP method can unlock the wallet it
174
- * was added to.
165
+ * The source method's envelope. The browser opens it with the source factor
166
+ * and reseals the same custody seed under the verified Email OTP factor, so
167
+ * an added Email OTP method can unlock the wallet it was added to.
175
168
  */
176
169
  custodyEnvelope: PasskeyCustodyEnvelopeRecord;
177
170
  registration?: never;
@@ -190,8 +183,8 @@ export type WalletAddAuthMethodStartResponse = {
190
183
  * so a caller cannot assert it. See the finalize command's `authorization`.
191
184
  */
192
185
  /**
193
- * Refactor 109C: whether this addition expects to find the wallet's shared
194
- * Email OTP enrollment or to create it.
186
+ * Whether this addition expects to find the wallet's shared Email OTP
187
+ * enrollment or to create it.
195
188
  *
196
189
  * The enrollment is per wallet and per provider identity, not per method: a
197
190
  * wallet that has linked a device already has one, and every Email method on
@@ -204,7 +197,7 @@ export type WalletAddAuthMethodStartResponse = {
204
197
  * because the two cases carry different material and a caller that guessed
205
198
  * wrong should be refused rather than quietly switched.
206
199
  */
207
- export type { WalletAddAuthMethodEmailOtpTargetV1, WalletEmailOtpEnrollmentMaterialV1, } from '../../../shared-ts/src/utils/registrationIntent';
200
+ export type { WalletAddAuthMethodEmailOtpTargetV1, WalletEmailOtpEnrollmentMaterialV1, } from '../../../shared-ts/src/utils/registrationAuthMethodInput';
208
201
  export type WalletAddAuthMethodFinalizeRequest = {
209
202
  addAuthMethodCeremonyId: string;
210
203
  webauthnRegistration: unknown;
@@ -217,8 +210,8 @@ export type WalletAddAuthMethodFinalizeRequest = {
217
210
  emailOtpTarget?: never;
218
211
  } | {
219
212
  /**
220
- * Refactor 109C's Email OTP target: the factor is verified by its one-use
221
- * grant rather than by a created credential, so this finalize carries the
213
+ * The Email OTP target: the factor is verified by its one-use grant
214
+ * rather than by a created credential, so this finalize carries the
222
215
  * resealed custody envelope and no WebAuthn registration.
223
216
  */
224
217
  addAuthMethodCeremonyId: string;
@@ -231,11 +224,11 @@ export type WalletAddAuthMethodFinalizeRequest = {
231
224
  custodyEnvelope?: never;
232
225
  emailOtpTarget?: never;
233
226
  };
234
- export type WalletAuthMethodStatusAnnotation<Status extends WalletAuthMethodRecord['status']> = {
227
+ type WalletAuthMethodStatusAnnotation<Status extends WalletAuthMethodRecord['status']> = {
235
228
  kind: WalletAuthMethodRecord['kind'];
236
229
  status: Status;
237
230
  };
238
- export type WalletAddAuthMethodFinalizeResponse = {
231
+ export type WalletAddAuthMethodFinalizeSuccess = {
239
232
  ok: true;
240
233
  walletId: WalletId;
241
234
  authority: WalletAuthAuthority;
@@ -257,7 +250,8 @@ export type WalletAddAuthMethodFinalizeResponse = {
257
250
  kind: 'email_otp';
258
251
  status: 'active';
259
252
  };
260
- } | {
253
+ };
254
+ export type WalletAddAuthMethodFinalizeResponse = WalletAddAuthMethodFinalizeSuccess | {
261
255
  ok: false;
262
256
  code: string;
263
257
  message: string;
@@ -304,11 +298,11 @@ export type WalletAddSignerEd25519YaoStart = {
304
298
  admissionRequest: RouterAbEd25519YaoRegistrationAdmissionRequestV1;
305
299
  custodyEnvelope: PasskeyCustodyEnvelopeRecord;
306
300
  };
307
- export type WalletAddSignerStartResponse = ({
301
+ export type WalletAddSignerStartSuccess = {
308
302
  ok: true;
309
303
  addSignerCeremonyId: string;
310
304
  intent: AddSignerIntentV1;
311
- } & ({
305
+ } & {
312
306
  readonly authorizationKind: 'webauthn_assertion';
313
307
  } & ({
314
308
  kind: 'near_ed25519';
@@ -318,7 +312,8 @@ export type WalletAddSignerStartResponse = ({
318
312
  kind: 'evm_family_ecdsa';
319
313
  ecdsa: WalletAddSignerEcdsaPreparePayload;
320
314
  ed25519?: never;
321
- }))) | {
315
+ });
316
+ export type WalletAddSignerStartResponse = WalletAddSignerStartSuccess | {
322
317
  ok: false;
323
318
  code: string;
324
319
  message: string;
@@ -395,7 +390,7 @@ export type WalletAddSignerFinalizeRequest = {
395
390
  };
396
391
  ed25519?: never;
397
392
  });
398
- export type WalletAddSignerFinalizeResponse = ({
393
+ export type WalletAddSignerFinalizeSuccess = {
399
394
  ok: true;
400
395
  walletId: WalletId;
401
396
  } & ({
@@ -410,8 +405,11 @@ export type WalletAddSignerFinalizeResponse = ({
410
405
  ecdsa: {
411
406
  walletKeys: WalletRegistrationEcdsaWalletKey[];
412
407
  };
408
+ /** The authorizing authority, extended with the added ECDSA signer. */
409
+ authority: ActiveWalletAuthorityV1;
413
410
  ed25519?: never;
414
- })) | {
411
+ });
412
+ export type WalletAddSignerFinalizeResponse = WalletAddSignerFinalizeSuccess | {
415
413
  ok: false;
416
414
  code: string;
417
415
  message: string;
@@ -496,11 +494,7 @@ export type WalletRegistrationEcdsaWalletKey = {
496
494
  participantIds: readonly [1, 2];
497
495
  publicCapability: RouterAbEcdsaDerivationPublicCapabilityV1;
498
496
  };
499
- export type WalletRegistrationEd25519YaoStart = {
500
- admissionRequest: RouterAbEd25519YaoRegistrationAdmissionRequestV1;
501
- admissionReceipt: RouterAbEd25519YaoActivationAdmissionReceiptV1<'registration'>;
502
- };
503
- export type WalletRegistrationStartSignerWork = {
497
+ type WalletRegistrationStartSignerWork = {
504
498
  kind: 'near_ed25519';
505
499
  ed25519: WalletRegistrationEd25519YaoStart;
506
500
  ecdsa?: never;
@@ -513,12 +507,7 @@ export type WalletRegistrationStartSignerWork = {
513
507
  ed25519: WalletRegistrationEd25519YaoStart;
514
508
  ecdsa: WalletRegistrationEcdsaPreparePayload;
515
509
  };
516
- export type WalletRegistrationEd25519YaoActivationReference = {
517
- kind: 'router_ab_ed25519_yao_activation_reference_v1';
518
- lifecycle_id: string;
519
- session_id: RouterAbEd25519YaoBytes32V1;
520
- };
521
- export type WalletRegistrationEd25519YaoFinalize = {
510
+ type WalletRegistrationEd25519YaoFinalize = {
522
511
  activationReference: WalletRegistrationEd25519YaoActivationReference;
523
512
  };
524
513
  export type WalletRegistrationEcdsaFinalize = {
@@ -527,9 +516,9 @@ export type WalletRegistrationEcdsaFinalize = {
527
516
  /**
528
517
  * One finalize call commits one signer branch. A wallet planned with both
529
518
  * signers finalizes twice — `evm_family_ecdsa` first, which returns the wallet
530
- * ECDSA-ready, then `near_ed25519` once the Yao ceremony settles (Refactor 94
531
- * Phase 4+5). There is deliberately no combined member: registration success
532
- * no longer waits on Ed25519, so nothing can commit both at once.
519
+ * ECDSA-ready, then `near_ed25519` once the Yao ceremony settles. There is
520
+ * deliberately no combined member: registration success no longer waits on
521
+ * Ed25519, so nothing can commit both at once.
533
522
  */
534
523
  export type WalletRegistrationFinalizeSignerWork = {
535
524
  kind: 'near_ed25519';
@@ -623,60 +612,6 @@ type WalletRegistrationFinalizeRequestBase = {
623
612
  emailOtpEnrollment?: WalletEmailOtpEnrollmentMaterialV1;
624
613
  };
625
614
  export type WalletRegistrationFinalizeRequest = WalletRegistrationFinalizeRequestBase & WalletRegistrationFinalizeSignerWork;
626
- export type WalletRegistrationFinalizeAuthMethod = {
627
- kind: typeof WALLET_AUTH_METHODS.passkey;
628
- credentialIdB64u: string;
629
- credentialPublicKeyB64u: string;
630
- } | {
631
- kind: typeof WALLET_AUTH_METHODS.emailOtp;
632
- registrationAuthorityId: string;
633
- };
634
- export type PasskeyWalletRegistrationFinalizeAuthMethod = Extract<WalletRegistrationFinalizeAuthMethod, {
635
- kind: typeof WALLET_AUTH_METHODS.passkey;
636
- }>;
637
- export type EmailOtpWalletRegistrationFinalizeAuthMethod = Extract<WalletRegistrationFinalizeAuthMethod, {
638
- kind: typeof WALLET_AUTH_METHODS.emailOtp;
639
- }>;
640
- type WalletRegistrationEd25519YaoBootstrapSessionIdentity = {
641
- walletId: WalletId;
642
- nearAccountId: string;
643
- nearEd25519SigningKeyId: string;
644
- authorityScope: ThresholdEd25519AuthorityScope;
645
- thresholdSessionId: string;
646
- authorizationId: WalletSessionAuthorizationId;
647
- walletSessionId: WalletSessionId;
648
- quotaId: MpcWalletSigningQuotaId;
649
- expiresAtMs: number;
650
- participantIds: readonly [number, number];
651
- remainingUses: number;
652
- signingRootId: string;
653
- signingRootVersion: string;
654
- runtimePolicyScope: ThresholdRuntimePolicyScope;
655
- routerAbNormalSigning: RouterAbEd25519NormalSigningState;
656
- };
657
- /**
658
- * The Ed25519 Yao view of one exact Wallet Session. A session this response
659
- * just issued carries its own primary operation credential; a session it
660
- * reuses carries none, because the credential was delivered once by the
661
- * issuing response and a committed digest cannot reproduce plaintext.
662
- */
663
- export type WalletRegistrationEd25519YaoBootstrapSession = (WalletRegistrationEd25519YaoBootstrapSessionIdentity & {
664
- sessionKind: 'issued_exact_wallet_session';
665
- operationCredential: WalletSessionOperationCredentialV1;
666
- }) | (WalletRegistrationEd25519YaoBootstrapSessionIdentity & {
667
- sessionKind: 'already_committed_exact_wallet_session';
668
- operationCredential?: never;
669
- });
670
- export type WalletEd25519YaoSignerPublicResult = {
671
- signerSlot: number;
672
- nearAccountId: string;
673
- nearEd25519SigningKeyId: string;
674
- publicKey: string;
675
- relayerKeyId: string;
676
- keyVersion: string;
677
- recoveryExportCapable: true;
678
- participantIds: readonly [number, number];
679
- };
680
615
  export type WalletRegistrationEd25519YaoPublicResult = WalletEd25519YaoSignerPublicResult & {
681
616
  thresholdSessionId: string;
682
617
  runtimePolicyScope: ThresholdRuntimePolicyScope;
@@ -687,9 +622,7 @@ type WalletRegistrationFinalizeResponseBase = {
687
622
  walletId: WalletId;
688
623
  authority: WalletAuthAuthority;
689
624
  foundingAuthority: ActiveWalletAuthorityV1;
690
- foundingAuthMethod: Extract<WalletAuthMethodRecordV2, {
691
- readonly status: 'active';
692
- }>;
625
+ foundingAuthMethod: ActiveWalletAuthMethodRecordV2;
693
626
  registrationDiagnostics?: WalletRegistrationRouteDiagnostics;
694
627
  /**
695
628
  * What became of this leg's custody commit. Absent when no custody payload
@@ -740,8 +673,4 @@ export type WalletRegistrationFinalizeResponse = WalletRegistrationFinalizeSucce
740
673
  message: string;
741
674
  retryAfterMs?: number;
742
675
  };
743
- export type WalletRegistrationFinalizeRouteSuccess = WalletRegistrationFinalizeSuccess;
744
- export type WalletRegistrationFinalizeRouteResponse = WalletRegistrationFinalizeRouteSuccess | Exclude<WalletRegistrationFinalizeResponse, {
745
- ok: true;
746
- }>;
747
676
  //# sourceMappingURL=registrationContracts.d.ts.map
@@ -20,7 +20,7 @@ export type RouterAbConfiguredSigningWorkerPrivateTransport = Extract<RouterAbSi
20
20
  readonly kind: 'configured';
21
21
  }>;
22
22
  export declare function requireRouterAbConfiguredSigningWorkerPrivateTransport(transport: RouterAbSigningWorkerPrivateTransport): RouterAbConfiguredSigningWorkerPrivateTransport;
23
- export type RouterAbNormalSigningRuntimeConfig = {
23
+ type RouterAbNormalSigningRuntimeConfig = {
24
24
  readonly policy: RouterAbNormalSigningServerPolicy;
25
25
  readonly signingWorkerTransport: RouterAbSigningWorkerPrivateTransport;
26
26
  };
@@ -31,13 +31,13 @@ export type RouterAbNormalSigningAuthorizationIdentity = {
31
31
  readonly kind: 'operation_step_up';
32
32
  readonly materialActivationId: MpcMaterialActivationId;
33
33
  };
34
- export type RouterAbNormalSigningPrepareReplayReservationInput = {
34
+ type RouterAbNormalSigningPrepareReplayReservationInput = {
35
35
  readonly curve: 'ed25519' | 'ecdsa';
36
36
  readonly authorizationIdentity: RouterAbNormalSigningAuthorizationIdentity;
37
37
  readonly requestId: string;
38
38
  readonly expiresAtMs: number;
39
39
  };
40
- export type RouterAbNormalSigningPrepareReplayReservationResult = {
40
+ type RouterAbNormalSigningPrepareReplayReservationResult = {
41
41
  readonly ok: true;
42
42
  } | {
43
43
  readonly ok: false;
@@ -45,7 +45,7 @@ export type RouterAbNormalSigningPrepareReplayReservationResult = {
45
45
  readonly code: string;
46
46
  readonly message: string;
47
47
  };
48
- export type RouterAbClampedSessionPolicy = {
48
+ type RouterAbClampedSessionPolicy = {
49
49
  readonly ttlMs: number;
50
50
  readonly remainingUses: number;
51
51
  };
@@ -68,4 +68,5 @@ export declare class RouterAbNormalSigningRuntime {
68
68
  }): RouterAbClampedSessionPolicy;
69
69
  reservePrepareReplay(input: RouterAbNormalSigningPrepareReplayReservationInput): Promise<RouterAbNormalSigningPrepareReplayReservationResult>;
70
70
  }
71
+ export {};
71
72
  //# sourceMappingURL=RouterAbNormalSigningRuntime.d.ts.map
@@ -1,9 +1,10 @@
1
- import type { AccountView, AccessKeyInfoView, AccessKeyList, AccessKeyView, BlockReference, FinalityReference, FunctionCallPermissionView, RpcQueryRequest, TxExecutionStatus } from '@near-js/types';
2
- import { type JsonRpcErrorDetails } from '../../../../../shared-ts/src/utils/jsonRpc';
3
- import { type DecodedNearFinalExecutionOutcome, type DecodedNearBlockReference, type NearRpcResultDecoder } from '../../../../../shared-ts/src/utils/nearRpcResults';
1
+ import type { JsonRpcErrorDetails } from '../../../../../shared-ts/src/utils/jsonRpc';
2
+ import type { DecodedNearFinalExecutionOutcome } from '../../../../../shared-ts/src/utils/nearRpcResults';
3
+ import { NearJsonRpcClient } from '../../../../../shared-ts/src/near/nearClient';
4
4
  export type { AccessKeyList } from '@near-js/types';
5
+ export { SignedTransaction, type NearClient } from '../../../../../shared-ts/src/near/nearClient';
5
6
  type NearRpcErrorType = 'InvalidTxError' | 'ActionError' | 'TxExecutionError' | 'RpcError' | 'Failure' | 'Unknown';
6
- export type NearRpcFailureKind = 'transaction_not_found' | 'account_not_found' | 'access_key_not_found' | 'invalid_nonce' | 'expired' | 'invalid_transaction' | 'action_error' | 'execution_failure' | 'infrastructure_failure' | 'unknown';
7
+ type NearRpcFailureKind = 'transaction_not_found' | 'account_not_found' | 'access_key_not_found' | 'invalid_nonce' | 'expired' | 'invalid_transaction' | 'action_error' | 'execution_failure' | 'infrastructure_failure' | 'unknown';
7
8
  export declare class NearRpcError extends Error {
8
9
  code?: number;
9
10
  type: NearRpcErrorType;
@@ -28,107 +29,10 @@ export declare class NearRpcError extends Error {
28
29
  static fromRpcError(operationName: string, err: JsonRpcErrorDetails): NearRpcError;
29
30
  static fromOutcome(operationName: string, outcome: any, failure: any): NearRpcError;
30
31
  }
31
- export interface ViewAccountParams {
32
- account: string;
33
- block_id?: string;
34
- }
35
- export type FullAccessKey = Omit<AccessKeyInfoView, 'access_key'> & {
36
- access_key: Omit<AccessKeyView, 'permission'> & {
37
- permission: 'FullAccess';
38
- };
39
- };
40
- export type FunctionCallAccessKey = Omit<AccessKeyInfoView, 'access_key'> & {
41
- access_key: Omit<AccessKeyView, 'permission'> & {
42
- permission: FunctionCallPermissionView;
43
- };
44
- };
45
- export declare enum RpcCallType {
46
- Query = "query",
47
- View = "view",
48
- Send = "send_tx",
49
- Block = "block",
50
- Call = "call_function"
51
- }
52
- export declare class SignedTransaction {
53
- transaction: unknown;
54
- signature: unknown;
55
- borsh_bytes: number[];
56
- nonceLease?: unknown;
57
- serverDispatch?: {
58
- transactionHash: string;
59
- rpcResult: unknown;
60
- };
61
- constructor(data: {
62
- transaction: unknown;
63
- signature: unknown;
64
- borsh_bytes: number[];
65
- nonceLease?: unknown;
66
- serverDispatch?: {
67
- transactionHash: string;
68
- rpcResult: unknown;
69
- };
70
- });
71
- static fromPlain(input: {
72
- transaction: unknown;
73
- signature: unknown;
74
- borsh_bytes: number[];
75
- nonceLease?: unknown;
76
- serverDispatch?: {
77
- transactionHash: string;
78
- rpcResult: unknown;
79
- };
80
- }): SignedTransaction;
81
- encode(): ArrayBuffer;
82
- base64Encode(): string;
83
- }
84
- export interface NearClient {
85
- viewAccessKey(accountId: string, publicKey: string, finalityQuery?: FinalityReference): Promise<AccessKeyView>;
86
- viewAccessKeyList(accountId: string, finalityQuery?: FinalityReference): Promise<AccessKeyList>;
87
- viewAccount(accountId: string): Promise<AccountView>;
88
- viewCode(accountId: string, finalityQuery?: FinalityReference): Promise<Uint8Array>;
89
- viewBlock(params: BlockReference): Promise<DecodedNearBlockReference>;
90
- sendTransaction(signedTransaction: SignedTransaction, waitUntil?: TxExecutionStatus): Promise<DecodedNearFinalExecutionOutcome>;
91
- txStatus(txHash: string, senderAccountId: string): Promise<DecodedNearFinalExecutionOutcome>;
92
- query<T>(params: RpcQueryRequest, decodeResult: NearRpcResultDecoder<T>): Promise<T>;
93
- callFunction<A, T>(accountId: string, method: string, args: A, decodeResult: NearRpcResultDecoder<T>, blockQuery?: BlockReference): Promise<T>;
94
- view<A, T>(params: {
95
- account: string;
96
- method: string;
97
- args: A;
98
- decodeResult: NearRpcResultDecoder<T>;
99
- }): Promise<T>;
100
- getAccessKeys(params: ViewAccountParams): Promise<{
101
- fullAccessKeys: FullAccessKey[];
102
- functionCallAccessKeys: FunctionCallAccessKey[];
103
- }>;
104
- }
105
- export declare class MinimalNearClient implements NearClient {
106
- private readonly rpcUrls;
107
- constructor(rpcUrl: string | string[]);
108
- private static normalizeRpcUrls;
109
- private buildRequestBody;
110
- private postOnce;
111
- private requestWithFallback;
112
- private unwrapRpcResult;
113
- private makeRpcCall;
114
- query<T>(params: RpcQueryRequest, decodeResult: NearRpcResultDecoder<T>): Promise<T>;
115
- viewAccessKey(accountId: string, publicKey: string, finalityQuery?: FinalityReference): Promise<AccessKeyView>;
116
- viewAccessKeyList(accountId: string, finalityQuery?: FinalityReference): Promise<AccessKeyList>;
117
- viewAccount(accountId: string): Promise<AccountView>;
118
- viewCode(accountId: string, finalityQuery?: FinalityReference): Promise<Uint8Array>;
119
- viewBlock(params: BlockReference): Promise<DecodedNearBlockReference>;
120
- sendTransaction(signedTransaction: SignedTransaction, waitUntil?: TxExecutionStatus): Promise<DecodedNearFinalExecutionOutcome>;
121
- txStatus(txHash: string, senderAccountId: string): Promise<DecodedNearFinalExecutionOutcome>;
122
- callFunction<A, T>(accountId: string, method: string, args: A, decodeResult: NearRpcResultDecoder<T>, blockQuery?: BlockReference): Promise<T>;
123
- view<A, T>(params: {
124
- account: string;
125
- method: string;
126
- args: A;
127
- decodeResult: NearRpcResultDecoder<T>;
128
- }): Promise<T>;
129
- getAccessKeys({ account, block_id }: ViewAccountParams): Promise<{
130
- fullAccessKeys: FullAccessKey[];
131
- functionCallAccessKeys: FunctionCallAccessKey[];
132
- }>;
32
+ export declare class MinimalNearClient extends NearJsonRpcClient {
33
+ protected errorFromRpc(operationName: string, error: JsonRpcErrorDetails): Error;
34
+ protected errorFromWrappedResult(message: string): Error;
35
+ protected errorFromOutcome(operationName: string, outcome: DecodedNearFinalExecutionOutcome, failure: unknown): Error;
36
+ protected errorFromFailedCall(operationName: string, error: unknown): NearRpcError;
133
37
  }
134
38
  //# sourceMappingURL=NearClient.d.ts.map
@@ -2,19 +2,19 @@ import type { LaneEnrollmentRevocationResultV1, RevokeLaneEnrollmentV1 } from '.
2
2
  import type { LaneLifecycleRevocationRequestV1 } from './LaneLifecycleApplicationService';
3
3
  import { LaneEnrollmentRevocation } from './LaneEnrollmentRevocation';
4
4
  import type { LaneLifecycleStore } from './LaneLifecycleStore';
5
- export type LaneAggregateRevocationRequestV1 = {
5
+ type LaneAggregateRevocationRequestV1 = {
6
6
  readonly command: RevokeLaneEnrollmentV1;
7
7
  readonly orderedChildren: readonly [
8
8
  LaneLifecycleRevocationRequestV1,
9
9
  ...LaneLifecycleRevocationRequestV1[]
10
10
  ];
11
11
  };
12
- export type LaneAggregateRevocationApplicationServiceOptionsV1 = {
12
+ type LaneAggregateRevocationApplicationServiceOptionsV1 = {
13
13
  readonly lifecycleStore: Pick<LaneLifecycleStore, 'getEnrollment' | 'fenceEnrollmentRevocation' | 'listEnrollmentProductEpochs'>;
14
14
  readonly laneLifecycle: LaneAggregateChildRevocationPortV1;
15
15
  readonly enrollmentRevocation: Pick<LaneEnrollmentRevocation, 'completeLaneEnrollmentRevocationV1'>;
16
16
  };
17
- export interface LaneAggregateChildRevocationPortV1 {
17
+ interface LaneAggregateChildRevocationPortV1 {
18
18
  revokeSigningLaneV1(input: LaneLifecycleRevocationRequestV1): Promise<{
19
19
  readonly outcome: 'applied' | 'replayed' | 'conflict';
20
20
  }>;
@@ -32,4 +32,5 @@ export declare class LaneAggregateRevocationApplicationService {
32
32
  }>;
33
33
  revokeLaneEnrollmentV1(input: LaneAggregateRevocationRequestV1): Promise<LaneEnrollmentRevocationResultV1>;
34
34
  }
35
+ export {};
35
36
  //# sourceMappingURL=LaneAggregateRevocationApplicationService.d.ts.map
@@ -1,7 +1,6 @@
1
1
  import type { LaneEnrollmentId, LaneOperationId, LaneShareEpoch, SigningLaneId, WalletKeyId } from '../../../../shared-ts/src/signing-lanes';
2
2
  import type { WalletId } from '../../../../shared-ts/src/utils/domainIds';
3
- export type LaneEffectKind = 'activate_server_material' | 'retire_server_material' | 'invalidate_holder_material';
4
- export type LaneEffectStatus = 'recorded' | 'confirmed';
3
+ type LaneEffectKind = 'activate_server_material' | 'retire_server_material' | 'invalidate_holder_material';
5
4
  type LaneEffectRecordBaseV1 = {
6
5
  readonly kind: 'lane_effect_record_v1';
7
6
  readonly effectId: string;
@@ -41,7 +40,7 @@ export type LaneEffectMutationResult = {
41
40
  readonly requestedCommandDigestB64u: string;
42
41
  readonly storedCommandDigestB64u: string;
43
42
  };
44
- export type LaneEffectLookup = {
43
+ type LaneEffectLookup = {
45
44
  readonly effectId: string;
46
45
  };
47
46
  export interface LaneEffectJournalStore {
@@ -2,7 +2,7 @@ import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1
2
2
  import type { LaneEnrollmentId, LaneOperationId, LaneShareEpoch, SigningLaneId, WalletKeyId } from '../../../../shared-ts/src/signing-lanes';
3
3
  import type { MpcMaterialActivationRef, WalletId } from '../../../../shared-ts/src/utils/domainIds';
4
4
  /** A version is monotonic inside one immutable protocol or enrollment row. */
5
- export type LaneVersionedRecord<T> = {
5
+ type LaneVersionedRecord<T> = {
6
6
  readonly version: number;
7
7
  readonly commandDigestB64u: string;
8
8
  readonly value: T;
@@ -224,6 +224,5 @@ export type LaneEnrollmentRevocationCommitInput = {
224
224
  readonly expectedVersion: number;
225
225
  readonly commandDigestB64u: string;
226
226
  };
227
- export declare function protocolCasResultToAdmissionResult(result: LaneProtocolCasResultV1): LaneAdmissionMutationResult<LaneProtocolRecordV1>;
228
- export declare function assertNonEmptyVersion(value: number, label: string): number;
227
+ export {};
229
228
  //# sourceMappingURL=LaneLifecycleStore.d.ts.map
@@ -1,7 +1,7 @@
1
1
  import { type SigningLaneRecord, type WalletKeyRecord } from '../../../../shared-ts/src/signing-lanes';
2
2
  import { type DigestB64u } from '../../../../shared-ts/src/utils/canonicalPrimitives';
3
3
  import type { MpcMaterialActivationRef, ProviderSubject, WalletAuthMethodId, WalletId } from '../../../../shared-ts/src/utils/domainIds';
4
- import { type WalletAuthMethodRecordV2 } from '../../../../shared-ts/src/utils/registrationIntent';
4
+ import { type WalletAuthMethodRecordV2 } from '../../../../shared-ts/src/utils/walletAuthMethodRecord';
5
5
  import { type WalletAuthAuthorityRef } from '../../../../shared-ts/src/utils/walletAuthAuthority';
6
6
  import type { WalletSignerRecord } from '../WalletStore';
7
7
  export type ActiveOwnerWalletExecutionLaneProjection = {
@@ -13,7 +13,7 @@ export type ActiveOwnerWalletExecutionLaneProjection = {
13
13
  readonly materialActivation: MpcMaterialActivationRef;
14
14
  readonly verifiedActivationReceiptDigestB64u: DigestB64u;
15
15
  };
16
- export type WalletExecutionLaneProjectionRefusalReason = 'auth_method_missing' | 'auth_method_ambiguous' | 'auth_method_inactive' | 'auth_method_mismatch' | 'signer_missing' | 'signer_ambiguous' | 'signer_conflict' | 'signer_invalid';
16
+ type WalletExecutionLaneProjectionRefusalReason = 'auth_method_missing' | 'auth_method_ambiguous' | 'auth_method_inactive' | 'auth_method_mismatch' | 'signer_missing' | 'signer_ambiguous' | 'signer_conflict' | 'signer_invalid';
17
17
  export type WalletExecutionLaneProjectionResult = {
18
18
  readonly kind: 'projected';
19
19
  readonly projection: ActiveOwnerWalletExecutionLaneProjection;
@@ -49,11 +49,5 @@ export declare function resolveActiveOwnerWalletExecutionLane(input: {
49
49
  readonly walletAuthMethodId: WalletAuthMethodId;
50
50
  readonly expectedMaterialActivation: MpcMaterialActivationRef;
51
51
  }): Promise<WalletExecutionLaneProjectionResult>;
52
- export declare function projectActiveOwnerWalletExecutionLane(input: {
53
- readonly walletId: WalletId;
54
- readonly walletAuthMethodId: WalletAuthMethodId;
55
- readonly authMethod: WalletAuthMethodRecordV2;
56
- readonly signers: readonly WalletSignerRecord[];
57
- readonly expectedMaterialActivation: MpcMaterialActivationRef;
58
- }): Promise<ActiveOwnerWalletExecutionLaneProjection>;
52
+ export {};
59
53
  //# sourceMappingURL=WalletExecutionLaneProjection.d.ts.map
@@ -10,7 +10,7 @@ export type EcdsaServerRetirementBindingV1 = {
10
10
  readonly serverGeneration: EcdsaServerGeneration;
11
11
  readonly lifecycleId: EcdsaLifecycleId;
12
12
  };
13
- export type EcdsaServerRetirementExpectationV1 = {
13
+ type EcdsaServerRetirementExpectationV1 = {
14
14
  readonly manifest: EcdsaManifestIdentity;
15
15
  readonly materialActivation: MpcMaterialActivationRef;
16
16
  readonly walletKeyId: WalletKeyId;
@@ -25,7 +25,7 @@ export type EcdsaServerRetirementExpectationV1 = {
25
25
  /** Gateway's pre-authorized effect fence. It is distinct from receiptDigestB64u. */
26
26
  readonly retirementEffectBindingDigestB64u: DigestB64u;
27
27
  };
28
- export type EcdsaServerRetirementRequestV1 = {
28
+ type EcdsaServerRetirementRequestV1 = {
29
29
  readonly identity: EcdsaSigningWorkerLaneMaterialIdentityV1;
30
30
  readonly manifest: EcdsaManifestIdentity;
31
31
  readonly materialActivation: MpcMaterialActivationRef;
@@ -37,7 +37,7 @@ export type EcdsaServerRetirementRequestV1 = {
37
37
  readonly serverGeneration: EcdsaServerGeneration;
38
38
  readonly lifecycleId: EcdsaLifecycleId;
39
39
  };
40
- export type EcdsaServerRetirementEffectV1 = {
40
+ type EcdsaServerRetirementEffectV1 = {
41
41
  readonly outcome: 'applied' | 'replayed';
42
42
  readonly receipt: EcdsaServerRetirementReceiptV1;
43
43
  /** The effect fence authorized by the Gateway command. */
@@ -54,5 +54,5 @@ export declare function parseAndVerifyEcdsaServerRetirementEffectV1(input: {
54
54
  readonly expectation: EcdsaServerRetirementExpectationV1;
55
55
  readonly label?: string;
56
56
  }): Promise<EcdsaServerRetirementEffectV1>;
57
- export declare function assertEcdsaServerRetirementReceiptMatchesExpectationV1(receipt: EcdsaServerRetirementReceiptV1, expectation: EcdsaServerRetirementExpectationV1): void;
57
+ export {};
58
58
  //# sourceMappingURL=ecdsaServerRetirement.d.ts.map
@@ -3,7 +3,7 @@ import { type DigestB64u } from '../../../../shared-ts/src/utils/canonicalPrimit
3
3
  export type Ed25519ServerRetirementBindingV1 = {
4
4
  readonly identity: SigningWorkerLaneMaterialIdentityV1<'ed25519'>;
5
5
  };
6
- export type Ed25519ServerRetirementRequestV1 = {
6
+ type Ed25519ServerRetirementRequestV1 = {
7
7
  readonly identity: SigningWorkerLaneMaterialIdentityV1<'ed25519'>;
8
8
  readonly revocationEpoch: number;
9
9
  readonly retirementReason: Ed25519ServerRetirementReceiptV1['retirementReason'];
@@ -11,7 +11,7 @@ export type Ed25519ServerRetirementRequestV1 = {
11
11
  readonly retirementRequestDigestB64u: DigestB64u;
12
12
  readonly retirementEffectBindingDigestB64u: DigestB64u;
13
13
  };
14
- export type Ed25519ServerRetirementEffectV1 = {
14
+ type Ed25519ServerRetirementEffectV1 = {
15
15
  readonly outcome: 'applied' | 'replayed';
16
16
  readonly receipt: Ed25519ServerRetirementReceiptV1;
17
17
  readonly retirementEffectBindingDigestB64u: DigestB64u;
@@ -26,5 +26,5 @@ export declare function parseAndVerifyEd25519ServerRetirementEffectV1(input: {
26
26
  readonly request: Ed25519ServerRetirementRequestV1;
27
27
  readonly label?: string;
28
28
  }): Promise<Ed25519ServerRetirementEffectV1>;
29
- export declare function assertEd25519ServerRetirementReceiptMatchesRequestV1(receipt: Ed25519ServerRetirementReceiptV1, request: Ed25519ServerRetirementRequestV1): void;
29
+ export {};
30
30
  //# sourceMappingURL=ed25519ServerRetirement.d.ts.map