@seams/wallet-server 0.6.2 → 0.7.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/artifact-manifest.json +147 -32
- package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/router/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/router/index.js +2 -2
- package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
- package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
- package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
- package/cloudflare-router-ab/migrations/deriver-a/0012_tenant_root_creation_tombstones.sql +20 -0
- package/cloudflare-router-ab/migrations/deriver-a/0013_tenant_root_root_use_admissions.sql +32 -0
- package/cloudflare-router-ab/migrations/deriver-a/0014_tenant_root_refresh_supersessions.sql +24 -0
- package/cloudflare-router-ab/migrations/deriver-a/0015_tenant_root_root_use_attempts.sql +56 -0
- package/cloudflare-router-ab/migrations/deriver-a/0016_tenant_root_root_use_admission_settlement.sql +5 -0
- package/cloudflare-router-ab/migrations/deriver-a/0017_tenant_root_root_use_admission_claims.sql +64 -0
- package/cloudflare-router-ab/migrations/deriver-a/0018_tenant_root_recovery_retention_keys.sql +12 -0
- package/cloudflare-router-ab/migrations/deriver-b/0012_tenant_root_creation_tombstones.sql +20 -0
- package/cloudflare-router-ab/migrations/deriver-b/0013_tenant_root_root_use_admissions.sql +32 -0
- package/cloudflare-router-ab/migrations/deriver-b/0014_tenant_root_refresh_supersessions.sql +24 -0
- package/cloudflare-router-ab/migrations/deriver-b/0015_tenant_root_root_use_attempts.sql +56 -0
- package/cloudflare-router-ab/migrations/deriver-b/0016_tenant_root_root_use_admission_settlement.sql +5 -0
- package/cloudflare-router-ab/migrations/deriver-b/0017_tenant_root_root_use_admission_claims.sql +64 -0
- package/cloudflare-router-ab/migrations/deriver-b/0018_tenant_root_recovery_retention_keys.sql +12 -0
- package/cloudflare-router-ab/scripts/bootstrap-local-tenant-root.mjs +81 -16
- package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +102 -9
- package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +4 -1
- package/cloudflare-router-ab/wrangler.deriver-a.toml +24 -0
- package/cloudflare-router-ab/wrangler.router.toml +13 -0
- package/dist/esm/authorization/capabilityPolicy.js +1 -1
- package/dist/esm/authorization/domain.js +2 -2
- package/dist/esm/authorization/factorEvidence.js +6 -100
- package/dist/esm/authorization/service.js +34 -2
- package/dist/esm/authorization/vaultProxyUse.js +3 -4
- package/dist/esm/cloud-host.js +16 -11
- package/dist/esm/core/EmailOtpRecords.js +19 -1
- package/dist/esm/core/EmailOtpStores.js +323 -924
- package/dist/esm/core/IdentityStore.js +44 -235
- package/dist/esm/core/NearPublicKeyStore.js +21 -63
- package/dist/esm/core/RegistrationCeremonyStore.js +3 -1793
- package/dist/esm/core/ThresholdService/config.js +1 -82
- package/dist/esm/core/ThresholdService/kv.js +3 -3
- package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +37 -5
- package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.js +4 -74
- package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +15 -51
- package/dist/esm/core/ThresholdService/stores/KeyStore.js +3 -3
- package/dist/esm/core/ThresholdService/stores/SessionStore.js +5 -81
- package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +185 -290
- package/dist/esm/core/ThresholdService/validation.js +18 -230
- package/dist/esm/core/WalletAuthMethodStore.js +22 -79
- package/dist/esm/core/WalletStore.js +58 -185
- package/dist/esm/core/WebAuthnAuthenticatorStore.js +57 -340
- package/dist/esm/core/WebAuthnCredentialBindingStore.js +90 -369
- package/dist/esm/core/WebAuthnLoginChallengeStore.js +17 -397
- package/dist/esm/core/WebAuthnSyncChallengeStore.js +17 -397
- package/dist/esm/core/authService/AuthService.js +2 -19
- package/dist/esm/core/authService/emailOtpChallengeProof.js +1 -1
- package/dist/esm/core/authService/emailOtpChallenges.js +1 -1
- package/dist/esm/core/authService/emailOtpConfig.js +1 -32
- package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +6 -153
- package/dist/esm/core/authService/googleEmailOtpRegistration.js +1 -1
- package/dist/esm/core/authService/nearPrivateKeySigning.js +7 -15
- package/dist/esm/core/authService/nearTransactions.js +2 -1
- package/dist/esm/core/authService/oidcVerification.js +3 -4
- package/dist/esm/core/authService/rateLimits.js +1 -31
- package/dist/esm/core/authService/registrationThresholdHelpers.js +2 -103
- package/dist/esm/core/authService/storeRegistry.js +2 -13
- package/dist/esm/core/authService/thresholdEcdsaKeyInventory.js +4 -5
- package/dist/esm/core/authService/webauthn.js +15 -50
- package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -6
- package/dist/esm/core/authService/webauthnVerificationOutcomes.js +60 -0
- package/dist/esm/core/authService/webauthnWalletBinding.js +2 -122
- package/dist/esm/core/d1IdentityStore.js +32 -66
- package/dist/esm/core/d1TenantStore.js +82 -0
- package/dist/esm/core/d1WalletAuthMethodStore.js +92 -143
- package/dist/esm/core/d1WalletStore.js +14 -12
- package/dist/esm/core/deviceLinking/linkedDeviceEmailOtpGrant.js +10 -8
- package/dist/esm/core/deviceLinking/linkedDeviceManagement.js +25 -3
- package/dist/esm/core/deviceLinking/linkedDeviceSession.js +6 -895
- package/dist/esm/core/deviceLinking/linkedDeviceSessionApproval.js +102 -0
- package/dist/esm/core/deviceLinking/linkedDeviceSessionRecord.js +668 -0
- package/dist/esm/core/emailOtpD1Statements.js +383 -0
- package/dist/esm/core/hostedAccountIds.js +2 -2
- package/dist/esm/core/keyMaterialBrands.js +2 -48
- package/dist/esm/core/nearRelayerAccountProvisioning.js +25 -150
- package/dist/esm/core/nearSignerWasmRuntime.js +1 -4
- package/dist/esm/core/rpcClients/near/NearClient.js +15 -218
- package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +1 -1
- package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +2 -4
- package/dist/esm/core/signingLanes/LaneLifecycleStore.js +0 -24
- package/dist/esm/core/signingLanes/WalletExecutionLaneProjection.js +5 -5
- package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +3 -8
- package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +1 -4
- package/dist/esm/core/storeBackends.js +208 -0
- package/dist/esm/core/thresholdEcdsaChainTarget.js +1 -7
- package/dist/esm/core/webAuthnD1Statements.js +92 -0
- package/dist/esm/core/webAuthnStoreBackends.js +198 -0
- package/dist/esm/hosted-wallet-gateway.js +33 -16
- package/dist/esm/index.js +2 -2
- package/dist/esm/local-hosted-wallet-gateway-worker.js +2 -23
- package/dist/esm/localHostedWalletGatewayHandler.js +299 -0
- package/dist/esm/localIntendedEcdsaFinalizeFault.js +85 -0
- package/dist/esm/localIntendedLinkExecuteFault.js +140 -0
- package/dist/esm/localIntendedRevokeFault.js +106 -0
- package/dist/esm/localIntendedSessionAdmissionFault.js +139 -0
- package/dist/esm/localIntendedYaoExportFault.js +117 -0
- package/dist/esm/localIntendedYaoFault.js +13 -16
- package/dist/esm/localIntendedYaoFinalizeFault.js +99 -0
- package/dist/esm/localIntendedYaoRecoveryFault.js +102 -0
- package/dist/esm/localIntendedYaoSigningFault.js +127 -0
- package/dist/esm/router/auth/authRequestValidation.js +1 -1
- package/dist/esm/router/auth/commonRouterUtils.js +10 -2
- package/dist/esm/router/auth/walletSessionFailure.js +1 -14
- package/dist/esm/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.js +23 -0
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +86 -66
- package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +208 -0
- package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +246 -296
- package/dist/esm/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.js +14 -0
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +62 -63
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +3 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +1 -19
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceManagementService.js +4 -3
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +52 -9
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.js +100 -0
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.js +7 -10
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +33 -124
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.js +2 -2
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +9 -17
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.js +6 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkSourceReader.js +3 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/index.js +3 -3
- package/dist/esm/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.js +69 -0
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +39 -68
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.js +69 -0
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.js +2 -2
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +26 -71
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +20 -3
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +7 -94
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +5 -47
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +26 -123
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +0 -2
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +2 -2
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +15 -134
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +54 -260
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +1 -1
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +1 -28
- package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +2 -8
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +3 -3
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +23 -73
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.js +15 -2
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.js +12 -203
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +16 -32
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +29 -72
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +4 -1
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +3 -1
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +6 -30
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +261 -205
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +5 -3
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +2 -2
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js +3 -3
- package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +43 -25
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -1
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +2 -1
- package/dist/esm/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.js +2 -60
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +158 -19
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.js +19 -49
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.js +100 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +132 -33
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +83 -4
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +14 -49
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +4 -4
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +22 -116
- package/dist/esm/router/cloudflare/runtime/createSelfHostedCloudflareSigningWorker.js +1 -2
- package/dist/esm/router/cloudflare/runtime/walletConsoleTenantRootLineage.js +11 -2
- package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +5 -6
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +2 -1
- package/dist/esm/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.js +48 -21
- package/dist/esm/router/cloudflare.js +11480 -12853
- package/dist/esm/router/domains/ecdsa/routerAbEcdsaStrictRegistration.js +16 -5
- package/dist/esm/router/domains/ecdsa/thresholdEcdsaRequestValidation.js +2 -8
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.js +33 -0
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +17 -9
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +29 -431
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +7 -2
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.js +2 -1
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.js +70 -2
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +134 -169
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +77 -162
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.js +205 -51
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +29 -11
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.js +182 -55
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.js +2 -1
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.js +63 -247
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js +3 -2
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.js +87 -132
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.js +5 -4
- package/dist/esm/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.js +45 -0
- package/dist/esm/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.js +1 -1
- package/dist/esm/router/domains/emailOtp/emailOtpExportPolicy.js +1 -42
- package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +1 -6
- package/dist/esm/router/domains/emailOtp/emailOtpSessionRouteHelpers.js +1 -142
- package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.js +1 -1
- package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -2
- package/dist/esm/router/domains/passkeyCustody/walletRecoveryFinalization.js +23 -45
- package/dist/esm/router/domains/passkeyCustody/walletRecoveryKeyManifest.js +5 -5
- package/dist/esm/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.js +1 -1
- package/dist/esm/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.js +827 -0
- package/dist/esm/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.js +698 -0
- package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmission.js +209 -0
- package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.js +16 -15
- package/dist/esm/router/domains/signingOperations/routerAbOperationStepUp.js +313 -0
- package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +62 -2159
- package/dist/esm/router/domains/tenantRoot/tenantRootIdentityResolution.js +1 -1
- package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +18 -22
- package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +3 -4
- package/dist/esm/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.js +2 -2
- package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +97 -150
- package/dist/esm/router/express.js +5967 -6410
- package/dist/esm/router/framework/http.js +1 -4
- package/dist/esm/router/framework/ror/normalize.js +1 -1
- package/dist/esm/router/framework/routerApiRouteSurface.js +1 -1
- package/dist/esm/router/node/nodeHostedWalletGateway.js +64 -0
- package/dist/esm/router/node/nodeHostedWalletGatewayCheck.js +163 -0
- package/dist/esm/router/node/nodeHostedWalletGatewayMain.js +120 -0
- package/dist/esm/router/node/nodeHttp.js +79 -0
- package/dist/esm/router/node/nodeSqlite.js +43 -0
- package/dist/esm/router/node/signerSqlMigrations.js +48 -0
- package/dist/esm/router/transport/fetch/createFetchRouter.js +1 -1
- package/dist/esm/router/transport/fetch/routes/deviceLinking.js +16 -18
- package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +3 -5
- package/dist/esm/router/transport/fetch/routes/deviceManagement.js +15 -24
- package/dist/esm/router/transport/fetch/routes/normalSigningRouterProxy.js +3 -16
- package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +144 -461
- package/dist/esm/router/transport/fetch/routes/sessions.js +4 -4
- package/dist/esm/router/transport/fetch/routes/syncAccount.js +4 -6
- package/dist/esm/router/transport/fetch/routes/syncAccountBootstrap.js +2 -2
- package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +69 -23
- package/dist/esm/router/transport/fetch/routes/thresholdEd25519.js +52 -27
- package/dist/esm/shared-ts/src/authorization/capabilityKinds.js +1 -1
- package/dist/esm/shared-ts/src/authorization/delegatedAuthority.js +1 -1
- package/dist/esm/shared-ts/src/authorization/operationFingerprint.js +1 -2
- package/dist/esm/shared-ts/src/authorization/walletAuthority.js +99 -227
- package/dist/esm/shared-ts/src/authorization/walletCustodyOperation.js +4 -6
- package/dist/esm/shared-ts/src/device-linking/activeWalletSession.js +74 -0
- package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +50 -0
- package/dist/esm/shared-ts/src/device-linking/committedSignerPackages.js +8 -9
- package/dist/esm/shared-ts/src/device-linking/delegatedActivationPlan.js +3 -1
- package/dist/esm/shared-ts/src/device-linking/deviceManagement.js +55 -0
- package/dist/esm/shared-ts/src/device-linking/digests.js +10 -65
- package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +3 -1
- package/dist/esm/shared-ts/src/device-linking/index.js +4 -1
- package/dist/esm/shared-ts/src/device-linking/parsers.js +510 -1063
- package/dist/esm/shared-ts/src/device-linking/requestProof.js +5 -14
- package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +6 -9
- package/dist/esm/shared-ts/src/device-linking/walletSessionCredentialDelivery.js +9 -9
- package/dist/esm/shared-ts/src/device-linking/wireFields.js +59 -0
- package/dist/esm/shared-ts/src/near/nearClient.js +252 -0
- package/dist/esm/shared-ts/src/passkey-custody/credentialActivity.js +3 -1
- package/dist/esm/shared-ts/src/passkey-custody/custodyEnvelope.js +7 -5
- package/dist/esm/shared-ts/src/passkey-custody/custodySecretBinding.js +6 -4
- package/dist/esm/shared-ts/src/passkey-custody/primitives.js +5 -39
- package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -5
- package/dist/esm/shared-ts/src/signing-lanes/index.js +3 -3
- package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +5 -12
- package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +5 -14
- package/dist/esm/shared-ts/src/signing-lanes/participants.js +2 -5
- package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +7 -5
- package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +6 -45
- package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +423 -1511
- package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +323 -0
- package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +59 -0
- package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +1 -1
- package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +1 -2
- package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +49 -0
- package/dist/esm/shared-ts/src/utils/addAuthMethodRegistration.js +3 -4
- package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +8 -1
- package/dist/esm/shared-ts/src/utils/digestEncoding.js +63 -0
- package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +2 -2
- package/dist/esm/shared-ts/src/utils/exactRecord.js +44 -0
- package/dist/esm/shared-ts/src/utils/registrationAuthMethodInput.js +127 -0
- package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +2 -2
- package/dist/esm/shared-ts/src/utils/registrationIds.js +280 -0
- package/dist/esm/shared-ts/src/utils/registrationIntent.js +4 -1170
- package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +429 -0
- package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +11 -136
- package/dist/esm/shared-ts/src/utils/routerAbEd25519Yao.js +3 -163
- package/dist/esm/shared-ts/src/utils/routerAbEd25519YaoDigests.js +160 -0
- package/dist/esm/shared-ts/src/utils/routerAbNormalSigningIdentity.js +1 -4
- package/dist/esm/shared-ts/src/utils/routerAbPublicKeyset.js +7 -15
- package/dist/esm/shared-ts/src/utils/validation.js +37 -6
- package/dist/esm/shared-ts/src/utils/walletAuthMethodRecord.js +362 -0
- package/dist/esm/shared-ts/src/utils/wireSchema.js +77 -0
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +1 -1
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeReservation.js +1 -1
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js +7 -11
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.js +4 -8
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.js +3 -1
- package/dist/esm/storage/d1Sql.js +10 -1
- package/dist/esm/storage/syncSqlite.js +79 -0
- package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +1 -1
- package/dist/esm/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.js +1 -1
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +1 -2
- package/dist/esm/threshold/session/signingSessionSeal/options.js +1 -1
- package/dist/esm/threshold/session/signingSessionSeal/transport/shared.js +18 -55
- package/dist/esm/threshold/statusCodes.js +1 -1
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +3 -3
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
- package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm +0 -0
- package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +8 -26
- package/dist/types/shared-ts/src/authorization/delegatedAuthority.d.ts +0 -8
- package/dist/types/shared-ts/src/authorization/operationFingerprint.d.ts +1 -3
- package/dist/types/shared-ts/src/authorization/walletAuthority.d.ts +25 -12
- package/dist/types/shared-ts/src/authorization/walletSessionIssuance.d.ts +2 -1
- package/dist/types/shared-ts/src/device-linking/activeWalletSession.d.ts +3 -2
- package/dist/types/shared-ts/src/device-linking/authorityActivation.d.ts +5 -0
- package/dist/types/shared-ts/src/device-linking/committedSignerPackages.d.ts +2 -5
- package/dist/types/shared-ts/src/device-linking/contracts.d.ts +8 -11
- package/dist/types/shared-ts/src/device-linking/contracts.typecheck.d.ts +2 -1
- package/dist/types/shared-ts/src/device-linking/deviceManagement.d.ts +7 -0
- package/dist/types/shared-ts/src/device-linking/digests.d.ts +0 -5
- package/dist/types/shared-ts/src/device-linking/ed25519ExportRoot.d.ts +3 -2
- package/dist/types/shared-ts/src/device-linking/index.d.ts +2 -0
- package/dist/types/shared-ts/src/device-linking/parsers.d.ts +4 -41
- package/dist/types/shared-ts/src/device-linking/requestProof.d.ts +0 -1
- package/dist/types/shared-ts/src/device-linking/sourceContribution.d.ts +3 -2
- package/dist/types/shared-ts/src/device-linking/walletSessionCredentialDelivery.d.ts +2 -1
- package/dist/types/shared-ts/src/device-linking/wireFields.d.ts +26 -0
- package/dist/types/shared-ts/src/near/actions.d.ts +4 -4
- package/dist/types/shared-ts/src/near/delegate.d.ts +3 -2
- package/dist/types/shared-ts/src/near/nearClient.d.ts +145 -0
- package/dist/types/shared-ts/src/passkey-custody/ceremonyCommitPayload.d.ts +0 -22
- package/dist/types/shared-ts/src/passkey-custody/credentialActivity.d.ts +2 -4
- package/dist/types/shared-ts/src/passkey-custody/custodyEnvelope.d.ts +9 -18
- package/dist/types/shared-ts/src/passkey-custody/custodySecretBinding.d.ts +8 -24
- package/dist/types/shared-ts/src/passkey-custody/index.d.ts +0 -2
- package/dist/types/shared-ts/src/passkey-custody/primitives.d.ts +0 -14
- package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -15
- package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +2 -51
- package/dist/types/shared-ts/src/signing-lanes/index.d.ts +1 -2
- package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +1 -2
- package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +5 -27
- package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +0 -11
- package/dist/types/shared-ts/src/signing-lanes/recordParsers.d.ts +6 -53
- package/dist/types/shared-ts/src/signing-lanes/records.d.ts +1 -2
- package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +15 -37
- package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +1 -20
- package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +4 -25
- package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +1 -41
- package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +6 -0
- package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +20 -0
- package/dist/types/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.d.ts +2 -35
- package/dist/types/shared-ts/src/threshold/ed25519OperationFingerprint.d.ts +8 -35
- package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +25 -0
- package/dist/types/shared-ts/src/threshold/participants.d.ts +3 -9
- package/dist/types/shared-ts/src/threshold/secp256k1.d.ts +0 -37
- package/dist/types/shared-ts/src/threshold/sessionPolicy.d.ts +24 -0
- package/dist/types/shared-ts/src/threshold/signingRootScope.d.ts +2 -5
- package/dist/types/shared-ts/src/utils/addAuthMethodRegistration.d.ts +3 -4
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +7 -108
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +16 -3
- package/dist/types/shared-ts/src/utils/canonicalPrimitives.d.ts +2 -0
- package/dist/types/shared-ts/src/utils/digestEncoding.d.ts +9 -0
- package/dist/types/shared-ts/src/utils/domainIds.d.ts +1 -2
- package/dist/types/shared-ts/src/utils/ecdsaKeyFactsInventory.d.ts +1 -2
- package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +5 -5
- package/dist/types/shared-ts/src/utils/emailOtpRecoveryKey.d.ts +0 -2
- package/dist/types/shared-ts/src/utils/errors.d.ts +0 -7
- package/dist/types/shared-ts/src/utils/exactRecord.d.ts +12 -0
- package/dist/types/shared-ts/src/utils/index.d.ts +5 -2
- package/dist/types/shared-ts/src/utils/jsonRpc.d.ts +3 -2
- package/dist/types/shared-ts/src/utils/near.d.ts +2 -1
- package/dist/types/shared-ts/src/utils/nearRpcResults.d.ts +7 -7
- package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -4
- package/dist/types/shared-ts/src/utils/registrationAuthMethodInput.d.ts +184 -0
- package/dist/types/shared-ts/src/utils/registrationContracts.d.ts +76 -0
- package/dist/types/shared-ts/src/utils/registrationEstablishedSession.d.ts +1 -2
- package/dist/types/shared-ts/src/utils/registrationIds.d.ts +56 -0
- package/dist/types/shared-ts/src/utils/registrationIntent.d.ts +9 -514
- package/dist/types/shared-ts/src/utils/registrationSignerPlan.d.ts +142 -0
- package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts +21 -92
- package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts +14 -99
- package/dist/types/shared-ts/src/utils/routerAbEd25519YaoDigests.d.ts +39 -0
- package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts +10 -15
- package/dist/types/shared-ts/src/utils/routerAbTraceContext.d.ts +2 -1
- package/dist/types/shared-ts/src/utils/secureRandomId.d.ts +0 -2
- package/dist/types/shared-ts/src/utils/signerDomain.d.ts +3 -35
- package/dist/types/shared-ts/src/utils/signerSlot.d.ts +0 -4
- package/dist/types/shared-ts/src/utils/signingSessionSeal.d.ts +1 -7
- package/dist/types/shared-ts/src/utils/validation.d.ts +10 -10
- package/dist/types/shared-ts/src/utils/variant.d.ts +11 -0
- package/dist/types/shared-ts/src/utils/variant.typecheck.d.ts +22 -0
- package/dist/types/shared-ts/src/utils/walletAddSignerActivation.d.ts +2 -2
- package/dist/types/shared-ts/src/utils/walletAuthAuthority.d.ts +1 -58
- package/dist/types/shared-ts/src/utils/walletAuthMethodRecord.d.ts +104 -0
- package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +3 -7
- package/dist/types/shared-ts/src/utils/webauthnDeviceInfo.d.ts +3 -4
- package/dist/types/shared-ts/src/utils/wireSchema.d.ts +60 -0
- package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +2 -1
- package/dist/types/shared-ts/src/wallet-recovery/index.d.ts +0 -1
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeLocator.d.ts +0 -16
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +2 -11
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.d.ts +6 -18
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.d.ts +0 -2
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.d.ts +1 -3
- package/dist/types/wallet-server/src/authorization/capabilityPolicy.d.ts +0 -1
- package/dist/types/wallet-server/src/authorization/domain.d.ts +25 -5
- package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.d.ts +37 -0
- package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/authorization/factorEvidence.d.ts +6 -7
- package/dist/types/wallet-server/src/authorization/service.d.ts +52 -3
- package/dist/types/wallet-server/src/cloud-host.d.ts +6 -2
- package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +10 -1
- package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +16 -116
- package/dist/types/wallet-server/src/core/IdentityStore.d.ts +2 -7
- package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +6 -16
- package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +29 -90
- package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -12
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +10 -3
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.d.ts +17 -48
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/internalServiceHttp.d.ts +2 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +4 -71
- package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +2 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +4 -8
- package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +2 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +1 -3
- package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +14 -47
- package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +2 -7
- package/dist/types/wallet-server/src/core/WalletStore.d.ts +3 -8
- package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +7 -22
- package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +14 -36
- package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +9 -34
- package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +9 -34
- package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +6 -5
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +9 -17
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +3 -2
- package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +7 -23
- package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +3 -10
- package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +3 -70
- package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +3 -2
- package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +5 -8
- package/dist/types/wallet-server/src/core/authService/nearPrivateKeySigning.d.ts +3 -2
- package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -26
- package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -5
- package/dist/types/wallet-server/src/core/authService/thresholdEcdsaKeyInventory.d.ts +0 -23
- package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +8 -16
- package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +7 -7
- package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +43 -0
- package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +1 -28
- package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +6 -16
- package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +51 -0
- package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +11 -29
- package/dist/types/wallet-server/src/core/d1WalletStore.d.ts +6 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEd25519ExportRoot.d.ts +2 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEmailOtpGrant.d.ts +2 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceManagement.d.ts +44 -26
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +19 -217
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionApproval.d.ts +8 -0
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionRecord.d.ts +259 -0
- package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -2
- package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +54 -0
- package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -15
- package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +4 -24
- package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +2 -3
- package/dist/types/wallet-server/src/core/nearSignerWasmRuntime.d.ts +0 -1
- package/dist/types/wallet-server/src/core/registrationContracts.d.ts +37 -108
- package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +5 -4
- package/dist/types/wallet-server/src/core/rpcClients/near/NearClient.d.ts +10 -106
- package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +4 -3
- package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +2 -3
- package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +2 -3
- package/dist/types/wallet-server/src/core/signingLanes/WalletExecutionLaneProjection.d.ts +3 -9
- package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +4 -4
- package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +3 -3
- package/dist/types/wallet-server/src/core/storeBackends.d.ts +83 -0
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +13 -59
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +51 -3
- package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +0 -1
- package/dist/types/wallet-server/src/core/types.d.ts +3 -24
- package/dist/types/wallet-server/src/core/webAuthnD1Statements.d.ts +29 -0
- package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +96 -0
- package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +11 -7
- package/dist/types/wallet-server/src/index.d.ts +1 -1
- package/dist/types/wallet-server/src/local-hosted-wallet-gateway-worker.d.ts +1 -4
- package/dist/types/wallet-server/src/localHostedWalletGatewayHandler.d.ts +12 -0
- package/dist/types/wallet-server/src/localIntendedEcdsaFinalizeFault.d.ts +33 -0
- package/dist/types/wallet-server/src/localIntendedLinkExecuteFault.d.ts +47 -0
- package/dist/types/wallet-server/src/localIntendedRevokeFault.d.ts +40 -0
- package/dist/types/wallet-server/src/localIntendedSessionAdmissionFault.d.ts +41 -0
- package/dist/types/wallet-server/src/localIntendedYaoExportFault.d.ts +41 -0
- package/dist/types/wallet-server/src/localIntendedYaoFault.d.ts +7 -1
- package/dist/types/wallet-server/src/localIntendedYaoFinalizeFault.d.ts +37 -0
- package/dist/types/wallet-server/src/localIntendedYaoRecoveryFault.d.ts +45 -0
- package/dist/types/wallet-server/src/localIntendedYaoSigningFault.d.ts +51 -0
- package/dist/types/wallet-server/src/router/auth/authRequestValidation.d.ts +10 -21
- package/dist/types/wallet-server/src/router/auth/commonRouterUtils.d.ts +5 -10
- package/dist/types/wallet-server/src/router/auth/walletSessionFailure.d.ts +1 -4
- package/dist/types/wallet-server/src/router/auth/webAuthnCredentialCodecs.d.ts +3 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.d.ts +12 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.d.ts +3 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +2 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthService.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/authorizedOperationStatements.d.ts +30 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +45 -21
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/walletSessionAuthorityProjection.d.ts +2 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +57 -6
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +2 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.d.ts +8 -21
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.d.ts +14 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.d.ts +49 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +4 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.d.ts +2 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +8 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.d.ts +3 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.d.ts +7 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.d.ts +1 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.d.ts +33 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +13 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.d.ts +24 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.d.ts +2 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +1 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +3 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.d.ts +9 -8
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.d.ts +0 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.d.ts +5 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +1 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -21
- package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityRecords.d.ts +0 -23
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +1 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.d.ts +11 -19
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -54
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +7 -19
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.d.ts +4 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.d.ts +8 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +5 -8
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -22
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +6 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +10 -6
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +15 -22
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +5 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.d.ts +4 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.d.ts +5 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.d.ts +3 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.d.ts +0 -16
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +29 -14
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.d.ts +15 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.d.ts +71 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +34 -24
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +44 -26
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +3 -7
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +8 -19
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleTenantRootLineage.d.ts +2 -1
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -0
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.d.ts +15 -2
- package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ecdsa/routerAbEcdsaStrictRegistration.d.ts +9 -7
- package/dist/types/wallet-server/src/router/domains/ecdsa/thresholdEcdsaRequestValidation.d.ts +4 -4
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.d.ts +46 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +5 -3
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.d.ts +20 -79
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.d.ts +1 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.d.ts +4 -3
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +62 -42
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.d.ts +108 -32
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryActivation.typecheck.d.ts +5 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.d.ts +36 -5
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.d.ts +5 -4
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.d.ts +41 -50
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.d.ts +3 -3
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.d.ts +6 -5
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.d.ts +14 -4
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.d.ts +12 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/routerAbEd25519YaoWalletSession.d.ts +5 -5
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.d.ts +3 -4
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpExportPolicy.d.ts +2 -27
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRequestValidation.d.ts +1 -2
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRouteHandlers.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpSessionRouteHelpers.d.ts +2 -102
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/envelopeRevocationAdmission.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +3 -2
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.d.ts +1 -9
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/registrationCustodyOutcome.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/verifiedCustodyFactor.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationAdmission.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +2 -28
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryFinalization.d.ts +43 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryKeyManifest.d.ts +7 -7
- package/dist/types/wallet-server/src/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.d.ts +0 -3
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.d.ts +165 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.d.ts +110 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmission.d.ts +360 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.d.ts +11 -10
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbOperationStepUp.d.ts +165 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +16 -702
- package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +5 -12
- package/dist/types/wallet-server/src/router/domains/syncAccount/syncAccountRequestValidation.d.ts +5 -4
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootCustodyLineage.d.ts +6 -1
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootIdentityResolution.d.ts +4 -7
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +8 -8
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +4 -4
- package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.d.ts +4 -4
- package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRouteHandlers.d.ts +4 -62
- package/dist/types/wallet-server/src/router/express-adaptor.d.ts +2 -2
- package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +64 -61
- package/dist/types/wallet-server/src/router/framework/http.d.ts +0 -1
- package/dist/types/wallet-server/src/router/framework/ror/normalize.d.ts +2 -2
- package/dist/types/wallet-server/src/router/framework/routeMeteringPolicy.d.ts +3 -2
- package/dist/types/wallet-server/src/router/framework/routerApi.d.ts +1 -1
- package/dist/types/wallet-server/src/router/framework/routerApiRouteSurface.d.ts +3 -3
- package/dist/types/wallet-server/src/router/node/nodeHostedWalletGateway.d.ts +34 -0
- package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayCheck.d.ts +21 -0
- package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayMain.d.ts +2 -0
- package/dist/types/wallet-server/src/router/node/nodeHttp.d.ts +13 -0
- package/dist/types/wallet-server/src/router/node/nodeSqlite.d.ts +22 -0
- package/dist/types/wallet-server/src/router/node/signerSqlMigrations.d.ts +20 -0
- package/dist/types/wallet-server/src/router/transport/fetch/createFetchRouter.d.ts +1 -3
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +5 -6
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.d.ts +2 -2
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceManagement.d.ts +14 -16
- package/dist/types/wallet-server/src/router/transport/fetch/routes/normalSigningRouterProxy.d.ts +0 -12
- package/dist/types/wallet-server/src/router/transport/fetch/routes/passkeyCustody.d.ts +1 -1
- package/dist/types/wallet-server/src/router/transport/fetch/routes/sessions.d.ts +2 -1
- package/dist/types/wallet-server/src/router/transport/fetch/routes/syncAccountBootstrap.d.ts +7 -13
- package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEcdsa.d.ts +3 -57
- package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEd25519.d.ts +0 -44
- package/dist/types/wallet-server/src/storage/d1Sql.d.ts +7 -0
- package/dist/types/wallet-server/src/storage/syncSqlite.d.ts +28 -0
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.d.ts +0 -1
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/idempotencyRecords.d.ts +5 -6
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/transport/shared.d.ts +1 -0
- package/dist/types/wallet-server/src/threshold/statusCodes.d.ts +4 -4
- package/migrations/d1-signer/0036_r150_yao_lifecycle_decisions.sql +22 -0
- package/migrations/d1-signer/0037_r150_wallet_auth_method_revocation_replays.sql +26 -0
- package/migrations/d1-signer/0038_r150_registration_ceremony_cas_guard_seed.sql +8 -0
- package/migrations/d1-signer/0039_r150_revocation_replay_answer_kind.sql +9 -0
- package/package.json +1 -1
- package/dist/esm/core/ThresholdService/ecdsaClientRootProof.js +0 -27
- package/dist/esm/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.js +0 -115
- package/dist/esm/core/ThresholdService/secureRandomId.js +0 -9
- package/dist/esm/core/authService/record.js +0 -8
- package/dist/esm/core/authService/thresholdRuntimePolicy.js +0 -19
- package/dist/esm/core/authService/walletRegistrationPlanning.js +0 -49
- package/dist/esm/core/deviceLinking/index.js +0 -5
- package/dist/esm/core/errors.js +0 -54
- package/dist/esm/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.js +0 -39
- package/dist/esm/core/signingLanes/WalletKeyStore.js +0 -0
- package/dist/esm/core/signingLanes/index.js +0 -8
- package/dist/esm/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.js +0 -55
- package/dist/esm/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.js +0 -56
- package/dist/esm/shared-ts/src/signing-lanes/linkedEcdsaScope.js +0 -1
- package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker.js +0 -414
- package/dist/types/shared-ts/src/passkey-custody/credentialObservations.d.ts +0 -74
- package/dist/types/shared-ts/src/passkey-custody/kekContext.d.ts +0 -34
- package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.d.ts +0 -62
- package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/validation.d.ts +0 -11
- package/dist/types/shared-ts/src/utils/bigint.d.ts +0 -3
- package/dist/types/shared-ts/src/utils/paillier.d.ts +0 -37
- package/dist/types/shared-ts/src/utils/recoveryDomain.d.ts +0 -12
- package/dist/types/shared-ts/src/utils/signerDomain.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/wallet-recovery/recoveryKekContext.d.ts +0 -37
- package/dist/types/wallet-server/src/core/ThresholdService/ecdsaClientRootProof.d.ts +0 -12
- package/dist/types/wallet-server/src/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.d.ts +0 -17
- package/dist/types/wallet-server/src/core/ThresholdService/secureRandomId.d.ts +0 -2
- package/dist/types/wallet-server/src/core/authService/record.d.ts +0 -2
- package/dist/types/wallet-server/src/core/authService/thresholdRuntimePolicy.d.ts +0 -4
- package/dist/types/wallet-server/src/core/authService/walletRegistrationPlanning.d.ts +0 -19
- package/dist/types/wallet-server/src/core/deviceLinking/index.d.ts +0 -5
- package/dist/types/wallet-server/src/core/errors.d.ts +0 -10
- package/dist/types/wallet-server/src/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.d.ts +0 -28
- package/dist/types/wallet-server/src/core/signingLanes/SigningLaneStore.d.ts +0 -15
- package/dist/types/wallet-server/src/core/signingLanes/WalletKeyStore.d.ts +0 -13
- package/dist/types/wallet-server/src/core/signingLanes/index.d.ts +0 -11
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.d.ts +0 -35
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.d.ts +0 -35
- /package/dist/esm/{core/signingLanes/SigningLaneStore.js → authorization/ecdsaWalletSessionAdmission.js} +0 -0
|
@@ -1,5 +1,6 @@
|
|
|
1
1
|
import type { PasskeyCustodyEnvelopeRecord, WalletCustodyRegistrationOutcome } from '../../../shared-ts/src/passkey-custody';
|
|
2
|
-
import type {
|
|
2
|
+
import type { ActiveWalletAuthMethodRecordV2 } from '../../../shared-ts/src/utils/walletAuthMethodRecord';
|
|
3
|
+
import type { WalletAddAuthMethodEmailOtpTargetV1, WalletEmailOtpEnrollmentMaterialV1 } from '../../../shared-ts/src/utils/registrationAuthMethodInput';
|
|
3
4
|
import type { RuntimePolicyScope } from '../../../shared-ts/src/threshold/signingRootScope';
|
|
4
5
|
import type { DerivationClientSharePublicKey33B64u } from '../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap';
|
|
5
6
|
import type { WalletAuthMethodId, WebAuthnRpId } from '../../../shared-ts/src/utils/domainIds';
|
|
@@ -8,22 +9,19 @@ import type { ActiveWalletAuthorityV1 } from '../../../shared-ts/src/authorizati
|
|
|
8
9
|
import type { WalletAuthAuthority, WalletAuthAuthorityRef } from '../../../shared-ts/src/utils/walletAuthAuthority';
|
|
9
10
|
import type { WebAuthnAuthenticatorDeviceInfo } from '../../../shared-ts/src/utils/webauthnDeviceInfo';
|
|
10
11
|
import type { WALLET_AUTH_METHODS } from '../../../shared-ts/src/utils/signerDomain';
|
|
11
|
-
import type {
|
|
12
|
+
import type { RouterAbEd25519YaoRegistrationAdmissionRequestV1 } from '../../../shared-ts/src/utils/routerAbEd25519Yao';
|
|
12
13
|
import type { RouterAbEd25519NormalSigningState } from '../../../shared-ts/src/utils/signingSessionSeal';
|
|
13
|
-
import type {
|
|
14
|
-
import type { WalletSessionOperationCredentialV1 } from '../../../shared-ts/src/device-linking';
|
|
14
|
+
import type { EmailOtpWalletRegistrationFinalizeAuthMethod, PasskeyWalletRegistrationFinalizeAuthMethod, WalletEd25519YaoSignerPublicResult, WalletRegistrationEd25519YaoActivationReference, WalletRegistrationEd25519YaoStart } from '../../../shared-ts/src/utils/registrationContracts';
|
|
15
15
|
import type { RouterAbEcdsaDerivationPublicCapabilityV1, RouterAbEcdsaRegistrationActivationRequestV1, RouterAbEcdsaRegistrationActivationReceiptV1, RouterAbEcdsaRegistrationRequestFactsV1, RouterAbEcdsaRegistrationRequestV1, RouterAbEcdsaStrictForwardedRegistrationResponseV1, RouterAbEcdsaVerifiedClientActivationFactsV1, RouterAbPublicDigest32V1Wire } from '../../../shared-ts/src/utils/routerAbEcdsaDerivation';
|
|
16
|
-
import type {
|
|
16
|
+
import type { AddAuthMethodIntentCallerV1, AddAuthMethodIntentGrant, AddAuthMethodIntentV1, AddSignerIntentGrant, AddSignerIntentV1, RegistrationIntentGrant, RegistrationIntentV1, WalletId } from '../../../shared-ts/src/utils/registrationIntent';
|
|
17
|
+
import type { WalletAuthMethodRecord, WalletAuthMethodRevocationProof } from '../../../shared-ts/src/utils/walletAuthMethodRecord';
|
|
18
|
+
import type { AddSignerSelection, RegistrationNearAccountProvisioning, RegistrationSignerSetSelection, ResolvedRegistrationNearAccount, ThresholdEcdsaAddSignerSpec, ThresholdEd25519AddSignerSpec } from '../../../shared-ts/src/utils/registrationSignerPlan';
|
|
19
|
+
import type { AddAuthMethodInput, EmailOtpRegistrationProof, RegisterWalletInput } from '../../../shared-ts/src/utils/registrationAuthMethodInput';
|
|
17
20
|
import type { EcdsaDerivationKeyScope, EcdsaDerivationRoleLocalFormatVersion, EcdsaDerivationServerBootstrapResponse, EcdsaThresholdKeyId, ThresholdEd25519AuthorityScope, ThresholdRuntimePolicyScope, ThresholdEcdsaChainTarget, WebAuthnAuthenticationCredential, RegistrationPreparationId } from './types';
|
|
18
21
|
import { registrationPreparationIdFromString } from './types';
|
|
19
22
|
export { registrationPreparationIdFromString };
|
|
20
23
|
export type { RegistrationPreparationId };
|
|
21
24
|
export type { AddAuthMethodInput, AddAuthMethodIntentGrant, AddAuthMethodIntentV1, AddSignerIntentGrant, AddSignerIntentV1, AddSignerSelection, EmailOtpRegistrationProof, RegisterWalletInput, RegistrationIntentGrant, RegistrationIntentV1, RegistrationSignerSetSelection, ThresholdEcdsaAddSignerSpec, ThresholdEd25519AddSignerSpec, WalletId, };
|
|
22
|
-
export type CreateRegistrationIntentRequest = {
|
|
23
|
-
wallet: RegisterWalletInput;
|
|
24
|
-
authMethod: RegistrationAuthMethodInput;
|
|
25
|
-
signerSelection: RegistrationSignerSetSelection;
|
|
26
|
-
};
|
|
27
25
|
export type CreateRegistrationIntentResponse = {
|
|
28
26
|
ok: true;
|
|
29
27
|
intent: RegistrationIntentV1;
|
|
@@ -36,10 +34,6 @@ export type CreateRegistrationIntentResponse = {
|
|
|
36
34
|
message: string;
|
|
37
35
|
retryAfterMs?: number;
|
|
38
36
|
};
|
|
39
|
-
export type CancelRegistrationIntentRequest = {
|
|
40
|
-
registrationIntentGrant: RegistrationIntentGrant;
|
|
41
|
-
registrationIntentDigestB64u: string;
|
|
42
|
-
};
|
|
43
37
|
export type CancelRegistrationIntentResponse = {
|
|
44
38
|
ok: true;
|
|
45
39
|
cancelled: boolean;
|
|
@@ -83,7 +77,7 @@ export type CreateAddAuthMethodIntentResponse = {
|
|
|
83
77
|
message: string;
|
|
84
78
|
retryAfterMs?: number;
|
|
85
79
|
};
|
|
86
|
-
|
|
80
|
+
type AddAuthMethodExistingAuth = {
|
|
87
81
|
kind: 'webauthn_assertion';
|
|
88
82
|
rpId: WebAuthnRpId;
|
|
89
83
|
credential: WebAuthnAuthenticationCredential;
|
|
@@ -116,7 +110,7 @@ export type PasskeyWalletRegistrationAuthorityInput = Extract<WalletRegistration
|
|
|
116
110
|
export type EmailOtpWalletRegistrationAuthorityInput = Extract<WalletRegistrationAuthorityInput, {
|
|
117
111
|
kind: typeof WALLET_AUTH_METHODS.emailOtp;
|
|
118
112
|
}>;
|
|
119
|
-
|
|
113
|
+
type WalletAddAuthMethodAuthorityInput = {
|
|
120
114
|
kind: typeof WALLET_AUTH_METHODS.passkey;
|
|
121
115
|
webauthnRegistration?: never;
|
|
122
116
|
emailOtpRegistrationProof?: never;
|
|
@@ -168,10 +162,9 @@ export type WalletAddAuthMethodStartResponse = {
|
|
|
168
162
|
}>;
|
|
169
163
|
};
|
|
170
164
|
/**
|
|
171
|
-
* The source method's envelope.
|
|
172
|
-
*
|
|
173
|
-
*
|
|
174
|
-
* was added to.
|
|
165
|
+
* The source method's envelope. The browser opens it with the source factor
|
|
166
|
+
* and reseals the same custody seed under the verified Email OTP factor, so
|
|
167
|
+
* an added Email OTP method can unlock the wallet it was added to.
|
|
175
168
|
*/
|
|
176
169
|
custodyEnvelope: PasskeyCustodyEnvelopeRecord;
|
|
177
170
|
registration?: never;
|
|
@@ -190,8 +183,8 @@ export type WalletAddAuthMethodStartResponse = {
|
|
|
190
183
|
* so a caller cannot assert it. See the finalize command's `authorization`.
|
|
191
184
|
*/
|
|
192
185
|
/**
|
|
193
|
-
*
|
|
194
|
-
*
|
|
186
|
+
* Whether this addition expects to find the wallet's shared Email OTP
|
|
187
|
+
* enrollment or to create it.
|
|
195
188
|
*
|
|
196
189
|
* The enrollment is per wallet and per provider identity, not per method: a
|
|
197
190
|
* wallet that has linked a device already has one, and every Email method on
|
|
@@ -204,7 +197,7 @@ export type WalletAddAuthMethodStartResponse = {
|
|
|
204
197
|
* because the two cases carry different material and a caller that guessed
|
|
205
198
|
* wrong should be refused rather than quietly switched.
|
|
206
199
|
*/
|
|
207
|
-
export type { WalletAddAuthMethodEmailOtpTargetV1, WalletEmailOtpEnrollmentMaterialV1, } from '../../../shared-ts/src/utils/
|
|
200
|
+
export type { WalletAddAuthMethodEmailOtpTargetV1, WalletEmailOtpEnrollmentMaterialV1, } from '../../../shared-ts/src/utils/registrationAuthMethodInput';
|
|
208
201
|
export type WalletAddAuthMethodFinalizeRequest = {
|
|
209
202
|
addAuthMethodCeremonyId: string;
|
|
210
203
|
webauthnRegistration: unknown;
|
|
@@ -217,8 +210,8 @@ export type WalletAddAuthMethodFinalizeRequest = {
|
|
|
217
210
|
emailOtpTarget?: never;
|
|
218
211
|
} | {
|
|
219
212
|
/**
|
|
220
|
-
*
|
|
221
|
-
*
|
|
213
|
+
* The Email OTP target: the factor is verified by its one-use grant
|
|
214
|
+
* rather than by a created credential, so this finalize carries the
|
|
222
215
|
* resealed custody envelope and no WebAuthn registration.
|
|
223
216
|
*/
|
|
224
217
|
addAuthMethodCeremonyId: string;
|
|
@@ -231,11 +224,11 @@ export type WalletAddAuthMethodFinalizeRequest = {
|
|
|
231
224
|
custodyEnvelope?: never;
|
|
232
225
|
emailOtpTarget?: never;
|
|
233
226
|
};
|
|
234
|
-
|
|
227
|
+
type WalletAuthMethodStatusAnnotation<Status extends WalletAuthMethodRecord['status']> = {
|
|
235
228
|
kind: WalletAuthMethodRecord['kind'];
|
|
236
229
|
status: Status;
|
|
237
230
|
};
|
|
238
|
-
export type
|
|
231
|
+
export type WalletAddAuthMethodFinalizeSuccess = {
|
|
239
232
|
ok: true;
|
|
240
233
|
walletId: WalletId;
|
|
241
234
|
authority: WalletAuthAuthority;
|
|
@@ -257,7 +250,8 @@ export type WalletAddAuthMethodFinalizeResponse = {
|
|
|
257
250
|
kind: 'email_otp';
|
|
258
251
|
status: 'active';
|
|
259
252
|
};
|
|
260
|
-
}
|
|
253
|
+
};
|
|
254
|
+
export type WalletAddAuthMethodFinalizeResponse = WalletAddAuthMethodFinalizeSuccess | {
|
|
261
255
|
ok: false;
|
|
262
256
|
code: string;
|
|
263
257
|
message: string;
|
|
@@ -304,11 +298,11 @@ export type WalletAddSignerEd25519YaoStart = {
|
|
|
304
298
|
admissionRequest: RouterAbEd25519YaoRegistrationAdmissionRequestV1;
|
|
305
299
|
custodyEnvelope: PasskeyCustodyEnvelopeRecord;
|
|
306
300
|
};
|
|
307
|
-
export type
|
|
301
|
+
export type WalletAddSignerStartSuccess = {
|
|
308
302
|
ok: true;
|
|
309
303
|
addSignerCeremonyId: string;
|
|
310
304
|
intent: AddSignerIntentV1;
|
|
311
|
-
} &
|
|
305
|
+
} & {
|
|
312
306
|
readonly authorizationKind: 'webauthn_assertion';
|
|
313
307
|
} & ({
|
|
314
308
|
kind: 'near_ed25519';
|
|
@@ -318,7 +312,8 @@ export type WalletAddSignerStartResponse = ({
|
|
|
318
312
|
kind: 'evm_family_ecdsa';
|
|
319
313
|
ecdsa: WalletAddSignerEcdsaPreparePayload;
|
|
320
314
|
ed25519?: never;
|
|
321
|
-
})
|
|
315
|
+
});
|
|
316
|
+
export type WalletAddSignerStartResponse = WalletAddSignerStartSuccess | {
|
|
322
317
|
ok: false;
|
|
323
318
|
code: string;
|
|
324
319
|
message: string;
|
|
@@ -395,7 +390,7 @@ export type WalletAddSignerFinalizeRequest = {
|
|
|
395
390
|
};
|
|
396
391
|
ed25519?: never;
|
|
397
392
|
});
|
|
398
|
-
export type
|
|
393
|
+
export type WalletAddSignerFinalizeSuccess = {
|
|
399
394
|
ok: true;
|
|
400
395
|
walletId: WalletId;
|
|
401
396
|
} & ({
|
|
@@ -410,8 +405,11 @@ export type WalletAddSignerFinalizeResponse = ({
|
|
|
410
405
|
ecdsa: {
|
|
411
406
|
walletKeys: WalletRegistrationEcdsaWalletKey[];
|
|
412
407
|
};
|
|
408
|
+
/** The authorizing authority, extended with the added ECDSA signer. */
|
|
409
|
+
authority: ActiveWalletAuthorityV1;
|
|
413
410
|
ed25519?: never;
|
|
414
|
-
})
|
|
411
|
+
});
|
|
412
|
+
export type WalletAddSignerFinalizeResponse = WalletAddSignerFinalizeSuccess | {
|
|
415
413
|
ok: false;
|
|
416
414
|
code: string;
|
|
417
415
|
message: string;
|
|
@@ -496,11 +494,7 @@ export type WalletRegistrationEcdsaWalletKey = {
|
|
|
496
494
|
participantIds: readonly [1, 2];
|
|
497
495
|
publicCapability: RouterAbEcdsaDerivationPublicCapabilityV1;
|
|
498
496
|
};
|
|
499
|
-
|
|
500
|
-
admissionRequest: RouterAbEd25519YaoRegistrationAdmissionRequestV1;
|
|
501
|
-
admissionReceipt: RouterAbEd25519YaoActivationAdmissionReceiptV1<'registration'>;
|
|
502
|
-
};
|
|
503
|
-
export type WalletRegistrationStartSignerWork = {
|
|
497
|
+
type WalletRegistrationStartSignerWork = {
|
|
504
498
|
kind: 'near_ed25519';
|
|
505
499
|
ed25519: WalletRegistrationEd25519YaoStart;
|
|
506
500
|
ecdsa?: never;
|
|
@@ -513,12 +507,7 @@ export type WalletRegistrationStartSignerWork = {
|
|
|
513
507
|
ed25519: WalletRegistrationEd25519YaoStart;
|
|
514
508
|
ecdsa: WalletRegistrationEcdsaPreparePayload;
|
|
515
509
|
};
|
|
516
|
-
|
|
517
|
-
kind: 'router_ab_ed25519_yao_activation_reference_v1';
|
|
518
|
-
lifecycle_id: string;
|
|
519
|
-
session_id: RouterAbEd25519YaoBytes32V1;
|
|
520
|
-
};
|
|
521
|
-
export type WalletRegistrationEd25519YaoFinalize = {
|
|
510
|
+
type WalletRegistrationEd25519YaoFinalize = {
|
|
522
511
|
activationReference: WalletRegistrationEd25519YaoActivationReference;
|
|
523
512
|
};
|
|
524
513
|
export type WalletRegistrationEcdsaFinalize = {
|
|
@@ -527,9 +516,9 @@ export type WalletRegistrationEcdsaFinalize = {
|
|
|
527
516
|
/**
|
|
528
517
|
* One finalize call commits one signer branch. A wallet planned with both
|
|
529
518
|
* signers finalizes twice — `evm_family_ecdsa` first, which returns the wallet
|
|
530
|
-
* ECDSA-ready, then `near_ed25519` once the Yao ceremony settles
|
|
531
|
-
*
|
|
532
|
-
*
|
|
519
|
+
* ECDSA-ready, then `near_ed25519` once the Yao ceremony settles. There is
|
|
520
|
+
* deliberately no combined member: registration success no longer waits on
|
|
521
|
+
* Ed25519, so nothing can commit both at once.
|
|
533
522
|
*/
|
|
534
523
|
export type WalletRegistrationFinalizeSignerWork = {
|
|
535
524
|
kind: 'near_ed25519';
|
|
@@ -623,60 +612,6 @@ type WalletRegistrationFinalizeRequestBase = {
|
|
|
623
612
|
emailOtpEnrollment?: WalletEmailOtpEnrollmentMaterialV1;
|
|
624
613
|
};
|
|
625
614
|
export type WalletRegistrationFinalizeRequest = WalletRegistrationFinalizeRequestBase & WalletRegistrationFinalizeSignerWork;
|
|
626
|
-
export type WalletRegistrationFinalizeAuthMethod = {
|
|
627
|
-
kind: typeof WALLET_AUTH_METHODS.passkey;
|
|
628
|
-
credentialIdB64u: string;
|
|
629
|
-
credentialPublicKeyB64u: string;
|
|
630
|
-
} | {
|
|
631
|
-
kind: typeof WALLET_AUTH_METHODS.emailOtp;
|
|
632
|
-
registrationAuthorityId: string;
|
|
633
|
-
};
|
|
634
|
-
export type PasskeyWalletRegistrationFinalizeAuthMethod = Extract<WalletRegistrationFinalizeAuthMethod, {
|
|
635
|
-
kind: typeof WALLET_AUTH_METHODS.passkey;
|
|
636
|
-
}>;
|
|
637
|
-
export type EmailOtpWalletRegistrationFinalizeAuthMethod = Extract<WalletRegistrationFinalizeAuthMethod, {
|
|
638
|
-
kind: typeof WALLET_AUTH_METHODS.emailOtp;
|
|
639
|
-
}>;
|
|
640
|
-
type WalletRegistrationEd25519YaoBootstrapSessionIdentity = {
|
|
641
|
-
walletId: WalletId;
|
|
642
|
-
nearAccountId: string;
|
|
643
|
-
nearEd25519SigningKeyId: string;
|
|
644
|
-
authorityScope: ThresholdEd25519AuthorityScope;
|
|
645
|
-
thresholdSessionId: string;
|
|
646
|
-
authorizationId: WalletSessionAuthorizationId;
|
|
647
|
-
walletSessionId: WalletSessionId;
|
|
648
|
-
quotaId: MpcWalletSigningQuotaId;
|
|
649
|
-
expiresAtMs: number;
|
|
650
|
-
participantIds: readonly [number, number];
|
|
651
|
-
remainingUses: number;
|
|
652
|
-
signingRootId: string;
|
|
653
|
-
signingRootVersion: string;
|
|
654
|
-
runtimePolicyScope: ThresholdRuntimePolicyScope;
|
|
655
|
-
routerAbNormalSigning: RouterAbEd25519NormalSigningState;
|
|
656
|
-
};
|
|
657
|
-
/**
|
|
658
|
-
* The Ed25519 Yao view of one exact Wallet Session. A session this response
|
|
659
|
-
* just issued carries its own primary operation credential; a session it
|
|
660
|
-
* reuses carries none, because the credential was delivered once by the
|
|
661
|
-
* issuing response and a committed digest cannot reproduce plaintext.
|
|
662
|
-
*/
|
|
663
|
-
export type WalletRegistrationEd25519YaoBootstrapSession = (WalletRegistrationEd25519YaoBootstrapSessionIdentity & {
|
|
664
|
-
sessionKind: 'issued_exact_wallet_session';
|
|
665
|
-
operationCredential: WalletSessionOperationCredentialV1;
|
|
666
|
-
}) | (WalletRegistrationEd25519YaoBootstrapSessionIdentity & {
|
|
667
|
-
sessionKind: 'already_committed_exact_wallet_session';
|
|
668
|
-
operationCredential?: never;
|
|
669
|
-
});
|
|
670
|
-
export type WalletEd25519YaoSignerPublicResult = {
|
|
671
|
-
signerSlot: number;
|
|
672
|
-
nearAccountId: string;
|
|
673
|
-
nearEd25519SigningKeyId: string;
|
|
674
|
-
publicKey: string;
|
|
675
|
-
relayerKeyId: string;
|
|
676
|
-
keyVersion: string;
|
|
677
|
-
recoveryExportCapable: true;
|
|
678
|
-
participantIds: readonly [number, number];
|
|
679
|
-
};
|
|
680
615
|
export type WalletRegistrationEd25519YaoPublicResult = WalletEd25519YaoSignerPublicResult & {
|
|
681
616
|
thresholdSessionId: string;
|
|
682
617
|
runtimePolicyScope: ThresholdRuntimePolicyScope;
|
|
@@ -687,9 +622,7 @@ type WalletRegistrationFinalizeResponseBase = {
|
|
|
687
622
|
walletId: WalletId;
|
|
688
623
|
authority: WalletAuthAuthority;
|
|
689
624
|
foundingAuthority: ActiveWalletAuthorityV1;
|
|
690
|
-
foundingAuthMethod:
|
|
691
|
-
readonly status: 'active';
|
|
692
|
-
}>;
|
|
625
|
+
foundingAuthMethod: ActiveWalletAuthMethodRecordV2;
|
|
693
626
|
registrationDiagnostics?: WalletRegistrationRouteDiagnostics;
|
|
694
627
|
/**
|
|
695
628
|
* What became of this leg's custody commit. Absent when no custody payload
|
|
@@ -740,8 +673,4 @@ export type WalletRegistrationFinalizeResponse = WalletRegistrationFinalizeSucce
|
|
|
740
673
|
message: string;
|
|
741
674
|
retryAfterMs?: number;
|
|
742
675
|
};
|
|
743
|
-
export type WalletRegistrationFinalizeRouteSuccess = WalletRegistrationFinalizeSuccess;
|
|
744
|
-
export type WalletRegistrationFinalizeRouteResponse = WalletRegistrationFinalizeRouteSuccess | Exclude<WalletRegistrationFinalizeResponse, {
|
|
745
|
-
ok: true;
|
|
746
|
-
}>;
|
|
747
676
|
//# sourceMappingURL=registrationContracts.d.ts.map
|
|
@@ -20,7 +20,7 @@ export type RouterAbConfiguredSigningWorkerPrivateTransport = Extract<RouterAbSi
|
|
|
20
20
|
readonly kind: 'configured';
|
|
21
21
|
}>;
|
|
22
22
|
export declare function requireRouterAbConfiguredSigningWorkerPrivateTransport(transport: RouterAbSigningWorkerPrivateTransport): RouterAbConfiguredSigningWorkerPrivateTransport;
|
|
23
|
-
|
|
23
|
+
type RouterAbNormalSigningRuntimeConfig = {
|
|
24
24
|
readonly policy: RouterAbNormalSigningServerPolicy;
|
|
25
25
|
readonly signingWorkerTransport: RouterAbSigningWorkerPrivateTransport;
|
|
26
26
|
};
|
|
@@ -31,13 +31,13 @@ export type RouterAbNormalSigningAuthorizationIdentity = {
|
|
|
31
31
|
readonly kind: 'operation_step_up';
|
|
32
32
|
readonly materialActivationId: MpcMaterialActivationId;
|
|
33
33
|
};
|
|
34
|
-
|
|
34
|
+
type RouterAbNormalSigningPrepareReplayReservationInput = {
|
|
35
35
|
readonly curve: 'ed25519' | 'ecdsa';
|
|
36
36
|
readonly authorizationIdentity: RouterAbNormalSigningAuthorizationIdentity;
|
|
37
37
|
readonly requestId: string;
|
|
38
38
|
readonly expiresAtMs: number;
|
|
39
39
|
};
|
|
40
|
-
|
|
40
|
+
type RouterAbNormalSigningPrepareReplayReservationResult = {
|
|
41
41
|
readonly ok: true;
|
|
42
42
|
} | {
|
|
43
43
|
readonly ok: false;
|
|
@@ -45,7 +45,7 @@ export type RouterAbNormalSigningPrepareReplayReservationResult = {
|
|
|
45
45
|
readonly code: string;
|
|
46
46
|
readonly message: string;
|
|
47
47
|
};
|
|
48
|
-
|
|
48
|
+
type RouterAbClampedSessionPolicy = {
|
|
49
49
|
readonly ttlMs: number;
|
|
50
50
|
readonly remainingUses: number;
|
|
51
51
|
};
|
|
@@ -68,4 +68,5 @@ export declare class RouterAbNormalSigningRuntime {
|
|
|
68
68
|
}): RouterAbClampedSessionPolicy;
|
|
69
69
|
reservePrepareReplay(input: RouterAbNormalSigningPrepareReplayReservationInput): Promise<RouterAbNormalSigningPrepareReplayReservationResult>;
|
|
70
70
|
}
|
|
71
|
+
export {};
|
|
71
72
|
//# sourceMappingURL=RouterAbNormalSigningRuntime.d.ts.map
|
|
@@ -1,9 +1,10 @@
|
|
|
1
|
-
import type {
|
|
2
|
-
import {
|
|
3
|
-
import {
|
|
1
|
+
import type { JsonRpcErrorDetails } from '../../../../../shared-ts/src/utils/jsonRpc';
|
|
2
|
+
import type { DecodedNearFinalExecutionOutcome } from '../../../../../shared-ts/src/utils/nearRpcResults';
|
|
3
|
+
import { NearJsonRpcClient } from '../../../../../shared-ts/src/near/nearClient';
|
|
4
4
|
export type { AccessKeyList } from '@near-js/types';
|
|
5
|
+
export { SignedTransaction, type NearClient } from '../../../../../shared-ts/src/near/nearClient';
|
|
5
6
|
type NearRpcErrorType = 'InvalidTxError' | 'ActionError' | 'TxExecutionError' | 'RpcError' | 'Failure' | 'Unknown';
|
|
6
|
-
|
|
7
|
+
type NearRpcFailureKind = 'transaction_not_found' | 'account_not_found' | 'access_key_not_found' | 'invalid_nonce' | 'expired' | 'invalid_transaction' | 'action_error' | 'execution_failure' | 'infrastructure_failure' | 'unknown';
|
|
7
8
|
export declare class NearRpcError extends Error {
|
|
8
9
|
code?: number;
|
|
9
10
|
type: NearRpcErrorType;
|
|
@@ -28,107 +29,10 @@ export declare class NearRpcError extends Error {
|
|
|
28
29
|
static fromRpcError(operationName: string, err: JsonRpcErrorDetails): NearRpcError;
|
|
29
30
|
static fromOutcome(operationName: string, outcome: any, failure: any): NearRpcError;
|
|
30
31
|
}
|
|
31
|
-
export
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
access_key: Omit<AccessKeyView, 'permission'> & {
|
|
37
|
-
permission: 'FullAccess';
|
|
38
|
-
};
|
|
39
|
-
};
|
|
40
|
-
export type FunctionCallAccessKey = Omit<AccessKeyInfoView, 'access_key'> & {
|
|
41
|
-
access_key: Omit<AccessKeyView, 'permission'> & {
|
|
42
|
-
permission: FunctionCallPermissionView;
|
|
43
|
-
};
|
|
44
|
-
};
|
|
45
|
-
export declare enum RpcCallType {
|
|
46
|
-
Query = "query",
|
|
47
|
-
View = "view",
|
|
48
|
-
Send = "send_tx",
|
|
49
|
-
Block = "block",
|
|
50
|
-
Call = "call_function"
|
|
51
|
-
}
|
|
52
|
-
export declare class SignedTransaction {
|
|
53
|
-
transaction: unknown;
|
|
54
|
-
signature: unknown;
|
|
55
|
-
borsh_bytes: number[];
|
|
56
|
-
nonceLease?: unknown;
|
|
57
|
-
serverDispatch?: {
|
|
58
|
-
transactionHash: string;
|
|
59
|
-
rpcResult: unknown;
|
|
60
|
-
};
|
|
61
|
-
constructor(data: {
|
|
62
|
-
transaction: unknown;
|
|
63
|
-
signature: unknown;
|
|
64
|
-
borsh_bytes: number[];
|
|
65
|
-
nonceLease?: unknown;
|
|
66
|
-
serverDispatch?: {
|
|
67
|
-
transactionHash: string;
|
|
68
|
-
rpcResult: unknown;
|
|
69
|
-
};
|
|
70
|
-
});
|
|
71
|
-
static fromPlain(input: {
|
|
72
|
-
transaction: unknown;
|
|
73
|
-
signature: unknown;
|
|
74
|
-
borsh_bytes: number[];
|
|
75
|
-
nonceLease?: unknown;
|
|
76
|
-
serverDispatch?: {
|
|
77
|
-
transactionHash: string;
|
|
78
|
-
rpcResult: unknown;
|
|
79
|
-
};
|
|
80
|
-
}): SignedTransaction;
|
|
81
|
-
encode(): ArrayBuffer;
|
|
82
|
-
base64Encode(): string;
|
|
83
|
-
}
|
|
84
|
-
export interface NearClient {
|
|
85
|
-
viewAccessKey(accountId: string, publicKey: string, finalityQuery?: FinalityReference): Promise<AccessKeyView>;
|
|
86
|
-
viewAccessKeyList(accountId: string, finalityQuery?: FinalityReference): Promise<AccessKeyList>;
|
|
87
|
-
viewAccount(accountId: string): Promise<AccountView>;
|
|
88
|
-
viewCode(accountId: string, finalityQuery?: FinalityReference): Promise<Uint8Array>;
|
|
89
|
-
viewBlock(params: BlockReference): Promise<DecodedNearBlockReference>;
|
|
90
|
-
sendTransaction(signedTransaction: SignedTransaction, waitUntil?: TxExecutionStatus): Promise<DecodedNearFinalExecutionOutcome>;
|
|
91
|
-
txStatus(txHash: string, senderAccountId: string): Promise<DecodedNearFinalExecutionOutcome>;
|
|
92
|
-
query<T>(params: RpcQueryRequest, decodeResult: NearRpcResultDecoder<T>): Promise<T>;
|
|
93
|
-
callFunction<A, T>(accountId: string, method: string, args: A, decodeResult: NearRpcResultDecoder<T>, blockQuery?: BlockReference): Promise<T>;
|
|
94
|
-
view<A, T>(params: {
|
|
95
|
-
account: string;
|
|
96
|
-
method: string;
|
|
97
|
-
args: A;
|
|
98
|
-
decodeResult: NearRpcResultDecoder<T>;
|
|
99
|
-
}): Promise<T>;
|
|
100
|
-
getAccessKeys(params: ViewAccountParams): Promise<{
|
|
101
|
-
fullAccessKeys: FullAccessKey[];
|
|
102
|
-
functionCallAccessKeys: FunctionCallAccessKey[];
|
|
103
|
-
}>;
|
|
104
|
-
}
|
|
105
|
-
export declare class MinimalNearClient implements NearClient {
|
|
106
|
-
private readonly rpcUrls;
|
|
107
|
-
constructor(rpcUrl: string | string[]);
|
|
108
|
-
private static normalizeRpcUrls;
|
|
109
|
-
private buildRequestBody;
|
|
110
|
-
private postOnce;
|
|
111
|
-
private requestWithFallback;
|
|
112
|
-
private unwrapRpcResult;
|
|
113
|
-
private makeRpcCall;
|
|
114
|
-
query<T>(params: RpcQueryRequest, decodeResult: NearRpcResultDecoder<T>): Promise<T>;
|
|
115
|
-
viewAccessKey(accountId: string, publicKey: string, finalityQuery?: FinalityReference): Promise<AccessKeyView>;
|
|
116
|
-
viewAccessKeyList(accountId: string, finalityQuery?: FinalityReference): Promise<AccessKeyList>;
|
|
117
|
-
viewAccount(accountId: string): Promise<AccountView>;
|
|
118
|
-
viewCode(accountId: string, finalityQuery?: FinalityReference): Promise<Uint8Array>;
|
|
119
|
-
viewBlock(params: BlockReference): Promise<DecodedNearBlockReference>;
|
|
120
|
-
sendTransaction(signedTransaction: SignedTransaction, waitUntil?: TxExecutionStatus): Promise<DecodedNearFinalExecutionOutcome>;
|
|
121
|
-
txStatus(txHash: string, senderAccountId: string): Promise<DecodedNearFinalExecutionOutcome>;
|
|
122
|
-
callFunction<A, T>(accountId: string, method: string, args: A, decodeResult: NearRpcResultDecoder<T>, blockQuery?: BlockReference): Promise<T>;
|
|
123
|
-
view<A, T>(params: {
|
|
124
|
-
account: string;
|
|
125
|
-
method: string;
|
|
126
|
-
args: A;
|
|
127
|
-
decodeResult: NearRpcResultDecoder<T>;
|
|
128
|
-
}): Promise<T>;
|
|
129
|
-
getAccessKeys({ account, block_id }: ViewAccountParams): Promise<{
|
|
130
|
-
fullAccessKeys: FullAccessKey[];
|
|
131
|
-
functionCallAccessKeys: FunctionCallAccessKey[];
|
|
132
|
-
}>;
|
|
32
|
+
export declare class MinimalNearClient extends NearJsonRpcClient {
|
|
33
|
+
protected errorFromRpc(operationName: string, error: JsonRpcErrorDetails): Error;
|
|
34
|
+
protected errorFromWrappedResult(message: string): Error;
|
|
35
|
+
protected errorFromOutcome(operationName: string, outcome: DecodedNearFinalExecutionOutcome, failure: unknown): Error;
|
|
36
|
+
protected errorFromFailedCall(operationName: string, error: unknown): NearRpcError;
|
|
133
37
|
}
|
|
134
38
|
//# sourceMappingURL=NearClient.d.ts.map
|
|
@@ -2,19 +2,19 @@ import type { LaneEnrollmentRevocationResultV1, RevokeLaneEnrollmentV1 } from '.
|
|
|
2
2
|
import type { LaneLifecycleRevocationRequestV1 } from './LaneLifecycleApplicationService';
|
|
3
3
|
import { LaneEnrollmentRevocation } from './LaneEnrollmentRevocation';
|
|
4
4
|
import type { LaneLifecycleStore } from './LaneLifecycleStore';
|
|
5
|
-
|
|
5
|
+
type LaneAggregateRevocationRequestV1 = {
|
|
6
6
|
readonly command: RevokeLaneEnrollmentV1;
|
|
7
7
|
readonly orderedChildren: readonly [
|
|
8
8
|
LaneLifecycleRevocationRequestV1,
|
|
9
9
|
...LaneLifecycleRevocationRequestV1[]
|
|
10
10
|
];
|
|
11
11
|
};
|
|
12
|
-
|
|
12
|
+
type LaneAggregateRevocationApplicationServiceOptionsV1 = {
|
|
13
13
|
readonly lifecycleStore: Pick<LaneLifecycleStore, 'getEnrollment' | 'fenceEnrollmentRevocation' | 'listEnrollmentProductEpochs'>;
|
|
14
14
|
readonly laneLifecycle: LaneAggregateChildRevocationPortV1;
|
|
15
15
|
readonly enrollmentRevocation: Pick<LaneEnrollmentRevocation, 'completeLaneEnrollmentRevocationV1'>;
|
|
16
16
|
};
|
|
17
|
-
|
|
17
|
+
interface LaneAggregateChildRevocationPortV1 {
|
|
18
18
|
revokeSigningLaneV1(input: LaneLifecycleRevocationRequestV1): Promise<{
|
|
19
19
|
readonly outcome: 'applied' | 'replayed' | 'conflict';
|
|
20
20
|
}>;
|
|
@@ -32,4 +32,5 @@ export declare class LaneAggregateRevocationApplicationService {
|
|
|
32
32
|
}>;
|
|
33
33
|
revokeLaneEnrollmentV1(input: LaneAggregateRevocationRequestV1): Promise<LaneEnrollmentRevocationResultV1>;
|
|
34
34
|
}
|
|
35
|
+
export {};
|
|
35
36
|
//# sourceMappingURL=LaneAggregateRevocationApplicationService.d.ts.map
|
|
@@ -1,7 +1,6 @@
|
|
|
1
1
|
import type { LaneEnrollmentId, LaneOperationId, LaneShareEpoch, SigningLaneId, WalletKeyId } from '../../../../shared-ts/src/signing-lanes';
|
|
2
2
|
import type { WalletId } from '../../../../shared-ts/src/utils/domainIds';
|
|
3
|
-
|
|
4
|
-
export type LaneEffectStatus = 'recorded' | 'confirmed';
|
|
3
|
+
type LaneEffectKind = 'activate_server_material' | 'retire_server_material' | 'invalidate_holder_material';
|
|
5
4
|
type LaneEffectRecordBaseV1 = {
|
|
6
5
|
readonly kind: 'lane_effect_record_v1';
|
|
7
6
|
readonly effectId: string;
|
|
@@ -41,7 +40,7 @@ export type LaneEffectMutationResult = {
|
|
|
41
40
|
readonly requestedCommandDigestB64u: string;
|
|
42
41
|
readonly storedCommandDigestB64u: string;
|
|
43
42
|
};
|
|
44
|
-
|
|
43
|
+
type LaneEffectLookup = {
|
|
45
44
|
readonly effectId: string;
|
|
46
45
|
};
|
|
47
46
|
export interface LaneEffectJournalStore {
|
|
@@ -2,7 +2,7 @@ import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1
|
|
|
2
2
|
import type { LaneEnrollmentId, LaneOperationId, LaneShareEpoch, SigningLaneId, WalletKeyId } from '../../../../shared-ts/src/signing-lanes';
|
|
3
3
|
import type { MpcMaterialActivationRef, WalletId } from '../../../../shared-ts/src/utils/domainIds';
|
|
4
4
|
/** A version is monotonic inside one immutable protocol or enrollment row. */
|
|
5
|
-
|
|
5
|
+
type LaneVersionedRecord<T> = {
|
|
6
6
|
readonly version: number;
|
|
7
7
|
readonly commandDigestB64u: string;
|
|
8
8
|
readonly value: T;
|
|
@@ -224,6 +224,5 @@ export type LaneEnrollmentRevocationCommitInput = {
|
|
|
224
224
|
readonly expectedVersion: number;
|
|
225
225
|
readonly commandDigestB64u: string;
|
|
226
226
|
};
|
|
227
|
-
export
|
|
228
|
-
export declare function assertNonEmptyVersion(value: number, label: string): number;
|
|
227
|
+
export {};
|
|
229
228
|
//# sourceMappingURL=LaneLifecycleStore.d.ts.map
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import { type SigningLaneRecord, type WalletKeyRecord } from '../../../../shared-ts/src/signing-lanes';
|
|
2
2
|
import { type DigestB64u } from '../../../../shared-ts/src/utils/canonicalPrimitives';
|
|
3
3
|
import type { MpcMaterialActivationRef, ProviderSubject, WalletAuthMethodId, WalletId } from '../../../../shared-ts/src/utils/domainIds';
|
|
4
|
-
import { type WalletAuthMethodRecordV2 } from '../../../../shared-ts/src/utils/
|
|
4
|
+
import { type WalletAuthMethodRecordV2 } from '../../../../shared-ts/src/utils/walletAuthMethodRecord';
|
|
5
5
|
import { type WalletAuthAuthorityRef } from '../../../../shared-ts/src/utils/walletAuthAuthority';
|
|
6
6
|
import type { WalletSignerRecord } from '../WalletStore';
|
|
7
7
|
export type ActiveOwnerWalletExecutionLaneProjection = {
|
|
@@ -13,7 +13,7 @@ export type ActiveOwnerWalletExecutionLaneProjection = {
|
|
|
13
13
|
readonly materialActivation: MpcMaterialActivationRef;
|
|
14
14
|
readonly verifiedActivationReceiptDigestB64u: DigestB64u;
|
|
15
15
|
};
|
|
16
|
-
|
|
16
|
+
type WalletExecutionLaneProjectionRefusalReason = 'auth_method_missing' | 'auth_method_ambiguous' | 'auth_method_inactive' | 'auth_method_mismatch' | 'signer_missing' | 'signer_ambiguous' | 'signer_conflict' | 'signer_invalid';
|
|
17
17
|
export type WalletExecutionLaneProjectionResult = {
|
|
18
18
|
readonly kind: 'projected';
|
|
19
19
|
readonly projection: ActiveOwnerWalletExecutionLaneProjection;
|
|
@@ -49,11 +49,5 @@ export declare function resolveActiveOwnerWalletExecutionLane(input: {
|
|
|
49
49
|
readonly walletAuthMethodId: WalletAuthMethodId;
|
|
50
50
|
readonly expectedMaterialActivation: MpcMaterialActivationRef;
|
|
51
51
|
}): Promise<WalletExecutionLaneProjectionResult>;
|
|
52
|
-
export
|
|
53
|
-
readonly walletId: WalletId;
|
|
54
|
-
readonly walletAuthMethodId: WalletAuthMethodId;
|
|
55
|
-
readonly authMethod: WalletAuthMethodRecordV2;
|
|
56
|
-
readonly signers: readonly WalletSignerRecord[];
|
|
57
|
-
readonly expectedMaterialActivation: MpcMaterialActivationRef;
|
|
58
|
-
}): Promise<ActiveOwnerWalletExecutionLaneProjection>;
|
|
52
|
+
export {};
|
|
59
53
|
//# sourceMappingURL=WalletExecutionLaneProjection.d.ts.map
|
|
@@ -10,7 +10,7 @@ export type EcdsaServerRetirementBindingV1 = {
|
|
|
10
10
|
readonly serverGeneration: EcdsaServerGeneration;
|
|
11
11
|
readonly lifecycleId: EcdsaLifecycleId;
|
|
12
12
|
};
|
|
13
|
-
|
|
13
|
+
type EcdsaServerRetirementExpectationV1 = {
|
|
14
14
|
readonly manifest: EcdsaManifestIdentity;
|
|
15
15
|
readonly materialActivation: MpcMaterialActivationRef;
|
|
16
16
|
readonly walletKeyId: WalletKeyId;
|
|
@@ -25,7 +25,7 @@ export type EcdsaServerRetirementExpectationV1 = {
|
|
|
25
25
|
/** Gateway's pre-authorized effect fence. It is distinct from receiptDigestB64u. */
|
|
26
26
|
readonly retirementEffectBindingDigestB64u: DigestB64u;
|
|
27
27
|
};
|
|
28
|
-
|
|
28
|
+
type EcdsaServerRetirementRequestV1 = {
|
|
29
29
|
readonly identity: EcdsaSigningWorkerLaneMaterialIdentityV1;
|
|
30
30
|
readonly manifest: EcdsaManifestIdentity;
|
|
31
31
|
readonly materialActivation: MpcMaterialActivationRef;
|
|
@@ -37,7 +37,7 @@ export type EcdsaServerRetirementRequestV1 = {
|
|
|
37
37
|
readonly serverGeneration: EcdsaServerGeneration;
|
|
38
38
|
readonly lifecycleId: EcdsaLifecycleId;
|
|
39
39
|
};
|
|
40
|
-
|
|
40
|
+
type EcdsaServerRetirementEffectV1 = {
|
|
41
41
|
readonly outcome: 'applied' | 'replayed';
|
|
42
42
|
readonly receipt: EcdsaServerRetirementReceiptV1;
|
|
43
43
|
/** The effect fence authorized by the Gateway command. */
|
|
@@ -54,5 +54,5 @@ export declare function parseAndVerifyEcdsaServerRetirementEffectV1(input: {
|
|
|
54
54
|
readonly expectation: EcdsaServerRetirementExpectationV1;
|
|
55
55
|
readonly label?: string;
|
|
56
56
|
}): Promise<EcdsaServerRetirementEffectV1>;
|
|
57
|
-
export
|
|
57
|
+
export {};
|
|
58
58
|
//# sourceMappingURL=ecdsaServerRetirement.d.ts.map
|
|
@@ -3,7 +3,7 @@ import { type DigestB64u } from '../../../../shared-ts/src/utils/canonicalPrimit
|
|
|
3
3
|
export type Ed25519ServerRetirementBindingV1 = {
|
|
4
4
|
readonly identity: SigningWorkerLaneMaterialIdentityV1<'ed25519'>;
|
|
5
5
|
};
|
|
6
|
-
|
|
6
|
+
type Ed25519ServerRetirementRequestV1 = {
|
|
7
7
|
readonly identity: SigningWorkerLaneMaterialIdentityV1<'ed25519'>;
|
|
8
8
|
readonly revocationEpoch: number;
|
|
9
9
|
readonly retirementReason: Ed25519ServerRetirementReceiptV1['retirementReason'];
|
|
@@ -11,7 +11,7 @@ export type Ed25519ServerRetirementRequestV1 = {
|
|
|
11
11
|
readonly retirementRequestDigestB64u: DigestB64u;
|
|
12
12
|
readonly retirementEffectBindingDigestB64u: DigestB64u;
|
|
13
13
|
};
|
|
14
|
-
|
|
14
|
+
type Ed25519ServerRetirementEffectV1 = {
|
|
15
15
|
readonly outcome: 'applied' | 'replayed';
|
|
16
16
|
readonly receipt: Ed25519ServerRetirementReceiptV1;
|
|
17
17
|
readonly retirementEffectBindingDigestB64u: DigestB64u;
|
|
@@ -26,5 +26,5 @@ export declare function parseAndVerifyEd25519ServerRetirementEffectV1(input: {
|
|
|
26
26
|
readonly request: Ed25519ServerRetirementRequestV1;
|
|
27
27
|
readonly label?: string;
|
|
28
28
|
}): Promise<Ed25519ServerRetirementEffectV1>;
|
|
29
|
-
export
|
|
29
|
+
export {};
|
|
30
30
|
//# sourceMappingURL=ed25519ServerRetirement.d.ts.map
|