@seams/wallet-server 0.6.2 → 0.7.3

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (790) hide show
  1. package/THIRD_PARTY_NOTICES.md +1 -105
  2. package/artifact-manifest.json +147 -32
  3. package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -0
  4. package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
  5. package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
  6. package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -0
  7. package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
  8. package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
  9. package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
  10. package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
  11. package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
  12. package/cloudflare-router-ab/build/router/build-stamp.json +1 -0
  13. package/cloudflare-router-ab/build/router/index.js +2 -2
  14. package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
  15. package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -0
  16. package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
  17. package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
  18. package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -0
  19. package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
  20. package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
  21. package/cloudflare-router-ab/migrations/deriver-a/0012_tenant_root_creation_tombstones.sql +20 -0
  22. package/cloudflare-router-ab/migrations/deriver-a/0013_tenant_root_root_use_admissions.sql +32 -0
  23. package/cloudflare-router-ab/migrations/deriver-a/0014_tenant_root_refresh_supersessions.sql +24 -0
  24. package/cloudflare-router-ab/migrations/deriver-a/0015_tenant_root_root_use_attempts.sql +56 -0
  25. package/cloudflare-router-ab/migrations/deriver-a/0016_tenant_root_root_use_admission_settlement.sql +5 -0
  26. package/cloudflare-router-ab/migrations/deriver-a/0017_tenant_root_root_use_admission_claims.sql +64 -0
  27. package/cloudflare-router-ab/migrations/deriver-a/0018_tenant_root_recovery_retention_keys.sql +12 -0
  28. package/cloudflare-router-ab/migrations/deriver-b/0012_tenant_root_creation_tombstones.sql +20 -0
  29. package/cloudflare-router-ab/migrations/deriver-b/0013_tenant_root_root_use_admissions.sql +32 -0
  30. package/cloudflare-router-ab/migrations/deriver-b/0014_tenant_root_refresh_supersessions.sql +24 -0
  31. package/cloudflare-router-ab/migrations/deriver-b/0015_tenant_root_root_use_attempts.sql +56 -0
  32. package/cloudflare-router-ab/migrations/deriver-b/0016_tenant_root_root_use_admission_settlement.sql +5 -0
  33. package/cloudflare-router-ab/migrations/deriver-b/0017_tenant_root_root_use_admission_claims.sql +64 -0
  34. package/cloudflare-router-ab/migrations/deriver-b/0018_tenant_root_recovery_retention_keys.sql +12 -0
  35. package/cloudflare-router-ab/scripts/bootstrap-local-tenant-root.mjs +81 -16
  36. package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +102 -9
  37. package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +4 -1
  38. package/cloudflare-router-ab/wrangler.deriver-a.toml +24 -0
  39. package/cloudflare-router-ab/wrangler.router.toml +13 -0
  40. package/dist/esm/authorization/capabilityPolicy.js +1 -1
  41. package/dist/esm/authorization/domain.js +2 -2
  42. package/dist/esm/authorization/factorEvidence.js +6 -100
  43. package/dist/esm/authorization/service.js +42 -2
  44. package/dist/esm/authorization/vaultProxyUse.js +5 -10
  45. package/dist/esm/cloud-host.js +17 -12
  46. package/dist/esm/core/EmailOtpRecords.js +19 -1
  47. package/dist/esm/core/EmailOtpStores.js +323 -924
  48. package/dist/esm/core/IdentityStore.js +67 -345
  49. package/dist/esm/core/NearPublicKeyStore.js +21 -63
  50. package/dist/esm/core/RegistrationCeremonyStore.js +3 -1793
  51. package/dist/esm/core/SessionService.js +7 -30
  52. package/dist/esm/core/ThresholdService/config.js +1 -82
  53. package/dist/esm/core/ThresholdService/kv.js +3 -3
  54. package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +37 -5
  55. package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.js +4 -74
  56. package/dist/esm/core/ThresholdService/routerAbNormalSigningPolicy.js +3 -10
  57. package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +15 -51
  58. package/dist/esm/core/ThresholdService/stores/KeyStore.js +3 -3
  59. package/dist/esm/core/ThresholdService/stores/SessionStore.js +5 -81
  60. package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +191 -372
  61. package/dist/esm/core/ThresholdService/stores/exportReplayGuard.js +7 -0
  62. package/dist/esm/core/ThresholdService/validation.js +18 -230
  63. package/dist/esm/core/WalletAuthMethodStore.js +22 -79
  64. package/dist/esm/core/WalletStore.js +62 -191
  65. package/dist/esm/core/WebAuthnAuthenticatorStore.js +57 -340
  66. package/dist/esm/core/WebAuthnCredentialBindingStore.js +90 -369
  67. package/dist/esm/core/WebAuthnLoginChallengeStore.js +17 -397
  68. package/dist/esm/core/WebAuthnSyncChallengeStore.js +17 -397
  69. package/dist/esm/core/authService/AuthService.js +2 -19
  70. package/dist/esm/core/authService/bytes.js +1 -4
  71. package/dist/esm/core/authService/emailOtpChallengeOperations.js +2 -5
  72. package/dist/esm/core/authService/emailOtpChallengeProof.js +10 -41
  73. package/dist/esm/core/authService/emailOtpChallengeVerification.js +19 -90
  74. package/dist/esm/core/authService/emailOtpChallenges.js +11 -46
  75. package/dist/esm/core/authService/emailOtpConfig.js +1 -32
  76. package/dist/esm/core/authService/emailOtpDelivery.js +10 -45
  77. package/dist/esm/core/authService/emailOtpEnrollment.js +9 -40
  78. package/dist/esm/core/authService/emailOtpGrant.js +9 -40
  79. package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +15 -193
  80. package/dist/esm/core/authService/emailOtpSeal.js +5 -20
  81. package/dist/esm/core/authService/emailOtpUnlock.js +20 -110
  82. package/dist/esm/core/authService/googleEmailOtpRegistration.js +29 -116
  83. package/dist/esm/core/authService/identity.js +5 -20
  84. package/dist/esm/core/authService/nearPrivateKeySigning.js +7 -15
  85. package/dist/esm/core/authService/nearPublicKeyMetadata.js +6 -25
  86. package/dist/esm/core/authService/nearTransactions.js +2 -1
  87. package/dist/esm/core/authService/oidcVerification.js +25 -38
  88. package/dist/esm/core/authService/rateLimits.js +3 -36
  89. package/dist/esm/core/authService/registrationThresholdHelpers.js +2 -103
  90. package/dist/esm/core/authService/storeRegistry.js +2 -13
  91. package/dist/esm/core/authService/thresholdEcdsaKeyInventory.js +6 -6
  92. package/dist/esm/core/authService/webauthn.js +52 -241
  93. package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -6
  94. package/dist/esm/core/authService/webauthnVerificationOutcomes.js +41 -0
  95. package/dist/esm/core/authService/webauthnWalletBinding.js +2 -122
  96. package/dist/esm/core/d1EcdsaSignerRead.js +76 -0
  97. package/dist/esm/core/d1IdentityStore.js +46 -139
  98. package/dist/esm/core/d1TenantStore.js +82 -0
  99. package/dist/esm/core/d1WalletAuthMethodStore.js +92 -143
  100. package/dist/esm/core/d1WalletStore.js +28 -36
  101. package/dist/esm/core/deviceLinking/linkedDeviceEmailOtpGrant.js +10 -12
  102. package/dist/esm/core/deviceLinking/linkedDeviceManagement.js +25 -3
  103. package/dist/esm/core/deviceLinking/linkedDeviceSession.js +6 -895
  104. package/dist/esm/core/deviceLinking/linkedDeviceSessionApproval.js +100 -0
  105. package/dist/esm/core/deviceLinking/linkedDeviceSessionRecord.js +662 -0
  106. package/dist/esm/core/deviceLinking/requestProof.js +13 -4
  107. package/dist/esm/core/ecdsaMaterialReadSnapshot.js +85 -0
  108. package/dist/esm/core/emailOtpD1Statements.js +383 -0
  109. package/dist/esm/core/hostedAccountIds.js +2 -2
  110. package/dist/esm/core/keyMaterialBrands.js +2 -48
  111. package/dist/esm/core/nearRelayerAccountProvisioning.js +27 -155
  112. package/dist/esm/core/nearSignerWasmRuntime.js +1 -4
  113. package/dist/esm/core/rpcClients/near/NearClient.js +15 -218
  114. package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +1 -1
  115. package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +2 -4
  116. package/dist/esm/core/signingLanes/LaneLifecycleStore.js +0 -24
  117. package/dist/esm/core/signingLanes/WalletExecutionLaneProjection.js +8 -11
  118. package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +3 -8
  119. package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +1 -4
  120. package/dist/esm/core/signingMaterial/ordinaryInactiveSignerMaterialReservation.js +2 -5
  121. package/dist/esm/core/storeBackends.js +208 -0
  122. package/dist/esm/core/thresholdEcdsaChainTarget.js +2 -10
  123. package/dist/esm/core/webAuthnD1Statements.js +92 -0
  124. package/dist/esm/core/webAuthnStoreBackends.js +198 -0
  125. package/dist/esm/hosted-wallet-gateway.js +34 -17
  126. package/dist/esm/index.js +2 -2
  127. package/dist/esm/local-hosted-wallet-gateway-worker.js +2 -23
  128. package/dist/esm/localHostedWalletGatewayHandler.js +312 -0
  129. package/dist/esm/localIntendedEcdsaFinalizeFault.js +85 -0
  130. package/dist/esm/localIntendedLinkExecuteFault.js +140 -0
  131. package/dist/esm/localIntendedMaterialAdmissionFault.js +176 -0
  132. package/dist/esm/localIntendedPresignCancellation.js +44 -0
  133. package/dist/esm/localIntendedRevokeFault.js +106 -0
  134. package/dist/esm/localIntendedSessionAdmissionFault.js +139 -0
  135. package/dist/esm/localIntendedYaoExportFault.js +117 -0
  136. package/dist/esm/localIntendedYaoFault.js +13 -16
  137. package/dist/esm/localIntendedYaoFinalizeFault.js +99 -0
  138. package/dist/esm/localIntendedYaoRecoveryFault.js +102 -0
  139. package/dist/esm/localIntendedYaoSigningFault.js +127 -0
  140. package/dist/esm/router/auth/authRequestValidation.js +1 -1
  141. package/dist/esm/router/auth/commonRouterUtils.js +34 -12
  142. package/dist/esm/router/auth/walletSessionFailure.js +3 -19
  143. package/dist/esm/router/auth/webAuthnCredentialCodecs.js +4 -15
  144. package/dist/esm/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.js +24 -0
  145. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.js +2 -6
  146. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +87 -89
  147. package/dist/esm/router/cloudflare/d1/auth/walletSessionCredentialReaders.js +76 -0
  148. package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +215 -0
  149. package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +423 -308
  150. package/dist/esm/router/cloudflare/d1/authorization/d1VaultProxyStore.js +8 -12
  151. package/dist/esm/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.js +14 -0
  152. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +107 -66
  153. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +3 -6
  154. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +1 -19
  155. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceManagementService.js +4 -3
  156. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +52 -9
  157. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -6
  158. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.js +100 -0
  159. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.js +7 -10
  160. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +33 -124
  161. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.js +2 -2
  162. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +10 -18
  163. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.js +6 -6
  164. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkSourceReader.js +3 -1
  165. package/dist/esm/router/cloudflare/d1/deviceLinking/index.js +4 -4
  166. package/dist/esm/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.js +69 -0
  167. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +39 -68
  168. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.js +69 -0
  169. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.js +2 -2
  170. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.js +12 -55
  171. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.js +17 -80
  172. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +26 -71
  173. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +20 -3
  174. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpDeliveryRuntime.js +6 -25
  175. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +7 -94
  176. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +5 -47
  177. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +38 -170
  178. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +24 -87
  179. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +9 -32
  180. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.js +5 -20
  181. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +15 -134
  182. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +54 -260
  183. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +24 -111
  184. package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +1 -28
  185. package/dist/esm/router/cloudflare/d1/identity/d1IdentityService.js +9 -40
  186. package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +5 -18
  187. package/dist/esm/router/cloudflare/d1/oidc/d1OidcBoundary.js +18 -91
  188. package/dist/esm/router/cloudflare/d1/oidc/d1OidcVerificationService.js +6 -30
  189. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.js +1 -1
  190. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +7 -18
  191. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +25 -80
  192. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.js +24 -15
  193. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.js +23 -253
  194. package/dist/esm/router/cloudflare/d1/registration/d1EvmFamilyEcdsaRegistrationBranch.js +5 -20
  195. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +20 -39
  196. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +31 -73
  197. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +4 -1
  198. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +10 -31
  199. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +6 -30
  200. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +286 -220
  201. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +5 -3
  202. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +2 -2
  203. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js +4 -7
  204. package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +139 -27
  205. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -1
  206. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +1 -1
  207. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +2 -1
  208. package/dist/esm/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.js +2 -60
  209. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +158 -19
  210. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.js +19 -49
  211. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.js +100 -0
  212. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +132 -33
  213. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +83 -4
  214. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +45 -217
  215. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +10 -13
  216. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +22 -116
  217. package/dist/esm/router/cloudflare/durableObjects/thresholdStore.js +59 -66
  218. package/dist/esm/router/cloudflare/runtime/createSelfHostedCloudflareSigningWorker.js +1 -2
  219. package/dist/esm/router/cloudflare/runtime/routerAbPrewarm.js +2 -2
  220. package/dist/esm/router/cloudflare/runtime/staticWalletConsoleBinding.js +5 -20
  221. package/dist/esm/router/cloudflare/runtime/tenantRootCreationGrant.js +2 -9
  222. package/dist/esm/router/cloudflare/runtime/walletConsoleTenantRootLineage.js +11 -2
  223. package/dist/esm/router/cloudflare/runtime/walletControlOps.js +2 -1
  224. package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
  225. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +7 -7
  226. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +4 -3
  227. package/dist/esm/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.js +48 -21
  228. package/dist/esm/router/cloudflare.js +13343 -14372
  229. package/dist/esm/router/domains/ecdsa/routerAbEcdsaStrictRegistration.js +16 -5
  230. package/dist/esm/router/domains/ecdsa/thresholdEcdsaRequestValidation.js +2 -8
  231. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.js +33 -0
  232. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +17 -9
  233. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +29 -431
  234. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +7 -2
  235. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPersistence.js +5 -8
  236. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.js +2 -1
  237. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.js +70 -2
  238. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +134 -169
  239. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +77 -162
  240. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.js +205 -51
  241. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +29 -11
  242. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryWalletSessionAuthorization.js +3 -6
  243. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.js +182 -55
  244. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.js +2 -1
  245. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.js +63 -247
  246. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js +9 -27
  247. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.js +87 -132
  248. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.js +39 -55
  249. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.js +5 -4
  250. package/dist/esm/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.js +45 -0
  251. package/dist/esm/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.js +1 -1
  252. package/dist/esm/router/domains/emailOtp/emailOtpExportPolicy.js +1 -42
  253. package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +1 -6
  254. package/dist/esm/router/domains/emailOtp/emailOtpRouteHandlers.js +15 -62
  255. package/dist/esm/router/domains/emailOtp/emailOtpSessionRouteHelpers.js +1 -142
  256. package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.js +1 -1
  257. package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -2
  258. package/dist/esm/router/domains/passkeyCustody/walletRecoveryFinalization.js +23 -45
  259. package/dist/esm/router/domains/passkeyCustody/walletRecoveryKeyManifest.js +5 -5
  260. package/dist/esm/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.js +1 -1
  261. package/dist/esm/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.js +836 -0
  262. package/dist/esm/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.js +698 -0
  263. package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmission.js +210 -0
  264. package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.js +16 -15
  265. package/dist/esm/router/domains/signingOperations/routerAbOperationStepUp.js +314 -0
  266. package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +62 -2159
  267. package/dist/esm/router/domains/signingOperations/walletExecutionAdmission.js +1 -4
  268. package/dist/esm/router/domains/tenantRoot/tenantRootIdentityResolution.js +8 -14
  269. package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +18 -22
  270. package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +3 -4
  271. package/dist/esm/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.js +2 -2
  272. package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +127 -339
  273. package/dist/esm/router/express.js +7172 -7997
  274. package/dist/esm/router/framework/http.js +5 -4
  275. package/dist/esm/router/framework/ror/normalize.js +1 -1
  276. package/dist/esm/router/framework/routerApiRouteSurface.js +1 -1
  277. package/dist/esm/router/framework/runtimeSnapshotConsumer.js +8 -35
  278. package/dist/esm/router/node/nodeHostedWalletGateway.js +64 -0
  279. package/dist/esm/router/node/nodeHostedWalletGatewayCheck.js +163 -0
  280. package/dist/esm/router/node/nodeHostedWalletGatewayMain.js +120 -0
  281. package/dist/esm/router/node/nodeHttp.js +79 -0
  282. package/dist/esm/router/node/nodeSqlite.js +43 -0
  283. package/dist/esm/router/node/signerSqlMigrations.js +48 -0
  284. package/dist/esm/router/transport/fetch/createFetchRouter.js +4 -7
  285. package/dist/esm/router/transport/fetch/routes/auth.js +9 -41
  286. package/dist/esm/router/transport/fetch/routes/deviceLinking.js +16 -18
  287. package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +8 -27
  288. package/dist/esm/router/transport/fetch/routes/deviceManagement.js +15 -24
  289. package/dist/esm/router/transport/fetch/routes/nearPublicKeys.js +4 -16
  290. package/dist/esm/router/transport/fetch/routes/normalSigningRouterProxy.js +3 -16
  291. package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +144 -461
  292. package/dist/esm/router/transport/fetch/routes/sessions.js +5 -4
  293. package/dist/esm/router/transport/fetch/routes/syncAccount.js +12 -42
  294. package/dist/esm/router/transport/fetch/routes/syncAccountBootstrap.js +2 -2
  295. package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +96 -102
  296. package/dist/esm/router/transport/fetch/routes/thresholdEd25519.js +52 -27
  297. package/dist/esm/router/transport/fetch/routes/walletExecutionLanePreflight.js +4 -1
  298. package/dist/esm/router/transport/fetch/routes/webauthnAuthenticators.js +4 -16
  299. package/dist/esm/shared-ts/src/authorization/capabilityKinds.js +1 -1
  300. package/dist/esm/shared-ts/src/authorization/delegatedAuthority.js +1 -1
  301. package/dist/esm/shared-ts/src/authorization/operationFingerprint.js +1 -2
  302. package/dist/esm/shared-ts/src/authorization/walletAuthority.js +99 -227
  303. package/dist/esm/shared-ts/src/authorization/walletCustodyOperation.js +4 -6
  304. package/dist/esm/shared-ts/src/authorization/walletSignerActivationEquality.js +12 -0
  305. package/dist/esm/shared-ts/src/device-linking/activeWalletSession.js +74 -0
  306. package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +50 -0
  307. package/dist/esm/shared-ts/src/device-linking/committedSignerPackages.js +10 -14
  308. package/dist/esm/shared-ts/src/device-linking/delegatedActivationPlan.js +3 -5
  309. package/dist/esm/shared-ts/src/device-linking/deviceManagement.js +55 -0
  310. package/dist/esm/shared-ts/src/device-linking/digests.js +10 -65
  311. package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +14 -16
  312. package/dist/esm/shared-ts/src/device-linking/index.js +4 -1
  313. package/dist/esm/shared-ts/src/device-linking/parsers.js +510 -1063
  314. package/dist/esm/shared-ts/src/device-linking/requestProof.js +5 -14
  315. package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +10 -16
  316. package/dist/esm/shared-ts/src/device-linking/walletSessionCredentialDelivery.js +9 -9
  317. package/dist/esm/shared-ts/src/device-linking/wireFields.js +59 -0
  318. package/dist/esm/shared-ts/src/near/nearClient.js +252 -0
  319. package/dist/esm/shared-ts/src/passkey-custody/credentialActivity.js +3 -1
  320. package/dist/esm/shared-ts/src/passkey-custody/custodyEnvelope.js +7 -5
  321. package/dist/esm/shared-ts/src/passkey-custody/custodySecretBinding.js +6 -4
  322. package/dist/esm/shared-ts/src/passkey-custody/primitives.js +9 -39
  323. package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -5
  324. package/dist/esm/shared-ts/src/signing-lanes/index.js +3 -3
  325. package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +8 -19
  326. package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +5 -14
  327. package/dist/esm/shared-ts/src/signing-lanes/participants.js +2 -5
  328. package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +7 -5
  329. package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +6 -45
  330. package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +423 -1511
  331. package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +323 -0
  332. package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +59 -0
  333. package/dist/esm/shared-ts/src/tenant-root/tenantRootIdentifier.js +12 -0
  334. package/dist/esm/shared-ts/src/tenant-root/tenantRootIdentity.js +2 -9
  335. package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +2 -5
  336. package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +1 -2
  337. package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +49 -0
  338. package/dist/esm/shared-ts/src/utils/addAuthMethodRegistration.js +3 -4
  339. package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +8 -1
  340. package/dist/esm/shared-ts/src/utils/digestEncoding.js +63 -0
  341. package/dist/esm/shared-ts/src/utils/ecdsaKeyFactsInventory.js +2 -4
  342. package/dist/esm/shared-ts/src/utils/ecdsaServerTiming.js +0 -1
  343. package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +5 -3
  344. package/dist/esm/shared-ts/src/utils/exactKeys.js +17 -0
  345. package/dist/esm/shared-ts/src/utils/exactRecord.js +44 -0
  346. package/dist/esm/shared-ts/src/utils/failure.js +20 -0
  347. package/dist/esm/shared-ts/src/utils/registrationAuthMethodInput.js +127 -0
  348. package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +2 -2
  349. package/dist/esm/shared-ts/src/utils/registrationIds.js +280 -0
  350. package/dist/esm/shared-ts/src/utils/registrationIntent.js +7 -1182
  351. package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +426 -0
  352. package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +11 -136
  353. package/dist/esm/shared-ts/src/utils/routerAbEd25519Yao.js +3 -163
  354. package/dist/esm/shared-ts/src/utils/routerAbEd25519YaoDigests.js +160 -0
  355. package/dist/esm/shared-ts/src/utils/routerAbNormalSigningIdentity.js +1 -4
  356. package/dist/esm/shared-ts/src/utils/routerAbPublicKeyset.js +7 -15
  357. package/dist/esm/shared-ts/src/utils/thresholdEcdsaChainTarget.js +9 -0
  358. package/dist/esm/shared-ts/src/utils/validation.js +37 -6
  359. package/dist/esm/shared-ts/src/utils/walletAuthMethodRecord.js +362 -0
  360. package/dist/esm/shared-ts/src/utils/wireSchema.js +77 -0
  361. package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +1 -1
  362. package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeReservation.js +1 -1
  363. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js +8 -15
  364. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.js +4 -8
  365. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.js +3 -1
  366. package/dist/esm/storage/d1Sql.js +10 -1
  367. package/dist/esm/storage/syncSqlite.js +79 -0
  368. package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +11 -33
  369. package/dist/esm/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.js +1 -1
  370. package/dist/esm/threshold/session/signingSessionSeal/idempotencyBackends.js +3 -3
  371. package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +3 -10
  372. package/dist/esm/threshold/session/signingSessionSeal/options.js +1 -1
  373. package/dist/esm/threshold/session/signingSessionSeal/service.js +8 -35
  374. package/dist/esm/threshold/session/signingSessionSeal/transport/express.js +18 -94
  375. package/dist/esm/threshold/session/signingSessionSeal/transport/fetch.js +6 -30
  376. package/dist/esm/threshold/session/signingSessionSeal/transport/shared.js +23 -75
  377. package/dist/esm/threshold/statusCodes.js +1 -1
  378. package/dist/esm/wasm/evm_crypto/pkg/evm_crypto_bg.wasm +0 -0
  379. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +3 -3
  380. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
  381. package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +8 -26
  382. package/dist/types/shared-ts/src/authorization/delegatedAuthority.d.ts +2 -9
  383. package/dist/types/shared-ts/src/authorization/operationFingerprint.d.ts +1 -3
  384. package/dist/types/shared-ts/src/authorization/walletAuthority.d.ts +25 -12
  385. package/dist/types/shared-ts/src/authorization/walletSessionIssuance.d.ts +8 -0
  386. package/dist/types/shared-ts/src/authorization/walletSignerActivationEquality.d.ts +4 -0
  387. package/dist/types/shared-ts/src/device-linking/activeWalletSession.d.ts +3 -2
  388. package/dist/types/shared-ts/src/device-linking/authorityActivation.d.ts +5 -0
  389. package/dist/types/shared-ts/src/device-linking/committedSignerPackages.d.ts +4 -8
  390. package/dist/types/shared-ts/src/device-linking/contracts.d.ts +13 -74
  391. package/dist/types/shared-ts/src/device-linking/contracts.typecheck.d.ts +2 -1
  392. package/dist/types/shared-ts/src/device-linking/deviceManagement.d.ts +7 -0
  393. package/dist/types/shared-ts/src/device-linking/digests.d.ts +0 -5
  394. package/dist/types/shared-ts/src/device-linking/ed25519ExportRoot.d.ts +3 -2
  395. package/dist/types/shared-ts/src/device-linking/index.d.ts +2 -0
  396. package/dist/types/shared-ts/src/device-linking/parsers.d.ts +4 -41
  397. package/dist/types/shared-ts/src/device-linking/requestProof.d.ts +0 -1
  398. package/dist/types/shared-ts/src/device-linking/sourceContribution.d.ts +5 -2
  399. package/dist/types/shared-ts/src/device-linking/walletSessionCredentialDelivery.d.ts +2 -1
  400. package/dist/types/shared-ts/src/device-linking/wireFields.d.ts +26 -0
  401. package/dist/types/shared-ts/src/near/actions.d.ts +4 -4
  402. package/dist/types/shared-ts/src/near/delegate.d.ts +3 -2
  403. package/dist/types/shared-ts/src/near/nearClient.d.ts +145 -0
  404. package/dist/types/shared-ts/src/passkey-custody/ceremonyCommitPayload.d.ts +0 -22
  405. package/dist/types/shared-ts/src/passkey-custody/credentialActivity.d.ts +2 -4
  406. package/dist/types/shared-ts/src/passkey-custody/custodyEnvelope.d.ts +14 -30
  407. package/dist/types/shared-ts/src/passkey-custody/custodySecretBinding.d.ts +8 -24
  408. package/dist/types/shared-ts/src/passkey-custody/index.d.ts +0 -2
  409. package/dist/types/shared-ts/src/passkey-custody/primitives.d.ts +9 -14
  410. package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -15
  411. package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +11 -50
  412. package/dist/types/shared-ts/src/signing-lanes/ids.d.ts +1 -10
  413. package/dist/types/shared-ts/src/signing-lanes/index.d.ts +1 -2
  414. package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +1 -2
  415. package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +5 -27
  416. package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +0 -11
  417. package/dist/types/shared-ts/src/signing-lanes/recordParsers.d.ts +6 -53
  418. package/dist/types/shared-ts/src/signing-lanes/records.d.ts +1 -2
  419. package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +18 -42
  420. package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +1 -20
  421. package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +4 -25
  422. package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +1 -41
  423. package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +6 -0
  424. package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +20 -0
  425. package/dist/types/shared-ts/src/tenant-root/tenantRootIdentifier.d.ts +3 -0
  426. package/dist/types/shared-ts/src/tenant-root/tenantRootOperationRecord.d.ts +2 -1
  427. package/dist/types/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.d.ts +8 -35
  428. package/dist/types/shared-ts/src/threshold/ed25519OperationFingerprint.d.ts +8 -35
  429. package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +25 -0
  430. package/dist/types/shared-ts/src/threshold/participants.d.ts +3 -9
  431. package/dist/types/shared-ts/src/threshold/secp256k1.d.ts +0 -37
  432. package/dist/types/shared-ts/src/threshold/sessionPolicy.d.ts +24 -0
  433. package/dist/types/shared-ts/src/threshold/signingRootScope.d.ts +3 -5
  434. package/dist/types/shared-ts/src/utils/addAuthMethodRegistration.d.ts +3 -4
  435. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +7 -108
  436. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +16 -3
  437. package/dist/types/shared-ts/src/utils/canonicalPrimitives.d.ts +2 -0
  438. package/dist/types/shared-ts/src/utils/digestEncoding.d.ts +9 -0
  439. package/dist/types/shared-ts/src/utils/domainIds.d.ts +1 -2
  440. package/dist/types/shared-ts/src/utils/ecdsaKeyFactsInventory.d.ts +3 -13
  441. package/dist/types/shared-ts/src/utils/eip1559TxWasmJson.d.ts +16 -0
  442. package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +7 -5
  443. package/dist/types/shared-ts/src/utils/emailOtpRecoveryKey.d.ts +0 -2
  444. package/dist/types/shared-ts/src/utils/errors.d.ts +0 -7
  445. package/dist/types/shared-ts/src/utils/exactKeys.d.ts +11 -0
  446. package/dist/types/shared-ts/src/utils/exactRecord.d.ts +12 -0
  447. package/dist/types/shared-ts/src/utils/failure.d.ts +12 -0
  448. package/dist/types/shared-ts/src/utils/index.d.ts +5 -2
  449. package/dist/types/shared-ts/src/utils/jsonRpc.d.ts +6 -6
  450. package/dist/types/shared-ts/src/utils/near.d.ts +2 -1
  451. package/dist/types/shared-ts/src/utils/nearRpcResults.d.ts +8 -7
  452. package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -4
  453. package/dist/types/shared-ts/src/utils/registrationAuthMethodInput.d.ts +179 -0
  454. package/dist/types/shared-ts/src/utils/registrationContracts.d.ts +76 -0
  455. package/dist/types/shared-ts/src/utils/registrationEstablishedSession.d.ts +1 -2
  456. package/dist/types/shared-ts/src/utils/registrationIds.d.ts +56 -0
  457. package/dist/types/shared-ts/src/utils/registrationIntent.d.ts +9 -514
  458. package/dist/types/shared-ts/src/utils/registrationSignerPlan.d.ts +130 -0
  459. package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts +24 -93
  460. package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts +15 -99
  461. package/dist/types/shared-ts/src/utils/routerAbEd25519YaoDigests.d.ts +38 -0
  462. package/dist/types/shared-ts/src/utils/routerAbNormalSigningIdentity.d.ts +30 -8
  463. package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts +10 -15
  464. package/dist/types/shared-ts/src/utils/routerAbTraceContext.d.ts +2 -1
  465. package/dist/types/shared-ts/src/utils/routerApiKeyAuth.d.ts +2 -0
  466. package/dist/types/shared-ts/src/utils/secureRandomId.d.ts +0 -2
  467. package/dist/types/shared-ts/src/utils/signerDomain.d.ts +3 -35
  468. package/dist/types/shared-ts/src/utils/signerSlot.d.ts +0 -4
  469. package/dist/types/shared-ts/src/utils/signingSessionSeal.d.ts +10 -17
  470. package/dist/types/shared-ts/src/utils/thresholdEcdsaChainTarget.d.ts +25 -0
  471. package/dist/types/shared-ts/src/utils/validation.d.ts +10 -10
  472. package/dist/types/shared-ts/src/utils/variant.d.ts +29 -0
  473. package/dist/types/shared-ts/src/utils/variant.typecheck.d.ts +22 -0
  474. package/dist/types/shared-ts/src/utils/walletAddSignerActivation.d.ts +2 -2
  475. package/dist/types/shared-ts/src/utils/walletAuthAuthority.d.ts +1 -58
  476. package/dist/types/shared-ts/src/utils/walletAuthMethodRecord.d.ts +101 -0
  477. package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +3 -7
  478. package/dist/types/shared-ts/src/utils/webauthnDeviceInfo.d.ts +5 -4
  479. package/dist/types/shared-ts/src/utils/wireSchema.d.ts +60 -0
  480. package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +2 -1
  481. package/dist/types/shared-ts/src/wallet-recovery/index.d.ts +0 -1
  482. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeLocator.d.ts +0 -16
  483. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +2 -11
  484. package/dist/types/shared-ts/src/wallet-recovery/recoveryEnvelopes.d.ts +3 -16
  485. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.d.ts +6 -18
  486. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.d.ts +0 -2
  487. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.d.ts +1 -3
  488. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryPreparation.d.ts +15 -0
  489. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryTarget.d.ts +3 -4
  490. package/dist/types/wallet-server/src/authorization/capabilityPolicy.d.ts +0 -1
  491. package/dist/types/wallet-server/src/authorization/domain.d.ts +36 -5
  492. package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.d.ts +61 -0
  493. package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.typecheck.d.ts +2 -0
  494. package/dist/types/wallet-server/src/authorization/factorEvidence.d.ts +6 -7
  495. package/dist/types/wallet-server/src/authorization/service.d.ts +71 -3
  496. package/dist/types/wallet-server/src/cloud-host.d.ts +6 -2
  497. package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +10 -1
  498. package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +16 -116
  499. package/dist/types/wallet-server/src/core/IdentityStore.d.ts +2 -7
  500. package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +6 -16
  501. package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +29 -90
  502. package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -12
  503. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +10 -3
  504. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.d.ts +17 -48
  505. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/internalServiceHttp.d.ts +2 -1
  506. package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +4 -71
  507. package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +2 -1
  508. package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +2 -6
  509. package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +2 -1
  510. package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +2 -4
  511. package/dist/types/wallet-server/src/core/ThresholdService/stores/exportReplayGuard.d.ts +3 -0
  512. package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +11 -137
  513. package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +2 -7
  514. package/dist/types/wallet-server/src/core/WalletStore.d.ts +3 -8
  515. package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +15 -22
  516. package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +14 -36
  517. package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +9 -34
  518. package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +9 -34
  519. package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -3
  520. package/dist/types/wallet-server/src/core/authService/bytes.d.ts +0 -1
  521. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +6 -5
  522. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +9 -17
  523. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +3 -2
  524. package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +8 -32
  525. package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +3 -10
  526. package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +4 -3
  527. package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +4 -3
  528. package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +3 -70
  529. package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +2 -1
  530. package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +6 -12
  531. package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +5 -8
  532. package/dist/types/wallet-server/src/core/authService/nearPrivateKeySigning.d.ts +3 -2
  533. package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +2 -1
  534. package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +2 -1
  535. package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +4 -3
  536. package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -3
  537. package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -26
  538. package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -5
  539. package/dist/types/wallet-server/src/core/authService/thresholdEcdsaKeyInventory.d.ts +0 -23
  540. package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +8 -16
  541. package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +7 -7
  542. package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +43 -0
  543. package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +1 -28
  544. package/dist/types/wallet-server/src/core/d1EcdsaSignerRead.d.ts +39 -0
  545. package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +6 -16
  546. package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +51 -0
  547. package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +11 -29
  548. package/dist/types/wallet-server/src/core/d1WalletStore.d.ts +16 -1
  549. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEd25519ExportRoot.d.ts +2 -1
  550. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEmailOtpGrant.d.ts +2 -1
  551. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceManagement.d.ts +44 -26
  552. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +19 -217
  553. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionApproval.d.ts +8 -0
  554. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionRecord.d.ts +258 -0
  555. package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -2
  556. package/dist/types/wallet-server/src/core/ecdsaMaterialReadSnapshot.d.ts +19 -0
  557. package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +54 -0
  558. package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -15
  559. package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +4 -24
  560. package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +2 -3
  561. package/dist/types/wallet-server/src/core/nearSignerWasmRuntime.d.ts +0 -1
  562. package/dist/types/wallet-server/src/core/registrationContracts.d.ts +37 -108
  563. package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +8 -9
  564. package/dist/types/wallet-server/src/core/rpcClients/near/NearClient.d.ts +10 -107
  565. package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +4 -3
  566. package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +2 -3
  567. package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +2 -3
  568. package/dist/types/wallet-server/src/core/signingLanes/WalletExecutionLaneProjection.d.ts +5 -20
  569. package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +4 -4
  570. package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +3 -3
  571. package/dist/types/wallet-server/src/core/signingLanes/signingWorkerLaneMaterialIdentity.d.ts +2 -19
  572. package/dist/types/wallet-server/src/core/storeBackends.d.ts +83 -0
  573. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +13 -59
  574. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +51 -3
  575. package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +3 -12
  576. package/dist/types/wallet-server/src/core/types.d.ts +5 -30
  577. package/dist/types/wallet-server/src/core/webAuthnD1Statements.d.ts +29 -0
  578. package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +96 -0
  579. package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +11 -7
  580. package/dist/types/wallet-server/src/index.d.ts +1 -1
  581. package/dist/types/wallet-server/src/local-hosted-wallet-gateway-worker.d.ts +1 -4
  582. package/dist/types/wallet-server/src/localHostedWalletGatewayHandler.d.ts +12 -0
  583. package/dist/types/wallet-server/src/localIntendedEcdsaFinalizeFault.d.ts +33 -0
  584. package/dist/types/wallet-server/src/localIntendedLinkExecuteFault.d.ts +47 -0
  585. package/dist/types/wallet-server/src/localIntendedMaterialAdmissionFault.d.ts +38 -0
  586. package/dist/types/wallet-server/src/localIntendedPresignCancellation.d.ts +4 -0
  587. package/dist/types/wallet-server/src/localIntendedRevokeFault.d.ts +40 -0
  588. package/dist/types/wallet-server/src/localIntendedSessionAdmissionFault.d.ts +41 -0
  589. package/dist/types/wallet-server/src/localIntendedYaoExportFault.d.ts +41 -0
  590. package/dist/types/wallet-server/src/localIntendedYaoFault.d.ts +7 -1
  591. package/dist/types/wallet-server/src/localIntendedYaoFinalizeFault.d.ts +37 -0
  592. package/dist/types/wallet-server/src/localIntendedYaoRecoveryFault.d.ts +45 -0
  593. package/dist/types/wallet-server/src/localIntendedYaoSigningFault.d.ts +51 -0
  594. package/dist/types/wallet-server/src/router/auth/authRequestValidation.d.ts +13 -29
  595. package/dist/types/wallet-server/src/router/auth/commonRouterUtils.d.ts +20 -11
  596. package/dist/types/wallet-server/src/router/auth/walletSessionFailure.d.ts +1 -4
  597. package/dist/types/wallet-server/src/router/auth/webAuthnCredentialCodecs.d.ts +3 -2
  598. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.d.ts +12 -0
  599. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.d.ts +3 -3
  600. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +2 -2
  601. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthService.d.ts +1 -1
  602. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/walletSessionCredentialReaders.d.ts +9 -0
  603. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/authorizedOperationStatements.d.ts +34 -0
  604. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +54 -21
  605. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.d.ts +3 -0
  606. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/walletSessionAuthorityProjection.d.ts +2 -1
  607. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +74 -6
  608. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +2 -3
  609. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.d.ts +8 -21
  610. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.d.ts +14 -1
  611. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.d.ts +49 -0
  612. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.d.ts +1 -1
  613. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +6 -8
  614. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.d.ts +1 -1
  615. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.d.ts +7 -10
  616. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +8 -4
  617. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.d.ts +3 -5
  618. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.d.ts +7 -0
  619. package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.d.ts +1 -2
  620. package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.d.ts +33 -0
  621. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.d.ts +1 -1
  622. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +13 -3
  623. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.d.ts +24 -5
  624. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.d.ts +4 -11
  625. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +1 -3
  626. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +4 -12
  627. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.d.ts +13 -12
  628. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.d.ts +0 -2
  629. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.d.ts +5 -4
  630. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.d.ts +4 -14
  631. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +1 -3
  632. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -21
  633. package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityRecords.d.ts +0 -23
  634. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +1 -2
  635. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.d.ts +11 -19
  636. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -54
  637. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +7 -19
  638. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.d.ts +4 -3
  639. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.d.ts +8 -12
  640. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +7 -14
  641. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -22
  642. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +6 -2
  643. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +10 -6
  644. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +21 -26
  645. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +5 -3
  646. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.d.ts +4 -3
  647. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.d.ts +5 -5
  648. package/dist/types/wallet-server/src/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.d.ts +17 -6
  649. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -1
  650. package/dist/types/wallet-server/src/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.d.ts +0 -16
  651. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +29 -14
  652. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.d.ts +15 -12
  653. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.d.ts +71 -0
  654. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +34 -24
  655. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +44 -26
  656. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +13 -46
  657. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +8 -19
  658. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOps.d.ts +8 -34
  659. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleTenantRootLineage.d.ts +2 -1
  660. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -0
  661. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.d.ts +15 -2
  662. package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +2 -2
  663. package/dist/types/wallet-server/src/router/domains/ecdsa/routerAbEcdsaStrictRegistration.d.ts +9 -7
  664. package/dist/types/wallet-server/src/router/domains/ecdsa/thresholdEcdsaRequestValidation.d.ts +6 -18
  665. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.d.ts +46 -0
  666. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +5 -3
  667. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.d.ts +20 -79
  668. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -0
  669. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.d.ts +1 -1
  670. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.d.ts +4 -3
  671. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +62 -42
  672. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.d.ts +108 -32
  673. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryActivation.typecheck.d.ts +5 -0
  674. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.d.ts +36 -5
  675. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.d.ts +5 -4
  676. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.d.ts +41 -50
  677. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.d.ts +2 -2
  678. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.d.ts +3 -3
  679. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.d.ts +6 -5
  680. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.d.ts +14 -4
  681. package/dist/types/wallet-server/src/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.d.ts +12 -1
  682. package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/routerAbEd25519YaoWalletSession.d.ts +11 -52
  683. package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.d.ts +3 -4
  684. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpExportPolicy.d.ts +2 -27
  685. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRequestValidation.d.ts +1 -2
  686. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRouteHandlers.d.ts +2 -1
  687. package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpSessionRouteHelpers.d.ts +2 -102
  688. package/dist/types/wallet-server/src/router/domains/passkeyCustody/envelopeRevocationAdmission.d.ts +2 -1
  689. package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +3 -2
  690. package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.d.ts +1 -9
  691. package/dist/types/wallet-server/src/router/domains/passkeyCustody/registrationCustodyOutcome.d.ts +2 -1
  692. package/dist/types/wallet-server/src/router/domains/passkeyCustody/verifiedCustodyFactor.d.ts +2 -1
  693. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationAdmission.d.ts +2 -1
  694. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +2 -28
  695. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryFinalization.d.ts +43 -1
  696. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryKeyManifest.d.ts +7 -19
  697. package/dist/types/wallet-server/src/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.d.ts +0 -3
  698. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.d.ts +164 -0
  699. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.d.ts +110 -0
  700. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmission.d.ts +373 -0
  701. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.d.ts +11 -10
  702. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.typecheck.d.ts +2 -0
  703. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbOperationStepUp.d.ts +164 -0
  704. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +22 -717
  705. package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +5 -12
  706. package/dist/types/wallet-server/src/router/domains/syncAccount/syncAccountRequestValidation.d.ts +6 -10
  707. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootCustodyLineage.d.ts +6 -1
  708. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootIdentityResolution.d.ts +4 -7
  709. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +2 -1
  710. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +8 -8
  711. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +4 -4
  712. package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.d.ts +4 -4
  713. package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRouteHandlers.d.ts +4 -62
  714. package/dist/types/wallet-server/src/router/express-adaptor.d.ts +2 -2
  715. package/dist/types/wallet-server/src/router/framework/apiCredentialPorts.d.ts +3 -1
  716. package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +89 -65
  717. package/dist/types/wallet-server/src/router/framework/http.d.ts +1 -1
  718. package/dist/types/wallet-server/src/router/framework/ror/normalize.d.ts +1 -9
  719. package/dist/types/wallet-server/src/router/framework/routeMeteringPolicy.d.ts +3 -2
  720. package/dist/types/wallet-server/src/router/framework/routerApi.d.ts +1 -1
  721. package/dist/types/wallet-server/src/router/framework/routerApiRouteSurface.d.ts +3 -3
  722. package/dist/types/wallet-server/src/router/node/nodeHostedWalletGateway.d.ts +34 -0
  723. package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayCheck.d.ts +21 -0
  724. package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayMain.d.ts +2 -0
  725. package/dist/types/wallet-server/src/router/node/nodeHttp.d.ts +13 -0
  726. package/dist/types/wallet-server/src/router/node/nodeSqlite.d.ts +22 -0
  727. package/dist/types/wallet-server/src/router/node/signerSqlMigrations.d.ts +20 -0
  728. package/dist/types/wallet-server/src/router/transport/fetch/createFetchRouter.d.ts +1 -3
  729. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +5 -6
  730. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.d.ts +5 -8
  731. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceManagement.d.ts +14 -16
  732. package/dist/types/wallet-server/src/router/transport/fetch/routes/normalSigningRouterProxy.d.ts +0 -12
  733. package/dist/types/wallet-server/src/router/transport/fetch/routes/passkeyCustody.d.ts +1 -1
  734. package/dist/types/wallet-server/src/router/transport/fetch/routes/sessions.d.ts +2 -1
  735. package/dist/types/wallet-server/src/router/transport/fetch/routes/syncAccountBootstrap.d.ts +9 -17
  736. package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEcdsa.d.ts +3 -58
  737. package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEd25519.d.ts +0 -44
  738. package/dist/types/wallet-server/src/storage/d1Sql.d.ts +7 -0
  739. package/dist/types/wallet-server/src/storage/syncSqlite.d.ts +28 -0
  740. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.d.ts +0 -1
  741. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/idempotencyRecords.d.ts +5 -7
  742. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/signingSessionSeal.types.d.ts +6 -8
  743. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/transport/shared.d.ts +1 -0
  744. package/dist/types/wallet-server/src/threshold/statusCodes.d.ts +4 -4
  745. package/migrations/d1-signer/0036_r150_yao_lifecycle_decisions.sql +22 -0
  746. package/migrations/d1-signer/0037_r150_wallet_auth_method_revocation_replays.sql +26 -0
  747. package/migrations/d1-signer/0038_r150_registration_ceremony_cas_guard_seed.sql +8 -0
  748. package/migrations/d1-signer/0039_r150_revocation_replay_answer_kind.sql +9 -0
  749. package/package.json +1 -1
  750. package/dist/esm/core/ThresholdService/ecdsaClientRootProof.js +0 -27
  751. package/dist/esm/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.js +0 -115
  752. package/dist/esm/core/ThresholdService/secureRandomId.js +0 -9
  753. package/dist/esm/core/authService/record.js +0 -8
  754. package/dist/esm/core/authService/thresholdRuntimePolicy.js +0 -19
  755. package/dist/esm/core/authService/walletRegistrationPlanning.js +0 -49
  756. package/dist/esm/core/deviceLinking/index.js +0 -5
  757. package/dist/esm/core/errors.js +0 -54
  758. package/dist/esm/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.js +0 -39
  759. package/dist/esm/core/signingLanes/WalletKeyStore.js +0 -0
  760. package/dist/esm/core/signingLanes/index.js +0 -8
  761. package/dist/esm/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.js +0 -55
  762. package/dist/esm/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.js +0 -56
  763. package/dist/esm/shared-ts/src/signing-lanes/linkedEcdsaScope.js +0 -1
  764. package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker.js +0 -414
  765. package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm +0 -0
  766. package/dist/types/shared-ts/src/passkey-custody/credentialObservations.d.ts +0 -74
  767. package/dist/types/shared-ts/src/passkey-custody/kekContext.d.ts +0 -34
  768. package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.d.ts +0 -62
  769. package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.typecheck.d.ts +0 -2
  770. package/dist/types/shared-ts/src/signing-lanes/validation.d.ts +0 -11
  771. package/dist/types/shared-ts/src/utils/bigint.d.ts +0 -3
  772. package/dist/types/shared-ts/src/utils/paillier.d.ts +0 -37
  773. package/dist/types/shared-ts/src/utils/recoveryDomain.d.ts +0 -12
  774. package/dist/types/shared-ts/src/utils/signerDomain.typecheck.d.ts +0 -2
  775. package/dist/types/shared-ts/src/wallet-recovery/recoveryKekContext.d.ts +0 -37
  776. package/dist/types/wallet-server/src/core/ThresholdService/ecdsaClientRootProof.d.ts +0 -12
  777. package/dist/types/wallet-server/src/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.d.ts +0 -17
  778. package/dist/types/wallet-server/src/core/ThresholdService/secureRandomId.d.ts +0 -2
  779. package/dist/types/wallet-server/src/core/authService/record.d.ts +0 -2
  780. package/dist/types/wallet-server/src/core/authService/thresholdRuntimePolicy.d.ts +0 -4
  781. package/dist/types/wallet-server/src/core/authService/walletRegistrationPlanning.d.ts +0 -19
  782. package/dist/types/wallet-server/src/core/deviceLinking/index.d.ts +0 -5
  783. package/dist/types/wallet-server/src/core/errors.d.ts +0 -10
  784. package/dist/types/wallet-server/src/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.d.ts +0 -28
  785. package/dist/types/wallet-server/src/core/signingLanes/SigningLaneStore.d.ts +0 -15
  786. package/dist/types/wallet-server/src/core/signingLanes/WalletKeyStore.d.ts +0 -13
  787. package/dist/types/wallet-server/src/core/signingLanes/index.d.ts +0 -11
  788. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.d.ts +0 -35
  789. package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.d.ts +0 -35
  790. /package/dist/esm/{core/signingLanes/SigningLaneStore.js → authorization/ecdsaWalletSessionAdmission.js} +0 -0
@@ -1,2 +1,2 @@
1
- import{WorkerEntrypoint as he}from"cloudflare:workers";var N=globalThis.__worker_init_state={criticalError:!1,instanceId:0};import K from"./index_bg.wasm";var I=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,ue.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_containerstartupoptions_free(e,0)}get enableInternet(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_containerstartupoptions_enableInternet(this.__wbg_ptr),e===16777215?void 0:e!==0}get entrypoint(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;s(),e=i.__wbg_get_containerstartupoptions_entrypoint(this.__wbg_ptr);var t=de(e[0],e[1]).slice();return i.__wbindgen_free(e[0],e[1]*4,4),t}get env(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_containerstartupoptions_env(this.__wbg_ptr),e}set enableInternet(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_containerstartupoptions_enableInternet(this.__wbg_ptr,b(e)?16777215:e?1:0)}set entrypoint(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t=we(e,i.__wbindgen_malloc),n=l;s(),i.__wbg_set_containerstartupoptions_entrypoint(this.__wbg_ptr,t,n)}set env(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_containerstartupoptions_env(this.__wbg_ptr,e)}};Symbol.dispose&&(I.prototype[Symbol.dispose]=I.prototype.free);var j=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,ae.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_intounderlyingbytesource_free(e,0)}get autoAllocateChunkSize(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.intounderlyingbytesource_autoAllocateChunkSize(this.__wbg_ptr),e>>>0}cancel(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e=this.__destroy_into_raw();s(),i.intounderlyingbytesource_cancel(e)}pull(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=i.intounderlyingbytesource_pull(this.__wbg_ptr,e),t}start(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.intounderlyingbytesource_start(this.__wbg_ptr,e)}get type(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.intounderlyingbytesource_type(this.__wbg_ptr),oe[e]}};Symbol.dispose&&(j.prototype[Symbol.dispose]=j.prototype.free);var R=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,be.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_intounderlyingsink_free(e,0)}abort(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t=this.__destroy_into_raw(),n;return s(),n=i.intounderlyingsink_abort(t,e),n}close(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e=this.__destroy_into_raw(),t;return s(),t=i.intounderlyingsink_close(e),t}write(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=i.intounderlyingsink_write(this.__wbg_ptr,e),t}};Symbol.dispose&&(R.prototype[Symbol.dispose]=R.prototype.free);var F=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,fe.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_intounderlyingsource_free(e,0)}cancel(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e=this.__destroy_into_raw();s(),i.intounderlyingsource_cancel(e)}pull(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=i.intounderlyingsource_pull(this.__wbg_ptr,e),t}};Symbol.dispose&&(F.prototype[Symbol.dispose]=F.prototype.free);var x=class r{static __wrap(e){let t=Object.create(r.prototype);return t.__wbg_ptr=e,Object.defineProperty(t,"__wbg_inst",{value:o,writable:!0}),J.register(t,{ptr:e,instance:o},t),t}__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,J.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_minifyconfig_free(e,0)}get css(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_minifyconfig_css(this.__wbg_ptr),e!==0}get html(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_minifyconfig_html(this.__wbg_ptr),e!==0}get js(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_minifyconfig_js(this.__wbg_ptr),e!==0}set css(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_minifyconfig_css(this.__wbg_ptr,e)}set html(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_minifyconfig_html(this.__wbg_ptr,e)}set js(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_minifyconfig_js(this.__wbg_ptr,e)}};Symbol.dispose&&(x.prototype[Symbol.dispose]=x.prototype.free);var E=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,ge.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_r2range_free(e,0)}get length(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_r2range_length(this.__wbg_ptr),e[0]===0?void 0:e[1]}get offset(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_r2range_offset(this.__wbg_ptr),e[0]===0?void 0:e[1]}get suffix(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.__wbg_get_r2range_suffix(this.__wbg_ptr),e[0]===0?void 0:e[1]}set length(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_r2range_length(this.__wbg_ptr,!b(e),b(e)?0:e)}set offset(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_r2range_offset(this.__wbg_ptr,!b(e),b(e)?0:e)}set suffix(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),i.__wbg_set_r2range_suffix(this.__wbg_ptr,!b(e),b(e)?0:e)}};Symbol.dispose&&(E.prototype[Symbol.dispose]=E.prototype.free);var S=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,$.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_routerabsigningworkerpresignsessiondurableobject_free(e,0)}alarm(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=i.routerabsigningworkerpresignsessiondurableobject_alarm(this.__wbg_ptr),e}fetch(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=i.routerabsigningworkerpresignsessiondurableobject_fetch(this.__wbg_ptr,e),t}constructor(e,t){let n;return s(),n=i.routerabsigningworkerpresignsessiondurableobject_new(e,t),this.__wbg_ptr=n,Object.defineProperty(this,"__wbg_inst",{value:o,writable:!0}),$.register(this,{ptr:n,instance:o},this),this}};Symbol.dispose&&(S.prototype[Symbol.dispose]=S.prototype.free);var k=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,H.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),i.__wbg_routerabtenantrootcreationdurableobject_free(e,0)}fetch(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=i.routerabtenantrootcreationdurableobject_fetch(this.__wbg_ptr,e),t}constructor(e,t){let n;return s(),n=i.routerabtenantrootcreationdurableobject_new(e,t),this.__wbg_ptr=n,Object.defineProperty(this,"__wbg_inst",{value:o,writable:!0}),H.register(this,{ptr:n,instance:o},this),this}};Symbol.dispose&&(k.prototype[Symbol.dispose]=k.prototype.free);function q(){o++,v=null,A=null,typeof numBytesDecoded<"u"&&(numBytesDecoded=0),typeof l<"u"&&(l=0),ee=!1,V=new WebAssembly.Instance(K,Z()),i=V.exports,i.__wbindgen_start()}function Q(){let r;return s(),r=i.__worker_init_state(),r}function X(r,e,t){let n;return s(),n=i.fetch(r,e,t),n}function Y(){s(),i.init()}function Z(){return{__proto__:null,"./index_bg.js":{__proto__:null,__wbg_Error_9dc85fe1bc224456:function(e,t){return Error(d(e,t))},__wbg_Number_4779d427bae39753:function(e){return Number(e)},__wbg_String_8564e559799eccda:function(e,t){let n=String(t),_=m(n,i.__wbindgen_malloc,i.__wbindgen_realloc),u=l;f().setInt32(e+4,u,!0),f().setInt32(e+0,_,!0)},__wbg___wbindgen_bigint_get_as_i64_8ea6736501f396b6:function(e,t){let n=t,_=typeof n=="bigint"?n:void 0;f().setBigInt64(e+8,b(_)?BigInt(0):_,!0),f().setInt32(e+0,!b(_),!0)},__wbg___wbindgen_boolean_get_b131b2f36d6b2f55:function(e){let t=e,n=typeof t=="boolean"?t:void 0;return b(n)?16777215:n?1:0},__wbg___wbindgen_debug_string_56c147eb1a51f0c4:function(e,t){let n=C(t),_=m(n,i.__wbindgen_malloc,i.__wbindgen_realloc),u=l;f().setInt32(e+4,u,!0),f().setInt32(e+0,_,!0)},__wbg___wbindgen_in_ce8569b2fc6f5088:function(e,t){return e in t},__wbg___wbindgen_is_bigint_df272c65456269c2:function(e){return typeof e=="bigint"},__wbg___wbindgen_is_function_147961669f068cd4:function(e){return typeof e=="function"},__wbg___wbindgen_is_null_or_undefined_b02321d39cf26d8d:function(e){return e==null},__wbg___wbindgen_is_object_3a2c414391dbf751:function(e){let t=e;return typeof t=="object"&&t!==null},__wbg___wbindgen_is_string_6541b0f6ecd4e8e5:function(e){return typeof e=="string"},__wbg___wbindgen_is_undefined_4410e3c20a99fa97:function(e){return e===void 0},__wbg___wbindgen_jsval_eq_174c93ec61bab0c5:function(e,t){return e===t},__wbg___wbindgen_jsval_loose_eq_e07e3b1f5db6da6c:function(e,t){return e==t},__wbg___wbindgen_number_get_588ed6b97f0d7e14:function(e,t){let n=t,_=typeof n=="number"?n:void 0;f().setFloat64(e+8,b(_)?0:_,!0),f().setInt32(e+0,!b(_),!0)},__wbg___wbindgen_string_get_fa2687d531ed17a5:function(e,t){let n=t,_=typeof n=="string"?n:void 0;var u=b(_)?0:m(_,i.__wbindgen_malloc,i.__wbindgen_realloc),a=l;f().setInt32(e+4,a,!0),f().setInt32(e+0,u,!0)},__wbg___wbindgen_throw_bbadd78c1bac3a77:function(e,t){throw new Error(d(e,t))},__wbg__wbg_cb_unref_c2301a3c9b78104b:function(e){e._wbg_cb_unref()},__wbg_body_442a47f02322d7b0:function(e){let t=e.body;return b(t)?0:w(t)},__wbg_body_b06d3a9c5933702e:function(e){let t=e.body;return b(t)?0:w(t)},__wbg_buffer_8524b3453cde4918:function(e){return e.buffer},__wbg_byobRequest_cc72d210de793e64:function(e){let t=e.byobRequest;return b(t)?0:w(t)},__wbg_byteLength_96807b1d9ab24a4c:function(e){return e.byteLength},__wbg_byteOffset_a9c7002428843c41:function(e){return e.byteOffset},__wbg_call_91f00ddc43e01490:function(){return c(function(e,t){return e.call(t)},arguments)},__wbg_call_ec09a4cf93377d3a:function(){return c(function(e,t,n){return e.call(t,n)},arguments)},__wbg_cancel_f3a197b26dc88b39:function(e){return e.cancel()},__wbg_catch_66060324c27be6f7:function(e,t){return e.catch(t)},__wbg_cause_5f2ec35e043cc9cf:function(e){return e.cause},__wbg_cf_22a1527cd02b5acd:function(){return c(function(e){let t=e.cf;return b(t)?0:w(t)},arguments)},__wbg_cf_ee73de251a6dda8a:function(){return c(function(e){let t=e.cf;return b(t)?0:w(t)},arguments)},__wbg_close_388d99468213b286:function(){return c(function(e){e.close()},arguments)},__wbg_close_4857e22d08b71356:function(){return c(function(e){e.close()},arguments)},__wbg_constructor_04971ae0b51c1fc5:function(e){return e.constructor},__wbg_crypto_38df2bab126b63dc:function(e){return e.crypto},__wbg_delete_3854c950a92fa1b3:function(){return c(function(e,t,n){return e.delete(d(t,n))},arguments)},__wbg_delete_e21a892409559f6e:function(){return c(function(e,t,n){return e.delete(d(t,n))},arguments)},__wbg_done_6a8439e544ec6206:function(e){return e.done},__wbg_enqueue_bbeb09ba0b140f76:function(){return c(function(e,t){e.enqueue(t)},arguments)},__wbg_entries_5a6a7e7e0df09fe5:function(e){return Object.entries(e)},__wbg_error_6651fee1c71e5da9:function(e){console.error(e)},__wbg_error_9a99766f65a03031:function(e,t){console.error(e,t)},__wbg_fetch_b447ca2a0c0e6583:function(){return c(function(e,t){return e.fetch(t)},arguments)},__wbg_getByName_5f8a4ae327c50115:function(){return c(function(e,t,n){return e.getByName(d(t,n))},arguments)},__wbg_getRandomValues_c44a50d8cfdaebeb:function(){return c(function(e,t){e.getRandomValues(t)},arguments)},__wbg_getReader_bb0230851fbf986b:function(){return c(function(e){return e.getReader()},arguments)},__wbg_getTime_ef2e115ede346a26:function(e){return e.getTime()},__wbg_get_44e98e27bda25b5b:function(){return c(function(e,t){return Reflect.get(e,t)},arguments)},__wbg_get_4b90d6d8c5deb5d5:function(e,t){return e[t>>>0]},__wbg_get_52a8a619f7b88df6:function(){return c(function(e,t){return Reflect.get(e,t)},arguments)},__wbg_get_6e0eec3a0a32f612:function(){return c(function(e,t,n){return e.get(d(t,n))},arguments)},__wbg_get_a82defe8d6b5b2e5:function(){return c(function(e,t,n,_){let u=t.get(d(n,_));var a=b(u)?0:m(u,i.__wbindgen_malloc,i.__wbindgen_realloc),g=l;f().setInt32(e+4,g,!0),f().setInt32(e+0,a,!0)},arguments)},__wbg_get_a87a6c1024dddd3b:function(){return c(function(e,t,n){return e.get(d(t,n))},arguments)},__wbg_get_c538c7fb0359c222:function(){return c(function(e,t){let n=Reflect.get(e,t);return b(n)?0:w(n)},arguments)},__wbg_get_done_c21b9933fc9a9e9c:function(e){let t=e.done;return b(t)?16777215:t?1:0},__wbg_get_unchecked_46e778e3cec74b5e:function(e,t){return e[t>>>0]},__wbg_get_value_ad568c7d3db9073f:function(e){return e.value},__wbg_get_with_ref_key_6412cf3094599694:function(e,t){return e[t]},__wbg_headers_5b19cf40627ae54d:function(e){return e.headers},__wbg_headers_e1e94862a6a36f9e:function(e){return e.headers},__wbg_idFromName_32b0b5012b5f6535:function(){return c(function(e,t,n){return e.idFromName(d(t,n))},arguments)},__wbg_id_0c05f441a81ef0fc:function(){return c(function(e){return e.id},arguments)},__wbg_instanceId_3970204fcbf0c41d:function(e){return e.instanceId},__wbg_instanceof_ArrayBuffer_a581da923203f29f:function(e){let t;try{t=e instanceof ArrayBuffer}catch{t=!1}return t},__wbg_instanceof_Error_cb5ebd65d798655e:function(e){let t;try{t=e instanceof Error}catch{t=!1}return t},__wbg_instanceof_Map_7f94c740225003e2:function(e){let t;try{t=e instanceof Map}catch{t=!1}return t},__wbg_instanceof_ReadableStream_b1eab376911b1b77:function(e){let t;try{t=e instanceof ReadableStream}catch{t=!1}return t},__wbg_instanceof_Response_36a65a969abaa7c6:function(e){let t;try{t=e instanceof Response}catch{t=!1}return t},__wbg_instanceof_Uint8Array_b6fe1ac89eba107e:function(e){let t;try{t=e instanceof Uint8Array}catch{t=!1}return t},__wbg_isArray_139f48e3c057ede8:function(e){return Array.isArray(e)},__wbg_isSafeInteger_c22ccb4af2201fe9:function(e){return Number.isSafeInteger(e)},__wbg_iterator_9b36cebf3be7b7cd:function(){return Symbol.iterator},__wbg_json_d44033e4c5c27d14:function(){return c(function(e){return e.json()},arguments)},__wbg_keys_6fe253f5073ff078:function(e){return e.keys()},__wbg_length_68a9d5278d084f4f:function(e){return e.length},__wbg_length_fb04d16d7bdf6d4c:function(e){return e.length},__wbg_message_5c6ab4dd6c4b34e8:function(e){return e.message},__wbg_method_f687b49ca8e2b38d:function(e,t){let n=t.method,_=m(n,i.__wbindgen_malloc,i.__wbindgen_realloc),u=l;f().setInt32(e+4,u,!0),f().setInt32(e+0,_,!0)},__wbg_minifyconfig_new:function(e){return x.__wrap(e)},__wbg_msCrypto_bd5a034af96bcba6:function(e){return e.msCrypto},__wbg_name_72adaf2fce06bbe8:function(e){return e.name},__wbg_name_f60e249a46c5285a:function(e){return e.name},__wbg_new_0_878c6ec3a1c600f3:function(){return new Date},__wbg_new_0b303268aa395a38:function(){return new Array},__wbg_new_189262ff31890c23:function(){return c(function(){return new Headers},arguments)},__wbg_new_20b778a4c5c691c3:function(){return new Object},__wbg_new_5fae30e6b23db8df:function(e,t){return new Error(d(e,t))},__wbg_new_883c0db065f06efd:function(){return new Map},__wbg_new_a21cf41c5c809e4c:function(e){return new Date(e)},__wbg_new_b06772b280cc6e52:function(e){return new Uint8Array(e)},__wbg_new_typed_90c3f6c29ba36d19:function(e,t){try{var n={a:e,b:t},_=(a,g)=>{let p=n.a;n.a=0;try{return ie(p,n.b,a,g)}finally{n.a=p}};return new Promise(_)}finally{n.a=0}},__wbg_new_with_byte_offset_and_length_9e1e664fe1a5d385:function(e,t,n){return new Uint8Array(e,t>>>0,n>>>0)},__wbg_new_with_length_4b57a7a5dc67221c:function(e){return new Uint8Array(e>>>0)},__wbg_new_with_opt_buffer_source_and_init_f51f4fbe98d29f2e:function(){return c(function(e,t){return new Response(e,t)},arguments)},__wbg_new_with_opt_readable_stream_and_init_def67835ea705e4d:function(){return c(function(e,t){return new Response(e,t)},arguments)},__wbg_new_with_opt_str_and_init_11bb6f5faad68c85:function(){return c(function(e,t,n){return new Response(e===0?void 0:d(e,t),n)},arguments)},__wbg_new_with_str_and_init_df876572184fe639:function(){return c(function(e,t,n){return new Request(d(e,t),n)},arguments)},__wbg_next_8cb028b6ba50743f:function(){return c(function(e){return e.next()},arguments)},__wbg_next_cfd0b146c9538df8:function(e){return e.next},__wbg_node_84ea875411254db1:function(e){return e.node},__wbg_now_bce4dc999095ea77:function(){return Date.now()},__wbg_process_44c7a14e11e9f69e:function(e){return e.process},__wbg_prototypesetcall_956c7493c68e29b4:function(e,t,n){Uint8Array.prototype.set.call(D(e,t),n)},__wbg_put_27edc2ab773a21be:function(){return c(function(e,t,n,_){return e.put(d(t,n),_)},arguments)},__wbg_put_642b68b9295b5238:function(){return c(function(e,t,n,_){return e.put(d(t,n),_)},arguments)},__wbg_queueMicrotask_4698f900840e3286:function(e){queueMicrotask(e)},__wbg_queueMicrotask_477a5533c7100338:function(e){return e.queueMicrotask},__wbg_randomFillSync_6c25eac9869eb53c:function(){return c(function(e,t){e.randomFillSync(t)},arguments)},__wbg_read_8426c146431f2905:function(e){return e.read()},__wbg_releaseLock_188846ef719acb10:function(e){e.releaseLock()},__wbg_require_b4edbdcf3e2a1ef0:function(){return c(function(){return module.require},arguments)},__wbg_resolve_0183de2e8c6b1d54:function(e){return Promise.resolve(e)},__wbg_respond_3cdb4cf32683fd79:function(){return c(function(e,t){e.respond(t>>>0)},arguments)},__wbg_setAlarm_c9229fb49928e287:function(){return c(function(e,t,n){return e.setAlarm(t,n)},arguments)},__wbg_set_3ab3dfede3bae139:function(){return c(function(e,t,n,_,u){e.set(d(t,n),d(_,u))},arguments)},__wbg_set_5f806304fb633ab3:function(e,t,n){return e.set(t,n)},__wbg_set_6be42768c690e380:function(e,t,n){e[t]=n},__wbg_set_86698c227e5b9dad:function(e,t,n){e.set(D(t,n))},__wbg_set_a6ba3ac0e634b822:function(){return c(function(e,t,n){return Reflect.set(e,t,n)},arguments)},__wbg_set_body_d1153b16a2b95ca1:function(e,t){e.body=t},__wbg_set_cache_5a01a8b5e6ca6cf2:function(e,t){e.cache=se[t]},__wbg_set_criticalError_3b493d341796397b:function(e,t){e.criticalError=t!==0},__wbg_set_da33c120a6584674:function(e,t,n){e[t>>>0]=n},__wbg_set_headers_178db2684a27c112:function(e,t){e.headers=t},__wbg_set_headers_877ed41890d28af2:function(e,t){e.headers=t},__wbg_set_instanceId_2e5d2db011e9f6af:function(e,t){e.instanceId=t>>>0},__wbg_set_method_b4ede299b2064f37:function(e,t,n){e.method=d(t,n)},__wbg_set_redirect_97b881e7430f3438:function(e,t){e.redirect=ce[t]},__wbg_set_status_56097e6101a48227:function(e,t){e.status=t},__wbg_static_accessor_GLOBAL_60a4124bab7dcc9a:function(){let e=typeof global>"u"?null:global;return b(e)?0:w(e)},__wbg_static_accessor_GLOBAL_THIS_95ca6460658b5d13:function(){let e=typeof globalThis>"u"?null:globalThis;return b(e)?0:w(e)},__wbg_static_accessor_INIT_STATE_2271957acdc7fe6e:function(){return N},__wbg_static_accessor_SELF_4c95f759a91e9aae:function(){let e=typeof self>"u"?null:self;return b(e)?0:w(e)},__wbg_static_accessor_WINDOW_44b435597f9e9ee7:function(){let e=typeof window>"u"?null:window;return b(e)?0:w(e)},__wbg_status_9e6505cfa3e73a7c:function(e){return e.status},__wbg_storage_e350ca27f103b85e:function(){return c(function(e){return e.storage},arguments)},__wbg_subarray_42216645a367cd7a:function(e,t,n){return e.subarray(t>>>0,n>>>0)},__wbg_then_254bab9b266a77a5:function(e,t,n){return e.then(t,n)},__wbg_then_3ea18602c6a5123b:function(e,t){return e.then(t)},__wbg_toISOString_1c29c14154d57c76:function(e){return e.toISOString()},__wbg_toString_c3e29dc77827b5c7:function(){return c(function(e,t){let n=t.toString(),_=m(n,i.__wbindgen_malloc,i.__wbindgen_realloc),u=l;f().setInt32(e+4,u,!0),f().setInt32(e+0,_,!0)},arguments)},__wbg_transaction_afcd84163102ab81:function(){return c(function(e,t){return e.transaction(t)},arguments)},__wbg_url_74200ddca55ab638:function(e,t){let n=t.url,_=m(n,i.__wbindgen_malloc,i.__wbindgen_realloc),u=l;f().setInt32(e+4,u,!0),f().setInt32(e+0,_,!0)},__wbg_value_3d3defe09fb1ffca:function(e){return e.value},__wbg_versions_276b2795b1c6a219:function(e){return e.versions},__wbg_view_15fa5865c6b336e3:function(e){let t=e.view;return b(t)?0:w(t)},__wbg_webSocket_651aa54cd4107a97:function(){return c(function(e){let t=e.webSocket;return b(t)?0:w(t)},arguments)},__wbindgen_cast_0000000000000001:function(e,t){return M(e,t,re)},__wbindgen_cast_0000000000000002:function(e,t){return M(e,t,ne)},__wbindgen_cast_0000000000000003:function(e,t){return M(e,t,_e)},__wbindgen_cast_0000000000000004:function(e){return e},__wbindgen_cast_0000000000000005:function(e){return e},__wbindgen_cast_0000000000000006:function(e,t){return D(e,t)},__wbindgen_cast_0000000000000007:function(e,t){return d(e,t)},__wbindgen_cast_0000000000000008:function(e){return BigInt.asUintN(64,e)},__wbindgen_init_externref_table:function(){let e=i.__wbindgen_externrefs,t=e.grow(4);e.set(0,void 0),e.set(t+0,void 0),e.set(t+1,null),e.set(t+2,!0),e.set(t+3,!1)}}}}function s(){if(ee){q();return}}function ne(r,e,t){s(),i.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___wasm_bindgen_68f389e705008bcb___JsValue______true_(r,e,t)}function re(r,e,t){let n;return s(),n=i.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___worker_sys_a30a61bc3d743209___types__durable_object__transaction__DurableObjectTransaction__js_sys_95ed116970c1190___Promise__true_(r,e,t),n}function _e(r,e,t){let n;if(s(),n=i.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___wasm_bindgen_68f389e705008bcb___JsValue__core_ed718c3d60ebd546___result__Result_____wasm_bindgen_68f389e705008bcb___JsError___true_(r,e,t),n[1])throw le(n[0])}function ie(r,e,t,n){s(),i.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___js_sys_95ed116970c1190___Function_fn_wasm_bindgen_68f389e705008bcb___JsValue_____wasm_bindgen_68f389e705008bcb___sys__Undefined___js_sys_95ed116970c1190___Function_fn_wasm_bindgen_68f389e705008bcb___JsValue_____wasm_bindgen_68f389e705008bcb___sys__Undefined_______true_(r,e,t,n)}var oe=["bytes"],se=["default","no-store","reload","no-cache","force-cache","only-if-cached"],ce=["follow","error","manual"],o=0,ue=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_containerstartupoptions_free(r,1)}),ae=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_intounderlyingbytesource_free(r,1)}),be=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_intounderlyingsink_free(r,1)}),fe=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_intounderlyingsource_free(r,1)}),J=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_minifyconfig_free(r,1)}),ge=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_r2range_free(r,1)}),$=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_routerabsigningworkerpresignsessiondurableobject_free(r,1)}),H=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&i.__wbg_routerabtenantrootcreationdurableobject_free(r,1)});function w(r){let e=i.__externref_table_alloc();return i.__wbindgen_externrefs.set(e,r),e}var G=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(r=>{r.instance===o&&i.__wbindgen_destroy_closure(r.a,r.b)});function C(r){let e=typeof r;if(e=="number"||e=="boolean"||r==null)return`${r}`;if(e=="string")return`"${r}"`;if(e=="symbol"){let _=r.description;return _==null?"Symbol":`Symbol(${_})`}if(e=="function"){let _=r.name;return typeof _=="string"&&_.length>0?`Function(${_})`:"Function"}if(Array.isArray(r)){let _=r.length,u="[";_>0&&(u+=C(r[0]));for(let a=1;a<_;a++)u+=", "+C(r[a]);return u+="]",u}let t=/\[object ([^\]]+)\]/.exec(toString.call(r)),n;if(t&&t.length>1)n=t[1];else return toString.call(r);if(n=="Object")try{return"Object("+JSON.stringify(r)+")"}catch{return"Object"}return r instanceof Error?`${r.name}: ${r.message}
2
- ${r.stack}`:n}function de(r,e){r=r>>>0;let t=f(),n=[];for(let _=r;_<r+4*e;_+=4)n.push(i.__wbindgen_externrefs.get(t.getUint32(_,!0)));return i.__externref_drop_slice(r,e),n}function D(r,e){return r=r>>>0,O().subarray(r/1,r/1+e)}var v=null;function f(){return(v===null||v.buffer.detached===!0||v.buffer.detached===void 0&&v.buffer!==i.memory.buffer)&&(v=new DataView(i.memory.buffer)),v}function d(r,e){return pe(r>>>0,e)}var A=null;function O(){return(A===null||A.byteLength===0)&&(A=new Uint8Array(i.memory.buffer)),A}function c(r,e){try{return r.apply(this,e)}catch(t){let n=w(t);i.__wbindgen_exn_store(n)}}function b(r){return r==null}function M(r,e,t){let n={a:r,b:e,cnt:1,instance:o},_=(...u)=>{if(n.instance!==o)throw new Error("Cannot invoke closure from previous WASM instance");n.cnt++;let a=n.a;n.a=0;try{return t(a,n.b,...u)}finally{n.a=a,_._wbg_cb_unref()}};return _._wbg_cb_unref=()=>{--n.cnt===0&&(i.__wbindgen_destroy_closure(n.a,n.b),n.a=0,G.unregister(n))},G.register(_,n,n),_}function we(r,e){let t=e(r.length*4,4)>>>0;for(let n=0;n<r.length;n++){let _=w(r[n]);f().setUint32(t+4*n,_,!0)}return l=r.length,t}function m(r,e,t){if(t===void 0){let g=P.encode(r),p=e(g.length,1)>>>0;return O().subarray(p,p+g.length).set(g),l=g.length,p}let n=r.length,_=e(n,1)>>>0,u=O(),a=0;for(;a<n;a++){let g=r.charCodeAt(a);if(g>127)break;u[_+a]=g}if(a!==n){a!==0&&(r=r.slice(a)),_=t(_,n,n=a+r.length*3,1)>>>0;let g=O().subarray(_+a,_+n),p=P.encodeInto(r,g);a+=p.written,_=t(_,n,a,1)>>>0}return l=a,_}var ee=!1;function le(r){let e=i.__wbindgen_externrefs.get(r);return i.__externref_table_dealloc(r),e}var te=new TextDecoder("utf-8",{ignoreBOM:!0,fatal:!0});te.decode();function pe(r,e){return te.decode(O().subarray(r,r+e))}var P=new TextEncoder;"encodeInto"in P||(P.encodeInto=function(r,e){let t=P.encode(r);return e.set(t),{read:r.length,written:t.length}});var l=0,V=new WebAssembly.Instance(K,Z()),i=V.exports;i.__wbindgen_start();Error.stackTraceLimit=100;var h=Q();function L(){h.criticalError&&(console.log("Reinitializing Wasm application"),q(),h.criticalError=!1,h.instanceId++)}addEventListener("error",r=>{B(r.error)});function B(r){r instanceof WebAssembly.RuntimeError&&(console.error("Critical",r),h.criticalError=!0)}var z=class extends he{};z.prototype.fetch=function(e){return X.call(this,e,this.env,this.ctx)};z.prototype.init=Y;var me={set:(r,e,t,n)=>Reflect.set(r.instance,e,t,n),has:(r,e)=>Reflect.has(r.instance,e),deleteProperty:(r,e)=>Reflect.deleteProperty(r.instance,e),apply:(r,e,t)=>Reflect.apply(r.instance,e,t),construct:(r,e,t)=>Reflect.construct(r.instance,e,t),getPrototypeOf:r=>Reflect.getPrototypeOf(r.instance),setPrototypeOf:(r,e)=>Reflect.setPrototypeOf(r.instance,e),isExtensible:r=>Reflect.isExtensible(r.instance),preventExtensions:r=>Reflect.preventExtensions(r.instance),getOwnPropertyDescriptor:(r,e)=>Reflect.getOwnPropertyDescriptor(r.instance,e),defineProperty:(r,e,t)=>Reflect.defineProperty(r.instance,e,t),ownKeys:r=>Reflect.ownKeys(r.instance)},y={construct(r,e,t){try{L();let n={instance:Reflect.construct(r,e,t),instanceId:h.instanceId,ctor:r,args:e,newTarget:t};return new Proxy(n,{...me,get(_,u,a){_.instanceId!==h.instanceId&&(_.instance=Reflect.construct(_.ctor,_.args,_.newTarget),_.instanceId=h.instanceId);let g=Reflect.get(_.instance,u,a);return typeof g!="function"?g:g.constructor===Function?new Proxy(g,{apply(p,T,U){L();try{return p.apply(T,U)}catch(W){throw B(W),W}}}):new Proxy(g,{async apply(p,T,U){L();try{return await p.apply(T,U)}catch(W){throw B(W),W}}})}})}catch(n){throw h.criticalError=!0,n}}},Re=new Proxy(z,y),Fe=new Proxy(I,y),Ee=new Proxy(j,y),Se=new Proxy(R,y),ke=new Proxy(F,y),We=new Proxy(x,y),Ae=new Proxy(E,y),Oe=new Proxy(S,y),Pe=new Proxy(k,y);export{Fe as ContainerStartupOptions,Ee as IntoUnderlyingByteSource,Se as IntoUnderlyingSink,ke as IntoUnderlyingSource,We as MinifyConfig,Ae as R2Range,Oe as RouterAbSigningWorkerPresignSessionDurableObject,Pe as RouterAbTenantRootCreationDurableObject,Re as default};
1
+ import{WorkerEntrypoint as ve}from"cloudflare:workers";var J=globalThis.__worker_init_state={criticalError:!1,instanceId:0};import X from"./index_bg.wasm";var x=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,be.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_containerstartupoptions_free(e,0)}get enableInternet(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_containerstartupoptions_enableInternet(this.__wbg_ptr),e===16777215?void 0:e!==0}get entrypoint(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;s(),e=_.__wbg_get_containerstartupoptions_entrypoint(this.__wbg_ptr);var t=le(e[0],e[1]).slice();return _.__wbindgen_free(e[0],e[1]*4,4),t}get env(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_containerstartupoptions_env(this.__wbg_ptr),e}set enableInternet(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_containerstartupoptions_enableInternet(this.__wbg_ptr,b(e)?16777215:e?1:0)}set entrypoint(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t=pe(e,_.__wbindgen_malloc),n=l;s(),_.__wbg_set_containerstartupoptions_entrypoint(this.__wbg_ptr,t,n)}set env(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_containerstartupoptions_env(this.__wbg_ptr,e)}};Symbol.dispose&&(x.prototype[Symbol.dispose]=x.prototype.free);var I=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,fe.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_intounderlyingbytesource_free(e,0)}get autoAllocateChunkSize(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.intounderlyingbytesource_autoAllocateChunkSize(this.__wbg_ptr),e>>>0}cancel(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e=this.__destroy_into_raw();s(),_.intounderlyingbytesource_cancel(e)}pull(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=_.intounderlyingbytesource_pull(this.__wbg_ptr,e),t}start(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.intounderlyingbytesource_start(this.__wbg_ptr,e)}get type(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.intounderlyingbytesource_type(this.__wbg_ptr),ce[e]}};Symbol.dispose&&(I.prototype[Symbol.dispose]=I.prototype.free);var R=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,ge.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_intounderlyingsink_free(e,0)}abort(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t=this.__destroy_into_raw(),n;return s(),n=_.intounderlyingsink_abort(t,e),n}close(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e=this.__destroy_into_raw(),t;return s(),t=_.intounderlyingsink_close(e),t}write(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=_.intounderlyingsink_write(this.__wbg_ptr,e),t}};Symbol.dispose&&(R.prototype[Symbol.dispose]=R.prototype.free);var E=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,we.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_intounderlyingsource_free(e,0)}cancel(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e=this.__destroy_into_raw();s(),_.intounderlyingsource_cancel(e)}pull(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=_.intounderlyingsource_pull(this.__wbg_ptr,e),t}};Symbol.dispose&&(E.prototype[Symbol.dispose]=E.prototype.free);var j=class r{static __wrap(e){let t=Object.create(r.prototype);return t.__wbg_ptr=e,Object.defineProperty(t,"__wbg_inst",{value:o,writable:!0}),$.register(t,{ptr:e,instance:o},t),t}__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,$.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_minifyconfig_free(e,0)}get css(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_minifyconfig_css(this.__wbg_ptr),e!==0}get html(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_minifyconfig_html(this.__wbg_ptr),e!==0}get js(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_minifyconfig_js(this.__wbg_ptr),e!==0}set css(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_minifyconfig_css(this.__wbg_ptr,e)}set html(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_minifyconfig_html(this.__wbg_ptr,e)}set js(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_minifyconfig_js(this.__wbg_ptr,e)}};Symbol.dispose&&(j.prototype[Symbol.dispose]=j.prototype.free);var F=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,de.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_r2range_free(e,0)}get length(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_r2range_length(this.__wbg_ptr),e[0]===0?void 0:e[1]}get offset(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_r2range_offset(this.__wbg_ptr),e[0]===0?void 0:e[1]}get suffix(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.__wbg_get_r2range_suffix(this.__wbg_ptr),e[0]===0?void 0:e[1]}set length(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_r2range_length(this.__wbg_ptr,!b(e),b(e)?0:e)}set offset(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_r2range_offset(this.__wbg_ptr,!b(e),b(e)?0:e)}set suffix(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");s(),_.__wbg_set_r2range_suffix(this.__wbg_ptr,!b(e),b(e)?0:e)}};Symbol.dispose&&(F.prototype[Symbol.dispose]=F.prototype.free);var S=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,H.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_routerabrouterwalletdurableobject_free(e,0)}alarm(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.routerabrouterwalletdurableobject_alarm(this.__wbg_ptr),e}fetch(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=_.routerabrouterwalletdurableobject_fetch(this.__wbg_ptr,e),t}constructor(e,t){let n;return s(),n=_.routerabrouterwalletdurableobject_new(e,t),this.__wbg_ptr=n,Object.defineProperty(this,"__wbg_inst",{value:o,writable:!0}),H.register(this,{ptr:n,instance:o},this),this}webSocketClose(e,t,n,i){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let u=y(n,_.__wbindgen_malloc,_.__wbindgen_realloc),a=l,f;return s(),f=_.routerabrouterwalletdurableobject_webSocketClose(this.__wbg_ptr,e,t,u,a,i),f}webSocketError(e,t){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let n;return s(),n=_.routerabrouterwalletdurableobject_webSocketError(this.__wbg_ptr,e,t),n}webSocketMessage(e,t){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let n;return s(),n=_.routerabrouterwalletdurableobject_webSocketMessage(this.__wbg_ptr,e,t),n}};Symbol.dispose&&(S.prototype[Symbol.dispose]=S.prototype.free);var k=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,G.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_routerabsigningworkerpresignsessiondurableobject_free(e,0)}alarm(){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let e;return s(),e=_.routerabsigningworkerpresignsessiondurableobject_alarm(this.__wbg_ptr),e}fetch(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=_.routerabsigningworkerpresignsessiondurableobject_fetch(this.__wbg_ptr,e),t}constructor(e,t){let n;return s(),n=_.routerabsigningworkerpresignsessiondurableobject_new(e,t),this.__wbg_ptr=n,Object.defineProperty(this,"__wbg_inst",{value:o,writable:!0}),G.register(this,{ptr:n,instance:o},this),this}};Symbol.dispose&&(k.prototype[Symbol.dispose]=k.prototype.free);var W=class{__destroy_into_raw(){let e=this.__wbg_ptr;return this.__wbg_ptr=0,K.unregister(this),e}free(){let e=this.__destroy_into_raw();s(),_.__wbg_routerabtenantrootcreationdurableobject_free(e,0)}fetch(e){if(this.__wbg_inst!==void 0&&this.__wbg_inst!==o)throw new Error("Invalid stale object from previous Wasm instance");let t;return s(),t=_.routerabtenantrootcreationdurableobject_fetch(this.__wbg_ptr,e),t}constructor(e,t){let n;return s(),n=_.routerabtenantrootcreationdurableobject_new(e,t),this.__wbg_ptr=n,Object.defineProperty(this,"__wbg_inst",{value:o,writable:!0}),K.register(this,{ptr:n,instance:o},this),this}};Symbol.dispose&&(W.prototype[Symbol.dispose]=W.prototype.free);function L(){o++,v=null,O=null,typeof numBytesDecoded<"u"&&(numBytesDecoded=0),typeof l<"u"&&(l=0),ne=!1,q=new WebAssembly.Instance(X,te()),_=q.exports,_.__wbindgen_start()}function Y(){let r;return s(),r=_.__worker_init_state(),r}function Z(r,e,t){let n;return s(),n=_.fetch(r,e,t),n}function ee(){s(),_.init()}function te(){return{__proto__:null,"./index_bg.js":{__proto__:null,__wbg_Error_9dc85fe1bc224456:function(e,t){return Error(w(e,t))},__wbg_Number_4779d427bae39753:function(e){return Number(e)},__wbg_String_8564e559799eccda:function(e,t){let n=String(t),i=y(n,_.__wbindgen_malloc,_.__wbindgen_realloc),u=l;g().setInt32(e+4,u,!0),g().setInt32(e+0,i,!0)},__wbg___wbindgen_bigint_get_as_i64_8ea6736501f396b6:function(e,t){let n=t,i=typeof n=="bigint"?n:void 0;g().setBigInt64(e+8,b(i)?BigInt(0):i,!0),g().setInt32(e+0,!b(i),!0)},__wbg___wbindgen_boolean_get_b131b2f36d6b2f55:function(e){let t=e,n=typeof t=="boolean"?t:void 0;return b(n)?16777215:n?1:0},__wbg___wbindgen_debug_string_56c147eb1a51f0c4:function(e,t){let n=V(t),i=y(n,_.__wbindgen_malloc,_.__wbindgen_realloc),u=l;g().setInt32(e+4,u,!0),g().setInt32(e+0,i,!0)},__wbg___wbindgen_in_ce8569b2fc6f5088:function(e,t){return e in t},__wbg___wbindgen_is_bigint_df272c65456269c2:function(e){return typeof e=="bigint"},__wbg___wbindgen_is_function_147961669f068cd4:function(e){return typeof e=="function"},__wbg___wbindgen_is_null_or_undefined_b02321d39cf26d8d:function(e){return e==null},__wbg___wbindgen_is_object_3a2c414391dbf751:function(e){let t=e;return typeof t=="object"&&t!==null},__wbg___wbindgen_is_string_6541b0f6ecd4e8e5:function(e){return typeof e=="string"},__wbg___wbindgen_is_undefined_4410e3c20a99fa97:function(e){return e===void 0},__wbg___wbindgen_jsval_eq_174c93ec61bab0c5:function(e,t){return e===t},__wbg___wbindgen_jsval_loose_eq_e07e3b1f5db6da6c:function(e,t){return e==t},__wbg___wbindgen_number_get_588ed6b97f0d7e14:function(e,t){let n=t,i=typeof n=="number"?n:void 0;g().setFloat64(e+8,b(i)?0:i,!0),g().setInt32(e+0,!b(i),!0)},__wbg___wbindgen_string_get_fa2687d531ed17a5:function(e,t){let n=t,i=typeof n=="string"?n:void 0;var u=b(i)?0:y(i,_.__wbindgen_malloc,_.__wbindgen_realloc),a=l;g().setInt32(e+4,a,!0),g().setInt32(e+0,u,!0)},__wbg___wbindgen_throw_bbadd78c1bac3a77:function(e,t){throw new Error(w(e,t))},__wbg__wbg_cb_unref_c2301a3c9b78104b:function(e){e._wbg_cb_unref()},__wbg_body_442a47f02322d7b0:function(e){let t=e.body;return b(t)?0:d(t)},__wbg_body_b06d3a9c5933702e:function(e){let t=e.body;return b(t)?0:d(t)},__wbg_buffer_8524b3453cde4918:function(e){return e.buffer},__wbg_byobRequest_cc72d210de793e64:function(e){let t=e.byobRequest;return b(t)?0:d(t)},__wbg_byteLength_96807b1d9ab24a4c:function(e){return e.byteLength},__wbg_byteOffset_a9c7002428843c41:function(e){return e.byteOffset},__wbg_call_91f00ddc43e01490:function(){return c(function(e,t){return e.call(t)},arguments)},__wbg_call_ec09a4cf93377d3a:function(){return c(function(e,t,n){return e.call(t,n)},arguments)},__wbg_cancel_f3a197b26dc88b39:function(e){return e.cancel()},__wbg_catch_66060324c27be6f7:function(e,t){return e.catch(t)},__wbg_cause_5f2ec35e043cc9cf:function(e){return e.cause},__wbg_cf_22a1527cd02b5acd:function(){return c(function(e){let t=e.cf;return b(t)?0:d(t)},arguments)},__wbg_cf_ee73de251a6dda8a:function(){return c(function(e){let t=e.cf;return b(t)?0:d(t)},arguments)},__wbg_close_388d99468213b286:function(){return c(function(e){e.close()},arguments)},__wbg_close_4857e22d08b71356:function(){return c(function(e){e.close()},arguments)},__wbg_constructor_04971ae0b51c1fc5:function(e){return e.constructor},__wbg_crypto_38df2bab126b63dc:function(e){return e.crypto},__wbg_delete_3854c950a92fa1b3:function(){return c(function(e,t,n){return e.delete(w(t,n))},arguments)},__wbg_delete_e21a892409559f6e:function(){return c(function(e,t,n){return e.delete(w(t,n))},arguments)},__wbg_done_6a8439e544ec6206:function(e){return e.done},__wbg_enqueue_bbeb09ba0b140f76:function(){return c(function(e,t){e.enqueue(t)},arguments)},__wbg_entries_5a6a7e7e0df09fe5:function(e){return Object.entries(e)},__wbg_error_6651fee1c71e5da9:function(e){console.error(e)},__wbg_error_9a99766f65a03031:function(e,t){console.error(e,t)},__wbg_fetch_b447ca2a0c0e6583:function(){return c(function(e,t){return e.fetch(t)},arguments)},__wbg_getByName_5f8a4ae327c50115:function(){return c(function(e,t,n){return e.getByName(w(t,n))},arguments)},__wbg_getRandomValues_c44a50d8cfdaebeb:function(){return c(function(e,t){e.getRandomValues(t)},arguments)},__wbg_getReader_bb0230851fbf986b:function(){return c(function(e){return e.getReader()},arguments)},__wbg_getTime_ef2e115ede346a26:function(e){return e.getTime()},__wbg_get_44e98e27bda25b5b:function(){return c(function(e,t){return Reflect.get(e,t)},arguments)},__wbg_get_4b90d6d8c5deb5d5:function(e,t){return e[t>>>0]},__wbg_get_52a8a619f7b88df6:function(){return c(function(e,t){return Reflect.get(e,t)},arguments)},__wbg_get_6e0eec3a0a32f612:function(){return c(function(e,t,n){return e.get(w(t,n))},arguments)},__wbg_get_a82defe8d6b5b2e5:function(){return c(function(e,t,n,i){let u=t.get(w(n,i));var a=b(u)?0:y(u,_.__wbindgen_malloc,_.__wbindgen_realloc),f=l;g().setInt32(e+4,f,!0),g().setInt32(e+0,a,!0)},arguments)},__wbg_get_a87a6c1024dddd3b:function(){return c(function(e,t,n){return e.get(w(t,n))},arguments)},__wbg_get_c538c7fb0359c222:function(){return c(function(e,t){let n=Reflect.get(e,t);return b(n)?0:d(n)},arguments)},__wbg_get_done_c21b9933fc9a9e9c:function(e){let t=e.done;return b(t)?16777215:t?1:0},__wbg_get_unchecked_46e778e3cec74b5e:function(e,t){return e[t>>>0]},__wbg_get_value_ad568c7d3db9073f:function(e){return e.value},__wbg_get_with_ref_key_6412cf3094599694:function(e,t){return e[t]},__wbg_headers_5b19cf40627ae54d:function(e){return e.headers},__wbg_headers_e1e94862a6a36f9e:function(e){return e.headers},__wbg_idFromName_32b0b5012b5f6535:function(){return c(function(e,t,n){return e.idFromName(w(t,n))},arguments)},__wbg_id_0c05f441a81ef0fc:function(){return c(function(e){return e.id},arguments)},__wbg_instanceId_3970204fcbf0c41d:function(e){return e.instanceId},__wbg_instanceof_ArrayBuffer_a581da923203f29f:function(e){let t;try{t=e instanceof ArrayBuffer}catch{t=!1}return t},__wbg_instanceof_Error_cb5ebd65d798655e:function(e){let t;try{t=e instanceof Error}catch{t=!1}return t},__wbg_instanceof_Map_7f94c740225003e2:function(e){let t;try{t=e instanceof Map}catch{t=!1}return t},__wbg_instanceof_ReadableStream_b1eab376911b1b77:function(e){let t;try{t=e instanceof ReadableStream}catch{t=!1}return t},__wbg_instanceof_Response_36a65a969abaa7c6:function(e){let t;try{t=e instanceof Response}catch{t=!1}return t},__wbg_instanceof_Uint8Array_b6fe1ac89eba107e:function(e){let t;try{t=e instanceof Uint8Array}catch{t=!1}return t},__wbg_isArray_139f48e3c057ede8:function(e){return Array.isArray(e)},__wbg_isSafeInteger_c22ccb4af2201fe9:function(e){return Number.isSafeInteger(e)},__wbg_iterator_9b36cebf3be7b7cd:function(){return Symbol.iterator},__wbg_json_d44033e4c5c27d14:function(){return c(function(e){return e.json()},arguments)},__wbg_keys_6fe253f5073ff078:function(e){return e.keys()},__wbg_length_68a9d5278d084f4f:function(e){return e.length},__wbg_length_fb04d16d7bdf6d4c:function(e){return e.length},__wbg_message_5c6ab4dd6c4b34e8:function(e){return e.message},__wbg_method_f687b49ca8e2b38d:function(e,t){let n=t.method,i=y(n,_.__wbindgen_malloc,_.__wbindgen_realloc),u=l;g().setInt32(e+4,u,!0),g().setInt32(e+0,i,!0)},__wbg_minifyconfig_new:function(e){return j.__wrap(e)},__wbg_msCrypto_bd5a034af96bcba6:function(e){return e.msCrypto},__wbg_name_72adaf2fce06bbe8:function(e){return e.name},__wbg_name_f60e249a46c5285a:function(e){return e.name},__wbg_new_0_878c6ec3a1c600f3:function(){return new Date},__wbg_new_0b303268aa395a38:function(){return new Array},__wbg_new_189262ff31890c23:function(){return c(function(){return new Headers},arguments)},__wbg_new_20b778a4c5c691c3:function(){return new Object},__wbg_new_5fae30e6b23db8df:function(e,t){return new Error(w(e,t))},__wbg_new_883c0db065f06efd:function(){return new Map},__wbg_new_a21cf41c5c809e4c:function(e){return new Date(e)},__wbg_new_b06772b280cc6e52:function(e){return new Uint8Array(e)},__wbg_new_typed_90c3f6c29ba36d19:function(e,t){try{var n={a:e,b:t},i=(a,f)=>{let p=n.a;n.a=0;try{return se(p,n.b,a,f)}finally{n.a=p}};return new Promise(i)}finally{n.a=0}},__wbg_new_with_byte_offset_and_length_9e1e664fe1a5d385:function(e,t,n){return new Uint8Array(e,t>>>0,n>>>0)},__wbg_new_with_length_4b57a7a5dc67221c:function(e){return new Uint8Array(e>>>0)},__wbg_new_with_opt_buffer_source_and_init_f51f4fbe98d29f2e:function(){return c(function(e,t){return new Response(e,t)},arguments)},__wbg_new_with_opt_readable_stream_and_init_def67835ea705e4d:function(){return c(function(e,t){return new Response(e,t)},arguments)},__wbg_new_with_opt_str_and_init_11bb6f5faad68c85:function(){return c(function(e,t,n){return new Response(e===0?void 0:w(e,t),n)},arguments)},__wbg_new_with_str_and_init_df876572184fe639:function(){return c(function(e,t,n){return new Request(w(e,t),n)},arguments)},__wbg_next_8cb028b6ba50743f:function(){return c(function(e){return e.next()},arguments)},__wbg_next_cfd0b146c9538df8:function(e){return e.next},__wbg_node_84ea875411254db1:function(e){return e.node},__wbg_now_bce4dc999095ea77:function(){return Date.now()},__wbg_process_44c7a14e11e9f69e:function(e){return e.process},__wbg_prototypesetcall_956c7493c68e29b4:function(e,t,n){Uint8Array.prototype.set.call(M(e,t),n)},__wbg_put_27edc2ab773a21be:function(){return c(function(e,t,n,i){return e.put(w(t,n),i)},arguments)},__wbg_queueMicrotask_4698f900840e3286:function(e){queueMicrotask(e)},__wbg_queueMicrotask_477a5533c7100338:function(e){return e.queueMicrotask},__wbg_randomFillSync_6c25eac9869eb53c:function(){return c(function(e,t){e.randomFillSync(t)},arguments)},__wbg_read_8426c146431f2905:function(e){return e.read()},__wbg_releaseLock_188846ef719acb10:function(e){e.releaseLock()},__wbg_require_b4edbdcf3e2a1ef0:function(){return c(function(){return module.require},arguments)},__wbg_resolve_0183de2e8c6b1d54:function(e){return Promise.resolve(e)},__wbg_respond_3cdb4cf32683fd79:function(){return c(function(e,t){e.respond(t>>>0)},arguments)},__wbg_setAlarm_c9229fb49928e287:function(){return c(function(e,t,n){return e.setAlarm(t,n)},arguments)},__wbg_set_3ab3dfede3bae139:function(){return c(function(e,t,n,i,u){e.set(w(t,n),w(i,u))},arguments)},__wbg_set_5f806304fb633ab3:function(e,t,n){return e.set(t,n)},__wbg_set_6be42768c690e380:function(e,t,n){e[t]=n},__wbg_set_86698c227e5b9dad:function(e,t,n){e.set(M(t,n))},__wbg_set_a6ba3ac0e634b822:function(){return c(function(e,t,n){return Reflect.set(e,t,n)},arguments)},__wbg_set_body_d1153b16a2b95ca1:function(e,t){e.body=t},__wbg_set_cache_5a01a8b5e6ca6cf2:function(e,t){e.cache=ue[t]},__wbg_set_criticalError_3b493d341796397b:function(e,t){e.criticalError=t!==0},__wbg_set_da33c120a6584674:function(e,t,n){e[t>>>0]=n},__wbg_set_headers_178db2684a27c112:function(e,t){e.headers=t},__wbg_set_headers_877ed41890d28af2:function(e,t){e.headers=t},__wbg_set_instanceId_2e5d2db011e9f6af:function(e,t){e.instanceId=t>>>0},__wbg_set_method_b4ede299b2064f37:function(e,t,n){e.method=w(t,n)},__wbg_set_redirect_97b881e7430f3438:function(e,t){e.redirect=ae[t]},__wbg_set_status_56097e6101a48227:function(e,t){e.status=t},__wbg_static_accessor_GLOBAL_60a4124bab7dcc9a:function(){let e=typeof global>"u"?null:global;return b(e)?0:d(e)},__wbg_static_accessor_GLOBAL_THIS_95ca6460658b5d13:function(){let e=typeof globalThis>"u"?null:globalThis;return b(e)?0:d(e)},__wbg_static_accessor_INIT_STATE_2271957acdc7fe6e:function(){return J},__wbg_static_accessor_SELF_4c95f759a91e9aae:function(){let e=typeof self>"u"?null:self;return b(e)?0:d(e)},__wbg_static_accessor_WINDOW_44b435597f9e9ee7:function(){let e=typeof window>"u"?null:window;return b(e)?0:d(e)},__wbg_status_9e6505cfa3e73a7c:function(e){return e.status},__wbg_storage_e350ca27f103b85e:function(){return c(function(e){return e.storage},arguments)},__wbg_subarray_42216645a367cd7a:function(e,t,n){return e.subarray(t>>>0,n>>>0)},__wbg_then_254bab9b266a77a5:function(e,t,n){return e.then(t,n)},__wbg_then_3ea18602c6a5123b:function(e,t){return e.then(t)},__wbg_toString_c3e29dc77827b5c7:function(){return c(function(e,t){let n=t.toString(),i=y(n,_.__wbindgen_malloc,_.__wbindgen_realloc),u=l;g().setInt32(e+4,u,!0),g().setInt32(e+0,i,!0)},arguments)},__wbg_transaction_afcd84163102ab81:function(){return c(function(e,t){return e.transaction(t)},arguments)},__wbg_url_74200ddca55ab638:function(e,t){let n=t.url,i=y(n,_.__wbindgen_malloc,_.__wbindgen_realloc),u=l;g().setInt32(e+4,u,!0),g().setInt32(e+0,i,!0)},__wbg_value_3d3defe09fb1ffca:function(e){return e.value},__wbg_versions_276b2795b1c6a219:function(e){return e.versions},__wbg_view_15fa5865c6b336e3:function(e){let t=e.view;return b(t)?0:d(t)},__wbg_webSocket_651aa54cd4107a97:function(){return c(function(e){let t=e.webSocket;return b(t)?0:d(t)},arguments)},__wbindgen_cast_0000000000000001:function(e,t){return C(e,t,ie)},__wbindgen_cast_0000000000000002:function(e,t){return C(e,t,_e)},__wbindgen_cast_0000000000000003:function(e,t){return C(e,t,oe)},__wbindgen_cast_0000000000000004:function(e){return e},__wbindgen_cast_0000000000000005:function(e){return e},__wbindgen_cast_0000000000000006:function(e,t){return M(e,t)},__wbindgen_cast_0000000000000007:function(e,t){return w(e,t)},__wbindgen_cast_0000000000000008:function(e){return BigInt.asUintN(64,e)},__wbindgen_init_externref_table:function(){let e=_.__wbindgen_externrefs,t=e.grow(4);e.set(0,void 0),e.set(t+0,void 0),e.set(t+1,null),e.set(t+2,!0),e.set(t+3,!1)}}}}function s(){if(ne){L();return}}function _e(r,e,t){s(),_.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___wasm_bindgen_68f389e705008bcb___JsValue______true_(r,e,t)}function ie(r,e,t){let n;return s(),n=_.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___worker_sys_a30a61bc3d743209___types__durable_object__transaction__DurableObjectTransaction__js_sys_95ed116970c1190___Promise__true_(r,e,t),n}function oe(r,e,t){let n;if(s(),n=_.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___wasm_bindgen_68f389e705008bcb___JsValue__core_ed718c3d60ebd546___result__Result_____wasm_bindgen_68f389e705008bcb___JsError___true_(r,e,t),n[1])throw he(n[0])}function se(r,e,t,n){s(),_.wasm_bindgen_68f389e705008bcb___convert__closures_____invoke___js_sys_95ed116970c1190___Function_fn_wasm_bindgen_68f389e705008bcb___JsValue_____wasm_bindgen_68f389e705008bcb___sys__Undefined___js_sys_95ed116970c1190___Function_fn_wasm_bindgen_68f389e705008bcb___JsValue_____wasm_bindgen_68f389e705008bcb___sys__Undefined_______true_(r,e,t,n)}var ce=["bytes"],ue=["default","no-store","reload","no-cache","force-cache","only-if-cached"],ae=["follow","error","manual"],o=0,be=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_containerstartupoptions_free(r,1)}),fe=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_intounderlyingbytesource_free(r,1)}),ge=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_intounderlyingsink_free(r,1)}),we=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_intounderlyingsource_free(r,1)}),$=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_minifyconfig_free(r,1)}),de=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_r2range_free(r,1)}),H=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_routerabrouterwalletdurableobject_free(r,1)}),G=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_routerabsigningworkerpresignsessiondurableobject_free(r,1)}),K=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(({ptr:r,instance:e})=>{e===o&&_.__wbg_routerabtenantrootcreationdurableobject_free(r,1)});function d(r){let e=_.__externref_table_alloc();return _.__wbindgen_externrefs.set(e,r),e}var Q=typeof FinalizationRegistry>"u"?{register:()=>{},unregister:()=>{}}:new FinalizationRegistry(r=>{r.instance===o&&_.__wbindgen_destroy_closure(r.a,r.b)});function V(r){let e=typeof r;if(e=="number"||e=="boolean"||r==null)return`${r}`;if(e=="string")return`"${r}"`;if(e=="symbol"){let i=r.description;return i==null?"Symbol":`Symbol(${i})`}if(e=="function"){let i=r.name;return typeof i=="string"&&i.length>0?`Function(${i})`:"Function"}if(Array.isArray(r)){let i=r.length,u="[";i>0&&(u+=V(r[0]));for(let a=1;a<i;a++)u+=", "+V(r[a]);return u+="]",u}let t=/\[object ([^\]]+)\]/.exec(toString.call(r)),n;if(t&&t.length>1)n=t[1];else return toString.call(r);if(n=="Object")try{return"Object("+JSON.stringify(r)+")"}catch{return"Object"}return r instanceof Error?`${r.name}: ${r.message}
2
+ ${r.stack}`:n}function le(r,e){r=r>>>0;let t=g(),n=[];for(let i=r;i<r+4*e;i+=4)n.push(_.__wbindgen_externrefs.get(t.getUint32(i,!0)));return _.__externref_drop_slice(r,e),n}function M(r,e){return r=r>>>0,P().subarray(r/1,r/1+e)}var v=null;function g(){return(v===null||v.buffer.detached===!0||v.buffer.detached===void 0&&v.buffer!==_.memory.buffer)&&(v=new DataView(_.memory.buffer)),v}function w(r,e){return ye(r>>>0,e)}var O=null;function P(){return(O===null||O.byteLength===0)&&(O=new Uint8Array(_.memory.buffer)),O}function c(r,e){try{return r.apply(this,e)}catch(t){let n=d(t);_.__wbindgen_exn_store(n)}}function b(r){return r==null}function C(r,e,t){let n={a:r,b:e,cnt:1,instance:o},i=(...u)=>{if(n.instance!==o)throw new Error("Cannot invoke closure from previous WASM instance");n.cnt++;let a=n.a;n.a=0;try{return t(a,n.b,...u)}finally{n.a=a,i._wbg_cb_unref()}};return i._wbg_cb_unref=()=>{--n.cnt===0&&(_.__wbindgen_destroy_closure(n.a,n.b),n.a=0,Q.unregister(n))},Q.register(i,n,n),i}function pe(r,e){let t=e(r.length*4,4)>>>0;for(let n=0;n<r.length;n++){let i=d(r[n]);g().setUint32(t+4*n,i,!0)}return l=r.length,t}function y(r,e,t){if(t===void 0){let f=z.encode(r),p=e(f.length,1)>>>0;return P().subarray(p,p+f.length).set(f),l=f.length,p}let n=r.length,i=e(n,1)>>>0,u=P(),a=0;for(;a<n;a++){let f=r.charCodeAt(a);if(f>127)break;u[i+a]=f}if(a!==n){a!==0&&(r=r.slice(a)),i=t(i,n,n=a+r.length*3,1)>>>0;let f=P().subarray(i+a,i+n),p=z.encodeInto(r,f);a+=p.written,i=t(i,n,a,1)>>>0}return l=a,i}var ne=!1;function he(r){let e=_.__wbindgen_externrefs.get(r);return _.__externref_table_dealloc(r),e}var re=new TextDecoder("utf-8",{ignoreBOM:!0,fatal:!0});re.decode();function ye(r,e){return re.decode(P().subarray(r,r+e))}var z=new TextEncoder;"encodeInto"in z||(z.encodeInto=function(r,e){let t=z.encode(r);return e.set(t),{read:r.length,written:t.length}});var l=0,q=new WebAssembly.Instance(X,te()),_=q.exports;_.__wbindgen_start();Error.stackTraceLimit=100;var m=Y();function B(){m.criticalError&&(console.log("Reinitializing Wasm application"),L(),m.criticalError=!1,m.instanceId++)}addEventListener("error",r=>{N(r.error)});function N(r){r instanceof WebAssembly.RuntimeError&&(console.error("Critical",r),m.criticalError=!0)}var T=class extends ve{};T.prototype.fetch=function(e){return Z.call(this,e,this.env,this.ctx)};T.prototype.init=ee;var je={set:(r,e,t,n)=>Reflect.set(r.instance,e,t,n),has:(r,e)=>Reflect.has(r.instance,e),deleteProperty:(r,e)=>Reflect.deleteProperty(r.instance,e),apply:(r,e,t)=>Reflect.apply(r.instance,e,t),construct:(r,e,t)=>Reflect.construct(r.instance,e,t),getPrototypeOf:r=>Reflect.getPrototypeOf(r.instance),setPrototypeOf:(r,e)=>Reflect.setPrototypeOf(r.instance,e),isExtensible:r=>Reflect.isExtensible(r.instance),preventExtensions:r=>Reflect.preventExtensions(r.instance),getOwnPropertyDescriptor:(r,e)=>Reflect.getOwnPropertyDescriptor(r.instance,e),defineProperty:(r,e,t)=>Reflect.defineProperty(r.instance,e,t),ownKeys:r=>Reflect.ownKeys(r.instance)},h={construct(r,e,t){try{B();let n={instance:Reflect.construct(r,e,t),instanceId:m.instanceId,ctor:r,args:e,newTarget:t};return new Proxy(n,{...je,get(i,u,a){i.instanceId!==m.instanceId&&(i.instance=Reflect.construct(i.ctor,i.args,i.newTarget),i.instanceId=m.instanceId);let f=Reflect.get(i.instance,u,a);return typeof f!="function"?f:f.constructor===Function?new Proxy(f,{apply(p,U,D){B();try{return p.apply(U,D)}catch(A){throw N(A),A}}}):new Proxy(f,{async apply(p,U,D){B();try{return await p.apply(U,D)}catch(A){throw N(A),A}}})}})}catch(n){throw m.criticalError=!0,n}}},Fe=new Proxy(T,h),Se=new Proxy(x,h),ke=new Proxy(I,h),We=new Proxy(R,h),Ae=new Proxy(E,h),Oe=new Proxy(j,h),Pe=new Proxy(F,h),ze=new Proxy(S,h),Te=new Proxy(k,h),Ue=new Proxy(W,h);export{Se as ContainerStartupOptions,ke as IntoUnderlyingByteSource,We as IntoUnderlyingSink,Ae as IntoUnderlyingSource,Oe as MinifyConfig,Pe as R2Range,ze as RouterAbRouterWalletDurableObject,Te as RouterAbSigningWorkerPresignSessionDurableObject,Ue as RouterAbTenantRootCreationDurableObject,Fe as default};
@@ -0,0 +1,20 @@
1
+ -- Abandoned tenant-root creation ceremonies. When the Router abandons an
2
+ -- uncommitted creation, this role's pending initial material for the
3
+ -- ceremony is removed and a tombstone is written in the same batch. The
4
+ -- initial pending insert refuses a lineage with a tombstone, so a creation
5
+ -- command admitted before the ceremony window closed cannot write its row
6
+ -- after the cleanup.
7
+ CREATE TABLE tenant_root_creation_tombstones (
8
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
9
+ length(tenant_identity_digest_hex) = 64
10
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
11
+ ),
12
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
13
+ role TEXT NOT NULL CHECK (role = 'deriver_a'),
14
+ session_id_hex TEXT NOT NULL CHECK (
15
+ length(session_id_hex) = 32
16
+ AND session_id_hex NOT GLOB '*[^0-9a-f]*'
17
+ ),
18
+ created_at_ms INTEGER NOT NULL CHECK (created_at_ms > 0),
19
+ PRIMARY KEY (tenant_identity_digest_hex, custody_lineage_b64u, role)
20
+ );
@@ -0,0 +1,32 @@
1
+ -- Root-using work admitted on an exact tenant-root epoch. An operation,
2
+ -- named by its authenticated custody binding, is admitted only while the
3
+ -- binding's epoch is active in this store: the insert is conditional on the
4
+ -- active row, so it is ordered exactly against the refresh swap that
5
+ -- retires the epoch. After the swap the retired share is readable only for
6
+ -- an operation admitted here before it, and an unused binding for the
7
+ -- retired epoch starts nothing. Admissions are the obligations a later
8
+ -- retirement must see settled before any erasure.
9
+ CREATE TABLE tenant_root_root_use_admissions (
10
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
11
+ length(tenant_identity_digest_hex) = 64
12
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
13
+ ),
14
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
15
+ role TEXT NOT NULL CHECK (role = 'deriver_a'),
16
+ custody_binding_digest_hex TEXT NOT NULL CHECK (
17
+ length(custody_binding_digest_hex) = 64
18
+ AND custody_binding_digest_hex NOT GLOB '*[^0-9a-f]*'
19
+ ),
20
+ tenant_root_share_epoch INTEGER NOT NULL CHECK (tenant_root_share_epoch > 0),
21
+ activation_receipt_digest_hex TEXT NOT NULL CHECK (
22
+ length(activation_receipt_digest_hex) = 64
23
+ AND activation_receipt_digest_hex NOT GLOB '*[^0-9a-f]*'
24
+ ),
25
+ admitted_at_ms INTEGER NOT NULL CHECK (admitted_at_ms > 0),
26
+ PRIMARY KEY (
27
+ tenant_identity_digest_hex,
28
+ custody_lineage_b64u,
29
+ role,
30
+ custody_binding_digest_hex
31
+ )
32
+ );
@@ -0,0 +1,24 @@
1
+ -- Refresh attempts replaced by a later attempt of the same epoch transition.
2
+ -- The Router abandons an attempt whose ceremony window closed before it was
3
+ -- committed, and reserves the next one. That next attempt, confirmed as the
4
+ -- Router's current attempt, records each older attempt here in the same batch
5
+ -- that replaces the pending row the older attempt left. A superseded attempt's
6
+ -- own checkpoints refuse from then on, so it cannot write that row back, and
7
+ -- only its exact backup and canary may be replaced at the epoch's coordinates.
8
+ CREATE TABLE tenant_root_refresh_supersessions (
9
+ replay_key_digest_hex TEXT PRIMARY KEY CHECK (
10
+ length(replay_key_digest_hex) = 64
11
+ AND replay_key_digest_hex NOT GLOB '*[^0-9a-f]*'
12
+ ),
13
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
14
+ length(tenant_identity_digest_hex) = 64
15
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
16
+ ),
17
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
18
+ role TEXT NOT NULL CHECK (role = 'deriver_a'),
19
+ superseded_by_replay_key_digest_hex TEXT NOT NULL CHECK (
20
+ length(superseded_by_replay_key_digest_hex) = 64
21
+ AND superseded_by_replay_key_digest_hex NOT GLOB '*[^0-9a-f]*'
22
+ ),
23
+ superseded_at_ms INTEGER NOT NULL CHECK (superseded_at_ms > 0)
24
+ );
@@ -0,0 +1,56 @@
1
+ -- Root-use admissions keyed by execution attempt (docs/refactor-150-admission-identity.md).
2
+ -- An Ed25519 Yao attempt is its canonical pair session, the pair stores' own
3
+ -- key, and stays on the epoch it was admitted on. An ECDSA attempt is its
4
+ -- operation on one epoch. Every other custody-binding field but the window is
5
+ -- compared through attempt_digest_hex; the first admitted binding's digest and
6
+ -- window are kept. Status moves once from 'admitted' when settlement lands.
7
+ -- Test wallets are disposable, so the table is recreated rather than migrated.
8
+ DROP TABLE tenant_root_root_use_admissions;
9
+
10
+ CREATE TABLE tenant_root_root_use_admissions (
11
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
12
+ length(tenant_identity_digest_hex) = 64
13
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
14
+ ),
15
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
16
+ role TEXT NOT NULL CHECK (role = 'deriver_a'),
17
+ attempt_kind TEXT NOT NULL CHECK (
18
+ attempt_kind IN ('ed25519_yao_pair_session', 'ecdsa_operation')
19
+ ),
20
+ attempt_key_hex TEXT NOT NULL CHECK (
21
+ length(attempt_key_hex) BETWEEN 32 AND 96
22
+ AND attempt_key_hex NOT GLOB '*[^0-9a-f]*'
23
+ ),
24
+ tenant_root_share_epoch INTEGER NOT NULL CHECK (tenant_root_share_epoch > 0),
25
+ activation_receipt_digest_hex TEXT NOT NULL CHECK (
26
+ length(activation_receipt_digest_hex) = 64
27
+ AND activation_receipt_digest_hex NOT GLOB '*[^0-9a-f]*'
28
+ ),
29
+ attempt_digest_hex TEXT NOT NULL CHECK (
30
+ length(attempt_digest_hex) = 64
31
+ AND attempt_digest_hex NOT GLOB '*[^0-9a-f]*'
32
+ ),
33
+ first_binding_digest_hex TEXT NOT NULL CHECK (
34
+ length(first_binding_digest_hex) = 64
35
+ AND first_binding_digest_hex NOT GLOB '*[^0-9a-f]*'
36
+ ),
37
+ issued_at_ms INTEGER NOT NULL CHECK (issued_at_ms > 0),
38
+ expires_at_ms INTEGER NOT NULL CHECK (expires_at_ms > issued_at_ms),
39
+ status TEXT NOT NULL CHECK (status IN ('admitted', 'settled', 'cancelled')),
40
+ admitted_at_ms INTEGER NOT NULL CHECK (admitted_at_ms > 0),
41
+ PRIMARY KEY (
42
+ tenant_identity_digest_hex,
43
+ custody_lineage_b64u,
44
+ role,
45
+ attempt_kind,
46
+ attempt_key_hex
47
+ )
48
+ );
49
+
50
+ CREATE INDEX tenant_root_root_use_admissions_by_epoch
51
+ ON tenant_root_root_use_admissions (
52
+ tenant_identity_digest_hex,
53
+ custody_lineage_b64u,
54
+ tenant_root_share_epoch,
55
+ status
56
+ );
@@ -0,0 +1,5 @@
1
+ -- A pair store settles an admission by its attempt when the pair's record
2
+ -- becomes terminal (docs/refactor-150-admission-identity.md). The lookup names
3
+ -- role, attempt kind and key; this index serves it.
4
+ CREATE INDEX tenant_root_root_use_admissions_by_attempt
5
+ ON tenant_root_root_use_admissions (role, attempt_kind, attempt_key_hex);
@@ -0,0 +1,64 @@
1
+ -- Root-use admissions gain the executor's claim and the pair's owner
2
+ -- (docs/refactor-150-admission-identity.md).
3
+ -- - 'claimed': Deriver A's executor claimed its pair, the last durable step
4
+ -- before its first protocol message. A claimed admission settles only when
5
+ -- its pair completes. Recovery never cancels it.
6
+ -- - pair_object_name: the wallet object that holds the attempt's pair.
7
+ -- NULL when the pair is in this role store; ECDSA admissions have no pair.
8
+ -- Test wallets are disposable, so the table is recreated rather than migrated.
9
+ DROP TABLE tenant_root_root_use_admissions;
10
+
11
+ CREATE TABLE tenant_root_root_use_admissions (
12
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
13
+ length(tenant_identity_digest_hex) = 64
14
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
15
+ ),
16
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
17
+ role TEXT NOT NULL CHECK (role = 'deriver_a'),
18
+ attempt_kind TEXT NOT NULL CHECK (
19
+ attempt_kind IN ('ed25519_yao_pair_session', 'ecdsa_operation')
20
+ ),
21
+ attempt_key_hex TEXT NOT NULL CHECK (
22
+ length(attempt_key_hex) BETWEEN 32 AND 96
23
+ AND attempt_key_hex NOT GLOB '*[^0-9a-f]*'
24
+ ),
25
+ tenant_root_share_epoch INTEGER NOT NULL CHECK (tenant_root_share_epoch > 0),
26
+ activation_receipt_digest_hex TEXT NOT NULL CHECK (
27
+ length(activation_receipt_digest_hex) = 64
28
+ AND activation_receipt_digest_hex NOT GLOB '*[^0-9a-f]*'
29
+ ),
30
+ attempt_digest_hex TEXT NOT NULL CHECK (
31
+ length(attempt_digest_hex) = 64
32
+ AND attempt_digest_hex NOT GLOB '*[^0-9a-f]*'
33
+ ),
34
+ first_binding_digest_hex TEXT NOT NULL CHECK (
35
+ length(first_binding_digest_hex) = 64
36
+ AND first_binding_digest_hex NOT GLOB '*[^0-9a-f]*'
37
+ ),
38
+ issued_at_ms INTEGER NOT NULL CHECK (issued_at_ms > 0),
39
+ expires_at_ms INTEGER NOT NULL CHECK (expires_at_ms > issued_at_ms),
40
+ status TEXT NOT NULL CHECK (status IN ('admitted', 'claimed', 'settled', 'cancelled')),
41
+ admitted_at_ms INTEGER NOT NULL CHECK (admitted_at_ms > 0),
42
+ pair_object_name TEXT CHECK (
43
+ pair_object_name IS NULL
44
+ OR (attempt_kind = 'ed25519_yao_pair_session' AND length(pair_object_name) BETWEEN 1 AND 128)
45
+ ),
46
+ PRIMARY KEY (
47
+ tenant_identity_digest_hex,
48
+ custody_lineage_b64u,
49
+ role,
50
+ attempt_kind,
51
+ attempt_key_hex
52
+ )
53
+ );
54
+
55
+ CREATE INDEX tenant_root_root_use_admissions_by_epoch
56
+ ON tenant_root_root_use_admissions (
57
+ tenant_identity_digest_hex,
58
+ custody_lineage_b64u,
59
+ tenant_root_share_epoch,
60
+ status
61
+ );
62
+
63
+ CREATE INDEX tenant_root_root_use_admissions_by_attempt
64
+ ON tenant_root_root_use_admissions (role, attempt_kind, attempt_key_hex);
@@ -0,0 +1,12 @@
1
+ -- A recovery set's retention key for this role, kept in the role store and
2
+ -- sealed to the role's own key, by a host without a destructible key provider
3
+ -- (the VM). Cloudflare keeps the key in Google Cloud KMS, and this table stays
4
+ -- empty there. Deleting a row is the only destruction such a host offers: a
5
+ -- snapshot or backup of the store may still hold it.
6
+ CREATE TABLE tenant_root_recovery_retention_keys (
7
+ recovery_set_id_b64u TEXT NOT NULL CHECK (length(recovery_set_id_b64u) = 22),
8
+ role TEXT NOT NULL CHECK (role = 'deriver_a'),
9
+ key_version INTEGER NOT NULL CHECK (key_version > 0),
10
+ sealed_key_json TEXT NOT NULL CHECK (length(sealed_key_json) BETWEEN 1 AND 4096),
11
+ PRIMARY KEY (recovery_set_id_b64u, key_version)
12
+ );
@@ -0,0 +1,20 @@
1
+ -- Abandoned tenant-root creation ceremonies. When the Router abandons an
2
+ -- uncommitted creation, this role's pending initial material for the
3
+ -- ceremony is removed and a tombstone is written in the same batch. The
4
+ -- initial pending insert refuses a lineage with a tombstone, so a creation
5
+ -- command admitted before the ceremony window closed cannot write its row
6
+ -- after the cleanup.
7
+ CREATE TABLE tenant_root_creation_tombstones (
8
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
9
+ length(tenant_identity_digest_hex) = 64
10
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
11
+ ),
12
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
13
+ role TEXT NOT NULL CHECK (role = 'deriver_b'),
14
+ session_id_hex TEXT NOT NULL CHECK (
15
+ length(session_id_hex) = 32
16
+ AND session_id_hex NOT GLOB '*[^0-9a-f]*'
17
+ ),
18
+ created_at_ms INTEGER NOT NULL CHECK (created_at_ms > 0),
19
+ PRIMARY KEY (tenant_identity_digest_hex, custody_lineage_b64u, role)
20
+ );
@@ -0,0 +1,32 @@
1
+ -- Root-using work admitted on an exact tenant-root epoch. An operation,
2
+ -- named by its authenticated custody binding, is admitted only while the
3
+ -- binding's epoch is active in this store: the insert is conditional on the
4
+ -- active row, so it is ordered exactly against the refresh swap that
5
+ -- retires the epoch. After the swap the retired share is readable only for
6
+ -- an operation admitted here before it, and an unused binding for the
7
+ -- retired epoch starts nothing. Admissions are the obligations a later
8
+ -- retirement must see settled before any erasure.
9
+ CREATE TABLE tenant_root_root_use_admissions (
10
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
11
+ length(tenant_identity_digest_hex) = 64
12
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
13
+ ),
14
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
15
+ role TEXT NOT NULL CHECK (role = 'deriver_b'),
16
+ custody_binding_digest_hex TEXT NOT NULL CHECK (
17
+ length(custody_binding_digest_hex) = 64
18
+ AND custody_binding_digest_hex NOT GLOB '*[^0-9a-f]*'
19
+ ),
20
+ tenant_root_share_epoch INTEGER NOT NULL CHECK (tenant_root_share_epoch > 0),
21
+ activation_receipt_digest_hex TEXT NOT NULL CHECK (
22
+ length(activation_receipt_digest_hex) = 64
23
+ AND activation_receipt_digest_hex NOT GLOB '*[^0-9a-f]*'
24
+ ),
25
+ admitted_at_ms INTEGER NOT NULL CHECK (admitted_at_ms > 0),
26
+ PRIMARY KEY (
27
+ tenant_identity_digest_hex,
28
+ custody_lineage_b64u,
29
+ role,
30
+ custody_binding_digest_hex
31
+ )
32
+ );
@@ -0,0 +1,24 @@
1
+ -- Refresh attempts replaced by a later attempt of the same epoch transition.
2
+ -- The Router abandons an attempt whose ceremony window closed before it was
3
+ -- committed, and reserves the next one. That next attempt, confirmed as the
4
+ -- Router's current attempt, records each older attempt here in the same batch
5
+ -- that replaces the pending row the older attempt left. A superseded attempt's
6
+ -- own checkpoints refuse from then on, so it cannot write that row back, and
7
+ -- only its exact backup and canary may be replaced at the epoch's coordinates.
8
+ CREATE TABLE tenant_root_refresh_supersessions (
9
+ replay_key_digest_hex TEXT PRIMARY KEY CHECK (
10
+ length(replay_key_digest_hex) = 64
11
+ AND replay_key_digest_hex NOT GLOB '*[^0-9a-f]*'
12
+ ),
13
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
14
+ length(tenant_identity_digest_hex) = 64
15
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
16
+ ),
17
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
18
+ role TEXT NOT NULL CHECK (role = 'deriver_b'),
19
+ superseded_by_replay_key_digest_hex TEXT NOT NULL CHECK (
20
+ length(superseded_by_replay_key_digest_hex) = 64
21
+ AND superseded_by_replay_key_digest_hex NOT GLOB '*[^0-9a-f]*'
22
+ ),
23
+ superseded_at_ms INTEGER NOT NULL CHECK (superseded_at_ms > 0)
24
+ );
@@ -0,0 +1,56 @@
1
+ -- Root-use admissions keyed by execution attempt (docs/refactor-150-admission-identity.md).
2
+ -- An Ed25519 Yao attempt is its canonical pair session, the pair stores' own
3
+ -- key, and stays on the epoch it was admitted on. An ECDSA attempt is its
4
+ -- operation on one epoch. Every other custody-binding field but the window is
5
+ -- compared through attempt_digest_hex; the first admitted binding's digest and
6
+ -- window are kept. Status moves once from 'admitted' when settlement lands.
7
+ -- Test wallets are disposable, so the table is recreated rather than migrated.
8
+ DROP TABLE tenant_root_root_use_admissions;
9
+
10
+ CREATE TABLE tenant_root_root_use_admissions (
11
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
12
+ length(tenant_identity_digest_hex) = 64
13
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
14
+ ),
15
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
16
+ role TEXT NOT NULL CHECK (role = 'deriver_b'),
17
+ attempt_kind TEXT NOT NULL CHECK (
18
+ attempt_kind IN ('ed25519_yao_pair_session', 'ecdsa_operation')
19
+ ),
20
+ attempt_key_hex TEXT NOT NULL CHECK (
21
+ length(attempt_key_hex) BETWEEN 32 AND 96
22
+ AND attempt_key_hex NOT GLOB '*[^0-9a-f]*'
23
+ ),
24
+ tenant_root_share_epoch INTEGER NOT NULL CHECK (tenant_root_share_epoch > 0),
25
+ activation_receipt_digest_hex TEXT NOT NULL CHECK (
26
+ length(activation_receipt_digest_hex) = 64
27
+ AND activation_receipt_digest_hex NOT GLOB '*[^0-9a-f]*'
28
+ ),
29
+ attempt_digest_hex TEXT NOT NULL CHECK (
30
+ length(attempt_digest_hex) = 64
31
+ AND attempt_digest_hex NOT GLOB '*[^0-9a-f]*'
32
+ ),
33
+ first_binding_digest_hex TEXT NOT NULL CHECK (
34
+ length(first_binding_digest_hex) = 64
35
+ AND first_binding_digest_hex NOT GLOB '*[^0-9a-f]*'
36
+ ),
37
+ issued_at_ms INTEGER NOT NULL CHECK (issued_at_ms > 0),
38
+ expires_at_ms INTEGER NOT NULL CHECK (expires_at_ms > issued_at_ms),
39
+ status TEXT NOT NULL CHECK (status IN ('admitted', 'settled', 'cancelled')),
40
+ admitted_at_ms INTEGER NOT NULL CHECK (admitted_at_ms > 0),
41
+ PRIMARY KEY (
42
+ tenant_identity_digest_hex,
43
+ custody_lineage_b64u,
44
+ role,
45
+ attempt_kind,
46
+ attempt_key_hex
47
+ )
48
+ );
49
+
50
+ CREATE INDEX tenant_root_root_use_admissions_by_epoch
51
+ ON tenant_root_root_use_admissions (
52
+ tenant_identity_digest_hex,
53
+ custody_lineage_b64u,
54
+ tenant_root_share_epoch,
55
+ status
56
+ );
@@ -0,0 +1,5 @@
1
+ -- A pair store settles an admission by its attempt when the pair's record
2
+ -- becomes terminal (docs/refactor-150-admission-identity.md). The lookup names
3
+ -- role, attempt kind and key; this index serves it.
4
+ CREATE INDEX tenant_root_root_use_admissions_by_attempt
5
+ ON tenant_root_root_use_admissions (role, attempt_kind, attempt_key_hex);
@@ -0,0 +1,64 @@
1
+ -- Root-use admissions gain the executor's claim and the pair's owner
2
+ -- (docs/refactor-150-admission-identity.md).
3
+ -- - 'claimed': Deriver A's executor claimed its pair, the last durable step
4
+ -- before its first protocol message. A claimed admission settles only when
5
+ -- its pair completes. Recovery never cancels it.
6
+ -- - pair_object_name: the wallet object that holds the attempt's pair.
7
+ -- NULL when the pair is in this role store; ECDSA admissions have no pair.
8
+ -- Test wallets are disposable, so the table is recreated rather than migrated.
9
+ DROP TABLE tenant_root_root_use_admissions;
10
+
11
+ CREATE TABLE tenant_root_root_use_admissions (
12
+ tenant_identity_digest_hex TEXT NOT NULL CHECK (
13
+ length(tenant_identity_digest_hex) = 64
14
+ AND tenant_identity_digest_hex NOT GLOB '*[^0-9a-f]*'
15
+ ),
16
+ custody_lineage_b64u TEXT NOT NULL CHECK (length(custody_lineage_b64u) = 22),
17
+ role TEXT NOT NULL CHECK (role = 'deriver_b'),
18
+ attempt_kind TEXT NOT NULL CHECK (
19
+ attempt_kind IN ('ed25519_yao_pair_session', 'ecdsa_operation')
20
+ ),
21
+ attempt_key_hex TEXT NOT NULL CHECK (
22
+ length(attempt_key_hex) BETWEEN 32 AND 96
23
+ AND attempt_key_hex NOT GLOB '*[^0-9a-f]*'
24
+ ),
25
+ tenant_root_share_epoch INTEGER NOT NULL CHECK (tenant_root_share_epoch > 0),
26
+ activation_receipt_digest_hex TEXT NOT NULL CHECK (
27
+ length(activation_receipt_digest_hex) = 64
28
+ AND activation_receipt_digest_hex NOT GLOB '*[^0-9a-f]*'
29
+ ),
30
+ attempt_digest_hex TEXT NOT NULL CHECK (
31
+ length(attempt_digest_hex) = 64
32
+ AND attempt_digest_hex NOT GLOB '*[^0-9a-f]*'
33
+ ),
34
+ first_binding_digest_hex TEXT NOT NULL CHECK (
35
+ length(first_binding_digest_hex) = 64
36
+ AND first_binding_digest_hex NOT GLOB '*[^0-9a-f]*'
37
+ ),
38
+ issued_at_ms INTEGER NOT NULL CHECK (issued_at_ms > 0),
39
+ expires_at_ms INTEGER NOT NULL CHECK (expires_at_ms > issued_at_ms),
40
+ status TEXT NOT NULL CHECK (status IN ('admitted', 'claimed', 'settled', 'cancelled')),
41
+ admitted_at_ms INTEGER NOT NULL CHECK (admitted_at_ms > 0),
42
+ pair_object_name TEXT CHECK (
43
+ pair_object_name IS NULL
44
+ OR (attempt_kind = 'ed25519_yao_pair_session' AND length(pair_object_name) BETWEEN 1 AND 128)
45
+ ),
46
+ PRIMARY KEY (
47
+ tenant_identity_digest_hex,
48
+ custody_lineage_b64u,
49
+ role,
50
+ attempt_kind,
51
+ attempt_key_hex
52
+ )
53
+ );
54
+
55
+ CREATE INDEX tenant_root_root_use_admissions_by_epoch
56
+ ON tenant_root_root_use_admissions (
57
+ tenant_identity_digest_hex,
58
+ custody_lineage_b64u,
59
+ tenant_root_share_epoch,
60
+ status
61
+ );
62
+
63
+ CREATE INDEX tenant_root_root_use_admissions_by_attempt
64
+ ON tenant_root_root_use_admissions (role, attempt_kind, attempt_key_hex);
@@ -0,0 +1,12 @@
1
+ -- A recovery set's retention key for this role, kept in the role store and
2
+ -- sealed to the role's own key, by a host without a destructible key provider
3
+ -- (the VM). Cloudflare keeps the key in Google Cloud KMS, and this table stays
4
+ -- empty there. Deleting a row is the only destruction such a host offers: a
5
+ -- snapshot or backup of the store may still hold it.
6
+ CREATE TABLE tenant_root_recovery_retention_keys (
7
+ recovery_set_id_b64u TEXT NOT NULL CHECK (length(recovery_set_id_b64u) = 22),
8
+ role TEXT NOT NULL CHECK (role = 'deriver_b'),
9
+ key_version INTEGER NOT NULL CHECK (key_version > 0),
10
+ sealed_key_json TEXT NOT NULL CHECK (length(sealed_key_json) BETWEEN 1 AND 4096),
11
+ PRIMARY KEY (recovery_set_id_b64u, key_version)
12
+ );