@seams/wallet-server 0.6.2 → 0.7.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/THIRD_PARTY_NOTICES.md +1 -105
- package/artifact-manifest.json +147 -32
- package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/router/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/router/index.js +2 -2
- package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
- package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
- package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
- package/cloudflare-router-ab/migrations/deriver-a/0012_tenant_root_creation_tombstones.sql +20 -0
- package/cloudflare-router-ab/migrations/deriver-a/0013_tenant_root_root_use_admissions.sql +32 -0
- package/cloudflare-router-ab/migrations/deriver-a/0014_tenant_root_refresh_supersessions.sql +24 -0
- package/cloudflare-router-ab/migrations/deriver-a/0015_tenant_root_root_use_attempts.sql +56 -0
- package/cloudflare-router-ab/migrations/deriver-a/0016_tenant_root_root_use_admission_settlement.sql +5 -0
- package/cloudflare-router-ab/migrations/deriver-a/0017_tenant_root_root_use_admission_claims.sql +64 -0
- package/cloudflare-router-ab/migrations/deriver-a/0018_tenant_root_recovery_retention_keys.sql +12 -0
- package/cloudflare-router-ab/migrations/deriver-b/0012_tenant_root_creation_tombstones.sql +20 -0
- package/cloudflare-router-ab/migrations/deriver-b/0013_tenant_root_root_use_admissions.sql +32 -0
- package/cloudflare-router-ab/migrations/deriver-b/0014_tenant_root_refresh_supersessions.sql +24 -0
- package/cloudflare-router-ab/migrations/deriver-b/0015_tenant_root_root_use_attempts.sql +56 -0
- package/cloudflare-router-ab/migrations/deriver-b/0016_tenant_root_root_use_admission_settlement.sql +5 -0
- package/cloudflare-router-ab/migrations/deriver-b/0017_tenant_root_root_use_admission_claims.sql +64 -0
- package/cloudflare-router-ab/migrations/deriver-b/0018_tenant_root_recovery_retention_keys.sql +12 -0
- package/cloudflare-router-ab/scripts/bootstrap-local-tenant-root.mjs +81 -16
- package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +102 -9
- package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +4 -1
- package/cloudflare-router-ab/wrangler.deriver-a.toml +24 -0
- package/cloudflare-router-ab/wrangler.router.toml +13 -0
- package/dist/esm/authorization/capabilityPolicy.js +1 -1
- package/dist/esm/authorization/domain.js +2 -2
- package/dist/esm/authorization/factorEvidence.js +6 -100
- package/dist/esm/authorization/service.js +42 -2
- package/dist/esm/authorization/vaultProxyUse.js +5 -10
- package/dist/esm/cloud-host.js +17 -12
- package/dist/esm/core/EmailOtpRecords.js +19 -1
- package/dist/esm/core/EmailOtpStores.js +323 -924
- package/dist/esm/core/IdentityStore.js +67 -345
- package/dist/esm/core/NearPublicKeyStore.js +21 -63
- package/dist/esm/core/RegistrationCeremonyStore.js +3 -1793
- package/dist/esm/core/SessionService.js +7 -30
- package/dist/esm/core/ThresholdService/config.js +1 -82
- package/dist/esm/core/ThresholdService/kv.js +3 -3
- package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +37 -5
- package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.js +4 -74
- package/dist/esm/core/ThresholdService/routerAbNormalSigningPolicy.js +3 -10
- package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +15 -51
- package/dist/esm/core/ThresholdService/stores/KeyStore.js +3 -3
- package/dist/esm/core/ThresholdService/stores/SessionStore.js +5 -81
- package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +191 -372
- package/dist/esm/core/ThresholdService/stores/exportReplayGuard.js +7 -0
- package/dist/esm/core/ThresholdService/validation.js +18 -230
- package/dist/esm/core/WalletAuthMethodStore.js +22 -79
- package/dist/esm/core/WalletStore.js +62 -191
- package/dist/esm/core/WebAuthnAuthenticatorStore.js +57 -340
- package/dist/esm/core/WebAuthnCredentialBindingStore.js +90 -369
- package/dist/esm/core/WebAuthnLoginChallengeStore.js +17 -397
- package/dist/esm/core/WebAuthnSyncChallengeStore.js +17 -397
- package/dist/esm/core/authService/AuthService.js +2 -19
- package/dist/esm/core/authService/bytes.js +1 -4
- package/dist/esm/core/authService/emailOtpChallengeOperations.js +2 -5
- package/dist/esm/core/authService/emailOtpChallengeProof.js +10 -41
- package/dist/esm/core/authService/emailOtpChallengeVerification.js +19 -90
- package/dist/esm/core/authService/emailOtpChallenges.js +11 -46
- package/dist/esm/core/authService/emailOtpConfig.js +1 -32
- package/dist/esm/core/authService/emailOtpDelivery.js +10 -45
- package/dist/esm/core/authService/emailOtpEnrollment.js +9 -40
- package/dist/esm/core/authService/emailOtpGrant.js +9 -40
- package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +15 -193
- package/dist/esm/core/authService/emailOtpSeal.js +5 -20
- package/dist/esm/core/authService/emailOtpUnlock.js +20 -110
- package/dist/esm/core/authService/googleEmailOtpRegistration.js +29 -116
- package/dist/esm/core/authService/identity.js +5 -20
- package/dist/esm/core/authService/nearPrivateKeySigning.js +7 -15
- package/dist/esm/core/authService/nearPublicKeyMetadata.js +6 -25
- package/dist/esm/core/authService/nearTransactions.js +2 -1
- package/dist/esm/core/authService/oidcVerification.js +25 -38
- package/dist/esm/core/authService/rateLimits.js +3 -36
- package/dist/esm/core/authService/registrationThresholdHelpers.js +2 -103
- package/dist/esm/core/authService/storeRegistry.js +2 -13
- package/dist/esm/core/authService/thresholdEcdsaKeyInventory.js +6 -6
- package/dist/esm/core/authService/webauthn.js +52 -241
- package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -6
- package/dist/esm/core/authService/webauthnVerificationOutcomes.js +41 -0
- package/dist/esm/core/authService/webauthnWalletBinding.js +2 -122
- package/dist/esm/core/d1EcdsaSignerRead.js +76 -0
- package/dist/esm/core/d1IdentityStore.js +46 -139
- package/dist/esm/core/d1TenantStore.js +82 -0
- package/dist/esm/core/d1WalletAuthMethodStore.js +92 -143
- package/dist/esm/core/d1WalletStore.js +28 -36
- package/dist/esm/core/deviceLinking/linkedDeviceEmailOtpGrant.js +10 -12
- package/dist/esm/core/deviceLinking/linkedDeviceManagement.js +25 -3
- package/dist/esm/core/deviceLinking/linkedDeviceSession.js +6 -895
- package/dist/esm/core/deviceLinking/linkedDeviceSessionApproval.js +100 -0
- package/dist/esm/core/deviceLinking/linkedDeviceSessionRecord.js +662 -0
- package/dist/esm/core/deviceLinking/requestProof.js +13 -4
- package/dist/esm/core/ecdsaMaterialReadSnapshot.js +85 -0
- package/dist/esm/core/emailOtpD1Statements.js +383 -0
- package/dist/esm/core/hostedAccountIds.js +2 -2
- package/dist/esm/core/keyMaterialBrands.js +2 -48
- package/dist/esm/core/nearRelayerAccountProvisioning.js +27 -155
- package/dist/esm/core/nearSignerWasmRuntime.js +1 -4
- package/dist/esm/core/rpcClients/near/NearClient.js +15 -218
- package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +1 -1
- package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +2 -4
- package/dist/esm/core/signingLanes/LaneLifecycleStore.js +0 -24
- package/dist/esm/core/signingLanes/WalletExecutionLaneProjection.js +8 -11
- package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +3 -8
- package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +1 -4
- package/dist/esm/core/signingMaterial/ordinaryInactiveSignerMaterialReservation.js +2 -5
- package/dist/esm/core/storeBackends.js +208 -0
- package/dist/esm/core/thresholdEcdsaChainTarget.js +2 -10
- package/dist/esm/core/webAuthnD1Statements.js +92 -0
- package/dist/esm/core/webAuthnStoreBackends.js +198 -0
- package/dist/esm/hosted-wallet-gateway.js +34 -17
- package/dist/esm/index.js +2 -2
- package/dist/esm/local-hosted-wallet-gateway-worker.js +2 -23
- package/dist/esm/localHostedWalletGatewayHandler.js +312 -0
- package/dist/esm/localIntendedEcdsaFinalizeFault.js +85 -0
- package/dist/esm/localIntendedLinkExecuteFault.js +140 -0
- package/dist/esm/localIntendedMaterialAdmissionFault.js +176 -0
- package/dist/esm/localIntendedPresignCancellation.js +44 -0
- package/dist/esm/localIntendedRevokeFault.js +106 -0
- package/dist/esm/localIntendedSessionAdmissionFault.js +139 -0
- package/dist/esm/localIntendedYaoExportFault.js +117 -0
- package/dist/esm/localIntendedYaoFault.js +13 -16
- package/dist/esm/localIntendedYaoFinalizeFault.js +99 -0
- package/dist/esm/localIntendedYaoRecoveryFault.js +102 -0
- package/dist/esm/localIntendedYaoSigningFault.js +127 -0
- package/dist/esm/router/auth/authRequestValidation.js +1 -1
- package/dist/esm/router/auth/commonRouterUtils.js +34 -12
- package/dist/esm/router/auth/walletSessionFailure.js +3 -19
- package/dist/esm/router/auth/webAuthnCredentialCodecs.js +4 -15
- package/dist/esm/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.js +24 -0
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.js +2 -6
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +87 -89
- package/dist/esm/router/cloudflare/d1/auth/walletSessionCredentialReaders.js +76 -0
- package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +215 -0
- package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +423 -308
- package/dist/esm/router/cloudflare/d1/authorization/d1VaultProxyStore.js +8 -12
- package/dist/esm/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.js +14 -0
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +107 -66
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +3 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +1 -19
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceManagementService.js +4 -3
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +52 -9
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.js +100 -0
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.js +7 -10
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +33 -124
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.js +2 -2
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +10 -18
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.js +6 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkSourceReader.js +3 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/index.js +4 -4
- package/dist/esm/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.js +69 -0
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +39 -68
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.js +69 -0
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.js +2 -2
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.js +12 -55
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.js +17 -80
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +26 -71
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +20 -3
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpDeliveryRuntime.js +6 -25
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +7 -94
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +5 -47
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +38 -170
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +24 -87
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +9 -32
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.js +5 -20
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +15 -134
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +54 -260
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +24 -111
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +1 -28
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityService.js +9 -40
- package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +5 -18
- package/dist/esm/router/cloudflare/d1/oidc/d1OidcBoundary.js +18 -91
- package/dist/esm/router/cloudflare/d1/oidc/d1OidcVerificationService.js +6 -30
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +7 -18
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +25 -80
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.js +24 -15
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.js +23 -253
- package/dist/esm/router/cloudflare/d1/registration/d1EvmFamilyEcdsaRegistrationBranch.js +5 -20
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +20 -39
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +31 -73
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +4 -1
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +10 -31
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +6 -30
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +286 -220
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +5 -3
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +2 -2
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js +4 -7
- package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +139 -27
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -1
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +2 -1
- package/dist/esm/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.js +2 -60
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +158 -19
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.js +19 -49
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.js +100 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +132 -33
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +83 -4
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +45 -217
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +10 -13
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +22 -116
- package/dist/esm/router/cloudflare/durableObjects/thresholdStore.js +59 -66
- package/dist/esm/router/cloudflare/runtime/createSelfHostedCloudflareSigningWorker.js +1 -2
- package/dist/esm/router/cloudflare/runtime/routerAbPrewarm.js +2 -2
- package/dist/esm/router/cloudflare/runtime/staticWalletConsoleBinding.js +5 -20
- package/dist/esm/router/cloudflare/runtime/tenantRootCreationGrant.js +2 -9
- package/dist/esm/router/cloudflare/runtime/walletConsoleTenantRootLineage.js +11 -2
- package/dist/esm/router/cloudflare/runtime/walletControlOps.js +2 -1
- package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +7 -7
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +4 -3
- package/dist/esm/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.js +48 -21
- package/dist/esm/router/cloudflare.js +13343 -14372
- package/dist/esm/router/domains/ecdsa/routerAbEcdsaStrictRegistration.js +16 -5
- package/dist/esm/router/domains/ecdsa/thresholdEcdsaRequestValidation.js +2 -8
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.js +33 -0
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +17 -9
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +29 -431
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +7 -2
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPersistence.js +5 -8
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.js +2 -1
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.js +70 -2
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +134 -169
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +77 -162
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.js +205 -51
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +29 -11
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryWalletSessionAuthorization.js +3 -6
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.js +182 -55
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.js +2 -1
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.js +63 -247
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js +9 -27
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.js +87 -132
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.js +39 -55
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.js +5 -4
- package/dist/esm/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.js +45 -0
- package/dist/esm/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.js +1 -1
- package/dist/esm/router/domains/emailOtp/emailOtpExportPolicy.js +1 -42
- package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +1 -6
- package/dist/esm/router/domains/emailOtp/emailOtpRouteHandlers.js +15 -62
- package/dist/esm/router/domains/emailOtp/emailOtpSessionRouteHelpers.js +1 -142
- package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.js +1 -1
- package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -2
- package/dist/esm/router/domains/passkeyCustody/walletRecoveryFinalization.js +23 -45
- package/dist/esm/router/domains/passkeyCustody/walletRecoveryKeyManifest.js +5 -5
- package/dist/esm/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.js +1 -1
- package/dist/esm/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.js +836 -0
- package/dist/esm/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.js +698 -0
- package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmission.js +210 -0
- package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.js +16 -15
- package/dist/esm/router/domains/signingOperations/routerAbOperationStepUp.js +314 -0
- package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +62 -2159
- package/dist/esm/router/domains/signingOperations/walletExecutionAdmission.js +1 -4
- package/dist/esm/router/domains/tenantRoot/tenantRootIdentityResolution.js +8 -14
- package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +18 -22
- package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +3 -4
- package/dist/esm/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.js +2 -2
- package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +127 -339
- package/dist/esm/router/express.js +7172 -7997
- package/dist/esm/router/framework/http.js +5 -4
- package/dist/esm/router/framework/ror/normalize.js +1 -1
- package/dist/esm/router/framework/routerApiRouteSurface.js +1 -1
- package/dist/esm/router/framework/runtimeSnapshotConsumer.js +8 -35
- package/dist/esm/router/node/nodeHostedWalletGateway.js +64 -0
- package/dist/esm/router/node/nodeHostedWalletGatewayCheck.js +163 -0
- package/dist/esm/router/node/nodeHostedWalletGatewayMain.js +120 -0
- package/dist/esm/router/node/nodeHttp.js +79 -0
- package/dist/esm/router/node/nodeSqlite.js +43 -0
- package/dist/esm/router/node/signerSqlMigrations.js +48 -0
- package/dist/esm/router/transport/fetch/createFetchRouter.js +4 -7
- package/dist/esm/router/transport/fetch/routes/auth.js +9 -41
- package/dist/esm/router/transport/fetch/routes/deviceLinking.js +16 -18
- package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +8 -27
- package/dist/esm/router/transport/fetch/routes/deviceManagement.js +15 -24
- package/dist/esm/router/transport/fetch/routes/nearPublicKeys.js +4 -16
- package/dist/esm/router/transport/fetch/routes/normalSigningRouterProxy.js +3 -16
- package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +144 -461
- package/dist/esm/router/transport/fetch/routes/sessions.js +5 -4
- package/dist/esm/router/transport/fetch/routes/syncAccount.js +12 -42
- package/dist/esm/router/transport/fetch/routes/syncAccountBootstrap.js +2 -2
- package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +96 -102
- package/dist/esm/router/transport/fetch/routes/thresholdEd25519.js +52 -27
- package/dist/esm/router/transport/fetch/routes/walletExecutionLanePreflight.js +4 -1
- package/dist/esm/router/transport/fetch/routes/webauthnAuthenticators.js +4 -16
- package/dist/esm/shared-ts/src/authorization/capabilityKinds.js +1 -1
- package/dist/esm/shared-ts/src/authorization/delegatedAuthority.js +1 -1
- package/dist/esm/shared-ts/src/authorization/operationFingerprint.js +1 -2
- package/dist/esm/shared-ts/src/authorization/walletAuthority.js +99 -227
- package/dist/esm/shared-ts/src/authorization/walletCustodyOperation.js +4 -6
- package/dist/esm/shared-ts/src/authorization/walletSignerActivationEquality.js +12 -0
- package/dist/esm/shared-ts/src/device-linking/activeWalletSession.js +74 -0
- package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +50 -0
- package/dist/esm/shared-ts/src/device-linking/committedSignerPackages.js +10 -14
- package/dist/esm/shared-ts/src/device-linking/delegatedActivationPlan.js +3 -5
- package/dist/esm/shared-ts/src/device-linking/deviceManagement.js +55 -0
- package/dist/esm/shared-ts/src/device-linking/digests.js +10 -65
- package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +14 -16
- package/dist/esm/shared-ts/src/device-linking/index.js +4 -1
- package/dist/esm/shared-ts/src/device-linking/parsers.js +510 -1063
- package/dist/esm/shared-ts/src/device-linking/requestProof.js +5 -14
- package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +10 -16
- package/dist/esm/shared-ts/src/device-linking/walletSessionCredentialDelivery.js +9 -9
- package/dist/esm/shared-ts/src/device-linking/wireFields.js +59 -0
- package/dist/esm/shared-ts/src/near/nearClient.js +252 -0
- package/dist/esm/shared-ts/src/passkey-custody/credentialActivity.js +3 -1
- package/dist/esm/shared-ts/src/passkey-custody/custodyEnvelope.js +7 -5
- package/dist/esm/shared-ts/src/passkey-custody/custodySecretBinding.js +6 -4
- package/dist/esm/shared-ts/src/passkey-custody/primitives.js +9 -39
- package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -5
- package/dist/esm/shared-ts/src/signing-lanes/index.js +3 -3
- package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +8 -19
- package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +5 -14
- package/dist/esm/shared-ts/src/signing-lanes/participants.js +2 -5
- package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +7 -5
- package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +6 -45
- package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +423 -1511
- package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +323 -0
- package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +59 -0
- package/dist/esm/shared-ts/src/tenant-root/tenantRootIdentifier.js +12 -0
- package/dist/esm/shared-ts/src/tenant-root/tenantRootIdentity.js +2 -9
- package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +2 -5
- package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +1 -2
- package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +49 -0
- package/dist/esm/shared-ts/src/utils/addAuthMethodRegistration.js +3 -4
- package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +8 -1
- package/dist/esm/shared-ts/src/utils/digestEncoding.js +63 -0
- package/dist/esm/shared-ts/src/utils/ecdsaKeyFactsInventory.js +2 -4
- package/dist/esm/shared-ts/src/utils/ecdsaServerTiming.js +0 -1
- package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +5 -3
- package/dist/esm/shared-ts/src/utils/exactKeys.js +17 -0
- package/dist/esm/shared-ts/src/utils/exactRecord.js +44 -0
- package/dist/esm/shared-ts/src/utils/failure.js +20 -0
- package/dist/esm/shared-ts/src/utils/registrationAuthMethodInput.js +127 -0
- package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +2 -2
- package/dist/esm/shared-ts/src/utils/registrationIds.js +280 -0
- package/dist/esm/shared-ts/src/utils/registrationIntent.js +7 -1182
- package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +426 -0
- package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +11 -136
- package/dist/esm/shared-ts/src/utils/routerAbEd25519Yao.js +3 -163
- package/dist/esm/shared-ts/src/utils/routerAbEd25519YaoDigests.js +160 -0
- package/dist/esm/shared-ts/src/utils/routerAbNormalSigningIdentity.js +1 -4
- package/dist/esm/shared-ts/src/utils/routerAbPublicKeyset.js +7 -15
- package/dist/esm/shared-ts/src/utils/thresholdEcdsaChainTarget.js +9 -0
- package/dist/esm/shared-ts/src/utils/validation.js +37 -6
- package/dist/esm/shared-ts/src/utils/walletAuthMethodRecord.js +362 -0
- package/dist/esm/shared-ts/src/utils/wireSchema.js +77 -0
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +1 -1
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeReservation.js +1 -1
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js +8 -15
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.js +4 -8
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.js +3 -1
- package/dist/esm/storage/d1Sql.js +10 -1
- package/dist/esm/storage/syncSqlite.js +79 -0
- package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +11 -33
- package/dist/esm/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.js +1 -1
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyBackends.js +3 -3
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +3 -10
- package/dist/esm/threshold/session/signingSessionSeal/options.js +1 -1
- package/dist/esm/threshold/session/signingSessionSeal/service.js +8 -35
- package/dist/esm/threshold/session/signingSessionSeal/transport/express.js +18 -94
- package/dist/esm/threshold/session/signingSessionSeal/transport/fetch.js +6 -30
- package/dist/esm/threshold/session/signingSessionSeal/transport/shared.js +23 -75
- package/dist/esm/threshold/statusCodes.js +1 -1
- package/dist/esm/wasm/evm_crypto/pkg/evm_crypto_bg.wasm +0 -0
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +3 -3
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
- package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +8 -26
- package/dist/types/shared-ts/src/authorization/delegatedAuthority.d.ts +2 -9
- package/dist/types/shared-ts/src/authorization/operationFingerprint.d.ts +1 -3
- package/dist/types/shared-ts/src/authorization/walletAuthority.d.ts +25 -12
- package/dist/types/shared-ts/src/authorization/walletSessionIssuance.d.ts +8 -0
- package/dist/types/shared-ts/src/authorization/walletSignerActivationEquality.d.ts +4 -0
- package/dist/types/shared-ts/src/device-linking/activeWalletSession.d.ts +3 -2
- package/dist/types/shared-ts/src/device-linking/authorityActivation.d.ts +5 -0
- package/dist/types/shared-ts/src/device-linking/committedSignerPackages.d.ts +4 -8
- package/dist/types/shared-ts/src/device-linking/contracts.d.ts +13 -74
- package/dist/types/shared-ts/src/device-linking/contracts.typecheck.d.ts +2 -1
- package/dist/types/shared-ts/src/device-linking/deviceManagement.d.ts +7 -0
- package/dist/types/shared-ts/src/device-linking/digests.d.ts +0 -5
- package/dist/types/shared-ts/src/device-linking/ed25519ExportRoot.d.ts +3 -2
- package/dist/types/shared-ts/src/device-linking/index.d.ts +2 -0
- package/dist/types/shared-ts/src/device-linking/parsers.d.ts +4 -41
- package/dist/types/shared-ts/src/device-linking/requestProof.d.ts +0 -1
- package/dist/types/shared-ts/src/device-linking/sourceContribution.d.ts +5 -2
- package/dist/types/shared-ts/src/device-linking/walletSessionCredentialDelivery.d.ts +2 -1
- package/dist/types/shared-ts/src/device-linking/wireFields.d.ts +26 -0
- package/dist/types/shared-ts/src/near/actions.d.ts +4 -4
- package/dist/types/shared-ts/src/near/delegate.d.ts +3 -2
- package/dist/types/shared-ts/src/near/nearClient.d.ts +145 -0
- package/dist/types/shared-ts/src/passkey-custody/ceremonyCommitPayload.d.ts +0 -22
- package/dist/types/shared-ts/src/passkey-custody/credentialActivity.d.ts +2 -4
- package/dist/types/shared-ts/src/passkey-custody/custodyEnvelope.d.ts +14 -30
- package/dist/types/shared-ts/src/passkey-custody/custodySecretBinding.d.ts +8 -24
- package/dist/types/shared-ts/src/passkey-custody/index.d.ts +0 -2
- package/dist/types/shared-ts/src/passkey-custody/primitives.d.ts +9 -14
- package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -15
- package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +11 -50
- package/dist/types/shared-ts/src/signing-lanes/ids.d.ts +1 -10
- package/dist/types/shared-ts/src/signing-lanes/index.d.ts +1 -2
- package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +1 -2
- package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +5 -27
- package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +0 -11
- package/dist/types/shared-ts/src/signing-lanes/recordParsers.d.ts +6 -53
- package/dist/types/shared-ts/src/signing-lanes/records.d.ts +1 -2
- package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +18 -42
- package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +1 -20
- package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +4 -25
- package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +1 -41
- package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +6 -0
- package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +20 -0
- package/dist/types/shared-ts/src/tenant-root/tenantRootIdentifier.d.ts +3 -0
- package/dist/types/shared-ts/src/tenant-root/tenantRootOperationRecord.d.ts +2 -1
- package/dist/types/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.d.ts +8 -35
- package/dist/types/shared-ts/src/threshold/ed25519OperationFingerprint.d.ts +8 -35
- package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +25 -0
- package/dist/types/shared-ts/src/threshold/participants.d.ts +3 -9
- package/dist/types/shared-ts/src/threshold/secp256k1.d.ts +0 -37
- package/dist/types/shared-ts/src/threshold/sessionPolicy.d.ts +24 -0
- package/dist/types/shared-ts/src/threshold/signingRootScope.d.ts +3 -5
- package/dist/types/shared-ts/src/utils/addAuthMethodRegistration.d.ts +3 -4
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +7 -108
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +16 -3
- package/dist/types/shared-ts/src/utils/canonicalPrimitives.d.ts +2 -0
- package/dist/types/shared-ts/src/utils/digestEncoding.d.ts +9 -0
- package/dist/types/shared-ts/src/utils/domainIds.d.ts +1 -2
- package/dist/types/shared-ts/src/utils/ecdsaKeyFactsInventory.d.ts +3 -13
- package/dist/types/shared-ts/src/utils/eip1559TxWasmJson.d.ts +16 -0
- package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +7 -5
- package/dist/types/shared-ts/src/utils/emailOtpRecoveryKey.d.ts +0 -2
- package/dist/types/shared-ts/src/utils/errors.d.ts +0 -7
- package/dist/types/shared-ts/src/utils/exactKeys.d.ts +11 -0
- package/dist/types/shared-ts/src/utils/exactRecord.d.ts +12 -0
- package/dist/types/shared-ts/src/utils/failure.d.ts +12 -0
- package/dist/types/shared-ts/src/utils/index.d.ts +5 -2
- package/dist/types/shared-ts/src/utils/jsonRpc.d.ts +6 -6
- package/dist/types/shared-ts/src/utils/near.d.ts +2 -1
- package/dist/types/shared-ts/src/utils/nearRpcResults.d.ts +8 -7
- package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -4
- package/dist/types/shared-ts/src/utils/registrationAuthMethodInput.d.ts +179 -0
- package/dist/types/shared-ts/src/utils/registrationContracts.d.ts +76 -0
- package/dist/types/shared-ts/src/utils/registrationEstablishedSession.d.ts +1 -2
- package/dist/types/shared-ts/src/utils/registrationIds.d.ts +56 -0
- package/dist/types/shared-ts/src/utils/registrationIntent.d.ts +9 -514
- package/dist/types/shared-ts/src/utils/registrationSignerPlan.d.ts +130 -0
- package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts +24 -93
- package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts +15 -99
- package/dist/types/shared-ts/src/utils/routerAbEd25519YaoDigests.d.ts +38 -0
- package/dist/types/shared-ts/src/utils/routerAbNormalSigningIdentity.d.ts +30 -8
- package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts +10 -15
- package/dist/types/shared-ts/src/utils/routerAbTraceContext.d.ts +2 -1
- package/dist/types/shared-ts/src/utils/routerApiKeyAuth.d.ts +2 -0
- package/dist/types/shared-ts/src/utils/secureRandomId.d.ts +0 -2
- package/dist/types/shared-ts/src/utils/signerDomain.d.ts +3 -35
- package/dist/types/shared-ts/src/utils/signerSlot.d.ts +0 -4
- package/dist/types/shared-ts/src/utils/signingSessionSeal.d.ts +10 -17
- package/dist/types/shared-ts/src/utils/thresholdEcdsaChainTarget.d.ts +25 -0
- package/dist/types/shared-ts/src/utils/validation.d.ts +10 -10
- package/dist/types/shared-ts/src/utils/variant.d.ts +29 -0
- package/dist/types/shared-ts/src/utils/variant.typecheck.d.ts +22 -0
- package/dist/types/shared-ts/src/utils/walletAddSignerActivation.d.ts +2 -2
- package/dist/types/shared-ts/src/utils/walletAuthAuthority.d.ts +1 -58
- package/dist/types/shared-ts/src/utils/walletAuthMethodRecord.d.ts +101 -0
- package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +3 -7
- package/dist/types/shared-ts/src/utils/webauthnDeviceInfo.d.ts +5 -4
- package/dist/types/shared-ts/src/utils/wireSchema.d.ts +60 -0
- package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +2 -1
- package/dist/types/shared-ts/src/wallet-recovery/index.d.ts +0 -1
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeLocator.d.ts +0 -16
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +2 -11
- package/dist/types/shared-ts/src/wallet-recovery/recoveryEnvelopes.d.ts +3 -16
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.d.ts +6 -18
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.d.ts +0 -2
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.d.ts +1 -3
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryPreparation.d.ts +15 -0
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryTarget.d.ts +3 -4
- package/dist/types/wallet-server/src/authorization/capabilityPolicy.d.ts +0 -1
- package/dist/types/wallet-server/src/authorization/domain.d.ts +36 -5
- package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.d.ts +61 -0
- package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/authorization/factorEvidence.d.ts +6 -7
- package/dist/types/wallet-server/src/authorization/service.d.ts +71 -3
- package/dist/types/wallet-server/src/cloud-host.d.ts +6 -2
- package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +10 -1
- package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +16 -116
- package/dist/types/wallet-server/src/core/IdentityStore.d.ts +2 -7
- package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +6 -16
- package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +29 -90
- package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -12
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +10 -3
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.d.ts +17 -48
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/internalServiceHttp.d.ts +2 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +4 -71
- package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +2 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +2 -6
- package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +2 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +2 -4
- package/dist/types/wallet-server/src/core/ThresholdService/stores/exportReplayGuard.d.ts +3 -0
- package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +11 -137
- package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +2 -7
- package/dist/types/wallet-server/src/core/WalletStore.d.ts +3 -8
- package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +15 -22
- package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +14 -36
- package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +9 -34
- package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +9 -34
- package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/bytes.d.ts +0 -1
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +6 -5
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +9 -17
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +3 -2
- package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +8 -32
- package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +3 -10
- package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +3 -70
- package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +6 -12
- package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +5 -8
- package/dist/types/wallet-server/src/core/authService/nearPrivateKeySigning.d.ts +3 -2
- package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -26
- package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -5
- package/dist/types/wallet-server/src/core/authService/thresholdEcdsaKeyInventory.d.ts +0 -23
- package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +8 -16
- package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +7 -7
- package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +43 -0
- package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +1 -28
- package/dist/types/wallet-server/src/core/d1EcdsaSignerRead.d.ts +39 -0
- package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +6 -16
- package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +51 -0
- package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +11 -29
- package/dist/types/wallet-server/src/core/d1WalletStore.d.ts +16 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEd25519ExportRoot.d.ts +2 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEmailOtpGrant.d.ts +2 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceManagement.d.ts +44 -26
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +19 -217
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionApproval.d.ts +8 -0
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionRecord.d.ts +258 -0
- package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -2
- package/dist/types/wallet-server/src/core/ecdsaMaterialReadSnapshot.d.ts +19 -0
- package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +54 -0
- package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -15
- package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +4 -24
- package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +2 -3
- package/dist/types/wallet-server/src/core/nearSignerWasmRuntime.d.ts +0 -1
- package/dist/types/wallet-server/src/core/registrationContracts.d.ts +37 -108
- package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +8 -9
- package/dist/types/wallet-server/src/core/rpcClients/near/NearClient.d.ts +10 -107
- package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +4 -3
- package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +2 -3
- package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +2 -3
- package/dist/types/wallet-server/src/core/signingLanes/WalletExecutionLaneProjection.d.ts +5 -20
- package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +4 -4
- package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +3 -3
- package/dist/types/wallet-server/src/core/signingLanes/signingWorkerLaneMaterialIdentity.d.ts +2 -19
- package/dist/types/wallet-server/src/core/storeBackends.d.ts +83 -0
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +13 -59
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +51 -3
- package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +3 -12
- package/dist/types/wallet-server/src/core/types.d.ts +5 -30
- package/dist/types/wallet-server/src/core/webAuthnD1Statements.d.ts +29 -0
- package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +96 -0
- package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +11 -7
- package/dist/types/wallet-server/src/index.d.ts +1 -1
- package/dist/types/wallet-server/src/local-hosted-wallet-gateway-worker.d.ts +1 -4
- package/dist/types/wallet-server/src/localHostedWalletGatewayHandler.d.ts +12 -0
- package/dist/types/wallet-server/src/localIntendedEcdsaFinalizeFault.d.ts +33 -0
- package/dist/types/wallet-server/src/localIntendedLinkExecuteFault.d.ts +47 -0
- package/dist/types/wallet-server/src/localIntendedMaterialAdmissionFault.d.ts +38 -0
- package/dist/types/wallet-server/src/localIntendedPresignCancellation.d.ts +4 -0
- package/dist/types/wallet-server/src/localIntendedRevokeFault.d.ts +40 -0
- package/dist/types/wallet-server/src/localIntendedSessionAdmissionFault.d.ts +41 -0
- package/dist/types/wallet-server/src/localIntendedYaoExportFault.d.ts +41 -0
- package/dist/types/wallet-server/src/localIntendedYaoFault.d.ts +7 -1
- package/dist/types/wallet-server/src/localIntendedYaoFinalizeFault.d.ts +37 -0
- package/dist/types/wallet-server/src/localIntendedYaoRecoveryFault.d.ts +45 -0
- package/dist/types/wallet-server/src/localIntendedYaoSigningFault.d.ts +51 -0
- package/dist/types/wallet-server/src/router/auth/authRequestValidation.d.ts +13 -29
- package/dist/types/wallet-server/src/router/auth/commonRouterUtils.d.ts +20 -11
- package/dist/types/wallet-server/src/router/auth/walletSessionFailure.d.ts +1 -4
- package/dist/types/wallet-server/src/router/auth/webAuthnCredentialCodecs.d.ts +3 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.d.ts +12 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.d.ts +3 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +2 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthService.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/walletSessionCredentialReaders.d.ts +9 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/authorizedOperationStatements.d.ts +34 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +54 -21
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/walletSessionAuthorityProjection.d.ts +2 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +74 -6
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +2 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.d.ts +8 -21
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.d.ts +14 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.d.ts +49 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +6 -8
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.d.ts +7 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +8 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.d.ts +3 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.d.ts +7 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.d.ts +1 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.d.ts +33 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +13 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.d.ts +24 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.d.ts +4 -11
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +1 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +4 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.d.ts +13 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.d.ts +0 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.d.ts +5 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.d.ts +4 -14
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +1 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -21
- package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityRecords.d.ts +0 -23
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +1 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.d.ts +11 -19
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -54
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +7 -19
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.d.ts +4 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.d.ts +8 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +7 -14
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -22
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +6 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +10 -6
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +21 -26
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +5 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.d.ts +4 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.d.ts +5 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.d.ts +17 -6
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.d.ts +0 -16
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +29 -14
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.d.ts +15 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.d.ts +71 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +34 -24
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +44 -26
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +13 -46
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +8 -19
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOps.d.ts +8 -34
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleTenantRootLineage.d.ts +2 -1
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -0
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.d.ts +15 -2
- package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ecdsa/routerAbEcdsaStrictRegistration.d.ts +9 -7
- package/dist/types/wallet-server/src/router/domains/ecdsa/thresholdEcdsaRequestValidation.d.ts +6 -18
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.d.ts +46 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +5 -3
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.d.ts +20 -79
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.d.ts +1 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.d.ts +4 -3
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +62 -42
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.d.ts +108 -32
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryActivation.typecheck.d.ts +5 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.d.ts +36 -5
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.d.ts +5 -4
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.d.ts +41 -50
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.d.ts +3 -3
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.d.ts +6 -5
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.d.ts +14 -4
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.d.ts +12 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/routerAbEd25519YaoWalletSession.d.ts +11 -52
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.d.ts +3 -4
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpExportPolicy.d.ts +2 -27
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRequestValidation.d.ts +1 -2
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRouteHandlers.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpSessionRouteHelpers.d.ts +2 -102
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/envelopeRevocationAdmission.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +3 -2
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.d.ts +1 -9
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/registrationCustodyOutcome.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/verifiedCustodyFactor.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationAdmission.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +2 -28
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryFinalization.d.ts +43 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryKeyManifest.d.ts +7 -19
- package/dist/types/wallet-server/src/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.d.ts +0 -3
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.d.ts +164 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.d.ts +110 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmission.d.ts +373 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.d.ts +11 -10
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbOperationStepUp.d.ts +164 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +22 -717
- package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +5 -12
- package/dist/types/wallet-server/src/router/domains/syncAccount/syncAccountRequestValidation.d.ts +6 -10
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootCustodyLineage.d.ts +6 -1
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootIdentityResolution.d.ts +4 -7
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +8 -8
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +4 -4
- package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.d.ts +4 -4
- package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRouteHandlers.d.ts +4 -62
- package/dist/types/wallet-server/src/router/express-adaptor.d.ts +2 -2
- package/dist/types/wallet-server/src/router/framework/apiCredentialPorts.d.ts +3 -1
- package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +89 -65
- package/dist/types/wallet-server/src/router/framework/http.d.ts +1 -1
- package/dist/types/wallet-server/src/router/framework/ror/normalize.d.ts +1 -9
- package/dist/types/wallet-server/src/router/framework/routeMeteringPolicy.d.ts +3 -2
- package/dist/types/wallet-server/src/router/framework/routerApi.d.ts +1 -1
- package/dist/types/wallet-server/src/router/framework/routerApiRouteSurface.d.ts +3 -3
- package/dist/types/wallet-server/src/router/node/nodeHostedWalletGateway.d.ts +34 -0
- package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayCheck.d.ts +21 -0
- package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayMain.d.ts +2 -0
- package/dist/types/wallet-server/src/router/node/nodeHttp.d.ts +13 -0
- package/dist/types/wallet-server/src/router/node/nodeSqlite.d.ts +22 -0
- package/dist/types/wallet-server/src/router/node/signerSqlMigrations.d.ts +20 -0
- package/dist/types/wallet-server/src/router/transport/fetch/createFetchRouter.d.ts +1 -3
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +5 -6
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.d.ts +5 -8
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceManagement.d.ts +14 -16
- package/dist/types/wallet-server/src/router/transport/fetch/routes/normalSigningRouterProxy.d.ts +0 -12
- package/dist/types/wallet-server/src/router/transport/fetch/routes/passkeyCustody.d.ts +1 -1
- package/dist/types/wallet-server/src/router/transport/fetch/routes/sessions.d.ts +2 -1
- package/dist/types/wallet-server/src/router/transport/fetch/routes/syncAccountBootstrap.d.ts +9 -17
- package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEcdsa.d.ts +3 -58
- package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEd25519.d.ts +0 -44
- package/dist/types/wallet-server/src/storage/d1Sql.d.ts +7 -0
- package/dist/types/wallet-server/src/storage/syncSqlite.d.ts +28 -0
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.d.ts +0 -1
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/idempotencyRecords.d.ts +5 -7
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/signingSessionSeal.types.d.ts +6 -8
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/transport/shared.d.ts +1 -0
- package/dist/types/wallet-server/src/threshold/statusCodes.d.ts +4 -4
- package/migrations/d1-signer/0036_r150_yao_lifecycle_decisions.sql +22 -0
- package/migrations/d1-signer/0037_r150_wallet_auth_method_revocation_replays.sql +26 -0
- package/migrations/d1-signer/0038_r150_registration_ceremony_cas_guard_seed.sql +8 -0
- package/migrations/d1-signer/0039_r150_revocation_replay_answer_kind.sql +9 -0
- package/package.json +1 -1
- package/dist/esm/core/ThresholdService/ecdsaClientRootProof.js +0 -27
- package/dist/esm/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.js +0 -115
- package/dist/esm/core/ThresholdService/secureRandomId.js +0 -9
- package/dist/esm/core/authService/record.js +0 -8
- package/dist/esm/core/authService/thresholdRuntimePolicy.js +0 -19
- package/dist/esm/core/authService/walletRegistrationPlanning.js +0 -49
- package/dist/esm/core/deviceLinking/index.js +0 -5
- package/dist/esm/core/errors.js +0 -54
- package/dist/esm/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.js +0 -39
- package/dist/esm/core/signingLanes/WalletKeyStore.js +0 -0
- package/dist/esm/core/signingLanes/index.js +0 -8
- package/dist/esm/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.js +0 -55
- package/dist/esm/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.js +0 -56
- package/dist/esm/shared-ts/src/signing-lanes/linkedEcdsaScope.js +0 -1
- package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker.js +0 -414
- package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm +0 -0
- package/dist/types/shared-ts/src/passkey-custody/credentialObservations.d.ts +0 -74
- package/dist/types/shared-ts/src/passkey-custody/kekContext.d.ts +0 -34
- package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.d.ts +0 -62
- package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/validation.d.ts +0 -11
- package/dist/types/shared-ts/src/utils/bigint.d.ts +0 -3
- package/dist/types/shared-ts/src/utils/paillier.d.ts +0 -37
- package/dist/types/shared-ts/src/utils/recoveryDomain.d.ts +0 -12
- package/dist/types/shared-ts/src/utils/signerDomain.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/wallet-recovery/recoveryKekContext.d.ts +0 -37
- package/dist/types/wallet-server/src/core/ThresholdService/ecdsaClientRootProof.d.ts +0 -12
- package/dist/types/wallet-server/src/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.d.ts +0 -17
- package/dist/types/wallet-server/src/core/ThresholdService/secureRandomId.d.ts +0 -2
- package/dist/types/wallet-server/src/core/authService/record.d.ts +0 -2
- package/dist/types/wallet-server/src/core/authService/thresholdRuntimePolicy.d.ts +0 -4
- package/dist/types/wallet-server/src/core/authService/walletRegistrationPlanning.d.ts +0 -19
- package/dist/types/wallet-server/src/core/deviceLinking/index.d.ts +0 -5
- package/dist/types/wallet-server/src/core/errors.d.ts +0 -10
- package/dist/types/wallet-server/src/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.d.ts +0 -28
- package/dist/types/wallet-server/src/core/signingLanes/SigningLaneStore.d.ts +0 -15
- package/dist/types/wallet-server/src/core/signingLanes/WalletKeyStore.d.ts +0 -13
- package/dist/types/wallet-server/src/core/signingLanes/index.d.ts +0 -11
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.d.ts +0 -35
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.d.ts +0 -35
- /package/dist/esm/{core/signingLanes/SigningLaneStore.js → authorization/ecdsaWalletSessionAdmission.js} +0 -0
|
@@ -3,22 +3,7 @@ export type EvmFamilySigningKeySlotId = string & {
|
|
|
3
3
|
readonly __evmFamilySigningKeySlotIdBrand: 'EvmFamilySigningKeySlotId';
|
|
4
4
|
};
|
|
5
5
|
export declare function parseEvmFamilySigningKeySlotId(raw: unknown): DomainIdParseResult<EvmFamilySigningKeySlotId>;
|
|
6
|
-
export declare function parseEvmFamilySigningKeySlotIdOrNull(raw: unknown): EvmFamilySigningKeySlotId | null;
|
|
7
6
|
export declare function requireEvmFamilySigningKeySlotId(value: unknown, label?: string): EvmFamilySigningKeySlotId;
|
|
8
|
-
export declare function assertMatchingEvmFamilySigningKeySlotId(args: {
|
|
9
|
-
expected: unknown;
|
|
10
|
-
actual: unknown;
|
|
11
|
-
expectedLabel?: string;
|
|
12
|
-
actualLabel?: string;
|
|
13
|
-
message?: string;
|
|
14
|
-
}): EvmFamilySigningKeySlotId;
|
|
15
|
-
export declare function assertEvmFamilySigningKeySlotIdMatchesPlan(args: {
|
|
16
|
-
evmFamilySigningKeySlotId: unknown;
|
|
17
|
-
walletId: unknown;
|
|
18
|
-
signingRootId: unknown;
|
|
19
|
-
signingRootVersion: unknown;
|
|
20
|
-
message?: string;
|
|
21
|
-
}): EvmFamilySigningKeySlotId;
|
|
22
7
|
export declare function deriveEvmFamilySigningKeySlotId(input: {
|
|
23
8
|
walletId: unknown;
|
|
24
9
|
signingRootId: unknown;
|
|
@@ -1,38 +1,24 @@
|
|
|
1
1
|
import type { AuthorizedOperationId, CapabilityId } from '../authorization/capabilityKinds';
|
|
2
2
|
import type { CapabilityOperationFingerprintDigest } from '../authorization/operationFingerprint';
|
|
3
|
-
import type {
|
|
3
|
+
import type { DigestB64u } from '../utils/canonicalPrimitives';
|
|
4
|
+
import type { MpcMaterialActivationRef } from '../utils/domainIds';
|
|
4
5
|
import type { LinkedDeviceEnrollmentId } from './ids';
|
|
5
|
-
import type {
|
|
6
|
-
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
readonly
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
readonly walletKeyId: WalletKeyId;
|
|
13
|
-
readonly laneId: SigningLaneId;
|
|
14
|
-
readonly laneShareEpoch: LaneShareEpoch;
|
|
15
|
-
readonly materialActivation: RouterAbMpcMaterialActivationRefWire;
|
|
16
|
-
};
|
|
17
|
-
export declare function buildLinkedDeviceExecutionEnvelopeV1(input: {
|
|
18
|
-
readonly enrollmentId: LinkedDeviceEnrollmentId;
|
|
19
|
-
readonly deviceId: LinkedDeviceId;
|
|
20
|
-
readonly walletKeyId: WalletKeyId;
|
|
21
|
-
readonly laneId: SigningLaneId;
|
|
22
|
-
readonly laneShareEpoch: LaneShareEpoch;
|
|
6
|
+
import type { ActiveSigningLaneReference, SigningLaneRecord, WalletKeyRecord } from './records';
|
|
7
|
+
export type OwnerWalletExecutionLaneProjectionV1 = {
|
|
8
|
+
readonly kind: 'active_owner_wallet_execution_lane_projection_v1';
|
|
9
|
+
readonly walletKey: WalletKeyRecord;
|
|
10
|
+
readonly lane: Extract<SigningLaneRecord, {
|
|
11
|
+
readonly laneKind: 'owner_passkey' | 'owner_email_otp';
|
|
12
|
+
}>;
|
|
23
13
|
readonly materialActivation: MpcMaterialActivationRef;
|
|
24
|
-
|
|
25
|
-
|
|
14
|
+
readonly verifiedActivationReceiptDigestB64u: DigestB64u;
|
|
15
|
+
};
|
|
26
16
|
export type ClaimedWalletExecutionAuthorization = {
|
|
27
17
|
readonly kind: 'claimed_wallet_execution_authorization_v1';
|
|
28
18
|
readonly authorizedOperationId: AuthorizedOperationId;
|
|
29
19
|
readonly operationFingerprintDigest: CapabilityOperationFingerprintDigest;
|
|
30
20
|
readonly capabilityId: CapabilityId;
|
|
31
21
|
};
|
|
32
|
-
export type ReservedDelegatedBudgetClaim = {
|
|
33
|
-
readonly kind: 'reserved_delegated_budget_claim_v1';
|
|
34
|
-
readonly budgetClaimId: DelegatedBudgetClaimId;
|
|
35
|
-
};
|
|
36
22
|
type PreparedWalletExecutionBase = {
|
|
37
23
|
readonly authorization: ClaimedWalletExecutionAuthorization;
|
|
38
24
|
readonly materialActivation: MpcMaterialActivationRef;
|
|
@@ -57,35 +43,10 @@ export type PreparedLinkedDeviceWalletExecution = PreparedWalletExecutionBase &
|
|
|
57
43
|
readonly delegatedAuthorizationId?: never;
|
|
58
44
|
readonly budgetClaim?: never;
|
|
59
45
|
};
|
|
60
|
-
export type PreparedDelegatedWalletExecution = PreparedWalletExecutionBase & {
|
|
61
|
-
readonly kind: 'prepared_delegated_wallet_execution';
|
|
62
|
-
readonly laneKind: 'delegated_execution';
|
|
63
|
-
readonly lane: ActiveSigningLaneReference & {
|
|
64
|
-
readonly laneKind: 'delegated_execution';
|
|
65
|
-
};
|
|
66
|
-
readonly delegatedAuthorizationId: DelegatedSpendAuthorizationId;
|
|
67
|
-
readonly budgetClaim: ReservedDelegatedBudgetClaim;
|
|
68
|
-
readonly linkedDeviceEnrollmentId?: never;
|
|
69
|
-
};
|
|
70
|
-
export type PreparedWalletExecution = PreparedOwnerWalletExecution | PreparedLinkedDeviceWalletExecution | PreparedDelegatedWalletExecution;
|
|
71
46
|
export declare function buildPreparedOwnerWalletExecution(input: {
|
|
72
47
|
readonly authorization: ClaimedWalletExecutionAuthorization;
|
|
73
48
|
readonly materialActivation: MpcMaterialActivationRef;
|
|
74
49
|
readonly lane: PreparedOwnerWalletExecution['lane'];
|
|
75
50
|
}): PreparedOwnerWalletExecution;
|
|
76
|
-
export declare function buildPreparedLinkedDeviceWalletExecution(input: {
|
|
77
|
-
readonly authorization: ClaimedWalletExecutionAuthorization;
|
|
78
|
-
readonly materialActivation: MpcMaterialActivationRef;
|
|
79
|
-
readonly lane: PreparedLinkedDeviceWalletExecution['lane'];
|
|
80
|
-
readonly linkedDeviceEnrollmentId: LinkedDeviceEnrollmentId;
|
|
81
|
-
}): PreparedLinkedDeviceWalletExecution;
|
|
82
|
-
export declare function buildPreparedDelegatedWalletExecution(input: {
|
|
83
|
-
readonly authorization: ClaimedWalletExecutionAuthorization;
|
|
84
|
-
readonly materialActivation: MpcMaterialActivationRef;
|
|
85
|
-
readonly lane: PreparedDelegatedWalletExecution['lane'];
|
|
86
|
-
readonly delegatedAuthorizationId: DelegatedSpendAuthorizationId;
|
|
87
|
-
readonly budgetClaim: ReservedDelegatedBudgetClaim;
|
|
88
|
-
}): PreparedDelegatedWalletExecution;
|
|
89
|
-
export declare function assertNeverPreparedWalletExecution(value: never): never;
|
|
90
51
|
export {};
|
|
91
52
|
//# sourceMappingURL=execution.d.ts.map
|
|
@@ -4,15 +4,6 @@ export type EcdsaManifestIdentity = {
|
|
|
4
4
|
manifestId: EcdsaCapabilityManifestId;
|
|
5
5
|
manifestRevision: EcdsaCapabilityManifestRevision;
|
|
6
6
|
};
|
|
7
|
-
export type ThresholdEcdsaChainTarget
|
|
8
|
-
kind: 'evm';
|
|
9
|
-
namespace: 'eip155';
|
|
10
|
-
chainId: number;
|
|
11
|
-
networkSlug: string;
|
|
12
|
-
} | {
|
|
13
|
-
kind: 'tempo';
|
|
14
|
-
chainId: number;
|
|
15
|
-
networkSlug: string;
|
|
16
|
-
};
|
|
7
|
+
export type { ThresholdEcdsaChainTarget } from '../utils/thresholdEcdsaChainTarget';
|
|
17
8
|
export { parseLaneShareEpoch, parseLaneEnrollmentId, parseLaneOperationId, parseLaneOperationIdempotencyKey, parseLinkedDeviceId, parseLinkedDeviceEnrollmentId, parseLinkDeviceSessionId, parseSigningLaneId, parseWalletKeyId, parseEd25519YaoSuiteId, parseEcdsaRelayerKeyId, } from '../utils/domainIds';
|
|
18
9
|
//# sourceMappingURL=ids.d.ts.map
|
|
@@ -1,8 +1,8 @@
|
|
|
1
1
|
export * from './ids';
|
|
2
|
-
export * from './validation';
|
|
3
2
|
export * from './records';
|
|
4
3
|
export * from './rotation';
|
|
5
4
|
export * from './rotationParsers';
|
|
5
|
+
export * from './rotationProtocolParsers';
|
|
6
6
|
export * from './rotationDigests';
|
|
7
7
|
export * from './rotationLifecycle';
|
|
8
8
|
export * from './evmFamilySigningKeySlotId';
|
|
@@ -10,5 +10,4 @@ export * from './participants';
|
|
|
10
10
|
export * from './participantDigest';
|
|
11
11
|
export * from './execution';
|
|
12
12
|
export * from './ownerContinuity';
|
|
13
|
-
export * from './linkedEcdsaScope';
|
|
14
13
|
//# sourceMappingURL=index.d.ts.map
|
|
@@ -5,7 +5,7 @@ import { type LaneParticipantBindingDigestB64u } from './participants';
|
|
|
5
5
|
export type WalletSignerId = string & {
|
|
6
6
|
readonly __ownerLaneWalletSignerIdBrand: 'WalletSignerId';
|
|
7
7
|
};
|
|
8
|
-
/** Owner lanes bind to signer facts that predate independently provisioned
|
|
8
|
+
/** Owner lanes bind to signer facts that predate independently provisioned lanes. */
|
|
9
9
|
export type OwnerLaneParticipantContinuityV1 = {
|
|
10
10
|
readonly kind: 'owner_lane_participant_continuity_v1';
|
|
11
11
|
readonly signerId: WalletSignerId;
|
|
@@ -14,7 +14,6 @@ export type OwnerLaneParticipantContinuityV1 = {
|
|
|
14
14
|
readonly custodyKeyManifestDigestB64u: DigestB64u;
|
|
15
15
|
readonly sourceIdentityDigestB64u: DigestB64u;
|
|
16
16
|
};
|
|
17
|
-
export declare const OWNER_LANE_PARTICIPANT_BINDING_DOMAIN_V1: "seams/rotatable-signing-lanes/owner-lane-participant-continuity/v1";
|
|
18
17
|
/** Parse the owner signer identity without widening it into a generic string. */
|
|
19
18
|
export declare function parseWalletSignerId(raw: unknown, label?: string): WalletSignerId;
|
|
20
19
|
export declare function buildOwnerLaneParticipantContinuityV1(args: {
|
|
@@ -1,48 +1,26 @@
|
|
|
1
1
|
import { type DigestB64u } from '../utils/canonicalPrimitives';
|
|
2
2
|
import { type HpkePublicKeyB64u, type LaneHolderCustodyIdentityV1, type LaneHolderParticipantId, type LaneHolderParticipantRecordV1, type LaneParticipantBindingDigestB64u, type SigningWorkerParticipantId, type SigningWorkerParticipantRecordV1, type SigningWorkerRecipientIdentityV1, type SigningWorkerRecipientKeyDigestB64u } from './participants';
|
|
3
|
-
|
|
4
|
-
export declare const LANE_HOLDER_PARTICIPANT_BINDING_DOMAIN_V1: "seams/rotatable-signing-lanes/lane-holder-participant/v1";
|
|
5
|
-
export declare const SIGNING_WORKER_PARTICIPANT_BINDING_DOMAIN_V1: "seams/rotatable-signing-lanes/signing-worker-participant/v1";
|
|
6
|
-
/** The lane digest binds the fixed holder-then-SigningWorker participant set. */
|
|
7
|
-
export declare const LANE_PARTICIPANT_SET_BINDING_DOMAIN_V1: "seams/rotatable-signing-lanes/lane-participant-set/v1";
|
|
8
|
-
export type LaneHolderParticipantBindingInputV1 = {
|
|
3
|
+
type LaneHolderParticipantBindingInputV1 = {
|
|
9
4
|
readonly participantId: LaneHolderParticipantId;
|
|
10
5
|
readonly custody: LaneHolderCustodyIdentityV1;
|
|
11
6
|
readonly hpkePublicKeyB64u: HpkePublicKeyB64u;
|
|
12
7
|
readonly hpkePublicKeyDigestB64u: SigningWorkerRecipientKeyDigestB64u;
|
|
13
8
|
};
|
|
14
|
-
|
|
9
|
+
type SigningWorkerParticipantBindingInputV1 = {
|
|
15
10
|
readonly participantId: SigningWorkerParticipantId;
|
|
16
11
|
readonly recipient: SigningWorkerRecipientIdentityV1;
|
|
17
12
|
};
|
|
18
|
-
/** LP32(UTF8(value)) from the
|
|
13
|
+
/** LP32(UTF8(value)) from the canonical lane encoding. */
|
|
19
14
|
export declare function encodeLaneCanonicalTextV1(value: string): Uint8Array;
|
|
20
|
-
/** LP32(BASE64URL_DECODE_CANONICAL_32(value)) from the
|
|
15
|
+
/** LP32(BASE64URL_DECODE_CANONICAL_32(value)) from the canonical lane encoding. */
|
|
21
16
|
export declare function encodeLaneCanonicalDigestV1(value: DigestB64u): Uint8Array;
|
|
22
17
|
/** U64(value), encoded as unsigned big-endian bytes. */
|
|
23
18
|
export declare function encodeLaneCanonicalU64V1(value: number): Uint8Array;
|
|
24
|
-
/** Nonempty array count encoding used by enrollment and receipt records. */
|
|
25
|
-
export declare function encodeLaneCanonicalNonEmptyCountV1(count: number): Uint8Array;
|
|
26
|
-
export declare function laneHolderParticipantCanonicalBytesV1(input: LaneHolderParticipantRecordV1): Uint8Array;
|
|
27
|
-
export declare function signingWorkerParticipantCanonicalBytesV1(input: SigningWorkerParticipantRecordV1): Uint8Array;
|
|
28
|
-
/**
|
|
29
|
-
* Canonical bytes for the lane's complete participant set. The order is part
|
|
30
|
-
* of the protocol: holder first, SigningWorker second. Individual participant
|
|
31
|
-
* binding digests are included after their canonical identity bytes so a
|
|
32
|
-
* verified record cannot be substituted while retaining the same identities.
|
|
33
|
-
*/
|
|
34
|
-
export declare function laneParticipantSetCanonicalBytesV1(input: {
|
|
35
|
-
readonly holderParticipant: LaneHolderParticipantRecordV1;
|
|
36
|
-
readonly signingWorkerParticipant: SigningWorkerParticipantRecordV1;
|
|
37
|
-
}): Uint8Array;
|
|
38
19
|
export declare function computeLaneHolderParticipantBindingDigestV1(input: LaneHolderParticipantBindingInputV1): Promise<LaneParticipantBindingDigestB64u>;
|
|
39
|
-
export declare function computeSigningWorkerParticipantBindingDigestV1(input: SigningWorkerParticipantBindingInputV1): Promise<LaneParticipantBindingDigestB64u>;
|
|
40
20
|
export declare function computeLaneParticipantSetBindingDigestV1(input: {
|
|
41
21
|
readonly holderParticipant: LaneHolderParticipantRecordV1;
|
|
42
22
|
readonly signingWorkerParticipant: SigningWorkerParticipantRecordV1;
|
|
43
23
|
}): Promise<LaneParticipantBindingDigestB64u>;
|
|
44
|
-
export declare function buildLaneHolderParticipantRecordWithDigestV1(input: LaneHolderParticipantBindingInputV1): Promise<LaneHolderParticipantRecordV1>;
|
|
45
24
|
export declare function buildSigningWorkerParticipantRecordWithDigestV1(input: SigningWorkerParticipantBindingInputV1): Promise<SigningWorkerParticipantRecordV1>;
|
|
46
|
-
export
|
|
47
|
-
export declare function assertSigningWorkerParticipantBindingDigestV1(record: SigningWorkerParticipantRecordV1): Promise<SigningWorkerParticipantRecordV1>;
|
|
25
|
+
export {};
|
|
48
26
|
//# sourceMappingURL=participantDigest.d.ts.map
|
|
@@ -61,17 +61,6 @@ export declare function parseHpkePublicKeyB64u(raw: unknown): DomainIdParseResul
|
|
|
61
61
|
export declare function parseLaneParticipantBindingDigestB64u(raw: unknown): DomainIdParseResult<LaneParticipantBindingDigestB64u>;
|
|
62
62
|
export declare function parseLaneCustodyBindingDigestB64u(raw: unknown): DomainIdParseResult<LaneCustodyBindingDigestB64u>;
|
|
63
63
|
export declare function parseSigningWorkerRecipientKeyDigestB64u(raw: unknown): DomainIdParseResult<SigningWorkerRecipientKeyDigestB64u>;
|
|
64
|
-
export declare function buildLaneHolderCustodyIdentityV1(args: {
|
|
65
|
-
readonly custodyBindingId: LaneHolderCustodyBindingId;
|
|
66
|
-
readonly custodyBindingDigestB64u: LaneCustodyBindingDigestB64u;
|
|
67
|
-
}): LaneHolderCustodyIdentityV1;
|
|
68
|
-
export declare function buildSigningWorkerRecipientIdentityV1(args: {
|
|
69
|
-
readonly recipientKeyId: SigningWorkerRecipientKeyId;
|
|
70
|
-
readonly hpkePublicKeyB64u: HpkePublicKeyB64u;
|
|
71
|
-
readonly hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
|
|
72
|
-
}): SigningWorkerRecipientIdentityV1;
|
|
73
|
-
export declare function parseLaneHolderCustodyIdentityV1(raw: unknown, label?: string): LaneHolderCustodyIdentityV1;
|
|
74
|
-
export declare function parseSigningWorkerRecipientIdentityV1(raw: unknown, label?: string): SigningWorkerRecipientIdentityV1;
|
|
75
64
|
export declare function buildLaneHolderParticipantRecordV1(args: {
|
|
76
65
|
readonly participantId: LaneHolderParticipantId;
|
|
77
66
|
readonly custody: LaneHolderCustodyIdentityV1;
|
|
@@ -1,19 +1,13 @@
|
|
|
1
|
-
import type {
|
|
1
|
+
import type { WalletId } from '../utils/domainIds';
|
|
2
2
|
import { type EvmFamilySigningKeySlotId } from './evmFamilySigningKeySlotId';
|
|
3
3
|
import { type LaneHolderParticipantRecordV1, type LaneParticipantBindingDigestB64u, type SigningWorkerParticipantRecordV1 } from './participants';
|
|
4
4
|
import { type LaneShareEpoch, type LinkedDeviceId, type SigningLaneId, type WalletKeyId } from './ids';
|
|
5
|
-
import type {
|
|
5
|
+
import type { AgentCustodyBindingId, AgentIdentityKeyId, BreakGlassSigningLaneRecord, DelegatedExecutionSigningLaneRecord, DelegatedSpendAuthorizationId, Ed25519WalletKeyRecord, EvmFamilyWalletKeyRecord, LinkedDeviceSigningLaneRecord, OwnerEmailOtpSigningLaneRecord, OwnerPasskeySigningLaneRecord, RecoverySigningLaneRecord, SigningLaneLifecycle, SigningLaneRecord, WalletKeyLifecycle, WalletKeyRecord, WalletKeyVersion } from './records';
|
|
6
6
|
import { type OwnerLaneParticipantContinuityV1 } from './ownerContinuity';
|
|
7
7
|
type ActiveSigningLaneLifecycle = Extract<SigningLaneLifecycle, {
|
|
8
8
|
readonly state: 'active';
|
|
9
9
|
}>;
|
|
10
|
-
|
|
11
|
-
readonly walletId: WalletId;
|
|
12
|
-
readonly walletKeyId: WalletKeyId;
|
|
13
|
-
readonly walletKeyVersion: WalletKeyVersion;
|
|
14
|
-
readonly lifecycle: WalletKeyLifecycle;
|
|
15
|
-
};
|
|
16
|
-
export type SigningLaneReferenceBuilderArgs = {
|
|
10
|
+
type SigningLaneReferenceBuilderArgs = {
|
|
17
11
|
readonly walletId: WalletId;
|
|
18
12
|
readonly walletKeyId: WalletKeyId;
|
|
19
13
|
readonly laneId: SigningLaneId;
|
|
@@ -23,21 +17,17 @@ export type SigningLaneReferenceBuilderArgs = {
|
|
|
23
17
|
type SigningLaneRecordBuilderCommonArgs = SigningLaneReferenceBuilderArgs & {
|
|
24
18
|
readonly lifecycle: SigningLaneLifecycle;
|
|
25
19
|
};
|
|
26
|
-
|
|
20
|
+
type RotatableSigningLaneRecordBuilderArgs = SigningLaneRecordBuilderCommonArgs & {
|
|
27
21
|
readonly holderParticipant: LaneHolderParticipantRecordV1;
|
|
28
22
|
readonly serverParticipant: SigningWorkerParticipantRecordV1;
|
|
29
23
|
};
|
|
30
|
-
|
|
24
|
+
type OwnerAuthSigningLaneRecordBuilderArgs = SigningLaneRecordBuilderCommonArgs & {
|
|
31
25
|
readonly walletAuthMethodId: NonNullable<OwnerPasskeySigningLaneRecord['walletAuthMethodId']>;
|
|
32
26
|
readonly ownerParticipantContinuity: OwnerLaneParticipantContinuityV1;
|
|
33
27
|
};
|
|
34
|
-
|
|
28
|
+
type PrivilegedOwnerSigningLaneRecordBuilderArgs = SigningLaneRecordBuilderCommonArgs & {
|
|
35
29
|
readonly ownerParticipantContinuity: OwnerLaneParticipantContinuityV1;
|
|
36
30
|
};
|
|
37
|
-
export type ActiveSigningLaneReferenceBuilderArgs = SigningLaneReferenceBuilderArgs & {
|
|
38
|
-
readonly lifecycle: ActiveSigningLaneLifecycle;
|
|
39
|
-
readonly materialActivation: MpcMaterialActivationRef;
|
|
40
|
-
};
|
|
41
31
|
export declare function parseWalletKeyVersion(raw: unknown, label?: string): WalletKeyVersion;
|
|
42
32
|
export declare function buildActiveWalletKeyLifecycle(args: {
|
|
43
33
|
readonly activatedAtMs: number;
|
|
@@ -49,11 +39,6 @@ export declare function buildRetiredWalletKeyLifecycle(args: {
|
|
|
49
39
|
}): Extract<WalletKeyLifecycle, {
|
|
50
40
|
readonly state: 'retired';
|
|
51
41
|
}>;
|
|
52
|
-
export declare function buildCompromisedWalletKeyLifecycle(args: {
|
|
53
|
-
readonly compromisedAtMs: number;
|
|
54
|
-
}): Extract<WalletKeyLifecycle, {
|
|
55
|
-
readonly state: 'compromised';
|
|
56
|
-
}>;
|
|
57
42
|
export declare function buildEd25519WalletKeyRecord(args: {
|
|
58
43
|
readonly walletId: WalletId;
|
|
59
44
|
readonly walletKeyId: WalletKeyId;
|
|
@@ -72,36 +57,11 @@ export declare function buildEvmFamilyWalletKeyRecord(args: {
|
|
|
72
57
|
readonly evmAddress: string;
|
|
73
58
|
readonly lifecycle: WalletKeyLifecycle;
|
|
74
59
|
}): EvmFamilyWalletKeyRecord;
|
|
75
|
-
export declare function buildSigningLaneReference(args: SigningLaneReferenceBuilderArgs & {
|
|
76
|
-
readonly laneKind: SigningLaneKind;
|
|
77
|
-
}): SigningLaneReference;
|
|
78
|
-
export declare function buildProvisioningSigningLaneLifecycle(args: {
|
|
79
|
-
readonly revocationEpoch: number;
|
|
80
|
-
readonly startedAtMs: number;
|
|
81
|
-
}): Extract<SigningLaneLifecycle, {
|
|
82
|
-
readonly state: 'provisioning';
|
|
83
|
-
}>;
|
|
84
|
-
export declare function buildPendingReceiptSigningLaneLifecycle(args: {
|
|
85
|
-
readonly revocationEpoch: number;
|
|
86
|
-
readonly startedAtMs: number;
|
|
87
|
-
readonly deliveryDigestB64u: string;
|
|
88
|
-
}): Extract<SigningLaneLifecycle, {
|
|
89
|
-
readonly state: 'pending_receipt';
|
|
90
|
-
}>;
|
|
91
60
|
export declare function buildActiveSigningLaneLifecycle(args: {
|
|
92
61
|
readonly revocationEpoch: number;
|
|
93
62
|
readonly activatedAtMs: number;
|
|
94
63
|
readonly activationReceiptDigestB64u: string;
|
|
95
64
|
}): ActiveSigningLaneLifecycle;
|
|
96
|
-
export declare function buildRevokedSigningLaneLifecycle(args: {
|
|
97
|
-
readonly revocationEpoch: number;
|
|
98
|
-
readonly revokedAtMs: number;
|
|
99
|
-
readonly revokeReason: Extract<SigningLaneLifecycle, {
|
|
100
|
-
readonly state: 'revoked';
|
|
101
|
-
}>['revokeReason'];
|
|
102
|
-
}): Extract<SigningLaneLifecycle, {
|
|
103
|
-
readonly state: 'revoked';
|
|
104
|
-
}>;
|
|
105
65
|
export declare function buildOwnerPasskeySigningLaneRecord(args: OwnerAuthSigningLaneRecordBuilderArgs): OwnerPasskeySigningLaneRecord;
|
|
106
66
|
export declare function buildOwnerEmailOtpSigningLaneRecord(args: OwnerAuthSigningLaneRecordBuilderArgs): OwnerEmailOtpSigningLaneRecord;
|
|
107
67
|
export declare function buildLinkedDeviceSigningLaneRecord(args: RotatableSigningLaneRecordBuilderArgs & {
|
|
@@ -115,14 +75,7 @@ export declare function buildDelegatedExecutionSigningLaneRecord(args: Rotatable
|
|
|
115
75
|
}): DelegatedExecutionSigningLaneRecord;
|
|
116
76
|
export declare function buildRecoverySigningLaneRecord(args: PrivilegedOwnerSigningLaneRecordBuilderArgs): RecoverySigningLaneRecord;
|
|
117
77
|
export declare function buildBreakGlassSigningLaneRecord(args: PrivilegedOwnerSigningLaneRecordBuilderArgs): BreakGlassSigningLaneRecord;
|
|
118
|
-
export declare function buildActiveSigningLaneReference(args: ActiveSigningLaneReferenceBuilderArgs & {
|
|
119
|
-
readonly laneKind: SigningLaneKind;
|
|
120
|
-
}): ActiveSigningLaneReference;
|
|
121
|
-
export declare function parseWalletKeyLifecycle(raw: unknown, label?: string): WalletKeyLifecycle;
|
|
122
|
-
export declare function parseSigningLaneLifecycle(raw: unknown, label?: string): SigningLaneLifecycle;
|
|
123
78
|
export declare function parseWalletKeyRecord(raw: unknown, label?: string): WalletKeyRecord;
|
|
124
|
-
export declare function parseSigningLaneReference(raw: unknown, label?: string): SigningLaneReference;
|
|
125
79
|
export declare function parseSigningLaneRecord(raw: unknown, label?: string): SigningLaneRecord;
|
|
126
|
-
export declare function parseActiveSigningLaneReference(raw: unknown, label?: string): ActiveSigningLaneReference;
|
|
127
80
|
export {};
|
|
128
81
|
//# sourceMappingURL=recordParsers.d.ts.map
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
import type { DomainId, MpcMaterialActivationRef, WalletAuthMethodId, WalletId } from '../utils/domainIds';
|
|
2
2
|
import type { KeyCreationSignerSlot } from '../passkey-custody/primitives';
|
|
3
3
|
import type { Ed25519PublicKeyB64u, Secp256k1CompressedPublicKeyB64u } from '../passkey-custody/primitives';
|
|
4
|
-
import type { NearEd25519SigningKeyId } from '../utils/
|
|
4
|
+
import type { NearEd25519SigningKeyId } from '../utils/registrationIds';
|
|
5
5
|
import type { LaneHolderParticipantRecordV1, LaneParticipantBindingDigestB64u, SigningWorkerParticipantRecordV1 } from './participants';
|
|
6
6
|
import type { LaneShareEpoch, LinkedDeviceId, SigningLaneId, WalletKeyId } from './ids';
|
|
7
7
|
import type { EvmFamilySigningKeySlotId } from './evmFamilySigningKeySlotId';
|
|
@@ -155,6 +155,5 @@ export type BreakGlassSigningLaneRecord = PrivilegedOwnerSigningLaneRecordBase &
|
|
|
155
155
|
readonly authorizationBindingDigestB64u?: never;
|
|
156
156
|
};
|
|
157
157
|
export type SigningLaneRecord = OwnerPasskeySigningLaneRecord | OwnerEmailOtpSigningLaneRecord | LinkedDeviceSigningLaneRecord | DelegatedExecutionSigningLaneRecord | RecoverySigningLaneRecord | BreakGlassSigningLaneRecord;
|
|
158
|
-
export declare function assertNeverSigningLane(value: never): never;
|
|
159
158
|
export {};
|
|
160
159
|
//# sourceMappingURL=records.d.ts.map
|
|
@@ -3,13 +3,14 @@ import type { KeyCreationSignerSlot } from '../passkey-custody/primitives';
|
|
|
3
3
|
import type { MpcMaterialActivationId, MpcMaterialActivationRef, ThresholdEcdsaSessionId, WalletId, LaneHolderRecipientHandleV1 } from '../utils/domainIds';
|
|
4
4
|
import type { EcdsaCapabilityManifestId, EcdsaCapabilityManifestRevision, EcdsaLifecycleId, EcdsaServerGeneration } from '../utils/ecdsaCapabilityActivation';
|
|
5
5
|
import type { CorrelationId, DigestB64u, IsoTimestamp } from '../utils/canonicalPrimitives';
|
|
6
|
-
import type { NearEd25519SigningKeyId } from '../utils/
|
|
6
|
+
import type { NearEd25519SigningKeyId } from '../utils/registrationIds';
|
|
7
7
|
import type { EcdsaThresholdKeyId } from '../threshold/ecdsaDerivationRoleLocalBootstrap';
|
|
8
8
|
import type { EcdsaManifestIdentity, EcdsaRelayerKeyId, Ed25519YaoSuiteId, LaneEnrollmentId, LaneOperationId, LaneOperationIdempotencyKey, LaneShareEpoch, LinkedDeviceEnrollmentId, SigningLaneId, ThresholdEcdsaChainTarget, WalletKeyId } from './ids';
|
|
9
9
|
import type { LaneHolderParticipantId, HpkePublicKeyB64u, HpkePublicKeyDigestB64u, LaneCustodyBindingDigestB64u, LaneParticipantBindingDigestB64u, LaneHolderCustodyBindingId, SigningWorkerParticipantId, SigningWorkerRecipientKeyId, LaneHolderParticipantRecordV1, SigningWorkerParticipantRecordV1 } from './participants';
|
|
10
10
|
import type { EvmFamilySigningKeySlotId } from './evmFamilySigningKeySlotId';
|
|
11
11
|
import type { SigningLaneKind } from './records';
|
|
12
12
|
import type { OwnerLaneParticipantContinuityV1 } from './ownerContinuity';
|
|
13
|
+
import type { ExclusiveUnion } from '../utils/variant';
|
|
13
14
|
export type LinkedDeviceLaneAuthorizationBindingV1 = {
|
|
14
15
|
kind: 'linked_device_enrollment';
|
|
15
16
|
authorizedOperationId: AuthorizedOperationId;
|
|
@@ -51,7 +52,7 @@ export type ProvisionedLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
|
|
|
51
52
|
};
|
|
52
53
|
export type ActiveLaneProtocolSourceV1 = OwnerLaneProtocolSourceV1 | ProvisionedLaneProtocolSourceV1;
|
|
53
54
|
export declare function isProvisionedLaneProtocolSourceV1(source: ActiveLaneProtocolSourceV1): source is ProvisionedLaneProtocolSourceV1;
|
|
54
|
-
|
|
55
|
+
type LaneTargetHolderV1 = {
|
|
55
56
|
participantId: LaneHolderParticipantId;
|
|
56
57
|
participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
|
|
57
58
|
custodyBindingId: LaneHolderCustodyBindingId;
|
|
@@ -82,7 +83,7 @@ export type LaneRefreshTargetV1 = {
|
|
|
82
83
|
expectedTargetState: 'active_previous_epoch';
|
|
83
84
|
priorMaterialActivation: MpcMaterialActivationRef;
|
|
84
85
|
};
|
|
85
|
-
|
|
86
|
+
type EcdsaTargetThresholdSessionBindingV1 = {
|
|
86
87
|
chainTarget: ThresholdEcdsaChainTarget;
|
|
87
88
|
thresholdSessionId: ThresholdEcdsaSessionId;
|
|
88
89
|
participantBindingDigestB64u: string;
|
|
@@ -103,7 +104,7 @@ export type EcdsaTargetCapabilityBindingV1 = {
|
|
|
103
104
|
...EcdsaTargetThresholdSessionBindingV1[]
|
|
104
105
|
];
|
|
105
106
|
};
|
|
106
|
-
|
|
107
|
+
type LaneProtocolJobCommonV1 = {
|
|
107
108
|
operationId: LaneOperationId;
|
|
108
109
|
enrollmentId: LaneEnrollmentId;
|
|
109
110
|
idempotencyKey: LaneOperationIdempotencyKey;
|
|
@@ -116,16 +117,15 @@ export type LaneProtocolJobCommonV1 = {
|
|
|
116
117
|
protocolVersion: 'rotatable_signing_lane_protocol_v1';
|
|
117
118
|
expiresAtMs: number;
|
|
118
119
|
};
|
|
119
|
-
|
|
120
|
+
type LaneCreationOperationV1 = {
|
|
120
121
|
target: LaneCreationTargetV1;
|
|
121
122
|
authorization: LinkedDeviceLaneAuthorizationBindingV1;
|
|
122
123
|
};
|
|
123
|
-
|
|
124
|
+
type LaneRefreshOperationV1 = {
|
|
124
125
|
target: LaneRefreshTargetV1;
|
|
125
126
|
authorization: OwnerLaneRefreshAuthorizationBindingV1;
|
|
126
127
|
};
|
|
127
|
-
|
|
128
|
-
export type Ed25519YaoLaneJobCurveV1 = {
|
|
128
|
+
type Ed25519YaoLaneJobCurveV1 = {
|
|
129
129
|
kind: 'ed25519_yao_lane_job_v1';
|
|
130
130
|
keyFamily: 'ed25519';
|
|
131
131
|
registeredPublicKeyB64u: string;
|
|
@@ -161,12 +161,12 @@ type EcdsaAdditiveLaneJobCurveV1 = {
|
|
|
161
161
|
export type Ed25519YaoLaneCreationJobV1 = LaneProtocolJobCommonV1 & Ed25519YaoLaneJobCurveV1 & LaneCreationOperationV1 & {
|
|
162
162
|
yaoRequestKind: 'lane_provisioning';
|
|
163
163
|
};
|
|
164
|
-
|
|
164
|
+
type Ed25519YaoLaneRefreshJobV1 = LaneProtocolJobCommonV1 & Ed25519YaoLaneJobCurveV1 & LaneRefreshOperationV1 & {
|
|
165
165
|
yaoRequestKind: 'lane_refresh';
|
|
166
166
|
};
|
|
167
167
|
export type Ed25519YaoLaneJobV1 = Ed25519YaoLaneCreationJobV1 | Ed25519YaoLaneRefreshJobV1;
|
|
168
168
|
export type EcdsaAdditiveLaneCreationJobV1 = LaneProtocolJobCommonV1 & LaneCreationOperationV1 & EcdsaAdditiveLaneJobCurveV1;
|
|
169
|
-
|
|
169
|
+
type EcdsaAdditiveLaneRefreshJobV1 = LaneProtocolJobCommonV1 & LaneRefreshOperationV1 & EcdsaAdditiveLaneJobCurveV1;
|
|
170
170
|
export type EcdsaAdditiveLaneJobV1 = EcdsaAdditiveLaneCreationJobV1 | EcdsaAdditiveLaneRefreshJobV1;
|
|
171
171
|
export type RotatableSigningLaneJobV1 = Ed25519YaoLaneJobV1 | EcdsaAdditiveLaneJobV1;
|
|
172
172
|
export type LaneProtocolCommitReceiptV1 = {
|
|
@@ -219,8 +219,8 @@ export type LaneServerActivationReceiptV1 = {
|
|
|
219
219
|
transcriptHashB64u: string;
|
|
220
220
|
activatedAtMs: number;
|
|
221
221
|
};
|
|
222
|
-
|
|
223
|
-
|
|
222
|
+
type LaneProtocolAbortReason = 'cancelled' | 'expired' | 'revoked_before_commit';
|
|
223
|
+
type LaneProtocolCompletionReason = 'exact_redelivery_required' | 'recovery_required';
|
|
224
224
|
export type LaneProtocolLifecycle = {
|
|
225
225
|
state: 'preparing';
|
|
226
226
|
startedAtMs: number;
|
|
@@ -276,10 +276,6 @@ export type LaneProtocolRecordV1 = {
|
|
|
276
276
|
job: RotatableSigningLaneJobV1;
|
|
277
277
|
lifecycle: LaneProtocolLifecycle;
|
|
278
278
|
};
|
|
279
|
-
export type EcdsaAdditiveLaneTranscriptPreambleV1 = {
|
|
280
|
-
kind: 'ecdsa_additive_lane_transcript_preamble_v1';
|
|
281
|
-
job: EcdsaAdditiveLaneJobV1;
|
|
282
|
-
};
|
|
283
279
|
export type EcdsaAdditiveLaneHolderRoundV1 = {
|
|
284
280
|
kind: 'ecdsa_additive_lane_holder_round_v1';
|
|
285
281
|
preambleHashB64u: string;
|
|
@@ -289,23 +285,6 @@ export type EcdsaAdditiveLaneHolderRoundV1 = {
|
|
|
289
285
|
holderAttestationB64u: string;
|
|
290
286
|
holderCommittedAtMs: number;
|
|
291
287
|
};
|
|
292
|
-
export type EcdsaAdditiveLaneServerRoundV1 = {
|
|
293
|
-
kind: 'ecdsa_additive_lane_server_round_v1';
|
|
294
|
-
preambleHashB64u: string;
|
|
295
|
-
holderRoundHashB64u: string;
|
|
296
|
-
targetServerPublicCommitment33B64u: string;
|
|
297
|
-
sealedTargetServerMaterialDigestB64u: string;
|
|
298
|
-
targetThresholdSessionSetDigestB64u: string;
|
|
299
|
-
publicIdentityRelationDigestB64u: string;
|
|
300
|
-
serverAttestationB64u: string;
|
|
301
|
-
serverCommittedAtMs: number;
|
|
302
|
-
};
|
|
303
|
-
export type EcdsaAdditiveLaneTranscriptV1 = {
|
|
304
|
-
kind: 'ecdsa_additive_lane_transcript_v1';
|
|
305
|
-
preambleHashB64u: string;
|
|
306
|
-
holderRoundHashB64u: string;
|
|
307
|
-
serverRoundHashB64u: string;
|
|
308
|
-
};
|
|
309
288
|
export type LaneEnrollmentManifestChildV1 = {
|
|
310
289
|
operationId: LaneOperationId;
|
|
311
290
|
walletKeyId: WalletKeyId;
|
|
@@ -446,7 +425,7 @@ export type Ed25519ServerRetirementReceiptV1 = {
|
|
|
446
425
|
retiredAtMs: number;
|
|
447
426
|
};
|
|
448
427
|
export type LaneServerRetirementReceiptV1 = EcdsaServerRetirementReceiptV1 | Ed25519ServerRetirementReceiptV1;
|
|
449
|
-
|
|
428
|
+
type LaneProductEpochRecordCommonV1 = {
|
|
450
429
|
kind: 'lane_product_epoch_record_v1';
|
|
451
430
|
walletId: WalletId;
|
|
452
431
|
walletKeyId: WalletKeyId;
|
|
@@ -778,22 +757,19 @@ export type EcdsaLaneProtocolWasmV1 = {
|
|
|
778
757
|
prepareEcdsaAdditiveLaneHolderRoundV1(input: EcdsaAdditiveLaneJobV1): Promise<EcdsaAdditiveLaneHolderPreparationV1>;
|
|
779
758
|
};
|
|
780
759
|
export type { LaneHolderRecipientHandleV1 } from '../utils/domainIds';
|
|
781
|
-
|
|
760
|
+
type LaneHolderRecipientDescriptorV1 = {
|
|
782
761
|
recipientHandle: LaneHolderRecipientHandleV1;
|
|
783
762
|
hpkePublicKeyB64u: HpkePublicKeyB64u;
|
|
784
763
|
hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
|
|
785
764
|
};
|
|
786
|
-
export type LaneHolderPackageWireV1 = {
|
|
765
|
+
export type LaneHolderPackageWireV1 = ExclusiveUnion<{
|
|
787
766
|
kind: 'ed25519_yao_lane_holder_package_set_v1';
|
|
788
767
|
deriverAEncryptedPackageJson: string;
|
|
789
768
|
deriverBEncryptedPackageJson: string;
|
|
790
|
-
ecdsaEncryptedMaterialEnvelopeJson?: never;
|
|
791
769
|
} | {
|
|
792
770
|
kind: 'ecdsa_additive_lane_holder_package_v1';
|
|
793
771
|
ecdsaEncryptedMaterialEnvelopeJson: string;
|
|
794
|
-
|
|
795
|
-
deriverBEncryptedPackageJson?: never;
|
|
796
|
-
};
|
|
772
|
+
}>;
|
|
797
773
|
export type EcdsaAdditiveLaneHolderPreparationV1 = {
|
|
798
774
|
kind: 'ecdsa_additive_lane_holder_preparation_v1';
|
|
799
775
|
holderRound: EcdsaAdditiveLaneHolderRoundV1;
|
|
@@ -808,12 +784,12 @@ export type Ed25519YaoLaneClientCompletionV1 = {
|
|
|
808
784
|
kind: 'ed25519_yao_lane_holder_package_set_v1';
|
|
809
785
|
}>;
|
|
810
786
|
};
|
|
811
|
-
|
|
787
|
+
type SealedLaneHolderMaterialV1 = {
|
|
812
788
|
sealedHolderMaterialB64u: string;
|
|
813
789
|
sealedHolderRecordDigestB64u: DigestB64u;
|
|
814
790
|
verifiedHolderCiphertextDigestSetB64u: DigestB64u;
|
|
815
791
|
};
|
|
816
|
-
|
|
792
|
+
type VerifiedLaneHolderPackageV1 = {
|
|
817
793
|
verifiedHolderCiphertextDigestSetB64u: DigestB64u;
|
|
818
794
|
};
|
|
819
795
|
export type WasmEd25519YaoLaneClientV1 = {
|
|
@@ -1,32 +1,13 @@
|
|
|
1
1
|
import { type DigestB64u } from '../utils/canonicalPrimitives';
|
|
2
|
-
import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1,
|
|
3
|
-
export declare function encodeEd25519YaoLaneJobTranscriptV1(value: Ed25519YaoLaneJobV1): Uint8Array;
|
|
4
|
-
export declare function computeEd25519YaoLaneJobTranscriptDigestV1(value: Ed25519YaoLaneJobV1): Promise<string>;
|
|
2
|
+
import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, EcdsaServerRetirementReceiptV1, Ed25519ServerRetirementReceiptV1, Ed25519YaoLaneJobV1, LaneEnrollmentManifestV1, RevokeSigningLaneV1 } from './rotation';
|
|
5
3
|
export declare function computeEd25519YaoLaneSessionDigestV1(value: Ed25519YaoLaneJobV1): Promise<string>;
|
|
6
|
-
export declare function encodeEcdsaAdditiveLaneTranscriptPreambleV1(value: EcdsaAdditiveLaneTranscriptPreambleV1): Uint8Array;
|
|
7
|
-
export declare function encodeEcdsaAdditiveLaneHolderRoundV1(value: EcdsaAdditiveLaneHolderRoundV1): Uint8Array;
|
|
8
|
-
export declare function encodeEcdsaAdditiveLaneServerRoundV1(value: EcdsaAdditiveLaneServerRoundV1): Uint8Array;
|
|
9
|
-
export declare function encodeEcdsaAdditiveLaneTranscriptV1(value: EcdsaAdditiveLaneTranscriptV1): Uint8Array;
|
|
10
|
-
export declare function computeEcdsaAdditiveLaneTranscriptPreambleDigestV1(value: EcdsaAdditiveLaneTranscriptPreambleV1): Promise<string>;
|
|
11
|
-
export declare function computeEcdsaAdditiveLaneHolderRoundDigestV1(value: EcdsaAdditiveLaneHolderRoundV1): Promise<string>;
|
|
12
|
-
export declare function computeEcdsaAdditiveLaneServerRoundDigestV1(value: EcdsaAdditiveLaneServerRoundV1): Promise<string>;
|
|
13
|
-
export declare function computeEcdsaAdditiveLaneTranscriptDigestV1(value: EcdsaAdditiveLaneTranscriptV1): Promise<string>;
|
|
14
|
-
export declare function encodeLaneEnrollmentManifestV1(value: LaneEnrollmentManifestV1): Uint8Array;
|
|
15
4
|
export declare function computeLaneEnrollmentManifestDigestV1(value: LaneEnrollmentManifestV1): Promise<string>;
|
|
16
|
-
export declare function encodeAggregateLaneActivationReceiptV1(value: AggregateLaneActivationReceiptV1): Uint8Array;
|
|
17
5
|
export declare function computeAggregateLaneActivationReceiptDigestV1(value: AggregateLaneActivationReceiptV1): Promise<string>;
|
|
18
|
-
export declare function encodeAggregateLaneRevocationReceiptV1(value: AggregateLaneRevocationReceiptV1): Uint8Array;
|
|
19
6
|
export declare function computeAggregateLaneRevocationReceiptDigestV1(value: AggregateLaneRevocationReceiptV1): Promise<string>;
|
|
20
|
-
export declare function encodeRevokeSigningLaneV1(value: RevokeSigningLaneV1): Uint8Array;
|
|
21
7
|
export declare function computeRevokeSigningLaneDigestV1(value: RevokeSigningLaneV1): Promise<string>;
|
|
22
8
|
export declare function encodeLaneProtocolCommitReceiptV1(value: import('./rotation').LaneProtocolCommitReceiptV1): Uint8Array;
|
|
23
|
-
export declare function computeLaneProtocolCommitReceiptDigestV1(value: import('./rotation').LaneProtocolCommitReceiptV1): Promise<DigestB64u>;
|
|
24
9
|
export declare function encodeLaneHolderDeliveryReceiptV1(value: import('./rotation').LaneHolderDeliveryReceiptV1): Uint8Array;
|
|
25
10
|
export declare function encodeLaneServerActivationReceiptV1(value: import('./rotation').LaneServerActivationReceiptV1): Uint8Array;
|
|
26
|
-
export declare function encodeEcdsaServerRetirementReceiptCanonicalPayloadV1(value: EcdsaServerRetirementReceiptV1): Uint8Array;
|
|
27
11
|
export declare function computeEcdsaServerRetirementReceiptDigestV1(value: EcdsaServerRetirementReceiptV1): Promise<DigestB64u>;
|
|
28
|
-
export declare function encodeSigningWorkerLaneMaterialIdentityV1(value: SigningWorkerLaneMaterialIdentityV1): Uint8Array;
|
|
29
|
-
export declare function encodeEd25519ServerRetirementReceiptCanonicalPayloadV1(value: Ed25519ServerRetirementReceiptV1): Uint8Array;
|
|
30
12
|
export declare function computeEd25519ServerRetirementReceiptDigestV1(value: Ed25519ServerRetirementReceiptV1): Promise<DigestB64u>;
|
|
31
|
-
export declare function encodeLaneProductEpochRecordV1(value: LaneProductEpochRecordV1): Uint8Array;
|
|
32
13
|
//# sourceMappingURL=rotationDigests.d.ts.map
|
|
@@ -1,6 +1,6 @@
|
|
|
1
|
-
import type {
|
|
1
|
+
import type { LaneEnrollmentLifecycleV1, LaneProductEpochActiveV1, LaneProductEpochPendingVisibilityV1, LaneProductEpochRevocationPendingV1, LaneProductEpochRetiredV1, LaneProductEpochRevokedV1, LaneProtocolLifecycle } from './rotation';
|
|
2
2
|
import type { LaneOperationId } from './ids';
|
|
3
|
-
|
|
3
|
+
type LaneProtocolLifecycleTransitionV1 = {
|
|
4
4
|
action: 'await_protocol_commitment';
|
|
5
5
|
atMs: number;
|
|
6
6
|
} | {
|
|
@@ -32,20 +32,7 @@ export type LaneProtocolLifecycleTransitionV1 = {
|
|
|
32
32
|
atMs: number;
|
|
33
33
|
};
|
|
34
34
|
export declare function transitionLaneProtocolLifecycleV1(current: LaneProtocolLifecycle, transition: LaneProtocolLifecycleTransitionV1): LaneProtocolLifecycle;
|
|
35
|
-
|
|
36
|
-
state: 'preparing';
|
|
37
|
-
}>;
|
|
38
|
-
export declare function markLaneProtocolCompletionRequiredV1(current: Extract<LaneProtocolLifecycle, {
|
|
39
|
-
state: 'committed_awaiting_holder_delivery';
|
|
40
|
-
}>, recoveryReason: 'exact_redelivery_required' | 'recovery_required'): Extract<LaneProtocolLifecycle, {
|
|
41
|
-
state: 'committed_completion_required';
|
|
42
|
-
}>;
|
|
43
|
-
export declare function resumeLaneProtocolCompletionV1(current: Extract<LaneProtocolLifecycle, {
|
|
44
|
-
state: 'committed_completion_required';
|
|
45
|
-
}>, atMs: number): Extract<LaneProtocolLifecycle, {
|
|
46
|
-
state: 'committed_awaiting_holder_delivery';
|
|
47
|
-
}>;
|
|
48
|
-
export type LaneEnrollmentLifecycleTransitionV1 = {
|
|
35
|
+
type LaneEnrollmentLifecycleTransitionV1 = {
|
|
49
36
|
action: 'mark_committed_completion_required';
|
|
50
37
|
committedChildOperationIds: readonly [LaneOperationId, ...LaneOperationId[]];
|
|
51
38
|
markedAtMs: number;
|
|
@@ -87,13 +74,5 @@ export declare function completeLaneProductEpochRevocationV1(current: LaneProduc
|
|
|
87
74
|
readonly revocationReceiptDigestB64u: string;
|
|
88
75
|
readonly revokedAtMs: number;
|
|
89
76
|
}): LaneProductEpochRevokedV1;
|
|
90
|
-
export
|
|
91
|
-
export type LaneActivationReceiptInputV1 = {
|
|
92
|
-
readonly aggregateReceipt: AggregateLaneActivationReceiptV1;
|
|
93
|
-
readonly manifestDigestB64u: string;
|
|
94
|
-
};
|
|
95
|
-
export type LaneRevocationReceiptInputV1 = {
|
|
96
|
-
readonly aggregateReceipt: AggregateLaneRevocationReceiptV1;
|
|
97
|
-
readonly manifestDigestB64u: string;
|
|
98
|
-
};
|
|
77
|
+
export {};
|
|
99
78
|
//# sourceMappingURL=rotationLifecycle.d.ts.map
|