@seams/wallet-server 0.6.2 → 0.7.3
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/THIRD_PARTY_NOTICES.md +1 -105
- package/artifact-manifest.json +147 -32
- package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/router/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/router/index.js +2 -2
- package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
- package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -0
- package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
- package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
- package/cloudflare-router-ab/migrations/deriver-a/0012_tenant_root_creation_tombstones.sql +20 -0
- package/cloudflare-router-ab/migrations/deriver-a/0013_tenant_root_root_use_admissions.sql +32 -0
- package/cloudflare-router-ab/migrations/deriver-a/0014_tenant_root_refresh_supersessions.sql +24 -0
- package/cloudflare-router-ab/migrations/deriver-a/0015_tenant_root_root_use_attempts.sql +56 -0
- package/cloudflare-router-ab/migrations/deriver-a/0016_tenant_root_root_use_admission_settlement.sql +5 -0
- package/cloudflare-router-ab/migrations/deriver-a/0017_tenant_root_root_use_admission_claims.sql +64 -0
- package/cloudflare-router-ab/migrations/deriver-a/0018_tenant_root_recovery_retention_keys.sql +12 -0
- package/cloudflare-router-ab/migrations/deriver-b/0012_tenant_root_creation_tombstones.sql +20 -0
- package/cloudflare-router-ab/migrations/deriver-b/0013_tenant_root_root_use_admissions.sql +32 -0
- package/cloudflare-router-ab/migrations/deriver-b/0014_tenant_root_refresh_supersessions.sql +24 -0
- package/cloudflare-router-ab/migrations/deriver-b/0015_tenant_root_root_use_attempts.sql +56 -0
- package/cloudflare-router-ab/migrations/deriver-b/0016_tenant_root_root_use_admission_settlement.sql +5 -0
- package/cloudflare-router-ab/migrations/deriver-b/0017_tenant_root_root_use_admission_claims.sql +64 -0
- package/cloudflare-router-ab/migrations/deriver-b/0018_tenant_root_recovery_retention_keys.sql +12 -0
- package/cloudflare-router-ab/scripts/bootstrap-local-tenant-root.mjs +81 -16
- package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +102 -9
- package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +4 -1
- package/cloudflare-router-ab/wrangler.deriver-a.toml +24 -0
- package/cloudflare-router-ab/wrangler.router.toml +13 -0
- package/dist/esm/authorization/capabilityPolicy.js +1 -1
- package/dist/esm/authorization/domain.js +2 -2
- package/dist/esm/authorization/factorEvidence.js +6 -100
- package/dist/esm/authorization/service.js +42 -2
- package/dist/esm/authorization/vaultProxyUse.js +5 -10
- package/dist/esm/cloud-host.js +17 -12
- package/dist/esm/core/EmailOtpRecords.js +19 -1
- package/dist/esm/core/EmailOtpStores.js +323 -924
- package/dist/esm/core/IdentityStore.js +67 -345
- package/dist/esm/core/NearPublicKeyStore.js +21 -63
- package/dist/esm/core/RegistrationCeremonyStore.js +3 -1793
- package/dist/esm/core/SessionService.js +7 -30
- package/dist/esm/core/ThresholdService/config.js +1 -82
- package/dist/esm/core/ThresholdService/kv.js +3 -3
- package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +37 -5
- package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.js +4 -74
- package/dist/esm/core/ThresholdService/routerAbNormalSigningPolicy.js +3 -10
- package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +15 -51
- package/dist/esm/core/ThresholdService/stores/KeyStore.js +3 -3
- package/dist/esm/core/ThresholdService/stores/SessionStore.js +5 -81
- package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +191 -372
- package/dist/esm/core/ThresholdService/stores/exportReplayGuard.js +7 -0
- package/dist/esm/core/ThresholdService/validation.js +18 -230
- package/dist/esm/core/WalletAuthMethodStore.js +22 -79
- package/dist/esm/core/WalletStore.js +62 -191
- package/dist/esm/core/WebAuthnAuthenticatorStore.js +57 -340
- package/dist/esm/core/WebAuthnCredentialBindingStore.js +90 -369
- package/dist/esm/core/WebAuthnLoginChallengeStore.js +17 -397
- package/dist/esm/core/WebAuthnSyncChallengeStore.js +17 -397
- package/dist/esm/core/authService/AuthService.js +2 -19
- package/dist/esm/core/authService/bytes.js +1 -4
- package/dist/esm/core/authService/emailOtpChallengeOperations.js +2 -5
- package/dist/esm/core/authService/emailOtpChallengeProof.js +10 -41
- package/dist/esm/core/authService/emailOtpChallengeVerification.js +19 -90
- package/dist/esm/core/authService/emailOtpChallenges.js +11 -46
- package/dist/esm/core/authService/emailOtpConfig.js +1 -32
- package/dist/esm/core/authService/emailOtpDelivery.js +10 -45
- package/dist/esm/core/authService/emailOtpEnrollment.js +9 -40
- package/dist/esm/core/authService/emailOtpGrant.js +9 -40
- package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +15 -193
- package/dist/esm/core/authService/emailOtpSeal.js +5 -20
- package/dist/esm/core/authService/emailOtpUnlock.js +20 -110
- package/dist/esm/core/authService/googleEmailOtpRegistration.js +29 -116
- package/dist/esm/core/authService/identity.js +5 -20
- package/dist/esm/core/authService/nearPrivateKeySigning.js +7 -15
- package/dist/esm/core/authService/nearPublicKeyMetadata.js +6 -25
- package/dist/esm/core/authService/nearTransactions.js +2 -1
- package/dist/esm/core/authService/oidcVerification.js +25 -38
- package/dist/esm/core/authService/rateLimits.js +3 -36
- package/dist/esm/core/authService/registrationThresholdHelpers.js +2 -103
- package/dist/esm/core/authService/storeRegistry.js +2 -13
- package/dist/esm/core/authService/thresholdEcdsaKeyInventory.js +6 -6
- package/dist/esm/core/authService/webauthn.js +52 -241
- package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -6
- package/dist/esm/core/authService/webauthnVerificationOutcomes.js +41 -0
- package/dist/esm/core/authService/webauthnWalletBinding.js +2 -122
- package/dist/esm/core/d1EcdsaSignerRead.js +76 -0
- package/dist/esm/core/d1IdentityStore.js +46 -139
- package/dist/esm/core/d1TenantStore.js +82 -0
- package/dist/esm/core/d1WalletAuthMethodStore.js +92 -143
- package/dist/esm/core/d1WalletStore.js +28 -36
- package/dist/esm/core/deviceLinking/linkedDeviceEmailOtpGrant.js +10 -12
- package/dist/esm/core/deviceLinking/linkedDeviceManagement.js +25 -3
- package/dist/esm/core/deviceLinking/linkedDeviceSession.js +6 -895
- package/dist/esm/core/deviceLinking/linkedDeviceSessionApproval.js +100 -0
- package/dist/esm/core/deviceLinking/linkedDeviceSessionRecord.js +662 -0
- package/dist/esm/core/deviceLinking/requestProof.js +13 -4
- package/dist/esm/core/ecdsaMaterialReadSnapshot.js +85 -0
- package/dist/esm/core/emailOtpD1Statements.js +383 -0
- package/dist/esm/core/hostedAccountIds.js +2 -2
- package/dist/esm/core/keyMaterialBrands.js +2 -48
- package/dist/esm/core/nearRelayerAccountProvisioning.js +27 -155
- package/dist/esm/core/nearSignerWasmRuntime.js +1 -4
- package/dist/esm/core/rpcClients/near/NearClient.js +15 -218
- package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +1 -1
- package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +2 -4
- package/dist/esm/core/signingLanes/LaneLifecycleStore.js +0 -24
- package/dist/esm/core/signingLanes/WalletExecutionLaneProjection.js +8 -11
- package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +3 -8
- package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +1 -4
- package/dist/esm/core/signingMaterial/ordinaryInactiveSignerMaterialReservation.js +2 -5
- package/dist/esm/core/storeBackends.js +208 -0
- package/dist/esm/core/thresholdEcdsaChainTarget.js +2 -10
- package/dist/esm/core/webAuthnD1Statements.js +92 -0
- package/dist/esm/core/webAuthnStoreBackends.js +198 -0
- package/dist/esm/hosted-wallet-gateway.js +34 -17
- package/dist/esm/index.js +2 -2
- package/dist/esm/local-hosted-wallet-gateway-worker.js +2 -23
- package/dist/esm/localHostedWalletGatewayHandler.js +312 -0
- package/dist/esm/localIntendedEcdsaFinalizeFault.js +85 -0
- package/dist/esm/localIntendedLinkExecuteFault.js +140 -0
- package/dist/esm/localIntendedMaterialAdmissionFault.js +176 -0
- package/dist/esm/localIntendedPresignCancellation.js +44 -0
- package/dist/esm/localIntendedRevokeFault.js +106 -0
- package/dist/esm/localIntendedSessionAdmissionFault.js +139 -0
- package/dist/esm/localIntendedYaoExportFault.js +117 -0
- package/dist/esm/localIntendedYaoFault.js +13 -16
- package/dist/esm/localIntendedYaoFinalizeFault.js +99 -0
- package/dist/esm/localIntendedYaoRecoveryFault.js +102 -0
- package/dist/esm/localIntendedYaoSigningFault.js +127 -0
- package/dist/esm/router/auth/authRequestValidation.js +1 -1
- package/dist/esm/router/auth/commonRouterUtils.js +34 -12
- package/dist/esm/router/auth/walletSessionFailure.js +3 -19
- package/dist/esm/router/auth/webAuthnCredentialCodecs.js +4 -15
- package/dist/esm/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.js +24 -0
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.js +2 -6
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +87 -89
- package/dist/esm/router/cloudflare/d1/auth/walletSessionCredentialReaders.js +76 -0
- package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +215 -0
- package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +423 -308
- package/dist/esm/router/cloudflare/d1/authorization/d1VaultProxyStore.js +8 -12
- package/dist/esm/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.js +14 -0
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +107 -66
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +3 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +1 -19
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceManagementService.js +4 -3
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +52 -9
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.js +100 -0
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.js +7 -10
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +33 -124
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.js +2 -2
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +10 -18
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.js +6 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkSourceReader.js +3 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/index.js +4 -4
- package/dist/esm/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.js +69 -0
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +39 -68
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.js +69 -0
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.js +2 -2
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.js +12 -55
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.js +17 -80
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +26 -71
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +20 -3
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpDeliveryRuntime.js +6 -25
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +7 -94
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +5 -47
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +38 -170
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +24 -87
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +9 -32
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.js +5 -20
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +15 -134
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +54 -260
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +24 -111
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +1 -28
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityService.js +9 -40
- package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +5 -18
- package/dist/esm/router/cloudflare/d1/oidc/d1OidcBoundary.js +18 -91
- package/dist/esm/router/cloudflare/d1/oidc/d1OidcVerificationService.js +6 -30
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +7 -18
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +25 -80
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.js +24 -15
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.js +23 -253
- package/dist/esm/router/cloudflare/d1/registration/d1EvmFamilyEcdsaRegistrationBranch.js +5 -20
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +20 -39
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +31 -73
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +4 -1
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +10 -31
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +6 -30
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +286 -220
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +5 -3
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +2 -2
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js +4 -7
- package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +139 -27
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -1
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +2 -1
- package/dist/esm/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.js +2 -60
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +158 -19
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.js +19 -49
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.js +100 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +132 -33
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +83 -4
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +45 -217
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +10 -13
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +22 -116
- package/dist/esm/router/cloudflare/durableObjects/thresholdStore.js +59 -66
- package/dist/esm/router/cloudflare/runtime/createSelfHostedCloudflareSigningWorker.js +1 -2
- package/dist/esm/router/cloudflare/runtime/routerAbPrewarm.js +2 -2
- package/dist/esm/router/cloudflare/runtime/staticWalletConsoleBinding.js +5 -20
- package/dist/esm/router/cloudflare/runtime/tenantRootCreationGrant.js +2 -9
- package/dist/esm/router/cloudflare/runtime/walletConsoleTenantRootLineage.js +11 -2
- package/dist/esm/router/cloudflare/runtime/walletControlOps.js +2 -1
- package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +7 -7
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +4 -3
- package/dist/esm/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.js +48 -21
- package/dist/esm/router/cloudflare.js +13343 -14372
- package/dist/esm/router/domains/ecdsa/routerAbEcdsaStrictRegistration.js +16 -5
- package/dist/esm/router/domains/ecdsa/thresholdEcdsaRequestValidation.js +2 -8
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.js +33 -0
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +17 -9
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +29 -431
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +7 -2
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPersistence.js +5 -8
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.js +2 -1
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.js +70 -2
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +134 -169
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +77 -162
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.js +205 -51
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +29 -11
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryWalletSessionAuthorization.js +3 -6
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.js +182 -55
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.js +2 -1
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.js +63 -247
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js +9 -27
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.js +87 -132
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.js +39 -55
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.js +5 -4
- package/dist/esm/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.js +45 -0
- package/dist/esm/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.js +1 -1
- package/dist/esm/router/domains/emailOtp/emailOtpExportPolicy.js +1 -42
- package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +1 -6
- package/dist/esm/router/domains/emailOtp/emailOtpRouteHandlers.js +15 -62
- package/dist/esm/router/domains/emailOtp/emailOtpSessionRouteHelpers.js +1 -142
- package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.js +1 -1
- package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -2
- package/dist/esm/router/domains/passkeyCustody/walletRecoveryFinalization.js +23 -45
- package/dist/esm/router/domains/passkeyCustody/walletRecoveryKeyManifest.js +5 -5
- package/dist/esm/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.js +1 -1
- package/dist/esm/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.js +836 -0
- package/dist/esm/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.js +698 -0
- package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmission.js +210 -0
- package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.js +16 -15
- package/dist/esm/router/domains/signingOperations/routerAbOperationStepUp.js +314 -0
- package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +62 -2159
- package/dist/esm/router/domains/signingOperations/walletExecutionAdmission.js +1 -4
- package/dist/esm/router/domains/tenantRoot/tenantRootIdentityResolution.js +8 -14
- package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +18 -22
- package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +3 -4
- package/dist/esm/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.js +2 -2
- package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +127 -339
- package/dist/esm/router/express.js +7172 -7997
- package/dist/esm/router/framework/http.js +5 -4
- package/dist/esm/router/framework/ror/normalize.js +1 -1
- package/dist/esm/router/framework/routerApiRouteSurface.js +1 -1
- package/dist/esm/router/framework/runtimeSnapshotConsumer.js +8 -35
- package/dist/esm/router/node/nodeHostedWalletGateway.js +64 -0
- package/dist/esm/router/node/nodeHostedWalletGatewayCheck.js +163 -0
- package/dist/esm/router/node/nodeHostedWalletGatewayMain.js +120 -0
- package/dist/esm/router/node/nodeHttp.js +79 -0
- package/dist/esm/router/node/nodeSqlite.js +43 -0
- package/dist/esm/router/node/signerSqlMigrations.js +48 -0
- package/dist/esm/router/transport/fetch/createFetchRouter.js +4 -7
- package/dist/esm/router/transport/fetch/routes/auth.js +9 -41
- package/dist/esm/router/transport/fetch/routes/deviceLinking.js +16 -18
- package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +8 -27
- package/dist/esm/router/transport/fetch/routes/deviceManagement.js +15 -24
- package/dist/esm/router/transport/fetch/routes/nearPublicKeys.js +4 -16
- package/dist/esm/router/transport/fetch/routes/normalSigningRouterProxy.js +3 -16
- package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +144 -461
- package/dist/esm/router/transport/fetch/routes/sessions.js +5 -4
- package/dist/esm/router/transport/fetch/routes/syncAccount.js +12 -42
- package/dist/esm/router/transport/fetch/routes/syncAccountBootstrap.js +2 -2
- package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +96 -102
- package/dist/esm/router/transport/fetch/routes/thresholdEd25519.js +52 -27
- package/dist/esm/router/transport/fetch/routes/walletExecutionLanePreflight.js +4 -1
- package/dist/esm/router/transport/fetch/routes/webauthnAuthenticators.js +4 -16
- package/dist/esm/shared-ts/src/authorization/capabilityKinds.js +1 -1
- package/dist/esm/shared-ts/src/authorization/delegatedAuthority.js +1 -1
- package/dist/esm/shared-ts/src/authorization/operationFingerprint.js +1 -2
- package/dist/esm/shared-ts/src/authorization/walletAuthority.js +99 -227
- package/dist/esm/shared-ts/src/authorization/walletCustodyOperation.js +4 -6
- package/dist/esm/shared-ts/src/authorization/walletSignerActivationEquality.js +12 -0
- package/dist/esm/shared-ts/src/device-linking/activeWalletSession.js +74 -0
- package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +50 -0
- package/dist/esm/shared-ts/src/device-linking/committedSignerPackages.js +10 -14
- package/dist/esm/shared-ts/src/device-linking/delegatedActivationPlan.js +3 -5
- package/dist/esm/shared-ts/src/device-linking/deviceManagement.js +55 -0
- package/dist/esm/shared-ts/src/device-linking/digests.js +10 -65
- package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +14 -16
- package/dist/esm/shared-ts/src/device-linking/index.js +4 -1
- package/dist/esm/shared-ts/src/device-linking/parsers.js +510 -1063
- package/dist/esm/shared-ts/src/device-linking/requestProof.js +5 -14
- package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +10 -16
- package/dist/esm/shared-ts/src/device-linking/walletSessionCredentialDelivery.js +9 -9
- package/dist/esm/shared-ts/src/device-linking/wireFields.js +59 -0
- package/dist/esm/shared-ts/src/near/nearClient.js +252 -0
- package/dist/esm/shared-ts/src/passkey-custody/credentialActivity.js +3 -1
- package/dist/esm/shared-ts/src/passkey-custody/custodyEnvelope.js +7 -5
- package/dist/esm/shared-ts/src/passkey-custody/custodySecretBinding.js +6 -4
- package/dist/esm/shared-ts/src/passkey-custody/primitives.js +9 -39
- package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -5
- package/dist/esm/shared-ts/src/signing-lanes/index.js +3 -3
- package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +8 -19
- package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +5 -14
- package/dist/esm/shared-ts/src/signing-lanes/participants.js +2 -5
- package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +7 -5
- package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +6 -45
- package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +423 -1511
- package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +323 -0
- package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +59 -0
- package/dist/esm/shared-ts/src/tenant-root/tenantRootIdentifier.js +12 -0
- package/dist/esm/shared-ts/src/tenant-root/tenantRootIdentity.js +2 -9
- package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +2 -5
- package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +1 -2
- package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +49 -0
- package/dist/esm/shared-ts/src/utils/addAuthMethodRegistration.js +3 -4
- package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +8 -1
- package/dist/esm/shared-ts/src/utils/digestEncoding.js +63 -0
- package/dist/esm/shared-ts/src/utils/ecdsaKeyFactsInventory.js +2 -4
- package/dist/esm/shared-ts/src/utils/ecdsaServerTiming.js +0 -1
- package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +5 -3
- package/dist/esm/shared-ts/src/utils/exactKeys.js +17 -0
- package/dist/esm/shared-ts/src/utils/exactRecord.js +44 -0
- package/dist/esm/shared-ts/src/utils/failure.js +20 -0
- package/dist/esm/shared-ts/src/utils/registrationAuthMethodInput.js +127 -0
- package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +2 -2
- package/dist/esm/shared-ts/src/utils/registrationIds.js +280 -0
- package/dist/esm/shared-ts/src/utils/registrationIntent.js +7 -1182
- package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +426 -0
- package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +11 -136
- package/dist/esm/shared-ts/src/utils/routerAbEd25519Yao.js +3 -163
- package/dist/esm/shared-ts/src/utils/routerAbEd25519YaoDigests.js +160 -0
- package/dist/esm/shared-ts/src/utils/routerAbNormalSigningIdentity.js +1 -4
- package/dist/esm/shared-ts/src/utils/routerAbPublicKeyset.js +7 -15
- package/dist/esm/shared-ts/src/utils/thresholdEcdsaChainTarget.js +9 -0
- package/dist/esm/shared-ts/src/utils/validation.js +37 -6
- package/dist/esm/shared-ts/src/utils/walletAuthMethodRecord.js +362 -0
- package/dist/esm/shared-ts/src/utils/wireSchema.js +77 -0
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +1 -1
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeReservation.js +1 -1
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js +8 -15
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.js +4 -8
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.js +3 -1
- package/dist/esm/storage/d1Sql.js +10 -1
- package/dist/esm/storage/syncSqlite.js +79 -0
- package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +11 -33
- package/dist/esm/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.js +1 -1
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyBackends.js +3 -3
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +3 -10
- package/dist/esm/threshold/session/signingSessionSeal/options.js +1 -1
- package/dist/esm/threshold/session/signingSessionSeal/service.js +8 -35
- package/dist/esm/threshold/session/signingSessionSeal/transport/express.js +18 -94
- package/dist/esm/threshold/session/signingSessionSeal/transport/fetch.js +6 -30
- package/dist/esm/threshold/session/signingSessionSeal/transport/shared.js +23 -75
- package/dist/esm/threshold/statusCodes.js +1 -1
- package/dist/esm/wasm/evm_crypto/pkg/evm_crypto_bg.wasm +0 -0
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +3 -3
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
- package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +8 -26
- package/dist/types/shared-ts/src/authorization/delegatedAuthority.d.ts +2 -9
- package/dist/types/shared-ts/src/authorization/operationFingerprint.d.ts +1 -3
- package/dist/types/shared-ts/src/authorization/walletAuthority.d.ts +25 -12
- package/dist/types/shared-ts/src/authorization/walletSessionIssuance.d.ts +8 -0
- package/dist/types/shared-ts/src/authorization/walletSignerActivationEquality.d.ts +4 -0
- package/dist/types/shared-ts/src/device-linking/activeWalletSession.d.ts +3 -2
- package/dist/types/shared-ts/src/device-linking/authorityActivation.d.ts +5 -0
- package/dist/types/shared-ts/src/device-linking/committedSignerPackages.d.ts +4 -8
- package/dist/types/shared-ts/src/device-linking/contracts.d.ts +13 -74
- package/dist/types/shared-ts/src/device-linking/contracts.typecheck.d.ts +2 -1
- package/dist/types/shared-ts/src/device-linking/deviceManagement.d.ts +7 -0
- package/dist/types/shared-ts/src/device-linking/digests.d.ts +0 -5
- package/dist/types/shared-ts/src/device-linking/ed25519ExportRoot.d.ts +3 -2
- package/dist/types/shared-ts/src/device-linking/index.d.ts +2 -0
- package/dist/types/shared-ts/src/device-linking/parsers.d.ts +4 -41
- package/dist/types/shared-ts/src/device-linking/requestProof.d.ts +0 -1
- package/dist/types/shared-ts/src/device-linking/sourceContribution.d.ts +5 -2
- package/dist/types/shared-ts/src/device-linking/walletSessionCredentialDelivery.d.ts +2 -1
- package/dist/types/shared-ts/src/device-linking/wireFields.d.ts +26 -0
- package/dist/types/shared-ts/src/near/actions.d.ts +4 -4
- package/dist/types/shared-ts/src/near/delegate.d.ts +3 -2
- package/dist/types/shared-ts/src/near/nearClient.d.ts +145 -0
- package/dist/types/shared-ts/src/passkey-custody/ceremonyCommitPayload.d.ts +0 -22
- package/dist/types/shared-ts/src/passkey-custody/credentialActivity.d.ts +2 -4
- package/dist/types/shared-ts/src/passkey-custody/custodyEnvelope.d.ts +14 -30
- package/dist/types/shared-ts/src/passkey-custody/custodySecretBinding.d.ts +8 -24
- package/dist/types/shared-ts/src/passkey-custody/index.d.ts +0 -2
- package/dist/types/shared-ts/src/passkey-custody/primitives.d.ts +9 -14
- package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -15
- package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +11 -50
- package/dist/types/shared-ts/src/signing-lanes/ids.d.ts +1 -10
- package/dist/types/shared-ts/src/signing-lanes/index.d.ts +1 -2
- package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +1 -2
- package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +5 -27
- package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +0 -11
- package/dist/types/shared-ts/src/signing-lanes/recordParsers.d.ts +6 -53
- package/dist/types/shared-ts/src/signing-lanes/records.d.ts +1 -2
- package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +18 -42
- package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +1 -20
- package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +4 -25
- package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +1 -41
- package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +6 -0
- package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +20 -0
- package/dist/types/shared-ts/src/tenant-root/tenantRootIdentifier.d.ts +3 -0
- package/dist/types/shared-ts/src/tenant-root/tenantRootOperationRecord.d.ts +2 -1
- package/dist/types/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.d.ts +8 -35
- package/dist/types/shared-ts/src/threshold/ed25519OperationFingerprint.d.ts +8 -35
- package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +25 -0
- package/dist/types/shared-ts/src/threshold/participants.d.ts +3 -9
- package/dist/types/shared-ts/src/threshold/secp256k1.d.ts +0 -37
- package/dist/types/shared-ts/src/threshold/sessionPolicy.d.ts +24 -0
- package/dist/types/shared-ts/src/threshold/signingRootScope.d.ts +3 -5
- package/dist/types/shared-ts/src/utils/addAuthMethodRegistration.d.ts +3 -4
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +7 -108
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +16 -3
- package/dist/types/shared-ts/src/utils/canonicalPrimitives.d.ts +2 -0
- package/dist/types/shared-ts/src/utils/digestEncoding.d.ts +9 -0
- package/dist/types/shared-ts/src/utils/domainIds.d.ts +1 -2
- package/dist/types/shared-ts/src/utils/ecdsaKeyFactsInventory.d.ts +3 -13
- package/dist/types/shared-ts/src/utils/eip1559TxWasmJson.d.ts +16 -0
- package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +7 -5
- package/dist/types/shared-ts/src/utils/emailOtpRecoveryKey.d.ts +0 -2
- package/dist/types/shared-ts/src/utils/errors.d.ts +0 -7
- package/dist/types/shared-ts/src/utils/exactKeys.d.ts +11 -0
- package/dist/types/shared-ts/src/utils/exactRecord.d.ts +12 -0
- package/dist/types/shared-ts/src/utils/failure.d.ts +12 -0
- package/dist/types/shared-ts/src/utils/index.d.ts +5 -2
- package/dist/types/shared-ts/src/utils/jsonRpc.d.ts +6 -6
- package/dist/types/shared-ts/src/utils/near.d.ts +2 -1
- package/dist/types/shared-ts/src/utils/nearRpcResults.d.ts +8 -7
- package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -4
- package/dist/types/shared-ts/src/utils/registrationAuthMethodInput.d.ts +179 -0
- package/dist/types/shared-ts/src/utils/registrationContracts.d.ts +76 -0
- package/dist/types/shared-ts/src/utils/registrationEstablishedSession.d.ts +1 -2
- package/dist/types/shared-ts/src/utils/registrationIds.d.ts +56 -0
- package/dist/types/shared-ts/src/utils/registrationIntent.d.ts +9 -514
- package/dist/types/shared-ts/src/utils/registrationSignerPlan.d.ts +130 -0
- package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts +24 -93
- package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts +15 -99
- package/dist/types/shared-ts/src/utils/routerAbEd25519YaoDigests.d.ts +38 -0
- package/dist/types/shared-ts/src/utils/routerAbNormalSigningIdentity.d.ts +30 -8
- package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts +10 -15
- package/dist/types/shared-ts/src/utils/routerAbTraceContext.d.ts +2 -1
- package/dist/types/shared-ts/src/utils/routerApiKeyAuth.d.ts +2 -0
- package/dist/types/shared-ts/src/utils/secureRandomId.d.ts +0 -2
- package/dist/types/shared-ts/src/utils/signerDomain.d.ts +3 -35
- package/dist/types/shared-ts/src/utils/signerSlot.d.ts +0 -4
- package/dist/types/shared-ts/src/utils/signingSessionSeal.d.ts +10 -17
- package/dist/types/shared-ts/src/utils/thresholdEcdsaChainTarget.d.ts +25 -0
- package/dist/types/shared-ts/src/utils/validation.d.ts +10 -10
- package/dist/types/shared-ts/src/utils/variant.d.ts +29 -0
- package/dist/types/shared-ts/src/utils/variant.typecheck.d.ts +22 -0
- package/dist/types/shared-ts/src/utils/walletAddSignerActivation.d.ts +2 -2
- package/dist/types/shared-ts/src/utils/walletAuthAuthority.d.ts +1 -58
- package/dist/types/shared-ts/src/utils/walletAuthMethodRecord.d.ts +101 -0
- package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +3 -7
- package/dist/types/shared-ts/src/utils/webauthnDeviceInfo.d.ts +5 -4
- package/dist/types/shared-ts/src/utils/wireSchema.d.ts +60 -0
- package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +2 -1
- package/dist/types/shared-ts/src/wallet-recovery/index.d.ts +0 -1
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeLocator.d.ts +0 -16
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +2 -11
- package/dist/types/shared-ts/src/wallet-recovery/recoveryEnvelopes.d.ts +3 -16
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.d.ts +6 -18
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.d.ts +0 -2
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryEnvelopeSet.d.ts +1 -3
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryPreparation.d.ts +15 -0
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryTarget.d.ts +3 -4
- package/dist/types/wallet-server/src/authorization/capabilityPolicy.d.ts +0 -1
- package/dist/types/wallet-server/src/authorization/domain.d.ts +36 -5
- package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.d.ts +61 -0
- package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/authorization/factorEvidence.d.ts +6 -7
- package/dist/types/wallet-server/src/authorization/service.d.ts +71 -3
- package/dist/types/wallet-server/src/cloud-host.d.ts +6 -2
- package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +10 -1
- package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +16 -116
- package/dist/types/wallet-server/src/core/IdentityStore.d.ts +2 -7
- package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +6 -16
- package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +29 -90
- package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -12
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +10 -3
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.d.ts +17 -48
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/internalServiceHttp.d.ts +2 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +4 -71
- package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +2 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +2 -6
- package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +2 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +2 -4
- package/dist/types/wallet-server/src/core/ThresholdService/stores/exportReplayGuard.d.ts +3 -0
- package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +11 -137
- package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +2 -7
- package/dist/types/wallet-server/src/core/WalletStore.d.ts +3 -8
- package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +15 -22
- package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +14 -36
- package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +9 -34
- package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +9 -34
- package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/bytes.d.ts +0 -1
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +6 -5
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +9 -17
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +3 -2
- package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +8 -32
- package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +3 -10
- package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +3 -70
- package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +6 -12
- package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +5 -8
- package/dist/types/wallet-server/src/core/authService/nearPrivateKeySigning.d.ts +3 -2
- package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +4 -3
- package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -26
- package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -5
- package/dist/types/wallet-server/src/core/authService/thresholdEcdsaKeyInventory.d.ts +0 -23
- package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +8 -16
- package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +7 -7
- package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +43 -0
- package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +1 -28
- package/dist/types/wallet-server/src/core/d1EcdsaSignerRead.d.ts +39 -0
- package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +6 -16
- package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +51 -0
- package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +11 -29
- package/dist/types/wallet-server/src/core/d1WalletStore.d.ts +16 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEd25519ExportRoot.d.ts +2 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceEmailOtpGrant.d.ts +2 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceManagement.d.ts +44 -26
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +19 -217
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionApproval.d.ts +8 -0
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionRecord.d.ts +258 -0
- package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -2
- package/dist/types/wallet-server/src/core/ecdsaMaterialReadSnapshot.d.ts +19 -0
- package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +54 -0
- package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -15
- package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +4 -24
- package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +2 -3
- package/dist/types/wallet-server/src/core/nearSignerWasmRuntime.d.ts +0 -1
- package/dist/types/wallet-server/src/core/registrationContracts.d.ts +37 -108
- package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +8 -9
- package/dist/types/wallet-server/src/core/rpcClients/near/NearClient.d.ts +10 -107
- package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +4 -3
- package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +2 -3
- package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +2 -3
- package/dist/types/wallet-server/src/core/signingLanes/WalletExecutionLaneProjection.d.ts +5 -20
- package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +4 -4
- package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +3 -3
- package/dist/types/wallet-server/src/core/signingLanes/signingWorkerLaneMaterialIdentity.d.ts +2 -19
- package/dist/types/wallet-server/src/core/storeBackends.d.ts +83 -0
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +13 -59
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +51 -3
- package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +3 -12
- package/dist/types/wallet-server/src/core/types.d.ts +5 -30
- package/dist/types/wallet-server/src/core/webAuthnD1Statements.d.ts +29 -0
- package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +96 -0
- package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +11 -7
- package/dist/types/wallet-server/src/index.d.ts +1 -1
- package/dist/types/wallet-server/src/local-hosted-wallet-gateway-worker.d.ts +1 -4
- package/dist/types/wallet-server/src/localHostedWalletGatewayHandler.d.ts +12 -0
- package/dist/types/wallet-server/src/localIntendedEcdsaFinalizeFault.d.ts +33 -0
- package/dist/types/wallet-server/src/localIntendedLinkExecuteFault.d.ts +47 -0
- package/dist/types/wallet-server/src/localIntendedMaterialAdmissionFault.d.ts +38 -0
- package/dist/types/wallet-server/src/localIntendedPresignCancellation.d.ts +4 -0
- package/dist/types/wallet-server/src/localIntendedRevokeFault.d.ts +40 -0
- package/dist/types/wallet-server/src/localIntendedSessionAdmissionFault.d.ts +41 -0
- package/dist/types/wallet-server/src/localIntendedYaoExportFault.d.ts +41 -0
- package/dist/types/wallet-server/src/localIntendedYaoFault.d.ts +7 -1
- package/dist/types/wallet-server/src/localIntendedYaoFinalizeFault.d.ts +37 -0
- package/dist/types/wallet-server/src/localIntendedYaoRecoveryFault.d.ts +45 -0
- package/dist/types/wallet-server/src/localIntendedYaoSigningFault.d.ts +51 -0
- package/dist/types/wallet-server/src/router/auth/authRequestValidation.d.ts +13 -29
- package/dist/types/wallet-server/src/router/auth/commonRouterUtils.d.ts +20 -11
- package/dist/types/wallet-server/src/router/auth/walletSessionFailure.d.ts +1 -4
- package/dist/types/wallet-server/src/router/auth/webAuthnCredentialCodecs.d.ts +3 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.d.ts +12 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.d.ts +3 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +2 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthService.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/walletSessionCredentialReaders.d.ts +9 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/authorizedOperationStatements.d.ts +34 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +54 -21
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/persistedWalletSessionAuthorization.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/walletSessionAuthorityProjection.d.ts +2 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +74 -6
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +2 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.d.ts +8 -21
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.d.ts +14 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRevocation.d.ts +49 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +6 -8
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSourceContributionPreparationPlanner.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.d.ts +7 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +8 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.d.ts +3 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/installedEcdsaAuthority.d.ts +7 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.d.ts +1 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.d.ts +33 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +13 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.d.ts +24 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.d.ts +4 -11
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +1 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +4 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.d.ts +13 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.d.ts +0 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.d.ts +5 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.d.ts +4 -14
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +1 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -21
- package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityRecords.d.ts +0 -23
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +1 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyEnvelopeStore.d.ts +11 -19
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -54
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +7 -19
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.d.ts +4 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.d.ts +8 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +7 -14
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -22
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +6 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +10 -6
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +21 -26
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +5 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.d.ts +4 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.d.ts +5 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.d.ts +17 -6
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.d.ts +0 -16
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +29 -14
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.d.ts +15 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodRevocationReplayStore.d.ts +71 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +34 -24
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +44 -26
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +13 -46
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +8 -19
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOps.d.ts +8 -34
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleTenantRootLineage.d.ts +2 -1
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -0
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.d.ts +15 -2
- package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ecdsa/routerAbEcdsaStrictRegistration.d.ts +9 -7
- package/dist/types/wallet-server/src/router/domains/ecdsa/thresholdEcdsaRequestValidation.d.ts +6 -18
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision.d.ts +46 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +5 -3
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.d.ts +20 -79
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRunner.d.ts +1 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.d.ts +4 -3
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +62 -42
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.d.ts +108 -32
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryActivation.typecheck.d.ts +5 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.d.ts +36 -5
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.d.ts +5 -4
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.d.ts +41 -50
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.d.ts +3 -3
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.d.ts +6 -5
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationTwoPhaseRunner.d.ts +14 -4
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.d.ts +12 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/routerAbEd25519YaoWalletSession.d.ts +11 -52
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/thresholdEd25519RequestValidation.d.ts +3 -4
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpExportPolicy.d.ts +2 -27
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRequestValidation.d.ts +1 -2
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpRouteHandlers.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/emailOtp/emailOtpSessionRouteHelpers.d.ts +2 -102
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/envelopeRevocationAdmission.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +3 -2
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrievalRoute.d.ts +1 -9
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/registrationCustodyOutcome.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/verifiedCustodyFactor.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationAdmission.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +2 -28
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryFinalization.d.ts +43 -1
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryKeyManifest.d.ts +7 -19
- package/dist/types/wallet-server/src/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.d.ts +0 -3
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.d.ts +164 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.d.ts +110 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmission.d.ts +373 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.d.ts +11 -10
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmissionCore.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbOperationStepUp.d.ts +164 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +22 -717
- package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +5 -12
- package/dist/types/wallet-server/src/router/domains/syncAccount/syncAccountRequestValidation.d.ts +6 -10
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootCustodyLineage.d.ts +6 -1
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootIdentityResolution.d.ts +4 -7
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +2 -1
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +8 -8
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +4 -4
- package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.d.ts +4 -4
- package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRouteHandlers.d.ts +4 -62
- package/dist/types/wallet-server/src/router/express-adaptor.d.ts +2 -2
- package/dist/types/wallet-server/src/router/framework/apiCredentialPorts.d.ts +3 -1
- package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +89 -65
- package/dist/types/wallet-server/src/router/framework/http.d.ts +1 -1
- package/dist/types/wallet-server/src/router/framework/ror/normalize.d.ts +1 -9
- package/dist/types/wallet-server/src/router/framework/routeMeteringPolicy.d.ts +3 -2
- package/dist/types/wallet-server/src/router/framework/routerApi.d.ts +1 -1
- package/dist/types/wallet-server/src/router/framework/routerApiRouteSurface.d.ts +3 -3
- package/dist/types/wallet-server/src/router/node/nodeHostedWalletGateway.d.ts +34 -0
- package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayCheck.d.ts +21 -0
- package/dist/types/wallet-server/src/router/node/nodeHostedWalletGatewayMain.d.ts +2 -0
- package/dist/types/wallet-server/src/router/node/nodeHttp.d.ts +13 -0
- package/dist/types/wallet-server/src/router/node/nodeSqlite.d.ts +22 -0
- package/dist/types/wallet-server/src/router/node/signerSqlMigrations.d.ts +20 -0
- package/dist/types/wallet-server/src/router/transport/fetch/createFetchRouter.d.ts +1 -3
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +5 -6
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.d.ts +5 -8
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceManagement.d.ts +14 -16
- package/dist/types/wallet-server/src/router/transport/fetch/routes/normalSigningRouterProxy.d.ts +0 -12
- package/dist/types/wallet-server/src/router/transport/fetch/routes/passkeyCustody.d.ts +1 -1
- package/dist/types/wallet-server/src/router/transport/fetch/routes/sessions.d.ts +2 -1
- package/dist/types/wallet-server/src/router/transport/fetch/routes/syncAccountBootstrap.d.ts +9 -17
- package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEcdsa.d.ts +3 -58
- package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEd25519.d.ts +0 -44
- package/dist/types/wallet-server/src/storage/d1Sql.d.ts +7 -0
- package/dist/types/wallet-server/src/storage/syncSqlite.d.ts +28 -0
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/crypto/shamir3PassWasm.d.ts +0 -1
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/idempotencyRecords.d.ts +5 -7
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/signingSessionSeal.types.d.ts +6 -8
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/transport/shared.d.ts +1 -0
- package/dist/types/wallet-server/src/threshold/statusCodes.d.ts +4 -4
- package/migrations/d1-signer/0036_r150_yao_lifecycle_decisions.sql +22 -0
- package/migrations/d1-signer/0037_r150_wallet_auth_method_revocation_replays.sql +26 -0
- package/migrations/d1-signer/0038_r150_registration_ceremony_cas_guard_seed.sql +8 -0
- package/migrations/d1-signer/0039_r150_revocation_replay_answer_kind.sql +9 -0
- package/package.json +1 -1
- package/dist/esm/core/ThresholdService/ecdsaClientRootProof.js +0 -27
- package/dist/esm/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.js +0 -115
- package/dist/esm/core/ThresholdService/secureRandomId.js +0 -9
- package/dist/esm/core/authService/record.js +0 -8
- package/dist/esm/core/authService/thresholdRuntimePolicy.js +0 -19
- package/dist/esm/core/authService/walletRegistrationPlanning.js +0 -49
- package/dist/esm/core/deviceLinking/index.js +0 -5
- package/dist/esm/core/errors.js +0 -54
- package/dist/esm/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.js +0 -39
- package/dist/esm/core/signingLanes/WalletKeyStore.js +0 -0
- package/dist/esm/core/signingLanes/index.js +0 -8
- package/dist/esm/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.js +0 -55
- package/dist/esm/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.js +0 -56
- package/dist/esm/shared-ts/src/signing-lanes/linkedEcdsaScope.js +0 -1
- package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker.js +0 -414
- package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm +0 -0
- package/dist/types/shared-ts/src/passkey-custody/credentialObservations.d.ts +0 -74
- package/dist/types/shared-ts/src/passkey-custody/kekContext.d.ts +0 -34
- package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.d.ts +0 -62
- package/dist/types/shared-ts/src/signing-lanes/linkedEcdsaScope.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/validation.d.ts +0 -11
- package/dist/types/shared-ts/src/utils/bigint.d.ts +0 -3
- package/dist/types/shared-ts/src/utils/paillier.d.ts +0 -37
- package/dist/types/shared-ts/src/utils/recoveryDomain.d.ts +0 -12
- package/dist/types/shared-ts/src/utils/signerDomain.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/wallet-recovery/recoveryKekContext.d.ts +0 -37
- package/dist/types/wallet-server/src/core/ThresholdService/ecdsaClientRootProof.d.ts +0 -12
- package/dist/types/wallet-server/src/core/ThresholdService/routerAbEcdsaSigningWorkerWasm.d.ts +0 -17
- package/dist/types/wallet-server/src/core/ThresholdService/secureRandomId.d.ts +0 -2
- package/dist/types/wallet-server/src/core/authService/record.d.ts +0 -2
- package/dist/types/wallet-server/src/core/authService/thresholdRuntimePolicy.d.ts +0 -4
- package/dist/types/wallet-server/src/core/authService/walletRegistrationPlanning.d.ts +0 -19
- package/dist/types/wallet-server/src/core/deviceLinking/index.d.ts +0 -5
- package/dist/types/wallet-server/src/core/errors.d.ts +0 -10
- package/dist/types/wallet-server/src/core/routerAbSigning/createCloudflareDurableObjectRouterAbSigningRuntimes.d.ts +0 -28
- package/dist/types/wallet-server/src/core/signingLanes/SigningLaneStore.d.ts +0 -15
- package/dist/types/wallet-server/src/core/signingLanes/WalletKeyStore.d.ts +0 -13
- package/dist/types/wallet-server/src/core/signingLanes/index.d.ts +0 -11
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEcdsaWalletSessionComposition.d.ts +0 -35
- package/dist/types/wallet-server/src/router/domains/tenantRoot/tenantRootEd25519WalletSessionComposition.d.ts +0 -35
- /package/dist/esm/{core/signingLanes/SigningLaneStore.js → authorization/ecdsaWalletSessionAdmission.js} +0 -0
|
@@ -0,0 +1,130 @@
|
|
|
1
|
+
import { type ImplicitNearAccountId, type NamedNearAccountId } from './near';
|
|
2
|
+
import type { NearEd25519SigningKeyId } from './registrationIds';
|
|
3
|
+
import type { ThresholdEcdsaChainTargetWire } from './thresholdEcdsaChainTarget';
|
|
4
|
+
import type { ExclusiveUnion } from './variant';
|
|
5
|
+
export type RegistrationNearAccountProvisioning = ExclusiveUnion<{
|
|
6
|
+
kind: 'implicit_account';
|
|
7
|
+
accountIdSource: 'ed25519_public_key';
|
|
8
|
+
} | {
|
|
9
|
+
kind: 'sponsored_named_account';
|
|
10
|
+
requestedAccountId: NamedNearAccountId;
|
|
11
|
+
sponsor: 'relayer';
|
|
12
|
+
}>;
|
|
13
|
+
export type ResolvedRegistrationNearAccount = {
|
|
14
|
+
kind: 'implicit_account';
|
|
15
|
+
nearAccountId: ImplicitNearAccountId;
|
|
16
|
+
nearEd25519SigningKeyId: NearEd25519SigningKeyId;
|
|
17
|
+
transactionHash?: never;
|
|
18
|
+
} | {
|
|
19
|
+
kind: 'sponsored_named_account';
|
|
20
|
+
nearAccountId: NamedNearAccountId;
|
|
21
|
+
nearEd25519SigningKeyId: NearEd25519SigningKeyId;
|
|
22
|
+
transactionHash: string;
|
|
23
|
+
};
|
|
24
|
+
export type ThresholdEd25519RegistrationSpec = {
|
|
25
|
+
accountProvisioning: RegistrationNearAccountProvisioning;
|
|
26
|
+
signerSlot: number;
|
|
27
|
+
participantIds: number[];
|
|
28
|
+
keyPurpose: string;
|
|
29
|
+
keyVersion: string;
|
|
30
|
+
derivationVersion: number;
|
|
31
|
+
};
|
|
32
|
+
export type ThresholdEd25519AddSignerSpec = {
|
|
33
|
+
mode: 'create_implicit_near_account';
|
|
34
|
+
signerSlot: number;
|
|
35
|
+
participantIds: number[];
|
|
36
|
+
keyPurpose: string;
|
|
37
|
+
keyVersion: string;
|
|
38
|
+
derivationVersion: number;
|
|
39
|
+
};
|
|
40
|
+
export type ThresholdEcdsaAddSignerChainTarget = Readonly<ThresholdEcdsaChainTargetWire>;
|
|
41
|
+
export type ThresholdEcdsaAddSignerSpec = {
|
|
42
|
+
chainTargets: readonly ThresholdEcdsaAddSignerChainTarget[];
|
|
43
|
+
participantIds: number[];
|
|
44
|
+
};
|
|
45
|
+
export type RegistrationSignerBranchKey = string & {
|
|
46
|
+
readonly __registrationSignerBranchKeyBrand: unique symbol;
|
|
47
|
+
};
|
|
48
|
+
export type RegistrationNearEd25519SignerRequest = {
|
|
49
|
+
kind: 'near_ed25519';
|
|
50
|
+
accountProvisioning: RegistrationNearAccountProvisioning;
|
|
51
|
+
signerSlot: number;
|
|
52
|
+
participantIds: readonly number[];
|
|
53
|
+
derivationVersion: number;
|
|
54
|
+
keyPurpose?: never;
|
|
55
|
+
keyVersion?: never;
|
|
56
|
+
chainTargets?: never;
|
|
57
|
+
};
|
|
58
|
+
export type RegistrationEvmFamilyEcdsaSignerRequest = {
|
|
59
|
+
kind: 'evm_family_ecdsa';
|
|
60
|
+
participantIds: readonly number[];
|
|
61
|
+
chainTargets: readonly unknown[];
|
|
62
|
+
accountProvisioning?: never;
|
|
63
|
+
signerSlot?: never;
|
|
64
|
+
keyPurpose?: never;
|
|
65
|
+
keyVersion?: never;
|
|
66
|
+
derivationVersion?: never;
|
|
67
|
+
};
|
|
68
|
+
export type RegistrationSignerRequest = RegistrationNearEd25519SignerRequest | RegistrationEvmFamilyEcdsaSignerRequest;
|
|
69
|
+
export type RegistrationSignerSetSelection = {
|
|
70
|
+
kind: 'signer_set';
|
|
71
|
+
signers: readonly RegistrationSignerRequest[];
|
|
72
|
+
mode?: never;
|
|
73
|
+
ed25519?: never;
|
|
74
|
+
ecdsa?: never;
|
|
75
|
+
};
|
|
76
|
+
export type RegistrationNearEd25519SignerPlan = {
|
|
77
|
+
kind: 'near_ed25519';
|
|
78
|
+
branchKey: RegistrationSignerBranchKey;
|
|
79
|
+
accountProvisioning: RegistrationNearAccountProvisioning;
|
|
80
|
+
signerSlot: number;
|
|
81
|
+
participantIds: readonly number[];
|
|
82
|
+
keyPurpose: string;
|
|
83
|
+
keyVersion: string;
|
|
84
|
+
derivationVersion: number;
|
|
85
|
+
chainTargets?: never;
|
|
86
|
+
};
|
|
87
|
+
export type RegistrationEvmFamilyEcdsaSignerPlan = RegistrationEvmFamilyEcdsaSignerRequest & {
|
|
88
|
+
branchKey: RegistrationSignerBranchKey;
|
|
89
|
+
};
|
|
90
|
+
export type RegistrationSignerPlanBranch = RegistrationNearEd25519SignerPlan | RegistrationEvmFamilyEcdsaSignerPlan;
|
|
91
|
+
export type RegistrationSignerPlan = {
|
|
92
|
+
kind: 'signer_set';
|
|
93
|
+
branches: readonly RegistrationSignerPlanBranch[];
|
|
94
|
+
};
|
|
95
|
+
export type AddSignerSelection = ExclusiveUnion<{
|
|
96
|
+
mode: 'ed25519';
|
|
97
|
+
ed25519: ThresholdEd25519AddSignerSpec;
|
|
98
|
+
} | {
|
|
99
|
+
mode: 'ecdsa';
|
|
100
|
+
ecdsa: ThresholdEcdsaAddSignerSpec;
|
|
101
|
+
}>;
|
|
102
|
+
export declare function implicitNearAccountProvisioning(): RegistrationNearAccountProvisioning;
|
|
103
|
+
export declare function sponsoredNamedNearAccountProvisioning(requestedAccountId: NamedNearAccountId): RegistrationNearAccountProvisioning;
|
|
104
|
+
type NormalizeSignerSelectionResult<TSelection> = {
|
|
105
|
+
ok: true;
|
|
106
|
+
value: TSelection;
|
|
107
|
+
} | {
|
|
108
|
+
ok: false;
|
|
109
|
+
code: string;
|
|
110
|
+
message: string;
|
|
111
|
+
};
|
|
112
|
+
type NormalizeAddSignerSelectionOptions = {
|
|
113
|
+
readonly normalizeEcdsaChainTarget: (target: unknown) => ThresholdEcdsaAddSignerChainTarget | null;
|
|
114
|
+
};
|
|
115
|
+
type RegistrationSignerSetSelectionFromPlanOptions = {
|
|
116
|
+
readonly normalizeEcdsaChainTarget?: (target: unknown) => unknown | null;
|
|
117
|
+
};
|
|
118
|
+
export declare const NEAR_ED25519_YAO_KEY_VERSION_V1 = "router-ab-ed25519-yao-v1";
|
|
119
|
+
export declare const REGISTRATION_NEAR_ED25519_YAO_DERIVATION_VERSION = 1;
|
|
120
|
+
export declare function registrationSignerBranchKeyFromString(value: string): RegistrationSignerBranchKey;
|
|
121
|
+
export declare function registrationNearEd25519BranchKey(signerSlot: number): RegistrationSignerBranchKey;
|
|
122
|
+
export declare function registrationEvmFamilyEcdsaBranchKey(chainTargets: readonly unknown[]): RegistrationSignerBranchKey;
|
|
123
|
+
export declare function normalizeRegistrationSignerPlan(raw: unknown): NormalizeSignerSelectionResult<RegistrationSignerPlan>;
|
|
124
|
+
export declare function registrationSignerPlanFromSelection(selection: RegistrationSignerSetSelection): NormalizeSignerSelectionResult<RegistrationSignerPlan>;
|
|
125
|
+
export declare function findRegistrationSignerPlanNearEd25519Branch(plan: RegistrationSignerPlan): RegistrationNearEd25519SignerPlan | null;
|
|
126
|
+
export declare function findRegistrationSignerPlanEvmFamilyEcdsaBranch(plan: RegistrationSignerPlan): RegistrationEvmFamilyEcdsaSignerPlan | null;
|
|
127
|
+
export declare function registrationSignerSetSelectionFromPlan(plan: RegistrationSignerPlan, options?: RegistrationSignerSetSelectionFromPlanOptions): NormalizeSignerSelectionResult<RegistrationSignerSetSelection>;
|
|
128
|
+
export declare function normalizeAddSignerSelection(raw: unknown, options: NormalizeAddSignerSelectionOptions): NormalizeSignerSelectionResult<AddSignerSelection>;
|
|
129
|
+
export {};
|
|
130
|
+
//# sourceMappingURL=registrationSignerPlan.d.ts.map
|
|
@@ -1,4 +1,3 @@
|
|
|
1
|
-
import { type SdkEcdsaDerivationBindingFacts } from '../threshold/ecdsaDerivationRoleLocalBootstrap';
|
|
2
1
|
import { type RuntimePolicyScope } from '../threshold/signingRootScope';
|
|
3
2
|
import { type EcdsaActiveStateId, type RootShareEpoch, type ThresholdEcdsaSessionId } from './domainIds';
|
|
4
3
|
import { type CorrelationId, type DigestB64u } from './canonicalPrimitives';
|
|
@@ -7,10 +6,13 @@ import { type RouterAbMpcMaterialActivationRefWire, type RouterAbNormalSigningAu
|
|
|
7
6
|
import { type EvmEcdsaMpcOperationKind, type MpcWalletSigningQuotaId, type WalletSessionMintId, type EcdsaAuthorizationSessionId, type WalletSessionAuthorizationId, type WalletSessionId } from '../authorization/capabilityKinds';
|
|
8
7
|
import type { ActiveWalletSessionV1, WalletSessionOperationCredentialV1 } from '../device-linking/contracts';
|
|
9
8
|
import { type EmailOtpWalletAuthAuthority, type PasskeyWalletAuthAuthority } from './walletAuthAuthority';
|
|
9
|
+
/**
|
|
10
|
+
* The longest an ECDSA presignature ceremony may run. The Gateway authorizes a
|
|
11
|
+
* pool fill only when the requested ceremony deadline is within this limit.
|
|
12
|
+
*/
|
|
13
|
+
export declare const ROUTER_AB_ECDSA_PRESIGN_CEREMONY_MAX_LIFETIME_MS: number;
|
|
10
14
|
export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_STATE_KIND_V1: "router_ab_ecdsa_derivation_normal_signing_v1";
|
|
11
|
-
export declare const ROUTER_AB_ECDSA_DERIVATION_KEY_SCOPE_V1: "evm-family";
|
|
12
15
|
export declare const ROUTER_AB_ECDSA_DERIVATION_HEALTH_PATH: "/router-ab/ecdsa-derivation/healthz";
|
|
13
|
-
export declare const ROUTER_AB_ECDSA_DERIVATION_BOOTSTRAP_PATH: "/router-ab/ecdsa-derivation/bootstrap";
|
|
14
16
|
export declare const ROUTER_AB_ECDSA_DERIVATION_EXPORT_PATH: "/router-ab/ecdsa-derivation/export";
|
|
15
17
|
export declare const ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_INIT_PATH: "/router-ab/ecdsa-derivation/presignature-pool/fill/init";
|
|
16
18
|
export declare const ROUTER_AB_ECDSA_DERIVATION_PRESIGNATURE_POOL_FILL_STEP_PATH: "/router-ab/ecdsa-derivation/presignature-pool/fill/step";
|
|
@@ -19,7 +21,7 @@ export declare const ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_PATH: "/router-ab
|
|
|
19
21
|
export declare const ROUTER_AB_ECDSA_DERIVATION_REFRESH_PATH: "/router-ab/ecdsa-derivation/refresh";
|
|
20
22
|
export declare const ROUTER_AB_ECDSA_DERIVATION_SESSION_ACTIVATION_PATH: "/router-ab/ecdsa-derivation/session/activate";
|
|
21
23
|
export declare const ROUTER_AB_ECDSA_DERIVATION_OPERATION_STEP_UP_PATH: "/router-ab/ecdsa-derivation/operation-step-up";
|
|
22
|
-
|
|
24
|
+
type RouterAbEcdsaDerivationStableKeyContextV1 = {
|
|
23
25
|
application_binding_digest_b64u: string;
|
|
24
26
|
};
|
|
25
27
|
export type RouterAbEcdsaDerivationPublicIdentityV1 = {
|
|
@@ -31,12 +33,12 @@ export type RouterAbEcdsaDerivationPublicIdentityV1 = {
|
|
|
31
33
|
client_share_retry_counter: number;
|
|
32
34
|
server_share_retry_counter: number;
|
|
33
35
|
};
|
|
34
|
-
|
|
36
|
+
type RouterAbServerIdentityV1 = {
|
|
35
37
|
server_id: string;
|
|
36
38
|
key_epoch: string;
|
|
37
39
|
recipient_encryption_key: string;
|
|
38
40
|
};
|
|
39
|
-
|
|
41
|
+
type RouterAbEcdsaDerivationPostRegistrationLifecycleScopeV1<WorkKind extends 'key_export' | 'recovery' | 'server_share_refresh', PrimitiveRequestKind extends 'export' | 'recovery' | 'refresh'> = {
|
|
40
42
|
lifecycle_id: string;
|
|
41
43
|
work_kind: WorkKind;
|
|
42
44
|
primitive_request_kind: PrimitiveRequestKind;
|
|
@@ -48,7 +50,7 @@ export type RouterAbEcdsaDerivationPostRegistrationLifecycleScopeV1<WorkKind ext
|
|
|
48
50
|
};
|
|
49
51
|
export type RouterAbEcdsaDerivationExportLifecycleScopeV1 = RouterAbEcdsaDerivationPostRegistrationLifecycleScopeV1<'key_export', 'export'>;
|
|
50
52
|
export type RouterAbEcdsaDerivationRefreshLifecycleScopeV1 = RouterAbEcdsaDerivationPostRegistrationLifecycleScopeV1<'server_share_refresh', 'refresh'>;
|
|
51
|
-
|
|
53
|
+
type RouterAbEcdsaDerivationSignerIdentityV1<Role extends 'signer_a' | 'signer_b'> = {
|
|
52
54
|
role: Role;
|
|
53
55
|
signer_id: string;
|
|
54
56
|
key_epoch: string;
|
|
@@ -60,8 +62,8 @@ export type RouterAbEcdsaDerivationSignerSetV1 = {
|
|
|
60
62
|
signer_b: RouterAbEcdsaDerivationSignerIdentityV1<'signer_b'>;
|
|
61
63
|
selected_server: RouterAbServerIdentityV1;
|
|
62
64
|
};
|
|
63
|
-
|
|
64
|
-
|
|
65
|
+
type RouterAbEcdsaRegistrationPurposeV1 = 'wallet_registration' | 'wallet_add_signer';
|
|
66
|
+
type RouterAbEcdsaRegistrationLifecycleV1 = {
|
|
65
67
|
lifecycle_id: string;
|
|
66
68
|
work_kind: 'registration_prepare';
|
|
67
69
|
primitive_request_kind: 'registration';
|
|
@@ -99,30 +101,19 @@ export type RouterAbEcdsaRegistrationRequestV1 = Omit<RouterAbEcdsaRegistrationR
|
|
|
99
101
|
deriver_a_envelope: RouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<'signer_a'>;
|
|
100
102
|
deriver_b_envelope: RouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<'signer_b'>;
|
|
101
103
|
};
|
|
102
|
-
|
|
104
|
+
type RouterAbEcdsaClientProofBundleV1 = {
|
|
103
105
|
kind: 'recipient_proof_bundle';
|
|
104
106
|
transcriptDigestB64u: string;
|
|
105
107
|
payloadB64u: string;
|
|
106
108
|
};
|
|
107
|
-
|
|
109
|
+
type RouterAbEcdsaClientProofBundlePairV1 = {
|
|
108
110
|
signerA: RouterAbEcdsaClientProofBundleV1;
|
|
109
111
|
signerB: RouterAbEcdsaClientProofBundleV1;
|
|
110
112
|
};
|
|
111
|
-
export type RouterAbEcdsaClientProofFinalizationV1 = {
|
|
112
|
-
kind: 'finalize_encrypted_client_proof_bundles_v1';
|
|
113
|
-
bundles: RouterAbEcdsaClientProofBundlePairV1;
|
|
114
|
-
};
|
|
115
113
|
export type RouterAbEcdsaStableClientProofFinalizationV2 = {
|
|
116
114
|
kind: 'finalize_encrypted_client_proof_bundles_v2';
|
|
117
115
|
bundles: RouterAbEcdsaClientProofBundlePairV1;
|
|
118
116
|
};
|
|
119
|
-
export type RouterAbEcdsaRegistrationPublicIdentityV1 = {
|
|
120
|
-
relayerKeyId: string;
|
|
121
|
-
relayerPublicKey33B64u: string;
|
|
122
|
-
groupPublicKey33B64u: string;
|
|
123
|
-
ethereumAddress: `0x${string}`;
|
|
124
|
-
relayerShareRetryCounter: number;
|
|
125
|
-
};
|
|
126
117
|
export type RouterAbEcdsaVerifiedClientActivationFactsV1 = {
|
|
127
118
|
registrationRequestDigestB64u: string;
|
|
128
119
|
proofTranscriptDigestB64u: string;
|
|
@@ -137,7 +128,7 @@ export type RouterAbEcdsaStrictForwardedRegistrationResponseV1 = {
|
|
|
137
128
|
bundles: RouterAbEcdsaClientProofBundlePairV1;
|
|
138
129
|
};
|
|
139
130
|
};
|
|
140
|
-
|
|
131
|
+
type RouterAbEcdsaStrictForwardedProofResponseV1 = RouterAbEcdsaStrictForwardedRegistrationResponseV1;
|
|
141
132
|
export type RouterAbEcdsaSigningWorkerExportShareBindingV1 = {
|
|
142
133
|
wallet_id: string;
|
|
143
134
|
key_handle: string;
|
|
@@ -293,7 +284,7 @@ export type RouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<Role extends 'signer_
|
|
|
293
284
|
bytes: number[];
|
|
294
285
|
};
|
|
295
286
|
};
|
|
296
|
-
|
|
287
|
+
type RouterAbEcdsaDerivationExplicitExportRequestBaseV1 = {
|
|
297
288
|
context: RouterAbEcdsaDerivationStableKeyContextV1;
|
|
298
289
|
lifecycle: RouterAbEcdsaDerivationExportLifecycleScopeV1;
|
|
299
290
|
public_identity: RouterAbEcdsaDerivationPublicIdentityV1;
|
|
@@ -350,7 +341,7 @@ export type RouterAbEcdsaDerivationActivationRefreshCommitRequestV1 = {
|
|
|
350
341
|
expected_server_generation: EcdsaServerGeneration;
|
|
351
342
|
refresh_request: RouterAbEcdsaDerivationActivationRefreshRequestV1;
|
|
352
343
|
};
|
|
353
|
-
|
|
344
|
+
type RouterAbEcdsaDerivationActivationRefreshActivationCommittedResponseV1 = {
|
|
354
345
|
result: 'activation_committed';
|
|
355
346
|
signing_worker_activation: RouterAbEcdsaRegistrationActivationReceiptV1;
|
|
356
347
|
response?: never;
|
|
@@ -358,7 +349,7 @@ export type RouterAbEcdsaDerivationActivationRefreshActivationCommittedResponseV
|
|
|
358
349
|
lifecycle?: never;
|
|
359
350
|
decision?: never;
|
|
360
351
|
};
|
|
361
|
-
|
|
352
|
+
type RouterAbEcdsaDerivationActivationRefreshStoppedResponseV1 = {
|
|
362
353
|
result: 'stopped';
|
|
363
354
|
replay: {
|
|
364
355
|
request_id: string;
|
|
@@ -400,16 +391,6 @@ export type RouterAbEcdsaDerivationActivationRefreshResponseV1 = RouterAbEcdsaDe
|
|
|
400
391
|
export type RouterAbPublicDigest32V1Wire = {
|
|
401
392
|
bytes: number[];
|
|
402
393
|
};
|
|
403
|
-
export type RouterAbActiveSigningWorkerStateV1 = {
|
|
404
|
-
account_id: string;
|
|
405
|
-
material_activation: RouterAbMpcMaterialActivationRefWire;
|
|
406
|
-
account_public_key: string;
|
|
407
|
-
signing_worker: RouterAbServerIdentityV1;
|
|
408
|
-
activation_transcript_digest: RouterAbPublicDigest32V1Wire;
|
|
409
|
-
activation_digest: RouterAbPublicDigest32V1Wire;
|
|
410
|
-
signing_worker_material_handle: string;
|
|
411
|
-
activated_at_ms: number;
|
|
412
|
-
};
|
|
413
394
|
export type RouterAbEcdsaDerivationNormalSigningScopeV1 = {
|
|
414
395
|
wallet_id: string;
|
|
415
396
|
ecdsa_threshold_key_id: string;
|
|
@@ -425,29 +406,7 @@ export type RouterAbEcdsaDerivationNormalSigningStateV1 = {
|
|
|
425
406
|
kind: typeof ROUTER_AB_ECDSA_DERIVATION_NORMAL_SIGNING_STATE_KIND_V1;
|
|
426
407
|
scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
|
|
427
408
|
};
|
|
428
|
-
|
|
429
|
-
serverKeyId: string;
|
|
430
|
-
presignatureId: string;
|
|
431
|
-
bigRB64u: string;
|
|
432
|
-
kShareB64u: string;
|
|
433
|
-
sigmaShareB64u: string;
|
|
434
|
-
createdAtMs: number;
|
|
435
|
-
};
|
|
436
|
-
export type CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1Wire = {
|
|
437
|
-
scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
|
|
438
|
-
server_presignature_id: string;
|
|
439
|
-
server_big_r33_b64u: string;
|
|
440
|
-
server_k_share32_b64u: string;
|
|
441
|
-
server_sigma_share32_b64u: string;
|
|
442
|
-
expires_at_ms: number;
|
|
443
|
-
};
|
|
444
|
-
export type CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutReceiptV1Wire = {
|
|
445
|
-
active_signing_worker_state: RouterAbActiveSigningWorkerStateV1;
|
|
446
|
-
server_presignature_id: string;
|
|
447
|
-
server_big_r33_b64u: string;
|
|
448
|
-
stored: boolean;
|
|
449
|
-
};
|
|
450
|
-
export type RouterAbEcdsaDerivationSignatureSchemeV1Wire = 'ecdsa_secp256k1_recoverable_v1';
|
|
409
|
+
type RouterAbEcdsaDerivationSignatureSchemeV1Wire = 'ecdsa_secp256k1_recoverable_v1';
|
|
451
410
|
export type RouterAbEcdsaDerivationOperationDigestsV1Wire = {
|
|
452
411
|
lane_digest_b64u: string;
|
|
453
412
|
intent_digest_b64u: string;
|
|
@@ -467,22 +426,11 @@ type RouterAbEcdsaDerivationEvmDigestSigningRequestBaseV1Wire = {
|
|
|
467
426
|
export type RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire = RouterAbEcdsaDerivationEvmDigestSigningRequestBaseV1Wire & {
|
|
468
427
|
authorization: RouterAbNormalSigningAuthorizationWire;
|
|
469
428
|
};
|
|
470
|
-
|
|
429
|
+
type RouterAbEcdsaPrepareSourceV1 = {
|
|
471
430
|
readonly kind: 'available_pool';
|
|
472
|
-
readonly batch?: never;
|
|
473
|
-
} | {
|
|
474
|
-
readonly kind: 'final_presign_batch';
|
|
475
|
-
readonly batch: {
|
|
476
|
-
readonly scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
|
|
477
|
-
readonly presign_session_id: string;
|
|
478
|
-
readonly requested_stage: 'presign';
|
|
479
|
-
readonly outgoing_messages_b64u: readonly [string, string];
|
|
480
|
-
readonly ceremony_expires_at_ms: number;
|
|
481
|
-
readonly material_expires_at_ms: number;
|
|
482
|
-
};
|
|
483
431
|
};
|
|
484
|
-
export declare function parseRouterAbEcdsaPrepareSourceV1(value: unknown
|
|
485
|
-
|
|
432
|
+
export declare function parseRouterAbEcdsaPrepareSourceV1(value: unknown): RouterAbEcdsaPrepareSourceV1;
|
|
433
|
+
type RouterAbEcdsaOperationStepUpWebAuthnCredentialV1Wire = {
|
|
486
434
|
readonly id: string;
|
|
487
435
|
readonly rawId: string;
|
|
488
436
|
readonly type: string;
|
|
@@ -532,7 +480,7 @@ export type RouterAbOwnerOperationAuthorizationDecisionV1Wire = {
|
|
|
532
480
|
readonly message: string;
|
|
533
481
|
};
|
|
534
482
|
};
|
|
535
|
-
|
|
483
|
+
type RouterAbEcdsaOperationStepUpProofV1Wire = {
|
|
536
484
|
readonly kind: 'passkey';
|
|
537
485
|
readonly authority: PasskeyWalletAuthAuthority;
|
|
538
486
|
readonly webauthn_authentication: RouterAbEcdsaOperationStepUpWebAuthnCredentialV1Wire;
|
|
@@ -620,7 +568,6 @@ export type RouterAbEcdsaDerivationEvmDigestSigningResponseV1Wire = {
|
|
|
620
568
|
signature_scheme: RouterAbEcdsaDerivationSignatureSchemeV1Wire;
|
|
621
569
|
signature65_b64u: string;
|
|
622
570
|
};
|
|
623
|
-
export declare function parseRouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<Role extends 'signer_a' | 'signer_b'>(value: unknown, label: string, expectedRole: Role): RouterAbEcdsaDerivationRoleEncryptedEnvelopeV1<Role>;
|
|
624
571
|
export declare function parseRouterAbEcdsaRegistrationRequestFactsV1(value: unknown): RouterAbEcdsaRegistrationRequestFactsV1;
|
|
625
572
|
export declare function parseRouterAbEcdsaRegistrationRequestV1(value: unknown): RouterAbEcdsaRegistrationRequestV1;
|
|
626
573
|
export declare function parseRouterAbEcdsaStrictForwardedRegistrationResponseV1(value: unknown): RouterAbEcdsaStrictForwardedRegistrationResponseV1;
|
|
@@ -633,11 +580,10 @@ export declare function parseRouterAbEcdsaDerivationActivationRefreshResponseV1(
|
|
|
633
580
|
export declare function parseRouterAbEcdsaVerifiedClientActivationFactsV1(value: unknown): RouterAbEcdsaVerifiedClientActivationFactsV1;
|
|
634
581
|
export declare function parseRouterAbEcdsaRegistrationActivationRequestV1(value: unknown): RouterAbEcdsaRegistrationActivationRequestV1;
|
|
635
582
|
export declare function parseRouterAbEcdsaRegistrationActivationReceiptV1(value: unknown): RouterAbEcdsaRegistrationActivationReceiptV1;
|
|
636
|
-
export declare function parseRouterAbEcdsaDerivationActivationPrepareResultV1(value: unknown): RouterAbEcdsaDerivationActivationPrepareResultV1;
|
|
637
|
-
export declare function parseRouterAbEcdsaDerivationActivationCommitQueryResultV1(value: unknown): RouterAbEcdsaDerivationActivationCommitQueryResultV1;
|
|
638
583
|
export declare function parseRouterAbEcdsaRegistrationPublicActivationReceiptV1(value: unknown): RouterAbEcdsaRegistrationPublicActivationReceiptV1;
|
|
639
584
|
export declare function sameRouterAbServerIdentityV1(left: RouterAbServerIdentityV1, right: RouterAbServerIdentityV1): boolean;
|
|
640
585
|
export declare function sameRouterAbEcdsaVerifiedClientActivationFactsV1(left: RouterAbEcdsaVerifiedClientActivationFactsV1, right: RouterAbEcdsaVerifiedClientActivationFactsV1): boolean;
|
|
586
|
+
export declare function sameRegistrationSignerSet(left: RouterAbEcdsaDerivationSignerSetV1, right: RouterAbEcdsaDerivationSignerSetV1): boolean;
|
|
641
587
|
export declare function sameRouterAbEcdsaRegistrationRequestFactsV1(left: RouterAbEcdsaRegistrationRequestFactsV1, right: RouterAbEcdsaRegistrationRequestFactsV1): boolean;
|
|
642
588
|
export declare function assertRouterAbEcdsaRegistrationFactsMatchRequestV1(input: {
|
|
643
589
|
facts: RouterAbEcdsaRegistrationRequestFactsV1;
|
|
@@ -660,19 +606,15 @@ export declare function parseRouterAbEcdsaDerivationExplicitExportProtocolReques
|
|
|
660
606
|
export declare function parseRouterAbEcdsaDerivationActivationRefreshRequestV1(value: unknown): RouterAbEcdsaDerivationActivationRefreshRequestV1;
|
|
661
607
|
export declare function parseRouterAbEcdsaDerivationActivationRefreshCommitRequestV1(value: unknown): RouterAbEcdsaDerivationActivationRefreshCommitRequestV1;
|
|
662
608
|
export declare function sameRouterAbPublicDigest32V1Wire(left: RouterAbPublicDigest32V1Wire, right: RouterAbPublicDigest32V1Wire): boolean;
|
|
609
|
+
export declare function sameRegistrationRecipientKeys(left: RouterAbEcdsaRegistrationRecipientKeysV1, right: RouterAbEcdsaRegistrationRecipientKeysV1): boolean;
|
|
663
610
|
export declare function sameRouterAbEcdsaRegistrationActivationReceiptV1(left: RouterAbEcdsaRegistrationActivationReceiptV1, right: RouterAbEcdsaRegistrationActivationReceiptV1): boolean;
|
|
664
611
|
export declare function sameRouterAbEcdsaDerivationNormalSigningStateV1(left: RouterAbEcdsaDerivationNormalSigningStateV1, right: RouterAbEcdsaDerivationNormalSigningStateV1): boolean;
|
|
665
612
|
export declare function sameRouterAbEcdsaDerivationPublicCapabilityV1(left: RouterAbEcdsaDerivationPublicCapabilityV1, right: RouterAbEcdsaDerivationPublicCapabilityV1): boolean;
|
|
666
613
|
export declare function routerAbEcdsaRerandomizationClientCommitmentV1(contribution32: Uint8Array): Promise<Uint8Array>;
|
|
667
|
-
export declare function routerAbEcdsaDerivationStableKeyContextFromSdkFactsV1(facts: SdkEcdsaDerivationBindingFacts): Promise<RouterAbEcdsaDerivationStableKeyContextV1>;
|
|
668
|
-
export declare function routerAbEcdsaDerivationContextBindingDigestV1(context: RouterAbEcdsaDerivationStableKeyContextV1): Promise<RouterAbPublicDigest32V1Wire>;
|
|
669
614
|
export declare function routerAbEcdsaDerivationContextBindingB64uV1(context: RouterAbEcdsaDerivationStableKeyContextV1): Promise<string>;
|
|
670
615
|
export declare function routerAbEcdsaDerivationNormalSigningScopeCanonicalBytesV1(scope: RouterAbEcdsaDerivationNormalSigningScopeV1): Uint8Array;
|
|
671
616
|
export declare function sameRouterAbEcdsaDerivationNormalSigningScopeV1(left: RouterAbEcdsaDerivationNormalSigningScopeV1, right: RouterAbEcdsaDerivationNormalSigningScopeV1): boolean;
|
|
672
|
-
export declare function verifyRouterAbEcdsaDerivationNormalSigningScopeContextBindingV1(scope: RouterAbEcdsaDerivationNormalSigningScopeV1): Promise<RouterAbEcdsaDerivationNormalSigningScopeV1>;
|
|
673
|
-
export declare function routerAbEcdsaDerivationEvmDigestSigningRequestCanonicalBytesV1(request: RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire): Uint8Array;
|
|
674
617
|
export declare function routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1(request: RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire): Promise<RouterAbPublicDigest32V1Wire>;
|
|
675
|
-
export declare function routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestCanonicalBytesV1(request: RouterAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestV1Wire): Uint8Array;
|
|
676
618
|
export declare function routerAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestDigestV1(request: RouterAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestV1Wire): Promise<RouterAbPublicDigest32V1Wire>;
|
|
677
619
|
export declare function parseRouterAbEcdsaDerivationNormalSigningScopeV1(value: unknown): RouterAbEcdsaDerivationNormalSigningScopeV1;
|
|
678
620
|
export declare function parseRouterAbEcdsaDerivationNormalSigningStateV1(value: unknown): RouterAbEcdsaDerivationNormalSigningStateV1 | null;
|
|
@@ -712,19 +654,8 @@ export declare function buildRouterAbEcdsaDerivationEvmDigestSigningFinalizeRequ
|
|
|
712
654
|
clientSignatureShare32: Uint8Array;
|
|
713
655
|
clientRerandomizationContribution32: Uint8Array;
|
|
714
656
|
}): RouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1Wire;
|
|
715
|
-
export declare function parseRouterAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestV1(value: unknown): RouterAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestV1Wire;
|
|
716
657
|
export declare function parseRouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1(value: unknown): RouterAbEcdsaDerivationEvmDigestSigningFinalizeRequestV1Wire;
|
|
717
|
-
export declare function parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseV1(value: unknown): RouterAbEcdsaDerivationEvmDigestSigningPrepareResponseV1Wire;
|
|
718
658
|
export declare function parseRouterAbEcdsaDerivationEvmDigestSigningPrepareResponseForRequestV1(request: RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire, value: unknown): Promise<RouterAbEcdsaDerivationEvmDigestSigningPrepareResponseV1Wire>;
|
|
719
|
-
export declare function parseRouterAbEcdsaDerivationEvmDigestSigningResponseV1(value: unknown): RouterAbEcdsaDerivationEvmDigestSigningResponseV1Wire;
|
|
720
659
|
export declare function parseRouterAbEcdsaDerivationEvmDigestSigningResponseForCoreRequestV1(request: RouterAbEcdsaDerivationEvmDigestSigningFinalizeCoreRequestV1Wire, value: unknown): Promise<RouterAbEcdsaDerivationEvmDigestSigningResponseV1Wire>;
|
|
721
|
-
export declare function buildCloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1(input: {
|
|
722
|
-
scope: RouterAbEcdsaDerivationNormalSigningScopeV1;
|
|
723
|
-
presignature: RouterAbEcdsaDerivationServerPresignatureShareV1;
|
|
724
|
-
expiresAtMs: number;
|
|
725
|
-
}): CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1Wire;
|
|
726
|
-
export declare function parseCloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1(value: unknown): CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1Wire;
|
|
727
|
-
export declare function parseCloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutReceiptV1(value: unknown): CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutReceiptV1Wire;
|
|
728
|
-
export declare function parseCloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutReceiptForRequestV1(request: CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutRequestV1Wire, value: unknown): CloudflareSigningWorkerEcdsaDerivationPresignaturePoolPutReceiptV1Wire;
|
|
729
660
|
export {};
|
|
730
661
|
//# sourceMappingURL=routerAbEcdsaDerivation.d.ts.map
|
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
import type { RouterAbEd25519YaoAdmittedLifecycleV1, RouterAbEd25519YaoCeremonyBindingV1 as GeneratedRouterAbEd25519YaoCeremonyBindingV1,
|
|
1
|
+
import type { RouterAbEd25519YaoAdmittedLifecycleV1, RouterAbEd25519YaoCeremonyBindingV1 as GeneratedRouterAbEd25519YaoCeremonyBindingV1, RouterAbEd25519YaoOperationV1, RouterAbEd25519YaoBytes32V1 } from './generated/routerAbEd25519YaoCore';
|
|
2
2
|
import { type RouterAbMpcMaterialActivationRefWire } from './routerAbNormalSigningIdentity';
|
|
3
3
|
export type { RouterAbEd25519YaoAdmittedLifecycleV1, RouterAbEd25519YaoCeremonyIdentityV1, RouterAbEd25519YaoCircuitFamilyV1, RouterAbEd25519YaoCircuitIdV1, RouterAbEd25519YaoInputPairBindingV1, RouterAbEd25519YaoOperationV1, RouterAbEd25519YaoPrimitiveRequestKindV1, RouterAbEd25519YaoProtocolIdV1, RouterAbEd25519YaoPublicDigestV1, RouterAbRequestPolicyClaimsV1, RouterAbEd25519YaoSessionIdV1, RouterAbEd25519YaoStableKeyContextBindingV1, RouterAbEd25519YaoWorkKindV1, RouterAbEd25519YaoBytes32V1, } from './generated/routerAbEd25519YaoCore';
|
|
4
4
|
export type RouterAbEd25519YaoCeremonyBindingV1 = GeneratedRouterAbEd25519YaoCeremonyBindingV1 & {
|
|
@@ -15,10 +15,9 @@ export declare const ROUTER_AB_ED25519_YAO_WARM_RECOVERY_BOOTSTRAP_PATH_V1: "/ro
|
|
|
15
15
|
export declare const ROUTER_AB_ED25519_YAO_EMAIL_OTP_RECOVERY_BOOTSTRAP_KIND_V1: "router_ab_ed25519_yao_email_otp_recovery_v1";
|
|
16
16
|
export declare const ROUTER_AB_ED25519_YAO_EXPORT_ADMISSION_PATH_V1: "/router-ab/ed25519/yao/export/admit";
|
|
17
17
|
export declare const ROUTER_AB_ED25519_YAO_EXPORT_EXECUTE_PATH_V1: "/router-ab/ed25519/yao/export/execute";
|
|
18
|
-
|
|
19
|
-
|
|
20
|
-
|
|
21
|
-
export type RouterAbEd25519YaoPackageKindV1 = 'activation_client' | 'activation_signing_worker' | 'export_client';
|
|
18
|
+
type RouterAbEd25519YaoDeriverRoleV1 = 'deriver_a' | 'deriver_b';
|
|
19
|
+
type RouterAbEd25519YaoInputKindV1 = 'activation' | 'export';
|
|
20
|
+
type RouterAbEd25519YaoPackageKindV1 = 'activation_client' | 'activation_signing_worker' | 'export_client';
|
|
22
21
|
export type RouterAbEd25519YaoApplicationBindingFactsV1 = {
|
|
23
22
|
wallet_id: string;
|
|
24
23
|
near_ed25519_signing_key_id: string;
|
|
@@ -58,7 +57,7 @@ export type RouterAbEd25519YaoWarmRecoveryBootstrapRequestV1 = {
|
|
|
58
57
|
readonly signingWorkerId: string;
|
|
59
58
|
readonly participantIds: readonly [number, number];
|
|
60
59
|
};
|
|
61
|
-
|
|
60
|
+
type RouterAbEd25519YaoExportAuthorizationV1 = {
|
|
62
61
|
confirmation_digest: RouterAbEd25519YaoBytes32V1;
|
|
63
62
|
authorization_digest: RouterAbEd25519YaoBytes32V1;
|
|
64
63
|
nonce: RouterAbEd25519YaoBytes32V1;
|
|
@@ -75,28 +74,19 @@ export type RouterAbEd25519YaoExportAdmissionRequestV1 = {
|
|
|
75
74
|
authorization: RouterAbEd25519YaoExportAuthorizationV1;
|
|
76
75
|
};
|
|
77
76
|
export type RouterAbEd25519YaoExportAuthorizationIdentityV1 = Omit<RouterAbEd25519YaoExportAdmissionRequestV1, 'authorization'>;
|
|
78
|
-
|
|
79
|
-
readonly kind: 'passkey';
|
|
80
|
-
readonly credentialIdB64u: string;
|
|
81
|
-
readonly providerSubjectId?: never;
|
|
82
|
-
} | {
|
|
83
|
-
readonly kind: 'email_otp';
|
|
84
|
-
readonly providerSubjectId: string;
|
|
85
|
-
readonly credentialIdB64u?: never;
|
|
86
|
-
};
|
|
87
|
-
export type RouterAbEd25519YaoRegistrationLifecycleV1 = Omit<RouterAbEd25519YaoAdmittedLifecycleV1, 'work_kind' | 'primitive_request_kind'> & {
|
|
77
|
+
type RouterAbEd25519YaoRegistrationLifecycleV1 = Omit<RouterAbEd25519YaoAdmittedLifecycleV1, 'work_kind' | 'primitive_request_kind'> & {
|
|
88
78
|
work_kind: 'registration_prepare';
|
|
89
79
|
primitive_request_kind: 'registration';
|
|
90
80
|
};
|
|
91
|
-
|
|
81
|
+
type RouterAbEd25519YaoRecoveryLifecycleV1 = Omit<RouterAbEd25519YaoAdmittedLifecycleV1, 'work_kind' | 'primitive_request_kind'> & {
|
|
92
82
|
work_kind: 'recovery';
|
|
93
83
|
primitive_request_kind: 'recovery';
|
|
94
84
|
};
|
|
95
|
-
|
|
85
|
+
type RouterAbEd25519YaoExportLifecycleV1 = Omit<RouterAbEd25519YaoAdmittedLifecycleV1, 'work_kind' | 'primitive_request_kind'> & {
|
|
96
86
|
work_kind: 'key_export';
|
|
97
87
|
primitive_request_kind: 'export';
|
|
98
88
|
};
|
|
99
|
-
|
|
89
|
+
type RouterAbEd25519YaoExportCeremonyBindingV1 = Omit<RouterAbEd25519YaoCeremonyBindingV1, 'lifecycle' | 'operation'> & {
|
|
100
90
|
lifecycle: RouterAbEd25519YaoExportLifecycleV1;
|
|
101
91
|
operation: 'export';
|
|
102
92
|
};
|
|
@@ -107,13 +97,14 @@ export type RouterAbEd25519YaoExportBindingV1 = {
|
|
|
107
97
|
runtime_policy_binding: RouterAbEd25519YaoBytes32V1;
|
|
108
98
|
authorization_digest: RouterAbEd25519YaoBytes32V1;
|
|
109
99
|
};
|
|
110
|
-
|
|
100
|
+
type RouterAbEd25519YaoActivationOperationV1 = 'registration' | 'recovery';
|
|
111
101
|
type RouterAbEd25519YaoActivationLifecycleForV1<Operation extends RouterAbEd25519YaoActivationOperationV1> = Operation extends 'registration' ? RouterAbEd25519YaoRegistrationLifecycleV1 : RouterAbEd25519YaoRecoveryLifecycleV1;
|
|
112
102
|
export type RouterAbEd25519YaoActivationBindingV1<Operation extends RouterAbEd25519YaoActivationOperationV1 = RouterAbEd25519YaoActivationOperationV1> = Operation extends RouterAbEd25519YaoActivationOperationV1 ? Omit<RouterAbEd25519YaoCeremonyBindingV1, 'lifecycle' | 'operation'> & {
|
|
113
103
|
lifecycle: RouterAbEd25519YaoActivationLifecycleForV1<Operation>;
|
|
114
104
|
operation: Operation;
|
|
115
105
|
} : never;
|
|
116
106
|
export declare function sameRouterAbEd25519YaoActivationBindingV1(left: RouterAbEd25519YaoActivationBindingV1, right: RouterAbEd25519YaoActivationBindingV1): boolean;
|
|
107
|
+
export declare function sameRouterAbEd25519YaoByteSequence(left: readonly number[], right: readonly number[]): boolean;
|
|
117
108
|
export declare function sameRouterAbEd25519YaoRegistrationAdmissionRequestV1(left: RouterAbEd25519YaoRegistrationAdmissionRequestV1, right: RouterAbEd25519YaoRegistrationAdmissionRequestV1): boolean;
|
|
118
109
|
export declare function sameRouterAbEd25519YaoRecoveryAdmissionRequestV1(left: RouterAbEd25519YaoRecoveryAdmissionRequestV1, right: RouterAbEd25519YaoRecoveryAdmissionRequestV1): boolean;
|
|
119
110
|
export declare function sameRouterAbEd25519YaoActivationKeysetV1(left: RouterAbEd25519YaoActivationKeysetV1, right: RouterAbEd25519YaoActivationKeysetV1): boolean;
|
|
@@ -131,7 +122,7 @@ export type RouterAbEd25519YaoExportAdmissionReceiptV1 = {
|
|
|
131
122
|
binding: RouterAbEd25519YaoExportBindingV1;
|
|
132
123
|
keyset: RouterAbEd25519YaoActivationKeysetV1;
|
|
133
124
|
};
|
|
134
|
-
|
|
125
|
+
type RouterAbEd25519YaoEncryptedInputV1 = {
|
|
135
126
|
kind: RouterAbEd25519YaoInputKindV1;
|
|
136
127
|
deriver: RouterAbEd25519YaoDeriverRoleV1;
|
|
137
128
|
operation: RouterAbEd25519YaoOperationV1;
|
|
@@ -150,7 +141,7 @@ export type RouterAbEd25519YaoActivationExecuteRequestV1<Operation extends Route
|
|
|
150
141
|
deriver_a_input: RouterAbEd25519YaoActivationEncryptedInputV1<'deriver_a', Operation>;
|
|
151
142
|
deriver_b_input: RouterAbEd25519YaoActivationEncryptedInputV1<'deriver_b', Operation>;
|
|
152
143
|
} : never;
|
|
153
|
-
|
|
144
|
+
type RouterAbEd25519YaoExportEncryptedInputV1<Role extends RouterAbEd25519YaoDeriverRoleV1> = Omit<RouterAbEd25519YaoEncryptedInputV1, 'kind' | 'deriver' | 'operation'> & {
|
|
154
145
|
kind: 'export';
|
|
155
146
|
deriver: Role;
|
|
156
147
|
operation: 'export';
|
|
@@ -172,7 +163,7 @@ export type RouterAbEd25519YaoActivationClientPackageV1<Role extends RouterAbEd2
|
|
|
172
163
|
kind: 'activation_client';
|
|
173
164
|
deriver: Role;
|
|
174
165
|
};
|
|
175
|
-
|
|
166
|
+
type RouterAbEd25519YaoExportClientPackageV1<Role extends RouterAbEd25519YaoDeriverRoleV1> = Omit<RouterAbEd25519YaoEncryptedPackageV1, 'kind' | 'deriver'> & {
|
|
176
167
|
kind: 'export_client';
|
|
177
168
|
deriver: Role;
|
|
178
169
|
};
|
|
@@ -230,57 +221,7 @@ export type RouterAbEd25519YaoRecoveryStatusV1 = {
|
|
|
230
221
|
readonly execution_result: RouterAbEd25519YaoActivationResultV1<'recovery'>;
|
|
231
222
|
readonly activation_receipt: RouterAbEd25519YaoRecoveryActivationReceiptV1;
|
|
232
223
|
};
|
|
233
|
-
|
|
234
|
-
authority_digest: RouterAbEd25519YaoPublicDigestV1;
|
|
235
|
-
issued_at_ms: number;
|
|
236
|
-
expires_at_ms: number;
|
|
237
|
-
};
|
|
238
|
-
type RouterAbEd25519YaoRouterExecuteCommonV1 = {
|
|
239
|
-
authority: RouterAbEd25519YaoExecutionAuthorityV1;
|
|
240
|
-
pair_binding: RouterAbEd25519YaoInputPairBindingV1;
|
|
241
|
-
};
|
|
242
|
-
export type RouterAbEd25519YaoRouterExecuteRequestV1 = (RouterAbEd25519YaoRouterExecuteCommonV1 & {
|
|
243
|
-
operation: 'registration';
|
|
244
|
-
binding: RouterAbEd25519YaoActivationBindingV1<'registration'>;
|
|
245
|
-
deriver_a_input: RouterAbEd25519YaoActivationEncryptedInputV1<'deriver_a', 'registration'>;
|
|
246
|
-
deriver_b_input: RouterAbEd25519YaoActivationEncryptedInputV1<'deriver_b', 'registration'>;
|
|
247
|
-
}) | (RouterAbEd25519YaoRouterExecuteCommonV1 & {
|
|
248
|
-
operation: 'recovery';
|
|
249
|
-
binding: RouterAbEd25519YaoActivationBindingV1<'recovery'>;
|
|
250
|
-
deriver_a_input: RouterAbEd25519YaoActivationEncryptedInputV1<'deriver_a', 'recovery'>;
|
|
251
|
-
deriver_b_input: RouterAbEd25519YaoActivationEncryptedInputV1<'deriver_b', 'recovery'>;
|
|
252
|
-
}) | (RouterAbEd25519YaoRouterExecuteCommonV1 & {
|
|
253
|
-
operation: 'export';
|
|
254
|
-
binding: RouterAbEd25519YaoExportBindingV1;
|
|
255
|
-
deriver_a_input: RouterAbEd25519YaoExportEncryptedInputV1<'deriver_a'>;
|
|
256
|
-
deriver_b_input: RouterAbEd25519YaoExportEncryptedInputV1<'deriver_b'>;
|
|
257
|
-
});
|
|
258
|
-
export type RouterAbEd25519YaoRouterExecuteSuccessV1 = {
|
|
259
|
-
operation: 'registration';
|
|
260
|
-
result: RouterAbEd25519YaoActivationResultV1<'registration'>;
|
|
261
|
-
} | {
|
|
262
|
-
operation: 'recovery';
|
|
263
|
-
result: RouterAbEd25519YaoActivationResultV1<'recovery'>;
|
|
264
|
-
} | {
|
|
265
|
-
operation: 'export';
|
|
266
|
-
result: RouterAbEd25519YaoExportResultV1;
|
|
267
|
-
};
|
|
268
|
-
export type RouterAbEd25519YaoRouterExecuteResultV1 = {
|
|
269
|
-
status: 'succeeded';
|
|
270
|
-
result: RouterAbEd25519YaoRouterExecuteSuccessV1;
|
|
271
|
-
} | {
|
|
272
|
-
status: 'recoverable_failure';
|
|
273
|
-
code: 'service_unavailable' | 'conflicting_pair' | 'missing_preparation' | 'ceremony_expired' | 'signing_worker_uncertain' | 'terminal_role_failure' | 'authorization_rejected';
|
|
274
|
-
retry_after_ms: number;
|
|
275
|
-
} | {
|
|
276
|
-
status: 'rejected';
|
|
277
|
-
code: 'service_unavailable' | 'conflicting_pair' | 'missing_preparation' | 'ceremony_expired' | 'signing_worker_uncertain' | 'terminal_role_failure' | 'authorization_rejected';
|
|
278
|
-
} | {
|
|
279
|
-
status: 'burned';
|
|
280
|
-
execution_id: RouterAbEd25519YaoBytes32V1;
|
|
281
|
-
reason: 'caller_disconnected' | 'peer_uncertain' | 'protocol_failure';
|
|
282
|
-
};
|
|
283
|
-
export type RouterAbEd25519YaoParseResult<T> = {
|
|
224
|
+
type RouterAbEd25519YaoParseResult<T> = {
|
|
284
225
|
ok: true;
|
|
285
226
|
value: T;
|
|
286
227
|
} | {
|
|
@@ -288,28 +229,6 @@ export type RouterAbEd25519YaoParseResult<T> = {
|
|
|
288
229
|
code: 'invalid_body';
|
|
289
230
|
message: string;
|
|
290
231
|
};
|
|
291
|
-
export declare function deriveRouterAbEd25519YaoApplicationBindingDigestV1(facts: RouterAbEd25519YaoApplicationBindingFactsV1): Promise<number[]>;
|
|
292
|
-
export declare function deriveRouterAbEd25519YaoStableContextBindingV1(applicationBinding: RouterAbEd25519YaoApplicationBindingFactsV1, participantIds: readonly [number, number]): Promise<number[]>;
|
|
293
|
-
export declare function deriveRouterAbEd25519YaoRuntimePolicyBindingV1(input: {
|
|
294
|
-
readonly orgId: string;
|
|
295
|
-
readonly projectId: string;
|
|
296
|
-
readonly envId: string;
|
|
297
|
-
readonly signingRootVersion: string;
|
|
298
|
-
}): Promise<number[]>;
|
|
299
|
-
export declare function deriveRouterAbEd25519YaoExportConfirmationDigestV1(input: {
|
|
300
|
-
readonly identity: RouterAbEd25519YaoExportAuthorizationIdentityV1;
|
|
301
|
-
readonly nonce: RouterAbEd25519YaoBytes32V1;
|
|
302
|
-
readonly issuedAtMs: number;
|
|
303
|
-
readonly expiresAtMs: number;
|
|
304
|
-
}): Promise<number[]>;
|
|
305
|
-
export declare function deriveRouterAbEd25519YaoExportAuthorizationDigestV1(input: {
|
|
306
|
-
readonly identity: RouterAbEd25519YaoExportAuthorizationIdentityV1;
|
|
307
|
-
readonly confirmationDigest: RouterAbEd25519YaoBytes32V1;
|
|
308
|
-
readonly nonce: RouterAbEd25519YaoBytes32V1;
|
|
309
|
-
readonly issuedAtMs: number;
|
|
310
|
-
readonly expiresAtMs: number;
|
|
311
|
-
readonly authority: RouterAbEd25519YaoExportAuthorityBindingV1;
|
|
312
|
-
}): Promise<number[]>;
|
|
313
232
|
export declare function parseRouterAbEd25519YaoApplicationBindingFactsV1(value: unknown): RouterAbEd25519YaoApplicationBindingFactsV1;
|
|
314
233
|
export declare function parseRouterAbEd25519YaoParticipantIdsV1(value: unknown): readonly [number, number];
|
|
315
234
|
export declare function parseRouterAbEd25519YaoCeremonyBindingV1(value: unknown): RouterAbEd25519YaoCeremonyBindingV1;
|
|
@@ -323,10 +242,8 @@ export declare function parseRouterAbEd25519YaoExportAdmissionRequestV1(value: u
|
|
|
323
242
|
export declare function parseRouterAbEd25519YaoExportAdmissionReceiptV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoExportAdmissionReceiptV1>;
|
|
324
243
|
export declare function parseRouterAbEd25519YaoExportExecuteRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoExportExecuteRequestV1>;
|
|
325
244
|
export declare function parseRouterAbEd25519YaoExportResultV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoExportResultV1>;
|
|
326
|
-
export declare function parseRouterAbEd25519YaoActivationAdmissionReceiptV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationAdmissionReceiptV1>;
|
|
327
245
|
export declare function parseRouterAbEd25519YaoRegistrationActivationAdmissionReceiptV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationAdmissionReceiptV1<'registration'>>;
|
|
328
246
|
export declare function parseRouterAbEd25519YaoRecoveryActivationAdmissionReceiptV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationAdmissionReceiptV1<'recovery'>>;
|
|
329
|
-
export declare function parseRouterAbEd25519YaoActivationExecuteRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationExecuteRequestV1>;
|
|
330
247
|
export declare function parseRouterAbEd25519YaoRegistrationActivationExecuteRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationExecuteRequestV1<'registration'>>;
|
|
331
248
|
export declare function parseRouterAbEd25519YaoRecoveryActivationExecuteRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationExecuteRequestV1<'recovery'>>;
|
|
332
249
|
export declare function parseRouterAbEd25519YaoActivationResultV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationResultV1>;
|
|
@@ -334,6 +251,5 @@ export declare function parseRouterAbEd25519YaoRegistrationActivationResultV1(va
|
|
|
334
251
|
export declare function parseRouterAbEd25519YaoRecoveryActivationResultV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoActivationResultV1<'recovery'>>;
|
|
335
252
|
export declare function parseRouterAbEd25519YaoRecoveryActivationRequestV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoRecoveryActivationRequestV1>;
|
|
336
253
|
export declare function parseRouterAbEd25519YaoRecoveryActivationReceiptV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoRecoveryActivationReceiptV1>;
|
|
337
|
-
export declare function parseRouterAbEd25519YaoRecoveryStatusV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoRecoveryStatusV1>;
|
|
338
254
|
export declare function parseRouterAbEd25519YaoEncryptedPackageV1(value: unknown): RouterAbEd25519YaoParseResult<RouterAbEd25519YaoEncryptedPackageV1>;
|
|
339
255
|
//# sourceMappingURL=routerAbEd25519Yao.d.ts.map
|