@seams/wallet-server 0.7.1 → 0.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (643) hide show
  1. package/THIRD_PARTY_NOTICES.md +1 -113
  2. package/artifact-manifest.json +78 -33
  3. package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -1
  4. package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
  5. package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
  6. package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -1
  7. package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
  8. package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
  9. package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
  10. package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
  11. package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
  12. package/cloudflare-router-ab/build/router/build-stamp.json +1 -1
  13. package/cloudflare-router-ab/build/router/index.js +2 -2
  14. package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
  15. package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -1
  16. package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
  17. package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
  18. package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -1
  19. package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
  20. package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
  21. package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +0 -2
  22. package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +77 -20
  23. package/dist/esm/authorization/lifecycleRouting.js +62 -0
  24. package/dist/esm/authorization/service.js +43 -12
  25. package/dist/esm/authorization/vaultProxyUse.js +2 -6
  26. package/dist/esm/cloud-host.js +23 -25
  27. package/dist/esm/core/EmailOtpRecords.js +1 -217
  28. package/dist/esm/core/EmailOtpStores.js +0 -859
  29. package/dist/esm/core/IdentityStore.js +2 -426
  30. package/dist/esm/core/SessionService.js +7 -30
  31. package/dist/esm/core/ThresholdService/config.js +1 -9
  32. package/dist/esm/core/ThresholdService/index.js +0 -4
  33. package/dist/esm/core/ThresholdService/kv.js +1 -66
  34. package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +1 -13
  35. package/dist/esm/core/ThresholdService/routerAbNormalSigningPolicy.js +4 -21
  36. package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +0 -617
  37. package/dist/esm/core/ThresholdService/validation.js +2 -346
  38. package/dist/esm/core/WalletAuthMethodStore.js +2 -123
  39. package/dist/esm/core/WalletStore.js +6 -214
  40. package/dist/esm/core/WebAuthnAuthenticatorStore.js +0 -202
  41. package/dist/esm/core/WebAuthnCredentialBindingStore.js +2 -182
  42. package/dist/esm/core/WebAuthnLoginChallengeStore.js +0 -52
  43. package/dist/esm/core/WebAuthnSyncChallengeStore.js +0 -54
  44. package/dist/esm/core/authService/emailOtpConfig.js +1 -195
  45. package/dist/esm/core/authService/emailOtpEnrollment.js +0 -141
  46. package/dist/esm/core/authService/emailOtpSeal.js +0 -78
  47. package/dist/esm/core/authService/nearTransactions.js +3 -98
  48. package/dist/esm/core/authService/rateLimits.js +0 -87
  49. package/dist/esm/core/authService/thresholdEcdsaKeyInventory.js +2 -1
  50. package/dist/esm/core/authService/webauthn.js +14 -464
  51. package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -24
  52. package/dist/esm/core/authService/webauthnVerificationOutcomes.js +5 -24
  53. package/dist/esm/core/authService/webauthnWalletBinding.js +0 -37
  54. package/dist/esm/core/config.js +1 -95
  55. package/dist/esm/core/d1EcdsaSignerRead.js +76 -0
  56. package/dist/esm/core/d1IdentityStore.js +17 -77
  57. package/dist/esm/core/d1TenantStore.js +1 -24
  58. package/dist/esm/core/d1WalletAuthMethodStore.js +2 -5
  59. package/dist/esm/core/d1WalletStore.js +15 -25
  60. package/dist/esm/core/deviceLinking/linkedDeviceBootstrap.js +13 -0
  61. package/dist/esm/core/deviceLinking/linkedDeviceEmailOtpGrant.js +1 -5
  62. package/dist/esm/core/deviceLinking/linkedDeviceSession.js +20 -14
  63. package/dist/esm/core/deviceLinking/linkedDeviceSessionApproval.js +1 -3
  64. package/dist/esm/core/deviceLinking/linkedDeviceSessionRecord.js +2 -8
  65. package/dist/esm/core/deviceLinking/requestProof.js +22 -10
  66. package/dist/esm/core/ecdsaMaterialReadSnapshot.js +85 -0
  67. package/dist/esm/core/emailOtpD1Statements.js +107 -94
  68. package/dist/esm/core/keyMaterialBrands.js +2 -12
  69. package/dist/esm/core/nearKeys.js +0 -1
  70. package/dist/esm/core/nearRelayerAccountProvisioning.js +8 -14
  71. package/dist/esm/core/passkeyCredentialClaims.js +8 -0
  72. package/dist/esm/core/routerAbSigning/RouterAbEcdsaPresignRuntime.js +2 -6
  73. package/dist/esm/core/routerAbSigning/RouterAbNormalSigningRuntime.js +2 -30
  74. package/dist/esm/core/signingLanes/WalletExecutionLaneProjection.js +3 -6
  75. package/dist/esm/core/signingMaterial/ordinaryInactiveSignerMaterialReservation.js +2 -5
  76. package/dist/esm/core/thresholdEcdsaChainTarget.js +2 -7
  77. package/dist/esm/hosted-wallet-gateway.js +68 -45
  78. package/dist/esm/index.js +6 -19
  79. package/dist/esm/localHostedWalletGatewayHandler.js +25 -0
  80. package/dist/esm/localIntendedMaterialAdmissionFault.js +176 -0
  81. package/dist/esm/localIntendedPresignCancellation.js +44 -0
  82. package/dist/esm/localRegistrationSetupAuthority.js +89 -0
  83. package/dist/esm/router/auth/authRequestValidation.js +8 -16
  84. package/dist/esm/router/auth/commonRouterUtils.js +24 -10
  85. package/dist/esm/router/auth/walletSessionFailure.js +2 -5
  86. package/dist/esm/router/auth/webAuthnCredentialCodecs.js +4 -16
  87. package/dist/esm/router/cloudflare/d1/auth/d1AuthorizationAssembly.js +87 -0
  88. package/dist/esm/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.js +1 -0
  89. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.js +2 -6
  90. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthConfig.js +12 -2
  91. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +37 -308
  92. package/dist/esm/router/cloudflare/d1/auth/walletSessionCredentialReaders.js +76 -0
  93. package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +52 -43
  94. package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +217 -50
  95. package/dist/esm/router/cloudflare/d1/authorization/d1VaultProxyStore.js +8 -12
  96. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +62 -21
  97. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEd25519ExportRootStore.js +6 -1
  98. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +12 -2
  99. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +4 -4
  100. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +1 -1
  101. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -9
  102. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.js +2 -1
  103. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +89 -7
  104. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +24 -15
  105. package/dist/esm/router/cloudflare/d1/deviceLinking/index.js +3 -3
  106. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +9 -6
  107. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.js +12 -56
  108. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.js +17 -81
  109. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +1 -1
  110. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +0 -1
  111. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpDeliveryRuntime.js +6 -25
  112. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +1 -1
  113. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +1 -7
  114. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.js +19 -13
  115. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +12 -48
  116. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +24 -86
  117. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +9 -32
  118. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.js +5 -21
  119. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +44 -12
  120. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +1 -49
  121. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +37 -136
  122. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.js +85 -0
  123. package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +0 -1
  124. package/dist/esm/router/cloudflare/d1/identity/d1IdentityService.js +9 -88
  125. package/dist/esm/router/cloudflare/d1/near/d1SponsoredNearAccount.js +242 -0
  126. package/dist/esm/router/cloudflare/d1/oidc/d1OidcBoundary.js +18 -92
  127. package/dist/esm/router/cloudflare/d1/oidc/d1OidcVerificationService.js +4 -55
  128. package/dist/esm/router/cloudflare/d1/oidc/googleOidcToken.js +41 -0
  129. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +9 -15
  130. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +36 -7
  131. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.js +9 -13
  132. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.js +11 -50
  133. package/dist/esm/router/cloudflare/d1/registration/d1EvmFamilyEcdsaRegistrationBranch.js +5 -20
  134. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +13 -10
  135. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +9 -14
  136. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +25 -13
  137. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +7 -31
  138. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationSetupSupport.js +74 -0
  139. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +7 -1
  140. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +101 -260
  141. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +12 -56
  142. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.js +155 -0
  143. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +1 -3
  144. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js +1 -4
  145. package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +131 -31
  146. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.js +68 -0
  147. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +7 -54
  148. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +9 -8
  149. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +2 -142
  150. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +55 -171
  151. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +10 -79
  152. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +23 -7
  153. package/dist/esm/router/cloudflare/runtime/routerAbPrewarm.js +2 -2
  154. package/dist/esm/router/cloudflare/runtime/staticWalletConsoleBinding.js +6 -20
  155. package/dist/esm/router/cloudflare/runtime/tenantRootCreationGrant.js +2 -9
  156. package/dist/esm/router/cloudflare/runtime/walletConsoleOps.js +1 -0
  157. package/dist/esm/router/cloudflare/runtime/walletConsoleOpsClient.js +5 -0
  158. package/dist/esm/router/cloudflare/runtime/walletControlOps.js +2 -1
  159. package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
  160. package/dist/esm/router/cloudflare/runtime/walletRuntimeOps.js +16 -4
  161. package/dist/esm/router/cloudflare-adaptor.js +1 -2
  162. package/dist/esm/router/cloudflare.js +3390 -3437
  163. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +11 -8
  164. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +3 -2
  165. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +6 -6
  166. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPersistence.js +5 -8
  167. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +6 -6
  168. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +3 -0
  169. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +8 -0
  170. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryWalletSessionAuthorization.js +3 -6
  171. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js +6 -25
  172. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.js +39 -55
  173. package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +0 -1
  174. package/dist/esm/router/domains/emailOtp/emailOtpRouteHandlers.js +15 -62
  175. package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.js +2 -8
  176. package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -8
  177. package/dist/esm/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.js +83 -74
  178. package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmission.js +1 -0
  179. package/dist/esm/router/domains/signingOperations/routerAbOperationStepUp.js +1 -0
  180. package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +5 -19
  181. package/dist/esm/router/domains/signingOperations/walletExecutionAdmission.js +3 -7
  182. package/dist/esm/router/domains/tenantRoot/tenantRootIdentityResolution.js +7 -13
  183. package/dist/esm/router/domains/walletRegistration/walletRegistrationReservation.js +70 -0
  184. package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +10 -11
  185. package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +2 -3
  186. package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +55 -200
  187. package/dist/esm/router/express.js +858 -1145
  188. package/dist/esm/router/framework/http.js +7 -1
  189. package/dist/esm/router/framework/registrationSetupDispatch.js +14 -0
  190. package/dist/esm/router/framework/ror/normalize.js +0 -1
  191. package/dist/esm/router/framework/ror/options.js +0 -1
  192. package/dist/esm/router/framework/ror/provider.js +0 -1
  193. package/dist/esm/router/framework/ror/staticProvider.js +0 -1
  194. package/dist/esm/router/framework/routeDefinitions.js +1 -2
  195. package/dist/esm/router/framework/routerApiWebhooks.js +0 -1
  196. package/dist/esm/router/framework/runtimeSnapshotConsumer.js +8 -35
  197. package/dist/esm/router/ror.js +0 -1
  198. package/dist/esm/router/transport/fetch/createFetchRouter.js +3 -8
  199. package/dist/esm/router/transport/fetch/routes/auth.js +11 -41
  200. package/dist/esm/router/transport/fetch/routes/deviceLinking.js +36 -147
  201. package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +7 -23
  202. package/dist/esm/router/transport/fetch/routes/deviceLinkingResponses.js +130 -0
  203. package/dist/esm/router/transport/fetch/routes/ecdsaOperationStepUpFactor.js +171 -0
  204. package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +1 -0
  205. package/dist/esm/router/transport/fetch/routes/sessions.js +1 -0
  206. package/dist/esm/router/transport/fetch/routes/syncAccount.js +15 -38
  207. package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +46 -194
  208. package/dist/esm/router/transport/fetch/routes/walletExecutionLanePreflight.js +4 -1
  209. package/dist/esm/router/transport/fetch/routes/walletRegistration.js +3 -1
  210. package/dist/esm/router/transport/fetch/routes/webauthnAuthenticators.js +4 -16
  211. package/dist/esm/shared-ts/src/authorization/walletSessionIssuance.js +0 -1
  212. package/dist/esm/shared-ts/src/authorization/walletSignerActivationEquality.js +12 -0
  213. package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +0 -2
  214. package/dist/esm/shared-ts/src/device-linking/committedSignerPackages.js +2 -5
  215. package/dist/esm/shared-ts/src/device-linking/contracts.js +16 -1
  216. package/dist/esm/shared-ts/src/device-linking/delegatedActivationPlan.js +1 -5
  217. package/dist/esm/shared-ts/src/device-linking/digests.js +1 -8
  218. package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +12 -16
  219. package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +5 -8
  220. package/dist/esm/shared-ts/src/near/actions.js +0 -1
  221. package/dist/esm/shared-ts/src/near/nearClient.js +0 -2
  222. package/dist/esm/shared-ts/src/passkey-custody/primitives.js +5 -1
  223. package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -1
  224. package/dist/esm/shared-ts/src/signing-lanes/index.js +1 -6
  225. package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +5 -9
  226. package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +2 -81
  227. package/dist/esm/shared-ts/src/signing-lanes/participants.js +1 -219
  228. package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +0 -3
  229. package/dist/esm/shared-ts/src/tenant-root/tenantRootIdentifier.js +12 -0
  230. package/dist/esm/shared-ts/src/tenant-root/tenantRootIdentity.js +2 -9
  231. package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +2 -6
  232. package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +0 -1
  233. package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +1 -22
  234. package/dist/esm/shared-ts/src/threshold/participants.js +0 -1
  235. package/dist/esm/shared-ts/src/threshold/signingRootScope.js +0 -1
  236. package/dist/esm/shared-ts/src/utils/addWalletAuthMethod.js +4 -13
  237. package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +1 -7
  238. package/dist/esm/shared-ts/src/utils/domainIds.js +1 -16
  239. package/dist/esm/shared-ts/src/utils/ecdsaCapabilityActivation.js +1 -11
  240. package/dist/esm/shared-ts/src/utils/ecdsaKeyFactsInventory.js +2 -5
  241. package/dist/esm/shared-ts/src/utils/ecdsaServerTiming.js +0 -1
  242. package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +3 -1
  243. package/dist/esm/shared-ts/src/utils/errors.js +1 -19
  244. package/dist/esm/shared-ts/src/utils/exactKeys.js +17 -0
  245. package/dist/esm/shared-ts/src/utils/failure.js +20 -0
  246. package/dist/esm/shared-ts/src/utils/near.js +1 -1
  247. package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +1 -1
  248. package/dist/esm/shared-ts/src/utils/registrationIds.js +1 -5
  249. package/dist/esm/shared-ts/src/utils/registrationIntent.js +3 -13
  250. package/dist/esm/shared-ts/src/utils/registrationSetupOperation.js +8 -0
  251. package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +3 -6
  252. package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +1 -2
  253. package/dist/esm/shared-ts/src/utils/routerAbEd25519Yao.js +1 -1
  254. package/dist/esm/shared-ts/src/utils/thresholdEcdsaChainTarget.js +9 -0
  255. package/dist/esm/shared-ts/src/utils/validation.js +1 -5
  256. package/dist/esm/shared-ts/src/utils/walletAuthAuthority.js +0 -1
  257. package/dist/esm/shared-ts/src/utils/walletManagementProtocol.js +6 -0
  258. package/dist/esm/shared-ts/src/utils/wireSchema.js +2 -13
  259. package/dist/esm/shared-ts/src/wallet-recovery/backupAcknowledgement.js +6 -24
  260. package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +0 -1
  261. package/dist/esm/shared-ts/src/wallet-recovery/recoveryKeyId.js +5 -6
  262. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js +1 -4
  263. package/dist/esm/storage/d1Sql.js +1 -7
  264. package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +10 -33
  265. package/dist/esm/threshold/session/signingSessionSeal/guards/backends.js +1 -2
  266. package/dist/esm/threshold/session/signingSessionSeal/idempotencyBackends.js +3 -4
  267. package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +3 -10
  268. package/dist/esm/threshold/session/signingSessionSeal/options.js +0 -1
  269. package/dist/esm/threshold/session/signingSessionSeal/service.js +8 -35
  270. package/dist/esm/threshold/session/signingSessionSeal/transport/express.js +18 -94
  271. package/dist/esm/threshold/session/signingSessionSeal/transport/fetch.js +6 -30
  272. package/dist/esm/threshold/session/signingSessionSeal/transport/shared.js +5 -20
  273. package/dist/esm/wasm/evm_crypto/pkg/evm_crypto_bg.wasm +0 -0
  274. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +0 -611
  275. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
  276. package/dist/esm/wasm/shamir3pass_runtime/pkg/shamir3pass_runtime_bg.wasm +0 -0
  277. package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +0 -4
  278. package/dist/types/shared-ts/src/authorization/delegatedAuthority.d.ts +2 -1
  279. package/dist/types/shared-ts/src/authorization/walletSessionIssuance.d.ts +9 -2
  280. package/dist/types/shared-ts/src/authorization/walletSignerActivationEquality.d.ts +4 -0
  281. package/dist/types/shared-ts/src/device-linking/committedSignerPackages.d.ts +3 -4
  282. package/dist/types/shared-ts/src/device-linking/contracts.d.ts +6 -63
  283. package/dist/types/shared-ts/src/device-linking/sourceContribution.d.ts +2 -0
  284. package/dist/types/shared-ts/src/passkey-custody/custodyEnvelope.d.ts +5 -12
  285. package/dist/types/shared-ts/src/passkey-custody/primitives.d.ts +9 -0
  286. package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -2
  287. package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +11 -12
  288. package/dist/types/shared-ts/src/signing-lanes/ids.d.ts +3 -17
  289. package/dist/types/shared-ts/src/signing-lanes/index.d.ts +0 -4
  290. package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +0 -1
  291. package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +0 -18
  292. package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +6 -35
  293. package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +6 -845
  294. package/dist/types/shared-ts/src/tenant-root/tenantRootIdentifier.d.ts +3 -0
  295. package/dist/types/shared-ts/src/tenant-root/tenantRootOperationRecord.d.ts +2 -1
  296. package/dist/types/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.d.ts +6 -0
  297. package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +0 -10
  298. package/dist/types/shared-ts/src/threshold/participants.d.ts +1 -1
  299. package/dist/types/shared-ts/src/threshold/signingRootScope.d.ts +1 -0
  300. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +1 -133
  301. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +4 -18
  302. package/dist/types/shared-ts/src/utils/domainIds.d.ts +0 -12
  303. package/dist/types/shared-ts/src/utils/ecdsaKeyFactsInventory.d.ts +2 -11
  304. package/dist/types/shared-ts/src/utils/eip1559TxWasmJson.d.ts +16 -0
  305. package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +2 -0
  306. package/dist/types/shared-ts/src/utils/errors.d.ts +0 -4
  307. package/dist/types/shared-ts/src/utils/exactKeys.d.ts +11 -0
  308. package/dist/types/shared-ts/src/utils/failure.d.ts +12 -0
  309. package/dist/types/shared-ts/src/utils/jsonRpc.d.ts +3 -4
  310. package/dist/types/shared-ts/src/utils/near.d.ts +0 -20
  311. package/dist/types/shared-ts/src/utils/nearRpcResults.d.ts +1 -0
  312. package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -2
  313. package/dist/types/shared-ts/src/utils/registrationAuthMethodInput.d.ts +3 -8
  314. package/dist/types/shared-ts/src/utils/registrationSetupOperation.d.ts +3 -0
  315. package/dist/types/shared-ts/src/utils/registrationSignerPlan.d.ts +7 -19
  316. package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts +3 -1
  317. package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts +1 -0
  318. package/dist/types/shared-ts/src/utils/routerAbEd25519YaoDigests.d.ts +3 -4
  319. package/dist/types/shared-ts/src/utils/routerAbNormalSigningIdentity.d.ts +30 -8
  320. package/dist/types/shared-ts/src/utils/routerApiKeyAuth.d.ts +2 -0
  321. package/dist/types/shared-ts/src/utils/signingSessionSeal.d.ts +10 -11
  322. package/dist/types/shared-ts/src/utils/thresholdEcdsaChainTarget.d.ts +25 -0
  323. package/dist/types/shared-ts/src/utils/validation.d.ts +1 -3
  324. package/dist/types/shared-ts/src/utils/variant.d.ts +18 -0
  325. package/dist/types/shared-ts/src/utils/walletAuthMethodRecord.d.ts +3 -6
  326. package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +0 -1
  327. package/dist/types/shared-ts/src/utils/walletManagementProtocol.d.ts +3 -0
  328. package/dist/types/shared-ts/src/utils/webauthnDeviceInfo.d.ts +4 -2
  329. package/dist/types/shared-ts/src/utils/wireSchema.d.ts +0 -2
  330. package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +0 -1
  331. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +1 -10
  332. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodes.d.ts +1 -3
  333. package/dist/types/shared-ts/src/wallet-recovery/recoveryEnvelopes.d.ts +3 -16
  334. package/dist/types/shared-ts/src/wallet-recovery/recoveryKeyId.d.ts +5 -21
  335. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryPreparation.d.ts +15 -0
  336. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryTarget.d.ts +3 -4
  337. package/dist/types/wallet-server/src/authorization/domain.d.ts +13 -2
  338. package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.d.ts +27 -3
  339. package/dist/types/wallet-server/src/authorization/lifecycleRouting.d.ts +32 -0
  340. package/dist/types/wallet-server/src/authorization/lifecycleRouting.typecheck.d.ts +2 -0
  341. package/dist/types/wallet-server/src/authorization/recoveryRouting.d.ts +22 -0
  342. package/dist/types/wallet-server/src/authorization/recoveryRouting.typecheck.d.ts +2 -0
  343. package/dist/types/wallet-server/src/authorization/service.d.ts +27 -1
  344. package/dist/types/wallet-server/src/authorization/sessionRouting.d.ts +20 -0
  345. package/dist/types/wallet-server/src/authorization/sessionRouting.typecheck.d.ts +2 -0
  346. package/dist/types/wallet-server/src/cloud-host.d.ts +31 -9
  347. package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +1 -22
  348. package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +1 -79
  349. package/dist/types/wallet-server/src/core/IdentityStore.d.ts +0 -10
  350. package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +0 -1
  351. package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -2
  352. package/dist/types/wallet-server/src/core/ThresholdService/index.d.ts +1 -3
  353. package/dist/types/wallet-server/src/core/ThresholdService/kv.d.ts +0 -7
  354. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +0 -3
  355. package/dist/types/wallet-server/src/core/ThresholdService/routerAbNormalSigningPolicy.d.ts +0 -1
  356. package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +6 -18
  357. package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +0 -127
  358. package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +1 -5
  359. package/dist/types/wallet-server/src/core/WalletStore.d.ts +0 -3
  360. package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +8 -20
  361. package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +1 -27
  362. package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +2 -16
  363. package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +22 -14
  364. package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +0 -24
  365. package/dist/types/wallet-server/src/core/authService/emailOtpEnrollment.d.ts +1 -70
  366. package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +1 -14
  367. package/dist/types/wallet-server/src/core/authService/githubOAuth.d.ts +2 -1
  368. package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +1 -39
  369. package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -17
  370. package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +0 -125
  371. package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +0 -3
  372. package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +1 -1
  373. package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +0 -12
  374. package/dist/types/wallet-server/src/core/config.d.ts +0 -10
  375. package/dist/types/wallet-server/src/core/d1EcdsaSignerRead.d.ts +39 -0
  376. package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +0 -2
  377. package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +0 -7
  378. package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +0 -1
  379. package/dist/types/wallet-server/src/core/d1WalletStore.d.ts +10 -0
  380. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceBootstrap.d.ts +19 -0
  381. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +8 -6
  382. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionRecord.d.ts +3 -4
  383. package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -5
  384. package/dist/types/wallet-server/src/core/ecdsaMaterialReadSnapshot.d.ts +19 -0
  385. package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +10 -7
  386. package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +1 -5
  387. package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +0 -1
  388. package/dist/types/wallet-server/src/core/passkeyCredentialClaims.d.ts +9 -0
  389. package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbEcdsaPresignRuntime.d.ts +0 -2
  390. package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +3 -7
  391. package/dist/types/wallet-server/src/core/rpcClients/near/NearClient.d.ts +1 -2
  392. package/dist/types/wallet-server/src/core/signingLanes/WalletExecutionLaneProjection.d.ts +2 -11
  393. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +1 -92
  394. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +4 -52
  395. package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +3 -12
  396. package/dist/types/wallet-server/src/core/types.d.ts +2 -305
  397. package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +15 -3
  398. package/dist/types/wallet-server/src/index.d.ts +8 -13
  399. package/dist/types/wallet-server/src/localIntendedMaterialAdmissionFault.d.ts +38 -0
  400. package/dist/types/wallet-server/src/localIntendedPresignCancellation.d.ts +4 -0
  401. package/dist/types/wallet-server/src/localRegistrationSetupAuthority.d.ts +13 -0
  402. package/dist/types/wallet-server/src/router/auth/authRequestValidation.d.ts +4 -9
  403. package/dist/types/wallet-server/src/router/auth/commonRouterUtils.d.ts +15 -1
  404. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizationAssembly.d.ts +23 -0
  405. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.d.ts +0 -1
  406. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +25 -3
  407. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthService.d.ts +1 -1
  408. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/walletSessionCredentialReaders.d.ts +9 -0
  409. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/authorizedOperationStatements.d.ts +4 -0
  410. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +11 -2
  411. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +22 -3
  412. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +7 -1
  413. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.d.ts +1 -10
  414. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.d.ts +4 -0
  415. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +8 -6
  416. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.d.ts +5 -8
  417. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +1 -13
  418. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.d.ts +2 -2
  419. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +1 -1
  420. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.d.ts +2 -8
  421. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +0 -2
  422. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +20 -11
  423. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.d.ts +5 -5
  424. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.d.ts +4 -14
  425. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +29 -1
  426. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -16
  427. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.d.ts +7 -2
  428. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.d.ts +23 -0
  429. package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityService.d.ts +0 -12
  430. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.d.ts +24 -0
  431. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.typecheck.d.ts +2 -0
  432. package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/d1OidcVerificationService.d.ts +0 -1
  433. package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/googleOidcToken.d.ts +4 -0
  434. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -0
  435. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +9 -0
  436. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +3 -7
  437. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -11
  438. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +3 -2
  439. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationSetupSupport.d.ts +51 -0
  440. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +3 -0
  441. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +35 -50
  442. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +3 -30
  443. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.d.ts +11 -0
  444. package/dist/types/wallet-server/src/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.d.ts +14 -1
  445. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.d.ts +27 -0
  446. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +1 -10
  447. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +2 -2
  448. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +0 -4
  449. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.d.ts +3 -0
  450. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +8 -50
  451. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +23 -10
  452. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.typecheck.d.ts +2 -0
  453. package/dist/types/wallet-server/src/router/cloudflare/runtime/cloudflare.types.d.ts +0 -2
  454. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOps.d.ts +9 -34
  455. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOpsClient.d.ts +2 -0
  456. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -1
  457. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRuntimeOps.d.ts +3 -0
  458. package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +0 -1
  459. package/dist/types/wallet-server/src/router/domains/ecdsa/thresholdEcdsaRequestValidation.d.ts +3 -15
  460. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +1 -1
  461. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -2
  462. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +2 -2
  463. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.typecheck.d.ts +2 -0
  464. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.d.ts +2 -0
  465. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.d.ts +2 -0
  466. package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/routerAbEd25519YaoWalletSession.d.ts +9 -50
  467. package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +0 -2
  468. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +0 -3
  469. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryKeyManifest.d.ts +1 -13
  470. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.d.ts +8 -9
  471. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmission.d.ts +13 -0
  472. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbOperationStepUp.d.ts +3 -4
  473. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +7 -33
  474. package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +1 -2
  475. package/dist/types/wallet-server/src/router/domains/syncAccount/syncAccountRequestValidation.d.ts +2 -7
  476. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +1 -0
  477. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationReservation.d.ts +51 -0
  478. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +2 -10
  479. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +2 -2
  480. package/dist/types/wallet-server/src/router/framework/apiCredentialPorts.d.ts +3 -1
  481. package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +39 -38
  482. package/dist/types/wallet-server/src/router/framework/googleLoginResolution.typecheck.d.ts +2 -0
  483. package/dist/types/wallet-server/src/router/framework/http.d.ts +1 -0
  484. package/dist/types/wallet-server/src/router/framework/registrationSetupDispatch.d.ts +13 -0
  485. package/dist/types/wallet-server/src/router/framework/ror/normalize.d.ts +1 -9
  486. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +1 -1
  487. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.d.ts +3 -6
  488. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingResponses.d.ts +17 -0
  489. package/dist/types/wallet-server/src/router/transport/fetch/routes/ecdsaOperationStepUpFactor.d.ts +37 -0
  490. package/dist/types/wallet-server/src/router/transport/fetch/routes/syncAccountBootstrap.d.ts +3 -5
  491. package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEcdsa.d.ts +0 -1
  492. package/dist/types/wallet-server/src/storage/d1Sql.d.ts +0 -1
  493. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/idempotencyRecords.d.ts +1 -2
  494. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/signingSessionSeal.types.d.ts +6 -8
  495. package/migrations/d1-signer/0040_namespace_home_challenges.sql +16 -0
  496. package/migrations/d1-signer/0041_step_up_admission_expiry.sql +28 -0
  497. package/migrations/d1-signer/0042_deployment_resource_challenges.sql +4 -0
  498. package/migrations/d1-signer/0043_google_registration_candidate_claim.sql +2 -0
  499. package/migrations/d1-signer/0044_linked_device_bootstrap_imports.sql +6 -0
  500. package/migrations/d1-signer/0045_wallet_owned_capability_receipts.sql +29 -0
  501. package/migrations/d1-signer/0046_wallet_owned_signing_abuse.sql +41 -0
  502. package/migrations/d1-signer/0047_remove_unused_near_public_keys.sql +2 -0
  503. package/migrations/d1-signer/0048_operation_owner_scope.sql +45 -0
  504. package/package.json +2 -3
  505. package/src/README.md +11 -3
  506. package/dist/esm/core/AuthService.js +0 -2
  507. package/dist/esm/core/NearPublicKeyStore.js +0 -200
  508. package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +0 -397
  509. package/dist/esm/core/ThresholdService/stores/KeyStore.js +0 -140
  510. package/dist/esm/core/ThresholdService/stores/SessionStore.js +0 -361
  511. package/dist/esm/core/ThresholdService/stores/StoreConfig.js +0 -13
  512. package/dist/esm/core/authService/AuthService.js +0 -594
  513. package/dist/esm/core/authService/bytes.js +0 -22
  514. package/dist/esm/core/authService/configValues.js +0 -15
  515. package/dist/esm/core/authService/emailOtpChallengeOperations.js +0 -126
  516. package/dist/esm/core/authService/emailOtpChallengeProof.js +0 -214
  517. package/dist/esm/core/authService/emailOtpChallengeVerification.js +0 -335
  518. package/dist/esm/core/authService/emailOtpChallenges.js +0 -260
  519. package/dist/esm/core/authService/emailOtpDelivery.js +0 -169
  520. package/dist/esm/core/authService/emailOtpGrant.js +0 -74
  521. package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +0 -175
  522. package/dist/esm/core/authService/emailOtpUnlock.js +0 -264
  523. package/dist/esm/core/authService/googleEmailOtpOperations.js +0 -141
  524. package/dist/esm/core/authService/googleEmailOtpRegistration.js +0 -674
  525. package/dist/esm/core/authService/identity.js +0 -57
  526. package/dist/esm/core/authService/identityOperations.js +0 -32
  527. package/dist/esm/core/authService/nearAccountOperations.js +0 -229
  528. package/dist/esm/core/authService/nearPublicKeyMetadata.js +0 -127
  529. package/dist/esm/core/authService/oidcVerification.js +0 -261
  530. package/dist/esm/core/authService/registrationThresholdHelpers.js +0 -30
  531. package/dist/esm/core/authService/runtime.js +0 -45
  532. package/dist/esm/core/authService/storeRegistry.js +0 -102
  533. package/dist/esm/core/authService/thresholdStoreSummary.js +0 -32
  534. package/dist/esm/core/authService/webauthnAuthority.js +0 -17
  535. package/dist/esm/core/defaultConfigsServer.js +0 -9
  536. package/dist/esm/core/hostedAccountIds.js +0 -225
  537. package/dist/esm/core/routerAbSigning/createRouterAbSigningRuntimes.js +0 -84
  538. package/dist/esm/core/signingLanes/LaneAggregateRevocationApplicationService.js +0 -86
  539. package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +0 -324
  540. package/dist/esm/core/signingLanes/LaneEnrollmentRevocation.js +0 -173
  541. package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +0 -198
  542. package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +0 -73
  543. package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +0 -68
  544. package/dist/esm/core/signingLanes/signingWorkerLaneMaterialIdentity.js +0 -0
  545. package/dist/esm/core/storeBackends.js +0 -208
  546. package/dist/esm/core/utils.js +0 -14
  547. package/dist/esm/core/webAuthnStoreBackends.js +0 -198
  548. package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +0 -56
  549. package/dist/esm/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.js +0 -10
  550. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.js +0 -22
  551. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -166
  552. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.js +0 -38
  553. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.js +0 -20
  554. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +0 -1459
  555. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLockStore.js +0 -114
  556. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.js +0 -16
  557. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +0 -171
  558. package/dist/esm/router/cloudflare/d1/signingLanes/index.js +0 -10
  559. package/dist/esm/router/cloudflare/durableObjects/thresholdStore.js +0 -404
  560. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +0 -596
  561. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +0 -273
  562. package/dist/esm/router/cloudflare/signingLanes/index.js +0 -4
  563. package/dist/esm/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.js +0 -32
  564. package/dist/esm/router/transport/fetch/routes/nearPublicKeys.js +0 -39
  565. package/dist/esm/shared-ts/src/signing-lanes/rotation.js +0 -8
  566. package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +0 -358
  567. package/dist/esm/shared-ts/src/signing-lanes/rotationLifecycle.js +0 -313
  568. package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +0 -532
  569. package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +0 -323
  570. package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +0 -59
  571. package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm +0 -0
  572. package/dist/types/shared-ts/src/signing-lanes/participantDigest.typecheck.d.ts +0 -2
  573. package/dist/types/shared-ts/src/signing-lanes/rotation.typecheck.d.ts +0 -2
  574. package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +0 -13
  575. package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +0 -78
  576. package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +0 -27
  577. package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +0 -6
  578. package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +0 -20
  579. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeAttempt.d.ts +0 -59
  580. package/dist/types/wallet-server/src/core/AuthService.d.ts +0 -3
  581. package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +0 -48
  582. package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +0 -21
  583. package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +0 -40
  584. package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +0 -98
  585. package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +0 -4
  586. package/dist/types/wallet-server/src/core/ThresholdService/stores/ThresholdStoreConfig.typecheck.d.ts +0 -2
  587. package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -490
  588. package/dist/types/wallet-server/src/core/authService/bytes.d.ts +0 -4
  589. package/dist/types/wallet-server/src/core/authService/configValues.d.ts +0 -7
  590. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +0 -109
  591. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +0 -169
  592. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +0 -47
  593. package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +0 -94
  594. package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +0 -66
  595. package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +0 -43
  596. package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +0 -49
  597. package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +0 -71
  598. package/dist/types/wallet-server/src/core/authService/googleEmailOtpOperations.d.ts +0 -126
  599. package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +0 -169
  600. package/dist/types/wallet-server/src/core/authService/identity.d.ts +0 -25
  601. package/dist/types/wallet-server/src/core/authService/identityOperations.d.ts +0 -19
  602. package/dist/types/wallet-server/src/core/authService/nearAccountOperations.d.ts +0 -55
  603. package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +0 -44
  604. package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +0 -66
  605. package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -11
  606. package/dist/types/wallet-server/src/core/authService/runtime.d.ts +0 -20
  607. package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -53
  608. package/dist/types/wallet-server/src/core/authService/thresholdStoreSummary.d.ts +0 -3
  609. package/dist/types/wallet-server/src/core/authService/webauthnAuthority.d.ts +0 -5
  610. package/dist/types/wallet-server/src/core/defaultConfigsServer.d.ts +0 -5
  611. package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -16
  612. package/dist/types/wallet-server/src/core/routerAbSigning/createRouterAbSigningRuntimes.d.ts +0 -16
  613. package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +0 -36
  614. package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +0 -62
  615. package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentActivation.d.ts +0 -13
  616. package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentRevocation.d.ts +0 -24
  617. package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleApplicationService.d.ts +0 -141
  618. package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +0 -228
  619. package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +0 -58
  620. package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +0 -30
  621. package/dist/types/wallet-server/src/core/signingLanes/signingWorkerLaneMaterialIdentity.d.ts +0 -21
  622. package/dist/types/wallet-server/src/core/storeBackends.d.ts +0 -83
  623. package/dist/types/wallet-server/src/core/utils.d.ts +0 -3
  624. package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +0 -96
  625. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +0 -29
  626. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.d.ts +0 -4
  627. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.d.ts +0 -4
  628. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -24
  629. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.d.ts +0 -20
  630. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.d.ts +0 -13
  631. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.d.ts +0 -51
  632. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLockStore.d.ts +0 -28
  633. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.d.ts +0 -5
  634. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneRecords.d.ts +0 -107
  635. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/index.d.ts +0 -10
  636. package/dist/types/wallet-server/src/router/cloudflare/durableObjects/thresholdStore.d.ts +0 -18
  637. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.d.ts +0 -217
  638. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.d.ts +0 -73
  639. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/index.d.ts +0 -4
  640. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.d.ts +0 -6
  641. package/dist/types/wallet-server/src/router/transport/fetch/routes/nearPublicKeys.d.ts +0 -3
  642. /package/dist/esm/{core/signingLanes/LaneEffectJournalStore.js → authorization/recoveryRouting.js} +0 -0
  643. /package/dist/esm/{core/signingLanes/LaneLifecycleStore.js → authorization/sessionRouting.js} +0 -0
@@ -1,29 +1,8 @@
1
- import type { AuthorizedOperationId } from '../authorization/capabilityKinds';
2
- import type { KeyCreationSignerSlot } from '../passkey-custody/primitives';
3
- import type { MpcMaterialActivationId, MpcMaterialActivationRef, ThresholdEcdsaSessionId, WalletId, LaneHolderRecipientHandleV1 } from '../utils/domainIds';
4
- import type { EcdsaCapabilityManifestId, EcdsaCapabilityManifestRevision, EcdsaLifecycleId, EcdsaServerGeneration } from '../utils/ecdsaCapabilityActivation';
5
- import type { CorrelationId, DigestB64u, IsoTimestamp } from '../utils/canonicalPrimitives';
6
- import type { NearEd25519SigningKeyId } from '../utils/registrationIds';
7
- import type { EcdsaThresholdKeyId } from '../threshold/ecdsaDerivationRoleLocalBootstrap';
8
- import type { EcdsaManifestIdentity, EcdsaRelayerKeyId, Ed25519YaoSuiteId, LaneEnrollmentId, LaneOperationId, LaneOperationIdempotencyKey, LaneShareEpoch, LinkedDeviceEnrollmentId, SigningLaneId, ThresholdEcdsaChainTarget, WalletKeyId } from './ids';
9
- import type { LaneHolderParticipantId, HpkePublicKeyB64u, HpkePublicKeyDigestB64u, LaneCustodyBindingDigestB64u, LaneParticipantBindingDigestB64u, LaneHolderCustodyBindingId, SigningWorkerParticipantId, SigningWorkerRecipientKeyId, LaneHolderParticipantRecordV1, SigningWorkerParticipantRecordV1 } from './participants';
10
- import type { EvmFamilySigningKeySlotId } from './evmFamilySigningKeySlotId';
1
+ import type { MpcMaterialActivationRef } from '../utils/domainIds';
2
+ import type { LaneShareEpoch, SigningLaneId } from './ids';
3
+ import type { LaneHolderParticipantId, SigningWorkerParticipantId, SigningWorkerRecipientKeyId } from './participants';
11
4
  import type { SigningLaneKind } from './records';
12
5
  import type { OwnerLaneParticipantContinuityV1 } from './ownerContinuity';
13
- export type LinkedDeviceLaneAuthorizationBindingV1 = {
14
- kind: 'linked_device_enrollment';
15
- authorizedOperationId: AuthorizedOperationId;
16
- linkedDeviceEnrollmentId: LinkedDeviceEnrollmentId;
17
- linkedDevicePermissionDigestB64u: string;
18
- ownerLaneRefreshDigestB64u?: never;
19
- };
20
- export type OwnerLaneRefreshAuthorizationBindingV1 = {
21
- kind: 'owner_lane_refresh';
22
- authorizedOperationId: AuthorizedOperationId;
23
- ownerLaneRefreshDigestB64u: string;
24
- linkedDevicePermissionDigestB64u?: never;
25
- };
26
- export type LaneOperationAuthorizationBindingV1 = LinkedDeviceLaneAuthorizationBindingV1 | OwnerLaneRefreshAuthorizationBindingV1;
27
6
  type ActiveLaneProtocolSourceBaseV1 = {
28
7
  laneId: SigningLaneId;
29
8
  laneShareEpoch: LaneShareEpoch;
@@ -32,7 +11,7 @@ type ActiveLaneProtocolSourceBaseV1 = {
32
11
  materialActivation: MpcMaterialActivationRef;
33
12
  };
34
13
  /** Existing owner signer rows expose continuity, without linked-lane HPKE identities. */
35
- export type OwnerLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
14
+ type OwnerLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
36
15
  sourceKind: 'owner_registration';
37
16
  laneKind: 'owner_passkey' | 'owner_email_otp';
38
17
  ownerParticipantContinuity: OwnerLaneParticipantContinuityV1;
@@ -41,7 +20,7 @@ export type OwnerLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
41
20
  signingWorkerRecipientKeyId?: never;
42
21
  };
43
22
  /** Independently provisioned lanes carry their durable holder/worker identities. */
44
- export type ProvisionedLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
23
+ type ProvisionedLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
45
24
  sourceKind: 'provisioned_lane';
46
25
  laneKind: Exclude<SigningLaneKind, 'owner_passkey' | 'owner_email_otp'>;
47
26
  holderParticipantId: LaneHolderParticipantId;
@@ -50,823 +29,5 @@ export type ProvisionedLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
50
29
  ownerParticipantContinuity?: never;
51
30
  };
52
31
  export type ActiveLaneProtocolSourceV1 = OwnerLaneProtocolSourceV1 | ProvisionedLaneProtocolSourceV1;
53
- export declare function isProvisionedLaneProtocolSourceV1(source: ActiveLaneProtocolSourceV1): source is ProvisionedLaneProtocolSourceV1;
54
- type LaneTargetHolderV1 = {
55
- participantId: LaneHolderParticipantId;
56
- participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
57
- custodyBindingId: LaneHolderCustodyBindingId;
58
- custodyBindingDigestB64u: LaneCustodyBindingDigestB64u;
59
- hpkePublicKeyB64u: HpkePublicKeyB64u;
60
- hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
61
- };
62
- export type LaneTargetSigningWorkerV1 = {
63
- participantId: SigningWorkerParticipantId;
64
- participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
65
- recipientKeyId: SigningWorkerRecipientKeyId;
66
- hpkePublicKeyB64u: HpkePublicKeyB64u;
67
- hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
68
- };
69
- export type LaneCreationTargetV1 = {
70
- operation: 'create_lane';
71
- laneId: SigningLaneId;
72
- laneKind: 'linked_device';
73
- laneShareEpoch: LaneShareEpoch;
74
- expectedTargetState: 'absent';
75
- priorMaterialActivation?: never;
76
- };
77
- export type LaneRefreshTargetV1 = {
78
- operation: 'refresh_lane';
79
- laneId: SigningLaneId;
80
- laneKind: 'owner_passkey' | 'owner_email_otp' | 'linked_device' | 'recovery' | 'break_glass';
81
- laneShareEpoch: LaneShareEpoch;
82
- expectedTargetState: 'active_previous_epoch';
83
- priorMaterialActivation: MpcMaterialActivationRef;
84
- };
85
- type EcdsaTargetThresholdSessionBindingV1 = {
86
- chainTarget: ThresholdEcdsaChainTarget;
87
- thresholdSessionId: ThresholdEcdsaSessionId;
88
- participantBindingDigestB64u: string;
89
- };
90
- export type EcdsaSourceCapabilityBindingV1 = {
91
- manifestId: EcdsaCapabilityManifestId;
92
- manifestRevision: EcdsaCapabilityManifestRevision;
93
- serverGeneration: EcdsaServerGeneration;
94
- ecdsaThresholdKeyId: EcdsaThresholdKeyId;
95
- relayerKeyId: EcdsaRelayerKeyId;
96
- };
97
- export type EcdsaTargetCapabilityBindingV1 = {
98
- manifestId: EcdsaCapabilityManifestId;
99
- manifestRevision: EcdsaCapabilityManifestRevision;
100
- ecdsaThresholdKeyId: EcdsaThresholdKeyId;
101
- orderedThresholdSessions: readonly [
102
- EcdsaTargetThresholdSessionBindingV1,
103
- ...EcdsaTargetThresholdSessionBindingV1[]
104
- ];
105
- };
106
- type LaneProtocolJobCommonV1 = {
107
- operationId: LaneOperationId;
108
- enrollmentId: LaneEnrollmentId;
109
- idempotencyKey: LaneOperationIdempotencyKey;
110
- walletId: WalletId;
111
- walletKeyId: WalletKeyId;
112
- source: ActiveLaneProtocolSourceV1;
113
- targetHolder: LaneTargetHolderV1;
114
- targetSigningWorker: LaneTargetSigningWorkerV1;
115
- targetMaterialActivationId: MpcMaterialActivationId;
116
- protocolVersion: 'rotatable_signing_lane_protocol_v1';
117
- expiresAtMs: number;
118
- };
119
- type LaneCreationOperationV1 = {
120
- target: LaneCreationTargetV1;
121
- authorization: LinkedDeviceLaneAuthorizationBindingV1;
122
- };
123
- type LaneRefreshOperationV1 = {
124
- target: LaneRefreshTargetV1;
125
- authorization: OwnerLaneRefreshAuthorizationBindingV1;
126
- };
127
- type Ed25519YaoLaneJobCurveV1 = {
128
- kind: 'ed25519_yao_lane_job_v1';
129
- keyFamily: 'ed25519';
130
- registeredPublicKeyB64u: string;
131
- nearEd25519SigningKeyId: NearEd25519SigningKeyId;
132
- keyCreationSignerSlot: KeyCreationSignerSlot;
133
- stableContextBindingB64u: string;
134
- yaoSuiteId: Ed25519YaoSuiteId;
135
- circuitDigestB64u: string;
136
- evmFamilySigningKeySlotId?: never;
137
- thresholdPublicKey33B64u?: never;
138
- evmAddress?: never;
139
- };
140
- type EcdsaAdditiveLaneJobCurveV1 = {
141
- kind: 'ecdsa_additive_lane_job_v1';
142
- keyFamily: 'ecdsa_secp256k1';
143
- evmFamilySigningKeySlotId: EvmFamilySigningKeySlotId;
144
- thresholdPublicKey33B64u: string;
145
- evmAddress: string;
146
- sourceCapability: EcdsaSourceCapabilityBindingV1;
147
- targetCapability: EcdsaTargetCapabilityBindingV1;
148
- sourceHolderVerifyingShare33B64u: string;
149
- sourceServerVerifyingShare33B64u: string;
150
- reshareChannelBindingDigestB64u: string;
151
- transcriptEncoding: 'ecdsa_additive_lane_transcript_v1';
152
- nearEd25519SigningKeyId?: never;
153
- registeredPublicKeyB64u?: never;
154
- keyCreationSignerSlot?: never;
155
- stableContextBindingB64u?: never;
156
- yaoRequestKind?: never;
157
- yaoSuiteId?: never;
158
- circuitDigestB64u?: never;
159
- };
160
- export type Ed25519YaoLaneCreationJobV1 = LaneProtocolJobCommonV1 & Ed25519YaoLaneJobCurveV1 & LaneCreationOperationV1 & {
161
- yaoRequestKind: 'lane_provisioning';
162
- };
163
- type Ed25519YaoLaneRefreshJobV1 = LaneProtocolJobCommonV1 & Ed25519YaoLaneJobCurveV1 & LaneRefreshOperationV1 & {
164
- yaoRequestKind: 'lane_refresh';
165
- };
166
- export type Ed25519YaoLaneJobV1 = Ed25519YaoLaneCreationJobV1 | Ed25519YaoLaneRefreshJobV1;
167
- export type EcdsaAdditiveLaneCreationJobV1 = LaneProtocolJobCommonV1 & LaneCreationOperationV1 & EcdsaAdditiveLaneJobCurveV1;
168
- type EcdsaAdditiveLaneRefreshJobV1 = LaneProtocolJobCommonV1 & LaneRefreshOperationV1 & EcdsaAdditiveLaneJobCurveV1;
169
- export type EcdsaAdditiveLaneJobV1 = EcdsaAdditiveLaneCreationJobV1 | EcdsaAdditiveLaneRefreshJobV1;
170
- export type RotatableSigningLaneJobV1 = Ed25519YaoLaneJobV1 | EcdsaAdditiveLaneJobV1;
171
- export type LaneProtocolCommitReceiptV1 = {
172
- kind: 'lane_protocol_commit_receipt_v1';
173
- operationId: LaneOperationId;
174
- enrollmentId: LaneEnrollmentId;
175
- walletId: WalletId;
176
- walletKeyId: WalletKeyId;
177
- sourceLaneId: SigningLaneId;
178
- sourceLaneShareEpoch: LaneShareEpoch;
179
- sourceRevocationEpoch: number;
180
- sourceMaterialActivation: MpcMaterialActivationRef;
181
- targetLaneId: SigningLaneId;
182
- targetLaneShareEpoch: LaneShareEpoch;
183
- targetMaterialActivationId: MpcMaterialActivationId;
184
- keyFamily: 'ed25519' | 'ecdsa_secp256k1';
185
- publicIdentityDigestB64u: string;
186
- targetHolderPublicCommitmentB64u: string;
187
- targetServerPublicCommitmentB64u: string;
188
- targetHolderCiphertextDigestSetB64u: string;
189
- targetServerCiphertextDigestSetB64u: string;
190
- holderRecipientKeyDigestB64u: string;
191
- serverRecipientKeyDigestB64u: string;
192
- transcriptHashB64u: string;
193
- committedAtMs: number;
194
- };
195
- export type LaneHolderDeliveryReceiptV1 = {
196
- kind: 'lane_holder_delivery_receipt_v1';
197
- operationId: LaneOperationId;
198
- enrollmentId: LaneEnrollmentId;
199
- targetLaneId: SigningLaneId;
200
- targetLaneShareEpoch: LaneShareEpoch;
201
- targetMaterialActivationId: MpcMaterialActivationId;
202
- holderParticipantBindingDigestB64u: string;
203
- holderRecipientKeyDigestB64u: string;
204
- holderCiphertextDigestSetB64u: string;
205
- sealedHolderRecordDigestB64u: string;
206
- transcriptHashB64u: string;
207
- acknowledgedAtMs: number;
208
- };
209
- export type LaneServerActivationReceiptV1 = {
210
- kind: 'lane_server_activation_receipt_v1';
211
- operationId: LaneOperationId;
212
- enrollmentId: LaneEnrollmentId;
213
- targetLaneId: SigningLaneId;
214
- targetLaneShareEpoch: LaneShareEpoch;
215
- targetMaterialActivation: MpcMaterialActivationRef;
216
- signingWorkerParticipantBindingDigestB64u: string;
217
- serverCiphertextDigestSetB64u: string;
218
- transcriptHashB64u: string;
219
- activatedAtMs: number;
220
- };
221
- type LaneProtocolAbortReason = 'cancelled' | 'expired' | 'revoked_before_commit';
222
- type LaneProtocolCompletionReason = 'exact_redelivery_required' | 'recovery_required';
223
- export type LaneProtocolLifecycle = {
224
- state: 'preparing';
225
- startedAtMs: number;
226
- } | {
227
- state: 'awaiting_protocol_commitment';
228
- startedAtMs: number;
229
- } | {
230
- state: 'committed_awaiting_holder_delivery';
231
- startedAtMs: number;
232
- committedAtMs: number;
233
- transcriptHashB64u: string;
234
- protocolCommitReceiptDigestB64u: string;
235
- } | {
236
- state: 'awaiting_server_activation';
237
- startedAtMs: number;
238
- committedAtMs: number;
239
- transcriptHashB64u: string;
240
- protocolCommitReceiptDigestB64u: string;
241
- holderDeliveryReceiptDigestB64u: string;
242
- holderReceiptAtMs: number;
243
- } | {
244
- state: 'ready_for_parent_visibility';
245
- startedAtMs: number;
246
- committedAtMs: number;
247
- transcriptHashB64u: string;
248
- protocolCommitReceiptDigestB64u: string;
249
- holderDeliveryReceiptDigestB64u: string;
250
- holderReceiptAtMs: number;
251
- serverActivationReceiptDigestB64u: string;
252
- serverActivatedAtMs: number;
253
- } | {
254
- state: 'active';
255
- transcriptHashB64u: string;
256
- protocolCommitReceiptDigestB64u: string;
257
- holderDeliveryReceiptDigestB64u: string;
258
- serverActivationReceiptDigestB64u: string;
259
- aggregateActivationReceiptDigestB64u: string;
260
- activatedAtMs: number;
261
- } | {
262
- state: 'aborted_precommit';
263
- startedAtMs: number;
264
- abortedAtMs: number;
265
- abortReason: LaneProtocolAbortReason;
266
- } | {
267
- state: 'committed_completion_required';
268
- startedAtMs: number;
269
- committedAtMs: number;
270
- transcriptHashB64u: string;
271
- protocolCommitReceiptDigestB64u: string;
272
- recoveryReason: LaneProtocolCompletionReason;
273
- };
274
- export type LaneProtocolRecordV1 = {
275
- job: RotatableSigningLaneJobV1;
276
- lifecycle: LaneProtocolLifecycle;
277
- };
278
- export type EcdsaAdditiveLaneHolderRoundV1 = {
279
- kind: 'ecdsa_additive_lane_holder_round_v1';
280
- preambleHashB64u: string;
281
- targetHolderPublicCommitment33B64u: string;
282
- encryptedDeltaCiphertextDigestB64u: string;
283
- sealedTargetHolderMaterialDigestB64u: string;
284
- holderAttestationB64u: string;
285
- holderCommittedAtMs: number;
286
- };
287
- export type LaneEnrollmentManifestChildV1 = {
288
- operationId: LaneOperationId;
289
- walletKeyId: WalletKeyId;
290
- keyFamily: 'ed25519' | 'ecdsa_secp256k1';
291
- sourceLaneId: SigningLaneId;
292
- sourceLaneShareEpoch: LaneShareEpoch;
293
- sourceRevocationEpoch: number;
294
- sourceMaterialActivation: MpcMaterialActivationRef;
295
- targetLaneId: SigningLaneId;
296
- targetLaneShareEpoch: LaneShareEpoch;
297
- targetMaterialActivationId: MpcMaterialActivationId;
298
- holderParticipantBindingDigestB64u: string;
299
- signingWorkerParticipantBindingDigestB64u: string;
300
- };
301
- export type LaneEnrollmentManifestV1 = {
302
- kind: 'lane_enrollment_manifest_v1';
303
- enrollmentId: LaneEnrollmentId;
304
- walletId: WalletId;
305
- authorization: LaneOperationAuthorizationBindingV1;
306
- orderedChildren: readonly [LaneEnrollmentManifestChildV1, ...LaneEnrollmentManifestChildV1[]];
307
- createdAtMs: number;
308
- expiresAtMs: number;
309
- };
310
- export type AggregateLaneActivationChildReceiptV1 = {
311
- operationId: LaneOperationId;
312
- walletKeyId: WalletKeyId;
313
- targetLaneId: SigningLaneId;
314
- targetLaneShareEpoch: LaneShareEpoch;
315
- targetMaterialActivation: MpcMaterialActivationRef;
316
- protocolCommitReceiptDigestB64u: string;
317
- holderDeliveryReceiptDigestB64u: string;
318
- serverActivationReceiptDigestB64u: string;
319
- };
320
- export type AggregateLaneActivationReceiptV1 = {
321
- kind: 'aggregate_lane_activation_receipt_v1';
322
- enrollmentId: LaneEnrollmentId;
323
- walletId: WalletId;
324
- manifestDigestB64u: string;
325
- orderedChildReceipts: readonly [
326
- AggregateLaneActivationChildReceiptV1,
327
- ...AggregateLaneActivationChildReceiptV1[]
328
- ];
329
- activatedAtMs: number;
330
- };
331
- export type LaneRefreshPredecessorRetirementV1 = {
332
- refreshOperationId: LaneOperationId;
333
- sourceLaneId: SigningLaneId;
334
- sourceLaneShareEpoch: LaneShareEpoch;
335
- sourceMaterialActivation: MpcMaterialActivationRef;
336
- retirementEffectBindingDigestB64u: DigestB64u;
337
- retirementReceipt: LaneServerRetirementReceiptV1;
338
- };
339
- export type CommitLaneEnrollmentActivationV1 = {
340
- kind: 'commit_lane_enrollment_activation_v1';
341
- enrollmentId: LaneEnrollmentId;
342
- walletId: WalletId;
343
- manifestDigestB64u: string;
344
- orderedChildReceipts: readonly [
345
- AggregateLaneActivationChildReceiptV1,
346
- ...AggregateLaneActivationChildReceiptV1[]
347
- ];
348
- orderedPredecessorRetirements: readonly LaneRefreshPredecessorRetirementV1[];
349
- activatedAtMs: number;
350
- };
351
- export type LaneEnrollmentLifecycleV1 = {
352
- state: 'preparing';
353
- manifestDigestB64u: string;
354
- startedAtMs: number;
355
- } | {
356
- state: 'committed_completion_required';
357
- manifestDigestB64u: string;
358
- committedChildOperationIds: readonly [LaneOperationId, ...LaneOperationId[]];
359
- markedAtMs: number;
360
- } | {
361
- state: 'ready_for_visibility';
362
- manifestDigestB64u: string;
363
- aggregateReceiptDigestB64u: string;
364
- readyAtMs: number;
365
- } | {
366
- state: 'active';
367
- manifestDigestB64u: string;
368
- aggregateReceiptDigestB64u: string;
369
- activatedAtMs: number;
370
- } | {
371
- state: 'cancelled_precommit';
372
- cancelledAtMs: number;
373
- } | {
374
- state: 'revoking_committed_targets';
375
- manifestDigestB64u: string;
376
- reason: 'cancelled_after_commit' | 'expired_after_commit' | 'revoked_during_activation';
377
- markedAtMs: number;
378
- } | {
379
- state: 'revoked';
380
- manifestDigestB64u: string;
381
- aggregateRevocationReceiptDigestB64u: string;
382
- revokedAtMs: number;
383
- };
384
- export type EcdsaServerRetirementReceiptV1 = {
385
- kind: 'ecdsa_server_retirement_receipt_v1';
386
- manifest: EcdsaManifestIdentity;
387
- materialActivation: MpcMaterialActivationRef;
388
- walletKeyId: WalletKeyId;
389
- laneId: SigningLaneId;
390
- laneShareEpoch: LaneShareEpoch;
391
- revocationEpoch: number;
392
- retirementReason: 'lane_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
393
- retirementCorrelationId: CorrelationId;
394
- retirementRequestDigestB64u: string;
395
- serverGeneration: EcdsaServerGeneration;
396
- lifecycleId: EcdsaLifecycleId;
397
- receiptDigestB64u: string;
398
- retiredAt: IsoTimestamp;
399
- };
400
- export type SigningWorkerLaneMaterialIdentityV1<TKeyFamily extends 'ed25519' | 'ecdsa_secp256k1' = 'ed25519' | 'ecdsa_secp256k1'> = {
401
- operationId: LaneOperationId;
402
- enrollmentId: LaneEnrollmentId;
403
- walletId: WalletId;
404
- walletKeyId: WalletKeyId;
405
- targetLaneId: SigningLaneId;
406
- targetLaneShareEpoch: LaneShareEpoch;
407
- targetMaterialActivationId: MpcMaterialActivationId;
408
- keyFamily: TKeyFamily;
409
- holderParticipantBindingDigestB64u: DigestB64u;
410
- signingWorkerParticipantBindingDigestB64u: DigestB64u;
411
- holderRecipientKeyDigestB64u: DigestB64u;
412
- serverRecipientKeyDigestB64u: DigestB64u;
413
- transcriptHashB64u: DigestB64u;
414
- protocolCommitReceiptDigestB64u: DigestB64u;
415
- };
416
- export type Ed25519ServerRetirementReceiptV1 = {
417
- kind: 'ed25519_server_retirement_receipt_v1';
418
- identity: SigningWorkerLaneMaterialIdentityV1<'ed25519'>;
419
- revocationEpoch: number;
420
- retirementReason: 'lane_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
421
- retirementCorrelationId: CorrelationId;
422
- retirementRequestDigestB64u: DigestB64u;
423
- receiptDigestB64u: DigestB64u;
424
- retiredAtMs: number;
425
- };
426
- export type LaneServerRetirementReceiptV1 = EcdsaServerRetirementReceiptV1 | Ed25519ServerRetirementReceiptV1;
427
- type LaneProductEpochRecordCommonV1 = {
428
- kind: 'lane_product_epoch_record_v1';
429
- walletId: WalletId;
430
- walletKeyId: WalletKeyId;
431
- laneId: SigningLaneId;
432
- laneKind: SigningLaneKind;
433
- laneShareEpoch: LaneShareEpoch;
434
- keyFamily: 'ed25519' | 'ecdsa_secp256k1';
435
- enrollmentId: LaneEnrollmentId;
436
- operationId: LaneOperationId;
437
- targetMaterialActivationId: MpcMaterialActivationId;
438
- materialActivation: MpcMaterialActivationRef;
439
- publicIdentityDigestB64u: string;
440
- holderParticipant: LaneHolderParticipantRecordV1;
441
- signingWorkerParticipant: SigningWorkerParticipantRecordV1;
442
- participantSetBindingDigestB64u: LaneParticipantBindingDigestB64u;
443
- revocationEpoch: number;
444
- createdAtMs: number;
445
- };
446
- export type LaneProductEpochPendingVisibilityV1 = LaneProductEpochRecordCommonV1 & {
447
- state: 'pending_visibility';
448
- aggregateManifestDigestB64u: string;
449
- protocolCommitReceiptDigestB64u: string;
450
- holderDeliveryReceiptDigestB64u: string;
451
- serverActivationReceiptDigestB64u: string;
452
- pendingSinceMs: number;
453
- activatedAtMs?: never;
454
- retiredAtMs?: never;
455
- retirementReason?: never;
456
- retirementReceiptDigestB64u?: never;
457
- revokedAtMs?: never;
458
- revocationReason?: never;
459
- revocationReceiptDigestB64u?: never;
460
- retirementEffectBindingDigestB64u?: never;
461
- revocationRequestedAtMs?: never;
462
- };
463
- export type LaneProductEpochActiveV1 = LaneProductEpochRecordCommonV1 & {
464
- state: 'active';
465
- aggregateManifestDigestB64u: string;
466
- aggregateActivationReceiptDigestB64u: string;
467
- activatedAtMs: number;
468
- pendingSinceMs?: never;
469
- protocolCommitReceiptDigestB64u?: never;
470
- holderDeliveryReceiptDigestB64u?: never;
471
- serverActivationReceiptDigestB64u?: never;
472
- retiredAtMs?: never;
473
- retirementReason?: never;
474
- retirementReceiptDigestB64u?: never;
475
- revokedAtMs?: never;
476
- revocationReason?: never;
477
- revocationReceiptDigestB64u?: never;
478
- retirementEffectBindingDigestB64u?: never;
479
- revocationRequestedAtMs?: never;
480
- };
481
- export type LaneProductEpochRetiredV1 = LaneProductEpochRecordCommonV1 & {
482
- state: 'retired';
483
- retirementReason: 'rotation' | 'device_compromise' | 'agent_compromise';
484
- retirementReceiptDigestB64u: string;
485
- retiredAtMs: number;
486
- pendingSinceMs?: never;
487
- aggregateManifestDigestB64u?: never;
488
- protocolCommitReceiptDigestB64u?: never;
489
- holderDeliveryReceiptDigestB64u?: never;
490
- serverActivationReceiptDigestB64u?: never;
491
- aggregateActivationReceiptDigestB64u?: never;
492
- activatedAtMs?: never;
493
- revokedAtMs?: never;
494
- revocationReason?: never;
495
- revocationReceiptDigestB64u?: never;
496
- retirementEffectBindingDigestB64u?: never;
497
- revocationRequestedAtMs?: never;
498
- };
499
- export type LaneProductEpochRevocationPendingV1 = LaneProductEpochRecordCommonV1 & {
500
- state: 'revocation_pending';
501
- revocationReason: 'user_revoked' | 'policy_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
502
- retirementEffectBindingDigestB64u: string;
503
- revocationRequestedAtMs: number;
504
- pendingSinceMs?: never;
505
- aggregateManifestDigestB64u?: never;
506
- protocolCommitReceiptDigestB64u?: never;
507
- holderDeliveryReceiptDigestB64u?: never;
508
- serverActivationReceiptDigestB64u?: never;
509
- aggregateActivationReceiptDigestB64u?: never;
510
- activatedAtMs?: never;
511
- retiredAtMs?: never;
512
- retirementReason?: never;
513
- retirementReceiptDigestB64u?: never;
514
- revokedAtMs?: never;
515
- revocationReceiptDigestB64u?: never;
516
- };
517
- export type LaneProductEpochRevokedV1 = LaneProductEpochRecordCommonV1 & {
518
- state: 'revoked';
519
- revocationReason: 'user_revoked' | 'policy_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
520
- retirementEffectBindingDigestB64u: string;
521
- revocationReceiptDigestB64u: string;
522
- revokedAtMs: number;
523
- pendingSinceMs?: never;
524
- aggregateManifestDigestB64u?: never;
525
- protocolCommitReceiptDigestB64u?: never;
526
- holderDeliveryReceiptDigestB64u?: never;
527
- serverActivationReceiptDigestB64u?: never;
528
- aggregateActivationReceiptDigestB64u?: never;
529
- activatedAtMs?: never;
530
- retiredAtMs?: never;
531
- retirementReason?: never;
532
- retirementReceiptDigestB64u?: never;
533
- revocationRequestedAtMs?: never;
534
- };
535
- export type LaneProductEpochRecordV1 = LaneProductEpochPendingVisibilityV1 | LaneProductEpochActiveV1 | LaneProductEpochRetiredV1 | LaneProductEpochRevocationPendingV1 | LaneProductEpochRevokedV1;
536
- export type CompleteSigningLaneRevocationV1 = {
537
- kind: 'complete_signing_lane_revocation_v1';
538
- command: RevokeSigningLaneV1;
539
- expectedVersion: number;
540
- commandDigestB64u: string;
541
- retirementReceipt: LaneServerRetirementReceiptV1;
542
- revokedAtMs: number;
543
- };
544
- export type AggregateLaneRevocationChildReceiptV1 = {
545
- operationId: LaneOperationId;
546
- walletKeyId: WalletKeyId;
547
- targetLaneId: SigningLaneId;
548
- targetLaneShareEpoch: LaneShareEpoch;
549
- targetMaterialActivation: MpcMaterialActivationRef;
550
- revocationEpoch: number;
551
- retirementReceiptDigestB64u: string;
552
- };
553
- export type AggregateLaneRevocationReceiptV1 = {
554
- kind: 'aggregate_lane_revocation_receipt_v1';
555
- enrollmentId: LaneEnrollmentId;
556
- walletId: WalletId;
557
- manifestDigestB64u: string;
558
- orderedChildReceipts: readonly [
559
- AggregateLaneRevocationChildReceiptV1,
560
- ...AggregateLaneRevocationChildReceiptV1[]
561
- ];
562
- revokedAtMs: number;
563
- };
564
- export type RevokeLaneEnrollmentV1 = {
565
- kind: 'revoke_lane_enrollment_v1';
566
- enrollmentId: LaneEnrollmentId;
567
- walletId: WalletId;
568
- manifestDigestB64u: string;
569
- reason: 'cancelled_after_commit' | 'expired_after_commit' | 'revoked_during_activation' | 'user_revoked' | 'device_compromise' | 'agent_compromise';
570
- requestedAtMs: number;
571
- };
572
- export type RevokeSigningLaneV1 = {
573
- kind: 'revoke_signing_lane_v1';
574
- walletId: WalletId;
575
- walletKeyId: WalletKeyId;
576
- laneId: SigningLaneId;
577
- laneShareEpoch: LaneShareEpoch;
578
- expectedRevocationEpoch: number;
579
- reason: 'user_revoked' | 'policy_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
580
- retirementCorrelationId: CorrelationId;
581
- retirementRequestDigestB64u: string;
582
- retirementEffectBindingDigestB64u: string;
583
- requestedAtMs: number;
584
- };
585
- export type CommitLaneEnrollmentRevocationV1 = {
586
- kind: 'commit_lane_enrollment_revocation_v1';
587
- enrollmentId: LaneEnrollmentId;
588
- walletId: WalletId;
589
- manifestDigestB64u: string;
590
- receipt: AggregateLaneRevocationReceiptV1;
591
- revokedAtMs: number;
592
- };
593
- export type LaneEnrollmentActivationResultV1 = {
594
- kind: 'lane_enrollment_activation_result_v1';
595
- outcome: 'applied';
596
- enrollmentId: LaneEnrollmentId;
597
- version: number;
598
- commandDigestB64u: string;
599
- receipt: AggregateLaneActivationReceiptV1;
600
- lifecycle: Extract<LaneEnrollmentLifecycleV1, {
601
- state: 'active';
602
- }>;
603
- productEpochs: readonly [LaneProductEpochActiveV1, ...LaneProductEpochActiveV1[]];
604
- } | {
605
- kind: 'lane_enrollment_activation_result_v1';
606
- outcome: 'replayed';
607
- enrollmentId: LaneEnrollmentId;
608
- version: number;
609
- commandDigestB64u: string;
610
- receipt: AggregateLaneActivationReceiptV1;
611
- lifecycle: Extract<LaneEnrollmentLifecycleV1, {
612
- state: 'active';
613
- }>;
614
- productEpochs: readonly [LaneProductEpochActiveV1, ...LaneProductEpochActiveV1[]];
615
- } | {
616
- kind: 'lane_enrollment_activation_result_v1';
617
- outcome: 'conflict';
618
- enrollmentId: LaneEnrollmentId;
619
- expectedVersion: number;
620
- actualVersion: number;
621
- requestedCommandDigestB64u: string;
622
- storedCommandDigestB64u: string;
623
- };
624
- export type LaneEnrollmentRevocationResultV1 = {
625
- kind: 'lane_enrollment_revocation_result_v1';
626
- outcome: 'applied';
627
- enrollmentId: LaneEnrollmentId;
628
- version: number;
629
- commandDigestB64u: string;
630
- receipt: AggregateLaneRevocationReceiptV1;
631
- lifecycle: Extract<LaneEnrollmentLifecycleV1, {
632
- state: 'revoked';
633
- }>;
634
- productEpochs: readonly [LaneProductEpochRevokedV1, ...LaneProductEpochRevokedV1[]];
635
- } | {
636
- kind: 'lane_enrollment_revocation_result_v1';
637
- outcome: 'replayed';
638
- enrollmentId: LaneEnrollmentId;
639
- version: number;
640
- commandDigestB64u: string;
641
- receipt: AggregateLaneRevocationReceiptV1;
642
- lifecycle: Extract<LaneEnrollmentLifecycleV1, {
643
- state: 'revoked';
644
- }>;
645
- productEpochs: readonly [LaneProductEpochRevokedV1, ...LaneProductEpochRevokedV1[]];
646
- } | {
647
- kind: 'lane_enrollment_revocation_result_v1';
648
- outcome: 'conflict';
649
- enrollmentId: LaneEnrollmentId;
650
- expectedVersion: number;
651
- actualVersion: number;
652
- requestedCommandDigestB64u: string;
653
- storedCommandDigestB64u: string;
654
- };
655
- export type LaneSigningLaneRevocationResultV1 = {
656
- kind: 'lane_signing_lane_revocation_result_v1';
657
- outcome: 'applied';
658
- walletKeyId: WalletKeyId;
659
- laneId: SigningLaneId;
660
- laneShareEpoch: LaneShareEpoch;
661
- version: number;
662
- commandDigestB64u: string;
663
- productEpoch: LaneProductEpochRevokedV1;
664
- retirementReceipt: LaneServerRetirementReceiptV1;
665
- } | {
666
- kind: 'lane_signing_lane_revocation_result_v1';
667
- outcome: 'replayed';
668
- walletKeyId: WalletKeyId;
669
- laneId: SigningLaneId;
670
- laneShareEpoch: LaneShareEpoch;
671
- version: number;
672
- commandDigestB64u: string;
673
- productEpoch: LaneProductEpochRevokedV1;
674
- retirementReceipt: LaneServerRetirementReceiptV1;
675
- } | {
676
- kind: 'lane_signing_lane_revocation_result_v1';
677
- outcome: 'conflict';
678
- walletKeyId: WalletKeyId;
679
- laneId: SigningLaneId;
680
- laneShareEpoch: LaneShareEpoch;
681
- expectedVersion: number;
682
- actualVersion: number;
683
- requestedCommandDigestB64u: string;
684
- storedCommandDigestB64u: string;
685
- };
686
- export type LaneSigningLaneRevocationFenceResultV1 = {
687
- kind: 'lane_signing_lane_revocation_fence_result_v1';
688
- outcome: 'applied' | 'replayed';
689
- walletKeyId: WalletKeyId;
690
- laneId: SigningLaneId;
691
- laneShareEpoch: LaneShareEpoch;
692
- version: number;
693
- commandDigestB64u: string;
694
- productEpoch: LaneProductEpochRevocationPendingV1;
695
- } | {
696
- kind: 'lane_signing_lane_revocation_fence_result_v1';
697
- outcome: 'already_completed';
698
- walletKeyId: WalletKeyId;
699
- laneId: SigningLaneId;
700
- laneShareEpoch: LaneShareEpoch;
701
- version: number;
702
- commandDigestB64u: string;
703
- productEpoch: LaneProductEpochRevokedV1;
704
- retirementReceipt: LaneServerRetirementReceiptV1;
705
- } | {
706
- kind: 'lane_signing_lane_revocation_fence_result_v1';
707
- outcome: 'conflict';
708
- walletKeyId: WalletKeyId;
709
- laneId: SigningLaneId;
710
- laneShareEpoch: LaneShareEpoch;
711
- expectedVersion: number;
712
- actualVersion: number;
713
- requestedCommandDigestB64u: string;
714
- storedCommandDigestB64u: string;
715
- };
716
- export type LaneProtocolCasResultV1 = {
717
- outcome: 'applied';
718
- version: number;
719
- record: LaneProtocolRecordV1;
720
- commandDigestB64u: string;
721
- } | {
722
- outcome: 'replayed';
723
- version: number;
724
- record: LaneProtocolRecordV1;
725
- commandDigestB64u: string;
726
- } | {
727
- outcome: 'conflict';
728
- expectedVersion: number;
729
- actualVersion: number;
730
- requestedCommandDigestB64u: string;
731
- storedCommandDigestB64u: string;
732
- };
733
- export type PreparedLaneProtocolRecordV1 = {
734
- version: number;
735
- commandDigestB64u: DigestB64u;
736
- record: LaneProtocolRecordV1;
737
- };
738
- export type LaneEnrollmentPreparationResultV1 = {
739
- kind: 'lane_enrollment_preparation_result_v1';
740
- outcome: 'applied' | 'replayed';
741
- enrollmentId: LaneEnrollmentId;
742
- version: number;
743
- commandDigestB64u: DigestB64u;
744
- lifecycle: LaneEnrollmentLifecycleV1;
745
- orderedProtocols: readonly [PreparedLaneProtocolRecordV1, ...PreparedLaneProtocolRecordV1[]];
746
- } | {
747
- kind: 'lane_enrollment_preparation_result_v1';
748
- outcome: 'conflict';
749
- enrollmentId: LaneEnrollmentId;
750
- expectedVersion: number | null;
751
- actualVersion: number;
752
- requestedCommandDigestB64u: DigestB64u;
753
- storedCommandDigestB64u: DigestB64u;
754
- };
755
- export type EcdsaLaneProtocolWasmV1 = {
756
- prepareEcdsaAdditiveLaneHolderRoundV1(input: EcdsaAdditiveLaneJobV1): Promise<EcdsaAdditiveLaneHolderPreparationV1>;
757
- };
758
- export type { LaneHolderRecipientHandleV1 } from '../utils/domainIds';
759
- type LaneHolderRecipientDescriptorV1 = {
760
- recipientHandle: LaneHolderRecipientHandleV1;
761
- hpkePublicKeyB64u: HpkePublicKeyB64u;
762
- hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
763
- };
764
- export type LaneHolderPackageWireV1 = {
765
- kind: 'ed25519_yao_lane_holder_package_set_v1';
766
- deriverAEncryptedPackageJson: string;
767
- deriverBEncryptedPackageJson: string;
768
- ecdsaEncryptedMaterialEnvelopeJson?: never;
769
- } | {
770
- kind: 'ecdsa_additive_lane_holder_package_v1';
771
- ecdsaEncryptedMaterialEnvelopeJson: string;
772
- deriverAEncryptedPackageJson?: never;
773
- deriverBEncryptedPackageJson?: never;
774
- };
775
- export type EcdsaAdditiveLaneHolderPreparationV1 = {
776
- kind: 'ecdsa_additive_lane_holder_preparation_v1';
777
- holderRound: EcdsaAdditiveLaneHolderRoundV1;
778
- holderPackage: Extract<LaneHolderPackageWireV1, {
779
- kind: 'ecdsa_additive_lane_holder_package_v1';
780
- }>;
781
- encryptedDeltaPackageJson: string;
782
- };
783
- export type Ed25519YaoLaneClientCompletionV1 = {
784
- protocolCommitReceipt: LaneProtocolCommitReceiptV1;
785
- holderPackage: Extract<LaneHolderPackageWireV1, {
786
- kind: 'ed25519_yao_lane_holder_package_set_v1';
787
- }>;
788
- };
789
- type SealedLaneHolderMaterialV1 = {
790
- sealedHolderMaterialB64u: string;
791
- sealedHolderRecordDigestB64u: DigestB64u;
792
- verifiedHolderCiphertextDigestSetB64u: DigestB64u;
793
- };
794
- type VerifiedLaneHolderPackageV1 = {
795
- verifiedHolderCiphertextDigestSetB64u: DigestB64u;
796
- };
797
- export type WasmEd25519YaoLaneClientV1 = {
798
- prepare(input: Ed25519YaoLaneJobV1): Promise<{
799
- requestJson: string;
800
- }>;
801
- complete(input: {
802
- job: Ed25519YaoLaneJobV1;
803
- responseJson: string;
804
- }): Promise<Ed25519YaoLaneClientCompletionV1>;
805
- };
806
- export type PrepareLaneEnrollmentV1 = {
807
- manifest: LaneEnrollmentManifestV1;
808
- children: readonly [RotatableSigningLaneJobV1, ...RotatableSigningLaneJobV1[]];
809
- };
810
- export type ResumeLaneProtocolOperationV1 = {
811
- operationId: LaneOperationId;
812
- enrollmentId: LaneEnrollmentId;
813
- idempotencyKey: LaneOperationIdempotencyKey;
814
- expectedVersion: number;
815
- };
816
- export type RecordLaneHolderDeliveryV1 = {
817
- receipt: LaneHolderDeliveryReceiptV1;
818
- expectedVersion: number;
819
- };
820
- export type RecordLaneProtocolCommitV1 = {
821
- receipt: LaneProtocolCommitReceiptV1;
822
- expectedVersion: number;
823
- };
824
- export type ActivateLaneServerMaterialV1 = {
825
- receipt: LaneServerActivationReceiptV1;
826
- expectedVersion: number;
827
- };
828
- export type LaneHolderRecipientWorkerV1 = {
829
- createLaneHolderRecipientV1(input: {
830
- operationId: LaneOperationId;
831
- enrollmentId: LaneEnrollmentId;
832
- walletKeyId: WalletKeyId;
833
- targetLaneId: SigningLaneId;
834
- targetLaneShareEpoch: LaneShareEpoch;
835
- targetMaterialActivationId: MpcMaterialActivationId;
836
- targetHolderParticipantId: LaneHolderParticipantId;
837
- custodyBindingId: LaneHolderCustodyBindingId;
838
- custodyBindingDigestB64u: LaneCustodyBindingDigestB64u;
839
- }): Promise<LaneHolderRecipientDescriptorV1>;
840
- openAndSealLaneHolderPackageV1(input: {
841
- job: RotatableSigningLaneJobV1;
842
- protocolCommitReceipt: LaneProtocolCommitReceiptV1;
843
- holderPackage: LaneHolderPackageWireV1;
844
- recipientHandle: LaneHolderRecipientHandleV1;
845
- }): Promise<SealedLaneHolderMaterialV1>;
846
- verifyLaneHolderPackageCommitmentV1(input: {
847
- job: RotatableSigningLaneJobV1;
848
- protocolCommitReceipt: LaneProtocolCommitReceiptV1;
849
- holderPackage: LaneHolderPackageWireV1;
850
- }): Promise<VerifiedLaneHolderPackageV1>;
851
- discardLaneHolderRecipientV1(input: {
852
- recipientHandle: LaneHolderRecipientHandleV1;
853
- operationId: LaneOperationId;
854
- }): Promise<void>;
855
- invalidateLaneMaterialV1(input: {
856
- walletKeyId: WalletKeyId;
857
- laneId: SigningLaneId;
858
- laneShareEpoch: LaneShareEpoch;
859
- materialActivation: MpcMaterialActivationRef;
860
- }): Promise<void>;
861
- };
862
- export type LaneEnrollmentGatewayV1 = {
863
- prepareLaneEnrollmentV1(input: PrepareLaneEnrollmentV1): Promise<LaneEnrollmentPreparationResultV1>;
864
- resumeLaneProtocolOperationV1(input: ResumeLaneProtocolOperationV1): Promise<LaneProtocolCasResultV1>;
865
- recordLaneProtocolCommitV1(input: RecordLaneProtocolCommitV1): Promise<LaneProtocolCasResultV1>;
866
- recordLaneHolderDeliveryV1(input: RecordLaneHolderDeliveryV1): Promise<LaneProtocolCasResultV1>;
867
- activateLaneServerMaterialV1(input: ActivateLaneServerMaterialV1): Promise<LaneProtocolCasResultV1>;
868
- commitLaneEnrollmentActivationV1(input: CommitLaneEnrollmentActivationV1): Promise<LaneEnrollmentActivationResultV1>;
869
- fenceSigningLaneRevocationV1(input: RevokeSigningLaneV1): Promise<LaneSigningLaneRevocationFenceResultV1>;
870
- completeSigningLaneRevocationV1(input: CompleteSigningLaneRevocationV1): Promise<LaneSigningLaneRevocationResultV1>;
871
- };
32
+ export {};
872
33
  //# sourceMappingURL=rotation.d.ts.map