@seams/wallet-server 0.7.1 → 0.8.0

package/dist/types/wallet-server/src/authorization/sessionRouting.d.ts

@@ -0,0 +1,20 @@
+import type { WalletId } from '../../../shared-ts/src/utils/domainIds';
+import type { DigestB64u } from '../../../shared-ts/src/utils/canonicalPrimitives';
+export type WalletSessionLocatorPublication = {
+    readonly kind: 'credential' | 'exchange';
+    readonly digest: DigestB64u;
+    readonly walletId: WalletId;
+    readonly expiresAtMs: number;
+    readonly exchangeDigest?: never;
+} | {
+    readonly kind: 'exchanged_credential';
+    readonly digest: DigestB64u;
+    readonly exchangeDigest: DigestB64u;
+    readonly walletId?: never;
+    readonly expiresAtMs?: never;
+};
+/** Publishes digest-to-wallet metadata; home-local storage authorizes its use. */
+export interface WalletSessionRoutingPublisher {
+    publish(input: WalletSessionLocatorPublication): Promise<void>;
+}
+//# sourceMappingURL=sessionRouting.d.ts.map

package/dist/types/wallet-server/src/authorization/sessionRouting.typecheck.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sessionRouting.typecheck.d.ts.map

package/dist/types/wallet-server/src/cloud-host.d.ts

@@ -3,7 +3,6 @@ export * from './core/ThresholdService/evmCryptoWasm';
 export * from './core/d1WalletStore';
 export * from './core/d1WalletAuthMethodStore';
 export * from './core/logger';
-export * from './core/signingLanes/LaneLifecycleApplicationService';
 export * from './core/routerAbSigning/RouterAbEcdsaPresignRuntime';
 export * from './core/types';
 export * from './delegateAction';
@@ -19,15 +18,10 @@ export * from './router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersisten
 export * from './router/cloudflare/d1/oidc/d1OidcBoundary';
 export * from './router/cloudflare/d1/auth/d1RouterApiAuthConfig';
 export * from './router/cloudflare/d1/auth/d1RouterApiAuthService';
-export * from './router/cloudflare/d1/signingLanes';
 export * from './router/cloudflare/d1/deviceLinking';
-export * from './router/cloudflare/signingLanes/cloudflareLaneCurveExecution';
-export * from './router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter';
-export * from './router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding';
 export * from './router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation';
 export * from './router/cloudflare/d1/webauthn/d1WebAuthnAuthService';
 export * from './router/cloudflare/d1/webauthn/d1WebAuthnStore';
-export * from './router/cloudflare/durableObjects/thresholdStore';
 export * from './router/cloudflare/runtime/cloudflareSignerWasm';
 export * from './router/cloudflare/runtime/ed25519SessionAdapter';
 export * from './router/cloudflare/runtime/routerAbServiceBindings';
@@ -65,7 +59,7 @@ export * from './router/domains/ed25519Yao/registration/routerAbEd25519YaoRegist
 export * from './router/domains/signingOperations/routerAbNormalSigningAdmissionCore';
 export { buildRouterAbEcdsaAcceptedAuthorizedOperationV1, buildRouterAbEd25519AcceptedAuthorizedOperationV1, evaluateRouterAbNormalSigningAdmission, type RouterAbEcdsaOperationAdmission, type RouterAbEcdsaOperationAdmissionKind, type RouterAbJsonRouteResult, type RouterAbNormalSigningAdmissionAdapter, type RouterAbNormalSigningAdmissionEvaluationInput, type RouterAbNormalSigningAdmissionFailure, type RouterAbNormalSigningAdmissionFailureCode, type RouterAbNormalSigningAdmissionInput, type RouterAbNormalSigningAdmissionResult, type RouterAbNormalSigningRouteAdmission, type RouterAbNormalSigningRouteRuntime, type RouterAbSigningWorkerJsonResult, } from './router/domains/signingOperations/routerAbNormalSigningAdmission';
 export { authenticateRouterAbWalletOperationStepUpIdentity } from './router/domains/signingOperations/routerAbOperationStepUp';
-export { buildRouterAbEcdsaDerivationPrivateSigningWorkerBody, buildRouterAbEd25519PrivateSigningWorkerBody, computeRouterAbEd25519NormalSigningAdmissionMaterial, parseRouterAbEd25519NormalSigningScopeV2, postRouterAbSigningWorkerJson, ROUTER_AB_ECDSA_DERIVATION_PRIVATE_SIGNING_PATHS, ROUTER_AB_ED25519_PRIVATE_SIGNING_PATHS, type RouterAbEcdsaDerivationPrivateSigningPath, type RouterAbEcdsaDerivationPrivateSigningWorkerBody, type RouterAbEd25519NormalSigningScopeV2, type RouterAbEd25519PrivateSigningPath, type RouterAbEd25519PrivateSigningWorkerBody, routerAbNormalSigningMaterialSourceFromActiveLaneV1, type RouterAbNormalSigningMaterialSourceV1, } from './router/domains/signingOperations/routerAbPrivateSigningWorker';
+export { buildRouterAbEcdsaDerivationPrivateSigningWorkerBody, buildRouterAbEd25519PrivateSigningWorkerBody, computeRouterAbEd25519NormalSigningAdmissionMaterial, parseRouterAbEd25519NormalSigningScopeV2, postRouterAbSigningWorkerJson, ROUTER_AB_ECDSA_DERIVATION_PRIVATE_SIGNING_PATHS, ROUTER_AB_ED25519_PRIVATE_SIGNING_PATHS, type RouterAbEcdsaDerivationPrivateSigningPath, type RouterAbEcdsaDerivationPrivateSigningWorkerBody, type RouterAbEd25519NormalSigningScopeV2, type RouterAbEd25519PrivateSigningPath, type RouterAbEd25519PrivateSigningWorkerBody, type RouterAbNormalSigningMaterialSourceV1, } from './router/domains/signingOperations/routerAbPrivateSigningWorker';
 export * from './router/domains/signingOperations/routerAbEd25519NormalSigningRoute';
 export * from './router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute';
 export * from './router/framework/routerApi';
@@ -82,8 +76,6 @@ export { parseOrgId, parseWalletId, parseWebAuthnRpId, type OrgId, type WebAuthn
 export { base64UrlDecode, base64UrlEncode } from '../../shared-ts/src/utils/encoders';
 export { sha256Bytes } from '../../shared-ts/src/utils/digests';
 export { buildTenantRootIdentityFromAuthenticatedDeploymentV1, encodeTenantRootIdentityV1, type TenantRootIdentityV1, } from '../../shared-ts/src/tenant-root/tenantRootIdentity';
-export { buildSigningWorkerParticipantRecordWithDigestV1 } from '../../shared-ts/src/signing-lanes/participantDigest';
-export { parseHpkePublicKeyB64u, parseSigningWorkerParticipantId, parseSigningWorkerRecipientKeyDigestB64u, parseSigningWorkerRecipientKeyId, } from '../../shared-ts/src/signing-lanes/participants';
 export { keccak256Bytes } from '../../shared-ts/src/utils/keccak';
 export { normalizeBoundedPositiveInteger, normalizeLowercaseString, normalizeTrimmedString, } from '../../shared-ts/src/utils/normalize';
 export { ROUTER_AB_PUBLIC_KEYSET_VERSION_V2, parseRouterAbPublicKeysetV2, type RouterAbPublicKeysetV2, } from '../../shared-ts/src/utils/routerAbPublicKeyset';
@@ -95,4 +87,34 @@ export type { RuntimePolicyScope } from '../../shared-ts/src/threshold/signingRo
 export type { WalletEmailOtpOperation } from '../../shared-ts/src/utils/emailOtpDomain';
 export { decodeJsonRpcEnvelope } from '../../shared-ts/src/utils/jsonRpc';
 export * from '../../shared-ts/src/utils/evmRpcResults';
+export { parseWalletRegistrationSetupReservation, proposeWalletRegistrationSetup, walletRegistrationSetupRequestDigest, type WalletRegistrationSetupReservation, type WalletRegistrationReservationAuthority, } from './router/domains/walletRegistration/walletRegistrationReservation';
+export type { WalletRegistrationSetupDispatcher } from './router/framework/registrationSetupDispatch';
+export type { WalletSessionLocatorPublication, WalletSessionRoutingPublisher, } from './authorization/sessionRouting';
+export { digestOpaqueValue } from './authorization/service';
+export type { WalletRecoveryRoutingPublication, WalletRecoveryRoutingPublisher, } from './authorization/recoveryRouting';
+export { parseRecoveryCodeLocatorV1, deriveRecoveryCodeLocatorV1FromBytes, } from '../../shared-ts/src/wallet-recovery/recoveryCodeLocator';
+export { parseWalletRecoveryOperationId } from '../../shared-ts/src/utils/domainIds';
+export { WalletLifecycleLocator } from './authorization/lifecycleRouting';
+export type { WalletLifecycleRoutingPublisher } from './authorization/lifecycleRouting';
+export { D1IdentityStore } from './core/d1IdentityStore';
+export type { IdentityStore } from './core/IdentityStore';
+export { verifyGoogleOidcToken } from './router/cloudflare/d1/oidc/googleOidcToken';
+export { parseGoogleLoginVerifyRequest } from './router/auth/authRequestValidation';
+export { CloudflareD1GoogleEmailOtpRegistrationAttemptStore } from './router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore';
+export type { GoogleEmailOtpRegistrationAttemptStore } from './router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore';
+export { parseGoogleEmailOtpRegistrationAttemptRecord, parseGoogleEmailOtpRegistrationOfferCandidates, requireRuntimePolicyScope, } from './router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords';
+export { prepareD1TenantStatement } from './core/d1TenantStore';
+export { D1EmailOtpRateLimitCounter } from './router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore';
+export type { EmailOtpRateLimitCounter } from './router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore';
+export type { PasskeyCredentialClaims } from './core/passkeyCredentialClaims';
+export type { WebAuthnSyncChallengeStore, WebAuthnSyncChallengeRecord, } from './core/WebAuthnSyncChallengeStore';
+export { parseWebAuthnSyncChallengeRecord } from './router/cloudflare/d1/webauthn/d1WebAuthnRecords';
+export { webAuthnCredentialIdB64uFromCredential } from './router/auth/webAuthnCredentialCodecs';
+export type { SyncChallengeFailure } from './core/WebAuthnSyncChallengeStore';
+export type { LinkedDeviceRequestProofNonceStoreV1 } from './core/deviceLinking/requestProof';
+export { D1LinkedDeviceRequestProofNonceStoreV1 } from './router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore';
+export type { LinkedDeviceBootstrapStore, LinkedDeviceBootstrapResult, } from './core/deviceLinking/linkedDeviceBootstrap';
+export { parseLinkedDeviceSessionRecordV1 } from './core/deviceLinking/linkedDeviceSessionRecord';
+export type { LinkedDeviceSessionRecordV1 } from './core/deviceLinking/linkedDeviceSessionRecord';
+export { computeLinkedDeviceSessionClaimDigestV1 } from '../../shared-ts/src/device-linking/digests';
 //# sourceMappingURL=cloud-host.d.ts.map

package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts

@@ -1,42 +1,21 @@
 import type { ThresholdRuntimePolicyScope } from './types';
-import type { EmailOtpAuthStateRecord, EmailOtpChallengeRecord, EmailOtpGrantRecord, EmailOtpUnlockChallengeRecord, EmailOtpWalletEnrollmentRecord, GoogleEmailOtpRegistrationAttemptRecord, GoogleEmailOtpRegistrationAttemptScopeInput, PendingGoogleEmailOtpRegistrationAttemptRecord } from './EmailOtpStores';
-/** Parses JSON text; any other value, and text that is not JSON, comes back unchanged. */
-export declare function parseJsonRecord(raw: unknown): unknown;
-export declare function parseCurrentEmailOtpChallengeRecord(raw: unknown): EmailOtpChallengeRecord | null;
+import type { EmailOtpChallengeRecord, EmailOtpGrantRecord, EmailOtpUnlockChallengeRecord, GoogleEmailOtpRegistrationAttemptRecord, GoogleEmailOtpRegistrationAttemptScopeInput, PendingGoogleEmailOtpRegistrationAttemptRecord } from './EmailOtpStores';
 export declare function parseCurrentEmailOtpChallengeRow(input: {
     recordJson: unknown;
     expiresAtMs: unknown;
 }): EmailOtpChallengeRecord | null;
-export declare function parseCurrentEmailOtpGrantRecord(raw: unknown): EmailOtpGrantRecord | null;
 export declare function parseCurrentEmailOtpGrantRow(input: {
     recordJson: unknown;
     expiresAtMs: unknown;
 }): EmailOtpGrantRecord | null;
-export declare function parseCurrentEmailOtpUnlockChallengeRecord(raw: unknown): EmailOtpUnlockChallengeRecord | null;
 export declare function parseCurrentEmailOtpUnlockChallengeRow(input: {
     recordJson: unknown;
     expiresAtMs: unknown;
 }): EmailOtpUnlockChallengeRecord | null;
-export declare function parseCurrentGoogleEmailOtpRegistrationAttemptRecord(raw: unknown): GoogleEmailOtpRegistrationAttemptRecord | null;
-export declare function parseCurrentGoogleEmailOtpRegistrationAttemptRow(input: {
-    recordJson: unknown;
-    expiresAtMs: unknown;
-    updatedAtMs: unknown;
-}): GoogleEmailOtpRegistrationAttemptRecord | null;
 /** The scope as one comparable string, as D1 stores it in `runtime_policy_key`; empty when unset. */
 export declare function runtimePolicyScopeKey(scope: ThresholdRuntimePolicyScope | undefined): string;
 /** The pending attempt a registration with this owner binding resumes. */
 export declare function registrationAttemptMatchesStartedScope(record: GoogleEmailOtpRegistrationAttemptRecord, input: Readonly<GoogleEmailOtpRegistrationAttemptScopeInput>): record is PendingGoogleEmailOtpRegistrationAttemptRecord;
 /** A pending attempt that a registration with a new owner binding replaces. */
 export declare function registrationAttemptMatchesReplacementScope(record: GoogleEmailOtpRegistrationAttemptRecord, input: Readonly<GoogleEmailOtpRegistrationAttemptScopeInput>): record is PendingGoogleEmailOtpRegistrationAttemptRecord;
-export declare function parseCurrentEmailOtpWalletEnrollmentRecord(raw: unknown): EmailOtpWalletEnrollmentRecord | null;
-export declare function parseCurrentEmailOtpWalletEnrollmentRow(input: {
-    recordJson: unknown;
-    updatedAtMs: unknown;
-}): EmailOtpWalletEnrollmentRecord | null;
-export declare function parseCurrentEmailOtpAuthStateRecord(raw: unknown): EmailOtpAuthStateRecord | null;
-export declare function parseCurrentEmailOtpAuthStateRow(input: {
-    recordJson: unknown;
-    updatedAtMs: unknown;
-}): EmailOtpAuthStateRecord | null;
 //# sourceMappingURL=EmailOtpRecords.d.ts.map

package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts

@@ -1,5 +1,4 @@
-import type { NormalizedLogger } from './logger';
-import type { ThresholdRuntimePolicyScope, ThresholdStoreConfigInput } from './types';
+import type { ThresholdRuntimePolicyScope } from './types';
 import type { WalletEmailOtpChannel, WalletEmailOtpLoginOperation, WalletEmailOtpOperation } from '../../../shared-ts/src/utils/emailOtpDomain';
 import { WALLET_EMAIL_OTP_ACTIONS } from '../../../shared-ts/src/utils/emailOtpDomain';
 export type EmailOtpChannel = WalletEmailOtpChannel;
@@ -33,28 +32,6 @@ export type EmailOtpChallengeRecord = {
     attemptCount: number;
     maxAttempts: number;
 };
-export type EmailOtpChallengeContextInput = {
-    challengeSubjectId: string;
-    walletId: string;
-    orgId?: string;
-    otpChannel: EmailOtpChannel;
-    ownerProofBindingDigest: string;
-    action: EmailOtpChallengeAction;
-    operation: EmailOtpChallengeOperation;
-    nowMs: number;
-};
-export interface EmailOtpChallengeStore {
-    put(record: EmailOtpChallengeRecord): Promise<void>;
-    get(challengeId: string): Promise<EmailOtpChallengeRecord | null>;
-    deleteExpired(nowMs: number): Promise<EmailOtpChallengeRecord[]>;
-    countActiveByContext(input: EmailOtpChallengeContextInput): Promise<number>;
-    findLatestActiveByContext(input: EmailOtpChallengeContextInput): Promise<EmailOtpChallengeRecord | null>;
-    deleteOldestActiveByContext(input: EmailOtpChallengeContextInput): Promise<EmailOtpChallengeRecord | null>;
-    findActiveByContext(input: EmailOtpChallengeContextInput & {
-        otpCode: string;
-    }): Promise<EmailOtpChallengeRecord | null>;
-    del(challengeId: string): Promise<void>;
-}
 export type EmailOtpGrantRecord = {
     version: 'email_otp_grant_v1';
     grantToken: string;
@@ -68,12 +45,6 @@ export type EmailOtpGrantRecord = {
     issuedAtMs: number;
     expiresAtMs: number;
 };
-export interface EmailOtpGrantStore {
-    put(record: EmailOtpGrantRecord): Promise<void>;
-    get(grantToken: string): Promise<EmailOtpGrantRecord | null>;
-    consume(grantToken: string): Promise<EmailOtpGrantRecord | null>;
-    del(grantToken: string): Promise<void>;
-}
 export type EmailOtpWalletEnrollmentRecord = {
     version: 'email_otp_wallet_enrollment_v1';
     walletId: string;
@@ -89,15 +60,6 @@ export type EmailOtpWalletEnrollmentRecord = {
     createdAtMs: number;
     updatedAtMs: number;
 };
-export interface EmailOtpWalletEnrollmentStore {
-    get(walletId: string): Promise<EmailOtpWalletEnrollmentRecord | null>;
-    getByProviderUserId(input: {
-        providerUserId: string;
-        orgId: string;
-    }): Promise<EmailOtpWalletEnrollmentRecord | null>;
-    put(record: EmailOtpWalletEnrollmentRecord): Promise<void>;
-    del(walletId: string): Promise<void>;
-}
 export type EmailOtpAuthStateRecord = {
     version: 'email_otp_auth_state_v1';
     walletId: string;
@@ -111,11 +73,6 @@ export type EmailOtpAuthStateRecord = {
     lastEmailOtpLoginAtMs?: number;
     lastStrongAuthAtMs?: number;
 };
-export interface EmailOtpAuthStateStore {
-    get(walletId: string): Promise<EmailOtpAuthStateRecord | null>;
-    put(record: EmailOtpAuthStateRecord): Promise<void>;
-    del(walletId: string): Promise<void>;
-}
 export type EmailOtpUnlockChallengeRecord = {
     version: 'email_otp_unlock_challenge_v1';
     challengeId: string;
@@ -126,11 +83,6 @@ export type EmailOtpUnlockChallengeRecord = {
     createdAtMs: number;
     expiresAtMs: number;
 };
-export interface EmailOtpUnlockChallengeStore {
-    put(record: EmailOtpUnlockChallengeRecord): Promise<void>;
-    consume(challengeId: string): Promise<EmailOtpUnlockChallengeRecord | null>;
-    del(challengeId: string): Promise<void>;
-}
 export type GoogleEmailOtpRegistrationOfferCandidateRecord = {
     candidateId: string;
     walletId: string;
@@ -202,35 +154,5 @@ export type GoogleEmailOtpRegistrationAttemptScopeInput = {
     runtimePolicyScope?: ThresholdRuntimePolicyScope;
     nowMs: number;
 };
-export interface EmailOtpRegistrationAttemptStore {
-    put(record: GoogleEmailOtpRegistrationAttemptRecord): Promise<void>;
-    get(attemptId: string): Promise<GoogleEmailOtpRegistrationAttemptRecord | null>;
-    findStartedBySubjectEmail(input: GoogleEmailOtpRegistrationAttemptScopeInput): Promise<PendingGoogleEmailOtpRegistrationAttemptRecord | null>;
-    abandonStartedBySubjectEmailExceptBinding(input: {
-        providerSubject: string;
-        email: string;
-        orgId: string;
-        ownerProofBindingDigest: string;
-        runtimePolicyScope?: ThresholdRuntimePolicyScope;
-        nowMs: number;
-        failureCode: 'owner_proof_binding_replaced';
-    }): Promise<number>;
-    hasLiveStartedWalletAttempt(input: {
-        walletId: string;
-        nowMs: number;
-    }): Promise<boolean>;
-    deleteExpired(nowMs: number): Promise<number>;
-}
-type EmailOtpStoreFactoryInput = {
-    config?: ThresholdStoreConfigInput | null;
-    logger?: NormalizedLogger;
-    isNode?: boolean;
-};
-export declare function createEmailOtpChallengeStore(input?: EmailOtpStoreFactoryInput): EmailOtpChallengeStore;
-export declare function createEmailOtpGrantStore(input?: EmailOtpStoreFactoryInput): EmailOtpGrantStore;
-export declare function createEmailOtpWalletEnrollmentStore(input?: EmailOtpStoreFactoryInput): EmailOtpWalletEnrollmentStore;
-export declare function createEmailOtpAuthStateStore(input?: EmailOtpStoreFactoryInput): EmailOtpAuthStateStore;
-export declare function createEmailOtpUnlockChallengeStore(input?: EmailOtpStoreFactoryInput): EmailOtpUnlockChallengeStore;
-export declare function createEmailOtpRegistrationAttemptStore(input?: EmailOtpStoreFactoryInput): EmailOtpRegistrationAttemptStore;
 export {};
 //# sourceMappingURL=EmailOtpStores.d.ts.map

package/dist/types/wallet-server/src/core/IdentityStore.d.ts

@@ -1,4 +1,3 @@
-import { type StoreFactoryInput } from './storeBackends';
 export { D1IdentityStore, IDENTITY_STORE_D1_SCHEMA_SQL, ensureIdentityStoreD1Schema, } from './d1IdentityStore';
 export type { D1IdentityStoreOptions, D1IdentityStoreSchemaOptions } from './d1IdentityStore';
 export type IdentitySubjectRecord = {
@@ -8,13 +7,6 @@ export type IdentitySubjectRecord = {
     createdAtMs: number;
     updatedAtMs: number;
 };
-export type IdentityUserRecord = {
-    version: 'identity_user_v1';
-    userId: string;
-    subjects: string[];
-    createdAtMs: number;
-    updatedAtMs: number;
-};
 export type LinkIdentityResult = {
     ok: true;
     movedFromUserId?: string;
@@ -47,6 +39,4 @@ export interface IdentityStore {
         subject: string;
     }): Promise<UnlinkIdentityResult>;
 }
-export declare function resolveIdentityStoreNamespace(config: Record<string, unknown>): string;
-export declare function createIdentityStore(input: StoreFactoryInput): IdentityStore;
 //# sourceMappingURL=IdentityStore.d.ts.map

package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts

@@ -458,7 +458,6 @@ export interface RegistrationCeremonyStore {
     putAddSignerIntent(intent: StoredAddSignerIntent): Promise<void>;
     getAddSignerIntent(grant: AddSignerIntentGrant): Promise<StoredAddSignerIntent | null>;
     takeAddSignerIntent(grant: AddSignerIntentGrant): Promise<ConsumedAddSignerIntent | null>;
-    putCeremony(ceremony: StoredWalletRegistrationCeremony): Promise<void>;
     getCeremony(registrationCeremonyId: string): Promise<StoredWalletRegistrationCeremony | null>;
     updateCeremony(ceremony: StoredWalletRegistrationCeremony): Promise<void>;
     takeCeremony(registrationCeremonyId: string): Promise<StoredWalletRegistrationCeremony | null>;

package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts

@@ -1,5 +1,3 @@
-export type ThresholdNodeRole = 'cosigner' | 'coordinator';
-export declare function coerceThresholdNodeRole(input: unknown): ThresholdNodeRole;
 export declare function parseThresholdEd25519ParticipantIds2p(input: {
     THRESHOLD_ED25519_CLIENT_PARTICIPANT_ID?: unknown;
     THRESHOLD_ED25519_RELAYER_PARTICIPANT_ID?: unknown;

package/dist/types/wallet-server/src/core/ThresholdService/index.d.ts

@@ -1,4 +1,2 @@
-export { createThresholdEd25519KeyStore, type ThresholdEd25519KeyStore, type ThresholdEd25519KeyRecord, } from './stores/KeyStore';
-export { createThresholdEd25519SessionStore, type ThresholdEd25519SessionStore, type ThresholdEd25519MpcSessionRecord, type ThresholdEd25519SigningSessionRecord, type ThresholdEd25519Commitments, } from './stores/SessionStore';
-export { createEd25519WalletSessionStore, createEcdsaWalletSessionStore, type Ed25519WalletSessionStore, type Ed25519WalletSessionRecord, } from './stores/WalletSessionStore';
+export { type Ed25519WalletSessionStore, type Ed25519WalletSessionRecord, } from './stores/WalletSessionStore';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/wallet-server/src/core/ThresholdService/kv.d.ts

@@ -11,10 +11,6 @@ export declare class UpstashRedisRestClient {
     setRaw(key: string, value: string, ttlMs?: number): Promise<void>;
     getJson(key: string): Promise<unknown | null>;
     setJson(key: string, value: unknown, ttlMs?: number): Promise<void>;
-    getdelJson(key: string): Promise<unknown | null>;
-    incrby(key: string, delta: number): Promise<number>;
-    rpush(key: string, value: string): Promise<number>;
-    lpop(key: string): Promise<string | null>;
     eval(script: string, keys: string[], args: string[]): Promise<unknown | null>;
 }
 export type RedisResp = {
@@ -44,9 +40,6 @@ export declare class RedisTcpClient {
     send(args: string[]): Promise<RedisResp>;
 }
 export declare function redisGetJson(client: RedisTcpClient, key: string): Promise<unknown | null>;
-export declare function redisGetRaw(client: RedisTcpClient, key: string): Promise<string | null>;
 export declare function redisDel(client: RedisTcpClient, key: string): Promise<void>;
 export declare function redisSetJson(client: RedisTcpClient, key: string, value: unknown, ttlMs?: number): Promise<void>;
-export declare function redisGetdelJson(client: RedisTcpClient, key: string): Promise<unknown | null>;
-export declare function redisEval(client: RedisTcpClient, script: string, keys: string[], args: string[]): Promise<RedisResp>;
 //# sourceMappingURL=kv.d.ts.map

package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts

@@ -1,7 +1,6 @@
 import { type RouterAbEcdsaDerivationNormalSigningStateV1 } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
 import type { RouterAbEcdsaDerivationPoolFillInitRequest, RouterAbEcdsaDerivationPoolFillInitResponse, RouterAbEcdsaDerivationPoolFillStepRequest, RouterAbEcdsaDerivationPoolFillStepResponse } from '../../types';
 import { type RuntimePolicyScope } from '../../../../../shared-ts/src/threshold/signingRootScope';
-import type { ThresholdNodeRole } from '../config';
 import { type RouterAbEcdsaDerivationPresignaturePoolFillAuth } from './ecdsaDerivationPresignBridge';
 export type RouterAbEcdsaOwnerWalletScope = {
     readonly orgId: string;
@@ -42,12 +41,10 @@ export type RouterAbEcdsaPresignSigningWorkerTransport = {
     readonly fetchImpl: typeof fetch;
 };
 export declare class RouterAbEcdsaDerivationPoolFillHandlers {
-    private readonly nodeRole;
     private readonly participantIds2p;
     private readonly ensureReady;
     private readonly signingWorkerTransport;
     constructor(input: {
-        readonly nodeRole: ThresholdNodeRole;
         readonly participantIds2p: number[];
         readonly ensureReady: () => Promise<void>;
         readonly signingWorkerTransport: RouterAbEcdsaPresignSigningWorkerTransport;

package/dist/types/wallet-server/src/core/ThresholdService/routerAbNormalSigningPolicy.d.ts

@@ -13,7 +13,6 @@ export type RouterAbNormalSigningServerPolicy = {
     mode: 'enabled';
     signingWorkerId: string;
 };
-export declare function parseRouterAbNormalSigningServerPolicy(config: Record<string, unknown>): RouterAbNormalSigningServerPolicy;
 export declare function validateRouterAbNormalSigningServerPolicy(args: {
     requested: RouterAbEd25519NormalSigningState | undefined;
     policy: RouterAbNormalSigningServerPolicy;

package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts

@@ -1,5 +1,4 @@
-import type { NormalizedLogger } from '../../logger';
-import type { ThresholdEd25519AuthorityScope, ThresholdEcdsaSigningRootMetadata, ThresholdStoreConfigInput } from '../../types';
+import type { ThresholdEd25519AuthorityScope, ThresholdEcdsaSigningRootMetadata } from '../../types';
 import { WALLET_SESSION_FAILURE_CODES, type WalletSessionFailureCode } from '../../../../../shared-ts/src/utils/walletSessionFailure';
 import type { EcdsaKeyHandle } from '../../keyMaterialBrands';
 export type Ed25519WalletSessionRecord = {
@@ -19,14 +18,14 @@ type EcdsaWalletSessionRecordCore = {
     keyHandle: EcdsaKeyHandle;
     participantIds: number[];
 };
-export type EcdsaWalletSessionRecord = EcdsaWalletSessionRecordCore & ({
+type EcdsaWalletSessionRecord = EcdsaWalletSessionRecordCore & ({
     signingRootId?: never;
     signingRootVersion?: never;
     walletKeyVersion?: never;
     derivationVersion?: never;
 } | ThresholdEcdsaSigningRootMetadata);
-export type WalletSessionRecord = Ed25519WalletSessionRecord | EcdsaWalletSessionRecord;
-export type WalletSessionConsumeUsesResult = {
+type WalletSessionRecord = Ed25519WalletSessionRecord | EcdsaWalletSessionRecord;
+type WalletSessionConsumeUsesResult = {
     ok: true;
     remainingUses: number;
 } | {
@@ -42,7 +41,7 @@ type WalletSessionConsumedUseResult = {
     code: string;
     message: string;
 };
-export type WalletSessionReplayGuardResult = {
+type WalletSessionReplayGuardResult = {
     ok: true;
 } | {
     ok: false;
@@ -54,7 +53,7 @@ export type WalletSessionStatus<TRecord extends WalletSessionRecord> = {
     expiresAtMs: number;
     remainingUses: number;
 };
-export type WalletSessionStatusLookupResult<TRecord extends WalletSessionRecord> = {
+type WalletSessionStatusLookupResult<TRecord extends WalletSessionRecord> = {
     ok: true;
     status: WalletSessionStatus<TRecord>;
 } | {
@@ -81,16 +80,5 @@ export interface WalletSessionStore<TRecord extends WalletSessionRecord> {
 }
 export type Ed25519WalletSessionStore = WalletSessionStore<Ed25519WalletSessionRecord>;
 export type EcdsaWalletSessionStore = WalletSessionStore<EcdsaWalletSessionRecord>;
-export type WalletSessionRecordParser<TRecord extends WalletSessionRecord> = (raw: unknown) => TRecord | null;
-export declare function createEd25519WalletSessionStore(input: {
-    config?: ThresholdStoreConfigInput | null;
-    logger: NormalizedLogger;
-    isNode: boolean;
-}): Ed25519WalletSessionStore;
-export declare function createEcdsaWalletSessionStore(input: {
-    config?: ThresholdStoreConfigInput | null;
-    logger: NormalizedLogger;
-    isNode: boolean;
-}): EcdsaWalletSessionStore;
 export {};
 //# sourceMappingURL=WalletSessionStore.d.ts.map

package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts

@@ -1,134 +1,7 @@
 import { type WalletAuthAuthority } from '../../../../shared-ts/src/utils/walletAuthAuthority';
 import type { EcdsaDerivationPublicIdentity, ThresholdEd25519AuthorityScope } from '../types';
-import { type EcdsaKeyHandle } from '../keyMaterialBrands';
-type ParsedThresholdEcdsaSigningRootMetadata = {
-    signingRootId: string;
-    signingRootVersion?: string;
-    walletKeyVersion: string;
-    derivationVersion: number;
-};
-export declare function toPrefixWithColon(prefix: unknown, defaultPrefix: string): string;
-export declare function toThresholdEd25519KeyPrefix(prefix: unknown): string;
-export declare function toThresholdEd25519SessionPrefix(prefix: unknown): string;
-export declare function toThresholdEd25519WalletSessionPrefix(prefix: unknown): string;
-export declare function toThresholdEd25519PrefixFromBase(basePrefix: unknown, kind: 'key' | 'sess' | 'wallet-session'): string;
-export declare function canonicalThresholdEd25519RelayerKeyId(relayerKeyId: unknown): string;
-export declare function toThresholdEcdsaSessionPrefix(prefix: unknown): string;
-export declare function toThresholdEcdsaWalletSessionPrefix(prefix: unknown): string;
-export declare function toThresholdEcdsaPrefixFromBase(basePrefix: unknown, kind: 'key' | 'sess' | 'wallet-session' | 'presign'): string;
-type ParsedThresholdEd25519RouterMaterial = {
-    signingShareB64u: string;
-    verifyingShareB64u: string;
-};
-type ParsedThresholdEd25519ReadyKeyRecord = {
-    kind: 'ready';
-    walletId: string;
-    nearAccountId: string;
-    nearEd25519SigningKeyId: string;
-    authorityScope: ThresholdEd25519AuthorityScope;
-    publicKey: string;
-    routerMaterial: ParsedThresholdEd25519RouterMaterial;
-    keyVersion: string;
-    recoveryExportCapable: true;
-};
-export declare function parseThresholdEd25519KeyRecord(raw: unknown): ParsedThresholdEd25519ReadyKeyRecord | null;
 export declare function parseEcdsaDerivationPublicIdentity(raw: unknown): EcdsaDerivationPublicIdentity | null;
-type ParsedThresholdEd25519Commitments = {
-    hiding: string;
-    binding: string;
-};
-type ParsedThresholdEd25519CommitmentsById = Record<string, ParsedThresholdEd25519Commitments>;
 export declare function parseThresholdEd25519AuthorityScope(raw: unknown): ThresholdEd25519AuthorityScope | null;
 export declare function thresholdEd25519AuthorityScopeFromWalletAuthAuthority(authority: WalletAuthAuthority): ThresholdEd25519AuthorityScope;
 export declare function thresholdEd25519AuthorityScopesMatch(left: ThresholdEd25519AuthorityScope, right: ThresholdEd25519AuthorityScope): boolean;
-type ParsedThresholdEd25519MpcSessionRecord = {
-    expiresAtMs: number;
-    ecdsaThresholdKeyId?: string;
-    keyHandle?: string;
-    relayerKeyId: string;
-    purpose: string;
-    intentDigestB64u: string;
-    signingDigestB64u: string;
-    userId: string;
-    authorityScope: ThresholdEd25519AuthorityScope;
-    clientVerifyingShareB64u?: string;
-    participantIds: number[];
-} & Partial<ParsedThresholdEcdsaSigningRootMetadata>;
-type ParsedThresholdEcdsaMpcSessionRecord = {
-    expiresAtMs: number;
-    ecdsaThresholdKeyId?: string;
-    keyHandle?: string;
-    relayerKeyId: string;
-    purpose: string;
-    intentDigestB64u: string;
-    signingDigestB64u: string;
-    walletId: string;
-    clientVerifyingShareB64u?: string;
-    participantIds: number[];
-} & Partial<ParsedThresholdEcdsaSigningRootMetadata>;
-export declare function parseThresholdEd25519MpcSessionRecord(raw: unknown): ParsedThresholdEd25519MpcSessionRecord | null;
-export declare function parseThresholdEcdsaMpcSessionRecord(raw: unknown): ParsedThresholdEcdsaMpcSessionRecord | null;
-type ParsedThresholdEd25519SigningShareMaterial = {
-    kind: 'key_store';
-} | {
-    kind: 'embedded_cosigner_share';
-    relayerSigningShareB64u: string;
-};
-type ParsedThresholdEd25519SigningSessionRecord = {
-    expiresAtMs: number;
-    mpcSessionId: string;
-    relayerKeyId: string;
-    signingDigestB64u: string;
-    userId: string;
-    authorityScope: ThresholdEd25519AuthorityScope;
-    commitmentsById: ParsedThresholdEd25519CommitmentsById;
-    signingShare: ParsedThresholdEd25519SigningShareMaterial;
-    relayerNoncesB64u: string;
-    participantIds: number[];
-};
-export declare function parseThresholdEd25519SigningSessionRecord(raw: unknown): ParsedThresholdEd25519SigningSessionRecord | null;
-type ParsedThresholdEd25519StringById = Record<string, string>;
-type ParsedThresholdEd25519CoordinatorSigningSessionRecord = {
-    mode: 'cosigner';
-    expiresAtMs: number;
-    mpcSessionId: string;
-    relayerKeyId: string;
-    signingDigestB64u: string;
-    userId: string;
-    authorityScope: ThresholdEd25519AuthorityScope;
-    commitmentsById: ParsedThresholdEd25519CommitmentsById;
-    participantIds: number[];
-    groupPublicKey: string;
-    cosignerIds: number[];
-    cosignerRelayerUrlsById: ParsedThresholdEd25519StringById;
-    cosignerCoordinatorGrantsById: ParsedThresholdEd25519StringById;
-    relayerVerifyingSharesById: ParsedThresholdEd25519StringById;
-};
-export declare function parseThresholdEd25519CoordinatorSigningSessionRecord(raw: unknown): ParsedThresholdEd25519CoordinatorSigningSessionRecord | null;
-type ParsedEd25519WalletSessionRecord = {
-    expiresAtMs: number;
-    relayerKeyId: string;
-    userId: string;
-    walletId: string;
-    nearAccountId: string;
-    nearEd25519SigningKeyId: string;
-    authorityScope: ThresholdEd25519AuthorityScope;
-    participantIds: number[];
-} & Partial<ParsedThresholdEcdsaSigningRootMetadata>;
-export declare function parseEd25519WalletSessionRecord(raw: unknown): ParsedEd25519WalletSessionRecord | null;
-type ParsedEcdsaWalletSessionRecordCore = {
-    expiresAtMs: number;
-    relayerKeyId: string;
-    walletId: string;
-    keyHandle: EcdsaKeyHandle;
-    participantIds: number[];
-};
-type ParsedEcdsaWalletSessionRecord = ParsedEcdsaWalletSessionRecordCore & ({
-    signingRootId?: never;
-    signingRootVersion?: never;
-    walletKeyVersion?: never;
-    derivationVersion?: never;
-} | ParsedThresholdEcdsaSigningRootMetadata);
-export declare function parseEcdsaWalletSessionRecord(raw: unknown): ParsedEcdsaWalletSessionRecord | null;
-export {};
 //# sourceMappingURL=validation.d.ts.map

package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts

@@ -1,7 +1,3 @@
-import type { WalletAuthMethodStore } from './d1WalletAuthMethodStore';
-import { type StoreFactoryInput } from './storeBackends';
-export { D1WalletAuthMethodStore, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_SQL, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_V2_SQL, ensureWalletAuthMethodStoreD1Schema, ensureWalletAuthMethodStoreD1SchemaV2, normalizeWalletAuthMethod, normalizeWalletAuthMethodV2, prepareD1WalletAuthMethodV2PutStatement, walletAuthMethodV2Id, } from './d1WalletAuthMethodStore';
+export { D1WalletAuthMethodStore, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_SQL, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_V2_SQL, ensureWalletAuthMethodStoreD1Schema, normalizeWalletAuthMethod, normalizeWalletAuthMethodV2, prepareD1WalletAuthMethodV2PutStatement, walletAuthMethodV2Id, } from './d1WalletAuthMethodStore';
 export type { D1WalletAuthMethodStoreOptions, D1WalletAuthMethodStoreSchemaOptions, WalletAuthMethodRecord, WalletAuthMethodRecordV2Owned, WalletAuthMethodStore, WalletAuthMethodV2Store, } from './d1WalletAuthMethodStore';
-export declare function resolveWalletAuthMethodStoreNamespace(config: Record<string, unknown>): string;
-export declare function createWalletAuthMethodStore(input: StoreFactoryInput): WalletAuthMethodStore;
 //# sourceMappingURL=WalletAuthMethodStore.d.ts.map

package/dist/types/wallet-server/src/core/WalletStore.d.ts

@@ -5,7 +5,6 @@ import { type RuntimePolicyScope } from '../../../shared-ts/src/threshold/signin
 import type { RouterAbEd25519YaoActivationResultV1, RouterAbEd25519YaoActivationAdmissionReceiptV1, RouterAbEd25519YaoBytes32V1, RouterAbEd25519YaoRecoveryAdmissionRequestV1, RouterAbEd25519YaoRegistrationAdmissionRequestV1 } from '../../../shared-ts/src/utils/routerAbEd25519Yao';
 import { type RouterAbMpcMaterialActivationRefWire } from '../../../shared-ts/src/utils/routerAbNormalSigningIdentity';
 import { type RouterAbEcdsaDerivationActivationRefreshForwardedResponseV1, type RouterAbEcdsaDerivationActivationRefreshRequestV1, type RouterAbEcdsaDerivationPublicCapabilityV1, type RouterAbEcdsaRegistrationActivationReceiptV1 } from '../../../shared-ts/src/utils/routerAbEcdsaDerivation';
-import { type StoreFactoryInput } from './storeBackends';
 export { D1WalletStore, WALLET_STORE_D1_SCHEMA_SQL, buildWalletEcdsaSignerRecord, ensureWalletStoreD1Schema, } from './d1WalletStore';
 export type { D1WalletStoreOptions, D1WalletStoreSchemaOptions } from './d1WalletStore';
 export type WalletRecord = {
@@ -128,11 +127,9 @@ export declare function ecdsaPostRegistrationRequestMatchesCapability(input: {
     request: WalletEcdsaPostRegistrationPublicRequest;
     capability: RouterAbEcdsaDerivationPublicCapabilityV1;
 }): boolean;
-export declare function resolveWalletStoreNamespace(config: Record<string, unknown>): string;
 export declare function parseWalletEcdsaSignerRecord(raw: unknown): WalletEcdsaSignerRecord | null;
 export declare function buildWalletEd25519SignerId(input: {
     nearAccountId: string;
     signerSlot: number;
 }): string;
-export declare function createWalletStore(input: StoreFactoryInput): WalletStore;
 //# sourceMappingURL=WalletStore.d.ts.map