@seams/wallet-server 0.7.1 → 0.8.0

package/dist/esm/core/NearPublicKeyStore.js

@@ -1,200 +0,0 @@
-import { parseWebAuthnRpId } from "../shared-ts/src/utils/domainIds.js";
-import { normalizeOptionalTrimmedString } from "../shared-ts/src/utils/normalize.js";
-import { isObject } from "../shared-ts/src/utils/validation.js";
-import { parseD1JsonColumn, resolveD1DatabaseFromConfig } from "../storage/d1Sql.js";
-import { D1TenantTable, d1TenantScopeFromConfig, ensureD1Schema } from "./d1TenantStore.js";
-//#region src/core/NearPublicKeyStore.ts
-const NEAR_PUBLIC_KEY_D1_STORE = "NEAR public key store";
-const NEAR_PUBLIC_KEY_STORE_D1_SCHEMA_SQL = Object.freeze([`
-    CREATE TABLE IF NOT EXISTS near_public_keys (
-      namespace TEXT NOT NULL,
-      org_id TEXT NOT NULL,
-      project_id TEXT NOT NULL,
-      env_id TEXT NOT NULL,
-      user_id TEXT NOT NULL,
-      public_key TEXT NOT NULL,
-      kind TEXT NOT NULL,
-      signer_slot INTEGER,
-      record_json TEXT NOT NULL,
-      created_at_ms INTEGER NOT NULL,
-      updated_at_ms INTEGER NOT NULL,
-      removed_at_ms INTEGER,
-      PRIMARY KEY (namespace, org_id, project_id, env_id, user_id, public_key),
-      CHECK (length(user_id) > 0),
-      CHECK (length(public_key) > 0),
-      CHECK (kind IN ('threshold', 'local', 'backup', 'ephemeral')),
-      CHECK (signer_slot IS NULL OR signer_slot >= 1),
-      CHECK (json_valid(record_json)),
-      CHECK (created_at_ms > 0),
-      CHECK (updated_at_ms > 0),
-      CHECK (removed_at_ms IS NULL OR removed_at_ms > 0)
-    )
-  `, `
-    CREATE INDEX IF NOT EXISTS near_public_keys_user_idx
-      ON near_public_keys (
-        namespace,
-        org_id,
-        project_id,
-        env_id,
-        user_id,
-        signer_slot,
-        created_at_ms
-      )
-  `]);
-async function ensureNearPublicKeyStoreD1Schema(options) {
-	await ensureD1Schema(options.database, NEAR_PUBLIC_KEY_STORE_D1_SCHEMA_SQL);
-}
-function parseNearPublicKeyKind(input) {
-	const k = normalizeOptionalTrimmedString(input);
-	if (k === "threshold" || k === "local" || k === "backup" || k === "ephemeral") return k;
-	return null;
-}
-function parseNearPublicKeyAuthBinding(raw) {
-	if (Object.prototype.hasOwnProperty.call(raw, "rpId") || Object.prototype.hasOwnProperty.call(raw, "credentialIdB64u")) return null;
-	if (raw.authBinding === void 0) return void 0;
-	if (!isObject(raw.authBinding)) return null;
-	const kind = normalizeOptionalTrimmedString(raw.authBinding.kind);
-	const rpId = parseWebAuthnRpId(raw.authBinding.rpId);
-	const credentialIdB64u = normalizeOptionalTrimmedString(raw.authBinding.credentialIdB64u);
-	if (kind !== "passkey" || !rpId.ok || !credentialIdB64u) return null;
-	return {
-		kind: "passkey",
-		rpId: rpId.value,
-		credentialIdB64u
-	};
-}
-function parseNearPublicKeyRecord(raw) {
-	if (!isObject(raw)) return null;
-	if (normalizeOptionalTrimmedString(raw.version) !== "near_public_key_v1") return null;
-	const userId = normalizeOptionalTrimmedString(raw.userId);
-	const publicKey = normalizeOptionalTrimmedString(raw.publicKey);
-	const kind = parseNearPublicKeyKind(raw.kind);
-	const createdAtMsRaw = raw.createdAtMs;
-	const updatedAtMsRaw = raw.updatedAtMs;
-	const createdAtMs = typeof createdAtMsRaw === "number" ? createdAtMsRaw : Number(createdAtMsRaw);
-	const updatedAtMs = typeof updatedAtMsRaw === "number" ? updatedAtMsRaw : Number(updatedAtMsRaw);
-	if (!userId || !publicKey || !kind) return null;
-	if (!publicKey.startsWith("ed25519:")) return null;
-	if (!Number.isFinite(createdAtMs) || createdAtMs <= 0) return null;
-	if (!Number.isFinite(updatedAtMs) || updatedAtMs <= 0) return null;
-	const signerSlotRaw = raw.signerSlot;
-	const signerSlot = typeof signerSlotRaw === "number" ? signerSlotRaw : Number(signerSlotRaw);
-	const authBinding = parseNearPublicKeyAuthBinding(raw);
-	if (authBinding === null) return null;
-	const addedTxHash = normalizeOptionalTrimmedString(raw.addedTxHash);
-	const removedAtMsRaw = raw.removedAtMs;
-	const removedAtMs = typeof removedAtMsRaw === "number" ? removedAtMsRaw : Number(removedAtMsRaw);
-	return {
-		version: "near_public_key_v1",
-		userId,
-		publicKey,
-		kind,
-		...Number.isFinite(signerSlot) && signerSlot >= 1 ? { signerSlot: Math.floor(signerSlot) } : {},
-		...authBinding ? { authBinding } : {},
-		createdAtMs: Math.floor(createdAtMs),
-		updatedAtMs: Math.floor(updatedAtMs),
-		...addedTxHash ? { addedTxHash } : {},
-		...Number.isFinite(removedAtMs) && removedAtMs > 0 ? { removedAtMs: Math.floor(removedAtMs) } : {}
-	};
-}
-var InMemoryNearPublicKeyStore = class {
-	constructor() {
-		this.byUser = /* @__PURE__ */ new Map();
-	}
-	async put(record) {
-		const parsed = parseNearPublicKeyRecord(record);
-		if (!parsed) throw new Error("Invalid near public key record");
-		const key = parsed.userId;
-		const bucket = this.byUser.get(key) || /* @__PURE__ */ new Map();
-		bucket.set(parsed.publicKey, parsed);
-		this.byUser.set(key, bucket);
-	}
-	async listByUserId(userId) {
-		const uid = normalizeOptionalTrimmedString(userId);
-		if (!uid) return [];
-		const bucket = this.byUser.get(uid);
-		if (!bucket) return [];
-		const out = Array.from(bucket.values()).map((r) => parseNearPublicKeyRecord(r)).filter(Boolean);
-		out.sort((a, b) => (a.signerSlot || 0) - (b.signerSlot || 0));
-		return out;
-	}
-};
-/** A user's NEAR public keys, in signer-slot order; binds the scope, then the user. */
-const NEAR_PUBLIC_KEYS_BY_USER_SQL = `SELECT record_json
-         FROM near_public_keys
-        WHERE namespace = ?
-          AND org_id = ?
-          AND project_id = ?
-          AND env_id = ?
-          AND user_id = ?
-        ORDER BY COALESCE(signer_slot, 0) ASC, created_at_ms ASC, public_key ASC`;
-var D1NearPublicKeyStore = class {
-	constructor(input) {
-		this.adapterKind = "d1";
-		this.table = new D1TenantTable(input, NEAR_PUBLIC_KEY_D1_STORE, NEAR_PUBLIC_KEY_STORE_D1_SCHEMA_SQL);
-	}
-	async put(record) {
-		await this.table.ensureSchema();
-		const parsed = parseNearPublicKeyRecord(record);
-		if (!parsed) throw new Error("Invalid near public key record");
-		await this.table.prepare(`INSERT INTO near_public_keys (
-        namespace,
-        org_id,
-        project_id,
-        env_id,
-        user_id,
-        public_key,
-        kind,
-        signer_slot,
-        record_json,
-        created_at_ms,
-        updated_at_ms,
-        removed_at_ms
-      )
-      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
-      ON CONFLICT (namespace, org_id, project_id, env_id, user_id, public_key)
-      DO UPDATE SET
-        kind = EXCLUDED.kind,
-        signer_slot = EXCLUDED.signer_slot,
-        record_json = EXCLUDED.record_json,
-        created_at_ms = MIN(near_public_keys.created_at_ms, EXCLUDED.created_at_ms),
-        updated_at_ms = MAX(near_public_keys.updated_at_ms, EXCLUDED.updated_at_ms),
-        removed_at_ms = EXCLUDED.removed_at_ms`, [
-			parsed.userId,
-			parsed.publicKey,
-			parsed.kind,
-			parsed.signerSlot ?? null,
-			JSON.stringify(parsed),
-			parsed.createdAtMs,
-			parsed.updatedAtMs,
-			parsed.removedAtMs ?? null
-		]).run();
-	}
-	async listByUserId(userId) {
-		await this.table.ensureSchema();
-		const uid = normalizeOptionalTrimmedString(userId);
-		if (!uid) return [];
-		return ((await this.table.prepare(NEAR_PUBLIC_KEYS_BY_USER_SQL, [uid]).all()).results || []).map((row) => parseNearPublicKeyRecord(parseD1JsonColumn(row.record_json))).filter((record) => Boolean(record));
-	}
-};
-function createNearPublicKeyStore(input) {
-	const config = isObject(input.config) ? input.config : {};
-	const namespace = normalizeOptionalTrimmedString(config.NEAR_PUBLIC_KEY_NAMESPACE) || normalizeOptionalTrimmedString(config.THRESHOLD_PREFIX) || "";
-	const kind = normalizeOptionalTrimmedString(config.kind);
-	if (kind === "d1") {
-		const database = resolveD1DatabaseFromConfig(config);
-		if (!database) throw new Error("[near-public-keys] D1 store selected but no D1 database was provided");
-		input.logger.info("[near-public-keys] Using D1 store for NEAR public key metadata");
-		return new D1NearPublicKeyStore({
-			database,
-			...d1TenantScopeFromConfig(config, namespace, NEAR_PUBLIC_KEY_D1_STORE)
-		});
-	}
-	if (kind) throw new Error(`[near-public-keys] Unknown NEAR public key store kind: ${kind}`);
-	input.logger.info("[near-public-keys] Using in-memory store for NEAR public key metadata");
-	return new InMemoryNearPublicKeyStore();
-}
-//#endregion
-export { D1NearPublicKeyStore, NEAR_PUBLIC_KEYS_BY_USER_SQL, NEAR_PUBLIC_KEY_STORE_D1_SCHEMA_SQL, createNearPublicKeyStore, ensureNearPublicKeyStoreD1Schema };
-
-//# sourceMappingURL=NearPublicKeyStore.js.map

package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js

@@ -1,397 +0,0 @@
-import { normalizeOptionalTrimmedString } from "../../../shared-ts/src/utils/normalize.js";
-import { isPlainObject } from "../../../shared-ts/src/utils/validation.js";
-import "../../defaultConfigsServer.js";
-import { canonicalThresholdEd25519RelayerKeyId, parseEcdsaWalletSessionRecord, parseEd25519WalletSessionRecord, parseThresholdEcdsaMpcSessionRecord, parseThresholdEd25519CoordinatorSigningSessionRecord, parseThresholdEd25519KeyRecord, parseThresholdEd25519MpcSessionRecord, parseThresholdEd25519SigningSessionRecord, toThresholdEcdsaPrefixFromBase, toThresholdEcdsaSessionPrefix, toThresholdEcdsaWalletSessionPrefix, toThresholdEd25519KeyPrefix, toThresholdEd25519PrefixFromBase, toThresholdEd25519SessionPrefix, toThresholdEd25519WalletSessionPrefix } from "../validation.js";
-import { durableObjectName, durableObjectStub, requestDurableObjectJson, resolveDurableObjectNamespace } from "../../storeBackends.js";
-//#region src/core/ThresholdService/stores/CloudflareDurableObjectStore.ts
-async function callDo(stub, req) {
-	const json = await requestDurableObjectJson(stub, req, "Threshold");
-	if (!isPlainObject(json)) throw new Error("Threshold DO store returned invalid JSON shape");
-	if (json.ok === true) return json;
-	const code = normalizeOptionalTrimmedString(json.code);
-	const message = normalizeOptionalTrimmedString(json.message);
-	return {
-		ok: false,
-		code: code || "internal",
-		message: message || "Threshold DO store error"
-	};
-}
-function computeWalletSessionPrefix(config) {
-	const basePrefix = normalizeOptionalTrimmedString(config.THRESHOLD_PREFIX);
-	return toThresholdEd25519WalletSessionPrefix(normalizeOptionalTrimmedString(config.THRESHOLD_ED25519_WALLET_SESSION_PREFIX) || toThresholdEd25519PrefixFromBase(basePrefix, "wallet-session"));
-}
-function computeSessionPrefix(config) {
-	const basePrefix = normalizeOptionalTrimmedString(config.THRESHOLD_PREFIX);
-	return toThresholdEd25519SessionPrefix(normalizeOptionalTrimmedString(config.THRESHOLD_ED25519_SESSION_PREFIX) || toThresholdEd25519PrefixFromBase(basePrefix, "sess"));
-}
-function computeKeyPrefix(config) {
-	const basePrefix = normalizeOptionalTrimmedString(config.THRESHOLD_PREFIX);
-	return toThresholdEd25519KeyPrefix(normalizeOptionalTrimmedString(config.THRESHOLD_ED25519_KEYSTORE_PREFIX) || toThresholdEd25519PrefixFromBase(basePrefix, "key"));
-}
-function computeWalletSessionPrefixEcdsa(config) {
-	const basePrefix = normalizeOptionalTrimmedString(config.THRESHOLD_PREFIX);
-	return toThresholdEcdsaWalletSessionPrefix(normalizeOptionalTrimmedString(config.THRESHOLD_ECDSA_WALLET_SESSION_PREFIX) || toThresholdEcdsaPrefixFromBase(basePrefix, "wallet-session"));
-}
-function computeSessionPrefixEcdsa(config) {
-	const basePrefix = normalizeOptionalTrimmedString(config.THRESHOLD_PREFIX);
-	return toThresholdEcdsaSessionPrefix(normalizeOptionalTrimmedString(config.THRESHOLD_ECDSA_SESSION_PREFIX) || toThresholdEcdsaPrefixFromBase(basePrefix, "sess"));
-}
-var CloudflareDurableObjectWalletSessionStore = class {
-	constructor(input) {
-		this.stub = durableObjectStub(input.namespace, input.objectName);
-		this.keyPrefix = input.keyPrefix;
-		this.parseRecord = input.parseRecord;
-	}
-	key(id) {
-		return `${this.keyPrefix}${id}`;
-	}
-	replayGuardKey(scopeId, replayKey) {
-		return `${this.keyPrefix}replay:${normalizeOptionalTrimmedString(scopeId) || "missing"}:${normalizeOptionalTrimmedString(replayKey) || "missing"}`;
-	}
-	async putSession(id, record, opts) {
-		const ttlMs = Math.max(0, Number(opts.ttlMs) || 0);
-		const expiresAtMs = Date.now() + ttlMs;
-		const entry = {
-			record,
-			remainingUses: Math.max(0, Number(opts.remainingUses) || 0),
-			expiresAtMs
-		};
-		const resp = await callDo(this.stub, {
-			op: "set",
-			key: this.key(id),
-			value: entry,
-			ttlMs
-		});
-		if (!resp.ok) throw new Error(resp.message);
-	}
-	async getSession(id) {
-		const resp = await callDo(this.stub, {
-			op: "get",
-			key: this.key(id)
-		});
-		if (!resp.ok) return null;
-		const raw = resp.value;
-		const entry = isPlainObject(raw) ? raw : null;
-		const record = entry ? this.parseRecord(entry.record) : null;
-		const expiresAtMs = entry ? entry.expiresAtMs : null;
-		if (!record || typeof expiresAtMs !== "number" || !Number.isFinite(expiresAtMs)) return null;
-		if (expiresAtMs <= Date.now()) return null;
-		return record;
-	}
-	async getSessionStatus(id) {
-		const resp = await callDo(this.stub, {
-			op: "authGetSessionStatus",
-			key: this.key(id)
-		});
-		if (!resp.ok) switch (resp.code) {
-			case "wallet_session_missing":
-			case "wallet_session_expired": return {
-				ok: false,
-				code: resp.code
-			};
-			default: return {
-				ok: false,
-				code: "wallet_session_unavailable"
-			};
-		}
-		if (!resp.value) return {
-			ok: false,
-			code: "wallet_session_unavailable"
-		};
-		const record = this.parseRecord(resp.value.record);
-		if (!record) return {
-			ok: false,
-			code: "wallet_session_unavailable"
-		};
-		const expiresAtMs = Number(resp.value.expiresAtMs);
-		const remainingUses = Math.max(0, Math.floor(Number(resp.value.remainingUses) || 0));
-		if (!Number.isFinite(expiresAtMs)) return {
-			ok: false,
-			code: "wallet_session_unavailable"
-		};
-		if (expiresAtMs <= Date.now()) return {
-			ok: false,
-			code: "wallet_session_expired"
-		};
-		return {
-			ok: true,
-			status: {
-				record,
-				expiresAtMs,
-				remainingUses
-			}
-		};
-	}
-	async consumeUseCount(id) {
-		const resp = await callDo(this.stub, {
-			op: "authConsumeUseCount",
-			key: this.key(id)
-		});
-		if (!resp.ok) return {
-			ok: false,
-			code: resp.code,
-			message: resp.message
-		};
-		return {
-			ok: true,
-			remainingUses: resp.value.remainingUses
-		};
-	}
-	async consumeUseCountOnce(id, idempotencyKey) {
-		const resp = await callDo(this.stub, {
-			op: "authConsumeUseCountOnce",
-			key: this.key(id),
-			idempotencyKey
-		});
-		if (!resp.ok) return {
-			ok: false,
-			code: resp.code,
-			message: resp.message
-		};
-		return {
-			ok: true,
-			remainingUses: resp.value.remainingUses
-		};
-	}
-	async hasConsumedUseCountOnce(id, idempotencyKey) {
-		const resp = await callDo(this.stub, {
-			op: "authHasConsumedUseCountOnce",
-			key: this.key(id),
-			idempotencyKey
-		});
-		if (!resp.ok) return {
-			ok: false,
-			code: resp.code,
-			message: resp.message
-		};
-		return {
-			ok: true,
-			consumed: resp.value.consumed
-		};
-	}
-	async reserveReplayGuard(scopeId, replayKey, expiresAtMs) {
-		const resp = await callDo(this.stub, {
-			op: "authReserveReplayGuard",
-			key: this.replayGuardKey(scopeId, replayKey),
-			expiresAtMs
-		});
-		if (!resp.ok) return {
-			ok: false,
-			code: resp.code,
-			message: resp.message
-		};
-		return { ok: true };
-	}
-};
-var CloudflareDurableObjectThresholdEd25519SessionStore = class {
-	constructor(input) {
-		this.stub = durableObjectStub(input.namespace, input.objectName);
-		this.keyPrefix = input.keyPrefix;
-		this.coordinatorPrefix = `${this.keyPrefix}coord:`;
-		this.parseMpcSessionRecord = input.parseMpcSessionRecord || parseThresholdEd25519MpcSessionRecord;
-	}
-	key(id) {
-		return `${this.keyPrefix}${id}`;
-	}
-	coordKey(id) {
-		return `${this.coordinatorPrefix}${id}`;
-	}
-	async putMpcSession(id, record, ttlMs) {
-		const resp = await callDo(this.stub, {
-			op: "set",
-			key: this.key(id),
-			value: record,
-			ttlMs
-		});
-		if (!resp.ok) throw new Error(resp.message);
-	}
-	async readMpcSession(id) {
-		const resp = await callDo(this.stub, {
-			op: "readVersioned",
-			key: this.key(id)
-		});
-		if (!resp.ok || !resp.value) return null;
-		const record = this.parseMpcSessionRecord(resp.value.value);
-		const version = normalizeOptionalTrimmedString(resp.value.version);
-		return record && version ? {
-			record,
-			version
-		} : null;
-	}
-	async claimMpcSession(id, version) {
-		const expectedVersion = normalizeOptionalTrimmedString(version);
-		if (!expectedVersion) return {
-			ok: false,
-			code: "version_mismatch"
-		};
-		const resp = await callDo(this.stub, {
-			op: "claimVersioned",
-			key: this.key(id),
-			expectedVersion
-		});
-		if (!resp.ok) return {
-			ok: false,
-			code: "not_found"
-		};
-		const status = normalizeOptionalTrimmedString(resp.value?.status);
-		if (status === "not_found") return {
-			ok: false,
-			code: "not_found"
-		};
-		if (status === "expired") return {
-			ok: false,
-			code: "expired"
-		};
-		if (status === "version_mismatch") return {
-			ok: false,
-			code: "version_mismatch"
-		};
-		const record = this.parseMpcSessionRecord(resp.value?.value);
-		return record ? {
-			ok: true,
-			record
-		} : {
-			ok: false,
-			code: "invalid_record"
-		};
-	}
-	async takeMpcSession(id) {
-		const resp = await callDo(this.stub, {
-			op: "getdel",
-			key: this.key(id)
-		});
-		if (!resp.ok) return null;
-		return this.parseMpcSessionRecord(resp.value);
-	}
-	async putSigningSession(id, record, ttlMs) {
-		const resp = await callDo(this.stub, {
-			op: "set",
-			key: this.key(id),
-			value: record,
-			ttlMs
-		});
-		if (!resp.ok) throw new Error(resp.message);
-	}
-	async takeSigningSession(id) {
-		const resp = await callDo(this.stub, {
-			op: "getdel",
-			key: this.key(id)
-		});
-		if (!resp.ok) return null;
-		return parseThresholdEd25519SigningSessionRecord(resp.value);
-	}
-	async putCoordinatorSigningSession(id, record, ttlMs) {
-		const resp = await callDo(this.stub, {
-			op: "set",
-			key: this.coordKey(id),
-			value: record,
-			ttlMs
-		});
-		if (!resp.ok) throw new Error(resp.message);
-	}
-	async takeCoordinatorSigningSession(id) {
-		const resp = await callDo(this.stub, {
-			op: "getdel",
-			key: this.coordKey(id)
-		});
-		if (!resp.ok) return null;
-		return parseThresholdEd25519CoordinatorSigningSessionRecord(resp.value);
-	}
-};
-var CloudflareDurableObjectThresholdEd25519KeyStore = class {
-	constructor(input) {
-		this.stub = durableObjectStub(input.namespace, input.objectName);
-		this.keyPrefix = input.keyPrefix;
-	}
-	key(relayerKeyId) {
-		return `${this.keyPrefix}${relayerKeyId}`;
-	}
-	async get(relayerKeyId) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) return null;
-		const resp = await callDo(this.stub, {
-			op: "get",
-			key: this.key(id)
-		});
-		if (!resp.ok) return null;
-		return parseThresholdEd25519KeyRecord(resp.value);
-	}
-	async put(relayerKeyId, record) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) throw new Error("Missing relayerKeyId");
-		const resp = await callDo(this.stub, {
-			op: "set",
-			key: this.key(id),
-			value: record
-		});
-		if (!resp.ok) throw new Error(resp.message);
-	}
-	async del(relayerKeyId) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) return;
-		const resp = await callDo(this.stub, {
-			op: "del",
-			key: this.key(id)
-		});
-		if (!resp.ok) throw new Error(resp.message);
-	}
-};
-function createCloudflareDurableObjectThresholdEd25519Stores(input) {
-	const config = isPlainObject(input.config) ? input.config : {};
-	if (normalizeOptionalTrimmedString(config.kind) !== "cloudflare-do") return null;
-	const namespace = resolveDurableObjectNamespace(config);
-	if (!namespace) throw new Error("cloudflare-do threshold store selected but no Durable Object namespace was provided (expected config.namespace)");
-	const objectName = durableObjectName(config);
-	const walletSessionPrefix = computeWalletSessionPrefix(config);
-	const sessionPrefix = computeSessionPrefix(config);
-	const keyPrefix = computeKeyPrefix(config);
-	input.logger.info("[threshold-ed25519] Using Cloudflare Durable Object store for threshold session persistence");
-	return {
-		keyStore: new CloudflareDurableObjectThresholdEd25519KeyStore({
-			namespace,
-			objectName,
-			keyPrefix
-		}),
-		sessionStore: new CloudflareDurableObjectThresholdEd25519SessionStore({
-			namespace,
-			objectName,
-			keyPrefix: sessionPrefix
-		}),
-		walletSessionStore: new CloudflareDurableObjectWalletSessionStore({
-			namespace,
-			objectName,
-			keyPrefix: walletSessionPrefix,
-			parseRecord: parseEd25519WalletSessionRecord
-		})
-	};
-}
-function createCloudflareDurableObjectThresholdEcdsaStores(input) {
-	const config = isPlainObject(input.config) ? input.config : {};
-	if (normalizeOptionalTrimmedString(config.kind) !== "cloudflare-do") return null;
-	const namespace = resolveDurableObjectNamespace(config);
-	if (!namespace) throw new Error("cloudflare-do threshold store selected but no Durable Object namespace was provided (expected config.namespace)");
-	const configuredObjectName = normalizeOptionalTrimmedString(config.objectName) || normalizeOptionalTrimmedString(config.name);
-	const ecdsaObjectName = configuredObjectName || "threshold-ecdsa-store";
-	const walletSessionObjectName = configuredObjectName || "threshold-store";
-	const walletSessionPrefix = computeWalletSessionPrefixEcdsa(config);
-	const sessionPrefix = computeSessionPrefixEcdsa(config);
-	input.logger.info("[threshold-ecdsa] Using Cloudflare Durable Object store for threshold session persistence");
-	return {
-		sessionStore: new CloudflareDurableObjectThresholdEd25519SessionStore({
-			namespace,
-			objectName: ecdsaObjectName,
-			keyPrefix: sessionPrefix,
-			parseMpcSessionRecord: parseThresholdEcdsaMpcSessionRecord
-		}),
-		walletSessionStore: new CloudflareDurableObjectWalletSessionStore({
-			namespace,
-			objectName: walletSessionObjectName,
-			keyPrefix: walletSessionPrefix,
-			parseRecord: parseEcdsaWalletSessionRecord
-		})
-	};
-}
-//#endregion
-export { createCloudflareDurableObjectThresholdEcdsaStores, createCloudflareDurableObjectThresholdEd25519Stores };
-
-//# sourceMappingURL=CloudflareDurableObjectStore.js.map