@seams/wallet-server 0.7.1 → 0.8.0

package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js

@@ -1,273 +0,0 @@
-import { mpcMaterialActivationRefsEqual } from "../../../shared-ts/src/utils/domainIds.js";
-import { parseLaneProtocolCommitReceiptV1 } from "../../../shared-ts/src/signing-lanes/rotationParsers.js";
-import { LaneLifecycleApplicationService } from "../../../core/signingLanes/LaneLifecycleApplicationService.js";
-import { parseRotatableSigningLaneJobV1 } from "../../../shared-ts/src/signing-lanes/rotationProtocolParsers.js";
-//#region src/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.ts
-const ROUTER_AB_ED25519_YAO_LANE_EXECUTE_PATH_V1 = "/router-ab/internal/ed25519-yao/lane/execute";
-const INTERNAL_SERVICE_AUTH_HEADER = "x-router-ab-internal-service-auth";
-const REPLAY_HEADER = "x-seams-lane-replay";
-const INTERNAL_ROUTER_ORIGIN = "https://router.router-ab.internal";
-var CloudflareEd25519LaneProtocolTransportV1 = class {
-	constructor(options) {
-		this.options = options;
-		this.internalServiceAuth = requireNonEmpty(options.internalServiceAuth, "internalServiceAuth");
-	}
-	async executeProtocolCommitV1(input) {
-		const request = parseClientLaneDispatch(input.requestJson);
-		assertSameLaneJob(input.job, request.job);
-		const binding = await this.options.bindingResolver.resolveBindingV1({ job: input.job });
-		return parseEd25519LaneExecuteResponse(await postAuthenticatedJsonWithReplayV1({
-			binding: this.options.router,
-			internalServiceAuth: this.internalServiceAuth,
-			path: ROUTER_AB_ED25519_YAO_LANE_EXECUTE_PATH_V1,
-			body: {
-				binding: requireJsonRecord(binding, "binding"),
-				request: request.wire
-			}
-		}), input.job);
-	}
-};
-/**
-* Runs one private MPC effect, then records its exact receipt through Gateway
-* CAS. A transport retry submits byte-identical input and relies on the
-* operation-scoped worker journal for replay.
-*/
-var CloudflareLaneProtocolCommitterV1 = class {
-	constructor(options) {
-		this.options = options;
-	}
-	async executeAndRecordEd25519YaoLaneV1(input) {
-		const capture = {};
-		const execution = ed25519ExecutionWithCaptureV1({
-			execution: this.options.execution,
-			transport: this.options.ed25519Transport,
-			capture
-		});
-		const protocolCasResult = await new LaneLifecycleApplicationService({
-			gateway: this.options.gateway,
-			authorization: this.options.authorization,
-			execution
-		}).recordLaneProtocolCommitV1({
-			curve: "ed25519_yao",
-			job: input.job,
-			requestJson: input.requestJson,
-			expectedVersion: input.expectedVersion
-		});
-		const committed = capture.value;
-		if (!committed) throw new Error("Ed25519 lane protocol effect returned no committed result");
-		return {
-			receipt: committed.receipt,
-			protocolCasResult,
-			responseJson: committed.responseJson
-		};
-	}
-	async executeAndRecordEcdsaAdditiveLaneV1(input) {
-		const capture = {};
-		const execution = ecdsaExecutionWithCaptureV1({
-			execution: this.options.execution,
-			capture
-		});
-		const protocolCasResult = await new LaneLifecycleApplicationService({
-			gateway: this.options.gateway,
-			authorization: this.options.authorization,
-			execution
-		}).recordLaneProtocolCommitV1({
-			curve: "ecdsa_additive",
-			job: input.job,
-			holderRound: input.holderRound,
-			holderPackage: input.holderPackage,
-			encryptedDeltaPackageJson: input.encryptedDeltaPackageJson,
-			expectedVersion: input.expectedVersion
-		});
-		const receipt = capture.value;
-		if (!receipt) throw new Error("ECDSA lane protocol effect returned no committed receipt");
-		return {
-			receipt,
-			protocolCasResult
-		};
-	}
-};
-function ed25519ExecutionWithCaptureV1(input) {
-	const ed25519 = input.execution.ed25519;
-	return {
-		ed25519: {
-			async executeProtocolCommitV1(request) {
-				if (input.capture.value) throw new Error("Ed25519 lane protocol effect executed twice");
-				const value = await input.transport.executeProtocolCommitV1(request);
-				input.capture.value = value;
-				return value.receipt;
-			},
-			executeServerActivationV1(request) {
-				return ed25519.executeServerActivationV1(request);
-			},
-			executeServerRetirementV1(request) {
-				return ed25519.executeServerRetirementV1(request);
-			}
-		},
-		ecdsa: input.execution.ecdsa
-	};
-}
-function ecdsaExecutionWithCaptureV1(input) {
-	const ecdsa = input.execution.ecdsa;
-	return {
-		ed25519: input.execution.ed25519,
-		ecdsa: {
-			async executeProtocolCommitV1(request) {
-				if (input.capture.value) throw new Error("ECDSA lane protocol effect executed twice");
-				const receipt = parseLaneProtocolCommitReceiptV1(await ecdsa.executeProtocolCommitV1(request));
-				input.capture.value = receipt;
-				return receipt;
-			},
-			executeServerActivationV1(request) {
-				return ecdsa.executeServerActivationV1(request);
-			},
-			executeServerRetirementV1(request) {
-				return ecdsa.executeServerRetirementV1(request);
-			}
-		}
-	};
-}
-async function postAuthenticatedJsonWithReplayV1(input) {
-	const body = JSON.stringify(input.body);
-	let response;
-	try {
-		response = await fetchInternal(input, body, false);
-	} catch {
-		response = await fetchInternal(input, body, true);
-	}
-	const text = await response.text();
-	if (!response.ok) {
-		const detail = boundedLaneWorkerErrorBodyV1(text);
-		throw new Error(`lane worker ${input.path} returned HTTP ${response.status}${detail ? `: ${detail}` : ""}`);
-	}
-	try {
-		return text.length === 0 ? null : JSON.parse(text);
-	} catch {
-		throw new Error(`lane worker ${input.path} returned invalid JSON`);
-	}
-}
-const LANE_WORKER_ERROR_BODY_LIMIT_V1 = 512;
-function boundedLaneWorkerErrorBodyV1(body) {
-	const normalized = body.trim().replace(/\s+/g, " ");
-	if (normalized.length <= LANE_WORKER_ERROR_BODY_LIMIT_V1) return normalized;
-	return `${normalized.slice(0, LANE_WORKER_ERROR_BODY_LIMIT_V1 - 1)}…`;
-}
-async function fetchInternal(input, body, replay) {
-	const headers = {
-		"content-type": "application/json",
-		[INTERNAL_SERVICE_AUTH_HEADER]: input.internalServiceAuth
-	};
-	if (replay) headers[REPLAY_HEADER] = "1";
-	return await input.binding.fetch(new Request(`${INTERNAL_ROUTER_ORIGIN}${input.path}`, {
-		method: "POST",
-		headers,
-		body
-	}));
-}
-function parseClientLaneDispatch(requestJson) {
-	let raw;
-	try {
-		raw = JSON.parse(requireNonEmpty(requestJson, "requestJson"));
-	} catch {
-		throw new Error("requestJson must contain valid JSON");
-	}
-	const record = exactJsonRecord(raw, [
-		"job",
-		"deriverAInput",
-		"deriverBInput"
-	], "ed25519YaoLaneClientDispatch");
-	const job = parseRotatableSigningLaneJobV1(record.job, "ed25519YaoLaneClientDispatch.job");
-	if (job.keyFamily !== "ed25519") throw new Error("ed25519YaoLaneClientDispatch.job key family is invalid");
-	requireJsonRecord(record.deriverAInput, "ed25519YaoLaneClientDispatch.deriverAInput");
-	requireJsonRecord(record.deriverBInput, "ed25519YaoLaneClientDispatch.deriverBInput");
-	return {
-		job,
-		wire: record
-	};
-}
-function parseEd25519LaneExecuteResponse(raw, job) {
-	const wrapper = exactJsonRecord(raw, ["result", "receipt"], "ed25519LaneExecuteResponse");
-	const result = exactJsonRecord(wrapper.result, [
-		"job",
-		"transcriptHashB64u",
-		"publicIdentityDigestB64u",
-		"targetHolderPublicCommitmentB64u",
-		"targetServerPublicCommitmentB64u",
-		"targetHolderCiphertextDigestSetB64u",
-		"targetServerCiphertextDigestSetB64u",
-		"holderRecipientKeyDigestB64u",
-		"serverRecipientKeyDigestB64u",
-		"deriverAHolderPackage",
-		"deriverBHolderPackage",
-		"deriverASigningWorkerPackage",
-		"deriverBSigningWorkerPackage",
-		"committedAtMs"
-	], "ed25519LaneExecuteResponse.result");
-	const resultJob = parseRotatableSigningLaneJobV1(result.job, "ed25519LaneExecuteResponse.result.job");
-	if (resultJob.keyFamily !== "ed25519") throw new Error("ed25519LaneExecuteResponse.result.job key family is invalid");
-	assertSameLaneJob(job, resultJob);
-	for (const packageField of [
-		"deriverAHolderPackage",
-		"deriverBHolderPackage",
-		"deriverASigningWorkerPackage",
-		"deriverBSigningWorkerPackage"
-	]) requireJsonRecord(result[packageField], `ed25519LaneExecuteResponse.result.${packageField}`);
-	const receipt = parseLaneProtocolCommitReceiptV1(wrapper.receipt, "ed25519LaneExecuteResponse.receipt");
-	assertReceiptMatchesJob(receipt, job);
-	assertReceiptMatchesResult(receipt, result);
-	return {
-		receipt,
-		responseJson: JSON.stringify(result)
-	};
-}
-function assertReceiptMatchesJob(receipt, job) {
-	if (receipt.operationId !== job.operationId || receipt.enrollmentId !== job.enrollmentId || receipt.walletId !== job.walletId || receipt.walletKeyId !== job.walletKeyId || receipt.sourceLaneId !== job.source.laneId || receipt.sourceLaneShareEpoch !== job.source.laneShareEpoch || receipt.sourceRevocationEpoch !== job.source.revocationEpoch || receipt.targetLaneId !== job.target.laneId || receipt.targetLaneShareEpoch !== job.target.laneShareEpoch || receipt.targetMaterialActivationId !== job.targetMaterialActivationId || receipt.keyFamily !== job.keyFamily || !mpcMaterialActivationRefsEqual(receipt.sourceMaterialActivation, job.source.materialActivation)) throw new Error("Ed25519 lane protocol receipt does not match the admitted job");
-}
-function assertReceiptMatchesResult(receipt, result) {
-	if (receipt.transcriptHashB64u !== result.transcriptHashB64u || receipt.publicIdentityDigestB64u !== result.publicIdentityDigestB64u || receipt.targetHolderPublicCommitmentB64u !== result.targetHolderPublicCommitmentB64u || receipt.targetServerPublicCommitmentB64u !== result.targetServerPublicCommitmentB64u || receipt.targetHolderCiphertextDigestSetB64u !== result.targetHolderCiphertextDigestSetB64u || receipt.targetServerCiphertextDigestSetB64u !== result.targetServerCiphertextDigestSetB64u || receipt.holderRecipientKeyDigestB64u !== result.holderRecipientKeyDigestB64u || receipt.serverRecipientKeyDigestB64u !== result.serverRecipientKeyDigestB64u || receipt.committedAtMs !== result.committedAtMs) throw new Error("Ed25519 lane protocol receipt does not match the committed result");
-}
-function assertSameLaneJob(expected, actual) {
-	if (!ed25519LaneJobsEqual(expected, actual)) throw new Error("Ed25519 lane request changed the admitted job");
-}
-function ed25519LaneJobsEqual(left, right) {
-	return left.kind === right.kind && left.keyFamily === right.keyFamily && left.operationId === right.operationId && left.enrollmentId === right.enrollmentId && left.idempotencyKey === right.idempotencyKey && left.walletId === right.walletId && left.walletKeyId === right.walletKeyId && activeLaneSourcesEqual(left.source, right.source) && targetHoldersEqual(left.targetHolder, right.targetHolder) && targetSigningWorkersEqual(left.targetSigningWorker, right.targetSigningWorker) && left.targetMaterialActivationId === right.targetMaterialActivationId && left.protocolVersion === right.protocolVersion && left.expiresAtMs === right.expiresAtMs && laneTargetsEqual(left.target, right.target) && laneAuthorizationsEqual(left.authorization, right.authorization) && left.yaoRequestKind === right.yaoRequestKind && left.registeredPublicKeyB64u === right.registeredPublicKeyB64u && left.nearEd25519SigningKeyId === right.nearEd25519SigningKeyId && left.keyCreationSignerSlot === right.keyCreationSignerSlot && left.stableContextBindingB64u === right.stableContextBindingB64u && left.yaoSuiteId === right.yaoSuiteId && left.circuitDigestB64u === right.circuitDigestB64u;
-}
-function activeLaneSourcesEqual(left, right) {
-	return left.laneId === right.laneId && left.laneKind === right.laneKind && left.laneShareEpoch === right.laneShareEpoch && left.revocationEpoch === right.revocationEpoch && left.holderParticipantId === right.holderParticipantId && left.signingWorkerParticipantId === right.signingWorkerParticipantId && left.signingWorkerRecipientKeyId === right.signingWorkerRecipientKeyId && left.participantBindingDigestB64u === right.participantBindingDigestB64u && mpcMaterialActivationRefsEqual(left.materialActivation, right.materialActivation);
-}
-function targetHoldersEqual(left, right) {
-	return left.participantId === right.participantId && left.participantBindingDigestB64u === right.participantBindingDigestB64u && left.custodyBindingId === right.custodyBindingId && left.custodyBindingDigestB64u === right.custodyBindingDigestB64u && left.hpkePublicKeyB64u === right.hpkePublicKeyB64u && left.hpkePublicKeyDigestB64u === right.hpkePublicKeyDigestB64u;
-}
-function targetSigningWorkersEqual(left, right) {
-	return left.participantId === right.participantId && left.participantBindingDigestB64u === right.participantBindingDigestB64u && left.recipientKeyId === right.recipientKeyId && left.hpkePublicKeyB64u === right.hpkePublicKeyB64u && left.hpkePublicKeyDigestB64u === right.hpkePublicKeyDigestB64u;
-}
-function laneTargetsEqual(left, right) {
-	if (left.operation !== right.operation || left.laneId !== right.laneId || left.laneKind !== right.laneKind || left.laneShareEpoch !== right.laneShareEpoch || left.expectedTargetState !== right.expectedTargetState) return false;
-	if (left.operation === "create_lane") return true;
-	if (right.operation !== "refresh_lane") return false;
-	return mpcMaterialActivationRefsEqual(left.priorMaterialActivation, right.priorMaterialActivation);
-}
-function laneAuthorizationsEqual(left, right) {
-	if (left.kind !== right.kind || left.authorizedOperationId !== right.authorizedOperationId) return false;
-	if (left.kind === "linked_device_enrollment") return right.kind === "linked_device_enrollment" && left.linkedDeviceEnrollmentId === right.linkedDeviceEnrollmentId && left.linkedDevicePermissionDigestB64u === right.linkedDevicePermissionDigestB64u;
-	return right.kind === "owner_lane_refresh" && left.ownerLaneRefreshDigestB64u === right.ownerLaneRefreshDigestB64u;
-}
-function exactJsonRecord(raw, fields, label) {
-	const record = requireJsonRecord(raw, label);
-	const allowed = new Set(fields);
-	for (const key of Object.keys(record)) if (!allowed.has(key)) throw new Error(`${label}.${key} is not supported`);
-	for (const field of fields) if (!Object.hasOwn(record, field)) throw new Error(`${label}.${field} is required`);
-	return record;
-}
-function requireJsonRecord(raw, label) {
-	if (raw === null || typeof raw !== "object" || Array.isArray(raw)) throw new Error(`${label} must be an object`);
-	return Object.fromEntries(Object.entries(raw));
-}
-function requireNonEmpty(value, label) {
-	if (typeof value !== "string" || value.trim().length === 0) throw new Error(`${label} is required`);
-	return value;
-}
-//#endregion
-export { CloudflareEd25519LaneProtocolTransportV1, CloudflareLaneProtocolCommitterV1, ROUTER_AB_ED25519_YAO_LANE_EXECUTE_PATH_V1 };
-
-//# sourceMappingURL=cloudflareLaneProtocolCommitter.js.map

package/dist/esm/router/cloudflare/signingLanes/index.js

@@ -1,4 +0,0 @@
-import { CLOUDFLARE_ROUTER_ED25519_YAO_SOURCE_PRESERVING_EXECUTE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_ACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_DEACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_RESERVE_INACTIVE_SOURCE_PRESERVING_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_ACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_DEACTIVATE_RESERVATION_PATH_V1, CloudflareOrdinaryInactiveSignerMaterialDeactivationWorkerV1, CloudflareOrdinaryInactiveSignerMaterialReservationWorkerV1, UnavailableOrdinaryInactiveSignerMaterialDeactivationWorkerV1, UnavailableOrdinaryInactiveSignerMaterialReservationWorkerV1, createCloudflareLinkedDeviceEd25519SourcePreservingRouterEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialActivationEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialActivationPortV1, createCloudflareOrdinaryInactiveSignerMaterialDeactivationEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialDeactivationPortV1, createCloudflareOrdinaryInactiveSignerMaterialReservationEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialReservationServiceV1, createUnavailableOrdinaryInactiveSignerMaterialDeactivationPortV1, createUnavailableOrdinaryInactiveSignerMaterialReservationWorkerV1 } from "./cloudflareOrdinaryInactiveSignerMaterialReservation.js";
-import { CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_ACTIVATE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_EXECUTE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_RETIRE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_LANE_ACTIVATE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_LANE_RETIRE_PATH_V1, CloudflareSigningWorkerEcdsaLaneTransportV1, CloudflareSigningWorkerEcdsaRetirementTransportV1, LaneLifecycleStoreEcdsaLanePrivateBindingResolverV1, LaneLifecycleStoreEd25519LanePrivateBindingResolverV1, LaneLifecycleStoreNormalSigningLaneMaterialResolverV1, createCloudflareLaneCurveExecutionPortsV1, digestSigningWorkerLaneIdentityV1 } from "./cloudflareLaneCurveExecution.js";
-import { CloudflareEd25519LaneProtocolTransportV1, CloudflareLaneProtocolCommitterV1, ROUTER_AB_ED25519_YAO_LANE_EXECUTE_PATH_V1 } from "./cloudflareLaneProtocolCommitter.js";
-export { CLOUDFLARE_ROUTER_ED25519_YAO_SOURCE_PRESERVING_EXECUTE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_ACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_DEACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_ACTIVATE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_EXECUTE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_RETIRE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ECDSA_RESERVE_INACTIVE_SOURCE_PRESERVING_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_ACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_DEACTIVATE_RESERVATION_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_LANE_ACTIVATE_PATH_V1, CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_LANE_RETIRE_PATH_V1, CloudflareEd25519LaneProtocolTransportV1, CloudflareLaneProtocolCommitterV1, CloudflareOrdinaryInactiveSignerMaterialDeactivationWorkerV1, CloudflareOrdinaryInactiveSignerMaterialReservationWorkerV1, CloudflareSigningWorkerEcdsaLaneTransportV1, CloudflareSigningWorkerEcdsaRetirementTransportV1, LaneLifecycleStoreEcdsaLanePrivateBindingResolverV1, LaneLifecycleStoreEd25519LanePrivateBindingResolverV1, LaneLifecycleStoreNormalSigningLaneMaterialResolverV1, ROUTER_AB_ED25519_YAO_LANE_EXECUTE_PATH_V1, UnavailableOrdinaryInactiveSignerMaterialDeactivationWorkerV1, UnavailableOrdinaryInactiveSignerMaterialReservationWorkerV1, createCloudflareLaneCurveExecutionPortsV1, createCloudflareLinkedDeviceEd25519SourcePreservingRouterEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialActivationEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialActivationPortV1, createCloudflareOrdinaryInactiveSignerMaterialDeactivationEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialDeactivationPortV1, createCloudflareOrdinaryInactiveSignerMaterialReservationEndpointV1, createCloudflareOrdinaryInactiveSignerMaterialReservationServiceV1, createUnavailableOrdinaryInactiveSignerMaterialDeactivationPortV1, createUnavailableOrdinaryInactiveSignerMaterialReservationWorkerV1, digestSigningWorkerLaneIdentityV1 };

package/dist/esm/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.js

@@ -1,32 +0,0 @@
-import { base64UrlDecode } from "../../../shared-ts/src/utils/base64.js";
-import { routerAbMpcMaterialActivationRefToWire } from "../../../shared-ts/src/utils/routerAbNormalSigningIdentity.js";
-import { computeEd25519YaoLaneSessionDigestV1 } from "../../../shared-ts/src/signing-lanes/rotationDigests.js";
-//#region src/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.ts
-function createLinkedDeviceEd25519CeremonyBindingResolverV1() {
-	return { async resolveBindingV1({ job }) {
-		return await buildLinkedDeviceEd25519CeremonyBindingV1(job);
-	} };
-}
-async function buildLinkedDeviceEd25519CeremonyBindingV1(job) {
-	const laneProvisioning = job.yaoRequestKind === "lane_provisioning";
-	return {
-		lifecycle: {
-			lifecycle_id: job.operationId,
-			work_kind: laneProvisioning ? "registration_prepare" : "server_share_refresh",
-			primitive_request_kind: laneProvisioning ? "registration" : "refresh",
-			root_share_epoch: job.source.laneShareEpoch,
-			account_id: job.walletId,
-			session_id: job.operationId,
-			signer_set_id: job.source.participantBindingDigestB64u,
-			selected_server_id: job.source.materialActivation.signingWorker
-		},
-		operation: job.yaoRequestKind,
-		session_id: Array.from(base64UrlDecode(await computeEd25519YaoLaneSessionDigestV1(job))),
-		stable_key_context_binding: Array.from(base64UrlDecode(job.stableContextBindingB64u)),
-		material_activation: routerAbMpcMaterialActivationRefToWire(job.source.materialActivation)
-	};
-}
-//#endregion
-export { buildLinkedDeviceEd25519CeremonyBindingV1, createLinkedDeviceEd25519CeremonyBindingResolverV1 };
-
-//# sourceMappingURL=linkedDeviceEd25519CeremonyBinding.js.map

package/dist/esm/router/transport/fetch/routes/nearPublicKeys.js

@@ -1,39 +0,0 @@
-import { json } from "../../../framework/http.js";
-import { extractBearerCredential } from "../../../auth/routerApiKeyAuth.js";
-//#region src/router/transport/fetch/routes/nearPublicKeys.ts
-async function handleNearPublicKeys(ctx) {
-	if (ctx.method !== "GET") return null;
-	if (ctx.pathname !== "/near/public-keys") return null;
-	try {
-		const token = extractBearerCredential(ctx.request.headers);
-		if (!token) return json({
-			ok: false,
-			code: "unauthorized",
-			message: "No valid Wallet Session"
-		}, { status: 401 });
-		const nowMs = Date.now();
-		const exact = await ctx.service.authorizationSessions.readWalletSessionAuthorizationV2ByOperationCredential({
-			tenantId: ctx.service.authorizationSessions.tenantId,
-			token,
-			nowMs
-		});
-		if (!exact) return json({
-			ok: false,
-			code: "unauthorized",
-			message: "No valid Wallet Session"
-		}, { status: 401 });
-		const result = await ctx.service.nearFunding.listNearPublicKeysForUser({ userId: String(exact.authorization.session.walletId) });
-		if (!result.ok) return json(result, { status: result.code === "not_supported" ? 501 : result.code === "invalid_args" ? 400 : 500 });
-		return json(result, { status: 200 });
-	} catch (e) {
-		return json({
-			ok: false,
-			code: "internal",
-			message: e?.message || "Internal error"
-		}, { status: 500 });
-	}
-}
-//#endregion
-export { handleNearPublicKeys };
-
-//# sourceMappingURL=nearPublicKeys.js.map

package/dist/esm/shared-ts/src/signing-lanes/rotation.js

@@ -1,8 +0,0 @@
-//#region ../shared-ts/src/signing-lanes/rotation.ts
-function isProvisionedLaneProtocolSourceV1(source) {
-	return source.sourceKind === "provisioned_lane";
-}
-//#endregion
-export { isProvisionedLaneProtocolSourceV1 };
-
-//# sourceMappingURL=rotation.js.map