@seams/wallet-server 0.7.1 → 0.8.0

package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts

@@ -1,169 +0,0 @@
-import type { ThresholdRuntimePolicyScope } from '../types';
-import type { EmailOtpRegistrationAttemptStore, EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
-import type { IdentityStore } from '../IdentityStore';
-export type GoogleEmailOtpResolutionMode = 'existing_wallet' | 'register_started' | 'wallet_id_collision' | 'registration_incomplete' | 'stale_identity_mapping';
-export type GoogleEmailOtpRegistrationOfferCandidate = {
-    candidateId: string;
-    walletId: string;
-};
-export type GoogleEmailOtpRegistrationOffer = {
-    offerId: string;
-    selectedCandidateId: string;
-    candidates: readonly [
-        GoogleEmailOtpRegistrationOfferCandidate,
-        ...GoogleEmailOtpRegistrationOfferCandidate[]
-    ];
-};
-export type GoogleEmailOtpResolutionResult = {
-    ok: true;
-    mode: 'existing_wallet';
-    walletId: string;
-    providerSubject: string;
-    email: string;
-    hasEmailOtpEnrollment: true;
-} | {
-    ok: true;
-    mode: 'register_started';
-    walletId: string;
-    providerSubject: string;
-    email: string;
-    registrationAttemptId: string;
-    expiresAtMs: number;
-    offer: GoogleEmailOtpRegistrationOffer;
-} | {
-    ok: false;
-    mode: 'wallet_id_collision' | 'registration_incomplete' | 'stale_identity_mapping';
-    code: 'wallet_id_collision' | 'registration_incomplete' | 'stale_identity_mapping';
-    walletId?: string;
-    providerSubject: string;
-    email?: string;
-    message: string;
-};
-type GoogleEmailOtpRegistrationRateLimitRequest = {
-    providerSubject?: unknown;
-    email?: unknown;
-    accountMode?: unknown;
-    runtimePolicyScope?: ThresholdRuntimePolicyScope;
-    clientIp?: string;
-    providerUserId?: string;
-    restartRegistrationOffer?: unknown;
-};
-export type GoogleEmailOtpRegistrationRateLimitResult = {
-    ok: true;
-} | {
-    ok: false;
-    code: 'invalid_body' | 'rate_limited';
-    message: string;
-    retryAfterMs?: number;
-    resetAtMs?: number;
-};
-export type GoogleEmailOtpRegistrationRateLimitConsumer = (input: {
-    scope: 'googleRegistrationAttempt';
-    action: 'google_email_otp_registration_create' | 'google_email_otp_registration_offer_restart';
-    userId?: string;
-    providerSubject: string;
-    orgId: string;
-    clientIp?: string;
-}) => Promise<GoogleEmailOtpRegistrationRateLimitResult>;
-type GoogleEmailOtpSessionResolveRequest = {
-    providerSubject?: string;
-    sub?: string;
-    email?: string;
-    accountMode?: unknown;
-    ownerProofBindingDigest?: string;
-    runtimePolicyScope?: ThresholdRuntimePolicyScope;
-    restartRegistrationOffer?: unknown;
-};
-type GoogleEmailOtpHostedWalletDeriver = (input: {
-    providerSubject: string;
-    sub?: string;
-    email?: string;
-    authProvider: string;
-    walletIdDerivationNonce?: string;
-    collisionCounter?: number;
-    runtimePolicyScope?: ThresholdRuntimePolicyScope;
-}) => Promise<string>;
-type GoogleEmailOtpHostedWalletPredicate = (walletId: string) => boolean;
-export declare function consumeGoogleEmailOtpRegistrationAttemptRateLimitWithDeps(input: {
-    readonly request: GoogleEmailOtpRegistrationRateLimitRequest;
-    readonly consumeRateLimit: GoogleEmailOtpRegistrationRateLimitConsumer;
-}): Promise<GoogleEmailOtpRegistrationRateLimitResult>;
-export declare function resolveGoogleEmailOtpSessionWithDeps(input: {
-    readonly request: GoogleEmailOtpSessionResolveRequest;
-    readonly identityStore: IdentityStore;
-    readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
-    readonly walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
-    readonly deriveHostedWalletId: GoogleEmailOtpHostedWalletDeriver;
-    readonly isHostedHmacReadableWalletId: GoogleEmailOtpHostedWalletPredicate;
-}): Promise<GoogleEmailOtpResolutionResult>;
-export declare function completeGoogleEmailOtpRegistrationAttemptWithStore(input: {
-    readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
-    readonly identityStore: IdentityStore;
-    readonly registrationAttemptId?: unknown;
-    readonly walletId?: unknown;
-    readonly nowMs: number;
-}): Promise<{
-    ok: true;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-}>;
-export declare function validateGoogleEmailOtpRegistrationCandidateWalletWithStore(input: {
-    readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
-    readonly registrationAttemptId: string;
-    readonly walletId: string;
-    readonly ownerProofBindingDigest: string;
-    readonly providerSubject: string;
-    readonly nowMs: number;
-}): Promise<{
-    ok: true;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-}>;
-export declare function recordGoogleEmailOtpRegistrationAttemptPublicKeyWithStore(input: {
-    readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
-    readonly registrationAttemptId?: unknown;
-    readonly walletId?: unknown;
-    readonly finalizedPublicKey?: unknown;
-    readonly nowMs: number;
-}): Promise<{
-    ok: true;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-}>;
-export declare function failGoogleEmailOtpRegistrationAttemptWithStore(input: {
-    readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
-    readonly registrationAttemptId?: unknown;
-    readonly walletId?: unknown;
-    readonly failureCode?: unknown;
-    readonly nowMs: number;
-}): Promise<void>;
-export declare function cleanupGoogleEmailOtpDevRegistrationStateWithStores(input: {
-    readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
-    readonly identityStore: IdentityStore;
-    readonly walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
-    readonly isProductionEnvironment: boolean;
-    readonly isHostedHmacReadableWalletId: GoogleEmailOtpHostedWalletPredicate;
-    readonly providerSubject?: unknown;
-    readonly walletId?: unknown;
-    readonly orgId?: unknown;
-    readonly nowMs?: unknown;
-}): Promise<{
-    ok: true;
-    providerSubject: string;
-    expiredRegistrationAttemptsDeleted: number;
-    linkedWalletId?: string;
-    orphanedWalletMappingRemoved: boolean;
-    orphanedWalletMappingSkippedReason?: 'no_linked_wallet' | 'wallet_id_mismatch' | 'not_relayer_subaccount' | 'active_email_otp_enrollment' | 'mismatched_email_otp_enrollment';
-} | {
-    ok: false;
-    code: string;
-    message: string;
-}>;
-export {};
-//# sourceMappingURL=googleEmailOtpRegistration.d.ts.map

package/dist/types/wallet-server/src/core/authService/identity.d.ts

@@ -1,25 +0,0 @@
-import type { IdentityStore, LinkIdentityResult, UnlinkIdentityResult } from '../IdentityStore';
-export type ListIdentitiesResult = {
-    ok: true;
-    subjects: string[];
-} | {
-    ok: false;
-    code: 'invalid_args' | 'internal';
-    message: string;
-};
-export declare function listIdentitiesWithStore(input: {
-    readonly store: IdentityStore;
-    readonly userId: string;
-}): Promise<ListIdentitiesResult>;
-export declare function linkIdentityWithStore(input: {
-    readonly store: IdentityStore;
-    readonly userId: string;
-    readonly subject: string;
-    readonly allowMoveIfSoleIdentity: boolean;
-}): Promise<LinkIdentityResult>;
-export declare function unlinkIdentityWithStore(input: {
-    readonly store: IdentityStore;
-    readonly userId: string;
-    readonly subject: string;
-}): Promise<UnlinkIdentityResult>;
-//# sourceMappingURL=identity.d.ts.map

package/dist/types/wallet-server/src/core/authService/identityOperations.d.ts

@@ -1,19 +0,0 @@
-import type { IdentityStore, LinkIdentityResult, UnlinkIdentityResult } from '../IdentityStore';
-import { type ListIdentitiesResult } from './identity';
-export declare class IdentityOperations {
-    private readonly store;
-    constructor(store: IdentityStore);
-    listIdentities(input: {
-        userId: string;
-    }): Promise<ListIdentitiesResult>;
-    linkIdentity(input: {
-        userId: string;
-        subject: string;
-        allowMoveIfSoleIdentity?: boolean;
-    }): Promise<LinkIdentityResult>;
-    unlinkIdentity(input: {
-        userId: string;
-        subject: string;
-    }): Promise<UnlinkIdentityResult>;
-}
-//# sourceMappingURL=identityOperations.d.ts.map

package/dist/types/wallet-server/src/core/authService/nearAccountOperations.d.ts

@@ -1,55 +0,0 @@
-import type { FinalExecutionOutcome } from '@near-js/types';
-import { type NearTransactionActionArgsWasm } from '../../../../shared-ts/src/near/actions';
-import type { NormalizedLogger } from '../logger';
-import type { MinimalNearClient, SignedTransaction } from '../rpcClients/near/NearClient';
-import { type AccountCreationRequest, type AccountCreationResult, type AuthServiceConfig, type FundImplicitNearAccountRequest, type FundImplicitNearAccountResult } from '../types';
-import { type DelegateActionPolicy, type ExecuteSignedDelegateResult, type RelayedSignedDelegate } from '../../delegateAction';
-type NearAccountOperationsInput = {
-    readonly config: AuthServiceConfig;
-    readonly nearClient: MinimalNearClient;
-    readonly logger: NormalizedLogger;
-    readonly ensureSignerAndRelayerAccount: () => Promise<void>;
-    readonly ensureSignerWasm: () => Promise<void>;
-    readonly getRelayerPublicKey: () => string;
-};
-export declare class NearAccountOperations {
-    private readonly input;
-    private transactionQueue;
-    private queueStats;
-    constructor(input: NearAccountOperationsInput);
-    viewAccessKeyList(accountId: string): Promise<import("@near-js/types").AccessKeyList>;
-    dispatchNearSignedTransactionBorsh(input: {
-        signedTransactionBorshB64u: string;
-    }): Promise<{
-        rpcResult: FinalExecutionOutcome;
-    }>;
-    txStatus(txHash: string, senderAccountId: string): Promise<FinalExecutionOutcome>;
-    createAccount(request: AccountCreationRequest): Promise<AccountCreationResult>;
-    fundImplicitNearAccount(request: FundImplicitNearAccountRequest): Promise<FundImplicitNearAccountResult>;
-    checkAccountExists(accountId: string): Promise<boolean>;
-    executeSignedDelegate(input: {
-        hash: string;
-        signedDelegate: RelayedSignedDelegate;
-        policy?: DelegateActionPolicy;
-    }): Promise<ExecuteSignedDelegateResult>;
-    fetchTxContext(accountId: string, publicKey: string): Promise<{
-        nextNonce: string;
-        blockHash: string;
-    }>;
-    signGasRelayerNearTransaction(input: {
-        receiverId: string;
-        nonce: string;
-        blockHash: string;
-        actions: NearTransactionActionArgsWasm[];
-    }): Promise<SignedTransaction>;
-    queueTransaction<T>(operation: () => Promise<T>, description: string): Promise<T>;
-    private createAccountQueueTask;
-    private createAccountFromQueue;
-    private createFundImplicitNearAccountQueueTask;
-    private fundImplicitNearAccountFromQueue;
-    private verifyAccountAccessKeysPresent;
-    private scheduleAccountAccessKeyVisibilityAudit;
-    private runAccountAccessKeyVisibilityAudit;
-}
-export {};
-//# sourceMappingURL=nearAccountOperations.d.ts.map

package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts

@@ -1,44 +0,0 @@
-import type { NormalizedLogger } from '../logger';
-import type { NearPublicKeyAuthBinding, NearPublicKeyKind, NearPublicKeyStore } from '../NearPublicKeyStore';
-export type RecordNearPublicKeyMetadataResult = {
-    ok: true;
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-type NearPublicKeyListEntry = {
-    publicKey: string;
-    kind: NearPublicKeyKind;
-    signerSlot?: number;
-    createdAtMs: number;
-    updatedAtMs: number;
-    authBinding?: NearPublicKeyAuthBinding;
-};
-export type ListNearPublicKeysResult = {
-    ok: true;
-    keys: NearPublicKeyListEntry[];
-} | {
-    ok: false;
-    code: string;
-    message: string;
-};
-export declare function recordNearPublicKeyMetadataWithStore(input: {
-    store: NearPublicKeyStore;
-    logger: NormalizedLogger;
-    userId?: unknown;
-    publicKey?: unknown;
-    kind: NearPublicKeyKind;
-    signerSlot?: unknown;
-    credentialIdB64u?: unknown;
-    rpId?: unknown;
-    addedTxHash?: unknown;
-    removedAtMs?: unknown;
-    source?: string;
-}): Promise<RecordNearPublicKeyMetadataResult>;
-export declare function listNearPublicKeysForUserWithStore(input: {
-    store: NearPublicKeyStore;
-    userId: string;
-}): Promise<ListNearPublicKeysResult>;
-export {};
-//# sourceMappingURL=nearPublicKeyMetadata.d.ts.map

package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts

@@ -1,66 +0,0 @@
-import type { GoogleOidcConfig } from '../types';
-import type { IdentityStore } from '../IdentityStore';
-type JwksCacheValue = {
-    keysByKid: Map<string, JsonWebKey>;
-    expiresAtMs: number;
-};
-type GoogleJwksState = {
-    cache: JwksCacheValue | null;
-    fetchPromise: Promise<JwksCacheValue> | null;
-};
-type GoogleLoginVerificationResult = {
-    ok: true;
-    verified: true;
-    providerSubject: string;
-    sub: string;
-    email?: string;
-    name?: string;
-    given_name?: string;
-    family_name?: string;
-    emailVerified?: boolean;
-    hostedDomain?: string;
-} | {
-    ok: false;
-    verified: false;
-    code: string;
-    message: string;
-};
-export type GoogleLoginFacadeResult = {
-    ok: true;
-    verified: true;
-    userId: string;
-    providerSubject: string;
-    sub: string;
-    email?: string;
-    name?: string;
-    given_name?: string;
-    family_name?: string;
-    emailVerified?: boolean;
-    hostedDomain?: string;
-} | {
-    ok: false;
-    verified: false;
-    code: string;
-    message: string;
-};
-export declare function createGoogleJwksState(): GoogleJwksState;
-export declare function getGoogleJwks(state: GoogleJwksState): Promise<JwksCacheValue>;
-export declare function verifyGoogleIdToken(input: {
-    request: {
-        idToken?: unknown;
-        id_token?: unknown;
-    };
-    config?: GoogleOidcConfig;
-    jwksState: GoogleJwksState;
-}): Promise<GoogleLoginVerificationResult>;
-export declare function verifyGoogleLoginWithIdentityStore(input: {
-    request: {
-        idToken?: unknown;
-        id_token?: unknown;
-    };
-    config?: GoogleOidcConfig;
-    jwksState: GoogleJwksState;
-    identityStore: IdentityStore;
-}): Promise<GoogleLoginFacadeResult>;
-export {};
-//# sourceMappingURL=oidcVerification.d.ts.map

package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts

@@ -1,11 +0,0 @@
-import { type ActionArgsWasm } from '../../../../shared-ts/src/near/actions';
-export declare function buildFullAccessAddKeyAction(publicKey: string): ActionArgsWasm;
-export declare function normalizeBootstrapPublicKeys(args: {
-    publicKey: string;
-    recoveryPublicKey?: string;
-}): {
-    publicKey: string;
-    recoveryPublicKey?: string;
-    expectedPublicKeys: string[];
-};
-//# sourceMappingURL=registrationThresholdHelpers.d.ts.map

package/dist/types/wallet-server/src/core/authService/runtime.d.ts

@@ -1,20 +0,0 @@
-import type { NormalizedLogger } from '../logger';
-import type { SignerWasmModuleSupplier } from '../types';
-import { type SignerWasmRuntimeState } from './wasm';
-export type AuthServiceRuntimeState = SignerWasmRuntimeState & {
-    readonly isInitialized: boolean;
-    readonly relayerPublicKey: string;
-};
-export declare function createInitialAuthServiceRuntimeState(): AuthServiceRuntimeState;
-export declare function ensureAuthServiceSignerWasmReady(input: {
-    readonly state: AuthServiceRuntimeState;
-    readonly signerWasmOverride?: SignerWasmModuleSupplier;
-    readonly logger: NormalizedLogger;
-}): Promise<AuthServiceRuntimeState>;
-export declare function ensureAuthServiceRuntimeReady(input: {
-    readonly state: AuthServiceRuntimeState;
-    readonly relayerPrivateKey: string;
-    readonly signerWasmOverride?: SignerWasmModuleSupplier;
-    readonly logger: NormalizedLogger;
-}): Promise<AuthServiceRuntimeState>;
-//# sourceMappingURL=runtime.d.ts.map

package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts

@@ -1,53 +0,0 @@
-import type { AuthServiceConfig } from '../types';
-import type { NormalizedLogger } from '../logger';
-import { type EmailOtpAuthStateStore, type EmailOtpChallengeStore, type EmailOtpGrantStore, type EmailOtpRegistrationAttemptStore, type EmailOtpUnlockChallengeStore, type EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
-import { type IdentityStore } from '../IdentityStore';
-import { type NearPublicKeyStore } from '../NearPublicKeyStore';
-import { type WalletAuthMethodStore } from '../WalletAuthMethodStore';
-import { type WalletStore } from '../WalletStore';
-import { type WebAuthnAuthenticatorStore } from '../WebAuthnAuthenticatorStore';
-import { type WebAuthnCredentialBindingStore } from '../WebAuthnCredentialBindingStore';
-import { type WebAuthnLoginChallengeStore } from '../WebAuthnLoginChallengeStore';
-import { type WebAuthnSyncChallengeStore } from '../WebAuthnSyncChallengeStore';
-import type { SigningSessionSealRateLimiter } from '../../threshold/session/signingSessionSeal';
-type AuthServiceStoreRegistryInput = {
-    readonly config: AuthServiceConfig;
-    readonly logger: NormalizedLogger;
-    readonly isNode: () => boolean;
-};
-export declare class AuthServiceStoreRegistry {
-    private readonly input;
-    private webAuthnAuthenticatorStore;
-    private webAuthnLoginChallengeStore;
-    private webAuthnCredentialBindingStore;
-    private webAuthnSyncChallengeStore;
-    private emailOtpChallengeStore;
-    private emailOtpGrantStore;
-    private emailOtpWalletEnrollmentStore;
-    private emailOtpAuthStateStore;
-    private emailOtpUnlockChallengeStore;
-    private emailOtpRegistrationAttemptStore;
-    private emailOtpRateLimiter;
-    private nearPublicKeyStore;
-    private identityStore;
-    private walletStore;
-    private walletAuthMethodStore;
-    constructor(input: AuthServiceStoreRegistryInput);
-    getWebAuthnAuthenticatorStore(): WebAuthnAuthenticatorStore;
-    getWebAuthnLoginChallengeStore(): WebAuthnLoginChallengeStore;
-    getWebAuthnCredentialBindingStore(): WebAuthnCredentialBindingStore;
-    getWebAuthnSyncChallengeStore(): WebAuthnSyncChallengeStore;
-    getWalletStore(): WalletStore;
-    getWalletAuthMethodStore(): WalletAuthMethodStore;
-    getEmailOtpChallengeStore(): EmailOtpChallengeStore;
-    getEmailOtpGrantStore(): EmailOtpGrantStore;
-    getEmailOtpWalletEnrollmentStore(): EmailOtpWalletEnrollmentStore;
-    getEmailOtpAuthStateStore(): EmailOtpAuthStateStore;
-    getEmailOtpUnlockChallengeStore(): EmailOtpUnlockChallengeStore;
-    getEmailOtpRegistrationAttemptStore(): EmailOtpRegistrationAttemptStore;
-    getEmailOtpRateLimiter(): SigningSessionSealRateLimiter;
-    getIdentityStore(): IdentityStore;
-    getNearPublicKeyStore(): NearPublicKeyStore;
-}
-export {};
-//# sourceMappingURL=storeRegistry.d.ts.map

package/dist/types/wallet-server/src/core/authService/thresholdStoreSummary.d.ts

@@ -1,3 +0,0 @@
-import type { AuthServiceConfig } from '../types';
-export declare function summarizeThresholdStoreConfig(cfg: AuthServiceConfig['thresholdStore']): string;
-//# sourceMappingURL=thresholdStoreSummary.d.ts.map

package/dist/types/wallet-server/src/core/authService/webauthnAuthority.d.ts

@@ -1,5 +0,0 @@
-import { type WebAuthnRpId } from '../../../../shared-ts/src/utils/domainIds';
-import type { ThresholdEd25519AuthorityScope } from '../types';
-export declare function requireWebAuthnRpId(value: unknown, fieldName: string): WebAuthnRpId;
-export declare function passkeyThresholdEd25519AuthorityScope(rpId: WebAuthnRpId): ThresholdEd25519AuthorityScope;
-//# sourceMappingURL=webauthnAuthority.d.ts.map

package/dist/types/wallet-server/src/core/defaultConfigsServer.d.ts

@@ -1,5 +0,0 @@
-export declare const THRESHOLD_NODE_ROLE_COORDINATOR: "coordinator";
-export declare const THRESHOLD_NODE_ROLE_DEFAULT: "coordinator";
-export declare const THRESHOLD_DO_OBJECT_NAME_DEFAULT: "threshold-store";
-export declare const THRESHOLD_PREFIX_DEFAULT: "w3a";
-//# sourceMappingURL=defaultConfigsServer.d.ts.map

package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts

@@ -1,16 +0,0 @@
-export declare function isHostedHmacReadableRelayerWalletId(input: {
-    readonly walletId: unknown;
-    readonly relayerAccount: unknown;
-}): boolean;
-export declare function deriveHostedNearAccountId(input: {
-    accountIdDerivationSecret: string;
-    relayerAccount: string;
-    projectId: string;
-    envId: string;
-    authProvider: string;
-    providerSubject?: string;
-    verifiedEmail?: string;
-    walletIdDerivationNonce?: string;
-    collisionCounter?: number;
-}): Promise<string>;
-//# sourceMappingURL=hostedAccountIds.d.ts.map

package/dist/types/wallet-server/src/core/routerAbSigning/createRouterAbSigningRuntimes.d.ts

@@ -1,16 +0,0 @@
-import type { AuthService } from '../AuthService';
-import { type Logger } from '../logger';
-import type { ThresholdStoreConfigInput } from '../types';
-import { RouterAbEcdsaPresignRuntime } from './RouterAbEcdsaPresignRuntime';
-import { RouterAbNormalSigningRuntime } from './RouterAbNormalSigningRuntime';
-export type RouterAbSigningRuntimeBundle = {
-    readonly normalSigning: RouterAbNormalSigningRuntime;
-    readonly ecdsaPresign: RouterAbEcdsaPresignRuntime;
-};
-export declare function createRouterAbSigningRuntimes(input: {
-    readonly authService: Pick<AuthService, 'getRelayerAccount'>;
-    readonly thresholdStore?: ThresholdStoreConfigInput | null;
-    readonly logger?: Logger | null;
-    readonly isNode?: boolean;
-}): RouterAbSigningRuntimeBundle;
-//# sourceMappingURL=createRouterAbSigningRuntimes.d.ts.map

package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts

@@ -1,36 +0,0 @@
-import type { LaneEnrollmentRevocationResultV1, RevokeLaneEnrollmentV1 } from '../../../../shared-ts/src/signing-lanes';
-import type { LaneLifecycleRevocationRequestV1 } from './LaneLifecycleApplicationService';
-import { LaneEnrollmentRevocation } from './LaneEnrollmentRevocation';
-import type { LaneLifecycleStore } from './LaneLifecycleStore';
-type LaneAggregateRevocationRequestV1 = {
-    readonly command: RevokeLaneEnrollmentV1;
-    readonly orderedChildren: readonly [
-        LaneLifecycleRevocationRequestV1,
-        ...LaneLifecycleRevocationRequestV1[]
-    ];
-};
-type LaneAggregateRevocationApplicationServiceOptionsV1 = {
-    readonly lifecycleStore: Pick<LaneLifecycleStore, 'getEnrollment' | 'fenceEnrollmentRevocation' | 'listEnrollmentProductEpochs'>;
-    readonly laneLifecycle: LaneAggregateChildRevocationPortV1;
-    readonly enrollmentRevocation: Pick<LaneEnrollmentRevocation, 'completeLaneEnrollmentRevocationV1'>;
-};
-interface LaneAggregateChildRevocationPortV1 {
-    revokeSigningLaneV1(input: LaneLifecycleRevocationRequestV1): Promise<{
-        readonly outcome: 'applied' | 'replayed' | 'conflict';
-    }>;
-}
-export declare class LaneAggregateRevocationApplicationService {
-    private readonly options;
-    constructor(options: LaneAggregateRevocationApplicationServiceOptionsV1);
-    /**
-     * Establish the enrollment lifecycle fence before management revokes any
-     * child authorization. The full aggregate path calls the same durable fence
-     * again, so retries remain idempotent.
-     */
-    fenceLaneEnrollmentV1(input: LaneAggregateRevocationRequestV1['command']): Promise<{
-        readonly kind: 'applied' | 'replayed' | 'conflict';
-    }>;
-    revokeLaneEnrollmentV1(input: LaneAggregateRevocationRequestV1): Promise<LaneEnrollmentRevocationResultV1>;
-}
-export {};
-//# sourceMappingURL=LaneAggregateRevocationApplicationService.d.ts.map

package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts

@@ -1,62 +0,0 @@
-import type { LaneEnrollmentId, LaneOperationId, LaneShareEpoch, SigningLaneId, WalletKeyId } from '../../../../shared-ts/src/signing-lanes';
-import type { WalletId } from '../../../../shared-ts/src/utils/domainIds';
-type LaneEffectKind = 'activate_server_material' | 'retire_server_material' | 'invalidate_holder_material';
-type LaneEffectRecordBaseV1 = {
-    readonly kind: 'lane_effect_record_v1';
-    readonly effectId: string;
-    readonly enrollmentId: LaneEnrollmentId;
-    readonly operationId: LaneOperationId;
-    readonly walletId: WalletId;
-    readonly walletKeyId: WalletKeyId;
-    readonly laneId: SigningLaneId;
-    readonly laneShareEpoch: LaneShareEpoch;
-    readonly effectKind: LaneEffectKind;
-    readonly requestDigestB64u: string;
-    readonly recordedAtMs: number;
-};
-/** Effect metadata only. Ciphertexts and private material never cross this port. */
-export type LaneEffectRecordV1 = (LaneEffectRecordBaseV1 & {
-    readonly status: 'recorded';
-    readonly responseDigestB64u?: never;
-    readonly confirmedAtMs?: never;
-}) | (LaneEffectRecordBaseV1 & {
-    readonly status: 'confirmed';
-    readonly responseDigestB64u: string;
-    readonly confirmedAtMs: number;
-});
-export type LaneEffectMutation = {
-    readonly record: LaneEffectRecordV1;
-    readonly commandDigestB64u: string;
-};
-export type LaneEffectMutationResult = {
-    readonly outcome: 'applied' | 'replayed';
-    readonly version: number;
-    readonly commandDigestB64u: string;
-    readonly record: LaneEffectRecordV1;
-} | {
-    readonly outcome: 'conflict';
-    readonly expectedVersion: number | null;
-    readonly actualVersion: number;
-    readonly requestedCommandDigestB64u: string;
-    readonly storedCommandDigestB64u: string;
-};
-type LaneEffectLookup = {
-    readonly effectId: string;
-};
-export interface LaneEffectJournalStore {
-    getEffect(lookup: LaneEffectLookup): Promise<{
-        readonly version: number;
-        readonly commandDigestB64u: string;
-        readonly record: LaneEffectRecordV1;
-    } | null>;
-    recordEffect(input: LaneEffectMutation): Promise<LaneEffectMutationResult>;
-    confirmEffect(input: {
-        readonly effectId: string;
-        readonly expectedVersion: number;
-        readonly commandDigestB64u: string;
-        readonly responseDigestB64u: string;
-        readonly confirmedAtMs: number;
-    }): Promise<LaneEffectMutationResult>;
-}
-export {};
-//# sourceMappingURL=LaneEffectJournalStore.d.ts.map

package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentActivation.d.ts

@@ -1,13 +0,0 @@
-import type { ActivateLaneServerMaterialV1, CommitLaneEnrollmentActivationV1, LaneEnrollmentActivationResultV1, LaneEnrollmentGatewayV1, LaneEnrollmentPreparationResultV1, LaneProtocolCasResultV1, PrepareLaneEnrollmentV1, RecordLaneHolderDeliveryV1, RecordLaneProtocolCommitV1, ResumeLaneProtocolOperationV1 } from '../../../../shared-ts/src/signing-lanes';
-import type { LaneLifecycleStore } from './LaneLifecycleStore';
-export declare class LaneEnrollmentActivation implements Pick<LaneEnrollmentGatewayV1, 'prepareLaneEnrollmentV1' | 'resumeLaneProtocolOperationV1' | 'recordLaneProtocolCommitV1' | 'recordLaneHolderDeliveryV1' | 'activateLaneServerMaterialV1' | 'commitLaneEnrollmentActivationV1'> {
-    private readonly lifecycleStore;
-    constructor(lifecycleStore: LaneLifecycleStore);
-    prepareLaneEnrollmentV1(input: PrepareLaneEnrollmentV1): Promise<LaneEnrollmentPreparationResultV1>;
-    recordLaneProtocolCommitV1(input: RecordLaneProtocolCommitV1): Promise<LaneProtocolCasResultV1>;
-    resumeLaneProtocolOperationV1(input: ResumeLaneProtocolOperationV1): Promise<LaneProtocolCasResultV1>;
-    recordLaneHolderDeliveryV1(input: RecordLaneHolderDeliveryV1): Promise<LaneProtocolCasResultV1>;
-    activateLaneServerMaterialV1(input: ActivateLaneServerMaterialV1): Promise<LaneProtocolCasResultV1>;
-    commitLaneEnrollmentActivationV1(input: CommitLaneEnrollmentActivationV1): Promise<LaneEnrollmentActivationResultV1>;
-}
-//# sourceMappingURL=LaneEnrollmentActivation.d.ts.map

package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentRevocation.d.ts

@@ -1,24 +0,0 @@
-import type { CommitLaneEnrollmentRevocationV1, CompleteSigningLaneRevocationV1, LaneSigningLaneRevocationResultV1, LaneSigningLaneRevocationFenceResultV1, LaneEnrollmentRevocationResultV1, RevokeLaneEnrollmentV1, RevokeSigningLaneV1 } from '../../../../shared-ts/src/signing-lanes';
-import type { LaneLifecycleStore } from './LaneLifecycleStore';
-/**
- * Revocation is intentionally separate from activation. The fence write must
- * land before any caller asks a participant to retire material; this class
- * only owns the Gateway-side lifecycle boundary.
- */
-export declare class LaneEnrollmentRevocation {
-    private readonly lifecycleStore;
-    constructor(lifecycleStore: LaneLifecycleStore);
-    fenceEnrollment(input: RevokeLaneEnrollmentV1): Promise<void>;
-    commitEnrollment(input: {
-        readonly command: CommitLaneEnrollmentRevocationV1;
-        readonly expectedVersion: number;
-        readonly commandDigestB64u: string;
-    }): Promise<LaneEnrollmentRevocationResultV1>;
-    completeLaneEnrollmentRevocationV1(input: {
-        readonly command: RevokeLaneEnrollmentV1;
-        readonly expectedVersion: number;
-    }): Promise<LaneEnrollmentRevocationResultV1>;
-    fenceSigningLaneRevocationV1(input: RevokeSigningLaneV1): Promise<LaneSigningLaneRevocationFenceResultV1>;
-    completeSigningLaneRevocationV1(input: CompleteSigningLaneRevocationV1): Promise<LaneSigningLaneRevocationResultV1>;
-}
-//# sourceMappingURL=LaneEnrollmentRevocation.d.ts.map