@seams/wallet-server 0.7.1 → 0.8.0

package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleApplicationService.d.ts

@@ -1,141 +0,0 @@
-import type { EcdsaAdditiveLaneHolderRoundV1, EcdsaAdditiveLaneJobV1, Ed25519YaoLaneJobV1, LaneEnrollmentGatewayV1, LaneHolderDeliveryReceiptV1, LaneProtocolCasResultV1, LaneProtocolCommitReceiptV1, LaneServerActivationReceiptV1, LaneServerRetirementReceiptV1, LaneRefreshPredecessorRetirementV1, LaneHolderPackageWireV1, LaneSigningLaneRevocationResultV1, RevokeSigningLaneV1 } from '../../../../shared-ts/src/signing-lanes';
-import type { DigestB64u } from '../../../../shared-ts/src/utils/canonicalPrimitives';
-export type LaneLifecycleProtocolCommitRequestV1 = {
-    readonly curve: 'ed25519_yao';
-    readonly job: Ed25519YaoLaneJobV1;
-    readonly requestJson: string;
-    readonly expectedVersion: number;
-} | {
-    readonly curve: 'ecdsa_additive';
-    readonly job: EcdsaAdditiveLaneJobV1;
-    readonly holderRound: EcdsaAdditiveLaneHolderRoundV1;
-    readonly holderPackage: Extract<LaneHolderPackageWireV1, {
-        kind: 'ecdsa_additive_lane_holder_package_v1';
-    }>;
-    readonly encryptedDeltaPackageJson: string;
-    readonly expectedVersion: number;
-};
-export type LaneLifecycleServerActivationRequestV1 = {
-    readonly curve: 'ed25519_yao';
-    readonly job: Ed25519YaoLaneJobV1;
-    readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
-    readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
-    readonly expectedVersion: number;
-} | {
-    readonly curve: 'ecdsa_additive';
-    readonly job: EcdsaAdditiveLaneJobV1;
-    readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
-    readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
-    readonly expectedVersion: number;
-};
-export type LaneLifecycleRevocationRequestV1 = {
-    readonly curve: 'ed25519_yao' | 'ecdsa_additive';
-    readonly command: RevokeSigningLaneV1;
-};
-export type LaneLifecycleRefreshPredecessorRetirementRequestV1 = {
-    readonly curve: 'ed25519_yao';
-    readonly job: Extract<Ed25519YaoLaneJobV1, {
-        target: {
-            operation: 'refresh_lane';
-        };
-    }>;
-    readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
-    readonly requestedAtMs: number;
-} | {
-    readonly curve: 'ecdsa_additive';
-    readonly job: Extract<EcdsaAdditiveLaneJobV1, {
-        target: {
-            operation: 'refresh_lane';
-        };
-    }>;
-    readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
-    readonly requestedAtMs: number;
-};
-export type LaneLifecycleAuthorizationRequestV1 = {
-    readonly kind: 'record_lane_protocol_commit_v1';
-    readonly curve: 'ed25519_yao';
-    readonly job: Ed25519YaoLaneJobV1;
-    readonly expectedVersion: number;
-} | {
-    readonly kind: 'record_lane_protocol_commit_v1';
-    readonly curve: 'ecdsa_additive';
-    readonly job: EcdsaAdditiveLaneJobV1;
-    readonly expectedVersion: number;
-} | {
-    readonly kind: 'activate_lane_server_material_v1';
-    readonly curve: 'ed25519_yao';
-    readonly job: Ed25519YaoLaneJobV1;
-    readonly expectedVersion: number;
-} | {
-    readonly kind: 'activate_lane_server_material_v1';
-    readonly curve: 'ecdsa_additive';
-    readonly job: EcdsaAdditiveLaneJobV1;
-    readonly expectedVersion: number;
-} | {
-    readonly kind: 'revoke_signing_lane_v1';
-    readonly curve: 'ed25519_yao';
-    readonly command: RevokeSigningLaneV1;
-} | {
-    readonly kind: 'revoke_signing_lane_v1';
-    readonly curve: 'ecdsa_additive';
-    readonly command: RevokeSigningLaneV1;
-};
-export type LaneLifecycleApplicationServiceOptionsV1 = {
-    readonly gateway: LaneEnrollmentGatewayV1;
-    readonly authorization: LaneLifecycleAuthorizationPortV1;
-    readonly execution: LaneLifecycleCurveExecutionPortsV1;
-};
-export interface LaneLifecycleAuthorizationPortV1 {
-    authorizeLaneLifecycleV1(input: LaneLifecycleAuthorizationRequestV1): Promise<void>;
-}
-export type LaneLifecycleRetirementExecutionV1 = {
-    readonly kind: 'lane_lifecycle_retirement_execution_v1';
-    readonly command: RevokeSigningLaneV1;
-    readonly retirementEffectBindingDigestB64u: DigestB64u;
-    readonly retirementReceipt: LaneServerRetirementReceiptV1;
-};
-export type LaneLifecycleEd25519ExecutionPortV1 = {
-    executeProtocolCommitV1(input: {
-        readonly job: Ed25519YaoLaneJobV1;
-        readonly requestJson: string;
-    }): Promise<LaneProtocolCommitReceiptV1>;
-    executeServerActivationV1(input: {
-        readonly job: Ed25519YaoLaneJobV1;
-        readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
-        readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
-    }): Promise<LaneServerActivationReceiptV1>;
-    executeServerRetirementV1(input: {
-        readonly command: RevokeSigningLaneV1;
-    }): Promise<LaneLifecycleRetirementExecutionV1>;
-};
-export type LaneLifecycleEcdsaExecutionPortV1 = {
-    executeProtocolCommitV1(input: {
-        readonly job: EcdsaAdditiveLaneJobV1;
-        readonly holderRound: EcdsaAdditiveLaneHolderRoundV1;
-        readonly holderPackage: Extract<LaneHolderPackageWireV1, {
-            kind: 'ecdsa_additive_lane_holder_package_v1';
-        }>;
-        readonly encryptedDeltaPackageJson: string;
-    }): Promise<LaneProtocolCommitReceiptV1>;
-    executeServerActivationV1(input: {
-        readonly job: EcdsaAdditiveLaneJobV1;
-        readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
-        readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
-    }): Promise<LaneServerActivationReceiptV1>;
-    executeServerRetirementV1(input: {
-        readonly command: RevokeSigningLaneV1;
-    }): Promise<LaneLifecycleRetirementExecutionV1>;
-};
-export type LaneLifecycleCurveExecutionPortsV1 = {
-    readonly ed25519: LaneLifecycleEd25519ExecutionPortV1;
-    readonly ecdsa: LaneLifecycleEcdsaExecutionPortV1;
-};
-export declare class LaneLifecycleApplicationService {
-    private readonly input;
-    constructor(input: LaneLifecycleApplicationServiceOptionsV1);
-    recordLaneProtocolCommitV1(request: LaneLifecycleProtocolCommitRequestV1): Promise<LaneProtocolCasResultV1>;
-    activateLaneServerMaterialV1(request: LaneLifecycleServerActivationRequestV1): Promise<LaneProtocolCasResultV1>;
-    revokeSigningLaneV1(request: LaneLifecycleRevocationRequestV1): Promise<LaneSigningLaneRevocationResultV1>;
-    retireLaneRefreshPredecessorV1(request: LaneLifecycleRefreshPredecessorRetirementRequestV1): Promise<LaneRefreshPredecessorRetirementV1>;
-}
-//# sourceMappingURL=LaneLifecycleApplicationService.d.ts.map

package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts

@@ -1,228 +0,0 @@
-import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, CommitLaneEnrollmentActivationV1, CompleteSigningLaneRevocationV1, LaneEnrollmentLifecycleV1, LaneEnrollmentManifestV1, LaneProductEpochRecordV1, LaneProtocolLifecycle, LaneProtocolRecordV1, LaneProtocolCasResultV1, RevokeLaneEnrollmentV1, LaneProtocolCommitReceiptV1, LaneHolderDeliveryReceiptV1, LaneServerActivationReceiptV1, LaneServerRetirementReceiptV1, RevokeSigningLaneV1 } from '../../../../shared-ts/src/signing-lanes';
-import type { LaneEnrollmentId, LaneOperationId, LaneShareEpoch, SigningLaneId, WalletKeyId } from '../../../../shared-ts/src/signing-lanes';
-import type { MpcMaterialActivationRef, WalletId } from '../../../../shared-ts/src/utils/domainIds';
-/** A version is monotonic inside one immutable protocol or enrollment row. */
-type LaneVersionedRecord<T> = {
-    readonly version: number;
-    readonly commandDigestB64u: string;
-    readonly value: T;
-};
-export type LaneEnrollmentAdmissionRecord = LaneVersionedRecord<{
-    readonly manifest: LaneEnrollmentManifestV1;
-    readonly lifecycle: LaneEnrollmentLifecycleV1;
-}>;
-export type LaneProtocolAdmissionRecord = LaneVersionedRecord<LaneProtocolRecordV1>;
-export type LaneAdmissionMutationResult<T> = {
-    readonly outcome: 'applied';
-    readonly version: number;
-    readonly commandDigestB64u: string;
-    readonly value: T;
-} | {
-    readonly outcome: 'replayed';
-    readonly version: number;
-    readonly commandDigestB64u: string;
-    readonly value: T;
-} | {
-    readonly outcome: 'conflict';
-    readonly expectedVersion: number | null;
-    readonly actualVersion: number;
-    readonly requestedCommandDigestB64u: string;
-    readonly storedCommandDigestB64u: string;
-};
-export type LaneEnrollmentAdmissionInput = {
-    readonly manifest: LaneEnrollmentManifestV1;
-    readonly children: readonly LaneProtocolRecordV1[];
-    readonly commandDigestB64u: string;
-    readonly lifecycle: Extract<LaneEnrollmentLifecycleV1, {
-        state: 'preparing';
-    }>;
-};
-export type LaneProtocolAdmissionInput = {
-    readonly record: LaneProtocolRecordV1;
-    readonly commandDigestB64u: string;
-};
-export type LaneProtocolLifecycleCasInput = {
-    readonly operationId: LaneOperationId;
-    readonly expectedVersion: number;
-    readonly commandDigestB64u: string;
-    readonly lifecycle: LaneProtocolLifecycle;
-};
-export type LaneEnrollmentLifecycleCasInput = {
-    readonly enrollmentId: LaneEnrollmentId;
-    readonly expectedVersion: number;
-    readonly commandDigestB64u: string;
-    readonly lifecycle: LaneEnrollmentLifecycleV1;
-};
-export type LaneEnrollmentVisibilityCommitResult = {
-    readonly outcome: 'applied' | 'replayed';
-    readonly version: number;
-    readonly commandDigestB64u: string;
-    readonly receipt: AggregateLaneActivationReceiptV1;
-    readonly lifecycle: Extract<LaneEnrollmentLifecycleV1, {
-        state: 'active';
-    }>;
-    readonly productEpochs: readonly [LaneProductEpochRecordV1, ...LaneProductEpochRecordV1[]];
-} | {
-    readonly outcome: 'conflict';
-    readonly enrollmentId: LaneEnrollmentId;
-    readonly expectedVersion: number;
-    readonly actualVersion: number;
-    readonly requestedCommandDigestB64u: string;
-    readonly storedCommandDigestB64u: string;
-};
-export type LaneEnrollmentRevocationCommitResult = {
-    readonly outcome: 'applied' | 'replayed';
-    readonly version: number;
-    readonly commandDigestB64u: string;
-    readonly receipt: AggregateLaneRevocationReceiptV1;
-    readonly lifecycle: Extract<LaneEnrollmentLifecycleV1, {
-        state: 'revoked';
-    }>;
-    readonly productEpochs: readonly [LaneProductEpochRecordV1, ...LaneProductEpochRecordV1[]];
-} | {
-    readonly outcome: 'conflict';
-    readonly enrollmentId: LaneEnrollmentId;
-    readonly expectedVersion: number;
-    readonly actualVersion: number;
-    readonly requestedCommandDigestB64u: string;
-    readonly storedCommandDigestB64u: string;
-};
-export type LaneProductEpochLookup = {
-    readonly walletId: WalletId;
-    readonly walletKeyId: WalletKeyId;
-    readonly laneId: SigningLaneId;
-    readonly laneShareEpoch: LaneShareEpoch;
-};
-export type LaneActiveProductEpochLookup = LaneProductEpochLookup & {
-    readonly materialActivation: MpcMaterialActivationRef;
-};
-export type LaneLock = {
-    readonly lockKey: string;
-    readonly lockKind: 'wallet_key';
-    readonly walletKeyId: WalletKeyId;
-    readonly enrollmentId?: never;
-    readonly laneId?: never;
-    readonly lockId: string;
-    readonly acquiredAtMs: number;
-    readonly expiresAtMs: number;
-} | {
-    readonly lockKey: string;
-    readonly lockKind: 'enrollment';
-    readonly enrollmentId: LaneEnrollmentId;
-    readonly walletKeyId?: never;
-    readonly laneId?: never;
-    readonly lockId: string;
-    readonly acquiredAtMs: number;
-    readonly expiresAtMs: number;
-};
-export type LaneLockResult = {
-    readonly outcome: 'applied';
-    readonly lock: LaneLock;
-} | {
-    readonly outcome: 'replayed';
-    readonly lock: LaneLock;
-} | {
-    readonly outcome: 'conflict';
-    readonly actual: LaneLock | null;
-};
-export interface LaneLockStore {
-    acquireWalletKeyLock(input: {
-        readonly walletKeyId: WalletKeyId;
-        readonly lockId: string;
-        readonly ttlMs: number;
-        readonly nowMs: number;
-    }): Promise<LaneLockResult>;
-    acquireEnrollmentLock(input: {
-        readonly enrollmentId: LaneEnrollmentId;
-        readonly lockId: string;
-        readonly ttlMs: number;
-        readonly nowMs: number;
-    }): Promise<LaneLockResult>;
-    releaseLock(input: {
-        readonly lockKey: string;
-        readonly lockId: string;
-    }): Promise<boolean>;
-}
-/**
- * Gateway-owned lane lifecycle persistence. Implementations must perform
- * compare-and-set writes in the database transaction itself; callers cannot
- * turn a read into an authorization decision.
- */
-export interface LaneLifecycleStore {
-    getEnrollment(enrollmentId: LaneEnrollmentId): Promise<LaneEnrollmentAdmissionRecord | null>;
-    getProtocol(operationId: LaneOperationId): Promise<LaneProtocolAdmissionRecord | null>;
-    putEnrollmentAdmission(input: LaneEnrollmentAdmissionInput): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
-    putProtocolAdmission(input: LaneProtocolAdmissionInput): Promise<LaneAdmissionMutationResult<LaneProtocolRecordV1>>;
-    compareAndSetProtocolLifecycle(input: LaneProtocolLifecycleCasInput): Promise<LaneProtocolCasResultV1>;
-    putProtocolCommitReceipt(receipt: LaneProtocolCommitReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneProtocolCommitReceiptV1>>;
-    putHolderDeliveryReceipt(receipt: LaneHolderDeliveryReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneHolderDeliveryReceiptV1>>;
-    putServerActivationReceipt(receipt: LaneServerActivationReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneServerActivationReceiptV1>>;
-    putProductEpochPending(productEpoch: Extract<LaneProductEpochRecordV1, {
-        state: 'pending_visibility';
-    }>, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneProductEpochRecordV1>>;
-    compareAndSetEnrollmentLifecycle(input: LaneEnrollmentLifecycleCasInput): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
-    getProductEpoch(lookup: LaneProductEpochLookup): Promise<LaneProductEpochRecordV1 | null>;
-    getActiveProductEpoch(lookup: LaneActiveProductEpochLookup): Promise<Extract<LaneProductEpochRecordV1, {
-        state: 'active';
-    }> | null>;
-    listEnrollmentProductEpochs(enrollmentId: LaneEnrollmentId): Promise<readonly LaneProductEpochRecordV1[]>;
-    commitEnrollmentVisibility(input: CommitLaneEnrollmentActivationV1): Promise<LaneEnrollmentVisibilityCommitResult>;
-    fenceLaneRevocation(input: RevokeSigningLaneV1): Promise<LaneSigningLaneRevocationFenceMutationResult>;
-    fenceEnrollmentRevocation(input: RevokeLaneEnrollmentV1): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
-    commitEnrollmentRevocation(input: LaneEnrollmentRevocationCommitInput): Promise<LaneEnrollmentRevocationCommitResult>;
-    commitLaneRevocation(input: LaneSigningLaneRevocationCommitInput): Promise<LaneSigningLaneRevocationMutationResult>;
-}
-export type LaneSigningLaneRevocationFenceMutationResult = {
-    readonly outcome: 'applied' | 'replayed';
-    readonly version: number;
-    readonly commandDigestB64u: string;
-    readonly productEpoch: Extract<LaneProductEpochRecordV1, {
-        state: 'revocation_pending';
-    }>;
-} | {
-    readonly outcome: 'already_completed';
-    readonly version: number;
-    readonly commandDigestB64u: string;
-    readonly productEpoch: Extract<LaneProductEpochRecordV1, {
-        state: 'revoked';
-    }>;
-    readonly retirementReceipt: LaneServerRetirementReceiptV1;
-} | {
-    readonly outcome: 'conflict';
-    readonly expectedVersion: number;
-    readonly actualVersion: number;
-    readonly requestedCommandDigestB64u: string;
-    readonly storedCommandDigestB64u: string;
-};
-export type LaneSigningLaneRevocationMutationResult = {
-    readonly outcome: 'applied' | 'replayed';
-    readonly version: number;
-    readonly commandDigestB64u: string;
-    readonly productEpoch: Extract<LaneProductEpochRecordV1, {
-        state: 'revoked';
-    }>;
-    readonly retirementReceipt: LaneServerRetirementReceiptV1;
-} | {
-    readonly outcome: 'conflict';
-    readonly expectedVersion: number;
-    readonly actualVersion: number;
-    readonly requestedCommandDigestB64u: string;
-    readonly storedCommandDigestB64u: string;
-};
-export type LaneSigningLaneRevocationCommitInput = {
-    readonly completion: CompleteSigningLaneRevocationV1;
-};
-export type LaneEnrollmentRevocationCommitInput = {
-    readonly command: {
-        readonly kind: 'commit_lane_enrollment_revocation_v1';
-        readonly enrollmentId: LaneEnrollmentId;
-        readonly walletId: WalletId;
-        readonly manifestDigestB64u: string;
-        readonly receipt: AggregateLaneRevocationReceiptV1;
-        readonly revokedAtMs: number;
-    };
-    readonly expectedVersion: number;
-    readonly commandDigestB64u: string;
-};
-export {};
-//# sourceMappingURL=LaneLifecycleStore.d.ts.map

package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts

@@ -1,58 +0,0 @@
-import type { EcdsaManifestIdentity, EcdsaServerRetirementReceiptV1, RevokeSigningLaneV1 } from '../../../../shared-ts/src/signing-lanes';
-import type { CorrelationId, DigestB64u } from '../../../../shared-ts/src/utils/canonicalPrimitives';
-import { type LaneShareEpoch, type MpcMaterialActivationRef, type SigningLaneId, type WalletKeyId } from '../../../../shared-ts/src/utils/domainIds';
-import type { EcdsaLifecycleId, EcdsaServerGeneration } from '../../../../shared-ts/src/utils/ecdsaCapabilityActivation';
-import type { EcdsaSigningWorkerLaneMaterialIdentityV1 } from './signingWorkerLaneMaterialIdentity';
-export type EcdsaServerRetirementBindingV1 = {
-    readonly identity: EcdsaSigningWorkerLaneMaterialIdentityV1;
-    readonly manifest: EcdsaManifestIdentity;
-    readonly materialActivation: MpcMaterialActivationRef;
-    readonly serverGeneration: EcdsaServerGeneration;
-    readonly lifecycleId: EcdsaLifecycleId;
-};
-type EcdsaServerRetirementExpectationV1 = {
-    readonly manifest: EcdsaManifestIdentity;
-    readonly materialActivation: MpcMaterialActivationRef;
-    readonly walletKeyId: WalletKeyId;
-    readonly laneId: SigningLaneId;
-    readonly laneShareEpoch: LaneShareEpoch;
-    readonly revocationEpoch: number;
-    readonly retirementReason: EcdsaServerRetirementReceiptV1['retirementReason'];
-    readonly retirementCorrelationId: CorrelationId;
-    readonly retirementRequestDigestB64u: DigestB64u;
-    readonly serverGeneration: EcdsaServerGeneration;
-    readonly lifecycleId: EcdsaLifecycleId;
-    /** Gateway's pre-authorized effect fence. It is distinct from receiptDigestB64u. */
-    readonly retirementEffectBindingDigestB64u: DigestB64u;
-};
-type EcdsaServerRetirementRequestV1 = {
-    readonly identity: EcdsaSigningWorkerLaneMaterialIdentityV1;
-    readonly manifest: EcdsaManifestIdentity;
-    readonly materialActivation: MpcMaterialActivationRef;
-    readonly revocationEpoch: number;
-    readonly retirementReason: EcdsaServerRetirementReceiptV1['retirementReason'];
-    readonly retirementCorrelationId: CorrelationId;
-    readonly retirementRequestDigestB64u: DigestB64u;
-    readonly retirementEffectBindingDigestB64u: DigestB64u;
-    readonly serverGeneration: EcdsaServerGeneration;
-    readonly lifecycleId: EcdsaLifecycleId;
-};
-type EcdsaServerRetirementEffectV1 = {
-    readonly outcome: 'applied' | 'replayed';
-    readonly receipt: EcdsaServerRetirementReceiptV1;
-    /** The effect fence authorized by the Gateway command. */
-    readonly retirementEffectBindingDigestB64u: DigestB64u;
-    /** The exact self-digest emitted by the server retirement receipt. */
-    readonly retirementReceiptDigestB64u: DigestB64u;
-};
-export declare function buildEcdsaServerRetirementRequestV1(input: {
-    readonly command: RevokeSigningLaneV1;
-    readonly binding: EcdsaServerRetirementBindingV1;
-}): EcdsaServerRetirementRequestV1;
-export declare function parseAndVerifyEcdsaServerRetirementEffectV1(input: {
-    readonly raw: unknown;
-    readonly expectation: EcdsaServerRetirementExpectationV1;
-    readonly label?: string;
-}): Promise<EcdsaServerRetirementEffectV1>;
-export {};
-//# sourceMappingURL=ecdsaServerRetirement.d.ts.map

package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts

@@ -1,30 +0,0 @@
-import type { Ed25519ServerRetirementReceiptV1, RevokeSigningLaneV1, SigningWorkerLaneMaterialIdentityV1 } from '../../../../shared-ts/src/signing-lanes';
-import { type DigestB64u } from '../../../../shared-ts/src/utils/canonicalPrimitives';
-export type Ed25519ServerRetirementBindingV1 = {
-    readonly identity: SigningWorkerLaneMaterialIdentityV1<'ed25519'>;
-};
-type Ed25519ServerRetirementRequestV1 = {
-    readonly identity: SigningWorkerLaneMaterialIdentityV1<'ed25519'>;
-    readonly revocationEpoch: number;
-    readonly retirementReason: Ed25519ServerRetirementReceiptV1['retirementReason'];
-    readonly retirementCorrelationId: RevokeSigningLaneV1['retirementCorrelationId'];
-    readonly retirementRequestDigestB64u: DigestB64u;
-    readonly retirementEffectBindingDigestB64u: DigestB64u;
-};
-type Ed25519ServerRetirementEffectV1 = {
-    readonly outcome: 'applied' | 'replayed';
-    readonly receipt: Ed25519ServerRetirementReceiptV1;
-    readonly retirementEffectBindingDigestB64u: DigestB64u;
-    readonly retirementReceiptDigestB64u: DigestB64u;
-};
-export declare function buildEd25519ServerRetirementRequestV1(input: {
-    readonly command: RevokeSigningLaneV1;
-    readonly binding: Ed25519ServerRetirementBindingV1;
-}): Ed25519ServerRetirementRequestV1;
-export declare function parseAndVerifyEd25519ServerRetirementEffectV1(input: {
-    readonly raw: unknown;
-    readonly request: Ed25519ServerRetirementRequestV1;
-    readonly label?: string;
-}): Promise<Ed25519ServerRetirementEffectV1>;
-export {};
-//# sourceMappingURL=ed25519ServerRetirement.d.ts.map

package/dist/types/wallet-server/src/core/signingLanes/signingWorkerLaneMaterialIdentity.d.ts

@@ -1,21 +0,0 @@
-import type { LaneEnrollmentId, LaneOperationId, LaneShareEpoch, SigningLaneId, WalletKeyId } from '../../../../shared-ts/src/signing-lanes';
-import type { DigestB64u } from '../../../../shared-ts/src/utils/canonicalPrimitives';
-import type { MpcMaterialActivationId, WalletId } from '../../../../shared-ts/src/utils/domainIds';
-export type SigningWorkerLaneMaterialIdentityV1<TKeyFamily extends 'ed25519' | 'ecdsa_secp256k1' = 'ed25519' | 'ecdsa_secp256k1'> = {
-    readonly operationId: LaneOperationId;
-    readonly enrollmentId: LaneEnrollmentId;
-    readonly walletId: WalletId;
-    readonly walletKeyId: WalletKeyId;
-    readonly targetLaneId: SigningLaneId;
-    readonly targetLaneShareEpoch: LaneShareEpoch;
-    readonly targetMaterialActivationId: MpcMaterialActivationId;
-    readonly keyFamily: TKeyFamily;
-    readonly holderParticipantBindingDigestB64u: DigestB64u;
-    readonly signingWorkerParticipantBindingDigestB64u: DigestB64u;
-    readonly holderRecipientKeyDigestB64u: DigestB64u;
-    readonly serverRecipientKeyDigestB64u: DigestB64u;
-    readonly transcriptHashB64u: DigestB64u;
-    readonly protocolCommitReceiptDigestB64u: DigestB64u;
-};
-export type EcdsaSigningWorkerLaneMaterialIdentityV1 = SigningWorkerLaneMaterialIdentityV1<'ecdsa_secp256k1'>;
-//# sourceMappingURL=signingWorkerLaneMaterialIdentity.d.ts.map

package/dist/types/wallet-server/src/core/storeBackends.d.ts

@@ -1,83 +0,0 @@
-import type { NormalizedLogger } from './logger';
-import type { CloudflareDurableObjectNamespaceLike, CloudflareDurableObjectStubLike, ThresholdStoreConfigInput } from './types';
-import { type D1TenantStoreOptions } from './d1TenantStore';
-export type StoreFactoryInput = {
-    config?: ThresholdStoreConfigInput | null;
-    logger: NormalizedLogger;
-    isNode: boolean;
-};
-/** The first of `namespace`, `durableObjectNamespace` and `THRESHOLD_DO_NAMESPACE` that is one. */
-export declare function resolveDurableObjectNamespace(config: Record<string, unknown>): CloudflareDurableObjectNamespaceLike | null;
-/** The object a store config names: `objectName`, else `name`, else the default. */
-export declare function durableObjectName(config: Record<string, unknown>): string;
-export declare function durableObjectStub(namespace: CloudflareDurableObjectNamespaceLike, objectName: string): CloudflareDurableObjectStubLike;
-/** Posts one JSON request to a store's Durable Object. */
-export declare function postDurableObjectRequest(stub: CloudflareDurableObjectStubLike, body: unknown): Promise<Response>;
-/**
- * Posts a request and parses the object's JSON reply; an empty reply reads as null. An HTTP error
- * or a reply that is not JSON throws, naming the store: `<storeName> DO store …`.
- */
-export declare function requestDurableObjectJson(stub: CloudflareDurableObjectStubLike, body: unknown, storeName: string): Promise<unknown>;
-/** A store's records in a key-value backend, under keys the store builds. */
-export interface KeyValueRecords<R> {
-    get(key: string): Promise<R | null>;
-    /** Reads and deletes, so a one-time record is used at most once. */
-    take(key: string): Promise<R | null>;
-    set(key: string, record: R, ttlMs?: number): Promise<void>;
-    del(key: string): Promise<void>;
-}
-/** How a key-value store names itself in the log lines and errors of its backend selection. */
-export type KeyValueStoreSpec<R> = {
-    /** Tags log lines, `[<tag>] …`, and names the store in Durable Object namespace errors. */
-    readonly tag: string;
-    /** Names the store in log lines and in D1, Upstash and Redis errors, e.g. `login challenge`. */
-    readonly label: string;
-    /** Names the store in missing-connection errors, e.g. `webauthn store`. */
-    readonly connectionErrorSubject: string;
-    /** Ends the Durable Object log line, after `Using Cloudflare Durable Object `. */
-    readonly durableObjectLog: string;
-    /** Leads Durable Object request errors, as in `<name> DO store HTTP 500`. */
-    readonly durableObjectErrorName: string;
-    /** Qualifies the in-memory fallback's log line when nothing is configured. */
-    readonly unconfiguredNote: string;
-    /** Names the store in D1 scope errors. */
-    readonly d1StoreName: string;
-    /** The store's key prefix, which is also its D1 namespace. */
-    readonly resolvePrefix: (config: Record<string, unknown>) => string;
-    /** Validates a record read back from a remote backend; null when it is invalid. */
-    readonly parse: (raw: unknown) => R | null;
-};
-/** Builds the store for the backend the config selects. */
-type KeyValueStoreBuilders<R, S> = {
-    readonly d1: (options: D1TenantStoreOptions) => S;
-    /** Upstash REST, Redis TCP and Durable Object backends. */
-    readonly keyValue: (records: KeyValueRecords<R>, prefix: string) => S;
-    readonly inMemory: (prefix: string) => S;
-};
-/**
- * Selects a key-value store's backend: the config's explicit `kind`, else Upstash or Redis from
- * env-shaped config, else in memory. The store type `S` comes from the caller's return type.
- */
-export declare function createKeyValueStore<R, S>(input: StoreFactoryInput, spec: KeyValueStoreSpec<R>, build: KeyValueStoreBuilders<R, NoInfer<S>>): S;
-/** How a store on D1, a Durable Object or memory names itself in its selection's logs and errors. */
-export type DurableObjectStoreSpec = {
-    /** Tags log lines and D1 errors, `[<tag>] …`. */
-    readonly tag: string;
-    /** Names the store in kind errors, e.g. `wallet` in `Unknown wallet store kind`. */
-    readonly name: string;
-    /** The in-memory fallback's log line, after the tag. */
-    readonly inMemoryLog: string;
-    /** Names the store in D1 scope errors. */
-    readonly d1StoreName: string;
-    /** The store's key prefix, which is also its D1 namespace. */
-    readonly resolvePrefix: (config: Record<string, unknown>) => string;
-};
-type DurableObjectStoreBuilders<S> = {
-    readonly d1: (options: D1TenantStoreOptions) => S;
-    readonly durableObject: (stub: CloudflareDurableObjectStubLike, prefix: string) => S;
-    readonly inMemory: (prefix: string) => S;
-};
-/** Selects the backend the config's `kind` names: D1, a Durable Object, or else memory. */
-export declare function createDurableObjectStore<S>(input: StoreFactoryInput, spec: DurableObjectStoreSpec, build: DurableObjectStoreBuilders<NoInfer<S>>): S;
-export {};
-//# sourceMappingURL=storeBackends.d.ts.map

package/dist/types/wallet-server/src/core/utils.d.ts

@@ -1,3 +0,0 @@
-export declare function formatGasToTGas(gasString: string): string;
-export declare function formatYoctoToNear(yoctoAmount: string | bigint): string;
-//# sourceMappingURL=utils.d.ts.map

package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts

@@ -1,96 +0,0 @@
-import { type KeyValueRecords, type StoreFactoryInput } from './storeBackends';
-import { type D1SchemaOptions, type D1TenantStoreOptions } from './d1TenantStore';
-/** What sets one WebAuthn store apart from the others. */
-export type WebAuthnStoreSpec<R> = {
-    /** Names the store in log lines and errors, e.g. `login challenge`. */
-    readonly label: string;
-    /** Config key that replaces the whole key prefix, e.g. `WEBAUTHN_LOGIN_CHALLENGE_PREFIX`. */
-    readonly prefixConfigKey: string;
-    /** The default prefix's last segment: `<THRESHOLD_PREFIX>:webauthn:<prefixName>:`. */
-    readonly prefixName: string;
-    /** Validates a record being written or read back; null when it is invalid. */
-    readonly parse: (raw: unknown) => R | null;
-    /** Ends the Durable Object log line, e.g. `login challenge persistence`. */
-    readonly durableObjectLogSubject: string;
-    /** Names the store in missing-connection errors, e.g. `webauthn store`. */
-    readonly connectionErrorSubject: string;
-    /** Qualifies the in-memory fallback's log line, e.g. `non-persistent`. */
-    readonly unconfiguredNote: string;
-    /** Names the store in D1 scope errors, e.g. `credential`. */
-    readonly d1ScopeLabel: string;
-};
-/** Builds the store for the backend the config selects. */
-type WebAuthnStoreBuilders<R, S> = {
-    readonly d1: (options: D1TenantStoreOptions) => S;
-    /** Upstash REST, Redis TCP and Durable Object backends. */
-    readonly keyValue: (records: KeyValueRecords<R>, prefix: string) => S;
-    readonly inMemory: (records: InMemoryWebAuthnRecords<R>, prefix: string) => S;
-};
-/**
- * A store's key prefix, which is also its D1 namespace: `config[spec.prefixConfigKey]` when set,
- * else `<THRESHOLD_PREFIX>:webauthn:<spec.prefixName>:`. It always ends with a colon.
- */
-export declare function resolveWebAuthnStorePrefix(config: Record<string, unknown>, spec: Pick<WebAuthnStoreSpec<unknown>, 'prefixConfigKey' | 'prefixName'>): string;
-/**
- * Selects a WebAuthn store's backend: the config's explicit `kind`, else Upstash or Redis from
- * env-shaped config, else in memory. The store type `S` comes from the caller's return type.
- */
-export declare function createWebAuthnStore<R, S>(input: StoreFactoryInput, spec: WebAuthnStoreSpec<R>, build: WebAuthnStoreBuilders<R, NoInfer<S>>): S;
-/** Keeps each record as it was put, without expiry; reads return the stored object. */
-export declare class InMemoryWebAuthnRecords<R> implements KeyValueRecords<R> {
-    readonly map: Map<string, R>;
-    get(key: string): Promise<R | null>;
-    take(key: string): Promise<R | null>;
-    set(key: string, record: R): Promise<void>;
-    del(key: string): Promise<void>;
-}
-/**
- * Per-credential records under `${prefix}${ownerId}:${credentialIdB64u}`, where the owner is the
- * user for authenticators and the RP ID for credential bindings. A blank id reads as missing.
- */
-export declare class WebAuthnCredentialRecords<R> {
-    private readonly records;
-    private readonly prefix;
-    constructor(records: KeyValueRecords<R>, prefix: string);
-    get(ownerId: string, credentialIdB64u: string): Promise<R | null>;
-    set(ownerId: string, credentialIdB64u: string, record: R): Promise<void>;
-    del(ownerId: string, credentialIdB64u: string): Promise<void>;
-    private key;
-    private trimmedKey;
-}
-/** Names a WebAuthn store in D1 scope errors, e.g. `WebAuthn credential store`. */
-export declare function webAuthnD1Store(d1ScopeLabel: string): string;
-type WebAuthnChallengeRecord = {
-    readonly challengeId: string;
-    readonly createdAtMs: number;
-    readonly expiresAtMs: number;
-};
-/** Holds each challenge until it is consumed once or expires. */
-export interface WebAuthnChallengeStore<R> {
-    put(record: R): Promise<void>;
-    consume(challengeId: string): Promise<R | null>;
-    del(challengeId: string): Promise<void>;
-}
-export type WebAuthnChallengeStoreSpec<R> = WebAuthnStoreSpec<R> & {
-    /** The `challenge_kind` that tells this store's rows apart in the shared D1 table. */
-    readonly challengeKind: 'login' | 'sync';
-};
-export interface D1WebAuthnChallengeStoreOptions extends D1TenantStoreOptions {
-    readonly now?: () => Date;
-}
-export declare const WEBAUTHN_CHALLENGE_STORE_D1_SCHEMA_SQL: readonly ["\n    CREATE TABLE IF NOT EXISTS webauthn_challenges (\n      namespace TEXT NOT NULL,\n      org_id TEXT NOT NULL,\n      project_id TEXT NOT NULL,\n      env_id TEXT NOT NULL,\n      challenge_id TEXT NOT NULL,\n      challenge_kind TEXT NOT NULL,\n      record_json TEXT NOT NULL,\n      created_at_ms INTEGER NOT NULL,\n      expires_at_ms INTEGER NOT NULL,\n      PRIMARY KEY (namespace, org_id, project_id, env_id, challenge_id),\n      CHECK (length(challenge_id) > 0),\n      CHECK (challenge_kind IN ('login', 'sync', 'recovery_registration')),\n      CHECK (json_valid(record_json)),\n      CHECK (created_at_ms > 0),\n      CHECK (expires_at_ms > created_at_ms)\n    )\n  ", "\n    CREATE INDEX IF NOT EXISTS webauthn_challenges_expiry_idx\n      ON webauthn_challenges (\n        namespace,\n        org_id,\n        project_id,\n        env_id,\n        challenge_kind,\n        expires_at_ms\n      )\n  "];
-export declare function ensureWebAuthnChallengeStoreD1Schema(options: D1SchemaOptions): Promise<void>;
-export declare function createWebAuthnChallengeStore<R extends WebAuthnChallengeRecord>(input: StoreFactoryInput, spec: WebAuthnChallengeStoreSpec<R>, d1: (options: D1TenantStoreOptions) => WebAuthnChallengeStore<R>): WebAuthnChallengeStore<R>;
-export declare class D1WebAuthnChallengeStore<R extends WebAuthnChallengeRecord> implements WebAuthnChallengeStore<R> {
-    private readonly spec;
-    readonly adapterKind = "d1";
-    private readonly table;
-    private readonly now;
-    private readonly prepare;
-    constructor(input: D1WebAuthnChallengeStoreOptions, spec: WebAuthnChallengeStoreSpec<R>);
-    put(record: R): Promise<void>;
-    consume(challengeId: string): Promise<R | null>;
-    del(challengeId: string): Promise<void>;
-}
-export {};
-//# sourceMappingURL=webAuthnStoreBackends.d.ts.map