@seams/wallet-server 0.7.1 → 0.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (643) hide show
  1. package/THIRD_PARTY_NOTICES.md +1 -113
  2. package/artifact-manifest.json +78 -33
  3. package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -1
  4. package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
  5. package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
  6. package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -1
  7. package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
  8. package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
  9. package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
  10. package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
  11. package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
  12. package/cloudflare-router-ab/build/router/build-stamp.json +1 -1
  13. package/cloudflare-router-ab/build/router/index.js +2 -2
  14. package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
  15. package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -1
  16. package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
  17. package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
  18. package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -1
  19. package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
  20. package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
  21. package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +0 -2
  22. package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +77 -20
  23. package/dist/esm/authorization/lifecycleRouting.js +62 -0
  24. package/dist/esm/authorization/service.js +43 -12
  25. package/dist/esm/authorization/vaultProxyUse.js +2 -6
  26. package/dist/esm/cloud-host.js +23 -25
  27. package/dist/esm/core/EmailOtpRecords.js +1 -217
  28. package/dist/esm/core/EmailOtpStores.js +0 -859
  29. package/dist/esm/core/IdentityStore.js +2 -426
  30. package/dist/esm/core/SessionService.js +7 -30
  31. package/dist/esm/core/ThresholdService/config.js +1 -9
  32. package/dist/esm/core/ThresholdService/index.js +0 -4
  33. package/dist/esm/core/ThresholdService/kv.js +1 -66
  34. package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +1 -13
  35. package/dist/esm/core/ThresholdService/routerAbNormalSigningPolicy.js +4 -21
  36. package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +0 -617
  37. package/dist/esm/core/ThresholdService/validation.js +2 -346
  38. package/dist/esm/core/WalletAuthMethodStore.js +2 -123
  39. package/dist/esm/core/WalletStore.js +6 -214
  40. package/dist/esm/core/WebAuthnAuthenticatorStore.js +0 -202
  41. package/dist/esm/core/WebAuthnCredentialBindingStore.js +2 -182
  42. package/dist/esm/core/WebAuthnLoginChallengeStore.js +0 -52
  43. package/dist/esm/core/WebAuthnSyncChallengeStore.js +0 -54
  44. package/dist/esm/core/authService/emailOtpConfig.js +1 -195
  45. package/dist/esm/core/authService/emailOtpEnrollment.js +0 -141
  46. package/dist/esm/core/authService/emailOtpSeal.js +0 -78
  47. package/dist/esm/core/authService/nearTransactions.js +3 -98
  48. package/dist/esm/core/authService/rateLimits.js +0 -87
  49. package/dist/esm/core/authService/thresholdEcdsaKeyInventory.js +2 -1
  50. package/dist/esm/core/authService/webauthn.js +14 -464
  51. package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -24
  52. package/dist/esm/core/authService/webauthnVerificationOutcomes.js +5 -24
  53. package/dist/esm/core/authService/webauthnWalletBinding.js +0 -37
  54. package/dist/esm/core/config.js +1 -95
  55. package/dist/esm/core/d1EcdsaSignerRead.js +76 -0
  56. package/dist/esm/core/d1IdentityStore.js +17 -77
  57. package/dist/esm/core/d1TenantStore.js +1 -24
  58. package/dist/esm/core/d1WalletAuthMethodStore.js +2 -5
  59. package/dist/esm/core/d1WalletStore.js +15 -25
  60. package/dist/esm/core/deviceLinking/linkedDeviceBootstrap.js +13 -0
  61. package/dist/esm/core/deviceLinking/linkedDeviceEmailOtpGrant.js +1 -5
  62. package/dist/esm/core/deviceLinking/linkedDeviceSession.js +20 -14
  63. package/dist/esm/core/deviceLinking/linkedDeviceSessionApproval.js +1 -3
  64. package/dist/esm/core/deviceLinking/linkedDeviceSessionRecord.js +2 -8
  65. package/dist/esm/core/deviceLinking/requestProof.js +22 -10
  66. package/dist/esm/core/ecdsaMaterialReadSnapshot.js +85 -0
  67. package/dist/esm/core/emailOtpD1Statements.js +107 -94
  68. package/dist/esm/core/keyMaterialBrands.js +2 -12
  69. package/dist/esm/core/nearKeys.js +0 -1
  70. package/dist/esm/core/nearRelayerAccountProvisioning.js +8 -14
  71. package/dist/esm/core/passkeyCredentialClaims.js +8 -0
  72. package/dist/esm/core/routerAbSigning/RouterAbEcdsaPresignRuntime.js +2 -6
  73. package/dist/esm/core/routerAbSigning/RouterAbNormalSigningRuntime.js +2 -30
  74. package/dist/esm/core/signingLanes/WalletExecutionLaneProjection.js +3 -6
  75. package/dist/esm/core/signingMaterial/ordinaryInactiveSignerMaterialReservation.js +2 -5
  76. package/dist/esm/core/thresholdEcdsaChainTarget.js +2 -7
  77. package/dist/esm/hosted-wallet-gateway.js +68 -45
  78. package/dist/esm/index.js +6 -19
  79. package/dist/esm/localHostedWalletGatewayHandler.js +25 -0
  80. package/dist/esm/localIntendedMaterialAdmissionFault.js +176 -0
  81. package/dist/esm/localIntendedPresignCancellation.js +44 -0
  82. package/dist/esm/localRegistrationSetupAuthority.js +89 -0
  83. package/dist/esm/router/auth/authRequestValidation.js +8 -16
  84. package/dist/esm/router/auth/commonRouterUtils.js +24 -10
  85. package/dist/esm/router/auth/walletSessionFailure.js +2 -5
  86. package/dist/esm/router/auth/webAuthnCredentialCodecs.js +4 -16
  87. package/dist/esm/router/cloudflare/d1/auth/d1AuthorizationAssembly.js +87 -0
  88. package/dist/esm/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.js +1 -0
  89. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.js +2 -6
  90. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthConfig.js +12 -2
  91. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +37 -308
  92. package/dist/esm/router/cloudflare/d1/auth/walletSessionCredentialReaders.js +76 -0
  93. package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +52 -43
  94. package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +217 -50
  95. package/dist/esm/router/cloudflare/d1/authorization/d1VaultProxyStore.js +8 -12
  96. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +62 -21
  97. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEd25519ExportRootStore.js +6 -1
  98. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +12 -2
  99. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +4 -4
  100. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +1 -1
  101. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -9
  102. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.js +2 -1
  103. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +89 -7
  104. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +24 -15
  105. package/dist/esm/router/cloudflare/d1/deviceLinking/index.js +3 -3
  106. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +9 -6
  107. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.js +12 -56
  108. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.js +17 -81
  109. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +1 -1
  110. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +0 -1
  111. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpDeliveryRuntime.js +6 -25
  112. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +1 -1
  113. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +1 -7
  114. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.js +19 -13
  115. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +12 -48
  116. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +24 -86
  117. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +9 -32
  118. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.js +5 -21
  119. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +44 -12
  120. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +1 -49
  121. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +37 -136
  122. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.js +85 -0
  123. package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +0 -1
  124. package/dist/esm/router/cloudflare/d1/identity/d1IdentityService.js +9 -88
  125. package/dist/esm/router/cloudflare/d1/near/d1SponsoredNearAccount.js +242 -0
  126. package/dist/esm/router/cloudflare/d1/oidc/d1OidcBoundary.js +18 -92
  127. package/dist/esm/router/cloudflare/d1/oidc/d1OidcVerificationService.js +4 -55
  128. package/dist/esm/router/cloudflare/d1/oidc/googleOidcToken.js +41 -0
  129. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +9 -15
  130. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +36 -7
  131. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.js +9 -13
  132. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.js +11 -50
  133. package/dist/esm/router/cloudflare/d1/registration/d1EvmFamilyEcdsaRegistrationBranch.js +5 -20
  134. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +13 -10
  135. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +9 -14
  136. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +25 -13
  137. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +7 -31
  138. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationSetupSupport.js +74 -0
  139. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +7 -1
  140. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +101 -260
  141. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +12 -56
  142. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.js +155 -0
  143. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +1 -3
  144. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js +1 -4
  145. package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +131 -31
  146. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.js +68 -0
  147. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +7 -54
  148. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +9 -8
  149. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +2 -142
  150. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +55 -171
  151. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +10 -79
  152. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +23 -7
  153. package/dist/esm/router/cloudflare/runtime/routerAbPrewarm.js +2 -2
  154. package/dist/esm/router/cloudflare/runtime/staticWalletConsoleBinding.js +6 -20
  155. package/dist/esm/router/cloudflare/runtime/tenantRootCreationGrant.js +2 -9
  156. package/dist/esm/router/cloudflare/runtime/walletConsoleOps.js +1 -0
  157. package/dist/esm/router/cloudflare/runtime/walletConsoleOpsClient.js +5 -0
  158. package/dist/esm/router/cloudflare/runtime/walletControlOps.js +2 -1
  159. package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
  160. package/dist/esm/router/cloudflare/runtime/walletRuntimeOps.js +16 -4
  161. package/dist/esm/router/cloudflare-adaptor.js +1 -2
  162. package/dist/esm/router/cloudflare.js +3390 -3437
  163. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +11 -8
  164. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +3 -2
  165. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +6 -6
  166. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPersistence.js +5 -8
  167. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +6 -6
  168. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +3 -0
  169. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +8 -0
  170. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryWalletSessionAuthorization.js +3 -6
  171. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js +6 -25
  172. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.js +39 -55
  173. package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +0 -1
  174. package/dist/esm/router/domains/emailOtp/emailOtpRouteHandlers.js +15 -62
  175. package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.js +2 -8
  176. package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -8
  177. package/dist/esm/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.js +83 -74
  178. package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmission.js +1 -0
  179. package/dist/esm/router/domains/signingOperations/routerAbOperationStepUp.js +1 -0
  180. package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +5 -19
  181. package/dist/esm/router/domains/signingOperations/walletExecutionAdmission.js +3 -7
  182. package/dist/esm/router/domains/tenantRoot/tenantRootIdentityResolution.js +7 -13
  183. package/dist/esm/router/domains/walletRegistration/walletRegistrationReservation.js +70 -0
  184. package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +10 -11
  185. package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +2 -3
  186. package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +55 -200
  187. package/dist/esm/router/express.js +858 -1145
  188. package/dist/esm/router/framework/http.js +7 -1
  189. package/dist/esm/router/framework/registrationSetupDispatch.js +14 -0
  190. package/dist/esm/router/framework/ror/normalize.js +0 -1
  191. package/dist/esm/router/framework/ror/options.js +0 -1
  192. package/dist/esm/router/framework/ror/provider.js +0 -1
  193. package/dist/esm/router/framework/ror/staticProvider.js +0 -1
  194. package/dist/esm/router/framework/routeDefinitions.js +1 -2
  195. package/dist/esm/router/framework/routerApiWebhooks.js +0 -1
  196. package/dist/esm/router/framework/runtimeSnapshotConsumer.js +8 -35
  197. package/dist/esm/router/ror.js +0 -1
  198. package/dist/esm/router/transport/fetch/createFetchRouter.js +3 -8
  199. package/dist/esm/router/transport/fetch/routes/auth.js +11 -41
  200. package/dist/esm/router/transport/fetch/routes/deviceLinking.js +36 -147
  201. package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +7 -23
  202. package/dist/esm/router/transport/fetch/routes/deviceLinkingResponses.js +130 -0
  203. package/dist/esm/router/transport/fetch/routes/ecdsaOperationStepUpFactor.js +171 -0
  204. package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +1 -0
  205. package/dist/esm/router/transport/fetch/routes/sessions.js +1 -0
  206. package/dist/esm/router/transport/fetch/routes/syncAccount.js +15 -38
  207. package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +46 -194
  208. package/dist/esm/router/transport/fetch/routes/walletExecutionLanePreflight.js +4 -1
  209. package/dist/esm/router/transport/fetch/routes/walletRegistration.js +3 -1
  210. package/dist/esm/router/transport/fetch/routes/webauthnAuthenticators.js +4 -16
  211. package/dist/esm/shared-ts/src/authorization/walletSessionIssuance.js +0 -1
  212. package/dist/esm/shared-ts/src/authorization/walletSignerActivationEquality.js +12 -0
  213. package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +0 -2
  214. package/dist/esm/shared-ts/src/device-linking/committedSignerPackages.js +2 -5
  215. package/dist/esm/shared-ts/src/device-linking/contracts.js +16 -1
  216. package/dist/esm/shared-ts/src/device-linking/delegatedActivationPlan.js +1 -5
  217. package/dist/esm/shared-ts/src/device-linking/digests.js +1 -8
  218. package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +12 -16
  219. package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +5 -8
  220. package/dist/esm/shared-ts/src/near/actions.js +0 -1
  221. package/dist/esm/shared-ts/src/near/nearClient.js +0 -2
  222. package/dist/esm/shared-ts/src/passkey-custody/primitives.js +5 -1
  223. package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -1
  224. package/dist/esm/shared-ts/src/signing-lanes/index.js +1 -6
  225. package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +5 -9
  226. package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +2 -81
  227. package/dist/esm/shared-ts/src/signing-lanes/participants.js +1 -219
  228. package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +0 -3
  229. package/dist/esm/shared-ts/src/tenant-root/tenantRootIdentifier.js +12 -0
  230. package/dist/esm/shared-ts/src/tenant-root/tenantRootIdentity.js +2 -9
  231. package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +2 -6
  232. package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +0 -1
  233. package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +1 -22
  234. package/dist/esm/shared-ts/src/threshold/participants.js +0 -1
  235. package/dist/esm/shared-ts/src/threshold/signingRootScope.js +0 -1
  236. package/dist/esm/shared-ts/src/utils/addWalletAuthMethod.js +4 -13
  237. package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +1 -7
  238. package/dist/esm/shared-ts/src/utils/domainIds.js +1 -16
  239. package/dist/esm/shared-ts/src/utils/ecdsaCapabilityActivation.js +1 -11
  240. package/dist/esm/shared-ts/src/utils/ecdsaKeyFactsInventory.js +2 -5
  241. package/dist/esm/shared-ts/src/utils/ecdsaServerTiming.js +0 -1
  242. package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +3 -1
  243. package/dist/esm/shared-ts/src/utils/errors.js +1 -19
  244. package/dist/esm/shared-ts/src/utils/exactKeys.js +17 -0
  245. package/dist/esm/shared-ts/src/utils/failure.js +20 -0
  246. package/dist/esm/shared-ts/src/utils/near.js +1 -1
  247. package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +1 -1
  248. package/dist/esm/shared-ts/src/utils/registrationIds.js +1 -5
  249. package/dist/esm/shared-ts/src/utils/registrationIntent.js +3 -13
  250. package/dist/esm/shared-ts/src/utils/registrationSetupOperation.js +8 -0
  251. package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +3 -6
  252. package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +1 -2
  253. package/dist/esm/shared-ts/src/utils/routerAbEd25519Yao.js +1 -1
  254. package/dist/esm/shared-ts/src/utils/thresholdEcdsaChainTarget.js +9 -0
  255. package/dist/esm/shared-ts/src/utils/validation.js +1 -5
  256. package/dist/esm/shared-ts/src/utils/walletAuthAuthority.js +0 -1
  257. package/dist/esm/shared-ts/src/utils/walletManagementProtocol.js +6 -0
  258. package/dist/esm/shared-ts/src/utils/wireSchema.js +2 -13
  259. package/dist/esm/shared-ts/src/wallet-recovery/backupAcknowledgement.js +6 -24
  260. package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +0 -1
  261. package/dist/esm/shared-ts/src/wallet-recovery/recoveryKeyId.js +5 -6
  262. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js +1 -4
  263. package/dist/esm/storage/d1Sql.js +1 -7
  264. package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +10 -33
  265. package/dist/esm/threshold/session/signingSessionSeal/guards/backends.js +1 -2
  266. package/dist/esm/threshold/session/signingSessionSeal/idempotencyBackends.js +3 -4
  267. package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +3 -10
  268. package/dist/esm/threshold/session/signingSessionSeal/options.js +0 -1
  269. package/dist/esm/threshold/session/signingSessionSeal/service.js +8 -35
  270. package/dist/esm/threshold/session/signingSessionSeal/transport/express.js +18 -94
  271. package/dist/esm/threshold/session/signingSessionSeal/transport/fetch.js +6 -30
  272. package/dist/esm/threshold/session/signingSessionSeal/transport/shared.js +5 -20
  273. package/dist/esm/wasm/evm_crypto/pkg/evm_crypto_bg.wasm +0 -0
  274. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +0 -611
  275. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
  276. package/dist/esm/wasm/shamir3pass_runtime/pkg/shamir3pass_runtime_bg.wasm +0 -0
  277. package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +0 -4
  278. package/dist/types/shared-ts/src/authorization/delegatedAuthority.d.ts +2 -1
  279. package/dist/types/shared-ts/src/authorization/walletSessionIssuance.d.ts +9 -2
  280. package/dist/types/shared-ts/src/authorization/walletSignerActivationEquality.d.ts +4 -0
  281. package/dist/types/shared-ts/src/device-linking/committedSignerPackages.d.ts +3 -4
  282. package/dist/types/shared-ts/src/device-linking/contracts.d.ts +6 -63
  283. package/dist/types/shared-ts/src/device-linking/sourceContribution.d.ts +2 -0
  284. package/dist/types/shared-ts/src/passkey-custody/custodyEnvelope.d.ts +5 -12
  285. package/dist/types/shared-ts/src/passkey-custody/primitives.d.ts +9 -0
  286. package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -2
  287. package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +11 -12
  288. package/dist/types/shared-ts/src/signing-lanes/ids.d.ts +3 -17
  289. package/dist/types/shared-ts/src/signing-lanes/index.d.ts +0 -4
  290. package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +0 -1
  291. package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +0 -18
  292. package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +6 -35
  293. package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +6 -845
  294. package/dist/types/shared-ts/src/tenant-root/tenantRootIdentifier.d.ts +3 -0
  295. package/dist/types/shared-ts/src/tenant-root/tenantRootOperationRecord.d.ts +2 -1
  296. package/dist/types/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.d.ts +6 -0
  297. package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +0 -10
  298. package/dist/types/shared-ts/src/threshold/participants.d.ts +1 -1
  299. package/dist/types/shared-ts/src/threshold/signingRootScope.d.ts +1 -0
  300. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +1 -133
  301. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +4 -18
  302. package/dist/types/shared-ts/src/utils/domainIds.d.ts +0 -12
  303. package/dist/types/shared-ts/src/utils/ecdsaKeyFactsInventory.d.ts +2 -11
  304. package/dist/types/shared-ts/src/utils/eip1559TxWasmJson.d.ts +16 -0
  305. package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +2 -0
  306. package/dist/types/shared-ts/src/utils/errors.d.ts +0 -4
  307. package/dist/types/shared-ts/src/utils/exactKeys.d.ts +11 -0
  308. package/dist/types/shared-ts/src/utils/failure.d.ts +12 -0
  309. package/dist/types/shared-ts/src/utils/jsonRpc.d.ts +3 -4
  310. package/dist/types/shared-ts/src/utils/near.d.ts +0 -20
  311. package/dist/types/shared-ts/src/utils/nearRpcResults.d.ts +1 -0
  312. package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -2
  313. package/dist/types/shared-ts/src/utils/registrationAuthMethodInput.d.ts +3 -8
  314. package/dist/types/shared-ts/src/utils/registrationSetupOperation.d.ts +3 -0
  315. package/dist/types/shared-ts/src/utils/registrationSignerPlan.d.ts +7 -19
  316. package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts +3 -1
  317. package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts +1 -0
  318. package/dist/types/shared-ts/src/utils/routerAbEd25519YaoDigests.d.ts +3 -4
  319. package/dist/types/shared-ts/src/utils/routerAbNormalSigningIdentity.d.ts +30 -8
  320. package/dist/types/shared-ts/src/utils/routerApiKeyAuth.d.ts +2 -0
  321. package/dist/types/shared-ts/src/utils/signingSessionSeal.d.ts +10 -11
  322. package/dist/types/shared-ts/src/utils/thresholdEcdsaChainTarget.d.ts +25 -0
  323. package/dist/types/shared-ts/src/utils/validation.d.ts +1 -3
  324. package/dist/types/shared-ts/src/utils/variant.d.ts +18 -0
  325. package/dist/types/shared-ts/src/utils/walletAuthMethodRecord.d.ts +3 -6
  326. package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +0 -1
  327. package/dist/types/shared-ts/src/utils/walletManagementProtocol.d.ts +3 -0
  328. package/dist/types/shared-ts/src/utils/webauthnDeviceInfo.d.ts +4 -2
  329. package/dist/types/shared-ts/src/utils/wireSchema.d.ts +0 -2
  330. package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +0 -1
  331. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +1 -10
  332. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodes.d.ts +1 -3
  333. package/dist/types/shared-ts/src/wallet-recovery/recoveryEnvelopes.d.ts +3 -16
  334. package/dist/types/shared-ts/src/wallet-recovery/recoveryKeyId.d.ts +5 -21
  335. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryPreparation.d.ts +15 -0
  336. package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryTarget.d.ts +3 -4
  337. package/dist/types/wallet-server/src/authorization/domain.d.ts +13 -2
  338. package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.d.ts +27 -3
  339. package/dist/types/wallet-server/src/authorization/lifecycleRouting.d.ts +32 -0
  340. package/dist/types/wallet-server/src/authorization/lifecycleRouting.typecheck.d.ts +2 -0
  341. package/dist/types/wallet-server/src/authorization/recoveryRouting.d.ts +22 -0
  342. package/dist/types/wallet-server/src/authorization/recoveryRouting.typecheck.d.ts +2 -0
  343. package/dist/types/wallet-server/src/authorization/service.d.ts +27 -1
  344. package/dist/types/wallet-server/src/authorization/sessionRouting.d.ts +20 -0
  345. package/dist/types/wallet-server/src/authorization/sessionRouting.typecheck.d.ts +2 -0
  346. package/dist/types/wallet-server/src/cloud-host.d.ts +31 -9
  347. package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +1 -22
  348. package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +1 -79
  349. package/dist/types/wallet-server/src/core/IdentityStore.d.ts +0 -10
  350. package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +0 -1
  351. package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -2
  352. package/dist/types/wallet-server/src/core/ThresholdService/index.d.ts +1 -3
  353. package/dist/types/wallet-server/src/core/ThresholdService/kv.d.ts +0 -7
  354. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +0 -3
  355. package/dist/types/wallet-server/src/core/ThresholdService/routerAbNormalSigningPolicy.d.ts +0 -1
  356. package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +6 -18
  357. package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +0 -127
  358. package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +1 -5
  359. package/dist/types/wallet-server/src/core/WalletStore.d.ts +0 -3
  360. package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +8 -20
  361. package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +1 -27
  362. package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +2 -16
  363. package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +22 -14
  364. package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +0 -24
  365. package/dist/types/wallet-server/src/core/authService/emailOtpEnrollment.d.ts +1 -70
  366. package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +1 -14
  367. package/dist/types/wallet-server/src/core/authService/githubOAuth.d.ts +2 -1
  368. package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +1 -39
  369. package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -17
  370. package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +0 -125
  371. package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +0 -3
  372. package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +1 -1
  373. package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +0 -12
  374. package/dist/types/wallet-server/src/core/config.d.ts +0 -10
  375. package/dist/types/wallet-server/src/core/d1EcdsaSignerRead.d.ts +39 -0
  376. package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +0 -2
  377. package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +0 -7
  378. package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +0 -1
  379. package/dist/types/wallet-server/src/core/d1WalletStore.d.ts +10 -0
  380. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceBootstrap.d.ts +19 -0
  381. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +8 -6
  382. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionRecord.d.ts +3 -4
  383. package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -5
  384. package/dist/types/wallet-server/src/core/ecdsaMaterialReadSnapshot.d.ts +19 -0
  385. package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +10 -7
  386. package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +1 -5
  387. package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +0 -1
  388. package/dist/types/wallet-server/src/core/passkeyCredentialClaims.d.ts +9 -0
  389. package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbEcdsaPresignRuntime.d.ts +0 -2
  390. package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +3 -7
  391. package/dist/types/wallet-server/src/core/rpcClients/near/NearClient.d.ts +1 -2
  392. package/dist/types/wallet-server/src/core/signingLanes/WalletExecutionLaneProjection.d.ts +2 -11
  393. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +1 -92
  394. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +4 -52
  395. package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +3 -12
  396. package/dist/types/wallet-server/src/core/types.d.ts +2 -305
  397. package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +15 -3
  398. package/dist/types/wallet-server/src/index.d.ts +8 -13
  399. package/dist/types/wallet-server/src/localIntendedMaterialAdmissionFault.d.ts +38 -0
  400. package/dist/types/wallet-server/src/localIntendedPresignCancellation.d.ts +4 -0
  401. package/dist/types/wallet-server/src/localRegistrationSetupAuthority.d.ts +13 -0
  402. package/dist/types/wallet-server/src/router/auth/authRequestValidation.d.ts +4 -9
  403. package/dist/types/wallet-server/src/router/auth/commonRouterUtils.d.ts +15 -1
  404. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizationAssembly.d.ts +23 -0
  405. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.d.ts +0 -1
  406. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +25 -3
  407. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthService.d.ts +1 -1
  408. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/walletSessionCredentialReaders.d.ts +9 -0
  409. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/authorizedOperationStatements.d.ts +4 -0
  410. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +11 -2
  411. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +22 -3
  412. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +7 -1
  413. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.d.ts +1 -10
  414. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.d.ts +4 -0
  415. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +8 -6
  416. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.d.ts +5 -8
  417. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +1 -13
  418. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.d.ts +2 -2
  419. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +1 -1
  420. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.d.ts +2 -8
  421. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +0 -2
  422. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +20 -11
  423. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.d.ts +5 -5
  424. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.d.ts +4 -14
  425. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +29 -1
  426. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -16
  427. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.d.ts +7 -2
  428. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.d.ts +23 -0
  429. package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityService.d.ts +0 -12
  430. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.d.ts +24 -0
  431. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.typecheck.d.ts +2 -0
  432. package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/d1OidcVerificationService.d.ts +0 -1
  433. package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/googleOidcToken.d.ts +4 -0
  434. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -0
  435. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +9 -0
  436. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +3 -7
  437. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -11
  438. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +3 -2
  439. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationSetupSupport.d.ts +51 -0
  440. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +3 -0
  441. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +35 -50
  442. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +3 -30
  443. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.d.ts +11 -0
  444. package/dist/types/wallet-server/src/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.d.ts +14 -1
  445. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.d.ts +27 -0
  446. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +1 -10
  447. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +2 -2
  448. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +0 -4
  449. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.d.ts +3 -0
  450. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +8 -50
  451. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +23 -10
  452. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.typecheck.d.ts +2 -0
  453. package/dist/types/wallet-server/src/router/cloudflare/runtime/cloudflare.types.d.ts +0 -2
  454. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOps.d.ts +9 -34
  455. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOpsClient.d.ts +2 -0
  456. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -1
  457. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRuntimeOps.d.ts +3 -0
  458. package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +0 -1
  459. package/dist/types/wallet-server/src/router/domains/ecdsa/thresholdEcdsaRequestValidation.d.ts +3 -15
  460. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +1 -1
  461. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -2
  462. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +2 -2
  463. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.typecheck.d.ts +2 -0
  464. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.d.ts +2 -0
  465. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.d.ts +2 -0
  466. package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/routerAbEd25519YaoWalletSession.d.ts +9 -50
  467. package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +0 -2
  468. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +0 -3
  469. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryKeyManifest.d.ts +1 -13
  470. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.d.ts +8 -9
  471. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmission.d.ts +13 -0
  472. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbOperationStepUp.d.ts +3 -4
  473. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +7 -33
  474. package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +1 -2
  475. package/dist/types/wallet-server/src/router/domains/syncAccount/syncAccountRequestValidation.d.ts +2 -7
  476. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +1 -0
  477. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationReservation.d.ts +51 -0
  478. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +2 -10
  479. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +2 -2
  480. package/dist/types/wallet-server/src/router/framework/apiCredentialPorts.d.ts +3 -1
  481. package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +39 -38
  482. package/dist/types/wallet-server/src/router/framework/googleLoginResolution.typecheck.d.ts +2 -0
  483. package/dist/types/wallet-server/src/router/framework/http.d.ts +1 -0
  484. package/dist/types/wallet-server/src/router/framework/registrationSetupDispatch.d.ts +13 -0
  485. package/dist/types/wallet-server/src/router/framework/ror/normalize.d.ts +1 -9
  486. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +1 -1
  487. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.d.ts +3 -6
  488. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingResponses.d.ts +17 -0
  489. package/dist/types/wallet-server/src/router/transport/fetch/routes/ecdsaOperationStepUpFactor.d.ts +37 -0
  490. package/dist/types/wallet-server/src/router/transport/fetch/routes/syncAccountBootstrap.d.ts +3 -5
  491. package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEcdsa.d.ts +0 -1
  492. package/dist/types/wallet-server/src/storage/d1Sql.d.ts +0 -1
  493. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/idempotencyRecords.d.ts +1 -2
  494. package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/signingSessionSeal.types.d.ts +6 -8
  495. package/migrations/d1-signer/0040_namespace_home_challenges.sql +16 -0
  496. package/migrations/d1-signer/0041_step_up_admission_expiry.sql +28 -0
  497. package/migrations/d1-signer/0042_deployment_resource_challenges.sql +4 -0
  498. package/migrations/d1-signer/0043_google_registration_candidate_claim.sql +2 -0
  499. package/migrations/d1-signer/0044_linked_device_bootstrap_imports.sql +6 -0
  500. package/migrations/d1-signer/0045_wallet_owned_capability_receipts.sql +29 -0
  501. package/migrations/d1-signer/0046_wallet_owned_signing_abuse.sql +41 -0
  502. package/migrations/d1-signer/0047_remove_unused_near_public_keys.sql +2 -0
  503. package/migrations/d1-signer/0048_operation_owner_scope.sql +45 -0
  504. package/package.json +2 -3
  505. package/src/README.md +11 -3
  506. package/dist/esm/core/AuthService.js +0 -2
  507. package/dist/esm/core/NearPublicKeyStore.js +0 -200
  508. package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +0 -397
  509. package/dist/esm/core/ThresholdService/stores/KeyStore.js +0 -140
  510. package/dist/esm/core/ThresholdService/stores/SessionStore.js +0 -361
  511. package/dist/esm/core/ThresholdService/stores/StoreConfig.js +0 -13
  512. package/dist/esm/core/authService/AuthService.js +0 -594
  513. package/dist/esm/core/authService/bytes.js +0 -22
  514. package/dist/esm/core/authService/configValues.js +0 -15
  515. package/dist/esm/core/authService/emailOtpChallengeOperations.js +0 -126
  516. package/dist/esm/core/authService/emailOtpChallengeProof.js +0 -214
  517. package/dist/esm/core/authService/emailOtpChallengeVerification.js +0 -335
  518. package/dist/esm/core/authService/emailOtpChallenges.js +0 -260
  519. package/dist/esm/core/authService/emailOtpDelivery.js +0 -169
  520. package/dist/esm/core/authService/emailOtpGrant.js +0 -74
  521. package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +0 -175
  522. package/dist/esm/core/authService/emailOtpUnlock.js +0 -264
  523. package/dist/esm/core/authService/googleEmailOtpOperations.js +0 -141
  524. package/dist/esm/core/authService/googleEmailOtpRegistration.js +0 -674
  525. package/dist/esm/core/authService/identity.js +0 -57
  526. package/dist/esm/core/authService/identityOperations.js +0 -32
  527. package/dist/esm/core/authService/nearAccountOperations.js +0 -229
  528. package/dist/esm/core/authService/nearPublicKeyMetadata.js +0 -127
  529. package/dist/esm/core/authService/oidcVerification.js +0 -261
  530. package/dist/esm/core/authService/registrationThresholdHelpers.js +0 -30
  531. package/dist/esm/core/authService/runtime.js +0 -45
  532. package/dist/esm/core/authService/storeRegistry.js +0 -102
  533. package/dist/esm/core/authService/thresholdStoreSummary.js +0 -32
  534. package/dist/esm/core/authService/webauthnAuthority.js +0 -17
  535. package/dist/esm/core/defaultConfigsServer.js +0 -9
  536. package/dist/esm/core/hostedAccountIds.js +0 -225
  537. package/dist/esm/core/routerAbSigning/createRouterAbSigningRuntimes.js +0 -84
  538. package/dist/esm/core/signingLanes/LaneAggregateRevocationApplicationService.js +0 -86
  539. package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +0 -324
  540. package/dist/esm/core/signingLanes/LaneEnrollmentRevocation.js +0 -173
  541. package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +0 -198
  542. package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +0 -73
  543. package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +0 -68
  544. package/dist/esm/core/signingLanes/signingWorkerLaneMaterialIdentity.js +0 -0
  545. package/dist/esm/core/storeBackends.js +0 -208
  546. package/dist/esm/core/utils.js +0 -14
  547. package/dist/esm/core/webAuthnStoreBackends.js +0 -198
  548. package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +0 -56
  549. package/dist/esm/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.js +0 -10
  550. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.js +0 -22
  551. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -166
  552. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.js +0 -38
  553. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.js +0 -20
  554. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +0 -1459
  555. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLockStore.js +0 -114
  556. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.js +0 -16
  557. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +0 -171
  558. package/dist/esm/router/cloudflare/d1/signingLanes/index.js +0 -10
  559. package/dist/esm/router/cloudflare/durableObjects/thresholdStore.js +0 -404
  560. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +0 -596
  561. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +0 -273
  562. package/dist/esm/router/cloudflare/signingLanes/index.js +0 -4
  563. package/dist/esm/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.js +0 -32
  564. package/dist/esm/router/transport/fetch/routes/nearPublicKeys.js +0 -39
  565. package/dist/esm/shared-ts/src/signing-lanes/rotation.js +0 -8
  566. package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +0 -358
  567. package/dist/esm/shared-ts/src/signing-lanes/rotationLifecycle.js +0 -313
  568. package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +0 -532
  569. package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +0 -323
  570. package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +0 -59
  571. package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm +0 -0
  572. package/dist/types/shared-ts/src/signing-lanes/participantDigest.typecheck.d.ts +0 -2
  573. package/dist/types/shared-ts/src/signing-lanes/rotation.typecheck.d.ts +0 -2
  574. package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +0 -13
  575. package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +0 -78
  576. package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +0 -27
  577. package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +0 -6
  578. package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +0 -20
  579. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeAttempt.d.ts +0 -59
  580. package/dist/types/wallet-server/src/core/AuthService.d.ts +0 -3
  581. package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +0 -48
  582. package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +0 -21
  583. package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +0 -40
  584. package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +0 -98
  585. package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +0 -4
  586. package/dist/types/wallet-server/src/core/ThresholdService/stores/ThresholdStoreConfig.typecheck.d.ts +0 -2
  587. package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -490
  588. package/dist/types/wallet-server/src/core/authService/bytes.d.ts +0 -4
  589. package/dist/types/wallet-server/src/core/authService/configValues.d.ts +0 -7
  590. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +0 -109
  591. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +0 -169
  592. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +0 -47
  593. package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +0 -94
  594. package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +0 -66
  595. package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +0 -43
  596. package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +0 -49
  597. package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +0 -71
  598. package/dist/types/wallet-server/src/core/authService/googleEmailOtpOperations.d.ts +0 -126
  599. package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +0 -169
  600. package/dist/types/wallet-server/src/core/authService/identity.d.ts +0 -25
  601. package/dist/types/wallet-server/src/core/authService/identityOperations.d.ts +0 -19
  602. package/dist/types/wallet-server/src/core/authService/nearAccountOperations.d.ts +0 -55
  603. package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +0 -44
  604. package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +0 -66
  605. package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -11
  606. package/dist/types/wallet-server/src/core/authService/runtime.d.ts +0 -20
  607. package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -53
  608. package/dist/types/wallet-server/src/core/authService/thresholdStoreSummary.d.ts +0 -3
  609. package/dist/types/wallet-server/src/core/authService/webauthnAuthority.d.ts +0 -5
  610. package/dist/types/wallet-server/src/core/defaultConfigsServer.d.ts +0 -5
  611. package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -16
  612. package/dist/types/wallet-server/src/core/routerAbSigning/createRouterAbSigningRuntimes.d.ts +0 -16
  613. package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +0 -36
  614. package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +0 -62
  615. package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentActivation.d.ts +0 -13
  616. package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentRevocation.d.ts +0 -24
  617. package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleApplicationService.d.ts +0 -141
  618. package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +0 -228
  619. package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +0 -58
  620. package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +0 -30
  621. package/dist/types/wallet-server/src/core/signingLanes/signingWorkerLaneMaterialIdentity.d.ts +0 -21
  622. package/dist/types/wallet-server/src/core/storeBackends.d.ts +0 -83
  623. package/dist/types/wallet-server/src/core/utils.d.ts +0 -3
  624. package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +0 -96
  625. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +0 -29
  626. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.d.ts +0 -4
  627. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.d.ts +0 -4
  628. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -24
  629. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.d.ts +0 -20
  630. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.d.ts +0 -13
  631. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.d.ts +0 -51
  632. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLockStore.d.ts +0 -28
  633. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.d.ts +0 -5
  634. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneRecords.d.ts +0 -107
  635. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/index.d.ts +0 -10
  636. package/dist/types/wallet-server/src/router/cloudflare/durableObjects/thresholdStore.d.ts +0 -18
  637. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.d.ts +0 -217
  638. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.d.ts +0 -73
  639. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/index.d.ts +0 -4
  640. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.d.ts +0 -6
  641. package/dist/types/wallet-server/src/router/transport/fetch/routes/nearPublicKeys.d.ts +0 -3
  642. /package/dist/esm/{core/signingLanes/LaneEffectJournalStore.js → authorization/recoveryRouting.js} +0 -0
  643. /package/dist/esm/{core/signingLanes/LaneLifecycleStore.js → authorization/sessionRouting.js} +0 -0
@@ -1,29 +0,0 @@
1
- import type { ScopedD1Prepare } from '../../../../core/emailOtpD1Statements';
2
- import { type NearPublicKeyRecord } from '../webauthn/d1WebAuthnRecords';
3
- type D1NearPublicKeyListResult = {
4
- readonly ok: true;
5
- readonly keys: {
6
- readonly publicKey: string;
7
- readonly kind: NearPublicKeyRecord['kind'];
8
- readonly signerSlot?: number;
9
- readonly createdAtMs?: number;
10
- readonly updatedAtMs?: number;
11
- readonly authBinding?: NearPublicKeyRecord['authBinding'];
12
- }[];
13
- } | {
14
- readonly ok: false;
15
- readonly code: 'invalid_args' | 'internal';
16
- readonly message: string;
17
- };
18
- export declare class CloudflareD1NearPublicKeyStore {
19
- private readonly prepare;
20
- constructor(input: {
21
- readonly prepare: ScopedD1Prepare;
22
- });
23
- listForRelayUser(input: {
24
- readonly userId?: unknown;
25
- }): Promise<D1NearPublicKeyListResult>;
26
- listForUser(userId: string): Promise<NearPublicKeyRecord[]>;
27
- }
28
- export {};
29
- //# sourceMappingURL=d1NearPublicKeyStore.d.ts.map
@@ -1,4 +0,0 @@
1
- import { type EcdsaOwnerSourceSignerContinuityPortV1, type EcdsaLanePrivateBindingResolverPortV1 } from '../../signingLanes/cloudflareLaneCurveExecution';
2
- import type { CloudflareD1LaneStoreOptions } from './d1LaneRecords';
3
- export declare function createCloudflareD1EcdsaLanePrivateBindingResolverV1(options: CloudflareD1LaneStoreOptions & EcdsaOwnerSourceSignerContinuityPortV1): EcdsaLanePrivateBindingResolverPortV1;
4
- //# sourceMappingURL=d1EcdsaLanePrivateBindingResolver.d.ts.map
@@ -1,4 +0,0 @@
1
- import { LaneAggregateRevocationApplicationService } from '../../../../core/signingLanes/LaneAggregateRevocationApplicationService';
2
- import type { CloudflareD1LaneLifecycleApplicationServiceOptions } from './d1LaneLifecycleApplicationService';
3
- export declare function createCloudflareD1LaneAggregateRevocationApplicationService(options: CloudflareD1LaneLifecycleApplicationServiceOptions): LaneAggregateRevocationApplicationService;
4
- //# sourceMappingURL=d1LaneAggregateRevocationApplicationService.d.ts.map
@@ -1,24 +0,0 @@
1
- import type { LaneEffectJournalStore, LaneEffectMutation, LaneEffectMutationResult, LaneEffectRecordV1 } from '../../../../core/signingLanes/LaneEffectJournalStore';
2
- import { type CloudflareD1LaneStoreOptions } from './d1LaneRecords';
3
- export type CloudflareD1LaneEffectJournalStoreOptions = CloudflareD1LaneStoreOptions;
4
- export declare class CloudflareD1LaneEffectJournalStore implements LaneEffectJournalStore {
5
- private readonly database;
6
- private readonly scope;
7
- constructor(options: CloudflareD1LaneEffectJournalStoreOptions);
8
- getEffect(input: {
9
- readonly effectId: string;
10
- }): Promise<{
11
- readonly version: number;
12
- readonly commandDigestB64u: string;
13
- readonly record: LaneEffectRecordV1;
14
- } | null>;
15
- recordEffect(input: LaneEffectMutation): Promise<LaneEffectMutationResult>;
16
- confirmEffect(input: {
17
- readonly effectId: string;
18
- readonly expectedVersion: number;
19
- readonly commandDigestB64u: string;
20
- readonly responseDigestB64u: string;
21
- readonly confirmedAtMs: number;
22
- }): Promise<LaneEffectMutationResult>;
23
- }
24
- //# sourceMappingURL=d1LaneEffectJournalStore.d.ts.map
@@ -1,20 +0,0 @@
1
- import type { LaneEnrollmentGatewayV1 } from '../../../../../../shared-ts/src/signing-lanes';
2
- import type { LaneLifecycleStore } from '../../../../core/signingLanes/LaneLifecycleStore';
3
- export type CloudflareD1LaneEnrollmentGatewayOptions = {
4
- readonly lifecycleStore: LaneLifecycleStore;
5
- };
6
- /** D1 gateway composition. Participant network calls are injected by callers. */
7
- export declare class CloudflareD1LaneEnrollmentGateway implements LaneEnrollmentGatewayV1 {
8
- private readonly activation;
9
- private readonly revocation;
10
- constructor(options: CloudflareD1LaneEnrollmentGatewayOptions);
11
- prepareLaneEnrollmentV1(...args: Parameters<LaneEnrollmentGatewayV1['prepareLaneEnrollmentV1']>): ReturnType<LaneEnrollmentGatewayV1['prepareLaneEnrollmentV1']>;
12
- resumeLaneProtocolOperationV1(...args: Parameters<LaneEnrollmentGatewayV1['resumeLaneProtocolOperationV1']>): ReturnType<LaneEnrollmentGatewayV1['resumeLaneProtocolOperationV1']>;
13
- recordLaneProtocolCommitV1(...args: Parameters<LaneEnrollmentGatewayV1['recordLaneProtocolCommitV1']>): ReturnType<LaneEnrollmentGatewayV1['recordLaneProtocolCommitV1']>;
14
- recordLaneHolderDeliveryV1(...args: Parameters<LaneEnrollmentGatewayV1['recordLaneHolderDeliveryV1']>): ReturnType<LaneEnrollmentGatewayV1['recordLaneHolderDeliveryV1']>;
15
- activateLaneServerMaterialV1(...args: Parameters<LaneEnrollmentGatewayV1['activateLaneServerMaterialV1']>): ReturnType<LaneEnrollmentGatewayV1['activateLaneServerMaterialV1']>;
16
- commitLaneEnrollmentActivationV1(...args: Parameters<LaneEnrollmentGatewayV1['commitLaneEnrollmentActivationV1']>): ReturnType<LaneEnrollmentGatewayV1['commitLaneEnrollmentActivationV1']>;
17
- fenceSigningLaneRevocationV1(...args: Parameters<LaneEnrollmentGatewayV1['fenceSigningLaneRevocationV1']>): ReturnType<LaneEnrollmentGatewayV1['fenceSigningLaneRevocationV1']>;
18
- completeSigningLaneRevocationV1(...args: Parameters<LaneEnrollmentGatewayV1['completeSigningLaneRevocationV1']>): ReturnType<LaneEnrollmentGatewayV1['completeSigningLaneRevocationV1']>;
19
- }
20
- //# sourceMappingURL=d1LaneEnrollmentGateway.d.ts.map
@@ -1,13 +0,0 @@
1
- import { LaneLifecycleApplicationService, type LaneLifecycleAuthorizationPortV1, type LaneLifecycleCurveExecutionPortsV1 } from '../../../../core/signingLanes/LaneLifecycleApplicationService';
2
- import type { CloudflareD1LaneStoreOptions } from './d1LaneRecords';
3
- export type CloudflareD1LaneLifecycleApplicationServiceOptions = CloudflareD1LaneStoreOptions & {
4
- readonly authorization: LaneLifecycleAuthorizationPortV1;
5
- readonly execution: LaneLifecycleCurveExecutionPortsV1;
6
- };
7
- /**
8
- * Builds the authenticated server-internal lane lifecycle boundary. Routes
9
- * should receive this service from their private composition and never expose
10
- * the receipt methods as a public raw-receipt endpoint.
11
- */
12
- export declare function createCloudflareD1LaneLifecycleApplicationService(options: CloudflareD1LaneLifecycleApplicationServiceOptions): LaneLifecycleApplicationService;
13
- //# sourceMappingURL=d1LaneLifecycleApplicationService.d.ts.map
@@ -1,51 +0,0 @@
1
- import type { CommitLaneEnrollmentActivationV1, LaneHolderDeliveryReceiptV1, LaneProductEpochRecordV1, LaneProtocolCommitReceiptV1, LaneProtocolRecordV1, LaneProtocolCasResultV1, LaneServerActivationReceiptV1, RevokeLaneEnrollmentV1, RevokeSigningLaneV1 } from '../../../../../../shared-ts/src/signing-lanes';
2
- import type { LaneEnrollmentId, LaneOperationId } from '../../../../../../shared-ts/src/signing-lanes';
3
- import type { LaneAdmissionMutationResult, LaneEnrollmentAdmissionInput, LaneEnrollmentAdmissionRecord, LaneEnrollmentLifecycleCasInput, LaneEnrollmentRevocationCommitInput, LaneEnrollmentRevocationCommitResult, LaneEnrollmentVisibilityCommitResult, LaneLifecycleStore, LaneProductEpochLookup, LaneActiveProductEpochLookup, LaneProtocolAdmissionInput, LaneProtocolAdmissionRecord, LaneProtocolLifecycleCasInput, LaneSigningLaneRevocationCommitInput, LaneSigningLaneRevocationFenceMutationResult, LaneSigningLaneRevocationMutationResult } from '../../../../core/signingLanes/LaneLifecycleStore';
4
- import { type CloudflareD1LaneStoreOptions } from './d1LaneRecords';
5
- export type CloudflareD1LaneLifecycleStoreOptions = CloudflareD1LaneStoreOptions;
6
- export declare class CloudflareD1LaneLifecycleStore implements LaneLifecycleStore {
7
- private readonly database;
8
- private readonly scope;
9
- private readonly now;
10
- constructor(options: CloudflareD1LaneLifecycleStoreOptions);
11
- getEnrollment(enrollmentId: LaneEnrollmentId): Promise<LaneEnrollmentAdmissionRecord | null>;
12
- getProtocol(operationId: LaneOperationId): Promise<LaneProtocolAdmissionRecord | null>;
13
- /**
14
- * Reads the committed protocol receipt only after verifying its persisted
15
- * digest, receipt identity, and active protocol lifecycle binding.
16
- */
17
- getProtocolCommitReceipt(operationId: LaneOperationId): Promise<LaneProtocolCommitReceiptV1 | null>;
18
- putEnrollmentAdmission(input: LaneEnrollmentAdmissionInput): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
19
- putProtocolAdmission(input: LaneProtocolAdmissionInput): Promise<LaneAdmissionMutationResult<LaneProtocolRecordV1>>;
20
- compareAndSetProtocolLifecycle(input: LaneProtocolLifecycleCasInput): Promise<LaneProtocolCasResultV1>;
21
- compareAndSetEnrollmentLifecycle(input: LaneEnrollmentLifecycleCasInput): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
22
- putProtocolCommitReceipt(receipt: LaneProtocolCommitReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneProtocolCommitReceiptV1>>;
23
- putHolderDeliveryReceipt(receipt: LaneHolderDeliveryReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneHolderDeliveryReceiptV1>>;
24
- putServerActivationReceipt(receipt: LaneServerActivationReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneServerActivationReceiptV1>>;
25
- putProductEpochPending(productEpoch: Extract<LaneProductEpochRecordV1, {
26
- state: 'pending_visibility';
27
- }>, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneProductEpochRecordV1>>;
28
- getProductEpoch(lookup: LaneProductEpochLookup): Promise<LaneProductEpochRecordV1 | null>;
29
- private getProductEpochStored;
30
- getActiveProductEpoch(lookup: LaneActiveProductEpochLookup): Promise<Extract<LaneProductEpochRecordV1, {
31
- state: 'active';
32
- }> | null>;
33
- listEnrollmentProductEpochs(enrollmentId: LaneEnrollmentId): Promise<readonly LaneProductEpochRecordV1[]>;
34
- commitEnrollmentVisibility(input: CommitLaneEnrollmentActivationV1): Promise<LaneEnrollmentVisibilityCommitResult>;
35
- fenceLaneRevocation(input: RevokeSigningLaneV1): Promise<LaneSigningLaneRevocationFenceMutationResult>;
36
- fenceEnrollmentRevocation(input: RevokeLaneEnrollmentV1): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
37
- private commitLaneRevocationFence;
38
- commitLaneRevocation(input: LaneSigningLaneRevocationCommitInput): Promise<LaneSigningLaneRevocationMutationResult>;
39
- commitEnrollmentRevocation(input: LaneEnrollmentRevocationCommitInput): Promise<LaneEnrollmentRevocationCommitResult>;
40
- private getFencedProductEpochByActivation;
41
- private protocolInsertStatement;
42
- private updateProtocolLifecycle;
43
- private updateEnrollmentLifecycle;
44
- private getEnrollmentRevocationFenceDigest;
45
- private updateEnrollmentRevocationFence;
46
- private putReceipt;
47
- private readAndVerifyServerRetirementReceipt;
48
- private verifyStoredRefreshPredecessorRetirements;
49
- private readReceipt;
50
- }
51
- //# sourceMappingURL=d1LaneLifecycleStore.d.ts.map
@@ -1,28 +0,0 @@
1
- import type { LaneEnrollmentId, WalletKeyId } from '../../../../../../shared-ts/src/signing-lanes';
2
- import type { LaneLockResult, LaneLockStore } from '../../../../core/signingLanes/LaneLifecycleStore';
3
- import { type CloudflareD1LaneStoreOptions } from './d1LaneRecords';
4
- export type CloudflareD1LaneLockStoreOptions = CloudflareD1LaneStoreOptions;
5
- export declare class CloudflareD1LaneLockStore implements LaneLockStore {
6
- private readonly database;
7
- private readonly scope;
8
- constructor(options: CloudflareD1LaneLockStoreOptions);
9
- acquireWalletKeyLock(input: {
10
- readonly walletKeyId: WalletKeyId;
11
- readonly lockId: string;
12
- readonly ttlMs: number;
13
- readonly nowMs: number;
14
- }): Promise<LaneLockResult>;
15
- acquireEnrollmentLock(input: {
16
- readonly enrollmentId: LaneEnrollmentId;
17
- readonly lockId: string;
18
- readonly ttlMs: number;
19
- readonly nowMs: number;
20
- }): Promise<LaneLockResult>;
21
- releaseLock(input: {
22
- readonly lockKey: string;
23
- readonly lockId: string;
24
- }): Promise<boolean>;
25
- private acquire;
26
- private read;
27
- }
28
- //# sourceMappingURL=d1LaneLockStore.d.ts.map
@@ -1,5 +0,0 @@
1
- import { CloudflareLaneProtocolCommitterV1, type CloudflareLaneProtocolCommitterOptionsV1 } from '../../signingLanes/cloudflareLaneProtocolCommitter';
2
- import type { CloudflareD1LaneStoreOptions } from './d1LaneRecords';
3
- export type CloudflareD1LaneProtocolCommitterOptionsV1 = CloudflareD1LaneStoreOptions & Omit<CloudflareLaneProtocolCommitterOptionsV1, 'gateway'>;
4
- export declare function createCloudflareD1LaneProtocolCommitterV1(options: CloudflareD1LaneProtocolCommitterOptionsV1): CloudflareLaneProtocolCommitterV1;
5
- //# sourceMappingURL=d1LaneProtocolCommitter.d.ts.map
@@ -1,107 +0,0 @@
1
- import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, LaneEnrollmentLifecycleV1, LaneEnrollmentManifestV1, LaneHolderDeliveryReceiptV1, LaneProductEpochRecordV1, LaneProtocolCommitReceiptV1, LaneProtocolRecordV1, LaneServerActivationReceiptV1, LaneServerRetirementReceiptV1, RevokeLaneEnrollmentV1 } from '../../../../../../shared-ts/src/signing-lanes';
2
- import type { D1DatabaseLike, D1ResultLike } from '../../../../storage/tenantRoute';
3
- export type CloudflareD1LaneScopeV1 = {
4
- readonly namespace: string;
5
- readonly orgId: string;
6
- readonly projectId: string;
7
- readonly envId: string;
8
- };
9
- export type CloudflareD1LaneStoreOptions = {
10
- readonly database: D1DatabaseLike;
11
- readonly scope: CloudflareD1LaneScopeV1;
12
- readonly now?: () => number;
13
- };
14
- export type LaneEnrollmentRow = {
15
- readonly enrollment_id?: unknown;
16
- readonly wallet_id?: unknown;
17
- readonly manifest_digest_b64u?: unknown;
18
- readonly manifest_json?: unknown;
19
- readonly lifecycle_json?: unknown;
20
- readonly version?: unknown;
21
- readonly command_digest_b64u?: unknown;
22
- readonly created_at_ms?: unknown;
23
- readonly updated_at_ms?: unknown;
24
- };
25
- export type LaneProtocolRow = {
26
- readonly operation_id?: unknown;
27
- readonly enrollment_id?: unknown;
28
- readonly wallet_id?: unknown;
29
- readonly wallet_key_id?: unknown;
30
- readonly source_lane_id?: unknown;
31
- readonly source_lane_share_epoch?: unknown;
32
- readonly source_revocation_epoch?: unknown;
33
- readonly target_lane_id?: unknown;
34
- readonly target_lane_share_epoch?: unknown;
35
- readonly target_material_activation_id?: unknown;
36
- readonly job_json?: unknown;
37
- readonly lifecycle_json?: unknown;
38
- readonly version?: unknown;
39
- readonly command_digest_b64u?: unknown;
40
- readonly created_at_ms?: unknown;
41
- readonly updated_at_ms?: unknown;
42
- };
43
- export type LaneProductEpochRow = {
44
- readonly product_json?: unknown;
45
- readonly version?: unknown;
46
- readonly command_digest_b64u?: unknown;
47
- };
48
- export type LaneReceiptRow = {
49
- readonly receipt_id?: unknown;
50
- readonly receipt_kind?: unknown;
51
- readonly receipt_digest_b64u?: unknown;
52
- readonly receipt_json?: unknown;
53
- readonly created_at_ms?: unknown;
54
- };
55
- export declare function requireD1LaneStoreOptions(input: CloudflareD1LaneStoreOptions): {
56
- readonly database: D1DatabaseLike;
57
- readonly scope: CloudflareD1LaneScopeV1;
58
- readonly now: () => number;
59
- };
60
- export declare function normalizeScope(scope: CloudflareD1LaneScopeV1): CloudflareD1LaneScopeV1;
61
- export declare function parseVersion(value: unknown, label: string): number;
62
- export declare function parseTimestamp(value: unknown, label: string): number;
63
- export declare function parseRequiredString(value: unknown, label: string): string;
64
- export declare function parseJsonRecord(value: unknown, label: string): Record<string, unknown>;
65
- /** Compare parsed JSON records without relying on insertion order. */
66
- export declare function equalLaneRecords(left: unknown, right: unknown): boolean;
67
- export declare function parseEnrollmentRow(row: LaneEnrollmentRow): {
68
- readonly enrollmentId: string;
69
- readonly walletId: string;
70
- readonly manifestDigestB64u: string;
71
- readonly manifest: LaneEnrollmentManifestV1;
72
- readonly lifecycle: LaneEnrollmentLifecycleV1;
73
- readonly version: number;
74
- readonly commandDigestB64u: string;
75
- readonly createdAtMs: number;
76
- readonly updatedAtMs: number;
77
- };
78
- export declare function parseProtocolRow(row: LaneProtocolRow): {
79
- readonly operationId: string;
80
- readonly enrollmentId: string;
81
- readonly walletId: string;
82
- readonly walletKeyId: string;
83
- readonly sourceLaneId: string;
84
- readonly sourceLaneShareEpoch: string;
85
- readonly sourceRevocationEpoch: number;
86
- readonly targetLaneId: string;
87
- readonly targetLaneShareEpoch: string;
88
- readonly targetMaterialActivationId: string;
89
- readonly record: LaneProtocolRecordV1;
90
- readonly version: number;
91
- readonly commandDigestB64u: string;
92
- readonly createdAtMs: number;
93
- readonly updatedAtMs: number;
94
- };
95
- export declare function parseProductEpochRow(row: LaneProductEpochRow): LaneProductEpochRecordV1;
96
- export declare function parseReceiptRow(row: LaneReceiptRow): {
97
- readonly receiptId: string;
98
- readonly receiptKind: string;
99
- readonly receiptDigestB64u: string;
100
- readonly value: LaneProtocolCommitReceiptV1 | LaneHolderDeliveryReceiptV1 | LaneServerActivationReceiptV1 | LaneServerRetirementReceiptV1 | AggregateLaneActivationReceiptV1 | AggregateLaneRevocationReceiptV1;
101
- };
102
- export declare function digestLaneEnrollmentRevocationCommand(input: RevokeLaneEnrollmentV1): Promise<string>;
103
- export declare function scopeValues(scope: CloudflareD1LaneScopeV1): readonly string[];
104
- export declare function firstBatchResult(results: readonly unknown[], index: number): D1ResultLike;
105
- export declare const LANE_CAS_GUARD_SQL = "INSERT INTO lane_cas_guard (guard_id) SELECT 1 WHERE changes() = 0";
106
- export declare function assertD1Success(result: D1ResultLike, label: string): void;
107
- //# sourceMappingURL=d1LaneRecords.d.ts.map
@@ -1,10 +0,0 @@
1
- export * from './d1LaneRecords';
2
- export * from './d1LaneLifecycleStore';
3
- export * from './d1EcdsaLanePrivateBindingResolver';
4
- export * from './d1LaneEffectJournalStore';
5
- export * from './d1LaneLockStore';
6
- export * from './d1LaneEnrollmentGateway';
7
- export * from './d1LaneLifecycleApplicationService';
8
- export * from './d1LaneAggregateRevocationApplicationService';
9
- export * from './d1LaneProtocolCommitter';
10
- //# sourceMappingURL=index.d.ts.map
@@ -1,18 +0,0 @@
1
- type DurableObjectStorageLike = {
2
- get(key: string): Promise<unknown>;
3
- put(key: string, value: unknown, opts?: {
4
- expirationTtl?: number;
5
- }): Promise<void>;
6
- delete(key: string): Promise<boolean>;
7
- transaction?<T>(fn: (txn: DurableObjectStorageLike) => Promise<T>): Promise<T>;
8
- };
9
- type DurableObjectStateLike = {
10
- storage: DurableObjectStorageLike;
11
- };
12
- export declare class ThresholdStoreDurableObject {
13
- private readonly state;
14
- constructor(state: DurableObjectStateLike, _env: unknown);
15
- fetch(request: Request): Promise<Response>;
16
- }
17
- export {};
18
- //# sourceMappingURL=thresholdStore.d.ts.map
@@ -1,217 +0,0 @@
1
- import type { EcdsaAdditiveLaneHolderRoundV1, EcdsaAdditiveLaneJobV1, Ed25519YaoLaneJobV1, LaneHolderDeliveryReceiptV1, LaneProtocolCommitReceiptV1, LaneServerActivationReceiptV1, LaneServerRetirementReceiptV1, LaneHolderPackageWireV1, LaneProductEpochActiveV1, RevokeSigningLaneV1 } from '../../../../../shared-ts/src/signing-lanes';
2
- import { type DigestB64u } from '../../../../../shared-ts/src/utils/canonicalPrimitives';
3
- import { type MpcMaterialActivationRef } from '../../../../../shared-ts/src/utils/domainIds';
4
- import type { LaneLifecycleCurveExecutionPortsV1 } from '../../../core/signingLanes/LaneLifecycleApplicationService';
5
- import type { LaneLifecycleStore, LaneProductEpochLookup } from '../../../core/signingLanes/LaneLifecycleStore';
6
- import type { WalletEcdsaSignerRecord } from '../../../core/WalletStore';
7
- import { type EcdsaServerRetirementBindingV1 } from '../../../core/signingLanes/ecdsaServerRetirement';
8
- import { type Ed25519ServerRetirementBindingV1 } from '../../../core/signingLanes/ed25519ServerRetirement';
9
- import type { EcdsaSigningWorkerLaneMaterialIdentityV1, SigningWorkerLaneMaterialIdentityV1 } from '../../../core/signingLanes/signingWorkerLaneMaterialIdentity';
10
- import type { CloudflareEd25519LaneProtocolTransportV1 } from './cloudflareLaneProtocolCommitter';
11
- type LaneMaterialMutationOutcomeV1 = 'applied' | 'replayed';
12
- export type SigningWorkerLaneProtocolCommitProjectionV1 = {
13
- readonly kind: 'signing_worker_lane_protocol_commit_projection_v1';
14
- readonly outcome: LaneMaterialMutationOutcomeV1;
15
- readonly receipt: LaneProtocolCommitReceiptV1;
16
- };
17
- export type SigningWorkerLaneServerActivationProjectionV1 = {
18
- readonly kind: 'signing_worker_lane_server_activation_projection_v1';
19
- readonly outcome: LaneMaterialMutationOutcomeV1;
20
- readonly receipt: LaneServerActivationReceiptV1;
21
- };
22
- export type SigningWorkerLaneRetirementProjectionV1 = {
23
- readonly kind: 'signing_worker_lane_retirement_projection_v1';
24
- readonly outcome: LaneMaterialMutationOutcomeV1;
25
- readonly command: RevokeSigningLaneV1;
26
- readonly retirementEffectBindingDigestB64u: string;
27
- readonly retirementReceipt: LaneServerRetirementReceiptV1;
28
- };
29
- /**
30
- * Receipt-only projection of the private SigningWorker material journal. The
31
- * encrypted active record and all plaintext material are intentionally absent.
32
- */
33
- export interface SigningWorkerLaneMaterialReceiptPortV1 {
34
- commitEcdsaProtocolV1(input: {
35
- readonly job: EcdsaAdditiveLaneJobV1;
36
- readonly holderRound: EcdsaAdditiveLaneHolderRoundV1;
37
- readonly holderPackage: Extract<LaneHolderPackageWireV1, {
38
- kind: 'ecdsa_additive_lane_holder_package_v1';
39
- }>;
40
- readonly encryptedDeltaPackageJson: string;
41
- }): Promise<SigningWorkerLaneProtocolCommitProjectionV1>;
42
- activateServerMaterialV1(input: {
43
- readonly curve: 'ed25519_yao';
44
- readonly job: Ed25519YaoLaneJobV1;
45
- readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
46
- readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
47
- } | {
48
- readonly curve: 'ecdsa_additive';
49
- readonly job: EcdsaAdditiveLaneJobV1;
50
- readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
51
- readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
52
- }): Promise<SigningWorkerLaneServerActivationProjectionV1>;
53
- retireServerMaterialV1(input: {
54
- readonly curve: 'ed25519_yao' | 'ecdsa_additive';
55
- readonly command: RevokeSigningLaneV1;
56
- }): Promise<SigningWorkerLaneRetirementProjectionV1>;
57
- }
58
- export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_EXECUTE_PATH_V1: "/router-ab/internal/signing-worker/ecdsa-additive-lane/execute";
59
- export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_ACTIVATE_PATH_V1: "/router-ab/internal/signing-worker/ecdsa-additive-lane/activate";
60
- export declare const CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_LANE_ACTIVATE_PATH_V1: "/router-ab/internal/signing-worker/ed25519-yao-lane/activate";
61
- export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_RETIRE_PATH_V1: "/router-ab/internal/signing-worker/ecdsa-additive-lane/retire";
62
- export declare const CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_LANE_RETIRE_PATH_V1: "/router-ab/internal/signing-worker/ed25519-yao-lane/retire";
63
- export interface EcdsaLanePrivateBindingResolverPortV1 {
64
- resolveSourceMaterialV1(input: {
65
- readonly job: EcdsaAdditiveLaneJobV1;
66
- }): Promise<CloudflareEcdsaLaneSourceMaterialV1>;
67
- resolveActivationBindingV1(input: {
68
- readonly job: EcdsaAdditiveLaneJobV1;
69
- readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
70
- }): Promise<{
71
- readonly identity: EcdsaSigningWorkerLaneMaterialIdentityV1;
72
- readonly targetMaterialActivation: MpcMaterialActivationRef;
73
- }>;
74
- resolveRetirementBindingV1(input: {
75
- readonly command: RevokeSigningLaneV1;
76
- }): Promise<EcdsaServerRetirementBindingV1>;
77
- }
78
- export interface Ed25519LanePrivateBindingResolverPortV1 {
79
- resolveRetirementBindingV1(input: {
80
- readonly command: RevokeSigningLaneV1;
81
- }): Promise<Ed25519ServerRetirementBindingV1>;
82
- }
83
- export declare class LaneLifecycleStoreEd25519LanePrivateBindingResolverV1 implements Ed25519LanePrivateBindingResolverPortV1 {
84
- private readonly lifecycleStore;
85
- constructor(lifecycleStore: Pick<LaneLifecycleStore, 'getProductEpoch' | 'getProtocol'>);
86
- resolveRetirementBindingV1(input: {
87
- readonly command: RevokeSigningLaneV1;
88
- }): Promise<Ed25519ServerRetirementBindingV1>;
89
- }
90
- export type CloudflareEcdsaLaneSourceMaterialV1 = {
91
- readonly kind: 'lane_material';
92
- readonly lookup: {
93
- readonly identity: EcdsaSigningWorkerLaneMaterialIdentityV1;
94
- readonly admittedLaneIdentityDigestB64u: DigestB64u;
95
- };
96
- } | {
97
- readonly kind: 'registration_activation';
98
- readonly lookup: {
99
- readonly accountId: EcdsaAdditiveLaneJobV1['walletId'];
100
- readonly materialActivationId: EcdsaAdditiveLaneJobV1['source']['materialActivation']['activationId'];
101
- readonly signingWorkerId: string;
102
- };
103
- readonly sourceDerivation: {
104
- readonly applicationBindingDigestB64u: string;
105
- readonly clientShareRetryCounter: number;
106
- };
107
- };
108
- export interface EcdsaOwnerSourceSignerContinuityPortV1 {
109
- listWalletEcdsaCustodyContinuity(input: {
110
- readonly walletId: string;
111
- }): Promise<readonly WalletEcdsaSignerRecord[]>;
112
- }
113
- export declare class LaneLifecycleStoreEcdsaLanePrivateBindingResolverV1 implements EcdsaLanePrivateBindingResolverPortV1 {
114
- private readonly lifecycleStore;
115
- private readonly walletRegistration;
116
- constructor(lifecycleStore: Pick<LaneLifecycleStore, 'getProductEpoch' | 'getProtocol'>, walletRegistration: EcdsaOwnerSourceSignerContinuityPortV1);
117
- resolveSourceMaterialV1(input: {
118
- readonly job: EcdsaAdditiveLaneJobV1;
119
- }): Promise<CloudflareEcdsaLaneSourceMaterialV1>;
120
- resolveActivationBindingV1(input: {
121
- readonly job: EcdsaAdditiveLaneJobV1;
122
- readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
123
- }): Promise<{
124
- readonly identity: EcdsaSigningWorkerLaneMaterialIdentityV1;
125
- readonly targetMaterialActivation: MpcMaterialActivationRef;
126
- }>;
127
- resolveRetirementBindingV1(input: {
128
- readonly command: RevokeSigningLaneV1;
129
- }): Promise<EcdsaServerRetirementBindingV1>;
130
- }
131
- export type CloudflareSigningWorkerEcdsaLaneTransportOptionsV1 = {
132
- readonly signingWorker: {
133
- fetch(request: Request): Promise<Response>;
134
- };
135
- readonly internalServiceAuth: string;
136
- readonly bindingResolver: EcdsaLanePrivateBindingResolverPortV1;
137
- readonly retirementTransport: Pick<SigningWorkerLaneMaterialReceiptPortV1, 'retireServerMaterialV1'>;
138
- };
139
- export type CloudflareSigningWorkerEcdsaRetirementTransportOptionsV1 = {
140
- readonly signingWorker: {
141
- fetch(request: Request): Promise<Response>;
142
- };
143
- readonly internalServiceAuth: string;
144
- readonly bindingResolver: Pick<EcdsaLanePrivateBindingResolverPortV1, 'resolveRetirementBindingV1'>;
145
- readonly ed25519BindingResolver: Ed25519LanePrivateBindingResolverPortV1;
146
- };
147
- export declare class CloudflareSigningWorkerEcdsaRetirementTransportV1 implements Pick<SigningWorkerLaneMaterialReceiptPortV1, 'retireServerMaterialV1'> {
148
- private readonly options;
149
- private readonly internalServiceAuth;
150
- constructor(options: CloudflareSigningWorkerEcdsaRetirementTransportOptionsV1);
151
- retireServerMaterialV1(input: {
152
- readonly curve: 'ed25519_yao' | 'ecdsa_additive';
153
- readonly command: RevokeSigningLaneV1;
154
- }): Promise<SigningWorkerLaneRetirementProjectionV1>;
155
- }
156
- export declare class CloudflareSigningWorkerEcdsaLaneTransportV1 implements SigningWorkerLaneMaterialReceiptPortV1 {
157
- private readonly options;
158
- private readonly internalServiceAuth;
159
- constructor(options: CloudflareSigningWorkerEcdsaLaneTransportOptionsV1);
160
- commitEcdsaProtocolV1(input: {
161
- readonly job: EcdsaAdditiveLaneJobV1;
162
- readonly holderRound: EcdsaAdditiveLaneHolderRoundV1;
163
- readonly holderPackage: Extract<LaneHolderPackageWireV1, {
164
- kind: 'ecdsa_additive_lane_holder_package_v1';
165
- }>;
166
- readonly encryptedDeltaPackageJson: string;
167
- }): Promise<SigningWorkerLaneProtocolCommitProjectionV1>;
168
- activateServerMaterialV1(input: {
169
- readonly curve: 'ed25519_yao';
170
- readonly job: Ed25519YaoLaneJobV1;
171
- readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
172
- readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
173
- } | {
174
- readonly curve: 'ecdsa_additive';
175
- readonly job: EcdsaAdditiveLaneJobV1;
176
- readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
177
- readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
178
- }): Promise<SigningWorkerLaneServerActivationProjectionV1>;
179
- retireServerMaterialV1(input: {
180
- readonly curve: 'ed25519_yao' | 'ecdsa_additive';
181
- readonly command: RevokeSigningLaneV1;
182
- }): Promise<SigningWorkerLaneRetirementProjectionV1>;
183
- }
184
- export type CloudflareLaneCurveExecutionOptionsV1 = {
185
- readonly ed25519Transport: CloudflareEd25519LaneProtocolTransportV1;
186
- readonly signingWorker: SigningWorkerLaneMaterialReceiptPortV1;
187
- };
188
- export declare function createCloudflareLaneCurveExecutionPortsV1(options: CloudflareLaneCurveExecutionOptionsV1): LaneLifecycleCurveExecutionPortsV1;
189
- export type CloudflareNormalSigningLaneMaterialAdmissionV1 = {
190
- readonly product: LaneProductEpochActiveV1;
191
- readonly source: {
192
- readonly kind: 'rotatable_lane';
193
- readonly lookup: {
194
- readonly identity: SigningWorkerLaneMaterialIdentityV1;
195
- readonly admittedLaneIdentityDigestB64u: DigestB64u;
196
- };
197
- readonly group_public_key: string;
198
- };
199
- };
200
- /**
201
- * Resolves one exact active child product before a normal-signing request is
202
- * forwarded to SigningWorker. The resolver deliberately requires immutable
203
- * lane coordinates and the full activation reference; activation IDs alone
204
- * cannot select a private lane artifact.
205
- */
206
- export declare class LaneLifecycleStoreNormalSigningLaneMaterialResolverV1 {
207
- private readonly lifecycleStore;
208
- constructor(lifecycleStore: Pick<LaneLifecycleStore, 'getEnrollment' | 'getProductEpoch' | 'getProtocol'>);
209
- resolveV1(input: {
210
- readonly lookup: LaneProductEpochLookup;
211
- readonly materialActivation: MpcMaterialActivationRef;
212
- readonly keyFamily: 'ed25519' | 'ecdsa_secp256k1';
213
- }): Promise<CloudflareNormalSigningLaneMaterialAdmissionV1>;
214
- }
215
- export declare function digestSigningWorkerLaneIdentityV1(identity: SigningWorkerLaneMaterialIdentityV1): Promise<DigestB64u>;
216
- export {};
217
- //# sourceMappingURL=cloudflareLaneCurveExecution.d.ts.map
@@ -1,73 +0,0 @@
1
- import type { EcdsaAdditiveLaneHolderRoundV1, EcdsaAdditiveLaneJobV1, Ed25519YaoLaneJobV1, LaneEnrollmentGatewayV1, LaneProtocolCasResultV1, LaneProtocolCommitReceiptV1, LaneHolderPackageWireV1 } from '../../../../../shared-ts/src/signing-lanes';
2
- import type { RouterAbEd25519YaoCeremonyBindingV1 } from '../../../../../shared-ts/src/utils/routerAbEd25519Yao';
3
- import { type LaneLifecycleAuthorizationPortV1, type LaneLifecycleCurveExecutionPortsV1 } from '../../../core/signingLanes/LaneLifecycleApplicationService';
4
- export declare const ROUTER_AB_ED25519_YAO_LANE_EXECUTE_PATH_V1: "/router-ab/internal/ed25519-yao/lane/execute";
5
- export interface CloudflareLaneServiceBindingV1 {
6
- fetch(request: Request): Promise<Response>;
7
- }
8
- /**
9
- * Resolves the public admitted binding for an already-encrypted client lane
10
- * dispatch. Client-root contributions and Deriver envelopes stay client-side.
11
- */
12
- export interface Ed25519YaoLaneBindingResolverPortV1 {
13
- resolveBindingV1(input: {
14
- readonly job: Ed25519YaoLaneJobV1;
15
- }): Promise<RouterAbEd25519YaoCeremonyBindingV1>;
16
- }
17
- export type CloudflareEd25519LaneProtocolTransportOptionsV1 = {
18
- readonly router: CloudflareLaneServiceBindingV1;
19
- readonly internalServiceAuth: string;
20
- readonly bindingResolver: Ed25519YaoLaneBindingResolverPortV1;
21
- };
22
- export type CloudflareEd25519LaneProtocolExecutionV1 = {
23
- readonly receipt: LaneProtocolCommitReceiptV1;
24
- readonly responseJson: string;
25
- };
26
- export declare class CloudflareEd25519LaneProtocolTransportV1 {
27
- private readonly options;
28
- private readonly internalServiceAuth;
29
- constructor(options: CloudflareEd25519LaneProtocolTransportOptionsV1);
30
- executeProtocolCommitV1(input: {
31
- readonly job: Ed25519YaoLaneJobV1;
32
- readonly requestJson: string;
33
- }): Promise<CloudflareEd25519LaneProtocolExecutionV1>;
34
- }
35
- export type CloudflareLaneProtocolCommitterOptionsV1 = {
36
- readonly gateway: LaneEnrollmentGatewayV1;
37
- readonly authorization: LaneLifecycleAuthorizationPortV1;
38
- readonly execution: LaneLifecycleCurveExecutionPortsV1;
39
- readonly ed25519Transport: CloudflareEd25519LaneProtocolTransportV1;
40
- };
41
- export type CloudflareEd25519LaneProtocolCommitResultV1 = {
42
- readonly receipt: LaneProtocolCommitReceiptV1;
43
- readonly protocolCasResult: LaneProtocolCasResultV1;
44
- readonly responseJson: string;
45
- };
46
- export type CloudflareEcdsaLaneProtocolCommitResultV1 = {
47
- readonly receipt: LaneProtocolCommitReceiptV1;
48
- readonly protocolCasResult: LaneProtocolCasResultV1;
49
- };
50
- /**
51
- * Runs one private MPC effect, then records its exact receipt through Gateway
52
- * CAS. A transport retry submits byte-identical input and relies on the
53
- * operation-scoped worker journal for replay.
54
- */
55
- export declare class CloudflareLaneProtocolCommitterV1 {
56
- private readonly options;
57
- constructor(options: CloudflareLaneProtocolCommitterOptionsV1);
58
- executeAndRecordEd25519YaoLaneV1(input: {
59
- readonly job: Ed25519YaoLaneJobV1;
60
- readonly requestJson: string;
61
- readonly expectedVersion: number;
62
- }): Promise<CloudflareEd25519LaneProtocolCommitResultV1>;
63
- executeAndRecordEcdsaAdditiveLaneV1(input: {
64
- readonly job: EcdsaAdditiveLaneJobV1;
65
- readonly holderRound: EcdsaAdditiveLaneHolderRoundV1;
66
- readonly holderPackage: Extract<LaneHolderPackageWireV1, {
67
- kind: 'ecdsa_additive_lane_holder_package_v1';
68
- }>;
69
- readonly encryptedDeltaPackageJson: string;
70
- readonly expectedVersion: number;
71
- }): Promise<CloudflareEcdsaLaneProtocolCommitResultV1>;
72
- }
73
- //# sourceMappingURL=cloudflareLaneProtocolCommitter.d.ts.map
@@ -1,4 +0,0 @@
1
- export * from './cloudflareLaneProtocolCommitter';
2
- export * from './cloudflareLaneCurveExecution';
3
- export * from './cloudflareOrdinaryInactiveSignerMaterialReservation';
4
- //# sourceMappingURL=index.d.ts.map
@@ -1,6 +0,0 @@
1
- import type { Ed25519YaoLaneJobV1 } from '../../../../../shared-ts/src/signing-lanes';
2
- import type { RouterAbEd25519YaoCeremonyBindingV1 } from '../../../../../shared-ts/src/utils/routerAbEd25519Yao';
3
- import type { Ed25519YaoLaneBindingResolverPortV1 } from './cloudflareLaneProtocolCommitter';
4
- export declare function createLinkedDeviceEd25519CeremonyBindingResolverV1(): Ed25519YaoLaneBindingResolverPortV1;
5
- export declare function buildLinkedDeviceEd25519CeremonyBindingV1(job: Ed25519YaoLaneJobV1): Promise<RouterAbEd25519YaoCeremonyBindingV1>;
6
- //# sourceMappingURL=linkedDeviceEd25519CeremonyBinding.d.ts.map
@@ -1,3 +0,0 @@
1
- import type { FetchRouterApiContext } from '../createFetchRouter';
2
- export declare function handleNearPublicKeys(ctx: FetchRouterApiContext): Promise<Response | null>;
3
- //# sourceMappingURL=nearPublicKeys.d.ts.map