@seams/wallet-server 0.7.1 → 0.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/THIRD_PARTY_NOTICES.md +1 -113
- package/artifact-manifest.json +78 -33
- package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/router/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/router/index.js +2 -2
- package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
- package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
- package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
- package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +0 -2
- package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +77 -20
- package/dist/esm/authorization/lifecycleRouting.js +62 -0
- package/dist/esm/authorization/service.js +43 -12
- package/dist/esm/authorization/vaultProxyUse.js +2 -6
- package/dist/esm/cloud-host.js +23 -25
- package/dist/esm/core/EmailOtpRecords.js +1 -217
- package/dist/esm/core/EmailOtpStores.js +0 -859
- package/dist/esm/core/IdentityStore.js +2 -426
- package/dist/esm/core/SessionService.js +7 -30
- package/dist/esm/core/ThresholdService/config.js +1 -9
- package/dist/esm/core/ThresholdService/index.js +0 -4
- package/dist/esm/core/ThresholdService/kv.js +1 -66
- package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +1 -13
- package/dist/esm/core/ThresholdService/routerAbNormalSigningPolicy.js +4 -21
- package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +0 -617
- package/dist/esm/core/ThresholdService/validation.js +2 -346
- package/dist/esm/core/WalletAuthMethodStore.js +2 -123
- package/dist/esm/core/WalletStore.js +6 -214
- package/dist/esm/core/WebAuthnAuthenticatorStore.js +0 -202
- package/dist/esm/core/WebAuthnCredentialBindingStore.js +2 -182
- package/dist/esm/core/WebAuthnLoginChallengeStore.js +0 -52
- package/dist/esm/core/WebAuthnSyncChallengeStore.js +0 -54
- package/dist/esm/core/authService/emailOtpConfig.js +1 -195
- package/dist/esm/core/authService/emailOtpEnrollment.js +0 -141
- package/dist/esm/core/authService/emailOtpSeal.js +0 -78
- package/dist/esm/core/authService/nearTransactions.js +3 -98
- package/dist/esm/core/authService/rateLimits.js +0 -87
- package/dist/esm/core/authService/thresholdEcdsaKeyInventory.js +2 -1
- package/dist/esm/core/authService/webauthn.js +14 -464
- package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -24
- package/dist/esm/core/authService/webauthnVerificationOutcomes.js +5 -24
- package/dist/esm/core/authService/webauthnWalletBinding.js +0 -37
- package/dist/esm/core/config.js +1 -95
- package/dist/esm/core/d1EcdsaSignerRead.js +76 -0
- package/dist/esm/core/d1IdentityStore.js +17 -77
- package/dist/esm/core/d1TenantStore.js +1 -24
- package/dist/esm/core/d1WalletAuthMethodStore.js +2 -5
- package/dist/esm/core/d1WalletStore.js +15 -25
- package/dist/esm/core/deviceLinking/linkedDeviceBootstrap.js +13 -0
- package/dist/esm/core/deviceLinking/linkedDeviceEmailOtpGrant.js +1 -5
- package/dist/esm/core/deviceLinking/linkedDeviceSession.js +20 -14
- package/dist/esm/core/deviceLinking/linkedDeviceSessionApproval.js +1 -3
- package/dist/esm/core/deviceLinking/linkedDeviceSessionRecord.js +2 -8
- package/dist/esm/core/deviceLinking/requestProof.js +22 -10
- package/dist/esm/core/ecdsaMaterialReadSnapshot.js +85 -0
- package/dist/esm/core/emailOtpD1Statements.js +107 -94
- package/dist/esm/core/keyMaterialBrands.js +2 -12
- package/dist/esm/core/nearKeys.js +0 -1
- package/dist/esm/core/nearRelayerAccountProvisioning.js +8 -14
- package/dist/esm/core/passkeyCredentialClaims.js +8 -0
- package/dist/esm/core/routerAbSigning/RouterAbEcdsaPresignRuntime.js +2 -6
- package/dist/esm/core/routerAbSigning/RouterAbNormalSigningRuntime.js +2 -30
- package/dist/esm/core/signingLanes/WalletExecutionLaneProjection.js +3 -6
- package/dist/esm/core/signingMaterial/ordinaryInactiveSignerMaterialReservation.js +2 -5
- package/dist/esm/core/thresholdEcdsaChainTarget.js +2 -7
- package/dist/esm/hosted-wallet-gateway.js +68 -45
- package/dist/esm/index.js +6 -19
- package/dist/esm/localHostedWalletGatewayHandler.js +25 -0
- package/dist/esm/localIntendedMaterialAdmissionFault.js +176 -0
- package/dist/esm/localIntendedPresignCancellation.js +44 -0
- package/dist/esm/localRegistrationSetupAuthority.js +89 -0
- package/dist/esm/router/auth/authRequestValidation.js +8 -16
- package/dist/esm/router/auth/commonRouterUtils.js +24 -10
- package/dist/esm/router/auth/walletSessionFailure.js +2 -5
- package/dist/esm/router/auth/webAuthnCredentialCodecs.js +4 -16
- package/dist/esm/router/cloudflare/d1/auth/d1AuthorizationAssembly.js +87 -0
- package/dist/esm/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.js +1 -0
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.js +2 -6
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthConfig.js +12 -2
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +37 -308
- package/dist/esm/router/cloudflare/d1/auth/walletSessionCredentialReaders.js +76 -0
- package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +52 -43
- package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +217 -50
- package/dist/esm/router/cloudflare/d1/authorization/d1VaultProxyStore.js +8 -12
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +62 -21
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEd25519ExportRootStore.js +6 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +12 -2
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +4 -4
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +1 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -9
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.js +2 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +89 -7
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +24 -15
- package/dist/esm/router/cloudflare/d1/deviceLinking/index.js +3 -3
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +9 -6
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.js +12 -56
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.js +17 -81
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpDeliveryRuntime.js +6 -25
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +1 -7
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.js +19 -13
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +12 -48
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +24 -86
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +9 -32
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.js +5 -21
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +44 -12
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +1 -49
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +37 -136
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.js +85 -0
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +0 -1
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityService.js +9 -88
- package/dist/esm/router/cloudflare/d1/near/d1SponsoredNearAccount.js +242 -0
- package/dist/esm/router/cloudflare/d1/oidc/d1OidcBoundary.js +18 -92
- package/dist/esm/router/cloudflare/d1/oidc/d1OidcVerificationService.js +4 -55
- package/dist/esm/router/cloudflare/d1/oidc/googleOidcToken.js +41 -0
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +9 -15
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +36 -7
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpRecords.js +9 -13
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletRecoveryGoogleEmailOtpService.js +11 -50
- package/dist/esm/router/cloudflare/d1/registration/d1EvmFamilyEcdsaRegistrationBranch.js +5 -20
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +13 -10
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +9 -14
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +25 -13
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +7 -31
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationSetupSupport.js +74 -0
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +7 -1
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +101 -260
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +12 -56
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.js +155 -0
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +1 -3
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js +1 -4
- package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +131 -31
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.js +68 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +7 -54
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +9 -8
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +2 -142
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +55 -171
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +10 -79
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +23 -7
- package/dist/esm/router/cloudflare/runtime/routerAbPrewarm.js +2 -2
- package/dist/esm/router/cloudflare/runtime/staticWalletConsoleBinding.js +6 -20
- package/dist/esm/router/cloudflare/runtime/tenantRootCreationGrant.js +2 -9
- package/dist/esm/router/cloudflare/runtime/walletConsoleOps.js +1 -0
- package/dist/esm/router/cloudflare/runtime/walletConsoleOpsClient.js +5 -0
- package/dist/esm/router/cloudflare/runtime/walletControlOps.js +2 -1
- package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
- package/dist/esm/router/cloudflare/runtime/walletRuntimeOps.js +16 -4
- package/dist/esm/router/cloudflare-adaptor.js +1 -2
- package/dist/esm/router/cloudflare.js +3390 -3437
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +11 -8
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +3 -2
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +6 -6
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPersistence.js +5 -8
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +6 -6
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +3 -0
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +8 -0
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryWalletSessionAuthorization.js +3 -6
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js +6 -25
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.js +39 -55
- package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +0 -1
- package/dist/esm/router/domains/emailOtp/emailOtpRouteHandlers.js +15 -62
- package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.js +2 -8
- package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -8
- package/dist/esm/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.js +83 -74
- package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmission.js +1 -0
- package/dist/esm/router/domains/signingOperations/routerAbOperationStepUp.js +1 -0
- package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +5 -19
- package/dist/esm/router/domains/signingOperations/walletExecutionAdmission.js +3 -7
- package/dist/esm/router/domains/tenantRoot/tenantRootIdentityResolution.js +7 -13
- package/dist/esm/router/domains/walletRegistration/walletRegistrationReservation.js +70 -0
- package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +10 -11
- package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +2 -3
- package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +55 -200
- package/dist/esm/router/express.js +858 -1145
- package/dist/esm/router/framework/http.js +7 -1
- package/dist/esm/router/framework/registrationSetupDispatch.js +14 -0
- package/dist/esm/router/framework/ror/normalize.js +0 -1
- package/dist/esm/router/framework/ror/options.js +0 -1
- package/dist/esm/router/framework/ror/provider.js +0 -1
- package/dist/esm/router/framework/ror/staticProvider.js +0 -1
- package/dist/esm/router/framework/routeDefinitions.js +1 -2
- package/dist/esm/router/framework/routerApiWebhooks.js +0 -1
- package/dist/esm/router/framework/runtimeSnapshotConsumer.js +8 -35
- package/dist/esm/router/ror.js +0 -1
- package/dist/esm/router/transport/fetch/createFetchRouter.js +3 -8
- package/dist/esm/router/transport/fetch/routes/auth.js +11 -41
- package/dist/esm/router/transport/fetch/routes/deviceLinking.js +36 -147
- package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +7 -23
- package/dist/esm/router/transport/fetch/routes/deviceLinkingResponses.js +130 -0
- package/dist/esm/router/transport/fetch/routes/ecdsaOperationStepUpFactor.js +171 -0
- package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +1 -0
- package/dist/esm/router/transport/fetch/routes/sessions.js +1 -0
- package/dist/esm/router/transport/fetch/routes/syncAccount.js +15 -38
- package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +46 -194
- package/dist/esm/router/transport/fetch/routes/walletExecutionLanePreflight.js +4 -1
- package/dist/esm/router/transport/fetch/routes/walletRegistration.js +3 -1
- package/dist/esm/router/transport/fetch/routes/webauthnAuthenticators.js +4 -16
- package/dist/esm/shared-ts/src/authorization/walletSessionIssuance.js +0 -1
- package/dist/esm/shared-ts/src/authorization/walletSignerActivationEquality.js +12 -0
- package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +0 -2
- package/dist/esm/shared-ts/src/device-linking/committedSignerPackages.js +2 -5
- package/dist/esm/shared-ts/src/device-linking/contracts.js +16 -1
- package/dist/esm/shared-ts/src/device-linking/delegatedActivationPlan.js +1 -5
- package/dist/esm/shared-ts/src/device-linking/digests.js +1 -8
- package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +12 -16
- package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +5 -8
- package/dist/esm/shared-ts/src/near/actions.js +0 -1
- package/dist/esm/shared-ts/src/near/nearClient.js +0 -2
- package/dist/esm/shared-ts/src/passkey-custody/primitives.js +5 -1
- package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -1
- package/dist/esm/shared-ts/src/signing-lanes/index.js +1 -6
- package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +5 -9
- package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +2 -81
- package/dist/esm/shared-ts/src/signing-lanes/participants.js +1 -219
- package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +0 -3
- package/dist/esm/shared-ts/src/tenant-root/tenantRootIdentifier.js +12 -0
- package/dist/esm/shared-ts/src/tenant-root/tenantRootIdentity.js +2 -9
- package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +2 -6
- package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +0 -1
- package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +1 -22
- package/dist/esm/shared-ts/src/threshold/participants.js +0 -1
- package/dist/esm/shared-ts/src/threshold/signingRootScope.js +0 -1
- package/dist/esm/shared-ts/src/utils/addWalletAuthMethod.js +4 -13
- package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +1 -7
- package/dist/esm/shared-ts/src/utils/domainIds.js +1 -16
- package/dist/esm/shared-ts/src/utils/ecdsaCapabilityActivation.js +1 -11
- package/dist/esm/shared-ts/src/utils/ecdsaKeyFactsInventory.js +2 -5
- package/dist/esm/shared-ts/src/utils/ecdsaServerTiming.js +0 -1
- package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +3 -1
- package/dist/esm/shared-ts/src/utils/errors.js +1 -19
- package/dist/esm/shared-ts/src/utils/exactKeys.js +17 -0
- package/dist/esm/shared-ts/src/utils/failure.js +20 -0
- package/dist/esm/shared-ts/src/utils/near.js +1 -1
- package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +1 -1
- package/dist/esm/shared-ts/src/utils/registrationIds.js +1 -5
- package/dist/esm/shared-ts/src/utils/registrationIntent.js +3 -13
- package/dist/esm/shared-ts/src/utils/registrationSetupOperation.js +8 -0
- package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +3 -6
- package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +1 -2
- package/dist/esm/shared-ts/src/utils/routerAbEd25519Yao.js +1 -1
- package/dist/esm/shared-ts/src/utils/thresholdEcdsaChainTarget.js +9 -0
- package/dist/esm/shared-ts/src/utils/validation.js +1 -5
- package/dist/esm/shared-ts/src/utils/walletAuthAuthority.js +0 -1
- package/dist/esm/shared-ts/src/utils/walletManagementProtocol.js +6 -0
- package/dist/esm/shared-ts/src/utils/wireSchema.js +2 -13
- package/dist/esm/shared-ts/src/wallet-recovery/backupAcknowledgement.js +6 -24
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +0 -1
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryKeyId.js +5 -6
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryCommittedProjection.js +1 -4
- package/dist/esm/storage/d1Sql.js +1 -7
- package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +10 -33
- package/dist/esm/threshold/session/signingSessionSeal/guards/backends.js +1 -2
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyBackends.js +3 -4
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +3 -10
- package/dist/esm/threshold/session/signingSessionSeal/options.js +0 -1
- package/dist/esm/threshold/session/signingSessionSeal/service.js +8 -35
- package/dist/esm/threshold/session/signingSessionSeal/transport/express.js +18 -94
- package/dist/esm/threshold/session/signingSessionSeal/transport/fetch.js +6 -30
- package/dist/esm/threshold/session/signingSessionSeal/transport/shared.js +5 -20
- package/dist/esm/wasm/evm_crypto/pkg/evm_crypto_bg.wasm +0 -0
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +0 -611
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
- package/dist/esm/wasm/shamir3pass_runtime/pkg/shamir3pass_runtime_bg.wasm +0 -0
- package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +0 -4
- package/dist/types/shared-ts/src/authorization/delegatedAuthority.d.ts +2 -1
- package/dist/types/shared-ts/src/authorization/walletSessionIssuance.d.ts +9 -2
- package/dist/types/shared-ts/src/authorization/walletSignerActivationEquality.d.ts +4 -0
- package/dist/types/shared-ts/src/device-linking/committedSignerPackages.d.ts +3 -4
- package/dist/types/shared-ts/src/device-linking/contracts.d.ts +6 -63
- package/dist/types/shared-ts/src/device-linking/sourceContribution.d.ts +2 -0
- package/dist/types/shared-ts/src/passkey-custody/custodyEnvelope.d.ts +5 -12
- package/dist/types/shared-ts/src/passkey-custody/primitives.d.ts +9 -0
- package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +11 -12
- package/dist/types/shared-ts/src/signing-lanes/ids.d.ts +3 -17
- package/dist/types/shared-ts/src/signing-lanes/index.d.ts +0 -4
- package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +0 -1
- package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +0 -18
- package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +6 -35
- package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +6 -845
- package/dist/types/shared-ts/src/tenant-root/tenantRootIdentifier.d.ts +3 -0
- package/dist/types/shared-ts/src/tenant-root/tenantRootOperationRecord.d.ts +2 -1
- package/dist/types/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.d.ts +6 -0
- package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +0 -10
- package/dist/types/shared-ts/src/threshold/participants.d.ts +1 -1
- package/dist/types/shared-ts/src/threshold/signingRootScope.d.ts +1 -0
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +1 -133
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +4 -18
- package/dist/types/shared-ts/src/utils/domainIds.d.ts +0 -12
- package/dist/types/shared-ts/src/utils/ecdsaKeyFactsInventory.d.ts +2 -11
- package/dist/types/shared-ts/src/utils/eip1559TxWasmJson.d.ts +16 -0
- package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +2 -0
- package/dist/types/shared-ts/src/utils/errors.d.ts +0 -4
- package/dist/types/shared-ts/src/utils/exactKeys.d.ts +11 -0
- package/dist/types/shared-ts/src/utils/failure.d.ts +12 -0
- package/dist/types/shared-ts/src/utils/jsonRpc.d.ts +3 -4
- package/dist/types/shared-ts/src/utils/near.d.ts +0 -20
- package/dist/types/shared-ts/src/utils/nearRpcResults.d.ts +1 -0
- package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -2
- package/dist/types/shared-ts/src/utils/registrationAuthMethodInput.d.ts +3 -8
- package/dist/types/shared-ts/src/utils/registrationSetupOperation.d.ts +3 -0
- package/dist/types/shared-ts/src/utils/registrationSignerPlan.d.ts +7 -19
- package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts +3 -1
- package/dist/types/shared-ts/src/utils/routerAbEd25519Yao.d.ts +1 -0
- package/dist/types/shared-ts/src/utils/routerAbEd25519YaoDigests.d.ts +3 -4
- package/dist/types/shared-ts/src/utils/routerAbNormalSigningIdentity.d.ts +30 -8
- package/dist/types/shared-ts/src/utils/routerApiKeyAuth.d.ts +2 -0
- package/dist/types/shared-ts/src/utils/signingSessionSeal.d.ts +10 -11
- package/dist/types/shared-ts/src/utils/thresholdEcdsaChainTarget.d.ts +25 -0
- package/dist/types/shared-ts/src/utils/validation.d.ts +1 -3
- package/dist/types/shared-ts/src/utils/variant.d.ts +18 -0
- package/dist/types/shared-ts/src/utils/walletAuthMethodRecord.d.ts +3 -6
- package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +0 -1
- package/dist/types/shared-ts/src/utils/walletManagementProtocol.d.ts +3 -0
- package/dist/types/shared-ts/src/utils/webauthnDeviceInfo.d.ts +4 -2
- package/dist/types/shared-ts/src/utils/wireSchema.d.ts +0 -2
- package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +0 -1
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +1 -10
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodes.d.ts +1 -3
- package/dist/types/shared-ts/src/wallet-recovery/recoveryEnvelopes.d.ts +3 -16
- package/dist/types/shared-ts/src/wallet-recovery/recoveryKeyId.d.ts +5 -21
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryPreparation.d.ts +15 -0
- package/dist/types/shared-ts/src/wallet-recovery/walletRecoveryTarget.d.ts +3 -4
- package/dist/types/wallet-server/src/authorization/domain.d.ts +13 -2
- package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.d.ts +27 -3
- package/dist/types/wallet-server/src/authorization/lifecycleRouting.d.ts +32 -0
- package/dist/types/wallet-server/src/authorization/lifecycleRouting.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/authorization/recoveryRouting.d.ts +22 -0
- package/dist/types/wallet-server/src/authorization/recoveryRouting.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/authorization/service.d.ts +27 -1
- package/dist/types/wallet-server/src/authorization/sessionRouting.d.ts +20 -0
- package/dist/types/wallet-server/src/authorization/sessionRouting.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/cloud-host.d.ts +31 -9
- package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +1 -22
- package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +1 -79
- package/dist/types/wallet-server/src/core/IdentityStore.d.ts +0 -10
- package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +0 -1
- package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -2
- package/dist/types/wallet-server/src/core/ThresholdService/index.d.ts +1 -3
- package/dist/types/wallet-server/src/core/ThresholdService/kv.d.ts +0 -7
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +0 -3
- package/dist/types/wallet-server/src/core/ThresholdService/routerAbNormalSigningPolicy.d.ts +0 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +6 -18
- package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +0 -127
- package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +1 -5
- package/dist/types/wallet-server/src/core/WalletStore.d.ts +0 -3
- package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +8 -20
- package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +1 -27
- package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +2 -16
- package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +22 -14
- package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +0 -24
- package/dist/types/wallet-server/src/core/authService/emailOtpEnrollment.d.ts +1 -70
- package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +1 -14
- package/dist/types/wallet-server/src/core/authService/githubOAuth.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +1 -39
- package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -17
- package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +0 -125
- package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +1 -1
- package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +0 -12
- package/dist/types/wallet-server/src/core/config.d.ts +0 -10
- package/dist/types/wallet-server/src/core/d1EcdsaSignerRead.d.ts +39 -0
- package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +0 -2
- package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +0 -7
- package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +0 -1
- package/dist/types/wallet-server/src/core/d1WalletStore.d.ts +10 -0
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceBootstrap.d.ts +19 -0
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +8 -6
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSessionRecord.d.ts +3 -4
- package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -5
- package/dist/types/wallet-server/src/core/ecdsaMaterialReadSnapshot.d.ts +19 -0
- package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +10 -7
- package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +1 -5
- package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +0 -1
- package/dist/types/wallet-server/src/core/passkeyCredentialClaims.d.ts +9 -0
- package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbEcdsaPresignRuntime.d.ts +0 -2
- package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +3 -7
- package/dist/types/wallet-server/src/core/rpcClients/near/NearClient.d.ts +1 -2
- package/dist/types/wallet-server/src/core/signingLanes/WalletExecutionLaneProjection.d.ts +2 -11
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +1 -92
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +4 -52
- package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +3 -12
- package/dist/types/wallet-server/src/core/types.d.ts +2 -305
- package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +15 -3
- package/dist/types/wallet-server/src/index.d.ts +8 -13
- package/dist/types/wallet-server/src/localIntendedMaterialAdmissionFault.d.ts +38 -0
- package/dist/types/wallet-server/src/localIntendedPresignCancellation.d.ts +4 -0
- package/dist/types/wallet-server/src/localRegistrationSetupAuthority.d.ts +13 -0
- package/dist/types/wallet-server/src/router/auth/authRequestValidation.d.ts +4 -9
- package/dist/types/wallet-server/src/router/auth/commonRouterUtils.d.ts +15 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizationAssembly.d.ts +23 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthBoundary.d.ts +0 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +25 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthService.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/walletSessionCredentialReaders.d.ts +9 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/authorizedOperationStatements.d.ts +4 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +11 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +22 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +7 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.d.ts +1 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.d.ts +4 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +8 -6
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.d.ts +5 -8
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +1 -13
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.d.ts +2 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.d.ts +2 -8
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +0 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +20 -11
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.d.ts +5 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.d.ts +4 -14
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +29 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -16
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.d.ts +7 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.d.ts +23 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityService.d.ts +0 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.d.ts +24 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/d1OidcVerificationService.d.ts +0 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/googleOidcToken.d.ts +4 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +9 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +3 -7
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -11
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +3 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationSetupSupport.d.ts +51 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +35 -50
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +3 -30
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.d.ts +11 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.d.ts +14 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.d.ts +27 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +1 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +2 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +8 -50
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +23 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/cloudflare.types.d.ts +0 -2
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOps.d.ts +9 -34
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOpsClient.d.ts +2 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRuntimeOps.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +0 -1
- package/dist/types/wallet-server/src/router/domains/ecdsa/thresholdEcdsaRequestValidation.d.ts +3 -15
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +1 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/session/routerAbEd25519YaoWalletSession.d.ts +9 -50
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +0 -2
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +0 -3
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletRecoveryKeyManifest.d.ts +1 -13
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.d.ts +8 -9
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmission.d.ts +13 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbOperationStepUp.d.ts +3 -4
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +7 -33
- package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +1 -2
- package/dist/types/wallet-server/src/router/domains/syncAccount/syncAccountRequestValidation.d.ts +2 -7
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +1 -0
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationReservation.d.ts +51 -0
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +2 -10
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +2 -2
- package/dist/types/wallet-server/src/router/framework/apiCredentialPorts.d.ts +3 -1
- package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +39 -38
- package/dist/types/wallet-server/src/router/framework/googleLoginResolution.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/framework/http.d.ts +1 -0
- package/dist/types/wallet-server/src/router/framework/registrationSetupDispatch.d.ts +13 -0
- package/dist/types/wallet-server/src/router/framework/ror/normalize.d.ts +1 -9
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +1 -1
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.d.ts +3 -6
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingResponses.d.ts +17 -0
- package/dist/types/wallet-server/src/router/transport/fetch/routes/ecdsaOperationStepUpFactor.d.ts +37 -0
- package/dist/types/wallet-server/src/router/transport/fetch/routes/syncAccountBootstrap.d.ts +3 -5
- package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEcdsa.d.ts +0 -1
- package/dist/types/wallet-server/src/storage/d1Sql.d.ts +0 -1
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/idempotencyRecords.d.ts +1 -2
- package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/signingSessionSeal.types.d.ts +6 -8
- package/migrations/d1-signer/0040_namespace_home_challenges.sql +16 -0
- package/migrations/d1-signer/0041_step_up_admission_expiry.sql +28 -0
- package/migrations/d1-signer/0042_deployment_resource_challenges.sql +4 -0
- package/migrations/d1-signer/0043_google_registration_candidate_claim.sql +2 -0
- package/migrations/d1-signer/0044_linked_device_bootstrap_imports.sql +6 -0
- package/migrations/d1-signer/0045_wallet_owned_capability_receipts.sql +29 -0
- package/migrations/d1-signer/0046_wallet_owned_signing_abuse.sql +41 -0
- package/migrations/d1-signer/0047_remove_unused_near_public_keys.sql +2 -0
- package/migrations/d1-signer/0048_operation_owner_scope.sql +45 -0
- package/package.json +2 -3
- package/src/README.md +11 -3
- package/dist/esm/core/AuthService.js +0 -2
- package/dist/esm/core/NearPublicKeyStore.js +0 -200
- package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +0 -397
- package/dist/esm/core/ThresholdService/stores/KeyStore.js +0 -140
- package/dist/esm/core/ThresholdService/stores/SessionStore.js +0 -361
- package/dist/esm/core/ThresholdService/stores/StoreConfig.js +0 -13
- package/dist/esm/core/authService/AuthService.js +0 -594
- package/dist/esm/core/authService/bytes.js +0 -22
- package/dist/esm/core/authService/configValues.js +0 -15
- package/dist/esm/core/authService/emailOtpChallengeOperations.js +0 -126
- package/dist/esm/core/authService/emailOtpChallengeProof.js +0 -214
- package/dist/esm/core/authService/emailOtpChallengeVerification.js +0 -335
- package/dist/esm/core/authService/emailOtpChallenges.js +0 -260
- package/dist/esm/core/authService/emailOtpDelivery.js +0 -169
- package/dist/esm/core/authService/emailOtpGrant.js +0 -74
- package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +0 -175
- package/dist/esm/core/authService/emailOtpUnlock.js +0 -264
- package/dist/esm/core/authService/googleEmailOtpOperations.js +0 -141
- package/dist/esm/core/authService/googleEmailOtpRegistration.js +0 -674
- package/dist/esm/core/authService/identity.js +0 -57
- package/dist/esm/core/authService/identityOperations.js +0 -32
- package/dist/esm/core/authService/nearAccountOperations.js +0 -229
- package/dist/esm/core/authService/nearPublicKeyMetadata.js +0 -127
- package/dist/esm/core/authService/oidcVerification.js +0 -261
- package/dist/esm/core/authService/registrationThresholdHelpers.js +0 -30
- package/dist/esm/core/authService/runtime.js +0 -45
- package/dist/esm/core/authService/storeRegistry.js +0 -102
- package/dist/esm/core/authService/thresholdStoreSummary.js +0 -32
- package/dist/esm/core/authService/webauthnAuthority.js +0 -17
- package/dist/esm/core/defaultConfigsServer.js +0 -9
- package/dist/esm/core/hostedAccountIds.js +0 -225
- package/dist/esm/core/routerAbSigning/createRouterAbSigningRuntimes.js +0 -84
- package/dist/esm/core/signingLanes/LaneAggregateRevocationApplicationService.js +0 -86
- package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +0 -324
- package/dist/esm/core/signingLanes/LaneEnrollmentRevocation.js +0 -173
- package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +0 -198
- package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +0 -73
- package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +0 -68
- package/dist/esm/core/signingLanes/signingWorkerLaneMaterialIdentity.js +0 -0
- package/dist/esm/core/storeBackends.js +0 -208
- package/dist/esm/core/utils.js +0 -14
- package/dist/esm/core/webAuthnStoreBackends.js +0 -198
- package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +0 -56
- package/dist/esm/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.js +0 -10
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.js +0 -22
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -166
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.js +0 -38
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.js +0 -20
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +0 -1459
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLockStore.js +0 -114
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.js +0 -16
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +0 -171
- package/dist/esm/router/cloudflare/d1/signingLanes/index.js +0 -10
- package/dist/esm/router/cloudflare/durableObjects/thresholdStore.js +0 -404
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +0 -596
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +0 -273
- package/dist/esm/router/cloudflare/signingLanes/index.js +0 -4
- package/dist/esm/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.js +0 -32
- package/dist/esm/router/transport/fetch/routes/nearPublicKeys.js +0 -39
- package/dist/esm/shared-ts/src/signing-lanes/rotation.js +0 -8
- package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +0 -358
- package/dist/esm/shared-ts/src/signing-lanes/rotationLifecycle.js +0 -313
- package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +0 -532
- package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +0 -323
- package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +0 -59
- package/dist/esm/wasm/router_ab_ecdsa_signing_worker/pkg/router_ab_ecdsa_signing_worker_bg.wasm +0 -0
- package/dist/types/shared-ts/src/signing-lanes/participantDigest.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/rotation.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +0 -13
- package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +0 -78
- package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +0 -27
- package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +0 -6
- package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +0 -20
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeAttempt.d.ts +0 -59
- package/dist/types/wallet-server/src/core/AuthService.d.ts +0 -3
- package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +0 -48
- package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +0 -21
- package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +0 -40
- package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +0 -98
- package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +0 -4
- package/dist/types/wallet-server/src/core/ThresholdService/stores/ThresholdStoreConfig.typecheck.d.ts +0 -2
- package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -490
- package/dist/types/wallet-server/src/core/authService/bytes.d.ts +0 -4
- package/dist/types/wallet-server/src/core/authService/configValues.d.ts +0 -7
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +0 -109
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +0 -169
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +0 -47
- package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +0 -94
- package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +0 -66
- package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +0 -43
- package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +0 -49
- package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +0 -71
- package/dist/types/wallet-server/src/core/authService/googleEmailOtpOperations.d.ts +0 -126
- package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +0 -169
- package/dist/types/wallet-server/src/core/authService/identity.d.ts +0 -25
- package/dist/types/wallet-server/src/core/authService/identityOperations.d.ts +0 -19
- package/dist/types/wallet-server/src/core/authService/nearAccountOperations.d.ts +0 -55
- package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +0 -44
- package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +0 -66
- package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -11
- package/dist/types/wallet-server/src/core/authService/runtime.d.ts +0 -20
- package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -53
- package/dist/types/wallet-server/src/core/authService/thresholdStoreSummary.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/webauthnAuthority.d.ts +0 -5
- package/dist/types/wallet-server/src/core/defaultConfigsServer.d.ts +0 -5
- package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -16
- package/dist/types/wallet-server/src/core/routerAbSigning/createRouterAbSigningRuntimes.d.ts +0 -16
- package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +0 -36
- package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +0 -62
- package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentActivation.d.ts +0 -13
- package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentRevocation.d.ts +0 -24
- package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleApplicationService.d.ts +0 -141
- package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +0 -228
- package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +0 -58
- package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +0 -30
- package/dist/types/wallet-server/src/core/signingLanes/signingWorkerLaneMaterialIdentity.d.ts +0 -21
- package/dist/types/wallet-server/src/core/storeBackends.d.ts +0 -83
- package/dist/types/wallet-server/src/core/utils.d.ts +0 -3
- package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +0 -96
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +0 -29
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -24
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.d.ts +0 -20
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.d.ts +0 -13
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.d.ts +0 -51
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLockStore.d.ts +0 -28
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.d.ts +0 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneRecords.d.ts +0 -107
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/index.d.ts +0 -10
- package/dist/types/wallet-server/src/router/cloudflare/durableObjects/thresholdStore.d.ts +0 -18
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.d.ts +0 -217
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.d.ts +0 -73
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/index.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.d.ts +0 -6
- package/dist/types/wallet-server/src/router/transport/fetch/routes/nearPublicKeys.d.ts +0 -3
- /package/dist/esm/{core/signingLanes/LaneEffectJournalStore.js → authorization/recoveryRouting.js} +0 -0
- /package/dist/esm/{core/signingLanes/LaneLifecycleStore.js → authorization/sessionRouting.js} +0 -0
|
@@ -1,29 +0,0 @@
|
|
|
1
|
-
import type { ScopedD1Prepare } from '../../../../core/emailOtpD1Statements';
|
|
2
|
-
import { type NearPublicKeyRecord } from '../webauthn/d1WebAuthnRecords';
|
|
3
|
-
type D1NearPublicKeyListResult = {
|
|
4
|
-
readonly ok: true;
|
|
5
|
-
readonly keys: {
|
|
6
|
-
readonly publicKey: string;
|
|
7
|
-
readonly kind: NearPublicKeyRecord['kind'];
|
|
8
|
-
readonly signerSlot?: number;
|
|
9
|
-
readonly createdAtMs?: number;
|
|
10
|
-
readonly updatedAtMs?: number;
|
|
11
|
-
readonly authBinding?: NearPublicKeyRecord['authBinding'];
|
|
12
|
-
}[];
|
|
13
|
-
} | {
|
|
14
|
-
readonly ok: false;
|
|
15
|
-
readonly code: 'invalid_args' | 'internal';
|
|
16
|
-
readonly message: string;
|
|
17
|
-
};
|
|
18
|
-
export declare class CloudflareD1NearPublicKeyStore {
|
|
19
|
-
private readonly prepare;
|
|
20
|
-
constructor(input: {
|
|
21
|
-
readonly prepare: ScopedD1Prepare;
|
|
22
|
-
});
|
|
23
|
-
listForRelayUser(input: {
|
|
24
|
-
readonly userId?: unknown;
|
|
25
|
-
}): Promise<D1NearPublicKeyListResult>;
|
|
26
|
-
listForUser(userId: string): Promise<NearPublicKeyRecord[]>;
|
|
27
|
-
}
|
|
28
|
-
export {};
|
|
29
|
-
//# sourceMappingURL=d1NearPublicKeyStore.d.ts.map
|
|
@@ -1,4 +0,0 @@
|
|
|
1
|
-
import { type EcdsaOwnerSourceSignerContinuityPortV1, type EcdsaLanePrivateBindingResolverPortV1 } from '../../signingLanes/cloudflareLaneCurveExecution';
|
|
2
|
-
import type { CloudflareD1LaneStoreOptions } from './d1LaneRecords';
|
|
3
|
-
export declare function createCloudflareD1EcdsaLanePrivateBindingResolverV1(options: CloudflareD1LaneStoreOptions & EcdsaOwnerSourceSignerContinuityPortV1): EcdsaLanePrivateBindingResolverPortV1;
|
|
4
|
-
//# sourceMappingURL=d1EcdsaLanePrivateBindingResolver.d.ts.map
|
|
@@ -1,4 +0,0 @@
|
|
|
1
|
-
import { LaneAggregateRevocationApplicationService } from '../../../../core/signingLanes/LaneAggregateRevocationApplicationService';
|
|
2
|
-
import type { CloudflareD1LaneLifecycleApplicationServiceOptions } from './d1LaneLifecycleApplicationService';
|
|
3
|
-
export declare function createCloudflareD1LaneAggregateRevocationApplicationService(options: CloudflareD1LaneLifecycleApplicationServiceOptions): LaneAggregateRevocationApplicationService;
|
|
4
|
-
//# sourceMappingURL=d1LaneAggregateRevocationApplicationService.d.ts.map
|
package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts
DELETED
|
@@ -1,24 +0,0 @@
|
|
|
1
|
-
import type { LaneEffectJournalStore, LaneEffectMutation, LaneEffectMutationResult, LaneEffectRecordV1 } from '../../../../core/signingLanes/LaneEffectJournalStore';
|
|
2
|
-
import { type CloudflareD1LaneStoreOptions } from './d1LaneRecords';
|
|
3
|
-
export type CloudflareD1LaneEffectJournalStoreOptions = CloudflareD1LaneStoreOptions;
|
|
4
|
-
export declare class CloudflareD1LaneEffectJournalStore implements LaneEffectJournalStore {
|
|
5
|
-
private readonly database;
|
|
6
|
-
private readonly scope;
|
|
7
|
-
constructor(options: CloudflareD1LaneEffectJournalStoreOptions);
|
|
8
|
-
getEffect(input: {
|
|
9
|
-
readonly effectId: string;
|
|
10
|
-
}): Promise<{
|
|
11
|
-
readonly version: number;
|
|
12
|
-
readonly commandDigestB64u: string;
|
|
13
|
-
readonly record: LaneEffectRecordV1;
|
|
14
|
-
} | null>;
|
|
15
|
-
recordEffect(input: LaneEffectMutation): Promise<LaneEffectMutationResult>;
|
|
16
|
-
confirmEffect(input: {
|
|
17
|
-
readonly effectId: string;
|
|
18
|
-
readonly expectedVersion: number;
|
|
19
|
-
readonly commandDigestB64u: string;
|
|
20
|
-
readonly responseDigestB64u: string;
|
|
21
|
-
readonly confirmedAtMs: number;
|
|
22
|
-
}): Promise<LaneEffectMutationResult>;
|
|
23
|
-
}
|
|
24
|
-
//# sourceMappingURL=d1LaneEffectJournalStore.d.ts.map
|
package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.d.ts
DELETED
|
@@ -1,20 +0,0 @@
|
|
|
1
|
-
import type { LaneEnrollmentGatewayV1 } from '../../../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import type { LaneLifecycleStore } from '../../../../core/signingLanes/LaneLifecycleStore';
|
|
3
|
-
export type CloudflareD1LaneEnrollmentGatewayOptions = {
|
|
4
|
-
readonly lifecycleStore: LaneLifecycleStore;
|
|
5
|
-
};
|
|
6
|
-
/** D1 gateway composition. Participant network calls are injected by callers. */
|
|
7
|
-
export declare class CloudflareD1LaneEnrollmentGateway implements LaneEnrollmentGatewayV1 {
|
|
8
|
-
private readonly activation;
|
|
9
|
-
private readonly revocation;
|
|
10
|
-
constructor(options: CloudflareD1LaneEnrollmentGatewayOptions);
|
|
11
|
-
prepareLaneEnrollmentV1(...args: Parameters<LaneEnrollmentGatewayV1['prepareLaneEnrollmentV1']>): ReturnType<LaneEnrollmentGatewayV1['prepareLaneEnrollmentV1']>;
|
|
12
|
-
resumeLaneProtocolOperationV1(...args: Parameters<LaneEnrollmentGatewayV1['resumeLaneProtocolOperationV1']>): ReturnType<LaneEnrollmentGatewayV1['resumeLaneProtocolOperationV1']>;
|
|
13
|
-
recordLaneProtocolCommitV1(...args: Parameters<LaneEnrollmentGatewayV1['recordLaneProtocolCommitV1']>): ReturnType<LaneEnrollmentGatewayV1['recordLaneProtocolCommitV1']>;
|
|
14
|
-
recordLaneHolderDeliveryV1(...args: Parameters<LaneEnrollmentGatewayV1['recordLaneHolderDeliveryV1']>): ReturnType<LaneEnrollmentGatewayV1['recordLaneHolderDeliveryV1']>;
|
|
15
|
-
activateLaneServerMaterialV1(...args: Parameters<LaneEnrollmentGatewayV1['activateLaneServerMaterialV1']>): ReturnType<LaneEnrollmentGatewayV1['activateLaneServerMaterialV1']>;
|
|
16
|
-
commitLaneEnrollmentActivationV1(...args: Parameters<LaneEnrollmentGatewayV1['commitLaneEnrollmentActivationV1']>): ReturnType<LaneEnrollmentGatewayV1['commitLaneEnrollmentActivationV1']>;
|
|
17
|
-
fenceSigningLaneRevocationV1(...args: Parameters<LaneEnrollmentGatewayV1['fenceSigningLaneRevocationV1']>): ReturnType<LaneEnrollmentGatewayV1['fenceSigningLaneRevocationV1']>;
|
|
18
|
-
completeSigningLaneRevocationV1(...args: Parameters<LaneEnrollmentGatewayV1['completeSigningLaneRevocationV1']>): ReturnType<LaneEnrollmentGatewayV1['completeSigningLaneRevocationV1']>;
|
|
19
|
-
}
|
|
20
|
-
//# sourceMappingURL=d1LaneEnrollmentGateway.d.ts.map
|
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
import { LaneLifecycleApplicationService, type LaneLifecycleAuthorizationPortV1, type LaneLifecycleCurveExecutionPortsV1 } from '../../../../core/signingLanes/LaneLifecycleApplicationService';
|
|
2
|
-
import type { CloudflareD1LaneStoreOptions } from './d1LaneRecords';
|
|
3
|
-
export type CloudflareD1LaneLifecycleApplicationServiceOptions = CloudflareD1LaneStoreOptions & {
|
|
4
|
-
readonly authorization: LaneLifecycleAuthorizationPortV1;
|
|
5
|
-
readonly execution: LaneLifecycleCurveExecutionPortsV1;
|
|
6
|
-
};
|
|
7
|
-
/**
|
|
8
|
-
* Builds the authenticated server-internal lane lifecycle boundary. Routes
|
|
9
|
-
* should receive this service from their private composition and never expose
|
|
10
|
-
* the receipt methods as a public raw-receipt endpoint.
|
|
11
|
-
*/
|
|
12
|
-
export declare function createCloudflareD1LaneLifecycleApplicationService(options: CloudflareD1LaneLifecycleApplicationServiceOptions): LaneLifecycleApplicationService;
|
|
13
|
-
//# sourceMappingURL=d1LaneLifecycleApplicationService.d.ts.map
|
package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.d.ts
DELETED
|
@@ -1,51 +0,0 @@
|
|
|
1
|
-
import type { CommitLaneEnrollmentActivationV1, LaneHolderDeliveryReceiptV1, LaneProductEpochRecordV1, LaneProtocolCommitReceiptV1, LaneProtocolRecordV1, LaneProtocolCasResultV1, LaneServerActivationReceiptV1, RevokeLaneEnrollmentV1, RevokeSigningLaneV1 } from '../../../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import type { LaneEnrollmentId, LaneOperationId } from '../../../../../../shared-ts/src/signing-lanes';
|
|
3
|
-
import type { LaneAdmissionMutationResult, LaneEnrollmentAdmissionInput, LaneEnrollmentAdmissionRecord, LaneEnrollmentLifecycleCasInput, LaneEnrollmentRevocationCommitInput, LaneEnrollmentRevocationCommitResult, LaneEnrollmentVisibilityCommitResult, LaneLifecycleStore, LaneProductEpochLookup, LaneActiveProductEpochLookup, LaneProtocolAdmissionInput, LaneProtocolAdmissionRecord, LaneProtocolLifecycleCasInput, LaneSigningLaneRevocationCommitInput, LaneSigningLaneRevocationFenceMutationResult, LaneSigningLaneRevocationMutationResult } from '../../../../core/signingLanes/LaneLifecycleStore';
|
|
4
|
-
import { type CloudflareD1LaneStoreOptions } from './d1LaneRecords';
|
|
5
|
-
export type CloudflareD1LaneLifecycleStoreOptions = CloudflareD1LaneStoreOptions;
|
|
6
|
-
export declare class CloudflareD1LaneLifecycleStore implements LaneLifecycleStore {
|
|
7
|
-
private readonly database;
|
|
8
|
-
private readonly scope;
|
|
9
|
-
private readonly now;
|
|
10
|
-
constructor(options: CloudflareD1LaneLifecycleStoreOptions);
|
|
11
|
-
getEnrollment(enrollmentId: LaneEnrollmentId): Promise<LaneEnrollmentAdmissionRecord | null>;
|
|
12
|
-
getProtocol(operationId: LaneOperationId): Promise<LaneProtocolAdmissionRecord | null>;
|
|
13
|
-
/**
|
|
14
|
-
* Reads the committed protocol receipt only after verifying its persisted
|
|
15
|
-
* digest, receipt identity, and active protocol lifecycle binding.
|
|
16
|
-
*/
|
|
17
|
-
getProtocolCommitReceipt(operationId: LaneOperationId): Promise<LaneProtocolCommitReceiptV1 | null>;
|
|
18
|
-
putEnrollmentAdmission(input: LaneEnrollmentAdmissionInput): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
|
|
19
|
-
putProtocolAdmission(input: LaneProtocolAdmissionInput): Promise<LaneAdmissionMutationResult<LaneProtocolRecordV1>>;
|
|
20
|
-
compareAndSetProtocolLifecycle(input: LaneProtocolLifecycleCasInput): Promise<LaneProtocolCasResultV1>;
|
|
21
|
-
compareAndSetEnrollmentLifecycle(input: LaneEnrollmentLifecycleCasInput): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
|
|
22
|
-
putProtocolCommitReceipt(receipt: LaneProtocolCommitReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneProtocolCommitReceiptV1>>;
|
|
23
|
-
putHolderDeliveryReceipt(receipt: LaneHolderDeliveryReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneHolderDeliveryReceiptV1>>;
|
|
24
|
-
putServerActivationReceipt(receipt: LaneServerActivationReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneServerActivationReceiptV1>>;
|
|
25
|
-
putProductEpochPending(productEpoch: Extract<LaneProductEpochRecordV1, {
|
|
26
|
-
state: 'pending_visibility';
|
|
27
|
-
}>, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneProductEpochRecordV1>>;
|
|
28
|
-
getProductEpoch(lookup: LaneProductEpochLookup): Promise<LaneProductEpochRecordV1 | null>;
|
|
29
|
-
private getProductEpochStored;
|
|
30
|
-
getActiveProductEpoch(lookup: LaneActiveProductEpochLookup): Promise<Extract<LaneProductEpochRecordV1, {
|
|
31
|
-
state: 'active';
|
|
32
|
-
}> | null>;
|
|
33
|
-
listEnrollmentProductEpochs(enrollmentId: LaneEnrollmentId): Promise<readonly LaneProductEpochRecordV1[]>;
|
|
34
|
-
commitEnrollmentVisibility(input: CommitLaneEnrollmentActivationV1): Promise<LaneEnrollmentVisibilityCommitResult>;
|
|
35
|
-
fenceLaneRevocation(input: RevokeSigningLaneV1): Promise<LaneSigningLaneRevocationFenceMutationResult>;
|
|
36
|
-
fenceEnrollmentRevocation(input: RevokeLaneEnrollmentV1): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
|
|
37
|
-
private commitLaneRevocationFence;
|
|
38
|
-
commitLaneRevocation(input: LaneSigningLaneRevocationCommitInput): Promise<LaneSigningLaneRevocationMutationResult>;
|
|
39
|
-
commitEnrollmentRevocation(input: LaneEnrollmentRevocationCommitInput): Promise<LaneEnrollmentRevocationCommitResult>;
|
|
40
|
-
private getFencedProductEpochByActivation;
|
|
41
|
-
private protocolInsertStatement;
|
|
42
|
-
private updateProtocolLifecycle;
|
|
43
|
-
private updateEnrollmentLifecycle;
|
|
44
|
-
private getEnrollmentRevocationFenceDigest;
|
|
45
|
-
private updateEnrollmentRevocationFence;
|
|
46
|
-
private putReceipt;
|
|
47
|
-
private readAndVerifyServerRetirementReceipt;
|
|
48
|
-
private verifyStoredRefreshPredecessorRetirements;
|
|
49
|
-
private readReceipt;
|
|
50
|
-
}
|
|
51
|
-
//# sourceMappingURL=d1LaneLifecycleStore.d.ts.map
|
|
@@ -1,28 +0,0 @@
|
|
|
1
|
-
import type { LaneEnrollmentId, WalletKeyId } from '../../../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import type { LaneLockResult, LaneLockStore } from '../../../../core/signingLanes/LaneLifecycleStore';
|
|
3
|
-
import { type CloudflareD1LaneStoreOptions } from './d1LaneRecords';
|
|
4
|
-
export type CloudflareD1LaneLockStoreOptions = CloudflareD1LaneStoreOptions;
|
|
5
|
-
export declare class CloudflareD1LaneLockStore implements LaneLockStore {
|
|
6
|
-
private readonly database;
|
|
7
|
-
private readonly scope;
|
|
8
|
-
constructor(options: CloudflareD1LaneLockStoreOptions);
|
|
9
|
-
acquireWalletKeyLock(input: {
|
|
10
|
-
readonly walletKeyId: WalletKeyId;
|
|
11
|
-
readonly lockId: string;
|
|
12
|
-
readonly ttlMs: number;
|
|
13
|
-
readonly nowMs: number;
|
|
14
|
-
}): Promise<LaneLockResult>;
|
|
15
|
-
acquireEnrollmentLock(input: {
|
|
16
|
-
readonly enrollmentId: LaneEnrollmentId;
|
|
17
|
-
readonly lockId: string;
|
|
18
|
-
readonly ttlMs: number;
|
|
19
|
-
readonly nowMs: number;
|
|
20
|
-
}): Promise<LaneLockResult>;
|
|
21
|
-
releaseLock(input: {
|
|
22
|
-
readonly lockKey: string;
|
|
23
|
-
readonly lockId: string;
|
|
24
|
-
}): Promise<boolean>;
|
|
25
|
-
private acquire;
|
|
26
|
-
private read;
|
|
27
|
-
}
|
|
28
|
-
//# sourceMappingURL=d1LaneLockStore.d.ts.map
|
package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.d.ts
DELETED
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
import { CloudflareLaneProtocolCommitterV1, type CloudflareLaneProtocolCommitterOptionsV1 } from '../../signingLanes/cloudflareLaneProtocolCommitter';
|
|
2
|
-
import type { CloudflareD1LaneStoreOptions } from './d1LaneRecords';
|
|
3
|
-
export type CloudflareD1LaneProtocolCommitterOptionsV1 = CloudflareD1LaneStoreOptions & Omit<CloudflareLaneProtocolCommitterOptionsV1, 'gateway'>;
|
|
4
|
-
export declare function createCloudflareD1LaneProtocolCommitterV1(options: CloudflareD1LaneProtocolCommitterOptionsV1): CloudflareLaneProtocolCommitterV1;
|
|
5
|
-
//# sourceMappingURL=d1LaneProtocolCommitter.d.ts.map
|
|
@@ -1,107 +0,0 @@
|
|
|
1
|
-
import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, LaneEnrollmentLifecycleV1, LaneEnrollmentManifestV1, LaneHolderDeliveryReceiptV1, LaneProductEpochRecordV1, LaneProtocolCommitReceiptV1, LaneProtocolRecordV1, LaneServerActivationReceiptV1, LaneServerRetirementReceiptV1, RevokeLaneEnrollmentV1 } from '../../../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import type { D1DatabaseLike, D1ResultLike } from '../../../../storage/tenantRoute';
|
|
3
|
-
export type CloudflareD1LaneScopeV1 = {
|
|
4
|
-
readonly namespace: string;
|
|
5
|
-
readonly orgId: string;
|
|
6
|
-
readonly projectId: string;
|
|
7
|
-
readonly envId: string;
|
|
8
|
-
};
|
|
9
|
-
export type CloudflareD1LaneStoreOptions = {
|
|
10
|
-
readonly database: D1DatabaseLike;
|
|
11
|
-
readonly scope: CloudflareD1LaneScopeV1;
|
|
12
|
-
readonly now?: () => number;
|
|
13
|
-
};
|
|
14
|
-
export type LaneEnrollmentRow = {
|
|
15
|
-
readonly enrollment_id?: unknown;
|
|
16
|
-
readonly wallet_id?: unknown;
|
|
17
|
-
readonly manifest_digest_b64u?: unknown;
|
|
18
|
-
readonly manifest_json?: unknown;
|
|
19
|
-
readonly lifecycle_json?: unknown;
|
|
20
|
-
readonly version?: unknown;
|
|
21
|
-
readonly command_digest_b64u?: unknown;
|
|
22
|
-
readonly created_at_ms?: unknown;
|
|
23
|
-
readonly updated_at_ms?: unknown;
|
|
24
|
-
};
|
|
25
|
-
export type LaneProtocolRow = {
|
|
26
|
-
readonly operation_id?: unknown;
|
|
27
|
-
readonly enrollment_id?: unknown;
|
|
28
|
-
readonly wallet_id?: unknown;
|
|
29
|
-
readonly wallet_key_id?: unknown;
|
|
30
|
-
readonly source_lane_id?: unknown;
|
|
31
|
-
readonly source_lane_share_epoch?: unknown;
|
|
32
|
-
readonly source_revocation_epoch?: unknown;
|
|
33
|
-
readonly target_lane_id?: unknown;
|
|
34
|
-
readonly target_lane_share_epoch?: unknown;
|
|
35
|
-
readonly target_material_activation_id?: unknown;
|
|
36
|
-
readonly job_json?: unknown;
|
|
37
|
-
readonly lifecycle_json?: unknown;
|
|
38
|
-
readonly version?: unknown;
|
|
39
|
-
readonly command_digest_b64u?: unknown;
|
|
40
|
-
readonly created_at_ms?: unknown;
|
|
41
|
-
readonly updated_at_ms?: unknown;
|
|
42
|
-
};
|
|
43
|
-
export type LaneProductEpochRow = {
|
|
44
|
-
readonly product_json?: unknown;
|
|
45
|
-
readonly version?: unknown;
|
|
46
|
-
readonly command_digest_b64u?: unknown;
|
|
47
|
-
};
|
|
48
|
-
export type LaneReceiptRow = {
|
|
49
|
-
readonly receipt_id?: unknown;
|
|
50
|
-
readonly receipt_kind?: unknown;
|
|
51
|
-
readonly receipt_digest_b64u?: unknown;
|
|
52
|
-
readonly receipt_json?: unknown;
|
|
53
|
-
readonly created_at_ms?: unknown;
|
|
54
|
-
};
|
|
55
|
-
export declare function requireD1LaneStoreOptions(input: CloudflareD1LaneStoreOptions): {
|
|
56
|
-
readonly database: D1DatabaseLike;
|
|
57
|
-
readonly scope: CloudflareD1LaneScopeV1;
|
|
58
|
-
readonly now: () => number;
|
|
59
|
-
};
|
|
60
|
-
export declare function normalizeScope(scope: CloudflareD1LaneScopeV1): CloudflareD1LaneScopeV1;
|
|
61
|
-
export declare function parseVersion(value: unknown, label: string): number;
|
|
62
|
-
export declare function parseTimestamp(value: unknown, label: string): number;
|
|
63
|
-
export declare function parseRequiredString(value: unknown, label: string): string;
|
|
64
|
-
export declare function parseJsonRecord(value: unknown, label: string): Record<string, unknown>;
|
|
65
|
-
/** Compare parsed JSON records without relying on insertion order. */
|
|
66
|
-
export declare function equalLaneRecords(left: unknown, right: unknown): boolean;
|
|
67
|
-
export declare function parseEnrollmentRow(row: LaneEnrollmentRow): {
|
|
68
|
-
readonly enrollmentId: string;
|
|
69
|
-
readonly walletId: string;
|
|
70
|
-
readonly manifestDigestB64u: string;
|
|
71
|
-
readonly manifest: LaneEnrollmentManifestV1;
|
|
72
|
-
readonly lifecycle: LaneEnrollmentLifecycleV1;
|
|
73
|
-
readonly version: number;
|
|
74
|
-
readonly commandDigestB64u: string;
|
|
75
|
-
readonly createdAtMs: number;
|
|
76
|
-
readonly updatedAtMs: number;
|
|
77
|
-
};
|
|
78
|
-
export declare function parseProtocolRow(row: LaneProtocolRow): {
|
|
79
|
-
readonly operationId: string;
|
|
80
|
-
readonly enrollmentId: string;
|
|
81
|
-
readonly walletId: string;
|
|
82
|
-
readonly walletKeyId: string;
|
|
83
|
-
readonly sourceLaneId: string;
|
|
84
|
-
readonly sourceLaneShareEpoch: string;
|
|
85
|
-
readonly sourceRevocationEpoch: number;
|
|
86
|
-
readonly targetLaneId: string;
|
|
87
|
-
readonly targetLaneShareEpoch: string;
|
|
88
|
-
readonly targetMaterialActivationId: string;
|
|
89
|
-
readonly record: LaneProtocolRecordV1;
|
|
90
|
-
readonly version: number;
|
|
91
|
-
readonly commandDigestB64u: string;
|
|
92
|
-
readonly createdAtMs: number;
|
|
93
|
-
readonly updatedAtMs: number;
|
|
94
|
-
};
|
|
95
|
-
export declare function parseProductEpochRow(row: LaneProductEpochRow): LaneProductEpochRecordV1;
|
|
96
|
-
export declare function parseReceiptRow(row: LaneReceiptRow): {
|
|
97
|
-
readonly receiptId: string;
|
|
98
|
-
readonly receiptKind: string;
|
|
99
|
-
readonly receiptDigestB64u: string;
|
|
100
|
-
readonly value: LaneProtocolCommitReceiptV1 | LaneHolderDeliveryReceiptV1 | LaneServerActivationReceiptV1 | LaneServerRetirementReceiptV1 | AggregateLaneActivationReceiptV1 | AggregateLaneRevocationReceiptV1;
|
|
101
|
-
};
|
|
102
|
-
export declare function digestLaneEnrollmentRevocationCommand(input: RevokeLaneEnrollmentV1): Promise<string>;
|
|
103
|
-
export declare function scopeValues(scope: CloudflareD1LaneScopeV1): readonly string[];
|
|
104
|
-
export declare function firstBatchResult(results: readonly unknown[], index: number): D1ResultLike;
|
|
105
|
-
export declare const LANE_CAS_GUARD_SQL = "INSERT INTO lane_cas_guard (guard_id) SELECT 1 WHERE changes() = 0";
|
|
106
|
-
export declare function assertD1Success(result: D1ResultLike, label: string): void;
|
|
107
|
-
//# sourceMappingURL=d1LaneRecords.d.ts.map
|
|
@@ -1,10 +0,0 @@
|
|
|
1
|
-
export * from './d1LaneRecords';
|
|
2
|
-
export * from './d1LaneLifecycleStore';
|
|
3
|
-
export * from './d1EcdsaLanePrivateBindingResolver';
|
|
4
|
-
export * from './d1LaneEffectJournalStore';
|
|
5
|
-
export * from './d1LaneLockStore';
|
|
6
|
-
export * from './d1LaneEnrollmentGateway';
|
|
7
|
-
export * from './d1LaneLifecycleApplicationService';
|
|
8
|
-
export * from './d1LaneAggregateRevocationApplicationService';
|
|
9
|
-
export * from './d1LaneProtocolCommitter';
|
|
10
|
-
//# sourceMappingURL=index.d.ts.map
|
|
@@ -1,18 +0,0 @@
|
|
|
1
|
-
type DurableObjectStorageLike = {
|
|
2
|
-
get(key: string): Promise<unknown>;
|
|
3
|
-
put(key: string, value: unknown, opts?: {
|
|
4
|
-
expirationTtl?: number;
|
|
5
|
-
}): Promise<void>;
|
|
6
|
-
delete(key: string): Promise<boolean>;
|
|
7
|
-
transaction?<T>(fn: (txn: DurableObjectStorageLike) => Promise<T>): Promise<T>;
|
|
8
|
-
};
|
|
9
|
-
type DurableObjectStateLike = {
|
|
10
|
-
storage: DurableObjectStorageLike;
|
|
11
|
-
};
|
|
12
|
-
export declare class ThresholdStoreDurableObject {
|
|
13
|
-
private readonly state;
|
|
14
|
-
constructor(state: DurableObjectStateLike, _env: unknown);
|
|
15
|
-
fetch(request: Request): Promise<Response>;
|
|
16
|
-
}
|
|
17
|
-
export {};
|
|
18
|
-
//# sourceMappingURL=thresholdStore.d.ts.map
|
|
@@ -1,217 +0,0 @@
|
|
|
1
|
-
import type { EcdsaAdditiveLaneHolderRoundV1, EcdsaAdditiveLaneJobV1, Ed25519YaoLaneJobV1, LaneHolderDeliveryReceiptV1, LaneProtocolCommitReceiptV1, LaneServerActivationReceiptV1, LaneServerRetirementReceiptV1, LaneHolderPackageWireV1, LaneProductEpochActiveV1, RevokeSigningLaneV1 } from '../../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import { type DigestB64u } from '../../../../../shared-ts/src/utils/canonicalPrimitives';
|
|
3
|
-
import { type MpcMaterialActivationRef } from '../../../../../shared-ts/src/utils/domainIds';
|
|
4
|
-
import type { LaneLifecycleCurveExecutionPortsV1 } from '../../../core/signingLanes/LaneLifecycleApplicationService';
|
|
5
|
-
import type { LaneLifecycleStore, LaneProductEpochLookup } from '../../../core/signingLanes/LaneLifecycleStore';
|
|
6
|
-
import type { WalletEcdsaSignerRecord } from '../../../core/WalletStore';
|
|
7
|
-
import { type EcdsaServerRetirementBindingV1 } from '../../../core/signingLanes/ecdsaServerRetirement';
|
|
8
|
-
import { type Ed25519ServerRetirementBindingV1 } from '../../../core/signingLanes/ed25519ServerRetirement';
|
|
9
|
-
import type { EcdsaSigningWorkerLaneMaterialIdentityV1, SigningWorkerLaneMaterialIdentityV1 } from '../../../core/signingLanes/signingWorkerLaneMaterialIdentity';
|
|
10
|
-
import type { CloudflareEd25519LaneProtocolTransportV1 } from './cloudflareLaneProtocolCommitter';
|
|
11
|
-
type LaneMaterialMutationOutcomeV1 = 'applied' | 'replayed';
|
|
12
|
-
export type SigningWorkerLaneProtocolCommitProjectionV1 = {
|
|
13
|
-
readonly kind: 'signing_worker_lane_protocol_commit_projection_v1';
|
|
14
|
-
readonly outcome: LaneMaterialMutationOutcomeV1;
|
|
15
|
-
readonly receipt: LaneProtocolCommitReceiptV1;
|
|
16
|
-
};
|
|
17
|
-
export type SigningWorkerLaneServerActivationProjectionV1 = {
|
|
18
|
-
readonly kind: 'signing_worker_lane_server_activation_projection_v1';
|
|
19
|
-
readonly outcome: LaneMaterialMutationOutcomeV1;
|
|
20
|
-
readonly receipt: LaneServerActivationReceiptV1;
|
|
21
|
-
};
|
|
22
|
-
export type SigningWorkerLaneRetirementProjectionV1 = {
|
|
23
|
-
readonly kind: 'signing_worker_lane_retirement_projection_v1';
|
|
24
|
-
readonly outcome: LaneMaterialMutationOutcomeV1;
|
|
25
|
-
readonly command: RevokeSigningLaneV1;
|
|
26
|
-
readonly retirementEffectBindingDigestB64u: string;
|
|
27
|
-
readonly retirementReceipt: LaneServerRetirementReceiptV1;
|
|
28
|
-
};
|
|
29
|
-
/**
|
|
30
|
-
* Receipt-only projection of the private SigningWorker material journal. The
|
|
31
|
-
* encrypted active record and all plaintext material are intentionally absent.
|
|
32
|
-
*/
|
|
33
|
-
export interface SigningWorkerLaneMaterialReceiptPortV1 {
|
|
34
|
-
commitEcdsaProtocolV1(input: {
|
|
35
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
36
|
-
readonly holderRound: EcdsaAdditiveLaneHolderRoundV1;
|
|
37
|
-
readonly holderPackage: Extract<LaneHolderPackageWireV1, {
|
|
38
|
-
kind: 'ecdsa_additive_lane_holder_package_v1';
|
|
39
|
-
}>;
|
|
40
|
-
readonly encryptedDeltaPackageJson: string;
|
|
41
|
-
}): Promise<SigningWorkerLaneProtocolCommitProjectionV1>;
|
|
42
|
-
activateServerMaterialV1(input: {
|
|
43
|
-
readonly curve: 'ed25519_yao';
|
|
44
|
-
readonly job: Ed25519YaoLaneJobV1;
|
|
45
|
-
readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
46
|
-
readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
|
|
47
|
-
} | {
|
|
48
|
-
readonly curve: 'ecdsa_additive';
|
|
49
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
50
|
-
readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
51
|
-
readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
|
|
52
|
-
}): Promise<SigningWorkerLaneServerActivationProjectionV1>;
|
|
53
|
-
retireServerMaterialV1(input: {
|
|
54
|
-
readonly curve: 'ed25519_yao' | 'ecdsa_additive';
|
|
55
|
-
readonly command: RevokeSigningLaneV1;
|
|
56
|
-
}): Promise<SigningWorkerLaneRetirementProjectionV1>;
|
|
57
|
-
}
|
|
58
|
-
export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_EXECUTE_PATH_V1: "/router-ab/internal/signing-worker/ecdsa-additive-lane/execute";
|
|
59
|
-
export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_ACTIVATE_PATH_V1: "/router-ab/internal/signing-worker/ecdsa-additive-lane/activate";
|
|
60
|
-
export declare const CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_LANE_ACTIVATE_PATH_V1: "/router-ab/internal/signing-worker/ed25519-yao-lane/activate";
|
|
61
|
-
export declare const CLOUDFLARE_SIGNING_WORKER_ECDSA_LANE_RETIRE_PATH_V1: "/router-ab/internal/signing-worker/ecdsa-additive-lane/retire";
|
|
62
|
-
export declare const CLOUDFLARE_SIGNING_WORKER_ED25519_YAO_LANE_RETIRE_PATH_V1: "/router-ab/internal/signing-worker/ed25519-yao-lane/retire";
|
|
63
|
-
export interface EcdsaLanePrivateBindingResolverPortV1 {
|
|
64
|
-
resolveSourceMaterialV1(input: {
|
|
65
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
66
|
-
}): Promise<CloudflareEcdsaLaneSourceMaterialV1>;
|
|
67
|
-
resolveActivationBindingV1(input: {
|
|
68
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
69
|
-
readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
70
|
-
}): Promise<{
|
|
71
|
-
readonly identity: EcdsaSigningWorkerLaneMaterialIdentityV1;
|
|
72
|
-
readonly targetMaterialActivation: MpcMaterialActivationRef;
|
|
73
|
-
}>;
|
|
74
|
-
resolveRetirementBindingV1(input: {
|
|
75
|
-
readonly command: RevokeSigningLaneV1;
|
|
76
|
-
}): Promise<EcdsaServerRetirementBindingV1>;
|
|
77
|
-
}
|
|
78
|
-
export interface Ed25519LanePrivateBindingResolverPortV1 {
|
|
79
|
-
resolveRetirementBindingV1(input: {
|
|
80
|
-
readonly command: RevokeSigningLaneV1;
|
|
81
|
-
}): Promise<Ed25519ServerRetirementBindingV1>;
|
|
82
|
-
}
|
|
83
|
-
export declare class LaneLifecycleStoreEd25519LanePrivateBindingResolverV1 implements Ed25519LanePrivateBindingResolverPortV1 {
|
|
84
|
-
private readonly lifecycleStore;
|
|
85
|
-
constructor(lifecycleStore: Pick<LaneLifecycleStore, 'getProductEpoch' | 'getProtocol'>);
|
|
86
|
-
resolveRetirementBindingV1(input: {
|
|
87
|
-
readonly command: RevokeSigningLaneV1;
|
|
88
|
-
}): Promise<Ed25519ServerRetirementBindingV1>;
|
|
89
|
-
}
|
|
90
|
-
export type CloudflareEcdsaLaneSourceMaterialV1 = {
|
|
91
|
-
readonly kind: 'lane_material';
|
|
92
|
-
readonly lookup: {
|
|
93
|
-
readonly identity: EcdsaSigningWorkerLaneMaterialIdentityV1;
|
|
94
|
-
readonly admittedLaneIdentityDigestB64u: DigestB64u;
|
|
95
|
-
};
|
|
96
|
-
} | {
|
|
97
|
-
readonly kind: 'registration_activation';
|
|
98
|
-
readonly lookup: {
|
|
99
|
-
readonly accountId: EcdsaAdditiveLaneJobV1['walletId'];
|
|
100
|
-
readonly materialActivationId: EcdsaAdditiveLaneJobV1['source']['materialActivation']['activationId'];
|
|
101
|
-
readonly signingWorkerId: string;
|
|
102
|
-
};
|
|
103
|
-
readonly sourceDerivation: {
|
|
104
|
-
readonly applicationBindingDigestB64u: string;
|
|
105
|
-
readonly clientShareRetryCounter: number;
|
|
106
|
-
};
|
|
107
|
-
};
|
|
108
|
-
export interface EcdsaOwnerSourceSignerContinuityPortV1 {
|
|
109
|
-
listWalletEcdsaCustodyContinuity(input: {
|
|
110
|
-
readonly walletId: string;
|
|
111
|
-
}): Promise<readonly WalletEcdsaSignerRecord[]>;
|
|
112
|
-
}
|
|
113
|
-
export declare class LaneLifecycleStoreEcdsaLanePrivateBindingResolverV1 implements EcdsaLanePrivateBindingResolverPortV1 {
|
|
114
|
-
private readonly lifecycleStore;
|
|
115
|
-
private readonly walletRegistration;
|
|
116
|
-
constructor(lifecycleStore: Pick<LaneLifecycleStore, 'getProductEpoch' | 'getProtocol'>, walletRegistration: EcdsaOwnerSourceSignerContinuityPortV1);
|
|
117
|
-
resolveSourceMaterialV1(input: {
|
|
118
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
119
|
-
}): Promise<CloudflareEcdsaLaneSourceMaterialV1>;
|
|
120
|
-
resolveActivationBindingV1(input: {
|
|
121
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
122
|
-
readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
123
|
-
}): Promise<{
|
|
124
|
-
readonly identity: EcdsaSigningWorkerLaneMaterialIdentityV1;
|
|
125
|
-
readonly targetMaterialActivation: MpcMaterialActivationRef;
|
|
126
|
-
}>;
|
|
127
|
-
resolveRetirementBindingV1(input: {
|
|
128
|
-
readonly command: RevokeSigningLaneV1;
|
|
129
|
-
}): Promise<EcdsaServerRetirementBindingV1>;
|
|
130
|
-
}
|
|
131
|
-
export type CloudflareSigningWorkerEcdsaLaneTransportOptionsV1 = {
|
|
132
|
-
readonly signingWorker: {
|
|
133
|
-
fetch(request: Request): Promise<Response>;
|
|
134
|
-
};
|
|
135
|
-
readonly internalServiceAuth: string;
|
|
136
|
-
readonly bindingResolver: EcdsaLanePrivateBindingResolverPortV1;
|
|
137
|
-
readonly retirementTransport: Pick<SigningWorkerLaneMaterialReceiptPortV1, 'retireServerMaterialV1'>;
|
|
138
|
-
};
|
|
139
|
-
export type CloudflareSigningWorkerEcdsaRetirementTransportOptionsV1 = {
|
|
140
|
-
readonly signingWorker: {
|
|
141
|
-
fetch(request: Request): Promise<Response>;
|
|
142
|
-
};
|
|
143
|
-
readonly internalServiceAuth: string;
|
|
144
|
-
readonly bindingResolver: Pick<EcdsaLanePrivateBindingResolverPortV1, 'resolveRetirementBindingV1'>;
|
|
145
|
-
readonly ed25519BindingResolver: Ed25519LanePrivateBindingResolverPortV1;
|
|
146
|
-
};
|
|
147
|
-
export declare class CloudflareSigningWorkerEcdsaRetirementTransportV1 implements Pick<SigningWorkerLaneMaterialReceiptPortV1, 'retireServerMaterialV1'> {
|
|
148
|
-
private readonly options;
|
|
149
|
-
private readonly internalServiceAuth;
|
|
150
|
-
constructor(options: CloudflareSigningWorkerEcdsaRetirementTransportOptionsV1);
|
|
151
|
-
retireServerMaterialV1(input: {
|
|
152
|
-
readonly curve: 'ed25519_yao' | 'ecdsa_additive';
|
|
153
|
-
readonly command: RevokeSigningLaneV1;
|
|
154
|
-
}): Promise<SigningWorkerLaneRetirementProjectionV1>;
|
|
155
|
-
}
|
|
156
|
-
export declare class CloudflareSigningWorkerEcdsaLaneTransportV1 implements SigningWorkerLaneMaterialReceiptPortV1 {
|
|
157
|
-
private readonly options;
|
|
158
|
-
private readonly internalServiceAuth;
|
|
159
|
-
constructor(options: CloudflareSigningWorkerEcdsaLaneTransportOptionsV1);
|
|
160
|
-
commitEcdsaProtocolV1(input: {
|
|
161
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
162
|
-
readonly holderRound: EcdsaAdditiveLaneHolderRoundV1;
|
|
163
|
-
readonly holderPackage: Extract<LaneHolderPackageWireV1, {
|
|
164
|
-
kind: 'ecdsa_additive_lane_holder_package_v1';
|
|
165
|
-
}>;
|
|
166
|
-
readonly encryptedDeltaPackageJson: string;
|
|
167
|
-
}): Promise<SigningWorkerLaneProtocolCommitProjectionV1>;
|
|
168
|
-
activateServerMaterialV1(input: {
|
|
169
|
-
readonly curve: 'ed25519_yao';
|
|
170
|
-
readonly job: Ed25519YaoLaneJobV1;
|
|
171
|
-
readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
172
|
-
readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
|
|
173
|
-
} | {
|
|
174
|
-
readonly curve: 'ecdsa_additive';
|
|
175
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
176
|
-
readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
177
|
-
readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
|
|
178
|
-
}): Promise<SigningWorkerLaneServerActivationProjectionV1>;
|
|
179
|
-
retireServerMaterialV1(input: {
|
|
180
|
-
readonly curve: 'ed25519_yao' | 'ecdsa_additive';
|
|
181
|
-
readonly command: RevokeSigningLaneV1;
|
|
182
|
-
}): Promise<SigningWorkerLaneRetirementProjectionV1>;
|
|
183
|
-
}
|
|
184
|
-
export type CloudflareLaneCurveExecutionOptionsV1 = {
|
|
185
|
-
readonly ed25519Transport: CloudflareEd25519LaneProtocolTransportV1;
|
|
186
|
-
readonly signingWorker: SigningWorkerLaneMaterialReceiptPortV1;
|
|
187
|
-
};
|
|
188
|
-
export declare function createCloudflareLaneCurveExecutionPortsV1(options: CloudflareLaneCurveExecutionOptionsV1): LaneLifecycleCurveExecutionPortsV1;
|
|
189
|
-
export type CloudflareNormalSigningLaneMaterialAdmissionV1 = {
|
|
190
|
-
readonly product: LaneProductEpochActiveV1;
|
|
191
|
-
readonly source: {
|
|
192
|
-
readonly kind: 'rotatable_lane';
|
|
193
|
-
readonly lookup: {
|
|
194
|
-
readonly identity: SigningWorkerLaneMaterialIdentityV1;
|
|
195
|
-
readonly admittedLaneIdentityDigestB64u: DigestB64u;
|
|
196
|
-
};
|
|
197
|
-
readonly group_public_key: string;
|
|
198
|
-
};
|
|
199
|
-
};
|
|
200
|
-
/**
|
|
201
|
-
* Resolves one exact active child product before a normal-signing request is
|
|
202
|
-
* forwarded to SigningWorker. The resolver deliberately requires immutable
|
|
203
|
-
* lane coordinates and the full activation reference; activation IDs alone
|
|
204
|
-
* cannot select a private lane artifact.
|
|
205
|
-
*/
|
|
206
|
-
export declare class LaneLifecycleStoreNormalSigningLaneMaterialResolverV1 {
|
|
207
|
-
private readonly lifecycleStore;
|
|
208
|
-
constructor(lifecycleStore: Pick<LaneLifecycleStore, 'getEnrollment' | 'getProductEpoch' | 'getProtocol'>);
|
|
209
|
-
resolveV1(input: {
|
|
210
|
-
readonly lookup: LaneProductEpochLookup;
|
|
211
|
-
readonly materialActivation: MpcMaterialActivationRef;
|
|
212
|
-
readonly keyFamily: 'ed25519' | 'ecdsa_secp256k1';
|
|
213
|
-
}): Promise<CloudflareNormalSigningLaneMaterialAdmissionV1>;
|
|
214
|
-
}
|
|
215
|
-
export declare function digestSigningWorkerLaneIdentityV1(identity: SigningWorkerLaneMaterialIdentityV1): Promise<DigestB64u>;
|
|
216
|
-
export {};
|
|
217
|
-
//# sourceMappingURL=cloudflareLaneCurveExecution.d.ts.map
|
|
@@ -1,73 +0,0 @@
|
|
|
1
|
-
import type { EcdsaAdditiveLaneHolderRoundV1, EcdsaAdditiveLaneJobV1, Ed25519YaoLaneJobV1, LaneEnrollmentGatewayV1, LaneProtocolCasResultV1, LaneProtocolCommitReceiptV1, LaneHolderPackageWireV1 } from '../../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import type { RouterAbEd25519YaoCeremonyBindingV1 } from '../../../../../shared-ts/src/utils/routerAbEd25519Yao';
|
|
3
|
-
import { type LaneLifecycleAuthorizationPortV1, type LaneLifecycleCurveExecutionPortsV1 } from '../../../core/signingLanes/LaneLifecycleApplicationService';
|
|
4
|
-
export declare const ROUTER_AB_ED25519_YAO_LANE_EXECUTE_PATH_V1: "/router-ab/internal/ed25519-yao/lane/execute";
|
|
5
|
-
export interface CloudflareLaneServiceBindingV1 {
|
|
6
|
-
fetch(request: Request): Promise<Response>;
|
|
7
|
-
}
|
|
8
|
-
/**
|
|
9
|
-
* Resolves the public admitted binding for an already-encrypted client lane
|
|
10
|
-
* dispatch. Client-root contributions and Deriver envelopes stay client-side.
|
|
11
|
-
*/
|
|
12
|
-
export interface Ed25519YaoLaneBindingResolverPortV1 {
|
|
13
|
-
resolveBindingV1(input: {
|
|
14
|
-
readonly job: Ed25519YaoLaneJobV1;
|
|
15
|
-
}): Promise<RouterAbEd25519YaoCeremonyBindingV1>;
|
|
16
|
-
}
|
|
17
|
-
export type CloudflareEd25519LaneProtocolTransportOptionsV1 = {
|
|
18
|
-
readonly router: CloudflareLaneServiceBindingV1;
|
|
19
|
-
readonly internalServiceAuth: string;
|
|
20
|
-
readonly bindingResolver: Ed25519YaoLaneBindingResolverPortV1;
|
|
21
|
-
};
|
|
22
|
-
export type CloudflareEd25519LaneProtocolExecutionV1 = {
|
|
23
|
-
readonly receipt: LaneProtocolCommitReceiptV1;
|
|
24
|
-
readonly responseJson: string;
|
|
25
|
-
};
|
|
26
|
-
export declare class CloudflareEd25519LaneProtocolTransportV1 {
|
|
27
|
-
private readonly options;
|
|
28
|
-
private readonly internalServiceAuth;
|
|
29
|
-
constructor(options: CloudflareEd25519LaneProtocolTransportOptionsV1);
|
|
30
|
-
executeProtocolCommitV1(input: {
|
|
31
|
-
readonly job: Ed25519YaoLaneJobV1;
|
|
32
|
-
readonly requestJson: string;
|
|
33
|
-
}): Promise<CloudflareEd25519LaneProtocolExecutionV1>;
|
|
34
|
-
}
|
|
35
|
-
export type CloudflareLaneProtocolCommitterOptionsV1 = {
|
|
36
|
-
readonly gateway: LaneEnrollmentGatewayV1;
|
|
37
|
-
readonly authorization: LaneLifecycleAuthorizationPortV1;
|
|
38
|
-
readonly execution: LaneLifecycleCurveExecutionPortsV1;
|
|
39
|
-
readonly ed25519Transport: CloudflareEd25519LaneProtocolTransportV1;
|
|
40
|
-
};
|
|
41
|
-
export type CloudflareEd25519LaneProtocolCommitResultV1 = {
|
|
42
|
-
readonly receipt: LaneProtocolCommitReceiptV1;
|
|
43
|
-
readonly protocolCasResult: LaneProtocolCasResultV1;
|
|
44
|
-
readonly responseJson: string;
|
|
45
|
-
};
|
|
46
|
-
export type CloudflareEcdsaLaneProtocolCommitResultV1 = {
|
|
47
|
-
readonly receipt: LaneProtocolCommitReceiptV1;
|
|
48
|
-
readonly protocolCasResult: LaneProtocolCasResultV1;
|
|
49
|
-
};
|
|
50
|
-
/**
|
|
51
|
-
* Runs one private MPC effect, then records its exact receipt through Gateway
|
|
52
|
-
* CAS. A transport retry submits byte-identical input and relies on the
|
|
53
|
-
* operation-scoped worker journal for replay.
|
|
54
|
-
*/
|
|
55
|
-
export declare class CloudflareLaneProtocolCommitterV1 {
|
|
56
|
-
private readonly options;
|
|
57
|
-
constructor(options: CloudflareLaneProtocolCommitterOptionsV1);
|
|
58
|
-
executeAndRecordEd25519YaoLaneV1(input: {
|
|
59
|
-
readonly job: Ed25519YaoLaneJobV1;
|
|
60
|
-
readonly requestJson: string;
|
|
61
|
-
readonly expectedVersion: number;
|
|
62
|
-
}): Promise<CloudflareEd25519LaneProtocolCommitResultV1>;
|
|
63
|
-
executeAndRecordEcdsaAdditiveLaneV1(input: {
|
|
64
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
65
|
-
readonly holderRound: EcdsaAdditiveLaneHolderRoundV1;
|
|
66
|
-
readonly holderPackage: Extract<LaneHolderPackageWireV1, {
|
|
67
|
-
kind: 'ecdsa_additive_lane_holder_package_v1';
|
|
68
|
-
}>;
|
|
69
|
-
readonly encryptedDeltaPackageJson: string;
|
|
70
|
-
readonly expectedVersion: number;
|
|
71
|
-
}): Promise<CloudflareEcdsaLaneProtocolCommitResultV1>;
|
|
72
|
-
}
|
|
73
|
-
//# sourceMappingURL=cloudflareLaneProtocolCommitter.d.ts.map
|
|
@@ -1,6 +0,0 @@
|
|
|
1
|
-
import type { Ed25519YaoLaneJobV1 } from '../../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import type { RouterAbEd25519YaoCeremonyBindingV1 } from '../../../../../shared-ts/src/utils/routerAbEd25519Yao';
|
|
3
|
-
import type { Ed25519YaoLaneBindingResolverPortV1 } from './cloudflareLaneProtocolCommitter';
|
|
4
|
-
export declare function createLinkedDeviceEd25519CeremonyBindingResolverV1(): Ed25519YaoLaneBindingResolverPortV1;
|
|
5
|
-
export declare function buildLinkedDeviceEd25519CeremonyBindingV1(job: Ed25519YaoLaneJobV1): Promise<RouterAbEd25519YaoCeremonyBindingV1>;
|
|
6
|
-
//# sourceMappingURL=linkedDeviceEd25519CeremonyBinding.d.ts.map
|
/package/dist/esm/{core/signingLanes/LaneEffectJournalStore.js → authorization/recoveryRouting.js}
RENAMED
|
File without changes
|