@seams/wallet-server 0.7.3 → 0.8.0

package/dist/types/wallet-server/src/cloud-host.d.ts

@@ -3,7 +3,6 @@ export * from './core/ThresholdService/evmCryptoWasm';
 export * from './core/d1WalletStore';
 export * from './core/d1WalletAuthMethodStore';
 export * from './core/logger';
-export * from './core/signingLanes/LaneLifecycleApplicationService';
 export * from './core/routerAbSigning/RouterAbEcdsaPresignRuntime';
 export * from './core/types';
 export * from './delegateAction';
@@ -19,15 +18,10 @@ export * from './router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersisten
 export * from './router/cloudflare/d1/oidc/d1OidcBoundary';
 export * from './router/cloudflare/d1/auth/d1RouterApiAuthConfig';
 export * from './router/cloudflare/d1/auth/d1RouterApiAuthService';
-export * from './router/cloudflare/d1/signingLanes';
 export * from './router/cloudflare/d1/deviceLinking';
-export * from './router/cloudflare/signingLanes/cloudflareLaneCurveExecution';
-export * from './router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter';
-export * from './router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding';
 export * from './router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation';
 export * from './router/cloudflare/d1/webauthn/d1WebAuthnAuthService';
 export * from './router/cloudflare/d1/webauthn/d1WebAuthnStore';
-export * from './router/cloudflare/durableObjects/thresholdStore';
 export * from './router/cloudflare/runtime/cloudflareSignerWasm';
 export * from './router/cloudflare/runtime/ed25519SessionAdapter';
 export * from './router/cloudflare/runtime/routerAbServiceBindings';
@@ -65,7 +59,7 @@ export * from './router/domains/ed25519Yao/registration/routerAbEd25519YaoRegist
 export * from './router/domains/signingOperations/routerAbNormalSigningAdmissionCore';
 export { buildRouterAbEcdsaAcceptedAuthorizedOperationV1, buildRouterAbEd25519AcceptedAuthorizedOperationV1, evaluateRouterAbNormalSigningAdmission, type RouterAbEcdsaOperationAdmission, type RouterAbEcdsaOperationAdmissionKind, type RouterAbJsonRouteResult, type RouterAbNormalSigningAdmissionAdapter, type RouterAbNormalSigningAdmissionEvaluationInput, type RouterAbNormalSigningAdmissionFailure, type RouterAbNormalSigningAdmissionFailureCode, type RouterAbNormalSigningAdmissionInput, type RouterAbNormalSigningAdmissionResult, type RouterAbNormalSigningRouteAdmission, type RouterAbNormalSigningRouteRuntime, type RouterAbSigningWorkerJsonResult, } from './router/domains/signingOperations/routerAbNormalSigningAdmission';
 export { authenticateRouterAbWalletOperationStepUpIdentity } from './router/domains/signingOperations/routerAbOperationStepUp';
-export { buildRouterAbEcdsaDerivationPrivateSigningWorkerBody, buildRouterAbEd25519PrivateSigningWorkerBody, computeRouterAbEd25519NormalSigningAdmissionMaterial, parseRouterAbEd25519NormalSigningScopeV2, postRouterAbSigningWorkerJson, ROUTER_AB_ECDSA_DERIVATION_PRIVATE_SIGNING_PATHS, ROUTER_AB_ED25519_PRIVATE_SIGNING_PATHS, type RouterAbEcdsaDerivationPrivateSigningPath, type RouterAbEcdsaDerivationPrivateSigningWorkerBody, type RouterAbEd25519NormalSigningScopeV2, type RouterAbEd25519PrivateSigningPath, type RouterAbEd25519PrivateSigningWorkerBody, routerAbNormalSigningMaterialSourceFromActiveLaneV1, type RouterAbNormalSigningMaterialSourceV1, } from './router/domains/signingOperations/routerAbPrivateSigningWorker';
+export { buildRouterAbEcdsaDerivationPrivateSigningWorkerBody, buildRouterAbEd25519PrivateSigningWorkerBody, computeRouterAbEd25519NormalSigningAdmissionMaterial, parseRouterAbEd25519NormalSigningScopeV2, postRouterAbSigningWorkerJson, ROUTER_AB_ECDSA_DERIVATION_PRIVATE_SIGNING_PATHS, ROUTER_AB_ED25519_PRIVATE_SIGNING_PATHS, type RouterAbEcdsaDerivationPrivateSigningPath, type RouterAbEcdsaDerivationPrivateSigningWorkerBody, type RouterAbEd25519NormalSigningScopeV2, type RouterAbEd25519PrivateSigningPath, type RouterAbEd25519PrivateSigningWorkerBody, type RouterAbNormalSigningMaterialSourceV1, } from './router/domains/signingOperations/routerAbPrivateSigningWorker';
 export * from './router/domains/signingOperations/routerAbEd25519NormalSigningRoute';
 export * from './router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute';
 export * from './router/framework/routerApi';
@@ -82,8 +76,6 @@ export { parseOrgId, parseWalletId, parseWebAuthnRpId, type OrgId, type WebAuthn
 export { base64UrlDecode, base64UrlEncode } from '../../shared-ts/src/utils/encoders';
 export { sha256Bytes } from '../../shared-ts/src/utils/digests';
 export { buildTenantRootIdentityFromAuthenticatedDeploymentV1, encodeTenantRootIdentityV1, type TenantRootIdentityV1, } from '../../shared-ts/src/tenant-root/tenantRootIdentity';
-export { buildSigningWorkerParticipantRecordWithDigestV1 } from '../../shared-ts/src/signing-lanes/participantDigest';
-export { parseHpkePublicKeyB64u, parseSigningWorkerParticipantId, parseSigningWorkerRecipientKeyDigestB64u, parseSigningWorkerRecipientKeyId, } from '../../shared-ts/src/signing-lanes/participants';
 export { keccak256Bytes } from '../../shared-ts/src/utils/keccak';
 export { normalizeBoundedPositiveInteger, normalizeLowercaseString, normalizeTrimmedString, } from '../../shared-ts/src/utils/normalize';
 export { ROUTER_AB_PUBLIC_KEYSET_VERSION_V2, parseRouterAbPublicKeysetV2, type RouterAbPublicKeysetV2, } from '../../shared-ts/src/utils/routerAbPublicKeyset';
@@ -95,4 +87,34 @@ export type { RuntimePolicyScope } from '../../shared-ts/src/threshold/signingRo
 export type { WalletEmailOtpOperation } from '../../shared-ts/src/utils/emailOtpDomain';
 export { decodeJsonRpcEnvelope } from '../../shared-ts/src/utils/jsonRpc';
 export * from '../../shared-ts/src/utils/evmRpcResults';
+export { parseWalletRegistrationSetupReservation, proposeWalletRegistrationSetup, walletRegistrationSetupRequestDigest, type WalletRegistrationSetupReservation, type WalletRegistrationReservationAuthority, } from './router/domains/walletRegistration/walletRegistrationReservation';
+export type { WalletRegistrationSetupDispatcher } from './router/framework/registrationSetupDispatch';
+export type { WalletSessionLocatorPublication, WalletSessionRoutingPublisher, } from './authorization/sessionRouting';
+export { digestOpaqueValue } from './authorization/service';
+export type { WalletRecoveryRoutingPublication, WalletRecoveryRoutingPublisher, } from './authorization/recoveryRouting';
+export { parseRecoveryCodeLocatorV1, deriveRecoveryCodeLocatorV1FromBytes, } from '../../shared-ts/src/wallet-recovery/recoveryCodeLocator';
+export { parseWalletRecoveryOperationId } from '../../shared-ts/src/utils/domainIds';
+export { WalletLifecycleLocator } from './authorization/lifecycleRouting';
+export type { WalletLifecycleRoutingPublisher } from './authorization/lifecycleRouting';
+export { D1IdentityStore } from './core/d1IdentityStore';
+export type { IdentityStore } from './core/IdentityStore';
+export { verifyGoogleOidcToken } from './router/cloudflare/d1/oidc/googleOidcToken';
+export { parseGoogleLoginVerifyRequest } from './router/auth/authRequestValidation';
+export { CloudflareD1GoogleEmailOtpRegistrationAttemptStore } from './router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore';
+export type { GoogleEmailOtpRegistrationAttemptStore } from './router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore';
+export { parseGoogleEmailOtpRegistrationAttemptRecord, parseGoogleEmailOtpRegistrationOfferCandidates, requireRuntimePolicyScope, } from './router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords';
+export { prepareD1TenantStatement } from './core/d1TenantStore';
+export { D1EmailOtpRateLimitCounter } from './router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore';
+export type { EmailOtpRateLimitCounter } from './router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore';
+export type { PasskeyCredentialClaims } from './core/passkeyCredentialClaims';
+export type { WebAuthnSyncChallengeStore, WebAuthnSyncChallengeRecord, } from './core/WebAuthnSyncChallengeStore';
+export { parseWebAuthnSyncChallengeRecord } from './router/cloudflare/d1/webauthn/d1WebAuthnRecords';
+export { webAuthnCredentialIdB64uFromCredential } from './router/auth/webAuthnCredentialCodecs';
+export type { SyncChallengeFailure } from './core/WebAuthnSyncChallengeStore';
+export type { LinkedDeviceRequestProofNonceStoreV1 } from './core/deviceLinking/requestProof';
+export { D1LinkedDeviceRequestProofNonceStoreV1 } from './router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore';
+export type { LinkedDeviceBootstrapStore, LinkedDeviceBootstrapResult, } from './core/deviceLinking/linkedDeviceBootstrap';
+export { parseLinkedDeviceSessionRecordV1 } from './core/deviceLinking/linkedDeviceSessionRecord';
+export type { LinkedDeviceSessionRecordV1 } from './core/deviceLinking/linkedDeviceSessionRecord';
+export { computeLinkedDeviceSessionClaimDigestV1 } from '../../shared-ts/src/device-linking/digests';
 //# sourceMappingURL=cloud-host.d.ts.map

package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts

@@ -1,42 +1,21 @@
 import type { ThresholdRuntimePolicyScope } from './types';
-import type { EmailOtpAuthStateRecord, EmailOtpChallengeRecord, EmailOtpGrantRecord, EmailOtpUnlockChallengeRecord, EmailOtpWalletEnrollmentRecord, GoogleEmailOtpRegistrationAttemptRecord, GoogleEmailOtpRegistrationAttemptScopeInput, PendingGoogleEmailOtpRegistrationAttemptRecord } from './EmailOtpStores';
-/** Parses JSON text; any other value, and text that is not JSON, comes back unchanged. */
-export declare function parseJsonRecord(raw: unknown): unknown;
-export declare function parseCurrentEmailOtpChallengeRecord(raw: unknown): EmailOtpChallengeRecord | null;
+import type { EmailOtpChallengeRecord, EmailOtpGrantRecord, EmailOtpUnlockChallengeRecord, GoogleEmailOtpRegistrationAttemptRecord, GoogleEmailOtpRegistrationAttemptScopeInput, PendingGoogleEmailOtpRegistrationAttemptRecord } from './EmailOtpStores';
 export declare function parseCurrentEmailOtpChallengeRow(input: {
     recordJson: unknown;
     expiresAtMs: unknown;
 }): EmailOtpChallengeRecord | null;
-export declare function parseCurrentEmailOtpGrantRecord(raw: unknown): EmailOtpGrantRecord | null;
 export declare function parseCurrentEmailOtpGrantRow(input: {
     recordJson: unknown;
     expiresAtMs: unknown;
 }): EmailOtpGrantRecord | null;
-export declare function parseCurrentEmailOtpUnlockChallengeRecord(raw: unknown): EmailOtpUnlockChallengeRecord | null;
 export declare function parseCurrentEmailOtpUnlockChallengeRow(input: {
     recordJson: unknown;
     expiresAtMs: unknown;
 }): EmailOtpUnlockChallengeRecord | null;
-export declare function parseCurrentGoogleEmailOtpRegistrationAttemptRecord(raw: unknown): GoogleEmailOtpRegistrationAttemptRecord | null;
-export declare function parseCurrentGoogleEmailOtpRegistrationAttemptRow(input: {
-    recordJson: unknown;
-    expiresAtMs: unknown;
-    updatedAtMs: unknown;
-}): GoogleEmailOtpRegistrationAttemptRecord | null;
 /** The scope as one comparable string, as D1 stores it in `runtime_policy_key`; empty when unset. */
 export declare function runtimePolicyScopeKey(scope: ThresholdRuntimePolicyScope | undefined): string;
 /** The pending attempt a registration with this owner binding resumes. */
 export declare function registrationAttemptMatchesStartedScope(record: GoogleEmailOtpRegistrationAttemptRecord, input: Readonly<GoogleEmailOtpRegistrationAttemptScopeInput>): record is PendingGoogleEmailOtpRegistrationAttemptRecord;
 /** A pending attempt that a registration with a new owner binding replaces. */
 export declare function registrationAttemptMatchesReplacementScope(record: GoogleEmailOtpRegistrationAttemptRecord, input: Readonly<GoogleEmailOtpRegistrationAttemptScopeInput>): record is PendingGoogleEmailOtpRegistrationAttemptRecord;
-export declare function parseCurrentEmailOtpWalletEnrollmentRecord(raw: unknown): EmailOtpWalletEnrollmentRecord | null;
-export declare function parseCurrentEmailOtpWalletEnrollmentRow(input: {
-    recordJson: unknown;
-    updatedAtMs: unknown;
-}): EmailOtpWalletEnrollmentRecord | null;
-export declare function parseCurrentEmailOtpAuthStateRecord(raw: unknown): EmailOtpAuthStateRecord | null;
-export declare function parseCurrentEmailOtpAuthStateRow(input: {
-    recordJson: unknown;
-    updatedAtMs: unknown;
-}): EmailOtpAuthStateRecord | null;
 //# sourceMappingURL=EmailOtpRecords.d.ts.map

package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts

@@ -1,5 +1,4 @@
-import type { NormalizedLogger } from './logger';
-import type { ThresholdRuntimePolicyScope, ThresholdStoreConfigInput } from './types';
+import type { ThresholdRuntimePolicyScope } from './types';
 import type { WalletEmailOtpChannel, WalletEmailOtpLoginOperation, WalletEmailOtpOperation } from '../../../shared-ts/src/utils/emailOtpDomain';
 import { WALLET_EMAIL_OTP_ACTIONS } from '../../../shared-ts/src/utils/emailOtpDomain';
 export type EmailOtpChannel = WalletEmailOtpChannel;
@@ -33,28 +32,6 @@ export type EmailOtpChallengeRecord = {
     attemptCount: number;
     maxAttempts: number;
 };
-export type EmailOtpChallengeContextInput = {
-    challengeSubjectId: string;
-    walletId: string;
-    orgId?: string;
-    otpChannel: EmailOtpChannel;
-    ownerProofBindingDigest: string;
-    action: EmailOtpChallengeAction;
-    operation: EmailOtpChallengeOperation;
-    nowMs: number;
-};
-export interface EmailOtpChallengeStore {
-    put(record: EmailOtpChallengeRecord): Promise<void>;
-    get(challengeId: string): Promise<EmailOtpChallengeRecord | null>;
-    deleteExpired(nowMs: number): Promise<EmailOtpChallengeRecord[]>;
-    countActiveByContext(input: EmailOtpChallengeContextInput): Promise<number>;
-    findLatestActiveByContext(input: EmailOtpChallengeContextInput): Promise<EmailOtpChallengeRecord | null>;
-    deleteOldestActiveByContext(input: EmailOtpChallengeContextInput): Promise<EmailOtpChallengeRecord | null>;
-    findActiveByContext(input: EmailOtpChallengeContextInput & {
-        otpCode: string;
-    }): Promise<EmailOtpChallengeRecord | null>;
-    del(challengeId: string): Promise<void>;
-}
 export type EmailOtpGrantRecord = {
     version: 'email_otp_grant_v1';
     grantToken: string;
@@ -68,12 +45,6 @@ export type EmailOtpGrantRecord = {
     issuedAtMs: number;
     expiresAtMs: number;
 };
-export interface EmailOtpGrantStore {
-    put(record: EmailOtpGrantRecord): Promise<void>;
-    get(grantToken: string): Promise<EmailOtpGrantRecord | null>;
-    consume(grantToken: string): Promise<EmailOtpGrantRecord | null>;
-    del(grantToken: string): Promise<void>;
-}
 export type EmailOtpWalletEnrollmentRecord = {
     version: 'email_otp_wallet_enrollment_v1';
     walletId: string;
@@ -89,15 +60,6 @@ export type EmailOtpWalletEnrollmentRecord = {
     createdAtMs: number;
     updatedAtMs: number;
 };
-export interface EmailOtpWalletEnrollmentStore {
-    get(walletId: string): Promise<EmailOtpWalletEnrollmentRecord | null>;
-    getByProviderUserId(input: {
-        providerUserId: string;
-        orgId: string;
-    }): Promise<EmailOtpWalletEnrollmentRecord | null>;
-    put(record: EmailOtpWalletEnrollmentRecord): Promise<void>;
-    del(walletId: string): Promise<void>;
-}
 export type EmailOtpAuthStateRecord = {
     version: 'email_otp_auth_state_v1';
     walletId: string;
@@ -111,11 +73,6 @@ export type EmailOtpAuthStateRecord = {
     lastEmailOtpLoginAtMs?: number;
     lastStrongAuthAtMs?: number;
 };
-export interface EmailOtpAuthStateStore {
-    get(walletId: string): Promise<EmailOtpAuthStateRecord | null>;
-    put(record: EmailOtpAuthStateRecord): Promise<void>;
-    del(walletId: string): Promise<void>;
-}
 export type EmailOtpUnlockChallengeRecord = {
     version: 'email_otp_unlock_challenge_v1';
     challengeId: string;
@@ -126,11 +83,6 @@ export type EmailOtpUnlockChallengeRecord = {
     createdAtMs: number;
     expiresAtMs: number;
 };
-export interface EmailOtpUnlockChallengeStore {
-    put(record: EmailOtpUnlockChallengeRecord): Promise<void>;
-    consume(challengeId: string): Promise<EmailOtpUnlockChallengeRecord | null>;
-    del(challengeId: string): Promise<void>;
-}
 export type GoogleEmailOtpRegistrationOfferCandidateRecord = {
     candidateId: string;
     walletId: string;
@@ -202,35 +154,5 @@ export type GoogleEmailOtpRegistrationAttemptScopeInput = {
     runtimePolicyScope?: ThresholdRuntimePolicyScope;
     nowMs: number;
 };
-export interface EmailOtpRegistrationAttemptStore {
-    put(record: GoogleEmailOtpRegistrationAttemptRecord): Promise<void>;
-    get(attemptId: string): Promise<GoogleEmailOtpRegistrationAttemptRecord | null>;
-    findStartedBySubjectEmail(input: GoogleEmailOtpRegistrationAttemptScopeInput): Promise<PendingGoogleEmailOtpRegistrationAttemptRecord | null>;
-    abandonStartedBySubjectEmailExceptBinding(input: {
-        providerSubject: string;
-        email: string;
-        orgId: string;
-        ownerProofBindingDigest: string;
-        runtimePolicyScope?: ThresholdRuntimePolicyScope;
-        nowMs: number;
-        failureCode: 'owner_proof_binding_replaced';
-    }): Promise<number>;
-    hasLiveStartedWalletAttempt(input: {
-        walletId: string;
-        nowMs: number;
-    }): Promise<boolean>;
-    deleteExpired(nowMs: number): Promise<number>;
-}
-type EmailOtpStoreFactoryInput = {
-    config?: ThresholdStoreConfigInput | null;
-    logger?: NormalizedLogger;
-    isNode?: boolean;
-};
-export declare function createEmailOtpChallengeStore(input?: EmailOtpStoreFactoryInput): EmailOtpChallengeStore;
-export declare function createEmailOtpGrantStore(input?: EmailOtpStoreFactoryInput): EmailOtpGrantStore;
-export declare function createEmailOtpWalletEnrollmentStore(input?: EmailOtpStoreFactoryInput): EmailOtpWalletEnrollmentStore;
-export declare function createEmailOtpAuthStateStore(input?: EmailOtpStoreFactoryInput): EmailOtpAuthStateStore;
-export declare function createEmailOtpUnlockChallengeStore(input?: EmailOtpStoreFactoryInput): EmailOtpUnlockChallengeStore;
-export declare function createEmailOtpRegistrationAttemptStore(input?: EmailOtpStoreFactoryInput): EmailOtpRegistrationAttemptStore;
 export {};
 //# sourceMappingURL=EmailOtpStores.d.ts.map

package/dist/types/wallet-server/src/core/IdentityStore.d.ts

@@ -1,4 +1,3 @@
-import { type StoreFactoryInput } from './storeBackends';
 export { D1IdentityStore, IDENTITY_STORE_D1_SCHEMA_SQL, ensureIdentityStoreD1Schema, } from './d1IdentityStore';
 export type { D1IdentityStoreOptions, D1IdentityStoreSchemaOptions } from './d1IdentityStore';
 export type IdentitySubjectRecord = {
@@ -8,13 +7,6 @@ export type IdentitySubjectRecord = {
     createdAtMs: number;
     updatedAtMs: number;
 };
-export type IdentityUserRecord = {
-    version: 'identity_user_v1';
-    userId: string;
-    subjects: string[];
-    createdAtMs: number;
-    updatedAtMs: number;
-};
 export type LinkIdentityResult = {
     ok: true;
     movedFromUserId?: string;
@@ -47,6 +39,4 @@ export interface IdentityStore {
         subject: string;
     }): Promise<UnlinkIdentityResult>;
 }
-export declare function resolveIdentityStoreNamespace(config: Record<string, unknown>): string;
-export declare function createIdentityStore(input: StoreFactoryInput): IdentityStore;
 //# sourceMappingURL=IdentityStore.d.ts.map

package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts

@@ -458,7 +458,6 @@ export interface RegistrationCeremonyStore {
     putAddSignerIntent(intent: StoredAddSignerIntent): Promise<void>;
     getAddSignerIntent(grant: AddSignerIntentGrant): Promise<StoredAddSignerIntent | null>;
     takeAddSignerIntent(grant: AddSignerIntentGrant): Promise<ConsumedAddSignerIntent | null>;
-    putCeremony(ceremony: StoredWalletRegistrationCeremony): Promise<void>;
     getCeremony(registrationCeremonyId: string): Promise<StoredWalletRegistrationCeremony | null>;
     updateCeremony(ceremony: StoredWalletRegistrationCeremony): Promise<void>;
     takeCeremony(registrationCeremonyId: string): Promise<StoredWalletRegistrationCeremony | null>;

package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts

@@ -1,5 +1,3 @@
-export type ThresholdNodeRole = 'cosigner' | 'coordinator';
-export declare function coerceThresholdNodeRole(input: unknown): ThresholdNodeRole;
 export declare function parseThresholdEd25519ParticipantIds2p(input: {
     THRESHOLD_ED25519_CLIENT_PARTICIPANT_ID?: unknown;
     THRESHOLD_ED25519_RELAYER_PARTICIPANT_ID?: unknown;

package/dist/types/wallet-server/src/core/ThresholdService/index.d.ts

@@ -1,4 +1,2 @@
-export { createThresholdEd25519KeyStore, type ThresholdEd25519KeyStore, type ThresholdEd25519KeyRecord, } from './stores/KeyStore';
-export { createThresholdEd25519SessionStore, type ThresholdEd25519SessionStore, type ThresholdEd25519MpcSessionRecord, type ThresholdEd25519SigningSessionRecord, type ThresholdEd25519Commitments, } from './stores/SessionStore';
-export { createEd25519WalletSessionStore, createEcdsaWalletSessionStore, type Ed25519WalletSessionStore, type Ed25519WalletSessionRecord, } from './stores/WalletSessionStore';
+export { type Ed25519WalletSessionStore, type Ed25519WalletSessionRecord, } from './stores/WalletSessionStore';
 //# sourceMappingURL=index.d.ts.map

package/dist/types/wallet-server/src/core/ThresholdService/kv.d.ts

@@ -11,10 +11,6 @@ export declare class UpstashRedisRestClient {
     setRaw(key: string, value: string, ttlMs?: number): Promise<void>;
     getJson(key: string): Promise<unknown | null>;
     setJson(key: string, value: unknown, ttlMs?: number): Promise<void>;
-    getdelJson(key: string): Promise<unknown | null>;
-    incrby(key: string, delta: number): Promise<number>;
-    rpush(key: string, value: string): Promise<number>;
-    lpop(key: string): Promise<string | null>;
     eval(script: string, keys: string[], args: string[]): Promise<unknown | null>;
 }
 export type RedisResp = {
@@ -44,9 +40,6 @@ export declare class RedisTcpClient {
     send(args: string[]): Promise<RedisResp>;
 }
 export declare function redisGetJson(client: RedisTcpClient, key: string): Promise<unknown | null>;
-export declare function redisGetRaw(client: RedisTcpClient, key: string): Promise<string | null>;
 export declare function redisDel(client: RedisTcpClient, key: string): Promise<void>;
 export declare function redisSetJson(client: RedisTcpClient, key: string, value: unknown, ttlMs?: number): Promise<void>;
-export declare function redisGetdelJson(client: RedisTcpClient, key: string): Promise<unknown | null>;
-export declare function redisEval(client: RedisTcpClient, script: string, keys: string[], args: string[]): Promise<RedisResp>;
 //# sourceMappingURL=kv.d.ts.map

package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts

@@ -1,7 +1,6 @@
 import { type RouterAbEcdsaDerivationNormalSigningStateV1 } from '../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
 import type { RouterAbEcdsaDerivationPoolFillInitRequest, RouterAbEcdsaDerivationPoolFillInitResponse, RouterAbEcdsaDerivationPoolFillStepRequest, RouterAbEcdsaDerivationPoolFillStepResponse } from '../../types';
 import { type RuntimePolicyScope } from '../../../../../shared-ts/src/threshold/signingRootScope';
-import type { ThresholdNodeRole } from '../config';
 import { type RouterAbEcdsaDerivationPresignaturePoolFillAuth } from './ecdsaDerivationPresignBridge';
 export type RouterAbEcdsaOwnerWalletScope = {
     readonly orgId: string;
@@ -42,12 +41,10 @@ export type RouterAbEcdsaPresignSigningWorkerTransport = {
     readonly fetchImpl: typeof fetch;
 };
 export declare class RouterAbEcdsaDerivationPoolFillHandlers {
-    private readonly nodeRole;
     private readonly participantIds2p;
     private readonly ensureReady;
     private readonly signingWorkerTransport;
     constructor(input: {
-        readonly nodeRole: ThresholdNodeRole;
         readonly participantIds2p: number[];
         readonly ensureReady: () => Promise<void>;
         readonly signingWorkerTransport: RouterAbEcdsaPresignSigningWorkerTransport;

package/dist/types/wallet-server/src/core/ThresholdService/routerAbNormalSigningPolicy.d.ts

@@ -13,7 +13,6 @@ export type RouterAbNormalSigningServerPolicy = {
     mode: 'enabled';
     signingWorkerId: string;
 };
-export declare function parseRouterAbNormalSigningServerPolicy(config: Record<string, unknown>): RouterAbNormalSigningServerPolicy;
 export declare function validateRouterAbNormalSigningServerPolicy(args: {
     requested: RouterAbEd25519NormalSigningState | undefined;
     policy: RouterAbNormalSigningServerPolicy;

package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts

@@ -1,5 +1,4 @@
-import type { NormalizedLogger } from '../../logger';
-import type { ThresholdEd25519AuthorityScope, ThresholdEcdsaSigningRootMetadata, ThresholdStoreConfigInput } from '../../types';
+import type { ThresholdEd25519AuthorityScope, ThresholdEcdsaSigningRootMetadata } from '../../types';
 import { WALLET_SESSION_FAILURE_CODES, type WalletSessionFailureCode } from '../../../../../shared-ts/src/utils/walletSessionFailure';
 import type { EcdsaKeyHandle } from '../../keyMaterialBrands';
 export type Ed25519WalletSessionRecord = {
@@ -12,21 +11,21 @@ export type Ed25519WalletSessionRecord = {
     authorityScope: ThresholdEd25519AuthorityScope;
     participantIds: number[];
 } & Partial<ThresholdEcdsaSigningRootMetadata>;
-export type EcdsaWalletSessionRecordCore = {
+type EcdsaWalletSessionRecordCore = {
     expiresAtMs: number;
     relayerKeyId: string;
     walletId: string;
     keyHandle: EcdsaKeyHandle;
     participantIds: number[];
 };
-export type EcdsaWalletSessionRecord = EcdsaWalletSessionRecordCore & ({
+type EcdsaWalletSessionRecord = EcdsaWalletSessionRecordCore & ({
     signingRootId?: never;
     signingRootVersion?: never;
     walletKeyVersion?: never;
     derivationVersion?: never;
 } | ThresholdEcdsaSigningRootMetadata);
-export type WalletSessionRecord = Ed25519WalletSessionRecord | EcdsaWalletSessionRecord;
-export type WalletSessionConsumeUsesResult = {
+type WalletSessionRecord = Ed25519WalletSessionRecord | EcdsaWalletSessionRecord;
+type WalletSessionConsumeUsesResult = {
     ok: true;
     remainingUses: number;
 } | {
@@ -42,7 +41,7 @@ type WalletSessionConsumedUseResult = {
     code: string;
     message: string;
 };
-export type WalletSessionReplayGuardResult = {
+type WalletSessionReplayGuardResult = {
     ok: true;
 } | {
     ok: false;
@@ -54,7 +53,7 @@ export type WalletSessionStatus<TRecord extends WalletSessionRecord> = {
     expiresAtMs: number;
     remainingUses: number;
 };
-export type WalletSessionStatusLookupResult<TRecord extends WalletSessionRecord> = {
+type WalletSessionStatusLookupResult<TRecord extends WalletSessionRecord> = {
     ok: true;
     status: WalletSessionStatus<TRecord>;
 } | {
@@ -81,16 +80,5 @@ export interface WalletSessionStore<TRecord extends WalletSessionRecord> {
 }
 export type Ed25519WalletSessionStore = WalletSessionStore<Ed25519WalletSessionRecord>;
 export type EcdsaWalletSessionStore = WalletSessionStore<EcdsaWalletSessionRecord>;
-export type WalletSessionRecordParser<TRecord extends WalletSessionRecord> = (raw: unknown) => TRecord | null;
-export declare function createEd25519WalletSessionStore(input: {
-    config?: ThresholdStoreConfigInput | null;
-    logger: NormalizedLogger;
-    isNode: boolean;
-}): Ed25519WalletSessionStore;
-export declare function createEcdsaWalletSessionStore(input: {
-    config?: ThresholdStoreConfigInput | null;
-    logger: NormalizedLogger;
-    isNode: boolean;
-}): EcdsaWalletSessionStore;
 export {};
 //# sourceMappingURL=WalletSessionStore.d.ts.map

package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts

@@ -1,41 +1,7 @@
 import { type WalletAuthAuthority } from '../../../../shared-ts/src/utils/walletAuthAuthority';
 import type { EcdsaDerivationPublicIdentity, ThresholdEd25519AuthorityScope } from '../types';
-import type { ThresholdEcdsaMpcSessionRecord, ThresholdEd25519CoordinatorSigningSessionRecord, ThresholdEd25519MpcSessionRecord, ThresholdEd25519SigningSessionRecord } from './stores/SessionStore';
-import type { EcdsaWalletSessionRecord, Ed25519WalletSessionRecord } from './stores/WalletSessionStore';
-export declare function toPrefixWithColon(prefix: unknown, defaultPrefix: string): string;
-export declare function toThresholdEd25519KeyPrefix(prefix: unknown): string;
-export declare function toThresholdEd25519SessionPrefix(prefix: unknown): string;
-export declare function toThresholdEd25519WalletSessionPrefix(prefix: unknown): string;
-export declare function toThresholdEd25519PrefixFromBase(basePrefix: unknown, kind: 'key' | 'sess' | 'wallet-session'): string;
-export declare function canonicalThresholdEd25519RelayerKeyId(relayerKeyId: unknown): string;
-export declare function toThresholdEcdsaSessionPrefix(prefix: unknown): string;
-export declare function toThresholdEcdsaWalletSessionPrefix(prefix: unknown): string;
-export declare function toThresholdEcdsaPrefixFromBase(basePrefix: unknown, kind: 'key' | 'sess' | 'wallet-session' | 'presign'): string;
-type ParsedThresholdEd25519RouterMaterial = {
-    signingShareB64u: string;
-    verifyingShareB64u: string;
-};
-type ParsedThresholdEd25519ReadyKeyRecord = {
-    kind: 'ready';
-    walletId: string;
-    nearAccountId: string;
-    nearEd25519SigningKeyId: string;
-    authorityScope: ThresholdEd25519AuthorityScope;
-    publicKey: string;
-    routerMaterial: ParsedThresholdEd25519RouterMaterial;
-    keyVersion: string;
-    recoveryExportCapable: true;
-};
-export declare function parseThresholdEd25519KeyRecord(raw: unknown): ParsedThresholdEd25519ReadyKeyRecord | null;
 export declare function parseEcdsaDerivationPublicIdentity(raw: unknown): EcdsaDerivationPublicIdentity | null;
 export declare function parseThresholdEd25519AuthorityScope(raw: unknown): ThresholdEd25519AuthorityScope | null;
 export declare function thresholdEd25519AuthorityScopeFromWalletAuthAuthority(authority: WalletAuthAuthority): ThresholdEd25519AuthorityScope;
 export declare function thresholdEd25519AuthorityScopesMatch(left: ThresholdEd25519AuthorityScope, right: ThresholdEd25519AuthorityScope): boolean;
-export declare function parseThresholdEd25519MpcSessionRecord(raw: unknown): ThresholdEd25519MpcSessionRecord | null;
-export declare function parseThresholdEcdsaMpcSessionRecord(raw: unknown): ThresholdEcdsaMpcSessionRecord | null;
-export declare function parseThresholdEd25519SigningSessionRecord(raw: unknown): ThresholdEd25519SigningSessionRecord | null;
-export declare function parseThresholdEd25519CoordinatorSigningSessionRecord(raw: unknown): ThresholdEd25519CoordinatorSigningSessionRecord | null;
-export declare function parseEd25519WalletSessionRecord(raw: unknown): Ed25519WalletSessionRecord | null;
-export declare function parseEcdsaWalletSessionRecord(raw: unknown): EcdsaWalletSessionRecord | null;
-export {};
 //# sourceMappingURL=validation.d.ts.map

package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts

@@ -1,7 +1,3 @@
-import type { WalletAuthMethodStore } from './d1WalletAuthMethodStore';
-import { type StoreFactoryInput } from './storeBackends';
-export { D1WalletAuthMethodStore, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_SQL, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_V2_SQL, ensureWalletAuthMethodStoreD1Schema, ensureWalletAuthMethodStoreD1SchemaV2, normalizeWalletAuthMethod, normalizeWalletAuthMethodV2, prepareD1WalletAuthMethodV2PutStatement, walletAuthMethodV2Id, } from './d1WalletAuthMethodStore';
+export { D1WalletAuthMethodStore, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_SQL, WALLET_AUTH_METHOD_STORE_D1_SCHEMA_V2_SQL, ensureWalletAuthMethodStoreD1Schema, normalizeWalletAuthMethod, normalizeWalletAuthMethodV2, prepareD1WalletAuthMethodV2PutStatement, walletAuthMethodV2Id, } from './d1WalletAuthMethodStore';
 export type { D1WalletAuthMethodStoreOptions, D1WalletAuthMethodStoreSchemaOptions, WalletAuthMethodRecord, WalletAuthMethodRecordV2Owned, WalletAuthMethodStore, WalletAuthMethodV2Store, } from './d1WalletAuthMethodStore';
-export declare function resolveWalletAuthMethodStoreNamespace(config: Record<string, unknown>): string;
-export declare function createWalletAuthMethodStore(input: StoreFactoryInput): WalletAuthMethodStore;
 //# sourceMappingURL=WalletAuthMethodStore.d.ts.map

package/dist/types/wallet-server/src/core/WalletStore.d.ts

@@ -5,7 +5,6 @@ import { type RuntimePolicyScope } from '../../../shared-ts/src/threshold/signin
 import type { RouterAbEd25519YaoActivationResultV1, RouterAbEd25519YaoActivationAdmissionReceiptV1, RouterAbEd25519YaoBytes32V1, RouterAbEd25519YaoRecoveryAdmissionRequestV1, RouterAbEd25519YaoRegistrationAdmissionRequestV1 } from '../../../shared-ts/src/utils/routerAbEd25519Yao';
 import { type RouterAbMpcMaterialActivationRefWire } from '../../../shared-ts/src/utils/routerAbNormalSigningIdentity';
 import { type RouterAbEcdsaDerivationActivationRefreshForwardedResponseV1, type RouterAbEcdsaDerivationActivationRefreshRequestV1, type RouterAbEcdsaDerivationPublicCapabilityV1, type RouterAbEcdsaRegistrationActivationReceiptV1 } from '../../../shared-ts/src/utils/routerAbEcdsaDerivation';
-import { type StoreFactoryInput } from './storeBackends';
 export { D1WalletStore, WALLET_STORE_D1_SCHEMA_SQL, buildWalletEcdsaSignerRecord, ensureWalletStoreD1Schema, } from './d1WalletStore';
 export type { D1WalletStoreOptions, D1WalletStoreSchemaOptions } from './d1WalletStore';
 export type WalletRecord = {
@@ -128,11 +127,9 @@ export declare function ecdsaPostRegistrationRequestMatchesCapability(input: {
     request: WalletEcdsaPostRegistrationPublicRequest;
     capability: RouterAbEcdsaDerivationPublicCapabilityV1;
 }): boolean;
-export declare function resolveWalletStoreNamespace(config: Record<string, unknown>): string;
 export declare function parseWalletEcdsaSignerRecord(raw: unknown): WalletEcdsaSignerRecord | null;
 export declare function buildWalletEd25519SignerId(input: {
     nearAccountId: string;
     signerSlot: number;
 }): string;
-export declare function createWalletStore(input: StoreFactoryInput): WalletStore;
 //# sourceMappingURL=WalletStore.d.ts.map

package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts

@@ -1,6 +1,4 @@
 import { type WebAuthnAuthenticatorDeviceInfo } from '../../../shared-ts/src/utils/webauthnDeviceInfo';
-import type { StoreFactoryInput } from './storeBackends';
-import { type D1SchemaOptions, type D1TenantStoreOptions } from './d1TenantStore';
 export type WebAuthnAuthenticatorRecord = {
     version: 'webauthn_authenticator_v1';
     credentialIdB64u: string;
@@ -26,10 +24,6 @@ export interface WebAuthnAuthenticatorStore {
      */
     list?(userId: string): Promise<WebAuthnAuthenticatorRecord[]>;
 }
-export interface D1WebAuthnAuthenticatorStoreSchemaOptions extends D1SchemaOptions {
-}
-export interface D1WebAuthnAuthenticatorStoreOptions extends D1TenantStoreOptions {
-}
 export type D1WebAuthnAuthenticatorRow = {
     readonly credential_id_b64u?: unknown;
     readonly credential_public_key_b64u?: unknown;
@@ -38,18 +32,4 @@ export type D1WebAuthnAuthenticatorRow = {
     readonly updated_at_ms?: unknown;
     readonly device_info_json?: unknown;
 };
-export declare const WEBAUTHN_AUTHENTICATOR_STORE_D1_SCHEMA_SQL: readonly ["\n    CREATE TABLE IF NOT EXISTS webauthn_authenticators (\n      namespace TEXT NOT NULL,\n      org_id TEXT NOT NULL,\n      project_id TEXT NOT NULL,\n      env_id TEXT NOT NULL,\n      user_id TEXT NOT NULL,\n      credential_id_b64u TEXT NOT NULL,\n      credential_public_key_b64u TEXT NOT NULL,\n      counter INTEGER NOT NULL,\n      created_at_ms INTEGER NOT NULL,\n      updated_at_ms INTEGER NOT NULL,\n      device_info_json TEXT NOT NULL DEFAULT '{}',\n      PRIMARY KEY (namespace, org_id, project_id, env_id, user_id, credential_id_b64u),\n      CHECK (length(user_id) > 0),\n      CHECK (length(credential_id_b64u) > 0),\n      CHECK (length(credential_public_key_b64u) > 0),\n      CHECK (counter >= 0),\n      CHECK (created_at_ms > 0),\n      CHECK (updated_at_ms > 0)\n    )\n  ", "\n    CREATE INDEX IF NOT EXISTS webauthn_authenticators_user_idx\n      ON webauthn_authenticators (\n        namespace,\n        org_id,\n        project_id,\n        env_id,\n        user_id,\n        created_at_ms\n      )\n  "];
-export declare function ensureWebAuthnAuthenticatorStoreD1Schema(options: D1WebAuthnAuthenticatorStoreSchemaOptions): Promise<void>;
-export declare function resolveWebAuthnAuthenticatorStoreNamespace(config: Record<string, unknown>): string;
-export declare class D1WebAuthnAuthenticatorStore implements WebAuthnAuthenticatorStore {
-    readonly adapterKind = "d1";
-    private readonly table;
-    private readonly prepare;
-    constructor(input: D1WebAuthnAuthenticatorStoreOptions);
-    get(userId: string, credentialIdB64u: string): Promise<WebAuthnAuthenticatorRecord | null>;
-    put(userId: string, record: WebAuthnAuthenticatorRecord): Promise<void>;
-    del(userId: string, credentialIdB64u: string): Promise<void>;
-    list(userId: string): Promise<WebAuthnAuthenticatorRecord[]>;
-}
-export declare function createWebAuthnAuthenticatorStore(input: StoreFactoryInput): WebAuthnAuthenticatorStore;
 //# sourceMappingURL=WebAuthnAuthenticatorStore.d.ts.map

package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts

@@ -1,6 +1,5 @@
 import type { ThresholdRuntimePolicyScope } from './types';
-import type { StoreFactoryInput } from './storeBackends';
-import { type D1SchemaOptions, type D1TenantScope, type D1TenantStoreOptions } from './d1TenantStore';
+import { type D1TenantScope } from './d1TenantStore';
 import type { D1DatabaseLike, D1PreparedStatementLike } from '../storage/tenantRoute';
 /**
  * The Ed25519 facts on a credential binding are denormalized from the wallet's
@@ -57,10 +56,6 @@ export interface WebAuthnCredentialBindingStore {
         rpId?: string;
     }): Promise<WebAuthnCredentialBindingRecord[]>;
 }
-export interface D1WebAuthnCredentialBindingStoreSchemaOptions extends D1SchemaOptions {
-}
-export interface D1WebAuthnCredentialBindingStoreOptions extends D1TenantStoreOptions {
-}
 type D1WebAuthnCredentialBindingWrite = {
     readonly database: D1DatabaseLike;
     readonly scope: D1TenantScope;
@@ -69,26 +64,5 @@ type D1WebAuthnCredentialBindingWrite = {
 export declare function prepareD1WebAuthnCredentialBindingPutStatement(input: D1WebAuthnCredentialBindingWrite): D1PreparedStatementLike;
 /** Insert-only binding write for credential promotion. */
 export declare function prepareD1WebAuthnCredentialBindingInsertStatement(input: D1WebAuthnCredentialBindingWrite): D1PreparedStatementLike;
-export declare const WEBAUTHN_CREDENTIAL_BINDING_STORE_D1_SCHEMA_SQL: readonly ["\n    CREATE TABLE IF NOT EXISTS webauthn_credential_bindings (\n      namespace TEXT NOT NULL,\n      org_id TEXT NOT NULL,\n      project_id TEXT NOT NULL,\n      env_id TEXT NOT NULL,\n      rp_id TEXT NOT NULL,\n      credential_id_b64u TEXT NOT NULL,\n      user_id TEXT NOT NULL,\n      -- Nullable until the wallet's Ed25519 Yao ceremony settles.\n      signer_slot INTEGER,\n      record_json TEXT NOT NULL,\n      created_at_ms INTEGER NOT NULL,\n      updated_at_ms INTEGER NOT NULL,\n      PRIMARY KEY (namespace, org_id, project_id, env_id, rp_id, credential_id_b64u),\n      CHECK (length(rp_id) > 0),\n      CHECK (length(credential_id_b64u) > 0),\n      CHECK (length(user_id) > 0),\n      CHECK (signer_slot IS NULL OR signer_slot >= 1),\n      CHECK (json_valid(record_json)),\n      CHECK (created_at_ms > 0),\n      CHECK (updated_at_ms > 0)\n    )\n  ", "\n    CREATE INDEX IF NOT EXISTS webauthn_credential_bindings_user_idx\n      ON webauthn_credential_bindings (\n        namespace,\n        org_id,\n        project_id,\n        env_id,\n        user_id,\n        rp_id,\n        signer_slot\n      )\n  "];
-export declare function ensureWebAuthnCredentialBindingStoreD1Schema(options: D1WebAuthnCredentialBindingStoreSchemaOptions): Promise<void>;
-export declare function resolveWebAuthnCredentialBindingStoreNamespace(config: Record<string, unknown>): string;
-export declare class D1WebAuthnCredentialBindingStore implements WebAuthnCredentialBindingStore {
-    readonly adapterKind = "d1";
-    private readonly table;
-    private readonly prepare;
-    constructor(input: D1WebAuthnCredentialBindingStoreOptions);
-    get(rpId: string, credentialIdB64u: string): Promise<WebAuthnCredentialBindingRecord | null>;
-    put(record: WebAuthnCredentialBindingRecord): Promise<void>;
-    del(rpId: string, credentialIdB64u: string): Promise<void>;
-    getMaxSignerSlot(input: {
-        userId: string;
-        rpId?: string;
-    }): Promise<number | null>;
-    listByUserId(input: {
-        userId: string;
-        rpId?: string;
-    }): Promise<WebAuthnCredentialBindingRecord[]>;
-}
-export declare function createWebAuthnCredentialBindingStore(input: StoreFactoryInput): WebAuthnCredentialBindingStore;
 export {};
 //# sourceMappingURL=WebAuthnCredentialBindingStore.d.ts.map

package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts

@@ -1,25 +1,11 @@
-import { D1WebAuthnChallengeStore, ensureWebAuthnChallengeStoreD1Schema, type D1WebAuthnChallengeStoreOptions, type WebAuthnChallengeStore } from './webAuthnStoreBackends';
-import type { StoreFactoryInput } from './storeBackends';
-import type { D1SchemaOptions } from './d1TenantStore';
+import type { WalletId } from '../../../shared-ts/src/utils/domainIds';
 export type WebAuthnLoginChallengeRecord = {
     version: 'webauthn_login_challenge_v1';
     challengeId: string;
-    userId: string;
+    userId: WalletId;
     rpId: string;
     challengeB64u: string;
     createdAtMs: number;
     expiresAtMs: number;
 };
-export interface WebAuthnLoginChallengeStore extends WebAuthnChallengeStore<WebAuthnLoginChallengeRecord> {
-}
-export interface D1WebAuthnLoginChallengeStoreSchemaOptions extends D1SchemaOptions {
-}
-export interface D1WebAuthnLoginChallengeStoreOptions extends D1WebAuthnChallengeStoreOptions {
-}
-export declare const WEBAUTHN_LOGIN_CHALLENGE_STORE_D1_SCHEMA_SQL: readonly ["\n    CREATE TABLE IF NOT EXISTS webauthn_challenges (\n      namespace TEXT NOT NULL,\n      org_id TEXT NOT NULL,\n      project_id TEXT NOT NULL,\n      env_id TEXT NOT NULL,\n      challenge_id TEXT NOT NULL,\n      challenge_kind TEXT NOT NULL,\n      record_json TEXT NOT NULL,\n      created_at_ms INTEGER NOT NULL,\n      expires_at_ms INTEGER NOT NULL,\n      PRIMARY KEY (namespace, org_id, project_id, env_id, challenge_id),\n      CHECK (length(challenge_id) > 0),\n      CHECK (challenge_kind IN ('login', 'sync', 'recovery_registration')),\n      CHECK (json_valid(record_json)),\n      CHECK (created_at_ms > 0),\n      CHECK (expires_at_ms > created_at_ms)\n    )\n  ", "\n    CREATE INDEX IF NOT EXISTS webauthn_challenges_expiry_idx\n      ON webauthn_challenges (\n        namespace,\n        org_id,\n        project_id,\n        env_id,\n        challenge_kind,\n        expires_at_ms\n      )\n  "];
-export declare const ensureWebAuthnLoginChallengeStoreD1Schema: typeof ensureWebAuthnChallengeStoreD1Schema;
-export declare class D1WebAuthnLoginChallengeStore extends D1WebAuthnChallengeStore<WebAuthnLoginChallengeRecord> {
-    constructor(input: D1WebAuthnLoginChallengeStoreOptions);
-}
-export declare function createWebAuthnLoginChallengeStore(input: StoreFactoryInput): WebAuthnLoginChallengeStore;
 //# sourceMappingURL=WebAuthnLoginChallengeStore.d.ts.map