@seams/wallet-server 0.7.3 → 0.8.0

package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts

@@ -1,3 +1,6 @@
+import { type PasskeyCredentialClaims } from '../../../../core/passkeyCredentialClaims';
+import type { WalletRecoveryRoutingPublisher } from '../../../../authorization/recoveryRouting';
+import type { WalletRecoveryOperationId } from '../../../../../../shared-ts/src/utils/domainIds';
 import { type WalletRecoveryBackupAcknowledgementV1 } from '../../../../../../shared-ts/src/wallet-recovery/recoveryCodes';
 import { type WalletRecoveryEnvelopeSetRecord } from '../../../../../../shared-ts/src/wallet-recovery';
 import { type PasskeyCustodyEnvelopeRecord } from '../../../../../../shared-ts/src/passkey-custody';
@@ -16,6 +19,8 @@ import { D1WalletAuthorityStore } from '../wallet/d1WalletAuthorityStore';
 import type { EmailOtpWalletEnrollmentRecord } from '../../../../core/EmailOtpStores';
 import { type WalletRecoveryGoogleEmailOtpFinalizationInput } from './d1WalletRecoveryGoogleEmailOtpRecords';
 type CloudflareD1WalletCustodyCommitStoreOptions = {
+    readonly credentialClaims?: PasskeyCredentialClaims;
+    readonly recoveryRouting?: WalletRecoveryRoutingPublisher;
     readonly database: D1DatabaseLike;
     readonly scope: CloudflareD1VersionedJsonRecordScopeV1;
     readonly walletAuthMethodStore?: D1WalletAuthMethodStore;
@@ -104,12 +109,16 @@ export type WalletRecoveryAuthenticatorCommit = {
     readonly challengeDeleteStatement: D1PreparedStatementLike;
 };
 export declare class CloudflareD1WalletCustodyCommitStore {
+    private readonly recoveryRouting;
+    private readonly credentialClaims;
     private readonly database;
     private readonly scope;
     private readonly records;
     private readonly walletAuthMethodStore;
     private readonly walletAuthorityStore;
     constructor(options: CloudflareD1WalletCustodyCommitStoreOptions);
+    publishRecoveryOperation(walletId: WalletId, operationId: WalletRecoveryOperationId): Promise<void>;
+    private claimRecoveryCodeRoutes;
     readRecoveryCodeLocator(locatorB64u: RecoveryCodeLocatorV1): Promise<WalletRecoveryCodeLocatorRecord | null>;
     /** Reads locator metadata without ever materializing a recovery code. */
     readRecoveryCodeLocatorByRecoveryKey(input: {

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts

@@ -20,7 +20,6 @@ type D1RegistrationCeremonyRecordMutation = {
 type D1RegistrationCeremonyAtomicBranchClaim = {
     readonly value: Record<string, unknown>;
     readonly version: number;
-    readonly expiresAtMs: number;
 };
 export declare class D1RegistrationCeremonyRecordStore {
     private readonly database;
@@ -29,6 +28,7 @@ export declare class D1RegistrationCeremonyRecordStore {
     constructor(options: D1RegistrationCeremonyRecordStoreOptions);
     get(scope: string, id: string): Promise<D1RegistrationCeremonyStoredRecord | null>;
     putExact(mutation: D1RegistrationCeremonyRecordMutation): Promise<void>;
+    insertOrRead(mutation: D1RegistrationCeremonyRecordMutation): Promise<D1RegistrationCeremonyStoredRecord>;
     updateExpected(input: {
         readonly scope: string;
         readonly id: string;

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts

@@ -1,27 +1,26 @@
-import type { WalletRegistrationFinalizeSuccess } from '../../../../core/registrationContracts';
+import { deriveEvmFamilySigningKeySlotId } from '../../../../../../shared-ts/src/signing-lanes';
 import { type EcdsaClientRootPublicKey33B64u } from '../../../../../../shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap';
+import type { RuntimePolicyScope } from '../../../../../../shared-ts/src/threshold/signingRootScope';
+import { type WalletAuthMethodId } from '../../../../../../shared-ts/src/utils/domainIds';
+import { type AddAuthMethodInput, type RegistrationAuthMethodInput } from '../../../../../../shared-ts/src/utils/registrationAuthMethodInput';
 import { type AddAuthMethodIntentCallerV1, type AddAuthMethodIntentV1, type AddSignerIntentV1, type RegistrationIntentV1, type RuntimePolicyScopeLike, type WalletId } from '../../../../../../shared-ts/src/utils/registrationIntent';
-import { type ServerAllocatedWalletId } from '../../../../../../shared-ts/src/utils/registrationIds';
 import { type AddSignerSelection, type RegistrationSignerSetSelection } from '../../../../../../shared-ts/src/utils/registrationSignerPlan';
-import { type AddAuthMethodInput, type RegistrationAuthMethodInput } from '../../../../../../shared-ts/src/utils/registrationAuthMethodInput';
-import { type WalletAuthMethodId } from '../../../../../../shared-ts/src/utils/domainIds';
-import type { RuntimePolicyScope } from '../../../../../../shared-ts/src/threshold/signingRootScope';
-import { deriveEvmFamilySigningKeySlotId } from '../../../../../../shared-ts/src/signing-lanes';
+import type { WalletRegistrationFinalizeSuccess } from '../../../../core/registrationContracts';
 import { type RouterAbEcdsaDerivationPublicCapabilityV1, type RouterAbEcdsaRegistrationActivationReceiptV1 } from '../../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
-import type { EcdsaDerivationServerBootstrapResponse } from '../../../../core/types';
+import { type WalletEcdsaSignerRecord, type WalletRecord } from '../../../../core/d1WalletStore';
+import { StoredAddAuthMethodIntent, StoredAddSignerIntent, StoredWalletAddAuthMethodCeremony, StoredWalletAddAuthMethodFinalizeReplay, StoredWalletAddSignerCeremony, StoredWalletAddSignerFinalizeReplay, StoredWalletRegistrationCeremony } from '../../../../core/RegistrationCeremonyStore';
+import type { WalletAddSignerFinalizeResponse, WalletRegistrationEcdsaWalletKey } from '../../../../core/registrationContracts';
 import type { WalletRegistrationCommittedInstallationProjectionV1 } from '../../../../core/threeRouteRegistrationContracts';
-import type { WalletRegistrationEcdsaWalletKey, WalletAddSignerFinalizeResponse } from '../../../../core/registrationContracts';
-import { StoredAddAuthMethodIntent, StoredAddSignerIntent, StoredWalletAddAuthMethodCeremony, StoredWalletAddSignerCeremony, StoredWalletAddSignerFinalizeReplay, StoredWalletAddAuthMethodFinalizeReplay, StoredWalletRegistrationCeremony } from '../../../../core/RegistrationCeremonyStore';
 import { type ThresholdEcdsaChainTarget } from '../../../../core/thresholdEcdsaChainTarget';
-import { type WalletEcdsaSignerRecord, type WalletRecord } from '../../../../core/d1WalletStore';
+import type { EcdsaDerivationServerBootstrapResponse } from '../../../../core/types';
 type D1WalletRegistrationFinalizeReplaySuccess = WalletRegistrationFinalizeSuccess;
-export declare function createD1ServerAllocatedWalletId(): ServerAllocatedWalletId;
 export declare function inferRuntimePolicyScopeFromSigningRoot(input: {
     readonly orgId: string;
     readonly signingRootId?: string;
     readonly signingRootVersion?: string;
 }): RuntimePolicyScope | undefined;
 export declare function buildRegistrationIntent(input: {
+    readonly nonceB64u: string;
     readonly walletId: WalletId;
     readonly authMethod: RegistrationAuthMethodInput;
     readonly signerSelection: RegistrationSignerSetSelection;

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts

@@ -16,7 +16,9 @@ type D1WalletRegistrationEcdsaCeremonyClaimV1 = {
 export declare class CloudflareD1RegistrationCeremonyIntentStore {
     private readonly storage;
     constructor(input: RegistrationCeremonyIntentStoreConfig);
-    putCeremony(ceremony: StoredWalletRegistrationCeremony): Promise<void>;
+    getSetupCeremony(ceremonyId: string): Promise<StoredWalletRegistrationCeremony | null>;
+    reserveSetupCeremony(proposed: StoredWalletRegistrationCeremony): Promise<StoredWalletRegistrationCeremony>;
+    ensureSetupCeremony(setup: StoredWalletRegistrationCeremony): Promise<void>;
     getCeremony(registrationCeremonyId: string): Promise<StoredWalletRegistrationCeremony | null>;
     getCeremonySnapshot(registrationCeremonyId: string): Promise<D1WalletRegistrationEcdsaCeremonyClaimV1 | null>;
     updateCeremony(input: {
@@ -41,7 +43,6 @@ export declare class CloudflareD1RegistrationCeremonyIntentStore {
         readonly expected: D1WalletRegistrationEcdsaCeremonyClaimV1;
         readonly next: StoredWalletRegistrationCeremony;
     }): Promise<void>;
-    takeCeremony(registrationCeremonyId: string): Promise<StoredWalletRegistrationCeremony | null>;
     deleteCeremony(registrationCeremonyId: string): Promise<boolean>;
     cancelTerminalCeremony(input: {
         readonly registrationCeremonyId: string;

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationSetupSupport.d.ts

@@ -0,0 +1,51 @@
+import { type RuntimePolicyScope } from '../../../../../../shared-ts/src/threshold/signingRootScope';
+import { type RegistrationIntentV1 } from '../../../../../../shared-ts/src/utils/registrationIntent';
+import { type RegistrationEvmFamilyEcdsaSignerPlan, type RegistrationNearEd25519SignerPlan, type RegistrationSignerPlan } from '../../../../../../shared-ts/src/utils/registrationSignerPlan';
+import { type StoredWalletRegistrationPreparedContext } from '../../../../core/RegistrationCeremonyStore';
+import { type WalletRegistrationRouteDiagnostics, type WalletRegistrationRouteTimingName } from '../../../../core/registrationContracts';
+import { type ThresholdEcdsaChainTarget } from '../../../../core/thresholdEcdsaChainTarget';
+export declare function errorMessage(error: unknown): string;
+export declare function startD1RegistrationRouteTiming(name: WalletRegistrationRouteTimingName): D1RegistrationRouteTimingMark;
+export declare function finishD1RegistrationRouteTiming(recorder: D1RegistrationRouteTimingRecorder, mark: D1RegistrationRouteTimingMark): void;
+export declare function createD1RegistrationRouteTimingRecorder(route: WalletRegistrationRouteDiagnostics['route']): D1RegistrationRouteTimingRecorder;
+export declare function registrationIntentSignerBranches(intent: RegistrationIntentV1): RegistrationIntentSignerBranchesResult;
+export declare function resolveRegistrationPreparedContextFromPlan(input: {
+    readonly signerPlan: RegistrationSignerPlan;
+    readonly runtimePolicyScope: RuntimePolicyScope | undefined;
+    readonly signingRootId: string;
+    readonly signingRootVersion: string;
+}): RegistrationPreparedContextResolution;
+export declare function registrationPreparedContextEcdsaChainTargets(preparedContext: StoredWalletRegistrationPreparedContext): readonly ThresholdEcdsaChainTarget[] | null;
+type D1RegistrationRouteTimingMark = {
+    readonly name: WalletRegistrationRouteTimingName;
+    readonly startedAtMs: number;
+};
+export type D1RegistrationRouteTimingRecorder = {
+    readonly route: WalletRegistrationRouteDiagnostics['route'];
+    readonly entries: WalletRegistrationRouteDiagnostics['entries'];
+};
+type RegistrationIntentSignerBranchesResult = {
+    ok: true;
+    value: RegistrationIntentSignerBranches;
+} | {
+    ok: false;
+    code: string;
+    message: string;
+};
+export declare function registrationSignerBranchesFromPlan(plan: RegistrationSignerPlan): RegistrationIntentSignerBranches;
+type RegistrationPreparedContextResolution = {
+    ok: true;
+    preparedContext: StoredWalletRegistrationPreparedContext;
+    ecdsaChainTargets: readonly ThresholdEcdsaChainTarget[] | null;
+} | {
+    ok: false;
+    code: 'invalid_body';
+    message: string;
+};
+type RegistrationIntentSignerBranches = {
+    readonly plan: RegistrationSignerPlan;
+    readonly nearEd25519: RegistrationNearEd25519SignerPlan | null;
+    readonly evmFamilyEcdsa: RegistrationEvmFamilyEcdsaSignerPlan | null;
+};
+export {};
+//# sourceMappingURL=d1RegistrationSetupSupport.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts

@@ -1,3 +1,4 @@
+import { type PasskeyCredentialClaims } from '../../../../core/passkeyCredentialClaims';
 import type { ActiveWalletAuthorityV1 } from '../../../../../../shared-ts/src/authorization/walletAuthority';
 import { type ActiveWalletAuthMethodRecordV2 } from '../../../../../../shared-ts/src/utils/walletAuthMethodRecord';
 import { type RegistrationAuthority } from '../../../../../../shared-ts/src/utils/registrationAuthMethodInput';
@@ -40,7 +41,9 @@ export interface D1WalletRegistrationCommitStore {
 export declare class CloudflareD1WalletRegistrationCommitStore implements D1WalletRegistrationCommitStore {
     private readonly database;
     private readonly scope;
+    private readonly credentialClaims;
     constructor(input: {
+        readonly credentialClaims?: PasskeyCredentialClaims;
         readonly database: D1DatabaseLike;
         readonly namespace: string;
         readonly orgId: string;

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts

@@ -1,39 +1,40 @@
-import type { EcdsaMaterialActivationReadInput } from '../../../../core/d1EcdsaSignerRead';
-import type { EcdsaMaterialReadSnapshot } from '../../../../core/ecdsaMaterialReadSnapshot';
-import type { InstalledEcdsaCustodySnapshotV1 } from '../deviceLinking/d1LinkedDeviceAuthorityInstallService';
-import type { VerifiedNearRegistrationContinuationV1 } from '../../../domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization';
+import type { SponsoredNamedNearAccountInput } from '../near/d1SponsoredNearAccount';
 import { type DeviceId, type TenantId } from '../../../../../../shared-ts/src/authorization/capabilityKinds';
-import type { AuthorizationService } from '../../../../authorization/service';
-import { type WalletId } from '../../../../../../shared-ts/src/utils/registrationIntent';
-import type { RouterAbTraceContextV1 } from '../../../../../../shared-ts/src/utils/routerAbTraceContext';
-import { type RouterAbMpcMaterialActivationRefWire } from '../../../../../../shared-ts/src/utils/routerAbNormalSigningIdentity';
-import { type RouterAbEd25519YaoExportAuthorizationIdentityV1 } from '../../../../../../shared-ts/src/utils/routerAbEd25519Yao';
+import { type RuntimePolicyScope } from '../../../../../../shared-ts/src/threshold/signingRootScope';
 import type { DigestB64u } from '../../../../../../shared-ts/src/utils/canonicalPrimitives';
 import { type MpcMaterialActivationRef, type WalletAuthMethodId, type WalletAuthorityId } from '../../../../../../shared-ts/src/utils/domainIds';
-import { type RuntimePolicyScope } from '../../../../../../shared-ts/src/threshold/signingRootScope';
-import { type EcdsaDerivationServerBootstrapResponse } from '../../../../core/types';
-import { type RouterAbEcdsaDerivationNormalSigningStateV1, type RouterAbEcdsaDerivationActivationRefreshForwardedResponseV1, type RouterAbEcdsaDerivationActivationRefreshRequestV1, type RouterAbEcdsaPostRegistrationSessionActivationRequestV1, type RouterAbEcdsaRegistrationActivationReceiptV1, type RouterAbEcdsaRegistrationRequestFactsV1, type RouterAbEcdsaVerifiedClientActivationFactsV1 } from '../../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
+import { type WalletId } from '../../../../../../shared-ts/src/utils/registrationIntent';
+import { type RouterAbEcdsaDerivationActivationRefreshForwardedResponseV1, type RouterAbEcdsaDerivationActivationRefreshRequestV1, type RouterAbEcdsaDerivationNormalSigningStateV1, type RouterAbEcdsaPostRegistrationSessionActivationRequestV1, type RouterAbEcdsaRegistrationActivationReceiptV1, type RouterAbEcdsaRegistrationRequestFactsV1, type RouterAbEcdsaVerifiedClientActivationFactsV1 } from '../../../../../../shared-ts/src/utils/routerAbEcdsaDerivation';
+import { type RouterAbEd25519YaoExportAuthorizationIdentityV1 } from '../../../../../../shared-ts/src/utils/routerAbEd25519Yao';
+import { type RouterAbMpcMaterialActivationRefWire } from '../../../../../../shared-ts/src/utils/routerAbNormalSigningIdentity';
+import type { RouterAbTraceContextV1 } from '../../../../../../shared-ts/src/utils/routerAbTraceContext';
+import type { AuthorizationService } from '../../../../authorization/service';
+import { type ThresholdEcdsaKeyInventoryDiagnostics, type ThresholdEcdsaKeyInventoryRecord } from '../../../../core/authService/thresholdEcdsaKeyInventory';
+import type { EcdsaMaterialActivationReadInput } from '../../../../core/d1EcdsaSignerRead';
+import type { D1WalletStore } from '../../../../core/d1WalletStore';
+import type { EcdsaMaterialReadSnapshot } from '../../../../core/ecdsaMaterialReadSnapshot';
+import { type StoredWalletRegistrationEvmFamilyEcdsaPendingActivationBranch } from '../../../../core/RegistrationCeremonyStore';
 import { WalletRegistrationEcdsaActivationResponse } from '../../../../core/registrationContracts';
+import type { WalletRegistrationActivateResponseV2, WalletRegistrationNearAdmissionResponseV2, WalletRegistrationNearProvisioningResponseV2, WalletRegistrationRespondResponseV2, WalletRegistrationSessionCommitReceiptV2, WalletRegistrationSetupResponseV2 } from '../../../../core/threeRouteRegistrationContracts';
+import { type EcdsaDerivationServerBootstrapResponse } from '../../../../core/types';
+import { type WalletEcdsaSignerKey, type WalletEcdsaSignerRecord } from '../../../../core/WalletStore';
 import { type RouterAbEcdsaStrictRegistrationPort } from '../../../domains/ecdsa/routerAbEcdsaStrictRegistration';
+import { type RouterAbEd25519YaoProductRegistrationRuntimeV1 } from '../../../domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration';
+import type { VerifiedNearRegistrationContinuationV1 } from '../../../domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization';
+import { type RouterAbEd25519YaoRegistrationSideEffectRecordV2, type RouterAbEd25519YaoRegistrationSideEffectStoreV2 } from '../../../domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary';
+import type { RouterAbEd25519YaoBudgetRefreshRequestV1, RouterAbEd25519YaoBudgetRefreshResponseV1, RouterAbEd25519YaoVerifiedWalletUnlockRequestV1, RouterAbEd25519YaoVerifiedWalletUnlockResponseV1 } from '../../../domains/ed25519Yao/session/routerAbEd25519YaoWalletSession';
 import type { TenantRootCustodyLineageResolverV1 } from '../../../domains/tenantRoot/tenantRootCustodyLineage';
 import { type TenantRootIdentityV1 } from '../../../domains/tenantRoot/tenantRootIdentityResolution';
-import { CloudflareD1RegistrationCeremonyIntentStore } from './d1RegistrationCeremonyStore';
-import type { InstalledLinkedDeviceEcdsaAuthorityProjectionV1, InstalledLinkedDeviceEd25519AuthorityProjectionV1 } from '../deviceLinking/d1LinkedDeviceAuthorityInstallService';
-import { type ThresholdEcdsaKeyInventoryDiagnostics, type ThresholdEcdsaKeyInventoryRecord } from '../../../../core/authService/thresholdEcdsaKeyInventory';
-import { type StoredWalletRegistrationEvmFamilyEcdsaPendingActivationBranch } from '../../../../core/RegistrationCeremonyStore';
-import type { WalletRegistrationNearProvisioningResponseV2, WalletRegistrationNearAdmissionResponseV2, WalletRegistrationActivateResponseV2, WalletRegistrationRespondResponseV2, WalletRegistrationSetupResponseV2, WalletRegistrationSessionCommitReceiptV2 } from '../../../../core/threeRouteRegistrationContracts';
-import type { WalletRegistrationSetupInput, WalletRegistrationRespondInput, WalletRegistrationActivateInput, WalletRegistrationNearProvisioningInput, WalletRegistrationNearAdmissionInput } from '../../../domains/walletRegistration/walletRegistrationInputs';
-import type { CloudflareD1WalletCustodyCommitStore } from '../passkeyCustody/d1WalletCustodyCommitStore';
+import type { WalletRegistrationActivateInput, WalletRegistrationNearAdmissionInput, WalletRegistrationNearProvisioningInput, WalletRegistrationRespondInput, WalletRegistrationSetupInput } from '../../../domains/walletRegistration/walletRegistrationInputs';
+import type { WalletRegistrationReservationAuthority } from '../../../domains/walletRegistration/walletRegistrationReservation';
+import type { InstalledEcdsaCustodySnapshotV1, InstalledLinkedDeviceEcdsaAuthorityProjectionV1, InstalledLinkedDeviceEd25519AuthorityProjectionV1 } from '../deviceLinking/d1LinkedDeviceAuthorityInstallService';
+import type { CloudflareD1Ed25519YaoLifecycleDecisionStoreV1 } from '../ed25519Yao/d1Ed25519YaoLifecycleDecisionStore';
 import { CloudflareD1EmailOtpRegistrationEnrollmentFinalizer } from '../emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer';
+import type { CloudflareD1WalletCustodyCommitStore } from '../passkeyCustody/d1WalletCustodyCommitStore';
+import type { CloudflareD1VersionedJsonRecordReadManyEntryV1 } from '../versionedJson/d1VersionedJsonRecordStore';
 import { CloudflareD1WalletAuthMethodService } from '../wallet/d1WalletAuthMethodService';
+import { CloudflareD1RegistrationCeremonyIntentStore } from './d1RegistrationCeremonyStore';
 import type { D1WalletRegistrationCommitStore } from './d1WalletRegistrationCommitStore';
-import type { CloudflareD1Ed25519YaoLifecycleDecisionStoreV1 } from '../ed25519Yao/d1Ed25519YaoLifecycleDecisionStore';
-import { type WalletEcdsaSignerKey, type WalletEcdsaSignerRecord } from '../../../../core/WalletStore';
-import type { D1WalletStore } from '../../../../core/d1WalletStore';
-import { type RouterAbEd25519YaoProductRegistrationRuntimeV1 } from '../../../domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration';
-import type { RouterAbEd25519YaoBudgetRefreshRequestV1, RouterAbEd25519YaoBudgetRefreshResponseV1, RouterAbEd25519YaoVerifiedWalletUnlockRequestV1, RouterAbEd25519YaoVerifiedWalletUnlockResponseV1 } from '../../../domains/ed25519Yao/session/routerAbEd25519YaoWalletSession';
-import { type RouterAbEd25519YaoRegistrationSideEffectRecordV2, type RouterAbEd25519YaoRegistrationSideEffectStoreV2 } from '../../../domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary';
-import type { CloudflareD1VersionedJsonRecordReadManyEntryV1 } from '../versionedJson/d1VersionedJsonRecordStore';
 type ActivateWalletRegistrationEcdsaInput = {
     readonly registrationCeremonyId: string;
     readonly ecdsa: {
@@ -94,16 +95,7 @@ export type SponsoredNamedNearAccountCreationResult = {
     readonly message: string;
     readonly retryAfterMs: number;
 };
-type SponsoredNamedNearAccountCreator = (input: {
-    readonly accountId: string;
-    readonly publicKey: string;
-    /**
-     * Registration-scoped key. The provisioning boundary persists the signed
-     * transaction under this key before broadcasting, so a retry replays those
-     * exact bytes instead of building a second transaction.
-     */
-    readonly idempotencyKey: string;
-}) => Promise<SponsoredNamedNearAccountCreationResult>;
+type SponsoredNamedNearAccountCreator = (input: SponsoredNamedNearAccountInput) => Promise<SponsoredNamedNearAccountCreationResult>;
 export declare function ecdsaStrictRegistrationAuthority(facts: RouterAbEcdsaRegistrationRequestFactsV1): {
     readonly subjectId: string;
     readonly sessionId: string;
@@ -126,6 +118,7 @@ type EcdsaPostRegistrationProofInput = {
     readonly response: RouterAbEcdsaDerivationActivationRefreshForwardedResponseV1;
 };
 export declare class CloudflareD1WalletRegistrationService {
+    private readonly registrationAuthority;
     private readonly authorizationService;
     private readonly authorizationTenantId;
     private readonly createSponsoredNamedNearAccount;
@@ -146,6 +139,7 @@ export declare class CloudflareD1WalletRegistrationService {
     private readonly getLinkedDeviceEd25519AuthorityReader;
     private readonly yaoLifecycleDecisions;
     constructor(input: {
+        readonly registrationAuthority: WalletRegistrationReservationAuthority | null;
         readonly authorizationService: AuthorizationService;
         readonly authorizationTenantId: TenantId;
         readonly createSponsoredNamedNearAccount: SponsoredNamedNearAccountCreator;
@@ -256,17 +250,6 @@ export declare class CloudflareD1WalletRegistrationService {
     }>;
     refreshEd25519YaoWalletSession(request: RouterAbEd25519YaoBudgetRefreshRequestV1): Promise<RouterAbEd25519YaoBudgetRefreshResponseV1>;
     provisionEd25519YaoWalletSession(request: RouterAbEd25519YaoVerifiedWalletUnlockRequestV1): Promise<RouterAbEd25519YaoVerifiedWalletUnlockResponseV1>;
-    /**
-     * `/wallets/register/setup` — grant, intent, and start in one request, with
-     * one D1 write.
-     *
-     * Setup runs before the client's WebAuthn create, because it issues the
-     * challenge that create signs. So the ECDSA prepare and the Ed25519
-     * admission — the two Router calls that dominated the measured cold path —
-     * overlap the authenticator prompt instead of being serialized after it.
-     * They are started before either is awaited: they share no state and neither
-     * can invalidate the other.
-     */
     setupWalletRegistration(input: WalletRegistrationSetupInput): Promise<WalletRegistrationSetupResponseV2>;
     authorizeWalletRegistrationNearAdmission(input: WalletRegistrationNearAdmissionInput): Promise<WalletRegistrationNearAdmissionResponseV2>;
     respondWalletRegistration(input: WalletRegistrationRespondInput, traceContext?: RouterAbTraceContextV1, timingSink?: Array<readonly [string, number]>): Promise<WalletRegistrationRespondResponseV2>;

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts

@@ -31,38 +31,12 @@
  * allocation and insertion are the same request. Genuine uniqueness is still
  * arbitrated where it always was, by the wallet table at commit.
  */
-import { type WalletId } from '../../../../../../shared-ts/src/utils/registrationIntent';
+import { type RegistrationAuthMethodInput } from '../../../../../../shared-ts/src/utils/registrationAuthMethodInput';
 import { type RegistrationSignerSetSelection } from '../../../../../../shared-ts/src/utils/registrationSignerPlan';
-import { type RegisterWalletInput, type RegistrationAuthMethodInput } from '../../../../../../shared-ts/src/utils/registrationAuthMethodInput';
-import type { RespondEd25519DeferredWorkV2, WalletRegistrationRespondResponseV2, WalletRegistrationSetupResponseV2 } from '../../../../core/threeRouteRegistrationContracts';
 import type { StoredWalletRegistrationCeremony } from '../../../../core/RegistrationCeremonyStore';
-import { mintSignedWalletRegistrationSetup, type WalletRegistrationSetupMinter } from '../../../domains/walletRegistration/walletRegistrationSetupPayload';
+import type { RespondEd25519DeferredWorkV2, WalletRegistrationRespondResponseV2, WalletRegistrationSetupResponseV2 } from '../../../../core/threeRouteRegistrationContracts';
 import type { WalletRegistrationSetupRequest } from '../../../domains/walletRegistration/walletRegistrationInputs';
-export declare function walletRegistrationSetupIds(): {
-    readonly registrationCeremonyId: string;
-    readonly registrationPreparationId: string;
-};
-/**
- * Resolves the wallet id without reserving it.
- *
- * A provided id is taken as given; an absent or server-allocated one is
- * generated. There is no existence pre-check: it cost a serialized read on
- * every registration to catch a collision that the commit-time uniqueness
- * constraint catches anyway, and for a freshly generated random id it could
- * essentially never fire.
- */
-export declare function resolveWalletRegistrationSetupWalletId(input: {
-    readonly wallet: RegisterWalletInput | undefined;
-    readonly parseProvided: (raw: unknown) => WalletId | null;
-    readonly createServerAllocated: () => WalletId;
-}): {
-    readonly ok: true;
-    readonly walletId: WalletId;
-} | {
-    readonly ok: false;
-    readonly code: string;
-    readonly message: string;
-};
+import { mintSignedWalletRegistrationSetup, type WalletRegistrationSetupMinter } from '../../../domains/walletRegistration/walletRegistrationSetupPayload';
 export declare function normalizeWalletRegistrationSetupRequest(request: WalletRegistrationSetupRequest): {
     readonly ok: true;
     readonly signerSelection: RegistrationSignerSetSelection;
@@ -82,7 +56,6 @@ export declare function buildWalletRegistrationSetupSignature(input: {
     readonly expectedOrigin: string;
 }): Promise<{
     readonly signedSetup: Awaited<ReturnType<typeof mintSignedWalletRegistrationSetup>>;
-    readonly setupDigestB64u: string;
 }>;
 export declare function walletRegistrationSetupIntentDigest(intent: StoredWalletRegistrationCeremony['intent']): Promise<string>;
 /**

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.d.ts

@@ -0,0 +1,11 @@
+import type { WalletRegistrationSetupResponseV2 } from '../../../../core/threeRouteRegistrationContracts';
+import { type RouterAbEcdsaStrictRegistrationPort } from '../../../domains/ecdsa/routerAbEcdsaStrictRegistration';
+import type { WalletRegistrationSetupInput } from '../../../domains/walletRegistration/walletRegistrationInputs';
+import type { WalletRegistrationReservationAuthority } from '../../../domains/walletRegistration/walletRegistrationReservation';
+import { CloudflareD1RegistrationCeremonyIntentStore } from './d1RegistrationCeremonyStore';
+export declare function executeD1WalletRegistrationSetup(input: WalletRegistrationSetupInput, dependencies: {
+    readonly reservation: WalletRegistrationReservationAuthority | null;
+    readonly store: CloudflareD1RegistrationCeremonyIntentStore;
+    readonly ecdsaStrictRegistration: RouterAbEcdsaStrictRegistrationPort;
+}): Promise<WalletRegistrationSetupResponseV2>;
+//# sourceMappingURL=d1WalletRegistrationSetupExecution.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.d.ts

@@ -0,0 +1,27 @@
+import type { WalletId } from '../../../../../../shared-ts/src/utils/registrationIntent';
+import type { WalletAddSignerFinalizeResponse } from '../../../../core/registrationContracts';
+import type { StoredWalletAddSignerFinalizeRequest, StoredWalletAddSignerCeremony } from '../../../../core/RegistrationCeremonyStore';
+import { type RouterAbEd25519YaoRegistrationSideEffectStoreV1, type RouterAbEd25519YaoRegistrationSideEffectRecordV1 } from '../../../domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary';
+export type D1WalletAddSignerFinalizePreparedV1 = {
+    readonly walletId: WalletId;
+    readonly kind: 'd1_wallet_add_signer_finalize_ed25519_prepared_v1';
+    readonly finalizingAtMs: number;
+    readonly signerWriteAtMs?: never;
+} | {
+    readonly walletId: WalletId;
+    readonly kind: 'd1_wallet_add_signer_finalize_ecdsa_prepared_v1';
+    readonly signerWriteAtMs: number;
+    readonly finalizingAtMs?: never;
+};
+export type D1WalletAddSignerFinalizeSideEffectStore = RouterAbEd25519YaoRegistrationSideEffectStoreV1<WalletAddSignerFinalizeResponse, D1WalletAddSignerFinalizePreparedV1>;
+export type D1WalletAddSignerFinalizeSideEffectRecord = RouterAbEd25519YaoRegistrationSideEffectRecordV1<WalletAddSignerFinalizeResponse, D1WalletAddSignerFinalizePreparedV1>;
+export declare function parseD1WalletAddSignerFinalizeSideEffectRecord(raw: unknown): D1WalletAddSignerFinalizeSideEffectRecord | null;
+export declare function fingerprintD1WalletAddSignerFinalizePrepared(prepared: D1WalletAddSignerFinalizePreparedV1): Promise<string>;
+export declare function returnD1WalletAddSignerFinalizePrepared(prepared: D1WalletAddSignerFinalizePreparedV1): Promise<D1WalletAddSignerFinalizePreparedV1>;
+export declare function rejectUnexpectedWalletAddSignerFinalizePreparation(): Promise<never>;
+export declare function buildD1WalletAddSignerFinalizePrepared(input: {
+    readonly request: StoredWalletAddSignerFinalizeRequest;
+    readonly ceremony: StoredWalletAddSignerCeremony;
+    readonly nowMs: number;
+}): D1WalletAddSignerFinalizePreparedV1;
+//# sourceMappingURL=d1WalletAddSignerFinalizeRecord.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts

@@ -1,3 +1,4 @@
+import { type D1WalletAddSignerFinalizeSideEffectStore } from './d1WalletAddSignerFinalizeRecord';
 import type { WalletAddSignerStartSuccess } from '../../../../core/registrationContracts';
 import type { CloudflareD1Ed25519YaoLifecycleDecisionStoreV1 } from '../ed25519Yao/d1Ed25519YaoLifecycleDecisionStore';
 import type { WalletAddSignerFinalizeRequest, WalletAddSignerFinalizeResponse, WalletAddSignerEcdsaActivationRequest, WalletAddSignerEcdsaActivationResponse, WalletAddSignerEcdsaDerivationRespondRequest, WalletAddSignerEcdsaDerivationRespondResponse, WalletAddSignerStartRequest, WalletAddSignerStartResponse } from '../../../../core/registrationContracts';
@@ -56,17 +57,7 @@ type D1WalletAddSignerStartTerminalV1 = {
 };
 export type D1WalletAddSignerStartSideEffectStore = RouterAbEd25519YaoRegistrationSideEffectStoreV1<D1WalletAddSignerStartTerminalV1, D1WalletAddSignerStartPreparedV1>;
 export type D1WalletAddSignerStartSideEffectRecord = RouterAbEd25519YaoRegistrationSideEffectRecordV1<D1WalletAddSignerStartTerminalV1, D1WalletAddSignerStartPreparedV1>;
-export type D1WalletAddSignerFinalizePreparedV1 = {
-    readonly kind: 'd1_wallet_add_signer_finalize_ed25519_prepared_v1';
-    readonly finalizingAtMs: number;
-} | {
-    readonly kind: 'd1_wallet_add_signer_finalize_ecdsa_prepared_v1';
-    readonly signerWriteAtMs: number;
-};
-export type D1WalletAddSignerFinalizeSideEffectStore = RouterAbEd25519YaoRegistrationSideEffectStoreV1<WalletAddSignerFinalizeResponse, D1WalletAddSignerFinalizePreparedV1>;
-export type D1WalletAddSignerFinalizeSideEffectRecord = RouterAbEd25519YaoRegistrationSideEffectRecordV1<WalletAddSignerFinalizeResponse, D1WalletAddSignerFinalizePreparedV1>;
 export declare function parseD1WalletAddSignerStartSideEffectRecord(raw: unknown): D1WalletAddSignerStartSideEffectRecord | null;
-export declare function parseD1WalletAddSignerFinalizeSideEffectRecord(raw: unknown): D1WalletAddSignerFinalizeSideEffectRecord | null;
 export declare class CloudflareD1WalletAddSignerService {
     private readonly getRegistrationCeremonyIntentStore;
     private readonly getEd25519YaoProductRegistration;

package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts

@@ -11,7 +11,7 @@ import { EMAIL_OTP_CHANNEL } from '../../../../../../shared-ts/src/utils/emailOt
 import { CloudflareD1EmailOtpChallengeVerifier } from '../emailOtp/d1EmailOtpChallengeVerifier';
 import type { CloudflareD1EmailOtpRegistrationEnrollmentFinalizer } from '../emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer';
 import { CloudflareD1RegistrationCeremonyIntentStore } from '../registration/d1RegistrationCeremonyStore';
-import type { CloudflareD1GoogleEmailOtpRegistrationAttemptStore } from '../emailOtp/d1GoogleEmailOtpRegistrationAttemptStore';
+import type { GoogleEmailOtpRegistrationAttemptStore } from '../emailOtp/d1GoogleEmailOtpRegistrationAttemptStore';
 import { type D1FreshRevokeWebAuthnVerifierV1, type D1AddAuthMethodExistingAuthResolution, type D1AddSignerExistingAuthResolution } from './d1WalletAuthMethodBoundary';
 import type { CloudflareD1WebAuthnStore } from '../webauthn/d1WebAuthnStore';
 import type { WalletEd25519SignerRecord } from '../../../../core/WalletStore';
@@ -116,7 +116,7 @@ export declare class CloudflareD1WalletAuthMethodService {
         readonly emailOtpEnrollmentFinalizer: CloudflareD1EmailOtpRegistrationEnrollmentFinalizer;
         readonly getRegistrationCeremonyIntentStore: RegistrationCeremonyStoreProvider;
         readonly getWalletAuthMethodStore: WalletAuthMethodStoreProvider;
-        readonly googleEmailOtpRegistrationAttempts: CloudflareD1GoogleEmailOtpRegistrationAttemptStore;
+        readonly googleEmailOtpRegistrationAttempts: GoogleEmailOtpRegistrationAttemptStore;
         readonly passkeyCustodyEnvelopes: CloudflareD1PasskeyCustodyEnvelopeStore;
         readonly sha256Bytes: Sha256Bytes;
         readonly webAuthnStore: CloudflareD1WebAuthnStore;

package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts

@@ -101,8 +101,6 @@ export declare class WalletAuthorityCommitConflictError extends Error {
 export declare class D1WalletAuthorityStore {
     private readonly database;
     private readonly scope;
-    private readonly ensureSchemaOnUse;
-    private schemaReady;
     constructor(input: {
         readonly database: D1DatabaseLike;
         readonly scope?: D1WalletAuthorityStoreScope;
@@ -110,9 +108,7 @@ export declare class D1WalletAuthorityStore {
         readonly orgId?: string;
         readonly projectId?: string;
         readonly envId?: string;
-        readonly ensureSchema?: boolean;
     });
-    private ensureSchema;
     /**
      * Commits an added signer: its signer records, the authority extended with
      * its activation, and every live Wallet Session of that authority promoted to

package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.d.ts

@@ -1,3 +1,4 @@
+import { type WalletLifecycleRoutingPublisher } from '../../../../authorization/lifecycleRouting';
 import { type WalletId } from '../../../../../../shared-ts/src/utils/domainIds';
 import type { RouterApiWebAuthnService } from '../../../framework/authServicePort';
 import { CloudflareD1WebAuthnStore } from './d1WebAuthnStore';
@@ -23,10 +24,12 @@ type VerifyWebAuthnLoginResult = Awaited<ReturnType<RouterApiWebAuthnService['ve
 type VerifyWebAuthnSyncAccountInput = Parameters<RouterApiWebAuthnService['verifyWebAuthnSyncAccount']>[0];
 type VerifyWebAuthnSyncAccountResult = Awaited<ReturnType<RouterApiWebAuthnService['verifyWebAuthnSyncAccount']>>;
 export declare class CloudflareD1WebAuthnAuthService {
+    private readonly lifecycleRouting;
     private readonly webAuthnStore;
     private readonly walletManifestSource;
     private readonly walletAuthMethodStore;
     constructor(input: {
+        readonly lifecycleRouting?: WalletLifecycleRoutingPublisher;
         readonly webAuthnStore: CloudflareD1WebAuthnStore;
         readonly walletManifestSource: D1WebAuthnWalletManifestSource;
         readonly walletAuthMethodStore: D1WalletAuthMethodStore;

package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts

@@ -9,7 +9,6 @@ import type { WebAuthnCredentialBindingRecord as CoreWebAuthnCredentialBindingRe
 import type { D1WebAuthnAuthenticatorRow } from '../../../../core/WebAuthnAuthenticatorStore';
 import type { WebAuthnLoginChallengeRecord as CoreWebAuthnLoginChallengeRecord } from '../../../../core/WebAuthnLoginChallengeStore';
 import type { WebAuthnSyncChallengeRecord as CoreWebAuthnSyncChallengeRecord } from '../../../../core/WebAuthnSyncChallengeStore';
-import type { NearPublicKeyAuthBinding } from '../../../../core/NearPublicKeyStore';
 import type { ResolvedEd25519WalletBinding } from '../../../../core/authService/webauthnWalletBinding';
 export type D1AuthenticatorRow = D1WebAuthnAuthenticatorRow;
 export type D1RecordJsonRow = {
@@ -17,17 +16,6 @@ export type D1RecordJsonRow = {
 };
 export type WebAuthnCredentialBindingRecord = CoreWebAuthnCredentialBindingRecord;
 export type WebAuthnSyncWalletBinding = Readonly<ResolvedEd25519WalletBinding>;
-export type { NearPublicKeyAuthBinding };
-export type NearPublicKeyRecord = {
-    readonly publicKey: string;
-    readonly kind: 'threshold' | 'local' | 'backup' | 'ephemeral';
-    readonly signerSlot?: number;
-    readonly authBinding?: NearPublicKeyAuthBinding;
-    readonly credentialIdB64u?: never;
-    readonly rpId?: never;
-    readonly createdAtMs?: number;
-    readonly updatedAtMs?: number;
-};
 export type WebAuthnAuthenticatorRecord = {
     readonly credentialIdB64u: string;
     readonly credentialPublicKeyB64u: string;
@@ -98,5 +86,4 @@ export declare function buildWebAuthnRecoveryContinuityAnchorRecord(input: {
 export declare function parseWebAuthnAuthenticator(row: D1AuthenticatorRow | null): WebAuthnAuthenticatorRecord | null;
 export declare function parseWebAuthnBinding(row: D1RecordJsonRow): WebAuthnCredentialBindingRecord | null;
 export declare function webAuthnSyncWalletBindingFromCredentialBinding(binding: WebAuthnCredentialBindingRecord): WebAuthnSyncWalletBinding | null;
-export declare function parseNearPublicKey(row: D1RecordJsonRow): NearPublicKeyRecord | null;
 //# sourceMappingURL=d1WebAuthnRecords.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts

@@ -1,8 +1,23 @@
+import type { WebAuthnSyncChallengeStore } from '../../../../core/WebAuthnSyncChallengeStore';
+import { type PasskeyCredentialClaims } from '../../../../core/passkeyCredentialClaims';
 import type { D1DatabaseLike, D1PreparedStatementLike } from '../../../../storage/tenantRoute';
 import { type D1TenantScope } from '../../../../core/d1TenantStore';
 import { type WebAuthnCredentialBindingRecord } from '../../../../core/WebAuthnCredentialBindingStore';
 import { type D1AuthenticatorRow, type WebAuthnAuthenticatorRecord, type WebAuthnRecoveryRegistrationChallengeRecord, type WebAuthnLoginChallengeRecord, type WebAuthnSyncChallengeRecord } from './d1WebAuthnRecords';
-type WebAuthnChallengeKind = 'login' | 'sync' | 'recovery_registration';
+type WebAuthnChallengeWrite = {
+    readonly challengeId: string;
+    readonly createdAtMs: number;
+    readonly expiresAtMs: number;
+} & ({
+    readonly challengeKind: 'login';
+    readonly record: WebAuthnLoginChallengeRecord;
+} | {
+    readonly challengeKind: 'sync';
+    readonly record: WebAuthnSyncChallengeRecord;
+} | {
+    readonly challengeKind: 'recovery_registration';
+    readonly record: WebAuthnRecoveryRegistrationChallengeRecord;
+});
 export type D1WebAuthnStoreScope = D1TenantScope;
 type AuthenticatorStatementInput = {
     readonly database: D1DatabaseLike;
@@ -16,24 +31,22 @@ export declare function prepareD1WebAuthnAuthenticatorPutStatement(input: Authen
  * existing authenticator's public key. */
 export declare function prepareD1WebAuthnAuthenticatorInsertStatement(input: AuthenticatorStatementInput): D1PreparedStatementLike;
 export declare class CloudflareD1WebAuthnStore {
+    private readonly syncChallenges;
     private readonly database;
     private readonly scope;
+    private readonly credentialClaims;
     constructor(input: {
+        readonly syncChallenges?: WebAuthnSyncChallengeStore;
+        readonly credentialClaims?: PasskeyCredentialClaims;
         readonly database: D1DatabaseLike;
         readonly namespace: string;
         readonly orgId: string;
         readonly projectId: string;
         readonly envId: string;
     });
-    writeChallenge(input: {
-        readonly challengeId: string;
-        readonly challengeKind: WebAuthnChallengeKind;
-        readonly record: WebAuthnLoginChallengeRecord | WebAuthnSyncChallengeRecord | WebAuthnRecoveryRegistrationChallengeRecord;
-        readonly createdAtMs: number;
-        readonly expiresAtMs: number;
-    }): Promise<void>;
+    writeChallenge(input: WebAuthnChallengeWrite): ReturnType<WebAuthnSyncChallengeStore['create']>;
     consumeLoginChallenge(challengeId: string): Promise<WebAuthnLoginChallengeRecord | null>;
-    consumeSyncChallenge(challengeId: string): Promise<WebAuthnSyncChallengeRecord | null>;
+    consumeSyncChallenge(challengeId: string, credentialIdB64u: string): ReturnType<WebAuthnSyncChallengeStore['consume']>;
     readRecoveryRegistrationChallenge(challengeId: string, nowMs: number): Promise<WebAuthnRecoveryRegistrationChallengeRecord | null>;
     /** Delete is paired with a CAS guard in the recovery commit batch. */
     prepareRecoveryRegistrationChallengeDeleteStatement(input: {
@@ -53,7 +66,7 @@ export declare class CloudflareD1WebAuthnStore {
         readonly userId: string;
         readonly record: WebAuthnAuthenticatorRecord;
     }): D1PreparedStatementLike;
-    prepareCredentialBindingInsertStatement(record: WebAuthnCredentialBindingRecord): D1PreparedStatementLike;
+    prepareCredentialBindingInsertStatement(record: WebAuthnCredentialBindingRecord): Promise<D1PreparedStatementLike>;
     updateAuthenticatorCounter(input: {
         readonly userId: string;
         readonly credentialIdB64u: string;

package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.typecheck.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=d1WebAuthnStore.typecheck.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/runtime/cloudflare.types.d.ts

@@ -1,4 +1,3 @@
-import type { CloudflareDurableObjectNamespaceLike } from '../../../core/types';
 import type { D1DatabaseLike } from '../../../storage/tenantRoute';
 export type CfEnv = object;
 export interface RouterApiCloudflareSignerWorkerEnv {
@@ -15,7 +14,6 @@ export interface RouterApiCloudflareSignerWorkerEnv {
 }
 export interface SeamsD1SignerTenantStorageWorkerEnv {
     SIGNER_DB: D1DatabaseLike;
-    THRESHOLD_STORE: CloudflareDurableObjectNamespaceLike;
 }
 export interface CfExecutionContext {
     waitUntil(promise: Promise<unknown>): void;

package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOps.d.ts

@@ -7,6 +7,7 @@ export declare const WALLET_CONSOLE_OP_PATHS_V1: {
     readonly secretKeyAuth: "/internal/wallet-console/v1/secret-key-auth";
     readonly publishableKeyAuth: "/internal/wallet-console/v1/publishable-key-auth";
     readonly usageEvents: "/internal/wallet-console/v1/usage-events";
+    readonly walletProjection: "/internal/wallet-console/v1/wallet-projections";
     readonly projectEnvironments: "/internal/wallet-console/v1/project-environments";
     readonly tenantRootActiveLineage: "/internal/wallet-console/v1/tenant-root/active-lineage";
 };