@seams/wallet-server 0.7.3 → 0.8.0

package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js

@@ -1,198 +0,0 @@
-import { parseCorrelationId, sha256DigestB64u } from "../../shared-ts/src/utils/canonicalPrimitives.js";
-import { buildRevokeSigningLaneV1, parseLaneProtocolCommitReceiptV1, parseLaneRefreshPredecessorRetirementV1, parseLaneServerActivationReceiptV1, parseRevokeSigningLaneV1 } from "../../shared-ts/src/signing-lanes/rotationParsers.js";
-import { encodeLaneProtocolCommitReceiptV1 } from "../../shared-ts/src/signing-lanes/rotationDigests.js";
-//#region src/core/signingLanes/LaneLifecycleApplicationService.ts
-var LaneLifecycleApplicationService = class {
-	constructor(input) {
-		this.input = input;
-	}
-	async recordLaneProtocolCommitV1(request) {
-		await authorizeProtocolCommit(this.input.authorization, request);
-		const parsedReceipt = parseLaneProtocolCommitReceiptV1(request.curve === "ed25519_yao" ? await this.input.execution.ed25519.executeProtocolCommitV1({
-			job: request.job,
-			requestJson: requireJson(request.requestJson, "requestJson")
-		}) : await this.input.execution.ecdsa.executeProtocolCommitV1({
-			job: request.job,
-			holderRound: request.holderRound,
-			holderPackage: request.holderPackage,
-			encryptedDeltaPackageJson: requireJson(request.encryptedDeltaPackageJson, "encryptedDeltaPackageJson")
-		}));
-		assertProtocolReceiptMatchesJob(parsedReceipt, request.job);
-		return await this.input.gateway.recordLaneProtocolCommitV1({
-			receipt: parsedReceipt,
-			expectedVersion: request.expectedVersion
-		});
-	}
-	async activateLaneServerMaterialV1(request) {
-		assertProtocolReceiptMatchesJob(request.protocolCommitReceipt, request.job);
-		assertHolderDeliveryReceiptMatchesJob(request.holderDeliveryReceipt, request.protocolCommitReceipt, request.job);
-		await authorizeServerActivation(this.input.authorization, request);
-		const parsedReceipt = parseLaneServerActivationReceiptV1(request.curve === "ed25519_yao" ? await this.input.execution.ed25519.executeServerActivationV1({
-			job: request.job,
-			protocolCommitReceipt: request.protocolCommitReceipt,
-			holderDeliveryReceipt: request.holderDeliveryReceipt
-		}) : await this.input.execution.ecdsa.executeServerActivationV1({
-			job: request.job,
-			protocolCommitReceipt: request.protocolCommitReceipt,
-			holderDeliveryReceipt: request.holderDeliveryReceipt
-		}));
-		assertServerActivationReceiptMatchesJob(parsedReceipt, request.protocolCommitReceipt, request.holderDeliveryReceipt, request.job);
-		return await this.input.gateway.activateLaneServerMaterialV1({
-			receipt: parsedReceipt,
-			expectedVersion: request.expectedVersion
-		});
-	}
-	async revokeSigningLaneV1(request) {
-		const command = parseRevokeSigningLaneV1(request.command);
-		await this.input.authorization.authorizeLaneLifecycleV1({
-			kind: "revoke_signing_lane_v1",
-			curve: request.curve,
-			command
-		});
-		const fenced = await this.input.gateway.fenceSigningLaneRevocationV1(command);
-		if (fenced.outcome === "conflict") return revocationConflict(command, fenced);
-		if (fenced.outcome === "already_completed") return completedRevocation(command, fenced);
-		assertRevocationFenceMatchesCommand(fenced.productEpoch, command);
-		const execution = request.curve === "ed25519_yao" ? await this.input.execution.ed25519.executeServerRetirementV1({ command }) : await this.input.execution.ecdsa.executeServerRetirementV1({ command });
-		assertRetirementExecutionMatchesCommand(execution, command);
-		return await this.input.gateway.completeSigningLaneRevocationV1({
-			kind: "complete_signing_lane_revocation_v1",
-			command,
-			expectedVersion: fenced.version,
-			commandDigestB64u: fenced.commandDigestB64u,
-			retirementReceipt: execution.retirementReceipt,
-			revokedAtMs: command.requestedAtMs
-		});
-	}
-	async retireLaneRefreshPredecessorV1(request) {
-		const protocolCommitReceipt = parseLaneProtocolCommitReceiptV1(request.protocolCommitReceipt);
-		assertProtocolReceiptMatchesJob(protocolCommitReceipt, request.job);
-		const retirementRequestDigestB64u = await sha256DigestB64u(encodeLaneProtocolCommitReceiptV1(protocolCommitReceipt));
-		const command = buildRevokeSigningLaneV1({
-			walletId: request.job.walletId,
-			walletKeyId: request.job.walletKeyId,
-			laneId: request.job.source.laneId,
-			laneShareEpoch: request.job.source.laneShareEpoch,
-			expectedRevocationEpoch: request.job.source.revocationEpoch,
-			reason: "rotation",
-			retirementCorrelationId: parseCorrelationId(request.job.operationId),
-			retirementRequestDigestB64u,
-			retirementEffectBindingDigestB64u: request.job.authorization.ownerLaneRefreshDigestB64u,
-			requestedAtMs: request.requestedAtMs
-		});
-		await this.input.authorization.authorizeLaneLifecycleV1({
-			kind: "revoke_signing_lane_v1",
-			curve: request.curve,
-			command
-		});
-		const fenced = await this.input.gateway.fenceSigningLaneRevocationV1(command);
-		if (fenced.outcome === "conflict") throw new Error("lane refresh predecessor revocation fence conflicted");
-		if (fenced.outcome === "already_completed") return parseLaneRefreshPredecessorRetirementV1({
-			refreshOperationId: request.job.operationId,
-			sourceLaneId: request.job.source.laneId,
-			sourceLaneShareEpoch: request.job.source.laneShareEpoch,
-			sourceMaterialActivation: request.job.source.materialActivation,
-			retirementEffectBindingDigestB64u: request.job.authorization.ownerLaneRefreshDigestB64u,
-			retirementReceipt: fenced.retirementReceipt
-		});
-		assertRevocationFenceMatchesCommand(fenced.productEpoch, command);
-		const execution = request.curve === "ed25519_yao" ? await this.input.execution.ed25519.executeServerRetirementV1({ command }) : await this.input.execution.ecdsa.executeServerRetirementV1({ command });
-		assertRetirementExecutionMatchesCommand(execution, command);
-		return parseLaneRefreshPredecessorRetirementV1({
-			refreshOperationId: request.job.operationId,
-			sourceLaneId: request.job.source.laneId,
-			sourceLaneShareEpoch: request.job.source.laneShareEpoch,
-			sourceMaterialActivation: request.job.source.materialActivation,
-			retirementEffectBindingDigestB64u: execution.retirementEffectBindingDigestB64u,
-			retirementReceipt: execution.retirementReceipt
-		});
-	}
-};
-function assertRetirementExecutionMatchesCommand(execution, command) {
-	if (execution.kind !== "lane_lifecycle_retirement_execution_v1") throw new Error("lane retirement execution result kind is invalid");
-	if (execution.retirementEffectBindingDigestB64u !== command.retirementEffectBindingDigestB64u) throw new Error("lane retirement effect binding digest does not match the authorized effect binding");
-	assertRevokeSigningLaneCommandEqual(command, parseRevokeSigningLaneV1(execution.command));
-}
-function revocationConflict(command, result) {
-	return {
-		kind: "lane_signing_lane_revocation_result_v1",
-		outcome: "conflict",
-		walletKeyId: command.walletKeyId,
-		laneId: command.laneId,
-		laneShareEpoch: command.laneShareEpoch,
-		expectedVersion: result.expectedVersion,
-		actualVersion: result.actualVersion,
-		requestedCommandDigestB64u: result.requestedCommandDigestB64u,
-		storedCommandDigestB64u: result.storedCommandDigestB64u
-	};
-}
-function completedRevocation(command, result) {
-	return {
-		kind: "lane_signing_lane_revocation_result_v1",
-		outcome: "replayed",
-		walletKeyId: command.walletKeyId,
-		laneId: command.laneId,
-		laneShareEpoch: command.laneShareEpoch,
-		version: result.version,
-		commandDigestB64u: result.commandDigestB64u,
-		productEpoch: result.productEpoch,
-		retirementReceipt: result.retirementReceipt
-	};
-}
-function assertRevocationFenceMatchesCommand(product, command) {
-	if (String(product.walletId) !== String(command.walletId) || String(product.walletKeyId) !== String(command.walletKeyId) || String(product.laneId) !== String(command.laneId) || String(product.laneShareEpoch) !== String(command.laneShareEpoch) || product.revocationEpoch !== command.expectedRevocationEpoch + 1 || product.revocationReason !== command.reason || product.retirementEffectBindingDigestB64u !== command.retirementEffectBindingDigestB64u) throw new Error("lane revocation fence does not match the authorized command");
-}
-async function authorizeProtocolCommit(authorization, request) {
-	if (request.curve === "ed25519_yao") {
-		await authorization.authorizeLaneLifecycleV1({
-			kind: "record_lane_protocol_commit_v1",
-			curve: request.curve,
-			job: request.job,
-			expectedVersion: request.expectedVersion
-		});
-		return;
-	}
-	await authorization.authorizeLaneLifecycleV1({
-		kind: "record_lane_protocol_commit_v1",
-		curve: request.curve,
-		job: request.job,
-		expectedVersion: request.expectedVersion
-	});
-}
-async function authorizeServerActivation(authorization, request) {
-	if (request.curve === "ed25519_yao") {
-		await authorization.authorizeLaneLifecycleV1({
-			kind: "activate_lane_server_material_v1",
-			curve: request.curve,
-			job: request.job,
-			expectedVersion: request.expectedVersion
-		});
-		return;
-	}
-	await authorization.authorizeLaneLifecycleV1({
-		kind: "activate_lane_server_material_v1",
-		curve: request.curve,
-		job: request.job,
-		expectedVersion: request.expectedVersion
-	});
-}
-function requireJson(value, label) {
-	if (typeof value !== "string" || value.trim().length === 0) throw new Error(`${label} is required`);
-	return value;
-}
-function assertProtocolReceiptMatchesJob(receipt, job) {
-	if (receipt.operationId !== job.operationId || receipt.enrollmentId !== job.enrollmentId || receipt.walletId !== job.walletId || receipt.walletKeyId !== job.walletKeyId || receipt.targetLaneId !== job.target.laneId || receipt.targetLaneShareEpoch !== job.target.laneShareEpoch || receipt.targetMaterialActivationId !== job.targetMaterialActivationId || receipt.keyFamily !== job.keyFamily || receipt.holderRecipientKeyDigestB64u !== job.targetHolder.hpkePublicKeyDigestB64u || receipt.serverRecipientKeyDigestB64u !== job.targetSigningWorker.hpkePublicKeyDigestB64u) throw new Error("lane protocol commit receipt does not match the admitted job");
-}
-function assertHolderDeliveryReceiptMatchesJob(receipt, protocolReceipt, job) {
-	if (receipt.operationId !== job.operationId || receipt.enrollmentId !== job.enrollmentId || receipt.targetLaneId !== job.target.laneId || receipt.targetLaneShareEpoch !== job.target.laneShareEpoch || receipt.targetMaterialActivationId !== job.targetMaterialActivationId || receipt.holderCiphertextDigestSetB64u !== protocolReceipt.targetHolderCiphertextDigestSetB64u || receipt.acknowledgedAtMs < protocolReceipt.committedAtMs) throw new Error("lane holder delivery receipt does not match the admitted job");
-}
-function assertServerActivationReceiptMatchesJob(receipt, protocolReceipt, holderReceipt, job) {
-	if (receipt.operationId !== job.operationId || receipt.enrollmentId !== job.enrollmentId || receipt.targetLaneId !== job.target.laneId || receipt.targetLaneShareEpoch !== job.target.laneShareEpoch || receipt.targetMaterialActivation.activationId !== job.targetMaterialActivationId || receipt.targetMaterialActivation.capability !== job.source.materialActivation.capability || receipt.targetMaterialActivation.materialOwner !== job.source.materialActivation.materialOwner || receipt.targetMaterialActivation.keyBinding !== job.source.materialActivation.keyBinding || receipt.targetMaterialActivation.lifecycleBinding !== job.source.materialActivation.lifecycleBinding || String(receipt.targetMaterialActivation.signingWorker) !== String(job.targetSigningWorker.participantId) || receipt.serverCiphertextDigestSetB64u !== protocolReceipt.targetServerCiphertextDigestSetB64u || receipt.activatedAtMs < holderReceipt.acknowledgedAtMs) throw new Error("lane server activation receipt does not match the admitted job");
-}
-function assertRevokeSigningLaneCommandEqual(expected, actual) {
-	if (expected.kind !== actual.kind || expected.walletId !== actual.walletId || expected.walletKeyId !== actual.walletKeyId || expected.laneId !== actual.laneId || expected.laneShareEpoch !== actual.laneShareEpoch || expected.expectedRevocationEpoch !== actual.expectedRevocationEpoch || expected.reason !== actual.reason || expected.retirementCorrelationId !== actual.retirementCorrelationId || expected.retirementRequestDigestB64u !== actual.retirementRequestDigestB64u || expected.retirementEffectBindingDigestB64u !== actual.retirementEffectBindingDigestB64u || expected.requestedAtMs !== actual.requestedAtMs) throw new Error("lane retirement execution changed the authorized command");
-}
-//#endregion
-export { LaneLifecycleApplicationService };
-
-//# sourceMappingURL=LaneLifecycleApplicationService.js.map

package/dist/esm/core/signingLanes/ecdsaServerRetirement.js

@@ -1,73 +0,0 @@
-import { mpcMaterialActivationRefsEqual } from "../../shared-ts/src/utils/domainIds.js";
-import { parseDigestB64u } from "../../shared-ts/src/utils/canonicalPrimitives.js";
-import { isPlainObject } from "../../shared-ts/src/utils/validation.js";
-import { parseEcdsaServerRetirementReceiptV1 } from "../../shared-ts/src/signing-lanes/rotationParsers.js";
-import { computeEcdsaServerRetirementReceiptDigestV1 } from "../../shared-ts/src/signing-lanes/rotationDigests.js";
-import "../../shared-ts/src/signing-lanes/index.js";
-//#region src/core/signingLanes/ecdsaServerRetirement.ts
-function buildEcdsaServerRetirementRequestV1(input) {
-	assertIdentityMatchesCommand(input.binding, input.command);
-	const retirementReason = retirementReasonForCommand(input.command.reason);
-	return {
-		identity: input.binding.identity,
-		manifest: input.binding.manifest,
-		materialActivation: input.binding.materialActivation,
-		revocationEpoch: input.command.expectedRevocationEpoch,
-		retirementReason,
-		retirementCorrelationId: input.command.retirementCorrelationId,
-		retirementRequestDigestB64u: parseDigestB64u(input.command.retirementRequestDigestB64u),
-		retirementEffectBindingDigestB64u: parseDigestB64u(input.command.retirementEffectBindingDigestB64u),
-		serverGeneration: input.binding.serverGeneration,
-		lifecycleId: input.binding.lifecycleId
-	};
-}
-function assertIdentityMatchesCommand(binding, command) {
-	const identity = binding.identity;
-	if (identity.keyFamily !== "ecdsa_secp256k1" || identity.walletId !== command.walletId || identity.walletKeyId !== command.walletKeyId || identity.targetLaneId !== command.laneId || identity.targetLaneShareEpoch !== command.laneShareEpoch || identity.targetMaterialActivationId !== binding.materialActivation.activationId) throw new Error("ECDSA retirement binding identity does not match the authorized command");
-}
-async function parseAndVerifyEcdsaServerRetirementEffectV1(input) {
-	const label = input.label ?? "ecdsaLaneRetireEffect";
-	const effect = exactEffectEnvelope(input.raw, label);
-	const outcome = parseOutcome(effect.outcome, `${label}.outcome`);
-	const receipt = parseEcdsaServerRetirementReceiptV1(effect.receipt, `${label}.receipt`);
-	assertReceiptMatchesExpectation(receipt, input.expectation);
-	const canonicalDigest = await computeEcdsaServerRetirementReceiptDigestV1(receipt);
-	if (receipt.receiptDigestB64u !== canonicalDigest) throw new Error(`${label}.receipt.receiptDigestB64u does not match its canonical digest`);
-	return {
-		outcome,
-		receipt,
-		retirementEffectBindingDigestB64u: input.expectation.retirementEffectBindingDigestB64u,
-		retirementReceiptDigestB64u: parseDigestB64u(receipt.receiptDigestB64u)
-	};
-}
-function assertReceiptMatchesExpectation(receipt, expectation) {
-	if (receipt.manifest.manifestId !== expectation.manifest.manifestId || receipt.manifest.manifestRevision !== expectation.manifest.manifestRevision || !mpcMaterialActivationRefsEqual(receipt.materialActivation, expectation.materialActivation) || receipt.walletKeyId !== expectation.walletKeyId || receipt.laneId !== expectation.laneId || receipt.laneShareEpoch !== expectation.laneShareEpoch || receipt.revocationEpoch !== expectation.revocationEpoch || receipt.retirementReason !== expectation.retirementReason || receipt.retirementCorrelationId !== expectation.retirementCorrelationId || receipt.retirementRequestDigestB64u !== expectation.retirementRequestDigestB64u || receipt.serverGeneration !== expectation.serverGeneration || receipt.lifecycleId !== expectation.lifecycleId) throw new Error("ECDSA retirement receipt does not match the admitted lane binding");
-}
-function retirementReasonForCommand(reason) {
-	switch (reason) {
-		case "user_revoked":
-		case "policy_revoked": return "lane_revoked";
-		case "device_compromise": return "device_compromise";
-		case "agent_compromise": return "agent_compromise";
-		case "rotation": return "rotation";
-	}
-}
-function exactEffectEnvelope(value, label) {
-	if (!isPlainObject(value)) throw new Error(`${label} must be an object`);
-	const fields = ["outcome", "receipt"];
-	const allowed = new Set(fields);
-	for (const key of Object.keys(value)) if (!allowed.has(key)) throw new Error(`${label}.${key} is unsupported`);
-	for (const field of fields) if (!Object.hasOwn(value, field)) throw new Error(`${label}.${field} is required`);
-	return {
-		outcome: Reflect.get(value, "outcome"),
-		receipt: Reflect.get(value, "receipt")
-	};
-}
-function parseOutcome(value, label) {
-	if (value === "applied" || value === "replayed") return value;
-	throw new Error(`${label} is invalid`);
-}
-//#endregion
-export { buildEcdsaServerRetirementRequestV1, parseAndVerifyEcdsaServerRetirementEffectV1 };
-
-//# sourceMappingURL=ecdsaServerRetirement.js.map

package/dist/esm/core/signingLanes/ed25519ServerRetirement.js

@@ -1,68 +0,0 @@
-import { parseDigestB64u } from "../../shared-ts/src/utils/canonicalPrimitives.js";
-import { parseEd25519ServerRetirementReceiptV1 } from "../../shared-ts/src/signing-lanes/rotationParsers.js";
-import { computeEd25519ServerRetirementReceiptDigestV1 } from "../../shared-ts/src/signing-lanes/rotationDigests.js";
-import "../../shared-ts/src/signing-lanes/index.js";
-//#region src/core/signingLanes/ed25519ServerRetirement.ts
-function buildEd25519ServerRetirementRequestV1(input) {
-	assertIdentityMatchesCommand(input.binding.identity, input.command);
-	return {
-		identity: input.binding.identity,
-		revocationEpoch: input.command.expectedRevocationEpoch,
-		retirementReason: retirementReasonForCommand(input.command.reason),
-		retirementCorrelationId: input.command.retirementCorrelationId,
-		retirementRequestDigestB64u: parseDigestB64u(input.command.retirementRequestDigestB64u),
-		retirementEffectBindingDigestB64u: parseDigestB64u(input.command.retirementEffectBindingDigestB64u)
-	};
-}
-async function parseAndVerifyEd25519ServerRetirementEffectV1(input) {
-	const label = input.label ?? "ed25519LaneRetireEffect";
-	const envelope = exactEffectEnvelope(input.raw, label);
-	const outcome = parseOutcome(envelope.outcome, `${label}.outcome`);
-	const receipt = parseEd25519ServerRetirementReceiptV1(envelope.receipt, `${label}.receipt`);
-	assertReceiptMatchesRequest(receipt, input.request);
-	const canonicalDigest = await computeEd25519ServerRetirementReceiptDigestV1(receipt);
-	if (receipt.receiptDigestB64u !== canonicalDigest) throw new Error(`${label}.receipt.receiptDigestB64u does not match its canonical digest`);
-	return {
-		outcome,
-		receipt,
-		retirementEffectBindingDigestB64u: input.request.retirementEffectBindingDigestB64u,
-		retirementReceiptDigestB64u: canonicalDigest
-	};
-}
-function assertIdentityMatchesCommand(identity, command) {
-	if (identity.keyFamily !== "ed25519" || identity.walletId !== command.walletId || identity.walletKeyId !== command.walletKeyId || identity.targetLaneId !== command.laneId || identity.targetLaneShareEpoch !== command.laneShareEpoch) throw new Error("Ed25519 retirement binding identity does not match the authorized command");
-}
-function assertReceiptMatchesRequest(receipt, request) {
-	if (!identitiesEqual(receipt.identity, request.identity) || receipt.revocationEpoch !== request.revocationEpoch || receipt.retirementReason !== request.retirementReason || receipt.retirementCorrelationId !== request.retirementCorrelationId || receipt.retirementRequestDigestB64u !== request.retirementRequestDigestB64u) throw new Error("Ed25519 retirement receipt does not match the admitted lane binding");
-}
-function identitiesEqual(left, right) {
-	return left.operationId === right.operationId && left.enrollmentId === right.enrollmentId && left.walletId === right.walletId && left.walletKeyId === right.walletKeyId && left.targetLaneId === right.targetLaneId && left.targetLaneShareEpoch === right.targetLaneShareEpoch && left.targetMaterialActivationId === right.targetMaterialActivationId && left.keyFamily === right.keyFamily && left.holderParticipantBindingDigestB64u === right.holderParticipantBindingDigestB64u && left.signingWorkerParticipantBindingDigestB64u === right.signingWorkerParticipantBindingDigestB64u && left.holderRecipientKeyDigestB64u === right.holderRecipientKeyDigestB64u && left.serverRecipientKeyDigestB64u === right.serverRecipientKeyDigestB64u && left.transcriptHashB64u === right.transcriptHashB64u && left.protocolCommitReceiptDigestB64u === right.protocolCommitReceiptDigestB64u;
-}
-function retirementReasonForCommand(reason) {
-	switch (reason) {
-		case "user_revoked":
-		case "policy_revoked": return "lane_revoked";
-		case "device_compromise": return "device_compromise";
-		case "agent_compromise": return "agent_compromise";
-		case "rotation": return "rotation";
-	}
-}
-function exactEffectEnvelope(value, label) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) throw new Error(`${label} must be an object`);
-	const fields = ["outcome", "receipt"];
-	const allowed = new Set(fields);
-	for (const key of Object.keys(value)) if (!allowed.has(key)) throw new Error(`${label}.${key} is unsupported`);
-	for (const field of fields) if (!Object.hasOwn(value, field)) throw new Error(`${label}.${field} is required`);
-	return {
-		outcome: Reflect.get(value, "outcome"),
-		receipt: Reflect.get(value, "receipt")
-	};
-}
-function parseOutcome(value, label) {
-	if (value === "applied" || value === "replayed") return value;
-	throw new Error(`${label} is invalid`);
-}
-//#endregion
-export { buildEd25519ServerRetirementRequestV1, parseAndVerifyEd25519ServerRetirementEffectV1 };
-
-//# sourceMappingURL=ed25519ServerRetirement.js.map

package/dist/esm/core/storeBackends.js

@@ -1,208 +0,0 @@
-import { normalizeOptionalTrimmedString } from "../shared-ts/src/utils/normalize.js";
-import { isObject, isPlainObject } from "../shared-ts/src/utils/validation.js";
-import "./defaultConfigsServer.js";
-import { resolveD1DatabaseFromConfig } from "../storage/d1Sql.js";
-import { d1TenantScopeFromConfig } from "./d1TenantStore.js";
-import { RedisTcpClient, UpstashRedisRestClient, redisDel, redisGetJson, redisGetdelJson, redisSetJson } from "./ThresholdService/kv.js";
-//#region src/core/storeBackends.ts
-function isDurableObjectNamespaceLike(value) {
-	return isPlainObject(value) && typeof value.idFromName === "function" && typeof value.get === "function";
-}
-/** The first of `namespace`, `durableObjectNamespace` and `THRESHOLD_DO_NAMESPACE` that is one. */
-function resolveDurableObjectNamespace(config) {
-	const direct = config.namespace;
-	if (isDurableObjectNamespaceLike(direct)) return direct;
-	const alt = config.durableObjectNamespace;
-	if (isDurableObjectNamespaceLike(alt)) return alt;
-	const envStyle = config.THRESHOLD_DO_NAMESPACE;
-	if (isDurableObjectNamespaceLike(envStyle)) return envStyle;
-	return null;
-}
-/** The object a store config names: `objectName`, else `name`, else the default. */
-function durableObjectName(config) {
-	return normalizeOptionalTrimmedString(config.objectName) || normalizeOptionalTrimmedString(config.name) || "threshold-store";
-}
-function durableObjectStub(namespace, objectName) {
-	return namespace.get(namespace.idFromName(objectName));
-}
-/** Posts one JSON request to a store's Durable Object. */
-function postDurableObjectRequest(stub, body) {
-	return stub.fetch("https://threshold-store.invalid/", {
-		method: "POST",
-		headers: { "content-type": "application/json" },
-		body: JSON.stringify(body)
-	});
-}
-/**
-* Posts a request and parses the object's JSON reply; an empty reply reads as null. An HTTP error
-* or a reply that is not JSON throws, naming the store: `<storeName> DO store …`.
-*/
-async function requestDurableObjectJson(stub, body, storeName) {
-	const resp = await postDurableObjectRequest(stub, body);
-	const text = await resp.text();
-	if (!resp.ok) throw new Error(`${storeName} DO store HTTP ${resp.status}: ${text}`);
-	try {
-		return text ? JSON.parse(text) : null;
-	} catch {
-		throw new Error(`${storeName} DO store returned non-JSON response: ${text.slice(0, 200)}`);
-	}
-}
-async function callDo(stub, req, storeName) {
-	const json = await requestDurableObjectJson(stub, req, storeName);
-	if (!isObject(json)) throw new Error(`${storeName} DO store returned invalid JSON shape`);
-	if (json.ok === true) return json;
-	const code = normalizeOptionalTrimmedString(json.code);
-	const message = normalizeOptionalTrimmedString(json.message);
-	return {
-		ok: false,
-		code: code || "internal",
-		message: message || `${storeName} DO store error`
-	};
-}
-function upstashRecords(client, parse) {
-	return {
-		get: async (key) => parse(await client.getJson(key)),
-		take: async (key) => parse(await client.getdelJson(key)),
-		set: (key, record, ttlMs) => client.setJson(key, record, ttlMs),
-		del: (key) => client.del(key)
-	};
-}
-function redisTcpRecords(client, parse) {
-	return {
-		get: async (key) => parse(await redisGetJson(client, key)),
-		take: async (key) => parse(await redisGetdelJson(client, key)),
-		set: (key, record, ttlMs) => redisSetJson(client, key, record, ttlMs),
-		del: (key) => redisDel(client, key)
-	};
-}
-function durableObjectRecords(stub, parse, storeName) {
-	const read = async (op, key) => {
-		const resp = await callDo(stub, {
-			op,
-			key
-		}, storeName);
-		return parse(resp.ok ? resp.value : null);
-	};
-	const write = async (req) => {
-		const resp = await callDo(stub, req, storeName);
-		if (!resp.ok) throw new Error(resp.message);
-	};
-	return {
-		get: (key) => read("get", key),
-		take: (key) => read("getdel", key),
-		set: (key, record, ttlMs) => write({
-			op: "set",
-			key,
-			value: record,
-			ttlMs
-		}),
-		del: (key) => write({
-			op: "del",
-			key
-		})
-	};
-}
-/**
-* Selects a key-value store's backend: the config's explicit `kind`, else Upstash or Redis from
-* env-shaped config, else in memory. The store type `S` comes from the caller's return type.
-*/
-function createKeyValueStore(input, spec, build) {
-	const { tag, label, connectionErrorSubject, parse } = spec;
-	const config = isObject(input.config) ? input.config : {};
-	const prefix = spec.resolvePrefix(config);
-	const inMemory = () => build.inMemory(prefix);
-	const upstash = (url, token) => build.keyValue(upstashRecords(new UpstashRedisRestClient({
-		url,
-		token
-	}), parse), prefix);
-	const redisTcp = (redisUrl) => build.keyValue(redisTcpRecords(new RedisTcpClient(redisUrl), parse), prefix);
-	const kind = normalizeOptionalTrimmedString(config.kind);
-	if (kind === "d1") {
-		const database = resolveD1DatabaseFromConfig(config);
-		if (!database) throw new Error(`[${tag}] D1 ${label} store selected but no D1 database was provided`);
-		input.logger.info(`[${tag}] Using D1 ${label} store`);
-		const scope = d1TenantScopeFromConfig(config, prefix, spec.d1StoreName);
-		return build.d1({
-			database,
-			...scope
-		});
-	}
-	if (kind === "cloudflare-do") {
-		const namespace = resolveDurableObjectNamespace(config);
-		if (!namespace) throw new Error(`cloudflare-do ${tag} store selected but no Durable Object namespace was provided (expected config.namespace)`);
-		const objectName = durableObjectName(config);
-		input.logger.info(`[${tag}] Using Cloudflare Durable Object ${spec.durableObjectLog}`);
-		const stub = durableObjectStub(namespace, objectName);
-		return build.keyValue(durableObjectRecords(stub, parse, spec.durableObjectErrorName), prefix);
-	}
-	if (kind === "in-memory") {
-		input.logger.info(`[${tag}] Using in-memory ${label} store (non-persistent)`);
-		return inMemory();
-	}
-	if (kind === "upstash-redis-rest") {
-		const url = normalizeOptionalTrimmedString(config.url) || normalizeOptionalTrimmedString(config.UPSTASH_REDIS_REST_URL);
-		const token = normalizeOptionalTrimmedString(config.token) || normalizeOptionalTrimmedString(config.UPSTASH_REDIS_REST_TOKEN);
-		if (!url || !token) throw new Error(`Upstash ${connectionErrorSubject} enabled but url/token are not both set`);
-		input.logger.info(`[${tag}] Using Upstash REST ${label} store`);
-		return upstash(url, token);
-	}
-	if (kind === "redis-tcp") {
-		if (!input.isNode) {
-			input.logger.warn(`[${tag}] redis-tcp ${label} store is not supported in this runtime; falling back to in-memory`);
-			return inMemory();
-		}
-		const redisUrl = normalizeOptionalTrimmedString(config.redisUrl) || normalizeOptionalTrimmedString(config.REDIS_URL);
-		if (!redisUrl) throw new Error(`redis-tcp ${connectionErrorSubject} enabled but redisUrl is not set`);
-		input.logger.info(`[${tag}] Using redis-tcp ${label} store`);
-		return redisTcp(redisUrl);
-	}
-	if (kind) throw new Error(`[${tag}] Unknown ${label} store kind: ${kind}`);
-	const upstashUrl = normalizeOptionalTrimmedString(config.UPSTASH_REDIS_REST_URL);
-	const upstashToken = normalizeOptionalTrimmedString(config.UPSTASH_REDIS_REST_TOKEN);
-	if (upstashUrl || upstashToken) {
-		if (!upstashUrl || !upstashToken) throw new Error(`Upstash ${connectionErrorSubject} enabled but UPSTASH_REDIS_REST_URL / UPSTASH_REDIS_REST_TOKEN are not both set`);
-		input.logger.info(`[${tag}] Using Upstash REST ${label} store`);
-		return upstash(upstashUrl, upstashToken);
-	}
-	const redisUrl = normalizeOptionalTrimmedString(config.REDIS_URL);
-	if (redisUrl) {
-		if (!input.isNode) {
-			input.logger.warn(`[${tag}] REDIS_URL is set but TCP Redis is not supported in this runtime; falling back to in-memory`);
-			return inMemory();
-		}
-		input.logger.info(`[${tag}] Using redis-tcp ${label} store`);
-		return redisTcp(redisUrl);
-	}
-	input.logger.info(`[${tag}] Using in-memory ${label} store (${spec.unconfiguredNote})`);
-	return inMemory();
-}
-/** Selects the backend the config's `kind` names: D1, a Durable Object, or else memory. */
-function createDurableObjectStore(input, spec, build) {
-	const { tag } = spec;
-	const config = isPlainObject(input.config) ? input.config : {};
-	const prefix = spec.resolvePrefix(config);
-	const kind = normalizeOptionalTrimmedString(config.kind);
-	if (kind === "d1") {
-		const database = resolveD1DatabaseFromConfig(config);
-		if (!database) throw new Error(`[${tag}] D1 store selected but no D1 database was provided`);
-		input.logger.info(`[${tag}] Using D1 store`);
-		return build.d1({
-			database,
-			...d1TenantScopeFromConfig(config, prefix, spec.d1StoreName)
-		});
-	}
-	if (kind === "cloudflare-do") {
-		const namespace = resolveDurableObjectNamespace(config);
-		if (!namespace) throw new Error(`cloudflare-do ${spec.name} store selected but no Durable Object namespace was provided`);
-		const objectName = durableObjectName(config);
-		input.logger.info(`[${tag}] Using Cloudflare Durable Object store`);
-		return build.durableObject(durableObjectStub(namespace, objectName), prefix);
-	}
-	if (kind) throw new Error(`[${tag}] Unknown ${spec.name} store kind: ${kind}`);
-	input.logger.info(`[${tag}] ${spec.inMemoryLog}`);
-	return build.inMemory(prefix);
-}
-//#endregion
-export { createDurableObjectStore, createKeyValueStore, durableObjectName, durableObjectStub, postDurableObjectRequest, requestDurableObjectJson, resolveDurableObjectNamespace };
-
-//# sourceMappingURL=storeBackends.js.map

package/dist/esm/core/utils.js

@@ -1,14 +0,0 @@
-import { isString } from "../shared-ts/src/utils/validation.js";
-//#region src/core/utils.ts
-function formatGasToTGas(gasString) {
-	const gasAmount = BigInt(gasString);
-	return `${(Number(gasAmount) / 0xe8d4a51000).toFixed(0)} TGas`;
-}
-function formatYoctoToNear(yoctoAmount) {
-	const amount = isString(yoctoAmount) ? BigInt(yoctoAmount) : yoctoAmount;
-	return (Number(amount) / 1e24).toFixed(3);
-}
-//#endregion
-export { formatGasToTGas, formatYoctoToNear };
-
-//# sourceMappingURL=utils.js.map