@seams/wallet-server 0.7.3 → 0.8.0

package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js

@@ -1,532 +0,0 @@
-import { parseCorrelationId, parseIsoTimestamp } from "../utils/canonicalPrimitives.js";
-import { wireLabeled, wireLiteral, wireNonEmptyArray, wireObject, wireUnion } from "../utils/wireSchema.js";
-import { parseEcdsaCapabilityManifestId, parseEcdsaCapabilityManifestRevision, parseEcdsaLifecycleId, parseEcdsaServerGeneration } from "../utils/ecdsaCapabilityActivation.js";
-import { parseLaneHolderParticipantRecordV1, parseSigningWorkerParticipantRecordV1 } from "./participants.js";
-import { digest, digestString, laneEnrollmentId, laneOperationId, laneParticipantBindingDigest, laneShareEpoch, materialActivation, materialActivationId, parseAuthorization, parseLaneKind, requiredInteger, requiredString, signingLaneId, walletId, walletKeyId } from "./rotationWireFields.js";
-//#region ../shared-ts/src/signing-lanes/rotationParsers.ts
-function parseKeyFamily(raw, label) {
-	if (raw === "ed25519" || raw === "ecdsa_secp256k1") return raw;
-	throw new Error(`${label} must be ed25519 or ecdsa_secp256k1`);
-}
-const isoTimestamp = /* @__PURE__ */ wireLabeled(parseIsoTimestamp);
-function laneProtocolCommitReceiptV1() {
-	return wireObject({
-		kind: wireLiteral("lane_protocol_commit_receipt_v1"),
-		operationId: laneOperationId,
-		enrollmentId: laneEnrollmentId,
-		walletId,
-		walletKeyId,
-		sourceLaneId: signingLaneId,
-		sourceLaneShareEpoch: laneShareEpoch,
-		sourceRevocationEpoch: requiredInteger,
-		sourceMaterialActivation: materialActivation,
-		targetLaneId: signingLaneId,
-		targetLaneShareEpoch: laneShareEpoch,
-		targetMaterialActivationId: materialActivationId,
-		keyFamily: parseKeyFamily,
-		publicIdentityDigestB64u: digestString,
-		targetHolderPublicCommitmentB64u: requiredString,
-		targetServerPublicCommitmentB64u: requiredString,
-		targetHolderCiphertextDigestSetB64u: digestString,
-		targetServerCiphertextDigestSetB64u: digestString,
-		holderRecipientKeyDigestB64u: digestString,
-		serverRecipientKeyDigestB64u: digestString,
-		transcriptHashB64u: digestString,
-		committedAtMs: requiredInteger
-	});
-}
-function parseLaneProtocolCommitReceiptV1(raw, label = "protocolCommitReceipt") {
-	return laneProtocolCommitReceiptV1()(raw, label);
-}
-function laneHolderDeliveryReceiptV1() {
-	return wireObject({
-		kind: wireLiteral("lane_holder_delivery_receipt_v1"),
-		operationId: laneOperationId,
-		enrollmentId: laneEnrollmentId,
-		targetLaneId: signingLaneId,
-		targetLaneShareEpoch: laneShareEpoch,
-		targetMaterialActivationId: materialActivationId,
-		holderParticipantBindingDigestB64u: digestString,
-		holderRecipientKeyDigestB64u: digestString,
-		holderCiphertextDigestSetB64u: digestString,
-		sealedHolderRecordDigestB64u: digestString,
-		transcriptHashB64u: digestString,
-		acknowledgedAtMs: requiredInteger
-	});
-}
-function parseLaneHolderDeliveryReceiptV1(raw, label = "holderDeliveryReceipt") {
-	return laneHolderDeliveryReceiptV1()(raw, label);
-}
-function laneServerActivationReceiptV1() {
-	return wireObject({
-		kind: wireLiteral("lane_server_activation_receipt_v1"),
-		operationId: laneOperationId,
-		enrollmentId: laneEnrollmentId,
-		targetLaneId: signingLaneId,
-		targetLaneShareEpoch: laneShareEpoch,
-		targetMaterialActivation: materialActivation,
-		signingWorkerParticipantBindingDigestB64u: digestString,
-		serverCiphertextDigestSetB64u: digestString,
-		transcriptHashB64u: digestString,
-		activatedAtMs: requiredInteger
-	});
-}
-function parseLaneServerActivationReceiptV1(raw, label = "serverActivationReceipt") {
-	return laneServerActivationReceiptV1()(raw, label);
-}
-function laneEnrollmentManifestChildV1() {
-	return wireObject({
-		operationId: laneOperationId,
-		walletKeyId,
-		keyFamily: parseKeyFamily,
-		sourceLaneId: signingLaneId,
-		sourceLaneShareEpoch: laneShareEpoch,
-		sourceRevocationEpoch: requiredInteger,
-		sourceMaterialActivation: materialActivation,
-		targetLaneId: signingLaneId,
-		targetLaneShareEpoch: laneShareEpoch,
-		targetMaterialActivationId: materialActivationId,
-		holderParticipantBindingDigestB64u: digestString,
-		signingWorkerParticipantBindingDigestB64u: digestString
-	});
-}
-function assertUniqueChildren(children, label) {
-	for (const field of [
-		"operationId",
-		"walletKeyId",
-		"targetLaneId",
-		"targetMaterialActivationId"
-	]) {
-		const values = children.map((child) => String(child[field]));
-		if (new Set(values).size !== values.length) throw new Error(`${label} contains duplicate ${field}`);
-	}
-}
-function assertUniqueAggregateActivationChildren(children, label) {
-	const values = [
-		children.map((child) => String(child.operationId)),
-		children.map((child) => String(child.walletKeyId)),
-		children.map((child) => String(child.targetLaneId)),
-		children.map((child) => String(child.targetMaterialActivation.activationId))
-	];
-	for (const entries of values) if (new Set(entries).size !== entries.length) throw new Error(`${label} contains duplicate child identity`);
-}
-function laneEnrollmentManifestV1() {
-	return wireObject({
-		kind: wireLiteral("lane_enrollment_manifest_v1"),
-		enrollmentId: laneEnrollmentId,
-		walletId,
-		authorization: parseAuthorization,
-		orderedChildren: wireNonEmptyArray(laneEnrollmentManifestChildV1(), assertUniqueChildren),
-		createdAtMs: requiredInteger,
-		expiresAtMs: requiredInteger
-	}, (manifest, label) => {
-		if (manifest.expiresAtMs <= manifest.createdAtMs) throw new Error(`${label}.expiresAtMs must be after createdAtMs`);
-	});
-}
-function parseLaneEnrollmentManifestV1(raw, label = "laneEnrollmentManifest") {
-	return laneEnrollmentManifestV1()(raw, label);
-}
-function aggregateLaneActivationChildReceiptV1() {
-	return wireObject({
-		operationId: laneOperationId,
-		walletKeyId,
-		targetLaneId: signingLaneId,
-		targetLaneShareEpoch: laneShareEpoch,
-		targetMaterialActivation: materialActivation,
-		protocolCommitReceiptDigestB64u: digestString,
-		holderDeliveryReceiptDigestB64u: digestString,
-		serverActivationReceiptDigestB64u: digestString
-	});
-}
-function aggregateLaneActivationReceiptV1() {
-	return wireObject({
-		kind: wireLiteral("aggregate_lane_activation_receipt_v1"),
-		enrollmentId: laneEnrollmentId,
-		walletId,
-		manifestDigestB64u: digestString,
-		orderedChildReceipts: wireNonEmptyArray(aggregateLaneActivationChildReceiptV1(), assertUniqueAggregateActivationChildren),
-		activatedAtMs: requiredInteger
-	});
-}
-function parseAggregateLaneActivationReceiptV1(raw, label = "aggregateActivationReceipt") {
-	return aggregateLaneActivationReceiptV1()(raw, label);
-}
-function laneRefreshPredecessorRetirementV1() {
-	return wireObject({
-		refreshOperationId: laneOperationId,
-		sourceLaneId: signingLaneId,
-		sourceLaneShareEpoch: laneShareEpoch,
-		sourceMaterialActivation: materialActivation,
-		retirementEffectBindingDigestB64u: digest,
-		retirementReceipt: parseLaneServerRetirementReceiptV1
-	});
-}
-function parseLaneRefreshPredecessorRetirementV1(raw, label = "laneRefreshPredecessorRetirement") {
-	return laneRefreshPredecessorRetirementV1()(raw, label);
-}
-function aggregateLaneRevocationChildReceiptV1() {
-	return wireObject({
-		operationId: laneOperationId,
-		walletKeyId,
-		targetLaneId: signingLaneId,
-		targetLaneShareEpoch: laneShareEpoch,
-		targetMaterialActivation: materialActivation,
-		revocationEpoch: requiredInteger,
-		retirementReceiptDigestB64u: digestString
-	});
-}
-function aggregateLaneRevocationReceiptV1() {
-	return wireObject({
-		kind: wireLiteral("aggregate_lane_revocation_receipt_v1"),
-		enrollmentId: laneEnrollmentId,
-		walletId,
-		manifestDigestB64u: digestString,
-		orderedChildReceipts: wireNonEmptyArray(aggregateLaneRevocationChildReceiptV1()),
-		revokedAtMs: requiredInteger
-	});
-}
-function parseAggregateLaneRevocationReceiptV1(raw, label = "aggregateRevocationReceipt") {
-	return aggregateLaneRevocationReceiptV1()(raw, label);
-}
-function revokeLaneEnrollmentV1() {
-	return wireObject({
-		kind: wireLiteral("revoke_lane_enrollment_v1"),
-		enrollmentId: laneEnrollmentId,
-		walletId,
-		manifestDigestB64u: digestString,
-		reason: wireLiteral("cancelled_after_commit", "expired_after_commit", "revoked_during_activation", "user_revoked", "device_compromise", "agent_compromise"),
-		requestedAtMs: requiredInteger
-	});
-}
-function parseRevokeLaneEnrollmentV1(raw, label = "revokeLaneEnrollment") {
-	return revokeLaneEnrollmentV1()(raw, label);
-}
-function revokeSigningLaneV1() {
-	return wireObject({
-		kind: wireLiteral("revoke_signing_lane_v1"),
-		walletId,
-		walletKeyId,
-		laneId: signingLaneId,
-		laneShareEpoch,
-		expectedRevocationEpoch: requiredInteger,
-		reason: wireLiteral("user_revoked", "policy_revoked", "device_compromise", "agent_compromise", "rotation"),
-		retirementCorrelationId: parseCorrelationId,
-		retirementRequestDigestB64u: digestString,
-		retirementEffectBindingDigestB64u: digestString,
-		requestedAtMs: requiredInteger
-	});
-}
-function parseRevokeSigningLaneV1(raw, label = "revokeSigningLane") {
-	return revokeSigningLaneV1()(raw, label);
-}
-function completeSigningLaneRevocationV1() {
-	return wireObject({
-		kind: wireLiteral("complete_signing_lane_revocation_v1"),
-		command: parseRevokeSigningLaneV1,
-		expectedVersion: requiredInteger,
-		commandDigestB64u: digestString,
-		retirementReceipt: parseLaneServerRetirementReceiptV1,
-		revokedAtMs: requiredInteger
-	});
-}
-function parseCompleteSigningLaneRevocationV1(raw, label = "completeSigningLaneRevocation") {
-	return completeSigningLaneRevocationV1()(raw, label);
-}
-function commitLaneEnrollmentRevocationV1() {
-	return wireObject({
-		kind: wireLiteral("commit_lane_enrollment_revocation_v1"),
-		enrollmentId: laneEnrollmentId,
-		walletId,
-		manifestDigestB64u: digestString,
-		receipt: parseAggregateLaneRevocationReceiptV1,
-		revokedAtMs: requiredInteger
-	}, (command, label) => {
-		if (String(command.receipt.enrollmentId) !== String(command.enrollmentId) || String(command.receipt.walletId) !== String(command.walletId)) throw new Error(`${label}.receipt identity does not match command`);
-	});
-}
-function laneProductEpochRecordV1() {
-	const common = {
-		kind: wireLiteral("lane_product_epoch_record_v1"),
-		walletId,
-		walletKeyId,
-		laneId: signingLaneId,
-		laneKind: parseLaneKind,
-		laneShareEpoch,
-		keyFamily: parseKeyFamily,
-		enrollmentId: laneEnrollmentId,
-		operationId: laneOperationId,
-		targetMaterialActivationId: materialActivationId,
-		materialActivation,
-		publicIdentityDigestB64u: digestString,
-		holderParticipant: parseLaneHolderParticipantRecordV1,
-		signingWorkerParticipant: parseSigningWorkerParticipantRecordV1,
-		participantSetBindingDigestB64u: laneParticipantBindingDigest,
-		revocationEpoch: requiredInteger,
-		createdAtMs: requiredInteger
-	};
-	const revocationReason = wireLiteral("user_revoked", "policy_revoked", "device_compromise", "agent_compromise", "rotation");
-	return wireUnion("state", [
-		wireObject({
-			...common,
-			state: wireLiteral("pending_visibility"),
-			aggregateManifestDigestB64u: digestString,
-			protocolCommitReceiptDigestB64u: digestString,
-			holderDeliveryReceiptDigestB64u: digestString,
-			serverActivationReceiptDigestB64u: digestString,
-			pendingSinceMs: requiredInteger
-		}),
-		wireObject({
-			...common,
-			state: wireLiteral("active"),
-			aggregateManifestDigestB64u: digestString,
-			aggregateActivationReceiptDigestB64u: digestString,
-			activatedAtMs: requiredInteger
-		}),
-		wireObject({
-			...common,
-			state: wireLiteral("retired"),
-			retirementReason: wireLiteral("rotation", "device_compromise", "agent_compromise"),
-			retirementReceiptDigestB64u: digestString,
-			retiredAtMs: requiredInteger
-		}),
-		wireObject({
-			...common,
-			state: wireLiteral("revocation_pending"),
-			revocationReason,
-			retirementEffectBindingDigestB64u: digestString,
-			revocationRequestedAtMs: requiredInteger
-		}),
-		wireObject({
-			...common,
-			state: wireLiteral("revoked"),
-			revocationReason,
-			retirementEffectBindingDigestB64u: digestString,
-			revocationReceiptDigestB64u: digestString,
-			revokedAtMs: requiredInteger
-		})
-	]);
-}
-function parseLaneProductEpochRecordV1(raw, label = "laneProductEpochRecord") {
-	return laneProductEpochRecordV1()(raw, label);
-}
-function laneProtocolLifecycle() {
-	return wireUnion("state", [
-		wireObject({
-			state: wireLiteral("preparing"),
-			startedAtMs: requiredInteger
-		}),
-		wireObject({
-			state: wireLiteral("awaiting_protocol_commitment"),
-			startedAtMs: requiredInteger
-		}),
-		wireObject({
-			state: wireLiteral("committed_awaiting_holder_delivery"),
-			startedAtMs: requiredInteger,
-			committedAtMs: requiredInteger,
-			transcriptHashB64u: digestString,
-			protocolCommitReceiptDigestB64u: digestString
-		}),
-		wireObject({
-			state: wireLiteral("awaiting_server_activation"),
-			startedAtMs: requiredInteger,
-			committedAtMs: requiredInteger,
-			transcriptHashB64u: digestString,
-			protocolCommitReceiptDigestB64u: digestString,
-			holderDeliveryReceiptDigestB64u: digestString,
-			holderReceiptAtMs: requiredInteger
-		}),
-		wireObject({
-			state: wireLiteral("ready_for_parent_visibility"),
-			startedAtMs: requiredInteger,
-			committedAtMs: requiredInteger,
-			transcriptHashB64u: digestString,
-			protocolCommitReceiptDigestB64u: digestString,
-			holderDeliveryReceiptDigestB64u: digestString,
-			holderReceiptAtMs: requiredInteger,
-			serverActivationReceiptDigestB64u: digestString,
-			serverActivatedAtMs: requiredInteger
-		}),
-		wireObject({
-			state: wireLiteral("active"),
-			transcriptHashB64u: digestString,
-			protocolCommitReceiptDigestB64u: digestString,
-			holderDeliveryReceiptDigestB64u: digestString,
-			serverActivationReceiptDigestB64u: digestString,
-			aggregateActivationReceiptDigestB64u: digestString,
-			activatedAtMs: requiredInteger
-		}),
-		wireObject({
-			state: wireLiteral("aborted_precommit"),
-			startedAtMs: requiredInteger,
-			abortedAtMs: requiredInteger,
-			abortReason: wireLiteral("cancelled", "expired", "revoked_before_commit")
-		}),
-		wireObject({
-			state: wireLiteral("committed_completion_required"),
-			startedAtMs: requiredInteger,
-			committedAtMs: requiredInteger,
-			transcriptHashB64u: digestString,
-			protocolCommitReceiptDigestB64u: digestString,
-			recoveryReason: wireLiteral("exact_redelivery_required", "recovery_required")
-		})
-	]);
-}
-function parseLaneProtocolLifecycleV1(raw, label = "laneProtocolLifecycle") {
-	return laneProtocolLifecycle()(raw, label);
-}
-function laneEnrollmentLifecycleV1() {
-	return wireUnion("state", [
-		wireObject({
-			state: wireLiteral("preparing"),
-			manifestDigestB64u: digestString,
-			startedAtMs: requiredInteger
-		}),
-		wireObject({
-			state: wireLiteral("committed_completion_required"),
-			manifestDigestB64u: digestString,
-			committedChildOperationIds: wireNonEmptyArray(laneOperationId),
-			markedAtMs: requiredInteger
-		}),
-		wireObject({
-			state: wireLiteral("ready_for_visibility"),
-			manifestDigestB64u: digestString,
-			aggregateReceiptDigestB64u: digestString,
-			readyAtMs: requiredInteger
-		}),
-		wireObject({
-			state: wireLiteral("active"),
-			manifestDigestB64u: digestString,
-			aggregateReceiptDigestB64u: digestString,
-			activatedAtMs: requiredInteger
-		}),
-		wireObject({
-			state: wireLiteral("cancelled_precommit"),
-			cancelledAtMs: requiredInteger
-		}),
-		wireObject({
-			state: wireLiteral("revoking_committed_targets"),
-			manifestDigestB64u: digestString,
-			reason: wireLiteral("cancelled_after_commit", "expired_after_commit", "revoked_during_activation"),
-			markedAtMs: requiredInteger
-		}),
-		wireObject({
-			state: wireLiteral("revoked"),
-			manifestDigestB64u: digestString,
-			aggregateRevocationReceiptDigestB64u: digestString,
-			revokedAtMs: requiredInteger
-		})
-	]);
-}
-function parseLaneEnrollmentLifecycleV1(raw, label = "laneEnrollmentLifecycle") {
-	return laneEnrollmentLifecycleV1()(raw, label);
-}
-function buildLaneProtocolRecordV1(args) {
-	return {
-		job: args.job,
-		lifecycle: args.lifecycle
-	};
-}
-function buildAggregateLaneRevocationReceiptV1(args) {
-	return parseAggregateLaneRevocationReceiptV1({
-		kind: "aggregate_lane_revocation_receipt_v1",
-		...args
-	});
-}
-function buildRevokeSigningLaneV1(args) {
-	return parseRevokeSigningLaneV1({
-		kind: "revoke_signing_lane_v1",
-		...args
-	});
-}
-function buildCommitLaneEnrollmentRevocationV1(args) {
-	return commitLaneEnrollmentRevocationV1()({
-		kind: "commit_lane_enrollment_revocation_v1",
-		...args
-	}, "commitLaneEnrollmentRevocation");
-}
-function buildLaneProductEpochPendingVisibilityV1(args) {
-	const value = parseLaneProductEpochRecordV1({
-		kind: "lane_product_epoch_record_v1",
-		state: "pending_visibility",
-		...args
-	});
-	if (value.state !== "pending_visibility") throw new Error("product epoch state changed");
-	return value;
-}
-function buildLaneProductEpochRevokedV1(args) {
-	const value = parseLaneProductEpochRecordV1({
-		kind: "lane_product_epoch_record_v1",
-		state: "revoked",
-		...args
-	});
-	if (value.state !== "revoked") throw new Error("product epoch state changed");
-	return value;
-}
-const serverRetirementReason = /* @__PURE__ */ wireLiteral("lane_revoked", "device_compromise", "agent_compromise", "rotation");
-function ecdsaServerRetirementReceiptV1() {
-	return wireObject({
-		kind: wireLiteral("ecdsa_server_retirement_receipt_v1"),
-		manifest: wireObject({
-			manifestId: parseEcdsaCapabilityManifestId,
-			manifestRevision: parseEcdsaCapabilityManifestRevision
-		}),
-		materialActivation,
-		walletKeyId,
-		laneId: signingLaneId,
-		laneShareEpoch,
-		revocationEpoch: requiredInteger,
-		retirementReason: serverRetirementReason,
-		retirementCorrelationId: parseCorrelationId,
-		retirementRequestDigestB64u: digestString,
-		serverGeneration: parseEcdsaServerGeneration,
-		lifecycleId: parseEcdsaLifecycleId,
-		receiptDigestB64u: digestString,
-		retiredAt: isoTimestamp
-	});
-}
-function parseEcdsaServerRetirementReceiptV1(raw, label = "ecdsaRetirementReceipt") {
-	return ecdsaServerRetirementReceiptV1()(raw, label);
-}
-function ed25519LaneMaterialIdentityV1() {
-	return wireObject({
-		operationId: laneOperationId,
-		enrollmentId: laneEnrollmentId,
-		walletId,
-		walletKeyId,
-		targetLaneId: signingLaneId,
-		targetLaneShareEpoch: laneShareEpoch,
-		targetMaterialActivationId: materialActivationId,
-		keyFamily: wireLiteral("ed25519"),
-		holderParticipantBindingDigestB64u: digest,
-		signingWorkerParticipantBindingDigestB64u: digest,
-		holderRecipientKeyDigestB64u: digest,
-		serverRecipientKeyDigestB64u: digest,
-		transcriptHashB64u: digest,
-		protocolCommitReceiptDigestB64u: digest
-	});
-}
-function ed25519ServerRetirementReceiptV1() {
-	return wireObject({
-		kind: wireLiteral("ed25519_server_retirement_receipt_v1"),
-		identity: ed25519LaneMaterialIdentityV1(),
-		revocationEpoch: requiredInteger,
-		retirementReason: serverRetirementReason,
-		retirementCorrelationId: parseCorrelationId,
-		retirementRequestDigestB64u: digest,
-		receiptDigestB64u: digest,
-		retiredAtMs: requiredInteger
-	});
-}
-function parseEd25519ServerRetirementReceiptV1(raw, label = "ed25519RetirementReceipt") {
-	return ed25519ServerRetirementReceiptV1()(raw, label);
-}
-function laneServerRetirementReceiptV1() {
-	return wireUnion("kind", [ecdsaServerRetirementReceiptV1(), ed25519ServerRetirementReceiptV1()]);
-}
-function parseLaneServerRetirementReceiptV1(raw, label = "laneServerRetirementReceipt") {
-	return laneServerRetirementReceiptV1()(raw, label);
-}
-//#endregion
-export { buildAggregateLaneRevocationReceiptV1, buildCommitLaneEnrollmentRevocationV1, buildLaneProductEpochPendingVisibilityV1, buildLaneProductEpochRevokedV1, buildLaneProtocolRecordV1, buildRevokeSigningLaneV1, parseAggregateLaneActivationReceiptV1, parseAggregateLaneRevocationReceiptV1, parseCompleteSigningLaneRevocationV1, parseEcdsaServerRetirementReceiptV1, parseEd25519ServerRetirementReceiptV1, parseLaneEnrollmentLifecycleV1, parseLaneEnrollmentManifestV1, parseLaneHolderDeliveryReceiptV1, parseLaneProductEpochRecordV1, parseLaneProtocolCommitReceiptV1, parseLaneProtocolLifecycleV1, parseLaneRefreshPredecessorRetirementV1, parseLaneServerActivationReceiptV1, parseLaneServerRetirementReceiptV1, parseRevokeLaneEnrollmentV1, parseRevokeSigningLaneV1 };
-
-//# sourceMappingURL=rotationParsers.js.map