@seams/wallet-server 0.7.3 → 0.8.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (516) hide show
  1. package/THIRD_PARTY_NOTICES.md +1 -9
  2. package/artifact-manifest.json +78 -33
  3. package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -1
  4. package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
  5. package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
  6. package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -1
  7. package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
  8. package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
  9. package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
  10. package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
  11. package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
  12. package/cloudflare-router-ab/build/router/build-stamp.json +1 -1
  13. package/cloudflare-router-ab/build/router/index.js +2 -2
  14. package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
  15. package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -1
  16. package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
  17. package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
  18. package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -1
  19. package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
  20. package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
  21. package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +0 -2
  22. package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +77 -20
  23. package/dist/esm/authorization/lifecycleRouting.js +62 -0
  24. package/dist/esm/authorization/service.js +35 -12
  25. package/dist/esm/cloud-host.js +20 -22
  26. package/dist/esm/core/EmailOtpRecords.js +1 -217
  27. package/dist/esm/core/EmailOtpStores.js +0 -859
  28. package/dist/esm/core/IdentityStore.js +2 -339
  29. package/dist/esm/core/ThresholdService/config.js +1 -9
  30. package/dist/esm/core/ThresholdService/index.js +0 -4
  31. package/dist/esm/core/ThresholdService/kv.js +1 -66
  32. package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +1 -13
  33. package/dist/esm/core/ThresholdService/routerAbNormalSigningPolicy.js +1 -11
  34. package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +0 -541
  35. package/dist/esm/core/ThresholdService/validation.js +2 -346
  36. package/dist/esm/core/WalletAuthMethodStore.js +2 -123
  37. package/dist/esm/core/WalletStore.js +3 -209
  38. package/dist/esm/core/WebAuthnAuthenticatorStore.js +0 -202
  39. package/dist/esm/core/WebAuthnCredentialBindingStore.js +2 -182
  40. package/dist/esm/core/WebAuthnLoginChallengeStore.js +0 -52
  41. package/dist/esm/core/WebAuthnSyncChallengeStore.js +0 -54
  42. package/dist/esm/core/authService/emailOtpConfig.js +1 -195
  43. package/dist/esm/core/authService/emailOtpEnrollment.js +0 -110
  44. package/dist/esm/core/authService/emailOtpSeal.js +0 -63
  45. package/dist/esm/core/authService/nearTransactions.js +3 -98
  46. package/dist/esm/core/authService/rateLimits.js +0 -84
  47. package/dist/esm/core/authService/webauthn.js +2 -298
  48. package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -24
  49. package/dist/esm/core/authService/webauthnWalletBinding.js +0 -37
  50. package/dist/esm/core/config.js +1 -95
  51. package/dist/esm/core/d1EcdsaSignerRead.js +1 -1
  52. package/dist/esm/core/d1IdentityStore.js +1 -2
  53. package/dist/esm/core/d1TenantStore.js +1 -24
  54. package/dist/esm/core/d1WalletAuthMethodStore.js +2 -5
  55. package/dist/esm/core/d1WalletStore.js +2 -2
  56. package/dist/esm/core/deviceLinking/linkedDeviceBootstrap.js +13 -0
  57. package/dist/esm/core/deviceLinking/linkedDeviceSession.js +20 -14
  58. package/dist/esm/core/deviceLinking/requestProof.js +9 -6
  59. package/dist/esm/core/emailOtpD1Statements.js +107 -94
  60. package/dist/esm/core/keyMaterialBrands.js +2 -12
  61. package/dist/esm/core/nearKeys.js +0 -1
  62. package/dist/esm/core/nearRelayerAccountProvisioning.js +6 -9
  63. package/dist/esm/core/passkeyCredentialClaims.js +8 -0
  64. package/dist/esm/core/routerAbSigning/RouterAbEcdsaPresignRuntime.js +2 -6
  65. package/dist/esm/core/routerAbSigning/RouterAbNormalSigningRuntime.js +2 -30
  66. package/dist/esm/core/thresholdEcdsaChainTarget.js +1 -4
  67. package/dist/esm/hosted-wallet-gateway.js +66 -43
  68. package/dist/esm/index.js +6 -19
  69. package/dist/esm/localHostedWalletGatewayHandler.js +12 -0
  70. package/dist/esm/localRegistrationSetupAuthority.js +89 -0
  71. package/dist/esm/router/auth/authRequestValidation.js +8 -16
  72. package/dist/esm/router/auth/webAuthnCredentialCodecs.js +0 -1
  73. package/dist/esm/router/cloudflare/d1/auth/d1AuthorizationAssembly.js +87 -0
  74. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthConfig.js +12 -2
  75. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +32 -281
  76. package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +24 -22
  77. package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +8 -6
  78. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +12 -13
  79. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEd25519ExportRootStore.js +6 -1
  80. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +12 -2
  81. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +4 -4
  82. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +1 -1
  83. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -9
  84. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.js +2 -1
  85. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +89 -7
  86. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +23 -14
  87. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +9 -6
  88. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.js +0 -1
  89. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.js +0 -1
  90. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +1 -1
  91. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +0 -1
  92. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +1 -1
  93. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +1 -7
  94. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.js +19 -13
  95. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +0 -1
  96. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +0 -1
  97. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +2 -2
  98. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.js +0 -1
  99. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +44 -12
  100. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +1 -49
  101. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +19 -31
  102. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.js +85 -0
  103. package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +0 -1
  104. package/dist/esm/router/cloudflare/d1/identity/d1IdentityService.js +0 -48
  105. package/dist/esm/router/cloudflare/d1/near/d1SponsoredNearAccount.js +242 -0
  106. package/dist/esm/router/cloudflare/d1/oidc/d1OidcBoundary.js +0 -1
  107. package/dist/esm/router/cloudflare/d1/oidc/d1OidcVerificationService.js +2 -29
  108. package/dist/esm/router/cloudflare/d1/oidc/googleOidcToken.js +41 -0
  109. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +5 -0
  110. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +34 -0
  111. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +9 -3
  112. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +7 -13
  113. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +25 -13
  114. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +0 -1
  115. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationSetupSupport.js +74 -0
  116. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +7 -1
  117. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +69 -238
  118. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +12 -56
  119. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.js +155 -0
  120. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +1 -3
  121. package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +12 -6
  122. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.js +68 -0
  123. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +7 -54
  124. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +9 -8
  125. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +2 -142
  126. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +25 -4
  127. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +4 -70
  128. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +23 -7
  129. package/dist/esm/router/cloudflare/runtime/staticWalletConsoleBinding.js +1 -0
  130. package/dist/esm/router/cloudflare/runtime/walletConsoleOps.js +1 -0
  131. package/dist/esm/router/cloudflare/runtime/walletConsoleOpsClient.js +5 -0
  132. package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
  133. package/dist/esm/router/cloudflare/runtime/walletRuntimeOps.js +16 -4
  134. package/dist/esm/router/cloudflare-adaptor.js +1 -2
  135. package/dist/esm/router/cloudflare.js +1342 -1733
  136. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +11 -8
  137. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +3 -2
  138. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +6 -6
  139. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +6 -6
  140. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +3 -0
  141. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +8 -0
  142. package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +0 -1
  143. package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.js +2 -8
  144. package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -8
  145. package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +5 -19
  146. package/dist/esm/router/domains/signingOperations/walletExecutionAdmission.js +2 -3
  147. package/dist/esm/router/domains/walletRegistration/walletRegistrationReservation.js +70 -0
  148. package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +10 -11
  149. package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +2 -3
  150. package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +14 -0
  151. package/dist/esm/router/express.js +574 -479
  152. package/dist/esm/router/framework/http.js +2 -0
  153. package/dist/esm/router/framework/registrationSetupDispatch.js +14 -0
  154. package/dist/esm/router/framework/ror/normalize.js +0 -1
  155. package/dist/esm/router/framework/ror/options.js +0 -1
  156. package/dist/esm/router/framework/ror/provider.js +0 -1
  157. package/dist/esm/router/framework/ror/staticProvider.js +0 -1
  158. package/dist/esm/router/framework/routeDefinitions.js +1 -2
  159. package/dist/esm/router/framework/routerApiWebhooks.js +0 -1
  160. package/dist/esm/router/ror.js +0 -1
  161. package/dist/esm/router/transport/fetch/createFetchRouter.js +0 -2
  162. package/dist/esm/router/transport/fetch/routes/auth.js +2 -0
  163. package/dist/esm/router/transport/fetch/routes/deviceLinking.js +36 -147
  164. package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +3 -2
  165. package/dist/esm/router/transport/fetch/routes/deviceLinkingResponses.js +130 -0
  166. package/dist/esm/router/transport/fetch/routes/ecdsaOperationStepUpFactor.js +171 -0
  167. package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +1 -0
  168. package/dist/esm/router/transport/fetch/routes/syncAccount.js +7 -2
  169. package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +19 -115
  170. package/dist/esm/router/transport/fetch/routes/walletRegistration.js +3 -1
  171. package/dist/esm/shared-ts/src/authorization/walletSessionIssuance.js +0 -1
  172. package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +0 -2
  173. package/dist/esm/shared-ts/src/device-linking/contracts.js +16 -1
  174. package/dist/esm/shared-ts/src/device-linking/digests.js +1 -8
  175. package/dist/esm/shared-ts/src/near/actions.js +0 -1
  176. package/dist/esm/shared-ts/src/near/nearClient.js +0 -2
  177. package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -1
  178. package/dist/esm/shared-ts/src/signing-lanes/index.js +1 -6
  179. package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +1 -1
  180. package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +2 -81
  181. package/dist/esm/shared-ts/src/signing-lanes/participants.js +1 -219
  182. package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +0 -3
  183. package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +1 -2
  184. package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +0 -1
  185. package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +1 -22
  186. package/dist/esm/shared-ts/src/threshold/participants.js +0 -1
  187. package/dist/esm/shared-ts/src/threshold/signingRootScope.js +0 -1
  188. package/dist/esm/shared-ts/src/utils/addWalletAuthMethod.js +4 -13
  189. package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +1 -7
  190. package/dist/esm/shared-ts/src/utils/domainIds.js +1 -16
  191. package/dist/esm/shared-ts/src/utils/ecdsaCapabilityActivation.js +1 -11
  192. package/dist/esm/shared-ts/src/utils/ecdsaKeyFactsInventory.js +0 -1
  193. package/dist/esm/shared-ts/src/utils/errors.js +1 -19
  194. package/dist/esm/shared-ts/src/utils/near.js +1 -1
  195. package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +1 -1
  196. package/dist/esm/shared-ts/src/utils/registrationIds.js +1 -5
  197. package/dist/esm/shared-ts/src/utils/registrationIntent.js +0 -1
  198. package/dist/esm/shared-ts/src/utils/registrationSetupOperation.js +8 -0
  199. package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +1 -1
  200. package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +0 -1
  201. package/dist/esm/shared-ts/src/utils/validation.js +1 -5
  202. package/dist/esm/shared-ts/src/utils/walletAuthAuthority.js +0 -1
  203. package/dist/esm/shared-ts/src/utils/walletManagementProtocol.js +6 -0
  204. package/dist/esm/shared-ts/src/utils/wireSchema.js +2 -13
  205. package/dist/esm/shared-ts/src/wallet-recovery/backupAcknowledgement.js +6 -24
  206. package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +0 -1
  207. package/dist/esm/shared-ts/src/wallet-recovery/recoveryKeyId.js +5 -6
  208. package/dist/esm/storage/d1Sql.js +1 -7
  209. package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +0 -1
  210. package/dist/esm/threshold/session/signingSessionSeal/guards/backends.js +1 -2
  211. package/dist/esm/threshold/session/signingSessionSeal/idempotencyBackends.js +0 -1
  212. package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +0 -1
  213. package/dist/esm/threshold/session/signingSessionSeal/options.js +0 -1
  214. package/dist/esm/wasm/evm_crypto/pkg/evm_crypto_bg.wasm +0 -0
  215. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +0 -611
  216. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
  217. package/dist/esm/wasm/shamir3pass_runtime/pkg/shamir3pass_runtime_bg.wasm +0 -0
  218. package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +0 -4
  219. package/dist/types/shared-ts/src/device-linking/contracts.d.ts +1 -0
  220. package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -2
  221. package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +0 -11
  222. package/dist/types/shared-ts/src/signing-lanes/ids.d.ts +2 -7
  223. package/dist/types/shared-ts/src/signing-lanes/index.d.ts +0 -4
  224. package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +0 -1
  225. package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +0 -18
  226. package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +6 -35
  227. package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +6 -843
  228. package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +0 -10
  229. package/dist/types/shared-ts/src/threshold/participants.d.ts +1 -1
  230. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +1 -133
  231. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +4 -18
  232. package/dist/types/shared-ts/src/utils/domainIds.d.ts +0 -12
  233. package/dist/types/shared-ts/src/utils/errors.d.ts +0 -4
  234. package/dist/types/shared-ts/src/utils/near.d.ts +0 -20
  235. package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -2
  236. package/dist/types/shared-ts/src/utils/registrationSetupOperation.d.ts +3 -0
  237. package/dist/types/shared-ts/src/utils/validation.d.ts +1 -3
  238. package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +0 -1
  239. package/dist/types/shared-ts/src/utils/walletManagementProtocol.d.ts +3 -0
  240. package/dist/types/shared-ts/src/utils/wireSchema.d.ts +0 -2
  241. package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +0 -1
  242. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +1 -10
  243. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodes.d.ts +1 -3
  244. package/dist/types/shared-ts/src/wallet-recovery/recoveryKeyId.d.ts +5 -21
  245. package/dist/types/wallet-server/src/authorization/lifecycleRouting.d.ts +32 -0
  246. package/dist/types/wallet-server/src/authorization/lifecycleRouting.typecheck.d.ts +2 -0
  247. package/dist/types/wallet-server/src/authorization/recoveryRouting.d.ts +22 -0
  248. package/dist/types/wallet-server/src/authorization/recoveryRouting.typecheck.d.ts +2 -0
  249. package/dist/types/wallet-server/src/authorization/service.d.ts +8 -1
  250. package/dist/types/wallet-server/src/authorization/sessionRouting.d.ts +20 -0
  251. package/dist/types/wallet-server/src/authorization/sessionRouting.typecheck.d.ts +2 -0
  252. package/dist/types/wallet-server/src/cloud-host.d.ts +31 -9
  253. package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +1 -22
  254. package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +1 -79
  255. package/dist/types/wallet-server/src/core/IdentityStore.d.ts +0 -10
  256. package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +0 -1
  257. package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -2
  258. package/dist/types/wallet-server/src/core/ThresholdService/index.d.ts +1 -3
  259. package/dist/types/wallet-server/src/core/ThresholdService/kv.d.ts +0 -7
  260. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +0 -3
  261. package/dist/types/wallet-server/src/core/ThresholdService/routerAbNormalSigningPolicy.d.ts +0 -1
  262. package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +7 -19
  263. package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +0 -34
  264. package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +1 -5
  265. package/dist/types/wallet-server/src/core/WalletStore.d.ts +0 -3
  266. package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +0 -20
  267. package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +1 -27
  268. package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +2 -16
  269. package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +22 -14
  270. package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +0 -24
  271. package/dist/types/wallet-server/src/core/authService/emailOtpEnrollment.d.ts +1 -70
  272. package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +0 -13
  273. package/dist/types/wallet-server/src/core/authService/githubOAuth.d.ts +2 -1
  274. package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +1 -39
  275. package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -17
  276. package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +0 -125
  277. package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +0 -3
  278. package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +1 -1
  279. package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +0 -12
  280. package/dist/types/wallet-server/src/core/config.d.ts +0 -10
  281. package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +0 -2
  282. package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +0 -7
  283. package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +0 -1
  284. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceBootstrap.d.ts +19 -0
  285. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +8 -6
  286. package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -5
  287. package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +10 -7
  288. package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +1 -5
  289. package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +0 -1
  290. package/dist/types/wallet-server/src/core/passkeyCredentialClaims.d.ts +9 -0
  291. package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbEcdsaPresignRuntime.d.ts +0 -2
  292. package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +0 -2
  293. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +1 -92
  294. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +4 -52
  295. package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +0 -1
  296. package/dist/types/wallet-server/src/core/types.d.ts +0 -299
  297. package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +15 -3
  298. package/dist/types/wallet-server/src/index.d.ts +8 -13
  299. package/dist/types/wallet-server/src/localRegistrationSetupAuthority.d.ts +13 -0
  300. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizationAssembly.d.ts +23 -0
  301. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +25 -3
  302. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +1 -1
  303. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +3 -1
  304. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +7 -1
  305. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.d.ts +1 -10
  306. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.d.ts +4 -0
  307. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +6 -0
  308. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +1 -13
  309. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.d.ts +2 -2
  310. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +1 -1
  311. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +0 -2
  312. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +18 -2
  313. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +29 -1
  314. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -16
  315. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.d.ts +7 -2
  316. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.d.ts +23 -0
  317. package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityService.d.ts +0 -12
  318. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.d.ts +24 -0
  319. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.typecheck.d.ts +2 -0
  320. package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/d1OidcVerificationService.d.ts +0 -1
  321. package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/googleOidcToken.d.ts +4 -0
  322. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -0
  323. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +9 -0
  324. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +1 -1
  325. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -11
  326. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +3 -2
  327. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationSetupSupport.d.ts +51 -0
  328. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +3 -0
  329. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +30 -47
  330. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +3 -30
  331. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.d.ts +11 -0
  332. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.d.ts +27 -0
  333. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +1 -10
  334. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +2 -2
  335. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +0 -4
  336. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.d.ts +3 -0
  337. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +0 -13
  338. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +23 -10
  339. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.typecheck.d.ts +2 -0
  340. package/dist/types/wallet-server/src/router/cloudflare/runtime/cloudflare.types.d.ts +0 -2
  341. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOps.d.ts +1 -0
  342. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOpsClient.d.ts +2 -0
  343. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -1
  344. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRuntimeOps.d.ts +3 -0
  345. package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +0 -1
  346. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +1 -1
  347. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -2
  348. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +2 -2
  349. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.typecheck.d.ts +2 -0
  350. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.d.ts +2 -0
  351. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.d.ts +2 -0
  352. package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +0 -2
  353. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +0 -3
  354. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +0 -17
  355. package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +1 -2
  356. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +1 -0
  357. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationReservation.d.ts +51 -0
  358. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +2 -10
  359. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +2 -2
  360. package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +14 -34
  361. package/dist/types/wallet-server/src/router/framework/googleLoginResolution.typecheck.d.ts +2 -0
  362. package/dist/types/wallet-server/src/router/framework/registrationSetupDispatch.d.ts +13 -0
  363. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +1 -1
  364. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingResponses.d.ts +17 -0
  365. package/dist/types/wallet-server/src/router/transport/fetch/routes/ecdsaOperationStepUpFactor.d.ts +37 -0
  366. package/dist/types/wallet-server/src/storage/d1Sql.d.ts +0 -1
  367. package/migrations/d1-signer/0040_namespace_home_challenges.sql +16 -0
  368. package/migrations/d1-signer/0041_step_up_admission_expiry.sql +28 -0
  369. package/migrations/d1-signer/0042_deployment_resource_challenges.sql +4 -0
  370. package/migrations/d1-signer/0043_google_registration_candidate_claim.sql +2 -0
  371. package/migrations/d1-signer/0044_linked_device_bootstrap_imports.sql +6 -0
  372. package/migrations/d1-signer/0045_wallet_owned_capability_receipts.sql +29 -0
  373. package/migrations/d1-signer/0046_wallet_owned_signing_abuse.sql +41 -0
  374. package/migrations/d1-signer/0047_remove_unused_near_public_keys.sql +2 -0
  375. package/migrations/d1-signer/0048_operation_owner_scope.sql +45 -0
  376. package/package.json +2 -3
  377. package/src/README.md +11 -3
  378. package/dist/esm/core/AuthService.js +0 -2
  379. package/dist/esm/core/NearPublicKeyStore.js +0 -200
  380. package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +0 -397
  381. package/dist/esm/core/ThresholdService/stores/KeyStore.js +0 -140
  382. package/dist/esm/core/ThresholdService/stores/SessionStore.js +0 -361
  383. package/dist/esm/core/ThresholdService/stores/StoreConfig.js +0 -13
  384. package/dist/esm/core/ThresholdService/stores/exportReplayGuard.js +0 -7
  385. package/dist/esm/core/authService/AuthService.js +0 -594
  386. package/dist/esm/core/authService/bytes.js +0 -19
  387. package/dist/esm/core/authService/configValues.js +0 -15
  388. package/dist/esm/core/authService/emailOtpChallengeOperations.js +0 -123
  389. package/dist/esm/core/authService/emailOtpChallengeProof.js +0 -183
  390. package/dist/esm/core/authService/emailOtpChallengeVerification.js +0 -264
  391. package/dist/esm/core/authService/emailOtpChallenges.js +0 -225
  392. package/dist/esm/core/authService/emailOtpDelivery.js +0 -134
  393. package/dist/esm/core/authService/emailOtpGrant.js +0 -43
  394. package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +0 -144
  395. package/dist/esm/core/authService/emailOtpUnlock.js +0 -174
  396. package/dist/esm/core/authService/googleEmailOtpOperations.js +0 -141
  397. package/dist/esm/core/authService/googleEmailOtpRegistration.js +0 -587
  398. package/dist/esm/core/authService/identity.js +0 -42
  399. package/dist/esm/core/authService/identityOperations.js +0 -32
  400. package/dist/esm/core/authService/nearAccountOperations.js +0 -229
  401. package/dist/esm/core/authService/nearPublicKeyMetadata.js +0 -108
  402. package/dist/esm/core/authService/oidcVerification.js +0 -249
  403. package/dist/esm/core/authService/registrationThresholdHelpers.js +0 -30
  404. package/dist/esm/core/authService/runtime.js +0 -45
  405. package/dist/esm/core/authService/storeRegistry.js +0 -102
  406. package/dist/esm/core/authService/thresholdStoreSummary.js +0 -32
  407. package/dist/esm/core/authService/webauthnAuthority.js +0 -17
  408. package/dist/esm/core/defaultConfigsServer.js +0 -9
  409. package/dist/esm/core/hostedAccountIds.js +0 -225
  410. package/dist/esm/core/routerAbSigning/createRouterAbSigningRuntimes.js +0 -84
  411. package/dist/esm/core/signingLanes/LaneAggregateRevocationApplicationService.js +0 -86
  412. package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +0 -324
  413. package/dist/esm/core/signingLanes/LaneEnrollmentRevocation.js +0 -173
  414. package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +0 -198
  415. package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +0 -73
  416. package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +0 -68
  417. package/dist/esm/core/signingLanes/signingWorkerLaneMaterialIdentity.js +0 -0
  418. package/dist/esm/core/storeBackends.js +0 -208
  419. package/dist/esm/core/utils.js +0 -14
  420. package/dist/esm/core/webAuthnStoreBackends.js +0 -198
  421. package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +0 -49
  422. package/dist/esm/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.js +0 -10
  423. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.js +0 -22
  424. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -166
  425. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.js +0 -38
  426. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.js +0 -20
  427. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +0 -1459
  428. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLockStore.js +0 -114
  429. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.js +0 -16
  430. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +0 -171
  431. package/dist/esm/router/cloudflare/d1/signingLanes/index.js +0 -10
  432. package/dist/esm/router/cloudflare/durableObjects/thresholdStore.js +0 -397
  433. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +0 -597
  434. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +0 -273
  435. package/dist/esm/router/cloudflare/signingLanes/index.js +0 -4
  436. package/dist/esm/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.js +0 -32
  437. package/dist/esm/router/transport/fetch/routes/nearPublicKeys.js +0 -27
  438. package/dist/esm/shared-ts/src/signing-lanes/rotation.js +0 -8
  439. package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +0 -358
  440. package/dist/esm/shared-ts/src/signing-lanes/rotationLifecycle.js +0 -313
  441. package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +0 -532
  442. package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +0 -323
  443. package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +0 -59
  444. package/dist/types/shared-ts/src/signing-lanes/participantDigest.typecheck.d.ts +0 -2
  445. package/dist/types/shared-ts/src/signing-lanes/rotation.typecheck.d.ts +0 -2
  446. package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +0 -13
  447. package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +0 -78
  448. package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +0 -27
  449. package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +0 -6
  450. package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +0 -20
  451. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeAttempt.d.ts +0 -59
  452. package/dist/types/wallet-server/src/core/AuthService.d.ts +0 -3
  453. package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +0 -48
  454. package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +0 -21
  455. package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +0 -40
  456. package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +0 -98
  457. package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +0 -4
  458. package/dist/types/wallet-server/src/core/ThresholdService/stores/ThresholdStoreConfig.typecheck.d.ts +0 -2
  459. package/dist/types/wallet-server/src/core/ThresholdService/stores/exportReplayGuard.d.ts +0 -3
  460. package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -490
  461. package/dist/types/wallet-server/src/core/authService/bytes.d.ts +0 -3
  462. package/dist/types/wallet-server/src/core/authService/configValues.d.ts +0 -7
  463. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +0 -109
  464. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +0 -169
  465. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +0 -47
  466. package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +0 -86
  467. package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +0 -66
  468. package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +0 -43
  469. package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +0 -49
  470. package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +0 -64
  471. package/dist/types/wallet-server/src/core/authService/googleEmailOtpOperations.d.ts +0 -126
  472. package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +0 -169
  473. package/dist/types/wallet-server/src/core/authService/identity.d.ts +0 -25
  474. package/dist/types/wallet-server/src/core/authService/identityOperations.d.ts +0 -19
  475. package/dist/types/wallet-server/src/core/authService/nearAccountOperations.d.ts +0 -55
  476. package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +0 -44
  477. package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +0 -66
  478. package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -11
  479. package/dist/types/wallet-server/src/core/authService/runtime.d.ts +0 -20
  480. package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -53
  481. package/dist/types/wallet-server/src/core/authService/thresholdStoreSummary.d.ts +0 -3
  482. package/dist/types/wallet-server/src/core/authService/webauthnAuthority.d.ts +0 -5
  483. package/dist/types/wallet-server/src/core/defaultConfigsServer.d.ts +0 -5
  484. package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -16
  485. package/dist/types/wallet-server/src/core/routerAbSigning/createRouterAbSigningRuntimes.d.ts +0 -16
  486. package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +0 -36
  487. package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +0 -62
  488. package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentActivation.d.ts +0 -13
  489. package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentRevocation.d.ts +0 -24
  490. package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleApplicationService.d.ts +0 -141
  491. package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +0 -228
  492. package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +0 -58
  493. package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +0 -30
  494. package/dist/types/wallet-server/src/core/signingLanes/signingWorkerLaneMaterialIdentity.d.ts +0 -4
  495. package/dist/types/wallet-server/src/core/storeBackends.d.ts +0 -83
  496. package/dist/types/wallet-server/src/core/utils.d.ts +0 -3
  497. package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +0 -96
  498. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +0 -29
  499. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.d.ts +0 -4
  500. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.d.ts +0 -4
  501. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -24
  502. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.d.ts +0 -20
  503. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.d.ts +0 -13
  504. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.d.ts +0 -51
  505. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLockStore.d.ts +0 -28
  506. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.d.ts +0 -5
  507. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneRecords.d.ts +0 -107
  508. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/index.d.ts +0 -10
  509. package/dist/types/wallet-server/src/router/cloudflare/durableObjects/thresholdStore.d.ts +0 -18
  510. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.d.ts +0 -217
  511. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.d.ts +0 -73
  512. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/index.d.ts +0 -4
  513. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.d.ts +0 -6
  514. package/dist/types/wallet-server/src/router/transport/fetch/routes/nearPublicKeys.d.ts +0 -3
  515. /package/dist/esm/{core/signingLanes/LaneEffectJournalStore.js → authorization/recoveryRouting.js} +0 -0
  516. /package/dist/esm/{core/signingLanes/LaneLifecycleStore.js → authorization/sessionRouting.js} +0 -0
@@ -1,126 +0,0 @@
1
- import { type GoogleProviderSubject, type VerifiedGoogleEmail } from '../../../../shared-ts/src/utils/domainIds';
2
- import type { AuthServiceConfig, ThresholdRuntimePolicyScope } from '../types';
3
- import type { IdentityStore } from '../IdentityStore';
4
- import type { EmailOtpRegistrationAttemptStore, EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
5
- import { type GoogleEmailOtpResolutionResult, type GoogleEmailOtpRegistrationRateLimitConsumer, type GoogleEmailOtpRegistrationRateLimitResult } from './googleEmailOtpRegistration';
6
- type GoogleEmailOtpStores = {
7
- readonly identityStore: IdentityStore;
8
- readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
9
- readonly walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
10
- };
11
- type GoogleEmailOtpEnvironment = {
12
- readonly config: AuthServiceConfig;
13
- readonly readConfigValue: (name: string) => string;
14
- readonly isProductionEnvironment: boolean;
15
- };
16
- export type GoogleEmailOtpOperationsInput = GoogleEmailOtpStores & GoogleEmailOtpEnvironment & {
17
- readonly consumeRateLimit: GoogleEmailOtpRegistrationRateLimitConsumer;
18
- };
19
- export declare function resolveOidcWalletIdWithGoogleEmailOtp(input: {
20
- readonly deps: GoogleEmailOtpOperationsInput;
21
- readonly request: {
22
- providerSubject?: string;
23
- sub?: string;
24
- email?: string;
25
- accountMode?: unknown;
26
- ownerProofBindingDigest?: string;
27
- runtimePolicyScope?: ThresholdRuntimePolicyScope;
28
- restartRegistrationOffer?: unknown;
29
- };
30
- }): Promise<string>;
31
- export declare function consumeGoogleEmailOtpRegistrationAttemptRateLimitForAuthService(input: {
32
- readonly deps: GoogleEmailOtpOperationsInput;
33
- readonly request: {
34
- providerSubject?: unknown;
35
- email?: unknown;
36
- accountMode?: unknown;
37
- runtimePolicyScope?: ThresholdRuntimePolicyScope;
38
- clientIp?: string;
39
- providerUserId?: string;
40
- restartRegistrationOffer?: unknown;
41
- };
42
- }): Promise<GoogleEmailOtpRegistrationRateLimitResult>;
43
- export declare function resolveGoogleEmailOtpSessionForAuthService(input: {
44
- readonly deps: GoogleEmailOtpOperationsInput;
45
- readonly request: {
46
- providerSubject?: string | GoogleProviderSubject;
47
- sub?: string;
48
- email?: string | VerifiedGoogleEmail;
49
- accountMode?: unknown;
50
- ownerProofBindingDigest?: string;
51
- runtimePolicyScope?: ThresholdRuntimePolicyScope;
52
- restartRegistrationOffer?: unknown;
53
- };
54
- }): Promise<GoogleEmailOtpResolutionResult>;
55
- export declare function completeGoogleEmailOtpRegistrationAttemptForAuthService(input: {
56
- readonly deps: GoogleEmailOtpOperationsInput;
57
- readonly request: {
58
- registrationAttemptId?: unknown;
59
- walletId?: unknown;
60
- };
61
- }): Promise<{
62
- ok: true;
63
- } | {
64
- ok: false;
65
- code: string;
66
- message: string;
67
- }>;
68
- export declare function validateGoogleEmailOtpRegistrationCandidateWalletForAuthService(input: {
69
- readonly deps: GoogleEmailOtpOperationsInput;
70
- readonly request: {
71
- registrationAttemptId: string;
72
- walletId: string;
73
- ownerProofBindingDigest: string;
74
- providerSubject: string;
75
- };
76
- }): Promise<{
77
- ok: true;
78
- } | {
79
- ok: false;
80
- code: string;
81
- message: string;
82
- }>;
83
- export declare function recordGoogleEmailOtpRegistrationAttemptPublicKeyForAuthService(input: {
84
- readonly deps: GoogleEmailOtpOperationsInput;
85
- readonly request: {
86
- registrationAttemptId?: unknown;
87
- walletId?: unknown;
88
- finalizedPublicKey?: unknown;
89
- };
90
- }): Promise<{
91
- ok: true;
92
- } | {
93
- ok: false;
94
- code: string;
95
- message: string;
96
- }>;
97
- export declare function failGoogleEmailOtpRegistrationAttemptForAuthService(input: {
98
- readonly deps: GoogleEmailOtpOperationsInput;
99
- readonly request: {
100
- registrationAttemptId?: unknown;
101
- walletId?: unknown;
102
- failureCode?: unknown;
103
- };
104
- }): Promise<void>;
105
- export declare function cleanupGoogleEmailOtpDevRegistrationStateForAuthService(input: {
106
- readonly deps: GoogleEmailOtpOperationsInput;
107
- readonly request: {
108
- providerSubject?: unknown;
109
- walletId?: unknown;
110
- orgId?: unknown;
111
- nowMs?: unknown;
112
- };
113
- }): Promise<{
114
- ok: true;
115
- providerSubject: string;
116
- expiredRegistrationAttemptsDeleted: number;
117
- linkedWalletId?: string;
118
- orphanedWalletMappingRemoved: boolean;
119
- orphanedWalletMappingSkippedReason?: 'no_linked_wallet' | 'wallet_id_mismatch' | 'not_relayer_subaccount' | 'active_email_otp_enrollment' | 'mismatched_email_otp_enrollment';
120
- } | {
121
- ok: false;
122
- code: string;
123
- message: string;
124
- }>;
125
- export {};
126
- //# sourceMappingURL=googleEmailOtpOperations.d.ts.map
@@ -1,169 +0,0 @@
1
- import type { ThresholdRuntimePolicyScope } from '../types';
2
- import type { EmailOtpRegistrationAttemptStore, EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
3
- import type { IdentityStore } from '../IdentityStore';
4
- export type GoogleEmailOtpResolutionMode = 'existing_wallet' | 'register_started' | 'wallet_id_collision' | 'registration_incomplete' | 'stale_identity_mapping';
5
- export type GoogleEmailOtpRegistrationOfferCandidate = {
6
- candidateId: string;
7
- walletId: string;
8
- };
9
- export type GoogleEmailOtpRegistrationOffer = {
10
- offerId: string;
11
- selectedCandidateId: string;
12
- candidates: readonly [
13
- GoogleEmailOtpRegistrationOfferCandidate,
14
- ...GoogleEmailOtpRegistrationOfferCandidate[]
15
- ];
16
- };
17
- export type GoogleEmailOtpResolutionResult = {
18
- ok: true;
19
- mode: 'existing_wallet';
20
- walletId: string;
21
- providerSubject: string;
22
- email: string;
23
- hasEmailOtpEnrollment: true;
24
- } | {
25
- ok: true;
26
- mode: 'register_started';
27
- walletId: string;
28
- providerSubject: string;
29
- email: string;
30
- registrationAttemptId: string;
31
- expiresAtMs: number;
32
- offer: GoogleEmailOtpRegistrationOffer;
33
- } | {
34
- ok: false;
35
- mode: 'wallet_id_collision' | 'registration_incomplete' | 'stale_identity_mapping';
36
- code: 'wallet_id_collision' | 'registration_incomplete' | 'stale_identity_mapping';
37
- walletId?: string;
38
- providerSubject: string;
39
- email?: string;
40
- message: string;
41
- };
42
- type GoogleEmailOtpRegistrationRateLimitRequest = {
43
- providerSubject?: unknown;
44
- email?: unknown;
45
- accountMode?: unknown;
46
- runtimePolicyScope?: ThresholdRuntimePolicyScope;
47
- clientIp?: string;
48
- providerUserId?: string;
49
- restartRegistrationOffer?: unknown;
50
- };
51
- export type GoogleEmailOtpRegistrationRateLimitResult = {
52
- ok: true;
53
- } | {
54
- ok: false;
55
- code: 'invalid_body' | 'rate_limited';
56
- message: string;
57
- retryAfterMs?: number;
58
- resetAtMs?: number;
59
- };
60
- export type GoogleEmailOtpRegistrationRateLimitConsumer = (input: {
61
- scope: 'googleRegistrationAttempt';
62
- action: 'google_email_otp_registration_create' | 'google_email_otp_registration_offer_restart';
63
- userId?: string;
64
- providerSubject: string;
65
- orgId: string;
66
- clientIp?: string;
67
- }) => Promise<GoogleEmailOtpRegistrationRateLimitResult>;
68
- type GoogleEmailOtpSessionResolveRequest = {
69
- providerSubject?: string;
70
- sub?: string;
71
- email?: string;
72
- accountMode?: unknown;
73
- ownerProofBindingDigest?: string;
74
- runtimePolicyScope?: ThresholdRuntimePolicyScope;
75
- restartRegistrationOffer?: unknown;
76
- };
77
- type GoogleEmailOtpHostedWalletDeriver = (input: {
78
- providerSubject: string;
79
- sub?: string;
80
- email?: string;
81
- authProvider: string;
82
- walletIdDerivationNonce?: string;
83
- collisionCounter?: number;
84
- runtimePolicyScope?: ThresholdRuntimePolicyScope;
85
- }) => Promise<string>;
86
- type GoogleEmailOtpHostedWalletPredicate = (walletId: string) => boolean;
87
- export declare function consumeGoogleEmailOtpRegistrationAttemptRateLimitWithDeps(input: {
88
- readonly request: GoogleEmailOtpRegistrationRateLimitRequest;
89
- readonly consumeRateLimit: GoogleEmailOtpRegistrationRateLimitConsumer;
90
- }): Promise<GoogleEmailOtpRegistrationRateLimitResult>;
91
- export declare function resolveGoogleEmailOtpSessionWithDeps(input: {
92
- readonly request: GoogleEmailOtpSessionResolveRequest;
93
- readonly identityStore: IdentityStore;
94
- readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
95
- readonly walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
96
- readonly deriveHostedWalletId: GoogleEmailOtpHostedWalletDeriver;
97
- readonly isHostedHmacReadableWalletId: GoogleEmailOtpHostedWalletPredicate;
98
- }): Promise<GoogleEmailOtpResolutionResult>;
99
- export declare function completeGoogleEmailOtpRegistrationAttemptWithStore(input: {
100
- readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
101
- readonly identityStore: IdentityStore;
102
- readonly registrationAttemptId?: unknown;
103
- readonly walletId?: unknown;
104
- readonly nowMs: number;
105
- }): Promise<{
106
- ok: true;
107
- } | {
108
- ok: false;
109
- code: string;
110
- message: string;
111
- }>;
112
- export declare function validateGoogleEmailOtpRegistrationCandidateWalletWithStore(input: {
113
- readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
114
- readonly registrationAttemptId: string;
115
- readonly walletId: string;
116
- readonly ownerProofBindingDigest: string;
117
- readonly providerSubject: string;
118
- readonly nowMs: number;
119
- }): Promise<{
120
- ok: true;
121
- } | {
122
- ok: false;
123
- code: string;
124
- message: string;
125
- }>;
126
- export declare function recordGoogleEmailOtpRegistrationAttemptPublicKeyWithStore(input: {
127
- readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
128
- readonly registrationAttemptId?: unknown;
129
- readonly walletId?: unknown;
130
- readonly finalizedPublicKey?: unknown;
131
- readonly nowMs: number;
132
- }): Promise<{
133
- ok: true;
134
- } | {
135
- ok: false;
136
- code: string;
137
- message: string;
138
- }>;
139
- export declare function failGoogleEmailOtpRegistrationAttemptWithStore(input: {
140
- readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
141
- readonly registrationAttemptId?: unknown;
142
- readonly walletId?: unknown;
143
- readonly failureCode?: unknown;
144
- readonly nowMs: number;
145
- }): Promise<void>;
146
- export declare function cleanupGoogleEmailOtpDevRegistrationStateWithStores(input: {
147
- readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
148
- readonly identityStore: IdentityStore;
149
- readonly walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
150
- readonly isProductionEnvironment: boolean;
151
- readonly isHostedHmacReadableWalletId: GoogleEmailOtpHostedWalletPredicate;
152
- readonly providerSubject?: unknown;
153
- readonly walletId?: unknown;
154
- readonly orgId?: unknown;
155
- readonly nowMs?: unknown;
156
- }): Promise<{
157
- ok: true;
158
- providerSubject: string;
159
- expiredRegistrationAttemptsDeleted: number;
160
- linkedWalletId?: string;
161
- orphanedWalletMappingRemoved: boolean;
162
- orphanedWalletMappingSkippedReason?: 'no_linked_wallet' | 'wallet_id_mismatch' | 'not_relayer_subaccount' | 'active_email_otp_enrollment' | 'mismatched_email_otp_enrollment';
163
- } | {
164
- ok: false;
165
- code: string;
166
- message: string;
167
- }>;
168
- export {};
169
- //# sourceMappingURL=googleEmailOtpRegistration.d.ts.map
@@ -1,25 +0,0 @@
1
- import type { IdentityStore, LinkIdentityResult, UnlinkIdentityResult } from '../IdentityStore';
2
- export type ListIdentitiesResult = {
3
- ok: true;
4
- subjects: string[];
5
- } | {
6
- ok: false;
7
- code: 'invalid_args' | 'internal';
8
- message: string;
9
- };
10
- export declare function listIdentitiesWithStore(input: {
11
- readonly store: IdentityStore;
12
- readonly userId: string;
13
- }): Promise<ListIdentitiesResult>;
14
- export declare function linkIdentityWithStore(input: {
15
- readonly store: IdentityStore;
16
- readonly userId: string;
17
- readonly subject: string;
18
- readonly allowMoveIfSoleIdentity: boolean;
19
- }): Promise<LinkIdentityResult>;
20
- export declare function unlinkIdentityWithStore(input: {
21
- readonly store: IdentityStore;
22
- readonly userId: string;
23
- readonly subject: string;
24
- }): Promise<UnlinkIdentityResult>;
25
- //# sourceMappingURL=identity.d.ts.map
@@ -1,19 +0,0 @@
1
- import type { IdentityStore, LinkIdentityResult, UnlinkIdentityResult } from '../IdentityStore';
2
- import { type ListIdentitiesResult } from './identity';
3
- export declare class IdentityOperations {
4
- private readonly store;
5
- constructor(store: IdentityStore);
6
- listIdentities(input: {
7
- userId: string;
8
- }): Promise<ListIdentitiesResult>;
9
- linkIdentity(input: {
10
- userId: string;
11
- subject: string;
12
- allowMoveIfSoleIdentity?: boolean;
13
- }): Promise<LinkIdentityResult>;
14
- unlinkIdentity(input: {
15
- userId: string;
16
- subject: string;
17
- }): Promise<UnlinkIdentityResult>;
18
- }
19
- //# sourceMappingURL=identityOperations.d.ts.map
@@ -1,55 +0,0 @@
1
- import type { FinalExecutionOutcome } from '@near-js/types';
2
- import { type NearTransactionActionArgsWasm } from '../../../../shared-ts/src/near/actions';
3
- import type { NormalizedLogger } from '../logger';
4
- import type { MinimalNearClient, SignedTransaction } from '../rpcClients/near/NearClient';
5
- import { type AccountCreationRequest, type AccountCreationResult, type AuthServiceConfig, type FundImplicitNearAccountRequest, type FundImplicitNearAccountResult } from '../types';
6
- import { type DelegateActionPolicy, type ExecuteSignedDelegateResult, type RelayedSignedDelegate } from '../../delegateAction';
7
- type NearAccountOperationsInput = {
8
- readonly config: AuthServiceConfig;
9
- readonly nearClient: MinimalNearClient;
10
- readonly logger: NormalizedLogger;
11
- readonly ensureSignerAndRelayerAccount: () => Promise<void>;
12
- readonly ensureSignerWasm: () => Promise<void>;
13
- readonly getRelayerPublicKey: () => string;
14
- };
15
- export declare class NearAccountOperations {
16
- private readonly input;
17
- private transactionQueue;
18
- private queueStats;
19
- constructor(input: NearAccountOperationsInput);
20
- viewAccessKeyList(accountId: string): Promise<import("@near-js/types").AccessKeyList>;
21
- dispatchNearSignedTransactionBorsh(input: {
22
- signedTransactionBorshB64u: string;
23
- }): Promise<{
24
- rpcResult: FinalExecutionOutcome;
25
- }>;
26
- txStatus(txHash: string, senderAccountId: string): Promise<FinalExecutionOutcome>;
27
- createAccount(request: AccountCreationRequest): Promise<AccountCreationResult>;
28
- fundImplicitNearAccount(request: FundImplicitNearAccountRequest): Promise<FundImplicitNearAccountResult>;
29
- checkAccountExists(accountId: string): Promise<boolean>;
30
- executeSignedDelegate(input: {
31
- hash: string;
32
- signedDelegate: RelayedSignedDelegate;
33
- policy?: DelegateActionPolicy;
34
- }): Promise<ExecuteSignedDelegateResult>;
35
- fetchTxContext(accountId: string, publicKey: string): Promise<{
36
- nextNonce: string;
37
- blockHash: string;
38
- }>;
39
- signGasRelayerNearTransaction(input: {
40
- receiverId: string;
41
- nonce: string;
42
- blockHash: string;
43
- actions: NearTransactionActionArgsWasm[];
44
- }): Promise<SignedTransaction>;
45
- queueTransaction<T>(operation: () => Promise<T>, description: string): Promise<T>;
46
- private createAccountQueueTask;
47
- private createAccountFromQueue;
48
- private createFundImplicitNearAccountQueueTask;
49
- private fundImplicitNearAccountFromQueue;
50
- private verifyAccountAccessKeysPresent;
51
- private scheduleAccountAccessKeyVisibilityAudit;
52
- private runAccountAccessKeyVisibilityAudit;
53
- }
54
- export {};
55
- //# sourceMappingURL=nearAccountOperations.d.ts.map
@@ -1,44 +0,0 @@
1
- import type { NormalizedLogger } from '../logger';
2
- import type { NearPublicKeyAuthBinding, NearPublicKeyKind, NearPublicKeyStore } from '../NearPublicKeyStore';
3
- export type RecordNearPublicKeyMetadataResult = {
4
- ok: true;
5
- } | {
6
- ok: false;
7
- code: string;
8
- message: string;
9
- };
10
- type NearPublicKeyListEntry = {
11
- publicKey: string;
12
- kind: NearPublicKeyKind;
13
- signerSlot?: number;
14
- createdAtMs: number;
15
- updatedAtMs: number;
16
- authBinding?: NearPublicKeyAuthBinding;
17
- };
18
- export type ListNearPublicKeysResult = {
19
- ok: true;
20
- keys: NearPublicKeyListEntry[];
21
- } | {
22
- ok: false;
23
- code: string;
24
- message: string;
25
- };
26
- export declare function recordNearPublicKeyMetadataWithStore(input: {
27
- store: NearPublicKeyStore;
28
- logger: NormalizedLogger;
29
- userId?: unknown;
30
- publicKey?: unknown;
31
- kind: NearPublicKeyKind;
32
- signerSlot?: unknown;
33
- credentialIdB64u?: unknown;
34
- rpId?: unknown;
35
- addedTxHash?: unknown;
36
- removedAtMs?: unknown;
37
- source?: string;
38
- }): Promise<RecordNearPublicKeyMetadataResult>;
39
- export declare function listNearPublicKeysForUserWithStore(input: {
40
- store: NearPublicKeyStore;
41
- userId: string;
42
- }): Promise<ListNearPublicKeysResult>;
43
- export {};
44
- //# sourceMappingURL=nearPublicKeyMetadata.d.ts.map
@@ -1,66 +0,0 @@
1
- import type { GoogleOidcConfig } from '../types';
2
- import type { IdentityStore } from '../IdentityStore';
3
- type JwksCacheValue = {
4
- keysByKid: Map<string, JsonWebKey>;
5
- expiresAtMs: number;
6
- };
7
- type GoogleJwksState = {
8
- cache: JwksCacheValue | null;
9
- fetchPromise: Promise<JwksCacheValue> | null;
10
- };
11
- type GoogleLoginVerificationResult = {
12
- ok: true;
13
- verified: true;
14
- providerSubject: string;
15
- sub: string;
16
- email?: string;
17
- name?: string;
18
- given_name?: string;
19
- family_name?: string;
20
- emailVerified?: boolean;
21
- hostedDomain?: string;
22
- } | {
23
- ok: false;
24
- verified: false;
25
- code: string;
26
- message: string;
27
- };
28
- export type GoogleLoginFacadeResult = {
29
- ok: true;
30
- verified: true;
31
- userId: string;
32
- providerSubject: string;
33
- sub: string;
34
- email?: string;
35
- name?: string;
36
- given_name?: string;
37
- family_name?: string;
38
- emailVerified?: boolean;
39
- hostedDomain?: string;
40
- } | {
41
- ok: false;
42
- verified: false;
43
- code: string;
44
- message: string;
45
- };
46
- export declare function createGoogleJwksState(): GoogleJwksState;
47
- export declare function getGoogleJwks(state: GoogleJwksState): Promise<JwksCacheValue>;
48
- export declare function verifyGoogleIdToken(input: {
49
- request: {
50
- idToken?: unknown;
51
- id_token?: unknown;
52
- };
53
- config?: GoogleOidcConfig;
54
- jwksState: GoogleJwksState;
55
- }): Promise<GoogleLoginVerificationResult>;
56
- export declare function verifyGoogleLoginWithIdentityStore(input: {
57
- request: {
58
- idToken?: unknown;
59
- id_token?: unknown;
60
- };
61
- config?: GoogleOidcConfig;
62
- jwksState: GoogleJwksState;
63
- identityStore: IdentityStore;
64
- }): Promise<GoogleLoginFacadeResult>;
65
- export {};
66
- //# sourceMappingURL=oidcVerification.d.ts.map
@@ -1,11 +0,0 @@
1
- import { type ActionArgsWasm } from '../../../../shared-ts/src/near/actions';
2
- export declare function buildFullAccessAddKeyAction(publicKey: string): ActionArgsWasm;
3
- export declare function normalizeBootstrapPublicKeys(args: {
4
- publicKey: string;
5
- recoveryPublicKey?: string;
6
- }): {
7
- publicKey: string;
8
- recoveryPublicKey?: string;
9
- expectedPublicKeys: string[];
10
- };
11
- //# sourceMappingURL=registrationThresholdHelpers.d.ts.map
@@ -1,20 +0,0 @@
1
- import type { NormalizedLogger } from '../logger';
2
- import type { SignerWasmModuleSupplier } from '../types';
3
- import { type SignerWasmRuntimeState } from './wasm';
4
- export type AuthServiceRuntimeState = SignerWasmRuntimeState & {
5
- readonly isInitialized: boolean;
6
- readonly relayerPublicKey: string;
7
- };
8
- export declare function createInitialAuthServiceRuntimeState(): AuthServiceRuntimeState;
9
- export declare function ensureAuthServiceSignerWasmReady(input: {
10
- readonly state: AuthServiceRuntimeState;
11
- readonly signerWasmOverride?: SignerWasmModuleSupplier;
12
- readonly logger: NormalizedLogger;
13
- }): Promise<AuthServiceRuntimeState>;
14
- export declare function ensureAuthServiceRuntimeReady(input: {
15
- readonly state: AuthServiceRuntimeState;
16
- readonly relayerPrivateKey: string;
17
- readonly signerWasmOverride?: SignerWasmModuleSupplier;
18
- readonly logger: NormalizedLogger;
19
- }): Promise<AuthServiceRuntimeState>;
20
- //# sourceMappingURL=runtime.d.ts.map
@@ -1,53 +0,0 @@
1
- import type { AuthServiceConfig } from '../types';
2
- import type { NormalizedLogger } from '../logger';
3
- import { type EmailOtpAuthStateStore, type EmailOtpChallengeStore, type EmailOtpGrantStore, type EmailOtpRegistrationAttemptStore, type EmailOtpUnlockChallengeStore, type EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
4
- import { type IdentityStore } from '../IdentityStore';
5
- import { type NearPublicKeyStore } from '../NearPublicKeyStore';
6
- import { type WalletAuthMethodStore } from '../WalletAuthMethodStore';
7
- import { type WalletStore } from '../WalletStore';
8
- import { type WebAuthnAuthenticatorStore } from '../WebAuthnAuthenticatorStore';
9
- import { type WebAuthnCredentialBindingStore } from '../WebAuthnCredentialBindingStore';
10
- import { type WebAuthnLoginChallengeStore } from '../WebAuthnLoginChallengeStore';
11
- import { type WebAuthnSyncChallengeStore } from '../WebAuthnSyncChallengeStore';
12
- import type { SigningSessionSealRateLimiter } from '../../threshold/session/signingSessionSeal';
13
- type AuthServiceStoreRegistryInput = {
14
- readonly config: AuthServiceConfig;
15
- readonly logger: NormalizedLogger;
16
- readonly isNode: () => boolean;
17
- };
18
- export declare class AuthServiceStoreRegistry {
19
- private readonly input;
20
- private webAuthnAuthenticatorStore;
21
- private webAuthnLoginChallengeStore;
22
- private webAuthnCredentialBindingStore;
23
- private webAuthnSyncChallengeStore;
24
- private emailOtpChallengeStore;
25
- private emailOtpGrantStore;
26
- private emailOtpWalletEnrollmentStore;
27
- private emailOtpAuthStateStore;
28
- private emailOtpUnlockChallengeStore;
29
- private emailOtpRegistrationAttemptStore;
30
- private emailOtpRateLimiter;
31
- private nearPublicKeyStore;
32
- private identityStore;
33
- private walletStore;
34
- private walletAuthMethodStore;
35
- constructor(input: AuthServiceStoreRegistryInput);
36
- getWebAuthnAuthenticatorStore(): WebAuthnAuthenticatorStore;
37
- getWebAuthnLoginChallengeStore(): WebAuthnLoginChallengeStore;
38
- getWebAuthnCredentialBindingStore(): WebAuthnCredentialBindingStore;
39
- getWebAuthnSyncChallengeStore(): WebAuthnSyncChallengeStore;
40
- getWalletStore(): WalletStore;
41
- getWalletAuthMethodStore(): WalletAuthMethodStore;
42
- getEmailOtpChallengeStore(): EmailOtpChallengeStore;
43
- getEmailOtpGrantStore(): EmailOtpGrantStore;
44
- getEmailOtpWalletEnrollmentStore(): EmailOtpWalletEnrollmentStore;
45
- getEmailOtpAuthStateStore(): EmailOtpAuthStateStore;
46
- getEmailOtpUnlockChallengeStore(): EmailOtpUnlockChallengeStore;
47
- getEmailOtpRegistrationAttemptStore(): EmailOtpRegistrationAttemptStore;
48
- getEmailOtpRateLimiter(): SigningSessionSealRateLimiter;
49
- getIdentityStore(): IdentityStore;
50
- getNearPublicKeyStore(): NearPublicKeyStore;
51
- }
52
- export {};
53
- //# sourceMappingURL=storeRegistry.d.ts.map
@@ -1,3 +0,0 @@
1
- import type { AuthServiceConfig } from '../types';
2
- export declare function summarizeThresholdStoreConfig(cfg: AuthServiceConfig['thresholdStore']): string;
3
- //# sourceMappingURL=thresholdStoreSummary.d.ts.map
@@ -1,5 +0,0 @@
1
- import { type WebAuthnRpId } from '../../../../shared-ts/src/utils/domainIds';
2
- import type { ThresholdEd25519AuthorityScope } from '../types';
3
- export declare function requireWebAuthnRpId(value: unknown, fieldName: string): WebAuthnRpId;
4
- export declare function passkeyThresholdEd25519AuthorityScope(rpId: WebAuthnRpId): ThresholdEd25519AuthorityScope;
5
- //# sourceMappingURL=webauthnAuthority.d.ts.map
@@ -1,5 +0,0 @@
1
- export declare const THRESHOLD_NODE_ROLE_COORDINATOR: "coordinator";
2
- export declare const THRESHOLD_NODE_ROLE_DEFAULT: "coordinator";
3
- export declare const THRESHOLD_DO_OBJECT_NAME_DEFAULT: "threshold-store";
4
- export declare const THRESHOLD_PREFIX_DEFAULT: "w3a";
5
- //# sourceMappingURL=defaultConfigsServer.d.ts.map
@@ -1,16 +0,0 @@
1
- export declare function isHostedHmacReadableRelayerWalletId(input: {
2
- readonly walletId: unknown;
3
- readonly relayerAccount: unknown;
4
- }): boolean;
5
- export declare function deriveHostedNearAccountId(input: {
6
- accountIdDerivationSecret: string;
7
- relayerAccount: string;
8
- projectId: string;
9
- envId: string;
10
- authProvider: string;
11
- providerSubject?: string;
12
- verifiedEmail?: string;
13
- walletIdDerivationNonce?: string;
14
- collisionCounter?: number;
15
- }): Promise<string>;
16
- //# sourceMappingURL=hostedAccountIds.d.ts.map
@@ -1,16 +0,0 @@
1
- import type { AuthService } from '../AuthService';
2
- import { type Logger } from '../logger';
3
- import type { ThresholdStoreConfigInput } from '../types';
4
- import { RouterAbEcdsaPresignRuntime } from './RouterAbEcdsaPresignRuntime';
5
- import { RouterAbNormalSigningRuntime } from './RouterAbNormalSigningRuntime';
6
- export type RouterAbSigningRuntimeBundle = {
7
- readonly normalSigning: RouterAbNormalSigningRuntime;
8
- readonly ecdsaPresign: RouterAbEcdsaPresignRuntime;
9
- };
10
- export declare function createRouterAbSigningRuntimes(input: {
11
- readonly authService: Pick<AuthService, 'getRelayerAccount'>;
12
- readonly thresholdStore?: ThresholdStoreConfigInput | null;
13
- readonly logger?: Logger | null;
14
- readonly isNode?: boolean;
15
- }): RouterAbSigningRuntimeBundle;
16
- //# sourceMappingURL=createRouterAbSigningRuntimes.d.ts.map