@seams/wallet-server 0.7.3 → 0.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/THIRD_PARTY_NOTICES.md +1 -9
- package/artifact-manifest.json +78 -33
- package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/router/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/router/index.js +2 -2
- package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
- package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
- package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
- package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +0 -2
- package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +77 -20
- package/dist/esm/authorization/lifecycleRouting.js +62 -0
- package/dist/esm/authorization/service.js +35 -12
- package/dist/esm/cloud-host.js +20 -22
- package/dist/esm/core/EmailOtpRecords.js +1 -217
- package/dist/esm/core/EmailOtpStores.js +0 -859
- package/dist/esm/core/IdentityStore.js +2 -339
- package/dist/esm/core/ThresholdService/config.js +1 -9
- package/dist/esm/core/ThresholdService/index.js +0 -4
- package/dist/esm/core/ThresholdService/kv.js +1 -66
- package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +1 -13
- package/dist/esm/core/ThresholdService/routerAbNormalSigningPolicy.js +1 -11
- package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +0 -541
- package/dist/esm/core/ThresholdService/validation.js +2 -346
- package/dist/esm/core/WalletAuthMethodStore.js +2 -123
- package/dist/esm/core/WalletStore.js +3 -209
- package/dist/esm/core/WebAuthnAuthenticatorStore.js +0 -202
- package/dist/esm/core/WebAuthnCredentialBindingStore.js +2 -182
- package/dist/esm/core/WebAuthnLoginChallengeStore.js +0 -52
- package/dist/esm/core/WebAuthnSyncChallengeStore.js +0 -54
- package/dist/esm/core/authService/emailOtpConfig.js +1 -195
- package/dist/esm/core/authService/emailOtpEnrollment.js +0 -110
- package/dist/esm/core/authService/emailOtpSeal.js +0 -63
- package/dist/esm/core/authService/nearTransactions.js +3 -98
- package/dist/esm/core/authService/rateLimits.js +0 -84
- package/dist/esm/core/authService/webauthn.js +2 -298
- package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -24
- package/dist/esm/core/authService/webauthnWalletBinding.js +0 -37
- package/dist/esm/core/config.js +1 -95
- package/dist/esm/core/d1EcdsaSignerRead.js +1 -1
- package/dist/esm/core/d1IdentityStore.js +1 -2
- package/dist/esm/core/d1TenantStore.js +1 -24
- package/dist/esm/core/d1WalletAuthMethodStore.js +2 -5
- package/dist/esm/core/d1WalletStore.js +2 -2
- package/dist/esm/core/deviceLinking/linkedDeviceBootstrap.js +13 -0
- package/dist/esm/core/deviceLinking/linkedDeviceSession.js +20 -14
- package/dist/esm/core/deviceLinking/requestProof.js +9 -6
- package/dist/esm/core/emailOtpD1Statements.js +107 -94
- package/dist/esm/core/keyMaterialBrands.js +2 -12
- package/dist/esm/core/nearKeys.js +0 -1
- package/dist/esm/core/nearRelayerAccountProvisioning.js +6 -9
- package/dist/esm/core/passkeyCredentialClaims.js +8 -0
- package/dist/esm/core/routerAbSigning/RouterAbEcdsaPresignRuntime.js +2 -6
- package/dist/esm/core/routerAbSigning/RouterAbNormalSigningRuntime.js +2 -30
- package/dist/esm/core/thresholdEcdsaChainTarget.js +1 -4
- package/dist/esm/hosted-wallet-gateway.js +66 -43
- package/dist/esm/index.js +6 -19
- package/dist/esm/localHostedWalletGatewayHandler.js +12 -0
- package/dist/esm/localRegistrationSetupAuthority.js +89 -0
- package/dist/esm/router/auth/authRequestValidation.js +8 -16
- package/dist/esm/router/auth/webAuthnCredentialCodecs.js +0 -1
- package/dist/esm/router/cloudflare/d1/auth/d1AuthorizationAssembly.js +87 -0
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthConfig.js +12 -2
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +32 -281
- package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +24 -22
- package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +8 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +12 -13
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEd25519ExportRootStore.js +6 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +12 -2
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +4 -4
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +1 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -9
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.js +2 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +89 -7
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +23 -14
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +9 -6
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +1 -7
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.js +19 -13
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +2 -2
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +44 -12
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +1 -49
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +19 -31
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.js +85 -0
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +0 -1
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityService.js +0 -48
- package/dist/esm/router/cloudflare/d1/near/d1SponsoredNearAccount.js +242 -0
- package/dist/esm/router/cloudflare/d1/oidc/d1OidcBoundary.js +0 -1
- package/dist/esm/router/cloudflare/d1/oidc/d1OidcVerificationService.js +2 -29
- package/dist/esm/router/cloudflare/d1/oidc/googleOidcToken.js +41 -0
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +5 -0
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +34 -0
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +9 -3
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +7 -13
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +25 -13
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +0 -1
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationSetupSupport.js +74 -0
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +7 -1
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +69 -238
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +12 -56
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.js +155 -0
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +1 -3
- package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +12 -6
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.js +68 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +7 -54
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +9 -8
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +2 -142
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +25 -4
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +4 -70
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +23 -7
- package/dist/esm/router/cloudflare/runtime/staticWalletConsoleBinding.js +1 -0
- package/dist/esm/router/cloudflare/runtime/walletConsoleOps.js +1 -0
- package/dist/esm/router/cloudflare/runtime/walletConsoleOpsClient.js +5 -0
- package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
- package/dist/esm/router/cloudflare/runtime/walletRuntimeOps.js +16 -4
- package/dist/esm/router/cloudflare-adaptor.js +1 -2
- package/dist/esm/router/cloudflare.js +1342 -1733
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +11 -8
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +3 -2
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +6 -6
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +6 -6
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +3 -0
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +8 -0
- package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +0 -1
- package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.js +2 -8
- package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -8
- package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +5 -19
- package/dist/esm/router/domains/signingOperations/walletExecutionAdmission.js +2 -3
- package/dist/esm/router/domains/walletRegistration/walletRegistrationReservation.js +70 -0
- package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +10 -11
- package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +2 -3
- package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +14 -0
- package/dist/esm/router/express.js +574 -479
- package/dist/esm/router/framework/http.js +2 -0
- package/dist/esm/router/framework/registrationSetupDispatch.js +14 -0
- package/dist/esm/router/framework/ror/normalize.js +0 -1
- package/dist/esm/router/framework/ror/options.js +0 -1
- package/dist/esm/router/framework/ror/provider.js +0 -1
- package/dist/esm/router/framework/ror/staticProvider.js +0 -1
- package/dist/esm/router/framework/routeDefinitions.js +1 -2
- package/dist/esm/router/framework/routerApiWebhooks.js +0 -1
- package/dist/esm/router/ror.js +0 -1
- package/dist/esm/router/transport/fetch/createFetchRouter.js +0 -2
- package/dist/esm/router/transport/fetch/routes/auth.js +2 -0
- package/dist/esm/router/transport/fetch/routes/deviceLinking.js +36 -147
- package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +3 -2
- package/dist/esm/router/transport/fetch/routes/deviceLinkingResponses.js +130 -0
- package/dist/esm/router/transport/fetch/routes/ecdsaOperationStepUpFactor.js +171 -0
- package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +1 -0
- package/dist/esm/router/transport/fetch/routes/syncAccount.js +7 -2
- package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +19 -115
- package/dist/esm/router/transport/fetch/routes/walletRegistration.js +3 -1
- package/dist/esm/shared-ts/src/authorization/walletSessionIssuance.js +0 -1
- package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +0 -2
- package/dist/esm/shared-ts/src/device-linking/contracts.js +16 -1
- package/dist/esm/shared-ts/src/device-linking/digests.js +1 -8
- package/dist/esm/shared-ts/src/near/actions.js +0 -1
- package/dist/esm/shared-ts/src/near/nearClient.js +0 -2
- package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -1
- package/dist/esm/shared-ts/src/signing-lanes/index.js +1 -6
- package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +1 -1
- package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +2 -81
- package/dist/esm/shared-ts/src/signing-lanes/participants.js +1 -219
- package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +0 -3
- package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +1 -2
- package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +0 -1
- package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +1 -22
- package/dist/esm/shared-ts/src/threshold/participants.js +0 -1
- package/dist/esm/shared-ts/src/threshold/signingRootScope.js +0 -1
- package/dist/esm/shared-ts/src/utils/addWalletAuthMethod.js +4 -13
- package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +1 -7
- package/dist/esm/shared-ts/src/utils/domainIds.js +1 -16
- package/dist/esm/shared-ts/src/utils/ecdsaCapabilityActivation.js +1 -11
- package/dist/esm/shared-ts/src/utils/ecdsaKeyFactsInventory.js +0 -1
- package/dist/esm/shared-ts/src/utils/errors.js +1 -19
- package/dist/esm/shared-ts/src/utils/near.js +1 -1
- package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +1 -1
- package/dist/esm/shared-ts/src/utils/registrationIds.js +1 -5
- package/dist/esm/shared-ts/src/utils/registrationIntent.js +0 -1
- package/dist/esm/shared-ts/src/utils/registrationSetupOperation.js +8 -0
- package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +1 -1
- package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +0 -1
- package/dist/esm/shared-ts/src/utils/validation.js +1 -5
- package/dist/esm/shared-ts/src/utils/walletAuthAuthority.js +0 -1
- package/dist/esm/shared-ts/src/utils/walletManagementProtocol.js +6 -0
- package/dist/esm/shared-ts/src/utils/wireSchema.js +2 -13
- package/dist/esm/shared-ts/src/wallet-recovery/backupAcknowledgement.js +6 -24
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +0 -1
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryKeyId.js +5 -6
- package/dist/esm/storage/d1Sql.js +1 -7
- package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +0 -1
- package/dist/esm/threshold/session/signingSessionSeal/guards/backends.js +1 -2
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyBackends.js +0 -1
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +0 -1
- package/dist/esm/threshold/session/signingSessionSeal/options.js +0 -1
- package/dist/esm/wasm/evm_crypto/pkg/evm_crypto_bg.wasm +0 -0
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +0 -611
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
- package/dist/esm/wasm/shamir3pass_runtime/pkg/shamir3pass_runtime_bg.wasm +0 -0
- package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +0 -4
- package/dist/types/shared-ts/src/device-linking/contracts.d.ts +1 -0
- package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +0 -11
- package/dist/types/shared-ts/src/signing-lanes/ids.d.ts +2 -7
- package/dist/types/shared-ts/src/signing-lanes/index.d.ts +0 -4
- package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +0 -1
- package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +0 -18
- package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +6 -35
- package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +6 -843
- package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +0 -10
- package/dist/types/shared-ts/src/threshold/participants.d.ts +1 -1
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +1 -133
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +4 -18
- package/dist/types/shared-ts/src/utils/domainIds.d.ts +0 -12
- package/dist/types/shared-ts/src/utils/errors.d.ts +0 -4
- package/dist/types/shared-ts/src/utils/near.d.ts +0 -20
- package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -2
- package/dist/types/shared-ts/src/utils/registrationSetupOperation.d.ts +3 -0
- package/dist/types/shared-ts/src/utils/validation.d.ts +1 -3
- package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +0 -1
- package/dist/types/shared-ts/src/utils/walletManagementProtocol.d.ts +3 -0
- package/dist/types/shared-ts/src/utils/wireSchema.d.ts +0 -2
- package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +0 -1
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +1 -10
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodes.d.ts +1 -3
- package/dist/types/shared-ts/src/wallet-recovery/recoveryKeyId.d.ts +5 -21
- package/dist/types/wallet-server/src/authorization/lifecycleRouting.d.ts +32 -0
- package/dist/types/wallet-server/src/authorization/lifecycleRouting.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/authorization/recoveryRouting.d.ts +22 -0
- package/dist/types/wallet-server/src/authorization/recoveryRouting.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/authorization/service.d.ts +8 -1
- package/dist/types/wallet-server/src/authorization/sessionRouting.d.ts +20 -0
- package/dist/types/wallet-server/src/authorization/sessionRouting.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/cloud-host.d.ts +31 -9
- package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +1 -22
- package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +1 -79
- package/dist/types/wallet-server/src/core/IdentityStore.d.ts +0 -10
- package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +0 -1
- package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -2
- package/dist/types/wallet-server/src/core/ThresholdService/index.d.ts +1 -3
- package/dist/types/wallet-server/src/core/ThresholdService/kv.d.ts +0 -7
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +0 -3
- package/dist/types/wallet-server/src/core/ThresholdService/routerAbNormalSigningPolicy.d.ts +0 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +7 -19
- package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +0 -34
- package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +1 -5
- package/dist/types/wallet-server/src/core/WalletStore.d.ts +0 -3
- package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +0 -20
- package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +1 -27
- package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +2 -16
- package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +22 -14
- package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +0 -24
- package/dist/types/wallet-server/src/core/authService/emailOtpEnrollment.d.ts +1 -70
- package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +0 -13
- package/dist/types/wallet-server/src/core/authService/githubOAuth.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +1 -39
- package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -17
- package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +0 -125
- package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +1 -1
- package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +0 -12
- package/dist/types/wallet-server/src/core/config.d.ts +0 -10
- package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +0 -2
- package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +0 -7
- package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +0 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceBootstrap.d.ts +19 -0
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +8 -6
- package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -5
- package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +10 -7
- package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +1 -5
- package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +0 -1
- package/dist/types/wallet-server/src/core/passkeyCredentialClaims.d.ts +9 -0
- package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbEcdsaPresignRuntime.d.ts +0 -2
- package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +0 -2
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +1 -92
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +4 -52
- package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +0 -1
- package/dist/types/wallet-server/src/core/types.d.ts +0 -299
- package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +15 -3
- package/dist/types/wallet-server/src/index.d.ts +8 -13
- package/dist/types/wallet-server/src/localRegistrationSetupAuthority.d.ts +13 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizationAssembly.d.ts +23 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +25 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +3 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +7 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.d.ts +1 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.d.ts +4 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +6 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +1 -13
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.d.ts +2 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +0 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +18 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +29 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -16
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.d.ts +7 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.d.ts +23 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityService.d.ts +0 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.d.ts +24 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/d1OidcVerificationService.d.ts +0 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/googleOidcToken.d.ts +4 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +9 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -11
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +3 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationSetupSupport.d.ts +51 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +30 -47
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +3 -30
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.d.ts +11 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.d.ts +27 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +1 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +2 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +0 -13
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +23 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/cloudflare.types.d.ts +0 -2
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOps.d.ts +1 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOpsClient.d.ts +2 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRuntimeOps.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +0 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +1 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +0 -2
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +0 -3
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +0 -17
- package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +1 -2
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +1 -0
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationReservation.d.ts +51 -0
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +2 -10
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +2 -2
- package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +14 -34
- package/dist/types/wallet-server/src/router/framework/googleLoginResolution.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/framework/registrationSetupDispatch.d.ts +13 -0
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +1 -1
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingResponses.d.ts +17 -0
- package/dist/types/wallet-server/src/router/transport/fetch/routes/ecdsaOperationStepUpFactor.d.ts +37 -0
- package/dist/types/wallet-server/src/storage/d1Sql.d.ts +0 -1
- package/migrations/d1-signer/0040_namespace_home_challenges.sql +16 -0
- package/migrations/d1-signer/0041_step_up_admission_expiry.sql +28 -0
- package/migrations/d1-signer/0042_deployment_resource_challenges.sql +4 -0
- package/migrations/d1-signer/0043_google_registration_candidate_claim.sql +2 -0
- package/migrations/d1-signer/0044_linked_device_bootstrap_imports.sql +6 -0
- package/migrations/d1-signer/0045_wallet_owned_capability_receipts.sql +29 -0
- package/migrations/d1-signer/0046_wallet_owned_signing_abuse.sql +41 -0
- package/migrations/d1-signer/0047_remove_unused_near_public_keys.sql +2 -0
- package/migrations/d1-signer/0048_operation_owner_scope.sql +45 -0
- package/package.json +2 -3
- package/src/README.md +11 -3
- package/dist/esm/core/AuthService.js +0 -2
- package/dist/esm/core/NearPublicKeyStore.js +0 -200
- package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +0 -397
- package/dist/esm/core/ThresholdService/stores/KeyStore.js +0 -140
- package/dist/esm/core/ThresholdService/stores/SessionStore.js +0 -361
- package/dist/esm/core/ThresholdService/stores/StoreConfig.js +0 -13
- package/dist/esm/core/ThresholdService/stores/exportReplayGuard.js +0 -7
- package/dist/esm/core/authService/AuthService.js +0 -594
- package/dist/esm/core/authService/bytes.js +0 -19
- package/dist/esm/core/authService/configValues.js +0 -15
- package/dist/esm/core/authService/emailOtpChallengeOperations.js +0 -123
- package/dist/esm/core/authService/emailOtpChallengeProof.js +0 -183
- package/dist/esm/core/authService/emailOtpChallengeVerification.js +0 -264
- package/dist/esm/core/authService/emailOtpChallenges.js +0 -225
- package/dist/esm/core/authService/emailOtpDelivery.js +0 -134
- package/dist/esm/core/authService/emailOtpGrant.js +0 -43
- package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +0 -144
- package/dist/esm/core/authService/emailOtpUnlock.js +0 -174
- package/dist/esm/core/authService/googleEmailOtpOperations.js +0 -141
- package/dist/esm/core/authService/googleEmailOtpRegistration.js +0 -587
- package/dist/esm/core/authService/identity.js +0 -42
- package/dist/esm/core/authService/identityOperations.js +0 -32
- package/dist/esm/core/authService/nearAccountOperations.js +0 -229
- package/dist/esm/core/authService/nearPublicKeyMetadata.js +0 -108
- package/dist/esm/core/authService/oidcVerification.js +0 -249
- package/dist/esm/core/authService/registrationThresholdHelpers.js +0 -30
- package/dist/esm/core/authService/runtime.js +0 -45
- package/dist/esm/core/authService/storeRegistry.js +0 -102
- package/dist/esm/core/authService/thresholdStoreSummary.js +0 -32
- package/dist/esm/core/authService/webauthnAuthority.js +0 -17
- package/dist/esm/core/defaultConfigsServer.js +0 -9
- package/dist/esm/core/hostedAccountIds.js +0 -225
- package/dist/esm/core/routerAbSigning/createRouterAbSigningRuntimes.js +0 -84
- package/dist/esm/core/signingLanes/LaneAggregateRevocationApplicationService.js +0 -86
- package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +0 -324
- package/dist/esm/core/signingLanes/LaneEnrollmentRevocation.js +0 -173
- package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +0 -198
- package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +0 -73
- package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +0 -68
- package/dist/esm/core/signingLanes/signingWorkerLaneMaterialIdentity.js +0 -0
- package/dist/esm/core/storeBackends.js +0 -208
- package/dist/esm/core/utils.js +0 -14
- package/dist/esm/core/webAuthnStoreBackends.js +0 -198
- package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +0 -49
- package/dist/esm/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.js +0 -10
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.js +0 -22
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -166
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.js +0 -38
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.js +0 -20
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +0 -1459
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLockStore.js +0 -114
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.js +0 -16
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +0 -171
- package/dist/esm/router/cloudflare/d1/signingLanes/index.js +0 -10
- package/dist/esm/router/cloudflare/durableObjects/thresholdStore.js +0 -397
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +0 -597
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +0 -273
- package/dist/esm/router/cloudflare/signingLanes/index.js +0 -4
- package/dist/esm/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.js +0 -32
- package/dist/esm/router/transport/fetch/routes/nearPublicKeys.js +0 -27
- package/dist/esm/shared-ts/src/signing-lanes/rotation.js +0 -8
- package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +0 -358
- package/dist/esm/shared-ts/src/signing-lanes/rotationLifecycle.js +0 -313
- package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +0 -532
- package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +0 -323
- package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +0 -59
- package/dist/types/shared-ts/src/signing-lanes/participantDigest.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/rotation.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +0 -13
- package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +0 -78
- package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +0 -27
- package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +0 -6
- package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +0 -20
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeAttempt.d.ts +0 -59
- package/dist/types/wallet-server/src/core/AuthService.d.ts +0 -3
- package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +0 -48
- package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +0 -21
- package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +0 -40
- package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +0 -98
- package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +0 -4
- package/dist/types/wallet-server/src/core/ThresholdService/stores/ThresholdStoreConfig.typecheck.d.ts +0 -2
- package/dist/types/wallet-server/src/core/ThresholdService/stores/exportReplayGuard.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -490
- package/dist/types/wallet-server/src/core/authService/bytes.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/configValues.d.ts +0 -7
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +0 -109
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +0 -169
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +0 -47
- package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +0 -86
- package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +0 -66
- package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +0 -43
- package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +0 -49
- package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +0 -64
- package/dist/types/wallet-server/src/core/authService/googleEmailOtpOperations.d.ts +0 -126
- package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +0 -169
- package/dist/types/wallet-server/src/core/authService/identity.d.ts +0 -25
- package/dist/types/wallet-server/src/core/authService/identityOperations.d.ts +0 -19
- package/dist/types/wallet-server/src/core/authService/nearAccountOperations.d.ts +0 -55
- package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +0 -44
- package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +0 -66
- package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -11
- package/dist/types/wallet-server/src/core/authService/runtime.d.ts +0 -20
- package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -53
- package/dist/types/wallet-server/src/core/authService/thresholdStoreSummary.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/webauthnAuthority.d.ts +0 -5
- package/dist/types/wallet-server/src/core/defaultConfigsServer.d.ts +0 -5
- package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -16
- package/dist/types/wallet-server/src/core/routerAbSigning/createRouterAbSigningRuntimes.d.ts +0 -16
- package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +0 -36
- package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +0 -62
- package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentActivation.d.ts +0 -13
- package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentRevocation.d.ts +0 -24
- package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleApplicationService.d.ts +0 -141
- package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +0 -228
- package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +0 -58
- package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +0 -30
- package/dist/types/wallet-server/src/core/signingLanes/signingWorkerLaneMaterialIdentity.d.ts +0 -4
- package/dist/types/wallet-server/src/core/storeBackends.d.ts +0 -83
- package/dist/types/wallet-server/src/core/utils.d.ts +0 -3
- package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +0 -96
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +0 -29
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -24
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.d.ts +0 -20
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.d.ts +0 -13
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.d.ts +0 -51
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLockStore.d.ts +0 -28
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.d.ts +0 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneRecords.d.ts +0 -107
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/index.d.ts +0 -10
- package/dist/types/wallet-server/src/router/cloudflare/durableObjects/thresholdStore.d.ts +0 -18
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.d.ts +0 -217
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.d.ts +0 -73
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/index.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.d.ts +0 -6
- package/dist/types/wallet-server/src/router/transport/fetch/routes/nearPublicKeys.d.ts +0 -3
- /package/dist/esm/{core/signingLanes/LaneEffectJournalStore.js → authorization/recoveryRouting.js} +0 -0
- /package/dist/esm/{core/signingLanes/LaneLifecycleStore.js → authorization/sessionRouting.js} +0 -0
|
@@ -1,126 +0,0 @@
|
|
|
1
|
-
import { type GoogleProviderSubject, type VerifiedGoogleEmail } from '../../../../shared-ts/src/utils/domainIds';
|
|
2
|
-
import type { AuthServiceConfig, ThresholdRuntimePolicyScope } from '../types';
|
|
3
|
-
import type { IdentityStore } from '../IdentityStore';
|
|
4
|
-
import type { EmailOtpRegistrationAttemptStore, EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
|
|
5
|
-
import { type GoogleEmailOtpResolutionResult, type GoogleEmailOtpRegistrationRateLimitConsumer, type GoogleEmailOtpRegistrationRateLimitResult } from './googleEmailOtpRegistration';
|
|
6
|
-
type GoogleEmailOtpStores = {
|
|
7
|
-
readonly identityStore: IdentityStore;
|
|
8
|
-
readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
|
|
9
|
-
readonly walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
|
|
10
|
-
};
|
|
11
|
-
type GoogleEmailOtpEnvironment = {
|
|
12
|
-
readonly config: AuthServiceConfig;
|
|
13
|
-
readonly readConfigValue: (name: string) => string;
|
|
14
|
-
readonly isProductionEnvironment: boolean;
|
|
15
|
-
};
|
|
16
|
-
export type GoogleEmailOtpOperationsInput = GoogleEmailOtpStores & GoogleEmailOtpEnvironment & {
|
|
17
|
-
readonly consumeRateLimit: GoogleEmailOtpRegistrationRateLimitConsumer;
|
|
18
|
-
};
|
|
19
|
-
export declare function resolveOidcWalletIdWithGoogleEmailOtp(input: {
|
|
20
|
-
readonly deps: GoogleEmailOtpOperationsInput;
|
|
21
|
-
readonly request: {
|
|
22
|
-
providerSubject?: string;
|
|
23
|
-
sub?: string;
|
|
24
|
-
email?: string;
|
|
25
|
-
accountMode?: unknown;
|
|
26
|
-
ownerProofBindingDigest?: string;
|
|
27
|
-
runtimePolicyScope?: ThresholdRuntimePolicyScope;
|
|
28
|
-
restartRegistrationOffer?: unknown;
|
|
29
|
-
};
|
|
30
|
-
}): Promise<string>;
|
|
31
|
-
export declare function consumeGoogleEmailOtpRegistrationAttemptRateLimitForAuthService(input: {
|
|
32
|
-
readonly deps: GoogleEmailOtpOperationsInput;
|
|
33
|
-
readonly request: {
|
|
34
|
-
providerSubject?: unknown;
|
|
35
|
-
email?: unknown;
|
|
36
|
-
accountMode?: unknown;
|
|
37
|
-
runtimePolicyScope?: ThresholdRuntimePolicyScope;
|
|
38
|
-
clientIp?: string;
|
|
39
|
-
providerUserId?: string;
|
|
40
|
-
restartRegistrationOffer?: unknown;
|
|
41
|
-
};
|
|
42
|
-
}): Promise<GoogleEmailOtpRegistrationRateLimitResult>;
|
|
43
|
-
export declare function resolveGoogleEmailOtpSessionForAuthService(input: {
|
|
44
|
-
readonly deps: GoogleEmailOtpOperationsInput;
|
|
45
|
-
readonly request: {
|
|
46
|
-
providerSubject?: string | GoogleProviderSubject;
|
|
47
|
-
sub?: string;
|
|
48
|
-
email?: string | VerifiedGoogleEmail;
|
|
49
|
-
accountMode?: unknown;
|
|
50
|
-
ownerProofBindingDigest?: string;
|
|
51
|
-
runtimePolicyScope?: ThresholdRuntimePolicyScope;
|
|
52
|
-
restartRegistrationOffer?: unknown;
|
|
53
|
-
};
|
|
54
|
-
}): Promise<GoogleEmailOtpResolutionResult>;
|
|
55
|
-
export declare function completeGoogleEmailOtpRegistrationAttemptForAuthService(input: {
|
|
56
|
-
readonly deps: GoogleEmailOtpOperationsInput;
|
|
57
|
-
readonly request: {
|
|
58
|
-
registrationAttemptId?: unknown;
|
|
59
|
-
walletId?: unknown;
|
|
60
|
-
};
|
|
61
|
-
}): Promise<{
|
|
62
|
-
ok: true;
|
|
63
|
-
} | {
|
|
64
|
-
ok: false;
|
|
65
|
-
code: string;
|
|
66
|
-
message: string;
|
|
67
|
-
}>;
|
|
68
|
-
export declare function validateGoogleEmailOtpRegistrationCandidateWalletForAuthService(input: {
|
|
69
|
-
readonly deps: GoogleEmailOtpOperationsInput;
|
|
70
|
-
readonly request: {
|
|
71
|
-
registrationAttemptId: string;
|
|
72
|
-
walletId: string;
|
|
73
|
-
ownerProofBindingDigest: string;
|
|
74
|
-
providerSubject: string;
|
|
75
|
-
};
|
|
76
|
-
}): Promise<{
|
|
77
|
-
ok: true;
|
|
78
|
-
} | {
|
|
79
|
-
ok: false;
|
|
80
|
-
code: string;
|
|
81
|
-
message: string;
|
|
82
|
-
}>;
|
|
83
|
-
export declare function recordGoogleEmailOtpRegistrationAttemptPublicKeyForAuthService(input: {
|
|
84
|
-
readonly deps: GoogleEmailOtpOperationsInput;
|
|
85
|
-
readonly request: {
|
|
86
|
-
registrationAttemptId?: unknown;
|
|
87
|
-
walletId?: unknown;
|
|
88
|
-
finalizedPublicKey?: unknown;
|
|
89
|
-
};
|
|
90
|
-
}): Promise<{
|
|
91
|
-
ok: true;
|
|
92
|
-
} | {
|
|
93
|
-
ok: false;
|
|
94
|
-
code: string;
|
|
95
|
-
message: string;
|
|
96
|
-
}>;
|
|
97
|
-
export declare function failGoogleEmailOtpRegistrationAttemptForAuthService(input: {
|
|
98
|
-
readonly deps: GoogleEmailOtpOperationsInput;
|
|
99
|
-
readonly request: {
|
|
100
|
-
registrationAttemptId?: unknown;
|
|
101
|
-
walletId?: unknown;
|
|
102
|
-
failureCode?: unknown;
|
|
103
|
-
};
|
|
104
|
-
}): Promise<void>;
|
|
105
|
-
export declare function cleanupGoogleEmailOtpDevRegistrationStateForAuthService(input: {
|
|
106
|
-
readonly deps: GoogleEmailOtpOperationsInput;
|
|
107
|
-
readonly request: {
|
|
108
|
-
providerSubject?: unknown;
|
|
109
|
-
walletId?: unknown;
|
|
110
|
-
orgId?: unknown;
|
|
111
|
-
nowMs?: unknown;
|
|
112
|
-
};
|
|
113
|
-
}): Promise<{
|
|
114
|
-
ok: true;
|
|
115
|
-
providerSubject: string;
|
|
116
|
-
expiredRegistrationAttemptsDeleted: number;
|
|
117
|
-
linkedWalletId?: string;
|
|
118
|
-
orphanedWalletMappingRemoved: boolean;
|
|
119
|
-
orphanedWalletMappingSkippedReason?: 'no_linked_wallet' | 'wallet_id_mismatch' | 'not_relayer_subaccount' | 'active_email_otp_enrollment' | 'mismatched_email_otp_enrollment';
|
|
120
|
-
} | {
|
|
121
|
-
ok: false;
|
|
122
|
-
code: string;
|
|
123
|
-
message: string;
|
|
124
|
-
}>;
|
|
125
|
-
export {};
|
|
126
|
-
//# sourceMappingURL=googleEmailOtpOperations.d.ts.map
|
|
@@ -1,169 +0,0 @@
|
|
|
1
|
-
import type { ThresholdRuntimePolicyScope } from '../types';
|
|
2
|
-
import type { EmailOtpRegistrationAttemptStore, EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
|
|
3
|
-
import type { IdentityStore } from '../IdentityStore';
|
|
4
|
-
export type GoogleEmailOtpResolutionMode = 'existing_wallet' | 'register_started' | 'wallet_id_collision' | 'registration_incomplete' | 'stale_identity_mapping';
|
|
5
|
-
export type GoogleEmailOtpRegistrationOfferCandidate = {
|
|
6
|
-
candidateId: string;
|
|
7
|
-
walletId: string;
|
|
8
|
-
};
|
|
9
|
-
export type GoogleEmailOtpRegistrationOffer = {
|
|
10
|
-
offerId: string;
|
|
11
|
-
selectedCandidateId: string;
|
|
12
|
-
candidates: readonly [
|
|
13
|
-
GoogleEmailOtpRegistrationOfferCandidate,
|
|
14
|
-
...GoogleEmailOtpRegistrationOfferCandidate[]
|
|
15
|
-
];
|
|
16
|
-
};
|
|
17
|
-
export type GoogleEmailOtpResolutionResult = {
|
|
18
|
-
ok: true;
|
|
19
|
-
mode: 'existing_wallet';
|
|
20
|
-
walletId: string;
|
|
21
|
-
providerSubject: string;
|
|
22
|
-
email: string;
|
|
23
|
-
hasEmailOtpEnrollment: true;
|
|
24
|
-
} | {
|
|
25
|
-
ok: true;
|
|
26
|
-
mode: 'register_started';
|
|
27
|
-
walletId: string;
|
|
28
|
-
providerSubject: string;
|
|
29
|
-
email: string;
|
|
30
|
-
registrationAttemptId: string;
|
|
31
|
-
expiresAtMs: number;
|
|
32
|
-
offer: GoogleEmailOtpRegistrationOffer;
|
|
33
|
-
} | {
|
|
34
|
-
ok: false;
|
|
35
|
-
mode: 'wallet_id_collision' | 'registration_incomplete' | 'stale_identity_mapping';
|
|
36
|
-
code: 'wallet_id_collision' | 'registration_incomplete' | 'stale_identity_mapping';
|
|
37
|
-
walletId?: string;
|
|
38
|
-
providerSubject: string;
|
|
39
|
-
email?: string;
|
|
40
|
-
message: string;
|
|
41
|
-
};
|
|
42
|
-
type GoogleEmailOtpRegistrationRateLimitRequest = {
|
|
43
|
-
providerSubject?: unknown;
|
|
44
|
-
email?: unknown;
|
|
45
|
-
accountMode?: unknown;
|
|
46
|
-
runtimePolicyScope?: ThresholdRuntimePolicyScope;
|
|
47
|
-
clientIp?: string;
|
|
48
|
-
providerUserId?: string;
|
|
49
|
-
restartRegistrationOffer?: unknown;
|
|
50
|
-
};
|
|
51
|
-
export type GoogleEmailOtpRegistrationRateLimitResult = {
|
|
52
|
-
ok: true;
|
|
53
|
-
} | {
|
|
54
|
-
ok: false;
|
|
55
|
-
code: 'invalid_body' | 'rate_limited';
|
|
56
|
-
message: string;
|
|
57
|
-
retryAfterMs?: number;
|
|
58
|
-
resetAtMs?: number;
|
|
59
|
-
};
|
|
60
|
-
export type GoogleEmailOtpRegistrationRateLimitConsumer = (input: {
|
|
61
|
-
scope: 'googleRegistrationAttempt';
|
|
62
|
-
action: 'google_email_otp_registration_create' | 'google_email_otp_registration_offer_restart';
|
|
63
|
-
userId?: string;
|
|
64
|
-
providerSubject: string;
|
|
65
|
-
orgId: string;
|
|
66
|
-
clientIp?: string;
|
|
67
|
-
}) => Promise<GoogleEmailOtpRegistrationRateLimitResult>;
|
|
68
|
-
type GoogleEmailOtpSessionResolveRequest = {
|
|
69
|
-
providerSubject?: string;
|
|
70
|
-
sub?: string;
|
|
71
|
-
email?: string;
|
|
72
|
-
accountMode?: unknown;
|
|
73
|
-
ownerProofBindingDigest?: string;
|
|
74
|
-
runtimePolicyScope?: ThresholdRuntimePolicyScope;
|
|
75
|
-
restartRegistrationOffer?: unknown;
|
|
76
|
-
};
|
|
77
|
-
type GoogleEmailOtpHostedWalletDeriver = (input: {
|
|
78
|
-
providerSubject: string;
|
|
79
|
-
sub?: string;
|
|
80
|
-
email?: string;
|
|
81
|
-
authProvider: string;
|
|
82
|
-
walletIdDerivationNonce?: string;
|
|
83
|
-
collisionCounter?: number;
|
|
84
|
-
runtimePolicyScope?: ThresholdRuntimePolicyScope;
|
|
85
|
-
}) => Promise<string>;
|
|
86
|
-
type GoogleEmailOtpHostedWalletPredicate = (walletId: string) => boolean;
|
|
87
|
-
export declare function consumeGoogleEmailOtpRegistrationAttemptRateLimitWithDeps(input: {
|
|
88
|
-
readonly request: GoogleEmailOtpRegistrationRateLimitRequest;
|
|
89
|
-
readonly consumeRateLimit: GoogleEmailOtpRegistrationRateLimitConsumer;
|
|
90
|
-
}): Promise<GoogleEmailOtpRegistrationRateLimitResult>;
|
|
91
|
-
export declare function resolveGoogleEmailOtpSessionWithDeps(input: {
|
|
92
|
-
readonly request: GoogleEmailOtpSessionResolveRequest;
|
|
93
|
-
readonly identityStore: IdentityStore;
|
|
94
|
-
readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
|
|
95
|
-
readonly walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
|
|
96
|
-
readonly deriveHostedWalletId: GoogleEmailOtpHostedWalletDeriver;
|
|
97
|
-
readonly isHostedHmacReadableWalletId: GoogleEmailOtpHostedWalletPredicate;
|
|
98
|
-
}): Promise<GoogleEmailOtpResolutionResult>;
|
|
99
|
-
export declare function completeGoogleEmailOtpRegistrationAttemptWithStore(input: {
|
|
100
|
-
readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
|
|
101
|
-
readonly identityStore: IdentityStore;
|
|
102
|
-
readonly registrationAttemptId?: unknown;
|
|
103
|
-
readonly walletId?: unknown;
|
|
104
|
-
readonly nowMs: number;
|
|
105
|
-
}): Promise<{
|
|
106
|
-
ok: true;
|
|
107
|
-
} | {
|
|
108
|
-
ok: false;
|
|
109
|
-
code: string;
|
|
110
|
-
message: string;
|
|
111
|
-
}>;
|
|
112
|
-
export declare function validateGoogleEmailOtpRegistrationCandidateWalletWithStore(input: {
|
|
113
|
-
readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
|
|
114
|
-
readonly registrationAttemptId: string;
|
|
115
|
-
readonly walletId: string;
|
|
116
|
-
readonly ownerProofBindingDigest: string;
|
|
117
|
-
readonly providerSubject: string;
|
|
118
|
-
readonly nowMs: number;
|
|
119
|
-
}): Promise<{
|
|
120
|
-
ok: true;
|
|
121
|
-
} | {
|
|
122
|
-
ok: false;
|
|
123
|
-
code: string;
|
|
124
|
-
message: string;
|
|
125
|
-
}>;
|
|
126
|
-
export declare function recordGoogleEmailOtpRegistrationAttemptPublicKeyWithStore(input: {
|
|
127
|
-
readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
|
|
128
|
-
readonly registrationAttemptId?: unknown;
|
|
129
|
-
readonly walletId?: unknown;
|
|
130
|
-
readonly finalizedPublicKey?: unknown;
|
|
131
|
-
readonly nowMs: number;
|
|
132
|
-
}): Promise<{
|
|
133
|
-
ok: true;
|
|
134
|
-
} | {
|
|
135
|
-
ok: false;
|
|
136
|
-
code: string;
|
|
137
|
-
message: string;
|
|
138
|
-
}>;
|
|
139
|
-
export declare function failGoogleEmailOtpRegistrationAttemptWithStore(input: {
|
|
140
|
-
readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
|
|
141
|
-
readonly registrationAttemptId?: unknown;
|
|
142
|
-
readonly walletId?: unknown;
|
|
143
|
-
readonly failureCode?: unknown;
|
|
144
|
-
readonly nowMs: number;
|
|
145
|
-
}): Promise<void>;
|
|
146
|
-
export declare function cleanupGoogleEmailOtpDevRegistrationStateWithStores(input: {
|
|
147
|
-
readonly registrationAttemptStore: EmailOtpRegistrationAttemptStore;
|
|
148
|
-
readonly identityStore: IdentityStore;
|
|
149
|
-
readonly walletEnrollmentStore: EmailOtpWalletEnrollmentStore;
|
|
150
|
-
readonly isProductionEnvironment: boolean;
|
|
151
|
-
readonly isHostedHmacReadableWalletId: GoogleEmailOtpHostedWalletPredicate;
|
|
152
|
-
readonly providerSubject?: unknown;
|
|
153
|
-
readonly walletId?: unknown;
|
|
154
|
-
readonly orgId?: unknown;
|
|
155
|
-
readonly nowMs?: unknown;
|
|
156
|
-
}): Promise<{
|
|
157
|
-
ok: true;
|
|
158
|
-
providerSubject: string;
|
|
159
|
-
expiredRegistrationAttemptsDeleted: number;
|
|
160
|
-
linkedWalletId?: string;
|
|
161
|
-
orphanedWalletMappingRemoved: boolean;
|
|
162
|
-
orphanedWalletMappingSkippedReason?: 'no_linked_wallet' | 'wallet_id_mismatch' | 'not_relayer_subaccount' | 'active_email_otp_enrollment' | 'mismatched_email_otp_enrollment';
|
|
163
|
-
} | {
|
|
164
|
-
ok: false;
|
|
165
|
-
code: string;
|
|
166
|
-
message: string;
|
|
167
|
-
}>;
|
|
168
|
-
export {};
|
|
169
|
-
//# sourceMappingURL=googleEmailOtpRegistration.d.ts.map
|
|
@@ -1,25 +0,0 @@
|
|
|
1
|
-
import type { IdentityStore, LinkIdentityResult, UnlinkIdentityResult } from '../IdentityStore';
|
|
2
|
-
export type ListIdentitiesResult = {
|
|
3
|
-
ok: true;
|
|
4
|
-
subjects: string[];
|
|
5
|
-
} | {
|
|
6
|
-
ok: false;
|
|
7
|
-
code: 'invalid_args' | 'internal';
|
|
8
|
-
message: string;
|
|
9
|
-
};
|
|
10
|
-
export declare function listIdentitiesWithStore(input: {
|
|
11
|
-
readonly store: IdentityStore;
|
|
12
|
-
readonly userId: string;
|
|
13
|
-
}): Promise<ListIdentitiesResult>;
|
|
14
|
-
export declare function linkIdentityWithStore(input: {
|
|
15
|
-
readonly store: IdentityStore;
|
|
16
|
-
readonly userId: string;
|
|
17
|
-
readonly subject: string;
|
|
18
|
-
readonly allowMoveIfSoleIdentity: boolean;
|
|
19
|
-
}): Promise<LinkIdentityResult>;
|
|
20
|
-
export declare function unlinkIdentityWithStore(input: {
|
|
21
|
-
readonly store: IdentityStore;
|
|
22
|
-
readonly userId: string;
|
|
23
|
-
readonly subject: string;
|
|
24
|
-
}): Promise<UnlinkIdentityResult>;
|
|
25
|
-
//# sourceMappingURL=identity.d.ts.map
|
|
@@ -1,19 +0,0 @@
|
|
|
1
|
-
import type { IdentityStore, LinkIdentityResult, UnlinkIdentityResult } from '../IdentityStore';
|
|
2
|
-
import { type ListIdentitiesResult } from './identity';
|
|
3
|
-
export declare class IdentityOperations {
|
|
4
|
-
private readonly store;
|
|
5
|
-
constructor(store: IdentityStore);
|
|
6
|
-
listIdentities(input: {
|
|
7
|
-
userId: string;
|
|
8
|
-
}): Promise<ListIdentitiesResult>;
|
|
9
|
-
linkIdentity(input: {
|
|
10
|
-
userId: string;
|
|
11
|
-
subject: string;
|
|
12
|
-
allowMoveIfSoleIdentity?: boolean;
|
|
13
|
-
}): Promise<LinkIdentityResult>;
|
|
14
|
-
unlinkIdentity(input: {
|
|
15
|
-
userId: string;
|
|
16
|
-
subject: string;
|
|
17
|
-
}): Promise<UnlinkIdentityResult>;
|
|
18
|
-
}
|
|
19
|
-
//# sourceMappingURL=identityOperations.d.ts.map
|
|
@@ -1,55 +0,0 @@
|
|
|
1
|
-
import type { FinalExecutionOutcome } from '@near-js/types';
|
|
2
|
-
import { type NearTransactionActionArgsWasm } from '../../../../shared-ts/src/near/actions';
|
|
3
|
-
import type { NormalizedLogger } from '../logger';
|
|
4
|
-
import type { MinimalNearClient, SignedTransaction } from '../rpcClients/near/NearClient';
|
|
5
|
-
import { type AccountCreationRequest, type AccountCreationResult, type AuthServiceConfig, type FundImplicitNearAccountRequest, type FundImplicitNearAccountResult } from '../types';
|
|
6
|
-
import { type DelegateActionPolicy, type ExecuteSignedDelegateResult, type RelayedSignedDelegate } from '../../delegateAction';
|
|
7
|
-
type NearAccountOperationsInput = {
|
|
8
|
-
readonly config: AuthServiceConfig;
|
|
9
|
-
readonly nearClient: MinimalNearClient;
|
|
10
|
-
readonly logger: NormalizedLogger;
|
|
11
|
-
readonly ensureSignerAndRelayerAccount: () => Promise<void>;
|
|
12
|
-
readonly ensureSignerWasm: () => Promise<void>;
|
|
13
|
-
readonly getRelayerPublicKey: () => string;
|
|
14
|
-
};
|
|
15
|
-
export declare class NearAccountOperations {
|
|
16
|
-
private readonly input;
|
|
17
|
-
private transactionQueue;
|
|
18
|
-
private queueStats;
|
|
19
|
-
constructor(input: NearAccountOperationsInput);
|
|
20
|
-
viewAccessKeyList(accountId: string): Promise<import("@near-js/types").AccessKeyList>;
|
|
21
|
-
dispatchNearSignedTransactionBorsh(input: {
|
|
22
|
-
signedTransactionBorshB64u: string;
|
|
23
|
-
}): Promise<{
|
|
24
|
-
rpcResult: FinalExecutionOutcome;
|
|
25
|
-
}>;
|
|
26
|
-
txStatus(txHash: string, senderAccountId: string): Promise<FinalExecutionOutcome>;
|
|
27
|
-
createAccount(request: AccountCreationRequest): Promise<AccountCreationResult>;
|
|
28
|
-
fundImplicitNearAccount(request: FundImplicitNearAccountRequest): Promise<FundImplicitNearAccountResult>;
|
|
29
|
-
checkAccountExists(accountId: string): Promise<boolean>;
|
|
30
|
-
executeSignedDelegate(input: {
|
|
31
|
-
hash: string;
|
|
32
|
-
signedDelegate: RelayedSignedDelegate;
|
|
33
|
-
policy?: DelegateActionPolicy;
|
|
34
|
-
}): Promise<ExecuteSignedDelegateResult>;
|
|
35
|
-
fetchTxContext(accountId: string, publicKey: string): Promise<{
|
|
36
|
-
nextNonce: string;
|
|
37
|
-
blockHash: string;
|
|
38
|
-
}>;
|
|
39
|
-
signGasRelayerNearTransaction(input: {
|
|
40
|
-
receiverId: string;
|
|
41
|
-
nonce: string;
|
|
42
|
-
blockHash: string;
|
|
43
|
-
actions: NearTransactionActionArgsWasm[];
|
|
44
|
-
}): Promise<SignedTransaction>;
|
|
45
|
-
queueTransaction<T>(operation: () => Promise<T>, description: string): Promise<T>;
|
|
46
|
-
private createAccountQueueTask;
|
|
47
|
-
private createAccountFromQueue;
|
|
48
|
-
private createFundImplicitNearAccountQueueTask;
|
|
49
|
-
private fundImplicitNearAccountFromQueue;
|
|
50
|
-
private verifyAccountAccessKeysPresent;
|
|
51
|
-
private scheduleAccountAccessKeyVisibilityAudit;
|
|
52
|
-
private runAccountAccessKeyVisibilityAudit;
|
|
53
|
-
}
|
|
54
|
-
export {};
|
|
55
|
-
//# sourceMappingURL=nearAccountOperations.d.ts.map
|
|
@@ -1,44 +0,0 @@
|
|
|
1
|
-
import type { NormalizedLogger } from '../logger';
|
|
2
|
-
import type { NearPublicKeyAuthBinding, NearPublicKeyKind, NearPublicKeyStore } from '../NearPublicKeyStore';
|
|
3
|
-
export type RecordNearPublicKeyMetadataResult = {
|
|
4
|
-
ok: true;
|
|
5
|
-
} | {
|
|
6
|
-
ok: false;
|
|
7
|
-
code: string;
|
|
8
|
-
message: string;
|
|
9
|
-
};
|
|
10
|
-
type NearPublicKeyListEntry = {
|
|
11
|
-
publicKey: string;
|
|
12
|
-
kind: NearPublicKeyKind;
|
|
13
|
-
signerSlot?: number;
|
|
14
|
-
createdAtMs: number;
|
|
15
|
-
updatedAtMs: number;
|
|
16
|
-
authBinding?: NearPublicKeyAuthBinding;
|
|
17
|
-
};
|
|
18
|
-
export type ListNearPublicKeysResult = {
|
|
19
|
-
ok: true;
|
|
20
|
-
keys: NearPublicKeyListEntry[];
|
|
21
|
-
} | {
|
|
22
|
-
ok: false;
|
|
23
|
-
code: string;
|
|
24
|
-
message: string;
|
|
25
|
-
};
|
|
26
|
-
export declare function recordNearPublicKeyMetadataWithStore(input: {
|
|
27
|
-
store: NearPublicKeyStore;
|
|
28
|
-
logger: NormalizedLogger;
|
|
29
|
-
userId?: unknown;
|
|
30
|
-
publicKey?: unknown;
|
|
31
|
-
kind: NearPublicKeyKind;
|
|
32
|
-
signerSlot?: unknown;
|
|
33
|
-
credentialIdB64u?: unknown;
|
|
34
|
-
rpId?: unknown;
|
|
35
|
-
addedTxHash?: unknown;
|
|
36
|
-
removedAtMs?: unknown;
|
|
37
|
-
source?: string;
|
|
38
|
-
}): Promise<RecordNearPublicKeyMetadataResult>;
|
|
39
|
-
export declare function listNearPublicKeysForUserWithStore(input: {
|
|
40
|
-
store: NearPublicKeyStore;
|
|
41
|
-
userId: string;
|
|
42
|
-
}): Promise<ListNearPublicKeysResult>;
|
|
43
|
-
export {};
|
|
44
|
-
//# sourceMappingURL=nearPublicKeyMetadata.d.ts.map
|
|
@@ -1,66 +0,0 @@
|
|
|
1
|
-
import type { GoogleOidcConfig } from '../types';
|
|
2
|
-
import type { IdentityStore } from '../IdentityStore';
|
|
3
|
-
type JwksCacheValue = {
|
|
4
|
-
keysByKid: Map<string, JsonWebKey>;
|
|
5
|
-
expiresAtMs: number;
|
|
6
|
-
};
|
|
7
|
-
type GoogleJwksState = {
|
|
8
|
-
cache: JwksCacheValue | null;
|
|
9
|
-
fetchPromise: Promise<JwksCacheValue> | null;
|
|
10
|
-
};
|
|
11
|
-
type GoogleLoginVerificationResult = {
|
|
12
|
-
ok: true;
|
|
13
|
-
verified: true;
|
|
14
|
-
providerSubject: string;
|
|
15
|
-
sub: string;
|
|
16
|
-
email?: string;
|
|
17
|
-
name?: string;
|
|
18
|
-
given_name?: string;
|
|
19
|
-
family_name?: string;
|
|
20
|
-
emailVerified?: boolean;
|
|
21
|
-
hostedDomain?: string;
|
|
22
|
-
} | {
|
|
23
|
-
ok: false;
|
|
24
|
-
verified: false;
|
|
25
|
-
code: string;
|
|
26
|
-
message: string;
|
|
27
|
-
};
|
|
28
|
-
export type GoogleLoginFacadeResult = {
|
|
29
|
-
ok: true;
|
|
30
|
-
verified: true;
|
|
31
|
-
userId: string;
|
|
32
|
-
providerSubject: string;
|
|
33
|
-
sub: string;
|
|
34
|
-
email?: string;
|
|
35
|
-
name?: string;
|
|
36
|
-
given_name?: string;
|
|
37
|
-
family_name?: string;
|
|
38
|
-
emailVerified?: boolean;
|
|
39
|
-
hostedDomain?: string;
|
|
40
|
-
} | {
|
|
41
|
-
ok: false;
|
|
42
|
-
verified: false;
|
|
43
|
-
code: string;
|
|
44
|
-
message: string;
|
|
45
|
-
};
|
|
46
|
-
export declare function createGoogleJwksState(): GoogleJwksState;
|
|
47
|
-
export declare function getGoogleJwks(state: GoogleJwksState): Promise<JwksCacheValue>;
|
|
48
|
-
export declare function verifyGoogleIdToken(input: {
|
|
49
|
-
request: {
|
|
50
|
-
idToken?: unknown;
|
|
51
|
-
id_token?: unknown;
|
|
52
|
-
};
|
|
53
|
-
config?: GoogleOidcConfig;
|
|
54
|
-
jwksState: GoogleJwksState;
|
|
55
|
-
}): Promise<GoogleLoginVerificationResult>;
|
|
56
|
-
export declare function verifyGoogleLoginWithIdentityStore(input: {
|
|
57
|
-
request: {
|
|
58
|
-
idToken?: unknown;
|
|
59
|
-
id_token?: unknown;
|
|
60
|
-
};
|
|
61
|
-
config?: GoogleOidcConfig;
|
|
62
|
-
jwksState: GoogleJwksState;
|
|
63
|
-
identityStore: IdentityStore;
|
|
64
|
-
}): Promise<GoogleLoginFacadeResult>;
|
|
65
|
-
export {};
|
|
66
|
-
//# sourceMappingURL=oidcVerification.d.ts.map
|
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
import { type ActionArgsWasm } from '../../../../shared-ts/src/near/actions';
|
|
2
|
-
export declare function buildFullAccessAddKeyAction(publicKey: string): ActionArgsWasm;
|
|
3
|
-
export declare function normalizeBootstrapPublicKeys(args: {
|
|
4
|
-
publicKey: string;
|
|
5
|
-
recoveryPublicKey?: string;
|
|
6
|
-
}): {
|
|
7
|
-
publicKey: string;
|
|
8
|
-
recoveryPublicKey?: string;
|
|
9
|
-
expectedPublicKeys: string[];
|
|
10
|
-
};
|
|
11
|
-
//# sourceMappingURL=registrationThresholdHelpers.d.ts.map
|
|
@@ -1,20 +0,0 @@
|
|
|
1
|
-
import type { NormalizedLogger } from '../logger';
|
|
2
|
-
import type { SignerWasmModuleSupplier } from '../types';
|
|
3
|
-
import { type SignerWasmRuntimeState } from './wasm';
|
|
4
|
-
export type AuthServiceRuntimeState = SignerWasmRuntimeState & {
|
|
5
|
-
readonly isInitialized: boolean;
|
|
6
|
-
readonly relayerPublicKey: string;
|
|
7
|
-
};
|
|
8
|
-
export declare function createInitialAuthServiceRuntimeState(): AuthServiceRuntimeState;
|
|
9
|
-
export declare function ensureAuthServiceSignerWasmReady(input: {
|
|
10
|
-
readonly state: AuthServiceRuntimeState;
|
|
11
|
-
readonly signerWasmOverride?: SignerWasmModuleSupplier;
|
|
12
|
-
readonly logger: NormalizedLogger;
|
|
13
|
-
}): Promise<AuthServiceRuntimeState>;
|
|
14
|
-
export declare function ensureAuthServiceRuntimeReady(input: {
|
|
15
|
-
readonly state: AuthServiceRuntimeState;
|
|
16
|
-
readonly relayerPrivateKey: string;
|
|
17
|
-
readonly signerWasmOverride?: SignerWasmModuleSupplier;
|
|
18
|
-
readonly logger: NormalizedLogger;
|
|
19
|
-
}): Promise<AuthServiceRuntimeState>;
|
|
20
|
-
//# sourceMappingURL=runtime.d.ts.map
|
|
@@ -1,53 +0,0 @@
|
|
|
1
|
-
import type { AuthServiceConfig } from '../types';
|
|
2
|
-
import type { NormalizedLogger } from '../logger';
|
|
3
|
-
import { type EmailOtpAuthStateStore, type EmailOtpChallengeStore, type EmailOtpGrantStore, type EmailOtpRegistrationAttemptStore, type EmailOtpUnlockChallengeStore, type EmailOtpWalletEnrollmentStore } from '../EmailOtpStores';
|
|
4
|
-
import { type IdentityStore } from '../IdentityStore';
|
|
5
|
-
import { type NearPublicKeyStore } from '../NearPublicKeyStore';
|
|
6
|
-
import { type WalletAuthMethodStore } from '../WalletAuthMethodStore';
|
|
7
|
-
import { type WalletStore } from '../WalletStore';
|
|
8
|
-
import { type WebAuthnAuthenticatorStore } from '../WebAuthnAuthenticatorStore';
|
|
9
|
-
import { type WebAuthnCredentialBindingStore } from '../WebAuthnCredentialBindingStore';
|
|
10
|
-
import { type WebAuthnLoginChallengeStore } from '../WebAuthnLoginChallengeStore';
|
|
11
|
-
import { type WebAuthnSyncChallengeStore } from '../WebAuthnSyncChallengeStore';
|
|
12
|
-
import type { SigningSessionSealRateLimiter } from '../../threshold/session/signingSessionSeal';
|
|
13
|
-
type AuthServiceStoreRegistryInput = {
|
|
14
|
-
readonly config: AuthServiceConfig;
|
|
15
|
-
readonly logger: NormalizedLogger;
|
|
16
|
-
readonly isNode: () => boolean;
|
|
17
|
-
};
|
|
18
|
-
export declare class AuthServiceStoreRegistry {
|
|
19
|
-
private readonly input;
|
|
20
|
-
private webAuthnAuthenticatorStore;
|
|
21
|
-
private webAuthnLoginChallengeStore;
|
|
22
|
-
private webAuthnCredentialBindingStore;
|
|
23
|
-
private webAuthnSyncChallengeStore;
|
|
24
|
-
private emailOtpChallengeStore;
|
|
25
|
-
private emailOtpGrantStore;
|
|
26
|
-
private emailOtpWalletEnrollmentStore;
|
|
27
|
-
private emailOtpAuthStateStore;
|
|
28
|
-
private emailOtpUnlockChallengeStore;
|
|
29
|
-
private emailOtpRegistrationAttemptStore;
|
|
30
|
-
private emailOtpRateLimiter;
|
|
31
|
-
private nearPublicKeyStore;
|
|
32
|
-
private identityStore;
|
|
33
|
-
private walletStore;
|
|
34
|
-
private walletAuthMethodStore;
|
|
35
|
-
constructor(input: AuthServiceStoreRegistryInput);
|
|
36
|
-
getWebAuthnAuthenticatorStore(): WebAuthnAuthenticatorStore;
|
|
37
|
-
getWebAuthnLoginChallengeStore(): WebAuthnLoginChallengeStore;
|
|
38
|
-
getWebAuthnCredentialBindingStore(): WebAuthnCredentialBindingStore;
|
|
39
|
-
getWebAuthnSyncChallengeStore(): WebAuthnSyncChallengeStore;
|
|
40
|
-
getWalletStore(): WalletStore;
|
|
41
|
-
getWalletAuthMethodStore(): WalletAuthMethodStore;
|
|
42
|
-
getEmailOtpChallengeStore(): EmailOtpChallengeStore;
|
|
43
|
-
getEmailOtpGrantStore(): EmailOtpGrantStore;
|
|
44
|
-
getEmailOtpWalletEnrollmentStore(): EmailOtpWalletEnrollmentStore;
|
|
45
|
-
getEmailOtpAuthStateStore(): EmailOtpAuthStateStore;
|
|
46
|
-
getEmailOtpUnlockChallengeStore(): EmailOtpUnlockChallengeStore;
|
|
47
|
-
getEmailOtpRegistrationAttemptStore(): EmailOtpRegistrationAttemptStore;
|
|
48
|
-
getEmailOtpRateLimiter(): SigningSessionSealRateLimiter;
|
|
49
|
-
getIdentityStore(): IdentityStore;
|
|
50
|
-
getNearPublicKeyStore(): NearPublicKeyStore;
|
|
51
|
-
}
|
|
52
|
-
export {};
|
|
53
|
-
//# sourceMappingURL=storeRegistry.d.ts.map
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
import { type WebAuthnRpId } from '../../../../shared-ts/src/utils/domainIds';
|
|
2
|
-
import type { ThresholdEd25519AuthorityScope } from '../types';
|
|
3
|
-
export declare function requireWebAuthnRpId(value: unknown, fieldName: string): WebAuthnRpId;
|
|
4
|
-
export declare function passkeyThresholdEd25519AuthorityScope(rpId: WebAuthnRpId): ThresholdEd25519AuthorityScope;
|
|
5
|
-
//# sourceMappingURL=webauthnAuthority.d.ts.map
|
|
@@ -1,5 +0,0 @@
|
|
|
1
|
-
export declare const THRESHOLD_NODE_ROLE_COORDINATOR: "coordinator";
|
|
2
|
-
export declare const THRESHOLD_NODE_ROLE_DEFAULT: "coordinator";
|
|
3
|
-
export declare const THRESHOLD_DO_OBJECT_NAME_DEFAULT: "threshold-store";
|
|
4
|
-
export declare const THRESHOLD_PREFIX_DEFAULT: "w3a";
|
|
5
|
-
//# sourceMappingURL=defaultConfigsServer.d.ts.map
|
|
@@ -1,16 +0,0 @@
|
|
|
1
|
-
export declare function isHostedHmacReadableRelayerWalletId(input: {
|
|
2
|
-
readonly walletId: unknown;
|
|
3
|
-
readonly relayerAccount: unknown;
|
|
4
|
-
}): boolean;
|
|
5
|
-
export declare function deriveHostedNearAccountId(input: {
|
|
6
|
-
accountIdDerivationSecret: string;
|
|
7
|
-
relayerAccount: string;
|
|
8
|
-
projectId: string;
|
|
9
|
-
envId: string;
|
|
10
|
-
authProvider: string;
|
|
11
|
-
providerSubject?: string;
|
|
12
|
-
verifiedEmail?: string;
|
|
13
|
-
walletIdDerivationNonce?: string;
|
|
14
|
-
collisionCounter?: number;
|
|
15
|
-
}): Promise<string>;
|
|
16
|
-
//# sourceMappingURL=hostedAccountIds.d.ts.map
|
package/dist/types/wallet-server/src/core/routerAbSigning/createRouterAbSigningRuntimes.d.ts
DELETED
|
@@ -1,16 +0,0 @@
|
|
|
1
|
-
import type { AuthService } from '../AuthService';
|
|
2
|
-
import { type Logger } from '../logger';
|
|
3
|
-
import type { ThresholdStoreConfigInput } from '../types';
|
|
4
|
-
import { RouterAbEcdsaPresignRuntime } from './RouterAbEcdsaPresignRuntime';
|
|
5
|
-
import { RouterAbNormalSigningRuntime } from './RouterAbNormalSigningRuntime';
|
|
6
|
-
export type RouterAbSigningRuntimeBundle = {
|
|
7
|
-
readonly normalSigning: RouterAbNormalSigningRuntime;
|
|
8
|
-
readonly ecdsaPresign: RouterAbEcdsaPresignRuntime;
|
|
9
|
-
};
|
|
10
|
-
export declare function createRouterAbSigningRuntimes(input: {
|
|
11
|
-
readonly authService: Pick<AuthService, 'getRelayerAccount'>;
|
|
12
|
-
readonly thresholdStore?: ThresholdStoreConfigInput | null;
|
|
13
|
-
readonly logger?: Logger | null;
|
|
14
|
-
readonly isNode?: boolean;
|
|
15
|
-
}): RouterAbSigningRuntimeBundle;
|
|
16
|
-
//# sourceMappingURL=createRouterAbSigningRuntimes.d.ts.map
|