@seams/wallet-server 0.7.3 → 0.8.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/THIRD_PARTY_NOTICES.md +1 -9
- package/artifact-manifest.json +78 -33
- package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/router/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/router/index.js +2 -2
- package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
- package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
- package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
- package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +0 -2
- package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +77 -20
- package/dist/esm/authorization/lifecycleRouting.js +62 -0
- package/dist/esm/authorization/service.js +35 -12
- package/dist/esm/cloud-host.js +20 -22
- package/dist/esm/core/EmailOtpRecords.js +1 -217
- package/dist/esm/core/EmailOtpStores.js +0 -859
- package/dist/esm/core/IdentityStore.js +2 -339
- package/dist/esm/core/ThresholdService/config.js +1 -9
- package/dist/esm/core/ThresholdService/index.js +0 -4
- package/dist/esm/core/ThresholdService/kv.js +1 -66
- package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +1 -13
- package/dist/esm/core/ThresholdService/routerAbNormalSigningPolicy.js +1 -11
- package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +0 -541
- package/dist/esm/core/ThresholdService/validation.js +2 -346
- package/dist/esm/core/WalletAuthMethodStore.js +2 -123
- package/dist/esm/core/WalletStore.js +3 -209
- package/dist/esm/core/WebAuthnAuthenticatorStore.js +0 -202
- package/dist/esm/core/WebAuthnCredentialBindingStore.js +2 -182
- package/dist/esm/core/WebAuthnLoginChallengeStore.js +0 -52
- package/dist/esm/core/WebAuthnSyncChallengeStore.js +0 -54
- package/dist/esm/core/authService/emailOtpConfig.js +1 -195
- package/dist/esm/core/authService/emailOtpEnrollment.js +0 -110
- package/dist/esm/core/authService/emailOtpSeal.js +0 -63
- package/dist/esm/core/authService/nearTransactions.js +3 -98
- package/dist/esm/core/authService/rateLimits.js +0 -84
- package/dist/esm/core/authService/webauthn.js +2 -298
- package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -24
- package/dist/esm/core/authService/webauthnWalletBinding.js +0 -37
- package/dist/esm/core/config.js +1 -95
- package/dist/esm/core/d1EcdsaSignerRead.js +1 -1
- package/dist/esm/core/d1IdentityStore.js +1 -2
- package/dist/esm/core/d1TenantStore.js +1 -24
- package/dist/esm/core/d1WalletAuthMethodStore.js +2 -5
- package/dist/esm/core/d1WalletStore.js +2 -2
- package/dist/esm/core/deviceLinking/linkedDeviceBootstrap.js +13 -0
- package/dist/esm/core/deviceLinking/linkedDeviceSession.js +20 -14
- package/dist/esm/core/deviceLinking/requestProof.js +9 -6
- package/dist/esm/core/emailOtpD1Statements.js +107 -94
- package/dist/esm/core/keyMaterialBrands.js +2 -12
- package/dist/esm/core/nearKeys.js +0 -1
- package/dist/esm/core/nearRelayerAccountProvisioning.js +6 -9
- package/dist/esm/core/passkeyCredentialClaims.js +8 -0
- package/dist/esm/core/routerAbSigning/RouterAbEcdsaPresignRuntime.js +2 -6
- package/dist/esm/core/routerAbSigning/RouterAbNormalSigningRuntime.js +2 -30
- package/dist/esm/core/thresholdEcdsaChainTarget.js +1 -4
- package/dist/esm/hosted-wallet-gateway.js +66 -43
- package/dist/esm/index.js +6 -19
- package/dist/esm/localHostedWalletGatewayHandler.js +12 -0
- package/dist/esm/localRegistrationSetupAuthority.js +89 -0
- package/dist/esm/router/auth/authRequestValidation.js +8 -16
- package/dist/esm/router/auth/webAuthnCredentialCodecs.js +0 -1
- package/dist/esm/router/cloudflare/d1/auth/d1AuthorizationAssembly.js +87 -0
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthConfig.js +12 -2
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +32 -281
- package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +24 -22
- package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +8 -6
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +12 -13
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEd25519ExportRootStore.js +6 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +12 -2
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +4 -4
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +1 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -9
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.js +2 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +89 -7
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +23 -14
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +9 -6
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +1 -7
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.js +19 -13
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +2 -2
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +44 -12
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +1 -49
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +19 -31
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.js +85 -0
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +0 -1
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityService.js +0 -48
- package/dist/esm/router/cloudflare/d1/near/d1SponsoredNearAccount.js +242 -0
- package/dist/esm/router/cloudflare/d1/oidc/d1OidcBoundary.js +0 -1
- package/dist/esm/router/cloudflare/d1/oidc/d1OidcVerificationService.js +2 -29
- package/dist/esm/router/cloudflare/d1/oidc/googleOidcToken.js +41 -0
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +5 -0
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +34 -0
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +9 -3
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +7 -13
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +25 -13
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +0 -1
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationSetupSupport.js +74 -0
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +7 -1
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +69 -238
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +12 -56
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.js +155 -0
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +1 -3
- package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +12 -6
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.js +68 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +7 -54
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +9 -8
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +2 -142
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +25 -4
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +4 -70
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +23 -7
- package/dist/esm/router/cloudflare/runtime/staticWalletConsoleBinding.js +1 -0
- package/dist/esm/router/cloudflare/runtime/walletConsoleOps.js +1 -0
- package/dist/esm/router/cloudflare/runtime/walletConsoleOpsClient.js +5 -0
- package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
- package/dist/esm/router/cloudflare/runtime/walletRuntimeOps.js +16 -4
- package/dist/esm/router/cloudflare-adaptor.js +1 -2
- package/dist/esm/router/cloudflare.js +1342 -1733
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +11 -8
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +3 -2
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +6 -6
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +6 -6
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +3 -0
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +8 -0
- package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +0 -1
- package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.js +2 -8
- package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +2 -8
- package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +5 -19
- package/dist/esm/router/domains/signingOperations/walletExecutionAdmission.js +2 -3
- package/dist/esm/router/domains/walletRegistration/walletRegistrationReservation.js +70 -0
- package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +10 -11
- package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +2 -3
- package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +14 -0
- package/dist/esm/router/express.js +574 -479
- package/dist/esm/router/framework/http.js +2 -0
- package/dist/esm/router/framework/registrationSetupDispatch.js +14 -0
- package/dist/esm/router/framework/ror/normalize.js +0 -1
- package/dist/esm/router/framework/ror/options.js +0 -1
- package/dist/esm/router/framework/ror/provider.js +0 -1
- package/dist/esm/router/framework/ror/staticProvider.js +0 -1
- package/dist/esm/router/framework/routeDefinitions.js +1 -2
- package/dist/esm/router/framework/routerApiWebhooks.js +0 -1
- package/dist/esm/router/ror.js +0 -1
- package/dist/esm/router/transport/fetch/createFetchRouter.js +0 -2
- package/dist/esm/router/transport/fetch/routes/auth.js +2 -0
- package/dist/esm/router/transport/fetch/routes/deviceLinking.js +36 -147
- package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +3 -2
- package/dist/esm/router/transport/fetch/routes/deviceLinkingResponses.js +130 -0
- package/dist/esm/router/transport/fetch/routes/ecdsaOperationStepUpFactor.js +171 -0
- package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +1 -0
- package/dist/esm/router/transport/fetch/routes/syncAccount.js +7 -2
- package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +19 -115
- package/dist/esm/router/transport/fetch/routes/walletRegistration.js +3 -1
- package/dist/esm/shared-ts/src/authorization/walletSessionIssuance.js +0 -1
- package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +0 -2
- package/dist/esm/shared-ts/src/device-linking/contracts.js +16 -1
- package/dist/esm/shared-ts/src/device-linking/digests.js +1 -8
- package/dist/esm/shared-ts/src/near/actions.js +0 -1
- package/dist/esm/shared-ts/src/near/nearClient.js +0 -2
- package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -1
- package/dist/esm/shared-ts/src/signing-lanes/index.js +1 -6
- package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +1 -1
- package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +2 -81
- package/dist/esm/shared-ts/src/signing-lanes/participants.js +1 -219
- package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +0 -3
- package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +1 -2
- package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +0 -1
- package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +1 -22
- package/dist/esm/shared-ts/src/threshold/participants.js +0 -1
- package/dist/esm/shared-ts/src/threshold/signingRootScope.js +0 -1
- package/dist/esm/shared-ts/src/utils/addWalletAuthMethod.js +4 -13
- package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +1 -7
- package/dist/esm/shared-ts/src/utils/domainIds.js +1 -16
- package/dist/esm/shared-ts/src/utils/ecdsaCapabilityActivation.js +1 -11
- package/dist/esm/shared-ts/src/utils/ecdsaKeyFactsInventory.js +0 -1
- package/dist/esm/shared-ts/src/utils/errors.js +1 -19
- package/dist/esm/shared-ts/src/utils/near.js +1 -1
- package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +1 -1
- package/dist/esm/shared-ts/src/utils/registrationIds.js +1 -5
- package/dist/esm/shared-ts/src/utils/registrationIntent.js +0 -1
- package/dist/esm/shared-ts/src/utils/registrationSetupOperation.js +8 -0
- package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +1 -1
- package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +0 -1
- package/dist/esm/shared-ts/src/utils/validation.js +1 -5
- package/dist/esm/shared-ts/src/utils/walletAuthAuthority.js +0 -1
- package/dist/esm/shared-ts/src/utils/walletManagementProtocol.js +6 -0
- package/dist/esm/shared-ts/src/utils/wireSchema.js +2 -13
- package/dist/esm/shared-ts/src/wallet-recovery/backupAcknowledgement.js +6 -24
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +0 -1
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryKeyId.js +5 -6
- package/dist/esm/storage/d1Sql.js +1 -7
- package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +0 -1
- package/dist/esm/threshold/session/signingSessionSeal/guards/backends.js +1 -2
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyBackends.js +0 -1
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +0 -1
- package/dist/esm/threshold/session/signingSessionSeal/options.js +0 -1
- package/dist/esm/wasm/evm_crypto/pkg/evm_crypto_bg.wasm +0 -0
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +0 -611
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
- package/dist/esm/wasm/shamir3pass_runtime/pkg/shamir3pass_runtime_bg.wasm +0 -0
- package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +0 -4
- package/dist/types/shared-ts/src/device-linking/contracts.d.ts +1 -0
- package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +0 -11
- package/dist/types/shared-ts/src/signing-lanes/ids.d.ts +2 -7
- package/dist/types/shared-ts/src/signing-lanes/index.d.ts +0 -4
- package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +0 -1
- package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +0 -18
- package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +6 -35
- package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +6 -843
- package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +0 -10
- package/dist/types/shared-ts/src/threshold/participants.d.ts +1 -1
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +1 -133
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +4 -18
- package/dist/types/shared-ts/src/utils/domainIds.d.ts +0 -12
- package/dist/types/shared-ts/src/utils/errors.d.ts +0 -4
- package/dist/types/shared-ts/src/utils/near.d.ts +0 -20
- package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -2
- package/dist/types/shared-ts/src/utils/registrationSetupOperation.d.ts +3 -0
- package/dist/types/shared-ts/src/utils/validation.d.ts +1 -3
- package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +0 -1
- package/dist/types/shared-ts/src/utils/walletManagementProtocol.d.ts +3 -0
- package/dist/types/shared-ts/src/utils/wireSchema.d.ts +0 -2
- package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +0 -1
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +1 -10
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodes.d.ts +1 -3
- package/dist/types/shared-ts/src/wallet-recovery/recoveryKeyId.d.ts +5 -21
- package/dist/types/wallet-server/src/authorization/lifecycleRouting.d.ts +32 -0
- package/dist/types/wallet-server/src/authorization/lifecycleRouting.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/authorization/recoveryRouting.d.ts +22 -0
- package/dist/types/wallet-server/src/authorization/recoveryRouting.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/authorization/service.d.ts +8 -1
- package/dist/types/wallet-server/src/authorization/sessionRouting.d.ts +20 -0
- package/dist/types/wallet-server/src/authorization/sessionRouting.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/cloud-host.d.ts +31 -9
- package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +1 -22
- package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +1 -79
- package/dist/types/wallet-server/src/core/IdentityStore.d.ts +0 -10
- package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +0 -1
- package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -2
- package/dist/types/wallet-server/src/core/ThresholdService/index.d.ts +1 -3
- package/dist/types/wallet-server/src/core/ThresholdService/kv.d.ts +0 -7
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +0 -3
- package/dist/types/wallet-server/src/core/ThresholdService/routerAbNormalSigningPolicy.d.ts +0 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +7 -19
- package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +0 -34
- package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +1 -5
- package/dist/types/wallet-server/src/core/WalletStore.d.ts +0 -3
- package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +0 -20
- package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +1 -27
- package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +2 -16
- package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +22 -14
- package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +0 -24
- package/dist/types/wallet-server/src/core/authService/emailOtpEnrollment.d.ts +1 -70
- package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +0 -13
- package/dist/types/wallet-server/src/core/authService/githubOAuth.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +1 -39
- package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -17
- package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +0 -125
- package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +1 -1
- package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +0 -12
- package/dist/types/wallet-server/src/core/config.d.ts +0 -10
- package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +0 -2
- package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +0 -7
- package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +0 -1
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceBootstrap.d.ts +19 -0
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +8 -6
- package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -5
- package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +10 -7
- package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +1 -5
- package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +0 -1
- package/dist/types/wallet-server/src/core/passkeyCredentialClaims.d.ts +9 -0
- package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbEcdsaPresignRuntime.d.ts +0 -2
- package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +0 -2
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +1 -92
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +4 -52
- package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +0 -1
- package/dist/types/wallet-server/src/core/types.d.ts +0 -299
- package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +15 -3
- package/dist/types/wallet-server/src/index.d.ts +8 -13
- package/dist/types/wallet-server/src/localRegistrationSetupAuthority.d.ts +13 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizationAssembly.d.ts +23 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +25 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +3 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +7 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.d.ts +1 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.d.ts +4 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +6 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +1 -13
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.d.ts +2 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +0 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +18 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +29 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -16
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.d.ts +7 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.d.ts +23 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityService.d.ts +0 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.d.ts +24 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/d1OidcVerificationService.d.ts +0 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/googleOidcToken.d.ts +4 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +9 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -11
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +3 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationSetupSupport.d.ts +51 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +30 -47
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +3 -30
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.d.ts +11 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.d.ts +27 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +1 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +2 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +0 -13
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +23 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/cloudflare.types.d.ts +0 -2
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOps.d.ts +1 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOpsClient.d.ts +2 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +1 -1
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRuntimeOps.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +0 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +1 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +0 -2
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +0 -3
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +0 -17
- package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +1 -2
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +1 -0
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationReservation.d.ts +51 -0
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +2 -10
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +2 -2
- package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +14 -34
- package/dist/types/wallet-server/src/router/framework/googleLoginResolution.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/framework/registrationSetupDispatch.d.ts +13 -0
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +1 -1
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingResponses.d.ts +17 -0
- package/dist/types/wallet-server/src/router/transport/fetch/routes/ecdsaOperationStepUpFactor.d.ts +37 -0
- package/dist/types/wallet-server/src/storage/d1Sql.d.ts +0 -1
- package/migrations/d1-signer/0040_namespace_home_challenges.sql +16 -0
- package/migrations/d1-signer/0041_step_up_admission_expiry.sql +28 -0
- package/migrations/d1-signer/0042_deployment_resource_challenges.sql +4 -0
- package/migrations/d1-signer/0043_google_registration_candidate_claim.sql +2 -0
- package/migrations/d1-signer/0044_linked_device_bootstrap_imports.sql +6 -0
- package/migrations/d1-signer/0045_wallet_owned_capability_receipts.sql +29 -0
- package/migrations/d1-signer/0046_wallet_owned_signing_abuse.sql +41 -0
- package/migrations/d1-signer/0047_remove_unused_near_public_keys.sql +2 -0
- package/migrations/d1-signer/0048_operation_owner_scope.sql +45 -0
- package/package.json +2 -3
- package/src/README.md +11 -3
- package/dist/esm/core/AuthService.js +0 -2
- package/dist/esm/core/NearPublicKeyStore.js +0 -200
- package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +0 -397
- package/dist/esm/core/ThresholdService/stores/KeyStore.js +0 -140
- package/dist/esm/core/ThresholdService/stores/SessionStore.js +0 -361
- package/dist/esm/core/ThresholdService/stores/StoreConfig.js +0 -13
- package/dist/esm/core/ThresholdService/stores/exportReplayGuard.js +0 -7
- package/dist/esm/core/authService/AuthService.js +0 -594
- package/dist/esm/core/authService/bytes.js +0 -19
- package/dist/esm/core/authService/configValues.js +0 -15
- package/dist/esm/core/authService/emailOtpChallengeOperations.js +0 -123
- package/dist/esm/core/authService/emailOtpChallengeProof.js +0 -183
- package/dist/esm/core/authService/emailOtpChallengeVerification.js +0 -264
- package/dist/esm/core/authService/emailOtpChallenges.js +0 -225
- package/dist/esm/core/authService/emailOtpDelivery.js +0 -134
- package/dist/esm/core/authService/emailOtpGrant.js +0 -43
- package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +0 -144
- package/dist/esm/core/authService/emailOtpUnlock.js +0 -174
- package/dist/esm/core/authService/googleEmailOtpOperations.js +0 -141
- package/dist/esm/core/authService/googleEmailOtpRegistration.js +0 -587
- package/dist/esm/core/authService/identity.js +0 -42
- package/dist/esm/core/authService/identityOperations.js +0 -32
- package/dist/esm/core/authService/nearAccountOperations.js +0 -229
- package/dist/esm/core/authService/nearPublicKeyMetadata.js +0 -108
- package/dist/esm/core/authService/oidcVerification.js +0 -249
- package/dist/esm/core/authService/registrationThresholdHelpers.js +0 -30
- package/dist/esm/core/authService/runtime.js +0 -45
- package/dist/esm/core/authService/storeRegistry.js +0 -102
- package/dist/esm/core/authService/thresholdStoreSummary.js +0 -32
- package/dist/esm/core/authService/webauthnAuthority.js +0 -17
- package/dist/esm/core/defaultConfigsServer.js +0 -9
- package/dist/esm/core/hostedAccountIds.js +0 -225
- package/dist/esm/core/routerAbSigning/createRouterAbSigningRuntimes.js +0 -84
- package/dist/esm/core/signingLanes/LaneAggregateRevocationApplicationService.js +0 -86
- package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +0 -324
- package/dist/esm/core/signingLanes/LaneEnrollmentRevocation.js +0 -173
- package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +0 -198
- package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +0 -73
- package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +0 -68
- package/dist/esm/core/signingLanes/signingWorkerLaneMaterialIdentity.js +0 -0
- package/dist/esm/core/storeBackends.js +0 -208
- package/dist/esm/core/utils.js +0 -14
- package/dist/esm/core/webAuthnStoreBackends.js +0 -198
- package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +0 -49
- package/dist/esm/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.js +0 -10
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.js +0 -22
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -166
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.js +0 -38
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.js +0 -20
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +0 -1459
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLockStore.js +0 -114
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.js +0 -16
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +0 -171
- package/dist/esm/router/cloudflare/d1/signingLanes/index.js +0 -10
- package/dist/esm/router/cloudflare/durableObjects/thresholdStore.js +0 -397
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +0 -597
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +0 -273
- package/dist/esm/router/cloudflare/signingLanes/index.js +0 -4
- package/dist/esm/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.js +0 -32
- package/dist/esm/router/transport/fetch/routes/nearPublicKeys.js +0 -27
- package/dist/esm/shared-ts/src/signing-lanes/rotation.js +0 -8
- package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +0 -358
- package/dist/esm/shared-ts/src/signing-lanes/rotationLifecycle.js +0 -313
- package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +0 -532
- package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +0 -323
- package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +0 -59
- package/dist/types/shared-ts/src/signing-lanes/participantDigest.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/rotation.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +0 -13
- package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +0 -78
- package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +0 -27
- package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +0 -6
- package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +0 -20
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeAttempt.d.ts +0 -59
- package/dist/types/wallet-server/src/core/AuthService.d.ts +0 -3
- package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +0 -48
- package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +0 -21
- package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +0 -40
- package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +0 -98
- package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +0 -4
- package/dist/types/wallet-server/src/core/ThresholdService/stores/ThresholdStoreConfig.typecheck.d.ts +0 -2
- package/dist/types/wallet-server/src/core/ThresholdService/stores/exportReplayGuard.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -490
- package/dist/types/wallet-server/src/core/authService/bytes.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/configValues.d.ts +0 -7
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +0 -109
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +0 -169
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +0 -47
- package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +0 -86
- package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +0 -66
- package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +0 -43
- package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +0 -49
- package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +0 -64
- package/dist/types/wallet-server/src/core/authService/googleEmailOtpOperations.d.ts +0 -126
- package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +0 -169
- package/dist/types/wallet-server/src/core/authService/identity.d.ts +0 -25
- package/dist/types/wallet-server/src/core/authService/identityOperations.d.ts +0 -19
- package/dist/types/wallet-server/src/core/authService/nearAccountOperations.d.ts +0 -55
- package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +0 -44
- package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +0 -66
- package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -11
- package/dist/types/wallet-server/src/core/authService/runtime.d.ts +0 -20
- package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -53
- package/dist/types/wallet-server/src/core/authService/thresholdStoreSummary.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/webauthnAuthority.d.ts +0 -5
- package/dist/types/wallet-server/src/core/defaultConfigsServer.d.ts +0 -5
- package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -16
- package/dist/types/wallet-server/src/core/routerAbSigning/createRouterAbSigningRuntimes.d.ts +0 -16
- package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +0 -36
- package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +0 -62
- package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentActivation.d.ts +0 -13
- package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentRevocation.d.ts +0 -24
- package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleApplicationService.d.ts +0 -141
- package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +0 -228
- package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +0 -58
- package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +0 -30
- package/dist/types/wallet-server/src/core/signingLanes/signingWorkerLaneMaterialIdentity.d.ts +0 -4
- package/dist/types/wallet-server/src/core/storeBackends.d.ts +0 -83
- package/dist/types/wallet-server/src/core/utils.d.ts +0 -3
- package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +0 -96
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +0 -29
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -24
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.d.ts +0 -20
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.d.ts +0 -13
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.d.ts +0 -51
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLockStore.d.ts +0 -28
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.d.ts +0 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneRecords.d.ts +0 -107
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/index.d.ts +0 -10
- package/dist/types/wallet-server/src/router/cloudflare/durableObjects/thresholdStore.d.ts +0 -18
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.d.ts +0 -217
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.d.ts +0 -73
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/index.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.d.ts +0 -6
- package/dist/types/wallet-server/src/router/transport/fetch/routes/nearPublicKeys.d.ts +0 -3
- /package/dist/esm/{core/signingLanes/LaneEffectJournalStore.js → authorization/recoveryRouting.js} +0 -0
- /package/dist/esm/{core/signingLanes/LaneLifecycleStore.js → authorization/sessionRouting.js} +0 -0
|
@@ -1,36 +0,0 @@
|
|
|
1
|
-
import type { LaneEnrollmentRevocationResultV1, RevokeLaneEnrollmentV1 } from '../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import type { LaneLifecycleRevocationRequestV1 } from './LaneLifecycleApplicationService';
|
|
3
|
-
import { LaneEnrollmentRevocation } from './LaneEnrollmentRevocation';
|
|
4
|
-
import type { LaneLifecycleStore } from './LaneLifecycleStore';
|
|
5
|
-
type LaneAggregateRevocationRequestV1 = {
|
|
6
|
-
readonly command: RevokeLaneEnrollmentV1;
|
|
7
|
-
readonly orderedChildren: readonly [
|
|
8
|
-
LaneLifecycleRevocationRequestV1,
|
|
9
|
-
...LaneLifecycleRevocationRequestV1[]
|
|
10
|
-
];
|
|
11
|
-
};
|
|
12
|
-
type LaneAggregateRevocationApplicationServiceOptionsV1 = {
|
|
13
|
-
readonly lifecycleStore: Pick<LaneLifecycleStore, 'getEnrollment' | 'fenceEnrollmentRevocation' | 'listEnrollmentProductEpochs'>;
|
|
14
|
-
readonly laneLifecycle: LaneAggregateChildRevocationPortV1;
|
|
15
|
-
readonly enrollmentRevocation: Pick<LaneEnrollmentRevocation, 'completeLaneEnrollmentRevocationV1'>;
|
|
16
|
-
};
|
|
17
|
-
interface LaneAggregateChildRevocationPortV1 {
|
|
18
|
-
revokeSigningLaneV1(input: LaneLifecycleRevocationRequestV1): Promise<{
|
|
19
|
-
readonly outcome: 'applied' | 'replayed' | 'conflict';
|
|
20
|
-
}>;
|
|
21
|
-
}
|
|
22
|
-
export declare class LaneAggregateRevocationApplicationService {
|
|
23
|
-
private readonly options;
|
|
24
|
-
constructor(options: LaneAggregateRevocationApplicationServiceOptionsV1);
|
|
25
|
-
/**
|
|
26
|
-
* Establish the enrollment lifecycle fence before management revokes any
|
|
27
|
-
* child authorization. The full aggregate path calls the same durable fence
|
|
28
|
-
* again, so retries remain idempotent.
|
|
29
|
-
*/
|
|
30
|
-
fenceLaneEnrollmentV1(input: LaneAggregateRevocationRequestV1['command']): Promise<{
|
|
31
|
-
readonly kind: 'applied' | 'replayed' | 'conflict';
|
|
32
|
-
}>;
|
|
33
|
-
revokeLaneEnrollmentV1(input: LaneAggregateRevocationRequestV1): Promise<LaneEnrollmentRevocationResultV1>;
|
|
34
|
-
}
|
|
35
|
-
export {};
|
|
36
|
-
//# sourceMappingURL=LaneAggregateRevocationApplicationService.d.ts.map
|
|
@@ -1,62 +0,0 @@
|
|
|
1
|
-
import type { LaneEnrollmentId, LaneOperationId, LaneShareEpoch, SigningLaneId, WalletKeyId } from '../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import type { WalletId } from '../../../../shared-ts/src/utils/domainIds';
|
|
3
|
-
type LaneEffectKind = 'activate_server_material' | 'retire_server_material' | 'invalidate_holder_material';
|
|
4
|
-
type LaneEffectRecordBaseV1 = {
|
|
5
|
-
readonly kind: 'lane_effect_record_v1';
|
|
6
|
-
readonly effectId: string;
|
|
7
|
-
readonly enrollmentId: LaneEnrollmentId;
|
|
8
|
-
readonly operationId: LaneOperationId;
|
|
9
|
-
readonly walletId: WalletId;
|
|
10
|
-
readonly walletKeyId: WalletKeyId;
|
|
11
|
-
readonly laneId: SigningLaneId;
|
|
12
|
-
readonly laneShareEpoch: LaneShareEpoch;
|
|
13
|
-
readonly effectKind: LaneEffectKind;
|
|
14
|
-
readonly requestDigestB64u: string;
|
|
15
|
-
readonly recordedAtMs: number;
|
|
16
|
-
};
|
|
17
|
-
/** Effect metadata only. Ciphertexts and private material never cross this port. */
|
|
18
|
-
export type LaneEffectRecordV1 = (LaneEffectRecordBaseV1 & {
|
|
19
|
-
readonly status: 'recorded';
|
|
20
|
-
readonly responseDigestB64u?: never;
|
|
21
|
-
readonly confirmedAtMs?: never;
|
|
22
|
-
}) | (LaneEffectRecordBaseV1 & {
|
|
23
|
-
readonly status: 'confirmed';
|
|
24
|
-
readonly responseDigestB64u: string;
|
|
25
|
-
readonly confirmedAtMs: number;
|
|
26
|
-
});
|
|
27
|
-
export type LaneEffectMutation = {
|
|
28
|
-
readonly record: LaneEffectRecordV1;
|
|
29
|
-
readonly commandDigestB64u: string;
|
|
30
|
-
};
|
|
31
|
-
export type LaneEffectMutationResult = {
|
|
32
|
-
readonly outcome: 'applied' | 'replayed';
|
|
33
|
-
readonly version: number;
|
|
34
|
-
readonly commandDigestB64u: string;
|
|
35
|
-
readonly record: LaneEffectRecordV1;
|
|
36
|
-
} | {
|
|
37
|
-
readonly outcome: 'conflict';
|
|
38
|
-
readonly expectedVersion: number | null;
|
|
39
|
-
readonly actualVersion: number;
|
|
40
|
-
readonly requestedCommandDigestB64u: string;
|
|
41
|
-
readonly storedCommandDigestB64u: string;
|
|
42
|
-
};
|
|
43
|
-
type LaneEffectLookup = {
|
|
44
|
-
readonly effectId: string;
|
|
45
|
-
};
|
|
46
|
-
export interface LaneEffectJournalStore {
|
|
47
|
-
getEffect(lookup: LaneEffectLookup): Promise<{
|
|
48
|
-
readonly version: number;
|
|
49
|
-
readonly commandDigestB64u: string;
|
|
50
|
-
readonly record: LaneEffectRecordV1;
|
|
51
|
-
} | null>;
|
|
52
|
-
recordEffect(input: LaneEffectMutation): Promise<LaneEffectMutationResult>;
|
|
53
|
-
confirmEffect(input: {
|
|
54
|
-
readonly effectId: string;
|
|
55
|
-
readonly expectedVersion: number;
|
|
56
|
-
readonly commandDigestB64u: string;
|
|
57
|
-
readonly responseDigestB64u: string;
|
|
58
|
-
readonly confirmedAtMs: number;
|
|
59
|
-
}): Promise<LaneEffectMutationResult>;
|
|
60
|
-
}
|
|
61
|
-
export {};
|
|
62
|
-
//# sourceMappingURL=LaneEffectJournalStore.d.ts.map
|
|
@@ -1,13 +0,0 @@
|
|
|
1
|
-
import type { ActivateLaneServerMaterialV1, CommitLaneEnrollmentActivationV1, LaneEnrollmentActivationResultV1, LaneEnrollmentGatewayV1, LaneEnrollmentPreparationResultV1, LaneProtocolCasResultV1, PrepareLaneEnrollmentV1, RecordLaneHolderDeliveryV1, RecordLaneProtocolCommitV1, ResumeLaneProtocolOperationV1 } from '../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import type { LaneLifecycleStore } from './LaneLifecycleStore';
|
|
3
|
-
export declare class LaneEnrollmentActivation implements Pick<LaneEnrollmentGatewayV1, 'prepareLaneEnrollmentV1' | 'resumeLaneProtocolOperationV1' | 'recordLaneProtocolCommitV1' | 'recordLaneHolderDeliveryV1' | 'activateLaneServerMaterialV1' | 'commitLaneEnrollmentActivationV1'> {
|
|
4
|
-
private readonly lifecycleStore;
|
|
5
|
-
constructor(lifecycleStore: LaneLifecycleStore);
|
|
6
|
-
prepareLaneEnrollmentV1(input: PrepareLaneEnrollmentV1): Promise<LaneEnrollmentPreparationResultV1>;
|
|
7
|
-
recordLaneProtocolCommitV1(input: RecordLaneProtocolCommitV1): Promise<LaneProtocolCasResultV1>;
|
|
8
|
-
resumeLaneProtocolOperationV1(input: ResumeLaneProtocolOperationV1): Promise<LaneProtocolCasResultV1>;
|
|
9
|
-
recordLaneHolderDeliveryV1(input: RecordLaneHolderDeliveryV1): Promise<LaneProtocolCasResultV1>;
|
|
10
|
-
activateLaneServerMaterialV1(input: ActivateLaneServerMaterialV1): Promise<LaneProtocolCasResultV1>;
|
|
11
|
-
commitLaneEnrollmentActivationV1(input: CommitLaneEnrollmentActivationV1): Promise<LaneEnrollmentActivationResultV1>;
|
|
12
|
-
}
|
|
13
|
-
//# sourceMappingURL=LaneEnrollmentActivation.d.ts.map
|
|
@@ -1,24 +0,0 @@
|
|
|
1
|
-
import type { CommitLaneEnrollmentRevocationV1, CompleteSigningLaneRevocationV1, LaneSigningLaneRevocationResultV1, LaneSigningLaneRevocationFenceResultV1, LaneEnrollmentRevocationResultV1, RevokeLaneEnrollmentV1, RevokeSigningLaneV1 } from '../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import type { LaneLifecycleStore } from './LaneLifecycleStore';
|
|
3
|
-
/**
|
|
4
|
-
* Revocation is intentionally separate from activation. The fence write must
|
|
5
|
-
* land before any caller asks a participant to retire material; this class
|
|
6
|
-
* only owns the Gateway-side lifecycle boundary.
|
|
7
|
-
*/
|
|
8
|
-
export declare class LaneEnrollmentRevocation {
|
|
9
|
-
private readonly lifecycleStore;
|
|
10
|
-
constructor(lifecycleStore: LaneLifecycleStore);
|
|
11
|
-
fenceEnrollment(input: RevokeLaneEnrollmentV1): Promise<void>;
|
|
12
|
-
commitEnrollment(input: {
|
|
13
|
-
readonly command: CommitLaneEnrollmentRevocationV1;
|
|
14
|
-
readonly expectedVersion: number;
|
|
15
|
-
readonly commandDigestB64u: string;
|
|
16
|
-
}): Promise<LaneEnrollmentRevocationResultV1>;
|
|
17
|
-
completeLaneEnrollmentRevocationV1(input: {
|
|
18
|
-
readonly command: RevokeLaneEnrollmentV1;
|
|
19
|
-
readonly expectedVersion: number;
|
|
20
|
-
}): Promise<LaneEnrollmentRevocationResultV1>;
|
|
21
|
-
fenceSigningLaneRevocationV1(input: RevokeSigningLaneV1): Promise<LaneSigningLaneRevocationFenceResultV1>;
|
|
22
|
-
completeSigningLaneRevocationV1(input: CompleteSigningLaneRevocationV1): Promise<LaneSigningLaneRevocationResultV1>;
|
|
23
|
-
}
|
|
24
|
-
//# sourceMappingURL=LaneEnrollmentRevocation.d.ts.map
|
|
@@ -1,141 +0,0 @@
|
|
|
1
|
-
import type { EcdsaAdditiveLaneHolderRoundV1, EcdsaAdditiveLaneJobV1, Ed25519YaoLaneJobV1, LaneEnrollmentGatewayV1, LaneHolderDeliveryReceiptV1, LaneProtocolCasResultV1, LaneProtocolCommitReceiptV1, LaneServerActivationReceiptV1, LaneServerRetirementReceiptV1, LaneRefreshPredecessorRetirementV1, LaneHolderPackageWireV1, LaneSigningLaneRevocationResultV1, RevokeSigningLaneV1 } from '../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import type { DigestB64u } from '../../../../shared-ts/src/utils/canonicalPrimitives';
|
|
3
|
-
export type LaneLifecycleProtocolCommitRequestV1 = {
|
|
4
|
-
readonly curve: 'ed25519_yao';
|
|
5
|
-
readonly job: Ed25519YaoLaneJobV1;
|
|
6
|
-
readonly requestJson: string;
|
|
7
|
-
readonly expectedVersion: number;
|
|
8
|
-
} | {
|
|
9
|
-
readonly curve: 'ecdsa_additive';
|
|
10
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
11
|
-
readonly holderRound: EcdsaAdditiveLaneHolderRoundV1;
|
|
12
|
-
readonly holderPackage: Extract<LaneHolderPackageWireV1, {
|
|
13
|
-
kind: 'ecdsa_additive_lane_holder_package_v1';
|
|
14
|
-
}>;
|
|
15
|
-
readonly encryptedDeltaPackageJson: string;
|
|
16
|
-
readonly expectedVersion: number;
|
|
17
|
-
};
|
|
18
|
-
export type LaneLifecycleServerActivationRequestV1 = {
|
|
19
|
-
readonly curve: 'ed25519_yao';
|
|
20
|
-
readonly job: Ed25519YaoLaneJobV1;
|
|
21
|
-
readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
22
|
-
readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
|
|
23
|
-
readonly expectedVersion: number;
|
|
24
|
-
} | {
|
|
25
|
-
readonly curve: 'ecdsa_additive';
|
|
26
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
27
|
-
readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
28
|
-
readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
|
|
29
|
-
readonly expectedVersion: number;
|
|
30
|
-
};
|
|
31
|
-
export type LaneLifecycleRevocationRequestV1 = {
|
|
32
|
-
readonly curve: 'ed25519_yao' | 'ecdsa_additive';
|
|
33
|
-
readonly command: RevokeSigningLaneV1;
|
|
34
|
-
};
|
|
35
|
-
export type LaneLifecycleRefreshPredecessorRetirementRequestV1 = {
|
|
36
|
-
readonly curve: 'ed25519_yao';
|
|
37
|
-
readonly job: Extract<Ed25519YaoLaneJobV1, {
|
|
38
|
-
target: {
|
|
39
|
-
operation: 'refresh_lane';
|
|
40
|
-
};
|
|
41
|
-
}>;
|
|
42
|
-
readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
43
|
-
readonly requestedAtMs: number;
|
|
44
|
-
} | {
|
|
45
|
-
readonly curve: 'ecdsa_additive';
|
|
46
|
-
readonly job: Extract<EcdsaAdditiveLaneJobV1, {
|
|
47
|
-
target: {
|
|
48
|
-
operation: 'refresh_lane';
|
|
49
|
-
};
|
|
50
|
-
}>;
|
|
51
|
-
readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
52
|
-
readonly requestedAtMs: number;
|
|
53
|
-
};
|
|
54
|
-
export type LaneLifecycleAuthorizationRequestV1 = {
|
|
55
|
-
readonly kind: 'record_lane_protocol_commit_v1';
|
|
56
|
-
readonly curve: 'ed25519_yao';
|
|
57
|
-
readonly job: Ed25519YaoLaneJobV1;
|
|
58
|
-
readonly expectedVersion: number;
|
|
59
|
-
} | {
|
|
60
|
-
readonly kind: 'record_lane_protocol_commit_v1';
|
|
61
|
-
readonly curve: 'ecdsa_additive';
|
|
62
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
63
|
-
readonly expectedVersion: number;
|
|
64
|
-
} | {
|
|
65
|
-
readonly kind: 'activate_lane_server_material_v1';
|
|
66
|
-
readonly curve: 'ed25519_yao';
|
|
67
|
-
readonly job: Ed25519YaoLaneJobV1;
|
|
68
|
-
readonly expectedVersion: number;
|
|
69
|
-
} | {
|
|
70
|
-
readonly kind: 'activate_lane_server_material_v1';
|
|
71
|
-
readonly curve: 'ecdsa_additive';
|
|
72
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
73
|
-
readonly expectedVersion: number;
|
|
74
|
-
} | {
|
|
75
|
-
readonly kind: 'revoke_signing_lane_v1';
|
|
76
|
-
readonly curve: 'ed25519_yao';
|
|
77
|
-
readonly command: RevokeSigningLaneV1;
|
|
78
|
-
} | {
|
|
79
|
-
readonly kind: 'revoke_signing_lane_v1';
|
|
80
|
-
readonly curve: 'ecdsa_additive';
|
|
81
|
-
readonly command: RevokeSigningLaneV1;
|
|
82
|
-
};
|
|
83
|
-
export type LaneLifecycleApplicationServiceOptionsV1 = {
|
|
84
|
-
readonly gateway: LaneEnrollmentGatewayV1;
|
|
85
|
-
readonly authorization: LaneLifecycleAuthorizationPortV1;
|
|
86
|
-
readonly execution: LaneLifecycleCurveExecutionPortsV1;
|
|
87
|
-
};
|
|
88
|
-
export interface LaneLifecycleAuthorizationPortV1 {
|
|
89
|
-
authorizeLaneLifecycleV1(input: LaneLifecycleAuthorizationRequestV1): Promise<void>;
|
|
90
|
-
}
|
|
91
|
-
export type LaneLifecycleRetirementExecutionV1 = {
|
|
92
|
-
readonly kind: 'lane_lifecycle_retirement_execution_v1';
|
|
93
|
-
readonly command: RevokeSigningLaneV1;
|
|
94
|
-
readonly retirementEffectBindingDigestB64u: DigestB64u;
|
|
95
|
-
readonly retirementReceipt: LaneServerRetirementReceiptV1;
|
|
96
|
-
};
|
|
97
|
-
export type LaneLifecycleEd25519ExecutionPortV1 = {
|
|
98
|
-
executeProtocolCommitV1(input: {
|
|
99
|
-
readonly job: Ed25519YaoLaneJobV1;
|
|
100
|
-
readonly requestJson: string;
|
|
101
|
-
}): Promise<LaneProtocolCommitReceiptV1>;
|
|
102
|
-
executeServerActivationV1(input: {
|
|
103
|
-
readonly job: Ed25519YaoLaneJobV1;
|
|
104
|
-
readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
105
|
-
readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
|
|
106
|
-
}): Promise<LaneServerActivationReceiptV1>;
|
|
107
|
-
executeServerRetirementV1(input: {
|
|
108
|
-
readonly command: RevokeSigningLaneV1;
|
|
109
|
-
}): Promise<LaneLifecycleRetirementExecutionV1>;
|
|
110
|
-
};
|
|
111
|
-
export type LaneLifecycleEcdsaExecutionPortV1 = {
|
|
112
|
-
executeProtocolCommitV1(input: {
|
|
113
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
114
|
-
readonly holderRound: EcdsaAdditiveLaneHolderRoundV1;
|
|
115
|
-
readonly holderPackage: Extract<LaneHolderPackageWireV1, {
|
|
116
|
-
kind: 'ecdsa_additive_lane_holder_package_v1';
|
|
117
|
-
}>;
|
|
118
|
-
readonly encryptedDeltaPackageJson: string;
|
|
119
|
-
}): Promise<LaneProtocolCommitReceiptV1>;
|
|
120
|
-
executeServerActivationV1(input: {
|
|
121
|
-
readonly job: EcdsaAdditiveLaneJobV1;
|
|
122
|
-
readonly protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
123
|
-
readonly holderDeliveryReceipt: LaneHolderDeliveryReceiptV1;
|
|
124
|
-
}): Promise<LaneServerActivationReceiptV1>;
|
|
125
|
-
executeServerRetirementV1(input: {
|
|
126
|
-
readonly command: RevokeSigningLaneV1;
|
|
127
|
-
}): Promise<LaneLifecycleRetirementExecutionV1>;
|
|
128
|
-
};
|
|
129
|
-
export type LaneLifecycleCurveExecutionPortsV1 = {
|
|
130
|
-
readonly ed25519: LaneLifecycleEd25519ExecutionPortV1;
|
|
131
|
-
readonly ecdsa: LaneLifecycleEcdsaExecutionPortV1;
|
|
132
|
-
};
|
|
133
|
-
export declare class LaneLifecycleApplicationService {
|
|
134
|
-
private readonly input;
|
|
135
|
-
constructor(input: LaneLifecycleApplicationServiceOptionsV1);
|
|
136
|
-
recordLaneProtocolCommitV1(request: LaneLifecycleProtocolCommitRequestV1): Promise<LaneProtocolCasResultV1>;
|
|
137
|
-
activateLaneServerMaterialV1(request: LaneLifecycleServerActivationRequestV1): Promise<LaneProtocolCasResultV1>;
|
|
138
|
-
revokeSigningLaneV1(request: LaneLifecycleRevocationRequestV1): Promise<LaneSigningLaneRevocationResultV1>;
|
|
139
|
-
retireLaneRefreshPredecessorV1(request: LaneLifecycleRefreshPredecessorRetirementRequestV1): Promise<LaneRefreshPredecessorRetirementV1>;
|
|
140
|
-
}
|
|
141
|
-
//# sourceMappingURL=LaneLifecycleApplicationService.d.ts.map
|
|
@@ -1,228 +0,0 @@
|
|
|
1
|
-
import type { AggregateLaneActivationReceiptV1, AggregateLaneRevocationReceiptV1, CommitLaneEnrollmentActivationV1, CompleteSigningLaneRevocationV1, LaneEnrollmentLifecycleV1, LaneEnrollmentManifestV1, LaneProductEpochRecordV1, LaneProtocolLifecycle, LaneProtocolRecordV1, LaneProtocolCasResultV1, RevokeLaneEnrollmentV1, LaneProtocolCommitReceiptV1, LaneHolderDeliveryReceiptV1, LaneServerActivationReceiptV1, LaneServerRetirementReceiptV1, RevokeSigningLaneV1 } from '../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import type { LaneEnrollmentId, LaneOperationId, LaneShareEpoch, SigningLaneId, WalletKeyId } from '../../../../shared-ts/src/signing-lanes';
|
|
3
|
-
import type { MpcMaterialActivationRef, WalletId } from '../../../../shared-ts/src/utils/domainIds';
|
|
4
|
-
/** A version is monotonic inside one immutable protocol or enrollment row. */
|
|
5
|
-
type LaneVersionedRecord<T> = {
|
|
6
|
-
readonly version: number;
|
|
7
|
-
readonly commandDigestB64u: string;
|
|
8
|
-
readonly value: T;
|
|
9
|
-
};
|
|
10
|
-
export type LaneEnrollmentAdmissionRecord = LaneVersionedRecord<{
|
|
11
|
-
readonly manifest: LaneEnrollmentManifestV1;
|
|
12
|
-
readonly lifecycle: LaneEnrollmentLifecycleV1;
|
|
13
|
-
}>;
|
|
14
|
-
export type LaneProtocolAdmissionRecord = LaneVersionedRecord<LaneProtocolRecordV1>;
|
|
15
|
-
export type LaneAdmissionMutationResult<T> = {
|
|
16
|
-
readonly outcome: 'applied';
|
|
17
|
-
readonly version: number;
|
|
18
|
-
readonly commandDigestB64u: string;
|
|
19
|
-
readonly value: T;
|
|
20
|
-
} | {
|
|
21
|
-
readonly outcome: 'replayed';
|
|
22
|
-
readonly version: number;
|
|
23
|
-
readonly commandDigestB64u: string;
|
|
24
|
-
readonly value: T;
|
|
25
|
-
} | {
|
|
26
|
-
readonly outcome: 'conflict';
|
|
27
|
-
readonly expectedVersion: number | null;
|
|
28
|
-
readonly actualVersion: number;
|
|
29
|
-
readonly requestedCommandDigestB64u: string;
|
|
30
|
-
readonly storedCommandDigestB64u: string;
|
|
31
|
-
};
|
|
32
|
-
export type LaneEnrollmentAdmissionInput = {
|
|
33
|
-
readonly manifest: LaneEnrollmentManifestV1;
|
|
34
|
-
readonly children: readonly LaneProtocolRecordV1[];
|
|
35
|
-
readonly commandDigestB64u: string;
|
|
36
|
-
readonly lifecycle: Extract<LaneEnrollmentLifecycleV1, {
|
|
37
|
-
state: 'preparing';
|
|
38
|
-
}>;
|
|
39
|
-
};
|
|
40
|
-
export type LaneProtocolAdmissionInput = {
|
|
41
|
-
readonly record: LaneProtocolRecordV1;
|
|
42
|
-
readonly commandDigestB64u: string;
|
|
43
|
-
};
|
|
44
|
-
export type LaneProtocolLifecycleCasInput = {
|
|
45
|
-
readonly operationId: LaneOperationId;
|
|
46
|
-
readonly expectedVersion: number;
|
|
47
|
-
readonly commandDigestB64u: string;
|
|
48
|
-
readonly lifecycle: LaneProtocolLifecycle;
|
|
49
|
-
};
|
|
50
|
-
export type LaneEnrollmentLifecycleCasInput = {
|
|
51
|
-
readonly enrollmentId: LaneEnrollmentId;
|
|
52
|
-
readonly expectedVersion: number;
|
|
53
|
-
readonly commandDigestB64u: string;
|
|
54
|
-
readonly lifecycle: LaneEnrollmentLifecycleV1;
|
|
55
|
-
};
|
|
56
|
-
export type LaneEnrollmentVisibilityCommitResult = {
|
|
57
|
-
readonly outcome: 'applied' | 'replayed';
|
|
58
|
-
readonly version: number;
|
|
59
|
-
readonly commandDigestB64u: string;
|
|
60
|
-
readonly receipt: AggregateLaneActivationReceiptV1;
|
|
61
|
-
readonly lifecycle: Extract<LaneEnrollmentLifecycleV1, {
|
|
62
|
-
state: 'active';
|
|
63
|
-
}>;
|
|
64
|
-
readonly productEpochs: readonly [LaneProductEpochRecordV1, ...LaneProductEpochRecordV1[]];
|
|
65
|
-
} | {
|
|
66
|
-
readonly outcome: 'conflict';
|
|
67
|
-
readonly enrollmentId: LaneEnrollmentId;
|
|
68
|
-
readonly expectedVersion: number;
|
|
69
|
-
readonly actualVersion: number;
|
|
70
|
-
readonly requestedCommandDigestB64u: string;
|
|
71
|
-
readonly storedCommandDigestB64u: string;
|
|
72
|
-
};
|
|
73
|
-
export type LaneEnrollmentRevocationCommitResult = {
|
|
74
|
-
readonly outcome: 'applied' | 'replayed';
|
|
75
|
-
readonly version: number;
|
|
76
|
-
readonly commandDigestB64u: string;
|
|
77
|
-
readonly receipt: AggregateLaneRevocationReceiptV1;
|
|
78
|
-
readonly lifecycle: Extract<LaneEnrollmentLifecycleV1, {
|
|
79
|
-
state: 'revoked';
|
|
80
|
-
}>;
|
|
81
|
-
readonly productEpochs: readonly [LaneProductEpochRecordV1, ...LaneProductEpochRecordV1[]];
|
|
82
|
-
} | {
|
|
83
|
-
readonly outcome: 'conflict';
|
|
84
|
-
readonly enrollmentId: LaneEnrollmentId;
|
|
85
|
-
readonly expectedVersion: number;
|
|
86
|
-
readonly actualVersion: number;
|
|
87
|
-
readonly requestedCommandDigestB64u: string;
|
|
88
|
-
readonly storedCommandDigestB64u: string;
|
|
89
|
-
};
|
|
90
|
-
export type LaneProductEpochLookup = {
|
|
91
|
-
readonly walletId: WalletId;
|
|
92
|
-
readonly walletKeyId: WalletKeyId;
|
|
93
|
-
readonly laneId: SigningLaneId;
|
|
94
|
-
readonly laneShareEpoch: LaneShareEpoch;
|
|
95
|
-
};
|
|
96
|
-
export type LaneActiveProductEpochLookup = LaneProductEpochLookup & {
|
|
97
|
-
readonly materialActivation: MpcMaterialActivationRef;
|
|
98
|
-
};
|
|
99
|
-
export type LaneLock = {
|
|
100
|
-
readonly lockKey: string;
|
|
101
|
-
readonly lockKind: 'wallet_key';
|
|
102
|
-
readonly walletKeyId: WalletKeyId;
|
|
103
|
-
readonly enrollmentId?: never;
|
|
104
|
-
readonly laneId?: never;
|
|
105
|
-
readonly lockId: string;
|
|
106
|
-
readonly acquiredAtMs: number;
|
|
107
|
-
readonly expiresAtMs: number;
|
|
108
|
-
} | {
|
|
109
|
-
readonly lockKey: string;
|
|
110
|
-
readonly lockKind: 'enrollment';
|
|
111
|
-
readonly enrollmentId: LaneEnrollmentId;
|
|
112
|
-
readonly walletKeyId?: never;
|
|
113
|
-
readonly laneId?: never;
|
|
114
|
-
readonly lockId: string;
|
|
115
|
-
readonly acquiredAtMs: number;
|
|
116
|
-
readonly expiresAtMs: number;
|
|
117
|
-
};
|
|
118
|
-
export type LaneLockResult = {
|
|
119
|
-
readonly outcome: 'applied';
|
|
120
|
-
readonly lock: LaneLock;
|
|
121
|
-
} | {
|
|
122
|
-
readonly outcome: 'replayed';
|
|
123
|
-
readonly lock: LaneLock;
|
|
124
|
-
} | {
|
|
125
|
-
readonly outcome: 'conflict';
|
|
126
|
-
readonly actual: LaneLock | null;
|
|
127
|
-
};
|
|
128
|
-
export interface LaneLockStore {
|
|
129
|
-
acquireWalletKeyLock(input: {
|
|
130
|
-
readonly walletKeyId: WalletKeyId;
|
|
131
|
-
readonly lockId: string;
|
|
132
|
-
readonly ttlMs: number;
|
|
133
|
-
readonly nowMs: number;
|
|
134
|
-
}): Promise<LaneLockResult>;
|
|
135
|
-
acquireEnrollmentLock(input: {
|
|
136
|
-
readonly enrollmentId: LaneEnrollmentId;
|
|
137
|
-
readonly lockId: string;
|
|
138
|
-
readonly ttlMs: number;
|
|
139
|
-
readonly nowMs: number;
|
|
140
|
-
}): Promise<LaneLockResult>;
|
|
141
|
-
releaseLock(input: {
|
|
142
|
-
readonly lockKey: string;
|
|
143
|
-
readonly lockId: string;
|
|
144
|
-
}): Promise<boolean>;
|
|
145
|
-
}
|
|
146
|
-
/**
|
|
147
|
-
* Gateway-owned lane lifecycle persistence. Implementations must perform
|
|
148
|
-
* compare-and-set writes in the database transaction itself; callers cannot
|
|
149
|
-
* turn a read into an authorization decision.
|
|
150
|
-
*/
|
|
151
|
-
export interface LaneLifecycleStore {
|
|
152
|
-
getEnrollment(enrollmentId: LaneEnrollmentId): Promise<LaneEnrollmentAdmissionRecord | null>;
|
|
153
|
-
getProtocol(operationId: LaneOperationId): Promise<LaneProtocolAdmissionRecord | null>;
|
|
154
|
-
putEnrollmentAdmission(input: LaneEnrollmentAdmissionInput): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
|
|
155
|
-
putProtocolAdmission(input: LaneProtocolAdmissionInput): Promise<LaneAdmissionMutationResult<LaneProtocolRecordV1>>;
|
|
156
|
-
compareAndSetProtocolLifecycle(input: LaneProtocolLifecycleCasInput): Promise<LaneProtocolCasResultV1>;
|
|
157
|
-
putProtocolCommitReceipt(receipt: LaneProtocolCommitReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneProtocolCommitReceiptV1>>;
|
|
158
|
-
putHolderDeliveryReceipt(receipt: LaneHolderDeliveryReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneHolderDeliveryReceiptV1>>;
|
|
159
|
-
putServerActivationReceipt(receipt: LaneServerActivationReceiptV1, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneServerActivationReceiptV1>>;
|
|
160
|
-
putProductEpochPending(productEpoch: Extract<LaneProductEpochRecordV1, {
|
|
161
|
-
state: 'pending_visibility';
|
|
162
|
-
}>, commandDigestB64u: string): Promise<LaneAdmissionMutationResult<LaneProductEpochRecordV1>>;
|
|
163
|
-
compareAndSetEnrollmentLifecycle(input: LaneEnrollmentLifecycleCasInput): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
|
|
164
|
-
getProductEpoch(lookup: LaneProductEpochLookup): Promise<LaneProductEpochRecordV1 | null>;
|
|
165
|
-
getActiveProductEpoch(lookup: LaneActiveProductEpochLookup): Promise<Extract<LaneProductEpochRecordV1, {
|
|
166
|
-
state: 'active';
|
|
167
|
-
}> | null>;
|
|
168
|
-
listEnrollmentProductEpochs(enrollmentId: LaneEnrollmentId): Promise<readonly LaneProductEpochRecordV1[]>;
|
|
169
|
-
commitEnrollmentVisibility(input: CommitLaneEnrollmentActivationV1): Promise<LaneEnrollmentVisibilityCommitResult>;
|
|
170
|
-
fenceLaneRevocation(input: RevokeSigningLaneV1): Promise<LaneSigningLaneRevocationFenceMutationResult>;
|
|
171
|
-
fenceEnrollmentRevocation(input: RevokeLaneEnrollmentV1): Promise<LaneAdmissionMutationResult<LaneEnrollmentAdmissionRecord['value']>>;
|
|
172
|
-
commitEnrollmentRevocation(input: LaneEnrollmentRevocationCommitInput): Promise<LaneEnrollmentRevocationCommitResult>;
|
|
173
|
-
commitLaneRevocation(input: LaneSigningLaneRevocationCommitInput): Promise<LaneSigningLaneRevocationMutationResult>;
|
|
174
|
-
}
|
|
175
|
-
export type LaneSigningLaneRevocationFenceMutationResult = {
|
|
176
|
-
readonly outcome: 'applied' | 'replayed';
|
|
177
|
-
readonly version: number;
|
|
178
|
-
readonly commandDigestB64u: string;
|
|
179
|
-
readonly productEpoch: Extract<LaneProductEpochRecordV1, {
|
|
180
|
-
state: 'revocation_pending';
|
|
181
|
-
}>;
|
|
182
|
-
} | {
|
|
183
|
-
readonly outcome: 'already_completed';
|
|
184
|
-
readonly version: number;
|
|
185
|
-
readonly commandDigestB64u: string;
|
|
186
|
-
readonly productEpoch: Extract<LaneProductEpochRecordV1, {
|
|
187
|
-
state: 'revoked';
|
|
188
|
-
}>;
|
|
189
|
-
readonly retirementReceipt: LaneServerRetirementReceiptV1;
|
|
190
|
-
} | {
|
|
191
|
-
readonly outcome: 'conflict';
|
|
192
|
-
readonly expectedVersion: number;
|
|
193
|
-
readonly actualVersion: number;
|
|
194
|
-
readonly requestedCommandDigestB64u: string;
|
|
195
|
-
readonly storedCommandDigestB64u: string;
|
|
196
|
-
};
|
|
197
|
-
export type LaneSigningLaneRevocationMutationResult = {
|
|
198
|
-
readonly outcome: 'applied' | 'replayed';
|
|
199
|
-
readonly version: number;
|
|
200
|
-
readonly commandDigestB64u: string;
|
|
201
|
-
readonly productEpoch: Extract<LaneProductEpochRecordV1, {
|
|
202
|
-
state: 'revoked';
|
|
203
|
-
}>;
|
|
204
|
-
readonly retirementReceipt: LaneServerRetirementReceiptV1;
|
|
205
|
-
} | {
|
|
206
|
-
readonly outcome: 'conflict';
|
|
207
|
-
readonly expectedVersion: number;
|
|
208
|
-
readonly actualVersion: number;
|
|
209
|
-
readonly requestedCommandDigestB64u: string;
|
|
210
|
-
readonly storedCommandDigestB64u: string;
|
|
211
|
-
};
|
|
212
|
-
export type LaneSigningLaneRevocationCommitInput = {
|
|
213
|
-
readonly completion: CompleteSigningLaneRevocationV1;
|
|
214
|
-
};
|
|
215
|
-
export type LaneEnrollmentRevocationCommitInput = {
|
|
216
|
-
readonly command: {
|
|
217
|
-
readonly kind: 'commit_lane_enrollment_revocation_v1';
|
|
218
|
-
readonly enrollmentId: LaneEnrollmentId;
|
|
219
|
-
readonly walletId: WalletId;
|
|
220
|
-
readonly manifestDigestB64u: string;
|
|
221
|
-
readonly receipt: AggregateLaneRevocationReceiptV1;
|
|
222
|
-
readonly revokedAtMs: number;
|
|
223
|
-
};
|
|
224
|
-
readonly expectedVersion: number;
|
|
225
|
-
readonly commandDigestB64u: string;
|
|
226
|
-
};
|
|
227
|
-
export {};
|
|
228
|
-
//# sourceMappingURL=LaneLifecycleStore.d.ts.map
|
|
@@ -1,58 +0,0 @@
|
|
|
1
|
-
import type { EcdsaManifestIdentity, EcdsaServerRetirementReceiptV1, RevokeSigningLaneV1 } from '../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import type { CorrelationId, DigestB64u } from '../../../../shared-ts/src/utils/canonicalPrimitives';
|
|
3
|
-
import { type LaneShareEpoch, type MpcMaterialActivationRef, type SigningLaneId, type WalletKeyId } from '../../../../shared-ts/src/utils/domainIds';
|
|
4
|
-
import type { EcdsaLifecycleId, EcdsaServerGeneration } from '../../../../shared-ts/src/utils/ecdsaCapabilityActivation';
|
|
5
|
-
import type { EcdsaSigningWorkerLaneMaterialIdentityV1 } from './signingWorkerLaneMaterialIdentity';
|
|
6
|
-
export type EcdsaServerRetirementBindingV1 = {
|
|
7
|
-
readonly identity: EcdsaSigningWorkerLaneMaterialIdentityV1;
|
|
8
|
-
readonly manifest: EcdsaManifestIdentity;
|
|
9
|
-
readonly materialActivation: MpcMaterialActivationRef;
|
|
10
|
-
readonly serverGeneration: EcdsaServerGeneration;
|
|
11
|
-
readonly lifecycleId: EcdsaLifecycleId;
|
|
12
|
-
};
|
|
13
|
-
type EcdsaServerRetirementExpectationV1 = {
|
|
14
|
-
readonly manifest: EcdsaManifestIdentity;
|
|
15
|
-
readonly materialActivation: MpcMaterialActivationRef;
|
|
16
|
-
readonly walletKeyId: WalletKeyId;
|
|
17
|
-
readonly laneId: SigningLaneId;
|
|
18
|
-
readonly laneShareEpoch: LaneShareEpoch;
|
|
19
|
-
readonly revocationEpoch: number;
|
|
20
|
-
readonly retirementReason: EcdsaServerRetirementReceiptV1['retirementReason'];
|
|
21
|
-
readonly retirementCorrelationId: CorrelationId;
|
|
22
|
-
readonly retirementRequestDigestB64u: DigestB64u;
|
|
23
|
-
readonly serverGeneration: EcdsaServerGeneration;
|
|
24
|
-
readonly lifecycleId: EcdsaLifecycleId;
|
|
25
|
-
/** Gateway's pre-authorized effect fence. It is distinct from receiptDigestB64u. */
|
|
26
|
-
readonly retirementEffectBindingDigestB64u: DigestB64u;
|
|
27
|
-
};
|
|
28
|
-
type EcdsaServerRetirementRequestV1 = {
|
|
29
|
-
readonly identity: EcdsaSigningWorkerLaneMaterialIdentityV1;
|
|
30
|
-
readonly manifest: EcdsaManifestIdentity;
|
|
31
|
-
readonly materialActivation: MpcMaterialActivationRef;
|
|
32
|
-
readonly revocationEpoch: number;
|
|
33
|
-
readonly retirementReason: EcdsaServerRetirementReceiptV1['retirementReason'];
|
|
34
|
-
readonly retirementCorrelationId: CorrelationId;
|
|
35
|
-
readonly retirementRequestDigestB64u: DigestB64u;
|
|
36
|
-
readonly retirementEffectBindingDigestB64u: DigestB64u;
|
|
37
|
-
readonly serverGeneration: EcdsaServerGeneration;
|
|
38
|
-
readonly lifecycleId: EcdsaLifecycleId;
|
|
39
|
-
};
|
|
40
|
-
type EcdsaServerRetirementEffectV1 = {
|
|
41
|
-
readonly outcome: 'applied' | 'replayed';
|
|
42
|
-
readonly receipt: EcdsaServerRetirementReceiptV1;
|
|
43
|
-
/** The effect fence authorized by the Gateway command. */
|
|
44
|
-
readonly retirementEffectBindingDigestB64u: DigestB64u;
|
|
45
|
-
/** The exact self-digest emitted by the server retirement receipt. */
|
|
46
|
-
readonly retirementReceiptDigestB64u: DigestB64u;
|
|
47
|
-
};
|
|
48
|
-
export declare function buildEcdsaServerRetirementRequestV1(input: {
|
|
49
|
-
readonly command: RevokeSigningLaneV1;
|
|
50
|
-
readonly binding: EcdsaServerRetirementBindingV1;
|
|
51
|
-
}): EcdsaServerRetirementRequestV1;
|
|
52
|
-
export declare function parseAndVerifyEcdsaServerRetirementEffectV1(input: {
|
|
53
|
-
readonly raw: unknown;
|
|
54
|
-
readonly expectation: EcdsaServerRetirementExpectationV1;
|
|
55
|
-
readonly label?: string;
|
|
56
|
-
}): Promise<EcdsaServerRetirementEffectV1>;
|
|
57
|
-
export {};
|
|
58
|
-
//# sourceMappingURL=ecdsaServerRetirement.d.ts.map
|
|
@@ -1,30 +0,0 @@
|
|
|
1
|
-
import type { Ed25519ServerRetirementReceiptV1, RevokeSigningLaneV1, SigningWorkerLaneMaterialIdentityV1 } from '../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
import { type DigestB64u } from '../../../../shared-ts/src/utils/canonicalPrimitives';
|
|
3
|
-
export type Ed25519ServerRetirementBindingV1 = {
|
|
4
|
-
readonly identity: SigningWorkerLaneMaterialIdentityV1<'ed25519'>;
|
|
5
|
-
};
|
|
6
|
-
type Ed25519ServerRetirementRequestV1 = {
|
|
7
|
-
readonly identity: SigningWorkerLaneMaterialIdentityV1<'ed25519'>;
|
|
8
|
-
readonly revocationEpoch: number;
|
|
9
|
-
readonly retirementReason: Ed25519ServerRetirementReceiptV1['retirementReason'];
|
|
10
|
-
readonly retirementCorrelationId: RevokeSigningLaneV1['retirementCorrelationId'];
|
|
11
|
-
readonly retirementRequestDigestB64u: DigestB64u;
|
|
12
|
-
readonly retirementEffectBindingDigestB64u: DigestB64u;
|
|
13
|
-
};
|
|
14
|
-
type Ed25519ServerRetirementEffectV1 = {
|
|
15
|
-
readonly outcome: 'applied' | 'replayed';
|
|
16
|
-
readonly receipt: Ed25519ServerRetirementReceiptV1;
|
|
17
|
-
readonly retirementEffectBindingDigestB64u: DigestB64u;
|
|
18
|
-
readonly retirementReceiptDigestB64u: DigestB64u;
|
|
19
|
-
};
|
|
20
|
-
export declare function buildEd25519ServerRetirementRequestV1(input: {
|
|
21
|
-
readonly command: RevokeSigningLaneV1;
|
|
22
|
-
readonly binding: Ed25519ServerRetirementBindingV1;
|
|
23
|
-
}): Ed25519ServerRetirementRequestV1;
|
|
24
|
-
export declare function parseAndVerifyEd25519ServerRetirementEffectV1(input: {
|
|
25
|
-
readonly raw: unknown;
|
|
26
|
-
readonly request: Ed25519ServerRetirementRequestV1;
|
|
27
|
-
readonly label?: string;
|
|
28
|
-
}): Promise<Ed25519ServerRetirementEffectV1>;
|
|
29
|
-
export {};
|
|
30
|
-
//# sourceMappingURL=ed25519ServerRetirement.d.ts.map
|
package/dist/types/wallet-server/src/core/signingLanes/signingWorkerLaneMaterialIdentity.d.ts
DELETED
|
@@ -1,4 +0,0 @@
|
|
|
1
|
-
import type { SigningWorkerLaneMaterialIdentityV1 as SharedSigningWorkerLaneMaterialIdentityV1 } from '../../../../shared-ts/src/signing-lanes';
|
|
2
|
-
export type SigningWorkerLaneMaterialIdentityV1<TKeyFamily extends 'ed25519' | 'ecdsa_secp256k1' = 'ed25519' | 'ecdsa_secp256k1'> = Readonly<SharedSigningWorkerLaneMaterialIdentityV1<TKeyFamily>>;
|
|
3
|
-
export type EcdsaSigningWorkerLaneMaterialIdentityV1 = SigningWorkerLaneMaterialIdentityV1<'ecdsa_secp256k1'>;
|
|
4
|
-
//# sourceMappingURL=signingWorkerLaneMaterialIdentity.d.ts.map
|