@seams/wallet-server 0.7.3 → 0.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/THIRD_PARTY_NOTICES.md +7 -9
- package/artifact-manifest.json +241 -41
- package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
- package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
- package/cloudflare-router-ab/build/router/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/router/index.js +2 -2
- package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
- package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
- package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -1
- package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
- package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
- package/cloudflare-router-ab/migrations/deriver-a/0019_wallet_object_addresses.sql +10 -0
- package/cloudflare-router-ab/migrations/deriver-b/0019_wallet_object_addresses.sql +10 -0
- package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +3 -119
- package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +77 -20
- package/cloudflare-router-ab/wrangler.deriver-a.toml +0 -8
- package/cloudflare-router-ab/wrangler.deriver-b.toml +24 -8
- package/cloudflare-router-ab/wrangler.router.toml +0 -2
- package/cloudflare-router-ab/wrangler.signing-worker.toml +29 -0
- package/dist/esm/authorization/domain.js +3 -2
- package/dist/esm/authorization/lifecycleRouting.js +62 -0
- package/dist/esm/authorization/service.js +86 -35
- package/dist/esm/cloud-host.js +42 -39
- package/dist/esm/core/EmailOtpRecords.js +29 -222
- package/dist/esm/core/EmailOtpStores.js +0 -859
- package/dist/esm/core/IdentityStore.js +2 -339
- package/dist/esm/core/ThresholdService/config.js +1 -9
- package/dist/esm/core/ThresholdService/index.js +0 -4
- package/dist/esm/core/ThresholdService/kv.js +1 -66
- package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +3 -13
- package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.js +10 -0
- package/dist/esm/core/ThresholdService/routerAb/internalServiceHttp.js +1 -0
- package/dist/esm/core/ThresholdService/routerAbNormalSigningPolicy.js +1 -11
- package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +0 -541
- package/dist/esm/core/ThresholdService/validation.js +3 -347
- package/dist/esm/core/WalletAuthMethodStore.js +2 -123
- package/dist/esm/core/WalletStore.js +3 -209
- package/dist/esm/core/WebAuthnAuthenticatorStore.js +0 -202
- package/dist/esm/core/WebAuthnCredentialBindingStore.js +2 -182
- package/dist/esm/core/WebAuthnLoginChallengeStore.js +0 -52
- package/dist/esm/core/WebAuthnSyncChallengeStore.js +0 -54
- package/dist/esm/core/authService/emailOtpConfig.js +1 -195
- package/dist/esm/core/authService/emailOtpEnrollment.js +0 -110
- package/dist/esm/core/authService/emailOtpSeal.js +0 -63
- package/dist/esm/core/authService/nearPrivateKeySigning.js +1 -1
- package/dist/esm/core/authService/nearTransactions.js +3 -98
- package/dist/esm/core/authService/rateLimits.js +0 -84
- package/dist/esm/core/authService/webauthn.js +3 -299
- package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -24
- package/dist/esm/core/authService/webauthnWalletBinding.js +0 -37
- package/dist/esm/core/config.js +1 -95
- package/dist/esm/core/d1EcdsaSignerRead.js +1 -1
- package/dist/esm/core/d1Ed25519SignerRead.js +55 -0
- package/dist/esm/core/d1IdentityStore.js +1 -2
- package/dist/esm/core/d1TenantStore.js +1 -24
- package/dist/esm/core/d1WalletAuthMethodStore.js +2 -5
- package/dist/esm/core/d1WalletStore.js +16 -13
- package/dist/esm/core/deviceLinking/linkedDeviceBootstrap.js +13 -0
- package/dist/esm/core/deviceLinking/linkedDeviceEmailOtpGrant.js +2 -2
- package/dist/esm/core/deviceLinking/linkedDeviceManagement.js +1 -1
- package/dist/esm/core/deviceLinking/linkedDeviceSession.js +20 -14
- package/dist/esm/core/deviceLinking/linkedDeviceSessionRecord.js +2 -2
- package/dist/esm/core/deviceLinking/requestProof.js +9 -6
- package/dist/esm/core/emailOtpD1Statements.js +108 -94
- package/dist/esm/core/keyMaterialBrands.js +2 -12
- package/dist/esm/core/nearKeys.js +0 -1
- package/dist/esm/core/nearRelayerAccountProvisioning.js +7 -10
- package/dist/esm/core/passkeyCredentialClaims.js +8 -0
- package/dist/esm/core/routerAbSigning/RouterAbEcdsaPresignRuntime.js +6 -6
- package/dist/esm/core/routerAbSigning/RouterAbNormalSigningRuntime.js +2 -30
- package/dist/esm/core/signingLanes/WalletExecutionLaneProjection.js +1 -1
- package/dist/esm/core/signingMaterial/ordinaryInactiveSignerMaterialReservation.js +1 -0
- package/dist/esm/core/thresholdEcdsaChainTarget.js +1 -4
- package/dist/esm/hosted-wallet-gateway.js +158 -52
- package/dist/esm/index.js +6 -19
- package/dist/esm/localHostedWalletGatewayHandler.js +18 -3
- package/dist/esm/localIntendedYaoSigningFault.js +2 -30
- package/dist/esm/localRegistrationSetupAuthority.js +96 -0
- package/dist/esm/router/auth/authRequestValidation.js +8 -16
- package/dist/esm/router/auth/commonRouterUtils.js +17 -10
- package/dist/esm/router/auth/routerApiCredentialAuth.js +26 -7
- package/dist/esm/router/auth/walletRegistrationContext.js +49 -0
- package/dist/esm/router/auth/webAuthnCredentialCodecs.js +1 -2
- package/dist/esm/router/cloudflare/d1/auth/d1AuthorizationAssembly.js +88 -0
- package/dist/esm/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.js +2 -0
- package/dist/esm/router/cloudflare/d1/auth/d1EmailOtpRouteService.js +25 -0
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthConfig.js +24 -6
- package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +75 -320
- package/dist/esm/router/cloudflare/d1/auth/walletSessionCredentialReaders.js +17 -1
- package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +57 -25
- package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +265 -104
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +43 -17
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEd25519ExportRootStore.js +6 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +12 -2
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +4 -4
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +2 -2
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -9
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.js +2 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.js +1 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +89 -7
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +24 -15
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.js +1 -1
- package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.js +1 -1
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +9 -6
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.js +11 -2
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.js +100 -10
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoStateWriteFence.js +92 -0
- package/dist/esm/router/cloudflare/d1/ed25519Yao/d1WalletCeremonyActivity.js +77 -0
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.js +14 -9
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +15 -9
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +3 -2
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +1 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +1 -7
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.js +62 -36
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +27 -21
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +1 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +2 -2
- package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.js +0 -1
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +44 -12
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +1 -49
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +20 -31
- package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.js +85 -0
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +0 -1
- package/dist/esm/router/cloudflare/d1/identity/d1IdentityService.js +0 -48
- package/dist/esm/router/cloudflare/d1/near/d1SponsoredNearAccount.js +242 -0
- package/dist/esm/router/cloudflare/d1/oidc/d1OidcBoundary.js +1 -2
- package/dist/esm/router/cloudflare/d1/oidc/d1OidcVerificationService.js +2 -29
- package/dist/esm/router/cloudflare/d1/oidc/googleOidcToken.js +41 -0
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +5 -0
- package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +52 -7
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +83 -16
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +8 -14
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +60 -28
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +0 -1
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationSessionTransaction.js +28 -0
- package/dist/esm/router/cloudflare/d1/registration/d1RegistrationSetupSupport.js +84 -0
- package/dist/esm/router/cloudflare/d1/registration/d1WalletExecutionAuthority.js +168 -0
- package/dist/esm/router/cloudflare/d1/registration/d1WalletOperationStore.js +53 -0
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +85 -38
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationInitialSession.js +33 -0
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationPreparation.js +16 -0
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationRead.js +58 -0
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +478 -708
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +13 -57
- package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.js +169 -0
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +79 -47
- package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js +11 -35
- package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +110 -45
- package/dist/esm/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.js +12 -9
- package/dist/esm/router/cloudflare/d1/wallet/authorizationSnapshotLayout.js +168 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.js +68 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +22 -60
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +12 -48
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +56 -143
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorizationCleanup.js +157 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorizationFreeze.js +56 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorizationHistory.js +238 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorizationIntake.js +287 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorizationSnapshot.js +295 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationApprovals.js +140 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationChallenges.js +170 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationEmailOtp.js +60 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationOwner.js +33 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationOwnerRequest.js +74 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationPasskey.js +77 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationReadAccess.js +37 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationSessions.js +97 -0
- package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationWriteBlock.js +133 -0
- package/dist/esm/router/cloudflare/d1/walletObjectAddresses.js +47 -0
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +26 -5
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +4 -70
- package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +23 -7
- package/dist/esm/router/cloudflare/runtime/routerAbServiceBindings.js +32 -1
- package/dist/esm/router/cloudflare/runtime/staticWalletConsoleBinding.js +20 -7
- package/dist/esm/router/cloudflare/runtime/walletAuthorizationRelocationRoutes.js +488 -0
- package/dist/esm/router/cloudflare/runtime/walletConsoleOps.js +1 -0
- package/dist/esm/router/cloudflare/runtime/walletConsoleOpsClient.js +26 -1
- package/dist/esm/router/cloudflare/runtime/walletControlOps.js +3 -0
- package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
- package/dist/esm/router/cloudflare/runtime/walletObjectAddresses.js +105 -0
- package/dist/esm/router/cloudflare/runtime/walletPlacementRoutes.js +339 -0
- package/dist/esm/router/cloudflare/runtime/walletRelocationDeriver.js +244 -0
- package/dist/esm/router/cloudflare/runtime/walletRelocationEcdsa.js +212 -0
- package/dist/esm/router/cloudflare/runtime/walletRelocationEd25519.js +172 -0
- package/dist/esm/router/cloudflare/runtime/walletRelocationOps.js +183 -0
- package/dist/esm/router/cloudflare/runtime/walletRelocationPresign.js +185 -0
- package/dist/esm/router/cloudflare/runtime/walletRelocationSource.js +221 -0
- package/dist/esm/router/cloudflare/runtime/walletRuntimeOps.js +16 -4
- package/dist/esm/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.js +30 -8
- package/dist/esm/router/cloudflare-adaptor.js +8 -9
- package/dist/esm/router/cloudflare.js +33043 -31559
- package/dist/esm/router/domains/ecdsa/routerAbEcdsaStrictRegistration.js +35 -9
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoCapabilityCommit.js +42 -0
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +42 -13
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +64 -3
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +6 -6
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPersistence.js +70 -3
- package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.js +59 -87
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +58 -28
- package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +13 -7
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.js +108 -78
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +27 -5
- package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryWalletSessionAuthorization.js +71 -22
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.js +37 -25
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.js +3 -3
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.js +2 -1
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js +24 -3
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.js +4 -3
- package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.js +20 -7
- package/dist/esm/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.js +7 -1
- package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +0 -1
- package/dist/esm/router/domains/emailOtp/emailOtpRouteHandlers.js +2 -2
- package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.js +3 -9
- package/dist/esm/router/domains/passkeyCustody/registrationCustodyOutcome.js +34 -18
- package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationAdmission.js +2 -2
- package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +18 -14
- package/dist/esm/router/domains/signingOperations/authorizedOperationWire.js +73 -0
- package/dist/esm/router/domains/signingOperations/ecdsaSigningResponse.js +31 -0
- package/dist/esm/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.js +1 -1
- package/dist/esm/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.js +2 -1
- package/dist/esm/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.js +31 -121
- package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmission.js +2 -93
- package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +6 -20
- package/dist/esm/router/domains/signingOperations/signingPrepareSession.js +33 -0
- package/dist/esm/router/domains/signingOperations/walletExecutionAdmission.js +2 -3
- package/dist/esm/router/domains/walletRegistration/registrationSessionSeal.js +121 -0
- package/dist/esm/router/domains/walletRegistration/walletRegistrationReservation.js +70 -0
- package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +56 -168
- package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +3 -4
- package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +14 -0
- package/dist/esm/router/express.js +1453 -1488
- package/dist/esm/router/framework/http.js +4 -1
- package/dist/esm/router/framework/registrationSetupDispatch.js +14 -0
- package/dist/esm/router/framework/ror/normalize.js +0 -1
- package/dist/esm/router/framework/ror/options.js +0 -1
- package/dist/esm/router/framework/ror/provider.js +0 -1
- package/dist/esm/router/framework/ror/staticProvider.js +0 -1
- package/dist/esm/router/framework/routeDefinitions.js +1 -2
- package/dist/esm/router/framework/routerApiWebhooks.js +0 -1
- package/dist/esm/router/ror.js +0 -1
- package/dist/esm/router/transport/fetch/createFetchRouter.js +2 -4
- package/dist/esm/router/transport/fetch/routes/auth.js +3 -1
- package/dist/esm/router/transport/fetch/routes/deviceLinking.js +38 -149
- package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +5 -4
- package/dist/esm/router/transport/fetch/routes/deviceLinkingResponses.js +130 -0
- package/dist/esm/router/transport/fetch/routes/ecdsaOperationStepUpFactor.js +171 -0
- package/dist/esm/router/transport/fetch/routes/ed25519AuthorizedOperationRevalidation.js +65 -0
- package/dist/esm/router/transport/fetch/routes/normalSigningRouterProxy.js +13 -3
- package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +4 -3
- package/dist/esm/router/transport/fetch/routes/sessions.js +3 -2
- package/dist/esm/router/transport/fetch/routes/syncAccount.js +7 -2
- package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +86 -245
- package/dist/esm/router/transport/fetch/routes/thresholdEd25519.js +76 -212
- package/dist/esm/router/transport/fetch/routes/walletExecutionLanePreflight.js +18 -41
- package/dist/esm/router/transport/fetch/routes/walletRegistration.js +6 -3
- package/dist/esm/router/transport/fetch/routes/webauthnAuthenticators.js +1 -1
- package/dist/esm/shared-ts/src/authorization/index.js +1 -1
- package/dist/esm/shared-ts/src/authorization/walletAuthority.js +2 -2
- package/dist/esm/shared-ts/src/authorization/walletSessionIssuance.js +0 -1
- package/dist/esm/shared-ts/src/device-linking/activeWalletSession.js +12 -2
- package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +0 -2
- package/dist/esm/shared-ts/src/device-linking/contracts.js +16 -1
- package/dist/esm/shared-ts/src/device-linking/digests.js +2 -9
- package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +1 -1
- package/dist/esm/shared-ts/src/device-linking/index.js +1 -1
- package/dist/esm/shared-ts/src/device-linking/parsers.js +1 -1
- package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +1 -1
- package/dist/esm/shared-ts/src/device-linking/wireFields.js +1 -1
- package/dist/esm/shared-ts/src/near/actions.js +0 -1
- package/dist/esm/shared-ts/src/near/nearClient.js +1 -3
- package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -1
- package/dist/esm/shared-ts/src/signing-lanes/index.js +1 -6
- package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +3 -3
- package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +2 -81
- package/dist/esm/shared-ts/src/signing-lanes/participants.js +1 -219
- package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +0 -3
- package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +1 -2
- package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +0 -1
- package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +1 -22
- package/dist/esm/shared-ts/src/threshold/participants.js +0 -1
- package/dist/esm/shared-ts/src/threshold/signingRootScope.js +0 -1
- package/dist/esm/shared-ts/src/utils/addWalletAuthMethod.js +4 -13
- package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +1 -7
- package/dist/esm/shared-ts/src/utils/domainIds.js +1 -16
- package/dist/esm/shared-ts/src/utils/ecdsaCapabilityActivation.js +1 -11
- package/dist/esm/shared-ts/src/utils/ecdsaKeyFactsInventory.js +0 -1
- package/dist/esm/shared-ts/src/utils/ecdsaServerTiming.js +6 -1
- package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +4 -2
- package/dist/esm/shared-ts/src/utils/errors.js +1 -19
- package/dist/esm/shared-ts/src/utils/near.js +1 -1
- package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +1 -1
- package/dist/esm/shared-ts/src/utils/registrationIds.js +1 -5
- package/dist/esm/shared-ts/src/utils/registrationIntent.js +0 -1
- package/dist/esm/shared-ts/src/utils/registrationSetupOperation.js +8 -0
- package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +1 -1
- package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +1 -2
- package/dist/esm/shared-ts/src/utils/routerAbPublicKeyset.js +0 -27
- package/dist/esm/shared-ts/src/utils/validation.js +1 -5
- package/dist/esm/shared-ts/src/utils/walletAuthAuthority.js +0 -1
- package/dist/esm/shared-ts/src/utils/walletManagementProtocol.js +6 -0
- package/dist/esm/shared-ts/src/utils/wireSchema.js +2 -13
- package/dist/esm/shared-ts/src/wallet-recovery/backupAcknowledgement.js +6 -24
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +0 -1
- package/dist/esm/shared-ts/src/wallet-recovery/recoveryKeyId.js +5 -6
- package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.js +1 -1
- package/dist/esm/storage/d1Sql.js +1 -7
- package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +0 -1
- package/dist/esm/threshold/session/signingSessionSeal/guards/backends.js +1 -2
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyBackends.js +0 -1
- package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +0 -1
- package/dist/esm/threshold/session/signingSessionSeal/options.js +1 -2
- package/dist/esm/wasm/evm_crypto/pkg/evm_crypto_bg.wasm +0 -0
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +0 -611
- package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
- package/dist/esm/wasm/shamir3pass_runtime/pkg/shamir3pass_runtime_bg.wasm +0 -0
- package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +0 -4
- package/dist/types/shared-ts/src/device-linking/activeWalletSession.d.ts +2 -1
- package/dist/types/shared-ts/src/device-linking/contracts.d.ts +11 -0
- package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +0 -11
- package/dist/types/shared-ts/src/signing-lanes/ids.d.ts +2 -7
- package/dist/types/shared-ts/src/signing-lanes/index.d.ts +0 -4
- package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +0 -1
- package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +0 -18
- package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +6 -35
- package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +6 -843
- package/dist/types/shared-ts/src/threshold/ed25519OperationFingerprint.d.ts +2 -1
- package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +0 -10
- package/dist/types/shared-ts/src/threshold/participants.d.ts +1 -1
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +1 -133
- package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +4 -18
- package/dist/types/shared-ts/src/utils/domainIds.d.ts +0 -12
- package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +3 -1
- package/dist/types/shared-ts/src/utils/errors.d.ts +0 -4
- package/dist/types/shared-ts/src/utils/near.d.ts +0 -20
- package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -2
- package/dist/types/shared-ts/src/utils/registrationSetupOperation.d.ts +3 -0
- package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts +0 -9
- package/dist/types/shared-ts/src/utils/validation.d.ts +1 -3
- package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +0 -1
- package/dist/types/shared-ts/src/utils/walletManagementProtocol.d.ts +3 -0
- package/dist/types/shared-ts/src/utils/wireSchema.d.ts +0 -2
- package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +0 -1
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +1 -10
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodes.d.ts +1 -3
- package/dist/types/shared-ts/src/wallet-recovery/recoveryKeyId.d.ts +5 -21
- package/dist/types/wallet-server/src/authorization/domain.d.ts +17 -1
- package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.d.ts +1 -0
- package/dist/types/wallet-server/src/authorization/ed25519WalletSessionAdmission.d.ts +35 -0
- package/dist/types/wallet-server/src/authorization/ed25519WalletSessionAdmission.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/authorization/lifecycleRouting.d.ts +32 -0
- package/dist/types/wallet-server/src/authorization/lifecycleRouting.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/authorization/recoveryRouting.d.ts +22 -0
- package/dist/types/wallet-server/src/authorization/recoveryRouting.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/authorization/service.d.ts +50 -5
- package/dist/types/wallet-server/src/authorization/sessionRouting.d.ts +22 -0
- package/dist/types/wallet-server/src/authorization/sessionRouting.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/cloud-host.d.ts +36 -10
- package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +2 -22
- package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +20 -84
- package/dist/types/wallet-server/src/core/IdentityStore.d.ts +0 -10
- package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +0 -1
- package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -2
- package/dist/types/wallet-server/src/core/ThresholdService/index.d.ts +1 -3
- package/dist/types/wallet-server/src/core/ThresholdService/kv.d.ts +0 -7
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +1 -3
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.d.ts +6 -0
- package/dist/types/wallet-server/src/core/ThresholdService/routerAb/internalServiceHttp.d.ts +1 -0
- package/dist/types/wallet-server/src/core/ThresholdService/routerAbNormalSigningPolicy.d.ts +0 -1
- package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +7 -19
- package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +0 -34
- package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +1 -5
- package/dist/types/wallet-server/src/core/WalletStore.d.ts +0 -3
- package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +0 -20
- package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +1 -27
- package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +2 -16
- package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +22 -14
- package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +0 -24
- package/dist/types/wallet-server/src/core/authService/emailOtpEnrollment.d.ts +1 -70
- package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +0 -13
- package/dist/types/wallet-server/src/core/authService/githubOAuth.d.ts +2 -1
- package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +1 -39
- package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -17
- package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +0 -125
- package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +1 -1
- package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +0 -12
- package/dist/types/wallet-server/src/core/config.d.ts +0 -10
- package/dist/types/wallet-server/src/core/d1Ed25519SignerRead.d.ts +17 -0
- package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +0 -2
- package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +0 -7
- package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +0 -1
- package/dist/types/wallet-server/src/core/d1WalletStore.d.ts +6 -0
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceBootstrap.d.ts +19 -0
- package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +8 -6
- package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -5
- package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +11 -7
- package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +1 -5
- package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +0 -1
- package/dist/types/wallet-server/src/core/passkeyCredentialClaims.d.ts +9 -0
- package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbEcdsaPresignRuntime.d.ts +5 -3
- package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +0 -2
- package/dist/types/wallet-server/src/core/signingMaterial/ordinaryInactiveSignerMaterialReservation.d.ts +1 -0
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +15 -140
- package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +4 -52
- package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +0 -1
- package/dist/types/wallet-server/src/core/types.d.ts +0 -299
- package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +18 -5
- package/dist/types/wallet-server/src/index.d.ts +8 -13
- package/dist/types/wallet-server/src/localIntendedYaoSigningFault.d.ts +1 -16
- package/dist/types/wallet-server/src/localRegistrationSetupAuthority.d.ts +13 -0
- package/dist/types/wallet-server/src/router/auth/commonRouterUtils.d.ts +7 -1
- package/dist/types/wallet-server/src/router/auth/routerApiCredentialAuth.d.ts +11 -3
- package/dist/types/wallet-server/src/router/auth/walletRegistrationContext.d.ts +8 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizationAssembly.d.ts +23 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1EmailOtpRouteService.d.ts +16 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +28 -3
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthService.d.ts +4 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/auth/walletSessionCredentialReaders.d.ts +7 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +33 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +5 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +7 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.d.ts +1 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.d.ts +4 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +6 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +1 -13
- package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.d.ts +3 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.d.ts +1 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoStateWriteFence.d.ts +8 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1WalletCeremonyActivity.d.ts +15 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.d.ts +6 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.d.ts +2 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +2 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.d.ts +4 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpCounters.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +0 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +6 -13
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.d.ts +21 -7
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +29 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -16
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.d.ts +7 -2
- package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.d.ts +23 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityService.d.ts +0 -12
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.d.ts +24 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/d1OidcVerificationService.d.ts +0 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/googleOidcToken.d.ts +4 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +26 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +33 -8
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -11
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +17 -7
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationSessionTransaction.d.ts +13 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationSetupSupport.d.ts +58 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletExecutionAuthority.d.ts +41 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletOperationStore.d.ts +28 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +9 -9
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationInitialSession.d.ts +17 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationPreparation.d.ts +12 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationRead.d.ts +43 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +52 -90
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +3 -30
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.d.ts +16 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.d.ts +42 -14
- package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.d.ts +5 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.d.ts +24 -1
- package/dist/types/wallet-server/src/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.d.ts +10 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/authorizationSnapshotLayout.d.ts +21 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.d.ts +27 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +4 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +5 -9
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +8 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorizationCleanup.d.ts +20 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorizationFreeze.d.ts +12 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorizationHistory.d.ts +20 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorizationIntake.d.ts +29 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorizationSnapshot.d.ts +31 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationApprovals.d.ts +49 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationChallenges.d.ts +47 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationEmailOtp.d.ts +25 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationOwner.d.ts +88 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationOwnerRequest.d.ts +37 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationPasskey.d.ts +12 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationReadAccess.d.ts +18 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationSessions.d.ts +23 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationWriteBlock.d.ts +16 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/walletObjectAddresses.d.ts +14 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +0 -13
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +23 -10
- package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/cloudflare.types.d.ts +0 -2
- package/dist/types/wallet-server/src/router/cloudflare/runtime/routerAbServiceBindings.d.ts +13 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletAuthorizationRelocationRoutes.d.ts +21 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOps.d.ts +1 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOpsClient.d.ts +3 -1
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletControlOps.d.ts +2 -1
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +3 -1
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletObjectAddresses.d.ts +45 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletPlacementRoutes.d.ts +30 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRelocationDeriver.d.ts +11 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRelocationEcdsa.d.ts +7 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRelocationEd25519.d.ts +7 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRelocationOps.d.ts +11 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRelocationPresign.d.ts +7 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRelocationSource.d.ts +26 -0
- package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRuntimeOps.d.ts +3 -0
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.d.ts +5 -0
- package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +0 -1
- package/dist/types/wallet-server/src/router/domains/ecdsa/routerAbEcdsaStrictRegistration.d.ts +3 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoCapabilityCommit.d.ts +7 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +42 -8
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.d.ts +33 -2
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -2
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +14 -8
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.d.ts +17 -9
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryWalletSessionAuthorization.d.ts +2 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.d.ts +13 -14
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.d.ts +7 -3
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.d.ts +1 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.d.ts +6 -1
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.d.ts +11 -0
- package/dist/types/wallet-server/src/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.d.ts +12 -3
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +0 -2
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/registrationCustodyOutcome.d.ts +10 -6
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationAdmission.d.ts +10 -3
- package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +12 -8
- package/dist/types/wallet-server/src/router/domains/signingOperations/authorizedOperationWire.d.ts +97 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/ecdsaSigningResponse.d.ts +13 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmission.d.ts +9 -206
- package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +0 -17
- package/dist/types/wallet-server/src/router/domains/signingOperations/signingPrepareSession.d.ts +23 -0
- package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +1 -2
- package/dist/types/wallet-server/src/router/domains/walletRegistration/registrationSessionSeal.d.ts +36 -0
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +8 -7
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationReservation.d.ts +125 -0
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +17 -15
- package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +2 -2
- package/dist/types/wallet-server/src/router/framework/apiCredentialPorts.d.ts +24 -0
- package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +35 -41
- package/dist/types/wallet-server/src/router/framework/googleLoginResolution.typecheck.d.ts +2 -0
- package/dist/types/wallet-server/src/router/framework/registrationSetupDispatch.d.ts +13 -0
- package/dist/types/wallet-server/src/router/framework/routerApi.d.ts +3 -12
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +1 -1
- package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingResponses.d.ts +17 -0
- package/dist/types/wallet-server/src/router/transport/fetch/routes/ecdsaOperationStepUpFactor.d.ts +37 -0
- package/dist/types/wallet-server/src/router/transport/fetch/routes/ed25519AuthorizedOperationRevalidation.d.ts +37 -0
- package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEcdsa.d.ts +1 -17
- package/dist/types/wallet-server/src/storage/d1Sql.d.ts +0 -1
- package/dist/types/wallet-server/src/storage/tenantRoute.d.ts +1 -1
- package/migrations/d1-signer/0040_namespace_home_challenges.sql +16 -0
- package/migrations/d1-signer/0041_step_up_admission_expiry.sql +28 -0
- package/migrations/d1-signer/0042_deployment_resource_challenges.sql +4 -0
- package/migrations/d1-signer/0043_google_registration_candidate_claim.sql +2 -0
- package/migrations/d1-signer/0044_linked_device_bootstrap_imports.sql +6 -0
- package/migrations/d1-signer/0045_wallet_owned_capability_receipts.sql +29 -0
- package/migrations/d1-signer/0046_wallet_owned_signing_abuse.sql +41 -0
- package/migrations/d1-signer/0047_remove_unused_near_public_keys.sql +2 -0
- package/migrations/d1-signer/0048_operation_owner_scope.sql +45 -0
- package/migrations/d1-signer/0049_wallet_relocation_challenges.sql +16 -0
- package/migrations/d1-signer/0050_wallet_relocation_approvals.sql +14 -0
- package/migrations/d1-signer/0051_wallet_relocation_email_otp.sql +92 -0
- package/migrations/d1-signer/0052_wallet_relocation_session_fences.sql +91 -0
- package/migrations/d1-signer/0053_wallet_hosted_history_import.sql +164 -0
- package/migrations/d1-signer/0054_wallet_authorization_freeze.sql +318 -0
- package/migrations/d1-signer/0055_wallet_authorization_snapshot.sql +120 -0
- package/migrations/d1-signer/0056_wallet_authorization_history_import.sql +424 -0
- package/migrations/d1-signer/0057_wallet_authorization_intake.sql +44 -0
- package/migrations/d1-signer/0058_wallet_ceremony_activity.sql +59 -0
- package/migrations/d1-signer/0059_wallet_authorization_activation.sql +45 -0
- package/migrations/d1-signer/0060_wallet_authorization_cleanup.sql +153 -0
- package/migrations/d1-signer/0061_wallet_session_operation_settlement.sql +28 -0
- package/migrations/d1-signer/0062_wallet_step_up_operation_settlement.sql +204 -0
- package/migrations/d1-signer/0063_wallet_operation_history_transfer.sql +466 -0
- package/migrations/d1-signer/0064_wallet_execution_generations.sql +93 -0
- package/migrations/d1-signer/0065_wallet_operation_execution_generation.sql +37 -0
- package/migrations/d1-signer/0066_regional_deployment_admission.sql +59 -0
- package/migrations/d1-signer/0067_registration_completion_decision.sql +12 -0
- package/migrations/d1-signer/0068_registration_cancellation_write_fence.sql +24 -0
- package/migrations/d1-signer/0069_cancelled_registration_session_fence.sql +11 -0
- package/migrations/d1-signer/0070_wallet_passkey_relocation.sql +369 -0
- package/migrations/d1-signer/0071_regional_wallet_otp_counters.sql +98 -0
- package/migrations/d1-signer/0072_linked_device_relocation_history.sql +899 -0
- package/migrations/d1-signer/0073_wallet_recovery_relocation.sql +86 -0
- package/migrations/d1-signer/0074_email_otp_relocation.sql +158 -0
- package/migrations/d1-signer/0075_wallet_authorization_return.sql +107 -0
- package/migrations/d1-signer/0076_wallet_relocation_write_block.sql +406 -0
- package/migrations/d1-signer/0077_wallet_object_addresses.sql +24 -0
- package/package.json +2 -3
- package/src/README.md +33 -3
- package/cloudflare-router-ab/scripts/local-key-material.mjs +0 -29
- package/dist/esm/core/AuthService.js +0 -2
- package/dist/esm/core/NearPublicKeyStore.js +0 -200
- package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +0 -397
- package/dist/esm/core/ThresholdService/stores/KeyStore.js +0 -140
- package/dist/esm/core/ThresholdService/stores/SessionStore.js +0 -361
- package/dist/esm/core/ThresholdService/stores/StoreConfig.js +0 -13
- package/dist/esm/core/ThresholdService/stores/exportReplayGuard.js +0 -7
- package/dist/esm/core/authService/AuthService.js +0 -594
- package/dist/esm/core/authService/bytes.js +0 -19
- package/dist/esm/core/authService/configValues.js +0 -15
- package/dist/esm/core/authService/emailOtpChallengeOperations.js +0 -123
- package/dist/esm/core/authService/emailOtpChallengeProof.js +0 -183
- package/dist/esm/core/authService/emailOtpChallengeVerification.js +0 -264
- package/dist/esm/core/authService/emailOtpChallenges.js +0 -225
- package/dist/esm/core/authService/emailOtpDelivery.js +0 -134
- package/dist/esm/core/authService/emailOtpGrant.js +0 -43
- package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +0 -144
- package/dist/esm/core/authService/emailOtpUnlock.js +0 -174
- package/dist/esm/core/authService/googleEmailOtpOperations.js +0 -141
- package/dist/esm/core/authService/googleEmailOtpRegistration.js +0 -587
- package/dist/esm/core/authService/identity.js +0 -42
- package/dist/esm/core/authService/identityOperations.js +0 -32
- package/dist/esm/core/authService/nearAccountOperations.js +0 -229
- package/dist/esm/core/authService/nearPublicKeyMetadata.js +0 -108
- package/dist/esm/core/authService/oidcVerification.js +0 -249
- package/dist/esm/core/authService/registrationThresholdHelpers.js +0 -30
- package/dist/esm/core/authService/runtime.js +0 -45
- package/dist/esm/core/authService/storeRegistry.js +0 -102
- package/dist/esm/core/authService/thresholdStoreSummary.js +0 -32
- package/dist/esm/core/authService/webauthnAuthority.js +0 -17
- package/dist/esm/core/defaultConfigsServer.js +0 -9
- package/dist/esm/core/hostedAccountIds.js +0 -225
- package/dist/esm/core/routerAbSigning/createRouterAbSigningRuntimes.js +0 -84
- package/dist/esm/core/signingLanes/LaneAggregateRevocationApplicationService.js +0 -86
- package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +0 -324
- package/dist/esm/core/signingLanes/LaneEnrollmentRevocation.js +0 -173
- package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +0 -198
- package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +0 -73
- package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +0 -68
- package/dist/esm/core/storeBackends.js +0 -208
- package/dist/esm/core/utils.js +0 -14
- package/dist/esm/core/webAuthnStoreBackends.js +0 -198
- package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +0 -49
- package/dist/esm/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.js +0 -10
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.js +0 -22
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -166
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.js +0 -38
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.js +0 -20
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +0 -1459
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLockStore.js +0 -114
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.js +0 -16
- package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +0 -171
- package/dist/esm/router/cloudflare/d1/signingLanes/index.js +0 -10
- package/dist/esm/router/cloudflare/durableObjects/thresholdStore.js +0 -397
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +0 -597
- package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +0 -273
- package/dist/esm/router/cloudflare/signingLanes/index.js +0 -4
- package/dist/esm/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.js +0 -32
- package/dist/esm/router/transport/fetch/routes/nearPublicKeys.js +0 -27
- package/dist/esm/shared-ts/src/signing-lanes/rotation.js +0 -8
- package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +0 -358
- package/dist/esm/shared-ts/src/signing-lanes/rotationLifecycle.js +0 -313
- package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +0 -532
- package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +0 -323
- package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +0 -59
- package/dist/types/shared-ts/src/signing-lanes/participantDigest.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/rotation.typecheck.d.ts +0 -2
- package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +0 -13
- package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +0 -78
- package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +0 -27
- package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +0 -6
- package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +0 -20
- package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeAttempt.d.ts +0 -59
- package/dist/types/wallet-server/src/core/AuthService.d.ts +0 -3
- package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +0 -48
- package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +0 -21
- package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +0 -40
- package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +0 -98
- package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +0 -4
- package/dist/types/wallet-server/src/core/ThresholdService/stores/ThresholdStoreConfig.typecheck.d.ts +0 -2
- package/dist/types/wallet-server/src/core/ThresholdService/stores/exportReplayGuard.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -490
- package/dist/types/wallet-server/src/core/authService/bytes.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/configValues.d.ts +0 -7
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +0 -109
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +0 -169
- package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +0 -47
- package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +0 -86
- package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +0 -66
- package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +0 -43
- package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +0 -49
- package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +0 -64
- package/dist/types/wallet-server/src/core/authService/googleEmailOtpOperations.d.ts +0 -126
- package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +0 -169
- package/dist/types/wallet-server/src/core/authService/identity.d.ts +0 -25
- package/dist/types/wallet-server/src/core/authService/identityOperations.d.ts +0 -19
- package/dist/types/wallet-server/src/core/authService/nearAccountOperations.d.ts +0 -55
- package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +0 -44
- package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +0 -66
- package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -11
- package/dist/types/wallet-server/src/core/authService/runtime.d.ts +0 -20
- package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -53
- package/dist/types/wallet-server/src/core/authService/thresholdStoreSummary.d.ts +0 -3
- package/dist/types/wallet-server/src/core/authService/webauthnAuthority.d.ts +0 -5
- package/dist/types/wallet-server/src/core/defaultConfigsServer.d.ts +0 -5
- package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -16
- package/dist/types/wallet-server/src/core/routerAbSigning/createRouterAbSigningRuntimes.d.ts +0 -16
- package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +0 -36
- package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +0 -62
- package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentActivation.d.ts +0 -13
- package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentRevocation.d.ts +0 -24
- package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleApplicationService.d.ts +0 -141
- package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +0 -228
- package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +0 -58
- package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +0 -30
- package/dist/types/wallet-server/src/core/signingLanes/signingWorkerLaneMaterialIdentity.d.ts +0 -4
- package/dist/types/wallet-server/src/core/storeBackends.d.ts +0 -83
- package/dist/types/wallet-server/src/core/utils.d.ts +0 -3
- package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +0 -96
- package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +0 -29
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -24
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.d.ts +0 -20
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.d.ts +0 -13
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.d.ts +0 -51
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLockStore.d.ts +0 -28
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.d.ts +0 -5
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneRecords.d.ts +0 -107
- package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/index.d.ts +0 -10
- package/dist/types/wallet-server/src/router/cloudflare/durableObjects/thresholdStore.d.ts +0 -18
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.d.ts +0 -217
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.d.ts +0 -73
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/index.d.ts +0 -4
- package/dist/types/wallet-server/src/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.d.ts +0 -6
- package/dist/types/wallet-server/src/router/transport/fetch/routes/nearPublicKeys.d.ts +0 -3
- /package/dist/esm/{core/signingLanes/LaneEffectJournalStore.js → authorization/ed25519WalletSessionAdmission.js} +0 -0
- /package/dist/esm/{core/signingLanes/LaneLifecycleStore.js → authorization/recoveryRouting.js} +0 -0
- /package/dist/esm/{core/signingLanes/signingWorkerLaneMaterialIdentity.js → authorization/sessionRouting.js} +0 -0
|
@@ -1,30 +1,8 @@
|
|
|
1
|
-
import type {
|
|
2
|
-
import type {
|
|
3
|
-
import type {
|
|
4
|
-
import type { EcdsaCapabilityManifestId, EcdsaCapabilityManifestRevision, EcdsaLifecycleId, EcdsaServerGeneration } from '../utils/ecdsaCapabilityActivation';
|
|
5
|
-
import type { CorrelationId, DigestB64u, IsoTimestamp } from '../utils/canonicalPrimitives';
|
|
6
|
-
import type { NearEd25519SigningKeyId } from '../utils/registrationIds';
|
|
7
|
-
import type { EcdsaThresholdKeyId } from '../threshold/ecdsaDerivationRoleLocalBootstrap';
|
|
8
|
-
import type { EcdsaManifestIdentity, EcdsaRelayerKeyId, Ed25519YaoSuiteId, LaneEnrollmentId, LaneOperationId, LaneOperationIdempotencyKey, LaneShareEpoch, LinkedDeviceEnrollmentId, SigningLaneId, ThresholdEcdsaChainTarget, WalletKeyId } from './ids';
|
|
9
|
-
import type { LaneHolderParticipantId, HpkePublicKeyB64u, HpkePublicKeyDigestB64u, LaneCustodyBindingDigestB64u, LaneParticipantBindingDigestB64u, LaneHolderCustodyBindingId, SigningWorkerParticipantId, SigningWorkerRecipientKeyId, LaneHolderParticipantRecordV1, SigningWorkerParticipantRecordV1 } from './participants';
|
|
10
|
-
import type { EvmFamilySigningKeySlotId } from './evmFamilySigningKeySlotId';
|
|
1
|
+
import type { MpcMaterialActivationRef } from '../utils/domainIds';
|
|
2
|
+
import type { LaneShareEpoch, SigningLaneId } from './ids';
|
|
3
|
+
import type { LaneHolderParticipantId, SigningWorkerParticipantId, SigningWorkerRecipientKeyId } from './participants';
|
|
11
4
|
import type { SigningLaneKind } from './records';
|
|
12
5
|
import type { OwnerLaneParticipantContinuityV1 } from './ownerContinuity';
|
|
13
|
-
import type { ExclusiveUnion } from '../utils/variant';
|
|
14
|
-
export type LinkedDeviceLaneAuthorizationBindingV1 = {
|
|
15
|
-
kind: 'linked_device_enrollment';
|
|
16
|
-
authorizedOperationId: AuthorizedOperationId;
|
|
17
|
-
linkedDeviceEnrollmentId: LinkedDeviceEnrollmentId;
|
|
18
|
-
linkedDevicePermissionDigestB64u: string;
|
|
19
|
-
ownerLaneRefreshDigestB64u?: never;
|
|
20
|
-
};
|
|
21
|
-
export type OwnerLaneRefreshAuthorizationBindingV1 = {
|
|
22
|
-
kind: 'owner_lane_refresh';
|
|
23
|
-
authorizedOperationId: AuthorizedOperationId;
|
|
24
|
-
ownerLaneRefreshDigestB64u: string;
|
|
25
|
-
linkedDevicePermissionDigestB64u?: never;
|
|
26
|
-
};
|
|
27
|
-
export type LaneOperationAuthorizationBindingV1 = LinkedDeviceLaneAuthorizationBindingV1 | OwnerLaneRefreshAuthorizationBindingV1;
|
|
28
6
|
type ActiveLaneProtocolSourceBaseV1 = {
|
|
29
7
|
laneId: SigningLaneId;
|
|
30
8
|
laneShareEpoch: LaneShareEpoch;
|
|
@@ -33,7 +11,7 @@ type ActiveLaneProtocolSourceBaseV1 = {
|
|
|
33
11
|
materialActivation: MpcMaterialActivationRef;
|
|
34
12
|
};
|
|
35
13
|
/** Existing owner signer rows expose continuity, without linked-lane HPKE identities. */
|
|
36
|
-
|
|
14
|
+
type OwnerLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
|
|
37
15
|
sourceKind: 'owner_registration';
|
|
38
16
|
laneKind: 'owner_passkey' | 'owner_email_otp';
|
|
39
17
|
ownerParticipantContinuity: OwnerLaneParticipantContinuityV1;
|
|
@@ -42,7 +20,7 @@ export type OwnerLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
|
|
|
42
20
|
signingWorkerRecipientKeyId?: never;
|
|
43
21
|
};
|
|
44
22
|
/** Independently provisioned lanes carry their durable holder/worker identities. */
|
|
45
|
-
|
|
23
|
+
type ProvisionedLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
|
|
46
24
|
sourceKind: 'provisioned_lane';
|
|
47
25
|
laneKind: Exclude<SigningLaneKind, 'owner_passkey' | 'owner_email_otp'>;
|
|
48
26
|
holderParticipantId: LaneHolderParticipantId;
|
|
@@ -51,820 +29,5 @@ export type ProvisionedLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
|
|
|
51
29
|
ownerParticipantContinuity?: never;
|
|
52
30
|
};
|
|
53
31
|
export type ActiveLaneProtocolSourceV1 = OwnerLaneProtocolSourceV1 | ProvisionedLaneProtocolSourceV1;
|
|
54
|
-
export
|
|
55
|
-
type LaneTargetHolderV1 = {
|
|
56
|
-
participantId: LaneHolderParticipantId;
|
|
57
|
-
participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
|
|
58
|
-
custodyBindingId: LaneHolderCustodyBindingId;
|
|
59
|
-
custodyBindingDigestB64u: LaneCustodyBindingDigestB64u;
|
|
60
|
-
hpkePublicKeyB64u: HpkePublicKeyB64u;
|
|
61
|
-
hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
|
|
62
|
-
};
|
|
63
|
-
export type LaneTargetSigningWorkerV1 = {
|
|
64
|
-
participantId: SigningWorkerParticipantId;
|
|
65
|
-
participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
|
|
66
|
-
recipientKeyId: SigningWorkerRecipientKeyId;
|
|
67
|
-
hpkePublicKeyB64u: HpkePublicKeyB64u;
|
|
68
|
-
hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
|
|
69
|
-
};
|
|
70
|
-
export type LaneCreationTargetV1 = {
|
|
71
|
-
operation: 'create_lane';
|
|
72
|
-
laneId: SigningLaneId;
|
|
73
|
-
laneKind: 'linked_device';
|
|
74
|
-
laneShareEpoch: LaneShareEpoch;
|
|
75
|
-
expectedTargetState: 'absent';
|
|
76
|
-
priorMaterialActivation?: never;
|
|
77
|
-
};
|
|
78
|
-
export type LaneRefreshTargetV1 = {
|
|
79
|
-
operation: 'refresh_lane';
|
|
80
|
-
laneId: SigningLaneId;
|
|
81
|
-
laneKind: 'owner_passkey' | 'owner_email_otp' | 'linked_device' | 'recovery' | 'break_glass';
|
|
82
|
-
laneShareEpoch: LaneShareEpoch;
|
|
83
|
-
expectedTargetState: 'active_previous_epoch';
|
|
84
|
-
priorMaterialActivation: MpcMaterialActivationRef;
|
|
85
|
-
};
|
|
86
|
-
type EcdsaTargetThresholdSessionBindingV1 = {
|
|
87
|
-
chainTarget: ThresholdEcdsaChainTarget;
|
|
88
|
-
thresholdSessionId: ThresholdEcdsaSessionId;
|
|
89
|
-
participantBindingDigestB64u: string;
|
|
90
|
-
};
|
|
91
|
-
export type EcdsaSourceCapabilityBindingV1 = {
|
|
92
|
-
manifestId: EcdsaCapabilityManifestId;
|
|
93
|
-
manifestRevision: EcdsaCapabilityManifestRevision;
|
|
94
|
-
serverGeneration: EcdsaServerGeneration;
|
|
95
|
-
ecdsaThresholdKeyId: EcdsaThresholdKeyId;
|
|
96
|
-
relayerKeyId: EcdsaRelayerKeyId;
|
|
97
|
-
};
|
|
98
|
-
export type EcdsaTargetCapabilityBindingV1 = {
|
|
99
|
-
manifestId: EcdsaCapabilityManifestId;
|
|
100
|
-
manifestRevision: EcdsaCapabilityManifestRevision;
|
|
101
|
-
ecdsaThresholdKeyId: EcdsaThresholdKeyId;
|
|
102
|
-
orderedThresholdSessions: readonly [
|
|
103
|
-
EcdsaTargetThresholdSessionBindingV1,
|
|
104
|
-
...EcdsaTargetThresholdSessionBindingV1[]
|
|
105
|
-
];
|
|
106
|
-
};
|
|
107
|
-
type LaneProtocolJobCommonV1 = {
|
|
108
|
-
operationId: LaneOperationId;
|
|
109
|
-
enrollmentId: LaneEnrollmentId;
|
|
110
|
-
idempotencyKey: LaneOperationIdempotencyKey;
|
|
111
|
-
walletId: WalletId;
|
|
112
|
-
walletKeyId: WalletKeyId;
|
|
113
|
-
source: ActiveLaneProtocolSourceV1;
|
|
114
|
-
targetHolder: LaneTargetHolderV1;
|
|
115
|
-
targetSigningWorker: LaneTargetSigningWorkerV1;
|
|
116
|
-
targetMaterialActivationId: MpcMaterialActivationId;
|
|
117
|
-
protocolVersion: 'rotatable_signing_lane_protocol_v1';
|
|
118
|
-
expiresAtMs: number;
|
|
119
|
-
};
|
|
120
|
-
type LaneCreationOperationV1 = {
|
|
121
|
-
target: LaneCreationTargetV1;
|
|
122
|
-
authorization: LinkedDeviceLaneAuthorizationBindingV1;
|
|
123
|
-
};
|
|
124
|
-
type LaneRefreshOperationV1 = {
|
|
125
|
-
target: LaneRefreshTargetV1;
|
|
126
|
-
authorization: OwnerLaneRefreshAuthorizationBindingV1;
|
|
127
|
-
};
|
|
128
|
-
type Ed25519YaoLaneJobCurveV1 = {
|
|
129
|
-
kind: 'ed25519_yao_lane_job_v1';
|
|
130
|
-
keyFamily: 'ed25519';
|
|
131
|
-
registeredPublicKeyB64u: string;
|
|
132
|
-
nearEd25519SigningKeyId: NearEd25519SigningKeyId;
|
|
133
|
-
keyCreationSignerSlot: KeyCreationSignerSlot;
|
|
134
|
-
stableContextBindingB64u: string;
|
|
135
|
-
yaoSuiteId: Ed25519YaoSuiteId;
|
|
136
|
-
circuitDigestB64u: string;
|
|
137
|
-
evmFamilySigningKeySlotId?: never;
|
|
138
|
-
thresholdPublicKey33B64u?: never;
|
|
139
|
-
evmAddress?: never;
|
|
140
|
-
};
|
|
141
|
-
type EcdsaAdditiveLaneJobCurveV1 = {
|
|
142
|
-
kind: 'ecdsa_additive_lane_job_v1';
|
|
143
|
-
keyFamily: 'ecdsa_secp256k1';
|
|
144
|
-
evmFamilySigningKeySlotId: EvmFamilySigningKeySlotId;
|
|
145
|
-
thresholdPublicKey33B64u: string;
|
|
146
|
-
evmAddress: string;
|
|
147
|
-
sourceCapability: EcdsaSourceCapabilityBindingV1;
|
|
148
|
-
targetCapability: EcdsaTargetCapabilityBindingV1;
|
|
149
|
-
sourceHolderVerifyingShare33B64u: string;
|
|
150
|
-
sourceServerVerifyingShare33B64u: string;
|
|
151
|
-
reshareChannelBindingDigestB64u: string;
|
|
152
|
-
transcriptEncoding: 'ecdsa_additive_lane_transcript_v1';
|
|
153
|
-
nearEd25519SigningKeyId?: never;
|
|
154
|
-
registeredPublicKeyB64u?: never;
|
|
155
|
-
keyCreationSignerSlot?: never;
|
|
156
|
-
stableContextBindingB64u?: never;
|
|
157
|
-
yaoRequestKind?: never;
|
|
158
|
-
yaoSuiteId?: never;
|
|
159
|
-
circuitDigestB64u?: never;
|
|
160
|
-
};
|
|
161
|
-
export type Ed25519YaoLaneCreationJobV1 = LaneProtocolJobCommonV1 & Ed25519YaoLaneJobCurveV1 & LaneCreationOperationV1 & {
|
|
162
|
-
yaoRequestKind: 'lane_provisioning';
|
|
163
|
-
};
|
|
164
|
-
type Ed25519YaoLaneRefreshJobV1 = LaneProtocolJobCommonV1 & Ed25519YaoLaneJobCurveV1 & LaneRefreshOperationV1 & {
|
|
165
|
-
yaoRequestKind: 'lane_refresh';
|
|
166
|
-
};
|
|
167
|
-
export type Ed25519YaoLaneJobV1 = Ed25519YaoLaneCreationJobV1 | Ed25519YaoLaneRefreshJobV1;
|
|
168
|
-
export type EcdsaAdditiveLaneCreationJobV1 = LaneProtocolJobCommonV1 & LaneCreationOperationV1 & EcdsaAdditiveLaneJobCurveV1;
|
|
169
|
-
type EcdsaAdditiveLaneRefreshJobV1 = LaneProtocolJobCommonV1 & LaneRefreshOperationV1 & EcdsaAdditiveLaneJobCurveV1;
|
|
170
|
-
export type EcdsaAdditiveLaneJobV1 = EcdsaAdditiveLaneCreationJobV1 | EcdsaAdditiveLaneRefreshJobV1;
|
|
171
|
-
export type RotatableSigningLaneJobV1 = Ed25519YaoLaneJobV1 | EcdsaAdditiveLaneJobV1;
|
|
172
|
-
export type LaneProtocolCommitReceiptV1 = {
|
|
173
|
-
kind: 'lane_protocol_commit_receipt_v1';
|
|
174
|
-
operationId: LaneOperationId;
|
|
175
|
-
enrollmentId: LaneEnrollmentId;
|
|
176
|
-
walletId: WalletId;
|
|
177
|
-
walletKeyId: WalletKeyId;
|
|
178
|
-
sourceLaneId: SigningLaneId;
|
|
179
|
-
sourceLaneShareEpoch: LaneShareEpoch;
|
|
180
|
-
sourceRevocationEpoch: number;
|
|
181
|
-
sourceMaterialActivation: MpcMaterialActivationRef;
|
|
182
|
-
targetLaneId: SigningLaneId;
|
|
183
|
-
targetLaneShareEpoch: LaneShareEpoch;
|
|
184
|
-
targetMaterialActivationId: MpcMaterialActivationId;
|
|
185
|
-
keyFamily: 'ed25519' | 'ecdsa_secp256k1';
|
|
186
|
-
publicIdentityDigestB64u: string;
|
|
187
|
-
targetHolderPublicCommitmentB64u: string;
|
|
188
|
-
targetServerPublicCommitmentB64u: string;
|
|
189
|
-
targetHolderCiphertextDigestSetB64u: string;
|
|
190
|
-
targetServerCiphertextDigestSetB64u: string;
|
|
191
|
-
holderRecipientKeyDigestB64u: string;
|
|
192
|
-
serverRecipientKeyDigestB64u: string;
|
|
193
|
-
transcriptHashB64u: string;
|
|
194
|
-
committedAtMs: number;
|
|
195
|
-
};
|
|
196
|
-
export type LaneHolderDeliveryReceiptV1 = {
|
|
197
|
-
kind: 'lane_holder_delivery_receipt_v1';
|
|
198
|
-
operationId: LaneOperationId;
|
|
199
|
-
enrollmentId: LaneEnrollmentId;
|
|
200
|
-
targetLaneId: SigningLaneId;
|
|
201
|
-
targetLaneShareEpoch: LaneShareEpoch;
|
|
202
|
-
targetMaterialActivationId: MpcMaterialActivationId;
|
|
203
|
-
holderParticipantBindingDigestB64u: string;
|
|
204
|
-
holderRecipientKeyDigestB64u: string;
|
|
205
|
-
holderCiphertextDigestSetB64u: string;
|
|
206
|
-
sealedHolderRecordDigestB64u: string;
|
|
207
|
-
transcriptHashB64u: string;
|
|
208
|
-
acknowledgedAtMs: number;
|
|
209
|
-
};
|
|
210
|
-
export type LaneServerActivationReceiptV1 = {
|
|
211
|
-
kind: 'lane_server_activation_receipt_v1';
|
|
212
|
-
operationId: LaneOperationId;
|
|
213
|
-
enrollmentId: LaneEnrollmentId;
|
|
214
|
-
targetLaneId: SigningLaneId;
|
|
215
|
-
targetLaneShareEpoch: LaneShareEpoch;
|
|
216
|
-
targetMaterialActivation: MpcMaterialActivationRef;
|
|
217
|
-
signingWorkerParticipantBindingDigestB64u: string;
|
|
218
|
-
serverCiphertextDigestSetB64u: string;
|
|
219
|
-
transcriptHashB64u: string;
|
|
220
|
-
activatedAtMs: number;
|
|
221
|
-
};
|
|
222
|
-
type LaneProtocolAbortReason = 'cancelled' | 'expired' | 'revoked_before_commit';
|
|
223
|
-
type LaneProtocolCompletionReason = 'exact_redelivery_required' | 'recovery_required';
|
|
224
|
-
export type LaneProtocolLifecycle = {
|
|
225
|
-
state: 'preparing';
|
|
226
|
-
startedAtMs: number;
|
|
227
|
-
} | {
|
|
228
|
-
state: 'awaiting_protocol_commitment';
|
|
229
|
-
startedAtMs: number;
|
|
230
|
-
} | {
|
|
231
|
-
state: 'committed_awaiting_holder_delivery';
|
|
232
|
-
startedAtMs: number;
|
|
233
|
-
committedAtMs: number;
|
|
234
|
-
transcriptHashB64u: string;
|
|
235
|
-
protocolCommitReceiptDigestB64u: string;
|
|
236
|
-
} | {
|
|
237
|
-
state: 'awaiting_server_activation';
|
|
238
|
-
startedAtMs: number;
|
|
239
|
-
committedAtMs: number;
|
|
240
|
-
transcriptHashB64u: string;
|
|
241
|
-
protocolCommitReceiptDigestB64u: string;
|
|
242
|
-
holderDeliveryReceiptDigestB64u: string;
|
|
243
|
-
holderReceiptAtMs: number;
|
|
244
|
-
} | {
|
|
245
|
-
state: 'ready_for_parent_visibility';
|
|
246
|
-
startedAtMs: number;
|
|
247
|
-
committedAtMs: number;
|
|
248
|
-
transcriptHashB64u: string;
|
|
249
|
-
protocolCommitReceiptDigestB64u: string;
|
|
250
|
-
holderDeliveryReceiptDigestB64u: string;
|
|
251
|
-
holderReceiptAtMs: number;
|
|
252
|
-
serverActivationReceiptDigestB64u: string;
|
|
253
|
-
serverActivatedAtMs: number;
|
|
254
|
-
} | {
|
|
255
|
-
state: 'active';
|
|
256
|
-
transcriptHashB64u: string;
|
|
257
|
-
protocolCommitReceiptDigestB64u: string;
|
|
258
|
-
holderDeliveryReceiptDigestB64u: string;
|
|
259
|
-
serverActivationReceiptDigestB64u: string;
|
|
260
|
-
aggregateActivationReceiptDigestB64u: string;
|
|
261
|
-
activatedAtMs: number;
|
|
262
|
-
} | {
|
|
263
|
-
state: 'aborted_precommit';
|
|
264
|
-
startedAtMs: number;
|
|
265
|
-
abortedAtMs: number;
|
|
266
|
-
abortReason: LaneProtocolAbortReason;
|
|
267
|
-
} | {
|
|
268
|
-
state: 'committed_completion_required';
|
|
269
|
-
startedAtMs: number;
|
|
270
|
-
committedAtMs: number;
|
|
271
|
-
transcriptHashB64u: string;
|
|
272
|
-
protocolCommitReceiptDigestB64u: string;
|
|
273
|
-
recoveryReason: LaneProtocolCompletionReason;
|
|
274
|
-
};
|
|
275
|
-
export type LaneProtocolRecordV1 = {
|
|
276
|
-
job: RotatableSigningLaneJobV1;
|
|
277
|
-
lifecycle: LaneProtocolLifecycle;
|
|
278
|
-
};
|
|
279
|
-
export type EcdsaAdditiveLaneHolderRoundV1 = {
|
|
280
|
-
kind: 'ecdsa_additive_lane_holder_round_v1';
|
|
281
|
-
preambleHashB64u: string;
|
|
282
|
-
targetHolderPublicCommitment33B64u: string;
|
|
283
|
-
encryptedDeltaCiphertextDigestB64u: string;
|
|
284
|
-
sealedTargetHolderMaterialDigestB64u: string;
|
|
285
|
-
holderAttestationB64u: string;
|
|
286
|
-
holderCommittedAtMs: number;
|
|
287
|
-
};
|
|
288
|
-
export type LaneEnrollmentManifestChildV1 = {
|
|
289
|
-
operationId: LaneOperationId;
|
|
290
|
-
walletKeyId: WalletKeyId;
|
|
291
|
-
keyFamily: 'ed25519' | 'ecdsa_secp256k1';
|
|
292
|
-
sourceLaneId: SigningLaneId;
|
|
293
|
-
sourceLaneShareEpoch: LaneShareEpoch;
|
|
294
|
-
sourceRevocationEpoch: number;
|
|
295
|
-
sourceMaterialActivation: MpcMaterialActivationRef;
|
|
296
|
-
targetLaneId: SigningLaneId;
|
|
297
|
-
targetLaneShareEpoch: LaneShareEpoch;
|
|
298
|
-
targetMaterialActivationId: MpcMaterialActivationId;
|
|
299
|
-
holderParticipantBindingDigestB64u: string;
|
|
300
|
-
signingWorkerParticipantBindingDigestB64u: string;
|
|
301
|
-
};
|
|
302
|
-
export type LaneEnrollmentManifestV1 = {
|
|
303
|
-
kind: 'lane_enrollment_manifest_v1';
|
|
304
|
-
enrollmentId: LaneEnrollmentId;
|
|
305
|
-
walletId: WalletId;
|
|
306
|
-
authorization: LaneOperationAuthorizationBindingV1;
|
|
307
|
-
orderedChildren: readonly [LaneEnrollmentManifestChildV1, ...LaneEnrollmentManifestChildV1[]];
|
|
308
|
-
createdAtMs: number;
|
|
309
|
-
expiresAtMs: number;
|
|
310
|
-
};
|
|
311
|
-
export type AggregateLaneActivationChildReceiptV1 = {
|
|
312
|
-
operationId: LaneOperationId;
|
|
313
|
-
walletKeyId: WalletKeyId;
|
|
314
|
-
targetLaneId: SigningLaneId;
|
|
315
|
-
targetLaneShareEpoch: LaneShareEpoch;
|
|
316
|
-
targetMaterialActivation: MpcMaterialActivationRef;
|
|
317
|
-
protocolCommitReceiptDigestB64u: string;
|
|
318
|
-
holderDeliveryReceiptDigestB64u: string;
|
|
319
|
-
serverActivationReceiptDigestB64u: string;
|
|
320
|
-
};
|
|
321
|
-
export type AggregateLaneActivationReceiptV1 = {
|
|
322
|
-
kind: 'aggregate_lane_activation_receipt_v1';
|
|
323
|
-
enrollmentId: LaneEnrollmentId;
|
|
324
|
-
walletId: WalletId;
|
|
325
|
-
manifestDigestB64u: string;
|
|
326
|
-
orderedChildReceipts: readonly [
|
|
327
|
-
AggregateLaneActivationChildReceiptV1,
|
|
328
|
-
...AggregateLaneActivationChildReceiptV1[]
|
|
329
|
-
];
|
|
330
|
-
activatedAtMs: number;
|
|
331
|
-
};
|
|
332
|
-
export type LaneRefreshPredecessorRetirementV1 = {
|
|
333
|
-
refreshOperationId: LaneOperationId;
|
|
334
|
-
sourceLaneId: SigningLaneId;
|
|
335
|
-
sourceLaneShareEpoch: LaneShareEpoch;
|
|
336
|
-
sourceMaterialActivation: MpcMaterialActivationRef;
|
|
337
|
-
retirementEffectBindingDigestB64u: DigestB64u;
|
|
338
|
-
retirementReceipt: LaneServerRetirementReceiptV1;
|
|
339
|
-
};
|
|
340
|
-
export type CommitLaneEnrollmentActivationV1 = {
|
|
341
|
-
kind: 'commit_lane_enrollment_activation_v1';
|
|
342
|
-
enrollmentId: LaneEnrollmentId;
|
|
343
|
-
walletId: WalletId;
|
|
344
|
-
manifestDigestB64u: string;
|
|
345
|
-
orderedChildReceipts: readonly [
|
|
346
|
-
AggregateLaneActivationChildReceiptV1,
|
|
347
|
-
...AggregateLaneActivationChildReceiptV1[]
|
|
348
|
-
];
|
|
349
|
-
orderedPredecessorRetirements: readonly LaneRefreshPredecessorRetirementV1[];
|
|
350
|
-
activatedAtMs: number;
|
|
351
|
-
};
|
|
352
|
-
export type LaneEnrollmentLifecycleV1 = {
|
|
353
|
-
state: 'preparing';
|
|
354
|
-
manifestDigestB64u: string;
|
|
355
|
-
startedAtMs: number;
|
|
356
|
-
} | {
|
|
357
|
-
state: 'committed_completion_required';
|
|
358
|
-
manifestDigestB64u: string;
|
|
359
|
-
committedChildOperationIds: readonly [LaneOperationId, ...LaneOperationId[]];
|
|
360
|
-
markedAtMs: number;
|
|
361
|
-
} | {
|
|
362
|
-
state: 'ready_for_visibility';
|
|
363
|
-
manifestDigestB64u: string;
|
|
364
|
-
aggregateReceiptDigestB64u: string;
|
|
365
|
-
readyAtMs: number;
|
|
366
|
-
} | {
|
|
367
|
-
state: 'active';
|
|
368
|
-
manifestDigestB64u: string;
|
|
369
|
-
aggregateReceiptDigestB64u: string;
|
|
370
|
-
activatedAtMs: number;
|
|
371
|
-
} | {
|
|
372
|
-
state: 'cancelled_precommit';
|
|
373
|
-
cancelledAtMs: number;
|
|
374
|
-
} | {
|
|
375
|
-
state: 'revoking_committed_targets';
|
|
376
|
-
manifestDigestB64u: string;
|
|
377
|
-
reason: 'cancelled_after_commit' | 'expired_after_commit' | 'revoked_during_activation';
|
|
378
|
-
markedAtMs: number;
|
|
379
|
-
} | {
|
|
380
|
-
state: 'revoked';
|
|
381
|
-
manifestDigestB64u: string;
|
|
382
|
-
aggregateRevocationReceiptDigestB64u: string;
|
|
383
|
-
revokedAtMs: number;
|
|
384
|
-
};
|
|
385
|
-
export type EcdsaServerRetirementReceiptV1 = {
|
|
386
|
-
kind: 'ecdsa_server_retirement_receipt_v1';
|
|
387
|
-
manifest: EcdsaManifestIdentity;
|
|
388
|
-
materialActivation: MpcMaterialActivationRef;
|
|
389
|
-
walletKeyId: WalletKeyId;
|
|
390
|
-
laneId: SigningLaneId;
|
|
391
|
-
laneShareEpoch: LaneShareEpoch;
|
|
392
|
-
revocationEpoch: number;
|
|
393
|
-
retirementReason: 'lane_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
|
|
394
|
-
retirementCorrelationId: CorrelationId;
|
|
395
|
-
retirementRequestDigestB64u: string;
|
|
396
|
-
serverGeneration: EcdsaServerGeneration;
|
|
397
|
-
lifecycleId: EcdsaLifecycleId;
|
|
398
|
-
receiptDigestB64u: string;
|
|
399
|
-
retiredAt: IsoTimestamp;
|
|
400
|
-
};
|
|
401
|
-
export type SigningWorkerLaneMaterialIdentityV1<TKeyFamily extends 'ed25519' | 'ecdsa_secp256k1' = 'ed25519' | 'ecdsa_secp256k1'> = {
|
|
402
|
-
operationId: LaneOperationId;
|
|
403
|
-
enrollmentId: LaneEnrollmentId;
|
|
404
|
-
walletId: WalletId;
|
|
405
|
-
walletKeyId: WalletKeyId;
|
|
406
|
-
targetLaneId: SigningLaneId;
|
|
407
|
-
targetLaneShareEpoch: LaneShareEpoch;
|
|
408
|
-
targetMaterialActivationId: MpcMaterialActivationId;
|
|
409
|
-
keyFamily: TKeyFamily;
|
|
410
|
-
holderParticipantBindingDigestB64u: DigestB64u;
|
|
411
|
-
signingWorkerParticipantBindingDigestB64u: DigestB64u;
|
|
412
|
-
holderRecipientKeyDigestB64u: DigestB64u;
|
|
413
|
-
serverRecipientKeyDigestB64u: DigestB64u;
|
|
414
|
-
transcriptHashB64u: DigestB64u;
|
|
415
|
-
protocolCommitReceiptDigestB64u: DigestB64u;
|
|
416
|
-
};
|
|
417
|
-
export type Ed25519ServerRetirementReceiptV1 = {
|
|
418
|
-
kind: 'ed25519_server_retirement_receipt_v1';
|
|
419
|
-
identity: SigningWorkerLaneMaterialIdentityV1<'ed25519'>;
|
|
420
|
-
revocationEpoch: number;
|
|
421
|
-
retirementReason: 'lane_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
|
|
422
|
-
retirementCorrelationId: CorrelationId;
|
|
423
|
-
retirementRequestDigestB64u: DigestB64u;
|
|
424
|
-
receiptDigestB64u: DigestB64u;
|
|
425
|
-
retiredAtMs: number;
|
|
426
|
-
};
|
|
427
|
-
export type LaneServerRetirementReceiptV1 = EcdsaServerRetirementReceiptV1 | Ed25519ServerRetirementReceiptV1;
|
|
428
|
-
type LaneProductEpochRecordCommonV1 = {
|
|
429
|
-
kind: 'lane_product_epoch_record_v1';
|
|
430
|
-
walletId: WalletId;
|
|
431
|
-
walletKeyId: WalletKeyId;
|
|
432
|
-
laneId: SigningLaneId;
|
|
433
|
-
laneKind: SigningLaneKind;
|
|
434
|
-
laneShareEpoch: LaneShareEpoch;
|
|
435
|
-
keyFamily: 'ed25519' | 'ecdsa_secp256k1';
|
|
436
|
-
enrollmentId: LaneEnrollmentId;
|
|
437
|
-
operationId: LaneOperationId;
|
|
438
|
-
targetMaterialActivationId: MpcMaterialActivationId;
|
|
439
|
-
materialActivation: MpcMaterialActivationRef;
|
|
440
|
-
publicIdentityDigestB64u: string;
|
|
441
|
-
holderParticipant: LaneHolderParticipantRecordV1;
|
|
442
|
-
signingWorkerParticipant: SigningWorkerParticipantRecordV1;
|
|
443
|
-
participantSetBindingDigestB64u: LaneParticipantBindingDigestB64u;
|
|
444
|
-
revocationEpoch: number;
|
|
445
|
-
createdAtMs: number;
|
|
446
|
-
};
|
|
447
|
-
export type LaneProductEpochPendingVisibilityV1 = LaneProductEpochRecordCommonV1 & {
|
|
448
|
-
state: 'pending_visibility';
|
|
449
|
-
aggregateManifestDigestB64u: string;
|
|
450
|
-
protocolCommitReceiptDigestB64u: string;
|
|
451
|
-
holderDeliveryReceiptDigestB64u: string;
|
|
452
|
-
serverActivationReceiptDigestB64u: string;
|
|
453
|
-
pendingSinceMs: number;
|
|
454
|
-
activatedAtMs?: never;
|
|
455
|
-
retiredAtMs?: never;
|
|
456
|
-
retirementReason?: never;
|
|
457
|
-
retirementReceiptDigestB64u?: never;
|
|
458
|
-
revokedAtMs?: never;
|
|
459
|
-
revocationReason?: never;
|
|
460
|
-
revocationReceiptDigestB64u?: never;
|
|
461
|
-
retirementEffectBindingDigestB64u?: never;
|
|
462
|
-
revocationRequestedAtMs?: never;
|
|
463
|
-
};
|
|
464
|
-
export type LaneProductEpochActiveV1 = LaneProductEpochRecordCommonV1 & {
|
|
465
|
-
state: 'active';
|
|
466
|
-
aggregateManifestDigestB64u: string;
|
|
467
|
-
aggregateActivationReceiptDigestB64u: string;
|
|
468
|
-
activatedAtMs: number;
|
|
469
|
-
pendingSinceMs?: never;
|
|
470
|
-
protocolCommitReceiptDigestB64u?: never;
|
|
471
|
-
holderDeliveryReceiptDigestB64u?: never;
|
|
472
|
-
serverActivationReceiptDigestB64u?: never;
|
|
473
|
-
retiredAtMs?: never;
|
|
474
|
-
retirementReason?: never;
|
|
475
|
-
retirementReceiptDigestB64u?: never;
|
|
476
|
-
revokedAtMs?: never;
|
|
477
|
-
revocationReason?: never;
|
|
478
|
-
revocationReceiptDigestB64u?: never;
|
|
479
|
-
retirementEffectBindingDigestB64u?: never;
|
|
480
|
-
revocationRequestedAtMs?: never;
|
|
481
|
-
};
|
|
482
|
-
export type LaneProductEpochRetiredV1 = LaneProductEpochRecordCommonV1 & {
|
|
483
|
-
state: 'retired';
|
|
484
|
-
retirementReason: 'rotation' | 'device_compromise' | 'agent_compromise';
|
|
485
|
-
retirementReceiptDigestB64u: string;
|
|
486
|
-
retiredAtMs: number;
|
|
487
|
-
pendingSinceMs?: never;
|
|
488
|
-
aggregateManifestDigestB64u?: never;
|
|
489
|
-
protocolCommitReceiptDigestB64u?: never;
|
|
490
|
-
holderDeliveryReceiptDigestB64u?: never;
|
|
491
|
-
serverActivationReceiptDigestB64u?: never;
|
|
492
|
-
aggregateActivationReceiptDigestB64u?: never;
|
|
493
|
-
activatedAtMs?: never;
|
|
494
|
-
revokedAtMs?: never;
|
|
495
|
-
revocationReason?: never;
|
|
496
|
-
revocationReceiptDigestB64u?: never;
|
|
497
|
-
retirementEffectBindingDigestB64u?: never;
|
|
498
|
-
revocationRequestedAtMs?: never;
|
|
499
|
-
};
|
|
500
|
-
export type LaneProductEpochRevocationPendingV1 = LaneProductEpochRecordCommonV1 & {
|
|
501
|
-
state: 'revocation_pending';
|
|
502
|
-
revocationReason: 'user_revoked' | 'policy_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
|
|
503
|
-
retirementEffectBindingDigestB64u: string;
|
|
504
|
-
revocationRequestedAtMs: number;
|
|
505
|
-
pendingSinceMs?: never;
|
|
506
|
-
aggregateManifestDigestB64u?: never;
|
|
507
|
-
protocolCommitReceiptDigestB64u?: never;
|
|
508
|
-
holderDeliveryReceiptDigestB64u?: never;
|
|
509
|
-
serverActivationReceiptDigestB64u?: never;
|
|
510
|
-
aggregateActivationReceiptDigestB64u?: never;
|
|
511
|
-
activatedAtMs?: never;
|
|
512
|
-
retiredAtMs?: never;
|
|
513
|
-
retirementReason?: never;
|
|
514
|
-
retirementReceiptDigestB64u?: never;
|
|
515
|
-
revokedAtMs?: never;
|
|
516
|
-
revocationReceiptDigestB64u?: never;
|
|
517
|
-
};
|
|
518
|
-
export type LaneProductEpochRevokedV1 = LaneProductEpochRecordCommonV1 & {
|
|
519
|
-
state: 'revoked';
|
|
520
|
-
revocationReason: 'user_revoked' | 'policy_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
|
|
521
|
-
retirementEffectBindingDigestB64u: string;
|
|
522
|
-
revocationReceiptDigestB64u: string;
|
|
523
|
-
revokedAtMs: number;
|
|
524
|
-
pendingSinceMs?: never;
|
|
525
|
-
aggregateManifestDigestB64u?: never;
|
|
526
|
-
protocolCommitReceiptDigestB64u?: never;
|
|
527
|
-
holderDeliveryReceiptDigestB64u?: never;
|
|
528
|
-
serverActivationReceiptDigestB64u?: never;
|
|
529
|
-
aggregateActivationReceiptDigestB64u?: never;
|
|
530
|
-
activatedAtMs?: never;
|
|
531
|
-
retiredAtMs?: never;
|
|
532
|
-
retirementReason?: never;
|
|
533
|
-
retirementReceiptDigestB64u?: never;
|
|
534
|
-
revocationRequestedAtMs?: never;
|
|
535
|
-
};
|
|
536
|
-
export type LaneProductEpochRecordV1 = LaneProductEpochPendingVisibilityV1 | LaneProductEpochActiveV1 | LaneProductEpochRetiredV1 | LaneProductEpochRevocationPendingV1 | LaneProductEpochRevokedV1;
|
|
537
|
-
export type CompleteSigningLaneRevocationV1 = {
|
|
538
|
-
kind: 'complete_signing_lane_revocation_v1';
|
|
539
|
-
command: RevokeSigningLaneV1;
|
|
540
|
-
expectedVersion: number;
|
|
541
|
-
commandDigestB64u: string;
|
|
542
|
-
retirementReceipt: LaneServerRetirementReceiptV1;
|
|
543
|
-
revokedAtMs: number;
|
|
544
|
-
};
|
|
545
|
-
export type AggregateLaneRevocationChildReceiptV1 = {
|
|
546
|
-
operationId: LaneOperationId;
|
|
547
|
-
walletKeyId: WalletKeyId;
|
|
548
|
-
targetLaneId: SigningLaneId;
|
|
549
|
-
targetLaneShareEpoch: LaneShareEpoch;
|
|
550
|
-
targetMaterialActivation: MpcMaterialActivationRef;
|
|
551
|
-
revocationEpoch: number;
|
|
552
|
-
retirementReceiptDigestB64u: string;
|
|
553
|
-
};
|
|
554
|
-
export type AggregateLaneRevocationReceiptV1 = {
|
|
555
|
-
kind: 'aggregate_lane_revocation_receipt_v1';
|
|
556
|
-
enrollmentId: LaneEnrollmentId;
|
|
557
|
-
walletId: WalletId;
|
|
558
|
-
manifestDigestB64u: string;
|
|
559
|
-
orderedChildReceipts: readonly [
|
|
560
|
-
AggregateLaneRevocationChildReceiptV1,
|
|
561
|
-
...AggregateLaneRevocationChildReceiptV1[]
|
|
562
|
-
];
|
|
563
|
-
revokedAtMs: number;
|
|
564
|
-
};
|
|
565
|
-
export type RevokeLaneEnrollmentV1 = {
|
|
566
|
-
kind: 'revoke_lane_enrollment_v1';
|
|
567
|
-
enrollmentId: LaneEnrollmentId;
|
|
568
|
-
walletId: WalletId;
|
|
569
|
-
manifestDigestB64u: string;
|
|
570
|
-
reason: 'cancelled_after_commit' | 'expired_after_commit' | 'revoked_during_activation' | 'user_revoked' | 'device_compromise' | 'agent_compromise';
|
|
571
|
-
requestedAtMs: number;
|
|
572
|
-
};
|
|
573
|
-
export type RevokeSigningLaneV1 = {
|
|
574
|
-
kind: 'revoke_signing_lane_v1';
|
|
575
|
-
walletId: WalletId;
|
|
576
|
-
walletKeyId: WalletKeyId;
|
|
577
|
-
laneId: SigningLaneId;
|
|
578
|
-
laneShareEpoch: LaneShareEpoch;
|
|
579
|
-
expectedRevocationEpoch: number;
|
|
580
|
-
reason: 'user_revoked' | 'policy_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
|
|
581
|
-
retirementCorrelationId: CorrelationId;
|
|
582
|
-
retirementRequestDigestB64u: string;
|
|
583
|
-
retirementEffectBindingDigestB64u: string;
|
|
584
|
-
requestedAtMs: number;
|
|
585
|
-
};
|
|
586
|
-
export type CommitLaneEnrollmentRevocationV1 = {
|
|
587
|
-
kind: 'commit_lane_enrollment_revocation_v1';
|
|
588
|
-
enrollmentId: LaneEnrollmentId;
|
|
589
|
-
walletId: WalletId;
|
|
590
|
-
manifestDigestB64u: string;
|
|
591
|
-
receipt: AggregateLaneRevocationReceiptV1;
|
|
592
|
-
revokedAtMs: number;
|
|
593
|
-
};
|
|
594
|
-
export type LaneEnrollmentActivationResultV1 = {
|
|
595
|
-
kind: 'lane_enrollment_activation_result_v1';
|
|
596
|
-
outcome: 'applied';
|
|
597
|
-
enrollmentId: LaneEnrollmentId;
|
|
598
|
-
version: number;
|
|
599
|
-
commandDigestB64u: string;
|
|
600
|
-
receipt: AggregateLaneActivationReceiptV1;
|
|
601
|
-
lifecycle: Extract<LaneEnrollmentLifecycleV1, {
|
|
602
|
-
state: 'active';
|
|
603
|
-
}>;
|
|
604
|
-
productEpochs: readonly [LaneProductEpochActiveV1, ...LaneProductEpochActiveV1[]];
|
|
605
|
-
} | {
|
|
606
|
-
kind: 'lane_enrollment_activation_result_v1';
|
|
607
|
-
outcome: 'replayed';
|
|
608
|
-
enrollmentId: LaneEnrollmentId;
|
|
609
|
-
version: number;
|
|
610
|
-
commandDigestB64u: string;
|
|
611
|
-
receipt: AggregateLaneActivationReceiptV1;
|
|
612
|
-
lifecycle: Extract<LaneEnrollmentLifecycleV1, {
|
|
613
|
-
state: 'active';
|
|
614
|
-
}>;
|
|
615
|
-
productEpochs: readonly [LaneProductEpochActiveV1, ...LaneProductEpochActiveV1[]];
|
|
616
|
-
} | {
|
|
617
|
-
kind: 'lane_enrollment_activation_result_v1';
|
|
618
|
-
outcome: 'conflict';
|
|
619
|
-
enrollmentId: LaneEnrollmentId;
|
|
620
|
-
expectedVersion: number;
|
|
621
|
-
actualVersion: number;
|
|
622
|
-
requestedCommandDigestB64u: string;
|
|
623
|
-
storedCommandDigestB64u: string;
|
|
624
|
-
};
|
|
625
|
-
export type LaneEnrollmentRevocationResultV1 = {
|
|
626
|
-
kind: 'lane_enrollment_revocation_result_v1';
|
|
627
|
-
outcome: 'applied';
|
|
628
|
-
enrollmentId: LaneEnrollmentId;
|
|
629
|
-
version: number;
|
|
630
|
-
commandDigestB64u: string;
|
|
631
|
-
receipt: AggregateLaneRevocationReceiptV1;
|
|
632
|
-
lifecycle: Extract<LaneEnrollmentLifecycleV1, {
|
|
633
|
-
state: 'revoked';
|
|
634
|
-
}>;
|
|
635
|
-
productEpochs: readonly [LaneProductEpochRevokedV1, ...LaneProductEpochRevokedV1[]];
|
|
636
|
-
} | {
|
|
637
|
-
kind: 'lane_enrollment_revocation_result_v1';
|
|
638
|
-
outcome: 'replayed';
|
|
639
|
-
enrollmentId: LaneEnrollmentId;
|
|
640
|
-
version: number;
|
|
641
|
-
commandDigestB64u: string;
|
|
642
|
-
receipt: AggregateLaneRevocationReceiptV1;
|
|
643
|
-
lifecycle: Extract<LaneEnrollmentLifecycleV1, {
|
|
644
|
-
state: 'revoked';
|
|
645
|
-
}>;
|
|
646
|
-
productEpochs: readonly [LaneProductEpochRevokedV1, ...LaneProductEpochRevokedV1[]];
|
|
647
|
-
} | {
|
|
648
|
-
kind: 'lane_enrollment_revocation_result_v1';
|
|
649
|
-
outcome: 'conflict';
|
|
650
|
-
enrollmentId: LaneEnrollmentId;
|
|
651
|
-
expectedVersion: number;
|
|
652
|
-
actualVersion: number;
|
|
653
|
-
requestedCommandDigestB64u: string;
|
|
654
|
-
storedCommandDigestB64u: string;
|
|
655
|
-
};
|
|
656
|
-
export type LaneSigningLaneRevocationResultV1 = {
|
|
657
|
-
kind: 'lane_signing_lane_revocation_result_v1';
|
|
658
|
-
outcome: 'applied';
|
|
659
|
-
walletKeyId: WalletKeyId;
|
|
660
|
-
laneId: SigningLaneId;
|
|
661
|
-
laneShareEpoch: LaneShareEpoch;
|
|
662
|
-
version: number;
|
|
663
|
-
commandDigestB64u: string;
|
|
664
|
-
productEpoch: LaneProductEpochRevokedV1;
|
|
665
|
-
retirementReceipt: LaneServerRetirementReceiptV1;
|
|
666
|
-
} | {
|
|
667
|
-
kind: 'lane_signing_lane_revocation_result_v1';
|
|
668
|
-
outcome: 'replayed';
|
|
669
|
-
walletKeyId: WalletKeyId;
|
|
670
|
-
laneId: SigningLaneId;
|
|
671
|
-
laneShareEpoch: LaneShareEpoch;
|
|
672
|
-
version: number;
|
|
673
|
-
commandDigestB64u: string;
|
|
674
|
-
productEpoch: LaneProductEpochRevokedV1;
|
|
675
|
-
retirementReceipt: LaneServerRetirementReceiptV1;
|
|
676
|
-
} | {
|
|
677
|
-
kind: 'lane_signing_lane_revocation_result_v1';
|
|
678
|
-
outcome: 'conflict';
|
|
679
|
-
walletKeyId: WalletKeyId;
|
|
680
|
-
laneId: SigningLaneId;
|
|
681
|
-
laneShareEpoch: LaneShareEpoch;
|
|
682
|
-
expectedVersion: number;
|
|
683
|
-
actualVersion: number;
|
|
684
|
-
requestedCommandDigestB64u: string;
|
|
685
|
-
storedCommandDigestB64u: string;
|
|
686
|
-
};
|
|
687
|
-
export type LaneSigningLaneRevocationFenceResultV1 = {
|
|
688
|
-
kind: 'lane_signing_lane_revocation_fence_result_v1';
|
|
689
|
-
outcome: 'applied' | 'replayed';
|
|
690
|
-
walletKeyId: WalletKeyId;
|
|
691
|
-
laneId: SigningLaneId;
|
|
692
|
-
laneShareEpoch: LaneShareEpoch;
|
|
693
|
-
version: number;
|
|
694
|
-
commandDigestB64u: string;
|
|
695
|
-
productEpoch: LaneProductEpochRevocationPendingV1;
|
|
696
|
-
} | {
|
|
697
|
-
kind: 'lane_signing_lane_revocation_fence_result_v1';
|
|
698
|
-
outcome: 'already_completed';
|
|
699
|
-
walletKeyId: WalletKeyId;
|
|
700
|
-
laneId: SigningLaneId;
|
|
701
|
-
laneShareEpoch: LaneShareEpoch;
|
|
702
|
-
version: number;
|
|
703
|
-
commandDigestB64u: string;
|
|
704
|
-
productEpoch: LaneProductEpochRevokedV1;
|
|
705
|
-
retirementReceipt: LaneServerRetirementReceiptV1;
|
|
706
|
-
} | {
|
|
707
|
-
kind: 'lane_signing_lane_revocation_fence_result_v1';
|
|
708
|
-
outcome: 'conflict';
|
|
709
|
-
walletKeyId: WalletKeyId;
|
|
710
|
-
laneId: SigningLaneId;
|
|
711
|
-
laneShareEpoch: LaneShareEpoch;
|
|
712
|
-
expectedVersion: number;
|
|
713
|
-
actualVersion: number;
|
|
714
|
-
requestedCommandDigestB64u: string;
|
|
715
|
-
storedCommandDigestB64u: string;
|
|
716
|
-
};
|
|
717
|
-
export type LaneProtocolCasResultV1 = {
|
|
718
|
-
outcome: 'applied';
|
|
719
|
-
version: number;
|
|
720
|
-
record: LaneProtocolRecordV1;
|
|
721
|
-
commandDigestB64u: string;
|
|
722
|
-
} | {
|
|
723
|
-
outcome: 'replayed';
|
|
724
|
-
version: number;
|
|
725
|
-
record: LaneProtocolRecordV1;
|
|
726
|
-
commandDigestB64u: string;
|
|
727
|
-
} | {
|
|
728
|
-
outcome: 'conflict';
|
|
729
|
-
expectedVersion: number;
|
|
730
|
-
actualVersion: number;
|
|
731
|
-
requestedCommandDigestB64u: string;
|
|
732
|
-
storedCommandDigestB64u: string;
|
|
733
|
-
};
|
|
734
|
-
export type PreparedLaneProtocolRecordV1 = {
|
|
735
|
-
version: number;
|
|
736
|
-
commandDigestB64u: DigestB64u;
|
|
737
|
-
record: LaneProtocolRecordV1;
|
|
738
|
-
};
|
|
739
|
-
export type LaneEnrollmentPreparationResultV1 = {
|
|
740
|
-
kind: 'lane_enrollment_preparation_result_v1';
|
|
741
|
-
outcome: 'applied' | 'replayed';
|
|
742
|
-
enrollmentId: LaneEnrollmentId;
|
|
743
|
-
version: number;
|
|
744
|
-
commandDigestB64u: DigestB64u;
|
|
745
|
-
lifecycle: LaneEnrollmentLifecycleV1;
|
|
746
|
-
orderedProtocols: readonly [PreparedLaneProtocolRecordV1, ...PreparedLaneProtocolRecordV1[]];
|
|
747
|
-
} | {
|
|
748
|
-
kind: 'lane_enrollment_preparation_result_v1';
|
|
749
|
-
outcome: 'conflict';
|
|
750
|
-
enrollmentId: LaneEnrollmentId;
|
|
751
|
-
expectedVersion: number | null;
|
|
752
|
-
actualVersion: number;
|
|
753
|
-
requestedCommandDigestB64u: DigestB64u;
|
|
754
|
-
storedCommandDigestB64u: DigestB64u;
|
|
755
|
-
};
|
|
756
|
-
export type EcdsaLaneProtocolWasmV1 = {
|
|
757
|
-
prepareEcdsaAdditiveLaneHolderRoundV1(input: EcdsaAdditiveLaneJobV1): Promise<EcdsaAdditiveLaneHolderPreparationV1>;
|
|
758
|
-
};
|
|
759
|
-
export type { LaneHolderRecipientHandleV1 } from '../utils/domainIds';
|
|
760
|
-
type LaneHolderRecipientDescriptorV1 = {
|
|
761
|
-
recipientHandle: LaneHolderRecipientHandleV1;
|
|
762
|
-
hpkePublicKeyB64u: HpkePublicKeyB64u;
|
|
763
|
-
hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
|
|
764
|
-
};
|
|
765
|
-
export type LaneHolderPackageWireV1 = ExclusiveUnion<{
|
|
766
|
-
kind: 'ed25519_yao_lane_holder_package_set_v1';
|
|
767
|
-
deriverAEncryptedPackageJson: string;
|
|
768
|
-
deriverBEncryptedPackageJson: string;
|
|
769
|
-
} | {
|
|
770
|
-
kind: 'ecdsa_additive_lane_holder_package_v1';
|
|
771
|
-
ecdsaEncryptedMaterialEnvelopeJson: string;
|
|
772
|
-
}>;
|
|
773
|
-
export type EcdsaAdditiveLaneHolderPreparationV1 = {
|
|
774
|
-
kind: 'ecdsa_additive_lane_holder_preparation_v1';
|
|
775
|
-
holderRound: EcdsaAdditiveLaneHolderRoundV1;
|
|
776
|
-
holderPackage: Extract<LaneHolderPackageWireV1, {
|
|
777
|
-
kind: 'ecdsa_additive_lane_holder_package_v1';
|
|
778
|
-
}>;
|
|
779
|
-
encryptedDeltaPackageJson: string;
|
|
780
|
-
};
|
|
781
|
-
export type Ed25519YaoLaneClientCompletionV1 = {
|
|
782
|
-
protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
783
|
-
holderPackage: Extract<LaneHolderPackageWireV1, {
|
|
784
|
-
kind: 'ed25519_yao_lane_holder_package_set_v1';
|
|
785
|
-
}>;
|
|
786
|
-
};
|
|
787
|
-
type SealedLaneHolderMaterialV1 = {
|
|
788
|
-
sealedHolderMaterialB64u: string;
|
|
789
|
-
sealedHolderRecordDigestB64u: DigestB64u;
|
|
790
|
-
verifiedHolderCiphertextDigestSetB64u: DigestB64u;
|
|
791
|
-
};
|
|
792
|
-
type VerifiedLaneHolderPackageV1 = {
|
|
793
|
-
verifiedHolderCiphertextDigestSetB64u: DigestB64u;
|
|
794
|
-
};
|
|
795
|
-
export type WasmEd25519YaoLaneClientV1 = {
|
|
796
|
-
prepare(input: Ed25519YaoLaneJobV1): Promise<{
|
|
797
|
-
requestJson: string;
|
|
798
|
-
}>;
|
|
799
|
-
complete(input: {
|
|
800
|
-
job: Ed25519YaoLaneJobV1;
|
|
801
|
-
responseJson: string;
|
|
802
|
-
}): Promise<Ed25519YaoLaneClientCompletionV1>;
|
|
803
|
-
};
|
|
804
|
-
export type PrepareLaneEnrollmentV1 = {
|
|
805
|
-
manifest: LaneEnrollmentManifestV1;
|
|
806
|
-
children: readonly [RotatableSigningLaneJobV1, ...RotatableSigningLaneJobV1[]];
|
|
807
|
-
};
|
|
808
|
-
export type ResumeLaneProtocolOperationV1 = {
|
|
809
|
-
operationId: LaneOperationId;
|
|
810
|
-
enrollmentId: LaneEnrollmentId;
|
|
811
|
-
idempotencyKey: LaneOperationIdempotencyKey;
|
|
812
|
-
expectedVersion: number;
|
|
813
|
-
};
|
|
814
|
-
export type RecordLaneHolderDeliveryV1 = {
|
|
815
|
-
receipt: LaneHolderDeliveryReceiptV1;
|
|
816
|
-
expectedVersion: number;
|
|
817
|
-
};
|
|
818
|
-
export type RecordLaneProtocolCommitV1 = {
|
|
819
|
-
receipt: LaneProtocolCommitReceiptV1;
|
|
820
|
-
expectedVersion: number;
|
|
821
|
-
};
|
|
822
|
-
export type ActivateLaneServerMaterialV1 = {
|
|
823
|
-
receipt: LaneServerActivationReceiptV1;
|
|
824
|
-
expectedVersion: number;
|
|
825
|
-
};
|
|
826
|
-
export type LaneHolderRecipientWorkerV1 = {
|
|
827
|
-
createLaneHolderRecipientV1(input: {
|
|
828
|
-
operationId: LaneOperationId;
|
|
829
|
-
enrollmentId: LaneEnrollmentId;
|
|
830
|
-
walletKeyId: WalletKeyId;
|
|
831
|
-
targetLaneId: SigningLaneId;
|
|
832
|
-
targetLaneShareEpoch: LaneShareEpoch;
|
|
833
|
-
targetMaterialActivationId: MpcMaterialActivationId;
|
|
834
|
-
targetHolderParticipantId: LaneHolderParticipantId;
|
|
835
|
-
custodyBindingId: LaneHolderCustodyBindingId;
|
|
836
|
-
custodyBindingDigestB64u: LaneCustodyBindingDigestB64u;
|
|
837
|
-
}): Promise<LaneHolderRecipientDescriptorV1>;
|
|
838
|
-
openAndSealLaneHolderPackageV1(input: {
|
|
839
|
-
job: RotatableSigningLaneJobV1;
|
|
840
|
-
protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
841
|
-
holderPackage: LaneHolderPackageWireV1;
|
|
842
|
-
recipientHandle: LaneHolderRecipientHandleV1;
|
|
843
|
-
}): Promise<SealedLaneHolderMaterialV1>;
|
|
844
|
-
verifyLaneHolderPackageCommitmentV1(input: {
|
|
845
|
-
job: RotatableSigningLaneJobV1;
|
|
846
|
-
protocolCommitReceipt: LaneProtocolCommitReceiptV1;
|
|
847
|
-
holderPackage: LaneHolderPackageWireV1;
|
|
848
|
-
}): Promise<VerifiedLaneHolderPackageV1>;
|
|
849
|
-
discardLaneHolderRecipientV1(input: {
|
|
850
|
-
recipientHandle: LaneHolderRecipientHandleV1;
|
|
851
|
-
operationId: LaneOperationId;
|
|
852
|
-
}): Promise<void>;
|
|
853
|
-
invalidateLaneMaterialV1(input: {
|
|
854
|
-
walletKeyId: WalletKeyId;
|
|
855
|
-
laneId: SigningLaneId;
|
|
856
|
-
laneShareEpoch: LaneShareEpoch;
|
|
857
|
-
materialActivation: MpcMaterialActivationRef;
|
|
858
|
-
}): Promise<void>;
|
|
859
|
-
};
|
|
860
|
-
export type LaneEnrollmentGatewayV1 = {
|
|
861
|
-
prepareLaneEnrollmentV1(input: PrepareLaneEnrollmentV1): Promise<LaneEnrollmentPreparationResultV1>;
|
|
862
|
-
resumeLaneProtocolOperationV1(input: ResumeLaneProtocolOperationV1): Promise<LaneProtocolCasResultV1>;
|
|
863
|
-
recordLaneProtocolCommitV1(input: RecordLaneProtocolCommitV1): Promise<LaneProtocolCasResultV1>;
|
|
864
|
-
recordLaneHolderDeliveryV1(input: RecordLaneHolderDeliveryV1): Promise<LaneProtocolCasResultV1>;
|
|
865
|
-
activateLaneServerMaterialV1(input: ActivateLaneServerMaterialV1): Promise<LaneProtocolCasResultV1>;
|
|
866
|
-
commitLaneEnrollmentActivationV1(input: CommitLaneEnrollmentActivationV1): Promise<LaneEnrollmentActivationResultV1>;
|
|
867
|
-
fenceSigningLaneRevocationV1(input: RevokeSigningLaneV1): Promise<LaneSigningLaneRevocationFenceResultV1>;
|
|
868
|
-
completeSigningLaneRevocationV1(input: CompleteSigningLaneRevocationV1): Promise<LaneSigningLaneRevocationResultV1>;
|
|
869
|
-
};
|
|
32
|
+
export {};
|
|
870
33
|
//# sourceMappingURL=rotation.d.ts.map
|