@seams/wallet-server 0.7.3 → 0.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (743) hide show
  1. package/THIRD_PARTY_NOTICES.md +7 -9
  2. package/artifact-manifest.json +241 -41
  3. package/cloudflare-router-ab/build/deriver-a/build-stamp.json +1 -1
  4. package/cloudflare-router-ab/build/deriver-a/index.js +2 -2
  5. package/cloudflare-router-ab/build/deriver-a/index_bg.wasm +0 -0
  6. package/cloudflare-router-ab/build/deriver-b/build-stamp.json +1 -1
  7. package/cloudflare-router-ab/build/deriver-b/index.js +2 -2
  8. package/cloudflare-router-ab/build/deriver-b/index_bg.wasm +0 -0
  9. package/cloudflare-router-ab/build/local-tools/darwin-arm64/router_ab_local_init +0 -0
  10. package/cloudflare-router-ab/build/local-tools/darwin-x64/router_ab_local_init +0 -0
  11. package/cloudflare-router-ab/build/local-tools/linux-x64/router_ab_local_init +0 -0
  12. package/cloudflare-router-ab/build/router/build-stamp.json +1 -1
  13. package/cloudflare-router-ab/build/router/index.js +2 -2
  14. package/cloudflare-router-ab/build/router/index_bg.wasm +0 -0
  15. package/cloudflare-router-ab/build/signing-worker/build-stamp.json +1 -1
  16. package/cloudflare-router-ab/build/signing-worker/index.js +2 -2
  17. package/cloudflare-router-ab/build/signing-worker/index_bg.wasm +0 -0
  18. package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json +1 -1
  19. package/cloudflare-router-ab/build/tenant-root-control-plane/index.js +2 -2
  20. package/cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm +0 -0
  21. package/cloudflare-router-ab/migrations/deriver-a/0019_wallet_object_addresses.sql +10 -0
  22. package/cloudflare-router-ab/migrations/deriver-b/0019_wallet_object_addresses.sql +10 -0
  23. package/cloudflare-router-ab/scripts/prepare-local-runtime-config.mjs +3 -119
  24. package/cloudflare-router-ab/scripts/start-local-role-workers.mjs +77 -20
  25. package/cloudflare-router-ab/wrangler.deriver-a.toml +0 -8
  26. package/cloudflare-router-ab/wrangler.deriver-b.toml +24 -8
  27. package/cloudflare-router-ab/wrangler.router.toml +0 -2
  28. package/cloudflare-router-ab/wrangler.signing-worker.toml +29 -0
  29. package/dist/esm/authorization/domain.js +3 -2
  30. package/dist/esm/authorization/lifecycleRouting.js +62 -0
  31. package/dist/esm/authorization/service.js +86 -35
  32. package/dist/esm/cloud-host.js +42 -39
  33. package/dist/esm/core/EmailOtpRecords.js +29 -222
  34. package/dist/esm/core/EmailOtpStores.js +0 -859
  35. package/dist/esm/core/IdentityStore.js +2 -339
  36. package/dist/esm/core/ThresholdService/config.js +1 -9
  37. package/dist/esm/core/ThresholdService/index.js +0 -4
  38. package/dist/esm/core/ThresholdService/kv.js +1 -66
  39. package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.js +3 -13
  40. package/dist/esm/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.js +10 -0
  41. package/dist/esm/core/ThresholdService/routerAb/internalServiceHttp.js +1 -0
  42. package/dist/esm/core/ThresholdService/routerAbNormalSigningPolicy.js +1 -11
  43. package/dist/esm/core/ThresholdService/stores/WalletSessionStore.js +0 -541
  44. package/dist/esm/core/ThresholdService/validation.js +3 -347
  45. package/dist/esm/core/WalletAuthMethodStore.js +2 -123
  46. package/dist/esm/core/WalletStore.js +3 -209
  47. package/dist/esm/core/WebAuthnAuthenticatorStore.js +0 -202
  48. package/dist/esm/core/WebAuthnCredentialBindingStore.js +2 -182
  49. package/dist/esm/core/WebAuthnLoginChallengeStore.js +0 -52
  50. package/dist/esm/core/WebAuthnSyncChallengeStore.js +0 -54
  51. package/dist/esm/core/authService/emailOtpConfig.js +1 -195
  52. package/dist/esm/core/authService/emailOtpEnrollment.js +0 -110
  53. package/dist/esm/core/authService/emailOtpSeal.js +0 -63
  54. package/dist/esm/core/authService/nearPrivateKeySigning.js +1 -1
  55. package/dist/esm/core/authService/nearTransactions.js +3 -98
  56. package/dist/esm/core/authService/rateLimits.js +0 -84
  57. package/dist/esm/core/authService/webauthn.js +3 -299
  58. package/dist/esm/core/authService/webauthnOidcHelpers.js +1 -24
  59. package/dist/esm/core/authService/webauthnWalletBinding.js +0 -37
  60. package/dist/esm/core/config.js +1 -95
  61. package/dist/esm/core/d1EcdsaSignerRead.js +1 -1
  62. package/dist/esm/core/d1Ed25519SignerRead.js +55 -0
  63. package/dist/esm/core/d1IdentityStore.js +1 -2
  64. package/dist/esm/core/d1TenantStore.js +1 -24
  65. package/dist/esm/core/d1WalletAuthMethodStore.js +2 -5
  66. package/dist/esm/core/d1WalletStore.js +16 -13
  67. package/dist/esm/core/deviceLinking/linkedDeviceBootstrap.js +13 -0
  68. package/dist/esm/core/deviceLinking/linkedDeviceEmailOtpGrant.js +2 -2
  69. package/dist/esm/core/deviceLinking/linkedDeviceManagement.js +1 -1
  70. package/dist/esm/core/deviceLinking/linkedDeviceSession.js +20 -14
  71. package/dist/esm/core/deviceLinking/linkedDeviceSessionRecord.js +2 -2
  72. package/dist/esm/core/deviceLinking/requestProof.js +9 -6
  73. package/dist/esm/core/emailOtpD1Statements.js +108 -94
  74. package/dist/esm/core/keyMaterialBrands.js +2 -12
  75. package/dist/esm/core/nearKeys.js +0 -1
  76. package/dist/esm/core/nearRelayerAccountProvisioning.js +7 -10
  77. package/dist/esm/core/passkeyCredentialClaims.js +8 -0
  78. package/dist/esm/core/routerAbSigning/RouterAbEcdsaPresignRuntime.js +6 -6
  79. package/dist/esm/core/routerAbSigning/RouterAbNormalSigningRuntime.js +2 -30
  80. package/dist/esm/core/signingLanes/WalletExecutionLaneProjection.js +1 -1
  81. package/dist/esm/core/signingMaterial/ordinaryInactiveSignerMaterialReservation.js +1 -0
  82. package/dist/esm/core/thresholdEcdsaChainTarget.js +1 -4
  83. package/dist/esm/hosted-wallet-gateway.js +158 -52
  84. package/dist/esm/index.js +6 -19
  85. package/dist/esm/localHostedWalletGatewayHandler.js +18 -3
  86. package/dist/esm/localIntendedYaoSigningFault.js +2 -30
  87. package/dist/esm/localRegistrationSetupAuthority.js +96 -0
  88. package/dist/esm/router/auth/authRequestValidation.js +8 -16
  89. package/dist/esm/router/auth/commonRouterUtils.js +17 -10
  90. package/dist/esm/router/auth/routerApiCredentialAuth.js +26 -7
  91. package/dist/esm/router/auth/walletRegistrationContext.js +49 -0
  92. package/dist/esm/router/auth/webAuthnCredentialCodecs.js +1 -2
  93. package/dist/esm/router/cloudflare/d1/auth/d1AuthorizationAssembly.js +88 -0
  94. package/dist/esm/router/cloudflare/d1/auth/d1AuthorizedOperationRouteService.js +2 -0
  95. package/dist/esm/router/cloudflare/d1/auth/d1EmailOtpRouteService.js +25 -0
  96. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthConfig.js +24 -6
  97. package/dist/esm/router/cloudflare/d1/auth/d1RouterApiAuthService.js +75 -320
  98. package/dist/esm/router/cloudflare/d1/auth/walletSessionCredentialReaders.js +17 -1
  99. package/dist/esm/router/cloudflare/d1/authorization/authorizedOperationStatements.js +57 -25
  100. package/dist/esm/router/cloudflare/d1/authorization/d1AuthorizationStore.js +265 -104
  101. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.js +43 -17
  102. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEd25519ExportRootStore.js +6 -1
  103. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.js +12 -2
  104. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpTargetFactor.js +4 -4
  105. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceOwnerAuthorizationProvider.js +2 -2
  106. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.js +3 -9
  107. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.js +2 -1
  108. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionRecords.js +1 -1
  109. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.js +89 -7
  110. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetCredentialProvider.js +24 -15
  111. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.js +1 -1
  112. package/dist/esm/router/cloudflare/d1/deviceLinking/d1LinkedDeviceVerifiedLinkBuilder.js +1 -1
  113. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoCapabilityPersistence.js +9 -6
  114. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.js +11 -2
  115. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.js +100 -10
  116. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoStateWriteFence.js +92 -0
  117. package/dist/esm/router/cloudflare/d1/ed25519Yao/d1WalletCeremonyActivity.js +77 -0
  118. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.js +14 -9
  119. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.js +0 -1
  120. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.js +15 -9
  121. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.js +3 -2
  122. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpEnrollmentStore.js +1 -1
  123. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.js +1 -7
  124. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.js +62 -36
  125. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.js +27 -21
  126. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRecoveryService.js +1 -1
  127. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpRegistrationEnrollmentFinalizer.js +2 -2
  128. package/dist/esm/router/cloudflare/d1/emailOtp/d1EmailOtpServerSealRuntime.js +0 -1
  129. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.js +44 -12
  130. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.js +1 -49
  131. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.js +20 -31
  132. package/dist/esm/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.js +85 -0
  133. package/dist/esm/router/cloudflare/d1/identity/d1IdentityRecords.js +0 -1
  134. package/dist/esm/router/cloudflare/d1/identity/d1IdentityService.js +0 -48
  135. package/dist/esm/router/cloudflare/d1/near/d1SponsoredNearAccount.js +242 -0
  136. package/dist/esm/router/cloudflare/d1/oidc/d1OidcBoundary.js +1 -2
  137. package/dist/esm/router/cloudflare/d1/oidc/d1OidcVerificationService.js +2 -29
  138. package/dist/esm/router/cloudflare/d1/oidc/googleOidcToken.js +41 -0
  139. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.js +5 -0
  140. package/dist/esm/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.js +52 -7
  141. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.js +83 -16
  142. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.js +8 -14
  143. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.js +60 -28
  144. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationIntentService.js +0 -1
  145. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationSessionTransaction.js +28 -0
  146. package/dist/esm/router/cloudflare/d1/registration/d1RegistrationSetupSupport.js +84 -0
  147. package/dist/esm/router/cloudflare/d1/registration/d1WalletExecutionAuthority.js +168 -0
  148. package/dist/esm/router/cloudflare/d1/registration/d1WalletOperationStore.js +53 -0
  149. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js +85 -38
  150. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationInitialSession.js +33 -0
  151. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationPreparation.js +16 -0
  152. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationRead.js +58 -0
  153. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationService.js +478 -708
  154. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetup.js +13 -57
  155. package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.js +169 -0
  156. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.js +79 -47
  157. package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js +11 -35
  158. package/dist/esm/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.js +110 -45
  159. package/dist/esm/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.js +12 -9
  160. package/dist/esm/router/cloudflare/d1/wallet/authorizationSnapshotLayout.js +168 -0
  161. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.js +68 -0
  162. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAddSignerService.js +22 -60
  163. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js +12 -48
  164. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorityStore.js +56 -143
  165. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorizationCleanup.js +157 -0
  166. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorizationFreeze.js +56 -0
  167. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorizationHistory.js +238 -0
  168. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorizationIntake.js +287 -0
  169. package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthorizationSnapshot.js +295 -0
  170. package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationApprovals.js +140 -0
  171. package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationChallenges.js +170 -0
  172. package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationEmailOtp.js +60 -0
  173. package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationOwner.js +33 -0
  174. package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationOwnerRequest.js +74 -0
  175. package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationPasskey.js +77 -0
  176. package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationReadAccess.js +37 -0
  177. package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationSessions.js +97 -0
  178. package/dist/esm/router/cloudflare/d1/wallet/d1WalletRelocationWriteBlock.js +133 -0
  179. package/dist/esm/router/cloudflare/d1/walletObjectAddresses.js +47 -0
  180. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.js +26 -5
  181. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnRecords.js +4 -70
  182. package/dist/esm/router/cloudflare/d1/webauthn/d1WebAuthnStore.js +23 -7
  183. package/dist/esm/router/cloudflare/runtime/routerAbServiceBindings.js +32 -1
  184. package/dist/esm/router/cloudflare/runtime/staticWalletConsoleBinding.js +20 -7
  185. package/dist/esm/router/cloudflare/runtime/walletAuthorizationRelocationRoutes.js +488 -0
  186. package/dist/esm/router/cloudflare/runtime/walletConsoleOps.js +1 -0
  187. package/dist/esm/router/cloudflare/runtime/walletConsoleOpsClient.js +26 -1
  188. package/dist/esm/router/cloudflare/runtime/walletControlOps.js +3 -0
  189. package/dist/esm/router/cloudflare/runtime/walletGateway.js +1 -1
  190. package/dist/esm/router/cloudflare/runtime/walletObjectAddresses.js +105 -0
  191. package/dist/esm/router/cloudflare/runtime/walletPlacementRoutes.js +339 -0
  192. package/dist/esm/router/cloudflare/runtime/walletRelocationDeriver.js +244 -0
  193. package/dist/esm/router/cloudflare/runtime/walletRelocationEcdsa.js +212 -0
  194. package/dist/esm/router/cloudflare/runtime/walletRelocationEd25519.js +172 -0
  195. package/dist/esm/router/cloudflare/runtime/walletRelocationOps.js +183 -0
  196. package/dist/esm/router/cloudflare/runtime/walletRelocationPresign.js +185 -0
  197. package/dist/esm/router/cloudflare/runtime/walletRelocationSource.js +221 -0
  198. package/dist/esm/router/cloudflare/runtime/walletRuntimeOps.js +16 -4
  199. package/dist/esm/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.js +30 -8
  200. package/dist/esm/router/cloudflare-adaptor.js +8 -9
  201. package/dist/esm/router/cloudflare.js +33043 -31559
  202. package/dist/esm/router/domains/ecdsa/routerAbEcdsaStrictRegistration.js +35 -9
  203. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoCapabilityCommit.js +42 -0
  204. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js +42 -13
  205. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.js +64 -3
  206. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.js +6 -6
  207. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPersistence.js +70 -3
  208. package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.js +59 -87
  209. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.js +58 -28
  210. package/dist/esm/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.js +13 -7
  211. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.js +108 -78
  212. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.js +27 -5
  213. package/dist/esm/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryWalletSessionAuthorization.js +71 -22
  214. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.js +37 -25
  215. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.js +3 -3
  216. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.js +2 -1
  217. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.js +24 -3
  218. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.js +4 -3
  219. package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.js +20 -7
  220. package/dist/esm/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.js +7 -1
  221. package/dist/esm/router/domains/emailOtp/emailOtpRequestValidation.js +0 -1
  222. package/dist/esm/router/domains/emailOtp/emailOtpRouteHandlers.js +2 -2
  223. package/dist/esm/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.js +3 -9
  224. package/dist/esm/router/domains/passkeyCustody/registrationCustodyOutcome.js +34 -18
  225. package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationAdmission.js +2 -2
  226. package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js +18 -14
  227. package/dist/esm/router/domains/signingOperations/authorizedOperationWire.js +73 -0
  228. package/dist/esm/router/domains/signingOperations/ecdsaSigningResponse.js +31 -0
  229. package/dist/esm/router/domains/signingOperations/ed25519AuthorizedOperationReceipt.js +1 -1
  230. package/dist/esm/router/domains/signingOperations/routerAbEcdsaDerivationNormalSigningRoute.js +2 -1
  231. package/dist/esm/router/domains/signingOperations/routerAbEd25519NormalSigningRoute.js +31 -121
  232. package/dist/esm/router/domains/signingOperations/routerAbNormalSigningAdmission.js +2 -93
  233. package/dist/esm/router/domains/signingOperations/routerAbPrivateSigningWorker.js +6 -20
  234. package/dist/esm/router/domains/signingOperations/signingPrepareSession.js +33 -0
  235. package/dist/esm/router/domains/signingOperations/walletExecutionAdmission.js +2 -3
  236. package/dist/esm/router/domains/walletRegistration/registrationSessionSeal.js +121 -0
  237. package/dist/esm/router/domains/walletRegistration/walletRegistrationReservation.js +70 -0
  238. package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js +56 -168
  239. package/dist/esm/router/domains/walletRegistration/walletRegistrationSetupPayload.js +3 -4
  240. package/dist/esm/router/domains/walletUnlock/walletUnlockRouteHandlers.js +14 -0
  241. package/dist/esm/router/express.js +1453 -1488
  242. package/dist/esm/router/framework/http.js +4 -1
  243. package/dist/esm/router/framework/registrationSetupDispatch.js +14 -0
  244. package/dist/esm/router/framework/ror/normalize.js +0 -1
  245. package/dist/esm/router/framework/ror/options.js +0 -1
  246. package/dist/esm/router/framework/ror/provider.js +0 -1
  247. package/dist/esm/router/framework/ror/staticProvider.js +0 -1
  248. package/dist/esm/router/framework/routeDefinitions.js +1 -2
  249. package/dist/esm/router/framework/routerApiWebhooks.js +0 -1
  250. package/dist/esm/router/ror.js +0 -1
  251. package/dist/esm/router/transport/fetch/createFetchRouter.js +2 -4
  252. package/dist/esm/router/transport/fetch/routes/auth.js +3 -1
  253. package/dist/esm/router/transport/fetch/routes/deviceLinking.js +38 -149
  254. package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js +5 -4
  255. package/dist/esm/router/transport/fetch/routes/deviceLinkingResponses.js +130 -0
  256. package/dist/esm/router/transport/fetch/routes/ecdsaOperationStepUpFactor.js +171 -0
  257. package/dist/esm/router/transport/fetch/routes/ed25519AuthorizedOperationRevalidation.js +65 -0
  258. package/dist/esm/router/transport/fetch/routes/normalSigningRouterProxy.js +13 -3
  259. package/dist/esm/router/transport/fetch/routes/passkeyCustody.js +4 -3
  260. package/dist/esm/router/transport/fetch/routes/sessions.js +3 -2
  261. package/dist/esm/router/transport/fetch/routes/syncAccount.js +7 -2
  262. package/dist/esm/router/transport/fetch/routes/thresholdEcdsa.js +86 -245
  263. package/dist/esm/router/transport/fetch/routes/thresholdEd25519.js +76 -212
  264. package/dist/esm/router/transport/fetch/routes/walletExecutionLanePreflight.js +18 -41
  265. package/dist/esm/router/transport/fetch/routes/walletRegistration.js +6 -3
  266. package/dist/esm/router/transport/fetch/routes/webauthnAuthenticators.js +1 -1
  267. package/dist/esm/shared-ts/src/authorization/index.js +1 -1
  268. package/dist/esm/shared-ts/src/authorization/walletAuthority.js +2 -2
  269. package/dist/esm/shared-ts/src/authorization/walletSessionIssuance.js +0 -1
  270. package/dist/esm/shared-ts/src/device-linking/activeWalletSession.js +12 -2
  271. package/dist/esm/shared-ts/src/device-linking/authorityActivation.js +0 -2
  272. package/dist/esm/shared-ts/src/device-linking/contracts.js +16 -1
  273. package/dist/esm/shared-ts/src/device-linking/digests.js +2 -9
  274. package/dist/esm/shared-ts/src/device-linking/ed25519ExportRoot.js +1 -1
  275. package/dist/esm/shared-ts/src/device-linking/index.js +1 -1
  276. package/dist/esm/shared-ts/src/device-linking/parsers.js +1 -1
  277. package/dist/esm/shared-ts/src/device-linking/sourceContribution.js +1 -1
  278. package/dist/esm/shared-ts/src/device-linking/wireFields.js +1 -1
  279. package/dist/esm/shared-ts/src/near/actions.js +0 -1
  280. package/dist/esm/shared-ts/src/near/nearClient.js +1 -3
  281. package/dist/esm/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.js +1 -1
  282. package/dist/esm/shared-ts/src/signing-lanes/index.js +1 -6
  283. package/dist/esm/shared-ts/src/signing-lanes/ownerContinuity.js +3 -3
  284. package/dist/esm/shared-ts/src/signing-lanes/participantDigest.js +2 -81
  285. package/dist/esm/shared-ts/src/signing-lanes/participants.js +1 -219
  286. package/dist/esm/shared-ts/src/signing-lanes/recordParsers.js +0 -3
  287. package/dist/esm/shared-ts/src/tenant-root/tenantRootOperationRecord.js +1 -2
  288. package/dist/esm/shared-ts/src/threshold/ecdsaDerivationRoleLocalBootstrap.js +0 -1
  289. package/dist/esm/shared-ts/src/threshold/keyMaterialBrands.js +1 -22
  290. package/dist/esm/shared-ts/src/threshold/participants.js +0 -1
  291. package/dist/esm/shared-ts/src/threshold/signingRootScope.js +0 -1
  292. package/dist/esm/shared-ts/src/utils/addWalletAuthMethod.js +4 -13
  293. package/dist/esm/shared-ts/src/utils/canonicalPrimitives.js +1 -7
  294. package/dist/esm/shared-ts/src/utils/domainIds.js +1 -16
  295. package/dist/esm/shared-ts/src/utils/ecdsaCapabilityActivation.js +1 -11
  296. package/dist/esm/shared-ts/src/utils/ecdsaKeyFactsInventory.js +0 -1
  297. package/dist/esm/shared-ts/src/utils/ecdsaServerTiming.js +6 -1
  298. package/dist/esm/shared-ts/src/utils/emailOtpDomain.js +4 -2
  299. package/dist/esm/shared-ts/src/utils/errors.js +1 -19
  300. package/dist/esm/shared-ts/src/utils/near.js +1 -1
  301. package/dist/esm/shared-ts/src/utils/registrationEstablishedSession.js +1 -1
  302. package/dist/esm/shared-ts/src/utils/registrationIds.js +1 -5
  303. package/dist/esm/shared-ts/src/utils/registrationIntent.js +0 -1
  304. package/dist/esm/shared-ts/src/utils/registrationSetupOperation.js +8 -0
  305. package/dist/esm/shared-ts/src/utils/registrationSignerPlan.js +1 -1
  306. package/dist/esm/shared-ts/src/utils/routerAbEcdsaDerivation.js +1 -2
  307. package/dist/esm/shared-ts/src/utils/routerAbPublicKeyset.js +0 -27
  308. package/dist/esm/shared-ts/src/utils/validation.js +1 -5
  309. package/dist/esm/shared-ts/src/utils/walletAuthAuthority.js +0 -1
  310. package/dist/esm/shared-ts/src/utils/walletManagementProtocol.js +6 -0
  311. package/dist/esm/shared-ts/src/utils/wireSchema.js +2 -13
  312. package/dist/esm/shared-ts/src/wallet-recovery/backupAcknowledgement.js +6 -24
  313. package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js +0 -1
  314. package/dist/esm/shared-ts/src/wallet-recovery/recoveryKeyId.js +5 -6
  315. package/dist/esm/shared-ts/src/wallet-recovery/walletRecoveryEcdsaPossession.js +1 -1
  316. package/dist/esm/storage/d1Sql.js +1 -7
  317. package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js +0 -1
  318. package/dist/esm/threshold/session/signingSessionSeal/guards/backends.js +1 -2
  319. package/dist/esm/threshold/session/signingSessionSeal/idempotencyBackends.js +0 -1
  320. package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js +0 -1
  321. package/dist/esm/threshold/session/signingSessionSeal/options.js +1 -2
  322. package/dist/esm/wasm/evm_crypto/pkg/evm_crypto_bg.wasm +0 -0
  323. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker.js +0 -611
  324. package/dist/esm/wasm/near_signer/pkg/wasm_signer_worker_bg.wasm +0 -0
  325. package/dist/esm/wasm/shamir3pass_runtime/pkg/shamir3pass_runtime_bg.wasm +0 -0
  326. package/dist/types/shared-ts/src/authorization/capabilityKinds.d.ts +0 -4
  327. package/dist/types/shared-ts/src/device-linking/activeWalletSession.d.ts +2 -1
  328. package/dist/types/shared-ts/src/device-linking/contracts.d.ts +11 -0
  329. package/dist/types/shared-ts/src/signing-lanes/evmFamilySigningKeySlotId.d.ts +0 -2
  330. package/dist/types/shared-ts/src/signing-lanes/execution.d.ts +0 -11
  331. package/dist/types/shared-ts/src/signing-lanes/ids.d.ts +2 -7
  332. package/dist/types/shared-ts/src/signing-lanes/index.d.ts +0 -4
  333. package/dist/types/shared-ts/src/signing-lanes/ownerContinuity.d.ts +0 -1
  334. package/dist/types/shared-ts/src/signing-lanes/participantDigest.d.ts +0 -18
  335. package/dist/types/shared-ts/src/signing-lanes/participants.d.ts +6 -35
  336. package/dist/types/shared-ts/src/signing-lanes/rotation.d.ts +6 -843
  337. package/dist/types/shared-ts/src/threshold/ed25519OperationFingerprint.d.ts +2 -1
  338. package/dist/types/shared-ts/src/threshold/keyMaterialBrands.d.ts +0 -10
  339. package/dist/types/shared-ts/src/threshold/participants.d.ts +1 -1
  340. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.d.ts +1 -133
  341. package/dist/types/shared-ts/src/utils/addWalletAuthMethod.typecheck.d.ts +4 -18
  342. package/dist/types/shared-ts/src/utils/domainIds.d.ts +0 -12
  343. package/dist/types/shared-ts/src/utils/emailOtpDomain.d.ts +3 -1
  344. package/dist/types/shared-ts/src/utils/errors.d.ts +0 -4
  345. package/dist/types/shared-ts/src/utils/near.d.ts +0 -20
  346. package/dist/types/shared-ts/src/utils/normalize.d.ts +0 -2
  347. package/dist/types/shared-ts/src/utils/registrationSetupOperation.d.ts +3 -0
  348. package/dist/types/shared-ts/src/utils/routerAbPublicKeyset.d.ts +0 -9
  349. package/dist/types/shared-ts/src/utils/validation.d.ts +1 -3
  350. package/dist/types/shared-ts/src/utils/walletCapabilityBindings.d.ts +0 -1
  351. package/dist/types/shared-ts/src/utils/walletManagementProtocol.d.ts +3 -0
  352. package/dist/types/shared-ts/src/utils/wireSchema.d.ts +0 -2
  353. package/dist/types/shared-ts/src/wallet-recovery/backupAcknowledgement.d.ts +0 -1
  354. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeReservation.d.ts +1 -10
  355. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodes.d.ts +1 -3
  356. package/dist/types/shared-ts/src/wallet-recovery/recoveryKeyId.d.ts +5 -21
  357. package/dist/types/wallet-server/src/authorization/domain.d.ts +17 -1
  358. package/dist/types/wallet-server/src/authorization/ecdsaWalletSessionAdmission.d.ts +1 -0
  359. package/dist/types/wallet-server/src/authorization/ed25519WalletSessionAdmission.d.ts +35 -0
  360. package/dist/types/wallet-server/src/authorization/ed25519WalletSessionAdmission.typecheck.d.ts +2 -0
  361. package/dist/types/wallet-server/src/authorization/lifecycleRouting.d.ts +32 -0
  362. package/dist/types/wallet-server/src/authorization/lifecycleRouting.typecheck.d.ts +2 -0
  363. package/dist/types/wallet-server/src/authorization/recoveryRouting.d.ts +22 -0
  364. package/dist/types/wallet-server/src/authorization/recoveryRouting.typecheck.d.ts +2 -0
  365. package/dist/types/wallet-server/src/authorization/service.d.ts +50 -5
  366. package/dist/types/wallet-server/src/authorization/sessionRouting.d.ts +22 -0
  367. package/dist/types/wallet-server/src/authorization/sessionRouting.typecheck.d.ts +2 -0
  368. package/dist/types/wallet-server/src/cloud-host.d.ts +36 -10
  369. package/dist/types/wallet-server/src/core/EmailOtpRecords.d.ts +2 -22
  370. package/dist/types/wallet-server/src/core/EmailOtpStores.d.ts +20 -84
  371. package/dist/types/wallet-server/src/core/IdentityStore.d.ts +0 -10
  372. package/dist/types/wallet-server/src/core/RegistrationCeremonyStore.d.ts +0 -1
  373. package/dist/types/wallet-server/src/core/ThresholdService/config.d.ts +0 -2
  374. package/dist/types/wallet-server/src/core/ThresholdService/index.d.ts +1 -3
  375. package/dist/types/wallet-server/src/core/ThresholdService/kv.d.ts +0 -7
  376. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPoolFillHandlers.d.ts +1 -3
  377. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/ecdsaDerivationPresignBridge.d.ts +6 -0
  378. package/dist/types/wallet-server/src/core/ThresholdService/routerAb/internalServiceHttp.d.ts +1 -0
  379. package/dist/types/wallet-server/src/core/ThresholdService/routerAbNormalSigningPolicy.d.ts +0 -1
  380. package/dist/types/wallet-server/src/core/ThresholdService/stores/WalletSessionStore.d.ts +7 -19
  381. package/dist/types/wallet-server/src/core/ThresholdService/validation.d.ts +0 -34
  382. package/dist/types/wallet-server/src/core/WalletAuthMethodStore.d.ts +1 -5
  383. package/dist/types/wallet-server/src/core/WalletStore.d.ts +0 -3
  384. package/dist/types/wallet-server/src/core/WebAuthnAuthenticatorStore.d.ts +0 -20
  385. package/dist/types/wallet-server/src/core/WebAuthnCredentialBindingStore.d.ts +1 -27
  386. package/dist/types/wallet-server/src/core/WebAuthnLoginChallengeStore.d.ts +2 -16
  387. package/dist/types/wallet-server/src/core/WebAuthnSyncChallengeStore.d.ts +22 -14
  388. package/dist/types/wallet-server/src/core/authService/emailOtpConfig.d.ts +0 -24
  389. package/dist/types/wallet-server/src/core/authService/emailOtpEnrollment.d.ts +1 -70
  390. package/dist/types/wallet-server/src/core/authService/emailOtpSeal.d.ts +0 -13
  391. package/dist/types/wallet-server/src/core/authService/githubOAuth.d.ts +2 -1
  392. package/dist/types/wallet-server/src/core/authService/nearTransactions.d.ts +1 -39
  393. package/dist/types/wallet-server/src/core/authService/rateLimits.d.ts +0 -17
  394. package/dist/types/wallet-server/src/core/authService/webauthn.d.ts +0 -125
  395. package/dist/types/wallet-server/src/core/authService/webauthnOidcHelpers.d.ts +0 -3
  396. package/dist/types/wallet-server/src/core/authService/webauthnVerificationOutcomes.d.ts +1 -1
  397. package/dist/types/wallet-server/src/core/authService/webauthnWalletBinding.d.ts +0 -12
  398. package/dist/types/wallet-server/src/core/config.d.ts +0 -10
  399. package/dist/types/wallet-server/src/core/d1Ed25519SignerRead.d.ts +17 -0
  400. package/dist/types/wallet-server/src/core/d1IdentityStore.d.ts +0 -2
  401. package/dist/types/wallet-server/src/core/d1TenantStore.d.ts +0 -7
  402. package/dist/types/wallet-server/src/core/d1WalletAuthMethodStore.d.ts +0 -1
  403. package/dist/types/wallet-server/src/core/d1WalletStore.d.ts +6 -0
  404. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceBootstrap.d.ts +19 -0
  405. package/dist/types/wallet-server/src/core/deviceLinking/linkedDeviceSession.d.ts +8 -6
  406. package/dist/types/wallet-server/src/core/deviceLinking/requestProof.d.ts +2 -5
  407. package/dist/types/wallet-server/src/core/emailOtpD1Statements.d.ts +11 -7
  408. package/dist/types/wallet-server/src/core/keyMaterialBrands.d.ts +1 -5
  409. package/dist/types/wallet-server/src/core/nearRelayerAccountProvisioning.d.ts +0 -1
  410. package/dist/types/wallet-server/src/core/passkeyCredentialClaims.d.ts +9 -0
  411. package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbEcdsaPresignRuntime.d.ts +5 -3
  412. package/dist/types/wallet-server/src/core/routerAbSigning/RouterAbNormalSigningRuntime.d.ts +0 -2
  413. package/dist/types/wallet-server/src/core/signingMaterial/ordinaryInactiveSignerMaterialReservation.d.ts +1 -0
  414. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.d.ts +15 -140
  415. package/dist/types/wallet-server/src/core/threeRouteRegistrationContracts.typecheck.d.ts +4 -52
  416. package/dist/types/wallet-server/src/core/thresholdEcdsaChainTarget.d.ts +0 -1
  417. package/dist/types/wallet-server/src/core/types.d.ts +0 -299
  418. package/dist/types/wallet-server/src/hosted-wallet-gateway.d.ts +18 -5
  419. package/dist/types/wallet-server/src/index.d.ts +8 -13
  420. package/dist/types/wallet-server/src/localIntendedYaoSigningFault.d.ts +1 -16
  421. package/dist/types/wallet-server/src/localRegistrationSetupAuthority.d.ts +13 -0
  422. package/dist/types/wallet-server/src/router/auth/commonRouterUtils.d.ts +7 -1
  423. package/dist/types/wallet-server/src/router/auth/routerApiCredentialAuth.d.ts +11 -3
  424. package/dist/types/wallet-server/src/router/auth/walletRegistrationContext.d.ts +8 -0
  425. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1AuthorizationAssembly.d.ts +23 -0
  426. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1EmailOtpRouteService.d.ts +16 -0
  427. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthConfig.d.ts +28 -3
  428. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/d1RouterApiAuthService.d.ts +4 -1
  429. package/dist/types/wallet-server/src/router/cloudflare/d1/auth/walletSessionCredentialReaders.d.ts +7 -1
  430. package/dist/types/wallet-server/src/router/cloudflare/d1/authorization/d1AuthorizationStore.d.ts +33 -2
  431. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceAuthorityInstallService.d.ts +5 -1
  432. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceEmailOtpGrantStore.d.ts +7 -1
  433. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRequestProofNonceStore.d.ts +1 -10
  434. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceRouteService.d.ts +4 -0
  435. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceSessionStore.d.ts +6 -0
  436. package/dist/types/wallet-server/src/router/cloudflare/d1/deviceLinking/d1LinkedDeviceTargetPlanner.d.ts +1 -13
  437. package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoLifecycleDecisionStore.d.ts +3 -1
  438. package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoProductRegistrationPartitionedStateStore.d.ts +1 -0
  439. package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1Ed25519YaoStateWriteFence.d.ts +8 -0
  440. package/dist/types/wallet-server/src/router/cloudflare/d1/ed25519Yao/d1WalletCeremonyActivity.d.ts +15 -0
  441. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeIssuer.d.ts +6 -1
  442. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeService.d.ts +2 -2
  443. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeStore.d.ts +2 -1
  444. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpChallengeVerifier.d.ts +4 -1
  445. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpCounters.typecheck.d.ts +2 -0
  446. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpGrantStore.d.ts +0 -2
  447. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRateLimitStore.d.ts +6 -13
  448. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1EmailOtpRecords.d.ts +21 -7
  449. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationAttemptStore.d.ts +29 -1
  450. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpRegistrationRecords.d.ts +3 -16
  451. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleEmailOtpSessionResolver.d.ts +7 -2
  452. package/dist/types/wallet-server/src/router/cloudflare/d1/emailOtp/d1GoogleRegistrationCompletion.d.ts +23 -0
  453. package/dist/types/wallet-server/src/router/cloudflare/d1/identity/d1IdentityService.d.ts +0 -12
  454. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.d.ts +24 -0
  455. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1SponsoredNearAccount.typecheck.d.ts +2 -0
  456. package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/d1OidcVerificationService.d.ts +0 -1
  457. package/dist/types/wallet-server/src/router/cloudflare/d1/oidc/googleOidcToken.d.ts +4 -0
  458. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1PasskeyCustodyRouteService.d.ts +5 -0
  459. package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts +26 -1
  460. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecordStore.d.ts +33 -8
  461. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyRecords.d.ts +10 -11
  462. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationCeremonyStore.d.ts +17 -7
  463. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationSessionTransaction.d.ts +13 -0
  464. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationSetupSupport.d.ts +58 -0
  465. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletExecutionAuthority.d.ts +41 -0
  466. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletOperationStore.d.ts +28 -0
  467. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.d.ts +9 -9
  468. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationInitialSession.d.ts +17 -0
  469. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationPreparation.d.ts +12 -0
  470. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationRead.d.ts +43 -0
  471. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts +52 -90
  472. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetup.d.ts +3 -30
  473. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationSetupExecution.d.ts +16 -0
  474. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationEstablishedSessionIssuer.d.ts +42 -14
  475. package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.d.ts +5 -4
  476. package/dist/types/wallet-server/src/router/cloudflare/d1/signingAdmission/d1RouterAbNormalSigningAdmissionStore.d.ts +24 -1
  477. package/dist/types/wallet-server/src/router/cloudflare/d1/versionedJson/d1VersionedJsonRecordStore.d.ts +10 -4
  478. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/authorizationSnapshotLayout.d.ts +21 -0
  479. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerFinalizeRecord.d.ts +27 -0
  480. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAddSignerService.d.ts +4 -10
  481. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthMethodService.d.ts +5 -9
  482. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorityStore.d.ts +8 -4
  483. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorizationCleanup.d.ts +20 -0
  484. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorizationFreeze.d.ts +12 -0
  485. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorizationHistory.d.ts +20 -0
  486. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorizationIntake.d.ts +29 -0
  487. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletAuthorizationSnapshot.d.ts +31 -0
  488. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationApprovals.d.ts +49 -0
  489. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationChallenges.d.ts +47 -0
  490. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationEmailOtp.d.ts +25 -0
  491. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationOwner.d.ts +88 -0
  492. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationOwnerRequest.d.ts +37 -0
  493. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationPasskey.d.ts +12 -0
  494. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationReadAccess.d.ts +18 -0
  495. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationSessions.d.ts +23 -0
  496. package/dist/types/wallet-server/src/router/cloudflare/d1/wallet/d1WalletRelocationWriteBlock.d.ts +16 -0
  497. package/dist/types/wallet-server/src/router/cloudflare/d1/walletObjectAddresses.d.ts +14 -0
  498. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnAuthService.d.ts +3 -0
  499. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnRecords.d.ts +0 -13
  500. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.d.ts +23 -10
  501. package/dist/types/wallet-server/src/router/cloudflare/d1/webauthn/d1WebAuthnStore.typecheck.d.ts +2 -0
  502. package/dist/types/wallet-server/src/router/cloudflare/runtime/cloudflare.types.d.ts +0 -2
  503. package/dist/types/wallet-server/src/router/cloudflare/runtime/routerAbServiceBindings.d.ts +13 -0
  504. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletAuthorizationRelocationRoutes.d.ts +21 -0
  505. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOps.d.ts +1 -0
  506. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletConsoleOpsClient.d.ts +3 -1
  507. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletControlOps.d.ts +2 -1
  508. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletGateway.d.ts +3 -1
  509. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletObjectAddresses.d.ts +45 -0
  510. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletPlacementRoutes.d.ts +30 -0
  511. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRelocationDeriver.d.ts +11 -0
  512. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRelocationEcdsa.d.ts +7 -0
  513. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRelocationEd25519.d.ts +7 -0
  514. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRelocationOps.d.ts +11 -0
  515. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRelocationPresign.d.ts +7 -0
  516. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRelocationSource.d.ts +26 -0
  517. package/dist/types/wallet-server/src/router/cloudflare/runtime/walletRuntimeOps.d.ts +3 -0
  518. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareOrdinaryInactiveSignerMaterialReservation.d.ts +5 -0
  519. package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts +0 -1
  520. package/dist/types/wallet-server/src/router/domains/ecdsa/routerAbEcdsaStrictRegistration.d.ts +3 -0
  521. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoCapabilityCommit.d.ts +7 -0
  522. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts +42 -8
  523. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore.d.ts +33 -2
  524. package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitioning.d.ts +2 -2
  525. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.d.ts +14 -8
  526. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExport.typecheck.d.ts +2 -0
  527. package/dist/types/wallet-server/src/router/domains/ed25519Yao/export/routerAbEd25519YaoExportRequestScopedCloudflare.d.ts +2 -0
  528. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecovery.d.ts +17 -9
  529. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryRequestScopedCloudflare.d.ts +2 -0
  530. package/dist/types/wallet-server/src/router/domains/ed25519Yao/recovery/routerAbEd25519YaoRecoveryWalletSessionAuthorization.d.ts +2 -0
  531. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoHttpRegistrationBackend.d.ts +13 -14
  532. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistration.d.ts +7 -3
  533. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationExecutionRecord.d.ts +1 -0
  534. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationIntentAuthorization.d.ts +6 -1
  535. package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationSideEffectBoundary.d.ts +11 -0
  536. package/dist/types/wallet-server/src/router/domains/ed25519Yao/routerAbEd25519YaoGatewayEnvelope.d.ts +12 -3
  537. package/dist/types/wallet-server/src/router/domains/passkeyCustody/passkeyCustodyEnvelopeRetrieval.d.ts +0 -2
  538. package/dist/types/wallet-server/src/router/domains/passkeyCustody/registrationCustodyOutcome.d.ts +10 -6
  539. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationAdmission.d.ts +10 -3
  540. package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationCommit.d.ts +12 -8
  541. package/dist/types/wallet-server/src/router/domains/signingOperations/authorizedOperationWire.d.ts +97 -0
  542. package/dist/types/wallet-server/src/router/domains/signingOperations/ecdsaSigningResponse.d.ts +13 -0
  543. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbNormalSigningAdmission.d.ts +9 -206
  544. package/dist/types/wallet-server/src/router/domains/signingOperations/routerAbPrivateSigningWorker.d.ts +0 -17
  545. package/dist/types/wallet-server/src/router/domains/signingOperations/signingPrepareSession.d.ts +23 -0
  546. package/dist/types/wallet-server/src/router/domains/signingOperations/walletExecutionAdmission.d.ts +1 -2
  547. package/dist/types/wallet-server/src/router/domains/walletRegistration/registrationSessionSeal.d.ts +36 -0
  548. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationInputs.d.ts +8 -7
  549. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationReservation.d.ts +125 -0
  550. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationRoutes.d.ts +17 -15
  551. package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts +2 -2
  552. package/dist/types/wallet-server/src/router/framework/apiCredentialPorts.d.ts +24 -0
  553. package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts +35 -41
  554. package/dist/types/wallet-server/src/router/framework/googleLoginResolution.typecheck.d.ts +2 -0
  555. package/dist/types/wallet-server/src/router/framework/registrationSetupDispatch.d.ts +13 -0
  556. package/dist/types/wallet-server/src/router/framework/routerApi.d.ts +3 -12
  557. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinking.d.ts +1 -1
  558. package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingResponses.d.ts +17 -0
  559. package/dist/types/wallet-server/src/router/transport/fetch/routes/ecdsaOperationStepUpFactor.d.ts +37 -0
  560. package/dist/types/wallet-server/src/router/transport/fetch/routes/ed25519AuthorizedOperationRevalidation.d.ts +37 -0
  561. package/dist/types/wallet-server/src/router/transport/fetch/routes/thresholdEcdsa.d.ts +1 -17
  562. package/dist/types/wallet-server/src/storage/d1Sql.d.ts +0 -1
  563. package/dist/types/wallet-server/src/storage/tenantRoute.d.ts +1 -1
  564. package/migrations/d1-signer/0040_namespace_home_challenges.sql +16 -0
  565. package/migrations/d1-signer/0041_step_up_admission_expiry.sql +28 -0
  566. package/migrations/d1-signer/0042_deployment_resource_challenges.sql +4 -0
  567. package/migrations/d1-signer/0043_google_registration_candidate_claim.sql +2 -0
  568. package/migrations/d1-signer/0044_linked_device_bootstrap_imports.sql +6 -0
  569. package/migrations/d1-signer/0045_wallet_owned_capability_receipts.sql +29 -0
  570. package/migrations/d1-signer/0046_wallet_owned_signing_abuse.sql +41 -0
  571. package/migrations/d1-signer/0047_remove_unused_near_public_keys.sql +2 -0
  572. package/migrations/d1-signer/0048_operation_owner_scope.sql +45 -0
  573. package/migrations/d1-signer/0049_wallet_relocation_challenges.sql +16 -0
  574. package/migrations/d1-signer/0050_wallet_relocation_approvals.sql +14 -0
  575. package/migrations/d1-signer/0051_wallet_relocation_email_otp.sql +92 -0
  576. package/migrations/d1-signer/0052_wallet_relocation_session_fences.sql +91 -0
  577. package/migrations/d1-signer/0053_wallet_hosted_history_import.sql +164 -0
  578. package/migrations/d1-signer/0054_wallet_authorization_freeze.sql +318 -0
  579. package/migrations/d1-signer/0055_wallet_authorization_snapshot.sql +120 -0
  580. package/migrations/d1-signer/0056_wallet_authorization_history_import.sql +424 -0
  581. package/migrations/d1-signer/0057_wallet_authorization_intake.sql +44 -0
  582. package/migrations/d1-signer/0058_wallet_ceremony_activity.sql +59 -0
  583. package/migrations/d1-signer/0059_wallet_authorization_activation.sql +45 -0
  584. package/migrations/d1-signer/0060_wallet_authorization_cleanup.sql +153 -0
  585. package/migrations/d1-signer/0061_wallet_session_operation_settlement.sql +28 -0
  586. package/migrations/d1-signer/0062_wallet_step_up_operation_settlement.sql +204 -0
  587. package/migrations/d1-signer/0063_wallet_operation_history_transfer.sql +466 -0
  588. package/migrations/d1-signer/0064_wallet_execution_generations.sql +93 -0
  589. package/migrations/d1-signer/0065_wallet_operation_execution_generation.sql +37 -0
  590. package/migrations/d1-signer/0066_regional_deployment_admission.sql +59 -0
  591. package/migrations/d1-signer/0067_registration_completion_decision.sql +12 -0
  592. package/migrations/d1-signer/0068_registration_cancellation_write_fence.sql +24 -0
  593. package/migrations/d1-signer/0069_cancelled_registration_session_fence.sql +11 -0
  594. package/migrations/d1-signer/0070_wallet_passkey_relocation.sql +369 -0
  595. package/migrations/d1-signer/0071_regional_wallet_otp_counters.sql +98 -0
  596. package/migrations/d1-signer/0072_linked_device_relocation_history.sql +899 -0
  597. package/migrations/d1-signer/0073_wallet_recovery_relocation.sql +86 -0
  598. package/migrations/d1-signer/0074_email_otp_relocation.sql +158 -0
  599. package/migrations/d1-signer/0075_wallet_authorization_return.sql +107 -0
  600. package/migrations/d1-signer/0076_wallet_relocation_write_block.sql +406 -0
  601. package/migrations/d1-signer/0077_wallet_object_addresses.sql +24 -0
  602. package/package.json +2 -3
  603. package/src/README.md +33 -3
  604. package/cloudflare-router-ab/scripts/local-key-material.mjs +0 -29
  605. package/dist/esm/core/AuthService.js +0 -2
  606. package/dist/esm/core/NearPublicKeyStore.js +0 -200
  607. package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js +0 -397
  608. package/dist/esm/core/ThresholdService/stores/KeyStore.js +0 -140
  609. package/dist/esm/core/ThresholdService/stores/SessionStore.js +0 -361
  610. package/dist/esm/core/ThresholdService/stores/StoreConfig.js +0 -13
  611. package/dist/esm/core/ThresholdService/stores/exportReplayGuard.js +0 -7
  612. package/dist/esm/core/authService/AuthService.js +0 -594
  613. package/dist/esm/core/authService/bytes.js +0 -19
  614. package/dist/esm/core/authService/configValues.js +0 -15
  615. package/dist/esm/core/authService/emailOtpChallengeOperations.js +0 -123
  616. package/dist/esm/core/authService/emailOtpChallengeProof.js +0 -183
  617. package/dist/esm/core/authService/emailOtpChallengeVerification.js +0 -264
  618. package/dist/esm/core/authService/emailOtpChallenges.js +0 -225
  619. package/dist/esm/core/authService/emailOtpDelivery.js +0 -134
  620. package/dist/esm/core/authService/emailOtpGrant.js +0 -43
  621. package/dist/esm/core/authService/emailOtpRegistrationEnrollment.js +0 -144
  622. package/dist/esm/core/authService/emailOtpUnlock.js +0 -174
  623. package/dist/esm/core/authService/googleEmailOtpOperations.js +0 -141
  624. package/dist/esm/core/authService/googleEmailOtpRegistration.js +0 -587
  625. package/dist/esm/core/authService/identity.js +0 -42
  626. package/dist/esm/core/authService/identityOperations.js +0 -32
  627. package/dist/esm/core/authService/nearAccountOperations.js +0 -229
  628. package/dist/esm/core/authService/nearPublicKeyMetadata.js +0 -108
  629. package/dist/esm/core/authService/oidcVerification.js +0 -249
  630. package/dist/esm/core/authService/registrationThresholdHelpers.js +0 -30
  631. package/dist/esm/core/authService/runtime.js +0 -45
  632. package/dist/esm/core/authService/storeRegistry.js +0 -102
  633. package/dist/esm/core/authService/thresholdStoreSummary.js +0 -32
  634. package/dist/esm/core/authService/webauthnAuthority.js +0 -17
  635. package/dist/esm/core/defaultConfigsServer.js +0 -9
  636. package/dist/esm/core/hostedAccountIds.js +0 -225
  637. package/dist/esm/core/routerAbSigning/createRouterAbSigningRuntimes.js +0 -84
  638. package/dist/esm/core/signingLanes/LaneAggregateRevocationApplicationService.js +0 -86
  639. package/dist/esm/core/signingLanes/LaneEnrollmentActivation.js +0 -324
  640. package/dist/esm/core/signingLanes/LaneEnrollmentRevocation.js +0 -173
  641. package/dist/esm/core/signingLanes/LaneLifecycleApplicationService.js +0 -198
  642. package/dist/esm/core/signingLanes/ecdsaServerRetirement.js +0 -73
  643. package/dist/esm/core/signingLanes/ed25519ServerRetirement.js +0 -68
  644. package/dist/esm/core/storeBackends.js +0 -208
  645. package/dist/esm/core/utils.js +0 -14
  646. package/dist/esm/core/webAuthnStoreBackends.js +0 -198
  647. package/dist/esm/router/cloudflare/d1/near/d1NearPublicKeyStore.js +0 -49
  648. package/dist/esm/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.js +0 -10
  649. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.js +0 -22
  650. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.js +0 -166
  651. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.js +0 -38
  652. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.js +0 -20
  653. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.js +0 -1459
  654. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneLockStore.js +0 -114
  655. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.js +0 -16
  656. package/dist/esm/router/cloudflare/d1/signingLanes/d1LaneRecords.js +0 -171
  657. package/dist/esm/router/cloudflare/d1/signingLanes/index.js +0 -10
  658. package/dist/esm/router/cloudflare/durableObjects/thresholdStore.js +0 -397
  659. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.js +0 -597
  660. package/dist/esm/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.js +0 -273
  661. package/dist/esm/router/cloudflare/signingLanes/index.js +0 -4
  662. package/dist/esm/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.js +0 -32
  663. package/dist/esm/router/transport/fetch/routes/nearPublicKeys.js +0 -27
  664. package/dist/esm/shared-ts/src/signing-lanes/rotation.js +0 -8
  665. package/dist/esm/shared-ts/src/signing-lanes/rotationDigests.js +0 -358
  666. package/dist/esm/shared-ts/src/signing-lanes/rotationLifecycle.js +0 -313
  667. package/dist/esm/shared-ts/src/signing-lanes/rotationParsers.js +0 -532
  668. package/dist/esm/shared-ts/src/signing-lanes/rotationProtocolParsers.js +0 -323
  669. package/dist/esm/shared-ts/src/signing-lanes/rotationWireFields.js +0 -59
  670. package/dist/types/shared-ts/src/signing-lanes/participantDigest.typecheck.d.ts +0 -2
  671. package/dist/types/shared-ts/src/signing-lanes/rotation.typecheck.d.ts +0 -2
  672. package/dist/types/shared-ts/src/signing-lanes/rotationDigests.d.ts +0 -13
  673. package/dist/types/shared-ts/src/signing-lanes/rotationLifecycle.d.ts +0 -78
  674. package/dist/types/shared-ts/src/signing-lanes/rotationParsers.d.ts +0 -27
  675. package/dist/types/shared-ts/src/signing-lanes/rotationProtocolParsers.d.ts +0 -6
  676. package/dist/types/shared-ts/src/signing-lanes/rotationWireFields.d.ts +0 -20
  677. package/dist/types/shared-ts/src/wallet-recovery/recoveryCodeAttempt.d.ts +0 -59
  678. package/dist/types/wallet-server/src/core/AuthService.d.ts +0 -3
  679. package/dist/types/wallet-server/src/core/NearPublicKeyStore.d.ts +0 -48
  680. package/dist/types/wallet-server/src/core/ThresholdService/stores/CloudflareDurableObjectStore.d.ts +0 -21
  681. package/dist/types/wallet-server/src/core/ThresholdService/stores/KeyStore.d.ts +0 -40
  682. package/dist/types/wallet-server/src/core/ThresholdService/stores/SessionStore.d.ts +0 -98
  683. package/dist/types/wallet-server/src/core/ThresholdService/stores/StoreConfig.d.ts +0 -4
  684. package/dist/types/wallet-server/src/core/ThresholdService/stores/ThresholdStoreConfig.typecheck.d.ts +0 -2
  685. package/dist/types/wallet-server/src/core/ThresholdService/stores/exportReplayGuard.d.ts +0 -3
  686. package/dist/types/wallet-server/src/core/authService/AuthService.d.ts +0 -490
  687. package/dist/types/wallet-server/src/core/authService/bytes.d.ts +0 -3
  688. package/dist/types/wallet-server/src/core/authService/configValues.d.ts +0 -7
  689. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeOperations.d.ts +0 -109
  690. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeProof.d.ts +0 -169
  691. package/dist/types/wallet-server/src/core/authService/emailOtpChallengeVerification.d.ts +0 -47
  692. package/dist/types/wallet-server/src/core/authService/emailOtpChallenges.d.ts +0 -86
  693. package/dist/types/wallet-server/src/core/authService/emailOtpDelivery.d.ts +0 -66
  694. package/dist/types/wallet-server/src/core/authService/emailOtpGrant.d.ts +0 -43
  695. package/dist/types/wallet-server/src/core/authService/emailOtpRegistrationEnrollment.d.ts +0 -49
  696. package/dist/types/wallet-server/src/core/authService/emailOtpUnlock.d.ts +0 -64
  697. package/dist/types/wallet-server/src/core/authService/googleEmailOtpOperations.d.ts +0 -126
  698. package/dist/types/wallet-server/src/core/authService/googleEmailOtpRegistration.d.ts +0 -169
  699. package/dist/types/wallet-server/src/core/authService/identity.d.ts +0 -25
  700. package/dist/types/wallet-server/src/core/authService/identityOperations.d.ts +0 -19
  701. package/dist/types/wallet-server/src/core/authService/nearAccountOperations.d.ts +0 -55
  702. package/dist/types/wallet-server/src/core/authService/nearPublicKeyMetadata.d.ts +0 -44
  703. package/dist/types/wallet-server/src/core/authService/oidcVerification.d.ts +0 -66
  704. package/dist/types/wallet-server/src/core/authService/registrationThresholdHelpers.d.ts +0 -11
  705. package/dist/types/wallet-server/src/core/authService/runtime.d.ts +0 -20
  706. package/dist/types/wallet-server/src/core/authService/storeRegistry.d.ts +0 -53
  707. package/dist/types/wallet-server/src/core/authService/thresholdStoreSummary.d.ts +0 -3
  708. package/dist/types/wallet-server/src/core/authService/webauthnAuthority.d.ts +0 -5
  709. package/dist/types/wallet-server/src/core/defaultConfigsServer.d.ts +0 -5
  710. package/dist/types/wallet-server/src/core/hostedAccountIds.d.ts +0 -16
  711. package/dist/types/wallet-server/src/core/routerAbSigning/createRouterAbSigningRuntimes.d.ts +0 -16
  712. package/dist/types/wallet-server/src/core/signingLanes/LaneAggregateRevocationApplicationService.d.ts +0 -36
  713. package/dist/types/wallet-server/src/core/signingLanes/LaneEffectJournalStore.d.ts +0 -62
  714. package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentActivation.d.ts +0 -13
  715. package/dist/types/wallet-server/src/core/signingLanes/LaneEnrollmentRevocation.d.ts +0 -24
  716. package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleApplicationService.d.ts +0 -141
  717. package/dist/types/wallet-server/src/core/signingLanes/LaneLifecycleStore.d.ts +0 -228
  718. package/dist/types/wallet-server/src/core/signingLanes/ecdsaServerRetirement.d.ts +0 -58
  719. package/dist/types/wallet-server/src/core/signingLanes/ed25519ServerRetirement.d.ts +0 -30
  720. package/dist/types/wallet-server/src/core/signingLanes/signingWorkerLaneMaterialIdentity.d.ts +0 -4
  721. package/dist/types/wallet-server/src/core/storeBackends.d.ts +0 -83
  722. package/dist/types/wallet-server/src/core/utils.d.ts +0 -3
  723. package/dist/types/wallet-server/src/core/webAuthnStoreBackends.d.ts +0 -96
  724. package/dist/types/wallet-server/src/router/cloudflare/d1/near/d1NearPublicKeyStore.d.ts +0 -29
  725. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1EcdsaLanePrivateBindingResolver.d.ts +0 -4
  726. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneAggregateRevocationApplicationService.d.ts +0 -4
  727. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEffectJournalStore.d.ts +0 -24
  728. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneEnrollmentGateway.d.ts +0 -20
  729. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleApplicationService.d.ts +0 -13
  730. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLifecycleStore.d.ts +0 -51
  731. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneLockStore.d.ts +0 -28
  732. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneProtocolCommitter.d.ts +0 -5
  733. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/d1LaneRecords.d.ts +0 -107
  734. package/dist/types/wallet-server/src/router/cloudflare/d1/signingLanes/index.d.ts +0 -10
  735. package/dist/types/wallet-server/src/router/cloudflare/durableObjects/thresholdStore.d.ts +0 -18
  736. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneCurveExecution.d.ts +0 -217
  737. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/cloudflareLaneProtocolCommitter.d.ts +0 -73
  738. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/index.d.ts +0 -4
  739. package/dist/types/wallet-server/src/router/cloudflare/signingLanes/linkedDeviceEd25519CeremonyBinding.d.ts +0 -6
  740. package/dist/types/wallet-server/src/router/transport/fetch/routes/nearPublicKeys.d.ts +0 -3
  741. /package/dist/esm/{core/signingLanes/LaneEffectJournalStore.js → authorization/ed25519WalletSessionAdmission.js} +0 -0
  742. /package/dist/esm/{core/signingLanes/LaneLifecycleStore.js → authorization/recoveryRouting.js} +0 -0
  743. /package/dist/esm/{core/signingLanes/signingWorkerLaneMaterialIdentity.js → authorization/sessionRouting.js} +0 -0
@@ -1,30 +1,8 @@
1
- import type { AuthorizedOperationId } from '../authorization/capabilityKinds';
2
- import type { KeyCreationSignerSlot } from '../passkey-custody/primitives';
3
- import type { MpcMaterialActivationId, MpcMaterialActivationRef, ThresholdEcdsaSessionId, WalletId, LaneHolderRecipientHandleV1 } from '../utils/domainIds';
4
- import type { EcdsaCapabilityManifestId, EcdsaCapabilityManifestRevision, EcdsaLifecycleId, EcdsaServerGeneration } from '../utils/ecdsaCapabilityActivation';
5
- import type { CorrelationId, DigestB64u, IsoTimestamp } from '../utils/canonicalPrimitives';
6
- import type { NearEd25519SigningKeyId } from '../utils/registrationIds';
7
- import type { EcdsaThresholdKeyId } from '../threshold/ecdsaDerivationRoleLocalBootstrap';
8
- import type { EcdsaManifestIdentity, EcdsaRelayerKeyId, Ed25519YaoSuiteId, LaneEnrollmentId, LaneOperationId, LaneOperationIdempotencyKey, LaneShareEpoch, LinkedDeviceEnrollmentId, SigningLaneId, ThresholdEcdsaChainTarget, WalletKeyId } from './ids';
9
- import type { LaneHolderParticipantId, HpkePublicKeyB64u, HpkePublicKeyDigestB64u, LaneCustodyBindingDigestB64u, LaneParticipantBindingDigestB64u, LaneHolderCustodyBindingId, SigningWorkerParticipantId, SigningWorkerRecipientKeyId, LaneHolderParticipantRecordV1, SigningWorkerParticipantRecordV1 } from './participants';
10
- import type { EvmFamilySigningKeySlotId } from './evmFamilySigningKeySlotId';
1
+ import type { MpcMaterialActivationRef } from '../utils/domainIds';
2
+ import type { LaneShareEpoch, SigningLaneId } from './ids';
3
+ import type { LaneHolderParticipantId, SigningWorkerParticipantId, SigningWorkerRecipientKeyId } from './participants';
11
4
  import type { SigningLaneKind } from './records';
12
5
  import type { OwnerLaneParticipantContinuityV1 } from './ownerContinuity';
13
- import type { ExclusiveUnion } from '../utils/variant';
14
- export type LinkedDeviceLaneAuthorizationBindingV1 = {
15
- kind: 'linked_device_enrollment';
16
- authorizedOperationId: AuthorizedOperationId;
17
- linkedDeviceEnrollmentId: LinkedDeviceEnrollmentId;
18
- linkedDevicePermissionDigestB64u: string;
19
- ownerLaneRefreshDigestB64u?: never;
20
- };
21
- export type OwnerLaneRefreshAuthorizationBindingV1 = {
22
- kind: 'owner_lane_refresh';
23
- authorizedOperationId: AuthorizedOperationId;
24
- ownerLaneRefreshDigestB64u: string;
25
- linkedDevicePermissionDigestB64u?: never;
26
- };
27
- export type LaneOperationAuthorizationBindingV1 = LinkedDeviceLaneAuthorizationBindingV1 | OwnerLaneRefreshAuthorizationBindingV1;
28
6
  type ActiveLaneProtocolSourceBaseV1 = {
29
7
  laneId: SigningLaneId;
30
8
  laneShareEpoch: LaneShareEpoch;
@@ -33,7 +11,7 @@ type ActiveLaneProtocolSourceBaseV1 = {
33
11
  materialActivation: MpcMaterialActivationRef;
34
12
  };
35
13
  /** Existing owner signer rows expose continuity, without linked-lane HPKE identities. */
36
- export type OwnerLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
14
+ type OwnerLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
37
15
  sourceKind: 'owner_registration';
38
16
  laneKind: 'owner_passkey' | 'owner_email_otp';
39
17
  ownerParticipantContinuity: OwnerLaneParticipantContinuityV1;
@@ -42,7 +20,7 @@ export type OwnerLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
42
20
  signingWorkerRecipientKeyId?: never;
43
21
  };
44
22
  /** Independently provisioned lanes carry their durable holder/worker identities. */
45
- export type ProvisionedLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
23
+ type ProvisionedLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
46
24
  sourceKind: 'provisioned_lane';
47
25
  laneKind: Exclude<SigningLaneKind, 'owner_passkey' | 'owner_email_otp'>;
48
26
  holderParticipantId: LaneHolderParticipantId;
@@ -51,820 +29,5 @@ export type ProvisionedLaneProtocolSourceV1 = ActiveLaneProtocolSourceBaseV1 & {
51
29
  ownerParticipantContinuity?: never;
52
30
  };
53
31
  export type ActiveLaneProtocolSourceV1 = OwnerLaneProtocolSourceV1 | ProvisionedLaneProtocolSourceV1;
54
- export declare function isProvisionedLaneProtocolSourceV1(source: ActiveLaneProtocolSourceV1): source is ProvisionedLaneProtocolSourceV1;
55
- type LaneTargetHolderV1 = {
56
- participantId: LaneHolderParticipantId;
57
- participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
58
- custodyBindingId: LaneHolderCustodyBindingId;
59
- custodyBindingDigestB64u: LaneCustodyBindingDigestB64u;
60
- hpkePublicKeyB64u: HpkePublicKeyB64u;
61
- hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
62
- };
63
- export type LaneTargetSigningWorkerV1 = {
64
- participantId: SigningWorkerParticipantId;
65
- participantBindingDigestB64u: LaneParticipantBindingDigestB64u;
66
- recipientKeyId: SigningWorkerRecipientKeyId;
67
- hpkePublicKeyB64u: HpkePublicKeyB64u;
68
- hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
69
- };
70
- export type LaneCreationTargetV1 = {
71
- operation: 'create_lane';
72
- laneId: SigningLaneId;
73
- laneKind: 'linked_device';
74
- laneShareEpoch: LaneShareEpoch;
75
- expectedTargetState: 'absent';
76
- priorMaterialActivation?: never;
77
- };
78
- export type LaneRefreshTargetV1 = {
79
- operation: 'refresh_lane';
80
- laneId: SigningLaneId;
81
- laneKind: 'owner_passkey' | 'owner_email_otp' | 'linked_device' | 'recovery' | 'break_glass';
82
- laneShareEpoch: LaneShareEpoch;
83
- expectedTargetState: 'active_previous_epoch';
84
- priorMaterialActivation: MpcMaterialActivationRef;
85
- };
86
- type EcdsaTargetThresholdSessionBindingV1 = {
87
- chainTarget: ThresholdEcdsaChainTarget;
88
- thresholdSessionId: ThresholdEcdsaSessionId;
89
- participantBindingDigestB64u: string;
90
- };
91
- export type EcdsaSourceCapabilityBindingV1 = {
92
- manifestId: EcdsaCapabilityManifestId;
93
- manifestRevision: EcdsaCapabilityManifestRevision;
94
- serverGeneration: EcdsaServerGeneration;
95
- ecdsaThresholdKeyId: EcdsaThresholdKeyId;
96
- relayerKeyId: EcdsaRelayerKeyId;
97
- };
98
- export type EcdsaTargetCapabilityBindingV1 = {
99
- manifestId: EcdsaCapabilityManifestId;
100
- manifestRevision: EcdsaCapabilityManifestRevision;
101
- ecdsaThresholdKeyId: EcdsaThresholdKeyId;
102
- orderedThresholdSessions: readonly [
103
- EcdsaTargetThresholdSessionBindingV1,
104
- ...EcdsaTargetThresholdSessionBindingV1[]
105
- ];
106
- };
107
- type LaneProtocolJobCommonV1 = {
108
- operationId: LaneOperationId;
109
- enrollmentId: LaneEnrollmentId;
110
- idempotencyKey: LaneOperationIdempotencyKey;
111
- walletId: WalletId;
112
- walletKeyId: WalletKeyId;
113
- source: ActiveLaneProtocolSourceV1;
114
- targetHolder: LaneTargetHolderV1;
115
- targetSigningWorker: LaneTargetSigningWorkerV1;
116
- targetMaterialActivationId: MpcMaterialActivationId;
117
- protocolVersion: 'rotatable_signing_lane_protocol_v1';
118
- expiresAtMs: number;
119
- };
120
- type LaneCreationOperationV1 = {
121
- target: LaneCreationTargetV1;
122
- authorization: LinkedDeviceLaneAuthorizationBindingV1;
123
- };
124
- type LaneRefreshOperationV1 = {
125
- target: LaneRefreshTargetV1;
126
- authorization: OwnerLaneRefreshAuthorizationBindingV1;
127
- };
128
- type Ed25519YaoLaneJobCurveV1 = {
129
- kind: 'ed25519_yao_lane_job_v1';
130
- keyFamily: 'ed25519';
131
- registeredPublicKeyB64u: string;
132
- nearEd25519SigningKeyId: NearEd25519SigningKeyId;
133
- keyCreationSignerSlot: KeyCreationSignerSlot;
134
- stableContextBindingB64u: string;
135
- yaoSuiteId: Ed25519YaoSuiteId;
136
- circuitDigestB64u: string;
137
- evmFamilySigningKeySlotId?: never;
138
- thresholdPublicKey33B64u?: never;
139
- evmAddress?: never;
140
- };
141
- type EcdsaAdditiveLaneJobCurveV1 = {
142
- kind: 'ecdsa_additive_lane_job_v1';
143
- keyFamily: 'ecdsa_secp256k1';
144
- evmFamilySigningKeySlotId: EvmFamilySigningKeySlotId;
145
- thresholdPublicKey33B64u: string;
146
- evmAddress: string;
147
- sourceCapability: EcdsaSourceCapabilityBindingV1;
148
- targetCapability: EcdsaTargetCapabilityBindingV1;
149
- sourceHolderVerifyingShare33B64u: string;
150
- sourceServerVerifyingShare33B64u: string;
151
- reshareChannelBindingDigestB64u: string;
152
- transcriptEncoding: 'ecdsa_additive_lane_transcript_v1';
153
- nearEd25519SigningKeyId?: never;
154
- registeredPublicKeyB64u?: never;
155
- keyCreationSignerSlot?: never;
156
- stableContextBindingB64u?: never;
157
- yaoRequestKind?: never;
158
- yaoSuiteId?: never;
159
- circuitDigestB64u?: never;
160
- };
161
- export type Ed25519YaoLaneCreationJobV1 = LaneProtocolJobCommonV1 & Ed25519YaoLaneJobCurveV1 & LaneCreationOperationV1 & {
162
- yaoRequestKind: 'lane_provisioning';
163
- };
164
- type Ed25519YaoLaneRefreshJobV1 = LaneProtocolJobCommonV1 & Ed25519YaoLaneJobCurveV1 & LaneRefreshOperationV1 & {
165
- yaoRequestKind: 'lane_refresh';
166
- };
167
- export type Ed25519YaoLaneJobV1 = Ed25519YaoLaneCreationJobV1 | Ed25519YaoLaneRefreshJobV1;
168
- export type EcdsaAdditiveLaneCreationJobV1 = LaneProtocolJobCommonV1 & LaneCreationOperationV1 & EcdsaAdditiveLaneJobCurveV1;
169
- type EcdsaAdditiveLaneRefreshJobV1 = LaneProtocolJobCommonV1 & LaneRefreshOperationV1 & EcdsaAdditiveLaneJobCurveV1;
170
- export type EcdsaAdditiveLaneJobV1 = EcdsaAdditiveLaneCreationJobV1 | EcdsaAdditiveLaneRefreshJobV1;
171
- export type RotatableSigningLaneJobV1 = Ed25519YaoLaneJobV1 | EcdsaAdditiveLaneJobV1;
172
- export type LaneProtocolCommitReceiptV1 = {
173
- kind: 'lane_protocol_commit_receipt_v1';
174
- operationId: LaneOperationId;
175
- enrollmentId: LaneEnrollmentId;
176
- walletId: WalletId;
177
- walletKeyId: WalletKeyId;
178
- sourceLaneId: SigningLaneId;
179
- sourceLaneShareEpoch: LaneShareEpoch;
180
- sourceRevocationEpoch: number;
181
- sourceMaterialActivation: MpcMaterialActivationRef;
182
- targetLaneId: SigningLaneId;
183
- targetLaneShareEpoch: LaneShareEpoch;
184
- targetMaterialActivationId: MpcMaterialActivationId;
185
- keyFamily: 'ed25519' | 'ecdsa_secp256k1';
186
- publicIdentityDigestB64u: string;
187
- targetHolderPublicCommitmentB64u: string;
188
- targetServerPublicCommitmentB64u: string;
189
- targetHolderCiphertextDigestSetB64u: string;
190
- targetServerCiphertextDigestSetB64u: string;
191
- holderRecipientKeyDigestB64u: string;
192
- serverRecipientKeyDigestB64u: string;
193
- transcriptHashB64u: string;
194
- committedAtMs: number;
195
- };
196
- export type LaneHolderDeliveryReceiptV1 = {
197
- kind: 'lane_holder_delivery_receipt_v1';
198
- operationId: LaneOperationId;
199
- enrollmentId: LaneEnrollmentId;
200
- targetLaneId: SigningLaneId;
201
- targetLaneShareEpoch: LaneShareEpoch;
202
- targetMaterialActivationId: MpcMaterialActivationId;
203
- holderParticipantBindingDigestB64u: string;
204
- holderRecipientKeyDigestB64u: string;
205
- holderCiphertextDigestSetB64u: string;
206
- sealedHolderRecordDigestB64u: string;
207
- transcriptHashB64u: string;
208
- acknowledgedAtMs: number;
209
- };
210
- export type LaneServerActivationReceiptV1 = {
211
- kind: 'lane_server_activation_receipt_v1';
212
- operationId: LaneOperationId;
213
- enrollmentId: LaneEnrollmentId;
214
- targetLaneId: SigningLaneId;
215
- targetLaneShareEpoch: LaneShareEpoch;
216
- targetMaterialActivation: MpcMaterialActivationRef;
217
- signingWorkerParticipantBindingDigestB64u: string;
218
- serverCiphertextDigestSetB64u: string;
219
- transcriptHashB64u: string;
220
- activatedAtMs: number;
221
- };
222
- type LaneProtocolAbortReason = 'cancelled' | 'expired' | 'revoked_before_commit';
223
- type LaneProtocolCompletionReason = 'exact_redelivery_required' | 'recovery_required';
224
- export type LaneProtocolLifecycle = {
225
- state: 'preparing';
226
- startedAtMs: number;
227
- } | {
228
- state: 'awaiting_protocol_commitment';
229
- startedAtMs: number;
230
- } | {
231
- state: 'committed_awaiting_holder_delivery';
232
- startedAtMs: number;
233
- committedAtMs: number;
234
- transcriptHashB64u: string;
235
- protocolCommitReceiptDigestB64u: string;
236
- } | {
237
- state: 'awaiting_server_activation';
238
- startedAtMs: number;
239
- committedAtMs: number;
240
- transcriptHashB64u: string;
241
- protocolCommitReceiptDigestB64u: string;
242
- holderDeliveryReceiptDigestB64u: string;
243
- holderReceiptAtMs: number;
244
- } | {
245
- state: 'ready_for_parent_visibility';
246
- startedAtMs: number;
247
- committedAtMs: number;
248
- transcriptHashB64u: string;
249
- protocolCommitReceiptDigestB64u: string;
250
- holderDeliveryReceiptDigestB64u: string;
251
- holderReceiptAtMs: number;
252
- serverActivationReceiptDigestB64u: string;
253
- serverActivatedAtMs: number;
254
- } | {
255
- state: 'active';
256
- transcriptHashB64u: string;
257
- protocolCommitReceiptDigestB64u: string;
258
- holderDeliveryReceiptDigestB64u: string;
259
- serverActivationReceiptDigestB64u: string;
260
- aggregateActivationReceiptDigestB64u: string;
261
- activatedAtMs: number;
262
- } | {
263
- state: 'aborted_precommit';
264
- startedAtMs: number;
265
- abortedAtMs: number;
266
- abortReason: LaneProtocolAbortReason;
267
- } | {
268
- state: 'committed_completion_required';
269
- startedAtMs: number;
270
- committedAtMs: number;
271
- transcriptHashB64u: string;
272
- protocolCommitReceiptDigestB64u: string;
273
- recoveryReason: LaneProtocolCompletionReason;
274
- };
275
- export type LaneProtocolRecordV1 = {
276
- job: RotatableSigningLaneJobV1;
277
- lifecycle: LaneProtocolLifecycle;
278
- };
279
- export type EcdsaAdditiveLaneHolderRoundV1 = {
280
- kind: 'ecdsa_additive_lane_holder_round_v1';
281
- preambleHashB64u: string;
282
- targetHolderPublicCommitment33B64u: string;
283
- encryptedDeltaCiphertextDigestB64u: string;
284
- sealedTargetHolderMaterialDigestB64u: string;
285
- holderAttestationB64u: string;
286
- holderCommittedAtMs: number;
287
- };
288
- export type LaneEnrollmentManifestChildV1 = {
289
- operationId: LaneOperationId;
290
- walletKeyId: WalletKeyId;
291
- keyFamily: 'ed25519' | 'ecdsa_secp256k1';
292
- sourceLaneId: SigningLaneId;
293
- sourceLaneShareEpoch: LaneShareEpoch;
294
- sourceRevocationEpoch: number;
295
- sourceMaterialActivation: MpcMaterialActivationRef;
296
- targetLaneId: SigningLaneId;
297
- targetLaneShareEpoch: LaneShareEpoch;
298
- targetMaterialActivationId: MpcMaterialActivationId;
299
- holderParticipantBindingDigestB64u: string;
300
- signingWorkerParticipantBindingDigestB64u: string;
301
- };
302
- export type LaneEnrollmentManifestV1 = {
303
- kind: 'lane_enrollment_manifest_v1';
304
- enrollmentId: LaneEnrollmentId;
305
- walletId: WalletId;
306
- authorization: LaneOperationAuthorizationBindingV1;
307
- orderedChildren: readonly [LaneEnrollmentManifestChildV1, ...LaneEnrollmentManifestChildV1[]];
308
- createdAtMs: number;
309
- expiresAtMs: number;
310
- };
311
- export type AggregateLaneActivationChildReceiptV1 = {
312
- operationId: LaneOperationId;
313
- walletKeyId: WalletKeyId;
314
- targetLaneId: SigningLaneId;
315
- targetLaneShareEpoch: LaneShareEpoch;
316
- targetMaterialActivation: MpcMaterialActivationRef;
317
- protocolCommitReceiptDigestB64u: string;
318
- holderDeliveryReceiptDigestB64u: string;
319
- serverActivationReceiptDigestB64u: string;
320
- };
321
- export type AggregateLaneActivationReceiptV1 = {
322
- kind: 'aggregate_lane_activation_receipt_v1';
323
- enrollmentId: LaneEnrollmentId;
324
- walletId: WalletId;
325
- manifestDigestB64u: string;
326
- orderedChildReceipts: readonly [
327
- AggregateLaneActivationChildReceiptV1,
328
- ...AggregateLaneActivationChildReceiptV1[]
329
- ];
330
- activatedAtMs: number;
331
- };
332
- export type LaneRefreshPredecessorRetirementV1 = {
333
- refreshOperationId: LaneOperationId;
334
- sourceLaneId: SigningLaneId;
335
- sourceLaneShareEpoch: LaneShareEpoch;
336
- sourceMaterialActivation: MpcMaterialActivationRef;
337
- retirementEffectBindingDigestB64u: DigestB64u;
338
- retirementReceipt: LaneServerRetirementReceiptV1;
339
- };
340
- export type CommitLaneEnrollmentActivationV1 = {
341
- kind: 'commit_lane_enrollment_activation_v1';
342
- enrollmentId: LaneEnrollmentId;
343
- walletId: WalletId;
344
- manifestDigestB64u: string;
345
- orderedChildReceipts: readonly [
346
- AggregateLaneActivationChildReceiptV1,
347
- ...AggregateLaneActivationChildReceiptV1[]
348
- ];
349
- orderedPredecessorRetirements: readonly LaneRefreshPredecessorRetirementV1[];
350
- activatedAtMs: number;
351
- };
352
- export type LaneEnrollmentLifecycleV1 = {
353
- state: 'preparing';
354
- manifestDigestB64u: string;
355
- startedAtMs: number;
356
- } | {
357
- state: 'committed_completion_required';
358
- manifestDigestB64u: string;
359
- committedChildOperationIds: readonly [LaneOperationId, ...LaneOperationId[]];
360
- markedAtMs: number;
361
- } | {
362
- state: 'ready_for_visibility';
363
- manifestDigestB64u: string;
364
- aggregateReceiptDigestB64u: string;
365
- readyAtMs: number;
366
- } | {
367
- state: 'active';
368
- manifestDigestB64u: string;
369
- aggregateReceiptDigestB64u: string;
370
- activatedAtMs: number;
371
- } | {
372
- state: 'cancelled_precommit';
373
- cancelledAtMs: number;
374
- } | {
375
- state: 'revoking_committed_targets';
376
- manifestDigestB64u: string;
377
- reason: 'cancelled_after_commit' | 'expired_after_commit' | 'revoked_during_activation';
378
- markedAtMs: number;
379
- } | {
380
- state: 'revoked';
381
- manifestDigestB64u: string;
382
- aggregateRevocationReceiptDigestB64u: string;
383
- revokedAtMs: number;
384
- };
385
- export type EcdsaServerRetirementReceiptV1 = {
386
- kind: 'ecdsa_server_retirement_receipt_v1';
387
- manifest: EcdsaManifestIdentity;
388
- materialActivation: MpcMaterialActivationRef;
389
- walletKeyId: WalletKeyId;
390
- laneId: SigningLaneId;
391
- laneShareEpoch: LaneShareEpoch;
392
- revocationEpoch: number;
393
- retirementReason: 'lane_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
394
- retirementCorrelationId: CorrelationId;
395
- retirementRequestDigestB64u: string;
396
- serverGeneration: EcdsaServerGeneration;
397
- lifecycleId: EcdsaLifecycleId;
398
- receiptDigestB64u: string;
399
- retiredAt: IsoTimestamp;
400
- };
401
- export type SigningWorkerLaneMaterialIdentityV1<TKeyFamily extends 'ed25519' | 'ecdsa_secp256k1' = 'ed25519' | 'ecdsa_secp256k1'> = {
402
- operationId: LaneOperationId;
403
- enrollmentId: LaneEnrollmentId;
404
- walletId: WalletId;
405
- walletKeyId: WalletKeyId;
406
- targetLaneId: SigningLaneId;
407
- targetLaneShareEpoch: LaneShareEpoch;
408
- targetMaterialActivationId: MpcMaterialActivationId;
409
- keyFamily: TKeyFamily;
410
- holderParticipantBindingDigestB64u: DigestB64u;
411
- signingWorkerParticipantBindingDigestB64u: DigestB64u;
412
- holderRecipientKeyDigestB64u: DigestB64u;
413
- serverRecipientKeyDigestB64u: DigestB64u;
414
- transcriptHashB64u: DigestB64u;
415
- protocolCommitReceiptDigestB64u: DigestB64u;
416
- };
417
- export type Ed25519ServerRetirementReceiptV1 = {
418
- kind: 'ed25519_server_retirement_receipt_v1';
419
- identity: SigningWorkerLaneMaterialIdentityV1<'ed25519'>;
420
- revocationEpoch: number;
421
- retirementReason: 'lane_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
422
- retirementCorrelationId: CorrelationId;
423
- retirementRequestDigestB64u: DigestB64u;
424
- receiptDigestB64u: DigestB64u;
425
- retiredAtMs: number;
426
- };
427
- export type LaneServerRetirementReceiptV1 = EcdsaServerRetirementReceiptV1 | Ed25519ServerRetirementReceiptV1;
428
- type LaneProductEpochRecordCommonV1 = {
429
- kind: 'lane_product_epoch_record_v1';
430
- walletId: WalletId;
431
- walletKeyId: WalletKeyId;
432
- laneId: SigningLaneId;
433
- laneKind: SigningLaneKind;
434
- laneShareEpoch: LaneShareEpoch;
435
- keyFamily: 'ed25519' | 'ecdsa_secp256k1';
436
- enrollmentId: LaneEnrollmentId;
437
- operationId: LaneOperationId;
438
- targetMaterialActivationId: MpcMaterialActivationId;
439
- materialActivation: MpcMaterialActivationRef;
440
- publicIdentityDigestB64u: string;
441
- holderParticipant: LaneHolderParticipantRecordV1;
442
- signingWorkerParticipant: SigningWorkerParticipantRecordV1;
443
- participantSetBindingDigestB64u: LaneParticipantBindingDigestB64u;
444
- revocationEpoch: number;
445
- createdAtMs: number;
446
- };
447
- export type LaneProductEpochPendingVisibilityV1 = LaneProductEpochRecordCommonV1 & {
448
- state: 'pending_visibility';
449
- aggregateManifestDigestB64u: string;
450
- protocolCommitReceiptDigestB64u: string;
451
- holderDeliveryReceiptDigestB64u: string;
452
- serverActivationReceiptDigestB64u: string;
453
- pendingSinceMs: number;
454
- activatedAtMs?: never;
455
- retiredAtMs?: never;
456
- retirementReason?: never;
457
- retirementReceiptDigestB64u?: never;
458
- revokedAtMs?: never;
459
- revocationReason?: never;
460
- revocationReceiptDigestB64u?: never;
461
- retirementEffectBindingDigestB64u?: never;
462
- revocationRequestedAtMs?: never;
463
- };
464
- export type LaneProductEpochActiveV1 = LaneProductEpochRecordCommonV1 & {
465
- state: 'active';
466
- aggregateManifestDigestB64u: string;
467
- aggregateActivationReceiptDigestB64u: string;
468
- activatedAtMs: number;
469
- pendingSinceMs?: never;
470
- protocolCommitReceiptDigestB64u?: never;
471
- holderDeliveryReceiptDigestB64u?: never;
472
- serverActivationReceiptDigestB64u?: never;
473
- retiredAtMs?: never;
474
- retirementReason?: never;
475
- retirementReceiptDigestB64u?: never;
476
- revokedAtMs?: never;
477
- revocationReason?: never;
478
- revocationReceiptDigestB64u?: never;
479
- retirementEffectBindingDigestB64u?: never;
480
- revocationRequestedAtMs?: never;
481
- };
482
- export type LaneProductEpochRetiredV1 = LaneProductEpochRecordCommonV1 & {
483
- state: 'retired';
484
- retirementReason: 'rotation' | 'device_compromise' | 'agent_compromise';
485
- retirementReceiptDigestB64u: string;
486
- retiredAtMs: number;
487
- pendingSinceMs?: never;
488
- aggregateManifestDigestB64u?: never;
489
- protocolCommitReceiptDigestB64u?: never;
490
- holderDeliveryReceiptDigestB64u?: never;
491
- serverActivationReceiptDigestB64u?: never;
492
- aggregateActivationReceiptDigestB64u?: never;
493
- activatedAtMs?: never;
494
- revokedAtMs?: never;
495
- revocationReason?: never;
496
- revocationReceiptDigestB64u?: never;
497
- retirementEffectBindingDigestB64u?: never;
498
- revocationRequestedAtMs?: never;
499
- };
500
- export type LaneProductEpochRevocationPendingV1 = LaneProductEpochRecordCommonV1 & {
501
- state: 'revocation_pending';
502
- revocationReason: 'user_revoked' | 'policy_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
503
- retirementEffectBindingDigestB64u: string;
504
- revocationRequestedAtMs: number;
505
- pendingSinceMs?: never;
506
- aggregateManifestDigestB64u?: never;
507
- protocolCommitReceiptDigestB64u?: never;
508
- holderDeliveryReceiptDigestB64u?: never;
509
- serverActivationReceiptDigestB64u?: never;
510
- aggregateActivationReceiptDigestB64u?: never;
511
- activatedAtMs?: never;
512
- retiredAtMs?: never;
513
- retirementReason?: never;
514
- retirementReceiptDigestB64u?: never;
515
- revokedAtMs?: never;
516
- revocationReceiptDigestB64u?: never;
517
- };
518
- export type LaneProductEpochRevokedV1 = LaneProductEpochRecordCommonV1 & {
519
- state: 'revoked';
520
- revocationReason: 'user_revoked' | 'policy_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
521
- retirementEffectBindingDigestB64u: string;
522
- revocationReceiptDigestB64u: string;
523
- revokedAtMs: number;
524
- pendingSinceMs?: never;
525
- aggregateManifestDigestB64u?: never;
526
- protocolCommitReceiptDigestB64u?: never;
527
- holderDeliveryReceiptDigestB64u?: never;
528
- serverActivationReceiptDigestB64u?: never;
529
- aggregateActivationReceiptDigestB64u?: never;
530
- activatedAtMs?: never;
531
- retiredAtMs?: never;
532
- retirementReason?: never;
533
- retirementReceiptDigestB64u?: never;
534
- revocationRequestedAtMs?: never;
535
- };
536
- export type LaneProductEpochRecordV1 = LaneProductEpochPendingVisibilityV1 | LaneProductEpochActiveV1 | LaneProductEpochRetiredV1 | LaneProductEpochRevocationPendingV1 | LaneProductEpochRevokedV1;
537
- export type CompleteSigningLaneRevocationV1 = {
538
- kind: 'complete_signing_lane_revocation_v1';
539
- command: RevokeSigningLaneV1;
540
- expectedVersion: number;
541
- commandDigestB64u: string;
542
- retirementReceipt: LaneServerRetirementReceiptV1;
543
- revokedAtMs: number;
544
- };
545
- export type AggregateLaneRevocationChildReceiptV1 = {
546
- operationId: LaneOperationId;
547
- walletKeyId: WalletKeyId;
548
- targetLaneId: SigningLaneId;
549
- targetLaneShareEpoch: LaneShareEpoch;
550
- targetMaterialActivation: MpcMaterialActivationRef;
551
- revocationEpoch: number;
552
- retirementReceiptDigestB64u: string;
553
- };
554
- export type AggregateLaneRevocationReceiptV1 = {
555
- kind: 'aggregate_lane_revocation_receipt_v1';
556
- enrollmentId: LaneEnrollmentId;
557
- walletId: WalletId;
558
- manifestDigestB64u: string;
559
- orderedChildReceipts: readonly [
560
- AggregateLaneRevocationChildReceiptV1,
561
- ...AggregateLaneRevocationChildReceiptV1[]
562
- ];
563
- revokedAtMs: number;
564
- };
565
- export type RevokeLaneEnrollmentV1 = {
566
- kind: 'revoke_lane_enrollment_v1';
567
- enrollmentId: LaneEnrollmentId;
568
- walletId: WalletId;
569
- manifestDigestB64u: string;
570
- reason: 'cancelled_after_commit' | 'expired_after_commit' | 'revoked_during_activation' | 'user_revoked' | 'device_compromise' | 'agent_compromise';
571
- requestedAtMs: number;
572
- };
573
- export type RevokeSigningLaneV1 = {
574
- kind: 'revoke_signing_lane_v1';
575
- walletId: WalletId;
576
- walletKeyId: WalletKeyId;
577
- laneId: SigningLaneId;
578
- laneShareEpoch: LaneShareEpoch;
579
- expectedRevocationEpoch: number;
580
- reason: 'user_revoked' | 'policy_revoked' | 'device_compromise' | 'agent_compromise' | 'rotation';
581
- retirementCorrelationId: CorrelationId;
582
- retirementRequestDigestB64u: string;
583
- retirementEffectBindingDigestB64u: string;
584
- requestedAtMs: number;
585
- };
586
- export type CommitLaneEnrollmentRevocationV1 = {
587
- kind: 'commit_lane_enrollment_revocation_v1';
588
- enrollmentId: LaneEnrollmentId;
589
- walletId: WalletId;
590
- manifestDigestB64u: string;
591
- receipt: AggregateLaneRevocationReceiptV1;
592
- revokedAtMs: number;
593
- };
594
- export type LaneEnrollmentActivationResultV1 = {
595
- kind: 'lane_enrollment_activation_result_v1';
596
- outcome: 'applied';
597
- enrollmentId: LaneEnrollmentId;
598
- version: number;
599
- commandDigestB64u: string;
600
- receipt: AggregateLaneActivationReceiptV1;
601
- lifecycle: Extract<LaneEnrollmentLifecycleV1, {
602
- state: 'active';
603
- }>;
604
- productEpochs: readonly [LaneProductEpochActiveV1, ...LaneProductEpochActiveV1[]];
605
- } | {
606
- kind: 'lane_enrollment_activation_result_v1';
607
- outcome: 'replayed';
608
- enrollmentId: LaneEnrollmentId;
609
- version: number;
610
- commandDigestB64u: string;
611
- receipt: AggregateLaneActivationReceiptV1;
612
- lifecycle: Extract<LaneEnrollmentLifecycleV1, {
613
- state: 'active';
614
- }>;
615
- productEpochs: readonly [LaneProductEpochActiveV1, ...LaneProductEpochActiveV1[]];
616
- } | {
617
- kind: 'lane_enrollment_activation_result_v1';
618
- outcome: 'conflict';
619
- enrollmentId: LaneEnrollmentId;
620
- expectedVersion: number;
621
- actualVersion: number;
622
- requestedCommandDigestB64u: string;
623
- storedCommandDigestB64u: string;
624
- };
625
- export type LaneEnrollmentRevocationResultV1 = {
626
- kind: 'lane_enrollment_revocation_result_v1';
627
- outcome: 'applied';
628
- enrollmentId: LaneEnrollmentId;
629
- version: number;
630
- commandDigestB64u: string;
631
- receipt: AggregateLaneRevocationReceiptV1;
632
- lifecycle: Extract<LaneEnrollmentLifecycleV1, {
633
- state: 'revoked';
634
- }>;
635
- productEpochs: readonly [LaneProductEpochRevokedV1, ...LaneProductEpochRevokedV1[]];
636
- } | {
637
- kind: 'lane_enrollment_revocation_result_v1';
638
- outcome: 'replayed';
639
- enrollmentId: LaneEnrollmentId;
640
- version: number;
641
- commandDigestB64u: string;
642
- receipt: AggregateLaneRevocationReceiptV1;
643
- lifecycle: Extract<LaneEnrollmentLifecycleV1, {
644
- state: 'revoked';
645
- }>;
646
- productEpochs: readonly [LaneProductEpochRevokedV1, ...LaneProductEpochRevokedV1[]];
647
- } | {
648
- kind: 'lane_enrollment_revocation_result_v1';
649
- outcome: 'conflict';
650
- enrollmentId: LaneEnrollmentId;
651
- expectedVersion: number;
652
- actualVersion: number;
653
- requestedCommandDigestB64u: string;
654
- storedCommandDigestB64u: string;
655
- };
656
- export type LaneSigningLaneRevocationResultV1 = {
657
- kind: 'lane_signing_lane_revocation_result_v1';
658
- outcome: 'applied';
659
- walletKeyId: WalletKeyId;
660
- laneId: SigningLaneId;
661
- laneShareEpoch: LaneShareEpoch;
662
- version: number;
663
- commandDigestB64u: string;
664
- productEpoch: LaneProductEpochRevokedV1;
665
- retirementReceipt: LaneServerRetirementReceiptV1;
666
- } | {
667
- kind: 'lane_signing_lane_revocation_result_v1';
668
- outcome: 'replayed';
669
- walletKeyId: WalletKeyId;
670
- laneId: SigningLaneId;
671
- laneShareEpoch: LaneShareEpoch;
672
- version: number;
673
- commandDigestB64u: string;
674
- productEpoch: LaneProductEpochRevokedV1;
675
- retirementReceipt: LaneServerRetirementReceiptV1;
676
- } | {
677
- kind: 'lane_signing_lane_revocation_result_v1';
678
- outcome: 'conflict';
679
- walletKeyId: WalletKeyId;
680
- laneId: SigningLaneId;
681
- laneShareEpoch: LaneShareEpoch;
682
- expectedVersion: number;
683
- actualVersion: number;
684
- requestedCommandDigestB64u: string;
685
- storedCommandDigestB64u: string;
686
- };
687
- export type LaneSigningLaneRevocationFenceResultV1 = {
688
- kind: 'lane_signing_lane_revocation_fence_result_v1';
689
- outcome: 'applied' | 'replayed';
690
- walletKeyId: WalletKeyId;
691
- laneId: SigningLaneId;
692
- laneShareEpoch: LaneShareEpoch;
693
- version: number;
694
- commandDigestB64u: string;
695
- productEpoch: LaneProductEpochRevocationPendingV1;
696
- } | {
697
- kind: 'lane_signing_lane_revocation_fence_result_v1';
698
- outcome: 'already_completed';
699
- walletKeyId: WalletKeyId;
700
- laneId: SigningLaneId;
701
- laneShareEpoch: LaneShareEpoch;
702
- version: number;
703
- commandDigestB64u: string;
704
- productEpoch: LaneProductEpochRevokedV1;
705
- retirementReceipt: LaneServerRetirementReceiptV1;
706
- } | {
707
- kind: 'lane_signing_lane_revocation_fence_result_v1';
708
- outcome: 'conflict';
709
- walletKeyId: WalletKeyId;
710
- laneId: SigningLaneId;
711
- laneShareEpoch: LaneShareEpoch;
712
- expectedVersion: number;
713
- actualVersion: number;
714
- requestedCommandDigestB64u: string;
715
- storedCommandDigestB64u: string;
716
- };
717
- export type LaneProtocolCasResultV1 = {
718
- outcome: 'applied';
719
- version: number;
720
- record: LaneProtocolRecordV1;
721
- commandDigestB64u: string;
722
- } | {
723
- outcome: 'replayed';
724
- version: number;
725
- record: LaneProtocolRecordV1;
726
- commandDigestB64u: string;
727
- } | {
728
- outcome: 'conflict';
729
- expectedVersion: number;
730
- actualVersion: number;
731
- requestedCommandDigestB64u: string;
732
- storedCommandDigestB64u: string;
733
- };
734
- export type PreparedLaneProtocolRecordV1 = {
735
- version: number;
736
- commandDigestB64u: DigestB64u;
737
- record: LaneProtocolRecordV1;
738
- };
739
- export type LaneEnrollmentPreparationResultV1 = {
740
- kind: 'lane_enrollment_preparation_result_v1';
741
- outcome: 'applied' | 'replayed';
742
- enrollmentId: LaneEnrollmentId;
743
- version: number;
744
- commandDigestB64u: DigestB64u;
745
- lifecycle: LaneEnrollmentLifecycleV1;
746
- orderedProtocols: readonly [PreparedLaneProtocolRecordV1, ...PreparedLaneProtocolRecordV1[]];
747
- } | {
748
- kind: 'lane_enrollment_preparation_result_v1';
749
- outcome: 'conflict';
750
- enrollmentId: LaneEnrollmentId;
751
- expectedVersion: number | null;
752
- actualVersion: number;
753
- requestedCommandDigestB64u: DigestB64u;
754
- storedCommandDigestB64u: DigestB64u;
755
- };
756
- export type EcdsaLaneProtocolWasmV1 = {
757
- prepareEcdsaAdditiveLaneHolderRoundV1(input: EcdsaAdditiveLaneJobV1): Promise<EcdsaAdditiveLaneHolderPreparationV1>;
758
- };
759
- export type { LaneHolderRecipientHandleV1 } from '../utils/domainIds';
760
- type LaneHolderRecipientDescriptorV1 = {
761
- recipientHandle: LaneHolderRecipientHandleV1;
762
- hpkePublicKeyB64u: HpkePublicKeyB64u;
763
- hpkePublicKeyDigestB64u: HpkePublicKeyDigestB64u;
764
- };
765
- export type LaneHolderPackageWireV1 = ExclusiveUnion<{
766
- kind: 'ed25519_yao_lane_holder_package_set_v1';
767
- deriverAEncryptedPackageJson: string;
768
- deriverBEncryptedPackageJson: string;
769
- } | {
770
- kind: 'ecdsa_additive_lane_holder_package_v1';
771
- ecdsaEncryptedMaterialEnvelopeJson: string;
772
- }>;
773
- export type EcdsaAdditiveLaneHolderPreparationV1 = {
774
- kind: 'ecdsa_additive_lane_holder_preparation_v1';
775
- holderRound: EcdsaAdditiveLaneHolderRoundV1;
776
- holderPackage: Extract<LaneHolderPackageWireV1, {
777
- kind: 'ecdsa_additive_lane_holder_package_v1';
778
- }>;
779
- encryptedDeltaPackageJson: string;
780
- };
781
- export type Ed25519YaoLaneClientCompletionV1 = {
782
- protocolCommitReceipt: LaneProtocolCommitReceiptV1;
783
- holderPackage: Extract<LaneHolderPackageWireV1, {
784
- kind: 'ed25519_yao_lane_holder_package_set_v1';
785
- }>;
786
- };
787
- type SealedLaneHolderMaterialV1 = {
788
- sealedHolderMaterialB64u: string;
789
- sealedHolderRecordDigestB64u: DigestB64u;
790
- verifiedHolderCiphertextDigestSetB64u: DigestB64u;
791
- };
792
- type VerifiedLaneHolderPackageV1 = {
793
- verifiedHolderCiphertextDigestSetB64u: DigestB64u;
794
- };
795
- export type WasmEd25519YaoLaneClientV1 = {
796
- prepare(input: Ed25519YaoLaneJobV1): Promise<{
797
- requestJson: string;
798
- }>;
799
- complete(input: {
800
- job: Ed25519YaoLaneJobV1;
801
- responseJson: string;
802
- }): Promise<Ed25519YaoLaneClientCompletionV1>;
803
- };
804
- export type PrepareLaneEnrollmentV1 = {
805
- manifest: LaneEnrollmentManifestV1;
806
- children: readonly [RotatableSigningLaneJobV1, ...RotatableSigningLaneJobV1[]];
807
- };
808
- export type ResumeLaneProtocolOperationV1 = {
809
- operationId: LaneOperationId;
810
- enrollmentId: LaneEnrollmentId;
811
- idempotencyKey: LaneOperationIdempotencyKey;
812
- expectedVersion: number;
813
- };
814
- export type RecordLaneHolderDeliveryV1 = {
815
- receipt: LaneHolderDeliveryReceiptV1;
816
- expectedVersion: number;
817
- };
818
- export type RecordLaneProtocolCommitV1 = {
819
- receipt: LaneProtocolCommitReceiptV1;
820
- expectedVersion: number;
821
- };
822
- export type ActivateLaneServerMaterialV1 = {
823
- receipt: LaneServerActivationReceiptV1;
824
- expectedVersion: number;
825
- };
826
- export type LaneHolderRecipientWorkerV1 = {
827
- createLaneHolderRecipientV1(input: {
828
- operationId: LaneOperationId;
829
- enrollmentId: LaneEnrollmentId;
830
- walletKeyId: WalletKeyId;
831
- targetLaneId: SigningLaneId;
832
- targetLaneShareEpoch: LaneShareEpoch;
833
- targetMaterialActivationId: MpcMaterialActivationId;
834
- targetHolderParticipantId: LaneHolderParticipantId;
835
- custodyBindingId: LaneHolderCustodyBindingId;
836
- custodyBindingDigestB64u: LaneCustodyBindingDigestB64u;
837
- }): Promise<LaneHolderRecipientDescriptorV1>;
838
- openAndSealLaneHolderPackageV1(input: {
839
- job: RotatableSigningLaneJobV1;
840
- protocolCommitReceipt: LaneProtocolCommitReceiptV1;
841
- holderPackage: LaneHolderPackageWireV1;
842
- recipientHandle: LaneHolderRecipientHandleV1;
843
- }): Promise<SealedLaneHolderMaterialV1>;
844
- verifyLaneHolderPackageCommitmentV1(input: {
845
- job: RotatableSigningLaneJobV1;
846
- protocolCommitReceipt: LaneProtocolCommitReceiptV1;
847
- holderPackage: LaneHolderPackageWireV1;
848
- }): Promise<VerifiedLaneHolderPackageV1>;
849
- discardLaneHolderRecipientV1(input: {
850
- recipientHandle: LaneHolderRecipientHandleV1;
851
- operationId: LaneOperationId;
852
- }): Promise<void>;
853
- invalidateLaneMaterialV1(input: {
854
- walletKeyId: WalletKeyId;
855
- laneId: SigningLaneId;
856
- laneShareEpoch: LaneShareEpoch;
857
- materialActivation: MpcMaterialActivationRef;
858
- }): Promise<void>;
859
- };
860
- export type LaneEnrollmentGatewayV1 = {
861
- prepareLaneEnrollmentV1(input: PrepareLaneEnrollmentV1): Promise<LaneEnrollmentPreparationResultV1>;
862
- resumeLaneProtocolOperationV1(input: ResumeLaneProtocolOperationV1): Promise<LaneProtocolCasResultV1>;
863
- recordLaneProtocolCommitV1(input: RecordLaneProtocolCommitV1): Promise<LaneProtocolCasResultV1>;
864
- recordLaneHolderDeliveryV1(input: RecordLaneHolderDeliveryV1): Promise<LaneProtocolCasResultV1>;
865
- activateLaneServerMaterialV1(input: ActivateLaneServerMaterialV1): Promise<LaneProtocolCasResultV1>;
866
- commitLaneEnrollmentActivationV1(input: CommitLaneEnrollmentActivationV1): Promise<LaneEnrollmentActivationResultV1>;
867
- fenceSigningLaneRevocationV1(input: RevokeSigningLaneV1): Promise<LaneSigningLaneRevocationFenceResultV1>;
868
- completeSigningLaneRevocationV1(input: CompleteSigningLaneRevocationV1): Promise<LaneSigningLaneRevocationResultV1>;
869
- };
32
+ export {};
870
33
  //# sourceMappingURL=rotation.d.ts.map