@seams/wallet-server 0.11.0 → 0.12.0

package/dist/esm/threshold/session/signingSessionSeal/idempotencyBackends.js

@@ -1,6 +1,5 @@
 import { normalizeOptionalTrimmedString } from "../../../shared-ts/src/utils/normalize.js";
-import { RedisTcpClient, UpstashRedisRestClient, redisDel, redisGetJson, redisSetJson } from "../../../core/ThresholdService/kv.js";
-import { createInMemorySigningSessionSealIdempotencyStore } from "./idempotency.js";
+import { UpstashRedisRestClient } from "../../../core/ThresholdService/kv.js";
 import { parseCurrentSigningSessionSealIdempotencyResultRecord, parseCurrentSigningSessionSealIdempotencyStoredEntry } from "./idempotencyRecords.js";
 //#region src/threshold/session/signingSessionSeal/idempotencyBackends.ts
 const DEFAULT_KEY_PREFIX = "threshold:signing-session-seal:idempotency:";
@@ -55,76 +54,10 @@ var UpstashSigningSessionSealIdempotencyStore = class {
 		}, ttlMs);
 	}
 };
-var RedisTcpSigningSessionSealIdempotencyStore = class {
-	constructor(options) {
-		this.client = new RedisTcpClient(options.redisUrl);
-		this.keyPrefix = normalizeOptionalTrimmedString(options.keyPrefix) || DEFAULT_KEY_PREFIX;
-		this.nowMs = options.nowMs || Date.now;
-	}
-	async get(input) {
-		const key = prefixedKey(this.keyPrefix, input.key);
-		if (!key) return null;
-		const entry = parseCurrentSigningSessionSealIdempotencyStoredEntry(await redisGetJson(this.client, key));
-		if (!entry) return null;
-		if (entry.expiresAtMs <= input.nowMs) {
-			try {
-				await redisDel(this.client, key);
-			} catch {}
-			return null;
-		}
-		return entry.result;
-	}
-	async set(input) {
-		const key = prefixedKey(this.keyPrefix, input.key);
-		if (!key) return;
-		const expiresAtMs = toPositiveInt(input.expiresAtMs);
-		if (expiresAtMs === void 0) return;
-		const normalizedResult = parseCurrentSigningSessionSealIdempotencyResultRecord(input.result);
-		if (!normalizedResult) return;
-		const ttlMs = ttlMsUntilExpiry(expiresAtMs, this.nowMs());
-		if (ttlMs <= 0) return;
-		await redisSetJson(this.client, key, {
-			result: normalizedResult,
-			expiresAtMs
-		}, ttlMs);
-	}
-};
 function createUpstashSigningSessionSealIdempotencyStore(options) {
 	return new UpstashSigningSessionSealIdempotencyStore(options);
 }
-function createRedisTcpSigningSessionSealIdempotencyStore(options) {
-	return new RedisTcpSigningSessionSealIdempotencyStore(options);
-}
-function resolveSigningSessionSealIdempotencyFromEnv(input) {
-	const idempotencyKind = normalizeOptionalTrimmedString(input.idempotencyKind || "").toLowerCase();
-	const upstashUrl = normalizeOptionalTrimmedString(input.upstashUrl || "");
-	const upstashToken = normalizeOptionalTrimmedString(input.upstashToken || "");
-	const redisUrl = normalizeOptionalTrimmedString(input.redisUrl || "");
-	const keyPrefix = normalizeOptionalTrimmedString(input.keyPrefix || "") || DEFAULT_KEY_PREFIX;
-	const ttlMs = toPositiveInt(input.ttlMs);
-	const selectedKind = idempotencyKind || (upstashUrl || upstashToken ? "upstash-redis-rest" : redisUrl ? "redis-tcp" : "in-memory");
-	let store;
-	if (selectedKind === "upstash-redis-rest") {
-		if (!upstashUrl || !upstashToken) throw new Error("Upstash signing session-seal idempotency requires both upstashUrl and upstashToken");
-		store = createUpstashSigningSessionSealIdempotencyStore({
-			url: upstashUrl,
-			token: upstashToken,
-			keyPrefix
-		});
-	} else if (selectedKind === "redis-tcp") {
-		if (!redisUrl) throw new Error("Redis TCP signing session-seal idempotency requires redisUrl");
-		store = createRedisTcpSigningSessionSealIdempotencyStore({
-			redisUrl,
-			keyPrefix
-		});
-	} else if (selectedKind === "in-memory") store = createInMemorySigningSessionSealIdempotencyStore();
-	else throw new Error(`Unsupported signing session-seal idempotency kind "${selectedKind}". Expected in-memory, upstash-redis-rest, or redis-tcp.`);
-	return {
-		store,
-		...ttlMs ? { ttlMs } : {}
-	};
-}
 //#endregion
-export { createRedisTcpSigningSessionSealIdempotencyStore, createUpstashSigningSessionSealIdempotencyStore, resolveSigningSessionSealIdempotencyFromEnv };
+export { createUpstashSigningSessionSealIdempotencyStore };
 
 //# sourceMappingURL=idempotencyBackends.js.map

package/dist/esm/threshold/session/signingSessionSeal/index.js

@@ -7,6 +7,6 @@ import { createSigningSessionSealService } from "./service.js";
 import { createSigningSessionSealRoutesOptions } from "./routesOptions.js";
 import { createSigningSessionSealOptions, parseSigningSessionSealRootConfig } from "./options.js";
 import { createInMemorySigningSessionSealIdempotencyStore } from "./idempotency.js";
-import { createRedisTcpSigningSessionSealRateLimiter, createUpstashSigningSessionSealRateLimiter, resolveSigningSessionSealRateLimitFromEnv } from "./guards/backends.js";
-import { createRedisTcpSigningSessionSealIdempotencyStore, createUpstashSigningSessionSealIdempotencyStore, resolveSigningSessionSealIdempotencyFromEnv } from "./idempotencyBackends.js";
-export { authorizeSigningSessionSealRequest, buildSigningSessionSealApplyPath, buildSigningSessionSealRemovePath, composeSigningSessionSealGuards, createInMemorySigningSessionSealIdempotencyStore, createInMemorySigningSessionSealRateLimiter, createPassthroughSigningSessionSealCipherAdapter, createRedisTcpSigningSessionSealIdempotencyStore, createRedisTcpSigningSessionSealRateLimiter, createSigningSessionSealAuditLogger, createSigningSessionSealCipherAdapter, createSigningSessionSealOptions, createSigningSessionSealRateLimitGuard, createSigningSessionSealRoutesOptions, createSigningSessionSealService, createSigningSessionSealShamir3PassCipherAdapter, createUpstashSigningSessionSealIdempotencyStore, createUpstashSigningSessionSealRateLimiter, encodeSigningSessionSealServerLockContext, handleSigningSessionSealRoutes, parseSigningSessionSealApplyBody, parseSigningSessionSealRemoveBody, parseSigningSessionSealRootConfig, resolveSigningSessionSealBasePath, resolveSigningSessionSealIdempotencyFromEnv, resolveSigningSessionSealRateLimitFromEnv, signingSessionSealAuthorizeStatusCode, signingSessionSealStatusCode };
+import { createUpstashSigningSessionSealRateLimiter } from "./guards/backends.js";
+import { createUpstashSigningSessionSealIdempotencyStore } from "./idempotencyBackends.js";
+export { authorizeSigningSessionSealRequest, buildSigningSessionSealApplyPath, buildSigningSessionSealRemovePath, composeSigningSessionSealGuards, createInMemorySigningSessionSealIdempotencyStore, createInMemorySigningSessionSealRateLimiter, createPassthroughSigningSessionSealCipherAdapter, createSigningSessionSealAuditLogger, createSigningSessionSealCipherAdapter, createSigningSessionSealOptions, createSigningSessionSealRateLimitGuard, createSigningSessionSealRoutesOptions, createSigningSessionSealService, createSigningSessionSealShamir3PassCipherAdapter, createUpstashSigningSessionSealIdempotencyStore, createUpstashSigningSessionSealRateLimiter, encodeSigningSessionSealServerLockContext, handleSigningSessionSealRoutes, parseSigningSessionSealApplyBody, parseSigningSessionSealRemoveBody, parseSigningSessionSealRootConfig, resolveSigningSessionSealBasePath, signingSessionSealAuthorizeStatusCode, signingSessionSealStatusCode };

package/dist/types/wallet-server/src/core/ThresholdService/kv.d.ts

@@ -13,33 +13,4 @@ export declare class UpstashRedisRestClient {
     setJson(key: string, value: unknown, ttlMs?: number): Promise<void>;
     eval(script: string, keys: string[], args: string[]): Promise<unknown | null>;
 }
-export type RedisResp = {
-    type: 'simple';
-    value: string;
-} | {
-    type: 'error';
-    value: string;
-} | {
-    type: 'integer';
-    value: number;
-} | {
-    type: 'bulk';
-    value: string | null;
-};
-export declare class RedisTcpClient {
-    private readonly url;
-    private socket;
-    private buffer;
-    private pending;
-    private connecting;
-    constructor(redisUrl: string);
-    private ensureConnected;
-    private connect;
-    private drain;
-    private failAll;
-    send(args: string[]): Promise<RedisResp>;
-}
-export declare function redisGetJson(client: RedisTcpClient, key: string): Promise<unknown | null>;
-export declare function redisDel(client: RedisTcpClient, key: string): Promise<void>;
-export declare function redisSetJson(client: RedisTcpClient, key: string, value: unknown, ttlMs?: number): Promise<void>;
 //# sourceMappingURL=kv.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare-adaptor.d.ts

@@ -44,8 +44,6 @@ export type { InMemoryRouterApiRuntimeSnapshotConsumer, RouterApiRuntimeSnapshot
 export { createInMemoryRouterApiRuntimeSnapshotConsumer, validateRuntimeSnapshotExpectation, } from './framework/runtimeSnapshotConsumer';
 export { extractBearerCredential, extractRouterApiEnvironmentId, resolveSourceIpFromFetchHeaders, } from './auth/routerApiKeyAuth';
 export { createCloudflareRouter } from './cloudflare/runtime/createCloudflareRouter';
-export type { SelfHostedCloudflareSigningWorkerFactoryInput } from './cloudflare/runtime/createSelfHostedCloudflareSigningWorker';
-export { createSelfHostedCloudflareSigningRouter, createSelfHostedCloudflareSigningWorker, } from './cloudflare/runtime/createSelfHostedCloudflareSigningWorker';
 export { CloudflareDurableObjectVersionedJsonRecordStore, CloudflareVersionedJsonRecordStoreError, createCloudflareDurableObjectVersionedJsonRecordStore, } from './cloudflare/durableObjects/versionedJsonRecordStore';
 export type { CloudflareVersionedJsonRecordStoreOptions } from './cloudflare/durableObjects/versionedJsonRecordStore';
 export type { VersionedJsonObject, VersionedJsonRecordPutResult, VersionedJsonRecordReadResult, VersionedJsonValue, } from './framework/versionedJsonRecordStore';

package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/guards/backends.d.ts

@@ -1,23 +1,8 @@
-import type { CreateSigningSessionSealRateLimitGuardOptions, SigningSessionSealRateLimiter } from './index';
+import type { SigningSessionSealRateLimiter } from './index';
 export interface CreateUpstashSigningSessionSealRateLimiterOptions {
     url: string;
     token: string;
     keyPrefix?: string;
 }
-export interface CreateRedisTcpSigningSessionSealRateLimiterOptions {
-    redisUrl: string;
-    keyPrefix?: string;
-}
 export declare function createUpstashSigningSessionSealRateLimiter(options: CreateUpstashSigningSessionSealRateLimiterOptions): SigningSessionSealRateLimiter;
-export declare function createRedisTcpSigningSessionSealRateLimiter(options: CreateRedisTcpSigningSessionSealRateLimiterOptions): SigningSessionSealRateLimiter;
-export interface CreateSigningSessionSealRateLimitFromEnvInput {
-    limiterKind?: 'in-memory' | 'upstash-redis-rest' | 'redis-tcp' | null;
-    upstashUrl?: string | null;
-    upstashToken?: string | null;
-    redisUrl?: string | null;
-    keyPrefix?: string | null;
-    limit: number;
-    windowMs: number;
-}
-export declare function resolveSigningSessionSealRateLimitFromEnv(input: CreateSigningSessionSealRateLimitFromEnvInput): Pick<CreateSigningSessionSealRateLimitGuardOptions, 'limiter' | 'limit' | 'windowMs'>;
 //# sourceMappingURL=backends.d.ts.map

package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/idempotencyBackends.d.ts

@@ -1,24 +1,9 @@
-import type { SigningSessionSealIdempotencyStore, SigningSessionSealServiceIdempotencyOptions } from './signingSessionSeal.types';
+import type { SigningSessionSealIdempotencyStore } from './signingSessionSeal.types';
 export interface CreateUpstashSigningSessionSealIdempotencyStoreOptions {
     url: string;
     token: string;
     keyPrefix?: string;
     nowMs?: () => number;
 }
-export interface CreateRedisTcpSigningSessionSealIdempotencyStoreOptions {
-    redisUrl: string;
-    keyPrefix?: string;
-    nowMs?: () => number;
-}
 export declare function createUpstashSigningSessionSealIdempotencyStore(options: CreateUpstashSigningSessionSealIdempotencyStoreOptions): SigningSessionSealIdempotencyStore;
-export declare function createRedisTcpSigningSessionSealIdempotencyStore(options: CreateRedisTcpSigningSessionSealIdempotencyStoreOptions): SigningSessionSealIdempotencyStore;
-export interface CreateSigningSessionSealIdempotencyFromEnvInput {
-    idempotencyKind?: string | null;
-    upstashUrl?: string | null;
-    upstashToken?: string | null;
-    redisUrl?: string | null;
-    keyPrefix?: string | null;
-    ttlMs?: number | null;
-}
-export declare function resolveSigningSessionSealIdempotencyFromEnv(input: CreateSigningSessionSealIdempotencyFromEnvInput): SigningSessionSealServiceIdempotencyOptions;
 //# sourceMappingURL=idempotencyBackends.d.ts.map

package/dist/types/wallet-server/src/threshold/session/signingSessionSeal/index.d.ts

@@ -4,8 +4,8 @@ export type { CreateSigningSessionSealAuditLoggerOptions } from './observability
 export type { CreateSigningSessionSealRoutesOptionsInput } from './routesOptions';
 export type { CreateSigningSessionSealOptionsInput } from './options';
 export type { CreateSigningSessionSealRateLimitGuardOptions, InMemorySigningSessionSealRateLimiterOptions, SigningSessionSealRateLimitConsumeInput, SigningSessionSealRateLimitConsumeResult, SigningSessionSealRateLimiter, SigningSessionSealRateLimitRejectedEvent, } from './guards';
-export type { CreateSigningSessionSealRateLimitFromEnvInput, CreateRedisTcpSigningSessionSealRateLimiterOptions, CreateUpstashSigningSessionSealRateLimiterOptions, } from './guards/backends';
-export type { CreateSigningSessionSealIdempotencyFromEnvInput, CreateRedisTcpSigningSessionSealIdempotencyStoreOptions, CreateUpstashSigningSessionSealIdempotencyStoreOptions, } from './idempotencyBackends';
+export type { CreateUpstashSigningSessionSealRateLimiterOptions, } from './guards/backends';
+export type { CreateUpstashSigningSessionSealIdempotencyStoreOptions, } from './idempotencyBackends';
 export { signingSessionSealAuthorizeStatusCode, signingSessionSealStatusCode, } from './transport/shared';
 export { buildSigningSessionSealApplyPath, buildSigningSessionSealRemovePath, resolveSigningSessionSealBasePath, parseSigningSessionSealApplyBody, parseSigningSessionSealRemoveBody, authorizeSigningSessionSealRequest, } from './transport/shared';
 export { createSigningSessionSealCipherAdapter, createPassthroughSigningSessionSealCipherAdapter, createSigningSessionSealShamir3PassCipherAdapter, encodeSigningSessionSealServerLockContext, } from './crypto/cipher';
@@ -15,8 +15,8 @@ export { createSigningSessionSealAuditLogger } from './observability/audit';
 export { createSigningSessionSealRoutesOptions } from './routesOptions';
 export { createSigningSessionSealOptions, parseSigningSessionSealRootConfig } from './options';
 export { createInMemorySigningSessionSealRateLimiter, createSigningSessionSealRateLimitGuard, } from './guards';
-export { createRedisTcpSigningSessionSealRateLimiter, createUpstashSigningSessionSealRateLimiter, resolveSigningSessionSealRateLimitFromEnv, } from './guards/backends';
-export { createRedisTcpSigningSessionSealIdempotencyStore, createUpstashSigningSessionSealIdempotencyStore, resolveSigningSessionSealIdempotencyFromEnv, } from './idempotencyBackends';
+export { createUpstashSigningSessionSealRateLimiter, } from './guards/backends';
+export { createUpstashSigningSessionSealIdempotencyStore, } from './idempotencyBackends';
 export { composeSigningSessionSealGuards } from './guards';
 export { handleSigningSessionSealRoutes } from './transport/fetch';
 //# sourceMappingURL=index.d.ts.map

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seams/wallet-server",
-  "version": "0.11.0",
+  "version": "0.12.0",
   "type": "module",
   "description": "Seams server TypeScript SDK for NEAR and EVM-family wallets",
   "main": "./dist/esm/index.js",

package/dist/esm/router/cloudflare/runtime/createSelfHostedCloudflareSigningWorker.js

@@ -1,93 +0,0 @@
-import { coerceRouterLogger } from "../../framework/logger.js";
-import { json, withCors } from "../../framework/http.js";
-import { handleThresholdEcdsa } from "../../transport/fetch/routes/thresholdEcdsa.js";
-import { handleThresholdEd25519 } from "../../transport/fetch/routes/thresholdEd25519.js";
-import { validateRouterApiRorOptions } from "../../framework/ror/provider.js";
-import "../../framework/routerApi.js";
-//#region src/router/cloudflare/runtime/createSelfHostedCloudflareSigningWorker.ts
-function notFound() {
-	return new Response("Not Found", { status: 404 });
-}
-function selfHostedHealthResponse(ctx) {
-	if (ctx.method !== "GET") return null;
-	if (ctx.pathname !== "/healthz" && ctx.pathname !== "/readyz") return null;
-	if (ctx.pathname === "/healthz" && !ctx.opts.healthz) return null;
-	if (ctx.pathname === "/readyz" && !ctx.opts.readyz) return null;
-	return json({
-		ok: true,
-		selfHosted: true,
-		threshold: { configured: Boolean(ctx.opts.routerAbNormalSigningRouterProxy) }
-	}, { status: 200 });
-}
-function createSelfHostedContext(input) {
-	const url = new URL(input.request.url);
-	return {
-		request: input.request,
-		url,
-		pathname: url.pathname,
-		method: input.request.method.toUpperCase(),
-		runtime: input.cfCtx ? {
-			kind: "background",
-			waitUntil: (promise) => input.cfCtx?.waitUntil(promise)
-		} : { kind: "inline" },
-		service: input.service,
-		opts: input.opts,
-		logger: input.logger,
-		routeDefinitions: []
-	};
-}
-function createSelfHostedCloudflareSigningRouter(service, opts = {}) {
-	const sessionCookieName = String(opts.sessionCookieName || "").trim() || "seams-jwt";
-	const effectiveOpts = {
-		...opts,
-		sessionCookieName
-	};
-	if (effectiveOpts.ror) validateRouterApiRorOptions(effectiveOpts.ror);
-	const logger = coerceRouterLogger(effectiveOpts.logger);
-	const handler = async (request, _env, cfCtx) => {
-		if (request.method.toUpperCase() === "OPTIONS") {
-			const res = new Response(null, { status: 204 });
-			withCors(res.headers, effectiveOpts, request);
-			return res;
-		}
-		const ctx = createSelfHostedContext({
-			request,
-			cfCtx,
-			service,
-			opts: effectiveOpts,
-			logger
-		});
-		try {
-			const response = selfHostedHealthResponse(ctx) || await handleThresholdEd25519(ctx) || await handleThresholdEcdsa(ctx) || notFound();
-			withCors(response.headers, effectiveOpts, request);
-			return response;
-		} catch (error) {
-			const res = json({
-				code: "internal",
-				message: error instanceof Error ? error.message : String(error)
-			}, { status: 500 });
-			withCors(res.headers, effectiveOpts, request);
-			return res;
-		}
-	};
-	return handler;
-}
-function createSelfHostedCloudflareSigningWorker(input) {
-	return { async fetch(request, env, ctx) {
-		const service = await input.createAuthService({
-			request,
-			env,
-			ctx
-		});
-		return createSelfHostedCloudflareSigningRouter(service, typeof input.routerOptions === "function" ? await input.routerOptions({
-			request,
-			env,
-			ctx,
-			service
-		}) : input.routerOptions || {})(request, env, ctx);
-	} };
-}
-//#endregion
-export { createSelfHostedCloudflareSigningRouter, createSelfHostedCloudflareSigningWorker };
-
-//# sourceMappingURL=createSelfHostedCloudflareSigningWorker.js.map

package/dist/types/wallet-server/src/router/cloudflare/runtime/createSelfHostedCloudflareSigningWorker.d.ts

@@ -1,23 +0,0 @@
-import type { RouterApiServiceBag } from '../../framework/authServicePort';
-import type { RouterApiOptions } from '../../framework/routerApi';
-import type { CfEnv, CfExecutionContext, FetchHandler } from './cloudflare.types';
-type SelfHostedWorker<Env> = {
-    fetch(request: Request, env: Env, ctx: CfExecutionContext): Promise<Response>;
-};
-export type SelfHostedCloudflareSigningWorkerFactoryInput<Env extends CfEnv = CfEnv> = {
-    readonly createAuthService: (input: {
-        readonly request: Request;
-        readonly env: Env;
-        readonly ctx: CfExecutionContext;
-    }) => RouterApiServiceBag | Promise<RouterApiServiceBag>;
-    readonly routerOptions?: RouterApiOptions | ((input: {
-        readonly request: Request;
-        readonly env: Env;
-        readonly ctx: CfExecutionContext;
-        readonly service: RouterApiServiceBag;
-    }) => RouterApiOptions | Promise<RouterApiOptions>);
-};
-export declare function createSelfHostedCloudflareSigningRouter(service: RouterApiServiceBag, opts?: RouterApiOptions): FetchHandler;
-export declare function createSelfHostedCloudflareSigningWorker<Env extends CfEnv = CfEnv>(input: SelfHostedCloudflareSigningWorkerFactoryInput<Env>): SelfHostedWorker<Env>;
-export {};
-//# sourceMappingURL=createSelfHostedCloudflareSigningWorker.d.ts.map