@seams/wallet-server 0.13.1 → 0.15.0

package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.js

@@ -7,8 +7,8 @@ import { secureRandomBase64Url } from "../../../../shared-ts/src/utils/secureRan
 import { ROUTER_AB_ED25519_NORMAL_SIGNING_STATE_KIND } from "../../../../shared-ts/src/utils/signingSessionSeal.js";
 import { computeAddSignerNearEd25519SigningKeyId, computeRegistrationNearEd25519SigningKeyId } from "../../../../shared-ts/src/utils/registrationIds.js";
 import { registrationNearEd25519BranchKey } from "../../../../shared-ts/src/utils/registrationSignerPlan.js";
-import { thresholdEd25519AuthorityScopeFromWalletAuthAuthority } from "../../../../core/ThresholdService/validation.js";
 import "../../../../shared-ts/src/threshold/sessionPolicy.js";
+import { thresholdEd25519AuthorityScopeFromWalletAuthAuthority } from "../../../../core/ThresholdService/validation.js";
 import { createRouterApiModule } from "../../../framework/modules.js";
 import { InMemoryRouterAbEd25519YaoRegistrationStateV1, createRouterAbEd25519YaoRegistrationModule } from "../registration/routerAbEd25519YaoRegistration.js";
 import { InMemoryRouterAbEd25519YaoRegistrationIntentAuthorizationStateV1 } from "../registration/routerAbEd25519YaoRegistrationIntentAuthorization.js";
@@ -233,7 +233,8 @@ var RouterAbEd25519YaoProductRegistrationRuntime = class {
 			status: 200,
 			admissionRequest: bound.admissionRequest,
 			value: admitted.value,
-			companionWrite: "not_committed"
+			companionWrite: "not_committed",
+			executionAdmission: { kind: "stored" }
 		};
 	}
 	/** This runtime issues a receipt at its admission only. */

package/dist/esm/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationRequestScopedRuntime.js

@@ -1,3 +1,4 @@
+import { recordRegistrationPromiseTiming } from "../../../framework/registrationTiming.js";
 import { InMemoryRouterAbEd25519YaoRegistrationService, describeRouterAbEd25519YaoRegistrationAdmissionV1 } from "../registration/routerAbEd25519YaoRegistration.js";
 import { InMemoryRouterAbEd25519YaoRegistrationIntentAuthorizationAdapter, routerAbEd25519YaoCredentialDigestSha256HexV1 } from "../registration/routerAbEd25519YaoRegistrationIntentAuthorization.js";
 import { resolveRouterAbEd25519YaoActiveCapability } from "../recovery/routerAbEd25519YaoRecovery.js";
@@ -44,12 +45,13 @@ var RouterAbEd25519YaoProductRegistrationRequestScopedRuntime = class {
 			dispatchRoot
 		};
 	}
-	async bindAndAdmitVerifiedRegistration(input, companionWrite, startedDispatchRoot, mintedSessionId) {
+	async bindAndAdmitVerifiedRegistration(input, companionWrite, startedDispatchRoot, mintedSessionId, serverTiming = []) {
 		return await bindAndAdmitVerifiedRegistration({
 			input,
 			companionWrite,
 			startedDispatchRoot,
 			mintedSessionId,
+			serverTiming,
 			store: this.input.store,
 			backend: this.input.registrationBackend
 		});
@@ -64,6 +66,7 @@ var RouterAbEd25519YaoProductRegistrationRequestScopedRuntime = class {
 	async executeAdmittedRegistration(input) {
 		return await executeRouterAbEd25519YaoAdmittedRegistrationV1({
 			store: this.input.store,
+			admission: input.admission,
 			backend: this.input.registrationBackend,
 			request: input.request,
 			credentialDigestSha256Hex: await routerAbEd25519YaoCredentialDigestSha256HexV1(input.credential),
@@ -170,8 +173,18 @@ async function bindAndAdmitVerifiedRegistration(input) {
 	let backendResult = null;
 	let dispatchRoot = null;
 	for (let attempt = 0; attempt < MAX_DETERMINISTIC_COMMIT_ATTEMPTS; attempt += 1) {
-		const loaded = await input.store.loadRegistration(lifecycleId);
-		const bound = await new InMemoryRouterAbEd25519YaoRegistrationIntentAuthorizationAdapter(loaded.state.authorization).bindAndAuthorizeAdmission(input.input);
+		const loaded = await recordRegistrationPromiseTiming({
+			sink: input.serverTiming,
+			name: "yao_admission_state_read",
+			startedAtMs: Date.now(),
+			promise: input.store.loadRegistration(lifecycleId)
+		});
+		const bound = await recordRegistrationPromiseTiming({
+			sink: input.serverTiming,
+			name: "yao_admission_authorization",
+			startedAtMs: Date.now(),
+			promise: new InMemoryRouterAbEd25519YaoRegistrationIntentAuthorizationAdapter(loaded.state.authorization).bindAndAuthorizeAdmission(input.input)
+		});
 		if (!bound.ok) return bound;
 		const service = new InMemoryRouterAbEd25519YaoRegistrationService(input.backend, loaded.state.registration);
 		const preparation = service.prepareAdmit(bound.admissionRequest);
@@ -180,7 +193,11 @@ async function bindAndAdmitVerifiedRegistration(input) {
 			status: 200,
 			admissionRequest: bound.admissionRequest,
 			value: preparation.value,
-			companionWrite: "not_committed"
+			companionWrite: "not_committed",
+			executionAdmission: {
+				kind: "snapshot",
+				authority: routerAbEd25519YaoAdmittedRegistrationAuthorityV1(loaded.state, lifecycleId)
+			}
 		};
 		if (preparation.kind === "failed") return preparation.failure;
 		if (dispatchRoot === null) {
@@ -193,7 +210,12 @@ async function bindAndAdmitVerifiedRegistration(input) {
 				message: "registration tenant root was read for another signing root ID"
 			};
 			try {
-				dispatchRoot = await (started ? started.dispatchRoot : input.backend.resolveRegistrationDispatchRoot(signingRootId));
+				dispatchRoot = await recordRegistrationPromiseTiming({
+					sink: input.serverTiming,
+					name: "yao_admission_root_wait",
+					startedAtMs: Date.now(),
+					promise: started ? started.dispatchRoot : input.backend.resolveRegistrationDispatchRoot(signingRootId)
+				});
 			} catch (error) {
 				return {
 					ok: false,
@@ -204,7 +226,12 @@ async function bindAndAdmitVerifiedRegistration(input) {
 			}
 		}
 		if (backendResult === null) try {
-			backendResult = await input.backend.admit(bound.admissionRequest, void 0, input.mintedSessionId);
+			backendResult = await recordRegistrationPromiseTiming({
+				sink: input.serverTiming,
+				name: "yao_admission_backend",
+				startedAtMs: Date.now(),
+				promise: input.backend.admit(bound.admissionRequest, void 0, input.mintedSessionId)
+			});
 		} catch (error) {
 			return {
 				ok: false,
@@ -223,12 +250,21 @@ async function bindAndAdmitVerifiedRegistration(input) {
 		});
 		if (!admitted.ok) return admitted;
 		pinRouterAbEd25519YaoRegistrationDispatchRootV1(loaded.state.registration, lifecycleId, dispatchRoot);
-		if ((await input.store.commitRegistration(loaded, input.companionWrite?.(bound.admissionRequest) ?? null)).kind === "stored") return {
+		if ((await recordRegistrationPromiseTiming({
+			sink: input.serverTiming,
+			name: "yao_admission_commit",
+			startedAtMs: Date.now(),
+			promise: input.store.commitRegistration(loaded, input.companionWrite?.(bound.admissionRequest) ?? null)
+		})).kind === "stored") return {
 			ok: true,
 			status: 200,
 			admissionRequest: bound.admissionRequest,
 			value: admitted.value,
-			companionWrite: input.companionWrite ? "committed" : "not_committed"
+			companionWrite: input.companionWrite ? "committed" : "not_committed",
+			executionAdmission: {
+				kind: "snapshot",
+				authority: routerAbEd25519YaoAdmittedRegistrationAuthorityV1(loaded.state, lifecycleId)
+			}
 		};
 	}
 	return {

package/dist/esm/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.js

@@ -184,6 +184,7 @@ async function runExecutionRequest(input, request, trace) {
 	});
 	return await executeRouterAbEd25519YaoAdmittedRegistrationV1({
 		store: input.store,
+		admission: { kind: "stored" },
 		backend: input.backend,
 		request,
 		credentialDigestSha256Hex: credential.digestSha256Hex,
@@ -208,7 +209,17 @@ async function executeRouterAbEd25519YaoAdmittedRegistrationV1(input) {
 		resultReconstructionMs: 0
 	};
 	const admissionStartedAt = performance.now();
-	const authority = routerAbEd25519YaoAdmittedRegistrationAuthorityV1((await input.store.loadRegistration(lifecycleId)).state, lifecycleId);
+	const admission = input.admission;
+	let authority;
+	switch (admission.kind) {
+		case "stored":
+			authority = routerAbEd25519YaoAdmittedRegistrationAuthorityV1((await input.store.loadRegistration(lifecycleId)).state, lifecycleId);
+			break;
+		case "snapshot":
+			authority = admission.authority;
+			break;
+		default: return assertNeverAdmissionSource(admission);
+	}
 	const timingBeforeRouter = {
 		...timing,
 		d1AdmissionReadMs: elapsedMs(admissionStartedAt)
@@ -452,6 +463,9 @@ function terminalStateConflictFailure(result) {
 		message: `Yao terminal state is uncertain after a ${result.key} conflict`
 	};
 }
+function assertNeverAdmissionSource(value) {
+	throw new Error(`Unknown registration admission source: ${String(value)}`);
+}
 //#endregion
 export { executeRouterAbEd25519YaoAdmittedRegistrationV1, handleRouterAbEd25519YaoRegistrationRequestScopedCloudflareV1, routerAbEd25519YaoRegistrationExecutionTimingEntriesV1 };
 

package/dist/esm/router/domains/passkeyCustody/registrationCustodyOutcome.js

@@ -22,19 +22,20 @@ async function reserveRegistrationCustody(input) {
 			store: input.store
 		});
 		if (admitted.kind !== "reserved") return settled(toOutcome(admitted));
-		return async () => {
-			try {
-				return toOutcome(await admitted.commit());
-			} catch (error) {
-				return storeFailure(error);
-			}
+		return {
+			kind: "prepared",
+			outcome: { status: "committed" },
+			write: { statements: admitted.statements }
 		};
 	} catch (error) {
 		return settled(storeFailure(error));
 	}
 }
 function settled(outcome) {
-	return () => Promise.resolve(outcome);
+	return {
+		kind: "settled",
+		outcome
+	};
 }
 function storeFailure(error) {
 	return {
@@ -44,7 +45,6 @@ function storeFailure(error) {
 }
 function toOutcome(admitted) {
 	switch (admitted.kind) {
-		case "committed": return { status: "committed" };
 		case "no_custody_records": return {
 			status: "joined",
 			keyManifestDigestB64u: admitted.keyManifestDigestB64u

package/dist/esm/router/domains/passkeyCustody/walletCustodyRegistrationCommit.js

@@ -148,25 +148,7 @@ async function reserveWalletCustodyRegistration(input) {
 		kind: "rejected",
 		reason: reserved.reason
 	};
-	return {
-		kind: "reserved",
-		commit: async () => commitOutcome(await reserved.commit())
-	};
-}
-function commitOutcome(stored) {
-	switch (stored.kind) {
-		case "committed": return {
-			kind: "committed",
-			envelopeStoreVersion: stored.envelopeStoreVersion,
-			recoverySetStoreVersion: stored.recoverySetStoreVersion
-		};
-		case "already_exists": return { kind: "already_exists" };
-		case "custody_already_established": return { kind: "custody_already_established" };
-		case "inconsistent": return {
-			kind: "rejected",
-			reason: stored.reason
-		};
-	}
+	return reserved;
 }
 //#endregion
 export { reserveWalletCustodyRegistration };

package/dist/esm/router/domains/walletRegistration/walletRegistrationRoutes.js

@@ -14,13 +14,7 @@ import { parseHostedWalletSessionOperationCredentialToken, parsePrimaryWalletSes
 import { normalizeCorsOrigin } from "../../../core/SessionService.js";
 import { thresholdEcdsaChainTargetFromValue } from "../../../core/thresholdEcdsaChainTarget.js";
 import { walletIdFromString } from "../../../shared-ts/src/utils/registrationIds.js";
-import { deriveImplicitNearAccountIdFromEd25519PublicKey, parseImplicitNearAccountId } from "../../../shared-ts/src/utils/near.js";
-import { normalizeRegistrationSignerPlan, registrationSignerSetSelectionFromPlan } from "../../../shared-ts/src/utils/registrationSignerPlan.js";
-import { addAuthMethodIntentGrantFromString, addSignerIntentGrantFromString, computeAddAuthMethodIntentDigestB64u, computeAddSignerIntentDigestB64u, normalizeAddAuthMethodIntentCaller } from "../../../shared-ts/src/utils/registrationIntent.js";
-import { parsePasskeyCustodyEnvelopeRecord } from "../../../shared-ts/src/passkey-custody/custodyEnvelope.js";
-import "../../../shared-ts/src/passkey-custody/index.js";
-import { parseRouterAbTraceContextV1 } from "../../../shared-ts/src/utils/routerAbTraceContext.js";
-import { recordRegistrationServerTiming, registrationServerTimingHeaders } from "../../cloudflare/d1/registration/d1RegistrationSetupSupport.js";
+import { recordRegistrationServerTiming, registrationServerTimingHeaders } from "../../framework/registrationTiming.js";
 import { parseRegistrationSetupOperationId } from "../../../shared-ts/src/utils/registrationSetupOperation.js";
 import { extractBearerCredential, extractRouterApiEnvironmentId } from "../../auth/routerApiKeyAuth.js";
 import { publishableKeyRoutePrincipal, resolvePublishableKeyApiCredentialAuth, resolveWalletRegistrationContext } from "../../auth/routerApiCredentialAuth.js";
@@ -28,7 +22,13 @@ import { resolveActiveRuntimePolicyScopeForEnvironment, resolveWalletSessionAdmi
 import { enforceRoutePolicy } from "../../framework/enforceRoutePolicy.js";
 import { parseRegistrationPreparedSessionSeal } from "./registrationSessionSeal.js";
 import { routeError, routeJson } from "../../framework/routeResponses.js";
+import { parsePasskeyCustodyEnvelopeRecord } from "../../../shared-ts/src/passkey-custody/custodyEnvelope.js";
+import "../../../shared-ts/src/passkey-custody/index.js";
 import { computeWalletEcdsaKeyFactsInventoryChallengeDigestB64u } from "../../../shared-ts/src/utils/ecdsaKeyFactsInventory.js";
+import { deriveImplicitNearAccountIdFromEd25519PublicKey, parseImplicitNearAccountId } from "../../../shared-ts/src/utils/near.js";
+import { normalizeRegistrationSignerPlan, registrationSignerSetSelectionFromPlan } from "../../../shared-ts/src/utils/registrationSignerPlan.js";
+import { addAuthMethodIntentGrantFromString, addSignerIntentGrantFromString, computeAddAuthMethodIntentDigestB64u, computeAddSignerIntentDigestB64u, normalizeAddAuthMethodIntentCaller } from "../../../shared-ts/src/utils/registrationIntent.js";
+import { parseRouterAbTraceContextV1 } from "../../../shared-ts/src/utils/routerAbTraceContext.js";
 //#region src/router/domains/walletRegistration/walletRegistrationRoutes.ts
 function parseRegistrationTraceContext(headers) {
 	const parsed = parseRouterAbTraceContextV1(headers["x-seams-trace-id"] ?? headers["X-Seams-Trace-Id"]);

package/dist/esm/router/framework/registrationSetupDispatch.js

@@ -1,4 +1,4 @@
-import { recordRegistrationServerTiming, registrationServerTimingHeaders } from "../cloudflare/d1/registration/d1RegistrationSetupSupport.js";
+import { recordRegistrationServerTiming, registrationServerTimingHeaders } from "./registrationTiming.js";
 //#region src/router/framework/registrationSetupDispatch.ts
 /** A transient storage fault outlived its retries. The same request can succeed later. */
 const SETUP_STORAGE_UNAVAILABLE = {

package/dist/esm/router/framework/registrationTiming.js

@@ -0,0 +1,21 @@
+//#region src/router/framework/registrationTiming.ts
+function recordRegistrationServerTiming(sink, name, startedAtMs) {
+	sink.push([name, Math.max(0, Date.now() - startedAtMs)]);
+}
+/** The `Server-Timing` header of a registration route's recorded waits. */
+function registrationServerTimingHeaders(serverTiming) {
+	if (serverTiming.length === 0) return void 0;
+	const header = serverTiming.map(([name, durationMs]) => `${name};dur=${Math.max(0, durationMs).toFixed(1)}`).join(", ");
+	return { "Server-Timing": header };
+}
+async function recordRegistrationPromiseTiming(args) {
+	try {
+		return await args.promise;
+	} finally {
+		recordRegistrationServerTiming(args.sink, args.name, args.startedAtMs);
+	}
+}
+//#endregion
+export { recordRegistrationPromiseTiming, recordRegistrationServerTiming, registrationServerTimingHeaders };
+
+//# sourceMappingURL=registrationTiming.js.map

package/dist/esm/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.js

@@ -4,9 +4,9 @@ import { sha256DigestB64u } from "../../../../shared-ts/src/utils/canonicalPrimi
 import { buildEmailOtpWalletAuthAuthority, buildPasskeyWalletAuthAuthority, walletAuthAuthorityRef } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
 import { parseLinkedDeviceOwnerAuthorizationRequestV1 } from "../../../../shared-ts/src/device-linking/parsers.js";
 import { buildWalletSessionCapabilitySubjectsV1, walletSessionCapabilitySubjectsV1Equal } from "../../../../authorization/domain.js";
-import { thresholdEd25519AuthorityScopeFromWalletAuthAuthority } from "../../../../core/ThresholdService/validation.js";
 import { extractBearerCredential } from "../../../auth/routerApiKeyAuth.js";
 import { json, jsonFailure, readJson } from "../../../framework/http.js";
+import { thresholdEd25519AuthorityScopeFromWalletAuthAuthority } from "../../../../core/ThresholdService/validation.js";
 //#region src/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.ts
 const LINKED_DEVICE_OWNER_AUTHORIZATION_PATH_V1 = "/wallet/device-linking/v1/owner-authorization";
 /**

package/dist/esm/router/transport/fetch/routes/passkeyCustody.js

@@ -10,10 +10,10 @@ import { buildPasskeyWalletAuthAuthority, walletAuthAuthorityRef } from "../../.
 import { parseSessionOrigin, parseVerifiedOwnerProofId } from "../../../../authorization/domain.js";
 import { buildVerifiedWalletOperationEmailOtpFactorResult, buildVerifiedWalletOperationPasskeyFactorResult } from "../../../../authorization/factorEvidence.js";
 import { findRouteDefinitionById, matchesRouteDefinitionRequest } from "../../../framework/routeDefinitions.js";
-import { parsePasskeyCustodyEnvelopeRecord } from "../../../../shared-ts/src/passkey-custody/custodyEnvelope.js";
-import "../../../../shared-ts/src/passkey-custody/index.js";
 import { extractBearerCredential, resolveSourceIpFromFetchHeaders } from "../../../auth/routerApiKeyAuth.js";
 import { toFetchRouteResponse } from "../../../framework/routeResponses.js";
+import { parsePasskeyCustodyEnvelopeRecord } from "../../../../shared-ts/src/passkey-custody/custodyEnvelope.js";
+import "../../../../shared-ts/src/passkey-custody/index.js";
 import { readJson } from "../../../framework/http.js";
 import { isHostWithinRpId, originHostnameOrEmpty } from "../../../../core/authService/webauthnOidcHelpers.js";
 import { parseRecoveryCodeReservationId } from "../../../../shared-ts/src/wallet-recovery/recoveryCodeReservation.js";

package/dist/types/shared-ts/src/device-linking/contracts.d.ts

@@ -698,12 +698,6 @@ export type LocalAuthorityInstallationReceiptV1 = {
     readonly targetFactorVerificationDigestB64u: DigestB64u;
     readonly installedAtMs: number;
 };
-type RelinkRequiredReasonV1 = {
-    readonly kind: 'incomplete_migrated_enrollment';
-} | {
-    readonly kind: 'missing_canonical_local_material';
-    readonly activation: MpcMaterialActivationRef;
-};
 export type LinkIntegrityFailureV1 = {
     readonly kind: 'authority_id_mismatch';
     readonly expectedAuthorityId: WalletAuthorityId;
@@ -749,9 +743,6 @@ export type LinkedAuthorityActivationResultV1 = {
 } | {
     readonly kind: 'failed_before_commit';
     readonly reason: LinkPrecommitFailureV1;
-} | {
-    readonly kind: 'relink_required';
-    readonly reason: RelinkRequiredReasonV1;
 } | {
     readonly kind: 'integrity_error';
     readonly reason: LinkIntegrityFailureV1;

package/dist/types/shared-ts/src/utils/routerAbEcdsaDerivation.d.ts

@@ -611,7 +611,6 @@ export declare function sameRouterAbEcdsaRegistrationActivationReceiptV1(left: R
 export declare function sameRouterAbEcdsaDerivationNormalSigningStateV1(left: RouterAbEcdsaDerivationNormalSigningStateV1, right: RouterAbEcdsaDerivationNormalSigningStateV1): boolean;
 export declare function sameRouterAbEcdsaDerivationPublicCapabilityV1(left: RouterAbEcdsaDerivationPublicCapabilityV1, right: RouterAbEcdsaDerivationPublicCapabilityV1): boolean;
 export declare function routerAbEcdsaRerandomizationClientCommitmentV1(contribution32: Uint8Array): Promise<Uint8Array>;
-export declare function routerAbEcdsaDerivationContextBindingB64uV1(context: RouterAbEcdsaDerivationStableKeyContextV1): Promise<string>;
 export declare function routerAbEcdsaDerivationNormalSigningScopeCanonicalBytesV1(scope: RouterAbEcdsaDerivationNormalSigningScopeV1): Uint8Array;
 export declare function sameRouterAbEcdsaDerivationNormalSigningScopeV1(left: RouterAbEcdsaDerivationNormalSigningScopeV1, right: RouterAbEcdsaDerivationNormalSigningScopeV1): boolean;
 export declare function routerAbEcdsaDerivationEvmDigestSigningRequestDigestV1(request: RouterAbEcdsaDerivationEvmDigestSigningRequestV1Wire): Promise<RouterAbPublicDigest32V1Wire>;

package/dist/types/wallet-server/src/router/cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore.d.ts

@@ -41,43 +41,14 @@ export type WalletRecoveryCodeLocatorRecord = {
  * A registration commit whose recovery-code routes are claimed. `commit`
  * writes the records, and it needs the wallet that the registration commits.
  */
-export type WalletCustodyRegistrationReservation = Extract<WalletCustodyRegistrationCommitResult, {
-    kind: 'inconsistent';
-}> | {
+export type WalletCustodyRegistrationReservation = {
     readonly kind: 'reserved';
-    readonly commit: () => Promise<WalletCustodyRegistrationCommitResult>;
-};
-export type WalletCustodyRegistrationCommitResult = {
-    readonly kind: 'committed';
-    readonly envelopeStoreVersion: string;
-    readonly recoverySetStoreVersion: string;
-}
-/**
- * This ceremony's own envelope is already stored: the commit was applied
- * before, and the caller holding this result is done. Never an overwrite —
- * replacing stored custody would strand every key the existing seed controls.
- */
- | {
+    readonly statements: readonly D1PreparedStatementLike[];
+} | {
     readonly kind: 'already_exists';
-    readonly key: string;
-}
-/**
- * The wallet already has custody, established by a *different* ceremony —
- * its recovery-set key is occupied while this ceremony's envelope key is
- * free. This is the losing side of the establish race: two key sets each
- * believed they were the wallet's first. The caller must discard this run's
- * seed and re-enter as a join of the existing envelope, committing only its
- * key set's manifest.
- *
- * Distinct from `already_exists` because the correct reactions are opposite:
- * a repeat is finished, a lost race has a key set still to provision.
- */
- | {
+} | {
     readonly kind: 'custody_already_established';
-    readonly walletId: WalletId;
-}
-/** The two records describe different wallets. */
- | {
+} | {
     readonly kind: 'inconsistent';
     readonly reason: string;
 };
@@ -153,14 +124,6 @@ export declare class CloudflareD1WalletCustodyCommitStore {
      * may run it beside its other remote effects and write afterwards.
      */
     reserveRegistration(commit: WalletCustodyRegistrationCommit): Promise<WalletCustodyRegistrationReservation>;
-    /**
-     * Writes the envelope and the recovery set in one transaction.
-     *
-     * Both are inserts, never updates: `expectedVersion: null` fails if either
-     * key already holds a row, so a repeated registration cannot silently replace
-     * an established wallet's custody.
-     */
-    private commitReservedRegistration;
     /**
      * Reads a wallet's recovery envelope set. Returns null when absent, and also
      * when the stored row is not a recovery set — a row that fails its own parser

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1RegistrationSetupSupport.d.ts

@@ -47,14 +47,5 @@ type RegistrationIntentSignerBranches = {
     readonly nearEd25519: RegistrationNearEd25519SignerPlan | null;
     readonly evmFamilyEcdsa: RegistrationEvmFamilyEcdsaSignerPlan | null;
 };
-export declare function recordRegistrationServerTiming(sink: Array<readonly [string, number]>, name: string, startedAtMs: number): void;
-/** The `Server-Timing` header of a registration route's recorded waits. */
-export declare function registrationServerTimingHeaders(serverTiming: readonly (readonly [string, number])[]): Record<string, string> | undefined;
-export declare function recordRegistrationPromiseTiming<T>(args: {
-    readonly sink: Array<readonly [string, number]>;
-    readonly name: string;
-    readonly startedAtMs: number;
-    readonly promise: T | Promise<T>;
-}): Promise<T>;
 export {};
 //# sourceMappingURL=d1RegistrationSetupSupport.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts

@@ -294,8 +294,7 @@ export declare class CloudflareD1WalletRegistrationService {
      */
     private verifyRespondReplayAuthority;
     private respondEd25519OnlyRegistration;
-    /**
-     * Derives the authority-bound Yao admission now that the proof is verified.
+    /** Derives the authority-bound Yao admission after proof verification.
      * Both auth methods take this path — the scope comes from the verified
      * authority, so Email OTP's `providerUserId` is established rather than
      * assumed.

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/registrationCompletionWrite.d.ts

@@ -0,0 +1,5 @@
+import type { RegistrationCommitExecution } from './walletRegistrationSessionCommitReceipt';
+import type { RouterAbEd25519YaoPreparedWriteV1 } from '../../../domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore';
+/** Custody, home activation and the replay receipt share one durable transaction. */
+export declare function registrationCommitCompletionWrite<T>(execution: RegistrationCommitExecution<T>): RouterAbEd25519YaoPreparedWriteV1 | null;
+//# sourceMappingURL=registrationCompletionWrite.d.ts.map

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.d.ts

@@ -1,3 +1,4 @@
+import type { RouterAbEd25519YaoPreparedWriteV1 } from '../../../domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistrationPartitionedStateStore';
 import type { WalletRegistrationFinalizeResponse, WalletRegistrationFinalizeSuccess } from '../../../../core/registrationContracts';
 import type { WalletRegistrationFinalizeAuthMethod } from '../../../../../../shared-ts/src/utils/registrationContracts';
 import type { RegistrationActivationWrite } from '../../../domains/walletRegistration/walletRegistrationReservation';
@@ -12,15 +13,18 @@ export type WalletRegistrationNearProvisioningFinalizeResponse = WalletRegistrat
 export type RegistrationCommitExecution<T> = {
     readonly kind: 'unissued';
     readonly response: T;
+    readonly custodyWrite?: never;
 } | {
     readonly kind: 'replayed';
     readonly response: T;
+    readonly custodyWrite?: never;
 } | {
     readonly kind: 'session_issued';
     readonly response: T;
     readonly issuedAtMs: number;
     readonly expectedOrigin: string;
     readonly activation: RegistrationActivationWrite | null;
+    readonly custodyWrite: RouterAbEd25519YaoPreparedWriteV1 | null;
     readonly installationProjection?: never;
 } | {
     readonly kind: 'session_issued_with_installation_projection';
@@ -28,6 +32,7 @@ export type RegistrationCommitExecution<T> = {
     readonly issuedAtMs: number;
     readonly expectedOrigin: string;
     readonly activation: RegistrationActivationWrite | null;
+    readonly custodyWrite: RouterAbEd25519YaoPreparedWriteV1 | null;
     readonly installationProjection: WalletRegistrationCommittedInstallationProjectionV1;
 };
 /** The home activation that a commit left for the record that completes its operation. */

package/dist/types/wallet-server/src/router/domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoProductRegistration.d.ts

@@ -59,8 +59,8 @@ export type RouterAbEd25519YaoWalletSessionMintInputV1 = (RouterAbEd25519YaoWall
     readonly expiresAtMs: number;
     readonly remainingUses: number;
 });
-/** Admission is immutable. A finalization batch may supply it before consumption. */
-export type RouterAbEd25519YaoConsumptionAdmissionV1 = {
+/** Immutable admission may come from the request's committed or batched snapshot. */
+export type RouterAbEd25519YaoRegistrationAdmissionSourceV1 = {
     readonly kind: 'stored';
     readonly authority?: never;
 } | {
@@ -78,7 +78,7 @@ export type RouterAbEd25519YaoProductRegistrationRuntimeV1 = RouterAbEd25519YaoP
      */
     startRegistrationDispatchRoot(signingRootId: RouterAbEd25519YaoRegistrationSigningRootIdV1): RouterAbEd25519YaoStartedDispatchRootV1 | null;
     /** `mintedSessionId` is the session that the registration's setup minted. */
-    bindAndAdmitVerifiedRegistration(input: RouterAbEd25519YaoVerifiedActivationIntentV1, companionWrite: RouterAbEd25519YaoAdmissionCompanionWriteV1 | null, startedDispatchRoot: RouterAbEd25519YaoStartedDispatchRootV1 | null, mintedSessionId: RouterAbEd25519YaoBytes32V1): Promise<RouterAbEd25519YaoVerifiedRegistrationAdmissionResultV1>;
+    bindAndAdmitVerifiedRegistration(input: RouterAbEd25519YaoVerifiedActivationIntentV1, companionWrite: RouterAbEd25519YaoAdmissionCompanionWriteV1 | null, startedDispatchRoot: RouterAbEd25519YaoStartedDispatchRootV1 | null, mintedSessionId: RouterAbEd25519YaoBytes32V1, serverTiming?: Array<readonly [string, number]>): Promise<RouterAbEd25519YaoVerifiedRegistrationAdmissionResultV1>;
     /**
      * The receipt of the admission that a registration gets for `request`
      * over the session that its setup minted. Nothing is stored and nothing
@@ -91,12 +91,13 @@ export type RouterAbEd25519YaoProductRegistrationRuntimeV1 = RouterAbEd25519YaoP
      * execute route does for its bearer.
      */
     executeAdmittedRegistration(input: {
+        readonly admission: RouterAbEd25519YaoRegistrationAdmissionSourceV1;
         readonly request: RouterAbEd25519YaoActivationExecuteRequestV1<'registration'>;
         readonly credential: string;
         readonly trace: RouterAbTraceContextV1;
     }): Promise<RouterAbEd25519YaoTimedRegistrationExecutionResultV1>;
     bindVerifiedIntent(input: RouterAbEd25519YaoVerifiedActivationIntentV1): Promise<RouterAbEd25519YaoRegistrationIntentBindingResult>;
-    consumeActivated(request: RouterAbEd25519YaoActivationConsumptionRequestV1, admission: RouterAbEd25519YaoConsumptionAdmissionV1): Promise<RouterAbEd25519YaoActivationConsumptionResultV1>;
+    consumeActivated(request: RouterAbEd25519YaoActivationConsumptionRequestV1, admission: RouterAbEd25519YaoRegistrationAdmissionSourceV1): Promise<RouterAbEd25519YaoActivationConsumptionResultV1>;
 };
 /** A tenant-root read in flight, with the signing root ID that it was started for. */
 export type RouterAbEd25519YaoStartedDispatchRootV1 = {
@@ -124,6 +125,7 @@ export type RouterAbEd25519YaoVerifiedRegistrationAdmissionResultV1 = Extract<Ro
      * runtime has no batch to share: the caller then writes for itself.
      */
     readonly companionWrite: 'committed' | 'not_committed';
+    readonly executionAdmission: RouterAbEd25519YaoRegistrationAdmissionSourceV1;
 };
 export type RouterAbEd25519YaoProductRegistrationCompositionV1 = {
     readonly kind: 'router_ab_ed25519_yao_product_registration_composition_v1';

package/dist/types/wallet-server/src/router/domains/ed25519Yao/registration/routerAbEd25519YaoRegistrationRequestScopedCloudflare.d.ts

@@ -1,3 +1,4 @@
+import type { RouterAbEd25519YaoRegistrationAdmissionSourceV1 } from '../capabilityLifecycle/routerAbEd25519YaoProductRegistration';
 import type { VerifiedNearRegistrationContinuationV1 } from './routerAbEd25519YaoRegistrationIntentAuthorization';
 import { type RouterAbEd25519YaoActivationExecuteRequestV1, type RouterAbEd25519YaoActivationResultV1 } from '../../../../../../shared-ts/src/utils/routerAbEd25519Yao';
 import { type RouterAbTraceContextV1 } from '../../../../../../shared-ts/src/utils/routerAbTraceContext';
@@ -39,6 +40,7 @@ export declare function handleRouterAbEd25519YaoRegistrationRequestScopedCloudfl
  * the execute request takes it from the signed setup that it just verified.
  */
 export declare function executeRouterAbEd25519YaoAdmittedRegistrationV1(input: Pick<RouterAbEd25519YaoRegistrationRequestScopedCloudflareInputV1, 'store' | 'backend'> & {
+    readonly admission: RouterAbEd25519YaoRegistrationAdmissionSourceV1;
     readonly request: RouterAbEd25519YaoRegistrationExecuteRequestV1;
     readonly credentialDigestSha256Hex: string;
     readonly credentialDigestMs: number;

package/dist/types/wallet-server/src/router/domains/passkeyCustody/registrationCustodyOutcome.d.ts

@@ -1,33 +1,25 @@
+import type { D1PreparedStatementLike } from '../../../storage/tenantRoute';
 import type { WalletCustodyRegistrationOutcome } from '../../../../../shared-ts/src/passkey-custody';
 import type { WalletAuthAuthority } from '../../../../../shared-ts/src/utils/walletAuthAuthority';
 import type { WalletId } from '../../../../../shared-ts/src/utils/domainIds';
 import type { WalletCustodyCeremonyCommitPayload } from './walletCustodyRegistrationCommit';
 import { type VerifiedEmailOtpEnrollmentFacts } from './verifiedCustodyFactor';
 import type { CloudflareD1WalletCustodyCommitStore } from '../../cloudflare/d1/passkeyCustody/d1WalletCustodyCommitStore';
-/**
- * The whole custody side-effect of one registration leg, in two steps: resolve
- * the factor from the authority the leg verified and admit the payload against
- * the wallet the leg registers, which claims the recovery-code routes; then
- * store the records once that wallet is committed.
- *
- * **Activation never fails because of custody.** The wallet's registration is
- * already committed by the time the records are stored, and the seed exists only in the
- * client's worker — so the client is the one party that can retry, re-enter as
- * a join, or abandon the run. Failing activation here would leave the server
- * registered, the response an error, and the client with no instruction; the
- * client cannot be told what happened by an exception it never sees the body
- * of. So every outcome is reported, and the caller decides.
- *
- * That is a deliberate default, not a claim that a wallet without custody is
- * fine — it is not, and a client that sees anything but `committed` or
- * `not_requested` must act on it rather than treat registration as done.
- *
- * The outcome shape itself is the wire contract, and lives in shared beside the
- * payload it answers.
- */
+/** Custody becomes committed only with the registration's durable completion receipt. */
 type RegistrationCustodyOutcome = WalletCustodyRegistrationOutcome;
-/** Stores the admitted custody records. It reports every failure and never throws. */
-export type RegistrationCustodyCommit = () => Promise<RegistrationCustodyOutcome>;
+export type RegistrationCustodyReservation = {
+    readonly kind: 'prepared';
+    readonly outcome: Extract<RegistrationCustodyOutcome, {
+        status: 'committed';
+    }>;
+    readonly write: {
+        readonly statements: readonly D1PreparedStatementLike[];
+    };
+} | {
+    readonly kind: 'settled';
+    readonly outcome: RegistrationCustodyOutcome;
+    readonly write?: never;
+};
 /** Admits the custody payload and claims its routes. It never throws either. */
 export declare function reserveRegistrationCustody(input: {
     /** Absent when the client did not run a custody ceremony for this leg. */
@@ -38,6 +30,6 @@ export declare function reserveRegistrationCustody(input: {
     readonly verifiedEmailOtpEnrollment?: VerifiedEmailOtpEnrollmentFacts;
     readonly nowMs: number;
     readonly store: CloudflareD1WalletCustodyCommitStore;
-}): Promise<RegistrationCustodyCommit>;
+}): Promise<RegistrationCustodyReservation>;
 export {};
 //# sourceMappingURL=registrationCustodyOutcome.d.ts.map

package/dist/types/wallet-server/src/router/domains/passkeyCustody/walletCustodyRegistrationAdmission.d.ts

@@ -56,9 +56,7 @@ type WalletCustodyRegistrationAdmissionInput = {
  * An admitted commit with its recovery-code routes claimed, or the outcome
  * that ends the admission with nothing claimed or written.
  */
-export type WalletCustodyRegistrationAdmission = WalletCustodyRegistrationReserved | Extract<WalletCustodyRegistrationAdmissionOutcome, {
-    kind: 'rejected' | 'no_custody_records';
-}>;
+export type WalletCustodyRegistrationAdmission = WalletCustodyRegistrationReserved | WalletCustodyRegistrationAdmissionOutcome;
 export declare function admitWalletCustodyRegistrationCommit(input: WalletCustodyRegistrationAdmissionInput): Promise<WalletCustodyRegistrationAdmission>;
 export {};
 //# sourceMappingURL=walletCustodyRegistrationAdmission.d.ts.map