@seams/wallet-server 0.15.4 → 0.17.0

package/README.md

@@ -1,8 +1,58 @@
-# Signer Server TypeScript Package
+# Seams Wallet Server
 
 This package owns the reusable signer server surface: route adapters,
 WebAuthn verification policy, threshold signing services, signer storage
 adapters, and server wasm bindings.
 
+The current published package is `@seams/wallet-server@0.17.0`, checked
+October 21, 2026. Pair it with `@seams/wallet@0.17.0` and matching hosted assets.
+Use `@seams/wallet-cli@0.17.0`.
+
+```sh
+pnpm add @seams/wallet-server@0.17.0
+```
+
+## Supported runtime and entry points
+
+The packaged Wallet backend runs on Cloudflare Workers with Durable Objects,
+D1, role-private backup storage, and Rust/WASM protocol workers. The package
+does not provide a Node Gateway or an Express adapter.
+
+| Entry point | Purpose |
+| --- | --- |
+| `@seams/wallet-server` | Shared server services, contracts, and storage adapters |
+| `@seams/wallet-server/router/cloudflare` | Cloudflare Router adapter |
+| `@seams/wallet-server/router/ror` | Router-of-Routers adapter |
+| `@seams/wallet-server/storage/tenant-route` | Tenant route storage |
+| `@seams/wallet-server/wasm/signer` | Signer WASM bindings |
+| `@seams/wallet-server/cloud-host` | Hosted registration and authority services |
+| `@seams/wallet-server/hosted-wallet-gateway` | Hosted Gateway composition |
+| `@seams/wallet-server/hosted-wallet-gateway-worker` | Gateway Worker entry point |
+| `@seams/wallet-server/local-hosted-wallet-gateway-worker` | Local Gateway Worker entry point |
+| `@seams/wallet-server/tenant-root` | Tenant-root lifecycle and recovery contracts |
+| `@seams/wallet-server/local-runtime` | Packaged local runtime configuration |
+
+The package also includes `artifact-manifest.json`, signer D1 migrations, local
+runtime scripts, and prebuilt custody Workers. Use the repository root's
+`pnpm router` for source development. Installed consumers use
+`seams-wallet-server-local` or the role and initialization commands described in
+the [repository README](../../README.md#packaged-local-runtime).
+
+## Deployment requirements
+
+- Apply Gateway migration `0081_registration_directory_publications.sql` before
+  serving registration. A custom Gateway must schedule
+  `resumeRegistrationDirectoryPublicationsV1` from the `cloud-host` entry point.
+- Deploy Router, Deriver A, Deriver B, and Signing Worker together when upgrading
+  to the batched object-address allocation contract introduced in 0.15.0.
+- Renew an expired initial tenant authorization only before its creation journal
+  starts. Retain the original authorization for an already-started ceremony.
+- Verify APAC object hosts and database primaries. The `apac-se` hint requests
+  Southeast Asia placement and does not prove physical co-location.
+
+See the [server reference](https://wallet.seams.sh/docs/reference/server),
+[hosted integration](https://wallet.seams.sh/docs/deploy-and-operate/hosted-integration),
+and [release notes](https://wallet.seams.sh/docs/releases).
+
 Hosted product services and their operational tooling live in the private
 `seams-monorepo` repository.

package/THIRD_PARTY_NOTICES.md

@@ -5,7 +5,7 @@ distributed Seams Wallet SDK, server runtime, Wasm, strict Workers, and CLI.
 Dependency license expressions come from their package metadata. Packaged
 license and notice wording is reproduced below with normalized whitespace.
 
-Inventory: 445 dependency records (41 npm, 404 Cargo).
+Inventory: 450 dependency records (41 npm, 409 Cargo).
 
 ## Dependency inventory
 
@@ -204,6 +204,7 @@ Inventory: 445 dependency records (41 npm, 404 Cargo).
 | cargo | memchr | 2.8.2 | Unlicense OR MIT | Andrew Gallant <jamslam@gmail.com>; bluss |
 | cargo | memchr | 2.8.3 | Unlicense OR MIT | Andrew Gallant <jamslam@gmail.com>; bluss |
 | cargo | minicov | 0.3.8 | Apache-2.0/MIT | Amanieu d'Antras <amanieu@gmail.com> |
+| cargo | mio | 1.2.4 | MIT | Carl Lerche <me@carllerche.com>; Thomas de Zeeuw <thomasdezeeuw@gmail.com>; Tokio Contributors <team@tokio.rs> |
 | cargo | nix | 0.31.3 | MIT |  |
 | cargo | nu-ansi-term | 0.50.3 | MIT | Josh Triplett <josh@joshtriplett.org>; Ryan Scheel (Havvy) <ryan.havvy@gmail.com>; The Nushell Project Developers; ogham@bsago.me |
 | cargo | num-bigint | 0.4.6 | MIT OR Apache-2.0 | The Rust Project Developers |
@@ -293,6 +294,7 @@ Inventory: 445 dependency records (41 npm, 404 Cargo).
 | cargo | simdutf8 | 0.1.5 | MIT OR Apache-2.0 | Hans Kratz <hans@appfour.com> |
 | cargo | slab | 0.4.12 | MIT | Carl Lerche <me@carllerche.com> |
 | cargo | smallvec | 1.15.2 | MIT OR Apache-2.0 | The Servo Project Developers |
+| cargo | socket2 | 0.6.5 | MIT OR Apache-2.0 | Alex Crichton <alex@alexcrichton.com>; Thomas de Zeeuw <thomasdezeeuw@gmail.com> |
 | cargo | spin | 0.9.8 | MIT | John Ericson <git@JohnEricson.me>; Joshua Barretto <joshua.s.barretto@gmail.com>; Mathijs van de Nes <git@mathijs.vd-nes.nl> |
 | cargo | spin | 0.9.9 | MIT | John Ericson <git@JohnEricson.me>; Joshua Barretto <joshua.s.barretto@gmail.com>; Mathijs van de Nes <git@mathijs.vd-nes.nl> |
 | cargo | spki | 0.7.3 | Apache-2.0 OR MIT | RustCrypto Developers |
@@ -307,6 +309,7 @@ Inventory: 445 dependency records (41 npm, 404 Cargo).
 | cargo | syn | 2.0.119 | MIT OR Apache-2.0 | David Tolnay <dtolnay@gmail.com> |
 | cargo | syn | 3.0.3 | MIT OR Apache-2.0 | David Tolnay <dtolnay@gmail.com> |
 | cargo | syn | 3.0.5 | MIT OR Apache-2.0 | David Tolnay <dtolnay@gmail.com> |
+| cargo | syn | 3.0.9 | MIT OR Apache-2.0 | David Tolnay <dtolnay@gmail.com> |
 | cargo | termcolor | 1.4.1 | Unlicense OR MIT | Andrew Gallant <jamslam@gmail.com> |
 | cargo | thiserror-impl | 2.0.17 | MIT OR Apache-2.0 | David Tolnay <dtolnay@gmail.com> |
 | cargo | thiserror-impl | 2.0.18 | MIT OR Apache-2.0 | David Tolnay <dtolnay@gmail.com> |
@@ -321,6 +324,8 @@ Inventory: 445 dependency records (41 npm, 404 Cargo).
 | cargo | tinyvec | 1.12.0 | Zlib OR Apache-2.0 OR MIT | Lokathor <zefria@gmail.com> |
 | cargo | tinyvec | 1.13.2 | Zlib OR Apache-2.0 OR MIT | Lokathor <zefria@gmail.com> |
 | cargo | tinyvec | 1.9.0 | Zlib OR Apache-2.0 OR MIT | Lokathor <zefria@gmail.com> |
+| cargo | tokio-macros | 2.7.2 | MIT | Tokio Contributors <team@tokio.rs> |
+| cargo | tokio | 1.52.3 | MIT | Tokio Contributors <team@tokio.rs> |
 | cargo | toml_datetime | 0.6.11 | MIT OR Apache-2.0 |  |
 | cargo | toml_datetime | 1.1.1+spec-1.1.0 | MIT OR Apache-2.0 |  |
 | cargo | toml_edit | 0.22.27 | MIT OR Apache-2.0 |  |
@@ -1279,6 +1284,35 @@ Applies to:
     limitations under the License.
 
 
+### 07919255c7e04793
+
+Packaged as: LICENSE
+
+Applies to:
+
+- cargo:mio@1.2.4
+
+    Copyright (c) 2014 Carl Lerche and other MIO contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in
+    all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
+    THE SOFTWARE.
+
+
 ### 0816e154b159ba25
 
 Packaged as: LICENSE-MIT
@@ -1509,6 +1543,38 @@ Applies to:
     DEALINGS IN THE SOFTWARE.
 
 
+### 0b83dc40cba89b99
+
+Packaged as: LICENSE
+
+Applies to:
+
+- cargo:tokio-macros@2.7.2
+
+    MIT License
+
+    Copyright (c) 2019 Yoshua Wuyts
+    Copyright (c) Tokio Contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all
+    copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.
+
+
 ### 0c1240e29b4a2c52
 
 Packaged as: LICENSE-BSD-1
@@ -2752,6 +2818,7 @@ Applies to:
 - cargo:syn@2.0.119
 - cargo:syn@3.0.3
 - cargo:syn@3.0.5
+- cargo:syn@3.0.9
 - cargo:thiserror-impl@2.0.17
 - cargo:thiserror-impl@2.0.18
 - cargo:thiserror-impl@2.0.19
@@ -2899,6 +2966,37 @@ Applies to:
     DEALINGS IN THE SOFTWARE.
 
 
+### 253cd04c6714889d
+
+Packaged as: LICENSE
+
+Applies to:
+
+- cargo:tokio@1.52.3
+
+    MIT License
+
+    Copyright (c) Tokio Contributors
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in all
+    copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.
+
+
 ### 275c491d6d116055
 
 Packaged as: LICENSE-APACHE
@@ -3728,6 +3826,7 @@ Applies to:
 - cargo:js-sys@0.3.90
 - cargo:openssl-probe@0.2.1
 - cargo:pkg-config@0.3.34
+- cargo:socket2@0.6.5
 - cargo:wasm-bindgen-backend@0.2.100
 - cargo:wasm-bindgen-futures@0.4.73
 - cargo:wasm-bindgen-macro-support@0.2.100
@@ -5842,6 +5941,7 @@ Applies to:
 - cargo:syn@2.0.119
 - cargo:syn@3.0.3
 - cargo:syn@3.0.5
+- cargo:syn@3.0.9
 - cargo:thiserror-impl@2.0.17
 - cargo:thiserror-impl@2.0.18
 - cargo:thiserror-impl@2.0.19
@@ -9305,6 +9405,7 @@ Applies to:
 - cargo:security-framework@3.7.0
 - cargo:simd_cesu8@1.2.0
 - cargo:smallvec@1.15.2
+- cargo:socket2@0.6.5
 - cargo:stable_deref_trait@1.2.1
 - cargo:vcpkg@0.2.15
 - cargo:version_check@0.9.5

package/artifact-manifest.json

@@ -2,17 +2,17 @@
   "schemaVersion": "seams_wallet_server_artifact_manifest_v1",
   "package": {
     "name": "@seams/wallet-server",
-    "version": "0.15.4"
+    "version": "0.17.0"
   },
   "workers": {
     "router": {
       "entry": "cloudflare-router-ab/build/router/worker/shim.mjs",
-      "fingerprint": "767fa0eb4b9928f08b8af98f1fdd03da0aa16163fe0527172ee6562d610021c4",
+      "fingerprint": "14427d7fb65ff24bd1d5f06ceafcd287db30dc6ddf3f1d74b0a73c5edfd59a77",
       "files": [
         {
           "path": "cloudflare-router-ab/build/router/build-stamp.json",
           "bytes": 119,
-          "sha256": "9738c47ced9cc6980c3ddf508f202156e30845575b13795ae2b9235b4af1aec8"
+          "sha256": "8c0064cf8cace6686af65649398910264d696cbb07d600392841167ac5770275"
         },
         {
           "path": "cloudflare-router-ab/build/router/index.js",
@@ -21,8 +21,8 @@
         },
         {
           "path": "cloudflare-router-ab/build/router/index_bg.wasm",
-          "bytes": 8174942,
-          "sha256": "55f8f0f374743e7fa767516bd136b69602f008e9d26d19945a6765ef384560d1"
+          "bytes": 8174862,
+          "sha256": "5b949a0edeb8173d0a4d892fae79b343996f5f146b6989929423a765b9ac97bd"
         },
         {
           "path": "cloudflare-router-ab/build/router/package.json",
@@ -38,12 +38,12 @@
     },
     "deriver-a": {
       "entry": "cloudflare-router-ab/build/deriver-a/worker/shim.mjs",
-      "fingerprint": "30ff36fd6239a31c3064aa0029d38266857277374ec1b167cebed8ecd0fc826e",
+      "fingerprint": "009dcae9690af738927f1bda499c8f2b194a4db43477c02cb4dda1d5ce2ea5a3",
       "files": [
         {
           "path": "cloudflare-router-ab/build/deriver-a/build-stamp.json",
           "bytes": 122,
-          "sha256": "19b76c46eace75d0d9e383b5f94d49b4b0bc805e56a0232931b031c329599492"
+          "sha256": "94593a9fd86b16292feb2f06ccfe86455ae00e285667ddeb52b3f4ce7ac889b5"
         },
         {
           "path": "cloudflare-router-ab/build/deriver-a/index.js",
@@ -52,8 +52,8 @@
         },
         {
           "path": "cloudflare-router-ab/build/deriver-a/index_bg.wasm",
-          "bytes": 14176912,
-          "sha256": "e370ad7c52c4080552a2d5926aefb12585da545eb246aeaa5f8f2ce475f51cb6"
+          "bytes": 14214083,
+          "sha256": "a7921efd814846c9cdb217be02212ea02dc93854df8ac4a654359387e3478f7d"
         },
         {
           "path": "cloudflare-router-ab/build/deriver-a/package.json",
@@ -69,12 +69,12 @@
     },
     "deriver-b": {
       "entry": "cloudflare-router-ab/build/deriver-b/worker/shim.mjs",
-      "fingerprint": "a2464132c473fe0b3e5f49d06c439c58a98db29755dfd5cc40517b79ba37a4a0",
+      "fingerprint": "8b1cf818d5a5ac3c6c0c82720c3dd80fc2f9723f0ff3d7705244d9e1034fd01b",
       "files": [
         {
           "path": "cloudflare-router-ab/build/deriver-b/build-stamp.json",
           "bytes": 122,
-          "sha256": "6aa579bf87cf1d12a9b7aab0579e38df0457e7655362b30495e4f29835dee2de"
+          "sha256": "aa9629fc986e2245d9744fa1930a9158a7740f5eaf9ffa1d11136345bb2594f8"
         },
         {
           "path": "cloudflare-router-ab/build/deriver-b/index.js",
@@ -83,8 +83,8 @@
         },
         {
           "path": "cloudflare-router-ab/build/deriver-b/index_bg.wasm",
-          "bytes": 14208777,
-          "sha256": "226aade762d3f63ebf20f8174c092c6605620ce86e3fd072068bd46c40841d24"
+          "bytes": 14248710,
+          "sha256": "85a1acbec334f98c1e8361079ebd686009ce4c8d28875c694c7503af3c347357"
         },
         {
           "path": "cloudflare-router-ab/build/deriver-b/package.json",
@@ -100,12 +100,12 @@
     },
     "signing-worker": {
       "entry": "cloudflare-router-ab/build/signing-worker/worker/shim.mjs",
-      "fingerprint": "9381b301fcf2aca432f9c9f4d708f1a1702f3101b5f43d63333cf3edd709c4b5",
+      "fingerprint": "497d5a74de8cce7e87c0048575f9c0b3bc7181133a09bd027326a672bb985686",
       "files": [
         {
           "path": "cloudflare-router-ab/build/signing-worker/build-stamp.json",
           "bytes": 127,
-          "sha256": "241f49995937e0c8ba9d0c0b2fa98081b157bde47aff45d1a1a4e9e1e376da89"
+          "sha256": "2426aaa72283a398a8eced28f818e7c6d7fcdafd1ac53343efabd6bf02742ab7"
         },
         {
           "path": "cloudflare-router-ab/build/signing-worker/index.js",
@@ -114,8 +114,8 @@
         },
         {
           "path": "cloudflare-router-ab/build/signing-worker/index_bg.wasm",
-          "bytes": 9023377,
-          "sha256": "fdab72d038965f90cc26f0d69145fa3edd58b19f8043edaa09320cd7158c9bb6"
+          "bytes": 9023404,
+          "sha256": "3bbdb71e5685578cc0eeaf84fe921fe46590aec67e5786e2632bdaf5b72c0fd8"
         },
         {
           "path": "cloudflare-router-ab/build/signing-worker/package.json",
@@ -131,12 +131,12 @@
     },
     "tenant-root-control-plane": {
       "entry": "cloudflare-router-ab/build/tenant-root-control-plane/worker/shim.mjs",
-      "fingerprint": "d4fc469de9825b730f4e4997947c65c17f0a2d7bba5498456f9ff6056cfda1f8",
+      "fingerprint": "05a9e38d49b85cad4ade15e3d7ddb1f6bd2b0d3e5d6b697c32f796511bfa92aa",
       "files": [
         {
           "path": "cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json",
           "bytes": 139,
-          "sha256": "2e6932cc8d1d2ce13b535fc923f7482fe3ed48618273f7d649faceed88e10738"
+          "sha256": "a923f429524c81b50d55adf3820d67e2ddf6e6a17022fb3f933a2b0406646fa3"
         },
         {
           "path": "cloudflare-router-ab/build/tenant-root-control-plane/index.js",
@@ -146,7 +146,7 @@
         {
           "path": "cloudflare-router-ab/build/tenant-root-control-plane/index_bg.wasm",
           "bytes": 5240082,
-          "sha256": "a9e3608ee0af51005f7708fd1d9314ec393d4d074396f1d79fe71e883c4c4049"
+          "sha256": "0e553dc686e8a7c12396c926139762f4f23f3c4dc9d2b3e8a71accd055e556e1"
         },
         {
           "path": "cloudflare-router-ab/build/tenant-root-control-plane/package.json",
@@ -164,8 +164,8 @@
   "migrations": {
     "signer": {
       "directory": "migrations/d1-signer",
-      "head": "0081_registration_directory_publications.sql",
-      "fingerprint": "1c939bacda72ec3c83a8fd1381668810b82c2963b3d3fda3a9670e916c6ae9d0",
+      "head": "0082_wallet_signature_completions.sql",
+      "fingerprint": "a886c91affebf67bf90a993165d65f9d70a8c5b0a0d876c6ab6e914f68f1fcb4",
       "files": [
         {
           "path": "migrations/d1-signer/0001_signer_d1_initial.sql",
@@ -571,6 +571,11 @@
           "path": "migrations/d1-signer/0081_registration_directory_publications.sql",
           "bytes": 1599,
           "sha256": "d386b3949a736393f74a0f67da4b1350826813acd2f5cc975e853efc21d032f9"
+        },
+        {
+          "path": "migrations/d1-signer/0082_wallet_signature_completions.sql",
+          "bytes": 1781,
+          "sha256": "0b9372c31b650eee2b2dcb23396de327654cdc1b14fc51b460010ae656e39fc0"
         }
       ]
     },

package/cloudflare-router-ab/build/deriver-a/build-stamp.json

@@ -1 +1 @@
-{"profile":"release","wallet_objects":true,"features":"strict-worker-deriver-a-entrypoint","started_at_ms":1792478735272}
+{"profile":"release","wallet_objects":true,"features":"strict-worker-deriver-a-entrypoint","started_at_ms":1792574742459}

package/cloudflare-router-ab/build/deriver-b/build-stamp.json

@@ -1 +1 @@
-{"profile":"release","wallet_objects":true,"features":"strict-worker-deriver-b-entrypoint","started_at_ms":1792478969983}
+{"profile":"release","wallet_objects":true,"features":"strict-worker-deriver-b-entrypoint","started_at_ms":1792574986188}

package/cloudflare-router-ab/build/router/build-stamp.json

@@ -1 +1 @@
-{"profile":"release","wallet_objects":true,"features":"strict-worker-router-entrypoint","started_at_ms":1792479186679}
+{"profile":"release","wallet_objects":true,"features":"strict-worker-router-entrypoint","started_at_ms":1792575201904}

package/cloudflare-router-ab/build/signing-worker/build-stamp.json

@@ -1 +1 @@
-{"profile":"release","wallet_objects":true,"features":"strict-worker-signing-worker-entrypoint","started_at_ms":1792478414234}
+{"profile":"release","wallet_objects":true,"features":"strict-worker-signing-worker-entrypoint","started_at_ms":1792574427377}

package/cloudflare-router-ab/build/tenant-root-control-plane/build-stamp.json

@@ -1 +1 @@
-{"profile":"release","wallet_objects":false,"features":"strict-worker-tenant-root-control-plane-entrypoint","started_at_ms":1792479395368}
+{"profile":"release","wallet_objects":false,"features":"strict-worker-tenant-root-control-plane-entrypoint","started_at_ms":1792575418641}