@seams/wallet-server 0.15.6 → 0.17.0

package/dist/types/wallet-server/src/router/domains/signingOperations/signingPrepareSession.d.ts

@@ -3,11 +3,11 @@ import type { RouterAbEd25519NormalSigningAuthorizationResult } from './routerAb
 import type { RouterAbEcdsaNormalSigningAuthorizationResult } from './routerAbEcdsaDerivationNormalSigningRoute';
 /** The session snapshot validated for this admission, before its quota claim. */
 export declare function signingPrepareSessionResponse(signing: unknown, authorization: Variant<RouterAbEcdsaNormalSigningAuthorizationResult | RouterAbEd25519NormalSigningAuthorizationResult, 'ok', true>): {
-    kind: "operation_step_up";
+    kind: 'operation_step_up';
     signing: unknown;
     session_status?: undefined;
 } | {
-    kind: "reusable_wallet_session";
+    kind: 'reusable_wallet_session';
     signing: unknown;
     session_status: {
         ok: boolean;

package/dist/types/wallet-server/src/router/domains/walletRegistration/walletRegistrationSetupPayload.d.ts

@@ -31,7 +31,7 @@ export type WalletRegistrationSetupVerifier = {
         readonly valid: false;
     }>;
 };
-declare const WALLET_REGISTRATION_SETUP_CLAIM_KIND: "wallet_registration_setup_v1";
+declare const WALLET_REGISTRATION_SETUP_CLAIM_KIND: 'wallet_registration_setup_v1';
 export type WalletRegistrationSetupClaimsV1 = {
     readonly kind: typeof WALLET_REGISTRATION_SETUP_CLAIM_KIND;
     readonly registrationCeremonyId: string;

package/dist/types/wallet-server/src/router/domains/walletUnlock/walletUnlockRequestedCapabilitiesValidation.d.ts

@@ -1,6 +1,6 @@
-declare const EMAIL_OTP_NO_REQUESTED_CAPABILITIES_KIND: "none";
-declare const EMAIL_OTP_WALLET_SESSION_REQUESTED_CAPABILITIES_KIND: "wallet_session";
-declare const EMAIL_OTP_ED25519_YAO_REQUESTED_CAPABILITIES_KIND: "ed25519_yao";
+declare const EMAIL_OTP_NO_REQUESTED_CAPABILITIES_KIND: 'none';
+declare const EMAIL_OTP_WALLET_SESSION_REQUESTED_CAPABILITIES_KIND: 'wallet_session';
+declare const EMAIL_OTP_ED25519_YAO_REQUESTED_CAPABILITIES_KIND: 'ed25519_yao';
 type WalletUnlockEmailOtpRequestedCapabilitiesBase = {
     readonly signerSlot: number;
     readonly remainingUses: number;

package/dist/types/wallet-server/src/router/framework/apiCredentialPorts.d.ts

@@ -1,7 +1,7 @@
 import type { RouterApiKeyAuthFailureCode } from '../../../../shared-ts/src/utils/routerApiKeyAuth';
 import type { WalletRegistrationSetupRequest } from '../domains/walletRegistration/walletRegistrationInputs';
 import type { ReadonlyExclusiveUnion } from '../../../../shared-ts/src/utils/variant';
-export declare const ROUTER_API_CREDENTIAL_SCOPES: readonly ["accounts.create", "wallets.read", "wallets.auth_methods.create", "wallets.signers.create"];
+export declare const ROUTER_API_CREDENTIAL_SCOPES: readonly ['accounts.create', 'wallets.read', 'wallets.auth_methods.create', 'wallets.signers.create'];
 export type RouterApiCredentialScope = (typeof ROUTER_API_CREDENTIAL_SCOPES)[number];
 export type { RouterApiKeyAuthFailureCode };
 export interface RouterApiKeyAuthRequest {

package/dist/types/wallet-server/src/router/framework/routeAuthPolicy.d.ts

@@ -1,10 +1,10 @@
 import type { RouterApiKeyPrincipal, SessionClaims } from './routerApi';
 export type RouteAuthPlane = 'api_credentials' | 'session_principal' | 'public';
-export declare const API_CREDENTIAL_TYPES: readonly ["publishable_key", "secret_key"];
+export declare const API_CREDENTIAL_TYPES: readonly ['publishable_key', 'secret_key'];
 export type ApiCredentialType = (typeof API_CREDENTIAL_TYPES)[number];
 export declare const API_CREDENTIAL_ROUTE_SCOPES: readonly ["accounts.create", "wallets.read", "wallets.auth_methods.create", "wallets.signers.create"];
 export type ApiCredentialRouteScope = (typeof API_CREDENTIAL_ROUTE_SCOPES)[number];
-export declare const PUBLIC_PROOF_TYPES: readonly ["challenge_exchange", "intent_grant", "recovery_proof", "signed_payload", "threshold_protocol_state", "webauthn"];
+export declare const PUBLIC_PROOF_TYPES: readonly ['challenge_exchange', 'intent_grant', 'recovery_proof', 'signed_payload', 'threshold_protocol_state', 'webauthn'];
 export type PublicProofType = (typeof PUBLIC_PROOF_TYPES)[number];
 export type RouteAuthPolicy = {
     plane: 'api_credentials';

package/dist/types/wallet-server/src/router/framework/routeExecutionContext.d.ts

@@ -3,7 +3,7 @@ import type { RoutePrincipal } from './routeAuthPolicy';
 import type { RouteUsageData } from './routeMeteringPolicy';
 export type HeaderRecord = Record<string, string | string[] | undefined>;
 export type RouteMethod = 'DELETE' | 'GET' | 'PATCH' | 'POST' | 'PUT';
-export declare const ROUTE_SERVICE_KEYS: readonly ["apiKeyAuth", "emailOtp", "identity", "nearFunding", "orgProjectEnv", "passkeyCustody", "publishableKeyAuth", "recovery", "signingSessionSeal", "router", "session", "signedDelegateAuth", "thresholdRuntime", "walletAuthMethods", "walletRegistration", "walletUnlock", "webAuthn"];
+export declare const ROUTE_SERVICE_KEYS: readonly ['apiKeyAuth', 'emailOtp', 'identity', 'nearFunding', 'orgProjectEnv', 'passkeyCustody', 'publishableKeyAuth', 'recovery', 'signingSessionSeal', 'router', 'session', 'signedDelegateAuth', 'thresholdRuntime', 'walletAuthMethods', 'walletRegistration', 'walletUnlock', 'webAuthn'];
 export type CoreRouteServiceKey = (typeof ROUTE_SERVICE_KEYS)[number];
 export type RouteServiceKey = string;
 export type RouteServices = Partial<Record<CoreRouteServiceKey, unknown>>;

package/dist/types/wallet-server/src/router/transport/fetch/routes/deviceLinkingOwnerAuthorization.d.ts

@@ -11,7 +11,7 @@ import type { WalletExecutionLaneAuthSource } from '../../../../core/signingLane
 import type { DigestB64u } from '../../../../../../shared-ts/src/utils/canonicalPrimitives';
 import type { ExactAdministeredSignerManifestV1 } from '../../../../../../shared-ts/src/device-linking/delegatedActivationPlan';
 import type { ReadonlyExclusiveUnion } from '../../../../../../shared-ts/src/utils/variant';
-export declare const LINKED_DEVICE_OWNER_AUTHORIZATION_PATH_V1: "/wallet/device-linking/v1/owner-authorization";
+export declare const LINKED_DEVICE_OWNER_AUTHORIZATION_PATH_V1: '/wallet/device-linking/v1/owner-authorization';
 export type DeviceLinkingOwnerAuthorizationAuthenticationV1 = {
     readonly kind: 'link_session_authenticated_request_v1';
     readonly source: LinkedDeviceOwnerAuthorizationSourceV1;

package/migrations/d1-signer/0082_wallet_signature_completions.sql

@@ -0,0 +1,39 @@
+-- One row for each successful signature, until the deployment that owns this database
+-- delivers it to its Console usage count and deletes it. The completion of the signing
+-- operation writes the row in the same statement, so a signature is counted once.
+-- Key exports and failed operations write nothing; a copied operation history row is
+-- inserted, not completed, so a relocation does not count it again.
+CREATE TABLE wallet_signature_completions (
+  namespace TEXT NOT NULL,
+  tenant_id TEXT NOT NULL,
+  authorized_operation_id TEXT NOT NULL,
+  operation_kind TEXT NOT NULL CHECK(operation_kind IN (
+    'near.sign_transaction', 'near.sign_delegate_action', 'near.sign_nep413_message',
+    'evm.sign_transaction')),
+  org_id TEXT,
+  project_id TEXT,
+  env_id TEXT,
+  completed_at_ms INTEGER NOT NULL CHECK(completed_at_ms > 0),
+  PRIMARY KEY(namespace, tenant_id, authorized_operation_id)
+);
+
+CREATE INDEX wallet_signature_completions_due
+  ON wallet_signature_completions(namespace, tenant_id, completed_at_ms);
+
+CREATE TRIGGER wallet_signature_completion_record
+AFTER UPDATE OF lifecycle_kind ON authorized_operations
+WHEN OLD.lifecycle_kind = 'claimed' AND NEW.lifecycle_kind = 'completed'
+  AND NEW.result_kind = 'succeeded'
+  AND NEW.operation_kind IN (
+    'near.sign_transaction', 'near.sign_delegate_action', 'near.sign_nep413_message',
+    'evm.sign_transaction')
+BEGIN
+  INSERT INTO wallet_signature_completions (
+    namespace, tenant_id, authorized_operation_id, operation_kind, org_id, project_id,
+    env_id, completed_at_ms
+  ) VALUES (
+    NEW.namespace, NEW.tenant_id, NEW.authorized_operation_id, NEW.operation_kind,
+    NEW.owner_scope_org_id, NEW.owner_scope_project_id, NEW.owner_scope_env_id,
+    NEW.completed_at_ms
+  ) ON CONFLICT DO NOTHING;
+END;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seams/wallet-server",
-  "version": "0.15.6",
+  "version": "0.17.0",
   "type": "module",
   "description": "Seams server TypeScript SDK for NEAR and EVM-family wallets",
   "main": "./dist/esm/index.js",
@@ -85,12 +85,12 @@
     "access": "public"
   },
   "scripts": {
-    "build": "rm -rf dist && tsc -p tsconfig.build.json && node ./scripts/rewrite-declaration-imports.mjs && rolldown -c rolldown.config.ts && node ./scripts/copy-wasm-assets.mjs",
+    "build": "rm -rf dist && tsrs -p tsconfig.build.json && node ./scripts/rewrite-declaration-imports.mjs && rolldown -c rolldown.config.ts && node ./scripts/copy-wasm-assets.mjs",
     "package:cloudflare-runtime": "node ./scripts/copy-cloudflare-router-runtime.mjs && node ./scripts/write-artifact-manifest.mjs",
     "d1:local:migrate": "node ./scripts/d1-local-migrate-signer.mjs",
     "prepack": "pnpm run package:cloudflare-runtime && node ../../scripts/package-license.mjs stage",
     "postpack": "node ../../scripts/package-license.mjs clean",
-    "type-check": "tsc --noEmit"
+    "type-check": "tsrs --noEmit"
   },
   "keywords": [
     "seams",
@@ -120,7 +120,6 @@
   "devDependencies": {
     "@near-js/types": "^2.4.0",
     "@types/node": "^20.19.9",
-    "rolldown": "^1.0.0-beta.27",
-    "typescript": "^5.8.3"
+    "rolldown": "^1.0.0-beta.27"
   }
 }