@seams/wallet-server 0.28.0 → 0.30.0

package/dist/esm/router/cloudflare/d1/registration/walletRegistrationSessionCommitReceipt.js

@@ -12,6 +12,7 @@ import "../../../../shared-ts/src/passkey-custody/index.js";
 /** The home activation that a commit left for the record that completes its operation. */
 function registrationCommitActivation(execution) {
 	switch (execution.kind) {
+		case "owner_registered":
 		case "session_issued":
 		case "session_issued_with_installation_projection": return execution.activation;
 		case "unissued":
@@ -45,6 +46,7 @@ function projectRegistrationEstablishedSessionV2(session) {
 }
 function projectRegistrationEstablishedSessionResultV2(result) {
 	switch (result.kind) {
+		case "owner_operations": throw new Error("Owner registration has no session projection");
 		case "issued": return projectRegistrationEstablishedSessionV2(result.session);
 		case "already_committed": return result.session;
 		default: return assertNeverRegistrationSessionResult(result);
@@ -55,6 +57,21 @@ function assertNeverRegistrationSessionResult(value) {
 }
 function projectWalletRegistrationSessionCommitReceiptV2(input) {
 	const response = input.execution.response;
+	if (input.execution.kind === "owner_registered") {
+		if (input.operation !== "near_provisioning" || !response.ok || response.kind !== "near_ed25519" || !("registrationEstablishedSession" in response) || response.registrationEstablishedSession.kind !== "owner_operations") throw new Error("Invalid owner registration receipt");
+		const { registrationEstablishedSession, ...finalized } = response;
+		return {
+			kind: "wallet_registration_session_commit_receipt_v2",
+			operation: "near_provisioning",
+			operationFingerprint: input.operationFingerprint,
+			registrationCeremonyId: input.registrationCeremonyId,
+			committed: {
+				kind: "near_owner_ready",
+				expectedOrigin: input.execution.expectedOrigin,
+				response: finalized
+			}
+		};
+	}
 	if (!response.ok) {
 		if (input.execution.kind !== "unissued") throw new Error("Registration error receipt has an issued-session marker");
 		return {
@@ -208,6 +225,24 @@ function parseWalletRegistrationSessionCommitReceiptV2(raw, parseCommitted) {
 			}
 		};
 	}
+	if (committedRecord.kind === "near_owner_ready") {
+		if (operation !== "near_provisioning" || !hasExactKeys(record, [
+			"kind",
+			"operation",
+			"operationFingerprint",
+			"registrationCeremonyId",
+			"committed"
+		])) return null;
+		const committed = parseCommitted(record.committed);
+		if (!committed || committed.kind !== "near_owner_ready") return null;
+		return {
+			kind: "wallet_registration_session_commit_receipt_v2",
+			operation,
+			operationFingerprint,
+			registrationCeremonyId,
+			committed
+		};
+	}
 	const walletId = parseWalletId(record.walletId);
 	const walletAuthMethodId = parseWalletAuthMethodId(record.walletAuthMethodId);
 	const authority = parseWalletAuthAuthority(record.authority);

package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.js

@@ -1,8 +1,8 @@
 import { sha256HexUtf8 } from "../../../../shared-ts/src/utils/digests.js";
 import { buildEmailOtpWalletAuthAuthority, buildPasskeyWalletAuthAuthority, walletAuthAuthorityRef } from "../../../../shared-ts/src/utils/walletAuthAuthority.js";
+import { EMAIL_OTP_CHANNEL, WALLET_EMAIL_OTP_ACTIONS, WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION } from "../../../../shared-ts/src/utils/emailOtpDomain.js";
 import { webAuthnCredentialIdB64uFromCredential } from "../../../auth/webAuthnCredentialCodecs.js";
 import { hashEmailOtpOperationBinding } from "../../../domains/emailOtp/emailOtpSessionRouteHelpers.js";
-import { EMAIL_OTP_CHANNEL, WALLET_EMAIL_OTP_ACTIONS, WALLET_EMAIL_OTP_TRANSACTION_SIGN_OPERATION } from "../../../../shared-ts/src/utils/emailOtpDomain.js";
 //#region src/router/cloudflare/d1/wallet/d1WalletAuthMethodBoundary.ts
 function walletRegistrationFinalizeAuthMethodFromAuthority(authority) {
 	switch (authority.kind) {

package/dist/esm/router/cloudflare/d1/wallet/d1WalletAuthMethodService.js

@@ -13,12 +13,12 @@ import { buildWalletAuthMethodRecordV2, computeWalletAuthMethodRevokeOperationFi
 import { deriveWebAuthnAuthenticatorDeviceInfo } from "../../../../shared-ts/src/utils/webauthnDeviceInfo.js";
 import { parseSessionOrigin } from "../../../../authorization/domain.js";
 import { secureRandomBase64Url } from "../../../../shared-ts/src/utils/secureRandomId.js";
+import { EMAIL_OTP_CHANNEL, WALLET_EMAIL_OTP_ACTIONS, WALLET_EMAIL_OTP_UNLOCK_OPERATION } from "../../../../shared-ts/src/utils/emailOtpDomain.js";
+import { parseWebAuthnClientDataJsonBase64url, webAuthnOriginHostnameOrEmpty } from "../../../auth/webAuthnCredentialCodecs.js";
 import { PASSKEY_PRF_FIRST_SALT_V1, PASSKEY_PRF_SECOND_SALT_V1 } from "../../../../shared-ts/src/utils/signingSessionSeal.js";
 import { parsePasskeyCustodyEnvelopeRecord } from "../../../../shared-ts/src/passkey-custody/custodyEnvelope.js";
 import "../../../../shared-ts/src/passkey-custody/index.js";
 import { addAuthMethodIntentGrantFromString, computeAddAuthMethodIntentDigestB64u } from "../../../../shared-ts/src/utils/registrationIntent.js";
-import { parseWebAuthnClientDataJsonBase64url, webAuthnOriginHostnameOrEmpty } from "../../../auth/webAuthnCredentialCodecs.js";
-import { EMAIL_OTP_CHANNEL, WALLET_EMAIL_OTP_ACTIONS, WALLET_EMAIL_OTP_UNLOCK_OPERATION } from "../../../../shared-ts/src/utils/emailOtpDomain.js";
 import { resolveWalletAuthMethodIdForAuthority } from "../../../../core/signingLanes/WalletExecutionLaneProjection.js";
 import { d1HostIsWithinWebAuthnRpId, resolveD1AddAuthMethodExistingAuth, resolveD1AddSignerExistingAuth, verifyD1LinkedDeviceFreshRevokeProofV1, walletAuthAuthorityFromRegistrationAuthority } from "./d1WalletAuthMethodBoundary.js";
 import { parseWalletIdForIntent } from "../registration/d1RegistrationCeremonyRecords.js";
@@ -1413,7 +1413,8 @@ var CloudflareD1WalletAuthMethodService = class {
 					provider,
 					providerUserId,
 					emailHashHex: record.emailHashHex
-				}), record.walletAuthMethodId)
+				}), record.walletAuthMethodId),
+				walletAuthority
 			};
 		} catch (error) {
 			return {