@seams/wallet-server 0.7.1 → 0.8.0

package/dist/esm/router/cloudflare/d1/registration/d1RegistrationSetupSupport.js

@@ -0,0 +1,74 @@
+import { findRegistrationSignerPlanEvmFamilyEcdsaBranch, findRegistrationSignerPlanNearEd25519Branch, registrationSignerPlanFromSelection } from "../../../../shared-ts/src/utils/registrationSignerPlan.js";
+import { buildStoredWalletRegistrationPreparedContext } from "../../../../core/RegistrationCeremonyStore.js";
+import { normalizeThresholdEcdsaChainTargets } from "./d1RegistrationCeremonyRecords.js";
+//#region src/router/cloudflare/d1/registration/d1RegistrationSetupSupport.ts
+function errorMessage(error) {
+	return error instanceof Error ? error.message : String(error || "");
+}
+function startD1RegistrationRouteTiming(name) {
+	return {
+		name,
+		startedAtMs: Date.now()
+	};
+}
+function finishD1RegistrationRouteTiming(recorder, mark) {
+	recorder.entries.push({
+		name: mark.name,
+		durationMs: Math.max(0, Date.now() - mark.startedAtMs)
+	});
+}
+function createD1RegistrationRouteTimingRecorder(route) {
+	return {
+		route,
+		entries: []
+	};
+}
+function registrationIntentSignerBranches(intent) {
+	const plan = registrationSignerPlanFromSelection(intent.signerSelection);
+	if (!plan.ok) return plan;
+	return {
+		ok: true,
+		value: registrationSignerBranchesFromPlan(plan.value)
+	};
+}
+function resolveRegistrationPreparedContextFromPlan(input) {
+	const branches = registrationSignerBranchesFromPlan(input.signerPlan);
+	const ecdsaChainTargets = branches.evmFamilyEcdsa ? normalizeThresholdEcdsaChainTargets(branches.evmFamilyEcdsa.chainTargets) : null;
+	if (branches.evmFamilyEcdsa && !ecdsaChainTargets) return {
+		ok: false,
+		code: "invalid_body",
+		message: "ECDSA registration contains an invalid chain target"
+	};
+	try {
+		return {
+			ok: true,
+			preparedContext: buildStoredWalletRegistrationPreparedContext({
+				signingRootId: input.signingRootId,
+				signingRootVersion: input.signingRootVersion,
+				runtimePolicyScope: input.runtimePolicyScope || null,
+				ecdsaChainTargets
+			}),
+			ecdsaChainTargets
+		};
+	} catch (error) {
+		return {
+			ok: false,
+			code: "invalid_body",
+			message: errorMessage(error) || "registration prepared context is invalid"
+		};
+	}
+}
+function registrationPreparedContextEcdsaChainTargets(preparedContext) {
+	return preparedContext.ecdsa.kind === "evm_family_ecdsa_requested" ? preparedContext.ecdsa.chainTargets : null;
+}
+function registrationSignerBranchesFromPlan(plan) {
+	return {
+		plan,
+		nearEd25519: findRegistrationSignerPlanNearEd25519Branch(plan),
+		evmFamilyEcdsa: findRegistrationSignerPlanEvmFamilyEcdsaBranch(plan)
+	};
+}
+//#endregion
+export { createD1RegistrationRouteTimingRecorder, errorMessage, finishD1RegistrationRouteTiming, registrationIntentSignerBranches, registrationPreparedContextEcdsaChainTargets, registrationSignerBranchesFromPlan, resolveRegistrationPreparedContextFromPlan, startD1RegistrationRouteTiming };
+
+//# sourceMappingURL=d1RegistrationSetupSupport.js.map

package/dist/esm/router/cloudflare/d1/registration/d1WalletRegistrationCommitStore.js

@@ -1,12 +1,12 @@
 import { mpcMaterialActivationRefsEqual } from "../../../../shared-ts/src/utils/domainIds.js";
 import { normalizeOptionalTrimmedString } from "../../../../shared-ts/src/utils/normalize.js";
-import "../../../../shared-ts/src/utils/validation.js";
 import { parseWalletAuthMethodRecordV2, sameWalletAuthMethodRecordV2 } from "../../../../shared-ts/src/utils/walletAuthMethodRecord.js";
 import { parseWalletAuthorityV1 } from "../../../../shared-ts/src/authorization/walletAuthority.js";
 import { buildWalletSessionCapabilitySubjectsV1 } from "../../../../authorization/domain.js";
 import { parseD1JsonColumn } from "../../../../storage/d1Sql.js";
 import { prepareD1WalletPutSignerStatement, prepareD1WalletPutSubjectStatement } from "../../../../core/d1WalletStore.js";
 import { prepareD1WalletAuthMethodV2PutStatement } from "../../../../core/d1WalletAuthMethodStore.js";
+import { reservePasskeyCredential } from "../../../../core/passkeyCredentialClaims.js";
 import { prepareD1WebAuthnCredentialBindingPutStatement } from "../../../../core/WebAuthnCredentialBindingStore.js";
 import { prepareD1WebAuthnAuthenticatorPutStatement } from "../webauthn/d1WebAuthnStore.js";
 import { prepareD1WalletSessionAuthorityProjectionStatements } from "../authorization/walletSessionAuthorityProjection.js";
@@ -192,11 +192,17 @@ function emailOtpCommitStatements(input) {
 }
 var CloudflareD1WalletRegistrationCommitStore = class {
 	constructor(input) {
+		this.credentialClaims = input.credentialClaims;
 		this.database = input.database;
 		this.scope = normalizeScope(input);
 	}
 	async commit(input) {
 		assertCommitWalletIdentity(input);
+		if (input.authority.kind === "passkey") await reservePasskeyCredential(this.credentialClaims, {
+			walletId: input.authority.walletId,
+			rpId: input.authority.rpId,
+			credentialIdB64u: input.authority.credentialIdB64u
+		});
 		const foundingStatements = await prepareFoundingStatements({
 			database: this.database,
 			scope: this.scope,