@seams/wallet-server 0.7.1 → 0.8.0

package/dist/esm/threshold/session/signingSessionSeal/transport/express.js

@@ -1,3 +1,4 @@
+import { failure } from "../../../../shared-ts/src/utils/failure.js";
 import { authorizeSigningSessionSealRequest, buildSigningSessionSealApplyPath, buildSigningSessionSealRemovePath, parseSigningSessionSealApplyBody, parseSigningSessionSealRemoveBody, resolveSigningSessionSealBasePath, signingSessionSealAuthorizeStatusCode, signingSessionSealStatusCode } from "./shared.js";
 //#region src/threshold/session/signingSessionSeal/transport/express.ts
 function errMessage(error) {
@@ -10,94 +11,23 @@ function registerSigningSessionSealRoutes(router, ctx) {
 	const basePath = resolveSigningSessionSealBasePath(options.basePath);
 	const applyPath = buildSigningSessionSealApplyPath(basePath);
 	const removePath = buildSigningSessionSealRemovePath(basePath);
-	router.post(applyPath, async (req, res) => {
+	const handleSealRoute = (route, operation) => async (req, res) => {
 		const startedAtMs = Date.now();
 		try {
 			ctx.logger.info("[threshold-signing-session-seal] request", {
-				route: applyPath,
-				operation: "apply-server-seal"
+				route,
+				operation
 			});
-			const parsed = parseSigningSessionSealApplyBody(req.body || {});
+			const parsed = operation === "apply-server-seal" ? parseSigningSessionSealApplyBody(req.body || {}) : parseSigningSessionSealRemoveBody(req.body || {});
 			if (!parsed.ok) {
 				ctx.logger.warn("[threshold-signing-session-seal] invalid_body", {
-					route: applyPath,
-					operation: "apply-server-seal",
+					route,
+					operation,
 					code: parsed.code,
 					message: parsed.message,
 					durationMs: Math.max(0, Date.now() - startedAtMs)
 				});
-				res.status(400).json({
-					ok: false,
-					code: parsed.code,
-					message: parsed.message
-				});
-				return;
-			}
-			const authorized = await authorizeSigningSessionSealRequest({
-				options,
-				headers: req.headers || {},
-				thresholdSessionId: parsed.value.thresholdSessionId
-			});
-			if (!authorized.ok) {
-				ctx.logger.warn("[threshold-signing-session-seal] unauthorized", {
-					route: applyPath,
-					operation: "apply-server-seal",
-					code: authorized.code || "unauthorized",
-					message: authorized.message || "Unauthorized",
-					durationMs: Math.max(0, Date.now() - startedAtMs)
-				});
-				res.status(signingSessionSealAuthorizeStatusCode(authorized)).json({
-					ok: false,
-					code: authorized.code || "unauthorized",
-					message: authorized.message || "Unauthorized"
-				});
-				return;
-			}
-			const result = await options.service.applyServerSeal(parsed.value, authorized.auth);
-			const status = signingSessionSealStatusCode(result);
-			res.status(status).json(result);
-			ctx.logger.info("[threshold-signing-session-seal] response", {
-				route: applyPath,
-				status,
-				ok: result.ok,
-				durationMs: Math.max(0, Date.now() - startedAtMs),
-				userId: authorized.auth.userId
-			});
-		} catch (error) {
-			const message = errMessage(error);
-			ctx.logger.error("[threshold-signing-session-seal] error", {
-				route: applyPath,
-				message,
-				durationMs: Math.max(0, Date.now() - startedAtMs)
-			});
-			res.status(500).json({
-				ok: false,
-				code: "internal",
-				message
-			});
-		}
-	});
-	router.post(removePath, async (req, res) => {
-		const startedAtMs = Date.now();
-		try {
-			ctx.logger.info("[threshold-signing-session-seal] request", {
-				route: removePath,
-				operation: "remove-server-seal"
-			});
-			const parsed = parseSigningSessionSealRemoveBody(req.body || {});
-			if (!parsed.ok) {
-				ctx.logger.warn("[threshold-signing-session-seal] invalid_body", {
-					route: removePath,
-					operation: "remove-server-seal",
-					code: parsed.code,
-					message: parsed.message,
-					durationMs: Math.max(0, Date.now() - startedAtMs)
-				});
-				res.status(400).json({
-					ok: false,
-					code: parsed.code,
-					message: parsed.message
-				});
+				res.status(400).json(failure(parsed.code, parsed.message));
 				return;
 			}
 			const authorized = await authorizeSigningSessionSealRequest({
@@ -107,24 +37,20 @@ function registerSigningSessionSealRoutes(router, ctx) {
 			});
 			if (!authorized.ok) {
 				ctx.logger.warn("[threshold-signing-session-seal] unauthorized", {
-					route: removePath,
-					operation: "remove-server-seal",
+					route,
+					operation,
 					code: authorized.code || "unauthorized",
 					message: authorized.message || "Unauthorized",
 					durationMs: Math.max(0, Date.now() - startedAtMs)
 				});
-				res.status(signingSessionSealAuthorizeStatusCode(authorized)).json({
-					ok: false,
-					code: authorized.code || "unauthorized",
-					message: authorized.message || "Unauthorized"
-				});
+				res.status(signingSessionSealAuthorizeStatusCode(authorized)).json(failure(authorized.code || "unauthorized", authorized.message || "Unauthorized"));
 				return;
 			}
-			const result = await options.service.removeServerSeal(parsed.value, authorized.auth);
+			const result = operation === "apply-server-seal" ? await options.service.applyServerSeal(parsed.value, authorized.auth) : await options.service.removeServerSeal(parsed.value, authorized.auth);
 			const status = signingSessionSealStatusCode(result);
 			res.status(status).json(result);
 			ctx.logger.info("[threshold-signing-session-seal] response", {
-				route: removePath,
+				route,
 				status,
 				ok: result.ok,
 				durationMs: Math.max(0, Date.now() - startedAtMs),
@@ -133,17 +59,15 @@ function registerSigningSessionSealRoutes(router, ctx) {
 		} catch (error) {
 			const message = errMessage(error);
 			ctx.logger.error("[threshold-signing-session-seal] error", {
-				route: removePath,
+				route,
 				message,
 				durationMs: Math.max(0, Date.now() - startedAtMs)
 			});
-			res.status(500).json({
-				ok: false,
-				code: "internal",
-				message
-			});
+			res.status(500).json(failure("internal", message));
 		}
-	});
+	};
+	router.post(applyPath, handleSealRoute(applyPath, "apply-server-seal"));
+	router.post(removePath, handleSealRoute(removePath, "remove-server-seal"));
 }
 //#endregion
 export { registerSigningSessionSealRoutes };

package/dist/esm/threshold/session/signingSessionSeal/transport/fetch.js

@@ -1,4 +1,6 @@
+import { failure } from "../../../../shared-ts/src/utils/failure.js";
 import { authorizeSigningSessionSealRequest, buildSigningSessionSealApplyPath, buildSigningSessionSealRemovePath, parseSigningSessionSealApplyBody, parseSigningSessionSealRemoveBody, resolveSigningSessionSealBasePath, signingSessionSealAuthorizeStatusCode, signingSessionSealStatusCode } from "./shared.js";
+import { headersToRecord, readJson } from "../../../../router/framework/http.js";
 //#region src/threshold/session/signingSessionSeal/transport/fetch.ts
 function json(body, status = 200) {
 	return new Response(JSON.stringify(body), {
@@ -6,20 +8,6 @@ function json(body, status = 200) {
 		headers: { "Content-Type": "application/json; charset=utf-8" }
 	});
 }
-async function readJsonSafe(request) {
-	try {
-		return await request.json();
-	} catch {
-		return null;
-	}
-}
-function headersToRecord(headers) {
-	const out = {};
-	headers.forEach((value, key) => {
-		out[key] = value;
-	});
-	return out;
-}
 function errMessage(error) {
 	return error instanceof Error ? error.message : String(error || "Internal error");
 }
@@ -39,7 +27,7 @@ async function handleSigningSessionSealRoutes(ctx) {
 			route: isApply ? applyPath : removePath,
 			operation
 		});
-		const body = await readJsonSafe(ctx.request);
+		const body = await readJson(ctx.request);
 		const parsed = isApply ? parseSigningSessionSealApplyBody(body) : parseSigningSessionSealRemoveBody(body);
 		if (!parsed.ok) {
 			ctx.logger.warn("[threshold-signing-session-seal] invalid_body", {
@@ -49,11 +37,7 @@ async function handleSigningSessionSealRoutes(ctx) {
 				message: parsed.message,
 				durationMs: Math.max(0, Date.now() - startedAtMs)
 			});
-			return json({
-				ok: false,
-				code: parsed.code,
-				message: parsed.message
-			}, 400);
+			return json(failure(parsed.code, parsed.message), 400);
 		}
 		const authorized = await authorizeSigningSessionSealRequest({
 			options,
@@ -69,11 +53,7 @@ async function handleSigningSessionSealRoutes(ctx) {
 				message: authorized.message || "Unauthorized",
 				durationMs: Math.max(0, Date.now() - startedAtMs)
 			});
-			return json({
-				ok: false,
-				code: authorized.code || "unauthorized",
-				message: authorized.message || "Unauthorized"
-			}, signingSessionSealAuthorizeStatusCode(authorized));
+			return json(failure(authorized.code || "unauthorized", authorized.message || "Unauthorized"), signingSessionSealAuthorizeStatusCode(authorized));
 		}
 		const result = isApply ? await options.service.applyServerSeal(parsed.value, authorized.auth) : await options.service.removeServerSeal(parsed.value, authorized.auth);
 		const status = signingSessionSealStatusCode(result);
@@ -93,11 +73,7 @@ async function handleSigningSessionSealRoutes(ctx) {
 			message,
 			durationMs: Math.max(0, Date.now() - startedAtMs)
 		});
-		return json({
-			ok: false,
-			code: "internal",
-			message
-		}, 500);
+		return json(failure("internal", message), 500);
 	}
 }
 //#endregion

package/dist/esm/threshold/session/signingSessionSeal/transport/shared.js

@@ -2,6 +2,7 @@ import { parseThresholdSessionId } from "../../../../shared-ts/src/utils/domainI
 import { ensureLeadingSlash } from "../../../../shared-ts/src/utils/normalize.js";
 import { asRecord } from "../../../../shared-ts/src/utils/validation.js";
 import { WALLET_SESSION_SEAL_BASE_PATH } from "../../../../shared-ts/src/utils/signingSessionSeal.js";
+import { failure } from "../../../../shared-ts/src/utils/failure.js";
 //#region src/threshold/session/signingSessionSeal/transport/shared.ts
 const DEFAULT_BASE_PATH = WALLET_SESSION_SEAL_BASE_PATH;
 function readRequiredString(obj, key) {
@@ -24,24 +25,12 @@ function buildSigningSessionSealRemovePath(basePath) {
 }
 function parseSigningSessionSealApplyBody(body) {
 	const obj = asRecord(body);
-	if (!obj) return {
-		ok: false,
-		code: "invalid_body",
-		message: "Request body must be a JSON object"
-	};
+	if (!obj) return failure("invalid_body", "Request body must be a JSON object");
 	const thresholdSessionId = readRequiredString(obj, "thresholdSessionId");
 	const ciphertext = readRequiredString(obj, "ciphertext");
-	if (!thresholdSessionId || !ciphertext) return {
-		ok: false,
-		code: "invalid_body",
-		message: "thresholdSessionId and ciphertext are required"
-	};
+	if (!thresholdSessionId || !ciphertext) return failure("invalid_body", "thresholdSessionId and ciphertext are required");
 	const parsedThresholdSessionId = parseThresholdSessionId(thresholdSessionId);
-	if (!parsedThresholdSessionId.ok) return {
-		ok: false,
-		code: "invalid_body",
-		message: "thresholdSessionId is invalid"
-	};
+	if (!parsedThresholdSessionId.ok) return failure("invalid_body", "thresholdSessionId is invalid");
 	return {
 		ok: true,
 		value: {
@@ -64,11 +53,7 @@ async function authorizeSigningSessionSealRequest(args) {
 			thresholdSessionId: args.thresholdSessionId
 		});
 	} catch (error) {
-		return {
-			ok: false,
-			code: "internal",
-			message: error instanceof Error ? error.message : String(error || "Authorization failed")
-		};
+		return failure("internal", error instanceof Error ? error.message : String(error || "Authorization failed"));
 	}
 	return {
 		ok: false,