@seams/wallet-server 0.7.3 → 0.8.0

package/dist/esm/shared-ts/src/wallet-recovery/backupAcknowledgement.js

@@ -1,33 +1,15 @@
 //#region ../shared-ts/src/wallet-recovery/backupAcknowledgement.ts
 function parseWalletRecoveryBackupAcknowledgementV1(raw, options) {
-	if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return {
-		ok: false,
-		reason: "backup acknowledgement must be an object"
-	};
+	if (typeof raw !== "object" || raw === null || Array.isArray(raw)) return { ok: false };
 	const record = raw;
-	if (record.kind !== "wallet_recovery_backup_acknowledgement_v1") return {
-		ok: false,
-		reason: "backup acknowledgement kind is invalid"
-	};
+	if (record.kind !== "wallet_recovery_backup_acknowledgement_v1") return { ok: false };
 	const walletId = String(record.walletId || "").trim();
-	if (!walletId) return {
-		ok: false,
-		reason: "backup acknowledgement must name its wallet"
-	};
-	if (walletId !== String(options.expectedWalletId).trim()) return {
-		ok: false,
-		reason: "backup acknowledgement is outside the requested wallet"
-	};
+	if (!walletId) return { ok: false };
+	if (walletId !== String(options.expectedWalletId).trim()) return { ok: false };
 	const issuedAtMs = timestamp(record.issuedAtMs);
 	const acknowledgedAtMs = timestamp(record.acknowledgedAtMs);
-	if (issuedAtMs === null || acknowledgedAtMs === null) return {
-		ok: false,
-		reason: "backup acknowledgement needs valid timestamps"
-	};
-	if (acknowledgedAtMs < issuedAtMs) return {
-		ok: false,
-		reason: "backup acknowledgement predates the issuance it names"
-	};
+	if (issuedAtMs === null || acknowledgedAtMs === null) return { ok: false };
+	if (acknowledgedAtMs < issuedAtMs) return { ok: false };
 	return {
 		ok: true,
 		record: {

package/dist/esm/shared-ts/src/wallet-recovery/recoveryCodeLocator.js

@@ -1,7 +1,6 @@
 import { base64UrlEncode } from "../utils/base64.js";
 import { sha256Bytes } from "../utils/digests.js";
 import { parseDigestB64u } from "../utils/canonicalPrimitives.js";
-import "../utils/encoders.js";
 import "../utils/emailOtpRecoveryKey.js";
 //#region ../shared-ts/src/wallet-recovery/recoveryCodeLocator.ts
 const RECOVERY_CODE_LOCATOR_CONTEXT_V1 = "seams/wallet-recovery/code-locator/v1";

package/dist/esm/shared-ts/src/wallet-recovery/recoveryKeyId.js

@@ -1,7 +1,5 @@
 import { base64UrlEncode } from "../utils/base64.js";
-import "../utils/encoders.js";
 import { encodeSigningSessionHkdfTuple } from "../utils/signingSessionSeal.js";
-import "../utils/emailOtpRecoveryKey.js";
 //#region ../shared-ts/src/wallet-recovery/recoveryKeyId.ts
 const WALLET_RECOVERY_KEY_ID_PREFIX_V1 = "wallet-rkid-v1-";
 const WALLET_RECOVERY_KEY_ID_CONTEXT_V1 = "seams/wallet-recovery/recovery-key-id/v1";
@@ -13,11 +11,12 @@ function parseDerivedWalletRecoveryKeyId(value, label = "recoveryKeyId") {
 	return value;
 }
 /**
-* The same derivation from decoded bytes.
+* Derives one code's id within a wallet's recovery set, from the decoded code
+* bytes the ceremony already holds.
 *
-* Separate entry point because the ceremony seals wraps from bytes it already
-* holds, while a user typing a code arrives as a string. Both must reach one
-* id, so both go through this.
+* Bound to the wallet and the set version, so the same code typed against a
+* different wallet produces a different id and finds no wrap. Length-delimited
+* fields under a fixed context, so no two inputs encode alike.
 */
 async function deriveWalletRecoveryKeyIdFromBytes(args) {
 	const walletId = String(args.walletId || "").trim();

package/dist/esm/storage/d1Sql.js

@@ -73,12 +73,6 @@ function isD1DatabaseLike(value) {
 	const probe = d1DatabaseProbe(value);
 	return Boolean(probe && typeof probe.prepare === "function" && typeof probe.batch === "function" && typeof probe.exec === "function");
 }
-function resolveD1DatabaseFromConfig(config) {
-	if (isD1DatabaseLike(config.database)) return config.database;
-	if (isD1DatabaseLike(config.metadataDatabase)) return config.metadataDatabase;
-	if (isD1DatabaseLike(config.SIGNER_DB)) return config.SIGNER_DB;
-	return null;
-}
 /**
 * Aborts the D1 batch it is in when the statement just before it changed no
 * row: it collides with the guard table's immutable singleton, and the
@@ -89,6 +83,6 @@ const D1_BATCH_CAS_GUARD_SQL = `INSERT INTO router_ab_yao_versioned_json_cas_gua
 SELECT 1
  WHERE changes() = 0`;
 //#endregion
-export { D1_BATCH_CAS_GUARD_SQL, d1ChangedRows, d1Integer, d1Number, formatD1ExecStatement, isD1DatabaseLike, parseD1JsonArrayColumn, parseD1JsonColumn, parseD1JsonObjectColumn, queryD1All, queryD1One, resolveD1DatabaseFromConfig };
+export { D1_BATCH_CAS_GUARD_SQL, d1ChangedRows, d1Integer, d1Number, formatD1ExecStatement, isD1DatabaseLike, parseD1JsonArrayColumn, parseD1JsonColumn, parseD1JsonObjectColumn, queryD1All, queryD1One };
 
 //# sourceMappingURL=d1Sql.js.map

package/dist/esm/threshold/session/signingSessionSeal/crypto/cipher.js

@@ -1,5 +1,4 @@
 import { normalizeOptionalTrimmedString } from "../../../../shared-ts/src/utils/normalize.js";
-import "../../../../shared-ts/src/utils/validation.js";
 import { SIGNING_SESSION_SEAL_ALG, SIGNING_SESSION_SEAL_GROUP_ID, encodeSigningSessionHkdfTuple } from "../../../../shared-ts/src/utils/signingSessionSeal.js";
 import { failure } from "../../../../shared-ts/src/utils/failure.js";
 import { parseSigningSessionSealKeyVersion } from "../../../../shared-ts/src/threshold/keyMaterialBrands.js";

package/dist/esm/threshold/session/signingSessionSeal/guards/backends.js

@@ -1,7 +1,6 @@
 import { normalizeOptionalTrimmedString } from "../../../../shared-ts/src/utils/normalize.js";
-import "../../../../shared-ts/src/utils/validation.js";
-import { RedisTcpClient, UpstashRedisRestClient } from "../../../../core/ThresholdService/kv.js";
 import { createInMemorySigningSessionSealRateLimiter } from "./index.js";
+import { RedisTcpClient, UpstashRedisRestClient } from "../../../../core/ThresholdService/kv.js";
 //#region src/threshold/session/signingSessionSeal/guards/backends.ts
 const WINDOW_COUNTER_LUA = `
 local key = KEYS[1]

package/dist/esm/threshold/session/signingSessionSeal/idempotencyBackends.js

@@ -1,5 +1,4 @@
 import { normalizeOptionalTrimmedString } from "../../../shared-ts/src/utils/normalize.js";
-import "../../../shared-ts/src/utils/validation.js";
 import { RedisTcpClient, UpstashRedisRestClient, redisDel, redisGetJson, redisSetJson } from "../../../core/ThresholdService/kv.js";
 import { createInMemorySigningSessionSealIdempotencyStore } from "./idempotency.js";
 import { parseCurrentSigningSessionSealIdempotencyResultRecord, parseCurrentSigningSessionSealIdempotencyStoredEntry } from "./idempotencyRecords.js";

package/dist/esm/threshold/session/signingSessionSeal/idempotencyRecords.js

@@ -1,5 +1,4 @@
 import { normalizeOptionalTrimmedString } from "../../../shared-ts/src/utils/normalize.js";
-import "../../../shared-ts/src/utils/validation.js";
 import { failure } from "../../../shared-ts/src/utils/failure.js";
 //#region src/threshold/session/signingSessionSeal/idempotencyRecords.ts
 function toPositiveInt(value) {

package/dist/esm/threshold/session/signingSessionSeal/options.js

@@ -1,7 +1,6 @@
 import { base64UrlDecode } from "../../../shared-ts/src/utils/base64.js";
 import "../../../shared-ts/src/utils/encoders.js";
 import { normalizeOptionalTrimmedString } from "../../../shared-ts/src/utils/normalize.js";
-import "../../../shared-ts/src/utils/validation.js";
 import { SIGNING_SESSION_SEAL_ALG, SIGNING_SESSION_SEAL_GROUP_ID } from "../../../shared-ts/src/utils/signingSessionSeal.js";
 import { parseSigningSessionSealKeyVersion } from "../../../shared-ts/src/threshold/keyMaterialBrands.js";
 import { createSigningSessionSealShamir3PassCipherAdapter } from "./crypto/cipher.js";