@seams/wallet-server 0.7.3 → 0.8.0

package/dist/esm/core/ThresholdService/stores/CloudflareDurableObjectStore.js

@@ -1,397 +0,0 @@
-import { normalizeOptionalTrimmedString } from "../../../shared-ts/src/utils/normalize.js";
-import { isPlainObject } from "../../../shared-ts/src/utils/validation.js";
-import "../../defaultConfigsServer.js";
-import { canonicalThresholdEd25519RelayerKeyId, parseEcdsaWalletSessionRecord, parseEd25519WalletSessionRecord, parseThresholdEcdsaMpcSessionRecord, parseThresholdEd25519CoordinatorSigningSessionRecord, parseThresholdEd25519KeyRecord, parseThresholdEd25519MpcSessionRecord, parseThresholdEd25519SigningSessionRecord, toThresholdEcdsaPrefixFromBase, toThresholdEcdsaSessionPrefix, toThresholdEcdsaWalletSessionPrefix, toThresholdEd25519KeyPrefix, toThresholdEd25519PrefixFromBase, toThresholdEd25519SessionPrefix, toThresholdEd25519WalletSessionPrefix } from "../validation.js";
-import { durableObjectName, durableObjectStub, requestDurableObjectJson, resolveDurableObjectNamespace } from "../../storeBackends.js";
-//#region src/core/ThresholdService/stores/CloudflareDurableObjectStore.ts
-async function callDo(stub, req) {
-	const json = await requestDurableObjectJson(stub, req, "Threshold");
-	if (!isPlainObject(json)) throw new Error("Threshold DO store returned invalid JSON shape");
-	if (json.ok === true) return json;
-	const code = normalizeOptionalTrimmedString(json.code);
-	const message = normalizeOptionalTrimmedString(json.message);
-	return {
-		ok: false,
-		code: code || "internal",
-		message: message || "Threshold DO store error"
-	};
-}
-function computeWalletSessionPrefix(config) {
-	const basePrefix = normalizeOptionalTrimmedString(config.THRESHOLD_PREFIX);
-	return toThresholdEd25519WalletSessionPrefix(normalizeOptionalTrimmedString(config.THRESHOLD_ED25519_WALLET_SESSION_PREFIX) || toThresholdEd25519PrefixFromBase(basePrefix, "wallet-session"));
-}
-function computeSessionPrefix(config) {
-	const basePrefix = normalizeOptionalTrimmedString(config.THRESHOLD_PREFIX);
-	return toThresholdEd25519SessionPrefix(normalizeOptionalTrimmedString(config.THRESHOLD_ED25519_SESSION_PREFIX) || toThresholdEd25519PrefixFromBase(basePrefix, "sess"));
-}
-function computeKeyPrefix(config) {
-	const basePrefix = normalizeOptionalTrimmedString(config.THRESHOLD_PREFIX);
-	return toThresholdEd25519KeyPrefix(normalizeOptionalTrimmedString(config.THRESHOLD_ED25519_KEYSTORE_PREFIX) || toThresholdEd25519PrefixFromBase(basePrefix, "key"));
-}
-function computeWalletSessionPrefixEcdsa(config) {
-	const basePrefix = normalizeOptionalTrimmedString(config.THRESHOLD_PREFIX);
-	return toThresholdEcdsaWalletSessionPrefix(normalizeOptionalTrimmedString(config.THRESHOLD_ECDSA_WALLET_SESSION_PREFIX) || toThresholdEcdsaPrefixFromBase(basePrefix, "wallet-session"));
-}
-function computeSessionPrefixEcdsa(config) {
-	const basePrefix = normalizeOptionalTrimmedString(config.THRESHOLD_PREFIX);
-	return toThresholdEcdsaSessionPrefix(normalizeOptionalTrimmedString(config.THRESHOLD_ECDSA_SESSION_PREFIX) || toThresholdEcdsaPrefixFromBase(basePrefix, "sess"));
-}
-var CloudflareDurableObjectWalletSessionStore = class {
-	constructor(input) {
-		this.stub = durableObjectStub(input.namespace, input.objectName);
-		this.keyPrefix = input.keyPrefix;
-		this.parseRecord = input.parseRecord;
-	}
-	key(id) {
-		return `${this.keyPrefix}${id}`;
-	}
-	replayGuardKey(scopeId, replayKey) {
-		return `${this.keyPrefix}replay:${normalizeOptionalTrimmedString(scopeId) || "missing"}:${normalizeOptionalTrimmedString(replayKey) || "missing"}`;
-	}
-	async putSession(id, record, opts) {
-		const ttlMs = Math.max(0, Number(opts.ttlMs) || 0);
-		const expiresAtMs = Date.now() + ttlMs;
-		const entry = {
-			record,
-			remainingUses: Math.max(0, Number(opts.remainingUses) || 0),
-			expiresAtMs
-		};
-		const resp = await callDo(this.stub, {
-			op: "set",
-			key: this.key(id),
-			value: entry,
-			ttlMs
-		});
-		if (!resp.ok) throw new Error(resp.message);
-	}
-	async getSession(id) {
-		const resp = await callDo(this.stub, {
-			op: "get",
-			key: this.key(id)
-		});
-		if (!resp.ok) return null;
-		const raw = resp.value;
-		const entry = isPlainObject(raw) ? raw : null;
-		const record = entry ? this.parseRecord(entry.record) : null;
-		const expiresAtMs = entry ? entry.expiresAtMs : null;
-		if (!record || typeof expiresAtMs !== "number" || !Number.isFinite(expiresAtMs)) return null;
-		if (expiresAtMs <= Date.now()) return null;
-		return record;
-	}
-	async getSessionStatus(id) {
-		const resp = await callDo(this.stub, {
-			op: "authGetSessionStatus",
-			key: this.key(id)
-		});
-		if (!resp.ok) switch (resp.code) {
-			case "wallet_session_missing":
-			case "wallet_session_expired": return {
-				ok: false,
-				code: resp.code
-			};
-			default: return {
-				ok: false,
-				code: "wallet_session_unavailable"
-			};
-		}
-		if (!resp.value) return {
-			ok: false,
-			code: "wallet_session_unavailable"
-		};
-		const record = this.parseRecord(resp.value.record);
-		if (!record) return {
-			ok: false,
-			code: "wallet_session_unavailable"
-		};
-		const expiresAtMs = Number(resp.value.expiresAtMs);
-		const remainingUses = Math.max(0, Math.floor(Number(resp.value.remainingUses) || 0));
-		if (!Number.isFinite(expiresAtMs)) return {
-			ok: false,
-			code: "wallet_session_unavailable"
-		};
-		if (expiresAtMs <= Date.now()) return {
-			ok: false,
-			code: "wallet_session_expired"
-		};
-		return {
-			ok: true,
-			status: {
-				record,
-				expiresAtMs,
-				remainingUses
-			}
-		};
-	}
-	async consumeUseCount(id) {
-		const resp = await callDo(this.stub, {
-			op: "authConsumeUseCount",
-			key: this.key(id)
-		});
-		if (!resp.ok) return {
-			ok: false,
-			code: resp.code,
-			message: resp.message
-		};
-		return {
-			ok: true,
-			remainingUses: resp.value.remainingUses
-		};
-	}
-	async consumeUseCountOnce(id, idempotencyKey) {
-		const resp = await callDo(this.stub, {
-			op: "authConsumeUseCountOnce",
-			key: this.key(id),
-			idempotencyKey
-		});
-		if (!resp.ok) return {
-			ok: false,
-			code: resp.code,
-			message: resp.message
-		};
-		return {
-			ok: true,
-			remainingUses: resp.value.remainingUses
-		};
-	}
-	async hasConsumedUseCountOnce(id, idempotencyKey) {
-		const resp = await callDo(this.stub, {
-			op: "authHasConsumedUseCountOnce",
-			key: this.key(id),
-			idempotencyKey
-		});
-		if (!resp.ok) return {
-			ok: false,
-			code: resp.code,
-			message: resp.message
-		};
-		return {
-			ok: true,
-			consumed: resp.value.consumed
-		};
-	}
-	async reserveReplayGuard(scopeId, replayKey, expiresAtMs) {
-		const resp = await callDo(this.stub, {
-			op: "authReserveReplayGuard",
-			key: this.replayGuardKey(scopeId, replayKey),
-			expiresAtMs
-		});
-		if (!resp.ok) return {
-			ok: false,
-			code: resp.code,
-			message: resp.message
-		};
-		return { ok: true };
-	}
-};
-var CloudflareDurableObjectThresholdEd25519SessionStore = class {
-	constructor(input) {
-		this.stub = durableObjectStub(input.namespace, input.objectName);
-		this.keyPrefix = input.keyPrefix;
-		this.coordinatorPrefix = `${this.keyPrefix}coord:`;
-		this.parseMpcSessionRecord = input.parseMpcSessionRecord || parseThresholdEd25519MpcSessionRecord;
-	}
-	key(id) {
-		return `${this.keyPrefix}${id}`;
-	}
-	coordKey(id) {
-		return `${this.coordinatorPrefix}${id}`;
-	}
-	async putMpcSession(id, record, ttlMs) {
-		const resp = await callDo(this.stub, {
-			op: "set",
-			key: this.key(id),
-			value: record,
-			ttlMs
-		});
-		if (!resp.ok) throw new Error(resp.message);
-	}
-	async readMpcSession(id) {
-		const resp = await callDo(this.stub, {
-			op: "readVersioned",
-			key: this.key(id)
-		});
-		if (!resp.ok || !resp.value) return null;
-		const record = this.parseMpcSessionRecord(resp.value.value);
-		const version = normalizeOptionalTrimmedString(resp.value.version);
-		return record && version ? {
-			record,
-			version
-		} : null;
-	}
-	async claimMpcSession(id, version) {
-		const expectedVersion = normalizeOptionalTrimmedString(version);
-		if (!expectedVersion) return {
-			ok: false,
-			code: "version_mismatch"
-		};
-		const resp = await callDo(this.stub, {
-			op: "claimVersioned",
-			key: this.key(id),
-			expectedVersion
-		});
-		if (!resp.ok) return {
-			ok: false,
-			code: "not_found"
-		};
-		const status = normalizeOptionalTrimmedString(resp.value?.status);
-		if (status === "not_found") return {
-			ok: false,
-			code: "not_found"
-		};
-		if (status === "expired") return {
-			ok: false,
-			code: "expired"
-		};
-		if (status === "version_mismatch") return {
-			ok: false,
-			code: "version_mismatch"
-		};
-		const record = this.parseMpcSessionRecord(resp.value?.value);
-		return record ? {
-			ok: true,
-			record
-		} : {
-			ok: false,
-			code: "invalid_record"
-		};
-	}
-	async takeMpcSession(id) {
-		const resp = await callDo(this.stub, {
-			op: "getdel",
-			key: this.key(id)
-		});
-		if (!resp.ok) return null;
-		return this.parseMpcSessionRecord(resp.value);
-	}
-	async putSigningSession(id, record, ttlMs) {
-		const resp = await callDo(this.stub, {
-			op: "set",
-			key: this.key(id),
-			value: record,
-			ttlMs
-		});
-		if (!resp.ok) throw new Error(resp.message);
-	}
-	async takeSigningSession(id) {
-		const resp = await callDo(this.stub, {
-			op: "getdel",
-			key: this.key(id)
-		});
-		if (!resp.ok) return null;
-		return parseThresholdEd25519SigningSessionRecord(resp.value);
-	}
-	async putCoordinatorSigningSession(id, record, ttlMs) {
-		const resp = await callDo(this.stub, {
-			op: "set",
-			key: this.coordKey(id),
-			value: record,
-			ttlMs
-		});
-		if (!resp.ok) throw new Error(resp.message);
-	}
-	async takeCoordinatorSigningSession(id) {
-		const resp = await callDo(this.stub, {
-			op: "getdel",
-			key: this.coordKey(id)
-		});
-		if (!resp.ok) return null;
-		return parseThresholdEd25519CoordinatorSigningSessionRecord(resp.value);
-	}
-};
-var CloudflareDurableObjectThresholdEd25519KeyStore = class {
-	constructor(input) {
-		this.stub = durableObjectStub(input.namespace, input.objectName);
-		this.keyPrefix = input.keyPrefix;
-	}
-	key(relayerKeyId) {
-		return `${this.keyPrefix}${relayerKeyId}`;
-	}
-	async get(relayerKeyId) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) return null;
-		const resp = await callDo(this.stub, {
-			op: "get",
-			key: this.key(id)
-		});
-		if (!resp.ok) return null;
-		return parseThresholdEd25519KeyRecord(resp.value);
-	}
-	async put(relayerKeyId, record) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) throw new Error("Missing relayerKeyId");
-		const resp = await callDo(this.stub, {
-			op: "set",
-			key: this.key(id),
-			value: record
-		});
-		if (!resp.ok) throw new Error(resp.message);
-	}
-	async del(relayerKeyId) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) return;
-		const resp = await callDo(this.stub, {
-			op: "del",
-			key: this.key(id)
-		});
-		if (!resp.ok) throw new Error(resp.message);
-	}
-};
-function createCloudflareDurableObjectThresholdEd25519Stores(input) {
-	const config = isPlainObject(input.config) ? input.config : {};
-	if (normalizeOptionalTrimmedString(config.kind) !== "cloudflare-do") return null;
-	const namespace = resolveDurableObjectNamespace(config);
-	if (!namespace) throw new Error("cloudflare-do threshold store selected but no Durable Object namespace was provided (expected config.namespace)");
-	const objectName = durableObjectName(config);
-	const walletSessionPrefix = computeWalletSessionPrefix(config);
-	const sessionPrefix = computeSessionPrefix(config);
-	const keyPrefix = computeKeyPrefix(config);
-	input.logger.info("[threshold-ed25519] Using Cloudflare Durable Object store for threshold session persistence");
-	return {
-		keyStore: new CloudflareDurableObjectThresholdEd25519KeyStore({
-			namespace,
-			objectName,
-			keyPrefix
-		}),
-		sessionStore: new CloudflareDurableObjectThresholdEd25519SessionStore({
-			namespace,
-			objectName,
-			keyPrefix: sessionPrefix
-		}),
-		walletSessionStore: new CloudflareDurableObjectWalletSessionStore({
-			namespace,
-			objectName,
-			keyPrefix: walletSessionPrefix,
-			parseRecord: parseEd25519WalletSessionRecord
-		})
-	};
-}
-function createCloudflareDurableObjectThresholdEcdsaStores(input) {
-	const config = isPlainObject(input.config) ? input.config : {};
-	if (normalizeOptionalTrimmedString(config.kind) !== "cloudflare-do") return null;
-	const namespace = resolveDurableObjectNamespace(config);
-	if (!namespace) throw new Error("cloudflare-do threshold store selected but no Durable Object namespace was provided (expected config.namespace)");
-	const configuredObjectName = normalizeOptionalTrimmedString(config.objectName) || normalizeOptionalTrimmedString(config.name);
-	const ecdsaObjectName = configuredObjectName || "threshold-ecdsa-store";
-	const walletSessionObjectName = configuredObjectName || "threshold-store";
-	const walletSessionPrefix = computeWalletSessionPrefixEcdsa(config);
-	const sessionPrefix = computeSessionPrefixEcdsa(config);
-	input.logger.info("[threshold-ecdsa] Using Cloudflare Durable Object store for threshold session persistence");
-	return {
-		sessionStore: new CloudflareDurableObjectThresholdEd25519SessionStore({
-			namespace,
-			objectName: ecdsaObjectName,
-			keyPrefix: sessionPrefix,
-			parseMpcSessionRecord: parseThresholdEcdsaMpcSessionRecord
-		}),
-		walletSessionStore: new CloudflareDurableObjectWalletSessionStore({
-			namespace,
-			objectName: walletSessionObjectName,
-			keyPrefix: walletSessionPrefix,
-			parseRecord: parseEcdsaWalletSessionRecord
-		})
-	};
-}
-//#endregion
-export { createCloudflareDurableObjectThresholdEcdsaStores, createCloudflareDurableObjectThresholdEd25519Stores };
-
-//# sourceMappingURL=CloudflareDurableObjectStore.js.map

package/dist/esm/core/ThresholdService/stores/KeyStore.js

@@ -1,140 +0,0 @@
-import { normalizeOptionalTrimmedString } from "../../../shared-ts/src/utils/normalize.js";
-import { isPlainObject } from "../../../shared-ts/src/utils/validation.js";
-import { canonicalThresholdEd25519RelayerKeyId, parseThresholdEd25519KeyRecord, toThresholdEd25519KeyPrefix, toThresholdEd25519PrefixFromBase } from "../validation.js";
-import { RedisTcpClient, UpstashRedisRestClient, redisDel, redisGetJson, redisSetJson } from "../kv.js";
-import { createCloudflareDurableObjectThresholdEd25519Stores } from "./CloudflareDurableObjectStore.js";
-import { readNonDurableObjectThresholdStoreKind } from "./StoreConfig.js";
-//#region src/core/ThresholdService/stores/KeyStore.ts
-var InMemoryThresholdEd25519KeyStore = class {
-	constructor() {
-		this.map = /* @__PURE__ */ new Map();
-	}
-	async get(relayerKeyId) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) return null;
-		return this.map.get(id) || null;
-	}
-	async put(relayerKeyId, record) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) throw new Error("Missing relayerKeyId");
-		this.map.set(id, record);
-	}
-	async del(relayerKeyId) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) return;
-		this.map.delete(id);
-	}
-};
-var UpstashRedisRestThresholdEd25519KeyStore = class {
-	constructor(input) {
-		const url = normalizeOptionalTrimmedString(input.url);
-		const token = normalizeOptionalTrimmedString(input.token);
-		if (!url) throw new Error("Upstash key store missing url");
-		if (!token) throw new Error("Upstash key store missing token");
-		this.client = new UpstashRedisRestClient({
-			url,
-			token
-		});
-		this.keyPrefix = toThresholdEd25519KeyPrefix(input.keyPrefix);
-	}
-	key(relayerKeyId) {
-		return `${this.keyPrefix}${relayerKeyId}`;
-	}
-	async get(relayerKeyId) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) return null;
-		return parseThresholdEd25519KeyRecord(await this.client.getJson(this.key(id)));
-	}
-	async put(relayerKeyId, record) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) throw new Error("Missing relayerKeyId");
-		await this.client.setJson(this.key(id), record);
-	}
-	async del(relayerKeyId) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) return;
-		await this.client.del(this.key(id));
-	}
-};
-var RedisTcpThresholdEd25519KeyStore = class {
-	constructor(input) {
-		const url = normalizeOptionalTrimmedString(input.redisUrl);
-		if (!url) throw new Error("redis-tcp key store missing redisUrl");
-		this.client = new RedisTcpClient(url);
-		this.keyPrefix = toThresholdEd25519KeyPrefix(input.keyPrefix);
-	}
-	key(relayerKeyId) {
-		return `${this.keyPrefix}${relayerKeyId}`;
-	}
-	async get(relayerKeyId) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) return null;
-		return parseThresholdEd25519KeyRecord(await redisGetJson(this.client, this.key(id)));
-	}
-	async put(relayerKeyId, record) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) throw new Error("Missing relayerKeyId");
-		await redisSetJson(this.client, this.key(id), record);
-	}
-	async del(relayerKeyId) {
-		const id = canonicalThresholdEd25519RelayerKeyId(relayerKeyId);
-		if (!id) return;
-		await redisDel(this.client, this.key(id));
-	}
-};
-function createThresholdEd25519KeyStore(input) {
-	const doStores = createCloudflareDurableObjectThresholdEd25519Stores({
-		config: input.config,
-		logger: input.logger
-	});
-	if (doStores) return doStores.keyStore;
-	const config = isPlainObject(input.config) ? input.config : {};
-	const basePrefix = normalizeOptionalTrimmedString(config.THRESHOLD_PREFIX);
-	const envPrefix = normalizeOptionalTrimmedString(config.THRESHOLD_ED25519_KEYSTORE_PREFIX) || toThresholdEd25519PrefixFromBase(basePrefix, "key") || "";
-	const kind = readNonDurableObjectThresholdStoreKind(config, "threshold-ed25519");
-	if (kind === "in-memory") return new InMemoryThresholdEd25519KeyStore();
-	if (kind === "upstash-redis-rest") return new UpstashRedisRestThresholdEd25519KeyStore({
-		url: normalizeOptionalTrimmedString(config.url) || normalizeOptionalTrimmedString(config.UPSTASH_REDIS_REST_URL),
-		token: normalizeOptionalTrimmedString(config.token) || normalizeOptionalTrimmedString(config.UPSTASH_REDIS_REST_TOKEN),
-		keyPrefix: normalizeOptionalTrimmedString(config.keyPrefix) || envPrefix
-	});
-	if (kind === "redis-tcp") {
-		if (!input.isNode) {
-			input.logger.warn("[threshold-ed25519] redis-tcp key store is not supported in this runtime; falling back to in-memory");
-			return new InMemoryThresholdEd25519KeyStore();
-		}
-		return new RedisTcpThresholdEd25519KeyStore({
-			redisUrl: normalizeOptionalTrimmedString(config.redisUrl) || normalizeOptionalTrimmedString(config.REDIS_URL),
-			keyPrefix: normalizeOptionalTrimmedString(config.keyPrefix) || envPrefix
-		});
-	}
-	const upstashUrl = normalizeOptionalTrimmedString(config.UPSTASH_REDIS_REST_URL);
-	const upstashToken = normalizeOptionalTrimmedString(config.UPSTASH_REDIS_REST_TOKEN);
-	if (upstashUrl || upstashToken) {
-		if (!upstashUrl || !upstashToken) throw new Error("Upstash key store enabled but UPSTASH_REDIS_REST_URL / UPSTASH_REDIS_REST_TOKEN are not both set");
-		input.logger.info("[threshold-ed25519] Using Upstash REST key store for relayer signing share persistence");
-		return new UpstashRedisRestThresholdEd25519KeyStore({
-			url: upstashUrl,
-			token: upstashToken,
-			keyPrefix: envPrefix || void 0
-		});
-	}
-	const redisUrl = normalizeOptionalTrimmedString(config.REDIS_URL);
-	if (redisUrl) {
-		if (!input.isNode) {
-			input.logger.warn("[threshold-ed25519] REDIS_URL is set but TCP Redis is not supported in this runtime; falling back to in-memory");
-			return new InMemoryThresholdEd25519KeyStore();
-		}
-		input.logger.info("[threshold-ed25519] Using redis-tcp key store for relayer signing share persistence");
-		return new RedisTcpThresholdEd25519KeyStore({
-			redisUrl,
-			keyPrefix: envPrefix || void 0
-		});
-	}
-	input.logger.info("[threshold-ed25519] Using in-memory key store for relayer signing share (non-persistent)");
-	return new InMemoryThresholdEd25519KeyStore();
-}
-//#endregion
-export { createThresholdEd25519KeyStore };
-
-//# sourceMappingURL=KeyStore.js.map