@seams/wallet-server 0.8.0 → 0.9.1

package/dist/esm/router/cloudflare/runtime/walletRelocationOps.js

@@ -0,0 +1,183 @@
+import { isPlainObject } from "../../../shared-ts/src/utils/validation.js";
+import { walletObjectIdentity, walletObjectIdentityFromWireScope, walletObjectIdentityHeaders, walletRelocationObjectIdentity } from "./walletObjectAddresses.js";
+import { ROUTER_AB_INTERNAL_SERVICE_AUTH_HEADER_V1 } from "../../../core/ThresholdService/routerAb/internalServiceHttp.js";
+import { forwardPresignSource, presignSourceOperation } from "./walletRelocationPresign.js";
+import { authorizeRuntimeSource, recordRuntimeRouterReceipt } from "./walletRelocationSource.js";
+import { ecdsaRuntimeOperation, forwardEcdsaRelocation } from "./walletRelocationEcdsa.js";
+import { ed25519RuntimeOperation, forwardEd25519Snapshot } from "./walletRelocationEd25519.js";
+import { deriverRuntimeOperation, forwardDeriverRelocation } from "./walletRelocationDeriver.js";
+//#region src/router/cloudflare/runtime/walletRelocationOps.ts
+const ORIGIN = "https://wallet-runtime.internal";
+const BASE_PATH = "/internal/wallet-runtime/v1/relocation";
+const OPERATIONS = {
+	"custody-target": "/router-ab/internal/custody-target",
+	"deriver-a-activate": "/router-ab/internal/deriver-a/wallet/snapshot",
+	"deriver-a-cleanup": "/router-ab/internal/deriver-a/wallet/snapshot",
+	"deriver-b-activate": "/router-ab/internal/deriver-b/wallet/snapshot",
+	"deriver-b-cleanup": "/router-ab/internal/deriver-b/wallet/snapshot",
+	"deriver-a-capture": "/router-ab/internal/deriver-a/wallet/snapshot",
+	"deriver-a-export": "/router-ab/internal/deriver-a/wallet/snapshot",
+	"deriver-a-import": "/router-ab/internal/deriver-a/wallet/snapshot",
+	"deriver-a-status": "/router-ab/internal/deriver-a/wallet/snapshot",
+	"deriver-a-verify": "/router-ab/internal/deriver-a/wallet/snapshot",
+	"deriver-b-capture": "/router-ab/internal/deriver-b/wallet/snapshot",
+	"deriver-b-export": "/router-ab/internal/deriver-b/wallet/snapshot",
+	"deriver-b-import": "/router-ab/internal/deriver-b/wallet/snapshot",
+	"deriver-b-status": "/router-ab/internal/deriver-b/wallet/snapshot",
+	"deriver-b-verify": "/router-ab/internal/deriver-b/wallet/snapshot",
+	"deriver-a-fence": "/router-ab/internal/deriver-a/wallet/fence-relocation",
+	"deriver-b-fence": "/router-ab/internal/deriver-b/wallet/fence-relocation",
+	"signing-worker-context": "/router-ab/signing-worker/wallet/relocation-context",
+	"deriver-a-context": "/router-ab/internal/deriver-a/wallet/relocation-context",
+	"deriver-b-context": "/router-ab/internal/deriver-b/wallet/relocation-context",
+	"deriver-b-prepare": "/router-ab/internal/deriver-b/wallet/prepare-relocation",
+	"deriver-a-prepare": "/router-ab/internal/deriver-a/wallet/prepare-relocation",
+	"router-freeze": "/router-ab/router/wallet/freeze",
+	"router-cleanup": "/router-ab/router/wallet/transfer",
+	"router-activate": "/router-ab/router/wallet/transfer",
+	"router-import": "/router-ab/router/wallet/transfer",
+	"router-status": "/router-ab/router/wallet/transfer",
+	"router-verify": "/router-ab/router/wallet/transfer",
+	"router-export": "/router-ab/router/wallet/transfer",
+	"router-transfer": "/router-ab/router/wallet/transfer",
+	"ed25519-activate": "/router-ab/signing-worker/wallet/ed25519/snapshot",
+	"ed25519-cleanup": "/router-ab/signing-worker/wallet/ed25519/snapshot",
+	"ed25519-export": "/router-ab/signing-worker/wallet/ed25519/snapshot",
+	"ed25519-import": "/router-ab/signing-worker/wallet/ed25519/snapshot",
+	"ed25519-status": "/router-ab/signing-worker/wallet/ed25519/snapshot",
+	"ed25519-verify": "/router-ab/signing-worker/wallet/ed25519/snapshot",
+	"ed25519-capture": "/router-ab/signing-worker/wallet/ed25519/snapshot",
+	"ed25519-settle": "/router-ab/signing-worker/wallet/ed25519/settle",
+	"ed25519-snapshot": "/router-ab/signing-worker/wallet/ed25519/snapshot",
+	"ecdsa-import": "/router-ab/signing-worker/wallet/ecdsa/transfer",
+	"ecdsa-status": "/router-ab/signing-worker/wallet/ecdsa/transfer",
+	"ecdsa-verify": "/router-ab/signing-worker/wallet/ecdsa/transfer",
+	"ecdsa-activate": "/router-ab/signing-worker/wallet/ecdsa/transfer",
+	"ecdsa-cleanup": "/router-ab/signing-worker/wallet/ecdsa/transfer",
+	"ecdsa-freeze": "/router-ab/signing-worker/wallet/pool/freeze",
+	"ecdsa-export": "/router-ab/signing-worker/wallet/ecdsa/export",
+	"ecdsa-transfer": "/router-ab/signing-worker/wallet/ecdsa/transfer",
+	"presign-preparation-inventory": "/router-ab/signing-worker/wallet/linked-presign-preparation-inventory",
+	"presign-inventory": "/router-ab/signing-worker/wallet/linked-presign-inventory",
+	"presign-fence": "/router-ab/signing-worker/linked-presign-session/fence",
+	"presign-freeze": "/router-ab/signing-worker/linked-presign-session/freeze",
+	"presign-cleanup": "/router-ab/signing-worker/linked-presign-session/transfer",
+	"presign-status": "/router-ab/signing-worker/linked-presign-session/transfer",
+	"presign-import": "/router-ab/signing-worker/linked-presign-session/transfer",
+	"presign-verify": "/router-ab/signing-worker/linked-presign-session/transfer",
+	"presign-export": "/router-ab/signing-worker/linked-presign-session/export",
+	"presign-transfer": "/router-ab/signing-worker/linked-presign-session/transfer"
+};
+async function handleWalletRelocationRequest(request, env) {
+	const url = new URL(request.url);
+	if (url.origin !== ORIGIN || !url.pathname.startsWith(`${BASE_PATH}/`)) return null;
+	if (request.method !== "POST") return failure("method_not_allowed", 405);
+	const operation = url.pathname.slice(39);
+	if (!Object.hasOwn(OPERATIONS, operation) || url.search !== "") return failure("operation_not_found", 404);
+	const path = Reflect.get(OPERATIONS, operation);
+	if (typeof path !== "string") return failure("operation_not_found", 404);
+	if (!(request.headers.get("content-type") || "").toLowerCase().startsWith("application/json")) return failure("unsupported_media_type", 415);
+	const deriverAction = deriverRuntimeOperation(operation);
+	const credential = deriverAction !== null || operation === "deriver-a-prepare" || operation === "deriver-b-prepare" || operation === "deriver-a-context" || operation === "deriver-b-context" ? env.ROUTER_AB_INTERNAL_SERVICE_AUTH_SECRET?.trim() : env.ROUTER_AB_GATEWAY_TO_ROUTER_AUTH_SECRET?.trim();
+	if (!credential) return failure("relocation_transport_unavailable", 503);
+	const bytes = await request.arrayBuffer();
+	if (bytes.byteLength > 131072) return failure("request_too_large", 413);
+	let input;
+	try {
+		input = JSON.parse(new TextDecoder().decode(bytes));
+	} catch {
+		return failure("invalid_input", 400);
+	}
+	if (deriverAction) {
+		const binding = deriverAction.role === "deriver-a" ? env.DERIVER_A : env.DERIVER_B;
+		return forwardDeriverRelocation(input, deriverAction.role, deriverAction.operation, binding, credential, env);
+	}
+	const ed25519Action = ed25519RuntimeOperation(operation);
+	if (ed25519Action) return forwardEd25519Snapshot(input, ed25519Action, env.MPC_ROUTER, credential, env);
+	const ecdsaAction = ecdsaRuntimeOperation(operation);
+	if (ecdsaAction) return forwardEcdsaRelocation(input, ecdsaAction, env.MPC_ROUTER, credential, env);
+	const presignAction = presignSourceOperation(operation);
+	if (presignAction) return forwardPresignSource(input, presignAction, env.MPC_ROUTER, credential, env);
+	let body = bytes;
+	let identity = null;
+	if (operation === "router-cleanup" || operation === "router-activate" || operation === "router-import" || operation === "router-status" || operation === "router-verify" || operation === "router-export" || operation === "router-freeze" || operation === "ed25519-settle") {
+		const authorized = await authorizeRuntimeSource(input, operation, env);
+		if (!authorized.ok) {
+			let status = 503;
+			if (authorized.code === "invalid_input") status = 400;
+			else if (authorized.code === "source_command_denied") status = 409;
+			return failure(authorized.code, status);
+		}
+		body = authorized.body;
+		identity = authorized.identity;
+	} else if (operation === "router-transfer" && isPlainObject(input) && (input.kind === "export" || input.kind === "status" || input.kind === "verify" || input.kind === "import" || input.kind === "activate" || input.kind === "cleanup")) return failure("source_command_required", 400);
+	else if ((operation === "ecdsa-transfer" || operation === "presign-transfer") && (!isPlainObject(input) || input.kind !== "prepare")) return failure("source_command_required", 400);
+	else if (operation === "ed25519-snapshot" && isPlainObject(input) && (input.command === "capture" || input.command === "export" || input.command === "import" || input.command === "status" || input.command === "verify" || input.command === "activate" || input.command === "cleanup")) return failure("source_command_required", 400);
+	if ((operation === "deriver-a-prepare" || operation === "deriver-b-prepare" || operation === "deriver-a-context" || operation === "deriver-b-context") && isPlainObject(input) && isPlainObject(input.owner)) identity = walletObjectIdentity(input.owner.wallet_id, operation.endsWith("-prepare") ? input.destination_generation : input.ownership_generation, {
+		orgId: input.owner.org_id,
+		projectId: input.owner.project_id,
+		envId: input.owner.env_id
+	});
+	if (isPlainObject(input)) {
+		if (operation === "router-transfer" && input.kind === "prepare" && isPlainObject(input.request) && isPlainObject(input.request.owner)) {
+			const owner = input.request.owner;
+			identity = walletObjectIdentity(owner.wallet_id, input.request.destination_generation, {
+				orgId: owner.org_id,
+				projectId: owner.project_id,
+				envId: owner.env_id
+			});
+		} else if (operation === "ecdsa-transfer" && input.kind === "prepare" && isPlainObject(input.request)) {
+			const source = walletObjectIdentityFromWireScope(input.scope, input.request.source_generation);
+			identity = walletObjectIdentity(source.walletId, source.ownershipGeneration + 1, source);
+		} else if (operation === "ed25519-snapshot" && input.command === "prepare" && isPlainObject(input.source) && isPlainObject(input.source.request)) {
+			const source = walletObjectIdentityFromWireScope(input.source.scope, input.source.request.source_generation);
+			identity = walletObjectIdentity(source.walletId, source.ownershipGeneration + 1, source);
+		} else if (operation === "presign-transfer" && input.kind === "prepare" && isPlainObject(input.command) && isPlainObject(input.command.request)) {
+			const source = walletObjectIdentityFromWireScope(input.command.wallet_scope, input.command.request.source_generation);
+			identity = walletObjectIdentity(source.walletId, source.ownershipGeneration + 1, source);
+		} else if (operation === "presign-preparation-inventory") identity = walletObjectIdentityFromWireScope(input.scope, input.source_generation);
+	}
+	if (operation === "custody-target" && isPlainObject(input) && input.role !== "presignSessions") {
+		if (!isPlainObject(input.wallet)) return failure("invalid_input", 400);
+		identity = walletRelocationObjectIdentity(input.wallet, input.ownership_generation);
+		body = JSON.stringify({
+			role: input.role,
+			object_name: input.object_name,
+			placement: input.placement
+		});
+	}
+	let transport = env.MPC_ROUTER;
+	let origin = "https://mpc-router.router-ab.internal";
+	if (operation === "deriver-a-prepare" || operation === "deriver-a-context") {
+		transport = env.DERIVER_A;
+		origin = "https://deriver-a.router-ab.internal";
+	} else if (operation === "deriver-b-prepare" || operation === "deriver-b-context") {
+		transport = env.DERIVER_B;
+		origin = "https://deriver-b.router-ab.internal";
+	}
+	const response = await transport.fetch(new Request(`${origin}${path}`, {
+		method: "POST",
+		redirect: "manual",
+		headers: {
+			"content-type": "application/json",
+			...identity === null ? {} : walletObjectIdentityHeaders(identity),
+			[ROUTER_AB_INTERNAL_SERVICE_AUTH_HEADER_V1]: credential
+		},
+		body
+	}));
+	if (operation === "router-freeze" || operation === "router-activate") return recordRuntimeRouterReceipt(operation, input, response, env);
+	return response;
+}
+function failure(code, status) {
+	return Response.json({
+		ok: false,
+		code
+	}, {
+		status,
+		headers: { "Cache-Control": "no-store" }
+	});
+}
+//#endregion
+export { handleWalletRelocationRequest };
+
+//# sourceMappingURL=walletRelocationOps.js.map

package/dist/esm/router/cloudflare/runtime/walletRelocationPresign.js

@@ -0,0 +1,185 @@
+import { isPlainObject } from "../../../shared-ts/src/utils/validation.js";
+import { walletObjectIdentityHeaders, walletRelocationObjectIdentity } from "./walletObjectAddresses.js";
+import { ROUTER_AB_INTERNAL_SERVICE_AUTH_HEADER_V1 } from "../../../core/ThresholdService/routerAb/internalServiceHttp.js";
+//#region src/router/cloudflare/runtime/walletRelocationPresign.ts
+function presignSourceOperation(operation) {
+	switch (operation) {
+		case "presign-inventory": return "inventory";
+		case "presign-fence": return "fence";
+		case "presign-freeze": return "freeze";
+		case "presign-export": return "export";
+		case "presign-import": return "import";
+		case "presign-verify": return "verify";
+		case "presign-status": return "status";
+		case "presign-cleanup": return "cleanup";
+		default: return null;
+	}
+}
+async function forwardPresignSource(input, operation, router, credential, directory) {
+	if (operation === "export" || operation === "import" || operation === "verify" || operation === "status" || operation === "cleanup") return forwardPresignTransfer(input, operation, router, credential, directory);
+	if (!isPlainObject(input) || Object.keys(input).length !== (operation === "inventory" ? 4 : 3) || !isPlainObject(input.wallet) || !isPlainObject(input.attempt)) return failure("invalid_input", 400);
+	const request = operation === "inventory" ? {
+		operation,
+		cursor: input.cursor,
+		limit: input.limit
+	} : {
+		operation,
+		session: input.session
+	};
+	try {
+		const authorized = await postDirectory(directory, "relocation-presign-source", {
+			wallet: input.wallet,
+			attempt: input.attempt,
+			request
+		});
+		if (!authorized.ok) return failure("source_command_denied", 409);
+		const result = await authorized.json();
+		if (!isPlainObject(result) || Object.keys(result).length !== 2 || result.ok !== true || !isPlainObject(result.command) || Object.keys(result.command).length !== 2 || result.command.operation !== operation || !isPlainObject(result.command.payload)) return failure("source_command_unavailable", 503);
+		const payload = result.command.payload;
+		const scope = operation === "inventory" ? payload.scope : payload.wallet_scope;
+		if (Object.keys(payload).length !== 4 || !isPlainObject(scope) || Object.keys(scope).length !== 4 || typeof scope.org_id !== "string" || scope.org_id !== input.wallet.organizationId || typeof scope.project_id !== "string" || scope.project_id !== input.wallet.projectId || typeof scope.project_environment_id !== "string" || scope.project_environment_id !== input.wallet.environmentId || typeof scope.wallet_id !== "string" || scope.wallet_id !== input.wallet.walletId || !isPlainObject(payload.request) || Object.keys(payload.request).length !== 3 || typeof payload.request.move_id !== "string" || payload.request.move_id !== input.attempt.moveId || !positiveInteger(payload.request.source_generation) || !positiveInteger(payload.request.invalidated_at_ms)) return failure("source_command_unavailable", 503);
+		let path;
+		if (operation === "inventory") {
+			if (!sameFields(payload.cursor, input.cursor) || payload.limit !== input.limit || !positiveInteger(payload.limit) || payload.limit > 128) return failure("source_command_unavailable", 503);
+			path = "/router-ab/signing-worker/wallet/linked-presign-inventory";
+		} else {
+			if (!isPlainObject(input.session) || Object.keys(input.session).length !== 2 || typeof input.session.presignSessionId !== "string" || !input.session.presignSessionId.trim() || typeof input.session.serverPresignatureId !== "string" || !input.session.serverPresignatureId.trim() || payload.presign_session_id !== input.session.presignSessionId || payload.server_presignature_id !== input.session.serverPresignatureId) return failure("source_command_unavailable", 503);
+			path = `/router-ab/signing-worker/linked-presign-session/${operation}`;
+		}
+		const response = await router.fetch(new Request(`https://mpc-router.router-ab.internal${path}`, {
+			method: "POST",
+			redirect: "manual",
+			headers: {
+				"content-type": "application/json",
+				[ROUTER_AB_INTERNAL_SERVICE_AUTH_HEADER_V1]: credential,
+				...walletObjectIdentityHeaders(walletRelocationObjectIdentity(input.wallet, payload.request.source_generation))
+			},
+			body: JSON.stringify(payload)
+		}));
+		if (operation !== "freeze" || !response.ok) return response;
+		const raw = await response.clone().json();
+		if (!isPlainObject(raw) || Object.keys(raw).length !== 3 || !sameFields(raw.command, payload) || !positiveInteger(raw.record_count) || typeof raw.records_digest_hex !== "string" || !/^[a-f0-9]{64}$/u.test(raw.records_digest_hex)) return failure("source_receipt_unavailable", 503);
+		const receipt = {
+			command: payload,
+			record_count: raw.record_count,
+			records_digest_hex: raw.records_digest_hex
+		};
+		const recorded = await postDirectory(directory, "relocation-presign-receipt", {
+			wallet: input.wallet,
+			attempt: input.attempt,
+			receipt
+		});
+		if (!recorded.ok) return failure("source_receipt_unavailable", 503);
+		const confirmed = await recorded.json();
+		if (!isPlainObject(confirmed) || Object.keys(confirmed).length !== 2 || confirmed.ok !== true || !sameFields(confirmed.receipt, receipt)) return failure("source_receipt_unavailable", 503);
+		return response;
+	} catch {
+		return failure("source_command_unavailable", 503);
+	}
+}
+function positiveInteger(raw) {
+	return typeof raw === "number" && Number.isSafeInteger(raw) && raw > 0;
+}
+function sameFields(left, right) {
+	if (!isPlainObject(left) || !isPlainObject(right)) return left === right;
+	if (Object.keys(left).length !== Object.keys(right).length) return false;
+	for (const key of Object.keys(left)) if (!sameFields(left[key], right[key])) return false;
+	return true;
+}
+function postDirectory(directory, endpoint, body) {
+	const version = directory.CF_VERSION_METADATA.id;
+	if (typeof version !== "string" || !version) throw new Error("Runtime version is unavailable");
+	return directory.WALLET_CONSOLE.fetch(new Request(`https://wallet-placement.internal/internal/wallet-placement/v1/${endpoint}`, {
+		method: "POST",
+		headers: {
+			"content-type": "application/json",
+			"x-seams-writer-role": "walletRuntime",
+			"x-seams-writer-version": version,
+			"x-seams-writer-account": directory.SEAMS_D1_HOME_ACCOUNT_ID,
+			"x-seams-writer-database": directory.SEAMS_D1_HOME_DATABASE_ID
+		},
+		body: JSON.stringify(body)
+	}));
+}
+function failure(code, status) {
+	return Response.json({
+		ok: false,
+		code
+	}, {
+		status,
+		headers: { "Cache-Control": "no-store" }
+	});
+}
+async function forwardPresignTransfer(input, operation, router, credential, directory) {
+	if (!isPlainObject(input) || Object.keys(input).length !== (operation === "verify" || operation === "status" || operation === "cleanup" ? 3 : 4) || !isPlainObject(input.wallet) || !isPlainObject(input.attempt) || !isPlainObject(input.session) || Object.keys(input.session).length !== 2 || typeof input.session.presignSessionId !== "string" || !input.session.presignSessionId.trim() || typeof input.session.serverPresignatureId !== "string" || !input.session.serverPresignatureId.trim()) return failure("invalid_input", 400);
+	if (operation === "export" && !segmentIndex(input.segmentIndex)) return failure("invalid_input", 400);
+	const request = operation === "export" ? {
+		operation,
+		session: input.session,
+		segmentIndex: input.segmentIndex
+	} : {
+		operation,
+		session: input.session
+	};
+	try {
+		const authorized = await postDirectory(directory, "relocation-presign-transfer", {
+			wallet: input.wallet,
+			attempt: input.attempt,
+			request
+		});
+		if (!authorized.ok) return failure("source_command_denied", 409);
+		const result = await authorized.json();
+		if (!isPlainObject(result) || Object.keys(result).length !== 2 || result.ok !== true || !isPlainObject(result.command) || result.command.kind !== operation || Object.keys(result.command).length !== (operation === "export" ? 4 : operation === "import" || operation === "status" ? 3 : 2)) return failure("source_command_unavailable", 503);
+		const command = result.command;
+		const receipt = command.receipt;
+		if (!isPlainObject(receipt) || Object.keys(receipt).length !== 3 || !positiveInteger(receipt.record_count) || typeof receipt.records_digest_hex !== "string" || !/^[a-f0-9]{64}$/u.test(receipt.records_digest_hex) || !isPlainObject(receipt.command) || Object.keys(receipt.command).length !== 4) return failure("source_command_unavailable", 503);
+		const source = receipt.command;
+		const scope = source.wallet_scope;
+		const move = source.request;
+		if (!isPlainObject(scope) || Object.keys(scope).length !== 4 || scope.org_id !== input.wallet.organizationId || scope.project_id !== input.wallet.projectId || scope.project_environment_id !== input.wallet.environmentId || scope.wallet_id !== input.wallet.walletId || !isPlainObject(move) || Object.keys(move).length !== 3 || move.move_id !== input.attempt.moveId || !positiveInteger(move.source_generation) || !positiveInteger(move.invalidated_at_ms) || source.presign_session_id !== input.session.presignSessionId || source.server_presignature_id !== input.session.serverPresignatureId || operation !== "verify" && operation !== "cleanup" && command.chunk_bytes !== 4096) return failure("source_command_unavailable", 503);
+		let payload;
+		if (operation === "export") {
+			if (command.segment_index !== input.segmentIndex) return failure("source_command_unavailable", 503);
+			payload = {
+				receipt,
+				segment_index: command.segment_index,
+				chunk_bytes: 4096
+			};
+		} else if (operation === "import") {
+			const chunk = input.chunk;
+			if (!isPlainObject(chunk) || Object.keys(chunk).length !== 5 || !sameFields(chunk.receipt, receipt) || !segmentIndex(chunk.segment_index) || !positiveInteger(chunk.segment_count) || chunk.segment_count > 4294967295 || chunk.segment_index >= chunk.segment_count || chunk.chunk_bytes !== 4096 || typeof chunk.data_b64u !== "string" || chunk.data_b64u.length > 5462 || !/^[A-Za-z0-9_-]+$/u.test(chunk.data_b64u)) return failure("invalid_input", 400);
+			payload = {
+				kind: "import",
+				chunk
+			};
+		} else if (operation === "status") payload = {
+			kind: "status",
+			receipt,
+			chunk_bytes: 4096
+		};
+		else payload = {
+			kind: operation,
+			receipt
+		};
+		const path = operation === "export" ? "export" : "transfer";
+		return await router.fetch(new Request(`https://mpc-router.router-ab.internal/router-ab/signing-worker/linked-presign-session/${path}`, {
+			method: "POST",
+			redirect: "manual",
+			headers: {
+				"content-type": "application/json",
+				[ROUTER_AB_INTERNAL_SERVICE_AUTH_HEADER_V1]: credential,
+				...walletObjectIdentityHeaders(walletRelocationObjectIdentity(input.wallet, move.source_generation + (operation === "export" || operation === "cleanup" ? 0 : 1)))
+			},
+			body: JSON.stringify(payload)
+		}));
+	} catch {
+		return failure("source_command_unavailable", 503);
+	}
+}
+function segmentIndex(raw) {
+	return typeof raw === "number" && Number.isInteger(raw) && raw >= 0 && raw <= 4294967295;
+}
+//#endregion
+export { forwardPresignSource, presignSourceOperation };
+
+//# sourceMappingURL=walletRelocationPresign.js.map

package/dist/esm/router/cloudflare/runtime/walletRelocationSource.js

@@ -0,0 +1,221 @@
+import { isPlainObject } from "../../../shared-ts/src/utils/validation.js";
+import { walletRelocationObjectIdentity } from "./walletObjectAddresses.js";
+//#region src/router/cloudflare/runtime/walletRelocationSource.ts
+async function authorizeRuntimeSource(input, operation, env) {
+	let fieldCount = 2;
+	if (operation === "router-export") fieldCount = 4;
+	else if (operation === "router-import") fieldCount = 3;
+	if (!isPlainObject(input) || Object.keys(input).length !== fieldCount || !isPlainObject(input.wallet) || !isPlainObject(input.attempt)) return {
+		ok: false,
+		code: "invalid_input"
+	};
+	const version = env.CF_VERSION_METADATA.id;
+	if (typeof version !== "string" || !version) return {
+		ok: false,
+		code: "source_command_unavailable"
+	};
+	const destination = operation === "router-status" || operation === "router-verify" || operation === "router-import" || operation === "router-activate";
+	const transfer = destination || operation === "router-export" || operation === "router-cleanup";
+	let endpoint = "relocation-runtime-source";
+	let commandBody = JSON.stringify({
+		wallet: input.wallet,
+		attempt: input.attempt,
+		operation
+	});
+	if (operation === "router-export") {
+		endpoint = "relocation-router-export";
+		commandBody = JSON.stringify({
+			wallet: input.wallet,
+			attempt: input.attempt,
+			recordIndex: input.recordIndex,
+			segmentIndex: input.segmentIndex
+		});
+	} else if (operation === "router-cleanup") {
+		endpoint = "relocation-router-cleanup";
+		commandBody = JSON.stringify({
+			wallet: input.wallet,
+			attempt: input.attempt
+		});
+	} else if (destination) {
+		endpoint = "relocation-router-destination";
+		let destinationOperation = "verify";
+		if (operation === "router-status") destinationOperation = "status";
+		else if (operation === "router-import") destinationOperation = "import";
+		else if (operation === "router-activate") destinationOperation = "activate";
+		commandBody = JSON.stringify({
+			wallet: input.wallet,
+			attempt: input.attempt,
+			operation: destinationOperation
+		});
+	}
+	let response;
+	let result;
+	try {
+		response = await env.WALLET_CONSOLE.fetch(new Request(`https://wallet-placement.internal/internal/wallet-placement/v1/${endpoint}`, {
+			method: "POST",
+			headers: {
+				"content-type": "application/json",
+				"x-seams-writer-role": "walletRuntime",
+				"x-seams-writer-version": version,
+				"x-seams-writer-account": env.SEAMS_D1_HOME_ACCOUNT_ID,
+				"x-seams-writer-database": env.SEAMS_D1_HOME_DATABASE_ID
+			},
+			body: commandBody
+		}));
+		if (!response.ok) return {
+			ok: false,
+			code: "source_command_denied"
+		};
+		result = await response.json();
+	} catch {
+		return {
+			ok: false,
+			code: "source_command_unavailable"
+		};
+	}
+	if (!isPlainObject(result) || result.ok !== true || !isPlainObject(result.command) || !transfer && (result.command.operation !== operation || !isPlainObject(result.command.payload))) return {
+		ok: false,
+		code: "source_command_unavailable"
+	};
+	const payload = transfer ? result.command : result.command.payload;
+	if (!isPlainObject(payload)) return {
+		ok: false,
+		code: "source_command_unavailable"
+	};
+	if (operation === "router-freeze" || transfer) {
+		let request = payload;
+		if (transfer) {
+			let receipt = payload.receipt;
+			if (operation === "router-cleanup") {
+				if (Object.keys(payload).length !== 2 || payload.kind !== "cleanup" || !isPlainObject(payload.activation) || Object.keys(payload.activation).length !== 2 || typeof payload.activation.destination_object !== "string" || payload.activation.destination_object.length === 0 || payload.activation.destination_object.length > 512) return {
+					ok: false,
+					code: "source_command_unavailable"
+				};
+				receipt = payload.activation.source;
+			}
+			if (!isPlainObject(receipt) || Object.keys(receipt).length !== 3 || !isPlainObject(receipt.request) || typeof receipt.records_digest_hex !== "string" || !/^[a-f0-9]{64}$/u.test(receipt.records_digest_hex) || typeof receipt.record_count !== "number" || !Number.isSafeInteger(receipt.record_count) || receipt.record_count < 0) return {
+				ok: false,
+				code: "source_command_unavailable"
+			};
+			if (operation === "router-export") {
+				if (Object.keys(payload).length !== 5 || payload.kind !== "export" || payload.record_index !== input.recordIndex || payload.segment_index !== input.segmentIndex || payload.chunk_bytes !== 4096 || typeof input.recordIndex !== "number" || !Number.isSafeInteger(input.recordIndex) || input.recordIndex < 0 || input.recordIndex >= receipt.record_count || typeof input.segmentIndex !== "number" || !Number.isSafeInteger(input.segmentIndex) || input.segmentIndex < 0 || input.segmentIndex > 4294967295) return {
+					ok: false,
+					code: "source_command_unavailable"
+				};
+			} else if (operation === "router-status" || operation === "router-import") {
+				if (Object.keys(payload).length !== 3 || payload.kind !== (operation === "router-status" ? "status" : "import") || payload.chunk_bytes !== 4096) return {
+					ok: false,
+					code: "source_command_unavailable"
+				};
+			} else if (operation !== "router-cleanup" && (Object.keys(payload).length !== 2 || payload.kind !== (operation === "router-activate" ? "activate" : "verify"))) return {
+				ok: false,
+				code: "source_command_unavailable"
+			};
+			request = receipt.request;
+		}
+		if (Object.keys(request).length !== 5 || !isPlainObject(request.owner) || Object.keys(request.owner).length !== 4 || request.owner.org_id !== input.wallet.organizationId || request.owner.project_id !== input.wallet.projectId || request.owner.env_id !== input.wallet.environmentId || request.owner.wallet_id !== input.wallet.walletId || request.move_id !== input.attempt.moveId || typeof request.request_digest_hex !== "string" || !/^[0-9a-f]{64}$/.test(request.request_digest_hex) || typeof request.source_generation !== "number" || !Number.isSafeInteger(request.source_generation) || request.source_generation < 1 || typeof request.destination_generation !== "number" || !Number.isSafeInteger(request.destination_generation) || request.destination_generation !== request.source_generation + 1) return {
+			ok: false,
+			code: "source_command_unavailable"
+		};
+		const generation = operation === "router-freeze" || operation === "router-export" || operation === "router-cleanup" ? request.source_generation : request.destination_generation;
+		const identity = walletRelocationObjectIdentity(input.wallet, generation);
+		if (operation === "router-import") return authorizeImportChunk(input.chunk, payload.receipt, identity);
+		return {
+			ok: true,
+			body: JSON.stringify(payload),
+			identity
+		};
+	}
+	const source = operation === "ed25519-capture" ? payload.source : payload;
+	if (operation === "ed25519-capture" && (payload.command !== "capture" || Object.keys(payload).length !== 2) || !isPlainObject(source) || Object.keys(source).length !== 2 || !isPlainObject(source.scope) || !isPlainObject(source.request) || Object.keys(source.scope).length !== 4 || Object.keys(source.request).length !== 3 || source.scope.org_id !== input.wallet.organizationId || source.scope.project_id !== input.wallet.projectId || source.scope.project_environment_id !== input.wallet.environmentId || source.scope.wallet_id !== input.wallet.walletId || source.request.move_id !== input.attempt.moveId || typeof source.request.source_generation !== "number" || !Number.isSafeInteger(source.request.source_generation) || source.request.source_generation < 1 || typeof source.request.invalidated_at_ms !== "number" || !Number.isSafeInteger(source.request.invalidated_at_ms) || source.request.invalidated_at_ms < 1) return {
+		ok: false,
+		code: "source_command_unavailable"
+	};
+	return {
+		ok: true,
+		body: JSON.stringify(payload),
+		identity: walletRelocationObjectIdentity(input.wallet, source.request.source_generation)
+	};
+}
+async function recordRuntimeRouterReceipt(operation, input, response, env) {
+	if (!response.ok) return response;
+	try {
+		const result = await response.clone().json();
+		if (!isPlainObject(input) || !isPlainObject(result)) return receiptUnavailable();
+		let receipt;
+		let endpoint;
+		if (operation === "router-freeze") {
+			if (result.state === "draining") return response;
+			if (result.state !== "frozen") return receiptUnavailable();
+			receipt = result.receipt;
+			endpoint = "relocation-router-receipt";
+		} else {
+			if (result.kind !== "activated") return receiptUnavailable();
+			receipt = result.activation;
+			endpoint = "relocation-router-activation";
+		}
+		if (!isPlainObject(receipt)) return receiptUnavailable();
+		const version = env.CF_VERSION_METADATA.id;
+		if (typeof version !== "string" || !version) return receiptUnavailable();
+		const recorded = await env.WALLET_CONSOLE.fetch(new Request(`https://wallet-placement.internal/internal/wallet-placement/v1/${endpoint}`, {
+			method: "POST",
+			headers: {
+				"content-type": "application/json",
+				"x-seams-writer-role": "walletRuntime",
+				"x-seams-writer-version": version,
+				"x-seams-writer-account": env.SEAMS_D1_HOME_ACCOUNT_ID,
+				"x-seams-writer-database": env.SEAMS_D1_HOME_DATABASE_ID
+			},
+			body: JSON.stringify({
+				wallet: input.wallet,
+				attempt: input.attempt,
+				receipt
+			})
+		}));
+		if (!recorded.ok) return receiptUnavailable();
+		const acknowledgement = await recorded.json();
+		if (!isPlainObject(acknowledgement) || acknowledgement.ok !== true || !isPlainObject(acknowledgement.receipt)) return receiptUnavailable();
+		if (!sameReceipt(receipt, acknowledgement.receipt)) return receiptUnavailable();
+		return response;
+	} catch {
+		return receiptUnavailable();
+	}
+}
+function sameReceipt(expected, actual) {
+	if (Object.keys(expected).length !== Object.keys(actual).length) return false;
+	for (const key of Object.keys(expected)) {
+		const left = expected[key];
+		const right = actual[key];
+		if (isPlainObject(left) && isPlainObject(right)) {
+			if (!sameReceipt(left, right)) return false;
+		} else if (left !== right) return false;
+	}
+	return true;
+}
+function receiptUnavailable() {
+	return Response.json({
+		ok: false,
+		code: "router_receipt_unavailable"
+	}, {
+		status: 503,
+		headers: { "Cache-Control": "no-store" }
+	});
+}
+function authorizeImportChunk(chunk, receipt, identity) {
+	if (!isPlainObject(receipt) || !isPlainObject(chunk) || Object.keys(chunk).length !== 6 || !isPlainObject(chunk.receipt) || !sameReceipt(receipt, chunk.receipt) || typeof chunk.record_index !== "number" || !Number.isSafeInteger(chunk.record_index) || chunk.record_index < 0 || typeof receipt.record_count !== "number" || chunk.record_index >= receipt.record_count || typeof chunk.segment_index !== "number" || !Number.isSafeInteger(chunk.segment_index) || chunk.segment_index < 0 || typeof chunk.segment_count !== "number" || !Number.isSafeInteger(chunk.segment_count) || chunk.segment_count < 1 || chunk.segment_count > 4294967295 || chunk.segment_index >= chunk.segment_count || chunk.chunk_bytes !== 4096 || typeof chunk.data_b64u !== "string" || chunk.data_b64u.length > 5462 || !/^[A-Za-z0-9_-]+$/u.test(chunk.data_b64u)) return {
+		ok: false,
+		code: "invalid_input"
+	};
+	return {
+		ok: true,
+		body: JSON.stringify({
+			kind: "import",
+			chunk
+		}),
+		identity
+	};
+}
+//#endregion
+export { authorizeRuntimeSource, recordRuntimeRouterReceipt };
+
+//# sourceMappingURL=walletRelocationSource.js.map