@seams/wallet-server 0.9.2 → 0.9.4

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationRead.d.ts

@@ -3,6 +3,7 @@ import type { WalletRegistrationHomeAuthority } from '../../../domains/walletReg
 import type { CloudflareD1RegistrationCeremonyIntentStore } from './d1RegistrationCeremonyStore';
 import type { D1WalletExecutionAuthority } from './d1WalletExecutionAuthority';
 import type { D1WalletOperationStore } from './d1WalletOperationStore';
+import type { D1WalletRegistrationCommitStore } from './d1WalletRegistrationCommitStore';
 import type { D1WalletRegistrationNearProvisioningSideEffectRecord } from './d1WalletRegistrationService';
 import type { CloudflareD1Ed25519YaoLifecycleDecisionStoreV1 } from '../ed25519Yao/d1Ed25519YaoLifecycleDecisionStore';
 /** Read admission and immutable finalization state from one D1 snapshot. */
@@ -12,7 +13,8 @@ export declare class D1WalletRegistrationRead {
     readonly operations: D1WalletOperationStore<D1WalletRegistrationNearProvisioningSideEffectRecord>;
     private readonly getCeremonies;
     private readonly decisions;
-    constructor(database: D1DatabaseLike, authority: D1WalletExecutionAuthority | null, operations: D1WalletOperationStore<D1WalletRegistrationNearProvisioningSideEffectRecord>, getCeremonies: () => CloudflareD1RegistrationCeremonyIntentStore, decisions: CloudflareD1Ed25519YaoLifecycleDecisionStoreV1);
+    private readonly passkeyClaims;
+    constructor(database: D1DatabaseLike, authority: D1WalletExecutionAuthority | null, operations: D1WalletOperationStore<D1WalletRegistrationNearProvisioningSideEffectRecord>, getCeremonies: () => CloudflareD1RegistrationCeremonyIntentStore, decisions: CloudflareD1Ed25519YaoLifecycleDecisionStoreV1, passkeyClaims: Pick<D1WalletRegistrationCommitStore, 'prepareHeldPasskeyClaimRead' | 'parseHeldPasskeyClaimRead'>);
     readRespond(home: Parameters<WalletRegistrationHomeAuthority['admitHome']>[0]): Promise<{
         readonly ok: false;
         readonly code: string;
@@ -37,6 +39,7 @@ export declare class D1WalletRegistrationRead {
         ok: true;
         operation: import("../../../cloudflare-adaptor").VersionedJsonRecordReadResult<D1WalletRegistrationNearProvisioningSideEffectRecord>;
         decision: import("../../../domains/ed25519Yao/capabilityLifecycle/routerAbEd25519YaoLifecycleDecision").RouterAbEd25519YaoLifecycleDecisionV1 | null;
+        heldPasskeyClaim: import("./d1WalletRegistrationCommitStore").HeldRegistrationPasskeyClaim | null;
         readCeremony: () => Promise<import("../../../../core/RegistrationCeremonyStore").StoredWalletRegistrationCeremony | null>;
     }>;
 }

package/dist/types/wallet-server/src/router/cloudflare/d1/registration/d1WalletRegistrationService.d.ts

@@ -260,7 +260,7 @@ export declare class CloudflareD1WalletRegistrationService {
     provisionEd25519YaoWalletSession(request: RouterAbEd25519YaoVerifiedWalletUnlockRequestV1): Promise<RouterAbEd25519YaoVerifiedWalletUnlockResponseV1>;
     setupWalletRegistration(input: WalletRegistrationSetupInput): Promise<WalletRegistrationSetupResponseV2>;
     authorizeWalletRegistrationNearAdmission(input: WalletRegistrationNearAdmissionInput): Promise<WalletRegistrationNearAdmissionResponseV2>;
-    respondWalletRegistration(input: WalletRegistrationRespondInput, traceContext?: RouterAbTraceContextV1, timingSink?: Array<readonly [string, number]>): Promise<WalletRegistrationRespondResponseV2>;
+    respondWalletRegistration(input: WalletRegistrationRespondInput, traceContext?: RouterAbTraceContextV1, timingSink?: Array<readonly [string, number]>, waitUntil?: (promise: Promise<unknown>) => void): Promise<WalletRegistrationRespondResponseV2>;
     /** For callers that must read the context before finalize tombstones it. */
     private registrationOwnerProofWithContext;
     authorizeNearRegistrationContinuation(input: {

package/dist/types/wallet-server/src/router/framework/authServicePort.d.ts

@@ -1031,7 +1031,7 @@ export interface RouterApiWalletRegistrationService {
     listWalletEcdsaKeyFactsInventory(input: RouterApiMethodTypes['listWalletEcdsaKeyFactsInventory']['input']): Promise<RouterApiMethodTypes['listWalletEcdsaKeyFactsInventory']['result']>;
     readActiveEmailOtpEnrollment(input: RouterApiMethodTypes['readActiveEmailOtpEnrollment']['input']): Promise<RouterApiMethodTypes['readActiveEmailOtpEnrollment']['result']>;
     setupWalletRegistration(input: WalletRegistrationSetupInput): Promise<RouteResponse>;
-    respondWalletRegistration(input: WalletRegistrationRespondInput, traceContext?: RouterAbTraceContextV1, serverTiming?: Array<readonly [string, number]>): Promise<WalletRegistrationRespondResponseV2>;
+    respondWalletRegistration(input: WalletRegistrationRespondInput, traceContext?: RouterAbTraceContextV1, serverTiming?: Array<readonly [string, number]>, waitUntil?: (promise: Promise<unknown>) => void): Promise<WalletRegistrationRespondResponseV2>;
     authorizeWalletRegistrationNearAdmission(input: WalletRegistrationNearAdmissionInput): Promise<WalletRegistrationNearAdmissionResponseV2>;
     activateWalletRegistration(input: WalletRegistrationActivateInput, traceContext?: RouterAbTraceContextV1, serverTiming?: Array<readonly [string, number]>): Promise<WalletRegistrationActivateResponseV2>;
     completeWalletRegistrationNearProvisioning(input: WalletRegistrationNearProvisioningInput, serverTiming?: Array<readonly [string, number]>, waitUntil?: (promise: Promise<unknown>) => void): Promise<WalletRegistrationNearProvisioningResponseV2>;

package/dist/types/wallet-server/src/storage/d1Retry.d.ts

@@ -0,0 +1,10 @@
+export declare function isTransientD1Error(error: unknown): boolean;
+/**
+ * Runs `operation` again after a transient D1 fault. Such a fault does not say
+ * whether a write committed, so `operation` must give the same result when it
+ * runs after its own earlier commit: reads, `INSERT OR IGNORE`, and conditional
+ * writes that accept their own outcome. It must build its statements on each
+ * run. Every other error, and the last transient one, reaches the caller.
+ */
+export declare function retryTransientD1<T>(operation: () => Promise<T>): Promise<T>;
+//# sourceMappingURL=d1Retry.d.ts.map

package/migrations/d1-signer/0078_registration_passkey_claims.sql

@@ -0,0 +1,20 @@
+-- A passkey ownership claim that shared authority granted for one registration
+-- ceremony before its finalization. Finalization reads the row and skips its
+-- own claim request. A missing row means only that finalization claims again.
+CREATE TABLE registration_passkey_claims (
+  namespace TEXT NOT NULL,
+  org_id TEXT NOT NULL,
+  project_id TEXT NOT NULL,
+  env_id TEXT NOT NULL,
+  registration_ceremony_id TEXT NOT NULL,
+  wallet_id TEXT NOT NULL,
+  rp_id TEXT NOT NULL,
+  credential_id_b64u TEXT NOT NULL,
+  claimed_at_ms INTEGER NOT NULL,
+  PRIMARY KEY (namespace, org_id, project_id, env_id, registration_ceremony_id)
+);
+
+-- Shared authority never reassigns a claim, so a recorded claim never changes.
+CREATE TRIGGER registration_passkey_claims_immutable
+BEFORE UPDATE ON registration_passkey_claims
+BEGIN SELECT RAISE(ABORT, 'registration_passkey_claims_immutable'); END;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@seams/wallet-server",
-  "version": "0.9.2",
+  "version": "0.9.4",
   "type": "module",
   "description": "Seams server TypeScript SDK for NEAR and EVM-family wallets",
   "main": "./dist/esm/index.js",