@avow-finance/sdk 0.0.0-stage → 0.2.0

package/dist/sandbox/vault.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vault.js","sourceRoot":"","sources":["../../src/sandbox/vault.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,UAAU,EAAY,UAAU,EAAE,KAAK,EAAE,MAAM,MAAM,CAAA;AAiB5E,mDAAmD;AACnD,MAAM,CAAC,MAAM,cAAc,GAAG,EAAE,CAAA;AAEhC,mGAAmG;AACnG,MAAM,UAAU,GAAG,OAAO,CAAA;AAE1B,iGAAiG;AACjG,MAAM,OAAO,GAAG,CAAC,OAAgB,EAAE,EAAE,CACnC,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,6BAA6B,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAA;AAEhF,KAAK,UAAU,OAAO,CAAC,UAAkB,EAAE,IAAgB,EAAE,UAAkB;IAC7E,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5C,KAAK,EACL,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,UAAU,CAAC,EACpC,QAAQ,EACR,KAAK,EACL,CAAC,WAAW,CAAC,CACd,CAAA;IACD,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,EACrD,QAAQ,EACR,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,EAChC,KAAK,EACL,CAAC,SAAS,EAAE,SAAS,CAAC,CACvB,CAAA;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,UAAe,EACf,UAAkB,EAClB,OAAgB;IAEhB,IAAI,UAAU,CAAC,MAAM,GAAG,cAAc,EAAE,CAAC;QACvC,MAAM,IAAI,UAAU,CAAC,iCAAiC,cAAc,aAAa,CAAC,CAAA;IACpF,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IACvD,MAAM,EAAE,GAAG,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAA;IACrD,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,IAAI,EAAE,UAAU,CAAC,CAAA;IACvD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CACxC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EACzD,GAAG,EACH,UAAU,CAAC,UAAU,CAAC,CACvB,CAAA;IACD,OAAO;QACL,GAAG,EAAE,eAAe;QACpB,UAAU,EAAE,UAAU;QACtB,IAAI,EAAE,UAAU,CAAC,IAAI,CAAC;QACtB,MAAM,EAAE,aAAa;QACrB,EAAE,EAAE,UAAU,CAAC,EAAE,CAAC;QAClB,UAAU,EAAE,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;KAC/C,CAAA;AACH,CAAC;AAED,6FAA6F;AAC7F,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,MAAiB,EACjB,UAAkB,EAClB,OAAgB;IAEhB,IAAI,MAAmB,CAAA;IACvB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC,CAAA;QACjF,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,OAAO,CAClC,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,OAAO,CAAC,EAAE,EAChF,GAAG,EACH,UAAU,CAAC,MAAM,CAAC,UAAU,CAAC,CAC9B,CAAA;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAA;IACpE,CAAC;IACD,OAAO,UAAU,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAA;AAC3C,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,WAAW,CAAC,CAAU;IACpC,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IACrD,MAAM,CAAC,GAAG,CAA4B,CAAA;IACtC,OAAO,CACL,CAAC,CAAC,GAAG,KAAK,eAAe;QACzB,CAAC,CAAC,MAAM,KAAK,aAAa;QAC1B,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ;QAChC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC;QAC9B,CAAC,CAAC,UAAU,IAAI,OAAO;QACvB,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,CAC7E,CAAA;AACH,CAAC"}

package/dist/send.d.ts

@@ -0,0 +1,122 @@
+import { type Account, type Chain, type Client, type Hex, type TransactionReceipt, type Transport } from 'viem';
+import type { Call } from './lock.js';
+/** How hard the sender tries before it gives up. */
+export interface SendLimits {
+    /** How many times it prepares a transaction the node refuses, a few seconds apart. */
+    prepareTries: number;
+    /** How many times it sends the same signed bytes while the node answers with an error. */
+    sendTries: number;
+    /** How many times it signs, when each transaction before expired in no block. */
+    signings: number;
+    /** Milliseconds between tries and between reads of the chain. */
+    wait: number;
+    /** Milliseconds it waits for one transaction's outcome before it gives up, not knowing it. */
+    receiptTimeout: number;
+}
+export declare const SEND_LIMITS: SendLimits;
+/**
+ * Why a send failed, with the hash of every transaction it sent and how many the key signed. Its
+ * outcome is `failed` when nothing it sent took effect or still can, and `unknown` when a
+ * transaction may have landed, so the caller has to read the chain before acting again. A `failed`
+ * after signing assumes nobody sent the signed transaction but the sender, which the relay's
+ * contract promises.
+ */
+export declare class SendError extends Error {
+    readonly outcome: 'failed' | 'unknown';
+    /** The hash of every transaction the sender sent, each of them one the key signed. */
+    readonly hashes: readonly Hex[];
+    readonly signings: number;
+    /** Another hash the node answered a send with, which may name any transaction. */
+    readonly answered: Hex | null;
+    /** Where the send stopped, or null when the thrower didn't say. */
+    readonly stage: SendStage | null;
+    constructor(message: string, outcome: 'failed' | 'unknown', sent: {
+        hashes: readonly Hex[];
+        signings: number;
+        answered?: Hex;
+    }, options?: {
+        cause?: unknown;
+        stage?: SendStage;
+    });
+}
+/**
+ * Where a send stopped. `prepare` is the node refusing to prepare it, a revert there included.
+ * `head` is the node not giving its latest block, `relay` Avow's relay not co-signing, and
+ * `altered` the relay handing back other bytes than the transaction the key signed. `submit` is
+ * the node never taking it, and `expired` a transaction that expired in no block. `landed` is one
+ * that landed and reverted, or whose outcome after landing the chain didn't show in time.
+ */
+export type SendStage = 'prepare' | 'head' | 'relay' | 'altered' | 'submit' | 'expired' | 'landed';
+/** The send error somewhere in an error's causes, such as inside a booking's error. */
+export declare function sendErrorIn(error: unknown): SendError | null;
+/** Whether a transaction a sender sent landed and reverted, somewhere in an error's causes. */
+export declare function landedReverted(error: unknown): boolean;
+/**
+ * Why the relay's bytes aren't the transaction the key signed with a fee payer's signature added,
+ * or null when they are. The payload the key signed has to be the same in both, which covers every
+ * call with its destination, data and value, the nonce, the validity window, the gas and fees, and
+ * any key authorization, and the key's signature has to be the same too. Only the fee token, which
+ * a sender doesn't sign, and the fee payer's signature may differ.
+ */
+export declare function cosignProblem(signed: Hex, cosigned: Hex): string | null;
+/**
+ * How much gas a sponsored transaction asks for beyond the node's estimate, in percent. Tempo's
+ * estimate for a business's first reserve leaves little room, and the relay pays only up to the
+ * gas limit the key signed, so a little headroom lets a run that needs slightly more land.
+ */
+export declare const SPONSORED_GAS_HEADROOM_PERCENT = 15n;
+/**
+ * A gas estimate with the sponsored headroom added, rounded up, and held to the relay's gas cap,
+ * so the headroom never turns a transaction the relay would pay for into one over its cap. An
+ * estimate already at or over the cap stays as it is, so the relay's refusal names the real need.
+ */
+export declare function withGasHeadroom(gas: bigint, cap?: bigint): bigint;
+/** Called with each transaction's hash and `validBefore` before its bytes go to the node. */
+export type OnSent = (hash: Hex, validBefore: bigint | null) => unknown;
+/**
+ * Sends a transaction whose fee Avow's relay pays. The key signs it locally with `feePayer: true`
+ * and a gas limit 15% over the node's estimate, up to the relay's gas cap, the relay co-signs it, and the sender checks the relay's bytes are the transaction the key
+ * signed before sending them and tracking their hash from the start, since the public RPC can
+ * answer with an error after a transaction has landed. viem makes a sponsored transaction valid
+ * for under half a minute. The sender signs again only once it has read every finalized block,
+ * from before the key signed up to one later than that expiry, and found the transaction in none,
+ * up to the limit's number of signings. It throws a `SendError` when the transaction can't be
+ * prepared, lands reverted, never lands, or has an outcome the chain didn't show in time.
+ */
+export declare function sendSponsored(args: {
+    client: Client<Transport, Chain>;
+    account: Account;
+    calls: readonly Call[];
+    /**
+     * Has the relay co-sign the signed transaction and returns the co-signed bytes. It must never
+     * send the transaction itself or pass it on, since anyone holding it could land it until it
+     * expires, and the sender's outcomes assume only the sender sends it.
+     */
+    sponsor: (transaction: Hex) => Promise<Hex>;
+    /** Called with each hash before its bytes go to the node, and awaited. */
+    onSent?: OnSent;
+    limits?: SendLimits;
+    /**
+     * The most gas the relay pays for in this transaction, which the headroom never goes past. A
+     * reserve's cap by default, for a deployment that sets a lower one.
+     */
+    gasCap?: bigint;
+}): Promise<TransactionReceipt>;
+/**
+ * Sends a transaction the account pays its own fee for, as a business account's root key does to
+ * create its lock or approve a supplier, or a supplier does to send its acceptance. It's signed
+ * locally on an expiring nonce and tracked by hash from the start, with every outcome
+ * `sendSponsored` gives, and it can carry a key authorization that puts an agent's key on the
+ * account in the same transaction.
+ */
+export declare function sendOwn(args: {
+    client: Client<Transport, Chain>;
+    account: Account;
+    calls: readonly Call[];
+    /** A key authorization the account's root key signed, as `Account.signKeyAuthorization` gives. */
+    keyAuthorization?: unknown;
+    /** Called with each hash before its bytes go to the node, and awaited. */
+    onSent?: OnSent;
+    limits?: SendLimits;
+}): Promise<TransactionReceipt>;
+//# sourceMappingURL=send.d.ts.map

package/dist/send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../src/send.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,KAAK,OAAO,EACZ,KAAK,KAAK,EACV,KAAK,MAAM,EACX,KAAK,GAAG,EAER,KAAK,kBAAkB,EACvB,KAAK,SAAS,EACf,MAAM,MAAM,CAAA;AASb,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAErC,oDAAoD;AACpD,MAAM,WAAW,UAAU;IACzB,sFAAsF;IACtF,YAAY,EAAE,MAAM,CAAA;IACpB,0FAA0F;IAC1F,SAAS,EAAE,MAAM,CAAA;IACjB,iFAAiF;IACjF,QAAQ,EAAE,MAAM,CAAA;IAChB,iEAAiE;IACjE,IAAI,EAAE,MAAM,CAAA;IACZ,8FAA8F;IAC9F,cAAc,EAAE,MAAM,CAAA;CACvB;AAED,eAAO,MAAM,WAAW,EAAE,UAMzB,CAAA;AAED;;;;;;GAMG;AACH,qBAAa,SAAU,SAAQ,KAAK;IAClC,QAAQ,CAAC,OAAO,EAAE,QAAQ,GAAG,SAAS,CAAA;IACtC,sFAAsF;IACtF,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,EAAE,CAAA;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,kFAAkF;IAClF,QAAQ,CAAC,QAAQ,EAAE,GAAG,GAAG,IAAI,CAAA;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,IAAI,CAAA;IAEhC,YACE,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,QAAQ,GAAG,SAAS,EAC7B,IAAI,EAAE;QAAE,MAAM,EAAE,SAAS,GAAG,EAAE,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,GAAG,CAAA;KAAE,EAClE,OAAO,CAAC,EAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,SAAS,CAAA;KAAE,EASjD;CACF;AAED;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,SAAS,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,GAAG,QAAQ,CAAA;AAElG,uFAAuF;AACvF,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,IAAI,CAO5D;AAED,+FAA+F;AAC/F,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAGtD;AAwED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,GAAG,MAAM,GAAG,IAAI,CAkBvE;AA8HD;;;;GAIG;AACH,eAAO,MAAM,8BAA8B,MAAM,CAAA;AAEjD;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,GAAE,MAAkC,GAAG,MAAM,CAI5F;AAED,6FAA6F;AAC7F,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,GAAG,EAAE,WAAW,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAA;AAEvE;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE;IAClC,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,SAAS,IAAI,EAAE,CAAA;IACtB;;;;OAIG;IACH,OAAO,EAAE,CAAC,WAAW,EAAE,GAAG,KAAK,OAAO,CAAC,GAAG,CAAC,CAAA;IAC3C,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,UAAU,CAAA;IACnB;;;OAGG;IACH,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CA6B9B;AAED;;;;;;GAMG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE;IAC5B,MAAM,EAAE,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IAChC,OAAO,EAAE,OAAO,CAAA;IAChB,KAAK,EAAE,SAAS,IAAI,EAAE,CAAA;IACtB,kGAAkG;IAClG,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,0EAA0E;IAC1E,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,UAAU,CAAA;CACpB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAS9B"}

package/dist/send.js

@@ -0,0 +1,328 @@
+import { SPONSORED_RESERVE_GAS_CAP } from '@avow-finance/spec';
+import { TxEnvelopeTempo } from 'ox/tempo';
+import { keccak256, } from 'viem';
+import { getBlock, getBlockNumber, getTransaction, getTransactionReceipt, prepareTransactionRequest, signTransaction, } from 'viem/actions';
+export const SEND_LIMITS = {
+    prepareTries: 4,
+    sendTries: 4,
+    signings: 3,
+    wait: 2000,
+    receiptTimeout: 180_000,
+};
+/**
+ * Why a send failed, with the hash of every transaction it sent and how many the key signed. Its
+ * outcome is `failed` when nothing it sent took effect or still can, and `unknown` when a
+ * transaction may have landed, so the caller has to read the chain before acting again. A `failed`
+ * after signing assumes nobody sent the signed transaction but the sender, which the relay's
+ * contract promises.
+ */
+export class SendError extends Error {
+    outcome;
+    /** The hash of every transaction the sender sent, each of them one the key signed. */
+    hashes;
+    signings;
+    /** Another hash the node answered a send with, which may name any transaction. */
+    answered;
+    /** Where the send stopped, or null when the thrower didn't say. */
+    stage;
+    constructor(message, outcome, sent, options) {
+        super(message, options?.cause === undefined ? undefined : { cause: options.cause });
+        this.name = 'SendError';
+        this.outcome = outcome;
+        this.hashes = [...sent.hashes];
+        this.signings = sent.signings;
+        this.answered = sent.answered ?? null;
+        this.stage = options?.stage ?? null;
+    }
+}
+/** The send error somewhere in an error's causes, such as inside a booking's error. */
+export function sendErrorIn(error) {
+    let e = error;
+    for (let i = 0; i < 6 && e instanceof Error; i++) {
+        if (e instanceof SendError)
+            return e;
+        e = e.cause;
+    }
+    return null;
+}
+/** Whether a transaction a sender sent landed and reverted, somewhere in an error's causes. */
+export function landedReverted(error) {
+    const stopped = sendErrorIn(error);
+    return stopped?.stage === 'landed' && stopped.outcome === 'failed';
+}
+const sleep = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
+const reason = (e) => (e instanceof Error ? e.message : String(e)).slice(0, 300);
+function checked(limits) {
+    for (const [name, value] of Object.entries(limits)) {
+        if (!Number.isInteger(value) || value < 1) {
+            throw new RangeError(`The send limit ${name} has to be a whole number of at least 1`);
+        }
+    }
+    return limits;
+}
+async function prepare(client, account, calls, fields, limits, sent) {
+    for (let i = 1;; i++) {
+        try {
+            // `calls`, `feePayer`, `nonceKey` and `keyAuthorization` are Tempo's transaction fields,
+            // which viem's generic types omit.
+            return (await prepareTransactionRequest(client, {
+                account,
+                calls,
+                ...fields,
+            }));
+        }
+        catch (error) {
+            // A node a block behind can see a step as not due yet, so a refusal counts once it holds.
+            if (i >= limits.prepareTries) {
+                throw new SendError(`The node refused to prepare the transaction: ${reason(error)}`, 'failed', sent, { cause: error, stage: 'prepare' });
+            }
+            await sleep(limits.wait);
+        }
+    }
+}
+/** The fields a sender signs, named when the relay's bytes change one. */
+const SIGNED_FIELDS = [
+    'chainId',
+    'calls',
+    'nonce',
+    'nonceKey',
+    'validBefore',
+    'validAfter',
+    'gas',
+    'maxFeePerGas',
+    'maxPriorityFeePerGas',
+    'accessList',
+    'authorizationList',
+    'keyAuthorization',
+];
+const same = (a, b) => JSON.stringify(a, (_, v) => (typeof v === 'bigint' ? v.toString() : v)) ===
+    JSON.stringify(b, (_, v) => (typeof v === 'bigint' ? v.toString() : v));
+/**
+ * Why the relay's bytes aren't the transaction the key signed with a fee payer's signature added,
+ * or null when they are. The payload the key signed has to be the same in both, which covers every
+ * call with its destination, data and value, the nonce, the validity window, the gas and fees, and
+ * any key authorization, and the key's signature has to be the same too. Only the fee token, which
+ * a sender doesn't sign, and the fee payer's signature may differ.
+ */
+export function cosignProblem(signed, cosigned) {
+    let before;
+    let after;
+    try {
+        before = TxEnvelopeTempo.deserialize(signed);
+        after = TxEnvelopeTempo.deserialize(cosigned);
+    }
+    catch {
+        return "the bytes aren't a Tempo transaction";
+    }
+    if (!after.feePayerSignature)
+        return 'they carry no fee payer signature';
+    if (!before.signature || !same(before.signature, after.signature)) {
+        return "they change the key's signature";
+    }
+    if (TxEnvelopeTempo.getSignPayload(before) !== TxEnvelopeTempo.getSignPayload(after)) {
+        const changed = SIGNED_FIELDS.find((field) => !same(before[field], after[field]));
+        return `they change what the key signed${changed ? `, its ${changed} among it` : ''}`;
+    }
+    return null;
+}
+/**
+ * Sends the bytes, and returns null once the node has them, or the node's last error when it
+ * never took them. The public RPC can answer with an error after taking a transaction, so an
+ * error counts only while the node doesn't know the hash. The same bytes are the same
+ * transaction, so sending them again never sends a second one.
+ */
+async function submit(client, bytes, hash, limits, sent) {
+    let last = null;
+    for (let i = 0; i < limits.sendTries; i++) {
+        try {
+            const answer = await client.request({ method: 'eth_sendRawTransaction', params: [bytes] });
+            if (typeof answer === 'string' && answer.toLowerCase() !== hash.toLowerCase()) {
+                throw new SendError(`The node answered with the hash ${answer}, not ${hash}`, 'unknown', { ...sent, answered: answer }, { stage: 'submit' });
+            }
+            return null;
+        }
+        catch (error) {
+            if (error instanceof SendError)
+                throw error;
+            last = error;
+        }
+        await sleep(limits.wait);
+        if (await getTransaction(client, { hash }).catch(() => null))
+            return null;
+    }
+    return last ?? new Error('The node never took the transaction');
+}
+/** The latest block's number, read again while the node answers with an error. */
+async function latestBlock(client, limits, sent) {
+    for (let i = 1;; i++) {
+        try {
+            return await getBlockNumber(client, { cacheTime: 0 });
+        }
+        catch (error) {
+            if (i >= limits.prepareTries) {
+                throw new SendError(`The node didn't give its latest block: ${reason(error)}`, 'failed', sent, {
+                    cause: error,
+                    stage: 'head',
+                });
+            }
+            await sleep(limits.wait);
+        }
+    }
+}
+/**
+ * Waits for a transaction's outcome. It looks for the receipt, and reads each block by number for
+ * the transaction's hash, from the block the node was at before the key signed. It reads only
+ * blocks at or below the chain's finalized block, which no later answer can change, and a block
+ * read by number comes whole or not at all, so a node that's behind can't hide a block. Each block
+ * has to name the one read before it as its parent, or the scan starts again. A failed or missing
+ * read stops the scan at that block until a later read gets it. Once the scan reads a block
+ * later than the transaction's expiry, and no block before it held the hash, the transaction never
+ * landed and no later block can include it. Tempo only includes a transaction in a block before its
+ * `validBefore`, and a block later than it counts here, one second more cautious than that rule.
+ */
+async function outcomeOf(client, hash, from, validBefore, limits, sent) {
+    const deadline = Date.now() + limits.receiptTimeout;
+    const late = () => Date.now() > deadline;
+    const wanted = hash.toLowerCase();
+    let next = from;
+    let parent = null;
+    let includedIn = null;
+    for (;;) {
+        const receipt = await getTransactionReceipt(client, { hash }).catch(() => null);
+        if (receipt)
+            return receipt;
+        if (validBefore !== undefined && includedIn === null) {
+            const final = await getBlock(client, { blockTag: 'finalized' }).catch(() => null);
+            while (final && next <= final.number && includedIn === null && !late()) {
+                const block = await getBlock(client, { blockNumber: next }).catch(() => null);
+                if (!block)
+                    break;
+                // Each block has to follow the one read before it. One that doesn't means the blocks
+                // read so far weren't all one chain, so the scan starts again.
+                if (parent !== null && block.parentHash.toLowerCase() !== parent.toLowerCase()) {
+                    next = from;
+                    parent = null;
+                    break;
+                }
+                if (block.transactions.some((t) => String(t).toLowerCase() === wanted))
+                    includedIn = next;
+                else if (block.timestamp > BigInt(validBefore))
+                    return 'expired';
+                else {
+                    parent = block.hash;
+                    next++;
+                }
+            }
+        }
+        if (late()) {
+            throw new SendError(includedIn === null
+                ? `No receipt for ${hash} after waiting, so whether it landed is unknown`
+                : `${hash} landed in block ${includedIn}, but its receipt never came, so its outcome is unknown`, 'unknown', sent, { stage: 'landed' });
+        }
+        await sleep(limits.wait);
+    }
+}
+/**
+ * How much gas a sponsored transaction asks for beyond the node's estimate, in percent. Tempo's
+ * estimate for a business's first reserve leaves little room, and the relay pays only up to the
+ * gas limit the key signed, so a little headroom lets a run that needs slightly more land.
+ */
+export const SPONSORED_GAS_HEADROOM_PERCENT = 15n;
+/**
+ * A gas estimate with the sponsored headroom added, rounded up, and held to the relay's gas cap,
+ * so the headroom never turns a transaction the relay would pay for into one over its cap. An
+ * estimate already at or over the cap stays as it is, so the relay's refusal names the real need.
+ */
+export function withGasHeadroom(gas, cap = SPONSORED_RESERVE_GAS_CAP) {
+    if (gas >= cap)
+        return gas;
+    const padded = (gas * (100n + SPONSORED_GAS_HEADROOM_PERCENT) + 99n) / 100n;
+    return padded < cap ? padded : cap;
+}
+/**
+ * Sends a transaction whose fee Avow's relay pays. The key signs it locally with `feePayer: true`
+ * and a gas limit 15% over the node's estimate, up to the relay's gas cap, the relay co-signs it, and the sender checks the relay's bytes are the transaction the key
+ * signed before sending them and tracking their hash from the start, since the public RPC can
+ * answer with an error after a transaction has landed. viem makes a sponsored transaction valid
+ * for under half a minute. The sender signs again only once it has read every finalized block,
+ * from before the key signed up to one later than that expiry, and found the transaction in none,
+ * up to the limit's number of signings. It throws a `SendError` when the transaction can't be
+ * prepared, lands reverted, never lands, or has an outcome the chain didn't show in time.
+ */
+export function sendSponsored(args) {
+    const cap = args.gasCap ?? SPONSORED_RESERVE_GAS_CAP;
+    if (cap < 1n)
+        throw new RangeError('The sponsored gas cap has to be at least 1');
+    return send(args, { feePayer: true }, (gas) => withGasHeadroom(gas, cap), async (signed, sent) => {
+        let bytes;
+        try {
+            bytes = await args.sponsor(signed);
+        }
+        catch (error) {
+            throw new SendError(`The relay didn't co-sign: ${reason(error)}`, 'failed', sent, {
+                cause: error,
+                stage: 'relay',
+            });
+        }
+        const problem = cosignProblem(signed, bytes);
+        if (problem) {
+            throw new SendError(`The relay's bytes aren't the transaction the key signed: ${problem}`, 'failed', sent, { stage: 'altered' });
+        }
+        return bytes;
+    });
+}
+/**
+ * Sends a transaction the account pays its own fee for, as a business account's root key does to
+ * create its lock or approve a supplier, or a supplier does to send its acceptance. It's signed
+ * locally on an expiring nonce and tracked by hash from the start, with every outcome
+ * `sendSponsored` gives, and it can carry a key authorization that puts an agent's key on the
+ * account in the same transaction.
+ */
+export function sendOwn(args) {
+    const fields = { nonceKey: 'expiring' };
+    if (args.keyAuthorization !== undefined)
+        fields.keyAuthorization = args.keyAuthorization;
+    return send(args, fields, (gas) => gas, async (signed) => signed);
+}
+/**
+ * The send both senders share. `gasFor` turns the node's gas estimate into the gas limit the key
+ * signs, and `finish` turns the bytes the key signed into the bytes that go to the node, and throws
+ * a `SendError` when it can't.
+ */
+async function send(args, fields, gasFor, finish) {
+    const limits = checked(args.limits ?? SEND_LIMITS);
+    const sent = { hashes: [], signings: 0 };
+    for (;;) {
+        const request = await prepare(args.client, args.account, args.calls, fields, limits, sent);
+        // Read before the key signs, so no block that could hold the transaction comes before it.
+        const from = await latestBlock(args.client, limits, sent);
+        const signed = await signTransaction(args.client, {
+            ...request,
+            ...(request.gas === undefined ? {} : { gas: gasFor(request.gas) }),
+            account: args.account,
+        });
+        sent.signings++;
+        const bytes = await finish(signed, sent);
+        const hash = keccak256(bytes);
+        sent.hashes.push(hash);
+        await args.onSent?.(hash, request.validBefore === undefined ? null : BigInt(request.validBefore));
+        const refused = await submit(args.client, bytes, hash, limits, sent);
+        const outcome = await outcomeOf(args.client, hash, from, request.validBefore, limits, sent);
+        if (outcome !== 'expired') {
+            if (outcome.status !== 'success') {
+                throw new SendError(`The transaction ${hash} reverted`, 'failed', sent, { stage: 'landed' });
+            }
+            return outcome;
+        }
+        if (refused !== null) {
+            throw new SendError(`The node never took the transaction: ${reason(refused)}`, 'failed', sent, {
+                cause: refused,
+                stage: 'submit',
+            });
+        }
+        if (sent.signings >= limits.signings) {
+            throw new SendError(`The transaction expired in no block, ${sent.signings} times`, 'failed', sent, { stage: 'expired' });
+        }
+    }
+}
+//# sourceMappingURL=send.js.map

package/dist/send.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.js","sourceRoot":"","sources":["../src/send.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAC1C,OAAO,EAKL,SAAS,GAGV,MAAM,MAAM,CAAA;AACb,OAAO,EACL,QAAQ,EACR,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,yBAAyB,EACzB,eAAe,GAChB,MAAM,cAAc,CAAA;AAiBrB,MAAM,CAAC,MAAM,WAAW,GAAe;IACrC,YAAY,EAAE,CAAC;IACf,SAAS,EAAE,CAAC;IACZ,QAAQ,EAAE,CAAC;IACX,IAAI,EAAE,IAAI;IACV,cAAc,EAAE,OAAO;CACxB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,OAAO,SAAU,SAAQ,KAAK;IACzB,OAAO,CAAsB;IACtC,sFAAsF;IAC7E,MAAM,CAAgB;IACtB,QAAQ,CAAQ;IACzB,kFAAkF;IACzE,QAAQ,CAAY;IAC7B,mEAAmE;IAC1D,KAAK,CAAkB;IAEhC,YACE,OAAe,EACf,OAA6B,EAC7B,IAAkE,EAClE,OAAgD;QAEhD,KAAK,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAA;QACnF,IAAI,CAAC,IAAI,GAAG,WAAW,CAAA;QACvB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,MAAM,CAAC,CAAA;QAC9B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC7B,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAA;QACrC,IAAI,CAAC,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,IAAI,CAAA;IACrC,CAAC;CACF;AAWD,uFAAuF;AACvF,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,CAAC,GAAY,KAAK,CAAA;IACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,YAAY,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;QACjD,IAAI,CAAC,YAAY,SAAS;YAAE,OAAO,CAAC,CAAA;QACpC,CAAC,GAAG,CAAC,CAAC,KAAK,CAAA;IACb,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,+FAA+F;AAC/F,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,MAAM,OAAO,GAAG,WAAW,CAAC,KAAK,CAAC,CAAA;IAClC,OAAO,OAAO,EAAE,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,OAAO,KAAK,QAAQ,CAAA;AACpE,CAAC;AAQD,MAAM,KAAK,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AAC/E,MAAM,MAAM,GAAG,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AAEzF,SAAS,OAAO,CAAC,MAAkB;IACjC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QACnD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YAC1C,MAAM,IAAI,UAAU,CAAC,kBAAkB,IAAI,yCAAyC,CAAC,CAAA;QACvF,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAA;AACf,CAAC;AAED,KAAK,UAAU,OAAO,CACpB,MAAgC,EAChC,OAAgB,EAChB,KAAsB,EACtB,MAA+B,EAC/B,MAAkB,EAClB,IAAU;IAEV,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,yFAAyF;YACzF,mCAAmC;YACnC,OAAO,CAAC,MAAM,yBAAyB,CAAC,MAAM,EAAE;gBAC9C,OAAO;gBACP,KAAK;gBACL,GAAG,MAAM;aACD,CAAC,CAA2C,CAAA;QACxD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,0FAA0F;YAC1F,IAAI,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7B,MAAM,IAAI,SAAS,CACjB,gDAAgD,MAAM,CAAC,KAAK,CAAC,EAAE,EAC/D,QAAQ,EACR,IAAI,EACJ,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CACnC,CAAA;YACH,CAAC;YACD,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;AACH,CAAC;AAED,0EAA0E;AAC1E,MAAM,aAAa,GAAG;IACpB,SAAS;IACT,OAAO;IACP,OAAO;IACP,UAAU;IACV,aAAa;IACb,YAAY;IACZ,KAAK;IACL,cAAc;IACd,sBAAsB;IACtB,YAAY;IACZ,mBAAmB;IACnB,kBAAkB;CACV,CAAA;AAEV,MAAM,IAAI,GAAG,CAAC,CAAU,EAAE,CAAU,EAAE,EAAE,CACtC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACvE,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAEzE;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,MAAW,EAAE,QAAa;IACtD,IAAI,MAAuC,CAAA;IAC3C,IAAI,KAAsC,CAAA;IAC1C,IAAI,CAAC;QACH,MAAM,GAAG,eAAe,CAAC,WAAW,CAAC,MAAoC,CAAC,CAAA;QAC1E,KAAK,GAAG,eAAe,CAAC,WAAW,CAAC,QAAsC,CAAC,CAAA;IAC7E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,sCAAsC,CAAA;IAC/C,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,iBAAiB;QAAE,OAAO,mCAAmC,CAAA;IACxE,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAClE,OAAO,iCAAiC,CAAA;IAC1C,CAAC;IACD,IAAI,eAAe,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,eAAe,CAAC,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;QACrF,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAA;QACjF,OAAO,kCAAkC,OAAO,CAAC,CAAC,CAAC,SAAS,OAAO,WAAW,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;IACvF,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,MAAM,CACnB,MAAgC,EAChC,KAAU,EACV,IAAS,EACT,MAAkB,EAClB,IAAU;IAEV,IAAI,IAAI,GAAY,IAAI,CAAA;IACxB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,wBAAwB,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAA;YAC1F,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;gBAC9E,MAAM,IAAI,SAAS,CACjB,mCAAmC,MAAM,SAAS,IAAI,EAAE,EACxD,SAAS,EACT,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,MAAa,EAAE,EACpC,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAA;YACH,CAAC;YACD,OAAO,IAAI,CAAA;QACb,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,SAAS;gBAAE,MAAM,KAAK,CAAA;YAC3C,IAAI,GAAG,KAAK,CAAA;QACd,CAAC;QACD,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QACxB,IAAI,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAA;IAC3E,CAAC;IACD,OAAO,IAAI,IAAI,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAA;AACjE,CAAC;AAED,kFAAkF;AAClF,KAAK,UAAU,WAAW,CACxB,MAAgC,EAChC,MAAkB,EAClB,IAAU;IAEV,KAAK,IAAI,CAAC,GAAG,CAAC,GAAI,CAAC,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,OAAO,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;QACvD,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,IAAI,MAAM,CAAC,YAAY,EAAE,CAAC;gBAC7B,MAAM,IAAI,SAAS,CACjB,0CAA0C,MAAM,CAAC,KAAK,CAAC,EAAE,EACzD,QAAQ,EACR,IAAI,EACJ;oBACE,KAAK,EAAE,KAAK;oBACZ,KAAK,EAAE,MAAM;iBACd,CACF,CAAA;YACH,CAAC;YACD,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;QAC1B,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,KAAK,UAAU,SAAS,CACtB,MAAgC,EAChC,IAAS,EACT,IAAY,EACZ,WAA+B,EAC/B,MAAkB,EAClB,IAAU;IAEV,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,cAAc,CAAA;IACnD,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAA;IACxC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAA;IACjC,IAAI,IAAI,GAAG,IAAI,CAAA;IACf,IAAI,MAAM,GAAe,IAAI,CAAA;IAC7B,IAAI,UAAU,GAAkB,IAAI,CAAA;IACpC,SAAS,CAAC;QACR,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;QAC/E,IAAI,OAAO;YAAE,OAAO,OAAO,CAAA;QAC3B,IAAI,WAAW,KAAK,SAAS,IAAI,UAAU,KAAK,IAAI,EAAE,CAAC;YACrD,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;YACjF,OAAO,KAAK,IAAI,IAAI,IAAI,KAAK,CAAC,MAAM,IAAI,UAAU,KAAK,IAAI,IAAI,CAAC,IAAI,EAAE,EAAE,CAAC;gBACvE,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,CAAA;gBAC7E,IAAI,CAAC,KAAK;oBAAE,MAAK;gBACjB,qFAAqF;gBACrF,+DAA+D;gBAC/D,IAAI,MAAM,KAAK,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,WAAW,EAAE,EAAE,CAAC;oBAC/E,IAAI,GAAG,IAAI,CAAA;oBACX,MAAM,GAAG,IAAI,CAAA;oBACb,MAAK;gBACP,CAAC;gBACD,IAAI,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;oBAAE,UAAU,GAAG,IAAI,CAAA;qBACpF,IAAI,KAAK,CAAC,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC;oBAAE,OAAO,SAAS,CAAA;qBAC3D,CAAC;oBACJ,MAAM,GAAG,KAAK,CAAC,IAAI,CAAA;oBACnB,IAAI,EAAE,CAAA;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QACD,IAAI,IAAI,EAAE,EAAE,CAAC;YACX,MAAM,IAAI,SAAS,CACjB,UAAU,KAAK,IAAI;gBACjB,CAAC,CAAC,kBAAkB,IAAI,iDAAiD;gBACzE,CAAC,CAAC,GAAG,IAAI,oBAAoB,UAAU,yDAAyD,EAClG,SAAS,EACT,IAAI,EACJ,EAAE,KAAK,EAAE,QAAQ,EAAE,CACpB,CAAA;QACH,CAAC;QACD,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAA;IAC1B,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAAG,GAAG,CAAA;AAEjD;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW,EAAE,GAAG,GAAW,yBAAyB;IAClF,IAAI,GAAG,IAAI,GAAG;QAAE,OAAO,GAAG,CAAA;IAC1B,MAAM,MAAM,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,GAAG,8BAA8B,CAAC,GAAG,GAAG,CAAC,GAAG,IAAI,CAAA;IAC3E,OAAO,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAA;AACpC,CAAC;AAKD;;;;;;;;;GASG;AACH,MAAM,UAAU,aAAa,CAAC,IAkB7B;IACC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,yBAAyB,CAAA;IACpD,IAAI,GAAG,GAAG,EAAE;QAAE,MAAM,IAAI,UAAU,CAAC,4CAA4C,CAAC,CAAA;IAChF,OAAO,IAAI,CACT,IAAI,EACJ,EAAE,QAAQ,EAAE,IAAI,EAAE,EAClB,CAAC,GAAG,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,EAAE,GAAG,CAAC,EAClC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,KAAU,CAAA;QACd,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAA;QACpC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,SAAS,CAAC,6BAA6B,MAAM,CAAC,KAAK,CAAC,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE;gBAChF,KAAK,EAAE,KAAK;gBACZ,KAAK,EAAE,OAAO;aACf,CAAC,CAAA;QACJ,CAAC;QACD,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,EAAE,KAAK,CAAC,CAAA;QAC5C,IAAI,OAAO,EAAE,CAAC;YACZ,MAAM,IAAI,SAAS,CACjB,4DAA4D,OAAO,EAAE,EACrE,QAAQ,EACR,IAAI,EACJ,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAA;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC,CACF,CAAA;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,OAAO,CAAC,IASvB;IACC,MAAM,MAAM,GAA4B,EAAE,QAAQ,EAAE,UAAU,EAAE,CAAA;IAChE,IAAI,IAAI,CAAC,gBAAgB,KAAK,SAAS;QAAE,MAAM,CAAC,gBAAgB,GAAG,IAAI,CAAC,gBAAgB,CAAA;IACxF,OAAO,IAAI,CACT,IAAI,EACJ,MAAM,EACN,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,EACZ,KAAK,EAAE,MAAM,EAAE,EAAE,CAAC,MAAM,CACzB,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,IAAI,CACjB,IAMC,EACD,MAA+B,EAC/B,MAAoC,EACpC,MAAiD;IAEjD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,WAAW,CAAC,CAAA;IAClD,MAAM,IAAI,GAAS,EAAE,MAAM,EAAE,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE,CAAA;IAC9C,SAAS,CAAC;QACR,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAC1F,0FAA0F;QAC1F,MAAM,IAAI,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QACzD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,MAAM,EAAE;YAChD,GAAG,OAAO;YACV,GAAG,CAAC,OAAO,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,OAAO,EAAE,IAAI,CAAC,OAAO;SACb,CAAC,CAAA;QACX,IAAI,CAAC,QAAQ,EAAE,CAAA;QACf,MAAM,KAAK,GAAG,MAAM,MAAM,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;QACxC,MAAM,IAAI,GAAG,SAAS,CAAC,KAAK,CAAC,CAAA;QAC7B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACtB,MAAM,IAAI,CAAC,MAAM,EAAE,CACjB,IAAI,EACJ,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,CACvE,CAAA;QACD,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QACpE,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;QAC3F,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACjC,MAAM,IAAI,SAAS,CAAC,mBAAmB,IAAI,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAA;YAC9F,CAAC;YACD,OAAO,OAAO,CAAA;QAChB,CAAC;QACD,IAAI,OAAO,KAAK,IAAI,EAAE,CAAC;YACrB,MAAM,IAAI,SAAS,CACjB,wCAAwC,MAAM,CAAC,OAAO,CAAC,EAAE,EACzD,QAAQ,EACR,IAAI,EACJ;gBACE,KAAK,EAAE,OAAO;gBACd,KAAK,EAAE,QAAQ;aAChB,CACF,CAAA;QACH,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;YACrC,MAAM,IAAI,SAAS,CACjB,wCAAwC,IAAI,CAAC,QAAQ,QAAQ,EAC7D,QAAQ,EACR,IAAI,EACJ,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAA;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/service-entry.d.ts

@@ -0,0 +1,6 @@
+/**
+ * What a developer's `service.ts` imports: `defineService`, the verdicts `checkBeforeWork` returns,
+ * and their types. It holds nothing that signs or moves money.
+ */
+export { type CommitmentCheck, defineService, dontStart, type ReservedJob, type Service, type ServiceChecks, type ServiceFile, start, type Verdict, } from './session/service.js';
+//# sourceMappingURL=service-entry.d.ts.map

package/dist/service-entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-entry.d.ts","sourceRoot":"","sources":["../src/service-entry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EACL,KAAK,eAAe,EACpB,aAAa,EACb,SAAS,EACT,KAAK,WAAW,EAChB,KAAK,OAAO,EACZ,KAAK,aAAa,EAClB,KAAK,WAAW,EAChB,KAAK,EACL,KAAK,OAAO,GACb,MAAM,sBAAsB,CAAA"}

package/dist/service-entry.js

@@ -0,0 +1,6 @@
+/**
+ * What a developer's `service.ts` imports: `defineService`, the verdicts `checkBeforeWork` returns,
+ * and their types. It holds nothing that signs or moves money.
+ */
+export { defineService, dontStart, start, } from './session/service.js';
+//# sourceMappingURL=service-entry.js.map

package/dist/service-entry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"service-entry.js","sourceRoot":"","sources":["../src/service-entry.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAEL,aAAa,EACb,SAAS,EAKT,KAAK,GAEN,MAAM,sBAAsB,CAAA"}

package/dist/session/anthropic.d.ts

@@ -0,0 +1,17 @@
+import { type ModelProvider } from './provider.js';
+/**
+ * A Claude model through Anthropic's Messages API, with the developer's own key. Every call is
+ * billed to that key, so the session runs it only when the developer chose it.
+ */
+/** The model the session asks for when the developer names none. */
+export declare const ANTHROPIC_MODEL = "claude-sonnet-5-5";
+/**
+ * A Claude model, through the Messages API with tools and streaming. The key comes from the
+ * environment the session runs in and goes only to Anthropic, in the request's header.
+ */
+export declare function anthropicProvider(options: {
+    apiKey: string;
+    model?: string;
+    fetch?: typeof fetch;
+}): ModelProvider;
+//# sourceMappingURL=anthropic.d.ts.map

package/dist/session/anthropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../src/session/anthropic.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,aAAa,EAKnB,MAAM,eAAe,CAAA;AAEtB;;;GAGG;AAEH,oEAAoE;AACpE,eAAO,MAAM,eAAe,sBAAsB,CAAA;AAgGlD;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE;IACzC,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;CACrB,GAAG,aAAa,CAkIhB"}