@bananapus/nana-sdk-core 2.12.2 → 2.13.0

package/dist/cjs/bendystrawOperations.d.ts

@@ -0,0 +1,38 @@
+import { type BendystrawNetwork } from "./utils/bendystraw.js";
+export type BendystrawOperationContract = {
+    operationName?: string;
+    validateData: (value: unknown) => value is Record<string, unknown>;
+    validateVariables: (value: unknown) => value is Record<string, unknown>;
+};
+/**
+ * Compile one static GraphQL document into the same runtime operation contract
+ * used by every Bendystraw transport: operation name, bounded variables, and
+ * recursive response-shape validation.
+ */
+export declare function compileBendystrawOperation(query: string): BendystrawOperationContract;
+/** The persisted-operation id a same-origin Bendystraw proxy accepts: the SHA-256 of the exact document. */
+export declare function bendystrawOperationId(query: string): Promise<string>;
+export type PersistedBendystrawRequest = {
+    query: string;
+    variables: Record<string, unknown>;
+};
+/**
+ * Resolve a proxy request body (`{ operation, variables }`) against the app's
+ * registry of persisted documents. Anything else, including an unknown id, is
+ * refused with null, so the proxy never forwards arbitrary GraphQL.
+ */
+export declare function resolvePersistedBendystrawRequest(value: unknown, registry: Readonly<Record<string, string>>): PersistedBendystrawRequest | null;
+/**
+ * Send one persisted operation through the app's same-origin proxy
+ * (`/api/bendystraw/{network}/query` unless `endpoint` says otherwise). Only
+ * the operation id and variables leave the browser; the response is validated
+ * against the document's contract.
+ */
+export declare function requestPersistedBendystraw<T>(args: {
+    contract: BendystrawOperationContract;
+    network: BendystrawNetwork;
+    query: string;
+    variables: Record<string, unknown>;
+    endpoint?: string;
+}): Promise<T>;
+//# sourceMappingURL=bendystrawOperations.d.ts.map

package/dist/cjs/bendystrawOperations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"bendystrawOperations.d.ts","sourceRoot":"","sources":["../../src/bendystrawOperations.ts"],"names":[],"mappings":"AAQA,OAAO,EAEL,KAAK,iBAAiB,EACvB,MAAM,uBAAuB,CAAC;AAE/B,MAAM,MAAM,2BAA2B,GAAG;IACxC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnE,iBAAiB,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACzE,CAAC;AAwJF;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,KAAK,EAAE,MAAM,GACZ,2BAA2B,CAiD7B;AAED,4GAA4G;AAC5G,wBAAsB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS1E;AAED,MAAM,MAAM,0BAA0B,GAAG;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC,CAAC;AAEF;;;;GAIG;AACH,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GACzC,0BAA0B,GAAG,IAAI,CAcnC;AAED;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAAC,CAAC,EAAE,IAAI,EAAE;IACxD,QAAQ,EAAE,2BAA2B,CAAC;IACtC,OAAO,EAAE,iBAAiB,CAAC;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,OAAO,CAAC,CAAC,CAAC,CAkBb"}

package/dist/cjs/bendystrawOperations.js

@@ -0,0 +1,212 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.compileBendystrawOperation = compileBendystrawOperation;
+exports.bendystrawOperationId = bendystrawOperationId;
+exports.resolvePersistedBendystrawRequest = resolvePersistedBendystrawRequest;
+exports.requestPersistedBendystraw = requestPersistedBendystraw;
+const graphql_1 = require("graphql");
+const bendystraw_js_1 = require("./utils/bendystraw.js");
+const contracts = new Map();
+function isRecord(value) {
+    return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function isSafeInput(value, depth = 0) {
+    if (depth > 12)
+        return false;
+    if (value === undefined ||
+        value === null ||
+        typeof value === "boolean" ||
+        (typeof value === "number" && Number.isFinite(value))) {
+        return true;
+    }
+    if (typeof value === "string")
+        return value.length <= 16_384;
+    if (Array.isArray(value)) {
+        return (value.length <= 1_000 &&
+            value.every((item) => isSafeInput(item, depth + 1)));
+    }
+    return (isRecord(value) &&
+        Object.keys(value).length <= 250 &&
+        Object.values(value).every((item) => isSafeInput(item, depth + 1)));
+}
+function validateNamedInput(name, value) {
+    if (!isSafeInput(value))
+        return false;
+    switch (name) {
+        case "Boolean":
+            return typeof value === "boolean";
+        case "Float":
+            return typeof value === "number" && Number.isFinite(value);
+        case "Int":
+            return typeof value === "number" && Number.isSafeInteger(value);
+        case "ID":
+            return typeof value === "string" || Number.isSafeInteger(value);
+        case "String":
+            return typeof value === "string";
+        default:
+            return true;
+    }
+}
+function validateInput(type, value) {
+    if (type.kind === graphql_1.Kind.NON_NULL_TYPE) {
+        return (value !== null && value !== undefined && validateInput(type.type, value));
+    }
+    if (value === null || value === undefined)
+        return true;
+    if (type.kind === graphql_1.Kind.LIST_TYPE) {
+        const values = Array.isArray(value) ? value : [value];
+        return values.every((item) => validateInput(type.type, item));
+    }
+    return validateNamedInput(type.name.value, value);
+}
+// Defaults are constant values: the parser rejects a variable inside one.
+function defaultValueOf(value) {
+    if (!value)
+        return undefined;
+    switch (value.kind) {
+        case graphql_1.Kind.BOOLEAN:
+            return value.value;
+        case graphql_1.Kind.ENUM:
+        case graphql_1.Kind.STRING:
+            return value.value;
+        case graphql_1.Kind.FLOAT:
+        case graphql_1.Kind.INT:
+            return Number(value.value);
+        case graphql_1.Kind.LIST:
+            return value.values.map(defaultValueOf);
+        case graphql_1.Kind.NULL:
+            return null;
+        case graphql_1.Kind.OBJECT:
+            return Object.fromEntries(value.fields.map((field) => [
+                field.name.value,
+                defaultValueOf(field.value),
+            ]));
+    }
+}
+function validateSelectedValue(value, selectionSet, fragments) {
+    if (value === null)
+        return true;
+    if (Array.isArray(value)) {
+        return value.every((item) => validateSelectedValue(item, selectionSet, fragments));
+    }
+    if (!isRecord(value))
+        return false;
+    return validateSelectionSet(value, selectionSet, fragments, true);
+}
+function validateSelectionSet(value, selectionSet, fragments, requireFields) {
+    for (const selection of selectionSet.selections) {
+        if (selection.kind === graphql_1.Kind.FIELD) {
+            const responseKey = selection.alias?.value ?? selection.name.value;
+            if (!Object.prototype.hasOwnProperty.call(value, responseKey)) {
+                if (requireFields)
+                    return false;
+                continue;
+            }
+            if (selection.selectionSet &&
+                !validateSelectedValue(value[responseKey], selection.selectionSet, fragments)) {
+                return false;
+            }
+        }
+        else if (selection.kind === graphql_1.Kind.INLINE_FRAGMENT) {
+            if (!validateSelectionSet(value, selection.selectionSet, fragments, requireFields && !selection.typeCondition)) {
+                return false;
+            }
+        }
+        else {
+            const fragment = fragments.get(selection.name.value);
+            if (!fragment)
+                return false;
+            if (!validateSelectionSet(value, fragment.selectionSet, fragments, false)) {
+                return false;
+            }
+        }
+    }
+    return true;
+}
+/**
+ * Compile one static GraphQL document into the same runtime operation contract
+ * used by every Bendystraw transport: operation name, bounded variables, and
+ * recursive response-shape validation.
+ */
+function compileBendystrawOperation(query) {
+    const cached = contracts.get(query);
+    if (cached)
+        return cached;
+    const document = (0, graphql_1.parse)(query);
+    const operations = document.definitions.filter((definition) => definition.kind === graphql_1.Kind.OPERATION_DEFINITION);
+    if (operations.length !== 1) {
+        throw new TypeError("A Bendystraw document must contain exactly one operation");
+    }
+    const operation = operations[0];
+    const fragments = new Map(document.definitions
+        .filter((definition) => definition.kind === graphql_1.Kind.FRAGMENT_DEFINITION)
+        .map((fragment) => [fragment.name.value, fragment]));
+    const variableNames = new Set(operation.variableDefinitions?.map((definition) => definition.variable.name.value) ?? []);
+    const contract = {
+        operationName: operation.name?.value,
+        validateData: (value) => isRecord(value) &&
+            validateSelectionSet(value, operation.selectionSet, fragments, true),
+        validateVariables: (value) => {
+            if (!isRecord(value) || !isSafeInput(value))
+                return false;
+            if (Object.keys(value).some((name) => !variableNames.has(name)))
+                return false;
+            return (operation.variableDefinitions ?? []).every((definition) => {
+                const name = definition.variable.name.value;
+                const input = value[name] === undefined
+                    ? defaultValueOf(definition.defaultValue)
+                    : value[name];
+                return validateInput(definition.type, input);
+            });
+        },
+    };
+    contracts.set(query, contract);
+    return contract;
+}
+/** The persisted-operation id a same-origin Bendystraw proxy accepts: the SHA-256 of the exact document. */
+async function bendystrawOperationId(query) {
+    const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(query));
+    let id = "";
+    for (const byte of new Uint8Array(digest))
+        id += byte.toString(16).padStart(2, "0");
+    return id;
+}
+/**
+ * Resolve a proxy request body (`{ operation, variables }`) against the app's
+ * registry of persisted documents. Anything else, including an unknown id, is
+ * refused with null, so the proxy never forwards arbitrary GraphQL.
+ */
+function resolvePersistedBendystrawRequest(value, registry) {
+    if (!isRecord(value))
+        return null;
+    const keys = Object.keys(value);
+    if (keys.some((key) => key !== "operation" && key !== "variables") ||
+        typeof value.operation !== "string" ||
+        !/^[a-f0-9]{64}$/u.test(value.operation) ||
+        !isRecord(value.variables)) {
+        return null;
+    }
+    // The 64-hex id check above rules out inherited keys such as `__proto__`.
+    const query = registry[value.operation];
+    return query ? { query, variables: value.variables } : null;
+}
+/**
+ * Send one persisted operation through the app's same-origin proxy
+ * (`/api/bendystraw/{network}/query` unless `endpoint` says otherwise). Only
+ * the operation id and variables leave the browser; the response is validated
+ * against the document's contract.
+ */
+async function requestPersistedBendystraw(args) {
+    const operation = await bendystrawOperationId(args.query);
+    return (0, bendystraw_js_1.requestBendystraw)(args.endpoint ?? `/api/bendystraw/${args.network}/query`, args.query, args.variables, {
+        fetch: (input, init) => fetch(input, {
+            ...init,
+            body: JSON.stringify({ operation, variables: args.variables }),
+            cache: "no-store",
+        }),
+        operationName: args.contract.operationName,
+        validateData: (value) => args.contract.validateData(value),
+        validateVariables: args.contract.validateVariables,
+    });
+}
+//# sourceMappingURL=bendystrawOperations.js.map

package/dist/cjs/bendystrawOperations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bendystrawOperations.js","sourceRoot":"","sources":["../../src/bendystrawOperations.ts"],"names":[],"mappings":";;AA8KA,gEAmDC;AAGD,sDASC;AAYD,8EAiBC;AAQD,gEAwBC;AA1SD,qCAOiB;AACjB,yDAG+B;AAQ/B,MAAM,SAAS,GAAG,IAAI,GAAG,EAAuC,CAAC;AAEjE,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,WAAW,CAAC,KAAc,EAAE,KAAK,GAAG,CAAC;IAC5C,IAAI,KAAK,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IAC7B,IACE,KAAK,KAAK,SAAS;QACnB,KAAK,KAAK,IAAI;QACd,OAAO,KAAK,KAAK,SAAS;QAC1B,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EACrD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC,MAAM,IAAI,MAAM,CAAC;IAC7D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,CACL,KAAK,CAAC,MAAM,IAAI,KAAK;YACrB,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CACpD,CAAC;IACJ,CAAC;IACD,OAAO,CACL,QAAQ,CAAC,KAAK,CAAC;QACf,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,IAAI,GAAG;QAChC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,WAAW,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAY,EAAE,KAAc;IACtD,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACtC,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,SAAS;YACZ,OAAO,OAAO,KAAK,KAAK,SAAS,CAAC;QACpC,KAAK,OAAO;YACV,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;QAC7D,KAAK,KAAK;YACR,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAClE,KAAK,IAAI;YACP,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;QAClE,KAAK,QAAQ;YACX,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC;QACnC;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,IAAc,EAAE,KAAc;IACnD,IAAI,IAAI,CAAC,IAAI,KAAK,cAAI,CAAC,aAAa,EAAE,CAAC;QACrC,OAAO,CACL,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS,IAAI,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,CAAC,CACzE,CAAC;IACJ,CAAC;IACD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACvD,IAAI,IAAI,CAAC,IAAI,KAAK,cAAI,CAAC,SAAS,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;QACtD,OAAO,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;AACpD,CAAC;AAED,0EAA0E;AAC1E,SAAS,cAAc,CAAC,KAAiC;IACvD,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,cAAI,CAAC,OAAO;YACf,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,KAAK,cAAI,CAAC,IAAI,CAAC;QACf,KAAK,cAAI,CAAC,MAAM;YACd,OAAO,KAAK,CAAC,KAAK,CAAC;QACrB,KAAK,cAAI,CAAC,KAAK,CAAC;QAChB,KAAK,cAAI,CAAC,GAAG;YACX,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC7B,KAAK,cAAI,CAAC,IAAI;YACZ,OAAO,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC1C,KAAK,cAAI,CAAC,IAAI;YACZ,OAAO,IAAI,CAAC;QACd,KAAK,cAAI,CAAC,MAAM;YACd,OAAO,MAAM,CAAC,WAAW,CACvB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;gBAC1B,KAAK,CAAC,IAAI,CAAC,KAAK;gBAChB,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC;aAC5B,CAAC,CACH,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAc,EACd,YAA8B,EAC9B,SAAsD;IAEtD,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAChC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAC1B,qBAAqB,CAAC,IAAI,EAAE,YAAY,EAAE,SAAS,CAAC,CACrD,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,oBAAoB,CAAC,KAAK,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,oBAAoB,CAC3B,KAA8B,EAC9B,YAA8B,EAC9B,SAAsD,EACtD,aAAsB;IAEtB,KAAK,MAAM,SAAS,IAAI,YAAY,CAAC,UAAU,EAAE,CAAC;QAChD,IAAI,SAAS,CAAC,IAAI,KAAK,cAAI,CAAC,KAAK,EAAE,CAAC;YAClC,MAAM,WAAW,GAAG,SAAS,CAAC,KAAK,EAAE,KAAK,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC;YACnE,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC;gBAC9D,IAAI,aAAa;oBAAE,OAAO,KAAK,CAAC;gBAChC,SAAS;YACX,CAAC;YACD,IACE,SAAS,CAAC,YAAY;gBACtB,CAAC,qBAAqB,CACpB,KAAK,CAAC,WAAW,CAAC,EAClB,SAAS,CAAC,YAAY,EACtB,SAAS,CACV,EACD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,IAAI,SAAS,CAAC,IAAI,KAAK,cAAI,CAAC,eAAe,EAAE,CAAC;YACnD,IACE,CAAC,oBAAoB,CACnB,KAAK,EACL,SAAS,CAAC,YAAY,EACtB,SAAS,EACT,aAAa,IAAI,CAAC,SAAS,CAAC,aAAa,CAC1C,EACD,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;aAAM,CAAC;YACN,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ;gBAAE,OAAO,KAAK,CAAC;YAC5B,IACE,CAAC,oBAAoB,CAAC,KAAK,EAAE,QAAQ,CAAC,YAAY,EAAE,SAAS,EAAE,KAAK,CAAC,EACrE,CAAC;gBACD,OAAO,KAAK,CAAC;YACf,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,0BAA0B,CACxC,KAAa;IAEb,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IACpC,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAE1B,MAAM,QAAQ,GAAG,IAAA,eAAK,EAAC,KAAK,CAAC,CAAC;IAC9B,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC,MAAM,CAC5C,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,IAAI,KAAK,cAAI,CAAC,oBAAoB,CAC9D,CAAC;IACF,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,SAAS,CACjB,0DAA0D,CAC3D,CAAC;IACJ,CAAC;IACD,MAAM,SAAS,GAAG,UAAU,CAAC,CAAC,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,GAAG,CACvB,QAAQ,CAAC,WAAW;SACjB,MAAM,CACL,CAAC,UAAU,EAAwC,EAAE,CACnD,UAAU,CAAC,IAAI,KAAK,cAAI,CAAC,mBAAmB,CAC/C;SACA,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC,CACtD,CAAC;IACF,MAAM,aAAa,GAAG,IAAI,GAAG,CAC3B,SAAS,CAAC,mBAAmB,EAAE,GAAG,CAChC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAC/C,IAAI,EAAE,CACR,CAAC;IAEF,MAAM,QAAQ,GAAgC;QAC5C,aAAa,EAAE,SAAS,CAAC,IAAI,EAAE,KAAK;QACpC,YAAY,EAAE,CAAC,KAAK,EAAoC,EAAE,CACxD,QAAQ,CAAC,KAAK,CAAC;YACf,oBAAoB,CAAC,KAAK,EAAE,SAAS,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC;QACtE,iBAAiB,EAAE,CAAC,KAAK,EAAoC,EAAE;YAC7D,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1D,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;gBAC7D,OAAO,KAAK,CAAC;YACf,OAAO,CAAC,SAAS,CAAC,mBAAmB,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,UAAU,EAAE,EAAE;gBAChE,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;gBAC5C,MAAM,KAAK,GACT,KAAK,CAAC,IAAI,CAAC,KAAK,SAAS;oBACvB,CAAC,CAAC,cAAc,CAAC,UAAU,CAAC,YAAY,CAAC;oBACzC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAClB,OAAO,aAAa,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;YAC/C,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;IACF,SAAS,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAC/B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,4GAA4G;AACrG,KAAK,UAAU,qBAAqB,CAAC,KAAa;IACvD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CACvC,SAAS,EACT,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,CAChC,CAAC;IACF,IAAI,EAAE,GAAG,EAAE,CAAC;IACZ,KAAK,MAAM,IAAI,IAAI,IAAI,UAAU,CAAC,MAAM,CAAC;QACvC,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC3C,OAAO,EAAE,CAAC;AACZ,CAAC;AAOD;;;;GAIG;AACH,SAAgB,iCAAiC,CAC/C,KAAc,EACd,QAA0C;IAE1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAClC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,IACE,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,KAAK,WAAW,IAAI,GAAG,KAAK,WAAW,CAAC;QAC9D,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ;QACnC,CAAC,iBAAiB,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC;QACxC,CAAC,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,EAC1B,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,0EAA0E;IAC1E,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACxC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED;;;;;GAKG;AACI,KAAK,UAAU,0BAA0B,CAAI,IAMnD;IACC,MAAM,SAAS,GAAG,MAAM,qBAAqB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,OAAO,IAAA,iCAAiB,EACtB,IAAI,CAAC,QAAQ,IAAI,mBAAmB,IAAI,CAAC,OAAO,QAAQ,EACxD,IAAI,CAAC,KAAK,EACV,IAAI,CAAC,SAAS,EACd;QACE,KAAK,EAAE,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,CACrB,KAAK,CAAC,KAAK,EAAE;YACX,GAAG,IAAI;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;YAC9D,KAAK,EAAE,UAAU;SAClB,CAAC;QACJ,aAAa,EAAE,IAAI,CAAC,QAAQ,CAAC,aAAa;QAC1C,YAAY,EAAE,CAAC,KAAK,EAAc,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,KAAK,CAAC;QACtE,iBAAiB,EAAE,IAAI,CAAC,QAAQ,CAAC,iBAAiB;KACnD,CACF,CAAC;AACJ,CAAC"}

package/dist/cjs/review/contractWrite.d.ts

@@ -0,0 +1,38 @@
+import { type Address } from "viem";
+export type ReviewedWritePhase = "review" | "simulating" | "signing";
+export type ReviewedContractWriteOptions<TRequest extends {
+    chainId: number;
+}, TSimulated, THash> = {
+    request: TRequest;
+    expectedAccount: Address | undefined;
+    review: (request: TRequest) => Promise<unknown>;
+    switchChain: (chainId: number) => Promise<unknown>;
+    currentAccount: () => Address | undefined;
+    simulate: (request: TRequest) => Promise<TSimulated>;
+    reverify?: (request: TRequest) => Promise<unknown>;
+    /** Persist recovery intent after simulation, before a wallet can broadcast. */
+    beforeWrite?: () => unknown | Promise<unknown>;
+    /** The persisted intent was rejected by a final gate before write was invoked. */
+    onBeforeWriteAborted?: () => unknown | Promise<unknown>;
+    /** Clear that intent only when the wallet explicitly rejects the write. */
+    onWriteRejected?: () => unknown | Promise<unknown>;
+    write: (simulated: TSimulated) => Promise<THash>;
+    onPhase?: (phase: ReviewedWritePhase) => void;
+    accountChangedError?: string;
+    /**
+     * An app-specific gate run before anything else, such as refusing writes while
+     * the app is impersonating another account. It throws to stop the write.
+     */
+    guard?: () => void;
+};
+/**
+ * Shared review-to-wallet boundary for direct contract writes.
+ *
+ * The exact request object accepted by review is also handed to simulation,
+ * and only the simulation result reaches the wallet writer. Account identity
+ * is checked after a chain switch and again immediately before signing.
+ */
+export declare function submitReviewedContractWrite<TRequest extends {
+    chainId: number;
+}, TSimulated, THash>({ request, expectedAccount, review, switchChain, currentAccount, simulate, reverify, beforeWrite, onBeforeWriteAborted, onWriteRejected, write, onPhase, accountChangedError, guard, }: ReviewedContractWriteOptions<TRequest, TSimulated, THash>): Promise<THash>;
+//# sourceMappingURL=contractWrite.d.ts.map

package/dist/cjs/review/contractWrite.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contractWrite.d.ts","sourceRoot":"","sources":["../../../src/review/contractWrite.ts"],"names":[],"mappings":"AAAA,OAAO,EAAuC,KAAK,OAAO,EAAE,MAAM,MAAM,CAAC;AAEzE,MAAM,MAAM,kBAAkB,GAAG,QAAQ,GAAG,YAAY,GAAG,SAAS,CAAC;AAErE,MAAM,MAAM,4BAA4B,CACtC,QAAQ,SAAS;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,EACpC,UAAU,EACV,KAAK,IACH;IACF,OAAO,EAAE,QAAQ,CAAC;IAClB,eAAe,EAAE,OAAO,GAAG,SAAS,CAAC;IACrC,MAAM,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAChD,WAAW,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,cAAc,EAAE,MAAM,OAAO,GAAG,SAAS,CAAC;IAC1C,QAAQ,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;IACrD,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,QAAQ,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,+EAA+E;IAC/E,WAAW,CAAC,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/C,kFAAkF;IAClF,oBAAoB,CAAC,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACxD,2EAA2E;IAC3E,eAAe,CAAC,EAAE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,KAAK,EAAE,CAAC,SAAS,EAAE,UAAU,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC;IACjD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,kBAAkB,KAAK,IAAI,CAAC;IAC9C,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B;;;OAGG;IACH,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;CACpB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAsB,2BAA2B,CAC/C,QAAQ,SAAS;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,EACpC,UAAU,EACV,KAAK,EACL,EACA,OAAO,EACP,eAAe,EACf,MAAM,EACN,WAAW,EACX,cAAc,EACd,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,KAAK,EACL,OAAO,EACP,mBAAgF,EAChF,KAAK,GACN,EAAE,4BAA4B,CAAC,QAAQ,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,OAAO,CAAC,KAAK,CAAC,CA+C5E"}

package/dist/cjs/review/contractWrite.js

@@ -0,0 +1,57 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.submitReviewedContractWrite = submitReviewedContractWrite;
+const viem_1 = require("viem");
+/**
+ * Shared review-to-wallet boundary for direct contract writes.
+ *
+ * The exact request object accepted by review is also handed to simulation,
+ * and only the simulation result reaches the wallet writer. Account identity
+ * is checked after a chain switch and again immediately before signing.
+ */
+async function submitReviewedContractWrite({ request, expectedAccount, review, switchChain, currentAccount, simulate, reverify, beforeWrite, onBeforeWriteAborted, onWriteRejected, write, onPhase, accountChangedError = "Connected account changed. Review the transaction again.", guard, }) {
+    guard?.();
+    if (!expectedAccount)
+        throw new Error("Connect a wallet first.");
+    onPhase?.("review");
+    await review(request);
+    onPhase?.("simulating");
+    await switchChain(request.chainId);
+    assertExpectedAccount(currentAccount(), expectedAccount, accountChangedError);
+    await reverify?.(request);
+    assertExpectedAccount(currentAccount(), expectedAccount, accountChangedError);
+    const simulated = await simulate(request);
+    assertExpectedAccount(currentAccount(), expectedAccount, accountChangedError);
+    if (beforeWrite) {
+        await beforeWrite();
+        try {
+            assertExpectedAccount(currentAccount(), expectedAccount, accountChangedError);
+        }
+        catch (error) {
+            // This is strictly before the wallet writer is invoked. An ambiguous
+            // write error must never reach this cleanup path.
+            await onBeforeWriteAborted?.();
+            throw error;
+        }
+    }
+    onPhase?.("signing");
+    try {
+        return await write(simulated);
+    }
+    catch (error) {
+        // The same-looking error from review/simulation never reaches this catch.
+        // An RPC timeout or ambiguous submission must preserve the recovery lock.
+        const rejected = error instanceof viem_1.UserRejectedRequestError ||
+            (error instanceof viem_1.BaseError &&
+                error.walk((cause) => cause instanceof viem_1.UserRejectedRequestError) instanceof viem_1.UserRejectedRequestError);
+        if (rejected)
+            await onWriteRejected?.();
+        throw error;
+    }
+}
+function assertExpectedAccount(current, expected, message) {
+    if (!current || current.toLowerCase() !== expected.toLowerCase()) {
+        throw new Error(message);
+    }
+}
+//# sourceMappingURL=contractWrite.js.map

package/dist/cjs/review/contractWrite.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contractWrite.js","sourceRoot":"","sources":["../../../src/review/contractWrite.ts"],"names":[],"mappings":";;AAuCA,kEAkEC;AAzGD,+BAAyE;AAgCzE;;;;;;GAMG;AACI,KAAK,UAAU,2BAA2B,CAI/C,EACA,OAAO,EACP,eAAe,EACf,MAAM,EACN,WAAW,EACX,cAAc,EACd,QAAQ,EACR,QAAQ,EACR,WAAW,EACX,oBAAoB,EACpB,eAAe,EACf,KAAK,EACL,OAAO,EACP,mBAAmB,GAAG,0DAA0D,EAChF,KAAK,GACqD;IAC1D,KAAK,EAAE,EAAE,CAAC;IACV,IAAI,CAAC,eAAe;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IAEjE,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC;IACpB,MAAM,MAAM,CAAC,OAAO,CAAC,CAAC;IAEtB,OAAO,EAAE,CAAC,YAAY,CAAC,CAAC;IACxB,MAAM,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACnC,qBAAqB,CAAC,cAAc,EAAE,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC;IAC9E,MAAM,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC;IAC1B,qBAAqB,CAAC,cAAc,EAAE,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC;IAE9E,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1C,qBAAqB,CAAC,cAAc,EAAE,EAAE,eAAe,EAAE,mBAAmB,CAAC,CAAC;IAE9E,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,WAAW,EAAE,CAAC;QACpB,IAAI,CAAC;YACH,qBAAqB,CACnB,cAAc,EAAE,EAChB,eAAe,EACf,mBAAmB,CACpB,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,qEAAqE;YACrE,kDAAkD;YAClD,MAAM,oBAAoB,EAAE,EAAE,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,0EAA0E;QAC1E,0EAA0E;QAC1E,MAAM,QAAQ,GACZ,KAAK,YAAY,+BAAwB;YACzC,CAAC,KAAK,YAAY,gBAAS;gBACzB,KAAK,CAAC,IAAI,CACR,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,YAAY,+BAAwB,CACrD,YAAY,+BAAwB,CAAC,CAAC;QAC3C,IAAI,QAAQ;YAAE,MAAM,eAAe,EAAE,EAAE,CAAC;QACxC,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAA4B,EAC5B,QAAiB,EACjB,OAAe;IAEf,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,WAAW,EAAE,KAAK,QAAQ,CAAC,WAAW,EAAE,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;IAC3B,CAAC;AACH,CAAC"}

package/dist/cjs/review/gas.d.ts

@@ -0,0 +1,28 @@
+import type { Address, Hex, PublicClient } from "viem";
+/**
+ * Wallet gas limits are deliberately twice the latest RPC estimate.
+ *
+ * Some Juicebox terminal calls catch a failed internal fee payment and keep
+ * going. An RPC can therefore return an estimate for that cheaper recovery
+ * path even though the intended fee route needs more gas. Unused gas is not
+ * spent, so a 2x limit is a cheap guard against that under-estimation.
+ */
+export declare function gasWithHeadroom(estimate: bigint): bigint;
+/**
+ * The gas limit to send for a call that carries a reviewed cap.
+ *
+ * A cap bounds an `eth_call` against a target-controlled contract; it is not
+ * what the call costs. Wallets reject a transaction whose `gas * maxFeePerGas`
+ * exceeds the balance, so sending the cap itself turns a 1M-gas mainnet cap
+ * into a ~0.003 ETH balance requirement for a call that burns a tenth of that.
+ *
+ * Measurement stays bounded by the cap, and the cap survives when the node
+ * cannot measure.
+ */
+export declare function gasWithinCap(client: PublicClient, tx: {
+    account: Address;
+    to: Address;
+    data: Hex;
+    value?: bigint;
+}, cap?: bigint): Promise<bigint | undefined>;
+//# sourceMappingURL=gas.d.ts.map

package/dist/cjs/review/gas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gas.d.ts","sourceRoot":"","sources":["../../../src/review/gas.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,MAAM,CAAC;AAEvD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,YAAY,EACpB,EAAE,EAAE;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,EAAE,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,GAAG,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,EAChE,GAAG,CAAC,EAAE,MAAM,GACX,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAW7B"}

package/dist/cjs/review/gas.js

@@ -0,0 +1,40 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.gasWithHeadroom = gasWithHeadroom;
+exports.gasWithinCap = gasWithinCap;
+/**
+ * Wallet gas limits are deliberately twice the latest RPC estimate.
+ *
+ * Some Juicebox terminal calls catch a failed internal fee payment and keep
+ * going. An RPC can therefore return an estimate for that cheaper recovery
+ * path even though the intended fee route needs more gas. Unused gas is not
+ * spent, so a 2x limit is a cheap guard against that under-estimation.
+ */
+function gasWithHeadroom(estimate) {
+    return estimate * 2n;
+}
+/**
+ * The gas limit to send for a call that carries a reviewed cap.
+ *
+ * A cap bounds an `eth_call` against a target-controlled contract; it is not
+ * what the call costs. Wallets reject a transaction whose `gas * maxFeePerGas`
+ * exceeds the balance, so sending the cap itself turns a 1M-gas mainnet cap
+ * into a ~0.003 ETH balance requirement for a call that burns a tenth of that.
+ *
+ * Measurement stays bounded by the cap, and the cap survives when the node
+ * cannot measure.
+ */
+async function gasWithinCap(client, tx, cap) {
+    try {
+        const estimate = await client.estimateGas({
+            ...tx,
+            ...(cap === undefined ? {} : { gas: cap }),
+        });
+        const measured = gasWithHeadroom(estimate);
+        return cap !== undefined && cap < measured ? cap : measured;
+    }
+    catch {
+        return cap;
+    }
+}
+//# sourceMappingURL=gas.js.map

package/dist/cjs/review/gas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gas.js","sourceRoot":"","sources":["../../../src/review/gas.ts"],"names":[],"mappings":";;AAUA,0CAEC;AAaD,oCAeC;AAtCD;;;;;;;GAOG;AACH,SAAgB,eAAe,CAAC,QAAgB;IAC9C,OAAO,QAAQ,GAAG,EAAE,CAAC;AACvB,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,YAAY,CAChC,MAAoB,EACpB,EAAgE,EAChE,GAAY;IAEZ,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC;YACxC,GAAG,EAAE;YACL,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC;SAC3C,CAAC,CAAC;QACH,MAAM,QAAQ,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;QAC3C,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,GAAG,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC9D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,CAAC;IACb,CAAC;AACH,CAAC"}

package/dist/cjs/review/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./contractWrite.js";
+export * from "./gas.js";
+export * from "./transactionReview.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/cjs/review/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/review/index.ts"],"names":[],"mappings":"AAAA,cAAc,oBAAoB,CAAC;AACnC,cAAc,UAAU,CAAC;AACzB,cAAc,wBAAwB,CAAC"}

package/dist/cjs/review/index.js

@@ -0,0 +1,20 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./contractWrite.js"), exports);
+__exportStar(require("./gas.js"), exports);
+__exportStar(require("./transactionReview.js"), exports);
+//# sourceMappingURL=index.js.map

package/dist/cjs/review/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/review/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,qDAAmC;AACnC,2CAAyB;AACzB,yDAAuC"}

package/dist/cjs/review/transactionReview.d.ts

@@ -0,0 +1,81 @@
+import { type Abi, type Address, type Hex } from "viem";
+/**
+ * How review prompts name a chain and link its explorer. Apps pass their own
+ * chain display, which also keeps a chain table out of the review bundle.
+ */
+export type TransactionReviewDisplay = {
+    chainName: (chainId: number) => string;
+    explorerOrigin: (chainId: number) => string | null;
+};
+export type TransactionReviewCall = {
+    chainId: number;
+    to: Address;
+    data: Hex;
+    value?: bigint;
+    from?: Address;
+    abi?: Abi;
+    functionName?: string;
+    args?: readonly unknown[];
+    /** Plain-language action shown above the decoded call. */
+    label?: string;
+    /** Optional known contract name. The full address is always shown too. */
+    contractName?: string;
+    /** The calls a batching destination (MultiSend) makes in order, decoded by the caller. */
+    calls?: readonly TransactionReviewCall[];
+};
+export type TransactionReviewRequest = {
+    calls: readonly TransactionReviewCall[];
+    title?: string;
+    description?: string;
+    confirmLabel?: string;
+    /** Distinguishes a wallet transaction from an authorization which a relayer/Safe will submit. */
+    kind?: "transaction" | "authorization";
+    /** Exact typed data committed by a Safe/relayer signature, when applicable. */
+    authorization?: unknown;
+};
+export type ContractTransactionReviewCall = {
+    chainId: number;
+    address: Address;
+    abi: Abi;
+    functionName: string;
+    args?: readonly unknown[];
+    value?: bigint;
+    account?: Address;
+};
+export type TransactionReviewOptions = Omit<TransactionReviewRequest, "calls"> & {
+    label?: string;
+    contractName?: string;
+};
+type TransactionReviewHandler = (request: TransactionReviewRequest) => Promise<boolean>;
+export type FundingChainOption = {
+    chainId: number;
+    /** The chain name and quoted funding cost shown to the user. */
+    label: string;
+};
+type FundingChainSelectionHandler = (options: readonly FundingChainOption[]) => Promise<number | null>;
+export declare function registerFundingChainSelectionHandler(handler: FundingChainSelectionHandler): () => void;
+/** Funding always requires an explicit choice, even with one quoted option. */
+export declare function requireFundingChainSelection(options: readonly FundingChainOption[]): Promise<number>;
+/**
+ * The provider registers the only UI capable of approving a transaction.
+ * Keeping the entry point in a small client module lets non-React wallet
+ * helpers (Safe and Relayr) use the same mandatory review queue.
+ */
+export declare function registerTransactionReviewHandler(handler: TransactionReviewHandler): () => void;
+export declare function requestContractTransactionReview(call: ContractTransactionReviewCall, options?: TransactionReviewOptions): Promise<boolean>;
+export declare function requireTransactionReview(request: TransactionReviewRequest): Promise<void>;
+export declare function requireContractTransactionReview(call: ContractTransactionReviewCall, options?: TransactionReviewOptions): Promise<void>;
+export declare function transactionReviewJson(request: TransactionReviewRequest): string;
+/**
+ * The post-transaction counterpart of the review prompt: a mined tx the user
+ * wants explained (or diagnosed) from explorer evidence. Points at Etherscan's
+ * transaction-debugger skill when the reader's agent has it, and degrades to
+ * the explorer page when it doesn't.
+ */
+export declare function buildTransactionDebugPrompt(calls: {
+    chainId: number;
+    txHash: string;
+}[], { chainName: displayChainName, explorerOrigin }: TransactionReviewDisplay): string;
+export declare function buildTransactionReviewPrompt(request: TransactionReviewRequest, { explorerOrigin }: Pick<TransactionReviewDisplay, "explorerOrigin">): string;
+export {};
+//# sourceMappingURL=transactionReview.d.ts.map

package/dist/cjs/review/transactionReview.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"transactionReview.d.ts","sourceRoot":"","sources":["../../../src/review/transactionReview.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsB,KAAK,GAAG,EAAE,KAAK,OAAO,EAAE,KAAK,GAAG,EAAE,MAAM,MAAM,CAAC;AAE5E;;;GAGG;AACH,MAAM,MAAM,wBAAwB,GAAG;IACrC,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,CAAC;IACvC,cAAc,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACpD,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,GAAG,CAAC;IACV,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC1B,0DAA0D;IAC1D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,0FAA0F;IAC1F,KAAK,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;CAC1C,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG;IACrC,KAAK,EAAE,SAAS,qBAAqB,EAAE,CAAC;IACxC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iGAAiG;IACjG,IAAI,CAAC,EAAE,aAAa,GAAG,eAAe,CAAC;IACvC,+EAA+E;IAC/E,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB,CAAC;AAEF,MAAM,MAAM,6BAA6B,GAAG;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,GAAG,CAAC;IACT,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,wBAAwB,GAAG,IAAI,CACzC,wBAAwB,EACxB,OAAO,CACR,GAAG;IACF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,KAAK,wBAAwB,GAAG,CAC9B,OAAO,EAAE,wBAAwB,KAC9B,OAAO,CAAC,OAAO,CAAC,CAAC;AAItB,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,KAAK,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,KAAK,4BAA4B,GAAG,CAClC,OAAO,EAAE,SAAS,kBAAkB,EAAE,KACnC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;AAI5B,wBAAgB,oCAAoC,CAClD,OAAO,EAAE,4BAA4B,GACpC,MAAM,IAAI,CAMZ;AAED,+EAA+E;AAC/E,wBAAsB,4BAA4B,CAChD,OAAO,EAAE,SAAS,kBAAkB,EAAE,GACrC,OAAO,CAAC,MAAM,CAAC,CAkCjB;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,OAAO,EAAE,wBAAwB,GAChC,MAAM,IAAI,CAMZ;AA0CD,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,6BAA6B,EACnC,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,OAAO,CAAC,CAqBlB;AASD,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAsB,gCAAgC,CACpD,IAAI,EAAE,6BAA6B,EACnC,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CAIf;AAED,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,wBAAwB,GAChC,MAAM,CAmBR;AAMD;;;;;GAKG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,EAC5C,EAAE,SAAS,EAAE,gBAAgB,EAAE,cAAc,EAAE,EAAE,wBAAwB,GACxE,MAAM,CAoBR;AAED,wBAAgB,4BAA4B,CAC1C,OAAO,EAAE,wBAAwB,EACjC,EAAE,cAAc,EAAE,EAAE,IAAI,CAAC,wBAAwB,EAAE,gBAAgB,CAAC,GACnE,MAAM,CAiER"}