@bananapus/nana-sdk-core 3.5.2 → 5.0.0

package/bin/wallet-check.mjs

@@ -0,0 +1,495 @@
+#!/usr/bin/env node
+// A lint for mistaken wallet calls, not a security boundary: it does not follow every alias.
+import {
+  existsSync,
+  readFileSync,
+  readdirSync,
+  realpathSync,
+  statSync,
+} from "node:fs";
+import { createRequire } from "node:module";
+import { relative, resolve } from "node:path";
+
+const require = createRequire(resolve("package.json"));
+let ts;
+try {
+  ts = require("typescript");
+} catch {
+  process.stderr.write(
+    "nana-wallet-check needs typescript (>=5.4) installed in the project it runs from.\n",
+  );
+  process.exit(1);
+}
+
+const usage =
+  "Usage: nana-wallet-check --root <dir>... --inventory <json> [--forbid-import <spec>]... [--exclude <glob>]...";
+const productionRoots = [];
+const forbiddenImports = [];
+/** Paths (relative to the working directory) left out by `--exclude`: `**` spans directories, `*` and `?` stay within one. */
+const excluded = [];
+const globPattern = (glob) =>
+  new RegExp(
+    `^${glob
+      .replaceAll("\\", "/")
+      .replace(/^(?:\.\/)+/, "")
+      .split(/(\*\*\/|\*\*|\*|\?)/)
+      .map((part) =>
+        part === "**/"
+          ? "(?:.*/)?"
+          : part === "**"
+            ? ".*"
+            : part === "*"
+              ? "[^/]*"
+              : part === "?"
+                ? "[^/]"
+                : part.replace(/[.+^${}()|[\]\\]/g, "\\$&"),
+      )
+      .join("")}$`,
+  );
+let inventoryArg;
+const args = process.argv.slice(2);
+for (let index = 0; index < args.length; index += 2) {
+  const value = args[index + 1];
+  if (value === undefined || value.startsWith("--")) {
+    process.stderr.write(`${usage}\n`);
+    process.exit(1);
+  }
+  if (args[index] === "--root") productionRoots.push(resolve(value));
+  else if (args[index] === "--forbid-import") forbiddenImports.push(value);
+  else if (args[index] === "--inventory") inventoryArg = value;
+  else if (args[index] === "--exclude") excluded.push(globPattern(value));
+  else {
+    process.stderr.write(`${usage}\n`);
+    process.exit(1);
+  }
+}
+if (productionRoots.length === 0 || !inventoryArg) {
+  process.stderr.write(`${usage}\n`);
+  process.exit(1);
+}
+const inventory = JSON.parse(readFileSync(resolve(inventoryArg), "utf8"));
+
+const directApis = new Set([
+  "deployContract",
+  "deployContractAsync",
+  "useDeployContract",
+  "sendCalls",
+  "sendCallsAsync",
+  "sendRawTransaction",
+  "sendRawTransactionAsync",
+  "sendTransaction",
+  "sendTransactionAsync",
+  "signMessage",
+  "signMessageAsync",
+  "signTransaction",
+  "signTransactionAsync",
+  "signTypedData",
+  "signTypedDataAsync",
+  "useSendCalls",
+  "useSendRawTransaction",
+  "useSendTransaction",
+  "useSignMessage",
+  "useSignTransaction",
+  "useSignTypedData",
+  "useWalletClient",
+  "useWriteContract",
+  "useWriteContracts",
+  "writeContract",
+  "writeContractAsync",
+  "writeContracts",
+  "writeContractsAsync",
+]);
+const memberApis = new Set([...directApis, "request"]);
+const selfReviewingApis = new Set([
+  "selfReviewingAdapter",
+  "signaWalletAdapter",
+]);
+const guardedNames = new Set([
+  "registerReviewHandler",
+  ...selfReviewingApis,
+]);
+const signingRpcMethods = new Set([
+  "eth_sendTransaction",
+  "eth_sendRawTransaction",
+  "eth_sign",
+  "eth_signTransaction",
+  "eth_signTypedData",
+  "eth_signTypedData_v1",
+  "eth_signTypedData_v3",
+  "eth_signTypedData_v4",
+  "personal_sign",
+  "wallet_sendCalls",
+  "wallet_sendTransaction",
+]);
+
+function invariant(condition, message) {
+  if (condition) return;
+  process.stderr.write(`${message}\n`);
+  process.exit(1);
+}
+
+const sourceExtension = /\.(?:ts|tsx|mts|cts|js|jsx|mjs|cjs)$/;
+const sourceKinds = {
+  ".tsx": ts.ScriptKind.TSX,
+  ".jsx": ts.ScriptKind.JSX,
+  ".js": ts.ScriptKind.JS,
+  ".mjs": ts.ScriptKind.JS,
+  ".cjs": ts.ScriptKind.JS,
+};
+
+function productionFiles(directory, ancestors = []) {
+  const real = realpathSync(directory);
+  if (ancestors.includes(real)) return [];
+  return readdirSync(directory).flatMap((name) => {
+    const path = resolve(directory, name);
+    const stat = statSync(path);
+    if (stat.isDirectory()) {
+      if (name === "node_modules") return [];
+      return productionFiles(path, [...ancestors, real]);
+    }
+    if (!stat.isFile() || !sourceExtension.test(name)) return [];
+    if (/\.d\.[cm]?ts$/.test(name)) return [];
+    // Every other file under a root is scanned unless the caller excludes it.
+    const shown = relative(resolve("."), path).split("\\").join("/");
+    if (excluded.some((pattern) => pattern.test(shown))) return [];
+    return [path];
+  });
+}
+
+function unwrap(expression) {
+  let current = expression;
+  while (
+    ts.isParenthesizedExpression(current) ||
+    ts.isAsExpression(current) ||
+    ts.isNonNullExpression(current) ||
+    ts.isTypeAssertionExpression(current) ||
+    ts.isSatisfiesExpression(current)
+  ) {
+    current = current.expression;
+  }
+  return current;
+}
+
+function memberNameOf(expression) {
+  if (ts.isPropertyAccessExpression(expression)) return expression.name.text;
+  if (
+    ts.isElementAccessExpression(expression) &&
+    ts.isStringLiteralLike(unwrap(expression.argumentExpression))
+  ) {
+    return unwrap(expression.argumentExpression).text;
+  }
+  return null;
+}
+
+// The name a callee resolves to: a bare identifier (through import and
+// destructuring aliases) or a member, including a quoted member and one reached
+// through call, apply or bind.
+function calleeOf(expression, aliases) {
+  const callee = unwrap(expression);
+  if (ts.isIdentifier(callee)) {
+    return { name: aliases.get(callee.text) ?? callee.text, member: false };
+  }
+  const member = memberNameOf(callee);
+  if (member === null) return null;
+  if (["call", "apply", "bind"].includes(member)) {
+    const inner = calleeOf(callee.expression, aliases);
+    if (
+      inner &&
+      (inner.member ||
+        directApis.has(inner.name) ||
+        guardedNames.has(inner.name))
+    )
+      return inner;
+  }
+  return { name: member, member: true };
+}
+
+/**
+ * The method a `.request(...)` call names when it is written out: the first
+ * argument's string, or its object's `method` string. Null when the code does
+ * not say (a variable, a spread, a call through call/apply/bind).
+ */
+function requestMethodOf(call) {
+  if (memberNameOf(unwrap(call.expression)) !== "request") return null;
+  const first = call.arguments[0] && unwrap(call.arguments[0]);
+  if (!first) return null;
+  if (ts.isStringLiteralLike(first)) return first.text;
+  if (!ts.isObjectLiteralExpression(first)) return null;
+  // Only plain, written-out keys: a spread, shorthand, accessor or computed
+  // key could name the method another way.
+  if (
+    first.properties.some(
+      (property) =>
+        !ts.isPropertyAssignment(property) ||
+        !(
+          ts.isIdentifier(property.name) ||
+          ts.isStringLiteralLike(property.name)
+        ),
+    )
+  )
+    return null;
+  const methods = first.properties.filter(
+    (property) => property.name.text === "method",
+  );
+  if (methods.length !== 1) return null;
+  const value = unwrap(methods[0].initializer);
+  return ts.isStringLiteralLike(value) ? value.text : null;
+}
+
+function apiOf(call, aliases) {
+  const callee = calleeOf(call.expression, aliases);
+  if (!callee) return null;
+  if (callee.member && callee.name === "request") {
+    // A request whose method is written out and signs nothing is a read.
+    const method = requestMethodOf(call);
+    return method === null || signingRpcMethods.has(method) ? "request" : null;
+  }
+  return (callee.member ? memberApis : directApis).has(callee.name)
+    ? callee.name
+    : null;
+}
+
+const discovered = [];
+const forbidden = [];
+const selfReviewing = new Set(
+  (Array.isArray(inventory.selfReviewing) ? inventory.selfReviewing : []).map(
+    (file) =>
+      typeof file === "string" ? relative(resolve("."), resolve(file)) : file,
+  ),
+);
+for (const filePath of new Set(
+  productionRoots.flatMap((root) => productionFiles(root)),
+)) {
+  const sourceText = readFileSync(filePath, "utf8");
+  const source = ts.createSourceFile(
+    filePath,
+    sourceText,
+    ts.ScriptTarget.Latest,
+    true,
+    sourceKinds[filePath.slice(filePath.lastIndexOf("."))] ?? ts.ScriptKind.TS,
+  );
+  const aliases = new Map();
+
+  for (const statement of source.statements) {
+    if (!ts.isImportDeclaration(statement) || !statement.importClause) continue;
+    const bindings = statement.importClause.namedBindings;
+    if (!bindings || !ts.isNamedImports(bindings)) continue;
+    for (const specifier of bindings.elements) {
+      const imported = (specifier.propertyName ?? specifier.name).text;
+      if (
+        directApis.has(imported) ||
+        selfReviewingApis.has(imported) ||
+        imported === "registerReviewHandler"
+      )
+        aliases.set(specifier.name.text, imported);
+    }
+  }
+
+  function aliasPattern(pattern) {
+    for (const element of pattern.elements) {
+      if (!ts.isIdentifier(element.name)) continue;
+      const key = element.propertyName;
+      const exposed = !key
+        ? element.name.text
+        : ts.isComputedPropertyName(key)
+          ? ts.isStringLiteralLike(key.expression)
+            ? key.expression.text
+            : null
+          : key.text;
+      if (directApis.has(exposed)) aliases.set(element.name.text, exposed);
+    }
+  }
+
+  function collectAliases(node) {
+    if (
+      (ts.isVariableDeclaration(node) || ts.isParameter(node)) &&
+      ts.isObjectBindingPattern(node.name)
+    ) {
+      aliasPattern(node.name);
+    } else if (
+      ts.isVariableDeclaration(node) &&
+      ts.isIdentifier(node.name) &&
+      node.initializer
+    ) {
+      const initializer = unwrap(node.initializer);
+      const name = memberNameOf(initializer);
+      if (name !== null && (directApis.has(name) || guardedNames.has(name))) {
+        aliases.set(node.name.text, name);
+      } else if (
+        ts.isIdentifier(initializer) &&
+        aliases.has(initializer.text)
+      ) {
+        aliases.set(node.name.text, aliases.get(initializer.text));
+      }
+    }
+    ts.forEachChild(node, collectAliases);
+  }
+  collectAliases(source);
+
+  const here = relative(resolve("."), filePath);
+  function lineOf(node) {
+    return source.getLineAndCharacterOfPosition(node.getStart(source)).line + 1;
+  }
+  function moduleSpecifierOf(node) {
+    if (
+      (ts.isImportDeclaration(node) || ts.isExportDeclaration(node)) &&
+      node.moduleSpecifier &&
+      ts.isStringLiteral(node.moduleSpecifier)
+    ) {
+      const typeOnly = ts.isImportDeclaration(node)
+        ? node.importClause?.isTypeOnly
+        : node.isTypeOnly;
+      const named = ts.isImportDeclaration(node)
+        ? node.importClause?.namedBindings
+        : node.exportClause;
+      const allTypeOnly =
+        named &&
+        (ts.isNamedImports(named) || ts.isNamedExports(named)) &&
+        named.elements.length > 0 &&
+        !node.importClause?.name &&
+        named.elements.every((element) => element.isTypeOnly);
+      return typeOnly || allTypeOnly ? null : node.moduleSpecifier;
+    }
+    if (
+      ts.isImportEqualsDeclaration(node) &&
+      !node.isTypeOnly &&
+      ts.isExternalModuleReference(node.moduleReference) &&
+      ts.isStringLiteralLike(node.moduleReference.expression)
+    ) {
+      return node.moduleReference.expression;
+    }
+    if (
+      ts.isCallExpression(node) &&
+      (node.expression.kind === ts.SyntaxKind.ImportKeyword ||
+        (ts.isIdentifier(node.expression) &&
+          node.expression.text === "require")) &&
+      node.arguments[0] &&
+      ts.isStringLiteralLike(node.arguments[0])
+    ) {
+      return node.arguments[0];
+    }
+    return null;
+  }
+  function visit(node) {
+    const nameNode =
+      ts.isIdentifier(node) &&
+      !ts.isImportSpecifier(node.parent) &&
+      !ts.isExportSpecifier(node.parent) &&
+      !ts.isPropertySignature(node.parent)
+        ? node
+        : ts.isStringLiteralLike(node) &&
+            ((ts.isPropertyAssignment(node.parent) &&
+              node.parent.name === node) ||
+              ts.isComputedPropertyName(node.parent) ||
+              ts.isElementAccessExpression(node.parent))
+          ? node
+          : null;
+    if (nameNode && nameNode.text === "reviewedInParent") {
+      discovered.push({ file: here, line: lineOf(node), api: nameNode.text });
+    }
+    const specifier = moduleSpecifierOf(node);
+    if (
+      specifier &&
+      forbiddenImports.some(
+        (spec) =>
+          specifier.text === spec || specifier.text.startsWith(`${spec}/`),
+      )
+    ) {
+      forbidden.push(`${here}:${lineOf(specifier)}:import ${specifier.text}`);
+    }
+    if (ts.isCallExpression(node)) {
+      const callee = calleeOf(node.expression, aliases)?.name;
+      if (callee === "registerReviewHandler") {
+        discovered.push({ file: here, line: lineOf(node), api: callee });
+      }
+      if (selfReviewingApis.has(callee) && !selfReviewing.has(here)) {
+        forbidden.push(
+          `${here}:${lineOf(node)}:${callee} outside selfReviewing`,
+        );
+      }
+      const api = apiOf(node, aliases);
+      if (api) discovered.push({ file: here, line: lineOf(node), api });
+    }
+    if (ts.isStringLiteralLike(node) && signingRpcMethods.has(node.text)) {
+      discovered.push({
+        file: here,
+        line: lineOf(node),
+        api: `rpc:${node.text}`,
+      });
+    }
+    ts.forEachChild(node, visit);
+  }
+  visit(source);
+}
+
+function siteKey(site) {
+  return `${site.file}:${site.line}:${site.api}`;
+}
+
+invariant(
+  inventory.format === "juice-sdk-wallet-boundaries-1",
+  "Unsupported wallet inventory format",
+);
+invariant(
+  Array.isArray(inventory.sites),
+  "Wallet inventory sites must be an array",
+);
+const reviewed = new Map();
+for (const site of inventory.sites) {
+  invariant(
+    typeof site.file === "string" &&
+      Number.isInteger(site.line) &&
+      typeof site.api === "string" &&
+      typeof site.boundary === "string" &&
+      site.boundary.length > 0 &&
+      typeof site.test === "string",
+    `Invalid reviewed wallet site ${JSON.stringify(site)}`,
+  );
+  invariant(
+    existsSync(resolve(site.file)),
+    `Missing wallet-boundary source ${site.file}`,
+  );
+  invariant(
+    statSync(resolve(site.test)).isFile(),
+    `Missing wallet-boundary test ${site.test}`,
+  );
+  site.file = relative(resolve("."), resolve(site.file));
+  const key = siteKey(site);
+  invariant(!reviewed.has(key), `Duplicate reviewed wallet site ${key}`);
+  reviewed.set(key, site);
+}
+
+const discoveredKeys = new Set(discovered.map(siteKey));
+const sameLine = discovered.filter(
+  (site, index) =>
+    discovered.findIndex((other) => siteKey(other) === siteKey(site)) !== index,
+);
+invariant(
+  sameLine.length === 0,
+  `Several wallet boundary sites share one line, so one inventory row cannot review each; split the line:\n${sameLine.map((site) => `- ${siteKey(site)}`).join("\n")}`,
+);
+const unreviewed = discovered.filter((site) => !reviewed.has(siteKey(site)));
+const stale = [...reviewed.keys()].filter((key) => !discoveredKeys.has(key));
+invariant(
+  Array.isArray(inventory.selfReviewing ?? []) &&
+    [...selfReviewing].every(
+      (file) => typeof file === "string" && existsSync(resolve(file)),
+    ),
+  "Wallet inventory selfReviewing must list existing files",
+);
+invariant(
+  forbidden.length === 0,
+  `Forbidden wallet boundary uses:\n${forbidden.map((line) => `- ${line}`).join("\n")}`,
+);
+invariant(
+  unreviewed.length === 0,
+  `Unreviewed wallet boundary sites:\n${unreviewed.map((site) => `- ${siteKey(site)}`).join("\n")}`,
+);
+invariant(
+  stale.length === 0,
+  `Stale wallet boundary inventory sites:\n${stale.map((key) => `- ${key}`).join("\n")}`,
+);
+
+process.stdout.write(
+  `Reviewed ${discovered.length} production wallet signing/submission sites; 0 unreviewed residuals.\n`,
+);

package/dist/cjs/actions/suckerPairs.d.ts

@@ -1,4 +1,4 @@
-import { JBChainId, JBVersion } from "../types.js";
+import { JBChainId } from "../types.js";
 import { useConfig } from "wagmi";
 export type SuckerPair = {
     peerChainId: JBChainId;
@@ -17,12 +17,14 @@ export type SuckerPair = {
  *
  * Rejects rather than dropping a pair — a silently short group is
  * indistinguishable from a project with fewer chains.
+ *
+ * Reads Juicebox V6 only, so a page loads the v6 address table and no other.
  */
 export declare function getSuckerPairs({ config, chainId, projectId, version, }: {
     config: ReturnType<typeof useConfig>;
     chainId: JBChainId;
     projectId: bigint;
-    version: JBVersion;
+    version?: 6;
 }): Promise<SuckerPair[]>;
 /**
  * Resolve the full sucker group for a project: the local `(chainId, projectId)`
@@ -40,6 +42,6 @@ export declare function resolveSuckers({ config, chainId, projectId, version, }:
     config: ReturnType<typeof useConfig>;
     chainId: JBChainId;
     projectId: bigint;
-    version: JBVersion;
+    version?: 6;
 }): Promise<SuckerPair[]>;
 //# sourceMappingURL=suckerPairs.d.ts.map

package/dist/cjs/actions/suckerPairs.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"suckerPairs.d.ts","sourceRoot":"","sources":["../../../src/actions/suckerPairs.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,SAAS,EAAqB,SAAS,EAAE,MAAM,aAAa,CAAC;AAGtE,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAElC,MAAM,MAAM,UAAU,GAAG;IACvB,WAAW,EAAE,SAAS,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;GAaG;AACH,wBAAsB,cAAc,CAAC,EACnC,MAAM,EACN,OAAO,EACP,SAAS,EACT,OAAO,GACR,EAAE;IACD,MAAM,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC;IACrC,OAAO,EAAE,SAAS,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,SAAS,CAAC;CACpB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAiExB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAAC,EACnC,MAAM,EACN,OAAO,EACP,SAAS,EACT,OAAO,GACR,EAAE;IACD,MAAM,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC;IACrC,OAAO,EAAE,SAAS,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,SAAS,CAAC;CACpB,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAgCxB"}
+{"version":3,"file":"suckerPairs.d.ts","sourceRoot":"","sources":["../../../src/actions/suckerPairs.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AAExC,OAAO,EAAE,SAAS,EAAE,MAAM,OAAO,CAAC;AAElC,MAAM,MAAM,UAAU,GAAG;IACvB,WAAW,EAAE,SAAS,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,cAAc,CAAC,EACnC,MAAM,EACN,OAAO,EACP,SAAS,EACT,OAAO,GACR,EAAE;IACD,MAAM,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC;IACrC,OAAO,EAAE,SAAS,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,CAAC,CAAC;CACb,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CAuCxB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAAC,EACnC,MAAM,EACN,OAAO,EACP,SAAS,EACT,OAAO,GACR,EAAE;IACD,MAAM,EAAE,UAAU,CAAC,OAAO,SAAS,CAAC,CAAC;IACrC,OAAO,EAAE,SAAS,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,CAAC,CAAC;CACb,GAAG,OAAO,CAAC,UAAU,EAAE,CAAC,CA+BxB"}

package/dist/cjs/actions/suckerPairs.js

@@ -3,10 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 exports.getSuckerPairs = getSuckerPairs;
 exports.resolveSuckers = resolveSuckers;
 const viem_1 = require("viem");
-const juicebox_js_1 = require("../generated/juicebox.js");
 const JBSuckerAbi_js_1 = require("./JBSuckerAbi.js");
-const types_js_1 = require("../types.js");
-const contracts_js_1 = require("../utils/contracts.js");
 const suckers_js_1 = require("../v6/suckers.js");
 /**
  * Read a project's directly-paired suckers from the JBSuckerRegistry on `chainId`.
@@ -21,31 +18,15 @@ const suckers_js_1 = require("../v6/suckers.js");
  *
  * Rejects rather than dropping a pair — a silently short group is
  * indistinguishable from a project with fewer chains.
+ *
+ * Reads Juicebox V6 only, so a page loads the v6 address table and no other.
  */
 async function getSuckerPairs({ config, chainId, projectId, version, }) {
-    const jbSuckerRegistry = (0, contracts_js_1.getJBContractAddress)(types_js_1.JBSuckerContracts.JBSuckerRegistry, version, chainId);
+    if (version !== undefined && version !== 6) {
+        throw new Error(`Sucker groups are read for Juicebox V6 only, not V${version}.`);
+    }
     const client = config.getClient({ chainId: Number(chainId) });
-    // v6 identifies remote suckers as bytes32 (for cross-VM compatibility); for EVM peers
-    // the address is in the low 20 bytes, which `suckerBytes32ToAddress` validates.
-    const suckers = version === 6
-        ? (await (0, viem_1.getContract)({
-            address: jbSuckerRegistry,
-            abi: juicebox_js_1.jbSuckerRegistryAbi,
-            client,
-        }).read.suckerPairsOf([projectId])).map((sucker) => ({
-            local: sucker.local,
-            remote: (0, suckers_js_1.suckerBytes32ToAddress)(sucker.remote),
-            remoteChainId: sucker.remoteChainId,
-        }))
-        : (await (0, viem_1.getContract)({
-            address: jbSuckerRegistry,
-            abi: juicebox_js_1.jbSuckerRegistryV5Abi,
-            client,
-        }).read.suckerPairsOf([projectId])).map((sucker) => ({
-            local: sucker.local,
-            remote: sucker.remote,
-            remoteChainId: sucker.remoteChainId,
-        }));
+    const suckers = await (0, suckers_js_1.getV6SuckerPairs)(client, { chainId, projectId });
     return Promise.all(suckers.map(async (sucker) => {
         const remoteClient = config.getClient({
             chainId: Number(sucker.remoteChainId),
@@ -101,7 +82,6 @@ async function resolveSuckers({ config, chainId, projectId, version, }) {
         config,
         chainId: pair.peerChainId,
         projectId: pair.projectId,
-        version,
     })));
     transitivePairs.flat().forEach(add);
     return pairs;

package/dist/cjs/actions/suckerPairs.js.map

@@ -1 +1 @@
-{"version":3,"file":"suckerPairs.js","sourceRoot":"","sources":["../../../src/actions/suckerPairs.ts"],"names":[],"mappings":";;AA8BA,wCA2EC;AAcD,wCA0CC;AAjKD,+BAA0E;AAC1E,0DAGkC;AAClC,qDAA+C;AAC/C,0CAAsE;AACtE,wDAA6D;AAC7D,iDAA0D;AAQ1D;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,cAAc,CAAC,EACnC,MAAM,EACN,OAAO,EACP,SAAS,EACT,OAAO,GAMR;IACC,MAAM,gBAAgB,GAAG,IAAA,mCAAoB,EAC3C,4BAAiB,CAAC,gBAAgB,EAClC,OAAO,EACP,OAAO,CACR,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAiB,CAAC;IAE9E,sFAAsF;IACtF,gFAAgF;IAChF,MAAM,OAAO,GACX,OAAO,KAAK,CAAC;QACX,CAAC,CAAC,CACE,MAAM,IAAA,kBAAW,EAAC;YAChB,OAAO,EAAE,gBAAgB;YACzB,GAAG,EAAE,iCAAmB;YACxB,MAAM;SACP,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,CACnC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,IAAA,mCAAsB,EAAC,MAAM,CAAC,MAAM,CAAC;YAC7C,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC,CAAC;QACL,CAAC,CAAC,CACE,MAAM,IAAA,kBAAW,EAAC;YAChB,OAAO,EAAE,gBAAgB;YACzB,GAAG,EAAE,mCAAqB;YAC1B,MAAM;SACP,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,SAAS,CAAC,CAAC,CACnC,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;YACjB,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,aAAa,EAAE,MAAM,CAAC,aAAa;SACpC,CAAC,CAAC,CAAC;IAEV,OAAO,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAC3B,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC;YACpC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;SACtC,CAAiB,CAAC;QAEnB,MAAM,YAAY,GAAG,IAAA,kBAAW,EAAC;YAC/B,OAAO,EAAE,MAAM,CAAC,MAAM;YACtB,GAAG,EAAE,4BAAW;YAChB,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE;YACxB,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,IAAA,qBAAc,EAAC,IAAA,mCAAsB,EAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CACb,iBAAiB,MAAM,CAAC,MAAM,aAAa,MAAM,CAAC,aAAa,0BAA0B,MAAM,CAAC,KAAK,GAAG,CACzG,CAAC;QACJ,CAAC;QAED,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;YACzC,SAAS,EAAE,aAAa;SACX,CAAC;IAClB,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,cAAc,CAAC,EACnC,MAAM,EACN,OAAO,EACP,SAAS,EACT,OAAO,GAMR;IACC,MAAM,KAAK,GAAiB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,CAAC,IAAgB,EAAE,EAAE;QAC/B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC;QACvC,MAAM;QACN,OAAO;QACP,SAAS;QACT,OAAO;KACR,CAAC,CAAC;IACH,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEzB,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,GAAG,CACvC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACvB,cAAc,CAAC;QACb,MAAM;QACN,OAAO,EAAE,IAAI,CAAC,WAAW;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,OAAO;KACR,CAAC,CACH,CACF,CAAC;IACF,eAAe,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEpC,OAAO,KAAK,CAAC;AACf,CAAC"}
+{"version":3,"file":"suckerPairs.js","sourceRoot":"","sources":["../../../src/actions/suckerPairs.ts"],"names":[],"mappings":";;AA2BA,wCAiDC;AAcD,wCAyCC;AAnID,+BAAiE;AACjE,qDAA+C;AAE/C,iDAA4E;AAQ5E;;;;;;;;;;;;;;;GAeG;AACI,KAAK,UAAU,cAAc,CAAC,EACnC,MAAM,EACN,OAAO,EACP,SAAS,EACT,OAAO,GAMR;IACC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,EAAE,CAAC;QAC3C,MAAM,IAAI,KAAK,CACb,qDAAqD,OAAO,GAAG,CAChE,CAAC;IACJ,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAiB,CAAC;IAC9E,MAAM,OAAO,GAAG,MAAM,IAAA,6BAAgB,EAAC,MAAM,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAEvE,OAAO,OAAO,CAAC,GAAG,CAChB,OAAO,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAC3B,MAAM,YAAY,GAAG,MAAM,CAAC,SAAS,CAAC;YACpC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;SACtC,CAAiB,CAAC;QAEnB,MAAM,YAAY,GAAG,IAAA,kBAAW,EAAC;YAC/B,OAAO,EAAE,MAAM,CAAC,MAAM;YACtB,GAAG,EAAE,4BAAW;YAChB,MAAM,EAAE,YAAY;SACrB,CAAC,CAAC;QAEH,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YAC9C,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE;YACxB,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE;SAC9B,CAAC,CAAC;QAEH,IAAI,CAAC,IAAA,qBAAc,EAAC,IAAA,mCAAsB,EAAC,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CACb,iBAAiB,MAAM,CAAC,MAAM,aAAa,MAAM,CAAC,aAAa,0BAA0B,MAAM,CAAC,KAAK,GAAG,CACzG,CAAC;QACJ,CAAC;QAED,OAAO;YACL,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC;YACzC,SAAS,EAAE,aAAa;SACX,CAAC;IAClB,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,cAAc,CAAC,EACnC,MAAM,EACN,OAAO,EACP,SAAS,EACT,OAAO,GAMR;IACC,MAAM,KAAK,GAAiB,CAAC,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;IAClE,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,IAAI,SAAS,EAAE,CAAC,CAAC,CAAC;IAElD,MAAM,GAAG,GAAG,CAAC,IAAgB,EAAE,EAAE;QAC/B,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,OAAO;QAC1B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnB,CAAC,CAAC;IAEF,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC;QACvC,MAAM;QACN,OAAO;QACP,SAAS;QACT,OAAO;KACR,CAAC,CAAC;IACH,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEzB,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,GAAG,CACvC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACvB,cAAc,CAAC;QACb,MAAM;QACN,OAAO,EAAE,IAAI,CAAC,WAAW;QACzB,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAC,CACH,CACF,CAAC;IACF,eAAe,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEpC,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/cjs/pause.d.ts

@@ -3,4 +3,6 @@
  * `signal` aborts: at once when it already has.
  */
 export declare function pause(ms: number, signal: AbortSignal | undefined, aborted: () => unknown): Promise<void>;
+/** `promise`, or a rejection once `ms` passes first. */
+export declare function timeout<T>(promise: Promise<T>, ms: number): Promise<T>;
 //# sourceMappingURL=pause.d.ts.map

package/dist/cjs/pause.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pause.d.ts","sourceRoot":"","sources":["../../src/pause.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,wBAAgB,KAAK,CACnB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,OAAO,EAAE,MAAM,OAAO,GACrB,OAAO,CAAC,IAAI,CAAC,CAgBf"}
+{"version":3,"file":"pause.d.ts","sourceRoot":"","sources":["../../src/pause.ts"],"names":[],"mappings":"AAIA;;;GAGG;AACH,wBAAgB,KAAK,CACnB,EAAE,EAAE,MAAM,EACV,MAAM,EAAE,WAAW,GAAG,SAAS,EAC/B,OAAO,EAAE,MAAM,OAAO,GACrB,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,wDAAwD;AACxD,wBAAsB,OAAO,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,CAY5E"}

package/dist/cjs/pause.js

@@ -1,6 +1,8 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.pause = pause;
+exports.timeout = timeout;
+const lineError_js_1 = require("./review/lineError.js");
 /** The longest delay setTimeout holds (about 24.8 days): a longer one fires at once. */
 const MAX_TIMER_MS = 2_147_483_647;
 /**
@@ -22,4 +24,19 @@ function pause(ms, signal, aborted) {
             onAbort();
     });
 }
+/** `promise`, or a rejection once `ms` passes first. */
+async function timeout(promise, ms) {
+    let timer;
+    try {
+        return await Promise.race([
+            promise,
+            new Promise((_, reject) => {
+                timer = setTimeout(() => reject(new lineError_js_1.ReviewLineError("timed out")), ms);
+            }),
+        ]);
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
 //# sourceMappingURL=pause.js.map

package/dist/cjs/pause.js.map

@@ -1 +1 @@
-{"version":3,"file":"pause.js","sourceRoot":"","sources":["../../src/pause.ts"],"names":[],"mappings":";;AAOA,sBAoBC;AA3BD,wFAAwF;AACxF,MAAM,YAAY,GAAG,aAAa,CAAC;AAEnC;;;GAGG;AACH,SAAgB,KAAK,CACnB,EAAU,EACV,MAA+B,EAC/B,OAAsB;IAEtB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,SAAS,OAAO;YACd,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE;YACH,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,CAC3B,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC"}
+{"version":3,"file":"pause.js","sourceRoot":"","sources":["../../src/pause.ts"],"names":[],"mappings":";;AAQA,sBAoBC;AAGD,0BAYC;AA3CD,wDAAwD;AACxD,wFAAwF;AACxF,MAAM,YAAY,GAAG,aAAa,CAAC;AAEnC;;;GAGG;AACH,SAAgB,KAAK,CACnB,EAAU,EACV,MAA+B,EAC/B,OAAsB;IAEtB,OAAO,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC3C,SAAS,OAAO;YACd,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,KAAK,GAAG,UAAU,CACtB,GAAG,EAAE;YACH,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACZ,CAAC,EACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,YAAY,CAAC,CAC3B,CAAC;QACF,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,IAAI,MAAM,EAAE,OAAO;YAAE,OAAO,EAAE,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,wDAAwD;AACjD,KAAK,UAAU,OAAO,CAAI,OAAmB,EAAE,EAAU;IAC9D,IAAI,KAAgD,CAAC;IACrD,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO;YACP,IAAI,OAAO,CAAQ,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;gBAC/B,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,8BAAe,CAAC,WAAW,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACzE,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}