@bananapus/nana-sdk-core 3.5.2 → 5.0.0

package/dist/cjs/review/safeSend.js

@@ -0,0 +1,306 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.proposeReviewedSafeTransaction = proposeReviewedSafeTransaction;
+exports.confirmReviewedSafeTransaction = confirmReviewedSafeTransaction;
+exports.executeReviewedSafeTransaction = executeReviewedSafeTransaction;
+const viem_1 = require("viem");
+const safe_js_1 = require("../safe.js");
+const safeService_js_1 = require("../safeService.js");
+const intents_js_1 = require("./intents.js");
+const receipt_js_1 = require("./receipt.js");
+const send_js_1 = require("./send.js");
+const sign_js_1 = require("./sign.js");
+const simulation_js_1 = require("./simulation.js");
+const wallet_js_1 = require("./wallet.js");
+const UNVERIFIED = "Could not verify this Safe onchain.";
+const SAFE_CHANGED = "The Safe policy or nonce changed. Review the transaction again.";
+const REFUND = "This transaction pays a gas refund, so it can't be executed here.";
+function connectedAccount(deps) {
+    const account = deps.adapter.account();
+    if (!account)
+        throw new Error("Connect a wallet first.");
+    return account;
+}
+function requireService(chainId) {
+    if (!(0, safeService_js_1.hasSafeService)(chainId)) {
+        throw new Error(`Safe does not host a transaction service on chain ${chainId}.`);
+    }
+}
+/**
+ * The Safe's live policy and nonce. Fails closed on anything but a recognized
+ * Safe whose every module was read: a module can change the policy without
+ * moving the nonce.
+ */
+async function liveSafe(client, safe) {
+    const [identity, nonce] = await Promise.all([
+        (0, safe_js_1.readAuthorityIdentity)(client, safe),
+        (0, safe_js_1.readBoundedSafeNonce)(client, safe),
+    ]);
+    if (identity?.kind !== "safe" ||
+        !identity.modules ||
+        nonce === null ||
+        nonce > BigInt(Number.MAX_SAFE_INTEGER)) {
+        throw new Error(UNVERIFIED);
+    }
+    return { identity, nonce: Number(nonce) };
+}
+/** Throws unless `after` is `before`: the same policy, modules and nonce. */
+function requireUnchanged(before, after) {
+    if (JSON.stringify(before) !== JSON.stringify(after)) {
+        throw new Error(SAFE_CHANGED);
+    }
+}
+function requireSigner(state, account) {
+    if (!state.identity.owners.some((owner) => (0, viem_1.isAddressEqual)(owner, account))) {
+        throw new Error("The connected wallet is not a signer of this Safe.");
+    }
+}
+/** A pending transaction may wait behind others; an executed one must be next. */
+function requireNonce(state, tx, mode) {
+    const nonce = (0, safeService_js_1.safeTransactionMessage)(tx).nonce;
+    const live = BigInt(state.nonce);
+    if (mode === "execute" ? nonce !== live : nonce < live) {
+        throw new Error(`Safe transaction #${tx.nonce} is stale or does not match the live nonce.`);
+    }
+}
+/** `tx` read once, so a record changed after review is not what is sent. */
+function snapshot(tx) {
+    const copy = structuredClone(tx);
+    if ((0, safeService_js_1.safeTransactionHasRefund)(copy))
+        throw new Error(REFUND);
+    return copy;
+}
+/**
+ * Signs `tx` as `account`, an owner, through {@link signReviewed}'s Safe
+ * transaction review. The Safe's policy and nonce must not move while the
+ * review is open, checked before the wallet is asked, nor while the wallet
+ * is open, checked once it answers.
+ */
+async function signAsOwner(input, deps) {
+    const { chainId, safe, account, tx, context, title, beforePost, plan } = input;
+    const client = deps.clientFor(chainId);
+    const before = await liveSafe(client, safe);
+    requireSigner(before, account);
+    requireNonce(before, tx, "pending");
+    const unchanged = async () => requireUnchanged(before, await liveSafe(client, safe));
+    const [signature] = await (0, sign_js_1.signReviewed)([{ kind: "safe-tx", chainId, safe, tx }], {
+        account,
+        ...(title ? { title } : {}),
+        ...(context ? { context } : {}),
+        ...(plan ? { plan } : {}),
+        reverify: unchanged,
+    }, deps);
+    await beforePost?.();
+    await unchanged();
+    return signature;
+}
+/**
+ * Proposes `calls` to `safe`'s owners through Safe's transaction service: one
+ * zero-refund Safe transaction, a CALL for one call or a MultiSendCallOnly
+ * batch for several, signed by the connected owner after one review. It takes
+ * the nonce after everything already queued. A queued proposal of exactly
+ * these calls is confirmed instead, or, when this owner already confirmed it,
+ * returned as it is.
+ *
+ * Mirrors jbm `src/lib/safe.ts` `runSafeCalls` (service path), `proposeSafeTx`
+ * and `signSafeTx` (`:331-420`).
+ */
+async function proposeReviewedSafeTransaction(input, deps) {
+    const { chainId, safe, context, title, origin = "Juicebox", service, plan, } = input;
+    requireService(chainId);
+    const calls = [...input.calls].map((call) => {
+        const { chainId: on, to, data, value } = call;
+        if (on !== chainId) {
+            throw new Error(`Every call of a Safe proposal must be on chain ${chainId}.`);
+        }
+        return { to, data, value: value ?? 0n };
+    });
+    if (!calls.length)
+        throw new Error("There is no transaction to review.");
+    const account = connectedAccount(deps);
+    const state = await liveSafe(deps.clientFor(chainId), safe);
+    requireSigner(state, account);
+    // An outage must not read as an empty queue: the proposal would take a
+    // queued nonce and strand one of the two.
+    const pending = await (0, safeService_js_1.listPendingSafeTransactions)(chainId, safe, state.nonce, service);
+    const build = (nonce) => calls.length === 1
+        ? (0, safeService_js_1.safeProposalFor)(calls[0], nonce)
+        : (0, safeService_js_1.safeBatchProposalFor)(calls, nonce);
+    const shape = (0, safeService_js_1.safeTransactionMessage)(build(state.nonce));
+    const queued = pending.find((tx) => (0, safeService_js_1.safeTransactionMatchesCall)(tx, shape));
+    if (queued) {
+        const confirmed = (0, safeService_js_1.usableSafeConfirmations)(queued, state.identity.owners).some(({ owner }) => (0, viem_1.isAddressEqual)(owner, account));
+        if (confirmed) {
+            return { safeTxHash: (0, safeService_js_1.canonicalSafeTxHash)(chainId, safe, queued) };
+        }
+        return confirmAs(account, {
+            chainId,
+            safe,
+            tx: queued,
+            ...(context ? { context } : {}),
+            ...(plan ? { plan } : {}),
+            service,
+        }, deps);
+    }
+    const nonce = (0, safeService_js_1.nextProposalNonce)(state.nonce, pending);
+    const tx = build(nonce);
+    const safeTxHash = (0, safeService_js_1.safeTransactionHash)(chainId, safe, tx);
+    const signature = await signAsOwner({
+        chainId,
+        safe,
+        account,
+        tx,
+        context,
+        title,
+        ...(plan ? { plan } : {}),
+        // Another proposal queued at this nonce meanwhile would be replaced by this one.
+        beforePost: async () => {
+            const since = await (0, safeService_js_1.listPendingSafeTransactions)(chainId, safe, state.nonce, service);
+            if (since.some((other) => other.nonce === nonce)) {
+                throw new Error(`Another proposal took Safe nonce ${nonce} during review. Nothing was proposed; review it again.`);
+            }
+        },
+    }, deps);
+    try {
+        await (0, safeService_js_1.proposeSafeTransaction)(chainId, safe, tx, { sender: account, signature, origin }, service);
+    }
+    catch (error) {
+        // The service may have queued it and lost its answer: a retry must find
+        // it, not propose the same calls again at the next nonce. Only this
+        // owner's own signature on the record proves this proposal landed.
+        const queued = await (0, safeService_js_1.readSafeTransaction)(chainId, safe, safeTxHash, service).then((record) => Array.isArray(record.confirmations) &&
+            record.confirmations.some((confirmation) => typeof confirmation?.owner === "string" &&
+                (0, viem_1.isAddressEqual)(confirmation.owner, account) &&
+                confirmation.signature?.toLowerCase() === signature.toLowerCase()), () => false);
+        if (!queued)
+            throw error;
+    }
+    return { safeTxHash };
+}
+/**
+ * Adds the connected owner's signature to the queued `tx`, after one review
+ * of exactly its fields, safeTxGas included. Refuses a record whose fields do
+ * not hash to the hash it advertises, one that pays a gas refund, and one
+ * whose nonce the Safe has passed.
+ *
+ * Mirrors jbm `src/lib/safe.ts` `confirmSafeTx` and `signSafeTx`
+ * (`:331-420`).
+ */
+async function confirmReviewedSafeTransaction(input, deps) {
+    return confirmAs(connectedAccount(deps), input, deps);
+}
+async function confirmAs(account, input, deps) {
+    const { chainId, safe, context, service, plan } = input;
+    const tx = snapshot(input.tx);
+    requireService(chainId);
+    const safeTxHash = (0, safeService_js_1.canonicalSafeTxHash)(chainId, safe, tx);
+    const signature = await signAsOwner({ chainId, safe, account, tx, context, ...(plan ? { plan } : {}) }, deps);
+    await (0, safeService_js_1.submitSafeConfirmation)(chainId, safe, tx, signature, service);
+    return { safeTxHash };
+}
+/**
+ * Executes the queued `tx` from the connected wallet, signed by its usable
+ * current-owner confirmations, through {@link sendReviewed}: one review, the
+ * step's write hold, and before the wallet opens, the Safe's policy and nonce
+ * checked unchanged and the exact call simulated to return true. The result
+ * is decided by the Safe's own ExecutionSuccess for the exact hash, never by
+ * the receipt's status alone. A Safe-connected wallet's proposal is returned
+ * as `proposed`.
+ *
+ * Mirrors jbm `src/lib/safe.ts` `executeSafeTx` and `sendContractAndConfirm`
+ * (`:595-760`).
+ */
+async function executeReviewedSafeTransaction(input, deps) {
+    const { chainId, safe, context } = input;
+    const tx = snapshot(input.tx);
+    const account = connectedAccount(deps);
+    // A Safe app wraps the call in a transaction of its own Safe, which spends
+    // the nonce this one is signed for.
+    if ((0, viem_1.isAddressEqual)(account, safe)) {
+        throw new Error("A Safe can't execute its own queued transaction from inside itself. Execute it from an owner's wallet.");
+    }
+    const safeTxHash = (0, safeService_js_1.canonicalSafeTxHash)(chainId, safe, tx);
+    const client = deps.clientFor(chainId);
+    const state = await liveSafe(client, safe);
+    requireNonce(state, tx, "execute");
+    const { owners, threshold } = state.identity;
+    const usable = (0, safeService_js_1.usableSafeConfirmations)(tx, owners);
+    if (usable.length < threshold) {
+        throw new Error(`This transaction needs ${threshold} current-owner signature${threshold === 1 ? "" : "s"} before it can execute.`);
+    }
+    // Safe accepts the executor's own approval (v = 1) without checking its
+    // hash, so it does not bind the execution to this nonce: with it alone, a
+    // nonce spent meanwhile would run the same call again at the next one.
+    const bound = usable.filter(({ owner, signature }) => !(0, viem_1.isAddressEqual)(owner, account) ||
+        (!!signature && signature.slice(130, 132) !== "01"));
+    if (!bound.length) {
+        throw new Error("Your own approval alone does not bind this execution to its nonce. Sign the Safe transaction first.");
+    }
+    const args = (0, safeService_js_1.safeExecutionArgs)({ ...tx, confirmations: bound.length >= threshold ? bound : usable }, owners);
+    const data = (0, viem_1.encodeFunctionData)({
+        abi: safeService_js_1.SAFE_EXEC_ABI,
+        functionName: "execTransaction",
+        args,
+    });
+    /**
+     * Before the wallet opens: the Safe unchanged since review, and the exact
+     * call simulated to return true. A Safe signed with safeTxGas or gasPrice
+     * returns false for a failed call instead of reverting.
+     */
+    const stillExecutes = async () => {
+        requireUnchanged(state, await liveSafe(client, safe));
+        let executes = false;
+        try {
+            executes = (0, viem_1.decodeFunctionResult)({
+                abi: safeService_js_1.SAFE_EXEC_ABI,
+                functionName: "execTransaction",
+                data: await (0, simulation_js_1.simulateStateChangingTransaction)(client, {
+                    from: account,
+                    to: safe,
+                    data,
+                }),
+            });
+        }
+        catch {
+            // A revert or an unreadable answer is not an execution.
+        }
+        if (executes !== true) {
+            throw new Error(`Safe transaction #${tx.nonce} would not execute successfully.`);
+        }
+    };
+    await (0, wallet_js_1.walletReady)(deps.adapter);
+    // A self-reviewing wallet sends with no step of core's before it.
+    if (deps.adapter.kind === "self-reviewing")
+        await stillExecutes();
+    const result = await (0, send_js_1.sendReviewed)({
+        account,
+        calls: [
+            {
+                chainId,
+                to: safe,
+                data,
+                abi: safeService_js_1.SAFE_EXEC_ABI,
+                functionName: "execTransaction",
+                args,
+                label: `Execute Safe transaction #${tx.nonce}`,
+                contractName: "Safe",
+                intent: (0, intents_js_1.safeExecutionIntent)({ chainId, safe, safeTxHash }),
+            },
+        ],
+        ...(context ? { context } : {}),
+        reverify: stillExecutes,
+    }, {
+        ...deps,
+        // Done only once the Safe's own event says so, below.
+        // Its promise is returned, so the guard that calls it sees a rejection.
+        onProgress: (progress) => progress.phase === "done" ? undefined : deps.onProgress?.(progress),
+    });
+    if (result.status !== "done")
+        return result;
+    const receipt = result.receipts[0] ??
+        (await (0, receipt_js_1.waitForTrackedReceipt)(client, result.hashes[0]));
+    (0, safeService_js_1.requireSafeExecutionSuccess)(receipt, safe, safeTxHash);
+    (0, receipt_js_1.tell)(deps.onProgress, { step: 0, total: 1, phase: "done" });
+    return result;
+}
+//# sourceMappingURL=safeSend.js.map

package/dist/cjs/review/safeSend.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safeSend.js","sourceRoot":"","sources":["../../../src/review/safeSend.ts"],"names":[],"mappings":";;AAwLA,wEAqIC;AAWD,wEAaC;AA+BD,wEAoHC;AAxeD,+BAOc;AACd,wCAIoB;AACpB,sDAoB2B;AAC3B,6CAAmD;AAGnD,6CAA2D;AAC3D,uCAKmB;AACnB,uCAAyC;AACzC,mDAAmE;AACnE,2CAA0C;AAI1C,MAAM,UAAU,GAAG,qCAAqC,CAAC;AACzD,MAAM,YAAY,GAChB,iEAAiE,CAAC;AACpE,MAAM,MAAM,GACV,mEAAmE,CAAC;AAEtE,SAAS,gBAAgB,CAAC,IAAsB;IAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;IACvC,IAAI,CAAC,OAAO;QAAE,MAAM,IAAI,KAAK,CAAC,yBAAyB,CAAC,CAAC;IACzD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,CAAC,IAAA,+BAAc,EAAC,OAAO,CAAC,EAAE,CAAC;QAC7B,MAAM,IAAI,KAAK,CACb,qDAAqD,OAAO,GAAG,CAChE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,QAAQ,CACrB,MAAoB,EACpB,IAAa;IAEb,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC1C,IAAA,+BAAqB,EAAC,MAAM,EAAE,IAAI,CAAC;QACnC,IAAA,8BAAoB,EAAC,MAAM,EAAE,IAAI,CAAC;KACnC,CAAC,CAAC;IACH,IACE,QAAQ,EAAE,IAAI,KAAK,MAAM;QACzB,CAAC,QAAQ,CAAC,OAAO;QACjB,KAAK,KAAK,IAAI;QACd,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,EACvC,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;AAC5C,CAAC;AAED,6EAA6E;AAC7E,SAAS,gBAAgB,CAAC,MAAgB,EAAE,KAAe;IACzD,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,CAAC;QACrD,MAAM,IAAI,KAAK,CAAC,YAAY,CAAC,CAAC;IAChC,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAe,EAAE,OAAgB;IACtD,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,IAAA,qBAAc,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,SAAS,YAAY,CACnB,KAAe,EACf,EAAyB,EACzB,IAA2B;IAE3B,MAAM,KAAK,GAAG,IAAA,uCAAsB,EAAC,EAAE,CAAC,CAAC,KAAK,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,GAAG,IAAI,EAAE,CAAC;QACvD,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,CAAC,KAAK,6CAA6C,CAC3E,CAAC;IACJ,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,SAAS,QAAQ,CAAC,EAAyB;IACzC,MAAM,IAAI,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;IACjC,IAAI,IAAA,yCAAwB,EAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5D,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,WAAW,CACxB,KAUC,EACD,IAAsB;IAEtB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,GACpE,KAAK,CAAC;IACR,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5C,aAAa,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,CAAC,MAAM,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;IACpC,MAAM,SAAS,GAAG,KAAK,IAAI,EAAE,CAC3B,gBAAgB,CAAC,MAAM,EAAE,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IACzD,MAAM,CAAC,SAAS,CAAC,GAAG,MAAM,IAAA,sBAAY,EACpC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EACxC;QACE,OAAO;QACP,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3B,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,QAAQ,EAAE,SAAS;KACpB,EACD,IAAI,CACL,CAAC;IACF,MAAM,UAAU,EAAE,EAAE,CAAC;IACrB,MAAM,SAAS,EAAE,CAAC;IAClB,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;;GAUG;AACI,KAAK,UAAU,8BAA8B,CAClD,KAWC,EACD,IAAsB;IAEtB,MAAM,EACJ,OAAO,EACP,IAAI,EACJ,OAAO,EACP,KAAK,EACL,MAAM,GAAG,UAAU,EACnB,OAAO,EACP,IAAI,GACL,GAAG,KAAK,CAAC;IACV,cAAc,CAAC,OAAO,CAAC,CAAC;IACxB,MAAM,KAAK,GAAG,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC1C,MAAM,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,IAAI,CAAC;QAC9C,IAAI,EAAE,KAAK,OAAO,EAAE,CAAC;YACnB,MAAM,IAAI,KAAK,CACb,kDAAkD,OAAO,GAAG,CAC7D,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,IAAI,EAAE,EAAE,CAAC;IAC1C,CAAC,CAAC,CAAC;IACH,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,IAAI,CAAC,CAAC;IAC5D,aAAa,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IAC9B,uEAAuE;IACvE,0CAA0C;IAC1C,MAAM,OAAO,GAAG,MAAM,IAAA,4CAA2B,EAC/C,OAAO,EACP,IAAI,EACJ,KAAK,CAAC,KAAK,EACX,OAAO,CACR,CAAC;IACF,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAC9B,KAAK,CAAC,MAAM,KAAK,CAAC;QAChB,CAAC,CAAC,IAAA,gCAAe,EAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC;QAClC,CAAC,CAAC,IAAA,qCAAoB,EAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IACzC,MAAM,KAAK,GAAG,IAAA,uCAAsB,EAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;IACzD,MAAM,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAA,2CAA0B,EAAC,EAAE,EAAE,KAAK,CAAC,CAAC,CAAC;IAC3E,IAAI,MAAM,EAAE,CAAC;QACX,MAAM,SAAS,GAAG,IAAA,wCAAuB,EACvC,MAAM,EACN,KAAK,CAAC,QAAQ,CAAC,MAAM,CACtB,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,IAAA,qBAAc,EAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC;QACtD,IAAI,SAAS,EAAE,CAAC;YACd,OAAO,EAAE,UAAU,EAAE,IAAA,oCAAmB,EAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,OAAO,SAAS,CACd,OAAO,EACP;YACE,OAAO;YACP,IAAI;YACJ,EAAE,EAAE,MAAM;YACV,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzB,OAAO;SACR,EACD,IAAI,CACL,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,IAAA,kCAAiB,EAAC,KAAK,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACtD,MAAM,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;IACxB,MAAM,UAAU,GAAG,IAAA,oCAAmB,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,WAAW,CACjC;QACE,OAAO;QACP,IAAI;QACJ,OAAO;QACP,EAAE;QACF,OAAO;QACP,KAAK;QACL,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACzB,iFAAiF;QACjF,UAAU,EAAE,KAAK,IAAI,EAAE;YACrB,MAAM,KAAK,GAAG,MAAM,IAAA,4CAA2B,EAC7C,OAAO,EACP,IAAI,EACJ,KAAK,CAAC,KAAK,EACX,OAAO,CACR,CAAC;YACF,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,KAAK,KAAK,KAAK,CAAC,EAAE,CAAC;gBACjD,MAAM,IAAI,KAAK,CACb,oCAAoC,KAAK,wDAAwD,CAClG,CAAC;YACJ,CAAC;QACH,CAAC;KACF,EACD,IAAI,CACL,CAAC;IACF,IAAI,CAAC;QACH,MAAM,IAAA,uCAAsB,EAC1B,OAAO,EACP,IAAI,EACJ,EAAE,EACF,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,EACtC,OAAO,CACR,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,wEAAwE;QACxE,oEAAoE;QACpE,mEAAmE;QACnE,MAAM,MAAM,GAAG,MAAM,IAAA,oCAAmB,EACtC,OAAO,EACP,IAAI,EACJ,UAAU,EACV,OAAO,CACR,CAAC,IAAI,CACJ,CAAC,MAAM,EAAE,EAAE,CACT,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,aAAa,CAAC;YACnC,MAAM,CAAC,aAAa,CAAC,IAAI,CACvB,CAAC,YAAY,EAAE,EAAE,CACf,OAAO,YAAY,EAAE,KAAK,KAAK,QAAQ;gBACvC,IAAA,qBAAc,EAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC;gBAC3C,YAAY,CAAC,SAAS,EAAE,WAAW,EAAE,KAAK,SAAS,CAAC,WAAW,EAAE,CACpE,EACH,GAAG,EAAE,CAAC,KAAK,CACZ,CAAC;QACF,IAAI,CAAC,MAAM;YAAE,MAAM,KAAK,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;;GAQG;AACI,KAAK,UAAU,8BAA8B,CAClD,KAQC,EACD,IAAsB;IAEtB,OAAO,SAAS,CAAC,gBAAgB,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;AACxD,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,OAAgB,EAChB,KAA2D,EAC3D,IAAsB;IAEtB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACxD,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9B,cAAc,CAAC,OAAO,CAAC,CAAC;IACxB,MAAM,UAAU,GAAG,IAAA,oCAAmB,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,SAAS,GAAG,MAAM,WAAW,CACjC,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAClE,IAAI,CACL,CAAC;IACF,MAAM,IAAA,uCAAsB,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,CAAC,CAAC;IACpE,OAAO,EAAE,UAAU,EAAE,CAAC;AACxB,CAAC;AAED;;;;;;;;;;;GAWG;AACI,KAAK,UAAU,8BAA8B,CAClD,KAKC,EACD,IAAsB;IAEtB,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,KAAK,CAAC;IACzC,MAAM,EAAE,GAAG,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;IACvC,2EAA2E;IAC3E,oCAAoC;IACpC,IAAI,IAAA,qBAAc,EAAC,OAAO,EAAE,IAAI,CAAC,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CACb,wGAAwG,CACzG,CAAC;IACJ,CAAC;IACD,MAAM,UAAU,GAAG,IAAA,oCAAmB,EAAC,OAAO,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC3C,YAAY,CAAC,KAAK,EAAE,EAAE,EAAE,SAAS,CAAC,CAAC;IACnC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC,QAAQ,CAAC;IAC7C,MAAM,MAAM,GAAG,IAAA,wCAAuB,EAAC,EAAE,EAAE,MAAM,CAAC,CAAC;IACnD,IAAI,MAAM,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CACb,0BAA0B,SAAS,2BAA2B,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,yBAAyB,CAClH,CAAC;IACJ,CAAC;IACD,wEAAwE;IACxE,0EAA0E;IAC1E,uEAAuE;IACvE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CACzB,CAAC,EAAE,KAAK,EAAE,SAAS,EAAE,EAAE,EAAE,CACvB,CAAC,IAAA,qBAAc,EAAC,KAAK,EAAE,OAAO,CAAC;QAC/B,CAAC,CAAC,CAAC,SAAS,IAAI,SAAS,CAAC,KAAK,CAAC,GAAG,EAAE,GAAG,CAAC,KAAK,IAAI,CAAC,CACtD,CAAC;IACF,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;IACJ,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,kCAAiB,EAC5B,EAAE,GAAG,EAAE,EAAE,aAAa,EAAE,KAAK,CAAC,MAAM,IAAI,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,EACpE,MAAM,CACP,CAAC;IACF,MAAM,IAAI,GAAG,IAAA,yBAAkB,EAAC;QAC9B,GAAG,EAAE,8BAAa;QAClB,YAAY,EAAE,iBAAiB;QAC/B,IAAI;KACL,CAAC,CAAC;IACH;;;;OAIG;IACH,MAAM,aAAa,GAAG,KAAK,IAAI,EAAE;QAC/B,gBAAgB,CAAC,KAAK,EAAE,MAAM,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;QACtD,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,IAAA,2BAAoB,EAAC;gBAC9B,GAAG,EAAE,8BAAa;gBAClB,YAAY,EAAE,iBAAiB;gBAC/B,IAAI,EAAE,MAAM,IAAA,gDAAgC,EAAC,MAAM,EAAE;oBACnD,IAAI,EAAE,OAAO;oBACb,EAAE,EAAE,IAAI;oBACR,IAAI;iBACL,CAAC;aACH,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;QACD,IAAI,QAAQ,KAAK,IAAI,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,qBAAqB,EAAE,CAAC,KAAK,kCAAkC,CAChE,CAAC;QACJ,CAAC;IACH,CAAC,CAAC;IACF,MAAM,IAAA,uBAAW,EAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChC,kEAAkE;IAClE,IAAI,IAAI,CAAC,OAAO,CAAC,IAAI,KAAK,gBAAgB;QAAE,MAAM,aAAa,EAAE,CAAC;IAClE,MAAM,MAAM,GAAG,MAAM,IAAA,sBAAY,EAC/B;QACE,OAAO;QACP,KAAK,EAAE;YACL;gBACE,OAAO;gBACP,EAAE,EAAE,IAAI;gBACR,IAAI;gBACJ,GAAG,EAAE,8BAAa;gBAClB,YAAY,EAAE,iBAAiB;gBAC/B,IAAI;gBACJ,KAAK,EAAE,6BAA6B,EAAE,CAAC,KAAK,EAAE;gBAC9C,YAAY,EAAE,MAAM;gBACpB,MAAM,EAAE,IAAA,gCAAmB,EAAC,EAAE,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;aAC3D;SACF;QACD,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/B,QAAQ,EAAE,aAAa;KACxB,EACD;QACE,GAAG,IAAI;QACP,sDAAsD;QACtD,wEAAwE;QACxE,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE,CACvB,QAAQ,CAAC,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC,QAAQ,CAAC;KACtE,CACF,CAAC;IACF,IAAI,MAAM,CAAC,MAAM,KAAK,MAAM;QAAE,OAAO,MAAM,CAAC;IAC5C,MAAM,OAAO,GACX,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAClB,CAAC,MAAM,IAAA,kCAAqB,EAAC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,IAAA,4CAA2B,EAAC,OAAO,EAAE,IAAI,EAAE,UAAU,CAAC,CAAC;IACvD,IAAA,iBAAI,EAAC,IAAI,CAAC,UAAU,EAAE,EAAE,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/cjs/review/send.d.ts

@@ -0,0 +1,272 @@
+import { ReviewedReceiptUnverifiedError } from "./lineError.js";
+import { type Abi, type Address, type Hex, type PublicClient, type TransactionReceipt } from "viem";
+import { type ReviewedWritePhase } from "./contractWrite.js";
+import { type ReviewContextRow, type ReviewModel } from "./model.js";
+import { type ReviewedPlan } from "./plan.js";
+import { type ReviewedSequenceRecord } from "./sequence.js";
+import { type ReviewedSignature } from "./sign.js";
+import { type WalletAdapter } from "./wallet.js";
+import { type WriteHold, type WriteHoldLegacySource, type WriteHoldSettled } from "./writeHold.js";
+import { type HeldWriteStorage } from "./writeRecovery.js";
+export type ReviewedCall = {
+    chainId: number;
+    to: Address;
+    data: Hex;
+    value?: bigint;
+    /**
+     * The exact gas limit to send with, when the app fixes it (a saved gas
+     * envelope, say). It is shown and bound in the review, simulated and sent
+     * as it is, never estimated or padded. A Safe app proposes with safeTxGas 0
+     * whatever this is.
+     */
+    gas?: bigint;
+    /**
+     * For a Safe app only, with `abi` and `functionName`: the indexes of the
+     * args (a fresh deadline) a proposal its Safe already queued may differ in
+     * and still be adopted instead of proposed twice. The queued data must
+     * decode with `abi` to the same function, encode back to exactly its bytes,
+     * and match every other arg; the target, value and operation must match as
+     * they are. Bound into the review. Unset compares exact bytes.
+     */
+    adoptIgnoringArgs?: readonly number[];
+    /** When given, `data` must be exactly this function's encoding of `args`. */
+    abi?: Abi;
+    functionName?: string;
+    args?: readonly unknown[];
+    label?: string;
+    contractName?: string;
+    /** The hold namespace, as `useSafeTx`'s `TxSendOptions` today. */
+    intent?: string;
+    /** The keys an earlier version held this write under, as the hold's `open` takes them. */
+    legacy?: readonly WriteHoldLegacySource[];
+    /** Simulate on the previous step's receipt block. */
+    dependsOnPrior?: boolean;
+    /**
+     * The block where a prerequisite confirmed outside this run (an earlier
+     * approval, say) took effect: the call is simulated on the latest block,
+     * or on this one while the node has not reached it. Used where the call
+     * is simulated alone and not on a prior step's block; a resumed run
+     * simulates on the latest block.
+     */
+    simulationBlockNumber?: bigint;
+};
+/** Where the step before this one confirmed. */
+export type ReviewedPriorBlock = {
+    chainId: number;
+    blockNumber: bigint;
+    blockHash: Hex;
+};
+export type ReviewedAction = {
+    account: Address;
+    calls: readonly ReviewedCall[];
+    /**
+     * Signatures shown in the same prompt as `calls`, and signed after confirm,
+     * before the first send. A resumed sequence signs none.
+     */
+    signatures?: readonly ReviewedSignature[];
+    title?: string;
+    description?: string;
+    confirmLabel?: string;
+    context?: readonly ReviewContextRow[];
+    /**
+     * A stale-state check before each step; it throws to stop with nothing
+     * sent. `prior` is where the previous step of the action confirmed (on its
+     * own chain), so the check can read state at or after it; undefined for
+     * the first step, or on resume when that step's receipt can't be read.
+     */
+    reverify?: (call: ReviewedCall, index: number, prior: ReviewedPriorBlock | undefined) => Promise<void>;
+    /** The final synchronous gate before the wallet opens. */
+    assertWriteState?: () => void;
+    /** Refuses the action, before anything else (view-as, say). */
+    guard?: () => void;
+    /**
+     * A site's own record of a step at the wallet boundary, awaited: after its
+     * hold reserved it (and its journal saved it), right before the wallet
+     * opens. It throws to stop with nothing sent, which releases the step.
+     * `step` is the index in the whole action.
+     */
+    beforeWallet?: (call: ReviewedCall, step: number) => void | Promise<void>;
+    /**
+     * Awaited when nothing was sent for a step whose `beforeWallet` began: a
+     * gate refused, `beforeWallet` threw, or the wallet rejected (4001). Never
+     * after an ambiguous failure.
+     */
+    onUnsent?: (call: ReviewedCall, step: number) => void | Promise<void>;
+    /**
+     * Awaited once the wallet returned a step's hash, before its receipt is
+     * awaited: a Safe app's proposal hash (`safe`), or one its Safe already
+     * queued (`adopted`). A throw keeps the step pending, never unsent.
+     */
+    onSubmitted?: (call: ReviewedCall, step: number, hash: Hex, sent: {
+        safe: boolean;
+        adopted: boolean;
+    }) => void | Promise<void>;
+    /**
+     * Awaited once a step's receipt shows it succeeded and its progress is
+     * saved, before the next step; on resume, for a step that went through
+     * while away, when its receipt can be read. A throw is ignored: the step
+     * went through. A Safe app's proposal is never told here: its hold's
+     * settlement is (`useReviewedRun`'s `done` and `receipt`).
+     */
+    onConfirmed?: (call: ReviewedCall, step: number, receipt: TransactionReceipt) => void | Promise<void>;
+    /**
+     * Through a Safe app, every call goes to the Safe as one proposal (the
+     * app folds `sendCalls` into a MultiSend its signers approve once and run
+     * together, in order), under one hold: the first call's `intent`, or else
+     * `safeBatchIntent` of the calls. The calls must share a chain and
+     * the adapter must offer `sendCalls`. Nothing is journaled: the proposal
+     * runs whole or not at all. A resumed sequence, and any other wallet, sends
+     * the calls one by one.
+     */
+    batch?: boolean;
+    /**
+     * Withdraws the review while it is open: the run ends as cancelled with
+     * nothing sent, and the prompt's own `signal` aborts so its UI closes.
+     * Once the review is confirmed it changes nothing.
+     */
+    signal?: AbortSignal;
+    /**
+     * The site's key for this action (`payIntent(...)`, say). When set, the
+     * action is journaled once its review is confirmed, before the first
+     * wallet call, so {@link resumeReviewed} can finish it without sending a
+     * completed step again.
+     */
+    scope?: string;
+    /**
+     * A plan the person already reviewed ({@link reviewPlan}): nothing is
+     * asked, and every call (and every call the `signatures` let someone run)
+     * is spent from it, or nothing is sent.
+     */
+    plan?: ReviewedPlan;
+    /**
+     * Follows a sent step whose receipt its hold has not verified yet, in the
+     * run: `onConfirming(step)` tells the site, the hold is followed until it
+     * settles the step, and the run goes on to the next step or resolves.
+     * After `timeoutMs` (2 minutes by default) or `signal`, the run throws
+     * {@link ReviewedReceiptUnverifiedError} with the step still held, as it
+     * does at once without `follow`. Once `signal` aborts after a step was
+     * sent, the run sends nothing more: a later step is refused at its last
+     * gate as cancelled.
+     */
+    follow?: {
+        onConfirming?: (step: number) => void;
+        signal?: AbortSignal;
+        timeoutMs?: number;
+    };
+};
+export type ReviewedSendDeps = {
+    adapter: WalletAdapter;
+    clientFor: (chainId: number) => PublicClient;
+    hold: WriteHold;
+    onProgress?: (progress: ReviewedProgress) => void;
+    /** Self-reviewing adapters only: the model core would have shown. */
+    onPreview?: (model: ReviewModel) => void;
+    /** Where sequences are journaled: the hold's storage (the browser's, by default). */
+    storage?: HeldWriteStorage;
+};
+export type ReviewedProgress = {
+    step: number;
+    total: number;
+    phase: ReviewedWritePhase | "receipt" | "proposed" | "done";
+    hash?: Hex;
+};
+export type ReviewedResult = ({
+    status: "done";
+    hashes: Hex[];
+    receipts: TransactionReceipt[];
+} | {
+    status: "proposed";
+    step: number;
+    safeTxHash: Hex;
+}) & {
+    /** The action's `signatures`, signed in order, when it had any. */
+    signatures?: Hex[];
+};
+export declare const SAFE_BATCH_UNSUPPORTED_LINE = "This Safe connection can't propose these calls as one transaction. Nothing was sent.";
+export declare const SAFE_BATCH_UNFOLLOWABLE_LINE = "Your Safe took this batch, but it can't be followed from here. Check your Safe before sending again.";
+/** What {@link reviewPlan} reviews: calls from `account`, or from their own `from`. */
+export type ReviewedPlanAction = Pick<ReviewedAction, "account" | "title" | "description" | "confirmLabel" | "context" | "signal"> & {
+    calls: readonly (ReviewedCall & {
+        /** Who sends the call: a Safe `account` owns, say, or "relayr" for one Relayr's own account runs. */
+        from?: Address | "relayr";
+        /**
+         * The Relayr round this call goes in, by the app's key: a quote paid by
+         * `payRelayrReviewed` with this `relayrRound`. The review shows each round's fee bound (Relayr's
+         * stand-in quote plus `RELAYR_FEE_MARGIN_BPS`, paid on the round's
+         * payment chain); a round whose quote is within it pays with no prompt.
+         */
+        relayrRound?: string;
+    })[];
+    /** Each Relayr round's payment chain, by its key: by default, the round's first call's chain. */
+    relayrRounds?: Readonly<Record<string, {
+        paymentChainId: number;
+    }>>;
+};
+/**
+ * One review of calls an app then sends one by one, across chains and
+ * paths: core's prompt over exactly `action.calls`, simulated as their
+ * senders, and nothing else. The plan it returns lets {@link sendReviewed},
+ * `signReviewed`, `proposeReviewedSafeTransaction` and `payRelayrReviewed`
+ * skip their prompt for a call identical to one of its
+ * calls (account, chain, sender, target, data, value and gas: a call's
+ * exact gas limit, or a forward request's signed gas, is set before the
+ * review), each spent once, for {@link REVIEWED_PLAN_TTL_MS} after confirm.
+ * Anything else is refused.
+ */
+export declare function reviewPlan(action: ReviewedPlanAction, deps: Pick<ReviewedSendDeps, "clientFor">): Promise<ReviewedPlan>;
+/**
+ * Sends one reviewed action: one call, or a sequence (approve then pay, say),
+ * reviewed once and sent without asking again.
+ *
+ * Core builds one model over every call and asks the registered review
+ * handler once ({@link registerReviewHandler}); nothing is sent unless the
+ * handler returns the confirmation core minted for that model. The
+ * review-time simulation runs while the review is open, and confirm never
+ * waits on it. Then, for each call in order: `reverify`, a check that the call
+ * still encodes to exactly the reviewed bytes, a simulation (at the previous
+ * step's receipt block when `dependsOnPrior`), and the send of those bytes
+ * through the adapter under the call's write hold, by
+ * `submitReviewedContractWrite`. The connected account must stay
+ * `action.account`, and the wallet on the call's chain. Each step waits for
+ * its receipt; a revert stops the sequence. A Safe-connected wallet's first
+ * step becomes a proposal, and the sequence stops there.
+ *
+ * The action's `signatures` show in the same model and prompt, and are
+ * signed after confirm and before the first send, as `signReviewed` signs.
+ *
+ * Only an explicit wallet rejection (EIP-1193 4001) releases a step's hold;
+ * any other failure once the wallet opened keeps it held.
+ *
+ * A self-reviewing adapter (Signa) is never prompted: `onPreview` gets the
+ * model, and the adapter gets the raw calls to review on its own page. An
+ * action with `signatures` is refused for it with EIP-1193 4200.
+ */
+export declare function sendReviewed(action: ReviewedAction, deps: ReviewedSendDeps): Promise<ReviewedResult>;
+/**
+ * Finish a sequence {@link sendReviewed} saved under `record.scope`: the step
+ * whose wallet call opened is decided by its write hold first (still held is
+ * refused; a settled success counts as completed, its receipt's hash
+ * recorded), then every remaining step, and only those, is reviewed once
+ * more as one fresh model and sent as `sendReviewed` sends. `reverify` gets
+ * each step's original index in the action. Only `record.account` can resume
+ * it. The result's `hashes` are every completed step's, `receipts` this
+ * run's.
+ */
+export declare function resumeReviewed(record: ReviewedSequenceRecord, action: Pick<ReviewedAction, "reverify" | "assertWriteState" | "guard" | "context" | "title" | "beforeWallet" | "onUnsent" | "onSubmitted" | "onConfirmed" | "signal" | "follow">, deps: ReviewedSendDeps): Promise<ReviewedResult>;
+/**
+ * Completes a sent step (one a run left at its receipt,
+ * {@link ReviewedReceiptUnverifiedError}, or a proposal: its step and its
+ * `held` call and reservation) once its hold settled that send, as the run
+ * itself would have: the saved sequence under `scope` records it, a success
+ * is told to `onConfirmed` with the receipt its hold verified (`receipt`,
+ * the hold view's, say, when it is that one) and only then acknowledged, the
+ * one acknowledgement of a followed step. Returns the settlement and that
+ * checked receipt (a failure's too); null until then. A read that fails or disagrees with the hold throws with
+ * nothing advanced: call it again. Call it once per settlement:
+ * `onConfirmed` is told each time.
+ */
+export declare function completeReviewedStep(unverified: Pick<ReviewedReceiptUnverifiedError, "step" | "held">, action: Pick<ReviewedAction, "account" | "scope" | "onConfirmed">, deps: ReviewedSendDeps, receipt?: TransactionReceipt | null): Promise<{
+    settled: WriteHoldSettled;
+    receipt: TransactionReceipt | null;
+} | null>;
+//# sourceMappingURL=send.d.ts.map

package/dist/cjs/review/send.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"send.d.ts","sourceRoot":"","sources":["../../../src/review/send.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,8BAA8B,EAG/B,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAGL,KAAK,GAAG,EACR,KAAK,OAAO,EACZ,KAAK,GAAG,EACR,KAAK,YAAY,EACjB,KAAK,kBAAkB,EACxB,MAAM,MAAM,CAAC;AAMd,OAAO,EAIL,KAAK,kBAAkB,EACxB,MAAM,oBAAoB,CAAC;AAgB5B,OAAO,EAGL,KAAK,gBAAgB,EACrB,KAAK,WAAW,EAEjB,MAAM,YAAY,CAAC;AACpB,OAAO,EAML,KAAK,YAAY,EAClB,MAAM,WAAW,CAAC;AASnB,OAAO,EAQL,KAAK,sBAAsB,EAC5B,MAAM,eAAe,CAAC;AACvB,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,WAAW,CAAC;AAcnB,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,aAAa,CAAC;AACrB,OAAO,EAML,KAAK,SAAS,EACd,KAAK,qBAAqB,EAE1B,KAAK,gBAAgB,EACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAEL,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAE5B,MAAM,MAAM,YAAY,GAAG;IACzB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,OAAO,CAAC;IACZ,IAAI,EAAE,GAAG,CAAC;IACV,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;;OAKG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC;IACb;;;;;;;OAOG;IACH,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACtC,6EAA6E;IAC7E,GAAG,CAAC,EAAE,GAAG,CAAC;IACV,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,IAAI,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC1B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,0FAA0F;IAC1F,MAAM,CAAC,EAAE,SAAS,qBAAqB,EAAE,CAAC;IAC1C,qDAAqD;IACrD,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;;;OAMG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAAC;AAEF,gDAAgD;AAChD,MAAM,MAAM,kBAAkB,GAAG;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,GAAG,CAAC;CAChB,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,SAAS,YAAY,EAAE,CAAC;IAC/B;;;OAGG;IACH,UAAU,CAAC,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAC1C,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,OAAO,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;IACtC;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,CACT,IAAI,EAAE,YAAY,EAClB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,kBAAkB,GAAG,SAAS,KAClC,OAAO,CAAC,IAAI,CAAC,CAAC;IACnB,0DAA0D;IAC1D,gBAAgB,CAAC,EAAE,MAAM,IAAI,CAAC;IAC9B,+DAA+D;IAC/D,KAAK,CAAC,EAAE,MAAM,IAAI,CAAC;IACnB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1E;;;;OAIG;IACH,QAAQ,CAAC,EAAE,CAAC,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtE;;;;OAIG;IACH,WAAW,CAAC,EAAE,CACZ,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,GAAG,EACT,IAAI,EAAE;QAAE,IAAI,EAAE,OAAO,CAAC;QAAC,OAAO,EAAE,OAAO,CAAA;KAAE,KACtC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,CACZ,IAAI,EAAE,YAAY,EAClB,IAAI,EAAE,MAAM,EACZ,OAAO,EAAE,kBAAkB,KACxB,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC1B;;;;;;;;OAQG;IACH,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB;;;;OAIG;IACH,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,IAAI,CAAC,EAAE,YAAY,CAAC;IACpB;;;;;;;;;OASG;IACH,MAAM,CAAC,EAAE;QACP,YAAY,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;QACtC,MAAM,CAAC,EAAE,WAAW,CAAC;QACrB,SAAS,CAAC,EAAE,MAAM,CAAC;KACpB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,OAAO,EAAE,aAAa,CAAC;IACvB,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,YAAY,CAAC;IAC7C,IAAI,EAAE,SAAS,CAAC;IAChB,UAAU,CAAC,EAAE,CAAC,QAAQ,EAAE,gBAAgB,KAAK,IAAI,CAAC;IAClD,qEAAqE;IACrE,SAAS,CAAC,EAAE,CAAC,KAAK,EAAE,WAAW,KAAK,IAAI,CAAC;IACzC,qFAAqF;IACrF,OAAO,CAAC,EAAE,gBAAgB,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,gBAAgB,GAAG;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,kBAAkB,GAAG,SAAS,GAAG,UAAU,GAAG,MAAM,CAAC;IAC5D,IAAI,CAAC,EAAE,GAAG,CAAC;CACZ,CAAC;AAEF,MAAM,MAAM,cAAc,GAAG,CACzB;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,GAAG,EAAE,CAAC;IAAC,QAAQ,EAAE,kBAAkB,EAAE,CAAA;CAAE,GACjE;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,GAAG,CAAA;CAAE,CACxD,GAAG;IACF,mEAAmE;IACnE,UAAU,CAAC,EAAE,GAAG,EAAE,CAAC;CACpB,CAAC;AAoBF,eAAO,MAAM,2BAA2B,yFACgD,CAAC;AACzF,eAAO,MAAM,4BAA4B,yGAC+D,CAAC;AAgSzG,uFAAuF;AACvF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,cAAc,EACd,SAAS,GAAG,OAAO,GAAG,aAAa,GAAG,cAAc,GAAG,SAAS,GAAG,QAAQ,CAC5E,GAAG;IACF,KAAK,EAAE,SAAS,CAAC,YAAY,GAAG;QAC9B,qGAAqG;QACrG,IAAI,CAAC,EAAE,OAAO,GAAG,QAAQ,CAAC;QAC1B;;;;;WAKG;QACH,WAAW,CAAC,EAAE,MAAM,CAAC;KACtB,CAAC,EAAE,CAAC;IACL,iGAAiG;IACjG,YAAY,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC,CAAC;CACrE,CAAC;AAEF;;;;;;;;;;GAUG;AACH,wBAAsB,UAAU,CAC9B,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,WAAW,CAAC,GACxC,OAAO,CAAC,YAAY,CAAC,CA4FvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,cAAc,EACtB,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,cAAc,CAAC,CAIzB;AAED;;;;;;;;;GASG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,sBAAsB,EAC9B,MAAM,EAAE,IAAI,CACV,cAAc,EACZ,UAAU,GACV,kBAAkB,GAClB,OAAO,GACP,SAAS,GACT,OAAO,GACP,cAAc,GACd,UAAU,GACV,aAAa,GACb,aAAa,GACb,QAAQ,GACR,QAAQ,CACX,EACD,IAAI,EAAE,gBAAgB,GACrB,OAAO,CAAC,cAAc,CAAC,CAgEzB;AA6GD;;;;;;;;;;;GAWG;AACH,wBAAsB,oBAAoB,CACxC,UAAU,EAAE,IAAI,CAAC,8BAA8B,EAAE,MAAM,GAAG,MAAM,CAAC,EACjE,MAAM,EAAE,IAAI,CAAC,cAAc,EAAE,SAAS,GAAG,OAAO,GAAG,aAAa,CAAC,EACjE,IAAI,EAAE,gBAAgB,EACtB,OAAO,CAAC,EAAE,kBAAkB,GAAG,IAAI,GAClC,OAAO,CAAC;IACT,OAAO,EAAE,gBAAgB,CAAC;IAC1B,OAAO,EAAE,kBAAkB,GAAG,IAAI,CAAC;CACpC,GAAG,IAAI,CAAC,CA+BR"}