@bsv/wallet-toolbox 2.4.3 → 2.4.20

package/out/src/wab-client/WABClient.js

@@ -2,186 +2,138 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.WABClient = void 0;
 const sdk_1 = require("@bsv/sdk");
+const WABTransport_1 = require("./WABTransport");
+function assertHexIdentifier(value, name) {
+    if (!/^[0-9a-fA-F]{64}$/.test(value)) {
+        throw new TypeError(`${name} must be a 32-byte hexadecimal string.`);
+    }
+}
+function assertMethodType(methodType) {
+    if (!/^[a-zA-Z0-9_-]{1,64}$/.test(methodType)) {
+        throw new TypeError('methodType contains unsupported characters.');
+    }
+}
+function normalizeAuthPayload(methodType, payload) {
+    if (methodType !== 'TwilioPhone')
+        return payload;
+    const phoneNumber = payload.phoneNumber;
+    if (typeof phoneNumber !== 'string') {
+        throw new TypeError('TwilioPhone authentication requires phoneNumber.');
+    }
+    const normalized = phoneNumber.trim();
+    if (!/^\+[1-9]\d{7,14}$/.test(normalized)) {
+        throw new TypeError('phoneNumber must use canonical E.164 format.');
+    }
+    return {
+        ...payload,
+        phoneNumber: normalized
+    };
+}
+/**
+ * Production-oriented WAB client with one security and observability boundary
+ * for every endpoint.
+ */
 class WABClient {
-    serverUrl;
-    constructor(serverUrl) {
-        this.serverUrl = serverUrl;
+    transport;
+    constructor(serverUrl, options = {}) {
+        this.transport = new WABTransport_1.WABTransport(serverUrl, options);
     }
-    /**
-     * Return the WAB server info
-     */
     async getInfo() {
-        const res = await fetch(`${this.serverUrl}/info`);
-        return await res.json();
+        return await this.transport.request('/info', {
+            method: 'GET',
+            operation: 'get-info'
+        });
     }
-    /**
-     * Generate a random 256-bit presentation key as a hex string (client side).
-     */
     generateRandomPresentationKey() {
         return sdk_1.PrivateKey.fromRandom().toHex();
     }
-    /**
-     * Start an Auth Method flow
-     */
-    async startAuthMethod(authMethod, presentationKey, payload) {
-        return await authMethod.startAuth(this.serverUrl, presentationKey, payload);
-    }
-    /**
-     * Complete an Auth Method flow
-     */
-    async completeAuthMethod(authMethod, presentationKey, payload) {
-        return await authMethod.completeAuth(this.serverUrl, presentationKey, payload);
-    }
-    /**
-     * List user-linked methods
-     */
+    async startAuthMethod(authMethod, presentationKey, payload, correlationId) {
+        assertHexIdentifier(presentationKey, 'presentationKey');
+        return await authMethod.startAuth(this.transport.serverUrl, presentationKey, payload, this.transport, correlationId);
+    }
+    async completeAuthMethod(authMethod, presentationKey, payload, correlationId) {
+        assertHexIdentifier(presentationKey, 'presentationKey');
+        return await authMethod.completeAuth(this.transport.serverUrl, presentationKey, payload, this.transport, correlationId);
+    }
     async listLinkedMethods(presentationKey) {
-        const res = await fetch(`${this.serverUrl}/user/linkedMethods`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ presentationKey })
+        assertHexIdentifier(presentationKey, 'presentationKey');
+        return await this.transport.request('/user/linkedMethods', {
+            operation: 'list-linked-methods',
+            body: { presentationKey }
         });
-        return await res.json();
     }
-    /**
-     * Unlink a given Auth Method by ID
-     */
     async unlinkMethod(presentationKey, authMethodId) {
-        const res = await fetch(`${this.serverUrl}/user/unlinkMethod`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ presentationKey, authMethodId })
+        assertHexIdentifier(presentationKey, 'presentationKey');
+        if (!Number.isSafeInteger(authMethodId) || authMethodId <= 0) {
+            throw new TypeError('authMethodId must be a positive safe integer.');
+        }
+        return await this.transport.request('/user/unlinkMethod', {
+            operation: 'unlink-method',
+            body: { presentationKey, authMethodId }
         });
-        return await res.json();
     }
-    /**
-     * Request faucet
-     */
     async requestFaucet(presentationKey) {
-        const res = await fetch(`${this.serverUrl}/faucet/request`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ presentationKey })
+        assertHexIdentifier(presentationKey, 'presentationKey');
+        return await this.transport.request('/faucet/request', {
+            operation: 'request-faucet',
+            body: { presentationKey }
         });
-        return await res.json();
     }
-    /**
-     * Delete user
-     */
     async deleteUser(presentationKey) {
-        const res = await fetch(`${this.serverUrl}/user/delete`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({ presentationKey })
+        assertHexIdentifier(presentationKey, 'presentationKey');
+        return await this.transport.request('/user/delete', {
+            operation: 'delete-user',
+            body: { presentationKey }
         });
-        return await res.json();
-    }
-    // ============================================================
-    // Shamir Share Management (2-of-3 Key Recovery System)
-    // ============================================================
-    /**
-     * Start OTP verification for share operations
-     * This initiates the auth flow (e.g., sends SMS code via Twilio)
-     *
-     * @param methodType The auth method type (e.g., "TwilioPhone", "DevConsole")
-     * @param userIdHash SHA256 hash of the user's identity key
-     * @param payload Auth method specific data (e.g., { phoneNumber: "+1..." })
-     */
+    }
     async startShareAuth(methodType, userIdHash, payload) {
-        const res = await fetch(`${this.serverUrl}/auth/start`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
+        assertMethodType(methodType);
+        assertHexIdentifier(userIdHash, 'userIdHash');
+        const normalizedPayload = normalizeAuthPayload(methodType, payload);
+        return await this.transport.request('/auth/start', {
+            operation: 'start-share-auth',
+            body: {
                 methodType,
-                presentationKey: userIdHash, // Reuse existing auth flow with userIdHash
-                payload
-            })
+                presentationKey: userIdHash,
+                payload: normalizedPayload
+            }
         });
-        return await res.json();
-    }
-    /**
-     * Store a Shamir share (Share B) on the server
-     * Requires prior OTP verification via startShareAuth
-     *
-     * @param methodType The auth method type used for verification
-     * @param payload Contains the OTP code and auth method specific data
-     * @param shareB The Shamir share to store (format: x.y.threshold.integrity)
-     * @param userIdHash SHA256 hash of the user's identity key
-     */
+    }
     async storeShare(methodType, payload, shareB, userIdHash) {
-        const res = await fetch(`${this.serverUrl}/share/store`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                methodType,
-                payload,
-                shareB,
-                userIdHash
-            })
+        assertMethodType(methodType);
+        assertHexIdentifier(userIdHash, 'userIdHash');
+        const normalizedPayload = normalizeAuthPayload(methodType, payload);
+        return await this.transport.request('/share/store', {
+            operation: 'store-share',
+            body: { methodType, payload: normalizedPayload, shareB, userIdHash }
         });
-        return await res.json();
-    }
-    /**
-     * Retrieve a Shamir share (Share B) from the server
-     * Requires OTP verification
-     *
-     * @param methodType The auth method type used for verification
-     * @param payload Contains the OTP code and auth method specific data
-     * @param userIdHash SHA256 hash of the user's identity key
-     */
+    }
     async retrieveShare(methodType, payload, userIdHash) {
-        const res = await fetch(`${this.serverUrl}/share/retrieve`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                methodType,
-                payload,
-                userIdHash
-            })
+        assertMethodType(methodType);
+        assertHexIdentifier(userIdHash, 'userIdHash');
+        const normalizedPayload = normalizeAuthPayload(methodType, payload);
+        return await this.transport.request('/share/retrieve', {
+            operation: 'retrieve-share',
+            body: { methodType, payload: normalizedPayload, userIdHash }
         });
-        return await res.json();
-    }
-    /**
-     * Update a Shamir share (for key rotation)
-     * Requires OTP verification
-     *
-     * @param methodType The auth method type used for verification
-     * @param payload Contains the OTP code and auth method specific data
-     * @param userIdHash SHA256 hash of the user's identity key
-     * @param newShareB The new Shamir share to store
-     */
+    }
     async updateShare(methodType, payload, userIdHash, newShareB) {
-        const res = await fetch(`${this.serverUrl}/share/update`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                methodType,
-                payload,
-                userIdHash,
-                newShareB
-            })
+        assertMethodType(methodType);
+        assertHexIdentifier(userIdHash, 'userIdHash');
+        const normalizedPayload = normalizeAuthPayload(methodType, payload);
+        return await this.transport.request('/share/update', {
+            operation: 'update-share',
+            body: { methodType, payload: normalizedPayload, userIdHash, newShareB }
         });
-        return await res.json();
-    }
-    /**
-     * Delete a Shamir user's account and stored share
-     * Requires OTP verification
-     *
-     * @param methodType The auth method type used for verification
-     * @param payload Contains the OTP code and auth method specific data
-     * @param userIdHash SHA256 hash of the user's identity key
-     */
+    }
     async deleteShamirUser(methodType, payload, userIdHash) {
-        const res = await fetch(`${this.serverUrl}/share/delete`, {
-            method: 'POST',
-            headers: { 'Content-Type': 'application/json' },
-            body: JSON.stringify({
-                methodType,
-                payload,
-                userIdHash
-            })
+        assertMethodType(methodType);
+        assertHexIdentifier(userIdHash, 'userIdHash');
+        const normalizedPayload = normalizeAuthPayload(methodType, payload);
+        return await this.transport.request('/share/delete', {
+            operation: 'delete-share-user',
+            body: { methodType, payload: normalizedPayload, userIdHash }
         });
-        return await res.json();
     }
 }
 exports.WABClient = WABClient;

package/out/src/wab-client/WABClient.js.map

@@ -1 +1 @@
-{"version":3,"file":"WABClient.js","sourceRoot":"","sources":["../../../src/wab-client/WABClient.ts"],"names":[],"mappings":";;;AAYA,kCAAqC;AAErC,MAAa,SAAS;IACU;IAA9B,YAA8B,SAAiB;QAAjB,cAAS,GAAT,SAAS,CAAQ;IAAG,CAAC;IAEnD;;OAEG;IACI,KAAK,CAAC,OAAO;QAClB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,OAAO,CAAC,CAAA;QACjD,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IAED;;OAEG;IACI,6BAA6B;QAClC,OAAO,gBAAU,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,CAAA;IACxC,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,eAAe,CAAE,UAAgC,EAAE,eAAuB,EAAE,OAAY;QACnG,OAAO,MAAM,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,CAAC,CAAA;IAC7E,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,kBAAkB,CAAE,UAAgC,EAAE,eAAuB,EAAE,OAAY;QACtG,OAAO,MAAM,UAAU,CAAC,YAAY,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,OAAO,CAAC,CAAA;IAChF,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,iBAAiB,CAAE,eAAuB;QACrD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,qBAAqB,EAAE;YAC9D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC;SAC1C,CAAC,CAAA;QACF,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,YAAY,CAAE,eAAuB,EAAE,YAAoB;QACtE,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,oBAAoB,EAAE;YAC7D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,YAAY,EAAE,CAAC;SACxD,CAAC,CAAA;QACF,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,aAAa,CAAE,eAAuB;QACjD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,iBAAiB,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC;SAC1C,CAAC,CAAA;QACF,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IAED;;OAEG;IACI,KAAK,CAAC,UAAU,CAAE,eAAuB;QAC9C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,cAAc,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,eAAe,EAAE,CAAC;SAC1C,CAAC,CAAA;QACF,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IAED,+DAA+D;IAC/D,uDAAuD;IACvD,+DAA+D;IAE/D;;;;;;;OAOG;IACI,KAAK,CAAC,cAAc,CACzB,UAAkB,EAClB,UAAkB,EAClB,OAAY;QAEZ,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,aAAa,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU;gBACV,eAAe,EAAE,UAAU,EAAE,2CAA2C;gBACxE,OAAO;aACR,CAAC;SACH,CAAC,CAAA;QACF,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,UAAU,CACrB,UAAkB,EAClB,OAAY,EACZ,MAAc,EACd,UAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,cAAc,EAAE;YACvD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU;gBACV,OAAO;gBACP,MAAM;gBACN,UAAU;aACX,CAAC;SACH,CAAC,CAAA;QACF,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,aAAa,CACxB,UAAkB,EAClB,OAAY,EACZ,UAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,iBAAiB,EAAE;YAC1D,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU;gBACV,OAAO;gBACP,UAAU;aACX,CAAC;SACH,CAAC,CAAA;QACF,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IAED;;;;;;;;OAQG;IACI,KAAK,CAAC,WAAW,CACtB,UAAkB,EAClB,OAAY,EACZ,UAAkB,EAClB,SAAiB;QAEjB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,eAAe,EAAE;YACxD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU;gBACV,OAAO;gBACP,UAAU;gBACV,SAAS;aACV,CAAC;SACH,CAAC,CAAA;QACF,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;IAED;;;;;;;OAOG;IACI,KAAK,CAAC,gBAAgB,CAC3B,UAAkB,EAClB,OAAY,EACZ,UAAkB;QAElB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,SAAS,eAAe,EAAE;YACxD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,UAAU;gBACV,OAAO;gBACP,UAAU;aACX,CAAC;SACH,CAAC,CAAA;QACF,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;IACzB,CAAC;CACF;AAtND,8BAsNC"}
+{"version":3,"file":"WABClient.js","sourceRoot":"","sources":["../../../src/wab-client/WABClient.ts"],"names":[],"mappings":";;;AAAA,kCAAqC;AAOrC,iDAAkE;AAuBlE,SAAS,mBAAmB,CAAE,KAAa,EAAE,IAAY;IACvD,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QACrC,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,wCAAwC,CAAC,CAAA;IACtE,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAE,UAAkB;IAC3C,IAAI,CAAC,uBAAuB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC9C,MAAM,IAAI,SAAS,CAAC,6CAA6C,CAAC,CAAA;IACpE,CAAC;AACH,CAAC;AAED,SAAS,oBAAoB,CAAE,UAAkB,EAAE,OAAoB;IACrE,IAAI,UAAU,KAAK,aAAa;QAAE,OAAO,OAAO,CAAA;IAChD,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAA;IACvC,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE,CAAC;QACpC,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAA;IACzE,CAAC;IACD,MAAM,UAAU,GAAG,WAAW,CAAC,IAAI,EAAE,CAAA;IACrC,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1C,MAAM,IAAI,SAAS,CAAC,8CAA8C,CAAC,CAAA;IACrE,CAAC;IACD,OAAO;QACL,GAAG,OAAO;QACV,WAAW,EAAE,UAAU;KACxB,CAAA;AACH,CAAC;AAED;;;GAGG;AACH;IACW,SAAS,CAAc;IAEhC,YAAa,SAAiB,EAAE,OAAO,GAAqB,EAAE;QAC5D,IAAI,CAAC,SAAS,GAAG,IAAI,2BAAY,CAAC,SAAS,EAAE,OAAO,CAAC,CAAA;IACvD,CAAC;IAEM,KAAK,CAAC,OAAO;QAClB,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAgB,OAAO,EAAE;YAC1D,MAAM,EAAE,KAAK;YACb,SAAS,EAAE,UAAU;SACtB,CAAC,CAAA;IACJ,CAAC;IAEM,6BAA6B;QAClC,OAAO,gBAAU,CAAC,UAAU,EAAE,CAAC,KAAK,EAAE,CAAA;IACxC,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,UAAgC,EAChC,eAAuB,EACvB,OAAoB,EACpB,aAAsB;QAEtB,mBAAmB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAA;QACvD,OAAO,MAAM,UAAU,CAAC,SAAS,CAC/B,IAAI,CAAC,SAAS,CAAC,SAAS,EACxB,eAAe,EACf,OAAO,EACP,IAAI,CAAC,SAAS,EACd,aAAa,CACd,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,kBAAkB,CAC7B,UAAgC,EAChC,eAAuB,EACvB,OAAoB,EACpB,aAAsB;QAEtB,mBAAmB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAA;QACvD,OAAO,MAAM,UAAU,CAAC,YAAY,CAClC,IAAI,CAAC,SAAS,CAAC,SAAS,EACxB,eAAe,EACf,OAAO,EACP,IAAI,CAAC,SAAS,EACd,aAAa,CACd,CAAA;IACH,CAAC;IAEM,KAAK,CAAC,iBAAiB,CAAE,eAAuB;QACrD,mBAAmB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAA;QACvD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAuB,qBAAqB,EAAE;YAC/E,SAAS,EAAE,qBAAqB;YAChC,IAAI,EAAE,EAAE,eAAe,EAAE;SAC1B,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,YAAY,CACvB,eAAuB,EACvB,YAAoB;QAEpB,mBAAmB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAA;QACvD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,YAAY,CAAC,IAAI,YAAY,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,SAAS,CAAC,+CAA+C,CAAC,CAAA;QACtE,CAAC;QACD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAuB,oBAAoB,EAAE;YAC9E,SAAS,EAAE,eAAe;YAC1B,IAAI,EAAE,EAAE,eAAe,EAAE,YAAY,EAAE;SACxC,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,aAAa,CAAE,eAAuB;QACjD,mBAAmB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAA;QACvD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAoB,iBAAiB,EAAE;YACxE,SAAS,EAAE,gBAAgB;YAC3B,IAAI,EAAE,EAAE,eAAe,EAAE;SAC1B,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,UAAU,CAAE,eAAuB;QAC9C,mBAAmB,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAA;QACvD,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAuB,cAAc,EAAE;YACxE,SAAS,EAAE,aAAa;YACxB,IAAI,EAAE,EAAE,eAAe,EAAE;SAC1B,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,cAAc,CACzB,UAAkB,EAClB,UAAkB,EAClB,OAAoB;QAEpB,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAC5B,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;QAC7C,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACnE,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,aAAa,EAAE;YACjD,SAAS,EAAE,kBAAkB;YAC7B,IAAI,EAAE;gBACJ,UAAU;gBACV,eAAe,EAAE,UAAU;gBAC3B,OAAO,EAAE,iBAAiB;aAC3B;SACF,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,UAAU,CACrB,UAAkB,EAClB,OAAoB,EACpB,MAAc,EACd,UAAkB;QAElB,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAC5B,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;QAC7C,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACnE,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,cAAc,EAAE;YAClD,SAAS,EAAE,aAAa;YACxB,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,EAAE,UAAU,EAAE;SACrE,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,aAAa,CACxB,UAAkB,EAClB,OAAoB,EACpB,UAAkB;QAElB,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAC5B,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;QAC7C,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACnE,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,iBAAiB,EAAE;YACrD,SAAS,EAAE,gBAAgB;YAC3B,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE;SAC7D,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,WAAW,CACtB,UAAkB,EAClB,OAAoB,EACpB,UAAkB,EAClB,SAAiB;QAEjB,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAC5B,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;QAC7C,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACnE,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE;YACnD,SAAS,EAAE,cAAc;YACzB,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,SAAS,EAAE;SACxE,CAAC,CAAA;IACJ,CAAC;IAEM,KAAK,CAAC,gBAAgB,CAC3B,UAAkB,EAClB,OAAoB,EACpB,UAAkB;QAElB,gBAAgB,CAAC,UAAU,CAAC,CAAA;QAC5B,mBAAmB,CAAC,UAAU,EAAE,YAAY,CAAC,CAAA;QAC7C,MAAM,iBAAiB,GAAG,oBAAoB,CAAC,UAAU,EAAE,OAAO,CAAC,CAAA;QACnE,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,eAAe,EAAE;YACnD,SAAS,EAAE,mBAAmB;YAC9B,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE;SAC7D,CAAC,CAAA;IACJ,CAAC;CACF"}

package/out/src/wab-client/WABTransport.d.ts

@@ -0,0 +1,81 @@
+import { Telemetry, TelemetryConfig } from '@bsv/sdk';
+export type WABClientErrorCode = 'WAB_INVALID_CONFIGURATION' | 'WAB_INVALID_REQUEST' | 'WAB_NETWORK_ERROR' | 'WAB_TIMEOUT' | 'WAB_HTTP_ERROR' | 'WAB_ENDPOINT_MISMATCH' | 'WAB_REQUEST_TOO_LARGE' | 'WAB_RESPONSE_TOO_LARGE' | 'WAB_INVALID_RESPONSE';
+export interface WABClientErrorOptions {
+    cause?: unknown;
+    correlationId?: string;
+    operation?: string;
+    route?: string;
+    endpointMarkerPresent?: boolean;
+    responseCorrelationMatched?: boolean;
+}
+/**
+ * A privacy-safe WAB transport failure. Response bodies and request payloads
+ * are deliberately excluded from the error.
+ */
+export declare class WABClientError extends Error {
+    readonly code: WABClientErrorCode;
+    readonly retryable: boolean;
+    readonly status?: number | undefined;
+    constructor(code: WABClientErrorCode, message: string, retryable: boolean, status?: number | undefined, options?: WABClientErrorOptions);
+    readonly correlationId?: string;
+    readonly operation?: string;
+    readonly route?: string;
+    readonly endpointMarkerPresent?: boolean;
+    readonly responseCorrelationMatched?: boolean;
+}
+export interface WABTransportOptions {
+    /** Injectable fetch implementation for React Native, tests, and custom runtimes. */
+    fetch?: typeof fetch;
+    /** Hard wall-clock request timeout. Defaults to 10 seconds. */
+    timeoutMs?: number;
+    /** Maximum encoded JSON request size. Defaults to 1 MiB. */
+    maxRequestBytes?: number;
+    /** Maximum accepted JSON response size. Defaults to 1 MiB. */
+    maxResponseBytes?: number;
+    /** Optional privacy-bounded telemetry integration. */
+    telemetry?: TelemetryConfig;
+}
+export interface WABRequestOptions {
+    method?: 'GET' | 'POST';
+    body?: unknown;
+    operation: string;
+    correlationId?: string;
+}
+/**
+ * Centralized, bounded transport used by every WAB client operation.
+ *
+ * Only fixed endpoint metadata is reported. Request bodies and response bodies
+ * never cross the telemetry boundary.
+ */
+export declare class WABTransport {
+    readonly serverUrl: string;
+    readonly serverOrigin: string;
+    readonly telemetry: Telemetry;
+    private readonly fetchClient;
+    private readonly timeoutMs;
+    private readonly maxRequestBytes;
+    private readonly maxResponseBytes;
+    constructor(serverUrl: string, options?: WABTransportOptions);
+    createCorrelationId(): string;
+    request<T>(path: string, options: WABRequestOptions): Promise<T>;
+    private createRequestMetadata;
+    private captureRequestStarted;
+    private encodeRequestBody;
+    private startRequestTimeout;
+    private fetchResponse;
+    private createResponseContext;
+    private assertSuccessfulResponse;
+    private readResponseText;
+    private parseResponseObject;
+    private captureRequestFailure;
+    private readBoundedResponse;
+    private rejectOversizedDeclaredResponse;
+    private readBoundedArrayBuffer;
+    private readBoundedStream;
+    private decodeChunks;
+    private responseTooLargeError;
+    private cancelResponseBody;
+    private cancelResponseReader;
+    private captureFailure;
+}
+//# sourceMappingURL=WABTransport.d.ts.map

package/out/src/wab-client/WABTransport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"WABTransport.d.ts","sourceRoot":"","sources":["../../../src/wab-client/WABTransport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,UAAU,CAAA;AAcrD,MAAM,MAAM,kBAAkB,GAC1B,2BAA2B,GAC3B,qBAAqB,GACrB,mBAAmB,GACnB,aAAa,GACb,gBAAgB,GAChB,uBAAuB,GACvB,uBAAuB,GACvB,wBAAwB,GACxB,sBAAsB,CAAA;AAE1B,MAAM,WAAW,qBAAqB;IACpC,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,0BAA0B,CAAC,EAAE,OAAO,CAAA;CACrC;AAED;;;GAGG;AACH,qBAAa,cAAe,SAAQ,KAAK;aAErB,IAAI,EAAE,kBAAkB;aAExB,SAAS,EAAE,OAAO;aAClB,MAAM,CAAC,EAAE,MAAM;IAJjC,YACkB,IAAI,EAAE,kBAAkB,EACxC,OAAO,EAAE,MAAM,EACC,SAAS,EAAE,OAAO,EAClB,MAAM,CAAC,EAAE,MAAM,YAAA,EAC/B,OAAO,GAAE,qBAA0B,EASpC;IAED,SAAgB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtC,SAAgB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClC,SAAgB,KAAK,CAAC,EAAE,MAAM,CAAA;IAC9B,SAAgB,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/C,SAAgB,0BAA0B,CAAC,EAAE,OAAO,CAAA;CACrD;AAED,MAAM,WAAW,mBAAmB;IAClC,oFAAoF;IACpF,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,+DAA+D;IAC/D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,4DAA4D;IAC5D,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,8DAA8D;IAC9D,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,sDAAsD;IACtD,SAAS,CAAC,EAAE,eAAe,CAAA;CAC5B;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;IACvB,IAAI,CAAC,EAAE,OAAO,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,CAAC,EAAE,MAAM,CAAA;CACvB;AAuGD;;;;;GAKG;AACH,qBAAa,YAAY;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAE7B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAc;IAC1C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAQ;IAClC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAQ;IACxC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;IAEzC,YAAa,SAAS,EAAE,MAAM,EAAE,OAAO,GAAE,mBAAwB,EAgChE;IAED,mBAAmB,IAAK,MAAM,CAK7B;IAEK,OAAO,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,CAAC,CAAC,CAmCrE;IAED,OAAO,CAAC,qBAAqB;IAuB7B,OAAO,CAAC,qBAAqB;IAe7B,OAAO,CAAC,iBAAiB;IA2CzB,OAAO,CAAC,mBAAmB;YAqBb,aAAa;IAkD3B,OAAO,CAAC,qBAAqB;IAY7B,OAAO,CAAC,wBAAwB;YAwBlB,gBAAgB;IAuC9B,OAAO,CAAC,mBAAmB;IAkC3B,OAAO,CAAC,qBAAqB;YAcf,mBAAmB;YAcnB,+BAA+B;YAW/B,sBAAsB;YAWtB,iBAAiB;IAsB/B,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,qBAAqB;YAaf,kBAAkB;YAQlB,oBAAoB;IAUlC,OAAO,CAAC,cAAc;CA+BvB"}