@cardano-slips/flow 0.0.3 → 0.2.0

package/README.md

@@ -30,6 +30,33 @@ These components are meant to be dropped into someone else's page. No fixed posi
 
 React is a **peer** dependency: your copy is the one that renders, and a second copy in the tree is the oldest breakage in the ecosystem.
 
+## Tokens
+
+```ts
+import "@cardano-slips/flow/tokens.css"
+```
+
+```html
+<div class="slip-root">…</div>
+<div class="slip-root" data-theme="dark">…</div>
+```
+
+The tokens are scoped to `slip-root` rather than `:root`, because a package that writes `--ink` onto the document redefines whatever the host already called that. Put the class on the element that wraps the Slip. There is no reset in the file and no rule that selects an element, so an inherited font stack stays where it is until something of ours asks for a token.
+
+`data-theme="dark"` is the whole of the theme rule: it rebinds the roles — surfaces, ink, accent and the semantic three — so a component writes `var(--ink)` once and is right in both. A component choosing between a light token and a dark one is a component deciding the rule, and two of them will decide it differently. Whether dark follows the operating system is not settled by the design sheet, so it is not decided here either; the attribute is the only way in.
+
+Three families of surface, and the difference is the point:
+
+| Family | What it is |
+| --- | --- |
+| `--page`, `--card` | the ordinary ground, and what lifts off it |
+| `--vault-*` | the transaction preview, which separates itself by surface and border rather than by being dark |
+| `--dark-*` | code blocks and the Open Graph card — dark in **both** themes, so they are the one thing the theme does not touch |
+
+Type arrives as whole roles — `font: var(--type-card-title)` carries family, weight, size and line-height together — because the sheet settles a pairing, not a size. Depth is a border; there is no shadow token.
+
+Two rules the tests keep: no colour is written anywhere but `tokens.css`, and the design sheet's contrast audit is recomputed against these values rather than trusted. `--accent-fill` is a fill — it does not clear AA on a light card, which is why `--accent-text` exists for any accent-coloured word, and it stays a fill in the dark theme where the ratio alone would allow otherwise.
+
 ## Entry point
 
 One export, the package root. Deep imports into `dist/` are not a supported surface, so moving a file is never a breaking change:

package/dist/address.d.ts

@@ -0,0 +1,13 @@
+import { Either } from "effect";
+/** CIP-30's `getNetworkId`: 1 is mainnet, 0 is every test network. */
+export type NetworkId = 0 | 1;
+export type WalletAddress = {
+    readonly bech32: string;
+    readonly networkId: NetworkId;
+};
+/**
+ * Reads what CIP-30 returned. `Either` and not a throw: this runs on whatever a
+ * browser extension chose to send, and every refusal reaches a person as words.
+ */
+export declare const readWalletAddress: (hex: string) => Either.Either<WalletAddress, string>;
+//# sourceMappingURL=address.d.ts.map

package/dist/address.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.d.ts","sourceRoot":"","sources":["../src/address.ts"],"names":[],"mappings":"AASA,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AAEvC,sEAAsE;AACtE,MAAM,MAAM,SAAS,GAAG,CAAC,GAAG,CAAC,CAAA;AAE7B,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;CAC9B,CAAA;AA0BD;;;GAGG;AACH,eAAO,MAAM,iBAAiB,GAAI,KAAK,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAqBlF,CAAA"}

package/dist/address.js

@@ -0,0 +1,54 @@
+/**
+ * CIP-30 hands addresses back as hex; the endpoint is sent bech32, because that
+ * is what a `BuildRequest` carries and what a person can recognise. The
+ * conversion is also the second statement of network — the header byte says
+ * which chain the address is for, and a wallet whose `getNetworkId` disagrees
+ * with its own address has answered two ways.
+ */
+import { PaymentAddress } from "@cardano-slips/core";
+import { encodeBech32 } from "@cardano-slips/verifier";
+import { Either, Schema } from "effect";
+const decodePaymentAddress = Schema.decodeUnknownEither(PaymentAddress);
+const refuse = (detail) => Either.left(detail);
+const fromHex = (hex) => {
+    if (hex.length === 0 || hex.length % 2 !== 0 || !/^[0-9a-fA-F]+$/.test(hex))
+        return undefined;
+    const bytes = new Uint8Array(hex.length / 2);
+    for (let index = 0; index < bytes.length; index++)
+        bytes[index] = Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16);
+    return bytes;
+};
+/**
+ * CIP-30 calls the value "the CBOR of the address" and wallets ship the address
+ * bytes bare. Both are accepted, and they cannot be confused: `0x58` as a first
+ * byte is a CBOR byte string of up to 255 bytes, and as an address header it
+ * would claim network 8, which does not exist.
+ */
+const unwrapCbor = (bytes) => bytes.length > 2 && bytes[0] === 0x58 && bytes[1] === bytes.length - 2 ? bytes.subarray(2) : bytes;
+/** CIP-19: the header's high nibble is the address type, the low nibble the network. Types 0-7 can hold a payment. */
+const LAST_PAYMENT_TYPE = 7;
+/**
+ * Reads what CIP-30 returned. `Either` and not a throw: this runs on whatever a
+ * browser extension chose to send, and every refusal reaches a person as words.
+ */
+export const readWalletAddress = (hex) => {
+    const raw = fromHex(hex.trim());
+    if (raw === undefined)
+        return refuse(`${hex.slice(0, 16)}… is not hex`);
+    const bytes = unwrapCbor(raw);
+    const header = bytes[0];
+    const networkId = header & 0x0f;
+    if (networkId !== 0 && networkId !== 1)
+        return refuse(`the address header names network ${networkId}`);
+    const type = header >> 4;
+    if (type > LAST_PAYMENT_TYPE) {
+        // A reward address (14, 15) or a Byron address (8) cannot receive change.
+        return refuse(`address type ${type} cannot hold a payment`);
+    }
+    const bech32 = encodeBech32(networkId === 1 ? "addr" : "addr_test", bytes);
+    return Either.match(decodePaymentAddress(bech32), {
+        onLeft: () => refuse(`${bech32.slice(0, 16)}… is not a payment address`),
+        onRight: () => Either.right({ bech32, networkId: networkId })
+    });
+};
+//# sourceMappingURL=address.js.map

package/dist/address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"address.js","sourceRoot":"","sources":["../src/address.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AACtD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAUvC,MAAM,oBAAoB,GAAG,MAAM,CAAC,mBAAmB,CAAC,cAAc,CAAC,CAAA;AAEvE,MAAM,MAAM,GAAG,CAAC,MAAc,EAAgC,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;AAEpF,MAAM,OAAO,GAAG,CAAC,GAAW,EAA0B,EAAE;IACtD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAA;IAC7F,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,CAAA;IAC5C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,KAAK,EAAE;QAC/C,KAAK,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAA;IACzE,OAAO,KAAK,CAAA;AACd,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,UAAU,GAAG,CAAC,KAAiB,EAAc,EAAE,CACnD,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAA;AAEpG,sHAAsH;AACtH,MAAM,iBAAiB,GAAG,CAAC,CAAA;AAE3B;;;GAGG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAW,EAAwC,EAAE;IACrF,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;IAC/B,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,CAAA;IAEvE,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,CAAA;IAEvB,MAAM,SAAS,GAAG,MAAM,GAAG,IAAI,CAAA;IAC/B,IAAI,SAAS,KAAK,CAAC,IAAI,SAAS,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,oCAAoC,SAAS,EAAE,CAAC,CAAA;IAEtG,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,CAAA;IACxB,IAAI,IAAI,GAAG,iBAAiB,EAAE,CAAC;QAC7B,0EAA0E;QAC1E,OAAO,MAAM,CAAC,gBAAgB,IAAI,wBAAwB,CAAC,CAAA;IAC7D,CAAC;IAED,MAAM,MAAM,GAAG,YAAY,CAAC,SAAS,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,CAAC,CAAA;IAC1E,OAAO,MAAM,CAAC,KAAK,CAAC,oBAAoB,CAAC,MAAM,CAAC,EAAE;QAChD,MAAM,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,4BAA4B,CAAC;QACxE,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,SAAsB,EAAE,CAAC;KAC3E,CAAC,CAAA;AACJ,CAAC,CAAA"}

package/dist/balance-error.d.ts

@@ -0,0 +1,48 @@
+/**
+ * Why an intent did not become a transaction. Every refusal carries a spec
+ * error code, because each one is a failure of the exchange the spec describes
+ * rather than a state of a browser extension (`wallet-error.ts` is the other
+ * half, and deliberately has refusals that carry no code).
+ */
+import { type ClientErrorCode } from "@cardano-slips/core";
+export type BalanceRefusal = 
+/** `validUntil` has already passed. A fresh POST returns a fresh intent. */
+"IntentExpired"
+/** An address in the intent encodes a different network from the Slip's. */
+ | "ForeignAddress"
+/** A certificate or withdrawal needs the wallet's stake credential and the address carries none. */
+ | "NoStakeCredential"
+/** The change address the wallet gave is not an address these bytes can be read as. */
+ | "UnreadableChangeAddress"
+/** The intent withdraws rewards and nobody said what the reward balance is. */
+ | "RewardBalanceUnknown"
+/** The wallet cannot cover the intent, the minimum ADA its outputs require, and the fee. */
+ | "InsufficientFunds"
+/** The intent cannot be built into a valid transaction for any other reason. */
+ | "CannotBalance";
+/**
+ * Exhaustive by type: adding a refusal above without listing it here fails to
+ * compile, and `test/balance.test.ts` fails if any of them stops being reachable.
+ */
+export declare const balanceRefusals: Readonly<Record<BalanceRefusal, true>>;
+/**
+ * A wrong-network address is `MALFORMED_RESPONSE` and not `WRONG_NETWORK`:
+ * the latter is a disagreement the person can act on by switching wallets, and
+ * an endpoint that sent an address on another chain is not one of those.
+ */
+export declare const slipErrorCodeFor: (refusal: BalanceRefusal) => ClientErrorCode;
+declare const BalanceError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "BalanceError";
+} & Readonly<A>;
+/** `cause` keeps what evolution-sdk said, so a build failure stays diagnosable. */
+export declare class BalanceError extends BalanceError_base<{
+    readonly refusal: BalanceRefusal;
+    readonly detail: string;
+    readonly cause?: unknown;
+}> {
+    get message(): string;
+    get code(): ClientErrorCode;
+}
+export declare const refuse: (refusal: BalanceRefusal, detail: string, cause?: unknown) => BalanceError;
+export {};
+//# sourceMappingURL=balance-error.d.ts.map

package/dist/balance-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance-error.d.ts","sourceRoot":"","sources":["../src/balance-error.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAG1D,MAAM,MAAM,cAAc;AACxB,4EAA4E;AAC1E,eAAe;AACjB,4EAA4E;GAC1E,gBAAgB;AAClB,oGAAoG;GAClG,mBAAmB;AACrB,uFAAuF;GACrF,yBAAyB;AAC3B,+EAA+E;GAC7E,sBAAsB;AACxB,4FAA4F;GAC1F,mBAAmB;AACrB,gFAAgF;GAC9E,eAAe,CAAA;AAEnB;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,cAAc,EAAE,IAAI,CAAC,CAQlE,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,cAAc,KAAG,eAc1D,CAAA;;;;AAED,mFAAmF;AACnF,qBAAa,YAAa,SAAQ,kBAAiC;IACjE,QAAQ,CAAC,OAAO,EAAE,cAAc,CAAA;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB,CAAC;IACA,IAAa,OAAO,IAAI,MAAM,CAE7B;IAED,IAAI,IAAI,IAAI,eAAe,CAE1B;CACF;AAED,eAAO,MAAM,MAAM,GAAI,SAAS,cAAc,EAAE,QAAQ,MAAM,EAAE,QAAQ,OAAO,KAAG,YACA,CAAA"}

package/dist/balance-error.js

@@ -0,0 +1,45 @@
+import { Data } from "effect";
+/**
+ * Exhaustive by type: adding a refusal above without listing it here fails to
+ * compile, and `test/balance.test.ts` fails if any of them stops being reachable.
+ */
+export const balanceRefusals = {
+    IntentExpired: true,
+    ForeignAddress: true,
+    NoStakeCredential: true,
+    UnreadableChangeAddress: true,
+    RewardBalanceUnknown: true,
+    InsufficientFunds: true,
+    CannotBalance: true
+};
+/**
+ * A wrong-network address is `MALFORMED_RESPONSE` and not `WRONG_NETWORK`:
+ * the latter is a disagreement the person can act on by switching wallets, and
+ * an endpoint that sent an address on another chain is not one of those.
+ */
+export const slipErrorCodeFor = (refusal) => {
+    switch (refusal) {
+        case "IntentExpired":
+            return "INTENT_EXPIRED";
+        case "ForeignAddress":
+            return "MALFORMED_RESPONSE";
+        case "InsufficientFunds":
+            return "INSUFFICIENT_FUNDS";
+        case "NoStakeCredential":
+        case "UnreadableChangeAddress":
+        case "RewardBalanceUnknown":
+        case "CannotBalance":
+            return "CANNOT_BALANCE";
+    }
+};
+/** `cause` keeps what evolution-sdk said, so a build failure stays diagnosable. */
+export class BalanceError extends Data.TaggedError("BalanceError") {
+    get message() {
+        return this.detail;
+    }
+    get code() {
+        return slipErrorCodeFor(this.refusal);
+    }
+}
+export const refuse = (refusal, detail, cause) => new BalanceError({ refusal, detail, ...(cause === undefined ? {} : { cause }) });
+//# sourceMappingURL=balance-error.js.map

package/dist/balance-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance-error.js","sourceRoot":"","sources":["../src/balance-error.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAkB7B;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAA2C;IACrE,aAAa,EAAE,IAAI;IACnB,cAAc,EAAE,IAAI;IACpB,iBAAiB,EAAE,IAAI;IACvB,uBAAuB,EAAE,IAAI;IAC7B,oBAAoB,EAAE,IAAI;IAC1B,iBAAiB,EAAE,IAAI;IACvB,aAAa,EAAE,IAAI;CACpB,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAuB,EAAmB,EAAE;IAC3E,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,eAAe;YAClB,OAAO,gBAAgB,CAAA;QACzB,KAAK,gBAAgB;YACnB,OAAO,oBAAoB,CAAA;QAC7B,KAAK,mBAAmB;YACtB,OAAO,oBAAoB,CAAA;QAC7B,KAAK,mBAAmB,CAAC;QACzB,KAAK,yBAAyB,CAAC;QAC/B,KAAK,sBAAsB,CAAC;QAC5B,KAAK,eAAe;YAClB,OAAO,gBAAgB,CAAA;IAC3B,CAAC;AACH,CAAC,CAAA;AAED,mFAAmF;AACnF,MAAM,OAAO,YAAa,SAAQ,IAAI,CAAC,WAAW,CAAC,cAAc,CAI/D;IACA,IAAa,OAAO;QAClB,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACvC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,CAAC,OAAuB,EAAE,MAAc,EAAE,KAAe,EAAgB,EAAE,CAC/F,IAAI,YAAY,CAAC,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAA"}

package/dist/balance.d.ts

@@ -0,0 +1,54 @@
+/**
+ * The privacy-preserving heart of Mode A: the endpoint's half-transaction
+ * becomes a whole one here, against unspent outputs it never sees (ADR-0002).
+ *
+ * Every term arrives as an argument — unspent outputs, protocol parameters, the
+ * reward balance, the clock — for the same reason the verifier takes its five:
+ * a balancer that fetched them could be made slow, made to fail, or made to
+ * answer wrongly by whoever answered.
+ */
+import { type Intent, type Network } from "@cardano-slips/core";
+import type { ProtocolParameters } from "@cardano-slips/verifier";
+import { type UTxO } from "@evolution-sdk/evolution";
+import { Effect } from "effect";
+import { type BalanceError } from "./balance-error.js";
+import type { CborHex } from "./cip30.js";
+/**
+ * The verifier's parameters plus the one bound the builder needs and the gate
+ * does not. One vocabulary across both halves: the figures that balance a
+ * transaction are the figures it will be judged against.
+ */
+export type BalancingParameters = ProtocolParameters & {
+    /** `maxTxSize`: the byte ceiling a built transaction must fit under. */
+    readonly maxTxSize: number;
+};
+export type BalanceInputs = {
+    readonly intent: Intent;
+    /** The Slip's network. Every address in the intent is held to it. */
+    readonly network: Network;
+    /** Bech32, from the connected wallet. Change returns here. */
+    readonly changeAddress: string;
+    readonly utxos: ReadonlyArray<UTxO.UTxO>;
+    readonly parameters: BalancingParameters;
+    /**
+     * The whole balance of the wallet's own reward account, required when the
+     * intent withdraws rewards. The ledger accepts one figure and only one, and
+     * no CIP-30 method answers it.
+     */
+    readonly rewardBalance?: bigint;
+    /** Unix milliseconds. Handed in, so an expiry is decided by one clock and not two. */
+    readonly now: number;
+};
+export type BalancedTransaction = {
+    /** The complete unsigned transaction: what `verifier` decodes and the wallet signs. */
+    readonly cbor: CborHex;
+    readonly fee: bigint;
+    /** The slot the body expires at, for the rebuild path to watch. */
+    readonly ttl: bigint;
+};
+/**
+ * Builds the transaction, or says why not. Nothing here asks the network
+ * anything, and nothing describing what the wallet holds leaves this function.
+ */
+export declare const balanceIntent: (inputs: BalanceInputs) => Effect.Effect<BalancedTransaction, BalanceError>;
+//# sourceMappingURL=balance.d.ts.map

package/dist/balance.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance.d.ts","sourceRoot":"","sources":["../src/balance.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAwC,KAAK,MAAM,EAAE,KAAK,OAAO,EAAe,MAAM,qBAAqB,CAAA;AAClH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAA;AACjE,OAAO,EAWL,KAAK,IAAI,EACV,MAAM,0BAA0B,CAAA;AAMjC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,OAAO,EAAE,KAAK,YAAY,EAAU,MAAM,oBAAoB,CAAA;AAC9D,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEzC;;;;GAIG;AACH,MAAM,MAAM,mBAAmB,GAAG,kBAAkB,GAAG;IACrD,wEAAwE;IACxE,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B,CAAA;AAED,MAAM,MAAM,aAAa,GAAG;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,8DAA8D;IAC9D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACxC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAA;IACxC;;;;OAIG;IACH,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,sFAAsF;IACtF,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB,CAAA;AAED,MAAM,MAAM,mBAAmB,GAAG;IAChC,uFAAuF;IACvF,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,mEAAmE;IACnE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CACrB,CAAA;AAwHD;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,QAAQ,aAAa,KAAG,MAAM,CAAC,MAAM,CAAC,mBAAmB,EAAE,YAAY,CA4FjG,CAAA"}

package/dist/balance.js

@@ -0,0 +1,175 @@
+/**
+ * The privacy-preserving heart of Mode A: the endpoint's half-transaction
+ * becomes a whole one here, against unspent outputs it never sees (ADR-0002).
+ *
+ * Every term arrives as an argument — unspent outputs, protocol parameters, the
+ * reward balance, the clock — for the same reason the verifier takes its five:
+ * a balancer that fetched them could be made slow, made to fail, or made to
+ * answer wrongly by whoever answered.
+ */
+import { addressIsOnNetwork } from "@cardano-slips/core";
+import { Address, Assets, DRep, mainnet, PoolKeyHash, preprod, preview, Schema, Transaction } from "@evolution-sdk/evolution";
+import { makeTxBuilder } from "@evolution-sdk/evolution/sdk/builders/TransactionBuilder";
+import { Effect } from "effect";
+import { refuse } from "./balance-error.js";
+const chains = { mainnet, preprod, preview };
+/**
+ * The slot mapping comes from the parameters rather than from the chain preset:
+ * the client converts `validUntil` to a slot and the gate converts that slot
+ * back to a time, and two mappings would put an honest transaction outside its
+ * own declared window.
+ */
+const slotConfigOf = ({ slots }) => ({
+    zeroTime: slots.time,
+    zeroSlot: slots.slot,
+    slotLength: Number(slots.slotLength)
+});
+const builderParameters = (parameters) => ({
+    minFeeCoefficient: parameters.minFeeCoefficient,
+    minFeeConstant: parameters.minFeeConstant,
+    coinsPerUtxoByte: parameters.coinsPerUtxoByte,
+    maxTxSize: parameters.maxTxSize
+});
+/**
+ * What the builder reads for a certificate's deposit. The script fields are
+ * zeroed rather than guessed: version 1 builds no transaction that spends from
+ * a script, so a cost model here would be a figure nothing computes from.
+ */
+const depositParameters = (parameters) => ({
+    minFeeA: Number(parameters.minFeeCoefficient),
+    minFeeB: Number(parameters.minFeeConstant),
+    maxTxSize: parameters.maxTxSize,
+    maxValSize: 0,
+    keyDeposit: parameters.stakeDeposit,
+    poolDeposit: parameters.poolDeposit,
+    drepDeposit: parameters.drepDeposit,
+    govActionDeposit: parameters.governanceActionDeposit,
+    priceMem: 0,
+    priceStep: 0,
+    maxTxExMem: 0n,
+    maxTxExSteps: 0n,
+    coinsPerUtxoByte: parameters.coinsPerUtxoByte,
+    collateralPercentage: 0,
+    maxCollateralInputs: 0,
+    minFeeRefScriptCostPerByte: 0,
+    costModels: { PlutusV1: {}, PlutusV2: {}, PlutusV3: {} }
+});
+const assetsOf = (output) => (output.assets ?? []).reduce((assets, asset) => Assets.addByHex(assets, asset.policyId, asset.assetName, BigInt(asset.quantity)), Assets.fromLovelace(BigInt(output.lovelace)));
+/**
+ * `Schema.decodeSync(FromBech32)` and not `DRep.fromBech32`: the SDK's
+ * declarations carry that function and the shipped module does not export it,
+ * so calling it compiles and throws. The seventh gap of ADR-0004.
+ */
+const drepFromBech32 = Schema.decodeSync(DRep.FromBech32);
+const drepOf = (declared) => {
+    if (declared.drep === "abstain")
+        return DRep.alwaysAbstain();
+    if (declared.drep === "noConfidence")
+        return DRep.alwaysNoConfidence();
+    return drepFromBech32(declared.drep);
+};
+/**
+ * The Conway forms throughout. The legacy pair encodes no deposit and no
+ * refund, and evolution-sdk's builder therefore leaves both out of the balance —
+ * a transaction the ledger rejects, because consumed and produced no longer
+ * agree. The stated deposit is the protocol parameter exactly, which is what
+ * the ledger charges and what the gate holds it to (ADR-0013).
+ */
+const applyCertificate = (builder, declared, stakeCredential) => {
+    switch (declared.type) {
+        case "stakeRegistration":
+            return builder.registerStake({ stakeCredential });
+        case "stakeDeregistration":
+            return builder.deregisterStake({ stakeCredential });
+        case "stakeDelegation":
+            return builder.delegateToPool({ stakeCredential, poolKeyHash: PoolKeyHash.fromBech32(declared.poolId) });
+        case "voteDelegation":
+            return builder.delegateToDRep({ stakeCredential, drep: drepOf(declared) });
+    }
+};
+const actsOnStake = (intent) => (intent.certificates ?? []).length > 0 || intent.withdrawRewards === true;
+/** The two sites evolution-sdk reports a shortfall from, neither of which carries a structured cause. */
+const isShortfall = (message) => message.startsWith("Coin selection failed") || message.includes("Insufficient funds to cover");
+const readFailure = (cause) => {
+    const message = cause instanceof Error ? cause.message : String(cause);
+    return isShortfall(message)
+        ? refuse("InsufficientFunds", "This wallet does not hold enough to cover the transaction and its fee.", cause)
+        : refuse("CannotBalance", `This intent could not be built into a transaction: ${message}`, cause);
+};
+/**
+ * Builds the transaction, or says why not. Nothing here asks the network
+ * anything, and nothing describing what the wallet holds leaves this function.
+ */
+export const balanceIntent = (inputs) => Effect.gen(function* () {
+    const { changeAddress, intent, network, parameters, utxos } = inputs;
+    const validUntil = Date.parse(intent.validUntil);
+    if (validUntil <= inputs.now) {
+        return yield* Effect.fail(refuse("IntentExpired", "This request expired while it was open. Ask for a fresh one."));
+    }
+    for (const output of intent.outputs ?? []) {
+        if (!addressIsOnNetwork(output.address, network)) {
+            return yield* Effect.fail(refuse("ForeignAddress", `This Slip is on ${network} and it asks to pay an address on another network.`));
+        }
+    }
+    // Inside the error channel, not thrown past it: the signature promises a
+    // `BalanceError` and a defect here would reach a person as a stack trace.
+    const change = yield* Effect.try({
+        try: () => Address.fromBech32(changeAddress),
+        catch: (cause) => refuse("UnreadableChangeAddress", "This wallet's change address could not be read as an address.", cause)
+    });
+    const credential = change.stakingCredential;
+    if (actsOnStake(intent) && credential === undefined) {
+        return yield* Effect.fail(refuse("NoStakeCredential", "This action acts on a stake credential and this wallet's address carries none."));
+    }
+    if (intent.withdrawRewards === true && inputs.rewardBalance === undefined) {
+        return yield* Effect.fail(refuse("RewardBalanceUnknown", "The reward balance to withdraw is not known, so this cannot be built."));
+    }
+    const stake = credential === undefined
+        ? null
+        : {
+            credential,
+            certificates: intent.certificates ?? [],
+            withdrawal: intent.withdrawRewards === true ? (inputs.rewardBalance ?? 0n) : null
+        };
+    const built = yield* Effect.tryPromise({
+        try: async () => {
+            let builder = makeTxBuilder({ chain: chains[network] });
+            for (const output of intent.outputs ?? []) {
+                // Declared lovelace is a floor: `autoMinUtxo` raises an output that
+                // cannot pay for its own bytes, and the difference is shown to the
+                // person as the client's own adjustment rather than folded in.
+                builder = builder.payToAddress({ address: Address.fromBech32(output.address), assets: assetsOf(output) });
+            }
+            if (stake !== null) {
+                for (const declared of stake.certificates)
+                    builder = applyCertificate(builder, declared, stake.credential);
+                if (stake.withdrawal !== null) {
+                    builder = builder.withdraw({ stakeCredential: stake.credential, amount: stake.withdrawal });
+                }
+            }
+            // Never after `validUntil`, which is the whole of what the spec fixes here.
+            builder = builder.setValidity({ to: BigInt(validUntil) });
+            return await builder.build({
+                changeAddress: change,
+                availableUtxos: utxos,
+                protocolParameters: builderParameters(parameters),
+                fullProtocolParameters: depositParameters(parameters),
+                slotConfig: slotConfigOf(parameters),
+                autoMinUtxo: true,
+                // Leftover too small to become change would otherwise be paid as fee —
+                // lovelace leaving the wallet that nothing on screen accounted for.
+                onInsufficientChange: "error"
+            });
+        },
+        catch: readFailure
+    });
+    const transaction = yield* Effect.tryPromise({ try: () => built.toTransaction(), catch: readFailure });
+    const ttl = transaction.body.ttl;
+    if (ttl === undefined) {
+        // We asked for an interval; a body without one could be submitted after
+        // `validUntil`, which is the one thing the spec forbids outright here.
+        return yield* Effect.fail(refuse("CannotBalance", "The built transaction carries no expiry, and it must."));
+    }
+    return { cbor: Transaction.toCBORHex(transaction), fee: transaction.body.fee, ttl };
+});
+//# sourceMappingURL=balance.js.map

package/dist/balance.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"balance.js","sourceRoot":"","sources":["../src/balance.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,kBAAkB,EAA4D,MAAM,qBAAqB,CAAA;AAElH,OAAO,EACL,OAAO,EACP,MAAM,EACN,IAAI,EACJ,OAAO,EACP,WAAW,EACX,OAAO,EACP,OAAO,EACP,MAAM,EAEN,WAAW,EAEZ,MAAM,0BAA0B,CAAA;AACjC,OAAO,EACL,aAAa,EAGd,MAAM,0DAA0D,CAAA;AACjE,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,OAAO,EAAqB,MAAM,EAAE,MAAM,oBAAoB,CAAA;AAuC9D,MAAM,MAAM,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAA;AAE5C;;;;;GAKG;AACH,MAAM,YAAY,GAAG,CAAC,EAAE,KAAK,EAAuB,EAAyB,EAAE,CAAC,CAAC;IAC/E,QAAQ,EAAE,KAAK,CAAC,IAAI;IACpB,QAAQ,EAAE,KAAK,CAAC,IAAI;IACpB,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,UAAU,CAAC;CACrC,CAAC,CAAA;AAEF,MAAM,iBAAiB,GAAG,CAAC,UAA+B,EAAqB,EAAE,CAAC,CAAC;IACjF,iBAAiB,EAAE,UAAU,CAAC,iBAAiB;IAC/C,cAAc,EAAE,UAAU,CAAC,cAAc;IACzC,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;IAC7C,SAAS,EAAE,UAAU,CAAC,SAAS;CAChC,CAAC,CAAA;AAEF;;;;GAIG;AACH,MAAM,iBAAiB,GAAG,CAAC,UAA+B,EAAE,EAAE,CAAC,CAAC;IAC9D,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,iBAAiB,CAAC;IAC7C,OAAO,EAAE,MAAM,CAAC,UAAU,CAAC,cAAc,CAAC;IAC1C,SAAS,EAAE,UAAU,CAAC,SAAS;IAC/B,UAAU,EAAE,CAAC;IACb,UAAU,EAAE,UAAU,CAAC,YAAY;IACnC,WAAW,EAAE,UAAU,CAAC,WAAW;IACnC,WAAW,EAAE,UAAU,CAAC,WAAW;IACnC,gBAAgB,EAAE,UAAU,CAAC,uBAAuB;IACpD,QAAQ,EAAE,CAAC;IACX,SAAS,EAAE,CAAC;IACZ,UAAU,EAAE,EAAE;IACd,YAAY,EAAE,EAAE;IAChB,gBAAgB,EAAE,UAAU,CAAC,gBAAgB;IAC7C,oBAAoB,EAAE,CAAC;IACvB,mBAAmB,EAAE,CAAC;IACtB,0BAA0B,EAAE,CAAC;IAC7B,UAAU,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE,QAAQ,EAAE,EAAE,EAAE;CACzD,CAAC,CAAA;AAEF,MAAM,QAAQ,GAAG,CAAC,MAAc,EAAiB,EAAE,CACjD,CAAC,MAAM,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,MAAM,CAC1B,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EACnG,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAC7C,CAAA;AAEH;;;;GAIG;AACH,MAAM,cAAc,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;AAEzD,MAAM,MAAM,GAAG,CAAC,QAA2D,EAAa,EAAE;IACxF,IAAI,QAAQ,CAAC,IAAI,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC,aAAa,EAAE,CAAA;IAC5D,IAAI,QAAQ,CAAC,IAAI,KAAK,cAAc;QAAE,OAAO,IAAI,CAAC,kBAAkB,EAAE,CAAA;IACtE,OAAO,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAA;AACtC,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAG,CACvB,OAAmC,EACnC,QAAqB,EACrB,eAAgC,EACJ,EAAE;IAC9B,QAAQ,QAAQ,CAAC,IAAI,EAAE,CAAC;QACtB,KAAK,mBAAmB;YACtB,OAAO,OAAO,CAAC,aAAa,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;QACnD,KAAK,qBAAqB;YACxB,OAAO,OAAO,CAAC,eAAe,CAAC,EAAE,eAAe,EAAE,CAAC,CAAA;QACrD,KAAK,iBAAiB;YACpB,OAAO,OAAO,CAAC,cAAc,CAAC,EAAE,eAAe,EAAE,WAAW,EAAE,WAAW,CAAC,UAAU,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;QAC1G,KAAK,gBAAgB;YACnB,OAAO,OAAO,CAAC,cAAc,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAA;IAC9E,CAAC;AACH,CAAC,CAAA;AAiBD,MAAM,WAAW,GAAG,CAAC,MAAc,EAAW,EAAE,CAC9C,CAAC,MAAM,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,CAAA;AAE3E,yGAAyG;AACzG,MAAM,WAAW,GAAG,CAAC,OAAe,EAAW,EAAE,CAC/C,OAAO,CAAC,UAAU,CAAC,uBAAuB,CAAC,IAAI,OAAO,CAAC,QAAQ,CAAC,6BAA6B,CAAC,CAAA;AAEhG,MAAM,WAAW,GAAG,CAAC,KAAc,EAAgB,EAAE;IACnD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;IACtE,OAAO,WAAW,CAAC,OAAO,CAAC;QACzB,CAAC,CAAC,MAAM,CAAC,mBAAmB,EAAE,wEAAwE,EAAE,KAAK,CAAC;QAC9G,CAAC,CAAC,MAAM,CAAC,eAAe,EAAE,sDAAsD,OAAO,EAAE,EAAE,KAAK,CAAC,CAAA;AACrG,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,MAAqB,EAAoD,EAAE,CACvG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,EAAE,aAAa,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;IAEpE,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,UAAU,CAAC,CAAA;IAChD,IAAI,UAAU,IAAI,MAAM,CAAC,GAAG,EAAE,CAAC;QAC7B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,8DAA8D,CAAC,CAAC,CAAA;IACpH,CAAC;IAED,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,EAAE,CAAC;YACjD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,gBAAgB,EAAE,mBAAmB,OAAO,oDAAoD,CAAC,CACzG,CAAA;QACH,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,0EAA0E;IAC1E,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAC/B,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC,aAAa,CAAC;QAC5C,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,yBAAyB,EAAE,+DAA+D,EAAE,KAAK,CAAC;KAC5G,CAAC,CAAA;IACF,MAAM,UAAU,GAAG,MAAM,CAAC,iBAAiB,CAAA;IAC3C,IAAI,WAAW,CAAC,MAAM,CAAC,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;QACpD,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,mBAAmB,EAAE,gFAAgF,CAAC,CAC9G,CAAA;IACH,CAAC;IAED,IAAI,MAAM,CAAC,eAAe,KAAK,IAAI,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS,EAAE,CAAC;QAC1E,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,sBAAsB,EAAE,uEAAuE,CAAC,CACxG,CAAA;IACH,CAAC;IAED,MAAM,KAAK,GACT,UAAU,KAAK,SAAS;QACtB,CAAC,CAAC,IAAI;QACN,CAAC,CAAC;YACE,UAAU;YACV,YAAY,EAAE,MAAM,CAAC,YAAY,IAAI,EAAE;YACvC,UAAU,EAAE,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI;SAClF,CAAA;IAEP,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACrC,GAAG,EAAE,KAAK,IAAI,EAAE;YACd,IAAI,OAAO,GAA+B,aAAa,CAAC,EAAE,KAAK,EAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAA;YAEnF,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;gBAC1C,oEAAoE;gBACpE,mEAAmE;gBACnE,+DAA+D;gBAC/D,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;YAC3G,CAAC;YAED,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,KAAK,MAAM,QAAQ,IAAI,KAAK,CAAC,YAAY;oBAAE,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,CAAA;gBAC1G,IAAI,KAAK,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;oBAC9B,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAA;gBAC7F,CAAC;YACH,CAAC;YAED,4EAA4E;YAC5E,OAAO,GAAG,OAAO,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAA;YAEzD,OAAO,MAAM,OAAO,CAAC,KAAK,CAAC;gBACzB,aAAa,EAAE,MAAM;gBACrB,cAAc,EAAE,KAAK;gBACrB,kBAAkB,EAAE,iBAAiB,CAAC,UAAU,CAAC;gBACjD,sBAAsB,EAAE,iBAAiB,CAAC,UAAU,CAAC;gBACrD,UAAU,EAAE,YAAY,CAAC,UAAU,CAAC;gBACpC,WAAW,EAAE,IAAI;gBACjB,uEAAuE;gBACvE,oEAAoE;gBACpE,oBAAoB,EAAE,OAAO;aAC9B,CAAC,CAAA;QACJ,CAAC;QACD,KAAK,EAAE,WAAW;KACnB,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,KAAK,CAAC,aAAa,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAA;IAEtG,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,GAAG,CAAA;IAChC,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;QACtB,wEAAwE;QACxE,uEAAuE;QACvE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,eAAe,EAAE,uDAAuD,CAAC,CAAC,CAAA;IAC7G,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,SAAS,CAAC,WAAW,CAAC,EAAE,GAAG,EAAE,WAAW,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,CAAA;AACrF,CAAC,CAAC,CAAA"}

package/dist/cip30.d.ts

@@ -0,0 +1,76 @@
+/**
+ * The CIP-30 surface this client calls, declared here because evolution-sdk's
+ * `WalletApi` omits `getChangeAddress`, `getCollateral` and `getNetworkId`
+ * while the object a wallet actually hands back carries all three (ADR-0004).
+ * A typing we assert rather than one the SDK guarantees, so it is proved
+ * against a stubbed provider rather than trusted.
+ */
+/** Hex-encoded CBOR: the only form CIP-30 speaks, and the form `verifier` decodes. */
+export type CborHex = string;
+export type Paginate = {
+    readonly page: number;
+    readonly limit: number;
+};
+export type SignedData = {
+    readonly signature: CborHex;
+    readonly key: CborHex;
+};
+export interface Cip30Api {
+    readonly getNetworkId: () => Promise<number>;
+    readonly getChangeAddress: () => Promise<CborHex>;
+    readonly getUsedAddresses: (paginate?: Paginate) => Promise<ReadonlyArray<CborHex>>;
+    readonly getUnusedAddresses: () => Promise<ReadonlyArray<CborHex>>;
+    readonly getRewardAddresses: () => Promise<ReadonlyArray<CborHex>>;
+    readonly getBalance: () => Promise<CborHex>;
+    /** `null` where the wallet has nothing to give, per CIP-30. */
+    readonly getUtxos: (amount?: CborHex, paginate?: Paginate) => Promise<ReadonlyArray<CborHex> | null>;
+    readonly getCollateral: (params?: {
+        readonly amount: CborHex;
+    }) => Promise<ReadonlyArray<CborHex> | null>;
+    /** Returns a **witness set**, never a signed transaction — invariant 4 is CIP-30's own shape. */
+    readonly signTx: (tx: CborHex, partialSign?: boolean) => Promise<CborHex>;
+    readonly signData: (address: CborHex, payload: CborHex) => Promise<SignedData>;
+    readonly submitTx: (tx: CborHex) => Promise<string>;
+}
+/** What an extension injects at `window.cardano[key]`, before anyone calls `enable()`. */
+export interface Cip30Provider {
+    readonly apiVersion: string;
+    readonly name: string;
+    readonly icon: string;
+    readonly supportedExtensions?: ReadonlyArray<{
+        readonly cip: number;
+    }>;
+    readonly enable: (extensions?: ReadonlyArray<{
+        readonly cip: number;
+    }>) => Promise<Cip30Api>;
+    readonly isEnabled: () => Promise<boolean>;
+}
+/**
+ * Shape, not name: `window.cardano` is a namespace anything may write to, and a
+ * key that does not answer these four is not a connector whatever it is called.
+ */
+export declare const isCip30Provider: (value: unknown) => value is Cip30Provider;
+export declare const isCip30Api: (value: unknown) => value is Cip30Api;
+/** CIP-30's `APIError`, kept whole: the numeric code is what says a person declined. */
+export type Cip30ApiError = {
+    readonly code: number;
+    readonly info: string;
+};
+/** The four `APIError` codes CIP-30 defines. Anything else is passed through as its number. */
+export declare const apiErrorNames: Readonly<Record<number, string>>;
+/** `-3` is the person saying no, which is not a fault and must not be shown as one. */
+export declare const REFUSED = -3;
+/**
+ * `TxSignError` and `TxSendError` are `APIError`'s shape on their own
+ * numbering, and the numbering is the footgun: a declined signature is `2`
+ * here, where `2` in `APIError` is an internal error. They never share a call,
+ * so which table applies is decided by the method that rejected.
+ */
+export declare const txSignErrorNames: Readonly<Record<number, string>>;
+/** `2` from `signTx`: the person declined in the wallet. */
+export declare const USER_DECLINED = 2;
+export declare const txSendErrorNames: Readonly<Record<number, string>>;
+/** A wallet rejects with a plain `{ code, info }` object, not an `Error`. */
+export declare const readApiError: (cause: unknown) => Cip30ApiError | undefined;
+export declare const describeApiError: (error: Cip30ApiError) => string;
+//# sourceMappingURL=cip30.d.ts.map

package/dist/cip30.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cip30.d.ts","sourceRoot":"","sources":["../src/cip30.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,sFAAsF;AACtF,MAAM,MAAM,OAAO,GAAG,MAAM,CAAA;AAE5B,MAAM,MAAM,QAAQ,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAExE,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAA;CAAE,CAAA;AAE/E,MAAM,WAAW,QAAQ;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,OAAO,CAAC,MAAM,CAAC,CAAA;IAC5C,QAAQ,CAAC,gBAAgB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IACjD,QAAQ,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,EAAE,QAAQ,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;IACnF,QAAQ,CAAC,kBAAkB,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;IAClE,QAAQ,CAAC,kBAAkB,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC,CAAA;IAClE,QAAQ,CAAC,UAAU,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IAC3C,+DAA+D;IAC/D,QAAQ,CAAC,QAAQ,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,QAAQ,CAAC,EAAE,QAAQ,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAA;IACpG,QAAQ,CAAC,aAAa,EAAE,CAAC,MAAM,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAA;KAAE,KAAK,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,IAAI,CAAC,CAAA;IACzG,iGAAiG;IACjG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,OAAO,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACzE,QAAQ,CAAC,QAAQ,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,UAAU,CAAC,CAAA;IAC9E,QAAQ,CAAC,QAAQ,EAAE,CAAC,EAAE,EAAE,OAAO,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;CACpD;AAED,0FAA0F;AAC1F,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,mBAAmB,CAAC,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACtE,QAAQ,CAAC,MAAM,EAAE,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5F,QAAQ,CAAC,SAAS,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;CAC3C;AAID;;;GAGG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,aASzD,CAAA;AAKD,eAAO,MAAM,UAAU,GAAI,OAAO,OAAO,KAAG,KAAK,IAAI,QAIpD,CAAA;AAED,wFAAwF;AACxF,MAAM,MAAM,aAAa,GAAG;IAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAA;AAE5E,+FAA+F;AAC/F,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAK1D,CAAA;AAED,uFAAuF;AACvF,eAAO,MAAM,OAAO,KAAK,CAAA;AAEzB;;;;;GAKG;AACH,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAG7D,CAAA;AAED,4DAA4D;AAC5D,eAAO,MAAM,aAAa,IAAI,CAAA;AAE9B,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAG7D,CAAA;AAED,6EAA6E;AAC7E,eAAO,MAAM,YAAY,GAAI,OAAO,OAAO,KAAG,aAAa,GAAG,SAK7D,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,OAAO,aAAa,KAAG,MAIvD,CAAA"}

package/dist/cip30.js

@@ -0,0 +1,69 @@
+/**
+ * The CIP-30 surface this client calls, declared here because evolution-sdk's
+ * `WalletApi` omits `getChangeAddress`, `getCollateral` and `getNetworkId`
+ * while the object a wallet actually hands back carries all three (ADR-0004).
+ * A typing we assert rather than one the SDK guarantees, so it is proved
+ * against a stubbed provider rather than trusted.
+ */
+const isFunction = (value) => typeof value === "function";
+/**
+ * Shape, not name: `window.cardano` is a namespace anything may write to, and a
+ * key that does not answer these four is not a connector whatever it is called.
+ */
+export const isCip30Provider = (value) => {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const candidate = value;
+    return (isFunction(candidate.enable) &&
+        isFunction(candidate.isEnabled) &&
+        typeof candidate.name === "string" &&
+        typeof candidate.apiVersion === "string");
+};
+/** The methods we call. A provider may enable and still not answer them. */
+const apiMethods = ["getNetworkId", "getChangeAddress", "getUsedAddresses", "getUtxos", "signTx", "submitTx"];
+export const isCip30Api = (value) => {
+    if (typeof value !== "object" || value === null)
+        return false;
+    const candidate = value;
+    return apiMethods.every((method) => isFunction(candidate[method]));
+};
+/** The four `APIError` codes CIP-30 defines. Anything else is passed through as its number. */
+export const apiErrorNames = {
+    [-1]: "InvalidRequest",
+    [-2]: "InternalError",
+    [-3]: "Refused",
+    [-4]: "AccountChange"
+};
+/** `-3` is the person saying no, which is not a fault and must not be shown as one. */
+export const REFUSED = -3;
+/**
+ * `TxSignError` and `TxSendError` are `APIError`'s shape on their own
+ * numbering, and the numbering is the footgun: a declined signature is `2`
+ * here, where `2` in `APIError` is an internal error. They never share a call,
+ * so which table applies is decided by the method that rejected.
+ */
+export const txSignErrorNames = {
+    1: "ProofGeneration",
+    2: "UserDeclined"
+};
+/** `2` from `signTx`: the person declined in the wallet. */
+export const USER_DECLINED = 2;
+export const txSendErrorNames = {
+    1: "Refused",
+    2: "Failure"
+};
+/** A wallet rejects with a plain `{ code, info }` object, not an `Error`. */
+export const readApiError = (cause) => {
+    if (typeof cause !== "object" || cause === null)
+        return undefined;
+    const candidate = cause;
+    if (typeof candidate.code !== "number")
+        return undefined;
+    return { code: candidate.code, info: typeof candidate.info === "string" ? candidate.info : "" };
+};
+export const describeApiError = (error) => {
+    const name = apiErrorNames[error.code];
+    const label = name === undefined ? `code ${error.code}` : name;
+    return error.info === "" ? label : `${label}: ${error.info}`;
+};
+//# sourceMappingURL=cip30.js.map

package/dist/cip30.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cip30.js","sourceRoot":"","sources":["../src/cip30.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmCH,MAAM,UAAU,GAAG,CAAC,KAAc,EAAW,EAAE,CAAC,OAAO,KAAK,KAAK,UAAU,CAAA;AAE3E;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAAc,EAA0B,EAAE;IACxE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,SAAS,GAAG,KAAgC,CAAA;IAClD,OAAO,CACL,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC;QAC5B,UAAU,CAAC,SAAS,CAAC,SAAS,CAAC;QAC/B,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;QAClC,OAAO,SAAS,CAAC,UAAU,KAAK,QAAQ,CACzC,CAAA;AACH,CAAC,CAAA;AAED,4EAA4E;AAC5E,MAAM,UAAU,GAAG,CAAC,cAAc,EAAE,kBAAkB,EAAE,kBAAkB,EAAE,UAAU,EAAE,QAAQ,EAAE,UAAU,CAAU,CAAA;AAEtH,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,KAAc,EAAqB,EAAE;IAC9D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,SAAS,GAAG,KAAgC,CAAA;IAClD,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAA;AACpE,CAAC,CAAA;AAKD,+FAA+F;AAC/F,MAAM,CAAC,MAAM,aAAa,GAAqC;IAC7D,CAAC,CAAC,CAAC,CAAC,EAAE,gBAAgB;IACtB,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe;IACrB,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS;IACf,CAAC,CAAC,CAAC,CAAC,EAAE,eAAe;CACtB,CAAA;AAED,uFAAuF;AACvF,MAAM,CAAC,MAAM,OAAO,GAAG,CAAC,CAAC,CAAA;AAEzB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAqC;IAChE,CAAC,EAAE,iBAAiB;IACpB,CAAC,EAAE,cAAc;CAClB,CAAA;AAED,4DAA4D;AAC5D,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAA;AAE9B,MAAM,CAAC,MAAM,gBAAgB,GAAqC;IAChE,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,SAAS;CACb,CAAA;AAED,6EAA6E;AAC7E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,KAAc,EAA6B,EAAE;IACxE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACjE,MAAM,SAAS,GAAG,KAAgC,CAAA;IAClD,IAAI,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAA;IACxD,OAAO,EAAE,IAAI,EAAE,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,SAAS,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAA;AACjG,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAAoB,EAAU,EAAE;IAC/D,MAAM,IAAI,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACtC,MAAM,KAAK,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAC9D,OAAO,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,CAAA;AAC9D,CAAC,CAAA"}