@cardano-slips/flow 0.0.3 → 0.2.0

package/dist/complete-error.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Why a Slip did not reach the chain, for the failures that belong to the whole
+ * path rather than to building, signing or submitting alone. `Blocked` is the
+ * one that matters: it is invariant 3 in the error channel, and there is no
+ * field on it that lets anyone past.
+ */
+import { type ClientErrorCode } from "@cardano-slips/core";
+import type { Reason } from "@cardano-slips/verifier";
+export type CompletionRefusal = 
+/** The wallet reported no unspent outputs, so there is nothing to build from. */
+"NoUtxos"
+/** What `getUtxos` answered is not something these bytes can be read as. */
+ | "UnreadableUtxos"
+/** The effects could not be derived from the transaction, or compared with the declaration. */
+ | "CannotJudge"
+/** The derived effects disagree with what the endpoint declared. Nothing signs after this. */
+ | "Blocked"
+/** The caller could not put the effects in front of a person, so nothing may be signed. */
+ | "NotShown"
+/** The funds kept moving, and the transaction has been rebuilt as often as it will be. */
+ | "OutOfAttempts";
+/**
+ * Exhaustive by type: adding a refusal above without listing it here fails to
+ * compile, and `test/complete.test.ts` fails if any of them stops being reachable.
+ */
+export declare const completionRefusals: Readonly<Record<CompletionRefusal, true>>;
+export declare const slipErrorCodeFor: (refusal: CompletionRefusal) => ClientErrorCode | undefined;
+declare const CompletionError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "CompletionError";
+} & Readonly<A>;
+/**
+ * `reasons` is what the transaction actually does against what was declared,
+ * for the block to render. There is no way to carry on from one — a mismatch
+ * hard-blocks, with no override, no allowlist and no confirmation.
+ */
+export declare class CompletionError extends CompletionError_base<{
+    readonly refusal: CompletionRefusal;
+    readonly detail: string;
+    readonly reasons?: ReadonlyArray<Reason>;
+    readonly cause?: unknown;
+}> {
+    get message(): string;
+    get code(): ClientErrorCode | undefined;
+}
+export declare const refuse: (refusal: CompletionRefusal, detail: string, extra?: {
+    readonly reasons?: ReadonlyArray<Reason>;
+    readonly cause?: unknown;
+}) => CompletionError;
+export {};
+//# sourceMappingURL=complete-error.d.ts.map

package/dist/complete-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"complete-error.d.ts","sourceRoot":"","sources":["../src/complete-error.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAA;AAGrD,MAAM,MAAM,iBAAiB;AAC3B,iFAAiF;AAC/E,SAAS;AACX,4EAA4E;GAC1E,iBAAiB;AACnB,+FAA+F;GAC7F,aAAa;AACf,8FAA8F;GAC5F,SAAS;AACX,2FAA2F;GACzF,UAAU;AACZ,0FAA0F;GACxF,eAAe,CAAA;AAEnB;;;GAGG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,iBAAiB,EAAE,IAAI,CAAC,CAOxE,CAAA;AAED,eAAO,MAAM,gBAAgB,GAAI,SAAS,iBAAiB,KAAG,eAAe,GAAG,SAa/E,CAAA;;;;AAED;;;;GAIG;AACH,qBAAa,eAAgB,SAAQ,qBAAoC;IACvE,QAAQ,CAAC,OAAO,EAAE,iBAAiB,CAAA;IACnC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IACxC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB,CAAC;IACA,IAAa,OAAO,IAAI,MAAM,CAE7B;IAED,IAAI,IAAI,IAAI,eAAe,GAAG,SAAS,CAEtC;CACF;AAED,eAAO,MAAM,MAAM,GACjB,SAAS,iBAAiB,EAC1B,QAAQ,MAAM,EACd,QAAO;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,aAAa,CAAC,MAAM,CAAC,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,KACjF,eAMC,CAAA"}

package/dist/complete-error.js

@@ -0,0 +1,47 @@
+import { Data } from "effect";
+/**
+ * Exhaustive by type: adding a refusal above without listing it here fails to
+ * compile, and `test/complete.test.ts` fails if any of them stops being reachable.
+ */
+export const completionRefusals = {
+    NoUtxos: true,
+    UnreadableUtxos: true,
+    CannotJudge: true,
+    Blocked: true,
+    NotShown: true,
+    OutOfAttempts: true
+};
+export const slipErrorCodeFor = (refusal) => {
+    switch (refusal) {
+        case "Blocked":
+            return "EFFECTS_MISMATCH";
+        case "NoUtxos":
+            return "INSUFFICIENT_FUNDS";
+        case "CannotJudge":
+            return "CANNOT_BALANCE";
+        case "UnreadableUtxos":
+        case "NotShown":
+        case "OutOfAttempts":
+            return undefined;
+    }
+};
+/**
+ * `reasons` is what the transaction actually does against what was declared,
+ * for the block to render. There is no way to carry on from one — a mismatch
+ * hard-blocks, with no override, no allowlist and no confirmation.
+ */
+export class CompletionError extends Data.TaggedError("CompletionError") {
+    get message() {
+        return this.detail;
+    }
+    get code() {
+        return slipErrorCodeFor(this.refusal);
+    }
+}
+export const refuse = (refusal, detail, extra = {}) => new CompletionError({
+    refusal,
+    detail,
+    ...(extra.reasons === undefined ? {} : { reasons: extra.reasons }),
+    ...(extra.cause === undefined ? {} : { cause: extra.cause })
+});
+//# sourceMappingURL=complete-error.js.map

package/dist/complete-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"complete-error.js","sourceRoot":"","sources":["../src/complete-error.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AAgB7B;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA8C;IAC3E,OAAO,EAAE,IAAI;IACb,eAAe,EAAE,IAAI;IACrB,WAAW,EAAE,IAAI;IACjB,OAAO,EAAE,IAAI;IACb,QAAQ,EAAE,IAAI;IACd,aAAa,EAAE,IAAI;CACpB,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAA0B,EAA+B,EAAE;IAC1F,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,SAAS;YACZ,OAAO,kBAAkB,CAAA;QAC3B,KAAK,SAAS;YACZ,OAAO,oBAAoB,CAAA;QAC7B,KAAK,aAAa;YAChB,OAAO,gBAAgB,CAAA;QACzB,KAAK,iBAAiB,CAAC;QACvB,KAAK,UAAU,CAAC;QAChB,KAAK,eAAe;YAClB,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,OAAO,eAAgB,SAAQ,IAAI,CAAC,WAAW,CAAC,iBAAiB,CAKrE;IACA,IAAa,OAAO;QAClB,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACvC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,OAA0B,EAC1B,MAAc,EACd,QAAgF,EAAE,EACjE,EAAE,CACnB,IAAI,eAAe,CAAC;IAClB,OAAO;IACP,MAAM;IACN,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;IAClE,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;CAC7D,CAAC,CAAA"}

package/dist/complete.d.ts

@@ -0,0 +1,58 @@
+/**
+ * The whole path: build against what the wallet holds, judge it with the
+ * verifier's own engine, sign, submit. When the funds move underneath, every
+ * one of those happens again — a rebuilt transaction is a different transaction,
+ * and asking for a signature on it without deriving its effects first would put
+ * a person's name on something nobody read.
+ */
+import type { Intent, Network } from "@cardano-slips/core";
+import { type Effects } from "@cardano-slips/verifier";
+import { Effect } from "effect";
+import { type BalancingParameters } from "./balance.js";
+import type { BalanceError } from "./balance-error.js";
+import type { Cip30Api } from "./cip30.js";
+import { type CompletionError } from "./complete-error.js";
+import type { SigningError } from "./sign-error.js";
+export type Attempt = {
+    /** Counting from one, so a rendered "attempt 2 of 3" reads as a person would say it. */
+    readonly number: number;
+    readonly transactionId: string;
+    /** What this transaction does, derived from its own bytes. */
+    readonly effects: Effects;
+};
+export type CompletionRequest = {
+    readonly api: Cip30Api;
+    /** What the endpoint declared, and what the transaction is judged against. */
+    readonly intent: Intent;
+    readonly network: Network;
+    readonly changeAddress: string;
+    /**
+     * Every address the wallet calls its own, its reward account included. An
+     * address missing from here is read as a stranger's, which turns the wallet's
+     * own change into an undeclared payment and blocks the Slip.
+     */
+    readonly userAddresses: ReadonlyArray<Uint8Array>;
+    readonly parameters: BalancingParameters;
+    readonly rewardBalance?: bigint;
+    /** Read once per attempt: a rebuilt transaction gets its own validity window. */
+    readonly now?: () => number;
+    /** How many times the transaction may be built. Beyond this the funds are moving faster than we can follow. */
+    readonly attempts?: number;
+    /** Called once per attempt, after the effects are derived and before the wallet is asked to sign. */
+    readonly onAttempt?: (attempt: Attempt) => void;
+};
+export type Receipt = {
+    readonly transactionId: string;
+    readonly effects: Effects;
+    /** How many transactions it took, which is how many times the funds moved plus one. */
+    readonly attempts: number;
+};
+type Failure = BalanceError | CompletionError | SigningError;
+/**
+ * Completes the Slip, or says why not. A submission that failed because an
+ * input was spent is the one failure worth repeating: everything else either
+ * cannot be helped by a rebuild or is a person having said no.
+ */
+export declare const completeIntent: (request: CompletionRequest) => Effect.Effect<Receipt, Failure>;
+export {};
+//# sourceMappingURL=complete.d.ts.map

package/dist/complete.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"complete.d.ts","sourceRoot":"","sources":["../src/complete.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAC1D,OAAO,EAA6C,KAAK,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjG,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AAEvC,OAAO,EAAiB,KAAK,mBAAmB,EAAE,MAAM,cAAc,CAAA;AACtE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAC1C,OAAO,EAAE,KAAK,eAAe,EAAU,MAAM,qBAAqB,CAAA;AAGlE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAOnD,MAAM,MAAM,OAAO,GAAG;IACpB,wFAAwF;IACxF,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,8DAA8D;IAC9D,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAA;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B;;;;OAIG;IACH,QAAQ,CAAC,aAAa,EAAE,aAAa,CAAC,UAAU,CAAC,CAAA;IACjD,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAA;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;IAC/B,iFAAiF;IACjF,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAC3B,+GAA+G;IAC/G,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,qGAAqG;IACrG,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,IAAI,CAAA;CAChD,CAAA;AAED,MAAM,MAAM,OAAO,GAAG;IACpB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,uFAAuF;IACvF,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAC1B,CAAA;AAED,KAAK,OAAO,GAAG,YAAY,GAAG,eAAe,GAAG,YAAY,CAAA;AAuG5D;;;;GAIG;AACH,eAAO,MAAM,cAAc,GAAI,SAAS,iBAAiB,KAAG,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,CA4BtF,CAAA"}

package/dist/complete.js

@@ -0,0 +1,108 @@
+import { compare, decodeTransaction, deriveEffects } from "@cardano-slips/verifier";
+import { Effect, Either } from "effect";
+import { balanceIntent } from "./balance.js";
+import { refuse } from "./complete-error.js";
+import { asResolvedInputs } from "./resolve.js";
+import { signTransaction, submitTransaction } from "./sign.js";
+import { readWalletUtxos } from "./utxo.js";
+import { transactionIdOf } from "./witness.js";
+/** Enough rebuilds to outlast an unlucky moment, few enough that nobody is asked forever. */
+const defaultAttempts = 3;
+const fromHex = (hex) => Uint8Array.from({ length: hex.length / 2 }, (_, index) => Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16));
+const walletUtxos = (api) => Effect.gen(function* () {
+    const answered = yield* Effect.tryPromise({
+        try: () => api.getUtxos(),
+        catch: (cause) => refuse("UnreadableUtxos", "The wallet could not say what it holds.", { cause })
+    });
+    // `null` is CIP-30's own answer for a wallet with nothing to give.
+    const hexes = answered ?? [];
+    const read = readWalletUtxos(hexes);
+    if (Either.isLeft(read)) {
+        return yield* Effect.fail(refuse("UnreadableUtxos", `The wallet's unspent outputs could not be read: ${read.left}`));
+    }
+    if (read.right.length === 0) {
+        return yield* Effect.fail(refuse("NoUtxos", "This wallet holds nothing to pay with."));
+    }
+    return read.right;
+});
+/**
+ * One transaction, from the wallet's outputs to a verdict. The judging happens
+ * here rather than at the caller so that no path reaches `signTransaction`
+ * without having passed it.
+ */
+const buildAndJudge = (request, number) => Effect.gen(function* () {
+    const utxos = yield* walletUtxos(request.api);
+    const now = (request.now ?? Date.now)();
+    const built = yield* balanceIntent({
+        intent: request.intent,
+        network: request.network,
+        changeAddress: request.changeAddress,
+        utxos,
+        parameters: request.parameters,
+        ...(request.rewardBalance === undefined ? {} : { rewardBalance: request.rewardBalance }),
+        now
+    });
+    const transaction = decodeTransaction(fromHex(built.cbor));
+    if (Either.isLeft(transaction)) {
+        return yield* Effect.fail(refuse("CannotJudge", `This transaction could not be read back: ${transaction.left.message}`));
+    }
+    const effects = deriveEffects({
+        transaction: transaction.right,
+        userAddresses: request.userAddresses,
+        resolvedInputs: asResolvedInputs(utxos),
+        protocolParameters: request.parameters
+    });
+    if (Either.isLeft(effects)) {
+        return yield* Effect.fail(refuse("CannotJudge", `What this transaction does could not be worked out: ${effects.left.message}`));
+    }
+    const verdict = compare({
+        effects: effects.right,
+        declared: request.intent,
+        changeAddress: request.changeAddress,
+        now: BigInt(now),
+        protocolParameters: request.parameters
+    });
+    if (Either.isLeft(verdict)) {
+        return yield* Effect.fail(refuse("CannotJudge", `This transaction could not be checked against what was declared: ${verdict.left.message}`));
+    }
+    if (verdict.right._tag === "mismatch") {
+        return yield* Effect.fail(refuse("Blocked", "This transaction does not do what the Slip said it would, so it will not be signed.", {
+            reasons: verdict.right.reasons
+        }));
+    }
+    const transactionId = yield* transactionIdOf(built.cbor);
+    const attempt = { number, transactionId, effects: effects.right };
+    // The caller is what puts these effects in front of a person. If that
+    // throws, the person has not seen them, so this fails closed rather than
+    // carrying on to a signature — and as a refusal rather than a stack trace.
+    yield* Effect.try({
+        try: () => request.onAttempt?.(attempt),
+        catch: (cause) => refuse("NotShown", "This transaction could not be shown, so it will not be signed.", { cause })
+    });
+    return { cbor: built.cbor, attempt };
+});
+/**
+ * Completes the Slip, or says why not. A submission that failed because an
+ * input was spent is the one failure worth repeating: everything else either
+ * cannot be helped by a rebuild or is a person having said no.
+ */
+export const completeIntent = (request) => Effect.gen(function* () {
+    const allowed = Math.max(1, request.attempts ?? defaultAttempts);
+    for (let number = 1; number <= allowed; number += 1) {
+        const { attempt, cbor } = yield* buildAndJudge(request, number);
+        const signed = yield* signTransaction({
+            api: request.api,
+            transaction: cbor,
+            transactionId: attempt.transactionId
+        });
+        const submitted = yield* Effect.either(submitTransaction(request.api, signed));
+        if (Either.isRight(submitted)) {
+            return { transactionId: submitted.right, effects: attempt.effects, attempts: number };
+        }
+        if (submitted.left.refusal !== "InputsSpent") {
+            return yield* Effect.fail(submitted.left);
+        }
+    }
+    return yield* Effect.fail(refuse("OutOfAttempts", `The wallet's funds moved every time this was built, ${allowed} times over. Try again in a moment.`));
+});
+//# sourceMappingURL=complete.js.map

package/dist/complete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"complete.js","sourceRoot":"","sources":["../src/complete.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAgB,MAAM,yBAAyB,CAAA;AACjG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAEvC,OAAO,EAAE,aAAa,EAA4B,MAAM,cAAc,CAAA;AAGtE,OAAO,EAAwB,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAE9D,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C,6FAA6F;AAC7F,MAAM,eAAe,GAAG,CAAC,CAAA;AAyCzB,MAAM,OAAO,GAAG,CAAC,GAAW,EAAc,EAAE,CAC1C,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAErH,MAAM,WAAW,GAAG,CAAC,GAAa,EAAE,EAAE,CACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACxC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE;QACzB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE,yCAAyC,EAAE,EAAE,KAAK,EAAE,CAAC;KAClG,CAAC,CAAA;IAEF,mEAAmE;IACnE,MAAM,KAAK,GAAG,QAAQ,IAAI,EAAE,CAAA;IAC5B,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,iBAAiB,EAAE,mDAAmD,IAAI,CAAC,IAAI,EAAE,CAAC,CAC1F,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAC,CAAA;IACxF,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAA;AACnB,CAAC,CAAC,CAAA;AAEJ;;;;GAIG;AACH,MAAM,aAAa,GAAG,CAAC,OAA0B,EAAE,MAAc,EAAE,EAAE,CACnE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAEvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;QACjC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,KAAK;QACL,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;QACxF,GAAG;KACJ,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1D,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,aAAa,EAAE,4CAA4C,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAC9F,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC;QAC5B,WAAW,EAAE,WAAW,CAAC,KAAK;QAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,cAAc,EAAE,gBAAgB,CAAC,KAAK,CAAC;QACvC,kBAAkB,EAAE,OAAO,CAAC,UAAU;KACvC,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,aAAa,EAAE,uDAAuD,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CACrG,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC;QACtB,OAAO,EAAE,OAAO,CAAC,KAAK;QACtB,QAAQ,EAAE,OAAO,CAAC,MAAM;QACxB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;QAChB,kBAAkB,EAAE,OAAO,CAAC,UAAU;KACvC,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CACJ,aAAa,EACb,oEAAoE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAC3F,CACF,CAAA;IACH,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,SAAS,EAAE,qFAAqF,EAAE;YACvG,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;SAC/B,CAAC,CACH,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxD,MAAM,OAAO,GAAY,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,CAAA;IAE1E,sEAAsE;IACtE,yEAAyE;IACzE,2EAA2E;IAC3E,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAChB,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,gEAAgE,EAAE,EAAE,KAAK,EAAE,CAAC;KAClH,CAAC,CAAA;IAEF,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAA;AACtC,CAAC,CAAC,CAAA;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAA0B,EAAmC,EAAE,CAC5F,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC,CAAA;IAEhE,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,OAAO,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAE/D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;YACpC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;QAC9E,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;QACvF,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CACJ,eAAe,EACf,uDAAuD,OAAO,qCAAqC,CACpG,CACF,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/connect.d.ts

@@ -0,0 +1,45 @@
+/**
+ * `enable()` and the three answers a connection is not usable without: the API
+ * object, the network, and the change address. Everything downstream of here —
+ * UTxOs, balancing, signing — goes through evolution-sdk with this API object
+ * (ADR-0004).
+ */
+import { type Network } from "@cardano-slips/core";
+import { Effect } from "effect";
+import { type NetworkId } from "./address.js";
+import { type Cip30Api } from "./cip30.js";
+import { type DiscoveredWallet } from "./discovery.js";
+import { type WalletConnectError } from "./wallet-error.js";
+export type ConnectOptions = {
+    /** The network the Slip declares. The wallet is held to it, not asked for it. */
+    readonly network: Network;
+    /** Where `cardano` lives. Defaults to the global object, so a test never needs one. */
+    readonly host?: unknown;
+    /** CIP extensions to ask for. A wallet may grant fewer, and none of ours are required. */
+    readonly extensions?: ReadonlyArray<{
+        readonly cip: number;
+    }>;
+};
+export type ConnectedWallet = {
+    readonly wallet: DiscoveredWallet;
+    readonly api: Cip30Api;
+    /** The Slip's network, now known to be the wallet's as well. */
+    readonly network: Network;
+    readonly networkId: NetworkId;
+    /** Bech32, ready for a `BuildRequest`. */
+    readonly changeAddress: string;
+};
+/**
+ * A CIP-19 address separates mainnet from testnet and no further, so this is
+ * every network id there is — preprod and preview are one value here. Telling
+ * them apart is exactly why a Slip states its network by name (`core/types.ts`).
+ */
+export declare const networkIdFor: (network: Network) => NetworkId;
+/**
+ * Connects, or says why not. The network check happens here rather than in a
+ * component because it decides whether there is a connection at all: a wallet
+ * on another chain cannot sign this Slip's transaction, and letting the flow
+ * continue only moves the failure to where it costs a person more.
+ */
+export declare const connectWallet: (key: string, options: ConnectOptions) => Effect.Effect<ConnectedWallet, WalletConnectError>;
+//# sourceMappingURL=connect.d.ts.map

package/dist/connect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.d.ts","sourceRoot":"","sources":["../src/connect.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,KAAK,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAClD,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,OAAO,EAAE,KAAK,SAAS,EAAqB,MAAM,cAAc,CAAA;AAChE,OAAO,EAAE,KAAK,QAAQ,EAAuD,MAAM,YAAY,CAAA;AAC/F,OAAO,EAAE,KAAK,gBAAgB,EAA6B,MAAM,gBAAgB,CAAA;AACjF,OAAO,EAAU,KAAK,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AAEnE,MAAM,MAAM,cAAc,GAAG;IAC3B,iFAAiF;IACjF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,uFAAuF;IACvF,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAA;IACvB,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,CAAC,EAAE,aAAa,CAAC;QAAE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAC9D,CAAA;AAED,MAAM,MAAM,eAAe,GAAG;IAC5B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;IACjC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAA;IACtB,gEAAgE;IAChE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;IACzB,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAA;IAC7B,0CAA0C;IAC1C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B,CAAA;AAED;;;;GAIG;AACH,eAAO,MAAM,YAAY,GAAI,SAAS,OAAO,KAAG,SAA4C,CAAA;AAkB5F;;;;;GAKG;AACH,eAAO,MAAM,aAAa,GACxB,KAAK,MAAM,EACX,SAAS,cAAc,KACtB,MAAM,CAAC,MAAM,CAAC,eAAe,EAAE,kBAAkB,CAsEhD,CAAA"}

package/dist/connect.js

@@ -0,0 +1,73 @@
+import { Effect } from "effect";
+import { readWalletAddress } from "./address.js";
+import { describeApiError, isCip30Api, readApiError, REFUSED } from "./cip30.js";
+import { findWallet, injectedUnder } from "./discovery.js";
+import { refuse } from "./wallet-error.js";
+/**
+ * A CIP-19 address separates mainnet from testnet and no further, so this is
+ * every network id there is — preprod and preview are one value here. Telling
+ * them apart is exactly why a Slip states its network by name (`core/types.ts`).
+ */
+export const networkIdFor = (network) => (network === "mainnet" ? 1 : 0);
+const networkNames = { 0: "a test network", 1: "mainnet" };
+const call = (key, method, run) => Effect.tryPromise({
+    try: run,
+    catch: (cause) => {
+        const cip30 = readApiError(cause);
+        return refuse("Unreadable", key, `${method} failed: ${cip30 === undefined ? String(cause) : describeApiError(cip30)}`, cip30);
+    }
+});
+/**
+ * Connects, or says why not. The network check happens here rather than in a
+ * component because it decides whether there is a connection at all: a wallet
+ * on another chain cannot sign this Slip's transaction, and letting the flow
+ * continue only moves the failure to where it costs a person more.
+ */
+export const connectWallet = (key, options) => Effect.gen(function* () {
+    const host = options.host ?? globalThis;
+    const wallet = findWallet(key, host);
+    if (wallet === undefined) {
+        return yield* Effect.fail(injectedUnder(key, host) === undefined
+            ? refuse("NotInjected", key, "no wallet is installed under this name")
+            : refuse("NotCip30", key, "what is installed under this name does not implement CIP-30"));
+    }
+    const api = yield* Effect.tryPromise({
+        try: () => wallet.provider.enable(options.extensions),
+        catch: (cause) => {
+            const cip30 = readApiError(cause);
+            if (cip30?.code === REFUSED) {
+                return refuse("Refused", key, "the connection was declined in the wallet", cip30);
+            }
+            const detail = cip30 === undefined ? String(cause) : describeApiError(cip30);
+            return refuse("EnableFailed", key, `the wallet could not be connected: ${detail}`, cip30);
+        }
+    });
+    // `enable()` is typed to return the API and is under no obligation to.
+    if (!isCip30Api(api)) {
+        return yield* Effect.fail(refuse("NotCip30", key, "the wallet connected without returning a CIP-30 API"));
+    }
+    const reported = yield* call(key, "getNetworkId", () => api.getNetworkId());
+    if (reported !== 0 && reported !== 1) {
+        return yield* Effect.fail(refuse("Unreadable", key, `getNetworkId answered ${String(reported)}`));
+    }
+    const networkId = reported === 1 ? 1 : 0;
+    const hex = yield* call(key, "getChangeAddress", () => api.getChangeAddress());
+    const address = yield* readWalletAddress(hex).pipe(Effect.mapError((detail) => refuse("Unreadable", key, `getChangeAddress answered ${detail}`)));
+    // Two answers about one wallet. A wallet that gives both cannot be taken at
+    // either word, and the disagreement is not the person's to resolve.
+    if (address.networkId !== networkId) {
+        return yield* Effect.fail(refuse("Unreadable", key, `the wallet reports ${networkNames[networkId]} and its change address is on ${networkNames[address.networkId]}`));
+    }
+    const expected = networkIdFor(options.network);
+    if (networkId !== expected) {
+        return yield* Effect.fail(refuse("WrongNetwork", key, `this Slip is on ${options.network} and the wallet is on ${networkNames[networkId]}`));
+    }
+    return {
+        wallet,
+        api,
+        network: options.network,
+        networkId,
+        changeAddress: address.bech32
+    };
+});
+//# sourceMappingURL=connect.js.map

package/dist/connect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"connect.js","sourceRoot":"","sources":["../src/connect.ts"],"names":[],"mappings":"AAOA,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,OAAO,EAAkB,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChE,OAAO,EAAiB,gBAAgB,EAAE,UAAU,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAC/F,OAAO,EAAyB,UAAU,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AACjF,OAAO,EAAE,MAAM,EAA2B,MAAM,mBAAmB,CAAA;AAqBnE;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,OAAgB,EAAa,EAAE,CAAC,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;AAE5F,MAAM,YAAY,GAAwC,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,SAAS,EAAE,CAAA;AAE/F,MAAM,IAAI,GAAG,CAAI,GAAW,EAAE,MAAc,EAAE,GAAqB,EAAwC,EAAE,CAC3G,MAAM,CAAC,UAAU,CAAC;IAChB,GAAG,EAAE,GAAG;IACR,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;QACf,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;QACjC,OAAO,MAAM,CACX,YAAY,EACZ,GAAG,EACH,GAAG,MAAM,YAAY,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,EAAE,EACpF,KAAK,CACN,CAAA;IACH,CAAC;CACF,CAAC,CAAA;AAEJ;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAC3B,GAAW,EACX,OAAuB,EAC6B,EAAE,CACtD,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,UAAU,CAAA;IACvC,MAAM,MAAM,GAAG,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;IACpC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,SAAS;YACpC,CAAC,CAAC,MAAM,CAAC,aAAa,EAAE,GAAG,EAAE,wCAAwC,CAAC;YACtE,CAAC,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,6DAA6D,CAAC,CAC3F,CAAA;IACH,CAAC;IAED,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACnC,GAAG,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC;QACrD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YACf,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;YACjC,IAAI,KAAK,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC5B,OAAO,MAAM,CAAC,SAAS,EAAE,GAAG,EAAE,2CAA2C,EAAE,KAAK,CAAC,CAAA;YACnF,CAAC;YACD,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAA;YAC5E,OAAO,MAAM,CAAC,cAAc,EAAE,GAAG,EAAE,sCAAsC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAA;QAC3F,CAAC;KACF,CAAC,CAAA;IAEF,uEAAuE;IACvE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACrB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,UAAU,EAAE,GAAG,EAAE,qDAAqD,CAAC,CAAC,CAAA;IAC3G,CAAC;IAED,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,CAAA;IAC3E,IAAI,QAAQ,KAAK,CAAC,IAAI,QAAQ,KAAK,CAAC,EAAE,CAAC;QACrC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,EAAE,yBAAyB,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,CAAA;IACnG,CAAC;IACD,MAAM,SAAS,GAAc,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAEnD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC,CAAA;IAC9E,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAC,IAAI,CAChD,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,YAAY,EAAE,GAAG,EAAE,6BAA6B,MAAM,EAAE,CAAC,CAAC,CAC9F,CAAA;IAED,4EAA4E;IAC5E,oEAAoE;IACpE,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CACJ,YAAY,EACZ,GAAG,EACH,sBAAsB,YAAY,CAAC,SAAS,CAAC,iCAAiC,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAChH,CACF,CAAA;IACH,CAAC;IAED,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC9C,IAAI,SAAS,KAAK,QAAQ,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CACJ,cAAc,EACd,GAAG,EACH,mBAAmB,OAAO,CAAC,OAAO,yBAAyB,YAAY,CAAC,SAAS,CAAC,EAAE,CACrF,CACF,CAAA;IACH,CAAC;IAED,OAAO;QACL,MAAM;QACN,GAAG;QACH,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,SAAS;QACT,aAAa,EAAE,OAAO,CAAC,MAAM;KAC9B,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/discovery.d.ts

@@ -0,0 +1,37 @@
+/**
+ * What is injected at `window.cardano`, read on demand. Nothing here touches a
+ * browser global at module scope: this SDK is imported by server-rendered pages
+ * we do not control, and a module that reads `window` while loading breaks them
+ * before any of it runs (ADR-0004).
+ */
+import { type Cip30Provider } from "./cip30.js";
+export type DiscoveredWallet = {
+    /** The `window.cardano` key. What `connectWallet` is asked for. */
+    readonly key: string;
+    readonly name: string;
+    readonly icon: string | undefined;
+    readonly apiVersion: string;
+    /** CIP numbers the provider says it supports, before `enable()` negotiates any of them. */
+    readonly extensions: ReadonlyArray<number>;
+    /** Present only for a wallet in the registry. */
+    readonly install: string | undefined;
+    readonly provider: Cip30Provider;
+};
+/** Anything with a `cardano` namespace: a `Window`, or a stand-in in a test. */
+export type WalletHost = {
+    readonly cardano?: unknown;
+};
+/**
+ * Every CIP-30 provider in the namespace, by display name. Returns an empty
+ * list where there is no namespace at all — a page with no wallet and a page
+ * rendered on a server are the same case to a caller, and neither is an error.
+ */
+export declare const discoverWallets: (host?: unknown) => ReadonlyArray<DiscoveredWallet>;
+/**
+ * Whatever sits under the key, connector or not. Lets a caller separate a
+ * wallet that is not installed from one that is and does not speak CIP-30.
+ */
+export declare const injectedUnder: (key: string, host?: unknown) => unknown;
+/** The provider under one key, or `undefined` where nothing usable is there. */
+export declare const findWallet: (key: string, host?: unknown) => DiscoveredWallet | undefined;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,KAAK,aAAa,EAAmB,MAAM,YAAY,CAAA;AAGhE,MAAM,MAAM,gBAAgB,GAAG;IAC7B,mEAAmE;IACnE,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,SAAS,CAAA;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,2FAA2F;IAC3F,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,MAAM,CAAC,CAAA;IAC1C,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAA;IACpC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAA;CACjC,CAAA;AAED,gFAAgF;AAChF,MAAM,MAAM,UAAU,GAAG;IAAE,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAA;CAAE,CAAA;AA6BvD;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,OAAM,OAAoB,KAAG,aAAa,CAAC,gBAAgB,CAoB1F,CAAA;AAED;;;GAGG;AACH,eAAO,MAAM,aAAa,GAAI,KAAK,MAAM,EAAE,OAAM,OAAoB,KAAG,OAAmC,CAAA;AAE3G,gFAAgF;AAChF,eAAO,MAAM,UAAU,GAAI,KAAK,MAAM,EAAE,OAAM,OAAoB,KAAG,gBAAgB,GAAG,SAKvF,CAAA"}

package/dist/discovery.js

@@ -0,0 +1,71 @@
+/**
+ * What is injected at `window.cardano`, read on demand. Nothing here touches a
+ * browser global at module scope: this SDK is imported by server-rendered pages
+ * we do not control, and a module that reads `window` while loading breaks them
+ * before any of it runs (ADR-0004).
+ */
+import { isCip30Provider } from "./cip30.js";
+import { knownWallet } from "./registry.js";
+const namespaceOf = (host) => {
+    if (typeof host !== "object" || host === null)
+        return undefined;
+    const cardano = host.cardano;
+    if (typeof cardano !== "object" || cardano === null)
+        return undefined;
+    return cardano;
+};
+const extensionsOf = (provider) => (provider.supportedExtensions ?? [])
+    .filter((extension) => typeof extension?.cip === "number")
+    .map((extension) => extension.cip);
+const describe = (key, provider) => {
+    const known = knownWallet(key);
+    return {
+        key,
+        // The registry wins over the injected name so one extension reads the same
+        // way in every list; an unknown wallet still gets to name itself.
+        name: known?.name ?? (provider.name === "" ? key : provider.name),
+        icon: typeof provider.icon === "string" && provider.icon !== "" ? provider.icon : undefined,
+        apiVersion: provider.apiVersion,
+        extensions: extensionsOf(provider),
+        install: known?.install,
+        provider
+    };
+};
+/**
+ * Every CIP-30 provider in the namespace, by display name. Returns an empty
+ * list where there is no namespace at all — a page with no wallet and a page
+ * rendered on a server are the same case to a caller, and neither is an error.
+ */
+export const discoverWallets = (host = globalThis) => {
+    const namespace = namespaceOf(host);
+    if (namespace === undefined)
+        return [];
+    const found = new Map();
+    for (const key of Object.keys(namespace)) {
+        const provider = namespace[key];
+        if (isCip30Provider(provider))
+            found.set(key, describe(key, provider));
+    }
+    // An extension injecting two keys is one wallet: listing it twice asks the
+    // person to choose between a wallet and itself.
+    for (const key of [...found.keys()]) {
+        const alias = knownWallet(key)?.aliasOf;
+        if (alias !== undefined && found.has(alias))
+            found.delete(key);
+    }
+    return [...found.values()].sort((left, right) => left.name.localeCompare(right.name) || left.key.localeCompare(right.key));
+};
+/**
+ * Whatever sits under the key, connector or not. Lets a caller separate a
+ * wallet that is not installed from one that is and does not speak CIP-30.
+ */
+export const injectedUnder = (key, host = globalThis) => namespaceOf(host)?.[key];
+/** The provider under one key, or `undefined` where nothing usable is there. */
+export const findWallet = (key, host = globalThis) => {
+    const namespace = namespaceOf(host);
+    if (namespace === undefined)
+        return undefined;
+    const provider = namespace[key];
+    return isCip30Provider(provider) ? describe(key, provider) : undefined;
+};
+//# sourceMappingURL=discovery.js.map

package/dist/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../src/discovery.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAsB,eAAe,EAAE,MAAM,YAAY,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAkB3C,MAAM,WAAW,GAAG,CAAC,IAAa,EAAuC,EAAE;IACzE,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IAC/D,MAAM,OAAO,GAAI,IAAgC,CAAC,OAAO,CAAA;IACzD,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,SAAS,CAAA;IACrE,OAAO,OAAkC,CAAA;AAC3C,CAAC,CAAA;AAED,MAAM,YAAY,GAAG,CAAC,QAAuB,EAAyB,EAAE,CACtE,CAAC,QAAQ,CAAC,mBAAmB,IAAI,EAAE,CAAC;KACjC,MAAM,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,OAAO,SAAS,EAAE,GAAG,KAAK,QAAQ,CAAC;KACzD,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,GAAG,CAAC,CAAA;AAEtC,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAE,QAAuB,EAAoB,EAAE;IAC1E,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,CAAA;IAC9B,OAAO;QACL,GAAG;QACH,2EAA2E;QAC3E,kEAAkE;QAClE,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QACjE,IAAI,EAAE,OAAO,QAAQ,CAAC,IAAI,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC3F,UAAU,EAAE,QAAQ,CAAC,UAAU;QAC/B,UAAU,EAAE,YAAY,CAAC,QAAQ,CAAC;QAClC,OAAO,EAAE,KAAK,EAAE,OAAO;QACvB,QAAQ;KACT,CAAA;AACH,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,OAAgB,UAAU,EAAmC,EAAE;IAC7F,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAEtC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAA;IACjD,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,eAAe,CAAC,QAAQ,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAA;IACxE,CAAC;IAED,2EAA2E;IAC3E,gDAAgD;IAChD,KAAK,MAAM,GAAG,IAAI,CAAC,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;QACpC,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,EAAE,OAAO,CAAA;QACvC,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAChE,CAAC;IAED,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAC7B,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,CAAC,GAAG,CAAC,CAC1F,CAAA;AACH,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,GAAW,EAAE,OAAgB,UAAU,EAAW,EAAE,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,CAAA;AAE3G,gFAAgF;AAChF,MAAM,CAAC,MAAM,UAAU,GAAG,CAAC,GAAW,EAAE,OAAgB,UAAU,EAAgC,EAAE;IAClG,MAAM,SAAS,GAAG,WAAW,CAAC,IAAI,CAAC,CAAA;IACnC,IAAI,SAAS,KAAK,SAAS;QAAE,OAAO,SAAS,CAAA;IAC7C,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,CAAA;IAC/B,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;AACxE,CAAC,CAAA"}

package/dist/index.d.ts

@@ -1,12 +1,32 @@
 /**
  * The public entry point of `@cardano-slips/flow`. The `exports` map exposes
  * this module and nothing else, so moving a file is never a breaking change.
- *
- * Two properties hold as the rest of the package arrives. It refuses but does
- * not decide — the comparison is `verifier`'s, and a mismatch renders as a
- * block with no override path to write. And it does not own the page it is
- * dropped into: no fixed positioning, no assumptions about the document, and
- * colours only from the custom properties in `tokens.css`.
  */
-export {};
+export type { NetworkId, WalletAddress } from "./address.js";
+export { readWalletAddress } from "./address.js";
+export type { BalancedTransaction, BalanceInputs, BalancingParameters } from "./balance.js";
+export { balanceIntent } from "./balance.js";
+export type { BalanceRefusal } from "./balance-error.js";
+export { BalanceError, balanceRefusals, slipErrorCodeFor as balanceErrorCodeFor } from "./balance-error.js";
+export type { CborHex, Cip30Api, Cip30ApiError, Cip30Provider, Paginate, SignedData } from "./cip30.js";
+export { apiErrorNames, describeApiError, isCip30Api, isCip30Provider, readApiError, REFUSED, txSendErrorNames, txSignErrorNames, USER_DECLINED } from "./cip30.js";
+export type { Attempt, CompletionRequest, Receipt } from "./complete.js";
+export { completeIntent } from "./complete.js";
+export type { CompletionRefusal } from "./complete-error.js";
+export { CompletionError, completionRefusals, slipErrorCodeFor as completionErrorCodeFor } from "./complete-error.js";
+export type { ConnectedWallet, ConnectOptions } from "./connect.js";
+export { connectWallet, networkIdFor } from "./connect.js";
+export type { DiscoveredWallet, WalletHost } from "./discovery.js";
+export { discoverWallets, findWallet, injectedUnder } from "./discovery.js";
+export type { KnownWallet } from "./registry.js";
+export { knownWallet, knownWallets } from "./registry.js";
+export { asResolvedInput, asResolvedInputs } from "./resolve.js";
+export type { SignedTransaction, SignRequest } from "./sign.js";
+export { signTransaction, submitTransaction } from "./sign.js";
+export type { SignRefusal } from "./sign-error.js";
+export { signRefusals, SigningError, slipErrorCodeFor as signErrorCodeFor } from "./sign-error.js";
+export { readWalletUtxos } from "./utxo.js";
+export type { ConnectRefusal } from "./wallet-error.js";
+export { connectRefusals, slipErrorCodeFor, WalletConnectError } from "./wallet-error.js";
+export { assembleWitnesses, requireSameBody, transactionIdOf } from "./witness.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAC3F,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,IAAI,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC3G,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvG,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACd,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,IAAI,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AACrH,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC1D,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC3E,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAChE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC/D,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC9D,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClG,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA"}

package/dist/index.js

@@ -1,2 +1,16 @@
-export {};
+export { readWalletAddress } from "./address.js";
+export { balanceIntent } from "./balance.js";
+export { BalanceError, balanceRefusals, slipErrorCodeFor as balanceErrorCodeFor } from "./balance-error.js";
+export { apiErrorNames, describeApiError, isCip30Api, isCip30Provider, readApiError, REFUSED, txSendErrorNames, txSignErrorNames, USER_DECLINED } from "./cip30.js";
+export { completeIntent } from "./complete.js";
+export { CompletionError, completionRefusals, slipErrorCodeFor as completionErrorCodeFor } from "./complete-error.js";
+export { connectWallet, networkIdFor } from "./connect.js";
+export { discoverWallets, findWallet, injectedUnder } from "./discovery.js";
+export { knownWallet, knownWallets } from "./registry.js";
+export { asResolvedInput, asResolvedInputs } from "./resolve.js";
+export { signTransaction, submitTransaction } from "./sign.js";
+export { signRefusals, SigningError, slipErrorCodeFor as signErrorCodeFor } from "./sign-error.js";
+export { readWalletUtxos } from "./utxo.js";
+export { connectRefusals, slipErrorCodeFor, WalletConnectError } from "./wallet-error.js";
+export { assembleWitnesses, requireSameBody, transactionIdOf } from "./witness.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAEhD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE5C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,IAAI,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAE3G,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACd,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,IAAI,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAErH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE1D,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAE3E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAEhE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAE9D,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClG,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA"}