@cardano-slips/flow 0.1.0 → 0.2.0

package/dist/complete.js

@@ -0,0 +1,108 @@
+import { compare, decodeTransaction, deriveEffects } from "@cardano-slips/verifier";
+import { Effect, Either } from "effect";
+import { balanceIntent } from "./balance.js";
+import { refuse } from "./complete-error.js";
+import { asResolvedInputs } from "./resolve.js";
+import { signTransaction, submitTransaction } from "./sign.js";
+import { readWalletUtxos } from "./utxo.js";
+import { transactionIdOf } from "./witness.js";
+/** Enough rebuilds to outlast an unlucky moment, few enough that nobody is asked forever. */
+const defaultAttempts = 3;
+const fromHex = (hex) => Uint8Array.from({ length: hex.length / 2 }, (_, index) => Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16));
+const walletUtxos = (api) => Effect.gen(function* () {
+    const answered = yield* Effect.tryPromise({
+        try: () => api.getUtxos(),
+        catch: (cause) => refuse("UnreadableUtxos", "The wallet could not say what it holds.", { cause })
+    });
+    // `null` is CIP-30's own answer for a wallet with nothing to give.
+    const hexes = answered ?? [];
+    const read = readWalletUtxos(hexes);
+    if (Either.isLeft(read)) {
+        return yield* Effect.fail(refuse("UnreadableUtxos", `The wallet's unspent outputs could not be read: ${read.left}`));
+    }
+    if (read.right.length === 0) {
+        return yield* Effect.fail(refuse("NoUtxos", "This wallet holds nothing to pay with."));
+    }
+    return read.right;
+});
+/**
+ * One transaction, from the wallet's outputs to a verdict. The judging happens
+ * here rather than at the caller so that no path reaches `signTransaction`
+ * without having passed it.
+ */
+const buildAndJudge = (request, number) => Effect.gen(function* () {
+    const utxos = yield* walletUtxos(request.api);
+    const now = (request.now ?? Date.now)();
+    const built = yield* balanceIntent({
+        intent: request.intent,
+        network: request.network,
+        changeAddress: request.changeAddress,
+        utxos,
+        parameters: request.parameters,
+        ...(request.rewardBalance === undefined ? {} : { rewardBalance: request.rewardBalance }),
+        now
+    });
+    const transaction = decodeTransaction(fromHex(built.cbor));
+    if (Either.isLeft(transaction)) {
+        return yield* Effect.fail(refuse("CannotJudge", `This transaction could not be read back: ${transaction.left.message}`));
+    }
+    const effects = deriveEffects({
+        transaction: transaction.right,
+        userAddresses: request.userAddresses,
+        resolvedInputs: asResolvedInputs(utxos),
+        protocolParameters: request.parameters
+    });
+    if (Either.isLeft(effects)) {
+        return yield* Effect.fail(refuse("CannotJudge", `What this transaction does could not be worked out: ${effects.left.message}`));
+    }
+    const verdict = compare({
+        effects: effects.right,
+        declared: request.intent,
+        changeAddress: request.changeAddress,
+        now: BigInt(now),
+        protocolParameters: request.parameters
+    });
+    if (Either.isLeft(verdict)) {
+        return yield* Effect.fail(refuse("CannotJudge", `This transaction could not be checked against what was declared: ${verdict.left.message}`));
+    }
+    if (verdict.right._tag === "mismatch") {
+        return yield* Effect.fail(refuse("Blocked", "This transaction does not do what the Slip said it would, so it will not be signed.", {
+            reasons: verdict.right.reasons
+        }));
+    }
+    const transactionId = yield* transactionIdOf(built.cbor);
+    const attempt = { number, transactionId, effects: effects.right };
+    // The caller is what puts these effects in front of a person. If that
+    // throws, the person has not seen them, so this fails closed rather than
+    // carrying on to a signature — and as a refusal rather than a stack trace.
+    yield* Effect.try({
+        try: () => request.onAttempt?.(attempt),
+        catch: (cause) => refuse("NotShown", "This transaction could not be shown, so it will not be signed.", { cause })
+    });
+    return { cbor: built.cbor, attempt };
+});
+/**
+ * Completes the Slip, or says why not. A submission that failed because an
+ * input was spent is the one failure worth repeating: everything else either
+ * cannot be helped by a rebuild or is a person having said no.
+ */
+export const completeIntent = (request) => Effect.gen(function* () {
+    const allowed = Math.max(1, request.attempts ?? defaultAttempts);
+    for (let number = 1; number <= allowed; number += 1) {
+        const { attempt, cbor } = yield* buildAndJudge(request, number);
+        const signed = yield* signTransaction({
+            api: request.api,
+            transaction: cbor,
+            transactionId: attempt.transactionId
+        });
+        const submitted = yield* Effect.either(submitTransaction(request.api, signed));
+        if (Either.isRight(submitted)) {
+            return { transactionId: submitted.right, effects: attempt.effects, attempts: number };
+        }
+        if (submitted.left.refusal !== "InputsSpent") {
+            return yield* Effect.fail(submitted.left);
+        }
+    }
+    return yield* Effect.fail(refuse("OutOfAttempts", `The wallet's funds moved every time this was built, ${allowed} times over. Try again in a moment.`));
+});
+//# sourceMappingURL=complete.js.map

package/dist/complete.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"complete.js","sourceRoot":"","sources":["../src/complete.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,OAAO,EAAE,iBAAiB,EAAE,aAAa,EAAgB,MAAM,yBAAyB,CAAA;AACjG,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAEvC,OAAO,EAAE,aAAa,EAA4B,MAAM,cAAc,CAAA;AAGtE,OAAO,EAAwB,MAAM,EAAE,MAAM,qBAAqB,CAAA;AAClE,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAC/C,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAE9D,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAE9C,6FAA6F;AAC7F,MAAM,eAAe,GAAG,CAAC,CAAA;AAyCzB,MAAM,OAAO,GAAG,CAAC,GAAW,EAAc,EAAE,CAC1C,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;AAErH,MAAM,WAAW,GAAG,CAAC,GAAa,EAAE,EAAE,CACpC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACxC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,EAAE;QACzB,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE,yCAAyC,EAAE,EAAE,KAAK,EAAE,CAAC;KAClG,CAAC,CAAA;IAEF,mEAAmE;IACnE,MAAM,KAAK,GAAG,QAAQ,IAAI,EAAE,CAAA;IAC5B,MAAM,IAAI,GAAG,eAAe,CAAC,KAAK,CAAC,CAAA;IACnC,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,iBAAiB,EAAE,mDAAmD,IAAI,CAAC,IAAI,EAAE,CAAC,CAC1F,CAAA;IACH,CAAC;IACD,IAAI,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,wCAAwC,CAAC,CAAC,CAAA;IACxF,CAAC;IACD,OAAO,IAAI,CAAC,KAAK,CAAA;AACnB,CAAC,CAAC,CAAA;AAEJ;;;;GAIG;AACH,MAAM,aAAa,GAAG,CAAC,OAA0B,EAAE,MAAc,EAAE,EAAE,CACnE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAC7C,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAA;IAEvC,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC;QACjC,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,KAAK;QACL,UAAU,EAAE,OAAO,CAAC,UAAU;QAC9B,GAAG,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE,CAAC;QACxF,GAAG;KACJ,CAAC,CAAA;IAEF,MAAM,WAAW,GAAG,iBAAiB,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAA;IAC1D,IAAI,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,aAAa,EAAE,4CAA4C,WAAW,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAC9F,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC;QAC5B,WAAW,EAAE,WAAW,CAAC,KAAK;QAC9B,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,cAAc,EAAE,gBAAgB,CAAC,KAAK,CAAC;QACvC,kBAAkB,EAAE,OAAO,CAAC,UAAU;KACvC,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,aAAa,EAAE,uDAAuD,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CACrG,CAAA;IACH,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC;QACtB,OAAO,EAAE,OAAO,CAAC,KAAK;QACtB,QAAQ,EAAE,OAAO,CAAC,MAAM;QACxB,aAAa,EAAE,OAAO,CAAC,aAAa;QACpC,GAAG,EAAE,MAAM,CAAC,GAAG,CAAC;QAChB,kBAAkB,EAAE,OAAO,CAAC,UAAU;KACvC,CAAC,CAAA;IACF,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CACJ,aAAa,EACb,oEAAoE,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,CAC3F,CACF,CAAA;IACH,CAAC;IAED,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,SAAS,EAAE,qFAAqF,EAAE;YACvG,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;SAC/B,CAAC,CACH,CAAA;IACH,CAAC;IAED,MAAM,aAAa,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,KAAK,CAAC,IAAI,CAAC,CAAA;IACxD,MAAM,OAAO,GAAY,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,CAAA;IAE1E,sEAAsE;IACtE,yEAAyE;IACzE,2EAA2E;IAC3E,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAChB,GAAG,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,OAAO,CAAC;QACvC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,UAAU,EAAE,gEAAgE,EAAE,EAAE,KAAK,EAAE,CAAC;KAClH,CAAC,CAAA;IAEF,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,CAAA;AACtC,CAAC,CAAC,CAAA;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,OAA0B,EAAmC,EAAE,CAC5F,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,CAAC,QAAQ,IAAI,eAAe,CAAC,CAAA;IAEhE,KAAK,IAAI,MAAM,GAAG,CAAC,EAAE,MAAM,IAAI,OAAO,EAAE,MAAM,IAAI,CAAC,EAAE,CAAC;QACpD,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC,CAAC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAE/D,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC;YACpC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,WAAW,EAAE,IAAI;YACjB,aAAa,EAAE,OAAO,CAAC,aAAa;SACrC,CAAC,CAAA;QAEF,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,iBAAiB,CAAC,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,CAAC,CAAA;QAC9E,IAAI,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9B,OAAO,EAAE,aAAa,EAAE,SAAS,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAA;QACvF,CAAC;QACD,IAAI,SAAS,CAAC,IAAI,CAAC,OAAO,KAAK,aAAa,EAAE,CAAC;YAC7C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;QAC3C,CAAC;IACH,CAAC;IAED,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CACJ,eAAe,EACf,uDAAuD,OAAO,qCAAqC,CACpG,CACF,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/index.d.ts

@@ -4,14 +4,29 @@
  */
 export type { NetworkId, WalletAddress } from "./address.js";
 export { readWalletAddress } from "./address.js";
+export type { BalancedTransaction, BalanceInputs, BalancingParameters } from "./balance.js";
+export { balanceIntent } from "./balance.js";
+export type { BalanceRefusal } from "./balance-error.js";
+export { BalanceError, balanceRefusals, slipErrorCodeFor as balanceErrorCodeFor } from "./balance-error.js";
 export type { CborHex, Cip30Api, Cip30ApiError, Cip30Provider, Paginate, SignedData } from "./cip30.js";
-export { apiErrorNames, describeApiError, isCip30Api, isCip30Provider, readApiError, REFUSED } from "./cip30.js";
+export { apiErrorNames, describeApiError, isCip30Api, isCip30Provider, readApiError, REFUSED, txSendErrorNames, txSignErrorNames, USER_DECLINED } from "./cip30.js";
+export type { Attempt, CompletionRequest, Receipt } from "./complete.js";
+export { completeIntent } from "./complete.js";
+export type { CompletionRefusal } from "./complete-error.js";
+export { CompletionError, completionRefusals, slipErrorCodeFor as completionErrorCodeFor } from "./complete-error.js";
 export type { ConnectedWallet, ConnectOptions } from "./connect.js";
 export { connectWallet, networkIdFor } from "./connect.js";
 export type { DiscoveredWallet, WalletHost } from "./discovery.js";
 export { discoverWallets, findWallet, injectedUnder } from "./discovery.js";
 export type { KnownWallet } from "./registry.js";
 export { knownWallet, knownWallets } from "./registry.js";
+export { asResolvedInput, asResolvedInputs } from "./resolve.js";
+export type { SignedTransaction, SignRequest } from "./sign.js";
+export { signTransaction, submitTransaction } from "./sign.js";
+export type { SignRefusal } from "./sign-error.js";
+export { signRefusals, SigningError, slipErrorCodeFor as signErrorCodeFor } from "./sign-error.js";
+export { readWalletUtxos } from "./utxo.js";
 export type { ConnectRefusal } from "./wallet-error.js";
 export { connectRefusals, slipErrorCodeFor, WalletConnectError } from "./wallet-error.js";
+export { assembleWitnesses, requireSameBody, transactionIdOf } from "./witness.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvG,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAChH,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC1D,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC3E,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACzD,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,YAAY,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5D,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAChD,YAAY,EAAE,mBAAmB,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAA;AAC3F,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAC5C,YAAY,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAA;AACxD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,IAAI,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAC3G,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,aAAa,EAAE,QAAQ,EAAE,UAAU,EAAE,MAAM,YAAY,CAAA;AACvG,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACd,MAAM,YAAY,CAAA;AACnB,YAAY,EAAE,OAAO,EAAE,iBAAiB,EAAE,OAAO,EAAE,MAAM,eAAe,CAAA;AACxE,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAC9C,YAAY,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAA;AAC5D,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,IAAI,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AACrH,YAAY,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACnE,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAC1D,YAAY,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,gBAAgB,CAAA;AAClE,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAC3E,YAAY,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAChE,YAAY,EAAE,iBAAiB,EAAE,WAAW,EAAE,MAAM,WAAW,CAAA;AAC/D,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAC9D,YAAY,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AAClD,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClG,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,YAAY,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AACvD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA"}

package/dist/index.js

@@ -1,7 +1,16 @@
 export { readWalletAddress } from "./address.js";
-export { apiErrorNames, describeApiError, isCip30Api, isCip30Provider, readApiError, REFUSED } from "./cip30.js";
+export { balanceIntent } from "./balance.js";
+export { BalanceError, balanceRefusals, slipErrorCodeFor as balanceErrorCodeFor } from "./balance-error.js";
+export { apiErrorNames, describeApiError, isCip30Api, isCip30Provider, readApiError, REFUSED, txSendErrorNames, txSignErrorNames, USER_DECLINED } from "./cip30.js";
+export { completeIntent } from "./complete.js";
+export { CompletionError, completionRefusals, slipErrorCodeFor as completionErrorCodeFor } from "./complete-error.js";
 export { connectWallet, networkIdFor } from "./connect.js";
 export { discoverWallets, findWallet, injectedUnder } from "./discovery.js";
 export { knownWallet, knownWallets } from "./registry.js";
+export { asResolvedInput, asResolvedInputs } from "./resolve.js";
+export { signTransaction, submitTransaction } from "./sign.js";
+export { signRefusals, SigningError, slipErrorCodeFor as signErrorCodeFor } from "./sign-error.js";
+export { readWalletUtxos } from "./utxo.js";
 export { connectRefusals, slipErrorCodeFor, WalletConnectError } from "./wallet-error.js";
+export { assembleWitnesses, requireSameBody, transactionIdOf } from "./witness.js";
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAEhD,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,UAAU,EAAE,eAAe,EAAE,YAAY,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAEhH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE1D,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAE3E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAEzD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,cAAc,CAAA;AAEhD,OAAO,EAAE,aAAa,EAAE,MAAM,cAAc,CAAA;AAE5C,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,gBAAgB,IAAI,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAE3G,OAAO,EACL,aAAa,EACb,gBAAgB,EAChB,UAAU,EACV,eAAe,EACf,YAAY,EACZ,OAAO,EACP,gBAAgB,EAChB,gBAAgB,EAChB,aAAa,EACd,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,gBAAgB,IAAI,sBAAsB,EAAE,MAAM,qBAAqB,CAAA;AAErH,OAAO,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAE1D,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,gBAAgB,CAAA;AAE3E,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACzD,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAA;AAEhE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE,MAAM,WAAW,CAAA;AAE9D,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,gBAAgB,IAAI,gBAAgB,EAAE,MAAM,iBAAiB,CAAA;AAClG,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAE3C,OAAO,EAAE,eAAe,EAAE,gBAAgB,EAAE,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzF,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA"}

package/dist/resolve.d.ts

@@ -0,0 +1,11 @@
+/**
+ * The wallet's own unspent outputs, in the form the verifier's derivation takes
+ * them. The engine is handed the value of every input the body spends because
+ * it never looks one up (invariant 1) — this is where the client, which does
+ * know, says so.
+ */
+import type { ResolvedInput } from "@cardano-slips/verifier";
+import type { UTxO } from "@evolution-sdk/evolution";
+export declare const asResolvedInput: (utxo: UTxO.UTxO) => ResolvedInput;
+export declare const asResolvedInputs: (utxos: ReadonlyArray<UTxO.UTxO>) => ReadonlyArray<ResolvedInput>;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,KAAK,EAAc,aAAa,EAAE,MAAM,yBAAyB,CAAA;AAUxE,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,0BAA0B,CAAA;AAgBpD,eAAO,MAAM,eAAe,GAAI,MAAM,IAAI,CAAC,IAAI,KAAG,aAIhD,CAAA;AAEF,eAAO,MAAM,gBAAgB,GAAI,OAAO,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,KAAG,aAAa,CAAC,aAAa,CAClE,CAAA"}

package/dist/resolve.js

@@ -0,0 +1,21 @@
+import { Address, AssetName, Assets, MultiAsset as Multi, PolicyId, Schema, TransactionHash } from "@evolution-sdk/evolution";
+const addressBytes = Schema.encodeSync(Address.FromBytes);
+const multiAssetOf = (assets) => {
+    const held = Assets.getMultiAsset(assets);
+    if (held === undefined)
+        return [];
+    return Multi.getPolicyIds(held).map((policyId) => ({
+        policyId: PolicyId.toBytes(policyId),
+        assets: Multi.getAssetsByPolicy(held, policyId).map(([name, quantity]) => ({
+            name: AssetName.toBytes(name),
+            quantity
+        }))
+    }));
+};
+export const asResolvedInput = (utxo) => ({
+    input: { transactionId: TransactionHash.toBytes(utxo.transactionId), index: utxo.index },
+    address: addressBytes(utxo.address),
+    value: { coin: Assets.lovelaceOf(utxo.assets), assets: multiAssetOf(utxo.assets) }
+});
+export const asResolvedInputs = (utxos) => utxos.map(asResolvedInput);
+//# sourceMappingURL=resolve.js.map

package/dist/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../src/resolve.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,OAAO,EACP,SAAS,EACT,MAAM,EACN,UAAU,IAAI,KAAK,EACnB,QAAQ,EACR,MAAM,EACN,eAAe,EAChB,MAAM,0BAA0B,CAAA;AAGjC,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;AAEzD,MAAM,YAAY,GAAG,CAAC,MAAqB,EAAc,EAAE;IACzD,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC,MAAM,CAAC,CAAA;IACzC,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IACjC,OAAO,KAAK,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACjD,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;QACpC,MAAM,EAAE,KAAK,CAAC,iBAAiB,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;YACzE,IAAI,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC;YAC7B,QAAQ;SACT,CAAC,CAAC;KACJ,CAAC,CAAC,CAAA;AACL,CAAC,CAAA;AAED,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,IAAe,EAAiB,EAAE,CAAC,CAAC;IAClE,KAAK,EAAE,EAAE,aAAa,EAAE,eAAe,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE;IACxF,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,OAAO,CAAC;IACnC,KAAK,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;CACnF,CAAC,CAAA;AAEF,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,KAA+B,EAAgC,EAAE,CAChG,KAAK,CAAC,GAAG,CAAC,eAAe,CAAC,CAAA"}

package/dist/sign-error.d.ts

@@ -0,0 +1,62 @@
+/**
+ * Why a transaction was not signed, or not submitted. One error, a closed set
+ * of refusals, because the client renders a state per refusal and a state
+ * nothing can produce is a screen nobody sees.
+ */
+import { type ClientErrorCode } from "@cardano-slips/core";
+import { type Cip30ApiError } from "./cip30.js";
+export type SignRefusal = 
+/** The bytes we hold are not a transaction these bytes can be read as. */
+"UnreadableTransaction"
+/** This is not the body the effects were derived from, so nothing may be signed into it. */
+ | "WrongBody"
+/** The person said no in the wallet. Not a fault. */
+ | "Declined"
+/** The wallet tried to sign and could not, or rejected for a reason of its own. */
+ | "SignFailed"
+/** What came back is not a witness set — a whole transaction included. */
+ | "UnreadableWitnesses"
+/** The set carries script or datum material the body was never judged with. */
+ | "UnexpectedWitnessMaterial"
+/** The set carries no signature, so assembling it would leave the transaction unsigned. */
+ | "NoWitnesses"
+/** Submission failed because an input was spent between building and signing. */
+ | "InputsSpent"
+/** The validity interval passed before the transaction reached the chain. */
+ | "IntervalPassed"
+/** Submission failed for any other reason. */
+ | "SubmitFailed"
+/** The wallet submitted, and named a transaction other than the one we assembled. */
+ | "WrongTransactionId";
+/**
+ * Exhaustive by type: adding a refusal above without listing it here fails to
+ * compile, and `test/sign.test.ts` fails if any of them stops being reachable.
+ */
+export declare const signRefusals: Readonly<Record<SignRefusal, true>>;
+/**
+ * Only the passed interval has a spec code, because only it is a failure of the
+ * exchange the spec describes — the intent outlived its own `validUntil`. The
+ * rest are states of a wallet or of the chain, and a protocol code on one of
+ * those would say the endpoint answered when nothing was ever asked of it
+ * (`wallet-error.ts` draws the same line).
+ */
+export declare const slipErrorCodeFor: (refusal: SignRefusal) => ClientErrorCode | undefined;
+declare const SigningError_base: new <A extends Record<string, any> = {}>(args: import("effect/Types").VoidIfEmpty<{ readonly [P in keyof A as P extends "_tag" ? never : P]: A[P]; }>) => import("effect/Cause").YieldableError & {
+    readonly _tag: "SigningError";
+} & Readonly<A>;
+/** `cip30` is the wallet's own `{ code, info }`, kept so a decline stays distinguishable from a crash. */
+export declare class SigningError extends SigningError_base<{
+    readonly refusal: SignRefusal;
+    readonly detail: string;
+    readonly cip30?: Cip30ApiError;
+    readonly cause?: unknown;
+}> {
+    get message(): string;
+    get code(): ClientErrorCode | undefined;
+}
+export declare const refuse: (refusal: SignRefusal, detail: string, extra?: {
+    readonly cip30?: Cip30ApiError;
+    readonly cause?: unknown;
+}) => SigningError;
+export {};
+//# sourceMappingURL=sign-error.d.ts.map

package/dist/sign-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-error.d.ts","sourceRoot":"","sources":["../src/sign-error.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,KAAK,eAAe,EAAE,MAAM,qBAAqB,CAAA;AAG1D,OAAO,EAAE,KAAK,aAAa,EAAE,MAAM,YAAY,CAAA;AAE/C,MAAM,MAAM,WAAW;AACrB,0EAA0E;AACxE,uBAAuB;AACzB,4FAA4F;GAC1F,WAAW;AACb,qDAAqD;GACnD,UAAU;AACZ,mFAAmF;GACjF,YAAY;AACd,0EAA0E;GACxE,qBAAqB;AACvB,+EAA+E;GAC7E,2BAA2B;AAC7B,2FAA2F;GACzF,aAAa;AACf,iFAAiF;GAC/E,aAAa;AACf,6EAA6E;GAC3E,gBAAgB;AAClB,8CAA8C;GAC5C,cAAc;AAChB,qFAAqF;GACnF,oBAAoB,CAAA;AAExB;;;GAGG;AACH,eAAO,MAAM,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC,CAY5D,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gBAAgB,GAAI,SAAS,WAAW,KAAG,eAAe,GAAG,SACb,CAAA;;;;AAE7D,0GAA0G;AAC1G,qBAAa,YAAa,SAAQ,kBAAiC;IACjE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAA;IAC9B,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CACzB,CAAC;IACA,IAAa,OAAO,IAAI,MAAM,CAE7B;IAED,IAAI,IAAI,IAAI,eAAe,GAAG,SAAS,CAEtC;CACF;AAED,eAAO,MAAM,MAAM,GACjB,SAAS,WAAW,EACpB,QAAQ,MAAM,EACd,QAAO;IAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,KACvE,YAMC,CAAA"}

package/dist/sign-error.js

@@ -0,0 +1,42 @@
+import { Data } from "effect";
+/**
+ * Exhaustive by type: adding a refusal above without listing it here fails to
+ * compile, and `test/sign.test.ts` fails if any of them stops being reachable.
+ */
+export const signRefusals = {
+    UnreadableTransaction: true,
+    WrongBody: true,
+    Declined: true,
+    SignFailed: true,
+    UnreadableWitnesses: true,
+    UnexpectedWitnessMaterial: true,
+    NoWitnesses: true,
+    InputsSpent: true,
+    IntervalPassed: true,
+    SubmitFailed: true,
+    WrongTransactionId: true
+};
+/**
+ * Only the passed interval has a spec code, because only it is a failure of the
+ * exchange the spec describes — the intent outlived its own `validUntil`. The
+ * rest are states of a wallet or of the chain, and a protocol code on one of
+ * those would say the endpoint answered when nothing was ever asked of it
+ * (`wallet-error.ts` draws the same line).
+ */
+export const slipErrorCodeFor = (refusal) => refusal === "IntervalPassed" ? "INTENT_EXPIRED" : undefined;
+/** `cip30` is the wallet's own `{ code, info }`, kept so a decline stays distinguishable from a crash. */
+export class SigningError extends Data.TaggedError("SigningError") {
+    get message() {
+        return this.detail;
+    }
+    get code() {
+        return slipErrorCodeFor(this.refusal);
+    }
+}
+export const refuse = (refusal, detail, extra = {}) => new SigningError({
+    refusal,
+    detail,
+    ...(extra.cip30 === undefined ? {} : { cip30: extra.cip30 }),
+    ...(extra.cause === undefined ? {} : { cause: extra.cause })
+});
+//# sourceMappingURL=sign-error.js.map

package/dist/sign-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign-error.js","sourceRoot":"","sources":["../src/sign-error.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,IAAI,EAAE,MAAM,QAAQ,CAAA;AA4B7B;;;GAGG;AACH,MAAM,CAAC,MAAM,YAAY,GAAwC;IAC/D,qBAAqB,EAAE,IAAI;IAC3B,SAAS,EAAE,IAAI;IACf,QAAQ,EAAE,IAAI;IACd,UAAU,EAAE,IAAI;IAChB,mBAAmB,EAAE,IAAI;IACzB,yBAAyB,EAAE,IAAI;IAC/B,WAAW,EAAE,IAAI;IACjB,WAAW,EAAE,IAAI;IACjB,cAAc,EAAE,IAAI;IACpB,YAAY,EAAE,IAAI;IAClB,kBAAkB,EAAE,IAAI;CACzB,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,OAAoB,EAA+B,EAAE,CACpF,OAAO,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,SAAS,CAAA;AAE7D,0GAA0G;AAC1G,MAAM,OAAO,YAAa,SAAQ,IAAI,CAAC,WAAW,CAAC,cAAc,CAK/D;IACA,IAAa,OAAO;QAClB,OAAO,IAAI,CAAC,MAAM,CAAA;IACpB,CAAC;IAED,IAAI,IAAI;QACN,OAAO,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACvC,CAAC;CACF;AAED,MAAM,CAAC,MAAM,MAAM,GAAG,CACpB,OAAoB,EACpB,MAAc,EACd,QAAsE,EAAE,EAC1D,EAAE,CAChB,IAAI,YAAY,CAAC;IACf,OAAO;IACP,MAAM;IACN,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;IAC5D,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;CAC7D,CAAC,CAAA"}

package/dist/sign.d.ts

@@ -0,0 +1,38 @@
+/**
+ * `signTx` → witness assembly → `submitTx`. CIP-30 returns a **witness set**,
+ * never a signed transaction (invariant 4), so the body a person was shown and
+ * the body that reaches the chain are joined here or nowhere.
+ */
+import { Effect } from "effect";
+import { type CborHex, type Cip30Api } from "./cip30.js";
+import { type SigningError } from "./sign-error.js";
+export type SignRequest = {
+    readonly api: Cip30Api;
+    /** The complete unsigned transaction. */
+    readonly transaction: CborHex;
+    /**
+     * The id of the body the effects were derived from, from `transactionIdOf`.
+     * Required, not derived here: a signature is bound to the body a person was
+     * shown, and a function that recomputed the id from the bytes in front of it
+     * would bind it to whatever it was handed.
+     */
+    readonly transactionId: string;
+};
+export type SignedTransaction = {
+    /** The body with the witnesses in it: what `submitTx` takes. */
+    readonly cbor: CborHex;
+    /** Unchanged by signing, because witnesses live outside the body. */
+    readonly transactionId: string;
+};
+/**
+ * Signs, or says why not. Nothing is asked of the wallet until the transaction
+ * is known to be the one the effects were derived from.
+ */
+export declare const signTransaction: ({ api, transaction, transactionId }: SignRequest) => Effect.Effect<SignedTransaction, SigningError>;
+/**
+ * Submits, and holds the wallet to the transaction it was given: an id other
+ * than the one we assembled is a receipt for something else, and showing it
+ * would tell a person their transaction is on the chain when another one is.
+ */
+export declare const submitTransaction: (api: Cip30Api, signed: SignedTransaction) => Effect.Effect<string, SigningError>;
+//# sourceMappingURL=sign.d.ts.map

package/dist/sign.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.d.ts","sourceRoot":"","sources":["../src/sign.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,OAAO,EAAE,KAAK,OAAO,EAAE,KAAK,QAAQ,EAAwC,MAAM,YAAY,CAAA;AAC9F,OAAO,EAAU,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAG3D,MAAM,MAAM,WAAW,GAAG;IACxB,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAA;IACtB,yCAAyC;IACzC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;IAC7B;;;;;OAKG;IACH,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B,CAAA;AAED,MAAM,MAAM,iBAAiB,GAAG;IAC9B,gEAAgE;IAChE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,qEAAqE;IACrE,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAC/B,CAAA;AASD;;;GAGG;AACH,eAAO,MAAM,eAAe,GAAI,qCAI7B,WAAW,KAAG,MAAM,CAAC,MAAM,CAAC,iBAAiB,EAAE,YAAY,CAwB1D,CAAA;AAsBJ;;;;GAIG;AACH,eAAO,MAAM,iBAAiB,GAAI,KAAK,QAAQ,EAAE,QAAQ,iBAAiB,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAoB3G,CAAA"}

package/dist/sign.js

@@ -0,0 +1,79 @@
+/**
+ * `signTx` → witness assembly → `submitTx`. CIP-30 returns a **witness set**,
+ * never a signed transaction (invariant 4), so the body a person was shown and
+ * the body that reaches the chain are joined here or nowhere.
+ */
+import { Effect } from "effect";
+import { readApiError, REFUSED, USER_DECLINED } from "./cip30.js";
+import { refuse } from "./sign-error.js";
+import { assembleWitnesses, requireSameBody } from "./witness.js";
+/** What the wallet said, kept whole so a message names its own cause. */
+const said = (cause) => {
+    const error = readApiError(cause);
+    if (error === undefined)
+        return String(cause);
+    return error.info === "" ? `code ${error.code}` : error.info;
+};
+/**
+ * Signs, or says why not. Nothing is asked of the wallet until the transaction
+ * is known to be the one the effects were derived from.
+ */
+export const signTransaction = ({ api, transaction, transactionId }) => Effect.gen(function* () {
+    yield* requireSameBody(transaction, transactionId);
+    const witnesses = yield* Effect.tryPromise({
+        // `partialSign: true`: the wallet signs what it holds keys for and leaves
+        // the rest, rather than refusing a transaction a co-signer completes.
+        try: () => api.signTx(transaction, true),
+        catch: (cause) => {
+            const error = readApiError(cause);
+            // `-3` is `APIError`'s refusal, which wallets send from `signTx` in
+            // practice even though CIP-30 numbers a decline `2` here.
+            if (error?.code === USER_DECLINED || error?.code === REFUSED) {
+                return refuse("Declined", "The signature was declined in the wallet.", { cip30: error, cause });
+            }
+            return refuse("SignFailed", `The wallet could not sign this transaction: ${said(cause)}`, {
+                ...(error === undefined ? {} : { cip30: error }),
+                cause
+            });
+        }
+    });
+    const cbor = yield* assembleWitnesses(transaction, witnesses, transactionId);
+    return { cbor, transactionId };
+});
+/** The ledger's own name for an input that is no longer there — what the rebuild path watches for. */
+const spentInputs = /BadInputsUTxO/i;
+/** The ledger's name for a transaction that arrived outside its validity interval. */
+const outsideInterval = /OutsideValidityInterval/i;
+const submissionFailure = (cause) => {
+    const error = readApiError(cause);
+    const detail = said(cause);
+    const extra = { ...(error === undefined ? {} : { cip30: error }), cause };
+    if (spentInputs.test(detail)) {
+        return refuse("InputsSpent", "The wallet's funds moved before this transaction reached the chain.", extra);
+    }
+    if (outsideInterval.test(detail)) {
+        return refuse("IntervalPassed", "This transaction expired before it reached the chain.", extra);
+    }
+    return refuse("SubmitFailed", `This transaction was not accepted: ${detail}`, extra);
+};
+/**
+ * Submits, and holds the wallet to the transaction it was given: an id other
+ * than the one we assembled is a receipt for something else, and showing it
+ * would tell a person their transaction is on the chain when another one is.
+ */
+export const submitTransaction = (api, signed) => Effect.gen(function* () {
+    const returned = yield* Effect.tryPromise({
+        try: () => api.submitTx(signed.cbor),
+        catch: submissionFailure
+    });
+    // Typed to answer with the id and under no obligation to: reading a method
+    // off whatever it did answer would reach a person as a stack trace.
+    if (typeof returned !== "string") {
+        return yield* Effect.fail(refuse("WrongTransactionId", "The wallet did not name the transaction it submitted."));
+    }
+    if (returned.toLowerCase() !== signed.transactionId.toLowerCase()) {
+        return yield* Effect.fail(refuse("WrongTransactionId", "The wallet submitted a different transaction from the one it was given."));
+    }
+    return signed.transactionId;
+});
+//# sourceMappingURL=sign.js.map

package/dist/sign.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sign.js","sourceRoot":"","sources":["../src/sign.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,OAAO,EAA+B,YAAY,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AAC9F,OAAO,EAAE,MAAM,EAAqB,MAAM,iBAAiB,CAAA;AAC3D,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,cAAc,CAAA;AAsBjE,yEAAyE;AACzE,MAAM,IAAI,GAAG,CAAC,KAAc,EAAU,EAAE;IACtC,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC,CAAA;IAC7C,OAAO,KAAK,CAAC,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;AAC9D,CAAC,CAAA;AAED;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,EAC9B,GAAG,EACH,WAAW,EACX,aAAa,EACD,EAAkD,EAAE,CAChE,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;IAElD,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACzC,0EAA0E;QAC1E,sEAAsE;QACtE,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,WAAW,EAAE,IAAI,CAAC;QACxC,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE;YACf,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;YACjC,oEAAoE;YACpE,0DAA0D;YAC1D,IAAI,KAAK,EAAE,IAAI,KAAK,aAAa,IAAI,KAAK,EAAE,IAAI,KAAK,OAAO,EAAE,CAAC;gBAC7D,OAAO,MAAM,CAAC,UAAU,EAAE,2CAA2C,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAA;YACjG,CAAC;YACD,OAAO,MAAM,CAAC,YAAY,EAAE,+CAA+C,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE;gBACxF,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;gBAChD,KAAK;aACN,CAAC,CAAA;QACJ,CAAC;KACF,CAAC,CAAA;IAEF,MAAM,IAAI,GAAG,KAAK,CAAC,CAAC,iBAAiB,CAAC,WAAW,EAAE,SAAS,EAAE,aAAa,CAAC,CAAA;IAC5E,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAA;AAChC,CAAC,CAAC,CAAA;AAEJ,sGAAsG;AACtG,MAAM,WAAW,GAAG,gBAAgB,CAAA;AAEpC,sFAAsF;AACtF,MAAM,eAAe,GAAG,0BAA0B,CAAA;AAElD,MAAM,iBAAiB,GAAG,CAAC,KAAc,EAAgB,EAAE;IACzD,MAAM,KAAK,GAAG,YAAY,CAAC,KAAK,CAAC,CAAA;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1B,MAAM,KAAK,GAAG,EAAE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,KAAK,EAAE,CAAA;IAEzE,IAAI,WAAW,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAC7B,OAAO,MAAM,CAAC,aAAa,EAAE,qEAAqE,EAAE,KAAK,CAAC,CAAA;IAC5G,CAAC;IACD,IAAI,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACjC,OAAO,MAAM,CAAC,gBAAgB,EAAE,uDAAuD,EAAE,KAAK,CAAC,CAAA;IACjG,CAAC;IACD,OAAO,MAAM,CAAC,cAAc,EAAE,sCAAsC,MAAM,EAAE,EAAE,KAAK,CAAC,CAAA;AACtF,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,GAAa,EAAE,MAAyB,EAAuC,EAAE,CACjH,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC;QACxC,GAAG,EAAE,GAAG,EAAE,CAAC,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC;QACpC,KAAK,EAAE,iBAAiB;KACzB,CAAC,CAAA;IAEF,2EAA2E;IAC3E,oEAAoE;IACpE,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,oBAAoB,EAAE,uDAAuD,CAAC,CAAC,CAAA;IAClH,CAAC;IAED,IAAI,QAAQ,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC,aAAa,CAAC,WAAW,EAAE,EAAE,CAAC;QAClE,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,oBAAoB,EAAE,yEAAyE,CAAC,CACxG,CAAA;IACH,CAAC;IAED,OAAO,MAAM,CAAC,aAAa,CAAA;AAC7B,CAAC,CAAC,CAAA"}