@cardano-slips/flow 0.1.0 → 0.2.0

package/dist/tokens.css

@@ -2,8 +2,8 @@
  * Every colour, type role, step of spacing and radius the client uses, taken
  * from `1 · Tokens` on the design sheet. This is the only file in the package
  * that writes a colour — `test/no-hard-coded-colours.test.ts` fails if another
- * one does, and `test/tokens.test.ts` re-runs the sheet's contrast audit
- * against these values.
+ * one does, and `test/tokens.test.ts` re-runs the contrast audit against these
+ * values rather than trusting the numbers printed on the sheet.
  *
  * Scoped to a class, never `:root`: this ships into pages we do not own, and a
  * package that writes tokens onto the document redefines whatever the host
@@ -13,33 +13,38 @@
  * font-family on anything — a component reads `var(--font-text)` — so a host
  * page's own stack stays where it is until something of ours asks for a token.
  *
- * Three families of surface, and the difference is the point:
+ * One theme. The sheet collapsed an earlier light/dark pair into a single
+ * ground that leans light, so there is no `data-theme` and no role that means
+ * two things. What carries the weight instead is that the three surface
+ * families are genuinely different surfaces:
+ *
  *   page / card    the ordinary ground, and what lifts off it
- *   vault-*        the transaction preview, which separates itself by surface
- *                  and border rather than by being dark
- *   dark-*         code blocks and the Open Graph card, dark in both themes
+ *   vault-*        the transaction preview, on slate — the one grave surface,
+ *                  and the reason the rest can stay bright
+ *   dark-*         code blocks and the Open Graph card, fixed wherever they
+ *                  appear because neither sits on a ground we control
  */
 
 .slip-root {
   color-scheme: light;
 
   /* Surfaces. Depth is a border, never a shadow: there is no shadow token. */
-  --page: #f6f8fe; /* never pure white */
-  --card: #ffffff;
-  --subtle: rgba(114, 142, 243, 0.08); /* hover, chips */
-  --skeleton: rgba(114, 142, 243, 0.14);
-  --border: rgba(18, 23, 33, 0.12);
-  --divider: rgba(18, 23, 33, 0.1);
+  --page: #ebeef8; /* never pure white */
+  --card: #fcfdff;
+  --subtle: rgba(90, 110, 205, 0.09); /* hover, chips */
+  --skeleton: rgba(90, 110, 205, 0.14);
+  --border: rgba(20, 26, 40, 0.13);
+  --divider: rgba(20, 26, 40, 0.1);
 
   /* Ink */
-  --ink: #121721;
-  --muted: #5c6a9c;
+  --ink: #141a26;
+  --muted: #56628a;
 
   /*
-   * The split rule: --accent-fill reaches 3.05:1 on the card and is a fill —
-   * it never carries text below 24px. An accent-coloured word uses
-   * --accent-text. It stays a fill in the dark theme too, where it would
-   * otherwise clear AA, because the rule is about what the colour is for.
+   * The split rule: --accent-fill is a fill and never carries text below 24px.
+   * An accent-coloured word uses --accent-text. It clears AA on the vault and
+   * is still held to fills there, because the rule is about what the colour is
+   * for and not about the ratio it happens to reach.
    */
   --accent-fill: #728ef3;
   --accent-text: #2f4bc4; /* links */
@@ -59,36 +64,37 @@
   --warn-line: rgba(233, 180, 76, 0.5);
 
   /* The alternating rows of the effects list, on and off. */
-  --stripe-a: rgba(114, 142, 243, 0.16);
-  --stripe-b: rgba(114, 142, 243, 0.05);
-  --stripe-off-a: rgba(92, 106, 156, 0.12);
-  --stripe-off-b: rgba(92, 106, 156, 0.04);
+  --stripe-a: rgba(90, 110, 205, 0.16);
+  --stripe-b: rgba(90, 110, 205, 0.05);
+  --stripe-off-a: rgba(86, 98, 138, 0.12);
+  --stripe-off-b: rgba(86, 98, 138, 0.04);
 
   /*
    * The transaction preview. Its own family because it is the surface that
-   * judges the publisher, and `10 · Chrome rules` fixes it whoever hosts the
-   * page. It follows the theme like everything else.
+   * judges the publisher, and `13 · Chrome rules` fixes it whoever hosts the
+   * page. Slate rather than black: it has to read as a distinct surface, not
+   * as a hole in the page.
    */
-  --vault: #ffffff;
-  --vault-ink: #121721;
-  --vault-muted: #5c6a9c;
-  --vault-surface: rgba(114, 142, 243, 0.08);
-  --vault-border: rgba(18, 23, 33, 0.12);
-  --vault-chip: rgba(114, 142, 243, 0.16);
-  --vault-rule: rgba(114, 142, 243, 0.8);
-  --vault-pos: #1f7a5c;
-  --vault-warn: #8c5a12;
-  --vault-bad: #b3261e;
-  --vault-bad-tint: rgba(179, 38, 30, 0.06);
-  --vault-bad-line: rgba(179, 38, 30, 0.32);
-  --vault-bad-chip: rgba(179, 38, 30, 0.1);
-  --vault-warn-tint: rgba(233, 180, 76, 0.14);
-  --vault-warn-line: rgba(233, 180, 76, 0.55);
+  --vault: #222b3d;
+  --vault-ink: #f5f7ff;
+  --vault-muted: #c3cdec;
+  --vault-surface: rgba(255, 255, 255, 0.09);
+  --vault-border: rgba(255, 255, 255, 0.16);
+  --vault-chip: rgba(168, 188, 255, 0.22);
+  --vault-rule: rgba(168, 188, 255, 0.7);
+  --vault-pos: #5fd1a6;
+  --vault-warn: #e9b44c;
+  --vault-bad: #ffa39b;
+  --vault-bad-tint: rgba(255, 163, 155, 0.1);
+  --vault-bad-line: rgba(255, 163, 155, 0.45);
+  --vault-bad-chip: rgba(255, 163, 155, 0.18);
+  --vault-warn-tint: rgba(233, 180, 76, 0.12);
+  --vault-warn-line: rgba(233, 180, 76, 0.5);
 
   /*
-   * Dark in both themes, and nowhere else: code blocks in the docs and the
-   * Open Graph card. Deliberately absent from the dark theme below — a value
-   * that is fixed cannot also follow.
+   * Code blocks in the docs and the Open Graph card. Both land on a ground we
+   * do not control — a reader's docs theme, someone else's timeline — so they
+   * carry their own and do not follow anything.
    */
   --dark-bg: #121721;
   --dark-surface: rgba(255, 255, 255, 0.08);
@@ -125,60 +131,3 @@
   --radius-control: 8px;
   --radius-card: 12px;
 }
-
-/*
- * The dark theme rebinds the roles rather than adding a second vocabulary. A
- * component writes var(--ink) once and is correct on both grounds; a component
- * choosing between a light token and a dark one is a component deciding the
- * rule, and two of them will decide it differently.
- *
- * Whether dark follows the operating system is not settled by the sheet, so it
- * is not decided here: the attribute is the only way in.
- */
-.slip-root[data-theme="dark"] {
-  color-scheme: dark;
-
-  --page: #121721; /* the brand dark */
-  --card: #1b2231; /* lifted off the page */
-  --subtle: rgba(114, 142, 243, 0.16);
-  --skeleton: rgba(114, 142, 243, 0.18);
-  --border: rgba(255, 255, 255, 0.14);
-  --divider: rgba(255, 255, 255, 0.1);
-
-  --ink: #ffffff;
-  --muted: #ccd6ff;
-
-  --accent-text: #a8bcff;
-  --accent-hover: #5c79ee;
-  --accent-deep: #a8bcff;
-  --focus: #a8bcff;
-
-  --pos: #5fd1a6;
-  --warn: #e9b44c;
-  --bad: #ffa39b;
-  --bad-tint: rgba(255, 163, 155, 0.1);
-  --bad-line: rgba(255, 163, 155, 0.4);
-  --warn-tint: rgba(233, 180, 76, 0.14);
-  --warn-line: rgba(233, 180, 76, 0.45);
-
-  --stripe-a: rgba(114, 142, 243, 0.26);
-  --stripe-b: rgba(114, 142, 243, 0.1);
-  --stripe-off-a: rgba(204, 214, 255, 0.16);
-  --stripe-off-b: rgba(204, 214, 255, 0.05);
-
-  --vault: #080b12; /* still the gravest surface */
-  --vault-ink: #ffffff;
-  --vault-muted: #ccd6ff;
-  --vault-surface: rgba(255, 255, 255, 0.08);
-  --vault-border: rgba(255, 255, 255, 0.14);
-  --vault-chip: rgba(114, 142, 243, 0.24);
-  --vault-rule: rgba(114, 142, 243, 0.5);
-  --vault-pos: #5fd1a6;
-  --vault-warn: #e9b44c;
-  --vault-bad: #ffa39b;
-  --vault-bad-tint: rgba(255, 163, 155, 0.08);
-  --vault-bad-line: rgba(255, 163, 155, 0.45);
-  --vault-bad-chip: rgba(255, 163, 155, 0.2);
-  --vault-warn-tint: rgba(233, 180, 76, 0.08);
-  --vault-warn-line: rgba(233, 180, 76, 0.45);
-}

package/dist/utxo.d.ts

@@ -0,0 +1,16 @@
+/**
+ * CIP-30 hands unspent outputs back as CBOR hex; evolution-sdk's builder takes
+ * them typed. The SDK has this conversion — `cip30UtxoFromCBORHex` — but only
+ * behind an export path its manifest blocks, so it is the sixth gap of ADR-0004
+ * and belongs upstream rather than here.
+ */
+import { UTxO } from "@evolution-sdk/evolution";
+import { Either } from "effect";
+import type { CborHex } from "./cip30.js";
+/**
+ * Reads what `getUtxos` returned. `Either` and not a throw: this runs on
+ * whatever a browser extension chose to send, and one unreadable entry must
+ * not take the page down.
+ */
+export declare const readWalletUtxos: (hexes: ReadonlyArray<CborHex>) => Either.Either<ReadonlyArray<UTxO.UTxO>, string>;
+//# sourceMappingURL=utxo.d.ts.map

package/dist/utxo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utxo.d.ts","sourceRoot":"","sources":["../src/utxo.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EASL,IAAI,EACL,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAiCzC;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,aAAa,CAAC,OAAO,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAY7G,CAAA"}

package/dist/utxo.js

@@ -0,0 +1,51 @@
+/**
+ * CIP-30 hands unspent outputs back as CBOR hex; evolution-sdk's builder takes
+ * them typed. The SDK has this conversion — `cip30UtxoFromCBORHex` — but only
+ * behind an export path its manifest blocks, so it is the sixth gap of ADR-0004
+ * and belongs upstream rather than here.
+ */
+import { Address, AddressEras, Assets, CBOR, Schema, Script, TransactionInput, TransactionOutput, UTxO } from "@evolution-sdk/evolution";
+import { Either } from "effect";
+/** The output's address is era-tagged and a UTxO's is not; the bytes are the same. */
+const toAddressStructure = (tagged) => Schema.decodeSync(Address.FromBytes)(Schema.encodeSync(AddressEras.FromBytes)(tagged));
+const readOne = (hex) => {
+    const decoded = CBOR.fromCBORHex(hex);
+    if (!Array.isArray(decoded) || decoded.length !== 2) {
+        throw new Error("a CIP-30 unspent output is an input and an output, and this is neither");
+    }
+    const input = TransactionInput.fromCBORBytes(CBOR.toCBORBytes(decoded[0]));
+    const output = TransactionOutput.fromCBORBytes(CBOR.toCBORBytes(decoded[1]));
+    const amount = output.amount;
+    return new UTxO.UTxO({
+        transactionId: input.transactionId,
+        index: input.index,
+        address: toAddressStructure(output.address),
+        assets: amount._tag === "WithAssets"
+            ? Assets.withMultiAsset(amount.coin, amount.assets)
+            : Assets.fromLovelace(amount.coin),
+        // A Babbage output carries a datum option and a script; a Shelley one carries
+        // a datum hash, which is itself a valid datum option.
+        datumOption: output._tag === "BabbageTransactionOutput" ? output.datumOption : output.datumHash,
+        scriptRef: output._tag === "BabbageTransactionOutput" && output.scriptRef
+            ? Script.fromCBOR(output.scriptRef.bytes)
+            : undefined
+    });
+};
+/**
+ * Reads what `getUtxos` returned. `Either` and not a throw: this runs on
+ * whatever a browser extension chose to send, and one unreadable entry must
+ * not take the page down.
+ */
+export const readWalletUtxos = (hexes) => {
+    const utxos = [];
+    for (const [index, hex] of hexes.entries()) {
+        try {
+            utxos.push(readOne(hex));
+        }
+        catch (cause) {
+            return Either.left(`unspent output ${index} could not be read: ${cause instanceof Error ? cause.message : String(cause)}`);
+        }
+    }
+    return Either.right(utxos);
+};
+//# sourceMappingURL=utxo.js.map

package/dist/utxo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utxo.js","sourceRoot":"","sources":["../src/utxo.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,OAAO,EACP,WAAW,EACX,MAAM,EACN,IAAI,EACJ,MAAM,EACN,MAAM,EACN,gBAAgB,EAChB,iBAAiB,EACjB,IAAI,EACL,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAI/B,sFAAsF;AACtF,MAAM,kBAAkB,GAAG,CAAC,MAA+B,EAAmB,EAAE,CAC9E,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;AAExF,MAAM,OAAO,GAAG,CAAC,GAAY,EAAa,EAAE;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1E,MAAM,MAAM,GAAG,iBAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAE5B,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC;QACnB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3C,MAAM,EACJ,MAAM,CAAC,IAAI,KAAK,YAAY;YAC1B,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YACnD,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;QACtC,8EAA8E;QAC9E,sDAAsD;QACtD,WAAW,EAAE,MAAM,CAAC,IAAI,KAAK,0BAA0B,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;QAC/F,SAAS,EACP,MAAM,CAAC,IAAI,KAAK,0BAA0B,IAAI,MAAM,CAAC,SAAS;YAC5D,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YACzC,CAAC,CAAC,SAAS;KAChB,CAAC,CAAA;AACJ,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAA6B,EAAmD,EAAE;IAChH,MAAM,KAAK,GAAqB,EAAE,CAAA;IAClC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,IAAI,CAChB,kBAAkB,KAAK,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvG,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAC5B,CAAC,CAAA"}

package/dist/witness.d.ts

@@ -0,0 +1,23 @@
+import { Effect } from "effect";
+import type { CborHex } from "./cip30.js";
+import { type SigningError } from "./sign-error.js";
+/**
+ * BLAKE2b-256 over the body's original bytes, never a re-encode: this is the id
+ * the chain computes, and it is CIP-0186's commit — what binds a returned
+ * witness set to the body whose effects a person was shown.
+ */
+export declare const transactionIdOf: (transaction: CborHex) => Effect.Effect<string, SigningError>;
+/**
+ * Refuses unless this is the body the effects were derived from. Asked twice —
+ * before the wallet is given anything, and again as assembly begins — because
+ * either moment is one where the transaction can stop being the one on screen.
+ */
+export declare const requireSameBody: (transaction: CborHex, transactionId: string) => Effect.Effect<void, SigningError>;
+/**
+ * Appends a returned witness set to the body it was asked for, or says why not.
+ * `transactionId` is the id the effects were derived from: witnesses go into
+ * that body or into none, which is what makes what a person was shown the thing
+ * they signed.
+ */
+export declare const assembleWitnesses: (transaction: CborHex, witnesses: CborHex, transactionId: string) => Effect.Effect<CborHex, SigningError>;
+//# sourceMappingURL=witness.d.ts.map

package/dist/witness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"witness.d.ts","sourceRoot":"","sources":["../src/witness.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AAEvC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAU,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAa3D;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,aAAa,OAAO,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAYxF,CAAA;AA0BD;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,aAAa,OAAO,EAAE,eAAe,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAO3G,CAAA;AAEH;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAC5B,aAAa,OAAO,EACpB,WAAW,OAAO,EAClB,eAAe,MAAM,KACpB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAwClC,CAAA"}

package/dist/witness.js

@@ -0,0 +1,101 @@
+/**
+ * The transaction id, and the witnesses that may go into the body it names.
+ * Pure: nothing here talks to a wallet, so what assembly accepts can be stated
+ * as a rule rather than observed against an extension.
+ */
+import { extractTransactionBody } from "@cardano-slips/verifier";
+import { Transaction, TransactionWitnessSet } from "@evolution-sdk/evolution";
+import { blake2b } from "@noble/hashes/blake2.js";
+import { Effect, Either } from "effect";
+import { refuse } from "./sign-error.js";
+const hex = /^[0-9a-fA-F]*$/;
+const bytesOf = (value) => {
+    if (value.length % 2 !== 0 || !hex.test(value))
+        return undefined;
+    return Uint8Array.from({ length: value.length / 2 }, (_, index) => Number.parseInt(value.slice(index * 2, index * 2 + 2), 16));
+};
+const toHex = (bytes) => Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+/**
+ * BLAKE2b-256 over the body's original bytes, never a re-encode: this is the id
+ * the chain computes, and it is CIP-0186's commit — what binds a returned
+ * witness set to the body whose effects a person was shown.
+ */
+export const transactionIdOf = (transaction) => {
+    const bytes = bytesOf(transaction);
+    if (bytes === undefined) {
+        return Effect.fail(refuse("UnreadableTransaction", "This transaction is not readable as CBOR."));
+    }
+    const body = extractTransactionBody(bytes);
+    if (Either.isLeft(body)) {
+        return Effect.fail(refuse("UnreadableTransaction", `This transaction is not readable: ${body.left.message}`, { cause: body.left }));
+    }
+    return Effect.succeed(toHex(blake2b(body.right.bodyBytes, { dkLen: 32 })));
+};
+/**
+ * What a version 1 transaction is never signed with. We build nothing that
+ * spends from a script, so any of these in a returned set is material the body
+ * was not judged with, and merging it would let a wallet add to a transaction
+ * after the moment it was shown.
+ */
+const unexpected = (set) => {
+    if ((set.nativeScripts ?? []).length > 0)
+        return "native scripts";
+    if ((set.bootstrapWitnesses ?? []).length > 0)
+        return "bootstrap witnesses";
+    if ((set.plutusV1Scripts ?? []).length > 0)
+        return "Plutus v1 scripts";
+    if ((set.plutusV2Scripts ?? []).length > 0)
+        return "Plutus v2 scripts";
+    if ((set.plutusV3Scripts ?? []).length > 0)
+        return "Plutus v3 scripts";
+    if ((set.plutusData ?? []).length > 0)
+        return "datums";
+    if (set.redeemers !== undefined)
+        return "redeemers";
+    return undefined;
+};
+const readWitnessSet = (witnesses) => Effect.try({
+    try: () => TransactionWitnessSet.fromCBORHex(witnesses),
+    catch: (cause) => refuse("UnreadableWitnesses", "The wallet answered with something that is not a witness set.", { cause })
+});
+/**
+ * Refuses unless this is the body the effects were derived from. Asked twice —
+ * before the wallet is given anything, and again as assembly begins — because
+ * either moment is one where the transaction can stop being the one on screen.
+ */
+export const requireSameBody = (transaction, transactionId) => Effect.flatMap(transactionIdOf(transaction), (held) => held === transactionId
+    ? Effect.void
+    : Effect.fail(refuse("WrongBody", "This is not the transaction the effects were derived from, so it will not be signed.")));
+/**
+ * Appends a returned witness set to the body it was asked for, or says why not.
+ * `transactionId` is the id the effects were derived from: witnesses go into
+ * that body or into none, which is what makes what a person was shown the thing
+ * they signed.
+ */
+export const assembleWitnesses = (transaction, witnesses, transactionId) => Effect.gen(function* () {
+    yield* requireSameBody(transaction, transactionId);
+    const set = yield* readWitnessSet(witnesses);
+    const material = unexpected(set);
+    if (material !== undefined) {
+        return yield* Effect.fail(refuse("UnexpectedWitnessMaterial", `The wallet answered with ${material}, which this transaction never asked for.`));
+    }
+    // evolution-sdk returns the transaction untouched for an empty set, so
+    // without this an unsigned transaction would go to `submitTx` looking signed.
+    if ((set.vkeyWitnesses ?? []).length === 0) {
+        return yield* Effect.fail(refuse("NoWitnesses", "The wallet answered without a signature."));
+    }
+    // Appends to `vkeyWitnesses` and re-encodes from the format the transaction
+    // arrived in, so a co-signer's witness survives and the body keeps its bytes.
+    const assembled = yield* Effect.try({
+        try: () => Transaction.addVKeyWitnessesHex(transaction, witnesses),
+        catch: (cause) => refuse("UnreadableWitnesses", "The wallet's witnesses could not be assembled into the transaction.", { cause })
+    });
+    // The body is what the id is taken over, so an id that moved means the
+    // bytes moved — and the person would be signing something else.
+    const after = yield* transactionIdOf(assembled);
+    if (after !== transactionId) {
+        return yield* Effect.fail(refuse("WrongBody", "Assembling the signature changed the transaction, so it will not be submitted."));
+    }
+    return assembled;
+});
+//# sourceMappingURL=witness.js.map

package/dist/witness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"witness.js","sourceRoot":"","sources":["../src/witness.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAGvC,OAAO,EAAE,MAAM,EAAqB,MAAM,iBAAiB,CAAA;AAE3D,MAAM,GAAG,GAAG,gBAAgB,CAAA;AAE5B,MAAM,OAAO,GAAG,CAAC,KAAc,EAA0B,EAAE;IACzD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAChE,OAAO,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAChE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAC3D,CAAA;AACH,CAAC,CAAA;AAED,MAAM,KAAK,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAErH;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAoB,EAAuC,EAAE;IAC3F,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,2CAA2C,CAAC,CAAC,CAAA;IAClG,CAAC;IACD,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAA;IAC1C,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,IAAI,CAChB,MAAM,CAAC,uBAAuB,EAAE,qCAAqC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAChH,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;AAC5E,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,UAAU,GAAG,CAAC,GAAgD,EAAsB,EAAE;IAC1F,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,gBAAgB,CAAA;IACjE,IAAI,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,qBAAqB,CAAA;IAC3E,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,mBAAmB,CAAA;IACtE,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,mBAAmB,CAAA;IACtE,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,mBAAmB,CAAA;IACtE,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAA;IACtD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,WAAW,CAAA;IACnD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAC,SAAkB,EAA4E,EAAE,CACtH,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE,CAAC,qBAAqB,CAAC,WAAW,CAAC,SAAS,CAAC;IACvD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,qBAAqB,EAAE,+DAA+D,EAAE,EAAE,KAAK,EAAE,CAAC;CAC5G,CAAC,CAAA;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAoB,EAAE,aAAqB,EAAqC,EAAE,CAChH,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CACpD,IAAI,KAAK,aAAa;IACpB,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,WAAW,EAAE,sFAAsF,CAAC,CAC5G,CACN,CAAA;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,WAAoB,EACpB,SAAkB,EAClB,aAAqB,EACiB,EAAE,CACxC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;IAElD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;IAE5C,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CACJ,2BAA2B,EAC3B,4BAA4B,QAAQ,2CAA2C,CAChF,CACF,CAAA;IACH,CAAC;IAED,uEAAuE;IACvE,8EAA8E;IAC9E,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,0CAA0C,CAAC,CAAC,CAAA;IAC9F,CAAC;IAED,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAClC,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC;QAClE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,qBAAqB,EAAE,qEAAqE,EAAE,EAAE,KAAK,EAAE,CAAC;KAClH,CAAC,CAAA;IAEF,uEAAuE;IACvE,gEAAgE;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;IAC/C,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,WAAW,EAAE,gFAAgF,CAAC,CACtG,CAAA;IACH,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cardano-slips/flow",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "The client side of Cardano Slips: CIP-30 orchestration, local balancing, and the React components that render a Slip and block a signature when its effects disagree",
   "keywords": [
     "cardano",
@@ -42,9 +42,11 @@
     "react": "^19.0.0"
   },
   "dependencies": {
+    "@evolution-sdk/evolution": "^0.5.13",
+    "@noble/hashes": "^2.0.1",
     "effect": "^3.22.1",
-    "@cardano-slips/core": "^0.2.0",
-    "@cardano-slips/verifier": "^0.2.0"
+    "@cardano-slips/verifier": "^0.3.0",
+    "@cardano-slips/core": "^0.2.0"
   },
   "devDependencies": {
     "@testing-library/react": "^16.3.2",
@@ -52,7 +54,8 @@
     "happy-dom": "^20.11.6",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
-    "typescript": "^6.0.3"
+    "typescript": "^6.0.3",
+    "@cardano-slips/example-slips": "^0.0.0"
   },
   "scripts": {
     "build": "tsc -b tsconfig.build.json && mkdir -p dist && cp src/tokens.css dist/tokens.css",

package/src/balance-error.ts

@@ -0,0 +1,77 @@
+/**
+ * Why an intent did not become a transaction. Every refusal carries a spec
+ * error code, because each one is a failure of the exchange the spec describes
+ * rather than a state of a browser extension (`wallet-error.ts` is the other
+ * half, and deliberately has refusals that carry no code).
+ */
+import { type ClientErrorCode } from "@cardano-slips/core"
+import { Data } from "effect"
+
+export type BalanceRefusal =
+  /** `validUntil` has already passed. A fresh POST returns a fresh intent. */
+  | "IntentExpired"
+  /** An address in the intent encodes a different network from the Slip's. */
+  | "ForeignAddress"
+  /** A certificate or withdrawal needs the wallet's stake credential and the address carries none. */
+  | "NoStakeCredential"
+  /** The change address the wallet gave is not an address these bytes can be read as. */
+  | "UnreadableChangeAddress"
+  /** The intent withdraws rewards and nobody said what the reward balance is. */
+  | "RewardBalanceUnknown"
+  /** The wallet cannot cover the intent, the minimum ADA its outputs require, and the fee. */
+  | "InsufficientFunds"
+  /** The intent cannot be built into a valid transaction for any other reason. */
+  | "CannotBalance"
+
+/**
+ * Exhaustive by type: adding a refusal above without listing it here fails to
+ * compile, and `test/balance.test.ts` fails if any of them stops being reachable.
+ */
+export const balanceRefusals: Readonly<Record<BalanceRefusal, true>> = {
+  IntentExpired: true,
+  ForeignAddress: true,
+  NoStakeCredential: true,
+  UnreadableChangeAddress: true,
+  RewardBalanceUnknown: true,
+  InsufficientFunds: true,
+  CannotBalance: true
+}
+
+/**
+ * A wrong-network address is `MALFORMED_RESPONSE` and not `WRONG_NETWORK`:
+ * the latter is a disagreement the person can act on by switching wallets, and
+ * an endpoint that sent an address on another chain is not one of those.
+ */
+export const slipErrorCodeFor = (refusal: BalanceRefusal): ClientErrorCode => {
+  switch (refusal) {
+    case "IntentExpired":
+      return "INTENT_EXPIRED"
+    case "ForeignAddress":
+      return "MALFORMED_RESPONSE"
+    case "InsufficientFunds":
+      return "INSUFFICIENT_FUNDS"
+    case "NoStakeCredential":
+    case "UnreadableChangeAddress":
+    case "RewardBalanceUnknown":
+    case "CannotBalance":
+      return "CANNOT_BALANCE"
+  }
+}
+
+/** `cause` keeps what evolution-sdk said, so a build failure stays diagnosable. */
+export class BalanceError extends Data.TaggedError("BalanceError")<{
+  readonly refusal: BalanceRefusal
+  readonly detail: string
+  readonly cause?: unknown
+}> {
+  override get message(): string {
+    return this.detail
+  }
+
+  get code(): ClientErrorCode {
+    return slipErrorCodeFor(this.refusal)
+  }
+}
+
+export const refuse = (refusal: BalanceRefusal, detail: string, cause?: unknown): BalanceError =>
+  new BalanceError({ refusal, detail, ...(cause === undefined ? {} : { cause }) })