@cardano-slips/flow 0.1.0 → 0.3.0

package/dist/tokens.css

@@ -2,114 +2,145 @@
  * Every colour, type role, step of spacing and radius the client uses, taken
  * from `1 · Tokens` on the design sheet. This is the only file in the package
  * that writes a colour — `test/no-hard-coded-colours.test.ts` fails if another
- * one does, and `test/tokens.test.ts` re-runs the sheet's contrast audit
- * against these values.
+ * one does, and `test/tokens.test.ts` re-runs the contrast audit against these
+ * values rather than trusting the numbers printed on the sheet.
  *
  * Scoped to a class, never `:root`: this ships into pages we do not own, and a
  * package that writes tokens onto the document redefines whatever the host
  * already called `--ink`. Put `slip-root` on the element that wraps the Slip.
  *
  * There is no reset here and no rule that selects an element. Nothing sets a
- * font-family on anything — a component reads `var(--font-text)` — so a host
+ * font-family on anything — a component reads a `--type-*` role — so a host
  * page's own stack stays where it is until something of ours asks for a token.
  *
- * Three families of surface, and the difference is the point:
+ * One theme. The sheet collapsed an earlier light/dark pair into a single
+ * ground that leans light, so there is no `data-theme` and no role that means
+ * two things. What carries the weight instead is that the three surface
+ * families are genuinely different surfaces:
+ *
  *   page / card    the ordinary ground, and what lifts off it
- *   vault-*        the transaction preview, which separates itself by surface
- *                  and border rather than by being dark
- *   dark-*         code blocks and the Open Graph card, dark in both themes
+ *   vault-*        the transaction preview, on slate — the one grave surface,
+ *                  and the reason the rest can stay bright
+ *   dark-*         code blocks and the Open Graph card, fixed wherever they
+ *                  appear because neither sits on a ground we control
  */
 
 .slip-root {
   color-scheme: light;
 
   /* Surfaces. Depth is a border, never a shadow: there is no shadow token. */
-  --page: #f6f8fe; /* never pure white */
-  --card: #ffffff;
-  --subtle: rgba(114, 142, 243, 0.08); /* hover, chips */
-  --skeleton: rgba(114, 142, 243, 0.14);
-  --border: rgba(18, 23, 33, 0.12);
-  --divider: rgba(18, 23, 33, 0.1);
+  --page: #ebeef8; /* never pure white */
+  --card: #fcfdff;
+  --subtle: rgba(90, 110, 205, 0.09); /* hover, chips */
+  --skeleton: rgba(90, 110, 205, 0.14);
+  --border: rgba(20, 26, 40, 0.13);
+  --divider: rgba(20, 26, 40, 0.1);
 
   /* Ink */
-  --ink: #121721;
-  --muted: #5c6a9c;
+  --ink: #141a26;
+  --muted: #56628a;
 
   /*
-   * The split rule: --accent-fill reaches 3.05:1 on the card and is a fill —
-   * it never carries text below 24px. An accent-coloured word uses
-   * --accent-text. It stays a fill in the dark theme too, where it would
-   * otherwise clear AA, because the rule is about what the colour is for.
+   * The split rule: --accent-fill is a fill and never carries text below 24px.
+   * An accent-coloured word uses --accent-text. It clears AA on the vault and
+   * is still held to fills there, because the rule is about what the colour is
+   * for and not about the ratio it happens to reach.
    */
   --accent-fill: #728ef3;
-  --accent-text: #2f4bc4; /* links */
-  --accent-action: #4361e8; /* button background */
-  --accent-hover: #2f4bc4;
+  --accent-text: #123cd3; /* links */
+  --accent-action: #123cd3; /* the outline and the label of a button */
+  --accent-hover: #0e2fa6;
   --accent-deep: #0c288d; /* headings */
-  --on-accent: #ffffff; /* anything drawn on --accent-action */
-  --focus: #4361e8;
+  --on-accent: #ffffff; /* anything drawn on a filled accent */
+  --focus: #123cd3;
+
+  /* The accent lightened for slate, where #123cd3 disappears into the ground. */
+  --accent-on-slate: #8fa9ff;
 
   /* Semantic, and rare. A page that colours everything says nothing. */
-  --pos: #1f7a5c; /* positive, refundable */
-  --warn: #8c5a12;
-  --bad: #b3261e;
-  --bad-tint: rgba(179, 38, 30, 0.06);
-  --bad-line: rgba(179, 38, 30, 0.24);
-  --warn-tint: rgba(233, 180, 76, 0.16);
-  --warn-line: rgba(233, 180, 76, 0.5);
+  --pos: #065708; /* value arriving */
+  --warn: #7a5200; /* held, taken, caution */
+  --bad: #d20a19; /* problem, blocked */
+  --bad-tint: rgba(210, 10, 25, 0.06);
+  --bad-line: rgba(210, 10, 25, 0.24);
+  --warn-tint: rgba(254, 206, 82, 0.22);
+  --warn-line: rgba(254, 206, 82, 0.85);
+  --warn-fill: #fece52; /* the warning as a fill, never as a word on a light ground */
+  --on-warn: #3a2600; /* words on the warning fill: the testnet bar */
 
   /* The alternating rows of the effects list, on and off. */
-  --stripe-a: rgba(114, 142, 243, 0.16);
-  --stripe-b: rgba(114, 142, 243, 0.05);
-  --stripe-off-a: rgba(92, 106, 156, 0.12);
-  --stripe-off-b: rgba(92, 106, 156, 0.04);
+  --stripe-a: rgba(90, 110, 205, 0.16);
+  --stripe-b: rgba(90, 110, 205, 0.05);
+  --stripe-off-a: rgba(86, 98, 138, 0.12);
+  --stripe-off-b: rgba(86, 98, 138, 0.04);
 
   /*
    * The transaction preview. Its own family because it is the surface that
-   * judges the publisher, and `10 · Chrome rules` fixes it whoever hosts the
-   * page. It follows the theme like everything else.
+   * judges the publisher, and `13 · Chrome rules` fixes it whoever hosts the
+   * page. Slate rather than black: it has to read as a distinct surface, not
+   * as a hole in the page.
    */
-  --vault: #ffffff;
-  --vault-ink: #121721;
-  --vault-muted: #5c6a9c;
-  --vault-surface: rgba(114, 142, 243, 0.08);
-  --vault-border: rgba(18, 23, 33, 0.12);
-  --vault-chip: rgba(114, 142, 243, 0.16);
-  --vault-rule: rgba(114, 142, 243, 0.8);
-  --vault-pos: #1f7a5c;
-  --vault-warn: #8c5a12;
-  --vault-bad: #b3261e;
-  --vault-bad-tint: rgba(179, 38, 30, 0.06);
-  --vault-bad-line: rgba(179, 38, 30, 0.32);
-  --vault-bad-chip: rgba(179, 38, 30, 0.1);
-  --vault-warn-tint: rgba(233, 180, 76, 0.14);
-  --vault-warn-line: rgba(233, 180, 76, 0.55);
+  --vault: #222b3d;
+  --vault-ink: #f5f7ff;
+  --vault-muted: #c3cdec;
+  --vault-surface: rgba(255, 255, 255, 0.09);
+  --vault-border: rgba(255, 255, 255, 0.16);
+  --vault-chip: rgba(168, 188, 255, 0.22);
+  --vault-rule: rgba(168, 188, 255, 0.7);
+  --vault-pos: #6fcb72;
+  --vault-warn: #fece52;
+  /*
+   * #ff5247 on the sheet, lightened here: that value measures 4.42:1 on the
+   * vault and the sheet's own row calls it a pass. This is the colour the
+   * mismatch block is written in, so it clears AA or it does not ship.
+   */
+  --vault-bad: #ff5a50;
+  --vault-bad-tint: rgba(210, 10, 25, 0.16);
+  --vault-bad-line: rgba(255, 82, 71, 0.55);
+  --vault-bad-chip: rgba(210, 10, 25, 0.28);
+  --vault-warn-tint: rgba(254, 206, 82, 0.14);
+  --vault-warn-line: rgba(254, 206, 82, 0.55);
 
   /*
-   * Dark in both themes, and nowhere else: code blocks in the docs and the
-   * Open Graph card. Deliberately absent from the dark theme below — a value
-   * that is fixed cannot also follow.
+   * Code blocks in the docs and the Open Graph card. Both land on a ground we
+   * do not control — a reader's docs theme, someone else's timeline — so they
+   * carry their own and do not follow anything.
    */
   --dark-bg: #121721;
   --dark-surface: rgba(255, 255, 255, 0.08);
   --dark-text: #ffffff;
   --dark-muted: #ccd6ff;
 
-  /* Type. Each stack ends in a generic family, so a missing webfont degrades. */
-  --font-display: Poppins, system-ui, sans-serif;
-  --font-text: Figtree, system-ui, sans-serif;
-  --font-mono: "IBM Plex Mono", ui-monospace, monospace;
+  /*
+   * One family, for everything. The sheet's earlier display/text/mono trio is
+   * gone: weight and size separate a heading from a label perfectly well, and
+   * three names for one face is three chances to drift apart. The stack ends in
+   * a generic family, so a missing webfont degrades rather than disappears.
+   */
+  --font: Poppins, system-ui, sans-serif;
 
   /* Whole roles, so half a role cannot be applied without the other half. */
-  --type-h1: 700 44px/48px var(--font-display);
+  --type-h1: 700 44px/48px var(--font);
   --type-h1-tracking: -0.01em;
-  --type-card-title: 700 18px/24px var(--font-display);
-  --type-numeral: 700 26px/32px var(--font-display); /* a figure is always Poppins 700 */
-  --type-body: 500 16px/24px var(--font-text);
-  --type-button: 500 14px/20px var(--font-text);
+  --type-card-title: 700 18px/24px var(--font);
+  --type-numeral: 700 26px/32px var(--font); /* a figure is always 700 */
+  --type-body: 400 16px/24px var(--font);
+  --type-button: 500 14px/20px var(--font);
   --type-button-tracking: 0.1px;
-  --type-label: 500 13px var(--font-text);
-  --type-mono: 400 12px/20px var(--font-mono); /* addresses, hashes, the tx block */
+  --type-label: 500 13px var(--font);
+  /* Addresses, hashes, error codes, the tx block — text meant for a machine. */
+  --type-technical: 400 12px/20px var(--font);
+
+  /* The transaction preview's own scale, from `4 · Anatomy` and `6 · Preview states`. */
+  --type-headline: 700 32px/38px var(--font); /* the one figure the person is deciding on */
+  --type-preview-title: 700 20px/26px var(--font);
+  --type-amount: 700 20px/26px var(--font); /* a row's figure, one size so the column scans */
+  --type-countdown: 700 16px/20px var(--font);
+  --type-row: 400 14px/20px var(--font);
+  --type-note: 400 13px/19px var(--font);
+  --type-kicker: 400 11px/16px var(--font);
+  --type-kicker-tracking: 0.12em;
+  --type-chip: 600 11px/20px var(--font);
 
   /* Spacing, on a 4px base. */
   --space-4: 4px;
@@ -125,60 +156,3 @@
   --radius-control: 8px;
   --radius-card: 12px;
 }
-
-/*
- * The dark theme rebinds the roles rather than adding a second vocabulary. A
- * component writes var(--ink) once and is correct on both grounds; a component
- * choosing between a light token and a dark one is a component deciding the
- * rule, and two of them will decide it differently.
- *
- * Whether dark follows the operating system is not settled by the sheet, so it
- * is not decided here: the attribute is the only way in.
- */
-.slip-root[data-theme="dark"] {
-  color-scheme: dark;
-
-  --page: #121721; /* the brand dark */
-  --card: #1b2231; /* lifted off the page */
-  --subtle: rgba(114, 142, 243, 0.16);
-  --skeleton: rgba(114, 142, 243, 0.18);
-  --border: rgba(255, 255, 255, 0.14);
-  --divider: rgba(255, 255, 255, 0.1);
-
-  --ink: #ffffff;
-  --muted: #ccd6ff;
-
-  --accent-text: #a8bcff;
-  --accent-hover: #5c79ee;
-  --accent-deep: #a8bcff;
-  --focus: #a8bcff;
-
-  --pos: #5fd1a6;
-  --warn: #e9b44c;
-  --bad: #ffa39b;
-  --bad-tint: rgba(255, 163, 155, 0.1);
-  --bad-line: rgba(255, 163, 155, 0.4);
-  --warn-tint: rgba(233, 180, 76, 0.14);
-  --warn-line: rgba(233, 180, 76, 0.45);
-
-  --stripe-a: rgba(114, 142, 243, 0.26);
-  --stripe-b: rgba(114, 142, 243, 0.1);
-  --stripe-off-a: rgba(204, 214, 255, 0.16);
-  --stripe-off-b: rgba(204, 214, 255, 0.05);
-
-  --vault: #080b12; /* still the gravest surface */
-  --vault-ink: #ffffff;
-  --vault-muted: #ccd6ff;
-  --vault-surface: rgba(255, 255, 255, 0.08);
-  --vault-border: rgba(255, 255, 255, 0.14);
-  --vault-chip: rgba(114, 142, 243, 0.24);
-  --vault-rule: rgba(114, 142, 243, 0.5);
-  --vault-pos: #5fd1a6;
-  --vault-warn: #e9b44c;
-  --vault-bad: #ffa39b;
-  --vault-bad-tint: rgba(255, 163, 155, 0.08);
-  --vault-bad-line: rgba(255, 163, 155, 0.45);
-  --vault-bad-chip: rgba(255, 163, 155, 0.2);
-  --vault-warn-tint: rgba(233, 180, 76, 0.08);
-  --vault-warn-line: rgba(233, 180, 76, 0.45);
-}

package/dist/utxo.d.ts

@@ -0,0 +1,16 @@
+/**
+ * CIP-30 hands unspent outputs back as CBOR hex; evolution-sdk's builder takes
+ * them typed. The SDK has this conversion — `cip30UtxoFromCBORHex` — but only
+ * behind an export path its manifest blocks, so it is the sixth gap of ADR-0004
+ * and belongs upstream rather than here.
+ */
+import { UTxO } from "@evolution-sdk/evolution";
+import { Either } from "effect";
+import type { CborHex } from "./cip30.js";
+/**
+ * Reads what `getUtxos` returned. `Either` and not a throw: this runs on
+ * whatever a browser extension chose to send, and one unreadable entry must
+ * not take the page down.
+ */
+export declare const readWalletUtxos: (hexes: ReadonlyArray<CborHex>) => Either.Either<ReadonlyArray<UTxO.UTxO>, string>;
+//# sourceMappingURL=utxo.d.ts.map

package/dist/utxo.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utxo.d.ts","sourceRoot":"","sources":["../src/utxo.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EASL,IAAI,EACL,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAE/B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AAiCzC;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,OAAO,aAAa,CAAC,OAAO,CAAC,KAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,CAY7G,CAAA"}

package/dist/utxo.js

@@ -0,0 +1,51 @@
+/**
+ * CIP-30 hands unspent outputs back as CBOR hex; evolution-sdk's builder takes
+ * them typed. The SDK has this conversion — `cip30UtxoFromCBORHex` — but only
+ * behind an export path its manifest blocks, so it is the sixth gap of ADR-0004
+ * and belongs upstream rather than here.
+ */
+import { Address, AddressEras, Assets, CBOR, Schema, Script, TransactionInput, TransactionOutput, UTxO } from "@evolution-sdk/evolution";
+import { Either } from "effect";
+/** The output's address is era-tagged and a UTxO's is not; the bytes are the same. */
+const toAddressStructure = (tagged) => Schema.decodeSync(Address.FromBytes)(Schema.encodeSync(AddressEras.FromBytes)(tagged));
+const readOne = (hex) => {
+    const decoded = CBOR.fromCBORHex(hex);
+    if (!Array.isArray(decoded) || decoded.length !== 2) {
+        throw new Error("a CIP-30 unspent output is an input and an output, and this is neither");
+    }
+    const input = TransactionInput.fromCBORBytes(CBOR.toCBORBytes(decoded[0]));
+    const output = TransactionOutput.fromCBORBytes(CBOR.toCBORBytes(decoded[1]));
+    const amount = output.amount;
+    return new UTxO.UTxO({
+        transactionId: input.transactionId,
+        index: input.index,
+        address: toAddressStructure(output.address),
+        assets: amount._tag === "WithAssets"
+            ? Assets.withMultiAsset(amount.coin, amount.assets)
+            : Assets.fromLovelace(amount.coin),
+        // A Babbage output carries a datum option and a script; a Shelley one carries
+        // a datum hash, which is itself a valid datum option.
+        datumOption: output._tag === "BabbageTransactionOutput" ? output.datumOption : output.datumHash,
+        scriptRef: output._tag === "BabbageTransactionOutput" && output.scriptRef
+            ? Script.fromCBOR(output.scriptRef.bytes)
+            : undefined
+    });
+};
+/**
+ * Reads what `getUtxos` returned. `Either` and not a throw: this runs on
+ * whatever a browser extension chose to send, and one unreadable entry must
+ * not take the page down.
+ */
+export const readWalletUtxos = (hexes) => {
+    const utxos = [];
+    for (const [index, hex] of hexes.entries()) {
+        try {
+            utxos.push(readOne(hex));
+        }
+        catch (cause) {
+            return Either.left(`unspent output ${index} could not be read: ${cause instanceof Error ? cause.message : String(cause)}`);
+        }
+    }
+    return Either.right(utxos);
+};
+//# sourceMappingURL=utxo.js.map

package/dist/utxo.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utxo.js","sourceRoot":"","sources":["../src/utxo.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,OAAO,EACP,WAAW,EACX,MAAM,EACN,IAAI,EACJ,MAAM,EACN,MAAM,EACN,gBAAgB,EAChB,iBAAiB,EACjB,IAAI,EACL,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAI/B,sFAAsF;AACtF,MAAM,kBAAkB,GAAG,CAAC,MAA+B,EAAmB,EAAE,CAC9E,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,CAAA;AAExF,MAAM,OAAO,GAAG,CAAC,GAAY,EAAa,EAAE;IAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,CAAA;IACrC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpD,MAAM,IAAI,KAAK,CAAC,wEAAwE,CAAC,CAAA;IAC3F,CAAC;IACD,MAAM,KAAK,GAAG,gBAAgB,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1E,MAAM,MAAM,GAAG,iBAAiB,CAAC,aAAa,CAAC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5E,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;IAE5B,OAAO,IAAI,IAAI,CAAC,IAAI,CAAC;QACnB,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,OAAO,EAAE,kBAAkB,CAAC,MAAM,CAAC,OAAO,CAAC;QAC3C,MAAM,EACJ,MAAM,CAAC,IAAI,KAAK,YAAY;YAC1B,CAAC,CAAC,MAAM,CAAC,cAAc,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;YACnD,CAAC,CAAC,MAAM,CAAC,YAAY,CAAC,MAAM,CAAC,IAAI,CAAC;QACtC,8EAA8E;QAC9E,sDAAsD;QACtD,WAAW,EAAE,MAAM,CAAC,IAAI,KAAK,0BAA0B,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS;QAC/F,SAAS,EACP,MAAM,CAAC,IAAI,KAAK,0BAA0B,IAAI,MAAM,CAAC,SAAS;YAC5D,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC;YACzC,CAAC,CAAC,SAAS;KAChB,CAAC,CAAA;AACJ,CAAC,CAAA;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,KAA6B,EAAmD,EAAE;IAChH,MAAM,KAAK,GAAqB,EAAE,CAAA;IAClC,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,KAAK,CAAC,OAAO,EAAE,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAA;QAC1B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,OAAO,MAAM,CAAC,IAAI,CAChB,kBAAkB,KAAK,uBAAuB,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CACvG,CAAA;QACH,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAA;AAC5B,CAAC,CAAA"}

package/dist/witness.d.ts

@@ -0,0 +1,23 @@
+import { Effect } from "effect";
+import type { CborHex } from "./cip30.js";
+import { type SigningError } from "./sign-error.js";
+/**
+ * BLAKE2b-256 over the body's original bytes, never a re-encode: this is the id
+ * the chain computes, and it is CIP-0186's commit — what binds a returned
+ * witness set to the body whose effects a person was shown.
+ */
+export declare const transactionIdOf: (transaction: CborHex) => Effect.Effect<string, SigningError>;
+/**
+ * Refuses unless this is the body the effects were derived from. Asked twice —
+ * before the wallet is given anything, and again as assembly begins — because
+ * either moment is one where the transaction can stop being the one on screen.
+ */
+export declare const requireSameBody: (transaction: CborHex, transactionId: string) => Effect.Effect<void, SigningError>;
+/**
+ * Appends a returned witness set to the body it was asked for, or says why not.
+ * `transactionId` is the id the effects were derived from: witnesses go into
+ * that body or into none, which is what makes what a person was shown the thing
+ * they signed.
+ */
+export declare const assembleWitnesses: (transaction: CborHex, witnesses: CborHex, transactionId: string) => Effect.Effect<CborHex, SigningError>;
+//# sourceMappingURL=witness.d.ts.map

package/dist/witness.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"witness.d.ts","sourceRoot":"","sources":["../src/witness.ts"],"names":[],"mappings":"AAQA,OAAO,EAAE,MAAM,EAAU,MAAM,QAAQ,CAAA;AAEvC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,YAAY,CAAA;AACzC,OAAO,EAAU,KAAK,YAAY,EAAE,MAAM,iBAAiB,CAAA;AAa3D;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,aAAa,OAAO,KAAG,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,CAYxF,CAAA;AA0BD;;;;GAIG;AACH,eAAO,MAAM,eAAe,GAAI,aAAa,OAAO,EAAE,eAAe,MAAM,KAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,YAAY,CAO3G,CAAA;AAEH;;;;;GAKG;AACH,eAAO,MAAM,iBAAiB,GAC5B,aAAa,OAAO,EACpB,WAAW,OAAO,EAClB,eAAe,MAAM,KACpB,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,YAAY,CAwClC,CAAA"}

package/dist/witness.js

@@ -0,0 +1,101 @@
+/**
+ * The transaction id, and the witnesses that may go into the body it names.
+ * Pure: nothing here talks to a wallet, so what assembly accepts can be stated
+ * as a rule rather than observed against an extension.
+ */
+import { extractTransactionBody } from "@cardano-slips/verifier";
+import { Transaction, TransactionWitnessSet } from "@evolution-sdk/evolution";
+import { blake2b } from "@noble/hashes/blake2.js";
+import { Effect, Either } from "effect";
+import { refuse } from "./sign-error.js";
+const hex = /^[0-9a-fA-F]*$/;
+const bytesOf = (value) => {
+    if (value.length % 2 !== 0 || !hex.test(value))
+        return undefined;
+    return Uint8Array.from({ length: value.length / 2 }, (_, index) => Number.parseInt(value.slice(index * 2, index * 2 + 2), 16));
+};
+const toHex = (bytes) => Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
+/**
+ * BLAKE2b-256 over the body's original bytes, never a re-encode: this is the id
+ * the chain computes, and it is CIP-0186's commit — what binds a returned
+ * witness set to the body whose effects a person was shown.
+ */
+export const transactionIdOf = (transaction) => {
+    const bytes = bytesOf(transaction);
+    if (bytes === undefined) {
+        return Effect.fail(refuse("UnreadableTransaction", "This transaction is not readable as CBOR."));
+    }
+    const body = extractTransactionBody(bytes);
+    if (Either.isLeft(body)) {
+        return Effect.fail(refuse("UnreadableTransaction", `This transaction is not readable: ${body.left.message}`, { cause: body.left }));
+    }
+    return Effect.succeed(toHex(blake2b(body.right.bodyBytes, { dkLen: 32 })));
+};
+/**
+ * What a version 1 transaction is never signed with. We build nothing that
+ * spends from a script, so any of these in a returned set is material the body
+ * was not judged with, and merging it would let a wallet add to a transaction
+ * after the moment it was shown.
+ */
+const unexpected = (set) => {
+    if ((set.nativeScripts ?? []).length > 0)
+        return "native scripts";
+    if ((set.bootstrapWitnesses ?? []).length > 0)
+        return "bootstrap witnesses";
+    if ((set.plutusV1Scripts ?? []).length > 0)
+        return "Plutus v1 scripts";
+    if ((set.plutusV2Scripts ?? []).length > 0)
+        return "Plutus v2 scripts";
+    if ((set.plutusV3Scripts ?? []).length > 0)
+        return "Plutus v3 scripts";
+    if ((set.plutusData ?? []).length > 0)
+        return "datums";
+    if (set.redeemers !== undefined)
+        return "redeemers";
+    return undefined;
+};
+const readWitnessSet = (witnesses) => Effect.try({
+    try: () => TransactionWitnessSet.fromCBORHex(witnesses),
+    catch: (cause) => refuse("UnreadableWitnesses", "The wallet answered with something that is not a witness set.", { cause })
+});
+/**
+ * Refuses unless this is the body the effects were derived from. Asked twice —
+ * before the wallet is given anything, and again as assembly begins — because
+ * either moment is one where the transaction can stop being the one on screen.
+ */
+export const requireSameBody = (transaction, transactionId) => Effect.flatMap(transactionIdOf(transaction), (held) => held === transactionId
+    ? Effect.void
+    : Effect.fail(refuse("WrongBody", "This is not the transaction the effects were derived from, so it will not be signed.")));
+/**
+ * Appends a returned witness set to the body it was asked for, or says why not.
+ * `transactionId` is the id the effects were derived from: witnesses go into
+ * that body or into none, which is what makes what a person was shown the thing
+ * they signed.
+ */
+export const assembleWitnesses = (transaction, witnesses, transactionId) => Effect.gen(function* () {
+    yield* requireSameBody(transaction, transactionId);
+    const set = yield* readWitnessSet(witnesses);
+    const material = unexpected(set);
+    if (material !== undefined) {
+        return yield* Effect.fail(refuse("UnexpectedWitnessMaterial", `The wallet answered with ${material}, which this transaction never asked for.`));
+    }
+    // evolution-sdk returns the transaction untouched for an empty set, so
+    // without this an unsigned transaction would go to `submitTx` looking signed.
+    if ((set.vkeyWitnesses ?? []).length === 0) {
+        return yield* Effect.fail(refuse("NoWitnesses", "The wallet answered without a signature."));
+    }
+    // Appends to `vkeyWitnesses` and re-encodes from the format the transaction
+    // arrived in, so a co-signer's witness survives and the body keeps its bytes.
+    const assembled = yield* Effect.try({
+        try: () => Transaction.addVKeyWitnessesHex(transaction, witnesses),
+        catch: (cause) => refuse("UnreadableWitnesses", "The wallet's witnesses could not be assembled into the transaction.", { cause })
+    });
+    // The body is what the id is taken over, so an id that moved means the
+    // bytes moved — and the person would be signing something else.
+    const after = yield* transactionIdOf(assembled);
+    if (after !== transactionId) {
+        return yield* Effect.fail(refuse("WrongBody", "Assembling the signature changed the transaction, so it will not be submitted."));
+    }
+    return assembled;
+});
+//# sourceMappingURL=witness.js.map

package/dist/witness.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"witness.js","sourceRoot":"","sources":["../src/witness.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAA;AAChE,OAAO,EAAE,WAAW,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAA;AAC7E,OAAO,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAA;AAGvC,OAAO,EAAE,MAAM,EAAqB,MAAM,iBAAiB,CAAA;AAE3D,MAAM,GAAG,GAAG,gBAAgB,CAAA;AAE5B,MAAM,OAAO,GAAG,CAAC,KAAc,EAA0B,EAAE;IACzD,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAA;IAChE,OAAO,UAAU,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,CAChE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,CAC3D,CAAA;AACH,CAAC,CAAA;AAED,MAAM,KAAK,GAAG,CAAC,KAAiB,EAAU,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;AAErH;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAoB,EAAuC,EAAE;IAC3F,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,CAAA;IAClC,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE,2CAA2C,CAAC,CAAC,CAAA;IAClG,CAAC;IACD,MAAM,IAAI,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAA;IAC1C,IAAI,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC,IAAI,CAChB,MAAM,CAAC,uBAAuB,EAAE,qCAAqC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAChH,CAAA;IACH,CAAC;IACD,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,SAAS,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAA;AAC5E,CAAC,CAAA;AAED;;;;;GAKG;AACH,MAAM,UAAU,GAAG,CAAC,GAAgD,EAAsB,EAAE;IAC1F,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,gBAAgB,CAAA;IACjE,IAAI,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,qBAAqB,CAAA;IAC3E,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,mBAAmB,CAAA;IACtE,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,mBAAmB,CAAA;IACtE,IAAI,CAAC,GAAG,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,mBAAmB,CAAA;IACtE,IAAI,CAAC,GAAG,CAAC,UAAU,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAA;IACtD,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,WAAW,CAAA;IACnD,OAAO,SAAS,CAAA;AAClB,CAAC,CAAA;AAED,MAAM,cAAc,GAAG,CAAC,SAAkB,EAA4E,EAAE,CACtH,MAAM,CAAC,GAAG,CAAC;IACT,GAAG,EAAE,GAAG,EAAE,CAAC,qBAAqB,CAAC,WAAW,CAAC,SAAS,CAAC;IACvD,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,qBAAqB,EAAE,+DAA+D,EAAE,EAAE,KAAK,EAAE,CAAC;CAC5G,CAAC,CAAA;AAEJ;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,WAAoB,EAAE,aAAqB,EAAqC,EAAE,CAChH,MAAM,CAAC,OAAO,CAAC,eAAe,CAAC,WAAW,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,CACpD,IAAI,KAAK,aAAa;IACpB,CAAC,CAAC,MAAM,CAAC,IAAI;IACb,CAAC,CAAC,MAAM,CAAC,IAAI,CACT,MAAM,CAAC,WAAW,EAAE,sFAAsF,CAAC,CAC5G,CACN,CAAA;AAEH;;;;;GAKG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAC/B,WAAoB,EACpB,SAAkB,EAClB,aAAqB,EACiB,EAAE,CACxC,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClB,KAAK,CAAC,CAAC,eAAe,CAAC,WAAW,EAAE,aAAa,CAAC,CAAA;IAElD,MAAM,GAAG,GAAG,KAAK,CAAC,CAAC,cAAc,CAAC,SAAS,CAAC,CAAA;IAE5C,MAAM,QAAQ,GAAG,UAAU,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CACJ,2BAA2B,EAC3B,4BAA4B,QAAQ,2CAA2C,CAChF,CACF,CAAA;IACH,CAAC;IAED,uEAAuE;IACvE,8EAA8E;IAC9E,IAAI,CAAC,GAAG,CAAC,aAAa,IAAI,EAAE,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3C,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE,0CAA0C,CAAC,CAAC,CAAA;IAC9F,CAAC;IAED,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;QAClC,GAAG,EAAE,GAAG,EAAE,CAAC,WAAW,CAAC,mBAAmB,CAAC,WAAW,EAAE,SAAS,CAAC;QAClE,KAAK,EAAE,CAAC,KAAK,EAAE,EAAE,CACf,MAAM,CAAC,qBAAqB,EAAE,qEAAqE,EAAE,EAAE,KAAK,EAAE,CAAC;KAClH,CAAC,CAAA;IAEF,uEAAuE;IACvE,gEAAgE;IAChE,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,eAAe,CAAC,SAAS,CAAC,CAAA;IAC/C,IAAI,KAAK,KAAK,aAAa,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC,CAAC,MAAM,CAAC,IAAI,CACvB,MAAM,CAAC,WAAW,EAAE,gFAAgF,CAAC,CACtG,CAAA;IACH,CAAC;IAED,OAAO,SAAS,CAAA;AAClB,CAAC,CAAC,CAAA"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cardano-slips/flow",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "description": "The client side of Cardano Slips: CIP-30 orchestration, local balancing, and the React components that render a Slip and block a signature when its effects disagree",
   "keywords": [
     "cardano",
@@ -18,12 +18,16 @@
   },
   "license": "MIT",
   "type": "module",
-  "sideEffects": false,
+  "sideEffects": [
+    "*.css"
+  ],
   "exports": {
     ".": {
       "types": "./dist/index.d.ts",
       "default": "./dist/index.js"
     },
+    "./card.css": "./dist/card.css",
+    "./effects.css": "./dist/effects.css",
     "./tokens.css": "./dist/tokens.css",
     "./package.json": "./package.json"
   },
@@ -42,9 +46,11 @@
     "react": "^19.0.0"
   },
   "dependencies": {
+    "@evolution-sdk/evolution": "^0.5.13",
+    "@noble/hashes": "^2.0.1",
     "effect": "^3.22.1",
-    "@cardano-slips/core": "^0.2.0",
-    "@cardano-slips/verifier": "^0.2.0"
+    "@cardano-slips/core": "^0.3.0",
+    "@cardano-slips/verifier": "^0.4.0"
   },
   "devDependencies": {
     "@testing-library/react": "^16.3.2",
@@ -52,10 +58,11 @@
     "happy-dom": "^20.11.6",
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
-    "typescript": "^6.0.3"
+    "typescript": "^6.0.3",
+    "@cardano-slips/example-slips": "^0.0.0"
   },
   "scripts": {
-    "build": "tsc -b tsconfig.build.json && mkdir -p dist && cp src/tokens.css dist/tokens.css",
+    "build": "tsc -b tsconfig.build.json && mkdir -p dist && cp src/*.css dist/",
     "typecheck": "tsc -b tsconfig.src.json && tsc -p tsconfig.test.json",
     "test": "vitest run",
     "lint": "eslint .",

package/src/address.ts

@@ -67,3 +67,56 @@ export const readWalletAddress = (hex: string): Either.Either<WalletAddress, str
     onRight: () => Either.right({ bech32, networkId: networkId as NetworkId })
   })
 }
+
+export type OwnAddress = {
+  /** Raw, as the verifier compares them against the body's addresses. */
+  readonly bytes: Uint8Array
+  /** Absent for a Byron address, whose header carries no network. */
+  readonly networkId?: NetworkId
+}
+
+const BYRON_TYPE = 8
+const FIRST_REWARD_TYPE = 14
+const LAST_REWARD_TYPE = 15
+
+/** A header byte and one or two 28-byte hashes. */
+const shelleyLengths: Readonly<Record<number, ReadonlyArray<number>>> = {
+  0: [57],
+  1: [57],
+  2: [57],
+  3: [57],
+  6: [29],
+  7: [29],
+  14: [29],
+  15: [29]
+}
+
+/**
+ * Reads an address the wallet calls its own: any payment address, a reward
+ * account, or a Byron address an old wallet still reports as used. Refusing
+ * the Byron one would stop the whole flow over an address nothing here spends.
+ */
+export const readOwnAddress = (hex: unknown): Either.Either<OwnAddress, string> => {
+  // Typed as hex by CIP-30, and sent by an extension under no obligation to.
+  const raw = typeof hex === "string" ? fromHex(hex.trim()) : undefined
+  if (raw === undefined) return refuse(`${String(hex).slice(0, 16)}… is not hex`)
+
+  const bytes = unwrapCbor(raw)
+  const header = bytes[0]
+  const type = header >> 4
+  if (type === BYRON_TYPE) return Either.right({ bytes })
+
+  const networkId = header & 0x0f
+  if (networkId !== 0 && networkId !== 1) return refuse(`the address header names network ${networkId}`)
+
+  const payment = type <= LAST_PAYMENT_TYPE
+  const reward = type >= FIRST_REWARD_TYPE && type <= LAST_REWARD_TYPE
+  if (!payment && !reward) return refuse(`address type ${type} is not one a wallet holds`)
+
+  // Pointer addresses (4, 5) end in variable-length integers, so only a floor applies.
+  const lengths = shelleyLengths[type]
+  const fits = lengths === undefined ? bytes.length > 29 : lengths.includes(bytes.length)
+  if (!fits) return refuse(`${bytes.length} bytes is the wrong length for address type ${type}`)
+
+  return Either.right({ bytes, networkId: networkId as NetworkId })
+}