@catena/sdk 0.1.0 → 0.4.0

package/dist/{client-CHZMO00P.mjs → client-BSYVYJGm.mjs}

@@ -92,7 +92,7 @@ function p256SigningKey(point, privateKeyHex) {
 }
 //#endregion
 //#region package.json
-var version = "0.1.0";
+var version = "0.4.0";
 //#endregion
 //#region src/user-agent.ts
 const HTTP_TOKEN_RE = /^[!#$%&'*+\-.^_`|~0-9A-Za-z]+$/;
@@ -305,7 +305,12 @@ const accountBalanceResponseSchema = v.object({
 	balance: moneyJsonSchema,
 	balances: v.optional(v.object({
 		total: moneyJsonSchema,
-		available: moneyJsonSchema
+		available: moneyJsonSchema,
+		byNetwork: v.optional(v.array(v.object({
+			network: v.string(),
+			total: moneyJsonSchema,
+			available: moneyJsonSchema
+		})))
 	}))
 });
 const ACCOUNT_TRANSACTION_TYPES = [
@@ -351,6 +356,7 @@ const accountTransactionSchema = v.object({
 	amount: moneyJsonSchema,
 	fee: moneyJsonSchema,
 	currency: v.string(),
+	network: v.optional(v.string()),
 	counterpartyName: v.optional(v.string()),
 	method: v.optional(extensibleStringSchema(ACCOUNT_TRANSACTION_METHODS)),
 	memo: v.optional(v.string()),
@@ -371,6 +377,11 @@ const accountDepositAddressResponseSchema = v.object({
 	liquidationAddressId: v.optional(v.string()),
 	source: extensibleStringSchema(ACCOUNT_DEPOSIT_ADDRESS_SOURCES)
 });
+const walletCounterpartyRailSchema = v.object({
+	type: v.literal("wallet"),
+	walletAddress: v.custom((input) => typeof input === "string" && /^0x[0-9a-fA-F]{40}$/.test(input)),
+	network: v.custom((input) => typeof input === "string" && input.length > 0)
+});
 const counterpartySchema = v.object({
 	id: v.string(),
 	name: v.string(),
@@ -404,7 +415,19 @@ const intentNextActionSchema = v.object({
 		bodyHash: v.string(),
 		expiresAt: isoTimestampSchema,
 		prepareToken: v.string()
-	})
+	}),
+	movement: v.optional(v.object({
+		planId: v.string(),
+		signerAddress: v.string(),
+		digests: v.array(v.string()),
+		instructions: v.array(v.looseObject({
+			kind: v.string(),
+			network: v.string(),
+			signerAddress: v.string(),
+			digest: v.string(),
+			payload: v.record(v.string(), v.unknown())
+		}))
+	}))
 });
 const INTENT_ACTION_TYPES = [
 	"send",
@@ -415,6 +438,50 @@ const INTENT_ACTION_TYPES = [
 	"mpp",
 	"policy_override"
 ];
+const CROSS_CHAIN_STATES = [
+	"burning",
+	"attesting",
+	"minting",
+	"ready",
+	"delivering",
+	"delivered",
+	"failed",
+	"manual_review"
+];
+const CROSS_CHAIN_NEXT_STEPS = [
+	"wait",
+	"continue",
+	"done",
+	"blocked"
+];
+const crossChainSendSchema = v.object({
+	id: v.string(),
+	sourceNetwork: v.string(),
+	destinationNetwork: v.string(),
+	state: extensibleStringSchema(CROSS_CHAIN_STATES),
+	nextStep: extensibleStringSchema(CROSS_CHAIN_NEXT_STEPS),
+	readyAt: v.nullable(isoTimestampSchema),
+	deliveredAt: v.nullable(isoTimestampSchema),
+	failureReason: v.nullable(v.string())
+});
+const MOVEMENT_NEXT_STEPS = [
+	"wait",
+	"continue",
+	"done",
+	"blocked"
+];
+const movementSchema = v.object({
+	planId: v.string(),
+	nextStep: extensibleStringSchema(MOVEMENT_NEXT_STEPS)
+});
+const movementContinuationSchema = v.object({ planId: v.string() });
+const continueIntentResponseSchema = v.object({
+	id: v.string(),
+	status: intentStatusSchema,
+	crossChain: v.optional(crossChainSendSchema),
+	movement: v.optional(movementContinuationSchema),
+	nextAction: intentNextActionSchema
+});
 const wireIntentResultSchema = v.object({
 	id: v.string(),
 	accountId: v.optional(v.string()),
@@ -425,6 +492,8 @@ const wireIntentResultSchema = v.object({
 	replayed: v.optional(v.boolean(), false),
 	data: v.optional(v.nullable(v.record(v.string(), v.unknown())), null),
 	metadata: v.optional(v.object({ dataUrl: v.nullable(v.string()) })),
+	crossChain: v.optional(crossChainSendSchema),
+	movement: v.optional(movementSchema),
 	nextAction: v.optional(intentNextActionSchema)
 });
 function toIntentResult(wire) {
@@ -438,16 +507,41 @@ function x402CredentialFromIntentData(data) {
 	const legacy = v.safeParse(legacyX402IntentDataSchema, data);
 	return legacy.success ? legacy.output.x402.paymentSignature : void 0;
 }
-const sendMethodSchema = v.picklist(SEND_METHODS);
-const sendActionSchema = v.object({
-	type: v.literal("send"),
-	accountId: v.optional(v.pipe(v.string(), v.minLength(1))),
-	counterpartyRailId: v.string(),
-	amount: v.string(),
-	method: sendMethodSchema,
-	memo: v.optional(v.string()),
-	description: v.optional(v.string())
-});
+v.picklist(SEND_METHODS);
+const sendActionSchemasByMethod = {
+	ach: v.object({
+		type: v.literal("send"),
+		accountId: v.optional(v.pipe(v.string(), v.minLength(1))),
+		counterpartyRailId: v.string(),
+		amount: v.string(),
+		description: v.optional(v.string()),
+		method: v.literal("ach"),
+		memo: v.optional(v.string())
+	}),
+	wire: v.object({
+		type: v.literal("send"),
+		accountId: v.optional(v.pipe(v.string(), v.minLength(1))),
+		counterpartyRailId: v.string(),
+		amount: v.string(),
+		description: v.optional(v.string()),
+		method: v.literal("wire"),
+		memo: v.optional(v.string())
+	}),
+	"on-chain": v.object({
+		type: v.literal("send"),
+		accountId: v.optional(v.pipe(v.string(), v.minLength(1))),
+		counterpartyRailId: v.string(),
+		amount: v.string(),
+		description: v.optional(v.string()),
+		method: v.literal("on-chain"),
+		memo: v.optional(v.string())
+	})
+};
+const sendActionSchema = v.variant("method", [
+	sendActionSchemasByMethod.ach,
+	sendActionSchemasByMethod.wire,
+	sendActionSchemasByMethod["on-chain"]
+]);
 const transferActionSchema = v.object({
 	type: v.literal("transfer"),
 	accountId: v.string(),
@@ -589,12 +683,16 @@ var ApiError = class extends Error {
 	status;
 	code;
 	details;
-	constructor(status, message, code, details) {
-		super(code ? `API error ${status} [${code}]: ${message}` : `API error ${status}: ${message}`);
+	fields;
+	constructor(status, message, code, details, fields) {
+		const explanations = Object.entries(fields ?? {}).map(([path, explanation]) => path === "request" ? explanation : `${path}: ${explanation}`).join("; ");
+		const description = explanations ? `${message}: ${explanations}` : message;
+		super(code ? `API error ${status} [${code}]: ${description}` : `API error ${status}: ${description}`);
 		this.name = "ApiError";
 		this.status = status;
 		this.code = code;
 		this.details = details;
+		this.fields = fields;
 	}
 };
 var TimeoutError = class extends Error {
@@ -609,13 +707,14 @@ const errorBodySchema = v.object({
 	error: v.nullish(v.string()),
 	message: v.nullish(v.string()),
 	code: v.nullish(v.string()),
-	details: v.nullish(v.record(v.string(), v.unknown()))
+	details: v.nullish(v.record(v.string(), v.unknown())),
+	fields: v.fallback(v.nullish(v.pipe(v.unknown(), v.check((value) => !Array.isArray(value)), v.record(v.string(), v.string()))), void 0)
 });
 async function apiErrorFromResponse(res) {
 	const parsed = v.safeParse(errorBodySchema, await res.json().catch(() => void 0));
 	const body = parsed.success ? parsed.output : {};
-	if (body.error != null && body.message != null) return new ApiError(res.status, body.message, body.code ?? body.error, body.details ?? void 0);
-	return new ApiError(res.status, body.error ?? body.message ?? res.statusText, body.code ?? void 0, body.details ?? void 0);
+	if (body.error != null && body.message != null) return new ApiError(res.status, body.message, body.code ?? body.error, body.details ?? void 0, body.fields ?? void 0);
+	return new ApiError(res.status, body.error ?? body.message ?? res.statusText, body.code ?? void 0, body.details ?? void 0, body.fields ?? void 0);
 }
 async function parseApiResponse(res, schema) {
 	if (!res.ok) throw await apiErrorFromResponse(res);
@@ -635,6 +734,27 @@ var IntentSubmitError = class extends Error {
 const DEFAULT_BASE_URL = "https://api.catena.com";
 const DEFAULT_TIMEOUT_MS = 8e4;
 const MAX_TIMEOUT_MS = 2147483647;
+const digestBatchBodySchema = v.looseObject({ parameters: v.looseObject({ payloads: v.pipe(v.array(v.unknown()), v.minLength(1)) }) });
+let movementsModule;
+let movementsLoadFailure;
+function loadMovements() {
+	movementsModule ??= import("./movements.mjs").then((loaded) => loaded, (reason) => {
+		movementsLoadFailure = reason;
+	});
+	return movementsModule;
+}
+async function continuationKinds() {
+	return await loadMovements() === void 0 ? "crossChain" : "crossChain, movement";
+}
+const digestBatchActivitySchema = v.looseObject({ type: v.literal("ACTIVITY_TYPE_SIGN_RAW_PAYLOADS") });
+function signsADigestBatch(body) {
+	try {
+		const parsed = JSON.parse(body);
+		return v.safeParse(digestBatchBodySchema, parsed).success || v.safeParse(digestBatchActivitySchema, parsed).success;
+	} catch {
+		return false;
+	}
+}
 var CatenaClient = class {
 	#baseUrl;
 	#userAgent;
@@ -769,7 +889,7 @@ var CatenaClient = class {
 		if (!nextAction) return toIntentResult(created);
 		let submitRequest;
 		try {
-			const stamp = await this.#stampNextAction(nextAction);
+			const stamp = await this.#stampNextAction(nextAction, params.action);
 			submitRequest = await this.#signedRequest({
 				method: "POST",
 				path: `/intents/${encodeURIComponent(created.id)}/submit-stamp`,
@@ -803,8 +923,9 @@ var CatenaClient = class {
 			headers: { "Idempotency-Key": params.idempotencyKey }
 		}, wireIntentResultSchema);
 	}
-	async #stampNextAction(nextAction) {
+	async #stampNextAction(nextAction, action) {
 		if (nextAction.signer.publicKeyHex.toLowerCase() !== this.#keypair.publicKeyHex.toLowerCase()) throw new Error(`Local signer public key does not match requested signer ${nextAction.signer.publicKeyHex}; linked credential has ${this.#keypair.publicKeyHex}`);
+		await this.#reviewMovement(nextAction, action);
 		const stamp = await new ApiKeyStamper({
 			apiPublicKey: this.#keypair.publicKeyHex,
 			apiPrivateKey: this.#keypair.privateKeyHex
@@ -815,6 +936,23 @@ var CatenaClient = class {
 			stampHeaderValue: stamp.stampHeaderValue
 		};
 	}
+	async #reviewMovement(nextAction, action) {
+		const movement = nextAction.movement;
+		if (movement === void 0) {
+			if (signsADigestBatch(nextAction.preparedBody.body)) throw new Error("Refusing to approve this payment: it would sign pre-hashed digests with nothing describing what they commit to. Nothing was signed.");
+			return;
+		}
+		const movements = await loadMovements();
+		if (movements === void 0) throw new Error("Refusing to approve this payment: its digests cannot be checked without the optional `viem` peer dependency (>=2.24.0). Nothing was signed.", { cause: movementsLoadFailure });
+		const { verifyPreparedMovement } = movements;
+		const verdict = verifyPreparedMovement({
+			signerAddress: movement.signerAddress,
+			digests: movement.digests,
+			instructions: movement.instructions,
+			body: nextAction.preparedBody.body
+		}, action !== void 0 && "amount" in action ? { amount: action.amount } : void 0);
+		if (!verdict.ok) throw new Error(`Refusing to approve this payment: ${verdict.reason} Nothing was signed.`);
+	}
 	async #submitStamp(request, replayed) {
 		const intent = toIntentResult((await this.#dispatch(request, submitStampResponseSchema)).intent);
 		return replayed ? {
@@ -828,6 +966,43 @@ var CatenaClient = class {
 			path: `/intents/${encodeURIComponent(id)}`
 		}, wireIntentResultSchema));
 	}
+	async continueIntent(params) {
+		const prepared = await this.#request({
+			method: "POST",
+			path: `/intents/${encodeURIComponent(params.intentId)}/continue`,
+			headers: {
+				"Idempotency-Key": params.idempotencyKey ?? crypto.randomUUID(),
+				"Catena-Continuation-Kinds": await continuationKinds()
+			}
+		}, continueIntentResponseSchema);
+		let submitRequest;
+		try {
+			const stamp = await this.#stampNextAction(prepared.nextAction, params.action);
+			submitRequest = await this.#signedRequest({
+				method: "POST",
+				path: `/intents/${encodeURIComponent(params.intentId)}/submit-stamp`,
+				body: {
+					preparedBody: prepared.nextAction.preparedBody,
+					stamp
+				}
+			});
+		} catch (cause) {
+			throw new IntentSubmitError({
+				intentId: params.intentId,
+				outcome: "not-submitted",
+				cause
+			});
+		}
+		try {
+			return await this.#submitStamp(submitRequest, false);
+		} catch (cause) {
+			throw new IntentSubmitError({
+				intentId: params.intentId,
+				outcome: "unknown",
+				cause
+			});
+		}
+	}
 	async unlinkAgent() {
 		await this.#request({
 			method: "POST",
@@ -854,4 +1029,4 @@ function createCatenaClient(options = {}) {
 	});
 }
 //#endregion
-export { extractRelayableOffer as C, x402ResourceSchema as S, paymentCredentialFromIntentData as T, POLICY_RULE_ACTIONS as _, ACCOUNT_AGGREGATION_SCOPES as a, x402CredentialFromIntentData as b, ACCOUNT_TRANSACTION_MOVEMENT_STATUSES as c, ACTOR_AGGREGATION_SCOPES as d, COUNTERPARTY_ACTIONS as f, POLICY_OVERRIDE_CAPABILITIES as g, POLICY_CAPABILITIES as h, createCatenaClient as i, ACCOUNT_TRANSACTION_STATUSES as l, INTENT_ACTION_TYPES as m, IntentSubmitError as n, ACCOUNT_DEPOSIT_ADDRESS_SOURCES as o, COUNTERPARTY_RULE_MODES as p, TimeoutError as r, ACCOUNT_TRANSACTION_METHODS as s, ApiError as t, ACCOUNT_TRANSACTION_TYPES as u, POLICY_RULE_TYPES as v, extractRelayableReceipt as w, x402PaymentRequirementsSchema as x, SEND_METHODS as y };
+export { walletCounterpartyRailSchema as C, extractRelayableOffer as D, x402ResourceSchema as E, extractRelayableReceipt as O, SEND_METHODS as S, x402PaymentRequirementsSchema as T, MOVEMENT_NEXT_STEPS as _, ACCOUNT_AGGREGATION_SCOPES as a, POLICY_RULE_ACTIONS as b, ACCOUNT_TRANSACTION_MOVEMENT_STATUSES as c, ACTOR_AGGREGATION_SCOPES as d, COUNTERPARTY_ACTIONS as f, INTENT_ACTION_TYPES as g, CROSS_CHAIN_STATES as h, createCatenaClient as i, paymentCredentialFromIntentData as k, ACCOUNT_TRANSACTION_STATUSES as l, CROSS_CHAIN_NEXT_STEPS as m, IntentSubmitError as n, ACCOUNT_DEPOSIT_ADDRESS_SOURCES as o, COUNTERPARTY_RULE_MODES as p, TimeoutError as r, ACCOUNT_TRANSACTION_METHODS as s, ApiError as t, ACCOUNT_TRANSACTION_TYPES as u, POLICY_CAPABILITIES as v, x402CredentialFromIntentData as w, POLICY_RULE_TYPES as x, POLICY_OVERRIDE_CAPABILITIES as y };