@cef-ai/vault-sdk 0.1.0 → 0.3.0

package/dist/internal/marketplace.js

@@ -18,5 +18,11 @@ export class Marketplace {
             : endpoints.marketplaceAgent(agentId);
         return this.http.send("GET", path, { auth: PUBLIC });
     }
+    list(opts = {}) {
+        return this.http.send("GET", endpoints.marketplaceAgents(), {
+            auth: PUBLIC,
+            query: { limit: opts.limit, cursor: opts.cursor, q: opts.query },
+        });
+    }
 }
 //# sourceMappingURL=marketplace.js.map

package/dist/internal/marketplace.js.map

@@ -1 +1 @@
-{"version":3,"file":"marketplace.js","sourceRoot":"","sources":["../../src/internal/marketplace.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;AAe5B;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IACO;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,QAAQ,CAAC,OAAe,EAAE,OAAgB;QACxC,MAAM,IAAI,GAAG,OAAO;YAClB,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC;YACrD,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;CACF"}
+{"version":3,"file":"marketplace.js","sourceRoot":"","sources":["../../src/internal/marketplace.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACjD,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAE5C,MAAM,MAAM,GAAG,IAAI,MAAM,EAAE,CAAC;AA6B5B;;;;;GAKG;AACH,MAAM,OAAO,WAAW;IACO;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IAEtD,QAAQ,CAAC,OAAe,EAAE,OAAgB;QACxC,MAAM,IAAI,GAAG,OAAO;YAClB,CAAC,CAAC,SAAS,CAAC,uBAAuB,CAAC,OAAO,EAAE,OAAO,CAAC;YACrD,CAAC,CAAC,SAAS,CAAC,gBAAgB,CAAC,OAAO,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;IACvD,CAAC;IAED,IAAI,CAAC,OAA0B,EAAE;QAC/B,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,iBAAiB,EAAE,EAAE;YAC1D,IAAI,EAAE,MAAM;YACZ,KAAK,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE;SACjE,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/internal/onboarding.d.ts

@@ -0,0 +1,99 @@
+import type { Wallet } from "../wallet/adapter.js";
+export type FetchLike = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+export interface OnboardingSigner {
+    /** 0x-hex public key. */
+    publicKeyHex: string;
+    keyType: "ed25519" | "sr25519";
+    /**
+     * Sign raw bytes; return a hex signature (with or without `0x` prefix —
+     * the gateway client strips a leading `0x` before adding the header).
+     */
+    signRawHex: (bytes: Uint8Array) => Promise<string>;
+}
+export interface OnboardingStatus {
+    address: string;
+    native_balance: string;
+    native_floor: string;
+    ddc_deposit_total: string;
+    gateway_is_proxy: boolean;
+    faucet_eligible: boolean;
+    ddc_seed_eligible: boolean;
+}
+export interface BootstrapResult {
+    native_transferred: string;
+    ddc_deposited: string;
+    errors?: string[];
+    next_user_action?: string;
+}
+export type OnboardingResult = {
+    kind: "skipped";
+    status: null;
+} | {
+    kind: "ready";
+    status: OnboardingStatus;
+} | {
+    kind: "awaiting-proxy";
+    status: OnboardingStatus;
+    bootstrap?: BootstrapResult;
+};
+export interface PollOptions {
+    intervalMs: number;
+    timeoutMs: number;
+    fetchImpl?: FetchLike;
+    sleep?: (ms: number) => Promise<void>;
+}
+/** Thrown when {@link pollUntilProxyReady} exhausts its budget. */
+export declare class OnboardingTimeoutError extends Error {
+    constructor(message: string);
+}
+/**
+ * Thrown by `vault.ensure()` when onboarding is skipped via
+ * `onboard: false` but the gateway reports the wallet still needs the
+ * proxy registration step. Lets server-side consumers (which assume
+ * pre-provisioned wallets) catch this case explicitly.
+ */
+export declare class OnboardingRequiredError extends Error {
+    constructor(message: string);
+}
+/**
+ * Bridge from the SDK's `Wallet` adapter to the onboarding signer shape.
+ * The gateway's onboarding endpoints sign over **empty** bytes (`X-Signature`
+ * header) — same convention vault-api uses elsewhere. Hex-encodes both the
+ * wallet pubkey (already 0x-hex) and the raw-bytes signature output.
+ */
+export declare function walletToOnboardingSigner(wallet: Wallet): OnboardingSigner;
+/**
+ * Fetch the gateway's onboarding status for the signer's wallet. Returns
+ * `null` when the gateway responds 404 (onboarding disabled, i.e. prod).
+ */
+export declare function getOnboardingStatus(gatewayUrl: string, signer: OnboardingSigner, fetchImpl?: FetchLike): Promise<OnboardingStatus | null>;
+/**
+ * Trigger devnet seeding (faucet drip + DDC deposit) for the signer's
+ * wallet. Accepts both 200 (full success) and 207 (partial) — the body
+ * contains an `errors` array in the partial case.
+ */
+export declare function runBootstrap(gatewayUrl: string, signer: OnboardingSigner, fetchImpl?: FetchLike): Promise<BootstrapResult>;
+/**
+ * Orchestrate the full devnet onboarding flow once per wallet:
+ *   1) GET  /auth/onboarding/status
+ *   2) if faucet_eligible || ddc_seed_eligible
+ *      → POST /auth/onboarding/bootstrap → refresh status
+ *   3) caller decides between proceeding (ready) and prompting
+ *      `proxy.addProxy` (awaiting-proxy).
+ *
+ * Returns `'skipped'` when the gateway has onboarding disabled (404).
+ *
+ * Callers can pass `onBootstrap` to be notified just before the
+ * bootstrap POST fires — used by `vault.ensure()` to surface a
+ * `funding-wallet` progress event.
+ */
+export declare function runOnboarding(gatewayUrl: string, signer: OnboardingSigner, fetchImpl?: FetchLike, onBootstrap?: () => void): Promise<OnboardingResult>;
+/**
+ * Poll `/auth/onboarding/status` until `gateway_is_proxy` flips true, the
+ * attempt budget is spent, or the gateway 404s. Returns the latest status
+ * on success, `null` on terminal-not-ready (timeout or 404). Budget is
+ * `floor(timeoutMs/intervalMs) + 1` attempts; with the SDK defaults
+ * (60_000 / 2_000) that's 31 probes spaced 2s apart.
+ */
+export declare function pollUntilProxyReady(gatewayUrl: string, signer: OnboardingSigner, opts: PollOptions): Promise<OnboardingStatus | null>;
+//# sourceMappingURL=onboarding.d.ts.map

package/dist/internal/onboarding.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.d.ts","sourceRoot":"","sources":["../../src/internal/onboarding.ts"],"names":[],"mappings":"AAaA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAInD,MAAM,MAAM,SAAS,GAAG,CACtB,KAAK,EAAE,MAAM,GAAG,GAAG,GAAG,OAAO,EAC7B,IAAI,CAAC,EAAE,WAAW,KACf,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEvB,MAAM,WAAW,gBAAgB;IAC/B,yBAAyB;IACzB,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,SAAS,GAAG,SAAS,CAAC;IAC/B;;;OAGG;IACH,UAAU,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CACpD;AAED,MAAM,WAAW,gBAAgB;IAC/B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,YAAY,EAAE,MAAM,CAAC;IACrB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,gBAAgB,EAAE,OAAO,CAAC;IAC1B,eAAe,EAAE,OAAO,CAAC;IACzB,iBAAiB,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,eAAe;IAC9B,kBAAkB,EAAE,MAAM,CAAC;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,MAAM,EAAE,IAAI,CAAA;CAAE,GACjC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,gBAAgB,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAC;IAAC,SAAS,CAAC,EAAE,eAAe,CAAA;CAAE,CAAC;AAEtF,MAAM,WAAW,WAAW;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,CAAC,EAAE,SAAS,CAAC;IACtB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,mEAAmE;AACnE,qBAAa,sBAAuB,SAAQ,KAAK;gBACnC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;GAKG;AACH,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,MAAM,GAAG,gBAAgB,CAWzE;AAoBD;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,gBAAgB,EACxB,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAMlC;AAED;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,gBAAgB,EACxB,SAAS,GAAE,SAAiB,GAC3B,OAAO,CAAC,eAAe,CAAC,CAO1B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,aAAa,CACjC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,gBAAgB,EACxB,SAAS,GAAE,SAAiB,EAC5B,WAAW,CAAC,EAAE,MAAM,IAAI,GACvB,OAAO,CAAC,gBAAgB,CAAC,CAgB3B;AAID;;;;;;GAMG;AACH,wBAAsB,mBAAmB,CACvC,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,gBAAgB,EACxB,IAAI,EAAE,WAAW,GAChB,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAWlC"}

package/dist/internal/onboarding.js

@@ -0,0 +1,148 @@
+// src/internal/onboarding.ts
+//
+// Onboarding orchestrator for the DDC S3 gateway's devnet auto-fund flow.
+// Gateway: github.com/Cerebellum-Network/ddc-s3-gateway. The endpoints
+// 404 when ONBOARDING_ENABLED=false, so callers must treat null as
+// "production gateway, skip the whole branch".
+//
+// Why no `buildAddProxyDeepLink` here: that helper builds a Polkadot.js
+// Apps URL the user can open to manually run `proxy.addProxy`. It is a UX
+// fallback for apps that can't auto-submit (no embed wallet available);
+// the SDK's job is to expose primitives — orchestration + auto-submit —
+// not chrome. Apps that need the deep link can build it in three lines.
+/** Thrown when {@link pollUntilProxyReady} exhausts its budget. */
+export class OnboardingTimeoutError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "OnboardingTimeoutError";
+    }
+}
+/**
+ * Thrown by `vault.ensure()` when onboarding is skipped via
+ * `onboard: false` but the gateway reports the wallet still needs the
+ * proxy registration step. Lets server-side consumers (which assume
+ * pre-provisioned wallets) catch this case explicitly.
+ */
+export class OnboardingRequiredError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "OnboardingRequiredError";
+    }
+}
+/**
+ * Bridge from the SDK's `Wallet` adapter to the onboarding signer shape.
+ * The gateway's onboarding endpoints sign over **empty** bytes (`X-Signature`
+ * header) — same convention vault-api uses elsewhere. Hex-encodes both the
+ * wallet pubkey (already 0x-hex) and the raw-bytes signature output.
+ */
+export function walletToOnboardingSigner(wallet) {
+    const pubkey = wallet.pubkey();
+    const publicKeyHex = pubkey.startsWith("0x") ? pubkey : `0x${pubkey}`;
+    return {
+        publicKeyHex,
+        keyType: wallet.sigType?.() ?? "ed25519",
+        async signRawHex(bytes) {
+            const sig = await wallet.sign(bytes);
+            return bytesToHex(sig);
+        },
+    };
+}
+function bytesToHex(bytes) {
+    let hex = "";
+    for (let i = 0; i < bytes.length; i++) {
+        hex += bytes[i].toString(16).padStart(2, "0");
+    }
+    return hex;
+}
+async function signedHeaders(signer) {
+    const sigHex = await signer.signRawHex(new Uint8Array(0));
+    const sig = sigHex.startsWith("0x") ? sigHex.slice(2) : sigHex;
+    return {
+        "X-Public-Key": signer.publicKeyHex,
+        "X-Signature": sig,
+        "X-Signature-Type": signer.keyType,
+    };
+}
+/**
+ * Fetch the gateway's onboarding status for the signer's wallet. Returns
+ * `null` when the gateway responds 404 (onboarding disabled, i.e. prod).
+ */
+export async function getOnboardingStatus(gatewayUrl, signer, fetchImpl = fetch) {
+    const url = gatewayUrl.replace(/\/+$/, "") + "/auth/onboarding/status";
+    const r = await fetchImpl(url, { method: "GET", headers: await signedHeaders(signer) });
+    if (r.status === 404)
+        return null;
+    if (!r.ok)
+        throw new Error(`onboarding status ${r.status}`);
+    return (await r.json());
+}
+/**
+ * Trigger devnet seeding (faucet drip + DDC deposit) for the signer's
+ * wallet. Accepts both 200 (full success) and 207 (partial) — the body
+ * contains an `errors` array in the partial case.
+ */
+export async function runBootstrap(gatewayUrl, signer, fetchImpl = fetch) {
+    const url = gatewayUrl.replace(/\/+$/, "") + "/auth/onboarding/bootstrap";
+    const r = await fetchImpl(url, { method: "POST", headers: await signedHeaders(signer) });
+    if (r.status !== 200 && r.status !== 207) {
+        throw new Error(`onboarding bootstrap ${r.status}`);
+    }
+    return (await r.json());
+}
+/**
+ * Orchestrate the full devnet onboarding flow once per wallet:
+ *   1) GET  /auth/onboarding/status
+ *   2) if faucet_eligible || ddc_seed_eligible
+ *      → POST /auth/onboarding/bootstrap → refresh status
+ *   3) caller decides between proceeding (ready) and prompting
+ *      `proxy.addProxy` (awaiting-proxy).
+ *
+ * Returns `'skipped'` when the gateway has onboarding disabled (404).
+ *
+ * Callers can pass `onBootstrap` to be notified just before the
+ * bootstrap POST fires — used by `vault.ensure()` to surface a
+ * `funding-wallet` progress event.
+ */
+export async function runOnboarding(gatewayUrl, signer, fetchImpl = fetch, onBootstrap) {
+    const initial = await getOnboardingStatus(gatewayUrl, signer, fetchImpl);
+    if (initial === null)
+        return { kind: "skipped", status: null };
+    if (initial.gateway_is_proxy)
+        return { kind: "ready", status: initial };
+    let bootstrap;
+    let status = initial;
+    if (initial.faucet_eligible || initial.ddc_seed_eligible) {
+        onBootstrap?.();
+        bootstrap = await runBootstrap(gatewayUrl, signer, fetchImpl);
+        const refreshed = await getOnboardingStatus(gatewayUrl, signer, fetchImpl);
+        if (refreshed)
+            status = refreshed;
+    }
+    if (status.gateway_is_proxy)
+        return { kind: "ready", status };
+    return { kind: "awaiting-proxy", status, bootstrap };
+}
+const defaultSleep = (ms) => new Promise((r) => setTimeout(r, ms));
+/**
+ * Poll `/auth/onboarding/status` until `gateway_is_proxy` flips true, the
+ * attempt budget is spent, or the gateway 404s. Returns the latest status
+ * on success, `null` on terminal-not-ready (timeout or 404). Budget is
+ * `floor(timeoutMs/intervalMs) + 1` attempts; with the SDK defaults
+ * (60_000 / 2_000) that's 31 probes spaced 2s apart.
+ */
+export async function pollUntilProxyReady(gatewayUrl, signer, opts) {
+    const fetchImpl = opts.fetchImpl ?? fetch;
+    const sleep = opts.sleep ?? defaultSleep;
+    const maxAttempts = Math.max(1, Math.floor(opts.timeoutMs / opts.intervalMs) + 1);
+    for (let i = 0; i < maxAttempts; i++) {
+        if (i > 0)
+            await sleep(opts.intervalMs);
+        const status = await getOnboardingStatus(gatewayUrl, signer, fetchImpl);
+        if (!status)
+            return null;
+        if (status.gateway_is_proxy)
+            return status;
+    }
+    return null;
+}
+//# sourceMappingURL=onboarding.js.map

package/dist/internal/onboarding.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"onboarding.js","sourceRoot":"","sources":["../../src/internal/onboarding.ts"],"names":[],"mappings":"AAAA,6BAA6B;AAC7B,EAAE;AACF,0EAA0E;AAC1E,uEAAuE;AACvE,mEAAmE;AACnE,+CAA+C;AAC/C,EAAE;AACF,wEAAwE;AACxE,0EAA0E;AAC1E,wEAAwE;AACxE,wEAAwE;AACxE,wEAAwE;AAmDxE,mEAAmE;AACnE,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IAC/C,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;IACvC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,wBAAwB,CAAC,MAAc;IACrD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;IAC/B,MAAM,YAAY,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,KAAK,MAAM,EAAE,CAAC;IACtE,OAAO;QACL,YAAY;QACZ,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,EAAE,IAAI,SAAS;QACxC,KAAK,CAAC,UAAU,CAAC,KAAiB;YAChC,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrC,OAAO,UAAU,CAAC,GAAG,CAAC,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAiB;IACnC,IAAI,GAAG,GAAG,EAAE,CAAC;IACb,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,MAAwB;IACnD,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1D,MAAM,GAAG,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAC/D,OAAO;QACL,cAAc,EAAE,MAAM,CAAC,YAAY;QACnC,aAAa,EAAE,GAAG;QAClB,kBAAkB,EAAE,MAAM,CAAC,OAAO;KACnC,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAkB,EAClB,MAAwB,EACxB,YAAuB,KAAK;IAE5B,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,yBAAyB,CAAC;IACvE,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACxF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,IAAI,CAAC;IAClC,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAqB,CAAC;AAC9C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,UAAkB,EAClB,MAAwB,EACxB,YAAuB,KAAK;IAE5B,MAAM,GAAG,GAAG,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,4BAA4B,CAAC;IAC1E,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACzF,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;QACzC,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACtD,CAAC;IACD,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAoB,CAAC;AAC7C,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,UAAkB,EAClB,MAAwB,EACxB,YAAuB,KAAK,EAC5B,WAAwB;IAExB,MAAM,OAAO,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;IACzE,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,OAAO,CAAC,gBAAgB;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAExE,IAAI,SAAsC,CAAC;IAC3C,IAAI,MAAM,GAAG,OAAO,CAAC;IACrB,IAAI,OAAO,CAAC,eAAe,IAAI,OAAO,CAAC,iBAAiB,EAAE,CAAC;QACzD,WAAW,EAAE,EAAE,CAAC;QAChB,SAAS,GAAG,MAAM,YAAY,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC9D,MAAM,SAAS,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QAC3E,IAAI,SAAS;YAAE,MAAM,GAAG,SAAS,CAAC;IACpC,CAAC;IAED,IAAI,MAAM,CAAC,gBAAgB;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;IAC9D,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC;AAED,MAAM,YAAY,GAAG,CAAC,EAAU,EAAE,EAAE,CAAC,IAAI,OAAO,CAAO,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AAEjF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,UAAkB,EAClB,MAAwB,EACxB,IAAiB;IAEjB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,YAAY,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IAClF,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;QACxC,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,SAAS,CAAC,CAAC;QACxE,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC;QACzB,IAAI,MAAM,CAAC,gBAAgB;YAAE,OAAO,MAAM,CAAC;IAC7C,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/internal/scopes.d.ts

@@ -4,10 +4,19 @@ export interface CreateScopeRequest {
     name: string;
     displayName?: string;
     streamLabel?: string;
+    /** Initial metadata; the server stores it verbatim. */
+    metadata?: Record<string, unknown>;
 }
 export interface UpdateScopeRequest {
     displayName?: string;
     streamLabel?: string;
+    /**
+     * Partial metadata patch. Server semantics: shallow-merge per top-level
+     * key — keys here overwrite the stored map's keys, others are preserved.
+     * Pass an empty object to no-op metadata; omit the field entirely to
+     * leave metadata untouched in the request body.
+     */
+    metadata?: Record<string, unknown>;
 }
 export declare class Scopes {
     private readonly http;

package/dist/internal/scopes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"scopes.d.ts","sourceRoot":"","sources":["../../src/internal/scopes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,WAAW,kBAAkB;IAAG,IAAI,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAChG,MAAM,WAAW,kBAAkB;IAAG,WAAW,CAAC,EAAE,MAAM,CAAC;IAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAAE;AAElF,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,eAAe;IAClD,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IACjC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IACzC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC;IAG1D,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC;IAGrE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG5C"}
+{"version":3,"file":"scopes.d.ts","sourceRoot":"","sources":["../../src/internal/scopes.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAEvD,OAAO,KAAK,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAE9C,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uDAAuD;IACvD,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,MAAM,WAAW,kBAAkB;IACjC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB;;;;;OAKG;IACH,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED,qBAAa,MAAM;IACL,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,eAAe;IAClD,IAAI,CAAC,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,EAAE,CAAC;IACjC,GAAG,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,KAAK,CAAC;IACzC,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC;IAK1D,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,KAAK,CAAC;IAKrE,MAAM,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;CAG5C"}

package/dist/internal/scopes.js

@@ -7,13 +7,36 @@ export class Scopes {
     list(v) { return this.http.send("GET", endpoints.scopes(v)); }
     get(v, n) { return this.http.send("GET", endpoints.scope(v, n)); }
     create(v, req) {
-        return this.http.send("POST", endpoints.scopes(v), { body: req });
+        return this.http.send("POST", endpoints.scopes(v), {
+            body: buildScopeRequestBody(req),
+        });
     }
     update(v, n, req) {
-        return this.http.send("PATCH", endpoints.scope(v, n), { body: req });
+        return this.http.send("PATCH", endpoints.scope(v, n), {
+            body: buildScopeRequestBody(req),
+        });
     }
     delete(v, n) {
         return this.http.send("DELETE", endpoints.scope(v, n), { body: {} });
     }
 }
+/**
+ * Whitelist + omit-undefined the request body so PATCH only sends the keys
+ * the caller actually supplied. Matters for `metadata`: an `undefined` value
+ * would still serialise (after JSON.stringify the key is dropped, but it's
+ * cleaner to never include it) and the server would otherwise have to
+ * disambiguate "not patched" from "patched to {}".
+ */
+function buildScopeRequestBody(req) {
+    const out = {};
+    if ("name" in req && req.name !== undefined)
+        out.name = req.name;
+    if (req.displayName !== undefined)
+        out.displayName = req.displayName;
+    if (req.streamLabel !== undefined)
+        out.streamLabel = req.streamLabel;
+    if (req.metadata !== undefined)
+        out.metadata = req.metadata;
+    return out;
+}
 //# sourceMappingURL=scopes.js.map

package/dist/internal/scopes.js.map

@@ -1 +1 @@
-{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../src/internal/scopes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAMjD,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IACtD,IAAI,CAAC,CAAS,IAAsB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,GAAG,CAAC,CAAS,EAAE,CAAS,IAAoB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,MAAM,CAAC,CAAS,EAAE,GAAuB;QACvC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAyC,EAAE,CAAC,CAAC;IAC1G,CAAC;IACD,MAAM,CAAC,CAAS,EAAE,CAAS,EAAE,GAAuB;QAClD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,GAAyC,EAAE,CAAC,CAAC;IAC7G,CAAC;IACD,MAAM,CAAC,CAAS,EAAE,CAAS;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;CACF"}
+{"version":3,"file":"scopes.js","sourceRoot":"","sources":["../../src/internal/scopes.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAuBjD,MAAM,OAAO,MAAM;IACY;IAA7B,YAA6B,IAAqB;QAArB,SAAI,GAAJ,IAAI,CAAiB;IAAG,CAAC;IACtD,IAAI,CAAC,CAAS,IAAsB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,GAAG,CAAC,CAAS,EAAE,CAAS,IAAoB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClG,MAAM,CAAC,CAAS,EAAE,GAAuB;QACvC,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;YACjD,IAAI,EAAE,qBAAqB,CAAC,GAAG,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,CAAS,EAAE,CAAS,EAAE,GAAuB;QAClD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE;YACpD,IAAI,EAAE,qBAAqB,CAAC,GAAG,CAAC;SACjC,CAAC,CAAC;IACL,CAAC;IACD,MAAM,CAAC,CAAS,EAAE,CAAS;QACzB,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;CACF;AAED;;;;;;GAMG;AACH,SAAS,qBAAqB,CAC5B,GAA4C;IAE5C,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,IAAI,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS;QAAE,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;IACjE,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IACrE,IAAI,GAAG,CAAC,WAAW,KAAK,SAAS;QAAE,GAAG,CAAC,WAAW,GAAG,GAAG,CAAC,WAAW,CAAC;IACrE,IAAI,GAAG,CAAC,QAAQ,KAAK,SAAS;QAAE,GAAG,CAAC,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC5D,OAAO,GAAG,CAAC;AACb,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@cef-ai/vault-sdk",
-  "version": "0.1.0",
+  "version": "0.3.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",
@@ -26,7 +26,13 @@
     "@polkadot/util": "^10.4.2",
     "@polkadot/util-crypto": "^10.4.2"
   },
+  "optionalDependencies": {
+    "@cere-ddc-sdk/blockchain": "^2.16.1",
+    "@cere-ddc-sdk/ddc-client": "^2.16.1"
+  },
   "devDependencies": {
+    "@cere-ddc-sdk/blockchain": "^2.16.1",
+    "@cere-ddc-sdk/ddc-client": "^2.16.1",
     "@types/node": "^20.11.0",
     "typescript": "^5.4.0",
     "vitest": "^1.5.0"