@chipi-stack/backend 14.10.1 → 14.12.0

package/README.md

@@ -43,6 +43,56 @@ const tx = await sdk.transfer({
 });
 ```
 
+## Confirming a transaction
+
+Every gasless write returns a transaction hash and nothing else, so
+`waitForTransaction` answers the two questions that follow: did it succeed, and
+what did it emit.
+
+```typescript
+import { waitForTransaction } from "@chipi-stack/backend";
+
+const receipt = await waitForTransaction(tx);
+
+if (!receipt.success) {
+  throw new Error(receipt.revertReason ?? "reverted on chain");
+}
+
+// Raw events, decode against your own ABI.
+const transferred = receipt.events.filter((e) => e.from_address === USDC);
+```
+
+A revert comes back as a **result** (`success: false` plus `revertReason`), not
+a throw, because a revert is a normal outcome you branch on. Only "we do not
+know yet" throws, meaning a timeout or transport failure, where retrying is the
+correct response.
+
+Options: `nodeUrl`, `retryIntervalMs` (default 3000) and `timeoutMs`
+(default 300000). `nodeUrl` is your preferred endpoint rather than the only one
+tried, since reading a receipt is idempotent and falls through the RPC chain.
+
+## Treasuries
+
+`sdk.treasury` drives a SHHH multisig from your own server. All three below need
+a `sk_`, so keep them server-side.
+
+```typescript
+// Discover a treasury instead of pinning its id in an env var.
+const { items } = await sdk.treasury.list();
+const ops = items.find((t) => t.name === "Ops Treasury");
+
+// Require more signatures to borrow than to repay.
+await sdk.treasury.setPolicy(ops.id, { sensitiveQuorum: 3 });
+const policy = await sdk.treasury.getPolicy(ops.id);
+
+// A transport bound to one treasury + owner, wireable into chipi-react's hooks.
+const transport = sdk.treasury.forTreasury({ treasuryId: ops.id, ownerPubkey });
+```
+
+A quorum can only **raise** `requiredApprovals` above the wallet's on-chain
+threshold. The chain is the hard floor, so a quorum below it produces proposals
+that reach approved and then revert at execute.
+
 ## What you can ship
 
 - **Wallet-as-a-service APIs** — provision and manage wallets for your users from your backend

package/dist/index.d.mts

@@ -157,7 +157,9 @@ declare class ChipiSessions {
      * 1. Generated via `createSessionKey()`
      * 2. Registered on-chain via `addSessionKeyToContract()`
      *
-     * CHIPI wallets only - will throw if wallet type is not CHIPI.
+     * CHIPI v29 and SHHH V8.4 only: both embed the SNIP-163 sessions
+     * component. Throws for any other wallet type, notably READY (Argent X),
+     * which does not. See `validateWalletSupportsSessions`.
      *
      * @param params - Session execution parameters
      * @param bearerToken - Authentication token
@@ -387,6 +389,72 @@ interface MultisigAllowance {
     canExecuteNow?: boolean;
     [key: string]: unknown;
 }
+/** One treasury as returned by `list()`. Mirrors chipi-back's `OrgTreasury`
+ *  row plus the joined wallet projection. Dates arrive as ISO strings. */
+interface TreasurySummary {
+    /** The id `forTreasury({ treasuryId })` expects. */
+    id: string;
+    organizationId: string;
+    name: string;
+    walletId: string;
+    createdAt: string;
+    updatedAt: string;
+    /** Non-null once archived. Archived treasuries are excluded unless
+     *  `includeArchived` is set. */
+    archivedAt: string | null;
+    routineQuorum: number | null;
+    sensitiveQuorum: number | null;
+    wallet: {
+        id: string;
+        publicKey: string;
+        walletType: string;
+        isDeployed: boolean;
+        chain: string;
+    };
+}
+/** Page of treasuries owned by the api key's org. */
+interface ListTreasuriesResult {
+    items: TreasurySummary[];
+    total: number;
+    page: number;
+    limit: number;
+    hasMore: boolean;
+}
+/**
+ * Risk-tier quorum policy for one treasury.
+ *
+ * A proposal filed with `risk: "ROUTINE" | "SENSITIVE"` gets its
+ * `requiredApprovals` overridden server-side from the matching quorum, so you
+ * can require more signatures for `borrow` than for `repay` without changing
+ * the wallet's on-chain threshold.
+ *
+ * `null` means the tier has no policy and the client's `requiredApprovals`
+ * stands.
+ */
+interface TreasuryPolicy {
+    treasuryId: string;
+    name: string;
+    routineQuorum: number | null;
+    sensitiveQuorum: number | null;
+}
+interface SetTreasuryPolicyOptions {
+    /** Omit to leave unchanged. Pass `null` to clear the tier. */
+    routineQuorum?: number | null;
+    /** Omit to leave unchanged. Pass `null` to clear the tier. */
+    sensitiveQuorum?: number | null;
+    /** A `sk_`. Falls back to the SDK's configured `apiSecretKey`. */
+    bearerToken?: string;
+}
+interface ListTreasuriesOptions {
+    /** 1-based. Defaults to 1 server-side. */
+    page?: number;
+    /** Server clamps to 1..100; defaults to 25. */
+    limit?: number;
+    /** Include archived treasuries. Defaults to false. */
+    includeArchived?: boolean;
+    /** A `sk_`. Falls back to the SDK's configured `apiSecretKey`. */
+    bearerToken?: string;
+}
 /**
  * A transport bound to one treasury + the local owner's public key.
  * Structurally compatible with `@chipi-stack/chipi-react`'s `MultisigTransport`.
@@ -431,6 +499,56 @@ declare class ChipiTreasury {
     private base;
     /** Resolve a `sk_` for the secret-gated reads/execute, or fail loudly. */
     private secret;
+    /**
+     * List every treasury owned by the api key's organization (`sk_`).
+     *
+     * This is the discovery entry point for {@link ForTreasuryConfig.treasuryId}.
+     * The secret key resolves the org server-side, so there is no org id to
+     * pass and nothing to look up in the dashboard first. Use it to recover a
+     * `treasuryId` that fell out of your config, or to avoid pinning one in an
+     * environment variable at all.
+     *
+     * Server-only: it needs a `sk_`, so never call it from the browser.
+     *
+     * @example
+     * ```typescript
+     * const { items } = await sdk.treasury.list();
+     * const ops = items.find((t) => t.name === "Ops Treasury");
+     * const transport = sdk.treasury.forTreasury({
+     *   treasuryId: ops.id,
+     *   ownerPubkey,
+     * });
+     * ```
+     */
+    list(options?: ListTreasuriesOptions): Promise<ListTreasuriesResult>;
+    /**
+     * Read a treasury's risk-tier quorum policy (`sk_`).
+     */
+    getPolicy(treasuryId: string, options?: {
+        bearerToken?: string;
+    }): Promise<TreasuryPolicy>;
+    /**
+     * Set a treasury's risk-tier quorums (`sk_`).
+     *
+     * An omitted tier is left unchanged; passing `null` clears it. Configuring
+     * this used to require the dashboard, so an integrator driving governance
+     * from their own server could see a quorum applied to a proposal but never
+     * choose it.
+     *
+     * IMPORTANT: a quorum can only RAISE `requiredApprovals` above the wallet's
+     * on-chain threshold. The chain is the hard floor, so a quorum set below it
+     * produces proposals that reach `APPROVED` here and then revert at execute.
+     *
+     * Server-only: it needs a `sk_`.
+     *
+     * @example
+     * ```typescript
+     * // Founding a pool and borrowing need 3 owners; repaying needs the
+     * // wallet's own threshold.
+     * await sdk.treasury.setPolicy(treasuryId, { sensitiveQuorum: 3 });
+     * ```
+     */
+    setPolicy(treasuryId: string, options?: SetTreasuryPolicyOptions): Promise<TreasuryPolicy>;
     /**
      * Build a {@link TreasuryTransport} for one treasury + owner. Wire the
      * returned object directly into chipi-react's `useProposeAction` /
@@ -828,6 +946,81 @@ declare const signTypedDataArray: ({ params, }: {
     params: SignTypedDataParams;
 }) => Promise<string[]>;
 
+/**
+ * Wait for a Starknet transaction and report what happened, without throwing
+ * on an on-chain revert.
+ *
+ * Every gasless write in this SDK returns a transaction hash and nothing else,
+ * so integrators were each writing the same receipt-polling loop to answer two
+ * questions: did it actually succeed, and what events did it emit. Getting that
+ * loop wrong is expensive in a money flow. A revert that reads as success
+ * double-credits a ledger; a timeout treated as failure strands a confirmed
+ * transfer.
+ *
+ * The contract here is deliberately narrow: a REVERTED transaction is a
+ * RESULT, not an exception, because a revert is a normal outcome your code
+ * must branch on. Exceptions are reserved for "we do not know yet": a timeout
+ * or a transport failure, where retrying is the correct response and treating
+ * it as failure would be wrong.
+ */
+/** One raw event from the receipt. Decode against your own ABI. */
+interface ContractEventLog {
+    /** Emitting contract address. Filter on this before matching keys. */
+    from_address: string;
+    /** Indexed fields. `keys[0]` is the selector of the event name. */
+    keys: string[];
+    /** Non-indexed fields, in declaration order. */
+    data: string[];
+}
+interface WaitForTransactionResult {
+    transactionHash: string;
+    /** True only for an accepted, non-reverted transaction. */
+    success: boolean;
+    /** Raw `execution_status` from the node, when it reported one. */
+    executionStatus?: string;
+    /** Raw `finality_status` from the node, when it reported one. */
+    finalityStatus?: string;
+    /** Present when `success` is false and the node gave a reason. */
+    revertReason?: string;
+    /** Empty on a revert: reverted transactions emit no events. */
+    events: ContractEventLog[];
+    blockNumber?: number;
+}
+interface WaitForTransactionOptions {
+    /**
+     * Preferred endpoint. It is the caller's slot in the ordered RPC chain, not
+     * the only endpoint tried: reading a receipt is idempotent, so a transport
+     * failure falls through to the next endpoint rather than aborting the wait.
+     * Defaults to the endpoint the SDK already uses for CHIPI wallets.
+     */
+    nodeUrl?: string;
+    /** Poll interval. Default 3000ms, roughly Starknet's block cadence. */
+    retryIntervalMs?: number;
+    /** Total budget before giving up. Default 300000ms (5 minutes). */
+    timeoutMs?: number;
+}
+/**
+ * Poll until `transactionHash` reaches a terminal state.
+ *
+ * @throws if the timeout elapses before the node sequences the transaction.
+ *         It does NOT throw when the transaction reverted: check `success`.
+ *
+ * @example
+ * ```typescript
+ * const txHash = await sdk.callAnyContract({ params, bearerToken });
+ * const receipt = await sdk.waitForTransaction(txHash);
+ *
+ * if (!receipt.success) {
+ *   throw new Error(receipt.revertReason ?? "reverted on chain");
+ * }
+ *
+ * const created = receipt.events.find(
+ *   (e) => e.from_address === FACTORY && e.keys[0] === POOL_CREATED_SELECTOR
+ * );
+ * ```
+ */
+declare function waitForTransaction(transactionHash: string, options?: WaitForTransactionOptions): Promise<WaitForTransactionResult>;
+
 declare const encryptPrivateKey: (privateKey: string, password: string) => string;
 declare const decryptPrivateKey: (encryptedPrivateKey: string, password: string) => string;
 
@@ -2572,4 +2765,4 @@ declare class ShhhAccount {
  */
 declare function submitViaAccount(funded: Account): ShhhSubmit;
 
-export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, type ApproveBody, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiTreasury, ChipiWallets, type ComputeAddressInput, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, type ExecuteResult, type ForTreasuryConfig, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type MultisigAllowance, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, type ProposeBody, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, ShhhAccount, type ShhhAccountOptions, type ShhhExecuteOptions, type ShhhSignedExecution, type ShhhSubmit, type ShhhX402Wallet, TIMELOCK_SECONDS, type TreasuryProposal, type TreasuryProposalSignature, type TreasuryTransport, VIEW_SELECTORS, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519OwnerPubkeyParam, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191OwnerPubkeyParam, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, signTypedDataArray, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, submitViaAccount, webauthnOwnerId, webauthnOwnerPubkeyParam, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };
+export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, type ApproveBody, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiTreasury, ChipiWallets, type ComputeAddressInput, type ContractEventLog, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, type ExecuteResult, type ForTreasuryConfig, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, type ListTreasuriesOptions, type ListTreasuriesResult, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type MultisigAllowance, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, type ProposeBody, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, type SetTreasuryPolicyOptions, ShhhAccount, type ShhhAccountOptions, type ShhhExecuteOptions, type ShhhSignedExecution, type ShhhSubmit, type ShhhX402Wallet, TIMELOCK_SECONDS, type TreasuryPolicy, type TreasuryProposal, type TreasuryProposalSignature, type TreasurySummary, type TreasuryTransport, VIEW_SELECTORS, type WaitForTransactionOptions, type WaitForTransactionResult, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519OwnerPubkeyParam, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191OwnerPubkeyParam, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, signTypedDataArray, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, submitViaAccount, waitForTransaction, webauthnOwnerId, webauthnOwnerPubkeyParam, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };

package/dist/index.d.ts

@@ -157,7 +157,9 @@ declare class ChipiSessions {
      * 1. Generated via `createSessionKey()`
      * 2. Registered on-chain via `addSessionKeyToContract()`
      *
-     * CHIPI wallets only - will throw if wallet type is not CHIPI.
+     * CHIPI v29 and SHHH V8.4 only: both embed the SNIP-163 sessions
+     * component. Throws for any other wallet type, notably READY (Argent X),
+     * which does not. See `validateWalletSupportsSessions`.
      *
      * @param params - Session execution parameters
      * @param bearerToken - Authentication token
@@ -387,6 +389,72 @@ interface MultisigAllowance {
     canExecuteNow?: boolean;
     [key: string]: unknown;
 }
+/** One treasury as returned by `list()`. Mirrors chipi-back's `OrgTreasury`
+ *  row plus the joined wallet projection. Dates arrive as ISO strings. */
+interface TreasurySummary {
+    /** The id `forTreasury({ treasuryId })` expects. */
+    id: string;
+    organizationId: string;
+    name: string;
+    walletId: string;
+    createdAt: string;
+    updatedAt: string;
+    /** Non-null once archived. Archived treasuries are excluded unless
+     *  `includeArchived` is set. */
+    archivedAt: string | null;
+    routineQuorum: number | null;
+    sensitiveQuorum: number | null;
+    wallet: {
+        id: string;
+        publicKey: string;
+        walletType: string;
+        isDeployed: boolean;
+        chain: string;
+    };
+}
+/** Page of treasuries owned by the api key's org. */
+interface ListTreasuriesResult {
+    items: TreasurySummary[];
+    total: number;
+    page: number;
+    limit: number;
+    hasMore: boolean;
+}
+/**
+ * Risk-tier quorum policy for one treasury.
+ *
+ * A proposal filed with `risk: "ROUTINE" | "SENSITIVE"` gets its
+ * `requiredApprovals` overridden server-side from the matching quorum, so you
+ * can require more signatures for `borrow` than for `repay` without changing
+ * the wallet's on-chain threshold.
+ *
+ * `null` means the tier has no policy and the client's `requiredApprovals`
+ * stands.
+ */
+interface TreasuryPolicy {
+    treasuryId: string;
+    name: string;
+    routineQuorum: number | null;
+    sensitiveQuorum: number | null;
+}
+interface SetTreasuryPolicyOptions {
+    /** Omit to leave unchanged. Pass `null` to clear the tier. */
+    routineQuorum?: number | null;
+    /** Omit to leave unchanged. Pass `null` to clear the tier. */
+    sensitiveQuorum?: number | null;
+    /** A `sk_`. Falls back to the SDK's configured `apiSecretKey`. */
+    bearerToken?: string;
+}
+interface ListTreasuriesOptions {
+    /** 1-based. Defaults to 1 server-side. */
+    page?: number;
+    /** Server clamps to 1..100; defaults to 25. */
+    limit?: number;
+    /** Include archived treasuries. Defaults to false. */
+    includeArchived?: boolean;
+    /** A `sk_`. Falls back to the SDK's configured `apiSecretKey`. */
+    bearerToken?: string;
+}
 /**
  * A transport bound to one treasury + the local owner's public key.
  * Structurally compatible with `@chipi-stack/chipi-react`'s `MultisigTransport`.
@@ -431,6 +499,56 @@ declare class ChipiTreasury {
     private base;
     /** Resolve a `sk_` for the secret-gated reads/execute, or fail loudly. */
     private secret;
+    /**
+     * List every treasury owned by the api key's organization (`sk_`).
+     *
+     * This is the discovery entry point for {@link ForTreasuryConfig.treasuryId}.
+     * The secret key resolves the org server-side, so there is no org id to
+     * pass and nothing to look up in the dashboard first. Use it to recover a
+     * `treasuryId` that fell out of your config, or to avoid pinning one in an
+     * environment variable at all.
+     *
+     * Server-only: it needs a `sk_`, so never call it from the browser.
+     *
+     * @example
+     * ```typescript
+     * const { items } = await sdk.treasury.list();
+     * const ops = items.find((t) => t.name === "Ops Treasury");
+     * const transport = sdk.treasury.forTreasury({
+     *   treasuryId: ops.id,
+     *   ownerPubkey,
+     * });
+     * ```
+     */
+    list(options?: ListTreasuriesOptions): Promise<ListTreasuriesResult>;
+    /**
+     * Read a treasury's risk-tier quorum policy (`sk_`).
+     */
+    getPolicy(treasuryId: string, options?: {
+        bearerToken?: string;
+    }): Promise<TreasuryPolicy>;
+    /**
+     * Set a treasury's risk-tier quorums (`sk_`).
+     *
+     * An omitted tier is left unchanged; passing `null` clears it. Configuring
+     * this used to require the dashboard, so an integrator driving governance
+     * from their own server could see a quorum applied to a proposal but never
+     * choose it.
+     *
+     * IMPORTANT: a quorum can only RAISE `requiredApprovals` above the wallet's
+     * on-chain threshold. The chain is the hard floor, so a quorum set below it
+     * produces proposals that reach `APPROVED` here and then revert at execute.
+     *
+     * Server-only: it needs a `sk_`.
+     *
+     * @example
+     * ```typescript
+     * // Founding a pool and borrowing need 3 owners; repaying needs the
+     * // wallet's own threshold.
+     * await sdk.treasury.setPolicy(treasuryId, { sensitiveQuorum: 3 });
+     * ```
+     */
+    setPolicy(treasuryId: string, options?: SetTreasuryPolicyOptions): Promise<TreasuryPolicy>;
     /**
      * Build a {@link TreasuryTransport} for one treasury + owner. Wire the
      * returned object directly into chipi-react's `useProposeAction` /
@@ -828,6 +946,81 @@ declare const signTypedDataArray: ({ params, }: {
     params: SignTypedDataParams;
 }) => Promise<string[]>;
 
+/**
+ * Wait for a Starknet transaction and report what happened, without throwing
+ * on an on-chain revert.
+ *
+ * Every gasless write in this SDK returns a transaction hash and nothing else,
+ * so integrators were each writing the same receipt-polling loop to answer two
+ * questions: did it actually succeed, and what events did it emit. Getting that
+ * loop wrong is expensive in a money flow. A revert that reads as success
+ * double-credits a ledger; a timeout treated as failure strands a confirmed
+ * transfer.
+ *
+ * The contract here is deliberately narrow: a REVERTED transaction is a
+ * RESULT, not an exception, because a revert is a normal outcome your code
+ * must branch on. Exceptions are reserved for "we do not know yet": a timeout
+ * or a transport failure, where retrying is the correct response and treating
+ * it as failure would be wrong.
+ */
+/** One raw event from the receipt. Decode against your own ABI. */
+interface ContractEventLog {
+    /** Emitting contract address. Filter on this before matching keys. */
+    from_address: string;
+    /** Indexed fields. `keys[0]` is the selector of the event name. */
+    keys: string[];
+    /** Non-indexed fields, in declaration order. */
+    data: string[];
+}
+interface WaitForTransactionResult {
+    transactionHash: string;
+    /** True only for an accepted, non-reverted transaction. */
+    success: boolean;
+    /** Raw `execution_status` from the node, when it reported one. */
+    executionStatus?: string;
+    /** Raw `finality_status` from the node, when it reported one. */
+    finalityStatus?: string;
+    /** Present when `success` is false and the node gave a reason. */
+    revertReason?: string;
+    /** Empty on a revert: reverted transactions emit no events. */
+    events: ContractEventLog[];
+    blockNumber?: number;
+}
+interface WaitForTransactionOptions {
+    /**
+     * Preferred endpoint. It is the caller's slot in the ordered RPC chain, not
+     * the only endpoint tried: reading a receipt is idempotent, so a transport
+     * failure falls through to the next endpoint rather than aborting the wait.
+     * Defaults to the endpoint the SDK already uses for CHIPI wallets.
+     */
+    nodeUrl?: string;
+    /** Poll interval. Default 3000ms, roughly Starknet's block cadence. */
+    retryIntervalMs?: number;
+    /** Total budget before giving up. Default 300000ms (5 minutes). */
+    timeoutMs?: number;
+}
+/**
+ * Poll until `transactionHash` reaches a terminal state.
+ *
+ * @throws if the timeout elapses before the node sequences the transaction.
+ *         It does NOT throw when the transaction reverted: check `success`.
+ *
+ * @example
+ * ```typescript
+ * const txHash = await sdk.callAnyContract({ params, bearerToken });
+ * const receipt = await sdk.waitForTransaction(txHash);
+ *
+ * if (!receipt.success) {
+ *   throw new Error(receipt.revertReason ?? "reverted on chain");
+ * }
+ *
+ * const created = receipt.events.find(
+ *   (e) => e.from_address === FACTORY && e.keys[0] === POOL_CREATED_SELECTOR
+ * );
+ * ```
+ */
+declare function waitForTransaction(transactionHash: string, options?: WaitForTransactionOptions): Promise<WaitForTransactionResult>;
+
 declare const encryptPrivateKey: (privateKey: string, password: string) => string;
 declare const decryptPrivateKey: (encryptedPrivateKey: string, password: string) => string;
 
@@ -2572,4 +2765,4 @@ declare class ShhhAccount {
  */
 declare function submitViaAccount(funded: Account): ShhhSubmit;
 
-export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, type ApproveBody, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiTreasury, ChipiWallets, type ComputeAddressInput, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, type ExecuteResult, type ForTreasuryConfig, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type MultisigAllowance, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, type ProposeBody, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, ShhhAccount, type ShhhAccountOptions, type ShhhExecuteOptions, type ShhhSignedExecution, type ShhhSubmit, type ShhhX402Wallet, TIMELOCK_SECONDS, type TreasuryProposal, type TreasuryProposalSignature, type TreasuryTransport, VIEW_SELECTORS, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519OwnerPubkeyParam, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191OwnerPubkeyParam, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, signTypedDataArray, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, submitViaAccount, webauthnOwnerId, webauthnOwnerPubkeyParam, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };
+export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, type ApproveBody, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiTreasury, ChipiWallets, type ComputeAddressInput, type ContractEventLog, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, type ExecuteResult, type ForTreasuryConfig, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, type ListTreasuriesOptions, type ListTreasuriesResult, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type MultisigAllowance, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, type ProposeBody, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, type SetTreasuryPolicyOptions, ShhhAccount, type ShhhAccountOptions, type ShhhExecuteOptions, type ShhhSignedExecution, type ShhhSubmit, type ShhhX402Wallet, TIMELOCK_SECONDS, type TreasuryPolicy, type TreasuryProposal, type TreasuryProposalSignature, type TreasurySummary, type TreasuryTransport, VIEW_SELECTORS, type WaitForTransactionOptions, type WaitForTransactionResult, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519OwnerPubkeyParam, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191OwnerPubkeyParam, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, signTypedDataArray, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, submitViaAccount, waitForTransaction, webauthnOwnerId, webauthnOwnerPubkeyParam, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };