@chipi-stack/backend 14.11.0 → 14.12.1

package/README.md

@@ -43,6 +43,56 @@ const tx = await sdk.transfer({
 });
 ```
 
+## Confirming a transaction
+
+Every gasless write returns a transaction hash and nothing else, so
+`waitForTransaction` answers the two questions that follow: did it succeed, and
+what did it emit.
+
+```typescript
+import { waitForTransaction } from "@chipi-stack/backend";
+
+const receipt = await waitForTransaction(tx);
+
+if (!receipt.success) {
+  throw new Error(receipt.revertReason ?? "reverted on chain");
+}
+
+// Raw events, decode against your own ABI.
+const transferred = receipt.events.filter((e) => e.from_address === USDC);
+```
+
+A revert comes back as a **result** (`success: false` plus `revertReason`), not
+a throw, because a revert is a normal outcome you branch on. Only "we do not
+know yet" throws, meaning a timeout or transport failure, where retrying is the
+correct response.
+
+Options: `nodeUrl`, `retryIntervalMs` (default 3000) and `timeoutMs`
+(default 300000). `nodeUrl` is your preferred endpoint rather than the only one
+tried, since reading a receipt is idempotent and falls through the RPC chain.
+
+## Treasuries
+
+`sdk.treasury` drives a SHHH multisig from your own server. All three below need
+a `sk_`, so keep them server-side.
+
+```typescript
+// Discover a treasury instead of pinning its id in an env var.
+const { items } = await sdk.treasury.list();
+const ops = items.find((t) => t.name === "Ops Treasury");
+
+// Require more signatures to borrow than to repay.
+await sdk.treasury.setPolicy(ops.id, { sensitiveQuorum: 3 });
+const policy = await sdk.treasury.getPolicy(ops.id);
+
+// A transport bound to one treasury + owner, wireable into chipi-react's hooks.
+const transport = sdk.treasury.forTreasury({ treasuryId: ops.id, ownerPubkey });
+```
+
+A quorum can only **raise** `requiredApprovals` above the wallet's on-chain
+threshold. The chain is the hard floor, so a quorum below it produces proposals
+that reach approved and then revert at execute.
+
 ## What you can ship
 
 - **Wallet-as-a-service APIs** — provision and manage wallets for your users from your backend

package/dist/index.d.mts

@@ -157,7 +157,9 @@ declare class ChipiSessions {
      * 1. Generated via `createSessionKey()`
      * 2. Registered on-chain via `addSessionKeyToContract()`
      *
-     * CHIPI wallets only - will throw if wallet type is not CHIPI.
+     * CHIPI v29 and SHHH V8.4 only: both embed the SNIP-163 sessions
+     * component. Throws for any other wallet type, notably READY (Argent X),
+     * which does not. See `validateWalletSupportsSessions`.
      *
      * @param params - Session execution parameters
      * @param bearerToken - Authentication token
@@ -418,6 +420,31 @@ interface ListTreasuriesResult {
     limit: number;
     hasMore: boolean;
 }
+/**
+ * Risk-tier quorum policy for one treasury.
+ *
+ * A proposal filed with `risk: "ROUTINE" | "SENSITIVE"` gets its
+ * `requiredApprovals` overridden server-side from the matching quorum, so you
+ * can require more signatures for `borrow` than for `repay` without changing
+ * the wallet's on-chain threshold.
+ *
+ * `null` means the tier has no policy and the client's `requiredApprovals`
+ * stands.
+ */
+interface TreasuryPolicy {
+    treasuryId: string;
+    name: string;
+    routineQuorum: number | null;
+    sensitiveQuorum: number | null;
+}
+interface SetTreasuryPolicyOptions {
+    /** Omit to leave unchanged. Pass `null` to clear the tier. */
+    routineQuorum?: number | null;
+    /** Omit to leave unchanged. Pass `null` to clear the tier. */
+    sensitiveQuorum?: number | null;
+    /** A `sk_`. Falls back to the SDK's configured `apiSecretKey`. */
+    bearerToken?: string;
+}
 interface ListTreasuriesOptions {
     /** 1-based. Defaults to 1 server-side. */
     page?: number;
@@ -494,6 +521,34 @@ declare class ChipiTreasury {
      * ```
      */
     list(options?: ListTreasuriesOptions): Promise<ListTreasuriesResult>;
+    /**
+     * Read a treasury's risk-tier quorum policy (`sk_`).
+     */
+    getPolicy(treasuryId: string, options?: {
+        bearerToken?: string;
+    }): Promise<TreasuryPolicy>;
+    /**
+     * Set a treasury's risk-tier quorums (`sk_`).
+     *
+     * An omitted tier is left unchanged; passing `null` clears it. Configuring
+     * this used to require the dashboard, so an integrator driving governance
+     * from their own server could see a quorum applied to a proposal but never
+     * choose it.
+     *
+     * IMPORTANT: a quorum can only RAISE `requiredApprovals` above the wallet's
+     * on-chain threshold. The chain is the hard floor, so a quorum set below it
+     * produces proposals that reach `APPROVED` here and then revert at execute.
+     *
+     * Server-only: it needs a `sk_`.
+     *
+     * @example
+     * ```typescript
+     * // Founding a pool and borrowing need 3 owners; repaying needs the
+     * // wallet's own threshold.
+     * await sdk.treasury.setPolicy(treasuryId, { sensitiveQuorum: 3 });
+     * ```
+     */
+    setPolicy(treasuryId: string, options?: SetTreasuryPolicyOptions): Promise<TreasuryPolicy>;
     /**
      * Build a {@link TreasuryTransport} for one treasury + owner. Wire the
      * returned object directly into chipi-react's `useProposeAction` /
@@ -891,6 +946,81 @@ declare const signTypedDataArray: ({ params, }: {
     params: SignTypedDataParams;
 }) => Promise<string[]>;
 
+/**
+ * Wait for a Starknet transaction and report what happened, without throwing
+ * on an on-chain revert.
+ *
+ * Every gasless write in this SDK returns a transaction hash and nothing else,
+ * so integrators were each writing the same receipt-polling loop to answer two
+ * questions: did it actually succeed, and what events did it emit. Getting that
+ * loop wrong is expensive in a money flow. A revert that reads as success
+ * double-credits a ledger; a timeout treated as failure strands a confirmed
+ * transfer.
+ *
+ * The contract here is deliberately narrow: a REVERTED transaction is a
+ * RESULT, not an exception, because a revert is a normal outcome your code
+ * must branch on. Exceptions are reserved for "we do not know yet": a timeout
+ * or a transport failure, where retrying is the correct response and treating
+ * it as failure would be wrong.
+ */
+/** One raw event from the receipt. Decode against your own ABI. */
+interface ContractEventLog {
+    /** Emitting contract address. Filter on this before matching keys. */
+    from_address: string;
+    /** Indexed fields. `keys[0]` is the selector of the event name. */
+    keys: string[];
+    /** Non-indexed fields, in declaration order. */
+    data: string[];
+}
+interface WaitForTransactionResult {
+    transactionHash: string;
+    /** True only for an accepted, non-reverted transaction. */
+    success: boolean;
+    /** Raw `execution_status` from the node, when it reported one. */
+    executionStatus?: string;
+    /** Raw `finality_status` from the node, when it reported one. */
+    finalityStatus?: string;
+    /** Present when `success` is false and the node gave a reason. */
+    revertReason?: string;
+    /** Empty on a revert: reverted transactions emit no events. */
+    events: ContractEventLog[];
+    blockNumber?: number;
+}
+interface WaitForTransactionOptions {
+    /**
+     * Preferred endpoint. It is the caller's slot in the ordered RPC chain, not
+     * the only endpoint tried: reading a receipt is idempotent, so a transport
+     * failure falls through to the next endpoint rather than aborting the wait.
+     * Defaults to the endpoint the SDK already uses for CHIPI wallets.
+     */
+    nodeUrl?: string;
+    /** Poll interval. Default 3000ms, roughly Starknet's block cadence. */
+    retryIntervalMs?: number;
+    /** Total budget before giving up. Default 300000ms (5 minutes). */
+    timeoutMs?: number;
+}
+/**
+ * Poll until `transactionHash` reaches a terminal state.
+ *
+ * @throws if the timeout elapses before the node sequences the transaction.
+ *         It does NOT throw when the transaction reverted: check `success`.
+ *
+ * @example
+ * ```typescript
+ * const txHash = await sdk.callAnyContract({ params, bearerToken });
+ * const receipt = await sdk.waitForTransaction(txHash);
+ *
+ * if (!receipt.success) {
+ *   throw new Error(receipt.revertReason ?? "reverted on chain");
+ * }
+ *
+ * const created = receipt.events.find(
+ *   (e) => e.from_address === FACTORY && e.keys[0] === POOL_CREATED_SELECTOR
+ * );
+ * ```
+ */
+declare function waitForTransaction(transactionHash: string, options?: WaitForTransactionOptions): Promise<WaitForTransactionResult>;
+
 declare const encryptPrivateKey: (privateKey: string, password: string) => string;
 declare const decryptPrivateKey: (encryptedPrivateKey: string, password: string) => string;
 
@@ -2635,4 +2765,4 @@ declare class ShhhAccount {
  */
 declare function submitViaAccount(funded: Account): ShhhSubmit;
 
-export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, type ApproveBody, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiTreasury, ChipiWallets, type ComputeAddressInput, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, type ExecuteResult, type ForTreasuryConfig, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, type ListTreasuriesOptions, type ListTreasuriesResult, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type MultisigAllowance, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, type ProposeBody, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, ShhhAccount, type ShhhAccountOptions, type ShhhExecuteOptions, type ShhhSignedExecution, type ShhhSubmit, type ShhhX402Wallet, TIMELOCK_SECONDS, type TreasuryProposal, type TreasuryProposalSignature, type TreasurySummary, type TreasuryTransport, VIEW_SELECTORS, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519OwnerPubkeyParam, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191OwnerPubkeyParam, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, signTypedDataArray, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, submitViaAccount, webauthnOwnerId, webauthnOwnerPubkeyParam, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };
+export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, type ApproveBody, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiTreasury, ChipiWallets, type ComputeAddressInput, type ContractEventLog, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, type ExecuteResult, type ForTreasuryConfig, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, type ListTreasuriesOptions, type ListTreasuriesResult, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type MultisigAllowance, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, type ProposeBody, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, type SetTreasuryPolicyOptions, ShhhAccount, type ShhhAccountOptions, type ShhhExecuteOptions, type ShhhSignedExecution, type ShhhSubmit, type ShhhX402Wallet, TIMELOCK_SECONDS, type TreasuryPolicy, type TreasuryProposal, type TreasuryProposalSignature, type TreasurySummary, type TreasuryTransport, VIEW_SELECTORS, type WaitForTransactionOptions, type WaitForTransactionResult, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519OwnerPubkeyParam, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191OwnerPubkeyParam, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, signTypedDataArray, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, submitViaAccount, waitForTransaction, webauthnOwnerId, webauthnOwnerPubkeyParam, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };

package/dist/index.d.ts

@@ -157,7 +157,9 @@ declare class ChipiSessions {
      * 1. Generated via `createSessionKey()`
      * 2. Registered on-chain via `addSessionKeyToContract()`
      *
-     * CHIPI wallets only - will throw if wallet type is not CHIPI.
+     * CHIPI v29 and SHHH V8.4 only: both embed the SNIP-163 sessions
+     * component. Throws for any other wallet type, notably READY (Argent X),
+     * which does not. See `validateWalletSupportsSessions`.
      *
      * @param params - Session execution parameters
      * @param bearerToken - Authentication token
@@ -418,6 +420,31 @@ interface ListTreasuriesResult {
     limit: number;
     hasMore: boolean;
 }
+/**
+ * Risk-tier quorum policy for one treasury.
+ *
+ * A proposal filed with `risk: "ROUTINE" | "SENSITIVE"` gets its
+ * `requiredApprovals` overridden server-side from the matching quorum, so you
+ * can require more signatures for `borrow` than for `repay` without changing
+ * the wallet's on-chain threshold.
+ *
+ * `null` means the tier has no policy and the client's `requiredApprovals`
+ * stands.
+ */
+interface TreasuryPolicy {
+    treasuryId: string;
+    name: string;
+    routineQuorum: number | null;
+    sensitiveQuorum: number | null;
+}
+interface SetTreasuryPolicyOptions {
+    /** Omit to leave unchanged. Pass `null` to clear the tier. */
+    routineQuorum?: number | null;
+    /** Omit to leave unchanged. Pass `null` to clear the tier. */
+    sensitiveQuorum?: number | null;
+    /** A `sk_`. Falls back to the SDK's configured `apiSecretKey`. */
+    bearerToken?: string;
+}
 interface ListTreasuriesOptions {
     /** 1-based. Defaults to 1 server-side. */
     page?: number;
@@ -494,6 +521,34 @@ declare class ChipiTreasury {
      * ```
      */
     list(options?: ListTreasuriesOptions): Promise<ListTreasuriesResult>;
+    /**
+     * Read a treasury's risk-tier quorum policy (`sk_`).
+     */
+    getPolicy(treasuryId: string, options?: {
+        bearerToken?: string;
+    }): Promise<TreasuryPolicy>;
+    /**
+     * Set a treasury's risk-tier quorums (`sk_`).
+     *
+     * An omitted tier is left unchanged; passing `null` clears it. Configuring
+     * this used to require the dashboard, so an integrator driving governance
+     * from their own server could see a quorum applied to a proposal but never
+     * choose it.
+     *
+     * IMPORTANT: a quorum can only RAISE `requiredApprovals` above the wallet's
+     * on-chain threshold. The chain is the hard floor, so a quorum set below it
+     * produces proposals that reach `APPROVED` here and then revert at execute.
+     *
+     * Server-only: it needs a `sk_`.
+     *
+     * @example
+     * ```typescript
+     * // Founding a pool and borrowing need 3 owners; repaying needs the
+     * // wallet's own threshold.
+     * await sdk.treasury.setPolicy(treasuryId, { sensitiveQuorum: 3 });
+     * ```
+     */
+    setPolicy(treasuryId: string, options?: SetTreasuryPolicyOptions): Promise<TreasuryPolicy>;
     /**
      * Build a {@link TreasuryTransport} for one treasury + owner. Wire the
      * returned object directly into chipi-react's `useProposeAction` /
@@ -891,6 +946,81 @@ declare const signTypedDataArray: ({ params, }: {
     params: SignTypedDataParams;
 }) => Promise<string[]>;
 
+/**
+ * Wait for a Starknet transaction and report what happened, without throwing
+ * on an on-chain revert.
+ *
+ * Every gasless write in this SDK returns a transaction hash and nothing else,
+ * so integrators were each writing the same receipt-polling loop to answer two
+ * questions: did it actually succeed, and what events did it emit. Getting that
+ * loop wrong is expensive in a money flow. A revert that reads as success
+ * double-credits a ledger; a timeout treated as failure strands a confirmed
+ * transfer.
+ *
+ * The contract here is deliberately narrow: a REVERTED transaction is a
+ * RESULT, not an exception, because a revert is a normal outcome your code
+ * must branch on. Exceptions are reserved for "we do not know yet": a timeout
+ * or a transport failure, where retrying is the correct response and treating
+ * it as failure would be wrong.
+ */
+/** One raw event from the receipt. Decode against your own ABI. */
+interface ContractEventLog {
+    /** Emitting contract address. Filter on this before matching keys. */
+    from_address: string;
+    /** Indexed fields. `keys[0]` is the selector of the event name. */
+    keys: string[];
+    /** Non-indexed fields, in declaration order. */
+    data: string[];
+}
+interface WaitForTransactionResult {
+    transactionHash: string;
+    /** True only for an accepted, non-reverted transaction. */
+    success: boolean;
+    /** Raw `execution_status` from the node, when it reported one. */
+    executionStatus?: string;
+    /** Raw `finality_status` from the node, when it reported one. */
+    finalityStatus?: string;
+    /** Present when `success` is false and the node gave a reason. */
+    revertReason?: string;
+    /** Empty on a revert: reverted transactions emit no events. */
+    events: ContractEventLog[];
+    blockNumber?: number;
+}
+interface WaitForTransactionOptions {
+    /**
+     * Preferred endpoint. It is the caller's slot in the ordered RPC chain, not
+     * the only endpoint tried: reading a receipt is idempotent, so a transport
+     * failure falls through to the next endpoint rather than aborting the wait.
+     * Defaults to the endpoint the SDK already uses for CHIPI wallets.
+     */
+    nodeUrl?: string;
+    /** Poll interval. Default 3000ms, roughly Starknet's block cadence. */
+    retryIntervalMs?: number;
+    /** Total budget before giving up. Default 300000ms (5 minutes). */
+    timeoutMs?: number;
+}
+/**
+ * Poll until `transactionHash` reaches a terminal state.
+ *
+ * @throws if the timeout elapses before the node sequences the transaction.
+ *         It does NOT throw when the transaction reverted: check `success`.
+ *
+ * @example
+ * ```typescript
+ * const txHash = await sdk.callAnyContract({ params, bearerToken });
+ * const receipt = await sdk.waitForTransaction(txHash);
+ *
+ * if (!receipt.success) {
+ *   throw new Error(receipt.revertReason ?? "reverted on chain");
+ * }
+ *
+ * const created = receipt.events.find(
+ *   (e) => e.from_address === FACTORY && e.keys[0] === POOL_CREATED_SELECTOR
+ * );
+ * ```
+ */
+declare function waitForTransaction(transactionHash: string, options?: WaitForTransactionOptions): Promise<WaitForTransactionResult>;
+
 declare const encryptPrivateKey: (privateKey: string, password: string) => string;
 declare const decryptPrivateKey: (encryptedPrivateKey: string, password: string) => string;
 
@@ -2635,4 +2765,4 @@ declare class ShhhAccount {
  */
 declare function submitViaAccount(funded: Account): ShhhSubmit;
 
-export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, type ApproveBody, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiTreasury, ChipiWallets, type ComputeAddressInput, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, type ExecuteResult, type ForTreasuryConfig, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, type ListTreasuriesOptions, type ListTreasuriesResult, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type MultisigAllowance, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, type ProposeBody, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, ShhhAccount, type ShhhAccountOptions, type ShhhExecuteOptions, type ShhhSignedExecution, type ShhhSubmit, type ShhhX402Wallet, TIMELOCK_SECONDS, type TreasuryProposal, type TreasuryProposalSignature, type TreasurySummary, type TreasuryTransport, VIEW_SELECTORS, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519OwnerPubkeyParam, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191OwnerPubkeyParam, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, signTypedDataArray, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, submitViaAccount, webauthnOwnerId, webauthnOwnerPubkeyParam, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };
+export { ANY_CALLER_FELT, APPLE_ISSUER, type AppleTokenResponse, type ApproveBody, BOOTSTRAP_DOMAIN_SEPARATOR, type BootstrapMessageParams, type BuildBootstrapSignedCallParams, type BuildMigrationCallsParams, ChipiBrowserSDK, ChipiClient, ChipiPaymasterAdapter, ChipiSDK, ChipiServerSDK, ChipiSessions, ChipiSkuPurchases, ChipiSkus, ChipiTransactions, ChipiTreasury, ChipiWallets, type ComputeAddressInput, type ContractEventLog, DEFAULT_OP_EXPIRY_SECONDS, type Eip191Pubkey, type ExecuteResult, type ForTreasuryConfig, ISIGNER_CANONICAL_LABEL, ISIGNER_ID, ISRC9_V2_ID, type JwtAppleSubPubkey, type ListTreasuriesOptions, type ListTreasuriesResult, MAX_OE_VALIDITY_WINDOW_SECONDS, MIN_THRESHOLD_OWNERS, type MultisigAllowance, type NewOwnerInput, OE_DOMAIN_NAME, OE_DOMAIN_REVISION, OE_DOMAIN_VERSION, OP_ADD_OWNER, OP_REMOVE_OWNER, OP_ROTATE_OWNER, OP_SET_THRESHOLD, type OutsideExecution, type OwnerRole, type ProposeBody, ROLE_GUARDIAN, ROLE_OWNER, SIG_VERSION_V1_HEX_ASCII, SIG_VERSION_V2_SNIP12, SIG_VERSION_V2_THRESHOLD, STARKNET_MESSAGE_PREFIX, type SetTreasuryPolicyOptions, ShhhAccount, type ShhhAccountOptions, type ShhhExecuteOptions, type ShhhSignedExecution, type ShhhSubmit, type ShhhX402Wallet, TIMELOCK_SECONDS, type TreasuryPolicy, type TreasuryProposal, type TreasuryProposalSignature, type TreasurySummary, type TreasuryTransport, VIEW_SELECTORS, type WaitForTransactionOptions, type WaitForTransactionResult, type WebAuthnPubkey, X402Facilitator, type X402FacilitatorCreateOptions, type X402MiddlewareConfig, type X402MiddlewareFlatConfig, X402ShhhClient, type X402ShhhClientConfig, assertValidV2Snip12Envelope, buildBootstrapSignedCall, buildCancelPendingOpCall, buildCancelRecoveryCall, buildEd25519Envelope, buildEd25519EnvelopeFromSignature, buildEip191EnvelopeFromPrivateKey, buildEip191EnvelopeFromSignature, buildExecuteAddOwnerCall, buildExecuteRemoveOwnerCall, buildExecuteRotateOwnerCall, buildExecuteSetThresholdCall, buildFinalizeRecoveryCall, buildInitiateRecoveryCall, buildJwtAppleSubEnvelopeFromTestKey, buildJwtAppleSubEnvelopeFromTokenResponse, buildMigrationCalls, buildOutsideExecution, buildProposeAddOwnerCall, buildProposeRemoveOwnerCall, buildProposeRotateOwnerCall, buildProposeSetThresholdCall, buildStarkEnvelope, buildThresholdEnvelope, buildWebAuthnEnvelopeFromAssertion, buildWebAuthnEnvelopeFromPrivateKey, byteArrayToFelts, computeAddressSalt, computeBootstrapMessage, computeISignerId, computeOeHash, computeShhhAddress, computeSnip12Hash, decryptPrivateKey, ed25519OwnerId, ed25519OwnerPubkeyParam, ed25519PubkeyFelts, ed25519SignedBytes, eip191OwnerId, eip191OwnerPubkeyParam, eip191PubkeyFelts, encryptPrivateKey, estimateThresholdGasOverhead, executeShhhSponsoredRaw, hashCall, hashCalls, hashOutsideExecutionStruct, hashStarknetDomain, isReadyToExecute, jwtAppleSubHash, jwtAppleSubOwnerId, jwtAppleSubPubkeyFelts, labelToFelt, locateSubClaim, messageHashToNonceB64url, ownerCommitment, parseAppleIdToken, parseDerEcdsaSignature, parseEip191Signature, parseThresholdEnvelope, resolveShhhChainId, secondsUntilExecutable, serializeExecuteFromOutsideV2Calldata, signBootstrapMessage, signTypedData, signTypedDataArray, snip12HashToHexAsciiBytes, starkOwnerId, starkPubkeyFelts, submitViaAccount, waitForTransaction, webauthnOwnerId, webauthnOwnerPubkeyParam, webauthnPubkeyFelts, wrapV2Snip12Envelope, wrapV2ThresholdEnvelope, x402Middleware };

package/dist/index.js

@@ -966,8 +966,10 @@ var executePaymasterTransaction = async ({
     let walletType = wallet.walletType ?? "READY";
     if (!wallet.walletType) {
       try {
-        const resolveProvider = new starknet.RpcProvider({ nodeUrl: shared.WALLET_RPC_ENDPOINTS.CHIPI });
-        const onChainClassHash = await resolveProvider.getClassHashAt(wallet.publicKey, "latest");
+        const onChainClassHash = await shared.withRpcFallback(
+          (provider2) => provider2.getClassHashAt(wallet.publicKey, "latest"),
+          { fallbackUrl: shared.WALLET_RPC_ENDPOINTS.CHIPI }
+        );
         walletType = shared.getWalletTypeFromClassHash(onChainClassHash) ?? "READY";
       } catch {
       }
@@ -2392,18 +2394,18 @@ var ChipiSessions = class {
   async getSessionData(params) {
     const { walletAddress, sessionPublicKey } = params;
     try {
-      const provider = new starknet.RpcProvider({
-        nodeUrl: shared.WALLET_RPC_ENDPOINTS["CHIPI"]
-      });
       console.log("[ChipiSDK:Session:GetData] Querying session data", {
         walletAddress: walletAddress.slice(0, 15) + "...",
         sessionPubKey: sessionPublicKey.slice(0, 15) + "..."
       });
-      const result = await provider.callContract({
-        contractAddress: walletAddress,
-        entrypoint: shared.SESSION_ENTRYPOINTS.GET_DATA,
-        calldata: [sessionPublicKey]
-      });
+      const result = await shared.withRpcFallback(
+        (provider) => provider.callContract({
+          contractAddress: walletAddress,
+          entrypoint: shared.SESSION_ENTRYPOINTS.GET_DATA,
+          calldata: [sessionPublicKey]
+        }),
+        { fallbackUrl: shared.WALLET_RPC_ENDPOINTS["CHIPI"] }
+      );
       const resultArray = Array.isArray(result) ? result : result.result || [];
       if (resultArray.length < 4) {
         console.warn("[ChipiSDK:Session:GetData] Unexpected response format", {
@@ -2474,7 +2476,9 @@ var ChipiSessions = class {
    * 1. Generated via `createSessionKey()`
    * 2. Registered on-chain via `addSessionKeyToContract()`
    *
-   * CHIPI wallets only - will throw if wallet type is not CHIPI.
+   * CHIPI v29 and SHHH V8.4 only: both embed the SNIP-163 sessions
+   * component. Throws for any other wallet type, notably READY (Argent X),
+   * which does not. See `validateWalletSupportsSessions`.
    *
    * @param params - Session execution parameters
    * @param bearerToken - Authentication token
@@ -2690,19 +2694,19 @@ var ChipiSessions = class {
   async getSpendingPolicy(params) {
     const { walletAddress, sessionPublicKey, token } = params;
     try {
-      const provider = new starknet.RpcProvider({
-        nodeUrl: shared.WALLET_RPC_ENDPOINTS["CHIPI"]
-      });
       console.log("[ChipiSDK:Session:GetSpendingPolicy] Querying spending policy", {
         walletAddress: walletAddress.slice(0, 15) + "...",
         sessionPubKey: sessionPublicKey.slice(0, 15) + "...",
         token: token.slice(0, 15) + "..."
       });
-      const result = await provider.callContract({
-        contractAddress: walletAddress,
-        entrypoint: shared.SESSION_ENTRYPOINTS.GET_SPENDING_POLICY,
-        calldata: [sessionPublicKey, token]
-      });
+      const result = await shared.withRpcFallback(
+        (provider) => provider.callContract({
+          contractAddress: walletAddress,
+          entrypoint: shared.SESSION_ENTRYPOINTS.GET_SPENDING_POLICY,
+          calldata: [sessionPublicKey, token]
+        }),
+        { fallbackUrl: shared.WALLET_RPC_ENDPOINTS["CHIPI"] }
+      );
       const resultArray = Array.isArray(result) ? result : result.result || [];
       if (resultArray.length < 8) {
         console.warn("[ChipiSDK:Session:GetSpendingPolicy] Unexpected response format", {
@@ -2899,6 +2903,47 @@ var ChipiTreasury = class {
     });
     return { ...res, items: res.items ?? [] };
   }
+  /**
+   * Read a treasury's risk-tier quorum policy (`sk_`).
+   */
+  async getPolicy(treasuryId, options = {}) {
+    return this.client.get({
+      endpoint: `${shared.API_ENDPOINTS.TREASURIES}/${treasuryId}/policy`,
+      bearerToken: this.secret(options.bearerToken)
+    });
+  }
+  /**
+   * Set a treasury's risk-tier quorums (`sk_`).
+   *
+   * An omitted tier is left unchanged; passing `null` clears it. Configuring
+   * this used to require the dashboard, so an integrator driving governance
+   * from their own server could see a quorum applied to a proposal but never
+   * choose it.
+   *
+   * IMPORTANT: a quorum can only RAISE `requiredApprovals` above the wallet's
+   * on-chain threshold. The chain is the hard floor, so a quorum set below it
+   * produces proposals that reach `APPROVED` here and then revert at execute.
+   *
+   * Server-only: it needs a `sk_`.
+   *
+   * @example
+   * ```typescript
+   * // Founding a pool and borrowing need 3 owners; repaying needs the
+   * // wallet's own threshold.
+   * await sdk.treasury.setPolicy(treasuryId, { sensitiveQuorum: 3 });
+   * ```
+   */
+  async setPolicy(treasuryId, options = {}) {
+    const { routineQuorum, sensitiveQuorum, bearerToken } = options;
+    const body = {};
+    if (routineQuorum !== void 0) body.routineQuorum = routineQuorum;
+    if (sensitiveQuorum !== void 0) body.sensitiveQuorum = sensitiveQuorum;
+    return this.client.patch({
+      endpoint: `${shared.API_ENDPOINTS.TREASURIES}/${treasuryId}/policy`,
+      bearerToken: this.secret(bearerToken),
+      body
+    });
+  }
   /**
    * Build a {@link TreasuryTransport} for one treasury + owner. Wire the
    * returned object directly into chipi-react's `useProposeAction` /
@@ -3583,6 +3628,49 @@ var ChipiBrowserSDK = class extends ChipiSDK {
   // All methods are inherited from ChipiSDK
   // bearerToken parameter is required for each authenticated request
 };
+var DEFAULT_RETRY_INTERVAL_MS = 3e3;
+var DEFAULT_TIMEOUT_MS = 3e5;
+function isPending(finalityStatus) {
+  return finalityStatus === void 0 || finalityStatus === "RECEIVED" || finalityStatus === "PENDING" || finalityStatus === "PRE_CONFIRMED";
+}
+async function waitForTransaction(transactionHash, options = {}) {
+  const {
+    nodeUrl = shared.WALLET_RPC_ENDPOINTS.CHIPI,
+    retryIntervalMs = DEFAULT_RETRY_INTERVAL_MS,
+    timeoutMs = DEFAULT_TIMEOUT_MS
+  } = options;
+  const deadline = Date.now() + timeoutMs;
+  let lastError;
+  for (; ; ) {
+    try {
+      const receipt = await shared.withRpcFallback(
+        (provider) => provider.getTransactionReceipt(transactionHash),
+        { fallbackUrl: nodeUrl }
+      );
+      if (!isPending(receipt?.finality_status)) {
+        const reverted = receipt.execution_status === "REVERTED";
+        return {
+          transactionHash,
+          success: !reverted,
+          executionStatus: receipt.execution_status,
+          finalityStatus: receipt.finality_status,
+          ...reverted ? { revertReason: receipt.revert_reason ?? "reverted on chain" } : {},
+          events: receipt.events ?? [],
+          ...receipt.block_number !== void 0 ? { blockNumber: receipt.block_number } : {}
+        };
+      }
+    } catch (err) {
+      lastError = err;
+    }
+    if (Date.now() + retryIntervalMs >= deadline) {
+      const detail = lastError instanceof Error ? `: ${lastError.message}` : "";
+      throw new Error(
+        `Timed out after ${timeoutMs}ms waiting for ${transactionHash}${detail}. The transaction may still land; re-check before treating it as failed.`
+      );
+    }
+    await new Promise((resolve) => setTimeout(resolve, retryIntervalMs));
+  }
+}
 
 // src/index.ts
 init_encryption2();
@@ -4911,6 +4999,7 @@ exports.snip12HashToHexAsciiBytes = snip12HashToHexAsciiBytes;
 exports.starkOwnerId = starkOwnerId;
 exports.starkPubkeyFelts = starkPubkeyFelts;
 exports.submitViaAccount = submitViaAccount;
+exports.waitForTransaction = waitForTransaction;
 exports.webauthnOwnerId = webauthnOwnerId;
 exports.webauthnOwnerPubkeyParam = webauthnOwnerPubkeyParam;
 exports.webauthnPubkeyFelts = webauthnPubkeyFelts;