@coinlist-co/react 0.9.0 → 0.10.1

package/dist/server/index.d.cts

@@ -1,4 +1,4 @@
-import { A as AuthorizationCode, d as CodeVerifier, H as OAuthSession, I as ClientCredentialsOAuth, f as OAuthAccessToken, g as Offer, P as PaginationParams, h as PaginatedResponse, O as OfferId, i as OfferDetail, j as Participation, k as ParticipationsPaginationParams, l as ParticipationId, m as CreateParticipationParams, n as CreateWalletOwnershipChallengeParams, W as WalletOwnershipChallenge, o as ConnectExternalWalletParams, p as OfferOptionAddress, q as OfferOptionId, r as OfferOptionAddressId, R as Requirement, s as RequirementStatusInfo, t as Pii, D as DocumentType, u as DocumentSubmission, C as CoinListSwapNamespace, K as KycLevelName, v as KycToken, e as Config, J as ClientSecret } from '../requirement-C2w45Q11.cjs';
+import { h as AuthorizationCode, i as CodeVerifier, I as OAuthSession, J as ClientCredentialsOAuth, k as OAuthAccessToken, l as Offer, m as PaginationParams, n as PaginatedResponse, O as OfferId, o as OfferDetail, p as CreateWalletOwnershipChallengeParams, W as WalletOwnershipChallenge, q as ConnectExternalWalletParams, r as OfferOptionAddress, g as OfferOptionId, s as OfferOptionAddressId, R as Requirement, t as RequirementStatusInfo, u as Pii, D as DocumentType, v as DocumentSubmission, c as CoinListErc20Namespace, f as CoinListTokenSaleNamespace, C as CoinListSwapNamespace, K as KycLevelName, w as KycToken, j as Config, L as ClientSecret } from '../requirement-oVZA1INj.cjs';
 import 'viem';
 
 interface SessionStore {
@@ -138,30 +138,6 @@ interface CoinListServer {
      * nor `clientCreds`.
      */
     fetchOfferDetails(id: OfferId, clientCreds?: ClientCredentialsOAuth): Promise<OfferDetail>;
-    /**
-     * Fetches all participations by iterating through every paginated response.
-     *
-     * Throws {@link NotAuthenticatedError} if the user is not authenticated.
-     */
-    fetchParticipations(offerId?: OfferId): Promise<Participation[]>;
-    /**
-     * Fetches a single page of participations, optionally filtered by offer.
-     *
-     * Throws {@link NotAuthenticatedError} if the user is not authenticated.
-     */
-    fetchParticipationsPage(params: ParticipationsPaginationParams): Promise<PaginatedResponse<Participation>>;
-    /**
-     * Fetches a participation by id.
-     *
-     * Throws {@link NotAuthenticatedError} if the user is not authenticated.
-     */
-    fetchParticipation(id: ParticipationId): Promise<Participation>;
-    /**
-     * Creates a participation.
-     *
-     * Throws {@link NotAuthenticatedError} if the user is not authenticated.
-     */
-    createParticipation(params: CreateParticipationParams): Promise<Participation>;
     /**
      * Creates a single-use wallet-ownership challenge for the given wallet and
      * chain. The user signs the returned {@link WalletOwnershipChallenge.message}
@@ -227,8 +203,25 @@ interface CoinListServer {
      */
     submitDocument(documentType: DocumentType, fields: Record<string, string>): Promise<DocumentSubmission>;
     /**
-     * On-chain swap operations: quoting a swap, reading swap-contract state and
-     * token allowances, and proving/allow-listing wallet ownership — e.g.
+     * Generic ERC-20 reads (token allowance and balance) — e.g.
+     * `coinlist.erc20.getTokenBalance({ ... })`.
+     *
+     * These methods require a user session and throw
+     * {@link NotAuthenticatedError} if the user is not authenticated.
+     */
+    readonly erc20: CoinListErc20Namespace;
+    /**
+     * Token-sale operations: listing, reading, and recording participations —
+     * e.g. `coinlist.tokenSale.fetchParticipations()`. The on-chain
+     * `executeTokenSale` flow is client-only and is not exposed here.
+     *
+     * These methods require a user session and throw
+     * {@link NotAuthenticatedError} if the user is not authenticated.
+     */
+    readonly tokenSale: CoinListTokenSaleNamespace;
+    /**
+     * On-chain swap operations: quoting a swap, reading swap-contract state, and
+     * proving/allow-listing wallet ownership — e.g.
      * `coinlist.swap.getOutputToken({ contractAddress, chain })`.
      *
      * These methods require a user session and throw

package/dist/server/index.d.ts

@@ -1,4 +1,4 @@
-import { A as AuthorizationCode, d as CodeVerifier, H as OAuthSession, I as ClientCredentialsOAuth, f as OAuthAccessToken, g as Offer, P as PaginationParams, h as PaginatedResponse, O as OfferId, i as OfferDetail, j as Participation, k as ParticipationsPaginationParams, l as ParticipationId, m as CreateParticipationParams, n as CreateWalletOwnershipChallengeParams, W as WalletOwnershipChallenge, o as ConnectExternalWalletParams, p as OfferOptionAddress, q as OfferOptionId, r as OfferOptionAddressId, R as Requirement, s as RequirementStatusInfo, t as Pii, D as DocumentType, u as DocumentSubmission, C as CoinListSwapNamespace, K as KycLevelName, v as KycToken, e as Config, J as ClientSecret } from '../requirement-C2w45Q11.js';
+import { h as AuthorizationCode, i as CodeVerifier, I as OAuthSession, J as ClientCredentialsOAuth, k as OAuthAccessToken, l as Offer, m as PaginationParams, n as PaginatedResponse, O as OfferId, o as OfferDetail, p as CreateWalletOwnershipChallengeParams, W as WalletOwnershipChallenge, q as ConnectExternalWalletParams, r as OfferOptionAddress, g as OfferOptionId, s as OfferOptionAddressId, R as Requirement, t as RequirementStatusInfo, u as Pii, D as DocumentType, v as DocumentSubmission, c as CoinListErc20Namespace, f as CoinListTokenSaleNamespace, C as CoinListSwapNamespace, K as KycLevelName, w as KycToken, j as Config, L as ClientSecret } from '../requirement-oVZA1INj.js';
 import 'viem';
 
 interface SessionStore {
@@ -138,30 +138,6 @@ interface CoinListServer {
      * nor `clientCreds`.
      */
     fetchOfferDetails(id: OfferId, clientCreds?: ClientCredentialsOAuth): Promise<OfferDetail>;
-    /**
-     * Fetches all participations by iterating through every paginated response.
-     *
-     * Throws {@link NotAuthenticatedError} if the user is not authenticated.
-     */
-    fetchParticipations(offerId?: OfferId): Promise<Participation[]>;
-    /**
-     * Fetches a single page of participations, optionally filtered by offer.
-     *
-     * Throws {@link NotAuthenticatedError} if the user is not authenticated.
-     */
-    fetchParticipationsPage(params: ParticipationsPaginationParams): Promise<PaginatedResponse<Participation>>;
-    /**
-     * Fetches a participation by id.
-     *
-     * Throws {@link NotAuthenticatedError} if the user is not authenticated.
-     */
-    fetchParticipation(id: ParticipationId): Promise<Participation>;
-    /**
-     * Creates a participation.
-     *
-     * Throws {@link NotAuthenticatedError} if the user is not authenticated.
-     */
-    createParticipation(params: CreateParticipationParams): Promise<Participation>;
     /**
      * Creates a single-use wallet-ownership challenge for the given wallet and
      * chain. The user signs the returned {@link WalletOwnershipChallenge.message}
@@ -227,8 +203,25 @@ interface CoinListServer {
      */
     submitDocument(documentType: DocumentType, fields: Record<string, string>): Promise<DocumentSubmission>;
     /**
-     * On-chain swap operations: quoting a swap, reading swap-contract state and
-     * token allowances, and proving/allow-listing wallet ownership — e.g.
+     * Generic ERC-20 reads (token allowance and balance) — e.g.
+     * `coinlist.erc20.getTokenBalance({ ... })`.
+     *
+     * These methods require a user session and throw
+     * {@link NotAuthenticatedError} if the user is not authenticated.
+     */
+    readonly erc20: CoinListErc20Namespace;
+    /**
+     * Token-sale operations: listing, reading, and recording participations —
+     * e.g. `coinlist.tokenSale.fetchParticipations()`. The on-chain
+     * `executeTokenSale` flow is client-only and is not exposed here.
+     *
+     * These methods require a user session and throw
+     * {@link NotAuthenticatedError} if the user is not authenticated.
+     */
+    readonly tokenSale: CoinListTokenSaleNamespace;
+    /**
+     * On-chain swap operations: quoting a swap, reading swap-contract state, and
+     * proving/allow-listing wallet ownership — e.g.
      * `coinlist.swap.getOutputToken({ contractAddress, chain })`.
      *
      * These methods require a user session and throw

package/dist/server/index.js

@@ -4,30 +4,26 @@ import {
   HttpError,
   PUBLIC_API_BASE_URL,
   createKycToken,
-  createParticipation,
   fetchOfferDetails,
   fetchOfferRequirements,
   fetchOffers,
   fetchOffersPage,
-  fetchParticipation,
-  fetchParticipations,
-  fetchParticipationsPage,
   fetchPii,
   fetchRequirementStatuses,
   submitDocument
-} from "../chunk-MKCOK3DF.js";
+} from "../chunk-TBU3EBNM.js";
 import {
   ClientCredentialsOAuth,
-  OAuthSession
-} from "../chunk-AAER5LOL.js";
-import {
+  Erc20NamespaceImpl,
   NotAuthenticatedError,
+  OAuthSession,
   SwapNamespaceImpl,
+  TokenSaleNamespaceImpl,
   connectExternalWallet,
   createWalletOwnershipChallenge,
   listOptionAddresses,
   removeOptionAddress
-} from "../chunk-Z2HAA2TI.js";
+} from "../chunk-UOHD7US2.js";
 
 // src/server/api/api.server.ts
 var Api = class {
@@ -66,10 +62,13 @@ var CoinListServerImpl = class {
       // than re-sending with the same expired token and wasting a round-trip.
       (refresh) => refresh && !this._config.sessionStore.setSession ? Promise.resolve(null) : this.accessToken()
     );
-    this.swap = new SwapNamespaceImpl({
+    const ctx = {
       api: this.api,
       ensureUserAuthenticated: () => this.ensureUserAuthenticated()
-    });
+    };
+    this.erc20 = new Erc20NamespaceImpl(ctx);
+    this.tokenSale = new TokenSaleNamespaceImpl(ctx);
+    this.swap = new SwapNamespaceImpl(ctx);
   }
   async completeOAuth(code, codeVerifier) {
     const sessionStore = this._config.sessionStore;
@@ -190,22 +189,6 @@ var CoinListServerImpl = class {
     await this.ensureAuthenticated(clientCreds);
     return fetchOfferDetails(this.api, id, clientCreds);
   }
-  async fetchParticipations(offerId) {
-    await this.ensureUserAuthenticated();
-    return fetchParticipations(this.api, offerId);
-  }
-  async fetchParticipationsPage(params) {
-    await this.ensureUserAuthenticated();
-    return fetchParticipationsPage(this.api, params);
-  }
-  async fetchParticipation(id) {
-    await this.ensureUserAuthenticated();
-    return fetchParticipation(this.api, id);
-  }
-  async createParticipation(params) {
-    await this.ensureUserAuthenticated();
-    return createParticipation(this.api, params);
-  }
   async createWalletOwnershipChallenge(params) {
     await this.ensureUserAuthenticated();
     return createWalletOwnershipChallenge(this.api, params);

package/dist/server/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/server/api/api.server.ts","../../src/server/errors.ts","../../src/server/coinlist.server.ts"],"sourcesContent":["import { AuthenticatedApiClient } from '@/shared/api/authenticated-api-client';\nimport type { HttpClientConfig, HttpRequest } from '@/shared/api/http';\nimport type { OAuthAccessToken } from '@/shared/types/oauth-session';\n\nexport class Api {\n  private readonly client: AuthenticatedApiClient;\n\n  constructor(\n    config: HttpClientConfig,\n    fetchAccessToken: (refresh: boolean) => Promise<OAuthAccessToken | null>\n  ) {\n    this.client = new AuthenticatedApiClient(config, fetchAccessToken);\n  }\n\n  async send<TResponse>(request: HttpRequest): Promise<TResponse> {\n    return this.client.send<TResponse>(request);\n  }\n}\n","export class WritableSessionStoreRequiredError extends Error {\n  constructor(\n    message = 'This operation requires a writable SessionStore. Provide a `setSession` implementation in your SessionStore to persist or clear OAuth sessions.'\n  ) {\n    super(message);\n    this.name = 'WritableSessionStoreRequiredError';\n  }\n}\n","import { Api } from '@/server/api/api.server';\nimport { WritableSessionStoreRequiredError } from '@/server/errors';\nimport {\n  API_VERSION,\n  PUBLIC_API_BASE_URL,\n} from '@/shared/api/frontline/config';\nimport * as documentsApi from '@/shared/api/frontline/documents';\nimport * as kycApi from '@/shared/api/frontline/kyc';\nimport * as offersApi from '@/shared/api/frontline/offers';\nimport * as participationsApi from '@/shared/api/frontline/participations';\nimport * as piiApi from '@/shared/api/frontline/pii';\nimport * as requirementsApi from '@/shared/api/frontline/requirements';\nimport * as walletConnectApi from '@/shared/api/frontline/wallet-connect';\nimport { HttpError } from '@/shared/api/http';\nimport type {\n  PaginatedResponse,\n  PaginationParams,\n} from '@/shared/api/pagination';\nimport {\n  type CoinListSwapNamespace,\n  SwapNamespaceImpl,\n} from '@/shared/core/swap-namespace';\nimport type { Config } from '@/shared/types/config';\nimport type {\n  DocumentSubmission,\n  DocumentType,\n} from '@/shared/types/document-submission';\nimport type { OAuthSessionDto } from '@/shared/types/dto/oauth-session';\nimport { NotAuthenticatedError } from '@/shared/types/errors';\nimport type { KycLevelName, KycToken } from '@/shared/types/kyc';\nimport type {\n  AuthorizationCode,\n  ClientSecret,\n  CodeVerifier,\n} from '@/shared/types/oauth';\nimport {\n  ClientCredentialsOAuth,\n  type OAuthAccessToken,\n  type OAuthRefreshToken,\n  OAuthSession,\n} from '@/shared/types/oauth-session';\nimport type { Offer, OfferId } from '@/shared/types/offer';\nimport type { OfferDetail, OfferOptionId } from '@/shared/types/offer-detail';\nimport type {\n  ConnectExternalWalletParams,\n  OfferOptionAddress,\n  OfferOptionAddressId,\n} from '@/shared/types/offer-option-address';\nimport type {\n  CreateParticipationParams,\n  Participation,\n  ParticipationId,\n  ParticipationsPaginationParams,\n} from '@/shared/types/participation';\nimport type { Pii } from '@/shared/types/pii';\nimport type {\n  Requirement,\n  RequirementStatusInfo,\n} from '@/shared/types/requirement';\nimport type {\n  CreateWalletOwnershipChallengeParams,\n  WalletOwnershipChallenge,\n} from '@/shared/types/wallet-ownership-challenge';\n\n/** Buffer in seconds before expiry to consider token expired for refresh. */\nconst ACCESS_TOKEN_EXPIRY_BUFFER_SECONDS = 60;\n\nexport interface SessionStore {\n  getSession(): Promise<OAuthSession | null>;\n  /**\n   * Persists or clears the OAuth session.\n   *\n   * **Omit this method to create a read-only store.** When absent, the SDK\n   * skips token refresh entirely — no network call is made and no refresh\n   * token is consumed. This is the correct approach for contexts that can read\n   * the session but cannot write it back, such as Next.js Server Components.\n   *\n   * ⚠️ Do **not** implement this as a no-op (`async () => {}`). If the method\n   * is present, the SDK assumes writes succeed: it will fire a token refresh\n   * network call, consume the refresh token, then invoke `setSession` — which\n   * would silently discard the new session and leave the browser holding an\n   * invalidated refresh token. Simply **omit** `setSession` to prevent any\n   * refresh from being attempted.\n   *\n   * {@link CoinListServer.completeOAuth} and {@link CoinListServer.logout}\n   * always require a writable store and throw\n   * {@link WritableSessionStoreRequiredError} if `setSession` is absent.\n   */\n  setSession?(session: OAuthSession | null): Promise<void>;\n}\n\nexport interface ServerConfig extends Config {\n  readonly clientSecret: ClientSecret;\n  readonly sessionStore: SessionStore;\n  /** Buffer in seconds before expiry to consider token expired for refresh. */\n  readonly accessTokenExpiryBufferSeconds?: number;\n  /**\n   * Whether SDK will throw an exception in cases it can be silent.\n   * For example, if token revokation on logout fails.\n   */\n  readonly strict?: boolean;\n}\n\n/**\n * Server-side CoinList SDK client.\n *\n * Operates in one of two modes depending on whether {@link SessionStore}\n * includes a `setSession` implementation:\n *\n * - **Writable store** (`setSession` provided) — full functionality: token\n *   refresh, {@link completeOAuth}, and {@link logout} all work normally.\n *\n * - **Read-only store** (no `setSession`) — token refresh is skipped entirely,\n *   meaning no network call is made and no refresh token is consumed.\n *   {@link completeOAuth} and {@link logout} throw\n *   {@link WritableSessionStoreRequiredError}. {@link accessToken} may return\n *   an expired token (see its docs). Use this mode in execution contexts that\n *   can read the session but cannot write it back, such as Next.js Server\n *   Components.\n */\nexport interface CoinListServer {\n  /**\n   * Exchanges an authorization code for an OAuth session and persists it via\n   * {@link SessionStore.setSession}.\n   *\n   * Throws {@link WritableSessionStoreRequiredError} if the session store does\n   * not provide `setSession`.\n   */\n  completeOAuth(\n    code: AuthorizationCode,\n    codeVerifier: CodeVerifier\n  ): Promise<OAuthSession>;\n\n  /**\n   * Obtains an app-level access token via the OAuth 2.0 `client_credentials`\n   * grant (RFC 6749 §4.4). No user is involved: the token authenticates the\n   * partner application itself and only grants access to app-level resources\n   * such as offers and offer requirements.\n   *\n   * The token is **not** persisted to the {@link SessionStore} and has no\n   * refresh token. It expires at `expiresAt`; once expired, call this method\n   * again to obtain a fresh token — the SDK does not renew it automatically.\n   *\n   * Pass the result to {@link fetchOffers}, {@link fetchOffersPage},\n   * {@link fetchOfferDetails}, or {@link fetchOfferRequirements} to call them\n   * without a user session.\n   */\n  clientCredentialsOAuth(): Promise<ClientCredentialsOAuth>;\n\n  /**\n   * Returns a valid access token for the current session, refreshing it if\n   * it is expired or near expiry.\n   *\n   * **Writable store**: if the token is expired, the SDK exchanges the refresh\n   * token for a new session, persists it, and returns the fresh access token.\n   * Returns `null` if there is no session or the refresh fails.\n   *\n   * **Read-only store** (no `setSession`): refresh is skipped entirely. The\n   * stored token is returned as-is, even if it is expired — a non-null return\n   * value does **not** guarantee the token is accepted by the API. Before\n   * making API calls, check `token.expiresAt > new Date()`. Use a writable\n   * store (e.g. in a Route Handler) when you need the SDK to renew the session\n   * automatically.\n   *\n   * @returns the access token, or `null` if there is no session or the session\n   * could not be refreshed.\n   */\n  accessToken(): Promise<OAuthAccessToken | null>;\n\n  /**\n   * Revokes the current token via POST /oauth/revoke and clears the session.\n   *\n   * Throws {@link WritableSessionStoreRequiredError} if the session store does\n   * not provide `setSession`.\n   */\n  logout(): Promise<void>;\n\n  /**\n   * Fetches all offers by iterating through every paginated response.\n   *\n   * @param clientCreds optional app-level token from\n   * {@link clientCredentialsOAuth}. When provided, no user session is\n   * required; if a user session exists it takes precedence and `clientCreds`\n   * is used as a fallback.\n   *\n   * Throws {@link NotAuthenticatedError} if there is neither a user session\n   * nor `clientCreds`.\n   */\n  fetchOffers(clientCreds?: ClientCredentialsOAuth): Promise<Offer[]>;\n\n  /**\n   * Fetches a single page of offers.\n   *\n   * @param clientCreds optional app-level token from\n   * {@link clientCredentialsOAuth}. When provided, no user session is\n   * required; if a user session exists it takes precedence and `clientCreds`\n   * is used as a fallback.\n   *\n   * Throws {@link NotAuthenticatedError} if there is neither a user session\n   * nor `clientCreds`.\n   */\n  fetchOffersPage(\n    params: PaginationParams,\n    clientCreds?: ClientCredentialsOAuth\n  ): Promise<PaginatedResponse<Offer>>;\n\n  /**\n   * Fetches details for a given offer by its id.\n   *\n   * @param clientCreds optional app-level token from\n   * {@link clientCredentialsOAuth}. When provided, no user session is\n   * required; if a user session exists it takes precedence and `clientCreds`\n   * is used as a fallback.\n   *\n   * Throws {@link NotAuthenticatedError} if there is neither a user session\n   * nor `clientCreds`.\n   */\n  fetchOfferDetails(\n    id: OfferId,\n    clientCreds?: ClientCredentialsOAuth\n  ): Promise<OfferDetail>;\n\n  /**\n   * Fetches all participations by iterating through every paginated response.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  fetchParticipations(offerId?: OfferId): Promise<Participation[]>;\n\n  /**\n   * Fetches a single page of participations, optionally filtered by offer.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  fetchParticipationsPage(\n    params: ParticipationsPaginationParams\n  ): Promise<PaginatedResponse<Participation>>;\n\n  /**\n   * Fetches a participation by id.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  fetchParticipation(id: ParticipationId): Promise<Participation>;\n\n  /**\n   * Creates a participation.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  createParticipation(\n    params: CreateParticipationParams\n  ): Promise<Participation>;\n\n  /**\n   * Creates a single-use wallet-ownership challenge for the given wallet and\n   * chain. The user signs the returned {@link WalletOwnershipChallenge.message}\n   * with their wallet, then passes the signature to\n   * {@link connectExternalWallet}.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  createWalletOwnershipChallenge(\n    params: CreateWalletOwnershipChallengeParams\n  ): Promise<WalletOwnershipChallenge>;\n\n  /**\n   * Connects a proven external wallet to an offer option, using a signature of\n   * a challenge from {@link createWalletOwnershipChallenge}.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  connectExternalWallet(\n    offerId: OfferId,\n    params: ConnectExternalWalletParams\n  ): Promise<OfferOptionAddress>;\n\n  /**\n   * Lists the user's proven wallet bindings for a single offer option.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  listOptionAddresses(\n    offerId: OfferId,\n    offerOptionId: OfferOptionId\n  ): Promise<OfferOptionAddress[]>;\n\n  /**\n   * Removes one of the user's wallet bindings and returns the removed binding.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  removeOptionAddress(\n    offerId: OfferId,\n    addressId: OfferOptionAddressId\n  ): Promise<OfferOptionAddress>;\n\n  /**\n   * Fetches the requirements for all options of a given offer, grouped by option ID.\n   *\n   * @param clientCreds optional app-level token from\n   * {@link clientCredentialsOAuth}. When provided, no user session is\n   * required; if a user session exists it takes precedence and `clientCreds`\n   * is used as a fallback.\n   *\n   * Throws {@link NotAuthenticatedError} if there is neither a user session\n   * nor `clientCreds`.\n   */\n  fetchOfferRequirements(\n    offerId: OfferId,\n    clientCreds?: ClientCredentialsOAuth\n  ): Promise<Record<OfferOptionId, Requirement[]>>;\n\n  /**\n   * Fetches the user's requirement statuses for a given offer.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  fetchRequirementStatuses(offerId: OfferId): Promise<RequirementStatusInfo[]>;\n\n  /**\n   * Fetches the user's PII (tax form pre-fill data) — full legal name, date\n   * of birth, jurisdiction, tax ID, and permanent address for an individual;\n   * or the equivalent entity fields for a company/trust, used to pre-fill a\n   * W-8BEN. Fields the entity hasn't provided are `null`.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  fetchPii(): Promise<Pii>;\n\n  /**\n   * Starts (or resumes) a document signing submission for the given type\n   * (currently only `tax_certification`, e.g. W-8BEN/W-8BEN-E). `fields` are\n   * signing-form values keyed by the document's DocuSeal field names,\n   * forwarded verbatim to Passport to pre-fill the document.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  submitDocument(\n    documentType: DocumentType,\n    fields: Record<string, string>\n  ): Promise<DocumentSubmission>;\n\n  /**\n   * On-chain swap operations: quoting a swap, reading swap-contract state and\n   * token allowances, and proving/allow-listing wallet ownership — e.g.\n   * `coinlist.swap.getOutputToken({ contractAddress, chain })`.\n   *\n   * These methods require a user session and throw\n   * {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  readonly swap: CoinListSwapNamespace;\n\n  /**\n   * Creates a short-lived Sumsub WebSDK access token for the current user so\n   * an identity verification (KYC) flow can be started, e.g. to seed the\n   * client-side `IdentityVerification` component when server-rendering.\n   * `levelName` selects the Sumsub verification level; defaults to the\n   * backend's standard level. `reset` resets the Sumsub applicant first, so\n   * an already-approved level can be executed again (e.g. to update stale\n   * PII).\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  createKycToken(levelName?: KycLevelName, reset?: boolean): Promise<KycToken>;\n}\n\nclass CoinListServerImpl implements CoinListServer {\n  private readonly api: Api;\n  private readonly baseUrl: string;\n\n  private readonly accessTokenExpiryBufferSeconds: number;\n  private readonly strict: boolean;\n  readonly swap: CoinListSwapNamespace;\n\n  constructor(private readonly _config: ServerConfig) {\n    this.baseUrl = _config.baseUrl ?? PUBLIC_API_BASE_URL;\n    this.accessTokenExpiryBufferSeconds =\n      _config.accessTokenExpiryBufferSeconds ??\n      ACCESS_TOKEN_EXPIRY_BUFFER_SECONDS;\n    this.strict = _config.strict ?? false;\n    this.api = new Api(\n      {\n        baseUrl: this.baseUrl,\n        xApiVersion: API_VERSION,\n      },\n      // When refresh=true the renewal middleware has received a 401 and wants a\n      // fresh token. A read-only store cannot persist a new session, so return\n      // null immediately — this tells the middleware to skip the retry rather\n      // than re-sending with the same expired token and wasting a round-trip.\n      (refresh) =>\n        refresh && !this._config.sessionStore.setSession\n          ? Promise.resolve(null)\n          : this.accessToken()\n    );\n    this.swap = new SwapNamespaceImpl({\n      api: this.api,\n      ensureUserAuthenticated: () => this.ensureUserAuthenticated(),\n    });\n  }\n\n  async completeOAuth(\n    code: AuthorizationCode,\n    codeVerifier: CodeVerifier\n  ): Promise<OAuthSession> {\n    const sessionStore = this._config.sessionStore;\n    const setSession = sessionStore.setSession?.bind(sessionStore);\n    if (!setSession) {\n      throw new WritableSessionStoreRequiredError();\n    }\n    const sessionDto = await this.api.send<OAuthSessionDto>({\n      method: 'POST',\n      url: `/oauth/token`,\n      body: {\n        grant_type: 'authorization_code',\n        code,\n        redirect_uri: this._config.redirectUri,\n        client_id: this._config.clientId,\n        client_secret: this._config.clientSecret,\n        code_verifier: codeVerifier,\n      },\n    });\n    const session = OAuthSession.fromDto(sessionDto);\n    await setSession(session);\n    return session;\n  }\n\n  async clientCredentialsOAuth(): Promise<ClientCredentialsOAuth> {\n    const sessionDto = await this.api.send<OAuthSessionDto>({\n      method: 'POST',\n      url: `/oauth/token`,\n      body: {\n        grant_type: 'client_credentials',\n        client_id: this._config.clientId,\n        client_secret: this._config.clientSecret,\n      },\n    });\n    const session = OAuthSession.fromDto(sessionDto);\n    return ClientCredentialsOAuth(session.accessToken);\n  }\n\n  async accessToken(): Promise<OAuthAccessToken | null> {\n    const sessionStore = this._config.sessionStore;\n    const session = await sessionStore.getSession();\n    if (session == null) return null;\n\n    const now = Date.now();\n    const expiresAt = session.accessToken.expiresAt.getTime();\n    const bufferMs = this.accessTokenExpiryBufferSeconds * 1000;\n    if (expiresAt > now + bufferMs) {\n      // Valid access token, return it regardless\n      return session.accessToken;\n    }\n\n    const setSession = sessionStore.setSession?.bind(sessionStore);\n    if (!setSession) {\n      // No write session capabilities => can't refresh!\n      // Return the access token as-is\n      return session.accessToken;\n    } else {\n      return this.refreshSession(session.refreshToken, setSession);\n    }\n  }\n\n  private async refreshSession(\n    refreshToken: OAuthRefreshToken | undefined,\n    setSession: (session: OAuthSession | null) => Promise<void>\n  ): Promise<OAuthAccessToken | null> {\n    if (!refreshToken) {\n      await setSession(null);\n      return null;\n    }\n\n    try {\n      const sessionDto = await this.api.send<OAuthSessionDto>({\n        method: 'POST',\n        url: `/oauth/token`,\n        body: {\n          grant_type: 'refresh_token',\n          refresh_token: refreshToken,\n          client_id: this._config.clientId,\n          client_secret: this._config.clientSecret,\n        },\n      });\n      const newSession = OAuthSession.fromDto(sessionDto);\n      await setSession(newSession);\n      return newSession.accessToken;\n    } catch {\n      await setSession(null);\n      return null;\n    }\n  }\n\n  async logout(): Promise<void> {\n    const sessionStore = this._config.sessionStore;\n    const setSession = sessionStore.setSession?.bind(sessionStore);\n    if (!setSession) {\n      throw new WritableSessionStoreRequiredError();\n    }\n    const session = await sessionStore.getSession();\n    if (session != null) {\n      const tokenToRevoke = session.accessToken.value;\n      try {\n        await this.api.send({\n          method: 'POST',\n          url: `/oauth/revoke`,\n          body: {\n            token: tokenToRevoke,\n            client_id: this._config.clientId,\n            client_secret: this._config.clientSecret,\n          },\n        });\n      } catch (err) {\n        if (err instanceof HttpError) {\n          if (this.strict) {\n            throw err;\n          }\n        } else {\n          throw err;\n        }\n      }\n      // invalidate the session\n      await setSession(null);\n    }\n  }\n\n  async fetchOffers(clientCreds?: ClientCredentialsOAuth): Promise<Offer[]> {\n    await this.ensureAuthenticated(clientCreds);\n    return offersApi.fetchOffers(this.api, clientCreds);\n  }\n\n  async fetchOffersPage(\n    params: PaginationParams,\n    clientCreds?: ClientCredentialsOAuth\n  ): Promise<PaginatedResponse<Offer>> {\n    await this.ensureAuthenticated(clientCreds);\n    return offersApi.fetchOffersPage(this.api, params, clientCreds);\n  }\n\n  async fetchOfferDetails(\n    id: OfferId,\n    clientCreds?: ClientCredentialsOAuth\n  ): Promise<OfferDetail> {\n    await this.ensureAuthenticated(clientCreds);\n    return offersApi.fetchOfferDetails(this.api, id, clientCreds);\n  }\n\n  async fetchParticipations(offerId?: OfferId): Promise<Participation[]> {\n    await this.ensureUserAuthenticated();\n    return participationsApi.fetchParticipations(this.api, offerId);\n  }\n\n  async fetchParticipationsPage(\n    params: ParticipationsPaginationParams\n  ): Promise<PaginatedResponse<Participation>> {\n    await this.ensureUserAuthenticated();\n    return participationsApi.fetchParticipationsPage(this.api, params);\n  }\n\n  async fetchParticipation(id: ParticipationId): Promise<Participation> {\n    await this.ensureUserAuthenticated();\n    return participationsApi.fetchParticipation(this.api, id);\n  }\n\n  async createParticipation(\n    params: CreateParticipationParams\n  ): Promise<Participation> {\n    await this.ensureUserAuthenticated();\n    return participationsApi.createParticipation(this.api, params);\n  }\n\n  async createWalletOwnershipChallenge(\n    params: CreateWalletOwnershipChallengeParams\n  ): Promise<WalletOwnershipChallenge> {\n    await this.ensureUserAuthenticated();\n    return walletConnectApi.createWalletOwnershipChallenge(this.api, params);\n  }\n\n  async connectExternalWallet(\n    offerId: OfferId,\n    params: ConnectExternalWalletParams\n  ): Promise<OfferOptionAddress> {\n    await this.ensureUserAuthenticated();\n    return walletConnectApi.connectExternalWallet(this.api, offerId, params);\n  }\n\n  async listOptionAddresses(\n    offerId: OfferId,\n    offerOptionId: OfferOptionId\n  ): Promise<OfferOptionAddress[]> {\n    await this.ensureUserAuthenticated();\n    return walletConnectApi.listOptionAddresses(\n      this.api,\n      offerId,\n      offerOptionId\n    );\n  }\n\n  async removeOptionAddress(\n    offerId: OfferId,\n    addressId: OfferOptionAddressId\n  ): Promise<OfferOptionAddress> {\n    await this.ensureUserAuthenticated();\n    return walletConnectApi.removeOptionAddress(this.api, offerId, addressId);\n  }\n\n  async fetchOfferRequirements(\n    offerId: OfferId,\n    clientCreds?: ClientCredentialsOAuth\n  ): Promise<Record<OfferOptionId, Requirement[]>> {\n    await this.ensureAuthenticated(clientCreds);\n    return requirementsApi.fetchOfferRequirements(\n      this.api,\n      offerId,\n      clientCreds\n    );\n  }\n\n  async fetchRequirementStatuses(\n    offerId: OfferId\n  ): Promise<RequirementStatusInfo[]> {\n    await this.ensureUserAuthenticated();\n    return requirementsApi.fetchRequirementStatuses(this.api, offerId);\n  }\n\n  private async ensureAuthenticated(\n    clientCreds: ClientCredentialsOAuth | undefined\n  ): Promise<void> {\n    if (!clientCreds) {\n      await this.ensureUserAuthenticated();\n    }\n  }\n\n  private async ensureUserAuthenticated(): Promise<void> {\n    const token = await this.accessToken();\n    if (token === null) {\n      throw new NotAuthenticatedError();\n    }\n  }\n\n  async fetchPii(): Promise<Pii> {\n    await this.ensureUserAuthenticated();\n    return piiApi.fetchPii(this.api);\n  }\n\n  async submitDocument(\n    documentType: DocumentType,\n    fields: Record<string, string>\n  ): Promise<DocumentSubmission> {\n    await this.ensureUserAuthenticated();\n    return documentsApi.submitDocument(this.api, documentType, fields);\n  }\n\n  async createKycToken(\n    levelName?: KycLevelName,\n    reset?: boolean\n  ): Promise<KycToken> {\n    await this.ensureUserAuthenticated();\n    return kycApi.createKycToken(this.api, levelName, reset);\n  }\n}\n\nexport function createCoinListServer(config: ServerConfig): CoinListServer {\n  return new CoinListServerImpl(config);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIO,IAAM,MAAN,MAAU;AAAA,EAGf,YACE,QACA,kBACA;AACA,SAAK,SAAS,IAAI,uBAAuB,QAAQ,gBAAgB;AAAA,EACnE;AAAA,EAEA,MAAM,KAAgB,SAA0C;AAC9D,WAAO,KAAK,OAAO,KAAgB,OAAO;AAAA,EAC5C;AACF;;;ACjBO,IAAM,oCAAN,cAAgD,MAAM;AAAA,EAC3D,YACE,UAAU,mJACV;AACA,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;AC0DA,IAAM,qCAAqC;AA8S3C,IAAM,qBAAN,MAAmD;AAAA,EAQjD,YAA6B,SAAuB;AAAvB;AAC3B,SAAK,UAAU,QAAQ,WAAW;AAClC,SAAK,iCACH,QAAQ,kCACR;AACF,SAAK,SAAS,QAAQ,UAAU;AAChC,SAAK,MAAM,IAAI;AAAA,MACb;AAAA,QACE,SAAS,KAAK;AAAA,QACd,aAAa;AAAA,MACf;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,CAAC,YACC,WAAW,CAAC,KAAK,QAAQ,aAAa,aAClC,QAAQ,QAAQ,IAAI,IACpB,KAAK,YAAY;AAAA,IACzB;AACA,SAAK,OAAO,IAAI,kBAAkB;AAAA,MAChC,KAAK,KAAK;AAAA,MACV,yBAAyB,MAAM,KAAK,wBAAwB;AAAA,IAC9D,CAAC;AAAA,EACH;AAAA,EAEA,MAAM,cACJ,MACA,cACuB;AACvB,UAAM,eAAe,KAAK,QAAQ;AAClC,UAAM,aAAa,aAAa,YAAY,KAAK,YAAY;AAC7D,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,kCAAkC;AAAA,IAC9C;AACA,UAAM,aAAa,MAAM,KAAK,IAAI,KAAsB;AAAA,MACtD,QAAQ;AAAA,MACR,KAAK;AAAA,MACL,MAAM;AAAA,QACJ,YAAY;AAAA,QACZ;AAAA,QACA,cAAc,KAAK,QAAQ;AAAA,QAC3B,WAAW,KAAK,QAAQ;AAAA,QACxB,eAAe,KAAK,QAAQ;AAAA,QAC5B,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AACD,UAAM,UAAU,aAAa,QAAQ,UAAU;AAC/C,UAAM,WAAW,OAAO;AACxB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,yBAA0D;AAC9D,UAAM,aAAa,MAAM,KAAK,IAAI,KAAsB;AAAA,MACtD,QAAQ;AAAA,MACR,KAAK;AAAA,MACL,MAAM;AAAA,QACJ,YAAY;AAAA,QACZ,WAAW,KAAK,QAAQ;AAAA,QACxB,eAAe,KAAK,QAAQ;AAAA,MAC9B;AAAA,IACF,CAAC;AACD,UAAM,UAAU,aAAa,QAAQ,UAAU;AAC/C,WAAO,uBAAuB,QAAQ,WAAW;AAAA,EACnD;AAAA,EAEA,MAAM,cAAgD;AACpD,UAAM,eAAe,KAAK,QAAQ;AAClC,UAAM,UAAU,MAAM,aAAa,WAAW;AAC9C,QAAI,WAAW,KAAM,QAAO;AAE5B,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,YAAY,QAAQ,YAAY,UAAU,QAAQ;AACxD,UAAM,WAAW,KAAK,iCAAiC;AACvD,QAAI,YAAY,MAAM,UAAU;AAE9B,aAAO,QAAQ;AAAA,IACjB;AAEA,UAAM,aAAa,aAAa,YAAY,KAAK,YAAY;AAC7D,QAAI,CAAC,YAAY;AAGf,aAAO,QAAQ;AAAA,IACjB,OAAO;AACL,aAAO,KAAK,eAAe,QAAQ,cAAc,UAAU;AAAA,IAC7D;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,cACA,YACkC;AAClC,QAAI,CAAC,cAAc;AACjB,YAAM,WAAW,IAAI;AACrB,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,aAAa,MAAM,KAAK,IAAI,KAAsB;AAAA,QACtD,QAAQ;AAAA,QACR,KAAK;AAAA,QACL,MAAM;AAAA,UACJ,YAAY;AAAA,UACZ,eAAe;AAAA,UACf,WAAW,KAAK,QAAQ;AAAA,UACxB,eAAe,KAAK,QAAQ;AAAA,QAC9B;AAAA,MACF,CAAC;AACD,YAAM,aAAa,aAAa,QAAQ,UAAU;AAClD,YAAM,WAAW,UAAU;AAC3B,aAAO,WAAW;AAAA,IACpB,QAAQ;AACN,YAAM,WAAW,IAAI;AACrB,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,SAAwB;AAC5B,UAAM,eAAe,KAAK,QAAQ;AAClC,UAAM,aAAa,aAAa,YAAY,KAAK,YAAY;AAC7D,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,kCAAkC;AAAA,IAC9C;AACA,UAAM,UAAU,MAAM,aAAa,WAAW;AAC9C,QAAI,WAAW,MAAM;AACnB,YAAM,gBAAgB,QAAQ,YAAY;AAC1C,UAAI;AACF,cAAM,KAAK,IAAI,KAAK;AAAA,UAClB,QAAQ;AAAA,UACR,KAAK;AAAA,UACL,MAAM;AAAA,YACJ,OAAO;AAAA,YACP,WAAW,KAAK,QAAQ;AAAA,YACxB,eAAe,KAAK,QAAQ;AAAA,UAC9B;AAAA,QACF,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,YAAI,eAAe,WAAW;AAC5B,cAAI,KAAK,QAAQ;AACf,kBAAM;AAAA,UACR;AAAA,QACF,OAAO;AACL,gBAAM;AAAA,QACR;AAAA,MACF;AAEA,YAAM,WAAW,IAAI;AAAA,IACvB;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,aAAwD;AACxE,UAAM,KAAK,oBAAoB,WAAW;AAC1C,WAAiB,YAAY,KAAK,KAAK,WAAW;AAAA,EACpD;AAAA,EAEA,MAAM,gBACJ,QACA,aACmC;AACnC,UAAM,KAAK,oBAAoB,WAAW;AAC1C,WAAiB,gBAAgB,KAAK,KAAK,QAAQ,WAAW;AAAA,EAChE;AAAA,EAEA,MAAM,kBACJ,IACA,aACsB;AACtB,UAAM,KAAK,oBAAoB,WAAW;AAC1C,WAAiB,kBAAkB,KAAK,KAAK,IAAI,WAAW;AAAA,EAC9D;AAAA,EAEA,MAAM,oBAAoB,SAA6C;AACrE,UAAM,KAAK,wBAAwB;AACnC,WAAyB,oBAAoB,KAAK,KAAK,OAAO;AAAA,EAChE;AAAA,EAEA,MAAM,wBACJ,QAC2C;AAC3C,UAAM,KAAK,wBAAwB;AACnC,WAAyB,wBAAwB,KAAK,KAAK,MAAM;AAAA,EACnE;AAAA,EAEA,MAAM,mBAAmB,IAA6C;AACpE,UAAM,KAAK,wBAAwB;AACnC,WAAyB,mBAAmB,KAAK,KAAK,EAAE;AAAA,EAC1D;AAAA,EAEA,MAAM,oBACJ,QACwB;AACxB,UAAM,KAAK,wBAAwB;AACnC,WAAyB,oBAAoB,KAAK,KAAK,MAAM;AAAA,EAC/D;AAAA,EAEA,MAAM,+BACJ,QACmC;AACnC,UAAM,KAAK,wBAAwB;AACnC,WAAwB,+BAA+B,KAAK,KAAK,MAAM;AAAA,EACzE;AAAA,EAEA,MAAM,sBACJ,SACA,QAC6B;AAC7B,UAAM,KAAK,wBAAwB;AACnC,WAAwB,sBAAsB,KAAK,KAAK,SAAS,MAAM;AAAA,EACzE;AAAA,EAEA,MAAM,oBACJ,SACA,eAC+B;AAC/B,UAAM,KAAK,wBAAwB;AACnC,WAAwB;AAAA,MACtB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,SACA,WAC6B;AAC7B,UAAM,KAAK,wBAAwB;AACnC,WAAwB,oBAAoB,KAAK,KAAK,SAAS,SAAS;AAAA,EAC1E;AAAA,EAEA,MAAM,uBACJ,SACA,aAC+C;AAC/C,UAAM,KAAK,oBAAoB,WAAW;AAC1C,WAAuB;AAAA,MACrB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,yBACJ,SACkC;AAClC,UAAM,KAAK,wBAAwB;AACnC,WAAuB,yBAAyB,KAAK,KAAK,OAAO;AAAA,EACnE;AAAA,EAEA,MAAc,oBACZ,aACe;AACf,QAAI,CAAC,aAAa;AAChB,YAAM,KAAK,wBAAwB;AAAA,IACrC;AAAA,EACF;AAAA,EAEA,MAAc,0BAAyC;AACrD,UAAM,QAAQ,MAAM,KAAK,YAAY;AACrC,QAAI,UAAU,MAAM;AAClB,YAAM,IAAI,sBAAsB;AAAA,IAClC;AAAA,EACF;AAAA,EAEA,MAAM,WAAyB;AAC7B,UAAM,KAAK,wBAAwB;AACnC,WAAc,SAAS,KAAK,GAAG;AAAA,EACjC;AAAA,EAEA,MAAM,eACJ,cACA,QAC6B;AAC7B,UAAM,KAAK,wBAAwB;AACnC,WAAoB,eAAe,KAAK,KAAK,cAAc,MAAM;AAAA,EACnE;AAAA,EAEA,MAAM,eACJ,WACA,OACmB;AACnB,UAAM,KAAK,wBAAwB;AACnC,WAAc,eAAe,KAAK,KAAK,WAAW,KAAK;AAAA,EACzD;AACF;AAEO,SAAS,qBAAqB,QAAsC;AACzE,SAAO,IAAI,mBAAmB,MAAM;AACtC;","names":[]}
+{"version":3,"sources":["../../src/server/api/api.server.ts","../../src/server/errors.ts","../../src/server/coinlist.server.ts"],"sourcesContent":["import { AuthenticatedApiClient } from '@/shared/api/authenticated-api-client';\nimport type { HttpClientConfig, HttpRequest } from '@/shared/api/http';\nimport type { OAuthAccessToken } from '@/shared/types/oauth-session';\n\nexport class Api {\n  private readonly client: AuthenticatedApiClient;\n\n  constructor(\n    config: HttpClientConfig,\n    fetchAccessToken: (refresh: boolean) => Promise<OAuthAccessToken | null>\n  ) {\n    this.client = new AuthenticatedApiClient(config, fetchAccessToken);\n  }\n\n  async send<TResponse>(request: HttpRequest): Promise<TResponse> {\n    return this.client.send<TResponse>(request);\n  }\n}\n","export class WritableSessionStoreRequiredError extends Error {\n  constructor(\n    message = 'This operation requires a writable SessionStore. Provide a `setSession` implementation in your SessionStore to persist or clear OAuth sessions.'\n  ) {\n    super(message);\n    this.name = 'WritableSessionStoreRequiredError';\n  }\n}\n","import { Api } from '@/server/api/api.server';\nimport { WritableSessionStoreRequiredError } from '@/server/errors';\nimport {\n  API_VERSION,\n  PUBLIC_API_BASE_URL,\n} from '@/shared/api/frontline/config';\nimport * as documentsApi from '@/shared/api/frontline/documents';\nimport * as kycApi from '@/shared/api/frontline/kyc';\nimport * as offersApi from '@/shared/api/frontline/offers';\nimport * as piiApi from '@/shared/api/frontline/pii';\nimport * as requirementsApi from '@/shared/api/frontline/requirements';\nimport * as walletConnectApi from '@/shared/api/frontline/wallet-connect';\nimport { HttpError } from '@/shared/api/http';\nimport type {\n  PaginatedResponse,\n  PaginationParams,\n} from '@/shared/api/pagination';\nimport {\n  type CoinListErc20Namespace,\n  Erc20NamespaceImpl,\n} from '@/shared/core/erc20-namespace';\nimport {\n  type CoinListSwapNamespace,\n  SwapNamespaceImpl,\n} from '@/shared/core/swap-namespace';\nimport {\n  type CoinListTokenSaleNamespace,\n  TokenSaleNamespaceImpl,\n} from '@/shared/core/token-sale-namespace';\nimport type { Config } from '@/shared/types/config';\nimport type {\n  DocumentSubmission,\n  DocumentType,\n} from '@/shared/types/document-submission';\nimport type { OAuthSessionDto } from '@/shared/types/dto/oauth-session';\nimport { NotAuthenticatedError } from '@/shared/types/errors';\nimport type { KycLevelName, KycToken } from '@/shared/types/kyc';\nimport type {\n  AuthorizationCode,\n  ClientSecret,\n  CodeVerifier,\n} from '@/shared/types/oauth';\nimport {\n  ClientCredentialsOAuth,\n  type OAuthAccessToken,\n  type OAuthRefreshToken,\n  OAuthSession,\n} from '@/shared/types/oauth-session';\nimport type { Offer, OfferId } from '@/shared/types/offer';\nimport type { OfferDetail, OfferOptionId } from '@/shared/types/offer-detail';\nimport type {\n  ConnectExternalWalletParams,\n  OfferOptionAddress,\n  OfferOptionAddressId,\n} from '@/shared/types/offer-option-address';\nimport type { Pii } from '@/shared/types/pii';\nimport type {\n  Requirement,\n  RequirementStatusInfo,\n} from '@/shared/types/requirement';\nimport type {\n  CreateWalletOwnershipChallengeParams,\n  WalletOwnershipChallenge,\n} from '@/shared/types/wallet-ownership-challenge';\n\n/** Buffer in seconds before expiry to consider token expired for refresh. */\nconst ACCESS_TOKEN_EXPIRY_BUFFER_SECONDS = 60;\n\nexport interface SessionStore {\n  getSession(): Promise<OAuthSession | null>;\n  /**\n   * Persists or clears the OAuth session.\n   *\n   * **Omit this method to create a read-only store.** When absent, the SDK\n   * skips token refresh entirely — no network call is made and no refresh\n   * token is consumed. This is the correct approach for contexts that can read\n   * the session but cannot write it back, such as Next.js Server Components.\n   *\n   * ⚠️ Do **not** implement this as a no-op (`async () => {}`). If the method\n   * is present, the SDK assumes writes succeed: it will fire a token refresh\n   * network call, consume the refresh token, then invoke `setSession` — which\n   * would silently discard the new session and leave the browser holding an\n   * invalidated refresh token. Simply **omit** `setSession` to prevent any\n   * refresh from being attempted.\n   *\n   * {@link CoinListServer.completeOAuth} and {@link CoinListServer.logout}\n   * always require a writable store and throw\n   * {@link WritableSessionStoreRequiredError} if `setSession` is absent.\n   */\n  setSession?(session: OAuthSession | null): Promise<void>;\n}\n\nexport interface ServerConfig extends Config {\n  readonly clientSecret: ClientSecret;\n  readonly sessionStore: SessionStore;\n  /** Buffer in seconds before expiry to consider token expired for refresh. */\n  readonly accessTokenExpiryBufferSeconds?: number;\n  /**\n   * Whether SDK will throw an exception in cases it can be silent.\n   * For example, if token revokation on logout fails.\n   */\n  readonly strict?: boolean;\n}\n\n/**\n * Server-side CoinList SDK client.\n *\n * Operates in one of two modes depending on whether {@link SessionStore}\n * includes a `setSession` implementation:\n *\n * - **Writable store** (`setSession` provided) — full functionality: token\n *   refresh, {@link completeOAuth}, and {@link logout} all work normally.\n *\n * - **Read-only store** (no `setSession`) — token refresh is skipped entirely,\n *   meaning no network call is made and no refresh token is consumed.\n *   {@link completeOAuth} and {@link logout} throw\n *   {@link WritableSessionStoreRequiredError}. {@link accessToken} may return\n *   an expired token (see its docs). Use this mode in execution contexts that\n *   can read the session but cannot write it back, such as Next.js Server\n *   Components.\n */\nexport interface CoinListServer {\n  /**\n   * Exchanges an authorization code for an OAuth session and persists it via\n   * {@link SessionStore.setSession}.\n   *\n   * Throws {@link WritableSessionStoreRequiredError} if the session store does\n   * not provide `setSession`.\n   */\n  completeOAuth(\n    code: AuthorizationCode,\n    codeVerifier: CodeVerifier\n  ): Promise<OAuthSession>;\n\n  /**\n   * Obtains an app-level access token via the OAuth 2.0 `client_credentials`\n   * grant (RFC 6749 §4.4). No user is involved: the token authenticates the\n   * partner application itself and only grants access to app-level resources\n   * such as offers and offer requirements.\n   *\n   * The token is **not** persisted to the {@link SessionStore} and has no\n   * refresh token. It expires at `expiresAt`; once expired, call this method\n   * again to obtain a fresh token — the SDK does not renew it automatically.\n   *\n   * Pass the result to {@link fetchOffers}, {@link fetchOffersPage},\n   * {@link fetchOfferDetails}, or {@link fetchOfferRequirements} to call them\n   * without a user session.\n   */\n  clientCredentialsOAuth(): Promise<ClientCredentialsOAuth>;\n\n  /**\n   * Returns a valid access token for the current session, refreshing it if\n   * it is expired or near expiry.\n   *\n   * **Writable store**: if the token is expired, the SDK exchanges the refresh\n   * token for a new session, persists it, and returns the fresh access token.\n   * Returns `null` if there is no session or the refresh fails.\n   *\n   * **Read-only store** (no `setSession`): refresh is skipped entirely. The\n   * stored token is returned as-is, even if it is expired — a non-null return\n   * value does **not** guarantee the token is accepted by the API. Before\n   * making API calls, check `token.expiresAt > new Date()`. Use a writable\n   * store (e.g. in a Route Handler) when you need the SDK to renew the session\n   * automatically.\n   *\n   * @returns the access token, or `null` if there is no session or the session\n   * could not be refreshed.\n   */\n  accessToken(): Promise<OAuthAccessToken | null>;\n\n  /**\n   * Revokes the current token via POST /oauth/revoke and clears the session.\n   *\n   * Throws {@link WritableSessionStoreRequiredError} if the session store does\n   * not provide `setSession`.\n   */\n  logout(): Promise<void>;\n\n  /**\n   * Fetches all offers by iterating through every paginated response.\n   *\n   * @param clientCreds optional app-level token from\n   * {@link clientCredentialsOAuth}. When provided, no user session is\n   * required; if a user session exists it takes precedence and `clientCreds`\n   * is used as a fallback.\n   *\n   * Throws {@link NotAuthenticatedError} if there is neither a user session\n   * nor `clientCreds`.\n   */\n  fetchOffers(clientCreds?: ClientCredentialsOAuth): Promise<Offer[]>;\n\n  /**\n   * Fetches a single page of offers.\n   *\n   * @param clientCreds optional app-level token from\n   * {@link clientCredentialsOAuth}. When provided, no user session is\n   * required; if a user session exists it takes precedence and `clientCreds`\n   * is used as a fallback.\n   *\n   * Throws {@link NotAuthenticatedError} if there is neither a user session\n   * nor `clientCreds`.\n   */\n  fetchOffersPage(\n    params: PaginationParams,\n    clientCreds?: ClientCredentialsOAuth\n  ): Promise<PaginatedResponse<Offer>>;\n\n  /**\n   * Fetches details for a given offer by its id.\n   *\n   * @param clientCreds optional app-level token from\n   * {@link clientCredentialsOAuth}. When provided, no user session is\n   * required; if a user session exists it takes precedence and `clientCreds`\n   * is used as a fallback.\n   *\n   * Throws {@link NotAuthenticatedError} if there is neither a user session\n   * nor `clientCreds`.\n   */\n  fetchOfferDetails(\n    id: OfferId,\n    clientCreds?: ClientCredentialsOAuth\n  ): Promise<OfferDetail>;\n\n  /**\n   * Creates a single-use wallet-ownership challenge for the given wallet and\n   * chain. The user signs the returned {@link WalletOwnershipChallenge.message}\n   * with their wallet, then passes the signature to\n   * {@link connectExternalWallet}.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  createWalletOwnershipChallenge(\n    params: CreateWalletOwnershipChallengeParams\n  ): Promise<WalletOwnershipChallenge>;\n\n  /**\n   * Connects a proven external wallet to an offer option, using a signature of\n   * a challenge from {@link createWalletOwnershipChallenge}.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  connectExternalWallet(\n    offerId: OfferId,\n    params: ConnectExternalWalletParams\n  ): Promise<OfferOptionAddress>;\n\n  /**\n   * Lists the user's proven wallet bindings for a single offer option.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  listOptionAddresses(\n    offerId: OfferId,\n    offerOptionId: OfferOptionId\n  ): Promise<OfferOptionAddress[]>;\n\n  /**\n   * Removes one of the user's wallet bindings and returns the removed binding.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  removeOptionAddress(\n    offerId: OfferId,\n    addressId: OfferOptionAddressId\n  ): Promise<OfferOptionAddress>;\n\n  /**\n   * Fetches the requirements for all options of a given offer, grouped by option ID.\n   *\n   * @param clientCreds optional app-level token from\n   * {@link clientCredentialsOAuth}. When provided, no user session is\n   * required; if a user session exists it takes precedence and `clientCreds`\n   * is used as a fallback.\n   *\n   * Throws {@link NotAuthenticatedError} if there is neither a user session\n   * nor `clientCreds`.\n   */\n  fetchOfferRequirements(\n    offerId: OfferId,\n    clientCreds?: ClientCredentialsOAuth\n  ): Promise<Record<OfferOptionId, Requirement[]>>;\n\n  /**\n   * Fetches the user's requirement statuses for a given offer.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  fetchRequirementStatuses(offerId: OfferId): Promise<RequirementStatusInfo[]>;\n\n  /**\n   * Fetches the user's PII (tax form pre-fill data) — full legal name, date\n   * of birth, jurisdiction, tax ID, and permanent address for an individual;\n   * or the equivalent entity fields for a company/trust, used to pre-fill a\n   * W-8BEN. Fields the entity hasn't provided are `null`.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  fetchPii(): Promise<Pii>;\n\n  /**\n   * Starts (or resumes) a document signing submission for the given type\n   * (currently only `tax_certification`, e.g. W-8BEN/W-8BEN-E). `fields` are\n   * signing-form values keyed by the document's DocuSeal field names,\n   * forwarded verbatim to Passport to pre-fill the document.\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  submitDocument(\n    documentType: DocumentType,\n    fields: Record<string, string>\n  ): Promise<DocumentSubmission>;\n\n  /**\n   * Generic ERC-20 reads (token allowance and balance) — e.g.\n   * `coinlist.erc20.getTokenBalance({ ... })`.\n   *\n   * These methods require a user session and throw\n   * {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  readonly erc20: CoinListErc20Namespace;\n\n  /**\n   * Token-sale operations: listing, reading, and recording participations —\n   * e.g. `coinlist.tokenSale.fetchParticipations()`. The on-chain\n   * `executeTokenSale` flow is client-only and is not exposed here.\n   *\n   * These methods require a user session and throw\n   * {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  readonly tokenSale: CoinListTokenSaleNamespace;\n\n  /**\n   * On-chain swap operations: quoting a swap, reading swap-contract state, and\n   * proving/allow-listing wallet ownership — e.g.\n   * `coinlist.swap.getOutputToken({ contractAddress, chain })`.\n   *\n   * These methods require a user session and throw\n   * {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  readonly swap: CoinListSwapNamespace;\n\n  /**\n   * Creates a short-lived Sumsub WebSDK access token for the current user so\n   * an identity verification (KYC) flow can be started, e.g. to seed the\n   * client-side `IdentityVerification` component when server-rendering.\n   * `levelName` selects the Sumsub verification level; defaults to the\n   * backend's standard level. `reset` resets the Sumsub applicant first, so\n   * an already-approved level can be executed again (e.g. to update stale\n   * PII).\n   *\n   * Throws {@link NotAuthenticatedError} if the user is not authenticated.\n   */\n  createKycToken(levelName?: KycLevelName, reset?: boolean): Promise<KycToken>;\n}\n\nclass CoinListServerImpl implements CoinListServer {\n  private readonly api: Api;\n  private readonly baseUrl: string;\n\n  private readonly accessTokenExpiryBufferSeconds: number;\n  private readonly strict: boolean;\n  readonly erc20: CoinListErc20Namespace;\n  readonly tokenSale: CoinListTokenSaleNamespace;\n  readonly swap: CoinListSwapNamespace;\n\n  constructor(private readonly _config: ServerConfig) {\n    this.baseUrl = _config.baseUrl ?? PUBLIC_API_BASE_URL;\n    this.accessTokenExpiryBufferSeconds =\n      _config.accessTokenExpiryBufferSeconds ??\n      ACCESS_TOKEN_EXPIRY_BUFFER_SECONDS;\n    this.strict = _config.strict ?? false;\n    this.api = new Api(\n      {\n        baseUrl: this.baseUrl,\n        xApiVersion: API_VERSION,\n      },\n      // When refresh=true the renewal middleware has received a 401 and wants a\n      // fresh token. A read-only store cannot persist a new session, so return\n      // null immediately — this tells the middleware to skip the retry rather\n      // than re-sending with the same expired token and wasting a round-trip.\n      (refresh) =>\n        refresh && !this._config.sessionStore.setSession\n          ? Promise.resolve(null)\n          : this.accessToken()\n    );\n    const ctx = {\n      api: this.api,\n      ensureUserAuthenticated: () => this.ensureUserAuthenticated(),\n    };\n    this.erc20 = new Erc20NamespaceImpl(ctx);\n    this.tokenSale = new TokenSaleNamespaceImpl(ctx);\n    this.swap = new SwapNamespaceImpl(ctx);\n  }\n\n  async completeOAuth(\n    code: AuthorizationCode,\n    codeVerifier: CodeVerifier\n  ): Promise<OAuthSession> {\n    const sessionStore = this._config.sessionStore;\n    const setSession = sessionStore.setSession?.bind(sessionStore);\n    if (!setSession) {\n      throw new WritableSessionStoreRequiredError();\n    }\n    const sessionDto = await this.api.send<OAuthSessionDto>({\n      method: 'POST',\n      url: `/oauth/token`,\n      body: {\n        grant_type: 'authorization_code',\n        code,\n        redirect_uri: this._config.redirectUri,\n        client_id: this._config.clientId,\n        client_secret: this._config.clientSecret,\n        code_verifier: codeVerifier,\n      },\n    });\n    const session = OAuthSession.fromDto(sessionDto);\n    await setSession(session);\n    return session;\n  }\n\n  async clientCredentialsOAuth(): Promise<ClientCredentialsOAuth> {\n    const sessionDto = await this.api.send<OAuthSessionDto>({\n      method: 'POST',\n      url: `/oauth/token`,\n      body: {\n        grant_type: 'client_credentials',\n        client_id: this._config.clientId,\n        client_secret: this._config.clientSecret,\n      },\n    });\n    const session = OAuthSession.fromDto(sessionDto);\n    return ClientCredentialsOAuth(session.accessToken);\n  }\n\n  async accessToken(): Promise<OAuthAccessToken | null> {\n    const sessionStore = this._config.sessionStore;\n    const session = await sessionStore.getSession();\n    if (session == null) return null;\n\n    const now = Date.now();\n    const expiresAt = session.accessToken.expiresAt.getTime();\n    const bufferMs = this.accessTokenExpiryBufferSeconds * 1000;\n    if (expiresAt > now + bufferMs) {\n      // Valid access token, return it regardless\n      return session.accessToken;\n    }\n\n    const setSession = sessionStore.setSession?.bind(sessionStore);\n    if (!setSession) {\n      // No write session capabilities => can't refresh!\n      // Return the access token as-is\n      return session.accessToken;\n    } else {\n      return this.refreshSession(session.refreshToken, setSession);\n    }\n  }\n\n  private async refreshSession(\n    refreshToken: OAuthRefreshToken | undefined,\n    setSession: (session: OAuthSession | null) => Promise<void>\n  ): Promise<OAuthAccessToken | null> {\n    if (!refreshToken) {\n      await setSession(null);\n      return null;\n    }\n\n    try {\n      const sessionDto = await this.api.send<OAuthSessionDto>({\n        method: 'POST',\n        url: `/oauth/token`,\n        body: {\n          grant_type: 'refresh_token',\n          refresh_token: refreshToken,\n          client_id: this._config.clientId,\n          client_secret: this._config.clientSecret,\n        },\n      });\n      const newSession = OAuthSession.fromDto(sessionDto);\n      await setSession(newSession);\n      return newSession.accessToken;\n    } catch {\n      await setSession(null);\n      return null;\n    }\n  }\n\n  async logout(): Promise<void> {\n    const sessionStore = this._config.sessionStore;\n    const setSession = sessionStore.setSession?.bind(sessionStore);\n    if (!setSession) {\n      throw new WritableSessionStoreRequiredError();\n    }\n    const session = await sessionStore.getSession();\n    if (session != null) {\n      const tokenToRevoke = session.accessToken.value;\n      try {\n        await this.api.send({\n          method: 'POST',\n          url: `/oauth/revoke`,\n          body: {\n            token: tokenToRevoke,\n            client_id: this._config.clientId,\n            client_secret: this._config.clientSecret,\n          },\n        });\n      } catch (err) {\n        if (err instanceof HttpError) {\n          if (this.strict) {\n            throw err;\n          }\n        } else {\n          throw err;\n        }\n      }\n      // invalidate the session\n      await setSession(null);\n    }\n  }\n\n  async fetchOffers(clientCreds?: ClientCredentialsOAuth): Promise<Offer[]> {\n    await this.ensureAuthenticated(clientCreds);\n    return offersApi.fetchOffers(this.api, clientCreds);\n  }\n\n  async fetchOffersPage(\n    params: PaginationParams,\n    clientCreds?: ClientCredentialsOAuth\n  ): Promise<PaginatedResponse<Offer>> {\n    await this.ensureAuthenticated(clientCreds);\n    return offersApi.fetchOffersPage(this.api, params, clientCreds);\n  }\n\n  async fetchOfferDetails(\n    id: OfferId,\n    clientCreds?: ClientCredentialsOAuth\n  ): Promise<OfferDetail> {\n    await this.ensureAuthenticated(clientCreds);\n    return offersApi.fetchOfferDetails(this.api, id, clientCreds);\n  }\n\n  async createWalletOwnershipChallenge(\n    params: CreateWalletOwnershipChallengeParams\n  ): Promise<WalletOwnershipChallenge> {\n    await this.ensureUserAuthenticated();\n    return walletConnectApi.createWalletOwnershipChallenge(this.api, params);\n  }\n\n  async connectExternalWallet(\n    offerId: OfferId,\n    params: ConnectExternalWalletParams\n  ): Promise<OfferOptionAddress> {\n    await this.ensureUserAuthenticated();\n    return walletConnectApi.connectExternalWallet(this.api, offerId, params);\n  }\n\n  async listOptionAddresses(\n    offerId: OfferId,\n    offerOptionId: OfferOptionId\n  ): Promise<OfferOptionAddress[]> {\n    await this.ensureUserAuthenticated();\n    return walletConnectApi.listOptionAddresses(\n      this.api,\n      offerId,\n      offerOptionId\n    );\n  }\n\n  async removeOptionAddress(\n    offerId: OfferId,\n    addressId: OfferOptionAddressId\n  ): Promise<OfferOptionAddress> {\n    await this.ensureUserAuthenticated();\n    return walletConnectApi.removeOptionAddress(this.api, offerId, addressId);\n  }\n\n  async fetchOfferRequirements(\n    offerId: OfferId,\n    clientCreds?: ClientCredentialsOAuth\n  ): Promise<Record<OfferOptionId, Requirement[]>> {\n    await this.ensureAuthenticated(clientCreds);\n    return requirementsApi.fetchOfferRequirements(\n      this.api,\n      offerId,\n      clientCreds\n    );\n  }\n\n  async fetchRequirementStatuses(\n    offerId: OfferId\n  ): Promise<RequirementStatusInfo[]> {\n    await this.ensureUserAuthenticated();\n    return requirementsApi.fetchRequirementStatuses(this.api, offerId);\n  }\n\n  private async ensureAuthenticated(\n    clientCreds: ClientCredentialsOAuth | undefined\n  ): Promise<void> {\n    if (!clientCreds) {\n      await this.ensureUserAuthenticated();\n    }\n  }\n\n  private async ensureUserAuthenticated(): Promise<void> {\n    const token = await this.accessToken();\n    if (token === null) {\n      throw new NotAuthenticatedError();\n    }\n  }\n\n  async fetchPii(): Promise<Pii> {\n    await this.ensureUserAuthenticated();\n    return piiApi.fetchPii(this.api);\n  }\n\n  async submitDocument(\n    documentType: DocumentType,\n    fields: Record<string, string>\n  ): Promise<DocumentSubmission> {\n    await this.ensureUserAuthenticated();\n    return documentsApi.submitDocument(this.api, documentType, fields);\n  }\n\n  async createKycToken(\n    levelName?: KycLevelName,\n    reset?: boolean\n  ): Promise<KycToken> {\n    await this.ensureUserAuthenticated();\n    return kycApi.createKycToken(this.api, levelName, reset);\n  }\n}\n\nexport function createCoinListServer(config: ServerConfig): CoinListServer {\n  return new CoinListServerImpl(config);\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAIO,IAAM,MAAN,MAAU;AAAA,EAGf,YACE,QACA,kBACA;AACA,SAAK,SAAS,IAAI,uBAAuB,QAAQ,gBAAgB;AAAA,EACnE;AAAA,EAEA,MAAM,KAAgB,SAA0C;AAC9D,WAAO,KAAK,OAAO,KAAgB,OAAO;AAAA,EAC5C;AACF;;;ACjBO,IAAM,oCAAN,cAAgD,MAAM;AAAA,EAC3D,YACE,UAAU,mJACV;AACA,UAAM,OAAO;AACb,SAAK,OAAO;AAAA,EACd;AACF;;;AC2DA,IAAM,qCAAqC;AAiS3C,IAAM,qBAAN,MAAmD;AAAA,EAUjD,YAA6B,SAAuB;AAAvB;AAC3B,SAAK,UAAU,QAAQ,WAAW;AAClC,SAAK,iCACH,QAAQ,kCACR;AACF,SAAK,SAAS,QAAQ,UAAU;AAChC,SAAK,MAAM,IAAI;AAAA,MACb;AAAA,QACE,SAAS,KAAK;AAAA,QACd,aAAa;AAAA,MACf;AAAA;AAAA;AAAA;AAAA;AAAA,MAKA,CAAC,YACC,WAAW,CAAC,KAAK,QAAQ,aAAa,aAClC,QAAQ,QAAQ,IAAI,IACpB,KAAK,YAAY;AAAA,IACzB;AACA,UAAM,MAAM;AAAA,MACV,KAAK,KAAK;AAAA,MACV,yBAAyB,MAAM,KAAK,wBAAwB;AAAA,IAC9D;AACA,SAAK,QAAQ,IAAI,mBAAmB,GAAG;AACvC,SAAK,YAAY,IAAI,uBAAuB,GAAG;AAC/C,SAAK,OAAO,IAAI,kBAAkB,GAAG;AAAA,EACvC;AAAA,EAEA,MAAM,cACJ,MACA,cACuB;AACvB,UAAM,eAAe,KAAK,QAAQ;AAClC,UAAM,aAAa,aAAa,YAAY,KAAK,YAAY;AAC7D,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,kCAAkC;AAAA,IAC9C;AACA,UAAM,aAAa,MAAM,KAAK,IAAI,KAAsB;AAAA,MACtD,QAAQ;AAAA,MACR,KAAK;AAAA,MACL,MAAM;AAAA,QACJ,YAAY;AAAA,QACZ;AAAA,QACA,cAAc,KAAK,QAAQ;AAAA,QAC3B,WAAW,KAAK,QAAQ;AAAA,QACxB,eAAe,KAAK,QAAQ;AAAA,QAC5B,eAAe;AAAA,MACjB;AAAA,IACF,CAAC;AACD,UAAM,UAAU,aAAa,QAAQ,UAAU;AAC/C,UAAM,WAAW,OAAO;AACxB,WAAO;AAAA,EACT;AAAA,EAEA,MAAM,yBAA0D;AAC9D,UAAM,aAAa,MAAM,KAAK,IAAI,KAAsB;AAAA,MACtD,QAAQ;AAAA,MACR,KAAK;AAAA,MACL,MAAM;AAAA,QACJ,YAAY;AAAA,QACZ,WAAW,KAAK,QAAQ;AAAA,QACxB,eAAe,KAAK,QAAQ;AAAA,MAC9B;AAAA,IACF,CAAC;AACD,UAAM,UAAU,aAAa,QAAQ,UAAU;AAC/C,WAAO,uBAAuB,QAAQ,WAAW;AAAA,EACnD;AAAA,EAEA,MAAM,cAAgD;AACpD,UAAM,eAAe,KAAK,QAAQ;AAClC,UAAM,UAAU,MAAM,aAAa,WAAW;AAC9C,QAAI,WAAW,KAAM,QAAO;AAE5B,UAAM,MAAM,KAAK,IAAI;AACrB,UAAM,YAAY,QAAQ,YAAY,UAAU,QAAQ;AACxD,UAAM,WAAW,KAAK,iCAAiC;AACvD,QAAI,YAAY,MAAM,UAAU;AAE9B,aAAO,QAAQ;AAAA,IACjB;AAEA,UAAM,aAAa,aAAa,YAAY,KAAK,YAAY;AAC7D,QAAI,CAAC,YAAY;AAGf,aAAO,QAAQ;AAAA,IACjB,OAAO;AACL,aAAO,KAAK,eAAe,QAAQ,cAAc,UAAU;AAAA,IAC7D;AAAA,EACF;AAAA,EAEA,MAAc,eACZ,cACA,YACkC;AAClC,QAAI,CAAC,cAAc;AACjB,YAAM,WAAW,IAAI;AACrB,aAAO;AAAA,IACT;AAEA,QAAI;AACF,YAAM,aAAa,MAAM,KAAK,IAAI,KAAsB;AAAA,QACtD,QAAQ;AAAA,QACR,KAAK;AAAA,QACL,MAAM;AAAA,UACJ,YAAY;AAAA,UACZ,eAAe;AAAA,UACf,WAAW,KAAK,QAAQ;AAAA,UACxB,eAAe,KAAK,QAAQ;AAAA,QAC9B;AAAA,MACF,CAAC;AACD,YAAM,aAAa,aAAa,QAAQ,UAAU;AAClD,YAAM,WAAW,UAAU;AAC3B,aAAO,WAAW;AAAA,IACpB,QAAQ;AACN,YAAM,WAAW,IAAI;AACrB,aAAO;AAAA,IACT;AAAA,EACF;AAAA,EAEA,MAAM,SAAwB;AAC5B,UAAM,eAAe,KAAK,QAAQ;AAClC,UAAM,aAAa,aAAa,YAAY,KAAK,YAAY;AAC7D,QAAI,CAAC,YAAY;AACf,YAAM,IAAI,kCAAkC;AAAA,IAC9C;AACA,UAAM,UAAU,MAAM,aAAa,WAAW;AAC9C,QAAI,WAAW,MAAM;AACnB,YAAM,gBAAgB,QAAQ,YAAY;AAC1C,UAAI;AACF,cAAM,KAAK,IAAI,KAAK;AAAA,UAClB,QAAQ;AAAA,UACR,KAAK;AAAA,UACL,MAAM;AAAA,YACJ,OAAO;AAAA,YACP,WAAW,KAAK,QAAQ;AAAA,YACxB,eAAe,KAAK,QAAQ;AAAA,UAC9B;AAAA,QACF,CAAC;AAAA,MACH,SAAS,KAAK;AACZ,YAAI,eAAe,WAAW;AAC5B,cAAI,KAAK,QAAQ;AACf,kBAAM;AAAA,UACR;AAAA,QACF,OAAO;AACL,gBAAM;AAAA,QACR;AAAA,MACF;AAEA,YAAM,WAAW,IAAI;AAAA,IACvB;AAAA,EACF;AAAA,EAEA,MAAM,YAAY,aAAwD;AACxE,UAAM,KAAK,oBAAoB,WAAW;AAC1C,WAAiB,YAAY,KAAK,KAAK,WAAW;AAAA,EACpD;AAAA,EAEA,MAAM,gBACJ,QACA,aACmC;AACnC,UAAM,KAAK,oBAAoB,WAAW;AAC1C,WAAiB,gBAAgB,KAAK,KAAK,QAAQ,WAAW;AAAA,EAChE;AAAA,EAEA,MAAM,kBACJ,IACA,aACsB;AACtB,UAAM,KAAK,oBAAoB,WAAW;AAC1C,WAAiB,kBAAkB,KAAK,KAAK,IAAI,WAAW;AAAA,EAC9D;AAAA,EAEA,MAAM,+BACJ,QACmC;AACnC,UAAM,KAAK,wBAAwB;AACnC,WAAwB,+BAA+B,KAAK,KAAK,MAAM;AAAA,EACzE;AAAA,EAEA,MAAM,sBACJ,SACA,QAC6B;AAC7B,UAAM,KAAK,wBAAwB;AACnC,WAAwB,sBAAsB,KAAK,KAAK,SAAS,MAAM;AAAA,EACzE;AAAA,EAEA,MAAM,oBACJ,SACA,eAC+B;AAC/B,UAAM,KAAK,wBAAwB;AACnC,WAAwB;AAAA,MACtB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,oBACJ,SACA,WAC6B;AAC7B,UAAM,KAAK,wBAAwB;AACnC,WAAwB,oBAAoB,KAAK,KAAK,SAAS,SAAS;AAAA,EAC1E;AAAA,EAEA,MAAM,uBACJ,SACA,aAC+C;AAC/C,UAAM,KAAK,oBAAoB,WAAW;AAC1C,WAAuB;AAAA,MACrB,KAAK;AAAA,MACL;AAAA,MACA;AAAA,IACF;AAAA,EACF;AAAA,EAEA,MAAM,yBACJ,SACkC;AAClC,UAAM,KAAK,wBAAwB;AACnC,WAAuB,yBAAyB,KAAK,KAAK,OAAO;AAAA,EACnE;AAAA,EAEA,MAAc,oBACZ,aACe;AACf,QAAI,CAAC,aAAa;AAChB,YAAM,KAAK,wBAAwB;AAAA,IACrC;AAAA,EACF;AAAA,EAEA,MAAc,0BAAyC;AACrD,UAAM,QAAQ,MAAM,KAAK,YAAY;AACrC,QAAI,UAAU,MAAM;AAClB,YAAM,IAAI,sBAAsB;AAAA,IAClC;AAAA,EACF;AAAA,EAEA,MAAM,WAAyB;AAC7B,UAAM,KAAK,wBAAwB;AACnC,WAAc,SAAS,KAAK,GAAG;AAAA,EACjC;AAAA,EAEA,MAAM,eACJ,cACA,QAC6B;AAC7B,UAAM,KAAK,wBAAwB;AACnC,WAAoB,eAAe,KAAK,KAAK,cAAc,MAAM;AAAA,EACnE;AAAA,EAEA,MAAM,eACJ,WACA,OACmB;AACnB,UAAM,KAAK,wBAAwB;AACnC,WAAc,eAAe,KAAK,KAAK,WAAW,KAAK;AAAA,EACzD;AACF;AAEO,SAAS,qBAAqB,QAAsC;AACzE,SAAO,IAAI,mBAAmB,MAAM;AACtC;","names":[]}

package/dist/shared/index.cjs

@@ -45,6 +45,7 @@ __export(shared_exports, {
   DEFAULT_SLIPPAGE_BPS: () => DEFAULT_SLIPPAGE_BPS,
   DocumentSubmission: () => DocumentSubmission,
   ERC20_ABI: () => ERC20_ABI,
+  Erc20NamespaceImpl: () => Erc20NamespaceImpl,
   EvmContractAddress: () => EvmContractAddress,
   EvmWalletAddress: () => EvmWalletAddress,
   FaqItem: () => FaqItem,
@@ -101,6 +102,7 @@ __export(shared_exports, {
   TermItem: () => TermItem,
   TokenAllowance: () => TokenAllowance,
   TokenBalance: () => TokenBalance,
+  TokenSaleNamespaceImpl: () => TokenSaleNamespaceImpl,
   TxExplorerUrl: () => TxExplorerUrl,
   USDC: () => USDC,
   USDC_SYMBOL: () => USDC_SYMBOL,
@@ -1047,6 +1049,21 @@ function toErc20Asset(dto) {
   };
 }
 
+// src/shared/core/erc20-namespace.ts
+var Erc20NamespaceImpl = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  async getTokenAllowance(params) {
+    await this.ctx.ensureUserAuthenticated();
+    return getTokenAllowance(this.ctx.api, params);
+  }
+  async getTokenBalance(params) {
+    await this.ctx.ensureUserAuthenticated();
+    return getTokenBalance(this.ctx.api, params);
+  }
+};
+
 // src/shared/types/asset.ts
 var AssetId = (value) => value;
 var AssetCode = (value) => value;
@@ -1059,6 +1076,22 @@ var Asset = {
   })
 };
 
+// src/shared/types/offer.ts
+var OfferId = (value) => value;
+var OfferSlug = (value) => value;
+var Offer = {
+  fromDto: (dto) => ({
+    id: OfferId(dto.id),
+    slug: OfferSlug(dto.slug),
+    type: dto.type,
+    tagline: dto.tagline,
+    bannerUrl: dto.banner_url,
+    logoUrl: dto.logo_url,
+    startsAt: new Date(dto.starts_at),
+    endsAt: dto.ends_at ? new Date(dto.ends_at) : null
+  })
+};
+
 // src/shared/utils.ts
 async function sha256(data) {
   const bytes = typeof data === "string" ? new TextEncoder().encode(data) : data;
@@ -1095,21 +1128,6 @@ function notBlankStringOrNull(value) {
   }
 }
 
-// src/shared/types/offer.ts
-var OfferId = (value) => value;
-var OfferSlug = (value) => value;
-var Offer = {
-  fromDto: (dto) => ({
-    id: OfferId(dto.id),
-    slug: OfferSlug(dto.slug),
-    tagline: notBlankStringOrNull(dto.tagline),
-    bannerUrl: notBlankStringOrNull(dto.banner_url),
-    logoUrl: notBlankStringOrNull(dto.logo_url),
-    startsAt: new Date(dto.starts_at),
-    endsAt: new Date(dto.ends_at)
-  })
-};
-
 // src/shared/types/offer-detail.ts
 var OfferOptionId = (value) => value;
 var OfferOptionSlug = (value) => value;
@@ -1136,16 +1154,17 @@ var OfferDetail = {
     return {
       id: OfferId(dto.id),
       slug: OfferSlug(dto.slug),
+      type: dto.type,
       name: dto.name,
       asset: Asset.fromDto(dto.asset),
       fundingAssets: dto.funding_assets.map(Asset.fromDto),
       about: notBlankStringOrNull(dto.about),
-      tagline: notBlankStringOrNull(dto.tagline),
-      bannerUrl: notBlankStringOrNull(dto.banner_url),
-      logoUrl: notBlankStringOrNull(dto.logo_url),
-      category: notBlankStringOrNull(dto.category),
+      tagline: dto.tagline,
+      bannerUrl: dto.banner_url,
+      logoUrl: dto.logo_url,
+      category: dto.category,
       startsAt: new Date(dto.starts_at),
-      endsAt: new Date(dto.ends_at),
+      endsAt: dto.ends_at ? new Date(dto.ends_at) : null,
       faqs: dto.faqs.map(FaqItem.fromDto),
       links: dto.links.map(Link.fromDto),
       milestones: dto.milestones.map(Milestone.fromDto),
@@ -1281,14 +1300,6 @@ var SwapNamespaceImpl = class {
     await this.ctx.ensureUserAuthenticated();
     return getSwapStatus(this.ctx.api, params);
   }
-  async getTokenAllowance(params) {
-    await this.ctx.ensureUserAuthenticated();
-    return getTokenAllowance(this.ctx.api, params);
-  }
-  async getTokenBalance(params) {
-    await this.ctx.ensureUserAuthenticated();
-    return getTokenBalance(this.ctx.api, params);
-  }
   async getOutputToken(params) {
     await this.ctx.ensureUserAuthenticated();
     return getSwapOutputToken(this.ctx.api, params);
@@ -1303,6 +1314,110 @@ var SwapNamespaceImpl = class {
   }
 };
 
+// src/shared/types/participation.ts
+var ParticipationId = (value) => value;
+var Blockchain = (value) => value;
+var WalletAddress = (value) => value;
+var ParticipationsPaginationParams = {
+  toQueryParams: (params) => {
+    const queryParams = PaginationParams.toQueryParams(params);
+    if (params.offerId) {
+      queryParams["filters[0][field]"] = "offer_id";
+      queryParams["filters[0][op]"] = "==";
+      queryParams["filters[0][value]"] = params.offerId;
+    }
+    return queryParams;
+  }
+};
+var Participation = {
+  /** Maps API DTO shape into the SDK participation domain model. */
+  fromDto: (dto) => {
+    const walletAddress = notBlankStringOrNull(dto.wallet_address);
+    return {
+      id: ParticipationId(dto.id),
+      offerId: OfferId(dto.offer_id),
+      offerOptionId: OfferOptionId(dto.offer_option_id),
+      status: dto.status,
+      amount: dto.amount,
+      displayAmount: dto.amount_string,
+      asset: Asset.fromDto(dto.asset),
+      chain: Blockchain(dto.chain),
+      insertedAt: dto.inserted_at ? new Date(dto.inserted_at) : null,
+      updatedAt: dto.updated_at ? new Date(dto.updated_at) : null,
+      walletAddress: walletAddress ? WalletAddress(walletAddress) : null
+    };
+  }
+};
+var CreateParticipationParams = {
+  /** Maps participation creation params into API DTO payload. */
+  toDto: (params) => ({
+    offer_id: params.offerId,
+    offer_option_id: params.offerOptionId,
+    chain: params.chain,
+    wallet_address: params.walletAddress,
+    amount: params.amount,
+    asset_id: params.assetId,
+    approval_transaction_hash: params.approvalTransactionHash
+  })
+};
+
+// src/shared/api/frontline/participations.ts
+async function fetchParticipations(api, offerId) {
+  return fetchAllPages(
+    (params) => fetchParticipationsPage(api, params),
+    { offerId }
+  );
+}
+async function fetchParticipationsPage(api, params) {
+  const pageDto = await api.send({
+    method: "GET",
+    url: "/v1/participations",
+    queryParams: ParticipationsPaginationParams.toQueryParams(params),
+    attributes: Attributes.protected()
+  });
+  return PaginatedResponse.fromDto(pageDto, Participation.fromDto);
+}
+async function fetchParticipation(api, id) {
+  const dto = await api.send({
+    method: "GET",
+    url: `/v1/participations/${id}`,
+    attributes: Attributes.protected()
+  });
+  return Participation.fromDto(dto);
+}
+async function createParticipation(api, params) {
+  const dto = await api.send({
+    method: "POST",
+    url: "/v1/participations",
+    body: CreateParticipationParams.toDto(params),
+    attributes: Attributes.protected()
+  });
+  return Participation.fromDto(dto);
+}
+
+// src/shared/core/token-sale-namespace.ts
+var TokenSaleNamespaceImpl = class {
+  constructor(ctx) {
+    this.ctx = ctx;
+  }
+  async fetchParticipations(offerId) {
+    await this.ctx.ensureUserAuthenticated();
+    return fetchParticipations(this.ctx.api, offerId);
+  }
+  async fetchParticipationsPage(params) {
+    await this.ctx.ensureUserAuthenticated();
+    return fetchParticipationsPage(this.ctx.api, params);
+  }
+  async fetchParticipation(id) {
+    await this.ctx.ensureUserAuthenticated();
+    return fetchParticipation(this.ctx.api, id);
+  }
+  async createParticipation(params) {
+    await this.ctx.ensureUserAuthenticated();
+    return createParticipation(this.ctx.api, params);
+  }
+};
+
 // src/shared/types/oauth.ts
 var AuthorizationCode = (value) => value;
 var CodeVerifier = (value) => value;
@@ -1374,53 +1489,6 @@ var OAuthSession = {
   }
 };
 
-// src/shared/types/participation.ts
-var ParticipationId = (value) => value;
-var Blockchain = (value) => value;
-var WalletAddress = (value) => value;
-var ParticipationsPaginationParams = {
-  toQueryParams: (params) => {
-    const queryParams = PaginationParams.toQueryParams(params);
-    if (params.offerId) {
-      queryParams["filters[0][field]"] = "offer_id";
-      queryParams["filters[0][op]"] = "==";
-      queryParams["filters[0][value]"] = params.offerId;
-    }
-    return queryParams;
-  }
-};
-var Participation = {
-  /** Maps API DTO shape into the SDK participation domain model. */
-  fromDto: (dto) => {
-    const walletAddress = notBlankStringOrNull(dto.wallet_address);
-    return {
-      id: ParticipationId(dto.id),
-      offerId: OfferId(dto.offer_id),
-      offerOptionId: OfferOptionId(dto.offer_option_id),
-      status: dto.status,
-      amount: dto.amount,
-      displayAmount: dto.amount_string,
-      asset: Asset.fromDto(dto.asset),
-      chain: Blockchain(dto.chain),
-      insertedAt: dto.inserted_at ? new Date(dto.inserted_at) : null,
-      updatedAt: dto.updated_at ? new Date(dto.updated_at) : null,
-      walletAddress: walletAddress ? WalletAddress(walletAddress) : null
-    };
-  }
-};
-var CreateParticipationParams = {
-  /** Maps participation creation params into API DTO payload. */
-  toDto: (params) => ({
-    offer_id: params.offerId,
-    offer_option_id: params.offerOptionId,
-    chain: params.chain,
-    wallet_address: params.walletAddress,
-    amount: params.amount,
-    asset_id: params.assetId,
-    approval_transaction_hash: params.approvalTransactionHash
-  })
-};
-
 // src/shared/types/pii.ts
 var Iso2CountryCode = (value) => value;
 var PiiJurisdiction = {
@@ -1506,6 +1574,7 @@ var User = {
   DEFAULT_SLIPPAGE_BPS,
   DocumentSubmission,
   ERC20_ABI,
+  Erc20NamespaceImpl,
   EvmContractAddress,
   EvmWalletAddress,
   FaqItem,
@@ -1562,6 +1631,7 @@ var User = {
   TermItem,
   TokenAllowance,
   TokenBalance,
+  TokenSaleNamespaceImpl,
   TxExplorerUrl,
   USDC,
   USDC_SYMBOL,