@dignetwork/dig-sdk 0.0.1-alpha.98 → 0.1.0

package/dist/index.js

@@ -1,20 +1,732 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+// src/methods.ts
+var WALLET_METHODS = [
+  "chip0002_connect",
+  "chip0002_chainId",
+  "chip0002_getPublicKeys",
+  "chip0002_getAssetCoins",
+  "chip0002_getAssetBalance",
+  "chip0002_signCoinSpends",
+  "chip0002_signMessage",
+  "chia_getAddress",
+  "chia_signMessageByAddress",
+  "chia_takeOffer"
+];
+var SIGN_METHODS = [
+  "chia_signMessageByAddress",
+  "chip0002_signMessage"
+];
+var DEFAULT_CHAIN = "chia:mainnet";
+
+// src/provider/injected.ts
+function getInjectedProvider() {
+  const g = globalThis;
+  return typeof g !== "undefined" ? g.chia : void 0;
+}
+function isInjectedAvailable(opts = {}) {
+  const p = getInjectedProvider();
+  if (!p) return false;
+  if (opts.anyChia) return typeof p.request === "function";
+  return !!p.isDIG;
+}
+var INJECTED_TOPIC = "injected";
+var InjectedTransport = class {
+  constructor(provider, chain = DEFAULT_CHAIN) {
+    this.backend = "injected";
+    this.topic = INJECTED_TOPIC;
+    this.provider = provider;
+    this.chain = chain;
+  }
+  /** Connect: ask the native wallet to approve this origin. Blocks until approved/rejected. */
+  async connect(eager = false) {
+    if (typeof this.provider.connect === "function") {
+      await this.provider.connect(eager);
+    }
+  }
+  // The native wallet implements the full canonical set (it returns Sage-shaped responses), so
+  // support is a static allowlist — no per-session negotiation as with WalletConnect.
+  supports(method) {
+    return WALLET_METHODS.includes(method);
+  }
+  async request(method, params) {
+    if (!this.supports(method)) {
+      throw new Error(`The DIG Browser wallet does not support "${method}".`);
+    }
+    return this.provider.request({ method, params });
+  }
+  async disconnect() {
+  }
+};
+
+// src/provider/wc-retry.ts
+function isTransientPublishError(err) {
+  const msg = (err instanceof Error ? err.message : typeof err === "string" ? err : "").toLowerCase();
+  if (!msg) return false;
+  return msg.includes("publish") || msg.includes("failed or timed out to publish") || msg.includes("websocket connection failed") || msg.includes("connection closed") || msg.includes("socket stalled") || msg.includes("request reset");
+}
+
+// src/provider/walletconnect.ts
+var WalletConnectTransport = class _WalletConnectTransport {
+  constructor(client, session, chain, requestTimeoutMs) {
+    this.backend = "walletconnect";
+    this.client = client;
+    this.topic = session.topic;
+    this.chain = chain;
+    this.requestTimeoutMs = requestTimeoutMs;
+  }
+  /**
+   * Initialize SignClient, open a pairing (emitting the URI via `onUri`), and resolve to a
+   * connected transport once the user approves in Sage. Requires `@walletconnect/sign-client`.
+   */
+  static async connect(options) {
+    const chain = options.chain ?? DEFAULT_CHAIN;
+    const timeout = options.requestTimeoutMs ?? 6e4;
+    const SignClient = await loadSignClient();
+    const client = await SignClient.init({
+      logger: "error",
+      projectId: options.projectId,
+      metadata: options.metadata
+    });
+    const { uri, approval } = await client.connect({
+      // optionalNamespaces ONLY — Sage rejects requiredNamespaces.
+      optionalNamespaces: {
+        chia: { methods: WALLET_METHODS, chains: [chain], events: [] }
+      }
+    });
+    if (uri && options.onUri) options.onUri(uri);
+    const session = await approval();
+    return new _WalletConnectTransport(client, session, chain, timeout);
+  }
+  /**
+   * Restore an existing session that grants a sign method (so message signing actually reaches
+   * Sage). Returns a transport or null if none qualifies. Requires `@walletconnect/sign-client`.
+   */
+  static async restore(options) {
+    const chain = options.chain ?? DEFAULT_CHAIN;
+    const timeout = options.requestTimeoutMs ?? 6e4;
+    const SignClient = await loadSignClient();
+    const client = await SignClient.init({
+      logger: "error",
+      projectId: options.projectId,
+      metadata: options.metadata
+    });
+    const sessions = client.session.getAll();
+    for (let i = sessions.length - 1; i >= 0; i--) {
+      const s = sessions[i];
+      const methods = s.namespaces?.chia?.methods ?? [];
+      if (SIGN_METHODS.some((m) => methods.includes(m))) {
+        return new _WalletConnectTransport(client, s, chain, timeout);
+      }
+    }
+    return null;
+  }
+  sessionMethods() {
+    try {
+      return this.client.session.get(this.topic)?.namespaces?.chia?.methods ?? [];
+    } catch {
+      return [];
+    }
+  }
+  // True iff the active session granted `method` (empty list = unknown ⇒ treated as granted).
+  supports(method) {
+    const m = this.sessionMethods();
+    return m.length === 0 || m.includes(method);
+  }
+  async request(method, params) {
+    if (!this.supports(method)) {
+      throw new Error(
+        `Your wallet session does not grant "${method}". Disconnect and reconnect your wallet to refresh the session (and make sure Sage is up to date).`
+      );
+    }
+    const MAX_ATTEMPTS = 3;
+    let lastErr;
+    for (let i = 0; i < MAX_ATTEMPTS; i++) {
+      try {
+        return await this.attempt(method, params);
+      } catch (e) {
+        lastErr = e;
+        if (i < MAX_ATTEMPTS - 1 && isTransientPublishError(e)) {
+          await sleep(1200 * (i + 1));
+          continue;
+        }
+        throw e;
+      }
+    }
+    throw lastErr;
+  }
+  attempt(method, params) {
+    let t;
+    const timeout = new Promise((_, rej) => {
+      t = setTimeout(
+        () => rej(new Error("Sage did not respond \u2014 open the Sage app and try again.")),
+        this.requestTimeoutMs
+      );
+    });
+    return Promise.race([
+      this.client.request({ topic: this.topic, chainId: this.chain, request: { method, params } }),
+      timeout
+    ]).finally(() => clearTimeout(t));
+  }
+  async disconnect() {
+    try {
+      await this.client.disconnect({
+        topic: this.topic,
+        reason: { code: 6e3, message: "bye" }
+      });
+    } catch {
+    }
+  }
+};
+function sleep(ms) {
+  return new Promise((r) => setTimeout(r, ms));
+}
+async function loadSignClient() {
+  try {
+    const mod = await import('@walletconnect/sign-client');
+    const SignClient = mod.default ?? mod;
+    if (!SignClient || typeof SignClient.init !== "function") {
+      throw new Error("unexpected @walletconnect/sign-client shape");
+    }
+    return SignClient;
+  } catch {
+    throw new Error(
+      "WalletConnect fallback requires the optional peer dependency '@walletconnect/sign-client'. Install it (npm i @walletconnect/sign-client) to use the WalletConnect\u2192Sage transport."
+    );
+  }
+}
+
+// src/provider/methods.ts
+function with0x(hex) {
+  if (!hex) return hex ?? null;
+  return hex.startsWith("0x") ? hex : `0x${hex}`;
+}
+function strip0x(h) {
+  return String(h ?? "").replace(/^0x/i, "").toLowerCase();
+}
+async function getAddress(request) {
+  const resp = await request("chia_getAddress", {});
+  if (typeof resp === "string") return resp;
+  const r = resp;
+  return r?.address ?? r?.data?.address ?? null;
+}
+async function getPublicKeys(request) {
+  const resp = await request("chip0002_getPublicKeys", { limit: 500, offset: 0 });
+  if (Array.isArray(resp)) return resp;
+  const r = resp;
+  return r?.publicKeys ?? r?.public_keys ?? r?.keys ?? [];
+}
+function normalizeSig(resp) {
+  const r = resp;
+  const publicKey = typeof r === "object" && r ? r.publicKey ?? r.public_key ?? r.pubkey ?? null : null;
+  const signature = typeof r === "string" ? r : r ? r.signature ?? r.aggregatedSignature ?? r.aggregated_signature ?? null : null;
+  return { publicKey: with0x(publicKey), signature };
+}
+async function signMessage(request, supports, message, address) {
+  if (supports("chia_signMessageByAddress")) {
+    return normalizeSig(await request("chia_signMessageByAddress", { message, address }));
+  }
+  const keys = await getPublicKeys(request);
+  const publicKey = keys[0];
+  if (!publicKey) throw new Error("Wallet returned no keys to sign with.");
+  const sig = normalizeSig(await request("chip0002_signMessage", { message, publicKey }));
+  return { publicKey: sig.publicKey ?? with0x(publicKey), signature: sig.signature };
+}
+async function signCoinSpends(request, coinSpends) {
+  const resp = await request("chip0002_signCoinSpends", { coinSpends, partialSign: true });
+  if (typeof resp === "string") return resp;
+  const r = resp;
+  return r?.signature ?? r?.aggregatedSignature ?? r?.aggregated_signature ?? "";
+}
+async function takeOffer(request, supports, offer, fee = 0) {
+  if (!supports("chia_takeOffer")) {
+    throw new Error("Your wallet session does not support taking offers. Reconnect your wallet.");
+  }
+  return request("chia_takeOffer", { offer, fee });
+}
+function balanceFrom(resp) {
+  const raw = resp == null ? null : typeof resp === "object" ? resp.confirmed ?? resp.spendable ?? resp.confirmedWalletBalance ?? resp.confirmed_wallet_balance ?? resp.balance ?? resp.data?.confirmed ?? null : resp;
+  if (raw == null) return null;
+  try {
+    return BigInt(raw).toString();
+  } catch {
+    return null;
+  }
+}
+async function getXchBalance(request) {
+  return balanceFrom(await request("chip0002_getAssetBalance", { type: null, assetId: null }));
+}
+async function getCatBalance(request, assetIdHex) {
+  return balanceFrom(
+    await request("chip0002_getAssetBalance", { type: "cat", assetId: strip0x(assetIdHex) })
+  );
+}
+async function getXchCoins(request, limit = 100) {
+  const resp = await request("chip0002_getAssetCoins", {
+    type: null,
+    assetId: null,
+    includedLocked: false,
+    offset: 0,
+    limit
+  });
+  return Array.isArray(resp) ? resp : resp?.coins ?? [];
+}
+async function getCatCoins(request, assetIdHex, limit = 200) {
+  const resp = await request("chip0002_getAssetCoins", {
+    type: "cat",
+    assetId: strip0x(assetIdHex),
+    includedLocked: false,
+    offset: 0,
+    limit
+  });
+  return Array.isArray(resp) ? resp : resp?.coins ?? [];
+}
+
+// src/provider/chia-provider.ts
+var ChiaProvider = class _ChiaProvider {
+  constructor(transport) {
+    this.transport = transport;
+  }
+  /** Which transport is backing this provider. */
+  get backend() {
+    return this.transport.backend;
+  }
+  /** The connected session descriptor. */
+  get session() {
+    return {
+      backend: this.transport.backend,
+      chain: this.transport.chain,
+      topic: this.transport.topic,
+      address: this.cachedAddress ?? null
+    };
+  }
+  /** True iff a method is granted by the active session/transport. */
+  supports(method) {
+    return this.transport.supports(method);
+  }
+  /** Escape hatch: issue a raw CHIP-0002 request through the active transport. */
+  request(method, params = {}) {
+    return this.transport.request(method, params);
+  }
+  /**
+   * Connect a wallet using the selection policy. With `mode: "auto"` (default) it prefers an
+   * injected DIG wallet and falls back to WalletConnect.
+   */
+  static async connect(options = {}) {
+    const mode = options.mode ?? "auto";
+    const chain = options.chain ?? DEFAULT_CHAIN;
+    const tryInjected = async () => {
+      if (!isInjectedAvailable({ anyChia: options.acceptAnyInjected })) return null;
+      const provider = getInjectedProvider();
+      const transport = new InjectedTransport(provider, chain);
+      await transport.connect();
+      return new _ChiaProvider(transport);
+    };
+    const tryWalletConnect = async () => {
+      if (!options.walletConnect) {
+        throw new Error(
+          "WalletConnect options are required to connect via WalletConnect (pass { walletConnect: { projectId, metadata, onUri } })."
+        );
+      }
+      const transport = await WalletConnectTransport.connect({
+        ...options.walletConnect,
+        chain
+      });
+      return new _ChiaProvider(transport);
+    };
+    if (mode === "injected") {
+      const injected = await tryInjected();
+      if (!injected) {
+        throw new Error(
+          "No injected DIG wallet found. Open this page in the DIG Browser, or use mode 'auto'."
+        );
+      }
+      return injected;
+    }
+    if (mode === "walletconnect") return tryWalletConnect();
+    return await tryInjected() ?? await tryWalletConnect();
+  }
+  /** Wrap an already-constructed transport (advanced / restored sessions). */
+  static fromTransport(transport) {
+    return new _ChiaProvider(transport);
+  }
+  // ---- normalized CHIP-0002 surface -------------------------------------------------------------
+  /** The wallet's receive address (cached after first read). */
+  async getAddress() {
+    if (this.cachedAddress === void 0) {
+      this.cachedAddress = await getAddress((m, p) => this.transport.request(m, p));
+    }
+    return this.cachedAddress;
+  }
+  /** The wallet's (synthetic) public keys. */
+  getPublicKeys() {
+    return getPublicKeys((m, p) => this.transport.request(m, p));
+  }
+  /**
+   * Sign a UTF-8 message with the wallet BLS key. `address` defaults to the wallet's own address.
+   * Returns `{ publicKey, signature }`.
+   */
+  async signMessage(message, address) {
+    const addr = address ?? await this.getAddress() ?? "";
+    return signMessage(
+      (m, p) => this.transport.request(m, p),
+      (m) => this.transport.supports(m),
+      message,
+      addr
+    );
+  }
+  /** Sign raw CHIP-0035 coin spends (partialSign). Returns the aggregated signature hex. */
+  signCoinSpends(coinSpends) {
+    return signCoinSpends((m, p) => this.transport.request(m, p), coinSpends);
+  }
+  /** Accept a Chia offer string (e.g. an NFT offer). */
+  takeOffer(offer, fee = 0) {
+    return takeOffer(
+      (m, p) => this.transport.request(m, p),
+      (m) => this.transport.supports(m),
+      offer,
+      fee
+    );
+  }
+  /** Spendable XCH balance (mojos, string) or null. */
+  getXchBalance() {
+    return getXchBalance((m, p) => this.transport.request(m, p));
+  }
+  /** Spendable balance (base units, string) for a CAT `assetIdHex` (the tail hash), or null. */
+  getCatBalance(assetIdHex) {
+    return getCatBalance((m, p) => this.transport.request(m, p), assetIdHex);
+  }
+  /** Unspent XCH coins for funding a spend. */
+  getXchCoins(limit) {
+    return getXchCoins((m, p) => this.transport.request(m, p), limit);
+  }
+  /** Unspent CAT coins for `assetIdHex`. */
+  getCatCoins(assetIdHex, limit) {
+    return getCatCoins((m, p) => this.transport.request(m, p), assetIdHex, limit);
+  }
+  /** Disconnect the wallet (best-effort). */
+  disconnect() {
+    return this.transport.disconnect();
+  }
+};
+function connectWallet(options) {
+  return ChiaProvider.connect(options);
+}
+
+// src/loader.ts
+var DIG_CLIENT_WASM_SHA256 = "ff486be806f908a2a90780e499a04dbd34e10e3b97be0470cb9ee841a1e49e77";
+var _config = {};
+var _ready = null;
+function configureWasm(config) {
+  _config = { ...config };
+  _ready = null;
+}
+var isNode = typeof process !== "undefined" && !!process.versions?.node;
+async function sha256Hex(bytes) {
+  if (isNode) {
+    const { createHash } = await import('crypto');
+    const view = bytes instanceof ArrayBuffer ? new Uint8Array(bytes) : new Uint8Array(
+      bytes.buffer,
+      bytes.byteOffset,
+      bytes.byteLength
+    );
+    return createHash("sha256").update(view).digest("hex");
+  }
+  const digest = await crypto.subtle.digest("SHA-256", bytes);
+  return [...new Uint8Array(digest)].map((b) => b.toString(16).padStart(2, "0")).join("");
+}
+function assertIntegrity(hex) {
+  if (_config.skipIntegrity) return;
+  if (hex !== DIG_CLIENT_WASM_SHA256) {
+    throw new Error(
+      `dig-client wasm integrity check failed \u2014 refusing to run unverified crypto (expected ${DIG_CLIENT_WASM_SHA256}, got ${hex}).`
+    );
+  }
+}
+async function loadNode() {
+  const { readFile } = await import('fs/promises');
+  const { fileURLToPath, pathToFileURL } = await import('url');
+  const path = await import('path');
+  const here = path.dirname(fileURLToPath(import.meta.url));
+  const vendorDir = path.resolve(here, "..", "vendor");
+  const wasmPath = path.join(vendorDir, "dig_client_bg.wasm");
+  const gluePath = path.join(vendorDir, "dig_client.mjs");
+  const buf = await readFile(wasmPath);
+  const bytes = new Uint8Array(buf.byteLength);
+  bytes.set(buf);
+  return { glueHref: pathToFileURL(gluePath).href, bytes };
+}
+async function loadBrowser() {
+  const glueHref = _config.glueUrl ?? new URL("../vendor/dig_client.mjs", import.meta.url).href;
+  let bytes;
+  if (_config.wasmBytes) {
+    bytes = _config.wasmBytes;
+  } else {
+    const wasmUrl = _config.wasmUrl ?? new URL("../vendor/dig_client_bg.wasm", import.meta.url).href;
+    const res = await fetch(wasmUrl);
+    if (!res.ok) throw new Error(`dig-client wasm fetch failed (${res.status})`);
+    bytes = await res.arrayBuffer();
+  }
+  return { glueHref, bytes };
+}
+function loadDigClientWasm() {
+  if (_ready) return _ready;
+  _ready = (async () => {
+    const { glueHref, bytes } = isNode ? await loadNode() : await loadBrowser();
+    assertIntegrity(await sha256Hex(bytes));
+    const mod = await import(
+      /* @vite-ignore */
+      glueHref
+    );
+    await mod.default({ module_or_path: bytes });
+    return mod;
+  })().catch((e) => {
+    _ready = null;
+    throw e;
+  });
+  return _ready;
+}
+
+// src/urn.ts
+var URN_RE = /^urn:dig:chia:([0-9a-fA-F]{64})(?::([0-9a-fA-F]{64}))?\/(.+?)(?:\?salt=([0-9a-fA-F]+))?$/;
+function parseUrn(raw) {
+  const s = String(raw ?? "").trim();
+  const m = URN_RE.exec(s);
+  if (!m) {
+    throw new Error(
+      "Not a valid dig URN (expected urn:dig:chia:<store-id>[:<root>]/<path>[?salt=<hex>])."
+    );
+  }
+  return {
+    storeId: m[1].toLowerCase(),
+    root: m[2] ? m[2].toLowerCase() : null,
+    resourceKey: m[3],
+    salt: m[4] ? m[4].toLowerCase() : null
+  };
+}
+function isUrn(raw) {
+  try {
+    parseUrn(raw);
+    return true;
+  } catch {
+    return false;
+  }
+}
+function reconstructUrn(storeId, resourceKey) {
+  const key = resourceKey && resourceKey.length > 0 ? resourceKey : "index.html";
+  return `urn:dig:chia:${storeId.toLowerCase()}/${key}`;
+}
+function reconstructUrnWithRoot(storeId, root, resourceKey) {
+  const key = resourceKey && resourceKey.length > 0 ? resourceKey : "index.html";
+  return `urn:dig:chia:${storeId.toLowerCase()}:${root.toLowerCase()}/${key}`;
+}
+
+// src/dig-client.ts
+var DEFAULT_RPC = "https://rpc.dig.net";
+var RPC_CHUNK_BYTES = 3 * 1024 * 1024;
+function b64ToBytes(b64) {
+  if (typeof atob === "function") {
+    const bin = atob(b64);
+    const out = new Uint8Array(bin.length);
+    for (let i = 0; i < bin.length; i++) out[i] = bin.charCodeAt(i);
+    return out;
+  }
+  return new Uint8Array(globalThis.Buffer.from(b64, "base64"));
+}
+var DigClient = class {
+  constructor(options = {}) {
+    this.rpc = options.rpc ?? DEFAULT_RPC;
+    this.fetchImpl = options.fetch ?? (typeof fetch === "function" ? fetch.bind(globalThis) : undefinedFetch());
+  }
+  /** Load (and SRI-verify) the read-crypto wasm. Exposed for callers that want the raw functions. */
+  async wasm() {
+    return loadDigClientWasm();
+  }
+  /** `retrieval_key = SHA-256(canonical rootless URN)`, lowercase hex. */
+  async retrievalKey(storeId, resourceKey) {
+    return (await this.wasm()).retrievalKey(storeId, resourceKey);
+  }
+  /** Derive the per-URN AES-256-GCM-SIV key, lowercase hex. `salt` for a private store. */
+  async deriveKey(storeId, resourceKey, salt) {
+    return (await this.wasm()).deriveKey(storeId, resourceKey, salt ?? void 0);
+  }
+  /** Verify served `ciphertext` is included under `root` via the base64 merkle `proof`. */
+  async verifyInclusion(ciphertext, proof, root) {
+    return (await this.wasm()).verifyInclusion(ciphertext, proof, root);
+  }
+  /** Reconstruct the canonical rootless URN whose SHA-256 is the retrieval key. */
+  async reconstructUrn(storeId, resourceKey) {
+    return (await this.wasm()).reconstructUrn(storeId, resourceKey);
+  }
+  /**
+   * Derive, client-side, the two root-independent keys a URN maps to (retrieval + decryption).
+   * Nothing is sent to the network — pure local derivation via the wasm.
+   */
+  async deriveUrnKeys(input) {
+    const parsed = parseUrn(input.urn);
+    const wasm = await this.wasm();
+    const effSalt = input.salt ?? parsed.salt ?? void 0;
+    return {
+      storeId: parsed.storeId,
+      root: parsed.root,
+      resourceKey: parsed.resourceKey,
+      salt: effSalt ?? null,
+      retrievalKey: wasm.retrievalKey(parsed.storeId, parsed.resourceKey),
+      decryptionKey: wasm.deriveKey(parsed.storeId, parsed.resourceKey, effSalt)
+    };
+  }
+  /**
+   * Fetch + verify + decrypt one resource by URN. `root` is the on-chain generation root to verify
+   * against (resolved by the caller from the chain); when omitted, the root embedded in the URN is
+   * used. Returns the bytes plus advisory `verified`/`decrypted` flags. NEVER throws "not found"
+   * (presence is unknowable) — it throws only on a transport failure.
+   */
+  async read(input, opts = {}) {
+    const parsed = parseUrn(input.urn);
+    const effSalt = input.salt ?? parsed.salt ?? null;
+    const effRoot = input.root ?? parsed.root ?? null;
+    if (!effRoot) {
+      throw new Error(
+        "a confirmed on-chain root is required to read content (pass { root } or use a root-pinned URN)"
+      );
+    }
+    return this.readResource(
+      { storeId: parsed.storeId, resourceKey: parsed.resourceKey, root: effRoot, salt: effSalt },
+      opts
+    );
+  }
+  /** As `read`, but decoding the plaintext to a UTF-8 string when it decrypts (else throws). */
+  async readText(input, opts = {}) {
+    const r = await this.read(input, opts);
+    if (!r.decrypted) {
+      throw new Error(
+        "resource did not decrypt under this URN \u2014 wrong store/key/salt, or a decoy response"
+      );
+    }
+    return new TextDecoder().decode(r.bytes);
+  }
+  /**
+   * Read by explicit (storeId, resourceKey, root, salt) rather than a URN string. The oblivious
+   * download primitive the URN read is built on.
+   */
+  async readResource(input, opts = {}) {
+    const rpc = opts.rpc ?? this.rpc;
+    const wasm = await this.wasm();
+    const rk = wasm.retrievalKey(input.storeId, input.resourceKey);
+    const { ciphertext, proof, chunkLens } = await this.fetchCiphertext(
+      input.storeId,
+      rk,
+      input.root,
+      rpc
+    );
+    let verified = false;
+    try {
+      verified = !!wasm.verifyInclusion(ciphertext, proof, input.root);
+    } catch {
+      verified = false;
+    }
+    const keyHex = wasm.deriveKey(input.storeId, input.resourceKey, input.salt ?? void 0);
+    try {
+      const bytes = decryptResourceChunks(wasm, keyHex, ciphertext, chunkLens);
+      return {
+        storeId: input.storeId,
+        root: input.root,
+        resourceKey: input.resourceKey,
+        salt: input.salt ?? null,
+        bytes,
+        verified,
+        decrypted: true
+      };
+    } catch {
+      return {
+        storeId: input.storeId,
+        root: input.root,
+        resourceKey: input.resourceKey,
+        salt: input.salt ?? null,
+        bytes: ciphertext,
+        verified,
+        decrypted: false
+      };
+    }
+  }
+  // Stream the FULL ciphertext for a resource from the RPC by retrieval key, reassembling 3-MiB
+  // chunks. A null result is a TRANSPORT failure, never a presence judgment.
+  async fetchCiphertext(storeId, rk, root, rpc) {
+    let offset = 0;
+    let total = null;
+    let buf = null;
+    let proof = "";
+    let chunkLens = null;
+    for (; ; ) {
+      const r = await this.rpcCall(rpc, "dig.getContent", {
+        store_id: storeId,
+        root,
+        retrieval_key: rk,
+        offset,
+        length: RPC_CHUNK_BYTES
+      });
+      if (!r) throw new Error("The content network returned no data for this request.");
+      if (total === null) {
+        total = r.total_length >>> 0;
+        buf = new Uint8Array(total);
+      }
+      if (chunkLens === null && Array.isArray(r.chunk_lens)) {
+        chunkLens = r.chunk_lens.map((n) => n >>> 0);
+      }
+      const chunk = b64ToBytes(r.ciphertext ?? "");
+      const at = r.offset >>> 0;
+      buf.set(chunk.subarray(0, Math.max(0, Math.min(chunk.length, total - at))), at);
+      if (r.inclusion_proof) proof = r.inclusion_proof;
+      if (r.complete || r.next_offset == null) break;
+      offset = r.next_offset >>> 0;
+    }
+    return { ciphertext: buf ?? new Uint8Array(0), proof, chunkLens };
+  }
+  // One JSON-RPC 2.0 call. Throws on transport failure or a JSON-RPC error; returns `result`.
+  async rpcCall(rpc, method, params) {
+    let res;
+    try {
+      res = await this.fetchImpl(rpc, {
+        method: "POST",
+        headers: { "content-type": "application/json" },
+        body: JSON.stringify({ jsonrpc: "2.0", id: 1, method, params })
+      });
+    } catch {
+      throw new Error("Could not reach the content network. Check your connection and try again.");
+    }
+    if (!res.ok) throw new Error(`dig RPC ${method} failed (${res.status})`);
+    const json = await res.json();
+    if (json && json.error) throw new Error(`dig RPC ${method}: ${json.error.message ?? "error"}`);
+    return json ? json.result ?? null : null;
+  }
 };
-Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./blockchain"), exports);
-__exportStar(require("./DigNetwork"), exports);
-__exportStar(require("./utils"), exports);
-__exportStar(require("./DataIntegrityTree"), exports);
+function decryptResourceChunks(wasm, keyHex, ciphertext, chunkLens) {
+  const lens = chunkLens && chunkLens.length ? chunkLens : [ciphertext.length];
+  const total = lens.reduce((a, n) => a + n, 0);
+  if (total !== ciphertext.length) {
+    throw new Error("served ciphertext length does not match chunk lengths");
+  }
+  if (lens.length === 1) return wasm.decryptChunk(keyHex, ciphertext);
+  const parts = [];
+  let p = 0;
+  for (const len of lens) {
+    parts.push(wasm.decryptChunk(keyHex, ciphertext.subarray(p, p + len)));
+    p += len;
+  }
+  const out = new Uint8Array(parts.reduce((a, x) => a + x.length, 0));
+  let q = 0;
+  for (const part of parts) {
+    out.set(part, q);
+    q += part.length;
+  }
+  return out;
+}
+function undefinedFetch() {
+  return (() => {
+    throw new Error(
+      "No global fetch available. Pass { fetch } to DigClient (Node < 18 needs a fetch polyfill)."
+    );
+  });
+}
+
+export { ChiaProvider, DEFAULT_CHAIN, DEFAULT_RPC, DIG_CLIENT_WASM_SHA256, DigClient, INJECTED_TOPIC, InjectedTransport, SIGN_METHODS, WALLET_METHODS, WalletConnectTransport, configureWasm, connectWallet, getInjectedProvider, isInjectedAvailable, isTransientPublishError, isUrn, loadDigClientWasm, parseUrn, reconstructUrn, reconstructUrnWithRoot };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map