@dignetwork/dig-sdk 0.1.0 → 0.2.1

package/dist/index.cjs

@@ -20,6 +20,75 @@ var SIGN_METHODS = [
 ];
 var DEFAULT_CHAIN = "chia:mainnet";
 
+// src/errors.ts
+var DIG_SDK_ERROR_CODES = Object.freeze({
+  // ---- provider / connect (provider/chia-provider.ts, provider/*) ----
+  /** WalletConnect was requested/needed but no `walletConnect` options were supplied. */
+  WC_OPTIONS_REQUIRED: "WC_OPTIONS_REQUIRED",
+  /** `mode: "injected"` (or the injected leg of `auto`) found no usable `window.chia`. */
+  NO_INJECTED_WALLET: "NO_INJECTED_WALLET",
+  /** The optional `@walletconnect/sign-client` peer dependency is not installed/usable. */
+  WC_DEPENDENCY_MISSING: "WC_DEPENDENCY_MISSING",
+  /** The active wallet session/transport does not grant the requested method. */
+  METHOD_NOT_SUPPORTED: "METHOD_NOT_SUPPORTED",
+  /** A wallet RPC timed out (e.g. Sage did not respond within the per-request timeout). */
+  WALLET_TIMEOUT: "WALLET_TIMEOUT",
+  /** The wallet returned no public keys / no key to sign with. */
+  WALLET_NO_KEYS: "WALLET_NO_KEYS",
+  // ---- read-crypto / RPC (dig-client.ts, loader.ts) ----
+  /** A content read needs a confirmed on-chain root and none was supplied/derivable. */
+  ROOT_REQUIRED: "ROOT_REQUIRED",
+  /** The resource did not decrypt+authenticate under this URN (wrong key/salt, or a decoy). */
+  DECRYPT_FAILED: "DECRYPT_FAILED",
+  /** The dig RPC could not be reached (network/transport failure). */
+  RPC_TRANSPORT: "RPC_TRANSPORT",
+  /** The dig RPC responded with an HTTP error or a JSON-RPC `error` object. */
+  RPC_ERROR: "RPC_ERROR",
+  /** The dig RPC returned a malformed / inconsistent payload (e.g. chunk-length mismatch). */
+  RPC_MALFORMED_RESPONSE: "RPC_MALFORMED_RESPONSE",
+  /** The read-crypto wasm failed its SRI integrity check — fail closed. */
+  WASM_INTEGRITY: "WASM_INTEGRITY",
+  /** The read-crypto wasm could not be loaded (fetch/resolve failure). */
+  WASM_LOAD_FAILED: "WASM_LOAD_FAILED",
+  // ---- paywall / spends (paywall.ts) ----
+  /** The canonical chip35 wasm builder for this operation is unavailable (never hand-rolled). */
+  SPEND_BUILDER_UNAVAILABLE: "SPEND_BUILDER_UNAVAILABLE",
+  /** No secure random source was available to generate a payment nonce. */
+  NO_SECURE_RANDOM: "NO_SECURE_RANDOM",
+  // ---- deploy / adapters (adapters/run.ts, adapters/deploy.ts) ----
+  /** The `digstore` binary could not be spawned (not installed / not on PATH). */
+  DIGSTORE_NOT_FOUND: "DIGSTORE_NOT_FOUND",
+  /** `digstore deploy` exited non-zero. */
+  DEPLOY_FAILED: "DEPLOY_FAILED",
+  /** `digstore deploy --json` output could not be parsed into a capsule result. */
+  DEPLOY_OUTPUT_UNPARSEABLE: "DEPLOY_OUTPUT_UNPARSEABLE",
+  // ---- argument validation (shared) ----
+  /** An argument was malformed (e.g. a non-hex string, a bad URN, mutually-exclusive options). */
+  INVALID_ARGUMENT: "INVALID_ARGUMENT"
+});
+var DIG_SDK_ERROR_BRAND = "__dignetwork_dig_sdk_error__";
+var DigSdkError = class _DigSdkError extends Error {
+  constructor(code, message, context = {}, options = {}) {
+    super(message);
+    this.name = "DigSdkError";
+    this.code = code;
+    this.context = context;
+    if (options.cause !== void 0) {
+      this.cause = options.cause;
+    }
+    Object.defineProperty(this, DIG_SDK_ERROR_BRAND, { value: true, enumerable: false });
+    Object.setPrototypeOf(this, _DigSdkError.prototype);
+  }
+  /** A JSON-friendly view of the error: `{ code, message, context }`. */
+  toJSON() {
+    return { code: this.code, message: this.message, context: this.context };
+  }
+};
+function isDigSdkError(e, code) {
+  const branded = e instanceof DigSdkError || typeof e === "object" && e !== null && e[DIG_SDK_ERROR_BRAND] === true;
+  return branded && (code === void 0 || e.code === code);
+}
+
 // src/provider/injected.ts
 function getInjectedProvider() {
   const g = globalThis;
@@ -52,7 +121,11 @@ var InjectedTransport = class {
   }
   async request(method, params) {
     if (!this.supports(method)) {
-      throw new Error(`The DIG Browser wallet does not support "${method}".`);
+      throw new DigSdkError(
+        "METHOD_NOT_SUPPORTED",
+        `The DIG Browser wallet does not support "${method}".`,
+        { method }
+      );
     }
     return this.provider.request({ method, params });
   }
@@ -136,8 +209,10 @@ var WalletConnectTransport = class _WalletConnectTransport {
   }
   async request(method, params) {
     if (!this.supports(method)) {
-      throw new Error(
-        `Your wallet session does not grant "${method}". Disconnect and reconnect your wallet to refresh the session (and make sure Sage is up to date).`
+      throw new DigSdkError(
+        "METHOD_NOT_SUPPORTED",
+        `Your wallet session does not grant "${method}". Disconnect and reconnect your wallet to refresh the session (and make sure Sage is up to date).`,
+        { method }
       );
     }
     const MAX_ATTEMPTS = 3;
@@ -160,7 +235,13 @@ var WalletConnectTransport = class _WalletConnectTransport {
     let t;
     const timeout = new Promise((_, rej) => {
       t = setTimeout(
-        () => rej(new Error("Sage did not respond \u2014 open the Sage app and try again.")),
+        () => rej(
+          new DigSdkError(
+            "WALLET_TIMEOUT",
+            "Sage did not respond \u2014 open the Sage app and try again.",
+            { method, timeoutMs: this.requestTimeoutMs }
+          )
+        ),
         this.requestTimeoutMs
       );
     });
@@ -190,9 +271,12 @@ async function loadSignClient() {
       throw new Error("unexpected @walletconnect/sign-client shape");
     }
     return SignClient;
-  } catch {
-    throw new Error(
-      "WalletConnect fallback requires the optional peer dependency '@walletconnect/sign-client'. Install it (npm i @walletconnect/sign-client) to use the WalletConnect\u2192Sage transport."
+  } catch (e) {
+    throw new DigSdkError(
+      "WC_DEPENDENCY_MISSING",
+      "WalletConnect fallback requires the optional peer dependency '@walletconnect/sign-client'. Install it (npm i @walletconnect/sign-client) to use the WalletConnect\u2192Sage transport.",
+      {},
+      { cause: e }
     );
   }
 }
@@ -229,7 +313,8 @@ async function signMessage(request, supports, message, address) {
   }
   const keys = await getPublicKeys(request);
   const publicKey = keys[0];
-  if (!publicKey) throw new Error("Wallet returned no keys to sign with.");
+  if (!publicKey)
+    throw new DigSdkError("WALLET_NO_KEYS", "Wallet returned no keys to sign with.");
   const sig = normalizeSig(await request("chip0002_signMessage", { message, publicKey }));
   return { publicKey: sig.publicKey ?? with0x(publicKey), signature: sig.signature };
 }
@@ -241,7 +326,11 @@ async function signCoinSpends(request, coinSpends) {
 }
 async function takeOffer(request, supports, offer, fee = 0) {
   if (!supports("chia_takeOffer")) {
-    throw new Error("Your wallet session does not support taking offers. Reconnect your wallet.");
+    throw new DigSdkError(
+      "METHOD_NOT_SUPPORTED",
+      "Your wallet session does not support taking offers. Reconnect your wallet.",
+      { method: "chia_takeOffer" }
+    );
   }
   return request("chia_takeOffer", { offer, fee });
 }
@@ -325,8 +414,10 @@ var ChiaProvider = class _ChiaProvider {
     };
     const tryWalletConnect = async () => {
       if (!options.walletConnect) {
-        throw new Error(
-          "WalletConnect options are required to connect via WalletConnect (pass { walletConnect: { projectId, metadata, onUri } })."
+        throw new DigSdkError(
+          "WC_OPTIONS_REQUIRED",
+          "WalletConnect options are required to connect via WalletConnect (pass { walletConnect: { projectId, metadata, onUri } }).",
+          { mode }
         );
       }
       const transport = await WalletConnectTransport.connect({
@@ -338,8 +429,10 @@ var ChiaProvider = class _ChiaProvider {
     if (mode === "injected") {
       const injected = await tryInjected();
       if (!injected) {
-        throw new Error(
-          "No injected DIG wallet found. Open this page in the DIG Browser, or use mode 'auto'."
+        throw new DigSdkError(
+          "NO_INJECTED_WALLET",
+          "No injected DIG wallet found. Open this page in the DIG Browser, or use mode 'auto'.",
+          { mode, acceptAnyInjected: !!options.acceptAnyInjected }
         );
       }
       return injected;
@@ -414,8 +507,202 @@ function connectWallet(options) {
   return ChiaProvider.connect(options);
 }
 
+// src/paywall.ts
+function strip0x2(hex) {
+  return hex.replace(/^0x/i, "").toLowerCase();
+}
+function hexToBytes(hex) {
+  const h = strip0x2(hex);
+  if (h.length % 2 !== 0 || /[^0-9a-f]/.test(h)) {
+    throw new DigSdkError("INVALID_ARGUMENT", `invalid hex string: ${hex}`, { value: hex });
+  }
+  const out = new Uint8Array(h.length / 2);
+  for (let i = 0; i < out.length; i++) out[i] = parseInt(h.slice(i * 2, i * 2 + 2), 16);
+  return out;
+}
+function bytesToHex(bytes) {
+  let s = "";
+  for (const b of bytes) s += b.toString(16).padStart(2, "0");
+  return s;
+}
+async function randomNonce() {
+  const out = new Uint8Array(32);
+  const webcrypto = globalThis.crypto;
+  if (webcrypto?.getRandomValues) {
+    webcrypto.getRandomValues(out);
+    return out;
+  }
+  const nodeCrypto = await import('crypto');
+  if (!nodeCrypto.webcrypto?.getRandomValues) {
+    throw new DigSdkError(
+      "NO_SECURE_RANDOM",
+      "No secure random source available to generate a payment nonce."
+    );
+  }
+  nodeCrypto.webcrypto.getRandomValues(out);
+  return out;
+}
+var Paywall = class {
+  constructor(provider, options = {}) {
+    this.provider = provider;
+    this.injectedSpends = options.spends;
+  }
+  /**
+   * Resolve the canonical monetization spends (injected, or lazily imported + `init()`ed). Memoized.
+   * This is the ONLY source of coin-spend construction in the Paywall — there is no fallback that
+   * hand-rolls a spend.
+   */
+  spends() {
+    if (this.injectedSpends) {
+      if (typeof this.injectedSpends.init === "function") this.injectedSpends.init();
+      return Promise.resolve(this.injectedSpends);
+    }
+    if (!this.spendsReady) {
+      this.spendsReady = (async () => {
+        const mod = await import(
+          /* @vite-ignore */
+          '@dignetwork/chip35-dl-coin-wasm'
+        );
+        if (typeof mod.init === "function") mod.init();
+        return mod;
+      })().catch((e) => {
+        this.spendsReady = void 0;
+        throw e;
+      });
+    }
+    return this.spendsReady;
+  }
+  /** The wallet's first synthetic public key, as bytes (the buyer key the spends are built against). */
+  async buyerKey() {
+    const keys = await this.provider.getPublicKeys();
+    const key = keys?.[0];
+    if (!key)
+      throw new DigSdkError(
+        "WALLET_NO_KEYS",
+        "Wallet returned no public keys to build the payment against."
+      );
+    return hexToBytes(key);
+  }
+  /** Resolve the 32-byte unlock nonce: explicit hex, else derived from `memo`, else random. */
+  async resolveNonce(spends, args) {
+    if (args.nonce) return hexToBytes(args.nonce);
+    if (args.memo) {
+      if (typeof spends.paymentNonce !== "function") {
+        throw new DigSdkError(
+          "SPEND_BUILDER_UNAVAILABLE",
+          "Cannot derive a nonce from `memo`: the chip35 wasm `paymentNonce` is unavailable.",
+          { builder: "paymentNonce" }
+        );
+      }
+      return spends.paymentNonce(new TextEncoder().encode(args.memo));
+    }
+    return randomNonce();
+  }
+  /**
+   * Charge the buyer (the connected wallet) `amount` to pay the dapp `owner`, then push the
+   * wasm-built coin spends to the wallet for signing. Returns the wallet signature + the receipt.
+   * Builds via the canonical wasm `buildPayment` (XCH) or `buildCatPayment` (CAT) — never hand-rolled.
+   */
+  async requestPayment(args) {
+    const spends = await this.spends();
+    const ownerPh = hexToBytes(args.owner);
+    const amount = BigInt(args.amount);
+    const nonce = await this.resolveNonce(spends, args);
+    const buyerKey = await this.buyerKey();
+    let built;
+    if (args.assetId) {
+      if (typeof spends.buildCatPayment !== "function") {
+        throw new DigSdkError(
+          "SPEND_BUILDER_UNAVAILABLE",
+          "chip35 wasm `buildCatPayment` is unavailable \u2014 cannot build a CAT payment (the Paywall never hand-rolls spends).",
+          { builder: "buildCatPayment" }
+        );
+      }
+      const cats = await this.provider.getCatCoins(strip0x2(args.assetId), args.coinLimit);
+      built = spends.buildCatPayment(buyerKey, cats, ownerPh, amount, nonce);
+    } else {
+      if (typeof spends.buildPayment !== "function") {
+        throw new DigSdkError(
+          "SPEND_BUILDER_UNAVAILABLE",
+          "chip35 wasm `buildPayment` is unavailable \u2014 cannot build an XCH payment (the Paywall never hand-rolls spends).",
+          { builder: "buildPayment" }
+        );
+      }
+      const coins = await this.provider.getXchCoins(args.coinLimit);
+      built = spends.buildPayment(buyerKey, coins, ownerPh, amount, nonce, BigInt(args.fee ?? 0));
+    }
+    const signature = await this.provider.signCoinSpends(built.coinSpends);
+    return {
+      signature,
+      receipt: built.receipt,
+      coinSpends: built.coinSpends,
+      nonce: bytesToHex(nonce)
+    };
+  }
+  /**
+   * Verify an observed on-chain payment unlocks the paywall (pay-to-unlock). Delegates to the wasm
+   * `verifyPaymentReceipt`; returns its `{ ok, error? }` verdict. `ok:true` grants access.
+   */
+  async verifyReceipt(args) {
+    const spends = await this.spends();
+    if (typeof spends.verifyPaymentReceipt !== "function") {
+      throw new DigSdkError(
+        "SPEND_BUILDER_UNAVAILABLE",
+        "chip35 wasm `verifyPaymentReceipt` is unavailable.",
+        { builder: "verifyPaymentReceipt" }
+      );
+    }
+    const asset = args.asset ?? { xch: true };
+    const requiredAsset = "assetId" in asset && asset.assetId ? { assetId: hexToBytes(asset.assetId) } : { xch: true };
+    const requireNonce = args.nonce ? hexToBytes(args.nonce) : null;
+    return spends.verifyPaymentReceipt(
+      args.observed,
+      hexToBytes(args.owner),
+      BigInt(args.minAmount),
+      requiredAsset,
+      requireNonce
+    );
+  }
+  /**
+   * Prove the `owner` holds access: gate on a specific NFT (`nft` launcher id) via the wasm
+   * `proveNftOwnership`, or on collection/creator membership (`collection` DID) via
+   * `proveCollectionMembership`. Returns `{ ok, proof?, error? }`. The caller still confirms the
+   * proof's coin is unspent on-chain for liveness.
+   */
+  async proveAccess(args) {
+    if (args.nft && args.collection) {
+      throw new DigSdkError(
+        "INVALID_ARGUMENT",
+        "proveAccess: pass either `nft` or `collection`, not both.",
+        { value: "nft+collection" }
+      );
+    }
+    const spends = await this.spends();
+    const owner = hexToBytes(args.owner);
+    if (args.collection) {
+      if (typeof spends.proveCollectionMembership !== "function") {
+        throw new DigSdkError(
+          "SPEND_BUILDER_UNAVAILABLE",
+          "chip35 wasm `proveCollectionMembership` is unavailable.",
+          { builder: "proveCollectionMembership" }
+        );
+      }
+      return spends.proveCollectionMembership(args.parentSpend, owner, hexToBytes(args.collection));
+    }
+    if (typeof spends.proveNftOwnership !== "function") {
+      throw new DigSdkError(
+        "SPEND_BUILDER_UNAVAILABLE",
+        "chip35 wasm `proveNftOwnership` is unavailable.",
+        { builder: "proveNftOwnership" }
+      );
+    }
+    const requiredNft = args.nft ? hexToBytes(args.nft) : null;
+    return spends.proveNftOwnership(args.parentSpend, owner, requiredNft);
+  }
+};
+
 // src/loader.ts
-var DIG_CLIENT_WASM_SHA256 = "ff486be806f908a2a90780e499a04dbd34e10e3b97be0470cb9ee841a1e49e77";
+var DIG_CLIENT_WASM_SHA256 = "8c983561eabca34778abf698ca7c2fba36117f87282ca649079599ef7d1b1156";
 var _config = {};
 var _ready = null;
 function configureWasm(config) {
@@ -439,49 +726,62 @@ async function sha256Hex(bytes) {
 function assertIntegrity(hex) {
   if (_config.skipIntegrity) return;
   if (hex !== DIG_CLIENT_WASM_SHA256) {
-    throw new Error(
-      `dig-client wasm integrity check failed \u2014 refusing to run unverified crypto (expected ${DIG_CLIENT_WASM_SHA256}, got ${hex}).`
+    throw new DigSdkError(
+      "WASM_INTEGRITY",
+      `dig-client wasm integrity check failed \u2014 refusing to run unverified crypto (expected ${DIG_CLIENT_WASM_SHA256}, got ${hex}).`,
+      { expected: DIG_CLIENT_WASM_SHA256, actual: hex }
     );
   }
 }
 async function loadNode() {
+  const { createRequire } = await import('module');
   const { readFile } = await import('fs/promises');
-  const { fileURLToPath, pathToFileURL } = await import('url');
-  const path = await import('path');
-  const here = path.dirname(fileURLToPath((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href))));
-  const vendorDir = path.resolve(here, "..", "vendor");
-  const wasmPath = path.join(vendorDir, "dig_client_bg.wasm");
-  const gluePath = path.join(vendorDir, "dig_client.mjs");
+  const require2 = createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href)));
+  const wasmPath = require2.resolve("@dignetwork/dig-client/dig_client_bg.wasm");
   const buf = await readFile(wasmPath);
   const bytes = new Uint8Array(buf.byteLength);
   bytes.set(buf);
-  return { glueHref: pathToFileURL(gluePath).href, bytes };
+  assertIntegrity(await sha256Hex(bytes));
+  const mod = await import('@dignetwork/dig-client/node');
+  return mod;
 }
 async function loadBrowser() {
-  const glueHref = _config.glueUrl ?? new URL("../vendor/dig_client.mjs", (typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href))).href;
-  let bytes;
-  if (_config.wasmBytes) {
-    bytes = _config.wasmBytes;
+  const glueHref = _config.glueUrl ?? "@dignetwork/dig-client/web";
+  const mod = await import(
+    /* @vite-ignore */
+    glueHref
+  );
+  if (typeof mod.default !== "function") {
+    throw new DigSdkError(
+      "WASM_LOAD_FAILED",
+      "dig-client web build exposed no init function (unexpected module shape)",
+      {}
+    );
+  }
+  if (_config.wasmBytes || _config.wasmUrl) {
+    let bytes;
+    if (_config.wasmBytes) {
+      bytes = _config.wasmBytes;
+    } else {
+      const wasmUrl = _config.wasmUrl;
+      const res = await fetch(wasmUrl);
+      if (!res.ok)
+        throw new DigSdkError("WASM_LOAD_FAILED", `dig-client wasm fetch failed (${res.status})`, {
+          httpStatus: res.status,
+          wasmUrl
+        });
+      bytes = await res.arrayBuffer();
+    }
+    assertIntegrity(await sha256Hex(bytes));
+    await mod.default({ module_or_path: bytes });
   } else {
-    const wasmUrl = _config.wasmUrl ?? new URL("../vendor/dig_client_bg.wasm", (typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('index.cjs', document.baseURI).href))).href;
-    const res = await fetch(wasmUrl);
-    if (!res.ok) throw new Error(`dig-client wasm fetch failed (${res.status})`);
-    bytes = await res.arrayBuffer();
+    await mod.default();
   }
-  return { glueHref, bytes };
+  return mod;
 }
 function loadDigClientWasm() {
   if (_ready) return _ready;
-  _ready = (async () => {
-    const { glueHref, bytes } = isNode ? await loadNode() : await loadBrowser();
-    assertIntegrity(await sha256Hex(bytes));
-    const mod = await import(
-      /* @vite-ignore */
-      glueHref
-    );
-    await mod.default({ module_or_path: bytes });
-    return mod;
-  })().catch((e) => {
+  _ready = (isNode ? loadNode() : loadBrowser()).catch((e) => {
     _ready = null;
     throw e;
   });
@@ -494,8 +794,10 @@ function parseUrn(raw) {
   const s = String(raw ?? "").trim();
   const m = URN_RE.exec(s);
   if (!m) {
-    throw new Error(
-      "Not a valid dig URN (expected urn:dig:chia:<store-id>[:<root>]/<path>[?salt=<hex>])."
+    throw new DigSdkError(
+      "INVALID_ARGUMENT",
+      "Not a valid dig URN (expected urn:dig:chia:<store-id>[:<root>]/<path>[?salt=<hex>]).",
+      { value: s, expected: "urn:dig:chia:<store-id>[:<root>]/<path>[?salt=<hex>]" }
     );
   }
   return {
@@ -587,8 +889,10 @@ var DigClient = class {
     const effSalt = input.salt ?? parsed.salt ?? null;
     const effRoot = input.root ?? parsed.root ?? null;
     if (!effRoot) {
-      throw new Error(
-        "a confirmed on-chain root is required to read content (pass { root } or use a root-pinned URN)"
+      throw new DigSdkError(
+        "ROOT_REQUIRED",
+        "a confirmed on-chain root is required to read content (pass { root } or use a root-pinned URN)",
+        { urn: input.urn }
       );
     }
     return this.readResource(
@@ -600,8 +904,10 @@ var DigClient = class {
   async readText(input, opts = {}) {
     const r = await this.read(input, opts);
     if (!r.decrypted) {
-      throw new Error(
-        "resource did not decrypt under this URN \u2014 wrong store/key/salt, or a decoy response"
+      throw new DigSdkError(
+        "DECRYPT_FAILED",
+        "resource did not decrypt under this URN \u2014 wrong store/key/salt, or a decoy response",
+        { urn: input.urn }
       );
     }
     return new TextDecoder().decode(r.bytes);
@@ -650,6 +956,62 @@ var DigClient = class {
       };
     }
   }
+  /**
+   * Read a collection's public, owner-independent facts (creator DID, item count, uniform royalty)
+   * from the dig RPC (`dig.getCollection`). The collection's item set is its NFT launcher ids — the
+   * authoritative, owner-independent anchor the mint produced (a DID-attributed NFT is hinted to its
+   * OWNER at mint, not to the creator DID, so launcher ids — not the DID — are the read key). Pass
+   * the optional `did` to have it echoed back and recorded as the declared creator.
+   *
+   * No wallet, no read-crypto wasm — a plain JSON-RPC read. Throws a coded {@link DigSdkError} on a
+   * transport/RPC failure (never a "not found": an empty/partly-confirmed set just resolves to fewer
+   * items).
+   *
+   * @example
+   * const meta = await dig.getCollection({ launcherIds: ["ab…", "cd…"], did: "ef…" });
+   * console.log(meta.resolved_count, meta.royalty_basis_points);
+   */
+  async getCollection(input, opts = {}) {
+    const rpc = opts.rpc ?? this.rpc;
+    const params = { launcher_ids: input.launcherIds };
+    if (input.did) params.did = input.did;
+    const r = await this.rpcCall(rpc, "dig.getCollection", params);
+    if (!r)
+      throw new DigSdkError(
+        "RPC_MALFORMED_RESPONSE",
+        "The content network returned no collection facts for this request.",
+        { rpcMethod: "dig.getCollection" }
+      );
+    return r;
+  }
+  /**
+   * Read a deterministic, paginated page of a collection's items (`dig.listCollectionItems`), each
+   * resolved to its CURRENT on-chain state — current owner, royalty, and CHIP-0007 metadata — by the
+   * RPC walking the singleton lineage forward to the live tip (so the owner is never the stale
+   * mint-time owner). Items come back in the input launcher-id order. `limit` is clamped to the
+   * server cap (200); `offset` defaults to 0.
+   *
+   * Throws a coded {@link DigSdkError} on a transport/RPC failure.
+   *
+   * @example
+   * let page = await dig.listCollectionItems({ launcherIds, limit: 50 });
+   * for (const item of page.items) console.log(item.launcher_id, item.owner_puzzle_hash);
+   * // page.next_offset is null on the last page.
+   */
+  async listCollectionItems(input, opts = {}) {
+    const rpc = opts.rpc ?? this.rpc;
+    const params = { launcher_ids: input.launcherIds };
+    if (input.offset !== void 0) params.offset = input.offset;
+    if (input.limit !== void 0) params.limit = input.limit;
+    const r = await this.rpcCall(rpc, "dig.listCollectionItems", params);
+    if (!r)
+      throw new DigSdkError(
+        "RPC_MALFORMED_RESPONSE",
+        "The content network returned no collection items for this request.",
+        { rpcMethod: "dig.listCollectionItems" }
+      );
+    return r;
+  }
   // Stream the FULL ciphertext for a resource from the RPC by retrieval key, reassembling 3-MiB
   // chunks. A null result is a TRANSPORT failure, never a presence judgment.
   async fetchCiphertext(storeId, rk, root, rpc) {
@@ -666,7 +1028,12 @@ var DigClient = class {
         offset,
         length: RPC_CHUNK_BYTES
       });
-      if (!r) throw new Error("The content network returned no data for this request.");
+      if (!r)
+        throw new DigSdkError(
+          "RPC_MALFORMED_RESPONSE",
+          "The content network returned no data for this request.",
+          { rpcMethod: "dig.getContent" }
+        );
       if (total === null) {
         total = r.total_length >>> 0;
         buf = new Uint8Array(total);
@@ -683,7 +1050,8 @@ var DigClient = class {
     }
     return { ciphertext: buf ?? new Uint8Array(0), proof, chunkLens };
   }
-  // One JSON-RPC 2.0 call. Throws on transport failure or a JSON-RPC error; returns `result`.
+  // One JSON-RPC 2.0 call. Throws a coded DigSdkError on transport failure (RPC_TRANSPORT) or a
+  // JSON-RPC/HTTP error (RPC_ERROR, carrying rpcMethod/httpStatus/rpcCode context); returns `result`.
   async rpcCall(rpc, method, params) {
     let res;
     try {
@@ -692,12 +1060,26 @@ var DigClient = class {
         headers: { "content-type": "application/json" },
         body: JSON.stringify({ jsonrpc: "2.0", id: 1, method, params })
       });
-    } catch {
-      throw new Error("Could not reach the content network. Check your connection and try again.");
+    } catch (e) {
+      throw new DigSdkError(
+        "RPC_TRANSPORT",
+        "Could not reach the content network. Check your connection and try again.",
+        { rpcMethod: method },
+        { cause: e }
+      );
     }
-    if (!res.ok) throw new Error(`dig RPC ${method} failed (${res.status})`);
+    if (!res.ok)
+      throw new DigSdkError("RPC_ERROR", `dig RPC ${method} failed (${res.status})`, {
+        rpcMethod: method,
+        httpStatus: res.status
+      });
     const json = await res.json();
-    if (json && json.error) throw new Error(`dig RPC ${method}: ${json.error.message ?? "error"}`);
+    if (json && json.error)
+      throw new DigSdkError(
+        "RPC_ERROR",
+        `dig RPC ${method}: ${json.error.message ?? "error"}`,
+        { rpcMethod: method, rpcCode: json.error.code }
+      );
     return json ? json.result ?? null : null;
   }
 };
@@ -705,7 +1087,11 @@ function decryptResourceChunks(wasm, keyHex, ciphertext, chunkLens) {
   const lens = chunkLens && chunkLens.length ? chunkLens : [ciphertext.length];
   const total = lens.reduce((a, n) => a + n, 0);
   if (total !== ciphertext.length) {
-    throw new Error("served ciphertext length does not match chunk lengths");
+    throw new DigSdkError(
+      "RPC_MALFORMED_RESPONSE",
+      "served ciphertext length does not match chunk lengths",
+      { rpcMethod: "dig.getContent", expected: String(total), actual: String(ciphertext.length) }
+    );
   }
   if (lens.length === 1) return wasm.decryptChunk(keyHex, ciphertext);
   const parts = [];
@@ -724,25 +1110,78 @@ function decryptResourceChunks(wasm, keyHex, ciphertext, chunkLens) {
 }
 function undefinedFetch() {
   return (() => {
-    throw new Error(
+    throw new DigSdkError(
+      "INVALID_ARGUMENT",
       "No global fetch available. Pass { fetch } to DigClient (Node < 18 needs a fetch polyfill)."
     );
   });
 }
 
+// src/capabilities.ts
+var SDK_VERSION = "0.2.1" ;
+var MODULES = Object.freeze([
+  {
+    name: "ChiaProvider",
+    summary: "Unified Chia wallet surface \u2014 prefers the injected DIG Browser wallet, falls back to WalletConnect\u2192Sage.",
+    entry: "@dignetwork/dig-sdk"
+  },
+  {
+    name: "DigClient",
+    summary: "Read-crypto: derive URN keys, verify inclusion against an on-chain root, and decrypt content from the dig RPC.",
+    entry: "@dignetwork/dig-sdk"
+  },
+  {
+    name: "Paywall",
+    summary: "Pay-to-unlock helper composing ChiaProvider with the canonical chip35 monetization spends (payment / receipt / NFT+collection gating).",
+    entry: "@dignetwork/dig-sdk"
+  },
+  {
+    name: "spend",
+    summary: "The canonical CHIP-0035 spend builder (@dignetwork/chip35-dl-coin-wasm), re-exported verbatim.",
+    entry: "@dignetwork/dig-sdk/spend"
+  },
+  {
+    name: "adapters",
+    summary: "Framework deploy glue (Vite + Next): dev window.chia shim and `digstore deploy` runner.",
+    entry: "@dignetwork/dig-sdk/adapters"
+  }
+]);
+function capabilities() {
+  return {
+    name: "@dignetwork/dig-sdk",
+    version: SDK_VERSION,
+    modules: MODULES,
+    walletMethods: [...WALLET_METHODS],
+    signMethods: [...SIGN_METHODS],
+    transports: ["injected", "walletconnect"],
+    chains: [DEFAULT_CHAIN],
+    defaultRpc: DEFAULT_RPC,
+    readCryptoWasmSha256: DIG_CLIENT_WASM_SHA256,
+    errorCodes: Object.values(DIG_SDK_ERROR_CODES)
+  };
+}
+var describe = capabilities;
+
 exports.ChiaProvider = ChiaProvider;
 exports.DEFAULT_CHAIN = DEFAULT_CHAIN;
 exports.DEFAULT_RPC = DEFAULT_RPC;
 exports.DIG_CLIENT_WASM_SHA256 = DIG_CLIENT_WASM_SHA256;
+exports.DIG_SDK_ERROR_CODES = DIG_SDK_ERROR_CODES;
 exports.DigClient = DigClient;
+exports.DigSdkError = DigSdkError;
 exports.INJECTED_TOPIC = INJECTED_TOPIC;
 exports.InjectedTransport = InjectedTransport;
+exports.Paywall = Paywall;
+exports.SDK_VERSION = SDK_VERSION;
 exports.SIGN_METHODS = SIGN_METHODS;
 exports.WALLET_METHODS = WALLET_METHODS;
 exports.WalletConnectTransport = WalletConnectTransport;
+exports.capabilities = capabilities;
 exports.configureWasm = configureWasm;
 exports.connectWallet = connectWallet;
+exports.describe = describe;
 exports.getInjectedProvider = getInjectedProvider;
+exports.isDigSdkError = isDigSdkError;
 exports.isInjectedAvailable = isInjectedAvailable;
 exports.isTransientPublishError = isTransientPublishError;
 exports.isUrn = isUrn;