@fairmint/canton-node-sdk 0.0.119 → 0.0.120

package/build/src/utils/external-signing/create-external-party.js

@@ -0,0 +1,81 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createExternalParty = createExternalParty;
+const validator_api_1 = require("../../clients/validator-api");
+const stellar_utils_1 = require("./stellar-utils");
+/**
+ * Creates an external party in Canton
+ *
+ * This is a convenience function that combines the three-step process:
+ *
+ * 1. Generate topology transactions
+ * 2. Sign the multi-hash
+ * 3. Allocate the party
+ *
+ * The keypair's private key is used to sign the onboarding transactions, proving ownership of the public key.
+ *
+ * @example
+ *   ```typescript
+ *   import { Keypair } from '@stellar/stellar-base';
+ *   import { createExternalParty } from '@fairmint/canton-node-sdk';
+ *
+ *   const keypair = Keypair.random();
+ *   const party = await createExternalParty({
+ *     ledgerClient,
+ *     keypair,
+ *     partyName: 'alice',
+ *     synchronizerId: 'global-synchronizer',
+ *   });
+ *
+ *   console.log('Party ID:', party.partyId);
+ *   console.log('Public Key Fingerprint:', party.publicKeyFingerprint);
+ *   ```;
+ *
+ * @param params - Configuration for external party creation
+ * @returns Party details including party ID and key fingerprint
+ */
+async function createExternalParty(params) {
+    const { keypair, partyName } = params;
+    // Initialize Validator API client
+    const validatorClient = new validator_api_1.ValidatorApiClient();
+    // Step 1: Convert Stellar public key to hex for Validator API
+    const publicKeyHex = (0, stellar_utils_1.stellarPublicKeyToHex)(keypair);
+    // Step 2: Generate external party topology using Validator API
+    const topology = await validatorClient.generateExternalPartyTopology({
+        party_hint: partyName,
+        public_key: publicKeyHex,
+    });
+    const { party_id, topology_txs } = topology;
+    if (!party_id) {
+        throw new Error('No party ID returned from topology generation');
+    }
+    if (topology_txs?.length === 0) {
+        throw new Error('No topology transactions returned from topology generation');
+    }
+    // Step 3: Sign each topology transaction hash using the Stellar keypair
+    const signedTopologyTxs = topology_txs.map((tx) => ({
+        topology_tx: tx.topology_tx,
+        signed_hash: (0, stellar_utils_1.signHexWithStellarKeypair)(keypair, tx.hash),
+    }));
+    // Step 4: Submit the signed topology transactions using Validator API
+    const submitResult = await validatorClient.submitExternalPartyTopology({
+        public_key: publicKeyHex,
+        signed_topology_txs: signedTopologyTxs,
+    });
+    if (!submitResult.party_id) {
+        throw new Error('Failed to submit external party topology - no party ID returned');
+    }
+    // Note: For external parties, we don't need to create a separate user or grant rights.
+    // When preparing transactions, we'll use the validator operator's user ID (fetched automatically
+    // by prepareExternalTransaction from the validator API). The external signature itself provides
+    // the authorization for the transaction.
+    return {
+        partyId: submitResult.party_id,
+        userId: '', // Will be resolved automatically when preparing transactions
+        publicKey: publicKeyHex,
+        publicKeyFingerprint: party_id.split('::')[1] ?? '', // Extract fingerprint from party ID
+        stellarAddress: keypair.publicKey(),
+        stellarSecret: keypair.secret(),
+    };
+}
+//# sourceMappingURL=create-external-party.js.map

package/build/src/utils/external-signing/create-external-party.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-external-party.js","sourceRoot":"","sources":["../../../../src/utils/external-signing/create-external-party.ts"],"names":[],"mappings":";;AAwEA,kDAsDC;AA5HD,+DAAiE;AACjE,mDAAmF;AAsCnF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACI,KAAK,UAAU,mBAAmB,CAAC,MAAiC;IACzE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,CAAC;IAEtC,kCAAkC;IAClC,MAAM,eAAe,GAAG,IAAI,kCAAkB,EAAE,CAAC;IAEjD,8DAA8D;IAC9D,MAAM,YAAY,GAAG,IAAA,qCAAqB,EAAC,OAAO,CAAC,CAAC;IAEpD,+DAA+D;IAC/D,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,6BAA6B,CAAC;QACnE,UAAU,EAAE,SAAS;QACrB,UAAU,EAAE,YAAY;KACzB,CAAC,CAAC;IAEH,MAAM,EAAE,QAAQ,EAAE,YAAY,EAAE,GAAG,QAAQ,CAAC;IAE5C,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CAAC,+CAA+C,CAAC,CAAC;IACnE,CAAC;IAED,IAAI,YAAY,EAAE,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;IAChF,CAAC;IAED,wEAAwE;IACxE,MAAM,iBAAiB,GAAG,YAAY,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAClD,WAAW,EAAE,EAAE,CAAC,WAAW;QAC3B,WAAW,EAAE,IAAA,yCAAyB,EAAC,OAAO,EAAE,EAAE,CAAC,IAAI,CAAC;KACzD,CAAC,CAAC,CAAC;IAEJ,sEAAsE;IACtE,MAAM,YAAY,GAAG,MAAM,eAAe,CAAC,2BAA2B,CAAC;QACrE,UAAU,EAAE,YAAY;QACxB,mBAAmB,EAAE,iBAAiB;KACvC,CAAC,CAAC;IAEH,IAAI,CAAC,YAAY,CAAC,QAAQ,EAAE,CAAC;QAC3B,MAAM,IAAI,KAAK,CAAC,iEAAiE,CAAC,CAAC;IACrF,CAAC;IAED,uFAAuF;IACvF,iGAAiG;IACjG,gGAAgG;IAChG,yCAAyC;IAEzC,OAAO;QACL,OAAO,EAAE,YAAY,CAAC,QAAQ;QAC9B,MAAM,EAAE,EAAE,EAAE,6DAA6D;QACzE,SAAS,EAAE,YAAY;QACvB,oBAAoB,EAAE,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,oCAAoC;QACzF,cAAc,EAAE,OAAO,CAAC,SAAS,EAAE;QACnC,aAAa,EAAE,OAAO,CAAC,MAAM,EAAE;KAChC,CAAC;AACJ,CAAC"}

package/build/src/utils/external-signing/execute-external-transaction.d.ts

@@ -0,0 +1,15 @@
+import { type LedgerJsonApiClient } from '../../clients/ledger-json-api';
+import { type InteractiveSubmissionExecuteRequest, type InteractiveSubmissionExecuteResponse } from '../../clients/ledger-json-api/schemas/api/interactive-submission';
+export type PartySignature = InteractiveSubmissionExecuteRequest['partySignatures']['signatures'][number];
+export interface ExecuteExternalTransactionOptions {
+    ledgerClient: LedgerJsonApiClient;
+    userId: string;
+    preparedTransaction: string;
+    submissionId: string;
+    partySignatures: PartySignature[];
+    hashingSchemeVersion?: string;
+    deduplicationPeriod?: InteractiveSubmissionExecuteRequest['deduplicationPeriod'];
+}
+/** Submit a previously prepared and externally signed interactive submission to the ledger. */
+export declare function executeExternalTransaction(options: ExecuteExternalTransactionOptions): Promise<InteractiveSubmissionExecuteResponse>;
+//# sourceMappingURL=execute-external-transaction.d.ts.map

package/build/src/utils/external-signing/execute-external-transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute-external-transaction.d.ts","sourceRoot":"","sources":["../../../../src/utils/external-signing/execute-external-transaction.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,KAAK,mCAAmC,EACxC,KAAK,oCAAoC,EAC1C,MAAM,kEAAkE,CAAC;AAE1E,MAAM,MAAM,cAAc,GAAG,mCAAmC,CAAC,iBAAiB,CAAC,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1G,MAAM,WAAW,iCAAiC;IAChD,YAAY,EAAE,mBAAmB,CAAC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,mBAAmB,EAAE,MAAM,CAAC;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,cAAc,EAAE,CAAC;IAClC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,mBAAmB,CAAC,EAAE,mCAAmC,CAAC,qBAAqB,CAAC,CAAC;CAClF;AAED,+FAA+F;AAC/F,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,oCAAoC,CAAC,CAe/C"}

package/build/src/utils/external-signing/execute-external-transaction.js

@@ -0,0 +1,21 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.executeExternalTransaction = executeExternalTransaction;
+/** Submit a previously prepared and externally signed interactive submission to the ledger. */
+async function executeExternalTransaction(options) {
+    return options.ledgerClient.interactiveSubmissionExecute({
+        userId: options.userId,
+        preparedTransaction: options.preparedTransaction,
+        hashingSchemeVersion: options.hashingSchemeVersion ?? 'HASHING_SCHEME_VERSION_V2',
+        submissionId: options.submissionId,
+        deduplicationPeriod: options.deduplicationPeriod ?? {
+            DeduplicationDuration: {
+                value: { duration: '30s' },
+            },
+        },
+        partySignatures: {
+            signatures: options.partySignatures,
+        },
+    });
+}
+//# sourceMappingURL=execute-external-transaction.js.map

package/build/src/utils/external-signing/execute-external-transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"execute-external-transaction.js","sourceRoot":"","sources":["../../../../src/utils/external-signing/execute-external-transaction.ts"],"names":[],"mappings":";;AAmBA,gEAiBC;AAlBD,+FAA+F;AACxF,KAAK,UAAU,0BAA0B,CAC9C,OAA0C;IAE1C,OAAO,OAAO,CAAC,YAAY,CAAC,4BAA4B,CAAC;QACvD,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,mBAAmB,EAAE,OAAO,CAAC,mBAAmB;QAChD,oBAAoB,EAAE,OAAO,CAAC,oBAAoB,IAAI,2BAA2B;QACjF,YAAY,EAAE,OAAO,CAAC,YAAY;QAClC,mBAAmB,EAAE,OAAO,CAAC,mBAAmB,IAAI;YAClD,qBAAqB,EAAE;gBACrB,KAAK,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE;aAC3B;SACF;QACD,eAAe,EAAE;YACf,UAAU,EAAE,OAAO,CAAC,eAAe;SACpC;KACF,CAAC,CAAC;AACL,CAAC"}

package/build/src/utils/external-signing/generate-external-party.d.ts

@@ -0,0 +1,15 @@
+import { type LedgerJsonApiClient } from '../../clients/ledger-json-api';
+import { type GenerateExternalPartyTopologyParams, type GenerateExternalPartyTopologyResponse } from '../../clients/ledger-json-api/operations/v2/parties/external/generate-topology';
+export interface GenerateExternalPartyOptions {
+    ledgerClient: LedgerJsonApiClient;
+    synchronizerId: string;
+    partyHint: string;
+    publicKey: GenerateExternalPartyTopologyParams['publicKey'];
+    localParticipantObservationOnly?: boolean;
+    otherConfirmingParticipantUids?: string[];
+    confirmationThreshold?: number;
+    observingParticipantUids?: string[];
+}
+/** Helper that invokes the external party topology generation endpoint. */
+export declare function generateExternalPartyTopology(options: GenerateExternalPartyOptions): Promise<GenerateExternalPartyTopologyResponse>;
+//# sourceMappingURL=generate-external-party.d.ts.map

package/build/src/utils/external-signing/generate-external-party.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-external-party.d.ts","sourceRoot":"","sources":["../../../../src/utils/external-signing/generate-external-party.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,KAAK,mCAAmC,EACxC,KAAK,qCAAqC,EAC3C,MAAM,gFAAgF,CAAC;AAExF,MAAM,WAAW,4BAA4B;IAC3C,YAAY,EAAE,mBAAmB,CAAC;IAClC,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,mCAAmC,CAAC,WAAW,CAAC,CAAC;IAC5D,+BAA+B,CAAC,EAAE,OAAO,CAAC;IAC1C,8BAA8B,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1C,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,wBAAwB,CAAC,EAAE,MAAM,EAAE,CAAC;CACrC;AAED,2EAA2E;AAC3E,wBAAsB,6BAA6B,CACjD,OAAO,EAAE,4BAA4B,GACpC,OAAO,CAAC,qCAAqC,CAAC,CAUhD"}

package/build/src/utils/external-signing/generate-external-party.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.generateExternalPartyTopology = generateExternalPartyTopology;
+/** Helper that invokes the external party topology generation endpoint. */
+async function generateExternalPartyTopology(options) {
+    return options.ledgerClient.generateExternalPartyTopology({
+        synchronizer: options.synchronizerId,
+        partyHint: options.partyHint,
+        publicKey: options.publicKey,
+        localParticipantObservationOnly: options.localParticipantObservationOnly ?? false,
+        otherConfirmingParticipantUids: options.otherConfirmingParticipantUids,
+        confirmationThreshold: options.confirmationThreshold,
+        observingParticipantUids: options.observingParticipantUids,
+    });
+}
+//# sourceMappingURL=generate-external-party.js.map

package/build/src/utils/external-signing/generate-external-party.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generate-external-party.js","sourceRoot":"","sources":["../../../../src/utils/external-signing/generate-external-party.ts"],"names":[],"mappings":";;AAkBA,sEAYC;AAbD,2EAA2E;AACpE,KAAK,UAAU,6BAA6B,CACjD,OAAqC;IAErC,OAAO,OAAO,CAAC,YAAY,CAAC,6BAA6B,CAAC;QACxD,YAAY,EAAE,OAAO,CAAC,cAAc;QACpC,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,+BAA+B,EAAE,OAAO,CAAC,+BAA+B,IAAI,KAAK;QACjF,8BAA8B,EAAE,OAAO,CAAC,8BAA8B;QACtE,qBAAqB,EAAE,OAAO,CAAC,qBAAqB;QACpD,wBAAwB,EAAE,OAAO,CAAC,wBAAwB;KAC3D,CAAC,CAAC;AACL,CAAC"}

package/build/src/utils/external-signing/index.d.ts

@@ -0,0 +1,7 @@
+export * from './allocate-external-party';
+export * from './create-external-party-privy';
+export * from './execute-external-transaction';
+export * from './generate-external-party';
+export * from './prepare-external-transaction';
+export * from './privy-utils';
+//# sourceMappingURL=index.d.ts.map

package/build/src/utils/external-signing/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/utils/external-signing/index.ts"],"names":[],"mappings":"AAAA,cAAc,2BAA2B,CAAC;AAC1C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,2BAA2B,CAAC;AAC1C,cAAc,gCAAgC,CAAC;AAC/C,cAAc,eAAe,CAAC"}

package/build/src/utils/external-signing/index.js

@@ -0,0 +1,23 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __exportStar = (this && this.__exportStar) || function(m, exports) {
+    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+__exportStar(require("./allocate-external-party"), exports);
+__exportStar(require("./create-external-party-privy"), exports);
+__exportStar(require("./execute-external-transaction"), exports);
+__exportStar(require("./generate-external-party"), exports);
+__exportStar(require("./prepare-external-transaction"), exports);
+__exportStar(require("./privy-utils"), exports);
+//# sourceMappingURL=index.js.map

package/build/src/utils/external-signing/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/utils/external-signing/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,4DAA0C;AAC1C,gEAA8C;AAC9C,iEAA+C;AAC/C,4DAA0C;AAC1C,iEAA+C;AAC/C,gDAA8B"}

package/build/src/utils/external-signing/prepare-external-transaction.d.ts

@@ -0,0 +1,20 @@
+import { type LedgerJsonApiClient } from '../../clients/ledger-json-api';
+import { type InteractiveSubmissionPrepareRequest, type InteractiveSubmissionPrepareResponse } from '../../clients/ledger-json-api/schemas/api/interactive-submission';
+export interface PrepareExternalTransactionOptions {
+    ledgerClient: LedgerJsonApiClient;
+    commands: InteractiveSubmissionPrepareRequest['commands'];
+    userId: string;
+    actAs: string[];
+    synchronizerId: string;
+    commandId?: string;
+    readAs?: string[];
+    disclosedContracts?: InteractiveSubmissionPrepareRequest['disclosedContracts'];
+    verboseHashing?: boolean;
+    packageIdSelectionPreference?: InteractiveSubmissionPrepareRequest['packageIdSelectionPreference'];
+}
+export interface PrepareExternalTransactionResult extends InteractiveSubmissionPrepareResponse {
+    commandId: string;
+}
+/** Convenience helper for preparing an interactive submission that will be signed off-ledger. */
+export declare function prepareExternalTransaction(options: PrepareExternalTransactionOptions): Promise<PrepareExternalTransactionResult>;
+//# sourceMappingURL=prepare-external-transaction.d.ts.map

package/build/src/utils/external-signing/prepare-external-transaction.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepare-external-transaction.d.ts","sourceRoot":"","sources":["../../../../src/utils/external-signing/prepare-external-transaction.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,KAAK,mBAAmB,EAAE,MAAM,+BAA+B,CAAC;AACzE,OAAO,EACL,KAAK,mCAAmC,EACxC,KAAK,oCAAoC,EAC1C,MAAM,kEAAkE,CAAC;AAE1E,MAAM,WAAW,iCAAiC;IAChD,YAAY,EAAE,mBAAmB,CAAC;IAClC,QAAQ,EAAE,mCAAmC,CAAC,UAAU,CAAC,CAAC;IAC1D,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,kBAAkB,CAAC,EAAE,mCAAmC,CAAC,oBAAoB,CAAC,CAAC;IAC/E,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,4BAA4B,CAAC,EAAE,mCAAmC,CAAC,8BAA8B,CAAC,CAAC;CACpG;AAED,MAAM,WAAW,gCAAiC,SAAQ,oCAAoC;IAC5F,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,iGAAiG;AACjG,wBAAsB,0BAA0B,CAC9C,OAAO,EAAE,iCAAiC,GACzC,OAAO,CAAC,gCAAgC,CAAC,CAmB3C"}

package/build/src/utils/external-signing/prepare-external-transaction.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.prepareExternalTransaction = prepareExternalTransaction;
+const node_crypto_1 = require("node:crypto");
+/** Convenience helper for preparing an interactive submission that will be signed off-ledger. */
+async function prepareExternalTransaction(options) {
+    const commandId = options.commandId ?? (0, node_crypto_1.randomUUID)();
+    const response = await options.ledgerClient.interactiveSubmissionPrepare({
+        commands: options.commands,
+        commandId,
+        userId: options.userId,
+        actAs: options.actAs,
+        readAs: options.readAs ?? [],
+        disclosedContracts: options.disclosedContracts,
+        synchronizerId: options.synchronizerId,
+        verboseHashing: options.verboseHashing ?? false,
+        packageIdSelectionPreference: options.packageIdSelectionPreference ?? [],
+    });
+    return {
+        ...response,
+        commandId,
+    };
+}
+//# sourceMappingURL=prepare-external-transaction.js.map

package/build/src/utils/external-signing/prepare-external-transaction.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prepare-external-transaction.js","sourceRoot":"","sources":["../../../../src/utils/external-signing/prepare-external-transaction.ts"],"names":[],"mappings":";;AAyBA,gEAqBC;AA9CD,6CAAyC;AAwBzC,iGAAiG;AAC1F,KAAK,UAAU,0BAA0B,CAC9C,OAA0C;IAE1C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAA,wBAAU,GAAE,CAAC;IAEpD,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,4BAA4B,CAAC;QACvE,QAAQ,EAAE,OAAO,CAAC,QAAQ;QAC1B,SAAS;QACT,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE;QAC5B,kBAAkB,EAAE,OAAO,CAAC,kBAAkB;QAC9C,cAAc,EAAE,OAAO,CAAC,cAAc;QACtC,cAAc,EAAE,OAAO,CAAC,cAAc,IAAI,KAAK;QAC/C,4BAA4B,EAAE,OAAO,CAAC,4BAA4B,IAAI,EAAE;KACzE,CAAC,CAAC;IAEH,OAAO;QACL,GAAG,QAAQ;QACX,SAAS;KACV,CAAC;AACJ,CAAC"}

package/build/src/utils/external-signing/privy-utils.d.ts

@@ -0,0 +1,25 @@
+import type { PrivyClient } from '@privy-io/node';
+/**
+ * Signs data with a Privy-managed Stellar wallet
+ *
+ * @param privyClient - Privy client instance
+ * @param walletId - Wallet ID to sign with
+ * @param data - Data to sign (as Buffer or base64 string)
+ * @returns Base64-encoded signature
+ */
+export declare function signWithPrivyWallet(privyClient: PrivyClient, walletId: string, data: Buffer | string): Promise<string>;
+/** Wallet info stored in key files for Privy-based external parties */
+export interface PrivyWalletKeyData {
+    partyName: string;
+    partyId: string;
+    userId: string;
+    walletId: string;
+    stellarAddress: string;
+    publicKey: string;
+    publicKeyFingerprint: string;
+    synchronizerId: string;
+    network: string;
+    provider: string;
+    createdAt: string;
+}
+//# sourceMappingURL=privy-utils.d.ts.map

package/build/src/utils/external-signing/privy-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"privy-utils.d.ts","sourceRoot":"","sources":["../../../../src/utils/external-signing/privy-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAElD;;;;;;;GAOG;AACH,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,WAAW,EACxB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GAAG,MAAM,GACpB,OAAO,CAAC,MAAM,CAAC,CAajB;AAED,uEAAuE;AACvE,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,cAAc,EAAE,MAAM,CAAC;IACvB,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB"}

package/build/src/utils/external-signing/privy-utils.js

@@ -0,0 +1,56 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.signWithPrivyWallet = signWithPrivyWallet;
+/**
+ * Signs data with a Privy-managed Stellar wallet
+ *
+ * @param privyClient - Privy client instance
+ * @param walletId - Wallet ID to sign with
+ * @param data - Data to sign (as Buffer or base64 string)
+ * @returns Base64-encoded signature
+ */
+async function signWithPrivyWallet(privyClient, walletId, data) {
+    const { signWithWallet } = await Promise.resolve().then(() => __importStar(require('../privy/signData')));
+    // Convert data to hex
+    const hexData = typeof data === 'string' ? Buffer.from(data, 'base64').toString('hex') : data.toString('hex');
+    const signResult = await signWithWallet(privyClient, {
+        walletId,
+        data: hexData,
+    });
+    // Return base64-encoded signature
+    return signResult.signatureBase64;
+}
+//# sourceMappingURL=privy-utils.js.map

package/build/src/utils/external-signing/privy-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"privy-utils.js","sourceRoot":"","sources":["../../../../src/utils/external-signing/privy-utils.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAUA,kDAiBC;AAzBD;;;;;;;GAOG;AACI,KAAK,UAAU,mBAAmB,CACvC,WAAwB,EACxB,QAAgB,EAChB,IAAqB;IAErB,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,mBAAmB,GAAC,CAAC;IAE7D,sBAAsB;IACtB,MAAM,OAAO,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IAE9G,MAAM,UAAU,GAAG,MAAM,cAAc,CAAC,WAAW,EAAE;QACnD,QAAQ;QACR,IAAI,EAAE,OAAO;KACd,CAAC,CAAC;IAEH,kCAAkC;IAClC,OAAO,UAAU,CAAC,eAAe,CAAC;AACpC,CAAC"}

package/build/src/utils/external-signing/stellar-utils.d.ts

@@ -0,0 +1,48 @@
+import { Keypair } from '@stellar/stellar-base';
+/**
+ * Converts a Stellar public key to base64 format for Canton
+ *
+ * Stellar Ed25519 keys can be used for Canton external signing. This function extracts the raw 32-byte public key and
+ * converts it to base64.
+ *
+ * @param keypair - Stellar Keypair object
+ * @returns Base64-encoded public key
+ */
+export declare function stellarPublicKeyToBase64(keypair: Keypair): string;
+/**
+ * Signs data with a Stellar keypair
+ *
+ * @param keypair - Stellar Keypair object
+ * @param data - Data to sign (as Buffer or base64 string)
+ * @returns Base64-encoded signature
+ */
+export declare function signWithStellarKeypair(keypair: Keypair, data: Buffer | string): string;
+/**
+ * Load a Stellar keypair from a secret key
+ *
+ * @param secret - Stellar secret key (starts with 'S')
+ * @returns Stellar Keypair object
+ */
+export declare function loadStellarKeypair(secret: string): Keypair;
+/**
+ * Generate a new random Stellar keypair
+ *
+ * @returns Stellar Keypair object
+ */
+export declare function generateStellarKeypair(): Keypair;
+/**
+ * Convert Stellar public key to hex string (for Validator API)
+ *
+ * @param keypair - Stellar keypair
+ * @returns Hex-encoded public key
+ */
+export declare function stellarPublicKeyToHex(keypair: Keypair): string;
+/**
+ * Sign hex-encoded hash with Stellar keypair (for Validator API)
+ *
+ * @param keypair - Stellar keypair to sign with
+ * @param hexHash - Hex-encoded hash to sign
+ * @returns Hex-encoded signature
+ */
+export declare function signHexWithStellarKeypair(keypair: Keypair, hexHash: string): string;
+//# sourceMappingURL=stellar-utils.d.ts.map

package/build/src/utils/external-signing/stellar-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"stellar-utils.d.ts","sourceRoot":"","sources":["../../../../src/utils/external-signing/stellar-utils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,uBAAuB,CAAC;AAEhD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAEjE;AAED;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,MAAM,CAItF;AAED;;;;;GAKG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAE1D;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,IAAI,OAAO,CAEhD;AAED;;;;;GAKG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,CAE9D;AAED;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,MAAM,CAInF"}

package/build/src/utils/external-signing/stellar-utils.js

@@ -0,0 +1,72 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.stellarPublicKeyToBase64 = stellarPublicKeyToBase64;
+exports.signWithStellarKeypair = signWithStellarKeypair;
+exports.loadStellarKeypair = loadStellarKeypair;
+exports.generateStellarKeypair = generateStellarKeypair;
+exports.stellarPublicKeyToHex = stellarPublicKeyToHex;
+exports.signHexWithStellarKeypair = signHexWithStellarKeypair;
+const stellar_base_1 = require("@stellar/stellar-base");
+/**
+ * Converts a Stellar public key to base64 format for Canton
+ *
+ * Stellar Ed25519 keys can be used for Canton external signing. This function extracts the raw 32-byte public key and
+ * converts it to base64.
+ *
+ * @param keypair - Stellar Keypair object
+ * @returns Base64-encoded public key
+ */
+function stellarPublicKeyToBase64(keypair) {
+    return keypair.rawPublicKey().toString('base64');
+}
+/**
+ * Signs data with a Stellar keypair
+ *
+ * @param keypair - Stellar Keypair object
+ * @param data - Data to sign (as Buffer or base64 string)
+ * @returns Base64-encoded signature
+ */
+function signWithStellarKeypair(keypair, data) {
+    const dataBuffer = typeof data === 'string' ? Buffer.from(data, 'base64') : data;
+    const signature = keypair.sign(dataBuffer);
+    return signature.toString('base64');
+}
+/**
+ * Load a Stellar keypair from a secret key
+ *
+ * @param secret - Stellar secret key (starts with 'S')
+ * @returns Stellar Keypair object
+ */
+function loadStellarKeypair(secret) {
+    return stellar_base_1.Keypair.fromSecret(secret);
+}
+/**
+ * Generate a new random Stellar keypair
+ *
+ * @returns Stellar Keypair object
+ */
+function generateStellarKeypair() {
+    return stellar_base_1.Keypair.random();
+}
+/**
+ * Convert Stellar public key to hex string (for Validator API)
+ *
+ * @param keypair - Stellar keypair
+ * @returns Hex-encoded public key
+ */
+function stellarPublicKeyToHex(keypair) {
+    return keypair.rawPublicKey().toString('hex');
+}
+/**
+ * Sign hex-encoded hash with Stellar keypair (for Validator API)
+ *
+ * @param keypair - Stellar keypair to sign with
+ * @param hexHash - Hex-encoded hash to sign
+ * @returns Hex-encoded signature
+ */
+function signHexWithStellarKeypair(keypair, hexHash) {
+    const dataBuffer = Buffer.from(hexHash, 'hex');
+    const signature = keypair.sign(dataBuffer);
+    return signature.toString('hex');
+}
+//# sourceMappingURL=stellar-utils.js.map

package/build/src/utils/external-signing/stellar-utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stellar-utils.js","sourceRoot":"","sources":["../../../../src/utils/external-signing/stellar-utils.ts"],"names":[],"mappings":";;AAWA,4DAEC;AASD,wDAIC;AAQD,gDAEC;AAOD,wDAEC;AAQD,sDAEC;AASD,8DAIC;AApED,wDAAgD;AAEhD;;;;;;;;GAQG;AACH,SAAgB,wBAAwB,CAAC,OAAgB;IACvD,OAAO,OAAO,CAAC,YAAY,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,sBAAsB,CAAC,OAAgB,EAAE,IAAqB;IAC5E,MAAM,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACjF,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,OAAO,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AACtC,CAAC;AAED;;;;;GAKG;AACH,SAAgB,kBAAkB,CAAC,MAAc;IAC/C,OAAO,sBAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,SAAgB,sBAAsB;IACpC,OAAO,sBAAO,CAAC,MAAM,EAAE,CAAC;AAC1B,CAAC;AAED;;;;;GAKG;AACH,SAAgB,qBAAqB,CAAC,OAAgB;IACpD,OAAO,OAAO,CAAC,YAAY,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,yBAAyB,CAAC,OAAgB,EAAE,OAAe;IACzE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,OAAO,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;AACnC,CAAC"}

package/build/src/utils/index.d.ts

@@ -1,5 +1,6 @@
 export * from './amulet';
 export * from './contracts';
+export * from './external-signing';
 export * from './mining';
 export * from './parsers';
 export * from './party';

package/build/src/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,gBAAgB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":"AAAA,cAAc,UAAU,CAAC;AACzB,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,UAAU,CAAC;AACzB,cAAc,WAAW,CAAC;AAC1B,cAAc,SAAS,CAAC;AACxB,cAAc,SAAS,CAAC;AACxB,cAAc,gBAAgB,CAAC"}

package/build/src/utils/index.js

@@ -16,6 +16,7 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
 Object.defineProperty(exports, "__esModule", { value: true });
 __exportStar(require("./amulet"), exports);
 __exportStar(require("./contracts"), exports);
+__exportStar(require("./external-signing"), exports);
 __exportStar(require("./mining"), exports);
 __exportStar(require("./parsers"), exports);
 __exportStar(require("./party"), exports);

package/build/src/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,8CAA4B;AAC5B,2CAAyB;AACzB,4CAA0B;AAC1B,0CAAwB;AACxB,0CAAwB;AACxB,iDAA+B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,2CAAyB;AACzB,8CAA4B;AAC5B,qDAAmC;AACnC,2CAAyB;AACzB,4CAA0B;AAC1B,0CAAwB;AACxB,0CAAwB;AACxB,iDAA+B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fairmint/canton-node-sdk",
-  "version": "0.0.119",
+  "version": "0.0.120",
   "description": "Canton Node SDK",
   "keywords": [
     "canton",
@@ -36,6 +36,7 @@
     "format": "prettier --check .",
     "format:fix": "prettier --write .",
     "generate:openapi-types": "tsx scripts/generate-openapi-types.ts",
+    "grant-user-rights": "tsx scripts/grant-user-rights.ts",
     "lint": "eslint .",
     "lint:fix": "eslint . --fix",
     "lint:npm": "npmPkgJsonLint . --fix",
@@ -55,6 +56,7 @@
     "test:watch": "jest --watch"
   },
   "dependencies": {
+    "@canton-network/wallet-sdk": "0.15.0",
     "@privy-io/node": "^0.3.0",
     "@stellar/stellar-base": "^14.0.1",
     "axios": "1.12.2",
@@ -62,6 +64,7 @@
     "glob": "11.0.3",
     "openapi-fetch": "0.15.0",
     "openapi-typescript": "7.10.1",
+    "pino": "^9.0.0",
     "ws": "8.18.3",
     "zod": "4.1.12"
   },