@geeqdev/geeq-sdk 0.1.0 → 0.2.0

package/dist/src/ledger/coin-accounts.d.ts

@@ -0,0 +1,42 @@
+import type { CoinAcctRec } from '../capnp/coinAcctRec.capnp';
+/** Which coin record subtype an account is. Only `'asset'` may sign an attestation. */
+export type GeeqCoinRecordKind = 'asset' | 'hl' | 'micro' | 'unknown';
+/** One coin account record, as plain values. */
+export interface GeeqCoinAccount {
+    readonly accountId: Uint8Array;
+    readonly kind: GeeqCoinRecordKind;
+    /**
+     * `undefined` for a hash-lock record, which carries no nonce field at all, and for a
+     * record whose subtype could not be read.
+     */
+    readonly nonce: number | undefined;
+    /** Balance in pennies. Use `formatGeeq` to show it. */
+    readonly balance: bigint;
+    /** The NFTs it holds, in the order its record lists them. Read for coin-asset records only. */
+    readonly nfts: readonly GeeqHeldNft[];
+}
+/** One NFT an account holds, as its record lists it. */
+export interface GeeqHeldNft {
+    /** The NFT's 32-byte id. */
+    readonly id: Uint8Array;
+    /** A counterparty NFT moves only with a counterparty transaction, never a plain transfer. */
+    readonly counterparty: boolean;
+}
+/** What we keep per account. The id is the map key, so it is not repeated here. */
+export interface CoinAccountFacts {
+    readonly kind: GeeqCoinRecordKind;
+    readonly nonce: number | undefined;
+    readonly balance: bigint;
+    readonly nfts: readonly GeeqHeldNft[];
+}
+/**
+ * Read a coin account's subtype and nonce without tripping the union's zero value.
+ *
+ * `getAsset()` throws on a record of another subtype, and — worse — `ASSET` is the
+ * union's zero value, so a record whose tag is unset and whose pointer is null passes
+ * capnp-ts's `testWhich`. `getStruct` then calls `initStruct`, MUTATING the decoded
+ * message and handing back a zeroed struct whose `getNonce()` is `0`. A silent nonce of
+ * zero is the worst possible failure here, so every arm is guarded by both `isX()` and
+ * `hasX()` and an unreadable record reports `'unknown'` instead of a number.
+ */
+export declare function readCoinAccount(record: CoinAcctRec): CoinAccountFacts;

package/dist/src/ledger/coin-accounts.js

@@ -0,0 +1,37 @@
+import { uint64ToPennies } from '../amount';
+/**
+ * Read a coin account's subtype and nonce without tripping the union's zero value.
+ *
+ * `getAsset()` throws on a record of another subtype, and — worse — `ASSET` is the
+ * union's zero value, so a record whose tag is unset and whose pointer is null passes
+ * capnp-ts's `testWhich`. `getStruct` then calls `initStruct`, MUTATING the decoded
+ * message and handing back a zeroed struct whose `getNonce()` is `0`. A silent nonce of
+ * zero is the worst possible failure here, so every arm is guarded by both `isX()` and
+ * `hasX()` and an unreadable record reports `'unknown'` instead of a number.
+ */
+export function readCoinAccount(record) {
+    const recType = record.getRecType();
+    // The balance lives on the outer record, so every subtype has one.
+    const balance = uint64ToPennies(record.getAmtCoin());
+    if (recType.isAsset()) {
+        if (!recType.hasAsset())
+            return { kind: 'unknown', nonce: undefined, balance, nfts: [] };
+        const asset = recType.getAsset();
+        const nfts = asset.getNftAssetSubgroups().toArray().map((nft) => ({
+            id: new Uint8Array(nft.getAcctNumApp().toArrayBuffer()),
+            counterparty: nft.getFlagCounterpartyNft(),
+        }));
+        return { kind: 'asset', nonce: asset.getNonce(), balance, nfts };
+    }
+    if (recType.isHl()) {
+        // Hash-lock records have no nonce field in the schema at all.
+        return { kind: 'hl', nonce: undefined, balance, nfts: [] };
+    }
+    if (recType.isMicro()) {
+        return recType.hasMicro()
+            ? { kind: 'micro', nonce: recType.getMicro().getNonce(), balance, nfts: [] }
+            : { kind: 'unknown', nonce: undefined, balance, nfts: [] };
+    }
+    return { kind: 'unknown', nonce: undefined, balance, nfts: [] };
+}
+//# sourceMappingURL=coin-accounts.js.map

package/dist/src/ledger/coin-accounts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"coin-accounts.js","sourceRoot":"","sources":["../../../src/ledger/coin-accounts.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAoC3C;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe,CAAC,MAAmB;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;IACnC,mEAAmE;IACnE,MAAM,OAAO,GAAG,eAAe,CAAC,MAAM,CAAC,UAAU,EAAE,CAAC,CAAA;IAEpD,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACtB,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;QACxF,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,EAAE,CAAA;QAChC,MAAM,IAAI,GAAG,KAAK,CAAC,oBAAoB,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAChE,EAAE,EAAE,IAAI,UAAU,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC,aAAa,EAAE,CAAC;YACvD,YAAY,EAAE,GAAG,CAAC,sBAAsB,EAAE;SAC3C,CAAC,CAAC,CAAA;QACH,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAA;IAClE,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;QACnB,8DAA8D;QAC9D,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;IAC5D,CAAC;IACD,IAAI,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACtB,OAAO,OAAO,CAAC,QAAQ,EAAE;YACvB,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE;YAC5E,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;IAC9D,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAA;AACjE,CAAC"}

package/dist/src/ledger/decode.d.ts

@@ -0,0 +1,18 @@
+import { GeeqLedger } from './geeq-ledger';
+export interface DecodeLedgerOptions {
+    /** The node this came from, carried through onto the snapshot. */
+    readonly nodeUrl?: string | undefined;
+    /** Overrides the read timestamp. For deterministic tests. */
+    readonly readAt?: number | undefined;
+}
+/**
+ * Decode a validation layer ledger.
+ *
+ * `source` is what a node's `result` field holds: base64, or the bytes behind it. The
+ * message is Cap'n Proto **packed**, which is what the node writes with
+ * `toPackedArrayBuffer()` — not the flattened form used for signing.
+ *
+ * Everything is read in this one pass and the message is then dropped, so the caller
+ * gets plain values with no traversal budget attached. See {@link GeeqLedger}.
+ */
+export declare function decodeValidationLedger(source: Uint8Array | ArrayBuffer | string, options?: DecodeLedgerOptions): GeeqLedger;

package/dist/src/ledger/decode.js

@@ -0,0 +1,113 @@
+import { Message } from 'capnp-ts';
+import { ValLayLedger as CapnpValLayLedger } from '../capnp/valLayLedger.capnp';
+import { MAX_UINT32 } from '../assert';
+import { fromBase64, toBase64 } from '../encoding/base64';
+import { GeeqError, ledgerUnreadable } from '../errors';
+import { readCoinAccount } from './coin-accounts';
+import { GeeqLedger } from './geeq-ledger';
+import { isProcessing, toNodeRole, toNodeStatus } from './net-actors';
+import { readGeeqNorm, readMetadataLimits, readMinimumTransfer } from './params';
+import { readProxyAccount } from './proxy-accounts';
+/**
+ * Decode a validation layer ledger.
+ *
+ * `source` is what a node's `result` field holds: base64, or the bytes behind it. The
+ * message is Cap'n Proto **packed**, which is what the node writes with
+ * `toPackedArrayBuffer()` — not the flattened form used for signing.
+ *
+ * Everything is read in this one pass and the message is then dropped, so the caller
+ * gets plain values with no traversal budget attached. See {@link GeeqLedger}.
+ */
+export function decodeValidationLedger(source, options = {}) {
+    const bytes = typeof source === 'string'
+        ? fromBase64(source, 'The ledger')
+        : source instanceof ArrayBuffer
+            ? new Uint8Array(source)
+            : source;
+    if (bytes.length === 0) {
+        throw ledgerUnreadable('The ledger is empty. A node reports this before it has committed its first ' +
+            'block and while it is resyncing — wait and retry, or read from another node ' +
+            'on the same chain.');
+    }
+    let ledger;
+    try {
+        ledger = new Message(bytes, true).getRoot(CapnpValLayLedger);
+    }
+    catch (cause) {
+        throw ledgerUnreadable(`Could not decode ${bytes.length} bytes as a packed Cap'n Proto ValLayLedger. ` +
+            'The node is probably running a schema version this SDK does not know — ' +
+            'upgrade @geeqdev/geeq-sdk, or read the chain state yourself.', cause);
+    }
+    try {
+        const chainNumber = ledger.getChainNum();
+        const blockNumber = ledger.getBlockNum();
+        if (blockNumber >= MAX_UINT32) {
+            // Every transaction targets blockNumber + 1, which would overflow the uint32 the
+            // protocol encodes it in. Refuse rather than silently wrap to zero.
+            throw ledgerUnreadable(`The ledger reports block ${blockNumber}, the maximum a uint32 can hold, so no ` +
+                'transaction can target the next block. The ledger is almost certainly corrupt.');
+        }
+        const nodes = ledger
+            .getNetActorList()
+            .getNetActorRecs()
+            .toArray()
+            .map((record) => {
+            const role = toNodeRole(record.getNetActorType());
+            const status = toNodeStatus(record.getRecStatus());
+            const retiresAtBlock = record.getBlockNumRemove();
+            return Object.freeze({
+                nodeNumber: record.getNodeNumSelf(),
+                host: record.getIpAddr(),
+                port: record.getPortNum(),
+                role,
+                status,
+                processing: isProcessing(role, status),
+                retiresAtBlock,
+                // The node's own guard compares its blockNumRemove against its current block
+                // plus two, and the ledger's block is that current block.
+                retiring: retiresAtBlock < blockNumber + 2,
+            });
+        });
+        const params = ledger.getParamAcctList().getParamAcctRecs().toArray();
+        // A plausibility gate. Packed capnp can "succeed" on garbage and yield a message of
+        // zeros, which would otherwise surface much later as chain 0, block 0 and a missing
+        // account. A real ledger always carries net actors and parameters.
+        if (nodes.length === 0 || params.length === 0) {
+            throw ledgerUnreadable(`The ledger decoded but does not look like one: chain ${chainNumber}, block ` +
+                `${blockNumber}, ${nodes.length} net actor records, ${params.length} parameter ` +
+                'records. A real ledger always has at least one of each, so this URL is ' +
+                'probably not a Geeq node.');
+        }
+        const accounts = new Map();
+        const coinAccounts = ledger.getCoinAcctRecs();
+        for (let index = 0; index < coinAccounts.getLength(); index += 1) {
+            const record = coinAccounts.get(index);
+            const accountId = new Uint8Array(record.getAcctNumVal().toArrayBuffer());
+            accounts.set(toBase64(accountId), readCoinAccount(record));
+        }
+        const proxies = new Map();
+        for (const record of ledger.getProxyAcctRecs().toArray()) {
+            const accountId = new Uint8Array(record.getAcctNumVal().toArrayBuffer());
+            proxies.set(toBase64(accountId), readProxyAccount(record));
+        }
+        return new GeeqLedger({
+            chainNumber,
+            blockNumber,
+            nodes,
+            metadataLimits: readMetadataLimits(params),
+            minimumTransfer: readMinimumTransfer(params),
+            geeqNorm: readGeeqNorm(params),
+            accounts,
+            proxies,
+            readAt: options.readAt ?? Date.now(),
+            nodeUrl: options.nodeUrl,
+        });
+    }
+    catch (cause) {
+        if (cause instanceof GeeqError)
+            throw cause;
+        throw ledgerUnreadable('The ledger decoded but its contents could not be read. The node is probably ' +
+            'running a schema version this SDK does not know.', cause);
+    }
+}
+//# sourceMappingURL=decode.js.map

package/dist/src/ledger/decode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode.js","sourceRoot":"","sources":["../../../src/ledger/decode.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,YAAY,IAAI,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAE/E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AACtC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAEvD,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAA;AACjD,OAAO,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAE1C,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AACrE,OAAO,EAAE,YAAY,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAEhF,OAAO,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AASnD;;;;;;;;;GASG;AACH,MAAM,UAAU,sBAAsB,CACpC,MAAyC,EACzC,UAA+B,EAAE;IAEjC,MAAM,KAAK,GACT,OAAO,MAAM,KAAK,QAAQ;QACxB,CAAC,CAAC,UAAU,CAAC,MAAM,EAAE,YAAY,CAAC;QAClC,CAAC,CAAC,MAAM,YAAY,WAAW;YAC7B,CAAC,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC;YACxB,CAAC,CAAC,MAAM,CAAA;IAEd,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,MAAM,gBAAgB,CACpB,6EAA6E;YAC3E,8EAA8E;YAC9E,oBAAoB,CACvB,CAAA;IACH,CAAC;IAED,IAAI,MAAM,CAAA;IACV,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;IAC9D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,gBAAgB,CACpB,oBAAoB,KAAK,CAAC,MAAM,+CAA+C;YAC7E,yEAAyE;YACzE,8DAA8D,EAChE,KAAK,CACN,CAAA;IACH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;QACxC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,EAAE,CAAA;QAExC,IAAI,WAAW,IAAI,UAAU,EAAE,CAAC;YAC9B,iFAAiF;YACjF,oEAAoE;YACpE,MAAM,gBAAgB,CACpB,4BAA4B,WAAW,yCAAyC;gBAC9E,gFAAgF,CACnF,CAAA;QACH,CAAC;QAED,MAAM,KAAK,GAAqB,MAAM;aACnC,eAAe,EAAE;aACjB,eAAe,EAAE;aACjB,OAAO,EAAE;aACT,GAAG,CAAC,CAAC,MAAM,EAAE,EAAE;YACd,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,eAAe,EAAE,CAAC,CAAA;YACjD,MAAM,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,YAAY,EAAE,CAAC,CAAA;YAClD,MAAM,cAAc,GAAG,MAAM,CAAC,iBAAiB,EAAE,CAAA;YACjD,OAAO,MAAM,CAAC,MAAM,CAAC;gBACnB,UAAU,EAAE,MAAM,CAAC,cAAc,EAAE;gBACnC,IAAI,EAAE,MAAM,CAAC,SAAS,EAAE;gBACxB,IAAI,EAAE,MAAM,CAAC,UAAU,EAAE;gBACzB,IAAI;gBACJ,MAAM;gBACN,UAAU,EAAE,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC;gBACtC,cAAc;gBACd,6EAA6E;gBAC7E,0DAA0D;gBAC1D,QAAQ,EAAE,cAAc,GAAG,WAAW,GAAG,CAAC;aAC3C,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;QAEJ,MAAM,MAAM,GAAG,MAAM,CAAC,gBAAgB,EAAE,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,CAAA;QAErE,oFAAoF;QACpF,oFAAoF;QACpF,mEAAmE;QACnE,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC9C,MAAM,gBAAgB,CACpB,wDAAwD,WAAW,UAAU;gBAC3E,GAAG,WAAW,KAAK,KAAK,CAAC,MAAM,uBAAuB,MAAM,CAAC,MAAM,aAAa;gBAChF,yEAAyE;gBACzE,2BAA2B,CAC9B,CAAA;QACH,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAA;QACpD,MAAM,YAAY,GAAG,MAAM,CAAC,eAAe,EAAE,CAAA;QAC7C,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,YAAY,CAAC,SAAS,EAAE,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACjE,MAAM,MAAM,GAAG,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAA;YACtC,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,aAAa,EAAE,CAAC,CAAA;YACxE,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5D,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,GAAG,EAA6B,CAAA;QACpD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,gBAAgB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YACzD,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,aAAa,EAAE,CAAC,CAAA;YACxE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAA;QAC5D,CAAC;QAED,OAAO,IAAI,UAAU,CAAC;YACpB,WAAW;YACX,WAAW;YACX,KAAK;YACL,cAAc,EAAE,kBAAkB,CAAC,MAAM,CAAC;YAC1C,eAAe,EAAE,mBAAmB,CAAC,MAAM,CAAC;YAC5C,QAAQ,EAAE,YAAY,CAAC,MAAM,CAAC;YAC9B,QAAQ;YACR,OAAO;YACP,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE;YACpC,OAAO,EAAE,OAAO,CAAC,OAAO;SACzB,CAAC,CAAA;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,SAAS;YAAE,MAAM,KAAK,CAAA;QAC3C,MAAM,gBAAgB,CACpB,8EAA8E;YAC5E,kDAAkD,EACpD,KAAK,CACN,CAAA;IACH,CAAC;AACH,CAAC"}

package/dist/src/ledger/geeq-ledger.d.ts

@@ -0,0 +1,99 @@
+import type { AccountRef } from '../crypto/account-id';
+import type { GeeqMetadataLimits } from '../types';
+import type { CoinAccountFacts, GeeqCoinAccount } from './coin-accounts';
+import type { GeeqLedgerNode } from './net-actors';
+import type { GeeqProxyAccount, ProxyAccountFacts } from './proxy-accounts';
+/** @internal — built by {@link decodeValidationLedger}, never by hand. */
+export interface GeeqLedgerInit {
+    readonly chainNumber: number;
+    readonly blockNumber: number;
+    readonly nodes: readonly GeeqLedgerNode[];
+    readonly metadataLimits: GeeqMetadataLimits | undefined;
+    readonly minimumTransfer: bigint | undefined;
+    readonly geeqNorm: bigint | undefined;
+    readonly accounts: ReadonlyMap<string, CoinAccountFacts>;
+    readonly proxies: ReadonlyMap<string, ProxyAccountFacts>;
+    readonly readAt: number;
+    readonly nodeUrl: string | undefined;
+}
+/**
+ * One validation layer ledger, decoded into plain values.
+ *
+ * This is a snapshot, not a view: the Cap'n Proto `Message` it came from is released
+ * the moment decoding finishes. That is deliberate and load-bearing. capnp-ts counts a
+ * traversal budget per `Message` and never resets it, so a retained handle rescanned on
+ * every transaction eventually throws `PTR_TRAVERSAL_LIMIT_EXCEEDED`; and reading a
+ * malformed union arm mutates the message in place. Neither can happen to a snapshot.
+ *
+ * It holds no WebAssembly handle, so unlike a keypair it needs no `dispose()`.
+ */
+export declare class GeeqLedger {
+    /** The ledger's own chain number. A transaction must name exactly this. */
+    readonly chainNumber: number;
+    /** N — the last block committed to this ledger. */
+    readonly blockNumber: number;
+    /** N + 1 — the block a transaction built now should ask for. */
+    readonly targetBlockNumber: number;
+    /** Every net actor, in ledger order. */
+    readonly nodes: readonly GeeqLedgerNode[];
+    /** Undefined when this chain publishes no metadata parameters. */
+    readonly metadataLimits: GeeqMetadataLimits | undefined;
+    /**
+     * The smallest transfer this chain accepts, in pennies.
+     *
+     * Undefined when the chain does not publish the parameters it is derived from.
+     */
+    readonly minimumTransfer: bigint | undefined;
+    /**
+     * The chain's `geeqNorm` parameter, which the minimum transfer and every fee are
+     * multiples of. Undefined when the chain does not publish it.
+     */
+    readonly geeqNorm: bigint | undefined;
+    /** `Date.now()` when this was read, so callers can judge staleness. */
+    readonly readAt: number;
+    /** The node it was read from, when it came from one. */
+    readonly nodeUrl: string | undefined;
+    private readonly accounts;
+    private readonly proxies;
+    /** @internal */
+    constructor(init: GeeqLedgerInit);
+    /** The nodes that will actually accept a transaction. */
+    get processingNodes(): readonly GeeqLedgerNode[];
+    /**
+     * Find a net actor record.
+     *
+     * By `host` this matches the bare IP and nothing else — every first-party client does
+     * the same, because a record's `port` is the node's internal listen port while clients
+     * connect through a proxy on another one. Matching on both finds nothing.
+     */
+    findNode(match: {
+        readonly host: string;
+    } | {
+        readonly nodeNumber: number;
+    }): GeeqLedgerNode | undefined;
+    /** Every net actor record at one host. More than one is possible, and ambiguous. */
+    findNodes(host: string): readonly GeeqLedgerNode[];
+    /**
+     * The signing account's coin record, or `undefined` when this chain has none for it.
+     *
+     * Absence is the ordinary state of a freshly generated keypair: an account appears in
+     * the ledger only once it has been funded.
+     */
+    findCoinAccount(account: AccountRef): GeeqCoinAccount | undefined;
+    /** A proxy record, or `undefined` when this chain has none with that id. */
+    findProxyAccount(account: AccountRef): GeeqProxyAccount | undefined;
+    /**
+     * Every NFT mint proxy an account administers — the ones it can mint through.
+     *
+     * Found by the admin each record names, so it needs nothing remembered from when they
+     * were created.
+     */
+    findProxyAccounts(match: {
+        readonly admin: AccountRef;
+    }): readonly GeeqProxyAccount[];
+    /** How many coin accounts this ledger carries. Mostly useful for diagnostics. */
+    get coinAccountCount(): number;
+    /** Summary only — the account table is far too large to serialise. */
+    toJSON(): Record<string, unknown>;
+    toString(): string;
+}

package/dist/src/ledger/geeq-ledger.js

@@ -0,0 +1,125 @@
+import { resolveAccountId } from '../crypto/account-id';
+import { fromBase64, toBase64 } from '../encoding/base64';
+/**
+ * One validation layer ledger, decoded into plain values.
+ *
+ * This is a snapshot, not a view: the Cap'n Proto `Message` it came from is released
+ * the moment decoding finishes. That is deliberate and load-bearing. capnp-ts counts a
+ * traversal budget per `Message` and never resets it, so a retained handle rescanned on
+ * every transaction eventually throws `PTR_TRAVERSAL_LIMIT_EXCEEDED`; and reading a
+ * malformed union arm mutates the message in place. Neither can happen to a snapshot.
+ *
+ * It holds no WebAssembly handle, so unlike a keypair it needs no `dispose()`.
+ */
+export class GeeqLedger {
+    /** @internal */
+    constructor(init) {
+        this.chainNumber = init.chainNumber;
+        this.blockNumber = init.blockNumber;
+        this.targetBlockNumber = init.blockNumber + 1;
+        this.nodes = Object.freeze([...init.nodes]);
+        this.metadataLimits = init.metadataLimits;
+        this.minimumTransfer = init.minimumTransfer;
+        this.geeqNorm = init.geeqNorm;
+        this.readAt = init.readAt;
+        this.nodeUrl = init.nodeUrl;
+        Object.defineProperty(this, 'accounts', {
+            value: init.accounts,
+            enumerable: false,
+            writable: false,
+        });
+        Object.defineProperty(this, 'proxies', {
+            value: init.proxies,
+            enumerable: false,
+            writable: false,
+        });
+    }
+    /** The nodes that will actually accept a transaction. */
+    get processingNodes() {
+        return this.nodes.filter((node) => node.processing);
+    }
+    /**
+     * Find a net actor record.
+     *
+     * By `host` this matches the bare IP and nothing else — every first-party client does
+     * the same, because a record's `port` is the node's internal listen port while clients
+     * connect through a proxy on another one. Matching on both finds nothing.
+     */
+    findNode(match) {
+        if ('nodeNumber' in match) {
+            return this.nodes.find((node) => node.nodeNumber === match.nodeNumber);
+        }
+        return this.nodes.find((node) => node.host === match.host);
+    }
+    /** Every net actor record at one host. More than one is possible, and ambiguous. */
+    findNodes(host) {
+        return this.nodes.filter((node) => node.host === host);
+    }
+    /**
+     * The signing account's coin record, or `undefined` when this chain has none for it.
+     *
+     * Absence is the ordinary state of a freshly generated keypair: an account appears in
+     * the ledger only once it has been funded.
+     */
+    findCoinAccount(account) {
+        const accountId = resolveAccountId(account);
+        const facts = this.accounts.get(toBase64(accountId));
+        if (facts === undefined)
+            return undefined;
+        return Object.freeze({
+            accountId,
+            kind: facts.kind,
+            nonce: facts.nonce,
+            balance: facts.balance,
+            nfts: facts.nfts,
+        });
+    }
+    /** A proxy record, or `undefined` when this chain has none with that id. */
+    findProxyAccount(account) {
+        const accountId = resolveAccountId(account);
+        const facts = this.proxies.get(toBase64(accountId));
+        if (facts === undefined)
+            return undefined;
+        return Object.freeze({ accountId, ...facts });
+    }
+    /**
+     * Every NFT mint proxy an account administers — the ones it can mint through.
+     *
+     * Found by the admin each record names, so it needs nothing remembered from when they
+     * were created.
+     */
+    findProxyAccounts(match) {
+        const admin = toBase64(resolveAccountId(match.admin));
+        const found = [];
+        for (const [key, facts] of this.proxies) {
+            if (facts.admin !== undefined && toBase64(facts.admin) === admin) {
+                found.push(Object.freeze({ accountId: fromBase64(key), ...facts }));
+            }
+        }
+        return found;
+    }
+    /** How many coin accounts this ledger carries. Mostly useful for diagnostics. */
+    get coinAccountCount() {
+        return this.accounts.size;
+    }
+    /** Summary only — the account table is far too large to serialise. */
+    toJSON() {
+        return {
+            chainNumber: this.chainNumber,
+            blockNumber: this.blockNumber,
+            targetBlockNumber: this.targetBlockNumber,
+            nodes: this.nodes,
+            metadataLimits: this.metadataLimits,
+            minimumTransfer: this.minimumTransfer?.toString(),
+            geeqNorm: this.geeqNorm?.toString(),
+            coinAccountCount: this.coinAccountCount,
+            proxyAccountCount: this.proxies.size,
+            readAt: this.readAt,
+            nodeUrl: this.nodeUrl,
+        };
+    }
+    toString() {
+        return `GeeqLedger(chain ${this.chainNumber}, block ${this.blockNumber}, ${this.nodes.length} nodes)`;
+    }
+}
+//# sourceMappingURL=geeq-ledger.js.map

package/dist/src/ledger/geeq-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"geeq-ledger.js","sourceRoot":"","sources":["../../../src/ledger/geeq-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,MAAM,sBAAsB,CAAA;AAEvD,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AAoBzD;;;;;;;;;;GAUG;AACH,MAAM,OAAO,UAAU;IAkCrB,gBAAgB;IAChB,YAAY,IAAoB;QAC9B,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACnC,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAA;QACnC,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC,WAAW,GAAG,CAAC,CAAA;QAC7C,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAA;QAC3C,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,cAAc,CAAA;QACzC,IAAI,CAAC,eAAe,GAAG,IAAI,CAAC,eAAe,CAAA;QAC3C,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAA;QAC7B,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;QACzB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAA;QAC3B,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,UAAU,EAAE;YACtC,KAAK,EAAE,IAAI,CAAC,QAAQ;YACpB,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAA;QACF,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,SAAS,EAAE;YACrC,KAAK,EAAE,IAAI,CAAC,OAAO;YACnB,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,KAAK;SAChB,CAAC,CAAA;IACJ,CAAC;IAED,yDAAyD;IACzD,IAAI,eAAe;QACjB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IACrD,CAAC;IAED;;;;;;OAMG;IACH,QAAQ,CAAC,KAAkE;QACzE,IAAI,YAAY,IAAI,KAAK,EAAE,CAAC;YAC1B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,KAAK,KAAK,CAAC,UAAU,CAAC,CAAA;QACxE,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,CAAC,IAAI,CAAC,CAAA;IAC5D,CAAC;IAED,oFAAoF;IACpF,SAAS,CAAC,IAAY;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,IAAI,CAAC,CAAA;IACxD,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,OAAmB;QACjC,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;QACpD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACzC,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,SAAS;YACT,IAAI,EAAE,KAAK,CAAC,IAAI;YAChB,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,IAAI,EAAE,KAAK,CAAC,IAAI;SACjB,CAAC,CAAA;IACJ,CAAC;IAED,4EAA4E;IAC5E,gBAAgB,CAAC,OAAmB;QAClC,MAAM,SAAS,GAAG,gBAAgB,CAAC,OAAO,CAAC,CAAA;QAC3C,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC,CAAA;QACnD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAA;QACzC,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,GAAG,KAAK,EAAE,CAAC,CAAA;IAC/C,CAAC;IAED;;;;;OAKG;IACH,iBAAiB,CAAC,KAAqC;QACrD,MAAM,KAAK,GAAG,QAAQ,CAAC,gBAAgB,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAA;QACrD,MAAM,KAAK,GAAuB,EAAE,CAAA;QACpC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACxC,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,KAAK,EAAE,CAAC;gBACjE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC,CAAA;YACrE,CAAC;QACH,CAAC;QACD,OAAO,KAAK,CAAA;IACd,CAAC;IAED,iFAAiF;IACjF,IAAI,gBAAgB;QAClB,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAA;IAC3B,CAAC;IAED,sEAAsE;IACtE,MAAM;QACJ,OAAO;YACL,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;YACzC,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,cAAc,EAAE,IAAI,CAAC,cAAc;YACnC,eAAe,EAAE,IAAI,CAAC,eAAe,EAAE,QAAQ,EAAE;YACjD,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,QAAQ,EAAE;YACnC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB;YACvC,iBAAiB,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACpC,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAA;IACH,CAAC;IAED,QAAQ;QACN,OAAO,oBAAoB,IAAI,CAAC,WAAW,WAAW,IAAI,CAAC,WAAW,KAAK,IAAI,CAAC,KAAK,CAAC,MAAM,SAAS,CAAA;IACvG,CAAC;CACF"}

package/dist/src/ledger/net-actors.d.ts

@@ -0,0 +1,65 @@
+/** What kind of actor a net actor record describes. */
+export type GeeqNodeRole = 'anchor-node' | 'anon-node' | 'cert-node' | 'cert-authority' | 'chain-admin' | 'relay' | 'treasury-agent' | 'unknown';
+/** What that actor is currently doing. */
+export type GeeqNodeStatus = 'chain-admin' | 'hub' | 'leaving' | 'listening' | 'node' | 'ready' | 'relay' | 'suspended' | 'unknown';
+/**
+ * Unknown values map to `'unknown'` rather than throwing.
+ *
+ * This deliberately differs from `fromWasmRecordType`, which throws: a bad record type
+ * means a corrupt address, but a new actor kind on a newer chain must not make an
+ * otherwise-valid ledger undecodable. An `'unknown'` actor is never `processing`, so
+ * the safe outcome is the default.
+ */
+export declare function toNodeRole(value: number): GeeqNodeRole;
+export declare function toNodeStatus(value: number): GeeqNodeStatus;
+/**
+ * Whether this actor will accept a transaction.
+ *
+ * Mirrors `isActive()` in the node itself
+ * (geeq_node_core/src/wrappers/network-actor-record/index.ts). Anything else answers
+ * HTTP 400 `'not processing'`, or — for a relay — registers no handler at all.
+ */
+export declare function isProcessing(role: GeeqNodeRole, status: GeeqNodeStatus): boolean;
+/** One net actor record, as plain values. */
+export interface GeeqLedgerNode {
+    /** `nodeNumSelf` — what a transaction must name, checked with strict equality. */
+    readonly nodeNumber: number;
+    /** The bare IP the ledger records. Nodes are matched on this and nothing else. */
+    readonly host: string;
+    /**
+     * The port recorded against this node in the ledger.
+     *
+     * **Not the port you connect to.** Clients always reach a node on 2082, where TLS is
+     * terminated; every first-party client ignores this field and rebuilds the URL from
+     * its own configuration. Exposed for diagnostics, and used only to break a tie when
+     * one address carries several records.
+     */
+    readonly port: number;
+    readonly role: GeeqNodeRole;
+    readonly status: GeeqNodeStatus;
+    /**
+     * True when the protocol permits this node to accept transactions.
+     *
+     * **Not a liveness signal.** Nothing in the protocol evicts a crashed node from the
+     * net actor list, and `blockNumLiveness` is rewritten for every actor on every commit
+     * rather than per node, so it carries no health information at all. A node that died
+     * an hour ago still reads as processing here. The only way to learn a node is up is
+     * to talk to it.
+     */
+    readonly processing: boolean;
+    /**
+     * `blockNumRemove` — the block at which this node's turn in the active set ends.
+     *
+     * Reset 100–355 blocks ahead each time the node is promoted, so it is a rotation
+     * deadline rather than a departure flag.
+     */
+    readonly retiresAtBlock: number;
+    /**
+     * True when this node is inside its own shutdown window and will refuse work.
+     *
+     * The node's submit handler answers HTTP 503 `'Block chain is stopped'` once its
+     * `blockNumRemove` is less than its current block plus two, so this is knowable from
+     * the ledger before a transaction is ever built.
+     */
+    readonly retiring: boolean;
+}

package/dist/src/ledger/net-actors.js

@@ -0,0 +1,53 @@
+import { NetActorStatus as CapnpNetActorStatus, NetActorType as CapnpNetActorType, } from '../capnp/netActorRec.capnp';
+const ROLES = Object.freeze({
+    [CapnpNetActorType.NET_ACTOR_TYPE_ANCHOR_NODE]: 'anchor-node',
+    [CapnpNetActorType.NET_ACTOR_TYPE_ANON_NODE]: 'anon-node',
+    [CapnpNetActorType.NET_ACTOR_TYPE_CERT_NODE]: 'cert-node',
+    [CapnpNetActorType.NET_ACTOR_TYPE_CERT_AUTH]: 'cert-authority',
+    [CapnpNetActorType.NET_ACTOR_TYPE_CHAIN_ADMIN]: 'chain-admin',
+    [CapnpNetActorType.NET_ACTOR_TYPE_RELAY]: 'relay',
+    [CapnpNetActorType.NET_ACTOR_TYPE_TREASURY_AGENT]: 'treasury-agent',
+});
+const STATUSES = Object.freeze({
+    [CapnpNetActorStatus.NET_ACTOR_STATUS_CHAIN_ADMIN]: 'chain-admin',
+    [CapnpNetActorStatus.NET_ACTOR_STATUS_HUB]: 'hub',
+    [CapnpNetActorStatus.NET_ACTOR_STATUS_LEAVING]: 'leaving',
+    [CapnpNetActorStatus.NET_ACTOR_STATUS_LISTENING]: 'listening',
+    [CapnpNetActorStatus.NET_ACTOR_STATUS_NODE]: 'node',
+    [CapnpNetActorStatus.NET_ACTOR_STATUS_READY]: 'ready',
+    [CapnpNetActorStatus.NET_ACTOR_STATUS_RELAY]: 'relay',
+    [CapnpNetActorStatus.NET_ACTOR_STATUS_SUSPENDED]: 'suspended',
+});
+/**
+ * Unknown values map to `'unknown'` rather than throwing.
+ *
+ * This deliberately differs from `fromWasmRecordType`, which throws: a bad record type
+ * means a corrupt address, but a new actor kind on a newer chain must not make an
+ * otherwise-valid ledger undecodable. An `'unknown'` actor is never `processing`, so
+ * the safe outcome is the default.
+ */
+export function toNodeRole(value) {
+    return ROLES[value] ?? 'unknown';
+}
+export function toNodeStatus(value) {
+    return STATUSES[value] ?? 'unknown';
+}
+/** Roles that run the transaction handler at all. */
+const PROCESSING_ROLES = new Set([
+    'anon-node',
+    'anchor-node',
+    'cert-node',
+]);
+/** Statuses in which such a role actually accepts transactions. */
+const PROCESSING_STATUSES = new Set(['node', 'hub']);
+/**
+ * Whether this actor will accept a transaction.
+ *
+ * Mirrors `isActive()` in the node itself
+ * (geeq_node_core/src/wrappers/network-actor-record/index.ts). Anything else answers
+ * HTTP 400 `'not processing'`, or — for a relay — registers no handler at all.
+ */
+export function isProcessing(role, status) {
+    return PROCESSING_ROLES.has(role) && PROCESSING_STATUSES.has(status);
+}
+//# sourceMappingURL=net-actors.js.map

package/dist/src/ledger/net-actors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"net-actors.js","sourceRoot":"","sources":["../../../src/ledger/net-actors.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,cAAc,IAAI,mBAAmB,EACrC,YAAY,IAAI,iBAAiB,GAClC,MAAM,4BAA4B,CAAA;AAyBnC,MAAM,KAAK,GAA2C,MAAM,CAAC,MAAM,CAAC;IAClE,CAAC,iBAAiB,CAAC,0BAA0B,CAAC,EAAE,aAAa;IAC7D,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,EAAE,WAAW;IACzD,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,EAAE,WAAW;IACzD,CAAC,iBAAiB,CAAC,wBAAwB,CAAC,EAAE,gBAAgB;IAC9D,CAAC,iBAAiB,CAAC,0BAA0B,CAAC,EAAE,aAAa;IAC7D,CAAC,iBAAiB,CAAC,oBAAoB,CAAC,EAAE,OAAO;IACjD,CAAC,iBAAiB,CAAC,6BAA6B,CAAC,EAAE,gBAAgB;CACpE,CAAC,CAAA;AAEF,MAAM,QAAQ,GAA6C,MAAM,CAAC,MAAM,CAAC;IACvE,CAAC,mBAAmB,CAAC,4BAA4B,CAAC,EAAE,aAAa;IACjE,CAAC,mBAAmB,CAAC,oBAAoB,CAAC,EAAE,KAAK;IACjD,CAAC,mBAAmB,CAAC,wBAAwB,CAAC,EAAE,SAAS;IACzD,CAAC,mBAAmB,CAAC,0BAA0B,CAAC,EAAE,WAAW;IAC7D,CAAC,mBAAmB,CAAC,qBAAqB,CAAC,EAAE,MAAM;IACnD,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,EAAE,OAAO;IACrD,CAAC,mBAAmB,CAAC,sBAAsB,CAAC,EAAE,OAAO;IACrD,CAAC,mBAAmB,CAAC,0BAA0B,CAAC,EAAE,WAAW;CAC9D,CAAC,CAAA;AAEF;;;;;;;GAOG;AACH,MAAM,UAAU,UAAU,CAAC,KAAa;IACtC,OAAO,KAAK,CAAC,KAAK,CAAC,IAAI,SAAS,CAAA;AAClC,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAa;IACxC,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,CAAA;AACrC,CAAC;AAED,qDAAqD;AACrD,MAAM,gBAAgB,GAA8B,IAAI,GAAG,CAAe;IACxE,WAAW;IACX,aAAa;IACb,WAAW;CACZ,CAAC,CAAA;AAEF,mEAAmE;AACnE,MAAM,mBAAmB,GAAgC,IAAI,GAAG,CAAiB,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;AAEjG;;;;;;GAMG;AACH,MAAM,UAAU,YAAY,CAAC,IAAkB,EAAE,MAAsB;IACrE,OAAO,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;AACtE,CAAC"}

package/dist/src/ledger/nft-records.d.ts

@@ -0,0 +1,13 @@
+/** What the application layer ledger says one NFT stands for. */
+export interface NftRecordFacts {
+    readonly attestHash: Uint8Array;
+    readonly metadata: readonly string[];
+}
+/**
+ * The NFT records in an application layer ledger, keyed by the NFT's base64 id.
+ *
+ * `source` is what a node's `result` holds for `type=all`: base64 packed Cap'n Proto, the
+ * same form as the validation layer ledger. Other application records are skipped. As
+ * with that ledger, the message is dropped once read.
+ */
+export declare function decodeNftRecords(source: string): Map<string, NftRecordFacts>;

package/dist/src/ledger/nft-records.js

@@ -0,0 +1,41 @@
+import { Message } from 'capnp-ts';
+import { AppLayLedger as CapnpAppLayLedger } from '../capnp/appLayLedger.capnp';
+import { fromBase64, toBase64 } from '../encoding/base64';
+import { ledgerUnreadable } from '../errors';
+/**
+ * The NFT records in an application layer ledger, keyed by the NFT's base64 id.
+ *
+ * `source` is what a node's `result` holds for `type=all`: base64 packed Cap'n Proto, the
+ * same form as the validation layer ledger. Other application records are skipped. As
+ * with that ledger, the message is dropped once read.
+ */
+export function decodeNftRecords(source) {
+    const bytes = fromBase64(source, 'The application layer ledger');
+    const records = new Map();
+    const decoder = new TextDecoder();
+    try {
+        const ledger = new Message(bytes, true).getRoot(CapnpAppLayLedger);
+        for (const record of ledger.getAppLayRecs().toArray()) {
+            // `counterparty` is the union's zero value, so the arm is checked before it is read.
+            const recType = record.getRecType();
+            if (!recType.isNft() || !recType.hasNft())
+                continue;
+            const data = recType.getNft().getAttestationSubgroup().getData();
+            const metadata = data
+                .getMetadata()
+                .toArray()
+                .sort((a, b) => a.getPosition() - b.getPosition())
+                .map((entry) => decoder.decode(new Uint8Array(entry.getItem().toArrayBuffer())));
+            records.set(toBase64(new Uint8Array(record.getAcctNumApp().toArrayBuffer())), {
+                attestHash: new Uint8Array(data.getAttestHash().toArrayBuffer()),
+                metadata,
+            });
+        }
+    }
+    catch (cause) {
+        throw ledgerUnreadable('The application layer ledger could not be read. The node is probably running a ' +
+            'schema version this SDK does not know.', cause);
+    }
+    return records;
+}
+//# sourceMappingURL=nft-records.js.map

package/dist/src/ledger/nft-records.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nft-records.js","sourceRoot":"","sources":["../../../src/ledger/nft-records.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,UAAU,CAAA;AAClC,OAAO,EAAE,YAAY,IAAI,iBAAiB,EAAE,MAAM,6BAA6B,CAAA;AAE/E,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAA;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,WAAW,CAAA;AAQ5C;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,MAAc;IAC7C,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,8BAA8B,CAAC,CAAA;IAChE,MAAM,OAAO,GAAG,IAAI,GAAG,EAA0B,CAAA;IACjD,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAA;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAA;QAClE,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC;YACtD,qFAAqF;YACrF,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,EAAE,CAAA;YACnC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE;gBAAE,SAAQ;YACnD,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,sBAAsB,EAAE,CAAC,OAAO,EAAE,CAAA;YAChE,MAAM,QAAQ,GAAG,IAAI;iBAClB,WAAW,EAAE;iBACb,OAAO,EAAE;iBACT,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;iBACjD,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,CAAA;YAClF,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,aAAa,EAAE,CAAC,aAAa,EAAE,CAAC,CAAC,EAAE;gBAC5E,UAAU,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC,aAAa,EAAE,CAAC;gBAChE,QAAQ;aACT,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,gBAAgB,CACpB,iFAAiF;YAC/E,wCAAwC,EAC1C,KAAK,CACN,CAAA;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC"}