@hashgraphonline/standards-sdk 0.1.172 → 0.1.173

package/dist/es/standards-sdk.es181.js.map

@@ -1 +1 @@
-{"version":3,"file":"standards-sdk.es181.js","sources":["../../src/services/registry-broker/client/chat-history.ts"],"sourcesContent":["import { Buffer } from 'buffer';\nimport type {\n  ChatHistoryEntry,\n  ChatHistoryFetchOptions,\n  ChatHistorySnapshotResponse,\n  ChatHistorySnapshotWithDecryptedEntries,\n  JsonValue,\n  RecipientIdentity,\n} from '../types';\nimport { chatHistorySnapshotResponseSchema } from '../schemas';\nimport type { RegistryBrokerClient } from './base-client';\n\nexport interface ConversationContextInput {\n  sessionId: string;\n  sharedSecret: Uint8Array | Buffer;\n  identity?: RecipientIdentity;\n}\n\nexport interface ConversationContextState {\n  sessionId: string;\n  sharedSecret: Buffer;\n  identity?: RecipientIdentity;\n}\n\nfunction identitiesMatch(\n  a?: RecipientIdentity,\n  b?: RecipientIdentity,\n): boolean {\n  if (!a && !b) {\n    return true;\n  }\n  if (!a || !b) {\n    return false;\n  }\n  if (a.uaid && b.uaid && a.uaid.toLowerCase() === b.uaid.toLowerCase()) {\n    return true;\n  }\n  if (\n    a.ledgerAccountId &&\n    b.ledgerAccountId &&\n    a.ledgerAccountId.toLowerCase() === b.ledgerAccountId.toLowerCase()\n  ) {\n    return true;\n  }\n  if (a.userId && b.userId && a.userId === b.userId) {\n    return true;\n  }\n  if (a.email && b.email && a.email.toLowerCase() === b.email.toLowerCase()) {\n    return true;\n  }\n  return false;\n}\n\nexport async function fetchHistorySnapshot(\n  conversationContexts: Map<string, ConversationContextState[]>,\n  client: RegistryBrokerClient,\n  sessionId: string,\n  options?: ChatHistoryFetchOptions,\n): Promise<ChatHistorySnapshotWithDecryptedEntries> {\n  if (!sessionId || sessionId.trim().length === 0) {\n    throw new Error('sessionId is required to fetch chat history');\n  }\n  const raw = await client.requestJson<JsonValue>(\n    `/chat/session/${encodeURIComponent(sessionId)}/history`,\n    {\n      method: 'GET',\n    },\n  );\n  const snapshot = client.parseWithSchema(\n    raw,\n    chatHistorySnapshotResponseSchema,\n    'chat history snapshot response',\n  );\n  return attachDecryptedHistory(\n    conversationContexts,\n    client,\n    sessionId,\n    snapshot,\n    options,\n  );\n}\n\nexport function attachDecryptedHistory(\n  conversationContexts: Map<string, ConversationContextState[]>,\n  client: RegistryBrokerClient,\n  sessionId: string,\n  snapshot: ChatHistorySnapshotResponse,\n  options?: ChatHistoryFetchOptions,\n): ChatHistorySnapshotWithDecryptedEntries {\n  const shouldDecrypt =\n    options?.decrypt !== undefined\n      ? options.decrypt\n      : client.encryptionOptions?.autoDecryptHistory === true;\n  if (!shouldDecrypt) {\n    return snapshot;\n  }\n  const requiresContext = snapshot.history.some(entry =>\n    Boolean(entry.cipherEnvelope),\n  );\n  if (!requiresContext) {\n    return {\n      ...snapshot,\n      decryptedHistory: snapshot.history.map(entry => ({\n        entry,\n        plaintext: entry.content,\n      })),\n    };\n  }\n  const context = resolveDecryptionContext(\n    conversationContexts,\n    client,\n    sessionId,\n    options,\n  );\n  if (!context) {\n    throw new Error(\n      'Unable to decrypt chat history: encryption context unavailable',\n    );\n  }\n  const decryptedHistory = snapshot.history.map(entry => ({\n    entry,\n    plaintext: decryptHistoryEntryFromContext(client, entry, context),\n  }));\n  return { ...snapshot, decryptedHistory };\n}\n\nexport function registerConversationContextForEncryption(\n  conversationContexts: Map<string, ConversationContextState[]>,\n  context: ConversationContextInput,\n): void {\n  const normalized: ConversationContextState = {\n    sessionId: context.sessionId,\n    sharedSecret: Buffer.from(context.sharedSecret),\n    identity: context.identity ? { ...context.identity } : undefined,\n  };\n  const entries = conversationContexts.get(context.sessionId) ?? [];\n  const existingIndex = entries.findIndex(existing =>\n    identitiesMatch(existing.identity, normalized.identity),\n  );\n  if (existingIndex >= 0) {\n    entries[existingIndex] = normalized;\n  } else {\n    entries.push(normalized);\n  }\n  conversationContexts.set(context.sessionId, entries);\n}\n\nexport function resolveDecryptionContext(\n  conversationContexts: Map<string, ConversationContextState[]>,\n  client: RegistryBrokerClient,\n  sessionId: string,\n  options?: ChatHistoryFetchOptions,\n): ConversationContextState | null {\n  if (options?.sharedSecret) {\n    return {\n      sessionId,\n      sharedSecret: client.normalizeSharedSecret(options.sharedSecret),\n      identity: options.identity,\n    };\n  }\n  const contexts = conversationContexts.get(sessionId);\n  if (!contexts || contexts.length === 0) {\n    return null;\n  }\n  if (options?.identity) {\n    const match = contexts.find(context =>\n      identitiesMatch(context.identity, options.identity),\n    );\n    if (match) {\n      return match;\n    }\n  }\n  return contexts[0];\n}\n\nexport function decryptHistoryEntryFromContext(\n  client: RegistryBrokerClient,\n  entry: ChatHistoryEntry,\n  context: ConversationContextState,\n): string | null {\n  const envelope = entry.cipherEnvelope;\n  if (!envelope) {\n    return entry.content;\n  }\n  const secret = Buffer.from(context.sharedSecret);\n  try {\n    return client.encryption.decryptCipherEnvelope({\n      envelope,\n      sharedSecret: secret,\n    });\n  } catch (_error) {\n    return null;\n  }\n}\n"],"names":[],"mappings":";;AAwBA,SAAS,gBACP,GACA,GACS;AACT,MAAI,CAAC,KAAK,CAAC,GAAG;AACZ,WAAO;AAAA,EACT;AACA,MAAI,CAAC,KAAK,CAAC,GAAG;AACZ,WAAO;AAAA,EACT;AACA,MAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,KAAK,kBAAkB,EAAE,KAAK,YAAA,GAAe;AACrE,WAAO;AAAA,EACT;AACA,MACE,EAAE,mBACF,EAAE,mBACF,EAAE,gBAAgB,kBAAkB,EAAE,gBAAgB,YAAA,GACtD;AACA,WAAO;AAAA,EACT;AACA,MAAI,EAAE,UAAU,EAAE,UAAU,EAAE,WAAW,EAAE,QAAQ;AACjD,WAAO;AAAA,EACT;AACA,MAAI,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,kBAAkB,EAAE,MAAM,YAAA,GAAe;AACzE,WAAO;AAAA,EACT;AACA,SAAO;AACT;AAEA,eAAsB,qBACpB,sBACA,QACA,WACA,SACkD;AAClD,MAAI,CAAC,aAAa,UAAU,KAAA,EAAO,WAAW,GAAG;AAC/C,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AACA,QAAM,MAAM,MAAM,OAAO;AAAA,IACvB,iBAAiB,mBAAmB,SAAS,CAAC;AAAA,IAC9C;AAAA,MACE,QAAQ;AAAA,IAAA;AAAA,EACV;AAEF,QAAM,WAAW,OAAO;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEF,SAAO;AAAA,IACL;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAEO,SAAS,uBACd,sBACA,QACA,WACA,UACA,SACyC;AACzC,QAAM,gBACJ,SAAS,YAAY,SACjB,QAAQ,UACR,OAAO,mBAAmB,uBAAuB;AACvD,MAAI,CAAC,eAAe;AAClB,WAAO;AAAA,EACT;AACA,QAAM,kBAAkB,SAAS,QAAQ;AAAA,IAAK,CAAA,UAC5C,QAAQ,MAAM,cAAc;AAAA,EAAA;AAE9B,MAAI,CAAC,iBAAiB;AACpB,WAAO;AAAA,MACL,GAAG;AAAA,MACH,kBAAkB,SAAS,QAAQ,IAAI,CAAA,WAAU;AAAA,QAC/C;AAAA,QACA,WAAW,MAAM;AAAA,MAAA,EACjB;AAAA,IAAA;AAAA,EAEN;AACA,QAAM,UAAU;AAAA,IACd;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEF,MAAI,CAAC,SAAS;AACZ,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AACA,QAAM,mBAAmB,SAAS,QAAQ,IAAI,CAAA,WAAU;AAAA,IACtD;AAAA,IACA,WAAW,+BAA+B,QAAQ,OAAO,OAAO;AAAA,EAAA,EAChE;AACF,SAAO,EAAE,GAAG,UAAU,iBAAA;AACxB;AAEO,SAAS,yCACd,sBACA,SACM;AACN,QAAM,aAAuC;AAAA,IAC3C,WAAW,QAAQ;AAAA,IACnB,cAAc,OAAO,KAAK,QAAQ,YAAY;AAAA,IAC9C,UAAU,QAAQ,WAAW,EAAE,GAAG,QAAQ,aAAa;AAAA,EAAA;AAEzD,QAAM,UAAU,qBAAqB,IAAI,QAAQ,SAAS,KAAK,CAAA;AAC/D,QAAM,gBAAgB,QAAQ;AAAA,IAAU,CAAA,aACtC,gBAAgB,SAAS,UAAU,WAAW,QAAQ;AAAA,EAAA;AAExD,MAAI,iBAAiB,GAAG;AACtB,YAAQ,aAAa,IAAI;AAAA,EAC3B,OAAO;AACL,YAAQ,KAAK,UAAU;AAAA,EACzB;AACA,uBAAqB,IAAI,QAAQ,WAAW,OAAO;AACrD;AAEO,SAAS,yBACd,sBACA,QACA,WACA,SACiC;AACjC,MAAI,SAAS,cAAc;AACzB,WAAO;AAAA,MACL;AAAA,MACA,cAAc,OAAO,sBAAsB,QAAQ,YAAY;AAAA,MAC/D,UAAU,QAAQ;AAAA,IAAA;AAAA,EAEtB;AACA,QAAM,WAAW,qBAAqB,IAAI,SAAS;AACnD,MAAI,CAAC,YAAY,SAAS,WAAW,GAAG;AACtC,WAAO;AAAA,EACT;AACA,MAAI,SAAS,UAAU;AACrB,UAAM,QAAQ,SAAS;AAAA,MAAK,CAAA,YAC1B,gBAAgB,QAAQ,UAAU,QAAQ,QAAQ;AAAA,IAAA;AAEpD,QAAI,OAAO;AACT,aAAO;AAAA,IACT;AAAA,EACF;AACA,SAAO,SAAS,CAAC;AACnB;AAEO,SAAS,+BACd,QACA,OACA,SACe;AACf,QAAM,WAAW,MAAM;AACvB,MAAI,CAAC,UAAU;AACb,WAAO,MAAM;AAAA,EACf;AACA,QAAM,SAAS,OAAO,KAAK,QAAQ,YAAY;AAC/C,MAAI;AACF,WAAO,OAAO,WAAW,sBAAsB;AAAA,MAC7C;AAAA,MACA,cAAc;AAAA,IAAA,CACf;AAAA,EACH,SAAS,QAAQ;AACf,WAAO;AAAA,EACT;AACF;"}
+{"version":3,"file":"standards-sdk.es181.js","sources":["../../src/services/registry-broker/client/credits.ts"],"sourcesContent":["import type {\n  CreditPurchaseResponse,\n  JsonObject,\n  JsonValue,\n  X402CreditPurchaseResponse,\n  X402MinimumsResponse,\n} from '../types';\nimport {\n  creditPurchaseResponseSchema,\n  x402CreditPurchaseResponseSchema,\n  x402MinimumsResponseSchema,\n} from '../schemas';\nimport type { RegistryBrokerClient } from './base-client';\nimport { normalizeHexPrivateKey, type X402NetworkId } from './utils';\nimport { optionalImport } from '../../../utils/dynamic-import';\n\ntype PaymentHeaders = Record<string, string | string[] | undefined>;\ntype PaymentClient = {\n  post: (\n    url: string,\n    body: JsonObject,\n  ) => Promise<{ data: JsonValue; headers?: PaymentHeaders }>;\n};\n\nexport interface PurchaseCreditsWithX402Params {\n  accountId: string;\n  credits: number;\n  usdAmount?: number;\n  description?: string;\n  metadata?: JsonObject;\n  walletClient: object;\n}\n\nexport interface BuyCreditsWithX402Params {\n  accountId: string;\n  credits: number;\n  usdAmount?: number;\n  description?: string;\n  metadata?: JsonObject;\n  evmPrivateKey: string;\n  network?: X402NetworkId;\n  rpcUrl?: string;\n}\n\nexport type X402PurchaseResult = X402CreditPurchaseResponse & {\n  paymentResponseHeader?: string;\n  paymentResponse?: unknown;\n};\n\ntype LoadX402DependenciesResult = {\n  createPaymentClient: (walletClient: object) => PaymentClient;\n  decodePaymentResponse: (value: string) => unknown;\n  createX402Signer: (\n    network: X402NetworkId,\n    privateKey: `0x${string}`,\n  ) => Promise<object>;\n};\n\nasync function loadX402Dependencies(\n  client: RegistryBrokerClient,\n): Promise<LoadX402DependenciesResult> {\n  type X402AxiosModule = {\n    withPaymentInterceptor: (client: unknown, walletClient: object) => unknown;\n    decodeXPaymentResponse: (value: string) => unknown;\n  };\n  type X402TypesModule = {\n    createSigner: (\n      network: X402NetworkId,\n      privateKey: `0x${string}`,\n    ) => Promise<object>;\n  };\n\n  const [{ default: axios }, x402Axios, x402Types] = await Promise.all([\n    import('axios'),\n    optionalImport<X402AxiosModule>('x402-axios'),\n    optionalImport<X402TypesModule>('x402/types'),\n  ]);\n\n  if (!x402Axios || !x402Types) {\n    throw new Error(\n      'x402-axios and x402/types are required for X402 flows. Install them to enable ledger payments.',\n    );\n  }\n\n  const withPaymentInterceptor = x402Axios.withPaymentInterceptor;\n  const decodePaymentResponse = x402Axios.decodeXPaymentResponse;\n  const createX402Signer = x402Types.createSigner;\n\n  const createPaymentClient = (walletClient: object): PaymentClient => {\n    const axiosClient = axios.create({\n      baseURL: client.baseUrl,\n      headers: {\n        ...client.getDefaultHeaders(),\n        'content-type': 'application/json',\n      },\n    });\n    const paymentClient = withPaymentInterceptor(axiosClient, walletClient);\n    return paymentClient as PaymentClient;\n  };\n\n  return { createPaymentClient, decodePaymentResponse, createX402Signer };\n}\n\nfunction calculateHbarAmountParam(hbarAmount: number): number {\n  const tinybars = Math.ceil(hbarAmount * 1e8);\n  if (tinybars <= 0) {\n    throw new Error('Calculated purchase amount must be positive');\n  }\n  return tinybars / 1e8;\n}\n\nexport async function purchaseCreditsWithHbar(\n  client: RegistryBrokerClient,\n  params: {\n    accountId: string;\n    privateKey: string;\n    hbarAmount: number;\n    memo?: string;\n    metadata?: JsonObject;\n  },\n): Promise<CreditPurchaseResponse> {\n  const body: JsonObject = {\n    accountId: params.accountId,\n    payerKey: params.privateKey,\n    hbarAmount: calculateHbarAmountParam(params.hbarAmount),\n  };\n\n  if (params.memo) {\n    body.memo = params.memo;\n  }\n\n  if (params.metadata) {\n    body.metadata = params.metadata;\n  }\n\n  const raw = await client.requestJson<JsonValue>('/credits/purchase', {\n    method: 'POST',\n    headers: { 'content-type': 'application/json' },\n    body,\n  });\n\n  return client.parseWithSchema(\n    raw,\n    creditPurchaseResponseSchema,\n    'credit purchase response',\n  );\n}\n\nexport async function getX402Minimums(\n  client: RegistryBrokerClient,\n): Promise<X402MinimumsResponse> {\n  const raw = await client.requestJson<JsonValue>(\n    '/credits/purchase/x402/minimums',\n    { method: 'GET' },\n  );\n  return client.parseWithSchema(\n    raw,\n    x402MinimumsResponseSchema,\n    'x402 minimums response',\n  );\n}\n\nexport async function purchaseCreditsWithX402(\n  client: RegistryBrokerClient,\n  params: PurchaseCreditsWithX402Params,\n): Promise<X402PurchaseResult> {\n  const { createPaymentClient, decodePaymentResponse } =\n    await loadX402Dependencies(client);\n\n  if (!Number.isFinite(params.credits) || params.credits <= 0) {\n    throw new Error('credits must be a positive number');\n  }\n  if (\n    params.usdAmount !== undefined &&\n    (!Number.isFinite(params.usdAmount) || params.usdAmount <= 0)\n  ) {\n    throw new Error('usdAmount must be a positive number when provided');\n  }\n\n  const body: JsonObject = {\n    accountId: params.accountId,\n    credits: params.credits,\n  };\n\n  if (params.usdAmount !== undefined) {\n    body.usdAmount = params.usdAmount;\n  }\n  if (params.description) {\n    body.description = params.description;\n  }\n  if (params.metadata) {\n    body.metadata = params.metadata;\n  }\n\n  const paymentClient = createPaymentClient(params.walletClient);\n\n  const response = await paymentClient.post('/credits/purchase/x402', body);\n\n  const parsed = client.parseWithSchema(\n    response.data,\n    x402CreditPurchaseResponseSchema,\n    'x402 credit purchase response',\n  );\n\n  const responseHeaders = response.headers ?? {};\n  const paymentHeader =\n    typeof responseHeaders['x-payment-response'] === 'string'\n      ? responseHeaders['x-payment-response']\n      : undefined;\n  const decodedPayment =\n    paymentHeader !== undefined\n      ? decodePaymentResponse(paymentHeader)\n      : undefined;\n\n  return {\n    ...parsed,\n    paymentResponseHeader: paymentHeader,\n    paymentResponse: decodedPayment,\n  };\n}\n\nexport async function buyCreditsWithX402(\n  client: RegistryBrokerClient,\n  params: BuyCreditsWithX402Params,\n): Promise<X402PurchaseResult> {\n  const network: X402NetworkId = params.network ?? 'base';\n  const { createX402Signer } = await loadX402Dependencies(client);\n  const normalizedKey = normalizeHexPrivateKey(params.evmPrivateKey);\n  const walletClient = await createX402Signer(network, normalizedKey);\n\n  return purchaseCreditsWithX402(client, {\n    accountId: params.accountId,\n    credits: params.credits,\n    usdAmount: params.usdAmount,\n    description: params.description,\n    metadata: params.metadata,\n    walletClient,\n  });\n}\n"],"names":[],"mappings":";;;AA0DA,eAAe,qBACb,QACqC;AAYrC,QAAM,CAAC,EAAE,SAAS,MAAA,GAAS,WAAW,SAAS,IAAI,MAAM,QAAQ,IAAI;AAAA,IACnE,OAAO,OAAO;AAAA,IACd,eAAgC,YAAY;AAAA,IAC5C,eAAgC,YAAY;AAAA,EAAA,CAC7C;AAED,MAAI,CAAC,aAAa,CAAC,WAAW;AAC5B,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AAEA,QAAM,yBAAyB,UAAU;AACzC,QAAM,wBAAwB,UAAU;AACxC,QAAM,mBAAmB,UAAU;AAEnC,QAAM,sBAAsB,CAAC,iBAAwC;AACnE,UAAM,cAAc,MAAM,OAAO;AAAA,MAC/B,SAAS,OAAO;AAAA,MAChB,SAAS;AAAA,QACP,GAAG,OAAO,kBAAA;AAAA,QACV,gBAAgB;AAAA,MAAA;AAAA,IAClB,CACD;AACD,UAAM,gBAAgB,uBAAuB,aAAa,YAAY;AACtE,WAAO;AAAA,EACT;AAEA,SAAO,EAAE,qBAAqB,uBAAuB,iBAAA;AACvD;AAEA,SAAS,yBAAyB,YAA4B;AAC5D,QAAM,WAAW,KAAK,KAAK,aAAa,GAAG;AAC3C,MAAI,YAAY,GAAG;AACjB,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AACA,SAAO,WAAW;AACpB;AAEA,eAAsB,wBACpB,QACA,QAOiC;AACjC,QAAM,OAAmB;AAAA,IACvB,WAAW,OAAO;AAAA,IAClB,UAAU,OAAO;AAAA,IACjB,YAAY,yBAAyB,OAAO,UAAU;AAAA,EAAA;AAGxD,MAAI,OAAO,MAAM;AACf,SAAK,OAAO,OAAO;AAAA,EACrB;AAEA,MAAI,OAAO,UAAU;AACnB,SAAK,WAAW,OAAO;AAAA,EACzB;AAEA,QAAM,MAAM,MAAM,OAAO,YAAuB,qBAAqB;AAAA,IACnE,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,IAC3B;AAAA,EAAA,CACD;AAED,SAAO,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAEA,eAAsB,gBACpB,QAC+B;AAC/B,QAAM,MAAM,MAAM,OAAO;AAAA,IACvB;AAAA,IACA,EAAE,QAAQ,MAAA;AAAA,EAAM;AAElB,SAAO,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAEA,eAAsB,wBACpB,QACA,QAC6B;AAC7B,QAAM,EAAE,qBAAqB,sBAAA,IAC3B,MAAM,qBAAqB,MAAM;AAEnC,MAAI,CAAC,OAAO,SAAS,OAAO,OAAO,KAAK,OAAO,WAAW,GAAG;AAC3D,UAAM,IAAI,MAAM,mCAAmC;AAAA,EACrD;AACA,MACE,OAAO,cAAc,WACpB,CAAC,OAAO,SAAS,OAAO,SAAS,KAAK,OAAO,aAAa,IAC3D;AACA,UAAM,IAAI,MAAM,mDAAmD;AAAA,EACrE;AAEA,QAAM,OAAmB;AAAA,IACvB,WAAW,OAAO;AAAA,IAClB,SAAS,OAAO;AAAA,EAAA;AAGlB,MAAI,OAAO,cAAc,QAAW;AAClC,SAAK,YAAY,OAAO;AAAA,EAC1B;AACA,MAAI,OAAO,aAAa;AACtB,SAAK,cAAc,OAAO;AAAA,EAC5B;AACA,MAAI,OAAO,UAAU;AACnB,SAAK,WAAW,OAAO;AAAA,EACzB;AAEA,QAAM,gBAAgB,oBAAoB,OAAO,YAAY;AAE7D,QAAM,WAAW,MAAM,cAAc,KAAK,0BAA0B,IAAI;AAExE,QAAM,SAAS,OAAO;AAAA,IACpB,SAAS;AAAA,IACT;AAAA,IACA;AAAA,EAAA;AAGF,QAAM,kBAAkB,SAAS,WAAW,CAAA;AAC5C,QAAM,gBACJ,OAAO,gBAAgB,oBAAoB,MAAM,WAC7C,gBAAgB,oBAAoB,IACpC;AACN,QAAM,iBACJ,kBAAkB,SACd,sBAAsB,aAAa,IACnC;AAEN,SAAO;AAAA,IACL,GAAG;AAAA,IACH,uBAAuB;AAAA,IACvB,iBAAiB;AAAA,EAAA;AAErB;AAEA,eAAsB,mBACpB,QACA,QAC6B;AAC7B,QAAM,UAAyB,OAAO,WAAW;AACjD,QAAM,EAAE,iBAAA,IAAqB,MAAM,qBAAqB,MAAM;AAC9D,QAAM,gBAAgB,uBAAuB,OAAO,aAAa;AACjE,QAAM,eAAe,MAAM,iBAAiB,SAAS,aAAa;AAElE,SAAO,wBAAwB,QAAQ;AAAA,IACrC,WAAW,OAAO;AAAA,IAClB,SAAS,OAAO;AAAA,IAChB,WAAW,OAAO;AAAA,IAClB,aAAa,OAAO;AAAA,IACpB,UAAU,OAAO;AAAA,IACjB;AAAA,EAAA,CACD;AACH;"}

package/dist/es/standards-sdk.es182.js

@@ -1,334 +1,188 @@
-import { createSessionResponseSchema, chatHistoryCompactionResponseSchema, sessionEncryptionStatusResponseSchema, encryptionHandshakeResponseSchema, sendMessageResponseSchema } from "./standards-sdk.es145.js";
-import { serialiseAuthConfig, toJsonObject } from "./standards-sdk.es177.js";
-import { EncryptionUnavailableError } from "./standards-sdk.es183.js";
-function createChatApi(client, encryptedManager) {
-  return {
-    start: (options) => client.startChat(options),
-    createSession: (payload) => client.createSession(payload),
-    sendMessage: (payload) => client.sendMessage(payload),
-    endSession: (sessionId) => client.endSession(sessionId),
-    getHistory: (sessionId, options) => client.fetchHistorySnapshot(sessionId, options),
-    compactHistory: (payload) => client.compactHistory(payload),
-    getEncryptionStatus: (sessionId) => client.fetchEncryptionStatus(sessionId),
-    submitEncryptionHandshake: (sessionId, payload) => client.postEncryptionHandshake(sessionId, payload),
-    startConversation: (options) => client.startConversation(options),
-    acceptConversation: (options) => client.acceptConversation(options),
-    createEncryptedSession: (options) => encryptedManager.startSession(options),
-    acceptEncryptedSession: (options) => encryptedManager.acceptSession(options)
-  };
-}
-async function createSession(client, payload, allowHistoryAutoTopUp = true) {
-  const body = {};
-  if ("uaid" in payload && payload.uaid) {
-    body.uaid = payload.uaid;
-  }
-  if ("agentUrl" in payload && payload.agentUrl) {
-    body.agentUrl = payload.agentUrl;
-  }
-  if (payload.auth) {
-    body.auth = serialiseAuthConfig(payload.auth);
-  }
-  if (payload.historyTtlSeconds !== void 0) {
-    body.historyTtlSeconds = payload.historyTtlSeconds;
-  }
-  if (payload.encryptionRequested !== void 0) {
-    body.encryptionRequested = payload.encryptionRequested;
-  }
-  if (payload.senderUaid) {
-    body.senderUaid = payload.senderUaid;
-  }
+import { Buffer } from "buffer";
+import { ledgerChallengeResponseSchema, ledgerVerifyResponseSchema } from "./standards-sdk.es160.js";
+import { canonicalizeLedgerNetwork } from "./standards-sdk.es149.js";
+import { createPrivateKeySignerAsync } from "./standards-sdk.es148.js";
+async function loadViemAccount(privateKey) {
   try {
-    const raw = await client.requestJson("/chat/session", {
-      method: "POST",
-      body,
-      headers: { "content-type": "application/json" }
-    });
-    return client.parseWithSchema(
-      raw,
-      createSessionResponseSchema,
-      "chat session response"
-    );
+    const viem = await import("viem/accounts");
+    return viem.privateKeyToAccount(privateKey);
   } catch (error) {
-    const maybeError = error instanceof Error ? error : null;
-    if (allowHistoryAutoTopUp && client.shouldAutoTopUpHistory(payload, maybeError)) {
-      await client.executeHistoryAutoTopUp("chat.session");
-      return createSession(client, payload, false);
-    }
-    throw error;
-  }
-}
-async function startChat(client, encryptedManager, options) {
-  if ("uaid" in options && options.uaid) {
-    return startConversation(client, encryptedManager, {
-      uaid: options.uaid,
-      senderUaid: options.senderUaid,
-      historyTtlSeconds: options.historyTtlSeconds,
-      auth: options.auth,
-      encryption: options.encryption,
-      onSessionCreated: options.onSessionCreated
-    });
-  }
-  if ("agentUrl" in options && options.agentUrl) {
-    const session = await createSession(client, {
-      agentUrl: options.agentUrl,
-      auth: options.auth,
-      historyTtlSeconds: options.historyTtlSeconds,
-      senderUaid: options.senderUaid
-    });
-    options.onSessionCreated?.(session.sessionId);
-    return createPlaintextConversationHandle(
-      client,
-      session.sessionId,
-      session.encryption ?? null,
-      options.auth,
-      { agentUrl: options.agentUrl, uaid: options.uaid }
+    const err = new Error(
+      'EVM ledger authentication requires the optional dependency "viem". Install it to use evmPrivateKey flows.'
     );
+    err.cause = error;
+    throw err;
   }
-  throw new Error("startChat requires either uaid or agentUrl");
 }
-async function startConversation(client, encryptedManager, options) {
-  const preference = options.encryption?.preference ?? "preferred";
-  const requestEncryption = preference !== "disabled";
-  if (!requestEncryption) {
-    const session = await createSession(client, {
-      uaid: options.uaid,
-      auth: options.auth,
-      historyTtlSeconds: options.historyTtlSeconds,
-      senderUaid: options.senderUaid,
-      encryptionRequested: false
-    });
-    options.onSessionCreated?.(session.sessionId);
-    return createPlaintextConversationHandle(
-      client,
-      session.sessionId,
-      session.encryption ?? null,
-      options.auth,
-      { uaid: options.uaid }
-    );
-  }
-  try {
-    const handle = await encryptedManager.startSession({
-      uaid: options.uaid,
-      senderUaid: options.senderUaid,
-      historyTtlSeconds: options.historyTtlSeconds,
-      handshakeTimeoutMs: options.encryption?.handshakeTimeoutMs,
-      pollIntervalMs: options.encryption?.pollIntervalMs,
-      onSessionCreated: (sessionId) => {
-        options.onSessionCreated?.(sessionId);
-      },
-      auth: options.auth
-    });
-    return handle;
-  } catch (error) {
-    if (error instanceof EncryptionUnavailableError) {
-      if (preference === "required") {
-        throw error;
-      }
-      return createPlaintextConversationHandle(
-        client,
-        error.sessionId,
-        error.summary ?? null,
-        options.auth,
-        { uaid: options.uaid }
-      );
+async function resolveLedgerAuthSignature(message, options) {
+  if (typeof options.sign === "function") {
+    const result = await options.sign(message);
+    if (!result || typeof result.signature !== "string" || result.signature.length === 0) {
+      throw new Error("Custom ledger signer failed to produce a signature.");
     }
-    throw error;
+    return result;
   }
-}
-async function acceptConversation(client, encryptedManager, options) {
-  const preference = options.encryption?.preference ?? "preferred";
-  if (preference === "disabled") {
-    return createPlaintextConversationHandle(client, options.sessionId, null);
+  if (!options.signer || typeof options.signer.sign !== "function") {
+    throw new Error(
+      "Ledger authentication requires a Hedera Signer or custom sign function."
+    );
   }
-  try {
-    const handle = await encryptedManager.acceptSession({
-      sessionId: options.sessionId,
-      responderUaid: options.responderUaid,
-      handshakeTimeoutMs: options.encryption?.handshakeTimeoutMs,
-      pollIntervalMs: options.encryption?.pollIntervalMs
-    });
-    return handle;
-  } catch (error) {
-    if (error instanceof EncryptionUnavailableError && preference !== "required") {
-      return createPlaintextConversationHandle(
-        client,
-        options.sessionId,
-        null,
-        void 0,
-        { uaid: options.responderUaid }
-      );
+  const payload = Buffer.from(message, "utf8");
+  const signatures = await options.signer.sign([payload]);
+  const signatureEntry = signatures?.[0];
+  if (!signatureEntry) {
+    throw new Error("Signer did not return any signatures.");
+  }
+  let derivedPublicKey;
+  if (signatureEntry.publicKey) {
+    derivedPublicKey = signatureEntry.publicKey.toString();
+  } else if (typeof options.signer.getAccountKey === "function") {
+    const accountKey = await options.signer.getAccountKey();
+    if (accountKey && typeof accountKey.toString === "function") {
+      derivedPublicKey = accountKey.toString();
     }
-    throw error;
   }
-}
-function createPlaintextConversationHandle(client, sessionId, summary, defaultAuth, context) {
-  const uaid = context?.uaid?.trim();
-  const agentUrl = context?.agentUrl?.trim();
-  const fetchHistory = async (options) => {
-    const snapshot = await client.fetchHistorySnapshot(sessionId, options);
-    if (snapshot.decryptedHistory) {
-      return snapshot.decryptedHistory;
-    }
-    return snapshot.history.map((entry) => ({
-      entry,
-      plaintext: entry.content
-    }));
-  };
   return {
-    sessionId,
-    mode: "plaintext",
-    summary: summary ?? null,
-    send: async (options) => {
-      const plaintext = options.plaintext;
-      if (!plaintext || plaintext.trim().length === 0) {
-        throw new Error("plaintext is required for chat messages");
-      }
-      const message = options.message ?? plaintext;
-      return sendMessage(client, {
-        sessionId,
-        message,
-        streaming: options.streaming,
-        auth: options.auth ?? defaultAuth,
-        uaid,
-        agentUrl
-      });
-    },
-    decryptHistoryEntry: (entry) => entry.content,
-    fetchHistory
+    signature: Buffer.from(signatureEntry.signature).toString("base64"),
+    signatureKind: "raw",
+    publicKey: derivedPublicKey
   };
 }
-async function compactHistory(client, payload) {
-  if (!payload.sessionId || payload.sessionId.trim().length === 0) {
-    throw new Error("sessionId is required to compact chat history");
-  }
-  const body = {};
-  if (typeof payload.preserveEntries === "number" && Number.isFinite(payload.preserveEntries) && payload.preserveEntries >= 0) {
-    body.preserveEntries = Math.floor(payload.preserveEntries);
-  }
-  const raw = await client.requestJson(
-    `/chat/session/${encodeURIComponent(payload.sessionId)}/compact`,
-    {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body
+async function createLedgerChallenge(client, payload) {
+  const resolvedNetwork = canonicalizeLedgerNetwork(payload.network);
+  const network = resolvedNetwork.kind === "hedera" ? resolvedNetwork.hederaNetwork ?? resolvedNetwork.canonical : resolvedNetwork.canonical;
+  const raw = await client.requestJson("/auth/ledger/challenge", {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body: {
+      accountId: payload.accountId,
+      network
     }
-  );
+  });
   return client.parseWithSchema(
     raw,
-    chatHistoryCompactionResponseSchema,
-    "chat history compaction response"
+    ledgerChallengeResponseSchema,
+    "ledger challenge response"
   );
 }
-async function fetchEncryptionStatus(client, sessionId) {
-  if (!sessionId || sessionId.trim().length === 0) {
-    throw new Error("sessionId is required for encryption status");
+async function verifyLedgerChallenge(client, payload) {
+  const resolvedNetwork = canonicalizeLedgerNetwork(payload.network);
+  const network = resolvedNetwork.kind === "hedera" ? resolvedNetwork.hederaNetwork ?? resolvedNetwork.canonical : resolvedNetwork.canonical;
+  const body = {
+    challengeId: payload.challengeId,
+    accountId: payload.accountId,
+    network,
+    signature: payload.signature
+  };
+  if (payload.signatureKind) {
+    body.signatureKind = payload.signatureKind;
   }
-  const raw = await client.requestJson(
-    `/chat/session/${encodeURIComponent(sessionId)}/encryption`,
-    {
-      method: "GET"
-    }
-  );
-  return client.parseWithSchema(
-    raw,
-    sessionEncryptionStatusResponseSchema,
-    "session encryption status response"
-  );
-}
-async function postEncryptionHandshake(client, sessionId, payload) {
-  if (!sessionId || sessionId.trim().length === 0) {
-    throw new Error("sessionId is required for encryption handshake");
+  if (payload.publicKey) {
+    body.publicKey = payload.publicKey;
   }
-  const raw = await client.requestJson(
-    `/chat/session/${encodeURIComponent(sessionId)}/encryption-handshake`,
-    {
-      method: "POST",
-      headers: { "content-type": "application/json" },
-      body: {
-        role: payload.role,
-        keyType: payload.keyType,
-        ephemeralPublicKey: payload.ephemeralPublicKey,
-        longTermPublicKey: payload.longTermPublicKey,
-        signature: payload.signature,
-        uaid: payload.uaid,
-        userId: payload.userId,
-        ledgerAccountId: payload.ledgerAccountId,
-        metadata: payload.metadata
-      }
-    }
-  );
-  const response = client.parseWithSchema(
+  if (typeof payload.expiresInMinutes === "number") {
+    body.expiresInMinutes = payload.expiresInMinutes;
+  }
+  const raw = await client.requestJson("/auth/ledger/verify", {
+    method: "POST",
+    headers: { "content-type": "application/json" },
+    body
+  });
+  const result = client.parseWithSchema(
     raw,
-    encryptionHandshakeResponseSchema,
-    "encryption handshake response"
+    ledgerVerifyResponseSchema,
+    "ledger verification response"
   );
-  return response.handshake;
+  client.setLedgerApiKey(result.key);
+  return result;
 }
-async function sendMessage(client, payload) {
-  const body = {
-    message: payload.message
+async function authenticateWithLedger(client, options) {
+  const challenge = await client.createLedgerChallenge({
+    accountId: options.accountId,
+    network: options.network
+  });
+  const signed = await resolveLedgerAuthSignature(challenge.message, options);
+  const verification = await client.verifyLedgerChallenge({
+    challengeId: challenge.challengeId,
+    accountId: options.accountId,
+    network: options.network,
+    signature: signed.signature,
+    signatureKind: signed.signatureKind,
+    publicKey: signed.publicKey,
+    expiresInMinutes: options.expiresInMinutes
+  });
+  return verification;
+}
+async function authenticateWithLedgerCredentials(client, options) {
+  const {
+    accountId,
+    network,
+    signer,
+    sign,
+    hederaPrivateKey,
+    evmPrivateKey,
+    expiresInMinutes,
+    setAccountHeader = true,
+    label,
+    logger
+  } = options;
+  const resolvedNetwork = canonicalizeLedgerNetwork(network);
+  const labelSuffix = label ? ` for ${label}` : "";
+  const networkPayload = resolvedNetwork.canonical;
+  const authOptions = {
+    accountId,
+    network: networkPayload,
+    expiresInMinutes
   };
-  if (payload.streaming !== void 0) {
-    body.streaming = payload.streaming;
-  }
-  if (payload.auth) {
-    body.auth = serialiseAuthConfig(payload.auth);
-  }
-  if ("uaid" in payload) {
-    body.uaid = payload.uaid;
-  }
-  if ("sessionId" in payload && payload.sessionId) {
-    body.sessionId = payload.sessionId;
-  }
-  if ("agentUrl" in payload && payload.agentUrl) {
-    body.agentUrl = payload.agentUrl;
-  }
-  let cipherEnvelope = payload.cipherEnvelope ?? null;
-  if (payload.encryption) {
-    const sessionIdForEncryption = payload.encryption.sessionId ?? (typeof body.sessionId === "string" ? body.sessionId : void 0);
-    if (!sessionIdForEncryption) {
+  if (sign) {
+    authOptions.sign = sign;
+  } else if (signer) {
+    authOptions.signer = signer;
+  } else if (hederaPrivateKey) {
+    if (resolvedNetwork.kind !== "hedera" || !resolvedNetwork.hederaNetwork) {
       throw new Error(
-        "sessionId is required when using encrypted chat payloads"
+        "hederaPrivateKey can only be used with hedera:mainnet or hedera:testnet networks."
       );
     }
-    if (!payload.encryption.recipients?.length) {
-      throw new Error("recipients are required for encrypted chat payloads");
+    authOptions.signer = await createPrivateKeySignerAsync({
+      accountId,
+      privateKey: hederaPrivateKey,
+      network: resolvedNetwork.hederaNetwork
+    });
+  } else if (evmPrivateKey) {
+    if (resolvedNetwork.kind !== "evm") {
+      throw new Error(
+        "evmPrivateKey can only be used with CAIP-2 EVM networks (eip155:<chainId>)."
+      );
     }
-    cipherEnvelope = client.encryption.encryptCipherEnvelope({
-      ...payload.encryption,
-      sessionId: sessionIdForEncryption
+    const formattedKey = evmPrivateKey.startsWith("0x") ? evmPrivateKey : `0x${evmPrivateKey}`;
+    const account = await loadViemAccount(formattedKey);
+    authOptions.sign = async (message) => ({
+      signature: await account.signMessage({ message }),
+      signatureKind: "evm",
+      publicKey: account.publicKey
     });
+  } else {
+    throw new Error(
+      "Provide a signer, sign function, hederaPrivateKey, or evmPrivateKey to authenticate with the ledger."
+    );
   }
-  if (cipherEnvelope) {
-    body.cipherEnvelope = toJsonObject(cipherEnvelope);
+  logger?.info?.(
+    `Authenticating ledger account ${accountId} (${resolvedNetwork.canonical})${labelSuffix}...`
+  );
+  const verification = await client.authenticateWithLedger(authOptions);
+  if (setAccountHeader) {
+    client.setDefaultHeader("x-account-id", verification.accountId);
   }
-  const raw = await client.requestJson("/chat/message", {
-    method: "POST",
-    body,
-    headers: { "content-type": "application/json" }
-  });
-  return client.parseWithSchema(
-    raw,
-    sendMessageResponseSchema,
-    "chat message response"
+  logger?.info?.(
+    `Ledger authentication complete${labelSuffix}. Issued key prefix: ${verification.apiKey.prefix}…${verification.apiKey.lastFour}`
   );
-}
-async function endSession(client, sessionId) {
-  await client.request(`/chat/session/${encodeURIComponent(sessionId)}`, {
-    method: "DELETE"
-  });
+  return verification;
 }
 export {
-  acceptConversation,
-  compactHistory,
-  createChatApi,
-  createPlaintextConversationHandle,
-  createSession,
-  endSession,
-  fetchEncryptionStatus,
-  postEncryptionHandshake,
-  sendMessage,
-  startChat,
-  startConversation
+  authenticateWithLedger,
+  authenticateWithLedgerCredentials,
+  createLedgerChallenge,
+  verifyLedgerChallenge
 };
 //# sourceMappingURL=standards-sdk.es182.js.map

package/dist/es/standards-sdk.es182.js.map

@@ -1 +1 @@
-{"version":3,"file":"standards-sdk.es182.js","sources":["../../src/services/registry-broker/client/chat.ts"],"sourcesContent":["import type {\n  AcceptConversationOptions,\n  AcceptEncryptedChatSessionOptions,\n  AgentAuthConfig,\n  ChatConversationHandle,\n  DecryptedHistoryEntry,\n  ChatHistoryCompactionResponse,\n  ChatHistoryFetchOptions,\n  ChatHistorySnapshotWithDecryptedEntries,\n  CompactHistoryRequestPayload,\n  CreateSessionRequestPayload,\n  CreateSessionResponse,\n  EncryptionHandshakeRecord,\n  EncryptionHandshakeSubmissionPayload,\n  EncryptedChatSessionHandle,\n  JsonObject,\n  JsonValue,\n  SendMessageRequestPayload,\n  SendMessageResponse,\n  SessionEncryptionStatusResponse,\n  SessionEncryptionSummary,\n  StartChatOptions,\n  StartConversationOptions,\n  StartEncryptedChatSessionOptions,\n} from '../types';\nimport {\n  chatHistoryCompactionResponseSchema,\n  createSessionResponseSchema,\n  encryptionHandshakeResponseSchema,\n  sendMessageResponseSchema,\n  sessionEncryptionStatusResponseSchema,\n} from '../schemas';\nimport type { RegistryBrokerClient } from './base-client';\nimport { serialiseAuthConfig, toJsonObject } from './utils';\nimport {\n  EncryptedChatManager,\n  EncryptionUnavailableError,\n} from './encrypted-chat-manager';\n\nexport interface RegistryBrokerChatApi {\n  start: (options: StartChatOptions) => Promise<ChatConversationHandle>;\n  createSession: (\n    payload: CreateSessionRequestPayload,\n  ) => Promise<CreateSessionResponse>;\n  sendMessage: (\n    payload: SendMessageRequestPayload,\n  ) => Promise<SendMessageResponse>;\n  endSession: (sessionId: string) => Promise<void>;\n  getHistory: (\n    sessionId: string,\n    options?: ChatHistoryFetchOptions,\n  ) => Promise<ChatHistorySnapshotWithDecryptedEntries>;\n  compactHistory: (\n    payload: CompactHistoryRequestPayload,\n  ) => Promise<ChatHistoryCompactionResponse>;\n  getEncryptionStatus: (\n    sessionId: string,\n  ) => Promise<SessionEncryptionStatusResponse>;\n  submitEncryptionHandshake: (\n    sessionId: string,\n    payload: EncryptionHandshakeSubmissionPayload,\n  ) => Promise<EncryptionHandshakeRecord>;\n  createEncryptedSession: (\n    options: StartEncryptedChatSessionOptions,\n  ) => Promise<EncryptedChatSessionHandle>;\n  acceptEncryptedSession: (\n    options: AcceptEncryptedChatSessionOptions,\n  ) => Promise<EncryptedChatSessionHandle>;\n  startConversation: (\n    options: StartConversationOptions,\n  ) => Promise<ChatConversationHandle>;\n  acceptConversation: (\n    options: AcceptConversationOptions,\n  ) => Promise<ChatConversationHandle>;\n}\n\nexport function createChatApi(\n  client: RegistryBrokerClient,\n  encryptedManager: EncryptedChatManager,\n): RegistryBrokerChatApi {\n  return {\n    start: (options: StartChatOptions) => client.startChat(options),\n    createSession: (payload: CreateSessionRequestPayload) =>\n      client.createSession(payload),\n    sendMessage: (payload: SendMessageRequestPayload) =>\n      client.sendMessage(payload),\n    endSession: (sessionId: string) => client.endSession(sessionId),\n    getHistory: (sessionId: string, options?: ChatHistoryFetchOptions) =>\n      client.fetchHistorySnapshot(sessionId, options),\n    compactHistory: (payload: CompactHistoryRequestPayload) =>\n      client.compactHistory(payload),\n    getEncryptionStatus: (sessionId: string) =>\n      client.fetchEncryptionStatus(sessionId),\n    submitEncryptionHandshake: (\n      sessionId: string,\n      payload: EncryptionHandshakeSubmissionPayload,\n    ) => client.postEncryptionHandshake(sessionId, payload),\n    startConversation: (options: StartConversationOptions) =>\n      client.startConversation(options),\n    acceptConversation: (options: AcceptConversationOptions) =>\n      client.acceptConversation(options),\n    createEncryptedSession: (options: StartEncryptedChatSessionOptions) =>\n      encryptedManager.startSession(options),\n    acceptEncryptedSession: (options: AcceptEncryptedChatSessionOptions) =>\n      encryptedManager.acceptSession(options),\n  };\n}\n\nexport async function createSession(\n  client: RegistryBrokerClient,\n  payload: CreateSessionRequestPayload,\n  allowHistoryAutoTopUp = true,\n): Promise<CreateSessionResponse> {\n  const body: JsonObject = {};\n  if ('uaid' in payload && payload.uaid) {\n    body.uaid = payload.uaid;\n  }\n  if ('agentUrl' in payload && payload.agentUrl) {\n    body.agentUrl = payload.agentUrl;\n  }\n  if (payload.auth) {\n    body.auth = serialiseAuthConfig(payload.auth);\n  }\n  if (payload.historyTtlSeconds !== undefined) {\n    body.historyTtlSeconds = payload.historyTtlSeconds;\n  }\n  if (payload.encryptionRequested !== undefined) {\n    body.encryptionRequested = payload.encryptionRequested;\n  }\n  if (payload.senderUaid) {\n    body.senderUaid = payload.senderUaid;\n  }\n  try {\n    const raw = await client.requestJson<JsonValue>('/chat/session', {\n      method: 'POST',\n      body,\n      headers: { 'content-type': 'application/json' },\n    });\n    return client.parseWithSchema(\n      raw,\n      createSessionResponseSchema,\n      'chat session response',\n    );\n  } catch (error) {\n    const maybeError = error instanceof Error ? error : null;\n    if (\n      allowHistoryAutoTopUp &&\n      client.shouldAutoTopUpHistory(payload, maybeError)\n    ) {\n      await client.executeHistoryAutoTopUp('chat.session');\n      return createSession(client, payload, false);\n    }\n    throw error;\n  }\n}\n\nexport async function startChat(\n  client: RegistryBrokerClient,\n  encryptedManager: EncryptedChatManager,\n  options: StartChatOptions,\n): Promise<ChatConversationHandle> {\n  if ('uaid' in options && options.uaid) {\n    return startConversation(client, encryptedManager, {\n      uaid: options.uaid,\n      senderUaid: options.senderUaid,\n      historyTtlSeconds: options.historyTtlSeconds,\n      auth: options.auth,\n      encryption: options.encryption,\n      onSessionCreated: options.onSessionCreated,\n    });\n  }\n  if ('agentUrl' in options && options.agentUrl) {\n    const session = await createSession(client, {\n      agentUrl: options.agentUrl,\n      auth: options.auth,\n      historyTtlSeconds: options.historyTtlSeconds,\n      senderUaid: options.senderUaid,\n    });\n    options.onSessionCreated?.(session.sessionId);\n    return createPlaintextConversationHandle(\n      client,\n      session.sessionId,\n      session.encryption ?? null,\n      options.auth,\n      { agentUrl: options.agentUrl, uaid: options.uaid },\n    );\n  }\n  throw new Error('startChat requires either uaid or agentUrl');\n}\n\nexport async function startConversation(\n  client: RegistryBrokerClient,\n  encryptedManager: EncryptedChatManager,\n  options: StartConversationOptions,\n): Promise<ChatConversationHandle> {\n  const preference = options.encryption?.preference ?? 'preferred';\n  const requestEncryption = preference !== 'disabled';\n  if (!requestEncryption) {\n    const session = await createSession(client, {\n      uaid: options.uaid,\n      auth: options.auth,\n      historyTtlSeconds: options.historyTtlSeconds,\n      senderUaid: options.senderUaid,\n      encryptionRequested: false,\n    });\n    options.onSessionCreated?.(session.sessionId);\n    return createPlaintextConversationHandle(\n      client,\n      session.sessionId,\n      session.encryption ?? null,\n      options.auth,\n      { uaid: options.uaid },\n    );\n  }\n  try {\n    const handle = await encryptedManager.startSession({\n      uaid: options.uaid,\n      senderUaid: options.senderUaid,\n      historyTtlSeconds: options.historyTtlSeconds,\n      handshakeTimeoutMs: options.encryption?.handshakeTimeoutMs,\n      pollIntervalMs: options.encryption?.pollIntervalMs,\n      onSessionCreated: sessionId => {\n        options.onSessionCreated?.(sessionId);\n      },\n      auth: options.auth,\n    });\n    return handle;\n  } catch (error) {\n    if (error instanceof EncryptionUnavailableError) {\n      if (preference === 'required') {\n        throw error;\n      }\n      return createPlaintextConversationHandle(\n        client,\n        error.sessionId,\n        error.summary ?? null,\n        options.auth,\n        { uaid: options.uaid },\n      );\n    }\n    throw error;\n  }\n}\n\nexport async function acceptConversation(\n  client: RegistryBrokerClient,\n  encryptedManager: EncryptedChatManager,\n  options: AcceptConversationOptions,\n): Promise<ChatConversationHandle> {\n  const preference = options.encryption?.preference ?? 'preferred';\n  if (preference === 'disabled') {\n    return createPlaintextConversationHandle(client, options.sessionId, null);\n  }\n  try {\n    const handle = await encryptedManager.acceptSession({\n      sessionId: options.sessionId,\n      responderUaid: options.responderUaid,\n      handshakeTimeoutMs: options.encryption?.handshakeTimeoutMs,\n      pollIntervalMs: options.encryption?.pollIntervalMs,\n    });\n    return handle;\n  } catch (error) {\n    if (\n      error instanceof EncryptionUnavailableError &&\n      preference !== 'required'\n    ) {\n      return createPlaintextConversationHandle(\n        client,\n        options.sessionId,\n        null,\n        undefined,\n        { uaid: options.responderUaid },\n      );\n    }\n    throw error;\n  }\n}\n\nexport function createPlaintextConversationHandle(\n  client: RegistryBrokerClient,\n  sessionId: string,\n  summary: SessionEncryptionSummary | null,\n  defaultAuth?: AgentAuthConfig,\n  context?: { uaid?: string; agentUrl?: string },\n): ChatConversationHandle {\n  const uaid = context?.uaid?.trim();\n  const agentUrl = context?.agentUrl?.trim();\n  const fetchHistory = async (\n    options?: ChatHistoryFetchOptions,\n  ): Promise<DecryptedHistoryEntry[]> => {\n    const snapshot = await client.fetchHistorySnapshot(sessionId, options);\n    if (snapshot.decryptedHistory) {\n      return snapshot.decryptedHistory;\n    }\n    return snapshot.history.map(entry => ({\n      entry,\n      plaintext: entry.content,\n    }));\n  };\n  return {\n    sessionId,\n    mode: 'plaintext',\n    summary: summary ?? null,\n    send: async options => {\n      const plaintext = options.plaintext;\n      if (!plaintext || plaintext.trim().length === 0) {\n        throw new Error('plaintext is required for chat messages');\n      }\n      const message = options.message ?? plaintext;\n      return sendMessage(client, {\n        sessionId,\n        message,\n        streaming: options.streaming,\n        auth: options.auth ?? defaultAuth,\n        uaid,\n        agentUrl,\n      });\n    },\n    decryptHistoryEntry: entry => entry.content,\n    fetchHistory,\n  };\n}\n\nexport async function compactHistory(\n  client: RegistryBrokerClient,\n  payload: CompactHistoryRequestPayload,\n): Promise<ChatHistoryCompactionResponse> {\n  if (!payload.sessionId || payload.sessionId.trim().length === 0) {\n    throw new Error('sessionId is required to compact chat history');\n  }\n  const body: JsonObject = {};\n  if (\n    typeof payload.preserveEntries === 'number' &&\n    Number.isFinite(payload.preserveEntries) &&\n    payload.preserveEntries >= 0\n  ) {\n    body.preserveEntries = Math.floor(payload.preserveEntries);\n  }\n  const raw = await client.requestJson<JsonValue>(\n    `/chat/session/${encodeURIComponent(payload.sessionId)}/compact`,\n    {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body,\n    },\n  );\n  return client.parseWithSchema(\n    raw,\n    chatHistoryCompactionResponseSchema,\n    'chat history compaction response',\n  );\n}\n\nexport async function fetchEncryptionStatus(\n  client: RegistryBrokerClient,\n  sessionId: string,\n): Promise<SessionEncryptionStatusResponse> {\n  if (!sessionId || sessionId.trim().length === 0) {\n    throw new Error('sessionId is required for encryption status');\n  }\n  const raw = await client.requestJson<JsonValue>(\n    `/chat/session/${encodeURIComponent(sessionId)}/encryption`,\n    {\n      method: 'GET',\n    },\n  );\n  return client.parseWithSchema(\n    raw,\n    sessionEncryptionStatusResponseSchema,\n    'session encryption status response',\n  );\n}\n\nexport async function postEncryptionHandshake(\n  client: RegistryBrokerClient,\n  sessionId: string,\n  payload: EncryptionHandshakeSubmissionPayload,\n): Promise<EncryptionHandshakeRecord> {\n  if (!sessionId || sessionId.trim().length === 0) {\n    throw new Error('sessionId is required for encryption handshake');\n  }\n  const raw = await client.requestJson<JsonValue>(\n    `/chat/session/${encodeURIComponent(sessionId)}/encryption-handshake`,\n    {\n      method: 'POST',\n      headers: { 'content-type': 'application/json' },\n      body: {\n        role: payload.role,\n        keyType: payload.keyType,\n        ephemeralPublicKey: payload.ephemeralPublicKey,\n        longTermPublicKey: payload.longTermPublicKey,\n        signature: payload.signature,\n        uaid: payload.uaid,\n        userId: payload.userId,\n        ledgerAccountId: payload.ledgerAccountId,\n        metadata: payload.metadata,\n      },\n    },\n  );\n  const response = client.parseWithSchema(\n    raw,\n    encryptionHandshakeResponseSchema,\n    'encryption handshake response',\n  );\n  return response.handshake;\n}\n\nexport async function sendMessage(\n  client: RegistryBrokerClient,\n  payload: SendMessageRequestPayload,\n): Promise<SendMessageResponse> {\n  const body: JsonObject = {\n    message: payload.message,\n  };\n  if (payload.streaming !== undefined) {\n    body.streaming = payload.streaming;\n  }\n  if (payload.auth) {\n    body.auth = serialiseAuthConfig(payload.auth);\n  }\n  if ('uaid' in payload) {\n    body.uaid = payload.uaid;\n  }\n  if ('sessionId' in payload && payload.sessionId) {\n    body.sessionId = payload.sessionId;\n  }\n  if ('agentUrl' in payload && payload.agentUrl) {\n    body.agentUrl = payload.agentUrl;\n  }\n  let cipherEnvelope = payload.cipherEnvelope ?? null;\n  if (payload.encryption) {\n    const sessionIdForEncryption =\n      payload.encryption.sessionId ??\n      (typeof body.sessionId === 'string' ? body.sessionId : undefined);\n    if (!sessionIdForEncryption) {\n      throw new Error(\n        'sessionId is required when using encrypted chat payloads',\n      );\n    }\n    if (!payload.encryption.recipients?.length) {\n      throw new Error('recipients are required for encrypted chat payloads');\n    }\n    cipherEnvelope = client.encryption.encryptCipherEnvelope({\n      ...payload.encryption,\n      sessionId: sessionIdForEncryption,\n    });\n  }\n  if (cipherEnvelope) {\n    body.cipherEnvelope = toJsonObject(cipherEnvelope);\n  }\n  const raw = await client.requestJson<JsonValue>('/chat/message', {\n    method: 'POST',\n    body,\n    headers: { 'content-type': 'application/json' },\n  });\n  return client.parseWithSchema(\n    raw,\n    sendMessageResponseSchema,\n    'chat message response',\n  );\n}\n\nexport async function endSession(\n  client: RegistryBrokerClient,\n  sessionId: string,\n): Promise<void> {\n  await client.request(`/chat/session/${encodeURIComponent(sessionId)}`, {\n    method: 'DELETE',\n  });\n}\n"],"names":[],"mappings":";;;AA4EO,SAAS,cACd,QACA,kBACuB;AACvB,SAAO;AAAA,IACL,OAAO,CAAC,YAA8B,OAAO,UAAU,OAAO;AAAA,IAC9D,eAAe,CAAC,YACd,OAAO,cAAc,OAAO;AAAA,IAC9B,aAAa,CAAC,YACZ,OAAO,YAAY,OAAO;AAAA,IAC5B,YAAY,CAAC,cAAsB,OAAO,WAAW,SAAS;AAAA,IAC9D,YAAY,CAAC,WAAmB,YAC9B,OAAO,qBAAqB,WAAW,OAAO;AAAA,IAChD,gBAAgB,CAAC,YACf,OAAO,eAAe,OAAO;AAAA,IAC/B,qBAAqB,CAAC,cACpB,OAAO,sBAAsB,SAAS;AAAA,IACxC,2BAA2B,CACzB,WACA,YACG,OAAO,wBAAwB,WAAW,OAAO;AAAA,IACtD,mBAAmB,CAAC,YAClB,OAAO,kBAAkB,OAAO;AAAA,IAClC,oBAAoB,CAAC,YACnB,OAAO,mBAAmB,OAAO;AAAA,IACnC,wBAAwB,CAAC,YACvB,iBAAiB,aAAa,OAAO;AAAA,IACvC,wBAAwB,CAAC,YACvB,iBAAiB,cAAc,OAAO;AAAA,EAAA;AAE5C;AAEA,eAAsB,cACpB,QACA,SACA,wBAAwB,MACQ;AAChC,QAAM,OAAmB,CAAA;AACzB,MAAI,UAAU,WAAW,QAAQ,MAAM;AACrC,SAAK,OAAO,QAAQ;AAAA,EACtB;AACA,MAAI,cAAc,WAAW,QAAQ,UAAU;AAC7C,SAAK,WAAW,QAAQ;AAAA,EAC1B;AACA,MAAI,QAAQ,MAAM;AAChB,SAAK,OAAO,oBAAoB,QAAQ,IAAI;AAAA,EAC9C;AACA,MAAI,QAAQ,sBAAsB,QAAW;AAC3C,SAAK,oBAAoB,QAAQ;AAAA,EACnC;AACA,MAAI,QAAQ,wBAAwB,QAAW;AAC7C,SAAK,sBAAsB,QAAQ;AAAA,EACrC;AACA,MAAI,QAAQ,YAAY;AACtB,SAAK,aAAa,QAAQ;AAAA,EAC5B;AACA,MAAI;AACF,UAAM,MAAM,MAAM,OAAO,YAAuB,iBAAiB;AAAA,MAC/D,QAAQ;AAAA,MACR;AAAA,MACA,SAAS,EAAE,gBAAgB,mBAAA;AAAA,IAAmB,CAC/C;AACD,WAAO,OAAO;AAAA,MACZ;AAAA,MACA;AAAA,MACA;AAAA,IAAA;AAAA,EAEJ,SAAS,OAAO;AACd,UAAM,aAAa,iBAAiB,QAAQ,QAAQ;AACpD,QACE,yBACA,OAAO,uBAAuB,SAAS,UAAU,GACjD;AACA,YAAM,OAAO,wBAAwB,cAAc;AACnD,aAAO,cAAc,QAAQ,SAAS,KAAK;AAAA,IAC7C;AACA,UAAM;AAAA,EACR;AACF;AAEA,eAAsB,UACpB,QACA,kBACA,SACiC;AACjC,MAAI,UAAU,WAAW,QAAQ,MAAM;AACrC,WAAO,kBAAkB,QAAQ,kBAAkB;AAAA,MACjD,MAAM,QAAQ;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,mBAAmB,QAAQ;AAAA,MAC3B,MAAM,QAAQ;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,kBAAkB,QAAQ;AAAA,IAAA,CAC3B;AAAA,EACH;AACA,MAAI,cAAc,WAAW,QAAQ,UAAU;AAC7C,UAAM,UAAU,MAAM,cAAc,QAAQ;AAAA,MAC1C,UAAU,QAAQ;AAAA,MAClB,MAAM,QAAQ;AAAA,MACd,mBAAmB,QAAQ;AAAA,MAC3B,YAAY,QAAQ;AAAA,IAAA,CACrB;AACD,YAAQ,mBAAmB,QAAQ,SAAS;AAC5C,WAAO;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ,cAAc;AAAA,MACtB,QAAQ;AAAA,MACR,EAAE,UAAU,QAAQ,UAAU,MAAM,QAAQ,KAAA;AAAA,IAAK;AAAA,EAErD;AACA,QAAM,IAAI,MAAM,4CAA4C;AAC9D;AAEA,eAAsB,kBACpB,QACA,kBACA,SACiC;AACjC,QAAM,aAAa,QAAQ,YAAY,cAAc;AACrD,QAAM,oBAAoB,eAAe;AACzC,MAAI,CAAC,mBAAmB;AACtB,UAAM,UAAU,MAAM,cAAc,QAAQ;AAAA,MAC1C,MAAM,QAAQ;AAAA,MACd,MAAM,QAAQ;AAAA,MACd,mBAAmB,QAAQ;AAAA,MAC3B,YAAY,QAAQ;AAAA,MACpB,qBAAqB;AAAA,IAAA,CACtB;AACD,YAAQ,mBAAmB,QAAQ,SAAS;AAC5C,WAAO;AAAA,MACL;AAAA,MACA,QAAQ;AAAA,MACR,QAAQ,cAAc;AAAA,MACtB,QAAQ;AAAA,MACR,EAAE,MAAM,QAAQ,KAAA;AAAA,IAAK;AAAA,EAEzB;AACA,MAAI;AACF,UAAM,SAAS,MAAM,iBAAiB,aAAa;AAAA,MACjD,MAAM,QAAQ;AAAA,MACd,YAAY,QAAQ;AAAA,MACpB,mBAAmB,QAAQ;AAAA,MAC3B,oBAAoB,QAAQ,YAAY;AAAA,MACxC,gBAAgB,QAAQ,YAAY;AAAA,MACpC,kBAAkB,CAAA,cAAa;AAC7B,gBAAQ,mBAAmB,SAAS;AAAA,MACtC;AAAA,MACA,MAAM,QAAQ;AAAA,IAAA,CACf;AACD,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QAAI,iBAAiB,4BAA4B;AAC/C,UAAI,eAAe,YAAY;AAC7B,cAAM;AAAA,MACR;AACA,aAAO;AAAA,QACL;AAAA,QACA,MAAM;AAAA,QACN,MAAM,WAAW;AAAA,QACjB,QAAQ;AAAA,QACR,EAAE,MAAM,QAAQ,KAAA;AAAA,MAAK;AAAA,IAEzB;AACA,UAAM;AAAA,EACR;AACF;AAEA,eAAsB,mBACpB,QACA,kBACA,SACiC;AACjC,QAAM,aAAa,QAAQ,YAAY,cAAc;AACrD,MAAI,eAAe,YAAY;AAC7B,WAAO,kCAAkC,QAAQ,QAAQ,WAAW,IAAI;AAAA,EAC1E;AACA,MAAI;AACF,UAAM,SAAS,MAAM,iBAAiB,cAAc;AAAA,MAClD,WAAW,QAAQ;AAAA,MACnB,eAAe,QAAQ;AAAA,MACvB,oBAAoB,QAAQ,YAAY;AAAA,MACxC,gBAAgB,QAAQ,YAAY;AAAA,IAAA,CACrC;AACD,WAAO;AAAA,EACT,SAAS,OAAO;AACd,QACE,iBAAiB,8BACjB,eAAe,YACf;AACA,aAAO;AAAA,QACL;AAAA,QACA,QAAQ;AAAA,QACR;AAAA,QACA;AAAA,QACA,EAAE,MAAM,QAAQ,cAAA;AAAA,MAAc;AAAA,IAElC;AACA,UAAM;AAAA,EACR;AACF;AAEO,SAAS,kCACd,QACA,WACA,SACA,aACA,SACwB;AACxB,QAAM,OAAO,SAAS,MAAM,KAAA;AAC5B,QAAM,WAAW,SAAS,UAAU,KAAA;AACpC,QAAM,eAAe,OACnB,YACqC;AACrC,UAAM,WAAW,MAAM,OAAO,qBAAqB,WAAW,OAAO;AACrE,QAAI,SAAS,kBAAkB;AAC7B,aAAO,SAAS;AAAA,IAClB;AACA,WAAO,SAAS,QAAQ,IAAI,CAAA,WAAU;AAAA,MACpC;AAAA,MACA,WAAW,MAAM;AAAA,IAAA,EACjB;AAAA,EACJ;AACA,SAAO;AAAA,IACL;AAAA,IACA,MAAM;AAAA,IACN,SAAS,WAAW;AAAA,IACpB,MAAM,OAAM,YAAW;AACrB,YAAM,YAAY,QAAQ;AAC1B,UAAI,CAAC,aAAa,UAAU,KAAA,EAAO,WAAW,GAAG;AAC/C,cAAM,IAAI,MAAM,yCAAyC;AAAA,MAC3D;AACA,YAAM,UAAU,QAAQ,WAAW;AACnC,aAAO,YAAY,QAAQ;AAAA,QACzB;AAAA,QACA;AAAA,QACA,WAAW,QAAQ;AAAA,QACnB,MAAM,QAAQ,QAAQ;AAAA,QACtB;AAAA,QACA;AAAA,MAAA,CACD;AAAA,IACH;AAAA,IACA,qBAAqB,WAAS,MAAM;AAAA,IACpC;AAAA,EAAA;AAEJ;AAEA,eAAsB,eACpB,QACA,SACwC;AACxC,MAAI,CAAC,QAAQ,aAAa,QAAQ,UAAU,KAAA,EAAO,WAAW,GAAG;AAC/D,UAAM,IAAI,MAAM,+CAA+C;AAAA,EACjE;AACA,QAAM,OAAmB,CAAA;AACzB,MACE,OAAO,QAAQ,oBAAoB,YACnC,OAAO,SAAS,QAAQ,eAAe,KACvC,QAAQ,mBAAmB,GAC3B;AACA,SAAK,kBAAkB,KAAK,MAAM,QAAQ,eAAe;AAAA,EAC3D;AACA,QAAM,MAAM,MAAM,OAAO;AAAA,IACvB,iBAAiB,mBAAmB,QAAQ,SAAS,CAAC;AAAA,IACtD;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,MAC3B;AAAA,IAAA;AAAA,EACF;AAEF,SAAO,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAEA,eAAsB,sBACpB,QACA,WAC0C;AAC1C,MAAI,CAAC,aAAa,UAAU,KAAA,EAAO,WAAW,GAAG;AAC/C,UAAM,IAAI,MAAM,6CAA6C;AAAA,EAC/D;AACA,QAAM,MAAM,MAAM,OAAO;AAAA,IACvB,iBAAiB,mBAAmB,SAAS,CAAC;AAAA,IAC9C;AAAA,MACE,QAAQ;AAAA,IAAA;AAAA,EACV;AAEF,SAAO,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAEA,eAAsB,wBACpB,QACA,WACA,SACoC;AACpC,MAAI,CAAC,aAAa,UAAU,KAAA,EAAO,WAAW,GAAG;AAC/C,UAAM,IAAI,MAAM,gDAAgD;AAAA,EAClE;AACA,QAAM,MAAM,MAAM,OAAO;AAAA,IACvB,iBAAiB,mBAAmB,SAAS,CAAC;AAAA,IAC9C;AAAA,MACE,QAAQ;AAAA,MACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,MAC3B,MAAM;AAAA,QACJ,MAAM,QAAQ;AAAA,QACd,SAAS,QAAQ;AAAA,QACjB,oBAAoB,QAAQ;AAAA,QAC5B,mBAAmB,QAAQ;AAAA,QAC3B,WAAW,QAAQ;AAAA,QACnB,MAAM,QAAQ;AAAA,QACd,QAAQ,QAAQ;AAAA,QAChB,iBAAiB,QAAQ;AAAA,QACzB,UAAU,QAAQ;AAAA,MAAA;AAAA,IACpB;AAAA,EACF;AAEF,QAAM,WAAW,OAAO;AAAA,IACtB;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEF,SAAO,SAAS;AAClB;AAEA,eAAsB,YACpB,QACA,SAC8B;AAC9B,QAAM,OAAmB;AAAA,IACvB,SAAS,QAAQ;AAAA,EAAA;AAEnB,MAAI,QAAQ,cAAc,QAAW;AACnC,SAAK,YAAY,QAAQ;AAAA,EAC3B;AACA,MAAI,QAAQ,MAAM;AAChB,SAAK,OAAO,oBAAoB,QAAQ,IAAI;AAAA,EAC9C;AACA,MAAI,UAAU,SAAS;AACrB,SAAK,OAAO,QAAQ;AAAA,EACtB;AACA,MAAI,eAAe,WAAW,QAAQ,WAAW;AAC/C,SAAK,YAAY,QAAQ;AAAA,EAC3B;AACA,MAAI,cAAc,WAAW,QAAQ,UAAU;AAC7C,SAAK,WAAW,QAAQ;AAAA,EAC1B;AACA,MAAI,iBAAiB,QAAQ,kBAAkB;AAC/C,MAAI,QAAQ,YAAY;AACtB,UAAM,yBACJ,QAAQ,WAAW,cAClB,OAAO,KAAK,cAAc,WAAW,KAAK,YAAY;AACzD,QAAI,CAAC,wBAAwB;AAC3B,YAAM,IAAI;AAAA,QACR;AAAA,MAAA;AAAA,IAEJ;AACA,QAAI,CAAC,QAAQ,WAAW,YAAY,QAAQ;AAC1C,YAAM,IAAI,MAAM,qDAAqD;AAAA,IACvE;AACA,qBAAiB,OAAO,WAAW,sBAAsB;AAAA,MACvD,GAAG,QAAQ;AAAA,MACX,WAAW;AAAA,IAAA,CACZ;AAAA,EACH;AACA,MAAI,gBAAgB;AAClB,SAAK,iBAAiB,aAAa,cAAc;AAAA,EACnD;AACA,QAAM,MAAM,MAAM,OAAO,YAAuB,iBAAiB;AAAA,IAC/D,QAAQ;AAAA,IACR;AAAA,IACA,SAAS,EAAE,gBAAgB,mBAAA;AAAA,EAAmB,CAC/C;AACD,SAAO,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAEA,eAAsB,WACpB,QACA,WACe;AACf,QAAM,OAAO,QAAQ,iBAAiB,mBAAmB,SAAS,CAAC,IAAI;AAAA,IACrE,QAAQ;AAAA,EAAA,CACT;AACH;"}
+{"version":3,"file":"standards-sdk.es182.js","sources":["../../src/services/registry-broker/client/ledger-auth.ts"],"sourcesContent":["import { Buffer } from 'buffer';\nimport type { SignerSignature } from '@hashgraph/sdk';\nimport type {\n  JsonObject,\n  JsonValue,\n  LedgerAuthenticationOptions,\n  LedgerAuthenticationSignerResult,\n  LedgerChallengeRequest,\n  LedgerChallengeResponse,\n  LedgerCredentialAuthOptions,\n  LedgerVerifyRequest,\n  LedgerVerifyResponse,\n} from '../types';\nimport {\n  ledgerChallengeResponseSchema,\n  ledgerVerifyResponseSchema,\n} from '../schemas';\nimport { canonicalizeLedgerNetwork } from '../ledger-network';\nimport { createPrivateKeySignerAsync } from '../private-key-signer';\nimport type { RegistryBrokerClient } from './base-client';\n\nasync function loadViemAccount(privateKey: `0x${string}`): Promise<{\n  publicKey: string;\n  signMessage: (input: { message: string }) => Promise<string>;\n}> {\n  try {\n    const viem = await import('viem/accounts');\n    return viem.privateKeyToAccount(privateKey);\n  } catch (error) {\n    const err = new Error(\n      'EVM ledger authentication requires the optional dependency \"viem\". Install it to use evmPrivateKey flows.',\n    );\n    (err as { cause?: unknown }).cause = error;\n    throw err;\n  }\n}\n\nasync function resolveLedgerAuthSignature(\n  message: string,\n  options: LedgerAuthenticationOptions,\n): Promise<LedgerAuthenticationSignerResult> {\n  if (typeof options.sign === 'function') {\n    const result = await options.sign(message);\n    if (\n      !result ||\n      typeof result.signature !== 'string' ||\n      result.signature.length === 0\n    ) {\n      throw new Error('Custom ledger signer failed to produce a signature.');\n    }\n    return result;\n  }\n\n  if (!options.signer || typeof options.signer.sign !== 'function') {\n    throw new Error(\n      'Ledger authentication requires a Hedera Signer or custom sign function.',\n    );\n  }\n\n  const payload = Buffer.from(message, 'utf8');\n  const signatures: SignerSignature[] = await options.signer.sign([payload]);\n  const signatureEntry = signatures?.[0];\n  if (!signatureEntry) {\n    throw new Error('Signer did not return any signatures.');\n  }\n\n  let derivedPublicKey: string | undefined;\n  if (signatureEntry.publicKey) {\n    derivedPublicKey = signatureEntry.publicKey.toString();\n  } else if (typeof options.signer.getAccountKey === 'function') {\n    const accountKey = await options.signer.getAccountKey();\n    if (accountKey && typeof accountKey.toString === 'function') {\n      derivedPublicKey = accountKey.toString();\n    }\n  }\n\n  return {\n    signature: Buffer.from(signatureEntry.signature).toString('base64'),\n    signatureKind: 'raw',\n    publicKey: derivedPublicKey,\n  };\n}\n\nexport async function createLedgerChallenge(\n  client: RegistryBrokerClient,\n  payload: LedgerChallengeRequest,\n): Promise<LedgerChallengeResponse> {\n  const resolvedNetwork = canonicalizeLedgerNetwork(payload.network);\n  const network =\n    resolvedNetwork.kind === 'hedera'\n      ? (resolvedNetwork.hederaNetwork ?? resolvedNetwork.canonical)\n      : resolvedNetwork.canonical;\n  const raw = await client.requestJson<JsonValue>('/auth/ledger/challenge', {\n    method: 'POST',\n    headers: { 'content-type': 'application/json' },\n    body: {\n      accountId: payload.accountId,\n      network,\n    },\n  });\n\n  return client.parseWithSchema(\n    raw,\n    ledgerChallengeResponseSchema,\n    'ledger challenge response',\n  );\n}\n\nexport async function verifyLedgerChallenge(\n  client: RegistryBrokerClient,\n  payload: LedgerVerifyRequest,\n): Promise<LedgerVerifyResponse> {\n  const resolvedNetwork = canonicalizeLedgerNetwork(payload.network);\n  const network =\n    resolvedNetwork.kind === 'hedera'\n      ? (resolvedNetwork.hederaNetwork ?? resolvedNetwork.canonical)\n      : resolvedNetwork.canonical;\n  const body: JsonObject = {\n    challengeId: payload.challengeId,\n    accountId: payload.accountId,\n    network,\n    signature: payload.signature,\n  };\n\n  if (payload.signatureKind) {\n    body.signatureKind = payload.signatureKind;\n  }\n  if (payload.publicKey) {\n    body.publicKey = payload.publicKey;\n  }\n  if (typeof payload.expiresInMinutes === 'number') {\n    body.expiresInMinutes = payload.expiresInMinutes;\n  }\n\n  const raw = await client.requestJson<JsonValue>('/auth/ledger/verify', {\n    method: 'POST',\n    headers: { 'content-type': 'application/json' },\n    body,\n  });\n\n  const result = client.parseWithSchema(\n    raw,\n    ledgerVerifyResponseSchema,\n    'ledger verification response',\n  );\n\n  client.setLedgerApiKey(result.key);\n  return result;\n}\n\nexport async function authenticateWithLedger(\n  client: RegistryBrokerClient,\n  options: LedgerAuthenticationOptions,\n): Promise<LedgerVerifyResponse> {\n  const challenge = await client.createLedgerChallenge({\n    accountId: options.accountId,\n    network: options.network,\n  });\n  const signed = await resolveLedgerAuthSignature(challenge.message, options);\n  const verification = await client.verifyLedgerChallenge({\n    challengeId: challenge.challengeId,\n    accountId: options.accountId,\n    network: options.network,\n    signature: signed.signature,\n    signatureKind: signed.signatureKind,\n    publicKey: signed.publicKey,\n    expiresInMinutes: options.expiresInMinutes,\n  });\n  return verification;\n}\n\nexport async function authenticateWithLedgerCredentials(\n  client: RegistryBrokerClient,\n  options: LedgerCredentialAuthOptions,\n): Promise<LedgerVerifyResponse> {\n  const {\n    accountId,\n    network,\n    signer,\n    sign,\n    hederaPrivateKey,\n    evmPrivateKey,\n    expiresInMinutes,\n    setAccountHeader = true,\n    label,\n    logger,\n  } = options;\n\n  const resolvedNetwork = canonicalizeLedgerNetwork(network);\n  const labelSuffix = label ? ` for ${label}` : '';\n\n  const networkPayload = resolvedNetwork.canonical;\n\n  const authOptions: LedgerAuthenticationOptions = {\n    accountId,\n    network: networkPayload,\n    expiresInMinutes,\n  };\n\n  if (sign) {\n    authOptions.sign = sign;\n  } else if (signer) {\n    authOptions.signer = signer;\n  } else if (hederaPrivateKey) {\n    if (resolvedNetwork.kind !== 'hedera' || !resolvedNetwork.hederaNetwork) {\n      throw new Error(\n        'hederaPrivateKey can only be used with hedera:mainnet or hedera:testnet networks.',\n      );\n    }\n    authOptions.signer = await createPrivateKeySignerAsync({\n      accountId,\n      privateKey: hederaPrivateKey,\n      network: resolvedNetwork.hederaNetwork,\n    });\n  } else if (evmPrivateKey) {\n    if (resolvedNetwork.kind !== 'evm') {\n      throw new Error(\n        'evmPrivateKey can only be used with CAIP-2 EVM networks (eip155:<chainId>).',\n      );\n    }\n    const formattedKey = evmPrivateKey.startsWith('0x')\n      ? (evmPrivateKey as `0x${string}`)\n      : (`0x${evmPrivateKey}` as `0x${string}`);\n    const account = await loadViemAccount(formattedKey);\n    authOptions.sign = async message => ({\n      signature: await account.signMessage({ message }),\n      signatureKind: 'evm',\n      publicKey: account.publicKey,\n    });\n  } else {\n    throw new Error(\n      'Provide a signer, sign function, hederaPrivateKey, or evmPrivateKey to authenticate with the ledger.',\n    );\n  }\n\n  logger?.info?.(\n    `Authenticating ledger account ${accountId} (${resolvedNetwork.canonical})${labelSuffix}...`,\n  );\n  const verification = await client.authenticateWithLedger(authOptions);\n  if (setAccountHeader) {\n    client.setDefaultHeader('x-account-id', verification.accountId);\n  }\n  logger?.info?.(\n    `Ledger authentication complete${labelSuffix}. Issued key prefix: ${verification.apiKey.prefix}…${verification.apiKey.lastFour}`,\n  );\n  return verification;\n}\n"],"names":[],"mappings":";;;;AAqBA,eAAe,gBAAgB,YAG5B;AACD,MAAI;AACF,UAAM,OAAO,MAAM,OAAO,eAAe;AACzC,WAAO,KAAK,oBAAoB,UAAU;AAAA,EAC5C,SAAS,OAAO;AACd,UAAM,MAAM,IAAI;AAAA,MACd;AAAA,IAAA;AAED,QAA4B,QAAQ;AACrC,UAAM;AAAA,EACR;AACF;AAEA,eAAe,2BACb,SACA,SAC2C;AAC3C,MAAI,OAAO,QAAQ,SAAS,YAAY;AACtC,UAAM,SAAS,MAAM,QAAQ,KAAK,OAAO;AACzC,QACE,CAAC,UACD,OAAO,OAAO,cAAc,YAC5B,OAAO,UAAU,WAAW,GAC5B;AACA,YAAM,IAAI,MAAM,qDAAqD;AAAA,IACvE;AACA,WAAO;AAAA,EACT;AAEA,MAAI,CAAC,QAAQ,UAAU,OAAO,QAAQ,OAAO,SAAS,YAAY;AAChE,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AAEA,QAAM,UAAU,OAAO,KAAK,SAAS,MAAM;AAC3C,QAAM,aAAgC,MAAM,QAAQ,OAAO,KAAK,CAAC,OAAO,CAAC;AACzE,QAAM,iBAAiB,aAAa,CAAC;AACrC,MAAI,CAAC,gBAAgB;AACnB,UAAM,IAAI,MAAM,uCAAuC;AAAA,EACzD;AAEA,MAAI;AACJ,MAAI,eAAe,WAAW;AAC5B,uBAAmB,eAAe,UAAU,SAAA;AAAA,EAC9C,WAAW,OAAO,QAAQ,OAAO,kBAAkB,YAAY;AAC7D,UAAM,aAAa,MAAM,QAAQ,OAAO,cAAA;AACxC,QAAI,cAAc,OAAO,WAAW,aAAa,YAAY;AAC3D,yBAAmB,WAAW,SAAA;AAAA,IAChC;AAAA,EACF;AAEA,SAAO;AAAA,IACL,WAAW,OAAO,KAAK,eAAe,SAAS,EAAE,SAAS,QAAQ;AAAA,IAClE,eAAe;AAAA,IACf,WAAW;AAAA,EAAA;AAEf;AAEA,eAAsB,sBACpB,QACA,SACkC;AAClC,QAAM,kBAAkB,0BAA0B,QAAQ,OAAO;AACjE,QAAM,UACJ,gBAAgB,SAAS,WACpB,gBAAgB,iBAAiB,gBAAgB,YAClD,gBAAgB;AACtB,QAAM,MAAM,MAAM,OAAO,YAAuB,0BAA0B;AAAA,IACxE,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,IAC3B,MAAM;AAAA,MACJ,WAAW,QAAQ;AAAA,MACnB;AAAA,IAAA;AAAA,EACF,CACD;AAED,SAAO,OAAO;AAAA,IACZ;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAEJ;AAEA,eAAsB,sBACpB,QACA,SAC+B;AAC/B,QAAM,kBAAkB,0BAA0B,QAAQ,OAAO;AACjE,QAAM,UACJ,gBAAgB,SAAS,WACpB,gBAAgB,iBAAiB,gBAAgB,YAClD,gBAAgB;AACtB,QAAM,OAAmB;AAAA,IACvB,aAAa,QAAQ;AAAA,IACrB,WAAW,QAAQ;AAAA,IACnB;AAAA,IACA,WAAW,QAAQ;AAAA,EAAA;AAGrB,MAAI,QAAQ,eAAe;AACzB,SAAK,gBAAgB,QAAQ;AAAA,EAC/B;AACA,MAAI,QAAQ,WAAW;AACrB,SAAK,YAAY,QAAQ;AAAA,EAC3B;AACA,MAAI,OAAO,QAAQ,qBAAqB,UAAU;AAChD,SAAK,mBAAmB,QAAQ;AAAA,EAClC;AAEA,QAAM,MAAM,MAAM,OAAO,YAAuB,uBAAuB;AAAA,IACrE,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,mBAAA;AAAA,IAC3B;AAAA,EAAA,CACD;AAED,QAAM,SAAS,OAAO;AAAA,IACpB;AAAA,IACA;AAAA,IACA;AAAA,EAAA;AAGF,SAAO,gBAAgB,OAAO,GAAG;AACjC,SAAO;AACT;AAEA,eAAsB,uBACpB,QACA,SAC+B;AAC/B,QAAM,YAAY,MAAM,OAAO,sBAAsB;AAAA,IACnD,WAAW,QAAQ;AAAA,IACnB,SAAS,QAAQ;AAAA,EAAA,CAClB;AACD,QAAM,SAAS,MAAM,2BAA2B,UAAU,SAAS,OAAO;AAC1E,QAAM,eAAe,MAAM,OAAO,sBAAsB;AAAA,IACtD,aAAa,UAAU;AAAA,IACvB,WAAW,QAAQ;AAAA,IACnB,SAAS,QAAQ;AAAA,IACjB,WAAW,OAAO;AAAA,IAClB,eAAe,OAAO;AAAA,IACtB,WAAW,OAAO;AAAA,IAClB,kBAAkB,QAAQ;AAAA,EAAA,CAC3B;AACD,SAAO;AACT;AAEA,eAAsB,kCACpB,QACA,SAC+B;AAC/B,QAAM;AAAA,IACJ;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA;AAAA,IACA,mBAAmB;AAAA,IACnB;AAAA,IACA;AAAA,EAAA,IACE;AAEJ,QAAM,kBAAkB,0BAA0B,OAAO;AACzD,QAAM,cAAc,QAAQ,QAAQ,KAAK,KAAK;AAE9C,QAAM,iBAAiB,gBAAgB;AAEvC,QAAM,cAA2C;AAAA,IAC/C;AAAA,IACA,SAAS;AAAA,IACT;AAAA,EAAA;AAGF,MAAI,MAAM;AACR,gBAAY,OAAO;AAAA,EACrB,WAAW,QAAQ;AACjB,gBAAY,SAAS;AAAA,EACvB,WAAW,kBAAkB;AAC3B,QAAI,gBAAgB,SAAS,YAAY,CAAC,gBAAgB,eAAe;AACvE,YAAM,IAAI;AAAA,QACR;AAAA,MAAA;AAAA,IAEJ;AACA,gBAAY,SAAS,MAAM,4BAA4B;AAAA,MACrD;AAAA,MACA,YAAY;AAAA,MACZ,SAAS,gBAAgB;AAAA,IAAA,CAC1B;AAAA,EACH,WAAW,eAAe;AACxB,QAAI,gBAAgB,SAAS,OAAO;AAClC,YAAM,IAAI;AAAA,QACR;AAAA,MAAA;AAAA,IAEJ;AACA,UAAM,eAAe,cAAc,WAAW,IAAI,IAC7C,gBACA,KAAK,aAAa;AACvB,UAAM,UAAU,MAAM,gBAAgB,YAAY;AAClD,gBAAY,OAAO,OAAM,aAAY;AAAA,MACnC,WAAW,MAAM,QAAQ,YAAY,EAAE,SAAS;AAAA,MAChD,eAAe;AAAA,MACf,WAAW,QAAQ;AAAA,IAAA;AAAA,EAEvB,OAAO;AACL,UAAM,IAAI;AAAA,MACR;AAAA,IAAA;AAAA,EAEJ;AAEA,UAAQ;AAAA,IACN,iCAAiC,SAAS,KAAK,gBAAgB,SAAS,IAAI,WAAW;AAAA,EAAA;AAEzF,QAAM,eAAe,MAAM,OAAO,uBAAuB,WAAW;AACpE,MAAI,kBAAkB;AACpB,WAAO,iBAAiB,gBAAgB,aAAa,SAAS;AAAA,EAChE;AACA,UAAQ;AAAA,IACN,iCAAiC,WAAW,wBAAwB,aAAa,OAAO,MAAM,IAAI,aAAa,OAAO,QAAQ;AAAA,EAAA;AAEhI,SAAO;AACT;"}