@invisible-labs/sdk 0.6.0-devnet.5 → 0.8.0-devnet

package/dist/{chunk-3MDHAS4D.js → chunk-MZKJU3UA.js}

@@ -32,7 +32,7 @@ var CoordinatorMessageType = {
 };
 var protocolPromise = null;
 function loadProtocol() {
-  protocolPromise ??= import('./coordinator-PEWHNZ7I.js');
+  protocolPromise ??= import('./coordinator-E2TS6NR2.js');
   return protocolPromise;
 }
 var runtimes = /* @__PURE__ */ new WeakMap();
@@ -325,5 +325,5 @@ function rejectAll(runtime, error) {
 }
 
 export { CoordinatorMessageType, EnvelopeKind, closeProtocolRuntime, onEnvelope, requestEnvelope };
-//# sourceMappingURL=chunk-3MDHAS4D.js.map
-//# sourceMappingURL=chunk-3MDHAS4D.js.map
+//# sourceMappingURL=chunk-MZKJU3UA.js.map
+//# sourceMappingURL=chunk-MZKJU3UA.js.map

package/dist/{chunk-3MDHAS4D.js.map → chunk-MZKJU3UA.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/coordinator/protocolClient.ts"],"names":["pending"],"mappings":";;;;AAWA,IAAM,0BAAA,GAA6B,UAAA;AACnC,IAAM,sBAAA,GAAyB,CAAA;AAExB,IAAM,YAAA,GAAe;AAAA,EAC1B,OAAA,EAAS,SAAA;AAAA,EACT,QAAA,EAAU,UAAA;AAAA,EACV,IAAA,EAAM,MAAA;AAAA,EACN,KAAA,EAAO;AACT;AAIO,IAAM,sBAAA,GAAyB;AAAA,EACpC,eAAA,EAAiB,iBAAA;AAAA,EACjB,qBAAA,EAAuB,uBAAA;AAAA,EACvB,OAAA,EAAS,SAAA;AAAA,EACT,SAAA,EAAW,WAAA;AAAA,EACX,SAAA,EAAW,WAAA;AAAA,EACX,WAAA,EAAa,aAAA;AAAA,EACb,aAAA,EAAe,eAAA;AAAA,EACf,WAAA,EAAa,aAAA;AAAA,EACb,gBAAA,EAAkB,kBAAA;AAAA,EAClB,IAAA,EAAM,MAAA;AAAA,EACN,YAAA,EAAc,cAAA;AAAA,EACd,MAAA,EAAQ,QAAA;AAAA,EACR,cAAA,EAAgB,gBAAA;AAAA,EAChB,eAAA,EAAiB,iBAAA;AAAA,EACjB,gBAAA,EAAkB,kBAAA;AAAA,EAClB,gBAAA,EAAkB,kBAAA;AAAA,EAClB,SAAA,EAAW,WAAA;AAAA,EACX,KAAA,EAAO;AACT;AA4BA,IAAI,eAAA,GAAkD,IAAA;AAEtD,SAAS,YAAA,GAAwC;AAC/C,EAAA,eAAA,KAAoB,OAAO,2BAAsB,CAAA;AACjD,EAAA,OAAO,eAAA;AACT;AAmDA,IAAM,QAAA,uBAAe,OAAA,EAAuC;AAE5D,eAAsB,gBACpB,OAAA,EACA,IAAA,EACA,OAAA,EACA,OAAA,GAAkC,EAAC,EAChB;AACnB,EAAA,qBAAA,CAAsB,QAAQ,MAAM,CAAA;AACpC,EAAA,MAAM,QAAA,GAAW,MAAM,YAAA,EAAa;AACpC,EAAA,qBAAA,CAAsB,QAAQ,MAAM,CAAA;AACpC,EAAA,MAAM,KAAA,GAAQ,gBAAgB,OAAO,CAAA;AACrC,EAAA,MAAM,OAAA,GAAU,sBAAsB,KAAK,CAAA;AAC3C,EAAA,MAAM,UAAU,KAAA,CAAM,OAAA;AACtB,EAAA,IAAI,CAAC,KAAA,CAAM,QAAA,IAAY,OAAA,KAAY,IAAA,EAAM;AACvC,IAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,kDAAkD,CAAA;AAAA,EAChG;AAEA,EAAA,IAAI,OAAA,CAAQ,cAAc,0BAAA,EAA4B;AACpD,IAAA,MAAM,IAAI,YAAA,CAAa,gBAAA,EAAkB,wCAAwC,CAAA;AAAA,EACnF;AACA,EAAA,MAAM,KAAA,GAAQ,QAAQ,UAAA,GAAa,CAAA;AACnC,EAAA,OAAA,CAAQ,UAAA,GAAa,KAAA;AACrB,EAAA,MAAM,QAAA,GAAqB;AAAA,IACzB,SAAS,QAAA,CAAS,gBAAA;AAAA,IAClB,IAAA,EAAM,SAAS,YAAA,CAAa,OAAA;AAAA,IAC5B,IAAA;AAAA,IACA,OAAA,EAAS,QAAQ,MAAA,IAAU,IAAA;AAAA,IAC3B,MAAA,EAAQ,KAAA;AAAA,IACR,YAAA,EAAc,KAAK,GAAA,EAAI;AAAA,IACvB;AAAA,GACF;AACA,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,eAAA,CAAgB,QAAQ,CAAA;AAE/C,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,YAAA,GACJ,OAAA,CAAQ,MAAA,KAAW,MAAA,GACf,MAAA,GACA,MAAM,aAAA,CAAc,OAAA,EAAS,KAAA,EAAO,uBAAA,EAAyB,CAAA;AACnE,IAAA,MAAM,QACJ,OAAA,CAAQ,SAAA,KAAc,MAAA,GAClB,IAAA,GACA,WAAW,MAAM;AACf,MAAA,aAAA;AAAA,QACE,OAAA;AAAA,QACA,KAAA;AAAA,QACA,IAAI,YAAA;AAAA,UACF,oBAAA;AAAA,UACA,CAAA,kCAAA,EAAqC,IAAI,CAAA,OAAA,EAAU,OAAA,CAAQ,SAAS,CAAA,EAAA;AAAA;AACtE,OACF;AAAA,IACF,CAAA,EAAG,QAAQ,SAAS,CAAA;AAE1B,IAAA,OAAA,CAAQ,OAAA,CAAQ,IAAI,KAAA,EAAO;AAAA,MACzB,cAAA,EAAgB,QAAQ,MAAA,IAAU,IAAA;AAAA,MAClC,OAAA;AAAA,MACA,MAAA;AAAA,MACA,KAAA;AAAA,MACA,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,YAAA;AAAA,MACA,QAAQ,QAAA,CAAS,OAAA;AAAA,MACjB,6BAAA,EAA+B,QAAQ,6BAAA,KAAkC,IAAA;AAAA,MACzE,4BAAA,EAA8B,QAAQ,4BAAA,KAAiC;AAAA,KACxE,CAAA;AACD,IAAA,IAAI,iBAAiB,MAAA,EAAW;AAC9B,MAAA,OAAA,CAAQ,QAAQ,gBAAA,CAAiB,OAAA,EAAS,cAAc,EAAE,IAAA,EAAM,MAAM,CAAA;AACtE,MAAA,IAAI,OAAA,CAAQ,MAAA,EAAQ,OAAA,KAAY,IAAA,EAAM;AACpC,QAAA,YAAA,EAAa;AACb,QAAA;AAAA,MACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,QAAQ,CAAA,GAAA,EAAM,IAAI,CAAA,QAAA,EAAW,KAAK,IAAI,KAAK,CAAA;AACnD,IAAA,IAAI;AACF,MAAA,OAAA,CAAQ,KAAK,KAAK,CAAA;AAAA,IACpB,SAAS,KAAA,EAAO;AACd,MAAA,aAAA,CAAc,OAAA,EAAS,KAAA,EAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AAAA,IACzF;AAAA,EACF,CAAC,CAAA;AACH;AA0BO,SAAS,UAAA,CAAW,SAAkB,OAAA,EAA+C;AAC1F,EAAA,MAAM,OAAA,GAAU,qBAAA,CAAsB,eAAA,CAAgB,OAAO,CAAC,CAAA;AAC9D,EAAA,OAAA,CAAQ,gBAAA,CAAiB,IAAI,OAAO,CAAA;AACpC,EAAA,OAAO,MAAM,OAAA,CAAQ,gBAAA,CAAiB,MAAA,CAAO,OAAO,CAAA;AACtD;AAEO,SAAS,qBAAqB,OAAA,EAAwB;AAC3D,EAAA,MAAM,KAAA,GAAQ,gBAAgB,OAAO,CAAA;AACrC,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA;AAClC,EAAA,IAAI,CAAC,OAAA,EAAS;AACd,EAAA,MAAM,KAAA,GAAQ,IAAI,cAAA,CAAe,iBAAA,EAAmB,qCAAqC,CAAA;AACzF,EAAA,SAAA,CAAU,SAAS,KAAK,CAAA;AACxB,EAAA,OAAA,CAAQ,kBAAA,IAAqB;AAC7B,EAAA,OAAA,CAAQ,oBAAA,IAAuB;AAC/B,EAAA,QAAA,CAAS,OAAO,KAAK,CAAA;AACvB;AAEA,SAAS,sBAAsB,KAAA,EAAsC;AACnE,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA;AACnC,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,MAAM,OAAA,GAA2B;AAAA,IAC/B,UAAA,EAAY,CAAA;AAAA,IACZ,OAAA,sBAAa,GAAA,EAAI;AAAA,IACjB,WAAA,sBAAiB,GAAA,EAAI;AAAA,IACrB,gBAAA,sBAAsB,GAAA,EAAI;AAAA,IAC1B,kBAAA,EAAoB,IAAA;AAAA,IACpB,oBAAA,EAAsB;AAAA,GACxB;AAEA,EAAA,IAAI,KAAA,CAAM,YAAY,IAAA,EAAM;AAC1B,IAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,8CAA8C,CAAA;AAAA,EAC5F;AACA,EAAA,OAAA,CAAQ,kBAAA,GAAqB,MAAM,OAAA,CAAQ,SAAA,CAAU,CAAC,KAAA,KAAU,WAAA,CAAY,OAAA,EAAS,KAAK,CAAC,CAAA;AAC3F,EAAA,OAAA,CAAQ,oBAAA,GAAuB,KAAA,CAAM,SAAA,CAAU,aAAA,CAAc,CAAC,cAAA,KAAmB;AAC/E,IAAA,IAAI,cAAA,KAAmB,SAAA,IAAa,cAAA,KAAmB,QAAA,EAAU;AAC/D,MAAA,SAAA,CAAU,OAAA,EAAS,IAAI,cAAA,CAAe,iBAAA,EAAmB,8BAA8B,CAAC,CAAA;AAAA,IAC1F;AAAA,EACF,CAAC,CAAA;AAED,EAAA,QAAA,CAAS,GAAA,CAAI,OAAO,OAAO,CAAA;AAC3B,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,WAAA,CAAY,SAA0B,KAAA,EAAyB;AACtE,EAAA,KAAK,gBAAA,CAAiB,SAAS,KAAK,CAAA;AACtC;AAEA,eAAe,gBAAA,CAAiB,SAA0B,KAAA,EAAkC;AAC1F,EAAA,MAAM,QAAA,GAAW,MAAM,YAAA,EAAa;AACpC,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,MAAA,CAAO,KAAK,CAAA;AACrC,EAAA,IAAI,CAAC,QAAQ,EAAA,EAAI;AACf,IAAA,SAAA,CAAU,OAAA,EAAS,QAAQ,KAAK,CAAA;AAChC,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,WAAW,OAAA,CAAQ,KAAA;AACzB,EAAA,IAAI,QAAA,CAAS,IAAA,KAAS,QAAA,CAAS,YAAA,CAAa,QAAA,EAAU;AACpD,IAAA,MAAMA,QAAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,MAAM,CAAA;AACnD,IAAA,IAAIA,YAAW,CAAC,2BAAA,CAA4BA,QAAAA,EAAS,QAAA,CAAS,OAAO,CAAA,EAAG;AACtE,MAAA,aAAA;AAAA,QACE,OAAA;AAAA,QACA,QAAA,CAAS,MAAA;AAAA,QACT,2BAA2B,QAAA,CAAS,MAAA,EAAQA,QAAAA,CAAQ,cAAA,EAAgB,SAAS,OAAO;AAAA,OACtF;AACA,MAAA;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GACJ,SAAS,IAAA,KAAS,QAAA,CAAS,aAAa,KAAA,GAAQ,QAAA,CAAS,cAAA,CAAe,QAAQ,CAAA,GAAI,IAAA;AACtF,EAAA,IAAI,YAAA,EAAc,kBAAkB,MAAA,EAAW;AAC7C,IAAA,MAAMA,QAAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,aAAa,CAAA;AAC9D,IAAA,IAAIA,YAAW,CAAC,2BAAA,CAA4BA,UAAS,QAAA,CAAS,OAAA,EAAS,KAAK,CAAA,EAAG;AAC7E,MAAA,aAAA;AAAA,QACE,OAAA;AAAA,QACA,YAAA,CAAa,aAAA;AAAA,QACb,0BAAA;AAAA,UACE,YAAA,CAAa,aAAA;AAAA,UACbA,QAAAA,CAAQ,cAAA;AAAA,UACR,QAAA,CAAS;AAAA;AACX,OACF;AACA,MAAA;AAAA,IACF;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,OAAA,IAAW,OAAA,CAAQ,gBAAA,EAAkB,OAAA,CAAQ,QAAQ,CAAA;AAEhE,EAAA,IAAI,QAAA,CAAS,IAAA,KAAS,QAAA,CAAS,YAAA,CAAa,KAAA,EAAO;AACjD,IAAA,MAAM,OAAA,GAAU,YAAA;AAChB,IAAA,MAAM,KAAA,GAAQ,iCAAiC,OAAO,CAAA;AACtD,IAAA,IAAI,OAAA,CAAQ,aAAA,KAAkB,MAAA,IAAa,OAAA,CAAQ,kBAAkB,sBAAA,EAAwB;AAC3F,MAAA,IAAI,QAAA,CAAS,YAAY,IAAA,EAAM;AAC7B,QAAA,6BAAA,CAA8B,OAAA,EAAS,QAAA,CAAS,OAAA,EAAS,KAAK,CAAA;AAAA,MAChE;AACA,MAAA;AAAA,IACF;AACA,IAAA,MAAMA,QAAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,aAAa,CAAA;AACzD,IAAA,IAAI,CAACA,QAAAA,EAAS;AACd,IAAA,IAAI,CAAC,2BAAA,CAA4BA,QAAAA,EAAS,QAAA,CAAS,OAAA,EAAS,KAAK,CAAA,EAAG;AAClE,MAAA,aAAA;AAAA,QACE,OAAA;AAAA,QACA,OAAA,CAAQ,aAAA;AAAA,QACR,2BAA2B,OAAA,CAAQ,aAAA,EAAeA,QAAAA,CAAQ,cAAA,EAAgB,SAAS,OAAO;AAAA,OAC5F;AACA,MAAA;AAAA,IACF;AACA,IAAA,aAAA,CAAc,OAAA,EAAS,OAAA,CAAQ,aAAA,EAAe,KAAK,CAAA;AACnD,IAAA;AAAA,EACF;AAEA,EAAA,IAAI,QAAA,CAAS,IAAA,KAAS,QAAA,CAAS,YAAA,CAAa,IAAA,EAAM;AAChD,IAAA,iBAAA,CAAkB,SAAS,QAAQ,CAAA;AACnC,IAAA;AAAA,EACF;AAEA,EAAA,IAAI,QAAA,CAAS,IAAA,KAAS,QAAA,CAAS,YAAA,CAAa,QAAA,EAAU;AACtD,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,MAAM,CAAA;AACnD,EAAA,IAAI,CAAC,OAAA,EAAS;AACd,EAAA,IAAI,CAAC,2BAAA,CAA4B,OAAA,EAAS,QAAA,CAAS,OAAO,CAAA,EAAG;AAC3D,IAAA,aAAA;AAAA,MACE,OAAA;AAAA,MACA,QAAA,CAAS,MAAA;AAAA,MACT,2BAA2B,QAAA,CAAS,MAAA,EAAQ,OAAA,CAAQ,cAAA,EAAgB,SAAS,OAAO;AAAA,KACtF;AACA,IAAA;AAAA,EACF;AACA,EAAA,OAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA;AACtC,EAAA,qBAAA,CAAsB,OAAO,CAAA;AAC7B,EAAA,OAAA,CAAQ,QAAQ,QAAQ,CAAA;AAC1B;AAEA,SAAS,2BAAA,CACP,OAAA,EACA,cAAA,EACA,4BAAA,GAA+B,IAAA,EACtB;AACT,EAAA,IACE,4BAAA,IACA,OAAA,CAAQ,4BAAA,IACR,cAAA,KAAmB,IAAA,EACnB;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAA,CAAQ,cAAA,KAAmB,IAAA,IAAQ,OAAA,CAAQ,cAAA,KAAmB,cAAA;AACvE;AAEA,SAAS,0BAAA,CACP,KAAA,EACA,cAAA,EACA,cAAA,EACc;AACd,EAAA,OAAO,IAAI,YAAA;AAAA,IACT,gBAAA;AAAA,IACA,oDAAoD,KAAK,CAAA,WAAA,EAAc,kBAAkB,MAAM,CAAA,WAAA,EAAc,kBAAkB,MAAM,CAAA,CAAA;AAAA,IACrI,EAAE,aAAa,KAAA;AAAM,GACvB;AACF;AAEA,SAAS,iBAAA,CAAkB,SAA0B,QAAA,EAA0B;AAC7E,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,WAAA,CAAY,GAAA,CAAI,SAAS,IAAI,CAAA;AACrD,EAAA,MAAM,cAAc,OAAA,EAAS,SAAA;AAAA,IAC3B,CAAC,SAAA,KAAc,SAAA,CAAU,WAAW,MAAA,IAAa,SAAA,CAAU,WAAW,QAAA,CAAS;AAAA,GACjF;AACA,EAAA,MAAM,MAAA,GACJ,OAAA,IAAW,WAAA,KAAgB,MAAA,IAAa,WAAA,IAAe,CAAA,GACnD,OAAA,CAAQ,MAAA,CAAO,WAAA,EAAa,CAAC,CAAA,CAAE,CAAC,CAAA,GAChC,MAAA;AACN,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,OAAA,EAAS;AACzB,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,IAAA,OAAA,CAAQ,WAAA,CAAY,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA;AAAA,EAC1C;AACA,EAAA,IAAI,MAAA,CAAO,KAAA,EAAO,YAAA,CAAa,MAAA,CAAO,KAAK,CAAA;AAC3C,EAAA,MAAA,CAAO,QAAQ,QAAQ,CAAA;AACzB;AAEA,SAAS,aAAA,CAAc,OAAA,EAA0B,KAAA,EAAe,KAAA,EAAoB;AAClF,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,KAAK,CAAA;AACzC,EAAA,IAAI,CAAC,OAAA,EAAS;AACd,EAAA,OAAA,CAAQ,OAAA,CAAQ,OAAO,KAAK,CAAA;AAC5B,EAAA,qBAAA,CAAsB,OAAO,CAAA;AAC7B,EAAA,OAAA,CAAQ,OAAO,KAAK,CAAA;AACtB;AAEA,SAAS,sBAAsB,OAAA,EAA+B;AAC5D,EAAA,IAAI,OAAA,CAAQ,KAAA,EAAO,YAAA,CAAa,OAAA,CAAQ,KAAK,CAAA;AAC7C,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,MAAA,IAAa,OAAA,CAAQ,iBAAiB,MAAA,EAAW;AACtE,IAAA,OAAA,CAAQ,MAAA,CAAO,mBAAA,CAAoB,OAAA,EAAS,OAAA,CAAQ,YAAY,CAAA;AAAA,EAClE;AACF;AAEA,SAAS,sBAAsB,MAAA,EAAuC;AACpE,EAAA,IAAI,MAAA,EAAQ,OAAA,KAAY,IAAA,EAAM,MAAM,uBAAA,EAAwB;AAC9D;AAEA,SAAS,uBAAA,GAAwC;AAC/C,EAAA,OAAO,IAAI,YAAA,CAAa,6BAAA,EAA+B,YAAY,CAAA;AACrE;AAEA,SAAS,6BAAA,CACP,OAAA,EACA,MAAA,EACA,KAAA,EACM;AACN,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,OAAO,CAAA,IAAK,QAAQ,OAAA,EAAS;AAC9C,IAAA,IAAI,CAAC,OAAA,CAAQ,6BAAA,IAAiC,OAAA,CAAQ,WAAW,MAAA,EAAQ;AACzE,IAAA,aAAA,CAAc,OAAA,EAAS,OAAO,KAAK,CAAA;AAAA,EACrC;AACF;AAEA,SAAS,iCAAiC,OAAA,EAIzB;AACf,EAAA,MAAM,eAAA,GAAkB,0BAAA,CAA2B,OAAA,CAAQ,IAAI,CAAA;AAC/D,EAAA,OAAO,IAAI,YAAA,CAAa,8BAAA,CAA+B,eAAe,CAAA,EAAG,QAAQ,OAAA,EAAS;AAAA,IACxF,eAAA;AAAA,IACA,GAAI,QAAQ,aAAA,KAAkB,MAAA,GAAY,EAAE,WAAA,EAAa,OAAA,CAAQ,aAAA,EAAc,GAAI;AAAC,GACrF,CAAA;AACH;AAEA,SAAS,+BAA+B,IAAA,EAAkD;AACxF,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,qBAAA;AAAA,IACL,KAAK,kBAAA;AAAA,IACL,KAAK,yBAAA;AACH,MAAA,OAAO,gBAAA;AAAA,IACT,KAAK,cAAA;AAAA,IACL,KAAK,uBAAA;AACH,MAAA,OAAO,oBAAA;AAAA,IACT,KAAK,qBAAA;AAAA,IACL,KAAK,sBAAA;AAAA,IACL,KAAK,2BAAA;AAAA,IACL,KAAK,iBAAA;AAAA,IACL,KAAK,qBAAA;AACH,MAAA,OAAO,gBAAA;AAAA;AAEb;AAEA,SAAS,2BAA2B,IAAA,EAAwC;AAC1E,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,qBAAA;AAAA,IACL,KAAK,qBAAA;AAAA,IACL,KAAK,kBAAA;AAAA,IACL,KAAK,sBAAA;AAAA,IACL,KAAK,2BAAA;AAAA,IACL,KAAK,yBAAA;AAAA,IACL,KAAK,iBAAA;AAAA,IACL,KAAK,cAAA;AAAA,IACL,KAAK,qBAAA;AAAA,IACL,KAAK,uBAAA;AACH,MAAA,OAAO,IAAA;AAAA,IACT;AACE,MAAA,OAAO,cAAA;AAAA;AAEb;AAcA,SAAS,SAAA,CAAU,SAA0B,KAAA,EAAoB;AAC/D,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,OAAO,KAAK,OAAA,CAAQ,OAAA,CAAQ,SAAQ,EAAG;AACxD,IAAA,OAAA,CAAQ,OAAA,CAAQ,OAAO,KAAK,CAAA;AAC5B,IAAA,qBAAA,CAAsB,OAAO,CAAA;AAC7B,IAAA,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,EACtB;AACA,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,OAAO,KAAK,OAAA,CAAQ,WAAA,CAAY,SAAQ,EAAG;AAC3D,IAAA,OAAA,CAAQ,WAAA,CAAY,OAAO,IAAI,CAAA;AAC/B,IAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,MAAA,IAAI,MAAA,CAAO,KAAA,EAAO,YAAA,CAAa,MAAA,CAAO,KAAK,CAAA;AAC3C,MAAA,MAAA,CAAO,OAAO,KAAK,CAAA;AAAA,IACrB;AAAA,EACF;AACF","file":"chunk-3MDHAS4D.js","sourcesContent":["import {\n  CommandError,\n  TransportError,\n  type CommandErrorCode,\n  type CoordinatorWireErrorCode,\n} from \"../core/errors.js\";\nimport type { Session } from \"../core/session.js\";\nimport { getSessionState, type SessionState } from \"../session/state.js\";\nimport type { Unsubscribe } from \"../transport/types.js\";\n\nconst COORDINATOR_ENVELOPE_VERSION = 2;\nconst MAX_COORDINATOR_REQUEST_ID = 0xffff_ffff;\nconst OUT_OF_BAND_REQUEST_ID = 0;\n\nexport const EnvelopeKind = {\n  REQUEST: \"request\",\n  RESPONSE: \"response\",\n  PUSH: \"push\",\n  ERROR: \"error\",\n} as const;\n\nexport type EnvelopeKind = (typeof EnvelopeKind)[keyof typeof EnvelopeKind];\n\nexport const CoordinatorMessageType = {\n  ContractRequest: \"ContractRequest\",\n  LpCreateAuthorization: \"LpCreateAuthorization\",\n  DkgInit: \"DkgInit\",\n  DkgRound1: \"DkgRound1\",\n  DkgRound2: \"DkgRound2\",\n  DkgComplete: \"DkgComplete\",\n  DelegateShare: \"DelegateShare\",\n  DelegateAck: \"DelegateAck\",\n  DepositConfirmed: \"DepositConfirmed\",\n  Sync: \"Sync\",\n  SyncRequired: \"SyncRequired\",\n  Refill: \"Refill\",\n  PayoutExecuted: \"PayoutExecuted\",\n  WithdrawRequest: \"WithdrawRequest\",\n  WithdrawAccepted: \"WithdrawAccepted\",\n  WithdrawExecuted: \"WithdrawExecuted\",\n  LpCommand: \"LpCommand\",\n  Error: \"Error\",\n} as const;\n\nexport type CoordinatorMessageType =\n  (typeof CoordinatorMessageType)[keyof typeof CoordinatorMessageType];\n\nexport type Envelope = {\n  readonly version: typeof COORDINATOR_ENVELOPE_VERSION;\n  readonly kind: EnvelopeKind;\n  readonly type: CoordinatorMessageType;\n  readonly swap_id: string | null;\n  readonly req_id: number;\n  readonly timestamp_ms: number;\n  readonly payload: unknown;\n};\n\ntype ProtocolModule = {\n  readonly ENVELOPE_VERSION: typeof COORDINATOR_ENVELOPE_VERSION;\n  readonly EnvelopeKind: typeof EnvelopeKind;\n  readonly CoordinatorMessageType: typeof CoordinatorMessageType;\n  readonly encodeValidated: (envelope: Envelope) => Uint8Array;\n  readonly decode: (raw: Uint8Array) => { ok: true; value: Envelope } | { ok: false; error: Error };\n  readonly asErrorPayload: (envelope: Envelope) => {\n    readonly code: string;\n    readonly failed_req_id?: number;\n    readonly message: string;\n  };\n};\n\nlet protocolPromise: Promise<ProtocolModule> | null = null;\n\nfunction loadProtocol(): Promise<ProtocolModule> {\n  protocolPromise ??= import(\"protocol/coordinator\") as Promise<ProtocolModule>;\n  return protocolPromise;\n}\n\nexport type ProtocolLogDirection = \"in\" | \"out\" | \"info\";\nexport type ProtocolLogHandler = (message: string, direction: ProtocolLogDirection) => void;\nexport type ProtocolEnvelopeHandler = (envelope: Envelope) => void;\n\nexport interface RequestEnvelopeOptions {\n  readonly swapId?: string | null;\n  readonly timeoutMs?: number;\n  readonly signal?: AbortSignal;\n  readonly onLog?: ProtocolLogHandler;\n  /** Reject this request when the coordinator reports a swap-scoped error without a request id. */\n  readonly rejectMatchingOutOfBandErrors?: boolean;\n  /** Contract allocation responses must carry the server-assigned swap_id. */\n  readonly requireNonNullResponseSwapId?: boolean;\n}\n\nexport interface AwaitPushOptions {\n  /** Exact business routing key. Omit only for legacy wildcard waiters. */\n  readonly swapId?: string | null;\n  readonly timeoutMs?: number | null;\n}\n\ntype PendingRequest = {\n  readonly expectedSwapId: string | null;\n  readonly resolve: (envelope: Envelope) => void;\n  readonly reject: (error: Error) => void;\n  readonly timer: ReturnType<typeof setTimeout> | null;\n  readonly signal?: AbortSignal;\n  readonly abortHandler?: () => void;\n  readonly swapId: string | null;\n  readonly rejectMatchingOutOfBandErrors: boolean;\n  readonly requireNonNullResponseSwapId: boolean;\n};\n\ntype PushWaiter = {\n  readonly swapId?: string | null;\n  readonly resolve: (envelope: Envelope) => void;\n  readonly reject: (error: Error) => void;\n  readonly timer: ReturnType<typeof setTimeout> | null;\n};\n\ntype ProtocolRuntime = {\n  reqCounter: number;\n  readonly pending: Map<number, PendingRequest>;\n  readonly pushWaiters: Map<CoordinatorMessageType, PushWaiter[]>;\n  readonly envelopeHandlers: Set<ProtocolEnvelopeHandler>;\n  unsubscribeChannel: Unsubscribe | null;\n  unsubscribeTransport: Unsubscribe | null;\n};\n\nconst runtimes = new WeakMap<SessionState, ProtocolRuntime>();\n\nexport async function requestEnvelope(\n  session: Session,\n  type: CoordinatorMessageType,\n  payload: unknown,\n  options: RequestEnvelopeOptions = {},\n): Promise<Envelope> {\n  throwIfRequestAborted(options.signal);\n  const protocol = await loadProtocol();\n  throwIfRequestAborted(options.signal);\n  const state = getSessionState(session);\n  const runtime = ensureProtocolRuntime(state);\n  const channel = state.channel;\n  if (!state.attested || channel === null) {\n    throw new TransportError(\"CONNECTION_LOST\", \"coordinator request requires an attested channel\");\n  }\n\n  if (runtime.reqCounter >= MAX_COORDINATOR_REQUEST_ID) {\n    throw new CommandError(\"REJECTED_STATE\", \"coordinator request id space exhausted\");\n  }\n  const reqId = runtime.reqCounter + 1;\n  runtime.reqCounter = reqId;\n  const envelope: Envelope = {\n    version: protocol.ENVELOPE_VERSION,\n    kind: protocol.EnvelopeKind.REQUEST,\n    type,\n    swap_id: options.swapId ?? null,\n    req_id: reqId,\n    timestamp_ms: Date.now(),\n    payload,\n  };\n  const frame = protocol.encodeValidated(envelope);\n\n  return new Promise((resolve, reject) => {\n    const abortHandler =\n      options.signal === undefined\n        ? undefined\n        : () => rejectPending(runtime, reqId, createRequestAbortError());\n    const timer =\n      options.timeoutMs === undefined\n        ? null\n        : setTimeout(() => {\n            rejectPending(\n              runtime,\n              reqId,\n              new CommandError(\n                \"REJECTED_STALE_JOB\",\n                `coordinator request timed out for ${type} after ${options.timeoutMs}ms`,\n              ),\n            );\n          }, options.timeoutMs);\n\n    runtime.pending.set(reqId, {\n      expectedSwapId: options.swapId ?? null,\n      resolve,\n      reject,\n      timer,\n      signal: options.signal,\n      abortHandler,\n      swapId: envelope.swap_id,\n      rejectMatchingOutOfBandErrors: options.rejectMatchingOutOfBandErrors === true,\n      requireNonNullResponseSwapId: options.requireNonNullResponseSwapId === true,\n    });\n    if (abortHandler !== undefined) {\n      options.signal?.addEventListener(\"abort\", abortHandler, { once: true });\n      if (options.signal?.aborted === true) {\n        abortHandler();\n        return;\n      }\n    }\n    options.onLog?.(`-> ${type} req_id=${reqId}`, \"out\");\n    try {\n      channel.send(frame);\n    } catch (error) {\n      rejectPending(runtime, reqId, error instanceof Error ? error : new Error(String(error)));\n    }\n  });\n}\n\nexport function awaitPush(\n  session: Session,\n  type: CoordinatorMessageType,\n  options: AwaitPushOptions = {},\n): Promise<Envelope> {\n  const state = getSessionState(session);\n  const runtime = ensureProtocolRuntime(state);\n  const timeoutMs = options.timeoutMs === undefined ? 30_000 : options.timeoutMs;\n\n  return new Promise((resolve, reject) => {\n    const timer =\n      timeoutMs === null\n        ? null\n        : setTimeout(() => {\n            removePushWaiter(runtime, type, waiter);\n            reject(new CommandError(\"REJECTED_STALE_JOB\", `timed out waiting for ${type} push`));\n          }, timeoutMs);\n    const waiter: PushWaiter = { swapId: options.swapId, resolve, reject, timer };\n    const waiters = runtime.pushWaiters.get(type) ?? [];\n    waiters.push(waiter);\n    runtime.pushWaiters.set(type, waiters);\n  });\n}\n\nexport function onEnvelope(session: Session, handler: ProtocolEnvelopeHandler): Unsubscribe {\n  const runtime = ensureProtocolRuntime(getSessionState(session));\n  runtime.envelopeHandlers.add(handler);\n  return () => runtime.envelopeHandlers.delete(handler);\n}\n\nexport function closeProtocolRuntime(session: Session): void {\n  const state = getSessionState(session);\n  const runtime = runtimes.get(state);\n  if (!runtime) return;\n  const error = new TransportError(\"CONNECTION_LOST\", \"coordinator protocol runtime closed\");\n  rejectAll(runtime, error);\n  runtime.unsubscribeChannel?.();\n  runtime.unsubscribeTransport?.();\n  runtimes.delete(state);\n}\n\nfunction ensureProtocolRuntime(state: SessionState): ProtocolRuntime {\n  const existing = runtimes.get(state);\n  if (existing) return existing;\n\n  const runtime: ProtocolRuntime = {\n    reqCounter: 0,\n    pending: new Map(),\n    pushWaiters: new Map(),\n    envelopeHandlers: new Set(),\n    unsubscribeChannel: null,\n    unsubscribeTransport: null,\n  };\n\n  if (state.channel === null) {\n    throw new TransportError(\"CONNECTION_LOST\", \"coordinator protocol requires a live channel\");\n  }\n  runtime.unsubscribeChannel = state.channel.onMessage((frame) => handleFrame(runtime, frame));\n  runtime.unsubscribeTransport = state.transport.onStateChange((transportState) => {\n    if (transportState === \"closing\" || transportState === \"closed\") {\n      rejectAll(runtime, new TransportError(\"CONNECTION_LOST\", \"coordinator transport closed\"));\n    }\n  });\n\n  runtimes.set(state, runtime);\n  return runtime;\n}\n\nfunction handleFrame(runtime: ProtocolRuntime, frame: Uint8Array): void {\n  void handleFrameAsync(runtime, frame);\n}\n\nasync function handleFrameAsync(runtime: ProtocolRuntime, frame: Uint8Array): Promise<void> {\n  const protocol = await loadProtocol();\n  const decoded = protocol.decode(frame);\n  if (!decoded.ok) {\n    rejectAll(runtime, decoded.error);\n    return;\n  }\n\n  const envelope = decoded.value;\n  if (envelope.kind === protocol.EnvelopeKind.RESPONSE) {\n    const pending = runtime.pending.get(envelope.req_id);\n    if (pending && !pendingRequestMatchesSwapId(pending, envelope.swap_id)) {\n      rejectPending(\n        runtime,\n        envelope.req_id,\n        requestSwapIdMismatchError(envelope.req_id, pending.expectedSwapId, envelope.swap_id),\n      );\n      return;\n    }\n  }\n\n  const errorPayload =\n    envelope.kind === protocol.EnvelopeKind.ERROR ? protocol.asErrorPayload(envelope) : null;\n  if (errorPayload?.failed_req_id !== undefined) {\n    const pending = runtime.pending.get(errorPayload.failed_req_id);\n    if (pending && !pendingRequestMatchesSwapId(pending, envelope.swap_id, false)) {\n      rejectPending(\n        runtime,\n        errorPayload.failed_req_id,\n        requestSwapIdMismatchError(\n          errorPayload.failed_req_id,\n          pending.expectedSwapId,\n          envelope.swap_id,\n        ),\n      );\n      return;\n    }\n  }\n\n  for (const handler of runtime.envelopeHandlers) handler(envelope);\n\n  if (envelope.kind === protocol.EnvelopeKind.ERROR) {\n    const payload = errorPayload!;\n    const error = commandErrorFromCoordinatorError(payload);\n    if (payload.failed_req_id === undefined || payload.failed_req_id === OUT_OF_BAND_REQUEST_ID) {\n      if (envelope.swap_id !== null) {\n        rejectMatchingOutOfBandErrors(runtime, envelope.swap_id, error);\n      }\n      return;\n    }\n    const pending = runtime.pending.get(payload.failed_req_id);\n    if (!pending) return;\n    if (!pendingRequestMatchesSwapId(pending, envelope.swap_id, false)) {\n      rejectPending(\n        runtime,\n        payload.failed_req_id,\n        requestSwapIdMismatchError(payload.failed_req_id, pending.expectedSwapId, envelope.swap_id),\n      );\n      return;\n    }\n    rejectPending(runtime, payload.failed_req_id, error);\n    return;\n  }\n\n  if (envelope.kind === protocol.EnvelopeKind.PUSH) {\n    resolvePushWaiter(runtime, envelope);\n    return;\n  }\n\n  if (envelope.kind !== protocol.EnvelopeKind.RESPONSE) return;\n  const pending = runtime.pending.get(envelope.req_id);\n  if (!pending) return;\n  if (!pendingRequestMatchesSwapId(pending, envelope.swap_id)) {\n    rejectPending(\n      runtime,\n      envelope.req_id,\n      requestSwapIdMismatchError(envelope.req_id, pending.expectedSwapId, envelope.swap_id),\n    );\n    return;\n  }\n  runtime.pending.delete(envelope.req_id);\n  cleanupPendingRequest(pending);\n  pending.resolve(envelope);\n}\n\nfunction pendingRequestMatchesSwapId(\n  pending: PendingRequest,\n  responseSwapId: string | null,\n  enforceNonNullResponseSwapId = true,\n): boolean {\n  if (\n    enforceNonNullResponseSwapId &&\n    pending.requireNonNullResponseSwapId &&\n    responseSwapId === null\n  ) {\n    return false;\n  }\n  return pending.expectedSwapId === null || pending.expectedSwapId === responseSwapId;\n}\n\nfunction requestSwapIdMismatchError(\n  reqId: number,\n  expectedSwapId: string | null,\n  receivedSwapId: string | null,\n): CommandError {\n  return new CommandError(\n    \"REJECTED_STATE\",\n    `coordinator response swap_id mismatch for req_id=${reqId}: expected ${expectedSwapId ?? \"null\"}, received ${receivedSwapId ?? \"null\"}`,\n    { failedReqId: reqId },\n  );\n}\n\nfunction resolvePushWaiter(runtime: ProtocolRuntime, envelope: Envelope): void {\n  const waiters = runtime.pushWaiters.get(envelope.type);\n  const waiterIndex = waiters?.findIndex(\n    (candidate) => candidate.swapId === undefined || candidate.swapId === envelope.swap_id,\n  );\n  const waiter =\n    waiters && waiterIndex !== undefined && waiterIndex >= 0\n      ? waiters.splice(waiterIndex, 1)[0]\n      : undefined;\n  if (!waiter || !waiters) return;\n  if (waiters.length === 0) {\n    runtime.pushWaiters.delete(envelope.type);\n  }\n  if (waiter.timer) clearTimeout(waiter.timer);\n  waiter.resolve(envelope);\n}\n\nfunction rejectPending(runtime: ProtocolRuntime, reqId: number, error: Error): void {\n  const pending = runtime.pending.get(reqId);\n  if (!pending) return;\n  runtime.pending.delete(reqId);\n  cleanupPendingRequest(pending);\n  pending.reject(error);\n}\n\nfunction cleanupPendingRequest(pending: PendingRequest): void {\n  if (pending.timer) clearTimeout(pending.timer);\n  if (pending.signal !== undefined && pending.abortHandler !== undefined) {\n    pending.signal.removeEventListener(\"abort\", pending.abortHandler);\n  }\n}\n\nfunction throwIfRequestAborted(signal: AbortSignal | undefined): void {\n  if (signal?.aborted === true) throw createRequestAbortError();\n}\n\nfunction createRequestAbortError(): DOMException {\n  return new DOMException(\"coordinator request aborted\", \"AbortError\");\n}\n\nfunction rejectMatchingOutOfBandErrors(\n  runtime: ProtocolRuntime,\n  swapId: string,\n  error: Error,\n): void {\n  for (const [reqId, pending] of runtime.pending) {\n    if (!pending.rejectMatchingOutOfBandErrors || pending.swapId !== swapId) continue;\n    rejectPending(runtime, reqId, error);\n  }\n}\n\nfunction commandErrorFromCoordinatorError(payload: {\n  readonly code: string;\n  readonly failed_req_id?: number;\n  readonly message: string;\n}): CommandError {\n  const coordinatorCode = toCoordinatorWireErrorCode(payload.code);\n  return new CommandError(commandCodeFromCoordinatorCode(coordinatorCode), payload.message, {\n    coordinatorCode,\n    ...(payload.failed_req_id !== undefined ? { failedReqId: payload.failed_req_id } : {}),\n  });\n}\n\nfunction commandCodeFromCoordinatorCode(code: CoordinatorWireErrorCode): CommandErrorCode {\n  switch (code) {\n    case \"ERR_UNEXPECTED_TYPE\":\n    case \"ERR_UNKNOWN_SWAP\":\n    case \"ERR_SWAP_NOT_REFUNDABLE\":\n      return \"REJECTED_STATE\";\n    case \"ERR_INTERNAL\":\n    case \"ERR_SETTLEMENT_FAILED\":\n      return \"REJECTED_STALE_JOB\";\n    case \"ERR_INVALID_PAYLOAD\":\n    case \"ERR_POLICY_VIOLATION\":\n    case \"ERR_INVALID_RECOVERY_CODE\":\n    case \"ERR_DKG_FAILURE\":\n    case \"ERR_INVALID_DEPOSIT\":\n      return \"REJECTED_GUARD\";\n  }\n}\n\nfunction toCoordinatorWireErrorCode(code: string): CoordinatorWireErrorCode {\n  switch (code) {\n    case \"ERR_INVALID_PAYLOAD\":\n    case \"ERR_UNEXPECTED_TYPE\":\n    case \"ERR_UNKNOWN_SWAP\":\n    case \"ERR_POLICY_VIOLATION\":\n    case \"ERR_INVALID_RECOVERY_CODE\":\n    case \"ERR_SWAP_NOT_REFUNDABLE\":\n    case \"ERR_DKG_FAILURE\":\n    case \"ERR_INTERNAL\":\n    case \"ERR_INVALID_DEPOSIT\":\n    case \"ERR_SETTLEMENT_FAILED\":\n      return code;\n    default:\n      return \"ERR_INTERNAL\";\n  }\n}\n\nfunction removePushWaiter(\n  runtime: ProtocolRuntime,\n  type: CoordinatorMessageType,\n  waiter: PushWaiter,\n): void {\n  const waiters = runtime.pushWaiters.get(type);\n  if (!waiters) return;\n  const index = waiters.indexOf(waiter);\n  if (index >= 0) waiters.splice(index, 1);\n  if (waiters.length === 0) runtime.pushWaiters.delete(type);\n}\n\nfunction rejectAll(runtime: ProtocolRuntime, error: Error): void {\n  for (const [reqId, pending] of runtime.pending.entries()) {\n    runtime.pending.delete(reqId);\n    cleanupPendingRequest(pending);\n    pending.reject(error);\n  }\n  for (const [type, waiters] of runtime.pushWaiters.entries()) {\n    runtime.pushWaiters.delete(type);\n    for (const waiter of waiters) {\n      if (waiter.timer) clearTimeout(waiter.timer);\n      waiter.reject(error);\n    }\n  }\n}\n"]}
+{"version":3,"sources":["../src/coordinator/protocolClient.ts"],"names":["pending"],"mappings":";;;;AAWA,IAAM,0BAAA,GAA6B,UAAA;AACnC,IAAM,sBAAA,GAAyB,CAAA;AAExB,IAAM,YAAA,GAAe;AAAA,EAC1B,OAAA,EAAS,SAAA;AAAA,EACT,QAAA,EAAU,UAAA;AAAA,EACV,IAAA,EAAM,MAAA;AAAA,EACN,KAAA,EAAO;AACT;AAIO,IAAM,sBAAA,GAAyB;AAAA,EACpC,eAAA,EAAiB,iBAAA;AAAA,EACjB,qBAAA,EAAuB,uBAAA;AAAA,EACvB,OAAA,EAAS,SAAA;AAAA,EACT,SAAA,EAAW,WAAA;AAAA,EACX,SAAA,EAAW,WAAA;AAAA,EACX,WAAA,EAAa,aAAA;AAAA,EACb,aAAA,EAAe,eAAA;AAAA,EACf,WAAA,EAAa,aAAA;AAAA,EACb,gBAAA,EAAkB,kBAAA;AAAA,EAClB,IAAA,EAAM,MAAA;AAAA,EACN,YAAA,EAAc,cAAA;AAAA,EACd,MAAA,EAAQ,QAAA;AAAA,EACR,cAAA,EAAgB,gBAAA;AAAA,EAChB,eAAA,EAAiB,iBAAA;AAAA,EACjB,gBAAA,EAAkB,kBAAA;AAAA,EAClB,gBAAA,EAAkB,kBAAA;AAAA,EAClB,SAAA,EAAW,WAAA;AAAA,EACX,KAAA,EAAO;AACT;AA4BA,IAAI,eAAA,GAAkD,IAAA;AAEtD,SAAS,YAAA,GAAwC;AAC/C,EAAA,eAAA,KAAoB,OAAO,2BAAsB,CAAA;AACjD,EAAA,OAAO,eAAA;AACT;AAmDA,IAAM,QAAA,uBAAe,OAAA,EAAuC;AAE5D,eAAsB,gBACpB,OAAA,EACA,IAAA,EACA,OAAA,EACA,OAAA,GAAkC,EAAC,EAChB;AACnB,EAAA,qBAAA,CAAsB,QAAQ,MAAM,CAAA;AACpC,EAAA,MAAM,QAAA,GAAW,MAAM,YAAA,EAAa;AACpC,EAAA,qBAAA,CAAsB,QAAQ,MAAM,CAAA;AACpC,EAAA,MAAM,KAAA,GAAQ,gBAAgB,OAAO,CAAA;AACrC,EAAA,MAAM,OAAA,GAAU,sBAAsB,KAAK,CAAA;AAC3C,EAAA,MAAM,UAAU,KAAA,CAAM,OAAA;AACtB,EAAA,IAAI,CAAC,KAAA,CAAM,QAAA,IAAY,OAAA,KAAY,IAAA,EAAM;AACvC,IAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,kDAAkD,CAAA;AAAA,EAChG;AAEA,EAAA,IAAI,OAAA,CAAQ,cAAc,0BAAA,EAA4B;AACpD,IAAA,MAAM,IAAI,YAAA,CAAa,gBAAA,EAAkB,wCAAwC,CAAA;AAAA,EACnF;AACA,EAAA,MAAM,KAAA,GAAQ,QAAQ,UAAA,GAAa,CAAA;AACnC,EAAA,OAAA,CAAQ,UAAA,GAAa,KAAA;AACrB,EAAA,MAAM,QAAA,GAAqB;AAAA,IACzB,SAAS,QAAA,CAAS,gBAAA;AAAA,IAClB,IAAA,EAAM,SAAS,YAAA,CAAa,OAAA;AAAA,IAC5B,IAAA;AAAA,IACA,OAAA,EAAS,QAAQ,MAAA,IAAU,IAAA;AAAA,IAC3B,MAAA,EAAQ,KAAA;AAAA,IACR,YAAA,EAAc,KAAK,GAAA,EAAI;AAAA,IACvB;AAAA,GACF;AACA,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,eAAA,CAAgB,QAAQ,CAAA;AAE/C,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,YAAA,GACJ,OAAA,CAAQ,MAAA,KAAW,MAAA,GACf,MAAA,GACA,MAAM,aAAA,CAAc,OAAA,EAAS,KAAA,EAAO,uBAAA,EAAyB,CAAA;AACnE,IAAA,MAAM,QACJ,OAAA,CAAQ,SAAA,KAAc,MAAA,GAClB,IAAA,GACA,WAAW,MAAM;AACf,MAAA,aAAA;AAAA,QACE,OAAA;AAAA,QACA,KAAA;AAAA,QACA,IAAI,YAAA;AAAA,UACF,oBAAA;AAAA,UACA,CAAA,kCAAA,EAAqC,IAAI,CAAA,OAAA,EAAU,OAAA,CAAQ,SAAS,CAAA,EAAA;AAAA;AACtE,OACF;AAAA,IACF,CAAA,EAAG,QAAQ,SAAS,CAAA;AAE1B,IAAA,OAAA,CAAQ,OAAA,CAAQ,IAAI,KAAA,EAAO;AAAA,MACzB,cAAA,EAAgB,QAAQ,MAAA,IAAU,IAAA;AAAA,MAClC,OAAA;AAAA,MACA,MAAA;AAAA,MACA,KAAA;AAAA,MACA,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,YAAA;AAAA,MACA,QAAQ,QAAA,CAAS,OAAA;AAAA,MACjB,6BAAA,EAA+B,QAAQ,6BAAA,KAAkC,IAAA;AAAA,MACzE,4BAAA,EAA8B,QAAQ,4BAAA,KAAiC;AAAA,KACxE,CAAA;AACD,IAAA,IAAI,iBAAiB,MAAA,EAAW;AAC9B,MAAA,OAAA,CAAQ,QAAQ,gBAAA,CAAiB,OAAA,EAAS,cAAc,EAAE,IAAA,EAAM,MAAM,CAAA;AACtE,MAAA,IAAI,OAAA,CAAQ,MAAA,EAAQ,OAAA,KAAY,IAAA,EAAM;AACpC,QAAA,YAAA,EAAa;AACb,QAAA;AAAA,MACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,QAAQ,CAAA,GAAA,EAAM,IAAI,CAAA,QAAA,EAAW,KAAK,IAAI,KAAK,CAAA;AACnD,IAAA,IAAI;AACF,MAAA,OAAA,CAAQ,KAAK,KAAK,CAAA;AAAA,IACpB,SAAS,KAAA,EAAO;AACd,MAAA,aAAA,CAAc,OAAA,EAAS,KAAA,EAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AAAA,IACzF;AAAA,EACF,CAAC,CAAA;AACH;AA0BO,SAAS,UAAA,CAAW,SAAkB,OAAA,EAA+C;AAC1F,EAAA,MAAM,OAAA,GAAU,qBAAA,CAAsB,eAAA,CAAgB,OAAO,CAAC,CAAA;AAC9D,EAAA,OAAA,CAAQ,gBAAA,CAAiB,IAAI,OAAO,CAAA;AACpC,EAAA,OAAO,MAAM,OAAA,CAAQ,gBAAA,CAAiB,MAAA,CAAO,OAAO,CAAA;AACtD;AAEO,SAAS,qBAAqB,OAAA,EAAwB;AAC3D,EAAA,MAAM,KAAA,GAAQ,gBAAgB,OAAO,CAAA;AACrC,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA;AAClC,EAAA,IAAI,CAAC,OAAA,EAAS;AACd,EAAA,MAAM,KAAA,GAAQ,IAAI,cAAA,CAAe,iBAAA,EAAmB,qCAAqC,CAAA;AACzF,EAAA,SAAA,CAAU,SAAS,KAAK,CAAA;AACxB,EAAA,OAAA,CAAQ,kBAAA,IAAqB;AAC7B,EAAA,OAAA,CAAQ,oBAAA,IAAuB;AAC/B,EAAA,QAAA,CAAS,OAAO,KAAK,CAAA;AACvB;AAEA,SAAS,sBAAsB,KAAA,EAAsC;AACnE,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA;AACnC,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,MAAM,OAAA,GAA2B;AAAA,IAC/B,UAAA,EAAY,CAAA;AAAA,IACZ,OAAA,sBAAa,GAAA,EAAI;AAAA,IACjB,WAAA,sBAAiB,GAAA,EAAI;AAAA,IACrB,gBAAA,sBAAsB,GAAA,EAAI;AAAA,IAC1B,kBAAA,EAAoB,IAAA;AAAA,IACpB,oBAAA,EAAsB;AAAA,GACxB;AAEA,EAAA,IAAI,KAAA,CAAM,YAAY,IAAA,EAAM;AAC1B,IAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,8CAA8C,CAAA;AAAA,EAC5F;AACA,EAAA,OAAA,CAAQ,kBAAA,GAAqB,MAAM,OAAA,CAAQ,SAAA,CAAU,CAAC,KAAA,KAAU,WAAA,CAAY,OAAA,EAAS,KAAK,CAAC,CAAA;AAC3F,EAAA,OAAA,CAAQ,oBAAA,GAAuB,KAAA,CAAM,SAAA,CAAU,aAAA,CAAc,CAAC,cAAA,KAAmB;AAC/E,IAAA,IAAI,cAAA,KAAmB,SAAA,IAAa,cAAA,KAAmB,QAAA,EAAU;AAC/D,MAAA,SAAA,CAAU,OAAA,EAAS,IAAI,cAAA,CAAe,iBAAA,EAAmB,8BAA8B,CAAC,CAAA;AAAA,IAC1F;AAAA,EACF,CAAC,CAAA;AAED,EAAA,QAAA,CAAS,GAAA,CAAI,OAAO,OAAO,CAAA;AAC3B,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,WAAA,CAAY,SAA0B,KAAA,EAAyB;AACtE,EAAA,KAAK,gBAAA,CAAiB,SAAS,KAAK,CAAA;AACtC;AAEA,eAAe,gBAAA,CAAiB,SAA0B,KAAA,EAAkC;AAC1F,EAAA,MAAM,QAAA,GAAW,MAAM,YAAA,EAAa;AACpC,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,MAAA,CAAO,KAAK,CAAA;AACrC,EAAA,IAAI,CAAC,QAAQ,EAAA,EAAI;AACf,IAAA,SAAA,CAAU,OAAA,EAAS,QAAQ,KAAK,CAAA;AAChC,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,WAAW,OAAA,CAAQ,KAAA;AACzB,EAAA,IAAI,QAAA,CAAS,IAAA,KAAS,QAAA,CAAS,YAAA,CAAa,QAAA,EAAU;AACpD,IAAA,MAAMA,QAAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,MAAM,CAAA;AACnD,IAAA,IAAIA,YAAW,CAAC,2BAAA,CAA4BA,QAAAA,EAAS,QAAA,CAAS,OAAO,CAAA,EAAG;AACtE,MAAA,aAAA;AAAA,QACE,OAAA;AAAA,QACA,QAAA,CAAS,MAAA;AAAA,QACT,2BAA2B,QAAA,CAAS,MAAA,EAAQA,QAAAA,CAAQ,cAAA,EAAgB,SAAS,OAAO;AAAA,OACtF;AACA,MAAA;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GACJ,SAAS,IAAA,KAAS,QAAA,CAAS,aAAa,KAAA,GAAQ,QAAA,CAAS,cAAA,CAAe,QAAQ,CAAA,GAAI,IAAA;AACtF,EAAA,IAAI,YAAA,EAAc,kBAAkB,MAAA,EAAW;AAC7C,IAAA,MAAMA,QAAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,aAAa,CAAA;AAC9D,IAAA,IAAIA,YAAW,CAAC,2BAAA,CAA4BA,UAAS,QAAA,CAAS,OAAA,EAAS,KAAK,CAAA,EAAG;AAC7E,MAAA,aAAA;AAAA,QACE,OAAA;AAAA,QACA,YAAA,CAAa,aAAA;AAAA,QACb,0BAAA;AAAA,UACE,YAAA,CAAa,aAAA;AAAA,UACbA,QAAAA,CAAQ,cAAA;AAAA,UACR,QAAA,CAAS;AAAA;AACX,OACF;AACA,MAAA;AAAA,IACF;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,OAAA,IAAW,OAAA,CAAQ,gBAAA,EAAkB,OAAA,CAAQ,QAAQ,CAAA;AAEhE,EAAA,IAAI,QAAA,CAAS,IAAA,KAAS,QAAA,CAAS,YAAA,CAAa,KAAA,EAAO;AACjD,IAAA,MAAM,OAAA,GAAU,YAAA;AAChB,IAAA,MAAM,KAAA,GAAQ,iCAAiC,OAAO,CAAA;AACtD,IAAA,IAAI,OAAA,CAAQ,aAAA,KAAkB,MAAA,IAAa,OAAA,CAAQ,kBAAkB,sBAAA,EAAwB;AAC3F,MAAA,IAAI,QAAA,CAAS,YAAY,IAAA,EAAM;AAC7B,QAAA,6BAAA,CAA8B,OAAA,EAAS,QAAA,CAAS,OAAA,EAAS,KAAK,CAAA;AAAA,MAChE;AACA,MAAA;AAAA,IACF;AACA,IAAA,MAAMA,QAAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,aAAa,CAAA;AACzD,IAAA,IAAI,CAACA,QAAAA,EAAS;AACd,IAAA,IAAI,CAAC,2BAAA,CAA4BA,QAAAA,EAAS,QAAA,CAAS,OAAA,EAAS,KAAK,CAAA,EAAG;AAClE,MAAA,aAAA;AAAA,QACE,OAAA;AAAA,QACA,OAAA,CAAQ,aAAA;AAAA,QACR,2BAA2B,OAAA,CAAQ,aAAA,EAAeA,QAAAA,CAAQ,cAAA,EAAgB,SAAS,OAAO;AAAA,OAC5F;AACA,MAAA;AAAA,IACF;AACA,IAAA,aAAA,CAAc,OAAA,EAAS,OAAA,CAAQ,aAAA,EAAe,KAAK,CAAA;AACnD,IAAA;AAAA,EACF;AAEA,EAAA,IAAI,QAAA,CAAS,IAAA,KAAS,QAAA,CAAS,YAAA,CAAa,IAAA,EAAM;AAChD,IAAA,iBAAA,CAAkB,SAAS,QAAQ,CAAA;AACnC,IAAA;AAAA,EACF;AAEA,EAAA,IAAI,QAAA,CAAS,IAAA,KAAS,QAAA,CAAS,YAAA,CAAa,QAAA,EAAU;AACtD,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,MAAM,CAAA;AACnD,EAAA,IAAI,CAAC,OAAA,EAAS;AACd,EAAA,IAAI,CAAC,2BAAA,CAA4B,OAAA,EAAS,QAAA,CAAS,OAAO,CAAA,EAAG;AAC3D,IAAA,aAAA;AAAA,MACE,OAAA;AAAA,MACA,QAAA,CAAS,MAAA;AAAA,MACT,2BAA2B,QAAA,CAAS,MAAA,EAAQ,OAAA,CAAQ,cAAA,EAAgB,SAAS,OAAO;AAAA,KACtF;AACA,IAAA;AAAA,EACF;AACA,EAAA,OAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA;AACtC,EAAA,qBAAA,CAAsB,OAAO,CAAA;AAC7B,EAAA,OAAA,CAAQ,QAAQ,QAAQ,CAAA;AAC1B;AAEA,SAAS,2BAAA,CACP,OAAA,EACA,cAAA,EACA,4BAAA,GAA+B,IAAA,EACtB;AACT,EAAA,IACE,4BAAA,IACA,OAAA,CAAQ,4BAAA,IACR,cAAA,KAAmB,IAAA,EACnB;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAA,CAAQ,cAAA,KAAmB,IAAA,IAAQ,OAAA,CAAQ,cAAA,KAAmB,cAAA;AACvE;AAEA,SAAS,0BAAA,CACP,KAAA,EACA,cAAA,EACA,cAAA,EACc;AACd,EAAA,OAAO,IAAI,YAAA;AAAA,IACT,gBAAA;AAAA,IACA,oDAAoD,KAAK,CAAA,WAAA,EAAc,kBAAkB,MAAM,CAAA,WAAA,EAAc,kBAAkB,MAAM,CAAA,CAAA;AAAA,IACrI,EAAE,aAAa,KAAA;AAAM,GACvB;AACF;AAEA,SAAS,iBAAA,CAAkB,SAA0B,QAAA,EAA0B;AAC7E,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,WAAA,CAAY,GAAA,CAAI,SAAS,IAAI,CAAA;AACrD,EAAA,MAAM,cAAc,OAAA,EAAS,SAAA;AAAA,IAC3B,CAAC,SAAA,KAAc,SAAA,CAAU,WAAW,MAAA,IAAa,SAAA,CAAU,WAAW,QAAA,CAAS;AAAA,GACjF;AACA,EAAA,MAAM,MAAA,GACJ,OAAA,IAAW,WAAA,KAAgB,MAAA,IAAa,WAAA,IAAe,CAAA,GACnD,OAAA,CAAQ,MAAA,CAAO,WAAA,EAAa,CAAC,CAAA,CAAE,CAAC,CAAA,GAChC,MAAA;AACN,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,OAAA,EAAS;AACzB,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,IAAA,OAAA,CAAQ,WAAA,CAAY,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA;AAAA,EAC1C;AACA,EAAA,IAAI,MAAA,CAAO,KAAA,EAAO,YAAA,CAAa,MAAA,CAAO,KAAK,CAAA;AAC3C,EAAA,MAAA,CAAO,QAAQ,QAAQ,CAAA;AACzB;AAEA,SAAS,aAAA,CAAc,OAAA,EAA0B,KAAA,EAAe,KAAA,EAAoB;AAClF,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,KAAK,CAAA;AACzC,EAAA,IAAI,CAAC,OAAA,EAAS;AACd,EAAA,OAAA,CAAQ,OAAA,CAAQ,OAAO,KAAK,CAAA;AAC5B,EAAA,qBAAA,CAAsB,OAAO,CAAA;AAC7B,EAAA,OAAA,CAAQ,OAAO,KAAK,CAAA;AACtB;AAEA,SAAS,sBAAsB,OAAA,EAA+B;AAC5D,EAAA,IAAI,OAAA,CAAQ,KAAA,EAAO,YAAA,CAAa,OAAA,CAAQ,KAAK,CAAA;AAC7C,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,MAAA,IAAa,OAAA,CAAQ,iBAAiB,MAAA,EAAW;AACtE,IAAA,OAAA,CAAQ,MAAA,CAAO,mBAAA,CAAoB,OAAA,EAAS,OAAA,CAAQ,YAAY,CAAA;AAAA,EAClE;AACF;AAEA,SAAS,sBAAsB,MAAA,EAAuC;AACpE,EAAA,IAAI,MAAA,EAAQ,OAAA,KAAY,IAAA,EAAM,MAAM,uBAAA,EAAwB;AAC9D;AAEA,SAAS,uBAAA,GAAwC;AAC/C,EAAA,OAAO,IAAI,YAAA,CAAa,6BAAA,EAA+B,YAAY,CAAA;AACrE;AAEA,SAAS,6BAAA,CACP,OAAA,EACA,MAAA,EACA,KAAA,EACM;AACN,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,OAAO,CAAA,IAAK,QAAQ,OAAA,EAAS;AAC9C,IAAA,IAAI,CAAC,OAAA,CAAQ,6BAAA,IAAiC,OAAA,CAAQ,WAAW,MAAA,EAAQ;AACzE,IAAA,aAAA,CAAc,OAAA,EAAS,OAAO,KAAK,CAAA;AAAA,EACrC;AACF;AAEA,SAAS,iCAAiC,OAAA,EAIzB;AACf,EAAA,MAAM,eAAA,GAAkB,0BAAA,CAA2B,OAAA,CAAQ,IAAI,CAAA;AAC/D,EAAA,OAAO,IAAI,YAAA,CAAa,8BAAA,CAA+B,eAAe,CAAA,EAAG,QAAQ,OAAA,EAAS;AAAA,IACxF,eAAA;AAAA,IACA,GAAI,QAAQ,aAAA,KAAkB,MAAA,GAAY,EAAE,WAAA,EAAa,OAAA,CAAQ,aAAA,EAAc,GAAI;AAAC,GACrF,CAAA;AACH;AAEA,SAAS,+BAA+B,IAAA,EAAkD;AACxF,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,qBAAA;AAAA,IACL,KAAK,kBAAA;AAAA,IACL,KAAK,yBAAA;AACH,MAAA,OAAO,gBAAA;AAAA,IACT,KAAK,cAAA;AAAA,IACL,KAAK,uBAAA;AACH,MAAA,OAAO,oBAAA;AAAA,IACT,KAAK,qBAAA;AAAA,IACL,KAAK,sBAAA;AAAA,IACL,KAAK,2BAAA;AAAA,IACL,KAAK,iBAAA;AAAA,IACL,KAAK,qBAAA;AACH,MAAA,OAAO,gBAAA;AAAA;AAEb;AAEA,SAAS,2BAA2B,IAAA,EAAwC;AAC1E,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,qBAAA;AAAA,IACL,KAAK,qBAAA;AAAA,IACL,KAAK,kBAAA;AAAA,IACL,KAAK,sBAAA;AAAA,IACL,KAAK,2BAAA;AAAA,IACL,KAAK,yBAAA;AAAA,IACL,KAAK,iBAAA;AAAA,IACL,KAAK,cAAA;AAAA,IACL,KAAK,qBAAA;AAAA,IACL,KAAK,uBAAA;AACH,MAAA,OAAO,IAAA;AAAA,IACT;AACE,MAAA,OAAO,cAAA;AAAA;AAEb;AAcA,SAAS,SAAA,CAAU,SAA0B,KAAA,EAAoB;AAC/D,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,OAAO,KAAK,OAAA,CAAQ,OAAA,CAAQ,SAAQ,EAAG;AACxD,IAAA,OAAA,CAAQ,OAAA,CAAQ,OAAO,KAAK,CAAA;AAC5B,IAAA,qBAAA,CAAsB,OAAO,CAAA;AAC7B,IAAA,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,EACtB;AACA,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,OAAO,KAAK,OAAA,CAAQ,WAAA,CAAY,SAAQ,EAAG;AAC3D,IAAA,OAAA,CAAQ,WAAA,CAAY,OAAO,IAAI,CAAA;AAC/B,IAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,MAAA,IAAI,MAAA,CAAO,KAAA,EAAO,YAAA,CAAa,MAAA,CAAO,KAAK,CAAA;AAC3C,MAAA,MAAA,CAAO,OAAO,KAAK,CAAA;AAAA,IACrB;AAAA,EACF;AACF","file":"chunk-MZKJU3UA.js","sourcesContent":["import {\n  CommandError,\n  TransportError,\n  type CommandErrorCode,\n  type CoordinatorWireErrorCode,\n} from \"../core/errors.js\";\nimport type { Session } from \"../core/session.js\";\nimport { getSessionState, type SessionState } from \"../session/state.js\";\nimport type { Unsubscribe } from \"../transport/types.js\";\n\nconst COORDINATOR_ENVELOPE_VERSION = 2;\nconst MAX_COORDINATOR_REQUEST_ID = 0xffff_ffff;\nconst OUT_OF_BAND_REQUEST_ID = 0;\n\nexport const EnvelopeKind = {\n  REQUEST: \"request\",\n  RESPONSE: \"response\",\n  PUSH: \"push\",\n  ERROR: \"error\",\n} as const;\n\nexport type EnvelopeKind = (typeof EnvelopeKind)[keyof typeof EnvelopeKind];\n\nexport const CoordinatorMessageType = {\n  ContractRequest: \"ContractRequest\",\n  LpCreateAuthorization: \"LpCreateAuthorization\",\n  DkgInit: \"DkgInit\",\n  DkgRound1: \"DkgRound1\",\n  DkgRound2: \"DkgRound2\",\n  DkgComplete: \"DkgComplete\",\n  DelegateShare: \"DelegateShare\",\n  DelegateAck: \"DelegateAck\",\n  DepositConfirmed: \"DepositConfirmed\",\n  Sync: \"Sync\",\n  SyncRequired: \"SyncRequired\",\n  Refill: \"Refill\",\n  PayoutExecuted: \"PayoutExecuted\",\n  WithdrawRequest: \"WithdrawRequest\",\n  WithdrawAccepted: \"WithdrawAccepted\",\n  WithdrawExecuted: \"WithdrawExecuted\",\n  LpCommand: \"LpCommand\",\n  Error: \"Error\",\n} as const;\n\nexport type CoordinatorMessageType =\n  (typeof CoordinatorMessageType)[keyof typeof CoordinatorMessageType];\n\nexport type Envelope = {\n  readonly version: typeof COORDINATOR_ENVELOPE_VERSION;\n  readonly kind: EnvelopeKind;\n  readonly type: CoordinatorMessageType;\n  readonly swap_id: string | null;\n  readonly req_id: number;\n  readonly timestamp_ms: number;\n  readonly payload: unknown;\n};\n\ntype ProtocolModule = {\n  readonly ENVELOPE_VERSION: typeof COORDINATOR_ENVELOPE_VERSION;\n  readonly EnvelopeKind: typeof EnvelopeKind;\n  readonly CoordinatorMessageType: typeof CoordinatorMessageType;\n  readonly encodeValidated: (envelope: Envelope) => Uint8Array;\n  readonly decode: (raw: Uint8Array) => { ok: true; value: Envelope } | { ok: false; error: Error };\n  readonly asErrorPayload: (envelope: Envelope) => {\n    readonly code: string;\n    readonly failed_req_id?: number;\n    readonly message: string;\n  };\n};\n\nlet protocolPromise: Promise<ProtocolModule> | null = null;\n\nfunction loadProtocol(): Promise<ProtocolModule> {\n  protocolPromise ??= import(\"protocol/coordinator\") as Promise<ProtocolModule>;\n  return protocolPromise;\n}\n\nexport type ProtocolLogDirection = \"in\" | \"out\" | \"info\";\nexport type ProtocolLogHandler = (message: string, direction: ProtocolLogDirection) => void;\nexport type ProtocolEnvelopeHandler = (envelope: Envelope) => void;\n\nexport interface RequestEnvelopeOptions {\n  readonly swapId?: string | null;\n  readonly timeoutMs?: number;\n  readonly signal?: AbortSignal;\n  readonly onLog?: ProtocolLogHandler;\n  /** Reject this request when the coordinator reports a swap-scoped error without a request id. */\n  readonly rejectMatchingOutOfBandErrors?: boolean;\n  /** Contract allocation responses must carry the server-assigned swap_id. */\n  readonly requireNonNullResponseSwapId?: boolean;\n}\n\nexport interface AwaitPushOptions {\n  /** Exact business routing key. Omit only for legacy wildcard waiters. */\n  readonly swapId?: string | null;\n  readonly timeoutMs?: number | null;\n}\n\ntype PendingRequest = {\n  readonly expectedSwapId: string | null;\n  readonly resolve: (envelope: Envelope) => void;\n  readonly reject: (error: Error) => void;\n  readonly timer: ReturnType<typeof setTimeout> | null;\n  readonly signal?: AbortSignal;\n  readonly abortHandler?: () => void;\n  readonly swapId: string | null;\n  readonly rejectMatchingOutOfBandErrors: boolean;\n  readonly requireNonNullResponseSwapId: boolean;\n};\n\ntype PushWaiter = {\n  readonly swapId?: string | null;\n  readonly resolve: (envelope: Envelope) => void;\n  readonly reject: (error: Error) => void;\n  readonly timer: ReturnType<typeof setTimeout> | null;\n};\n\ntype ProtocolRuntime = {\n  reqCounter: number;\n  readonly pending: Map<number, PendingRequest>;\n  readonly pushWaiters: Map<CoordinatorMessageType, PushWaiter[]>;\n  readonly envelopeHandlers: Set<ProtocolEnvelopeHandler>;\n  unsubscribeChannel: Unsubscribe | null;\n  unsubscribeTransport: Unsubscribe | null;\n};\n\nconst runtimes = new WeakMap<SessionState, ProtocolRuntime>();\n\nexport async function requestEnvelope(\n  session: Session,\n  type: CoordinatorMessageType,\n  payload: unknown,\n  options: RequestEnvelopeOptions = {},\n): Promise<Envelope> {\n  throwIfRequestAborted(options.signal);\n  const protocol = await loadProtocol();\n  throwIfRequestAborted(options.signal);\n  const state = getSessionState(session);\n  const runtime = ensureProtocolRuntime(state);\n  const channel = state.channel;\n  if (!state.attested || channel === null) {\n    throw new TransportError(\"CONNECTION_LOST\", \"coordinator request requires an attested channel\");\n  }\n\n  if (runtime.reqCounter >= MAX_COORDINATOR_REQUEST_ID) {\n    throw new CommandError(\"REJECTED_STATE\", \"coordinator request id space exhausted\");\n  }\n  const reqId = runtime.reqCounter + 1;\n  runtime.reqCounter = reqId;\n  const envelope: Envelope = {\n    version: protocol.ENVELOPE_VERSION,\n    kind: protocol.EnvelopeKind.REQUEST,\n    type,\n    swap_id: options.swapId ?? null,\n    req_id: reqId,\n    timestamp_ms: Date.now(),\n    payload,\n  };\n  const frame = protocol.encodeValidated(envelope);\n\n  return new Promise((resolve, reject) => {\n    const abortHandler =\n      options.signal === undefined\n        ? undefined\n        : () => rejectPending(runtime, reqId, createRequestAbortError());\n    const timer =\n      options.timeoutMs === undefined\n        ? null\n        : setTimeout(() => {\n            rejectPending(\n              runtime,\n              reqId,\n              new CommandError(\n                \"REJECTED_STALE_JOB\",\n                `coordinator request timed out for ${type} after ${options.timeoutMs}ms`,\n              ),\n            );\n          }, options.timeoutMs);\n\n    runtime.pending.set(reqId, {\n      expectedSwapId: options.swapId ?? null,\n      resolve,\n      reject,\n      timer,\n      signal: options.signal,\n      abortHandler,\n      swapId: envelope.swap_id,\n      rejectMatchingOutOfBandErrors: options.rejectMatchingOutOfBandErrors === true,\n      requireNonNullResponseSwapId: options.requireNonNullResponseSwapId === true,\n    });\n    if (abortHandler !== undefined) {\n      options.signal?.addEventListener(\"abort\", abortHandler, { once: true });\n      if (options.signal?.aborted === true) {\n        abortHandler();\n        return;\n      }\n    }\n    options.onLog?.(`-> ${type} req_id=${reqId}`, \"out\");\n    try {\n      channel.send(frame);\n    } catch (error) {\n      rejectPending(runtime, reqId, error instanceof Error ? error : new Error(String(error)));\n    }\n  });\n}\n\nexport function awaitPush(\n  session: Session,\n  type: CoordinatorMessageType,\n  options: AwaitPushOptions = {},\n): Promise<Envelope> {\n  const state = getSessionState(session);\n  const runtime = ensureProtocolRuntime(state);\n  const timeoutMs = options.timeoutMs === undefined ? 30_000 : options.timeoutMs;\n\n  return new Promise((resolve, reject) => {\n    const timer =\n      timeoutMs === null\n        ? null\n        : setTimeout(() => {\n            removePushWaiter(runtime, type, waiter);\n            reject(new CommandError(\"REJECTED_STALE_JOB\", `timed out waiting for ${type} push`));\n          }, timeoutMs);\n    const waiter: PushWaiter = { swapId: options.swapId, resolve, reject, timer };\n    const waiters = runtime.pushWaiters.get(type) ?? [];\n    waiters.push(waiter);\n    runtime.pushWaiters.set(type, waiters);\n  });\n}\n\nexport function onEnvelope(session: Session, handler: ProtocolEnvelopeHandler): Unsubscribe {\n  const runtime = ensureProtocolRuntime(getSessionState(session));\n  runtime.envelopeHandlers.add(handler);\n  return () => runtime.envelopeHandlers.delete(handler);\n}\n\nexport function closeProtocolRuntime(session: Session): void {\n  const state = getSessionState(session);\n  const runtime = runtimes.get(state);\n  if (!runtime) return;\n  const error = new TransportError(\"CONNECTION_LOST\", \"coordinator protocol runtime closed\");\n  rejectAll(runtime, error);\n  runtime.unsubscribeChannel?.();\n  runtime.unsubscribeTransport?.();\n  runtimes.delete(state);\n}\n\nfunction ensureProtocolRuntime(state: SessionState): ProtocolRuntime {\n  const existing = runtimes.get(state);\n  if (existing) return existing;\n\n  const runtime: ProtocolRuntime = {\n    reqCounter: 0,\n    pending: new Map(),\n    pushWaiters: new Map(),\n    envelopeHandlers: new Set(),\n    unsubscribeChannel: null,\n    unsubscribeTransport: null,\n  };\n\n  if (state.channel === null) {\n    throw new TransportError(\"CONNECTION_LOST\", \"coordinator protocol requires a live channel\");\n  }\n  runtime.unsubscribeChannel = state.channel.onMessage((frame) => handleFrame(runtime, frame));\n  runtime.unsubscribeTransport = state.transport.onStateChange((transportState) => {\n    if (transportState === \"closing\" || transportState === \"closed\") {\n      rejectAll(runtime, new TransportError(\"CONNECTION_LOST\", \"coordinator transport closed\"));\n    }\n  });\n\n  runtimes.set(state, runtime);\n  return runtime;\n}\n\nfunction handleFrame(runtime: ProtocolRuntime, frame: Uint8Array): void {\n  void handleFrameAsync(runtime, frame);\n}\n\nasync function handleFrameAsync(runtime: ProtocolRuntime, frame: Uint8Array): Promise<void> {\n  const protocol = await loadProtocol();\n  const decoded = protocol.decode(frame);\n  if (!decoded.ok) {\n    rejectAll(runtime, decoded.error);\n    return;\n  }\n\n  const envelope = decoded.value;\n  if (envelope.kind === protocol.EnvelopeKind.RESPONSE) {\n    const pending = runtime.pending.get(envelope.req_id);\n    if (pending && !pendingRequestMatchesSwapId(pending, envelope.swap_id)) {\n      rejectPending(\n        runtime,\n        envelope.req_id,\n        requestSwapIdMismatchError(envelope.req_id, pending.expectedSwapId, envelope.swap_id),\n      );\n      return;\n    }\n  }\n\n  const errorPayload =\n    envelope.kind === protocol.EnvelopeKind.ERROR ? protocol.asErrorPayload(envelope) : null;\n  if (errorPayload?.failed_req_id !== undefined) {\n    const pending = runtime.pending.get(errorPayload.failed_req_id);\n    if (pending && !pendingRequestMatchesSwapId(pending, envelope.swap_id, false)) {\n      rejectPending(\n        runtime,\n        errorPayload.failed_req_id,\n        requestSwapIdMismatchError(\n          errorPayload.failed_req_id,\n          pending.expectedSwapId,\n          envelope.swap_id,\n        ),\n      );\n      return;\n    }\n  }\n\n  for (const handler of runtime.envelopeHandlers) handler(envelope);\n\n  if (envelope.kind === protocol.EnvelopeKind.ERROR) {\n    const payload = errorPayload!;\n    const error = commandErrorFromCoordinatorError(payload);\n    if (payload.failed_req_id === undefined || payload.failed_req_id === OUT_OF_BAND_REQUEST_ID) {\n      if (envelope.swap_id !== null) {\n        rejectMatchingOutOfBandErrors(runtime, envelope.swap_id, error);\n      }\n      return;\n    }\n    const pending = runtime.pending.get(payload.failed_req_id);\n    if (!pending) return;\n    if (!pendingRequestMatchesSwapId(pending, envelope.swap_id, false)) {\n      rejectPending(\n        runtime,\n        payload.failed_req_id,\n        requestSwapIdMismatchError(payload.failed_req_id, pending.expectedSwapId, envelope.swap_id),\n      );\n      return;\n    }\n    rejectPending(runtime, payload.failed_req_id, error);\n    return;\n  }\n\n  if (envelope.kind === protocol.EnvelopeKind.PUSH) {\n    resolvePushWaiter(runtime, envelope);\n    return;\n  }\n\n  if (envelope.kind !== protocol.EnvelopeKind.RESPONSE) return;\n  const pending = runtime.pending.get(envelope.req_id);\n  if (!pending) return;\n  if (!pendingRequestMatchesSwapId(pending, envelope.swap_id)) {\n    rejectPending(\n      runtime,\n      envelope.req_id,\n      requestSwapIdMismatchError(envelope.req_id, pending.expectedSwapId, envelope.swap_id),\n    );\n    return;\n  }\n  runtime.pending.delete(envelope.req_id);\n  cleanupPendingRequest(pending);\n  pending.resolve(envelope);\n}\n\nfunction pendingRequestMatchesSwapId(\n  pending: PendingRequest,\n  responseSwapId: string | null,\n  enforceNonNullResponseSwapId = true,\n): boolean {\n  if (\n    enforceNonNullResponseSwapId &&\n    pending.requireNonNullResponseSwapId &&\n    responseSwapId === null\n  ) {\n    return false;\n  }\n  return pending.expectedSwapId === null || pending.expectedSwapId === responseSwapId;\n}\n\nfunction requestSwapIdMismatchError(\n  reqId: number,\n  expectedSwapId: string | null,\n  receivedSwapId: string | null,\n): CommandError {\n  return new CommandError(\n    \"REJECTED_STATE\",\n    `coordinator response swap_id mismatch for req_id=${reqId}: expected ${expectedSwapId ?? \"null\"}, received ${receivedSwapId ?? \"null\"}`,\n    { failedReqId: reqId },\n  );\n}\n\nfunction resolvePushWaiter(runtime: ProtocolRuntime, envelope: Envelope): void {\n  const waiters = runtime.pushWaiters.get(envelope.type);\n  const waiterIndex = waiters?.findIndex(\n    (candidate) => candidate.swapId === undefined || candidate.swapId === envelope.swap_id,\n  );\n  const waiter =\n    waiters && waiterIndex !== undefined && waiterIndex >= 0\n      ? waiters.splice(waiterIndex, 1)[0]\n      : undefined;\n  if (!waiter || !waiters) return;\n  if (waiters.length === 0) {\n    runtime.pushWaiters.delete(envelope.type);\n  }\n  if (waiter.timer) clearTimeout(waiter.timer);\n  waiter.resolve(envelope);\n}\n\nfunction rejectPending(runtime: ProtocolRuntime, reqId: number, error: Error): void {\n  const pending = runtime.pending.get(reqId);\n  if (!pending) return;\n  runtime.pending.delete(reqId);\n  cleanupPendingRequest(pending);\n  pending.reject(error);\n}\n\nfunction cleanupPendingRequest(pending: PendingRequest): void {\n  if (pending.timer) clearTimeout(pending.timer);\n  if (pending.signal !== undefined && pending.abortHandler !== undefined) {\n    pending.signal.removeEventListener(\"abort\", pending.abortHandler);\n  }\n}\n\nfunction throwIfRequestAborted(signal: AbortSignal | undefined): void {\n  if (signal?.aborted === true) throw createRequestAbortError();\n}\n\nfunction createRequestAbortError(): DOMException {\n  return new DOMException(\"coordinator request aborted\", \"AbortError\");\n}\n\nfunction rejectMatchingOutOfBandErrors(\n  runtime: ProtocolRuntime,\n  swapId: string,\n  error: Error,\n): void {\n  for (const [reqId, pending] of runtime.pending) {\n    if (!pending.rejectMatchingOutOfBandErrors || pending.swapId !== swapId) continue;\n    rejectPending(runtime, reqId, error);\n  }\n}\n\nfunction commandErrorFromCoordinatorError(payload: {\n  readonly code: string;\n  readonly failed_req_id?: number;\n  readonly message: string;\n}): CommandError {\n  const coordinatorCode = toCoordinatorWireErrorCode(payload.code);\n  return new CommandError(commandCodeFromCoordinatorCode(coordinatorCode), payload.message, {\n    coordinatorCode,\n    ...(payload.failed_req_id !== undefined ? { failedReqId: payload.failed_req_id } : {}),\n  });\n}\n\nfunction commandCodeFromCoordinatorCode(code: CoordinatorWireErrorCode): CommandErrorCode {\n  switch (code) {\n    case \"ERR_UNEXPECTED_TYPE\":\n    case \"ERR_UNKNOWN_SWAP\":\n    case \"ERR_SWAP_NOT_REFUNDABLE\":\n      return \"REJECTED_STATE\";\n    case \"ERR_INTERNAL\":\n    case \"ERR_SETTLEMENT_FAILED\":\n      return \"REJECTED_STALE_JOB\";\n    case \"ERR_INVALID_PAYLOAD\":\n    case \"ERR_POLICY_VIOLATION\":\n    case \"ERR_INVALID_RECOVERY_CODE\":\n    case \"ERR_DKG_FAILURE\":\n    case \"ERR_INVALID_DEPOSIT\":\n      return \"REJECTED_GUARD\";\n  }\n}\n\nfunction toCoordinatorWireErrorCode(code: string): CoordinatorWireErrorCode {\n  switch (code) {\n    case \"ERR_INVALID_PAYLOAD\":\n    case \"ERR_UNEXPECTED_TYPE\":\n    case \"ERR_UNKNOWN_SWAP\":\n    case \"ERR_POLICY_VIOLATION\":\n    case \"ERR_INVALID_RECOVERY_CODE\":\n    case \"ERR_SWAP_NOT_REFUNDABLE\":\n    case \"ERR_DKG_FAILURE\":\n    case \"ERR_INTERNAL\":\n    case \"ERR_INVALID_DEPOSIT\":\n    case \"ERR_SETTLEMENT_FAILED\":\n      return code;\n    default:\n      return \"ERR_INTERNAL\";\n  }\n}\n\nfunction removePushWaiter(\n  runtime: ProtocolRuntime,\n  type: CoordinatorMessageType,\n  waiter: PushWaiter,\n): void {\n  const waiters = runtime.pushWaiters.get(type);\n  if (!waiters) return;\n  const index = waiters.indexOf(waiter);\n  if (index >= 0) waiters.splice(index, 1);\n  if (waiters.length === 0) runtime.pushWaiters.delete(type);\n}\n\nfunction rejectAll(runtime: ProtocolRuntime, error: Error): void {\n  for (const [reqId, pending] of runtime.pending.entries()) {\n    runtime.pending.delete(reqId);\n    cleanupPendingRequest(pending);\n    pending.reject(error);\n  }\n  for (const [type, waiters] of runtime.pushWaiters.entries()) {\n    runtime.pushWaiters.delete(type);\n    for (const waiter of waiters) {\n      if (waiter.timer) clearTimeout(waiter.timer);\n      waiter.reject(error);\n    }\n  }\n}\n"]}

package/dist/{coordinator-PEWHNZ7I.js → coordinator-E2TS6NR2.js}

@@ -1,4 +1,4 @@
-export { COORDINATOR_BINARY_FIELD_NAMES, COORDINATOR_ENVELOPE_SCHEMA, COORDINATOR_SCHEMA_PAYLOAD_CATEGORIES, CoordinatorError, CoordinatorMessageType, DEFAULT_PAYOUT_WINDOW_ID, DIRECTION_BY_TYPE, ENVELOPE_VERSION, EnvelopeKind, ErrorCode, INITIAL_STATE, MAX_FRAME_SIZE, MessageDirection, PAYOUT_WINDOW_OPTIONS, TERMINAL_STATES, TRANSITIONS, VALID_SWAP_STATES, asDelegateAckPayload, asDelegateSharePayload, asDelegateShareResponsePayload, asDepositConfirmedPayload, asDkgCompletePayload, asDkgInitPayload, asDkgInitResponsePayload, asDkgRound1Payload, asDkgRound1ResponsePayload, asDkgRound2Payload, asDkgRound2ResponsePayload, asErrorPayload, asLpCommandResponsePayload, asPayoutExecutedPayload, asSwapRequestPayload, asSwapRequestResponsePayload, asSyncRequiredPayload, asSyncUserRequestPayload, asSyncUserResponsePayload, asWithdrawAcceptedPayload, asWithdrawExecutedPayload, asWithdrawRequestPayload, decode, encode, encodeLpCommandForSigning, encodeValidated, isAllowedInState, isAllowedKindForType, isPayoutWindowId, isValidEnvelopeKind, isValidErrorCode, isValidMessageType, isValidSwapState, lpSignedCommandEnvelope, nextState, payloadCategory, payoutWindowLabelForId, payoutWindowOptionById, safeEncode, scheduledPayoutWindowOptions, scheduledPayoutWindowSeconds } from './chunk-3TGQ4CZ3.js';
+export { COORDINATOR_BINARY_FIELD_NAMES, COORDINATOR_ENVELOPE_SCHEMA, COORDINATOR_SCHEMA_PAYLOAD_CATEGORIES, CoordinatorError, CoordinatorMessageType, DEFAULT_PAYOUT_WINDOW_ID, DIRECTION_BY_TYPE, ENVELOPE_VERSION, EnvelopeKind, ErrorCode, INITIAL_STATE, MAX_FRAME_SIZE, MessageDirection, PAYOUT_WINDOW_OPTIONS, TERMINAL_STATES, TRANSITIONS, VALID_SWAP_STATES, asDelegateAckPayload, asDelegateSharePayload, asDelegateShareResponsePayload, asDepositConfirmedPayload, asDkgCompletePayload, asDkgInitPayload, asDkgInitResponsePayload, asDkgRound1Payload, asDkgRound1ResponsePayload, asDkgRound2Payload, asDkgRound2ResponsePayload, asErrorPayload, asLpCommandResponsePayload, asPayoutExecutedPayload, asSwapRequestPayload, asSwapRequestResponsePayload, asSyncRequiredPayload, asSyncUserRequestPayload, asSyncUserResponsePayload, asWithdrawAcceptedPayload, asWithdrawExecutedPayload, asWithdrawRequestPayload, decode, encode, encodeLpCommandForSigning, encodeValidated, isAllowedInState, isAllowedKindForType, isPayoutWindowId, isValidEnvelopeKind, isValidErrorCode, isValidMessageType, isValidSwapState, lpSignedCommandEnvelope, nextState, payloadCategory, payoutWindowLabelForId, payoutWindowOptionById, safeEncode, scheduledPayoutWindowOptions, scheduledPayoutWindowSeconds } from './chunk-MPNVF727.js';
 import './chunk-VR6T6OJS.js';
-//# sourceMappingURL=coordinator-PEWHNZ7I.js.map
-//# sourceMappingURL=coordinator-PEWHNZ7I.js.map
+//# sourceMappingURL=coordinator-E2TS6NR2.js.map
+//# sourceMappingURL=coordinator-E2TS6NR2.js.map

package/dist/{coordinator-PEWHNZ7I.js.map → coordinator-E2TS6NR2.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"coordinator-PEWHNZ7I.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"coordinator-E2TS6NR2.js"}

package/dist/dkgWorker.js

@@ -1,4 +1,4 @@
-import { ensureFrostWasm, loadFrost } from './chunk-JNNVPZEU.js';
+import { ensureFrostWasm, loadFrost } from './chunk-K67FTCQU.js';
 import './chunk-VR6T6OJS.js';
 
 // src/lp/dkgWorker.ts

package/dist/events.js

@@ -1,4 +1,4 @@
-import { onEnvelope, EnvelopeKind, CoordinatorMessageType } from './chunk-3MDHAS4D.js';
+import { onEnvelope, EnvelopeKind, CoordinatorMessageType } from './chunk-MZKJU3UA.js';
 import './chunk-HJFMDMPY.js';
 import { NotImplementedError } from './chunk-QRN46R3F.js';
 import './chunk-VR6T6OJS.js';

package/dist/frostRuntime-6FTPKUCP.js

@@ -0,0 +1,4 @@
+export { ensureFrostWasm, loadFrost } from './chunk-K67FTCQU.js';
+import './chunk-VR6T6OJS.js';
+//# sourceMappingURL=frostRuntime-6FTPKUCP.js.map
+//# sourceMappingURL=frostRuntime-6FTPKUCP.js.map

package/dist/{frostRuntime-JESDHN6O.js.map → frostRuntime-6FTPKUCP.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"frostRuntime-JESDHN6O.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"frostRuntime-6FTPKUCP.js"}

package/dist/index.js

@@ -56,7 +56,7 @@ var AZURE_PROD_MAA_TRUST = {
   issuer: "https://sharedweu.weu.attest.azure.net",
   jwksUrl: "https://sharedweu.weu.attest.azure.net/certs",
   policyHash: "9NY0VnTQ-IiBriBplVUpFbczcDaEBUwsiFYAzHu_gco"};
-var configuredRuntimeProfile = "prod-devnet-simplified-locked" ;
+var configuredRuntimeProfile = "prod-hardened" ;
 var APPROVED_PRODUCTION_RUNTIME_PROFILE = configuredRuntimeProfile ;
 
 // src/presets/production.ts
@@ -105,10 +105,10 @@ function createAzureProductionEndpoint({
 }
 
 // src/presets/productionBinaryHash.ts
-var APPROVED_PRODUCTION_COORDINATOR_BINARY_HASH = "e08f16d1c303f402e8210302e85ff8ce497e4152d7511143849c7771d56a1663".toLowerCase() ;
+var APPROVED_PRODUCTION_COORDINATOR_BINARY_HASH = "2eb6efac5b38562b0759043155556034ea105db40094f0e424762f05ae441da8".toLowerCase() ;
 
 // src/presets/productionMrtd.ts
-var APPROVED_PRODUCTION_COORDINATOR_MRTD = "a2e61f1316e9e367e9c1f7a0adc98c48eb13875c399c85d286cee5ea2b05e57f2df9f61d903b0ae7ac5607d843dfffc1".toLowerCase() ;
+var APPROVED_PRODUCTION_COORDINATOR_MRTD = "6f3e84c54ac6377614d4c139473db575a83b5db41bd845eecb4eedaf2788ea881309a410c4ceae9641406411f3f639b8".toLowerCase() ;
 
 // src/session/publicReleasePolicy.ts
 function publicProductionReleasePolicy() {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/version.ts","../src/core/session.ts","../src/transport/inMemoryTransport.ts","../src/presets/azure-prod-maa.generated.ts","../src/presets/productionRuntimeProfile.ts","../src/presets/production.ts","../src/presets/productionBinaryHash.ts","../src/presets/productionMrtd.ts","../src/session/publicReleasePolicy.ts","../src/session/publicSession.ts","../src/attestation/public.ts","../src/coordinator/public.ts"],"names":[],"mappings":";;;;;;;;;;AAIO,IAAM,UAAA,GAAa;;;AC2BnB,SAAS,WAAW,OAAA,EAA2B;AACpD,EAAA,OAAO,OAAA,CAAQ,QAAA;AACjB;;;ACEO,SAAS,iBAAA,CAAkB,OAAA,GAAoC,EAAC,EAA4B;AACjG,EAAA,MAAM,EAAA,GAAK,sBAAsB,MAAM,CAAA;AACvC,EAAA,MAAM,gBAAA,uBAAuB,GAAA,EAAiC;AAE9D,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,MAAM,EAAA,CAAG,GAAA,EAAI;AAAA,IACpB,aAAA,EAAe,CAAC,QAAA,KAAa,EAAA,CAAG,SAAS,QAAQ,CAAA;AAAA,IACjD,UAAU,QAAA,EAAuB;AAC/B,MAAA,gBAAA,CAAiB,IAAI,QAAQ,CAAA;AAC7B,MAAA,OAAO,MAAM,gBAAA,CAAiB,MAAA,CAAO,QAAQ,CAAA;AAAA,IAC/C,CAAA;AAAA,IACA,QAAQ,KAAA,EAAyB;AAC/B,MAAA,KAAA,MAAW,QAAA,IAAY,gBAAA,EAAkB,QAAA,CAAS,KAAK,CAAA;AAAA,IACzD,CAAA;AAAA,IACA,MAAM,QAAQ,MAAA,EAAQ;AACpB,MAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,QAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,mCAAmC,CAAA;AAAA,MACjF;AACA,MAAA,IAAI,EAAA,CAAG,GAAA,EAAI,KAAM,MAAA,EAAQ;AACzB,MAAA,EAAA,CAAG,IAAI,YAAY,CAAA;AACnB,MAAA,EAAA,CAAG,IAAI,MAAM,CAAA;AAAA,IACf,CAAA;AAAA,IACA,KAAK,KAAA,EAAyB;AAC5B,MAAA,IAAI,EAAA,CAAG,GAAA,EAAI,KAAM,MAAA,EAAQ;AACvB,QAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,qCAAqC,CAAA;AAAA,MACnF;AACA,MAAA,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,IACtB,CAAA;AAAA,IACA,KAAA,GAAQ;AACN,MAAA,IAAI,EAAA,CAAG,GAAA,EAAI,KAAM,QAAA,EAAU;AAC3B,MAAA,EAAA,CAAG,IAAI,SAAS,CAAA;AAChB,MAAA,EAAA,CAAG,IAAI,QAAQ,CAAA;AAAA,IACjB;AAAA,GACF;AACF;;;ACpEO,IAAM,oBAAA,GAAuB;AAAA,EAClC,MAAA,EAAQ,wCAAA;AAAA,EACR,OAAA,EAAS,8CAAA;AAAA,EACT,UAAA,EAAY,6CAEd,CAAA;ACIA,IAAM,wBAAA,GAEA,+BAAA,CACA;AAEC,IAAM,sCAIP,wBAAA,CACA;;;ACRC,IAAM,2BAAA,GACX,kGAAA;AACK,IAAM,0BAAA,GAA6B,mCAAA;AAE1C,IAAM,eAAA,GAAkB,iBAAA;AACxB,IAAM,QAAA,GAAW,iBAAA;AAEjB,IAAM,sBAAA,GAAyB;AAAA,EAC7B,IAAA,EAAM,2BAAA;AAAA,EACN,cAAA,EAAgB,0BAAA;AAAA,EAChB,oBAAA,EAAsB,oCAAA;AAAA,EACtB,QAAA,EAAU;AAAA,IACR,QAAQ,oBAAA,CAAqB,MAAA;AAAA,IAC7B,SAAS,oBAAA,CAAqB,OAAA;AAAA,IAC9B,YAAY,oBAAA,CAAqB;AAAA;AAErC,CAAA;AAEO,SAAS,yBAAyB,KAAA,EAAuB;AAC9D,EAAA,MAAM,aAAa,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,CAAM,aAAY,GAAI,EAAA;AACrE,EAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,UAAU,CAAA,EAAG;AACrC,IAAA,MAAM,IAAI,MAAM,0DAA0D,CAAA;AAAA,EAC5E;AACA,EAAA,OAAO,UAAA;AACT;AAEO,SAAS,mBAAmB,KAAA,EAAuB;AACxD,EAAA,MAAM,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,CAAM,aAAY,GAAI,EAAA;AAC/D,EAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,IAAI,CAAA,EAAG;AACxB,IAAA,MAAM,IAAI,MAAM,sDAAsD,CAAA;AAAA,EACxE;AACA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,6BAAA,CAA8B;AAAA,EAC5C,KAAA;AAAA,EACA,gBAAA;AAAA,EACA,kBAAA;AAAA,EACA,YAAA,GAAe;AACjB,CAAA,EAKwB;AACtB,EAAA,MAAM,UAAA,GAAa,yBAAyB,kBAAkB,CAAA;AAC9D,EAAA,MAAM,IAAA,GAAO,mBAAmB,YAAY,CAAA;AAC5C,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,gBAAA;AAAA,IACA,UAAA,EAAY,EAAE,GAAG,sBAAA,EAAwB,MAAM,UAAA,EAAW;AAAA,IAC1D,YAAA,EAAc;AAAA,GAChB;AACF;;;AC9DO,IAAM,2CAAA,GAEP,kEAAA,CAAyC,WAAA,EAAY,CACrD;;;ACHC,IAAM,oCAAA,GAEP,kGAAA,CAAkC,WAAA,EAAY,CAC9C;;;ACKC,SAAS,6BAAA,GAA+D;AAC7E,EAAA,OAAO;AAAA,IACL,YAAA,EAAc,oCAAA;AAAA,IACd,kBAAA,EAAoB,2CAAA;AAAA,IACpB,sBAAA,EAAwB;AAAA,GAC1B;AACF;;;ACRA,IAAM,0BAAA,uBAAiC,GAAA,CAAI;AAAA,EACzC,gBAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAC,CAAA;AACD,IAAM,+BAAA,GAAkC,MAAA;AACxC,IAAM,4BAAA,GACJ,wEAAA;AAgBF,eAAsB,cAAc,OAAA,EAAuD;AACzF,EAAA,mBAAA,CAAoB,OAAO,CAAA;AAC3B,EAAA,MAAM,SAAA,GAAY,yBAAA,CAA0B,OAAA,CAAQ,cAAc,CAAA;AAClE,EAAA,MAAM,gBAAgB,6BAAA,EAA8B;AACpD,EAAA,MAAM,WAAW,6BAAA,CAA8B;AAAA,IAC7C,OAAO,OAAA,CAAQ,cAAA;AAAA,IACf,kBAAkB,SAAA,CAAU,QAAA;AAAA,IAC5B,oBAAoB,aAAA,CAAc,kBAAA;AAAA,IAClC,cAAc,aAAA,CAAc;AAAA,GAC7B,CAAA;AAED,EAAA,MAAM,eAAA,GAAgD;AAAA,IACpD,WAAA,EAAa,EAAE,SAAA,EAAW,CAAC,QAAQ,CAAA,EAAE;AAAA,IACrC,GAAI,QAAQ,OAAA,KAAY,MAAA,GAAY,EAAC,GAAI,EAAE,OAAA,EAAS,OAAA,CAAQ,OAAA,EAAQ;AAAA,IACpE,GAAI,QAAQ,MAAA,KAAW,MAAA,GAAY,EAAC,GAAI,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAO;AAAA,IACjE,GAAI,QAAQ,iBAAA,KAAsB,MAAA,GAC9B,EAAC,GACD,EAAE,iBAAA,EAAmB,OAAA,CAAQ,iBAAA;AAAkB,GACrD;AACA,EAAA,OAAO,sBAAsB,eAAe,CAAA;AAC9C;AAIA,SAAS,oBAAoB,OAAA,EAAiE;AAC5F,EAAA,IAAI,OAAO,YAAY,QAAA,IAAY,OAAA,KAAY,QAAQ,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC7E,IAAA,MAAM,IAAI,UAAU,oDAAoD,CAAA;AAAA,EAC1E;AACA,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,IAAA,IAAI,CAAC,0BAAA,CAA2B,GAAA,CAAI,GAAG,CAAA,EAAG;AACxC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gDAAA,EAAmD,GAAG,CAAA,CAAE,CAAA;AAAA,IAC1E;AAAA,EACF;AACA,EAAA,MAAM,iBAAkB,OAAA,CAAyC,cAAA;AACjE,EAAA,IAAI,OAAO,mBAAmB,QAAA,EAAU;AACtC,IAAA,MAAM,IAAI,UAAU,kDAAkD,CAAA;AAAA,EACxE;AACA,EAAA,MAAM,oBAAqB,OAAA,CAA4C,iBAAA;AACvE,EAAA,IAAI,iBAAA,KAAsB,MAAA,IAAa,OAAO,iBAAA,KAAsB,SAAA,EAAW;AAC7E,IAAA,MAAM,IAAI,UAAU,8DAA8D,CAAA;AAAA,EACpF;AACF;AAEA,SAAS,0BAA0B,KAAA,EAAoB;AACrD,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,KAAK,CAAA;AAAA,EACxB,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,4BAA4B,CAAA;AACpD,IAAC,MAA8B,KAAA,GAAQ,KAAA;AACvC,IAAA,MAAM,KAAA;AAAA,EACR;AACA,EAAA,IAAI,MAAA,CAAO,QAAA,KAAa,+BAAA,IAAmC,aAAA,CAAc,KAAK,CAAA,EAAG;AAC/E,IAAA,MAAM,IAAI,MAAM,4BAA4B,CAAA;AAAA,EAC9C;AACA,EAAA,OAAO,MAAA;AACT;;;ACvDO,IAAM,WAAA,GAAc;AAAA,EACzB,gBAAA,GAAkD;AAChD,IAAA,OAAO,6BAAA,EAA8B;AAAA,EACvC,CAAA;AAAA,EAEA,MAAM,YAAY,OAAA,EAA8C;AAC9D,IAAA,MAAM,KAAA,GAAQ,gBAAgB,OAAO,CAAA;AACrC,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,SAAA,CAAU,CAAC,CAAA;AACvC,IAAA,IAAI;AACF,MAAA,MAAM,SAAS,MAAM,kBAAA,CAAmB,OAAO,QAAA,EAAU,KAAA,CAAM,KAAK,uBAAuB,CAAA;AAC3F,MAAA,KAAA,CAAM,WAAA,GAAc,MAAA;AACpB,MAAA,KAAA,CAAM,QAAA,GAAW,IAAA;AACjB,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,KAAA,GAAQ,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAChE,MAAA,iBAAA,CAAkB,OAAO,KAAK,CAAA;AAC9B,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF,CAAA;AAAA,EAEA,QAAQ,OAAA,EAA4C;AAClD,IAAA,OAAO,eAAA,CAAgB,OAAO,CAAA,CAAE,WAAA;AAAA,EAClC,CAAA;AAAA,EAEA,OAAO,OAAA,EAA2C;AAChD,IAAA,MAAM,MAAM,eAAA,CAAgB,OAAO,EAAE,IAAA,CAAK,SAAA,CAAU,CAAC,CAAA,CAAG,UAAA;AACxD,IAAA,OAAO;AAAA,MACL,cAAc,GAAA,CAAI,IAAA;AAAA,MAClB,GAAI,IAAI,UAAA,KAAe,MAAA,GAAY,EAAC,GAAI,EAAE,kBAAA,EAAoB,GAAA,CAAI,UAAA,EAAW;AAAA,MAC7E,GAAI,IAAI,cAAA,KAAmB,MAAA,GAAY,EAAC,GAAI,EAAE,sBAAA,EAAwB,GAAA,CAAI,cAAA,EAAe;AAAA,MACzF,GAAI,IAAI,mBAAA,KAAwB,MAAA,GAC5B,EAAC,GACD,EAAE,2BAAA,EAA6B,GAAA,CAAI,mBAAA,EAAoB;AAAA,MAC3D,GAAI,IAAI,oBAAA,KAAyB,MAAA,GAC7B,EAAC,GACD,EAAE,oBAAA,EAAsB,GAAA,CAAI,oBAAA,EAAqB;AAAA,MACrD,GAAI,GAAA,CAAI,QAAA,KAAa,MAAA,GACjB,EAAC,GACD;AAAA,QACE,QAAA,EAAU;AAAA,UACR,cAAA,EAAgB,IAAI,QAAA,CAAS,MAAA;AAAA,UAC7B,eAAA,EAAiB,IAAI,QAAA,CAAS,OAAA;AAAA,UAC9B,kBAAA,EAAoB,IAAI,QAAA,CAAS;AAAA;AACnC;AACF,KACN;AAAA,EACF,CAAA;AAAA,EAEA,iBAAA,CAAkB,SAAkB,OAAA,EAA8C;AAChF,IAAA,MAAM,QAAA,GAAW,eAAA,CAAgB,OAAO,CAAA,CAAE,uBAAA;AAC1C,IAAA,QAAA,CAAS,IAAI,OAAO,CAAA;AACpB,IAAA,OAAO,MAAM,QAAA,CAAS,MAAA,CAAO,OAAO,CAAA;AAAA,EACtC;AACF;;;ACtEO,IAAM,WAAA,GAAc;AAAA,EACzB,UAAU,OAAA,EAAwD;AAChE,IAAA,OAAO,gBAAgB,OAAO,CAAA,CAAE,KAAK,SAAA,CAAU,GAAA,CAAI,CAAC,QAAA,MAAc;AAAA,MAChE,gBAAgB,QAAA,CAAS,KAAA;AAAA,MACzB,GAAI,SAAS,QAAA,KAAa,MAAA,GAAY,EAAC,GAAI,EAAE,QAAA,EAAU,QAAA,CAAS,QAAA,EAAS;AAAA,MACzE,GAAI,SAAS,MAAA,KAAW,MAAA,GAAY,EAAC,GAAI,EAAE,MAAA,EAAQ,QAAA,CAAS,MAAA;AAAO,KACrE,CAAE,CAAA;AAAA,EACJ,CAAA;AAAA,EAEA,cAAc,QAAA,EAA8D;AAC1E,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,2BAA2B,CAAC,CAAA;AAAA,EAC5E,CAAA;AAAA,EAEA,QAAQ,QAAA,EAAgD;AACtD,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,qBAAqB,CAAC,CAAA;AAAA,EACtE,CAAA;AAAA,EAEA,cAAc,QAAA,EAAkC;AAC9C,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,2BAA2B,CAAC,CAAA;AAAA,EAC5E;AACF","file":"index.js","sourcesContent":["/**\n * The API surface version this build implements. Bumped only on a breaking\n * surface change. See docs/sdk-specification.md section 12.\n */\nexport const apiVersion = \"v0\" as const;\n\n/** Literal type of {@link apiVersion}. */\nexport type ApiVersion = typeof apiVersion;\n","/**\n * The opaque session handle.\n *\n * A `Session` is the single stateful object the functional surface threads\n * through every call: `fn(session, args)`. It owns the transport, the\n * attestation state, and (later) the leader-epoch bookkeeping. Consumers treat\n * it as opaque - they read `session.attested` and pass it back to SDK\n * functions, but never reach inside. The internal state map and constructor\n * live alongside `createSession` (added in a later ticket); this module only\n * fixes the public shape so the rest of the surface can type against it.\n */\n\ndeclare const sessionBrand: unique symbol;\n\n/**\n * Opaque, attested session handle. Obtain one from `createSession`; pass it as\n * the first argument to every actor command. The only field consumers read is\n * {@link Session.attested}.\n */\nexport interface Session {\n  /**\n   * Whether the current Noise session has passed full TDX attestation. Sensitive\n   * commands refuse to run until this is `true`. Re-handshake or failover resets\n   * it to `false` until a fresh attestation completes.\n   */\n  readonly attested: boolean;\n  /** @internal Opacity brand; not constructable by consumers. */\n  readonly [sessionBrand]: true;\n}\n\n/** Convenience predicate mirroring {@link Session.attested}. */\nexport function isAttested(session: Session): boolean {\n  return session.attested;\n}\n","/**\n * In-memory transport.\n *\n * A zero-network channel used by unit tests. It transitions straight to `open`\n * on connect. `send` delivers the raw frame bytes to an optional peer sink: the\n * WebSocket message boundary is the frame boundary, so there is no extra length\n * prefix (matching the production transport). Noise lives above this pure byte\n * channel, never inside it.\n *\n * With no peer wired in, `send` is a silent no-op (legacy stub behaviour for\n * tests that never exchange frames). A paired loopback coordinator supplies a\n * `peer` sink so a real Noise XX handshake can run in-process (see the\n * `testLoopback` fixture).\n */\n\nimport { TransportError } from \"../core/errors.js\";\nimport { createStateController } from \"./stateController.js\";\nimport type { Transport, Unsubscribe } from \"./types.js\";\n\n/** Options for {@link inMemoryTransport}. Test-only paired-loopback wiring. */\nexport interface InMemoryTransportOptions {\n  /**\n   * Sink for frames written via `send()`. A paired in-process coordinator sets\n   * this so the client's raw bytes reach the responder. When omitted, `send`\n   * is a no-op so legacy stub-only tests keep working.\n   */\n  readonly peer?: (frame: Uint8Array) => void;\n}\n\n/** In-memory transport with a hook to feed inbound frames into `onMessage`. */\nexport interface InMemoryTransportHandle extends Transport {\n  /** Deliver a frame to this transport's `onMessage` listeners (peer -> client). */\n  readonly deliver: (frame: Uint8Array) => void;\n}\n\nexport function inMemoryTransport(options: InMemoryTransportOptions = {}): InMemoryTransportHandle {\n  const sc = createStateController(\"idle\");\n  const messageListeners = new Set<(frame: Uint8Array) => void>();\n\n  return {\n    state: () => sc.get(),\n    onStateChange: (listener) => sc.onChange(listener),\n    onMessage(listener): Unsubscribe {\n      messageListeners.add(listener);\n      return () => messageListeners.delete(listener);\n    },\n    deliver(frame: Uint8Array): void {\n      for (const listener of messageListeners) listener(frame);\n    },\n    async connect(signal) {\n      if (signal?.aborted) {\n        throw new TransportError(\"CONNECTION_LOST\", \"connect aborted before it started\");\n      }\n      if (sc.get() === \"open\") return;\n      sc.set(\"connecting\");\n      sc.set(\"open\");\n    },\n    send(frame: Uint8Array): void {\n      if (sc.get() !== \"open\") {\n        throw new TransportError(\"CONNECTION_LOST\", \"cannot send on a non-open transport\");\n      }\n      options.peer?.(frame);\n    },\n    close() {\n      if (sc.get() === \"closed\") return;\n      sc.set(\"closing\");\n      sc.set(\"closed\");\n    },\n  };\n}\n","// Generated by npm run release:trust-policy:generate-sdk. Do not edit.\nexport const AZURE_PROD_MAA_TRUST = {\n  issuer: \"https://sharedweu.weu.attest.azure.net\",\n  jwksUrl: \"https://sharedweu.weu.attest.azure.net/certs\",\n  policyHash: \"9NY0VnTQ-IiBriBplVUpFbczcDaEBUwsiFYAzHu_gco\",\n  trustSetVersion: \"azure-prod-maa-v1\",\n} as const;\n","/** Build-time projection of the approved production runtime profile. */\n\nexport const DEFAULT_AZURE_PROD_RUNTIME_PROFILE = \"prod-devnet-simplified\" as const;\nexport const PROD_HARDENED_RUNTIME_PROFILE = \"prod-hardened\" as const;\nexport const PROD_DEVNET_SIMPLIFIED_RUNTIME_PROFILE = \"prod-devnet-simplified\" as const;\nexport const PROD_DEVNET_SIMPLIFIED_LOCKED_RUNTIME_PROFILE =\n  \"prod-devnet-simplified-locked\" as const;\n\ndeclare const __INVISIBLE_SDK_PRODUCTION_RUNTIME_PROFILE__: string | undefined;\n\nconst configuredRuntimeProfile =\n  typeof __INVISIBLE_SDK_PRODUCTION_RUNTIME_PROFILE__ === \"string\"\n    ? __INVISIBLE_SDK_PRODUCTION_RUNTIME_PROFILE__\n    : \"\";\n\nexport const APPROVED_PRODUCTION_RUNTIME_PROFILE =\n  configuredRuntimeProfile === PROD_HARDENED_RUNTIME_PROFILE ||\n  configuredRuntimeProfile === PROD_DEVNET_SIMPLIFIED_RUNTIME_PROFILE ||\n  configuredRuntimeProfile === PROD_DEVNET_SIMPLIFIED_LOCKED_RUNTIME_PROFILE\n    ? configuredRuntimeProfile\n    : DEFAULT_AZURE_PROD_RUNTIME_PROFILE;\n","import { INTEL_SGX_ROOT_CA_FINGERPRINT_SHA256 } from \"../attestation/verifier.js\";\nimport type { CoordinatorEndpoint, CoordinatorReleasePin } from \"../schemas/types.generated.js\";\nimport { AZURE_PROD_MAA_TRUST } from \"./azure-prod-maa.generated.js\";\nimport { APPROVED_PRODUCTION_RUNTIME_PROFILE } from \"./productionRuntimeProfile.js\";\n\nexport const LOCAL_DEV_RELEASE_PIN_MRTD = \"local-dev-no-mrtd\";\n\nexport const PLACEHOLDER_RELEASE_PIN = {\n  mrtd: \"\",\n  intelRootFingerprint: \"\",\n} as const satisfies CoordinatorReleasePin;\n\nexport const AZURE_PROD_COORDINATOR_MRTD =\n  \"a2e61f1316e9e367e9c1f7a0adc98c48eb13875c399c85d286cee5ea2b05e57f2df9f61d903b0ae7ac5607d843dfffc1\";\nexport const AZURE_PROD_RUNTIME_PROFILE = APPROVED_PRODUCTION_RUNTIME_PROFILE;\n\nconst BINARY_HASH_HEX = /^[0-9a-f]{64}$/i;\nconst MRTD_HEX = /^[0-9a-f]{96}$/i;\n\nconst AZURE_PROD_RELEASE_PIN = {\n  mrtd: AZURE_PROD_COORDINATOR_MRTD,\n  runtimeProfile: AZURE_PROD_RUNTIME_PROFILE,\n  intelRootFingerprint: INTEL_SGX_ROOT_CA_FINGERPRINT_SHA256,\n  azureMaa: {\n    issuer: AZURE_PROD_MAA_TRUST.issuer,\n    jwksUrl: AZURE_PROD_MAA_TRUST.jwksUrl,\n    policyHash: AZURE_PROD_MAA_TRUST.policyHash,\n  },\n} as const;\n\nexport function assertApprovedBinaryHash(value: string): string {\n  const binaryHash = typeof value === \"string\" ? value.toLowerCase() : \"\";\n  if (!BINARY_HASH_HEX.test(binaryHash)) {\n    throw new Error(\"an approved 64-character binary SHA-256 hash is required\");\n  }\n  return binaryHash;\n}\n\nexport function assertApprovedMrtd(value: string): string {\n  const mrtd = typeof value === \"string\" ? value.toLowerCase() : \"\";\n  if (!MRTD_HEX.test(mrtd)) {\n    throw new Error(\"an approved 96-character production MRTD is required\");\n  }\n  return mrtd;\n}\n\n/** Build the active Azure production policy for a concrete coordinator URL. */\nexport function createAzureProductionEndpoint({\n  wsUrl,\n  expectedHostname,\n  approvedBinaryHash,\n  approvedMrtd = AZURE_PROD_COORDINATOR_MRTD,\n}: {\n  readonly wsUrl: string;\n  readonly expectedHostname: string;\n  readonly approvedBinaryHash: string;\n  readonly approvedMrtd?: string;\n}): CoordinatorEndpoint {\n  const binaryHash = assertApprovedBinaryHash(approvedBinaryHash);\n  const mrtd = assertApprovedMrtd(approvedMrtd);\n  return {\n    wsUrl,\n    expectedHostname,\n    releasePin: { ...AZURE_PROD_RELEASE_PIN, mrtd, binaryHash },\n    requiredMode: \"prod\",\n  };\n}\n\n/** Build the explicit private dev/test policy. */\nexport function createDevelopmentEndpoint({\n  wsUrl,\n  expectedHostname,\n  allowMissingDcapCollateral,\n}: {\n  readonly wsUrl: string;\n  readonly expectedHostname: string;\n  readonly allowMissingDcapCollateral?: boolean;\n}): CoordinatorEndpoint {\n  return {\n    wsUrl,\n    expectedHostname,\n    releasePin: {\n      ...PLACEHOLDER_RELEASE_PIN,\n      ...(allowMissingDcapCollateral === true ? { allowMissingDcapCollateral: true } : {}),\n    },\n    requiredMode: \"dev\",\n  };\n}\n","/** Build-time projection of the approved coordinator binary hash. */\n\ndeclare const __INVISIBLE_SDK_PRODUCTION_BINARY_HASH__: string | undefined;\n\nexport const APPROVED_PRODUCTION_COORDINATOR_BINARY_HASH =\n  typeof __INVISIBLE_SDK_PRODUCTION_BINARY_HASH__ === \"string\"\n    ? __INVISIBLE_SDK_PRODUCTION_BINARY_HASH__.toLowerCase()\n    : \"\";\n","/** Build-time projection of the approved production coordinator MRTD. */\n\ndeclare const __INVISIBLE_SDK_PRODUCTION_MRTD__: string | undefined;\n\nexport const APPROVED_PRODUCTION_COORDINATOR_MRTD =\n  typeof __INVISIBLE_SDK_PRODUCTION_MRTD__ === \"string\"\n    ? __INVISIBLE_SDK_PRODUCTION_MRTD__.toLowerCase()\n    : \"\";\n","import { APPROVED_PRODUCTION_COORDINATOR_BINARY_HASH } from \"../presets/productionBinaryHash.js\";\nimport { APPROVED_PRODUCTION_COORDINATOR_MRTD } from \"../presets/productionMrtd.js\";\nimport { APPROVED_PRODUCTION_RUNTIME_PROFILE } from \"../presets/productionRuntimeProfile.js\";\nimport type { CoordinatorRuntimeProfile } from \"../attestation/verifier.js\";\n\nexport interface PublicProductionReleasePolicy {\n  readonly expectedMrtd: string;\n  readonly expectedBinaryHash: string;\n  readonly expectedRuntimeProfile: CoordinatorRuntimeProfile;\n}\n\n/** The build-bound production tuple used by the public session constructor. */\nexport function publicProductionReleasePolicy(): PublicProductionReleasePolicy {\n  return {\n    expectedMrtd: APPROVED_PRODUCTION_COORDINATOR_MRTD,\n    expectedBinaryHash: APPROVED_PRODUCTION_COORDINATOR_BINARY_HASH,\n    expectedRuntimeProfile: APPROVED_PRODUCTION_RUNTIME_PROFILE,\n  };\n}\n","import type { Session } from \"../core/session.js\";\nimport { createAzureProductionEndpoint } from \"../presets/production.js\";\nimport { isLoopbackUrl } from \"./secureChannel.js\";\nimport { publicProductionReleasePolicy } from \"./publicReleasePolicy.js\";\nimport {\n  closeSession,\n  createSessionInternal,\n  type CreateSessionOptions as InternalCreateSessionOptions,\n} from \"./createSession.js\";\n\nconst PUBLIC_SESSION_OPTION_KEYS = new Set([\n  \"coordinatorUrl\",\n  \"storage\",\n  \"wallet\",\n  \"clientPersistence\",\n]);\nconst PUBLIC_COORDINATOR_URL_PROTOCOL = \"wss:\";\nconst PUBLIC_COORDINATOR_URL_ERROR =\n  \"public SDK createSession requires a non-loopback wss:// coordinatorUrl\";\n\nexport interface PublicCreateSessionOptions {\n  readonly coordinatorUrl: string;\n  readonly storage?: unknown;\n  readonly wallet?: unknown;\n  /** Opt into SDK-owned normal-user transfer persistence. */\n  readonly clientPersistence?: boolean;\n}\n\n/**\n * Open a production-only public SDK session.\n *\n * The caller supplies only the route and public adapters. The Azure\n * production release policy is embedded by the selected SDK build.\n */\nexport async function createSession(options: PublicCreateSessionOptions): Promise<Session> {\n  assertPublicOptions(options);\n  const parsedUrl = parsePublicCoordinatorUrl(options.coordinatorUrl);\n  const releasePolicy = publicProductionReleasePolicy();\n  const endpoint = createAzureProductionEndpoint({\n    wsUrl: options.coordinatorUrl,\n    expectedHostname: parsedUrl.hostname,\n    approvedBinaryHash: releasePolicy.expectedBinaryHash,\n    approvedMrtd: releasePolicy.expectedMrtd,\n  });\n\n  const internalOptions: InternalCreateSessionOptions = {\n    coordinator: { endpoints: [endpoint] },\n    ...(options.storage === undefined ? {} : { storage: options.storage }),\n    ...(options.wallet === undefined ? {} : { wallet: options.wallet }),\n    ...(options.clientPersistence === undefined\n      ? {}\n      : { clientPersistence: options.clientPersistence }),\n  };\n  return createSessionInternal(internalOptions);\n}\n\nexport { closeSession };\n\nfunction assertPublicOptions(options: unknown): asserts options is PublicCreateSessionOptions {\n  if (typeof options !== \"object\" || options === null || Array.isArray(options)) {\n    throw new TypeError(\"public SDK createSession options must be an object\");\n  }\n  for (const key of Object.keys(options)) {\n    if (!PUBLIC_SESSION_OPTION_KEYS.has(key)) {\n      throw new Error(`public SDK createSession does not accept option ${key}`);\n    }\n  }\n  const coordinatorUrl = (options as { coordinatorUrl?: unknown }).coordinatorUrl;\n  if (typeof coordinatorUrl !== \"string\") {\n    throw new TypeError(\"public SDK createSession requires coordinatorUrl\");\n  }\n  const clientPersistence = (options as { clientPersistence?: unknown }).clientPersistence;\n  if (clientPersistence !== undefined && typeof clientPersistence !== \"boolean\") {\n    throw new TypeError(\"public SDK createSession clientPersistence must be a boolean\");\n  }\n}\n\nfunction parsePublicCoordinatorUrl(value: string): URL {\n  let parsed: URL;\n  try {\n    parsed = new URL(value);\n  } catch (cause) {\n    const error = new Error(PUBLIC_COORDINATOR_URL_ERROR);\n    (error as { cause?: unknown }).cause = cause;\n    throw error;\n  }\n  if (parsed.protocol !== PUBLIC_COORDINATOR_URL_PROTOCOL || isLoopbackUrl(value)) {\n    throw new Error(PUBLIC_COORDINATOR_URL_ERROR);\n  }\n  return parsed;\n}\n","import type { Session } from \"../core/session.js\";\nimport type { AttestationResult } from \"../transport/handshake.js\";\nimport type { Unsubscribe } from \"../transport/types.js\";\nimport { reattestSerialized } from \"./reattest.js\";\nimport { failSessionClosed, getSessionState } from \"../session/state.js\";\nimport {\n  publicProductionReleasePolicy,\n  type PublicProductionReleasePolicy,\n} from \"../session/publicReleasePolicy.js\";\n\nexport type { AttestationResult } from \"../transport/handshake.js\";\n\nexport interface PublicAttestationPolicy {\n  readonly expectedMrtd: string;\n  readonly expectedBinaryHash?: string;\n  readonly expectedRuntimeProfile?:\n    | \"prod-hardened\"\n    | \"prod-devnet-simplified\"\n    | \"prod-devnet-simplified-locked\"\n    | \"azure-tdx-v0-agentless\";\n  readonly expectedRuntimeMeasurements?: {\n    readonly rtmr0: string;\n    readonly rtmr1: string;\n    readonly rtmr2: string;\n    readonly rtmr3: string;\n  };\n  readonly intelRootFingerprint?: string;\n  readonly azureMaa?: {\n    readonly expectedIssuer: string;\n    readonly expectedJwksUrl: string;\n    readonly expectedPolicyHash: string;\n  };\n}\n\n/** Public attestation read controls. Policy construction remains internal. */\nexport const attestation = {\n  productionPolicy(): PublicProductionReleasePolicy {\n    return publicProductionReleasePolicy();\n  },\n\n  async assertValid(session: Session): Promise<AttestationResult> {\n    const state = getSessionState(session);\n    const endpoint = state.pool.endpoints[0]!;\n    try {\n      const result = await reattestSerialized(state, endpoint, state.pool.noiseTransportTimeoutMs);\n      state.attestation = result;\n      state.attested = true;\n      return result;\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      failSessionClosed(state, error);\n      throw error;\n    }\n  },\n\n  current(session: Session): AttestationResult | null {\n    return getSessionState(session).attestation;\n  },\n\n  policy(session: Session): PublicAttestationPolicy {\n    const pin = getSessionState(session).pool.endpoints[0]!.releasePin;\n    return {\n      expectedMrtd: pin.mrtd,\n      ...(pin.binaryHash === undefined ? {} : { expectedBinaryHash: pin.binaryHash }),\n      ...(pin.runtimeProfile === undefined ? {} : { expectedRuntimeProfile: pin.runtimeProfile }),\n      ...(pin.runtimeMeasurements === undefined\n        ? {}\n        : { expectedRuntimeMeasurements: pin.runtimeMeasurements }),\n      ...(pin.intelRootFingerprint === undefined\n        ? {}\n        : { intelRootFingerprint: pin.intelRootFingerprint }),\n      ...(pin.azureMaa === undefined\n        ? {}\n        : {\n            azureMaa: {\n              expectedIssuer: pin.azureMaa.issuer,\n              expectedJwksUrl: pin.azureMaa.jwksUrl,\n              expectedPolicyHash: pin.azureMaa.policyHash,\n            },\n          }),\n    };\n  },\n\n  onPolicyViolation(session: Session, handler: (error: Error) => void): Unsubscribe {\n    const handlers = getSessionState(session).policyViolationHandlers;\n    handlers.add(handler);\n    return () => handlers.delete(handler);\n  },\n};\n","import { NotImplementedError } from \"../core/errors.js\";\nimport type { Session } from \"../core/session.js\";\nimport { getSessionState } from \"../session/state.js\";\n\nexport interface PublicCoordinatorEndpoint {\n  readonly coordinatorUrl: string;\n  readonly roleHint?: \"leader\" | \"watcher\";\n  readonly weight?: number;\n}\n\nexport interface CoordinatorVersion {\n  readonly mode: \"prod\" | \"dev\";\n  readonly protocolVersion: string;\n  readonly schemaVersion: string;\n  readonly hostname: string;\n  readonly leaderEpoch: number;\n}\n\nexport const coordinator = {\n  endpoints(session: Session): readonly PublicCoordinatorEndpoint[] {\n    return getSessionState(session).pool.endpoints.map((endpoint) => ({\n      coordinatorUrl: endpoint.wsUrl,\n      ...(endpoint.roleHint === undefined ? {} : { roleHint: endpoint.roleHint }),\n      ...(endpoint.weight === undefined ? {} : { weight: endpoint.weight }),\n    }));\n  },\n\n  currentLeader(_session: Session): Promise<PublicCoordinatorEndpoint | null> {\n    return Promise.reject(new NotImplementedError(\"coordinator.currentLeader\"));\n  },\n\n  version(_session: Session): Promise<CoordinatorVersion> {\n    return Promise.reject(new NotImplementedError(\"coordinator.version\"));\n  },\n\n  forceFailover(_session: Session): Promise<void> {\n    return Promise.reject(new NotImplementedError(\"coordinator.forceFailover\"));\n  },\n};\n"]}
+{"version":3,"sources":["../src/core/version.ts","../src/core/session.ts","../src/transport/inMemoryTransport.ts","../src/presets/azure-prod-maa.generated.ts","../src/presets/productionRuntimeProfile.ts","../src/presets/production.ts","../src/presets/productionBinaryHash.ts","../src/presets/productionMrtd.ts","../src/session/publicReleasePolicy.ts","../src/session/publicSession.ts","../src/attestation/public.ts","../src/coordinator/public.ts"],"names":[],"mappings":";;;;;;;;;;AAIO,IAAM,UAAA,GAAa;;;AC2BnB,SAAS,WAAW,OAAA,EAA2B;AACpD,EAAA,OAAO,OAAA,CAAQ,QAAA;AACjB;;;ACEO,SAAS,iBAAA,CAAkB,OAAA,GAAoC,EAAC,EAA4B;AACjG,EAAA,MAAM,EAAA,GAAK,sBAAsB,MAAM,CAAA;AACvC,EAAA,MAAM,gBAAA,uBAAuB,GAAA,EAAiC;AAE9D,EAAA,OAAO;AAAA,IACL,KAAA,EAAO,MAAM,EAAA,CAAG,GAAA,EAAI;AAAA,IACpB,aAAA,EAAe,CAAC,QAAA,KAAa,EAAA,CAAG,SAAS,QAAQ,CAAA;AAAA,IACjD,UAAU,QAAA,EAAuB;AAC/B,MAAA,gBAAA,CAAiB,IAAI,QAAQ,CAAA;AAC7B,MAAA,OAAO,MAAM,gBAAA,CAAiB,MAAA,CAAO,QAAQ,CAAA;AAAA,IAC/C,CAAA;AAAA,IACA,QAAQ,KAAA,EAAyB;AAC/B,MAAA,KAAA,MAAW,QAAA,IAAY,gBAAA,EAAkB,QAAA,CAAS,KAAK,CAAA;AAAA,IACzD,CAAA;AAAA,IACA,MAAM,QAAQ,MAAA,EAAQ;AACpB,MAAA,IAAI,QAAQ,OAAA,EAAS;AACnB,QAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,mCAAmC,CAAA;AAAA,MACjF;AACA,MAAA,IAAI,EAAA,CAAG,GAAA,EAAI,KAAM,MAAA,EAAQ;AACzB,MAAA,EAAA,CAAG,IAAI,YAAY,CAAA;AACnB,MAAA,EAAA,CAAG,IAAI,MAAM,CAAA;AAAA,IACf,CAAA;AAAA,IACA,KAAK,KAAA,EAAyB;AAC5B,MAAA,IAAI,EAAA,CAAG,GAAA,EAAI,KAAM,MAAA,EAAQ;AACvB,QAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,qCAAqC,CAAA;AAAA,MACnF;AACA,MAAA,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,IACtB,CAAA;AAAA,IACA,KAAA,GAAQ;AACN,MAAA,IAAI,EAAA,CAAG,GAAA,EAAI,KAAM,QAAA,EAAU;AAC3B,MAAA,EAAA,CAAG,IAAI,SAAS,CAAA;AAChB,MAAA,EAAA,CAAG,IAAI,QAAQ,CAAA;AAAA,IACjB;AAAA,GACF;AACF;;;ACpEO,IAAM,oBAAA,GAAuB;AAAA,EAClC,MAAA,EAAQ,wCAAA;AAAA,EACR,OAAA,EAAS,8CAAA;AAAA,EACT,UAAA,EAAY,6CAEd,CAAA;ACIA,IAAM,wBAAA,GAEA,eAAA,CACA;AAEC,IAAM,sCAIP,wBAAA,CACA;;;ACJC,IAAM,2BAAA,GACX,kGAAA;AACK,IAAM,0BAAA,GAA6B,mCAAA;AAE1C,IAAM,eAAA,GAAkB,iBAAA;AACxB,IAAM,QAAA,GAAW,iBAAA;AAEjB,IAAM,sBAAA,GAAyB;AAAA,EAC7B,IAAA,EAAM,2BAAA;AAAA,EACN,cAAA,EAAgB,0BAAA;AAAA,EAChB,oBAAA,EAAsB,oCAAA;AAAA,EACtB,QAAA,EAAU;AAAA,IACR,QAAQ,oBAAA,CAAqB,MAAA;AAAA,IAC7B,SAAS,oBAAA,CAAqB,OAAA;AAAA,IAC9B,YAAY,oBAAA,CAAqB;AAAA;AAErC,CAAA;AAEO,SAAS,yBAAyB,KAAA,EAAuB;AAC9D,EAAA,MAAM,aAAa,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,CAAM,aAAY,GAAI,EAAA;AACrE,EAAA,IAAI,CAAC,eAAA,CAAgB,IAAA,CAAK,UAAU,CAAA,EAAG;AACrC,IAAA,MAAM,IAAI,MAAM,0DAA0D,CAAA;AAAA,EAC5E;AACA,EAAA,OAAO,UAAA;AACT;AAEO,SAAS,mBAAmB,KAAA,EAAuB;AACxD,EAAA,MAAM,OAAO,OAAO,KAAA,KAAU,QAAA,GAAW,KAAA,CAAM,aAAY,GAAI,EAAA;AAC/D,EAAA,IAAI,CAAC,QAAA,CAAS,IAAA,CAAK,IAAI,CAAA,EAAG;AACxB,IAAA,MAAM,IAAI,MAAM,sDAAsD,CAAA;AAAA,EACxE;AACA,EAAA,OAAO,IAAA;AACT;AAGO,SAAS,6BAAA,CAA8B;AAAA,EAC5C,KAAA;AAAA,EACA,gBAAA;AAAA,EACA,kBAAA;AAAA,EACA,YAAA,GAAe;AACjB,CAAA,EAKwB;AACtB,EAAA,MAAM,UAAA,GAAa,yBAAyB,kBAAkB,CAAA;AAC9D,EAAA,MAAM,IAAA,GAAO,mBAAmB,YAAY,CAAA;AAC5C,EAAA,OAAO;AAAA,IACL,KAAA;AAAA,IACA,gBAAA;AAAA,IACA,UAAA,EAAY,EAAE,GAAG,sBAAA,EAAwB,MAAM,UAAA,EAAW;AAAA,IAC1D,YAAA,EAAc;AAAA,GAChB;AACF;;;AClEO,IAAM,2CAAA,GAEP,kEAAA,CAAyC,WAAA,EAAY,CACrD;;;ACHC,IAAM,oCAAA,GAEP,kGAAA,CAAkC,WAAA,EAAY,CAC9C;;;ACKC,SAAS,6BAAA,GAA+D;AAC7E,EAAA,OAAO;AAAA,IACL,YAAA,EAAc,oCAAA;AAAA,IACd,kBAAA,EAAoB,2CAAA;AAAA,IACpB,sBAAA,EAAwB;AAAA,GAC1B;AACF;;;ACRA,IAAM,0BAAA,uBAAiC,GAAA,CAAI;AAAA,EACzC,gBAAA;AAAA,EACA,SAAA;AAAA,EACA,QAAA;AAAA,EACA;AACF,CAAC,CAAA;AACD,IAAM,+BAAA,GAAkC,MAAA;AACxC,IAAM,4BAAA,GACJ,wEAAA;AAgBF,eAAsB,cAAc,OAAA,EAAuD;AACzF,EAAA,mBAAA,CAAoB,OAAO,CAAA;AAC3B,EAAA,MAAM,SAAA,GAAY,yBAAA,CAA0B,OAAA,CAAQ,cAAc,CAAA;AAClE,EAAA,MAAM,gBAAgB,6BAAA,EAA8B;AACpD,EAAA,MAAM,WAAW,6BAAA,CAA8B;AAAA,IAC7C,OAAO,OAAA,CAAQ,cAAA;AAAA,IACf,kBAAkB,SAAA,CAAU,QAAA;AAAA,IAC5B,oBAAoB,aAAA,CAAc,kBAAA;AAAA,IAClC,cAAc,aAAA,CAAc;AAAA,GAC7B,CAAA;AAED,EAAA,MAAM,eAAA,GAAgD;AAAA,IACpD,WAAA,EAAa,EAAE,SAAA,EAAW,CAAC,QAAQ,CAAA,EAAE;AAAA,IACrC,GAAI,QAAQ,OAAA,KAAY,MAAA,GAAY,EAAC,GAAI,EAAE,OAAA,EAAS,OAAA,CAAQ,OAAA,EAAQ;AAAA,IACpE,GAAI,QAAQ,MAAA,KAAW,MAAA,GAAY,EAAC,GAAI,EAAE,MAAA,EAAQ,OAAA,CAAQ,MAAA,EAAO;AAAA,IACjE,GAAI,QAAQ,iBAAA,KAAsB,MAAA,GAC9B,EAAC,GACD,EAAE,iBAAA,EAAmB,OAAA,CAAQ,iBAAA;AAAkB,GACrD;AACA,EAAA,OAAO,sBAAsB,eAAe,CAAA;AAC9C;AAIA,SAAS,oBAAoB,OAAA,EAAiE;AAC5F,EAAA,IAAI,OAAO,YAAY,QAAA,IAAY,OAAA,KAAY,QAAQ,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC7E,IAAA,MAAM,IAAI,UAAU,oDAAoD,CAAA;AAAA,EAC1E;AACA,EAAA,KAAA,MAAW,GAAA,IAAO,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,EAAG;AACtC,IAAA,IAAI,CAAC,0BAAA,CAA2B,GAAA,CAAI,GAAG,CAAA,EAAG;AACxC,MAAA,MAAM,IAAI,KAAA,CAAM,CAAA,gDAAA,EAAmD,GAAG,CAAA,CAAE,CAAA;AAAA,IAC1E;AAAA,EACF;AACA,EAAA,MAAM,iBAAkB,OAAA,CAAyC,cAAA;AACjE,EAAA,IAAI,OAAO,mBAAmB,QAAA,EAAU;AACtC,IAAA,MAAM,IAAI,UAAU,kDAAkD,CAAA;AAAA,EACxE;AACA,EAAA,MAAM,oBAAqB,OAAA,CAA4C,iBAAA;AACvE,EAAA,IAAI,iBAAA,KAAsB,MAAA,IAAa,OAAO,iBAAA,KAAsB,SAAA,EAAW;AAC7E,IAAA,MAAM,IAAI,UAAU,8DAA8D,CAAA;AAAA,EACpF;AACF;AAEA,SAAS,0BAA0B,KAAA,EAAoB;AACrD,EAAA,IAAI,MAAA;AACJ,EAAA,IAAI;AACF,IAAA,MAAA,GAAS,IAAI,IAAI,KAAK,CAAA;AAAA,EACxB,SAAS,KAAA,EAAO;AACd,IAAA,MAAM,KAAA,GAAQ,IAAI,KAAA,CAAM,4BAA4B,CAAA;AACpD,IAAC,MAA8B,KAAA,GAAQ,KAAA;AACvC,IAAA,MAAM,KAAA;AAAA,EACR;AACA,EAAA,IAAI,MAAA,CAAO,QAAA,KAAa,+BAAA,IAAmC,aAAA,CAAc,KAAK,CAAA,EAAG;AAC/E,IAAA,MAAM,IAAI,MAAM,4BAA4B,CAAA;AAAA,EAC9C;AACA,EAAA,OAAO,MAAA;AACT;;;ACvDO,IAAM,WAAA,GAAc;AAAA,EACzB,gBAAA,GAAkD;AAChD,IAAA,OAAO,6BAAA,EAA8B;AAAA,EACvC,CAAA;AAAA,EAEA,MAAM,YAAY,OAAA,EAA8C;AAC9D,IAAA,MAAM,KAAA,GAAQ,gBAAgB,OAAO,CAAA;AACrC,IAAA,MAAM,QAAA,GAAW,KAAA,CAAM,IAAA,CAAK,SAAA,CAAU,CAAC,CAAA;AACvC,IAAA,IAAI;AACF,MAAA,MAAM,SAAS,MAAM,kBAAA,CAAmB,OAAO,QAAA,EAAU,KAAA,CAAM,KAAK,uBAAuB,CAAA;AAC3F,MAAA,KAAA,CAAM,WAAA,GAAc,MAAA;AACpB,MAAA,KAAA,CAAM,QAAA,GAAW,IAAA;AACjB,MAAA,OAAO,MAAA;AAAA,IACT,SAAS,GAAA,EAAK;AACZ,MAAA,MAAM,KAAA,GAAQ,eAAe,KAAA,GAAQ,GAAA,GAAM,IAAI,KAAA,CAAM,MAAA,CAAO,GAAG,CAAC,CAAA;AAChE,MAAA,iBAAA,CAAkB,OAAO,KAAK,CAAA;AAC9B,MAAA,MAAM,KAAA;AAAA,IACR;AAAA,EACF,CAAA;AAAA,EAEA,QAAQ,OAAA,EAA4C;AAClD,IAAA,OAAO,eAAA,CAAgB,OAAO,CAAA,CAAE,WAAA;AAAA,EAClC,CAAA;AAAA,EAEA,OAAO,OAAA,EAA2C;AAChD,IAAA,MAAM,MAAM,eAAA,CAAgB,OAAO,EAAE,IAAA,CAAK,SAAA,CAAU,CAAC,CAAA,CAAG,UAAA;AACxD,IAAA,OAAO;AAAA,MACL,cAAc,GAAA,CAAI,IAAA;AAAA,MAClB,GAAI,IAAI,UAAA,KAAe,MAAA,GAAY,EAAC,GAAI,EAAE,kBAAA,EAAoB,GAAA,CAAI,UAAA,EAAW;AAAA,MAC7E,GAAI,IAAI,cAAA,KAAmB,MAAA,GAAY,EAAC,GAAI,EAAE,sBAAA,EAAwB,GAAA,CAAI,cAAA,EAAe;AAAA,MACzF,GAAI,IAAI,mBAAA,KAAwB,MAAA,GAC5B,EAAC,GACD,EAAE,2BAAA,EAA6B,GAAA,CAAI,mBAAA,EAAoB;AAAA,MAC3D,GAAI,IAAI,oBAAA,KAAyB,MAAA,GAC7B,EAAC,GACD,EAAE,oBAAA,EAAsB,GAAA,CAAI,oBAAA,EAAqB;AAAA,MACrD,GAAI,GAAA,CAAI,QAAA,KAAa,MAAA,GACjB,EAAC,GACD;AAAA,QACE,QAAA,EAAU;AAAA,UACR,cAAA,EAAgB,IAAI,QAAA,CAAS,MAAA;AAAA,UAC7B,eAAA,EAAiB,IAAI,QAAA,CAAS,OAAA;AAAA,UAC9B,kBAAA,EAAoB,IAAI,QAAA,CAAS;AAAA;AACnC;AACF,KACN;AAAA,EACF,CAAA;AAAA,EAEA,iBAAA,CAAkB,SAAkB,OAAA,EAA8C;AAChF,IAAA,MAAM,QAAA,GAAW,eAAA,CAAgB,OAAO,CAAA,CAAE,uBAAA;AAC1C,IAAA,QAAA,CAAS,IAAI,OAAO,CAAA;AACpB,IAAA,OAAO,MAAM,QAAA,CAAS,MAAA,CAAO,OAAO,CAAA;AAAA,EACtC;AACF;;;ACtEO,IAAM,WAAA,GAAc;AAAA,EACzB,UAAU,OAAA,EAAwD;AAChE,IAAA,OAAO,gBAAgB,OAAO,CAAA,CAAE,KAAK,SAAA,CAAU,GAAA,CAAI,CAAC,QAAA,MAAc;AAAA,MAChE,gBAAgB,QAAA,CAAS,KAAA;AAAA,MACzB,GAAI,SAAS,QAAA,KAAa,MAAA,GAAY,EAAC,GAAI,EAAE,QAAA,EAAU,QAAA,CAAS,QAAA,EAAS;AAAA,MACzE,GAAI,SAAS,MAAA,KAAW,MAAA,GAAY,EAAC,GAAI,EAAE,MAAA,EAAQ,QAAA,CAAS,MAAA;AAAO,KACrE,CAAE,CAAA;AAAA,EACJ,CAAA;AAAA,EAEA,cAAc,QAAA,EAA8D;AAC1E,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,2BAA2B,CAAC,CAAA;AAAA,EAC5E,CAAA;AAAA,EAEA,QAAQ,QAAA,EAAgD;AACtD,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,qBAAqB,CAAC,CAAA;AAAA,EACtE,CAAA;AAAA,EAEA,cAAc,QAAA,EAAkC;AAC9C,IAAA,OAAO,OAAA,CAAQ,MAAA,CAAO,IAAI,mBAAA,CAAoB,2BAA2B,CAAC,CAAA;AAAA,EAC5E;AACF","file":"index.js","sourcesContent":["/**\n * The API surface version this build implements. Bumped only on a breaking\n * surface change. See docs/sdk-specification.md section 12.\n */\nexport const apiVersion = \"v0\" as const;\n\n/** Literal type of {@link apiVersion}. */\nexport type ApiVersion = typeof apiVersion;\n","/**\n * The opaque session handle.\n *\n * A `Session` is the single stateful object the functional surface threads\n * through every call: `fn(session, args)`. It owns the transport, the\n * attestation state, and (later) the leader-epoch bookkeeping. Consumers treat\n * it as opaque - they read `session.attested` and pass it back to SDK\n * functions, but never reach inside. The internal state map and constructor\n * live alongside `createSession` (added in a later ticket); this module only\n * fixes the public shape so the rest of the surface can type against it.\n */\n\ndeclare const sessionBrand: unique symbol;\n\n/**\n * Opaque, attested session handle. Obtain one from `createSession`; pass it as\n * the first argument to every actor command. The only field consumers read is\n * {@link Session.attested}.\n */\nexport interface Session {\n  /**\n   * Whether the current Noise session has passed full TDX attestation. Sensitive\n   * commands refuse to run until this is `true`. Re-handshake or failover resets\n   * it to `false` until a fresh attestation completes.\n   */\n  readonly attested: boolean;\n  /** @internal Opacity brand; not constructable by consumers. */\n  readonly [sessionBrand]: true;\n}\n\n/** Convenience predicate mirroring {@link Session.attested}. */\nexport function isAttested(session: Session): boolean {\n  return session.attested;\n}\n","/**\n * In-memory transport.\n *\n * A zero-network channel used by unit tests. It transitions straight to `open`\n * on connect. `send` delivers the raw frame bytes to an optional peer sink: the\n * WebSocket message boundary is the frame boundary, so there is no extra length\n * prefix (matching the production transport). Noise lives above this pure byte\n * channel, never inside it.\n *\n * With no peer wired in, `send` is a silent no-op (legacy stub behaviour for\n * tests that never exchange frames). A paired loopback coordinator supplies a\n * `peer` sink so a real Noise XX handshake can run in-process (see the\n * `testLoopback` fixture).\n */\n\nimport { TransportError } from \"../core/errors.js\";\nimport { createStateController } from \"./stateController.js\";\nimport type { Transport, Unsubscribe } from \"./types.js\";\n\n/** Options for {@link inMemoryTransport}. Test-only paired-loopback wiring. */\nexport interface InMemoryTransportOptions {\n  /**\n   * Sink for frames written via `send()`. A paired in-process coordinator sets\n   * this so the client's raw bytes reach the responder. When omitted, `send`\n   * is a no-op so legacy stub-only tests keep working.\n   */\n  readonly peer?: (frame: Uint8Array) => void;\n}\n\n/** In-memory transport with a hook to feed inbound frames into `onMessage`. */\nexport interface InMemoryTransportHandle extends Transport {\n  /** Deliver a frame to this transport's `onMessage` listeners (peer -> client). */\n  readonly deliver: (frame: Uint8Array) => void;\n}\n\nexport function inMemoryTransport(options: InMemoryTransportOptions = {}): InMemoryTransportHandle {\n  const sc = createStateController(\"idle\");\n  const messageListeners = new Set<(frame: Uint8Array) => void>();\n\n  return {\n    state: () => sc.get(),\n    onStateChange: (listener) => sc.onChange(listener),\n    onMessage(listener): Unsubscribe {\n      messageListeners.add(listener);\n      return () => messageListeners.delete(listener);\n    },\n    deliver(frame: Uint8Array): void {\n      for (const listener of messageListeners) listener(frame);\n    },\n    async connect(signal) {\n      if (signal?.aborted) {\n        throw new TransportError(\"CONNECTION_LOST\", \"connect aborted before it started\");\n      }\n      if (sc.get() === \"open\") return;\n      sc.set(\"connecting\");\n      sc.set(\"open\");\n    },\n    send(frame: Uint8Array): void {\n      if (sc.get() !== \"open\") {\n        throw new TransportError(\"CONNECTION_LOST\", \"cannot send on a non-open transport\");\n      }\n      options.peer?.(frame);\n    },\n    close() {\n      if (sc.get() === \"closed\") return;\n      sc.set(\"closing\");\n      sc.set(\"closed\");\n    },\n  };\n}\n","// Generated by npm run release:trust-policy:generate-sdk. Do not edit.\nexport const AZURE_PROD_MAA_TRUST = {\n  issuer: \"https://sharedweu.weu.attest.azure.net\",\n  jwksUrl: \"https://sharedweu.weu.attest.azure.net/certs\",\n  policyHash: \"9NY0VnTQ-IiBriBplVUpFbczcDaEBUwsiFYAzHu_gco\",\n  trustSetVersion: \"azure-prod-maa-v1\",\n} as const;\n","/** Build-time projection of the approved production runtime profile. */\n\nexport const DEFAULT_AZURE_PROD_RUNTIME_PROFILE = \"prod-devnet-simplified\" as const;\nexport const PROD_HARDENED_RUNTIME_PROFILE = \"prod-hardened\" as const;\nexport const PROD_DEVNET_SIMPLIFIED_RUNTIME_PROFILE = \"prod-devnet-simplified\" as const;\nexport const PROD_DEVNET_SIMPLIFIED_LOCKED_RUNTIME_PROFILE =\n  \"prod-devnet-simplified-locked\" as const;\n\ndeclare const __INVISIBLE_SDK_PRODUCTION_RUNTIME_PROFILE__: string | undefined;\n\nconst configuredRuntimeProfile =\n  typeof __INVISIBLE_SDK_PRODUCTION_RUNTIME_PROFILE__ === \"string\"\n    ? __INVISIBLE_SDK_PRODUCTION_RUNTIME_PROFILE__\n    : \"\";\n\nexport const APPROVED_PRODUCTION_RUNTIME_PROFILE =\n  configuredRuntimeProfile === PROD_HARDENED_RUNTIME_PROFILE ||\n  configuredRuntimeProfile === PROD_DEVNET_SIMPLIFIED_RUNTIME_PROFILE ||\n  configuredRuntimeProfile === PROD_DEVNET_SIMPLIFIED_LOCKED_RUNTIME_PROFILE\n    ? configuredRuntimeProfile\n    : DEFAULT_AZURE_PROD_RUNTIME_PROFILE;\n","import { INTEL_SGX_ROOT_CA_FINGERPRINT_SHA256 } from \"../attestation/verifier.js\";\nimport type {\n  AzureMaaPin,\n  CoordinatorEndpoint,\n  CoordinatorReleasePin,\n} from \"../schemas/types.generated.js\";\nimport { AZURE_PROD_MAA_TRUST } from \"./azure-prod-maa.generated.js\";\nimport { APPROVED_PRODUCTION_RUNTIME_PROFILE } from \"./productionRuntimeProfile.js\";\n\nexport const LOCAL_DEV_RELEASE_PIN_MRTD = \"local-dev-no-mrtd\";\n\nexport const PLACEHOLDER_RELEASE_PIN = {\n  mrtd: \"\",\n  intelRootFingerprint: \"\",\n} as const satisfies CoordinatorReleasePin;\n\nexport const AZURE_PROD_COORDINATOR_MRTD =\n  \"a2e61f1316e9e367e9c1f7a0adc98c48eb13875c399c85d286cee5ea2b05e57f2df9f61d903b0ae7ac5607d843dfffc1\";\nexport const AZURE_PROD_RUNTIME_PROFILE = APPROVED_PRODUCTION_RUNTIME_PROFILE;\n\nconst BINARY_HASH_HEX = /^[0-9a-f]{64}$/i;\nconst MRTD_HEX = /^[0-9a-f]{96}$/i;\n\nconst AZURE_PROD_RELEASE_PIN = {\n  mrtd: AZURE_PROD_COORDINATOR_MRTD,\n  runtimeProfile: AZURE_PROD_RUNTIME_PROFILE,\n  intelRootFingerprint: INTEL_SGX_ROOT_CA_FINGERPRINT_SHA256,\n  azureMaa: {\n    issuer: AZURE_PROD_MAA_TRUST.issuer,\n    jwksUrl: AZURE_PROD_MAA_TRUST.jwksUrl,\n    policyHash: AZURE_PROD_MAA_TRUST.policyHash,\n  },\n} as const;\n\nexport function assertApprovedBinaryHash(value: string): string {\n  const binaryHash = typeof value === \"string\" ? value.toLowerCase() : \"\";\n  if (!BINARY_HASH_HEX.test(binaryHash)) {\n    throw new Error(\"an approved 64-character binary SHA-256 hash is required\");\n  }\n  return binaryHash;\n}\n\nexport function assertApprovedMrtd(value: string): string {\n  const mrtd = typeof value === \"string\" ? value.toLowerCase() : \"\";\n  if (!MRTD_HEX.test(mrtd)) {\n    throw new Error(\"an approved 96-character production MRTD is required\");\n  }\n  return mrtd;\n}\n\n/** Build the active Azure production policy for a concrete coordinator URL. */\nexport function createAzureProductionEndpoint({\n  wsUrl,\n  expectedHostname,\n  approvedBinaryHash,\n  approvedMrtd = AZURE_PROD_COORDINATOR_MRTD,\n}: {\n  readonly wsUrl: string;\n  readonly expectedHostname: string;\n  readonly approvedBinaryHash: string;\n  readonly approvedMrtd?: string;\n}): CoordinatorEndpoint {\n  const binaryHash = assertApprovedBinaryHash(approvedBinaryHash);\n  const mrtd = assertApprovedMrtd(approvedMrtd);\n  return {\n    wsUrl,\n    expectedHostname,\n    releasePin: { ...AZURE_PROD_RELEASE_PIN, mrtd, binaryHash },\n    requiredMode: \"prod\",\n  };\n}\n\n/** Build the explicit private dev/test policy. */\nexport function createDevelopmentEndpoint({\n  wsUrl,\n  expectedHostname,\n  allowMissingDcapCollateral,\n  includeAzureMaaTrust,\n}: {\n  readonly wsUrl: string;\n  readonly expectedHostname: string;\n  readonly allowMissingDcapCollateral?: boolean;\n  readonly includeAzureMaaTrust?: boolean;\n}): CoordinatorEndpoint {\n  return {\n    wsUrl,\n    expectedHostname,\n    releasePin: {\n      ...PLACEHOLDER_RELEASE_PIN,\n      ...(includeAzureMaaTrust === true\n        ? {\n            azureMaa: {\n              issuer: AZURE_PROD_MAA_TRUST.issuer,\n              jwksUrl: AZURE_PROD_MAA_TRUST.jwksUrl,\n              policyHash: AZURE_PROD_MAA_TRUST.policyHash,\n            } satisfies AzureMaaPin,\n          }\n        : {}),\n      ...(allowMissingDcapCollateral === true ? { allowMissingDcapCollateral: true } : {}),\n    },\n    requiredMode: \"dev\",\n  };\n}\n","/** Build-time projection of the approved coordinator binary hash. */\n\ndeclare const __INVISIBLE_SDK_PRODUCTION_BINARY_HASH__: string | undefined;\n\nexport const APPROVED_PRODUCTION_COORDINATOR_BINARY_HASH =\n  typeof __INVISIBLE_SDK_PRODUCTION_BINARY_HASH__ === \"string\"\n    ? __INVISIBLE_SDK_PRODUCTION_BINARY_HASH__.toLowerCase()\n    : \"\";\n","/** Build-time projection of the approved production coordinator MRTD. */\n\ndeclare const __INVISIBLE_SDK_PRODUCTION_MRTD__: string | undefined;\n\nexport const APPROVED_PRODUCTION_COORDINATOR_MRTD =\n  typeof __INVISIBLE_SDK_PRODUCTION_MRTD__ === \"string\"\n    ? __INVISIBLE_SDK_PRODUCTION_MRTD__.toLowerCase()\n    : \"\";\n","import { APPROVED_PRODUCTION_COORDINATOR_BINARY_HASH } from \"../presets/productionBinaryHash.js\";\nimport { APPROVED_PRODUCTION_COORDINATOR_MRTD } from \"../presets/productionMrtd.js\";\nimport { APPROVED_PRODUCTION_RUNTIME_PROFILE } from \"../presets/productionRuntimeProfile.js\";\nimport type { CoordinatorRuntimeProfile } from \"../attestation/verifier.js\";\n\nexport interface PublicProductionReleasePolicy {\n  readonly expectedMrtd: string;\n  readonly expectedBinaryHash: string;\n  readonly expectedRuntimeProfile: CoordinatorRuntimeProfile;\n}\n\n/** The build-bound production tuple used by the public session constructor. */\nexport function publicProductionReleasePolicy(): PublicProductionReleasePolicy {\n  return {\n    expectedMrtd: APPROVED_PRODUCTION_COORDINATOR_MRTD,\n    expectedBinaryHash: APPROVED_PRODUCTION_COORDINATOR_BINARY_HASH,\n    expectedRuntimeProfile: APPROVED_PRODUCTION_RUNTIME_PROFILE,\n  };\n}\n","import type { Session } from \"../core/session.js\";\nimport { createAzureProductionEndpoint } from \"../presets/production.js\";\nimport { isLoopbackUrl } from \"./secureChannel.js\";\nimport { publicProductionReleasePolicy } from \"./publicReleasePolicy.js\";\nimport {\n  closeSession,\n  createSessionInternal,\n  type CreateSessionOptions as InternalCreateSessionOptions,\n} from \"./createSession.js\";\n\nconst PUBLIC_SESSION_OPTION_KEYS = new Set([\n  \"coordinatorUrl\",\n  \"storage\",\n  \"wallet\",\n  \"clientPersistence\",\n]);\nconst PUBLIC_COORDINATOR_URL_PROTOCOL = \"wss:\";\nconst PUBLIC_COORDINATOR_URL_ERROR =\n  \"public SDK createSession requires a non-loopback wss:// coordinatorUrl\";\n\nexport interface PublicCreateSessionOptions {\n  readonly coordinatorUrl: string;\n  readonly storage?: unknown;\n  readonly wallet?: unknown;\n  /** Opt into SDK-owned normal-user transfer persistence. */\n  readonly clientPersistence?: boolean;\n}\n\n/**\n * Open a production-only public SDK session.\n *\n * The caller supplies only the route and public adapters. The Azure\n * production release policy is embedded by the selected SDK build.\n */\nexport async function createSession(options: PublicCreateSessionOptions): Promise<Session> {\n  assertPublicOptions(options);\n  const parsedUrl = parsePublicCoordinatorUrl(options.coordinatorUrl);\n  const releasePolicy = publicProductionReleasePolicy();\n  const endpoint = createAzureProductionEndpoint({\n    wsUrl: options.coordinatorUrl,\n    expectedHostname: parsedUrl.hostname,\n    approvedBinaryHash: releasePolicy.expectedBinaryHash,\n    approvedMrtd: releasePolicy.expectedMrtd,\n  });\n\n  const internalOptions: InternalCreateSessionOptions = {\n    coordinator: { endpoints: [endpoint] },\n    ...(options.storage === undefined ? {} : { storage: options.storage }),\n    ...(options.wallet === undefined ? {} : { wallet: options.wallet }),\n    ...(options.clientPersistence === undefined\n      ? {}\n      : { clientPersistence: options.clientPersistence }),\n  };\n  return createSessionInternal(internalOptions);\n}\n\nexport { closeSession };\n\nfunction assertPublicOptions(options: unknown): asserts options is PublicCreateSessionOptions {\n  if (typeof options !== \"object\" || options === null || Array.isArray(options)) {\n    throw new TypeError(\"public SDK createSession options must be an object\");\n  }\n  for (const key of Object.keys(options)) {\n    if (!PUBLIC_SESSION_OPTION_KEYS.has(key)) {\n      throw new Error(`public SDK createSession does not accept option ${key}`);\n    }\n  }\n  const coordinatorUrl = (options as { coordinatorUrl?: unknown }).coordinatorUrl;\n  if (typeof coordinatorUrl !== \"string\") {\n    throw new TypeError(\"public SDK createSession requires coordinatorUrl\");\n  }\n  const clientPersistence = (options as { clientPersistence?: unknown }).clientPersistence;\n  if (clientPersistence !== undefined && typeof clientPersistence !== \"boolean\") {\n    throw new TypeError(\"public SDK createSession clientPersistence must be a boolean\");\n  }\n}\n\nfunction parsePublicCoordinatorUrl(value: string): URL {\n  let parsed: URL;\n  try {\n    parsed = new URL(value);\n  } catch (cause) {\n    const error = new Error(PUBLIC_COORDINATOR_URL_ERROR);\n    (error as { cause?: unknown }).cause = cause;\n    throw error;\n  }\n  if (parsed.protocol !== PUBLIC_COORDINATOR_URL_PROTOCOL || isLoopbackUrl(value)) {\n    throw new Error(PUBLIC_COORDINATOR_URL_ERROR);\n  }\n  return parsed;\n}\n","import type { Session } from \"../core/session.js\";\nimport type { AttestationResult } from \"../transport/handshake.js\";\nimport type { Unsubscribe } from \"../transport/types.js\";\nimport { reattestSerialized } from \"./reattest.js\";\nimport { failSessionClosed, getSessionState } from \"../session/state.js\";\nimport {\n  publicProductionReleasePolicy,\n  type PublicProductionReleasePolicy,\n} from \"../session/publicReleasePolicy.js\";\n\nexport type { AttestationResult } from \"../transport/handshake.js\";\n\nexport interface PublicAttestationPolicy {\n  readonly expectedMrtd: string;\n  readonly expectedBinaryHash?: string;\n  readonly expectedRuntimeProfile?:\n    | \"prod-hardened\"\n    | \"prod-devnet-simplified\"\n    | \"prod-devnet-simplified-locked\"\n    | \"azure-tdx-v0-agentless\";\n  readonly expectedRuntimeMeasurements?: {\n    readonly rtmr0: string;\n    readonly rtmr1: string;\n    readonly rtmr2: string;\n    readonly rtmr3: string;\n  };\n  readonly intelRootFingerprint?: string;\n  readonly azureMaa?: {\n    readonly expectedIssuer: string;\n    readonly expectedJwksUrl: string;\n    readonly expectedPolicyHash: string;\n  };\n}\n\n/** Public attestation read controls. Policy construction remains internal. */\nexport const attestation = {\n  productionPolicy(): PublicProductionReleasePolicy {\n    return publicProductionReleasePolicy();\n  },\n\n  async assertValid(session: Session): Promise<AttestationResult> {\n    const state = getSessionState(session);\n    const endpoint = state.pool.endpoints[0]!;\n    try {\n      const result = await reattestSerialized(state, endpoint, state.pool.noiseTransportTimeoutMs);\n      state.attestation = result;\n      state.attested = true;\n      return result;\n    } catch (err) {\n      const error = err instanceof Error ? err : new Error(String(err));\n      failSessionClosed(state, error);\n      throw error;\n    }\n  },\n\n  current(session: Session): AttestationResult | null {\n    return getSessionState(session).attestation;\n  },\n\n  policy(session: Session): PublicAttestationPolicy {\n    const pin = getSessionState(session).pool.endpoints[0]!.releasePin;\n    return {\n      expectedMrtd: pin.mrtd,\n      ...(pin.binaryHash === undefined ? {} : { expectedBinaryHash: pin.binaryHash }),\n      ...(pin.runtimeProfile === undefined ? {} : { expectedRuntimeProfile: pin.runtimeProfile }),\n      ...(pin.runtimeMeasurements === undefined\n        ? {}\n        : { expectedRuntimeMeasurements: pin.runtimeMeasurements }),\n      ...(pin.intelRootFingerprint === undefined\n        ? {}\n        : { intelRootFingerprint: pin.intelRootFingerprint }),\n      ...(pin.azureMaa === undefined\n        ? {}\n        : {\n            azureMaa: {\n              expectedIssuer: pin.azureMaa.issuer,\n              expectedJwksUrl: pin.azureMaa.jwksUrl,\n              expectedPolicyHash: pin.azureMaa.policyHash,\n            },\n          }),\n    };\n  },\n\n  onPolicyViolation(session: Session, handler: (error: Error) => void): Unsubscribe {\n    const handlers = getSessionState(session).policyViolationHandlers;\n    handlers.add(handler);\n    return () => handlers.delete(handler);\n  },\n};\n","import { NotImplementedError } from \"../core/errors.js\";\nimport type { Session } from \"../core/session.js\";\nimport { getSessionState } from \"../session/state.js\";\n\nexport interface PublicCoordinatorEndpoint {\n  readonly coordinatorUrl: string;\n  readonly roleHint?: \"leader\" | \"watcher\";\n  readonly weight?: number;\n}\n\nexport interface CoordinatorVersion {\n  readonly mode: \"prod\" | \"dev\";\n  readonly protocolVersion: string;\n  readonly schemaVersion: string;\n  readonly hostname: string;\n  readonly leaderEpoch: number;\n}\n\nexport const coordinator = {\n  endpoints(session: Session): readonly PublicCoordinatorEndpoint[] {\n    return getSessionState(session).pool.endpoints.map((endpoint) => ({\n      coordinatorUrl: endpoint.wsUrl,\n      ...(endpoint.roleHint === undefined ? {} : { roleHint: endpoint.roleHint }),\n      ...(endpoint.weight === undefined ? {} : { weight: endpoint.weight }),\n    }));\n  },\n\n  currentLeader(_session: Session): Promise<PublicCoordinatorEndpoint | null> {\n    return Promise.reject(new NotImplementedError(\"coordinator.currentLeader\"));\n  },\n\n  version(_session: Session): Promise<CoordinatorVersion> {\n    return Promise.reject(new NotImplementedError(\"coordinator.version\"));\n  },\n\n  forceFailover(_session: Session): Promise<void> {\n    return Promise.reject(new NotImplementedError(\"coordinator.forceFailover\"));\n  },\n};\n"]}

package/dist/lp.js

@@ -1,6 +1,6 @@
-import { isValidLpPositionId, LP_DEFAULT_REFILL_BATCH_SIZE, LP_DEFAULT_TARGET_SHARDS, LP_MAX_TARGET_SHARDS, LP_MAX_REFILL_BATCH_SIZE } from './chunk-4X5OCCQW.js';
+import { isValidLpPositionId, LP_DEFAULT_REFILL_BATCH_SIZE, LP_DEFAULT_TARGET_SHARDS, LP_MAX_TARGET_SHARDS, LP_MAX_REFILL_BATCH_SIZE } from './chunk-IG6JJFR2.js';
 import { publicKey, assertAttested, lamports } from './chunk-EBWTAXNT.js';
-import { requestEnvelope, CoordinatorMessageType } from './chunk-3MDHAS4D.js';
+import { requestEnvelope, CoordinatorMessageType } from './chunk-MZKJU3UA.js';
 import { getSessionState } from './chunk-HJFMDMPY.js';
 import { CommandError, WalletError, TransportError, PolicyValidationError, RoutingError, LpLifecycleError } from './chunk-QRN46R3F.js';
 import './chunk-VR6T6OJS.js';
@@ -955,7 +955,7 @@ function randomBytes(length) {
   return bytes;
 }
 function loadProtocol() {
-  protocolPromise ??= import('./coordinator-PEWHNZ7I.js');
+  protocolPromise ??= import('./coordinator-E2TS6NR2.js');
   return protocolPromise;
 }
 

package/dist/user.js

@@ -1,9 +1,9 @@
-import { scheduledPayoutWindowSeconds } from './chunk-3TGQ4CZ3.js';
+import { scheduledPayoutWindowSeconds } from './chunk-MPNVF727.js';
 import { validatePayoutPolicyShape, formatAjvErrors, persistTransferStatus, createSession, disabledClientPersistence, readPersistedTransferForResume, persistTransferReady, createExponentialBackoff, persistTransferTerminal, persistTransferRecoveryCode, persistTransferAllocation, persistTransferDkgMetadata } from './chunk-Y7AK6RBV.js';
 export { getPersistedTransfer, listPersistedTransfers, purgePersistedTransfers, removePersistedTransfer } from './chunk-Y7AK6RBV.js';
-import { PRODUCT_MAX_ENTRY_LAMPORTS, PRODUCT_MIN_ENTRY_LAMPORTS } from './chunk-4X5OCCQW.js';
+import { PRODUCT_MAX_ENTRY_LAMPORTS, PRODUCT_MIN_ENTRY_LAMPORTS } from './chunk-IG6JJFR2.js';
 import { assertAttested, publicKey, solanaAddressFromPublicKeyBytes } from './chunk-EBWTAXNT.js';
-import { requestEnvelope, CoordinatorMessageType, onEnvelope, closeProtocolRuntime, EnvelopeKind } from './chunk-3MDHAS4D.js';
+import { requestEnvelope, CoordinatorMessageType, onEnvelope, closeProtocolRuntime, EnvelopeKind } from './chunk-MZKJU3UA.js';
 import { getSessionState } from './chunk-HJFMDMPY.js';
 import './chunk-DCTYBUY3.js';
 import { PolicyValidationError, CommandError, StorageError, TransportError, normalizeError, InvalidDepositAmountError, AttestationError, RoutingError } from './chunk-QRN46R3F.js';
@@ -172,11 +172,11 @@ function recoveryCodeFromUserInput(input) {
 var protocolPromise = null;
 var frostRuntimePromise = null;
 function loadProtocol() {
-  protocolPromise ??= import('./coordinator-PEWHNZ7I.js');
+  protocolPromise ??= import('./coordinator-E2TS6NR2.js');
   return protocolPromise;
 }
 function loadFrostRuntime() {
-  frostRuntimePromise ??= import('./frostRuntime-JESDHN6O.js');
+  frostRuntimePromise ??= import('./frostRuntime-6FTPKUCP.js');
   return frostRuntimePromise;
 }
 function loadFrost() {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@invisible-labs/sdk",
-  "version": "0.6.0-devnet.5",
+  "version": "0.8.0-devnet",
   "description": "TypeScript SDK for building private SOL transfer integrations with Invisible.",
   "type": "module",
   "main": "./dist/index.js",