@invisible-labs/sdk 0.7.0-devnet → 0.9.0-devnet

package/dist/{chunk-EBWTAXNT.js → chunk-EPWTRF5U.js}

@@ -1,4 +1,4 @@
-import { PolicyValidationError, AttestationError } from './chunk-QRN46R3F.js';
+import { PolicyValidationError, AttestationError } from './chunk-RWKG7N7I.js';
 
 // src/core/solanaAddress.ts
 var SOLANA_PUBLIC_KEY_BYTE_LENGTH = 32;
@@ -119,5 +119,5 @@ function assertAttested(session) {
 }
 
 export { assertAttested, hex, lamports, publicKey, requestId, solanaAddressFromPublicKeyBytes };
-//# sourceMappingURL=chunk-EBWTAXNT.js.map
-//# sourceMappingURL=chunk-EBWTAXNT.js.map
+//# sourceMappingURL=chunk-EPWTRF5U.js.map
+//# sourceMappingURL=chunk-EPWTRF5U.js.map

package/dist/{chunk-EBWTAXNT.js.map → chunk-EPWTRF5U.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/core/solanaAddress.ts","../src/core/brands.ts","../src/session/guards.ts"],"names":[],"mappings":";;;AAEA,IAAM,6BAAA,GAAgC,EAAA;AACtC,IAAM,yBAAA,GAA4B,EAAA;AAClC,IAAM,yBAAA,GAA4B,EAAA;AAClC,IAAM,eAAA,GAAkB,4DAAA;AACxB,IAAM,YAAA,GAAe,MAAA,CAAO,eAAA,CAAgB,MAAM,CAAA;AAClD,IAAM,wBAAA,GAA2B,GAAA;AACjC,IAAM,SAAA,GAAY,KAAA;AAClB,IAAM,eAAA,GAAkB,EAAA;AACxB,IAAM,2BAAA,GAAA,CAA+B,EAAA,IAAO,MAAA,CAAO,6BAA6B,IAAI,EAAA,IAAO,EAAA;AAE3F,IAAM,gBAAgB,IAAI,GAAA;AAAA,EACxB,KAAA,CAAM,KAAK,eAAA,EAAiB,CAAC,WAAW,KAAA,KAAU,CAAC,SAAA,EAAW,KAAK,CAAC;AACtE,CAAA;AAEO,SAAS,6BAA6B,KAAA,EAAyC;AACpF,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,MAAM,IAAI,qBAAA;AAAA,MACR,6BAAA;AAAA,MACA,CAAA,+CAAA,EAAkD,OAAO,KAAK,CAAA;AAAA,KAChE;AAAA,EACF;AACA,EAAA,IACE,KAAA,CAAM,MAAK,KAAM,KAAA,IACjB,MAAM,MAAA,GAAS,yBAAA,IACf,KAAA,CAAM,MAAA,GAAS,yBAAA,EACf;AACA,IAAA,8BAAA,CAA+B,KAAK,CAAA;AAAA,EACtC;AAEA,EAAA,MAAM,OAAA,GAAU,0BAA0B,KAAK,CAAA;AAC/C,EAAA,IAAI,YAAA,CAAa,OAAO,CAAA,KAAM,KAAA,EAAO;AACnC,IAAA,8BAAA,CAA+B,KAAK,CAAA;AAAA,EACtC;AACF;AAGO,SAAS,gCAAgC,KAAA,EAA2B;AACzE,EAAA,IAAI,KAAA,CAAM,eAAe,6BAAA,EAA+B;AACtD,IAAA,MAAM,IAAI,qBAAA;AAAA,MACR,6BAAA;AAAA,MACA,CAAA,0BAAA,EAA6B,6BAA6B,CAAA,iBAAA,EAAoB,KAAA,CAAM,UAAU,CAAA;AAAA,KAChG;AAAA,EACF;AACA,EAAA,OAAO,aAAa,KAAK,CAAA;AAC3B;AAEA,SAAS,0BAA0B,KAAA,EAA2B;AAC5D,EAAA,IAAI,OAAA,GAAU,EAAA;AACd,EAAA,KAAA,MAAW,aAAa,KAAA,EAAO;AAC7B,IAAA,MAAM,KAAA,GAAQ,aAAA,CAAc,GAAA,CAAI,SAAS,CAAA;AACzC,IAAA,IAAI,UAAU,MAAA,EAAW;AACvB,MAAA,8BAAA,CAA+B,KAAK,CAAA;AAAA,IACtC;AACA,IAAA,OAAA,GAAU,OAAA,GAAU,YAAA,GAAe,MAAA,CAAO,KAAK,CAAA;AAC/C,IAAA,IAAI,UAAU,2BAAA,EAA6B;AACzC,MAAA,8BAAA,CAA+B,KAAK,CAAA;AAAA,IACtC;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,6BAA6B,CAAA;AAC1D,EAAA,KAAA,IAAS,QAAQ,6BAAA,GAAgC,CAAA,EAAG,KAAA,IAAS,CAAA,EAAG,SAAS,CAAA,EAAG;AAC1E,IAAA,KAAA,CAAM,KAAK,CAAA,GAAI,MAAA,CAAO,OAAA,GAAU,SAAS,CAAA;AACzC,IAAA,OAAA,KAAY,eAAA;AAAA,EACd;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,aAAa,KAAA,EAA2B;AAC/C,EAAA,IAAI,YAAA,GAAe,CAAA;AACnB,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,SAAS,CAAA,EAAG;AAChB,IAAA,YAAA,IAAgB,CAAA;AAAA,EAClB;AAEA,EAAA,IAAI,KAAA,GAAQ,EAAA;AACZ,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,KAAA,GAAA,CAAS,KAAA,IAAS,eAAA,IAAmB,MAAA,CAAO,IAAI,CAAA;AAAA,EAClD;AAEA,EAAA,IAAI,OAAA,GAAU,EAAA;AACd,EAAA,OAAO,QAAQ,EAAA,EAAI;AACjB,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,GAAQ,YAAY,CAAA;AACzC,IAAA,OAAA,GAAU,eAAA,CAAgB,KAAK,CAAA,GAAK,OAAA;AACpC,IAAA,KAAA,IAAS,YAAA;AAAA,EACX;AAEA,EAAA,OAAO,wBAAA,CAAyB,MAAA,CAAO,YAAY,CAAA,GAAI,OAAA;AACzD;AAEA,SAAS,+BAA+B,KAAA,EAAsB;AAC5D,EAAA,MAAM,IAAI,qBAAA;AAAA,IACR,6BAAA;AAAA,IACA,mEAAmE,KAAK,CAAA;AAAA,GAC1E;AACF;;;AC3DO,SAAS,SAAS,KAAA,EAAyB;AAChD,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,KAAK,CAAA,IAAK,QAAQ,CAAA,EAAG;AAC7C,IAAA,MAAM,IAAI,qBAAA;AAAA,MACR,gBAAA;AAAA,MACA,CAAA,uDAAA,EAA0D,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,KACzE;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AASO,SAAS,UAAU,KAAA,EAA0B;AAClD,EAAA,4BAAA,CAA6B,KAAK,CAAA;AAClC,EAAA,OAAO,KAAA;AACT;AAQO,SAAS,UAAU,KAAA,EAA0B;AAClD,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,MAAM,sCAAsC,CAAA;AAAA,EACxD;AACA,EAAA,OAAO,KAAA;AACT;AAOO,SAAS,IAAI,KAAA,EAAoB;AACtC,EAAA,IAAI,CAAC,aAAA,CAAc,IAAA,CAAK,KAAK,CAAA,EAAG;AAC9B,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mBAAA,EAAsB,KAAK,CAAA,CAAE,CAAA;AAAA,EAC/C;AACA,EAAA,OAAO,KAAA;AACT;;;ACpEO,SAAS,eAAe,OAAA,EAAwB;AACrD,EAAA,IAAI,CAAC,QAAQ,QAAA,EAAU;AACrB,IAAA,MAAM,IAAI,gBAAA;AAAA,MACR,cAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF","file":"chunk-EBWTAXNT.js","sourcesContent":["import { PolicyValidationError } from \"./errors.js\";\n\nconst SOLANA_PUBLIC_KEY_BYTE_LENGTH = 32;\nconst SOLANA_ADDRESS_MIN_LENGTH = 32;\nconst SOLANA_ADDRESS_MAX_LENGTH = 44;\nconst BASE58_ALPHABET = \"123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz\";\nconst BASE58_RADIX = BigInt(BASE58_ALPHABET.length);\nconst BASE58_LEADING_ZERO_CHAR = \"1\";\nconst BYTE_MASK = 0xffn;\nconst BYTE_RADIX_BITS = 8n;\nconst MAX_SOLANA_PUBLIC_KEY_VALUE = (1n << (BigInt(SOLANA_PUBLIC_KEY_BYTE_LENGTH) * 8n)) - 1n;\n\nconst BASE58_DIGITS = new Map<string, number>(\n  Array.from(BASE58_ALPHABET, (character, index) => [character, index]),\n);\n\nexport function assertCanonicalSolanaAddress(value: unknown): asserts value is string {\n  if (typeof value !== \"string\") {\n    throw new PolicyValidationError(\n      \"INVALID_DESTINATION_ADDRESS\",\n      `destination address must be a string, received ${typeof value}`,\n    );\n  }\n  if (\n    value.trim() !== value ||\n    value.length < SOLANA_ADDRESS_MIN_LENGTH ||\n    value.length > SOLANA_ADDRESS_MAX_LENGTH\n  ) {\n    throwInvalidDestinationAddress(value);\n  }\n\n  const decoded = decodeBase58SolanaAddress(value);\n  if (encodeBase58(decoded) !== value) {\n    throwInvalidDestinationAddress(value);\n  }\n}\n\n/** Encode a 32-byte Ed25519 public key as its canonical Solana address. */\nexport function solanaAddressFromPublicKeyBytes(bytes: Uint8Array): string {\n  if (bytes.byteLength !== SOLANA_PUBLIC_KEY_BYTE_LENGTH) {\n    throw new PolicyValidationError(\n      \"INVALID_DESTINATION_ADDRESS\",\n      `Solana public key must be ${SOLANA_PUBLIC_KEY_BYTE_LENGTH} bytes, received ${bytes.byteLength}`,\n    );\n  }\n  return encodeBase58(bytes);\n}\n\nfunction decodeBase58SolanaAddress(value: string): Uint8Array {\n  let decoded = 0n;\n  for (const character of value) {\n    const digit = BASE58_DIGITS.get(character);\n    if (digit === undefined) {\n      throwInvalidDestinationAddress(value);\n    }\n    decoded = decoded * BASE58_RADIX + BigInt(digit);\n    if (decoded > MAX_SOLANA_PUBLIC_KEY_VALUE) {\n      throwInvalidDestinationAddress(value);\n    }\n  }\n\n  const bytes = new Uint8Array(SOLANA_PUBLIC_KEY_BYTE_LENGTH);\n  for (let index = SOLANA_PUBLIC_KEY_BYTE_LENGTH - 1; index >= 0; index -= 1) {\n    bytes[index] = Number(decoded & BYTE_MASK);\n    decoded >>= BYTE_RADIX_BITS;\n  }\n  return bytes;\n}\n\nfunction encodeBase58(bytes: Uint8Array): string {\n  let leadingZeros = 0;\n  for (const byte of bytes) {\n    if (byte !== 0) break;\n    leadingZeros += 1;\n  }\n\n  let value = 0n;\n  for (const byte of bytes) {\n    value = (value << BYTE_RADIX_BITS) + BigInt(byte);\n  }\n\n  let encoded = \"\";\n  while (value > 0n) {\n    const digit = Number(value % BASE58_RADIX);\n    encoded = BASE58_ALPHABET[digit]! + encoded;\n    value /= BASE58_RADIX;\n  }\n\n  return BASE58_LEADING_ZERO_CHAR.repeat(leadingZeros) + encoded;\n}\n\nfunction throwInvalidDestinationAddress(value: string): never {\n  throw new PolicyValidationError(\n    \"INVALID_DESTINATION_ADDRESS\",\n    `destination address must be a canonical 32-byte Solana address: ${value}`,\n  );\n}\n","/**\n * Branded scalar types.\n *\n * Branding makes structurally-identical primitives (a lamport amount, a base58\n * address, a correlation id) non-interchangeable at the type level, so the\n * compiler catches \"passed a request id where an address was expected\" before\n * it reaches the wire. The brand exists only at compile time; at runtime these\n * are plain `number` / `string`.\n *\n * Construct branded values through the smart constructors here. These\n * constructors enforce scalar-level invariants; payout-policy semantics stay in\n * the validation module.\n */\n\nimport { PolicyValidationError } from \"./errors.js\";\nimport { assertCanonicalSolanaAddress } from \"./solanaAddress.js\";\n\n/** Attach a compile-time-only brand `B` to base type `T`. */\nexport type Brand<T, B extends string> = T & { readonly __brand: B };\n\n/** A non-negative integer amount of lamports (1 SOL = 1_000_000_000 lamports). */\nexport type Lamports = Brand<number, \"Lamports\">;\n\n/** A Solana account address as base58 text. */\nexport type PublicKey = Brand<string, \"PublicKey\">;\n\n/** A client-generated correlation id for one logical command. */\nexport type RequestId = Brand<string, \"RequestId\">;\n\n/** Lowercase hexadecimal text (no `0x` prefix). */\nexport type Hex = Brand<string, \"Hex\">;\n\n/**\n * Brand a number as {@link Lamports}.\n *\n * @throws PolicyValidationError `INVALID_AMOUNT` if not a non-negative safe integer.\n */\nexport function lamports(value: number): Lamports {\n  if (!Number.isSafeInteger(value) || value < 0) {\n    throw new PolicyValidationError(\n      \"INVALID_AMOUNT\",\n      `lamports must be a non-negative safe integer, received ${String(value)}`,\n    );\n  }\n  return value as Lamports;\n}\n\n/**\n * Brand a string as a {@link PublicKey}.\n *\n * Enforces canonical base58 encoding of a 32-byte Solana public key.\n *\n * @throws PolicyValidationError `INVALID_DESTINATION_ADDRESS` if obviously malformed.\n */\nexport function publicKey(value: string): PublicKey {\n  assertCanonicalSolanaAddress(value);\n  return value as PublicKey;\n}\n\n/**\n * Brand a non-empty string as a {@link RequestId}.\n *\n * @throws PolicyValidationError `INVALID_AMOUNT` is not appropriate here; an empty\n *   id is a programming error, so this throws a plain `Error`.\n */\nexport function requestId(value: string): RequestId {\n  if (value.length === 0) {\n    throw new Error(\"requestId must be a non-empty string\");\n  }\n  return value as RequestId;\n}\n\n/**\n * Brand a string as lowercase {@link Hex}.\n *\n * @throws Error if the string contains non-hex characters.\n */\nexport function hex(value: string): Hex {\n  if (!/^[0-9a-f]*$/.test(value)) {\n    throw new Error(`not lowercase hex: ${value}`);\n  }\n  return value as Hex;\n}\n","/**\n * Session guards used by mutating commands.\n */\n\nimport { AttestationError } from \"../core/errors.js\";\nimport type { Session } from \"../core/session.js\";\n\n/**\n * Assert the session has passed attestation. Every mutating actor command calls\n * this before touching the wire, so an unattested session can never sign or\n * send sensitive material.\n *\n * @throws AttestationError `NOT_ATTESTED` when the session is not attested.\n */\nexport function assertAttested(session: Session): void {\n  if (!session.attested) {\n    throw new AttestationError(\n      \"NOT_ATTESTED\",\n      \"session is not attested; sensitive commands are blocked until attestation completes\",\n    );\n  }\n}\n"]}
+{"version":3,"sources":["../src/core/solanaAddress.ts","../src/core/brands.ts","../src/session/guards.ts"],"names":[],"mappings":";;;AAEA,IAAM,6BAAA,GAAgC,EAAA;AACtC,IAAM,yBAAA,GAA4B,EAAA;AAClC,IAAM,yBAAA,GAA4B,EAAA;AAClC,IAAM,eAAA,GAAkB,4DAAA;AACxB,IAAM,YAAA,GAAe,MAAA,CAAO,eAAA,CAAgB,MAAM,CAAA;AAClD,IAAM,wBAAA,GAA2B,GAAA;AACjC,IAAM,SAAA,GAAY,KAAA;AAClB,IAAM,eAAA,GAAkB,EAAA;AACxB,IAAM,2BAAA,GAAA,CAA+B,EAAA,IAAO,MAAA,CAAO,6BAA6B,IAAI,EAAA,IAAO,EAAA;AAE3F,IAAM,gBAAgB,IAAI,GAAA;AAAA,EACxB,KAAA,CAAM,KAAK,eAAA,EAAiB,CAAC,WAAW,KAAA,KAAU,CAAC,SAAA,EAAW,KAAK,CAAC;AACtE,CAAA;AAEO,SAAS,6BAA6B,KAAA,EAAyC;AACpF,EAAA,IAAI,OAAO,UAAU,QAAA,EAAU;AAC7B,IAAA,MAAM,IAAI,qBAAA;AAAA,MACR,6BAAA;AAAA,MACA,CAAA,+CAAA,EAAkD,OAAO,KAAK,CAAA;AAAA,KAChE;AAAA,EACF;AACA,EAAA,IACE,KAAA,CAAM,MAAK,KAAM,KAAA,IACjB,MAAM,MAAA,GAAS,yBAAA,IACf,KAAA,CAAM,MAAA,GAAS,yBAAA,EACf;AACA,IAAA,8BAAA,CAA+B,KAAK,CAAA;AAAA,EACtC;AAEA,EAAA,MAAM,OAAA,GAAU,0BAA0B,KAAK,CAAA;AAC/C,EAAA,IAAI,YAAA,CAAa,OAAO,CAAA,KAAM,KAAA,EAAO;AACnC,IAAA,8BAAA,CAA+B,KAAK,CAAA;AAAA,EACtC;AACF;AAGO,SAAS,gCAAgC,KAAA,EAA2B;AACzE,EAAA,IAAI,KAAA,CAAM,eAAe,6BAAA,EAA+B;AACtD,IAAA,MAAM,IAAI,qBAAA;AAAA,MACR,6BAAA;AAAA,MACA,CAAA,0BAAA,EAA6B,6BAA6B,CAAA,iBAAA,EAAoB,KAAA,CAAM,UAAU,CAAA;AAAA,KAChG;AAAA,EACF;AACA,EAAA,OAAO,aAAa,KAAK,CAAA;AAC3B;AAEA,SAAS,0BAA0B,KAAA,EAA2B;AAC5D,EAAA,IAAI,OAAA,GAAU,EAAA;AACd,EAAA,KAAA,MAAW,aAAa,KAAA,EAAO;AAC7B,IAAA,MAAM,KAAA,GAAQ,aAAA,CAAc,GAAA,CAAI,SAAS,CAAA;AACzC,IAAA,IAAI,UAAU,MAAA,EAAW;AACvB,MAAA,8BAAA,CAA+B,KAAK,CAAA;AAAA,IACtC;AACA,IAAA,OAAA,GAAU,OAAA,GAAU,YAAA,GAAe,MAAA,CAAO,KAAK,CAAA;AAC/C,IAAA,IAAI,UAAU,2BAAA,EAA6B;AACzC,MAAA,8BAAA,CAA+B,KAAK,CAAA;AAAA,IACtC;AAAA,EACF;AAEA,EAAA,MAAM,KAAA,GAAQ,IAAI,UAAA,CAAW,6BAA6B,CAAA;AAC1D,EAAA,KAAA,IAAS,QAAQ,6BAAA,GAAgC,CAAA,EAAG,KAAA,IAAS,CAAA,EAAG,SAAS,CAAA,EAAG;AAC1E,IAAA,KAAA,CAAM,KAAK,CAAA,GAAI,MAAA,CAAO,OAAA,GAAU,SAAS,CAAA;AACzC,IAAA,OAAA,KAAY,eAAA;AAAA,EACd;AACA,EAAA,OAAO,KAAA;AACT;AAEA,SAAS,aAAa,KAAA,EAA2B;AAC/C,EAAA,IAAI,YAAA,GAAe,CAAA;AACnB,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,IAAI,SAAS,CAAA,EAAG;AAChB,IAAA,YAAA,IAAgB,CAAA;AAAA,EAClB;AAEA,EAAA,IAAI,KAAA,GAAQ,EAAA;AACZ,EAAA,KAAA,MAAW,QAAQ,KAAA,EAAO;AACxB,IAAA,KAAA,GAAA,CAAS,KAAA,IAAS,eAAA,IAAmB,MAAA,CAAO,IAAI,CAAA;AAAA,EAClD;AAEA,EAAA,IAAI,OAAA,GAAU,EAAA;AACd,EAAA,OAAO,QAAQ,EAAA,EAAI;AACjB,IAAA,MAAM,KAAA,GAAQ,MAAA,CAAO,KAAA,GAAQ,YAAY,CAAA;AACzC,IAAA,OAAA,GAAU,eAAA,CAAgB,KAAK,CAAA,GAAK,OAAA;AACpC,IAAA,KAAA,IAAS,YAAA;AAAA,EACX;AAEA,EAAA,OAAO,wBAAA,CAAyB,MAAA,CAAO,YAAY,CAAA,GAAI,OAAA;AACzD;AAEA,SAAS,+BAA+B,KAAA,EAAsB;AAC5D,EAAA,MAAM,IAAI,qBAAA;AAAA,IACR,6BAAA;AAAA,IACA,mEAAmE,KAAK,CAAA;AAAA,GAC1E;AACF;;;AC3DO,SAAS,SAAS,KAAA,EAAyB;AAChD,EAAA,IAAI,CAAC,MAAA,CAAO,aAAA,CAAc,KAAK,CAAA,IAAK,QAAQ,CAAA,EAAG;AAC7C,IAAA,MAAM,IAAI,qBAAA;AAAA,MACR,gBAAA;AAAA,MACA,CAAA,uDAAA,EAA0D,MAAA,CAAO,KAAK,CAAC,CAAA;AAAA,KACzE;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AASO,SAAS,UAAU,KAAA,EAA0B;AAClD,EAAA,4BAAA,CAA6B,KAAK,CAAA;AAClC,EAAA,OAAO,KAAA;AACT;AAQO,SAAS,UAAU,KAAA,EAA0B;AAClD,EAAA,IAAI,KAAA,CAAM,WAAW,CAAA,EAAG;AACtB,IAAA,MAAM,IAAI,MAAM,sCAAsC,CAAA;AAAA,EACxD;AACA,EAAA,OAAO,KAAA;AACT;AAOO,SAAS,IAAI,KAAA,EAAoB;AACtC,EAAA,IAAI,CAAC,aAAA,CAAc,IAAA,CAAK,KAAK,CAAA,EAAG;AAC9B,IAAA,MAAM,IAAI,KAAA,CAAM,CAAA,mBAAA,EAAsB,KAAK,CAAA,CAAE,CAAA;AAAA,EAC/C;AACA,EAAA,OAAO,KAAA;AACT;;;ACpEO,SAAS,eAAe,OAAA,EAAwB;AACrD,EAAA,IAAI,CAAC,QAAQ,QAAA,EAAU;AACrB,IAAA,MAAM,IAAI,gBAAA;AAAA,MACR,cAAA;AAAA,MACA;AAAA,KACF;AAAA,EACF;AACF","file":"chunk-EPWTRF5U.js","sourcesContent":["import { PolicyValidationError } from \"./errors.js\";\n\nconst SOLANA_PUBLIC_KEY_BYTE_LENGTH = 32;\nconst SOLANA_ADDRESS_MIN_LENGTH = 32;\nconst SOLANA_ADDRESS_MAX_LENGTH = 44;\nconst BASE58_ALPHABET = \"123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz\";\nconst BASE58_RADIX = BigInt(BASE58_ALPHABET.length);\nconst BASE58_LEADING_ZERO_CHAR = \"1\";\nconst BYTE_MASK = 0xffn;\nconst BYTE_RADIX_BITS = 8n;\nconst MAX_SOLANA_PUBLIC_KEY_VALUE = (1n << (BigInt(SOLANA_PUBLIC_KEY_BYTE_LENGTH) * 8n)) - 1n;\n\nconst BASE58_DIGITS = new Map<string, number>(\n  Array.from(BASE58_ALPHABET, (character, index) => [character, index]),\n);\n\nexport function assertCanonicalSolanaAddress(value: unknown): asserts value is string {\n  if (typeof value !== \"string\") {\n    throw new PolicyValidationError(\n      \"INVALID_DESTINATION_ADDRESS\",\n      `destination address must be a string, received ${typeof value}`,\n    );\n  }\n  if (\n    value.trim() !== value ||\n    value.length < SOLANA_ADDRESS_MIN_LENGTH ||\n    value.length > SOLANA_ADDRESS_MAX_LENGTH\n  ) {\n    throwInvalidDestinationAddress(value);\n  }\n\n  const decoded = decodeBase58SolanaAddress(value);\n  if (encodeBase58(decoded) !== value) {\n    throwInvalidDestinationAddress(value);\n  }\n}\n\n/** Encode a 32-byte Ed25519 public key as its canonical Solana address. */\nexport function solanaAddressFromPublicKeyBytes(bytes: Uint8Array): string {\n  if (bytes.byteLength !== SOLANA_PUBLIC_KEY_BYTE_LENGTH) {\n    throw new PolicyValidationError(\n      \"INVALID_DESTINATION_ADDRESS\",\n      `Solana public key must be ${SOLANA_PUBLIC_KEY_BYTE_LENGTH} bytes, received ${bytes.byteLength}`,\n    );\n  }\n  return encodeBase58(bytes);\n}\n\nfunction decodeBase58SolanaAddress(value: string): Uint8Array {\n  let decoded = 0n;\n  for (const character of value) {\n    const digit = BASE58_DIGITS.get(character);\n    if (digit === undefined) {\n      throwInvalidDestinationAddress(value);\n    }\n    decoded = decoded * BASE58_RADIX + BigInt(digit);\n    if (decoded > MAX_SOLANA_PUBLIC_KEY_VALUE) {\n      throwInvalidDestinationAddress(value);\n    }\n  }\n\n  const bytes = new Uint8Array(SOLANA_PUBLIC_KEY_BYTE_LENGTH);\n  for (let index = SOLANA_PUBLIC_KEY_BYTE_LENGTH - 1; index >= 0; index -= 1) {\n    bytes[index] = Number(decoded & BYTE_MASK);\n    decoded >>= BYTE_RADIX_BITS;\n  }\n  return bytes;\n}\n\nfunction encodeBase58(bytes: Uint8Array): string {\n  let leadingZeros = 0;\n  for (const byte of bytes) {\n    if (byte !== 0) break;\n    leadingZeros += 1;\n  }\n\n  let value = 0n;\n  for (const byte of bytes) {\n    value = (value << BYTE_RADIX_BITS) + BigInt(byte);\n  }\n\n  let encoded = \"\";\n  while (value > 0n) {\n    const digit = Number(value % BASE58_RADIX);\n    encoded = BASE58_ALPHABET[digit]! + encoded;\n    value /= BASE58_RADIX;\n  }\n\n  return BASE58_LEADING_ZERO_CHAR.repeat(leadingZeros) + encoded;\n}\n\nfunction throwInvalidDestinationAddress(value: string): never {\n  throw new PolicyValidationError(\n    \"INVALID_DESTINATION_ADDRESS\",\n    `destination address must be a canonical 32-byte Solana address: ${value}`,\n  );\n}\n","/**\n * Branded scalar types.\n *\n * Branding makes structurally-identical primitives (a lamport amount, a base58\n * address, a correlation id) non-interchangeable at the type level, so the\n * compiler catches \"passed a request id where an address was expected\" before\n * it reaches the wire. The brand exists only at compile time; at runtime these\n * are plain `number` / `string`.\n *\n * Construct branded values through the smart constructors here. These\n * constructors enforce scalar-level invariants; payout-policy semantics stay in\n * the validation module.\n */\n\nimport { PolicyValidationError } from \"./errors.js\";\nimport { assertCanonicalSolanaAddress } from \"./solanaAddress.js\";\n\n/** Attach a compile-time-only brand `B` to base type `T`. */\nexport type Brand<T, B extends string> = T & { readonly __brand: B };\n\n/** A non-negative integer amount of lamports (1 SOL = 1_000_000_000 lamports). */\nexport type Lamports = Brand<number, \"Lamports\">;\n\n/** A Solana account address as base58 text. */\nexport type PublicKey = Brand<string, \"PublicKey\">;\n\n/** A client-generated correlation id for one logical command. */\nexport type RequestId = Brand<string, \"RequestId\">;\n\n/** Lowercase hexadecimal text (no `0x` prefix). */\nexport type Hex = Brand<string, \"Hex\">;\n\n/**\n * Brand a number as {@link Lamports}.\n *\n * @throws PolicyValidationError `INVALID_AMOUNT` if not a non-negative safe integer.\n */\nexport function lamports(value: number): Lamports {\n  if (!Number.isSafeInteger(value) || value < 0) {\n    throw new PolicyValidationError(\n      \"INVALID_AMOUNT\",\n      `lamports must be a non-negative safe integer, received ${String(value)}`,\n    );\n  }\n  return value as Lamports;\n}\n\n/**\n * Brand a string as a {@link PublicKey}.\n *\n * Enforces canonical base58 encoding of a 32-byte Solana public key.\n *\n * @throws PolicyValidationError `INVALID_DESTINATION_ADDRESS` if obviously malformed.\n */\nexport function publicKey(value: string): PublicKey {\n  assertCanonicalSolanaAddress(value);\n  return value as PublicKey;\n}\n\n/**\n * Brand a non-empty string as a {@link RequestId}.\n *\n * @throws PolicyValidationError `INVALID_AMOUNT` is not appropriate here; an empty\n *   id is a programming error, so this throws a plain `Error`.\n */\nexport function requestId(value: string): RequestId {\n  if (value.length === 0) {\n    throw new Error(\"requestId must be a non-empty string\");\n  }\n  return value as RequestId;\n}\n\n/**\n * Brand a string as lowercase {@link Hex}.\n *\n * @throws Error if the string contains non-hex characters.\n */\nexport function hex(value: string): Hex {\n  if (!/^[0-9a-f]*$/.test(value)) {\n    throw new Error(`not lowercase hex: ${value}`);\n  }\n  return value as Hex;\n}\n","/**\n * Session guards used by mutating commands.\n */\n\nimport { AttestationError } from \"../core/errors.js\";\nimport type { Session } from \"../core/session.js\";\n\n/**\n * Assert the session has passed attestation. Every mutating actor command calls\n * this before touching the wire, so an unattested session can never sign or\n * send sensitive material.\n *\n * @throws AttestationError `NOT_ATTESTED` when the session is not attested.\n */\nexport function assertAttested(session: Session): void {\n  if (!session.attested) {\n    throw new AttestationError(\n      \"NOT_ATTESTED\",\n      \"session is not attested; sensitive commands are blocked until attestation completes\",\n    );\n  }\n}\n"]}

package/dist/{chunk-4X5OCCQW.js → chunk-HWRMSK7E.js}

@@ -2,8 +2,10 @@
 var LP_POSITION_ID_MIN_LENGTH = 3;
 var LP_POSITION_ID_MAX_LENGTH = 96;
 var LP_POSITION_ID_PATTERN = /^[A-Za-z0-9_-]+$/;
-var LP_DEFAULT_TARGET_SHARDS = 200;
-var LP_MAX_TARGET_SHARDS = 300;
+var LP_DEFAULT_TARGET_SHARDS = 500;
+var LP_MAX_INITIAL_SHARDS = 500;
+var LP_MAX_TOTAL_SHARDS = 4294967295;
+var LP_SHARD_PAGE_SIZE = 50;
 var LP_DEFAULT_REFILL_BATCH_SIZE = 50;
 var LP_MAX_REFILL_BATCH_SIZE = 50;
 var PRODUCT_MIN_ENTRY_LAMPORTS = 15e8;
@@ -12,6 +14,6 @@ function isValidLpPositionId(lpPositionId) {
   return lpPositionId.length >= LP_POSITION_ID_MIN_LENGTH && lpPositionId.length <= LP_POSITION_ID_MAX_LENGTH && LP_POSITION_ID_PATTERN.test(lpPositionId);
 }
 
-export { LP_DEFAULT_REFILL_BATCH_SIZE, LP_DEFAULT_TARGET_SHARDS, LP_MAX_REFILL_BATCH_SIZE, LP_MAX_TARGET_SHARDS, PRODUCT_MAX_ENTRY_LAMPORTS, PRODUCT_MIN_ENTRY_LAMPORTS, isValidLpPositionId };
-//# sourceMappingURL=chunk-4X5OCCQW.js.map
-//# sourceMappingURL=chunk-4X5OCCQW.js.map
+export { LP_DEFAULT_REFILL_BATCH_SIZE, LP_DEFAULT_TARGET_SHARDS, LP_MAX_INITIAL_SHARDS, LP_MAX_REFILL_BATCH_SIZE, LP_MAX_TOTAL_SHARDS, LP_SHARD_PAGE_SIZE, PRODUCT_MAX_ENTRY_LAMPORTS, PRODUCT_MIN_ENTRY_LAMPORTS, isValidLpPositionId };
+//# sourceMappingURL=chunk-HWRMSK7E.js.map
+//# sourceMappingURL=chunk-HWRMSK7E.js.map

package/dist/chunk-HWRMSK7E.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../shared/src/index.ts"],"names":[],"mappings":";AAgBO,IAAM,yBAAA,GAA4B,CAAA;AAClC,IAAM,yBAAA,GAA4B,EAAA;AAClC,IAAM,sBAAA,GAAyB,kBAAA;AAC/B,IAAM,wBAAA,GAA2B;AACjC,IAAM,qBAAA,GAAwB;AAC9B,IAAM,mBAAA,GAAsB;AAC5B,IAAM,kBAAA,GAAqB;AAC3B,IAAM,4BAAA,GAA+B;AACrC,IAAM,wBAAA,GAA2B;AAKjC,IAAM,0BAAA,GAA6B;AACnC,IAAM,0BAAA,GAA6B;AAGnC,SAAS,oBAAoB,YAAA,EAA+B;AACjE,EAAA,OACE,YAAA,CAAa,UAAU,yBAAA,IACvB,YAAA,CAAa,UAAU,yBAAA,IACvB,sBAAA,CAAuB,KAAK,YAAY,CAAA;AAE5C","file":"chunk-HWRMSK7E.js","sourcesContent":["/**\n * Shared workspace entrypoint.\n *\n * Keep exports here pure and reusable across workspaces. Do not put React,\n * DOM-only, libp2p runtime state, or feature-specific glue in this package.\n */\nexport function sleep(ms: number): Promise<void> {\n  if (ms <= 0) {\n    return Promise.resolve();\n  }\n\n  return new Promise((resolve) => {\n    setTimeout(resolve, ms);\n  });\n}\n\nexport const LP_POSITION_ID_MIN_LENGTH = 3;\nexport const LP_POSITION_ID_MAX_LENGTH = 96;\nexport const LP_POSITION_ID_PATTERN = /^[A-Za-z0-9_-]+$/;\nexport const LP_DEFAULT_TARGET_SHARDS = 500;\nexport const LP_MAX_INITIAL_SHARDS = 500;\nexport const LP_MAX_TOTAL_SHARDS = 0xffff_ffff;\nexport const LP_SHARD_PAGE_SIZE = 50;\nexport const LP_DEFAULT_REFILL_BATCH_SIZE = 50;\nexport const LP_MAX_REFILL_BATCH_SIZE = 50;\n\n// Temporary TypeScript mirrors of the Rust TEE entry limits, plus the distinct\n// mainnet UI default. Keep them guarded by `npm run product-limits:check` until\n// cross-language generated product constants exist.\nexport const PRODUCT_MIN_ENTRY_LAMPORTS = 1_500_000_000;\nexport const PRODUCT_MAX_ENTRY_LAMPORTS = 100_000_000_000;\nexport const PRODUCT_DEFAULT_MAINNET_ENTRY_LAMPORTS = 1_500_000_000;\n\nexport function isValidLpPositionId(lpPositionId: string): boolean {\n  return (\n    lpPositionId.length >= LP_POSITION_ID_MIN_LENGTH &&\n    lpPositionId.length <= LP_POSITION_ID_MAX_LENGTH &&\n    LP_POSITION_ID_PATTERN.test(lpPositionId)\n  );\n}\n"]}

package/dist/{chunk-3MDHAS4D.js → chunk-ISIWWGSR.js}

@@ -1,5 +1,5 @@
-import { getSessionState } from './chunk-HJFMDMPY.js';
-import { TransportError, CommandError } from './chunk-QRN46R3F.js';
+import { getSessionState } from './chunk-6AKBRYKO.js';
+import { TransportError, CommandError, COORDINATOR_CAPACITY_FULL_ERROR_CODE, COORDINATOR_CAPACITY_FULL_USER_MESSAGE } from './chunk-RWKG7N7I.js';
 
 // src/coordinator/protocolClient.ts
 var MAX_COORDINATOR_REQUEST_ID = 4294967295;
@@ -32,7 +32,7 @@ var CoordinatorMessageType = {
 };
 var protocolPromise = null;
 function loadProtocol() {
-  protocolPromise ??= import('./coordinator-PEWHNZ7I.js');
+  protocolPromise ??= import('./coordinator-DHL3AP7V.js');
   return protocolPromise;
 }
 var runtimes = /* @__PURE__ */ new WeakMap();
@@ -270,8 +270,10 @@ function rejectMatchingOutOfBandErrors(runtime, swapId, error) {
 }
 function commandErrorFromCoordinatorError(payload) {
   const coordinatorCode = toCoordinatorWireErrorCode(payload.code);
-  return new CommandError(commandCodeFromCoordinatorCode(coordinatorCode), payload.message, {
+  const message = coordinatorCode === COORDINATOR_CAPACITY_FULL_ERROR_CODE ? COORDINATOR_CAPACITY_FULL_USER_MESSAGE : payload.message;
+  return new CommandError(commandCodeFromCoordinatorCode(coordinatorCode), message, {
     coordinatorCode,
+    coordinatorMessage: payload.message,
     ...payload.failed_req_id !== void 0 ? { failedReqId: payload.failed_req_id } : {}
   });
 }
@@ -281,6 +283,11 @@ function commandCodeFromCoordinatorCode(code) {
     case "ERR_UNKNOWN_SWAP":
     case "ERR_SWAP_NOT_REFUNDABLE":
       return "REJECTED_STATE";
+    case "ERR_INITIALIZATION_BUSY":
+    case "ERR_PRESEAL_ADMISSION_BUSY":
+      return "RETRYABLE_BUSY";
+    case COORDINATOR_CAPACITY_FULL_ERROR_CODE:
+      return "REJECTED_RESOURCE_CAP";
     case "ERR_INTERNAL":
     case "ERR_SETTLEMENT_FAILED":
       return "REJECTED_STALE_JOB";
@@ -302,6 +309,9 @@ function toCoordinatorWireErrorCode(code) {
     case "ERR_SWAP_NOT_REFUNDABLE":
     case "ERR_DKG_FAILURE":
     case "ERR_INTERNAL":
+    case "ERR_INITIALIZATION_BUSY":
+    case "ERR_PRESEAL_ADMISSION_BUSY":
+    case COORDINATOR_CAPACITY_FULL_ERROR_CODE:
     case "ERR_INVALID_DEPOSIT":
     case "ERR_SETTLEMENT_FAILED":
       return code;
@@ -325,5 +335,5 @@ function rejectAll(runtime, error) {
 }
 
 export { CoordinatorMessageType, EnvelopeKind, closeProtocolRuntime, onEnvelope, requestEnvelope };
-//# sourceMappingURL=chunk-3MDHAS4D.js.map
-//# sourceMappingURL=chunk-3MDHAS4D.js.map
+//# sourceMappingURL=chunk-ISIWWGSR.js.map
+//# sourceMappingURL=chunk-ISIWWGSR.js.map

package/dist/chunk-ISIWWGSR.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/coordinator/protocolClient.ts"],"names":["pending"],"mappings":";;;;AAaA,IAAM,0BAAA,GAA6B,UAAA;AACnC,IAAM,sBAAA,GAAyB,CAAA;AAExB,IAAM,YAAA,GAAe;AAAA,EAC1B,OAAA,EAAS,SAAA;AAAA,EACT,QAAA,EAAU,UAAA;AAAA,EACV,IAAA,EAAM,MAAA;AAAA,EACN,KAAA,EAAO;AACT;AAIO,IAAM,sBAAA,GAAyB;AAAA,EACpC,eAAA,EAAiB,iBAAA;AAAA,EACjB,qBAAA,EAAuB,uBAAA;AAAA,EACvB,OAAA,EAAS,SAAA;AAAA,EACT,SAAA,EAAW,WAAA;AAAA,EACX,SAAA,EAAW,WAAA;AAAA,EACX,WAAA,EAAa,aAAA;AAAA,EACb,aAAA,EAAe,eAAA;AAAA,EACf,WAAA,EAAa,aAAA;AAAA,EACb,gBAAA,EAAkB,kBAAA;AAAA,EAClB,IAAA,EAAM,MAAA;AAAA,EACN,YAAA,EAAc,cAAA;AAAA,EACd,MAAA,EAAQ,QAAA;AAAA,EACR,cAAA,EAAgB,gBAAA;AAAA,EAChB,eAAA,EAAiB,iBAAA;AAAA,EACjB,gBAAA,EAAkB,kBAAA;AAAA,EAClB,gBAAA,EAAkB,kBAAA;AAAA,EAClB,SAAA,EAAW,WAAA;AAAA,EACX,KAAA,EAAO;AACT;AA4BA,IAAI,eAAA,GAAkD,IAAA;AAEtD,SAAS,YAAA,GAAwC;AAC/C,EAAA,eAAA,KAAoB,OAAO,2BAAsB,CAAA;AACjD,EAAA,OAAO,eAAA;AACT;AAmDA,IAAM,QAAA,uBAAe,OAAA,EAAuC;AAE5D,eAAsB,gBACpB,OAAA,EACA,IAAA,EACA,OAAA,EACA,OAAA,GAAkC,EAAC,EAChB;AACnB,EAAA,qBAAA,CAAsB,QAAQ,MAAM,CAAA;AACpC,EAAA,MAAM,QAAA,GAAW,MAAM,YAAA,EAAa;AACpC,EAAA,qBAAA,CAAsB,QAAQ,MAAM,CAAA;AACpC,EAAA,MAAM,KAAA,GAAQ,gBAAgB,OAAO,CAAA;AACrC,EAAA,MAAM,OAAA,GAAU,sBAAsB,KAAK,CAAA;AAC3C,EAAA,MAAM,UAAU,KAAA,CAAM,OAAA;AACtB,EAAA,IAAI,CAAC,KAAA,CAAM,QAAA,IAAY,OAAA,KAAY,IAAA,EAAM;AACvC,IAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,kDAAkD,CAAA;AAAA,EAChG;AAEA,EAAA,IAAI,OAAA,CAAQ,cAAc,0BAAA,EAA4B;AACpD,IAAA,MAAM,IAAI,YAAA,CAAa,gBAAA,EAAkB,wCAAwC,CAAA;AAAA,EACnF;AACA,EAAA,MAAM,KAAA,GAAQ,QAAQ,UAAA,GAAa,CAAA;AACnC,EAAA,OAAA,CAAQ,UAAA,GAAa,KAAA;AACrB,EAAA,MAAM,QAAA,GAAqB;AAAA,IACzB,SAAS,QAAA,CAAS,gBAAA;AAAA,IAClB,IAAA,EAAM,SAAS,YAAA,CAAa,OAAA;AAAA,IAC5B,IAAA;AAAA,IACA,OAAA,EAAS,QAAQ,MAAA,IAAU,IAAA;AAAA,IAC3B,MAAA,EAAQ,KAAA;AAAA,IACR,YAAA,EAAc,KAAK,GAAA,EAAI;AAAA,IACvB;AAAA,GACF;AACA,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,eAAA,CAAgB,QAAQ,CAAA;AAE/C,EAAA,OAAO,IAAI,OAAA,CAAQ,CAAC,OAAA,EAAS,MAAA,KAAW;AACtC,IAAA,MAAM,YAAA,GACJ,OAAA,CAAQ,MAAA,KAAW,MAAA,GACf,MAAA,GACA,MAAM,aAAA,CAAc,OAAA,EAAS,KAAA,EAAO,uBAAA,EAAyB,CAAA;AACnE,IAAA,MAAM,QACJ,OAAA,CAAQ,SAAA,KAAc,MAAA,GAClB,IAAA,GACA,WAAW,MAAM;AACf,MAAA,aAAA;AAAA,QACE,OAAA;AAAA,QACA,KAAA;AAAA,QACA,IAAI,YAAA;AAAA,UACF,oBAAA;AAAA,UACA,CAAA,kCAAA,EAAqC,IAAI,CAAA,OAAA,EAAU,OAAA,CAAQ,SAAS,CAAA,EAAA;AAAA;AACtE,OACF;AAAA,IACF,CAAA,EAAG,QAAQ,SAAS,CAAA;AAE1B,IAAA,OAAA,CAAQ,OAAA,CAAQ,IAAI,KAAA,EAAO;AAAA,MACzB,cAAA,EAAgB,QAAQ,MAAA,IAAU,IAAA;AAAA,MAClC,OAAA;AAAA,MACA,MAAA;AAAA,MACA,KAAA;AAAA,MACA,QAAQ,OAAA,CAAQ,MAAA;AAAA,MAChB,YAAA;AAAA,MACA,QAAQ,QAAA,CAAS,OAAA;AAAA,MACjB,6BAAA,EAA+B,QAAQ,6BAAA,KAAkC,IAAA;AAAA,MACzE,4BAAA,EAA8B,QAAQ,4BAAA,KAAiC;AAAA,KACxE,CAAA;AACD,IAAA,IAAI,iBAAiB,MAAA,EAAW;AAC9B,MAAA,OAAA,CAAQ,QAAQ,gBAAA,CAAiB,OAAA,EAAS,cAAc,EAAE,IAAA,EAAM,MAAM,CAAA;AACtE,MAAA,IAAI,OAAA,CAAQ,MAAA,EAAQ,OAAA,KAAY,IAAA,EAAM;AACpC,QAAA,YAAA,EAAa;AACb,QAAA;AAAA,MACF;AAAA,IACF;AACA,IAAA,OAAA,CAAQ,QAAQ,CAAA,GAAA,EAAM,IAAI,CAAA,QAAA,EAAW,KAAK,IAAI,KAAK,CAAA;AACnD,IAAA,IAAI;AACF,MAAA,OAAA,CAAQ,KAAK,KAAK,CAAA;AAAA,IACpB,SAAS,KAAA,EAAO;AACd,MAAA,aAAA,CAAc,OAAA,EAAS,KAAA,EAAO,KAAA,YAAiB,KAAA,GAAQ,KAAA,GAAQ,IAAI,KAAA,CAAM,MAAA,CAAO,KAAK,CAAC,CAAC,CAAA;AAAA,IACzF;AAAA,EACF,CAAC,CAAA;AACH;AA0BO,SAAS,UAAA,CAAW,SAAkB,OAAA,EAA+C;AAC1F,EAAA,MAAM,OAAA,GAAU,qBAAA,CAAsB,eAAA,CAAgB,OAAO,CAAC,CAAA;AAC9D,EAAA,OAAA,CAAQ,gBAAA,CAAiB,IAAI,OAAO,CAAA;AACpC,EAAA,OAAO,MAAM,OAAA,CAAQ,gBAAA,CAAiB,MAAA,CAAO,OAAO,CAAA;AACtD;AAEO,SAAS,qBAAqB,OAAA,EAAwB;AAC3D,EAAA,MAAM,KAAA,GAAQ,gBAAgB,OAAO,CAAA;AACrC,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA;AAClC,EAAA,IAAI,CAAC,OAAA,EAAS;AACd,EAAA,MAAM,KAAA,GAAQ,IAAI,cAAA,CAAe,iBAAA,EAAmB,qCAAqC,CAAA;AACzF,EAAA,SAAA,CAAU,SAAS,KAAK,CAAA;AACxB,EAAA,OAAA,CAAQ,kBAAA,IAAqB;AAC7B,EAAA,OAAA,CAAQ,oBAAA,IAAuB;AAC/B,EAAA,QAAA,CAAS,OAAO,KAAK,CAAA;AACvB;AAEA,SAAS,sBAAsB,KAAA,EAAsC;AACnE,EAAA,MAAM,QAAA,GAAW,QAAA,CAAS,GAAA,CAAI,KAAK,CAAA;AACnC,EAAA,IAAI,UAAU,OAAO,QAAA;AAErB,EAAA,MAAM,OAAA,GAA2B;AAAA,IAC/B,UAAA,EAAY,CAAA;AAAA,IACZ,OAAA,sBAAa,GAAA,EAAI;AAAA,IACjB,WAAA,sBAAiB,GAAA,EAAI;AAAA,IACrB,gBAAA,sBAAsB,GAAA,EAAI;AAAA,IAC1B,kBAAA,EAAoB,IAAA;AAAA,IACpB,oBAAA,EAAsB;AAAA,GACxB;AAEA,EAAA,IAAI,KAAA,CAAM,YAAY,IAAA,EAAM;AAC1B,IAAA,MAAM,IAAI,cAAA,CAAe,iBAAA,EAAmB,8CAA8C,CAAA;AAAA,EAC5F;AACA,EAAA,OAAA,CAAQ,kBAAA,GAAqB,MAAM,OAAA,CAAQ,SAAA,CAAU,CAAC,KAAA,KAAU,WAAA,CAAY,OAAA,EAAS,KAAK,CAAC,CAAA;AAC3F,EAAA,OAAA,CAAQ,oBAAA,GAAuB,KAAA,CAAM,SAAA,CAAU,aAAA,CAAc,CAAC,cAAA,KAAmB;AAC/E,IAAA,IAAI,cAAA,KAAmB,SAAA,IAAa,cAAA,KAAmB,QAAA,EAAU;AAC/D,MAAA,SAAA,CAAU,OAAA,EAAS,IAAI,cAAA,CAAe,iBAAA,EAAmB,8BAA8B,CAAC,CAAA;AAAA,IAC1F;AAAA,EACF,CAAC,CAAA;AAED,EAAA,QAAA,CAAS,GAAA,CAAI,OAAO,OAAO,CAAA;AAC3B,EAAA,OAAO,OAAA;AACT;AAEA,SAAS,WAAA,CAAY,SAA0B,KAAA,EAAyB;AACtE,EAAA,KAAK,gBAAA,CAAiB,SAAS,KAAK,CAAA;AACtC;AAEA,eAAe,gBAAA,CAAiB,SAA0B,KAAA,EAAkC;AAC1F,EAAA,MAAM,QAAA,GAAW,MAAM,YAAA,EAAa;AACpC,EAAA,MAAM,OAAA,GAAU,QAAA,CAAS,MAAA,CAAO,KAAK,CAAA;AACrC,EAAA,IAAI,CAAC,QAAQ,EAAA,EAAI;AACf,IAAA,SAAA,CAAU,OAAA,EAAS,QAAQ,KAAK,CAAA;AAChC,IAAA;AAAA,EACF;AAEA,EAAA,MAAM,WAAW,OAAA,CAAQ,KAAA;AACzB,EAAA,IAAI,QAAA,CAAS,IAAA,KAAS,QAAA,CAAS,YAAA,CAAa,QAAA,EAAU;AACpD,IAAA,MAAMA,QAAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,MAAM,CAAA;AACnD,IAAA,IAAIA,YAAW,CAAC,2BAAA,CAA4BA,QAAAA,EAAS,QAAA,CAAS,OAAO,CAAA,EAAG;AACtE,MAAA,aAAA;AAAA,QACE,OAAA;AAAA,QACA,QAAA,CAAS,MAAA;AAAA,QACT,2BAA2B,QAAA,CAAS,MAAA,EAAQA,QAAAA,CAAQ,cAAA,EAAgB,SAAS,OAAO;AAAA,OACtF;AACA,MAAA;AAAA,IACF;AAAA,EACF;AAEA,EAAA,MAAM,YAAA,GACJ,SAAS,IAAA,KAAS,QAAA,CAAS,aAAa,KAAA,GAAQ,QAAA,CAAS,cAAA,CAAe,QAAQ,CAAA,GAAI,IAAA;AACtF,EAAA,IAAI,YAAA,EAAc,kBAAkB,MAAA,EAAW;AAC7C,IAAA,MAAMA,QAAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,aAAa,aAAa,CAAA;AAC9D,IAAA,IAAIA,YAAW,CAAC,2BAAA,CAA4BA,UAAS,QAAA,CAAS,OAAA,EAAS,KAAK,CAAA,EAAG;AAC7E,MAAA,aAAA;AAAA,QACE,OAAA;AAAA,QACA,YAAA,CAAa,aAAA;AAAA,QACb,0BAAA;AAAA,UACE,YAAA,CAAa,aAAA;AAAA,UACbA,QAAAA,CAAQ,cAAA;AAAA,UACR,QAAA,CAAS;AAAA;AACX,OACF;AACA,MAAA;AAAA,IACF;AAAA,EACF;AAEA,EAAA,KAAA,MAAW,OAAA,IAAW,OAAA,CAAQ,gBAAA,EAAkB,OAAA,CAAQ,QAAQ,CAAA;AAEhE,EAAA,IAAI,QAAA,CAAS,IAAA,KAAS,QAAA,CAAS,YAAA,CAAa,KAAA,EAAO;AACjD,IAAA,MAAM,OAAA,GAAU,YAAA;AAChB,IAAA,MAAM,KAAA,GAAQ,iCAAiC,OAAO,CAAA;AACtD,IAAA,IAAI,OAAA,CAAQ,aAAA,KAAkB,MAAA,IAAa,OAAA,CAAQ,kBAAkB,sBAAA,EAAwB;AAC3F,MAAA,IAAI,QAAA,CAAS,YAAY,IAAA,EAAM;AAC7B,QAAA,6BAAA,CAA8B,OAAA,EAAS,QAAA,CAAS,OAAA,EAAS,KAAK,CAAA;AAAA,MAChE;AACA,MAAA;AAAA,IACF;AACA,IAAA,MAAMA,QAAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,QAAQ,aAAa,CAAA;AACzD,IAAA,IAAI,CAACA,QAAAA,EAAS;AACd,IAAA,IAAI,CAAC,2BAAA,CAA4BA,QAAAA,EAAS,QAAA,CAAS,OAAA,EAAS,KAAK,CAAA,EAAG;AAClE,MAAA,aAAA;AAAA,QACE,OAAA;AAAA,QACA,OAAA,CAAQ,aAAA;AAAA,QACR,2BAA2B,OAAA,CAAQ,aAAA,EAAeA,QAAAA,CAAQ,cAAA,EAAgB,SAAS,OAAO;AAAA,OAC5F;AACA,MAAA;AAAA,IACF;AACA,IAAA,aAAA,CAAc,OAAA,EAAS,OAAA,CAAQ,aAAA,EAAe,KAAK,CAAA;AACnD,IAAA;AAAA,EACF;AAEA,EAAA,IAAI,QAAA,CAAS,IAAA,KAAS,QAAA,CAAS,YAAA,CAAa,IAAA,EAAM;AAChD,IAAA,iBAAA,CAAkB,SAAS,QAAQ,CAAA;AACnC,IAAA;AAAA,EACF;AAEA,EAAA,IAAI,QAAA,CAAS,IAAA,KAAS,QAAA,CAAS,YAAA,CAAa,QAAA,EAAU;AACtD,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,SAAS,MAAM,CAAA;AACnD,EAAA,IAAI,CAAC,OAAA,EAAS;AACd,EAAA,IAAI,CAAC,2BAAA,CAA4B,OAAA,EAAS,QAAA,CAAS,OAAO,CAAA,EAAG;AAC3D,IAAA,aAAA;AAAA,MACE,OAAA;AAAA,MACA,QAAA,CAAS,MAAA;AAAA,MACT,2BAA2B,QAAA,CAAS,MAAA,EAAQ,OAAA,CAAQ,cAAA,EAAgB,SAAS,OAAO;AAAA,KACtF;AACA,IAAA;AAAA,EACF;AACA,EAAA,OAAA,CAAQ,OAAA,CAAQ,MAAA,CAAO,QAAA,CAAS,MAAM,CAAA;AACtC,EAAA,qBAAA,CAAsB,OAAO,CAAA;AAC7B,EAAA,OAAA,CAAQ,QAAQ,QAAQ,CAAA;AAC1B;AAEA,SAAS,2BAAA,CACP,OAAA,EACA,cAAA,EACA,4BAAA,GAA+B,IAAA,EACtB;AACT,EAAA,IACE,4BAAA,IACA,OAAA,CAAQ,4BAAA,IACR,cAAA,KAAmB,IAAA,EACnB;AACA,IAAA,OAAO,KAAA;AAAA,EACT;AACA,EAAA,OAAO,OAAA,CAAQ,cAAA,KAAmB,IAAA,IAAQ,OAAA,CAAQ,cAAA,KAAmB,cAAA;AACvE;AAEA,SAAS,0BAAA,CACP,KAAA,EACA,cAAA,EACA,cAAA,EACc;AACd,EAAA,OAAO,IAAI,YAAA;AAAA,IACT,gBAAA;AAAA,IACA,oDAAoD,KAAK,CAAA,WAAA,EAAc,kBAAkB,MAAM,CAAA,WAAA,EAAc,kBAAkB,MAAM,CAAA,CAAA;AAAA,IACrI,EAAE,aAAa,KAAA;AAAM,GACvB;AACF;AAEA,SAAS,iBAAA,CAAkB,SAA0B,QAAA,EAA0B;AAC7E,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,WAAA,CAAY,GAAA,CAAI,SAAS,IAAI,CAAA;AACrD,EAAA,MAAM,cAAc,OAAA,EAAS,SAAA;AAAA,IAC3B,CAAC,SAAA,KAAc,SAAA,CAAU,WAAW,MAAA,IAAa,SAAA,CAAU,WAAW,QAAA,CAAS;AAAA,GACjF;AACA,EAAA,MAAM,MAAA,GACJ,OAAA,IAAW,WAAA,KAAgB,MAAA,IAAa,WAAA,IAAe,CAAA,GACnD,OAAA,CAAQ,MAAA,CAAO,WAAA,EAAa,CAAC,CAAA,CAAE,CAAC,CAAA,GAChC,MAAA;AACN,EAAA,IAAI,CAAC,MAAA,IAAU,CAAC,OAAA,EAAS;AACzB,EAAA,IAAI,OAAA,CAAQ,WAAW,CAAA,EAAG;AACxB,IAAA,OAAA,CAAQ,WAAA,CAAY,MAAA,CAAO,QAAA,CAAS,IAAI,CAAA;AAAA,EAC1C;AACA,EAAA,IAAI,MAAA,CAAO,KAAA,EAAO,YAAA,CAAa,MAAA,CAAO,KAAK,CAAA;AAC3C,EAAA,MAAA,CAAO,QAAQ,QAAQ,CAAA;AACzB;AAEA,SAAS,aAAA,CAAc,OAAA,EAA0B,KAAA,EAAe,KAAA,EAAoB;AAClF,EAAA,MAAM,OAAA,GAAU,OAAA,CAAQ,OAAA,CAAQ,GAAA,CAAI,KAAK,CAAA;AACzC,EAAA,IAAI,CAAC,OAAA,EAAS;AACd,EAAA,OAAA,CAAQ,OAAA,CAAQ,OAAO,KAAK,CAAA;AAC5B,EAAA,qBAAA,CAAsB,OAAO,CAAA;AAC7B,EAAA,OAAA,CAAQ,OAAO,KAAK,CAAA;AACtB;AAEA,SAAS,sBAAsB,OAAA,EAA+B;AAC5D,EAAA,IAAI,OAAA,CAAQ,KAAA,EAAO,YAAA,CAAa,OAAA,CAAQ,KAAK,CAAA;AAC7C,EAAA,IAAI,OAAA,CAAQ,MAAA,KAAW,MAAA,IAAa,OAAA,CAAQ,iBAAiB,MAAA,EAAW;AACtE,IAAA,OAAA,CAAQ,MAAA,CAAO,mBAAA,CAAoB,OAAA,EAAS,OAAA,CAAQ,YAAY,CAAA;AAAA,EAClE;AACF;AAEA,SAAS,sBAAsB,MAAA,EAAuC;AACpE,EAAA,IAAI,MAAA,EAAQ,OAAA,KAAY,IAAA,EAAM,MAAM,uBAAA,EAAwB;AAC9D;AAEA,SAAS,uBAAA,GAAwC;AAC/C,EAAA,OAAO,IAAI,YAAA,CAAa,6BAAA,EAA+B,YAAY,CAAA;AACrE;AAEA,SAAS,6BAAA,CACP,OAAA,EACA,MAAA,EACA,KAAA,EACM;AACN,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,OAAO,CAAA,IAAK,QAAQ,OAAA,EAAS;AAC9C,IAAA,IAAI,CAAC,OAAA,CAAQ,6BAAA,IAAiC,OAAA,CAAQ,WAAW,MAAA,EAAQ;AACzE,IAAA,aAAA,CAAc,OAAA,EAAS,OAAO,KAAK,CAAA;AAAA,EACrC;AACF;AAEA,SAAS,iCAAiC,OAAA,EAIzB;AACf,EAAA,MAAM,eAAA,GAAkB,0BAAA,CAA2B,OAAA,CAAQ,IAAI,CAAA;AAC/D,EAAA,MAAM,OAAA,GACJ,eAAA,KAAoB,oCAAA,GAChB,sCAAA,GACA,OAAA,CAAQ,OAAA;AACd,EAAA,OAAO,IAAI,YAAA,CAAa,8BAAA,CAA+B,eAAe,GAAG,OAAA,EAAS;AAAA,IAChF,eAAA;AAAA,IACA,oBAAoB,OAAA,CAAQ,OAAA;AAAA,IAC5B,GAAI,QAAQ,aAAA,KAAkB,MAAA,GAAY,EAAE,WAAA,EAAa,OAAA,CAAQ,aAAA,EAAc,GAAI;AAAC,GACrF,CAAA;AACH;AAEA,SAAS,+BAA+B,IAAA,EAAkD;AACxF,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,qBAAA;AAAA,IACL,KAAK,kBAAA;AAAA,IACL,KAAK,yBAAA;AACH,MAAA,OAAO,gBAAA;AAAA,IACT,KAAK,yBAAA;AAAA,IACL,KAAK,4BAAA;AACH,MAAA,OAAO,gBAAA;AAAA,IACT,KAAK,oCAAA;AACH,MAAA,OAAO,uBAAA;AAAA,IACT,KAAK,cAAA;AAAA,IACL,KAAK,uBAAA;AACH,MAAA,OAAO,oBAAA;AAAA,IACT,KAAK,qBAAA;AAAA,IACL,KAAK,sBAAA;AAAA,IACL,KAAK,2BAAA;AAAA,IACL,KAAK,iBAAA;AAAA,IACL,KAAK,qBAAA;AACH,MAAA,OAAO,gBAAA;AAAA;AAEb;AAEA,SAAS,2BAA2B,IAAA,EAAwC;AAC1E,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,qBAAA;AAAA,IACL,KAAK,qBAAA;AAAA,IACL,KAAK,kBAAA;AAAA,IACL,KAAK,sBAAA;AAAA,IACL,KAAK,2BAAA;AAAA,IACL,KAAK,yBAAA;AAAA,IACL,KAAK,iBAAA;AAAA,IACL,KAAK,cAAA;AAAA,IACL,KAAK,yBAAA;AAAA,IACL,KAAK,4BAAA;AAAA,IACL,KAAK,oCAAA;AAAA,IACL,KAAK,qBAAA;AAAA,IACL,KAAK,uBAAA;AACH,MAAA,OAAO,IAAA;AAAA,IACT;AACE,MAAA,OAAO,cAAA;AAAA;AAEb;AAcA,SAAS,SAAA,CAAU,SAA0B,KAAA,EAAoB;AAC/D,EAAA,KAAA,MAAW,CAAC,KAAA,EAAO,OAAO,KAAK,OAAA,CAAQ,OAAA,CAAQ,SAAQ,EAAG;AACxD,IAAA,OAAA,CAAQ,OAAA,CAAQ,OAAO,KAAK,CAAA;AAC5B,IAAA,qBAAA,CAAsB,OAAO,CAAA;AAC7B,IAAA,OAAA,CAAQ,OAAO,KAAK,CAAA;AAAA,EACtB;AACA,EAAA,KAAA,MAAW,CAAC,IAAA,EAAM,OAAO,KAAK,OAAA,CAAQ,WAAA,CAAY,SAAQ,EAAG;AAC3D,IAAA,OAAA,CAAQ,WAAA,CAAY,OAAO,IAAI,CAAA;AAC/B,IAAA,KAAA,MAAW,UAAU,OAAA,EAAS;AAC5B,MAAA,IAAI,MAAA,CAAO,KAAA,EAAO,YAAA,CAAa,MAAA,CAAO,KAAK,CAAA;AAC3C,MAAA,MAAA,CAAO,OAAO,KAAK,CAAA;AAAA,IACrB;AAAA,EACF;AACF","file":"chunk-ISIWWGSR.js","sourcesContent":["import {\n  COORDINATOR_CAPACITY_FULL_ERROR_CODE,\n  COORDINATOR_CAPACITY_FULL_USER_MESSAGE,\n  CommandError,\n  TransportError,\n  type CommandErrorCode,\n  type CoordinatorWireErrorCode,\n} from \"../core/errors.js\";\nimport type { Session } from \"../core/session.js\";\nimport { getSessionState, type SessionState } from \"../session/state.js\";\nimport type { Unsubscribe } from \"../transport/types.js\";\n\nconst COORDINATOR_ENVELOPE_VERSION = 2;\nconst MAX_COORDINATOR_REQUEST_ID = 0xffff_ffff;\nconst OUT_OF_BAND_REQUEST_ID = 0;\n\nexport const EnvelopeKind = {\n  REQUEST: \"request\",\n  RESPONSE: \"response\",\n  PUSH: \"push\",\n  ERROR: \"error\",\n} as const;\n\nexport type EnvelopeKind = (typeof EnvelopeKind)[keyof typeof EnvelopeKind];\n\nexport const CoordinatorMessageType = {\n  ContractRequest: \"ContractRequest\",\n  LpCreateAuthorization: \"LpCreateAuthorization\",\n  DkgInit: \"DkgInit\",\n  DkgRound1: \"DkgRound1\",\n  DkgRound2: \"DkgRound2\",\n  DkgComplete: \"DkgComplete\",\n  DelegateShare: \"DelegateShare\",\n  DelegateAck: \"DelegateAck\",\n  DepositConfirmed: \"DepositConfirmed\",\n  Sync: \"Sync\",\n  SyncRequired: \"SyncRequired\",\n  Refill: \"Refill\",\n  PayoutExecuted: \"PayoutExecuted\",\n  WithdrawRequest: \"WithdrawRequest\",\n  WithdrawAccepted: \"WithdrawAccepted\",\n  WithdrawExecuted: \"WithdrawExecuted\",\n  LpCommand: \"LpCommand\",\n  Error: \"Error\",\n} as const;\n\nexport type CoordinatorMessageType =\n  (typeof CoordinatorMessageType)[keyof typeof CoordinatorMessageType];\n\nexport type Envelope = {\n  readonly version: typeof COORDINATOR_ENVELOPE_VERSION;\n  readonly kind: EnvelopeKind;\n  readonly type: CoordinatorMessageType;\n  readonly swap_id: string | null;\n  readonly req_id: number;\n  readonly timestamp_ms: number;\n  readonly payload: unknown;\n};\n\ntype ProtocolModule = {\n  readonly ENVELOPE_VERSION: typeof COORDINATOR_ENVELOPE_VERSION;\n  readonly EnvelopeKind: typeof EnvelopeKind;\n  readonly CoordinatorMessageType: typeof CoordinatorMessageType;\n  readonly encodeValidated: (envelope: Envelope) => Uint8Array;\n  readonly decode: (raw: Uint8Array) => { ok: true; value: Envelope } | { ok: false; error: Error };\n  readonly asErrorPayload: (envelope: Envelope) => {\n    readonly code: string;\n    readonly failed_req_id?: number;\n    readonly message: string;\n  };\n};\n\nlet protocolPromise: Promise<ProtocolModule> | null = null;\n\nfunction loadProtocol(): Promise<ProtocolModule> {\n  protocolPromise ??= import(\"protocol/coordinator\") as Promise<ProtocolModule>;\n  return protocolPromise;\n}\n\nexport type ProtocolLogDirection = \"in\" | \"out\" | \"info\";\nexport type ProtocolLogHandler = (message: string, direction: ProtocolLogDirection) => void;\nexport type ProtocolEnvelopeHandler = (envelope: Envelope) => void;\n\nexport interface RequestEnvelopeOptions {\n  readonly swapId?: string | null;\n  readonly timeoutMs?: number;\n  readonly signal?: AbortSignal;\n  readonly onLog?: ProtocolLogHandler;\n  /** Reject this request when the coordinator reports a swap-scoped error without a request id. */\n  readonly rejectMatchingOutOfBandErrors?: boolean;\n  /** Contract allocation responses must carry the server-assigned swap_id. */\n  readonly requireNonNullResponseSwapId?: boolean;\n}\n\nexport interface AwaitPushOptions {\n  /** Exact business routing key. Omit only for legacy wildcard waiters. */\n  readonly swapId?: string | null;\n  readonly timeoutMs?: number | null;\n}\n\ntype PendingRequest = {\n  readonly expectedSwapId: string | null;\n  readonly resolve: (envelope: Envelope) => void;\n  readonly reject: (error: Error) => void;\n  readonly timer: ReturnType<typeof setTimeout> | null;\n  readonly signal?: AbortSignal;\n  readonly abortHandler?: () => void;\n  readonly swapId: string | null;\n  readonly rejectMatchingOutOfBandErrors: boolean;\n  readonly requireNonNullResponseSwapId: boolean;\n};\n\ntype PushWaiter = {\n  readonly swapId?: string | null;\n  readonly resolve: (envelope: Envelope) => void;\n  readonly reject: (error: Error) => void;\n  readonly timer: ReturnType<typeof setTimeout> | null;\n};\n\ntype ProtocolRuntime = {\n  reqCounter: number;\n  readonly pending: Map<number, PendingRequest>;\n  readonly pushWaiters: Map<CoordinatorMessageType, PushWaiter[]>;\n  readonly envelopeHandlers: Set<ProtocolEnvelopeHandler>;\n  unsubscribeChannel: Unsubscribe | null;\n  unsubscribeTransport: Unsubscribe | null;\n};\n\nconst runtimes = new WeakMap<SessionState, ProtocolRuntime>();\n\nexport async function requestEnvelope(\n  session: Session,\n  type: CoordinatorMessageType,\n  payload: unknown,\n  options: RequestEnvelopeOptions = {},\n): Promise<Envelope> {\n  throwIfRequestAborted(options.signal);\n  const protocol = await loadProtocol();\n  throwIfRequestAborted(options.signal);\n  const state = getSessionState(session);\n  const runtime = ensureProtocolRuntime(state);\n  const channel = state.channel;\n  if (!state.attested || channel === null) {\n    throw new TransportError(\"CONNECTION_LOST\", \"coordinator request requires an attested channel\");\n  }\n\n  if (runtime.reqCounter >= MAX_COORDINATOR_REQUEST_ID) {\n    throw new CommandError(\"REJECTED_STATE\", \"coordinator request id space exhausted\");\n  }\n  const reqId = runtime.reqCounter + 1;\n  runtime.reqCounter = reqId;\n  const envelope: Envelope = {\n    version: protocol.ENVELOPE_VERSION,\n    kind: protocol.EnvelopeKind.REQUEST,\n    type,\n    swap_id: options.swapId ?? null,\n    req_id: reqId,\n    timestamp_ms: Date.now(),\n    payload,\n  };\n  const frame = protocol.encodeValidated(envelope);\n\n  return new Promise((resolve, reject) => {\n    const abortHandler =\n      options.signal === undefined\n        ? undefined\n        : () => rejectPending(runtime, reqId, createRequestAbortError());\n    const timer =\n      options.timeoutMs === undefined\n        ? null\n        : setTimeout(() => {\n            rejectPending(\n              runtime,\n              reqId,\n              new CommandError(\n                \"REJECTED_STALE_JOB\",\n                `coordinator request timed out for ${type} after ${options.timeoutMs}ms`,\n              ),\n            );\n          }, options.timeoutMs);\n\n    runtime.pending.set(reqId, {\n      expectedSwapId: options.swapId ?? null,\n      resolve,\n      reject,\n      timer,\n      signal: options.signal,\n      abortHandler,\n      swapId: envelope.swap_id,\n      rejectMatchingOutOfBandErrors: options.rejectMatchingOutOfBandErrors === true,\n      requireNonNullResponseSwapId: options.requireNonNullResponseSwapId === true,\n    });\n    if (abortHandler !== undefined) {\n      options.signal?.addEventListener(\"abort\", abortHandler, { once: true });\n      if (options.signal?.aborted === true) {\n        abortHandler();\n        return;\n      }\n    }\n    options.onLog?.(`-> ${type} req_id=${reqId}`, \"out\");\n    try {\n      channel.send(frame);\n    } catch (error) {\n      rejectPending(runtime, reqId, error instanceof Error ? error : new Error(String(error)));\n    }\n  });\n}\n\nexport function awaitPush(\n  session: Session,\n  type: CoordinatorMessageType,\n  options: AwaitPushOptions = {},\n): Promise<Envelope> {\n  const state = getSessionState(session);\n  const runtime = ensureProtocolRuntime(state);\n  const timeoutMs = options.timeoutMs === undefined ? 30_000 : options.timeoutMs;\n\n  return new Promise((resolve, reject) => {\n    const timer =\n      timeoutMs === null\n        ? null\n        : setTimeout(() => {\n            removePushWaiter(runtime, type, waiter);\n            reject(new CommandError(\"REJECTED_STALE_JOB\", `timed out waiting for ${type} push`));\n          }, timeoutMs);\n    const waiter: PushWaiter = { swapId: options.swapId, resolve, reject, timer };\n    const waiters = runtime.pushWaiters.get(type) ?? [];\n    waiters.push(waiter);\n    runtime.pushWaiters.set(type, waiters);\n  });\n}\n\nexport function onEnvelope(session: Session, handler: ProtocolEnvelopeHandler): Unsubscribe {\n  const runtime = ensureProtocolRuntime(getSessionState(session));\n  runtime.envelopeHandlers.add(handler);\n  return () => runtime.envelopeHandlers.delete(handler);\n}\n\nexport function closeProtocolRuntime(session: Session): void {\n  const state = getSessionState(session);\n  const runtime = runtimes.get(state);\n  if (!runtime) return;\n  const error = new TransportError(\"CONNECTION_LOST\", \"coordinator protocol runtime closed\");\n  rejectAll(runtime, error);\n  runtime.unsubscribeChannel?.();\n  runtime.unsubscribeTransport?.();\n  runtimes.delete(state);\n}\n\nfunction ensureProtocolRuntime(state: SessionState): ProtocolRuntime {\n  const existing = runtimes.get(state);\n  if (existing) return existing;\n\n  const runtime: ProtocolRuntime = {\n    reqCounter: 0,\n    pending: new Map(),\n    pushWaiters: new Map(),\n    envelopeHandlers: new Set(),\n    unsubscribeChannel: null,\n    unsubscribeTransport: null,\n  };\n\n  if (state.channel === null) {\n    throw new TransportError(\"CONNECTION_LOST\", \"coordinator protocol requires a live channel\");\n  }\n  runtime.unsubscribeChannel = state.channel.onMessage((frame) => handleFrame(runtime, frame));\n  runtime.unsubscribeTransport = state.transport.onStateChange((transportState) => {\n    if (transportState === \"closing\" || transportState === \"closed\") {\n      rejectAll(runtime, new TransportError(\"CONNECTION_LOST\", \"coordinator transport closed\"));\n    }\n  });\n\n  runtimes.set(state, runtime);\n  return runtime;\n}\n\nfunction handleFrame(runtime: ProtocolRuntime, frame: Uint8Array): void {\n  void handleFrameAsync(runtime, frame);\n}\n\nasync function handleFrameAsync(runtime: ProtocolRuntime, frame: Uint8Array): Promise<void> {\n  const protocol = await loadProtocol();\n  const decoded = protocol.decode(frame);\n  if (!decoded.ok) {\n    rejectAll(runtime, decoded.error);\n    return;\n  }\n\n  const envelope = decoded.value;\n  if (envelope.kind === protocol.EnvelopeKind.RESPONSE) {\n    const pending = runtime.pending.get(envelope.req_id);\n    if (pending && !pendingRequestMatchesSwapId(pending, envelope.swap_id)) {\n      rejectPending(\n        runtime,\n        envelope.req_id,\n        requestSwapIdMismatchError(envelope.req_id, pending.expectedSwapId, envelope.swap_id),\n      );\n      return;\n    }\n  }\n\n  const errorPayload =\n    envelope.kind === protocol.EnvelopeKind.ERROR ? protocol.asErrorPayload(envelope) : null;\n  if (errorPayload?.failed_req_id !== undefined) {\n    const pending = runtime.pending.get(errorPayload.failed_req_id);\n    if (pending && !pendingRequestMatchesSwapId(pending, envelope.swap_id, false)) {\n      rejectPending(\n        runtime,\n        errorPayload.failed_req_id,\n        requestSwapIdMismatchError(\n          errorPayload.failed_req_id,\n          pending.expectedSwapId,\n          envelope.swap_id,\n        ),\n      );\n      return;\n    }\n  }\n\n  for (const handler of runtime.envelopeHandlers) handler(envelope);\n\n  if (envelope.kind === protocol.EnvelopeKind.ERROR) {\n    const payload = errorPayload!;\n    const error = commandErrorFromCoordinatorError(payload);\n    if (payload.failed_req_id === undefined || payload.failed_req_id === OUT_OF_BAND_REQUEST_ID) {\n      if (envelope.swap_id !== null) {\n        rejectMatchingOutOfBandErrors(runtime, envelope.swap_id, error);\n      }\n      return;\n    }\n    const pending = runtime.pending.get(payload.failed_req_id);\n    if (!pending) return;\n    if (!pendingRequestMatchesSwapId(pending, envelope.swap_id, false)) {\n      rejectPending(\n        runtime,\n        payload.failed_req_id,\n        requestSwapIdMismatchError(payload.failed_req_id, pending.expectedSwapId, envelope.swap_id),\n      );\n      return;\n    }\n    rejectPending(runtime, payload.failed_req_id, error);\n    return;\n  }\n\n  if (envelope.kind === protocol.EnvelopeKind.PUSH) {\n    resolvePushWaiter(runtime, envelope);\n    return;\n  }\n\n  if (envelope.kind !== protocol.EnvelopeKind.RESPONSE) return;\n  const pending = runtime.pending.get(envelope.req_id);\n  if (!pending) return;\n  if (!pendingRequestMatchesSwapId(pending, envelope.swap_id)) {\n    rejectPending(\n      runtime,\n      envelope.req_id,\n      requestSwapIdMismatchError(envelope.req_id, pending.expectedSwapId, envelope.swap_id),\n    );\n    return;\n  }\n  runtime.pending.delete(envelope.req_id);\n  cleanupPendingRequest(pending);\n  pending.resolve(envelope);\n}\n\nfunction pendingRequestMatchesSwapId(\n  pending: PendingRequest,\n  responseSwapId: string | null,\n  enforceNonNullResponseSwapId = true,\n): boolean {\n  if (\n    enforceNonNullResponseSwapId &&\n    pending.requireNonNullResponseSwapId &&\n    responseSwapId === null\n  ) {\n    return false;\n  }\n  return pending.expectedSwapId === null || pending.expectedSwapId === responseSwapId;\n}\n\nfunction requestSwapIdMismatchError(\n  reqId: number,\n  expectedSwapId: string | null,\n  receivedSwapId: string | null,\n): CommandError {\n  return new CommandError(\n    \"REJECTED_STATE\",\n    `coordinator response swap_id mismatch for req_id=${reqId}: expected ${expectedSwapId ?? \"null\"}, received ${receivedSwapId ?? \"null\"}`,\n    { failedReqId: reqId },\n  );\n}\n\nfunction resolvePushWaiter(runtime: ProtocolRuntime, envelope: Envelope): void {\n  const waiters = runtime.pushWaiters.get(envelope.type);\n  const waiterIndex = waiters?.findIndex(\n    (candidate) => candidate.swapId === undefined || candidate.swapId === envelope.swap_id,\n  );\n  const waiter =\n    waiters && waiterIndex !== undefined && waiterIndex >= 0\n      ? waiters.splice(waiterIndex, 1)[0]\n      : undefined;\n  if (!waiter || !waiters) return;\n  if (waiters.length === 0) {\n    runtime.pushWaiters.delete(envelope.type);\n  }\n  if (waiter.timer) clearTimeout(waiter.timer);\n  waiter.resolve(envelope);\n}\n\nfunction rejectPending(runtime: ProtocolRuntime, reqId: number, error: Error): void {\n  const pending = runtime.pending.get(reqId);\n  if (!pending) return;\n  runtime.pending.delete(reqId);\n  cleanupPendingRequest(pending);\n  pending.reject(error);\n}\n\nfunction cleanupPendingRequest(pending: PendingRequest): void {\n  if (pending.timer) clearTimeout(pending.timer);\n  if (pending.signal !== undefined && pending.abortHandler !== undefined) {\n    pending.signal.removeEventListener(\"abort\", pending.abortHandler);\n  }\n}\n\nfunction throwIfRequestAborted(signal: AbortSignal | undefined): void {\n  if (signal?.aborted === true) throw createRequestAbortError();\n}\n\nfunction createRequestAbortError(): DOMException {\n  return new DOMException(\"coordinator request aborted\", \"AbortError\");\n}\n\nfunction rejectMatchingOutOfBandErrors(\n  runtime: ProtocolRuntime,\n  swapId: string,\n  error: Error,\n): void {\n  for (const [reqId, pending] of runtime.pending) {\n    if (!pending.rejectMatchingOutOfBandErrors || pending.swapId !== swapId) continue;\n    rejectPending(runtime, reqId, error);\n  }\n}\n\nfunction commandErrorFromCoordinatorError(payload: {\n  readonly code: string;\n  readonly failed_req_id?: number;\n  readonly message: string;\n}): CommandError {\n  const coordinatorCode = toCoordinatorWireErrorCode(payload.code);\n  const message =\n    coordinatorCode === COORDINATOR_CAPACITY_FULL_ERROR_CODE\n      ? COORDINATOR_CAPACITY_FULL_USER_MESSAGE\n      : payload.message;\n  return new CommandError(commandCodeFromCoordinatorCode(coordinatorCode), message, {\n    coordinatorCode,\n    coordinatorMessage: payload.message,\n    ...(payload.failed_req_id !== undefined ? { failedReqId: payload.failed_req_id } : {}),\n  });\n}\n\nfunction commandCodeFromCoordinatorCode(code: CoordinatorWireErrorCode): CommandErrorCode {\n  switch (code) {\n    case \"ERR_UNEXPECTED_TYPE\":\n    case \"ERR_UNKNOWN_SWAP\":\n    case \"ERR_SWAP_NOT_REFUNDABLE\":\n      return \"REJECTED_STATE\";\n    case \"ERR_INITIALIZATION_BUSY\":\n    case \"ERR_PRESEAL_ADMISSION_BUSY\":\n      return \"RETRYABLE_BUSY\";\n    case COORDINATOR_CAPACITY_FULL_ERROR_CODE:\n      return \"REJECTED_RESOURCE_CAP\";\n    case \"ERR_INTERNAL\":\n    case \"ERR_SETTLEMENT_FAILED\":\n      return \"REJECTED_STALE_JOB\";\n    case \"ERR_INVALID_PAYLOAD\":\n    case \"ERR_POLICY_VIOLATION\":\n    case \"ERR_INVALID_RECOVERY_CODE\":\n    case \"ERR_DKG_FAILURE\":\n    case \"ERR_INVALID_DEPOSIT\":\n      return \"REJECTED_GUARD\";\n  }\n}\n\nfunction toCoordinatorWireErrorCode(code: string): CoordinatorWireErrorCode {\n  switch (code) {\n    case \"ERR_INVALID_PAYLOAD\":\n    case \"ERR_UNEXPECTED_TYPE\":\n    case \"ERR_UNKNOWN_SWAP\":\n    case \"ERR_POLICY_VIOLATION\":\n    case \"ERR_INVALID_RECOVERY_CODE\":\n    case \"ERR_SWAP_NOT_REFUNDABLE\":\n    case \"ERR_DKG_FAILURE\":\n    case \"ERR_INTERNAL\":\n    case \"ERR_INITIALIZATION_BUSY\":\n    case \"ERR_PRESEAL_ADMISSION_BUSY\":\n    case COORDINATOR_CAPACITY_FULL_ERROR_CODE:\n    case \"ERR_INVALID_DEPOSIT\":\n    case \"ERR_SETTLEMENT_FAILED\":\n      return code;\n    default:\n      return \"ERR_INTERNAL\";\n  }\n}\n\nfunction removePushWaiter(\n  runtime: ProtocolRuntime,\n  type: CoordinatorMessageType,\n  waiter: PushWaiter,\n): void {\n  const waiters = runtime.pushWaiters.get(type);\n  if (!waiters) return;\n  const index = waiters.indexOf(waiter);\n  if (index >= 0) waiters.splice(index, 1);\n  if (waiters.length === 0) runtime.pushWaiters.delete(type);\n}\n\nfunction rejectAll(runtime: ProtocolRuntime, error: Error): void {\n  for (const [reqId, pending] of runtime.pending.entries()) {\n    runtime.pending.delete(reqId);\n    cleanupPendingRequest(pending);\n    pending.reject(error);\n  }\n  for (const [type, waiters] of runtime.pushWaiters.entries()) {\n    runtime.pushWaiters.delete(type);\n    for (const waiter of waiters) {\n      if (waiter.timer) clearTimeout(waiter.timer);\n      waiter.reject(error);\n    }\n  }\n}\n"]}

package/dist/{chunk-3TGQ4CZ3.js → chunk-QF5TSUQE.js}

@@ -18,6 +18,12 @@ var ErrorCode = {
   ERR_DKG_FAILURE: "ERR_DKG_FAILURE",
   /** Catch-all for unexpected coordinator-side failures. */
   ERR_INTERNAL: "ERR_INTERNAL",
+  /** Admission lock acquisition timed out before any sealed write; the SDK may retry. */
+  ERR_PRESEAL_ADMISSION_BUSY: "ERR_PRESEAL_ADMISSION_BUSY",
+  /** A known initialization boundary did not commit; resume the same authenticated command. */
+  ERR_INITIALIZATION_BUSY: "ERR_INITIALIZATION_BUSY",
+  /** Global transfer capacity is full; reject without retrying or writing sealed state. */
+  ERR_ADMISSION_CAPACITY_FULL: "ERR_ADMISSION_CAPACITY_FULL",
   /** Deposit did not satisfy coordinator validation or funding policy. */
   ERR_INVALID_DEPOSIT: "ERR_INVALID_DEPOSIT",
   /** Autonomous payout/refund signing failed after the swap was accepted. */
@@ -423,6 +429,7 @@ var coordinator_envelope_schema_default = {
   $schema: "https://json-schema.org/draft/2020-12/schema",
   $id: "https://invisible.local/schemas/coordinator-envelope.v2.schema.json",
   title: "Invisible Coordinator Envelope v2",
+  maxEncodedJsonBytes: 524288,
   type: "object",
   additionalProperties: false,
   required: ["version", "kind", "type", "swap_id", "req_id", "timestamp_ms", "payload"],
@@ -952,12 +959,12 @@ var coordinator_envelope_schema_default = {
     lpShardIndex: {
       type: "integer",
       minimum: 0,
-      maximum: 299
+      maximum: 4294967294
     },
     lpShardCount: {
       type: "integer",
       minimum: 0,
-      maximum: 300
+      maximum: 500
     },
     positiveU32: {
       type: "integer",
@@ -1265,7 +1272,7 @@ var coordinator_envelope_schema_default = {
     lpCreationRefillThreshold: {
       type: "integer",
       minimum: 0,
-      maximum: 300
+      maximum: 500
     },
     payoutSpec: {
       oneOf: [
@@ -1369,6 +1376,10 @@ var coordinator_envelope_schema_default = {
         }
       ],
       properties: {
+        economics: {
+          description: "Sealed fee ownership and retry semantics. Missing predecessor snapshots are legacy.",
+          enum: ["legacy", "zero_protocol_fees"]
+        },
         asset: {
           const: "SOL"
         },
@@ -1746,6 +1757,9 @@ var coordinator_envelope_schema_default = {
         contract_id: {
           $ref: "#/$defs/string"
         },
+        deposit_origin_address: {
+          anyOf: [{ type: "null" }, { $ref: "#/$defs/string" }]
+        },
         status: {
           $ref: "#/$defs/normalUserContractStatus"
         },
@@ -2141,6 +2155,9 @@ var coordinator_envelope_schema_default = {
             "ERR_SWAP_NOT_REFUNDABLE",
             "ERR_DKG_FAILURE",
             "ERR_INTERNAL",
+            "ERR_PRESEAL_ADMISSION_BUSY",
+            "ERR_INITIALIZATION_BUSY",
+            "ERR_ADMISSION_CAPACITY_FULL",
             "ERR_INVALID_DEPOSIT",
             "ERR_SETTLEMENT_FAILED"
           ]
@@ -2671,6 +2688,8 @@ var coordinator_envelope_schema_default = {
       type: "object",
       additionalProperties: false,
       properties: {
+        shard_start_index: { $ref: "#/$defs/lpShardIndex" },
+        shards_snapshot_hash: { $ref: "#/$defs/lpShardSnapshotHash" },
         redemption_history_cursor: {
           $ref: "#/$defs/lpRedemptionId"
         }
@@ -2710,7 +2729,7 @@ var coordinator_envelope_schema_default = {
         shard_count: {
           type: "integer",
           minimum: 1,
-          maximum: 300
+          maximum: 500
         },
         shard_amount_lamports: {
           $ref: "#/$defs/positiveSafeUInt"
@@ -2718,11 +2737,11 @@ var coordinator_envelope_schema_default = {
         refill_threshold: {
           type: "integer",
           minimum: 0,
-          maximum: 300
+          maximum: 500
         },
         addresses: {
           type: "array",
-          maxItems: 300,
+          maxItems: 500,
           items: {
             $ref: "#/$defs/lpAddress"
           }
@@ -2786,7 +2805,7 @@ var coordinator_envelope_schema_default = {
         addresses: {
           type: "array",
           minItems: 1,
-          maxItems: 300,
+          maxItems: 500,
           items: {
             $ref: "#/$defs/lpAddress"
           }
@@ -2950,7 +2969,7 @@ var coordinator_envelope_schema_default = {
             },
             value: {
               type: "array",
-              maxItems: 300,
+              maxItems: 500,
               items: {
                 $ref: "#/$defs/lpShardView"
               }
@@ -3078,6 +3097,20 @@ var coordinator_envelope_schema_default = {
     lpPositionView: {
       type: "object",
       additionalProperties: false,
+      dependentRequired: {
+        shards_total_count: ["shards_snapshot_hash"],
+        shards_snapshot_hash: ["shards_total_count"],
+        shards_next_index: ["shards_total_count", "shards_snapshot_hash"]
+      },
+      allOf: [
+        {
+          if: {
+            properties: { shards_snapshot_hash: {} },
+            required: ["shards_snapshot_hash"]
+          },
+          then: { properties: { shards: { type: "array", maxItems: 50 } } }
+        }
+      ],
       required: [
         "lp_position_id",
         "status",
@@ -3101,7 +3134,7 @@ var coordinator_envelope_schema_default = {
         target_shard_count: {
           type: "integer",
           minimum: 0,
-          maximum: 300
+          maximum: 4294967295
         },
         auth_public_key: {
           $ref: "#/$defs/base64url32Bytes"
@@ -3121,15 +3154,18 @@ var coordinator_envelope_schema_default = {
         refill_threshold: {
           type: "integer",
           minimum: 0,
-          maximum: 300
+          maximum: 500
         },
         shards: {
           type: "array",
-          maxItems: 300,
+          maxItems: 500,
           items: {
             $ref: "#/$defs/lpShardView"
           }
         },
+        shards_total_count: { $ref: "#/$defs/u32" },
+        shards_next_index: { $ref: "#/$defs/lpShardIndex" },
+        shards_snapshot_hash: { $ref: "#/$defs/lpShardSnapshotHash" },
         created_at_ms: {
           $ref: "#/$defs/positiveSafeUInt"
         },
@@ -3213,6 +3249,9 @@ var coordinator_envelope_schema_default = {
         ]
       },
       properties: {
+        economic_return: {
+          $ref: "#/$defs/lpEconomicReturnSummary"
+        },
         lp_position_id: {
           $ref: "#/$defs/lpId"
         },
@@ -3278,9 +3317,9 @@ var coordinator_envelope_schema_default = {
         },
         withdrawal_tx_hashes: {
           type: "array",
-          maxItems: 300,
+          maxItems: 500,
           items: {
-            $ref: "#/$defs/lpTxSignature"
+            $ref: "#/$defs/lpViewTxSignature"
           }
         },
         redemption_history: {
@@ -3288,7 +3327,8 @@ var coordinator_envelope_schema_default = {
           maxItems: 32,
           items: {
             $ref: "#/$defs/lpRedemptionHistory"
-          }
+          },
+          maxEncodedJsonBytes: 32768
         },
         redemption_history_has_more: {
           type: "boolean"
@@ -3382,7 +3422,7 @@ var coordinator_envelope_schema_default = {
           minItems: 1,
           maxItems: 1e3,
           items: {
-            $ref: "#/$defs/lpAddress"
+            $ref: "#/$defs/lpViewAddress"
           }
         },
         destination_count: {
@@ -3392,7 +3432,7 @@ var coordinator_envelope_schema_default = {
           type: "array",
           maxItems: 32,
           items: {
-            $ref: "#/$defs/lpTxSignature"
+            $ref: "#/$defs/lpViewTxSignature"
           }
         },
         tx_signature_count: {
@@ -3421,13 +3461,13 @@ var coordinator_envelope_schema_default = {
           $ref: "#/$defs/lpId"
         },
         shard_id: {
-          $ref: "#/$defs/lpShardId"
+          $ref: "#/$defs/lpViewShardId"
         },
         index: {
           $ref: "#/$defs/lpShardIndex"
         },
         address: {
-          $ref: "#/$defs/lpAddress"
+          $ref: "#/$defs/lpViewAddress"
         },
         amount_lamports: {
           $ref: "#/$defs/safeUInt"
@@ -3454,7 +3494,7 @@ var coordinator_envelope_schema_default = {
           $ref: "#/$defs/positiveSafeUInt"
         },
         payout_tx_signature: {
-          $ref: "#/$defs/lpTxSignature"
+          $ref: "#/$defs/lpViewTxSignature"
         }
       }
     },
@@ -3528,7 +3568,7 @@ var coordinator_envelope_schema_default = {
         },
         tx_signatures: {
           type: "array",
-          maxItems: 300,
+          maxItems: 500,
           items: {
             $ref: "#/$defs/lpTxSignature"
           }
@@ -3543,25 +3583,98 @@ var coordinator_envelope_schema_default = {
           $ref: "#/$defs/safeUInt"
         }
       }
+    },
+    lpShardSnapshotHash: {
+      type: "string",
+      minLength: 64,
+      maxLength: 64,
+      pattern: "^[0-9a-f]{64}$"
+    },
+    lpViewShardId: {
+      type: "string",
+      minLength: 1,
+      maxLength: 113,
+      pattern: "^[A-Za-z0-9_:-]+$"
+    },
+    lpViewAddress: {
+      type: "string",
+      minLength: 1,
+      maxLength: 44
+    },
+    lpViewTxSignature: {
+      type: "string",
+      minLength: 1,
+      maxLength: 88
+    },
+    unsignedLamportTotalString: {
+      type: "string",
+      minLength: 1,
+      maxLength: 39,
+      pattern: "^(0|[1-9][0-9]*)$"
+    },
+    signedLamportTotalString: {
+      type: "string",
+      minLength: 1,
+      maxLength: 40,
+      pattern: "^(0|-?[1-9][0-9]*)$"
+    },
+    lpEconomicReturnSummary: {
+      type: "object",
+      additionalProperties: false,
+      required: [
+        "provider_reward_lamports",
+        "source_expense_compensation_lamports",
+        "charged_reimbursement_loss_lamports",
+        "net_economic_return_lamports"
+      ],
+      properties: {
+        provider_reward_lamports: {
+          $ref: "#/$defs/unsignedLamportTotalString"
+        },
+        source_expense_compensation_lamports: {
+          $ref: "#/$defs/unsignedLamportTotalString"
+        },
+        charged_reimbursement_loss_lamports: {
+          $ref: "#/$defs/unsignedLamportTotalString"
+        },
+        net_economic_return_lamports: {
+          $ref: "#/$defs/signedLamportTotalString"
+        }
+      }
     }
   }
 };
 
 // ../../protocol/src/coordinator/envelope.ts
 var ENVELOPE_VERSION = 2;
-var MAX_FRAME_SIZE = 256 * 1024;
+var MAX_FRAME_SIZE = 512 * 1024;
 var COORDINATOR_ENVELOPE_SCHEMA = coordinator_envelope_schema_default;
-var LP_MAX_TARGET_SHARDS = 300;
+var LP_MAX_TOTAL_SHARDS = 4294967295;
 var LP_WITHDRAW_REQUEST_PATH = "lp_command.withdrawRequest";
 var UNKNOWN_SWAP_ID = "<unknown>";
 var binaryFieldNames = new Set(COORDINATOR_BINARY_FIELD_NAMES);
-var ajv = new Ajv2020({
-  allErrors: true,
-  strict: true
-});
-var validateWireEnvelope = ajv.compile(coordinator_envelope_schema_default);
 var textEncoder = new TextEncoder();
 var textDecoder = new TextDecoder("utf-8", { fatal: true });
+var MAX_ENCODED_JSON_BYTES_KEYWORD = "maxEncodedJsonBytes";
+function createCoordinatorSchemaValidator() {
+  const ajv = new Ajv2020({ allErrors: true, strict: true });
+  ajv.addKeyword({
+    keyword: MAX_ENCODED_JSON_BYTES_KEYWORD,
+    schemaType: "number",
+    metaSchema: { type: "integer", minimum: 0, maximum: Number.MAX_SAFE_INTEGER },
+    validate: (limit, value) => {
+      try {
+        const encoded = JSON.stringify(value);
+        return encoded !== void 0 && textEncoder.encode(encoded).byteLength <= limit;
+      } catch {
+        return false;
+      }
+    },
+    errors: false
+  });
+  return ajv.compile(coordinator_envelope_schema_default);
+}
+var validateWireEnvelope = createCoordinatorSchemaValidator();
 function encode(env) {
   return textEncoder.encode(JSON.stringify(toWireEnvelope(env)));
 }
@@ -3581,6 +3694,8 @@ function safeEncode(env) {
   if (!validateWireEnvelope(wire)) {
     return { ok: false, error: schemaError(wire, validateWireEnvelope.errors ?? []) };
   }
+  const economicReturnError = validateLpEconomicReturnSemantics(wire);
+  if (economicReturnError) return { ok: false, error: economicReturnError };
   const encoded = textEncoder.encode(JSON.stringify(wire));
   if (encoded.byteLength > MAX_FRAME_SIZE) {
     return {
@@ -3721,10 +3836,10 @@ function validateUniqueLpAddresses(path, addresses) {
 function validateLpDkgFinalizeRange(path, startIndex, addressCount) {
   if (addressCount === 0) return;
   const lastIndex = startIndex + addressCount - 1;
-  if (lastIndex >= LP_MAX_TARGET_SHARDS) {
+  if (lastIndex >= LP_MAX_TOTAL_SHARDS) {
     throw new CoordinatorError(
       ErrorCode.ERR_INVALID_PAYLOAD,
-      `${path}.addresses end index (${lastIndex}) must be <= ${LP_MAX_TARGET_SHARDS - 1}`
+      `${path}.addresses end index (${lastIndex}) must be <= ${LP_MAX_TOTAL_SHARDS - 1}`
     );
   }
 }
@@ -3759,6 +3874,8 @@ function decode(raw) {
   if (!validateWireEnvelope(parsed)) {
     return { ok: false, error: schemaError(parsed, validateWireEnvelope.errors ?? []) };
   }
+  const economicReturnError = validateLpEconomicReturnSemantics(parsed);
+  if (economicReturnError) return { ok: false, error: economicReturnError };
   try {
     return { ok: true, value: fromWireEnvelope(parsed) };
   } catch (error) {
@@ -4118,7 +4235,27 @@ var asErrorPayload = (e) => {
   }
   return payload;
 };
+var LP_ECONOMIC_UNSIGNED_TOTAL_MAX = (1n << 128n) - 1n;
+var LP_ECONOMIC_SIGNED_TOTAL_MIN = -(1n << 127n);
+var LP_ECONOMIC_SIGNED_TOTAL_MAX = (1n << 127n) - 1n;
+function validateLpEconomicReturnSemantics(wire) {
+  const payload = wire.payload;
+  if (!payload || payload.case !== "position") return void 0;
+  const summary = payload.value?.actor_sync?.economic_return;
+  if (!summary) return void 0;
+  const reward = BigInt(summary.provider_reward_lamports);
+  const compensation = BigInt(summary.source_expense_compensation_lamports);
+  const loss = BigInt(summary.charged_reimbursement_loss_lamports);
+  const net = BigInt(summary.net_economic_return_lamports);
+  if (reward > LP_ECONOMIC_UNSIGNED_TOTAL_MAX || compensation > LP_ECONOMIC_UNSIGNED_TOTAL_MAX || loss > LP_ECONOMIC_UNSIGNED_TOTAL_MAX || net < LP_ECONOMIC_SIGNED_TOTAL_MIN || net > LP_ECONOMIC_SIGNED_TOTAL_MAX || net !== reward - loss) {
+    return new CoordinatorError(
+      ErrorCode.ERR_INVALID_PAYLOAD,
+      "LP economic return invariant is invalid"
+    );
+  }
+  return void 0;
+}
 
-export { COORDINATOR_BINARY_FIELD_NAMES, COORDINATOR_ENVELOPE_SCHEMA, COORDINATOR_SCHEMA_PAYLOAD_CATEGORIES, CoordinatorError, CoordinatorMessageType, DEFAULT_PAYOUT_WINDOW_ID, DIRECTION_BY_TYPE, ENVELOPE_VERSION, EnvelopeKind, ErrorCode, INITIAL_STATE, MAX_FRAME_SIZE, MessageDirection, PAYOUT_WINDOW_OPTIONS, TERMINAL_STATES, TRANSITIONS, VALID_SWAP_STATES, asDelegateAckPayload, asDelegateSharePayload, asDelegateShareResponsePayload, asDepositConfirmedPayload, asDkgCompletePayload, asDkgInitPayload, asDkgInitResponsePayload, asDkgRound1Payload, asDkgRound1ResponsePayload, asDkgRound2Payload, asDkgRound2ResponsePayload, asErrorPayload, asLpCommandResponsePayload, asPayoutExecutedPayload, asSwapRequestPayload, asSwapRequestResponsePayload, asSyncRequiredPayload, asSyncUserRequestPayload, asSyncUserResponsePayload, asWithdrawAcceptedPayload, asWithdrawExecutedPayload, asWithdrawRequestPayload, decode, encode, encodeLpCommandForSigning, encodeValidated, isAllowedInState, isAllowedKindForType, isPayoutWindowId, isValidEnvelopeKind, isValidErrorCode, isValidMessageType, isValidSwapState, lpSignedCommandEnvelope, nextState, payloadCategory, payoutWindowLabelForId, payoutWindowOptionById, safeEncode, scheduledPayoutWindowOptions, scheduledPayoutWindowSeconds };
-//# sourceMappingURL=chunk-3TGQ4CZ3.js.map
-//# sourceMappingURL=chunk-3TGQ4CZ3.js.map
+export { COORDINATOR_BINARY_FIELD_NAMES, COORDINATOR_ENVELOPE_SCHEMA, COORDINATOR_SCHEMA_PAYLOAD_CATEGORIES, CoordinatorError, CoordinatorMessageType, DEFAULT_PAYOUT_WINDOW_ID, DIRECTION_BY_TYPE, ENVELOPE_VERSION, EnvelopeKind, ErrorCode, INITIAL_STATE, MAX_ENCODED_JSON_BYTES_KEYWORD, MAX_FRAME_SIZE, MessageDirection, PAYOUT_WINDOW_OPTIONS, TERMINAL_STATES, TRANSITIONS, VALID_SWAP_STATES, asDelegateAckPayload, asDelegateSharePayload, asDelegateShareResponsePayload, asDepositConfirmedPayload, asDkgCompletePayload, asDkgInitPayload, asDkgInitResponsePayload, asDkgRound1Payload, asDkgRound1ResponsePayload, asDkgRound2Payload, asDkgRound2ResponsePayload, asErrorPayload, asLpCommandResponsePayload, asPayoutExecutedPayload, asSwapRequestPayload, asSwapRequestResponsePayload, asSyncRequiredPayload, asSyncUserRequestPayload, asSyncUserResponsePayload, asWithdrawAcceptedPayload, asWithdrawExecutedPayload, asWithdrawRequestPayload, createCoordinatorSchemaValidator, decode, encode, encodeLpCommandForSigning, encodeValidated, isAllowedInState, isAllowedKindForType, isPayoutWindowId, isValidEnvelopeKind, isValidErrorCode, isValidMessageType, isValidSwapState, lpSignedCommandEnvelope, nextState, payloadCategory, payoutWindowLabelForId, payoutWindowOptionById, safeEncode, scheduledPayoutWindowOptions, scheduledPayoutWindowSeconds };
+//# sourceMappingURL=chunk-QF5TSUQE.js.map
+//# sourceMappingURL=chunk-QF5TSUQE.js.map