@ixo/openhands-sdk 0.0.0-stage → 0.2.0

package/dist/cjs/chain/union.d.ts

@@ -0,0 +1,125 @@
+import { type PhonePrompt } from "./signWith.ts";
+import { type QiSession } from "./session.ts";
+/**
+ * Becoming one person.
+ *
+ * Someone taps a link, does a job, gets paid — all on a key this browser made
+ * for one ask. Later they remember they have an ixo account. Nothing about
+ * that is a mistake to be cleaned up: it is the product working, and the
+ * ceremony's job is to make the two into one without pretending the history
+ * was different.
+ *
+ * Three separate steps, because they have three different costs and any of
+ * them is worth doing alone:
+ *
+ * 1. **Link** — the record. Both directions, on chain (see below).
+ * 2. **Sweep** — the money, moved by the key that holds it.
+ * 3. **Join** — their Matrix identity enters the rooms they worked in.
+ *
+ * **Why the link is two-sided.** The guest document names the main as a
+ * controller, *and* the main document carries the guest address as a
+ * verification method. Either alone is forgeable in one direction: a guest
+ * key could name any famous DID as its controller and be rendered as that
+ * person, or a main could claim keys it does not hold. Requiring both means
+ * each side has signed for the other, which is the only version of this that
+ * can be trusted by a reader who was not there.
+ */
+export interface LocalIdentity {
+    address: string;
+    /** A guest key holds its own seed; an account signs through its door. */
+    mnemonic?: string;
+    /** An account this browser was signed into before. Signs via signWithSession. */
+    session?: QiSession;
+    collectionIds: string[];
+}
+/** Every key this browser is holding, and which ask each was minted for. */
+export declare function localIdentities(): LocalIdentity[];
+/**
+ * The guest's half: its document names the main as a controller.
+ *
+ * Signed by the guest key itself, in this browser, with gas that exists
+ * because the payout just landed on it. No phone, no passkey, no prompt.
+ * If the guest has no IID document yet it is created carrying both
+ * controllers at once — one transaction rather than two.
+ */
+export declare function linkGuestToMain(guest: LocalIdentity, mainDid: string, prompt?: PhonePrompt): Promise<string>;
+/**
+ * The main's half: its document carries the guest address as a verification
+ * method, signed by whatever the main signs with — a passkey here, a phone
+ * tap, or an auth-hub session key.
+ *
+ * This is the direction that cannot be faked by the guest, and it is why a
+ * reader can believe the pair.
+ */
+export declare function attachToMain(session: QiSession, guestAddress: string, prompt?: PhonePrompt): Promise<string>;
+/**
+ * Move what the guest key holds.
+ *
+ * Everything spendable minus a fee reserve. Deliberately *not* the last
+ * uixo: a key with nothing left cannot sign, and this key still has work to
+ * do if another ask it worked on settles later — which is exactly why the
+ * ceremony links first and sweeps per settlement rather than the reverse.
+ */
+export declare function sweep(guest: LocalIdentity, toAddress: string, prompt?: PhonePrompt): Promise<{
+    transactionHash: string;
+    amountUixo: number;
+    moved: {
+        denom: string;
+        amount: string;
+    }[];
+} | null>;
+/** Left on the guest key so it can still sign if a later ask settles to it. */
+export declare const SWEEP_FEE_RESERVE_UIXO = 30000n;
+/** What a sweep moves: the currencies asks pay in, and nothing else. */
+export declare const SWEEPABLE_DENOMS: readonly string[];
+/**
+ * The coins a sweep moves out of `held`, pure.
+ *
+ * EVERY denom asks pay in, not just gas. This swept `uixo` alone until PAY
+ * existed, which was correct for exactly as long as there was one currency;
+ * the moment an ask pays in PAY, a uixo-only sweep strands a guest's actual
+ * earnings on a key they are about to stop using. So: the ask currencies,
+ * less a uixo reserve, because the key must still be able to sign.
+ *
+ * **In BigInt, and only the denoms we know (scale review D21).** Amounts were
+ * read with `Number(raw)` and written back with `String(Math.floor(…))`. A
+ * coin with a large supply — any IBC token, a memecoin airdropped to every
+ * address — holds amounts past 2^53, which `Number` rounds and `String`
+ * prints as `1e+24`; that is not an amount the chain will parse, so the whole
+ * MsgSend failed and the person's PAY stayed stuck behind somebody else's
+ * dust. Now amounts stay integers end to end, a denom we did not issue is
+ * left where it is, and anything that does not parse as a whole number is
+ * skipped and logged — never sent.
+ */
+export declare function sweepCoins(held: Record<string, string>): {
+    denom: string;
+    amount: string;
+}[];
+/**
+ * Walk into the rooms of asks this key worked on, as the person they now are.
+ *
+ * Only possible for a session that carries its own Matrix identity; a relay
+ * session has nothing to join *with*, and its messages already carry proof of
+ * who sent them. Failures are counted, not thrown — a room that will not open
+ * is a smaller problem than a ceremony that stops halfway.
+ */
+export declare function joinAskRooms(session: QiSession, collectionIds: string[], serverName?: string | null): Promise<{
+    joined: number;
+    failed: number;
+}>;
+/** Everything the ceremony can offer for one key, decided before anything is signed. */
+export interface UnionPlan {
+    identity: LocalIdentity;
+    balanceUixo: number;
+    canSweep: boolean;
+    reason?: string;
+}
+/**
+ * What is safe to do with this key right now.
+ *
+ * The rule that matters: **an ask still waiting on a verdict pays the address
+ * that submitted it.** Sweeping that address dry before the money arrives
+ * would strand it. So a key with unsettled work links now and sweeps later.
+ */
+export declare function planFor(identity: LocalIdentity, unsettled: (address: string) => Promise<boolean>): Promise<UnionPlan>;
+//# sourceMappingURL=union.d.ts.map

package/dist/cjs/chain/union.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"union.d.ts","sourceRoot":"","sources":["../../../src/chain/union.ts"],"names":[],"mappings":"AAIA,OAAO,EAAmB,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAClE,OAAO,EAAoB,KAAK,SAAS,EAAE,MAAM,cAAc,CAAC;AAEhE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,OAAO,CAAC,EAAE,SAAS,CAAC;IACpB,aAAa,EAAE,MAAM,EAAE,CAAC;CACzB;AAID,4EAA4E;AAC5E,wBAAgB,eAAe,IAAI,aAAa,EAAE,CAgCjD;AAOD;;;;;;;GAOG;AACH,wBAAsB,eAAe,CAAC,KAAK,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CA4ClH;AAsBD;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAgClH;AAED;;;;;;;GAOG;AACH,wBAAsB,KAAK,CAAC,KAAK,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC;IAAE,eAAe,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CAAE,GAAG,IAAI,CAAC,CAkBtM;AAED,+EAA+E;AAC/E,eAAO,MAAM,sBAAsB,SAAU,CAAC;AAC9C,wEAAwE;AACxE,eAAO,MAAM,gBAAgB,EAAE,SAAS,MAAM,EAAqB,CAAC;AAEpE;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAAE,CAe5F;AAED;;;;;;;GAOG;AACH,wBAAsB,YAAY,CAAC,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,EAAE,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAyCvJ;AAED,wFAAwF;AACxF,MAAM,WAAW,SAAS;IACxB,QAAQ,EAAE,aAAa,CAAC;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAsB,OAAO,CAAC,QAAQ,EAAE,aAAa,EAAE,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,SAAS,CAAC,CAc3H"}

package/dist/cjs/chain/union.js

@@ -0,0 +1,338 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SWEEPABLE_DENOMS = exports.SWEEP_FEE_RESERVE_UIXO = void 0;
+exports.localIdentities = localIdentities;
+exports.linkGuestToMain = linkGuestToMain;
+exports.attachToMain = attachToMain;
+exports.sweep = sweep;
+exports.sweepCoins = sweepCoins;
+exports.joinAskRooms = joinAskRooms;
+exports.planFor = planFor;
+const impactxclient_sdk_1 = require("@ixo/impactxclient-sdk");
+const iid_ts_1 = require("./iid.js");
+const signWith_ts_1 = require("./signWith.js");
+const session_ts_1 = require("./session.js");
+const GUEST_PREFIX = "qi.guest.";
+/** Every key this browser is holding, and which ask each was minted for. */
+function localIdentities() {
+    if (typeof window === "undefined")
+        return [];
+    const byAddress = new Map();
+    for (let index = 0; index < window.localStorage.length; index += 1) {
+        const key = window.localStorage.key(index);
+        if (!key?.startsWith(GUEST_PREFIX))
+            continue;
+        try {
+            const stored = JSON.parse(window.localStorage.getItem(key) ?? "");
+            if (!stored.mnemonic || !stored.address)
+                continue;
+            const collectionId = key.slice(GUEST_PREFIX.length);
+            const existing = byAddress.get(stored.address);
+            /* One key can serve several asks — the same person, listed once. */
+            if (existing)
+                existing.collectionIds.push(collectionId);
+            else
+                byAddress.set(stored.address, { address: stored.address, mnemonic: stored.mnemonic, collectionIds: [collectionId] });
+        }
+        catch {
+            /* A corrupt entry is not an identity. */
+        }
+    }
+    /*
+     * And the accounts this browser was signed into before (ID9). Somebody who
+     * used a passkey account for a week and then connects the ixo account they
+     * remembered is the same case as the guest key — two addresses, one person —
+     * and the only difference is which door does the signing.
+     */
+    for (const session of (0, session_ts_1.previousSessions)()) {
+        if (!byAddress.has(session.address))
+            byAddress.set(session.address, { address: session.address, session, collectionIds: [] });
+    }
+    return [...byAddress.values()];
+}
+async function walletFor(mnemonic) {
+    const { DirectSecp256k1HdWallet } = await Promise.resolve().then(() => __importStar(require("@cosmjs/proto-signing")));
+    return DirectSecp256k1HdWallet.fromMnemonic(mnemonic, { prefix: "ixo" });
+}
+/**
+ * The guest's half: its document names the main as a controller.
+ *
+ * Signed by the guest key itself, in this browser, with gas that exists
+ * because the payout just landed on it. No phone, no passkey, no prompt.
+ * If the guest has no IID document yet it is created carrying both
+ * controllers at once — one transaction rather than two.
+ */
+async function linkGuestToMain(guest, mainDid, prompt) {
+    const { hasIidDocument, accountPubkey } = await Promise.resolve().then(() => __importStar(require("./iid.js")));
+    const guestDid = (0, iid_ts_1.didOf)(guest.address);
+    const exists = await hasIidDocument(guest.address).catch(() => false);
+    const messages = exists
+        ? [
+            {
+                typeUrl: "/ixo.iid.v1beta1.MsgAddController",
+                value: impactxclient_sdk_1.ixo.iid.v1beta1.MsgAddController.fromPartial({ id: guestDid, controllerDid: mainDid, signer: guest.address })
+            }
+        ]
+        : [
+            {
+                typeUrl: "/ixo.iid.v1beta1.MsgCreateIidDocument",
+                value: impactxclient_sdk_1.ixo.iid.v1beta1.MsgCreateIidDocument.fromPartial({
+                    id: guestDid,
+                    verifications: impactxclient_sdk_1.customMessages.iid.createIidVerificationMethods({
+                        did: guestDid,
+                        /*
+                         * The key's own public half, when the key is in hand.
+                         *
+                         * `accountPubkey` reads it off the chain, and the chain only
+                         * records one after an account's first signed transaction — so
+                         * a key that has never sent anything cannot name itself, and a
+                         * union on a fresh phone died here with "no public key on chain
+                         * yet". A guest we hold the mnemonic for needs nobody's record
+                         * of it.
+                         */
+                        pubkey: guest.mnemonic ? (await (await walletFor(guest.mnemonic)).getAccounts())[0].pubkey : await accountPubkey(guest.address),
+                        address: guest.address,
+                        controller: guestDid,
+                        type: "secp"
+                    }),
+                    signer: guest.address,
+                    /* Both from the start: itself, so it can still act, and the main,
+                       which is the claim this whole ceremony exists to record. */
+                    controllers: [guestDid, mainDid]
+                })
+            }
+        ];
+    return signAs(guest, messages, "Link this key to my account", prompt);
+}
+/**
+ * Sign as whichever kind of identity this is.
+ *
+ * A guest key holds its own seed and signs in place, with no prompt at all. An
+ * account this browser was signed into before still has its door — a passkey on
+ * the device, a phone, a session key — and signs through it. The ceremony reads
+ * the same either way, which is the point: a person does not think of one as a
+ * key and the other as an account, only as *things they did here*.
+ */
+async function signAs(identity, messages, memo, prompt) {
+    if (identity.mnemonic) {
+        const { broadcastWithWallet } = await Promise.resolve().then(() => __importStar(require("./broadcast.js")));
+        const wallet = await walletFor(identity.mnemonic);
+        const result = await broadcastWithWallet(wallet, identity.address, messages, memo);
+        return result.transactionHash ?? "";
+    }
+    if (identity.session)
+        return (await (0, signWith_ts_1.signWithSession)(identity.session, messages, memo, prompt)).transactionHash;
+    throw new Error("nothing here can sign for that address");
+}
+/**
+ * The main's half: its document carries the guest address as a verification
+ * method, signed by whatever the main signs with — a passkey here, a phone
+ * tap, or an auth-hub session key.
+ *
+ * This is the direction that cannot be faked by the guest, and it is why a
+ * reader can believe the pair.
+ */
+async function attachToMain(session, guestAddress, prompt) {
+    const mainDid = session.did ?? (0, iid_ts_1.didOf)(session.address);
+    const guestDid = (0, iid_ts_1.didOf)(guestAddress);
+    /*
+     * Built by hand rather than with `createIidVerificationMethods`, which
+     * derives the method id from the *document's* DID — so it produced an id the
+     * main already had, and the chain refused the whole transaction with
+     * "duplicated verification method id". The method being added describes the
+     * GUEST key, so it is named for the guest: `<mainDid>#<guestAddress>`.
+     *
+     * `authentication` is deliberately NOT granted. This method records that the
+     * main account vouches for that key; it must not also hand that key the
+     * power to rewrite the main's document.
+     */
+    const verification = impactxclient_sdk_1.ixo.iid.v1beta1.Verification.fromPartial({
+        relationships: ["assertionMethod"],
+        method: impactxclient_sdk_1.ixo.iid.v1beta1.VerificationMethod.fromPartial({
+            id: `${mainDid}#${guestAddress}`,
+            type: "CosmosAccountAddress",
+            controller: mainDid,
+            blockchainAccountID: guestAddress
+        })
+    });
+    const message = {
+        typeUrl: "/ixo.iid.v1beta1.MsgAddVerification",
+        value: impactxclient_sdk_1.ixo.iid.v1beta1.MsgAddVerification.fromPartial({ id: mainDid, verification, signer: session.address })
+    };
+    const result = await (0, signWith_ts_1.signWithSession)(session, [message], `Add ${guestDid.slice(0, 24)}… to my account`, prompt);
+    return result.transactionHash;
+}
+/**
+ * Move what the guest key holds.
+ *
+ * Everything spendable minus a fee reserve. Deliberately *not* the last
+ * uixo: a key with nothing left cannot sign, and this key still has work to
+ * do if another ask it worked on settles later — which is exactly why the
+ * ceremony links first and sweeps per settlement rather than the reverse.
+ */
+async function sweep(guest, toAddress, prompt) {
+    /* The strict read: an outage must throw, not come back as an empty purse
+       the ceremony would report as "nothing to move". */
+    const { balancesOfStrict } = await Promise.resolve().then(() => __importStar(require("../data/balance.js")));
+    const held = await balancesOfStrict(guest.address);
+    const moved = sweepCoins(held);
+    if (moved.length === 0)
+        return null;
+    const message = {
+        typeUrl: "/cosmos.bank.v1beta1.MsgSend",
+        value: { fromAddress: guest.address, toAddress, amount: moved }
+    };
+    const transactionHash = await signAs(guest, [message], "Move my earnings to my account", prompt);
+    /* `amountUixo` is kept for callers that predate multi-denom; it names the
+       gas leg only, and `moved` is the honest answer. */
+    return { transactionHash, amountUixo: Number(moved.find((coin) => coin.denom === "uixo")?.amount ?? 0), moved };
+}
+/** Left on the guest key so it can still sign if a later ask settles to it. */
+exports.SWEEP_FEE_RESERVE_UIXO = 30000n;
+/** What a sweep moves: the currencies asks pay in, and nothing else. */
+exports.SWEEPABLE_DENOMS = ["uixo", "upay"];
+/**
+ * The coins a sweep moves out of `held`, pure.
+ *
+ * EVERY denom asks pay in, not just gas. This swept `uixo` alone until PAY
+ * existed, which was correct for exactly as long as there was one currency;
+ * the moment an ask pays in PAY, a uixo-only sweep strands a guest's actual
+ * earnings on a key they are about to stop using. So: the ask currencies,
+ * less a uixo reserve, because the key must still be able to sign.
+ *
+ * **In BigInt, and only the denoms we know (scale review D21).** Amounts were
+ * read with `Number(raw)` and written back with `String(Math.floor(…))`. A
+ * coin with a large supply — any IBC token, a memecoin airdropped to every
+ * address — holds amounts past 2^53, which `Number` rounds and `String`
+ * prints as `1e+24`; that is not an amount the chain will parse, so the whole
+ * MsgSend failed and the person's PAY stayed stuck behind somebody else's
+ * dust. Now amounts stay integers end to end, a denom we did not issue is
+ * left where it is, and anything that does not parse as a whole number is
+ * skipped and logged — never sent.
+ */
+function sweepCoins(held) {
+    const moved = [];
+    for (const [denom, raw] of Object.entries(held)) {
+        if (!exports.SWEEPABLE_DENOMS.includes(denom)) {
+            console.info(`[union] sweep leaves ${denom} on the guest key: not a currency asks pay in`);
+            continue;
+        }
+        if (!/^\d+$/.test(raw)) {
+            console.warn(`[union] sweep skips ${denom}: balance ${JSON.stringify(raw).slice(0, 40)} is not a whole number of base units`);
+            continue;
+        }
+        const amount = denom === "uixo" ? BigInt(raw) - exports.SWEEP_FEE_RESERVE_UIXO : BigInt(raw);
+        if (amount > 0n)
+            moved.push({ denom, amount: amount.toString() });
+    }
+    return moved;
+}
+/**
+ * Walk into the rooms of asks this key worked on, as the person they now are.
+ *
+ * Only possible for a session that carries its own Matrix identity; a relay
+ * session has nothing to join *with*, and its messages already carry proof of
+ * who sent them. Failures are counted, not thrown — a room that will not open
+ * is a smaller problem than a ceremony that stops halfway.
+ */
+async function joinAskRooms(session, collectionIds, serverName) {
+    /* Both halves or nothing: a door that gave us a user id but no token — SignX
+       — cannot join anything, and that is a state, not a failure. */
+    if (!session.matrix?.accessToken || !session.matrix.baseUrl)
+        return { joined: 0, failed: 0 };
+    /*
+     * Joining is one authenticated call, so it is made directly rather than
+     * through the Matrix client package — that module reaches node:crypto for
+     * the credential derivation, and nothing in a browser bundle may.
+     *
+     * The rooms live on OUR homeserver, so the alias is addressed there and the
+     * user's homeserver federates in. `serverName` is asked of the deployment at
+     * runtime (/api/matrix/server) rather than guessed, because a homeserver's
+     * name and its URL are routinely different — `matrix.example.com` commonly
+     * serves the name `example.com`, and an alias built from the wrong one sends
+     * a homeserver off to look for a room that was never there.
+     *
+     * Falling back to the user's own server name covers the ordinary case, where
+     * they are on the same homeserver we are.
+     */
+    const base = session.matrix.baseUrl.replace(/\/+$/, "");
+    const where = serverName || session.matrix.userId.split(":").slice(1).join(":");
+    let joined = 0;
+    let failed = 0;
+    for (const collectionId of collectionIds) {
+        try {
+            const alias = `#oh-${collectionId}:${where}`;
+            const response = await fetch(`${base}/_matrix/client/v3/join/${encodeURIComponent(alias)}`, {
+                method: "POST",
+                headers: { "content-type": "application/json", authorization: `Bearer ${session.matrix.accessToken}` },
+                body: "{}",
+                signal: AbortSignal.timeout(15_000)
+            });
+            if (response.ok)
+                joined += 1;
+            else
+                failed += 1;
+        }
+        catch {
+            failed += 1;
+        }
+    }
+    return { joined, failed };
+}
+/**
+ * What is safe to do with this key right now.
+ *
+ * The rule that matters: **an ask still waiting on a verdict pays the address
+ * that submitted it.** Sweeping that address dry before the money arrives
+ * would strand it. So a key with unsettled work links now and sweeps later.
+ */
+async function planFor(identity, unsettled) {
+    const { getUixoBalance } = await Promise.resolve().then(() => __importStar(require("./query.js")));
+    const balanceUixo = await getUixoBalance(identity.address).catch(() => 0);
+    const waiting = await unsettled(identity.address).catch(() => false);
+    /*
+     * `reason` is a caveat shown to a person, not a diagnostic — so it exists
+     * only when something is being held back that they might otherwise expect.
+     * An unsettled ask is that; an empty key is not, because the card never
+     * promised to move anything from it in the first place.
+     */
+    if (waiting)
+        return { identity, balanceUixo, canSweep: false, reason: "One of these keys is still waiting on a decision. The payout lands there, so it keeps what it holds until then." };
+    if (balanceUixo <= 30_000)
+        return { identity, balanceUixo, canSweep: false };
+    return { identity, balanceUixo, canSweep: true };
+}
+//# sourceMappingURL=union.js.map

package/dist/cjs/chain/union.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"union.js","sourceRoot":"","sources":["../../../src/chain/union.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4CA,0CAgCC;AAeD,0CA4CC;AA8BD,oCAgCC;AAUD,sBAkBC;AA0BD,gCAeC;AAUD,oCAyCC;AAiBD,0BAcC;AA5VD,8DAA6D;AAG7D,qCAAiC;AACjC,+CAAkE;AAClE,6CAAgE;AAoChE,MAAM,YAAY,GAAG,WAAW,CAAC;AAEjC,4EAA4E;AAC5E,SAAgB,eAAe;IAC7B,IAAI,OAAO,MAAM,KAAK,WAAW;QAAE,OAAO,EAAE,CAAC;IAC7C,MAAM,SAAS,GAAG,IAAI,GAAG,EAAyB,CAAC;IAEnD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;QACnE,MAAM,GAAG,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,YAAY,CAAC;YAAE,SAAS;QAC7C,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAA4C,CAAC;YAC7G,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,CAAC,MAAM,CAAC,OAAO;gBAAE,SAAS;YAElD,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC/C,oEAAoE;YACpE,IAAI,QAAQ;gBAAE,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;;gBACnD,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,aAAa,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC;QAC5H,CAAC;QAAC,MAAM,CAAC;YACP,yCAAyC;QAC3C,CAAC;IACH,CAAC;IAED;;;;;OAKG;IACH,KAAK,MAAM,OAAO,IAAI,IAAA,6BAAgB,GAAE,EAAE,CAAC;QACzC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;YAAE,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAAE,CAAC,CAAC;IAChI,CAAC;IAED,OAAO,CAAC,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,KAAK,UAAU,SAAS,CAAC,QAAgB;IACvC,MAAM,EAAE,uBAAuB,EAAE,GAAG,wDAAa,uBAAuB,GAAC,CAAC;IAC1E,OAAO,uBAAuB,CAAC,YAAY,CAAC,QAAQ,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;AAC3E,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,eAAe,CAAC,KAAoB,EAAE,OAAe,EAAE,MAAoB;IAC/F,MAAM,EAAE,cAAc,EAAE,aAAa,EAAE,GAAG,wDAAa,UAAU,GAAC,CAAC;IAEnE,MAAM,QAAQ,GAAG,IAAA,cAAK,EAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,MAAM,cAAc,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAEtE,MAAM,QAAQ,GAAmB,MAAM;QACrC,CAAC,CAAC;YACE;gBACE,OAAO,EAAE,mCAAmC;gBAC5C,KAAK,EAAE,uBAAG,CAAC,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;aACrH;SACF;QACH,CAAC,CAAC;YACE;gBACE,OAAO,EAAE,uCAAuC;gBAChD,KAAK,EAAE,uBAAG,CAAC,GAAG,CAAC,OAAO,CAAC,oBAAoB,CAAC,WAAW,CAAC;oBACtD,EAAE,EAAE,QAAQ;oBACZ,aAAa,EAAE,kCAAc,CAAC,GAAG,CAAC,4BAA4B,CAAC;wBAC7D,GAAG,EAAE,QAAQ;wBACb;;;;;;;;;2BASG;wBACH,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAE,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;wBAChI,OAAO,EAAE,KAAK,CAAC,OAAO;wBACtB,UAAU,EAAE,QAAQ;wBACpB,IAAI,EAAE,MAAM;qBACb,CAAC;oBACF,MAAM,EAAE,KAAK,CAAC,OAAO;oBACrB;kFAC8D;oBAC9D,WAAW,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;iBACjC,CAAC;aACH;SACF,CAAC;IAEN,OAAO,MAAM,CAAC,KAAK,EAAE,QAAQ,EAAE,6BAA6B,EAAE,MAAM,CAAC,CAAC;AACxE,CAAC;AAED;;;;;;;;GAQG;AACH,KAAK,UAAU,MAAM,CAAC,QAAuB,EAAE,QAAwB,EAAE,IAAY,EAAE,MAAoB;IACzG,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;QACtB,MAAM,EAAE,mBAAmB,EAAE,GAAG,wDAAa,gBAAgB,GAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAClD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;QACnF,OAAQ,MAAuC,CAAC,eAAe,IAAI,EAAE,CAAC;IACxE,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO;QAAE,OAAO,CAAC,MAAM,IAAA,6BAAe,EAAC,QAAQ,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC;IAC/G,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;AAC5D,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,YAAY,CAAC,OAAkB,EAAE,YAAoB,EAAE,MAAoB;IAC/F,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,IAAI,IAAA,cAAK,EAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,MAAM,QAAQ,GAAG,IAAA,cAAK,EAAC,YAAY,CAAC,CAAC;IAErC;;;;;;;;;;OAUG;IACH,MAAM,YAAY,GAAG,uBAAG,CAAC,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,WAAW,CAAC;QAC5D,aAAa,EAAE,CAAC,iBAAiB,CAAC;QAClC,MAAM,EAAE,uBAAG,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,CAAC;YACrD,EAAE,EAAE,GAAG,OAAO,IAAI,YAAY,EAAE;YAChC,IAAI,EAAE,sBAAsB;YAC5B,UAAU,EAAE,OAAO;YACnB,mBAAmB,EAAE,YAAY;SAClC,CAAC;KACH,CAAC,CAAC;IAEH,MAAM,OAAO,GAAiB;QAC5B,OAAO,EAAE,qCAAqC;QAC9C,KAAK,EAAE,uBAAG,CAAC,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,WAAW,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,EAAE,OAAO,CAAC,OAAO,EAAE,CAAC;KAC9G,CAAC;IAEF,MAAM,MAAM,GAAG,MAAM,IAAA,6BAAe,EAAC,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,EAAE,MAAM,CAAC,CAAC;IAChH,OAAO,MAAM,CAAC,eAAe,CAAC;AAChC,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,KAAK,CAAC,KAAoB,EAAE,SAAiB,EAAE,MAAoB;IACvF;yDACqD;IACrD,MAAM,EAAE,gBAAgB,EAAE,GAAG,wDAAa,oBAAoB,GAAC,CAAC;IAChE,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAEnD,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAC/B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEpC,MAAM,OAAO,GAAiB;QAC5B,OAAO,EAAE,8BAA8B;QACvC,KAAK,EAAE,EAAE,WAAW,EAAE,KAAK,CAAC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE;KAChE,CAAC;IAEF,MAAM,eAAe,GAAG,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC,OAAO,CAAC,EAAE,gCAAgC,EAAE,MAAM,CAAC,CAAC;IACjG;yDACqD;IACrD,OAAO,EAAE,eAAe,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,MAAM,CAAC,EAAE,MAAM,IAAI,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;AAClH,CAAC;AAED,+EAA+E;AAClE,QAAA,sBAAsB,GAAG,MAAO,CAAC;AAC9C,wEAAwE;AAC3D,QAAA,gBAAgB,GAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AAEpE;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,UAAU,CAAC,IAA4B;IACrD,MAAM,KAAK,GAAwC,EAAE,CAAC;IACtD,KAAK,MAAM,CAAC,KAAK,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QAChD,IAAI,CAAC,wBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACtC,OAAO,CAAC,IAAI,CAAC,wBAAwB,KAAK,+CAA+C,CAAC,CAAC;YAC3F,SAAS;QACX,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,uBAAuB,KAAK,aAAa,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,sCAAsC,CAAC,CAAC;YAC9H,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAAG,KAAK,KAAK,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,8BAAsB,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACrF,IAAI,MAAM,GAAG,EAAE;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;;;GAOG;AACI,KAAK,UAAU,YAAY,CAAC,OAAkB,EAAE,aAAuB,EAAE,UAA0B;IACxG;qEACiE;IACjE,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,WAAW,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,CAAC;IAE7F;;;;;;;;;;;;;;OAcG;IACH,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACxD,MAAM,KAAK,GAAG,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAEhF,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,YAAY,IAAI,aAAa,EAAE,CAAC;QACzC,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,OAAO,YAAY,IAAI,KAAK,EAAE,CAAC;YAC7C,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,2BAA2B,kBAAkB,CAAC,KAAK,CAAC,EAAE,EAAE;gBAC1F,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,EAAE;gBACtG,IAAI,EAAE,IAAI;gBACV,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;aACpC,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,EAAE;gBAAE,MAAM,IAAI,CAAC,CAAC;;gBACxB,MAAM,IAAI,CAAC,CAAC;QACnB,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,CAAC,CAAC;QACd,CAAC;IACH,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;AAC5B,CAAC;AAUD;;;;;;GAMG;AACI,KAAK,UAAU,OAAO,CAAC,QAAuB,EAAE,SAAgD;IACrG,MAAM,EAAE,cAAc,EAAE,GAAG,wDAAa,YAAY,GAAC,CAAC;IACtD,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC;IAC1E,MAAM,OAAO,GAAG,MAAM,SAAS,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;IAErE;;;;;OAKG;IACH,IAAI,OAAO;QAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,iHAAiH,EAAE,CAAC;IAC1L,IAAI,WAAW,IAAI,MAAM;QAAE,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;IAC7E,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;AACnD,CAAC"}

package/dist/cjs/chain/webauthn.d.ts

@@ -0,0 +1,22 @@
+/**
+ * WebAuthn, without a fido2 library. The registration response's public key
+ * and COSE algorithm come from the browser's own accessors, and the only
+ * verifier that matters is the chain — it checks every assertion against the
+ * registered key on every transaction.
+ */
+export interface CreatedCredential {
+    credentialId: string;
+    publicKey: Uint8Array;
+    coseAlgorithm: number;
+}
+export declare function createCredential(address: string, label?: string): Promise<CreatedCredential>;
+/** Any passkey for this site — used at sign-in to discover which account it belongs to. */
+export declare function discoverCredentialId(): Promise<string>;
+export interface AssertionSignature {
+    authenticatorData: string;
+    clientDataJSON: string;
+    signature: string;
+}
+/** Sign 32 challenge bytes (a tx hash) with one specific passkey. */
+export declare function assertWithCredential(credentialId: string, challenge: Uint8Array, allowedIdBytes: Uint8Array): Promise<AssertionSignature>;
+//# sourceMappingURL=webauthn.d.ts.map

package/dist/cjs/chain/webauthn.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn.d.ts","sourceRoot":"","sources":["../../../src/chain/webauthn.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AAEH,MAAM,WAAW,iBAAiB;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,UAAU,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;CACvB;AASD,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CA2BlG;AAED,2FAA2F;AAC3F,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,MAAM,CAAC,CAM5D;AAED,MAAM,WAAW,kBAAkB;IACjC,iBAAiB,EAAE,MAAM,CAAC;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,qEAAqE;AACrE,wBAAsB,oBAAoB,CAAC,YAAY,EAAE,MAAM,EAAE,SAAS,EAAE,UAAU,EAAE,cAAc,EAAE,UAAU,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAkB/I"}

package/dist/cjs/chain/webauthn.js

@@ -0,0 +1,70 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCredential = createCredential;
+exports.discoverCredentialId = discoverCredentialId;
+exports.assertWithCredential = assertWithCredential;
+const encoding_ts_1 = require("./encoding.js");
+const env_ts_1 = require("./env.js");
+function randomChallenge() {
+    return crypto.getRandomValues(new Uint8Array(64));
+}
+/** Re-back bytes on a plain ArrayBuffer — WebAuthn's BufferSource is strict about it. */
+const asBuffer = (bytes) => new Uint8Array(bytes);
+async function createCredential(address, label) {
+    const credential = (await navigator.credentials.create({
+        publicKey: {
+            challenge: randomChallenge(),
+            rp: { id: (0, env_ts_1.rpId)(), name: "Openhands Network" },
+            user: {
+                id: asBuffer(Uint8Array.from(address, (char) => char.charCodeAt(0))),
+                name: label?.trim() || address,
+                displayName: label?.trim() || address
+            },
+            pubKeyCredParams: [
+                { type: "public-key", alg: -7 },
+                { type: "public-key", alg: -257 }
+            ],
+            authenticatorSelection: { userVerification: "preferred", residentKey: "preferred" },
+            attestation: "none",
+            timeout: 60000
+        }
+    }));
+    if (!credential)
+        throw new Error("Passkey creation was cancelled");
+    const response = credential.response;
+    const spki = response.getPublicKey();
+    const coseAlgorithm = response.getPublicKeyAlgorithm();
+    if (!spki || !coseAlgorithm)
+        throw new Error("This browser did not expose the passkey's public key");
+    return { credentialId: credential.id, publicKey: new Uint8Array(spki), coseAlgorithm };
+}
+/** Any passkey for this site — used at sign-in to discover which account it belongs to. */
+async function discoverCredentialId() {
+    const credential = (await navigator.credentials.get({
+        publicKey: { challenge: randomChallenge(), rpId: (0, env_ts_1.rpId)(), userVerification: "preferred", timeout: 60000 }
+    }));
+    if (!credential)
+        throw new Error("Sign-in was cancelled");
+    return credential.id;
+}
+/** Sign 32 challenge bytes (a tx hash) with one specific passkey. */
+async function assertWithCredential(credentialId, challenge, allowedIdBytes) {
+    const credential = (await navigator.credentials.get({
+        publicKey: {
+            challenge: asBuffer(challenge),
+            rpId: (0, env_ts_1.rpId)(),
+            allowCredentials: [{ type: "public-key", id: asBuffer(allowedIdBytes) }],
+            userVerification: "preferred",
+            timeout: 60000
+        }
+    }));
+    if (!credential)
+        throw new Error("Signing was cancelled");
+    const response = credential.response;
+    return {
+        authenticatorData: (0, encoding_ts_1.bytesToBase64url)(response.authenticatorData),
+        clientDataJSON: (0, encoding_ts_1.bytesToBase64url)(response.clientDataJSON),
+        signature: (0, encoding_ts_1.bytesToBase64url)(response.signature)
+    };
+}
+//# sourceMappingURL=webauthn.js.map

package/dist/cjs/chain/webauthn.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"webauthn.js","sourceRoot":"","sources":["../../../src/chain/webauthn.ts"],"names":[],"mappings":";;AAuBA,4CA2BC;AAGD,oDAMC;AASD,oDAkBC;AAtFD,+CAAiD;AACjD,qCAAgC;AAehC,SAAS,eAAe;IACtB,OAAO,MAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC;AACpD,CAAC;AAED,yFAAyF;AACzF,MAAM,QAAQ,GAAG,CAAC,KAAiB,EAA2B,EAAE,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,CAAC;AAEhF,KAAK,UAAU,gBAAgB,CAAC,OAAe,EAAE,KAAc;IACpE,MAAM,UAAU,GAAG,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,MAAM,CAAC;QACrD,SAAS,EAAE;YACT,SAAS,EAAE,eAAe,EAAE;YAC5B,EAAE,EAAE,EAAE,EAAE,EAAE,IAAA,aAAI,GAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;YAC7C,IAAI,EAAE;gBACJ,EAAE,EAAE,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;gBACpE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO;gBAC9B,WAAW,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,OAAO;aACtC;YACD,gBAAgB,EAAE;gBAChB,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE;gBAC/B,EAAE,IAAI,EAAE,YAAY,EAAE,GAAG,EAAE,CAAC,GAAG,EAAE;aAClC;YACD,sBAAsB,EAAE,EAAE,gBAAgB,EAAE,WAAW,EAAE,WAAW,EAAE,WAAW,EAAE;YACnF,WAAW,EAAE,MAAM;YACnB,OAAO,EAAE,KAAK;SACf;KACF,CAAC,CAA+B,CAAC;IAClC,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC;IAEnE,MAAM,QAAQ,GAAG,UAAU,CAAC,QAA4C,CAAC;IACzE,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,EAAE,CAAC;IACrC,MAAM,aAAa,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;IACvD,IAAI,CAAC,IAAI,IAAI,CAAC,aAAa;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IAErG,OAAO,EAAE,YAAY,EAAE,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,UAAU,CAAC,IAAI,CAAC,EAAE,aAAa,EAAE,CAAC;AACzF,CAAC;AAED,2FAA2F;AACpF,KAAK,UAAU,oBAAoB;IACxC,MAAM,UAAU,GAAG,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC;QAClD,SAAS,EAAE,EAAE,SAAS,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAA,aAAI,GAAE,EAAE,gBAAgB,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE;KACzG,CAAC,CAA+B,CAAC;IAClC,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAC1D,OAAO,UAAU,CAAC,EAAE,CAAC;AACvB,CAAC;AAQD,qEAAqE;AAC9D,KAAK,UAAU,oBAAoB,CAAC,YAAoB,EAAE,SAAqB,EAAE,cAA0B;IAChH,MAAM,UAAU,GAAG,CAAC,MAAM,SAAS,CAAC,WAAW,CAAC,GAAG,CAAC;QAClD,SAAS,EAAE;YACT,SAAS,EAAE,QAAQ,CAAC,SAAS,CAAC;YAC9B,IAAI,EAAE,IAAA,aAAI,GAAE;YACZ,gBAAgB,EAAE,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,QAAQ,CAAC,cAAc,CAAC,EAAE,CAAC;YACxE,gBAAgB,EAAE,WAAW;YAC7B,OAAO,EAAE,KAAK;SACf;KACF,CAAC,CAA+B,CAAC;IAClC,IAAI,CAAC,UAAU;QAAE,MAAM,IAAI,KAAK,CAAC,uBAAuB,CAAC,CAAC;IAE1D,MAAM,QAAQ,GAAG,UAAU,CAAC,QAA0C,CAAC;IACvE,OAAO;QACL,iBAAiB,EAAE,IAAA,8BAAgB,EAAC,QAAQ,CAAC,iBAAiB,CAAC;QAC/D,cAAc,EAAE,IAAA,8BAAgB,EAAC,QAAQ,CAAC,cAAc,CAAC;QACzD,SAAS,EAAE,IAAA,8BAAgB,EAAC,QAAQ,CAAC,SAAS,CAAC;KAChD,CAAC;AACJ,CAAC"}

package/dist/cjs/chain.d.ts

@@ -0,0 +1,35 @@
+/**
+ * `@ixo/openhands-sdk/chain` — accounts, asks, allowances, delegation,
+ * guests, broadcasting, the store and the session.
+ *
+ * Membership is EXACTLY the old `@openhands/chain` root, on purpose. Pages
+ * reach this barrel with `await import(...)`, where a bundler cannot shake
+ * what the page does not call, so every module added here is weight on the
+ * poster's controls. `signx` (node:crypto), `signWith`, `sponsor`, `send`,
+ * `union`, `gate`, `allowanceRead`, `signer`, `encoding`, `webauthn`,
+ * `pendingTransact`, `money`, `accountProof` and `grantPending` stay
+ * subpath-only (`@ixo/openhands-sdk/chain/<name>`); the last three also
+ * ride the `protocol` barrel.
+ *
+ * Isomorphic by contract: `barrels.test.ts` fails if anything reachable from
+ * here imports a `node:` builtin or a server-only package.
+ */
+export { createAccount, settleNewAccount, signIn, type CreatedAccount } from "./chain/account.ts";
+export { grantAllowance, readAllowance, revokeAllowance, type Allowance } from "./chain/allowance.ts";
+export { AmbiguousDelegation, connectAgent, delegatesOf, disconnectAgent, readDelegation, readDelegationFor, resolveDelegation, DEFAULT_DAYS as CONNECT_DAYS, GAS_LOAN_UIXO, type Delegation } from "./chain/delegate.ts";
+export { bridgeMsgs, bridgeToKey, type DeedBalance, type DeedSearch } from "./chain/bridge.ts";
+export { drawableSubscriptions, drawCredit, drawMsgs, type Subscription } from "./chain/subscription.ts";
+export { askAdminAccount, AskPending, claimFormRef, createAskCollection, createAskEntity, didOf, evaluateClaim, isBroadcastTimeout, postAsk, prepareAsk, resolveAsk, submitOwnClaim, type AskMarker, type AskPosting, type AskTerms, type ClaimFormRef, type PostAskOptions, type PreparedAsk } from "./chain/ask.ts";
+export { answerArrived, putBack, readTakeBack, takeBack, type Coin, type TakeBackPlan } from "./chain/takeBack.ts";
+export { ensureIidDocument, hasIidDocument } from "./chain/iid.ts";
+export { claimWithPasskey, guestFunnelAvailable, guestSubmit, loadGuestKey } from "./chain/guest.ts";
+export { broadcastAsAccount, broadcastWithPasskey, broadcastWithWallet } from "./chain/broadcast.ts";
+export { MAX_PROOF_BYTES, uploadProofFile, uploadPublicJson } from "./chain/store.ts";
+export { clearSession, loadSession, saveSession, subscribeSession, type QiSession } from "./chain/session.ts";
+export { getFeegrantGranter, getQueryClient, getUixoBalance, ensureGas } from "./chain/query.ts";
+export { faucetUrl, network, rpcUrl } from "./chain/env.ts";
+export { oracleUrl, notifyOracle, type OracleEvent } from "./chain/oracle.ts";
+export { proveWithGuestKey } from "./chain/guest.ts";
+export { proveWithPasskey } from "./chain/account.ts";
+export { kindOf, speaksForItself, type SessionKind } from "./chain/session.ts";
+//# sourceMappingURL=chain.d.ts.map

package/dist/cjs/chain.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"chain.d.ts","sourceRoot":"","sources":["../../src/chain.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAAE,aAAa,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAClG,OAAO,EAAE,cAAc,EAAE,aAAa,EAAE,eAAe,EAAE,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AACtG,OAAO,EAAE,mBAAmB,EAAE,YAAY,EAAE,WAAW,EAAE,eAAe,EAAE,cAAc,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,YAAY,IAAI,YAAY,EAAE,aAAa,EAAE,KAAK,UAAU,EAAE,MAAM,qBAAqB,CAAC;AAC1N,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,KAAK,WAAW,EAAE,KAAK,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAC/F,OAAO,EAAE,qBAAqB,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,YAAY,EAAE,MAAM,yBAAyB,CAAC;AACzG,OAAO,EACL,eAAe,EACf,UAAU,EACV,YAAY,EACZ,mBAAmB,EACnB,eAAe,EACf,KAAK,EACL,aAAa,EACb,kBAAkB,EAClB,OAAO,EACP,UAAU,EACV,UAAU,EACV,cAAc,EACd,KAAK,SAAS,EACd,KAAK,UAAU,EACf,KAAK,QAAQ,EACb,KAAK,YAAY,EACjB,KAAK,cAAc,EACnB,KAAK,WAAW,EACjB,MAAM,gBAAgB,CAAC;AAGxB,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,QAAQ,EAAE,KAAK,IAAI,EAAE,KAAK,YAAY,EAAE,MAAM,qBAAqB,CAAC;AACnH,OAAO,EAAE,iBAAiB,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,kBAAkB,CAAC;AACrG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AACrG,OAAO,EAAE,eAAe,EAAE,eAAe,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACtF,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,gBAAgB,EAAE,KAAK,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAC9G,OAAO,EAAE,kBAAkB,EAAE,cAAc,EAAE,cAAc,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AAOjG,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,gBAAgB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,KAAK,WAAW,EAAE,MAAM,mBAAmB,CAAC;AAE9E,OAAO,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAMtD,OAAO,EAAE,MAAM,EAAE,eAAe,EAAE,KAAK,WAAW,EAAE,MAAM,oBAAoB,CAAC"}