@kynesyslabs/demosdk 4.0.12 → 4.0.14

package/build/websdk/programmatic/attest.js

@@ -0,0 +1,418 @@
+// Import the class directly (not via the @/abstraction barrel) to avoid
+// pulling the coin-finder/provider surface into the websdk bundle and to
+// narrow the websdk↔abstraction module cycle.
+import { Identities } from "../../abstraction/Identities.js";
+/**
+ * Identity-attestation transactions as one-call programmatic transactions.
+ *
+ * Groups the web2 identity proofs (GitHub, Twitter/X, Discord, Telegram,
+ * domain) and their removal into a single namespace. Each builder collapses
+ * the classic `infer → confirm → broadcast` flow into one call that
+ * auto-broadcasts within the configured fee ceiling: the `Identities.*`
+ * builders sign + confirm internally and return an already-confirmed
+ * `RPCResponseWithValidityData`, which the shared runner (via `ctx.run`)
+ * detects and forwards straight to broadcast without re-confirming.
+ *
+ * Also exposes {@link dahr}, the DAHR web2-proxy attestation. Unlike the
+ * identity builders, DAHR does its own sign + confirm + broadcast lifecycle
+ * server-side, so it bypasses `ctx.run` entirely and does not honour
+ * {@link ProgrammaticTxOptions}.
+ */
+export function createAttestNamespace(ctx) {
+    const identities = new Identities();
+    return {
+        /**
+         * Link a GitHub identity to the connected wallet, end to end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.github(
+         *     "https://gist.github.com/user/abc123",
+         * )
+         * ```
+         *
+         * @param proof - The GitHub gist/raw proof URL.
+         * @param referralCode - Optional referral code for incentive points.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        github: (proof, referralCode, opts) => ctx.run(() => identities.addGithubIdentity(ctx.demos, proof, referralCode, { nonce: opts?.nonce }), opts),
+        /**
+         * Link a Twitter/X identity to the connected wallet, end to end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.twitter("https://x.com/user/status/123")
+         * ```
+         *
+         * @param proof - The tweet proof URL.
+         * @param referralCode - Optional referral code for incentive points.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        twitter: (proof, referralCode, opts) => ctx.run(() => identities.addTwitterIdentity(ctx.demos, proof, referralCode, { nonce: opts?.nonce }), opts),
+        /**
+         * Link a Discord identity to the connected wallet, end to end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.discord(
+         *     "https://discord.com/channels/guild/chan/msg",
+         * )
+         * ```
+         *
+         * @param proof - The Discord message proof URL.
+         * @param referralCode - Optional referral code for incentive points.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        discord: (proof, referralCode, opts) => ctx.run(() => identities.addDiscordIdentity(ctx.demos, proof, referralCode, { nonce: opts?.nonce }), opts),
+        /**
+         * Link a Telegram identity to the connected wallet, end to end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.telegram(signedAttestation)
+         * ```
+         *
+         * @param attestation - The signed Telegram bot attestation.
+         * @param referralCode - Optional referral code for incentive points.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        telegram: (attestation, referralCode, opts) => ctx.run(() => identities.addTelegramIdentity(ctx.demos, attestation, referralCode, { nonce: opts?.nonce }), opts),
+        /**
+         * Link a domain identity (CCI) to the connected wallet, end to end.
+         *
+         * Requires the proof payload from
+         * `Identities.createDomainProofPayload` to already be hosted at
+         * `https://<host>/.well-known/demos-cci.txt`.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.domain("example.com")
+         * ```
+         *
+         * @param hostname - The domain being claimed (e.g. "example.com"). A
+         *                    full URL is also accepted; only the host is used.
+         * @param referralCode - Optional referral code for incentive points.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        domain: (hostname, referralCode, opts) => ctx.run(() => identities.addDomainIdentity(ctx.demos, hostname, referralCode, { nonce: opts?.nonce }), opts),
+        /**
+         * Remove a web2 identity from the connected wallet, end to end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.removeWeb2({
+         *     context: "github",
+         *     username: "octocat",
+         * })
+         * ```
+         *
+         * @param payload - The identity to unlink (`context` + `username`).
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        removeWeb2: (payload, opts) => ctx.run(() => identities.removeWeb2Identity(ctx.demos, payload, {
+            nonce: opts?.nonce,
+        }), opts),
+        /**
+         * Link a crosschain (XM) identity from a signature, end to end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.xm({
+         *     chain: "eth",
+         *     subchain: "mainnet",
+         *     targetAddress: "0x...",
+         *     signature: "0x...",
+         * })
+         * ```
+         *
+         * @param payload - The signature-inference payload identifying the
+         *                   crosschain address to link.
+         * @param referralCode - Optional referral code for incentive points.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        xm: (payload, referralCode, opts) => ctx.run(() => identities.inferXmIdentity(ctx.demos, payload, referralCode, { nonce: opts?.nonce }), opts),
+        /**
+         * Remove a crosschain (XM) identity from the connected wallet, end to
+         * end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.removeXm({
+         *     chain: "eth",
+         *     subchain: "mainnet",
+         *     targetAddress: "0x...",
+         * })
+         * ```
+         *
+         * @param payload - The crosschain identity to unlink.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        removeXm: (payload, opts) => ctx.run(() => identities.removeXmIdentity(ctx.demos, payload, {
+            nonce: opts?.nonce,
+        }), opts),
+        /**
+         * Bind post-quantum (PQC) identities to the connected wallet, end to
+         * end.
+         *
+         * Generates the requested PQC keypairs, signs each address with the
+         * wallet's ed25519 key, and links them on the GCR.
+         *
+         * @example
+         * ```ts
+         * // Bind every supported PQC algorithm:
+         * await demos.run.attest.pqc()
+         * // Or a specific subset:
+         * await demos.run.attest.pqc(["ml-dsa-65"])
+         * ```
+         *
+         * @param algorithms - The PQC algorithms to bind, or `"all"` (default)
+         *                      to bind every supported algorithm.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        pqc: (algorithms = "all", opts) => ctx.run(() => identities.bindPqcIdentity(ctx.demos, algorithms, {
+            nonce: opts?.nonce,
+        }), opts),
+        /**
+         * Remove post-quantum (PQC) identities from the connected wallet, end
+         * to end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.removePqc()
+         * ```
+         *
+         * @param algorithms - The PQC algorithms to remove, or `"all"`
+         *                      (default) to remove every supported algorithm.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        removePqc: (algorithms = "all", opts) => ctx.run(() => identities.removePqcIdentity(ctx.demos, algorithms, {
+            nonce: opts?.nonce,
+        }), opts),
+        /**
+         * Link an Unstoppable Domain identity to the connected wallet, end to
+         * end.
+         *
+         * The signing address must be the owner or an authorized address in the
+         * supplied {@link UnifiedDomainResolution} (resolve it first via
+         * `Identities.resolveUDDomain`), and must have signed the challenge.
+         *
+         * @example
+         * ```ts
+         * const resolution = await demos.abstraction.identities.resolveUDDomain(
+         *     demos,
+         *     "brad.crypto",
+         * )
+         * await demos.run.attest.ud(
+         *     signingAddress,
+         *     signature,
+         *     challenge,
+         *     resolution,
+         * )
+         * ```
+         *
+         * @param signingAddress - The address used to sign the challenge (owner
+         *                          or authorized on the domain).
+         * @param signature - The signature over the challenge message.
+         * @param challenge - The challenge message that was signed.
+         * @param resolutionData - The resolved domain data (owner, network,
+         *                          registry type, authorized addresses).
+         * @param referralCode - Optional referral code for incentive points.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        ud: (signingAddress, signature, challenge, resolutionData, referralCode, opts) => ctx.run(() => identities.addUnstoppableDomainIdentity(ctx.demos, signingAddress, signature, challenge, resolutionData, referralCode, { nonce: opts?.nonce }), opts),
+        /**
+         * Remove an Unstoppable Domain identity from the connected wallet, end
+         * to end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.removeUd("brad.crypto")
+         * ```
+         *
+         * @param domain - The UD domain to unlink (e.g. "brad.crypto").
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        removeUd: (domain, opts) => ctx.run(() => identities.removeUnstoppableDomainIdentity(ctx.demos, domain, { nonce: opts?.nonce }), opts),
+        /**
+         * Link a Nomis wallet identity to the connected wallet, end to end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.nomis({
+         *     walletAddress: "0x...",
+         *     chain: "evm",
+         *     subchain: "mainnet",
+         *     score: 42,
+         * })
+         * ```
+         *
+         * @param payload - The Nomis wallet identity data to link.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        nomis: (payload, opts) => ctx.run(() => identities.addNomisIdentity(ctx.demos, payload, {
+            nonce: opts?.nonce,
+        }), opts),
+        /**
+         * Remove a Nomis wallet identity from the connected wallet, end to end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.removeNomis({
+         *     walletAddress: "0x...",
+         *     chain: "evm",
+         *     subchain: "mainnet",
+         * })
+         * ```
+         *
+         * @param payload - The Nomis wallet identity data identifying the
+         *                   identity to remove.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        removeNomis: (payload, opts) => ctx.run(() => identities.removeNomisIdentity(ctx.demos, payload, {
+            nonce: opts?.nonce,
+        }), opts),
+        /**
+         * Link a Human Passport identity to the connected wallet, end to end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.humanpassport({
+         *     address: "0x...",
+         *     verificationMethod: "api",
+         * })
+         * ```
+         *
+         * @param payload - The Human Passport identity data to link.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        humanpassport: (payload, opts) => ctx.run(() => identities.addHumanPassportIdentity(ctx.demos, payload, {
+            nonce: opts?.nonce,
+        }), opts),
+        /**
+         * Remove a Human Passport identity from the connected wallet, end to
+         * end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.removeHumanpassport("0x...")
+         * ```
+         *
+         * @param address - The EVM address of the Human Passport identity to
+         *                   remove.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        removeHumanpassport: (address, opts) => ctx.run(() => identities.removeHumanPassportIdentity(ctx.demos, address, {
+            nonce: opts?.nonce,
+        }), opts),
+        /**
+         * Link an Ethos wallet identity to the connected wallet, end to end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.ethos({
+         *     chain: "evm",
+         *     subchain: "mainnet",
+         *     address: "0x...",
+         *     score: 1600,
+         *     lastSyncedAt: new Date().toISOString(),
+         * })
+         * ```
+         *
+         * @param payload - The Ethos wallet identity data to link.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        ethos: (payload, opts) => ctx.run(() => identities.addEthosIdentity(ctx.demos, payload, {
+            nonce: opts?.nonce,
+        }), opts),
+        /**
+         * Remove an Ethos wallet identity from the connected wallet, end to
+         * end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.removeEthos({
+         *     chain: "evm",
+         *     subchain: "mainnet",
+         *     address: "0x...",
+         * })
+         * ```
+         *
+         * @param payload - The identifying data (chain, subchain, address) for
+         *                   the Ethos identity to remove.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        removeEthos: (payload, opts) => ctx.run(() => identities.removeEthosIdentity(ctx.demos, payload, {
+            nonce: opts?.nonce,
+        }), opts),
+        /**
+         * Link a web2 identity via a TLSNotary attestation, end to end.
+         *
+         * The proof and its associated fields come from a TLSNotary
+         * presentation over the platform's API (GitHub, Discord, or Telegram).
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.tlsn(
+         *     "github",
+         *     presentation,
+         *     recvHash,
+         *     proofRanges,
+         *     revealedRecv,
+         *     "octocat",
+         *     583231,
+         * )
+         * ```
+         *
+         * @param context - The platform context ("github", "discord", or
+         *                   "telegram").
+         * @param proof - The TLSNotary presentation.
+         * @param recvHash - The hash of the proven received transcript.
+         * @param proofRanges - The revealed byte ranges of the transcript.
+         * @param revealedRecv - The revealed received transcript bytes.
+         * @param username - The username from the proven response.
+         * @param userId - The user id from the proven response.
+         * @param referralCode - Optional referral code for incentive points.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        tlsn: (context, proof, recvHash, proofRanges, revealedRecv, username, userId, referralCode, opts) => ctx.run(() => identities.addWeb2IdentityViaTLSN(ctx.demos, context, proof, recvHash, proofRanges, revealedRecv, username, userId, referralCode, { nonce: opts?.nonce }), opts),
+        /**
+         * Remove a web2 identity that was added via TLSNotary, end to end.
+         *
+         * @example
+         * ```ts
+         * await demos.run.attest.removeTlsn("github", "octocat")
+         * ```
+         *
+         * @param context - The platform context ("github", "discord", or
+         *                   "telegram").
+         * @param username - The username to remove.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        removeTlsn: (context, username, opts) => ctx.run(() => identities.removeWeb2IdentityViaTLSN(ctx.demos, context, username, { nonce: opts?.nonce }), opts),
+        /**
+         * Run a DAHR web2-proxy attestation.
+         *
+         * Unlike the identity builders above, DAHR does not go through
+         * `ctx.run`: the web2 proxy performs its own sign + confirm +
+         * broadcast lifecycle server-side. As a result
+         * {@link ProgrammaticTxOptions} (e.g. `maxFee`, `confirm`) do not
+         * apply here — there is no local confirm/broadcast stage to govern.
+         *
+         * @example
+         * ```ts
+         * const result = await demos.run.attest.dahr({
+         *     url: "https://api.example.com/me",
+         *     method: "GET",
+         * })
+         * ```
+         *
+         * @param params - The proxy request parameters (url, method, options).
+         * @returns The web2 proxy result, including the attested response.
+         */
+        dahr: async (params) => {
+            const proxy = await ctx.demos.web2.createDahr();
+            return proxy.startProxy(params);
+        },
+    };
+}
+//# sourceMappingURL=attest.js.map

package/build/websdk/programmatic/attest.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attest.js","sourceRoot":"","sources":["../../../../src/websdk/programmatic/attest.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,yEAAyE;AACzE,8CAA8C;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,0BAA0B,CAAA;AAsBrD;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAwB;IAC1D,MAAM,UAAU,GAAG,IAAI,UAAU,EAAE,CAAA;IAEnC,OAAO;QACH;;;;;;;;;;;;;WAaG;QACH,MAAM,EAAE,CACJ,KAAkB,EAClB,YAAqB,EACrB,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,iBAAiB,CACxB,GAAG,CAAC,KAAK,EACT,KAAK,EACL,YAAY,EACZ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CACzB,EACL,IAAI,CACP;QAEL;;;;;;;;;;;WAWG;QACH,OAAO,EAAE,CACL,KAAmB,EACnB,YAAqB,EACrB,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,kBAAkB,CACzB,GAAG,CAAC,KAAK,EACT,KAAK,EACL,YAAY,EACZ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CACzB,EACL,IAAI,CACP;QAEL;;;;;;;;;;;;;WAaG;QACH,OAAO,EAAE,CACL,KAAmB,EACnB,YAAqB,EACrB,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,kBAAkB,CACzB,GAAG,CAAC,KAAK,EACT,KAAK,EACL,YAAY,EACZ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CACzB,EACL,IAAI,CACP;QAEL;;;;;;;;;;;WAWG;QACH,QAAQ,EAAE,CACN,WAAsC,EACtC,YAAqB,EACrB,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,mBAAmB,CAC1B,GAAG,CAAC,KAAK,EACT,WAAW,EACX,YAAY,EACZ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CACzB,EACL,IAAI,CACP;QAEL;;;;;;;;;;;;;;;;WAgBG;QACH,MAAM,EAAE,CACJ,QAAgB,EAChB,YAAqB,EACrB,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,iBAAiB,CACxB,GAAG,CAAC,KAAK,EACT,QAAQ,EACR,YAAY,EACZ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CACzB,EACL,IAAI,CACP;QAEL;;;;;;;;;;;;;WAaG;QACH,UAAU,EAAE,CACR,OAA8C,EAC9C,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,kBAAkB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;YAC9C,KAAK,EAAE,IAAI,EAAE,KAAK;SACrB,CAAC,EACN,IAAI,CACP;QAEL;;;;;;;;;;;;;;;;;WAiBG;QACH,EAAE,EAAE,CACA,OAAkC,EAClC,YAAqB,EACrB,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,eAAe,CACtB,GAAG,CAAC,KAAK,EACT,OAAO,EACP,YAAY,EACZ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CACzB,EACL,IAAI,CACP;QAEL;;;;;;;;;;;;;;;WAeG;QACH,QAAQ,EAAE,CACN,OAAoC,EACpC,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;YAC5C,KAAK,EAAE,IAAI,EAAE,KAAK;SACrB,CAAC,EACN,IAAI,CACP;QAEL;;;;;;;;;;;;;;;;;;WAkBG;QACH,GAAG,EAAE,CACD,aAAqC,KAAK,EAC1C,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE;YAC9C,KAAK,EAAE,IAAI,EAAE,KAAK;SACrB,CAAC,EACN,IAAI,CACP;QAEL;;;;;;;;;;;;WAYG;QACH,SAAS,EAAE,CACP,aAAqC,KAAK,EAC1C,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,iBAAiB,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE;YAChD,KAAK,EAAE,IAAI,EAAE,KAAK;SACrB,CAAC,EACN,IAAI,CACP;QAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA8BG;QACH,EAAE,EAAE,CACA,cAAsB,EACtB,SAAiB,EACjB,SAAiB,EACjB,cAAuC,EACvC,YAAqB,EACrB,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,4BAA4B,CACnC,GAAG,CAAC,KAAK,EACT,cAAc,EACd,SAAS,EACT,SAAS,EACT,cAAc,EACd,YAAY,EACZ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CACzB,EACL,IAAI,CACP;QAEL;;;;;;;;;;;WAWG;QACH,QAAQ,EAAE,CACN,MAAc,EACd,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,+BAA+B,CACtC,GAAG,CAAC,KAAK,EACT,MAAM,EACN,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CACzB,EACL,IAAI,CACP;QAEL;;;;;;;;;;;;;;;WAeG;QACH,KAAK,EAAE,CACH,OAA4B,EAC5B,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;YAC5C,KAAK,EAAE,IAAI,EAAE,KAAK;SACrB,CAAC,EACN,IAAI,CACP;QAEL;;;;;;;;;;;;;;;WAeG;QACH,WAAW,EAAE,CACT,OAA4B,EAC5B,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;YAC/C,KAAK,EAAE,IAAI,EAAE,KAAK;SACrB,CAAC,EACN,IAAI,CACP;QAEL;;;;;;;;;;;;;WAaG;QACH,aAAa,EAAE,CACX,OAAkC,EAClC,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,wBAAwB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;YACpD,KAAK,EAAE,IAAI,EAAE,KAAK;SACrB,CAAC,EACN,IAAI,CACP;QAEL;;;;;;;;;;;;WAYG;QACH,mBAAmB,EAAE,CACjB,OAAe,EACf,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,2BAA2B,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;YACvD,KAAK,EAAE,IAAI,EAAE,KAAK;SACrB,CAAC,EACN,IAAI,CACP;QAEL;;;;;;;;;;;;;;;;WAgBG;QACH,KAAK,EAAE,CACH,OAA4B,EAC5B,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,gBAAgB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;YAC5C,KAAK,EAAE,IAAI,EAAE,KAAK;SACrB,CAAC,EACN,IAAI,CACP;QAEL;;;;;;;;;;;;;;;;WAgBG;QACH,WAAW,EAAE,CACT,OAAgC,EAChC,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE;YAC/C,KAAK,EAAE,IAAI,EAAE,KAAK;SACrB,CAAC,EACN,IAAI,CACP;QAEL;;;;;;;;;;;;;;;;;;;;;;;;;;;;;WA6BG;QACH,IAAI,EAAE,CACF,OAA4B,EAC5B,KAA4B,EAC5B,QAAgB,EAChB,WAA4B,EAC5B,YAAsB,EACtB,QAAgB,EAChB,MAAuB,EACvB,YAAqB,EACrB,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,sBAAsB,CAC7B,GAAG,CAAC,KAAK,EACT,OAAO,EACP,KAAK,EACL,QAAQ,EACR,WAAW,EACX,YAAY,EACZ,QAAQ,EACR,MAAM,EACN,YAAY,EACZ,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CACzB,EACL,IAAI,CACP;QAEL;;;;;;;;;;;;WAYG;QACH,UAAU,EAAE,CACR,OAA4B,EAC5B,QAAgB,EAChB,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,UAAU,CAAC,yBAAyB,CAChC,GAAG,CAAC,KAAK,EACT,OAAO,EACP,QAAQ,EACR,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CACzB,EACL,IAAI,CACP;QAEL;;;;;;;;;;;;;;;;;;;WAmBG;QACH,IAAI,EAAE,KAAK,EAAE,MAAyB,EAAwB,EAAE;YAC5D,MAAM,KAAK,GAAG,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,EAAE,CAAA;YAC/C,OAAO,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAA;QACnC,CAAC;KACJ,CAAA;AACL,CAAC"}

package/build/websdk/programmatic/bridge.d.ts

@@ -0,0 +1,36 @@
+import type { BridgeOperationCompiled } from "../../bridge/nativeBridgeTypes";
+import type { ProgrammaticContext } from "./context";
+import type { ProgrammaticTxOptions, ProgrammaticTxResult } from "./types";
+/**
+ * Native bridge operations as one-call programmatic transactions.
+ *
+ * The native bridge is a two-step flow: first an RPC (`generateOperation` →
+ * node) produces a {@link BridgeOperationCompiled}, then that compiled
+ * operation is turned into a signed `nativeBridge` transaction. Compiling is a
+ * round-trip to the node and stays with the caller; this namespace exposes only
+ * the transaction step, collapsing `generateOperationTx → confirm → broadcast`
+ * into a single call that auto-broadcasts within the configured fee ceiling.
+ */
+export declare function createBridgeNamespace(ctx: ProgrammaticContext): {
+    /**
+     * Submit a compiled bridge operation as a `nativeBridge` transaction,
+     * end to end.
+     *
+     * `NativeBridgeMethods.generateOperationTx` signs the transaction
+     * (deriving nonce from the Demos instance); the shared runner then
+     * confirms it and (in `"auto"` mode) broadcasts it within the fee cap.
+     *
+     * @example
+     * ```ts
+     * // `compiled` comes back from the node's nativeBridge RPC:
+     * await demos.run.bridge.submit(compiled)
+     * // build + confirm only, broadcast later yourself:
+     * const r = await demos.run.bridge.submit(compiled, { confirm: "manual" })
+     * await demos.broadcast(r.validityData)
+     * ```
+     *
+     * @param compiled - The compiled bridge operation returned by the RPC.
+     * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+     */
+    submit: (compiled: BridgeOperationCompiled, opts?: ProgrammaticTxOptions) => Promise<ProgrammaticTxResult>;
+};

package/build/websdk/programmatic/bridge.js

@@ -0,0 +1,37 @@
+import { NativeBridgeMethods } from "../../bridge/index.js";
+/**
+ * Native bridge operations as one-call programmatic transactions.
+ *
+ * The native bridge is a two-step flow: first an RPC (`generateOperation` →
+ * node) produces a {@link BridgeOperationCompiled}, then that compiled
+ * operation is turned into a signed `nativeBridge` transaction. Compiling is a
+ * round-trip to the node and stays with the caller; this namespace exposes only
+ * the transaction step, collapsing `generateOperationTx → confirm → broadcast`
+ * into a single call that auto-broadcasts within the configured fee ceiling.
+ */
+export function createBridgeNamespace(ctx) {
+    return {
+        /**
+         * Submit a compiled bridge operation as a `nativeBridge` transaction,
+         * end to end.
+         *
+         * `NativeBridgeMethods.generateOperationTx` signs the transaction
+         * (deriving nonce from the Demos instance); the shared runner then
+         * confirms it and (in `"auto"` mode) broadcasts it within the fee cap.
+         *
+         * @example
+         * ```ts
+         * // `compiled` comes back from the node's nativeBridge RPC:
+         * await demos.run.bridge.submit(compiled)
+         * // build + confirm only, broadcast later yourself:
+         * const r = await demos.run.bridge.submit(compiled, { confirm: "manual" })
+         * await demos.broadcast(r.validityData)
+         * ```
+         *
+         * @param compiled - The compiled bridge operation returned by the RPC.
+         * @param opts - Fee ceiling / confirmation strategy / wait behaviour.
+         */
+        submit: (compiled, opts) => ctx.run(() => NativeBridgeMethods.generateOperationTx(compiled, ctx.demos, { nonce: opts?.nonce }), opts),
+    };
+}
+//# sourceMappingURL=bridge.js.map

package/build/websdk/programmatic/bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../../../../src/websdk/programmatic/bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,UAAU,CAAA;AAK9C;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,GAAwB;IAC1D,OAAO;QACH;;;;;;;;;;;;;;;;;;;WAmBG;QACH,MAAM,EAAE,CACJ,QAAiC,EACjC,IAA4B,EACC,EAAE,CAC/B,GAAG,CAAC,GAAG,CACH,GAAG,EAAE,CACD,mBAAmB,CAAC,mBAAmB,CACnC,QAAQ,EACR,GAAG,CAAC,KAAK,EACT,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,EAAE,CACzB,EACL,IAAI,CACP;KACR,CAAA;AACL,CAAC"}

package/build/websdk/programmatic/context.d.ts

@@ -0,0 +1,26 @@
+import type { Demos } from "../demosclass";
+import type { ProgrammaticTxOptions, ProgrammaticTxResult, TxSource } from "./types";
+/**
+ * Shared context handed to every programmatic-tx sub-namespace factory.
+ *
+ * Sub-namespaces (`pay`, `attest`, `tokens`, …) never call `confirm`/
+ * `broadcast` directly — they build/sign their transaction and pass it to
+ * `ctx.run(...)`, which routes through the single shared runner so fee-cap
+ * policy, confirmation strategy and result shape stay uniform.
+ */
+export interface ProgrammaticContext {
+    /** The connected Demos instance. */
+    readonly demos: Demos;
+    /**
+     * Run a transaction through the shared confirm → broadcast pipeline.
+     *
+     * @param source - A signed/unsigned tx, an already-confirmed
+     *                 validityData, or (preferred) a thunk that builds one.
+     *                 Passing a thunk defers the build so errors surface
+     *                 through the same call.
+     * @param opts - Fee ceiling, confirmation strategy and wait behaviour.
+     */
+    run(source: TxSource, opts?: ProgrammaticTxOptions): Promise<ProgrammaticTxResult>;
+}
+/** Build a {@link ProgrammaticContext} bound to a Demos instance. */
+export declare function createProgrammaticContext(demos: Demos): ProgrammaticContext;

package/build/websdk/programmatic/context.js

@@ -0,0 +1,9 @@
+import { runProgrammaticTx } from "./runner.js";
+/** Build a {@link ProgrammaticContext} bound to a Demos instance. */
+export function createProgrammaticContext(demos) {
+    return {
+        demos,
+        run: (source, opts) => runProgrammaticTx(demos, source, opts),
+    };
+}
+//# sourceMappingURL=context.js.map

package/build/websdk/programmatic/context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"context.js","sourceRoot":"","sources":["../../../../src/websdk/programmatic/context.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAA;AAiC5C,qEAAqE;AACrE,MAAM,UAAU,yBAAyB,CAAC,KAAY;IAClD,OAAO;QACH,KAAK;QACL,GAAG,EAAE,CAAC,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,iBAAiB,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,CAAC;KAChE,CAAA;AACL,CAAC"}

package/build/websdk/programmatic/contracts.d.ts

@@ -0,0 +1,79 @@
+import type { ContractInstance } from "../../contracts/ContractInstance";
+import type { ContractABI, ContractCallOptions, ContractCallResult, ContractDeployOptions } from "../../contracts/types/ContractABI";
+import type { ProgrammaticContext } from "./context";
+/**
+ * Smart-contract operations exposed under `demos.run.contracts`.
+ *
+ * IMPORTANT — these do NOT go through the shared fee-cap runner. Unlike the
+ * other `demos.run.*` namespaces, contract deploy/call are **RPC-native**:
+ * they execute directly over `demos.rpcCall` and return the contract's own
+ * result types (`ContractInstance`, `ContractCallResult`, gas `bigint`),
+ * never a {@link ProgrammaticTxResult}. There is no separate
+ * `confirm → broadcast` stage here, so {@link ProgrammaticTxOptions}
+ * (`maxFee`, `confirm`, `wait`) do not apply.
+ *
+ * NOTE: like `ipfs.*` and `d402.pay`, the smart-contract path is **not
+ * enabled on production nodes yet** — these methods are wired and typed but
+ * cannot be exercised end-to-end until the network turns the feature on.
+ *
+ * The namespace is a thin, uniform surface over {@link DemosContracts};
+ * instantiate-free access for callers who want everything under
+ * `demos.run.*`.
+ */
+export declare function createContractsNamespace(ctx: ProgrammaticContext): {
+    /**
+     * Deploy a smart contract from source. Requires a connected wallet.
+     *
+     * RPC-native (not fee-capped). Returns the deployed
+     * {@link ContractInstance}, not a `ProgrammaticTxResult`.
+     *
+     * @example
+     * ```ts
+     * const c = await demos.run.contracts.deploy(source, [arg1, arg2])
+     * await demos.run.contracts.call(c.address, "transfer", [to, 100])
+     * ```
+     *
+     * @param source - Contract source code.
+     * @param constructorArgs - Constructor arguments (default `[]`).
+     * @param options - Deploy options (gas, etc.).
+     */
+    deploy: (source: string, constructorArgs?: unknown[], options?: ContractDeployOptions) => Promise<ContractInstance>;
+    /**
+     * Get a handle to an already-deployed contract. Read-only; no tx.
+     *
+     * @param address - The contract address.
+     * @param abi - Optional ABI to type the instance.
+     */
+    at: <T = unknown>(address: string, abi?: ContractABI) => Promise<ContractInstance<T>>;
+    /**
+     * Call a method on an existing contract by address.
+     *
+     * RPC-native (not fee-capped). Returns the raw
+     * {@link ContractCallResult}, not a `ProgrammaticTxResult`.
+     *
+     * @param contractAddress - Target contract address.
+     * @param method - Method name to invoke.
+     * @param args - Method arguments (default `[]`).
+     * @param options - Call options (gas, etc.).
+     */
+    call: <T = unknown>(contractAddress: string, method: string, args?: unknown[], options?: ContractCallOptions) => Promise<ContractCallResult<T>>;
+    /**
+     * Deploy a contract from a named template.
+     *
+     * @param templateName - Registered template name.
+     * @param params - Template parameters.
+     */
+    deployTemplate: (templateName: string, params?: Record<string, unknown>) => Promise<ContractInstance>;
+    /**
+     * Estimate gas for a contract call. Read-only; no tx.
+     *
+     * @param contractAddress - Target contract address.
+     * @param method - Method name.
+     * @param args - Method arguments (default `[]`).
+     */
+    estimateGas: (contractAddress: string, method: string, args?: unknown[]) => Promise<bigint>;
+    /** Start a batch of deploy/call operations (see {@link DemosContracts.batch}). */
+    batch: () => import("../../contracts").BatchBuilder;
+    /** List the available contract template names. */
+    getAvailableTemplates: () => string[];
+};