@laceio/sdk 0.1.0 → 0.1.1-canary.0

package/dist/{init-DbZ5byj42.js → init-TbB38KNt2.js}

@@ -1,18 +1,24 @@
 import "./chunk-D6g4UhsZ.js";
 import "./_polyfill-buffer-patch-JcrfT1gU.js";
-import { F as RewardAddress, kt as BaseAddress, r as CredentialType, t as Address } from "./Address-_VPkf7Xh.js";
-import { a as extractUniqueStakeKeys, c as nativeScriptPolicyId, i as getTopOnChainActivity, o as UtxoCacheKey, r as groupCardanoAddressesByAccount, s as autoDismissFailureOnSuccess } from "./group-cardano-addresses-by-account-p4dXmCoj.js";
-import { t as AddressType } from "./types-B61DQoFW.js";
-import { a as isCardanoAccount, g as CardanoPaymentAddress, o as isCardanoAddress } from "./util-CQSJU0wT.js";
-import { s as Timestamp } from "./time.vo-Xln4yGBU.js";
-import { t as Err } from "./asyncoption-CzIVH5Y1.js";
-import { i as isThoroughAddressDiscoveryOperation, n as createSyncOperationId, o as parseTipHashFromOperationId, r as isAddressDiscoveryOperation, s as CardanoSyncFailureId, t as CardanoSyncOperationType } from "./sync-operation-utils-CAaCGvEN.js";
-import { t as toEmpty } from "./toEmpty-DzLd-ZCi.js";
-import { n as retryBackoff, t as PROVIDER_REQUEST_RETRY_CONFIG } from "./retry-config-VdbuqBsI.js";
-import { t as CardanoNetworkId } from "./cardano-network-id.vo-CTYe-Oix.js";
-import { t as CardanoTxId } from "./cardano-tx-id.vo-BMwemq5x.js";
-import { t as whileActive } from "./while-active-CNXeLxre.js";
-import { EMPTY, catchError, combineLatest, concat, distinctUntilChanged, exhaustMap, filter, forkJoin, from, ignoreElements, interval, map, merge, mergeMap, of, race, switchMap, take, takeUntil, tap, timer, toArray, withLatestFrom } from "rxjs";
+import "./dist-B00GN41m.js";
+import { Ft as BaseAddress, I as RewardAddress, r as CredentialType, t as Address } from "./Address-_c_-9hLC.js";
+import "./_web-crypto-random-bytes-BvzwTYPG.js";
+import { a as extractUniqueStakeKeys, i as getTopOnChainActivity, o as UtxoCacheKey, r as groupCardanoAddressesByAccount, s as nativeScriptPolicyId } from "./group-cardano-addresses-by-account-TqvESg9x.js";
+import { t as AddressType } from "./types-By-XeXWg.js";
+import { a as isCardanoAccount, g as CardanoPaymentAddress, o as isCardanoAddress, u as toContractAddress } from "./util-DHxtzUzY.js";
+import { s as Timestamp } from "./time.vo-C17-tYq3.js";
+import { t as Err } from "./asyncoption-DZQGfznq.js";
+import { t as autoDismissFailureOnSuccess } from "./auto-dismiss-failure-on-success-Bpod-v4r.js";
+import { t as AccountId } from "./account-id.vo-KDTWJ-W5.js";
+import { t as toEmpty } from "./toEmpty-Djj-QbpI.js";
+import { n as retryBackoff, t as PROVIDER_REQUEST_RETRY_CONFIG } from "./retry-config-Bu5Yn5ua.js";
+import { t as CardanoNetworkId } from "./cardano-network-id.vo-CeLJqmb_.js";
+import { t as CardanoTxId } from "./cardano-tx-id.vo-DJ70NC0-.js";
+import { i as isThoroughAddressDiscoveryOperation, n as createSyncOperationId, o as parseTipHashFromOperationId, r as isAddressDiscoveryOperation, s as CardanoSyncFailureId, t as CardanoSyncOperationType } from "./sync-operation-utils-BimBpvI3.js";
+import { o as isCardanoCustodyAccount, t as verifyCardanoCustodyAccountIdentity } from "./identity-DxPhxkZs.js";
+import { t as whileActive } from "./while-active-CDBnUlQA.js";
+import { t as cardanoCustodyActivityMetadataOf } from "./pending-operation-Ljijb1Uh.js";
+import { EMPTY, catchError, combineLatest, concat, distinctUntilChanged, exhaustMap, filter, forkJoin, from, ignoreElements, interval, map, merge, mergeMap, of, race, scan, switchMap, take, takeUntil, tap, throwError, timer, toArray, withLatestFrom } from "rxjs";
 //#region ../../packages/lib/core/src/address.ts
 /**
 * CIP-19 Cardano address encoding — credentials → bech32, via `@cardano-sdk/core`'s
@@ -173,46 +179,6 @@ const filterFrankenUtxos = (utxos, ownedCredentials) => {
 	};
 };
 //#endregion
-//#region ../../packages/module/cardano-sync/src/store/side-effects/account-extensions.stable.ts
-/** Whether the account is of a kind a feature adds: never. */
-const isExtensionAccount = (_account) => false;
-/** Address discovery for an account of a kind a feature adds: none exists. */
-const extensionAccountAddressDiscovery = (_params) => EMPTY;
-/** The UTxO fetch of an account of a kind a feature adds: none exists. */
-const extensionAccountUtxos = (_params) => EMPTY;
-/** The sync side effects the features add: none. */
-const extensionSyncSideEffects = [];
-//#endregion
-//#region ../../packages/module/cardano-sync/src/store/get-script-address.ts
-/**
-* Method to derive the wallet's grouped address from the script and network ID.
-*
-* @param paymentScript - The native script to be used for the payment credential.
-* @param stakingScript - The native script to be used for the staking credential.
-* @param networkId - The network identifier.
-* @returns The derived grouped address.
-*/
-const getScriptAddress = (paymentScript, stakingScript, networkId) => {
-	const paymentScriptHash = nativeScriptPolicyId(paymentScript);
-	const stakingScriptHash = nativeScriptPolicyId(stakingScript);
-	const paymentScriptCredential = {
-		hash: paymentScriptHash,
-		type: CredentialType.ScriptHash
-	};
-	const stakeScriptCredential = {
-		hash: stakingScriptHash,
-		type: CredentialType.ScriptHash
-	};
-	return {
-		accountIndex: 0,
-		address: encodeBaseAddress(networkId, paymentScriptCredential, stakeScriptCredential),
-		index: 0,
-		networkId,
-		rewardAccount: encodeRewardAddress(networkId, stakeScriptCredential),
-		type: AddressType.External
-	};
-};
-//#endregion
 //#region ../../packages/module/cardano-sync/src/store/side-effects/chain-account-state-operations.ts
 /**
 * Builds the `addSyncOperation` actions that chain account-state operations
@@ -256,6 +222,245 @@ const chainAccountStateOperations = (params) => {
 	}));
 };
 //#endregion
+//#region ../../packages/module/cardano-sync/src/store/side-effects/throw-on-error.ts
+/** The value of a provider result, or its error thrown. */
+const throwOnError = (result) => {
+	if (result.isErr()) throw result.unwrapErr();
+	return result.unwrap();
+};
+//#endregion
+//#region ../../packages/module/cardano-sync/src/store/side-effects/custody-accounts.ts
+/**
+* Discovers the one address of a Cardano custody account: its base address,
+* re-derived from the stored identity. The sync fails when the stored
+* address, reward account or stake script hash differs from the derived one,
+* so funds are never shown at an address the custody contract does not
+* govern for this account.
+*
+* The entry carries the `type`, `index` and `accountIndex` every address
+* entry needs, but no key derives it. It must never reach a signer as a
+* known address: a key agent would sign every custody input with the key at
+* that path. No signer factory accepts a custody account, so signing never
+* reads its addresses.
+*/
+const handleCustodyAccount = (params) => {
+	const { account, accountId, operationId, actions, logger } = params;
+	const { chainId } = account.blockchainSpecific;
+	const identity = verifyCardanoCustodyAccountIdentity(account.blockchainSpecific);
+	if (!identity.ok) {
+		logger.error(`Address discovery refused custody account ${accountId}: ${identity.error.code}`, identity.error);
+		return of(actions.sync.failSyncOperation({
+			accountId,
+			operationId,
+			error: "sync.error.address-discovery-failed"
+		}));
+	}
+	return of(actions.sync.updateSyncOperation({
+		accountId,
+		operationId,
+		update: {
+			status: "InProgress",
+			type: "Indeterminate"
+		}
+	}), actions.addresses.upsertAddresses({
+		blockchainName: "Cardano",
+		accountId,
+		addresses: [toContractAddress({
+			accountIndex: 0,
+			address: identity.value.address,
+			index: 0,
+			networkId: chainId.networkId,
+			rewardAccount: identity.value.rewardAccount,
+			type: AddressType.External
+		}, chainId.networkMagic)]
+	}), ...chainAccountStateOperations({
+		accountId,
+		discoveryOperationId: operationId,
+		actions
+	}), actions.sync.completeSyncOperation({
+		accountId,
+		operationId
+	}));
+};
+/**
+* A custody account's UTxOs are not fetched: the account no longer matches
+* the identity its contract derives.
+*/
+var CardanoCustodyUtxoSyncRefusedError = class extends Error {
+	constructor(accountId, reason) {
+		super(`Refused the UTxO sync of custody account ${accountId}: ${reason.code}`);
+		this.accountId = accountId;
+		this.reason = reason;
+		this.name = "CardanoCustodyUtxoSyncRefusedError";
+	}
+};
+/**
+* A custody account's UTxOs: exactly those whose full address is the
+* account's base address, the only outputs the custody contract lets the
+* account spend.
+*
+* Discovery verifies the identity only once, when it stores the address
+* entry, so every fetch verifies it again: an identity changed since then,
+* or an entry that no longer matches it, fails the fetch.
+*
+* Fetched by address rather than by stake key. The stake credential also
+* gathers outputs under any other payment credential, which anyone can
+* create at no cost to inflate the fetch, and none of which belong to the
+* account. The key-hash franken filter does not apply: every custody output
+* has the script's payment credential.
+*
+* Reference scripts are read too: classification counts a reserve that
+* carries one as foreign.
+*/
+const fetchCustodyAccountUtxos = (params) => {
+	const { accountId, blockchainSpecific } = params.account;
+	const identity = verifyCardanoCustodyAccountIdentity(blockchainSpecific);
+	if (!identity.ok) return throwError(() => new CardanoCustodyUtxoSyncRefusedError(accountId, identity.error));
+	const { address } = identity.value;
+	const strayEntry = params.accountAddresses.find((entry) => entry.address !== CardanoPaymentAddress(address));
+	if (strayEntry) return throwError(() => new CardanoCustodyUtxoSyncRefusedError(accountId, {
+		code: "address-entry-mismatch",
+		entry: strayEntry.address,
+		derived: address
+	}));
+	return params.getUtxosAtAddress({
+		address: CardanoPaymentAddress(address),
+		withReferenceScripts: true
+	}, { chainId: blockchainSpecific.chainId }).pipe(map(throwOnError), retryBackoff(PROVIDER_REQUEST_RETRY_CONFIG), map((utxos) => {
+		const own = utxos.filter(([, output]) => output.address === address);
+		if (own.length < utxos.length) params.logger.warn(`Dropped ${utxos.length - own.length} UTxOs not at the address of custody account ${accountId}`);
+		return own;
+	}));
+};
+//#endregion
+//#region ../../packages/module/cardano-sync/src/store/side-effects/expire-custody-pending-activities.ts
+/**
+* Advances one account's round record. A round starts when `startedAt`
+* changes and completes when it clears with a newer `lastSuccessfulSync`.
+*/
+const advanceRounds = (previous, status, tipSlot) => {
+	const roundStartedAt = status.pendingSync?.startedAt;
+	const isSameRound = previous !== void 0 && roundStartedAt === previous.roundStartedAt;
+	const roundTipSlot = roundStartedAt === void 0 || previous === void 0 ? void 0 : isSameRound ? previous.roundTipSlot : tipSlot;
+	const hasCompleted = previous?.roundStartedAt !== void 0 && !isSameRound && status.lastSuccessfulSync !== previous.lastSuccessfulSync;
+	return {
+		roundStartedAt,
+		roundTipSlot,
+		lastSuccessfulSync: status.lastSuccessfulSync,
+		syncedFromSlot: hasCompleted ? previous.roundTipSlot ?? previous.syncedFromSlot : previous?.syncedFromSlot
+	};
+};
+const trackRounds = ({ hasSeenState, accounts }, [tip, statuses]) => ({
+	hasSeenState: true,
+	accounts: Object.fromEntries(Object.entries(statuses).map(([id, status]) => {
+		const accountId = AccountId(id);
+		return [accountId, advanceRounds(accounts[accountId] ?? (hasSeenState ? {} : void 0), status, tip?.slot)];
+	}))
+});
+/**
+* Whether a custody operation's pending activity can no longer settle: a
+* round that started once the tip was past its upper validity bound, by
+* the depth the wallet allows its provider to lag, synced the account's
+* history, and neither that history nor the synced UTxOs show the
+* transaction.
+*/
+const isExpired = (activity, { syncedFromSlot, utxos, history }) => {
+	const invalidHereafter = cardanoCustodyActivityMetadataOf(activity)?.invalidHereafter;
+	if (invalidHereafter === void 0 || syncedFromSlot === void 0) return false;
+	if (syncedFromSlot <= invalidHereafter + 60) return false;
+	const txId = activity.activityId;
+	return !history.some((item) => item.txId === txId) && !utxos.some(([input]) => input.txId === txId);
+};
+const findExpired = ({ rounds, pendingByAccount, utxosByAccount, historyByAccount }) => Object.entries(pendingByAccount).flatMap(([id, pending]) => {
+	const accountId = AccountId(id);
+	const context = {
+		syncedFromSlot: rounds.accounts[accountId]?.syncedFromSlot,
+		utxos: utxosByAccount[accountId] ?? [],
+		history: historyByAccount[accountId] ?? []
+	};
+	const activityIds = pending.filter((activity) => isExpired(activity, context)).map(({ activityId }) => activityId);
+	return activityIds.length > 0 ? [{
+		accountId,
+		activityIds
+	}] : [];
+});
+/**
+* Drops the pending activity of a custody operation that can no longer
+* settle, so an account does not stay blocked as operation-in-progress when
+* no one waits for the operation (R5.3: state reconciles with the network).
+*
+* A custody submission records its upper validity bound on the pending
+* activity (`blockchainSpecific.Cardano.custody`). Past that bound the
+* transaction can never apply. The chain tip alone does not prove that the
+* wallet saw the outcome: the tip poll updates the tip before the next sync
+* round fetches the history. So the activity is dropped only once a sync
+* round that started with the tip past the bound by
+* `UTXO_SYNC_CONFIRMATION_DEPTH` completed successfully, and neither the
+* account's history nor its synced UTxOs show the transaction. Other
+* pending activities carry no bound and are left alone.
+*
+* It reads state only and makes no provider call. `whileActive` (ADR 29)
+* keeps it off while the wallet is locked. Each activation starts with no
+* completed round, so a round that ran before unlock never counts.
+*/
+const expireCustodyPendingActivities = (_, { cardanoContext: { selectTip$, selectAccountUtxos$, selectTransactionHistoryGroupedByAccount$ }, activities: { selectPendingActivitiesByAccount$ }, sync: { selectSyncStatusByAccount$ } }, { actions, isWalletActive$ }) => combineLatest([
+	combineLatest([selectTip$, selectSyncStatusByAccount$]).pipe(scan(trackRounds, {
+		hasSeenState: false,
+		accounts: {}
+	})),
+	selectPendingActivitiesByAccount$,
+	selectAccountUtxos$,
+	selectTransactionHistoryGroupedByAccount$
+]).pipe(map(([rounds, pendingByAccount, utxosByAccount, historyByAccount]) => findExpired({
+	rounds,
+	pendingByAccount,
+	utxosByAccount,
+	historyByAccount
+})), mergeMap((expired) => from(expired.map(({ accountId, activityIds }) => actions.activities.removeActivities({
+	accountId,
+	activityIds
+})))), whileActive(isWalletActive$));
+//#endregion
+//#region ../../packages/module/cardano-sync/src/store/side-effects/account-extensions.ts
+/** Whether the account is of a kind a feature adds: a custody account. */
+const isExtensionAccount = isCardanoCustodyAccount;
+/** Address discovery for an account of a kind a feature adds. */
+const extensionAccountAddressDiscovery = handleCustodyAccount;
+/** The UTxO fetch of an account of a kind a feature adds. */
+const extensionAccountUtxos = fetchCustodyAccountUtxos;
+/** The sync side effects the features add. */
+const extensionSyncSideEffects = [expireCustodyPendingActivities];
+//#endregion
+//#region ../../packages/module/cardano-sync/src/store/get-script-address.ts
+/**
+* Method to derive the wallet's grouped address from the script and network ID.
+*
+* @param paymentScript - The native script to be used for the payment credential.
+* @param stakingScript - The native script to be used for the staking credential.
+* @param networkId - The network identifier.
+* @returns The derived grouped address.
+*/
+const getScriptAddress = (paymentScript, stakingScript, networkId) => {
+	const paymentScriptHash = nativeScriptPolicyId(paymentScript);
+	const stakingScriptHash = nativeScriptPolicyId(stakingScript);
+	const paymentScriptCredential = {
+		hash: paymentScriptHash,
+		type: CredentialType.ScriptHash
+	};
+	const stakeScriptCredential = {
+		hash: stakingScriptHash,
+		type: CredentialType.ScriptHash
+	};
+	return {
+		accountIndex: 0,
+		address: encodeBaseAddress(networkId, paymentScriptCredential, stakeScriptCredential),
+		index: 0,
+		networkId,
+		rewardAccount: encodeRewardAddress(networkId, stakeScriptCredential),
+		type: AddressType.External
+	};
+};
+//#endregion
 //#region ../../packages/module/cardano-sync/src/store/side-effects/address-discovery-sync.ts
 /**
 * Handles MultiSig account address discovery by generating script address.
@@ -458,13 +663,6 @@ const submitTxSideEffect = ({ cardanoContext: { submitTx$ } }, { cardanoContext:
 	})));
 }));
 //#endregion
-//#region ../../packages/module/cardano-sync/src/store/side-effects/throw-on-error.ts
-/** The value of a provider result, or its error thrown. */
-const throwOnError = (result) => {
-	if (result.isErr()) throw result.unwrapErr();
-	return result.unwrap();
-};
-//#endregion
 //#region ../../packages/module/cardano-sync/src/store/side-effects/track-account-utxos.ts
 /**
 * Sentinel `topOnChainActivityId` for the cache key when an account has no