@laceio/sdk 0.1.1-canary.3 → 0.1.2-canary.0

package/dist/{account-call-NgLhYein.cjs → account-call-7wnopBq0.cjs}

@@ -1,4 +1,5 @@
 require("./rolldown-runtime-Br2OG8yv.cjs");
 require("./_polyfill-buffer-patch-CM8X7JiY.cjs");
-const require_account_call = require("./account-call-DIIa2rK_.cjs");
+require("./codecs-Cswkg7Tm.cjs");
+const require_account_call = require("./account-call-Bd4Rpbvt.cjs");
 exports.readAccountLedger = require_account_call.readAccountLedger;

package/dist/account-call-B9d_2Xwi.js

@@ -0,0 +1,4 @@
+import "./_polyfill-buffer-patch-yNxN4d5E.js";
+import "./codecs-Dc1Krpbt.js";
+import { a as readAccountLedger } from "./account-call-C3CkDqEC.js";
+export { readAccountLedger };

package/dist/{account-call-DIIa2rK_.cjs → account-call-Bd4Rpbvt.cjs}

@@ -1,7 +1,7 @@
 const require_bytes_vo = require("./bytes.vo-BNRquqaO.cjs");
-const require_providers = require("./providers-BLgJ0uQs.cjs");
-const require_gated_call = require("./gated-call-DJWY299W.cjs");
-const require_errors = require("./errors-BZ8hnhCM.cjs");
+const require_errors = require("./errors-BIftM8ZN.cjs");
+const require_providers = require("./providers-FjhM47BH.cjs");
+const require_gated_call = require("./gated-call-DgJm1Mi_.cjs");
 const require_acc_module = require("./acc-module-4iIUv6My.cjs");
 //#region ../../packages/module/passport-account/src/infra/indexer.ts
 const TX_FIELDS = `transaction {
@@ -16,6 +16,7 @@ const ACTION_FIELDS = `
   ... on ContractUpdate { ${TX_FIELDS} }
 `;
 const isShieldedOutputEvent = (content) => content.tag === "zswapOutput";
+const isShieldedInputEvent = (content) => content.tag === "zswapInput";
 const toRecord = (action) => {
 	const transaction = action.transaction ?? {};
 	return {
@@ -44,7 +45,8 @@ const eventBytes = (raw) => {
 * contract state through the midnight-js public data provider, the
 * complete per-address action history through the indexer's
 * contractActions subscription, and the shielded outputs a transaction
-* created through the ledger events the indexer keeps per transaction.
+* created and the coins it spent through the ledger events the indexer
+* keeps per transaction.
 */
 const createIndexerClient = ({ indexerUrl, indexerWsUrl, fetchHttp = globalThis.fetch, createSocket = (url, protocol) => new WebSocket(url, protocol), createPublicDataProvider }) => {
 	const defaultProvider = async () => {
@@ -145,25 +147,32 @@ const createIndexerClient = ({ indexerUrl, indexerWsUrl, fetchHttp = globalThis.
 	* The indexer keeps, per transaction, the events the ledger emitted while
 	* applying it; a shielded output's event carries the commitment and the
 	* tree index the ledger assigned, so the index is read, never inferred
-	* from the transaction's position window.
+	* from the transaction's position window, and a shielded spend's event
+	* carries the nullifier the ledger recorded for the coin it consumed.
 	*/
-	const queryShieldedOutputs = async (txHash) => {
+	const queryShieldedEvents = async (txHash) => {
 		const events = ((await postQuery("transactions", `query($offset: TransactionOffset!) { transactions(offset: $offset) { hash ... on RegularTransaction { zswapLedgerEvents { raw } } } }`, { offset: { hash: stripHexPrefix(txHash) } })).data?.transactions ?? []).flatMap((transaction) => transaction.zswapLedgerEvents ?? []);
-		if (events.length === 0) return [];
+		const found = {
+			outputs: [],
+			nullifiers: []
+		};
+		if (events.length === 0) return found;
 		const { Event } = await import("@midnightntwrk/ledger-v9");
-		return events.flatMap(({ raw }) => {
+		for (const { raw } of events) {
 			const { content } = Event.deserialize(eventBytes(stripHexPrefix(raw ?? "")));
-			return isShieldedOutputEvent(content) ? [{
+			if (isShieldedOutputEvent(content)) found.outputs.push({
 				commitment: content.commitment.toLowerCase(),
 				...content.contract === void 0 ? {} : { contractAddress: content.contract.toLowerCase() },
 				index: content.mtIndex
-			}] : [];
-		});
+			});
+			else if (isShieldedInputEvent(content)) found.nullifiers.push(content.nullifier.toLowerCase());
+		}
+		return found;
 	};
 	return {
 		queryContractState: async (address) => (await provider()).queryContractState(address),
 		enumerateContractActions,
-		queryShieldedOutputs
+		queryShieldedEvents
 	};
 };
 //#endregion

package/dist/{account-call-D68oF6bh.js → account-call-C3CkDqEC.js}

@@ -1,7 +1,7 @@
 import { n as HexBytes, t as ByteArray } from "./bytes.vo-BB7_4JK6.js";
-import { i as AccAddress, t as createMidnightProviders } from "./providers-CwnT4vEE.js";
-import { n as executeGatedCall, o as DeviceEpoch, s as UseCounter, t as connectAccountHandle } from "./gated-call-DjoRPqn1.js";
-import { t as AccountContractMissingError } from "./errors-DIJTAsLa.js";
+import { t as AccountContractMissingError } from "./errors-DSq5wUwt.js";
+import { i as AccAddress, t as createMidnightProviders } from "./providers-WtiSuxFu.js";
+import { d as UseCounter, n as executeGatedCall, t as connectAccountHandle, u as DeviceEpoch } from "./gated-call-D-tT7P_t.js";
 import { i as ledger } from "./acc-module-Cmj8EsIb.js";
 //#region ../../packages/module/passport-account/src/infra/indexer.ts
 const TX_FIELDS = `transaction {
@@ -16,6 +16,7 @@ const ACTION_FIELDS = `
   ... on ContractUpdate { ${TX_FIELDS} }
 `;
 const isShieldedOutputEvent = (content) => content.tag === "zswapOutput";
+const isShieldedInputEvent = (content) => content.tag === "zswapInput";
 const toRecord = (action) => {
 	const transaction = action.transaction ?? {};
 	return {
@@ -44,7 +45,8 @@ const eventBytes = (raw) => {
 * contract state through the midnight-js public data provider, the
 * complete per-address action history through the indexer's
 * contractActions subscription, and the shielded outputs a transaction
-* created through the ledger events the indexer keeps per transaction.
+* created and the coins it spent through the ledger events the indexer
+* keeps per transaction.
 */
 const createIndexerClient = ({ indexerUrl, indexerWsUrl, fetchHttp = globalThis.fetch, createSocket = (url, protocol) => new WebSocket(url, protocol), createPublicDataProvider }) => {
 	const defaultProvider = async () => {
@@ -145,25 +147,32 @@ const createIndexerClient = ({ indexerUrl, indexerWsUrl, fetchHttp = globalThis.
 	* The indexer keeps, per transaction, the events the ledger emitted while
 	* applying it; a shielded output's event carries the commitment and the
 	* tree index the ledger assigned, so the index is read, never inferred
-	* from the transaction's position window.
+	* from the transaction's position window, and a shielded spend's event
+	* carries the nullifier the ledger recorded for the coin it consumed.
 	*/
-	const queryShieldedOutputs = async (txHash) => {
+	const queryShieldedEvents = async (txHash) => {
 		const events = ((await postQuery("transactions", `query($offset: TransactionOffset!) { transactions(offset: $offset) { hash ... on RegularTransaction { zswapLedgerEvents { raw } } } }`, { offset: { hash: stripHexPrefix(txHash) } })).data?.transactions ?? []).flatMap((transaction) => transaction.zswapLedgerEvents ?? []);
-		if (events.length === 0) return [];
+		const found = {
+			outputs: [],
+			nullifiers: []
+		};
+		if (events.length === 0) return found;
 		const { Event } = await import("@midnightntwrk/ledger-v9");
-		return events.flatMap(({ raw }) => {
+		for (const { raw } of events) {
 			const { content } = Event.deserialize(eventBytes(stripHexPrefix(raw ?? "")));
-			return isShieldedOutputEvent(content) ? [{
+			if (isShieldedOutputEvent(content)) found.outputs.push({
 				commitment: content.commitment.toLowerCase(),
 				...content.contract === void 0 ? {} : { contractAddress: content.contract.toLowerCase() },
 				index: content.mtIndex
-			}] : [];
-		});
+			});
+			else if (isShieldedInputEvent(content)) found.nullifiers.push(content.nullifier.toLowerCase());
+		}
+		return found;
 	};
 	return {
 		queryContractState: async (address) => (await provider()).queryContractState(address),
 		enumerateContractActions,
-		queryShieldedOutputs
+		queryShieldedEvents
 	};
 };
 //#endregion

package/dist/{artefact-loader-DZPYrq-6.cjs → artefact-loader-BWWYAD7E.cjs}

@@ -1,5 +1,5 @@
 const require_bytes_vo = require("./bytes.vo-BNRquqaO.cjs");
-const require_errors = require("./errors-BZ8hnhCM.cjs");
+const require_errors = require("./errors-BIftM8ZN.cjs");
 //#region ../../packages/contract/passport/src/value-objects/acc-binding-version.vo.ts
 /** Types a string as an Account Custody Contract binding version. It checks nothing. */
 const AccBindingVersion = (value) => value;

package/dist/{artefact-loader-54uK5RAa.js → artefact-loader-Dik4HIfv.js}

@@ -1,5 +1,5 @@
 import { n as HexBytes } from "./bytes.vo-BB7_4JK6.js";
-import { a as ArtefactIntegrityError } from "./errors-DIJTAsLa.js";
+import { a as ArtefactIntegrityError } from "./errors-DSq5wUwt.js";
 //#region ../../packages/contract/passport/src/value-objects/acc-binding-version.vo.ts
 /** Types a string as an Account Custody Contract binding version. It checks nothing. */
 const AccBindingVersion = (value) => value;

package/dist/bitcoin.cjs

@@ -8,13 +8,13 @@ require("./pbkdf2-CIW-oWrm.cjs");
 require("./src-BDzYIksE.cjs");
 require("./util-Bu4W5lF4.cjs");
 const require_bytes_vo = require("./bytes.vo-BNRquqaO.cjs");
-const require_sdk = require("./sdk-Dd0MKXFz.cjs");
+const require_sdk = require("./sdk-DffwmX8b.cjs");
 const require_time_vo = require("./time.vo-D3wWRw9L.cjs");
 require("./asyncoption-i0VbqVTq.cjs");
 const require_const = require("./const-iwzZEE_w.cjs");
 const require_account_id_vo = require("./account-id.vo-DwqFjK5u.cjs");
-const require_contract = require("./contract-DevBp9u8.cjs");
-const require_submit_bitcoin_tx = require("./submit-bitcoin-tx-Y0CtvFN7.cjs");
+const require_contract = require("./contract-MKLzYVkW.cjs");
+const require_submit_bitcoin_tx = require("./submit-bitcoin-tx-goFuRL7K.cjs");
 const require_types = require("./types-CLRUYpfe.cjs");
 const require_const$1 = require("./const-BhYOdznB.cjs");
 require("./bn-d3nSOIf7.cjs");

package/dist/bitcoin.js

@@ -8,13 +8,13 @@ import "./browser-B1eMbDwh.js";
 import "./src-BFoefPv_.js";
 import "./util-Cp5cZkfK.js";
 import { n as HexBytes } from "./bytes.vo-BB7_4JK6.js";
-import { M as WalletId, S as WalletType, a as createInMemoryWalletEntity, c as createLaceWallet } from "./sdk-_yO75IHD.js";
+import { M as WalletId, S as WalletType, a as createInMemoryWalletEntity, c as createLaceWallet } from "./sdk-Cb-gZnS9.js";
 import { r as Milliseconds } from "./time.vo-tNheinXm.js";
 import "./asyncoption-CruEYOBI.js";
 import { t as FEATURE_FLAG_NETWORK_TYPE } from "./const-CjmfjBP3.js";
 import { t as AccountId } from "./account-id.vo-OPz2v-JZ.js";
-import { r as LazyWalletMismatchError } from "./contract-BD_312b0.js";
-import { a as createBitcoinLazyInMemoryVaultModule, d as BitcoinTxBuildErrorCode, i as waitForBitcoinAccountSync, n as signBitcoinTx, o as modules_exports, r as buildBitcoinTx, t as submitBitcoinTx, u as BitcoinTxBuildError } from "./submit-bitcoin-tx-BG3Gemov.js";
+import { r as LazyWalletMismatchError } from "./contract-1R86jhSw.js";
+import { a as createBitcoinLazyInMemoryVaultModule, d as BitcoinTxBuildErrorCode, i as waitForBitcoinAccountSync, n as signBitcoinTx, o as modules_exports, r as buildBitcoinTx, t as submitBitcoinTx, u as BitcoinTxBuildError } from "./submit-bitcoin-tx-D6oYgH5S.js";
 import { n as BitcoinNetwork } from "./types-B8uiJn-X.js";
 import { n as BITCOIN_MEMPOOL_FEE_MARKET_FEATURE_FLAG, t as BITCOIN_FEATURE_FLAG } from "./const-CUnCl5U0.js";
 export { AccountId, BITCOIN_FEATURE_FLAG, BITCOIN_MEMPOOL_FEE_MARKET_FEATURE_FLAG, BitcoinNetwork, BitcoinNetworkId, BitcoinTxBuildError, BitcoinTxBuildErrorCode, FEATURE_FLAG_NETWORK_TYPE, HexBytes, LazyWalletMismatchError, Milliseconds, WalletId, WalletType, buildBitcoinTx, createBitcoinLazyInMemoryVaultModule, createInMemoryWalletEntity, createLaceWallet, modules_exports as m, signBitcoinTx, submitBitcoinTx, waitForBitcoinAccountSync };

package/dist/cardano.cjs

@@ -4,15 +4,15 @@ require("./_polyfill-buffer-patch-CM8X7JiY.cjs");
 require("./codecs-Cswkg7Tm.cjs");
 require("./util-Bu4W5lF4.cjs");
 const require_bytes_vo = require("./bytes.vo-BNRquqaO.cjs");
-const require_sdk = require("./sdk-Dd0MKXFz.cjs");
+const require_sdk = require("./sdk-DffwmX8b.cjs");
 const require_time_vo = require("./time.vo-D3wWRw9L.cjs");
 require("./asyncoption-i0VbqVTq.cjs");
 const require_key_source = require("./key-source-5oUBFiC7.cjs");
 const require_const = require("./const-iwzZEE_w.cjs");
 const require_account_id_vo = require("./account-id.vo-DwqFjK5u.cjs");
 const require_const$1 = require("./const-D-eZIS4n.cjs");
-const require_contract = require("./contract-DevBp9u8.cjs");
-const require_modules_cardano = require("./modules-cardano-D843LvB0.cjs");
+const require_contract = require("./contract-MKLzYVkW.cjs");
+const require_modules_cardano = require("./modules-cardano-BYeYHrRm.cjs");
 let _laceio_cardano_core = require("@laceio/cardano/core");
 let _laceio_cardano_util = require("@laceio/cardano/util");
 exports.AccountId = require_account_id_vo.AccountId;

package/dist/cardano.d.ts

@@ -21545,7 +21545,7 @@ declare class SignerClosedError extends Error {
     constructor();
 }
 
-type SignerFlowKind = 'add-device' | 'create-account' | 'issue-grant' | 'read-holdings' | 'remove-device' | 'revoke-all-grants' | 'revoke-grant' | 'sign-in';
+type SignerFlowKind = 'add-device' | 'create-account' | 'install-operations' | 'issue-grant' | 'read-holdings' | 'remove-device' | 'revoke-all-grants' | 'revoke-grant' | 'sign-in';
 /**
  * What the popup shows the user before it opens a key session for a flow.
  * A device flow carries the 32-byte entry commitment it targets as hex
@@ -21569,8 +21569,10 @@ type SignerFlowKind = 'add-device' | 'create-account' | 'issue-grant' | 'read-ho
  * removal, a read grant's issue, a rotating revocation or an enrolment
  * that hands over the keys while a read grant is live, also carries
  * `devices`, the live device entries as hex whose devices the new secret
- * may be sealed to, the removed one left out; consent lists them. Every
- * hex field other than the commitment is lowercase.
+ * may be sealed to, the removed one left out; consent lists them. An
+ * install-operations flow carries the `account` it upgrades and the
+ * `operations` whose verifier keys the account's maintenance authority
+ * signs in. Every hex field other than the commitment is lowercase.
  */
 type SignerFlow = {
     kind: SignerFlowKind;
@@ -21588,6 +21590,7 @@ type SignerFlow = {
     };
     devices?: string[];
     lockAccount?: boolean;
+    operations?: string[];
 };
 /**
  * The account keys a request opens: the `account` they belong to, its
@@ -21768,6 +21771,58 @@ type ExtensionSignerRequestPayloads = {
         account: string;
         readPublicKey: string;
     };
+    /**
+     * One maintenance update of the keyring's account, signed by the
+     * maintenance authority one of the roster keys its envelopes deliver
+     * derives: `authority`, the verifying key of the account's one-key
+     * committee, and `counter`, as decimal, as the chain holds them, and
+     * `changes`, either the replace of that authority by the one the
+     * keyring's live roster key derives, or the inserts of pinned verifier
+     * keys, each key as hex. The signer builds the update from these and
+     * never signs bytes it is sent. The keyring carries the live envelope
+     * and, beside it, at most as many others as one request carries; the
+     * answer is the signature, with the authority a replace installs, or
+     * null when no roster key of those envelopes derives `authority`, so a
+     * device with more envelopes pages the older ones beside the live one.
+     */
+    'sign-maintenance-update': {
+        networkId: string;
+        keyring: SignerKeyring;
+        authority: {
+            tag: string;
+            value: string;
+        };
+        counter: string;
+        changes: {
+            kind: 'insert-verifier-keys';
+            inserts: {
+                operation: string;
+                verifierKey: string;
+            }[];
+        } | {
+            kind: 'replace-authority';
+            authority: {
+                tag: string;
+                value: string;
+            };
+        };
+    };
+    /**
+     * Whether any roster key the keyring's envelopes deliver derives
+     * `authority`, the verifying key of the account's one-key committee as
+     * the chain holds it, which a removal and a rotating enrolment ask
+     * before they rotate. The keyring is paged as for
+     * `sign-maintenance-update`; the answer is a boolean and no key
+     * crosses.
+     */
+    'holds-maintenance-authority': {
+        networkId: string;
+        keyring: SignerKeyring;
+        authority: {
+            tag: string;
+            value: string;
+        };
+    };
     'record-read': EmptyPayload;
     'record-write': {
         record: unknown;

package/dist/cardano.js

@@ -4,14 +4,14 @@ import "./libsodium-wrappers-BhbOA8dQ.js";
 import "./codecs-Dc1Krpbt.js";
 import "./util-Cp5cZkfK.js";
 import { n as HexBytes } from "./bytes.vo-BB7_4JK6.js";
-import { M as WalletId, S as WalletType, a as createInMemoryWalletEntity, c as createLaceWallet } from "./sdk-_yO75IHD.js";
+import { M as WalletId, S as WalletType, a as createInMemoryWalletEntity, c as createLaceWallet } from "./sdk-Cb-gZnS9.js";
 import { r as Milliseconds } from "./time.vo-tNheinXm.js";
 import "./asyncoption-CruEYOBI.js";
 import { c as RemoteSignerError, l as SignerClosedError, t as createPasskeyKeySource, u as SignerPopupBlockedError } from "./key-source-B08HukZg.js";
 import { t as FEATURE_FLAG_NETWORK_TYPE } from "./const-CjmfjBP3.js";
 import { t as AccountId } from "./account-id.vo-OPz2v-JZ.js";
 import { n as FEATURE_FLAG_CARDANO } from "./const-BJfIK_G-.js";
-import { r as LazyWalletMismatchError } from "./contract-BD_312b0.js";
-import { _ as PasskeyWalletMismatchError, a as submitCardanoTx, c as waitForNetworkInfo, d as createRemotePasskeySigner, f as createRemoteCardanoVaultModule, g as createPasskeyWalletEntity, h as createSignerClient, i as createSteelSwapProvider, l as createRemotePasskeyWalletEntity, m as RemoteSignerResultError, o as signCardanoTx, p as CardanoRemoteSignerFactory, s as createTxBuilder, t as modules_cardano_exports, v as createPasskeyVaultModule, y as createLazyInMemoryVaultModule } from "./modules-cardano-BrS68BbA.js";
+import { r as LazyWalletMismatchError } from "./contract-1R86jhSw.js";
+import { _ as PasskeyWalletMismatchError, a as submitCardanoTx, c as waitForNetworkInfo, d as createRemotePasskeySigner, f as createRemoteCardanoVaultModule, g as createPasskeyWalletEntity, h as createSignerClient, i as createSteelSwapProvider, l as createRemotePasskeyWalletEntity, m as RemoteSignerResultError, o as signCardanoTx, p as CardanoRemoteSignerFactory, s as createTxBuilder, t as modules_cardano_exports, v as createPasskeyVaultModule, y as createLazyInMemoryVaultModule } from "./modules-cardano-B1nDUWqy.js";
 import { n as HexBlob, r as Serialization, t as Cardano } from "./cardano-DfPwhwm-.js";
 export { AccountId, Cardano, CardanoRemoteSignerFactory, FEATURE_FLAG_CARDANO, FEATURE_FLAG_NETWORK_TYPE, HexBlob, HexBytes, LazyWalletMismatchError, Milliseconds, PasskeyWalletMismatchError, RemoteSignerError, RemoteSignerResultError, Serialization, SignerClosedError, SignerPopupBlockedError, WalletId, WalletType, createInMemoryWalletEntity, createLaceWallet, createLazyInMemoryVaultModule, createPasskeyKeySource, createPasskeyVaultModule, createPasskeyWalletEntity, createRemoteCardanoVaultModule, createRemotePasskeySigner, createRemotePasskeyWalletEntity, createSignerClient, createSteelSwapProvider, createTxBuilder, modules_cardano_exports as m, signCardanoTx, submitCardanoTx, waitForNetworkInfo };

package/dist/{contract-BD_312b0.js → contract-1R86jhSw.js}

@@ -1,4 +1,4 @@
-import { A as ContractName, D as storageDependencyContract, O as combineStore, _ as walletActiveStateDependencyContract, k as createMixin, v as tokensStoreContract, w as networkStoreContract, y as syncStoreContract } from "./sdk-_yO75IHD.js";
+import { A as ContractName, D as storageDependencyContract, O as combineStore, _ as walletActiveStateDependencyContract, k as createMixin, v as tokensStoreContract, w as networkStoreContract, y as syncStoreContract } from "./sdk-Cb-gZnS9.js";
 import { a as inferStoreContext, n as combineContracts, r as inferContractContext } from "./store-DuBG8qh5.js";
 import { t as createSelector } from "./reselect-CGoLzEPv.js";
 import { r as tokensSelectors } from "./slice-DBpJ2QGf.js";

package/dist/{contract-DevBp9u8.cjs → contract-MKLzYVkW.cjs}

@@ -1,4 +1,4 @@
-const require_sdk = require("./sdk-Dd0MKXFz.cjs");
+const require_sdk = require("./sdk-DffwmX8b.cjs");
 const require_store = require("./store-B1Lq3cEf.cjs");
 const require_reselect = require("./reselect-Bd94u0K-.cjs");
 const require_slice = require("./slice-C9TT5KhY.cjs");

package/dist/{device-readers-BWOmz9eD.js → device-readers-CUHYoYOH.js}

@@ -1,7 +1,7 @@
 import { n as HexBytes, t as ByteArray } from "./bytes.vo-BB7_4JK6.js";
-import { H as isSealableX25519Key } from "./grant-rules-_xJHAT2M.js";
-import { f as DeviceReaderInvalidError } from "./errors-DIJTAsLa.js";
-import { t as decodeDevicePublicKey } from "./envelopes-BkH1Qdxk.js";
+import { f as DeviceReaderInvalidError } from "./errors-DSq5wUwt.js";
+import { H as isSealableX25519Key } from "./grant-rules-By07_eDi.js";
+import { t as decodeDevicePublicKey } from "./envelopes-BGoO_v8m.js";
 import { a as pureCircuits } from "./acc-module-Cmj8EsIb.js";
 //#region ../../packages/module/passport-account/src/acc/device-readers.ts
 /**

package/dist/{device-readers-CIgYZN7f.cjs → device-readers-CdxS2btd.cjs}

@@ -1,7 +1,7 @@
 const require_bytes_vo = require("./bytes.vo-BNRquqaO.cjs");
-const require_grant_rules = require("./grant-rules-7Zqi_3BN.cjs");
-const require_errors = require("./errors-BZ8hnhCM.cjs");
-const require_envelopes = require("./envelopes-ETZEJS_O.cjs");
+const require_errors = require("./errors-BIftM8ZN.cjs");
+const require_grant_rules = require("./grant-rules-BzVTWXS7.cjs");
+const require_envelopes = require("./envelopes-CH25R-DN.cjs");
 const require_acc_module = require("./acc-module-4iIUv6My.cjs");
 //#region ../../packages/module/passport-account/src/acc/device-readers.ts
 /**

package/dist/{device-readers-70i7tQqU.cjs → device-readers-D_JZeNL2.cjs}

@@ -1,7 +1,7 @@
 require("./rolldown-runtime-Br2OG8yv.cjs");
 require("./_polyfill-buffer-patch-CM8X7JiY.cjs");
 require("./codecs-Cswkg7Tm.cjs");
-const require_device_readers = require("./device-readers-CIgYZN7f.cjs");
+const require_device_readers = require("./device-readers-CdxS2btd.cjs");
 exports.assertJoiningDevice = require_device_readers.assertJoiningDevice;
 exports.derivesEntry = require_device_readers.derivesEntry;
 exports.deviceEntryOf = require_device_readers.deviceEntryOf;

package/dist/{device-readers-B7--ezKM.js → device-readers-DwSNCGPP.js}

@@ -1,4 +1,4 @@
 import "./_polyfill-buffer-patch-yNxN4d5E.js";
 import "./codecs-Dc1Krpbt.js";
-import { i as resolveLiveReaders, n as derivesEntry, r as deviceEntryOf, t as assertJoiningDevice } from "./device-readers-BWOmz9eD.js";
+import { i as resolveLiveReaders, n as derivesEntry, r as deviceEntryOf, t as assertJoiningDevice } from "./device-readers-CUHYoYOH.js";
 export { assertJoiningDevice, derivesEntry, deviceEntryOf, resolveLiveReaders };

package/dist/{envelopes-BkH1Qdxk.js → envelopes-BGoO_v8m.js}

@@ -1,5 +1,6 @@
 import { n as HexBytes, t as ByteArray } from "./bytes.vo-BB7_4JK6.js";
-import { A as equalBytes$1, C as aInRange, D as bytesToNumberLE, E as bytesToNumberBE, F as sha512, G as GrantScopeSalt, I as abytes$1, K as GrantId, L as hexToBytes, M as numberToBytesLE, N as randomBytes, O as concatBytes, P as validateObject, S as pow2, T as asciiToBytes, W as GrantSlot, _ as FpSqrtEven, b as mapHashToField, c as _DST_scalar, d as PrimeEdwardsPoint, f as edwards, g as FpInvertBatch, h as validatePointCons, j as numberToBytesBE, k as copyBytes, l as createHasher, m as pippenger, o as jubjub, p as createKeygen, q as sha256, s as createFROST, t as RECIPIENT_KINDS, u as expand_message_xmd, v as getMinHashLength, w as abytes, x as mod, y as isNegativeLE } from "./grant-rules-_xJHAT2M.js";
+import { L as sha256 } from "./errors-DSq5wUwt.js";
+import { A as equalBytes$1, C as aInRange, D as bytesToNumberLE, E as bytesToNumberBE, F as sha512, G as GrantScopeSalt, I as abytes$1, K as GrantId, L as hexToBytes, M as numberToBytesLE, N as randomBytes, O as concatBytes, P as validateObject, S as pow2, T as asciiToBytes, W as GrantSlot, _ as FpSqrtEven, b as mapHashToField, c as _DST_scalar, d as PrimeEdwardsPoint, f as edwards, g as FpInvertBatch, h as validatePointCons, j as numberToBytesBE, k as copyBytes, l as createHasher, m as pippenger, o as jubjub, p as createKeygen, s as createFROST, t as RECIPIENT_KINDS, u as expand_message_xmd, v as getMinHashLength, w as abytes, x as mod, y as isNegativeLE } from "./grant-rules-By07_eDi.js";
 //#region ../../packages/module/passport-account/node_modules/@noble/curves/abstract/montgomery.js
 /**
 * Montgomery curve methods. It's not really whole montgomery curve,

package/dist/{envelopes-ETZEJS_O.cjs → envelopes-CH25R-DN.cjs}

@@ -1,5 +1,6 @@
 const require_bytes_vo = require("./bytes.vo-BNRquqaO.cjs");
-const require_grant_rules = require("./grant-rules-7Zqi_3BN.cjs");
+const require_errors = require("./errors-BIftM8ZN.cjs");
+const require_grant_rules = require("./grant-rules-BzVTWXS7.cjs");
 //#region ../../packages/module/passport-account/node_modules/@noble/curves/abstract/montgomery.js
 /**
 * Montgomery curve methods. It's not really whole montgomery curve,
@@ -1282,7 +1283,7 @@ const openFrom = async ({ key, entry, nonceOffset, isTagged, plaintextLength })
 * reader public key. Two envelopes to the same reader share nothing on
 * chain, since each carries its own ephemeral key.
 */
-const envelopeTag = (readerPublicKey, entry) => require_grant_rules.sha256(concat(ENVELOPE_TAG_DOMAIN, entry.subarray(0, RECIPIENT_TAG_OFFSET), readerPublicKey, entry.subarray(RECIPIENT_TAG_END)));
+const envelopeTag = (readerPublicKey, entry) => require_errors.sha256(concat(ENVELOPE_TAG_DOMAIN, entry.subarray(0, RECIPIENT_TAG_OFFSET), readerPublicKey, entry.subarray(RECIPIENT_TAG_END)));
 /** Whether an entry is a device envelope addressed to this reader public key. */
 const isAddressedTo = (entry, readerPublicKey) => isRecordOf(entry, DEVICE_ENVELOPE_TYPE) && equalBytes(entry.subarray(RECIPIENT_TAG_OFFSET, RECIPIENT_TAG_END), envelopeTag(readerPublicKey, entry));
 /**

package/dist/{errors-BZ8hnhCM.cjs → errors-BIftM8ZN.cjs}

@@ -1,5 +1,14 @@
 require("./rolldown-runtime-Br2OG8yv.cjs");
+const require_codecs = require("./codecs-Cswkg7Tm.cjs");
 let ts_custom_error = require("ts-custom-error");
+//#region ../../packages/lib/crypto/src/sha256.ts
+/**
+* SHA-256 of `bytes` as 32 raw bytes, computed synchronously so a caller
+* that must stay synchronous, such as a consent screen encoding a grant
+* scope, has the same digest the asynchronous Web Crypto API would give.
+*/
+const sha256 = (bytes) => require_codecs.sha256(bytes);
+//#endregion
 //#region ../../packages/contract/passport/src/errors.ts
 /**
 * Thrown when the user cancels the passkey ceremony invoked to create or
@@ -315,6 +324,21 @@ var GrantRevocationPendingError = class extends ts_custom_error.CustomError {
 	}
 };
 /**
+* Thrown when an agent prepares a spend its grant does not allow: an
+* operation outside the grant's scope, an amount above the per-call cap
+* or past the cumulative cap, a recipient the grant's pin does not admit,
+* a coin of another colour or above the grant's coin bound, or a policy
+* whose grant id does not derive from its own fields. Raised before
+* anything is signed, so the agent learns it before it submits a call
+* the contract would refuse.
+*/
+var GrantSpendRefusedError = class extends ts_custom_error.CustomError {
+	code = "grant-spend-refused";
+	constructor(message = "The grant does not allow this spend.") {
+		super(message);
+	}
+};
+/**
 * Thrown when a grant is requested by a host that runs under no relying
 * party id. Every grant is bound to the origin of the host that issued it
 * through the grant id, so without one there is no id to issue under.
@@ -343,6 +367,8 @@ var GrantRosterUnsettledError = class extends ts_custom_error.CustomError {
 * maintenance authority was retired before every verifier key wave
 * landed, so no update can install the missing operations. Unrecoverable:
 * the contract is left as it stands and a new account is the only way on.
+* An install of missing operations on a locked account, whose authority
+* was retired at creation, raises it too, before anything is signed.
 */
 var AuthorityRetiredError = class extends ts_custom_error.CustomError {
 	code = "authority-retired";
@@ -351,11 +377,13 @@ var AuthorityRetiredError = class extends ts_custom_error.CustomError {
 	}
 };
 /**
-* Thrown when a creation that chose to lock the account resumes over an
-* account the chain shows activated with its maintenance authority still
-* live. The flow retires the authority before it activates, so the
-* deployment ran outside it; whoever holds the authority key keeps full
-* custody of the account, and a new account is the safe way on.
+* Thrown when a creation resumes over an account the chain shows
+* activated with its deploy-time maintenance authority still live, whether
+* it chose to lock the account or to hand the authority to its devices.
+* The flow retires or hands over the authority before it activates, so
+* the deployment ran outside it; whoever holds the deploy-time key keeps
+* full custody of the account and may have installed verifier keys no
+* check has seen, and a new account is the safe way on.
 */
 var AuthorityNotRetiredError = class extends ts_custom_error.CustomError {
 	code = "authority-not-retired";
@@ -389,6 +417,52 @@ var CreationArtefactMismatchError = class extends ts_custom_error.CustomError {
 		super(message);
 	}
 };
+/**
+* Thrown when the contract's maintenance authority on chain is not the
+* one any roster key this device holds derives: the account is locked,
+* its authority was rotated by a roster this device was never handed, or
+* the keyring belongs to another account. Raised before anything is
+* signed. A resumed creation raises it too when the committee on chain is
+* neither the deploy-time key nor the successor the recorded creation
+* installs, refused before any wave.
+*/
+var MaintenanceAuthorityMismatchError = class extends ts_custom_error.CustomError {
+	code = "maintenance-authority-mismatch";
+	constructor(message = "No roster key this device holds derives the account's maintenance authority.") {
+		super(message);
+	}
+};
+/**
+* Thrown when a maintenance update asks for a change the encryption key
+* does not sign: a replace that installs any authority other than the one
+* the live roster key derives, a verifier key that is not the one pinned
+* for its operation or not in the deployed roster, or no change at all.
+* An install is refused before any key is opened, a replace before
+* anything is signed. A roster rotation over an account whose authority
+* is live raises it too when the encryption key signs no maintenance
+* update at all, as the authority could not follow the roster, and so
+* does an install of missing operations, before any prompt.
+*/
+var MaintenanceUpdateRefusedError = class extends ts_custom_error.CustomError {
+	code = "maintenance-update-refused";
+	constructor(message = "The maintenance update asks for a change the encryption key does not sign.") {
+		super(message);
+	}
+};
+/**
+* Thrown when an install of missing operations names an operation it
+* cannot install, one outside the operation roster this build deploys,
+* such as a recovery circuit or another device arm, or names none at
+* all. Raised before any prompt, naming every such operation; nothing is
+* installed. An operation the account already holds a verifier key for
+* is skipped rather than refused.
+*/
+var OperationNotInstallableError = class extends ts_custom_error.CustomError {
+	code = "operation-not-installable";
+	constructor(message = "The account cannot install the operations asked for.") {
+		super(message);
+	}
+};
 //#endregion
 Object.defineProperty(exports, "AccountContractMissingError", {
 	enumerable: true,
@@ -528,12 +602,30 @@ Object.defineProperty(exports, "GrantScopeInvalidError", {
 		return GrantScopeInvalidError;
 	}
 });
+Object.defineProperty(exports, "GrantSpendRefusedError", {
+	enumerable: true,
+	get: function() {
+		return GrantSpendRefusedError;
+	}
+});
 Object.defineProperty(exports, "LastDeviceError", {
 	enumerable: true,
 	get: function() {
 		return LastDeviceError;
 	}
 });
+Object.defineProperty(exports, "MaintenanceAuthorityMismatchError", {
+	enumerable: true,
+	get: function() {
+		return MaintenanceAuthorityMismatchError;
+	}
+});
+Object.defineProperty(exports, "MaintenanceUpdateRefusedError", {
+	enumerable: true,
+	get: function() {
+		return MaintenanceUpdateRefusedError;
+	}
+});
 Object.defineProperty(exports, "NoAccountError", {
 	enumerable: true,
 	get: function() {
@@ -546,6 +638,12 @@ Object.defineProperty(exports, "NotAuthorisedError", {
 		return NotAuthorisedError;
 	}
 });
+Object.defineProperty(exports, "OperationNotInstallableError", {
+	enumerable: true,
+	get: function() {
+		return OperationNotInstallableError;
+	}
+});
 Object.defineProperty(exports, "PrfUnsupportedError", {
 	enumerable: true,
 	get: function() {
@@ -582,3 +680,9 @@ Object.defineProperty(exports, "SponsorExhaustedError", {
 		return SponsorExhaustedError;
 	}
 });
+Object.defineProperty(exports, "sha256", {
+	enumerable: true,
+	get: function() {
+		return sha256;
+	}
+});