@layerzerolabs/common-canton 0.2.105 → 0.2.106

package/src/events.ts

@@ -1,4 +1,5 @@
 import { buildTransactionWithResultSchema } from '@layerzerolabs/common-chain-model';
+import { NonRetryableError } from '@layerzerolabs/common-error-utils';
 
 import type { ICantonClient } from './client';
 import type { CreatedEvent } from './open-api/models';
@@ -6,6 +7,16 @@ import { cantonTransactionSchema } from './transaction';
 
 const cantonTxWithResultSchema = buildTransactionWithResultSchema(cantonTransactionSchema);
 
+// TODO(canton): confirm these poll values are enough to wait for archival across environments.
+const REQUEST_ARCHIVAL_POLL_INTERVAL_MS = 2000;
+const REQUEST_ARCHIVAL_MAX_ATTEMPTS = 60;
+
+// IRequest interface choices that consume the Request contract via `archive reqCid` in their impls.
+const IREQUEST_ACCEPT_CHOICE = 'IRequest_Accept';
+const IREQUEST_REJECT_CHOICE = 'IRequest_Reject';
+
+const REQUEST_TEMPLATE_QUALIFIED_NAME = 'Request:Request';
+
 /**
  * Fetches a transaction by updateId and returns all CreatedEvents.
  */
@@ -79,3 +90,127 @@ export const cantonDeploymentSucceeded = async (
 ): Promise<boolean> => {
     return (await findMatchingCreatedEventFromTx(client, txWithResult)) != null;
 };
+
+/**
+ * Success check for register-style deploys (an exercise on Uln302 that creates a
+ * Request, which the validator then accepts or rejects in a later transaction).
+ *
+ * Positively confirms acceptance: locate the Request created by this submission,
+ * then delegate to waitForRequestArchival, which waits for the Request to be
+ * archived and verifies the IRequest_Accept choice ran (throwing on reject,
+ * unexpected archival, or timeout). This is a positive accept check rather than
+ * inferring success from the absence of a rejection event.
+ */
+export const cantonRegisterSucceeded = async (
+    client: ICantonClient,
+    txWithResult: unknown,
+): Promise<boolean> => {
+    const parsed = cantonTxWithResultSchema.safeParse(txWithResult);
+    if (!parsed.success || parsed.data.result.type !== 'success') return false;
+
+    const updateId = parsed.data.result.minedTxHash;
+    if (!updateId) return false;
+
+    // Deferred-sender register payloads build with empty actAs (the sender is
+    // resolved at sign time), so fall back to the parties this user can read as.
+    const { actAs } = parsed.data.populatedTransaction;
+    const parties = actAs.length ? actAs : await client.listUserParties();
+    if (!parties.length) return false;
+
+    const createdEvents = await fetchCreatedEvents(client, updateId, parties);
+    const requestEvent = createdEvents.find((event) =>
+        event.templateId?.includes(REQUEST_TEMPLATE_QUALIFIED_NAME),
+    );
+    if (!requestEvent) return false;
+
+    try {
+        await waitForRequestArchival(client, requestEvent.contractId, parties);
+        return true;
+    } catch {
+        return false;
+    }
+};
+
+/**
+ * Wait for a Request contract to be archived AND determine accept vs reject
+ * by inspecting which IRequest choice ran on it.
+ *
+ * IRequest_Accept and IRequest_Reject are nonconsuming choices that both end
+ * with `archive reqCid` in their implementations. We can't tell accept from
+ * reject from the archive alone — must look at the ExercisedEvent in the
+ * archive transaction tree.
+ *
+ * On accept, returns the IRequest_Accept choice argument (the accept call
+ * context, including `acceptContext`) so callers can extract the validator's
+ * internal address from it.
+ *
+ * Throws NonRetryableError on rejection, on archival via a non-Accept/Reject
+ * path (unexpected), or on timeout.
+ */
+export const waitForRequestArchival = async (
+    client: ICantonClient,
+    requestContractId: string,
+    parties: string[],
+): Promise<unknown> => {
+    for (let attempt = 1; attempt <= REQUEST_ARCHIVAL_MAX_ATTEMPTS; attempt++) {
+        const { archived } = await client.fetchEventsByContractId(requestContractId, parties);
+        if (archived) {
+            const transaction = await client.fetchTransactionByOffset(archived.offset, parties);
+            // IRequest_Accept and IRequest_Reject are *nonconsuming* interface
+            // choices on IRequest. Their template impls (Request.daml's
+            // request_AcceptImpl / request_RejectImpl) end with `archive reqCid`,
+            // which Canton records as a consuming exercise of the implicit
+            // `Archive` choice. So in the transaction tree we see TWO exercises
+            // on the Request contract:
+            //   - a non-consuming `IRequest_Accept` (or `IRequest_Reject`)
+            //   - a consuming `Archive` (the actual archival)
+            // Scan for any IRequest_Accept/Reject exercise on it in the
+            // tree to determine the outcome, regardless of which one consumed.
+            let interfaceChoice: string | undefined;
+            let interfaceArg: unknown;
+            let consumingChoice: string | undefined;
+            for (const event of transaction.events ?? []) {
+                if (!('ExercisedEvent' in event)) continue;
+                const ex = event.ExercisedEvent;
+                if (ex.contractId !== requestContractId) continue;
+                if (ex.choice === IREQUEST_ACCEPT_CHOICE || ex.choice === IREQUEST_REJECT_CHOICE) {
+                    interfaceChoice = ex.choice;
+                    interfaceArg = ex.choiceArgument;
+                }
+                if (ex.consuming) {
+                    consumingChoice = ex.choice;
+                }
+            }
+            if (interfaceChoice === IREQUEST_ACCEPT_CHOICE) {
+                return interfaceArg;
+            }
+            if (interfaceChoice === IREQUEST_REJECT_CHOICE) {
+                const rejectContext =
+                    typeof interfaceArg === 'object' &&
+                    interfaceArg !== null &&
+                    'rejectContext' in interfaceArg
+                        ? interfaceArg.rejectContext
+                        : undefined;
+                const reason = rejectContext
+                    ? JSON.stringify(rejectContext).slice(0, 500)
+                    : 'unknown';
+                throw new NonRetryableError(`Request rejected — rejectContext: ${reason}`);
+            }
+            // No IRequest_Accept/Reject ran on this Request — it was archived
+            // via some other path (default `Archive`, or another consuming
+            // choice). That's unexpected for register-style flows — treat as
+            // failure so we don't silently call this a success.
+            throw new NonRetryableError(
+                `Request ${requestContractId} archived via unexpected choice ${consumingChoice ?? '<none>'}`,
+            );
+        }
+        // Skip the sleep on the final attempt — there's no next iteration to
+        // wait for, so it would only delay the timeout error pointlessly.
+        if (attempt < REQUEST_ARCHIVAL_MAX_ATTEMPTS) {
+            await new Promise((resolve) => setTimeout(resolve, REQUEST_ARCHIVAL_POLL_INTERVAL_MS));
+        }
+    }
+    throw new NonRetryableError(
+        `Request archival timeout (${REQUEST_ARCHIVAL_MAX_ATTEMPTS} attempts) for ${requestContractId}`,
+    );
+};

package/src/provider.ts

@@ -24,9 +24,22 @@ export type CantonProvider = {
     client: ICantonClient;
     grpcClient: CantonGrpcClient;
     tokenProvider: TokenProvider;
-    /** Validator wallet URL for scan-proxy CIP-56 endpoints. Required — amulet fee
-     *  payment needs it on every Canton transaction; enforced in {@link parseCantonUri}. */
+    /** Validator wallet URL for scan-proxy CIP-56 endpoints. Required. */
     walletUrl: string;
+    /** LayerZero sequencer base URL (e.g. "http://localhost:8080"); vApp JSON-RPC at `/vapp`. Required. */
+    sequencerUrl: string;
+    /** Sequencer validator pubkeys plus quorum for verifying signed read responses. */
+    sequencerCommittee?: SequencerCommittee;
+};
+
+/**
+ * Client-side committee config for secp256k1 sequencer read verification.
+ * Pubkeys must be hex-encoded with `0x` prefix in the same format returned by
+ * `recoverSecp256k1PublicKey`.
+ */
+export type SequencerCommittee = {
+    publicKeys: `0x${string}`[];
+    quorum: number;
 };
 
 // ─────────────────────────────────────────────────────────────────────────────
@@ -40,8 +53,12 @@ export type CantonUriParams = {
     adminApiHost: string;
     /** Ledger API user ID (default: "participant_admin") */
     userId: string;
-    /** Validator wallet URL for scan-proxy CIP-56 endpoints (e.g. "http://localhost:7201") */
+    /** Validator wallet URL for scan-proxy CIP-56 endpoints (e.g. "http://localhost:7201"). Required. */
     walletUrl: string;
+    /** LayerZero sequencer base URL (e.g. "http://localhost:8080"); vApp JSON-RPC at `/vapp`. Required. */
+    sequencerUrl: string;
+    /** Sequencer committee config parsed from the provider URI. */
+    sequencerCommittee?: SequencerCommittee;
     /** OAuth2 client credentials config — present only for non-local environments */
     oauth2?: ClientCredentialsTokenProviderConfig;
 };
@@ -59,32 +76,36 @@ export type CantonUriParams = {
 export function parseCantonUri(uri: string): CantonUriParams {
     const url = new URL(uri);
 
-    // `admin-api` is a gRPC `host:port` (no scheme), so it carries no TLS signal.
-    // TODO(CANTON): convey TLS for non-localhost (e.g. `&admin-api-tls=1` or `admin-api=grpcs://host:port`).
     const adminApiHost = url.searchParams.get('admin-api');
     if (!adminApiHost) {
         throw new Error('Canton provider URI missing required "admin-api" query parameter');
     }
 
     const userId = url.searchParams.get('user-id') ?? 'participant_admin';
-
-    // Required: amulet fee payment hits the validator wallet scan-proxy on every
-    // Canton transaction, so a provider without it can't transact. Fail at parse
-    // time rather than guarding each downstream use.
     const walletUrl = url.searchParams.get('wallet-url');
     if (!walletUrl) {
         throw new Error('Canton provider URI missing required "wallet-url" query parameter');
     }
+    const sequencerUrl = url.searchParams.get('sequencer-url');
+    if (!sequencerUrl) {
+        throw new Error('Canton provider URI missing required "sequencer-url" query parameter');
+    }
+    const sequencerValidatorsParam = url.searchParams.get('sequencer-validators');
+    const sequencerQuorumParam = url.searchParams.get('sequencer-quorum');
     const tokenUrl = url.searchParams.get('token-url') ?? undefined;
     const clientId = url.searchParams.get('client-id') ?? undefined;
     const clientSecret = url.searchParams.get('client-secret') ?? undefined;
     const scope = url.searchParams.get('scope') ?? undefined;
     const audience = url.searchParams.get('audience') ?? undefined;
 
+    // Remove Canton params to get clean JSON API URL
     for (const key of [
         'admin-api',
         'user-id',
         'wallet-url',
+        'sequencer-url',
+        'sequencer-validators',
+        'sequencer-quorum',
         'token-url',
         'client-id',
         'client-secret',
@@ -94,6 +115,46 @@ export function parseCantonUri(uri: string): CantonUriParams {
         url.searchParams.delete(key);
     }
 
+    let sequencerCommittee: SequencerCommittee | undefined;
+    if (sequencerValidatorsParam !== null && sequencerQuorumParam !== null) {
+        const publicKeys = sequencerValidatorsParam
+            .split(',')
+            .map((s) => s.trim().toLowerCase())
+            .filter((s) => s.length > 0);
+        if (publicKeys.length === 0) {
+            throw new Error(
+                'Canton provider URI sequencer-validators must contain at least one pubkey',
+            );
+        }
+        for (const publicKey of publicKeys) {
+            if (!publicKey.startsWith('0x')) {
+                throw new Error(
+                    `Canton provider URI sequencer-validators pubkey must start with 0x, got: ${publicKey.slice(0, 10)}...`,
+                );
+            }
+        }
+
+        const quorum = Number(sequencerQuorumParam);
+        if (!Number.isInteger(quorum) || quorum < 1) {
+            throw new Error(
+                `Canton provider URI sequencer-quorum must be a positive integer, got: ${sequencerQuorumParam}`,
+            );
+        }
+        if (quorum > publicKeys.length) {
+            throw new Error(
+                `Canton provider URI sequencer-quorum=${quorum} exceeds committee size ${publicKeys.length}`,
+            );
+        }
+        sequencerCommittee = {
+            publicKeys: publicKeys as `0x${string}`[],
+            quorum,
+        };
+    } else if (sequencerValidatorsParam !== null || sequencerQuorumParam !== null) {
+        throw new Error(
+            'Canton provider URI must set both sequencer-validators and sequencer-quorum together',
+        );
+    }
+
     const jsonApiUrl = url.toString().replace(/\/$/, '');
 
     const oauth2 =
@@ -101,7 +162,15 @@ export function parseCantonUri(uri: string): CantonUriParams {
             ? { tokenUrl, clientId, clientSecret, scope, audience }
             : undefined;
 
-    return { jsonApiUrl, adminApiHost, userId, walletUrl, oauth2 };
+    return {
+        jsonApiUrl,
+        adminApiHost,
+        userId,
+        walletUrl,
+        sequencerUrl,
+        sequencerCommittee,
+        oauth2,
+    };
 }
 
 // ─────────────────────────────────────────────────────────────────────────────
@@ -148,6 +217,8 @@ export function createCantonProvider({
         grpcClient,
         tokenProvider,
         walletUrl: params.walletUrl,
+        sequencerUrl: params.sequencerUrl,
+        sequencerCommittee: params.sequencerCommittee,
     };
 }
 
@@ -160,7 +231,7 @@ function createTokenProvider(params: CantonUriParams, isLocal: boolean): TokenPr
         });
     }
 
-    // TODO(CANTON): add other prod auth methods (direct JWT passthrough, etc.).
+    // TODO(canton): add other prod auth methods (direct JWT passthrough, etc.).
     if (!params.oauth2) {
         throw new Error(
             'Canton provider requires OAuth2 credentials (token-url, client-id, client-secret) in the provider URI',

package/test/provider.test.ts

@@ -0,0 +1,67 @@
+import { describe, expect, it, vi } from 'vitest';
+
+vi.mock('../src/auth/client-credentials-token-provider', () => ({
+    ClientCredentialsTokenProvider: class {},
+}));
+vi.mock('../src/auth/local-token-provider', () => ({
+    LocalTokenProvider: class {},
+}));
+vi.mock('../src/client/canton-client', () => ({
+    CantonClient: class {},
+}));
+vi.mock('../src/client/grpc', () => ({
+    CantonGrpcClient: class {},
+}));
+vi.mock('../src/open-api/runtime', () => ({ Configuration: class {} }));
+
+const BASE =
+    'http://localhost:2975?admin-api=localhost:2902&wallet-url=http://localhost:2903&sequencer-url=http://localhost:2904';
+
+const loadProvider = async () => import('../src/provider');
+
+describe('parseCantonUri / sequencerCommittee', () => {
+    it('returns undefined when neither committee param is set', async () => {
+        const { parseCantonUri } = await loadProvider();
+        const params = parseCantonUri(BASE);
+        expect(params.sequencerCommittee).toBeUndefined();
+    });
+
+    it('parses validator pubkeys and quorum', async () => {
+        const { parseCantonUri } = await loadProvider();
+        const params = parseCantonUri(
+            `${BASE}&sequencer-validators=0x04AB,0x04Cd&sequencer-quorum=1`,
+        );
+        expect(params.sequencerCommittee).toEqual({
+            publicKeys: ['0x04ab', '0x04cd'],
+            quorum: 1,
+        });
+    });
+
+    it('throws when only one committee param is set', async () => {
+        const { parseCantonUri } = await loadProvider();
+        expect(() => parseCantonUri(`${BASE}&sequencer-validators=0x04ab`)).toThrow(
+            /set both sequencer-validators and sequencer-quorum together/,
+        );
+        expect(() => parseCantonUri(`${BASE}&sequencer-quorum=1`)).toThrow(
+            /set both sequencer-validators and sequencer-quorum together/,
+        );
+    });
+
+    it('validates quorum range', async () => {
+        const { parseCantonUri } = await loadProvider();
+        expect(() =>
+            parseCantonUri(`${BASE}&sequencer-validators=0x04ab&sequencer-quorum=0`),
+        ).toThrow(/positive integer/);
+        expect(() =>
+            parseCantonUri(`${BASE}&sequencer-validators=0x04ab&sequencer-quorum=2`),
+        ).toThrow(/exceeds committee size/);
+    });
+
+    it('strips committee params from jsonApiUrl', async () => {
+        const { parseCantonUri } = await loadProvider();
+        const params = parseCantonUri(
+            `${BASE}&foo=bar&sequencer-validators=0x04ab&sequencer-quorum=1`,
+        );
+        expect(params.jsonApiUrl).toBe('http://localhost:2975/?foo=bar');
+    });
+});

package/dist/623CCK2L.js

@@ -1,37 +0,0 @@
-import { cantonTransactionSchema } from './3YCNHEVD.js';
-import { __name } from './VUOMXK5T.js';
-import { buildTransactionWithResultSchema } from '@layerzerolabs/common-chain-model';
-
-var cantonTxWithResultSchema = buildTransactionWithResultSchema(cantonTransactionSchema);
-var fetchCreatedEvents = /* @__PURE__ */ __name(async (client, updateId, parties) => {
-  const cantonTx = await client.fetchTransactionByUpdateId(updateId, parties);
-  return cantonTx.events?.filter((event) => "CreatedEvent" in event).map((event) => event.CreatedEvent) ?? [];
-}, "fetchCreatedEvents");
-var findMatchingCreatedEvent = /* @__PURE__ */ __name((createdEvents, expectedTemplateId, expectedSignatories) => {
-  const expectedSet = new Set(expectedSignatories);
-  return createdEvents.find((event) => {
-    if (event.templateId !== expectedTemplateId) return false;
-    const signatories = event.signatories ?? [];
-    return signatories.length > 0 && signatories.every((s) => expectedSet.has(s));
-  });
-}, "findMatchingCreatedEvent");
-var findMatchingCreatedEventFromTx = /* @__PURE__ */ __name(async (client, tx) => {
-  if (!tx) return null;
-  const parsed = cantonTxWithResultSchema.safeParse(tx);
-  if (!parsed.success) return null;
-  if (parsed.data.result.type !== "success") return null;
-  const { commands, actAs } = parsed.data.populatedTransaction;
-  const updateId = parsed.data.result.minedTxHash;
-  if (!updateId || !actAs.length) return null;
-  const createCommand = commands[0];
-  if (!createCommand || !("createCommand" in createCommand)) return null;
-  const createdEvents = await fetchCreatedEvents(client, updateId, actAs);
-  return findMatchingCreatedEvent(createdEvents, createCommand.createCommand.templateId, actAs) ?? null;
-}, "findMatchingCreatedEventFromTx");
-var cantonDeploymentSucceeded = /* @__PURE__ */ __name(async (client, txWithResult) => {
-  return await findMatchingCreatedEventFromTx(client, txWithResult) != null;
-}, "cantonDeploymentSucceeded");
-
-export { cantonDeploymentSucceeded, fetchCreatedEvents, findMatchingCreatedEvent, findMatchingCreatedEventFromTx };
-//# sourceMappingURL=623CCK2L.js.map
-//# sourceMappingURL=623CCK2L.js.map

package/dist/623CCK2L.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/events.ts"],"names":["cantonTxWithResultSchema","buildTransactionWithResultSchema","cantonTransactionSchema","fetchCreatedEvents","client","updateId","parties","cantonTx","fetchTransactionByUpdateId","events","filter","event","map","CreatedEvent","findMatchingCreatedEvent","createdEvents","expectedTemplateId","expectedSignatories","expectedSet","Set","find","templateId","signatories","length","every","s","has","findMatchingCreatedEventFromTx","tx","parsed","safeParse","success","data","result","type","commands","actAs","populatedTransaction","minedTxHash","createCommand","cantonDeploymentSucceeded","txWithResult"],"mappings":";;;;AAMA,IAAMA,wBAAAA,GAA2BC,iCAAiCC,uBAAAA,CAAAA;AAK3D,IAAMC,kBAAAA,mBAAqB,MAAA,CAAA,OAC9BC,MAAAA,EACAC,QAAAA,EACAC,OAAAA,KAAAA;AAEA,EAAA,MAAMC,QAAAA,GAAW,MAAMH,MAAAA,CAAOI,0BAAAA,CAA2BH,UAAUC,OAAAA,CAAAA;AACnE,EAAA,OACIC,QAAAA,CAASE,MAAAA,EACHC,MAAAA,CAAO,CAACC,UAAmD,cAAA,IAAkBA,KAAAA,CAAAA,CAC9EC,GAAAA,CAAI,CAACD,KAAAA,KAAUA,KAAAA,CAAME,YAAY,KAAK,EAAA;AAEnD,CAAA,EAXkC,oBAAA;AAiB3B,IAAMC,wBAAAA,mBAA2B,MAAA,CAAA,CACpCC,aAAAA,EACAC,kBAAAA,EACAC,mBAAAA,KAAAA;AAEA,EAAA,MAAMC,WAAAA,GAAc,IAAIC,GAAAA,CAAIF,mBAAAA,CAAAA;AAC5B,EAAA,OAAOF,aAAAA,CAAcK,IAAAA,CAAK,CAACT,KAAAA,KAAAA;AACvB,IAAA,IAAIA,KAAAA,CAAMU,UAAAA,KAAeL,kBAAAA,EAAoB,OAAO,KAAA;AACpD,IAAA,MAAMM,WAAAA,GAAcX,KAAAA,CAAMW,WAAAA,IAAe,EAAA;AACzC,IAAA,OAAOA,WAAAA,CAAYC,MAAAA,GAAS,CAAA,IAAKD,WAAAA,CAAYE,KAAAA,CAAM,CAACC,CAAAA,KAAMP,WAAAA,CAAYQ,GAAAA,CAAID,CAAAA,CAAAA,CAAAA;EAC9E,CAAA,CAAA;AACJ,CAAA,EAXwC,0BAAA;AAkBjC,IAAME,8BAAAA,mBAAiC,MAAA,CAAA,OAC1CvB,MAAAA,EACAwB,EAAAA,KAAAA;AAEA,EAAA,IAAI,CAACA,IAAI,OAAO,IAAA;AAEhB,EAAA,MAAMC,MAAAA,GAAS7B,wBAAAA,CAAyB8B,SAAAA,CAAUF,EAAAA,CAAAA;AAClD,EAAA,IAAI,CAACC,MAAAA,CAAOE,OAAAA,EAAS,OAAO,IAAA;AAC5B,EAAA,IAAIF,MAAAA,CAAOG,IAAAA,CAAKC,MAAAA,CAAOC,IAAAA,KAAS,WAAW,OAAO,IAAA;AAElD,EAAA,MAAM,EAAEC,QAAAA,EAAUC,KAAAA,EAAK,GAAKP,OAAOG,IAAAA,CAAKK,oBAAAA;AACxC,EAAA,MAAMhC,QAAAA,GAAWwB,MAAAA,CAAOG,IAAAA,CAAKC,MAAAA,CAAOK,WAAAA;AAEpC,EAAA,IAAI,CAACjC,QAAAA,IAAY,CAAC+B,KAAAA,CAAMb,QAAQ,OAAO,IAAA;AAEvC,EAAA,MAAMgB,aAAAA,GAAgBJ,SAAS,CAAA,CAAA;AAC/B,EAAA,IAAI,CAACI,aAAAA,IAAiB,EAAE,eAAA,IAAmBA,gBAAgB,OAAO,IAAA;AAElE,EAAA,MAAMxB,aAAAA,GAAgB,MAAMZ,kBAAAA,CAAmBC,MAAAA,EAAQC,UAAU+B,KAAAA,CAAAA;AACjE,EAAA,OACItB,yBAAyBC,aAAAA,EAAewB,aAAAA,CAAcA,aAAAA,CAAclB,UAAAA,EAAYe,KAAAA,CAAAA,IAChF,IAAA;AAER,CAAA,EAvB8C,gCAAA;AA6BvC,IAAMI,yBAAAA,mBAA4B,MAAA,CAAA,OACrCpC,MAAAA,EACAqC,YAAAA,KAAAA;AAEA,EAAA,OAAQ,MAAMd,8BAAAA,CAA+BvB,MAAAA,EAAQqC,YAAAA,CAAAA,IAAkB,IAAA;AAC3E,CAAA,EALyC,2BAAA","file":"623CCK2L.js","sourcesContent":["import { buildTransactionWithResultSchema } from '@layerzerolabs/common-chain-model';\n\nimport type { ICantonClient } from './client';\nimport type { CreatedEvent } from './open-api/models';\nimport { cantonTransactionSchema } from './transaction';\n\nconst cantonTxWithResultSchema = buildTransactionWithResultSchema(cantonTransactionSchema);\n\n/**\n * Fetches a transaction by updateId and returns all CreatedEvents.\n */\nexport const fetchCreatedEvents = async (\n    client: ICantonClient,\n    updateId: string,\n    parties: string[],\n): Promise<CreatedEvent[]> => {\n    const cantonTx = await client.fetchTransactionByUpdateId(updateId, parties);\n    return (\n        cantonTx.events\n            ?.filter((event): event is { CreatedEvent: CreatedEvent } => 'CreatedEvent' in event)\n            .map((event) => event.CreatedEvent) ?? []\n    );\n};\n\n/**\n * Finds a CreatedEvent matching the expected templateId whose signatories\n * are a subset of the provided actAs parties.\n */\nexport const findMatchingCreatedEvent = (\n    createdEvents: CreatedEvent[],\n    expectedTemplateId: string,\n    expectedSignatories: string[],\n): CreatedEvent | undefined => {\n    const expectedSet = new Set(expectedSignatories);\n    return createdEvents.find((event) => {\n        if (event.templateId !== expectedTemplateId) return false;\n        const signatories = event.signatories ?? [];\n        return signatories.length > 0 && signatories.every((s) => expectedSet.has(s));\n    });\n};\n\n/**\n * Parses a Canton transaction-with-result, fetches the created events from the ledger,\n * and returns the first CreatedEvent matching the submitted command's templateId and actAs\n * signatories. Returns null if the transaction is falsy, not successful, or has no match.\n */\nexport const findMatchingCreatedEventFromTx = async (\n    client: ICantonClient,\n    tx: unknown,\n): Promise<CreatedEvent | null> => {\n    if (!tx) return null;\n\n    const parsed = cantonTxWithResultSchema.safeParse(tx);\n    if (!parsed.success) return null;\n    if (parsed.data.result.type !== 'success') return null;\n\n    const { commands, actAs } = parsed.data.populatedTransaction;\n    const updateId = parsed.data.result.minedTxHash;\n\n    if (!updateId || !actAs.length) return null;\n\n    const createCommand = commands[0];\n    if (!createCommand || !('createCommand' in createCommand)) return null;\n\n    const createdEvents = await fetchCreatedEvents(client, updateId, actAs);\n    return (\n        findMatchingCreatedEvent(createdEvents, createCommand.createCommand.templateId, actAs) ??\n        null\n    );\n};\n\n/**\n * Checks that a Canton deploy transaction resulted in a CreatedEvent\n * matching the submitted command's templateId and actAs signatories.\n */\nexport const cantonDeploymentSucceeded = async (\n    client: ICantonClient,\n    txWithResult: unknown,\n): Promise<boolean> => {\n    return (await findMatchingCreatedEventFromTx(client, txWithResult)) != null;\n};\n"]}

package/dist/MDLCDBAQ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/provider.ts"],"names":["parseCantonUri","uri","url","URL","adminApiHost","searchParams","get","Error","userId","walletUrl","tokenUrl","undefined","clientId","clientSecret","scope","audience","key","delete","jsonApiUrl","toString","replace","oauth2","createCantonProvider","isLocal","params","tokenProvider","createTokenProvider","configuration","Configuration","basePath","accessToken","getToken","client","CantonClient","grpcClient","CantonGrpcClient","host","LocalTokenProvider","actAs","admin","ClientCredentialsTokenProvider"],"mappings":";;;;;;;;AA0DO,SAASA,eAAeC,GAAAA,EAAW;AACtC,EAAA,MAAMC,GAAAA,GAAM,IAAIC,GAAAA,CAAIF,GAAAA,CAAAA;AAIpB,EAAA,MAAMG,YAAAA,GAAeF,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA;AAC1C,EAAA,IAAI,CAACF,YAAAA,EAAc;AACf,IAAA,MAAM,IAAIG,MAAM,kEAAA,CAAA;AACpB,EAAA;AAEA,EAAA,MAAMC,MAAAA,GAASN,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,SAAA,CAAA,IAAc,mBAAA;AAKlD,EAAA,MAAMG,SAAAA,GAAYP,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,YAAA,CAAA;AACvC,EAAA,IAAI,CAACG,SAAAA,EAAW;AACZ,IAAA,MAAM,IAAIF,MAAM,mEAAA,CAAA;AACpB,EAAA;AACA,EAAA,MAAMG,QAAAA,GAAWR,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBK,MAAAA;AACtD,EAAA,MAAMC,QAAAA,GAAWV,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBK,MAAAA;AACtD,EAAA,MAAME,YAAAA,GAAeX,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,eAAA,CAAA,IAAoBK,MAAAA;AAC9D,EAAA,MAAMG,KAAAA,GAAQZ,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,OAAA,CAAA,IAAYK,MAAAA;AAC/C,EAAA,MAAMI,QAAAA,GAAWb,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,UAAA,CAAA,IAAeK,MAAAA;AAErD,EAAA,KAAA,MAAWK,GAAAA,IAAO;AACd,IAAA,WAAA;AACA,IAAA,SAAA;AACA,IAAA,YAAA;AACA,IAAA,WAAA;AACA,IAAA,WAAA;AACA,IAAA,eAAA;AACA,IAAA,OAAA;AACA,IAAA;AACD,GAAA,EAAA;AACCd,IAAAA,GAAAA,CAAIG,YAAAA,CAAaY,OAAOD,GAAAA,CAAAA;AAC5B,EAAA;AAEA,EAAA,MAAME,aAAahB,GAAAA,CAAIiB,QAAAA,EAAQ,CAAGC,OAAAA,CAAQ,OAAO,EAAA,CAAA;AAEjD,EAAA,MAAMC,MAAAA,GACFX,QAAAA,IAAYE,QAAAA,IAAYC,YAAAA,GAClB;AAAEH,IAAAA,QAAAA;AAAUE,IAAAA,QAAAA;AAAUC,IAAAA,YAAAA;AAAcC,IAAAA,KAAAA;AAAOC,IAAAA;GAAS,GACpDJ,MAAAA;AAEV,EAAA,OAAO;AAAEO,IAAAA,UAAAA;AAAYd,IAAAA,YAAAA;AAAcI,IAAAA,MAAAA;AAAQC,IAAAA,SAAAA;AAAWY,IAAAA;AAAO,GAAA;AACjE;AA9CgBrB,MAAAA,CAAAA,cAAAA,EAAAA,gBAAAA,CAAAA;AAkET,SAASsB,oBAAAA,CAAqB,EACjCrB,GAAAA,EACAsB,OAAAA,EAAO,EACmB;AAC1B,EAAA,MAAMC,MAAAA,GAASxB,eAAeC,GAAAA,CAAAA;AAE9B,EAAA,MAAMwB,aAAAA,GAAgBC,mBAAAA,CAAoBF,MAAAA,EAAQD,OAAAA,CAAAA;AAGlD,EAAA,MAAMI,aAAAA,GAAgB,IAAIC,aAAAA,CAAc;AACpCC,IAAAA,QAAAA,EAAUL,MAAAA,CAAON,UAAAA;IACjBY,WAAAA,kBAAa,MAAA,CAAA,MAAML,aAAAA,CAAcM,QAAAA,EAAQ,EAA5B,aAAA;GACjB,CAAA;AACA,EAAA,MAAMC,MAAAA,GAAS,IAAIC,YAAAA,CAAaN,aAAAA,EAAeH,OAAOhB,MAAM,CAAA;AAG5D,EAAA,MAAM0B,UAAAA,GAAa,IAAIC,gBAAAA,CAAiB;AACpCC,IAAAA,IAAAA,EAAMZ,MAAAA,CAAOpB,YAAAA;AACbqB,IAAAA;GACJ,CAAA;AAEA,EAAA,OAAO;AACHO,IAAAA,MAAAA;AACAE,IAAAA,UAAAA;AACAT,IAAAA,aAAAA;AACAhB,IAAAA,SAAAA,EAAWe,MAAAA,CAAOf;AACtB,GAAA;AACJ;AA3BgBa,MAAAA,CAAAA,oBAAAA,EAAAA,sBAAAA,CAAAA;AA6BhB,SAASI,mBAAAA,CAAoBF,QAAyBD,OAAAA,EAAgB;AAClE,EAAA,IAAIA,OAAAA,EAAS;AACT,IAAA,OAAO,IAAIc,kBAAAA,CAAmB;AAC1B7B,MAAAA,MAAAA,EAAQgB,MAAAA,CAAOhB,MAAAA;AACf8B,MAAAA,KAAAA,EAAO,EAAA;MACPC,KAAAA,EAAO;KACX,CAAA;AACJ,EAAA;AAGA,EAAA,IAAI,CAACf,OAAOH,MAAAA,EAAQ;AAChB,IAAA,MAAM,IAAId,MACN,uGAAA,CAAA;AAER,EAAA;AAEA,EAAA,OAAO,IAAIiC,8BAAAA,CAA+BhB,MAAAA,CAAOH,MAAM,CAAA;AAC3D;AAjBSK,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA","file":"MDLCDBAQ.js","sourcesContent":["import {\n    ClientCredentialsTokenProvider,\n    type ClientCredentialsTokenProviderConfig,\n} from './auth/client-credentials-token-provider';\nimport { LocalTokenProvider } from './auth/local-token-provider';\nimport type { TokenProvider } from './auth/token-provider';\nimport { CantonClient } from './client/canton-client';\nimport { CantonGrpcClient } from './client/grpc';\nimport type { ICantonClient } from './client/interface';\nimport { Configuration } from './open-api/runtime';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Type\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * Composite provider for Canton — bundles both transport layers and shared auth.\n *\n * - {@link client} — JSON Ledger API (commands, queries, updates)\n * - {@link grpcClient} — gRPC Admin API (topology transactions, namespace queries)\n * - {@link tokenProvider} — Shared Bearer-token source used by both transports\n */\nexport type CantonProvider = {\n    client: ICantonClient;\n    grpcClient: CantonGrpcClient;\n    tokenProvider: TokenProvider;\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints. Required — amulet fee\n     *  payment needs it on every Canton transaction; enforced in {@link parseCantonUri}. */\n    walletUrl: string;\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// URI Parsing\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CantonUriParams = {\n    /** Base URL of the JSON Ledger API (e.g. \"http://localhost:5975\") */\n    jsonApiUrl: string;\n    /** Host:port of the gRPC Admin API (e.g. \"localhost:5076\") */\n    adminApiHost: string;\n    /** Ledger API user ID (default: \"participant_admin\") */\n    userId: string;\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints (e.g. \"http://localhost:7201\") */\n    walletUrl: string;\n    /** OAuth2 client credentials config — present only for non-local environments */\n    oauth2?: ClientCredentialsTokenProviderConfig;\n};\n\n/**\n * Parse a Canton provider URI into its constituent parts.\n *\n * URI format:\n *   `<json-api-base>?admin-api=<host:port>&user-id=<id>[&token-url=...&client-id=...&client-secret=...&scope=...&audience=...]`\n *\n * The base URL (everything before the query string) is the JSON Ledger API endpoint.\n * Canton-specific params are extracted and removed; any remaining query params are\n * preserved on the JSON API URL.\n */\nexport function parseCantonUri(uri: string): CantonUriParams {\n    const url = new URL(uri);\n\n    // `admin-api` is a gRPC `host:port` (no scheme), so it carries no TLS signal.\n    // TODO(CANTON): convey TLS for non-localhost (e.g. `&admin-api-tls=1` or `admin-api=grpcs://host:port`).\n    const adminApiHost = url.searchParams.get('admin-api');\n    if (!adminApiHost) {\n        throw new Error('Canton provider URI missing required \"admin-api\" query parameter');\n    }\n\n    const userId = url.searchParams.get('user-id') ?? 'participant_admin';\n\n    // Required: amulet fee payment hits the validator wallet scan-proxy on every\n    // Canton transaction, so a provider without it can't transact. Fail at parse\n    // time rather than guarding each downstream use.\n    const walletUrl = url.searchParams.get('wallet-url');\n    if (!walletUrl) {\n        throw new Error('Canton provider URI missing required \"wallet-url\" query parameter');\n    }\n    const tokenUrl = url.searchParams.get('token-url') ?? undefined;\n    const clientId = url.searchParams.get('client-id') ?? undefined;\n    const clientSecret = url.searchParams.get('client-secret') ?? undefined;\n    const scope = url.searchParams.get('scope') ?? undefined;\n    const audience = url.searchParams.get('audience') ?? undefined;\n\n    for (const key of [\n        'admin-api',\n        'user-id',\n        'wallet-url',\n        'token-url',\n        'client-id',\n        'client-secret',\n        'scope',\n        'audience',\n    ]) {\n        url.searchParams.delete(key);\n    }\n\n    const jsonApiUrl = url.toString().replace(/\\/$/, '');\n\n    const oauth2 =\n        tokenUrl && clientId && clientSecret\n            ? { tokenUrl, clientId, clientSecret, scope, audience }\n            : undefined;\n\n    return { jsonApiUrl, adminApiHost, userId, walletUrl, oauth2 };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Factory\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CreateCantonProviderOptions = {\n    /** Raw provider URI (from provider config) */\n    uri: string;\n    /** When true, uses LocalTokenProvider (self-signed JWTs) instead of OAuth2 */\n    isLocal: boolean;\n};\n\n/**\n * Create a {@link CantonProvider} from a provider URI.\n *\n * - **isLocal=true**: Uses {@link LocalTokenProvider} with admin-level access (self-signed JWTs).\n * - **isLocal=false**: Uses {@link ClientCredentialsTokenProvider} with OAuth2 client\n *   credentials extracted from the URI query parameters.\n */\nexport function createCantonProvider({\n    uri,\n    isLocal,\n}: CreateCantonProviderOptions): CantonProvider {\n    const params = parseCantonUri(uri);\n\n    const tokenProvider = createTokenProvider(params, isLocal);\n\n    // ── JSON Ledger API Client ──────────────────────────────────────────\n    const configuration = new Configuration({\n        basePath: params.jsonApiUrl,\n        accessToken: () => tokenProvider.getToken(),\n    });\n    const client = new CantonClient(configuration, params.userId);\n\n    // ── gRPC Admin API Client ───────────────────────────────────────────\n    const grpcClient = new CantonGrpcClient({\n        host: params.adminApiHost,\n        tokenProvider,\n    });\n\n    return {\n        client,\n        grpcClient,\n        tokenProvider,\n        walletUrl: params.walletUrl,\n    };\n}\n\nfunction createTokenProvider(params: CantonUriParams, isLocal: boolean): TokenProvider {\n    if (isLocal) {\n        return new LocalTokenProvider({\n            userId: params.userId,\n            actAs: [],\n            admin: true,\n        });\n    }\n\n    // TODO(CANTON): add other prod auth methods (direct JWT passthrough, etc.).\n    if (!params.oauth2) {\n        throw new Error(\n            'Canton provider requires OAuth2 credentials (token-url, client-id, client-secret) in the provider URI',\n        );\n    }\n\n    return new ClientCredentialsTokenProvider(params.oauth2);\n}\n"]}