@layerzerolabs/common-canton 0.2.111 → 0.2.112

package/.turbo/turbo-test.log

@@ -9,7 +9,7 @@
 ✅ dpm-3.4.8-openapi-generator-7.21.0 
 🔧 openapi-generator version: 7.21.0
 $ docker image inspect --format {{.Architecture}} 438003944538.dkr.ecr.us-east-1.amazonaws.com/layerzerolabs/canton-openapi-tooling:openapi-generator-7.21.0-patch-2
-(node:83734) [MODULE_TYPELESS_PACKAGE_JSON] Warning: Module type of file:///home/runner/work/monorepo-internal/monorepo-internal/configs/vm-tooling/values/docker-image-repo.ts is not specified and it doesn't parse as CommonJS.
+(node:83754) [MODULE_TYPELESS_PACKAGE_JSON] Warning: Module type of file:///home/runner/work/monorepo-internal/monorepo-internal/configs/vm-tooling/values/docker-image-repo.ts is not specified and it doesn't parse as CommonJS.
 Reparsing as ES module because module syntax was detected. This incurs a performance overhead.
 To eliminate this warning, add "type": "module" to /home/runner/work/monorepo-internal/monorepo-internal/package.json.
 (Use `node --trace-warnings ...` to show where the warning was created)
@@ -24,8 +24,8 @@ dfe8d6e6f390: Pulling fs layer
 e41c3f01e557: Pulling fs layer
 fe131d3b296c: Pulling fs layer
 dfe8d6e6f390: Waiting
-e41c3f01e557: Waiting
 fe131d3b296c: Waiting
+e41c3f01e557: Waiting
 18a60288e8be: Verifying Checksum
 18a60288e8be: Download complete
 17639c486e57: Verifying Checksum
@@ -34,9 +34,9 @@ e41c3f01e557: Verifying Checksum
 e41c3f01e557: Download complete
 dfe8d6e6f390: Verifying Checksum
 dfe8d6e6f390: Download complete
+17639c486e57: Pull complete
 fe131d3b296c: Verifying Checksum
 fe131d3b296c: Download complete
-17639c486e57: Pull complete
 051d551be118: Verifying Checksum
 051d551be118: Download complete
 051d551be118: Pull complete
@@ -729,24 +729,24 @@ $ docker run --rm --add-host=host.docker.internal:host-gateway -e LOCAL_UID=1001
 # We appreciate your support! Please consider donation to help us maintain this project.   #
 # https://opencollective.com/openapi_generator/donate                                      #
 ############################################################################################
-⏳ bash -c set -euo pipefail && rm -rf "src/open-api" && canton-openapi-generator generate -g typescript-fetch -o "src/open-api" --additional-properties=importFileExtension=.js: 4.844s
+⏳ bash -c set -euo pipefail && rm -rf "src/open-api" && canton-openapi-generator generate -g typescript-fetch -o "src/open-api" --additional-properties=importFileExtension=.js: 3.741s
 Testing types with tsc and vue-tsc is an experimental feature.
 Breaking changes might not follow SemVer, please pin Vitest's version when using it.
 
  RUN  v3.2.6 /home/runner/work/monorepo-internal/monorepo-internal/packages/vms/canton/common
 
- ✓ test/provider.test.ts (7 tests) 40ms
- ✓ test/auth/local-token-provider.test.ts (5 tests) 14ms
- ✓ test/auth/client-credentials-token-provider.test.ts (7 tests) 17ms
- ✓ test/crypto.test.ts (6 tests) 22ms
- ✓ test/daml-serde.test.ts (19 tests) 41ms
+ ✓ test/auth/local-token-provider.test.ts (5 tests) 11ms
+ ✓ test/auth/client-credentials-token-provider.test.ts (7 tests) 12ms
+ ✓ test/provider.test.ts (7 tests) 46ms
+ ✓ test/crypto.test.ts (6 tests) 5ms
+ ✓ test/daml-serde.test.ts (19 tests) 9ms
 stderr | test/sdk.test.ts > Error Handling (Unhappy Paths) > should handle double archive error
 Mock miss: GET /v2/state/connected-synchronizers
 
 stderr | test/sdk.test.ts > Error Handling (Unhappy Paths) > should handle unauthorized party error
 Mock miss: GET /v2/state/connected-synchronizers
 
- ✓ test/sdk.test.ts (18 tests) 38ms
+ ✓ test/sdk.test.ts (18 tests) 28ms
  ✓  TS  test/sdk.test.ts (18 tests)
  ✓  TS  test/auth/client-credentials-token-provider.test.ts (7 tests)
  ✓  TS  test/daml-serde.test.ts (19 tests)
@@ -757,6 +757,6 @@ Breaking changes might not follow SemVer, please pin Vitest's version when using
  Test Files  12 passed (12)
       Tests  124 passed (124)
 Type Errors  no errors
-   Start at  21:23:50
-   Duration  5.22s (transform 1.61s, setup 0ms, collect 2.86s, tests 174ms, environment 1ms, prepare 1.24s, typecheck 4.73s)
+   Start at  02:26:48
+   Duration  3.07s (transform 1.08s, setup 0ms, collect 1.73s, tests 112ms, environment 1ms, prepare 858ms, typecheck 2.75s)
 

package/dist/{GOPXFEBJ.js → 4CJTJBWF.js}

@@ -13,6 +13,8 @@ function parseCantonChainUri(uri) {
     throw new Error('Canton provider URI missing required "admin-api" query parameter');
   }
   const userId = url.searchParams.get("user-id") ?? "participant_admin";
+  const actAsParam = url.searchParams.get("act-as");
+  const actAs = actAsParam?.split(",").map((party) => party.trim()).filter((party) => party.length > 0) ?? [];
   const walletUrl = url.searchParams.get("wallet-url");
   if (!walletUrl) {
     throw new Error('Canton provider URI missing required "wallet-url" query parameter');
@@ -25,6 +27,7 @@ function parseCantonChainUri(uri) {
   for (const key of [
     "admin-api",
     "user-id",
+    "act-as",
     "wallet-url",
     "sequencer-url",
     "sequencer-validators",
@@ -49,6 +52,7 @@ function parseCantonChainUri(uri) {
     jsonApiUrl,
     adminApiHost,
     userId,
+    actAs,
     walletUrl,
     oauth2
   };
@@ -90,5 +94,5 @@ function createTokenProvider(params, isLocal) {
 __name(createTokenProvider, "createTokenProvider");
 
 export { createCantonChainProvider, parseCantonChainUri };
-//# sourceMappingURL=GOPXFEBJ.js.map
-//# sourceMappingURL=GOPXFEBJ.js.map
+//# sourceMappingURL=4CJTJBWF.js.map
+//# sourceMappingURL=4CJTJBWF.js.map

package/dist/4CJTJBWF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/provider.ts"],"names":["parseCantonChainUri","uri","url","URL","adminApiHost","searchParams","get","Error","userId","actAsParam","actAs","split","map","party","trim","filter","length","walletUrl","tokenUrl","undefined","clientId","clientSecret","scope","audience","key","delete","jsonApiUrl","toString","replace","oauth2","createCantonChainProvider","isLocal","params","tokenProvider","createTokenProvider","configuration","Configuration","basePath","accessToken","getToken","client","CantonClient","grpcClient","CantonGrpcClient","host","LocalTokenProvider","admin","ClientCredentialsTokenProvider"],"mappings":";;;;;;;;AA0DO,SAASA,oBAAoBC,GAAAA,EAAW;AAC3C,EAAA,MAAMC,GAAAA,GAAM,IAAIC,GAAAA,CAAIF,GAAAA,CAAAA;AAEpB,EAAA,MAAMG,YAAAA,GAAeF,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA;AAC1C,EAAA,IAAI,CAACF,YAAAA,EAAc;AACf,IAAA,MAAM,IAAIG,MAAM,kEAAA,CAAA;AACpB,EAAA;AAEA,EAAA,MAAMC,MAAAA,GAASN,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,SAAA,CAAA,IAAc,mBAAA;AAClD,EAAA,MAAMG,UAAAA,GAAaP,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,QAAA,CAAA;AACxC,EAAA,MAAMI,QACFD,UAAAA,EACME,KAAAA,CAAM,GAAA,CAAA,CACPC,GAAAA,CAAI,CAACC,KAAAA,KAAUA,KAAAA,CAAMC,MAAI,CAAA,CACzBC,OAAO,CAACF,KAAAA,KAAUA,MAAMG,MAAAA,GAAS,CAAA,KAAM,EAAA;AAChD,EAAA,MAAMC,SAAAA,GAAYf,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,YAAA,CAAA;AACvC,EAAA,IAAI,CAACW,SAAAA,EAAW;AACZ,IAAA,MAAM,IAAIV,MAAM,mEAAA,CAAA;AACpB,EAAA;AACA,EAAA,MAAMW,QAAAA,GAAWhB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBa,MAAAA;AACtD,EAAA,MAAMC,QAAAA,GAAWlB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBa,MAAAA;AACtD,EAAA,MAAME,YAAAA,GAAenB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,eAAA,CAAA,IAAoBa,MAAAA;AAC9D,EAAA,MAAMG,KAAAA,GAAQpB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,OAAA,CAAA,IAAYa,MAAAA;AAC/C,EAAA,MAAMI,QAAAA,GAAWrB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,UAAA,CAAA,IAAea,MAAAA;AAErD,EAAA,KAAA,MAAWK,GAAAA,IAAO;AACd,IAAA,WAAA;AACA,IAAA,SAAA;AACA,IAAA,QAAA;AACA,IAAA,YAAA;AACA,IAAA,eAAA;AACA,IAAA,sBAAA;AACA,IAAA,kBAAA;AACA,IAAA,WAAA;AACA,IAAA,WAAA;AACA,IAAA,eAAA;AACA,IAAA,OAAA;AACA,IAAA;AACD,GAAA,EAAA;AACCtB,IAAAA,GAAAA,CAAIG,YAAAA,CAAaoB,OAAOD,GAAAA,CAAAA;AAC5B,EAAA;AAEA,EAAA,MAAME,aAAaxB,GAAAA,CAAIyB,QAAAA,EAAQ,CAAGC,OAAAA,CAAQ,OAAO,EAAA,CAAA;AAEjD,EAAA,MAAMC,MAAAA,GACFX,QAAAA,IAAYE,QAAAA,IAAYC,YAAAA,GAClB;AAAEH,IAAAA,QAAAA;AAAUE,IAAAA,QAAAA;AAAUC,IAAAA,YAAAA;AAAcC,IAAAA,KAAAA;AAAOC,IAAAA;GAAS,GACpDJ,MAAAA;AAEV,EAAA,OAAO;AACHO,IAAAA,UAAAA;AACAtB,IAAAA,YAAAA;AACAI,IAAAA,MAAAA;AACAE,IAAAA,KAAAA;AACAO,IAAAA,SAAAA;AACAY,IAAAA;AACJ,GAAA;AACJ;AAzDgB7B,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AA6ET,SAAS8B,yBAAAA,CAA0B,EACtC7B,GAAAA,EACA8B,OAAAA,EAAO,EACwB;AAC/B,EAAA,MAAMC,MAAAA,GAAShC,oBAAoBC,GAAAA,CAAAA;AAEnC,EAAA,MAAMgC,aAAAA,GAAgBC,mBAAAA,CAAoBF,MAAAA,EAAQD,OAAAA,CAAAA;AAGlD,EAAA,MAAMI,aAAAA,GAAgB,IAAIC,aAAAA,CAAc;AACpCC,IAAAA,QAAAA,EAAUL,MAAAA,CAAON,UAAAA;IACjBY,WAAAA,kBAAa,MAAA,CAAA,MAAML,aAAAA,CAAcM,QAAAA,EAAQ,EAA5B,aAAA;GACjB,CAAA;AACA,EAAA,MAAMC,MAAAA,GAAS,IAAIC,YAAAA,CAAaN,aAAAA,EAAeH,OAAOxB,MAAM,CAAA;AAG5D,EAAA,MAAMkC,UAAAA,GAAa,IAAIC,gBAAAA,CAAiB;AACpCC,IAAAA,IAAAA,EAAMZ,MAAAA,CAAO5B,YAAAA;AACb6B,IAAAA;GACJ,CAAA;AAEA,EAAA,OAAO;AACHO,IAAAA,MAAAA;AACAE,IAAAA,UAAAA;AACAT,IAAAA,aAAAA;AACAhB,IAAAA,SAAAA,EAAWe,MAAAA,CAAOf;AACtB,GAAA;AACJ;AA3BgBa,MAAAA,CAAAA,yBAAAA,EAAAA,2BAAAA,CAAAA;AA6BhB,SAASI,mBAAAA,CAAoBF,QAA8BD,OAAAA,EAAgB;AACvE,EAAA,IAAIA,OAAAA,EAAS;AACT,IAAA,OAAO,IAAIc,kBAAAA,CAAmB;AAC1BrC,MAAAA,MAAAA,EAAQwB,MAAAA,CAAOxB,MAAAA;AACfE,MAAAA,KAAAA,EAAO,EAAA;MACPoC,KAAAA,EAAO;KACX,CAAA;AACJ,EAAA;AAGA,EAAA,IAAI,CAACd,OAAOH,MAAAA,EAAQ;AAChB,IAAA,MAAM,IAAItB,MACN,uGAAA,CAAA;AAER,EAAA;AAEA,EAAA,OAAO,IAAIwC,8BAAAA,CAA+Bf,MAAAA,CAAOH,MAAM,CAAA;AAC3D;AAjBSK,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA","file":"4CJTJBWF.js","sourcesContent":["import {\n    ClientCredentialsTokenProvider,\n    type ClientCredentialsTokenProviderConfig,\n} from './auth/client-credentials-token-provider';\nimport { LocalTokenProvider } from './auth/local-token-provider';\nimport type { TokenProvider } from './auth/token-provider';\nimport { CantonClient } from './client/canton-client';\nimport { CantonGrpcClient } from './client/grpc';\nimport type { ICantonClient } from './client/interface';\nimport { Configuration } from './open-api/runtime';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Type\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * - {@link client} — JSON Ledger API (commands, queries, updates)\n * - {@link grpcClient} — gRPC Admin API (topology transactions, namespace queries)\n * - {@link tokenProvider} — Shared Bearer-token source used by both transports\n * - {@link walletUrl} — Canton Network validator wallet (scan-proxy CIP-56 endpoints)\n */\nexport type CantonChainProvider = {\n    client: ICantonClient;\n    grpcClient: CantonGrpcClient;\n    tokenProvider: TokenProvider;\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints. Required. */\n    walletUrl: string;\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// URI Parsing\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CantonChainUriParams = {\n    /** Base URL of the JSON Ledger API (e.g. \"http://localhost:5975\") */\n    jsonApiUrl: string;\n    /** Host:port of the gRPC Admin API (e.g. \"localhost:5076\") */\n    adminApiHost: string;\n    /** Ledger API user ID (default: \"participant_admin\") */\n    userId: string;\n    /** Parties granted `actAs` on localnet tokens (comma-separated in the URI). */\n    actAs: string[];\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints (e.g. \"http://localhost:7201\"). Required. */\n    walletUrl: string;\n    /** OAuth2 client credentials config — present only for non-local environments */\n    oauth2?: ClientCredentialsTokenProviderConfig;\n};\n\n/**\n * Parse a Canton chain provider URI into its constituent parts.\n *\n * URI format:\n *   `<json-api-base>?admin-api=<host:port>&user-id=<id>&wallet-url=<url>[&token-url=...&client-id=...&client-secret=...&scope=...&audience=...]`\n *\n * The base URL (everything before the query string) is the JSON Ledger API endpoint.\n * Canton-specific params are extracted and removed; any remaining query params are\n * preserved on the JSON API URL.\n */\nexport function parseCantonChainUri(uri: string): CantonChainUriParams {\n    const url = new URL(uri);\n\n    const adminApiHost = url.searchParams.get('admin-api');\n    if (!adminApiHost) {\n        throw new Error('Canton provider URI missing required \"admin-api\" query parameter');\n    }\n\n    const userId = url.searchParams.get('user-id') ?? 'participant_admin';\n    const actAsParam = url.searchParams.get('act-as');\n    const actAs =\n        actAsParam\n            ?.split(',')\n            .map((party) => party.trim())\n            .filter((party) => party.length > 0) ?? [];\n    const walletUrl = url.searchParams.get('wallet-url');\n    if (!walletUrl) {\n        throw new Error('Canton provider URI missing required \"wallet-url\" query parameter');\n    }\n    const tokenUrl = url.searchParams.get('token-url') ?? undefined;\n    const clientId = url.searchParams.get('client-id') ?? undefined;\n    const clientSecret = url.searchParams.get('client-secret') ?? undefined;\n    const scope = url.searchParams.get('scope') ?? undefined;\n    const audience = url.searchParams.get('audience') ?? undefined;\n\n    for (const key of [\n        'admin-api',\n        'user-id',\n        'act-as',\n        'wallet-url',\n        'sequencer-url',\n        'sequencer-validators',\n        'sequencer-quorum',\n        'token-url',\n        'client-id',\n        'client-secret',\n        'scope',\n        'audience',\n    ]) {\n        url.searchParams.delete(key);\n    }\n\n    const jsonApiUrl = url.toString().replace(/\\/$/, '');\n\n    const oauth2 =\n        tokenUrl && clientId && clientSecret\n            ? { tokenUrl, clientId, clientSecret, scope, audience }\n            : undefined;\n\n    return {\n        jsonApiUrl,\n        adminApiHost,\n        userId,\n        actAs,\n        walletUrl,\n        oauth2,\n    };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Factory\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CreateCantonChainProviderOptions = {\n    /** Raw provider URI (from provider config) */\n    uri: string;\n    /** When true, uses LocalTokenProvider (self-signed JWTs) instead of OAuth2 */\n    isLocal: boolean;\n};\n\n/**\n * Create a {@link CantonChainProvider} from a provider URI.\n *\n * - **isLocal=true**: Uses {@link LocalTokenProvider} with admin-level access (self-signed JWTs).\n * - **isLocal=false**: Uses {@link ClientCredentialsTokenProvider} with OAuth2 client\n *   credentials extracted from the URI query parameters.\n */\nexport function createCantonChainProvider({\n    uri,\n    isLocal,\n}: CreateCantonChainProviderOptions): CantonChainProvider {\n    const params = parseCantonChainUri(uri);\n\n    const tokenProvider = createTokenProvider(params, isLocal);\n\n    // ── JSON Ledger API Client ──────────────────────────────────────────\n    const configuration = new Configuration({\n        basePath: params.jsonApiUrl,\n        accessToken: () => tokenProvider.getToken(),\n    });\n    const client = new CantonClient(configuration, params.userId);\n\n    // ── gRPC Admin API Client ───────────────────────────────────────────\n    const grpcClient = new CantonGrpcClient({\n        host: params.adminApiHost,\n        tokenProvider,\n    });\n\n    return {\n        client,\n        grpcClient,\n        tokenProvider,\n        walletUrl: params.walletUrl,\n    };\n}\n\nfunction createTokenProvider(params: CantonChainUriParams, isLocal: boolean): TokenProvider {\n    if (isLocal) {\n        return new LocalTokenProvider({\n            userId: params.userId,\n            actAs: [],\n            admin: true,\n        });\n    }\n\n    // TODO(canton): add other prod auth methods (direct JWT passthrough, etc.).\n    if (!params.oauth2) {\n        throw new Error(\n            'Canton provider requires OAuth2 credentials (token-url, client-id, client-secret) in the provider URI',\n        );\n    }\n\n    return new ClientCredentialsTokenProvider(params.oauth2);\n}\n"]}

package/dist/index.js

@@ -12,7 +12,7 @@ export { IntLikeSchema, assertHexLength, codePointLength, formatDamlDecimal, int
 export { cantonActiveContractIdRef, cantonActiveContractIdsRef, cantonAmuletContextRef, cantonAmuletRulesCidRef, cantonDeferredValueSchema, cantonRefreshPartyFilterSchema, cantonSenderPartyRef, encodeCantonDeferredValue, isCantonPlaceholder, parseCantonDeferredValue } from './5PRNJEPB.js';
 export { cantonDeploymentSucceeded, fetchCreatedEvents, findMatchingCreatedEvent, findMatchingCreatedEventFromTx, getExercisedEvent, waitForArchival } from './FPRRDKT5.js';
 export { buildCantonTransaction, cantonAssignedTransactionSchema, cantonCommandSchema, cantonDisclosedContractSchema, cantonMinedTransactionSchema, cantonSignedTransactionSchema, cantonTransactionSchema, cantonTransactionWithResultSchema } from './EYLCZMM4.js';
-export { createCantonChainProvider, parseCantonChainUri } from './GOPXFEBJ.js';
+export { createCantonChainProvider, parseCantonChainUri } from './4CJTJBWF.js';
 export { ClientCredentialsTokenProvider } from './V2H2WXKE.js';
 export { LocalTokenProvider } from './SCEF7TLZ.js';
 export { CantonClient } from './SMLSAWCA.js';

package/dist/provider.d.ts

@@ -22,6 +22,8 @@ export type CantonChainUriParams = {
     adminApiHost: string;
     /** Ledger API user ID (default: "participant_admin") */
     userId: string;
+    /** Parties granted `actAs` on localnet tokens (comma-separated in the URI). */
+    actAs: string[];
     /** Validator wallet URL for scan-proxy CIP-56 endpoints (e.g. "http://localhost:7201"). Required. */
     walletUrl: string;
     /** OAuth2 client credentials config — present only for non-local environments */

package/dist/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,KAAK,oCAAoC,EAC5C,MAAM,0CAA0C,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAOxD;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAC9B,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,aAAa,EAAE,aAAa,CAAC;IAC7B,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAMF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,qGAAqG;IACrG,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,MAAM,CAAC,EAAE,oCAAoC,CAAC;CACjD,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAiDrE;AAMD,MAAM,MAAM,gCAAgC,GAAG;IAC3C,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,EACtC,GAAG,EACH,OAAO,GACV,EAAE,gCAAgC,GAAG,mBAAmB,CAwBxD"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,KAAK,oCAAoC,EAC5C,MAAM,0CAA0C,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAOxD;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAC9B,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,aAAa,EAAE,aAAa,CAAC;IAC7B,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAMF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,qGAAqG;IACrG,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,MAAM,CAAC,EAAE,oCAAoC,CAAC;CACjD,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CAyDrE;AAMD,MAAM,MAAM,gCAAgC,GAAG;IAC3C,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,EACtC,GAAG,EACH,OAAO,GACV,EAAE,gCAAgC,GAAG,mBAAmB,CAwBxD"}

package/dist/provider.js

@@ -1,4 +1,4 @@
-export { createCantonChainProvider, parseCantonChainUri } from './GOPXFEBJ.js';
+export { createCantonChainProvider, parseCantonChainUri } from './4CJTJBWF.js';
 import './V2H2WXKE.js';
 import './SCEF7TLZ.js';
 import './SMLSAWCA.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@layerzerolabs/common-canton",
-  "version": "0.2.111",
+  "version": "0.2.112",
   "private": false,
   "description": "Canton VM client and utilities",
   "license": "MIT",
@@ -23,10 +23,10 @@
     "@protobuf-ts/grpc-transport": "^2.9.4",
     "es-toolkit": "^1.39.10",
     "zod": "4.3.5",
-    "@layerzerolabs/common-chain-model": "0.2.111",
-    "@layerzerolabs/common-error-utils": "0.2.111",
-    "@layerzerolabs/common-encoding-utils": "0.2.111",
-    "@layerzerolabs/typescript-utils": "0.2.111"
+    "@layerzerolabs/common-chain-model": "0.2.112",
+    "@layerzerolabs/common-encoding-utils": "0.2.112",
+    "@layerzerolabs/typescript-utils": "0.2.112",
+    "@layerzerolabs/common-error-utils": "0.2.112"
   },
   "devDependencies": {
     "@types/node": "^22.18.6",
@@ -35,12 +35,12 @@
     "tsup": "^8.4.0",
     "typescript": "^5.8.2",
     "vitest": "^3.2.6",
-    "@layerzerolabs/eslint-configuration": "^0.2.111",
-    "@layerzerolabs/tsup-configuration": "0.2.111",
-    "@layerzerolabs/typescript-configuration": "0.2.111",
-    "@layerzerolabs/ver-signer-adapter": "0.2.111",
-    "@layerzerolabs/vitest-configuration": "0.2.111",
-    "@layerzerolabs/vm-tooling-canton": "0.2.111"
+    "@layerzerolabs/eslint-configuration": "^0.2.112",
+    "@layerzerolabs/tsup-configuration": "0.2.112",
+    "@layerzerolabs/typescript-configuration": "0.2.112",
+    "@layerzerolabs/ver-signer-adapter": "0.2.112",
+    "@layerzerolabs/vitest-configuration": "0.2.112",
+    "@layerzerolabs/vm-tooling-canton": "0.2.112"
   },
   "publishConfig": {
     "access": "restricted",

package/src/provider.ts

@@ -38,6 +38,8 @@ export type CantonChainUriParams = {
     adminApiHost: string;
     /** Ledger API user ID (default: "participant_admin") */
     userId: string;
+    /** Parties granted `actAs` on localnet tokens (comma-separated in the URI). */
+    actAs: string[];
     /** Validator wallet URL for scan-proxy CIP-56 endpoints (e.g. "http://localhost:7201"). Required. */
     walletUrl: string;
     /** OAuth2 client credentials config — present only for non-local environments */
@@ -63,6 +65,12 @@ export function parseCantonChainUri(uri: string): CantonChainUriParams {
     }
 
     const userId = url.searchParams.get('user-id') ?? 'participant_admin';
+    const actAsParam = url.searchParams.get('act-as');
+    const actAs =
+        actAsParam
+            ?.split(',')
+            .map((party) => party.trim())
+            .filter((party) => party.length > 0) ?? [];
     const walletUrl = url.searchParams.get('wallet-url');
     if (!walletUrl) {
         throw new Error('Canton provider URI missing required "wallet-url" query parameter');
@@ -76,6 +84,7 @@ export function parseCantonChainUri(uri: string): CantonChainUriParams {
     for (const key of [
         'admin-api',
         'user-id',
+        'act-as',
         'wallet-url',
         'sequencer-url',
         'sequencer-validators',
@@ -100,6 +109,7 @@ export function parseCantonChainUri(uri: string): CantonChainUriParams {
         jsonApiUrl,
         adminApiHost,
         userId,
+        actAs,
         walletUrl,
         oauth2,
     };

package/dist/GOPXFEBJ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/provider.ts"],"names":["parseCantonChainUri","uri","url","URL","adminApiHost","searchParams","get","Error","userId","walletUrl","tokenUrl","undefined","clientId","clientSecret","scope","audience","key","delete","jsonApiUrl","toString","replace","oauth2","createCantonChainProvider","isLocal","params","tokenProvider","createTokenProvider","configuration","Configuration","basePath","accessToken","getToken","client","CantonClient","grpcClient","CantonGrpcClient","host","LocalTokenProvider","actAs","admin","ClientCredentialsTokenProvider"],"mappings":";;;;;;;;AAwDO,SAASA,oBAAoBC,GAAAA,EAAW;AAC3C,EAAA,MAAMC,GAAAA,GAAM,IAAIC,GAAAA,CAAIF,GAAAA,CAAAA;AAEpB,EAAA,MAAMG,YAAAA,GAAeF,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA;AAC1C,EAAA,IAAI,CAACF,YAAAA,EAAc;AACf,IAAA,MAAM,IAAIG,MAAM,kEAAA,CAAA;AACpB,EAAA;AAEA,EAAA,MAAMC,MAAAA,GAASN,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,SAAA,CAAA,IAAc,mBAAA;AAClD,EAAA,MAAMG,SAAAA,GAAYP,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,YAAA,CAAA;AACvC,EAAA,IAAI,CAACG,SAAAA,EAAW;AACZ,IAAA,MAAM,IAAIF,MAAM,mEAAA,CAAA;AACpB,EAAA;AACA,EAAA,MAAMG,QAAAA,GAAWR,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBK,MAAAA;AACtD,EAAA,MAAMC,QAAAA,GAAWV,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBK,MAAAA;AACtD,EAAA,MAAME,YAAAA,GAAeX,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,eAAA,CAAA,IAAoBK,MAAAA;AAC9D,EAAA,MAAMG,KAAAA,GAAQZ,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,OAAA,CAAA,IAAYK,MAAAA;AAC/C,EAAA,MAAMI,QAAAA,GAAWb,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,UAAA,CAAA,IAAeK,MAAAA;AAErD,EAAA,KAAA,MAAWK,GAAAA,IAAO;AACd,IAAA,WAAA;AACA,IAAA,SAAA;AACA,IAAA,YAAA;AACA,IAAA,eAAA;AACA,IAAA,sBAAA;AACA,IAAA,kBAAA;AACA,IAAA,WAAA;AACA,IAAA,WAAA;AACA,IAAA,eAAA;AACA,IAAA,OAAA;AACA,IAAA;AACD,GAAA,EAAA;AACCd,IAAAA,GAAAA,CAAIG,YAAAA,CAAaY,OAAOD,GAAAA,CAAAA;AAC5B,EAAA;AAEA,EAAA,MAAME,aAAahB,GAAAA,CAAIiB,QAAAA,EAAQ,CAAGC,OAAAA,CAAQ,OAAO,EAAA,CAAA;AAEjD,EAAA,MAAMC,MAAAA,GACFX,QAAAA,IAAYE,QAAAA,IAAYC,YAAAA,GAClB;AAAEH,IAAAA,QAAAA;AAAUE,IAAAA,QAAAA;AAAUC,IAAAA,YAAAA;AAAcC,IAAAA,KAAAA;AAAOC,IAAAA;GAAS,GACpDJ,MAAAA;AAEV,EAAA,OAAO;AACHO,IAAAA,UAAAA;AACAd,IAAAA,YAAAA;AACAI,IAAAA,MAAAA;AACAC,IAAAA,SAAAA;AACAY,IAAAA;AACJ,GAAA;AACJ;AAjDgBrB,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAqET,SAASsB,yBAAAA,CAA0B,EACtCrB,GAAAA,EACAsB,OAAAA,EAAO,EACwB;AAC/B,EAAA,MAAMC,MAAAA,GAASxB,oBAAoBC,GAAAA,CAAAA;AAEnC,EAAA,MAAMwB,aAAAA,GAAgBC,mBAAAA,CAAoBF,MAAAA,EAAQD,OAAAA,CAAAA;AAGlD,EAAA,MAAMI,aAAAA,GAAgB,IAAIC,aAAAA,CAAc;AACpCC,IAAAA,QAAAA,EAAUL,MAAAA,CAAON,UAAAA;IACjBY,WAAAA,kBAAa,MAAA,CAAA,MAAML,aAAAA,CAAcM,QAAAA,EAAQ,EAA5B,aAAA;GACjB,CAAA;AACA,EAAA,MAAMC,MAAAA,GAAS,IAAIC,YAAAA,CAAaN,aAAAA,EAAeH,OAAOhB,MAAM,CAAA;AAG5D,EAAA,MAAM0B,UAAAA,GAAa,IAAIC,gBAAAA,CAAiB;AACpCC,IAAAA,IAAAA,EAAMZ,MAAAA,CAAOpB,YAAAA;AACbqB,IAAAA;GACJ,CAAA;AAEA,EAAA,OAAO;AACHO,IAAAA,MAAAA;AACAE,IAAAA,UAAAA;AACAT,IAAAA,aAAAA;AACAhB,IAAAA,SAAAA,EAAWe,MAAAA,CAAOf;AACtB,GAAA;AACJ;AA3BgBa,MAAAA,CAAAA,yBAAAA,EAAAA,2BAAAA,CAAAA;AA6BhB,SAASI,mBAAAA,CAAoBF,QAA8BD,OAAAA,EAAgB;AACvE,EAAA,IAAIA,OAAAA,EAAS;AACT,IAAA,OAAO,IAAIc,kBAAAA,CAAmB;AAC1B7B,MAAAA,MAAAA,EAAQgB,MAAAA,CAAOhB,MAAAA;AACf8B,MAAAA,KAAAA,EAAO,EAAA;MACPC,KAAAA,EAAO;KACX,CAAA;AACJ,EAAA;AAGA,EAAA,IAAI,CAACf,OAAOH,MAAAA,EAAQ;AAChB,IAAA,MAAM,IAAId,MACN,uGAAA,CAAA;AAER,EAAA;AAEA,EAAA,OAAO,IAAIiC,8BAAAA,CAA+BhB,MAAAA,CAAOH,MAAM,CAAA;AAC3D;AAjBSK,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA","file":"GOPXFEBJ.js","sourcesContent":["import {\n    ClientCredentialsTokenProvider,\n    type ClientCredentialsTokenProviderConfig,\n} from './auth/client-credentials-token-provider';\nimport { LocalTokenProvider } from './auth/local-token-provider';\nimport type { TokenProvider } from './auth/token-provider';\nimport { CantonClient } from './client/canton-client';\nimport { CantonGrpcClient } from './client/grpc';\nimport type { ICantonClient } from './client/interface';\nimport { Configuration } from './open-api/runtime';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Type\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * - {@link client} — JSON Ledger API (commands, queries, updates)\n * - {@link grpcClient} — gRPC Admin API (topology transactions, namespace queries)\n * - {@link tokenProvider} — Shared Bearer-token source used by both transports\n * - {@link walletUrl} — Canton Network validator wallet (scan-proxy CIP-56 endpoints)\n */\nexport type CantonChainProvider = {\n    client: ICantonClient;\n    grpcClient: CantonGrpcClient;\n    tokenProvider: TokenProvider;\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints. Required. */\n    walletUrl: string;\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// URI Parsing\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CantonChainUriParams = {\n    /** Base URL of the JSON Ledger API (e.g. \"http://localhost:5975\") */\n    jsonApiUrl: string;\n    /** Host:port of the gRPC Admin API (e.g. \"localhost:5076\") */\n    adminApiHost: string;\n    /** Ledger API user ID (default: \"participant_admin\") */\n    userId: string;\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints (e.g. \"http://localhost:7201\"). Required. */\n    walletUrl: string;\n    /** OAuth2 client credentials config — present only for non-local environments */\n    oauth2?: ClientCredentialsTokenProviderConfig;\n};\n\n/**\n * Parse a Canton chain provider URI into its constituent parts.\n *\n * URI format:\n *   `<json-api-base>?admin-api=<host:port>&user-id=<id>&wallet-url=<url>[&token-url=...&client-id=...&client-secret=...&scope=...&audience=...]`\n *\n * The base URL (everything before the query string) is the JSON Ledger API endpoint.\n * Canton-specific params are extracted and removed; any remaining query params are\n * preserved on the JSON API URL.\n */\nexport function parseCantonChainUri(uri: string): CantonChainUriParams {\n    const url = new URL(uri);\n\n    const adminApiHost = url.searchParams.get('admin-api');\n    if (!adminApiHost) {\n        throw new Error('Canton provider URI missing required \"admin-api\" query parameter');\n    }\n\n    const userId = url.searchParams.get('user-id') ?? 'participant_admin';\n    const walletUrl = url.searchParams.get('wallet-url');\n    if (!walletUrl) {\n        throw new Error('Canton provider URI missing required \"wallet-url\" query parameter');\n    }\n    const tokenUrl = url.searchParams.get('token-url') ?? undefined;\n    const clientId = url.searchParams.get('client-id') ?? undefined;\n    const clientSecret = url.searchParams.get('client-secret') ?? undefined;\n    const scope = url.searchParams.get('scope') ?? undefined;\n    const audience = url.searchParams.get('audience') ?? undefined;\n\n    for (const key of [\n        'admin-api',\n        'user-id',\n        'wallet-url',\n        'sequencer-url',\n        'sequencer-validators',\n        'sequencer-quorum',\n        'token-url',\n        'client-id',\n        'client-secret',\n        'scope',\n        'audience',\n    ]) {\n        url.searchParams.delete(key);\n    }\n\n    const jsonApiUrl = url.toString().replace(/\\/$/, '');\n\n    const oauth2 =\n        tokenUrl && clientId && clientSecret\n            ? { tokenUrl, clientId, clientSecret, scope, audience }\n            : undefined;\n\n    return {\n        jsonApiUrl,\n        adminApiHost,\n        userId,\n        walletUrl,\n        oauth2,\n    };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Factory\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CreateCantonChainProviderOptions = {\n    /** Raw provider URI (from provider config) */\n    uri: string;\n    /** When true, uses LocalTokenProvider (self-signed JWTs) instead of OAuth2 */\n    isLocal: boolean;\n};\n\n/**\n * Create a {@link CantonChainProvider} from a provider URI.\n *\n * - **isLocal=true**: Uses {@link LocalTokenProvider} with admin-level access (self-signed JWTs).\n * - **isLocal=false**: Uses {@link ClientCredentialsTokenProvider} with OAuth2 client\n *   credentials extracted from the URI query parameters.\n */\nexport function createCantonChainProvider({\n    uri,\n    isLocal,\n}: CreateCantonChainProviderOptions): CantonChainProvider {\n    const params = parseCantonChainUri(uri);\n\n    const tokenProvider = createTokenProvider(params, isLocal);\n\n    // ── JSON Ledger API Client ──────────────────────────────────────────\n    const configuration = new Configuration({\n        basePath: params.jsonApiUrl,\n        accessToken: () => tokenProvider.getToken(),\n    });\n    const client = new CantonClient(configuration, params.userId);\n\n    // ── gRPC Admin API Client ───────────────────────────────────────────\n    const grpcClient = new CantonGrpcClient({\n        host: params.adminApiHost,\n        tokenProvider,\n    });\n\n    return {\n        client,\n        grpcClient,\n        tokenProvider,\n        walletUrl: params.walletUrl,\n    };\n}\n\nfunction createTokenProvider(params: CantonChainUriParams, isLocal: boolean): TokenProvider {\n    if (isLocal) {\n        return new LocalTokenProvider({\n            userId: params.userId,\n            actAs: [],\n            admin: true,\n        });\n    }\n\n    // TODO(canton): add other prod auth methods (direct JWT passthrough, etc.).\n    if (!params.oauth2) {\n        throw new Error(\n            'Canton provider requires OAuth2 credentials (token-url, client-id, client-secret) in the provider URI',\n        );\n    }\n\n    return new ClientCredentialsTokenProvider(params.oauth2);\n}\n"]}