@layerzerolabs/common-canton 0.2.120 → 0.2.122

package/src/provider.ts

@@ -55,6 +55,9 @@ export type CantonChainUriParams = {
  * The base URL (everything before the query string) is the JSON Ledger API endpoint.
  * Canton-specific params are extracted and removed; any remaining query params are
  * preserved on the JSON API URL.
+ *
+ * When `client-secret` is omitted from the URI, `CANTON_CLIENT_SECRET` is read from the
+ * environment.
  */
 export function parseCantonChainUri(uri: string): CantonChainUriParams {
     const url = new URL(uri);
@@ -77,7 +80,12 @@ export function parseCantonChainUri(uri: string): CantonChainUriParams {
     }
     const tokenUrl = url.searchParams.get('token-url') ?? undefined;
     const clientId = url.searchParams.get('client-id') ?? undefined;
-    const clientSecret = url.searchParams.get('client-secret') ?? undefined;
+    // Prefer URI param; fall back to env so secrets are not committed in provider configs.
+    const clientSecret =
+        url.searchParams.get('client-secret') ??
+        // eslint-disable-next-line turbo/no-undeclared-env-vars -- runtime OAuth secret, not a turbo task input
+        process.env.CANTON_CLIENT_SECRET ??
+        undefined;
     const scope = url.searchParams.get('scope') ?? undefined;
     const audience = url.searchParams.get('audience') ?? undefined;
 
@@ -169,7 +177,7 @@ function createTokenProvider(params: CantonChainUriParams, isLocal: boolean): To
     if (isLocal) {
         return new LocalTokenProvider({
             userId: params.userId,
-            actAs: [],
+            actAs: params.actAs,
             admin: true,
         });
     }
@@ -177,7 +185,7 @@ function createTokenProvider(params: CantonChainUriParams, isLocal: boolean): To
     // TODO(canton): add other prod auth methods (direct JWT passthrough, etc.).
     if (!params.oauth2) {
         throw new Error(
-            'Canton provider requires OAuth2 credentials (token-url, client-id, client-secret) in the provider URI',
+            'Canton provider requires OAuth2 credentials (token-url, client-id, client-secret in URI or CANTON_CLIENT_SECRET)',
         );
     }
 

package/src/sdk/index.ts

@@ -1,2 +1 @@
-export type { NormalizedActiveContract } from '../types';
 export * from './canton-sdk';

package/src/transaction.ts

@@ -9,6 +9,8 @@ import {
 } from '@layerzerolabs/common-chain-model';
 import type { PartialBy } from '@layerzerolabs/typescript-utils';
 
+import type { CantonDeferredRef } from './deferredValue';
+
 // === Component schemas ===
 
 export const cantonCommandSchema = z.union([
@@ -44,6 +46,23 @@ export const cantonCommandSchema = z.union([
     }),
 ]);
 
+/**
+ * Like cantonCommandSchema but with contractId typed as CantonDeferredRef | string.
+ * Used for unresolvedCommands where exercise contractIds are deferred sentinels.
+ * At runtime the validation is identical (z.string()); only the TypeScript type differs.
+ */
+export const unresolvedCantonCommandSchema = cantonCommandSchema as unknown as z.ZodType<
+    | z.infer<typeof cantonCommandSchema>
+    | {
+          exerciseCommand: {
+              templateId: string;
+              contractId: CantonDeferredRef | string;
+              choice: string;
+              choiceArgument: unknown;
+          };
+      }
+>;
+
 export const cantonDisclosedContractSchema = z.object({
     templateId: z.string().optional(),
     contractId: z.string(),
@@ -58,16 +77,17 @@ export const cantonDisclosedContractSchema = z.object({
  */
 export const cantonTransactionSchema = transactionSchema.extend({
     populatedTransaction: z.object({
-        unresolvedCommands: z.array(cantonCommandSchema),
+        unresolvedCommands: z.array(unresolvedCantonCommandSchema),
         unresolvedDisclosedContracts: z.array(cantonDisclosedContractSchema),
 
         /** Parties submitting the command (actAs) */
         actAs: z.array(z.string()),
         /** Maps each actAs party → the senderEntityName(s) controlling its signing
          *  key(s), always as an array. `.optional()` only so deferred-sender create-time
-         *  payloads parse; by sign time every actAs party must map, or signing throws.
-         *  Multiple entries = a multisig party (decentralized namespace) whose keys must
-         *  all sign. */
+         *  payloads parse. At sign time: multi-party transactions must map every actAs
+         *  party or signing throws; single-party transactions may omit the map and sign()
+         *  falls back to the queue's senderEntityName. Multiple entries = a multisig party
+         *  (decentralized namespace) whose keys must all sign. */
         partyToSenderEntity: z.record(z.string(), z.array(z.string())).optional(),
         /** Deployment spec set at prepare time; the deployment activity resolves the live address ref from this + the createCommand. */
         deploymentSpec: z
@@ -154,6 +174,7 @@ export interface ContractDataIdentifier {
 export type CantonTx = z.infer<typeof cantonTransactionSchema>;
 export type CantonPopulatedTransaction = CantonTx['populatedTransaction'];
 export type CantonCommands = z.infer<typeof cantonCommandSchema>[];
+export type CantonUnresolvedCommands = z.infer<typeof unresolvedCantonCommandSchema>[];
 export type CantonDisclosedContracts = z.infer<typeof cantonDisclosedContractSchema>[];
 export type CantonAssignedTx = z.infer<typeof cantonAssignedTransactionSchema>;
 export type CantonSignedTx = z.infer<typeof cantonSignedTransactionSchema>;

package/src/types.ts

@@ -27,6 +27,21 @@ export type TemplateId = string;
 export const buildTemplateId = (packageId: string, modulePath: string): TemplateId =>
     `${packageId}:${modulePath}`;
 
+// '1' → '0.0000000001' (Canton Coin has 10 decimals)
+export const smallestUnitsToDamlDecimal = (units: string): string => {
+    if (units.startsWith('-')) {
+        throw new Error(`smallestUnitsToDamlDecimal: negative value not supported: ${units}`);
+    }
+    const padded = units.padStart(11, '0');
+    return `${padded.slice(0, -10).replace(/^0+/, '') || '0'}.${padded.slice(-10)}`;
+};
+
+// '0.01' → '0.0100000000' — pads to exactly 10 fractional digits for ledger comparison
+export const canonicalizeDamlDecimal = (value: string): string => {
+    const [integer = '0', fraction = ''] = value.split('.');
+    return `${integer}.${fraction.padEnd(10, '0')}`;
+};
+
 export type Contract<T extends object> = {
     templateId: TemplateId;
     contractId: ContractId<T>;

package/test/client/amulet.test.ts

@@ -0,0 +1,64 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
+
+import { fetchAmuletContext, fetchDsoParty } from '../../src/client/amulet';
+
+const TOKEN = 'test-token';
+const DSO_PARTY_PATH = '/api/validator/v0/scan-proxy/dso-party-id';
+const TRANSFER_FACTORY_PATH =
+    '/api/validator/v0/scan-proxy/registry/transfer-instruction/v1/transfer-factory';
+
+const okResponse = (body: unknown): Response =>
+    ({
+        ok: true,
+        status: 200,
+        json: async () => body,
+        text: async () => JSON.stringify(body),
+    }) as unknown as Response;
+
+const requestedUrl = (): string => String(vi.mocked(fetch).mock.calls[0]![0]);
+
+describe('amulet scan-proxy request URLs', () => {
+    beforeEach(() => {
+        vi.stubGlobal('fetch', vi.fn());
+    });
+
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+
+    describe('DSO party endpoint', () => {
+        it('targets the scan-proxy DSO party path on the wallet origin', async () => {
+            vi.mocked(fetch).mockResolvedValueOnce(okResponse({ dso_party_id: 'dso::123' }));
+
+            await fetchDsoParty('https://wallet.example.com', TOKEN);
+
+            expect(requestedUrl()).toBe(`https://wallet.example.com${DSO_PARTY_PATH}`);
+        });
+
+        it('collapses a trailing slash on the wallet URL instead of doubling it', async () => {
+            vi.mocked(fetch).mockResolvedValueOnce(okResponse({ dso_party_id: 'dso::123' }));
+
+            await fetchDsoParty('https://wallet.example.com/', TOKEN);
+
+            expect(requestedUrl()).toBe(`https://wallet.example.com${DSO_PARTY_PATH}`);
+            expect(new URL(requestedUrl()).host).toBe('wallet.example.com');
+        });
+    });
+
+    describe('amulet context endpoint', () => {
+        it('targets the transfer factory path regardless of a trailing slash', async () => {
+            vi.mocked(fetch).mockResolvedValueOnce(
+                okResponse({
+                    choiceContext: { disclosedContracts: [], choiceContextData: { values: {} } },
+                }),
+            );
+
+            await fetchAmuletContext('https://wallet.example.com/', TOKEN, {
+                admin: 'dso::123',
+                id: 'Amulet',
+            });
+
+            expect(requestedUrl()).toBe(`https://wallet.example.com${TRANSFER_FACTORY_PATH}`);
+        });
+    });
+});

package/test/provider.test.ts

@@ -75,4 +75,26 @@ describe('parseCantonChainUri', () => {
             audience: undefined,
         });
     });
+
+    it('falls back to CANTON_CLIENT_SECRET when URI omits client-secret', async () => {
+        const previous = process.env.CANTON_CLIENT_SECRET;
+        process.env.CANTON_CLIENT_SECRET = 'from-env';
+        try {
+            const { parseCantonChainUri } = await loadProvider();
+            const params = parseCantonChainUri(`${BASE}&token-url=http://token&client-id=cid`);
+            expect(params.oauth2).toEqual({
+                tokenUrl: 'http://token',
+                clientId: 'cid',
+                clientSecret: 'from-env',
+                scope: undefined,
+                audience: undefined,
+            });
+        } finally {
+            if (previous === undefined) {
+                delete process.env.CANTON_CLIENT_SECRET;
+            } else {
+                process.env.CANTON_CLIENT_SECRET = previous;
+            }
+        }
+    });
 });

package/dist/5E77SJL7.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/provider.ts"],"names":["parseCantonChainUri","uri","url","URL","adminApiHost","searchParams","get","Error","userId","actAsParam","actAs","split","map","party","trim","filter","length","walletUrl","tokenUrl","undefined","clientId","clientSecret","scope","audience","key","delete","jsonApiUrl","toString","replace","oauth2","createCantonChainProvider","isLocal","params","tokenProvider","createTokenProvider","configuration","Configuration","basePath","accessToken","getToken","client","CantonClient","grpcClient","CantonGrpcClient","host","LocalTokenProvider","admin","ClientCredentialsTokenProvider"],"mappings":";;;;;;;;AA0DO,SAASA,oBAAoBC,GAAAA,EAAW;AAC3C,EAAA,MAAMC,GAAAA,GAAM,IAAIC,GAAAA,CAAIF,GAAAA,CAAAA;AAEpB,EAAA,MAAMG,YAAAA,GAAeF,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA;AAC1C,EAAA,IAAI,CAACF,YAAAA,EAAc;AACf,IAAA,MAAM,IAAIG,MAAM,kEAAA,CAAA;AACpB,EAAA;AAEA,EAAA,MAAMC,MAAAA,GAASN,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,SAAA,CAAA,IAAc,mBAAA;AAClD,EAAA,MAAMG,UAAAA,GAAaP,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,QAAA,CAAA;AACxC,EAAA,MAAMI,QACFD,UAAAA,EACME,KAAAA,CAAM,GAAA,CAAA,CACPC,GAAAA,CAAI,CAACC,KAAAA,KAAUA,KAAAA,CAAMC,MAAI,CAAA,CACzBC,OAAO,CAACF,KAAAA,KAAUA,MAAMG,MAAAA,GAAS,CAAA,KAAM,EAAA;AAChD,EAAA,MAAMC,SAAAA,GAAYf,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,YAAA,CAAA;AACvC,EAAA,IAAI,CAACW,SAAAA,EAAW;AACZ,IAAA,MAAM,IAAIV,MAAM,mEAAA,CAAA;AACpB,EAAA;AACA,EAAA,MAAMW,QAAAA,GAAWhB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBa,MAAAA;AACtD,EAAA,MAAMC,QAAAA,GAAWlB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBa,MAAAA;AACtD,EAAA,MAAME,YAAAA,GAAenB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,eAAA,CAAA,IAAoBa,MAAAA;AAC9D,EAAA,MAAMG,KAAAA,GAAQpB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,OAAA,CAAA,IAAYa,MAAAA;AAC/C,EAAA,MAAMI,QAAAA,GAAWrB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,UAAA,CAAA,IAAea,MAAAA;AAErD,EAAA,KAAA,MAAWK,GAAAA,IAAO;AACd,IAAA,WAAA;AACA,IAAA,SAAA;AACA,IAAA,QAAA;AACA,IAAA,YAAA;AACA,IAAA,eAAA;AACA,IAAA,sBAAA;AACA,IAAA,kBAAA;AACA,IAAA,WAAA;AACA,IAAA,WAAA;AACA,IAAA,eAAA;AACA,IAAA,OAAA;AACA,IAAA;AACD,GAAA,EAAA;AACCtB,IAAAA,GAAAA,CAAIG,YAAAA,CAAaoB,OAAOD,GAAAA,CAAAA;AAC5B,EAAA;AAEA,EAAA,MAAME,aAAaxB,GAAAA,CAAIyB,QAAAA,EAAQ,CAAGC,OAAAA,CAAQ,OAAO,EAAA,CAAA;AAEjD,EAAA,MAAMC,MAAAA,GACFX,QAAAA,IAAYE,QAAAA,IAAYC,YAAAA,GAClB;AAAEH,IAAAA,QAAAA;AAAUE,IAAAA,QAAAA;AAAUC,IAAAA,YAAAA;AAAcC,IAAAA,KAAAA;AAAOC,IAAAA;GAAS,GACpDJ,MAAAA;AAEV,EAAA,OAAO;AACHO,IAAAA,UAAAA;AACAtB,IAAAA,YAAAA;AACAI,IAAAA,MAAAA;AACAE,IAAAA,KAAAA;AACAO,IAAAA,SAAAA;AACAY,IAAAA;AACJ,GAAA;AACJ;AAzDgB7B,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AA6ET,SAAS8B,yBAAAA,CAA0B,EACtC7B,GAAAA,EACA8B,OAAAA,EAAO,EACwB;AAC/B,EAAA,MAAMC,MAAAA,GAAShC,oBAAoBC,GAAAA,CAAAA;AAEnC,EAAA,MAAMgC,aAAAA,GAAgBC,mBAAAA,CAAoBF,MAAAA,EAAQD,OAAAA,CAAAA;AAGlD,EAAA,MAAMI,aAAAA,GAAgB,IAAIC,aAAAA,CAAc;AACpCC,IAAAA,QAAAA,EAAUL,MAAAA,CAAON,UAAAA;IACjBY,WAAAA,kBAAa,MAAA,CAAA,MAAML,aAAAA,CAAcM,QAAAA,EAAQ,EAA5B,aAAA;GACjB,CAAA;AACA,EAAA,MAAMC,MAAAA,GAAS,IAAIC,YAAAA,CAAaN,aAAAA,EAAeH,OAAOxB,MAAAA,EAAQ;AAC1DS,IAAAA,SAAAA,EAAWe,MAAAA,CAAOf,SAAAA;AAClBgB,IAAAA;GACJ,CAAA;AAGA,EAAA,MAAMS,UAAAA,GAAa,IAAIC,gBAAAA,CAAiB;AACpCC,IAAAA,IAAAA,EAAMZ,MAAAA,CAAO5B,YAAAA;AACb6B,IAAAA;GACJ,CAAA;AAEA,EAAA,OAAO;AACHO,IAAAA,MAAAA;AACAE,IAAAA,UAAAA;AACAT,IAAAA,aAAAA;AACAhB,IAAAA,SAAAA,EAAWe,MAAAA,CAAOf;AACtB,GAAA;AACJ;AA9BgBa,MAAAA,CAAAA,yBAAAA,EAAAA,2BAAAA,CAAAA;AAgChB,SAASI,mBAAAA,CAAoBF,QAA8BD,OAAAA,EAAgB;AACvE,EAAA,IAAIA,OAAAA,EAAS;AACT,IAAA,OAAO,IAAIc,kBAAAA,CAAmB;AAC1BrC,MAAAA,MAAAA,EAAQwB,MAAAA,CAAOxB,MAAAA;AACfE,MAAAA,KAAAA,EAAO,EAAA;MACPoC,KAAAA,EAAO;KACX,CAAA;AACJ,EAAA;AAGA,EAAA,IAAI,CAACd,OAAOH,MAAAA,EAAQ;AAChB,IAAA,MAAM,IAAItB,MACN,uGAAA,CAAA;AAER,EAAA;AAEA,EAAA,OAAO,IAAIwC,8BAAAA,CAA+Bf,MAAAA,CAAOH,MAAM,CAAA;AAC3D;AAjBSK,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA","file":"5E77SJL7.js","sourcesContent":["import {\n    ClientCredentialsTokenProvider,\n    type ClientCredentialsTokenProviderConfig,\n} from './auth/client-credentials-token-provider';\nimport { LocalTokenProvider } from './auth/local-token-provider';\nimport type { TokenProvider } from './auth/token-provider';\nimport { CantonClient } from './client/canton-client';\nimport { CantonGrpcClient } from './client/grpc';\nimport type { ICantonClient } from './client/interface';\nimport { Configuration } from './open-api/runtime';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Type\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * - {@link client} — JSON Ledger API (commands, queries, updates)\n * - {@link grpcClient} — gRPC Admin API (topology transactions, namespace queries)\n * - {@link tokenProvider} — Shared Bearer-token source used by both transports\n * - {@link walletUrl} — Canton Network validator wallet (scan-proxy CIP-56 endpoints)\n */\nexport type CantonChainProvider = {\n    client: ICantonClient;\n    grpcClient: CantonGrpcClient;\n    tokenProvider: TokenProvider;\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints. Required. */\n    walletUrl: string;\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// URI Parsing\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CantonChainUriParams = {\n    /** Base URL of the JSON Ledger API (e.g. \"http://localhost:5975\") */\n    jsonApiUrl: string;\n    /** Host:port of the gRPC Admin API (e.g. \"localhost:5076\") */\n    adminApiHost: string;\n    /** Ledger API user ID (default: \"participant_admin\") */\n    userId: string;\n    /** Parties granted `actAs` on localnet tokens (comma-separated in the URI). */\n    actAs: string[];\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints (e.g. \"http://localhost:7201\"). Required. */\n    walletUrl: string;\n    /** OAuth2 client credentials config — present only for non-local environments */\n    oauth2?: ClientCredentialsTokenProviderConfig;\n};\n\n/**\n * Parse a Canton chain provider URI into its constituent parts.\n *\n * URI format:\n *   `<json-api-base>?admin-api=<host:port>&user-id=<id>&wallet-url=<url>[&token-url=...&client-id=...&client-secret=...&scope=...&audience=...]`\n *\n * The base URL (everything before the query string) is the JSON Ledger API endpoint.\n * Canton-specific params are extracted and removed; any remaining query params are\n * preserved on the JSON API URL.\n */\nexport function parseCantonChainUri(uri: string): CantonChainUriParams {\n    const url = new URL(uri);\n\n    const adminApiHost = url.searchParams.get('admin-api');\n    if (!adminApiHost) {\n        throw new Error('Canton provider URI missing required \"admin-api\" query parameter');\n    }\n\n    const userId = url.searchParams.get('user-id') ?? 'participant_admin';\n    const actAsParam = url.searchParams.get('act-as');\n    const actAs =\n        actAsParam\n            ?.split(',')\n            .map((party) => party.trim())\n            .filter((party) => party.length > 0) ?? [];\n    const walletUrl = url.searchParams.get('wallet-url');\n    if (!walletUrl) {\n        throw new Error('Canton provider URI missing required \"wallet-url\" query parameter');\n    }\n    const tokenUrl = url.searchParams.get('token-url') ?? undefined;\n    const clientId = url.searchParams.get('client-id') ?? undefined;\n    const clientSecret = url.searchParams.get('client-secret') ?? undefined;\n    const scope = url.searchParams.get('scope') ?? undefined;\n    const audience = url.searchParams.get('audience') ?? undefined;\n\n    for (const key of [\n        'admin-api',\n        'user-id',\n        'act-as',\n        'wallet-url',\n        'sequencer-url',\n        'sequencer-validators',\n        'sequencer-quorum',\n        'token-url',\n        'client-id',\n        'client-secret',\n        'scope',\n        'audience',\n    ]) {\n        url.searchParams.delete(key);\n    }\n\n    const jsonApiUrl = url.toString().replace(/\\/$/, '');\n\n    const oauth2 =\n        tokenUrl && clientId && clientSecret\n            ? { tokenUrl, clientId, clientSecret, scope, audience }\n            : undefined;\n\n    return {\n        jsonApiUrl,\n        adminApiHost,\n        userId,\n        actAs,\n        walletUrl,\n        oauth2,\n    };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Factory\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CreateCantonChainProviderOptions = {\n    /** Raw provider URI (from provider config) */\n    uri: string;\n    /** When true, uses LocalTokenProvider (self-signed JWTs) instead of OAuth2 */\n    isLocal: boolean;\n};\n\n/**\n * Create a {@link CantonChainProvider} from a provider URI.\n *\n * - **isLocal=true**: Uses {@link LocalTokenProvider} with admin-level access (self-signed JWTs).\n * - **isLocal=false**: Uses {@link ClientCredentialsTokenProvider} with OAuth2 client\n *   credentials extracted from the URI query parameters.\n */\nexport function createCantonChainProvider({\n    uri,\n    isLocal,\n}: CreateCantonChainProviderOptions): CantonChainProvider {\n    const params = parseCantonChainUri(uri);\n\n    const tokenProvider = createTokenProvider(params, isLocal);\n\n    // ── JSON Ledger API Client ──────────────────────────────────────────\n    const configuration = new Configuration({\n        basePath: params.jsonApiUrl,\n        accessToken: () => tokenProvider.getToken(),\n    });\n    const client = new CantonClient(configuration, params.userId, {\n        walletUrl: params.walletUrl,\n        tokenProvider,\n    });\n\n    // ── gRPC Admin API Client ───────────────────────────────────────────\n    const grpcClient = new CantonGrpcClient({\n        host: params.adminApiHost,\n        tokenProvider,\n    });\n\n    return {\n        client,\n        grpcClient,\n        tokenProvider,\n        walletUrl: params.walletUrl,\n    };\n}\n\nfunction createTokenProvider(params: CantonChainUriParams, isLocal: boolean): TokenProvider {\n    if (isLocal) {\n        return new LocalTokenProvider({\n            userId: params.userId,\n            actAs: [],\n            admin: true,\n        });\n    }\n\n    // TODO(canton): add other prod auth methods (direct JWT passthrough, etc.).\n    if (!params.oauth2) {\n        throw new Error(\n            'Canton provider requires OAuth2 credentials (token-url, client-id, client-secret) in the provider URI',\n        );\n    }\n\n    return new ClientCredentialsTokenProvider(params.oauth2);\n}\n"]}

package/dist/AYF4OAKH.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/client/amulet.ts"],"names":["AMULET_INSTRUMENT_ID","CONTEXT_PROBE_EXECUTE_BEFORE_WINDOW_MS","fetchAmuletContext","walletUrl","token","instrumentId","now","Date","later","getTime","response","fetch","method","headers","Authorization","body","JSON","stringify","choiceArguments","expectedAdmin","admin","transfer","sender","receiver","amount","requestedAt","toISOString","executeBefore","inputHoldingCids","meta","values","extraArgs","context","ok","text","CantonProtocolError","status","data","json","disclosedContracts","choiceContextData","amuletContext","choiceContext","injectExternalPartyAmuletRules","externalRulesContract","find","contract","templateId","includes","NonRetryableError","tag","value","contractId","externalPartyAmuletRulesCid","fetchDsoParty","dso_party_id"],"mappings":";;;;AAeO,IAAMA,oBAAAA,GAAuB;AAepC,IAAMC,sCAAAA,GAAyC,KAAK,EAAA,GAAK,GAAA;AAUlD,IAAMC,kBAAAA,mBAAqB,MAAA,CAAA,OAC9BC,SAAAA,EACAC,KAAAA,EACAC,YAAAA,KAAAA;AAEA,EAAA,MAAMC,GAAAA,uBAAUC,IAAAA,EAAAA;AAChB,EAAA,MAAMC,QAAQ,IAAID,IAAAA,CAAKD,GAAAA,CAAIG,OAAAA,KAAYR,sCAAAA,CAAAA;AAEvC,EAAA,MAAMS,QAAAA,GAAW,MAAMC,KAAAA,CACnB,CAAA,EAAGR,SAAAA,CAAAA,8EAAAA,CAAAA,EACH;IACIS,MAAAA,EAAQ,MAAA;IACRC,OAAAA,EAAS;AACLC,MAAAA,aAAAA,EAAe,UAAUV,KAAAA,CAAAA,CAAAA;MACzB,cAAA,EAAgB;AACpB,KAAA;AACAW,IAAAA,IAAAA,EAAMC,KAAKC,SAAAA,CAAU;MACjBC,eAAAA,EAAiB;AACbC,QAAAA,aAAAA,EAAed,YAAAA,CAAae,KAAAA;QAC5BC,QAAAA,EAAU;AACNC,UAAAA,MAAAA,EAAQjB,YAAAA,CAAae,KAAAA;AACrBG,UAAAA,QAAAA,EAAUlB,YAAAA,CAAae,KAAAA;UACvBI,MAAAA,EAAQ,GAAA;AACRnB,UAAAA,YAAAA;AACAoB,UAAAA,WAAAA,EAAanB,IAAIoB,WAAAA,EAAW;AAC5BC,UAAAA,aAAAA,EAAenB,MAAMkB,WAAAA,EAAW;AAChCE,UAAAA,gBAAAA,EAAkB,EAAA;UAClBC,IAAAA,EAAM;AAAEC,YAAAA,MAAAA,EAAQ;AAAG;AACvB,SAAA;QACAC,SAAAA,EAAW;UAAEC,OAAAA,EAAS;AAAEF,YAAAA,MAAAA,EAAQ;AAAG,WAAA;UAAGD,IAAAA,EAAM;AAAEC,YAAAA,MAAAA,EAAQ;AAAG;AAAE;AAC/D;KACJ;GACJ,CAAA;AAGJ,EAAA,IAAI,CAACpB,SAASuB,EAAAA,EAAI;AACd,IAAA,MAAMC,IAAAA,GAAO,MAAMxB,QAAAA,CAASwB,IAAAA,EAAI;AAChC,IAAA,MAAM,IAAIC,mBAAAA,CAAoB,CAAA,8BAAA,EAAiCzB,SAAS0B,MAAM,CAAA,CAAA,EAAIF,IAAAA,CAAAA,CAAM,CAAA;AAC5F,EAAA;AAEA,EAAA,MAAMG,IAAAA,GAAQ,MAAM3B,QAAAA,CAAS4B,IAAAA,EAAI;AACjC,EAAA,MAAM,EAAEC,kBAAAA,EAAoBC,iBAAAA,EAAmBC,aAAAA,KAAkBJ,IAAAA,CAAKK,aAAAA;AAEtE,EAAA,OAAO;AAAED,IAAAA,aAAAA;AAAeF,IAAAA;AAAmB,GAAA;AAC/C,CAAA,EA5CkC,oBAAA;AA+C3B,IAAMI,8BAAAA,mBAAiC,MAAA,CAAA,CAC1CF,aAAAA,EACAF,kBAAAA,KAAAA;AAEA,EAAA,MAAMK,qBAAAA,GAAwBL,mBAAmBM,IAAAA,CAAK,CAACC,aACnDA,QAAAA,CAASC,UAAAA,EAAYC,QAAAA,CAAS,0BAAA,CAAA,CAAA;AAGlC,EAAA,IAAI,CAACJ,qBAAAA,EAAuB;AACxB,IAAA,MAAM,IAAIK,kBACN,+EAAA,CAAA;AAER,EAAA;AAEA,EAAA,OAAO;IACHR,aAAAA,EAAe;MACXX,MAAAA,EAAQ;AACJ,QAAA,GAAGW,aAAAA,CAAcX,MAAAA;QACjB,6BAAA,EAA+B;UAC3BoB,GAAAA,EAAK,eAAA;AACLC,UAAAA,KAAAA,EAAOP,qBAAAA,CAAsBQ;AACjC;AACJ;AACJ,KAAA;AACAC,IAAAA,2BAAAA,EAA6BT,qBAAAA,CAAsBQ;AACvD,GAAA;AACJ,CAAA,EA1B8C,gCAAA;AA6BvC,IAAME,aAAAA,mBAAgB,MAAA,CAAA,OAAOnD,SAAAA,EAAmBC,KAAAA,KAAAA;AACnD,EAAA,MAAMM,QAAAA,GAAW,MAAMC,KAAAA,CAAM,CAAA,EAAGR,SAAAA,CAAAA,yCAAAA,CAAAA,EAAsD;IAClFU,OAAAA,EAAS;AAAEC,MAAAA,aAAAA,EAAe,UAAUV,KAAAA,CAAAA;AAAQ;GAChD,CAAA;AACA,EAAA,IAAI,CAACM,SAASuB,EAAAA,EAAI;AACd,IAAA,MAAM,IAAIE,mBAAAA,CAAoB,CAAA,yBAAA,EAA4BzB,QAAAA,CAAS0B,MAAM,CAAA,CAAE,CAAA;AAC/E,EAAA;AACA,EAAA,MAAMC,IAAAA,GAAQ,MAAM3B,QAAAA,CAAS4B,IAAAA,EAAI;AACjC,EAAA,OAAOD,IAAAA,CAAKkB,YAAAA;AAChB,CAAA,EAT6B,eAAA","file":"AYF4OAKH.js","sourcesContent":["import { NonRetryableError } from '@layerzerolabs/common-error-utils';\n\nimport type { TokenProvider } from '../auth/token-provider';\nimport { CantonProtocolError } from '../errors';\nimport type { DisclosedContract } from '../open-api/models';\n\n/** Validator-wallet access a {@link CantonClient} needs to serve amulet endpoints. */\nexport type CantonClientWalletConfig = {\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints. */\n    walletUrl: string;\n    /** Bearer-token source for wallet requests. */\n    tokenProvider: TokenProvider;\n};\n\n/** The single Amulet instrument id used across Canton Network fee flows. */\nexport const AMULET_INSTRUMENT_ID = 'Amulet';\n\n/** Instrument identifier for an amulet context probe. */\nexport type InstrumentId = { admin: string; id: string };\n\n/** DAML ChoiceContext — a bag of named AnyValues passed to fee-bearing choices. */\nexport type ChoiceContext = { values: Record<string, unknown> };\n\nexport type AmuletContextResult = {\n    amuletContext: ChoiceContext;\n    disclosedContracts: DisclosedContract[];\n    externalPartyAmuletRulesCid: string;\n};\n\n// The probe (amount 0, sender = receiver = admin) never executes — it only fetches context; 1-hour window is ample.\nconst CONTEXT_PROBE_EXECUTE_BEFORE_WINDOW_MS = 60 * 60 * 1000;\n\ntype AmuletContextResponse = {\n    choiceContext: {\n        disclosedContracts: DisclosedContract[];\n        choiceContextData: ChoiceContext;\n    };\n};\n\n/** Amulet ChoiceContext from the validator scan-proxy — same call for all fee-bearing choices. */\nexport const fetchAmuletContext = async (\n    walletUrl: string,\n    token: string,\n    instrumentId: InstrumentId,\n): Promise<{ amuletContext: ChoiceContext; disclosedContracts: DisclosedContract[] }> => {\n    const now = new Date();\n    const later = new Date(now.getTime() + CONTEXT_PROBE_EXECUTE_BEFORE_WINDOW_MS);\n\n    const response = await fetch(\n        `${walletUrl}/api/validator/v0/scan-proxy/registry/transfer-instruction/v1/transfer-factory`,\n        {\n            method: 'POST',\n            headers: {\n                Authorization: `Bearer ${token}`,\n                'Content-Type': 'application/json',\n            },\n            body: JSON.stringify({\n                choiceArguments: {\n                    expectedAdmin: instrumentId.admin,\n                    transfer: {\n                        sender: instrumentId.admin,\n                        receiver: instrumentId.admin,\n                        amount: '0',\n                        instrumentId,\n                        requestedAt: now.toISOString(),\n                        executeBefore: later.toISOString(),\n                        inputHoldingCids: [],\n                        meta: { values: {} },\n                    },\n                    extraArgs: { context: { values: {} }, meta: { values: {} } },\n                },\n            }),\n        },\n    );\n\n    if (!response.ok) {\n        const text = await response.text();\n        throw new CantonProtocolError(`Failed to get amulet context: ${response.status} ${text}`);\n    }\n\n    const data = (await response.json()) as AmuletContextResponse;\n    const { disclosedContracts, choiceContextData: amuletContext } = data.choiceContext;\n\n    return { amuletContext, disclosedContracts };\n};\n\n/** Injects ExternalPartyAmuletRules cid into the ChoiceContext — required by every flow hitting FeeUtils.validateContext. */\nexport const injectExternalPartyAmuletRules = (\n    amuletContext: ChoiceContext,\n    disclosedContracts: DisclosedContract[],\n): { amuletContext: ChoiceContext; externalPartyAmuletRulesCid: string } => {\n    const externalRulesContract = disclosedContracts.find((contract) =>\n        contract.templateId?.includes('ExternalPartyAmuletRules'),\n    );\n\n    if (!externalRulesContract) {\n        throw new NonRetryableError(\n            'ExternalPartyAmuletRules not found in disclosed contracts from amulet context',\n        );\n    }\n\n    return {\n        amuletContext: {\n            values: {\n                ...amuletContext.values,\n                'external-party-amulet-rules': {\n                    tag: 'AV_ContractId',\n                    value: externalRulesContract.contractId,\n                },\n            },\n        },\n        externalPartyAmuletRulesCid: externalRulesContract.contractId,\n    };\n};\n\n/** Fetch the DSO party id from the validator scan-proxy API. */\nexport const fetchDsoParty = async (walletUrl: string, token: string): Promise<string> => {\n    const response = await fetch(`${walletUrl}/api/validator/v0/scan-proxy/dso-party-id`, {\n        headers: { Authorization: `Bearer ${token}` },\n    });\n    if (!response.ok) {\n        throw new CantonProtocolError(`Failed to get DSO party: ${response.status}`);\n    }\n    const data = (await response.json()) as { dso_party_id: string };\n    return data.dso_party_id;\n};\n"]}

package/dist/F42TZTWJ.js

@@ -1,33 +0,0 @@
-import { SECP256K1_SPKI_DER_HEADER } from './CMDFOA7C.js';
-import { __name } from './VUOMXK5T.js';
-import { createHash } from 'crypto';
-import { bytesToHex } from '@layerzerolabs/common-encoding-utils';
-
-function extractTransactions(updates) {
-  return updates.flatMap((update) => "Transaction" in update ? [
-    update.Transaction.value
-  ] : []);
-}
-__name(extractTransactions, "extractTransactions");
-var HASH_PURPOSE_PUBLIC_KEY_FINGERPRINT = 12;
-var MULTIHASH_SHA256_PREFIX = new Uint8Array([
-  18,
-  32
-]);
-function computeCantonFingerprint(uncompressedPublicKey) {
-  const publicKeyDer = new Uint8Array(SECP256K1_SPKI_DER_HEADER.length + uncompressedPublicKey.length);
-  publicKeyDer.set(SECP256K1_SPKI_DER_HEADER);
-  publicKeyDer.set(uncompressedPublicKey, SECP256K1_SPKI_DER_HEADER.length);
-  const purposePrefix = new Uint8Array(4);
-  new DataView(purposePrefix.buffer).setUint32(0, HASH_PURPOSE_PUBLIC_KEY_FINGERPRINT);
-  const hash = createHash("sha256").update(purposePrefix).update(publicKeyDer).digest();
-  const result = new Uint8Array(MULTIHASH_SHA256_PREFIX.length + hash.length);
-  result.set(MULTIHASH_SHA256_PREFIX);
-  result.set(hash, MULTIHASH_SHA256_PREFIX.length);
-  return bytesToHex(result);
-}
-__name(computeCantonFingerprint, "computeCantonFingerprint");
-
-export { computeCantonFingerprint, extractTransactions };
-//# sourceMappingURL=F42TZTWJ.js.map
-//# sourceMappingURL=F42TZTWJ.js.map

package/dist/F42TZTWJ.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/client/utils.ts"],"names":["extractTransactions","updates","flatMap","update","Transaction","value","HASH_PURPOSE_PUBLIC_KEY_FINGERPRINT","MULTIHASH_SHA256_PREFIX","Uint8Array","computeCantonFingerprint","uncompressedPublicKey","publicKeyDer","SECP256K1_SPKI_DER_HEADER","length","set","purposePrefix","DataView","buffer","setUint32","hash","createHash","digest","result","bytesToHex"],"mappings":";;;;;AAWO,SAASA,oBAAoBC,OAAAA,EAAuB;AACvD,EAAA,OAAOA,OAAAA,CAAQC,OAAAA,CAAQ,CAACC,MAAAA,KAAY,iBAAiBA,MAAAA,GAAS;AAACA,IAAAA,MAAAA,CAAOC,WAAAA,CAAYC;AAAS,GAAA,GAAA,EAAE,CAAA;AACjG;AAFgBL,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAIhB,IAAMM,mCAAAA,GAAsC,EAAA;AAC5C,IAAMC,uBAAAA,GAA0B,IAAIC,UAAAA,CAAW;AAAC,EAAA,EAAA;AAAM,EAAA;AAAK,CAAA,CAAA;AAMpD,SAASC,yBAAyBC,qBAAAA,EAAiC;AACtE,EAAA,MAAMC,eAAe,IAAIH,UAAAA,CACrBI,yBAAAA,CAA0BC,MAAAA,GAASH,sBAAsBG,MAAM,CAAA;AAEnEF,EAAAA,YAAAA,CAAaG,IAAIF,yBAAAA,CAAAA;AACjBD,EAAAA,YAAAA,CAAaG,GAAAA,CAAIJ,qBAAAA,EAAuBE,yBAAAA,CAA0BC,MAAM,CAAA;AAExE,EAAA,MAAME,aAAAA,GAAgB,IAAIP,UAAAA,CAAW,CAAA,CAAA;AACrC,EAAA,IAAIQ,SAASD,aAAAA,CAAcE,MAAM,CAAA,CAAEC,SAAAA,CAAU,GAAGZ,mCAAAA,CAAAA;AAEhD,EAAA,MAAMa,IAAAA,GAAOC,UAAAA,CAAW,QAAA,CAAA,CAAUjB,MAAAA,CAAOY,aAAAA,CAAAA,CAAeZ,MAAAA,CAAOQ,YAAAA,CAAAA,CAAcU,MAAAA,EAAM;AAEnF,EAAA,MAAMC,SAAS,IAAId,UAAAA,CAAWD,uBAAAA,CAAwBM,MAAAA,GAASM,KAAKN,MAAM,CAAA;AAC1ES,EAAAA,MAAAA,CAAOR,IAAIP,uBAAAA,CAAAA;AACXe,EAAAA,MAAAA,CAAOR,GAAAA,CAAIK,IAAAA,EAAMZ,uBAAAA,CAAwBM,MAAM,CAAA;AAE/C,EAAA,OAAOU,WAAWD,MAAAA,CAAAA;AACtB;AAjBgBb,MAAAA,CAAAA,wBAAAA,EAAAA,0BAAAA,CAAAA","file":"F42TZTWJ.js","sourcesContent":["import { createHash } from 'node:crypto';\n\nimport { bytesToHex } from '@layerzerolabs/common-encoding-utils';\n\nimport { SECP256K1_SPKI_DER_HEADER } from '../crypto';\nimport type { CantonTransaction, CantonUpdate } from './interface';\n\n/**\n * Extract transactions from Canton updates.\n * Filters out checkpoints, reassignments, and topology transactions.\n */\nexport function extractTransactions(updates: CantonUpdate[]): CantonTransaction[] {\n    return updates.flatMap((update) => ('Transaction' in update ? [update.Transaction.value] : []));\n}\n\nconst HASH_PURPOSE_PUBLIC_KEY_FINGERPRINT = 12;\nconst MULTIHASH_SHA256_PREFIX = new Uint8Array([0x12, 0x20]);\n\n/**\n * Computes the Canton fingerprint for an uncompressed secp256k1 public key.\n * DER-encodes the key, then computes hex(SHA-256 multihash of purpose=12 || publicKeyDer).\n */\nexport function computeCantonFingerprint(uncompressedPublicKey: Uint8Array): string {\n    const publicKeyDer = new Uint8Array(\n        SECP256K1_SPKI_DER_HEADER.length + uncompressedPublicKey.length,\n    );\n    publicKeyDer.set(SECP256K1_SPKI_DER_HEADER);\n    publicKeyDer.set(uncompressedPublicKey, SECP256K1_SPKI_DER_HEADER.length);\n\n    const purposePrefix = new Uint8Array(4);\n    new DataView(purposePrefix.buffer).setUint32(0, HASH_PURPOSE_PUBLIC_KEY_FINGERPRINT);\n\n    const hash = createHash('sha256').update(purposePrefix).update(publicKeyDer).digest();\n\n    const result = new Uint8Array(MULTIHASH_SHA256_PREFIX.length + hash.length);\n    result.set(MULTIHASH_SHA256_PREFIX);\n    result.set(hash, MULTIHASH_SHA256_PREFIX.length);\n\n    return bytesToHex(result);\n}\n"]}

package/dist/PQI7CWCR.js

@@ -1,19 +0,0 @@
-import { __name } from './VUOMXK5T.js';
-import { z } from 'zod';
-
-var IntLikeSchema = z.union([
-  z.bigint(),
-  z.number()
-]).refine((value) => typeof value === "bigint" || Number.isSafeInteger(value), {
-  message: "number must be a safe integer; pass a bigint for values beyond MAX_SAFE_INTEGER"
-});
-var buildTemplateId = /* @__PURE__ */ __name((packageId, modulePath) => `${packageId}:${modulePath}`, "buildTemplateId");
-var CommandStatus = {
-  Accepted: "accepted",
-  Rejected: "rejected",
-  Timeout: "timeout"
-};
-
-export { CommandStatus, IntLikeSchema, buildTemplateId };
-//# sourceMappingURL=PQI7CWCR.js.map
-//# sourceMappingURL=PQI7CWCR.js.map

package/dist/PQI7CWCR.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/types.ts"],"names":["IntLikeSchema","z","union","bigint","number","refine","value","Number","isSafeInteger","message","buildTemplateId","packageId","modulePath","CommandStatus","Accepted","Rejected","Timeout"],"mappings":";;;AAQO,IAAMA,aAAAA,GAAgBC,EACxBC,KAAAA,CAAM;AAACD,EAAAA,CAAAA,CAAEE,MAAAA,EAAM;AAAIF,EAAAA,CAAAA,CAAEG,MAAAA;CAAS,CAAA,CAC9BC,MAAAA,CAAO,CAACC,KAAAA,KAAU,OAAOA,UAAU,QAAA,IAAYC,MAAAA,CAAOC,aAAAA,CAAcF,KAAAA,CAAAA,EAAQ;EACzEG,OAAAA,EAAS;AACb,CAAA;AAcG,IAAMC,eAAAA,2BAAmBC,SAAAA,EAAmBC,UAAAA,KAC/C,GAAGD,SAAAA,CAAAA,CAAAA,EAAaC,UAAAA,CAAAA,CAAAA,EADW,iBAAA;AAyBxB,IAAMC,aAAAA,GAAgB;EACzBC,QAAAA,EAAU,UAAA;EACVC,QAAAA,EAAU,UAAA;EACVC,OAAAA,EAAS;AACb","file":"PQI7CWCR.js","sourcesContent":["import type { ContractId, Party } from '@daml/types';\nimport { z } from 'zod';\n\n/**\n * A 64-bit integer field (oneSigId / nonce / threshold / count / signed `Int`).\n * A `number` must be a safe integer — larger values have already lost precision as\n * a float, so a bigint is required (mirrors the {@link toBigInt} runtime guard).\n */\nexport const IntLikeSchema = z\n    .union([z.bigint(), z.number()])\n    .refine((value) => typeof value === 'bigint' || Number.isSafeInteger(value), {\n        message: 'number must be a safe integer; pass a bigint for values beyond MAX_SAFE_INTEGER',\n    });\nexport type IntLike = z.infer<typeof IntLikeSchema>;\n\n/**\n * Core Types\n */\nexport type TemplateId = string;\n\n/**\n * Build a Canton template ID from a package ID and module path.\n *\n * @example buildTemplateId('abc123', 'RequestFactory:RequestFactory')\n * // => 'abc123:RequestFactory:RequestFactory'\n */\nexport const buildTemplateId = (packageId: string, modulePath: string): TemplateId =>\n    `${packageId}:${modulePath}`;\n\nexport type Contract<T extends object> = {\n    templateId: TemplateId;\n    contractId: ContractId<T>;\n    payload: T;\n};\n\n/**\n * Submission Types\n */\nexport type SubmitActors = {\n    actAs: Party[];\n    readAs?: Party[];\n};\n\nexport type SubmitResult = {\n    commandId: string;\n    completionOffset: number;\n};\n\n/**\n * Wait / Reconciliation Types\n */\nexport const CommandStatus = {\n    Accepted: 'accepted',\n    Rejected: 'rejected',\n    Timeout: 'timeout',\n} as const;\n\nexport type CommandStatus = (typeof CommandStatus)[keyof typeof CommandStatus];\n\nexport type WaitAccepted = {\n    status: typeof CommandStatus.Accepted;\n    commandId: string;\n    updateId: string;\n    offset: number;\n};\nexport type WaitRejected = {\n    status: typeof CommandStatus.Rejected;\n    commandId: string;\n    offset: number;\n    error: { code?: number; message: string; details?: unknown };\n};\ntype WaitTimeout = {\n    status: typeof CommandStatus.Timeout;\n    commandId: string;\n    lastCheckedOffset?: number;\n};\n\nexport type WaitResult = WaitAccepted | WaitRejected | WaitTimeout;\n\nexport type WaitOptions = {\n    parties: Party[];\n    beginExclusive?: number;\n    timeoutMs?: number;\n    poll?: {\n        limit?: number;\n        streamIdleTimeoutMs?: number;\n        backoffMs?: { initial: number; max: number };\n    };\n};\n\n/**\n * External Party / Interactive Submission Types\n */\n\n/**\n * A prepared transaction ready for external signing.\n */\nexport type PreparedTransaction = {\n    /** The transaction blob to sign */\n    preparedTransaction: string;\n    /** Hash of the transaction (sign this) */\n    preparedTransactionHash: string;\n    /** Hashing scheme version used */\n    hashingSchemeVersion: 'HASHING_SCHEME_VERSION_UNSPECIFIED' | 'HASHING_SCHEME_VERSION_V2';\n    /** Command ID for tracking */\n    commandId: string;\n};\n\nexport type ExternalSignature = {\n    /** The party that signed */\n    party: Party;\n    /** The signature bytes (base64 or hex) */\n    signature: string;\n    /** Fingerprint/ID of the signing key */\n    signedBy: string;\n    /** Signature format (e.g., 'Raw') */\n    format: string;\n    /** Signing algorithm (e.g., 'Ed25519') */\n    signingAlgorithmSpec: string;\n};\n\n/**\n * A right granted to a Canton user, as returned by `/v2/users/{userId}/rights`.\n *\n * The `kind` is a discriminated union — only one variant is set per right:\n *  - `CanActAs.value.party`: user can submit transactions as that party\n *  - `CanReadAs.value.party`: user can read events visible to that party\n *  - `ParticipantAdmin`: user has admin rights on the participant\n *  - `IdentityProviderAdmin`: user can administer its identity provider\n *  - `CanReadAsAnyParty`: user can read as any party\n *  - `CanExecuteAsAnyParty`: user can submit as any party\n *\n * Hand-rolled because the OpenAPI generator's `Kind` converter is broken\n * (`instanceOfKindOneOf` checks lowercase `canActAs`, but `KindOneOfFromJSON`\n * reads uppercase `CanActAs`), so the typed client strips all party data.\n *\n * The four nullary variants carry `value: unknown` because Canton's wire\n * format for them is literally `{ \"value\": {} }` (see\n * https://docs.digitalasset.com/build/3.4/explanations/json-api/) and we\n * never read into that payload — only the presence of the variant matters.\n */\nexport type UserRightKind = {\n    CanActAs?: { value: { party: string } };\n    CanReadAs?: { value: { party: string } };\n    ParticipantAdmin?: { value: unknown };\n    IdentityProviderAdmin?: { value: unknown };\n    CanReadAsAnyParty?: { value: unknown };\n    CanExecuteAsAnyParty?: { value: unknown };\n};\n\nexport type UserRight = {\n    kind: UserRightKind;\n};\n\n/** Normalized active contract (flat shape derived from JsActiveContract). */\nexport type NormalizedActiveContract = {\n    contractId: string;\n    templateId: string;\n    payload: unknown;\n    synchronizerId: string;\n};\n"]}

package/dist/WHTAP4A3.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/transaction.ts"],"names":["cantonCommandSchema","z","union","object","createCommand","templateId","string","createArguments","any","exerciseCommand","contractId","choice","choiceArgument","createAndExerciseCommand","exerciseByKeyCommand","contractKey","cantonDisclosedContractSchema","optional","createdEventBlob","synchronizerId","cantonTransactionSchema","transactionSchema","extend","populatedTransaction","unresolvedCommands","array","unresolvedDisclosedContracts","actAs","partyToSenderEntity","record","deploymentSpec","packageName","ownerField","identityKeys","cantonTransactionWithResultSchema","buildTransactionWithResultSchema","cantonInflightTransactionSchema","preparedTransaction","preparedTransactionHash","hashingSchemeVersion","enum","commandId","completionOffset","number","cantonAssignedTransactionSchema","assignedTransactionSchema","shape","inflightTransaction","cantonSignedTransactionSchema","signedTransactionSchema","commands","disclosedContracts","signedTransaction","signatures","party","format","signature","signedBy","signingAlgorithmSpec","cantonMinedTransactionSchema","minedTransactionSchema","buildCantonTransaction","chainName","tx","timestamps","created","Date","now"],"mappings":";;;;AAaO,IAAMA,mBAAAA,GAAsBC,EAAEC,KAAAA,CAAM;AACvCD,EAAAA,CAAAA,CAAEE,MAAAA,CAAO;AACLC,IAAAA,aAAAA,EAAeH,EAAEE,MAAAA,CAAO;AACpBE,MAAAA,UAAAA,EAAYJ,EAAEK,MAAAA,EAAM;AACpBC,MAAAA,eAAAA,EAAiBN,EAAEO,GAAAA;KACvB;GACJ,CAAA;AACAP,EAAAA,CAAAA,CAAEE,MAAAA,CAAO;AACLM,IAAAA,eAAAA,EAAiBR,EAAEE,MAAAA,CAAO;AACtBE,MAAAA,UAAAA,EAAYJ,EAAEK,MAAAA,EAAM;AACpBI,MAAAA,UAAAA,EAAYT,EAAEK,MAAAA,EAAM;AACpBK,MAAAA,MAAAA,EAAQV,EAAEK,MAAAA,EAAM;AAChBM,MAAAA,cAAAA,EAAgBX,EAAEO,GAAAA;KACtB;GACJ,CAAA;AACAP,EAAAA,CAAAA,CAAEE,MAAAA,CAAO;AACLU,IAAAA,wBAAAA,EAA0BZ,EAAEE,MAAAA,CAAO;AAC/BE,MAAAA,UAAAA,EAAYJ,EAAEK,MAAAA,EAAM;AACpBC,MAAAA,eAAAA,EAAiBN,EAAEO,GAAAA,EAAG;AACtBG,MAAAA,MAAAA,EAAQV,EAAEK,MAAAA,EAAM;AAChBM,MAAAA,cAAAA,EAAgBX,EAAEO,GAAAA;KACtB;GACJ,CAAA;AACAP,EAAAA,CAAAA,CAAEE,MAAAA,CAAO;AACLW,IAAAA,oBAAAA,EAAsBb,EAAEE,MAAAA,CAAO;AAC3BE,MAAAA,UAAAA,EAAYJ,EAAEK,MAAAA,EAAM;AACpBS,MAAAA,WAAAA,EAAad,EAAEO,GAAAA,EAAG;AAClBG,MAAAA,MAAAA,EAAQV,EAAEK,MAAAA,EAAM;AAChBM,MAAAA,cAAAA,EAAgBX,EAAEO,GAAAA;KACtB;GACJ;AACH,CAAA;AAEM,IAAMQ,6BAAAA,GAAgCf,EAAEE,MAAAA,CAAO;EAClDE,UAAAA,EAAYJ,CAAAA,CAAEK,MAAAA,EAAM,CAAGW,QAAAA,EAAQ;AAC/BP,EAAAA,UAAAA,EAAYT,EAAEK,MAAAA,EAAM;AACpBY,EAAAA,gBAAAA,EAAkBjB,EAAEK,MAAAA,EAAM;AAC1Ba,EAAAA,cAAAA,EAAgBlB,EAAEK,MAAAA;AACtB,CAAA;AAOO,IAAMc,uBAAAA,GAA0BC,kBAAkBC,MAAAA,CAAO;AAC5DC,EAAAA,oBAAAA,EAAsBtB,EAAEE,MAAAA,CAAO;IAC3BqB,kBAAAA,EAAoBvB,CAAAA,CAAEwB,MAAMzB,mBAAAA,CAAAA;IAC5B0B,4BAAAA,EAA8BzB,CAAAA,CAAEwB,MAAMT,6BAAAA,CAAAA;;AAGtCW,IAAAA,KAAAA,EAAO1B,CAAAA,CAAEwB,KAAAA,CAAMxB,CAAAA,CAAEK,MAAAA,EAAM,CAAA;;;;;;AAMvBsB,IAAAA,mBAAAA,EAAqB3B,CAAAA,CAAE4B,MAAAA,CAAO5B,CAAAA,CAAEK,MAAAA,EAAM,EAAIL,CAAAA,CAAEwB,KAAAA,CAAMxB,CAAAA,CAAEK,MAAAA,EAAM,CAAA,CAAA,CAAKW,QAAAA,EAAQ;;AAEvEa,IAAAA,cAAAA,EAAgB7B,EACXE,MAAAA,CAAO;AACJ4B,MAAAA,WAAAA,EAAa9B,EAAEK,MAAAA,EAAM;AACrB0B,MAAAA,UAAAA,EAAY/B,EAAEK,MAAAA,EAAM;AACpB2B,MAAAA,YAAAA,EAAchC,CAAAA,CAAEwB,KAAAA,CAAMxB,CAAAA,CAAEK,MAAAA,EAAM;AAClC,KAAA,EACCW,QAAAA;GACT;AACJ,CAAA;AAEO,IAAMiB,iCAAAA,GACTC,iCAAiCf,uBAAAA;AAErC,IAAMgB,+BAAAA,GAAkCnC,EAAEE,MAAAA,CAAO;;AAE7CkC,EAAAA,mBAAAA,EAAqBpC,EAAEK,MAAAA,EAAM;;AAE7BgC,EAAAA,uBAAAA,EAAyBrC,EAAEK,MAAAA,EAAM;;AAEjCiC,EAAAA,oBAAAA,EAAsBtC,EAAEuC,IAAAA,CAAK;AACzB,IAAA,oCAAA;AACA,IAAA;AACH,GAAA,CAAA;;AAEDC,EAAAA,SAAAA,EAAWxC,EAAEK,MAAAA,EAAM;;;;EAInBoC,gBAAAA,EAAkBzC,CAAAA,CAAE0C,MAAAA,EAAM,CAAG1B,QAAAA;AACjC,CAAA,CAAA;AAKO,IAAM2B,+BAAAA,GAAkCC,0BAA0BvB,MAAAA,CAAO;AAC5E,EAAA,GAAGF,uBAAAA,CAAwB0B,KAAAA;AAC3BC,EAAAA,mBAAAA,EAAqBX,gCAAgCnB,QAAAA;AACzD,CAAA;AAKO,IAAM+B,6BAAAA,GAAgCC,wBAAwB3B,MAAAA,CAAO;AACxE,EAAA,GAAGsB,+BAAAA,CAAgCE,KAAAA;;EAEnCI,QAAAA,EAAUjD,CAAAA,CAAEwB,MAAMzB,mBAAAA,CAAAA;EAClBmD,kBAAAA,EAAoBlD,CAAAA,CAAEwB,MAAMT,6BAAAA,CAAAA;AAC5BoC,EAAAA,iBAAAA,EAAmBnD,EAAEE,MAAAA,CAAO;;IAExBkD,UAAAA,EAAYpD,CAAAA,CAAEwB,KAAAA,CACVxB,CAAAA,CAAEE,MAAAA,CAAO;AACLmD,MAAAA,KAAAA,EAAOrD,EAAEK,MAAAA,EAAM;MACf+C,UAAAA,EAAYpD,CAAAA,CAAEwB,KAAAA,CACVxB,CAAAA,CAAEE,MAAAA,CAAO;AACLoD,QAAAA,MAAAA,EAAQtD,EAAEK,MAAAA,EAAM;AAChBkD,QAAAA,SAAAA,EAAWvD,EAAEK,MAAAA,EAAM;AACnBmD,QAAAA,QAAAA,EAAUxD,EAAEK,MAAAA,EAAM;AAClBoD,QAAAA,oBAAAA,EAAsBzD,EAAEK,MAAAA;AAC5B,OAAA,CAAA;AAER,KAAA,CAAA;GAER;AACJ,CAAA;AAKO,IAAMqD,4BAAAA,GAA+BC,uBAAuBtC,MAAAA,CAAO;AACtE,EAAA,GAAG0B,6BAAAA,CAA8BF,KAAAA;EACjCC,mBAAAA,EAAqBX;AACzB,CAAA;AAsBO,IAAMyB,sBAAAA,mBAAyB,MAAA,CAAA,OAClCC,SAAAA,EACAC,EAAAA,KAAAA;AAEA,EAAA,OAAO;IACH,GAAGA,EAAAA;AACHD,IAAAA,SAAAA;IACAE,UAAAA,EAAY;AACRC,MAAAA,OAAAA,EAASF,EAAAA,CAAGC,UAAAA,EAAYC,OAAAA,IAAWC,IAAAA,CAAKC,GAAAA;AAC5C;AACJ,GAAA;AACJ,CAAA,EAXsC,wBAAA","file":"WHTAP4A3.js","sourcesContent":["import { z } from 'zod';\n\nimport {\n    assignedTransactionSchema,\n    buildTransactionWithResultSchema,\n    minedTransactionSchema,\n    signedTransactionSchema,\n    transactionSchema,\n} from '@layerzerolabs/common-chain-model';\nimport type { PartialBy } from '@layerzerolabs/typescript-utils';\n\n// === Component schemas ===\n\nexport const cantonCommandSchema = z.union([\n    z.object({\n        createCommand: z.object({\n            templateId: z.string(),\n            createArguments: z.any(),\n        }),\n    }),\n    z.object({\n        exerciseCommand: z.object({\n            templateId: z.string(),\n            contractId: z.string(),\n            choice: z.string(),\n            choiceArgument: z.any(),\n        }),\n    }),\n    z.object({\n        createAndExerciseCommand: z.object({\n            templateId: z.string(),\n            createArguments: z.any(),\n            choice: z.string(),\n            choiceArgument: z.any(),\n        }),\n    }),\n    z.object({\n        exerciseByKeyCommand: z.object({\n            templateId: z.string(),\n            contractKey: z.any(),\n            choice: z.string(),\n            choiceArgument: z.any(),\n        }),\n    }),\n]);\n\nexport const cantonDisclosedContractSchema = z.object({\n    templateId: z.string().optional(),\n    contractId: z.string(),\n    createdEventBlob: z.string(),\n    synchronizerId: z.string(),\n});\n\n// === Lifecycle schemas ===\n\n/**\n * Canton transaction schema for Daml Ledger API commands.\n */\nexport const cantonTransactionSchema = transactionSchema.extend({\n    populatedTransaction: z.object({\n        unresolvedCommands: z.array(cantonCommandSchema),\n        unresolvedDisclosedContracts: z.array(cantonDisclosedContractSchema),\n\n        /** Parties submitting the command (actAs) */\n        actAs: z.array(z.string()),\n        /** Maps each actAs party → the senderEntityName(s) controlling its signing\n         *  key(s), always as an array. `.optional()` only so deferred-sender create-time\n         *  payloads parse; by sign time every actAs party must map, or signing throws.\n         *  Multiple entries = a multisig party (decentralized namespace) whose keys must\n         *  all sign. */\n        partyToSenderEntity: z.record(z.string(), z.array(z.string())).optional(),\n        /** Deployment spec set at prepare time; the deployment activity resolves the live address ref from this + the createCommand. */\n        deploymentSpec: z\n            .object({\n                packageName: z.string(),\n                ownerField: z.string(),\n                identityKeys: z.array(z.string()),\n            })\n            .optional(),\n    }),\n});\n\nexport const cantonTransactionWithResultSchema =\n    buildTransactionWithResultSchema(cantonTransactionSchema);\n\nconst cantonInflightTransactionSchema = z.object({\n    /** The prepared transaction blob */\n    preparedTransaction: z.string(),\n    /** Hash of the prepared transaction (what was signed) */\n    preparedTransactionHash: z.string(),\n    /** Hashing scheme version used */\n    hashingSchemeVersion: z.enum([\n        'HASHING_SCHEME_VERSION_UNSPECIFIED',\n        'HASHING_SCHEME_VERSION_V2',\n    ]),\n    /** Command ID for tracking */\n    commandId: z.string(),\n    // Ledger offset at which the submission landed — used as `beginExclusive`\n    // for waitForCommand to avoid polling from the start of the ledger.\n    //  Optional: only present after send(); absent for old/retry scenarios.\n    completionOffset: z.number().optional(),\n});\n\n/**\n * Assigned transaction includes the inflight transaction data.\n */\nexport const cantonAssignedTransactionSchema = assignedTransactionSchema.extend({\n    ...cantonTransactionSchema.shape,\n    inflightTransaction: cantonInflightTransactionSchema.optional(),\n});\n\n/**\n * Signed transaction includes the DER-encoded ECDSA signature.\n */\nexport const cantonSignedTransactionSchema = signedTransactionSchema.extend({\n    ...cantonAssignedTransactionSchema.shape,\n    // Resolved commands and contracts\n    commands: z.array(cantonCommandSchema),\n    disclosedContracts: z.array(cantonDisclosedContractSchema),\n    signedTransaction: z.object({\n        /** Per-party signatures in the format expected by Canton's submitSigned */\n        signatures: z.array(\n            z.object({\n                party: z.string(),\n                signatures: z.array(\n                    z.object({\n                        format: z.string(),\n                        signature: z.string(),\n                        signedBy: z.string(),\n                        signingAlgorithmSpec: z.string(),\n                    }),\n                ),\n            }),\n        ),\n    }),\n});\n\n/**\n * Mined transaction with confirmation result.\n */\nexport const cantonMinedTransactionSchema = minedTransactionSchema.extend({\n    ...cantonSignedTransactionSchema.shape,\n    inflightTransaction: cantonInflightTransactionSchema,\n});\n\n/** Identifies a contract by data so its live cid can be re-resolved at sign time. */\nexport interface ContractDataIdentifier {\n    cid: string;\n    templateId: string;\n    party: string;\n    contractStateFilter?: Record<string, unknown>;\n}\n\nexport type CantonTx = z.infer<typeof cantonTransactionSchema>;\nexport type CantonPopulatedTransaction = CantonTx['populatedTransaction'];\nexport type CantonCommands = z.infer<typeof cantonCommandSchema>[];\nexport type CantonDisclosedContracts = z.infer<typeof cantonDisclosedContractSchema>[];\nexport type CantonAssignedTx = z.infer<typeof cantonAssignedTransactionSchema>;\nexport type CantonSignedTx = z.infer<typeof cantonSignedTransactionSchema>;\nexport type CantonMinedTx = z.infer<typeof cantonMinedTransactionSchema>;\n\n// === Builder ===\n\nexport type BuildCantonTransactionInput = PartialBy<CantonTx, 'chainName' | 'timestamps'>;\n\nexport const buildCantonTransaction = async (\n    chainName: string,\n    tx: BuildCantonTransactionInput,\n): Promise<CantonTx> => {\n    return {\n        ...tx,\n        chainName,\n        timestamps: {\n            created: tx.timestamps?.created ?? Date.now(),\n        },\n    };\n};\n"]}

package/dist/XE6H2SH4.js

@@ -1,3 +0,0 @@
-
-//# sourceMappingURL=XE6H2SH4.js.map
-//# sourceMappingURL=XE6H2SH4.js.map

package/dist/XE6H2SH4.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"XE6H2SH4.js"}

package/dist/YHW7AKHX.js

@@ -1,62 +0,0 @@
-import { __name } from './VUOMXK5T.js';
-import { TopologyManagerReadServiceClient, ListDecentralizedNamespaceDefinitionRequest, BaseQuery, Empty, StoreId } from '@canton-network/core-ledger-proto';
-import { ChannelCredentials } from '@grpc/grpc-js';
-import { GrpcTransport } from '@protobuf-ts/grpc-transport';
-
-function buildChannelCredentials(tls) {
-  if (!tls) return ChannelCredentials.createInsecure();
-  return ChannelCredentials.createSsl(tls.rootCert, tls.clientKey, tls.clientCert);
-}
-__name(buildChannelCredentials, "buildChannelCredentials");
-var CantonGrpcClient = class {
-  static {
-    __name(this, "CantonGrpcClient");
-  }
-  #transport;
-  #topologyRead;
-  #tokenProvider;
-  constructor(opts) {
-    this.#transport = new GrpcTransport({
-      host: opts.host,
-      channelCredentials: buildChannelCredentials(opts.tls)
-    });
-    this.#topologyRead = new TopologyManagerReadServiceClient(this.#transport);
-    this.#tokenProvider = opts.tokenProvider;
-  }
-  async #getMeta() {
-    if (!this.#tokenProvider) return {};
-    const token = await this.#tokenProvider.getToken();
-    return {
-      Authorization: `Bearer ${token}`
-    };
-  }
-  async getLatestDecentralizedNamespaceDefinition(synchronizerId, namespaceFingerprint) {
-    const { response } = await this.#topologyRead.listDecentralizedNamespaceDefinition(ListDecentralizedNamespaceDefinitionRequest.create({
-      baseQuery: BaseQuery.create({
-        store: StoreId.create({
-          store: {
-            oneofKind: "synchronizer",
-            synchronizer: {
-              id: synchronizerId
-            }
-          }
-        }),
-        timeQuery: {
-          oneofKind: "headState",
-          headState: Empty.create({})
-        }
-      }),
-      filterNamespace: namespaceFingerprint
-    }), {
-      meta: await this.#getMeta()
-    });
-    return response.results[0]?.item;
-  }
-  close() {
-    this.#transport.close();
-  }
-};
-
-export { CantonGrpcClient };
-//# sourceMappingURL=YHW7AKHX.js.map
-//# sourceMappingURL=YHW7AKHX.js.map

package/dist/YHW7AKHX.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/client/grpc.ts"],"names":["buildChannelCredentials","tls","ChannelCredentials","createInsecure","createSsl","rootCert","clientKey","clientCert","CantonGrpcClient","opts","GrpcTransport","host","channelCredentials","TopologyManagerReadServiceClient","tokenProvider","token","getToken","Authorization","getLatestDecentralizedNamespaceDefinition","synchronizerId","namespaceFingerprint","response","listDecentralizedNamespaceDefinition","ListDecentralizedNamespaceDefinitionRequest","create","baseQuery","BaseQuery","store","StoreId","oneofKind","synchronizer","id","timeQuery","headState","Empty","filterNamespace","meta","results","item","close"],"mappings":";;;;;AAyBA,SAASA,wBAAwBC,GAAAA,EAAgB;AAC7C,EAAA,IAAI,CAACA,GAAAA,EAAK,OAAOC,kBAAAA,CAAmBC,cAAAA,EAAc;AAClD,EAAA,OAAOD,mBAAmBE,SAAAA,CAAUH,GAAAA,CAAII,UAAUJ,GAAAA,CAAIK,SAAAA,EAAWL,IAAIM,UAAU,CAAA;AACnF;AAHSP,MAAAA,CAAAA,uBAAAA,EAAAA,yBAAAA,CAAAA;AAcF,IAAMQ,mBAAN,MAAMA;EAvCb;;;AAwCa,EAAA,UAAA;AACA,EAAA,aAAA;AACA,EAAA,cAAA;AAET,EAAA,WAAA,CAAYC,IAAAA,EAA+B;AACvC,IAAA,IAAA,CAAK,UAAA,GAAa,IAAIC,aAAAA,CAAc;AAChCC,MAAAA,IAAAA,EAAMF,IAAAA,CAAKE,IAAAA;MACXC,kBAAAA,EAAoBZ,uBAAAA,CAAwBS,KAAKR,GAAG;KACxD,CAAA;AACA,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAIY,gCAAAA,CAAiC,IAAA,CAAK,UAAU,CAAA;AACzE,IAAA,IAAA,CAAK,iBAAiBJ,IAAAA,CAAKK,aAAAA;AAC/B,EAAA;AAEA,EAAA,MAAM,QAAA,GAAQ;AACV,IAAA,IAAI,CAAC,IAAA,CAAK,cAAA,EAAgB,OAAO,EAAC;AAClC,IAAA,MAAMC,KAAAA,GAAQ,MAAM,IAAA,CAAK,cAAA,CAAeC,QAAAA,EAAQ;AAChD,IAAA,OAAO;AAAEC,MAAAA,aAAAA,EAAe,UAAUF,KAAAA,CAAAA;AAAQ,KAAA;AAC9C,EAAA;EAEA,MAAMG,yCAAAA,CACFC,gBACAC,oBAAAA,EACqD;AACrD,IAAA,MAAM,EAAEC,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAcC,oCAAAA,CAC1CC,4CAA4CC,MAAAA,CAAO;AAC/CC,MAAAA,SAAAA,EAAWC,UAAUF,MAAAA,CAAO;AACxBG,QAAAA,KAAAA,EAAOC,QAAQJ,MAAAA,CAAO;UAClBG,KAAAA,EAAO;YAAEE,SAAAA,EAAW,cAAA;YAAgBC,YAAAA,EAAc;cAAEC,EAAAA,EAAIZ;AAAe;AAAE;SAC7E,CAAA;QACAa,SAAAA,EAAW;UAAEH,SAAAA,EAAW,WAAA;UAAaI,SAAAA,EAAWC,KAAAA,CAAMV,MAAAA,CAAO,EAAC;AAAG;OACrE,CAAA;MACAW,eAAAA,EAAiBf;AACrB,KAAA,CAAA,EACA;MAAEgB,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAElC,IAAA,OAAOf,QAAAA,CAASgB,OAAAA,CAAQ,CAAA,CAAA,EAAIC,IAAAA;AAChC,EAAA;EAEAC,KAAAA,GAAc;AACV,IAAA,IAAA,CAAK,WAAWA,KAAAA,EAAK;AACzB,EAAA;AACJ","file":"YHW7AKHX.js","sourcesContent":["import {\n    BaseQuery,\n    type DecentralizedNamespaceDefinition,\n    Empty,\n    ListDecentralizedNamespaceDefinitionRequest,\n    StoreId,\n    TopologyManagerReadServiceClient,\n} from '@canton-network/core-ledger-proto';\nimport { ChannelCredentials } from '@grpc/grpc-js';\nimport { GrpcTransport } from '@protobuf-ts/grpc-transport';\n\nimport type { TokenProvider } from '../auth/token-provider';\n\nexport type TlsOptions = {\n    rootCert?: Buffer;\n    clientKey?: Buffer;\n    clientCert?: Buffer;\n};\n\nexport type CantonGrpcClientOptions = {\n    host: string;\n    tokenProvider?: TokenProvider;\n    tls?: TlsOptions;\n};\n\nfunction buildChannelCredentials(tls?: TlsOptions): ChannelCredentials {\n    if (!tls) return ChannelCredentials.createInsecure();\n    return ChannelCredentials.createSsl(tls.rootCert, tls.clientKey, tls.clientCert);\n}\n\n/**\n * gRPC client for the Canton Admin API.\n *\n * Wraps the Topology Manager Read Service for querying topology state\n * (decentralized namespace definitions, etc.) via the participant's admin endpoint.\n *\n * If a {@link TokenProvider} is supplied, a fresh Bearer token is acquired\n * before each RPC call via per-call metadata.\n */\nexport class CantonGrpcClient {\n    readonly #transport: GrpcTransport;\n    readonly #topologyRead: TopologyManagerReadServiceClient;\n    readonly #tokenProvider?: TokenProvider;\n\n    constructor(opts: CantonGrpcClientOptions) {\n        this.#transport = new GrpcTransport({\n            host: opts.host,\n            channelCredentials: buildChannelCredentials(opts.tls),\n        });\n        this.#topologyRead = new TopologyManagerReadServiceClient(this.#transport);\n        this.#tokenProvider = opts.tokenProvider;\n    }\n\n    async #getMeta(): Promise<Record<string, string>> {\n        if (!this.#tokenProvider) return {};\n        const token = await this.#tokenProvider.getToken();\n        return { Authorization: `Bearer ${token}` };\n    }\n\n    async getLatestDecentralizedNamespaceDefinition(\n        synchronizerId: string,\n        namespaceFingerprint: string,\n    ): Promise<DecentralizedNamespaceDefinition | undefined> {\n        const { response } = await this.#topologyRead.listDecentralizedNamespaceDefinition(\n            ListDecentralizedNamespaceDefinitionRequest.create({\n                baseQuery: BaseQuery.create({\n                    store: StoreId.create({\n                        store: { oneofKind: 'synchronizer', synchronizer: { id: synchronizerId } },\n                    }),\n                    timeQuery: { oneofKind: 'headState', headState: Empty.create({}) },\n                }),\n                filterNamespace: namespaceFingerprint,\n            }),\n            { meta: await this.#getMeta() },\n        );\n        return response.results[0]?.item;\n    }\n\n    close(): void {\n        this.#transport.close();\n    }\n}\n"]}