@layerzerolabs/common-canton 1.2.30 → 1.2.31

package/dist/provider.js

@@ -1,8 +1,13 @@
-export { createCantonChainProvider, parseCantonChainUri } from './KYBLHMHO.js';
-import './WAKNWPCR.js';
-import './MNIG6M5P.js';
+export { createCantonChainProvider, parseCantonChainUri } from './ZPDAMGTS.js';
+import './HKUMVSX6.js';
+import './IA2UQ4WQ.js';
+import './RVQWP4JU.js';
+import './VJ4PVZYL.js';
+import './QAKOQQ7E.js';
+import './WLV6EHDB.js';
+import './DSYVONFP.js';
+import './TZTIULG5.js';
 import './6CPYXAOF.js';
-import './F6OBDGNC.js';
 import './Q3CWBD5A.js';
 import './DUQWP47Z.js';
 import './3YMFQHQ2.js';
@@ -12,11 +17,11 @@ import './5KFMHJZB.js';
 import './76PPVRJ6.js';
 import './6K3YSZCK.js';
 import './Y7ND62EN.js';
+import './F6OBDGNC.js';
 import './UQMKPY2S.js';
 import './FB6G6OD4.js';
 import './PGQCNYFD.js';
-import './7ZK6FSHF.js';
-import './BFNNJFWC.js';
+import './OUEL7K27.js';
 import './FCOOEGLV.js';
 import './V6WKCZKX.js';
 import './KSW67SU5.js';
@@ -25,6 +30,7 @@ import './UZEQR4K7.js';
 import './JOKWDCVQ.js';
 import './ZGWBZC76.js';
 import './BLWJ63ZZ.js';
+import './OIFJOKIO.js';
 import './JH2I4JGJ.js';
 import './FEAZ4ULP.js';
 import './SZLSOCSR.js';
@@ -34,7 +40,6 @@ import './T6UKLW2J.js';
 import './4GB3DPXG.js';
 import './UYKPXKW5.js';
 import './X4YPYKWZ.js';
-import './KKCWYT6E.js';
 import './S7OPYTA6.js';
 import './KFPAEUU7.js';
 import './VXAIGTYV.js';
@@ -44,70 +49,65 @@ import './TKTYXEED.js';
 import './QKX6RB6N.js';
 import './5PL2GRP6.js';
 import './DNH3CRBL.js';
-import './25GBI5E7.js';
-import './3T46OKQU.js';
+import './H3BWRDYY.js';
+import './KKCWYT6E.js';
+import './AVC5GQFU.js';
 import './D3AV6J7R.js';
 import './KCRFOKIB.js';
 import './LYW3PRU5.js';
-import './WUXBJ4EJ.js';
 import './2UWZKS5E.js';
 import './53STMMNU.js';
-import './QZJONP6W.js';
-import './7STDATVZ.js';
+import './JUZKQC2G.js';
 import './34I4OGQK.js';
 import './MXJ2SKCA.js';
 import './6GAFSKMN.js';
 import './6GU7J47E.js';
-import './BAIUJA2D.js';
-import './WRKQRG6I.js';
+import './22ZNNS3H.js';
+import './FZGCL63V.js';
+import './A2ZXPTGE.js';
+import './2633VCK5.js';
+import './DDAINXFD.js';
+import './H5WF7YON.js';
+import './A3YRP3CP.js';
+import './PDIG5OUV.js';
+import './CDHOTGTN.js';
+import './MOQL7EDE.js';
+import './K3RKYYAJ.js';
+import './WQJNYC3S.js';
+import './N2H3JQGZ.js';
+import './WUXXJWII.js';
+import './NRGCZ4DG.js';
 import './YMURVGWI.js';
-import './GSEDMLUC.js';
-import './OQVZLKQ5.js';
+import './NJW7UX2A.js';
+import './GHWJBJNB.js';
 import './5RZS7DZN.js';
-import './DJ67CXMJ.js';
+import './SNDN7G42.js';
 import './5N747JZQ.js';
-import './TDLALQCM.js';
+import './R5PCNLRD.js';
 import './DDITSIMP.js';
-import './UV3W5HVQ.js';
-import './W5H6OVFB.js';
-import './4FW6H35F.js';
-import './YUSKGBOM.js';
+import './KIQAFHKC.js';
+import './OWXOYIMA.js';
+import './OO73Z5K6.js';
 import './ELKKWJ73.js';
 import './SSIXD5B2.js';
 import './MS6MVDLI.js';
-import './C7EKAFQT.js';
-import './FB4MMBJU.js';
+import './YUSKGBOM.js';
 import './WE3VOYW4.js';
 import './BITUOW7N.js';
 import './L4NQUCEZ.js';
 import './5235KHHW.js';
-import './NVDYBSHG.js';
-import './3RGRZQQT.js';
-import './H5WF7YON.js';
-import './2633VCK5.js';
-import './EWDK2D2A.js';
-import './A3YRP3CP.js';
-import './IIQYRITU.js';
-import './CDHOTGTN.js';
-import './MOQL7EDE.js';
-import './K3RKYYAJ.js';
-import './WQJNYC3S.js';
-import './N2H3JQGZ.js';
-import './WXYN3MFC.js';
-import './KVXEYMWG.js';
-import './GJNXH4RV.js';
+import './C7EKAFQT.js';
+import './FB4MMBJU.js';
+import './CYZU3DTJ.js';
+import './QNO3456Y.js';
 import './T7UHDP5T.js';
 import './2UG7UYH5.js';
-import './XINHRIWA.js';
-import './TJBQSG4B.js';
-import './25GBF3LO.js';
-import './6BRQJODF.js';
-import './DB3ADDKC.js';
-import './DCWJXAUI.js';
-import './VJINT4U6.js';
-import './OPRFXRK5.js';
+import './GJNXH4RV.js';
 import './LXIBC5QC.js';
-import './CLAE73FR.js';
+import './OZZHAISY.js';
+import './MZMRFQTR.js';
+import './JKQLMXRN.js';
+import './KCFOSGPU.js';
 import './LQ3LPE4G.js';
 import './LJWTM73C.js';
 import './A7U4VVQK.js';
@@ -117,17 +117,21 @@ import './BWCLX6XE.js';
 import './HTXBXFKR.js';
 import './PVD6NHYE.js';
 import './JJLCFUQT.js';
-import './MZMRFQTR.js';
-import './JKQLMXRN.js';
-import './NIN7X4D3.js';
 import './IROQTIJZ.js';
-import './GBFMX33M.js';
 import './2QISQFNQ.js';
 import './3R25GDYP.js';
 import './T4AL4FJH.js';
 import './RV24CYI3.js';
-import './VQXHCSJ4.js';
-import './4AM6UVPL.js';
+import './XINHRIWA.js';
+import './TJBQSG4B.js';
+import './25GBF3LO.js';
+import './6BRQJODF.js';
+import './DB3ADDKC.js';
+import './DCWJXAUI.js';
+import './VJINT4U6.js';
+import './OPRFXRK5.js';
+import './NIN7X4D3.js';
+import './GBFMX33M.js';
 import './W53LLP7R.js';
 import './YN7J2UOM.js';
 import './25GNLJIH.js';
@@ -135,11 +139,10 @@ import './TL2NURGK.js';
 import './CLFKYN43.js';
 import './RPOQ54PG.js';
 import './OH7SHQF6.js';
-import './VVR6BIVE.js';
 import './WLJJ4FDL.js';
-import './MCD2CFLV.js';
-import './IOW2523G.js';
-import './FXR2Z54G.js';
+import './4PEF77PU.js';
+import './BHESIRKK.js';
+import './VQXHCSJ4.js';
 import './KOUK7GBL.js';
 import './HZG6J4V4.js';
 import './RY2LC7P3.js';
@@ -150,6 +153,8 @@ import './G4FJL7ZV.js';
 import './WJFNYWLV.js';
 import './D5KKWJ4T.js';
 import './UUJVV37M.js';
+import './4AM6UVPL.js';
+import './VVR6BIVE.js';
 import './I2M5WSEM.js';
 import './QDOJTBN4.js';
 import './BXDXCO3L.js';
@@ -159,35 +164,35 @@ import './SF7H2DPL.js';
 import './4UM5TVKI.js';
 import './OMKZNVQ6.js';
 import './PBBQTZR5.js';
+import './KJRFPBY4.js';
 import './R6RFWKWB.js';
-import './DAP5XJGH.js';
+import './NX67V54F.js';
 import './65PSGOOO.js';
 import './57DRTFD5.js';
-import './JDRCVB2P.js';
 import './2CWG6G2U.js';
+import './JDRCVB2P.js';
 import './42XERBT4.js';
 import './KLGD7ZKC.js';
 import './FSI4ML2J.js';
 import './LX4D3IC6.js';
-import './JRFMLEIC.js';
 import './37DZS34C.js';
 import './CXFHE5WB.js';
+import './4XJYWTSD.js';
+import './UKPTMFE5.js';
+import './JRFMLEIC.js';
 import './NXFOIDBZ.js';
 import './YYZ6GHBF.js';
 import './WEB5TZQE.js';
 import './6HBTMZ2U.js';
-import './4XJYWTSD.js';
-import './UKPTMFE5.js';
 import './JQKAQ6XO.js';
 import './6DNDE3V5.js';
 import './VEDIQN4O.js';
 import './5C4DHFKJ.js';
-import './AMLJTQWB.js';
-import './AONQHJ67.js';
+import './N3INXXRG.js';
 import './223ZGSPH.js';
 import './W3V3QO3M.js';
 import './5KFH4GBA.js';
-import './ZDVQJMLH.js';
+import './AONQHJ67.js';
 import './6L7QPUXX.js';
 import './2I2KZ57G.js';
 import './4ABHRM2Z.js';
@@ -195,27 +200,25 @@ import './REC34FNU.js';
 import './YAMAXOF4.js';
 import './E3S4Q7BW.js';
 import './OVI22V4D.js';
-import './X74MS4NY.js';
-import './T2TBHOJW.js';
 import './V6YYBQQ7.js';
 import './VMMOYWRH.js';
 import './M4ENXXGH.js';
 import './I42TYLNY.js';
 import './Z2PCDUTA.js';
 import './VZY2QLIH.js';
+import './X74MS4NY.js';
+import './T2TBHOJW.js';
 import './FBZYVJHN.js';
 import './7QB5CK2R.js';
 import './N4ZM4N2T.js';
-import './6CDYG5J4.js';
 import './YO6M5EI2.js';
 import './4FVB5LZE.js';
 import './JNFIJ7LA.js';
 import './YJ63OODS.js';
 import './TGNRKR6H.js';
-import './VJP6DRFT.js';
-import './RJHKVYCL.js';
-import './Q4H5IB4B.js';
-import './RT5FBW5C.js';
+import './QJMVWOLL.js';
+import './3ESWXEO3.js';
+import './RHNMCG3C.js';
 import './AHL4CCNO.js';
 import './KHRPAP5A.js';
 import './2F66XH7X.js';
@@ -224,19 +227,25 @@ import './UFRAGOR4.js';
 import './ZGT2WRBJ.js';
 import './CWZMBPM3.js';
 import './YQIQBEDK.js';
+import './RT5FBW5C.js';
 import './FKJBUIAF.js';
+import './ZDVQJMLH.js';
 import './5ZZP4T75.js';
 import './JVRWQ36T.js';
 import './O6E7FCNL.js';
 import './K7VI5TVN.js';
 import './TIKYUQ7Z.js';
+import './ZLGKSCEZ.js';
+import './OV57R5W2.js';
+import './24YQIQ26.js';
+import './AADTV7OJ.js';
+import './6CDYG5J4.js';
 import './WH4AALW7.js';
 import './CXV5NOWI.js';
 import './P4OZVLZ5.js';
 import './Z74KDZ47.js';
 import './4XVTGYYU.js';
 import './B5NXLJBP.js';
-import './57SJMVEE.js';
 import './XHRPB5KB.js';
 import './TQODWV5P.js';
 import './GEKUWBT6.js';
@@ -244,17 +253,8 @@ import './2Y3QRNON.js';
 import './KIXMSGXW.js';
 import './PXLKEN6Q.js';
 import './QMG5HIWM.js';
-import './ZLGKSCEZ.js';
-import './OV57R5W2.js';
-import './24YQIQ26.js';
-import './AADTV7OJ.js';
+import './57SJMVEE.js';
 import './BMVKXYRP.js';
-import './UO7AO4TN.js';
-import './JVSF5ESX.js';
-import './TRKFVDLS.js';
-import './AXDSPLHG.js';
-import './WSW75GTU.js';
-import './O6CDI3U6.js';
 import './QNJSSXUH.js';
 import './S3CSDPDX.js';
 import './IXH2E5MF.js';
@@ -270,9 +270,12 @@ import './EIJI6ZMQ.js';
 import './H5NCYXPN.js';
 import './BZIM4HLD.js';
 import './X6CZGKDI.js';
-import './TVDUWBAO.js';
-import './Q7CJWR7Y.js';
-import './V6427LHF.js';
+import './UO7AO4TN.js';
+import './JVSF5ESX.js';
+import './TRKFVDLS.js';
+import './AXDSPLHG.js';
+import './WSW75GTU.js';
+import './O6CDI3U6.js';
 import './3PWAEVJM.js';
 import './FBGPMEXZ.js';
 import './AJ4M7JFK.js';
@@ -283,14 +286,10 @@ import './TSE2DUDN.js';
 import './EE2Y3CQ3.js';
 import './5NV4O3K7.js';
 import './XOLOXB7M.js';
+import './TVDUWBAO.js';
+import './Q7CJWR7Y.js';
+import './V6427LHF.js';
 import './KBNUN3MF.js';
-import './DSYVONFP.js';
-import './I7FWUGTT.js';
-import './RVQWP4JU.js';
-import './VJ4PVZYL.js';
-import './QAKOQQ7E.js';
-import './MIPVIR2V.js';
-import './WLV6EHDB.js';
 import './V2H2WXKE.js';
 import './SCEF7TLZ.js';
 import './CMDFOA7C.js';

package/dist/refresh/index.js

@@ -1,9 +1,9 @@
 import '../AQJMQQ4W.js';
 export { buildCantonDeployedContractAddressRef, qualifiedTemplateName } from '../I6Z5XG3N.js';
-export { resolveCantonTransaction } from '../FFZGONTK.js';
+export { resolveCantonTransaction } from '../ZZCNITRN.js';
+export { createContractAddressResolver, isConcreteActiveContractRef, isRefAlive, matchesContractStateFilter, queryLiveContractIdsForRef, queryLiveContractsForRef } from '../VAFLUPQJ.js';
 export { wrapLzSdk } from '../RJSKBZMO.js';
 export { substituteCidsToRefs, substituteRefsToCids } from '../57KDDFEU.js';
-export { createContractAddressResolver, isConcreteActiveContractRef, isRefAlive, matchesContractStateFilter, queryLiveContractIdsForRef, queryLiveContractsForRef } from '../VAFLUPQJ.js';
 import '../DSYVONFP.js';
 import '../Z35TKEFU.js';
 import '../3K5JL2TP.js';

package/dist/refresh/resolve.js

@@ -1,6 +1,6 @@
-export { resolveCantonTransaction } from '../FFZGONTK.js';
-import '../57KDDFEU.js';
+export { resolveCantonTransaction } from '../ZZCNITRN.js';
 import '../VAFLUPQJ.js';
+import '../57KDDFEU.js';
 import '../DSYVONFP.js';
 import '../Z35TKEFU.js';
 import '../3K5JL2TP.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@layerzerolabs/common-canton",
-  "version": "1.2.30",
+  "version": "1.2.31",
   "private": false,
   "description": "Canton VM client and utilities",
   "license": "MIT",
@@ -32,22 +32,22 @@
     "@protobuf-ts/runtime-rpc": "^2.11.1",
     "es-toolkit": "^1.39.10",
     "zod": "4.3.5",
-    "@layerzerolabs/common-chain-model": "1.2.30",
-    "@layerzerolabs/common-error-utils": "1.2.30",
-    "@layerzerolabs/common-encoding-utils": "1.2.30",
-    "@layerzerolabs/typescript-utils": "1.2.30"
+    "@layerzerolabs/common-encoding-utils": "1.2.31",
+    "@layerzerolabs/common-error-utils": "1.2.31",
+    "@layerzerolabs/common-chain-model": "1.2.31",
+    "@layerzerolabs/typescript-utils": "1.2.31"
   },
   "devDependencies": {
-    "@vitest/coverage-v8": "3.2.6",
+    "@vitest/coverage-v8": "4.1.10",
     "eslint": "9.39.1",
     "tsup": "^8.4.0",
     "typescript": "^6.0.3",
-    "vitest": "^3.2.6",
-    "@layerzerolabs/eslint-configuration": "^1.2.30",
-    "@layerzerolabs/typescript-configuration": "1.2.30",
-    "@layerzerolabs/vitest-configuration": "1.2.30",
-    "@layerzerolabs/vm-tooling-canton": "1.2.30",
-    "@layerzerolabs/tsup-configuration": "1.2.30"
+    "vitest": "^4.1.10",
+    "@layerzerolabs/eslint-configuration": "^1.2.31",
+    "@layerzerolabs/tsup-configuration": "1.2.31",
+    "@layerzerolabs/typescript-configuration": "1.2.31",
+    "@layerzerolabs/vitest-configuration": "1.2.31",
+    "@layerzerolabs/vm-tooling-canton": "1.2.31"
   },
   "publishConfig": {
     "access": "public",

package/src/client/grpc.ts

@@ -42,7 +42,6 @@ import {
     headStateBaseQuery,
     synchronizerStore,
 } from './topology/utils';
-import { UserManagementServiceClient } from './user-management';
 import { computePublicKeyFingerprint } from './utils';
 
 /** Default gRPC client options: 128 MiB message-size limits for large admin responses. */
@@ -65,9 +64,7 @@ export class CantonGrpcClient {
     readonly #topologyRead: TopologyManagerReadServiceClient;
     readonly #topologyWrite: TopologyManagerWriteServiceClient;
     readonly #connectivity: SynchronizerConnectivityServiceClient;
-    readonly #userManagement: UserManagementServiceClient;
     readonly #tokenProvider: TokenProvider;
-    readonly #userId: string;
     #synchronizerId?: string;
 
     /**
@@ -75,7 +72,6 @@ export class CantonGrpcClient {
      */
     constructor(opts: CantonGrpcClientOptions) {
         this.#tokenProvider = opts.tokenProvider;
-        this.#userId = opts.userId;
         this.#synchronizerId = opts.synchronizerId;
         this.#transport = new GrpcTransport({
             host: opts.host,
@@ -85,7 +81,6 @@ export class CantonGrpcClient {
         this.#topologyRead = new TopologyManagerReadServiceClient(this.#transport);
         this.#topologyWrite = new TopologyManagerWriteServiceClient(this.#transport);
         this.#connectivity = new SynchronizerConnectivityServiceClient(this.#transport);
-        this.#userManagement = new UserManagementServiceClient(this.#transport);
     }
 
     /** Returns per-RPC gRPC metadata with a fresh Bearer token. */
@@ -437,17 +432,6 @@ export class CantonGrpcClient {
         );
     }
 
-    async grantCanActAs(partyId: string): Promise<void> {
-        await this.#userManagement.grantUserRights(
-            {
-                userId: this.#userId,
-                rights: [{ canActAs: { party: partyId } }],
-                identityProviderId: '',
-            },
-            { meta: await this.#getMeta() },
-        );
-    }
-
     /** Closes the underlying gRPC transport. */
     close(): void {
         this.#transport.close();

package/src/client/topology/types.ts

@@ -120,8 +120,6 @@ export type CantonGrpcClientOptions = {
     host: string;
     /** Supplies a fresh Bearer token before each RPC call. */
     tokenProvider: TokenProvider;
-    /** Ledger API user ID used for user-management RPCs (e.g. `GrantUserRights`). */
-    userId: string;
     /**
      * Logical synchronizer id used as the topology store. When omitted, the first
      * synchronizer the participant is connected to (via `ListConnectedSynchronizers`)

package/src/provider.ts

@@ -163,7 +163,6 @@ export function createCantonChainProvider({
     const grpcClient = new CantonGrpcClient({
         host: params.adminApiHost,
         tokenProvider,
-        userId: params.userId,
     });
 
     return {

package/dist/I7FWUGTT.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/client/grpc.ts"],"names":["DEFAULT_GRPC_CLIENT_OPTIONS","CantonGrpcClient","opts","tokenProvider","userId","synchronizerId","GrpcTransport","host","channelCredentials","buildChannelCredentials","tls","clientOptions","grpcClientOptions","TopologyManagerReadServiceClient","TopologyManagerWriteServiceClient","SynchronizerConnectivityServiceClient","UserManagementServiceClient","token","getToken","Authorization","response","listConnectedSynchronizers","meta","synchronizer","connectedSynchronizers","CantonProtocolError","mapping","serial","generateTransactions","GenerateTransactionsRequest","create","proposals","GenerateTransactionsRequest_Proposal","operation","Enums_TopologyChangeOp","ADD_REPLACE","store","synchronizerStore","generated","generatedTransactions","getNamespaceDelegation","namespaceFingerprint","listNamespaceDelegation","ListNamespaceDelegationRequest","baseQuery","headStateBaseQuery","filterNamespace","filterTargetKeyFingerprint","results","flatMap","result","item","publicKey","targetKey","namespace","targetKeyFingerprint","computePublicKeyFingerprint","isRootDelegation","context","getDecentralizedNamespaceDefinition","listDecentralizedNamespaceDefinition","ListDecentralizedNamespaceDefinitionRequest","decentralizedNamespace","threshold","owners","getPartyToKeyMapping","partyId","listPartyToKeyMapping","ListPartyToKeyMappingRequest","filterParty","party","signingKeyFingerprints","signingKeys","map","key","getPartyToParticipantMapping","listPartyToParticipant","ListPartyToParticipantRequest","filterParticipant","participants","participant","participantUid","permission","createNamespaceDelegationTx","params","buildNamespaceDelegationMapping","publicKeyDer","createDecentralizedNamespaceDefinitionTx","computeDecentralizedNamespace","buildDecentralizedNamespaceDefinitionMapping","updateDecentralizedNamespaceDefinitionTx","createPartyToKeyTx","buildPartyToKeyMapping","signingPublicKeyDers","createPartyToParticipantTx","buildPartyToParticipantMapping","participantIds","submitTopologyTransactions","transactions","length","CantonError","addTransactions","AddTransactionsRequest","grantCanActAs","grantUserRights","rights","canActAs","identityProviderId","close"],"mappings":";;;;;;;;;;AAgDA,IAAMA,2BAAAA,GAA8B;AAChC,EAAA,iCAAA,EAAmC,MAAM,IAAA,GAAO,IAAA;AAChD,EAAA,8BAAA,EAAgC,MAAM,IAAA,GAAO;AACjD,CAAA;AAWO,IAAMC,mBAAN,MAAMA;EA9Db;;;AA+Da,EAAA,UAAA;AACA,EAAA,aAAA;AACA,EAAA,cAAA;AACA,EAAA,aAAA;AACA,EAAA,eAAA;AACA,EAAA,cAAA;AACA,EAAA,OAAA;AACT,EAAA,eAAA;;;;AAKA,EAAA,WAAA,CAAYC,IAAAA,EAA+B;AACvC,IAAA,IAAA,CAAK,iBAAiBA,IAAAA,CAAKC,aAAAA;AAC3B,IAAA,IAAA,CAAK,UAAUD,IAAAA,CAAKE,MAAAA;AACpB,IAAA,IAAA,CAAK,kBAAkBF,IAAAA,CAAKG,cAAAA;AAC5B,IAAA,IAAA,CAAK,UAAA,GAAa,IAAIC,aAAAA,CAAc;AAChCC,MAAAA,IAAAA,EAAML,IAAAA,CAAKK,IAAAA;AACXC,MAAAA,kBAAAA,EAAoBC,uBAAAA,CAAwBP,IAAAA,CAAKK,IAAAA,EAAML,IAAAA,CAAKQ,GAAG,CAAA;AAC/DC,MAAAA,aAAAA,EAAeT,KAAKU,iBAAAA,IAAqBZ;KAC7C,CAAA;AACA,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAIa,gCAAAA,CAAiC,IAAA,CAAK,UAAU,CAAA;AACzE,IAAA,IAAA,CAAK,cAAA,GAAiB,IAAIC,iCAAAA,CAAkC,IAAA,CAAK,UAAU,CAAA;AAC3E,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAIC,qCAAAA,CAAsC,IAAA,CAAK,UAAU,CAAA;AAC9E,IAAA,IAAA,CAAK,eAAA,GAAkB,IAAIC,2BAAAA,CAA4B,IAAA,CAAK,UAAU,CAAA;AAC1E,EAAA;;AAGA,EAAA,MAAM,QAAA,GAAQ;AACV,IAAA,MAAMC,KAAAA,GAAQ,MAAM,IAAA,CAAK,cAAA,CAAeC,QAAAA,EAAQ;AAChD,IAAA,OAAO;AAAEC,MAAAA,aAAAA,EAAe,UAAUF,KAAAA,CAAAA;AAAQ,KAAA;AAC9C,EAAA;;;;;;AAOA,EAAA,MAAM,kBAAA,GAAkB;AACpB,IAAA,IAAI,KAAK,eAAA,EAAiB;AACtB,MAAA,OAAO,IAAA,CAAK,eAAA;AAChB,IAAA;AACA,IAAA,IAAA,CAAK,eAAA,GAAkB,MAAM,IAAA,CAAK,uBAAA,EAAuB;AACzD,IAAA,OAAO,IAAA,CAAK,eAAA;AAChB,EAAA;;;;;;AAOA,EAAA,MAAM,uBAAA,GAAuB;AACzB,IAAA,MAAM,EAAEG,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAcC,0BAAAA,CAC1C,EAAC,EACD;MAAEC,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAElC,IAAA,KAAA,MAAWC,YAAAA,IAAgBH,SAASI,sBAAAA,EAAwB;AACxD,MAAA,IAAID,aAAalB,cAAAA,EAAgB;AAC7B,QAAA,OAAOkB,YAAAA,CAAalB,cAAAA;AACxB,MAAA;AACJ,IAAA;AACA,IAAA,MAAM,IAAIoB,oBAAoB,kDAAA,CAAA;AAClC,EAAA;;;;;;;;;;EAWA,MAAM,4BAAA,CACFpB,cAAAA,EACAqB,OAAAA,EACAC,MAAAA,EAAc;AAEd,IAAA,MAAM,EAAEP,UAAQ,GAAK,MAAM,KAAK,cAAA,CAAeQ,oBAAAA,CAC3CC,4BAA4BC,MAAAA,CAAO;MAC/BC,SAAAA,EAAW;AACPC,QAAAA,oCAAAA,CAAqCF,MAAAA,CAAO;AACxCG,UAAAA,SAAAA,EAAWC,sBAAAA,CAAuBC,WAAAA;AAClCR,UAAAA,MAAAA;AACAD,UAAAA,OAAAA;AACAU,UAAAA,KAAAA,EAAOC,kBAAkBhC,cAAAA;SAC7B;;AAER,KAAA,CAAA,EACA;MAAEiB,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,MAAMgB,SAAAA,GAAYlB,QAAAA,CAASmB,qBAAAA,CAAsB,CAAA,CAAA;AACjD,IAAA,IAAI,CAACD,SAAAA,EAAW;AACZ,MAAA,MAAM,IAAIb,oBAAoB,uDAAA,CAAA;AAClC,IAAA;AACA,IAAA,OAAOa,SAAAA;AACX,EAAA;;;;;;;;;;AAWA,EAAA,MAAME,uBACFC,oBAAAA,EACmC;AACnC,IAAA,MAAMpC,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,EAAEe,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAcsB,uBAAAA,CAC1CC,+BAA+Bb,MAAAA,CAAO;AAClCc,MAAAA,SAAAA,EAAWC,mBAAmBxC,cAAAA,CAAAA;MAC9ByC,eAAAA,EAAiBL,oBAAAA;;MAEjBM,0BAAAA,EAA4B;AAChC,KAAA,CAAA,EACA;MAAEzB,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,OAAOF,QAAAA,CAAS4B,OAAAA,CAAQC,OAAAA,CAAQ,CAACC,MAAAA,KAAAA;AAC7B,MAAA,MAAMC,OAAOD,MAAAA,CAAOC,IAAAA;AACpB,MAAA,MAAMC,SAAAA,GAAYD,MAAME,SAAAA,EAAWD,SAAAA;AACnC,MAAA,IAAI,CAACD,IAAAA,IAAQ,CAACC,SAAAA,EAAW;AACrB,QAAA,OAAO,EAAA;AACX,MAAA;AACA,MAAA,OAAO;AACH,QAAA;AACIE,UAAAA,SAAAA,EAAWH,IAAAA,CAAKG,SAAAA;AAChBC,UAAAA,oBAAAA,EAAsBC,4BAA4BJ,SAAAA,CAAAA;AAClDK,UAAAA,gBAAAA,EAAkBN,IAAAA,CAAKM,gBAAAA;UACvB9B,MAAAA,EAAQuB,MAAAA,CAAOQ,SAAS/B,MAAAA,IAAU;AACtC;;IAER,CAAA,CAAA;AACJ,EAAA;;;;;;;;;;AAWA,EAAA,MAAMgC,oCACFlB,oBAAAA,EACgD;AAChD,IAAA,MAAMpC,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,EAAEe,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAcwC,oCAAAA,CAC1CC,4CAA4C/B,MAAAA,CAAO;AAC/Cc,MAAAA,SAAAA,EAAWC,mBAAmBxC,cAAAA,CAAAA;MAC9ByC,eAAAA,EAAiBL;AACrB,KAAA,CAAA,EACA;MAAEnB,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,OAAOF,QAAAA,CAAS4B,OAAAA,CAAQC,OAAAA,CAAQ,CAACC,MAAAA,KAAAA;AAC7B,MAAA,MAAMC,OAAOD,MAAAA,CAAOC,IAAAA;AACpB,MAAA,IAAI,CAACA,IAAAA,EAAM;AACP,QAAA,OAAO,EAAA;AACX,MAAA;AACA,MAAA,OAAO;AACH,QAAA;AACIG,UAAAA,SAAAA,EAAWH,IAAAA,CAAKW,sBAAAA;AAChBC,UAAAA,SAAAA,EAAWZ,IAAAA,CAAKY,SAAAA;UAChBC,MAAAA,EAAQ;eAAIb,IAAAA,CAAKa;;UACjBrC,MAAAA,EAAQuB,MAAAA,CAAOQ,SAAS/B,MAAAA,IAAU;AACtC;;IAER,CAAA,CAAA;AACJ,EAAA;;;;;;;;;AAUA,EAAA,MAAMsC,qBAAqBC,OAAAA,EAAoD;AAC3E,IAAA,MAAM7D,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,EAAEe,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAc+C,qBAAAA,CAC1CC,6BAA6BtC,MAAAA,CAAO;AAChCc,MAAAA,SAAAA,EAAWC,mBAAmBxC,cAAAA,CAAAA;MAC9BgE,WAAAA,EAAaH;AACjB,KAAA,CAAA,EACA;MAAE5C,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,OAAOF,QAAAA,CAAS4B,OAAAA,CAAQC,OAAAA,CAAQ,CAACC,MAAAA,KAAAA;AAC7B,MAAA,MAAMC,OAAOD,MAAAA,CAAOC,IAAAA;AACpB,MAAA,IAAI,CAACA,IAAAA,EAAM;AACP,QAAA,OAAO,EAAA;AACX,MAAA;AACA,MAAA,OAAO;AACH,QAAA;AACImB,UAAAA,KAAAA,EAAOnB,IAAAA,CAAKmB,KAAAA;AACZP,UAAAA,SAAAA,EAAWZ,IAAAA,CAAKY,SAAAA;UAChBQ,sBAAAA,EAAwBpB,IAAAA,CAAKqB,YAAYC,GAAAA,CAAI,CAACC,QAC1ClB,2BAAAA,CAA4BkB,GAAAA,CAAItB,SAAS,CAAA,CAAA;UAE7CzB,MAAAA,EAAQuB,MAAAA,CAAOQ,SAAS/B,MAAAA,IAAU;AACtC;;IAER,CAAA,CAAA;AACJ,EAAA;;;;;;;;;;EAWA,MAAMgD,4BAAAA,CACFT,OAAAA,EACAnC,SAAAA,GAAY,KAAA,EAC6B;AACzC,IAAA,MAAM1B,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,EAAEe,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAcwD,sBAAAA,CAC1CC,8BAA8B/C,MAAAA,CAAO;MACjCc,SAAAA,EAAWC,kBAAAA,CAAmBxC,gBAAgB0B,SAAAA,CAAAA;MAC9CsC,WAAAA,EAAaH,OAAAA;;MAEbY,iBAAAA,EAAmB;AACvB,KAAA,CAAA,EACA;MAAExD,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,OAAOF,QAAAA,CAAS4B,OAAAA,CAAQC,OAAAA,CAAQ,CAACC,MAAAA,KAAAA;AAC7B,MAAA,MAAMC,OAAOD,MAAAA,CAAOC,IAAAA;AACpB,MAAA,IAAI,CAACA,IAAAA,EAAM;AACP,QAAA,OAAO,EAAA;AACX,MAAA;AACA,MAAA,OAAO;AACH,QAAA;AACImB,UAAAA,KAAAA,EAAOnB,IAAAA,CAAKmB,KAAAA;AACZP,UAAAA,SAAAA,EAAWZ,IAAAA,CAAKY,SAAAA;AAChBgB,UAAAA,YAAAA,EAAc5B,IAAAA,CAAK4B,YAAAA,CAAaN,GAAAA,CAAI,CAACO,WAAAA,MAAiB;AAClDC,YAAAA,cAAAA,EAAgBD,WAAAA,CAAYC,cAAAA;AAC5BC,YAAAA,UAAAA,EAAYF,WAAAA,CAAYE;WAC5B,CAAA,CAAA;UACAvD,MAAAA,EAAQuB,MAAAA,CAAOQ,SAAS/B,MAAAA,IAAU;AACtC;;IAER,CAAA,CAAA;AACJ,EAAA;;;;;;;;;;AAWA,EAAA,MAAMwD,4BACFC,MAAAA,EACqC;AACrC,IAAA,MAAM/E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMqB,OAAAA,GAAU2D,+BAAAA,CAAgCD,MAAAA,CAAOE,YAAY,CAAA;AACnE,IAAA,OAAO,KAAK,4BAAA,CAA6BjF,cAAAA,EAAgBqB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;;;;;;;;;;AAWA,EAAA,MAAM4D,yCACFH,MAAAA,EACqC;AACrC,IAAA,MAAM/E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMyD,sBAAAA,GAAyB0B,6BAAAA,CAA8BJ,MAAAA,CAAOpB,MAAM,CAAA;AAC1E,IAAA,MAAMtC,UAAU+D,4CAAAA,CACZ3B,sBAAAA,EACAsB,MAAAA,CAAOrB,SAAAA,EACPqB,OAAOpB,MAAM,CAAA;AAEjB,IAAA,OAAO,KAAK,4BAAA,CAA6B3D,cAAAA,EAAgBqB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;AAEA,EAAA,MAAM+D,yCACFN,MAAAA,EACqC;AACrC,IAAA,MAAM/E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMqB,UAAU+D,4CAAAA,CACZL,MAAAA,CAAO9B,WACP8B,MAAAA,CAAOrB,SAAAA,EACPqB,OAAOpB,MAAM,CAAA;AAEjB,IAAA,OAAO,KAAK,4BAAA,CAA6B3D,cAAAA,EAAgBqB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;;;;;;;;;AAUA,EAAA,MAAMgE,mBACFP,MAAAA,EACqC;AACrC,IAAA,MAAM/E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMqB,UAAUkE,sBAAAA,CACZR,MAAAA,CAAOlB,SACPkB,MAAAA,CAAOS,oBAAAA,EACPT,OAAOrB,SAAS,CAAA;AAEpB,IAAA,OAAO,KAAK,4BAAA,CAA6B1D,cAAAA,EAAgBqB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;;;;;;;;;;AAWA,EAAA,MAAMmE,2BACFV,MAAAA,EACqC;AACrC,IAAA,MAAM/E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMqB,UAAUqE,8BAAAA,CACZX,MAAAA,CAAOlB,SACPkB,MAAAA,CAAOY,cAAAA,EACPZ,OAAOrB,SAAS,CAAA;AAEpB,IAAA,OAAO,KAAK,4BAAA,CAA6B1D,cAAAA,EAAgBqB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;;;;;;;;;;;;;;AAeA,EAAA,MAAMsE,2BACFC,YAAAA,EACa;AACb,IAAA,IAAIA,YAAAA,CAAaC,WAAW,CAAA,EAAG;AAC3B,MAAA,MAAM,IAAIC,YAAY,mDAAA,CAAA;AAC1B,IAAA;AACA,IAAA,MAAM/F,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,IAAA,CAAK,cAAA,CAAegG,eAAAA,CACtBC,sBAAAA,CAAuBxE,MAAAA,CAAO;MAC1BoE,YAAAA,EAAc;AAAIA,QAAAA,GAAAA;;AAClB9D,MAAAA,KAAAA,EAAOC,kBAAkBhC,cAAAA;AAC7B,KAAA,CAAA,EACA;MAAEiB,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAEtC,EAAA;AAEA,EAAA,MAAMiF,cAAcrC,OAAAA,EAAgC;AAChD,IAAA,MAAM,IAAA,CAAK,gBAAgBsC,eAAAA,CACvB;AACIpG,MAAAA,MAAAA,EAAQ,IAAA,CAAK,OAAA;MACbqG,MAAAA,EAAQ;AAAC,QAAA;UAAEC,QAAAA,EAAU;YAAEpC,KAAAA,EAAOJ;AAAQ;AAAE;;MACxCyC,kBAAAA,EAAoB;KACxB,EACA;MAAErF,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAEtC,EAAA;;EAGAsF,KAAAA,GAAc;AACV,IAAA,IAAA,CAAK,WAAWA,KAAAA,EAAK;AACzB,EAAA;AACJ","file":"I7FWUGTT.js","sourcesContent":["import {\n    AddTransactionsRequest,\n    Enums_TopologyChangeOp,\n    GenerateTransactionsRequest,\n    GenerateTransactionsRequest_Proposal,\n    ListDecentralizedNamespaceDefinitionRequest,\n    ListNamespaceDelegationRequest,\n    ListPartyToKeyMappingRequest,\n    ListPartyToParticipantRequest,\n    type SignedTopologyTransaction,\n    TopologyManagerReadServiceClient,\n    TopologyManagerWriteServiceClient,\n    type TopologyMapping,\n} from '@canton-network/core-ledger-proto';\nimport { GrpcTransport } from '@protobuf-ts/grpc-transport';\n\nimport type { TokenProvider } from '../auth/token-provider';\nimport { CantonError, CantonProtocolError } from '../errors';\nimport {\n    buildDecentralizedNamespaceDefinitionMapping,\n    buildNamespaceDelegationMapping,\n    buildPartyToKeyMapping,\n    buildPartyToParticipantMapping,\n} from './topology/mappings';\nimport { SynchronizerConnectivityServiceClient } from './topology/synchronizer-connectivity';\nimport type {\n    CantonGrpcClientOptions,\n    CreateDecentralizedNamespaceDefinitionTxParams,\n    CreateNamespaceDelegationTxParams,\n    CreatePartyToKeyMappingTxParams,\n    CreatePartyToParticipantMappingTxParams,\n    DecentralizedNamespaceDefinitionState,\n    GeneratedTopologyTransaction,\n    NamespaceDelegationState,\n    PartyToKeyMappingState,\n    PartyToParticipantMappingState,\n    UpdateDecentralizedNamespaceDefinitionTxParams,\n} from './topology/types';\nimport {\n    buildChannelCredentials,\n    computeDecentralizedNamespace,\n    headStateBaseQuery,\n    synchronizerStore,\n} from './topology/utils';\nimport { UserManagementServiceClient } from './user-management';\nimport { computePublicKeyFingerprint } from './utils';\n\n/** Default gRPC client options: 128 MiB message-size limits for large admin responses. */\nconst DEFAULT_GRPC_CLIENT_OPTIONS = {\n    'grpc.max_receive_message_length': 128 * 1024 * 1024,\n    'grpc.max_send_message_length': 128 * 1024 * 1024,\n} as const;\n\n/**\n * gRPC client for the Canton participant admin Topology Manager API.\n *\n * Exposes read queries for topology mappings and write helpers that call\n * `GenerateTransactions` to produce unsigned topology transactions and\n * `AddTransactions` to submit signed ones.\n *\n * A fresh Bearer token is attached to each RPC via {@link TokenProvider}.\n */\nexport class CantonGrpcClient {\n    readonly #transport: GrpcTransport;\n    readonly #topologyRead: TopologyManagerReadServiceClient;\n    readonly #topologyWrite: TopologyManagerWriteServiceClient;\n    readonly #connectivity: SynchronizerConnectivityServiceClient;\n    readonly #userManagement: UserManagementServiceClient;\n    readonly #tokenProvider: TokenProvider;\n    readonly #userId: string;\n    #synchronizerId?: string;\n\n    /**\n     * @param opts - Admin API host, auth, optional synchronizer id, and optional TLS.\n     */\n    constructor(opts: CantonGrpcClientOptions) {\n        this.#tokenProvider = opts.tokenProvider;\n        this.#userId = opts.userId;\n        this.#synchronizerId = opts.synchronizerId;\n        this.#transport = new GrpcTransport({\n            host: opts.host,\n            channelCredentials: buildChannelCredentials(opts.host, opts.tls),\n            clientOptions: opts.grpcClientOptions ?? DEFAULT_GRPC_CLIENT_OPTIONS,\n        });\n        this.#topologyRead = new TopologyManagerReadServiceClient(this.#transport);\n        this.#topologyWrite = new TopologyManagerWriteServiceClient(this.#transport);\n        this.#connectivity = new SynchronizerConnectivityServiceClient(this.#transport);\n        this.#userManagement = new UserManagementServiceClient(this.#transport);\n    }\n\n    /** Returns per-RPC gRPC metadata with a fresh Bearer token. */\n    async #getMeta(): Promise<Record<string, string>> {\n        const token = await this.#tokenProvider.getToken();\n        return { Authorization: `Bearer ${token}` };\n    }\n\n    /**\n     * Returns the client synchronizer id, discovering it on first use when omitted at construction.\n     *\n     * @throws {CantonProtocolError} If the participant exposes no synchronizer store.\n     */\n    async #getSynchronizerId(): Promise<string> {\n        if (this.#synchronizerId) {\n            return this.#synchronizerId;\n        }\n        this.#synchronizerId = await this.#discoverSynchronizerId();\n        return this.#synchronizerId;\n    }\n\n    /**\n     * Resolves the logical id of the first synchronizer the participant is connected to.\n     *\n     * @throws {CantonProtocolError} If the participant is not connected to any synchronizer.\n     */\n    async #discoverSynchronizerId(): Promise<string> {\n        const { response } = await this.#connectivity.listConnectedSynchronizers(\n            {},\n            { meta: await this.#getMeta() },\n        );\n        for (const synchronizer of response.connectedSynchronizers) {\n            if (synchronizer.synchronizerId) {\n                return synchronizer.synchronizerId;\n            }\n        }\n        throw new CantonProtocolError('Participant is not connected to any synchronizer');\n    }\n\n    /**\n     * Calls `GenerateTransactions` for a single ADD_REPLACE mapping.\n     *\n     * @param synchronizerId - Synchronizer store to target.\n     * @param mapping - Topology mapping to encode into the transaction.\n     * @param serial - Topology serial (`0` lets Canton auto-determine).\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     * @throws {CantonProtocolError} If the RPC returns no generated transaction.\n     */\n    async #generateTopologyTransaction(\n        synchronizerId: string,\n        mapping: TopologyMapping,\n        serial: number,\n    ): Promise<GeneratedTopologyTransaction> {\n        const { response } = await this.#topologyWrite.generateTransactions(\n            GenerateTransactionsRequest.create({\n                proposals: [\n                    GenerateTransactionsRequest_Proposal.create({\n                        operation: Enums_TopologyChangeOp.ADD_REPLACE,\n                        serial,\n                        mapping,\n                        store: synchronizerStore(synchronizerId),\n                    }),\n                ],\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        const generated = response.generatedTransactions[0];\n        if (!generated) {\n            throw new CantonProtocolError('GenerateTransactions returned no topology transaction');\n        }\n        return generated;\n    }\n\n    /**\n     * Lists Namespace Delegation (NSD) mappings for a namespace.\n     *\n     * Queries topology head state on the synchronizer. Returns every result from\n     * the list RPC.\n     *\n     * @param namespaceFingerprint - Namespace to filter on (for root NSD, the owner key fingerprint).\n     * @returns All matching NSD mappings, or an empty array if none exist.\n     */\n    async getNamespaceDelegation(\n        namespaceFingerprint: string,\n    ): Promise<NamespaceDelegationState[]> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const { response } = await this.#topologyRead.listNamespaceDelegation(\n            ListNamespaceDelegationRequest.create({\n                baseQuery: headStateBaseQuery(synchronizerId),\n                filterNamespace: namespaceFingerprint,\n                // Empty string = no target-key filter; return all delegations for this namespace.\n                filterTargetKeyFingerprint: '',\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        return response.results.flatMap((result) => {\n            const item = result.item;\n            const publicKey = item?.targetKey?.publicKey;\n            if (!item || !publicKey) {\n                return [];\n            }\n            return [\n                {\n                    namespace: item.namespace,\n                    targetKeyFingerprint: computePublicKeyFingerprint(publicKey),\n                    isRootDelegation: item.isRootDelegation,\n                    serial: result.context?.serial ?? 0,\n                },\n            ];\n        });\n    }\n\n    /**\n     * Lists Decentralized Namespace Definition (DND) mappings for a namespace.\n     *\n     * Queries topology head state on the synchronizer. For a party id `hint::1220…`,\n     * pass the `1220…` suffix as `namespaceFingerprint`.\n     *\n     * @param namespaceFingerprint - Decentralized namespace fingerprint to filter on.\n     * @returns All matching DND mappings, or an empty array if none exist.\n     */\n    async getDecentralizedNamespaceDefinition(\n        namespaceFingerprint: string,\n    ): Promise<DecentralizedNamespaceDefinitionState[]> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const { response } = await this.#topologyRead.listDecentralizedNamespaceDefinition(\n            ListDecentralizedNamespaceDefinitionRequest.create({\n                baseQuery: headStateBaseQuery(synchronizerId),\n                filterNamespace: namespaceFingerprint,\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        return response.results.flatMap((result) => {\n            const item = result.item;\n            if (!item) {\n                return [];\n            }\n            return [\n                {\n                    namespace: item.decentralizedNamespace,\n                    threshold: item.threshold,\n                    owners: [...item.owners],\n                    serial: result.context?.serial ?? 0,\n                },\n            ];\n        });\n    }\n\n    /**\n     * Lists Party-to-Key (PTK) mappings for a party.\n     *\n     * Queries topology head state on the synchronizer.\n     *\n     * @param partyId - Full party identifier (e.g. `hint::1220…`).\n     * @returns All matching PTK mappings, or an empty array if none exist.\n     */\n    async getPartyToKeyMapping(partyId: string): Promise<PartyToKeyMappingState[]> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const { response } = await this.#topologyRead.listPartyToKeyMapping(\n            ListPartyToKeyMappingRequest.create({\n                baseQuery: headStateBaseQuery(synchronizerId),\n                filterParty: partyId,\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        return response.results.flatMap((result) => {\n            const item = result.item;\n            if (!item) {\n                return [];\n            }\n            return [\n                {\n                    party: item.party,\n                    threshold: item.threshold,\n                    signingKeyFingerprints: item.signingKeys.map((key) =>\n                        computePublicKeyFingerprint(key.publicKey),\n                    ),\n                    serial: result.context?.serial ?? 0,\n                },\n            ];\n        });\n    }\n\n    /**\n     * Lists Party-to-Participant (PTP) mappings for a party.\n     *\n     * Queries topology head state on the synchronizer.\n     *\n     * @param partyId - Full party identifier (e.g. `hint::1220…`).\n     * @param proposals - If `true`, query pending proposals instead of authorized mappings.\n     * @returns All matching PTP mappings, or an empty array if none exist.\n     */\n    async getPartyToParticipantMapping(\n        partyId: string,\n        proposals = false,\n    ): Promise<PartyToParticipantMappingState[]> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const { response } = await this.#topologyRead.listPartyToParticipant(\n            ListPartyToParticipantRequest.create({\n                baseQuery: headStateBaseQuery(synchronizerId, proposals),\n                filterParty: partyId,\n                // Empty string = no participant filter; return all hosting mappings for this party.\n                filterParticipant: '',\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        return response.results.flatMap((result) => {\n            const item = result.item;\n            if (!item) {\n                return [];\n            }\n            return [\n                {\n                    party: item.party,\n                    threshold: item.threshold,\n                    participants: item.participants.map((participant) => ({\n                        participantUid: participant.participantUid,\n                        permission: participant.permission,\n                    })),\n                    serial: result.context?.serial ?? 0,\n                },\n            ];\n        });\n    }\n\n    /**\n     * Builds an unsigned Namespace Delegation (NSD) topology transaction.\n     *\n     * Calls `GenerateTransactions` with an ADD_REPLACE mapping. The returned\n     * `transactionHash` must be signed by the namespace key.\n     *\n     * @param params - Owner public key and optional serial.\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     */\n    async createNamespaceDelegationTx(\n        params: CreateNamespaceDelegationTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const mapping = buildNamespaceDelegationMapping(params.publicKeyDer);\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    /**\n     * Builds an unsigned Decentralized Namespace Definition (DND) topology transaction.\n     *\n     * The decentralized namespace id is derived from `params.owners`. All owners\n     * must sign the transaction hash.\n     *\n     * @param params - Owner fingerprints, threshold, and optional serial.\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     */\n    async createDecentralizedNamespaceDefinitionTx(\n        params: CreateDecentralizedNamespaceDefinitionTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const decentralizedNamespace = computeDecentralizedNamespace(params.owners);\n        const mapping = buildDecentralizedNamespaceDefinitionMapping(\n            decentralizedNamespace,\n            params.threshold,\n            params.owners,\n        );\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    async updateDecentralizedNamespaceDefinitionTx(\n        params: UpdateDecentralizedNamespaceDefinitionTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const mapping = buildDecentralizedNamespaceDefinitionMapping(\n            params.namespace,\n            params.threshold,\n            params.owners,\n        );\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    /**\n     * Builds an unsigned Party-to-Key (PTK) topology transaction.\n     *\n     * Decentralized namespace owners must sign the transaction hash.\n     *\n     * @param params - Party id, signing keys, threshold, and optional serial.\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     */\n    async createPartyToKeyTx(\n        params: CreatePartyToKeyMappingTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const mapping = buildPartyToKeyMapping(\n            params.partyId,\n            params.signingPublicKeyDers,\n            params.threshold,\n        );\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    /**\n     * Builds an unsigned Party-to-Participant (PTP) topology transaction.\n     *\n     * Party owners sign the transaction hash. On submit, set `proposal: true` on the\n     * signed transaction so the hosting participant can authorize via `Authorize`.\n     *\n     * @param params - Party id, participant ids, threshold, and optional serial.\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     */\n    async createPartyToParticipantTx(\n        params: CreatePartyToParticipantMappingTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const mapping = buildPartyToParticipantMapping(\n            params.partyId,\n            params.participantIds,\n            params.threshold,\n        );\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    /**\n     * Submits signed topology transactions to the synchronizer store.\n     *\n     * Multiple transactions are submitted atomically in one `AddTransactions` call.\n     * When batching, sign `computeMultiTransactionHash` over all transaction hashes\n     * and attach the same `MultiTransactionSignatures` to each entry.\n     *\n     * Set `proposal: true` on a transaction when the hosting participant must\n     * authorize that mapping afterward.\n     *\n     * @param transactions - One or more signed topology transactions.\n     * @throws {CantonError} If `transactions` is empty.\n     */\n    async submitTopologyTransactions(\n        transactions: readonly SignedTopologyTransaction[],\n    ): Promise<void> {\n        if (transactions.length === 0) {\n            throw new CantonError('AddTransactions requires at least one transaction');\n        }\n        const synchronizerId = await this.#getSynchronizerId();\n        await this.#topologyWrite.addTransactions(\n            AddTransactionsRequest.create({\n                transactions: [...transactions],\n                store: synchronizerStore(synchronizerId),\n            }),\n            { meta: await this.#getMeta() },\n        );\n    }\n\n    async grantCanActAs(partyId: string): Promise<void> {\n        await this.#userManagement.grantUserRights(\n            {\n                userId: this.#userId,\n                rights: [{ canActAs: { party: partyId } }],\n                identityProviderId: '',\n            },\n            { meta: await this.#getMeta() },\n        );\n    }\n\n    /** Closes the underlying gRPC transport. */\n    close(): void {\n        this.#transport.close();\n    }\n}\n"]}

package/dist/KYBLHMHO.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/provider.ts"],"names":["parseCantonChainUri","uri","url","URL","adminApiHost","searchParams","get","Error","userId","actAsParam","actAs","split","map","party","trim","filter","length","walletUrl","tokenUrl","undefined","clientId","clientSecret","process","env","CANTON_CLIENT_SECRET","scope","audience","key","delete","jsonApiUrl","toString","replace","oauth2","createCantonChainProvider","isLocal","params","tokenProvider","createTokenProvider","configuration","Configuration","basePath","accessToken","getToken","client","CantonClient","grpcClient","CantonGrpcClient","host","LocalTokenProvider","admin","ClientCredentialsTokenProvider"],"mappings":";;;;;;;;AA6DO,SAASA,oBAAoBC,GAAAA,EAAW;AAC3C,EAAA,MAAMC,GAAAA,GAAM,IAAIC,GAAAA,CAAIF,GAAAA,CAAAA;AAEpB,EAAA,MAAMG,YAAAA,GAAeF,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA;AAC1C,EAAA,IAAI,CAACF,YAAAA,EAAc;AACf,IAAA,MAAM,IAAIG,MAAM,kEAAA,CAAA;AACpB,EAAA;AAEA,EAAA,MAAMC,MAAAA,GAASN,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,SAAA,CAAA,IAAc,mBAAA;AAClD,EAAA,MAAMG,UAAAA,GAAaP,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,QAAA,CAAA;AACxC,EAAA,MAAMI,QACFD,UAAAA,EACME,KAAAA,CAAM,GAAA,CAAA,CACPC,GAAAA,CAAI,CAACC,KAAAA,KAAUA,KAAAA,CAAMC,MAAI,CAAA,CACzBC,OAAO,CAACF,KAAAA,KAAUA,MAAMG,MAAAA,GAAS,CAAA,KAAM,EAAA;AAChD,EAAA,MAAMC,SAAAA,GAAYf,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,YAAA,CAAA;AACvC,EAAA,IAAI,CAACW,SAAAA,EAAW;AACZ,IAAA,MAAM,IAAIV,MAAM,mEAAA,CAAA;AACpB,EAAA;AACA,EAAA,MAAMW,QAAAA,GAAWhB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBa,MAAAA;AACtD,EAAA,MAAMC,QAAAA,GAAWlB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBa,MAAAA;AAEtD,EAAA,MAAME,YAAAA,GACFnB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,eAAA,CAAA;AAErBgB,EAAAA,OAAAA,CAAQC,IAAIC,oBAAAA,IACZL,MAAAA;AACJ,EAAA,MAAMM,KAAAA,GAAQvB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,OAAA,CAAA,IAAYa,MAAAA;AAC/C,EAAA,MAAMO,QAAAA,GAAWxB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,UAAA,CAAA,IAAea,MAAAA;AAErD,EAAA,KAAA,MAAWQ,GAAAA,IAAO;AACd,IAAA,WAAA;AACA,IAAA,SAAA;AACA,IAAA,QAAA;AACA,IAAA,YAAA;AACA,IAAA,eAAA;AACA,IAAA,sBAAA;AACA,IAAA,kBAAA;AACA,IAAA,WAAA;AACA,IAAA,WAAA;AACA,IAAA,eAAA;AACA,IAAA,OAAA;AACA,IAAA;AACD,GAAA,EAAA;AACCzB,IAAAA,GAAAA,CAAIG,YAAAA,CAAauB,OAAOD,GAAAA,CAAAA;AAC5B,EAAA;AAEA,EAAA,MAAME,aAAa3B,GAAAA,CAAI4B,QAAAA,EAAQ,CAAGC,OAAAA,CAAQ,OAAO,EAAA,CAAA;AAEjD,EAAA,MAAMC,MAAAA,GACFd,QAAAA,IAAYE,QAAAA,IAAYC,YAAAA,GAClB;AAAEH,IAAAA,QAAAA;AAAUE,IAAAA,QAAAA;AAAUC,IAAAA,YAAAA;AAAcI,IAAAA,KAAAA;AAAOC,IAAAA;GAAS,GACpDP,MAAAA;AAEV,EAAA,OAAO;AACHU,IAAAA,UAAAA;AACAzB,IAAAA,YAAAA;AACAI,IAAAA,MAAAA;AACAE,IAAAA,KAAAA;AACAO,IAAAA,SAAAA;AACAe,IAAAA;AACJ,GAAA;AACJ;AA9DgBhC,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAkFT,SAASiC,yBAAAA,CAA0B,EACtChC,GAAAA,EACAiC,OAAAA,EAAO,EACwB;AAC/B,EAAA,MAAMC,MAAAA,GAASnC,oBAAoBC,GAAAA,CAAAA;AAEnC,EAAA,MAAMmC,aAAAA,GAAgBC,mBAAAA,CAAoBF,MAAAA,EAAQD,OAAAA,CAAAA;AAGlD,EAAA,MAAMI,aAAAA,GAAgB,IAAIC,aAAAA,CAAc;AACpCC,IAAAA,QAAAA,EAAUL,MAAAA,CAAON,UAAAA;IACjBY,WAAAA,kBAAa,MAAA,CAAA,MAAML,aAAAA,CAAcM,QAAAA,EAAQ,EAA5B,aAAA;GACjB,CAAA;AACA,EAAA,MAAMC,MAAAA,GAAS,IAAIC,YAAAA,CAAaN,aAAAA,EAAeH,OAAO3B,MAAAA,EAAQ;AAC1DS,IAAAA,SAAAA,EAAWkB,MAAAA,CAAOlB,SAAAA;AAClBmB,IAAAA;GACJ,CAAA;AAGA,EAAA,MAAMS,UAAAA,GAAa,IAAIC,gBAAAA,CAAiB;AACpCC,IAAAA,IAAAA,EAAMZ,MAAAA,CAAO/B,YAAAA;AACbgC,IAAAA,aAAAA;AACA5B,IAAAA,MAAAA,EAAQ2B,MAAAA,CAAO3B;GACnB,CAAA;AAEA,EAAA,OAAO;AACHmC,IAAAA,MAAAA;AACAE,IAAAA,UAAAA;AACAT,IAAAA,aAAAA;AACAnB,IAAAA,SAAAA,EAAWkB,MAAAA,CAAOlB;AACtB,GAAA;AACJ;AA/BgBgB,MAAAA,CAAAA,yBAAAA,EAAAA,2BAAAA,CAAAA;AAiChB,SAASI,mBAAAA,CAAoBF,QAA8BD,OAAAA,EAAgB;AACvE,EAAA,IAAIA,OAAAA,EAAS;AACT,IAAA,OAAO,IAAIc,kBAAAA,CAAmB;AAC1BxC,MAAAA,MAAAA,EAAQ2B,MAAAA,CAAO3B,MAAAA;AACfE,MAAAA,KAAAA,EAAOyB,MAAAA,CAAOzB,KAAAA;MACduC,KAAAA,EAAO;KACX,CAAA;AACJ,EAAA;AAGA,EAAA,IAAI,CAACd,OAAOH,MAAAA,EAAQ;AAChB,IAAA,MAAM,IAAIzB,MACN,kHAAA,CAAA;AAER,EAAA;AAEA,EAAA,OAAO,IAAI2C,8BAAAA,CAA+Bf,MAAAA,CAAOH,MAAM,CAAA;AAC3D;AAjBSK,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA","file":"KYBLHMHO.js","sourcesContent":["import {\n    ClientCredentialsTokenProvider,\n    type ClientCredentialsTokenProviderConfig,\n} from './auth/client-credentials-token-provider';\nimport { LocalTokenProvider } from './auth/local-token-provider';\nimport type { TokenProvider } from './auth/token-provider';\nimport { CantonClient } from './client/canton-client';\nimport { CantonGrpcClient } from './client/grpc';\nimport type { ICantonClient } from './client/interface';\nimport { Configuration } from './open-api/runtime';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Type\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * - {@link client} — JSON Ledger API (commands, queries, updates)\n * - {@link grpcClient} — gRPC Admin API (topology transactions, namespace queries)\n * - {@link tokenProvider} — Shared Bearer-token source used by both transports\n * - {@link walletUrl} — Canton Network validator wallet (scan-proxy CIP-56 endpoints)\n */\nexport type CantonChainProvider = {\n    client: ICantonClient;\n    grpcClient: CantonGrpcClient;\n    tokenProvider: TokenProvider;\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints. Required. */\n    walletUrl: string;\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// URI Parsing\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CantonChainUriParams = {\n    /** Base URL of the JSON Ledger API (e.g. \"http://localhost:5975\") */\n    jsonApiUrl: string;\n    /** Host:port of the gRPC Admin API (e.g. \"localhost:5076\") */\n    adminApiHost: string;\n    /** Ledger API user ID (default: \"participant_admin\") */\n    userId: string;\n    /** Parties granted `actAs` on localnet tokens (comma-separated in the URI). */\n    actAs: string[];\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints (e.g. \"http://localhost:7201\"). Required. */\n    walletUrl: string;\n    /** OAuth2 client credentials config — present only for non-local environments */\n    oauth2?: ClientCredentialsTokenProviderConfig;\n};\n\n/**\n * Parse a Canton chain provider URI into its constituent parts.\n *\n * URI format:\n *   `<json-api-base>?admin-api=<host:port>&user-id=<id>&wallet-url=<url>[&token-url=...&client-id=...&client-secret=...&scope=...&audience=...]`\n *\n * The base URL (everything before the query string) is the JSON Ledger API endpoint.\n * Canton-specific params are extracted and removed; any remaining query params are\n * preserved on the JSON API URL.\n *\n * When `client-secret` is omitted from the URI, `CANTON_CLIENT_SECRET` is read from the\n * environment.\n */\nexport function parseCantonChainUri(uri: string): CantonChainUriParams {\n    const url = new URL(uri);\n\n    const adminApiHost = url.searchParams.get('admin-api');\n    if (!adminApiHost) {\n        throw new Error('Canton provider URI missing required \"admin-api\" query parameter');\n    }\n\n    const userId = url.searchParams.get('user-id') ?? 'participant_admin';\n    const actAsParam = url.searchParams.get('act-as');\n    const actAs =\n        actAsParam\n            ?.split(',')\n            .map((party) => party.trim())\n            .filter((party) => party.length > 0) ?? [];\n    const walletUrl = url.searchParams.get('wallet-url');\n    if (!walletUrl) {\n        throw new Error('Canton provider URI missing required \"wallet-url\" query parameter');\n    }\n    const tokenUrl = url.searchParams.get('token-url') ?? undefined;\n    const clientId = url.searchParams.get('client-id') ?? undefined;\n    // Prefer URI param; fall back to env so secrets are not committed in provider configs.\n    const clientSecret =\n        url.searchParams.get('client-secret') ??\n        // eslint-disable-next-line turbo/no-undeclared-env-vars -- runtime OAuth secret, not a turbo task input\n        process.env.CANTON_CLIENT_SECRET ??\n        undefined;\n    const scope = url.searchParams.get('scope') ?? undefined;\n    const audience = url.searchParams.get('audience') ?? undefined;\n\n    for (const key of [\n        'admin-api',\n        'user-id',\n        'act-as',\n        'wallet-url',\n        'sequencer-url',\n        'sequencer-validators',\n        'sequencer-quorum',\n        'token-url',\n        'client-id',\n        'client-secret',\n        'scope',\n        'audience',\n    ]) {\n        url.searchParams.delete(key);\n    }\n\n    const jsonApiUrl = url.toString().replace(/\\/$/, '');\n\n    const oauth2 =\n        tokenUrl && clientId && clientSecret\n            ? { tokenUrl, clientId, clientSecret, scope, audience }\n            : undefined;\n\n    return {\n        jsonApiUrl,\n        adminApiHost,\n        userId,\n        actAs,\n        walletUrl,\n        oauth2,\n    };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Factory\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CreateCantonChainProviderOptions = {\n    /** Raw provider URI (from provider config) */\n    uri: string;\n    /** When true, uses LocalTokenProvider (self-signed JWTs) instead of OAuth2 */\n    isLocal: boolean;\n};\n\n/**\n * Create a {@link CantonChainProvider} from a provider URI.\n *\n * - **isLocal=true**: Uses {@link LocalTokenProvider} with admin-level access (self-signed JWTs).\n * - **isLocal=false**: Uses {@link ClientCredentialsTokenProvider} with OAuth2 client\n *   credentials extracted from the URI query parameters.\n */\nexport function createCantonChainProvider({\n    uri,\n    isLocal,\n}: CreateCantonChainProviderOptions): CantonChainProvider {\n    const params = parseCantonChainUri(uri);\n\n    const tokenProvider = createTokenProvider(params, isLocal);\n\n    // ── JSON Ledger API Client ──────────────────────────────────────────\n    const configuration = new Configuration({\n        basePath: params.jsonApiUrl,\n        accessToken: () => tokenProvider.getToken(),\n    });\n    const client = new CantonClient(configuration, params.userId, {\n        walletUrl: params.walletUrl,\n        tokenProvider,\n    });\n\n    // ── gRPC Admin API Client ───────────────────────────────────────────\n    const grpcClient = new CantonGrpcClient({\n        host: params.adminApiHost,\n        tokenProvider,\n        userId: params.userId,\n    });\n\n    return {\n        client,\n        grpcClient,\n        tokenProvider,\n        walletUrl: params.walletUrl,\n    };\n}\n\nfunction createTokenProvider(params: CantonChainUriParams, isLocal: boolean): TokenProvider {\n    if (isLocal) {\n        return new LocalTokenProvider({\n            userId: params.userId,\n            actAs: params.actAs,\n            admin: true,\n        });\n    }\n\n    // TODO(canton): add other prod auth methods (direct JWT passthrough, etc.).\n    if (!params.oauth2) {\n        throw new Error(\n            'Canton provider requires OAuth2 credentials (token-url, client-id, client-secret in URI or CANTON_CLIENT_SECRET)',\n        );\n    }\n\n    return new ClientCredentialsTokenProvider(params.oauth2);\n}\n"]}