@layerzerolabs/common-canton 1.2.30 → 1.2.32

package/dist/{KYBLHMHO.js → AH32N3GF.js}

@@ -1,6 +1,6 @@
 import { CantonClient } from './WAKNWPCR.js';
 import { Configuration } from './KBNUN3MF.js';
-import { CantonGrpcClient } from './I7FWUGTT.js';
+import { CantonGrpcClient } from './IA2UQ4WQ.js';
 import { ClientCredentialsTokenProvider } from './V2H2WXKE.js';
 import { LocalTokenProvider } from './SCEF7TLZ.js';
 import { __name } from './VUOMXK5T.js';
@@ -72,8 +72,7 @@ function createCantonChainProvider({ uri, isLocal }) {
   });
   const grpcClient = new CantonGrpcClient({
     host: params.adminApiHost,
-    tokenProvider,
-    userId: params.userId
+    tokenProvider
   });
   return {
     client,
@@ -99,5 +98,5 @@ function createTokenProvider(params, isLocal) {
 __name(createTokenProvider, "createTokenProvider");
 
 export { createCantonChainProvider, parseCantonChainUri };
-//# sourceMappingURL=KYBLHMHO.js.map
-//# sourceMappingURL=KYBLHMHO.js.map
+//# sourceMappingURL=AH32N3GF.js.map
+//# sourceMappingURL=AH32N3GF.js.map

package/dist/AH32N3GF.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/provider.ts"],"names":["parseCantonChainUri","uri","url","URL","adminApiHost","searchParams","get","Error","userId","actAsParam","actAs","split","map","party","trim","filter","length","walletUrl","tokenUrl","undefined","clientId","clientSecret","process","env","CANTON_CLIENT_SECRET","scope","audience","key","delete","jsonApiUrl","toString","replace","oauth2","createCantonChainProvider","isLocal","params","tokenProvider","createTokenProvider","configuration","Configuration","basePath","accessToken","getToken","client","CantonClient","grpcClient","CantonGrpcClient","host","LocalTokenProvider","admin","ClientCredentialsTokenProvider"],"mappings":";;;;;;;;AA6DO,SAASA,oBAAoBC,GAAAA,EAAW;AAC3C,EAAA,MAAMC,GAAAA,GAAM,IAAIC,GAAAA,CAAIF,GAAAA,CAAAA;AAEpB,EAAA,MAAMG,YAAAA,GAAeF,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA;AAC1C,EAAA,IAAI,CAACF,YAAAA,EAAc;AACf,IAAA,MAAM,IAAIG,MAAM,kEAAA,CAAA;AACpB,EAAA;AAEA,EAAA,MAAMC,MAAAA,GAASN,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,SAAA,CAAA,IAAc,mBAAA;AAClD,EAAA,MAAMG,UAAAA,GAAaP,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,QAAA,CAAA;AACxC,EAAA,MAAMI,QACFD,UAAAA,EACME,KAAAA,CAAM,GAAA,CAAA,CACPC,GAAAA,CAAI,CAACC,KAAAA,KAAUA,KAAAA,CAAMC,MAAI,CAAA,CACzBC,OAAO,CAACF,KAAAA,KAAUA,MAAMG,MAAAA,GAAS,CAAA,KAAM,EAAA;AAChD,EAAA,MAAMC,SAAAA,GAAYf,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,YAAA,CAAA;AACvC,EAAA,IAAI,CAACW,SAAAA,EAAW;AACZ,IAAA,MAAM,IAAIV,MAAM,mEAAA,CAAA;AACpB,EAAA;AACA,EAAA,MAAMW,QAAAA,GAAWhB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBa,MAAAA;AACtD,EAAA,MAAMC,QAAAA,GAAWlB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBa,MAAAA;AAEtD,EAAA,MAAME,YAAAA,GACFnB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,eAAA,CAAA;AAErBgB,EAAAA,OAAAA,CAAQC,IAAIC,oBAAAA,IACZL,MAAAA;AACJ,EAAA,MAAMM,KAAAA,GAAQvB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,OAAA,CAAA,IAAYa,MAAAA;AAC/C,EAAA,MAAMO,QAAAA,GAAWxB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,UAAA,CAAA,IAAea,MAAAA;AAErD,EAAA,KAAA,MAAWQ,GAAAA,IAAO;AACd,IAAA,WAAA;AACA,IAAA,SAAA;AACA,IAAA,QAAA;AACA,IAAA,YAAA;AACA,IAAA,eAAA;AACA,IAAA,sBAAA;AACA,IAAA,kBAAA;AACA,IAAA,WAAA;AACA,IAAA,WAAA;AACA,IAAA,eAAA;AACA,IAAA,OAAA;AACA,IAAA;AACD,GAAA,EAAA;AACCzB,IAAAA,GAAAA,CAAIG,YAAAA,CAAauB,OAAOD,GAAAA,CAAAA;AAC5B,EAAA;AAEA,EAAA,MAAME,aAAa3B,GAAAA,CAAI4B,QAAAA,EAAQ,CAAGC,OAAAA,CAAQ,OAAO,EAAA,CAAA;AAEjD,EAAA,MAAMC,MAAAA,GACFd,QAAAA,IAAYE,QAAAA,IAAYC,YAAAA,GAClB;AAAEH,IAAAA,QAAAA;AAAUE,IAAAA,QAAAA;AAAUC,IAAAA,YAAAA;AAAcI,IAAAA,KAAAA;AAAOC,IAAAA;GAAS,GACpDP,MAAAA;AAEV,EAAA,OAAO;AACHU,IAAAA,UAAAA;AACAzB,IAAAA,YAAAA;AACAI,IAAAA,MAAAA;AACAE,IAAAA,KAAAA;AACAO,IAAAA,SAAAA;AACAe,IAAAA;AACJ,GAAA;AACJ;AA9DgBhC,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAkFT,SAASiC,yBAAAA,CAA0B,EACtChC,GAAAA,EACAiC,OAAAA,EAAO,EACwB;AAC/B,EAAA,MAAMC,MAAAA,GAASnC,oBAAoBC,GAAAA,CAAAA;AAEnC,EAAA,MAAMmC,aAAAA,GAAgBC,mBAAAA,CAAoBF,MAAAA,EAAQD,OAAAA,CAAAA;AAGlD,EAAA,MAAMI,aAAAA,GAAgB,IAAIC,aAAAA,CAAc;AACpCC,IAAAA,QAAAA,EAAUL,MAAAA,CAAON,UAAAA;IACjBY,WAAAA,kBAAa,MAAA,CAAA,MAAML,aAAAA,CAAcM,QAAAA,EAAQ,EAA5B,aAAA;GACjB,CAAA;AACA,EAAA,MAAMC,MAAAA,GAAS,IAAIC,YAAAA,CAAaN,aAAAA,EAAeH,OAAO3B,MAAAA,EAAQ;AAC1DS,IAAAA,SAAAA,EAAWkB,MAAAA,CAAOlB,SAAAA;AAClBmB,IAAAA;GACJ,CAAA;AAGA,EAAA,MAAMS,UAAAA,GAAa,IAAIC,gBAAAA,CAAiB;AACpCC,IAAAA,IAAAA,EAAMZ,MAAAA,CAAO/B,YAAAA;AACbgC,IAAAA;GACJ,CAAA;AAEA,EAAA,OAAO;AACHO,IAAAA,MAAAA;AACAE,IAAAA,UAAAA;AACAT,IAAAA,aAAAA;AACAnB,IAAAA,SAAAA,EAAWkB,MAAAA,CAAOlB;AACtB,GAAA;AACJ;AA9BgBgB,MAAAA,CAAAA,yBAAAA,EAAAA,2BAAAA,CAAAA;AAgChB,SAASI,mBAAAA,CAAoBF,QAA8BD,OAAAA,EAAgB;AACvE,EAAA,IAAIA,OAAAA,EAAS;AACT,IAAA,OAAO,IAAIc,kBAAAA,CAAmB;AAC1BxC,MAAAA,MAAAA,EAAQ2B,MAAAA,CAAO3B,MAAAA;AACfE,MAAAA,KAAAA,EAAOyB,MAAAA,CAAOzB,KAAAA;MACduC,KAAAA,EAAO;KACX,CAAA;AACJ,EAAA;AAGA,EAAA,IAAI,CAACd,OAAOH,MAAAA,EAAQ;AAChB,IAAA,MAAM,IAAIzB,MACN,kHAAA,CAAA;AAER,EAAA;AAEA,EAAA,OAAO,IAAI2C,8BAAAA,CAA+Bf,MAAAA,CAAOH,MAAM,CAAA;AAC3D;AAjBSK,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA","file":"AH32N3GF.js","sourcesContent":["import {\n    ClientCredentialsTokenProvider,\n    type ClientCredentialsTokenProviderConfig,\n} from './auth/client-credentials-token-provider';\nimport { LocalTokenProvider } from './auth/local-token-provider';\nimport type { TokenProvider } from './auth/token-provider';\nimport { CantonClient } from './client/canton-client';\nimport { CantonGrpcClient } from './client/grpc';\nimport type { ICantonClient } from './client/interface';\nimport { Configuration } from './open-api/runtime';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Type\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * - {@link client} — JSON Ledger API (commands, queries, updates)\n * - {@link grpcClient} — gRPC Admin API (topology transactions, namespace queries)\n * - {@link tokenProvider} — Shared Bearer-token source used by both transports\n * - {@link walletUrl} — Canton Network validator wallet (scan-proxy CIP-56 endpoints)\n */\nexport type CantonChainProvider = {\n    client: ICantonClient;\n    grpcClient: CantonGrpcClient;\n    tokenProvider: TokenProvider;\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints. Required. */\n    walletUrl: string;\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// URI Parsing\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CantonChainUriParams = {\n    /** Base URL of the JSON Ledger API (e.g. \"http://localhost:5975\") */\n    jsonApiUrl: string;\n    /** Host:port of the gRPC Admin API (e.g. \"localhost:5076\") */\n    adminApiHost: string;\n    /** Ledger API user ID (default: \"participant_admin\") */\n    userId: string;\n    /** Parties granted `actAs` on localnet tokens (comma-separated in the URI). */\n    actAs: string[];\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints (e.g. \"http://localhost:7201\"). Required. */\n    walletUrl: string;\n    /** OAuth2 client credentials config — present only for non-local environments */\n    oauth2?: ClientCredentialsTokenProviderConfig;\n};\n\n/**\n * Parse a Canton chain provider URI into its constituent parts.\n *\n * URI format:\n *   `<json-api-base>?admin-api=<host:port>&user-id=<id>&wallet-url=<url>[&token-url=...&client-id=...&client-secret=...&scope=...&audience=...]`\n *\n * The base URL (everything before the query string) is the JSON Ledger API endpoint.\n * Canton-specific params are extracted and removed; any remaining query params are\n * preserved on the JSON API URL.\n *\n * When `client-secret` is omitted from the URI, `CANTON_CLIENT_SECRET` is read from the\n * environment.\n */\nexport function parseCantonChainUri(uri: string): CantonChainUriParams {\n    const url = new URL(uri);\n\n    const adminApiHost = url.searchParams.get('admin-api');\n    if (!adminApiHost) {\n        throw new Error('Canton provider URI missing required \"admin-api\" query parameter');\n    }\n\n    const userId = url.searchParams.get('user-id') ?? 'participant_admin';\n    const actAsParam = url.searchParams.get('act-as');\n    const actAs =\n        actAsParam\n            ?.split(',')\n            .map((party) => party.trim())\n            .filter((party) => party.length > 0) ?? [];\n    const walletUrl = url.searchParams.get('wallet-url');\n    if (!walletUrl) {\n        throw new Error('Canton provider URI missing required \"wallet-url\" query parameter');\n    }\n    const tokenUrl = url.searchParams.get('token-url') ?? undefined;\n    const clientId = url.searchParams.get('client-id') ?? undefined;\n    // Prefer URI param; fall back to env so secrets are not committed in provider configs.\n    const clientSecret =\n        url.searchParams.get('client-secret') ??\n        // eslint-disable-next-line turbo/no-undeclared-env-vars -- runtime OAuth secret, not a turbo task input\n        process.env.CANTON_CLIENT_SECRET ??\n        undefined;\n    const scope = url.searchParams.get('scope') ?? undefined;\n    const audience = url.searchParams.get('audience') ?? undefined;\n\n    for (const key of [\n        'admin-api',\n        'user-id',\n        'act-as',\n        'wallet-url',\n        'sequencer-url',\n        'sequencer-validators',\n        'sequencer-quorum',\n        'token-url',\n        'client-id',\n        'client-secret',\n        'scope',\n        'audience',\n    ]) {\n        url.searchParams.delete(key);\n    }\n\n    const jsonApiUrl = url.toString().replace(/\\/$/, '');\n\n    const oauth2 =\n        tokenUrl && clientId && clientSecret\n            ? { tokenUrl, clientId, clientSecret, scope, audience }\n            : undefined;\n\n    return {\n        jsonApiUrl,\n        adminApiHost,\n        userId,\n        actAs,\n        walletUrl,\n        oauth2,\n    };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Factory\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CreateCantonChainProviderOptions = {\n    /** Raw provider URI (from provider config) */\n    uri: string;\n    /** When true, uses LocalTokenProvider (self-signed JWTs) instead of OAuth2 */\n    isLocal: boolean;\n};\n\n/**\n * Create a {@link CantonChainProvider} from a provider URI.\n *\n * - **isLocal=true**: Uses {@link LocalTokenProvider} with admin-level access (self-signed JWTs).\n * - **isLocal=false**: Uses {@link ClientCredentialsTokenProvider} with OAuth2 client\n *   credentials extracted from the URI query parameters.\n */\nexport function createCantonChainProvider({\n    uri,\n    isLocal,\n}: CreateCantonChainProviderOptions): CantonChainProvider {\n    const params = parseCantonChainUri(uri);\n\n    const tokenProvider = createTokenProvider(params, isLocal);\n\n    // ── JSON Ledger API Client ──────────────────────────────────────────\n    const configuration = new Configuration({\n        basePath: params.jsonApiUrl,\n        accessToken: () => tokenProvider.getToken(),\n    });\n    const client = new CantonClient(configuration, params.userId, {\n        walletUrl: params.walletUrl,\n        tokenProvider,\n    });\n\n    // ── gRPC Admin API Client ───────────────────────────────────────────\n    const grpcClient = new CantonGrpcClient({\n        host: params.adminApiHost,\n        tokenProvider,\n    });\n\n    return {\n        client,\n        grpcClient,\n        tokenProvider,\n        walletUrl: params.walletUrl,\n    };\n}\n\nfunction createTokenProvider(params: CantonChainUriParams, isLocal: boolean): TokenProvider {\n    if (isLocal) {\n        return new LocalTokenProvider({\n            userId: params.userId,\n            actAs: params.actAs,\n            admin: true,\n        });\n    }\n\n    // TODO(canton): add other prod auth methods (direct JWT passthrough, etc.).\n    if (!params.oauth2) {\n        throw new Error(\n            'Canton provider requires OAuth2 credentials (token-url, client-id, client-secret in URI or CANTON_CLIENT_SECRET)',\n        );\n    }\n\n    return new ClientCredentialsTokenProvider(params.oauth2);\n}\n"]}

package/dist/{I7FWUGTT.js → IA2UQ4WQ.js}

@@ -1,7 +1,6 @@
 import { buildNamespaceDelegationMapping, buildDecentralizedNamespaceDefinitionMapping, buildPartyToKeyMapping, buildPartyToParticipantMapping } from './RVQWP4JU.js';
 import { SynchronizerConnectivityServiceClient } from './VJ4PVZYL.js';
 import { buildChannelCredentials, synchronizerStore, headStateBaseQuery, computeDecentralizedNamespace } from './QAKOQQ7E.js';
-import { UserManagementServiceClient } from './MIPVIR2V.js';
 import { computePublicKeyFingerprint } from './WLV6EHDB.js';
 import { CantonProtocolError, CantonError } from './3K5JL2TP.js';
 import { __name } from './VUOMXK5T.js';
@@ -20,16 +19,13 @@ var CantonGrpcClient = class {
   #topologyRead;
   #topologyWrite;
   #connectivity;
-  #userManagement;
   #tokenProvider;
-  #userId;
   #synchronizerId;
   /**
    * @param opts - Admin API host, auth, optional synchronizer id, and optional TLS.
    */
   constructor(opts) {
     this.#tokenProvider = opts.tokenProvider;
-    this.#userId = opts.userId;
     this.#synchronizerId = opts.synchronizerId;
     this.#transport = new GrpcTransport({
       host: opts.host,
@@ -39,7 +35,6 @@ var CantonGrpcClient = class {
     this.#topologyRead = new TopologyManagerReadServiceClient(this.#transport);
     this.#topologyWrite = new TopologyManagerWriteServiceClient(this.#transport);
     this.#connectivity = new SynchronizerConnectivityServiceClient(this.#transport);
-    this.#userManagement = new UserManagementServiceClient(this.#transport);
   }
   /** Returns per-RPC gRPC metadata with a fresh Bearer token. */
   async #getMeta() {
@@ -329,21 +324,6 @@ var CantonGrpcClient = class {
       meta: await this.#getMeta()
     });
   }
-  async grantCanActAs(partyId) {
-    await this.#userManagement.grantUserRights({
-      userId: this.#userId,
-      rights: [
-        {
-          canActAs: {
-            party: partyId
-          }
-        }
-      ],
-      identityProviderId: ""
-    }, {
-      meta: await this.#getMeta()
-    });
-  }
   /** Closes the underlying gRPC transport. */
   close() {
     this.#transport.close();
@@ -351,5 +331,5 @@ var CantonGrpcClient = class {
 };
 
 export { CantonGrpcClient };
-//# sourceMappingURL=I7FWUGTT.js.map
-//# sourceMappingURL=I7FWUGTT.js.map
+//# sourceMappingURL=IA2UQ4WQ.js.map
+//# sourceMappingURL=IA2UQ4WQ.js.map

package/dist/IA2UQ4WQ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/client/grpc.ts"],"names":["DEFAULT_GRPC_CLIENT_OPTIONS","CantonGrpcClient","opts","tokenProvider","synchronizerId","GrpcTransport","host","channelCredentials","buildChannelCredentials","tls","clientOptions","grpcClientOptions","TopologyManagerReadServiceClient","TopologyManagerWriteServiceClient","SynchronizerConnectivityServiceClient","token","getToken","Authorization","response","listConnectedSynchronizers","meta","synchronizer","connectedSynchronizers","CantonProtocolError","mapping","serial","generateTransactions","GenerateTransactionsRequest","create","proposals","GenerateTransactionsRequest_Proposal","operation","Enums_TopologyChangeOp","ADD_REPLACE","store","synchronizerStore","generated","generatedTransactions","getNamespaceDelegation","namespaceFingerprint","listNamespaceDelegation","ListNamespaceDelegationRequest","baseQuery","headStateBaseQuery","filterNamespace","filterTargetKeyFingerprint","results","flatMap","result","item","publicKey","targetKey","namespace","targetKeyFingerprint","computePublicKeyFingerprint","isRootDelegation","context","getDecentralizedNamespaceDefinition","listDecentralizedNamespaceDefinition","ListDecentralizedNamespaceDefinitionRequest","decentralizedNamespace","threshold","owners","getPartyToKeyMapping","partyId","listPartyToKeyMapping","ListPartyToKeyMappingRequest","filterParty","party","signingKeyFingerprints","signingKeys","map","key","getPartyToParticipantMapping","listPartyToParticipant","ListPartyToParticipantRequest","filterParticipant","participants","participant","participantUid","permission","createNamespaceDelegationTx","params","buildNamespaceDelegationMapping","publicKeyDer","createDecentralizedNamespaceDefinitionTx","computeDecentralizedNamespace","buildDecentralizedNamespaceDefinitionMapping","updateDecentralizedNamespaceDefinitionTx","createPartyToKeyTx","buildPartyToKeyMapping","signingPublicKeyDers","createPartyToParticipantTx","buildPartyToParticipantMapping","participantIds","submitTopologyTransactions","transactions","length","CantonError","addTransactions","AddTransactionsRequest","close"],"mappings":";;;;;;;;;AA+CA,IAAMA,2BAAAA,GAA8B;AAChC,EAAA,iCAAA,EAAmC,MAAM,IAAA,GAAO,IAAA;AAChD,EAAA,8BAAA,EAAgC,MAAM,IAAA,GAAO;AACjD,CAAA;AAWO,IAAMC,mBAAN,MAAMA;EA7Db;;;AA8Da,EAAA,UAAA;AACA,EAAA,aAAA;AACA,EAAA,cAAA;AACA,EAAA,aAAA;AACA,EAAA,cAAA;AACT,EAAA,eAAA;;;;AAKA,EAAA,WAAA,CAAYC,IAAAA,EAA+B;AACvC,IAAA,IAAA,CAAK,iBAAiBA,IAAAA,CAAKC,aAAAA;AAC3B,IAAA,IAAA,CAAK,kBAAkBD,IAAAA,CAAKE,cAAAA;AAC5B,IAAA,IAAA,CAAK,UAAA,GAAa,IAAIC,aAAAA,CAAc;AAChCC,MAAAA,IAAAA,EAAMJ,IAAAA,CAAKI,IAAAA;AACXC,MAAAA,kBAAAA,EAAoBC,uBAAAA,CAAwBN,IAAAA,CAAKI,IAAAA,EAAMJ,IAAAA,CAAKO,GAAG,CAAA;AAC/DC,MAAAA,aAAAA,EAAeR,KAAKS,iBAAAA,IAAqBX;KAC7C,CAAA;AACA,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAIY,gCAAAA,CAAiC,IAAA,CAAK,UAAU,CAAA;AACzE,IAAA,IAAA,CAAK,cAAA,GAAiB,IAAIC,iCAAAA,CAAkC,IAAA,CAAK,UAAU,CAAA;AAC3E,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAIC,qCAAAA,CAAsC,IAAA,CAAK,UAAU,CAAA;AAClF,EAAA;;AAGA,EAAA,MAAM,QAAA,GAAQ;AACV,IAAA,MAAMC,KAAAA,GAAQ,MAAM,IAAA,CAAK,cAAA,CAAeC,QAAAA,EAAQ;AAChD,IAAA,OAAO;AAAEC,MAAAA,aAAAA,EAAe,UAAUF,KAAAA,CAAAA;AAAQ,KAAA;AAC9C,EAAA;;;;;;AAOA,EAAA,MAAM,kBAAA,GAAkB;AACpB,IAAA,IAAI,KAAK,eAAA,EAAiB;AACtB,MAAA,OAAO,IAAA,CAAK,eAAA;AAChB,IAAA;AACA,IAAA,IAAA,CAAK,eAAA,GAAkB,MAAM,IAAA,CAAK,uBAAA,EAAuB;AACzD,IAAA,OAAO,IAAA,CAAK,eAAA;AAChB,EAAA;;;;;;AAOA,EAAA,MAAM,uBAAA,GAAuB;AACzB,IAAA,MAAM,EAAEG,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAcC,0BAAAA,CAC1C,EAAC,EACD;MAAEC,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAElC,IAAA,KAAA,MAAWC,YAAAA,IAAgBH,SAASI,sBAAAA,EAAwB;AACxD,MAAA,IAAID,aAAajB,cAAAA,EAAgB;AAC7B,QAAA,OAAOiB,YAAAA,CAAajB,cAAAA;AACxB,MAAA;AACJ,IAAA;AACA,IAAA,MAAM,IAAImB,oBAAoB,kDAAA,CAAA;AAClC,EAAA;;;;;;;;;;EAWA,MAAM,4BAAA,CACFnB,cAAAA,EACAoB,OAAAA,EACAC,MAAAA,EAAc;AAEd,IAAA,MAAM,EAAEP,UAAQ,GAAK,MAAM,KAAK,cAAA,CAAeQ,oBAAAA,CAC3CC,4BAA4BC,MAAAA,CAAO;MAC/BC,SAAAA,EAAW;AACPC,QAAAA,oCAAAA,CAAqCF,MAAAA,CAAO;AACxCG,UAAAA,SAAAA,EAAWC,sBAAAA,CAAuBC,WAAAA;AAClCR,UAAAA,MAAAA;AACAD,UAAAA,OAAAA;AACAU,UAAAA,KAAAA,EAAOC,kBAAkB/B,cAAAA;SAC7B;;AAER,KAAA,CAAA,EACA;MAAEgB,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,MAAMgB,SAAAA,GAAYlB,QAAAA,CAASmB,qBAAAA,CAAsB,CAAA,CAAA;AACjD,IAAA,IAAI,CAACD,SAAAA,EAAW;AACZ,MAAA,MAAM,IAAIb,oBAAoB,uDAAA,CAAA;AAClC,IAAA;AACA,IAAA,OAAOa,SAAAA;AACX,EAAA;;;;;;;;;;AAWA,EAAA,MAAME,uBACFC,oBAAAA,EACmC;AACnC,IAAA,MAAMnC,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,EAAEc,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAcsB,uBAAAA,CAC1CC,+BAA+Bb,MAAAA,CAAO;AAClCc,MAAAA,SAAAA,EAAWC,mBAAmBvC,cAAAA,CAAAA;MAC9BwC,eAAAA,EAAiBL,oBAAAA;;MAEjBM,0BAAAA,EAA4B;AAChC,KAAA,CAAA,EACA;MAAEzB,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,OAAOF,QAAAA,CAAS4B,OAAAA,CAAQC,OAAAA,CAAQ,CAACC,MAAAA,KAAAA;AAC7B,MAAA,MAAMC,OAAOD,MAAAA,CAAOC,IAAAA;AACpB,MAAA,MAAMC,SAAAA,GAAYD,MAAME,SAAAA,EAAWD,SAAAA;AACnC,MAAA,IAAI,CAACD,IAAAA,IAAQ,CAACC,SAAAA,EAAW;AACrB,QAAA,OAAO,EAAA;AACX,MAAA;AACA,MAAA,OAAO;AACH,QAAA;AACIE,UAAAA,SAAAA,EAAWH,IAAAA,CAAKG,SAAAA;AAChBC,UAAAA,oBAAAA,EAAsBC,4BAA4BJ,SAAAA,CAAAA;AAClDK,UAAAA,gBAAAA,EAAkBN,IAAAA,CAAKM,gBAAAA;UACvB9B,MAAAA,EAAQuB,MAAAA,CAAOQ,SAAS/B,MAAAA,IAAU;AACtC;;IAER,CAAA,CAAA;AACJ,EAAA;;;;;;;;;;AAWA,EAAA,MAAMgC,oCACFlB,oBAAAA,EACgD;AAChD,IAAA,MAAMnC,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,EAAEc,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAcwC,oCAAAA,CAC1CC,4CAA4C/B,MAAAA,CAAO;AAC/Cc,MAAAA,SAAAA,EAAWC,mBAAmBvC,cAAAA,CAAAA;MAC9BwC,eAAAA,EAAiBL;AACrB,KAAA,CAAA,EACA;MAAEnB,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,OAAOF,QAAAA,CAAS4B,OAAAA,CAAQC,OAAAA,CAAQ,CAACC,MAAAA,KAAAA;AAC7B,MAAA,MAAMC,OAAOD,MAAAA,CAAOC,IAAAA;AACpB,MAAA,IAAI,CAACA,IAAAA,EAAM;AACP,QAAA,OAAO,EAAA;AACX,MAAA;AACA,MAAA,OAAO;AACH,QAAA;AACIG,UAAAA,SAAAA,EAAWH,IAAAA,CAAKW,sBAAAA;AAChBC,UAAAA,SAAAA,EAAWZ,IAAAA,CAAKY,SAAAA;UAChBC,MAAAA,EAAQ;eAAIb,IAAAA,CAAKa;;UACjBrC,MAAAA,EAAQuB,MAAAA,CAAOQ,SAAS/B,MAAAA,IAAU;AACtC;;IAER,CAAA,CAAA;AACJ,EAAA;;;;;;;;;AAUA,EAAA,MAAMsC,qBAAqBC,OAAAA,EAAoD;AAC3E,IAAA,MAAM5D,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,EAAEc,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAc+C,qBAAAA,CAC1CC,6BAA6BtC,MAAAA,CAAO;AAChCc,MAAAA,SAAAA,EAAWC,mBAAmBvC,cAAAA,CAAAA;MAC9B+D,WAAAA,EAAaH;AACjB,KAAA,CAAA,EACA;MAAE5C,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,OAAOF,QAAAA,CAAS4B,OAAAA,CAAQC,OAAAA,CAAQ,CAACC,MAAAA,KAAAA;AAC7B,MAAA,MAAMC,OAAOD,MAAAA,CAAOC,IAAAA;AACpB,MAAA,IAAI,CAACA,IAAAA,EAAM;AACP,QAAA,OAAO,EAAA;AACX,MAAA;AACA,MAAA,OAAO;AACH,QAAA;AACImB,UAAAA,KAAAA,EAAOnB,IAAAA,CAAKmB,KAAAA;AACZP,UAAAA,SAAAA,EAAWZ,IAAAA,CAAKY,SAAAA;UAChBQ,sBAAAA,EAAwBpB,IAAAA,CAAKqB,YAAYC,GAAAA,CAAI,CAACC,QAC1ClB,2BAAAA,CAA4BkB,GAAAA,CAAItB,SAAS,CAAA,CAAA;UAE7CzB,MAAAA,EAAQuB,MAAAA,CAAOQ,SAAS/B,MAAAA,IAAU;AACtC;;IAER,CAAA,CAAA;AACJ,EAAA;;;;;;;;;;EAWA,MAAMgD,4BAAAA,CACFT,OAAAA,EACAnC,SAAAA,GAAY,KAAA,EAC6B;AACzC,IAAA,MAAMzB,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,EAAEc,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAcwD,sBAAAA,CAC1CC,8BAA8B/C,MAAAA,CAAO;MACjCc,SAAAA,EAAWC,kBAAAA,CAAmBvC,gBAAgByB,SAAAA,CAAAA;MAC9CsC,WAAAA,EAAaH,OAAAA;;MAEbY,iBAAAA,EAAmB;AACvB,KAAA,CAAA,EACA;MAAExD,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,OAAOF,QAAAA,CAAS4B,OAAAA,CAAQC,OAAAA,CAAQ,CAACC,MAAAA,KAAAA;AAC7B,MAAA,MAAMC,OAAOD,MAAAA,CAAOC,IAAAA;AACpB,MAAA,IAAI,CAACA,IAAAA,EAAM;AACP,QAAA,OAAO,EAAA;AACX,MAAA;AACA,MAAA,OAAO;AACH,QAAA;AACImB,UAAAA,KAAAA,EAAOnB,IAAAA,CAAKmB,KAAAA;AACZP,UAAAA,SAAAA,EAAWZ,IAAAA,CAAKY,SAAAA;AAChBgB,UAAAA,YAAAA,EAAc5B,IAAAA,CAAK4B,YAAAA,CAAaN,GAAAA,CAAI,CAACO,WAAAA,MAAiB;AAClDC,YAAAA,cAAAA,EAAgBD,WAAAA,CAAYC,cAAAA;AAC5BC,YAAAA,UAAAA,EAAYF,WAAAA,CAAYE;WAC5B,CAAA,CAAA;UACAvD,MAAAA,EAAQuB,MAAAA,CAAOQ,SAAS/B,MAAAA,IAAU;AACtC;;IAER,CAAA,CAAA;AACJ,EAAA;;;;;;;;;;AAWA,EAAA,MAAMwD,4BACFC,MAAAA,EACqC;AACrC,IAAA,MAAM9E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMoB,OAAAA,GAAU2D,+BAAAA,CAAgCD,MAAAA,CAAOE,YAAY,CAAA;AACnE,IAAA,OAAO,KAAK,4BAAA,CAA6BhF,cAAAA,EAAgBoB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;;;;;;;;;;AAWA,EAAA,MAAM4D,yCACFH,MAAAA,EACqC;AACrC,IAAA,MAAM9E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMwD,sBAAAA,GAAyB0B,6BAAAA,CAA8BJ,MAAAA,CAAOpB,MAAM,CAAA;AAC1E,IAAA,MAAMtC,UAAU+D,4CAAAA,CACZ3B,sBAAAA,EACAsB,MAAAA,CAAOrB,SAAAA,EACPqB,OAAOpB,MAAM,CAAA;AAEjB,IAAA,OAAO,KAAK,4BAAA,CAA6B1D,cAAAA,EAAgBoB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;AAEA,EAAA,MAAM+D,yCACFN,MAAAA,EACqC;AACrC,IAAA,MAAM9E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMoB,UAAU+D,4CAAAA,CACZL,MAAAA,CAAO9B,WACP8B,MAAAA,CAAOrB,SAAAA,EACPqB,OAAOpB,MAAM,CAAA;AAEjB,IAAA,OAAO,KAAK,4BAAA,CAA6B1D,cAAAA,EAAgBoB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;;;;;;;;;AAUA,EAAA,MAAMgE,mBACFP,MAAAA,EACqC;AACrC,IAAA,MAAM9E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMoB,UAAUkE,sBAAAA,CACZR,MAAAA,CAAOlB,SACPkB,MAAAA,CAAOS,oBAAAA,EACPT,OAAOrB,SAAS,CAAA;AAEpB,IAAA,OAAO,KAAK,4BAAA,CAA6BzD,cAAAA,EAAgBoB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;;;;;;;;;;AAWA,EAAA,MAAMmE,2BACFV,MAAAA,EACqC;AACrC,IAAA,MAAM9E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMoB,UAAUqE,8BAAAA,CACZX,MAAAA,CAAOlB,SACPkB,MAAAA,CAAOY,cAAAA,EACPZ,OAAOrB,SAAS,CAAA;AAEpB,IAAA,OAAO,KAAK,4BAAA,CAA6BzD,cAAAA,EAAgBoB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;;;;;;;;;;;;;;AAeA,EAAA,MAAMsE,2BACFC,YAAAA,EACa;AACb,IAAA,IAAIA,YAAAA,CAAaC,WAAW,CAAA,EAAG;AAC3B,MAAA,MAAM,IAAIC,YAAY,mDAAA,CAAA;AAC1B,IAAA;AACA,IAAA,MAAM9F,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,IAAA,CAAK,cAAA,CAAe+F,eAAAA,CACtBC,sBAAAA,CAAuBxE,MAAAA,CAAO;MAC1BoE,YAAAA,EAAc;AAAIA,QAAAA,GAAAA;;AAClB9D,MAAAA,KAAAA,EAAOC,kBAAkB/B,cAAAA;AAC7B,KAAA,CAAA,EACA;MAAEgB,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAEtC,EAAA;;EAGAiF,KAAAA,GAAc;AACV,IAAA,IAAA,CAAK,WAAWA,KAAAA,EAAK;AACzB,EAAA;AACJ","file":"IA2UQ4WQ.js","sourcesContent":["import {\n    AddTransactionsRequest,\n    Enums_TopologyChangeOp,\n    GenerateTransactionsRequest,\n    GenerateTransactionsRequest_Proposal,\n    ListDecentralizedNamespaceDefinitionRequest,\n    ListNamespaceDelegationRequest,\n    ListPartyToKeyMappingRequest,\n    ListPartyToParticipantRequest,\n    type SignedTopologyTransaction,\n    TopologyManagerReadServiceClient,\n    TopologyManagerWriteServiceClient,\n    type TopologyMapping,\n} from '@canton-network/core-ledger-proto';\nimport { GrpcTransport } from '@protobuf-ts/grpc-transport';\n\nimport type { TokenProvider } from '../auth/token-provider';\nimport { CantonError, CantonProtocolError } from '../errors';\nimport {\n    buildDecentralizedNamespaceDefinitionMapping,\n    buildNamespaceDelegationMapping,\n    buildPartyToKeyMapping,\n    buildPartyToParticipantMapping,\n} from './topology/mappings';\nimport { SynchronizerConnectivityServiceClient } from './topology/synchronizer-connectivity';\nimport type {\n    CantonGrpcClientOptions,\n    CreateDecentralizedNamespaceDefinitionTxParams,\n    CreateNamespaceDelegationTxParams,\n    CreatePartyToKeyMappingTxParams,\n    CreatePartyToParticipantMappingTxParams,\n    DecentralizedNamespaceDefinitionState,\n    GeneratedTopologyTransaction,\n    NamespaceDelegationState,\n    PartyToKeyMappingState,\n    PartyToParticipantMappingState,\n    UpdateDecentralizedNamespaceDefinitionTxParams,\n} from './topology/types';\nimport {\n    buildChannelCredentials,\n    computeDecentralizedNamespace,\n    headStateBaseQuery,\n    synchronizerStore,\n} from './topology/utils';\nimport { computePublicKeyFingerprint } from './utils';\n\n/** Default gRPC client options: 128 MiB message-size limits for large admin responses. */\nconst DEFAULT_GRPC_CLIENT_OPTIONS = {\n    'grpc.max_receive_message_length': 128 * 1024 * 1024,\n    'grpc.max_send_message_length': 128 * 1024 * 1024,\n} as const;\n\n/**\n * gRPC client for the Canton participant admin Topology Manager API.\n *\n * Exposes read queries for topology mappings and write helpers that call\n * `GenerateTransactions` to produce unsigned topology transactions and\n * `AddTransactions` to submit signed ones.\n *\n * A fresh Bearer token is attached to each RPC via {@link TokenProvider}.\n */\nexport class CantonGrpcClient {\n    readonly #transport: GrpcTransport;\n    readonly #topologyRead: TopologyManagerReadServiceClient;\n    readonly #topologyWrite: TopologyManagerWriteServiceClient;\n    readonly #connectivity: SynchronizerConnectivityServiceClient;\n    readonly #tokenProvider: TokenProvider;\n    #synchronizerId?: string;\n\n    /**\n     * @param opts - Admin API host, auth, optional synchronizer id, and optional TLS.\n     */\n    constructor(opts: CantonGrpcClientOptions) {\n        this.#tokenProvider = opts.tokenProvider;\n        this.#synchronizerId = opts.synchronizerId;\n        this.#transport = new GrpcTransport({\n            host: opts.host,\n            channelCredentials: buildChannelCredentials(opts.host, opts.tls),\n            clientOptions: opts.grpcClientOptions ?? DEFAULT_GRPC_CLIENT_OPTIONS,\n        });\n        this.#topologyRead = new TopologyManagerReadServiceClient(this.#transport);\n        this.#topologyWrite = new TopologyManagerWriteServiceClient(this.#transport);\n        this.#connectivity = new SynchronizerConnectivityServiceClient(this.#transport);\n    }\n\n    /** Returns per-RPC gRPC metadata with a fresh Bearer token. */\n    async #getMeta(): Promise<Record<string, string>> {\n        const token = await this.#tokenProvider.getToken();\n        return { Authorization: `Bearer ${token}` };\n    }\n\n    /**\n     * Returns the client synchronizer id, discovering it on first use when omitted at construction.\n     *\n     * @throws {CantonProtocolError} If the participant exposes no synchronizer store.\n     */\n    async #getSynchronizerId(): Promise<string> {\n        if (this.#synchronizerId) {\n            return this.#synchronizerId;\n        }\n        this.#synchronizerId = await this.#discoverSynchronizerId();\n        return this.#synchronizerId;\n    }\n\n    /**\n     * Resolves the logical id of the first synchronizer the participant is connected to.\n     *\n     * @throws {CantonProtocolError} If the participant is not connected to any synchronizer.\n     */\n    async #discoverSynchronizerId(): Promise<string> {\n        const { response } = await this.#connectivity.listConnectedSynchronizers(\n            {},\n            { meta: await this.#getMeta() },\n        );\n        for (const synchronizer of response.connectedSynchronizers) {\n            if (synchronizer.synchronizerId) {\n                return synchronizer.synchronizerId;\n            }\n        }\n        throw new CantonProtocolError('Participant is not connected to any synchronizer');\n    }\n\n    /**\n     * Calls `GenerateTransactions` for a single ADD_REPLACE mapping.\n     *\n     * @param synchronizerId - Synchronizer store to target.\n     * @param mapping - Topology mapping to encode into the transaction.\n     * @param serial - Topology serial (`0` lets Canton auto-determine).\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     * @throws {CantonProtocolError} If the RPC returns no generated transaction.\n     */\n    async #generateTopologyTransaction(\n        synchronizerId: string,\n        mapping: TopologyMapping,\n        serial: number,\n    ): Promise<GeneratedTopologyTransaction> {\n        const { response } = await this.#topologyWrite.generateTransactions(\n            GenerateTransactionsRequest.create({\n                proposals: [\n                    GenerateTransactionsRequest_Proposal.create({\n                        operation: Enums_TopologyChangeOp.ADD_REPLACE,\n                        serial,\n                        mapping,\n                        store: synchronizerStore(synchronizerId),\n                    }),\n                ],\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        const generated = response.generatedTransactions[0];\n        if (!generated) {\n            throw new CantonProtocolError('GenerateTransactions returned no topology transaction');\n        }\n        return generated;\n    }\n\n    /**\n     * Lists Namespace Delegation (NSD) mappings for a namespace.\n     *\n     * Queries topology head state on the synchronizer. Returns every result from\n     * the list RPC.\n     *\n     * @param namespaceFingerprint - Namespace to filter on (for root NSD, the owner key fingerprint).\n     * @returns All matching NSD mappings, or an empty array if none exist.\n     */\n    async getNamespaceDelegation(\n        namespaceFingerprint: string,\n    ): Promise<NamespaceDelegationState[]> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const { response } = await this.#topologyRead.listNamespaceDelegation(\n            ListNamespaceDelegationRequest.create({\n                baseQuery: headStateBaseQuery(synchronizerId),\n                filterNamespace: namespaceFingerprint,\n                // Empty string = no target-key filter; return all delegations for this namespace.\n                filterTargetKeyFingerprint: '',\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        return response.results.flatMap((result) => {\n            const item = result.item;\n            const publicKey = item?.targetKey?.publicKey;\n            if (!item || !publicKey) {\n                return [];\n            }\n            return [\n                {\n                    namespace: item.namespace,\n                    targetKeyFingerprint: computePublicKeyFingerprint(publicKey),\n                    isRootDelegation: item.isRootDelegation,\n                    serial: result.context?.serial ?? 0,\n                },\n            ];\n        });\n    }\n\n    /**\n     * Lists Decentralized Namespace Definition (DND) mappings for a namespace.\n     *\n     * Queries topology head state on the synchronizer. For a party id `hint::1220…`,\n     * pass the `1220…` suffix as `namespaceFingerprint`.\n     *\n     * @param namespaceFingerprint - Decentralized namespace fingerprint to filter on.\n     * @returns All matching DND mappings, or an empty array if none exist.\n     */\n    async getDecentralizedNamespaceDefinition(\n        namespaceFingerprint: string,\n    ): Promise<DecentralizedNamespaceDefinitionState[]> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const { response } = await this.#topologyRead.listDecentralizedNamespaceDefinition(\n            ListDecentralizedNamespaceDefinitionRequest.create({\n                baseQuery: headStateBaseQuery(synchronizerId),\n                filterNamespace: namespaceFingerprint,\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        return response.results.flatMap((result) => {\n            const item = result.item;\n            if (!item) {\n                return [];\n            }\n            return [\n                {\n                    namespace: item.decentralizedNamespace,\n                    threshold: item.threshold,\n                    owners: [...item.owners],\n                    serial: result.context?.serial ?? 0,\n                },\n            ];\n        });\n    }\n\n    /**\n     * Lists Party-to-Key (PTK) mappings for a party.\n     *\n     * Queries topology head state on the synchronizer.\n     *\n     * @param partyId - Full party identifier (e.g. `hint::1220…`).\n     * @returns All matching PTK mappings, or an empty array if none exist.\n     */\n    async getPartyToKeyMapping(partyId: string): Promise<PartyToKeyMappingState[]> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const { response } = await this.#topologyRead.listPartyToKeyMapping(\n            ListPartyToKeyMappingRequest.create({\n                baseQuery: headStateBaseQuery(synchronizerId),\n                filterParty: partyId,\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        return response.results.flatMap((result) => {\n            const item = result.item;\n            if (!item) {\n                return [];\n            }\n            return [\n                {\n                    party: item.party,\n                    threshold: item.threshold,\n                    signingKeyFingerprints: item.signingKeys.map((key) =>\n                        computePublicKeyFingerprint(key.publicKey),\n                    ),\n                    serial: result.context?.serial ?? 0,\n                },\n            ];\n        });\n    }\n\n    /**\n     * Lists Party-to-Participant (PTP) mappings for a party.\n     *\n     * Queries topology head state on the synchronizer.\n     *\n     * @param partyId - Full party identifier (e.g. `hint::1220…`).\n     * @param proposals - If `true`, query pending proposals instead of authorized mappings.\n     * @returns All matching PTP mappings, or an empty array if none exist.\n     */\n    async getPartyToParticipantMapping(\n        partyId: string,\n        proposals = false,\n    ): Promise<PartyToParticipantMappingState[]> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const { response } = await this.#topologyRead.listPartyToParticipant(\n            ListPartyToParticipantRequest.create({\n                baseQuery: headStateBaseQuery(synchronizerId, proposals),\n                filterParty: partyId,\n                // Empty string = no participant filter; return all hosting mappings for this party.\n                filterParticipant: '',\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        return response.results.flatMap((result) => {\n            const item = result.item;\n            if (!item) {\n                return [];\n            }\n            return [\n                {\n                    party: item.party,\n                    threshold: item.threshold,\n                    participants: item.participants.map((participant) => ({\n                        participantUid: participant.participantUid,\n                        permission: participant.permission,\n                    })),\n                    serial: result.context?.serial ?? 0,\n                },\n            ];\n        });\n    }\n\n    /**\n     * Builds an unsigned Namespace Delegation (NSD) topology transaction.\n     *\n     * Calls `GenerateTransactions` with an ADD_REPLACE mapping. The returned\n     * `transactionHash` must be signed by the namespace key.\n     *\n     * @param params - Owner public key and optional serial.\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     */\n    async createNamespaceDelegationTx(\n        params: CreateNamespaceDelegationTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const mapping = buildNamespaceDelegationMapping(params.publicKeyDer);\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    /**\n     * Builds an unsigned Decentralized Namespace Definition (DND) topology transaction.\n     *\n     * The decentralized namespace id is derived from `params.owners`. All owners\n     * must sign the transaction hash.\n     *\n     * @param params - Owner fingerprints, threshold, and optional serial.\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     */\n    async createDecentralizedNamespaceDefinitionTx(\n        params: CreateDecentralizedNamespaceDefinitionTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const decentralizedNamespace = computeDecentralizedNamespace(params.owners);\n        const mapping = buildDecentralizedNamespaceDefinitionMapping(\n            decentralizedNamespace,\n            params.threshold,\n            params.owners,\n        );\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    async updateDecentralizedNamespaceDefinitionTx(\n        params: UpdateDecentralizedNamespaceDefinitionTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const mapping = buildDecentralizedNamespaceDefinitionMapping(\n            params.namespace,\n            params.threshold,\n            params.owners,\n        );\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    /**\n     * Builds an unsigned Party-to-Key (PTK) topology transaction.\n     *\n     * Decentralized namespace owners must sign the transaction hash.\n     *\n     * @param params - Party id, signing keys, threshold, and optional serial.\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     */\n    async createPartyToKeyTx(\n        params: CreatePartyToKeyMappingTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const mapping = buildPartyToKeyMapping(\n            params.partyId,\n            params.signingPublicKeyDers,\n            params.threshold,\n        );\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    /**\n     * Builds an unsigned Party-to-Participant (PTP) topology transaction.\n     *\n     * Party owners sign the transaction hash. On submit, set `proposal: true` on the\n     * signed transaction so the hosting participant can authorize via `Authorize`.\n     *\n     * @param params - Party id, participant ids, threshold, and optional serial.\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     */\n    async createPartyToParticipantTx(\n        params: CreatePartyToParticipantMappingTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const mapping = buildPartyToParticipantMapping(\n            params.partyId,\n            params.participantIds,\n            params.threshold,\n        );\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    /**\n     * Submits signed topology transactions to the synchronizer store.\n     *\n     * Multiple transactions are submitted atomically in one `AddTransactions` call.\n     * When batching, sign `computeMultiTransactionHash` over all transaction hashes\n     * and attach the same `MultiTransactionSignatures` to each entry.\n     *\n     * Set `proposal: true` on a transaction when the hosting participant must\n     * authorize that mapping afterward.\n     *\n     * @param transactions - One or more signed topology transactions.\n     * @throws {CantonError} If `transactions` is empty.\n     */\n    async submitTopologyTransactions(\n        transactions: readonly SignedTopologyTransaction[],\n    ): Promise<void> {\n        if (transactions.length === 0) {\n            throw new CantonError('AddTransactions requires at least one transaction');\n        }\n        const synchronizerId = await this.#getSynchronizerId();\n        await this.#topologyWrite.addTransactions(\n            AddTransactionsRequest.create({\n                transactions: [...transactions],\n                store: synchronizerStore(synchronizerId),\n            }),\n            { meta: await this.#getMeta() },\n        );\n    }\n\n    /** Closes the underlying gRPC transport. */\n    close(): void {\n        this.#transport.close();\n    }\n}\n"]}

package/dist/auth/index.js

@@ -1,7 +1,7 @@
 import '../35ELVFTS.js';
+import '../RSV7WS7X.js';
 export { ClientCredentialsTokenProvider } from '../V2H2WXKE.js';
 export { LocalTokenProvider } from '../SCEF7TLZ.js';
-import '../RSV7WS7X.js';
 import '../VUOMXK5T.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/browser.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Browser-safe Canton utilities.
+ *
+ * This entrypoint intentionally excludes the Canton ledger client and its Node-only
+ * transport dependencies. It may be used by frontend packages that need the
+ * deterministic encoding and signature helpers.
+ */
+export * from './crypto';
+export * from './daml-serde';
+//# sourceMappingURL=browser.d.ts.map

package/dist/browser.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser.d.ts","sourceRoot":"","sources":["../src/browser.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,cAAc,UAAU,CAAC;AACzB,cAAc,cAAc,CAAC"}

package/dist/browser.js

@@ -0,0 +1,5 @@
+export { SECP256K1_SPKI_DER_HEADER, SECP256K1_SPKI_DER_HEADER_HEX, derEncodeSignature, publicKeyToSpkiDer } from './CMDFOA7C.js';
+export { assertHexLength, codePointLength, formatDamlDecimal, intToHex, keccak256Hex, padLeft, showBool, showInt, textToHex, timeToUnixSeconds, toBigInt } from './EZIA6KIP.js';
+import './VUOMXK5T.js';
+//# sourceMappingURL=browser.js.map
+//# sourceMappingURL=browser.js.map

package/dist/browser.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"browser.js"}

package/dist/client/grpc.d.ts

@@ -108,7 +108,6 @@ export declare class CantonGrpcClient {
      * @throws {CantonError} If `transactions` is empty.
      */
     submitTopologyTransactions(transactions: readonly SignedTopologyTransaction[]): Promise<void>;
-    grantCanActAs(partyId: string): Promise<void>;
     /** Closes the underlying gRPC transport. */
     close(): void;
 }

package/dist/client/grpc.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"grpc.d.ts","sourceRoot":"","sources":["../../src/client/grpc.ts"],"names":[],"mappings":"AAAA,OAAO,EASH,KAAK,yBAAyB,EAIjC,MAAM,mCAAmC,CAAC;AAY3C,OAAO,KAAK,EACR,uBAAuB,EACvB,8CAA8C,EAC9C,iCAAiC,EACjC,+BAA+B,EAC/B,uCAAuC,EACvC,qCAAqC,EACrC,4BAA4B,EAC5B,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,8CAA8C,EACjD,MAAM,kBAAkB,CAAC;AAgB1B;;;;;;;;GAQG;AACH,qBAAa,gBAAgB;;IAUzB;;OAEG;gBACS,IAAI,EAAE,uBAAuB;IAuFzC;;;;;;;;OAQG;IACG,sBAAsB,CACxB,oBAAoB,EAAE,MAAM,GAC7B,OAAO,CAAC,wBAAwB,EAAE,CAAC;IA6BtC;;;;;;;;OAQG;IACG,mCAAmC,CACrC,oBAAoB,EAAE,MAAM,GAC7B,OAAO,CAAC,qCAAqC,EAAE,CAAC;IA0BnD;;;;;;;OAOG;IACG,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IA4B9E;;;;;;;;OAQG;IACG,4BAA4B,CAC9B,OAAO,EAAE,MAAM,EACf,SAAS,UAAQ,GAClB,OAAO,CAAC,8BAA8B,EAAE,CAAC;IA+B5C;;;;;;;;OAQG;IACG,2BAA2B,CAC7B,MAAM,EAAE,iCAAiC,GAC1C,OAAO,CAAC,4BAA4B,CAAC;IAMxC;;;;;;;;OAQG;IACG,wCAAwC,CAC1C,MAAM,EAAE,8CAA8C,GACvD,OAAO,CAAC,4BAA4B,CAAC;IAWlC,wCAAwC,CAC1C,MAAM,EAAE,8CAA8C,GACvD,OAAO,CAAC,4BAA4B,CAAC;IAUxC;;;;;;;OAOG;IACG,kBAAkB,CACpB,MAAM,EAAE,+BAA+B,GACxC,OAAO,CAAC,4BAA4B,CAAC;IAUxC;;;;;;;;OAQG;IACG,0BAA0B,CAC5B,MAAM,EAAE,uCAAuC,GAChD,OAAO,CAAC,4BAA4B,CAAC;IAUxC;;;;;;;;;;;;OAYG;IACG,0BAA0B,CAC5B,YAAY,EAAE,SAAS,yBAAyB,EAAE,GACnD,OAAO,CAAC,IAAI,CAAC;IAcV,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWnD,4CAA4C;IAC5C,KAAK,IAAI,IAAI;CAGhB"}
+{"version":3,"file":"grpc.d.ts","sourceRoot":"","sources":["../../src/client/grpc.ts"],"names":[],"mappings":"AAAA,OAAO,EASH,KAAK,yBAAyB,EAIjC,MAAM,mCAAmC,CAAC;AAY3C,OAAO,KAAK,EACR,uBAAuB,EACvB,8CAA8C,EAC9C,iCAAiC,EACjC,+BAA+B,EAC/B,uCAAuC,EACvC,qCAAqC,EACrC,4BAA4B,EAC5B,wBAAwB,EACxB,sBAAsB,EACtB,8BAA8B,EAC9B,8CAA8C,EACjD,MAAM,kBAAkB,CAAC;AAe1B;;;;;;;;GAQG;AACH,qBAAa,gBAAgB;;IAQzB;;OAEG;gBACS,IAAI,EAAE,uBAAuB;IAqFzC;;;;;;;;OAQG;IACG,sBAAsB,CACxB,oBAAoB,EAAE,MAAM,GAC7B,OAAO,CAAC,wBAAwB,EAAE,CAAC;IA6BtC;;;;;;;;OAQG;IACG,mCAAmC,CACrC,oBAAoB,EAAE,MAAM,GAC7B,OAAO,CAAC,qCAAqC,EAAE,CAAC;IA0BnD;;;;;;;OAOG;IACG,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,EAAE,CAAC;IA4B9E;;;;;;;;OAQG;IACG,4BAA4B,CAC9B,OAAO,EAAE,MAAM,EACf,SAAS,UAAQ,GAClB,OAAO,CAAC,8BAA8B,EAAE,CAAC;IA+B5C;;;;;;;;OAQG;IACG,2BAA2B,CAC7B,MAAM,EAAE,iCAAiC,GAC1C,OAAO,CAAC,4BAA4B,CAAC;IAMxC;;;;;;;;OAQG;IACG,wCAAwC,CAC1C,MAAM,EAAE,8CAA8C,GACvD,OAAO,CAAC,4BAA4B,CAAC;IAWlC,wCAAwC,CAC1C,MAAM,EAAE,8CAA8C,GACvD,OAAO,CAAC,4BAA4B,CAAC;IAUxC;;;;;;;OAOG;IACG,kBAAkB,CACpB,MAAM,EAAE,+BAA+B,GACxC,OAAO,CAAC,4BAA4B,CAAC;IAUxC;;;;;;;;OAQG;IACG,0BAA0B,CAC5B,MAAM,EAAE,uCAAuC,GAChD,OAAO,CAAC,4BAA4B,CAAC;IAUxC;;;;;;;;;;;;OAYG;IACG,0BAA0B,CAC5B,YAAY,EAAE,SAAS,yBAAyB,EAAE,GACnD,OAAO,CAAC,IAAI,CAAC;IAchB,4CAA4C;IAC5C,KAAK,IAAI,IAAI;CAGhB"}

package/dist/client/grpc.js

@@ -1,8 +1,7 @@
-export { CantonGrpcClient } from '../I7FWUGTT.js';
+export { CantonGrpcClient } from '../IA2UQ4WQ.js';
 import '../RVQWP4JU.js';
 import '../VJ4PVZYL.js';
 import '../QAKOQQ7E.js';
-import '../MIPVIR2V.js';
 import '../WLV6EHDB.js';
 import '../CMDFOA7C.js';
 import '../3K5JL2TP.js';

package/dist/client/index.js

@@ -287,11 +287,10 @@ import '../5NV4O3K7.js';
 import '../XOLOXB7M.js';
 import '../KBNUN3MF.js';
 export { AMULET_INSTRUMENT_ID, fetchAmuletContext, fetchDsoParty, injectExternalPartyAmuletRules } from '../DSYVONFP.js';
-export { CantonGrpcClient } from '../I7FWUGTT.js';
+export { CantonGrpcClient } from '../IA2UQ4WQ.js';
 import '../RVQWP4JU.js';
 import '../VJ4PVZYL.js';
 export { computeDecentralizedNamespace, computeMultiTransactionHash } from '../QAKOQQ7E.js';
-import '../MIPVIR2V.js';
 export { cantonMultihash, computeCantonFingerprint, computePublicKeyFingerprint, extractTransactions } from '../WLV6EHDB.js';
 import '../CMDFOA7C.js';
 import '../3K5JL2TP.js';

package/dist/client/topology/types.d.ts

@@ -106,8 +106,6 @@ export type CantonGrpcClientOptions = {
     host: string;
     /** Supplies a fresh Bearer token before each RPC call. */
     tokenProvider: TokenProvider;
-    /** Ledger API user ID used for user-management RPCs (e.g. `GrantUserRights`). */
-    userId: string;
     /**
      * Logical synchronizer id used as the topology store. When omitted, the first
      * synchronizer the participant is connected to (via `ListConnectedSynchronizers`)

package/dist/client/topology/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/client/topology/types.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,KAAK,2BAA2B,EAChC,KAAK,iDAAiD,EACzD,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,8GAA8G;AAC9G,MAAM,MAAM,4BAA4B,GAAG,iDAAiD,CAAC;AAE7F,iFAAiF;AACjF,MAAM,MAAM,iCAAiC,GAAG;IAC5C,gHAAgH;IAChH,YAAY,EAAE,UAAU,CAAC;IACzB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,+FAA+F;AAC/F,MAAM,MAAM,8CAA8C,GAAG;IACzD,kFAAkF;IAClF,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,8CAA8C,GACtD,8CAA8C,GAAG;IAC7C,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEN,iFAAiF;AACjF,MAAM,MAAM,+BAA+B,GAAG;IAC1C,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,oBAAoB,EAAE,UAAU,EAAE,CAAC;IACnC,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,iFAAiF;AACjF,MAAM,MAAM,uCAAuC,GAAG;IAClD,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,uEAAuE;AACvE,MAAM,MAAM,wBAAwB,GAAG;IACnC,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,oBAAoB,EAAE,MAAM,CAAC;IAC7B,0DAA0D;IAC1D,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,qFAAqF;AACrF,MAAM,MAAM,qCAAqC,GAAG;IAChD,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,uEAAuE;AACvE,MAAM,MAAM,sBAAsB,GAAG;IACjC,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,+EAA+E;AAC/E,MAAM,MAAM,8BAA8B,GAAG;IACzC,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,YAAY,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,2BAA2B,CAAA;KAAE,EAAE,CAAC;IACpF,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,yDAAyD;AACzD,MAAM,MAAM,UAAU,GAAG;IACrB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,2DAA2D;AAC3D,MAAM,MAAM,uBAAuB,GAAG;IAClC,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,aAAa,EAAE,aAAa,CAAC;IAC7B,iFAAiF;IACjF,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,kDAAkD;IAClD,iBAAiB,CAAC,EAAE,aAAa,CAAC;CACrC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/client/topology/types.ts"],"names":[],"mappings":"AAAA,OAAO,EACH,KAAK,2BAA2B,EAChC,KAAK,iDAAiD,EACzD,MAAM,mCAAmC,CAAC;AAC3C,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAC;AAEnD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE/D,8GAA8G;AAC9G,MAAM,MAAM,4BAA4B,GAAG,iDAAiD,CAAC;AAE7F,iFAAiF;AACjF,MAAM,MAAM,iCAAiC,GAAG;IAC5C,gHAAgH;IAChH,YAAY,EAAE,UAAU,CAAC;IACzB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,+FAA+F;AAC/F,MAAM,MAAM,8CAA8C,GAAG;IACzD,kFAAkF;IAClF,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,8CAA8C;IAC9C,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,8CAA8C,GACtD,8CAA8C,GAAG;IAC7C,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAEN,iFAAiF;AACjF,MAAM,MAAM,+BAA+B,GAAG;IAC1C,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,uCAAuC;IACvC,oBAAoB,EAAE,UAAU,EAAE,CAAC;IACnC,4CAA4C;IAC5C,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,iFAAiF;AACjF,MAAM,MAAM,uCAAuC,GAAG;IAClD,0CAA0C;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,iCAAiC;IACjC,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,MAAM,CAAC,EAAE,MAAM,CAAC;CACnB,CAAC;AAEF,uEAAuE;AACvE,MAAM,MAAM,wBAAwB,GAAG;IACnC,wDAAwD;IACxD,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,oBAAoB,EAAE,MAAM,CAAC;IAC7B,0DAA0D;IAC1D,gBAAgB,EAAE,OAAO,CAAC;IAC1B,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,qFAAqF;AACrF,MAAM,MAAM,qCAAqC,GAAG;IAChD,2CAA2C;IAC3C,SAAS,EAAE,MAAM,CAAC;IAClB,mDAAmD;IACnD,SAAS,EAAE,MAAM,CAAC;IAClB,oDAAoD;IACpD,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,uEAAuE;AACvE,MAAM,MAAM,sBAAsB,GAAG;IACjC,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,+CAA+C;IAC/C,SAAS,EAAE,MAAM,CAAC;IAClB,6DAA6D;IAC7D,sBAAsB,EAAE,MAAM,EAAE,CAAC;IACjC,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,+EAA+E;AAC/E,MAAM,MAAM,8BAA8B,GAAG;IACzC,6BAA6B;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,oDAAoD;IACpD,SAAS,EAAE,MAAM,CAAC;IAClB,gEAAgE;IAChE,YAAY,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,2BAA2B,CAAA;KAAE,EAAE,CAAC;IACpF,gDAAgD;IAChD,MAAM,EAAE,MAAM,CAAC;CAClB,CAAC;AAEF,yDAAyD;AACzD,MAAM,MAAM,UAAU,GAAG;IACrB,mDAAmD;IACnD,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,yCAAyC;IACzC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,yCAAyC;IACzC,UAAU,CAAC,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,2DAA2D;AAC3D,MAAM,MAAM,uBAAuB,GAAG;IAClC,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,0DAA0D;IAC1D,aAAa,EAAE,aAAa,CAAC;IAC7B;;;;OAIG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,2EAA2E;IAC3E,GAAG,CAAC,EAAE,UAAU,CAAC;IACjB,kDAAkD;IAClD,iBAAiB,CAAC,EAAE,aAAa,CAAC;CACrC,CAAC"}

package/dist/index.js

@@ -10,7 +10,7 @@ export { buildMultiTransactionSignatures, buildSignedTransaction } from './WKC6X
 import './IIWYAFUO.js';
 export { createContractAddressResolver, isConcreteActiveContractRef, isRefAlive, matchesContractStateFilter, queryLiveContractIdsForRef, queryLiveContractsForRef } from './VAFLUPQJ.js';
 export { parseMinFeeValue } from './M3GPMXME.js';
-export { createCantonChainProvider, parseCantonChainUri } from './KYBLHMHO.js';
+export { createCantonChainProvider, parseCantonChainUri } from './AH32N3GF.js';
 export { CantonClient } from './WAKNWPCR.js';
 import './MNIG6M5P.js';
 import './6CPYXAOF.js';
@@ -297,17 +297,16 @@ import './5NV4O3K7.js';
 import './XOLOXB7M.js';
 export { Configuration, ResponseError } from './KBNUN3MF.js';
 export { AMULET_INSTRUMENT_ID, fetchAmuletContext, fetchDsoParty, injectExternalPartyAmuletRules } from './DSYVONFP.js';
-export { CantonGrpcClient } from './I7FWUGTT.js';
+export { CantonGrpcClient } from './IA2UQ4WQ.js';
 import './RVQWP4JU.js';
 import './VJ4PVZYL.js';
 export { computeDecentralizedNamespace, computeMultiTransactionHash } from './QAKOQQ7E.js';
-import './MIPVIR2V.js';
 export { cantonMultihash, computeCantonFingerprint, computePublicKeyFingerprint, extractTransactions } from './WLV6EHDB.js';
 export { CommandStatus, IntLikeSchema, buildTemplateId, canonicalizeDamlDecimal, smallestUnitsToDamlDecimal } from './4WZTQJXP.js';
 import './35ELVFTS.js';
+import './RSV7WS7X.js';
 export { ClientCredentialsTokenProvider } from './V2H2WXKE.js';
 export { LocalTokenProvider } from './SCEF7TLZ.js';
-import './RSV7WS7X.js';
 export { CANTON_CID_ADDRESS_PREFIX, CANTON_PARTY_ADDRESS_PREFIX, cantonCidAddress, cantonDeferredAddress, cantonPartyAddress, isCantonAddress, toCantonAddress } from './TM5LJKTE.js';
 export { parseAmuletAmount, parseAmuletDecimal } from './CXTOAS7N.js';
 export { SECP256K1_SPKI_DER_HEADER, SECP256K1_SPKI_DER_HEADER_HEX, derEncodeSignature, publicKeyToSpkiDer } from './CMDFOA7C.js';

package/dist/provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,KAAK,oCAAoC,EAC5C,MAAM,0CAA0C,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAOxD;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAC9B,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,aAAa,EAAE,aAAa,CAAC;IAC7B,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAMF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,qGAAqG;IACrG,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,MAAM,CAAC,EAAE,oCAAoC,CAAC;CACjD,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CA8DrE;AAMD,MAAM,MAAM,gCAAgC,GAAG;IAC3C,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,EACtC,GAAG,EACH,OAAO,GACV,EAAE,gCAAgC,GAAG,mBAAmB,CA4BxD"}
+{"version":3,"file":"provider.d.ts","sourceRoot":"","sources":["../src/provider.ts"],"names":[],"mappings":"AAAA,OAAO,EAEH,KAAK,oCAAoC,EAC5C,MAAM,0CAA0C,CAAC;AAElD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,OAAO,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AACjD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAOxD;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAC9B,MAAM,EAAE,aAAa,CAAC;IACtB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,aAAa,EAAE,aAAa,CAAC;IAC7B,sEAAsE;IACtE,SAAS,EAAE,MAAM,CAAC;CACrB,CAAC;AAMF,MAAM,MAAM,oBAAoB,GAAG;IAC/B,qEAAqE;IACrE,UAAU,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,YAAY,EAAE,MAAM,CAAC;IACrB,wDAAwD;IACxD,MAAM,EAAE,MAAM,CAAC;IACf,+EAA+E;IAC/E,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,qGAAqG;IACrG,SAAS,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,MAAM,CAAC,EAAE,oCAAoC,CAAC;CACjD,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,oBAAoB,CA8DrE;AAMD,MAAM,MAAM,gCAAgC,GAAG;IAC3C,8CAA8C;IAC9C,GAAG,EAAE,MAAM,CAAC;IACZ,8EAA8E;IAC9E,OAAO,EAAE,OAAO,CAAC;CACpB,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,EACtC,GAAG,EACH,OAAO,GACV,EAAE,gCAAgC,GAAG,mBAAmB,CA2BxD"}

package/dist/provider.js

@@ -1,4 +1,4 @@
-export { createCantonChainProvider, parseCantonChainUri } from './KYBLHMHO.js';
+export { createCantonChainProvider, parseCantonChainUri } from './AH32N3GF.js';
 import './WAKNWPCR.js';
 import './MNIG6M5P.js';
 import './6CPYXAOF.js';
@@ -285,11 +285,10 @@ import './5NV4O3K7.js';
 import './XOLOXB7M.js';
 import './KBNUN3MF.js';
 import './DSYVONFP.js';
-import './I7FWUGTT.js';
+import './IA2UQ4WQ.js';
 import './RVQWP4JU.js';
 import './VJ4PVZYL.js';
 import './QAKOQQ7E.js';
-import './MIPVIR2V.js';
 import './WLV6EHDB.js';
 import './V2H2WXKE.js';
 import './SCEF7TLZ.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@layerzerolabs/common-canton",
-  "version": "1.2.30",
+  "version": "1.2.32",
   "private": false,
   "description": "Canton VM client and utilities",
   "license": "MIT",
@@ -11,6 +11,11 @@
       "import": "./dist/index.js",
       "default": "./dist/index.js"
     },
+    "./browser": {
+      "types": "./dist/browser.d.ts",
+      "import": "./dist/browser.js",
+      "default": "./dist/browser.js"
+    },
     "./types": {
       "types": "./dist/types.d.ts",
       "import": "./dist/types.js",
@@ -32,22 +37,22 @@
     "@protobuf-ts/runtime-rpc": "^2.11.1",
     "es-toolkit": "^1.39.10",
     "zod": "4.3.5",
-    "@layerzerolabs/common-chain-model": "1.2.30",
-    "@layerzerolabs/common-error-utils": "1.2.30",
-    "@layerzerolabs/common-encoding-utils": "1.2.30",
-    "@layerzerolabs/typescript-utils": "1.2.30"
+    "@layerzerolabs/common-chain-model": "1.2.32",
+    "@layerzerolabs/common-encoding-utils": "1.2.32",
+    "@layerzerolabs/common-error-utils": "1.2.32",
+    "@layerzerolabs/typescript-utils": "1.2.32"
   },
   "devDependencies": {
-    "@vitest/coverage-v8": "3.2.6",
+    "@vitest/coverage-v8": "4.1.10",
     "eslint": "9.39.1",
     "tsup": "^8.4.0",
     "typescript": "^6.0.3",
-    "vitest": "^3.2.6",
-    "@layerzerolabs/eslint-configuration": "^1.2.30",
-    "@layerzerolabs/typescript-configuration": "1.2.30",
-    "@layerzerolabs/vitest-configuration": "1.2.30",
-    "@layerzerolabs/vm-tooling-canton": "1.2.30",
-    "@layerzerolabs/tsup-configuration": "1.2.30"
+    "vitest": "^4.1.10",
+    "@layerzerolabs/eslint-configuration": "^1.2.32",
+    "@layerzerolabs/typescript-configuration": "1.2.32",
+    "@layerzerolabs/tsup-configuration": "1.2.32",
+    "@layerzerolabs/vm-tooling-canton": "1.2.32",
+    "@layerzerolabs/vitest-configuration": "1.2.32"
   },
   "publishConfig": {
     "access": "public",
@@ -58,7 +63,8 @@
       "audit-external",
       "console-pen-test",
       "gasolina-audit",
-      "layerzero-ver"
+      "layerzero-ver",
+      "lz-labs-sidecar"
     ]
   },
   "scripts": {

package/src/browser.ts

@@ -0,0 +1,9 @@
+/**
+ * Browser-safe Canton utilities.
+ *
+ * This entrypoint intentionally excludes the Canton ledger client and its Node-only
+ * transport dependencies. It may be used by frontend packages that need the
+ * deterministic encoding and signature helpers.
+ */
+export * from './crypto';
+export * from './daml-serde';

package/src/client/grpc.ts

@@ -42,7 +42,6 @@ import {
     headStateBaseQuery,
     synchronizerStore,
 } from './topology/utils';
-import { UserManagementServiceClient } from './user-management';
 import { computePublicKeyFingerprint } from './utils';
 
 /** Default gRPC client options: 128 MiB message-size limits for large admin responses. */
@@ -65,9 +64,7 @@ export class CantonGrpcClient {
     readonly #topologyRead: TopologyManagerReadServiceClient;
     readonly #topologyWrite: TopologyManagerWriteServiceClient;
     readonly #connectivity: SynchronizerConnectivityServiceClient;
-    readonly #userManagement: UserManagementServiceClient;
     readonly #tokenProvider: TokenProvider;
-    readonly #userId: string;
     #synchronizerId?: string;
 
     /**
@@ -75,7 +72,6 @@ export class CantonGrpcClient {
      */
     constructor(opts: CantonGrpcClientOptions) {
         this.#tokenProvider = opts.tokenProvider;
-        this.#userId = opts.userId;
         this.#synchronizerId = opts.synchronizerId;
         this.#transport = new GrpcTransport({
             host: opts.host,
@@ -85,7 +81,6 @@ export class CantonGrpcClient {
         this.#topologyRead = new TopologyManagerReadServiceClient(this.#transport);
         this.#topologyWrite = new TopologyManagerWriteServiceClient(this.#transport);
         this.#connectivity = new SynchronizerConnectivityServiceClient(this.#transport);
-        this.#userManagement = new UserManagementServiceClient(this.#transport);
     }
 
     /** Returns per-RPC gRPC metadata with a fresh Bearer token. */
@@ -437,17 +432,6 @@ export class CantonGrpcClient {
         );
     }
 
-    async grantCanActAs(partyId: string): Promise<void> {
-        await this.#userManagement.grantUserRights(
-            {
-                userId: this.#userId,
-                rights: [{ canActAs: { party: partyId } }],
-                identityProviderId: '',
-            },
-            { meta: await this.#getMeta() },
-        );
-    }
-
     /** Closes the underlying gRPC transport. */
     close(): void {
         this.#transport.close();

package/src/client/topology/types.ts

@@ -120,8 +120,6 @@ export type CantonGrpcClientOptions = {
     host: string;
     /** Supplies a fresh Bearer token before each RPC call. */
     tokenProvider: TokenProvider;
-    /** Ledger API user ID used for user-management RPCs (e.g. `GrantUserRights`). */
-    userId: string;
     /**
      * Logical synchronizer id used as the topology store. When omitted, the first
      * synchronizer the participant is connected to (via `ListConnectedSynchronizers`)

package/src/provider.ts

@@ -163,7 +163,6 @@ export function createCantonChainProvider({
     const grpcClient = new CantonGrpcClient({
         host: params.adminApiHost,
         tokenProvider,
-        userId: params.userId,
     });
 
     return {

package/dist/I7FWUGTT.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/client/grpc.ts"],"names":["DEFAULT_GRPC_CLIENT_OPTIONS","CantonGrpcClient","opts","tokenProvider","userId","synchronizerId","GrpcTransport","host","channelCredentials","buildChannelCredentials","tls","clientOptions","grpcClientOptions","TopologyManagerReadServiceClient","TopologyManagerWriteServiceClient","SynchronizerConnectivityServiceClient","UserManagementServiceClient","token","getToken","Authorization","response","listConnectedSynchronizers","meta","synchronizer","connectedSynchronizers","CantonProtocolError","mapping","serial","generateTransactions","GenerateTransactionsRequest","create","proposals","GenerateTransactionsRequest_Proposal","operation","Enums_TopologyChangeOp","ADD_REPLACE","store","synchronizerStore","generated","generatedTransactions","getNamespaceDelegation","namespaceFingerprint","listNamespaceDelegation","ListNamespaceDelegationRequest","baseQuery","headStateBaseQuery","filterNamespace","filterTargetKeyFingerprint","results","flatMap","result","item","publicKey","targetKey","namespace","targetKeyFingerprint","computePublicKeyFingerprint","isRootDelegation","context","getDecentralizedNamespaceDefinition","listDecentralizedNamespaceDefinition","ListDecentralizedNamespaceDefinitionRequest","decentralizedNamespace","threshold","owners","getPartyToKeyMapping","partyId","listPartyToKeyMapping","ListPartyToKeyMappingRequest","filterParty","party","signingKeyFingerprints","signingKeys","map","key","getPartyToParticipantMapping","listPartyToParticipant","ListPartyToParticipantRequest","filterParticipant","participants","participant","participantUid","permission","createNamespaceDelegationTx","params","buildNamespaceDelegationMapping","publicKeyDer","createDecentralizedNamespaceDefinitionTx","computeDecentralizedNamespace","buildDecentralizedNamespaceDefinitionMapping","updateDecentralizedNamespaceDefinitionTx","createPartyToKeyTx","buildPartyToKeyMapping","signingPublicKeyDers","createPartyToParticipantTx","buildPartyToParticipantMapping","participantIds","submitTopologyTransactions","transactions","length","CantonError","addTransactions","AddTransactionsRequest","grantCanActAs","grantUserRights","rights","canActAs","identityProviderId","close"],"mappings":";;;;;;;;;;AAgDA,IAAMA,2BAAAA,GAA8B;AAChC,EAAA,iCAAA,EAAmC,MAAM,IAAA,GAAO,IAAA;AAChD,EAAA,8BAAA,EAAgC,MAAM,IAAA,GAAO;AACjD,CAAA;AAWO,IAAMC,mBAAN,MAAMA;EA9Db;;;AA+Da,EAAA,UAAA;AACA,EAAA,aAAA;AACA,EAAA,cAAA;AACA,EAAA,aAAA;AACA,EAAA,eAAA;AACA,EAAA,cAAA;AACA,EAAA,OAAA;AACT,EAAA,eAAA;;;;AAKA,EAAA,WAAA,CAAYC,IAAAA,EAA+B;AACvC,IAAA,IAAA,CAAK,iBAAiBA,IAAAA,CAAKC,aAAAA;AAC3B,IAAA,IAAA,CAAK,UAAUD,IAAAA,CAAKE,MAAAA;AACpB,IAAA,IAAA,CAAK,kBAAkBF,IAAAA,CAAKG,cAAAA;AAC5B,IAAA,IAAA,CAAK,UAAA,GAAa,IAAIC,aAAAA,CAAc;AAChCC,MAAAA,IAAAA,EAAML,IAAAA,CAAKK,IAAAA;AACXC,MAAAA,kBAAAA,EAAoBC,uBAAAA,CAAwBP,IAAAA,CAAKK,IAAAA,EAAML,IAAAA,CAAKQ,GAAG,CAAA;AAC/DC,MAAAA,aAAAA,EAAeT,KAAKU,iBAAAA,IAAqBZ;KAC7C,CAAA;AACA,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAIa,gCAAAA,CAAiC,IAAA,CAAK,UAAU,CAAA;AACzE,IAAA,IAAA,CAAK,cAAA,GAAiB,IAAIC,iCAAAA,CAAkC,IAAA,CAAK,UAAU,CAAA;AAC3E,IAAA,IAAA,CAAK,aAAA,GAAgB,IAAIC,qCAAAA,CAAsC,IAAA,CAAK,UAAU,CAAA;AAC9E,IAAA,IAAA,CAAK,eAAA,GAAkB,IAAIC,2BAAAA,CAA4B,IAAA,CAAK,UAAU,CAAA;AAC1E,EAAA;;AAGA,EAAA,MAAM,QAAA,GAAQ;AACV,IAAA,MAAMC,KAAAA,GAAQ,MAAM,IAAA,CAAK,cAAA,CAAeC,QAAAA,EAAQ;AAChD,IAAA,OAAO;AAAEC,MAAAA,aAAAA,EAAe,UAAUF,KAAAA,CAAAA;AAAQ,KAAA;AAC9C,EAAA;;;;;;AAOA,EAAA,MAAM,kBAAA,GAAkB;AACpB,IAAA,IAAI,KAAK,eAAA,EAAiB;AACtB,MAAA,OAAO,IAAA,CAAK,eAAA;AAChB,IAAA;AACA,IAAA,IAAA,CAAK,eAAA,GAAkB,MAAM,IAAA,CAAK,uBAAA,EAAuB;AACzD,IAAA,OAAO,IAAA,CAAK,eAAA;AAChB,EAAA;;;;;;AAOA,EAAA,MAAM,uBAAA,GAAuB;AACzB,IAAA,MAAM,EAAEG,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAcC,0BAAAA,CAC1C,EAAC,EACD;MAAEC,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAElC,IAAA,KAAA,MAAWC,YAAAA,IAAgBH,SAASI,sBAAAA,EAAwB;AACxD,MAAA,IAAID,aAAalB,cAAAA,EAAgB;AAC7B,QAAA,OAAOkB,YAAAA,CAAalB,cAAAA;AACxB,MAAA;AACJ,IAAA;AACA,IAAA,MAAM,IAAIoB,oBAAoB,kDAAA,CAAA;AAClC,EAAA;;;;;;;;;;EAWA,MAAM,4BAAA,CACFpB,cAAAA,EACAqB,OAAAA,EACAC,MAAAA,EAAc;AAEd,IAAA,MAAM,EAAEP,UAAQ,GAAK,MAAM,KAAK,cAAA,CAAeQ,oBAAAA,CAC3CC,4BAA4BC,MAAAA,CAAO;MAC/BC,SAAAA,EAAW;AACPC,QAAAA,oCAAAA,CAAqCF,MAAAA,CAAO;AACxCG,UAAAA,SAAAA,EAAWC,sBAAAA,CAAuBC,WAAAA;AAClCR,UAAAA,MAAAA;AACAD,UAAAA,OAAAA;AACAU,UAAAA,KAAAA,EAAOC,kBAAkBhC,cAAAA;SAC7B;;AAER,KAAA,CAAA,EACA;MAAEiB,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,MAAMgB,SAAAA,GAAYlB,QAAAA,CAASmB,qBAAAA,CAAsB,CAAA,CAAA;AACjD,IAAA,IAAI,CAACD,SAAAA,EAAW;AACZ,MAAA,MAAM,IAAIb,oBAAoB,uDAAA,CAAA;AAClC,IAAA;AACA,IAAA,OAAOa,SAAAA;AACX,EAAA;;;;;;;;;;AAWA,EAAA,MAAME,uBACFC,oBAAAA,EACmC;AACnC,IAAA,MAAMpC,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,EAAEe,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAcsB,uBAAAA,CAC1CC,+BAA+Bb,MAAAA,CAAO;AAClCc,MAAAA,SAAAA,EAAWC,mBAAmBxC,cAAAA,CAAAA;MAC9ByC,eAAAA,EAAiBL,oBAAAA;;MAEjBM,0BAAAA,EAA4B;AAChC,KAAA,CAAA,EACA;MAAEzB,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,OAAOF,QAAAA,CAAS4B,OAAAA,CAAQC,OAAAA,CAAQ,CAACC,MAAAA,KAAAA;AAC7B,MAAA,MAAMC,OAAOD,MAAAA,CAAOC,IAAAA;AACpB,MAAA,MAAMC,SAAAA,GAAYD,MAAME,SAAAA,EAAWD,SAAAA;AACnC,MAAA,IAAI,CAACD,IAAAA,IAAQ,CAACC,SAAAA,EAAW;AACrB,QAAA,OAAO,EAAA;AACX,MAAA;AACA,MAAA,OAAO;AACH,QAAA;AACIE,UAAAA,SAAAA,EAAWH,IAAAA,CAAKG,SAAAA;AAChBC,UAAAA,oBAAAA,EAAsBC,4BAA4BJ,SAAAA,CAAAA;AAClDK,UAAAA,gBAAAA,EAAkBN,IAAAA,CAAKM,gBAAAA;UACvB9B,MAAAA,EAAQuB,MAAAA,CAAOQ,SAAS/B,MAAAA,IAAU;AACtC;;IAER,CAAA,CAAA;AACJ,EAAA;;;;;;;;;;AAWA,EAAA,MAAMgC,oCACFlB,oBAAAA,EACgD;AAChD,IAAA,MAAMpC,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,EAAEe,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAcwC,oCAAAA,CAC1CC,4CAA4C/B,MAAAA,CAAO;AAC/Cc,MAAAA,SAAAA,EAAWC,mBAAmBxC,cAAAA,CAAAA;MAC9ByC,eAAAA,EAAiBL;AACrB,KAAA,CAAA,EACA;MAAEnB,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,OAAOF,QAAAA,CAAS4B,OAAAA,CAAQC,OAAAA,CAAQ,CAACC,MAAAA,KAAAA;AAC7B,MAAA,MAAMC,OAAOD,MAAAA,CAAOC,IAAAA;AACpB,MAAA,IAAI,CAACA,IAAAA,EAAM;AACP,QAAA,OAAO,EAAA;AACX,MAAA;AACA,MAAA,OAAO;AACH,QAAA;AACIG,UAAAA,SAAAA,EAAWH,IAAAA,CAAKW,sBAAAA;AAChBC,UAAAA,SAAAA,EAAWZ,IAAAA,CAAKY,SAAAA;UAChBC,MAAAA,EAAQ;eAAIb,IAAAA,CAAKa;;UACjBrC,MAAAA,EAAQuB,MAAAA,CAAOQ,SAAS/B,MAAAA,IAAU;AACtC;;IAER,CAAA,CAAA;AACJ,EAAA;;;;;;;;;AAUA,EAAA,MAAMsC,qBAAqBC,OAAAA,EAAoD;AAC3E,IAAA,MAAM7D,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,EAAEe,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAc+C,qBAAAA,CAC1CC,6BAA6BtC,MAAAA,CAAO;AAChCc,MAAAA,SAAAA,EAAWC,mBAAmBxC,cAAAA,CAAAA;MAC9BgE,WAAAA,EAAaH;AACjB,KAAA,CAAA,EACA;MAAE5C,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,OAAOF,QAAAA,CAAS4B,OAAAA,CAAQC,OAAAA,CAAQ,CAACC,MAAAA,KAAAA;AAC7B,MAAA,MAAMC,OAAOD,MAAAA,CAAOC,IAAAA;AACpB,MAAA,IAAI,CAACA,IAAAA,EAAM;AACP,QAAA,OAAO,EAAA;AACX,MAAA;AACA,MAAA,OAAO;AACH,QAAA;AACImB,UAAAA,KAAAA,EAAOnB,IAAAA,CAAKmB,KAAAA;AACZP,UAAAA,SAAAA,EAAWZ,IAAAA,CAAKY,SAAAA;UAChBQ,sBAAAA,EAAwBpB,IAAAA,CAAKqB,YAAYC,GAAAA,CAAI,CAACC,QAC1ClB,2BAAAA,CAA4BkB,GAAAA,CAAItB,SAAS,CAAA,CAAA;UAE7CzB,MAAAA,EAAQuB,MAAAA,CAAOQ,SAAS/B,MAAAA,IAAU;AACtC;;IAER,CAAA,CAAA;AACJ,EAAA;;;;;;;;;;EAWA,MAAMgD,4BAAAA,CACFT,OAAAA,EACAnC,SAAAA,GAAY,KAAA,EAC6B;AACzC,IAAA,MAAM1B,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,EAAEe,UAAQ,GAAK,MAAM,KAAK,aAAA,CAAcwD,sBAAAA,CAC1CC,8BAA8B/C,MAAAA,CAAO;MACjCc,SAAAA,EAAWC,kBAAAA,CAAmBxC,gBAAgB0B,SAAAA,CAAAA;MAC9CsC,WAAAA,EAAaH,OAAAA;;MAEbY,iBAAAA,EAAmB;AACvB,KAAA,CAAA,EACA;MAAExD,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAGlC,IAAA,OAAOF,QAAAA,CAAS4B,OAAAA,CAAQC,OAAAA,CAAQ,CAACC,MAAAA,KAAAA;AAC7B,MAAA,MAAMC,OAAOD,MAAAA,CAAOC,IAAAA;AACpB,MAAA,IAAI,CAACA,IAAAA,EAAM;AACP,QAAA,OAAO,EAAA;AACX,MAAA;AACA,MAAA,OAAO;AACH,QAAA;AACImB,UAAAA,KAAAA,EAAOnB,IAAAA,CAAKmB,KAAAA;AACZP,UAAAA,SAAAA,EAAWZ,IAAAA,CAAKY,SAAAA;AAChBgB,UAAAA,YAAAA,EAAc5B,IAAAA,CAAK4B,YAAAA,CAAaN,GAAAA,CAAI,CAACO,WAAAA,MAAiB;AAClDC,YAAAA,cAAAA,EAAgBD,WAAAA,CAAYC,cAAAA;AAC5BC,YAAAA,UAAAA,EAAYF,WAAAA,CAAYE;WAC5B,CAAA,CAAA;UACAvD,MAAAA,EAAQuB,MAAAA,CAAOQ,SAAS/B,MAAAA,IAAU;AACtC;;IAER,CAAA,CAAA;AACJ,EAAA;;;;;;;;;;AAWA,EAAA,MAAMwD,4BACFC,MAAAA,EACqC;AACrC,IAAA,MAAM/E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMqB,OAAAA,GAAU2D,+BAAAA,CAAgCD,MAAAA,CAAOE,YAAY,CAAA;AACnE,IAAA,OAAO,KAAK,4BAAA,CAA6BjF,cAAAA,EAAgBqB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;;;;;;;;;;AAWA,EAAA,MAAM4D,yCACFH,MAAAA,EACqC;AACrC,IAAA,MAAM/E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMyD,sBAAAA,GAAyB0B,6BAAAA,CAA8BJ,MAAAA,CAAOpB,MAAM,CAAA;AAC1E,IAAA,MAAMtC,UAAU+D,4CAAAA,CACZ3B,sBAAAA,EACAsB,MAAAA,CAAOrB,SAAAA,EACPqB,OAAOpB,MAAM,CAAA;AAEjB,IAAA,OAAO,KAAK,4BAAA,CAA6B3D,cAAAA,EAAgBqB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;AAEA,EAAA,MAAM+D,yCACFN,MAAAA,EACqC;AACrC,IAAA,MAAM/E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMqB,UAAU+D,4CAAAA,CACZL,MAAAA,CAAO9B,WACP8B,MAAAA,CAAOrB,SAAAA,EACPqB,OAAOpB,MAAM,CAAA;AAEjB,IAAA,OAAO,KAAK,4BAAA,CAA6B3D,cAAAA,EAAgBqB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;;;;;;;;;AAUA,EAAA,MAAMgE,mBACFP,MAAAA,EACqC;AACrC,IAAA,MAAM/E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMqB,UAAUkE,sBAAAA,CACZR,MAAAA,CAAOlB,SACPkB,MAAAA,CAAOS,oBAAAA,EACPT,OAAOrB,SAAS,CAAA;AAEpB,IAAA,OAAO,KAAK,4BAAA,CAA6B1D,cAAAA,EAAgBqB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;;;;;;;;;;AAWA,EAAA,MAAMmE,2BACFV,MAAAA,EACqC;AACrC,IAAA,MAAM/E,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAMqB,UAAUqE,8BAAAA,CACZX,MAAAA,CAAOlB,SACPkB,MAAAA,CAAOY,cAAAA,EACPZ,OAAOrB,SAAS,CAAA;AAEpB,IAAA,OAAO,KAAK,4BAAA,CAA6B1D,cAAAA,EAAgBqB,OAAAA,EAAS0D,MAAAA,CAAOzD,UAAU,CAAA,CAAA;AACvF,EAAA;;;;;;;;;;;;;;AAeA,EAAA,MAAMsE,2BACFC,YAAAA,EACa;AACb,IAAA,IAAIA,YAAAA,CAAaC,WAAW,CAAA,EAAG;AAC3B,MAAA,MAAM,IAAIC,YAAY,mDAAA,CAAA;AAC1B,IAAA;AACA,IAAA,MAAM/F,cAAAA,GAAiB,MAAM,IAAA,CAAK,kBAAA,EAAkB;AACpD,IAAA,MAAM,IAAA,CAAK,cAAA,CAAegG,eAAAA,CACtBC,sBAAAA,CAAuBxE,MAAAA,CAAO;MAC1BoE,YAAAA,EAAc;AAAIA,QAAAA,GAAAA;;AAClB9D,MAAAA,KAAAA,EAAOC,kBAAkBhC,cAAAA;AAC7B,KAAA,CAAA,EACA;MAAEiB,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAEtC,EAAA;AAEA,EAAA,MAAMiF,cAAcrC,OAAAA,EAAgC;AAChD,IAAA,MAAM,IAAA,CAAK,gBAAgBsC,eAAAA,CACvB;AACIpG,MAAAA,MAAAA,EAAQ,IAAA,CAAK,OAAA;MACbqG,MAAAA,EAAQ;AAAC,QAAA;UAAEC,QAAAA,EAAU;YAAEpC,KAAAA,EAAOJ;AAAQ;AAAE;;MACxCyC,kBAAAA,EAAoB;KACxB,EACA;MAAErF,IAAAA,EAAM,MAAM,KAAK,QAAA;KAAW,CAAA;AAEtC,EAAA;;EAGAsF,KAAAA,GAAc;AACV,IAAA,IAAA,CAAK,WAAWA,KAAAA,EAAK;AACzB,EAAA;AACJ","file":"I7FWUGTT.js","sourcesContent":["import {\n    AddTransactionsRequest,\n    Enums_TopologyChangeOp,\n    GenerateTransactionsRequest,\n    GenerateTransactionsRequest_Proposal,\n    ListDecentralizedNamespaceDefinitionRequest,\n    ListNamespaceDelegationRequest,\n    ListPartyToKeyMappingRequest,\n    ListPartyToParticipantRequest,\n    type SignedTopologyTransaction,\n    TopologyManagerReadServiceClient,\n    TopologyManagerWriteServiceClient,\n    type TopologyMapping,\n} from '@canton-network/core-ledger-proto';\nimport { GrpcTransport } from '@protobuf-ts/grpc-transport';\n\nimport type { TokenProvider } from '../auth/token-provider';\nimport { CantonError, CantonProtocolError } from '../errors';\nimport {\n    buildDecentralizedNamespaceDefinitionMapping,\n    buildNamespaceDelegationMapping,\n    buildPartyToKeyMapping,\n    buildPartyToParticipantMapping,\n} from './topology/mappings';\nimport { SynchronizerConnectivityServiceClient } from './topology/synchronizer-connectivity';\nimport type {\n    CantonGrpcClientOptions,\n    CreateDecentralizedNamespaceDefinitionTxParams,\n    CreateNamespaceDelegationTxParams,\n    CreatePartyToKeyMappingTxParams,\n    CreatePartyToParticipantMappingTxParams,\n    DecentralizedNamespaceDefinitionState,\n    GeneratedTopologyTransaction,\n    NamespaceDelegationState,\n    PartyToKeyMappingState,\n    PartyToParticipantMappingState,\n    UpdateDecentralizedNamespaceDefinitionTxParams,\n} from './topology/types';\nimport {\n    buildChannelCredentials,\n    computeDecentralizedNamespace,\n    headStateBaseQuery,\n    synchronizerStore,\n} from './topology/utils';\nimport { UserManagementServiceClient } from './user-management';\nimport { computePublicKeyFingerprint } from './utils';\n\n/** Default gRPC client options: 128 MiB message-size limits for large admin responses. */\nconst DEFAULT_GRPC_CLIENT_OPTIONS = {\n    'grpc.max_receive_message_length': 128 * 1024 * 1024,\n    'grpc.max_send_message_length': 128 * 1024 * 1024,\n} as const;\n\n/**\n * gRPC client for the Canton participant admin Topology Manager API.\n *\n * Exposes read queries for topology mappings and write helpers that call\n * `GenerateTransactions` to produce unsigned topology transactions and\n * `AddTransactions` to submit signed ones.\n *\n * A fresh Bearer token is attached to each RPC via {@link TokenProvider}.\n */\nexport class CantonGrpcClient {\n    readonly #transport: GrpcTransport;\n    readonly #topologyRead: TopologyManagerReadServiceClient;\n    readonly #topologyWrite: TopologyManagerWriteServiceClient;\n    readonly #connectivity: SynchronizerConnectivityServiceClient;\n    readonly #userManagement: UserManagementServiceClient;\n    readonly #tokenProvider: TokenProvider;\n    readonly #userId: string;\n    #synchronizerId?: string;\n\n    /**\n     * @param opts - Admin API host, auth, optional synchronizer id, and optional TLS.\n     */\n    constructor(opts: CantonGrpcClientOptions) {\n        this.#tokenProvider = opts.tokenProvider;\n        this.#userId = opts.userId;\n        this.#synchronizerId = opts.synchronizerId;\n        this.#transport = new GrpcTransport({\n            host: opts.host,\n            channelCredentials: buildChannelCredentials(opts.host, opts.tls),\n            clientOptions: opts.grpcClientOptions ?? DEFAULT_GRPC_CLIENT_OPTIONS,\n        });\n        this.#topologyRead = new TopologyManagerReadServiceClient(this.#transport);\n        this.#topologyWrite = new TopologyManagerWriteServiceClient(this.#transport);\n        this.#connectivity = new SynchronizerConnectivityServiceClient(this.#transport);\n        this.#userManagement = new UserManagementServiceClient(this.#transport);\n    }\n\n    /** Returns per-RPC gRPC metadata with a fresh Bearer token. */\n    async #getMeta(): Promise<Record<string, string>> {\n        const token = await this.#tokenProvider.getToken();\n        return { Authorization: `Bearer ${token}` };\n    }\n\n    /**\n     * Returns the client synchronizer id, discovering it on first use when omitted at construction.\n     *\n     * @throws {CantonProtocolError} If the participant exposes no synchronizer store.\n     */\n    async #getSynchronizerId(): Promise<string> {\n        if (this.#synchronizerId) {\n            return this.#synchronizerId;\n        }\n        this.#synchronizerId = await this.#discoverSynchronizerId();\n        return this.#synchronizerId;\n    }\n\n    /**\n     * Resolves the logical id of the first synchronizer the participant is connected to.\n     *\n     * @throws {CantonProtocolError} If the participant is not connected to any synchronizer.\n     */\n    async #discoverSynchronizerId(): Promise<string> {\n        const { response } = await this.#connectivity.listConnectedSynchronizers(\n            {},\n            { meta: await this.#getMeta() },\n        );\n        for (const synchronizer of response.connectedSynchronizers) {\n            if (synchronizer.synchronizerId) {\n                return synchronizer.synchronizerId;\n            }\n        }\n        throw new CantonProtocolError('Participant is not connected to any synchronizer');\n    }\n\n    /**\n     * Calls `GenerateTransactions` for a single ADD_REPLACE mapping.\n     *\n     * @param synchronizerId - Synchronizer store to target.\n     * @param mapping - Topology mapping to encode into the transaction.\n     * @param serial - Topology serial (`0` lets Canton auto-determine).\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     * @throws {CantonProtocolError} If the RPC returns no generated transaction.\n     */\n    async #generateTopologyTransaction(\n        synchronizerId: string,\n        mapping: TopologyMapping,\n        serial: number,\n    ): Promise<GeneratedTopologyTransaction> {\n        const { response } = await this.#topologyWrite.generateTransactions(\n            GenerateTransactionsRequest.create({\n                proposals: [\n                    GenerateTransactionsRequest_Proposal.create({\n                        operation: Enums_TopologyChangeOp.ADD_REPLACE,\n                        serial,\n                        mapping,\n                        store: synchronizerStore(synchronizerId),\n                    }),\n                ],\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        const generated = response.generatedTransactions[0];\n        if (!generated) {\n            throw new CantonProtocolError('GenerateTransactions returned no topology transaction');\n        }\n        return generated;\n    }\n\n    /**\n     * Lists Namespace Delegation (NSD) mappings for a namespace.\n     *\n     * Queries topology head state on the synchronizer. Returns every result from\n     * the list RPC.\n     *\n     * @param namespaceFingerprint - Namespace to filter on (for root NSD, the owner key fingerprint).\n     * @returns All matching NSD mappings, or an empty array if none exist.\n     */\n    async getNamespaceDelegation(\n        namespaceFingerprint: string,\n    ): Promise<NamespaceDelegationState[]> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const { response } = await this.#topologyRead.listNamespaceDelegation(\n            ListNamespaceDelegationRequest.create({\n                baseQuery: headStateBaseQuery(synchronizerId),\n                filterNamespace: namespaceFingerprint,\n                // Empty string = no target-key filter; return all delegations for this namespace.\n                filterTargetKeyFingerprint: '',\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        return response.results.flatMap((result) => {\n            const item = result.item;\n            const publicKey = item?.targetKey?.publicKey;\n            if (!item || !publicKey) {\n                return [];\n            }\n            return [\n                {\n                    namespace: item.namespace,\n                    targetKeyFingerprint: computePublicKeyFingerprint(publicKey),\n                    isRootDelegation: item.isRootDelegation,\n                    serial: result.context?.serial ?? 0,\n                },\n            ];\n        });\n    }\n\n    /**\n     * Lists Decentralized Namespace Definition (DND) mappings for a namespace.\n     *\n     * Queries topology head state on the synchronizer. For a party id `hint::1220…`,\n     * pass the `1220…` suffix as `namespaceFingerprint`.\n     *\n     * @param namespaceFingerprint - Decentralized namespace fingerprint to filter on.\n     * @returns All matching DND mappings, or an empty array if none exist.\n     */\n    async getDecentralizedNamespaceDefinition(\n        namespaceFingerprint: string,\n    ): Promise<DecentralizedNamespaceDefinitionState[]> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const { response } = await this.#topologyRead.listDecentralizedNamespaceDefinition(\n            ListDecentralizedNamespaceDefinitionRequest.create({\n                baseQuery: headStateBaseQuery(synchronizerId),\n                filterNamespace: namespaceFingerprint,\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        return response.results.flatMap((result) => {\n            const item = result.item;\n            if (!item) {\n                return [];\n            }\n            return [\n                {\n                    namespace: item.decentralizedNamespace,\n                    threshold: item.threshold,\n                    owners: [...item.owners],\n                    serial: result.context?.serial ?? 0,\n                },\n            ];\n        });\n    }\n\n    /**\n     * Lists Party-to-Key (PTK) mappings for a party.\n     *\n     * Queries topology head state on the synchronizer.\n     *\n     * @param partyId - Full party identifier (e.g. `hint::1220…`).\n     * @returns All matching PTK mappings, or an empty array if none exist.\n     */\n    async getPartyToKeyMapping(partyId: string): Promise<PartyToKeyMappingState[]> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const { response } = await this.#topologyRead.listPartyToKeyMapping(\n            ListPartyToKeyMappingRequest.create({\n                baseQuery: headStateBaseQuery(synchronizerId),\n                filterParty: partyId,\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        return response.results.flatMap((result) => {\n            const item = result.item;\n            if (!item) {\n                return [];\n            }\n            return [\n                {\n                    party: item.party,\n                    threshold: item.threshold,\n                    signingKeyFingerprints: item.signingKeys.map((key) =>\n                        computePublicKeyFingerprint(key.publicKey),\n                    ),\n                    serial: result.context?.serial ?? 0,\n                },\n            ];\n        });\n    }\n\n    /**\n     * Lists Party-to-Participant (PTP) mappings for a party.\n     *\n     * Queries topology head state on the synchronizer.\n     *\n     * @param partyId - Full party identifier (e.g. `hint::1220…`).\n     * @param proposals - If `true`, query pending proposals instead of authorized mappings.\n     * @returns All matching PTP mappings, or an empty array if none exist.\n     */\n    async getPartyToParticipantMapping(\n        partyId: string,\n        proposals = false,\n    ): Promise<PartyToParticipantMappingState[]> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const { response } = await this.#topologyRead.listPartyToParticipant(\n            ListPartyToParticipantRequest.create({\n                baseQuery: headStateBaseQuery(synchronizerId, proposals),\n                filterParty: partyId,\n                // Empty string = no participant filter; return all hosting mappings for this party.\n                filterParticipant: '',\n            }),\n            { meta: await this.#getMeta() },\n        );\n\n        return response.results.flatMap((result) => {\n            const item = result.item;\n            if (!item) {\n                return [];\n            }\n            return [\n                {\n                    party: item.party,\n                    threshold: item.threshold,\n                    participants: item.participants.map((participant) => ({\n                        participantUid: participant.participantUid,\n                        permission: participant.permission,\n                    })),\n                    serial: result.context?.serial ?? 0,\n                },\n            ];\n        });\n    }\n\n    /**\n     * Builds an unsigned Namespace Delegation (NSD) topology transaction.\n     *\n     * Calls `GenerateTransactions` with an ADD_REPLACE mapping. The returned\n     * `transactionHash` must be signed by the namespace key.\n     *\n     * @param params - Owner public key and optional serial.\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     */\n    async createNamespaceDelegationTx(\n        params: CreateNamespaceDelegationTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const mapping = buildNamespaceDelegationMapping(params.publicKeyDer);\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    /**\n     * Builds an unsigned Decentralized Namespace Definition (DND) topology transaction.\n     *\n     * The decentralized namespace id is derived from `params.owners`. All owners\n     * must sign the transaction hash.\n     *\n     * @param params - Owner fingerprints, threshold, and optional serial.\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     */\n    async createDecentralizedNamespaceDefinitionTx(\n        params: CreateDecentralizedNamespaceDefinitionTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const decentralizedNamespace = computeDecentralizedNamespace(params.owners);\n        const mapping = buildDecentralizedNamespaceDefinitionMapping(\n            decentralizedNamespace,\n            params.threshold,\n            params.owners,\n        );\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    async updateDecentralizedNamespaceDefinitionTx(\n        params: UpdateDecentralizedNamespaceDefinitionTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const mapping = buildDecentralizedNamespaceDefinitionMapping(\n            params.namespace,\n            params.threshold,\n            params.owners,\n        );\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    /**\n     * Builds an unsigned Party-to-Key (PTK) topology transaction.\n     *\n     * Decentralized namespace owners must sign the transaction hash.\n     *\n     * @param params - Party id, signing keys, threshold, and optional serial.\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     */\n    async createPartyToKeyTx(\n        params: CreatePartyToKeyMappingTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const mapping = buildPartyToKeyMapping(\n            params.partyId,\n            params.signingPublicKeyDers,\n            params.threshold,\n        );\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    /**\n     * Builds an unsigned Party-to-Participant (PTP) topology transaction.\n     *\n     * Party owners sign the transaction hash. On submit, set `proposal: true` on the\n     * signed transaction so the hosting participant can authorize via `Authorize`.\n     *\n     * @param params - Party id, participant ids, threshold, and optional serial.\n     * @returns Unsigned topology transaction (`serializedTransaction`, `transactionHash`).\n     */\n    async createPartyToParticipantTx(\n        params: CreatePartyToParticipantMappingTxParams,\n    ): Promise<GeneratedTopologyTransaction> {\n        const synchronizerId = await this.#getSynchronizerId();\n        const mapping = buildPartyToParticipantMapping(\n            params.partyId,\n            params.participantIds,\n            params.threshold,\n        );\n        return this.#generateTopologyTransaction(synchronizerId, mapping, params.serial ?? 0);\n    }\n\n    /**\n     * Submits signed topology transactions to the synchronizer store.\n     *\n     * Multiple transactions are submitted atomically in one `AddTransactions` call.\n     * When batching, sign `computeMultiTransactionHash` over all transaction hashes\n     * and attach the same `MultiTransactionSignatures` to each entry.\n     *\n     * Set `proposal: true` on a transaction when the hosting participant must\n     * authorize that mapping afterward.\n     *\n     * @param transactions - One or more signed topology transactions.\n     * @throws {CantonError} If `transactions` is empty.\n     */\n    async submitTopologyTransactions(\n        transactions: readonly SignedTopologyTransaction[],\n    ): Promise<void> {\n        if (transactions.length === 0) {\n            throw new CantonError('AddTransactions requires at least one transaction');\n        }\n        const synchronizerId = await this.#getSynchronizerId();\n        await this.#topologyWrite.addTransactions(\n            AddTransactionsRequest.create({\n                transactions: [...transactions],\n                store: synchronizerStore(synchronizerId),\n            }),\n            { meta: await this.#getMeta() },\n        );\n    }\n\n    async grantCanActAs(partyId: string): Promise<void> {\n        await this.#userManagement.grantUserRights(\n            {\n                userId: this.#userId,\n                rights: [{ canActAs: { party: partyId } }],\n                identityProviderId: '',\n            },\n            { meta: await this.#getMeta() },\n        );\n    }\n\n    /** Closes the underlying gRPC transport. */\n    close(): void {\n        this.#transport.close();\n    }\n}\n"]}

package/dist/KYBLHMHO.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/provider.ts"],"names":["parseCantonChainUri","uri","url","URL","adminApiHost","searchParams","get","Error","userId","actAsParam","actAs","split","map","party","trim","filter","length","walletUrl","tokenUrl","undefined","clientId","clientSecret","process","env","CANTON_CLIENT_SECRET","scope","audience","key","delete","jsonApiUrl","toString","replace","oauth2","createCantonChainProvider","isLocal","params","tokenProvider","createTokenProvider","configuration","Configuration","basePath","accessToken","getToken","client","CantonClient","grpcClient","CantonGrpcClient","host","LocalTokenProvider","admin","ClientCredentialsTokenProvider"],"mappings":";;;;;;;;AA6DO,SAASA,oBAAoBC,GAAAA,EAAW;AAC3C,EAAA,MAAMC,GAAAA,GAAM,IAAIC,GAAAA,CAAIF,GAAAA,CAAAA;AAEpB,EAAA,MAAMG,YAAAA,GAAeF,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA;AAC1C,EAAA,IAAI,CAACF,YAAAA,EAAc;AACf,IAAA,MAAM,IAAIG,MAAM,kEAAA,CAAA;AACpB,EAAA;AAEA,EAAA,MAAMC,MAAAA,GAASN,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,SAAA,CAAA,IAAc,mBAAA;AAClD,EAAA,MAAMG,UAAAA,GAAaP,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,QAAA,CAAA;AACxC,EAAA,MAAMI,QACFD,UAAAA,EACME,KAAAA,CAAM,GAAA,CAAA,CACPC,GAAAA,CAAI,CAACC,KAAAA,KAAUA,KAAAA,CAAMC,MAAI,CAAA,CACzBC,OAAO,CAACF,KAAAA,KAAUA,MAAMG,MAAAA,GAAS,CAAA,KAAM,EAAA;AAChD,EAAA,MAAMC,SAAAA,GAAYf,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,YAAA,CAAA;AACvC,EAAA,IAAI,CAACW,SAAAA,EAAW;AACZ,IAAA,MAAM,IAAIV,MAAM,mEAAA,CAAA;AACpB,EAAA;AACA,EAAA,MAAMW,QAAAA,GAAWhB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBa,MAAAA;AACtD,EAAA,MAAMC,QAAAA,GAAWlB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,WAAA,CAAA,IAAgBa,MAAAA;AAEtD,EAAA,MAAME,YAAAA,GACFnB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,eAAA,CAAA;AAErBgB,EAAAA,OAAAA,CAAQC,IAAIC,oBAAAA,IACZL,MAAAA;AACJ,EAAA,MAAMM,KAAAA,GAAQvB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,OAAA,CAAA,IAAYa,MAAAA;AAC/C,EAAA,MAAMO,QAAAA,GAAWxB,GAAAA,CAAIG,YAAAA,CAAaC,GAAAA,CAAI,UAAA,CAAA,IAAea,MAAAA;AAErD,EAAA,KAAA,MAAWQ,GAAAA,IAAO;AACd,IAAA,WAAA;AACA,IAAA,SAAA;AACA,IAAA,QAAA;AACA,IAAA,YAAA;AACA,IAAA,eAAA;AACA,IAAA,sBAAA;AACA,IAAA,kBAAA;AACA,IAAA,WAAA;AACA,IAAA,WAAA;AACA,IAAA,eAAA;AACA,IAAA,OAAA;AACA,IAAA;AACD,GAAA,EAAA;AACCzB,IAAAA,GAAAA,CAAIG,YAAAA,CAAauB,OAAOD,GAAAA,CAAAA;AAC5B,EAAA;AAEA,EAAA,MAAME,aAAa3B,GAAAA,CAAI4B,QAAAA,EAAQ,CAAGC,OAAAA,CAAQ,OAAO,EAAA,CAAA;AAEjD,EAAA,MAAMC,MAAAA,GACFd,QAAAA,IAAYE,QAAAA,IAAYC,YAAAA,GAClB;AAAEH,IAAAA,QAAAA;AAAUE,IAAAA,QAAAA;AAAUC,IAAAA,YAAAA;AAAcI,IAAAA,KAAAA;AAAOC,IAAAA;GAAS,GACpDP,MAAAA;AAEV,EAAA,OAAO;AACHU,IAAAA,UAAAA;AACAzB,IAAAA,YAAAA;AACAI,IAAAA,MAAAA;AACAE,IAAAA,KAAAA;AACAO,IAAAA,SAAAA;AACAe,IAAAA;AACJ,GAAA;AACJ;AA9DgBhC,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA;AAkFT,SAASiC,yBAAAA,CAA0B,EACtChC,GAAAA,EACAiC,OAAAA,EAAO,EACwB;AAC/B,EAAA,MAAMC,MAAAA,GAASnC,oBAAoBC,GAAAA,CAAAA;AAEnC,EAAA,MAAMmC,aAAAA,GAAgBC,mBAAAA,CAAoBF,MAAAA,EAAQD,OAAAA,CAAAA;AAGlD,EAAA,MAAMI,aAAAA,GAAgB,IAAIC,aAAAA,CAAc;AACpCC,IAAAA,QAAAA,EAAUL,MAAAA,CAAON,UAAAA;IACjBY,WAAAA,kBAAa,MAAA,CAAA,MAAML,aAAAA,CAAcM,QAAAA,EAAQ,EAA5B,aAAA;GACjB,CAAA;AACA,EAAA,MAAMC,MAAAA,GAAS,IAAIC,YAAAA,CAAaN,aAAAA,EAAeH,OAAO3B,MAAAA,EAAQ;AAC1DS,IAAAA,SAAAA,EAAWkB,MAAAA,CAAOlB,SAAAA;AAClBmB,IAAAA;GACJ,CAAA;AAGA,EAAA,MAAMS,UAAAA,GAAa,IAAIC,gBAAAA,CAAiB;AACpCC,IAAAA,IAAAA,EAAMZ,MAAAA,CAAO/B,YAAAA;AACbgC,IAAAA,aAAAA;AACA5B,IAAAA,MAAAA,EAAQ2B,MAAAA,CAAO3B;GACnB,CAAA;AAEA,EAAA,OAAO;AACHmC,IAAAA,MAAAA;AACAE,IAAAA,UAAAA;AACAT,IAAAA,aAAAA;AACAnB,IAAAA,SAAAA,EAAWkB,MAAAA,CAAOlB;AACtB,GAAA;AACJ;AA/BgBgB,MAAAA,CAAAA,yBAAAA,EAAAA,2BAAAA,CAAAA;AAiChB,SAASI,mBAAAA,CAAoBF,QAA8BD,OAAAA,EAAgB;AACvE,EAAA,IAAIA,OAAAA,EAAS;AACT,IAAA,OAAO,IAAIc,kBAAAA,CAAmB;AAC1BxC,MAAAA,MAAAA,EAAQ2B,MAAAA,CAAO3B,MAAAA;AACfE,MAAAA,KAAAA,EAAOyB,MAAAA,CAAOzB,KAAAA;MACduC,KAAAA,EAAO;KACX,CAAA;AACJ,EAAA;AAGA,EAAA,IAAI,CAACd,OAAOH,MAAAA,EAAQ;AAChB,IAAA,MAAM,IAAIzB,MACN,kHAAA,CAAA;AAER,EAAA;AAEA,EAAA,OAAO,IAAI2C,8BAAAA,CAA+Bf,MAAAA,CAAOH,MAAM,CAAA;AAC3D;AAjBSK,MAAAA,CAAAA,mBAAAA,EAAAA,qBAAAA,CAAAA","file":"KYBLHMHO.js","sourcesContent":["import {\n    ClientCredentialsTokenProvider,\n    type ClientCredentialsTokenProviderConfig,\n} from './auth/client-credentials-token-provider';\nimport { LocalTokenProvider } from './auth/local-token-provider';\nimport type { TokenProvider } from './auth/token-provider';\nimport { CantonClient } from './client/canton-client';\nimport { CantonGrpcClient } from './client/grpc';\nimport type { ICantonClient } from './client/interface';\nimport { Configuration } from './open-api/runtime';\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Type\n// ─────────────────────────────────────────────────────────────────────────────\n\n/**\n * - {@link client} — JSON Ledger API (commands, queries, updates)\n * - {@link grpcClient} — gRPC Admin API (topology transactions, namespace queries)\n * - {@link tokenProvider} — Shared Bearer-token source used by both transports\n * - {@link walletUrl} — Canton Network validator wallet (scan-proxy CIP-56 endpoints)\n */\nexport type CantonChainProvider = {\n    client: ICantonClient;\n    grpcClient: CantonGrpcClient;\n    tokenProvider: TokenProvider;\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints. Required. */\n    walletUrl: string;\n};\n\n// ─────────────────────────────────────────────────────────────────────────────\n// URI Parsing\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CantonChainUriParams = {\n    /** Base URL of the JSON Ledger API (e.g. \"http://localhost:5975\") */\n    jsonApiUrl: string;\n    /** Host:port of the gRPC Admin API (e.g. \"localhost:5076\") */\n    adminApiHost: string;\n    /** Ledger API user ID (default: \"participant_admin\") */\n    userId: string;\n    /** Parties granted `actAs` on localnet tokens (comma-separated in the URI). */\n    actAs: string[];\n    /** Validator wallet URL for scan-proxy CIP-56 endpoints (e.g. \"http://localhost:7201\"). Required. */\n    walletUrl: string;\n    /** OAuth2 client credentials config — present only for non-local environments */\n    oauth2?: ClientCredentialsTokenProviderConfig;\n};\n\n/**\n * Parse a Canton chain provider URI into its constituent parts.\n *\n * URI format:\n *   `<json-api-base>?admin-api=<host:port>&user-id=<id>&wallet-url=<url>[&token-url=...&client-id=...&client-secret=...&scope=...&audience=...]`\n *\n * The base URL (everything before the query string) is the JSON Ledger API endpoint.\n * Canton-specific params are extracted and removed; any remaining query params are\n * preserved on the JSON API URL.\n *\n * When `client-secret` is omitted from the URI, `CANTON_CLIENT_SECRET` is read from the\n * environment.\n */\nexport function parseCantonChainUri(uri: string): CantonChainUriParams {\n    const url = new URL(uri);\n\n    const adminApiHost = url.searchParams.get('admin-api');\n    if (!adminApiHost) {\n        throw new Error('Canton provider URI missing required \"admin-api\" query parameter');\n    }\n\n    const userId = url.searchParams.get('user-id') ?? 'participant_admin';\n    const actAsParam = url.searchParams.get('act-as');\n    const actAs =\n        actAsParam\n            ?.split(',')\n            .map((party) => party.trim())\n            .filter((party) => party.length > 0) ?? [];\n    const walletUrl = url.searchParams.get('wallet-url');\n    if (!walletUrl) {\n        throw new Error('Canton provider URI missing required \"wallet-url\" query parameter');\n    }\n    const tokenUrl = url.searchParams.get('token-url') ?? undefined;\n    const clientId = url.searchParams.get('client-id') ?? undefined;\n    // Prefer URI param; fall back to env so secrets are not committed in provider configs.\n    const clientSecret =\n        url.searchParams.get('client-secret') ??\n        // eslint-disable-next-line turbo/no-undeclared-env-vars -- runtime OAuth secret, not a turbo task input\n        process.env.CANTON_CLIENT_SECRET ??\n        undefined;\n    const scope = url.searchParams.get('scope') ?? undefined;\n    const audience = url.searchParams.get('audience') ?? undefined;\n\n    for (const key of [\n        'admin-api',\n        'user-id',\n        'act-as',\n        'wallet-url',\n        'sequencer-url',\n        'sequencer-validators',\n        'sequencer-quorum',\n        'token-url',\n        'client-id',\n        'client-secret',\n        'scope',\n        'audience',\n    ]) {\n        url.searchParams.delete(key);\n    }\n\n    const jsonApiUrl = url.toString().replace(/\\/$/, '');\n\n    const oauth2 =\n        tokenUrl && clientId && clientSecret\n            ? { tokenUrl, clientId, clientSecret, scope, audience }\n            : undefined;\n\n    return {\n        jsonApiUrl,\n        adminApiHost,\n        userId,\n        actAs,\n        walletUrl,\n        oauth2,\n    };\n}\n\n// ─────────────────────────────────────────────────────────────────────────────\n// Provider Factory\n// ─────────────────────────────────────────────────────────────────────────────\n\nexport type CreateCantonChainProviderOptions = {\n    /** Raw provider URI (from provider config) */\n    uri: string;\n    /** When true, uses LocalTokenProvider (self-signed JWTs) instead of OAuth2 */\n    isLocal: boolean;\n};\n\n/**\n * Create a {@link CantonChainProvider} from a provider URI.\n *\n * - **isLocal=true**: Uses {@link LocalTokenProvider} with admin-level access (self-signed JWTs).\n * - **isLocal=false**: Uses {@link ClientCredentialsTokenProvider} with OAuth2 client\n *   credentials extracted from the URI query parameters.\n */\nexport function createCantonChainProvider({\n    uri,\n    isLocal,\n}: CreateCantonChainProviderOptions): CantonChainProvider {\n    const params = parseCantonChainUri(uri);\n\n    const tokenProvider = createTokenProvider(params, isLocal);\n\n    // ── JSON Ledger API Client ──────────────────────────────────────────\n    const configuration = new Configuration({\n        basePath: params.jsonApiUrl,\n        accessToken: () => tokenProvider.getToken(),\n    });\n    const client = new CantonClient(configuration, params.userId, {\n        walletUrl: params.walletUrl,\n        tokenProvider,\n    });\n\n    // ── gRPC Admin API Client ───────────────────────────────────────────\n    const grpcClient = new CantonGrpcClient({\n        host: params.adminApiHost,\n        tokenProvider,\n        userId: params.userId,\n    });\n\n    return {\n        client,\n        grpcClient,\n        tokenProvider,\n        walletUrl: params.walletUrl,\n    };\n}\n\nfunction createTokenProvider(params: CantonChainUriParams, isLocal: boolean): TokenProvider {\n    if (isLocal) {\n        return new LocalTokenProvider({\n            userId: params.userId,\n            actAs: params.actAs,\n            admin: true,\n        });\n    }\n\n    // TODO(canton): add other prod auth methods (direct JWT passthrough, etc.).\n    if (!params.oauth2) {\n        throw new Error(\n            'Canton provider requires OAuth2 credentials (token-url, client-id, client-secret in URI or CANTON_CLIENT_SECRET)',\n        );\n    }\n\n    return new ClientCredentialsTokenProvider(params.oauth2);\n}\n"]}

package/dist/MIPVIR2V.js

@@ -1,68 +0,0 @@
-import { __name } from './VUOMXK5T.js';
-import { MessageType, ScalarType, RepeatType } from '@protobuf-ts/runtime';
-import { ServiceType, stackIntercept } from '@protobuf-ts/runtime-rpc';
-
-var SERVICE_NAME = "com.daml.ledger.api.v2.admin.UserManagementService";
-var canActAsMessage = new MessageType("com.daml.ledger.api.v2.admin.Right.CanActAs", [
-  {
-    no: 1,
-    name: "party",
-    kind: "scalar",
-    T: ScalarType.STRING
-  }
-]);
-var rightMessage = new MessageType("com.daml.ledger.api.v2.admin.Right", [
-  {
-    no: 2,
-    name: "can_act_as",
-    kind: "message",
-    T: /* @__PURE__ */ __name(() => canActAsMessage, "T")
-  }
-]);
-var grantRequestMessage = new MessageType("com.daml.ledger.api.v2.admin.GrantUserRightsRequest", [
-  {
-    no: 1,
-    name: "user_id",
-    kind: "scalar",
-    T: ScalarType.STRING
-  },
-  {
-    no: 2,
-    name: "rights",
-    kind: "message",
-    repeat: RepeatType.UNPACKED,
-    T: /* @__PURE__ */ __name(() => rightMessage, "T")
-  },
-  {
-    no: 3,
-    name: "identity_provider_id",
-    kind: "scalar",
-    T: ScalarType.STRING
-  }
-]);
-var grantResponseMessage = new MessageType("com.daml.ledger.api.v2.admin.GrantUserRightsResponse", []);
-var service = new ServiceType(SERVICE_NAME, [
-  {
-    name: "GrantUserRights",
-    options: {},
-    I: grantRequestMessage,
-    O: grantResponseMessage
-  }
-]);
-var UserManagementServiceClient = class {
-  static {
-    __name(this, "UserManagementServiceClient");
-  }
-  #transport;
-  constructor(transport) {
-    this.#transport = transport;
-  }
-  grantUserRights(input, options) {
-    const method = service.methods[0];
-    return stackIntercept("unary", this.#transport, method, this.#transport.mergeOptions(options), input);
-  }
-};
-
-export { UserManagementServiceClient };
-//# sourceMappingURL=MIPVIR2V.js.map
-//# sourceMappingURL=MIPVIR2V.js.map

package/dist/MIPVIR2V.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":["../src/client/user-management.ts"],"names":["SERVICE_NAME","canActAsMessage","MessageType","no","name","kind","T","ScalarType","STRING","rightMessage","grantRequestMessage","repeat","RepeatType","UNPACKED","grantResponseMessage","service","ServiceType","options","I","O","UserManagementServiceClient","transport","grantUserRights","input","method","methods","stackIntercept","mergeOptions"],"mappings":";;;;AAUA,IAAMA,YAAAA,GAAe,oDAAA;AAOrB,IAAMC,eAAAA,GAAkB,IAAIC,WAAAA,CAAsB,6CAAA,EAA+C;AAC7F,EAAA;IAAEC,EAAAA,EAAI,CAAA;IAAGC,IAAAA,EAAM,OAAA;IAASC,IAAAA,EAAM,QAAA;AAAUC,IAAAA,CAAAA,EAAGC,UAAAA,CAAWC;AAAO;AAChE,CAAA,CAAA;AAED,IAAMC,YAAAA,GAAe,IAAIP,WAAAA,CAAmB,oCAAA,EAAsC;AAC9E,EAAA;IAAEC,EAAAA,EAAI,CAAA;IAAGC,IAAAA,EAAM,YAAA;IAAcC,IAAAA,EAAM,SAAA;AAAWC,IAAAA,CAAAA,+BAASL,eAAAA,EAAN,GAAA;AAAsB;AAC1E,CAAA,CAAA;AAED,IAAMS,mBAAAA,GAAsB,IAAIR,WAAAA,CAC5B,qDAAA,EACA;AACI,EAAA;IAAEC,EAAAA,EAAI,CAAA;IAAGC,IAAAA,EAAM,SAAA;IAAWC,IAAAA,EAAM,QAAA;AAAUC,IAAAA,CAAAA,EAAGC,UAAAA,CAAWC;AAAO,GAAA;AAC/D,EAAA;IACIL,EAAAA,EAAI,CAAA;IACJC,IAAAA,EAAM,QAAA;IACNC,IAAAA,EAAM,SAAA;AACNM,IAAAA,MAAAA,EAAQC,UAAAA,CAAWC,QAAAA;AACnBP,IAAAA,CAAAA,+BAASG,YAAAA,EAAN,GAAA;AACP,GAAA;AACA,EAAA;IAAEN,EAAAA,EAAI,CAAA;IAAGC,IAAAA,EAAM,sBAAA;IAAwBC,IAAAA,EAAM,QAAA;AAAUC,IAAAA,CAAAA,EAAGC,UAAAA,CAAWC;AAAO;AAC/E,CAAA,CAAA;AAGL,IAAMM,oBAAAA,GAAuB,IAAIZ,WAAAA,CAC7B,sDAAA,EACA,EAAE,CAAA;AAGN,IAAMa,OAAAA,GAAU,IAAIC,WAAAA,CAAYhB,YAAAA,EAAc;AAC1C,EAAA;IAAEI,IAAAA,EAAM,iBAAA;AAAmBa,IAAAA,OAAAA,EAAS,EAAC;IAAGC,CAAAA,EAAGR,mBAAAA;IAAqBS,CAAAA,EAAGL;AAAqB;AAC3F,CAAA,CAAA;AAGM,IAAMM,8BAAN,MAAMA;EAlDb;;;AAmDa,EAAA,UAAA;AAET,EAAA,WAAA,CAAYC,SAAAA,EAAyB;AACjC,IAAA,IAAA,CAAK,UAAA,GAAaA,SAAAA;AACtB,EAAA;AAEAC,EAAAA,eAAAA,CACIC,OACAN,OAAAA,EAC0D;AAC1D,IAAA,MAAMO,MAAAA,GAAST,OAAAA,CAAQU,OAAAA,CAAQ,CAAA,CAAA;AAI/B,IAAA,OAAOC,cAAAA,CACH,OAAA,EACA,IAAA,CAAK,UAAA,EACLF,MAAAA,EACA,KAAK,UAAA,CAAWG,YAAAA,CAAaV,OAAAA,CAAAA,EAC7BM,KAAAA,CAAAA;AAER,EAAA;AACJ","file":"MIPVIR2V.js","sourcesContent":["import { MessageType, RepeatType, ScalarType } from '@protobuf-ts/runtime';\nimport {\n    type MethodInfo,\n    type RpcOptions,\n    type RpcTransport,\n    ServiceType,\n    stackIntercept,\n    type UnaryCall,\n} from '@protobuf-ts/runtime-rpc';\n\nconst SERVICE_NAME = 'com.daml.ledger.api.v2.admin.UserManagementService';\n\ntype CanActAs = { party: string };\ntype Right = { canActAs: CanActAs };\ntype GrantUserRightsRequest = { userId: string; rights: Right[]; identityProviderId: string };\ntype GrantUserRightsResponse = Record<string, never>;\n\nconst canActAsMessage = new MessageType<CanActAs>('com.daml.ledger.api.v2.admin.Right.CanActAs', [\n    { no: 1, name: 'party', kind: 'scalar', T: ScalarType.STRING },\n]);\n\nconst rightMessage = new MessageType<Right>('com.daml.ledger.api.v2.admin.Right', [\n    { no: 2, name: 'can_act_as', kind: 'message', T: () => canActAsMessage },\n]);\n\nconst grantRequestMessage = new MessageType<GrantUserRightsRequest>(\n    'com.daml.ledger.api.v2.admin.GrantUserRightsRequest',\n    [\n        { no: 1, name: 'user_id', kind: 'scalar', T: ScalarType.STRING },\n        {\n            no: 2,\n            name: 'rights',\n            kind: 'message',\n            repeat: RepeatType.UNPACKED,\n            T: () => rightMessage,\n        },\n        { no: 3, name: 'identity_provider_id', kind: 'scalar', T: ScalarType.STRING },\n    ],\n);\n\nconst grantResponseMessage = new MessageType<GrantUserRightsResponse>(\n    'com.daml.ledger.api.v2.admin.GrantUserRightsResponse',\n    [],\n);\n\nconst service = new ServiceType(SERVICE_NAME, [\n    { name: 'GrantUserRights', options: {}, I: grantRequestMessage, O: grantResponseMessage },\n]);\n\n/** Minimal gRPC client for `UserManagementService.GrantUserRights`. */\nexport class UserManagementServiceClient {\n    readonly #transport: RpcTransport;\n\n    constructor(transport: RpcTransport) {\n        this.#transport = transport;\n    }\n\n    grantUserRights(\n        input: GrantUserRightsRequest,\n        options?: RpcOptions,\n    ): UnaryCall<GrantUserRightsRequest, GrantUserRightsResponse> {\n        const method = service.methods[0] as MethodInfo<\n            GrantUserRightsRequest,\n            GrantUserRightsResponse\n        >;\n        return stackIntercept<GrantUserRightsRequest, GrantUserRightsResponse>(\n            'unary',\n            this.#transport,\n            method,\n            this.#transport.mergeOptions(options),\n            input,\n        );\n    }\n}\n"]}

package/dist/client/user-management.d.ts

@@ -1,21 +0,0 @@
-import { type RpcOptions, type RpcTransport, type UnaryCall } from '@protobuf-ts/runtime-rpc';
-type CanActAs = {
-    party: string;
-};
-type Right = {
-    canActAs: CanActAs;
-};
-type GrantUserRightsRequest = {
-    userId: string;
-    rights: Right[];
-    identityProviderId: string;
-};
-type GrantUserRightsResponse = Record<string, never>;
-/** Minimal gRPC client for `UserManagementService.GrantUserRights`. */
-export declare class UserManagementServiceClient {
-    #private;
-    constructor(transport: RpcTransport);
-    grantUserRights(input: GrantUserRightsRequest, options?: RpcOptions): UnaryCall<GrantUserRightsRequest, GrantUserRightsResponse>;
-}
-export {};
-//# sourceMappingURL=user-management.d.ts.map

package/dist/client/user-management.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"user-management.d.ts","sourceRoot":"","sources":["../../src/client/user-management.ts"],"names":[],"mappings":"AACA,OAAO,EAEH,KAAK,UAAU,EACf,KAAK,YAAY,EAGjB,KAAK,SAAS,EACjB,MAAM,0BAA0B,CAAC;AAIlC,KAAK,QAAQ,GAAG;IAAE,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAClC,KAAK,KAAK,GAAG;IAAE,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;AACpC,KAAK,sBAAsB,GAAG;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,KAAK,EAAE,CAAC;IAAC,kBAAkB,EAAE,MAAM,CAAA;CAAE,CAAC;AAC9F,KAAK,uBAAuB,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AAkCrD,uEAAuE;AACvE,qBAAa,2BAA2B;;gBAGxB,SAAS,EAAE,YAAY;IAInC,eAAe,CACX,KAAK,EAAE,sBAAsB,EAC7B,OAAO,CAAC,EAAE,UAAU,GACrB,SAAS,CAAC,sBAAsB,EAAE,uBAAuB,CAAC;CAahE"}

package/dist/client/user-management.js

@@ -1,4 +0,0 @@
-export { UserManagementServiceClient } from '../MIPVIR2V.js';
-import '../VUOMXK5T.js';
-//# sourceMappingURL=user-management.js.map
-//# sourceMappingURL=user-management.js.map

package/dist/client/user-management.js.map

@@ -1 +0,0 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"user-management.js"}

package/src/client/user-management.ts

@@ -1,74 +0,0 @@
-import { MessageType, RepeatType, ScalarType } from '@protobuf-ts/runtime';
-import {
-    type MethodInfo,
-    type RpcOptions,
-    type RpcTransport,
-    ServiceType,
-    stackIntercept,
-    type UnaryCall,
-} from '@protobuf-ts/runtime-rpc';
-
-const SERVICE_NAME = 'com.daml.ledger.api.v2.admin.UserManagementService';
-
-type CanActAs = { party: string };
-type Right = { canActAs: CanActAs };
-type GrantUserRightsRequest = { userId: string; rights: Right[]; identityProviderId: string };
-type GrantUserRightsResponse = Record<string, never>;
-
-const canActAsMessage = new MessageType<CanActAs>('com.daml.ledger.api.v2.admin.Right.CanActAs', [
-    { no: 1, name: 'party', kind: 'scalar', T: ScalarType.STRING },
-]);
-
-const rightMessage = new MessageType<Right>('com.daml.ledger.api.v2.admin.Right', [
-    { no: 2, name: 'can_act_as', kind: 'message', T: () => canActAsMessage },
-]);
-
-const grantRequestMessage = new MessageType<GrantUserRightsRequest>(
-    'com.daml.ledger.api.v2.admin.GrantUserRightsRequest',
-    [
-        { no: 1, name: 'user_id', kind: 'scalar', T: ScalarType.STRING },
-        {
-            no: 2,
-            name: 'rights',
-            kind: 'message',
-            repeat: RepeatType.UNPACKED,
-            T: () => rightMessage,
-        },
-        { no: 3, name: 'identity_provider_id', kind: 'scalar', T: ScalarType.STRING },
-    ],
-);
-
-const grantResponseMessage = new MessageType<GrantUserRightsResponse>(
-    'com.daml.ledger.api.v2.admin.GrantUserRightsResponse',
-    [],
-);
-
-const service = new ServiceType(SERVICE_NAME, [
-    { name: 'GrantUserRights', options: {}, I: grantRequestMessage, O: grantResponseMessage },
-]);
-
-/** Minimal gRPC client for `UserManagementService.GrantUserRights`. */
-export class UserManagementServiceClient {
-    readonly #transport: RpcTransport;
-
-    constructor(transport: RpcTransport) {
-        this.#transport = transport;
-    }
-
-    grantUserRights(
-        input: GrantUserRightsRequest,
-        options?: RpcOptions,
-    ): UnaryCall<GrantUserRightsRequest, GrantUserRightsResponse> {
-        const method = service.methods[0] as MethodInfo<
-            GrantUserRightsRequest,
-            GrantUserRightsResponse
-        >;
-        return stackIntercept<GrantUserRightsRequest, GrantUserRightsResponse>(
-            'unary',
-            this.#transport,
-            method,
-            this.#transport.mergeOptions(options),
-            input,
-        );
-    }
-}