@lifi/perps-sdk-provider-lighter 17.0.1 → 17.2.0

package/dist/esm/signers/LighterKeyStore.js

@@ -1,17 +1,15 @@
 import { readValidatedRecord } from '@lifi/perps-sdk';
 import { LIGHTER_PROVIDER_KEY } from '../constants.js';
 // The private key here is a Lighter custom keypair — generated via WASM
-// GenerateAPIKey — not an Ethereum private key. The storage key is namespaced
-// by the resolved provider instance key so two Lighter instances sharing a
-// storage adapter (e.g. `lighter` and `lighter-rh`) never clobber each other's
-// API key.
+// GenerateAPIKey — not an Ethereum private key.
 const STORAGE_PREFIX = 'lifi-perps-lighter-key';
-const isLighterApiKey = (value) => {
+const isLighterApiKeyOf = (owner) => (value) => {
     if (typeof value !== 'object' || value === null) {
         return false;
     }
-    const { accountIndex, apiKeyIndex, apiKeyPrivateKey, apiKeyPublicKey } = value;
-    return (typeof accountIndex === 'number' &&
+    const { providerKey, accountIndex, apiKeyIndex, apiKeyPrivateKey, apiKeyPublicKey, } = value;
+    return (providerKey === owner &&
+        typeof accountIndex === 'number' &&
         Number.isFinite(accountIndex) &&
         typeof apiKeyIndex === 'number' &&
         Number.isFinite(apiKeyIndex) &&
@@ -22,8 +20,9 @@ const isLighterApiKey = (value) => {
 };
 /**
  * Storage-backed cache for Lighter API keys. Records are namespaced by L1
- * address and provider instance so multiple Lighter deployments can share one
- * {@link StorageAdapter} without collisions.
+ * address and provider instance, and each record names its own instance, so
+ * multiple Lighter deployments can share one {@link StorageAdapter} and no
+ * instance ever reads another instance's key material.
  *
  * @public
  */
@@ -49,8 +48,8 @@ export class LighterKeyStore {
     bindProviderKey(providerKey) {
         this.providerKey = providerKey;
     }
-    // The default instance keeps the legacy, un-namespaced key so existing
-    // `lighter` users are not orphaned; only additional instances get a segment.
+    // The default instance keeps the legacy, un-namespaced slot name; only
+    // additional instances get a segment.
     storageKey(address) {
         const lower = address.toLowerCase();
         return this.providerKey === LIGHTER_PROVIDER_KEY
@@ -67,7 +66,7 @@ export class LighterKeyStore {
         if (cached) {
             return cached;
         }
-        const parsed = await readValidatedRecord(this.storage, key, isLighterApiKey);
+        const parsed = await readValidatedRecord(this.storage, key, isLighterApiKeyOf(this.providerKey));
         if (!parsed) {
             return null;
         }
@@ -76,12 +75,14 @@ export class LighterKeyStore {
     }
     /**
      * Persist an API key for an L1 address, replacing any existing record under
-     * that provider namespace.
+     * that provider namespace. The store stamps the record with its own instance
+     * key, so callers never name the instance themselves.
      */
     async set(address, value) {
         const key = this.storageKey(address);
-        this.cache.set(key, value);
-        await this.storage.set(key, JSON.stringify(value));
+        const record = { ...value, providerKey: this.providerKey };
+        this.cache.set(key, record);
+        await this.storage.set(key, JSON.stringify(record));
     }
     /**
      * Remove the persisted API key for an L1 address and clear its in-memory

package/dist/esm/signers/LighterKeyStore.js.map

@@ -1 +1 @@
-{"version":3,"file":"LighterKeyStore.js","sourceRoot":"","sources":["../../../src/signers/LighterKeyStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAuB,MAAM,iBAAiB,CAAA;AAG1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEtD,wEAAwE;AACxE,8EAA8E;AAC9E,2EAA2E;AAC3E,+EAA+E;AAC/E,WAAW;AAEX,MAAM,cAAc,GAAG,wBAAwB,CAAA;AAoB/C,MAAM,eAAe,GAAG,CAAC,KAAc,EAA0B,EAAE;IACjE,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,EAAE,eAAe,EAAE,GACpE,KAAgC,CAAA;IAClC,OAAO,CACL,OAAO,YAAY,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC7B,OAAO,WAAW,KAAK,QAAQ;QAC/B,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5B,OAAO,gBAAgB,KAAK,QAAQ;QACpC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAC3B,OAAO,eAAe,KAAK,QAAQ;QACnC,eAAe,CAAC,MAAM,GAAG,CAAC,CAC3B,CAAA;AACH,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,OAAO,eAAe;IACT,OAAO,CAAgB;IACvB,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAA;IACjD,WAAW,CAAoB;IAEvC;;;;OAIG;IACH,YACE,OAAuB,EACvB,cAAkC,oBAAoB;QAEtD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;IAChC,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,WAA+B;QAC7C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;IAChC,CAAC;IAED,uEAAuE;IACvE,6EAA6E;IACrE,UAAU,CAAC,OAAgB;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAA;QACnC,OAAO,IAAI,CAAC,WAAW,KAAK,oBAAoB;YAC9C,CAAC,CAAC,GAAG,cAAc,IAAI,KAAK,EAAE;YAC9B,CAAC,CAAC,GAAG,cAAc,IAAI,IAAI,CAAC,WAAW,IAAI,KAAK,EAAE,CAAA;IACtD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,OAAgB;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,eAAe,CAAC,CAAA;QAC5E,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC3B,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,OAAgB,EAAE,KAAoB;QAC9C,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QACpC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;IACpD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QACpC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACtB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAChC,CAAC;CACF"}
+{"version":3,"file":"LighterKeyStore.js","sourceRoot":"","sources":["../../../src/signers/LighterKeyStore.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAuB,MAAM,iBAAiB,CAAA;AAG1E,OAAO,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEtD,wEAAwE;AACxE,gDAAgD;AAEhD,MAAM,cAAc,GAAG,wBAAwB,CAAA;AA0B/C,MAAM,iBAAiB,GACrB,CAAC,KAAyB,EAAE,EAAE,CAC9B,CAAC,KAAc,EAA0B,EAAE;IACzC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,EACJ,WAAW,EACX,YAAY,EACZ,WAAW,EACX,gBAAgB,EAChB,eAAe,GAChB,GAAG,KAAgC,CAAA;IACpC,OAAO,CACL,WAAW,KAAK,KAAK;QACrB,OAAO,YAAY,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC7B,OAAO,WAAW,KAAK,QAAQ;QAC/B,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5B,OAAO,gBAAgB,KAAK,QAAQ;QACpC,gBAAgB,CAAC,MAAM,GAAG,CAAC;QAC3B,OAAO,eAAe,KAAK,QAAQ;QACnC,eAAe,CAAC,MAAM,GAAG,CAAC,CAC3B,CAAA;AACH,CAAC,CAAA;AAEH;;;;;;;GAOG;AACH,MAAM,OAAO,eAAe;IACT,OAAO,CAAgB;IACvB,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAA;IACjD,WAAW,CAAoB;IAEvC;;;;OAIG;IACH,YACE,OAAuB,EACvB,cAAkC,oBAAoB;QAEtD,IAAI,CAAC,OAAO,GAAG,OAAO,CAAA;QACtB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;IAChC,CAAC;IAED;;;;;OAKG;IACH,eAAe,CAAC,WAA+B;QAC7C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAA;IAChC,CAAC;IAED,uEAAuE;IACvE,sCAAsC;IAC9B,UAAU,CAAC,OAAgB;QACjC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAA;QACnC,OAAO,IAAI,CAAC,WAAW,KAAK,oBAAoB;YAC9C,CAAC,CAAC,GAAG,cAAc,IAAI,KAAK,EAAE;YAC9B,CAAC,CAAC,GAAG,cAAc,IAAI,IAAI,CAAC,WAAW,IAAI,KAAK,EAAE,CAAA;IACtD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,GAAG,CAAC,OAAgB;QACxB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QACpC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,MAAM,CAAA;QACf,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC,IAAI,CAAC,OAAO,EACZ,GAAG,EACH,iBAAiB,CAAC,IAAI,CAAC,WAAW,CAAC,CACpC,CAAA;QACD,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,IAAI,CAAA;QACb,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC3B,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CACP,OAAgB,EAChB,KAAyC;QAEzC,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QACpC,MAAM,MAAM,GAAkB,EAAE,GAAG,KAAK,EAAE,WAAW,EAAE,IAAI,CAAC,WAAW,EAAE,CAAA;QACzE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC3B,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAA;IACrD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB;QAC3B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAA;QACpC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACtB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAChC,CAAC;CACF"}

package/dist/esm/signers/LighterReadOnlyTokenManager.d.ts

@@ -5,7 +5,7 @@ import type { Address } from 'viem';
  * Default token name persisted alongside Lighter's `tokens/create` row.
  * Lighter requires a non-empty `name` form field; the literal here is what
  * surfaces in Lighter's UI listing under `app.lighter.xyz/read-only-tokens`.
- * @public
+ * @internal
  */
 export declare const DEFAULT_READ_ONLY_TOKEN_NAME = "LI.FI Perps";
 /**
@@ -13,7 +13,7 @@ export declare const DEFAULT_READ_ONLY_TOKEN_NAME = "LI.FI Perps";
  * Lighter's opaque `ro:{accountIndex}:{scope}:{expiry}:{rand}` bearer; the
  * SDK never parses it — `expiry`/`scope`/`accountIndex` are create-time inputs
  * we keep alongside so consumers can render expiry UX without re-fetching.
- * @public
+ * @internal
  */
 export interface LighterReadOnlyToken {
     /** Opaque bearer string — never parse client-side. */
@@ -24,25 +24,33 @@ export interface LighterReadOnlyToken {
     scope: 'single' | 'all';
     /** Lighter L2 account index the token authorises. */
     accountIndex: number;
+    /**
+     * Lighter's monotonic registry row id. Optional: a record persisted without
+     * it stays valid, and the cleanup pass then identifies its row by the
+     * bearer string instead.
+     */
+    tokenId?: number;
 }
 /**
- * Lighter `POST /api/v1/tokens/create` response shape (subset). Lighter's
- * OpenAPI documents additional fields (`token_id`, `name`, `revoked`, etc.)
- * we don't need client-side.
- * @public
+ * Lighter `POST /api/v1/tokens/create` response shape — the subset of
+ * Lighter's `RespPostApiToken` the SDK consumes. Lighter documents further
+ * fields (`name`, `revoked`, `sub_account_access`) the SDK does not need.
+ * @internal
  */
 export interface LighterCreateTokenResponse {
     api_token: string;
     account_index: number;
     expiry: number;
     scopes: string;
+    /** Monotonic registry row id Lighter assigns to the new row. */
+    token_id: number;
 }
 /**
  * Function injected for the HTTP boundary against Lighter's `tokens/create`
  * endpoint. Returning a parsed {@link LighterCreateTokenResponse} keeps the
  * create code free of fetch/multipart plumbing and lets tests drop a fixture
  * in without spinning a mock server.
- * @public
+ * @internal
  */
 export type LighterTokenFetcher = (params: {
     url: string;
@@ -53,12 +61,71 @@ export type LighterTokenFetcher = (params: {
     subAccountAccess: boolean;
     scopes: string;
 }) => Promise<LighterCreateTokenResponse>;
+/**
+ * One row of Lighter's read-only token registry, matching Lighter's
+ * `ApiToken`. `name` carries the label supplied at create time, which is how
+ * the SDK recognises a row it owns.
+ * @internal
+ */
+export interface LighterApiToken {
+    token_id: number;
+    api_token: string;
+    name: string;
+    account_index: number;
+    expiry: number;
+    sub_account_access: boolean;
+    revoked: boolean;
+    scopes: string;
+}
+/**
+ * Lighter `GET /api/v1/tokens` response shape, matching `RespGetApiTokens`.
+ * @internal
+ */
+export interface LighterListTokensResponse {
+    code: number;
+    message?: string;
+    api_tokens: LighterApiToken[];
+}
+/**
+ * Lighter `POST /api/v1/tokens/revoke` response shape, matching Lighter's
+ * `RespRevokeApiToken`.
+ * @internal
+ */
+export interface LighterRevokeTokenResponse {
+    code: number;
+    message?: string;
+    token_id: number;
+    revoked: boolean;
+}
+/**
+ * Function injected for the HTTP boundary against Lighter's
+ * `GET /api/v1/tokens` endpoint. Injected for the same reason as
+ * {@link LighterTokenFetcher}: a unit spec supplies a registry fixture
+ * without a mock server.
+ * @internal
+ */
+export type LighterTokenListFetcher = (params: {
+    url: string;
+    authorization: string;
+    accountIndex: number;
+}) => Promise<LighterListTokensResponse>;
+/**
+ * Function injected for the HTTP boundary against Lighter's
+ * `POST /api/v1/tokens/revoke` endpoint.
+ * @internal
+ */
+export type LighterTokenRevokeFetcher = (params: {
+    url: string;
+    authorization: string;
+    tokenId: number;
+    accountIndex: number;
+}) => Promise<LighterRevokeTokenResponse>;
 /**
  * Dependencies and overrides for {@link LighterReadOnlyTokenManager}.
  * Storage and token-fetching defaults target the browser's local storage and
  * Lighter's mainnet REST API.
  *
- * @public
+ * @internal
  */
 export interface LighterReadOnlyTokenManagerOptions {
     storage?: StorageAdapter;
@@ -73,6 +140,10 @@ export interface LighterReadOnlyTokenManagerOptions {
     lighterApiUrl?: string;
     /** Override the multipart POST. Defaults to a `fetch`-based implementation. */
     fetcher?: LighterTokenFetcher;
+    /** Override the registry list GET. Defaults to a `fetch`-based implementation. */
+    listFetcher?: LighterTokenListFetcher;
+    /** Override the revoke POST. Defaults to a `fetch`-based implementation. */
+    revokeFetcher?: LighterTokenRevokeFetcher;
     /** Clock injection for testing expiry logic. Defaults to `Date.now`. */
     now?: () => number;
 }
@@ -80,7 +151,7 @@ export interface LighterReadOnlyTokenManagerOptions {
  * Input to the read-only-token approval flow. Extends the shared approval
  * parameters with the L1 address whose wallet authorizes token creation.
  *
- * @public
+ * @internal
  */
 export interface ApproveReadOnlyTokenInputs extends ApproveReadOnlyTokenParams {
     /** L1 wallet address that signs the create message. */
@@ -90,7 +161,7 @@ export interface ApproveReadOnlyTokenInputs extends ApproveReadOnlyTokenParams {
  * Result of approving or creating a Lighter read-only token. `config` is the
  * account-state projection callers can persist alongside the token.
  *
- * @public
+ * @internal
  */
 export interface ApproveReadOnlyTokenResult {
     token: LighterReadOnlyToken;
@@ -114,18 +185,22 @@ export interface ApproveReadOnlyTokenResult {
  * a fully compromised page — a same-origin script can still drive this manager
  * to decrypt. Blast radius is limited to reads: the token cannot sign orders
  * or move funds.
- * @public
+ * @internal
  */
 export declare class LighterReadOnlyTokenManager {
     private readonly storage;
     private readonly providerKey;
     private readonly lighterApiUrl;
     private readonly fetcher;
+    private readonly listFetcher;
+    private readonly revokeFetcher;
     private readonly now;
     private readonly cache;
     constructor(options?: LighterReadOnlyTokenManagerOptions);
     private storageKey;
     private isExpired;
+    /** Stored record for the pair, whether or not it is past its `expiry`. */
+    private readStoredToken;
     /**
      * Return the stored token for the `(address, accountIndex)` pair, or
      * `undefined` if absent or past its `expiry`. Never surfaces an expired
@@ -157,6 +232,9 @@ export declare class LighterReadOnlyTokenManager {
      * and persists the returned `ro:` bearer alongside its
      * `expiry`/`scope`/`accountIndex`.
      *
+     * Before the create call, the flow revokes this SDK's own stale registry
+     * rows. That pass is best-effort: a failure is logged and the create runs.
+     *
      * `authorization` MUST be a **standard** Lighter auth token — one created by
      * the account's API key (`createAuthToken` / the WASM signer), NOT an L1
      * wallet signature. Lighter authenticates the create request with that token
@@ -175,13 +253,35 @@ export declare class LighterReadOnlyTokenManager {
      * @param inputs Token-create parameters plus the owning `address`.
      */
     approve(authorization: string, inputs: ApproveReadOnlyTokenInputs): Promise<ApproveReadOnlyTokenResult>;
+    /**
+     * Revoke the registry rows this SDK owns and no longer needs. Lighter's
+     * `tokens/create` appends a row on every call, so without this pass the
+     * user's registry grows on every rotation.
+     */
+    private revokeStaleOwnTokens;
 }
 /**
  * Default fetcher: posts a multipart/form-data request to Lighter's
  * `tokens/create` endpoint and returns the parsed response. Throws a
  * {@link PerpsError} with the Lighter-side body when the response is
  * non-2xx.
- * @public
+ * @internal
  */
 export declare const defaultLighterTokenFetcher: LighterTokenFetcher;
+/**
+ * Default list fetcher: `GET /api/v1/tokens` with `account_index` as a query
+ * parameter. Lighter's OpenAPI defines no request body for this route. Throws
+ * a {@link PerpsError} with the Lighter-side body when the response is
+ * non-2xx.
+ * @internal
+ */
+export declare const defaultLighterTokenListFetcher: LighterTokenListFetcher;
+/**
+ * Default revoke fetcher: posts `application/x-www-form-urlencoded` to
+ * Lighter's `tokens/revoke` endpoint, which is the content type Lighter's
+ * OpenAPI declares for that route. Throws a {@link PerpsError} with the
+ * Lighter-side body when the response is non-2xx.
+ * @internal
+ */
+export declare const defaultLighterTokenRevokeFetcher: LighterTokenRevokeFetcher;
 //# sourceMappingURL=LighterReadOnlyTokenManager.d.ts.map

package/dist/esm/signers/LighterReadOnlyTokenManager.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"LighterReadOnlyTokenManager.d.ts","sourceRoot":"","sources":["../../../src/signers/LighterReadOnlyTokenManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAA;AACxB,OAAO,KAAK,EACV,0BAA0B,EAC1B,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAGnC;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,gBAAgB,CAAA;AAEzD;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAA;IACb,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAA;IACd,sEAAsE;IACtE,KAAK,EAAE,QAAQ,GAAG,KAAK,CAAA;IACvB,qDAAqD;IACrD,YAAY,EAAE,MAAM,CAAA;CACrB;AAED;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE;IACzC,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,gBAAgB,EAAE,OAAO,CAAA;IACzB,MAAM,EAAE,MAAM,CAAA;CACf,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAA;AAEzC;;;;;;GAMG;AACH,MAAM,WAAW,kCAAkC;IACjD,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAA;IAChC,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,mBAAmB,CAAA;IAC7B,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,0BAA2B,SAAQ,0BAA0B;IAC5E,uDAAuD;IACvD,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,oBAAoB,CAAA;IAC3B,2DAA2D;IAC3D,MAAM,EAAE,IAAI,CACV,oBAAoB,EAClB,UAAU,GACV,cAAc,GACd,uBAAuB,GACvB,qBAAqB,GACrB,oBAAoB,CACvB,CAAA;CACF;AAyBD;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;gBAEpD,OAAO,GAAE,kCAAuC;IAQ5D,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,SAAS;IAIjB;;;;OAIG;IACG,GAAG,CACP,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAkB5C;;;;;OAKG;IACG,2BAA2B,CAC/B,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,EACpB,aAAa,SAAK,GACjB,OAAO,CAAC,OAAO,CAAC;IAenB;;;;OAIG;IACG,GAAG,CACP,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,IAAI,CAAC;IAMhB;;;OAGG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnE;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACG,OAAO,CACX,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC,0BAA0B,CAAC;CAmCvC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,mBA+BxC,CAAA"}
+{"version":3,"file":"LighterReadOnlyTokenManager.d.ts","sourceRoot":"","sources":["../../../src/signers/LighterReadOnlyTokenManager.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,iBAAiB,CAAA;AACxB,OAAO,KAAK,EACV,0BAA0B,EAC1B,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,mBAAmB,CAAA;AAE1B,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAGnC;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,gBAAgB,CAAA;AAEzD;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,sDAAsD;IACtD,KAAK,EAAE,MAAM,CAAA;IACb,0DAA0D;IAC1D,MAAM,EAAE,MAAM,CAAA;IACd,sEAAsE;IACtE,KAAK,EAAE,QAAQ,GAAG,KAAK,CAAA;IACvB,qDAAqD;IACrD,YAAY,EAAE,MAAM,CAAA;IACpB;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,SAAS,EAAE,MAAM,CAAA;IACjB,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,gEAAgE;IAChE,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,MAAM,EAAE;IACzC,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;IACrB,IAAI,EAAE,MAAM,CAAA;IACZ,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,gBAAgB,EAAE,OAAO,CAAA;IACzB,MAAM,EAAE,MAAM,CAAA;CACf,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAA;AAEzC;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,IAAI,EAAE,MAAM,CAAA;IACZ,aAAa,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,kBAAkB,EAAE,OAAO,CAAA;IAC3B,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;GAGG;AACH,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,UAAU,EAAE,eAAe,EAAE,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,0BAA0B;IACzC,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;;;;GAMG;AACH,MAAM,MAAM,uBAAuB,GAAG,CAAC,MAAM,EAAE;IAC7C,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;CACrB,KAAK,OAAO,CAAC,yBAAyB,CAAC,CAAA;AAExC;;;;GAIG;AACH,MAAM,MAAM,yBAAyB,GAAG,CAAC,MAAM,EAAE;IAC/C,GAAG,EAAE,MAAM,CAAA;IACX,aAAa,EAAE,MAAM,CAAA;IACrB,OAAO,EAAE,MAAM,CAAA;IACf,YAAY,EAAE,MAAM,CAAA;CACrB,KAAK,OAAO,CAAC,0BAA0B,CAAC,CAAA;AAEzC;;;;;;GAMG;AACH,MAAM,WAAW,kCAAkC;IACjD,OAAO,CAAC,EAAE,cAAc,CAAA;IACxB;;;;;OAKG;IACH,WAAW,CAAC,EAAE,kBAAkB,CAAA;IAChC,sEAAsE;IACtE,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,+EAA+E;IAC/E,OAAO,CAAC,EAAE,mBAAmB,CAAA;IAC7B,kFAAkF;IAClF,WAAW,CAAC,EAAE,uBAAuB,CAAA;IACrC,4EAA4E;IAC5E,aAAa,CAAC,EAAE,yBAAyB,CAAA;IACzC,wEAAwE;IACxE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED;;;;;GAKG;AACH,MAAM,WAAW,0BAA2B,SAAQ,0BAA0B;IAC5E,uDAAuD;IACvD,OAAO,EAAE,OAAO,CAAA;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,0BAA0B;IACzC,KAAK,EAAE,oBAAoB,CAAA;IAC3B,2DAA2D;IAC3D,MAAM,EAAE,IAAI,CACV,oBAAoB,EAClB,UAAU,GACV,cAAc,GACd,uBAAuB,GACvB,qBAAqB,GACrB,oBAAoB,CACvB,CAAA;CACF;AAoCD;;;;;;;;;;;;;;;;;;GAkBG;AACH,qBAAa,2BAA2B;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAgB;IACxC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAoB;IAChD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;IAC7C,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IACrD,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA2B;IACzD,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA0C;gBAEpD,OAAO,GAAE,kCAAuC;IAW5D,OAAO,CAAC,UAAU;IAIlB,OAAO,CAAC,SAAS;IAIjB,0EAA0E;YAC5D,eAAe;IAY7B;;;;OAIG;IACG,GAAG,CACP,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,GACnB,OAAO,CAAC,oBAAoB,GAAG,SAAS,CAAC;IAkB5C;;;;;OAKG;IACG,2BAA2B,CAC/B,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,EACpB,aAAa,SAAK,GACjB,OAAO,CAAC,OAAO,CAAC;IAYnB;;;;OAIG;IACG,GAAG,CACP,OAAO,EAAE,OAAO,EAChB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,IAAI,CAAC;IAMhB;;;OAGG;IACG,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnE;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACG,OAAO,CACX,aAAa,EAAE,MAAM,EACrB,MAAM,EAAE,0BAA0B,GACjC,OAAO,CAAC,0BAA0B,CAAC;IA4CtC;;;;OAIG;YACW,oBAAoB;CA6CnC;AAED;;;;;;GAMG;AACH,eAAO,MAAM,0BAA0B,EAAE,mBA+BxC,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,8BAA8B,EAAE,uBAoB5C,CAAA;AAED;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC,EAAE,yBAyB5C,CAAA"}

package/dist/esm/signers/LighterReadOnlyTokenManager.js

@@ -5,7 +5,7 @@ import { DEFAULT_LIGHTER_REST_URL, LIGHTER_PROVIDER_KEY } from '../constants.js'
  * Default token name persisted alongside Lighter's `tokens/create` row.
  * Lighter requires a non-empty `name` form field; the literal here is what
  * surfaces in Lighter's UI listing under `app.lighter.xyz/read-only-tokens`.
- * @public
+ * @internal
  */
 export const DEFAULT_READ_ONLY_TOKEN_NAME = 'LI.FI Perps';
 const SECONDS_PER_DAY = 86_400;
@@ -13,15 +13,21 @@ const isLighterReadOnlyToken = (value) => {
     if (typeof value !== 'object' || value === null) {
         return false;
     }
-    const { token, expiry, scope, accountIndex } = value;
+    const { token, expiry, scope, accountIndex, tokenId } = value;
+    // Accept a record that carries no `tokenId`: rejecting one would discard a
+    // usable token and force an unnecessary replacement.
     return (typeof token === 'string' &&
         token.length > 0 &&
         typeof expiry === 'number' &&
         Number.isFinite(expiry) &&
         (scope === 'single' || scope === 'all') &&
         typeof accountIndex === 'number' &&
-        Number.isFinite(accountIndex));
+        Number.isFinite(accountIndex) &&
+        (tokenId === undefined ||
+            (typeof tokenId === 'number' && Number.isFinite(tokenId))));
 };
+const isLiveRow = (row, live) => live !== undefined &&
+    (row.token_id === live.tokenId || row.api_token === live.token);
 /**
  * Manage the per-account Lighter read-only token alongside the existing
  * `(L1 address, account index)`-scoped storage adapter pattern. Takes an
@@ -39,13 +45,15 @@ const isLighterReadOnlyToken = (value) => {
  * a fully compromised page — a same-origin script can still drive this manager
  * to decrypt. Blast radius is limited to reads: the token cannot sign orders
  * or move funds.
- * @public
+ * @internal
  */
 export class LighterReadOnlyTokenManager {
     storage;
     providerKey;
     lighterApiUrl;
     fetcher;
+    listFetcher;
+    revokeFetcher;
     now;
     cache = new Map();
     constructor(options = {}) {
@@ -53,6 +61,9 @@ export class LighterReadOnlyTokenManager {
         this.providerKey = options.providerKey ?? LIGHTER_PROVIDER_KEY;
         this.lighterApiUrl = options.lighterApiUrl ?? DEFAULT_LIGHTER_REST_URL;
         this.fetcher = options.fetcher ?? defaultLighterTokenFetcher;
+        this.listFetcher = options.listFetcher ?? defaultLighterTokenListFetcher;
+        this.revokeFetcher =
+            options.revokeFetcher ?? defaultLighterTokenRevokeFetcher;
         this.now = options.now ?? (() => Date.now());
     }
     storageKey(address, accountIndex) {
@@ -61,6 +72,13 @@ export class LighterReadOnlyTokenManager {
     isExpired(token) {
         return token.expiry * 1000 <= this.now();
     }
+    /** Stored record for the pair, whether or not it is past its `expiry`. */
+    async readStoredToken(address, accountIndex) {
+        const key = this.storageKey(address, accountIndex);
+        return (this.cache.get(key) ??
+            (await readValidatedRecord(this.storage, key, isLighterReadOnlyToken)) ??
+            undefined);
+    }
     /**
      * Return the stored token for the `(address, accountIndex)` pair, or
      * `undefined` if absent or past its `expiry`. Never surfaces an expired
@@ -86,9 +104,7 @@ export class LighterReadOnlyTokenManager {
      * has more than `thresholdDays` of life left.
      */
     async isReadOnlyTokenExpiringSoon(address, accountIndex, thresholdDays = 30) {
-        const key = this.storageKey(address, accountIndex);
-        const token = this.cache.get(key) ??
-            (await readValidatedRecord(this.storage, key, isLighterReadOnlyToken));
+        const token = await this.readStoredToken(address, accountIndex);
         if (!token) {
             return false;
         }
@@ -124,6 +140,9 @@ export class LighterReadOnlyTokenManager {
      * and persists the returned `ro:` bearer alongside its
      * `expiry`/`scope`/`accountIndex`.
      *
+     * Before the create call, the flow revokes this SDK's own stale registry
+     * rows. That pass is best-effort: a failure is logged and the create runs.
+     *
      * `authorization` MUST be a **standard** Lighter auth token — one created by
      * the account's API key (`createAuthToken` / the WASM signer), NOT an L1
      * wallet signature. Lighter authenticates the create request with that token
@@ -143,6 +162,7 @@ export class LighterReadOnlyTokenManager {
      */
     async approve(authorization, inputs) {
         const { address, accountIndex, expirySeconds, scope } = inputs;
+        await this.revokeStaleOwnTokens(authorization, address, accountIndex);
         const response = await this.fetcher({
             url: `${this.lighterApiUrl}/api/v1/tokens/create`,
             authorization,
@@ -160,6 +180,12 @@ export class LighterReadOnlyTokenManager {
             // `get()` looks up by, else a divergent echo orphans the token and re-creates every read.
             scope,
             accountIndex,
+            // Lighter declares `token_id` required but the response is unvalidated.
+            // A non-numeric id must degrade to the bearer-string match: persisting it
+            // would fail record validation and re-create the token on every read.
+            tokenId: Number.isFinite(response.token_id)
+                ? response.token_id
+                : undefined,
         };
         await this.set(address, token.accountIndex, token);
         return {
@@ -173,13 +199,54 @@ export class LighterReadOnlyTokenManager {
             },
         };
     }
+    /**
+     * Revoke the registry rows this SDK owns and no longer needs. Lighter's
+     * `tokens/create` appends a row on every call, so without this pass the
+     * user's registry grows on every rotation.
+     */
+    async revokeStaleOwnTokens(authorization, address, accountIndex) {
+        try {
+            const live = await this.readStoredToken(address, accountIndex);
+            const { api_tokens: rows } = await this.listFetcher({
+                url: `${this.lighterApiUrl}/api/v1/tokens`,
+                authorization,
+                accountIndex,
+            });
+            const nowSeconds = Math.floor(this.now() / 1000);
+            const stale = rows
+                // A row is ours only when its name matches the name we create rows
+                // under. Any other name belongs to the user and must survive.
+                .filter((row) => row.name === DEFAULT_READ_ONLY_TOKEN_NAME)
+                .filter((row) => !row.revoked)
+                // Keep the row the local store holds; with no stored record every owned
+                // row is stale, and a peer client's row self-heals via `retryOnRevoked`.
+                .filter((row) => row.expiry <= nowSeconds || !isLiveRow(row, live))
+                .sort((a, b) => a.token_id - b.token_id);
+            for (const row of stale) {
+                try {
+                    await this.revokeFetcher({
+                        url: `${this.lighterApiUrl}/api/v1/tokens/revoke`,
+                        authorization,
+                        tokenId: row.token_id,
+                        accountIndex,
+                    });
+                }
+                catch (err) {
+                    console.warn(`[lighter] could not revoke stale read-only token ${row.token_id}; continuing.`, err);
+                }
+            }
+        }
+        catch (err) {
+            console.warn('[lighter] could not clean up stale read-only tokens; creating the new one anyway.', err);
+        }
+    }
 }
 /**
  * Default fetcher: posts a multipart/form-data request to Lighter's
  * `tokens/create` endpoint and returns the parsed response. Throws a
  * {@link PerpsError} with the Lighter-side body when the response is
  * non-2xx.
- * @public
+ * @internal
  */
 export const defaultLighterTokenFetcher = async ({ url, authorization, name, accountIndex, expiry, subAccountAccess, scopes, }) => {
     const form = new FormData();
@@ -199,4 +266,48 @@ export const defaultLighterTokenFetcher = async ({ url, authorization, name, acc
     }
     return (await response.json());
 };
+/**
+ * Default list fetcher: `GET /api/v1/tokens` with `account_index` as a query
+ * parameter. Lighter's OpenAPI defines no request body for this route. Throws
+ * a {@link PerpsError} with the Lighter-side body when the response is
+ * non-2xx.
+ * @internal
+ */
+export const defaultLighterTokenListFetcher = async ({ url, authorization, accountIndex, }) => {
+    const query = new URLSearchParams({ account_index: String(accountIndex) });
+    const response = await fetch(`${url}?${query.toString()}`, {
+        headers: { authorization },
+    });
+    if (!response.ok) {
+        const body = await response.text();
+        throw new PerpsError(PerpsErrorCode.ServerError, `Lighter tokens returned ${response.status}: ${body || '<empty>'}`);
+    }
+    return (await response.json());
+};
+/**
+ * Default revoke fetcher: posts `application/x-www-form-urlencoded` to
+ * Lighter's `tokens/revoke` endpoint, which is the content type Lighter's
+ * OpenAPI declares for that route. Throws a {@link PerpsError} with the
+ * Lighter-side body when the response is non-2xx.
+ * @internal
+ */
+export const defaultLighterTokenRevokeFetcher = async ({ url, authorization, tokenId, accountIndex }) => {
+    const form = new URLSearchParams({
+        token_id: String(tokenId),
+        account_index: String(accountIndex),
+    });
+    const response = await fetch(url, {
+        method: 'POST',
+        headers: {
+            authorization,
+            'content-type': 'application/x-www-form-urlencoded',
+        },
+        body: form,
+    });
+    if (!response.ok) {
+        const body = await response.text();
+        throw new PerpsError(PerpsErrorCode.ServerError, `Lighter tokens/revoke returned ${response.status}: ${body || '<empty>'}`);
+    }
+    return (await response.json());
+};
 //# sourceMappingURL=LighterReadOnlyTokenManager.js.map

package/dist/esm/signers/LighterReadOnlyTokenManager.js.map

@@ -1 +1 @@
-{"version":3,"file":"LighterReadOnlyTokenManager.js","sourceRoot":"","sources":["../../../src/signers/LighterReadOnlyTokenManager.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,mBAAmB,GAEpB,MAAM,iBAAiB,CAAA;AAMxB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAElD,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,aAAa,CAAA;AAwGzD,MAAM,eAAe,GAAG,MAAM,CAAA;AAE9B,MAAM,sBAAsB,GAAG,CAC7B,KAAc,EACiB,EAAE;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,GAAG,KAG9C,CAAA;IACD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvB,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC;QACvC,OAAO,YAAY,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,CAC9B,CAAA;AACH,CAAC,CAAA;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,2BAA2B;IACrB,OAAO,CAAgB;IACvB,WAAW,CAAoB;IAC/B,aAAa,CAAQ;IACrB,OAAO,CAAqB;IAC5B,GAAG,CAAc;IACjB,KAAK,GAAG,IAAI,GAAG,EAAgC,CAAA;IAEhE,YAAY,UAA8C,EAAE;QAC1D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,mBAAmB,CAAA;QACrD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAA;QAC9D,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,wBAAwB,CAAA;QACtE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,0BAA0B,CAAA;QAC5D,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC9C,CAAC;IAEO,UAAU,CAAC,OAAgB,EAAE,YAAoB;QACvD,OAAO,cAAc,IAAI,CAAC,WAAW,YAAY,OAAO,CAAC,WAAW,EAAE,IAAI,YAAY,EAAE,CAAA;IAC1F,CAAC;IAEO,SAAS,CAAC,KAA2B;QAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IAC1C,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CACP,OAAgB,EAChB,YAAoB;QAEpB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;QACpD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC,IAAI,CAAC,OAAO,EACZ,GAAG,EACH,sBAAsB,CACvB,CAAA;QACD,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC3B,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,2BAA2B,CAC/B,OAAgB,EAChB,YAAoB,EACpB,aAAa,GAAG,EAAE;QAElB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAClD,MAAM,KAAK,GACT,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACnB,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC,CAAA;QACxE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QACrE,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,gBAAgB,IAAI,aAAa,GAAG,eAAe,CAAA;IAC5D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CACP,OAAgB,EAChB,YAAoB,EACpB,KAA2B;QAE3B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAClD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;IACpD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,YAAoB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAClD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACtB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAChC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;OAuBG;IACH,KAAK,CAAC,OAAO,CACX,aAAqB,EACrB,MAAkC;QAElC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;QAE9D,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,uBAAuB;YACjD,aAAa;YACb,IAAI,EAAE,4BAA4B;YAClC,YAAY;YACZ,MAAM,EAAE,aAAa;YACrB,gBAAgB,EAAE,KAAK,KAAK,KAAK;YACjC,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAA;QAEF,MAAM,KAAK,GAAyB;YAClC,KAAK,EAAE,QAAQ,CAAC,SAAS;YACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,sEAAsE;YACtE,uEAAuE;YACvE,0FAA0F;YAC1F,KAAK;YACL,YAAY;SACb,CAAA;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAElD,OAAO;YACL,KAAK;YACL,MAAM,EAAE;gBACN,QAAQ,EAAE,IAAI,CAAC,WAAW;gBAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,qBAAqB,EAAE,IAAI;gBAC3B,mBAAmB,EAAE,KAAK,CAAC,MAAM;gBACjC,kBAAkB,EAAE,KAAK,CAAC,KAAK;aAChC;SACF,CAAA;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAwB,KAAK,EAAE,EACpE,GAAG,EACH,aAAa,EACb,IAAI,EACJ,YAAY,EACZ,MAAM,EACN,gBAAgB,EAChB,MAAM,GACP,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAA;IAC3B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACtB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAA;IAC/C,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAClC,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACxD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAE1B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE;QAC1B,IAAI,EAAE,IAAI;KACX,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,MAAM,IAAI,UAAU,CAClB,cAAc,CAAC,WAAW,EAC1B,kCAAkC,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,SAAS,EAAE,CAC1E,CAAA;IACH,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+B,CAAA;AAC9D,CAAC,CAAA"}
+{"version":3,"file":"LighterReadOnlyTokenManager.js","sourceRoot":"","sources":["../../../src/signers/LighterReadOnlyTokenManager.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,mBAAmB,EACnB,UAAU,EACV,mBAAmB,GAEpB,MAAM,iBAAiB,CAAA;AAMxB,OAAO,EAAE,cAAc,EAAE,MAAM,mBAAmB,CAAA;AAElD,OAAO,EAAE,wBAAwB,EAAE,oBAAoB,EAAE,MAAM,iBAAiB,CAAA;AAEhF;;;;;GAKG;AACH,MAAM,CAAC,MAAM,4BAA4B,GAAG,aAAa,CAAA;AAoLzD,MAAM,eAAe,GAAG,MAAM,CAAA;AAE9B,MAAM,sBAAsB,GAAG,CAC7B,KAAc,EACiB,EAAE;IACjC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QAChD,OAAO,KAAK,CAAA;IACd,CAAC;IACD,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,YAAY,EAAE,OAAO,EAAE,GAAG,KAGvD,CAAA;IACD,2EAA2E;IAC3E,qDAAqD;IACrD,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,OAAO,MAAM,KAAK,QAAQ;QAC1B,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvB,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,CAAC;QACvC,OAAO,YAAY,KAAK,QAAQ;QAChC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC7B,CAAC,OAAO,KAAK,SAAS;YACpB,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAC7D,CAAA;AACH,CAAC,CAAA;AAED,MAAM,SAAS,GAAG,CAChB,GAAoB,EACpB,IAAsC,EAC7B,EAAE,CACX,IAAI,KAAK,SAAS;IAClB,CAAC,GAAG,CAAC,QAAQ,KAAK,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,SAAS,KAAK,IAAI,CAAC,KAAK,CAAC,CAAA;AAEjE;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,OAAO,2BAA2B;IACrB,OAAO,CAAgB;IACvB,WAAW,CAAoB;IAC/B,aAAa,CAAQ;IACrB,OAAO,CAAqB;IAC5B,WAAW,CAAyB;IACpC,aAAa,CAA2B;IACxC,GAAG,CAAc;IACjB,KAAK,GAAG,IAAI,GAAG,EAAgC,CAAA;IAEhE,YAAY,UAA8C,EAAE;QAC1D,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,mBAAmB,CAAA;QACrD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,oBAAoB,CAAA;QAC9D,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,aAAa,IAAI,wBAAwB,CAAA;QACtE,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,0BAA0B,CAAA;QAC5D,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,8BAA8B,CAAA;QACxE,IAAI,CAAC,aAAa;YAChB,OAAO,CAAC,aAAa,IAAI,gCAAgC,CAAA;QAC3D,IAAI,CAAC,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAA;IAC9C,CAAC;IAEO,UAAU,CAAC,OAAgB,EAAE,YAAoB;QACvD,OAAO,cAAc,IAAI,CAAC,WAAW,YAAY,OAAO,CAAC,WAAW,EAAE,IAAI,YAAY,EAAE,CAAA;IAC1F,CAAC;IAEO,SAAS,CAAC,KAA2B;QAC3C,OAAO,KAAK,CAAC,MAAM,GAAG,IAAI,IAAI,IAAI,CAAC,GAAG,EAAE,CAAA;IAC1C,CAAC;IAED,0EAA0E;IAClE,KAAK,CAAC,eAAe,CAC3B,OAAgB,EAChB,YAAoB;QAEpB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAClD,OAAO,CACL,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YACnB,CAAC,MAAM,mBAAmB,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,EAAE,sBAAsB,CAAC,CAAC;YACtE,SAAS,CACV,CAAA;IACH,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CACP,OAAgB,EAChB,YAAoB;QAEpB,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAClD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAClC,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAA;QACpD,CAAC;QACD,MAAM,MAAM,GAAG,MAAM,mBAAmB,CACtC,IAAI,CAAC,OAAO,EACZ,GAAG,EACH,sBAAsB,CACvB,CAAA;QACD,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,EAAE,CAAC;YACtC,OAAO,SAAS,CAAA;QAClB,CAAC;QACD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,CAAA;QAC3B,OAAO,MAAM,CAAA;IACf,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,2BAA2B,CAC/B,OAAgB,EAChB,YAAoB,EACpB,aAAa,GAAG,EAAE;QAElB,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAC/D,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO,KAAK,CAAA;QACd,CAAC;QACD,MAAM,gBAAgB,GAAG,KAAK,CAAC,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;QACrE,IAAI,gBAAgB,IAAI,CAAC,EAAE,CAAC;YAC1B,OAAO,KAAK,CAAA;QACd,CAAC;QACD,OAAO,gBAAgB,IAAI,aAAa,GAAG,eAAe,CAAA;IAC5D,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,GAAG,CACP,OAAgB,EAChB,YAAoB,EACpB,KAA2B;QAE3B,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAClD,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAA;QAC1B,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAA;IACpD,CAAC;IAED;;;OAGG;IACH,KAAK,CAAC,MAAM,CAAC,OAAgB,EAAE,YAAoB;QACjD,MAAM,GAAG,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;QAClD,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;QACtB,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;IAChC,CAAC;IAED;;;;;;;;;;;;;;;;;;;;;;;;;;OA0BG;IACH,KAAK,CAAC,OAAO,CACX,aAAqB,EACrB,MAAkC;QAElC,MAAM,EAAE,OAAO,EAAE,YAAY,EAAE,aAAa,EAAE,KAAK,EAAE,GAAG,MAAM,CAAA;QAE9D,MAAM,IAAI,CAAC,oBAAoB,CAAC,aAAa,EAAE,OAAO,EAAE,YAAY,CAAC,CAAA;QAErE,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;YAClC,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,uBAAuB;YACjD,aAAa;YACb,IAAI,EAAE,4BAA4B;YAClC,YAAY;YACZ,MAAM,EAAE,aAAa;YACrB,gBAAgB,EAAE,KAAK,KAAK,KAAK;YACjC,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAA;QAEF,MAAM,KAAK,GAAyB;YAClC,KAAK,EAAE,QAAQ,CAAC,SAAS;YACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;YACvB,sEAAsE;YACtE,uEAAuE;YACvE,0FAA0F;YAC1F,KAAK;YACL,YAAY;YACZ,wEAAwE;YACxE,0EAA0E;YAC1E,sEAAsE;YACtE,OAAO,EAAE,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBACzC,CAAC,CAAC,QAAQ,CAAC,QAAQ;gBACnB,CAAC,CAAC,SAAS;SACd,CAAA;QACD,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;QAElD,OAAO;YACL,KAAK;YACL,MAAM,EAAE;gBACN,QAAQ,EAAE,IAAI,CAAC,WAAW;gBAC1B,YAAY,EAAE,KAAK,CAAC,YAAY;gBAChC,qBAAqB,EAAE,IAAI;gBAC3B,mBAAmB,EAAE,KAAK,CAAC,MAAM;gBACjC,kBAAkB,EAAE,KAAK,CAAC,KAAK;aAChC;SACF,CAAA;IACH,CAAC;IAED;;;;OAIG;IACK,KAAK,CAAC,oBAAoB,CAChC,aAAqB,EACrB,OAAgB,EAChB,YAAoB;QAEpB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,OAAO,EAAE,YAAY,CAAC,CAAA;YAC9D,MAAM,EAAE,UAAU,EAAE,IAAI,EAAE,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC;gBAClD,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,gBAAgB;gBAC1C,aAAa;gBACb,YAAY;aACb,CAAC,CAAA;YACF,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAA;YAChD,MAAM,KAAK,GAAG,IAAI;gBAChB,mEAAmE;gBACnE,8DAA8D;iBAC7D,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,KAAK,4BAA4B,CAAC;iBAC1D,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC;gBAC9B,wEAAwE;gBACxE,yEAAyE;iBACxE,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,IAAI,UAAU,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;iBAClE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,CAAC,QAAQ,CAAC,CAAA;YAE1C,KAAK,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC;gBACxB,IAAI,CAAC;oBACH,MAAM,IAAI,CAAC,aAAa,CAAC;wBACvB,GAAG,EAAE,GAAG,IAAI,CAAC,aAAa,uBAAuB;wBACjD,aAAa;wBACb,OAAO,EAAE,GAAG,CAAC,QAAQ;wBACrB,YAAY;qBACb,CAAC,CAAA;gBACJ,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACb,OAAO,CAAC,IAAI,CACV,oDAAoD,GAAG,CAAC,QAAQ,eAAe,EAC/E,GAAG,CACJ,CAAA;gBACH,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,CAAC,IAAI,CACV,mFAAmF,EACnF,GAAG,CACJ,CAAA;QACH,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAwB,KAAK,EAAE,EACpE,GAAG,EACH,aAAa,EACb,IAAI,EACJ,YAAY,EACZ,MAAM,EACN,gBAAgB,EAChB,MAAM,GACP,EAAE,EAAE;IACH,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAA;IAC3B,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAA;IACtB,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,MAAM,CAAC,YAAY,CAAC,CAAC,CAAA;IAC/C,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,CAAA;IAClC,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACxD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;IAE1B,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,aAAa,EAAE;QAC1B,IAAI,EAAE,IAAI;KACX,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,MAAM,IAAI,UAAU,CAClB,cAAc,CAAC,WAAW,EAC1B,kCAAkC,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,SAAS,EAAE,CAC1E,CAAA;IACH,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+B,CAAA;AAC9D,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,8BAA8B,GAA4B,KAAK,EAAE,EAC5E,GAAG,EACH,aAAa,EACb,YAAY,GACb,EAAE,EAAE;IACH,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAA;IAE1E,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,GAAG,IAAI,KAAK,CAAC,QAAQ,EAAE,EAAE,EAAE;QACzD,OAAO,EAAE,EAAE,aAAa,EAAE;KAC3B,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,MAAM,IAAI,UAAU,CAClB,cAAc,CAAC,WAAW,EAC1B,2BAA2B,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,SAAS,EAAE,CACnE,CAAA;IACH,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA8B,CAAA;AAC7D,CAAC,CAAA;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAC3C,KAAK,EAAE,EAAE,GAAG,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,EAAE,EAAE,EAAE;IACtD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,QAAQ,EAAE,MAAM,CAAC,OAAO,CAAC;QACzB,aAAa,EAAE,MAAM,CAAC,YAAY,CAAC;KACpC,CAAC,CAAA;IAEF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE;YACP,aAAa;YACb,cAAc,EAAE,mCAAmC;SACpD;QACD,IAAI,EAAE,IAAI;KACX,CAAC,CAAA;IAEF,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAA;QAClC,MAAM,IAAI,UAAU,CAClB,cAAc,CAAC,WAAW,EAC1B,kCAAkC,QAAQ,CAAC,MAAM,KAAK,IAAI,IAAI,SAAS,EAAE,CAC1E,CAAA;IACH,CAAC;IAED,OAAO,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA+B,CAAA;AAC9D,CAAC,CAAA"}

package/dist/esm/signers/signActions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"signActions.d.ts","sourceRoot":"","sources":["../../../src/signers/signActions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACrE,OAAO,KAAK,EACV,UAAU,EACV,eAAe,EACf,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAA8B,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC7E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAInC,OAAO,KAAK,EAAa,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAMxE,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC1E,OAAO,KAAK,EAEV,aAAa,EAEd,MAAM,oBAAoB,CAAA;AAE3B;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,aAAa,CAAA;IACrB,QAAQ,EAAE,eAAe,CAAA;IACzB;;qCAEiC;IACjC,SAAS,EAAE,gBAAgB,CAAA;IAC3B;;;OAGG;IACH,eAAe,EAAE,sBAAsB,CAAA;IACvC;;;;;OAKG;IACH,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACvD;AAyBD;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,qBAAqB,CACnB,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB;AAED;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,QAAO,sBAqD/C,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,kBAAkB,EAAE,EAC3B,GAAG,EAAE,kBAAkB,GAAG,SAAS,GAClC,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAkCrC;AAsUD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,eAAe,EAAE,EACxB,GAAG,EAAE,kBAAkB,GAAG,SAAS,GAClC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CA6ElC;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,sBAAsB,EAC5B,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,UAAU,EAAE,EACnB,OAAO,EAAE,OAAO,EAChB,GAAG,CAAC,EAAE,kBAAkB,GACvB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAsB7B"}
+{"version":3,"file":"signActions.d.ts","sourceRoot":"","sources":["../../../src/signers/signActions.ts"],"names":[],"mappings":"AAAA,OAAO,EAAc,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACrE,OAAO,KAAK,EACV,UAAU,EACV,eAAe,EACf,qBAAqB,EACrB,gBAAgB,EAChB,kBAAkB,EAClB,wBAAwB,EACzB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAA8B,aAAa,EAAE,MAAM,mBAAmB,CAAA;AAC7E,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,MAAM,CAAA;AAInC,OAAO,KAAK,EAAa,gBAAgB,EAAE,MAAM,uBAAuB,CAAA;AAMxE,OAAO,KAAK,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC1E,OAAO,KAAK,EAEV,aAAa,EAEd,MAAM,oBAAoB,CAAA;AAE3B;;;;;;;;GAQG;AACH,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,aAAa,CAAA;IACrB,QAAQ,EAAE,eAAe,CAAA;IACzB;;qCAEiC;IACjC,SAAS,EAAE,gBAAgB,CAAA;IAC3B;;;OAGG;IACH,eAAe,EAAE,sBAAsB,CAAA;IACvC;;;;;OAKG;IACH,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,CAAA;CACvD;AAyBD;;;;;;GAMG;AACH,MAAM,WAAW,sBAAsB;IACrC,qBAAqB,CACnB,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,IAAI,CAAC,CAAA;CACjB;AAED;;;;GAIG;AACH,eAAO,MAAM,4BAA4B,QAAO,sBA6D/C,CAAA;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,IAAI,EAAE,sBAAsB,EAC5B,OAAO,EAAE,OAAO,EAChB,KAAK,EAAE,kBAAkB,EAAE,EAC3B,GAAG,EAAE,kBAAkB,GAAG,SAAS,GAClC,OAAO,CAAC,wBAAwB,EAAE,CAAC,CAkCrC;AAqUD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,gBAAgB,CACpC,KAAK,EAAE,eAAe,EAAE,EACxB,GAAG,EAAE,kBAAkB,GAAG,SAAS,GAClC,OAAO,CAAC,qBAAqB,EAAE,CAAC,CA6ElC;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,IAAI,EAAE,sBAAsB,EAC5B,MAAM,EAAE,aAAa,EACrB,KAAK,EAAE,UAAU,EAAE,EACnB,OAAO,EAAE,OAAO,EAChB,GAAG,CAAC,EAAE,kBAAkB,GACvB,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAsB7B"}

package/dist/esm/signers/signActions.js

@@ -12,7 +12,7 @@ import { fetchRegisteredApiKey, normalizeLighterPublicKey, } from '../utils/regi
  */
 const TOKEN_AUTH_MUTATION_KINDS = new Set(['changeAccountTier', 'referralUse']);
 /**
- * Lifetime of the per-call auth token minted for a token-authenticated venue
+ * Lifetime of the per-call auth token issued for a token-authenticated venue
  * mutation. Minutes, not the read endpoints' hours: it authenticates one POST
  * that completes immediately, so it never lingers usable.
  */
@@ -55,15 +55,22 @@ export const createLighterApiKeyFreshness = () => {
                 checkedAtMs.set(windowKey, Date.now());
                 return;
             }
-            // A slot carrying no entry leaves nothing to compare against.
-            if (registered !== undefined &&
-                normalizeLighterPublicKey(registered.public_key) !== storedKey) {
+            // An answered read that names no entry is a verdict, not a gap: the slot
+            // holds no key the stored one can match, so a signature it produces
+            // cannot verify.
+            if (registered === undefined) {
+                throw new PerpsError(PerpsErrorCode.SDKError, `The Lighter API key stored for ${address} is not registered: ` +
+                    `account ${apiKey.accountIndex} holds no key in API-key slot ` +
+                    `${apiKey.apiKeyIndex}. Run prepareAccount / REGISTER_API_KEY to ` +
+                    'register a fresh key.');
+            }
+            if (normalizeLighterPublicKey(registered.public_key) !== storedKey) {
                 throw new PerpsError(PerpsErrorCode.SDKError, `The Lighter API key stored for ${address} is no longer registered: ` +
                     `API-key slot ${apiKey.apiKeyIndex} now holds a different key. ` +
                     'Run prepareAccount / REGISTER_API_KEY to register a fresh key.');
             }
             // Every read the venue answered counts against the window, so a burst
-            // costs one read whatever the verdict. A mismatch throws above, so it
+            // costs one read whatever the verdict. A rejection throws above, so it
             // never records and the next batch reads again.
             checkedAtMs.set(windowKey, Date.now());
         },
@@ -161,13 +168,12 @@ async function signRegisterApiKey(deps, address, step, ctx) {
         message: changePubKey.messageToSign,
     });
     const txInfoWithL1Sig = deps.signer.embedL1Signature(changePubKey.txInfo, l1Signature);
-    const apiKey = {
+    await deps.keyStore.set(address, {
         accountIndex,
         apiKeyIndex,
         apiKeyPrivateKey: keypair.privateKey,
         apiKeyPublicKey: keypair.publicKey,
-    };
-    await deps.keyStore.set(address, apiKey);
+    });
     return {
         action: step.action,
         wasmSignParams: {
@@ -246,7 +252,7 @@ async function signTransfer(deps, address, step, ctx) {
  *
  * Neither endpoint consumes a wasm-signed transaction — both authenticate with
  * a Lighter auth token and enforce their business rules (open positions,
- * pending orders, 24h tier cooldown) server-side. We mint a fresh short-lived
+ * pending orders, 24h tier cooldown) server-side. We create a fresh short-lived
  * token per call (never the stored read-only token, never persisted) and POST
  * the mirror of the backend's form body directly to Lighter, so no auth token
  * ever transits the LI.FI backend. A non-success verdict surfaces Lighter's