@medialane/sdk 0.103.0 → 0.105.0

package/dist/index.d.cts

@@ -392,7 +392,23 @@ declare function getServicesByCapability(cap: ServiceCapability): ServiceDefinit
 declare function hasCapability(id: string | null | undefined, cap: ServiceCapability): boolean;
 
 declare function normalizeAddress(chain: Chain, address: string): string;
-declare function normalizeHash(hash: string): string;
+declare const canonicalHashBrand: unique symbol;
+/**
+ * A felt hash in exactly one spelling: lowercase, zero-padded to 64 hex digits.
+ *
+ * Felts have many equal spellings — `0x0ab`, `0xAB` and `0xab` are the same
+ * value on chain but three different strings. Anything that uses a hash as an
+ * identity or uniqueness key must therefore compare canonical form, or the
+ * same on-chain fact can be presented as several distinct records.
+ *
+ * Only `normalizeHash` can produce this type, so a function that demands a
+ * `CanonicalHash` cannot be handed a raw caller-supplied string. It remains
+ * assignable to `string`, so existing readers are unaffected.
+ */
+type CanonicalHash = string & {
+    readonly [canonicalHashBrand]: true;
+};
+declare function normalizeHash(hash: string): CanonicalHash;
 declare function shortenAddress(chain: Chain, address: string, chars?: number): string;
 
 type SupportedToken = (typeof SUPPORTED_TOKENS)[number];
@@ -407,6 +423,22 @@ declare function u256ToBigInt(low: string, high: string): bigint;
 declare function encodeU256(n: bigint): [string, string];
 
 declare const PUBLIC_RPC_FALLBACKS: readonly string[];
+/**
+ * Codes our own proxies emit to *refuse* a call on policy grounds: no API key,
+ * insufficient credits, rate limited, wrong origin.
+ *
+ * These must never be treated as transient. They sit inside the JSON-RPC
+ * reserved server-error range and carry messages like "Too many requests", so
+ * every generic transient heuristic below would otherwise match them — and a
+ * caller with a fallback list would quietly retry the same call against a
+ * different upstream. That turns a refusal into a redirect: the harder the
+ * meter says no, the faster traffic routes around it. A policy refusal is an
+ * answer, not a failure; retrying it elsewhere is always wrong.
+ */
+declare const POLICY_REFUSAL_CODES: readonly number[];
+declare function isPolicyRefusal(input: {
+    body?: unknown;
+}): boolean;
 declare function isTransientRpcError(input: {
     status?: number;
     body?: unknown;
@@ -420,6 +452,19 @@ interface FailoverFetchOptions {
     }) => void;
 }
 declare function createFailoverFetch(urls: string[], options?: FailoverFetchOptions): typeof fetch;
+/**
+ * Hostnames and env-var names that reach a paid upstream directly.
+ *
+ * An app must never name one of these. Everything paid goes through the
+ * backend, the only place a call can be authenticated, scoped, rate limited
+ * and billed. An app that knows a node's address has a route around all four —
+ * and since the address ships in the client bundle, so does every visitor.
+ *
+ * The list lives here, not in each app, because it is the part that drifts:
+ * adding an upstream must protect every consumer at once. Each app keeps its
+ * own small test that scans its source for these with its own file APIs.
+ */
+declare const PAID_UPSTREAM_MARKERS: readonly string[];
 
 interface RpcProxyConfig {
     backendUrl: string;
@@ -484,6 +529,17 @@ declare function requestIp(req: Request): string;
 
 declare function isSameOrigin(req: Request): boolean;
 
+declare const IDENTITY_TTL_SECONDS = 86400;
+declare const ACCOUNT_SESSION_TTL_SECONDS: number;
+interface SiwsIdentity {
+    address: string;
+    chain: Chain;
+}
+declare function issueSiwsToken(secret: string, chain: Chain, wallet: string, ttlSeconds?: number): string;
+declare function verifySiwsToken(secret: string, raw: string): SiwsIdentity | null;
+declare function issueAccountSessionToken(secret: string, accountId: string, ttlSeconds?: number): string;
+declare function verifyAccountSessionToken(secret: string, raw: string): string | null;
+
 type AssetAttribute = {
     trait_type: string;
     value: string;
@@ -540,4 +596,4 @@ declare const IPFS_SAFE_CONTENT_TYPE_PREFIXES: readonly ["image/jpeg", "image/pn
 declare function resolveSafeImageContentType(contentType: string): string;
 declare const MAX_IPFS_GATEWAY_RESPONSE_BYTES: number;
 
-export { ALLOWED_IMAGE_CONTENT_TYPES, type AssetAttribute, type AssetMetadata, type BackendMetadataConfig, type BackendProxyConfig, type BackendUploadResult, type BuildAssetMetadataInput, Chain, DEFAULT_CURRENCY, type FailoverFetchOptions, type FeeEnv, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IMAGE_PROXY_BYTES, MAX_IMAGE_REDIRECTS, MAX_IPFS_GATEWAY_RESPONSE_BYTES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, type RemixPolicy, type RemixPolicyInput, ResolvedFeeConfig, type RpcProxyConfig, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_GENESIS_MINT_BR_CONTRACT, STARKNET_GENESIS_MINT_GLOBAL_CONTRACT, STARKNET_GENESIS_MINT_LAUNCH_CONTRACT, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, ServiceCapability, ServiceDefinition, type ServiceId, type SupportedToken, type SupportedTokenSymbol, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createBackendProxyHandler, createFailoverFetch, createRateLimiter, createRpcProxyHandler, encodeU256, formatAmount, getBackendSignedUrl, getDerivativesTerm, getListableTokens, getService, getServicesByCapability, getTokenByAddress, getTokenBySymbol, hasCapability, isPrivateHost, isSameOrigin, isServiceId, isTransientRpcError, isValidIpfsCidPath, listServices, normalizeAddress, normalizeHash, parseAmount, requestIp, resolveAppFeeConfig, resolveRemixPolicy, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt, uploadDirectoryToBackend, uploadFileToBackend, uploadJsonToBackend, validateUrl };
+export { ACCOUNT_SESSION_TTL_SECONDS, ALLOWED_IMAGE_CONTENT_TYPES, type AssetAttribute, type AssetMetadata, type BackendMetadataConfig, type BackendProxyConfig, type BackendUploadResult, type BuildAssetMetadataInput, type CanonicalHash, Chain, DEFAULT_CURRENCY, type FailoverFetchOptions, type FeeEnv, IDENTITY_TTL_SECONDS, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IMAGE_PROXY_BYTES, MAX_IMAGE_REDIRECTS, MAX_IPFS_GATEWAY_RESPONSE_BYTES, PAID_UPSTREAM_MARKERS, POLICY_REFUSAL_CODES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, type RemixPolicy, type RemixPolicyInput, ResolvedFeeConfig, type RpcProxyConfig, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_GENESIS_MINT_BR_CONTRACT, STARKNET_GENESIS_MINT_GLOBAL_CONTRACT, STARKNET_GENESIS_MINT_LAUNCH_CONTRACT, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, ServiceCapability, ServiceDefinition, type ServiceId, type SiwsIdentity, type SupportedToken, type SupportedTokenSymbol, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createBackendProxyHandler, createFailoverFetch, createRateLimiter, createRpcProxyHandler, encodeU256, formatAmount, getBackendSignedUrl, getDerivativesTerm, getListableTokens, getService, getServicesByCapability, getTokenByAddress, getTokenBySymbol, hasCapability, isPolicyRefusal, isPrivateHost, isSameOrigin, isServiceId, isTransientRpcError, isValidIpfsCidPath, issueAccountSessionToken, issueSiwsToken, listServices, normalizeAddress, normalizeHash, parseAmount, requestIp, resolveAppFeeConfig, resolveRemixPolicy, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt, uploadDirectoryToBackend, uploadFileToBackend, uploadJsonToBackend, validateUrl, verifyAccountSessionToken, verifySiwsToken };

package/dist/index.d.ts

@@ -392,7 +392,23 @@ declare function getServicesByCapability(cap: ServiceCapability): ServiceDefinit
 declare function hasCapability(id: string | null | undefined, cap: ServiceCapability): boolean;
 
 declare function normalizeAddress(chain: Chain, address: string): string;
-declare function normalizeHash(hash: string): string;
+declare const canonicalHashBrand: unique symbol;
+/**
+ * A felt hash in exactly one spelling: lowercase, zero-padded to 64 hex digits.
+ *
+ * Felts have many equal spellings — `0x0ab`, `0xAB` and `0xab` are the same
+ * value on chain but three different strings. Anything that uses a hash as an
+ * identity or uniqueness key must therefore compare canonical form, or the
+ * same on-chain fact can be presented as several distinct records.
+ *
+ * Only `normalizeHash` can produce this type, so a function that demands a
+ * `CanonicalHash` cannot be handed a raw caller-supplied string. It remains
+ * assignable to `string`, so existing readers are unaffected.
+ */
+type CanonicalHash = string & {
+    readonly [canonicalHashBrand]: true;
+};
+declare function normalizeHash(hash: string): CanonicalHash;
 declare function shortenAddress(chain: Chain, address: string, chars?: number): string;
 
 type SupportedToken = (typeof SUPPORTED_TOKENS)[number];
@@ -407,6 +423,22 @@ declare function u256ToBigInt(low: string, high: string): bigint;
 declare function encodeU256(n: bigint): [string, string];
 
 declare const PUBLIC_RPC_FALLBACKS: readonly string[];
+/**
+ * Codes our own proxies emit to *refuse* a call on policy grounds: no API key,
+ * insufficient credits, rate limited, wrong origin.
+ *
+ * These must never be treated as transient. They sit inside the JSON-RPC
+ * reserved server-error range and carry messages like "Too many requests", so
+ * every generic transient heuristic below would otherwise match them — and a
+ * caller with a fallback list would quietly retry the same call against a
+ * different upstream. That turns a refusal into a redirect: the harder the
+ * meter says no, the faster traffic routes around it. A policy refusal is an
+ * answer, not a failure; retrying it elsewhere is always wrong.
+ */
+declare const POLICY_REFUSAL_CODES: readonly number[];
+declare function isPolicyRefusal(input: {
+    body?: unknown;
+}): boolean;
 declare function isTransientRpcError(input: {
     status?: number;
     body?: unknown;
@@ -420,6 +452,19 @@ interface FailoverFetchOptions {
     }) => void;
 }
 declare function createFailoverFetch(urls: string[], options?: FailoverFetchOptions): typeof fetch;
+/**
+ * Hostnames and env-var names that reach a paid upstream directly.
+ *
+ * An app must never name one of these. Everything paid goes through the
+ * backend, the only place a call can be authenticated, scoped, rate limited
+ * and billed. An app that knows a node's address has a route around all four —
+ * and since the address ships in the client bundle, so does every visitor.
+ *
+ * The list lives here, not in each app, because it is the part that drifts:
+ * adding an upstream must protect every consumer at once. Each app keeps its
+ * own small test that scans its source for these with its own file APIs.
+ */
+declare const PAID_UPSTREAM_MARKERS: readonly string[];
 
 interface RpcProxyConfig {
     backendUrl: string;
@@ -484,6 +529,17 @@ declare function requestIp(req: Request): string;
 
 declare function isSameOrigin(req: Request): boolean;
 
+declare const IDENTITY_TTL_SECONDS = 86400;
+declare const ACCOUNT_SESSION_TTL_SECONDS: number;
+interface SiwsIdentity {
+    address: string;
+    chain: Chain;
+}
+declare function issueSiwsToken(secret: string, chain: Chain, wallet: string, ttlSeconds?: number): string;
+declare function verifySiwsToken(secret: string, raw: string): SiwsIdentity | null;
+declare function issueAccountSessionToken(secret: string, accountId: string, ttlSeconds?: number): string;
+declare function verifyAccountSessionToken(secret: string, raw: string): string | null;
+
 type AssetAttribute = {
     trait_type: string;
     value: string;
@@ -540,4 +596,4 @@ declare const IPFS_SAFE_CONTENT_TYPE_PREFIXES: readonly ["image/jpeg", "image/pn
 declare function resolveSafeImageContentType(contentType: string): string;
 declare const MAX_IPFS_GATEWAY_RESPONSE_BYTES: number;
 
-export { ALLOWED_IMAGE_CONTENT_TYPES, type AssetAttribute, type AssetMetadata, type BackendMetadataConfig, type BackendProxyConfig, type BackendUploadResult, type BuildAssetMetadataInput, Chain, DEFAULT_CURRENCY, type FailoverFetchOptions, type FeeEnv, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IMAGE_PROXY_BYTES, MAX_IMAGE_REDIRECTS, MAX_IPFS_GATEWAY_RESPONSE_BYTES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, type RemixPolicy, type RemixPolicyInput, ResolvedFeeConfig, type RpcProxyConfig, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_GENESIS_MINT_BR_CONTRACT, STARKNET_GENESIS_MINT_GLOBAL_CONTRACT, STARKNET_GENESIS_MINT_LAUNCH_CONTRACT, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, ServiceCapability, ServiceDefinition, type ServiceId, type SupportedToken, type SupportedTokenSymbol, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createBackendProxyHandler, createFailoverFetch, createRateLimiter, createRpcProxyHandler, encodeU256, formatAmount, getBackendSignedUrl, getDerivativesTerm, getListableTokens, getService, getServicesByCapability, getTokenByAddress, getTokenBySymbol, hasCapability, isPrivateHost, isSameOrigin, isServiceId, isTransientRpcError, isValidIpfsCidPath, listServices, normalizeAddress, normalizeHash, parseAmount, requestIp, resolveAppFeeConfig, resolveRemixPolicy, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt, uploadDirectoryToBackend, uploadFileToBackend, uploadJsonToBackend, validateUrl };
+export { ACCOUNT_SESSION_TTL_SECONDS, ALLOWED_IMAGE_CONTENT_TYPES, type AssetAttribute, type AssetMetadata, type BackendMetadataConfig, type BackendProxyConfig, type BackendUploadResult, type BuildAssetMetadataInput, type CanonicalHash, Chain, DEFAULT_CURRENCY, type FailoverFetchOptions, type FeeEnv, IDENTITY_TTL_SECONDS, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IMAGE_PROXY_BYTES, MAX_IMAGE_REDIRECTS, MAX_IPFS_GATEWAY_RESPONSE_BYTES, PAID_UPSTREAM_MARKERS, POLICY_REFUSAL_CODES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, type RemixPolicy, type RemixPolicyInput, ResolvedFeeConfig, type RpcProxyConfig, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_GENESIS_MINT_BR_CONTRACT, STARKNET_GENESIS_MINT_GLOBAL_CONTRACT, STARKNET_GENESIS_MINT_LAUNCH_CONTRACT, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, ServiceCapability, ServiceDefinition, type ServiceId, type SiwsIdentity, type SupportedToken, type SupportedTokenSymbol, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createBackendProxyHandler, createFailoverFetch, createRateLimiter, createRpcProxyHandler, encodeU256, formatAmount, getBackendSignedUrl, getDerivativesTerm, getListableTokens, getService, getServicesByCapability, getTokenByAddress, getTokenBySymbol, hasCapability, isPolicyRefusal, isPrivateHost, isSameOrigin, isServiceId, isTransientRpcError, isValidIpfsCidPath, issueAccountSessionToken, issueSiwsToken, listServices, normalizeAddress, normalizeHash, parseAmount, requestIp, resolveAppFeeConfig, resolveRemixPolicy, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt, uploadDirectoryToBackend, uploadFileToBackend, uploadJsonToBackend, validateUrl, verifyAccountSessionToken, verifySiwsToken };

package/dist/index.js

@@ -1,6 +1,8 @@
 import { z } from 'zod';
 import { keccak_256 } from '@noble/hashes/sha3.js';
-import { base58, base32 } from '@scure/base';
+import { base58, base32, base64urlnopad } from '@scure/base';
+import { hmac } from '@noble/hashes/hmac.js';
+import { sha256 } from '@noble/hashes/sha2.js';
 
 // src/config.ts
 
@@ -1278,8 +1280,23 @@ var PUBLIC_RPC_FALLBACKS = [
   "https://rpc.starknet.lava.build"
 ];
 var TRANSIENT_BODY_RE = /"code"\s*:\s*-32001|"code"\s*:\s*-32603|unable to complete|rate.?limit|too many|throttl|exceed.*quota|temporarily unavailable|service unavailable|overload|gateway.*time|upstream.*time|backend.*error/i;
+var POLICY_REFUSAL_CODES = [-32003, -32005, -32600];
+function isPolicyRefusal(input) {
+  let body = input.body;
+  if (typeof body === "string") {
+    try {
+      body = JSON.parse(body);
+    } catch {
+      return false;
+    }
+  }
+  const err = body?.error;
+  const code = err && typeof err === "object" ? err.code : void 0;
+  return typeof code === "number" && POLICY_REFUSAL_CODES.includes(code);
+}
 function isTransientRpcError(input) {
   const { status, body } = input;
+  if (isPolicyRefusal({ body })) return false;
   if (typeof status === "number" && (status === 429 || status >= 500)) return true;
   if (body == null) return false;
   if (typeof body === "object") {
@@ -1325,6 +1342,16 @@ function createFailoverFetch(urls, options = {}) {
   };
   return failover;
 }
+var PAID_UPSTREAM_MARKERS = [
+  "rpc.starknet.lava.build",
+  "g.alchemy.com",
+  "ALCHEMY_RPC_URL",
+  "STARKNET_RPC_URL",
+  "AVNU_PAYMASTER_API_KEY",
+  "@avnu/avnu-sdk",
+  "api.pinata.cloud",
+  "PINATA_JWT"
+];
 
 // src/server/rate-limit.ts
 function createRateLimiter(windowMs, max) {
@@ -1532,6 +1559,81 @@ async function getBackendSignedUrl(config, kind = "image") {
   if (!res.ok || !data.data) throw new Error(data.error ?? "Failed to create upload URL");
   return data.data.url;
 }
+var IDENTITY_PREFIX = "siws_";
+var ACCOUNT_SESSION_PREFIX = "account_session_";
+var IDENTITY_DOMAIN = "siws-identity-v1";
+var ACCOUNT_SESSION_DOMAIN = "account-session-v1";
+var IDENTITY_TTL_SECONDS = 86400;
+var ACCOUNT_SESSION_TTL_SECONDS = 30 * 24 * 60 * 60;
+var CLOCK_SKEW_SECONDS = 60;
+var encoder = new TextEncoder();
+var decoder = new TextDecoder();
+function toHex(bytes) {
+  let out = "";
+  for (const b of bytes) out += b.toString(16).padStart(2, "0");
+  return out;
+}
+function sign(secret, domain, payload) {
+  const message = domain === null ? payload : `${domain}.${payload}`;
+  return toHex(hmac(sha256, encoder.encode(secret), encoder.encode(message)));
+}
+function constantTimeEquals(a, b) {
+  if (a.length !== b.length) return false;
+  let diff = 0;
+  for (let i = 0; i < a.length; i++) diff |= a.charCodeAt(i) ^ b.charCodeAt(i);
+  return diff === 0;
+}
+function signatureMatches(secret, domain, payload, provided) {
+  return constantTimeEquals(provided, sign(secret, domain, payload)) || constantTimeEquals(provided, sign(secret, null, payload));
+}
+function encodePayload(value) {
+  return base64urlnopad.encode(encoder.encode(JSON.stringify(value)));
+}
+function decodePayload(payload) {
+  try {
+    return JSON.parse(decoder.decode(base64urlnopad.decode(payload)));
+  } catch {
+    return null;
+  }
+}
+function splitToken(raw, prefix) {
+  if (!raw.startsWith(prefix)) return null;
+  const inner = raw.slice(prefix.length);
+  const dot = inner.lastIndexOf(".");
+  if (dot === -1) return null;
+  return { payload: inner.slice(0, dot), signature: inner.slice(dot + 1) };
+}
+function withinLifetime(iat, exp) {
+  if (!iat || !exp) return false;
+  const now = Math.floor(Date.now() / 1e3);
+  return exp >= now && iat <= now + CLOCK_SKEW_SECONDS;
+}
+function issueSiwsToken(secret, chain, wallet, ttlSeconds = IDENTITY_TTL_SECONDS) {
+  const iat = Math.floor(Date.now() / 1e3);
+  const payload = encodePayload({ sub: wallet, chain, iat, exp: iat + ttlSeconds });
+  return `${IDENTITY_PREFIX}${payload}.${sign(secret, IDENTITY_DOMAIN, payload)}`;
+}
+function verifySiwsToken(secret, raw) {
+  const parts = splitToken(raw, IDENTITY_PREFIX);
+  if (!parts) return null;
+  if (!signatureMatches(secret, IDENTITY_DOMAIN, parts.payload, parts.signature)) return null;
+  const data = decodePayload(parts.payload);
+  if (!data?.sub || !withinLifetime(data.iat, data.exp)) return null;
+  return { address: data.sub, chain: data.chain ?? "STARKNET" };
+}
+function issueAccountSessionToken(secret, accountId, ttlSeconds = ACCOUNT_SESSION_TTL_SECONDS) {
+  const iat = Math.floor(Date.now() / 1e3);
+  const payload = encodePayload({ accountId, iat, exp: iat + ttlSeconds });
+  return `${ACCOUNT_SESSION_PREFIX}${payload}.${sign(secret, ACCOUNT_SESSION_DOMAIN, payload)}`;
+}
+function verifyAccountSessionToken(secret, raw) {
+  const parts = splitToken(raw, ACCOUNT_SESSION_PREFIX);
+  if (!parts) return null;
+  if (!signatureMatches(secret, ACCOUNT_SESSION_DOMAIN, parts.payload, parts.signature)) return null;
+  const data = decodePayload(parts.payload);
+  if (!data?.accountId || !withinLifetime(data.iat, data.exp)) return null;
+  return data.accountId;
+}
 
 // src/metadata.ts
 var RESERVED_TRAITS = /* @__PURE__ */ new Set([
@@ -1626,6 +1728,6 @@ function resolveSafeImageContentType(contentType) {
 }
 var MAX_IPFS_GATEWAY_RESPONSE_BYTES = 25 * 1024 * 1024;
 
-export { ALLOWED_IMAGE_CONTENT_TYPES, ApiClient, CHAINS, DEFAULT_CHAIN, DEFAULT_CURRENCY, FeeConfigSchema, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IMAGE_PROXY_BYTES, MAX_IMAGE_REDIRECTS, MAX_IPFS_GATEWAY_RESPONSE_BYTES, MedialaneApiError, OPEN_LICENSES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_GENESIS_MINT_BR_CONTRACT, STARKNET_GENESIS_MINT_GLOBAL_CONTRACT, STARKNET_GENESIS_MINT_LAUNCH_CONTRACT, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createBackendProxyHandler, createFailoverFetch, createRateLimiter, createRpcProxyHandler, encodeU256, formatAmount, getBackendSignedUrl, getCoordinates, getDerivativesTerm, getListableTokens, getService, getServicesByCapability, getStarknetCoordinates, getTokenByAddress, getTokenBySymbol, hasCapability, isPrivateHost, isSameOrigin, isServiceId, isTransientRpcError, isValidIpfsCidPath, listServices, normalizeAddress, normalizeHash, parseAmount, requestIp, resolveAppFeeConfig, resolveConfig, resolveFeeConfig, resolveRemixPolicy, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt, uploadDirectoryToBackend, uploadFileToBackend, uploadJsonToBackend, validateUrl };
+export { ACCOUNT_SESSION_TTL_SECONDS, ALLOWED_IMAGE_CONTENT_TYPES, ApiClient, CHAINS, DEFAULT_CHAIN, DEFAULT_CURRENCY, FeeConfigSchema, IDENTITY_TTL_SECONDS, IPFS_SAFE_CONTENT_TYPE_PREFIXES, MAX_IMAGE_PROXY_BYTES, MAX_IMAGE_REDIRECTS, MAX_IPFS_GATEWAY_RESPONSE_BYTES, MedialaneApiError, OPEN_LICENSES, PAID_UPSTREAM_MARKERS, POLICY_REFUSAL_CODES, PUBLIC_RPC_FALLBACKS, RESERVED_TRAITS, STARKNET_COLLECTION_1155_CLASS_HASH, STARKNET_COLLECTION_1155_CONTRACT, STARKNET_COLLECTION_1155_FACTORY_CLASS_HASH, STARKNET_COLLECTION_1155_START_BLOCK, STARKNET_COLLECTION_721_CONTRACT, STARKNET_COLLECTION_721_START_BLOCK, STARKNET_CREATOR_COIN_CLASS_HASH, STARKNET_CREATOR_COIN_EKUBO_LAUNCHER, STARKNET_CREATOR_COIN_FACTORY_CLASS_HASH, STARKNET_CREATOR_COIN_FACTORY_CONTRACT, STARKNET_CREATOR_COIN_START_BLOCK, STARKNET_DROP_COLLECTION_CLASS_HASH, STARKNET_DROP_FACTORY_CONTRACT, STARKNET_EKUBO_CORE, STARKNET_GENESIS_MINT_BR_CONTRACT, STARKNET_GENESIS_MINT_GLOBAL_CONTRACT, STARKNET_GENESIS_MINT_LAUNCH_CONTRACT, STARKNET_IPCOLLECTION_CLASS_HASH, STARKNET_IPNFT_CLASS_HASH, STARKNET_IP_CLUB_COLLECTION_CLASS_HASH, STARKNET_IP_CLUB_FACTORY_CONTRACT, STARKNET_IP_SPONSORSHIP_CLASS_HASH, STARKNET_IP_SPONSORSHIP_CONTRACT, STARKNET_IP_TICKETS_FACTORY_CONTRACT, STARKNET_IP_TICKET_COLLECTION_CLASS_HASH, STARKNET_MARKETPLACE_1155_CLASS_HASH, STARKNET_MARKETPLACE_1155_CONTRACT, STARKNET_MARKETPLACE_1155_START_BLOCK, STARKNET_MARKETPLACE_721_CLASS_HASH, STARKNET_MARKETPLACE_721_CONTRACT, STARKNET_MARKETPLACE_721_START_BLOCK, STARKNET_NFTCOMMENTS_CONTRACT, STARKNET_POP_COLLECTION_CLASS_HASH, STARKNET_POP_FACTORY_CONTRACT, SUPPORTED_TOKENS, SUPPORTED_URL_CHAINS, assetHref, buildAssetMetadata, chainFromSlug, chainSlug, coinHref, collectionHref, createBackendProxyHandler, createFailoverFetch, createRateLimiter, createRpcProxyHandler, encodeU256, formatAmount, getBackendSignedUrl, getCoordinates, getDerivativesTerm, getListableTokens, getService, getServicesByCapability, getStarknetCoordinates, getTokenByAddress, getTokenBySymbol, hasCapability, isPolicyRefusal, isPrivateHost, isSameOrigin, isServiceId, isTransientRpcError, isValidIpfsCidPath, issueAccountSessionToken, issueSiwsToken, listServices, normalizeAddress, normalizeHash, parseAmount, requestIp, resolveAppFeeConfig, resolveConfig, resolveFeeConfig, resolveRemixPolicy, resolveSafeImageContentType, shortenAddress, stringifyBigInts, u256ToBigInt, uploadDirectoryToBackend, uploadFileToBackend, uploadJsonToBackend, validateUrl, verifyAccountSessionToken, verifySiwsToken };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map