@oobe-protocol-labs/synapse-sap-sdk 0.14.0 → 0.15.0

package/dist/cjs/utils/endpoint-validator.js

@@ -0,0 +1,232 @@
+"use strict";
+/**
+ * @module utils/endpoint-validator
+ * @description Endpoint validation utilities for SAP agent discovery.
+ *
+ * Fetches advertised endpoints and verifies they respond with JSON,
+ * proper CORS headers, and SAP-compatible behavior. Designed to
+ * fail fast when an endpoint 404s, requires CSRF tokens, or
+ * serves HTML instead of JSON.
+ *
+ * Used by:
+ *   - CLI `discovery validate` command
+ *   - SDK programmatic validation before x402 calls
+ *   - Integration test harnesses
+ *
+ * @category Utils
+ * @since v0.6.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateEndpoint = validateEndpoint;
+exports.validateEndpointDescriptor = validateEndpointDescriptor;
+exports.validateHealthCheck = validateHealthCheck;
+exports.validateAgentEndpoints = validateAgentEndpoints;
+// ═══════════════════════════════════════════════════════════════════
+//  Core Validator
+// ═══════════════════════════════════════════════════════════════════
+/**
+ * @name validateEndpoint
+ * @description Validate a single endpoint URL for SAP compatibility.
+ *
+ * Performs the following checks:
+ *   1. URL is reachable (no 4xx/5xx)
+ *   2. Response Content-Type is JSON
+ *   3. CORS headers are present (if checkCors enabled)
+ *   4. No redirect to HTML login pages
+ *   5. Measures response latency
+ *
+ * @param url - The endpoint URL to validate.
+ * @param opts - Validation options.
+ * @returns An {@link EndpointValidationResult} with detailed check results.
+ *
+ * @category Utils
+ * @since v0.6.0
+ *
+ * @example
+ * ```ts
+ * const result = await validateEndpoint("https://api.example.com/x402");
+ * if (!result.reachable) console.error(result.error);
+ * ```
+ */
+async function validateEndpoint(url, opts = {}) {
+    const timeoutMs = opts.timeoutMs ?? 10_000;
+    const retries = opts.retries ?? 1;
+    const method = opts.method ?? "HEAD";
+    const warnings = [];
+    let lastError;
+    for (let attempt = 0; attempt <= retries; attempt++) {
+        try {
+            const controller = new AbortController();
+            const timer = setTimeout(() => controller.abort(), timeoutMs);
+            const start = Date.now();
+            const response = await fetch(url, {
+                method,
+                signal: controller.signal,
+                headers: {
+                    Accept: "application/json",
+                    ...(opts.headers ?? {}),
+                },
+                redirect: "follow",
+            });
+            clearTimeout(timer);
+            const latencyMs = Date.now() - start;
+            const contentType = response.headers.get("content-type") ?? "";
+            const isJson = contentType.includes("application/json") || contentType.includes("text/json");
+            const hasCors = !!response.headers.get("access-control-allow-origin");
+            // Check for HTML responses (login pages, CSRF gates)
+            if (contentType.includes("text/html")) {
+                warnings.push("Endpoint returns HTML — may require CSRF or browser session");
+            }
+            // Check for redirect chains
+            if (response.redirected) {
+                warnings.push(`Endpoint redirected to ${response.url}`);
+            }
+            // Check for common error statuses
+            if (response.status === 403) {
+                warnings.push("403 Forbidden — may require authentication or CSRF tokens");
+            }
+            if (response.status === 404) {
+                warnings.push("404 Not Found — endpoint URL may be incorrect");
+            }
+            if (response.status === 405) {
+                warnings.push(`405 Method Not Allowed — endpoint may not accept ${method}`);
+            }
+            // Determine SAP capability
+            const isSapCapable = isJson &&
+                response.status < 400 &&
+                !contentType.includes("text/html");
+            // CORS check if requested
+            if (opts.checkCors && !hasCors) {
+                warnings.push("No CORS headers — cross-origin requests will fail");
+            }
+            return {
+                url,
+                reachable: response.status < 500,
+                statusCode: response.status,
+                latencyMs,
+                isJson,
+                hasCors,
+                isSapCapable,
+                error: response.status >= 400
+                    ? `HTTP ${response.status}: ${response.statusText}`
+                    : undefined,
+                warnings,
+            };
+        }
+        catch (err) {
+            lastError =
+                err instanceof Error ? err.message : String(err);
+            if (attempt < retries)
+                continue;
+        }
+    }
+    return {
+        url,
+        reachable: false,
+        statusCode: 0,
+        latencyMs: 0,
+        isJson: false,
+        hasCors: false,
+        isSapCapable: false,
+        error: lastError ?? "Unknown error",
+        warnings,
+    };
+}
+/**
+ * @name validateEndpointDescriptor
+ * @description Validate an {@link EndpointDescriptor} with context-aware checks.
+ *
+ * Uses the descriptor's method, auth requirements, and other metadata to
+ * perform a more targeted validation than raw URL checking.
+ *
+ * @param descriptor - The endpoint descriptor to validate.
+ * @param opts - Additional options.
+ * @returns An {@link EndpointValidationResult}.
+ *
+ * @category Utils
+ * @since v0.6.0
+ */
+async function validateEndpointDescriptor(descriptor, opts = {}) {
+    const headers = {
+        ...(opts.headers ?? {}),
+        ...(descriptor.requiredHeaders ?? {}),
+    };
+    // Use the descriptor's method, falling back to HEAD for safety
+    const method = opts.method ?? (descriptor.method === "GET" ? "GET" : "HEAD");
+    const result = await validateEndpoint(descriptor.url, {
+        ...opts,
+        method,
+        headers,
+    });
+    // Add descriptor-specific warnings
+    const warnings = [...result.warnings];
+    if (descriptor.requiresCSRF) {
+        warnings.push("Endpoint declares requiresCSRF — automated calls may need token management");
+    }
+    if (descriptor.requiresCookies) {
+        warnings.push("Endpoint declares requiresCookies — stateless calls may fail");
+    }
+    if (descriptor.requiresAuth && !descriptor.authType) {
+        warnings.push("Endpoint requires auth but no authType specified");
+    }
+    return { ...result, warnings };
+}
+/**
+ * @name validateHealthCheck
+ * @description Validate an agent's health-check endpoint.
+ *
+ * @param health - The health-check descriptor.
+ * @returns An {@link EndpointValidationResult}.
+ *
+ * @category Utils
+ * @since v0.6.0
+ */
+async function validateHealthCheck(health) {
+    const result = await validateEndpoint(health.url, {
+        timeoutMs: health.timeoutMs,
+        method: health.method ?? "GET",
+    });
+    const warnings = [...result.warnings];
+    if (result.reachable && result.statusCode !== health.expectedStatus) {
+        warnings.push(`Expected status ${health.expectedStatus}, got ${result.statusCode}`);
+    }
+    return {
+        ...result,
+        isSapCapable: result.reachable && result.statusCode === health.expectedStatus,
+        warnings,
+    };
+}
+/**
+ * @name validateAgentEndpoints
+ * @description Validate all endpoints for an agent (primary + health + tool overrides).
+ *
+ * @param params - Object containing the endpoints to validate.
+ * @param params.endpoint - Primary endpoint descriptor.
+ * @param params.healthCheck - Optional health-check descriptor.
+ * @param params.toolEndpoints - Optional array of tool-specific endpoint overrides.
+ * @param opts - Validation options.
+ * @returns A map of `label → EndpointValidationResult`.
+ *
+ * @category Utils
+ * @since v0.6.0
+ */
+async function validateAgentEndpoints(params, opts = {}) {
+    const results = new Map();
+    // Validate primary endpoint
+    const primary = await validateEndpointDescriptor(params.endpoint, opts);
+    results.set("primary", primary);
+    // Validate health check
+    if (params.healthCheck) {
+        const health = await validateHealthCheck(params.healthCheck);
+        results.set("health", health);
+    }
+    // Validate tool-specific endpoints
+    if (params.toolEndpoints) {
+        for (const { name, endpoint } of params.toolEndpoints) {
+            const toolResult = await validateEndpointDescriptor(endpoint, opts);
+            results.set(`tool:${name}`, toolResult);
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=endpoint-validator.js.map

package/dist/cjs/utils/endpoint-validator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint-validator.js","sourceRoot":"","sources":["../../../src/utils/endpoint-validator.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;AA2DH,4CAkGC;AAgBD,gEAgCC;AAYD,kDAqBC;AAgBD,wDA6BC;AA5PD,sEAAsE;AACtE,kBAAkB;AAClB,sEAAsE;AAEtE;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACI,KAAK,UAAU,gBAAgB,CACpC,GAAW,EACX,OAAgC,EAAE;IAElC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;IAC3C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC;IACrC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,IAAI,SAA6B,CAAC;IAElC,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,IAAI,OAAO,EAAE,OAAO,EAAE,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;YACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;YAC9D,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YAEzB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAChC,MAAM;gBACN,MAAM,EAAE,UAAU,CAAC,MAAM;gBACzB,OAAO,EAAE;oBACP,MAAM,EAAE,kBAAkB;oBAC1B,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;iBACxB;gBACD,QAAQ,EAAE,QAAQ;aACnB,CAAC,CAAC;YAEH,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YAErC,MAAM,WAAW,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,EAAE,CAAC;YAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,kBAAkB,CAAC,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC7F,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAEtE,qDAAqD;YACrD,IAAI,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;gBACtC,QAAQ,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;YAC/E,CAAC;YAED,4BAA4B;YAC5B,IAAI,QAAQ,CAAC,UAAU,EAAE,CAAC;gBACxB,QAAQ,CAAC,IAAI,CAAC,0BAA0B,QAAQ,CAAC,GAAG,EAAE,CAAC,CAAC;YAC1D,CAAC;YAED,kCAAkC;YAClC,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;YAC7E,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC,+CAA+C,CAAC,CAAC;YACjE,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC5B,QAAQ,CAAC,IAAI,CAAC,oDAAoD,MAAM,EAAE,CAAC,CAAC;YAC9E,CAAC;YAED,2BAA2B;YAC3B,MAAM,YAAY,GAChB,MAAM;gBACN,QAAQ,CAAC,MAAM,GAAG,GAAG;gBACrB,CAAC,WAAW,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAErC,0BAA0B;YAC1B,IAAI,IAAI,CAAC,SAAS,IAAI,CAAC,OAAO,EAAE,CAAC;gBAC/B,QAAQ,CAAC,IAAI,CAAC,mDAAmD,CAAC,CAAC;YACrE,CAAC;YAED,OAAO;gBACL,GAAG;gBACH,SAAS,EAAE,QAAQ,CAAC,MAAM,GAAG,GAAG;gBAChC,UAAU,EAAE,QAAQ,CAAC,MAAM;gBAC3B,SAAS;gBACT,MAAM;gBACN,OAAO;gBACP,YAAY;gBACZ,KAAK,EACH,QAAQ,CAAC,MAAM,IAAI,GAAG;oBACpB,CAAC,CAAC,QAAQ,QAAQ,CAAC,MAAM,KAAK,QAAQ,CAAC,UAAU,EAAE;oBACnD,CAAC,CAAC,SAAS;gBACf,QAAQ;aACT,CAAC;QACJ,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,SAAS;gBACP,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACnD,IAAI,OAAO,GAAG,OAAO;gBAAE,SAAS;QAClC,CAAC;IACH,CAAC;IAED,OAAO;QACL,GAAG;QACH,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,CAAC;QACb,SAAS,EAAE,CAAC;QACZ,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,KAAK;QACd,YAAY,EAAE,KAAK;QACnB,KAAK,EAAE,SAAS,IAAI,eAAe;QACnC,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,0BAA0B,CAC9C,UAA8B,EAC9B,OAAgC,EAAE;IAElC,MAAM,OAAO,GAA2B;QACtC,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC;QACvB,GAAG,CAAC,UAAU,CAAC,eAAe,IAAI,EAAE,CAAC;KACtC,CAAC;IAEF,+DAA+D;IAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAE7E,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,UAAU,CAAC,GAAG,EAAE;QACpD,GAAG,IAAI;QACP,MAAM;QACN,OAAO;KACR,CAAC,CAAC;IAEH,mCAAmC;IACnC,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEtC,IAAI,UAAU,CAAC,YAAY,EAAE,CAAC;QAC5B,QAAQ,CAAC,IAAI,CAAC,4EAA4E,CAAC,CAAC;IAC9F,CAAC;IACD,IAAI,UAAU,CAAC,eAAe,EAAE,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,8DAA8D,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,UAAU,CAAC,YAAY,IAAI,CAAC,UAAU,CAAC,QAAQ,EAAE,CAAC;QACpD,QAAQ,CAAC,IAAI,CAAC,kDAAkD,CAAC,CAAC;IACpE,CAAC;IAED,OAAO,EAAE,GAAG,MAAM,EAAE,QAAQ,EAAE,CAAC;AACjC,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,mBAAmB,CACvC,MAA6B;IAE7B,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,MAAM,CAAC,GAAG,EAAE;QAChD,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,KAAK;KAC/B,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;IAEtC,IAAI,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,cAAc,EAAE,CAAC;QACpE,QAAQ,CAAC,IAAI,CACX,mBAAmB,MAAM,CAAC,cAAc,SAAS,MAAM,CAAC,UAAU,EAAE,CACrE,CAAC;IACJ,CAAC;IAED,OAAO;QACL,GAAG,MAAM;QACT,YAAY,EAAE,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,KAAK,MAAM,CAAC,cAAc;QAC7E,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACI,KAAK,UAAU,sBAAsB,CAC1C,MAIC,EACD,OAAgC,EAAE;IAElC,MAAM,OAAO,GAAG,IAAI,GAAG,EAAoC,CAAC;IAE5D,4BAA4B;IAC5B,MAAM,OAAO,GAAG,MAAM,0BAA0B,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxE,OAAO,CAAC,GAAG,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAEhC,wBAAwB;IACxB,IAAI,MAAM,CAAC,WAAW,EAAE,CAAC;QACvB,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,mCAAmC;IACnC,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;QACzB,KAAK,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;YACtD,MAAM,UAAU,GAAG,MAAM,0BAA0B,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;YACpE,OAAO,CAAC,GAAG,CAAC,QAAQ,IAAI,EAAE,EAAE,UAAU,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/cjs/utils/escrow-validation.js

@@ -0,0 +1,219 @@
+"use strict";
+/**
+ * @module utils/escrow-validation
+ * @description Server-side escrow validation pipeline.
+ *
+ * Provides typed helpers to validate escrow state before settlement
+ * and to build the correct SPL `AccountMeta[]` for token escrows.
+ *
+ * @category Utils
+ * @since v0.6.4
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MissingEscrowAtaError = void 0;
+exports.validateEscrowState = validateEscrowState;
+exports.attachSplAccounts = attachSplAccounts;
+exports.toAccountMetas = toAccountMetas;
+const web3_js_1 = require("@solana/web3.js");
+const anchor_1 = require("@coral-xyz/anchor");
+const rpc_strategy_1 = require("./rpc-strategy");
+const pda_1 = require("../pda");
+const errors_1 = require("../errors");
+// ═══════════════════════════════════════════════════════════════════
+//  Error
+// ═══════════════════════════════════════════════════════════════════
+/**
+ * @name MissingEscrowAtaError
+ * @description Thrown when an SPL escrow operation is missing required
+ * Associated Token Accounts.
+ * @category Errors
+ * @since v0.6.4
+ */
+class MissingEscrowAtaError extends errors_1.SapError {
+    /** The ATA address that is missing. */
+    ataAddress;
+    /** Which side is missing: depositor or escrow. */
+    side;
+    constructor(ataAddress, side) {
+        super(`Missing ${side} ATA: ${ataAddress}. ` +
+            `Settlement mode is Escrow/SPL but the Associated Token Account does not exist. ` +
+            `The ${side} must create the ATA before escrow operations.`);
+        this.name = "MissingEscrowAtaError";
+        this.ataAddress = ataAddress;
+        this.side = side;
+    }
+}
+exports.MissingEscrowAtaError = MissingEscrowAtaError;
+// ═══════════════════════════════════════════════════════════════════
+//  Validation
+// ═══════════════════════════════════════════════════════════════════
+/** Standard SPL Token program ID. */
+const TOKEN_PROGRAM_ID_STR = "TokenkegQfeZyiNwAJbNbGKPFXCWuBvf9Ss623VQ5DA";
+/**
+ * @name validateEscrowState
+ * @description Validates that an escrow is in a correct state for settlement.
+ *
+ * Checks:
+ * - Escrow PDA exists on-chain
+ * - If SPL: depositor ATA exists, escrow ATA exists, token mint matches
+ * - Balance >= requested settlement amount
+ * - Escrow is not expired
+ * - Max calls not exceeded
+ *
+ * @param connection  - Solana RPC connection.
+ * @param agentWallet - The agent's wallet public key.
+ * @param depositorWallet - The depositor's wallet public key.
+ * @param fetchEscrow - Callback to fetch escrow data (avoids coupling to SapProgram).
+ * @param opts
+ * @param opts.callsToSettle - Number of calls to validate affordability for.
+ *
+ * @returns A detailed {@link EscrowValidationResult}.
+ *
+ * @category Utils
+ * @since v0.6.4
+ *
+ * @example
+ * ```ts
+ * const result = await validateEscrowState(
+ *   connection,
+ *   agentWallet,
+ *   depositorWallet,
+ *   (pda) => client.escrow.fetchByPda(pda),
+ *   { callsToSettle: 5 },
+ * );
+ *
+ * if (!result.valid) {
+ *   console.error("Escrow validation failed:", result.errors);
+ * }
+ * ```
+ */
+async function validateEscrowState(connection, agentWallet, depositorWallet, fetchEscrow, opts) {
+    const [agentPda] = (0, pda_1.deriveAgent)(agentWallet);
+    const [escrowPda] = (0, pda_1.deriveEscrow)(agentPda, depositorWallet);
+    const errors = [];
+    // 1. Fetch escrow
+    const escrow = await fetchEscrow(escrowPda);
+    if (!escrow) {
+        return {
+            valid: false,
+            escrow: null,
+            escrowPda,
+            agentPda,
+            isSplEscrow: false,
+            splAccounts: [],
+            errors: [`Escrow not found at ${escrowPda.toBase58()}`],
+        };
+    }
+    // 2. Check expiry
+    if (escrow.expiresAt.gt(new anchor_1.BN(0))) {
+        const now = Math.floor(Date.now() / 1000);
+        if (escrow.expiresAt.lt(new anchor_1.BN(now))) {
+            errors.push(`Escrow expired at ${escrow.expiresAt.toString()}`);
+        }
+    }
+    // 3. Check balance / calls
+    const callsToSettle = opts?.callsToSettle ?? 1;
+    const costForCalls = escrow.pricePerCall.mul(new anchor_1.BN(callsToSettle));
+    if (escrow.balance.lt(costForCalls)) {
+        errors.push(`Insufficient balance: ${escrow.balance.toString()} < ${costForCalls.toString()} (${callsToSettle} calls × ${escrow.pricePerCall.toString()})`);
+    }
+    // 4. Check max calls
+    if (escrow.maxCalls.gt(new anchor_1.BN(0))) {
+        const remaining = escrow.maxCalls.sub(escrow.totalCallsSettled);
+        if (remaining.lt(new anchor_1.BN(callsToSettle))) {
+            errors.push(`Max calls exceeded: ${remaining.toString()} remaining but needs ${callsToSettle}`);
+        }
+    }
+    // 5. Determine if SPL
+    const isSplEscrow = escrow.tokenMint !== null &&
+        escrow.tokenMint.toBase58() !== "11111111111111111111111111111111";
+    // 6. Build SPL accounts (if SPL escrow)
+    const splAccounts = [];
+    if (isSplEscrow) {
+        const mint = escrow.tokenMint;
+        const depositorAta = (0, rpc_strategy_1.findATA)(depositorWallet, mint);
+        const escrowAta = (0, rpc_strategy_1.findATA)(escrowPda, mint);
+        // Verify depositor ATA exists
+        const depositorAtaInfo = await connection.getAccountInfo(depositorAta);
+        if (!depositorAtaInfo) {
+            errors.push(`Depositor ATA does not exist: ${depositorAta.toBase58()}`);
+        }
+        // Verify escrow ATA exists
+        const escrowAtaInfo = await connection.getAccountInfo(escrowAta);
+        if (!escrowAtaInfo) {
+            errors.push(`Escrow ATA does not exist: ${escrowAta.toBase58()}`);
+        }
+        // Verify mint matches
+        if (depositorAtaInfo) {
+            // SPL token account data: bytes 0-32 = mint
+            const ataMint = depositorAtaInfo.data.subarray(0, 32);
+            if (Buffer.from(ataMint).toString("hex") !== mint.toBuffer().toString("hex")) {
+                errors.push(`Depositor ATA mint mismatch: expected ${mint.toBase58()}`);
+            }
+        }
+        splAccounts.push({ kind: "depositorAta", pubkey: depositorAta, writable: true }, { kind: "escrowAta", pubkey: escrowAta, writable: true }, { kind: "tokenMint", pubkey: mint, writable: false }, { kind: "tokenProgram", pubkey: new web3_js_1.PublicKey(TOKEN_PROGRAM_ID_STR), writable: false });
+    }
+    return {
+        valid: errors.length === 0,
+        escrow,
+        escrowPda,
+        agentPda,
+        isSplEscrow,
+        splAccounts,
+        errors,
+    };
+}
+/**
+ * @name attachSplAccounts
+ * @description Build the typed `SplAccountMeta[]` for an SPL token escrow operation.
+ * Does NOT validate existence — use {@link validateEscrowState} for full validation.
+ *
+ * @param escrowPda      - The escrow PDA address.
+ * @param depositorWallet - The depositor's wallet public key.
+ * @param tokenMint      - The SPL token mint.
+ * @returns An array of typed {@link SplAccountMeta} for SPL escrow operations.
+ *
+ * @category Utils
+ * @since v0.6.4
+ *
+ * @example
+ * ```ts
+ * const splMetas = attachSplAccounts(escrowPda, depositorWallet, usdcMint);
+ *
+ * // Convert to Anchor-compatible AccountMeta[]
+ * const accountMetas = splMetas.map(m => ({
+ *   pubkey: m.pubkey,
+ *   isWritable: m.writable,
+ *   isSigner: false,
+ * }));
+ *
+ * await client.escrow.settle(depositor, calls, hash, accountMetas);
+ * ```
+ */
+function attachSplAccounts(escrowPda, depositorWallet, tokenMint) {
+    return [
+        { kind: "depositorAta", pubkey: (0, rpc_strategy_1.findATA)(depositorWallet, tokenMint), writable: true },
+        { kind: "escrowAta", pubkey: (0, rpc_strategy_1.findATA)(escrowPda, tokenMint), writable: true },
+        { kind: "tokenMint", pubkey: tokenMint, writable: false },
+        { kind: "tokenProgram", pubkey: new web3_js_1.PublicKey(TOKEN_PROGRAM_ID_STR), writable: false },
+    ];
+}
+/**
+ * @name toAccountMetas
+ * @description Convert typed {@link SplAccountMeta} to Anchor-compatible
+ * `AccountMeta[]` for use with `.remainingAccounts()`.
+ *
+ * @param splMetas - Array of typed SPL account metas.
+ * @returns `AccountMeta[]` compatible with Anchor's `remainingAccounts`.
+ *
+ * @category Utils
+ * @since v0.6.4
+ */
+function toAccountMetas(splMetas) {
+    return splMetas.map((m) => ({
+        pubkey: m.pubkey,
+        isWritable: m.writable,
+        isSigner: false,
+    }));
+}
+//# sourceMappingURL=escrow-validation.js.map

package/dist/cjs/utils/escrow-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"escrow-validation.js","sourceRoot":"","sources":["../../../src/utils/escrow-validation.ts"],"names":[],"mappings":";AAAA;;;;;;;;;GASG;;;AAiIH,kDAsGC;AA6BD,8CAWC;AAaD,wCAMC;AAhSD,6CAIyB;AACzB,8CAAuC;AACvC,iDAAyC;AACzC,gCAAmD;AACnD,sCAAqC;AA6CrC,sEAAsE;AACtE,SAAS;AACT,sEAAsE;AAEtE;;;;;;GAMG;AACH,MAAa,qBAAsB,SAAQ,iBAAQ;IACjD,uCAAuC;IAC9B,UAAU,CAAS;IAC5B,kDAAkD;IACzC,IAAI,CAAyB;IAEtC,YAAY,UAAkB,EAAE,IAA4B;QAC1D,KAAK,CACH,WAAW,IAAI,SAAS,UAAU,IAAI;YACpC,iFAAiF;YACjF,OAAO,IAAI,gDAAgD,CAC9D,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAhBD,sDAgBC;AAED,sEAAsE;AACtE,cAAc;AACd,sEAAsE;AAEtE,qCAAqC;AACrC,MAAM,oBAAoB,GAAG,6CAA6C,CAAC;AAE3E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AACI,KAAK,UAAU,mBAAmB,CACvC,UAAsB,EACtB,WAAsB,EACtB,eAA0B,EAC1B,WAAwE,EACxE,IAAiC;IAEjC,MAAM,CAAC,QAAQ,CAAC,GAAG,IAAA,iBAAW,EAAC,WAAW,CAAC,CAAC;IAC5C,MAAM,CAAC,SAAS,CAAC,GAAG,IAAA,kBAAY,EAAC,QAAQ,EAAE,eAAe,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAa,EAAE,CAAC;IAE5B,kBAAkB;IAClB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,KAAK,EAAE,KAAK;YACZ,MAAM,EAAE,IAAI;YACZ,SAAS;YACT,QAAQ;YACR,WAAW,EAAE,KAAK;YAClB,WAAW,EAAE,EAAE;YACf,MAAM,EAAE,CAAC,uBAAuB,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC;SACxD,CAAC;IACJ,CAAC;IAED,kBAAkB;IAClB,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,WAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACnC,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;QAC1C,IAAI,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,WAAE,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;YACrC,MAAM,CAAC,IAAI,CAAC,qBAAqB,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAClE,CAAC;IACH,CAAC;IAED,2BAA2B;IAC3B,MAAM,aAAa,GAAG,IAAI,EAAE,aAAa,IAAI,CAAC,CAAC;IAC/C,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,WAAE,CAAC,aAAa,CAAC,CAAC,CAAC;IACpE,IAAI,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,IAAI,CACT,yBAAyB,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,YAAY,CAAC,QAAQ,EAAE,KAAK,aAAa,YAAY,MAAM,CAAC,YAAY,CAAC,QAAQ,EAAE,GAAG,CAC/I,CAAC;IACJ,CAAC;IAED,qBAAqB;IACrB,IAAI,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,WAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC;QAChE,IAAI,SAAS,CAAC,EAAE,CAAC,IAAI,WAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,IAAI,CACT,uBAAuB,SAAS,CAAC,QAAQ,EAAE,wBAAwB,aAAa,EAAE,CACnF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,sBAAsB;IACtB,MAAM,WAAW,GACf,MAAM,CAAC,SAAS,KAAK,IAAI;QACzB,MAAM,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,kCAAkC,CAAC;IAErE,wCAAwC;IACxC,MAAM,WAAW,GAAqB,EAAE,CAAC;IACzC,IAAI,WAAW,EAAE,CAAC;QAChB,MAAM,IAAI,GAAG,MAAM,CAAC,SAAU,CAAC;QAC/B,MAAM,YAAY,GAAG,IAAA,sBAAO,EAAC,eAAe,EAAE,IAAI,CAAC,CAAC;QACpD,MAAM,SAAS,GAAG,IAAA,sBAAO,EAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAE3C,8BAA8B;QAC9B,MAAM,gBAAgB,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,YAAY,CAAC,CAAC;QACvE,IAAI,CAAC,gBAAgB,EAAE,CAAC;YACtB,MAAM,CAAC,IAAI,CAAC,iCAAiC,YAAY,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC1E,CAAC;QAED,2BAA2B;QAC3B,MAAM,aAAa,GAAG,MAAM,UAAU,CAAC,cAAc,CAAC,SAAS,CAAC,CAAC;QACjE,IAAI,CAAC,aAAa,EAAE,CAAC;YACnB,MAAM,CAAC,IAAI,CAAC,8BAA8B,SAAS,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;QACpE,CAAC;QAED,sBAAsB;QACtB,IAAI,gBAAgB,EAAE,CAAC;YACrB,4CAA4C;YAC5C,MAAM,OAAO,GAAG,gBAAgB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;YACtD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC,QAAQ,EAAE,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC7E,MAAM,CAAC,IAAI,CAAC,yCAAyC,IAAI,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;YAC1E,CAAC;QACH,CAAC;QAED,WAAW,CAAC,IAAI,CACd,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,YAAY,EAAE,QAAQ,EAAE,IAAI,EAAE,EAC9D,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,IAAI,EAAE,EACxD,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,EACpD,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,mBAAS,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE,CACvF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,MAAM;QACN,SAAS;QACT,QAAQ;QACR,WAAW;QACX,WAAW;QACX,MAAM;KACP,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,SAAgB,iBAAiB,CAC/B,SAAoB,EACpB,eAA0B,EAC1B,SAAoB;IAEpB,OAAO;QACL,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAA,sBAAO,EAAC,eAAe,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;QACrF,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,IAAA,sBAAO,EAAC,SAAS,EAAE,SAAS,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE;QAC5E,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,EAAE,QAAQ,EAAE,KAAK,EAAE;QACzD,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,IAAI,mBAAS,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,KAAK,EAAE;KACvF,CAAC;AACJ,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,cAAc,CAAC,QAA0B;IACvD,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1B,MAAM,EAAE,CAAC,CAAC,MAAM;QAChB,UAAU,EAAE,CAAC,CAAC,QAAQ;QACtB,QAAQ,EAAE,KAAK;KAChB,CAAC,CAAC,CAAC;AACN,CAAC"}

package/dist/cjs/utils/hash.js

@@ -0,0 +1,109 @@
+"use strict";
+/**
+ * @module utils/hash
+ * @description Cryptographic hashing utilities.
+ *
+ * @category Utils
+ * @since v0.1.0
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.computeBatchRoot = exports.hashToArray = exports.sha256 = void 0;
+const crypto_1 = require("crypto");
+/**
+ * Compute the SHA-256 hash of a UTF-8 string or byte buffer.
+ *
+ * Returns a 32-byte `Uint8Array` suitable for PDA seeds
+ * and Anchor instruction arguments.
+ *
+ * @name sha256
+ * @description Hashes the input using Node’s `crypto.createHash("sha256")`.
+ * @param input - A UTF-8 string, `Buffer`, or `Uint8Array` to hash.
+ * @returns {Uint8Array} 32-byte SHA-256 digest.
+ * @category Utils
+ * @since v0.1.0
+ * @example
+ * ```ts
+ * import { sha256 } from "@synapse-sap/sdk/utils";
+ *
+ * const hash = sha256("jupiter:swap"); // Uint8Array (32 bytes)
+ * ```
+ */
+const sha256 = (input) => {
+    const hash = (0, crypto_1.createHash)("sha256");
+    hash.update(typeof input === "string" ? Buffer.from(input, "utf-8") : input);
+    return new Uint8Array(hash.digest());
+};
+exports.sha256 = sha256;
+/**
+ * Convert a `Uint8Array` hash to a plain `number[]`.
+ *
+ * Anchor instruction argument types expect `number[]` for hash fields
+ * rather than typed arrays.
+ *
+ * @name hashToArray
+ * @description Converts a byte array (typically 32 bytes) to a plain JavaScript `number[]`.
+ * @param hash - The byte array to convert.
+ * @returns {number[]} Shallow copy as a plain array of numbers.
+ * @category Utils
+ * @since v0.1.0
+ * @example
+ * ```ts
+ * import { sha256, hashToArray } from "@synapse-sap/sdk/utils";
+ *
+ * const arr = hashToArray(sha256("jupiter:swap")); // number[]
+ * ```
+ */
+const hashToArray = (hash) => Array.from(hash);
+exports.hashToArray = hashToArray;
+/**
+ * Compute the deterministic batch root used by `settle_batch` (v0.10.0).
+ *
+ * The on-chain program enforces:
+ *   `batch_root == sha256(s_0 || s_1 || ... || s_{N-1})`
+ * where each `s_i` is a 32-byte service hash, in the same order as the
+ * `settlements: Settlement[]` array passed to the instruction.
+ *
+ * Use this helper to derive the seed for the {@link deriveSettlementReceipt}
+ * PDA when batching settlements.
+ *
+ * @name computeBatchRoot
+ * @param serviceHashes - Array of 32-byte service hashes (Buffer/Uint8Array/number[]).
+ * @returns {Uint8Array} 32-byte batch root.
+ * @throws If any `serviceHashes[i]` is not exactly 32 bytes long.
+ * @category Utils
+ * @since v0.10.0
+ *
+ * @example
+ * ```ts
+ * import { computeBatchRoot, hashToArray } from "@synapse-sap/sdk/utils";
+ *
+ * const root = computeBatchRoot([h1, h2, h3]);
+ * await client.escrow.settleBatch(depositor, settlements, root);
+ * ```
+ */
+const computeBatchRoot = (serviceHashes) => {
+    if (serviceHashes.length === 0) {
+        throw new Error("computeBatchRoot: serviceHashes must not be empty");
+    }
+    const hash = (0, crypto_1.createHash)("sha256");
+    for (let i = 0; i < serviceHashes.length; i++) {
+        const h = serviceHashes[i];
+        let buf;
+        if (h instanceof Uint8Array) {
+            buf = Buffer.from(h);
+        }
+        else if (Array.isArray(h)) {
+            buf = Buffer.from(h);
+        }
+        else {
+            throw new Error(`computeBatchRoot: serviceHashes[${i}] is undefined or unsupported type`);
+        }
+        if (buf.length !== 32) {
+            throw new Error(`computeBatchRoot: serviceHashes[${i}] must be 32 bytes, got ${buf.length}`);
+        }
+        hash.update(buf);
+    }
+    return new Uint8Array(hash.digest());
+};
+exports.computeBatchRoot = computeBatchRoot;
+//# sourceMappingURL=hash.js.map

package/dist/cjs/utils/hash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hash.js","sourceRoot":"","sources":["../../../src/utils/hash.ts"],"names":[],"mappings":";AAAA;;;;;;GAMG;;;AAEH,mCAAoC;AAEpC;;;;;;;;;;;;;;;;;;GAkBG;AACI,MAAM,MAAM,GAAG,CAAC,KAAmC,EAAc,EAAE;IACxE,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC;IAClC,IAAI,CAAC,MAAM,CACT,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAChE,CAAC;IACF,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AACvC,CAAC,CAAC;AANW,QAAA,MAAM,UAMjB;AAEF;;;;;;;;;;;;;;;;;;GAkBG;AACI,MAAM,WAAW,GAAG,CAAC,IAAgB,EAAY,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAA/D,QAAA,WAAW,eAAoD;AAE5E;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AACI,MAAM,gBAAgB,GAAG,CAC9B,aAA4D,EAChD,EAAE;IACd,IAAI,aAAa,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC/B,MAAM,IAAI,KAAK,CAAC,mDAAmD,CAAC,CAAC;IACvE,CAAC;IACD,MAAM,IAAI,GAAG,IAAA,mBAAU,EAAC,QAAQ,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,CAAC,GAAG,aAAa,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC,YAAY,UAAU,EAAE,CAAC;YAC5B,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5B,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,MAAM,IAAI,KAAK,CACb,mCAAmC,CAAC,oCAAoC,CACzE,CAAC;QACJ,CAAC;QACD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,KAAK,CACb,mCAAmC,CAAC,2BAA2B,GAAG,CAAC,MAAM,EAAE,CAC5E,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;AACvC,CAAC,CAAC;AA3BW,QAAA,gBAAgB,oBA2B3B"}

package/dist/cjs/utils/index.js

@@ -18,15 +18,21 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.sha256 = sha256;
+exports.hashToArray = exports.sha256 = void 0;
 exports.hashReceipt = hashReceipt;
+exports.assert = assert;
 __exportStar(require("./validate"), exports);
 // ── Merkle helpers for receipt proofs ──
-function sha256(data) {
-    return crypto.subtle.digest("SHA-256", data).then(b => new Uint8Array(b));
-}
+var hash_1 = require("./hash");
+Object.defineProperty(exports, "sha256", { enumerable: true, get: function () { return hash_1.sha256; } });
+Object.defineProperty(exports, "hashToArray", { enumerable: true, get: function () { return hash_1.hashToArray; } });
 // client-side sha256 for receipt hashing
 function hashReceipt(agent, requestId, callCount, amount) {
     return new Uint8Array(32); // Stub
 }
+/** Assert helper */
+function assert(cond, msg) {
+    if (!cond)
+        throw new Error(msg);
+}
 //# sourceMappingURL=index.js.map

package/dist/cjs/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":";AAAA,mEAAmE;AACnE,wCAAwC;AACxC,2BAA2B;AAC3B,mEAAmE;;;;;;;;;;;;;;;;AAKnE,wBAEC;AAGD,kCAOC;AAfD,6CAA2B;AAE3B,0CAA0C;AAC1C,SAAgB,MAAM,CAAC,IAAgB;IACrC,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,UAAU,CAAC,CAAC,CAAC,CAAQ,CAAC;AACnF,CAAC;AAED,yCAAyC;AACzC,SAAgB,WAAW,CACzB,KAAiB,EACjB,SAAqB,EACrB,SAAiB,EACjB,MAAc;IAEd,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO;AACpC,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/utils/index.ts"],"names":[],"mappings":";AAAA,mEAAmE;AACnE,wCAAwC;AACxC,2BAA2B;AAC3B,mEAAmE;;;;;;;;;;;;;;;;;AAQnE,kCAOC;AAGD,wBAEC;AAlBD,6CAA2B;AAE3B,0CAA0C;AAC1C,+BAA6C;AAApC,8FAAA,MAAM,OAAA;AAAE,mGAAA,WAAW,OAAA;AAE5B,yCAAyC;AACzC,SAAgB,WAAW,CACzB,KAAiB,EACjB,SAAqB,EACrB,SAAiB,EACjB,MAAc;IAEd,OAAO,IAAI,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO;AACpC,CAAC;AAED,oBAAoB;AACpB,SAAgB,MAAM,CAAC,IAAa,EAAE,GAAW;IAC/C,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC;AAClC,CAAC"}