@openzeppelin/guardian-client 0.18.3 → 0.19.0-rc.2

package/dist/server-types.d.ts

@@ -1,3 +1,5 @@
+import type { TransactionRequestEnvelope } from './request-envelope.js';
+import type { ServerExecutionCapabilityWire } from './execution.js';
 export interface ServerFalconSignature {
     scheme: 'falcon';
     signature: string;
@@ -40,6 +42,11 @@ export interface ServerProposalMetadata {
     target_threshold?: number;
     required_signatures?: number;
     signer_commitments?: string[];
+    /**
+     * Target signer schemes (`"falcon"` / `"ecdsa"`), index-aligned with
+     * `signer_commitments` (issue #563). Proposer-supplied and stored as sent.
+     */
+    signer_schemes?: string[];
     target_procedure?: string;
     salt?: string;
     description?: string;
@@ -79,6 +86,7 @@ export interface ServerDeltaObject {
             signature: ServerProposalSignature;
         }>;
         metadata?: ServerProposalMetadata;
+        transaction_request?: TransactionRequestEnvelope;
     };
     ack_sig?: string;
     ack_pubkey?: string;
@@ -114,6 +122,16 @@ export interface ServerStateObject {
     updated_at: string;
     auth_scheme?: string;
 }
+export interface ServerQueuedCandidate {
+    nonce: number;
+    prev_commitment: string;
+    new_commitment: string;
+}
+export interface ServerStateTail {
+    state: ServerStateObject;
+    queue: ServerQueuedCandidate[];
+    accepts_submissions: boolean;
+}
 export interface ServerCanonicalNonceResponse {
     account_id: string;
     nonce: number;
@@ -127,6 +145,14 @@ export type ServerAuthConfig = {
     MidenEcdsa: {
         cosigner_commitments: string[];
     };
+} | {
+    Miden: {
+        cosigners: {
+            commitment: string;
+            scheme: 'falcon' | 'ecdsa';
+        }[];
+        guardian_scheme: 'falcon' | 'ecdsa';
+    };
 };
 export interface ServerConfigureRequest {
     account_id: string;
@@ -154,6 +180,8 @@ export interface ServerDeltaProposalRequest {
             signature: ServerProposalSignature;
         }>;
         metadata?: ServerProposalMetadata;
+        transaction_request?: TransactionRequestEnvelope;
+        base_commitment?: string;
     };
 }
 export interface ServerDeltaProposalResponse {
@@ -166,12 +194,14 @@ export interface ServerProposalsResponse {
 export interface ServerAbandonCandidateRequest {
     account_id: string;
     nonce: number;
+    proposal_id: string;
 }
 export interface ServerAbandonCandidateResponse {
     account_id: string;
     nonce: number;
     state: 'pending' | 'abandoned' | 'retained';
     abandon_requested_at?: string;
+    commitment: string;
 }
 export interface ServerSignProposalRequest {
     account_id: string;
@@ -189,8 +219,10 @@ export interface ServerStatusResponse {
     environment: string;
     started_at: string;
     uptime_seconds: number;
+    execution?: ServerExecutionCapabilityWire | null;
     sessions?: {
         max_ttl_seconds: number;
+        request_auth_version?: number;
     };
 }
 export interface ServerCreateSessionRequest {
@@ -211,6 +243,7 @@ export interface ServerCreateSessionRequest {
 export interface ServerCreateSessionResponse {
     signer_commitment: string;
     expires_at: string;
+    request_auth_version?: number;
 }
 export interface ServerRevokeSessionResponse {
     revoked: boolean;

package/dist/server-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server-types.d.ts","sourceRoot":"","sources":["../src/server-types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,QAAQ,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,QAAQ,CAAC;CAC3B;AAED,MAAM,MAAM,uBAAuB,GAAG,qBAAqB,GAAG,oBAAoB,CAAC;AAEnF,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,uBAAuB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,uBAAuB,EAAE,CAAA;CAAE,GACvG;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,iBAAiB,GAAG,UAAU,GAAG,UAAU,CAAA;CAAE,GAC/F;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,MAAM,MAAM,kBAAkB,GAC1B,YAAY,GACZ,eAAe,GACf,kBAAkB,GAClB,4BAA4B,GAC5B,iBAAiB,GACjB,eAAe,GACf,MAAM,GACN,QAAQ,GAGR,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,WAAW,sBAAsB;IACrC,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,iEAAiE;IACjE,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,iEAAiE;IACjE,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6FAA6F;IAC7F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE;QACb,UAAU,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,UAAU,CAAC,EAAE,KAAK,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,uBAAuB,CAAA;SAAE,CAAC,CAAC;QAC9E,QAAQ,CAAC,EAAE,sBAAsB,CAAC;KACnC,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,cAAc,EAAE;QAAE,oBAAoB,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CAAE,GACtD;IAAE,UAAU,EAAE;QAAE,oBAAoB,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CAAE,CAAC;AAEvD,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,gBAAgB,CAAC;IACvB,aAAa,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE;QACb,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,uBAAuB,CAAA;SAAE,CAAC,CAAC;QAC7E,QAAQ,CAAC,EAAE,sBAAsB,CAAC;KACnC,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,iBAAiB,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,8BAA8B;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,UAAU,CAAC;IAC5C,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,uBAAuB,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,EAAE;QACT,eAAe,EAAE,MAAM,CAAC;KACzB,CAAC;CACH;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE;QACL,iBAAiB,EAAE,MAAM,CAAC;QAC1B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC7C,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAID,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,UAAU,GAAG,cAAc,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC7D,SAAS,EAAE,QAAQ,GAAG,SAAS,CAAC;IAChC,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,YAAY,GAAG,UAAU,GAAG,aAAa,GAAG,cAAc,GAAG,OAAO,GAAG,SAAS,CAAC;IAC1F,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACjC,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,eAAe,CAAC,EAAE,0BAA0B,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B"}
+{"version":3,"file":"server-types.d.ts","sourceRoot":"","sources":["../src/server-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,KAAK,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAEpE,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,QAAQ,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,QAAQ,CAAC;CAC3B;AAED,MAAM,MAAM,uBAAuB,GAAG,qBAAqB,GAAG,oBAAoB,CAAC;AAEnF,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,uBAAuB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,MAAM,EAAE,SAAS,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,uBAAuB,EAAE,CAAA;CAAE,GACvG;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAC1C;IAAE,MAAM,EAAE,UAAU,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,iBAAiB,GAAG,UAAU,GAAG,UAAU,CAAA;CAAE,GAC/F;IAAE,MAAM,EAAE,WAAW,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAEhE,MAAM,MAAM,kBAAkB,GAC1B,YAAY,GACZ,eAAe,GACf,kBAAkB,GAClB,4BAA4B,GAC5B,iBAAiB,GACjB,eAAe,GACf,MAAM,GACN,QAAQ,GAGR,CAAC,MAAM,GAAG,EAAE,CAAC,CAAC;AAElB,MAAM,WAAW,sBAAsB;IACrC,aAAa,CAAC,EAAE,kBAAkB,CAAC;IACnC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC9B;;;OAGG;IACH,cAAc,CAAC,EAAE,MAAM,EAAE,CAAC;IAC1B,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,qBAAqB,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAC;IACpB,iEAAiE;IACjE,8BAA8B,CAAC,EAAE,MAAM,CAAC;IACxC,iEAAiE;IACjE,mBAAmB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,qEAAqE;IACrE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,iEAAiE;IACjE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,6FAA6F;IAC7F,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,gDAAgD;IAChD,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE;QACb,UAAU,CAAC,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;QACd,UAAU,CAAC,EAAE,KAAK,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,uBAAuB,CAAA;SAAE,CAAC,CAAC;QAC9E,QAAQ,CAAC,EAAE,sBAAsB,CAAC;QAClC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;KAClD,CAAC;IACF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,MAAM,WAAW,uBAAuB;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,aAAa,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,MAAM,EAAE,iBAAiB,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7B,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAC;IACd,eAAe,EAAE,MAAM,CAAC;IACxB,cAAc,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,eAAe;IAC9B,KAAK,EAAE,iBAAiB,CAAC;IACzB,KAAK,EAAE,qBAAqB,EAAE,CAAC;IAC/B,mBAAmB,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,cAAc,EAAE;QAAE,oBAAoB,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CAAE,GACtD;IAAE,UAAU,EAAE;QAAE,oBAAoB,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CAAE,GAClD;IACE,KAAK,EAAE;QACL,SAAS,EAAE;YAAE,UAAU,EAAE,MAAM,CAAC;YAAC,MAAM,EAAE,QAAQ,GAAG,OAAO,CAAA;SAAE,EAAE,CAAC;QAChE,eAAe,EAAE,QAAQ,GAAG,OAAO,CAAC;KACrC,CAAC;CACH,CAAC;AAEN,MAAM,WAAW,sBAAsB;IACrC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,gBAAgB,CAAC;IACvB,aAAa,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD;AAED,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,EAAE;QACb,UAAU,EAAE;YAAE,IAAI,EAAE,MAAM,CAAA;SAAE,CAAC;QAC7B,UAAU,EAAE,KAAK,CAAC;YAAE,SAAS,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,uBAAuB,CAAA;SAAE,CAAC,CAAC;QAC7E,QAAQ,CAAC,EAAE,sBAAsB,CAAC;QAClC,mBAAmB,CAAC,EAAE,0BAA0B,CAAC;QACjD,eAAe,CAAC,EAAE,MAAM,CAAC;KAC1B,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,KAAK,EAAE,iBAAiB,CAAC;IACzB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,EAAE,iBAAiB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,6BAA6B;IAC5C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;CACrB;AAED,MAAM,WAAW,8BAA8B;IAC7C,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,SAAS,GAAG,WAAW,GAAG,UAAU,CAAC;IAC5C,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,yBAAyB;IACxC,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,SAAS,EAAE,uBAAuB,CAAC;CACpC;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;IACnB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,6BAA6B,GAAG,IAAI,CAAC;IACjD,QAAQ,CAAC,EAAE;QACT,eAAe,EAAE,MAAM,CAAC;QACxB,oBAAoB,CAAC,EAAE,MAAM,CAAC;KAC/B,CAAC;CACH;AAED,MAAM,WAAW,0BAA0B;IACzC,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE;QACL,iBAAiB,EAAE,MAAM,CAAC;QAC1B,kBAAkB,EAAE,MAAM,CAAC;QAC3B,MAAM,EAAE,MAAM,CAAC;QACf,SAAS,EAAE,MAAM,CAAC;QAClB,UAAU,EAAE,MAAM,CAAC;QACnB,mBAAmB,EAAE,MAAM,CAAC;QAC5B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,2BAA2B;IAC1C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,UAAU,EAAE,MAAM,CAAC;IACnB,oBAAoB,CAAC,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,2BAA2B;IAC1C,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,MAAM,WAAW,8BAA8B;IAC7C,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,+BAA+B;IAC9C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,mBAAmB,EAAE,CAAC;CACjC;AAID,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,UAAU,GAAG,cAAc,CAAC;IAClC,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,EAAE,MAAM,GAAG,OAAO,GAAG,OAAO,GAAG,MAAM,GAAG,MAAM,GAAG,QAAQ,CAAC;IAC7D,SAAS,EAAE,QAAQ,GAAG,SAAS,CAAC;IAChC,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACjC,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,0BAA0B;IACzC,OAAO,EAAE,YAAY,GAAG,UAAU,GAAG,aAAa,GAAG,cAAc,GAAG,OAAO,GAAG,SAAS,CAAC;IAC1F,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,WAAW,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,cAAc,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,EAAE,iBAAiB,EAAE,CAAC;IACjC,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,eAAe,CAAC,EAAE,0BAA0B,EAAE,CAAC;CAChD;AAED,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,kBAAkB,EAAE,CAAC;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B"}

package/dist/session-request.d.ts

@@ -0,0 +1,104 @@
+/**
+ * Version 2 session request envelope (mirror of
+ * `crates/shared/src/session_request.rs`). A session key signs a fixed
+ * 62-byte envelope that binds the transport and the operation in addition to
+ * the account, timestamp and payload of the `AuthRequestMessage` word, so a
+ * request signed for one route is never accepted on another:
+ *
+ * `"GUARDIAN_SESSION_REQUEST" 0x00 || u16be(2) || u8(transport) ||
+ * u16be(operation) || request word (32 bytes)`
+ *
+ * P-256 signs these bytes with SHA-256: WebCrypto
+ * `sign({ name: 'ECDSA', hash: 'SHA-256' }, key, envelope)`.
+ */
+/** `x-auth-format` value of a version 2 session request. */
+export declare const SESSION_REQUEST_AUTH_FORMAT = "session-v2";
+/** The envelope version this client signs. */
+export declare const SESSION_REQUEST_VERSION = 2;
+/** Length of an encoded envelope. */
+export declare const SESSION_REQUEST_ENVELOPE_LENGTH = 62;
+/** How a request reaches Guardian. This client always uses HTTP. */
+export declare const SessionTransport: {
+    readonly Http: 1;
+    readonly Grpc: 2;
+};
+export type SessionTransport = (typeof SessionTransport)[keyof typeof SessionTransport];
+/** Every per-account operation a session may sign. Ids are permanent. */
+export declare const SessionOperation: {
+    readonly GetState: 1;
+    readonly GetCanonicalNonce: 2;
+    readonly GetDelta: 3;
+    readonly GetDeltaSince: 4;
+    readonly GetDeltaHistory: 5;
+    readonly GetDeltaProposals: 6;
+    readonly GetDeltaProposal: 7;
+    readonly PushDelta: 8;
+    readonly PushDeltaProposal: 9;
+    readonly SignDeltaProposal: 10;
+    readonly ExecuteDeltaProposal: 11;
+    readonly GetDeltaProposalExecution: 12;
+    readonly GetCurrentExecution: 13;
+    readonly GetStateTail: 14;
+};
+export type SessionOperation = (typeof SessionOperation)[keyof typeof SessionOperation];
+/** Whether Guardian checks `operation` under the strict write floor. */
+export declare function isSessionWrite(operation: SessionOperation): boolean;
+/** The bytes a session key signs for one per-account request. */
+export declare function sessionRequestEnvelope(transport: SessionTransport, operation: SessionOperation, requestWord: Uint8Array): Uint8Array<ArrayBuffer>;
+/**
+ * Guardian does not support the session request format this client signs.
+ * Terminal: the session is kept, nothing is retried and the wallet does not
+ * sign instead.
+ */
+export declare class UnsupportedAuthVersionError extends Error {
+    constructor(message: string);
+}
+/**
+ * Throws {@link UnsupportedAuthVersionError} unless a Guardian reports the
+ * session request version this client signs: such a server would refuse
+ * every session request.
+ */
+export declare function assertSupportedSessionPolicy(policy: {
+    requestAuthVersion?: number;
+}): void;
+/** How far a session request timestamp may run ahead of the local clock. */
+export declare const SESSION_TIMESTAMP_MAX_AHEAD_MS = 1000;
+/**
+ * A next timestamp this far ahead of the local clock means the clock stepped
+ * back, so minting restarts from the clock instead of waiting the step out.
+ */
+export declare const SESSION_CLOCK_STEP_BACK_MS = 5000;
+/**
+ * After a replay rejection the next timestamp jumps to within this much below
+ * the ahead limit, at random, so it clears a floor an earlier page or tab of
+ * the same session left, and two of them stop colliding.
+ */
+export declare const SESSION_REPLAY_JUMP_SPREAD_MS = 200;
+/**
+ * Strictly increasing request timestamps per account, shared by every client
+ * using one session, so two otherwise identical requests are never the same
+ * signed bytes. Accounts are independent: a burst on one does not push
+ * another's timestamps ahead of the clock.
+ */
+export declare class SessionTimestamps {
+    private readonly now;
+    private readonly last;
+    constructor(now?: () => number);
+    /**
+     * The next timestamp for `accountId`, waiting while it would run more than a
+     * second ahead. `afterReplay` jumps it near that limit first (see
+     * `SESSION_REPLAY_JUMP_SPREAD_MS`).
+     */
+    next(accountId: string, afterReplay?: boolean): Promise<number>;
+}
+/**
+ * Runs a session's writes to one account one at a time, from minting the
+ * timestamp through the last replay retry, so they reach Guardian in
+ * timestamp order and never lose the strict write floor to each other. Writes
+ * to other accounts and all reads run freely.
+ */
+export declare class WriteSequencer {
+    private readonly tails;
+    run<T>(accountId: string, write: () => Promise<T>): Promise<T>;
+}
+//# sourceMappingURL=session-request.d.ts.map

package/dist/session-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-request.d.ts","sourceRoot":"","sources":["../src/session-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,4DAA4D;AAC5D,eAAO,MAAM,2BAA2B,eAAe,CAAC;AAExD,8CAA8C;AAC9C,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,qCAAqC;AACrC,eAAO,MAAM,+BAA+B,KAAK,CAAC;AAIlD,oEAAoE;AACpE,eAAO,MAAM,gBAAgB;;;CAGnB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC;AAExF,yEAAyE;AACzE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;CAenB,CAAC;AACX,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,OAAO,gBAAgB,CAAC,CAAC;AASxF,wEAAwE;AACxE,wBAAgB,cAAc,CAAC,SAAS,EAAE,gBAAgB,GAAG,OAAO,CAEnE;AAED,iEAAiE;AACjE,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,gBAAgB,EAC3B,SAAS,EAAE,gBAAgB,EAC3B,WAAW,EAAE,UAAU,GACtB,UAAU,CAAC,WAAW,CAAC,CAazB;AAED;;;;GAIG;AACH,qBAAa,2BAA4B,SAAQ,KAAK;gBACxC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;GAIG;AACH,wBAAgB,4BAA4B,CAAC,MAAM,EAAE;IAAE,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAO1F;AAED,4EAA4E;AAC5E,eAAO,MAAM,8BAA8B,OAAQ,CAAC;AAEpD;;;GAGG;AACH,eAAO,MAAM,0BAA0B,OAAQ,CAAC;AAEhD;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,MAAM,CAAC;AAEjD;;;;;GAKG;AACH,qBAAa,iBAAiB;IAGhB,OAAO,CAAC,QAAQ,CAAC,GAAG;IAFhC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA6B;gBAErB,GAAG,GAAE,MAAM,MAAiB;IAEzD;;;;OAIG;IACG,IAAI,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,UAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;CAuBpE;AAED;;;;;GAKG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAuC;IAE7D,GAAG,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;CAe/D"}

package/dist/session-request.js

@@ -0,0 +1,164 @@
+/**
+ * Version 2 session request envelope (mirror of
+ * `crates/shared/src/session_request.rs`). A session key signs a fixed
+ * 62-byte envelope that binds the transport and the operation in addition to
+ * the account, timestamp and payload of the `AuthRequestMessage` word, so a
+ * request signed for one route is never accepted on another:
+ *
+ * `"GUARDIAN_SESSION_REQUEST" 0x00 || u16be(2) || u8(transport) ||
+ * u16be(operation) || request word (32 bytes)`
+ *
+ * P-256 signs these bytes with SHA-256: WebCrypto
+ * `sign({ name: 'ECDSA', hash: 'SHA-256' }, key, envelope)`.
+ */
+/** `x-auth-format` value of a version 2 session request. */
+export const SESSION_REQUEST_AUTH_FORMAT = 'session-v2';
+/** The envelope version this client signs. */
+export const SESSION_REQUEST_VERSION = 2;
+/** Length of an encoded envelope. */
+export const SESSION_REQUEST_ENVELOPE_LENGTH = 62;
+const DOMAIN = new TextEncoder().encode('GUARDIAN_SESSION_REQUEST\0');
+/** How a request reaches Guardian. This client always uses HTTP. */
+export const SessionTransport = {
+    Http: 1,
+    Grpc: 2,
+};
+/** Every per-account operation a session may sign. Ids are permanent. */
+export const SessionOperation = {
+    GetState: 1,
+    GetCanonicalNonce: 2,
+    GetDelta: 3,
+    GetDeltaSince: 4,
+    GetDeltaHistory: 5,
+    GetDeltaProposals: 6,
+    GetDeltaProposal: 7,
+    PushDelta: 8,
+    PushDeltaProposal: 9,
+    SignDeltaProposal: 10,
+    ExecuteDeltaProposal: 11,
+    GetDeltaProposalExecution: 12,
+    GetCurrentExecution: 13,
+    GetStateTail: 14,
+};
+const WRITE_OPERATIONS = new Set([
+    SessionOperation.PushDelta,
+    SessionOperation.PushDeltaProposal,
+    SessionOperation.SignDeltaProposal,
+    SessionOperation.ExecuteDeltaProposal,
+]);
+/** Whether Guardian checks `operation` under the strict write floor. */
+export function isSessionWrite(operation) {
+    return WRITE_OPERATIONS.has(operation);
+}
+/** The bytes a session key signs for one per-account request. */
+export function sessionRequestEnvelope(transport, operation, requestWord) {
+    if (requestWord.length !== 32) {
+        throw new Error(`Request word must be 32 bytes, got ${requestWord.length}`);
+    }
+    const envelope = new Uint8Array(SESSION_REQUEST_ENVELOPE_LENGTH);
+    envelope.set(DOMAIN, 0);
+    envelope[25] = (SESSION_REQUEST_VERSION >> 8) & 0xff;
+    envelope[26] = SESSION_REQUEST_VERSION & 0xff;
+    envelope[27] = transport;
+    envelope[28] = (operation >> 8) & 0xff;
+    envelope[29] = operation & 0xff;
+    envelope.set(requestWord, 30);
+    return envelope;
+}
+/**
+ * Guardian does not support the session request format this client signs.
+ * Terminal: the session is kept, nothing is retried and the wallet does not
+ * sign instead.
+ */
+export class UnsupportedAuthVersionError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'UnsupportedAuthVersionError';
+    }
+}
+/**
+ * Throws {@link UnsupportedAuthVersionError} unless a Guardian reports the
+ * session request version this client signs: such a server would refuse
+ * every session request.
+ */
+export function assertSupportedSessionPolicy(policy) {
+    if (policy.requestAuthVersion !== SESSION_REQUEST_VERSION) {
+        throw new UnsupportedAuthVersionError(`Guardian reports session request version ${policy.requestAuthVersion ?? 'none'}, ` +
+            `this client signs version ${SESSION_REQUEST_VERSION}`);
+    }
+}
+/** How far a session request timestamp may run ahead of the local clock. */
+export const SESSION_TIMESTAMP_MAX_AHEAD_MS = 1_000;
+/**
+ * A next timestamp this far ahead of the local clock means the clock stepped
+ * back, so minting restarts from the clock instead of waiting the step out.
+ */
+export const SESSION_CLOCK_STEP_BACK_MS = 5_000;
+/**
+ * After a replay rejection the next timestamp jumps to within this much below
+ * the ahead limit, at random, so it clears a floor an earlier page or tab of
+ * the same session left, and two of them stop colliding.
+ */
+export const SESSION_REPLAY_JUMP_SPREAD_MS = 200;
+/**
+ * Strictly increasing request timestamps per account, shared by every client
+ * using one session, so two otherwise identical requests are never the same
+ * signed bytes. Accounts are independent: a burst on one does not push
+ * another's timestamps ahead of the clock.
+ */
+export class SessionTimestamps {
+    now;
+    last = new Map();
+    constructor(now = Date.now) {
+        this.now = now;
+    }
+    /**
+     * The next timestamp for `accountId`, waiting while it would run more than a
+     * second ahead. `afterReplay` jumps it near that limit first (see
+     * `SESSION_REPLAY_JUMP_SPREAD_MS`).
+     */
+    async next(accountId, afterReplay = false) {
+        if (afterReplay) {
+            const jump = this.now() +
+                SESSION_TIMESTAMP_MAX_AHEAD_MS -
+                Math.floor(Math.random() * SESSION_REPLAY_JUMP_SPREAD_MS);
+            this.last.set(accountId, Math.max(this.last.get(accountId) ?? -Infinity, jump - 1));
+        }
+        for (;;) {
+            const now = this.now();
+            let last = this.last.get(accountId) ?? -Infinity;
+            if (last - now > SESSION_CLOCK_STEP_BACK_MS) {
+                last = now - 1;
+            }
+            const next = Math.max(now, last + 1);
+            const ahead = next - now;
+            if (ahead <= SESSION_TIMESTAMP_MAX_AHEAD_MS) {
+                this.last.set(accountId, next);
+                return next;
+            }
+            await new Promise((resolve) => setTimeout(resolve, ahead - SESSION_TIMESTAMP_MAX_AHEAD_MS));
+        }
+    }
+}
+/**
+ * Runs a session's writes to one account one at a time, from minting the
+ * timestamp through the last replay retry, so they reach Guardian in
+ * timestamp order and never lose the strict write floor to each other. Writes
+ * to other accounts and all reads run freely.
+ */
+export class WriteSequencer {
+    tails = new Map();
+    run(accountId, write) {
+        const previous = this.tails.get(accountId) ?? Promise.resolve();
+        const result = previous.then(write);
+        const tail = result.then(() => undefined, () => undefined);
+        this.tails.set(accountId, tail);
+        void tail.then(() => {
+            if (this.tails.get(accountId) === tail) {
+                this.tails.delete(accountId);
+            }
+        });
+        return result;
+    }
+}
+//# sourceMappingURL=session-request.js.map

package/dist/session-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-request.js","sourceRoot":"","sources":["../src/session-request.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,4DAA4D;AAC5D,MAAM,CAAC,MAAM,2BAA2B,GAAG,YAAY,CAAC;AAExD,8CAA8C;AAC9C,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,qCAAqC;AACrC,MAAM,CAAC,MAAM,+BAA+B,GAAG,EAAE,CAAC;AAElD,MAAM,MAAM,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,4BAA4B,CAAC,CAAC;AAEtE,oEAAoE;AACpE,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,IAAI,EAAE,CAAC;IACP,IAAI,EAAE,CAAC;CACC,CAAC;AAGX,yEAAyE;AACzE,MAAM,CAAC,MAAM,gBAAgB,GAAG;IAC9B,QAAQ,EAAE,CAAC;IACX,iBAAiB,EAAE,CAAC;IACpB,QAAQ,EAAE,CAAC;IACX,aAAa,EAAE,CAAC;IAChB,eAAe,EAAE,CAAC;IAClB,iBAAiB,EAAE,CAAC;IACpB,gBAAgB,EAAE,CAAC;IACnB,SAAS,EAAE,CAAC;IACZ,iBAAiB,EAAE,CAAC;IACpB,iBAAiB,EAAE,EAAE;IACrB,oBAAoB,EAAE,EAAE;IACxB,yBAAyB,EAAE,EAAE;IAC7B,mBAAmB,EAAE,EAAE;IACvB,YAAY,EAAE,EAAE;CACR,CAAC;AAGX,MAAM,gBAAgB,GAAkC,IAAI,GAAG,CAAC;IAC9D,gBAAgB,CAAC,SAAS;IAC1B,gBAAgB,CAAC,iBAAiB;IAClC,gBAAgB,CAAC,iBAAiB;IAClC,gBAAgB,CAAC,oBAAoB;CACtC,CAAC,CAAC;AAEH,wEAAwE;AACxE,MAAM,UAAU,cAAc,CAAC,SAA2B;IACxD,OAAO,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACzC,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,sBAAsB,CACpC,SAA2B,EAC3B,SAA2B,EAC3B,WAAuB;IAEvB,IAAI,WAAW,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;QAC9B,MAAM,IAAI,KAAK,CAAC,sCAAsC,WAAW,CAAC,MAAM,EAAE,CAAC,CAAC;IAC9E,CAAC;IACD,MAAM,QAAQ,GAAG,IAAI,UAAU,CAAC,+BAA+B,CAAC,CAAC;IACjE,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACxB,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,uBAAuB,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IACrD,QAAQ,CAAC,EAAE,CAAC,GAAG,uBAAuB,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,EAAE,CAAC,GAAG,SAAS,CAAC;IACzB,QAAQ,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IACvC,QAAQ,CAAC,EAAE,CAAC,GAAG,SAAS,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,GAAG,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC9B,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;IAC5C,CAAC;CACF;AAED;;;;GAIG;AACH,MAAM,UAAU,4BAA4B,CAAC,MAAuC;IAClF,IAAI,MAAM,CAAC,kBAAkB,KAAK,uBAAuB,EAAE,CAAC;QAC1D,MAAM,IAAI,2BAA2B,CACnC,4CAA4C,MAAM,CAAC,kBAAkB,IAAI,MAAM,IAAI;YACjF,6BAA6B,uBAAuB,EAAE,CACzD,CAAC;IACJ,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,MAAM,CAAC,MAAM,8BAA8B,GAAG,KAAK,CAAC;AAEpD;;;GAGG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,KAAK,CAAC;AAEhD;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,GAAG,CAAC;AAEjD;;;;;GAKG;AACH,MAAM,OAAO,iBAAiB;IAGC;IAFZ,IAAI,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElD,YAA6B,MAAoB,IAAI,CAAC,GAAG;QAA5B,QAAG,GAAH,GAAG,CAAyB;IAAG,CAAC;IAE7D;;;;OAIG;IACH,KAAK,CAAC,IAAI,CAAC,SAAiB,EAAE,WAAW,GAAG,KAAK;QAC/C,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,IAAI,GACR,IAAI,CAAC,GAAG,EAAE;gBACV,8BAA8B;gBAC9B,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,6BAA6B,CAAC,CAAC;YAC5D,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,CAAC;QACtF,CAAC;QACD,SAAS,CAAC;YACR,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;YACvB,IAAI,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,QAAQ,CAAC;YACjD,IAAI,IAAI,GAAG,GAAG,GAAG,0BAA0B,EAAE,CAAC;gBAC5C,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC;YACjB,CAAC;YACD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC;YACrC,MAAM,KAAK,GAAG,IAAI,GAAG,GAAG,CAAC;YACzB,IAAI,KAAK,IAAI,8BAA8B,EAAE,CAAC;gBAC5C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;gBAC/B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,KAAK,GAAG,8BAA8B,CAAC,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,OAAO,cAAc;IACR,KAAK,GAAG,IAAI,GAAG,EAA4B,CAAC;IAE7D,GAAG,CAAI,SAAiB,EAAE,KAAuB;QAC/C,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,OAAO,CAAC,OAAO,EAAE,CAAC;QAChE,MAAM,MAAM,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CACtB,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAC;QACF,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;QAChC,KAAK,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;YAClB,IAAI,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,IAAI,EAAE,CAAC;gBACvC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC/B,CAAC;QACH,CAAC,CAAC,CAAC;QACH,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/types.d.ts

@@ -1,4 +1,7 @@
+import type { SessionOperation, WriteSequencer } from './session-request.js';
+import type { TransactionRequestEnvelope } from './request-envelope.js';
 import type { RequestAuthPayload } from './auth-request.js';
+import type { ServerExecutionCapability } from './execution.js';
 export interface Signer {
     readonly commitment: string;
     readonly publicKey: string;
@@ -75,7 +78,7 @@ export interface SessionGrantFields {
 export type SessionEndReason = 'logout' | 'expired' | 'revoked' | 'rejected';
 /**
  * Signs session-eligible requests on behalf of a wallet after a session grant
- * was registered. Requests carry `x-auth-format: session`.
+ * was registered. Requests carry `x-auth-format: session-v2`.
  */
 export interface SessionRequestSigner {
     /** Hex SEC1-compressed P-256 session public key, sent as `x-pubkey`. */
@@ -87,7 +90,20 @@ export interface SessionRequestSigner {
     readonly signerCommitment: string;
     /** Unix seconds. */
     readonly expiresAt: number;
-    signRequest(accountId: string, timestamp: number, requestPayload: RequestAuthPayload): Promise<string> | string;
+    /**
+     * The next request timestamp (Unix ms) for `accountId`: strictly increasing
+     * per account for this session, never more than a second ahead of the
+     * clock, and jumped near that limit when `afterReplay` (see
+     * `SessionTimestamps`).
+     */
+    nextTimestamp(accountId: string, afterReplay: boolean): Promise<number>;
+    /** Orders this session's writes per account; shared by every client using it. */
+    readonly writeSequencer: WriteSequencer;
+    /**
+     * Sign the version 2 envelope (see `sessionRequestEnvelope`) of this
+     * request over HTTP as `operation`.
+     */
+    signRequest(operation: SessionOperation, accountId: string, timestamp: number, requestPayload: RequestAuthPayload): Promise<string> | string;
     /** Sign the account-less `SessionLogoutMessage` for `POST /session/logout`. */
     signLogout(timestampMs: number): Promise<string> | string;
     /** Called once when the client stops using the session. */
@@ -102,13 +118,23 @@ export interface CreateSessionRequest {
     signature: string;
     grant: SessionGrantFields;
 }
-export interface CreateSessionResponse {
+/** How a Guardian expects session requests to be signed. */
+export interface SessionRequestPolicy {
+    /**
+     * The session request envelope version; this client signs 2, under which
+     * each signed session read is admitted once, within 60 s of server time,
+     * except the canonical nonce poll, accepted every time within 60 s behind
+     * and 30 s ahead.
+     */
+    requestAuthVersion: number;
+}
+export interface CreateSessionResponse extends SessionRequestPolicy {
     signerCommitment: string;
     /** RFC 3339 UTC. */
     expiresAt: string;
 }
 /** Session parameters a Guardian advertises on `GET /status`. */
-export interface SessionsStatus {
+export interface SessionsStatus extends Partial<SessionRequestPolicy> {
     /** Grants may expire at most this many seconds after registration. */
     maxTtlSeconds: number;
 }
@@ -124,6 +150,11 @@ export interface EcdsaSignature {
 }
 export type ProposalSignature = FalconSignature | EcdsaSignature;
 export type SignatureScheme = 'falcon' | 'ecdsa';
+/** One cosigner of a {@link AuthConfig} `Miden` auth and the scheme Guardian verifies its signatures under. */
+export interface MidenCosignerConfig {
+    commitment: string;
+    scheme: SignatureScheme;
+}
 export type AuthConfig = {
     MidenFalconRpo: {
         cosigner_commitments: string[];
@@ -132,6 +163,18 @@ export type AuthConfig = {
     MidenEcdsa: {
         cosigner_commitments: string[];
     };
+}
+/**
+ * Cosigners that each carry their own scheme, and the GUARDIAN's scheme
+ * (issue #563). Send it only for an account whose cosigners and GUARDIAN
+ * do not all share one scheme; servers before #563 reject it, and the
+ * single-scheme variants keep serving the accounts that do.
+ */
+ | {
+    Miden: {
+        cosigners: MidenCosignerConfig[];
+        guardian_scheme: SignatureScheme;
+    };
 };
 export interface CosignerSignature {
     signerId: string;
@@ -171,6 +214,15 @@ export interface ProposalMetadata {
     targetThreshold?: number;
     requiredSignatures?: number;
     signerCommitments?: string[];
+    /**
+     * Target signer schemes (`"falcon"` / `"ecdsa"`), index-aligned with
+     * `signerCommitments`, for an update-signers proposal whose signers do not
+     * all share one scheme (issue #563). Absent => every target signer keeps the
+     * proposer's scheme. GUARDIAN stores the proposer's values as sent, so a
+     * consumer validates them, as it validates the rest of the metadata against
+     * the transaction summary, before relying on them.
+     */
+    signerSchemes?: string[];
     targetProcedure?: string;
     salt?: string;
     description?: string;
@@ -214,6 +266,8 @@ export interface DeltaObject {
             signature: ProposalSignature;
         }>;
         metadata?: ProposalMetadata;
+        /** The request a Guardian-executable proposal stores. Absent on a self-executed one. */
+        transactionRequest?: TransactionRequestEnvelope;
     };
     ackSig?: string;
     ackPubkey?: string;
@@ -239,8 +293,48 @@ export interface StateObject {
     };
     createdAt: string;
     updatedAt: string;
+    /** `falcon` or `ecdsa` when the account's cosigners and GUARDIAN share that scheme, `mixed` when they do not. */
     authScheme?: string;
 }
+/** A queued candidate the queue tail replays (`GET /state/tail`). */
+export interface QueuedCandidate {
+    /** The account nonce the candidate's transaction leaves the account at. */
+    nonce: number;
+    /** The state it builds on: the canonical state for the oldest, the previous candidate's `newCommitment` after it. */
+    prevCommitment: string;
+    /** The state it leaves the account at. */
+    newCommitment: string;
+}
+/**
+ * The queue tail (`GET /state/tail`, issue #517): the state a new delta or
+ * proposal must build on while the account's candidate queue holds
+ * candidates, and the candidates that lead to it.
+ */
+export interface StateTail {
+    /**
+     * The canonical state with every queued candidate applied, shaped as
+     * `getState` returns a state; the canonical state itself when nothing is
+     * queued. Not on chain until the queued candidates land.
+     */
+    state: StateObject;
+    /**
+     * The queued candidates, oldest first: the first builds on the canonical
+     * state, each later one on the one before it, and the last one's
+     * `newCommitment` is the tail's commitment. Empty when nothing is queued.
+     */
+    queue: QueuedCandidate[];
+    /**
+     * Whether the queue takes a delta or proposal built on this tail now.
+     * False while the queue is full (at the default depth of 1, whenever
+     * anything is queued), while the tail changes the account's signers or
+     * guardian key, or while its newest candidate was queued by a server before
+     * 0.19.0 under a label other than its nonce: a submission on the tail then
+     * gets `conflict_pending_delta`, so wait for the queue to drain and read
+     * again. True holds only at this read: the tail can move before the push,
+     * and the account's status and the proposal limits still apply.
+     */
+    acceptsSubmissions: boolean;
+}
 /**
  * Head of the latest canonical state (`GET /state/nonce`): the account
  * nonce carried by the state GUARDIAN holds as canonical and that state's
@@ -279,6 +373,11 @@ export interface StatusResponse {
     environment: string;
     startedAt: string;
     uptimeSeconds: number;
+    /**
+     * Whether the server accepts Guardian execution requests. Absent on a Guardian that predates
+     * Guardian execution: it does not offer it.
+     */
+    execution?: ServerExecutionCapability;
     /** Present on every Guardian that accepts session grants; absent on older servers. */
     sessions?: SessionsStatus;
 }
@@ -294,6 +393,17 @@ export interface DeltaProposalRequest {
             signature: ProposalSignature;
         }>;
         metadata?: ProposalMetadata;
+        /** The request a Guardian-executable proposal stores. Omit for a self-executed one. */
+        transactionRequest?: TransactionRequestEnvelope;
+        /**
+         * Commitment of the state the summary was built on (issue #517). GUARDIAN
+         * 0.19.0 and later record the proposal only when it is the queue tail,
+         * refusing a base another queued candidate claimed with
+         * `conflict_pending_delta` and an unknown one with `commitment_mismatch`.
+         * Omit it to be judged by the nonce alone; earlier servers store it with
+         * the payload and ignore it.
+         */
+        baseCommitment?: string;
     };
 }
 export interface DeltaProposalResponse {
@@ -326,12 +436,21 @@ export interface AbandonCandidateResponse {
      * return the original timestamp; absent once resolved.
      */
     abandonRequestedAt?: string;
+    /**
+     * The abandoned delta's `new_commitment`. Another delta can later take
+     * the same nonce (a Guardian execution archives the abandoned one), so
+     * pass this to `abandonStatus` to poll for this delta.
+     */
+    commitment: string;
 }
 /**
  * Resolution of an abandon request, as observed via the delta feed.
  * `'retained'` means the account slot is released but the on-chain
  * outcome is still uncertain — "unlocked but unresolved", never to be
- * read as "the transaction did not land".
+ * read as "the transaction did not land". When another delta has taken
+ * the nonce, `'abandoned'` means it is canonical (the abandoned
+ * transaction can no longer land) and `'waiting'` that it is still a
+ * candidate.
  */
 export type AbandonStatus = 'waiting' | 'landed' | 'abandoned' | 'retained' | 'unexpected';
 export interface PushDeltaResponse {