@polyester/sdk 0.0.0

package/CHANGELOG.md

@@ -0,0 +1 @@
+# @polyester/sdk

package/LICENSE

@@ -0,0 +1,7 @@
+Copyright (c) Fabric Blockchain Labs Inc.
+
+All rights reserved.
+
+This repository contains generated and handwritten SDK code for the Polyester
+API. No license is granted to copy, modify, distribute, sublicense, or use this
+work except under a separate written agreement with Fabric Blockchain Labs Inc.

package/README.md

@@ -0,0 +1,55 @@
+# Polyester TypeScript SDK
+
+TypeScript SDK for the Polyester public API.
+
+Generated protobuf types and ConnectRPC service descriptors live in `src/gen/`.
+The package root contains SDK entry points and helper APIs.
+
+This SDK is maintained by Fabric Labs and updated as the public API evolves.
+
+## Install
+
+```bash
+npm install @polyester/sdk
+```
+
+While the SDK is pre-1.0, compatible changes increment the patch version and
+breaking changes increment the minor version. A consumer range such as
+`^0.1.0` can update through `0.1.x` without crossing into breaking `0.2.x`
+releases.
+
+## Development
+
+```bash
+bun install --frozen-lockfile
+bun run lint
+bun run format:check
+bun run check
+bun run test
+bun run build
+bun run verify:package
+```
+
+Use `bun run dev` for rebuilds while editing.
+
+Run `bun run changeset` when a change should be included in the next package
+release. Generated protobuf updates must also run
+`bun scripts/strip-descriptor-options.ts`; CI rejects a generated tree that is
+not already stripped.
+
+## Publishing
+
+The `publish-polyester-sdk.yml` workflow maintains a Changesets release pull
+request for changes merged into `main`. Merging that release pull request
+publishes the stable version to npm's `latest` tag and creates the corresponding
+GitHub release.
+
+Package exports permanently target the built `dist` tree. `prepack` performs a
+clean build, and CI verifies that every declared export exists before release.
+
+Repository administrators must configure npm trusted publishing for the
+`Fabric-Labs/polyester-sdk-typescript` repository and the
+`publish-polyester-sdk.yml` workflow. Save a granular, package-scoped read-only
+npm token as the GitHub Actions secret `NPM_READ_TOKEN`; publishing itself uses
+OIDC rather than a write token. Grant the intended npm teams access to the
+private package separately.

package/SECURITY.md

@@ -0,0 +1,14 @@
+# Security Policy
+
+If you believe you have found a security issue in the Polyester TypeScript SDK,
+do not open a public issue.
+
+Email security reports to `security@polyester.com` with:
+
+- affected package version or commit
+- impacted API, generated type, or helper
+- reproduction steps or proof of concept
+- potential impact
+
+We will acknowledge valid reports and coordinate remediation before public
+disclosure.

package/dist/_virtual/_rolldown/runtime.js

@@ -0,0 +1,13 @@
+//#region \0rolldown/runtime.js
+var __defProp = Object.defineProperty;
+var __exportAll = (all, no_symbols) => {
+	let target = {};
+	for (var name in all) __defProp(target, name, {
+		get: all[name],
+		enumerable: true
+	});
+	if (!no_symbols) __defProp(target, Symbol.toStringTag, { value: "Module" });
+	return target;
+};
+//#endregion
+export { __exportAll };

package/dist/account-signer/create-polyester-account-signer.d.ts

@@ -0,0 +1,28 @@
+import { AccountSigner } from "./types.js";
+import { PolyesterEnvironment } from "../environment.js";
+import { LocalAccount } from "viem";
+//#region src/account-signer/create-polyester-account-signer.d.ts
+interface CreatePolyesterAccountSignerParams {
+  /** The environment this signer should authenticate against */
+  environment: PolyesterEnvironment;
+  /** The owner account (EOA) that will sign messages */
+  owner: LocalAccount;
+  /** Salt nonce for deriving different Safe addresses from the same owner (default: 0n) */
+  saltNonce?: bigint;
+}
+/**
+ * Creates an AccountSigner for Polyester authentication without any RPC calls.
+ *
+ * This computes the Safe smart account address deterministically and produces
+ * ERC-6492 wrapped signatures for counterfactual verification. The signature
+ * matches what toSafeSmartAccount.signMessage() would produce for an undeployed Safe.
+ *
+ * For actual chain interactions (UserOperations), use createPolyesterSmartAccount instead.
+ *
+ * @param params - Owner account and optional salt nonce
+ * @returns An AccountSigner that can be used for authentication
+ */
+declare function createPolyesterAccountSigner(params: CreatePolyesterAccountSignerParams): AccountSigner;
+//#endregion
+export { CreatePolyesterAccountSignerParams, createPolyesterAccountSigner };
+//# sourceMappingURL=create-polyester-account-signer.d.ts.map

package/dist/account-signer/create-polyester-account-signer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-polyester-account-signer.d.ts","names":[],"sources":["../../src/account-signer/create-polyester-account-signer.ts"],"mappings":";;;;UAaiB;;EAEb,aAAa;;EAEb,OAAO;;EAEP;;;;;;;;;;;;;;iBAqDY,6BACZ,QAAQ,qCACT"}

package/dist/account-signer/create-polyester-account-signer.js

@@ -0,0 +1,101 @@
+import { predictSafeAddressWithData } from "./predict-safe-address.js";
+import { concat, encodeAbiParameters, hashMessage, hashTypedData, toBytes } from "viem";
+//#region src/account-signer/create-polyester-account-signer.ts
+/** ERC-6492 magic suffix for counterfactual signature verification */
+const ERC6492_MAGIC_SUFFIX = "0x6492649264926492649264926492649264926492649264926492649264926492";
+/**
+* Adjusts the V value in a signature for Safe's eth_sign verification.
+* Safe expects V to be 31+ for eth_sign signatures (27 base + 4 for eth_sign marker).
+*/
+function adjustVInSignature(signature) {
+	const ETHEREUM_V_VALUES = [
+		0,
+		1,
+		27,
+		28
+	];
+	const MIN_VALID_V_VALUE_FOR_SAFE_ECDSA = 27;
+	let signatureV = Number.parseInt(signature.slice(-2), 16);
+	if (!ETHEREUM_V_VALUES.includes(signatureV)) throw new Error("Invalid signature V value");
+	if (signatureV < MIN_VALID_V_VALUE_FOR_SAFE_ECDSA) signatureV += MIN_VALID_V_VALUE_FOR_SAFE_ECDSA;
+	signatureV += 4;
+	return signature.slice(0, -2) + signatureV.toString(16).padStart(2, "0");
+}
+/**
+* Wraps a signature in ERC-6492 format for counterfactual verification.
+* This allows signature verification before the Safe is deployed.
+*/
+function wrapErc6492Signature(factoryAddress, factoryCalldata, signature) {
+	const encoded = encodeAbiParameters([
+		{
+			name: "factory",
+			type: "address"
+		},
+		{
+			name: "factoryCalldata",
+			type: "bytes"
+		},
+		{
+			name: "signature",
+			type: "bytes"
+		}
+	], [
+		factoryAddress,
+		factoryCalldata,
+		signature
+	]);
+	return concat([encoded, ERC6492_MAGIC_SUFFIX]);
+}
+/**
+* Creates an AccountSigner for Polyester authentication without any RPC calls.
+*
+* This computes the Safe smart account address deterministically and produces
+* ERC-6492 wrapped signatures for counterfactual verification. The signature
+* matches what toSafeSmartAccount.signMessage() would produce for an undeployed Safe.
+*
+* For actual chain interactions (UserOperations), use createPolyesterSmartAccount instead.
+*
+* @param params - Owner account and optional salt nonce
+* @returns An AccountSigner that can be used for authentication
+*/
+function createPolyesterAccountSigner(params) {
+	const { environment, owner, saltNonce = 0n } = params;
+	const { safeProxyFactoryAddress, safeSingletonAddress, safeModuleSetupAddress, safe4337ModuleAddress, multiSendAddress } = environment.accountAbstraction.safe;
+	const chainId = environment.chain.id;
+	const predictParams = {
+		owners: [owner.address],
+		saltNonce,
+		safeProxyFactoryAddress,
+		safeSingletonAddress,
+		safeModuleSetupAddress,
+		safe4337ModuleAddress,
+		multiSendAddress
+	};
+	const { address, factoryCalldata } = predictSafeAddressWithData(predictParams);
+	return {
+		environmentFingerprint: environment.fingerprint,
+		accountAddress: address,
+		ownerAddress: owner.address,
+		signMessage: async (message) => {
+			const messageHash = hashMessage(message);
+			const safeMessageHash = hashTypedData({
+				domain: {
+					chainId,
+					verifyingContract: address
+				},
+				types: { SafeMessage: [{
+					name: "message",
+					type: "bytes"
+				}] },
+				primaryType: "SafeMessage",
+				message: { message: messageHash }
+			});
+			const innerSignature = adjustVInSignature(await owner.signMessage({ message: { raw: toBytes(safeMessageHash) } }));
+			return wrapErc6492Signature(safeProxyFactoryAddress, factoryCalldata, innerSignature);
+		}
+	};
+}
+//#endregion
+export { createPolyesterAccountSigner };
+
+//# sourceMappingURL=create-polyester-account-signer.js.map

package/dist/account-signer/create-polyester-account-signer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-polyester-account-signer.js","names":[],"sources":["../../src/account-signer/create-polyester-account-signer.ts"],"sourcesContent":["import type { Address, Hex, LocalAccount } from \"viem\";\nimport { concat, encodeAbiParameters, hashMessage, hashTypedData, toBytes } from \"viem\";\nimport {\n    predictSafeAddressWithData,\n    type PredictSafeAddressParams,\n} from \"./predict-safe-address.js\";\nimport type { AccountSigner, HexAddress } from \"./types.js\";\nimport type { PolyesterEnvironment } from \"../environment.js\";\n\n/** ERC-6492 magic suffix for counterfactual signature verification */\nconst ERC6492_MAGIC_SUFFIX: Hex =\n    \"0x6492649264926492649264926492649264926492649264926492649264926492\";\n\nexport interface CreatePolyesterAccountSignerParams {\n    /** The environment this signer should authenticate against */\n    environment: PolyesterEnvironment;\n    /** The owner account (EOA) that will sign messages */\n    owner: LocalAccount;\n    /** Salt nonce for deriving different Safe addresses from the same owner (default: 0n) */\n    saltNonce?: bigint;\n}\n\n/**\n * Adjusts the V value in a signature for Safe's eth_sign verification.\n * Safe expects V to be 31+ for eth_sign signatures (27 base + 4 for eth_sign marker).\n */\nfunction adjustVInSignature(signature: Hex): Hex {\n    const ETHEREUM_V_VALUES = [0, 1, 27, 28];\n    const MIN_VALID_V_VALUE_FOR_SAFE_ECDSA = 27;\n\n    let signatureV = Number.parseInt(signature.slice(-2), 16);\n    if (!ETHEREUM_V_VALUES.includes(signatureV)) {\n        throw new Error(\"Invalid signature V value\");\n    }\n\n    // for eth_sign: add 27 if V < 27, then add 4\n    if (signatureV < MIN_VALID_V_VALUE_FOR_SAFE_ECDSA) {\n        signatureV += MIN_VALID_V_VALUE_FOR_SAFE_ECDSA;\n    }\n    signatureV += 4;\n\n    return (signature.slice(0, -2) + signatureV.toString(16).padStart(2, \"0\")) as Hex;\n}\n\n/**\n * Wraps a signature in ERC-6492 format for counterfactual verification.\n * This allows signature verification before the Safe is deployed.\n */\nfunction wrapErc6492Signature(factoryAddress: Address, factoryCalldata: Hex, signature: Hex): Hex {\n    const encoded = encodeAbiParameters(\n        [\n            { name: \"factory\", type: \"address\" },\n            { name: \"factoryCalldata\", type: \"bytes\" },\n            { name: \"signature\", type: \"bytes\" },\n        ],\n        [factoryAddress, factoryCalldata, signature],\n    );\n    return concat([encoded, ERC6492_MAGIC_SUFFIX]);\n}\n\n/**\n * Creates an AccountSigner for Polyester authentication without any RPC calls.\n *\n * This computes the Safe smart account address deterministically and produces\n * ERC-6492 wrapped signatures for counterfactual verification. The signature\n * matches what toSafeSmartAccount.signMessage() would produce for an undeployed Safe.\n *\n * For actual chain interactions (UserOperations), use createPolyesterSmartAccount instead.\n *\n * @param params - Owner account and optional salt nonce\n * @returns An AccountSigner that can be used for authentication\n */\nexport function createPolyesterAccountSigner(\n    params: CreatePolyesterAccountSignerParams,\n): AccountSigner {\n    const { environment, owner, saltNonce = 0n } = params;\n    const {\n        safeProxyFactoryAddress,\n        safeSingletonAddress,\n        safeModuleSetupAddress,\n        safe4337ModuleAddress,\n        multiSendAddress,\n    } = environment.accountAbstraction.safe;\n    const chainId = environment.chain.id;\n\n    const predictParams: PredictSafeAddressParams = {\n        owners: [owner.address],\n        saltNonce,\n        safeProxyFactoryAddress,\n        safeSingletonAddress,\n        safeModuleSetupAddress,\n        safe4337ModuleAddress,\n        multiSendAddress,\n    };\n\n    const { address, factoryCalldata } = predictSafeAddressWithData(predictParams);\n\n    return {\n        environmentFingerprint: environment.fingerprint,\n        accountAddress: address as HexAddress,\n        ownerAddress: owner.address as HexAddress,\n        signMessage: async (message: string): Promise<Hex> => {\n            // 1. hash the original message (what Safe calls generateSafeMessageMessage for strings)\n            const messageHash = hashMessage(message);\n\n            // 2. create EIP-712 typed data hash matching Safe's signMessage\n            const safeMessageHash = hashTypedData({\n                domain: {\n                    chainId,\n                    verifyingContract: address,\n                },\n                types: {\n                    SafeMessage: [{ name: \"message\", type: \"bytes\" }],\n                },\n                primaryType: \"SafeMessage\",\n                message: {\n                    message: messageHash,\n                },\n            });\n\n            // 3. sign the Safe message hash with raw bytes\n            const ownerSignature = await owner.signMessage({\n                message: { raw: toBytes(safeMessageHash) },\n            });\n\n            // 4. adjust V value for Safe's eth_sign verification\n            const innerSignature = adjustVInSignature(ownerSignature as Hex);\n\n            // 5. wrap in ERC-6492 format for counterfactual verification\n            return wrapErc6492Signature(safeProxyFactoryAddress, factoryCalldata, innerSignature);\n        },\n    };\n}\n"],"mappings":";;;;AAUA,MAAM,uBACF;;;;;AAeJ,SAAS,mBAAmB,WAAqB;CAC7C,MAAM,oBAAoB;EAAC;EAAG;EAAG;EAAI;CAAE;CACvC,MAAM,mCAAmC;CAEzC,IAAI,aAAa,OAAO,SAAS,UAAU,MAAM,EAAE,GAAG,EAAE;CACxD,IAAI,CAAC,kBAAkB,SAAS,UAAU,GACtC,MAAM,IAAI,MAAM,2BAA2B;CAI/C,IAAI,aAAa,kCACb,cAAc;CAElB,cAAc;CAEd,OAAQ,UAAU,MAAM,GAAG,EAAE,IAAI,WAAW,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG;AAC5E;;;;;AAMA,SAAS,qBAAqB,gBAAyB,iBAAsB,WAAqB;CAC9F,MAAM,UAAU,oBACZ;EACI;GAAE,MAAM;GAAW,MAAM;EAAU;EACnC;GAAE,MAAM;GAAmB,MAAM;EAAQ;EACzC;GAAE,MAAM;GAAa,MAAM;EAAQ;CACvC,GACA;EAAC;EAAgB;EAAiB;CAAS,CAC/C;CACA,OAAO,OAAO,CAAC,SAAS,oBAAoB,CAAC;AACjD;;;;;;;;;;;;;AAcA,SAAgB,6BACZ,QACa;CACb,MAAM,EAAE,aAAa,OAAO,YAAY,OAAO;CAC/C,MAAM,EACF,yBACA,sBACA,wBACA,uBACA,qBACA,YAAY,mBAAmB;CACnC,MAAM,UAAU,YAAY,MAAM;CAElC,MAAM,gBAA0C;EAC5C,QAAQ,CAAC,MAAM,OAAO;EACtB;EACA;EACA;EACA;EACA;EACA;CACJ;CAEA,MAAM,EAAE,SAAS,oBAAoB,2BAA2B,aAAa;CAE7E,OAAO;EACH,wBAAwB,YAAY;EACpC,gBAAgB;EAChB,cAAc,MAAM;EACpB,aAAa,OAAO,YAAkC;GAElD,MAAM,cAAc,YAAY,OAAO;GAGvC,MAAM,kBAAkB,cAAc;IAClC,QAAQ;KACJ;KACA,mBAAmB;IACvB;IACA,OAAO,EACH,aAAa,CAAC;KAAE,MAAM;KAAW,MAAM;IAAQ,CAAC,EACpD;IACA,aAAa;IACb,SAAS,EACL,SAAS,YACb;GACJ,CAAC;GAQD,MAAM,iBAAiB,mBAAmB,MALb,MAAM,YAAY,EAC3C,SAAS,EAAE,KAAK,QAAQ,eAAe,EAAE,EAC7C,CAAC,CAG8D;GAG/D,OAAO,qBAAqB,yBAAyB,iBAAiB,cAAc;EACxF;CACJ;AACJ"}

package/dist/account-signer/index.d.ts

@@ -0,0 +1,3 @@
+import { AccountSigner, AccountSignerConfig, AccountSignerFactory, HexAddress, isAccountSignerFactory, resolveAccountSigner } from "./types.js";
+import { CreatePolyesterAccountSignerParams, createPolyesterAccountSigner } from "./create-polyester-account-signer.js";
+export { type AccountSigner, type AccountSignerConfig, type AccountSignerFactory, type CreatePolyesterAccountSignerParams, type HexAddress, createPolyesterAccountSigner, isAccountSignerFactory, resolveAccountSigner };

package/dist/account-signer/index.js

@@ -0,0 +1,3 @@
+import { isAccountSignerFactory, resolveAccountSigner } from "./types.js";
+import { createPolyesterAccountSigner } from "./create-polyester-account-signer.js";
+export { createPolyesterAccountSigner, isAccountSignerFactory, resolveAccountSigner };

package/dist/account-signer/predict-safe-address.js

@@ -0,0 +1,230 @@
+import { encodeFunctionData, encodePacked, getAddress, getContractAddress, hexToBigInt, keccak256, zeroAddress } from "viem";
+//#region src/account-signer/predict-safe-address.ts
+/**
+* SafeProxy creation bytecode from @safe-global/safe-contracts v1.4.1
+*
+* This must match the proxyCreationCode() return value from the SafeProxyFactory
+* deployed at the environment's safeProxyFactoryAddress.
+*
+* The verification script at scripts/verify-safe-prediction.ts validates this.
+*/
+const SAFE_PROXY_CREATION_CODE = "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";
+const multiSendAbi = [{
+	inputs: [{
+		internalType: "bytes",
+		name: "transactions",
+		type: "bytes"
+	}],
+	name: "multiSend",
+	outputs: [],
+	stateMutability: "payable",
+	type: "function"
+}];
+const enableModulesAbi = [{
+	inputs: [{
+		internalType: "address[]",
+		name: "modules",
+		type: "address[]"
+	}],
+	name: "enableModules",
+	outputs: [],
+	stateMutability: "nonpayable",
+	type: "function"
+}];
+const setupAbi = [{
+	inputs: [
+		{
+			internalType: "address[]",
+			name: "_owners",
+			type: "address[]"
+		},
+		{
+			internalType: "uint256",
+			name: "_threshold",
+			type: "uint256"
+		},
+		{
+			internalType: "address",
+			name: "to",
+			type: "address"
+		},
+		{
+			internalType: "bytes",
+			name: "data",
+			type: "bytes"
+		},
+		{
+			internalType: "address",
+			name: "fallbackHandler",
+			type: "address"
+		},
+		{
+			internalType: "address",
+			name: "paymentToken",
+			type: "address"
+		},
+		{
+			internalType: "uint256",
+			name: "payment",
+			type: "uint256"
+		},
+		{
+			internalType: "address payable",
+			name: "paymentReceiver",
+			type: "address"
+		}
+	],
+	name: "setup",
+	outputs: [],
+	stateMutability: "nonpayable",
+	type: "function"
+}];
+/**
+* Encodes a single transaction for MultiSend.
+* Matches permissionless encodeInternalTransaction exactly.
+*/
+function encodeInternalTransaction(tx) {
+	return encodePacked([
+		"uint8",
+		"address",
+		"uint256",
+		"uint256",
+		"bytes"
+	], [
+		tx.operation,
+		tx.to,
+		tx.value,
+		BigInt((tx.data.length - 2) / 2),
+		tx.data
+	]).slice(2);
+}
+/**
+* Encodes multiple transactions into MultiSend calldata.
+* Matches permissionless encodeMultiSend exactly.
+*/
+function encodeMultiSend(txs) {
+	const data = `0x${txs.map((tx) => encodeInternalTransaction(tx)).join("")}`;
+	return encodeFunctionData({
+		abi: multiSendAbi,
+		functionName: "multiSend",
+		args: [data]
+	});
+}
+/**
+* Builds the Safe setup initializer for non-ERC7579 path.
+* Matches permissionless getInitializerCode (non-7579 branch) exactly.
+*/
+function getInitializerNon7579(params) {
+	const { owners, threshold, safeModuleSetupAddress, safe4337ModuleAddress, multiSendAddress, paymentToken = zeroAddress, payment = 0n, paymentReceiver = zeroAddress, safeModules = [], setupTransactions = [] } = params;
+	const multiSendCallData = encodeMultiSend([{
+		to: safeModuleSetupAddress,
+		data: encodeFunctionData({
+			abi: enableModulesAbi,
+			functionName: "enableModules",
+			args: [[safe4337ModuleAddress, ...safeModules]]
+		}),
+		value: 0n,
+		operation: 1
+	}, ...setupTransactions.map((tx) => ({
+		...tx,
+		operation: 0
+	}))]);
+	return encodeFunctionData({
+		abi: setupAbi,
+		functionName: "setup",
+		args: [
+			owners,
+			threshold,
+			multiSendAddress,
+			multiSendCallData,
+			safe4337ModuleAddress,
+			paymentToken,
+			payment,
+			paymentReceiver
+		]
+	});
+}
+const createProxyWithNonceAbi = [{
+	inputs: [
+		{
+			internalType: "address",
+			name: "_singleton",
+			type: "address"
+		},
+		{
+			internalType: "bytes",
+			name: "initializer",
+			type: "bytes"
+		},
+		{
+			internalType: "uint256",
+			name: "saltNonce",
+			type: "uint256"
+		}
+	],
+	name: "createProxyWithNonce",
+	outputs: [{
+		internalType: "contract SafeProxy",
+		name: "proxy",
+		type: "address"
+	}],
+	stateMutability: "nonpayable",
+	type: "function"
+}];
+/**
+* Computes the deterministic Safe smart account address without any RPC calls.
+*
+* This uses the same CREATE2 address derivation algorithm as permissionless@0.2.31:
+* 1. Build Safe setup initializer
+* 2. Compute deploymentCode = proxyCreationCode + singleton address
+* 3. Compute salt = keccak256(keccak256(initializer) + saltNonce)
+* 4. Compute CREATE2 address
+*
+* @param params - Safe account configuration
+* @returns The predicted Safe smart account address
+*/
+function predictSafeAddress(params) {
+	return predictSafeAddressWithData(params).address;
+}
+/**
+* Computes the deterministic Safe smart account address and returns data
+* needed for ERC-6492 counterfactual signature verification.
+*
+* @param params - Safe account configuration
+* @returns Address, initializer, and factory calldata
+*/
+function predictSafeAddressWithData(params) {
+	const { owners, threshold = BigInt(owners.length), saltNonce = 0n, safeProxyFactoryAddress, safeSingletonAddress, safeModuleSetupAddress, safe4337ModuleAddress, multiSendAddress } = params;
+	const initializer = getInitializerNon7579({
+		owners,
+		threshold,
+		safeModuleSetupAddress,
+		safe4337ModuleAddress,
+		multiSendAddress
+	});
+	const factoryCalldata = encodeFunctionData({
+		abi: createProxyWithNonceAbi,
+		functionName: "createProxyWithNonce",
+		args: [
+			safeSingletonAddress,
+			initializer,
+			saltNonce
+		]
+	});
+	const deploymentCode = encodePacked(["bytes", "uint256"], [SAFE_PROXY_CREATION_CODE, hexToBigInt(safeSingletonAddress)]);
+	const salt = keccak256(encodePacked(["bytes32", "uint256"], [keccak256(encodePacked(["bytes"], [initializer])), saltNonce]));
+	return {
+		address: getAddress(getContractAddress({
+			from: safeProxyFactoryAddress,
+			salt,
+			bytecode: deploymentCode,
+			opcode: "CREATE2"
+		})),
+		initializer,
+		factoryCalldata
+	};
+}
+//#endregion
+export { SAFE_PROXY_CREATION_CODE, predictSafeAddress, predictSafeAddressWithData };
+
+//# sourceMappingURL=predict-safe-address.js.map

package/dist/account-signer/predict-safe-address.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"predict-safe-address.js","names":[],"sources":["../../src/account-signer/predict-safe-address.ts"],"sourcesContent":["import {\n    type Address,\n    type Hex,\n    encodeFunctionData,\n    encodePacked,\n    getAddress,\n    getContractAddress,\n    hexToBigInt,\n    keccak256,\n    zeroAddress,\n} from \"viem\";\n\n/**\n * SafeProxy creation bytecode from @safe-global/safe-contracts v1.4.1\n *\n * This must match the proxyCreationCode() return value from the SafeProxyFactory\n * deployed at the environment's safeProxyFactoryAddress.\n *\n * The verification script at scripts/verify-safe-prediction.ts validates this.\n */\nconst SAFE_PROXY_CREATION_CODE: Hex =\n    \"0x608060405234801561001057600080fd5b506040516101e63803806101e68339818101604052602081101561003357600080fd5b8101908080519060200190929190505050600073ffffffffffffffffffffffffffffffffffffffff168173ffffffffffffffffffffffffffffffffffffffff1614156100ca576040517f08c379a00000000000000000000000000000000000000000000000000000000081526004018080602001828103825260228152602001806101c46022913960400191505060405180910390fd5b806000806101000a81548173ffffffffffffffffffffffffffffffffffffffff021916908373ffffffffffffffffffffffffffffffffffffffff1602179055505060ab806101196000396000f3fe608060405273ffffffffffffffffffffffffffffffffffffffff600054167fa619486e0000000000000000000000000000000000000000000000000000000060003514156050578060005260206000f35b3660008037600080366000845af43d6000803e60008114156070573d6000fd5b3d6000f3fea264697066735822122003d1488ee65e08fa41e58e888a9865554c535f2c77126a82cb4c0f917f31441364736f6c63430007060033496e76616c69642073696e676c65746f6e20616464726573732070726f7669646564\";\n\n// ABIs copied from permissionless to ensure exact encoding match\n\nconst multiSendAbi = [\n    {\n        inputs: [{ internalType: \"bytes\", name: \"transactions\", type: \"bytes\" }],\n        name: \"multiSend\",\n        outputs: [],\n        stateMutability: \"payable\",\n        type: \"function\",\n    },\n] as const;\n\nconst enableModulesAbi = [\n    {\n        inputs: [{ internalType: \"address[]\", name: \"modules\", type: \"address[]\" }],\n        name: \"enableModules\",\n        outputs: [],\n        stateMutability: \"nonpayable\",\n        type: \"function\",\n    },\n] as const;\n\nconst setupAbi = [\n    {\n        inputs: [\n            { internalType: \"address[]\", name: \"_owners\", type: \"address[]\" },\n            { internalType: \"uint256\", name: \"_threshold\", type: \"uint256\" },\n            { internalType: \"address\", name: \"to\", type: \"address\" },\n            { internalType: \"bytes\", name: \"data\", type: \"bytes\" },\n            { internalType: \"address\", name: \"fallbackHandler\", type: \"address\" },\n            { internalType: \"address\", name: \"paymentToken\", type: \"address\" },\n            { internalType: \"uint256\", name: \"payment\", type: \"uint256\" },\n            { internalType: \"address payable\", name: \"paymentReceiver\", type: \"address\" },\n        ],\n        name: \"setup\",\n        outputs: [],\n        stateMutability: \"nonpayable\",\n        type: \"function\",\n    },\n] as const;\n\ninterface InternalTransaction {\n    to: Address;\n    data: Hex;\n    value: bigint;\n    operation: 0 | 1;\n}\n\n/**\n * Encodes a single transaction for MultiSend.\n * Matches permissionless encodeInternalTransaction exactly.\n */\nfunction encodeInternalTransaction(tx: InternalTransaction): string {\n    const encoded = encodePacked(\n        [\"uint8\", \"address\", \"uint256\", \"uint256\", \"bytes\"],\n        [tx.operation, tx.to, tx.value, BigInt((tx.data.length - 2) / 2), tx.data],\n    );\n    return encoded.slice(2);\n}\n\n/**\n * Encodes multiple transactions into MultiSend calldata.\n * Matches permissionless encodeMultiSend exactly.\n */\nfunction encodeMultiSend(txs: InternalTransaction[]): Hex {\n    const data: Hex = `0x${txs.map((tx) => encodeInternalTransaction(tx)).join(\"\")}`;\n    return encodeFunctionData({\n        abi: multiSendAbi,\n        functionName: \"multiSend\",\n        args: [data],\n    });\n}\n\nexport interface GetInitializerParams {\n    owners: Address[];\n    threshold: bigint;\n    safeModuleSetupAddress: Address;\n    safe4337ModuleAddress: Address;\n    multiSendAddress: Address;\n    paymentToken?: Address;\n    payment?: bigint;\n    paymentReceiver?: Address;\n    safeModules?: Address[];\n    setupTransactions?: { to: Address; data: Hex; value: bigint }[];\n}\n\n/**\n * Builds the Safe setup initializer for non-ERC7579 path.\n * Matches permissionless getInitializerCode (non-7579 branch) exactly.\n */\nfunction getInitializerNon7579(params: GetInitializerParams): Hex {\n    const {\n        owners,\n        threshold,\n        safeModuleSetupAddress,\n        safe4337ModuleAddress,\n        multiSendAddress,\n        paymentToken = zeroAddress,\n        payment = 0n,\n        paymentReceiver = zeroAddress,\n        safeModules = [],\n        setupTransactions = [],\n    } = params;\n\n    const multiCalls: InternalTransaction[] = [\n        {\n            to: safeModuleSetupAddress,\n            data: encodeFunctionData({\n                abi: enableModulesAbi,\n                functionName: \"enableModules\",\n                args: [[safe4337ModuleAddress, ...safeModules]],\n            }),\n            value: 0n,\n            operation: 1,\n        },\n        ...setupTransactions.map((tx) => ({ ...tx, operation: 0 as const })),\n    ];\n\n    const multiSendCallData = encodeMultiSend(multiCalls);\n\n    return encodeFunctionData({\n        abi: setupAbi,\n        functionName: \"setup\",\n        args: [\n            owners,\n            threshold,\n            multiSendAddress,\n            multiSendCallData,\n            safe4337ModuleAddress,\n            paymentToken,\n            payment,\n            paymentReceiver,\n        ],\n    });\n}\n\nconst createProxyWithNonceAbi = [\n    {\n        inputs: [\n            { internalType: \"address\", name: \"_singleton\", type: \"address\" },\n            { internalType: \"bytes\", name: \"initializer\", type: \"bytes\" },\n            { internalType: \"uint256\", name: \"saltNonce\", type: \"uint256\" },\n        ],\n        name: \"createProxyWithNonce\",\n        outputs: [{ internalType: \"contract SafeProxy\", name: \"proxy\", type: \"address\" }],\n        stateMutability: \"nonpayable\",\n        type: \"function\",\n    },\n] as const;\n\nexport interface PredictSafeAddressParams {\n    owners: Address[];\n    threshold?: bigint;\n    saltNonce?: bigint;\n    safeProxyFactoryAddress: Address;\n    safeSingletonAddress: Address;\n    safeModuleSetupAddress: Address;\n    safe4337ModuleAddress: Address;\n    multiSendAddress: Address;\n}\n\nexport interface PredictSafeAddressResult {\n    address: Address;\n    initializer: Hex;\n    factoryCalldata: Hex;\n}\n\n/**\n * Computes the deterministic Safe smart account address without any RPC calls.\n *\n * This uses the same CREATE2 address derivation algorithm as permissionless@0.2.31:\n * 1. Build Safe setup initializer\n * 2. Compute deploymentCode = proxyCreationCode + singleton address\n * 3. Compute salt = keccak256(keccak256(initializer) + saltNonce)\n * 4. Compute CREATE2 address\n *\n * @param params - Safe account configuration\n * @returns The predicted Safe smart account address\n */\nexport function predictSafeAddress(params: PredictSafeAddressParams): Address {\n    return predictSafeAddressWithData(params).address;\n}\n\n/**\n * Computes the deterministic Safe smart account address and returns data\n * needed for ERC-6492 counterfactual signature verification.\n *\n * @param params - Safe account configuration\n * @returns Address, initializer, and factory calldata\n */\nexport function predictSafeAddressWithData(\n    params: PredictSafeAddressParams,\n): PredictSafeAddressResult {\n    const {\n        owners,\n        threshold = BigInt(owners.length),\n        saltNonce = 0n,\n        safeProxyFactoryAddress,\n        safeSingletonAddress,\n        safeModuleSetupAddress,\n        safe4337ModuleAddress,\n        multiSendAddress,\n    } = params;\n\n    const initializer = getInitializerNon7579({\n        owners,\n        threshold,\n        safeModuleSetupAddress,\n        safe4337ModuleAddress,\n        multiSendAddress,\n    });\n\n    const factoryCalldata = encodeFunctionData({\n        abi: createProxyWithNonceAbi,\n        functionName: \"createProxyWithNonce\",\n        args: [safeSingletonAddress, initializer, saltNonce],\n    });\n\n    const deploymentCode = encodePacked(\n        [\"bytes\", \"uint256\"],\n        [SAFE_PROXY_CREATION_CODE, hexToBigInt(safeSingletonAddress)],\n    );\n\n    const salt = keccak256(\n        encodePacked(\n            [\"bytes32\", \"uint256\"],\n            [keccak256(encodePacked([\"bytes\"], [initializer])), saltNonce],\n        ),\n    );\n\n    const address = getAddress(\n        getContractAddress({\n            from: safeProxyFactoryAddress,\n            salt,\n            bytecode: deploymentCode,\n            opcode: \"CREATE2\",\n        }),\n    );\n\n    return { address, initializer, factoryCalldata };\n}\n\nexport { SAFE_PROXY_CREATION_CODE };\n"],"mappings":";;;;;;;;;;AAoBA,MAAM,2BACF;AAIJ,MAAM,eAAe,CACjB;CACI,QAAQ,CAAC;EAAE,cAAc;EAAS,MAAM;EAAgB,MAAM;CAAQ,CAAC;CACvE,MAAM;CACN,SAAS,CAAC;CACV,iBAAiB;CACjB,MAAM;AACV,CACJ;AAEA,MAAM,mBAAmB,CACrB;CACI,QAAQ,CAAC;EAAE,cAAc;EAAa,MAAM;EAAW,MAAM;CAAY,CAAC;CAC1E,MAAM;CACN,SAAS,CAAC;CACV,iBAAiB;CACjB,MAAM;AACV,CACJ;AAEA,MAAM,WAAW,CACb;CACI,QAAQ;EACJ;GAAE,cAAc;GAAa,MAAM;GAAW,MAAM;EAAY;EAChE;GAAE,cAAc;GAAW,MAAM;GAAc,MAAM;EAAU;EAC/D;GAAE,cAAc;GAAW,MAAM;GAAM,MAAM;EAAU;EACvD;GAAE,cAAc;GAAS,MAAM;GAAQ,MAAM;EAAQ;EACrD;GAAE,cAAc;GAAW,MAAM;GAAmB,MAAM;EAAU;EACpE;GAAE,cAAc;GAAW,MAAM;GAAgB,MAAM;EAAU;EACjE;GAAE,cAAc;GAAW,MAAM;GAAW,MAAM;EAAU;EAC5D;GAAE,cAAc;GAAmB,MAAM;GAAmB,MAAM;EAAU;CAChF;CACA,MAAM;CACN,SAAS,CAAC;CACV,iBAAiB;CACjB,MAAM;AACV,CACJ;;;;;AAaA,SAAS,0BAA0B,IAAiC;CAKhE,OAJgB,aACZ;EAAC;EAAS;EAAW;EAAW;EAAW;CAAO,GAClD;EAAC,GAAG;EAAW,GAAG;EAAI,GAAG;EAAO,QAAQ,GAAG,KAAK,SAAS,KAAK,CAAC;EAAG,GAAG;CAAI,CAEhE,CAAC,CAAC,MAAM,CAAC;AAC1B;;;;;AAMA,SAAS,gBAAgB,KAAiC;CACtD,MAAM,OAAY,KAAK,IAAI,KAAK,OAAO,0BAA0B,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE;CAC7E,OAAO,mBAAmB;EACtB,KAAK;EACL,cAAc;EACd,MAAM,CAAC,IAAI;CACf,CAAC;AACL;;;;;AAmBA,SAAS,sBAAsB,QAAmC;CAC9D,MAAM,EACF,QACA,WACA,wBACA,uBACA,kBACA,eAAe,aACf,UAAU,IACV,kBAAkB,aAClB,cAAc,CAAC,GACf,oBAAoB,CAAC,MACrB;CAgBJ,MAAM,oBAAoB,gBAAgB,CAbtC;EACI,IAAI;EACJ,MAAM,mBAAmB;GACrB,KAAK;GACL,cAAc;GACd,MAAM,CAAC,CAAC,uBAAuB,GAAG,WAAW,CAAC;EAClD,CAAC;EACD,OAAO;EACP,WAAW;CACf,GACA,GAAG,kBAAkB,KAAK,QAAQ;EAAE,GAAG;EAAI,WAAW;CAAW,EAAE,CAGpB,CAAC;CAEpD,OAAO,mBAAmB;EACtB,KAAK;EACL,cAAc;EACd,MAAM;GACF;GACA;GACA;GACA;GACA;GACA;GACA;GACA;EACJ;CACJ,CAAC;AACL;AAEA,MAAM,0BAA0B,CAC5B;CACI,QAAQ;EACJ;GAAE,cAAc;GAAW,MAAM;GAAc,MAAM;EAAU;EAC/D;GAAE,cAAc;GAAS,MAAM;GAAe,MAAM;EAAQ;EAC5D;GAAE,cAAc;GAAW,MAAM;GAAa,MAAM;EAAU;CAClE;CACA,MAAM;CACN,SAAS,CAAC;EAAE,cAAc;EAAsB,MAAM;EAAS,MAAM;CAAU,CAAC;CAChF,iBAAiB;CACjB,MAAM;AACV,CACJ;;;;;;;;;;;;;AA+BA,SAAgB,mBAAmB,QAA2C;CAC1E,OAAO,2BAA2B,MAAM,CAAC,CAAC;AAC9C;;;;;;;;AASA,SAAgB,2BACZ,QACwB;CACxB,MAAM,EACF,QACA,YAAY,OAAO,OAAO,MAAM,GAChC,YAAY,IACZ,yBACA,sBACA,wBACA,uBACA,qBACA;CAEJ,MAAM,cAAc,sBAAsB;EACtC;EACA;EACA;EACA;EACA;CACJ,CAAC;CAED,MAAM,kBAAkB,mBAAmB;EACvC,KAAK;EACL,cAAc;EACd,MAAM;GAAC;GAAsB;GAAa;EAAS;CACvD,CAAC;CAED,MAAM,iBAAiB,aACnB,CAAC,SAAS,SAAS,GACnB,CAAC,0BAA0B,YAAY,oBAAoB,CAAC,CAChE;CAEA,MAAM,OAAO,UACT,aACI,CAAC,WAAW,SAAS,GACrB,CAAC,UAAU,aAAa,CAAC,OAAO,GAAG,CAAC,WAAW,CAAC,CAAC,GAAG,SAAS,CACjE,CACJ;CAWA,OAAO;EAAE,SATO,WACZ,mBAAmB;GACf,MAAM;GACN;GACA,UAAU;GACV,QAAQ;EACZ,CAAC,CAGU;EAAG;EAAa;CAAgB;AACnD"}

package/dist/account-signer/types.d.ts

@@ -0,0 +1,40 @@
+import { Hex } from "viem";
+//#region src/account-signer/types.d.ts
+type HexAddress = `0x${string}`;
+/**
+ * Minimal account signer interface for SDK operations.
+ *
+ * The SDK authenticates the Polyester smart account address. The owner address
+ * is optional metadata about the EOA or custody provider that controls it.
+ */
+interface AccountSigner {
+  /** Fingerprint of the PolyesterEnvironment this signer was created for */
+  readonly environmentFingerprint: string;
+  /** The smart account address (used for authentication and trading) */
+  readonly accountAddress: HexAddress;
+  /** The owner/EOA address (optional metadata about the controlling signer) */
+  readonly ownerAddress?: HexAddress;
+  /** Sign a message and return the signature */
+  signMessage(message: string): Promise<Hex>;
+}
+/**
+ * Factory function type for lazy account signer initialization.
+ * Useful when the signer might not be available at client creation time.
+ */
+type AccountSignerFactory = () => AccountSigner | null | Promise<AccountSigner | null>;
+/**
+ * Account signer configuration for the client.
+ * Can be a signer instance or a factory for lazy initialization.
+ */
+type AccountSignerConfig = AccountSigner | AccountSignerFactory;
+/**
+ * Helper to check if an account signer config is a factory function.
+ */
+declare function isAccountSignerFactory(config: AccountSignerConfig): config is AccountSignerFactory;
+/**
+ * Helper to resolve an account signer from config.
+ */
+declare function resolveAccountSigner(config: AccountSignerConfig | undefined): Promise<AccountSigner | null>;
+//#endregion
+export { AccountSigner, AccountSignerConfig, AccountSignerFactory, HexAddress, isAccountSignerFactory, resolveAccountSigner };
+//# sourceMappingURL=types.d.ts.map

package/dist/account-signer/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","names":[],"sources":["../../src/account-signer/types.ts"],"mappings":";;KAGY;;;;;;;UAQK;;WAEJ;;WAGA,gBAAgB;;WAGhB,eAAe;;EAGxB,YAAY,kBAAkB,QAAQ;;;;;;KAO9B,6BAA6B,uBAAuB,QAAQ;;;;;KAM5D,sBAAsB,gBAAgB;;;;iBAKlC,uBACZ,QAAQ,sBACT,UAAU;;;;iBAsBS,qBAClB,QAAQ,kCACT,QAAQ"}

package/dist/account-signer/types.js

@@ -0,0 +1,29 @@
+import { isEvmAddress } from "../utils/evm.js";
+//#region src/account-signer/types.ts
+/**
+* Helper to check if an account signer config is a factory function.
+*/
+function isAccountSignerFactory(config) {
+	return typeof config === "function";
+}
+/**
+* Asserts that a value implements the account signer contract.
+*/
+function assertAccountSigner(value) {
+	if (!value.environmentFingerprint) throw new Error("Account signer must include an environmentFingerprint.");
+	if (!isEvmAddress(value.accountAddress)) throw new Error("Account signer must include a valid accountAddress.");
+	if (value.ownerAddress && !isEvmAddress(value.ownerAddress)) throw new Error("Account signer ownerAddress must be a valid address.");
+}
+/**
+* Helper to resolve an account signer from config.
+*/
+async function resolveAccountSigner(config) {
+	if (!config) return null;
+	const accountSigner = isAccountSignerFactory(config) ? await config() : config;
+	if (accountSigner) assertAccountSigner(accountSigner);
+	return accountSigner;
+}
+//#endregion
+export { assertAccountSigner, isAccountSignerFactory, resolveAccountSigner };
+
+//# sourceMappingURL=types.js.map

package/dist/account-signer/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","names":[],"sources":["../../src/account-signer/types.ts"],"sourcesContent":["import type { Hex } from \"viem\";\nimport { isEvmAddress } from \"../utils/evm.js\";\n\nexport type HexAddress = `0x${string}`;\n\n/**\n * Minimal account signer interface for SDK operations.\n *\n * The SDK authenticates the Polyester smart account address. The owner address\n * is optional metadata about the EOA or custody provider that controls it.\n */\nexport interface AccountSigner {\n    /** Fingerprint of the PolyesterEnvironment this signer was created for */\n    readonly environmentFingerprint: string;\n\n    /** The smart account address (used for authentication and trading) */\n    readonly accountAddress: HexAddress;\n\n    /** The owner/EOA address (optional metadata about the controlling signer) */\n    readonly ownerAddress?: HexAddress;\n\n    /** Sign a message and return the signature */\n    signMessage(message: string): Promise<Hex>;\n}\n\n/**\n * Factory function type for lazy account signer initialization.\n * Useful when the signer might not be available at client creation time.\n */\nexport type AccountSignerFactory = () => AccountSigner | null | Promise<AccountSigner | null>;\n\n/**\n * Account signer configuration for the client.\n * Can be a signer instance or a factory for lazy initialization.\n */\nexport type AccountSignerConfig = AccountSigner | AccountSignerFactory;\n\n/**\n * Helper to check if an account signer config is a factory function.\n */\nexport function isAccountSignerFactory(\n    config: AccountSignerConfig,\n): config is AccountSignerFactory {\n    return typeof config === \"function\";\n}\n\n/**\n * Asserts that a value implements the account signer contract.\n */\nexport function assertAccountSigner(value: AccountSigner): void {\n    if (!value.environmentFingerprint) {\n        throw new Error(\"Account signer must include an environmentFingerprint.\");\n    }\n    if (!isEvmAddress(value.accountAddress)) {\n        throw new Error(\"Account signer must include a valid accountAddress.\");\n    }\n    if (value.ownerAddress && !isEvmAddress(value.ownerAddress)) {\n        throw new Error(\"Account signer ownerAddress must be a valid address.\");\n    }\n}\n\n/**\n * Helper to resolve an account signer from config.\n */\nexport async function resolveAccountSigner(\n    config: AccountSignerConfig | undefined,\n): Promise<AccountSigner | null> {\n    if (!config) return null;\n    const accountSigner = isAccountSignerFactory(config) ? await config() : config;\n    if (accountSigner) assertAccountSigner(accountSigner);\n    return accountSigner;\n}\n"],"mappings":";;;;;AAwCA,SAAgB,uBACZ,QAC8B;CAC9B,OAAO,OAAO,WAAW;AAC7B;;;;AAKA,SAAgB,oBAAoB,OAA4B;CAC5D,IAAI,CAAC,MAAM,wBACP,MAAM,IAAI,MAAM,wDAAwD;CAE5E,IAAI,CAAC,aAAa,MAAM,cAAc,GAClC,MAAM,IAAI,MAAM,qDAAqD;CAEzE,IAAI,MAAM,gBAAgB,CAAC,aAAa,MAAM,YAAY,GACtD,MAAM,IAAI,MAAM,sDAAsD;AAE9E;;;;AAKA,eAAsB,qBAClB,QAC6B;CAC7B,IAAI,CAAC,QAAQ,OAAO;CACpB,MAAM,gBAAgB,uBAAuB,MAAM,IAAI,MAAM,OAAO,IAAI;CACxE,IAAI,eAAe,oBAAoB,aAAa;CACpD,OAAO;AACX"}

package/dist/browser-client.d.ts

@@ -0,0 +1,37 @@
+import { AccountSigner, AccountSignerConfig } from "./account-signer/types.js";
+import { SubaccountResolver } from "./services/subaccount-resolver.js";
+import { PolyesterClient, PolyesterClientBaseConfig } from "./core-client.js";
+import { AuthTokenStorage } from "./services/auth/token-storage.js";
+import { AccountSignerAuthService } from "./services/auth/account-signer-auth.js";
+//#region src/browser-client.d.ts
+interface PolyesterBrowserClientConfig extends Omit<PolyesterClientBaseConfig, "auth"> {
+  /**
+   * Account signer interface for authentication.
+   * Pass a signer object or a factory function for lazy initialization.
+   */
+  accountSigner?: AccountSignerConfig;
+  /**
+   * Storage for browser bearer tokens. Defaults to per-client memory storage.
+   * Use createCookieAuthTokenStorage() to opt into reload/SSR persistence.
+   */
+  tokenStorage?: AuthTokenStorage;
+}
+/**
+ * A client for interacting with the Polyester DEX in the browser.
+ */
+declare class PolyesterBrowserClient extends PolyesterClient {
+  get auth(): AccountSignerAuthService;
+  constructor(config: PolyesterBrowserClientConfig);
+  /**
+   * Creates a resolver that defaults subaccountId to the active subaccount.
+   * The getter is called lazily when service methods are invoked.
+   */
+  protected createSubaccountResolver(): SubaccountResolver;
+  /**
+   * Sets the account signer used for authenticated browser requests.
+   */
+  setAccountSigner(accountSigner: AccountSigner | null): void;
+}
+//#endregion
+export { PolyesterBrowserClient, PolyesterBrowserClientConfig };
+//# sourceMappingURL=browser-client.d.ts.map

package/dist/browser-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"browser-client.d.ts","names":[],"sources":["../src/browser-client.ts"],"mappings":";;;;;;UAUiB,qCAAqC,KAAK;;;;;EAKvD,gBAAgB;;;;;EAKhB,eAAe;;;;;cAMN,+BAA+B;MAI3B,QAAQ;EAIT,YAAA,QAAQ;;;;;YA0CD,4BAA4B;;;;EAiB/C,iBAAiB,eAAe"}