@polyester/sdk 0.22.3 → 0.23.1

package/dist/services/auth/auth.d.ts

@@ -6,13 +6,20 @@ import "../../realtime/index.js";
 import { ProfileService } from "./profile/profile.js";
 import * as v from "valibot";
 //#region src/services/auth/auth.d.ts
+declare const CreateWalletChallengeInputSchema: v.StrictObjectSchema<{
+  readonly smartAccountAddress: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.CheckAction<string, "Invalid wallet address.">]>;
+  readonly signerAddress: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.CheckAction<string, "Invalid wallet address.">]>;
+  readonly uri: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 2048, undefined>, v.CheckAction<string, "Wallet challenge URI must be an HTTP(S) origin without a path, query, fragment, or user information.">]>;
+  readonly purpose: v.PicklistSchema<["login", "create_subaccount"], undefined>;
+}, undefined>;
+type CreateWalletChallengeInput = v.InferInput<typeof CreateWalletChallengeInputSchema>;
+type WalletChallengePurpose = CreateWalletChallengeInput["purpose"];
 declare const LoginWithWalletInputSchema: v.StrictObjectSchema<{
-  readonly smartAccountAddress: v.StringSchema<undefined>;
-  readonly nonce: v.StringSchema<undefined>;
-  readonly signature: v.StringSchema<undefined>;
+  readonly smartAccountAddress: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.CheckAction<string, "Invalid wallet address.">]>;
+  readonly message: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.CheckAction<string, "Wallet challenge message exceeds 4096 UTF-8 bytes.">]>;
+  readonly signature: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 8192, undefined>]>;
   readonly userAgent: v.OptionalSchema<v.StringSchema<undefined>, "">;
   readonly ip: v.OptionalSchema<v.StringSchema<undefined>, "">;
-  readonly primaryWalletAddress: v.OptionalSchema<v.StringSchema<undefined>, "">;
   readonly walletProvider: v.OptionalSchema<v.StringSchema<undefined>, "">;
 }, undefined>;
 type LoginWithWalletInput = v.InferInput<typeof LoginWithWalletInputSchema>;
@@ -54,8 +61,8 @@ declare const LoginWithWalletResponseSchema: v.ObjectSchema<{
   readonly username: v.StringSchema<undefined>;
 }, undefined>;
 type LoginWithWalletResponse = v.InferOutput<typeof LoginWithWalletResponseSchema>;
-declare const NonceSchema: v.ObjectSchema<{
-  readonly nonce: v.StringSchema<undefined>;
+declare const WalletChallengeSchema: v.ObjectSchema<{
+  readonly message: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.CheckAction<string, "Wallet challenge message exceeds 4096 UTF-8 bytes.">]>;
   readonly expiresAt: v.SchemaWithPipe<readonly [v.OptionalSchema<v.ObjectSchema<{
     readonly seconds: v.BigintSchema<undefined>;
     readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
@@ -64,7 +71,7 @@ declare const NonceSchema: v.ObjectSchema<{
     nanos: number;
   } | undefined, number | undefined>]>;
 }, undefined>;
-type Nonce = v.InferOutput<typeof NonceSchema>;
+type WalletChallenge = v.InferOutput<typeof WalletChallengeSchema>;
 /**
  * Handles wallet-based authentication, caller introspection, and authenticated profile operations.
  */
@@ -84,17 +91,15 @@ declare class AuthService {
    */
   acceptTerms(options?: PolyesterMutationOptions): Promise<void>;
   /**
-   * Requests a short-lived nonce for the given smart-account EVM address.
-   * The nonce is single-purpose, replaced by subsequent requests, and expires
-   * after about five minutes. The optional expiry is milliseconds since the
-   * Unix epoch.
+   * Requests a server-issued SIWE message. Sign its exact UTF-8 bytes with
+   * personal_sign; do not hash or reconstruct it. Expiry is epoch milliseconds.
    */
-  requestLoginNonce(smartAccountAddress: string, options?: PolyesterRequestOptions): Promise<Nonce>;
+  createWalletChallenge(input: CreateWalletChallengeInput, options?: PolyesterRequestOptions): Promise<WalletChallenge>;
   /**
-   * Exchanges a signed login nonce for an authenticated session token and account identity returned by the auth API.
+   * Exchanges a signed SIWE message for an authenticated session token and account identity returned by the auth API.
    */
   protected loginWithWallet(input: LoginWithWalletInput, options?: PolyesterMutationOptions): Promise<LoginWithWalletResponse>;
 }
 //#endregion
-export { AuthService, LoginWithWalletInput, LoginWithWalletInputSchema, LoginWithWalletResponse, Me, Nonce };
+export { AuthService, CreateWalletChallengeInput, CreateWalletChallengeInputSchema, LoginWithWalletInput, LoginWithWalletInputSchema, LoginWithWalletResponse, Me, WalletChallenge, WalletChallengePurpose };
 //# sourceMappingURL=auth.d.ts.map

package/dist/services/auth/auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth.d.ts","names":[],"sources":["../../../src/services/auth/auth.ts"],"mappings":";;;;;;;;cAmBa,4BAA0B,EAAA;;;;;;;;;KAU3B,uBAAuB,EAAE,kBAAkB;cAEjD,UAAQ,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;KAOF,KAAK,EAAE,mBAAmB;cAEhC,+BAA6B,EAAA;;;;;;;;;KAOvB,0BAA0B,EAAE,mBAAmB;cAErD,aAAW,EAAA;;;;;;;;;;KAKL,QAAQ,EAAE,mBAAmB;;;;cAK5B;;EAGT,SAAS;EAEG,YAAA,YAAY,4BAA4B,UAAU;;;;EASxD,GAAG,UAAU,0BAA0B,QAAQ;;;;;;;EAW/C,YAAY,UAAU,2BAA2B;;;;;;;EAUjD,kBACF,6BACA,UAAU,0BACX,QAAQ;;;;YAaK,gBACZ,OAAO,sBACP,UAAU,2BACX,QAAQ"}
+{"version":3,"file":"auth.d.ts","names":[],"sources":["../../../src/services/auth/auth.ts"],"mappings":";;;;;;;;cA2Ba,kCAAgC,EAAA;;;;;;KAMjC,6BAA6B,EAAE,kBAAkB;KACjD,yBAAyB;cAExB,4BAA0B,EAAA;;;;;;;;KAS3B,uBAAuB,EAAE,kBAAkB;cAEjD,UAAQ,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;KAOF,KAAK,EAAE,mBAAmB;cAEhC,+BAA6B,EAAA;;;;;;;;;KAOvB,0BAA0B,EAAE,mBAAmB;cAErD,uBAAqB,EAAA;;;;;;;;;;KAKf,kBAAkB,EAAE,mBAAmB;;;;cAKtC;;EAGT,SAAS;EAEG,YAAA,YAAY,4BAA4B,UAAU;;;;EASxD,GAAG,UAAU,0BAA0B,QAAQ;;;;;;;EAW/C,YAAY,UAAU,2BAA2B;;;;;EAQjD,sBACF,OAAO,4BACP,UAAU,0BACX,QAAQ;;;;YA4BK,gBACZ,OAAO,sBACP,UAAU,2BACX,QAAQ"}

package/dist/services/auth/auth.js

@@ -1,19 +1,26 @@
+import { ValidationError } from "../../shared/errors.js";
 import { AuthService as AuthService$1 } from "../../gen/auth/v1/auth_pb.js";
 import { OptionalTimestampMsSchema, PublicIdSchema, TimestampSchema } from "../../shared/schemas.js";
 import { parse } from "../../shared/validation.js";
 import { toConnectCallOptions } from "../../shared/request-options.js";
 import { ProfileService } from "./profile/profile.js";
 import { MfaSessionInfoSchema } from "../mfa/mfa.schemas.js";
+import { WalletAddressSchema, WalletChallengeMessageSchema, WalletChallengeUriSchema, WalletSignatureSchema } from "./wallet-challenge.schemas.js";
 import { createClient } from "@connectrpc/connect";
 import * as v from "valibot";
 //#region src/services/auth/auth.ts
+const CreateWalletChallengeInputSchema = v.strictObject({
+	smartAccountAddress: WalletAddressSchema,
+	signerAddress: WalletAddressSchema,
+	uri: WalletChallengeUriSchema,
+	purpose: v.picklist(["login", "create_subaccount"])
+});
 const LoginWithWalletInputSchema = v.strictObject({
-	smartAccountAddress: v.string(),
-	nonce: v.string(),
-	signature: v.string(),
+	smartAccountAddress: WalletAddressSchema,
+	message: WalletChallengeMessageSchema,
+	signature: WalletSignatureSchema,
 	userAgent: v.optional(v.string(), ""),
 	ip: v.optional(v.string(), ""),
-	primaryWalletAddress: v.optional(v.string(), ""),
 	walletProvider: v.optional(v.string(), "")
 });
 const MeSchema = v.object({
@@ -28,8 +35,8 @@ const LoginWithWalletResponseSchema = v.object({
 	accountId: PublicIdSchema,
 	username: v.string()
 });
-const NonceSchema = v.object({
-	nonce: v.string(),
+const WalletChallengeSchema = v.object({
+	message: WalletChallengeMessageSchema,
 	expiresAt: OptionalTimestampMsSchema
 });
 /**
@@ -61,16 +68,19 @@ var AuthService = class {
 		await this.#authClient.acceptTerms({}, toConnectCallOptions(options));
 	}
 	/**
-	* Requests a short-lived nonce for the given smart-account EVM address.
-	* The nonce is single-purpose, replaced by subsequent requests, and expires
-	* after about five minutes. The optional expiry is milliseconds since the
-	* Unix epoch.
+	* Requests a server-issued SIWE message. Sign its exact UTF-8 bytes with
+	* personal_sign; do not hash or reconstruct it. Expiry is epoch milliseconds.
 	*/
-	async requestLoginNonce(smartAccountAddress, options) {
-		return parse(NonceSchema, await this.#publicClient.getNonce({ smartAccountAddress }, toConnectCallOptions(options)));
+	async createWalletChallenge(input, options) {
+		const validated = parse(CreateWalletChallengeInputSchema, input);
+		if (validated.purpose === "create_subaccount" && validated.signerAddress.toLowerCase() !== validated.smartAccountAddress.toLowerCase()) throw new ValidationError("Subaccount challenge signer must equal the smart account address.");
+		return parse(WalletChallengeSchema, await this.#publicClient.createWalletChallenge({
+			...validated,
+			purpose: validated.purpose === "login" ? 1 : 2
+		}, toConnectCallOptions(options)));
 	}
 	/**
-	* Exchanges a signed login nonce for an authenticated session token and account identity returned by the auth API.
+	* Exchanges a signed SIWE message for an authenticated session token and account identity returned by the auth API.
 	*/
 	async loginWithWallet(input, options) {
 		const validatedInput = parse(LoginWithWalletInputSchema, input);
@@ -79,6 +89,6 @@ var AuthService = class {
 	}
 };
 //#endregion
-export { AuthService, LoginWithWalletInputSchema };
+export { AuthService, CreateWalletChallengeInputSchema, LoginWithWalletInputSchema };
 
 //# sourceMappingURL=auth.js.map

package/dist/services/auth/auth.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.js","names":["#publicClient","Proto.AuthService","#authClient"],"sources":["../../../src/services/auth/auth.ts"],"sourcesContent":["import { createClient, type Client } from \"@connectrpc/connect\";\nimport * as Proto from \"../../gen/auth/v1/auth_pb.js\";\nimport * as v from \"valibot\";\nimport { parse } from \"../../shared/validation.js\";\nimport { ProfileService } from \"./profile/profile.js\";\nimport {\n    OptionalTimestampMsSchema,\n    PublicIdSchema,\n    TimestampSchema,\n} from \"../../shared/schemas.js\";\nimport {\n    toConnectCallOptions,\n    type PolyesterMutationOptions,\n    type PolyesterRequestOptions,\n} from \"../../shared/request-options.js\";\nimport { MfaSessionInfoSchema } from \"../mfa/mfa.schemas.js\";\nimport type { PolyesterRealtime } from \"../../realtime/index.js\";\nimport type { AuthAndPublicApiTransports } from \"../../shared/transports.js\";\n\nexport const LoginWithWalletInputSchema = v.strictObject({\n    smartAccountAddress: v.string(),\n    nonce: v.string(),\n    signature: v.string(),\n    userAgent: v.optional(v.string(), \"\"),\n    ip: v.optional(v.string(), \"\"),\n    primaryWalletAddress: v.optional(v.string(), \"\"),\n    walletProvider: v.optional(v.string(), \"\"),\n});\n\nexport type LoginWithWalletInput = v.InferInput<typeof LoginWithWalletInputSchema>;\n\nconst MeSchema = v.object({\n    accountId: PublicIdSchema,\n    apiKeyId: v.optional(v.string()),\n    username: v.string(),\n    session: v.optional(MfaSessionInfoSchema),\n});\n\nexport type Me = v.InferOutput<typeof MeSchema>;\n\nconst LoginWithWalletResponseSchema = v.object({\n    accessToken: v.string(),\n    expiresAt: v.optional(TimestampSchema),\n    accountId: PublicIdSchema,\n    username: v.string(),\n});\n\nexport type LoginWithWalletResponse = v.InferOutput<typeof LoginWithWalletResponseSchema>;\n\nconst NonceSchema = v.object({\n    nonce: v.string(),\n    expiresAt: OptionalTimestampMsSchema,\n});\n\nexport type Nonce = v.InferOutput<typeof NonceSchema>;\n\n/**\n * Handles wallet-based authentication, caller introspection, and authenticated profile operations.\n */\nexport class AuthService {\n    #publicClient: Client<typeof Proto.AuthService>;\n    #authClient: Client<typeof Proto.AuthService>;\n    profile: ProfileService;\n\n    constructor(transports: AuthAndPublicApiTransports, realtime: PolyesterRealtime) {\n        this.#publicClient = createClient(Proto.AuthService, transports.publicApi);\n        this.#authClient = createClient(Proto.AuthService, transports.authApi);\n        this.profile = new ProfileService(transports, realtime);\n    }\n\n    /**\n     * Returns the authenticated caller's account context, including account ID, optional API key ID, username, and session assurance details from the presented token or API key.\n     */\n    async me(options?: PolyesterRequestOptions): Promise<Me> {\n        const res = await this.#authClient.me({}, toConnectCallOptions(options));\n        return parse(MeSchema, res);\n    }\n\n    /**\n     * Records explicit consent to the current terms for the caller's root account.\n     * Call only after the user consents. Requires an interactive JWT session;\n     * API keys are not allowed. Repeated acceptance succeeds without changing\n     * the first acceptance time. No MFA is required.\n     */\n    async acceptTerms(options?: PolyesterMutationOptions): Promise<void> {\n        await this.#authClient.acceptTerms({}, toConnectCallOptions(options));\n    }\n\n    /**\n     * Requests a short-lived nonce for the given smart-account EVM address.\n     * The nonce is single-purpose, replaced by subsequent requests, and expires\n     * after about five minutes. The optional expiry is milliseconds since the\n     * Unix epoch.\n     */\n    async requestLoginNonce(\n        smartAccountAddress: string,\n        options?: PolyesterRequestOptions,\n    ): Promise<Nonce> {\n        return parse(\n            NonceSchema,\n            await this.#publicClient.getNonce(\n                { smartAccountAddress },\n                toConnectCallOptions(options),\n            ),\n        );\n    }\n\n    /**\n     * Exchanges a signed login nonce for an authenticated session token and account identity returned by the auth API.\n     */\n    protected async loginWithWallet(\n        input: LoginWithWalletInput,\n        options?: PolyesterMutationOptions,\n    ): Promise<LoginWithWalletResponse> {\n        const validatedInput = parse(LoginWithWalletInputSchema, input);\n        const res = await this.#publicClient.loginWithWallet(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(LoginWithWalletResponseSchema, res);\n    }\n}\n"],"mappings":";;;;;;;;;AAmBA,MAAa,6BAA6B,EAAE,aAAa;CACrD,qBAAqB,EAAE,OAAO;CAC9B,OAAO,EAAE,OAAO;CAChB,WAAW,EAAE,OAAO;CACpB,WAAW,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACpC,IAAI,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC7B,sBAAsB,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC/C,gBAAgB,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;AAC7C,CAAC;AAID,MAAM,WAAW,EAAE,OAAO;CACtB,WAAW;CACX,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;CAC/B,UAAU,EAAE,OAAO;CACnB,SAAS,EAAE,SAAS,oBAAoB;AAC5C,CAAC;AAID,MAAM,gCAAgC,EAAE,OAAO;CAC3C,aAAa,EAAE,OAAO;CACtB,WAAW,EAAE,SAAS,eAAe;CACrC,WAAW;CACX,UAAU,EAAE,OAAO;AACvB,CAAC;AAID,MAAM,cAAc,EAAE,OAAO;CACzB,OAAO,EAAE,OAAO;CAChB,WAAW;AACf,CAAC;;;;AAOD,IAAa,cAAb,MAAyB;CACrB;CACA;CACA;CAEA,YAAY,YAAwC,UAA6B;EAC7E,KAAKA,gBAAgB,aAAaC,eAAmB,WAAW,SAAS;EACzE,KAAKC,cAAc,aAAaD,eAAmB,WAAW,OAAO;EACrE,KAAK,UAAU,IAAI,eAAe,YAAY,QAAQ;CAC1D;;;;CAKA,MAAM,GAAG,SAAgD;EACrD,MAAM,MAAM,MAAM,KAAKC,YAAY,GAAG,CAAC,GAAG,qBAAqB,OAAO,CAAC;EACvE,OAAO,MAAM,UAAU,GAAG;CAC9B;;;;;;;CAQA,MAAM,YAAY,SAAmD;EACjE,MAAM,KAAKA,YAAY,YAAY,CAAC,GAAG,qBAAqB,OAAO,CAAC;CACxE;;;;;;;CAQA,MAAM,kBACF,qBACA,SACc;EACd,OAAO,MACH,aACA,MAAM,KAAKF,cAAc,SACrB,EAAE,oBAAoB,GACtB,qBAAqB,OAAO,CAChC,CACJ;CACJ;;;;CAKA,MAAgB,gBACZ,OACA,SACgC;EAChC,MAAM,iBAAiB,MAAM,4BAA4B,KAAK;EAC9D,MAAM,MAAM,MAAM,KAAKA,cAAc,gBACjC,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,+BAA+B,GAAG;CACnD;AACJ"}
+{"version":3,"file":"auth.js","names":["#publicClient","Proto.AuthService","#authClient"],"sources":["../../../src/services/auth/auth.ts"],"sourcesContent":["import { createClient, type Client } from \"@connectrpc/connect\";\nimport * as Proto from \"../../gen/auth/v1/auth_pb.js\";\nimport * as v from \"valibot\";\nimport { ValidationError } from \"../../shared/errors.js\";\nimport { parse } from \"../../shared/validation.js\";\nimport { ProfileService } from \"./profile/profile.js\";\nimport {\n    OptionalTimestampMsSchema,\n    PublicIdSchema,\n    TimestampSchema,\n} from \"../../shared/schemas.js\";\nimport {\n    toConnectCallOptions,\n    type PolyesterMutationOptions,\n    type PolyesterRequestOptions,\n} from \"../../shared/request-options.js\";\nimport { MfaSessionInfoSchema } from \"../mfa/mfa.schemas.js\";\nimport type { PolyesterRealtime } from \"../../realtime/index.js\";\nimport type { AuthAndPublicApiTransports } from \"../../shared/transports.js\";\n\nimport {\n    WalletAddressSchema,\n    WalletChallengeUriSchema,\n    WalletChallengeMessageSchema,\n    WalletSignatureSchema,\n} from \"./wallet-challenge.schemas.js\";\n\nexport const CreateWalletChallengeInputSchema = v.strictObject({\n    smartAccountAddress: WalletAddressSchema,\n    signerAddress: WalletAddressSchema,\n    uri: WalletChallengeUriSchema,\n    purpose: v.picklist([\"login\", \"create_subaccount\"]),\n});\nexport type CreateWalletChallengeInput = v.InferInput<typeof CreateWalletChallengeInputSchema>;\nexport type WalletChallengePurpose = CreateWalletChallengeInput[\"purpose\"];\n\nexport const LoginWithWalletInputSchema = v.strictObject({\n    smartAccountAddress: WalletAddressSchema,\n    message: WalletChallengeMessageSchema,\n    signature: WalletSignatureSchema,\n    userAgent: v.optional(v.string(), \"\"),\n    ip: v.optional(v.string(), \"\"),\n    walletProvider: v.optional(v.string(), \"\"),\n});\n\nexport type LoginWithWalletInput = v.InferInput<typeof LoginWithWalletInputSchema>;\n\nconst MeSchema = v.object({\n    accountId: PublicIdSchema,\n    apiKeyId: v.optional(v.string()),\n    username: v.string(),\n    session: v.optional(MfaSessionInfoSchema),\n});\n\nexport type Me = v.InferOutput<typeof MeSchema>;\n\nconst LoginWithWalletResponseSchema = v.object({\n    accessToken: v.string(),\n    expiresAt: v.optional(TimestampSchema),\n    accountId: PublicIdSchema,\n    username: v.string(),\n});\n\nexport type LoginWithWalletResponse = v.InferOutput<typeof LoginWithWalletResponseSchema>;\n\nconst WalletChallengeSchema = v.object({\n    message: WalletChallengeMessageSchema,\n    expiresAt: OptionalTimestampMsSchema,\n});\n\nexport type WalletChallenge = v.InferOutput<typeof WalletChallengeSchema>;\n\n/**\n * Handles wallet-based authentication, caller introspection, and authenticated profile operations.\n */\nexport class AuthService {\n    #publicClient: Client<typeof Proto.AuthService>;\n    #authClient: Client<typeof Proto.AuthService>;\n    profile: ProfileService;\n\n    constructor(transports: AuthAndPublicApiTransports, realtime: PolyesterRealtime) {\n        this.#publicClient = createClient(Proto.AuthService, transports.publicApi);\n        this.#authClient = createClient(Proto.AuthService, transports.authApi);\n        this.profile = new ProfileService(transports, realtime);\n    }\n\n    /**\n     * Returns the authenticated caller's account context, including account ID, optional API key ID, username, and session assurance details from the presented token or API key.\n     */\n    async me(options?: PolyesterRequestOptions): Promise<Me> {\n        const res = await this.#authClient.me({}, toConnectCallOptions(options));\n        return parse(MeSchema, res);\n    }\n\n    /**\n     * Records explicit consent to the current terms for the caller's root account.\n     * Call only after the user consents. Requires an interactive JWT session;\n     * API keys are not allowed. Repeated acceptance succeeds without changing\n     * the first acceptance time. No MFA is required.\n     */\n    async acceptTerms(options?: PolyesterMutationOptions): Promise<void> {\n        await this.#authClient.acceptTerms({}, toConnectCallOptions(options));\n    }\n\n    /**\n     * Requests a server-issued SIWE message. Sign its exact UTF-8 bytes with\n     * personal_sign; do not hash or reconstruct it. Expiry is epoch milliseconds.\n     */\n    async createWalletChallenge(\n        input: CreateWalletChallengeInput,\n        options?: PolyesterRequestOptions,\n    ): Promise<WalletChallenge> {\n        const validated = parse(CreateWalletChallengeInputSchema, input);\n        if (\n            validated.purpose === \"create_subaccount\" &&\n            validated.signerAddress.toLowerCase() !== validated.smartAccountAddress.toLowerCase()\n        ) {\n            throw new ValidationError(\n                \"Subaccount challenge signer must equal the smart account address.\",\n            );\n        }\n        return parse(\n            WalletChallengeSchema,\n            await this.#publicClient.createWalletChallenge(\n                {\n                    ...validated,\n                    purpose:\n                        validated.purpose === \"login\"\n                            ? Proto.WalletChallengePurpose.LOGIN\n                            : Proto.WalletChallengePurpose.CREATE_SUBACCOUNT,\n                },\n                toConnectCallOptions(options),\n            ),\n        );\n    }\n\n    /**\n     * Exchanges a signed SIWE message for an authenticated session token and account identity returned by the auth API.\n     */\n    protected async loginWithWallet(\n        input: LoginWithWalletInput,\n        options?: PolyesterMutationOptions,\n    ): Promise<LoginWithWalletResponse> {\n        const validatedInput = parse(LoginWithWalletInputSchema, input);\n        const res = await this.#publicClient.loginWithWallet(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(LoginWithWalletResponseSchema, res);\n    }\n}\n"],"mappings":";;;;;;;;;;;AA2BA,MAAa,mCAAmC,EAAE,aAAa;CAC3D,qBAAqB;CACrB,eAAe;CACf,KAAK;CACL,SAAS,EAAE,SAAS,CAAC,SAAS,mBAAmB,CAAC;AACtD,CAAC;AAID,MAAa,6BAA6B,EAAE,aAAa;CACrD,qBAAqB;CACrB,SAAS;CACT,WAAW;CACX,WAAW,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACpC,IAAI,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC7B,gBAAgB,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;AAC7C,CAAC;AAID,MAAM,WAAW,EAAE,OAAO;CACtB,WAAW;CACX,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;CAC/B,UAAU,EAAE,OAAO;CACnB,SAAS,EAAE,SAAS,oBAAoB;AAC5C,CAAC;AAID,MAAM,gCAAgC,EAAE,OAAO;CAC3C,aAAa,EAAE,OAAO;CACtB,WAAW,EAAE,SAAS,eAAe;CACrC,WAAW;CACX,UAAU,EAAE,OAAO;AACvB,CAAC;AAID,MAAM,wBAAwB,EAAE,OAAO;CACnC,SAAS;CACT,WAAW;AACf,CAAC;;;;AAOD,IAAa,cAAb,MAAyB;CACrB;CACA;CACA;CAEA,YAAY,YAAwC,UAA6B;EAC7E,KAAKA,gBAAgB,aAAaC,eAAmB,WAAW,SAAS;EACzE,KAAKC,cAAc,aAAaD,eAAmB,WAAW,OAAO;EACrE,KAAK,UAAU,IAAI,eAAe,YAAY,QAAQ;CAC1D;;;;CAKA,MAAM,GAAG,SAAgD;EACrD,MAAM,MAAM,MAAM,KAAKC,YAAY,GAAG,CAAC,GAAG,qBAAqB,OAAO,CAAC;EACvE,OAAO,MAAM,UAAU,GAAG;CAC9B;;;;;;;CAQA,MAAM,YAAY,SAAmD;EACjE,MAAM,KAAKA,YAAY,YAAY,CAAC,GAAG,qBAAqB,OAAO,CAAC;CACxE;;;;;CAMA,MAAM,sBACF,OACA,SACwB;EACxB,MAAM,YAAY,MAAM,kCAAkC,KAAK;EAC/D,IACI,UAAU,YAAY,uBACtB,UAAU,cAAc,YAAY,MAAM,UAAU,oBAAoB,YAAY,GAEpF,MAAM,IAAI,gBACN,mEACJ;EAEJ,OAAO,MACH,uBACA,MAAM,KAAKF,cAAc,sBACrB;GACI,GAAG;GACH,SACI,UAAU,YAAY,UAAA,IAAA;EAG9B,GACA,qBAAqB,OAAO,CAChC,CACJ;CACJ;;;;CAKA,MAAgB,gBACZ,OACA,SACgC;EAChC,MAAM,iBAAiB,MAAM,4BAA4B,KAAK;EAC9D,MAAM,MAAM,MAAM,KAAKA,cAAc,gBACjC,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,+BAA+B,GAAG;CACnD;AACJ"}

package/dist/services/auth/auth.types.d.ts

@@ -1,3 +1,3 @@
-import { LoginWithWalletInput, LoginWithWalletResponse, Me, Nonce } from "./auth.js";
+import { CreateWalletChallengeInput, LoginWithWalletInput, LoginWithWalletResponse, Me, WalletChallenge, WalletChallengePurpose } from "./auth.js";
 import { AccountSignerAuthEvents, CreateSubaccountParams, CreateSubaccountResult, LoginOptions, LoginResult } from "./account-signer-auth.js";
-export type { AccountSignerAuthEvents, CreateSubaccountResult as AccountSignerCreateSubaccountResult, CreateSubaccountParams, LoginOptions, LoginResult, LoginWithWalletInput, LoginWithWalletResponse, Me, Nonce };
+export type { AccountSignerAuthEvents, CreateSubaccountResult as AccountSignerCreateSubaccountResult, CreateSubaccountParams, CreateWalletChallengeInput, LoginOptions, LoginResult, LoginWithWalletInput, LoginWithWalletResponse, Me, WalletChallenge, WalletChallengePurpose };

package/dist/services/auth/wallet-challenge.schemas.js

@@ -0,0 +1,20 @@
+import { isEvmAddress } from "../../utils/evm.js";
+import * as v from "valibot";
+//#region src/services/auth/wallet-challenge.schemas.ts
+const WalletAddressSchema = v.pipe(v.string(), v.check(isEvmAddress, "Invalid wallet address."));
+const WalletChallengeUriSchema = v.pipe(v.string(), v.maxLength(2048), v.check((value) => {
+	if (!/^https?:\/\/[^/?#\s\\]+$/.test(value)) return false;
+	try {
+		const url = new URL(value);
+		return !url.username && !url.password;
+	} catch {
+		return false;
+	}
+}, "Wallet challenge URI must be an HTTP(S) origin without a path, query, fragment, or user information."));
+/** Preserve the server-issued UTF-8 message exactly as signed. */
+const WalletChallengeMessageSchema = v.pipe(v.string(), v.minLength(1), v.check((value) => new TextEncoder().encode(value).length <= 4096, "Wallet challenge message exceeds 4096 UTF-8 bytes."));
+const WalletSignatureSchema = v.pipe(v.string(), v.minLength(1), v.maxLength(8192));
+//#endregion
+export { WalletAddressSchema, WalletChallengeMessageSchema, WalletChallengeUriSchema, WalletSignatureSchema };
+
+//# sourceMappingURL=wallet-challenge.schemas.js.map

package/dist/services/auth/wallet-challenge.schemas.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"wallet-challenge.schemas.js","names":[],"sources":["../../../src/services/auth/wallet-challenge.schemas.ts"],"sourcesContent":["import * as v from \"valibot\";\nimport { isEvmAddress } from \"../../utils/evm.js\";\n\nexport const WalletAddressSchema = v.pipe(\n    v.string(),\n    v.check(isEvmAddress, \"Invalid wallet address.\"),\n);\n\nexport const WalletChallengeUriSchema = v.pipe(\n    v.string(),\n    v.maxLength(2048),\n    v.check((value) => {\n        if (!/^https?:\\/\\/[^/?#\\s\\\\]+$/.test(value)) return false;\n        try {\n            const url = new URL(value);\n            return !url.username && !url.password;\n        } catch {\n            return false;\n        }\n    }, \"Wallet challenge URI must be an HTTP(S) origin without a path, query, fragment, or user information.\"),\n);\n\n/** Preserve the server-issued UTF-8 message exactly as signed. */\nexport const WalletChallengeMessageSchema = v.pipe(\n    v.string(),\n    v.minLength(1),\n    v.check(\n        (value) => new TextEncoder().encode(value).length <= 4096,\n        \"Wallet challenge message exceeds 4096 UTF-8 bytes.\",\n    ),\n);\n\nexport const WalletSignatureSchema = v.pipe(v.string(), v.minLength(1), v.maxLength(8192));\n"],"mappings":";;;AAGA,MAAa,sBAAsB,EAAE,KACjC,EAAE,OAAO,GACT,EAAE,MAAM,cAAc,yBAAyB,CACnD;AAEA,MAAa,2BAA2B,EAAE,KACtC,EAAE,OAAO,GACT,EAAE,UAAU,IAAI,GAChB,EAAE,OAAO,UAAU;CACf,IAAI,CAAC,2BAA2B,KAAK,KAAK,GAAG,OAAO;CACpD,IAAI;EACA,MAAM,MAAM,IAAI,IAAI,KAAK;EACzB,OAAO,CAAC,IAAI,YAAY,CAAC,IAAI;CACjC,QAAQ;EACJ,OAAO;CACX;AACJ,GAAG,sGAAsG,CAC7G;;AAGA,MAAa,+BAA+B,EAAE,KAC1C,EAAE,OAAO,GACT,EAAE,UAAU,CAAC,GACb,EAAE,OACG,UAAU,IAAI,YAAY,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC,UAAU,MACrD,oDACJ,CACJ;AAEA,MAAa,wBAAwB,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,UAAU,CAAC,GAAG,EAAE,UAAU,IAAI,CAAC"}

package/dist/services/heatmap/heatmap.schemas.d.ts

@@ -14,7 +14,7 @@ type TimestampInit = {
 declare const GetOrderbookHeatmapInputSchema: v.SchemaWithPipe<readonly [v.ObjectSchema<{
   readonly symbolId: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.GtValueAction<number, 0, undefined>, v.MaxValueAction<number, 4294967295, undefined>]>;
   readonly interval: v.SchemaWithPipe<readonly [v.OptionalSchema<v.PicklistSchema<readonly ["1s", "1m", "5m", "1h"], undefined>, "1s">, v.TransformAction<"1s" | "1m" | "5m" | "1h", HeatmapInterval>]>;
-  readonly depth: v.SchemaWithPipe<readonly [v.OptionalSchema<v.PicklistSchema<readonly [1, 5, 10, 20, 50, 100, 200, 500, 1000], undefined>, 50>, v.TransformAction<5 | 10 | 20 | 1 | 200 | 1000 | 500 | 100 | 50, HeatmapDepth>]>;
+  readonly depth: v.SchemaWithPipe<readonly [v.OptionalSchema<v.PicklistSchema<readonly [1, 5, 10, 20, 50, 100, 200, 500, 1000], undefined>, 50>, v.TransformAction<5 | 10 | 20 | 1 | 200 | 1000 | 500 | 50 | 100, HeatmapDepth>]>;
   readonly quantityMode: v.SchemaWithPipe<readonly [v.OptionalSchema<v.PicklistSchema<readonly ["close", "peak"], undefined>, "close">, v.TransformAction<"close" | "peak", HeatmapQuantityMode>]>;
   readonly limit: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.GtValueAction<number, 0, undefined>, v.MaxValueAction<number, 20000, undefined>]>;
   readonly startTsSec: v.OptionalSchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>, v.MaxValueAction<number, number, undefined>, v.TransformAction<number, bigint>]>, undefined>;
@@ -227,7 +227,7 @@ type OrderbookHeatmapDeltaChain = ReturnType<typeof convertHeatmapDeltaChain>;
 declare function createOrderbookHeatmapResponseSchema(scales: SdkScales): v.SchemaWithPipe<readonly [v.ObjectSchema<{
   readonly symbolId: v.NumberSchema<undefined>;
   readonly interval: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.TransformAction<number, DecodedEnum<"1s" | "1m" | "5m" | "1h">>]>;
-  readonly depth: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.TransformAction<number, 5 | 10 | 20 | 1 | "unspecified" | 200 | 1000 | 500 | 100 | 50>]>;
+  readonly depth: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.TransformAction<number, 5 | 10 | 20 | 1 | "unspecified" | 200 | 1000 | 500 | 50 | 100>]>;
   readonly chain: v.OptionalSchema<v.ObjectSchema<{
     readonly baseKeyframe: v.OptionalSchema<v.ObjectSchema<{
       readonly tsSec: v.SchemaWithPipe<readonly [v.BigintSchema<undefined>, v.TransformAction<bigint, number>]>;
@@ -287,7 +287,7 @@ declare function createOrderbookHeatmapResponseSchema(scales: SdkScales): v.Sche
 }, undefined>, v.TransformAction<{
   symbolId: number;
   interval: DecodedEnum<"1s" | "1m" | "5m" | "1h">;
-  depth: 5 | 10 | 20 | 1 | "unspecified" | 200 | 1000 | 500 | 100 | 50;
+  depth: 5 | 10 | 20 | 1 | "unspecified" | 200 | 1000 | 500 | 50 | 100;
   chain?: {
     baseKeyframe?: {
       tsSec: number;
@@ -347,7 +347,7 @@ declare function createOrderbookHeatmapResponseSchema(scales: SdkScales): v.Sche
 }, {
   symbolId: number;
   interval: DecodedEnum<"1s" | "1m" | "5m" | "1h">;
-  depth: 5 | 10 | 20 | 1 | "unspecified" | 200 | 1000 | 500 | 100 | 50;
+  depth: 5 | 10 | 20 | 1 | "unspecified" | 200 | 1000 | 500 | 50 | 100;
   chain: {
     baseKeyframe: {
       tsSec: number;

package/dist/services/orderbook/orderbook.schemas.d.ts

@@ -10,7 +10,7 @@ declare const GetOrderbookInputSchema: v.SchemaWithPipe<readonly [v.ObjectSchema
   depth: number;
 }, {
   symbolId: number;
-  depth: 5 | 10 | 20 | 1 | 200 | 1000 | 500 | 100 | 50;
+  depth: 5 | 10 | 20 | 1 | 200 | 1000 | 500 | 50 | 100;
   protoDepth: Depth;
 }>]>;
 type GetOrderbookInput = v.InferInput<typeof GetOrderbookInputSchema>;

package/dist/services/orders/orders-batch.schemas.d.ts

@@ -3140,18 +3140,18 @@ declare const GetBatchReplaceStatusResultSchema: v.SchemaWithPipe<readonly [v.Ob
   readonly admissionStatus: v.SchemaWithPipe<readonly [v.EnumSchema<typeof BatchReplaceAdmissionStatus, undefined>, v.TransformAction<BatchReplaceAdmissionStatus, "unspecified" | "rejected" | "admitted" | "partially_admitted">]>;
   readonly items: v.ArraySchema<v.SchemaWithPipe<readonly [v.ObjectSchema<{
     readonly itemIndex: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>;
-    readonly phase: v.SchemaWithPipe<readonly [v.EnumSchema<typeof BatchReplacePhase, undefined>, v.TransformAction<BatchReplacePhase, "unspecified" | "terminal" | "working" | "rejected" | "admitted">]>;
+    readonly phase: v.SchemaWithPipe<readonly [v.EnumSchema<typeof BatchReplacePhase, undefined>, v.TransformAction<BatchReplacePhase, "unspecified" | "terminal" | "rejected" | "admitted" | "working">]>;
     readonly oldOrderId: v.SchemaWithPipe<readonly [v.OptionalSchema<v.BigintSchema<undefined>, undefined>, v.TransformAction<bigint | undefined, string | undefined>]>;
     readonly replacementOrderId: v.SchemaWithPipe<readonly [v.OptionalSchema<v.BigintSchema<undefined>, undefined>, v.TransformAction<bigint | undefined, string | undefined>]>;
-    readonly orderStatus: v.SchemaWithPipe<readonly [v.EnumSchema<typeof OrderStatus, undefined>, v.TransformAction<OrderStatus, "unspecified" | "pending" | "canceled" | "pending_cancel" | "working" | "filled" | "rejected">]>;
+    readonly orderStatus: v.SchemaWithPipe<readonly [v.EnumSchema<typeof OrderStatus, undefined>, v.TransformAction<OrderStatus, "unspecified" | "pending" | "canceled" | "rejected" | "working" | "pending_cancel" | "filled">]>;
     readonly code: v.StringSchema<undefined>;
     readonly updatedTsNs: v.BigintSchema<undefined>;
   }, undefined>, v.TransformAction<{
     itemIndex: number;
-    phase: "unspecified" | "terminal" | "working" | "rejected" | "admitted";
+    phase: "unspecified" | "terminal" | "rejected" | "admitted" | "working";
     oldOrderId?: string | undefined;
     replacementOrderId?: string | undefined;
-    orderStatus: "unspecified" | "pending" | "canceled" | "pending_cancel" | "working" | "filled" | "rejected";
+    orderStatus: "unspecified" | "pending" | "canceled" | "rejected" | "working" | "pending_cancel" | "filled";
     code: string;
     updatedTsNs: bigint;
   }, {
@@ -3159,10 +3159,10 @@ declare const GetBatchReplaceStatusResultSchema: v.SchemaWithPipe<readonly [v.Ob
     updatedTs: number;
     updatedTsNs: string;
     itemIndex: number;
-    phase: "unspecified" | "terminal" | "working" | "rejected" | "admitted";
+    phase: "unspecified" | "terminal" | "rejected" | "admitted" | "working";
     oldOrderId?: string | undefined;
     replacementOrderId?: string | undefined;
-    orderStatus: "unspecified" | "pending" | "canceled" | "pending_cancel" | "working" | "filled" | "rejected";
+    orderStatus: "unspecified" | "pending" | "canceled" | "rejected" | "working" | "pending_cancel" | "filled";
   }>]>, undefined>;
   readonly acceptedCount: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>;
   readonly rejectedCount: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.MinValueAction<number, 0, undefined>]>;
@@ -3176,10 +3176,10 @@ declare const GetBatchReplaceStatusResultSchema: v.SchemaWithPipe<readonly [v.Ob
     updatedTs: number;
     updatedTsNs: string;
     itemIndex: number;
-    phase: "unspecified" | "terminal" | "working" | "rejected" | "admitted";
+    phase: "unspecified" | "terminal" | "rejected" | "admitted" | "working";
     oldOrderId?: string | undefined;
     replacementOrderId?: string | undefined;
-    orderStatus: "unspecified" | "pending" | "canceled" | "pending_cancel" | "working" | "filled" | "rejected";
+    orderStatus: "unspecified" | "pending" | "canceled" | "rejected" | "working" | "pending_cancel" | "filled";
   }[];
   acceptedCount: number;
   rejectedCount: number;
@@ -3193,10 +3193,10 @@ declare const GetBatchReplaceStatusResultSchema: v.SchemaWithPipe<readonly [v.Ob
     updatedTs: number;
     updatedTsNs: string;
     itemIndex: number;
-    phase: "unspecified" | "terminal" | "working" | "rejected" | "admitted";
+    phase: "unspecified" | "terminal" | "rejected" | "admitted" | "working";
     oldOrderId?: string | undefined;
     replacementOrderId?: string | undefined;
-    orderStatus: "unspecified" | "pending" | "canceled" | "pending_cancel" | "working" | "filled" | "rejected";
+    orderStatus: "unspecified" | "pending" | "canceled" | "rejected" | "working" | "pending_cancel" | "filled";
   }[];
   acceptedCount: number;
   rejectedCount: number;
@@ -3210,10 +3210,10 @@ declare const GetBatchReplaceStatusResultSchema: v.SchemaWithPipe<readonly [v.Ob
     updatedTs: number;
     updatedTsNs: string;
     itemIndex: number;
-    phase: "unspecified" | "terminal" | "working" | "rejected" | "admitted";
+    phase: "unspecified" | "terminal" | "rejected" | "admitted" | "working";
     oldOrderId?: string | undefined;
     replacementOrderId?: string | undefined;
-    orderStatus: "unspecified" | "pending" | "canceled" | "pending_cancel" | "working" | "filled" | "rejected";
+    orderStatus: "unspecified" | "pending" | "canceled" | "rejected" | "working" | "pending_cancel" | "filled";
   }[];
   acceptedCount: number;
   rejectedCount: number;
@@ -3231,10 +3231,10 @@ declare const GetBatchReplaceStatusResultSchema: v.SchemaWithPipe<readonly [v.Ob
     updatedTs: number;
     updatedTsNs: string;
     itemIndex: number;
-    phase: "unspecified" | "terminal" | "working" | "rejected" | "admitted";
+    phase: "unspecified" | "terminal" | "rejected" | "admitted" | "working";
     oldOrderId?: string | undefined;
     replacementOrderId?: string | undefined;
-    orderStatus: "unspecified" | "pending" | "canceled" | "pending_cancel" | "working" | "filled" | "rejected";
+    orderStatus: "unspecified" | "pending" | "canceled" | "rejected" | "working" | "pending_cancel" | "filled";
   }[];
   acceptedCount: number;
   rejectedCount: number;

package/dist/services/orders/orders-input.schemas.d.ts

@@ -40,7 +40,7 @@ type OpenOrdersInput = v.InferInput<typeof OpenOrdersInputSchema>;
 declare const OrderHistoryInputSchema: v.SchemaWithPipe<readonly [v.StrictObjectSchema<{
   readonly includeAttachedRisk: v.OptionalSchema<v.BooleanSchema<undefined>, true>;
   readonly includeAttachedRiskState: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
-  readonly status: v.SchemaWithPipe<readonly [v.OptionalSchema<v.PicklistSchema<readonly ["FILLED", "CANCELED", "REJECTED"], undefined>, undefined>, v.TransformAction<"FILLED" | "CANCELED" | "REJECTED" | undefined, OrderStatus.FILLED | OrderStatus.CANCELED | OrderStatus.REJECTED | undefined>]>;
+  readonly status: v.SchemaWithPipe<readonly [v.OptionalSchema<v.PicklistSchema<readonly ["FILLED", "CANCELED", "REJECTED"], undefined>, undefined>, v.TransformAction<"CANCELED" | "FILLED" | "REJECTED" | undefined, OrderStatus.FILLED | OrderStatus.CANCELED | OrderStatus.REJECTED | undefined>]>;
   readonly startTsNs: v.SchemaWithPipe<readonly [v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction]>, undefined>, v.TransformAction<string | undefined, bigint | undefined>]>;
   readonly endTsNs: v.SchemaWithPipe<readonly [v.OptionalSchema<v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.TrimAction]>, undefined>, v.TransformAction<string | undefined, bigint | undefined>]>;
   readonly symbolId: v.OptionalSchema<v.ArraySchema<v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.IntegerAction<number, undefined>, v.GtValueAction<number, 0, undefined>, v.MaxValueAction<number, 4294967295, undefined>]>, undefined>, undefined>;

package/dist/services/orders/orders-output.schemas.d.ts

@@ -9,7 +9,7 @@ declare function createOrderSchema(scales: SdkScales): v.SchemaWithPipe<readonly
   readonly symbolId: v.NumberSchema<undefined>;
   readonly clientOrderId: v.StringSchema<undefined>;
   readonly side: v.EnumSchema<typeof Side, undefined>;
-  readonly status: v.SchemaWithPipe<readonly [v.EnumSchema<typeof OrderStatus, undefined>, v.TransformAction<OrderStatus, "unspecified" | "pending" | "canceled" | "pending_cancel" | "working" | "filled" | "rejected">]>;
+  readonly status: v.SchemaWithPipe<readonly [v.EnumSchema<typeof OrderStatus, undefined>, v.TransformAction<OrderStatus, "unspecified" | "pending" | "canceled" | "rejected" | "working" | "pending_cancel" | "filled">]>;
   readonly orderType: v.NumberSchema<undefined>;
   readonly timeInForce: v.NumberSchema<undefined>;
   readonly selfTradePreventionMode: v.NumberSchema<undefined>;
@@ -111,7 +111,7 @@ declare function createOrderSchema(scales: SdkScales): v.SchemaWithPipe<readonly
   symbolId: number;
   clientOrderId: string;
   side: Side;
-  status: "unspecified" | "pending" | "canceled" | "pending_cancel" | "working" | "filled" | "rejected";
+  status: "unspecified" | "pending" | "canceled" | "rejected" | "working" | "pending_cancel" | "filled";
   orderType: number;
   timeInForce: number;
   selfTradePreventionMode: number;
@@ -224,7 +224,7 @@ declare function createOrderSchema(scales: SdkScales): v.SchemaWithPipe<readonly
   orderId: string;
   symbolId: number;
   clientOrderId: string;
-  status: "unspecified" | "pending" | "canceled" | "pending_cancel" | "working" | "filled" | "rejected" | "partial";
+  status: "unspecified" | "pending" | "canceled" | "rejected" | "working" | "pending_cancel" | "filled" | "partial";
   side: "unspecified" | "buy" | "sell";
   orderType: "unspecified" | "limit" | "market";
   timeInForce: "unspecified" | "GTC" | "IOC" | "FOK";
@@ -352,7 +352,7 @@ declare function createOrderDetailsSchema(scales: SdkScales): v.ObjectSchema<{
     readonly symbolId: v.NumberSchema<undefined>;
     readonly clientOrderId: v.StringSchema<undefined>;
     readonly side: v.EnumSchema<typeof Side, undefined>;
-    readonly status: v.SchemaWithPipe<readonly [v.EnumSchema<typeof OrderStatus, undefined>, v.TransformAction<OrderStatus, "unspecified" | "pending" | "canceled" | "pending_cancel" | "working" | "filled" | "rejected">]>;
+    readonly status: v.SchemaWithPipe<readonly [v.EnumSchema<typeof OrderStatus, undefined>, v.TransformAction<OrderStatus, "unspecified" | "pending" | "canceled" | "rejected" | "working" | "pending_cancel" | "filled">]>;
     readonly orderType: v.NumberSchema<undefined>;
     readonly timeInForce: v.NumberSchema<undefined>;
     readonly selfTradePreventionMode: v.NumberSchema<undefined>;
@@ -454,7 +454,7 @@ declare function createOrderDetailsSchema(scales: SdkScales): v.ObjectSchema<{
     symbolId: number;
     clientOrderId: string;
     side: Side;
-    status: "unspecified" | "pending" | "canceled" | "pending_cancel" | "working" | "filled" | "rejected";
+    status: "unspecified" | "pending" | "canceled" | "rejected" | "working" | "pending_cancel" | "filled";
     orderType: number;
     timeInForce: number;
     selfTradePreventionMode: number;
@@ -567,7 +567,7 @@ declare function createOrderDetailsSchema(scales: SdkScales): v.ObjectSchema<{
     orderId: string;
     symbolId: number;
     clientOrderId: string;
-    status: "unspecified" | "pending" | "canceled" | "pending_cancel" | "working" | "filled" | "rejected" | "partial";
+    status: "unspecified" | "pending" | "canceled" | "rejected" | "working" | "pending_cancel" | "filled" | "partial";
     side: "unspecified" | "buy" | "sell";
     orderType: "unspecified" | "limit" | "market";
     timeInForce: "unspecified" | "GTC" | "IOC" | "FOK";

package/dist/services/subaccounts/subaccounts.d.ts

@@ -42,7 +42,7 @@ declare class SubaccountsService {
     invites: SubaccountInvite[];
   }>;
   /**
-   * Creates a new subaccount under the caller's root account using a smart-account address, nonce, and signature proof.
+   * Creates a new subaccount under the caller's root account using a smart-account address, server-issued SIWE message, and signature proof.
    */
   create(input: v.InferInput<typeof CreateSubaccountInputSchema>, options?: PolyesterMutationOptions): Promise<CreateSubaccountResult>;
   /**

package/dist/services/subaccounts/subaccounts.js

@@ -63,7 +63,7 @@ var SubaccountsService = class {
 		};
 	}
 	/**
-	* Creates a new subaccount under the caller's root account using a smart-account address, nonce, and signature proof.
+	* Creates a new subaccount under the caller's root account using a smart-account address, server-issued SIWE message, and signature proof.
 	*/
 	async create(input, options) {
 		const validatedInput = parse(CreateSubaccountInputSchema, input);

package/dist/services/subaccounts/subaccounts.js.map

@@ -1 +1 @@
-{"version":3,"file":"subaccounts.js","names":["#client","Proto.SubaccountService","#viewClient","Proto.SubaccountViewService","#publicRoleClient","Proto.SubaccountRoleService","#authRoleClient","#realtime","SubaccountSchema","ApiKeySchema","Proto.SubaccountSchema","ProtoApiKeys.ApiKeySchema"],"sources":["../../../src/services/subaccounts/subaccounts.ts"],"sourcesContent":["import * as Proto from \"../../gen/auth/v1/subaccounts_pb.js\";\nimport * as ProtoApiKeys from \"../../gen/auth/v1/api_keys_pb.js\";\nimport { createClient, type Client } from \"@connectrpc/connect\";\nimport * as v from \"valibot\";\nimport { parse } from \"../../shared/validation.js\";\nimport { type ApiKey, ApiKeySchema } from \"../api-keys/index.js\";\nimport { formatId } from \"../../utils/base58-id.js\";\nimport {\n    toConnectCallOptions,\n    type PolyesterMutationOptions,\n    type PolyesterRequestOptions,\n} from \"../../shared/request-options.js\";\nimport type { PolyesterRealtime } from \"../../realtime/index.js\";\nimport {\n    DEFAULT_SUBACCOUNT_POLICY,\n    SubaccountPoliciesService,\n    type SubaccountPolicy,\n    SubaccountPolicySchema,\n} from \"../policies/subaccount-policies/index.js\";\nimport type { BaseSubscribeInput } from \"../../shared/types.js\";\nimport type { AuthAndPublicApiTransports } from \"../../shared/transports.js\";\nimport type { SubaccountResolver } from \"../subaccount-resolver.js\";\nimport {\n    CreateSubaccountInputSchema,\n    CreateSubaccountResultSchema,\n    UpdateSubaccountInputSchema,\n    InviteSubaccountMemberInputSchema,\n    RemoveSubaccountMemberInputSchema,\n    UpdateSubaccountMemberRoleInputSchema,\n    ListSubaccountInvitesInputSchema,\n    RespondSubaccountInviteInputSchema,\n    SubaccountActivityInputSchema,\n    SubaccountSchema,\n    SubaccountMemberSchema,\n    SubaccountInviteSchema,\n    SubaccountActivityEventSchema,\n    SetSubaccountMemberMfaRequirementInputSchema,\n    SubaccountIdInputSchema,\n    SubaccountMutationResultSchema,\n    SubaccountRoleCatalogSchema,\n    EffectiveSubaccountPermissionsSchema,\n    type CreateSubaccountResult,\n    type Subaccount,\n    type SubaccountMember,\n    type SubaccountInvite,\n    type SubaccountEvent,\n    type SubaccountMutationResult,\n    type SubaccountRoleCatalog,\n    type EffectiveSubaccountPermissions,\n} from \"./subaccounts.schemas.js\";\n\ninterface SubscribeSubaccountsInput extends BaseSubscribeInput<Subaccount> {\n    accountId: string;\n}\n\ninterface SubscribeApiKeysInput extends BaseSubscribeInput<ApiKey> {\n    accountId: string;\n}\n\n/**\n * Reads the public role catalog and creates, manages, shares, audits, and subscribes to subaccounts visible to the authenticated caller.\n */\nexport class SubaccountsService {\n    readonly policies: SubaccountPoliciesService;\n\n    #client: Client<typeof Proto.SubaccountService>;\n    #viewClient: Client<typeof Proto.SubaccountViewService>;\n    #publicRoleClient: Client<typeof Proto.SubaccountRoleService>;\n    #authRoleClient: Client<typeof Proto.SubaccountRoleService>;\n    #realtime: PolyesterRealtime;\n\n    constructor(\n        transports: AuthAndPublicApiTransports,\n        realtime: PolyesterRealtime,\n        resolver?: SubaccountResolver,\n    ) {\n        this.policies = new SubaccountPoliciesService(transports, realtime, resolver);\n        this.#client = createClient(Proto.SubaccountService, transports.authApi);\n        this.#viewClient = createClient(Proto.SubaccountViewService, transports.authApi);\n        this.#publicRoleClient = createClient(Proto.SubaccountRoleService, transports.publicApi);\n        this.#authRoleClient = createClient(Proto.SubaccountRoleService, transports.authApi);\n        this.#realtime = realtime;\n    }\n\n    /**\n     * Returns subaccounts owned by or shared with the caller plus totalCreated, including soft-deleted count metadata useful for deriving future smart-account salts.\n     */\n    async list(options?: PolyesterRequestOptions): Promise<{\n        totalCreated: number;\n        subaccounts: v.InferOutput<typeof SubaccountSchema>[];\n    }> {\n        const res = await this.#client.listSubaccounts({}, toConnectCallOptions(options));\n        return {\n            totalCreated: res.totalCreated,\n            subaccounts: parse(v.array(SubaccountSchema), res.subaccounts),\n        };\n    }\n\n    /**\n     * Fetches an aggregated subaccount dashboard view with subaccount details, policy, API keys, balances, members, and outgoing invites; throws if the subaccount is missing.\n     */\n    async get(\n        input: v.InferInput<typeof SubaccountIdInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<\n        Subaccount & {\n            apiKeys: ApiKey[];\n            policy: SubaccountPolicy;\n            members: SubaccountMember[];\n            invites: SubaccountInvite[];\n        }\n    > {\n        const validatedInput = parse(SubaccountIdInputSchema, input);\n        const subaccountId = formatId(validatedInput.subaccountId);\n        const res = await this.#viewClient.getSubaccount(\n            {\n                subaccountId: validatedInput.subaccountId,\n                includeApiKeys: true,\n                includeBalances: true,\n                includeMembers: true,\n                includeInvites: true,\n                includePolicy: true,\n                invitesDirection: Proto.SubaccountInviteDirection.OUTGOING,\n            },\n            toConnectCallOptions(options),\n        );\n        if (!res.subaccount) throw new Error(`Subaccount not found: ${subaccountId}`);\n\n        return {\n            ...parse(SubaccountSchema, res.subaccount),\n            policy: res.policy\n                ? parse(SubaccountPolicySchema, res.policy)\n                : DEFAULT_SUBACCOUNT_POLICY,\n            apiKeys: parse(v.optional(v.array(ApiKeySchema), []), res.apiKeys),\n            members: parse(v.optional(v.array(SubaccountMemberSchema), []), res.members),\n            invites: v\n                .parse(v.optional(v.array(SubaccountInviteSchema), []), res.invites)\n                .filter((invite) => invite.subaccountId === subaccountId),\n        };\n    }\n\n    /**\n     * Creates a new subaccount under the caller's root account using a smart-account address, nonce, and signature proof.\n     */\n    async create(\n        input: v.InferInput<typeof CreateSubaccountInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<CreateSubaccountResult> {\n        const validatedInput = parse(CreateSubaccountInputSchema, input);\n        const res = await this.#client.createSubaccount(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(CreateSubaccountResultSchema, res);\n    }\n\n    /**\n     * Updates mutable subaccount display/status fields such as label and active/disabled status.\n     */\n    async update(\n        input: v.InferInput<typeof UpdateSubaccountInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<Subaccount> {\n        const validatedInput = parse(UpdateSubaccountInputSchema, input);\n        const res = await this.#client.updateSubaccount(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        if (!res.subaccount) throw new Error(\"Failed to update subaccount\");\n        return parse(SubaccountSchema, res.subaccount);\n    }\n\n    /**\n     * Creates or refreshes a pending invitation granting a role on a subaccount to another root account.\n     */\n    async inviteMember(\n        input: v.InferInput<typeof InviteSubaccountMemberInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountInvite> {\n        const validatedInput = parse(InviteSubaccountMemberInputSchema, input);\n        const res = await this.#client.inviteSubaccountMember(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountInviteSchema, res.invite);\n    }\n\n    /**\n     * Removes delegated access for a subaccount member by grantee account ID.\n     */\n    async removeMember(\n        input: v.InferInput<typeof RemoveSubaccountMemberInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountMutationResult> {\n        const validatedInput = parse(RemoveSubaccountMemberInputSchema, input);\n        const res = await this.#client.removeSubaccountMember(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountMutationResultSchema, res);\n    }\n\n    /**\n     * Changes an existing delegated member's role without sending a new invitation.\n     */\n    async updateMemberRole(\n        input: v.InferInput<typeof UpdateSubaccountMemberRoleInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountMutationResult> {\n        const validatedInput = parse(UpdateSubaccountMemberRoleInputSchema, input);\n        const res = await this.#client.updateSubaccountMemberRole(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountMutationResultSchema, res);\n    }\n\n    /**\n     * Enables or disables the owner-controlled MFA requirement for delegated interactive member actions on a subaccount.\n     */\n    async setMemberMfaRequirement(\n        input: v.InferInput<typeof SetSubaccountMemberMfaRequirementInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountMutationResult> {\n        const validatedInput = parse(SetSubaccountMemberMfaRequirementInputSchema, input);\n        const res = await this.#client.setSubaccountMemberMFARequirement(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountMutationResultSchema, res);\n    }\n\n    /**\n     * Returns incoming, outgoing, or all subaccount invitations for the caller, newest first.\n     */\n    async listInvites(\n        input: v.InferInput<typeof ListSubaccountInvitesInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<SubaccountInvite[]> {\n        const validatedInput = parse(ListSubaccountInvitesInputSchema, input);\n        const res = await this.#client.listSubaccountInvites(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(v.array(SubaccountInviteSchema), res.invites);\n    }\n\n    /**\n     * Returns the public built-in role and permission catalog with display metadata and per-role permission sets.\n     */\n    async listRoles(options?: PolyesterRequestOptions): Promise<SubaccountRoleCatalog> {\n        const res = await this.#publicRoleClient.listSubaccountRoles(\n            {},\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountRoleCatalogSchema, res);\n    }\n\n    /**\n     * Returns the caller's current role, effective role-granted permissions, and attached policy ID for a subaccount.\n     */\n    async getEffectivePermissions(\n        input: v.InferInput<typeof SubaccountIdInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<EffectiveSubaccountPermissions> {\n        const validatedInput = parse(SubaccountIdInputSchema, input);\n        const res = await this.#authRoleClient.getEffectiveSubaccountPermissions(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(EffectiveSubaccountPermissionsSchema, res);\n    }\n\n    /**\n     * Returns the owner and delegated members for a subaccount, including role and MFA enrollment status.\n     */\n    async listMembers(\n        input: v.InferInput<typeof SubaccountIdInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<SubaccountMember[]> {\n        const validatedInput = parse(SubaccountIdInputSchema, input);\n        const res = await this.#client.listSubaccountMembers(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(v.array(SubaccountMemberSchema), res.members);\n    }\n\n    /**\n     * Accepts or rejects an incoming invite, or cancels an outgoing invite, returning the updated invitation.\n     */\n    async respondInvite(\n        input: v.InferInput<typeof RespondSubaccountInviteInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountInvite> {\n        const validatedInput = parse(RespondSubaccountInviteInputSchema, input);\n        const res = await this.#client.respondSubaccountInvite(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountInviteSchema, res.invite);\n    }\n\n    /**\n     * Returns paginated audit/activity events for a subaccount, newest first, with a non-negative integer limit from 0 through 200 and opaque cursor pagination.\n     */\n    async listEvents(\n        input: v.InferInput<typeof SubaccountActivityInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<{ events: SubaccountEvent[]; nextPageToken: string }> {\n        const validatedInput = parse(SubaccountActivityInputSchema, input);\n        const res = await this.#viewClient.listSubaccountActivity(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return {\n            events: parse(v.optional(v.array(SubaccountActivityEventSchema), []), res.events),\n            nextPageToken: res.nextPageToken,\n        };\n    }\n\n    /**\n     * Subscribes to private subaccount updates for an account and emits normalized subaccount records.\n     */\n    subscribe(input: SubscribeSubaccountsInput) {\n        const channel = `private:auth:subaccounts:${input.accountId}:proto`;\n\n        return this.#realtime.connectProtoChannel({\n            channel,\n            schema: Proto.SubaccountSchema,\n            onPublication: (data) => {\n                const subaccount = parse(SubaccountSchema, data);\n                input.onEvent(subaccount);\n            },\n            onConnected: () => input.onOpen?.(),\n            onDisconnected: () => input.onClose?.(),\n            onError: input.onError,\n        });\n    }\n\n    /**\n     * Subscribes to private API key updates for an account through the subaccount realtime channel helper.\n     */\n    subscribeApiKeys(input: SubscribeApiKeysInput) {\n        const channel = `private:auth:api-keys:${input.accountId}:proto`;\n\n        return this.#realtime.connectProtoChannel({\n            channel,\n            schema: ProtoApiKeys.ApiKeySchema,\n            onPublication: (data) => {\n                const apiKey = parse(ApiKeySchema, data);\n                input.onEvent(apiKey);\n            },\n            onConnected: () => input.onOpen?.(),\n            onDisconnected: () => input.onClose?.(),\n            onError: input.onError,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;AA8DA,IAAa,qBAAb,MAAgC;CAC5B;CAEA;CACA;CACA;CACA;CACA;CAEA,YACI,YACA,UACA,UACF;EACE,KAAK,WAAW,IAAI,0BAA0B,YAAY,UAAU,QAAQ;EAC5E,KAAKA,UAAU,aAAaC,mBAAyB,WAAW,OAAO;EACvE,KAAKC,cAAc,aAAaC,uBAA6B,WAAW,OAAO;EAC/E,KAAKC,oBAAoB,aAAaC,uBAA6B,WAAW,SAAS;EACvF,KAAKC,kBAAkB,aAAaD,uBAA6B,WAAW,OAAO;EACnF,KAAKE,YAAY;CACrB;;;;CAKA,MAAM,KAAK,SAGR;EACC,MAAM,MAAM,MAAM,KAAKP,QAAQ,gBAAgB,CAAC,GAAG,qBAAqB,OAAO,CAAC;EAChF,OAAO;GACH,cAAc,IAAI;GAClB,aAAa,MAAM,EAAE,MAAMQ,kBAAgB,GAAG,IAAI,WAAW;EACjE;CACJ;;;;CAKA,MAAM,IACF,OACA,SAQF;EACE,MAAM,iBAAiB,MAAM,yBAAyB,KAAK;EAC3D,MAAM,eAAe,SAAS,eAAe,YAAY;EACzD,MAAM,MAAM,MAAM,KAAKN,YAAY,cAC/B;GACI,cAAc,eAAe;GAC7B,gBAAgB;GAChB,iBAAiB;GACjB,gBAAgB;GAChB,gBAAgB;GAChB,eAAe;GACf,kBAAA;EACJ,GACA,qBAAqB,OAAO,CAChC;EACA,IAAI,CAAC,IAAI,YAAY,MAAM,IAAI,MAAM,yBAAyB,cAAc;EAE5E,OAAO;GACH,GAAG,MAAMM,oBAAkB,IAAI,UAAU;GACzC,QAAQ,IAAI,SACN,MAAM,wBAAwB,IAAI,MAAM,IACxC;GACN,SAAS,MAAM,EAAE,SAAS,EAAE,MAAMC,cAAY,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO;GACjE,SAAS,MAAM,EAAE,SAAS,EAAE,MAAM,sBAAsB,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO;GAC3E,SAAS,EACJ,MAAM,EAAE,SAAS,EAAE,MAAM,sBAAsB,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,CACnE,QAAQ,WAAW,OAAO,iBAAiB,YAAY;EAChE;CACJ;;;;CAKA,MAAM,OACF,OACA,SAC+B;EAC/B,MAAM,iBAAiB,MAAM,6BAA6B,KAAK;EAC/D,MAAM,MAAM,MAAM,KAAKT,QAAQ,iBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,8BAA8B,GAAG;CAClD;;;;CAKA,MAAM,OACF,OACA,SACmB;EACnB,MAAM,iBAAiB,MAAM,6BAA6B,KAAK;EAC/D,MAAM,MAAM,MAAM,KAAKA,QAAQ,iBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,IAAI,CAAC,IAAI,YAAY,MAAM,IAAI,MAAM,6BAA6B;EAClE,OAAO,MAAMQ,oBAAkB,IAAI,UAAU;CACjD;;;;CAKA,MAAM,aACF,OACA,SACyB;EACzB,MAAM,iBAAiB,MAAM,mCAAmC,KAAK;EACrE,MAAM,MAAM,MAAM,KAAKR,QAAQ,uBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,wBAAwB,IAAI,MAAM;CACnD;;;;CAKA,MAAM,aACF,OACA,SACiC;EACjC,MAAM,iBAAiB,MAAM,mCAAmC,KAAK;EACrE,MAAM,MAAM,MAAM,KAAKA,QAAQ,uBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,gCAAgC,GAAG;CACpD;;;;CAKA,MAAM,iBACF,OACA,SACiC;EACjC,MAAM,iBAAiB,MAAM,uCAAuC,KAAK;EACzE,MAAM,MAAM,MAAM,KAAKA,QAAQ,2BAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,gCAAgC,GAAG;CACpD;;;;CAKA,MAAM,wBACF,OACA,SACiC;EACjC,MAAM,iBAAiB,MAAM,8CAA8C,KAAK;EAChF,MAAM,MAAM,MAAM,KAAKA,QAAQ,kCAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,gCAAgC,GAAG;CACpD;;;;CAKA,MAAM,YACF,OACA,SAC2B;EAC3B,MAAM,iBAAiB,MAAM,kCAAkC,KAAK;EACpE,MAAM,MAAM,MAAM,KAAKA,QAAQ,sBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,EAAE,MAAM,sBAAsB,GAAG,IAAI,OAAO;CAC7D;;;;CAKA,MAAM,UAAU,SAAmE;EAC/E,MAAM,MAAM,MAAM,KAAKI,kBAAkB,oBACrC,CAAC,GACD,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,6BAA6B,GAAG;CACjD;;;;CAKA,MAAM,wBACF,OACA,SACuC;EACvC,MAAM,iBAAiB,MAAM,yBAAyB,KAAK;EAC3D,MAAM,MAAM,MAAM,KAAKE,gBAAgB,kCACnC,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,sCAAsC,GAAG;CAC1D;;;;CAKA,MAAM,YACF,OACA,SAC2B;EAC3B,MAAM,iBAAiB,MAAM,yBAAyB,KAAK;EAC3D,MAAM,MAAM,MAAM,KAAKN,QAAQ,sBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,EAAE,MAAM,sBAAsB,GAAG,IAAI,OAAO;CAC7D;;;;CAKA,MAAM,cACF,OACA,SACyB;EACzB,MAAM,iBAAiB,MAAM,oCAAoC,KAAK;EACtE,MAAM,MAAM,MAAM,KAAKA,QAAQ,wBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,wBAAwB,IAAI,MAAM;CACnD;;;;CAKA,MAAM,WACF,OACA,SAC6D;EAC7D,MAAM,iBAAiB,MAAM,+BAA+B,KAAK;EACjE,MAAM,MAAM,MAAM,KAAKE,YAAY,uBAC/B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO;GACH,QAAQ,MAAM,EAAE,SAAS,EAAE,MAAM,6BAA6B,GAAG,CAAC,CAAC,GAAG,IAAI,MAAM;GAChF,eAAe,IAAI;EACvB;CACJ;;;;CAKA,UAAU,OAAkC;EACxC,MAAM,UAAU,4BAA4B,MAAM,UAAU;EAE5D,OAAO,KAAKK,UAAU,oBAAoB;GACtC;GACA,QAAQG;GACR,gBAAgB,SAAS;IACrB,MAAM,aAAa,MAAMF,oBAAkB,IAAI;IAC/C,MAAM,QAAQ,UAAU;GAC5B;GACA,mBAAmB,MAAM,SAAS;GAClC,sBAAsB,MAAM,UAAU;GACtC,SAAS,MAAM;EACnB,CAAC;CACL;;;;CAKA,iBAAiB,OAA8B;EAC3C,MAAM,UAAU,yBAAyB,MAAM,UAAU;EAEzD,OAAO,KAAKD,UAAU,oBAAoB;GACtC;GACA,QAAQI;GACR,gBAAgB,SAAS;IACrB,MAAM,SAAS,MAAMF,gBAAc,IAAI;IACvC,MAAM,QAAQ,MAAM;GACxB;GACA,mBAAmB,MAAM,SAAS;GAClC,sBAAsB,MAAM,UAAU;GACtC,SAAS,MAAM;EACnB,CAAC;CACL;AACJ"}
+{"version":3,"file":"subaccounts.js","names":["#client","Proto.SubaccountService","#viewClient","Proto.SubaccountViewService","#publicRoleClient","Proto.SubaccountRoleService","#authRoleClient","#realtime","SubaccountSchema","ApiKeySchema","Proto.SubaccountSchema","ProtoApiKeys.ApiKeySchema"],"sources":["../../../src/services/subaccounts/subaccounts.ts"],"sourcesContent":["import * as Proto from \"../../gen/auth/v1/subaccounts_pb.js\";\nimport * as ProtoApiKeys from \"../../gen/auth/v1/api_keys_pb.js\";\nimport { createClient, type Client } from \"@connectrpc/connect\";\nimport * as v from \"valibot\";\nimport { parse } from \"../../shared/validation.js\";\nimport { type ApiKey, ApiKeySchema } from \"../api-keys/index.js\";\nimport { formatId } from \"../../utils/base58-id.js\";\nimport {\n    toConnectCallOptions,\n    type PolyesterMutationOptions,\n    type PolyesterRequestOptions,\n} from \"../../shared/request-options.js\";\nimport type { PolyesterRealtime } from \"../../realtime/index.js\";\nimport {\n    DEFAULT_SUBACCOUNT_POLICY,\n    SubaccountPoliciesService,\n    type SubaccountPolicy,\n    SubaccountPolicySchema,\n} from \"../policies/subaccount-policies/index.js\";\nimport type { BaseSubscribeInput } from \"../../shared/types.js\";\nimport type { AuthAndPublicApiTransports } from \"../../shared/transports.js\";\nimport type { SubaccountResolver } from \"../subaccount-resolver.js\";\nimport {\n    CreateSubaccountInputSchema,\n    CreateSubaccountResultSchema,\n    UpdateSubaccountInputSchema,\n    InviteSubaccountMemberInputSchema,\n    RemoveSubaccountMemberInputSchema,\n    UpdateSubaccountMemberRoleInputSchema,\n    ListSubaccountInvitesInputSchema,\n    RespondSubaccountInviteInputSchema,\n    SubaccountActivityInputSchema,\n    SubaccountSchema,\n    SubaccountMemberSchema,\n    SubaccountInviteSchema,\n    SubaccountActivityEventSchema,\n    SetSubaccountMemberMfaRequirementInputSchema,\n    SubaccountIdInputSchema,\n    SubaccountMutationResultSchema,\n    SubaccountRoleCatalogSchema,\n    EffectiveSubaccountPermissionsSchema,\n    type CreateSubaccountResult,\n    type Subaccount,\n    type SubaccountMember,\n    type SubaccountInvite,\n    type SubaccountEvent,\n    type SubaccountMutationResult,\n    type SubaccountRoleCatalog,\n    type EffectiveSubaccountPermissions,\n} from \"./subaccounts.schemas.js\";\n\ninterface SubscribeSubaccountsInput extends BaseSubscribeInput<Subaccount> {\n    accountId: string;\n}\n\ninterface SubscribeApiKeysInput extends BaseSubscribeInput<ApiKey> {\n    accountId: string;\n}\n\n/**\n * Reads the public role catalog and creates, manages, shares, audits, and subscribes to subaccounts visible to the authenticated caller.\n */\nexport class SubaccountsService {\n    readonly policies: SubaccountPoliciesService;\n\n    #client: Client<typeof Proto.SubaccountService>;\n    #viewClient: Client<typeof Proto.SubaccountViewService>;\n    #publicRoleClient: Client<typeof Proto.SubaccountRoleService>;\n    #authRoleClient: Client<typeof Proto.SubaccountRoleService>;\n    #realtime: PolyesterRealtime;\n\n    constructor(\n        transports: AuthAndPublicApiTransports,\n        realtime: PolyesterRealtime,\n        resolver?: SubaccountResolver,\n    ) {\n        this.policies = new SubaccountPoliciesService(transports, realtime, resolver);\n        this.#client = createClient(Proto.SubaccountService, transports.authApi);\n        this.#viewClient = createClient(Proto.SubaccountViewService, transports.authApi);\n        this.#publicRoleClient = createClient(Proto.SubaccountRoleService, transports.publicApi);\n        this.#authRoleClient = createClient(Proto.SubaccountRoleService, transports.authApi);\n        this.#realtime = realtime;\n    }\n\n    /**\n     * Returns subaccounts owned by or shared with the caller plus totalCreated, including soft-deleted count metadata useful for deriving future smart-account salts.\n     */\n    async list(options?: PolyesterRequestOptions): Promise<{\n        totalCreated: number;\n        subaccounts: v.InferOutput<typeof SubaccountSchema>[];\n    }> {\n        const res = await this.#client.listSubaccounts({}, toConnectCallOptions(options));\n        return {\n            totalCreated: res.totalCreated,\n            subaccounts: parse(v.array(SubaccountSchema), res.subaccounts),\n        };\n    }\n\n    /**\n     * Fetches an aggregated subaccount dashboard view with subaccount details, policy, API keys, balances, members, and outgoing invites; throws if the subaccount is missing.\n     */\n    async get(\n        input: v.InferInput<typeof SubaccountIdInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<\n        Subaccount & {\n            apiKeys: ApiKey[];\n            policy: SubaccountPolicy;\n            members: SubaccountMember[];\n            invites: SubaccountInvite[];\n        }\n    > {\n        const validatedInput = parse(SubaccountIdInputSchema, input);\n        const subaccountId = formatId(validatedInput.subaccountId);\n        const res = await this.#viewClient.getSubaccount(\n            {\n                subaccountId: validatedInput.subaccountId,\n                includeApiKeys: true,\n                includeBalances: true,\n                includeMembers: true,\n                includeInvites: true,\n                includePolicy: true,\n                invitesDirection: Proto.SubaccountInviteDirection.OUTGOING,\n            },\n            toConnectCallOptions(options),\n        );\n        if (!res.subaccount) throw new Error(`Subaccount not found: ${subaccountId}`);\n\n        return {\n            ...parse(SubaccountSchema, res.subaccount),\n            policy: res.policy\n                ? parse(SubaccountPolicySchema, res.policy)\n                : DEFAULT_SUBACCOUNT_POLICY,\n            apiKeys: parse(v.optional(v.array(ApiKeySchema), []), res.apiKeys),\n            members: parse(v.optional(v.array(SubaccountMemberSchema), []), res.members),\n            invites: v\n                .parse(v.optional(v.array(SubaccountInviteSchema), []), res.invites)\n                .filter((invite) => invite.subaccountId === subaccountId),\n        };\n    }\n\n    /**\n     * Creates a new subaccount under the caller's root account using a smart-account address, server-issued SIWE message, and signature proof.\n     */\n    async create(\n        input: v.InferInput<typeof CreateSubaccountInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<CreateSubaccountResult> {\n        const validatedInput = parse(CreateSubaccountInputSchema, input);\n        const res = await this.#client.createSubaccount(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(CreateSubaccountResultSchema, res);\n    }\n\n    /**\n     * Updates mutable subaccount display/status fields such as label and active/disabled status.\n     */\n    async update(\n        input: v.InferInput<typeof UpdateSubaccountInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<Subaccount> {\n        const validatedInput = parse(UpdateSubaccountInputSchema, input);\n        const res = await this.#client.updateSubaccount(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        if (!res.subaccount) throw new Error(\"Failed to update subaccount\");\n        return parse(SubaccountSchema, res.subaccount);\n    }\n\n    /**\n     * Creates or refreshes a pending invitation granting a role on a subaccount to another root account.\n     */\n    async inviteMember(\n        input: v.InferInput<typeof InviteSubaccountMemberInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountInvite> {\n        const validatedInput = parse(InviteSubaccountMemberInputSchema, input);\n        const res = await this.#client.inviteSubaccountMember(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountInviteSchema, res.invite);\n    }\n\n    /**\n     * Removes delegated access for a subaccount member by grantee account ID.\n     */\n    async removeMember(\n        input: v.InferInput<typeof RemoveSubaccountMemberInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountMutationResult> {\n        const validatedInput = parse(RemoveSubaccountMemberInputSchema, input);\n        const res = await this.#client.removeSubaccountMember(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountMutationResultSchema, res);\n    }\n\n    /**\n     * Changes an existing delegated member's role without sending a new invitation.\n     */\n    async updateMemberRole(\n        input: v.InferInput<typeof UpdateSubaccountMemberRoleInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountMutationResult> {\n        const validatedInput = parse(UpdateSubaccountMemberRoleInputSchema, input);\n        const res = await this.#client.updateSubaccountMemberRole(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountMutationResultSchema, res);\n    }\n\n    /**\n     * Enables or disables the owner-controlled MFA requirement for delegated interactive member actions on a subaccount.\n     */\n    async setMemberMfaRequirement(\n        input: v.InferInput<typeof SetSubaccountMemberMfaRequirementInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountMutationResult> {\n        const validatedInput = parse(SetSubaccountMemberMfaRequirementInputSchema, input);\n        const res = await this.#client.setSubaccountMemberMFARequirement(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountMutationResultSchema, res);\n    }\n\n    /**\n     * Returns incoming, outgoing, or all subaccount invitations for the caller, newest first.\n     */\n    async listInvites(\n        input: v.InferInput<typeof ListSubaccountInvitesInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<SubaccountInvite[]> {\n        const validatedInput = parse(ListSubaccountInvitesInputSchema, input);\n        const res = await this.#client.listSubaccountInvites(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(v.array(SubaccountInviteSchema), res.invites);\n    }\n\n    /**\n     * Returns the public built-in role and permission catalog with display metadata and per-role permission sets.\n     */\n    async listRoles(options?: PolyesterRequestOptions): Promise<SubaccountRoleCatalog> {\n        const res = await this.#publicRoleClient.listSubaccountRoles(\n            {},\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountRoleCatalogSchema, res);\n    }\n\n    /**\n     * Returns the caller's current role, effective role-granted permissions, and attached policy ID for a subaccount.\n     */\n    async getEffectivePermissions(\n        input: v.InferInput<typeof SubaccountIdInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<EffectiveSubaccountPermissions> {\n        const validatedInput = parse(SubaccountIdInputSchema, input);\n        const res = await this.#authRoleClient.getEffectiveSubaccountPermissions(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(EffectiveSubaccountPermissionsSchema, res);\n    }\n\n    /**\n     * Returns the owner and delegated members for a subaccount, including role and MFA enrollment status.\n     */\n    async listMembers(\n        input: v.InferInput<typeof SubaccountIdInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<SubaccountMember[]> {\n        const validatedInput = parse(SubaccountIdInputSchema, input);\n        const res = await this.#client.listSubaccountMembers(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(v.array(SubaccountMemberSchema), res.members);\n    }\n\n    /**\n     * Accepts or rejects an incoming invite, or cancels an outgoing invite, returning the updated invitation.\n     */\n    async respondInvite(\n        input: v.InferInput<typeof RespondSubaccountInviteInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountInvite> {\n        const validatedInput = parse(RespondSubaccountInviteInputSchema, input);\n        const res = await this.#client.respondSubaccountInvite(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountInviteSchema, res.invite);\n    }\n\n    /**\n     * Returns paginated audit/activity events for a subaccount, newest first, with a non-negative integer limit from 0 through 200 and opaque cursor pagination.\n     */\n    async listEvents(\n        input: v.InferInput<typeof SubaccountActivityInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<{ events: SubaccountEvent[]; nextPageToken: string }> {\n        const validatedInput = parse(SubaccountActivityInputSchema, input);\n        const res = await this.#viewClient.listSubaccountActivity(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return {\n            events: parse(v.optional(v.array(SubaccountActivityEventSchema), []), res.events),\n            nextPageToken: res.nextPageToken,\n        };\n    }\n\n    /**\n     * Subscribes to private subaccount updates for an account and emits normalized subaccount records.\n     */\n    subscribe(input: SubscribeSubaccountsInput) {\n        const channel = `private:auth:subaccounts:${input.accountId}:proto`;\n\n        return this.#realtime.connectProtoChannel({\n            channel,\n            schema: Proto.SubaccountSchema,\n            onPublication: (data) => {\n                const subaccount = parse(SubaccountSchema, data);\n                input.onEvent(subaccount);\n            },\n            onConnected: () => input.onOpen?.(),\n            onDisconnected: () => input.onClose?.(),\n            onError: input.onError,\n        });\n    }\n\n    /**\n     * Subscribes to private API key updates for an account through the subaccount realtime channel helper.\n     */\n    subscribeApiKeys(input: SubscribeApiKeysInput) {\n        const channel = `private:auth:api-keys:${input.accountId}:proto`;\n\n        return this.#realtime.connectProtoChannel({\n            channel,\n            schema: ProtoApiKeys.ApiKeySchema,\n            onPublication: (data) => {\n                const apiKey = parse(ApiKeySchema, data);\n                input.onEvent(apiKey);\n            },\n            onConnected: () => input.onOpen?.(),\n            onDisconnected: () => input.onClose?.(),\n            onError: input.onError,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;AA8DA,IAAa,qBAAb,MAAgC;CAC5B;CAEA;CACA;CACA;CACA;CACA;CAEA,YACI,YACA,UACA,UACF;EACE,KAAK,WAAW,IAAI,0BAA0B,YAAY,UAAU,QAAQ;EAC5E,KAAKA,UAAU,aAAaC,mBAAyB,WAAW,OAAO;EACvE,KAAKC,cAAc,aAAaC,uBAA6B,WAAW,OAAO;EAC/E,KAAKC,oBAAoB,aAAaC,uBAA6B,WAAW,SAAS;EACvF,KAAKC,kBAAkB,aAAaD,uBAA6B,WAAW,OAAO;EACnF,KAAKE,YAAY;CACrB;;;;CAKA,MAAM,KAAK,SAGR;EACC,MAAM,MAAM,MAAM,KAAKP,QAAQ,gBAAgB,CAAC,GAAG,qBAAqB,OAAO,CAAC;EAChF,OAAO;GACH,cAAc,IAAI;GAClB,aAAa,MAAM,EAAE,MAAMQ,kBAAgB,GAAG,IAAI,WAAW;EACjE;CACJ;;;;CAKA,MAAM,IACF,OACA,SAQF;EACE,MAAM,iBAAiB,MAAM,yBAAyB,KAAK;EAC3D,MAAM,eAAe,SAAS,eAAe,YAAY;EACzD,MAAM,MAAM,MAAM,KAAKN,YAAY,cAC/B;GACI,cAAc,eAAe;GAC7B,gBAAgB;GAChB,iBAAiB;GACjB,gBAAgB;GAChB,gBAAgB;GAChB,eAAe;GACf,kBAAA;EACJ,GACA,qBAAqB,OAAO,CAChC;EACA,IAAI,CAAC,IAAI,YAAY,MAAM,IAAI,MAAM,yBAAyB,cAAc;EAE5E,OAAO;GACH,GAAG,MAAMM,oBAAkB,IAAI,UAAU;GACzC,QAAQ,IAAI,SACN,MAAM,wBAAwB,IAAI,MAAM,IACxC;GACN,SAAS,MAAM,EAAE,SAAS,EAAE,MAAMC,cAAY,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO;GACjE,SAAS,MAAM,EAAE,SAAS,EAAE,MAAM,sBAAsB,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO;GAC3E,SAAS,EACJ,MAAM,EAAE,SAAS,EAAE,MAAM,sBAAsB,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,CACnE,QAAQ,WAAW,OAAO,iBAAiB,YAAY;EAChE;CACJ;;;;CAKA,MAAM,OACF,OACA,SAC+B;EAC/B,MAAM,iBAAiB,MAAM,6BAA6B,KAAK;EAC/D,MAAM,MAAM,MAAM,KAAKT,QAAQ,iBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,8BAA8B,GAAG;CAClD;;;;CAKA,MAAM,OACF,OACA,SACmB;EACnB,MAAM,iBAAiB,MAAM,6BAA6B,KAAK;EAC/D,MAAM,MAAM,MAAM,KAAKA,QAAQ,iBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,IAAI,CAAC,IAAI,YAAY,MAAM,IAAI,MAAM,6BAA6B;EAClE,OAAO,MAAMQ,oBAAkB,IAAI,UAAU;CACjD;;;;CAKA,MAAM,aACF,OACA,SACyB;EACzB,MAAM,iBAAiB,MAAM,mCAAmC,KAAK;EACrE,MAAM,MAAM,MAAM,KAAKR,QAAQ,uBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,wBAAwB,IAAI,MAAM;CACnD;;;;CAKA,MAAM,aACF,OACA,SACiC;EACjC,MAAM,iBAAiB,MAAM,mCAAmC,KAAK;EACrE,MAAM,MAAM,MAAM,KAAKA,QAAQ,uBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,gCAAgC,GAAG;CACpD;;;;CAKA,MAAM,iBACF,OACA,SACiC;EACjC,MAAM,iBAAiB,MAAM,uCAAuC,KAAK;EACzE,MAAM,MAAM,MAAM,KAAKA,QAAQ,2BAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,gCAAgC,GAAG;CACpD;;;;CAKA,MAAM,wBACF,OACA,SACiC;EACjC,MAAM,iBAAiB,MAAM,8CAA8C,KAAK;EAChF,MAAM,MAAM,MAAM,KAAKA,QAAQ,kCAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,gCAAgC,GAAG;CACpD;;;;CAKA,MAAM,YACF,OACA,SAC2B;EAC3B,MAAM,iBAAiB,MAAM,kCAAkC,KAAK;EACpE,MAAM,MAAM,MAAM,KAAKA,QAAQ,sBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,EAAE,MAAM,sBAAsB,GAAG,IAAI,OAAO;CAC7D;;;;CAKA,MAAM,UAAU,SAAmE;EAC/E,MAAM,MAAM,MAAM,KAAKI,kBAAkB,oBACrC,CAAC,GACD,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,6BAA6B,GAAG;CACjD;;;;CAKA,MAAM,wBACF,OACA,SACuC;EACvC,MAAM,iBAAiB,MAAM,yBAAyB,KAAK;EAC3D,MAAM,MAAM,MAAM,KAAKE,gBAAgB,kCACnC,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,sCAAsC,GAAG;CAC1D;;;;CAKA,MAAM,YACF,OACA,SAC2B;EAC3B,MAAM,iBAAiB,MAAM,yBAAyB,KAAK;EAC3D,MAAM,MAAM,MAAM,KAAKN,QAAQ,sBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,EAAE,MAAM,sBAAsB,GAAG,IAAI,OAAO;CAC7D;;;;CAKA,MAAM,cACF,OACA,SACyB;EACzB,MAAM,iBAAiB,MAAM,oCAAoC,KAAK;EACtE,MAAM,MAAM,MAAM,KAAKA,QAAQ,wBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,wBAAwB,IAAI,MAAM;CACnD;;;;CAKA,MAAM,WACF,OACA,SAC6D;EAC7D,MAAM,iBAAiB,MAAM,+BAA+B,KAAK;EACjE,MAAM,MAAM,MAAM,KAAKE,YAAY,uBAC/B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO;GACH,QAAQ,MAAM,EAAE,SAAS,EAAE,MAAM,6BAA6B,GAAG,CAAC,CAAC,GAAG,IAAI,MAAM;GAChF,eAAe,IAAI;EACvB;CACJ;;;;CAKA,UAAU,OAAkC;EACxC,MAAM,UAAU,4BAA4B,MAAM,UAAU;EAE5D,OAAO,KAAKK,UAAU,oBAAoB;GACtC;GACA,QAAQG;GACR,gBAAgB,SAAS;IACrB,MAAM,aAAa,MAAMF,oBAAkB,IAAI;IAC/C,MAAM,QAAQ,UAAU;GAC5B;GACA,mBAAmB,MAAM,SAAS;GAClC,sBAAsB,MAAM,UAAU;GACtC,SAAS,MAAM;EACnB,CAAC;CACL;;;;CAKA,iBAAiB,OAA8B;EAC3C,MAAM,UAAU,yBAAyB,MAAM,UAAU;EAEzD,OAAO,KAAKD,UAAU,oBAAoB;GACtC;GACA,QAAQI;GACR,gBAAgB,SAAS;IACrB,MAAM,SAAS,MAAMF,gBAAc,IAAI;IACvC,MAAM,QAAQ,MAAM;GACxB;GACA,mBAAmB,MAAM,SAAS;GAClC,sBAAsB,MAAM,UAAU;GACtC,SAAS,MAAM;EACnB,CAAC;CACL;AACJ"}

package/dist/services/subaccounts/subaccounts.schemas.d.ts

@@ -47,11 +47,9 @@ declare const CreateSubaccountInputSchema: v.StrictObjectSchema<{
   readonly label: v.OptionalSchema<v.StringSchema<undefined>, "">;
   readonly icon: v.OptionalSchema<v.StringSchema<undefined>, "">;
   readonly color: v.OptionalSchema<v.StringSchema<undefined>, "">;
-  readonly smartAccountAddress: v.StringSchema<undefined>;
-  readonly nonce: v.StringSchema<undefined>;
-  readonly signature: v.StringSchema<undefined>;
-  readonly primaryWalletAddress: v.OptionalSchema<v.StringSchema<undefined>, "">;
-  readonly walletProvider: v.OptionalSchema<v.StringSchema<undefined>, "">;
+  readonly smartAccountAddress: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.CheckAction<string, "Invalid wallet address.">]>;
+  readonly message: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.CheckAction<string, "Wallet challenge message exceeds 4096 UTF-8 bytes.">]>;
+  readonly signature: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.MaxLengthAction<string, 8192, undefined>]>;
 }, undefined>;
 type CreateSubaccountInput = v.InferInput<typeof CreateSubaccountInputSchema>;
 declare const SubaccountIdInputSchema: v.StrictObjectSchema<{
@@ -279,8 +277,8 @@ declare const SubaccountActivityEventSchema: v.ObjectSchema<{
     seconds: bigint;
     nanos: number;
   } | undefined, number | undefined>]>;
-  readonly entityKind: v.SchemaWithPipe<readonly [v.EnumSchema<typeof ActivityEntityKind, undefined>, v.TransformAction<ActivityEntityKind, "unspecified" | "api_key" | "account" | "subaccount" | "destination" | "session" | "policy" | "member" | "invite" | "security">]>;
-  readonly eventAction: v.SchemaWithPipe<readonly [v.EnumSchema<typeof ActivityEventAction, undefined>, v.TransformAction<ActivityEventAction, "unspecified" | "enabled" | "disabled" | "revoked" | "created" | "updated" | "deleted" | "removed" | "role_set" | "received" | "replied" | "failed" | "blocked" | "hold_placed" | "hold_released">]>;
+  readonly entityKind: v.SchemaWithPipe<readonly [v.EnumSchema<typeof ActivityEntityKind, undefined>, v.TransformAction<ActivityEntityKind, "unspecified" | "api_key" | "account" | "subaccount" | "destination" | "session" | "member" | "policy" | "invite" | "security">]>;
+  readonly eventAction: v.SchemaWithPipe<readonly [v.EnumSchema<typeof ActivityEventAction, undefined>, v.TransformAction<ActivityEventAction, "unspecified" | "enabled" | "disabled" | "created" | "updated" | "deleted" | "removed" | "role_set" | "received" | "replied" | "failed" | "revoked" | "blocked" | "hold_placed" | "hold_released">]>;
   readonly source: v.SchemaWithPipe<readonly [v.EnumSchema<typeof ActivityEventSource, undefined>, v.TransformAction<ActivityEventSource, "unspecified" | "web" | "mobile" | "api">]>;
   readonly ip: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
   readonly userAgent: v.OptionalSchema<v.StringSchema<undefined>, undefined>;

package/dist/services/subaccounts/subaccounts.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subaccounts.schemas.d.ts","names":[],"sources":["../../../src/services/subaccounts/subaccounts.schemas.ts"],"mappings":";;;;cAsCa,sBAAoB,EAAA;KAErB,iBAAiB,EAAE,mBAAmB;cAS5C,iCAA+B,EAAA,yBAAA,EAAA,kBAAA,oCAAA,EAAA,gBAAA;KAYzB,uBAAuB,EAAE,mBAAmB;cAE3C,sCAAoC,EAAA;;;;;;KAiBrC,iCAAiC,EAAE,mBACpC;cAGE,gCAA8B,EAAA;;;;;;;KAQ/B,2BAA2B,EAAE,mBAAmB;cAE/C,6BAA2B,EAAA;;;;;;;;;;;;;;;KAK5B,wBAAwB,EAAE,mBAAmB;cAE5C,sCAAoC,EAAA;;;;;KAMrC,iCAAiC,EAAE,mBACpC;cAGE,6BAA2B,EAAA;;;;;;;;;;KAW5B,wBAAwB,EAAE,kBAAkB;cAE3C,yBAAuB,EAAA;;;KAIxB,oBAAoB,EAAE,kBAAkB;cAEvC,8BAA4B,EAAA;;;;;;KAO7B,yBAAyB,EAAE,mBAAmB;cAE7C,gCAA8B,EAAA;KAE/B,2BAA2B,EAAE,mBAAmB;cAmB/C,6BAA2B,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4B5B,wBAAwB,EAAE,kBAAkB;cAE3C,mCAAiC,EAAA;;;;;KASlC,8BAA8B,EAAE,kBAAkB;cAEjD,mCAAiC,EAAA;;;;KAKlC,8BAA8B,EAAE,kBAAkB;cAEjD,uCAAqC,EAAA;;;;;KAEtC,kCAAkC,EAAE,kBACrC;cAGE,8CAA4C,EAAA;;;;KAK7C,yCAAyC,EAAE,kBAC5C;cAGE,kCAAgC,EAAA;;;KAOjC,6BAA6B,EAAE,kBAAkB;cAIvD,oBAAkB,EAAA;KAEZ,yBAAyB,EAAE,mBAAmB;cAI7C,oCAAkC,EAAA;;;;KAQnC,+BAA+B,EAAE,kBAAkB;cAEzD,6BAA2B,EAAA,yBAAA,EAAA,kBAAA,gCAAA,EAAA,gBAAA;KAYrB,mBAAmB,EAAE,mBAAmB;cAEvC,kBAAgB,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAyBjB,aAAa,EAAE,mBAAmB;cAEjC,wBAAsB,EAAA;;;;;;;;KASvB,mBAAmB,EAAE,mBAAmB;cAEvC,wBAAsB,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4CvB,mBAAmB,EAAE,mBAAmB;cAEvC,+BAA6B,EAAA;;;;;KAM9B,0BAA0B,EAAE,kBAAkB;cAE7C,+BAA6B,EAAA;;;;;;;;;;;;;;;;KA4C9B,kBAAkB,EAAE,mBAAmB"}
+{"version":3,"file":"subaccounts.schemas.d.ts","names":[],"sources":["../../../src/services/subaccounts/subaccounts.schemas.ts"],"mappings":";;;;cA2Ca,sBAAoB,EAAA;KAErB,iBAAiB,EAAE,mBAAmB;cAS5C,iCAA+B,EAAA,yBAAA,EAAA,kBAAA,oCAAA,EAAA,gBAAA;KAYzB,uBAAuB,EAAE,mBAAmB;cAE3C,sCAAoC,EAAA;;;;;;KAiBrC,iCAAiC,EAAE,mBACpC;cAGE,gCAA8B,EAAA;;;;;;;KAQ/B,2BAA2B,EAAE,mBAAmB;cAE/C,6BAA2B,EAAA;;;;;;;;;;;;;;;KAK5B,wBAAwB,EAAE,mBAAmB;cAE5C,sCAAoC,EAAA;;;;;KAMrC,iCAAiC,EAAE,mBACpC;cAGE,6BAA2B,EAAA;;;;;;;;KAS5B,wBAAwB,EAAE,kBAAkB;cAE3C,yBAAuB,EAAA;;;KAIxB,oBAAoB,EAAE,kBAAkB;cAEvC,8BAA4B,EAAA;;;;;;KAO7B,yBAAyB,EAAE,mBAAmB;cAE7C,gCAA8B,EAAA;KAE/B,2BAA2B,EAAE,mBAAmB;cAmB/C,6BAA2B,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4B5B,wBAAwB,EAAE,kBAAkB;cAE3C,mCAAiC,EAAA;;;;;KASlC,8BAA8B,EAAE,kBAAkB;cAEjD,mCAAiC,EAAA;;;;KAKlC,8BAA8B,EAAE,kBAAkB;cAEjD,uCAAqC,EAAA;;;;;KAEtC,kCAAkC,EAAE,kBACrC;cAGE,8CAA4C,EAAA;;;;KAK7C,yCAAyC,EAAE,kBAC5C;cAGE,kCAAgC,EAAA;;;KAOjC,6BAA6B,EAAE,kBAAkB;cAIvD,oBAAkB,EAAA;KAEZ,yBAAyB,EAAE,mBAAmB;cAI7C,oCAAkC,EAAA;;;;KAQnC,+BAA+B,EAAE,kBAAkB;cAEzD,6BAA2B,EAAA,yBAAA,EAAA,kBAAA,gCAAA,EAAA,gBAAA;KAYrB,mBAAmB,EAAE,mBAAmB;cAEvC,kBAAgB,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAyBjB,aAAa,EAAE,mBAAmB;cAEjC,wBAAsB,EAAA;;;;;;;;KASvB,mBAAmB,EAAE,mBAAmB;cAEvC,wBAAsB,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4CvB,mBAAmB,EAAE,mBAAmB;cAEvC,+BAA6B,EAAA;;;;;KAM9B,0BAA0B,EAAE,kBAAkB;cAE7C,+BAA6B,EAAA;;;;;;;;;;;;;;;;KA4C9B,kBAAkB,EAAE,mBAAmB"}