@polyester/sdk 0.24.0 → 0.25.0

package/CHANGELOG.md

@@ -1,5 +1,25 @@
 # @polyester/sdk
 
+## 0.25.0
+
+### Minor Changes
+
+- Add daily reward claim status and claiming, and support good-til-date limit orders with expiry validation and order expiry output. ([#152](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/152))
+
+- Decode unknown proto enum values on read paths as `"unspecified"` instead of throwing a `ValidationError`. When the server adds a new enum member that this SDK build does not know, the affected field now degrades to `"unspecified"` and the rest of the payload stays readable. Public output unions are unchanged since they already included `"unspecified"`. ([#152](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/152))
+
+- Validate wallet login signatures as 65-byte hexadecimal EOA signatures while preserving universal signature support for subaccount creation. ([#152](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/152))
+
+## 0.24.1
+
+### Patch Changes
+
+- Notify consumers of terminal realtime server disconnects and unsubscribes with their code and reason, and remove stopped channels from active tracking. ([#148](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/148))
+
+- Read the current JWT provider value for every realtime token request so additional subscribers cannot retain stale credentials after token rotation or logout. ([#149](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/149))
+
+- Declare the account signer's `ownerAddress` (the connected EOA) as the LOGIN challenge `signerAddress` instead of the Safe `accountAddress`, so wallet login and session refresh authenticate a Safe smart account with a distinct EOA signer. Subaccount creation challenges are unchanged. ([#151](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/151))
+
 ## 0.24.0
 
 ### Minor Changes

package/README.md

@@ -18,30 +18,36 @@ npm install @polyester/sdk
 
 ## Browser
 
-Polyester accounts are smart accounts, so you bring an owner wallet and the SDK
-derives the account signer. Nothing gets deployed just to log in.
+Polyester accounts are smart accounts. You bring an owner wallet, the SDK
+derives the smart account address, and the owner EOA signs the login challenge.
+Nothing gets deployed just to log in.
 
 ```ts
 import { PolyesterBrowserClient, POLYESTER_DEVNET_ENVIRONMENT } from "@polyester/sdk";
+import type { AccountSigner } from "@polyester/sdk";
 import { createPolyesterAccountSigner } from "@polyester/sdk/account-signer";
 
-const accountSigner = createPolyesterAccountSigner({
-    environment: POLYESTER_DEVNET_ENVIRONMENT,
-    owner,
-});
+const environment = POLYESTER_DEVNET_ENVIRONMENT;
+const { accountAddress } = createPolyesterAccountSigner({ environment, owner });
 
-const client = new PolyesterBrowserClient({
-    environment: POLYESTER_DEVNET_ENVIRONMENT,
-    accountSigner,
-});
+const accountSigner: AccountSigner = {
+    environmentFingerprint: environment.fingerprint,
+    accountAddress,
+    ownerAddress: owner.address,
+    // Login expects a raw 65-byte EIP-191 signature from the owner EOA.
+    signMessage: (message) => owner.signMessage({ message }),
+};
+
+const client = new PolyesterBrowserClient({ environment, accountSigner });
 
 await client.auth.login({ provider: "turnkey" });
 
 const { orders } = await client.orders.listOpen();
 ```
 
-See [docs/browser-login.md](docs/browser-login.md) for how account identity and
-owner metadata relate.
+`createPolyesterAccountSigner` on its own returns Safe/ERC-6492 wrapped
+signatures. Those are accepted for subaccount creation but rejected by login,
+which is why the quickstart only uses it to derive the account address.
 
 ## Server
 

package/dist/account-signer/create-polyester-account-signer.d.ts

@@ -11,16 +11,20 @@ interface CreatePolyesterAccountSignerParams {
   saltNonce?: bigint;
 }
 /**
- * Creates an AccountSigner for Polyester authentication without any RPC calls.
+ * Derives the Polyester Safe smart account address and a Safe/ERC-6492 signer
+ * without any RPC calls.
  *
- * This computes the Safe smart account address deterministically and produces
- * ERC-6492 wrapped signatures for counterfactual verification. The signature
- * matches what toSafeSmartAccount.signMessage() would produce for an undeployed Safe.
+ * The returned signMessage produces ERC-6492 wrapped signatures matching what
+ * toSafeSmartAccount.signMessage() would produce for an undeployed Safe. That
+ * form is accepted for subaccount creation but NOT for login, which requires the
+ * owner EOA's raw 65-byte EIP-191 signature. For login, use this only to derive
+ * accountAddress and build an AccountSigner whose signMessage calls
+ * owner.signMessage directly (see the README quickstart).
  *
  * For actual chain interactions (UserOperations), use createPolyesterSmartAccount instead.
  *
  * @param params - Owner account and optional salt nonce
- * @returns An AccountSigner that can be used for authentication
+ * @returns An AccountSigner with the derived Safe address and a wrapped signer
  */
 declare function createPolyesterAccountSigner(params: CreatePolyesterAccountSignerParams): AccountSigner;
 //#endregion

package/dist/account-signer/create-polyester-account-signer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-polyester-account-signer.d.ts","names":[],"sources":["../../src/account-signer/create-polyester-account-signer.ts"],"mappings":";;;;UAaiB;;EAEb,aAAa;;EAEb,OAAO;;EAEP;;;;;;;;;;;;;;iBAqDY,6BACZ,QAAQ,qCACT"}
+{"version":3,"file":"create-polyester-account-signer.d.ts","names":[],"sources":["../../src/account-signer/create-polyester-account-signer.ts"],"mappings":";;;;UAaiB;;EAEb,aAAa;;EAEb,OAAO;;EAEP;;;;;;;;;;;;;;;;;;iBAyDY,6BACZ,QAAQ,qCACT"}

package/dist/account-signer/create-polyester-account-signer.js

@@ -47,16 +47,20 @@ function wrapErc6492Signature(factoryAddress, factoryCalldata, signature) {
 	return concat([encoded, ERC6492_MAGIC_SUFFIX]);
 }
 /**
-* Creates an AccountSigner for Polyester authentication without any RPC calls.
+* Derives the Polyester Safe smart account address and a Safe/ERC-6492 signer
+* without any RPC calls.
 *
-* This computes the Safe smart account address deterministically and produces
-* ERC-6492 wrapped signatures for counterfactual verification. The signature
-* matches what toSafeSmartAccount.signMessage() would produce for an undeployed Safe.
+* The returned signMessage produces ERC-6492 wrapped signatures matching what
+* toSafeSmartAccount.signMessage() would produce for an undeployed Safe. That
+* form is accepted for subaccount creation but NOT for login, which requires the
+* owner EOA's raw 65-byte EIP-191 signature. For login, use this only to derive
+* accountAddress and build an AccountSigner whose signMessage calls
+* owner.signMessage directly (see the README quickstart).
 *
 * For actual chain interactions (UserOperations), use createPolyesterSmartAccount instead.
 *
 * @param params - Owner account and optional salt nonce
-* @returns An AccountSigner that can be used for authentication
+* @returns An AccountSigner with the derived Safe address and a wrapped signer
 */
 function createPolyesterAccountSigner(params) {
 	const { environment, owner, saltNonce = 0n } = params;

package/dist/account-signer/create-polyester-account-signer.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-polyester-account-signer.js","names":[],"sources":["../../src/account-signer/create-polyester-account-signer.ts"],"sourcesContent":["import type { Address, Hex, LocalAccount } from \"viem\";\nimport { concat, encodeAbiParameters, hashMessage, hashTypedData, toBytes } from \"viem\";\nimport {\n    predictSafeAddressWithData,\n    type PredictSafeAddressParams,\n} from \"./predict-safe-address.js\";\nimport type { AccountSigner, HexAddress } from \"./types.js\";\nimport type { PolyesterEnvironment } from \"../environment.js\";\n\n/** ERC-6492 magic suffix for counterfactual signature verification */\nconst ERC6492_MAGIC_SUFFIX: Hex =\n    \"0x6492649264926492649264926492649264926492649264926492649264926492\";\n\nexport interface CreatePolyesterAccountSignerParams {\n    /** The environment this signer should authenticate against */\n    environment: PolyesterEnvironment;\n    /** The owner account (EOA) that will sign messages */\n    owner: LocalAccount;\n    /** Salt nonce for deriving different Safe addresses from the same owner (default: 0n) */\n    saltNonce?: bigint;\n}\n\n/**\n * Adjusts the V value in a signature for Safe's eth_sign verification.\n * Safe expects V to be 31+ for eth_sign signatures (27 base + 4 for eth_sign marker).\n */\nfunction adjustVInSignature(signature: Hex): Hex {\n    const ETHEREUM_V_VALUES = [0, 1, 27, 28];\n    const MIN_VALID_V_VALUE_FOR_SAFE_ECDSA = 27;\n\n    let signatureV = Number.parseInt(signature.slice(-2), 16);\n    if (!ETHEREUM_V_VALUES.includes(signatureV)) {\n        throw new Error(\"Invalid signature V value\");\n    }\n\n    // for eth_sign: add 27 if V < 27, then add 4\n    if (signatureV < MIN_VALID_V_VALUE_FOR_SAFE_ECDSA) {\n        signatureV += MIN_VALID_V_VALUE_FOR_SAFE_ECDSA;\n    }\n    signatureV += 4;\n\n    return (signature.slice(0, -2) + signatureV.toString(16).padStart(2, \"0\")) as Hex;\n}\n\n/**\n * Wraps a signature in ERC-6492 format for counterfactual verification.\n * This allows signature verification before the Safe is deployed.\n */\nfunction wrapErc6492Signature(factoryAddress: Address, factoryCalldata: Hex, signature: Hex): Hex {\n    const encoded = encodeAbiParameters(\n        [\n            { name: \"factory\", type: \"address\" },\n            { name: \"factoryCalldata\", type: \"bytes\" },\n            { name: \"signature\", type: \"bytes\" },\n        ],\n        [factoryAddress, factoryCalldata, signature],\n    );\n    return concat([encoded, ERC6492_MAGIC_SUFFIX]);\n}\n\n/**\n * Creates an AccountSigner for Polyester authentication without any RPC calls.\n *\n * This computes the Safe smart account address deterministically and produces\n * ERC-6492 wrapped signatures for counterfactual verification. The signature\n * matches what toSafeSmartAccount.signMessage() would produce for an undeployed Safe.\n *\n * For actual chain interactions (UserOperations), use createPolyesterSmartAccount instead.\n *\n * @param params - Owner account and optional salt nonce\n * @returns An AccountSigner that can be used for authentication\n */\nexport function createPolyesterAccountSigner(\n    params: CreatePolyesterAccountSignerParams,\n): AccountSigner {\n    const { environment, owner, saltNonce = 0n } = params;\n    const {\n        safeProxyFactoryAddress,\n        safeSingletonAddress,\n        safeModuleSetupAddress,\n        safe4337ModuleAddress,\n        multiSendAddress,\n    } = environment.accountAbstraction.safe;\n    const chainId = environment.chain.id;\n\n    const predictParams: PredictSafeAddressParams = {\n        owners: [owner.address],\n        saltNonce,\n        safeProxyFactoryAddress,\n        safeSingletonAddress,\n        safeModuleSetupAddress,\n        safe4337ModuleAddress,\n        multiSendAddress,\n    };\n\n    const { address, factoryCalldata } = predictSafeAddressWithData(predictParams);\n\n    return {\n        environmentFingerprint: environment.fingerprint,\n        accountAddress: address as HexAddress,\n        ownerAddress: owner.address as HexAddress,\n        signMessage: async (message: string): Promise<Hex> => {\n            // 1. hash the original message (what Safe calls generateSafeMessageMessage for strings)\n            const messageHash = hashMessage(message);\n\n            // 2. create EIP-712 typed data hash matching Safe's signMessage\n            const safeMessageHash = hashTypedData({\n                domain: {\n                    chainId,\n                    verifyingContract: address,\n                },\n                types: {\n                    SafeMessage: [{ name: \"message\", type: \"bytes\" }],\n                },\n                primaryType: \"SafeMessage\",\n                message: {\n                    message: messageHash,\n                },\n            });\n\n            // 3. sign the Safe message hash with raw bytes\n            const ownerSignature = await owner.signMessage({\n                message: { raw: toBytes(safeMessageHash) },\n            });\n\n            // 4. adjust V value for Safe's eth_sign verification\n            const innerSignature = adjustVInSignature(ownerSignature as Hex);\n\n            // 5. wrap in ERC-6492 format for counterfactual verification\n            return wrapErc6492Signature(safeProxyFactoryAddress, factoryCalldata, innerSignature);\n        },\n    };\n}\n"],"mappings":";;;;AAUA,MAAM,uBACF;;;;;AAeJ,SAAS,mBAAmB,WAAqB;CAC7C,MAAM,oBAAoB;EAAC;EAAG;EAAG;EAAI;CAAE;CACvC,MAAM,mCAAmC;CAEzC,IAAI,aAAa,OAAO,SAAS,UAAU,MAAM,EAAE,GAAG,EAAE;CACxD,IAAI,CAAC,kBAAkB,SAAS,UAAU,GACtC,MAAM,IAAI,MAAM,2BAA2B;CAI/C,IAAI,aAAa,kCACb,cAAc;CAElB,cAAc;CAEd,OAAQ,UAAU,MAAM,GAAG,EAAE,IAAI,WAAW,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG;AAC5E;;;;;AAMA,SAAS,qBAAqB,gBAAyB,iBAAsB,WAAqB;CAC9F,MAAM,UAAU,oBACZ;EACI;GAAE,MAAM;GAAW,MAAM;EAAU;EACnC;GAAE,MAAM;GAAmB,MAAM;EAAQ;EACzC;GAAE,MAAM;GAAa,MAAM;EAAQ;CACvC,GACA;EAAC;EAAgB;EAAiB;CAAS,CAC/C;CACA,OAAO,OAAO,CAAC,SAAS,oBAAoB,CAAC;AACjD;;;;;;;;;;;;;AAcA,SAAgB,6BACZ,QACa;CACb,MAAM,EAAE,aAAa,OAAO,YAAY,OAAO;CAC/C,MAAM,EACF,yBACA,sBACA,wBACA,uBACA,qBACA,YAAY,mBAAmB;CACnC,MAAM,UAAU,YAAY,MAAM;CAElC,MAAM,gBAA0C;EAC5C,QAAQ,CAAC,MAAM,OAAO;EACtB;EACA;EACA;EACA;EACA;EACA;CACJ;CAEA,MAAM,EAAE,SAAS,oBAAoB,2BAA2B,aAAa;CAE7E,OAAO;EACH,wBAAwB,YAAY;EACpC,gBAAgB;EAChB,cAAc,MAAM;EACpB,aAAa,OAAO,YAAkC;GAElD,MAAM,cAAc,YAAY,OAAO;GAGvC,MAAM,kBAAkB,cAAc;IAClC,QAAQ;KACJ;KACA,mBAAmB;IACvB;IACA,OAAO,EACH,aAAa,CAAC;KAAE,MAAM;KAAW,MAAM;IAAQ,CAAC,EACpD;IACA,aAAa;IACb,SAAS,EACL,SAAS,YACb;GACJ,CAAC;GAQD,MAAM,iBAAiB,mBAAmB,MALb,MAAM,YAAY,EAC3C,SAAS,EAAE,KAAK,QAAQ,eAAe,EAAE,EAC7C,CAAC,CAG8D;GAG/D,OAAO,qBAAqB,yBAAyB,iBAAiB,cAAc;EACxF;CACJ;AACJ"}
+{"version":3,"file":"create-polyester-account-signer.js","names":[],"sources":["../../src/account-signer/create-polyester-account-signer.ts"],"sourcesContent":["import type { Address, Hex, LocalAccount } from \"viem\";\nimport { concat, encodeAbiParameters, hashMessage, hashTypedData, toBytes } from \"viem\";\nimport {\n    predictSafeAddressWithData,\n    type PredictSafeAddressParams,\n} from \"./predict-safe-address.js\";\nimport type { AccountSigner, HexAddress } from \"./types.js\";\nimport type { PolyesterEnvironment } from \"../environment.js\";\n\n/** ERC-6492 magic suffix for counterfactual signature verification */\nconst ERC6492_MAGIC_SUFFIX: Hex =\n    \"0x6492649264926492649264926492649264926492649264926492649264926492\";\n\nexport interface CreatePolyesterAccountSignerParams {\n    /** The environment this signer should authenticate against */\n    environment: PolyesterEnvironment;\n    /** The owner account (EOA) that will sign messages */\n    owner: LocalAccount;\n    /** Salt nonce for deriving different Safe addresses from the same owner (default: 0n) */\n    saltNonce?: bigint;\n}\n\n/**\n * Adjusts the V value in a signature for Safe's eth_sign verification.\n * Safe expects V to be 31+ for eth_sign signatures (27 base + 4 for eth_sign marker).\n */\nfunction adjustVInSignature(signature: Hex): Hex {\n    const ETHEREUM_V_VALUES = [0, 1, 27, 28];\n    const MIN_VALID_V_VALUE_FOR_SAFE_ECDSA = 27;\n\n    let signatureV = Number.parseInt(signature.slice(-2), 16);\n    if (!ETHEREUM_V_VALUES.includes(signatureV)) {\n        throw new Error(\"Invalid signature V value\");\n    }\n\n    // for eth_sign: add 27 if V < 27, then add 4\n    if (signatureV < MIN_VALID_V_VALUE_FOR_SAFE_ECDSA) {\n        signatureV += MIN_VALID_V_VALUE_FOR_SAFE_ECDSA;\n    }\n    signatureV += 4;\n\n    return (signature.slice(0, -2) + signatureV.toString(16).padStart(2, \"0\")) as Hex;\n}\n\n/**\n * Wraps a signature in ERC-6492 format for counterfactual verification.\n * This allows signature verification before the Safe is deployed.\n */\nfunction wrapErc6492Signature(factoryAddress: Address, factoryCalldata: Hex, signature: Hex): Hex {\n    const encoded = encodeAbiParameters(\n        [\n            { name: \"factory\", type: \"address\" },\n            { name: \"factoryCalldata\", type: \"bytes\" },\n            { name: \"signature\", type: \"bytes\" },\n        ],\n        [factoryAddress, factoryCalldata, signature],\n    );\n    return concat([encoded, ERC6492_MAGIC_SUFFIX]);\n}\n\n/**\n * Derives the Polyester Safe smart account address and a Safe/ERC-6492 signer\n * without any RPC calls.\n *\n * The returned signMessage produces ERC-6492 wrapped signatures matching what\n * toSafeSmartAccount.signMessage() would produce for an undeployed Safe. That\n * form is accepted for subaccount creation but NOT for login, which requires the\n * owner EOA's raw 65-byte EIP-191 signature. For login, use this only to derive\n * accountAddress and build an AccountSigner whose signMessage calls\n * owner.signMessage directly (see the README quickstart).\n *\n * For actual chain interactions (UserOperations), use createPolyesterSmartAccount instead.\n *\n * @param params - Owner account and optional salt nonce\n * @returns An AccountSigner with the derived Safe address and a wrapped signer\n */\nexport function createPolyesterAccountSigner(\n    params: CreatePolyesterAccountSignerParams,\n): AccountSigner {\n    const { environment, owner, saltNonce = 0n } = params;\n    const {\n        safeProxyFactoryAddress,\n        safeSingletonAddress,\n        safeModuleSetupAddress,\n        safe4337ModuleAddress,\n        multiSendAddress,\n    } = environment.accountAbstraction.safe;\n    const chainId = environment.chain.id;\n\n    const predictParams: PredictSafeAddressParams = {\n        owners: [owner.address],\n        saltNonce,\n        safeProxyFactoryAddress,\n        safeSingletonAddress,\n        safeModuleSetupAddress,\n        safe4337ModuleAddress,\n        multiSendAddress,\n    };\n\n    const { address, factoryCalldata } = predictSafeAddressWithData(predictParams);\n\n    return {\n        environmentFingerprint: environment.fingerprint,\n        accountAddress: address as HexAddress,\n        ownerAddress: owner.address as HexAddress,\n        signMessage: async (message: string): Promise<Hex> => {\n            // 1. hash the original message (what Safe calls generateSafeMessageMessage for strings)\n            const messageHash = hashMessage(message);\n\n            // 2. create EIP-712 typed data hash matching Safe's signMessage\n            const safeMessageHash = hashTypedData({\n                domain: {\n                    chainId,\n                    verifyingContract: address,\n                },\n                types: {\n                    SafeMessage: [{ name: \"message\", type: \"bytes\" }],\n                },\n                primaryType: \"SafeMessage\",\n                message: {\n                    message: messageHash,\n                },\n            });\n\n            // 3. sign the Safe message hash with raw bytes\n            const ownerSignature = await owner.signMessage({\n                message: { raw: toBytes(safeMessageHash) },\n            });\n\n            // 4. adjust V value for Safe's eth_sign verification\n            const innerSignature = adjustVInSignature(ownerSignature as Hex);\n\n            // 5. wrap in ERC-6492 format for counterfactual verification\n            return wrapErc6492Signature(safeProxyFactoryAddress, factoryCalldata, innerSignature);\n        },\n    };\n}\n"],"mappings":";;;;AAUA,MAAM,uBACF;;;;;AAeJ,SAAS,mBAAmB,WAAqB;CAC7C,MAAM,oBAAoB;EAAC;EAAG;EAAG;EAAI;CAAE;CACvC,MAAM,mCAAmC;CAEzC,IAAI,aAAa,OAAO,SAAS,UAAU,MAAM,EAAE,GAAG,EAAE;CACxD,IAAI,CAAC,kBAAkB,SAAS,UAAU,GACtC,MAAM,IAAI,MAAM,2BAA2B;CAI/C,IAAI,aAAa,kCACb,cAAc;CAElB,cAAc;CAEd,OAAQ,UAAU,MAAM,GAAG,EAAE,IAAI,WAAW,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG;AAC5E;;;;;AAMA,SAAS,qBAAqB,gBAAyB,iBAAsB,WAAqB;CAC9F,MAAM,UAAU,oBACZ;EACI;GAAE,MAAM;GAAW,MAAM;EAAU;EACnC;GAAE,MAAM;GAAmB,MAAM;EAAQ;EACzC;GAAE,MAAM;GAAa,MAAM;EAAQ;CACvC,GACA;EAAC;EAAgB;EAAiB;CAAS,CAC/C;CACA,OAAO,OAAO,CAAC,SAAS,oBAAoB,CAAC;AACjD;;;;;;;;;;;;;;;;;AAkBA,SAAgB,6BACZ,QACa;CACb,MAAM,EAAE,aAAa,OAAO,YAAY,OAAO;CAC/C,MAAM,EACF,yBACA,sBACA,wBACA,uBACA,qBACA,YAAY,mBAAmB;CACnC,MAAM,UAAU,YAAY,MAAM;CAElC,MAAM,gBAA0C;EAC5C,QAAQ,CAAC,MAAM,OAAO;EACtB;EACA;EACA;EACA;EACA;EACA;CACJ;CAEA,MAAM,EAAE,SAAS,oBAAoB,2BAA2B,aAAa;CAE7E,OAAO;EACH,wBAAwB,YAAY;EACpC,gBAAgB;EAChB,cAAc,MAAM;EACpB,aAAa,OAAO,YAAkC;GAElD,MAAM,cAAc,YAAY,OAAO;GAGvC,MAAM,kBAAkB,cAAc;IAClC,QAAQ;KACJ;KACA,mBAAmB;IACvB;IACA,OAAO,EACH,aAAa,CAAC;KAAE,MAAM;KAAW,MAAM;IAAQ,CAAC,EACpD;IACA,aAAa;IACb,SAAS,EACL,SAAS,YACb;GACJ,CAAC;GAQD,MAAM,iBAAiB,mBAAmB,MALb,MAAM,YAAY,EAC3C,SAAS,EAAE,KAAK,QAAQ,eAAe,EAAE,EAC7C,CAAC,CAG8D;GAG/D,OAAO,qBAAqB,yBAAyB,iBAAiB,cAAc;EACxF;CACJ;AACJ"}

package/dist/account-signer/types.d.ts

@@ -4,17 +4,23 @@ type HexAddress = `0x${string}`;
 /**
  * Minimal account signer interface for SDK operations.
  *
- * The SDK authenticates the Polyester smart account address. The owner address
- * is optional metadata about the EOA or custody provider that controls it.
+ * The SDK authenticates the Polyester smart account address. When ownerAddress
+ * is present it is declared as the LOGIN challenge signer, and signMessage must
+ * return that EOA's raw 65-byte EIP-191 signature: login rejects Safe/ERC-6492
+ * wrapped signatures. Subaccount creation accepts either form.
  */
 interface AccountSigner {
   /** Fingerprint of the PolyesterEnvironment this signer was created for */
   readonly environmentFingerprint: string;
   /** The smart account address (used for authentication and trading) */
   readonly accountAddress: HexAddress;
-  /** The owner/EOA address (optional metadata about the controlling signer) */
+  /** The owner/EOA address. Declared as the LOGIN challenge signer when present; otherwise accountAddress signs. */
   readonly ownerAddress?: HexAddress;
-  /** Sign the exact UTF-8 message with EIP-191 semantics for accountAddress (including smart-account wrapping when required). */
+  /**
+   * Sign the exact UTF-8 message with EIP-191 semantics. For login this must be
+   * the owner EOA's raw 65-byte signature (0x + 130 hex chars), not a
+   * smart-account wrapped one.
+   */
   signMessage(message: string): Promise<Hex>;
 }
 /**

package/dist/account-signer/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","names":[],"sources":["../../src/account-signer/types.ts"],"mappings":";;KAIY;;;;;;;UAQK;;WAEJ;;WAGA,gBAAgB;;WAGhB,eAAe;;EAGxB,YAAY,kBAAkB,QAAQ;;;;;;KAO9B,6BAA6B,uBAAuB,QAAQ;;;;;KAM5D,sBAAsB,gBAAgB;;;;iBAKlC,uBACZ,QAAQ,sBACT,UAAU;;;;iBA4BS,qBAClB,QAAQ,kCACT,QAAQ"}
+{"version":3,"file":"types.d.ts","names":[],"sources":["../../src/account-signer/types.ts"],"mappings":";;KAIY;;;;;;;;;UAUK;;WAEJ;;WAGA,gBAAgB;;WAGhB,eAAe;;;;;;EAOxB,YAAY,kBAAkB,QAAQ;;;;;;KAO9B,6BAA6B,uBAAuB,QAAQ;;;;;KAM5D,sBAAsB,gBAAgB;;;;iBAKlC,uBACZ,QAAQ,sBACT,UAAU;;;;iBA4BS,qBAClB,QAAQ,kCACT,QAAQ"}

package/dist/account-signer/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","names":[],"sources":["../../src/account-signer/types.ts"],"sourcesContent":["import type { Hex } from \"viem\";\nimport { isEvmAddress } from \"../utils/evm.js\";\nimport { ConfigurationError } from \"../shared/errors.js\";\n\nexport type HexAddress = `0x${string}`;\n\n/**\n * Minimal account signer interface for SDK operations.\n *\n * The SDK authenticates the Polyester smart account address. The owner address\n * is optional metadata about the EOA or custody provider that controls it.\n */\nexport interface AccountSigner {\n    /** Fingerprint of the PolyesterEnvironment this signer was created for */\n    readonly environmentFingerprint: string;\n\n    /** The smart account address (used for authentication and trading) */\n    readonly accountAddress: HexAddress;\n\n    /** The owner/EOA address (optional metadata about the controlling signer) */\n    readonly ownerAddress?: HexAddress;\n\n    /** Sign the exact UTF-8 message with EIP-191 semantics for accountAddress (including smart-account wrapping when required). */\n    signMessage(message: string): Promise<Hex>;\n}\n\n/**\n * Factory function type for lazy account signer initialization.\n * Useful when the signer might not be available at client creation time.\n */\nexport type AccountSignerFactory = () => AccountSigner | null | Promise<AccountSigner | null>;\n\n/**\n * Account signer configuration for the client.\n * Can be a signer instance or a factory for lazy initialization.\n */\nexport type AccountSignerConfig = AccountSigner | AccountSignerFactory;\n\n/**\n * Helper to check if an account signer config is a factory function.\n */\nexport function isAccountSignerFactory(\n    config: AccountSignerConfig,\n): config is AccountSignerFactory {\n    return typeof config === \"function\";\n}\n\n/**\n * Asserts that a value implements the account signer contract.\n */\nexport function assertAccountSigner(value: AccountSigner): void {\n    if (typeof value !== \"object\" || value === null) {\n        throw new ConfigurationError(\"Account signer must be an object or factory function.\");\n    }\n    if (!value.environmentFingerprint) {\n        throw new ConfigurationError(\"Account signer must include an environmentFingerprint.\");\n    }\n    if (!isEvmAddress(value.accountAddress)) {\n        throw new ConfigurationError(\"Account signer must include a valid accountAddress.\");\n    }\n    if (value.ownerAddress && !isEvmAddress(value.ownerAddress)) {\n        throw new ConfigurationError(\"Account signer ownerAddress must be a valid address.\");\n    }\n    if (typeof value.signMessage !== \"function\") {\n        throw new ConfigurationError(\"Account signer must include a signMessage function.\");\n    }\n}\n\n/**\n * Helper to resolve an account signer from config.\n */\nexport async function resolveAccountSigner(\n    config: AccountSignerConfig | undefined,\n): Promise<AccountSigner | null> {\n    if (!config) return null;\n    const accountSigner = isAccountSignerFactory(config) ? await config() : config;\n    if (accountSigner) assertAccountSigner(accountSigner);\n    return accountSigner;\n}\n"],"mappings":";;;;;;AAyCA,SAAgB,uBACZ,QAC8B;CAC9B,OAAO,OAAO,WAAW;AAC7B;;;;AAKA,SAAgB,oBAAoB,OAA4B;CAC5D,IAAI,OAAO,UAAU,YAAY,UAAU,MACvC,MAAM,IAAI,mBAAmB,uDAAuD;CAExF,IAAI,CAAC,MAAM,wBACP,MAAM,IAAI,mBAAmB,wDAAwD;CAEzF,IAAI,CAAC,aAAa,MAAM,cAAc,GAClC,MAAM,IAAI,mBAAmB,qDAAqD;CAEtF,IAAI,MAAM,gBAAgB,CAAC,aAAa,MAAM,YAAY,GACtD,MAAM,IAAI,mBAAmB,sDAAsD;CAEvF,IAAI,OAAO,MAAM,gBAAgB,YAC7B,MAAM,IAAI,mBAAmB,qDAAqD;AAE1F;;;;AAKA,eAAsB,qBAClB,QAC6B;CAC7B,IAAI,CAAC,QAAQ,OAAO;CACpB,MAAM,gBAAgB,uBAAuB,MAAM,IAAI,MAAM,OAAO,IAAI;CACxE,IAAI,eAAe,oBAAoB,aAAa;CACpD,OAAO;AACX"}
+{"version":3,"file":"types.js","names":[],"sources":["../../src/account-signer/types.ts"],"sourcesContent":["import type { Hex } from \"viem\";\nimport { isEvmAddress } from \"../utils/evm.js\";\nimport { ConfigurationError } from \"../shared/errors.js\";\n\nexport type HexAddress = `0x${string}`;\n\n/**\n * Minimal account signer interface for SDK operations.\n *\n * The SDK authenticates the Polyester smart account address. When ownerAddress\n * is present it is declared as the LOGIN challenge signer, and signMessage must\n * return that EOA's raw 65-byte EIP-191 signature: login rejects Safe/ERC-6492\n * wrapped signatures. Subaccount creation accepts either form.\n */\nexport interface AccountSigner {\n    /** Fingerprint of the PolyesterEnvironment this signer was created for */\n    readonly environmentFingerprint: string;\n\n    /** The smart account address (used for authentication and trading) */\n    readonly accountAddress: HexAddress;\n\n    /** The owner/EOA address. Declared as the LOGIN challenge signer when present; otherwise accountAddress signs. */\n    readonly ownerAddress?: HexAddress;\n\n    /**\n     * Sign the exact UTF-8 message with EIP-191 semantics. For login this must be\n     * the owner EOA's raw 65-byte signature (0x + 130 hex chars), not a\n     * smart-account wrapped one.\n     */\n    signMessage(message: string): Promise<Hex>;\n}\n\n/**\n * Factory function type for lazy account signer initialization.\n * Useful when the signer might not be available at client creation time.\n */\nexport type AccountSignerFactory = () => AccountSigner | null | Promise<AccountSigner | null>;\n\n/**\n * Account signer configuration for the client.\n * Can be a signer instance or a factory for lazy initialization.\n */\nexport type AccountSignerConfig = AccountSigner | AccountSignerFactory;\n\n/**\n * Helper to check if an account signer config is a factory function.\n */\nexport function isAccountSignerFactory(\n    config: AccountSignerConfig,\n): config is AccountSignerFactory {\n    return typeof config === \"function\";\n}\n\n/**\n * Asserts that a value implements the account signer contract.\n */\nexport function assertAccountSigner(value: AccountSigner): void {\n    if (typeof value !== \"object\" || value === null) {\n        throw new ConfigurationError(\"Account signer must be an object or factory function.\");\n    }\n    if (!value.environmentFingerprint) {\n        throw new ConfigurationError(\"Account signer must include an environmentFingerprint.\");\n    }\n    if (!isEvmAddress(value.accountAddress)) {\n        throw new ConfigurationError(\"Account signer must include a valid accountAddress.\");\n    }\n    if (value.ownerAddress && !isEvmAddress(value.ownerAddress)) {\n        throw new ConfigurationError(\"Account signer ownerAddress must be a valid address.\");\n    }\n    if (typeof value.signMessage !== \"function\") {\n        throw new ConfigurationError(\"Account signer must include a signMessage function.\");\n    }\n}\n\n/**\n * Helper to resolve an account signer from config.\n */\nexport async function resolveAccountSigner(\n    config: AccountSignerConfig | undefined,\n): Promise<AccountSigner | null> {\n    if (!config) return null;\n    const accountSigner = isAccountSignerFactory(config) ? await config() : config;\n    if (accountSigner) assertAccountSigner(accountSigner);\n    return accountSigner;\n}\n"],"mappings":";;;;;;AA+CA,SAAgB,uBACZ,QAC8B;CAC9B,OAAO,OAAO,WAAW;AAC7B;;;;AAKA,SAAgB,oBAAoB,OAA4B;CAC5D,IAAI,OAAO,UAAU,YAAY,UAAU,MACvC,MAAM,IAAI,mBAAmB,uDAAuD;CAExF,IAAI,CAAC,MAAM,wBACP,MAAM,IAAI,mBAAmB,wDAAwD;CAEzF,IAAI,CAAC,aAAa,MAAM,cAAc,GAClC,MAAM,IAAI,mBAAmB,qDAAqD;CAEtF,IAAI,MAAM,gBAAgB,CAAC,aAAa,MAAM,YAAY,GACtD,MAAM,IAAI,mBAAmB,sDAAsD;CAEvF,IAAI,OAAO,MAAM,gBAAgB,YAC7B,MAAM,IAAI,mBAAmB,qDAAqD;AAE1F;;;;AAKA,eAAsB,qBAClB,QAC6B;CAC7B,IAAI,CAAC,QAAQ,OAAO;CACpB,MAAM,gBAAgB,uBAAuB,MAAM,IAAI,MAAM,OAAO,IAAI;CACxE,IAAI,eAAe,oBAAoB,aAAa;CACpD,OAAO;AACX"}

package/dist/core-client.d.ts

@@ -55,6 +55,8 @@ import { ZipperService } from "./services/zipper/zipper.js";
 import "./services/zipper/index.js";
 import { MfaService } from "./services/mfa/mfa.js";
 import "./services/mfa/index.js";
+import { ClaimsService } from "./services/claims/claims.js";
+import "./services/claims/index.js";
 import { VipService } from "./services/vip/vip.js";
 import "./services/vip/index.js";
 import { FeesService } from "./services/fees/fees.js";
@@ -158,6 +160,7 @@ declare class PolyesterClient {
   get whiteboard(): WhiteboardService;
   get zipper(): ZipperService;
   get mfa(): MfaService;
+  get claims(): ClaimsService;
   get vip(): VipService;
   get fees(): FeesService;
   get tradingRateLimits(): RateLimitService;

package/dist/core-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core-client.d.ts","names":[],"sources":["../src/core-client.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAkHY,8BAA8B,KAAK;UAErC;EACN,aAAa;EACb,eAAe;EACf,OAAO,kBAAkB;EACzB,WAAW;;;;;EAKX;;;;;;;EAOA,aAAa;;;;;;EAMb,iBAAiB;;KAGhB;;EAGK,SAAS;EACT;EACA;;EAGA;;;;;;EAMA,kBAAkB;;;;;EAKlB,cAAc;;;KAIZ,4BAA4B,8BAA8B;;KAG1D,wBAAwB;UAc1B;EACN,YAAY;EACZ,UAAU;EACV,aAAa;EACb,aAAa;;UAGP;EACN,cAAc,SAAS,8BAA8B;;;;;;;;;cAqC5C;;qBACU,YAAY;EA8CnB,YAAA,QAAQ,uBAAuB,UAAS;MAyBhD,YAAY;MAoBZ,WAAW;MAwCX,QAAQ;MAaR,YAAY;MAIZ,WAAW;MAQX,eAAe;MAQf,WAAW;MAQX,kBAAkB;MAOlB,cAAc;MAQd,kBAAkB;MAQlB,aAAa;MAQb,WAAW;MAQX,aAAa;MAIb,UAAU;MASV,UAAU;MASV,YAAY;MASZ,YAAY;MASZ,aAAa;MAQb,qBAAqB;MAQrB,oBAAoB;MAapB,WAAW;MAIX,eAAe;MAQf,eAAe;MAIf,sBAAsB;MAItB,cAAc;MAId,UAAU;MAQV,OAAO;MAIP,OAAO;MAIP,QAAQ;MAIR,qBAAqB;;;;;YAWf,4BAA4B"}
+{"version":3,"file":"core-client.d.ts","names":[],"sources":["../src/core-client.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAyFY,8BAA8B,KAAK;UAErC;EACN,aAAa;EACb,eAAe;EACf,OAAO,kBAAkB;EACzB,WAAW;;;;;EAKX;;;;;;;EAOA,aAAa;;;;;;EAMb,iBAAiB;;KAGhB;;EAGK,SAAS;EACT;EACA;;EAGA;;;;;;EAMA,kBAAkB;;;;;EAKlB,cAAc;;;KAIZ,4BAA4B,8BAA8B;;KAG1D,wBAAwB;UAc1B;EACN,YAAY;EACZ,UAAU;EACV,aAAa;EACb,aAAa;;UAGP;EACN,cAAc,SAAS,8BAA8B;;;;;;;;;cAqC5C;;qBACU,YAAY;EA+CnB,YAAA,QAAQ,uBAAuB,UAAS;MAyBhD,YAAY;MAoBZ,WAAW;MAwCX,QAAQ;MAaR,YAAY;MAIZ,WAAW;MAQX,eAAe;MAQf,WAAW;MAQX,kBAAkB;MAOlB,cAAc;MAQd,kBAAkB;MAQlB,aAAa;MAQb,WAAW;MAQX,aAAa;MAIb,UAAU;MASV,UAAU;MASV,YAAY;MASZ,YAAY;MASZ,aAAa;MAQb,qBAAqB;MAQrB,oBAAoB;MAapB,WAAW;MAIX,eAAe;MAQf,eAAe;MAIf,sBAAsB;MAItB,cAAc;MAId,UAAU;MAQV,OAAO;MAIP,UAAU;MAIV,OAAO;MAIP,QAAQ;MAIR,qBAAqB;;;;;YAWf,4BAA4B"}

package/dist/core-client.js

@@ -27,6 +27,7 @@ import { SocialVerificationService } from "./services/social-verification/social
 import { WhiteboardService } from "./services/whiteboard/whiteboard.js";
 import { ZipperService } from "./services/zipper/zipper.js";
 import { MfaService } from "./services/mfa/mfa.js";
+import { ClaimsService } from "./services/claims/claims.js";
 import { VipService } from "./services/vip/vip.js";
 import { FeesService } from "./services/fees/fees.js";
 import { RateLimitService } from "./services/rate-limits/rate-limits.js";
@@ -35,53 +36,26 @@ import { RealtimeClient } from "./realtime/client.js";
 //#region src/core-client.ts
 function realtimeAuthFromProvider(auth) {
 	if (!auth) return {};
-	if (auth.kind === "jwt") {
-		let cachedTokenResolution;
-		const prefetchToken = () => {
-			if (cachedTokenResolution) return cachedTokenResolution;
+	if (auth.kind === "jwt") return {
+		getAuthHeaders: async () => {
+			const token = await resolveJwtToken(auth);
+			const headers = {};
+			if (token) headers.authorization = `Bearer ${token}`;
+			return headers;
+		},
+		hasAuth: () => {
 			try {
-				const value = auth.getToken();
-				if (value !== null && typeof value !== "string") value.catch(() => {});
-				cachedTokenResolution = {
-					kind: "value",
-					value
-				};
-			} catch (cause) {
-				cachedTokenResolution = {
-					kind: "error",
-					cause
-				};
-			}
-			return cachedTokenResolution;
-		};
-		const consumeToken = () => {
-			const resolution = cachedTokenResolution;
-			cachedTokenResolution = void 0;
-			if (!resolution) return auth.getToken();
-			if (resolution.kind === "error") throw resolution.cause;
-			return resolution.value;
-		};
-		const cachedAuth = {
-			kind: "jwt",
-			getToken: consumeToken
-		};
-		return {
-			getAuthHeaders: async () => {
-				const token = await resolveJwtToken(cachedAuth);
-				const headers = {};
-				if (token) headers.authorization = `Bearer ${token}`;
-				return headers;
-			},
-			hasAuth: () => {
-				const resolution = prefetchToken();
-				if (resolution.kind === "error") return true;
-				if (resolution.value !== null && typeof resolution.value !== "string") return true;
-				const hasToken = resolution.value !== null && resolution.value.length > 0;
-				if (!hasToken) cachedTokenResolution = void 0;
-				return hasToken;
+				const token = auth.getToken();
+				if (token !== null && typeof token !== "string") {
+					token.catch(() => {});
+					return true;
+				}
+				return token !== null && token.length > 0;
+			} catch {
+				return true;
 			}
-		};
-	}
+		}
+	};
 	return {
 		getAuthHeaders: (request) => createApiKeyEd25519AuthHeaders(auth, {
 			url: request.url,
@@ -155,6 +129,7 @@ var PolyesterClient = class {
 	#whiteboard;
 	#zipper;
 	#mfa;
+	#claims;
 	#vip;
 	#fees;
 	#tradingRateLimits;
@@ -303,6 +278,9 @@ var PolyesterClient = class {
 	get mfa() {
 		return this.#mfa ??= new MfaService(this.transports);
 	}
+	get claims() {
+		return this.#claims ??= new ClaimsService(this.transports);
+	}
 	get vip() {
 		return this.#vip ??= new VipService(this.transports);
 	}

package/dist/core-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"core-client.js","names":["#environment","#authProvider","#realtimeConfig","#configRealtimeClient","#configCatalog","#configCatalogSnapshot","#configCatalogCell","#createAuth","#realtime","#catalog","#getScales","#scales","#resolverInitialized","#resolver","#auth","#accounts","#apiKeys","#getResolver","#subaccounts","#candles","#chainAnalytics","#marketData","#marketOverview","#orderbook","#heatmap","#lifecycle","#trades","#orders","#triggers","#balances","#transfers","#internalTransfers","#tradingWithdraws","#deposit","#addressBook","#guardSigner","#socialVerification","#whiteboard","#zipper","#mfa","#vip","#fees","#tradingRateLimits"],"sources":["../src/core-client.ts"],"sourcesContent":["import type { Interceptor } from \"@connectrpc/connect\";\nimport { ConfigurationError } from \"./shared/errors.js\";\nimport {\n    createApiKeyEd25519AuthHeaders,\n    createTransports,\n    resolveJwtToken,\n    type AuthAndPublicApiTransports,\n    type Transports,\n    type JwtAuthProvider,\n    type ApiKeyEd25519AuthProvider,\n} from \"./shared/transports.js\";\nimport { parsePolyesterEnvironment, type PolyesterEnvironment } from \"./environment.js\";\nimport { AccountsService } from \"./services/accounts/index.js\";\nimport { ApiKeysService } from \"./services/api-keys/index.js\";\nimport { AuthService } from \"./services/auth/auth.js\";\nimport { SubaccountsService } from \"./services/subaccounts/index.js\";\nimport { CandlesService } from \"./services/candles/index.js\";\nimport { ChainAnalyticsService } from \"./services/chain-analytics/index.js\";\nimport { MarketDataService } from \"./services/market-data/index.js\";\nimport { MarketOverviewService } from \"./services/market-overview/index.js\";\nimport { OrderbookService } from \"./services/orderbook/index.js\";\nimport { HeatmapService } from \"./services/heatmap/index.js\";\nimport { LifecycleService } from \"./services/lifecycle/index.js\";\nimport { TradesService } from \"./services/trades/index.js\";\nimport { OrdersService } from \"./services/orders/index.js\";\nimport { TriggersService } from \"./services/triggers/index.js\";\nimport { BalancesService } from \"./services/balances/index.js\";\nimport { TransfersService } from \"./services/transfers/index.js\";\nimport { InternalTransfersService } from \"./services/internal-transfers/index.js\";\nimport { TradingWithdrawsService } from \"./services/trading-withdraws/index.js\";\nimport { DepositService } from \"./services/deposit/index.js\";\nimport { AddressBookService } from \"./services/address-book/index.js\";\nimport { GuardSignerService } from \"./services/guard-signer/index.js\";\nimport { SocialVerificationService } from \"./services/social-verification/index.js\";\nimport { WhiteboardService } from \"./services/whiteboard/index.js\";\nimport { ZipperService } from \"./services/zipper/index.js\";\nimport { MfaService } from \"./services/mfa/index.js\";\nimport { VipService } from \"./services/vip/index.js\";\nimport { FeesService } from \"./services/fees/index.js\";\nimport { RateLimitService } from \"./services/rate-limits/index.js\";\nimport type { SubaccountResolver } from \"./services/subaccount-resolver.js\";\nimport {\n    createPolyesterCatalog,\n    type CatalogSnapshot,\n    type CatalogSnapshotCell,\n    type ClientCatalog,\n} from \"./catalogs/index.js\";\nimport { createCatalogSdkScales, type SdkScales } from \"./shared/decimal-surface.js\";\nimport { RealtimeClient, type PolyesterRealtime, type RealtimeConfig } from \"./realtime/index.js\";\n\nfunction realtimeAuthFromProvider(\n    auth: JwtAuthProvider | ApiKeyEd25519AuthProvider | undefined,\n): Pick<RealtimeConfig, \"getAuthHeaders\" | \"hasAuth\"> {\n    if (!auth) return {};\n    if (auth.kind === \"jwt\") {\n        type CachedTokenResolution =\n            | { kind: \"value\"; value: ReturnType<JwtAuthProvider[\"getToken\"]> }\n            | { kind: \"error\"; cause: unknown };\n\n        let cachedTokenResolution: CachedTokenResolution | undefined;\n\n        const prefetchToken = (): CachedTokenResolution => {\n            if (cachedTokenResolution) return cachedTokenResolution;\n\n            try {\n                const value = auth.getToken();\n                // Async providers cannot be preflighted synchronously. Attach a\n                // rejection observer while the credential waits for the request.\n                if (value !== null && typeof value !== \"string\") void value.catch(() => {});\n                cachedTokenResolution = { kind: \"value\", value };\n            } catch (cause) {\n                cachedTokenResolution = { kind: \"error\", cause };\n            }\n            return cachedTokenResolution;\n        };\n\n        const consumeToken = (): ReturnType<JwtAuthProvider[\"getToken\"]> => {\n            const resolution = cachedTokenResolution;\n            cachedTokenResolution = undefined;\n\n            if (!resolution) return auth.getToken();\n            if (resolution.kind === \"error\") throw resolution.cause;\n            return resolution.value;\n        };\n        const cachedAuth = { kind: \"jwt\", getToken: consumeToken } satisfies JwtAuthProvider;\n\n        return {\n            getAuthHeaders: async () => {\n                const token = await resolveJwtToken(cachedAuth);\n                const headers: Record<string, string> = {};\n                if (token) headers.authorization = `Bearer ${token}`;\n                return headers;\n            },\n            hasAuth: () => {\n                const resolution = prefetchToken();\n                if (resolution.kind === \"error\") return true;\n                if (resolution.value !== null && typeof resolution.value !== \"string\") return true;\n\n                const hasToken = resolution.value !== null && resolution.value.length > 0;\n                if (!hasToken) cachedTokenResolution = undefined;\n                return hasToken;\n            },\n        };\n    }\n    return {\n        getAuthHeaders: (request) =>\n            createApiKeyEd25519AuthHeaders(auth, {\n                url: request.url,\n                method: request.method,\n            }),\n        hasAuth: () => true,\n    };\n}\n\nexport type PolyesterRealtimeAuthConfig = Pick<RealtimeConfig, \"getAuthHeaders\" | \"hasAuth\">;\n\ninterface PolyesterClientCommonConfig {\n    environment: PolyesterEnvironment;\n    interceptors?: Interceptor[];\n    auth?: JwtAuthProvider | ApiKeyEd25519AuthProvider;\n    realtime?: PolyesterRealtimeAuthConfig;\n    /**\n     * Connect wire format. Defaults to binary for production performance.\n     * Use `json` for human-readable debugging.\n     */\n    wireFormat?: \"binary\" | \"json\";\n    /**\n     * Advanced: inject pre-built Connect transports (in-memory mocks, custom\n     * stacks). When provided, the SDK does not build its own transports and the\n     * built-in auth/error-mapping interceptors are NOT applied — the injected\n     * transports own their full interceptor chain.\n     */\n    transports?: Transports;\n    /**\n     * Advanced: inject a realtime implementation (in-memory mocks, custom\n     * stacks). When provided, the SDK skips constructing its Centrifuge-backed\n     * realtime client and the `realtime` auth config is ignored.\n     */\n    realtimeClient?: PolyesterRealtime;\n}\n\ntype PolyesterCatalogConfig =\n    | {\n          /** Client-owned catalog store. */\n          catalog: ClientCatalog;\n          catalogSnapshot?: never;\n          catalogCell?: never;\n      }\n    | {\n          catalog?: never;\n          /**\n           * Explicit initial catalog snapshot, commonly hydrated from server-rendered data.\n           * Combines with `catalogCell` as the cell's initial value without clobbering a\n           * pre-populated cell.\n           */\n          catalogSnapshot?: CatalogSnapshot;\n          /**\n           * External snapshot storage for the client-built catalog. A cell backed by a\n           * reactive source makes every catalog read reactive.\n           */\n          catalogCell?: CatalogSnapshotCell;\n      };\n\n/** Configuration shared by every Polyester client. */\nexport type PolyesterClientBaseConfig = PolyesterClientCommonConfig & PolyesterCatalogConfig;\n\n/** Configuration for the base Polyester client. */\nexport type PolyesterClientConfig = PolyesterClientBaseConfig;\n\n/** Preserves the exclusive catalog configuration while projecting client config fields. */\nexport function pickPolyesterCatalogConfig(\n    config: PolyesterClientBaseConfig,\n): PolyesterCatalogConfig {\n    return config.catalog === undefined\n        ? {\n              catalogSnapshot: config.catalogSnapshot,\n              catalogCell: config.catalogCell,\n          }\n        : { catalog: config.catalog };\n}\n\ninterface AuthServiceFactoryContext {\n    transports: AuthAndPublicApiTransports;\n    realtime: PolyesterRealtime;\n    subaccounts: SubaccountsService;\n    environment: PolyesterEnvironment;\n}\n\ninterface PolyesterClientRuntimeConfig {\n    createAuth?: (context: AuthServiceFactoryContext) => AuthService;\n}\n\n/**\n * Parses the configuration shared by every public client constructor.\n */\nexport function parsePolyesterClientConfig<TConfig extends PolyesterClientBaseConfig>(\n    config: TConfig,\n): TConfig {\n    if (typeof config !== \"object\" || config === null || Array.isArray(config)) {\n        throw new ConfigurationError(\"Client configuration must be an object.\");\n    }\n    const environment = parsePolyesterEnvironment(config.environment);\n    if (\n        config.wireFormat !== undefined &&\n        config.wireFormat !== \"binary\" &&\n        config.wireFormat !== \"json\"\n    ) {\n        throw new ConfigurationError('wireFormat must be either \"binary\" or \"json\".');\n    }\n    if (config.catalog && config.catalogSnapshot) {\n        throw new ConfigurationError(\"Provide either catalog or catalogSnapshot, not both.\");\n    }\n    if (config.catalog && config.catalogCell) {\n        throw new ConfigurationError(\"Provide either catalog or catalogCell, not both.\");\n    }\n\n    return Object.assign({}, config, { environment });\n}\n\n/**\n * Base SDK client that wires transports, realtime, catalogs, and all public service clients for a Polyester environment.\n *\n * Services are constructed lazily on first property access (and memoized) so\n * that creating a client — which happens for every SSR request in server\n * hooks — only pays for the services the caller actually touches.\n */\nexport class PolyesterClient {\n    protected readonly transports: Transports;\n\n    readonly #environment: PolyesterEnvironment;\n    readonly #authProvider: JwtAuthProvider | ApiKeyEd25519AuthProvider | undefined;\n    readonly #realtimeConfig: PolyesterRealtimeAuthConfig | undefined;\n    readonly #configRealtimeClient: PolyesterRealtime | undefined;\n    readonly #configCatalog: ClientCatalog | undefined;\n    readonly #configCatalogSnapshot: CatalogSnapshot | undefined;\n    readonly #configCatalogCell: CatalogSnapshotCell | undefined;\n    readonly #createAuth: PolyesterClientRuntimeConfig[\"createAuth\"];\n\n    #realtime: PolyesterRealtime | undefined;\n    #catalog: ClientCatalog | undefined;\n    #scales: SdkScales | undefined;\n    #resolver: SubaccountResolver | undefined;\n    #resolverInitialized = false;\n\n    #auth: AuthService | undefined;\n    #accounts: AccountsService | undefined;\n    #apiKeys: ApiKeysService | undefined;\n    #subaccounts: SubaccountsService | undefined;\n    #candles: CandlesService | undefined;\n    #chainAnalytics: ChainAnalyticsService | undefined;\n    #marketData: MarketDataService | undefined;\n    #marketOverview: MarketOverviewService | undefined;\n    #orderbook: OrderbookService | undefined;\n    #heatmap: HeatmapService | undefined;\n    #lifecycle: LifecycleService | undefined;\n    #trades: TradesService | undefined;\n    #orders: OrdersService | undefined;\n    #triggers: TriggersService | undefined;\n    #balances: BalancesService | undefined;\n    #transfers: TransfersService | undefined;\n    #internalTransfers: InternalTransfersService | undefined;\n    #tradingWithdraws: TradingWithdrawsService | undefined;\n    #deposit: DepositService | undefined;\n    #addressBook: AddressBookService | undefined;\n    #guardSigner: GuardSignerService | undefined;\n    #socialVerification: SocialVerificationService | undefined;\n    #whiteboard: WhiteboardService | undefined;\n    #zipper: ZipperService | undefined;\n    #mfa: MfaService | undefined;\n    #vip: VipService | undefined;\n    #fees: FeesService | undefined;\n    #tradingRateLimits: RateLimitService | undefined;\n\n    constructor(config: PolyesterClientConfig, runtime: PolyesterClientRuntimeConfig = {}) {\n        const parsedConfig = parsePolyesterClientConfig(config);\n        config = parsedConfig;\n        const interceptors = config.interceptors ?? [];\n        const { environment } = config;\n\n        this.transports =\n            config.transports ??\n            createTransports({\n                apiUrl: environment.apiUrl,\n                interceptors,\n                auth: config.auth,\n                wireFormat: config.wireFormat,\n            });\n\n        this.#environment = environment;\n        this.#authProvider = config.auth;\n        this.#realtimeConfig = config.realtime;\n        this.#configRealtimeClient = config.realtimeClient;\n        this.#configCatalog = config.catalog;\n        this.#configCatalogSnapshot = config.catalogSnapshot;\n        this.#configCatalogCell = config.catalogCell;\n        this.#createAuth = runtime.createAuth;\n    }\n\n    get realtime(): PolyesterRealtime {\n        if (!this.#realtime) {\n            if (this.#configRealtimeClient) {\n                this.#realtime = this.#configRealtimeClient;\n            } else {\n                const environment = this.#environment;\n                const realtimeAuth = realtimeAuthFromProvider(this.#authProvider);\n                this.#realtime = new RealtimeClient({\n                    wsUrl: environment.websocketUrl,\n                    tokenEndpoint: `${environment.apiUrl}/v1/rt/token`,\n                    subscribeEndpoint: `${environment.apiUrl}/v1/rt/subscribe`,\n                    getAuthHeaders:\n                        this.#realtimeConfig?.getAuthHeaders ?? realtimeAuth.getAuthHeaders,\n                    hasAuth: this.#realtimeConfig?.hasAuth ?? realtimeAuth.hasAuth,\n                });\n            }\n        }\n        return this.#realtime;\n    }\n\n    get catalog(): ClientCatalog {\n        if (!this.#catalog) {\n            if (this.#configCatalog) {\n                this.#catalog = this.#configCatalog;\n            } else {\n                const catalogRefreshMarketData = new MarketDataService(\n                    this.transports,\n                    this.realtime,\n                    this.#getScales(),\n                );\n                const catalogRefreshZipper = new ZipperService(this.transports);\n                this.#catalog = createPolyesterCatalog({\n                    snapshot: this.#configCatalogSnapshot,\n                    cell: this.#configCatalogCell,\n                    refresh: {\n                        market: () => catalogRefreshMarketData.getSpotConfig(),\n                        zipper: () => catalogRefreshZipper.getDepositWithdrawConfig(),\n                    },\n                });\n            }\n        }\n        return this.#catalog;\n    }\n\n    #getScales(): SdkScales {\n        // Lazy catalog binding: the resolver only dereferences `this.catalog` at\n        // call time. getSpotConfig() (the catalog's own refresh source) never\n        // awaits scale readiness.\n        this.#scales ??= createCatalogSdkScales(() => this.catalog);\n        return this.#scales;\n    }\n\n    #getResolver(): SubaccountResolver | undefined {\n        if (!this.#resolverInitialized) {\n            this.#resolverInitialized = true;\n            this.#resolver = this.createSubaccountResolver();\n        }\n        return this.#resolver;\n    }\n\n    get auth(): AuthService {\n        if (!this.#auth) {\n            this.#auth =\n                this.#createAuth?.({\n                    transports: this.transports,\n                    realtime: this.realtime,\n                    subaccounts: this.subaccounts,\n                    environment: this.#environment,\n                }) ?? new AuthService(this.transports, this.realtime);\n        }\n        return this.#auth;\n    }\n\n    get accounts(): AccountsService {\n        return (this.#accounts ??= new AccountsService(this.transports));\n    }\n\n    get apiKeys(): ApiKeysService {\n        return (this.#apiKeys ??= new ApiKeysService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get subaccounts(): SubaccountsService {\n        return (this.#subaccounts ??= new SubaccountsService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get candles(): CandlesService {\n        return (this.#candles ??= new CandlesService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get chainAnalytics(): ChainAnalyticsService {\n        return (this.#chainAnalytics ??= new ChainAnalyticsService(\n            this.transports,\n            this.#getScales(),\n        ));\n    }\n\n    get marketData(): MarketDataService {\n        return (this.#marketData ??= new MarketDataService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get marketOverview(): MarketOverviewService {\n        return (this.#marketOverview ??= new MarketOverviewService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get orderbook(): OrderbookService {\n        return (this.#orderbook ??= new OrderbookService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get heatmap(): HeatmapService {\n        return (this.#heatmap ??= new HeatmapService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get lifecycle(): LifecycleService {\n        return (this.#lifecycle ??= new LifecycleService(this.transports, this.realtime));\n    }\n\n    get trades(): TradesService {\n        return (this.#trades ??= new TradesService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get orders(): OrdersService {\n        return (this.#orders ??= new OrdersService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get triggers(): TriggersService {\n        return (this.#triggers ??= new TriggersService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get balances(): BalancesService {\n        return (this.#balances ??= new BalancesService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get transfers(): TransfersService {\n        return (this.#transfers ??= new TransfersService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get internalTransfers(): InternalTransfersService {\n        return (this.#internalTransfers ??= new InternalTransfersService(\n            this.transports,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get tradingWithdraws(): TradingWithdrawsService {\n        return (this.#tradingWithdraws ??= new TradingWithdrawsService(\n            this.transports,\n            this.#getResolver(),\n            {\n                chainId: this.#environment.chain.id,\n                tradingGatewayAddress: this.#environment.contracts.tradingGatewayAddress,\n            },\n            this.#getScales(),\n            this.catalog,\n        ));\n    }\n\n    get deposit(): DepositService {\n        return (this.#deposit ??= new DepositService(this.transports, this.#getResolver()));\n    }\n\n    get addressBook(): AddressBookService {\n        return (this.#addressBook ??= new AddressBookService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get guardSigner(): GuardSignerService {\n        return (this.#guardSigner ??= new GuardSignerService(this.transports, this.#getResolver()));\n    }\n\n    get socialVerification(): SocialVerificationService {\n        return (this.#socialVerification ??= new SocialVerificationService(this.transports));\n    }\n\n    get whiteboard(): WhiteboardService {\n        return (this.#whiteboard ??= new WhiteboardService(this.transports));\n    }\n\n    get zipper(): ZipperService {\n        return (this.#zipper ??= new ZipperService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get mfa(): MfaService {\n        return (this.#mfa ??= new MfaService(this.transports));\n    }\n\n    get vip(): VipService {\n        return (this.#vip ??= new VipService(this.transports));\n    }\n\n    get fees(): FeesService {\n        return (this.#fees ??= new FeesService(this.transports, this.#getResolver()));\n    }\n\n    get tradingRateLimits(): RateLimitService {\n        return (this.#tradingRateLimits ??= new RateLimitService(\n            this.transports,\n            this.#getResolver(),\n        ));\n    }\n\n    /**\n     * Override in subclasses to provide a subaccount resolver.\n     * The resolver is called lazily when service methods are invoked.\n     */\n    protected createSubaccountResolver(): SubaccountResolver | undefined {\n        return undefined;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,SAAS,yBACL,MACkD;CAClD,IAAI,CAAC,MAAM,OAAO,CAAC;CACnB,IAAI,KAAK,SAAS,OAAO;EAKrB,IAAI;EAEJ,MAAM,sBAA6C;GAC/C,IAAI,uBAAuB,OAAO;GAElC,IAAI;IACA,MAAM,QAAQ,KAAK,SAAS;IAG5B,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU,MAAW,YAAY,CAAC,CAAC;IAC1E,wBAAwB;KAAE,MAAM;KAAS;IAAM;GACnD,SAAS,OAAO;IACZ,wBAAwB;KAAE,MAAM;KAAS;IAAM;GACnD;GACA,OAAO;EACX;EAEA,MAAM,qBAA8D;GAChE,MAAM,aAAa;GACnB,wBAAwB,KAAA;GAExB,IAAI,CAAC,YAAY,OAAO,KAAK,SAAS;GACtC,IAAI,WAAW,SAAS,SAAS,MAAM,WAAW;GAClD,OAAO,WAAW;EACtB;EACA,MAAM,aAAa;GAAE,MAAM;GAAO,UAAU;EAAa;EAEzD,OAAO;GACH,gBAAgB,YAAY;IACxB,MAAM,QAAQ,MAAM,gBAAgB,UAAU;IAC9C,MAAM,UAAkC,CAAC;IACzC,IAAI,OAAO,QAAQ,gBAAgB,UAAU;IAC7C,OAAO;GACX;GACA,eAAe;IACX,MAAM,aAAa,cAAc;IACjC,IAAI,WAAW,SAAS,SAAS,OAAO;IACxC,IAAI,WAAW,UAAU,QAAQ,OAAO,WAAW,UAAU,UAAU,OAAO;IAE9E,MAAM,WAAW,WAAW,UAAU,QAAQ,WAAW,MAAM,SAAS;IACxE,IAAI,CAAC,UAAU,wBAAwB,KAAA;IACvC,OAAO;GACX;EACJ;CACJ;CACA,OAAO;EACH,iBAAiB,YACb,+BAA+B,MAAM;GACjC,KAAK,QAAQ;GACb,QAAQ,QAAQ;EACpB,CAAC;EACL,eAAe;CACnB;AACJ;;AA0DA,SAAgB,2BACZ,QACsB;CACtB,OAAO,OAAO,YAAY,KAAA,IACpB;EACI,iBAAiB,OAAO;EACxB,aAAa,OAAO;CACxB,IACA,EAAE,SAAS,OAAO,QAAQ;AACpC;;;;AAgBA,SAAgB,2BACZ,QACO;CACP,IAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GACrE,MAAM,IAAI,mBAAmB,yCAAyC;CAE1E,MAAM,cAAc,0BAA0B,OAAO,WAAW;CAChE,IACI,OAAO,eAAe,KAAA,KACtB,OAAO,eAAe,YACtB,OAAO,eAAe,QAEtB,MAAM,IAAI,mBAAmB,mDAA+C;CAEhF,IAAI,OAAO,WAAW,OAAO,iBACzB,MAAM,IAAI,mBAAmB,sDAAsD;CAEvF,IAAI,OAAO,WAAW,OAAO,aACzB,MAAM,IAAI,mBAAmB,kDAAkD;CAGnF,OAAO,OAAO,OAAO,CAAC,GAAG,QAAQ,EAAE,YAAY,CAAC;AACpD;;;;;;;;AASA,IAAa,kBAAb,MAA6B;CACzB;CAEA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACA,uBAAuB;CAEvB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAA+B,UAAwC,CAAC,GAAG;EAEnF,SADqB,2BAA2B,MAC5B;EACpB,MAAM,eAAe,OAAO,gBAAgB,CAAC;EAC7C,MAAM,EAAE,gBAAgB;EAExB,KAAK,aACD,OAAO,cACP,iBAAiB;GACb,QAAQ,YAAY;GACpB;GACA,MAAM,OAAO;GACb,YAAY,OAAO;EACvB,CAAC;EAEL,KAAKA,eAAe;EACpB,KAAKC,gBAAgB,OAAO;EAC5B,KAAKC,kBAAkB,OAAO;EAC9B,KAAKC,wBAAwB,OAAO;EACpC,KAAKC,iBAAiB,OAAO;EAC7B,KAAKC,yBAAyB,OAAO;EACrC,KAAKC,qBAAqB,OAAO;EACjC,KAAKC,cAAc,QAAQ;CAC/B;CAEA,IAAI,WAA8B;EAC9B,IAAI,CAAC,KAAKC,WACN,IAAI,KAAKL,uBACL,KAAKK,YAAY,KAAKL;OACnB;GACH,MAAM,cAAc,KAAKH;GACzB,MAAM,eAAe,yBAAyB,KAAKC,aAAa;GAChE,KAAKO,YAAY,IAAI,eAAe;IAChC,OAAO,YAAY;IACnB,eAAe,GAAG,YAAY,OAAO;IACrC,mBAAmB,GAAG,YAAY,OAAO;IACzC,gBACI,KAAKN,iBAAiB,kBAAkB,aAAa;IACzD,SAAS,KAAKA,iBAAiB,WAAW,aAAa;GAC3D,CAAC;EACL;EAEJ,OAAO,KAAKM;CAChB;CAEA,IAAI,UAAyB;EACzB,IAAI,CAAC,KAAKC,UACN,IAAI,KAAKL,gBACL,KAAKK,WAAW,KAAKL;OAClB;GACH,MAAM,2BAA2B,IAAI,kBACjC,KAAK,YACL,KAAK,UACL,KAAKM,WAAW,CACpB;GACA,MAAM,uBAAuB,IAAI,cAAc,KAAK,UAAU;GAC9D,KAAKD,WAAW,uBAAuB;IACnC,UAAU,KAAKJ;IACf,MAAM,KAAKC;IACX,SAAS;KACL,cAAc,yBAAyB,cAAc;KACrD,cAAc,qBAAqB,yBAAyB;IAChE;GACJ,CAAC;EACL;EAEJ,OAAO,KAAKG;CAChB;CAEA,aAAwB;EAIpB,KAAKE,YAAY,6BAA6B,KAAK,OAAO;EAC1D,OAAO,KAAKA;CAChB;CAEA,eAA+C;EAC3C,IAAI,CAAC,KAAKC,sBAAsB;GAC5B,KAAKA,uBAAuB;GAC5B,KAAKC,YAAY,KAAK,yBAAyB;EACnD;EACA,OAAO,KAAKA;CAChB;CAEA,IAAI,OAAoB;EACpB,IAAI,CAAC,KAAKC,OACN,KAAKA,QACD,KAAKP,cAAc;GACf,YAAY,KAAK;GACjB,UAAU,KAAK;GACf,aAAa,KAAK;GAClB,aAAa,KAAKP;EACtB,CAAC,KAAK,IAAI,YAAY,KAAK,YAAY,KAAK,QAAQ;EAE5D,OAAO,KAAKc;CAChB;CAEA,IAAI,WAA4B;EAC5B,OAAQ,KAAKC,cAAc,IAAI,gBAAgB,KAAK,UAAU;CAClE;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKC,aAAa,IAAI,eAC1B,KAAK,YACL,KAAK,UACL,KAAKC,aAAa,CACtB;CACJ;CAEA,IAAI,cAAkC;EAClC,OAAQ,KAAKC,iBAAiB,IAAI,mBAC9B,KAAK,YACL,KAAK,UACL,KAAKD,aAAa,CACtB;CACJ;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKE,aAAa,IAAI,eAC1B,KAAK,YACL,KAAK,UACL,KAAKT,WAAW,CACpB;CACJ;CAEA,IAAI,iBAAwC;EACxC,OAAQ,KAAKU,oBAAoB,IAAI,sBACjC,KAAK,YACL,KAAKV,WAAW,CACpB;CACJ;CAEA,IAAI,aAAgC;EAChC,OAAQ,KAAKW,gBAAgB,IAAI,kBAC7B,KAAK,YACL,KAAK,UACL,KAAKX,WAAW,CACpB;CACJ;CAEA,IAAI,iBAAwC;EACxC,OAAQ,KAAKY,oBAAoB,IAAI,sBACjC,KAAK,YACL,KAAK,UACL,KAAKZ,WAAW,CACpB;CACJ;CAEA,IAAI,YAA8B;EAC9B,OAAQ,KAAKa,eAAe,IAAI,iBAC5B,KAAK,YACL,KAAK,UACL,KAAKb,WAAW,CACpB;CACJ;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKc,aAAa,IAAI,eAC1B,KAAK,YACL,KAAK,UACL,KAAKd,WAAW,CACpB;CACJ;CAEA,IAAI,YAA8B;EAC9B,OAAQ,KAAKe,eAAe,IAAI,iBAAiB,KAAK,YAAY,KAAK,QAAQ;CACnF;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKC,YAAY,IAAI,cACzB,KAAK,YACL,KAAK,UACL,KAAKT,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKiB,YAAY,IAAI,cACzB,KAAK,YACL,KAAK,UACL,KAAKV,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,WAA4B;EAC5B,OAAQ,KAAKkB,cAAc,IAAI,gBAC3B,KAAK,YACL,KAAK,UACL,KAAKX,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,WAA4B;EAC5B,OAAQ,KAAKmB,cAAc,IAAI,gBAC3B,KAAK,YACL,KAAK,UACL,KAAKZ,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,YAA8B;EAC9B,OAAQ,KAAKoB,eAAe,IAAI,iBAC5B,KAAK,YACL,KAAK,UACL,KAAKb,aAAa,CACtB;CACJ;CAEA,IAAI,oBAA8C;EAC9C,OAAQ,KAAKc,uBAAuB,IAAI,yBACpC,KAAK,YACL,KAAKd,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,mBAA4C;EAC5C,OAAQ,KAAKsB,sBAAsB,IAAI,wBACnC,KAAK,YACL,KAAKf,aAAa,GAClB;GACI,SAAS,KAAKjB,aAAa,MAAM;GACjC,uBAAuB,KAAKA,aAAa,UAAU;EACvD,GACA,KAAKU,WAAW,GAChB,KAAK,OACT;CACJ;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKuB,aAAa,IAAI,eAAe,KAAK,YAAY,KAAKhB,aAAa,CAAC;CACrF;CAEA,IAAI,cAAkC;EAClC,OAAQ,KAAKiB,iBAAiB,IAAI,mBAC9B,KAAK,YACL,KAAK,UACL,KAAKjB,aAAa,CACtB;CACJ;CAEA,IAAI,cAAkC;EAClC,OAAQ,KAAKkB,iBAAiB,IAAI,mBAAmB,KAAK,YAAY,KAAKlB,aAAa,CAAC;CAC7F;CAEA,IAAI,qBAAgD;EAChD,OAAQ,KAAKmB,wBAAwB,IAAI,0BAA0B,KAAK,UAAU;CACtF;CAEA,IAAI,aAAgC;EAChC,OAAQ,KAAKC,gBAAgB,IAAI,kBAAkB,KAAK,UAAU;CACtE;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKC,YAAY,IAAI,cACzB,KAAK,YACL,KAAK,UACL,KAAK5B,WAAW,CACpB;CACJ;CAEA,IAAI,MAAkB;EAClB,OAAQ,KAAK6B,SAAS,IAAI,WAAW,KAAK,UAAU;CACxD;CAEA,IAAI,MAAkB;EAClB,OAAQ,KAAKC,SAAS,IAAI,WAAW,KAAK,UAAU;CACxD;CAEA,IAAI,OAAoB;EACpB,OAAQ,KAAKC,UAAU,IAAI,YAAY,KAAK,YAAY,KAAKxB,aAAa,CAAC;CAC/E;CAEA,IAAI,oBAAsC;EACtC,OAAQ,KAAKyB,uBAAuB,IAAI,iBACpC,KAAK,YACL,KAAKzB,aAAa,CACtB;CACJ;;;;;CAMA,2BAAqE,CAErE;AACJ"}
+{"version":3,"file":"core-client.js","names":["#environment","#authProvider","#realtimeConfig","#configRealtimeClient","#configCatalog","#configCatalogSnapshot","#configCatalogCell","#createAuth","#realtime","#catalog","#getScales","#scales","#resolverInitialized","#resolver","#auth","#accounts","#apiKeys","#getResolver","#subaccounts","#candles","#chainAnalytics","#marketData","#marketOverview","#orderbook","#heatmap","#lifecycle","#trades","#orders","#triggers","#balances","#transfers","#internalTransfers","#tradingWithdraws","#deposit","#addressBook","#guardSigner","#socialVerification","#whiteboard","#zipper","#mfa","#claims","#vip","#fees","#tradingRateLimits"],"sources":["../src/core-client.ts"],"sourcesContent":["import type { Interceptor } from \"@connectrpc/connect\";\nimport { ConfigurationError } from \"./shared/errors.js\";\nimport {\n    createApiKeyEd25519AuthHeaders,\n    createTransports,\n    resolveJwtToken,\n    type AuthAndPublicApiTransports,\n    type Transports,\n    type JwtAuthProvider,\n    type ApiKeyEd25519AuthProvider,\n} from \"./shared/transports.js\";\nimport { parsePolyesterEnvironment, type PolyesterEnvironment } from \"./environment.js\";\nimport { AccountsService } from \"./services/accounts/index.js\";\nimport { ApiKeysService } from \"./services/api-keys/index.js\";\nimport { AuthService } from \"./services/auth/auth.js\";\nimport { SubaccountsService } from \"./services/subaccounts/index.js\";\nimport { CandlesService } from \"./services/candles/index.js\";\nimport { ChainAnalyticsService } from \"./services/chain-analytics/index.js\";\nimport { MarketDataService } from \"./services/market-data/index.js\";\nimport { MarketOverviewService } from \"./services/market-overview/index.js\";\nimport { OrderbookService } from \"./services/orderbook/index.js\";\nimport { HeatmapService } from \"./services/heatmap/index.js\";\nimport { LifecycleService } from \"./services/lifecycle/index.js\";\nimport { TradesService } from \"./services/trades/index.js\";\nimport { OrdersService } from \"./services/orders/index.js\";\nimport { TriggersService } from \"./services/triggers/index.js\";\nimport { BalancesService } from \"./services/balances/index.js\";\nimport { TransfersService } from \"./services/transfers/index.js\";\nimport { InternalTransfersService } from \"./services/internal-transfers/index.js\";\nimport { TradingWithdrawsService } from \"./services/trading-withdraws/index.js\";\nimport { DepositService } from \"./services/deposit/index.js\";\nimport { AddressBookService } from \"./services/address-book/index.js\";\nimport { GuardSignerService } from \"./services/guard-signer/index.js\";\nimport { SocialVerificationService } from \"./services/social-verification/index.js\";\nimport { WhiteboardService } from \"./services/whiteboard/index.js\";\nimport { ZipperService } from \"./services/zipper/index.js\";\nimport { MfaService } from \"./services/mfa/index.js\";\nimport { ClaimsService } from \"./services/claims/index.js\";\nimport { VipService } from \"./services/vip/index.js\";\nimport { FeesService } from \"./services/fees/index.js\";\nimport { RateLimitService } from \"./services/rate-limits/index.js\";\nimport type { SubaccountResolver } from \"./services/subaccount-resolver.js\";\nimport {\n    createPolyesterCatalog,\n    type CatalogSnapshot,\n    type CatalogSnapshotCell,\n    type ClientCatalog,\n} from \"./catalogs/index.js\";\nimport { createCatalogSdkScales, type SdkScales } from \"./shared/decimal-surface.js\";\nimport { RealtimeClient, type PolyesterRealtime, type RealtimeConfig } from \"./realtime/index.js\";\n\nfunction realtimeAuthFromProvider(\n    auth: JwtAuthProvider | ApiKeyEd25519AuthProvider | undefined,\n): Pick<RealtimeConfig, \"getAuthHeaders\" | \"hasAuth\"> {\n    if (!auth) return {};\n    if (auth.kind === \"jwt\") {\n        return {\n            getAuthHeaders: async () => {\n                const token = await resolveJwtToken(auth);\n                const headers: Record<string, string> = {};\n                if (token) headers.authorization = `Bearer ${token}`;\n                return headers;\n            },\n            hasAuth: () => {\n                try {\n                    const token = auth.getToken();\n                    if (token !== null && typeof token !== \"string\") {\n                        // Async credentials are validated by the token request.\n                        void token.catch(() => {});\n                        return true;\n                    }\n                    return token !== null && token.length > 0;\n                } catch {\n                    // Let the token request report provider failures as AuthenticationError.\n                    return true;\n                }\n            },\n        };\n    }\n    return {\n        getAuthHeaders: (request) =>\n            createApiKeyEd25519AuthHeaders(auth, {\n                url: request.url,\n                method: request.method,\n            }),\n        hasAuth: () => true,\n    };\n}\n\nexport type PolyesterRealtimeAuthConfig = Pick<RealtimeConfig, \"getAuthHeaders\" | \"hasAuth\">;\n\ninterface PolyesterClientCommonConfig {\n    environment: PolyesterEnvironment;\n    interceptors?: Interceptor[];\n    auth?: JwtAuthProvider | ApiKeyEd25519AuthProvider;\n    realtime?: PolyesterRealtimeAuthConfig;\n    /**\n     * Connect wire format. Defaults to binary for production performance.\n     * Use `json` for human-readable debugging.\n     */\n    wireFormat?: \"binary\" | \"json\";\n    /**\n     * Advanced: inject pre-built Connect transports (in-memory mocks, custom\n     * stacks). When provided, the SDK does not build its own transports and the\n     * built-in auth/error-mapping interceptors are NOT applied — the injected\n     * transports own their full interceptor chain.\n     */\n    transports?: Transports;\n    /**\n     * Advanced: inject a realtime implementation (in-memory mocks, custom\n     * stacks). When provided, the SDK skips constructing its Centrifuge-backed\n     * realtime client and the `realtime` auth config is ignored.\n     */\n    realtimeClient?: PolyesterRealtime;\n}\n\ntype PolyesterCatalogConfig =\n    | {\n          /** Client-owned catalog store. */\n          catalog: ClientCatalog;\n          catalogSnapshot?: never;\n          catalogCell?: never;\n      }\n    | {\n          catalog?: never;\n          /**\n           * Explicit initial catalog snapshot, commonly hydrated from server-rendered data.\n           * Combines with `catalogCell` as the cell's initial value without clobbering a\n           * pre-populated cell.\n           */\n          catalogSnapshot?: CatalogSnapshot;\n          /**\n           * External snapshot storage for the client-built catalog. A cell backed by a\n           * reactive source makes every catalog read reactive.\n           */\n          catalogCell?: CatalogSnapshotCell;\n      };\n\n/** Configuration shared by every Polyester client. */\nexport type PolyesterClientBaseConfig = PolyesterClientCommonConfig & PolyesterCatalogConfig;\n\n/** Configuration for the base Polyester client. */\nexport type PolyesterClientConfig = PolyesterClientBaseConfig;\n\n/** Preserves the exclusive catalog configuration while projecting client config fields. */\nexport function pickPolyesterCatalogConfig(\n    config: PolyesterClientBaseConfig,\n): PolyesterCatalogConfig {\n    return config.catalog === undefined\n        ? {\n              catalogSnapshot: config.catalogSnapshot,\n              catalogCell: config.catalogCell,\n          }\n        : { catalog: config.catalog };\n}\n\ninterface AuthServiceFactoryContext {\n    transports: AuthAndPublicApiTransports;\n    realtime: PolyesterRealtime;\n    subaccounts: SubaccountsService;\n    environment: PolyesterEnvironment;\n}\n\ninterface PolyesterClientRuntimeConfig {\n    createAuth?: (context: AuthServiceFactoryContext) => AuthService;\n}\n\n/**\n * Parses the configuration shared by every public client constructor.\n */\nexport function parsePolyesterClientConfig<TConfig extends PolyesterClientBaseConfig>(\n    config: TConfig,\n): TConfig {\n    if (typeof config !== \"object\" || config === null || Array.isArray(config)) {\n        throw new ConfigurationError(\"Client configuration must be an object.\");\n    }\n    const environment = parsePolyesterEnvironment(config.environment);\n    if (\n        config.wireFormat !== undefined &&\n        config.wireFormat !== \"binary\" &&\n        config.wireFormat !== \"json\"\n    ) {\n        throw new ConfigurationError('wireFormat must be either \"binary\" or \"json\".');\n    }\n    if (config.catalog && config.catalogSnapshot) {\n        throw new ConfigurationError(\"Provide either catalog or catalogSnapshot, not both.\");\n    }\n    if (config.catalog && config.catalogCell) {\n        throw new ConfigurationError(\"Provide either catalog or catalogCell, not both.\");\n    }\n\n    return Object.assign({}, config, { environment });\n}\n\n/**\n * Base SDK client that wires transports, realtime, catalogs, and all public service clients for a Polyester environment.\n *\n * Services are constructed lazily on first property access (and memoized) so\n * that creating a client — which happens for every SSR request in server\n * hooks — only pays for the services the caller actually touches.\n */\nexport class PolyesterClient {\n    protected readonly transports: Transports;\n\n    readonly #environment: PolyesterEnvironment;\n    readonly #authProvider: JwtAuthProvider | ApiKeyEd25519AuthProvider | undefined;\n    readonly #realtimeConfig: PolyesterRealtimeAuthConfig | undefined;\n    readonly #configRealtimeClient: PolyesterRealtime | undefined;\n    readonly #configCatalog: ClientCatalog | undefined;\n    readonly #configCatalogSnapshot: CatalogSnapshot | undefined;\n    readonly #configCatalogCell: CatalogSnapshotCell | undefined;\n    readonly #createAuth: PolyesterClientRuntimeConfig[\"createAuth\"];\n\n    #realtime: PolyesterRealtime | undefined;\n    #catalog: ClientCatalog | undefined;\n    #scales: SdkScales | undefined;\n    #resolver: SubaccountResolver | undefined;\n    #resolverInitialized = false;\n\n    #auth: AuthService | undefined;\n    #accounts: AccountsService | undefined;\n    #apiKeys: ApiKeysService | undefined;\n    #subaccounts: SubaccountsService | undefined;\n    #candles: CandlesService | undefined;\n    #chainAnalytics: ChainAnalyticsService | undefined;\n    #marketData: MarketDataService | undefined;\n    #marketOverview: MarketOverviewService | undefined;\n    #orderbook: OrderbookService | undefined;\n    #heatmap: HeatmapService | undefined;\n    #lifecycle: LifecycleService | undefined;\n    #trades: TradesService | undefined;\n    #orders: OrdersService | undefined;\n    #triggers: TriggersService | undefined;\n    #balances: BalancesService | undefined;\n    #transfers: TransfersService | undefined;\n    #internalTransfers: InternalTransfersService | undefined;\n    #tradingWithdraws: TradingWithdrawsService | undefined;\n    #deposit: DepositService | undefined;\n    #addressBook: AddressBookService | undefined;\n    #guardSigner: GuardSignerService | undefined;\n    #socialVerification: SocialVerificationService | undefined;\n    #whiteboard: WhiteboardService | undefined;\n    #zipper: ZipperService | undefined;\n    #mfa: MfaService | undefined;\n    #claims: ClaimsService | undefined;\n    #vip: VipService | undefined;\n    #fees: FeesService | undefined;\n    #tradingRateLimits: RateLimitService | undefined;\n\n    constructor(config: PolyesterClientConfig, runtime: PolyesterClientRuntimeConfig = {}) {\n        const parsedConfig = parsePolyesterClientConfig(config);\n        config = parsedConfig;\n        const interceptors = config.interceptors ?? [];\n        const { environment } = config;\n\n        this.transports =\n            config.transports ??\n            createTransports({\n                apiUrl: environment.apiUrl,\n                interceptors,\n                auth: config.auth,\n                wireFormat: config.wireFormat,\n            });\n\n        this.#environment = environment;\n        this.#authProvider = config.auth;\n        this.#realtimeConfig = config.realtime;\n        this.#configRealtimeClient = config.realtimeClient;\n        this.#configCatalog = config.catalog;\n        this.#configCatalogSnapshot = config.catalogSnapshot;\n        this.#configCatalogCell = config.catalogCell;\n        this.#createAuth = runtime.createAuth;\n    }\n\n    get realtime(): PolyesterRealtime {\n        if (!this.#realtime) {\n            if (this.#configRealtimeClient) {\n                this.#realtime = this.#configRealtimeClient;\n            } else {\n                const environment = this.#environment;\n                const realtimeAuth = realtimeAuthFromProvider(this.#authProvider);\n                this.#realtime = new RealtimeClient({\n                    wsUrl: environment.websocketUrl,\n                    tokenEndpoint: `${environment.apiUrl}/v1/rt/token`,\n                    subscribeEndpoint: `${environment.apiUrl}/v1/rt/subscribe`,\n                    getAuthHeaders:\n                        this.#realtimeConfig?.getAuthHeaders ?? realtimeAuth.getAuthHeaders,\n                    hasAuth: this.#realtimeConfig?.hasAuth ?? realtimeAuth.hasAuth,\n                });\n            }\n        }\n        return this.#realtime;\n    }\n\n    get catalog(): ClientCatalog {\n        if (!this.#catalog) {\n            if (this.#configCatalog) {\n                this.#catalog = this.#configCatalog;\n            } else {\n                const catalogRefreshMarketData = new MarketDataService(\n                    this.transports,\n                    this.realtime,\n                    this.#getScales(),\n                );\n                const catalogRefreshZipper = new ZipperService(this.transports);\n                this.#catalog = createPolyesterCatalog({\n                    snapshot: this.#configCatalogSnapshot,\n                    cell: this.#configCatalogCell,\n                    refresh: {\n                        market: () => catalogRefreshMarketData.getSpotConfig(),\n                        zipper: () => catalogRefreshZipper.getDepositWithdrawConfig(),\n                    },\n                });\n            }\n        }\n        return this.#catalog;\n    }\n\n    #getScales(): SdkScales {\n        // Lazy catalog binding: the resolver only dereferences `this.catalog` at\n        // call time. getSpotConfig() (the catalog's own refresh source) never\n        // awaits scale readiness.\n        this.#scales ??= createCatalogSdkScales(() => this.catalog);\n        return this.#scales;\n    }\n\n    #getResolver(): SubaccountResolver | undefined {\n        if (!this.#resolverInitialized) {\n            this.#resolverInitialized = true;\n            this.#resolver = this.createSubaccountResolver();\n        }\n        return this.#resolver;\n    }\n\n    get auth(): AuthService {\n        if (!this.#auth) {\n            this.#auth =\n                this.#createAuth?.({\n                    transports: this.transports,\n                    realtime: this.realtime,\n                    subaccounts: this.subaccounts,\n                    environment: this.#environment,\n                }) ?? new AuthService(this.transports, this.realtime);\n        }\n        return this.#auth;\n    }\n\n    get accounts(): AccountsService {\n        return (this.#accounts ??= new AccountsService(this.transports));\n    }\n\n    get apiKeys(): ApiKeysService {\n        return (this.#apiKeys ??= new ApiKeysService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get subaccounts(): SubaccountsService {\n        return (this.#subaccounts ??= new SubaccountsService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get candles(): CandlesService {\n        return (this.#candles ??= new CandlesService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get chainAnalytics(): ChainAnalyticsService {\n        return (this.#chainAnalytics ??= new ChainAnalyticsService(\n            this.transports,\n            this.#getScales(),\n        ));\n    }\n\n    get marketData(): MarketDataService {\n        return (this.#marketData ??= new MarketDataService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get marketOverview(): MarketOverviewService {\n        return (this.#marketOverview ??= new MarketOverviewService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get orderbook(): OrderbookService {\n        return (this.#orderbook ??= new OrderbookService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get heatmap(): HeatmapService {\n        return (this.#heatmap ??= new HeatmapService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get lifecycle(): LifecycleService {\n        return (this.#lifecycle ??= new LifecycleService(this.transports, this.realtime));\n    }\n\n    get trades(): TradesService {\n        return (this.#trades ??= new TradesService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get orders(): OrdersService {\n        return (this.#orders ??= new OrdersService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get triggers(): TriggersService {\n        return (this.#triggers ??= new TriggersService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get balances(): BalancesService {\n        return (this.#balances ??= new BalancesService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get transfers(): TransfersService {\n        return (this.#transfers ??= new TransfersService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get internalTransfers(): InternalTransfersService {\n        return (this.#internalTransfers ??= new InternalTransfersService(\n            this.transports,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get tradingWithdraws(): TradingWithdrawsService {\n        return (this.#tradingWithdraws ??= new TradingWithdrawsService(\n            this.transports,\n            this.#getResolver(),\n            {\n                chainId: this.#environment.chain.id,\n                tradingGatewayAddress: this.#environment.contracts.tradingGatewayAddress,\n            },\n            this.#getScales(),\n            this.catalog,\n        ));\n    }\n\n    get deposit(): DepositService {\n        return (this.#deposit ??= new DepositService(this.transports, this.#getResolver()));\n    }\n\n    get addressBook(): AddressBookService {\n        return (this.#addressBook ??= new AddressBookService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get guardSigner(): GuardSignerService {\n        return (this.#guardSigner ??= new GuardSignerService(this.transports, this.#getResolver()));\n    }\n\n    get socialVerification(): SocialVerificationService {\n        return (this.#socialVerification ??= new SocialVerificationService(this.transports));\n    }\n\n    get whiteboard(): WhiteboardService {\n        return (this.#whiteboard ??= new WhiteboardService(this.transports));\n    }\n\n    get zipper(): ZipperService {\n        return (this.#zipper ??= new ZipperService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get mfa(): MfaService {\n        return (this.#mfa ??= new MfaService(this.transports));\n    }\n\n    get claims(): ClaimsService {\n        return (this.#claims ??= new ClaimsService(this.transports));\n    }\n\n    get vip(): VipService {\n        return (this.#vip ??= new VipService(this.transports));\n    }\n\n    get fees(): FeesService {\n        return (this.#fees ??= new FeesService(this.transports, this.#getResolver()));\n    }\n\n    get tradingRateLimits(): RateLimitService {\n        return (this.#tradingRateLimits ??= new RateLimitService(\n            this.transports,\n            this.#getResolver(),\n        ));\n    }\n\n    /**\n     * Override in subclasses to provide a subaccount resolver.\n     * The resolver is called lazily when service methods are invoked.\n     */\n    protected createSubaccountResolver(): SubaccountResolver | undefined {\n        return undefined;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmDA,SAAS,yBACL,MACkD;CAClD,IAAI,CAAC,MAAM,OAAO,CAAC;CACnB,IAAI,KAAK,SAAS,OACd,OAAO;EACH,gBAAgB,YAAY;GACxB,MAAM,QAAQ,MAAM,gBAAgB,IAAI;GACxC,MAAM,UAAkC,CAAC;GACzC,IAAI,OAAO,QAAQ,gBAAgB,UAAU;GAC7C,OAAO;EACX;EACA,eAAe;GACX,IAAI;IACA,MAAM,QAAQ,KAAK,SAAS;IAC5B,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;KAE7C,MAAW,YAAY,CAAC,CAAC;KACzB,OAAO;IACX;IACA,OAAO,UAAU,QAAQ,MAAM,SAAS;GAC5C,QAAQ;IAEJ,OAAO;GACX;EACJ;CACJ;CAEJ,OAAO;EACH,iBAAiB,YACb,+BAA+B,MAAM;GACjC,KAAK,QAAQ;GACb,QAAQ,QAAQ;EACpB,CAAC;EACL,eAAe;CACnB;AACJ;;AA0DA,SAAgB,2BACZ,QACsB;CACtB,OAAO,OAAO,YAAY,KAAA,IACpB;EACI,iBAAiB,OAAO;EACxB,aAAa,OAAO;CACxB,IACA,EAAE,SAAS,OAAO,QAAQ;AACpC;;;;AAgBA,SAAgB,2BACZ,QACO;CACP,IAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GACrE,MAAM,IAAI,mBAAmB,yCAAyC;CAE1E,MAAM,cAAc,0BAA0B,OAAO,WAAW;CAChE,IACI,OAAO,eAAe,KAAA,KACtB,OAAO,eAAe,YACtB,OAAO,eAAe,QAEtB,MAAM,IAAI,mBAAmB,mDAA+C;CAEhF,IAAI,OAAO,WAAW,OAAO,iBACzB,MAAM,IAAI,mBAAmB,sDAAsD;CAEvF,IAAI,OAAO,WAAW,OAAO,aACzB,MAAM,IAAI,mBAAmB,kDAAkD;CAGnF,OAAO,OAAO,OAAO,CAAC,GAAG,QAAQ,EAAE,YAAY,CAAC;AACpD;;;;;;;;AASA,IAAa,kBAAb,MAA6B;CACzB;CAEA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACA,uBAAuB;CAEvB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAA+B,UAAwC,CAAC,GAAG;EAEnF,SADqB,2BAA2B,MAC5B;EACpB,MAAM,eAAe,OAAO,gBAAgB,CAAC;EAC7C,MAAM,EAAE,gBAAgB;EAExB,KAAK,aACD,OAAO,cACP,iBAAiB;GACb,QAAQ,YAAY;GACpB;GACA,MAAM,OAAO;GACb,YAAY,OAAO;EACvB,CAAC;EAEL,KAAKA,eAAe;EACpB,KAAKC,gBAAgB,OAAO;EAC5B,KAAKC,kBAAkB,OAAO;EAC9B,KAAKC,wBAAwB,OAAO;EACpC,KAAKC,iBAAiB,OAAO;EAC7B,KAAKC,yBAAyB,OAAO;EACrC,KAAKC,qBAAqB,OAAO;EACjC,KAAKC,cAAc,QAAQ;CAC/B;CAEA,IAAI,WAA8B;EAC9B,IAAI,CAAC,KAAKC,WACN,IAAI,KAAKL,uBACL,KAAKK,YAAY,KAAKL;OACnB;GACH,MAAM,cAAc,KAAKH;GACzB,MAAM,eAAe,yBAAyB,KAAKC,aAAa;GAChE,KAAKO,YAAY,IAAI,eAAe;IAChC,OAAO,YAAY;IACnB,eAAe,GAAG,YAAY,OAAO;IACrC,mBAAmB,GAAG,YAAY,OAAO;IACzC,gBACI,KAAKN,iBAAiB,kBAAkB,aAAa;IACzD,SAAS,KAAKA,iBAAiB,WAAW,aAAa;GAC3D,CAAC;EACL;EAEJ,OAAO,KAAKM;CAChB;CAEA,IAAI,UAAyB;EACzB,IAAI,CAAC,KAAKC,UACN,IAAI,KAAKL,gBACL,KAAKK,WAAW,KAAKL;OAClB;GACH,MAAM,2BAA2B,IAAI,kBACjC,KAAK,YACL,KAAK,UACL,KAAKM,WAAW,CACpB;GACA,MAAM,uBAAuB,IAAI,cAAc,KAAK,UAAU;GAC9D,KAAKD,WAAW,uBAAuB;IACnC,UAAU,KAAKJ;IACf,MAAM,KAAKC;IACX,SAAS;KACL,cAAc,yBAAyB,cAAc;KACrD,cAAc,qBAAqB,yBAAyB;IAChE;GACJ,CAAC;EACL;EAEJ,OAAO,KAAKG;CAChB;CAEA,aAAwB;EAIpB,KAAKE,YAAY,6BAA6B,KAAK,OAAO;EAC1D,OAAO,KAAKA;CAChB;CAEA,eAA+C;EAC3C,IAAI,CAAC,KAAKC,sBAAsB;GAC5B,KAAKA,uBAAuB;GAC5B,KAAKC,YAAY,KAAK,yBAAyB;EACnD;EACA,OAAO,KAAKA;CAChB;CAEA,IAAI,OAAoB;EACpB,IAAI,CAAC,KAAKC,OACN,KAAKA,QACD,KAAKP,cAAc;GACf,YAAY,KAAK;GACjB,UAAU,KAAK;GACf,aAAa,KAAK;GAClB,aAAa,KAAKP;EACtB,CAAC,KAAK,IAAI,YAAY,KAAK,YAAY,KAAK,QAAQ;EAE5D,OAAO,KAAKc;CAChB;CAEA,IAAI,WAA4B;EAC5B,OAAQ,KAAKC,cAAc,IAAI,gBAAgB,KAAK,UAAU;CAClE;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKC,aAAa,IAAI,eAC1B,KAAK,YACL,KAAK,UACL,KAAKC,aAAa,CACtB;CACJ;CAEA,IAAI,cAAkC;EAClC,OAAQ,KAAKC,iBAAiB,IAAI,mBAC9B,KAAK,YACL,KAAK,UACL,KAAKD,aAAa,CACtB;CACJ;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKE,aAAa,IAAI,eAC1B,KAAK,YACL,KAAK,UACL,KAAKT,WAAW,CACpB;CACJ;CAEA,IAAI,iBAAwC;EACxC,OAAQ,KAAKU,oBAAoB,IAAI,sBACjC,KAAK,YACL,KAAKV,WAAW,CACpB;CACJ;CAEA,IAAI,aAAgC;EAChC,OAAQ,KAAKW,gBAAgB,IAAI,kBAC7B,KAAK,YACL,KAAK,UACL,KAAKX,WAAW,CACpB;CACJ;CAEA,IAAI,iBAAwC;EACxC,OAAQ,KAAKY,oBAAoB,IAAI,sBACjC,KAAK,YACL,KAAK,UACL,KAAKZ,WAAW,CACpB;CACJ;CAEA,IAAI,YAA8B;EAC9B,OAAQ,KAAKa,eAAe,IAAI,iBAC5B,KAAK,YACL,KAAK,UACL,KAAKb,WAAW,CACpB;CACJ;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKc,aAAa,IAAI,eAC1B,KAAK,YACL,KAAK,UACL,KAAKd,WAAW,CACpB;CACJ;CAEA,IAAI,YAA8B;EAC9B,OAAQ,KAAKe,eAAe,IAAI,iBAAiB,KAAK,YAAY,KAAK,QAAQ;CACnF;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKC,YAAY,IAAI,cACzB,KAAK,YACL,KAAK,UACL,KAAKT,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKiB,YAAY,IAAI,cACzB,KAAK,YACL,KAAK,UACL,KAAKV,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,WAA4B;EAC5B,OAAQ,KAAKkB,cAAc,IAAI,gBAC3B,KAAK,YACL,KAAK,UACL,KAAKX,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,WAA4B;EAC5B,OAAQ,KAAKmB,cAAc,IAAI,gBAC3B,KAAK,YACL,KAAK,UACL,KAAKZ,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,YAA8B;EAC9B,OAAQ,KAAKoB,eAAe,IAAI,iBAC5B,KAAK,YACL,KAAK,UACL,KAAKb,aAAa,CACtB;CACJ;CAEA,IAAI,oBAA8C;EAC9C,OAAQ,KAAKc,uBAAuB,IAAI,yBACpC,KAAK,YACL,KAAKd,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,mBAA4C;EAC5C,OAAQ,KAAKsB,sBAAsB,IAAI,wBACnC,KAAK,YACL,KAAKf,aAAa,GAClB;GACI,SAAS,KAAKjB,aAAa,MAAM;GACjC,uBAAuB,KAAKA,aAAa,UAAU;EACvD,GACA,KAAKU,WAAW,GAChB,KAAK,OACT;CACJ;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKuB,aAAa,IAAI,eAAe,KAAK,YAAY,KAAKhB,aAAa,CAAC;CACrF;CAEA,IAAI,cAAkC;EAClC,OAAQ,KAAKiB,iBAAiB,IAAI,mBAC9B,KAAK,YACL,KAAK,UACL,KAAKjB,aAAa,CACtB;CACJ;CAEA,IAAI,cAAkC;EAClC,OAAQ,KAAKkB,iBAAiB,IAAI,mBAAmB,KAAK,YAAY,KAAKlB,aAAa,CAAC;CAC7F;CAEA,IAAI,qBAAgD;EAChD,OAAQ,KAAKmB,wBAAwB,IAAI,0BAA0B,KAAK,UAAU;CACtF;CAEA,IAAI,aAAgC;EAChC,OAAQ,KAAKC,gBAAgB,IAAI,kBAAkB,KAAK,UAAU;CACtE;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKC,YAAY,IAAI,cACzB,KAAK,YACL,KAAK,UACL,KAAK5B,WAAW,CACpB;CACJ;CAEA,IAAI,MAAkB;EAClB,OAAQ,KAAK6B,SAAS,IAAI,WAAW,KAAK,UAAU;CACxD;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKC,YAAY,IAAI,cAAc,KAAK,UAAU;CAC9D;CAEA,IAAI,MAAkB;EAClB,OAAQ,KAAKC,SAAS,IAAI,WAAW,KAAK,UAAU;CACxD;CAEA,IAAI,OAAoB;EACpB,OAAQ,KAAKC,UAAU,IAAI,YAAY,KAAK,YAAY,KAAKzB,aAAa,CAAC;CAC/E;CAEA,IAAI,oBAAsC;EACtC,OAAQ,KAAK0B,uBAAuB,IAAI,iBACpC,KAAK,YACL,KAAK1B,aAAa,CACtB;CACJ;;;;;CAMA,2BAAqE,CAErE;AACJ"}

package/dist/gen/auth/v1/auth_pb.d.ts

@@ -23,8 +23,10 @@ type CreateWalletChallengeRequest = Message<"auth.v1.CreateWalletChallengeReques
    */
   smartAccountAddress: string;
   /**
-   * EVM address selected in the wallet and written into the EIP-4361 message.
-   * For CREATE_SUBACCOUNT, this must equal smart_account_address.
+   * Address whose signature authorizes the challenge and that is written into
+   * the EIP-4361 message. For LOGIN, this must be an EOA that controls the
+   * target smart account. For CREATE_SUBACCOUNT, this must equal
+   * smart_account_address.
    *
    * @generated from field: string signer_address = 2;
    */
@@ -88,8 +90,9 @@ type LoginWithWalletRequest = Message<"auth.v1.LoginWithWalletRequest"> & {
    */
   smartAccountAddress: string;
   /**
-   * Signature over message using EIP-191 personal_sign semantics. Maximum
-   * length is 8192 characters to support universal wallet signatures.
+   * EOA signature over message using EIP-191 personal_sign semantics. A valid
+   * value is 65 bytes of hexadecimal with an optional 0x prefix. Requests are
+   * limited to 8192 characters.
    *
    * @generated from field: string signature = 3;
    */

package/dist/gen/auth/v1/auth_pb.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/auth_pb.ts"],"mappings":";;;;;;;;;;cAea,mBAAmB;;;;;;;KASpB,+BAA+B;;;;;;EAMzC;;;;;;;EAQA;;;;;;;EAQA;;;;;;EAOA,SAAS;;;;;;cAOE,oCAAoC,WAAW;;;;;;KAQhD,gCAAgC;;;;;;;EAO1C;;;;;;EAOA,YAAY;;;;;;cAOD,qCAAqC,WAAW;;;;;;;KASjD,yBAAyB;;;;;;;EAOnC;;;;;;;EAQA;;;;;;;EAQA;;;;;;;EAQA;;;;;;EAOA;;;;;;;EAQA;;;;;;cAOW,8BAA8B,WAAW;;;;;;;KAS1C,0BAA0B;;;;;;EAMpC;;;;;;EAOA,YAAY;;;;;;EAOZ;;;;;;EAOA;;;;;;EAOA,UAAU;;;;;;cAOC,+BAA+B,WAAW;;;;;;;KAS3C,YAAY;;;;;cAOX,iBAAiB,WAAW;;;;;;KAQ7B,aAAa;;;;;;EAMvB;;;;;;;;EASA;;;;;;EAOA;;;;;;;EAQA;;;;;;EAOA,UAAU;;;;;;cAOC,kBAAkB,WAAW;;;;;;KAQ9B,kBAAkB;;;;;;EAM5B,MAAM;;;;;;EAON;;;;;;cAOW,uBAAuB,WAAW;;;;;;KAQnC,qBAAqB;;;;;cAOpB,0BAA0B,WAAW;;;;;;;KAStC,sBAAsB;;;;;cAOrB,2BAA2B,WAAW;;;;;;aAQvC;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,8BAA8B,QAAQ;;;;;;aAQvC;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,qBAAqB,QAAQ;;;;;;cAQ7B,aAAa;;;;;;EAMxB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;;;;EAWjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe"}
+{"version":3,"file":"auth_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/auth_pb.ts"],"mappings":";;;;;;;;;;cAea,mBAAmB;;;;;;;KASpB,+BAA+B;;;;;;EAMzC;;;;;;;;;EAUA;;;;;;;EAQA;;;;;;EAOA,SAAS;;;;;;cAOE,oCAAoC,WAAW;;;;;;KAQhD,gCAAgC;;;;;;;EAO1C;;;;;;EAOA,YAAY;;;;;;cAOD,qCAAqC,WAAW;;;;;;;KASjD,yBAAyB;;;;;;;EAOnC;;;;;;;;EASA;;;;;;;EAQA;;;;;;;EAQA;;;;;;EAOA;;;;;;;EAQA;;;;;;cAOW,8BAA8B,WAAW;;;;;;;KAS1C,0BAA0B;;;;;;EAMpC;;;;;;EAOA,YAAY;;;;;;EAOZ;;;;;;EAOA;;;;;;EAOA,UAAU;;;;;;cAOC,+BAA+B,WAAW;;;;;;;KAS3C,YAAY;;;;;cAOX,iBAAiB,WAAW;;;;;;KAQ7B,aAAa;;;;;;EAMvB;;;;;;;;EASA;;;;;;EAOA;;;;;;;EAQA;;;;;;EAOA,UAAU;;;;;;cAOC,kBAAkB,WAAW;;;;;;KAQ9B,kBAAkB;;;;;;EAM5B,MAAM;;;;;;EAON;;;;;;cAOW,uBAAuB,WAAW;;;;;;KAQnC,qBAAqB;;;;;cAOpB,0BAA0B,WAAW;;;;;;;KAStC,sBAAsB;;;;;cAOrB,2BAA2B,WAAW;;;;;;aAQvC;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,8BAA8B,QAAQ;;;;;;aAQvC;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,qBAAqB,QAAQ;;;;;;cAQ7B,aAAa;;;;;;EAMxB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;;;;EAWjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe"}