@polyester/sdk 0.24.1 → 0.25.0

package/CHANGELOG.md

@@ -1,5 +1,15 @@
 # @polyester/sdk
 
+## 0.25.0
+
+### Minor Changes
+
+- Add daily reward claim status and claiming, and support good-til-date limit orders with expiry validation and order expiry output. ([#152](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/152))
+
+- Decode unknown proto enum values on read paths as `"unspecified"` instead of throwing a `ValidationError`. When the server adds a new enum member that this SDK build does not know, the affected field now degrades to `"unspecified"` and the rest of the payload stays readable. Public output unions are unchanged since they already included `"unspecified"`. ([#152](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/152))
+
+- Validate wallet login signatures as 65-byte hexadecimal EOA signatures while preserving universal signature support for subaccount creation. ([#152](https://github.com/Fabric-Labs/polyester-sdk-typescript/pull/152))
+
 ## 0.24.1
 
 ### Patch Changes

package/README.md

@@ -18,30 +18,36 @@ npm install @polyester/sdk
 
 ## Browser
 
-Polyester accounts are smart accounts, so you bring an owner wallet and the SDK
-derives the account signer. Nothing gets deployed just to log in.
+Polyester accounts are smart accounts. You bring an owner wallet, the SDK
+derives the smart account address, and the owner EOA signs the login challenge.
+Nothing gets deployed just to log in.
 
 ```ts
 import { PolyesterBrowserClient, POLYESTER_DEVNET_ENVIRONMENT } from "@polyester/sdk";
+import type { AccountSigner } from "@polyester/sdk";
 import { createPolyesterAccountSigner } from "@polyester/sdk/account-signer";
 
-const accountSigner = createPolyesterAccountSigner({
-    environment: POLYESTER_DEVNET_ENVIRONMENT,
-    owner,
-});
+const environment = POLYESTER_DEVNET_ENVIRONMENT;
+const { accountAddress } = createPolyesterAccountSigner({ environment, owner });
 
-const client = new PolyesterBrowserClient({
-    environment: POLYESTER_DEVNET_ENVIRONMENT,
-    accountSigner,
-});
+const accountSigner: AccountSigner = {
+    environmentFingerprint: environment.fingerprint,
+    accountAddress,
+    ownerAddress: owner.address,
+    // Login expects a raw 65-byte EIP-191 signature from the owner EOA.
+    signMessage: (message) => owner.signMessage({ message }),
+};
+
+const client = new PolyesterBrowserClient({ environment, accountSigner });
 
 await client.auth.login({ provider: "turnkey" });
 
 const { orders } = await client.orders.listOpen();
 ```
 
-See [docs/browser-login.md](docs/browser-login.md) for how account identity and
-owner metadata relate.
+`createPolyesterAccountSigner` on its own returns Safe/ERC-6492 wrapped
+signatures. Those are accepted for subaccount creation but rejected by login,
+which is why the quickstart only uses it to derive the account address.
 
 ## Server
 

package/dist/account-signer/create-polyester-account-signer.d.ts

@@ -11,16 +11,20 @@ interface CreatePolyesterAccountSignerParams {
   saltNonce?: bigint;
 }
 /**
- * Creates an AccountSigner for Polyester authentication without any RPC calls.
+ * Derives the Polyester Safe smart account address and a Safe/ERC-6492 signer
+ * without any RPC calls.
  *
- * This computes the Safe smart account address deterministically and produces
- * ERC-6492 wrapped signatures for counterfactual verification. The signature
- * matches what toSafeSmartAccount.signMessage() would produce for an undeployed Safe.
+ * The returned signMessage produces ERC-6492 wrapped signatures matching what
+ * toSafeSmartAccount.signMessage() would produce for an undeployed Safe. That
+ * form is accepted for subaccount creation but NOT for login, which requires the
+ * owner EOA's raw 65-byte EIP-191 signature. For login, use this only to derive
+ * accountAddress and build an AccountSigner whose signMessage calls
+ * owner.signMessage directly (see the README quickstart).
  *
  * For actual chain interactions (UserOperations), use createPolyesterSmartAccount instead.
  *
  * @param params - Owner account and optional salt nonce
- * @returns An AccountSigner that can be used for authentication
+ * @returns An AccountSigner with the derived Safe address and a wrapped signer
  */
 declare function createPolyesterAccountSigner(params: CreatePolyesterAccountSignerParams): AccountSigner;
 //#endregion

package/dist/account-signer/create-polyester-account-signer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-polyester-account-signer.d.ts","names":[],"sources":["../../src/account-signer/create-polyester-account-signer.ts"],"mappings":";;;;UAaiB;;EAEb,aAAa;;EAEb,OAAO;;EAEP;;;;;;;;;;;;;;iBAqDY,6BACZ,QAAQ,qCACT"}
+{"version":3,"file":"create-polyester-account-signer.d.ts","names":[],"sources":["../../src/account-signer/create-polyester-account-signer.ts"],"mappings":";;;;UAaiB;;EAEb,aAAa;;EAEb,OAAO;;EAEP;;;;;;;;;;;;;;;;;;iBAyDY,6BACZ,QAAQ,qCACT"}

package/dist/account-signer/create-polyester-account-signer.js

@@ -47,16 +47,20 @@ function wrapErc6492Signature(factoryAddress, factoryCalldata, signature) {
 	return concat([encoded, ERC6492_MAGIC_SUFFIX]);
 }
 /**
-* Creates an AccountSigner for Polyester authentication without any RPC calls.
+* Derives the Polyester Safe smart account address and a Safe/ERC-6492 signer
+* without any RPC calls.
 *
-* This computes the Safe smart account address deterministically and produces
-* ERC-6492 wrapped signatures for counterfactual verification. The signature
-* matches what toSafeSmartAccount.signMessage() would produce for an undeployed Safe.
+* The returned signMessage produces ERC-6492 wrapped signatures matching what
+* toSafeSmartAccount.signMessage() would produce for an undeployed Safe. That
+* form is accepted for subaccount creation but NOT for login, which requires the
+* owner EOA's raw 65-byte EIP-191 signature. For login, use this only to derive
+* accountAddress and build an AccountSigner whose signMessage calls
+* owner.signMessage directly (see the README quickstart).
 *
 * For actual chain interactions (UserOperations), use createPolyesterSmartAccount instead.
 *
 * @param params - Owner account and optional salt nonce
-* @returns An AccountSigner that can be used for authentication
+* @returns An AccountSigner with the derived Safe address and a wrapped signer
 */
 function createPolyesterAccountSigner(params) {
 	const { environment, owner, saltNonce = 0n } = params;

package/dist/account-signer/create-polyester-account-signer.js.map

@@ -1 +1 @@
-{"version":3,"file":"create-polyester-account-signer.js","names":[],"sources":["../../src/account-signer/create-polyester-account-signer.ts"],"sourcesContent":["import type { Address, Hex, LocalAccount } from \"viem\";\nimport { concat, encodeAbiParameters, hashMessage, hashTypedData, toBytes } from \"viem\";\nimport {\n    predictSafeAddressWithData,\n    type PredictSafeAddressParams,\n} from \"./predict-safe-address.js\";\nimport type { AccountSigner, HexAddress } from \"./types.js\";\nimport type { PolyesterEnvironment } from \"../environment.js\";\n\n/** ERC-6492 magic suffix for counterfactual signature verification */\nconst ERC6492_MAGIC_SUFFIX: Hex =\n    \"0x6492649264926492649264926492649264926492649264926492649264926492\";\n\nexport interface CreatePolyesterAccountSignerParams {\n    /** The environment this signer should authenticate against */\n    environment: PolyesterEnvironment;\n    /** The owner account (EOA) that will sign messages */\n    owner: LocalAccount;\n    /** Salt nonce for deriving different Safe addresses from the same owner (default: 0n) */\n    saltNonce?: bigint;\n}\n\n/**\n * Adjusts the V value in a signature for Safe's eth_sign verification.\n * Safe expects V to be 31+ for eth_sign signatures (27 base + 4 for eth_sign marker).\n */\nfunction adjustVInSignature(signature: Hex): Hex {\n    const ETHEREUM_V_VALUES = [0, 1, 27, 28];\n    const MIN_VALID_V_VALUE_FOR_SAFE_ECDSA = 27;\n\n    let signatureV = Number.parseInt(signature.slice(-2), 16);\n    if (!ETHEREUM_V_VALUES.includes(signatureV)) {\n        throw new Error(\"Invalid signature V value\");\n    }\n\n    // for eth_sign: add 27 if V < 27, then add 4\n    if (signatureV < MIN_VALID_V_VALUE_FOR_SAFE_ECDSA) {\n        signatureV += MIN_VALID_V_VALUE_FOR_SAFE_ECDSA;\n    }\n    signatureV += 4;\n\n    return (signature.slice(0, -2) + signatureV.toString(16).padStart(2, \"0\")) as Hex;\n}\n\n/**\n * Wraps a signature in ERC-6492 format for counterfactual verification.\n * This allows signature verification before the Safe is deployed.\n */\nfunction wrapErc6492Signature(factoryAddress: Address, factoryCalldata: Hex, signature: Hex): Hex {\n    const encoded = encodeAbiParameters(\n        [\n            { name: \"factory\", type: \"address\" },\n            { name: \"factoryCalldata\", type: \"bytes\" },\n            { name: \"signature\", type: \"bytes\" },\n        ],\n        [factoryAddress, factoryCalldata, signature],\n    );\n    return concat([encoded, ERC6492_MAGIC_SUFFIX]);\n}\n\n/**\n * Creates an AccountSigner for Polyester authentication without any RPC calls.\n *\n * This computes the Safe smart account address deterministically and produces\n * ERC-6492 wrapped signatures for counterfactual verification. The signature\n * matches what toSafeSmartAccount.signMessage() would produce for an undeployed Safe.\n *\n * For actual chain interactions (UserOperations), use createPolyesterSmartAccount instead.\n *\n * @param params - Owner account and optional salt nonce\n * @returns An AccountSigner that can be used for authentication\n */\nexport function createPolyesterAccountSigner(\n    params: CreatePolyesterAccountSignerParams,\n): AccountSigner {\n    const { environment, owner, saltNonce = 0n } = params;\n    const {\n        safeProxyFactoryAddress,\n        safeSingletonAddress,\n        safeModuleSetupAddress,\n        safe4337ModuleAddress,\n        multiSendAddress,\n    } = environment.accountAbstraction.safe;\n    const chainId = environment.chain.id;\n\n    const predictParams: PredictSafeAddressParams = {\n        owners: [owner.address],\n        saltNonce,\n        safeProxyFactoryAddress,\n        safeSingletonAddress,\n        safeModuleSetupAddress,\n        safe4337ModuleAddress,\n        multiSendAddress,\n    };\n\n    const { address, factoryCalldata } = predictSafeAddressWithData(predictParams);\n\n    return {\n        environmentFingerprint: environment.fingerprint,\n        accountAddress: address as HexAddress,\n        ownerAddress: owner.address as HexAddress,\n        signMessage: async (message: string): Promise<Hex> => {\n            // 1. hash the original message (what Safe calls generateSafeMessageMessage for strings)\n            const messageHash = hashMessage(message);\n\n            // 2. create EIP-712 typed data hash matching Safe's signMessage\n            const safeMessageHash = hashTypedData({\n                domain: {\n                    chainId,\n                    verifyingContract: address,\n                },\n                types: {\n                    SafeMessage: [{ name: \"message\", type: \"bytes\" }],\n                },\n                primaryType: \"SafeMessage\",\n                message: {\n                    message: messageHash,\n                },\n            });\n\n            // 3. sign the Safe message hash with raw bytes\n            const ownerSignature = await owner.signMessage({\n                message: { raw: toBytes(safeMessageHash) },\n            });\n\n            // 4. adjust V value for Safe's eth_sign verification\n            const innerSignature = adjustVInSignature(ownerSignature as Hex);\n\n            // 5. wrap in ERC-6492 format for counterfactual verification\n            return wrapErc6492Signature(safeProxyFactoryAddress, factoryCalldata, innerSignature);\n        },\n    };\n}\n"],"mappings":";;;;AAUA,MAAM,uBACF;;;;;AAeJ,SAAS,mBAAmB,WAAqB;CAC7C,MAAM,oBAAoB;EAAC;EAAG;EAAG;EAAI;CAAE;CACvC,MAAM,mCAAmC;CAEzC,IAAI,aAAa,OAAO,SAAS,UAAU,MAAM,EAAE,GAAG,EAAE;CACxD,IAAI,CAAC,kBAAkB,SAAS,UAAU,GACtC,MAAM,IAAI,MAAM,2BAA2B;CAI/C,IAAI,aAAa,kCACb,cAAc;CAElB,cAAc;CAEd,OAAQ,UAAU,MAAM,GAAG,EAAE,IAAI,WAAW,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG;AAC5E;;;;;AAMA,SAAS,qBAAqB,gBAAyB,iBAAsB,WAAqB;CAC9F,MAAM,UAAU,oBACZ;EACI;GAAE,MAAM;GAAW,MAAM;EAAU;EACnC;GAAE,MAAM;GAAmB,MAAM;EAAQ;EACzC;GAAE,MAAM;GAAa,MAAM;EAAQ;CACvC,GACA;EAAC;EAAgB;EAAiB;CAAS,CAC/C;CACA,OAAO,OAAO,CAAC,SAAS,oBAAoB,CAAC;AACjD;;;;;;;;;;;;;AAcA,SAAgB,6BACZ,QACa;CACb,MAAM,EAAE,aAAa,OAAO,YAAY,OAAO;CAC/C,MAAM,EACF,yBACA,sBACA,wBACA,uBACA,qBACA,YAAY,mBAAmB;CACnC,MAAM,UAAU,YAAY,MAAM;CAElC,MAAM,gBAA0C;EAC5C,QAAQ,CAAC,MAAM,OAAO;EACtB;EACA;EACA;EACA;EACA;EACA;CACJ;CAEA,MAAM,EAAE,SAAS,oBAAoB,2BAA2B,aAAa;CAE7E,OAAO;EACH,wBAAwB,YAAY;EACpC,gBAAgB;EAChB,cAAc,MAAM;EACpB,aAAa,OAAO,YAAkC;GAElD,MAAM,cAAc,YAAY,OAAO;GAGvC,MAAM,kBAAkB,cAAc;IAClC,QAAQ;KACJ;KACA,mBAAmB;IACvB;IACA,OAAO,EACH,aAAa,CAAC;KAAE,MAAM;KAAW,MAAM;IAAQ,CAAC,EACpD;IACA,aAAa;IACb,SAAS,EACL,SAAS,YACb;GACJ,CAAC;GAQD,MAAM,iBAAiB,mBAAmB,MALb,MAAM,YAAY,EAC3C,SAAS,EAAE,KAAK,QAAQ,eAAe,EAAE,EAC7C,CAAC,CAG8D;GAG/D,OAAO,qBAAqB,yBAAyB,iBAAiB,cAAc;EACxF;CACJ;AACJ"}
+{"version":3,"file":"create-polyester-account-signer.js","names":[],"sources":["../../src/account-signer/create-polyester-account-signer.ts"],"sourcesContent":["import type { Address, Hex, LocalAccount } from \"viem\";\nimport { concat, encodeAbiParameters, hashMessage, hashTypedData, toBytes } from \"viem\";\nimport {\n    predictSafeAddressWithData,\n    type PredictSafeAddressParams,\n} from \"./predict-safe-address.js\";\nimport type { AccountSigner, HexAddress } from \"./types.js\";\nimport type { PolyesterEnvironment } from \"../environment.js\";\n\n/** ERC-6492 magic suffix for counterfactual signature verification */\nconst ERC6492_MAGIC_SUFFIX: Hex =\n    \"0x6492649264926492649264926492649264926492649264926492649264926492\";\n\nexport interface CreatePolyesterAccountSignerParams {\n    /** The environment this signer should authenticate against */\n    environment: PolyesterEnvironment;\n    /** The owner account (EOA) that will sign messages */\n    owner: LocalAccount;\n    /** Salt nonce for deriving different Safe addresses from the same owner (default: 0n) */\n    saltNonce?: bigint;\n}\n\n/**\n * Adjusts the V value in a signature for Safe's eth_sign verification.\n * Safe expects V to be 31+ for eth_sign signatures (27 base + 4 for eth_sign marker).\n */\nfunction adjustVInSignature(signature: Hex): Hex {\n    const ETHEREUM_V_VALUES = [0, 1, 27, 28];\n    const MIN_VALID_V_VALUE_FOR_SAFE_ECDSA = 27;\n\n    let signatureV = Number.parseInt(signature.slice(-2), 16);\n    if (!ETHEREUM_V_VALUES.includes(signatureV)) {\n        throw new Error(\"Invalid signature V value\");\n    }\n\n    // for eth_sign: add 27 if V < 27, then add 4\n    if (signatureV < MIN_VALID_V_VALUE_FOR_SAFE_ECDSA) {\n        signatureV += MIN_VALID_V_VALUE_FOR_SAFE_ECDSA;\n    }\n    signatureV += 4;\n\n    return (signature.slice(0, -2) + signatureV.toString(16).padStart(2, \"0\")) as Hex;\n}\n\n/**\n * Wraps a signature in ERC-6492 format for counterfactual verification.\n * This allows signature verification before the Safe is deployed.\n */\nfunction wrapErc6492Signature(factoryAddress: Address, factoryCalldata: Hex, signature: Hex): Hex {\n    const encoded = encodeAbiParameters(\n        [\n            { name: \"factory\", type: \"address\" },\n            { name: \"factoryCalldata\", type: \"bytes\" },\n            { name: \"signature\", type: \"bytes\" },\n        ],\n        [factoryAddress, factoryCalldata, signature],\n    );\n    return concat([encoded, ERC6492_MAGIC_SUFFIX]);\n}\n\n/**\n * Derives the Polyester Safe smart account address and a Safe/ERC-6492 signer\n * without any RPC calls.\n *\n * The returned signMessage produces ERC-6492 wrapped signatures matching what\n * toSafeSmartAccount.signMessage() would produce for an undeployed Safe. That\n * form is accepted for subaccount creation but NOT for login, which requires the\n * owner EOA's raw 65-byte EIP-191 signature. For login, use this only to derive\n * accountAddress and build an AccountSigner whose signMessage calls\n * owner.signMessage directly (see the README quickstart).\n *\n * For actual chain interactions (UserOperations), use createPolyesterSmartAccount instead.\n *\n * @param params - Owner account and optional salt nonce\n * @returns An AccountSigner with the derived Safe address and a wrapped signer\n */\nexport function createPolyesterAccountSigner(\n    params: CreatePolyesterAccountSignerParams,\n): AccountSigner {\n    const { environment, owner, saltNonce = 0n } = params;\n    const {\n        safeProxyFactoryAddress,\n        safeSingletonAddress,\n        safeModuleSetupAddress,\n        safe4337ModuleAddress,\n        multiSendAddress,\n    } = environment.accountAbstraction.safe;\n    const chainId = environment.chain.id;\n\n    const predictParams: PredictSafeAddressParams = {\n        owners: [owner.address],\n        saltNonce,\n        safeProxyFactoryAddress,\n        safeSingletonAddress,\n        safeModuleSetupAddress,\n        safe4337ModuleAddress,\n        multiSendAddress,\n    };\n\n    const { address, factoryCalldata } = predictSafeAddressWithData(predictParams);\n\n    return {\n        environmentFingerprint: environment.fingerprint,\n        accountAddress: address as HexAddress,\n        ownerAddress: owner.address as HexAddress,\n        signMessage: async (message: string): Promise<Hex> => {\n            // 1. hash the original message (what Safe calls generateSafeMessageMessage for strings)\n            const messageHash = hashMessage(message);\n\n            // 2. create EIP-712 typed data hash matching Safe's signMessage\n            const safeMessageHash = hashTypedData({\n                domain: {\n                    chainId,\n                    verifyingContract: address,\n                },\n                types: {\n                    SafeMessage: [{ name: \"message\", type: \"bytes\" }],\n                },\n                primaryType: \"SafeMessage\",\n                message: {\n                    message: messageHash,\n                },\n            });\n\n            // 3. sign the Safe message hash with raw bytes\n            const ownerSignature = await owner.signMessage({\n                message: { raw: toBytes(safeMessageHash) },\n            });\n\n            // 4. adjust V value for Safe's eth_sign verification\n            const innerSignature = adjustVInSignature(ownerSignature as Hex);\n\n            // 5. wrap in ERC-6492 format for counterfactual verification\n            return wrapErc6492Signature(safeProxyFactoryAddress, factoryCalldata, innerSignature);\n        },\n    };\n}\n"],"mappings":";;;;AAUA,MAAM,uBACF;;;;;AAeJ,SAAS,mBAAmB,WAAqB;CAC7C,MAAM,oBAAoB;EAAC;EAAG;EAAG;EAAI;CAAE;CACvC,MAAM,mCAAmC;CAEzC,IAAI,aAAa,OAAO,SAAS,UAAU,MAAM,EAAE,GAAG,EAAE;CACxD,IAAI,CAAC,kBAAkB,SAAS,UAAU,GACtC,MAAM,IAAI,MAAM,2BAA2B;CAI/C,IAAI,aAAa,kCACb,cAAc;CAElB,cAAc;CAEd,OAAQ,UAAU,MAAM,GAAG,EAAE,IAAI,WAAW,SAAS,EAAE,CAAC,CAAC,SAAS,GAAG,GAAG;AAC5E;;;;;AAMA,SAAS,qBAAqB,gBAAyB,iBAAsB,WAAqB;CAC9F,MAAM,UAAU,oBACZ;EACI;GAAE,MAAM;GAAW,MAAM;EAAU;EACnC;GAAE,MAAM;GAAmB,MAAM;EAAQ;EACzC;GAAE,MAAM;GAAa,MAAM;EAAQ;CACvC,GACA;EAAC;EAAgB;EAAiB;CAAS,CAC/C;CACA,OAAO,OAAO,CAAC,SAAS,oBAAoB,CAAC;AACjD;;;;;;;;;;;;;;;;;AAkBA,SAAgB,6BACZ,QACa;CACb,MAAM,EAAE,aAAa,OAAO,YAAY,OAAO;CAC/C,MAAM,EACF,yBACA,sBACA,wBACA,uBACA,qBACA,YAAY,mBAAmB;CACnC,MAAM,UAAU,YAAY,MAAM;CAElC,MAAM,gBAA0C;EAC5C,QAAQ,CAAC,MAAM,OAAO;EACtB;EACA;EACA;EACA;EACA;EACA;CACJ;CAEA,MAAM,EAAE,SAAS,oBAAoB,2BAA2B,aAAa;CAE7E,OAAO;EACH,wBAAwB,YAAY;EACpC,gBAAgB;EAChB,cAAc,MAAM;EACpB,aAAa,OAAO,YAAkC;GAElD,MAAM,cAAc,YAAY,OAAO;GAGvC,MAAM,kBAAkB,cAAc;IAClC,QAAQ;KACJ;KACA,mBAAmB;IACvB;IACA,OAAO,EACH,aAAa,CAAC;KAAE,MAAM;KAAW,MAAM;IAAQ,CAAC,EACpD;IACA,aAAa;IACb,SAAS,EACL,SAAS,YACb;GACJ,CAAC;GAQD,MAAM,iBAAiB,mBAAmB,MALb,MAAM,YAAY,EAC3C,SAAS,EAAE,KAAK,QAAQ,eAAe,EAAE,EAC7C,CAAC,CAG8D;GAG/D,OAAO,qBAAqB,yBAAyB,iBAAiB,cAAc;EACxF;CACJ;AACJ"}

package/dist/account-signer/types.d.ts

@@ -4,8 +4,10 @@ type HexAddress = `0x${string}`;
 /**
  * Minimal account signer interface for SDK operations.
  *
- * The SDK authenticates the Polyester smart account address. The owner address
- * is optional metadata about the EOA or custody provider that controls it.
+ * The SDK authenticates the Polyester smart account address. When ownerAddress
+ * is present it is declared as the LOGIN challenge signer, and signMessage must
+ * return that EOA's raw 65-byte EIP-191 signature: login rejects Safe/ERC-6492
+ * wrapped signatures. Subaccount creation accepts either form.
  */
 interface AccountSigner {
   /** Fingerprint of the PolyesterEnvironment this signer was created for */
@@ -14,7 +16,11 @@ interface AccountSigner {
   readonly accountAddress: HexAddress;
   /** The owner/EOA address. Declared as the LOGIN challenge signer when present; otherwise accountAddress signs. */
   readonly ownerAddress?: HexAddress;
-  /** Sign the exact UTF-8 message with EIP-191 semantics for accountAddress (including smart-account wrapping when required). */
+  /**
+   * Sign the exact UTF-8 message with EIP-191 semantics. For login this must be
+   * the owner EOA's raw 65-byte signature (0x + 130 hex chars), not a
+   * smart-account wrapped one.
+   */
   signMessage(message: string): Promise<Hex>;
 }
 /**

package/dist/account-signer/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","names":[],"sources":["../../src/account-signer/types.ts"],"mappings":";;KAIY;;;;;;;UAQK;;WAEJ;;WAGA,gBAAgB;;WAGhB,eAAe;;EAGxB,YAAY,kBAAkB,QAAQ;;;;;;KAO9B,6BAA6B,uBAAuB,QAAQ;;;;;KAM5D,sBAAsB,gBAAgB;;;;iBAKlC,uBACZ,QAAQ,sBACT,UAAU;;;;iBA4BS,qBAClB,QAAQ,kCACT,QAAQ"}
+{"version":3,"file":"types.d.ts","names":[],"sources":["../../src/account-signer/types.ts"],"mappings":";;KAIY;;;;;;;;;UAUK;;WAEJ;;WAGA,gBAAgB;;WAGhB,eAAe;;;;;;EAOxB,YAAY,kBAAkB,QAAQ;;;;;;KAO9B,6BAA6B,uBAAuB,QAAQ;;;;;KAM5D,sBAAsB,gBAAgB;;;;iBAKlC,uBACZ,QAAQ,sBACT,UAAU;;;;iBA4BS,qBAClB,QAAQ,kCACT,QAAQ"}

package/dist/account-signer/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","names":[],"sources":["../../src/account-signer/types.ts"],"sourcesContent":["import type { Hex } from \"viem\";\nimport { isEvmAddress } from \"../utils/evm.js\";\nimport { ConfigurationError } from \"../shared/errors.js\";\n\nexport type HexAddress = `0x${string}`;\n\n/**\n * Minimal account signer interface for SDK operations.\n *\n * The SDK authenticates the Polyester smart account address. The owner address\n * is optional metadata about the EOA or custody provider that controls it.\n */\nexport interface AccountSigner {\n    /** Fingerprint of the PolyesterEnvironment this signer was created for */\n    readonly environmentFingerprint: string;\n\n    /** The smart account address (used for authentication and trading) */\n    readonly accountAddress: HexAddress;\n\n    /** The owner/EOA address. Declared as the LOGIN challenge signer when present; otherwise accountAddress signs. */\n    readonly ownerAddress?: HexAddress;\n\n    /** Sign the exact UTF-8 message with EIP-191 semantics for accountAddress (including smart-account wrapping when required). */\n    signMessage(message: string): Promise<Hex>;\n}\n\n/**\n * Factory function type for lazy account signer initialization.\n * Useful when the signer might not be available at client creation time.\n */\nexport type AccountSignerFactory = () => AccountSigner | null | Promise<AccountSigner | null>;\n\n/**\n * Account signer configuration for the client.\n * Can be a signer instance or a factory for lazy initialization.\n */\nexport type AccountSignerConfig = AccountSigner | AccountSignerFactory;\n\n/**\n * Helper to check if an account signer config is a factory function.\n */\nexport function isAccountSignerFactory(\n    config: AccountSignerConfig,\n): config is AccountSignerFactory {\n    return typeof config === \"function\";\n}\n\n/**\n * Asserts that a value implements the account signer contract.\n */\nexport function assertAccountSigner(value: AccountSigner): void {\n    if (typeof value !== \"object\" || value === null) {\n        throw new ConfigurationError(\"Account signer must be an object or factory function.\");\n    }\n    if (!value.environmentFingerprint) {\n        throw new ConfigurationError(\"Account signer must include an environmentFingerprint.\");\n    }\n    if (!isEvmAddress(value.accountAddress)) {\n        throw new ConfigurationError(\"Account signer must include a valid accountAddress.\");\n    }\n    if (value.ownerAddress && !isEvmAddress(value.ownerAddress)) {\n        throw new ConfigurationError(\"Account signer ownerAddress must be a valid address.\");\n    }\n    if (typeof value.signMessage !== \"function\") {\n        throw new ConfigurationError(\"Account signer must include a signMessage function.\");\n    }\n}\n\n/**\n * Helper to resolve an account signer from config.\n */\nexport async function resolveAccountSigner(\n    config: AccountSignerConfig | undefined,\n): Promise<AccountSigner | null> {\n    if (!config) return null;\n    const accountSigner = isAccountSignerFactory(config) ? await config() : config;\n    if (accountSigner) assertAccountSigner(accountSigner);\n    return accountSigner;\n}\n"],"mappings":";;;;;;AAyCA,SAAgB,uBACZ,QAC8B;CAC9B,OAAO,OAAO,WAAW;AAC7B;;;;AAKA,SAAgB,oBAAoB,OAA4B;CAC5D,IAAI,OAAO,UAAU,YAAY,UAAU,MACvC,MAAM,IAAI,mBAAmB,uDAAuD;CAExF,IAAI,CAAC,MAAM,wBACP,MAAM,IAAI,mBAAmB,wDAAwD;CAEzF,IAAI,CAAC,aAAa,MAAM,cAAc,GAClC,MAAM,IAAI,mBAAmB,qDAAqD;CAEtF,IAAI,MAAM,gBAAgB,CAAC,aAAa,MAAM,YAAY,GACtD,MAAM,IAAI,mBAAmB,sDAAsD;CAEvF,IAAI,OAAO,MAAM,gBAAgB,YAC7B,MAAM,IAAI,mBAAmB,qDAAqD;AAE1F;;;;AAKA,eAAsB,qBAClB,QAC6B;CAC7B,IAAI,CAAC,QAAQ,OAAO;CACpB,MAAM,gBAAgB,uBAAuB,MAAM,IAAI,MAAM,OAAO,IAAI;CACxE,IAAI,eAAe,oBAAoB,aAAa;CACpD,OAAO;AACX"}
+{"version":3,"file":"types.js","names":[],"sources":["../../src/account-signer/types.ts"],"sourcesContent":["import type { Hex } from \"viem\";\nimport { isEvmAddress } from \"../utils/evm.js\";\nimport { ConfigurationError } from \"../shared/errors.js\";\n\nexport type HexAddress = `0x${string}`;\n\n/**\n * Minimal account signer interface for SDK operations.\n *\n * The SDK authenticates the Polyester smart account address. When ownerAddress\n * is present it is declared as the LOGIN challenge signer, and signMessage must\n * return that EOA's raw 65-byte EIP-191 signature: login rejects Safe/ERC-6492\n * wrapped signatures. Subaccount creation accepts either form.\n */\nexport interface AccountSigner {\n    /** Fingerprint of the PolyesterEnvironment this signer was created for */\n    readonly environmentFingerprint: string;\n\n    /** The smart account address (used for authentication and trading) */\n    readonly accountAddress: HexAddress;\n\n    /** The owner/EOA address. Declared as the LOGIN challenge signer when present; otherwise accountAddress signs. */\n    readonly ownerAddress?: HexAddress;\n\n    /**\n     * Sign the exact UTF-8 message with EIP-191 semantics. For login this must be\n     * the owner EOA's raw 65-byte signature (0x + 130 hex chars), not a\n     * smart-account wrapped one.\n     */\n    signMessage(message: string): Promise<Hex>;\n}\n\n/**\n * Factory function type for lazy account signer initialization.\n * Useful when the signer might not be available at client creation time.\n */\nexport type AccountSignerFactory = () => AccountSigner | null | Promise<AccountSigner | null>;\n\n/**\n * Account signer configuration for the client.\n * Can be a signer instance or a factory for lazy initialization.\n */\nexport type AccountSignerConfig = AccountSigner | AccountSignerFactory;\n\n/**\n * Helper to check if an account signer config is a factory function.\n */\nexport function isAccountSignerFactory(\n    config: AccountSignerConfig,\n): config is AccountSignerFactory {\n    return typeof config === \"function\";\n}\n\n/**\n * Asserts that a value implements the account signer contract.\n */\nexport function assertAccountSigner(value: AccountSigner): void {\n    if (typeof value !== \"object\" || value === null) {\n        throw new ConfigurationError(\"Account signer must be an object or factory function.\");\n    }\n    if (!value.environmentFingerprint) {\n        throw new ConfigurationError(\"Account signer must include an environmentFingerprint.\");\n    }\n    if (!isEvmAddress(value.accountAddress)) {\n        throw new ConfigurationError(\"Account signer must include a valid accountAddress.\");\n    }\n    if (value.ownerAddress && !isEvmAddress(value.ownerAddress)) {\n        throw new ConfigurationError(\"Account signer ownerAddress must be a valid address.\");\n    }\n    if (typeof value.signMessage !== \"function\") {\n        throw new ConfigurationError(\"Account signer must include a signMessage function.\");\n    }\n}\n\n/**\n * Helper to resolve an account signer from config.\n */\nexport async function resolveAccountSigner(\n    config: AccountSignerConfig | undefined,\n): Promise<AccountSigner | null> {\n    if (!config) return null;\n    const accountSigner = isAccountSignerFactory(config) ? await config() : config;\n    if (accountSigner) assertAccountSigner(accountSigner);\n    return accountSigner;\n}\n"],"mappings":";;;;;;AA+CA,SAAgB,uBACZ,QAC8B;CAC9B,OAAO,OAAO,WAAW;AAC7B;;;;AAKA,SAAgB,oBAAoB,OAA4B;CAC5D,IAAI,OAAO,UAAU,YAAY,UAAU,MACvC,MAAM,IAAI,mBAAmB,uDAAuD;CAExF,IAAI,CAAC,MAAM,wBACP,MAAM,IAAI,mBAAmB,wDAAwD;CAEzF,IAAI,CAAC,aAAa,MAAM,cAAc,GAClC,MAAM,IAAI,mBAAmB,qDAAqD;CAEtF,IAAI,MAAM,gBAAgB,CAAC,aAAa,MAAM,YAAY,GACtD,MAAM,IAAI,mBAAmB,sDAAsD;CAEvF,IAAI,OAAO,MAAM,gBAAgB,YAC7B,MAAM,IAAI,mBAAmB,qDAAqD;AAE1F;;;;AAKA,eAAsB,qBAClB,QAC6B;CAC7B,IAAI,CAAC,QAAQ,OAAO;CACpB,MAAM,gBAAgB,uBAAuB,MAAM,IAAI,MAAM,OAAO,IAAI;CACxE,IAAI,eAAe,oBAAoB,aAAa;CACpD,OAAO;AACX"}

package/dist/core-client.d.ts

@@ -55,6 +55,8 @@ import { ZipperService } from "./services/zipper/zipper.js";
 import "./services/zipper/index.js";
 import { MfaService } from "./services/mfa/mfa.js";
 import "./services/mfa/index.js";
+import { ClaimsService } from "./services/claims/claims.js";
+import "./services/claims/index.js";
 import { VipService } from "./services/vip/vip.js";
 import "./services/vip/index.js";
 import { FeesService } from "./services/fees/fees.js";
@@ -158,6 +160,7 @@ declare class PolyesterClient {
   get whiteboard(): WhiteboardService;
   get zipper(): ZipperService;
   get mfa(): MfaService;
+  get claims(): ClaimsService;
   get vip(): VipService;
   get fees(): FeesService;
   get tradingRateLimits(): RateLimitService;

package/dist/core-client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"core-client.d.ts","names":[],"sources":["../src/core-client.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAwFY,8BAA8B,KAAK;UAErC;EACN,aAAa;EACb,eAAe;EACf,OAAO,kBAAkB;EACzB,WAAW;;;;;EAKX;;;;;;;EAOA,aAAa;;;;;;EAMb,iBAAiB;;KAGhB;;EAGK,SAAS;EACT;EACA;;EAGA;;;;;;EAMA,kBAAkB;;;;;EAKlB,cAAc;;;KAIZ,4BAA4B,8BAA8B;;KAG1D,wBAAwB;UAc1B;EACN,YAAY;EACZ,UAAU;EACV,aAAa;EACb,aAAa;;UAGP;EACN,cAAc,SAAS,8BAA8B;;;;;;;;;cAqC5C;;qBACU,YAAY;EA8CnB,YAAA,QAAQ,uBAAuB,UAAS;MAyBhD,YAAY;MAoBZ,WAAW;MAwCX,QAAQ;MAaR,YAAY;MAIZ,WAAW;MAQX,eAAe;MAQf,WAAW;MAQX,kBAAkB;MAOlB,cAAc;MAQd,kBAAkB;MAQlB,aAAa;MAQb,WAAW;MAQX,aAAa;MAIb,UAAU;MASV,UAAU;MASV,YAAY;MASZ,YAAY;MASZ,aAAa;MAQb,qBAAqB;MAQrB,oBAAoB;MAapB,WAAW;MAIX,eAAe;MAQf,eAAe;MAIf,sBAAsB;MAItB,cAAc;MAId,UAAU;MAQV,OAAO;MAIP,OAAO;MAIP,QAAQ;MAIR,qBAAqB;;;;;YAWf,4BAA4B"}
+{"version":3,"file":"core-client.d.ts","names":[],"sources":["../src/core-client.ts"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAyFY,8BAA8B,KAAK;UAErC;EACN,aAAa;EACb,eAAe;EACf,OAAO,kBAAkB;EACzB,WAAW;;;;;EAKX;;;;;;;EAOA,aAAa;;;;;;EAMb,iBAAiB;;KAGhB;;EAGK,SAAS;EACT;EACA;;EAGA;;;;;;EAMA,kBAAkB;;;;;EAKlB,cAAc;;;KAIZ,4BAA4B,8BAA8B;;KAG1D,wBAAwB;UAc1B;EACN,YAAY;EACZ,UAAU;EACV,aAAa;EACb,aAAa;;UAGP;EACN,cAAc,SAAS,8BAA8B;;;;;;;;;cAqC5C;;qBACU,YAAY;EA+CnB,YAAA,QAAQ,uBAAuB,UAAS;MAyBhD,YAAY;MAoBZ,WAAW;MAwCX,QAAQ;MAaR,YAAY;MAIZ,WAAW;MAQX,eAAe;MAQf,WAAW;MAQX,kBAAkB;MAOlB,cAAc;MAQd,kBAAkB;MAQlB,aAAa;MAQb,WAAW;MAQX,aAAa;MAIb,UAAU;MASV,UAAU;MASV,YAAY;MASZ,YAAY;MASZ,aAAa;MAQb,qBAAqB;MAQrB,oBAAoB;MAapB,WAAW;MAIX,eAAe;MAQf,eAAe;MAIf,sBAAsB;MAItB,cAAc;MAId,UAAU;MAQV,OAAO;MAIP,UAAU;MAIV,OAAO;MAIP,QAAQ;MAIR,qBAAqB;;;;;YAWf,4BAA4B"}

package/dist/core-client.js

@@ -27,6 +27,7 @@ import { SocialVerificationService } from "./services/social-verification/social
 import { WhiteboardService } from "./services/whiteboard/whiteboard.js";
 import { ZipperService } from "./services/zipper/zipper.js";
 import { MfaService } from "./services/mfa/mfa.js";
+import { ClaimsService } from "./services/claims/claims.js";
 import { VipService } from "./services/vip/vip.js";
 import { FeesService } from "./services/fees/fees.js";
 import { RateLimitService } from "./services/rate-limits/rate-limits.js";
@@ -128,6 +129,7 @@ var PolyesterClient = class {
 	#whiteboard;
 	#zipper;
 	#mfa;
+	#claims;
 	#vip;
 	#fees;
 	#tradingRateLimits;
@@ -276,6 +278,9 @@ var PolyesterClient = class {
 	get mfa() {
 		return this.#mfa ??= new MfaService(this.transports);
 	}
+	get claims() {
+		return this.#claims ??= new ClaimsService(this.transports);
+	}
 	get vip() {
 		return this.#vip ??= new VipService(this.transports);
 	}

package/dist/core-client.js.map

@@ -1 +1 @@
-{"version":3,"file":"core-client.js","names":["#environment","#authProvider","#realtimeConfig","#configRealtimeClient","#configCatalog","#configCatalogSnapshot","#configCatalogCell","#createAuth","#realtime","#catalog","#getScales","#scales","#resolverInitialized","#resolver","#auth","#accounts","#apiKeys","#getResolver","#subaccounts","#candles","#chainAnalytics","#marketData","#marketOverview","#orderbook","#heatmap","#lifecycle","#trades","#orders","#triggers","#balances","#transfers","#internalTransfers","#tradingWithdraws","#deposit","#addressBook","#guardSigner","#socialVerification","#whiteboard","#zipper","#mfa","#vip","#fees","#tradingRateLimits"],"sources":["../src/core-client.ts"],"sourcesContent":["import type { Interceptor } from \"@connectrpc/connect\";\nimport { ConfigurationError } from \"./shared/errors.js\";\nimport {\n    createApiKeyEd25519AuthHeaders,\n    createTransports,\n    resolveJwtToken,\n    type AuthAndPublicApiTransports,\n    type Transports,\n    type JwtAuthProvider,\n    type ApiKeyEd25519AuthProvider,\n} from \"./shared/transports.js\";\nimport { parsePolyesterEnvironment, type PolyesterEnvironment } from \"./environment.js\";\nimport { AccountsService } from \"./services/accounts/index.js\";\nimport { ApiKeysService } from \"./services/api-keys/index.js\";\nimport { AuthService } from \"./services/auth/auth.js\";\nimport { SubaccountsService } from \"./services/subaccounts/index.js\";\nimport { CandlesService } from \"./services/candles/index.js\";\nimport { ChainAnalyticsService } from \"./services/chain-analytics/index.js\";\nimport { MarketDataService } from \"./services/market-data/index.js\";\nimport { MarketOverviewService } from \"./services/market-overview/index.js\";\nimport { OrderbookService } from \"./services/orderbook/index.js\";\nimport { HeatmapService } from \"./services/heatmap/index.js\";\nimport { LifecycleService } from \"./services/lifecycle/index.js\";\nimport { TradesService } from \"./services/trades/index.js\";\nimport { OrdersService } from \"./services/orders/index.js\";\nimport { TriggersService } from \"./services/triggers/index.js\";\nimport { BalancesService } from \"./services/balances/index.js\";\nimport { TransfersService } from \"./services/transfers/index.js\";\nimport { InternalTransfersService } from \"./services/internal-transfers/index.js\";\nimport { TradingWithdrawsService } from \"./services/trading-withdraws/index.js\";\nimport { DepositService } from \"./services/deposit/index.js\";\nimport { AddressBookService } from \"./services/address-book/index.js\";\nimport { GuardSignerService } from \"./services/guard-signer/index.js\";\nimport { SocialVerificationService } from \"./services/social-verification/index.js\";\nimport { WhiteboardService } from \"./services/whiteboard/index.js\";\nimport { ZipperService } from \"./services/zipper/index.js\";\nimport { MfaService } from \"./services/mfa/index.js\";\nimport { VipService } from \"./services/vip/index.js\";\nimport { FeesService } from \"./services/fees/index.js\";\nimport { RateLimitService } from \"./services/rate-limits/index.js\";\nimport type { SubaccountResolver } from \"./services/subaccount-resolver.js\";\nimport {\n    createPolyesterCatalog,\n    type CatalogSnapshot,\n    type CatalogSnapshotCell,\n    type ClientCatalog,\n} from \"./catalogs/index.js\";\nimport { createCatalogSdkScales, type SdkScales } from \"./shared/decimal-surface.js\";\nimport { RealtimeClient, type PolyesterRealtime, type RealtimeConfig } from \"./realtime/index.js\";\n\nfunction realtimeAuthFromProvider(\n    auth: JwtAuthProvider | ApiKeyEd25519AuthProvider | undefined,\n): Pick<RealtimeConfig, \"getAuthHeaders\" | \"hasAuth\"> {\n    if (!auth) return {};\n    if (auth.kind === \"jwt\") {\n        return {\n            getAuthHeaders: async () => {\n                const token = await resolveJwtToken(auth);\n                const headers: Record<string, string> = {};\n                if (token) headers.authorization = `Bearer ${token}`;\n                return headers;\n            },\n            hasAuth: () => {\n                try {\n                    const token = auth.getToken();\n                    if (token !== null && typeof token !== \"string\") {\n                        // Async credentials are validated by the token request.\n                        void token.catch(() => {});\n                        return true;\n                    }\n                    return token !== null && token.length > 0;\n                } catch {\n                    // Let the token request report provider failures as AuthenticationError.\n                    return true;\n                }\n            },\n        };\n    }\n    return {\n        getAuthHeaders: (request) =>\n            createApiKeyEd25519AuthHeaders(auth, {\n                url: request.url,\n                method: request.method,\n            }),\n        hasAuth: () => true,\n    };\n}\n\nexport type PolyesterRealtimeAuthConfig = Pick<RealtimeConfig, \"getAuthHeaders\" | \"hasAuth\">;\n\ninterface PolyesterClientCommonConfig {\n    environment: PolyesterEnvironment;\n    interceptors?: Interceptor[];\n    auth?: JwtAuthProvider | ApiKeyEd25519AuthProvider;\n    realtime?: PolyesterRealtimeAuthConfig;\n    /**\n     * Connect wire format. Defaults to binary for production performance.\n     * Use `json` for human-readable debugging.\n     */\n    wireFormat?: \"binary\" | \"json\";\n    /**\n     * Advanced: inject pre-built Connect transports (in-memory mocks, custom\n     * stacks). When provided, the SDK does not build its own transports and the\n     * built-in auth/error-mapping interceptors are NOT applied — the injected\n     * transports own their full interceptor chain.\n     */\n    transports?: Transports;\n    /**\n     * Advanced: inject a realtime implementation (in-memory mocks, custom\n     * stacks). When provided, the SDK skips constructing its Centrifuge-backed\n     * realtime client and the `realtime` auth config is ignored.\n     */\n    realtimeClient?: PolyesterRealtime;\n}\n\ntype PolyesterCatalogConfig =\n    | {\n          /** Client-owned catalog store. */\n          catalog: ClientCatalog;\n          catalogSnapshot?: never;\n          catalogCell?: never;\n      }\n    | {\n          catalog?: never;\n          /**\n           * Explicit initial catalog snapshot, commonly hydrated from server-rendered data.\n           * Combines with `catalogCell` as the cell's initial value without clobbering a\n           * pre-populated cell.\n           */\n          catalogSnapshot?: CatalogSnapshot;\n          /**\n           * External snapshot storage for the client-built catalog. A cell backed by a\n           * reactive source makes every catalog read reactive.\n           */\n          catalogCell?: CatalogSnapshotCell;\n      };\n\n/** Configuration shared by every Polyester client. */\nexport type PolyesterClientBaseConfig = PolyesterClientCommonConfig & PolyesterCatalogConfig;\n\n/** Configuration for the base Polyester client. */\nexport type PolyesterClientConfig = PolyesterClientBaseConfig;\n\n/** Preserves the exclusive catalog configuration while projecting client config fields. */\nexport function pickPolyesterCatalogConfig(\n    config: PolyesterClientBaseConfig,\n): PolyesterCatalogConfig {\n    return config.catalog === undefined\n        ? {\n              catalogSnapshot: config.catalogSnapshot,\n              catalogCell: config.catalogCell,\n          }\n        : { catalog: config.catalog };\n}\n\ninterface AuthServiceFactoryContext {\n    transports: AuthAndPublicApiTransports;\n    realtime: PolyesterRealtime;\n    subaccounts: SubaccountsService;\n    environment: PolyesterEnvironment;\n}\n\ninterface PolyesterClientRuntimeConfig {\n    createAuth?: (context: AuthServiceFactoryContext) => AuthService;\n}\n\n/**\n * Parses the configuration shared by every public client constructor.\n */\nexport function parsePolyesterClientConfig<TConfig extends PolyesterClientBaseConfig>(\n    config: TConfig,\n): TConfig {\n    if (typeof config !== \"object\" || config === null || Array.isArray(config)) {\n        throw new ConfigurationError(\"Client configuration must be an object.\");\n    }\n    const environment = parsePolyesterEnvironment(config.environment);\n    if (\n        config.wireFormat !== undefined &&\n        config.wireFormat !== \"binary\" &&\n        config.wireFormat !== \"json\"\n    ) {\n        throw new ConfigurationError('wireFormat must be either \"binary\" or \"json\".');\n    }\n    if (config.catalog && config.catalogSnapshot) {\n        throw new ConfigurationError(\"Provide either catalog or catalogSnapshot, not both.\");\n    }\n    if (config.catalog && config.catalogCell) {\n        throw new ConfigurationError(\"Provide either catalog or catalogCell, not both.\");\n    }\n\n    return Object.assign({}, config, { environment });\n}\n\n/**\n * Base SDK client that wires transports, realtime, catalogs, and all public service clients for a Polyester environment.\n *\n * Services are constructed lazily on first property access (and memoized) so\n * that creating a client — which happens for every SSR request in server\n * hooks — only pays for the services the caller actually touches.\n */\nexport class PolyesterClient {\n    protected readonly transports: Transports;\n\n    readonly #environment: PolyesterEnvironment;\n    readonly #authProvider: JwtAuthProvider | ApiKeyEd25519AuthProvider | undefined;\n    readonly #realtimeConfig: PolyesterRealtimeAuthConfig | undefined;\n    readonly #configRealtimeClient: PolyesterRealtime | undefined;\n    readonly #configCatalog: ClientCatalog | undefined;\n    readonly #configCatalogSnapshot: CatalogSnapshot | undefined;\n    readonly #configCatalogCell: CatalogSnapshotCell | undefined;\n    readonly #createAuth: PolyesterClientRuntimeConfig[\"createAuth\"];\n\n    #realtime: PolyesterRealtime | undefined;\n    #catalog: ClientCatalog | undefined;\n    #scales: SdkScales | undefined;\n    #resolver: SubaccountResolver | undefined;\n    #resolverInitialized = false;\n\n    #auth: AuthService | undefined;\n    #accounts: AccountsService | undefined;\n    #apiKeys: ApiKeysService | undefined;\n    #subaccounts: SubaccountsService | undefined;\n    #candles: CandlesService | undefined;\n    #chainAnalytics: ChainAnalyticsService | undefined;\n    #marketData: MarketDataService | undefined;\n    #marketOverview: MarketOverviewService | undefined;\n    #orderbook: OrderbookService | undefined;\n    #heatmap: HeatmapService | undefined;\n    #lifecycle: LifecycleService | undefined;\n    #trades: TradesService | undefined;\n    #orders: OrdersService | undefined;\n    #triggers: TriggersService | undefined;\n    #balances: BalancesService | undefined;\n    #transfers: TransfersService | undefined;\n    #internalTransfers: InternalTransfersService | undefined;\n    #tradingWithdraws: TradingWithdrawsService | undefined;\n    #deposit: DepositService | undefined;\n    #addressBook: AddressBookService | undefined;\n    #guardSigner: GuardSignerService | undefined;\n    #socialVerification: SocialVerificationService | undefined;\n    #whiteboard: WhiteboardService | undefined;\n    #zipper: ZipperService | undefined;\n    #mfa: MfaService | undefined;\n    #vip: VipService | undefined;\n    #fees: FeesService | undefined;\n    #tradingRateLimits: RateLimitService | undefined;\n\n    constructor(config: PolyesterClientConfig, runtime: PolyesterClientRuntimeConfig = {}) {\n        const parsedConfig = parsePolyesterClientConfig(config);\n        config = parsedConfig;\n        const interceptors = config.interceptors ?? [];\n        const { environment } = config;\n\n        this.transports =\n            config.transports ??\n            createTransports({\n                apiUrl: environment.apiUrl,\n                interceptors,\n                auth: config.auth,\n                wireFormat: config.wireFormat,\n            });\n\n        this.#environment = environment;\n        this.#authProvider = config.auth;\n        this.#realtimeConfig = config.realtime;\n        this.#configRealtimeClient = config.realtimeClient;\n        this.#configCatalog = config.catalog;\n        this.#configCatalogSnapshot = config.catalogSnapshot;\n        this.#configCatalogCell = config.catalogCell;\n        this.#createAuth = runtime.createAuth;\n    }\n\n    get realtime(): PolyesterRealtime {\n        if (!this.#realtime) {\n            if (this.#configRealtimeClient) {\n                this.#realtime = this.#configRealtimeClient;\n            } else {\n                const environment = this.#environment;\n                const realtimeAuth = realtimeAuthFromProvider(this.#authProvider);\n                this.#realtime = new RealtimeClient({\n                    wsUrl: environment.websocketUrl,\n                    tokenEndpoint: `${environment.apiUrl}/v1/rt/token`,\n                    subscribeEndpoint: `${environment.apiUrl}/v1/rt/subscribe`,\n                    getAuthHeaders:\n                        this.#realtimeConfig?.getAuthHeaders ?? realtimeAuth.getAuthHeaders,\n                    hasAuth: this.#realtimeConfig?.hasAuth ?? realtimeAuth.hasAuth,\n                });\n            }\n        }\n        return this.#realtime;\n    }\n\n    get catalog(): ClientCatalog {\n        if (!this.#catalog) {\n            if (this.#configCatalog) {\n                this.#catalog = this.#configCatalog;\n            } else {\n                const catalogRefreshMarketData = new MarketDataService(\n                    this.transports,\n                    this.realtime,\n                    this.#getScales(),\n                );\n                const catalogRefreshZipper = new ZipperService(this.transports);\n                this.#catalog = createPolyesterCatalog({\n                    snapshot: this.#configCatalogSnapshot,\n                    cell: this.#configCatalogCell,\n                    refresh: {\n                        market: () => catalogRefreshMarketData.getSpotConfig(),\n                        zipper: () => catalogRefreshZipper.getDepositWithdrawConfig(),\n                    },\n                });\n            }\n        }\n        return this.#catalog;\n    }\n\n    #getScales(): SdkScales {\n        // Lazy catalog binding: the resolver only dereferences `this.catalog` at\n        // call time. getSpotConfig() (the catalog's own refresh source) never\n        // awaits scale readiness.\n        this.#scales ??= createCatalogSdkScales(() => this.catalog);\n        return this.#scales;\n    }\n\n    #getResolver(): SubaccountResolver | undefined {\n        if (!this.#resolverInitialized) {\n            this.#resolverInitialized = true;\n            this.#resolver = this.createSubaccountResolver();\n        }\n        return this.#resolver;\n    }\n\n    get auth(): AuthService {\n        if (!this.#auth) {\n            this.#auth =\n                this.#createAuth?.({\n                    transports: this.transports,\n                    realtime: this.realtime,\n                    subaccounts: this.subaccounts,\n                    environment: this.#environment,\n                }) ?? new AuthService(this.transports, this.realtime);\n        }\n        return this.#auth;\n    }\n\n    get accounts(): AccountsService {\n        return (this.#accounts ??= new AccountsService(this.transports));\n    }\n\n    get apiKeys(): ApiKeysService {\n        return (this.#apiKeys ??= new ApiKeysService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get subaccounts(): SubaccountsService {\n        return (this.#subaccounts ??= new SubaccountsService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get candles(): CandlesService {\n        return (this.#candles ??= new CandlesService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get chainAnalytics(): ChainAnalyticsService {\n        return (this.#chainAnalytics ??= new ChainAnalyticsService(\n            this.transports,\n            this.#getScales(),\n        ));\n    }\n\n    get marketData(): MarketDataService {\n        return (this.#marketData ??= new MarketDataService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get marketOverview(): MarketOverviewService {\n        return (this.#marketOverview ??= new MarketOverviewService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get orderbook(): OrderbookService {\n        return (this.#orderbook ??= new OrderbookService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get heatmap(): HeatmapService {\n        return (this.#heatmap ??= new HeatmapService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get lifecycle(): LifecycleService {\n        return (this.#lifecycle ??= new LifecycleService(this.transports, this.realtime));\n    }\n\n    get trades(): TradesService {\n        return (this.#trades ??= new TradesService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get orders(): OrdersService {\n        return (this.#orders ??= new OrdersService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get triggers(): TriggersService {\n        return (this.#triggers ??= new TriggersService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get balances(): BalancesService {\n        return (this.#balances ??= new BalancesService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get transfers(): TransfersService {\n        return (this.#transfers ??= new TransfersService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get internalTransfers(): InternalTransfersService {\n        return (this.#internalTransfers ??= new InternalTransfersService(\n            this.transports,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get tradingWithdraws(): TradingWithdrawsService {\n        return (this.#tradingWithdraws ??= new TradingWithdrawsService(\n            this.transports,\n            this.#getResolver(),\n            {\n                chainId: this.#environment.chain.id,\n                tradingGatewayAddress: this.#environment.contracts.tradingGatewayAddress,\n            },\n            this.#getScales(),\n            this.catalog,\n        ));\n    }\n\n    get deposit(): DepositService {\n        return (this.#deposit ??= new DepositService(this.transports, this.#getResolver()));\n    }\n\n    get addressBook(): AddressBookService {\n        return (this.#addressBook ??= new AddressBookService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get guardSigner(): GuardSignerService {\n        return (this.#guardSigner ??= new GuardSignerService(this.transports, this.#getResolver()));\n    }\n\n    get socialVerification(): SocialVerificationService {\n        return (this.#socialVerification ??= new SocialVerificationService(this.transports));\n    }\n\n    get whiteboard(): WhiteboardService {\n        return (this.#whiteboard ??= new WhiteboardService(this.transports));\n    }\n\n    get zipper(): ZipperService {\n        return (this.#zipper ??= new ZipperService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get mfa(): MfaService {\n        return (this.#mfa ??= new MfaService(this.transports));\n    }\n\n    get vip(): VipService {\n        return (this.#vip ??= new VipService(this.transports));\n    }\n\n    get fees(): FeesService {\n        return (this.#fees ??= new FeesService(this.transports, this.#getResolver()));\n    }\n\n    get tradingRateLimits(): RateLimitService {\n        return (this.#tradingRateLimits ??= new RateLimitService(\n            this.transports,\n            this.#getResolver(),\n        ));\n    }\n\n    /**\n     * Override in subclasses to provide a subaccount resolver.\n     * The resolver is called lazily when service methods are invoked.\n     */\n    protected createSubaccountResolver(): SubaccountResolver | undefined {\n        return undefined;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAkDA,SAAS,yBACL,MACkD;CAClD,IAAI,CAAC,MAAM,OAAO,CAAC;CACnB,IAAI,KAAK,SAAS,OACd,OAAO;EACH,gBAAgB,YAAY;GACxB,MAAM,QAAQ,MAAM,gBAAgB,IAAI;GACxC,MAAM,UAAkC,CAAC;GACzC,IAAI,OAAO,QAAQ,gBAAgB,UAAU;GAC7C,OAAO;EACX;EACA,eAAe;GACX,IAAI;IACA,MAAM,QAAQ,KAAK,SAAS;IAC5B,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;KAE7C,MAAW,YAAY,CAAC,CAAC;KACzB,OAAO;IACX;IACA,OAAO,UAAU,QAAQ,MAAM,SAAS;GAC5C,QAAQ;IAEJ,OAAO;GACX;EACJ;CACJ;CAEJ,OAAO;EACH,iBAAiB,YACb,+BAA+B,MAAM;GACjC,KAAK,QAAQ;GACb,QAAQ,QAAQ;EACpB,CAAC;EACL,eAAe;CACnB;AACJ;;AA0DA,SAAgB,2BACZ,QACsB;CACtB,OAAO,OAAO,YAAY,KAAA,IACpB;EACI,iBAAiB,OAAO;EACxB,aAAa,OAAO;CACxB,IACA,EAAE,SAAS,OAAO,QAAQ;AACpC;;;;AAgBA,SAAgB,2BACZ,QACO;CACP,IAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GACrE,MAAM,IAAI,mBAAmB,yCAAyC;CAE1E,MAAM,cAAc,0BAA0B,OAAO,WAAW;CAChE,IACI,OAAO,eAAe,KAAA,KACtB,OAAO,eAAe,YACtB,OAAO,eAAe,QAEtB,MAAM,IAAI,mBAAmB,mDAA+C;CAEhF,IAAI,OAAO,WAAW,OAAO,iBACzB,MAAM,IAAI,mBAAmB,sDAAsD;CAEvF,IAAI,OAAO,WAAW,OAAO,aACzB,MAAM,IAAI,mBAAmB,kDAAkD;CAGnF,OAAO,OAAO,OAAO,CAAC,GAAG,QAAQ,EAAE,YAAY,CAAC;AACpD;;;;;;;;AASA,IAAa,kBAAb,MAA6B;CACzB;CAEA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACA,uBAAuB;CAEvB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAA+B,UAAwC,CAAC,GAAG;EAEnF,SADqB,2BAA2B,MAC5B;EACpB,MAAM,eAAe,OAAO,gBAAgB,CAAC;EAC7C,MAAM,EAAE,gBAAgB;EAExB,KAAK,aACD,OAAO,cACP,iBAAiB;GACb,QAAQ,YAAY;GACpB;GACA,MAAM,OAAO;GACb,YAAY,OAAO;EACvB,CAAC;EAEL,KAAKA,eAAe;EACpB,KAAKC,gBAAgB,OAAO;EAC5B,KAAKC,kBAAkB,OAAO;EAC9B,KAAKC,wBAAwB,OAAO;EACpC,KAAKC,iBAAiB,OAAO;EAC7B,KAAKC,yBAAyB,OAAO;EACrC,KAAKC,qBAAqB,OAAO;EACjC,KAAKC,cAAc,QAAQ;CAC/B;CAEA,IAAI,WAA8B;EAC9B,IAAI,CAAC,KAAKC,WACN,IAAI,KAAKL,uBACL,KAAKK,YAAY,KAAKL;OACnB;GACH,MAAM,cAAc,KAAKH;GACzB,MAAM,eAAe,yBAAyB,KAAKC,aAAa;GAChE,KAAKO,YAAY,IAAI,eAAe;IAChC,OAAO,YAAY;IACnB,eAAe,GAAG,YAAY,OAAO;IACrC,mBAAmB,GAAG,YAAY,OAAO;IACzC,gBACI,KAAKN,iBAAiB,kBAAkB,aAAa;IACzD,SAAS,KAAKA,iBAAiB,WAAW,aAAa;GAC3D,CAAC;EACL;EAEJ,OAAO,KAAKM;CAChB;CAEA,IAAI,UAAyB;EACzB,IAAI,CAAC,KAAKC,UACN,IAAI,KAAKL,gBACL,KAAKK,WAAW,KAAKL;OAClB;GACH,MAAM,2BAA2B,IAAI,kBACjC,KAAK,YACL,KAAK,UACL,KAAKM,WAAW,CACpB;GACA,MAAM,uBAAuB,IAAI,cAAc,KAAK,UAAU;GAC9D,KAAKD,WAAW,uBAAuB;IACnC,UAAU,KAAKJ;IACf,MAAM,KAAKC;IACX,SAAS;KACL,cAAc,yBAAyB,cAAc;KACrD,cAAc,qBAAqB,yBAAyB;IAChE;GACJ,CAAC;EACL;EAEJ,OAAO,KAAKG;CAChB;CAEA,aAAwB;EAIpB,KAAKE,YAAY,6BAA6B,KAAK,OAAO;EAC1D,OAAO,KAAKA;CAChB;CAEA,eAA+C;EAC3C,IAAI,CAAC,KAAKC,sBAAsB;GAC5B,KAAKA,uBAAuB;GAC5B,KAAKC,YAAY,KAAK,yBAAyB;EACnD;EACA,OAAO,KAAKA;CAChB;CAEA,IAAI,OAAoB;EACpB,IAAI,CAAC,KAAKC,OACN,KAAKA,QACD,KAAKP,cAAc;GACf,YAAY,KAAK;GACjB,UAAU,KAAK;GACf,aAAa,KAAK;GAClB,aAAa,KAAKP;EACtB,CAAC,KAAK,IAAI,YAAY,KAAK,YAAY,KAAK,QAAQ;EAE5D,OAAO,KAAKc;CAChB;CAEA,IAAI,WAA4B;EAC5B,OAAQ,KAAKC,cAAc,IAAI,gBAAgB,KAAK,UAAU;CAClE;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKC,aAAa,IAAI,eAC1B,KAAK,YACL,KAAK,UACL,KAAKC,aAAa,CACtB;CACJ;CAEA,IAAI,cAAkC;EAClC,OAAQ,KAAKC,iBAAiB,IAAI,mBAC9B,KAAK,YACL,KAAK,UACL,KAAKD,aAAa,CACtB;CACJ;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKE,aAAa,IAAI,eAC1B,KAAK,YACL,KAAK,UACL,KAAKT,WAAW,CACpB;CACJ;CAEA,IAAI,iBAAwC;EACxC,OAAQ,KAAKU,oBAAoB,IAAI,sBACjC,KAAK,YACL,KAAKV,WAAW,CACpB;CACJ;CAEA,IAAI,aAAgC;EAChC,OAAQ,KAAKW,gBAAgB,IAAI,kBAC7B,KAAK,YACL,KAAK,UACL,KAAKX,WAAW,CACpB;CACJ;CAEA,IAAI,iBAAwC;EACxC,OAAQ,KAAKY,oBAAoB,IAAI,sBACjC,KAAK,YACL,KAAK,UACL,KAAKZ,WAAW,CACpB;CACJ;CAEA,IAAI,YAA8B;EAC9B,OAAQ,KAAKa,eAAe,IAAI,iBAC5B,KAAK,YACL,KAAK,UACL,KAAKb,WAAW,CACpB;CACJ;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKc,aAAa,IAAI,eAC1B,KAAK,YACL,KAAK,UACL,KAAKd,WAAW,CACpB;CACJ;CAEA,IAAI,YAA8B;EAC9B,OAAQ,KAAKe,eAAe,IAAI,iBAAiB,KAAK,YAAY,KAAK,QAAQ;CACnF;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKC,YAAY,IAAI,cACzB,KAAK,YACL,KAAK,UACL,KAAKT,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKiB,YAAY,IAAI,cACzB,KAAK,YACL,KAAK,UACL,KAAKV,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,WAA4B;EAC5B,OAAQ,KAAKkB,cAAc,IAAI,gBAC3B,KAAK,YACL,KAAK,UACL,KAAKX,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,WAA4B;EAC5B,OAAQ,KAAKmB,cAAc,IAAI,gBAC3B,KAAK,YACL,KAAK,UACL,KAAKZ,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,YAA8B;EAC9B,OAAQ,KAAKoB,eAAe,IAAI,iBAC5B,KAAK,YACL,KAAK,UACL,KAAKb,aAAa,CACtB;CACJ;CAEA,IAAI,oBAA8C;EAC9C,OAAQ,KAAKc,uBAAuB,IAAI,yBACpC,KAAK,YACL,KAAKd,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,mBAA4C;EAC5C,OAAQ,KAAKsB,sBAAsB,IAAI,wBACnC,KAAK,YACL,KAAKf,aAAa,GAClB;GACI,SAAS,KAAKjB,aAAa,MAAM;GACjC,uBAAuB,KAAKA,aAAa,UAAU;EACvD,GACA,KAAKU,WAAW,GAChB,KAAK,OACT;CACJ;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKuB,aAAa,IAAI,eAAe,KAAK,YAAY,KAAKhB,aAAa,CAAC;CACrF;CAEA,IAAI,cAAkC;EAClC,OAAQ,KAAKiB,iBAAiB,IAAI,mBAC9B,KAAK,YACL,KAAK,UACL,KAAKjB,aAAa,CACtB;CACJ;CAEA,IAAI,cAAkC;EAClC,OAAQ,KAAKkB,iBAAiB,IAAI,mBAAmB,KAAK,YAAY,KAAKlB,aAAa,CAAC;CAC7F;CAEA,IAAI,qBAAgD;EAChD,OAAQ,KAAKmB,wBAAwB,IAAI,0BAA0B,KAAK,UAAU;CACtF;CAEA,IAAI,aAAgC;EAChC,OAAQ,KAAKC,gBAAgB,IAAI,kBAAkB,KAAK,UAAU;CACtE;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKC,YAAY,IAAI,cACzB,KAAK,YACL,KAAK,UACL,KAAK5B,WAAW,CACpB;CACJ;CAEA,IAAI,MAAkB;EAClB,OAAQ,KAAK6B,SAAS,IAAI,WAAW,KAAK,UAAU;CACxD;CAEA,IAAI,MAAkB;EAClB,OAAQ,KAAKC,SAAS,IAAI,WAAW,KAAK,UAAU;CACxD;CAEA,IAAI,OAAoB;EACpB,OAAQ,KAAKC,UAAU,IAAI,YAAY,KAAK,YAAY,KAAKxB,aAAa,CAAC;CAC/E;CAEA,IAAI,oBAAsC;EACtC,OAAQ,KAAKyB,uBAAuB,IAAI,iBACpC,KAAK,YACL,KAAKzB,aAAa,CACtB;CACJ;;;;;CAMA,2BAAqE,CAErE;AACJ"}
+{"version":3,"file":"core-client.js","names":["#environment","#authProvider","#realtimeConfig","#configRealtimeClient","#configCatalog","#configCatalogSnapshot","#configCatalogCell","#createAuth","#realtime","#catalog","#getScales","#scales","#resolverInitialized","#resolver","#auth","#accounts","#apiKeys","#getResolver","#subaccounts","#candles","#chainAnalytics","#marketData","#marketOverview","#orderbook","#heatmap","#lifecycle","#trades","#orders","#triggers","#balances","#transfers","#internalTransfers","#tradingWithdraws","#deposit","#addressBook","#guardSigner","#socialVerification","#whiteboard","#zipper","#mfa","#claims","#vip","#fees","#tradingRateLimits"],"sources":["../src/core-client.ts"],"sourcesContent":["import type { Interceptor } from \"@connectrpc/connect\";\nimport { ConfigurationError } from \"./shared/errors.js\";\nimport {\n    createApiKeyEd25519AuthHeaders,\n    createTransports,\n    resolveJwtToken,\n    type AuthAndPublicApiTransports,\n    type Transports,\n    type JwtAuthProvider,\n    type ApiKeyEd25519AuthProvider,\n} from \"./shared/transports.js\";\nimport { parsePolyesterEnvironment, type PolyesterEnvironment } from \"./environment.js\";\nimport { AccountsService } from \"./services/accounts/index.js\";\nimport { ApiKeysService } from \"./services/api-keys/index.js\";\nimport { AuthService } from \"./services/auth/auth.js\";\nimport { SubaccountsService } from \"./services/subaccounts/index.js\";\nimport { CandlesService } from \"./services/candles/index.js\";\nimport { ChainAnalyticsService } from \"./services/chain-analytics/index.js\";\nimport { MarketDataService } from \"./services/market-data/index.js\";\nimport { MarketOverviewService } from \"./services/market-overview/index.js\";\nimport { OrderbookService } from \"./services/orderbook/index.js\";\nimport { HeatmapService } from \"./services/heatmap/index.js\";\nimport { LifecycleService } from \"./services/lifecycle/index.js\";\nimport { TradesService } from \"./services/trades/index.js\";\nimport { OrdersService } from \"./services/orders/index.js\";\nimport { TriggersService } from \"./services/triggers/index.js\";\nimport { BalancesService } from \"./services/balances/index.js\";\nimport { TransfersService } from \"./services/transfers/index.js\";\nimport { InternalTransfersService } from \"./services/internal-transfers/index.js\";\nimport { TradingWithdrawsService } from \"./services/trading-withdraws/index.js\";\nimport { DepositService } from \"./services/deposit/index.js\";\nimport { AddressBookService } from \"./services/address-book/index.js\";\nimport { GuardSignerService } from \"./services/guard-signer/index.js\";\nimport { SocialVerificationService } from \"./services/social-verification/index.js\";\nimport { WhiteboardService } from \"./services/whiteboard/index.js\";\nimport { ZipperService } from \"./services/zipper/index.js\";\nimport { MfaService } from \"./services/mfa/index.js\";\nimport { ClaimsService } from \"./services/claims/index.js\";\nimport { VipService } from \"./services/vip/index.js\";\nimport { FeesService } from \"./services/fees/index.js\";\nimport { RateLimitService } from \"./services/rate-limits/index.js\";\nimport type { SubaccountResolver } from \"./services/subaccount-resolver.js\";\nimport {\n    createPolyesterCatalog,\n    type CatalogSnapshot,\n    type CatalogSnapshotCell,\n    type ClientCatalog,\n} from \"./catalogs/index.js\";\nimport { createCatalogSdkScales, type SdkScales } from \"./shared/decimal-surface.js\";\nimport { RealtimeClient, type PolyesterRealtime, type RealtimeConfig } from \"./realtime/index.js\";\n\nfunction realtimeAuthFromProvider(\n    auth: JwtAuthProvider | ApiKeyEd25519AuthProvider | undefined,\n): Pick<RealtimeConfig, \"getAuthHeaders\" | \"hasAuth\"> {\n    if (!auth) return {};\n    if (auth.kind === \"jwt\") {\n        return {\n            getAuthHeaders: async () => {\n                const token = await resolveJwtToken(auth);\n                const headers: Record<string, string> = {};\n                if (token) headers.authorization = `Bearer ${token}`;\n                return headers;\n            },\n            hasAuth: () => {\n                try {\n                    const token = auth.getToken();\n                    if (token !== null && typeof token !== \"string\") {\n                        // Async credentials are validated by the token request.\n                        void token.catch(() => {});\n                        return true;\n                    }\n                    return token !== null && token.length > 0;\n                } catch {\n                    // Let the token request report provider failures as AuthenticationError.\n                    return true;\n                }\n            },\n        };\n    }\n    return {\n        getAuthHeaders: (request) =>\n            createApiKeyEd25519AuthHeaders(auth, {\n                url: request.url,\n                method: request.method,\n            }),\n        hasAuth: () => true,\n    };\n}\n\nexport type PolyesterRealtimeAuthConfig = Pick<RealtimeConfig, \"getAuthHeaders\" | \"hasAuth\">;\n\ninterface PolyesterClientCommonConfig {\n    environment: PolyesterEnvironment;\n    interceptors?: Interceptor[];\n    auth?: JwtAuthProvider | ApiKeyEd25519AuthProvider;\n    realtime?: PolyesterRealtimeAuthConfig;\n    /**\n     * Connect wire format. Defaults to binary for production performance.\n     * Use `json` for human-readable debugging.\n     */\n    wireFormat?: \"binary\" | \"json\";\n    /**\n     * Advanced: inject pre-built Connect transports (in-memory mocks, custom\n     * stacks). When provided, the SDK does not build its own transports and the\n     * built-in auth/error-mapping interceptors are NOT applied — the injected\n     * transports own their full interceptor chain.\n     */\n    transports?: Transports;\n    /**\n     * Advanced: inject a realtime implementation (in-memory mocks, custom\n     * stacks). When provided, the SDK skips constructing its Centrifuge-backed\n     * realtime client and the `realtime` auth config is ignored.\n     */\n    realtimeClient?: PolyesterRealtime;\n}\n\ntype PolyesterCatalogConfig =\n    | {\n          /** Client-owned catalog store. */\n          catalog: ClientCatalog;\n          catalogSnapshot?: never;\n          catalogCell?: never;\n      }\n    | {\n          catalog?: never;\n          /**\n           * Explicit initial catalog snapshot, commonly hydrated from server-rendered data.\n           * Combines with `catalogCell` as the cell's initial value without clobbering a\n           * pre-populated cell.\n           */\n          catalogSnapshot?: CatalogSnapshot;\n          /**\n           * External snapshot storage for the client-built catalog. A cell backed by a\n           * reactive source makes every catalog read reactive.\n           */\n          catalogCell?: CatalogSnapshotCell;\n      };\n\n/** Configuration shared by every Polyester client. */\nexport type PolyesterClientBaseConfig = PolyesterClientCommonConfig & PolyesterCatalogConfig;\n\n/** Configuration for the base Polyester client. */\nexport type PolyesterClientConfig = PolyesterClientBaseConfig;\n\n/** Preserves the exclusive catalog configuration while projecting client config fields. */\nexport function pickPolyesterCatalogConfig(\n    config: PolyesterClientBaseConfig,\n): PolyesterCatalogConfig {\n    return config.catalog === undefined\n        ? {\n              catalogSnapshot: config.catalogSnapshot,\n              catalogCell: config.catalogCell,\n          }\n        : { catalog: config.catalog };\n}\n\ninterface AuthServiceFactoryContext {\n    transports: AuthAndPublicApiTransports;\n    realtime: PolyesterRealtime;\n    subaccounts: SubaccountsService;\n    environment: PolyesterEnvironment;\n}\n\ninterface PolyesterClientRuntimeConfig {\n    createAuth?: (context: AuthServiceFactoryContext) => AuthService;\n}\n\n/**\n * Parses the configuration shared by every public client constructor.\n */\nexport function parsePolyesterClientConfig<TConfig extends PolyesterClientBaseConfig>(\n    config: TConfig,\n): TConfig {\n    if (typeof config !== \"object\" || config === null || Array.isArray(config)) {\n        throw new ConfigurationError(\"Client configuration must be an object.\");\n    }\n    const environment = parsePolyesterEnvironment(config.environment);\n    if (\n        config.wireFormat !== undefined &&\n        config.wireFormat !== \"binary\" &&\n        config.wireFormat !== \"json\"\n    ) {\n        throw new ConfigurationError('wireFormat must be either \"binary\" or \"json\".');\n    }\n    if (config.catalog && config.catalogSnapshot) {\n        throw new ConfigurationError(\"Provide either catalog or catalogSnapshot, not both.\");\n    }\n    if (config.catalog && config.catalogCell) {\n        throw new ConfigurationError(\"Provide either catalog or catalogCell, not both.\");\n    }\n\n    return Object.assign({}, config, { environment });\n}\n\n/**\n * Base SDK client that wires transports, realtime, catalogs, and all public service clients for a Polyester environment.\n *\n * Services are constructed lazily on first property access (and memoized) so\n * that creating a client — which happens for every SSR request in server\n * hooks — only pays for the services the caller actually touches.\n */\nexport class PolyesterClient {\n    protected readonly transports: Transports;\n\n    readonly #environment: PolyesterEnvironment;\n    readonly #authProvider: JwtAuthProvider | ApiKeyEd25519AuthProvider | undefined;\n    readonly #realtimeConfig: PolyesterRealtimeAuthConfig | undefined;\n    readonly #configRealtimeClient: PolyesterRealtime | undefined;\n    readonly #configCatalog: ClientCatalog | undefined;\n    readonly #configCatalogSnapshot: CatalogSnapshot | undefined;\n    readonly #configCatalogCell: CatalogSnapshotCell | undefined;\n    readonly #createAuth: PolyesterClientRuntimeConfig[\"createAuth\"];\n\n    #realtime: PolyesterRealtime | undefined;\n    #catalog: ClientCatalog | undefined;\n    #scales: SdkScales | undefined;\n    #resolver: SubaccountResolver | undefined;\n    #resolverInitialized = false;\n\n    #auth: AuthService | undefined;\n    #accounts: AccountsService | undefined;\n    #apiKeys: ApiKeysService | undefined;\n    #subaccounts: SubaccountsService | undefined;\n    #candles: CandlesService | undefined;\n    #chainAnalytics: ChainAnalyticsService | undefined;\n    #marketData: MarketDataService | undefined;\n    #marketOverview: MarketOverviewService | undefined;\n    #orderbook: OrderbookService | undefined;\n    #heatmap: HeatmapService | undefined;\n    #lifecycle: LifecycleService | undefined;\n    #trades: TradesService | undefined;\n    #orders: OrdersService | undefined;\n    #triggers: TriggersService | undefined;\n    #balances: BalancesService | undefined;\n    #transfers: TransfersService | undefined;\n    #internalTransfers: InternalTransfersService | undefined;\n    #tradingWithdraws: TradingWithdrawsService | undefined;\n    #deposit: DepositService | undefined;\n    #addressBook: AddressBookService | undefined;\n    #guardSigner: GuardSignerService | undefined;\n    #socialVerification: SocialVerificationService | undefined;\n    #whiteboard: WhiteboardService | undefined;\n    #zipper: ZipperService | undefined;\n    #mfa: MfaService | undefined;\n    #claims: ClaimsService | undefined;\n    #vip: VipService | undefined;\n    #fees: FeesService | undefined;\n    #tradingRateLimits: RateLimitService | undefined;\n\n    constructor(config: PolyesterClientConfig, runtime: PolyesterClientRuntimeConfig = {}) {\n        const parsedConfig = parsePolyesterClientConfig(config);\n        config = parsedConfig;\n        const interceptors = config.interceptors ?? [];\n        const { environment } = config;\n\n        this.transports =\n            config.transports ??\n            createTransports({\n                apiUrl: environment.apiUrl,\n                interceptors,\n                auth: config.auth,\n                wireFormat: config.wireFormat,\n            });\n\n        this.#environment = environment;\n        this.#authProvider = config.auth;\n        this.#realtimeConfig = config.realtime;\n        this.#configRealtimeClient = config.realtimeClient;\n        this.#configCatalog = config.catalog;\n        this.#configCatalogSnapshot = config.catalogSnapshot;\n        this.#configCatalogCell = config.catalogCell;\n        this.#createAuth = runtime.createAuth;\n    }\n\n    get realtime(): PolyesterRealtime {\n        if (!this.#realtime) {\n            if (this.#configRealtimeClient) {\n                this.#realtime = this.#configRealtimeClient;\n            } else {\n                const environment = this.#environment;\n                const realtimeAuth = realtimeAuthFromProvider(this.#authProvider);\n                this.#realtime = new RealtimeClient({\n                    wsUrl: environment.websocketUrl,\n                    tokenEndpoint: `${environment.apiUrl}/v1/rt/token`,\n                    subscribeEndpoint: `${environment.apiUrl}/v1/rt/subscribe`,\n                    getAuthHeaders:\n                        this.#realtimeConfig?.getAuthHeaders ?? realtimeAuth.getAuthHeaders,\n                    hasAuth: this.#realtimeConfig?.hasAuth ?? realtimeAuth.hasAuth,\n                });\n            }\n        }\n        return this.#realtime;\n    }\n\n    get catalog(): ClientCatalog {\n        if (!this.#catalog) {\n            if (this.#configCatalog) {\n                this.#catalog = this.#configCatalog;\n            } else {\n                const catalogRefreshMarketData = new MarketDataService(\n                    this.transports,\n                    this.realtime,\n                    this.#getScales(),\n                );\n                const catalogRefreshZipper = new ZipperService(this.transports);\n                this.#catalog = createPolyesterCatalog({\n                    snapshot: this.#configCatalogSnapshot,\n                    cell: this.#configCatalogCell,\n                    refresh: {\n                        market: () => catalogRefreshMarketData.getSpotConfig(),\n                        zipper: () => catalogRefreshZipper.getDepositWithdrawConfig(),\n                    },\n                });\n            }\n        }\n        return this.#catalog;\n    }\n\n    #getScales(): SdkScales {\n        // Lazy catalog binding: the resolver only dereferences `this.catalog` at\n        // call time. getSpotConfig() (the catalog's own refresh source) never\n        // awaits scale readiness.\n        this.#scales ??= createCatalogSdkScales(() => this.catalog);\n        return this.#scales;\n    }\n\n    #getResolver(): SubaccountResolver | undefined {\n        if (!this.#resolverInitialized) {\n            this.#resolverInitialized = true;\n            this.#resolver = this.createSubaccountResolver();\n        }\n        return this.#resolver;\n    }\n\n    get auth(): AuthService {\n        if (!this.#auth) {\n            this.#auth =\n                this.#createAuth?.({\n                    transports: this.transports,\n                    realtime: this.realtime,\n                    subaccounts: this.subaccounts,\n                    environment: this.#environment,\n                }) ?? new AuthService(this.transports, this.realtime);\n        }\n        return this.#auth;\n    }\n\n    get accounts(): AccountsService {\n        return (this.#accounts ??= new AccountsService(this.transports));\n    }\n\n    get apiKeys(): ApiKeysService {\n        return (this.#apiKeys ??= new ApiKeysService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get subaccounts(): SubaccountsService {\n        return (this.#subaccounts ??= new SubaccountsService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get candles(): CandlesService {\n        return (this.#candles ??= new CandlesService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get chainAnalytics(): ChainAnalyticsService {\n        return (this.#chainAnalytics ??= new ChainAnalyticsService(\n            this.transports,\n            this.#getScales(),\n        ));\n    }\n\n    get marketData(): MarketDataService {\n        return (this.#marketData ??= new MarketDataService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get marketOverview(): MarketOverviewService {\n        return (this.#marketOverview ??= new MarketOverviewService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get orderbook(): OrderbookService {\n        return (this.#orderbook ??= new OrderbookService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get heatmap(): HeatmapService {\n        return (this.#heatmap ??= new HeatmapService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get lifecycle(): LifecycleService {\n        return (this.#lifecycle ??= new LifecycleService(this.transports, this.realtime));\n    }\n\n    get trades(): TradesService {\n        return (this.#trades ??= new TradesService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get orders(): OrdersService {\n        return (this.#orders ??= new OrdersService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get triggers(): TriggersService {\n        return (this.#triggers ??= new TriggersService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get balances(): BalancesService {\n        return (this.#balances ??= new BalancesService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get transfers(): TransfersService {\n        return (this.#transfers ??= new TransfersService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get internalTransfers(): InternalTransfersService {\n        return (this.#internalTransfers ??= new InternalTransfersService(\n            this.transports,\n            this.#getResolver(),\n            this.#getScales(),\n        ));\n    }\n\n    get tradingWithdraws(): TradingWithdrawsService {\n        return (this.#tradingWithdraws ??= new TradingWithdrawsService(\n            this.transports,\n            this.#getResolver(),\n            {\n                chainId: this.#environment.chain.id,\n                tradingGatewayAddress: this.#environment.contracts.tradingGatewayAddress,\n            },\n            this.#getScales(),\n            this.catalog,\n        ));\n    }\n\n    get deposit(): DepositService {\n        return (this.#deposit ??= new DepositService(this.transports, this.#getResolver()));\n    }\n\n    get addressBook(): AddressBookService {\n        return (this.#addressBook ??= new AddressBookService(\n            this.transports,\n            this.realtime,\n            this.#getResolver(),\n        ));\n    }\n\n    get guardSigner(): GuardSignerService {\n        return (this.#guardSigner ??= new GuardSignerService(this.transports, this.#getResolver()));\n    }\n\n    get socialVerification(): SocialVerificationService {\n        return (this.#socialVerification ??= new SocialVerificationService(this.transports));\n    }\n\n    get whiteboard(): WhiteboardService {\n        return (this.#whiteboard ??= new WhiteboardService(this.transports));\n    }\n\n    get zipper(): ZipperService {\n        return (this.#zipper ??= new ZipperService(\n            this.transports,\n            this.realtime,\n            this.#getScales(),\n        ));\n    }\n\n    get mfa(): MfaService {\n        return (this.#mfa ??= new MfaService(this.transports));\n    }\n\n    get claims(): ClaimsService {\n        return (this.#claims ??= new ClaimsService(this.transports));\n    }\n\n    get vip(): VipService {\n        return (this.#vip ??= new VipService(this.transports));\n    }\n\n    get fees(): FeesService {\n        return (this.#fees ??= new FeesService(this.transports, this.#getResolver()));\n    }\n\n    get tradingRateLimits(): RateLimitService {\n        return (this.#tradingRateLimits ??= new RateLimitService(\n            this.transports,\n            this.#getResolver(),\n        ));\n    }\n\n    /**\n     * Override in subclasses to provide a subaccount resolver.\n     * The resolver is called lazily when service methods are invoked.\n     */\n    protected createSubaccountResolver(): SubaccountResolver | undefined {\n        return undefined;\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmDA,SAAS,yBACL,MACkD;CAClD,IAAI,CAAC,MAAM,OAAO,CAAC;CACnB,IAAI,KAAK,SAAS,OACd,OAAO;EACH,gBAAgB,YAAY;GACxB,MAAM,QAAQ,MAAM,gBAAgB,IAAI;GACxC,MAAM,UAAkC,CAAC;GACzC,IAAI,OAAO,QAAQ,gBAAgB,UAAU;GAC7C,OAAO;EACX;EACA,eAAe;GACX,IAAI;IACA,MAAM,QAAQ,KAAK,SAAS;IAC5B,IAAI,UAAU,QAAQ,OAAO,UAAU,UAAU;KAE7C,MAAW,YAAY,CAAC,CAAC;KACzB,OAAO;IACX;IACA,OAAO,UAAU,QAAQ,MAAM,SAAS;GAC5C,QAAQ;IAEJ,OAAO;GACX;EACJ;CACJ;CAEJ,OAAO;EACH,iBAAiB,YACb,+BAA+B,MAAM;GACjC,KAAK,QAAQ;GACb,QAAQ,QAAQ;EACpB,CAAC;EACL,eAAe;CACnB;AACJ;;AA0DA,SAAgB,2BACZ,QACsB;CACtB,OAAO,OAAO,YAAY,KAAA,IACpB;EACI,iBAAiB,OAAO;EACxB,aAAa,OAAO;CACxB,IACA,EAAE,SAAS,OAAO,QAAQ;AACpC;;;;AAgBA,SAAgB,2BACZ,QACO;CACP,IAAI,OAAO,WAAW,YAAY,WAAW,QAAQ,MAAM,QAAQ,MAAM,GACrE,MAAM,IAAI,mBAAmB,yCAAyC;CAE1E,MAAM,cAAc,0BAA0B,OAAO,WAAW;CAChE,IACI,OAAO,eAAe,KAAA,KACtB,OAAO,eAAe,YACtB,OAAO,eAAe,QAEtB,MAAM,IAAI,mBAAmB,mDAA+C;CAEhF,IAAI,OAAO,WAAW,OAAO,iBACzB,MAAM,IAAI,mBAAmB,sDAAsD;CAEvF,IAAI,OAAO,WAAW,OAAO,aACzB,MAAM,IAAI,mBAAmB,kDAAkD;CAGnF,OAAO,OAAO,OAAO,CAAC,GAAG,QAAQ,EAAE,YAAY,CAAC;AACpD;;;;;;;;AASA,IAAa,kBAAb,MAA6B;CACzB;CAEA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA;CACA;CACA;CACA;CACA,uBAAuB;CAEvB;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YAAY,QAA+B,UAAwC,CAAC,GAAG;EAEnF,SADqB,2BAA2B,MAC5B;EACpB,MAAM,eAAe,OAAO,gBAAgB,CAAC;EAC7C,MAAM,EAAE,gBAAgB;EAExB,KAAK,aACD,OAAO,cACP,iBAAiB;GACb,QAAQ,YAAY;GACpB;GACA,MAAM,OAAO;GACb,YAAY,OAAO;EACvB,CAAC;EAEL,KAAKA,eAAe;EACpB,KAAKC,gBAAgB,OAAO;EAC5B,KAAKC,kBAAkB,OAAO;EAC9B,KAAKC,wBAAwB,OAAO;EACpC,KAAKC,iBAAiB,OAAO;EAC7B,KAAKC,yBAAyB,OAAO;EACrC,KAAKC,qBAAqB,OAAO;EACjC,KAAKC,cAAc,QAAQ;CAC/B;CAEA,IAAI,WAA8B;EAC9B,IAAI,CAAC,KAAKC,WACN,IAAI,KAAKL,uBACL,KAAKK,YAAY,KAAKL;OACnB;GACH,MAAM,cAAc,KAAKH;GACzB,MAAM,eAAe,yBAAyB,KAAKC,aAAa;GAChE,KAAKO,YAAY,IAAI,eAAe;IAChC,OAAO,YAAY;IACnB,eAAe,GAAG,YAAY,OAAO;IACrC,mBAAmB,GAAG,YAAY,OAAO;IACzC,gBACI,KAAKN,iBAAiB,kBAAkB,aAAa;IACzD,SAAS,KAAKA,iBAAiB,WAAW,aAAa;GAC3D,CAAC;EACL;EAEJ,OAAO,KAAKM;CAChB;CAEA,IAAI,UAAyB;EACzB,IAAI,CAAC,KAAKC,UACN,IAAI,KAAKL,gBACL,KAAKK,WAAW,KAAKL;OAClB;GACH,MAAM,2BAA2B,IAAI,kBACjC,KAAK,YACL,KAAK,UACL,KAAKM,WAAW,CACpB;GACA,MAAM,uBAAuB,IAAI,cAAc,KAAK,UAAU;GAC9D,KAAKD,WAAW,uBAAuB;IACnC,UAAU,KAAKJ;IACf,MAAM,KAAKC;IACX,SAAS;KACL,cAAc,yBAAyB,cAAc;KACrD,cAAc,qBAAqB,yBAAyB;IAChE;GACJ,CAAC;EACL;EAEJ,OAAO,KAAKG;CAChB;CAEA,aAAwB;EAIpB,KAAKE,YAAY,6BAA6B,KAAK,OAAO;EAC1D,OAAO,KAAKA;CAChB;CAEA,eAA+C;EAC3C,IAAI,CAAC,KAAKC,sBAAsB;GAC5B,KAAKA,uBAAuB;GAC5B,KAAKC,YAAY,KAAK,yBAAyB;EACnD;EACA,OAAO,KAAKA;CAChB;CAEA,IAAI,OAAoB;EACpB,IAAI,CAAC,KAAKC,OACN,KAAKA,QACD,KAAKP,cAAc;GACf,YAAY,KAAK;GACjB,UAAU,KAAK;GACf,aAAa,KAAK;GAClB,aAAa,KAAKP;EACtB,CAAC,KAAK,IAAI,YAAY,KAAK,YAAY,KAAK,QAAQ;EAE5D,OAAO,KAAKc;CAChB;CAEA,IAAI,WAA4B;EAC5B,OAAQ,KAAKC,cAAc,IAAI,gBAAgB,KAAK,UAAU;CAClE;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKC,aAAa,IAAI,eAC1B,KAAK,YACL,KAAK,UACL,KAAKC,aAAa,CACtB;CACJ;CAEA,IAAI,cAAkC;EAClC,OAAQ,KAAKC,iBAAiB,IAAI,mBAC9B,KAAK,YACL,KAAK,UACL,KAAKD,aAAa,CACtB;CACJ;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKE,aAAa,IAAI,eAC1B,KAAK,YACL,KAAK,UACL,KAAKT,WAAW,CACpB;CACJ;CAEA,IAAI,iBAAwC;EACxC,OAAQ,KAAKU,oBAAoB,IAAI,sBACjC,KAAK,YACL,KAAKV,WAAW,CACpB;CACJ;CAEA,IAAI,aAAgC;EAChC,OAAQ,KAAKW,gBAAgB,IAAI,kBAC7B,KAAK,YACL,KAAK,UACL,KAAKX,WAAW,CACpB;CACJ;CAEA,IAAI,iBAAwC;EACxC,OAAQ,KAAKY,oBAAoB,IAAI,sBACjC,KAAK,YACL,KAAK,UACL,KAAKZ,WAAW,CACpB;CACJ;CAEA,IAAI,YAA8B;EAC9B,OAAQ,KAAKa,eAAe,IAAI,iBAC5B,KAAK,YACL,KAAK,UACL,KAAKb,WAAW,CACpB;CACJ;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKc,aAAa,IAAI,eAC1B,KAAK,YACL,KAAK,UACL,KAAKd,WAAW,CACpB;CACJ;CAEA,IAAI,YAA8B;EAC9B,OAAQ,KAAKe,eAAe,IAAI,iBAAiB,KAAK,YAAY,KAAK,QAAQ;CACnF;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKC,YAAY,IAAI,cACzB,KAAK,YACL,KAAK,UACL,KAAKT,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKiB,YAAY,IAAI,cACzB,KAAK,YACL,KAAK,UACL,KAAKV,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,WAA4B;EAC5B,OAAQ,KAAKkB,cAAc,IAAI,gBAC3B,KAAK,YACL,KAAK,UACL,KAAKX,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,WAA4B;EAC5B,OAAQ,KAAKmB,cAAc,IAAI,gBAC3B,KAAK,YACL,KAAK,UACL,KAAKZ,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,YAA8B;EAC9B,OAAQ,KAAKoB,eAAe,IAAI,iBAC5B,KAAK,YACL,KAAK,UACL,KAAKb,aAAa,CACtB;CACJ;CAEA,IAAI,oBAA8C;EAC9C,OAAQ,KAAKc,uBAAuB,IAAI,yBACpC,KAAK,YACL,KAAKd,aAAa,GAClB,KAAKP,WAAW,CACpB;CACJ;CAEA,IAAI,mBAA4C;EAC5C,OAAQ,KAAKsB,sBAAsB,IAAI,wBACnC,KAAK,YACL,KAAKf,aAAa,GAClB;GACI,SAAS,KAAKjB,aAAa,MAAM;GACjC,uBAAuB,KAAKA,aAAa,UAAU;EACvD,GACA,KAAKU,WAAW,GAChB,KAAK,OACT;CACJ;CAEA,IAAI,UAA0B;EAC1B,OAAQ,KAAKuB,aAAa,IAAI,eAAe,KAAK,YAAY,KAAKhB,aAAa,CAAC;CACrF;CAEA,IAAI,cAAkC;EAClC,OAAQ,KAAKiB,iBAAiB,IAAI,mBAC9B,KAAK,YACL,KAAK,UACL,KAAKjB,aAAa,CACtB;CACJ;CAEA,IAAI,cAAkC;EAClC,OAAQ,KAAKkB,iBAAiB,IAAI,mBAAmB,KAAK,YAAY,KAAKlB,aAAa,CAAC;CAC7F;CAEA,IAAI,qBAAgD;EAChD,OAAQ,KAAKmB,wBAAwB,IAAI,0BAA0B,KAAK,UAAU;CACtF;CAEA,IAAI,aAAgC;EAChC,OAAQ,KAAKC,gBAAgB,IAAI,kBAAkB,KAAK,UAAU;CACtE;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKC,YAAY,IAAI,cACzB,KAAK,YACL,KAAK,UACL,KAAK5B,WAAW,CACpB;CACJ;CAEA,IAAI,MAAkB;EAClB,OAAQ,KAAK6B,SAAS,IAAI,WAAW,KAAK,UAAU;CACxD;CAEA,IAAI,SAAwB;EACxB,OAAQ,KAAKC,YAAY,IAAI,cAAc,KAAK,UAAU;CAC9D;CAEA,IAAI,MAAkB;EAClB,OAAQ,KAAKC,SAAS,IAAI,WAAW,KAAK,UAAU;CACxD;CAEA,IAAI,OAAoB;EACpB,OAAQ,KAAKC,UAAU,IAAI,YAAY,KAAK,YAAY,KAAKzB,aAAa,CAAC;CAC/E;CAEA,IAAI,oBAAsC;EACtC,OAAQ,KAAK0B,uBAAuB,IAAI,iBACpC,KAAK,YACL,KAAK1B,aAAa,CACtB;CACJ;;;;;CAMA,2BAAqE,CAErE;AACJ"}

package/dist/gen/auth/v1/auth_pb.d.ts

@@ -23,8 +23,10 @@ type CreateWalletChallengeRequest = Message<"auth.v1.CreateWalletChallengeReques
    */
   smartAccountAddress: string;
   /**
-   * EVM address selected in the wallet and written into the EIP-4361 message.
-   * For CREATE_SUBACCOUNT, this must equal smart_account_address.
+   * Address whose signature authorizes the challenge and that is written into
+   * the EIP-4361 message. For LOGIN, this must be an EOA that controls the
+   * target smart account. For CREATE_SUBACCOUNT, this must equal
+   * smart_account_address.
    *
    * @generated from field: string signer_address = 2;
    */
@@ -88,8 +90,9 @@ type LoginWithWalletRequest = Message<"auth.v1.LoginWithWalletRequest"> & {
    */
   smartAccountAddress: string;
   /**
-   * Signature over message using EIP-191 personal_sign semantics. Maximum
-   * length is 8192 characters to support universal wallet signatures.
+   * EOA signature over message using EIP-191 personal_sign semantics. A valid
+   * value is 65 bytes of hexadecimal with an optional 0x prefix. Requests are
+   * limited to 8192 characters.
    *
    * @generated from field: string signature = 3;
    */

package/dist/gen/auth/v1/auth_pb.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"auth_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/auth_pb.ts"],"mappings":";;;;;;;;;;cAea,mBAAmB;;;;;;;KASpB,+BAA+B;;;;;;EAMzC;;;;;;;EAQA;;;;;;;EAQA;;;;;;EAOA,SAAS;;;;;;cAOE,oCAAoC,WAAW;;;;;;KAQhD,gCAAgC;;;;;;;EAO1C;;;;;;EAOA,YAAY;;;;;;cAOD,qCAAqC,WAAW;;;;;;;KASjD,yBAAyB;;;;;;;EAOnC;;;;;;;EAQA;;;;;;;EAQA;;;;;;;EAQA;;;;;;EAOA;;;;;;;EAQA;;;;;;cAOW,8BAA8B,WAAW;;;;;;;KAS1C,0BAA0B;;;;;;EAMpC;;;;;;EAOA,YAAY;;;;;;EAOZ;;;;;;EAOA;;;;;;EAOA,UAAU;;;;;;cAOC,+BAA+B,WAAW;;;;;;;KAS3C,YAAY;;;;;cAOX,iBAAiB,WAAW;;;;;;KAQ7B,aAAa;;;;;;EAMvB;;;;;;;;EASA;;;;;;EAOA;;;;;;;EAQA;;;;;;EAOA,UAAU;;;;;;cAOC,kBAAkB,WAAW;;;;;;KAQ9B,kBAAkB;;;;;;EAM5B,MAAM;;;;;;EAON;;;;;;cAOW,uBAAuB,WAAW;;;;;;KAQnC,qBAAqB;;;;;cAOpB,0BAA0B,WAAW;;;;;;;KAStC,sBAAsB;;;;;cAOrB,2BAA2B,WAAW;;;;;;aAQvC;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,8BAA8B,QAAQ;;;;;;aAQvC;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,qBAAqB,QAAQ;;;;;;cAQ7B,aAAa;;;;;;EAMxB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;;;;EAWjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe"}
+{"version":3,"file":"auth_pb.d.ts","names":[],"sources":["../../../../src/gen/auth/v1/auth_pb.ts"],"mappings":";;;;;;;;;;cAea,mBAAmB;;;;;;;KASpB,+BAA+B;;;;;;EAMzC;;;;;;;;;EAUA;;;;;;;EAQA;;;;;;EAOA,SAAS;;;;;;cAOE,oCAAoC,WAAW;;;;;;KAQhD,gCAAgC;;;;;;;EAO1C;;;;;;EAOA,YAAY;;;;;;cAOD,qCAAqC,WAAW;;;;;;;KASjD,yBAAyB;;;;;;;EAOnC;;;;;;;;EASA;;;;;;;EAQA;;;;;;;EAQA;;;;;;EAOA;;;;;;;EAQA;;;;;;cAOW,8BAA8B,WAAW;;;;;;;KAS1C,0BAA0B;;;;;;EAMpC;;;;;;EAOA,YAAY;;;;;;EAOZ;;;;;;EAOA;;;;;;EAOA,UAAU;;;;;;cAOC,+BAA+B,WAAW;;;;;;;KAS3C,YAAY;;;;;cAOX,iBAAiB,WAAW;;;;;;KAQ7B,aAAa;;;;;;EAMvB;;;;;;;;EASA;;;;;;EAOA;;;;;;;EAQA;;;;;;EAOA,UAAU;;;;;;cAOC,kBAAkB,WAAW;;;;;;KAQ9B,kBAAkB;;;;;;EAM5B,MAAM;;;;;;EAON;;;;;;cAOW,uBAAuB,WAAW;;;;;;KAQnC,qBAAqB;;;;;cAOpB,0BAA0B,WAAW;;;;;;;KAStC,sBAAsB;;;;;cAOrB,2BAA2B,WAAW;;;;;;aAQvC;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,8BAA8B,QAAQ;;;;;;aAQvC;;;;;;EAMV;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;;EAOA;;;;;cAMW,qBAAqB,QAAQ;;;;;;cAQ7B,aAAa;;;;;;EAMxB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;EAQjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;;;;;EAWjB;IACE;IACA,cAAc;IACd,eAAe;;;;;;;EAOjB;IACE;IACA,cAAc;IACd,eAAe"}

package/dist/gen/auth/v1/auth_pb.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth_pb.js","names":[],"sources":["../../../../src/gen/auth/v1/auth_pb.ts"],"sourcesContent":["// @generated by protoc-gen-es v2.13.0 with parameter \"target=ts,import_extension=js\"\n// @generated from file auth/v1/auth.proto (package auth.v1, syntax proto3)\n/* eslint-disable */\n\nimport type { GenEnum, GenFile, GenMessage, GenService } from \"@bufbuild/protobuf/codegenv2\";\nimport { enumDesc, fileDesc, messageDesc, serviceDesc } from \"@bufbuild/protobuf/codegenv2\";\nimport type { SessionInfo } from \"./mfa_pb.js\";\nimport { file_auth_v1_mfa } from \"./mfa_pb.js\";\nimport type { Timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_google_protobuf_timestamp } from \"@bufbuild/protobuf/wkt\";\nimport type { Message } from \"@bufbuild/protobuf\";\n\n/**\n * Describes the file auth/v1/auth.proto.\n */\nexport const file_auth_v1_auth: GenFile = /*@__PURE__*/\n  fileDesc(\"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\", [file_auth_v1_mfa, file_google_protobuf_timestamp]);\n\n/**\n * CreateWalletChallengeRequest requests a short-lived EIP-4361 message whose\n * exact UTF-8 bytes must be signed by the wallet.\n *\n * @generated from message auth.v1.CreateWalletChallengeRequest\n */\nexport type CreateWalletChallengeRequest = Message<\"auth.v1.CreateWalletChallengeRequest\"> & {\n  /**\n   * Smart-account EVM address being authenticated, formatted as 0x plus 40 hex characters.\n   *\n   * @generated from field: string smart_account_address = 1;\n   */\n  smartAccountAddress: string;\n\n  /**\n   * EVM address selected in the wallet and written into the EIP-4361 message.\n   * For CREATE_SUBACCOUNT, this must equal smart_account_address.\n   *\n   * @generated from field: string signer_address = 2;\n   */\n  signerAddress: string;\n\n  /**\n   * Browser origin URI requesting the signature, including scheme and optional\n   * port but no path, query, fragment, or user information.\n   *\n   * @generated from field: string uri = 3;\n   */\n  uri: string;\n\n  /**\n   * Operation for which the challenge may be consumed.\n   *\n   * @generated from field: auth.v1.WalletChallengePurpose purpose = 4;\n   */\n  purpose: WalletChallengePurpose;\n};\n\n/**\n * Describes the message auth.v1.CreateWalletChallengeRequest.\n * Use `create(CreateWalletChallengeRequestSchema)` to create a new message.\n */\nexport const CreateWalletChallengeRequestSchema: GenMessage<CreateWalletChallengeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 0);\n\n/**\n * CreateWalletChallengeResponse contains the canonical EIP-4361 message.\n *\n * @generated from message auth.v1.CreateWalletChallengeResponse\n */\nexport type CreateWalletChallengeResponse = Message<\"auth.v1.CreateWalletChallengeResponse\"> & {\n  /**\n   * Canonical EIP-4361 message. Sign these UTF-8 bytes exactly once with\n   * personal_sign; do not hash, alter, or reconstruct the message.\n   *\n   * @generated from field: string message = 1;\n   */\n  message: string;\n\n  /**\n   * Time in UTC when the challenge expires. Wallet challenges expire after 5 minutes.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 2;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.CreateWalletChallengeResponse.\n * Use `create(CreateWalletChallengeResponseSchema)` to create a new message.\n */\nexport const CreateWalletChallengeResponseSchema: GenMessage<CreateWalletChallengeResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 1);\n\n/**\n * LoginWithWalletRequest completes smart-account wallet login using the exact\n * server-issued EIP-4361 message and its signature.\n *\n * @generated from message auth.v1.LoginWithWalletRequest\n */\nexport type LoginWithWalletRequest = Message<\"auth.v1.LoginWithWalletRequest\"> & {\n  /**\n   * Smart-account EVM address bound into the challenge resource, formatted as\n   * 0x plus 40 hex characters.\n   *\n   * @generated from field: string smart_account_address = 1;\n   */\n  smartAccountAddress: string;\n\n  /**\n   * Signature over message using EIP-191 personal_sign semantics. Maximum\n   * length is 8192 characters to support universal wallet signatures.\n   *\n   * @generated from field: string signature = 3;\n   */\n  signature: string;\n\n  /**\n   * Optional user-agent string for account security and audit displays. Maximum\n   * length is 512 characters.\n   *\n   * @generated from field: string user_agent = 4;\n   */\n  userAgent: string;\n\n  /**\n   * Optional caller IP address for account security and audit displays. Maximum\n   * length is 64 characters.\n   *\n   * @generated from field: string ip = 5;\n   */\n  ip: string;\n\n  /**\n   * Optional provider hint for the signing wallet. Maximum length is 32 characters.\n   *\n   * @generated from field: string wallet_provider = 7;\n   */\n  walletProvider: string;\n\n  /**\n   * Exact EIP-4361 message returned by CreateWalletChallenge. Maximum length is\n   * 4096 UTF-8 bytes.\n   *\n   * @generated from field: string message = 8;\n   */\n  message: string;\n};\n\n/**\n * Describes the message auth.v1.LoginWithWalletRequest.\n * Use `create(LoginWithWalletRequestSchema)` to create a new message.\n */\nexport const LoginWithWalletRequestSchema: GenMessage<LoginWithWalletRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 2);\n\n/**\n * LoginWithWalletResponse returns a session token for the authenticated root\n * account.\n *\n * @generated from message auth.v1.LoginWithWalletResponse\n */\nexport type LoginWithWalletResponse = Message<\"auth.v1.LoginWithWalletResponse\"> & {\n  /**\n   * Bearer access token for authenticated API calls.\n   *\n   * @generated from field: string access_token = 1;\n   */\n  accessToken: string;\n\n  /**\n   * Time in UTC when access_token expires.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 2;\n   */\n  expiresAt?: Timestamp | undefined;\n\n  /**\n   * Root account the token is bound to (opaque ID).\n   *\n   * @generated from field: fixed64 account_id = 10;\n   */\n  accountId: bigint;\n\n  /**\n   * Optional current username for the root account (empty if not set).\n   *\n   * @generated from field: string username = 13;\n   */\n  username: string;\n\n  /**\n   * Session assurance details for the issued access token.\n   *\n   * @generated from field: auth.v1.SessionInfo session = 20;\n   */\n  session?: SessionInfo | undefined;\n};\n\n/**\n * Describes the message auth.v1.LoginWithWalletResponse.\n * Use `create(LoginWithWalletResponseSchema)` to create a new message.\n */\nexport const LoginWithWalletResponseSchema: GenMessage<LoginWithWalletResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 3);\n\n/**\n * MeRequest introspects the authenticated caller from the presented access\n * token or API key.\n *\n * @generated from message auth.v1.MeRequest\n */\nexport type MeRequest = Message<\"auth.v1.MeRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.MeRequest.\n * Use `create(MeRequestSchema)` to create a new message.\n */\nexport const MeRequestSchema: GenMessage<MeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 4);\n\n/**\n * MeResponse describes the authenticated caller and current session context.\n *\n * @generated from message auth.v1.MeResponse\n */\nexport type MeResponse = Message<\"auth.v1.MeResponse\"> & {\n  /**\n   * Root account identifier (opaque ID).\n   *\n   * @generated from field: fixed64 account_id = 1;\n   */\n  accountId: bigint;\n\n  /**\n   * Stable public identifier of the API key that authenticated this request,\n   * formatted as \"ak_\" followed by 32 lowercase hexadecimal characters.\n   * Absent when the request was not authenticated with an API key.\n   *\n   * @generated from field: optional string api_key_id = 10;\n   */\n  apiKeyId?: string | undefined;\n\n  /**\n   * Optional current username for the root account (empty if not set).\n   *\n   * @generated from field: string username = 11;\n   */\n  username: string;\n\n  /**\n   * Root smart-account EVM address, formatted as 0x plus 40 hex characters.\n   * Empty if not set.\n   *\n   * @generated from field: string root_smart_account_address = 12;\n   */\n  rootSmartAccountAddress: string;\n\n  /**\n   * Session assurance details for the presented access token, if any.\n   *\n   * @generated from field: auth.v1.SessionInfo session = 20;\n   */\n  session?: SessionInfo | undefined;\n};\n\n/**\n * Describes the message auth.v1.MeResponse.\n * Use `create(MeResponseSchema)` to create a new message.\n */\nexport const MeResponseSchema: GenMessage<MeResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 5);\n\n/**\n * AuthErrorDetail describes an authentication or account-domain failure.\n *\n * @generated from message auth.v1.AuthErrorDetail\n */\nexport type AuthErrorDetail = Message<\"auth.v1.AuthErrorDetail\"> & {\n  /**\n   * Stable machine-readable auth error code.\n   *\n   * @generated from field: auth.v1.AuthErrorCode code = 1;\n   */\n  code: AuthErrorCode;\n\n  /**\n   * Human-readable error message.\n   *\n   * @generated from field: string message = 2;\n   */\n  message: string;\n};\n\n/**\n * Describes the message auth.v1.AuthErrorDetail.\n * Use `create(AuthErrorDetailSchema)` to create a new message.\n */\nexport const AuthErrorDetailSchema: GenMessage<AuthErrorDetail> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 6);\n\n/**\n * AcceptTermsRequest records explicit consent to the currently required terms.\n *\n * @generated from message auth.v1.AcceptTermsRequest\n */\nexport type AcceptTermsRequest = Message<\"auth.v1.AcceptTermsRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.AcceptTermsRequest.\n * Use `create(AcceptTermsRequestSchema)` to create a new message.\n */\nexport const AcceptTermsRequestSchema: GenMessage<AcceptTermsRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 7);\n\n/**\n * AcceptTermsResponse confirms acceptance. Repeated acceptance of the current\n * version succeeds and preserves the first acceptance time.\n *\n * @generated from message auth.v1.AcceptTermsResponse\n */\nexport type AcceptTermsResponse = Message<\"auth.v1.AcceptTermsResponse\"> & {\n};\n\n/**\n * Describes the message auth.v1.AcceptTermsResponse.\n * Use `create(AcceptTermsResponseSchema)` to create a new message.\n */\nexport const AcceptTermsResponseSchema: GenMessage<AcceptTermsResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 8);\n\n/**\n * Purpose for a server-issued wallet challenge.\n *\n * @generated from enum auth.v1.WalletChallengePurpose\n */\nexport enum WalletChallengePurpose {\n  /**\n   * No wallet challenge purpose was specified.\n   *\n   * @generated from enum value: WALLET_PROOF_UNSPECIFIED = 0;\n   */\n  WALLET_PROOF_UNSPECIFIED = 0,\n\n  /**\n   * Authenticate the wallet and create a Polyester session.\n   *\n   * @generated from enum value: LOGIN = 1;\n   */\n  LOGIN = 1,\n\n  /**\n   * Prove control of a new smart account before creating a sub-account.\n   *\n   * @generated from enum value: CREATE_SUBACCOUNT = 2;\n   */\n  CREATE_SUBACCOUNT = 2,\n}\n\n/**\n * Describes the enum auth.v1.WalletChallengePurpose.\n */\nexport const WalletChallengePurposeSchema: GenEnum<WalletChallengePurpose> = /*@__PURE__*/\n  enumDesc(file_auth_v1_auth, 0);\n\n/**\n * High-level error codes for authentication and account-domain failures.\n *\n * @generated from enum auth.v1.AuthErrorCode\n */\nexport enum AuthErrorCode {\n  /**\n   * No auth error code specified.\n   *\n   * @generated from enum value: AUTH_UNSPECIFIED = 0;\n   */\n  AUTH_UNSPECIFIED = 0,\n\n  /**\n   * Username format or characters are invalid.\n   *\n   * @generated from enum value: AUTH_USERNAME_INVALID = 1;\n   */\n  AUTH_USERNAME_INVALID = 1,\n\n  /**\n   * Username is already used by another account.\n   *\n   * @generated from enum value: AUTH_USERNAME_TAKEN = 2;\n   */\n  AUTH_USERNAME_TAKEN = 2,\n\n  /**\n   * Username was changed too recently.\n   *\n   * @generated from enum value: AUTH_USERNAME_COOLDOWN = 3;\n   */\n  AUTH_USERNAME_COOLDOWN = 3,\n\n  /**\n   * Account is not currently eligible to claim or change a username.\n   *\n   * @generated from enum value: AUTH_USERNAME_FEATURE_LOCKED = 4;\n   */\n  AUTH_USERNAME_FEATURE_LOCKED = 4,\n\n  /**\n   * Username is reserved and cannot be claimed by this account.\n   *\n   * @generated from enum value: AUTH_USERNAME_RESERVED = 5;\n   */\n  AUTH_USERNAME_RESERVED = 5,\n\n  /**\n   * Request is malformed or missing required input.\n   *\n   * @generated from enum value: AUTH_INVALID_REQUEST = 6;\n   */\n  AUTH_INVALID_REQUEST = 6,\n\n  /**\n   * Authentication is required for this operation.\n   *\n   * @generated from enum value: AUTH_AUTHENTICATION_REQUIRED = 7;\n   */\n  AUTH_AUTHENTICATION_REQUIRED = 7,\n\n  /**\n   * Presented session type is not allowed for this operation.\n   *\n   * @generated from enum value: AUTH_SESSION_KIND_NOT_ALLOWED = 8;\n   */\n  AUTH_SESSION_KIND_NOT_ALLOWED = 8,\n\n  /**\n   * Wallet login failed because the nonce or signature could not be verified.\n   *\n   * @generated from enum value: AUTH_WALLET_LOGIN_FAILED = 9;\n   */\n  AUTH_WALLET_LOGIN_FAILED = 9,\n\n  /**\n   * Requested resource was not found.\n   *\n   * @generated from enum value: AUTH_RESOURCE_NOT_FOUND = 10;\n   */\n  AUTH_RESOURCE_NOT_FOUND = 10,\n\n  /**\n   * Caller does not have access to the requested sub-account.\n   *\n   * @generated from enum value: AUTH_SUBACCOUNT_ACCESS_DENIED = 11;\n   */\n  AUTH_SUBACCOUNT_ACCESS_DENIED = 11,\n\n  /**\n   * Caller does not have access to the requested API key.\n   *\n   * @generated from enum value: AUTH_API_KEY_ACCESS_DENIED = 12;\n   */\n  AUTH_API_KEY_ACCESS_DENIED = 12,\n\n  /**\n   * Requested API key status transition is not allowed.\n   *\n   * @generated from enum value: AUTH_API_KEY_INVALID_STATUS_TRANSITION = 14;\n   */\n  AUTH_API_KEY_INVALID_STATUS_TRANSITION = 14,\n\n  /**\n   * Policy definition or binding is invalid.\n   *\n   * @generated from enum value: AUTH_POLICY_INVALID = 15;\n   */\n  AUTH_POLICY_INVALID = 15,\n\n  /**\n   * Smart-account address is already linked to another account.\n   *\n   * @generated from enum value: AUTH_SMART_ACCOUNT_ALREADY_LINKED = 16;\n   */\n  AUTH_SMART_ACCOUNT_ALREADY_LINKED = 16,\n\n  /**\n   * Caller does not have access to the requested invite.\n   *\n   * @generated from enum value: AUTH_INVITE_ACCESS_DENIED = 17;\n   */\n  AUTH_INVITE_ACCESS_DENIED = 17,\n\n  /**\n   * Invite cannot be used in its current state.\n   *\n   * @generated from enum value: AUTH_INVITE_INVALID_STATE = 18;\n   */\n  AUTH_INVITE_INVALID_STATE = 18,\n\n  /**\n   * MFA is not available for this account.\n   *\n   * @generated from enum value: AUTH_MFA_DISABLED = 19;\n   */\n  AUTH_MFA_DISABLED = 19,\n\n  /**\n   * Required MFA factor is not enrolled.\n   *\n   * @generated from enum value: AUTH_MFA_NOT_ENROLLED = 20;\n   */\n  AUTH_MFA_NOT_ENROLLED = 20,\n\n  /**\n   * MFA session is missing, expired, or invalid.\n   *\n   * @generated from enum value: AUTH_MFA_SESSION_INVALID = 21;\n   */\n  AUTH_MFA_SESSION_INVALID = 21,\n\n  /**\n   * MFA challenge was not found.\n   *\n   * @generated from enum value: AUTH_MFA_CHALLENGE_NOT_FOUND = 22;\n   */\n  AUTH_MFA_CHALLENGE_NOT_FOUND = 22,\n\n  /**\n   * MFA challenge payload is invalid.\n   *\n   * @generated from enum value: AUTH_MFA_CHALLENGE_INVALID = 23;\n   */\n  AUTH_MFA_CHALLENGE_INVALID = 23,\n\n  /**\n   * MFA challenge is locked after too many failed attempts.\n   *\n   * @generated from enum value: AUTH_MFA_CHALLENGE_LOCKED = 24;\n   */\n  AUTH_MFA_CHALLENGE_LOCKED = 24,\n\n  /**\n   * One-time password is invalid.\n   *\n   * @generated from enum value: AUTH_MFA_OTP_INVALID = 25;\n   */\n  AUTH_MFA_OTP_INVALID = 25,\n\n  /**\n   * Recovery code is invalid.\n   *\n   * @generated from enum value: AUTH_MFA_RECOVERY_INVALID = 26;\n   */\n  AUTH_MFA_RECOVERY_INVALID = 26,\n\n  /**\n   * Passkey verification is not available for this challenge.\n   *\n   * @generated from enum value: AUTH_MFA_PASSKEY_NOT_AVAILABLE = 27;\n   */\n  AUTH_MFA_PASSKEY_NOT_AVAILABLE = 27,\n\n  /**\n   * Passkey credential is invalid for this account or challenge.\n   *\n   * @generated from enum value: AUTH_MFA_PASSKEY_CREDENTIAL_INVALID = 28;\n   */\n  AUTH_MFA_PASSKEY_CREDENTIAL_INVALID = 28,\n\n  /**\n   * Passkey verification failed.\n   *\n   * @generated from enum value: AUTH_MFA_PASSKEY_VERIFY_FAILED = 29;\n   */\n  AUTH_MFA_PASSKEY_VERIFY_FAILED = 29,\n\n  /**\n   * MFA enrollment binding is invalid or expired.\n   *\n   * @generated from enum value: AUTH_MFA_ENROLLMENT_BINDING_INVALID = 30;\n   */\n  AUTH_MFA_ENROLLMENT_BINDING_INVALID = 30,\n\n  /**\n   * A fresh step-up proof is required for this protected operation.\n   *\n   * @generated from enum value: AUTH_STEP_UP_REQUIRED = 31;\n   */\n  AUTH_STEP_UP_REQUIRED = 31,\n\n  /**\n   * A requested step-up proof is unavailable.\n   *\n   * @generated from enum value: AUTH_STEP_UP_PROOF_UNAVAILABLE = 32;\n   */\n  AUTH_STEP_UP_PROOF_UNAVAILABLE = 32,\n\n  /**\n   * The step-up proof has already been claimed.\n   *\n   * @generated from enum value: AUTH_STEP_UP_ALREADY_CLAIMED = 33;\n   */\n  AUTH_STEP_UP_ALREADY_CLAIMED = 33,\n\n  /**\n   * The requested policy cannot be removed because it is still in use.\n   *\n   * @generated from enum value: AUTH_POLICY_IN_USE = 34;\n   */\n  AUTH_POLICY_IN_USE = 34,\n\n  /**\n   * The requested policy is locked against this mutation.\n   *\n   * @generated from enum value: AUTH_POLICY_LOCKED = 35;\n   */\n  AUTH_POLICY_LOCKED = 35,\n\n  /**\n   * The requested policy does not belong to the target account scope.\n   *\n   * @generated from enum value: AUTH_POLICY_SCOPE_MISMATCH = 36;\n   */\n  AUTH_POLICY_SCOPE_MISMATCH = 36,\n\n  /**\n   * The resource changed after the caller read it.\n   *\n   * @generated from enum value: AUTH_REVISION_CONFLICT = 37;\n   */\n  AUTH_REVISION_CONFLICT = 37,\n\n  /**\n   * A recently MFA-elevated interactive session is required.\n   *\n   * @generated from enum value: AUTH_MFA_ELEVATION_REQUIRED = 38;\n   */\n  AUTH_MFA_ELEVATION_REQUIRED = 38,\n\n  /**\n   * At least one active MFA factor must remain enrolled.\n   *\n   * @generated from enum value: AUTH_MFA_LAST_FACTOR_REQUIRED = 39;\n   */\n  AUTH_MFA_LAST_FACTOR_REQUIRED = 39,\n\n  /**\n   * An unexpected internal failure prevented the auth mutation from completing.\n   *\n   * @generated from enum value: AUTH_INTERNAL_ERROR = 40;\n   */\n  AUTH_INTERNAL_ERROR = 40,\n\n  /**\n   * The caller has not explicitly accepted the currently required terms.\n   *\n   * @generated from enum value: AUTH_TERMS_NOT_ACCEPTED = 41;\n   */\n  AUTH_TERMS_NOT_ACCEPTED = 41,\n}\n\n/**\n * Describes the enum auth.v1.AuthErrorCode.\n */\nexport const AuthErrorCodeSchema: GenEnum<AuthErrorCode> = /*@__PURE__*/\n  enumDesc(file_auth_v1_auth, 1);\n\n/**\n * AuthService manages wallet login, explicit terms consent, and caller authentication context.\n *\n * @generated from service auth.v1.AuthService\n */\nexport const AuthService: GenService<{\n  /**\n   * Create a short-lived EIP-4361 wallet challenge.\n   *\n   * @generated from rpc auth.v1.AuthService.CreateWalletChallenge\n   */\n  createWalletChallenge: {\n    methodKind: \"unary\";\n    input: typeof CreateWalletChallengeRequestSchema;\n    output: typeof CreateWalletChallengeResponseSchema;\n  },\n  /**\n   * Verify a signed EIP-4361 message and issue an access token. Login and account creation\n   * do not accept terms; explicit consent is recorded only by AcceptTerms.\n   *\n   * @generated from rpc auth.v1.AuthService.LoginWithWallet\n   */\n  loginWithWallet: {\n    methodKind: \"unary\";\n    input: typeof LoginWithWalletRequestSchema;\n    output: typeof LoginWithWalletResponseSchema;\n  },\n  /**\n   * Explicitly accept the currently required terms for the caller's root account.\n   * Requires an interactive JWT session; API keys are not allowed. No MFA is\n   * required. Login, trading, reads, and use of existing resources remain available\n   * without acceptance. Only CreateSubaccount, CreateApiKey, and\n   * CreateDepositAddress require acceptance of the current version.\n   *\n   * @generated from rpc auth.v1.AuthService.AcceptTerms\n   */\n  acceptTerms: {\n    methodKind: \"unary\";\n    input: typeof AcceptTermsRequestSchema;\n    output: typeof AcceptTermsResponseSchema;\n  },\n  /**\n   * Return the caller's current auth context.\n   *\n   * @generated from rpc auth.v1.AuthService.Me\n   */\n  me: {\n    methodKind: \"unary\";\n    input: typeof MeRequestSchema;\n    output: typeof MeResponseSchema;\n  },\n}> = /*@__PURE__*/\n  serviceDesc(file_auth_v1_auth, 0);\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAeA,MAAa,oBACX,uBAAS,oiHAAoiH,CAAC,kBAAkB,8BAA8B,CAAC;;;;;AA4CjmH,MAAa,qCACX,0BAAY,mBAAmB,CAAC;;;;;AA4BlC,MAAa,sCACX,0BAAY,mBAAmB,CAAC;;;;;AA6DlC,MAAa,+BACX,0BAAY,mBAAmB,CAAC;;;;;AAiDlC,MAAa,gCACX,0BAAY,mBAAmB,CAAC;;;;;AAelC,MAAa,kBACX,0BAAY,mBAAmB,CAAC;;;;;AAmDlC,MAAa,mBACX,0BAAY,mBAAmB,CAAC;;;;;AA2BlC,MAAa,wBACX,0BAAY,mBAAmB,CAAC;;;;;AAclC,MAAa,2BACX,0BAAY,mBAAmB,CAAC;;;;;AAelC,MAAa,4BACX,0BAAY,mBAAmB,CAAC;;;;;;AAOlC,IAAY,yBAAL,yBAAA,wBAAA;;;;;;CAML,uBAAA,uBAAA,8BAAA,KAAA;;;;;;CAOA,uBAAA,uBAAA,WAAA,KAAA;;;;;;CAOA,uBAAA,uBAAA,uBAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,+BACX,uBAAS,mBAAmB,CAAC;;;;;;AAO/B,IAAY,gBAAL,yBAAA,eAAA;;;;;;CAML,cAAA,cAAA,sBAAA,KAAA;;;;;;CAOA,cAAA,cAAA,2BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,yBAAA,KAAA;;;;;;CAOA,cAAA,cAAA,4BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,4BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,0BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,8BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,6BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,gCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,4CAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,uCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,uBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,2BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,8BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,gCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,0BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,oCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,oCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,2BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,oCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,wBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,wBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,gCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,4BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,iCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,6BAAA,MAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,sBACX,uBAAS,mBAAmB,CAAC;;;;;;AAO/B,MAAa,cA+CX,0BAAY,mBAAmB,CAAC"}
+{"version":3,"file":"auth_pb.js","names":[],"sources":["../../../../src/gen/auth/v1/auth_pb.ts"],"sourcesContent":["// @generated by protoc-gen-es v2.13.0 with parameter \"target=ts,import_extension=js\"\n// @generated from file auth/v1/auth.proto (package auth.v1, syntax proto3)\n/* eslint-disable */\n\nimport type { GenEnum, GenFile, GenMessage, GenService } from \"@bufbuild/protobuf/codegenv2\";\nimport { enumDesc, fileDesc, messageDesc, serviceDesc } from \"@bufbuild/protobuf/codegenv2\";\nimport type { SessionInfo } from \"./mfa_pb.js\";\nimport { file_auth_v1_mfa } from \"./mfa_pb.js\";\nimport type { Timestamp } from \"@bufbuild/protobuf/wkt\";\nimport { file_google_protobuf_timestamp } from \"@bufbuild/protobuf/wkt\";\nimport type { Message } from \"@bufbuild/protobuf\";\n\n/**\n * Describes the file auth/v1/auth.proto.\n */\nexport const file_auth_v1_auth: GenFile = /*@__PURE__*/\n  fileDesc(\"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\", [file_auth_v1_mfa, file_google_protobuf_timestamp]);\n\n/**\n * CreateWalletChallengeRequest requests a short-lived EIP-4361 message whose\n * exact UTF-8 bytes must be signed by the wallet.\n *\n * @generated from message auth.v1.CreateWalletChallengeRequest\n */\nexport type CreateWalletChallengeRequest = Message<\"auth.v1.CreateWalletChallengeRequest\"> & {\n  /**\n   * Smart-account EVM address being authenticated, formatted as 0x plus 40 hex characters.\n   *\n   * @generated from field: string smart_account_address = 1;\n   */\n  smartAccountAddress: string;\n\n  /**\n   * Address whose signature authorizes the challenge and that is written into\n   * the EIP-4361 message. For LOGIN, this must be an EOA that controls the\n   * target smart account. For CREATE_SUBACCOUNT, this must equal\n   * smart_account_address.\n   *\n   * @generated from field: string signer_address = 2;\n   */\n  signerAddress: string;\n\n  /**\n   * Browser origin URI requesting the signature, including scheme and optional\n   * port but no path, query, fragment, or user information.\n   *\n   * @generated from field: string uri = 3;\n   */\n  uri: string;\n\n  /**\n   * Operation for which the challenge may be consumed.\n   *\n   * @generated from field: auth.v1.WalletChallengePurpose purpose = 4;\n   */\n  purpose: WalletChallengePurpose;\n};\n\n/**\n * Describes the message auth.v1.CreateWalletChallengeRequest.\n * Use `create(CreateWalletChallengeRequestSchema)` to create a new message.\n */\nexport const CreateWalletChallengeRequestSchema: GenMessage<CreateWalletChallengeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 0);\n\n/**\n * CreateWalletChallengeResponse contains the canonical EIP-4361 message.\n *\n * @generated from message auth.v1.CreateWalletChallengeResponse\n */\nexport type CreateWalletChallengeResponse = Message<\"auth.v1.CreateWalletChallengeResponse\"> & {\n  /**\n   * Canonical EIP-4361 message. Sign these UTF-8 bytes exactly once with\n   * personal_sign; do not hash, alter, or reconstruct the message.\n   *\n   * @generated from field: string message = 1;\n   */\n  message: string;\n\n  /**\n   * Time in UTC when the challenge expires. Wallet challenges expire after 5 minutes.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 2;\n   */\n  expiresAt?: Timestamp | undefined;\n};\n\n/**\n * Describes the message auth.v1.CreateWalletChallengeResponse.\n * Use `create(CreateWalletChallengeResponseSchema)` to create a new message.\n */\nexport const CreateWalletChallengeResponseSchema: GenMessage<CreateWalletChallengeResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 1);\n\n/**\n * LoginWithWalletRequest completes smart-account wallet login using the exact\n * server-issued EIP-4361 message and its signature.\n *\n * @generated from message auth.v1.LoginWithWalletRequest\n */\nexport type LoginWithWalletRequest = Message<\"auth.v1.LoginWithWalletRequest\"> & {\n  /**\n   * Smart-account EVM address bound into the challenge resource, formatted as\n   * 0x plus 40 hex characters.\n   *\n   * @generated from field: string smart_account_address = 1;\n   */\n  smartAccountAddress: string;\n\n  /**\n   * EOA signature over message using EIP-191 personal_sign semantics. A valid\n   * value is 65 bytes of hexadecimal with an optional 0x prefix. Requests are\n   * limited to 8192 characters.\n   *\n   * @generated from field: string signature = 3;\n   */\n  signature: string;\n\n  /**\n   * Optional user-agent string for account security and audit displays. Maximum\n   * length is 512 characters.\n   *\n   * @generated from field: string user_agent = 4;\n   */\n  userAgent: string;\n\n  /**\n   * Optional caller IP address for account security and audit displays. Maximum\n   * length is 64 characters.\n   *\n   * @generated from field: string ip = 5;\n   */\n  ip: string;\n\n  /**\n   * Optional provider hint for the signing wallet. Maximum length is 32 characters.\n   *\n   * @generated from field: string wallet_provider = 7;\n   */\n  walletProvider: string;\n\n  /**\n   * Exact EIP-4361 message returned by CreateWalletChallenge. Maximum length is\n   * 4096 UTF-8 bytes.\n   *\n   * @generated from field: string message = 8;\n   */\n  message: string;\n};\n\n/**\n * Describes the message auth.v1.LoginWithWalletRequest.\n * Use `create(LoginWithWalletRequestSchema)` to create a new message.\n */\nexport const LoginWithWalletRequestSchema: GenMessage<LoginWithWalletRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 2);\n\n/**\n * LoginWithWalletResponse returns a session token for the authenticated root\n * account.\n *\n * @generated from message auth.v1.LoginWithWalletResponse\n */\nexport type LoginWithWalletResponse = Message<\"auth.v1.LoginWithWalletResponse\"> & {\n  /**\n   * Bearer access token for authenticated API calls.\n   *\n   * @generated from field: string access_token = 1;\n   */\n  accessToken: string;\n\n  /**\n   * Time in UTC when access_token expires.\n   *\n   * @generated from field: google.protobuf.Timestamp expires_at = 2;\n   */\n  expiresAt?: Timestamp | undefined;\n\n  /**\n   * Root account the token is bound to (opaque ID).\n   *\n   * @generated from field: fixed64 account_id = 10;\n   */\n  accountId: bigint;\n\n  /**\n   * Optional current username for the root account (empty if not set).\n   *\n   * @generated from field: string username = 13;\n   */\n  username: string;\n\n  /**\n   * Session assurance details for the issued access token.\n   *\n   * @generated from field: auth.v1.SessionInfo session = 20;\n   */\n  session?: SessionInfo | undefined;\n};\n\n/**\n * Describes the message auth.v1.LoginWithWalletResponse.\n * Use `create(LoginWithWalletResponseSchema)` to create a new message.\n */\nexport const LoginWithWalletResponseSchema: GenMessage<LoginWithWalletResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 3);\n\n/**\n * MeRequest introspects the authenticated caller from the presented access\n * token or API key.\n *\n * @generated from message auth.v1.MeRequest\n */\nexport type MeRequest = Message<\"auth.v1.MeRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.MeRequest.\n * Use `create(MeRequestSchema)` to create a new message.\n */\nexport const MeRequestSchema: GenMessage<MeRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 4);\n\n/**\n * MeResponse describes the authenticated caller and current session context.\n *\n * @generated from message auth.v1.MeResponse\n */\nexport type MeResponse = Message<\"auth.v1.MeResponse\"> & {\n  /**\n   * Root account identifier (opaque ID).\n   *\n   * @generated from field: fixed64 account_id = 1;\n   */\n  accountId: bigint;\n\n  /**\n   * Stable public identifier of the API key that authenticated this request,\n   * formatted as \"ak_\" followed by 32 lowercase hexadecimal characters.\n   * Absent when the request was not authenticated with an API key.\n   *\n   * @generated from field: optional string api_key_id = 10;\n   */\n  apiKeyId?: string | undefined;\n\n  /**\n   * Optional current username for the root account (empty if not set).\n   *\n   * @generated from field: string username = 11;\n   */\n  username: string;\n\n  /**\n   * Root smart-account EVM address, formatted as 0x plus 40 hex characters.\n   * Empty if not set.\n   *\n   * @generated from field: string root_smart_account_address = 12;\n   */\n  rootSmartAccountAddress: string;\n\n  /**\n   * Session assurance details for the presented access token, if any.\n   *\n   * @generated from field: auth.v1.SessionInfo session = 20;\n   */\n  session?: SessionInfo | undefined;\n};\n\n/**\n * Describes the message auth.v1.MeResponse.\n * Use `create(MeResponseSchema)` to create a new message.\n */\nexport const MeResponseSchema: GenMessage<MeResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 5);\n\n/**\n * AuthErrorDetail describes an authentication or account-domain failure.\n *\n * @generated from message auth.v1.AuthErrorDetail\n */\nexport type AuthErrorDetail = Message<\"auth.v1.AuthErrorDetail\"> & {\n  /**\n   * Stable machine-readable auth error code.\n   *\n   * @generated from field: auth.v1.AuthErrorCode code = 1;\n   */\n  code: AuthErrorCode;\n\n  /**\n   * Human-readable error message.\n   *\n   * @generated from field: string message = 2;\n   */\n  message: string;\n};\n\n/**\n * Describes the message auth.v1.AuthErrorDetail.\n * Use `create(AuthErrorDetailSchema)` to create a new message.\n */\nexport const AuthErrorDetailSchema: GenMessage<AuthErrorDetail> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 6);\n\n/**\n * AcceptTermsRequest records explicit consent to the currently required terms.\n *\n * @generated from message auth.v1.AcceptTermsRequest\n */\nexport type AcceptTermsRequest = Message<\"auth.v1.AcceptTermsRequest\"> & {\n};\n\n/**\n * Describes the message auth.v1.AcceptTermsRequest.\n * Use `create(AcceptTermsRequestSchema)` to create a new message.\n */\nexport const AcceptTermsRequestSchema: GenMessage<AcceptTermsRequest> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 7);\n\n/**\n * AcceptTermsResponse confirms acceptance. Repeated acceptance of the current\n * version succeeds and preserves the first acceptance time.\n *\n * @generated from message auth.v1.AcceptTermsResponse\n */\nexport type AcceptTermsResponse = Message<\"auth.v1.AcceptTermsResponse\"> & {\n};\n\n/**\n * Describes the message auth.v1.AcceptTermsResponse.\n * Use `create(AcceptTermsResponseSchema)` to create a new message.\n */\nexport const AcceptTermsResponseSchema: GenMessage<AcceptTermsResponse> = /*@__PURE__*/\n  messageDesc(file_auth_v1_auth, 8);\n\n/**\n * Purpose for a server-issued wallet challenge.\n *\n * @generated from enum auth.v1.WalletChallengePurpose\n */\nexport enum WalletChallengePurpose {\n  /**\n   * No wallet challenge purpose was specified.\n   *\n   * @generated from enum value: WALLET_PROOF_UNSPECIFIED = 0;\n   */\n  WALLET_PROOF_UNSPECIFIED = 0,\n\n  /**\n   * Authenticate the wallet and create a Polyester session.\n   *\n   * @generated from enum value: LOGIN = 1;\n   */\n  LOGIN = 1,\n\n  /**\n   * Prove control of a new smart account before creating a sub-account.\n   *\n   * @generated from enum value: CREATE_SUBACCOUNT = 2;\n   */\n  CREATE_SUBACCOUNT = 2,\n}\n\n/**\n * Describes the enum auth.v1.WalletChallengePurpose.\n */\nexport const WalletChallengePurposeSchema: GenEnum<WalletChallengePurpose> = /*@__PURE__*/\n  enumDesc(file_auth_v1_auth, 0);\n\n/**\n * High-level error codes for authentication and account-domain failures.\n *\n * @generated from enum auth.v1.AuthErrorCode\n */\nexport enum AuthErrorCode {\n  /**\n   * No auth error code specified.\n   *\n   * @generated from enum value: AUTH_UNSPECIFIED = 0;\n   */\n  AUTH_UNSPECIFIED = 0,\n\n  /**\n   * Username format or characters are invalid.\n   *\n   * @generated from enum value: AUTH_USERNAME_INVALID = 1;\n   */\n  AUTH_USERNAME_INVALID = 1,\n\n  /**\n   * Username is already used by another account.\n   *\n   * @generated from enum value: AUTH_USERNAME_TAKEN = 2;\n   */\n  AUTH_USERNAME_TAKEN = 2,\n\n  /**\n   * Username was changed too recently.\n   *\n   * @generated from enum value: AUTH_USERNAME_COOLDOWN = 3;\n   */\n  AUTH_USERNAME_COOLDOWN = 3,\n\n  /**\n   * Account is not currently eligible to claim or change a username.\n   *\n   * @generated from enum value: AUTH_USERNAME_FEATURE_LOCKED = 4;\n   */\n  AUTH_USERNAME_FEATURE_LOCKED = 4,\n\n  /**\n   * Username is reserved and cannot be claimed by this account.\n   *\n   * @generated from enum value: AUTH_USERNAME_RESERVED = 5;\n   */\n  AUTH_USERNAME_RESERVED = 5,\n\n  /**\n   * Request is malformed or missing required input.\n   *\n   * @generated from enum value: AUTH_INVALID_REQUEST = 6;\n   */\n  AUTH_INVALID_REQUEST = 6,\n\n  /**\n   * Authentication is required for this operation.\n   *\n   * @generated from enum value: AUTH_AUTHENTICATION_REQUIRED = 7;\n   */\n  AUTH_AUTHENTICATION_REQUIRED = 7,\n\n  /**\n   * Presented session type is not allowed for this operation.\n   *\n   * @generated from enum value: AUTH_SESSION_KIND_NOT_ALLOWED = 8;\n   */\n  AUTH_SESSION_KIND_NOT_ALLOWED = 8,\n\n  /**\n   * Wallet login failed because the nonce or signature could not be verified.\n   *\n   * @generated from enum value: AUTH_WALLET_LOGIN_FAILED = 9;\n   */\n  AUTH_WALLET_LOGIN_FAILED = 9,\n\n  /**\n   * Requested resource was not found.\n   *\n   * @generated from enum value: AUTH_RESOURCE_NOT_FOUND = 10;\n   */\n  AUTH_RESOURCE_NOT_FOUND = 10,\n\n  /**\n   * Caller does not have access to the requested sub-account.\n   *\n   * @generated from enum value: AUTH_SUBACCOUNT_ACCESS_DENIED = 11;\n   */\n  AUTH_SUBACCOUNT_ACCESS_DENIED = 11,\n\n  /**\n   * Caller does not have access to the requested API key.\n   *\n   * @generated from enum value: AUTH_API_KEY_ACCESS_DENIED = 12;\n   */\n  AUTH_API_KEY_ACCESS_DENIED = 12,\n\n  /**\n   * Requested API key status transition is not allowed.\n   *\n   * @generated from enum value: AUTH_API_KEY_INVALID_STATUS_TRANSITION = 14;\n   */\n  AUTH_API_KEY_INVALID_STATUS_TRANSITION = 14,\n\n  /**\n   * Policy definition or binding is invalid.\n   *\n   * @generated from enum value: AUTH_POLICY_INVALID = 15;\n   */\n  AUTH_POLICY_INVALID = 15,\n\n  /**\n   * Smart-account address is already linked to another account.\n   *\n   * @generated from enum value: AUTH_SMART_ACCOUNT_ALREADY_LINKED = 16;\n   */\n  AUTH_SMART_ACCOUNT_ALREADY_LINKED = 16,\n\n  /**\n   * Caller does not have access to the requested invite.\n   *\n   * @generated from enum value: AUTH_INVITE_ACCESS_DENIED = 17;\n   */\n  AUTH_INVITE_ACCESS_DENIED = 17,\n\n  /**\n   * Invite cannot be used in its current state.\n   *\n   * @generated from enum value: AUTH_INVITE_INVALID_STATE = 18;\n   */\n  AUTH_INVITE_INVALID_STATE = 18,\n\n  /**\n   * MFA is not available for this account.\n   *\n   * @generated from enum value: AUTH_MFA_DISABLED = 19;\n   */\n  AUTH_MFA_DISABLED = 19,\n\n  /**\n   * Required MFA factor is not enrolled.\n   *\n   * @generated from enum value: AUTH_MFA_NOT_ENROLLED = 20;\n   */\n  AUTH_MFA_NOT_ENROLLED = 20,\n\n  /**\n   * MFA session is missing, expired, or invalid.\n   *\n   * @generated from enum value: AUTH_MFA_SESSION_INVALID = 21;\n   */\n  AUTH_MFA_SESSION_INVALID = 21,\n\n  /**\n   * MFA challenge was not found.\n   *\n   * @generated from enum value: AUTH_MFA_CHALLENGE_NOT_FOUND = 22;\n   */\n  AUTH_MFA_CHALLENGE_NOT_FOUND = 22,\n\n  /**\n   * MFA challenge payload is invalid.\n   *\n   * @generated from enum value: AUTH_MFA_CHALLENGE_INVALID = 23;\n   */\n  AUTH_MFA_CHALLENGE_INVALID = 23,\n\n  /**\n   * MFA challenge is locked after too many failed attempts.\n   *\n   * @generated from enum value: AUTH_MFA_CHALLENGE_LOCKED = 24;\n   */\n  AUTH_MFA_CHALLENGE_LOCKED = 24,\n\n  /**\n   * One-time password is invalid.\n   *\n   * @generated from enum value: AUTH_MFA_OTP_INVALID = 25;\n   */\n  AUTH_MFA_OTP_INVALID = 25,\n\n  /**\n   * Recovery code is invalid.\n   *\n   * @generated from enum value: AUTH_MFA_RECOVERY_INVALID = 26;\n   */\n  AUTH_MFA_RECOVERY_INVALID = 26,\n\n  /**\n   * Passkey verification is not available for this challenge.\n   *\n   * @generated from enum value: AUTH_MFA_PASSKEY_NOT_AVAILABLE = 27;\n   */\n  AUTH_MFA_PASSKEY_NOT_AVAILABLE = 27,\n\n  /**\n   * Passkey credential is invalid for this account or challenge.\n   *\n   * @generated from enum value: AUTH_MFA_PASSKEY_CREDENTIAL_INVALID = 28;\n   */\n  AUTH_MFA_PASSKEY_CREDENTIAL_INVALID = 28,\n\n  /**\n   * Passkey verification failed.\n   *\n   * @generated from enum value: AUTH_MFA_PASSKEY_VERIFY_FAILED = 29;\n   */\n  AUTH_MFA_PASSKEY_VERIFY_FAILED = 29,\n\n  /**\n   * MFA enrollment binding is invalid or expired.\n   *\n   * @generated from enum value: AUTH_MFA_ENROLLMENT_BINDING_INVALID = 30;\n   */\n  AUTH_MFA_ENROLLMENT_BINDING_INVALID = 30,\n\n  /**\n   * A fresh step-up proof is required for this protected operation.\n   *\n   * @generated from enum value: AUTH_STEP_UP_REQUIRED = 31;\n   */\n  AUTH_STEP_UP_REQUIRED = 31,\n\n  /**\n   * A requested step-up proof is unavailable.\n   *\n   * @generated from enum value: AUTH_STEP_UP_PROOF_UNAVAILABLE = 32;\n   */\n  AUTH_STEP_UP_PROOF_UNAVAILABLE = 32,\n\n  /**\n   * The step-up proof has already been claimed.\n   *\n   * @generated from enum value: AUTH_STEP_UP_ALREADY_CLAIMED = 33;\n   */\n  AUTH_STEP_UP_ALREADY_CLAIMED = 33,\n\n  /**\n   * The requested policy cannot be removed because it is still in use.\n   *\n   * @generated from enum value: AUTH_POLICY_IN_USE = 34;\n   */\n  AUTH_POLICY_IN_USE = 34,\n\n  /**\n   * The requested policy is locked against this mutation.\n   *\n   * @generated from enum value: AUTH_POLICY_LOCKED = 35;\n   */\n  AUTH_POLICY_LOCKED = 35,\n\n  /**\n   * The requested policy does not belong to the target account scope.\n   *\n   * @generated from enum value: AUTH_POLICY_SCOPE_MISMATCH = 36;\n   */\n  AUTH_POLICY_SCOPE_MISMATCH = 36,\n\n  /**\n   * The resource changed after the caller read it.\n   *\n   * @generated from enum value: AUTH_REVISION_CONFLICT = 37;\n   */\n  AUTH_REVISION_CONFLICT = 37,\n\n  /**\n   * A recently MFA-elevated interactive session is required.\n   *\n   * @generated from enum value: AUTH_MFA_ELEVATION_REQUIRED = 38;\n   */\n  AUTH_MFA_ELEVATION_REQUIRED = 38,\n\n  /**\n   * At least one active MFA factor must remain enrolled.\n   *\n   * @generated from enum value: AUTH_MFA_LAST_FACTOR_REQUIRED = 39;\n   */\n  AUTH_MFA_LAST_FACTOR_REQUIRED = 39,\n\n  /**\n   * An unexpected internal failure prevented the auth mutation from completing.\n   *\n   * @generated from enum value: AUTH_INTERNAL_ERROR = 40;\n   */\n  AUTH_INTERNAL_ERROR = 40,\n\n  /**\n   * The caller has not explicitly accepted the currently required terms.\n   *\n   * @generated from enum value: AUTH_TERMS_NOT_ACCEPTED = 41;\n   */\n  AUTH_TERMS_NOT_ACCEPTED = 41,\n}\n\n/**\n * Describes the enum auth.v1.AuthErrorCode.\n */\nexport const AuthErrorCodeSchema: GenEnum<AuthErrorCode> = /*@__PURE__*/\n  enumDesc(file_auth_v1_auth, 1);\n\n/**\n * AuthService manages wallet login, explicit terms consent, and caller authentication context.\n *\n * @generated from service auth.v1.AuthService\n */\nexport const AuthService: GenService<{\n  /**\n   * Create a short-lived EIP-4361 wallet challenge.\n   *\n   * @generated from rpc auth.v1.AuthService.CreateWalletChallenge\n   */\n  createWalletChallenge: {\n    methodKind: \"unary\";\n    input: typeof CreateWalletChallengeRequestSchema;\n    output: typeof CreateWalletChallengeResponseSchema;\n  },\n  /**\n   * Verify a signed EIP-4361 message and issue an access token. Login and account creation\n   * do not accept terms; explicit consent is recorded only by AcceptTerms.\n   *\n   * @generated from rpc auth.v1.AuthService.LoginWithWallet\n   */\n  loginWithWallet: {\n    methodKind: \"unary\";\n    input: typeof LoginWithWalletRequestSchema;\n    output: typeof LoginWithWalletResponseSchema;\n  },\n  /**\n   * Explicitly accept the currently required terms for the caller's root account.\n   * Requires an interactive JWT session; API keys are not allowed. No MFA is\n   * required. Login, trading, reads, and use of existing resources remain available\n   * without acceptance. Only CreateSubaccount, CreateApiKey, and\n   * CreateDepositAddress require acceptance of the current version.\n   *\n   * @generated from rpc auth.v1.AuthService.AcceptTerms\n   */\n  acceptTerms: {\n    methodKind: \"unary\";\n    input: typeof AcceptTermsRequestSchema;\n    output: typeof AcceptTermsResponseSchema;\n  },\n  /**\n   * Return the caller's current auth context.\n   *\n   * @generated from rpc auth.v1.AuthService.Me\n   */\n  me: {\n    methodKind: \"unary\";\n    input: typeof MeRequestSchema;\n    output: typeof MeResponseSchema;\n  },\n}> = /*@__PURE__*/\n  serviceDesc(file_auth_v1_auth, 0);\n\n"],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAeA,MAAa,oBACX,uBAAS,oiHAAoiH,CAAC,kBAAkB,8BAA8B,CAAC;;;;;AA8CjmH,MAAa,qCACX,0BAAY,mBAAmB,CAAC;;;;;AA4BlC,MAAa,sCACX,0BAAY,mBAAmB,CAAC;;;;;AA8DlC,MAAa,+BACX,0BAAY,mBAAmB,CAAC;;;;;AAiDlC,MAAa,gCACX,0BAAY,mBAAmB,CAAC;;;;;AAelC,MAAa,kBACX,0BAAY,mBAAmB,CAAC;;;;;AAmDlC,MAAa,mBACX,0BAAY,mBAAmB,CAAC;;;;;AA2BlC,MAAa,wBACX,0BAAY,mBAAmB,CAAC;;;;;AAclC,MAAa,2BACX,0BAAY,mBAAmB,CAAC;;;;;AAelC,MAAa,4BACX,0BAAY,mBAAmB,CAAC;;;;;;AAOlC,IAAY,yBAAL,yBAAA,wBAAA;;;;;;CAML,uBAAA,uBAAA,8BAAA,KAAA;;;;;;CAOA,uBAAA,uBAAA,WAAA,KAAA;;;;;;CAOA,uBAAA,uBAAA,uBAAA,KAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,+BACX,uBAAS,mBAAmB,CAAC;;;;;;AAO/B,IAAY,gBAAL,yBAAA,eAAA;;;;;;CAML,cAAA,cAAA,sBAAA,KAAA;;;;;;CAOA,cAAA,cAAA,2BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,yBAAA,KAAA;;;;;;CAOA,cAAA,cAAA,4BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,4BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,0BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,KAAA;;;;;;CAOA,cAAA,cAAA,8BAAA,KAAA;;;;;;CAOA,cAAA,cAAA,6BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,gCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,4CAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,uCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,uBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,2BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,8BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,gCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,0BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,+BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,oCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,oCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,2BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,oCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,kCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,wBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,wBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,gCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,4BAAA,MAAA;;;;;;CAOA,cAAA,cAAA,iCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,mCAAA,MAAA;;;;;;CAOA,cAAA,cAAA,yBAAA,MAAA;;;;;;CAOA,cAAA,cAAA,6BAAA,MAAA;;AACF,EAAA,CAAA,CAAA;;;;AAKA,MAAa,sBACX,uBAAS,mBAAmB,CAAC;;;;;;AAO/B,MAAa,cA+CX,0BAAY,mBAAmB,CAAC"}