@polyester/sdk 0.26.0 → 0.27.0

package/dist/services/subaccounts/subaccounts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subaccounts.d.ts","names":[],"sources":["../../../src/services/subaccounts/subaccounts.ts"],"mappings":";;;;;;;;;;;;;;UAmDU,kCAAkC,mBAAmB;EAC3D;;UAGM,8BAA8B,mBAAmB;EACvD;;;;;cAMS;;WACA,UAAU;EASf,YAAA,YAAY,4BACZ,UAAU,mBACV,WAAW;;;;EAaT,KAAK,UAAU,0BAA0B;IAC3C;IACA,aAAa,EAAE,mBAAmB;;;;;EAYhC,IACF,OAAO,EAAE,kBAAkB,0BAC3B,UAAU,0BACX,QACC;IACI,SAAS;IACT,QAAQ;IACR,SAAS;IACT,SAAS;;;;;EAmCX,OACF,OAAO,EAAE,kBAAkB,8BAC3B,UAAU,2BACX,QAAQ;;;;EAYL,OACF,OAAO,EAAE,kBAAkB,8BAC3B,UAAU,2BACX,QAAQ;;;;EAaL,aACF,OAAO,EAAE,kBAAkB,oCAC3B,UAAU,2BACX,QAAQ;;;;EAYL,aACF,OAAO,EAAE,kBAAkB,oCAC3B,UAAU,2BACX,QAAQ;;;;EAYL,iBACF,OAAO,EAAE,kBAAkB,wCAC3B,UAAU,2BACX,QAAQ;;;;EAYL,wBACF,OAAO,EAAE,kBAAkB,+CAC3B,UAAU,2BACX,QAAQ;;;;EAYL,YACF,OAAO,EAAE,kBAAkB,mCAC3B,UAAU,0BACX,QAAQ;;;;EAYL,UAAU,UAAU,0BAA0B,QAAQ;;;;EAWtD,wBACF,OAAO,EAAE,kBAAkB,0BAC3B,UAAU,0BACX,QAAQ;;;;EAYL,YACF,OAAO,EAAE,kBAAkB,0BAC3B,UAAU,0BACX,QAAQ;;;;EAYL,cACF,OAAO,EAAE,kBAAkB,qCAC3B,UAAU,2BACX,QAAQ;;;;EAYL,WACF,OAAO,EAAE,kBAAkB,gCAC3B,UAAU,0BACX;IAAU,QAAQ;IAAmB;;;;;EAexC,UAAU,OAAO;;;;EAmBjB,iBAAiB,OAAO"}
+{"version":3,"file":"subaccounts.d.ts","names":[],"sources":["../../../src/services/subaccounts/subaccounts.ts"],"mappings":";;;;;;;;;;;;;;UAsDU,kCAAkC,mBAAmB;EAC3D;;UAGM,8BAA8B,mBAAmB;EACvD;;;;;cAMS;;WACA,UAAU;EASf,YAAA,YAAY,4BACZ,UAAU,mBACV,WAAW;;;;EAaT,KAAK,UAAU,0BAA0B;IAC3C;IACA,aAAa,EAAE,mBAAmB;;;;;EAYhC,IACF,OAAO,EAAE,kBAAkB,0BAC3B,UAAU,0BACX,QACC;IACI,SAAS;IACT,QAAQ;IACR,SAAS;IACT,SAAS;;;;;;;EAqCX,gBACF,OAAO,EAAE,kBAAkB,uCAC3B,UAAU,0BACX,QAAQ;;;;EAYL,OACF,OAAO,EAAE,kBAAkB,8BAC3B,UAAU,2BACX,QAAQ;;;;EAYL,OACF,OAAO,EAAE,kBAAkB,8BAC3B,UAAU,2BACX,QAAQ;;;;EAaL,aACF,OAAO,EAAE,kBAAkB,oCAC3B,UAAU,2BACX,QAAQ;;;;EAYL,aACF,OAAO,EAAE,kBAAkB,oCAC3B,UAAU,2BACX,QAAQ;;;;EAYL,iBACF,OAAO,EAAE,kBAAkB,wCAC3B,UAAU,2BACX,QAAQ;;;;EAYL,wBACF,OAAO,EAAE,kBAAkB,+CAC3B,UAAU,2BACX,QAAQ;;;;EAYL,YACF,OAAO,EAAE,kBAAkB,mCAC3B,UAAU,0BACX,QAAQ;;;;EAYL,UAAU,UAAU,0BAA0B,QAAQ;;;;EAWtD,wBACF,OAAO,EAAE,kBAAkB,0BAC3B,UAAU,0BACX,QAAQ;;;;EAYL,YACF,OAAO,EAAE,kBAAkB,0BAC3B,UAAU,0BACX,QAAQ;;;;EAYL,cACF,OAAO,EAAE,kBAAkB,qCAC3B,UAAU,2BACX,QAAQ;;;;EAYL,WACF,OAAO,EAAE,kBAAkB,gCAC3B,UAAU,0BACX;IAAU,QAAQ;IAAmB;;;;;EAexC,UAAU,OAAO;;;;EAmBjB,iBAAiB,OAAO"}

package/dist/services/subaccounts/subaccounts.js

@@ -6,7 +6,7 @@ import { ApiKeySchema as ApiKeySchema$1 } from "../api-keys/api-keys.schemas.js"
 import { SubaccountRoleService, SubaccountSchema, SubaccountService, SubaccountViewService } from "../../gen/auth/v1/subaccounts_pb.js";
 import { DEFAULT_SUBACCOUNT_POLICY, SubaccountPolicySchema } from "../policies/subaccount-policies/subaccount-policies.schemas.js";
 import { SubaccountPoliciesService } from "../policies/subaccount-policies/subaccount-policies.js";
-import { CreateSubaccountInputSchema, CreateSubaccountResultSchema, EffectiveSubaccountPermissionsSchema, InviteSubaccountMemberInputSchema, ListSubaccountInvitesInputSchema, RemoveSubaccountMemberInputSchema, RespondSubaccountInviteInputSchema, SetSubaccountMemberMfaRequirementInputSchema, SubaccountActivityEventSchema, SubaccountActivityInputSchema, SubaccountIdInputSchema, SubaccountInviteSchema, SubaccountMemberSchema, SubaccountMutationResultSchema, SubaccountRoleCatalogSchema, SubaccountSchema as SubaccountSchema$1, UpdateSubaccountInputSchema, UpdateSubaccountMemberRoleInputSchema } from "./subaccounts.schemas.js";
+import { CreateSubaccountChallengeInputSchema, CreateSubaccountInputSchema, CreateSubaccountResultSchema, EffectiveSubaccountPermissionsSchema, InviteSubaccountMemberInputSchema, ListSubaccountInvitesInputSchema, RemoveSubaccountMemberInputSchema, RespondSubaccountInviteInputSchema, SetSubaccountMemberMfaRequirementInputSchema, SubaccountActivityEventSchema, SubaccountActivityInputSchema, SubaccountChallengeSchema, SubaccountIdInputSchema, SubaccountInviteSchema, SubaccountMemberSchema, SubaccountMutationResultSchema, SubaccountRoleCatalogSchema, SubaccountSchema as SubaccountSchema$1, UpdateSubaccountInputSchema, UpdateSubaccountMemberRoleInputSchema } from "./subaccounts.schemas.js";
 import { createClient } from "@connectrpc/connect";
 import * as v from "valibot";
 //#region src/services/subaccounts/subaccounts.ts
@@ -29,7 +29,7 @@ var SubaccountsService = class {
 		this.#realtime = realtime;
 	}
 	/**
-	* Returns subaccounts owned by or shared with the caller plus totalCreated, including soft-deleted count metadata useful for deriving future smart-account salts.
+	* Returns subaccounts owned by or shared with the caller plus totalCreated, including soft-deleted ones. Use `createChallenge` for the canonical next smart-account address and salt.
 	*/
 	async list(options) {
 		const res = await this.#client.listSubaccounts({}, toConnectCallOptions(options));
@@ -63,7 +63,17 @@ var SubaccountsService = class {
 		};
 	}
 	/**
-	* Creates a new subaccount under the caller's root account using a smart-account address, server-issued SIWE message, and signature proof.
+	* Requests the canonical next smart account and a short-lived EIP-191 authorization message
+	* bound to the authenticated root and the selected owner EOA. Sign the exact message through
+	* the returned smart account, then pass it to `create`. A new challenge replaces the previous one.
+	*/
+	async createChallenge(input, options) {
+		const validatedInput = parse(CreateSubaccountChallengeInputSchema, input);
+		const res = await this.#client.createSubaccountChallenge(validatedInput, toConnectCallOptions(options));
+		return parse(SubaccountChallengeSchema, res);
+	}
+	/**
+	* Creates a new subaccount under the caller's root account using the smart-account address, message, and smart-account signature from `createChallenge`.
 	*/
 	async create(input, options) {
 		const validatedInput = parse(CreateSubaccountInputSchema, input);

package/dist/services/subaccounts/subaccounts.js.map

@@ -1 +1 @@
-{"version":3,"file":"subaccounts.js","names":["#client","Proto.SubaccountService","#viewClient","Proto.SubaccountViewService","#publicRoleClient","Proto.SubaccountRoleService","#authRoleClient","#realtime","SubaccountSchema","ApiKeySchema","Proto.SubaccountSchema","ProtoApiKeys.ApiKeySchema"],"sources":["../../../src/services/subaccounts/subaccounts.ts"],"sourcesContent":["import * as Proto from \"../../gen/auth/v1/subaccounts_pb.js\";\nimport * as ProtoApiKeys from \"../../gen/auth/v1/api_keys_pb.js\";\nimport { createClient, type Client } from \"@connectrpc/connect\";\nimport * as v from \"valibot\";\nimport { parse } from \"../../shared/validation.js\";\nimport { type ApiKey, ApiKeySchema } from \"../api-keys/index.js\";\nimport { formatId } from \"../../utils/base58-id.js\";\nimport {\n    toConnectCallOptions,\n    type PolyesterMutationOptions,\n    type PolyesterRequestOptions,\n} from \"../../shared/request-options.js\";\nimport type { PolyesterRealtime } from \"../../realtime/index.js\";\nimport {\n    DEFAULT_SUBACCOUNT_POLICY,\n    SubaccountPoliciesService,\n    type SubaccountPolicy,\n    SubaccountPolicySchema,\n} from \"../policies/subaccount-policies/index.js\";\nimport type { BaseSubscribeInput } from \"../../shared/types.js\";\nimport type { AuthAndPublicApiTransports } from \"../../shared/transports.js\";\nimport type { SubaccountResolver } from \"../subaccount-resolver.js\";\nimport {\n    CreateSubaccountInputSchema,\n    CreateSubaccountResultSchema,\n    UpdateSubaccountInputSchema,\n    InviteSubaccountMemberInputSchema,\n    RemoveSubaccountMemberInputSchema,\n    UpdateSubaccountMemberRoleInputSchema,\n    ListSubaccountInvitesInputSchema,\n    RespondSubaccountInviteInputSchema,\n    SubaccountActivityInputSchema,\n    SubaccountSchema,\n    SubaccountMemberSchema,\n    SubaccountInviteSchema,\n    SubaccountActivityEventSchema,\n    SetSubaccountMemberMfaRequirementInputSchema,\n    SubaccountIdInputSchema,\n    SubaccountMutationResultSchema,\n    SubaccountRoleCatalogSchema,\n    EffectiveSubaccountPermissionsSchema,\n    type CreateSubaccountResult,\n    type Subaccount,\n    type SubaccountMember,\n    type SubaccountInvite,\n    type SubaccountEvent,\n    type SubaccountMutationResult,\n    type SubaccountRoleCatalog,\n    type EffectiveSubaccountPermissions,\n} from \"./subaccounts.schemas.js\";\n\ninterface SubscribeSubaccountsInput extends BaseSubscribeInput<Subaccount> {\n    accountId: string;\n}\n\ninterface SubscribeApiKeysInput extends BaseSubscribeInput<ApiKey> {\n    accountId: string;\n}\n\n/**\n * Reads the public role catalog and creates, manages, shares, audits, and subscribes to subaccounts visible to the authenticated caller.\n */\nexport class SubaccountsService {\n    readonly policies: SubaccountPoliciesService;\n\n    #client: Client<typeof Proto.SubaccountService>;\n    #viewClient: Client<typeof Proto.SubaccountViewService>;\n    #publicRoleClient: Client<typeof Proto.SubaccountRoleService>;\n    #authRoleClient: Client<typeof Proto.SubaccountRoleService>;\n    #realtime: PolyesterRealtime;\n\n    constructor(\n        transports: AuthAndPublicApiTransports,\n        realtime: PolyesterRealtime,\n        resolver?: SubaccountResolver,\n    ) {\n        this.policies = new SubaccountPoliciesService(transports, realtime, resolver);\n        this.#client = createClient(Proto.SubaccountService, transports.authApi);\n        this.#viewClient = createClient(Proto.SubaccountViewService, transports.authApi);\n        this.#publicRoleClient = createClient(Proto.SubaccountRoleService, transports.publicApi);\n        this.#authRoleClient = createClient(Proto.SubaccountRoleService, transports.authApi);\n        this.#realtime = realtime;\n    }\n\n    /**\n     * Returns subaccounts owned by or shared with the caller plus totalCreated, including soft-deleted count metadata useful for deriving future smart-account salts.\n     */\n    async list(options?: PolyesterRequestOptions): Promise<{\n        totalCreated: number;\n        subaccounts: v.InferOutput<typeof SubaccountSchema>[];\n    }> {\n        const res = await this.#client.listSubaccounts({}, toConnectCallOptions(options));\n        return {\n            totalCreated: res.totalCreated,\n            subaccounts: parse(v.array(SubaccountSchema), res.subaccounts),\n        };\n    }\n\n    /**\n     * Fetches an aggregated subaccount dashboard view with subaccount details, policy, API keys, balances, members, and outgoing invites; throws if the subaccount is missing.\n     */\n    async get(\n        input: v.InferInput<typeof SubaccountIdInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<\n        Subaccount & {\n            apiKeys: ApiKey[];\n            policy: SubaccountPolicy;\n            members: SubaccountMember[];\n            invites: SubaccountInvite[];\n        }\n    > {\n        const validatedInput = parse(SubaccountIdInputSchema, input);\n        const subaccountId = formatId(validatedInput.subaccountId);\n        const res = await this.#viewClient.getSubaccount(\n            {\n                subaccountId: validatedInput.subaccountId,\n                includeApiKeys: true,\n                includeBalances: true,\n                includeMembers: true,\n                includeInvites: true,\n                includePolicy: true,\n                invitesDirection: Proto.SubaccountInviteDirection.OUTGOING,\n            },\n            toConnectCallOptions(options),\n        );\n        if (!res.subaccount) throw new Error(`Subaccount not found: ${subaccountId}`);\n\n        return {\n            ...parse(SubaccountSchema, res.subaccount),\n            policy: res.policy\n                ? parse(SubaccountPolicySchema, res.policy)\n                : DEFAULT_SUBACCOUNT_POLICY,\n            apiKeys: parse(v.optional(v.array(ApiKeySchema), []), res.apiKeys),\n            members: parse(v.optional(v.array(SubaccountMemberSchema), []), res.members),\n            invites: v\n                .parse(v.optional(v.array(SubaccountInviteSchema), []), res.invites)\n                .filter((invite) => invite.subaccountId === subaccountId),\n        };\n    }\n\n    /**\n     * Creates a new subaccount under the caller's root account using a smart-account address, server-issued SIWE message, and signature proof.\n     */\n    async create(\n        input: v.InferInput<typeof CreateSubaccountInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<CreateSubaccountResult> {\n        const validatedInput = parse(CreateSubaccountInputSchema, input);\n        const res = await this.#client.createSubaccount(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(CreateSubaccountResultSchema, res);\n    }\n\n    /**\n     * Updates mutable subaccount display/status fields such as label and active/disabled status.\n     */\n    async update(\n        input: v.InferInput<typeof UpdateSubaccountInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<Subaccount> {\n        const validatedInput = parse(UpdateSubaccountInputSchema, input);\n        const res = await this.#client.updateSubaccount(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        if (!res.subaccount) throw new Error(\"Failed to update subaccount\");\n        return parse(SubaccountSchema, res.subaccount);\n    }\n\n    /**\n     * Creates or refreshes a pending invitation granting a role on a subaccount to another root account.\n     */\n    async inviteMember(\n        input: v.InferInput<typeof InviteSubaccountMemberInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountInvite> {\n        const validatedInput = parse(InviteSubaccountMemberInputSchema, input);\n        const res = await this.#client.inviteSubaccountMember(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountInviteSchema, res.invite);\n    }\n\n    /**\n     * Removes delegated access for a subaccount member by grantee account ID.\n     */\n    async removeMember(\n        input: v.InferInput<typeof RemoveSubaccountMemberInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountMutationResult> {\n        const validatedInput = parse(RemoveSubaccountMemberInputSchema, input);\n        const res = await this.#client.removeSubaccountMember(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountMutationResultSchema, res);\n    }\n\n    /**\n     * Changes an existing delegated member's role without sending a new invitation.\n     */\n    async updateMemberRole(\n        input: v.InferInput<typeof UpdateSubaccountMemberRoleInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountMutationResult> {\n        const validatedInput = parse(UpdateSubaccountMemberRoleInputSchema, input);\n        const res = await this.#client.updateSubaccountMemberRole(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountMutationResultSchema, res);\n    }\n\n    /**\n     * Enables or disables the owner-controlled MFA requirement for delegated interactive member actions on a subaccount.\n     */\n    async setMemberMfaRequirement(\n        input: v.InferInput<typeof SetSubaccountMemberMfaRequirementInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountMutationResult> {\n        const validatedInput = parse(SetSubaccountMemberMfaRequirementInputSchema, input);\n        const res = await this.#client.setSubaccountMemberMFARequirement(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountMutationResultSchema, res);\n    }\n\n    /**\n     * Returns incoming, outgoing, or all subaccount invitations for the caller, newest first.\n     */\n    async listInvites(\n        input: v.InferInput<typeof ListSubaccountInvitesInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<SubaccountInvite[]> {\n        const validatedInput = parse(ListSubaccountInvitesInputSchema, input);\n        const res = await this.#client.listSubaccountInvites(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(v.array(SubaccountInviteSchema), res.invites);\n    }\n\n    /**\n     * Returns the public built-in role and permission catalog with display metadata and per-role permission sets.\n     */\n    async listRoles(options?: PolyesterRequestOptions): Promise<SubaccountRoleCatalog> {\n        const res = await this.#publicRoleClient.listSubaccountRoles(\n            {},\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountRoleCatalogSchema, res);\n    }\n\n    /**\n     * Returns the caller's current role, effective role-granted permissions, and attached policy ID for a subaccount.\n     */\n    async getEffectivePermissions(\n        input: v.InferInput<typeof SubaccountIdInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<EffectiveSubaccountPermissions> {\n        const validatedInput = parse(SubaccountIdInputSchema, input);\n        const res = await this.#authRoleClient.getEffectiveSubaccountPermissions(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(EffectiveSubaccountPermissionsSchema, res);\n    }\n\n    /**\n     * Returns the owner and delegated members for a subaccount, including role and MFA enrollment status.\n     */\n    async listMembers(\n        input: v.InferInput<typeof SubaccountIdInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<SubaccountMember[]> {\n        const validatedInput = parse(SubaccountIdInputSchema, input);\n        const res = await this.#client.listSubaccountMembers(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(v.array(SubaccountMemberSchema), res.members);\n    }\n\n    /**\n     * Accepts or rejects an incoming invite, or cancels an outgoing invite, returning the updated invitation.\n     */\n    async respondInvite(\n        input: v.InferInput<typeof RespondSubaccountInviteInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountInvite> {\n        const validatedInput = parse(RespondSubaccountInviteInputSchema, input);\n        const res = await this.#client.respondSubaccountInvite(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountInviteSchema, res.invite);\n    }\n\n    /**\n     * Returns paginated audit/activity events for a subaccount, newest first, with a non-negative integer limit from 0 through 200 and opaque cursor pagination.\n     */\n    async listEvents(\n        input: v.InferInput<typeof SubaccountActivityInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<{ events: SubaccountEvent[]; nextPageToken: string }> {\n        const validatedInput = parse(SubaccountActivityInputSchema, input);\n        const res = await this.#viewClient.listSubaccountActivity(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return {\n            events: parse(v.optional(v.array(SubaccountActivityEventSchema), []), res.events),\n            nextPageToken: res.nextPageToken,\n        };\n    }\n\n    /**\n     * Subscribes to private subaccount updates for an account and emits normalized subaccount records.\n     */\n    subscribe(input: SubscribeSubaccountsInput) {\n        const channel = `private:auth:subaccounts:${input.accountId}:proto`;\n\n        return this.#realtime.connectProtoChannel({\n            channel,\n            schema: Proto.SubaccountSchema,\n            onPublication: (data) => {\n                const subaccount = parse(SubaccountSchema, data);\n                input.onEvent(subaccount);\n            },\n            onConnected: () => input.onOpen?.(),\n            onDisconnected: () => input.onClose?.(),\n            onError: input.onError,\n        });\n    }\n\n    /**\n     * Subscribes to private API key updates for an account through the subaccount realtime channel helper.\n     */\n    subscribeApiKeys(input: SubscribeApiKeysInput) {\n        const channel = `private:auth:api-keys:${input.accountId}:proto`;\n\n        return this.#realtime.connectProtoChannel({\n            channel,\n            schema: ProtoApiKeys.ApiKeySchema,\n            onPublication: (data) => {\n                const apiKey = parse(ApiKeySchema, data);\n                input.onEvent(apiKey);\n            },\n            onConnected: () => input.onOpen?.(),\n            onDisconnected: () => input.onClose?.(),\n            onError: input.onError,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;AA8DA,IAAa,qBAAb,MAAgC;CAC5B;CAEA;CACA;CACA;CACA;CACA;CAEA,YACI,YACA,UACA,UACF;EACE,KAAK,WAAW,IAAI,0BAA0B,YAAY,UAAU,QAAQ;EAC5E,KAAKA,UAAU,aAAaC,mBAAyB,WAAW,OAAO;EACvE,KAAKC,cAAc,aAAaC,uBAA6B,WAAW,OAAO;EAC/E,KAAKC,oBAAoB,aAAaC,uBAA6B,WAAW,SAAS;EACvF,KAAKC,kBAAkB,aAAaD,uBAA6B,WAAW,OAAO;EACnF,KAAKE,YAAY;CACrB;;;;CAKA,MAAM,KAAK,SAGR;EACC,MAAM,MAAM,MAAM,KAAKP,QAAQ,gBAAgB,CAAC,GAAG,qBAAqB,OAAO,CAAC;EAChF,OAAO;GACH,cAAc,IAAI;GAClB,aAAa,MAAM,EAAE,MAAMQ,kBAAgB,GAAG,IAAI,WAAW;EACjE;CACJ;;;;CAKA,MAAM,IACF,OACA,SAQF;EACE,MAAM,iBAAiB,MAAM,yBAAyB,KAAK;EAC3D,MAAM,eAAe,SAAS,eAAe,YAAY;EACzD,MAAM,MAAM,MAAM,KAAKN,YAAY,cAC/B;GACI,cAAc,eAAe;GAC7B,gBAAgB;GAChB,iBAAiB;GACjB,gBAAgB;GAChB,gBAAgB;GAChB,eAAe;GACf,kBAAA;EACJ,GACA,qBAAqB,OAAO,CAChC;EACA,IAAI,CAAC,IAAI,YAAY,MAAM,IAAI,MAAM,yBAAyB,cAAc;EAE5E,OAAO;GACH,GAAG,MAAMM,oBAAkB,IAAI,UAAU;GACzC,QAAQ,IAAI,SACN,MAAM,wBAAwB,IAAI,MAAM,IACxC;GACN,SAAS,MAAM,EAAE,SAAS,EAAE,MAAMC,cAAY,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO;GACjE,SAAS,MAAM,EAAE,SAAS,EAAE,MAAM,sBAAsB,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO;GAC3E,SAAS,EACJ,MAAM,EAAE,SAAS,EAAE,MAAM,sBAAsB,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,CACnE,QAAQ,WAAW,OAAO,iBAAiB,YAAY;EAChE;CACJ;;;;CAKA,MAAM,OACF,OACA,SAC+B;EAC/B,MAAM,iBAAiB,MAAM,6BAA6B,KAAK;EAC/D,MAAM,MAAM,MAAM,KAAKT,QAAQ,iBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,8BAA8B,GAAG;CAClD;;;;CAKA,MAAM,OACF,OACA,SACmB;EACnB,MAAM,iBAAiB,MAAM,6BAA6B,KAAK;EAC/D,MAAM,MAAM,MAAM,KAAKA,QAAQ,iBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,IAAI,CAAC,IAAI,YAAY,MAAM,IAAI,MAAM,6BAA6B;EAClE,OAAO,MAAMQ,oBAAkB,IAAI,UAAU;CACjD;;;;CAKA,MAAM,aACF,OACA,SACyB;EACzB,MAAM,iBAAiB,MAAM,mCAAmC,KAAK;EACrE,MAAM,MAAM,MAAM,KAAKR,QAAQ,uBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,wBAAwB,IAAI,MAAM;CACnD;;;;CAKA,MAAM,aACF,OACA,SACiC;EACjC,MAAM,iBAAiB,MAAM,mCAAmC,KAAK;EACrE,MAAM,MAAM,MAAM,KAAKA,QAAQ,uBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,gCAAgC,GAAG;CACpD;;;;CAKA,MAAM,iBACF,OACA,SACiC;EACjC,MAAM,iBAAiB,MAAM,uCAAuC,KAAK;EACzE,MAAM,MAAM,MAAM,KAAKA,QAAQ,2BAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,gCAAgC,GAAG;CACpD;;;;CAKA,MAAM,wBACF,OACA,SACiC;EACjC,MAAM,iBAAiB,MAAM,8CAA8C,KAAK;EAChF,MAAM,MAAM,MAAM,KAAKA,QAAQ,kCAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,gCAAgC,GAAG;CACpD;;;;CAKA,MAAM,YACF,OACA,SAC2B;EAC3B,MAAM,iBAAiB,MAAM,kCAAkC,KAAK;EACpE,MAAM,MAAM,MAAM,KAAKA,QAAQ,sBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,EAAE,MAAM,sBAAsB,GAAG,IAAI,OAAO;CAC7D;;;;CAKA,MAAM,UAAU,SAAmE;EAC/E,MAAM,MAAM,MAAM,KAAKI,kBAAkB,oBACrC,CAAC,GACD,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,6BAA6B,GAAG;CACjD;;;;CAKA,MAAM,wBACF,OACA,SACuC;EACvC,MAAM,iBAAiB,MAAM,yBAAyB,KAAK;EAC3D,MAAM,MAAM,MAAM,KAAKE,gBAAgB,kCACnC,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,sCAAsC,GAAG;CAC1D;;;;CAKA,MAAM,YACF,OACA,SAC2B;EAC3B,MAAM,iBAAiB,MAAM,yBAAyB,KAAK;EAC3D,MAAM,MAAM,MAAM,KAAKN,QAAQ,sBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,EAAE,MAAM,sBAAsB,GAAG,IAAI,OAAO;CAC7D;;;;CAKA,MAAM,cACF,OACA,SACyB;EACzB,MAAM,iBAAiB,MAAM,oCAAoC,KAAK;EACtE,MAAM,MAAM,MAAM,KAAKA,QAAQ,wBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,wBAAwB,IAAI,MAAM;CACnD;;;;CAKA,MAAM,WACF,OACA,SAC6D;EAC7D,MAAM,iBAAiB,MAAM,+BAA+B,KAAK;EACjE,MAAM,MAAM,MAAM,KAAKE,YAAY,uBAC/B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO;GACH,QAAQ,MAAM,EAAE,SAAS,EAAE,MAAM,6BAA6B,GAAG,CAAC,CAAC,GAAG,IAAI,MAAM;GAChF,eAAe,IAAI;EACvB;CACJ;;;;CAKA,UAAU,OAAkC;EACxC,MAAM,UAAU,4BAA4B,MAAM,UAAU;EAE5D,OAAO,KAAKK,UAAU,oBAAoB;GACtC;GACA,QAAQG;GACR,gBAAgB,SAAS;IACrB,MAAM,aAAa,MAAMF,oBAAkB,IAAI;IAC/C,MAAM,QAAQ,UAAU;GAC5B;GACA,mBAAmB,MAAM,SAAS;GAClC,sBAAsB,MAAM,UAAU;GACtC,SAAS,MAAM;EACnB,CAAC;CACL;;;;CAKA,iBAAiB,OAA8B;EAC3C,MAAM,UAAU,yBAAyB,MAAM,UAAU;EAEzD,OAAO,KAAKD,UAAU,oBAAoB;GACtC;GACA,QAAQI;GACR,gBAAgB,SAAS;IACrB,MAAM,SAAS,MAAMF,gBAAc,IAAI;IACvC,MAAM,QAAQ,MAAM;GACxB;GACA,mBAAmB,MAAM,SAAS;GAClC,sBAAsB,MAAM,UAAU;GACtC,SAAS,MAAM;EACnB,CAAC;CACL;AACJ"}
+{"version":3,"file":"subaccounts.js","names":["#client","Proto.SubaccountService","#viewClient","Proto.SubaccountViewService","#publicRoleClient","Proto.SubaccountRoleService","#authRoleClient","#realtime","SubaccountSchema","ApiKeySchema","Proto.SubaccountSchema","ProtoApiKeys.ApiKeySchema"],"sources":["../../../src/services/subaccounts/subaccounts.ts"],"sourcesContent":["import * as Proto from \"../../gen/auth/v1/subaccounts_pb.js\";\nimport * as ProtoApiKeys from \"../../gen/auth/v1/api_keys_pb.js\";\nimport { createClient, type Client } from \"@connectrpc/connect\";\nimport * as v from \"valibot\";\nimport { parse } from \"../../shared/validation.js\";\nimport { type ApiKey, ApiKeySchema } from \"../api-keys/index.js\";\nimport { formatId } from \"../../utils/base58-id.js\";\nimport {\n    toConnectCallOptions,\n    type PolyesterMutationOptions,\n    type PolyesterRequestOptions,\n} from \"../../shared/request-options.js\";\nimport type { PolyesterRealtime } from \"../../realtime/index.js\";\nimport {\n    DEFAULT_SUBACCOUNT_POLICY,\n    SubaccountPoliciesService,\n    type SubaccountPolicy,\n    SubaccountPolicySchema,\n} from \"../policies/subaccount-policies/index.js\";\nimport type { BaseSubscribeInput } from \"../../shared/types.js\";\nimport type { AuthAndPublicApiTransports } from \"../../shared/transports.js\";\nimport type { SubaccountResolver } from \"../subaccount-resolver.js\";\nimport {\n    CreateSubaccountChallengeInputSchema,\n    CreateSubaccountInputSchema,\n    CreateSubaccountResultSchema,\n    SubaccountChallengeSchema,\n    UpdateSubaccountInputSchema,\n    InviteSubaccountMemberInputSchema,\n    RemoveSubaccountMemberInputSchema,\n    UpdateSubaccountMemberRoleInputSchema,\n    ListSubaccountInvitesInputSchema,\n    RespondSubaccountInviteInputSchema,\n    SubaccountActivityInputSchema,\n    SubaccountSchema,\n    SubaccountMemberSchema,\n    SubaccountInviteSchema,\n    SubaccountActivityEventSchema,\n    SetSubaccountMemberMfaRequirementInputSchema,\n    SubaccountIdInputSchema,\n    SubaccountMutationResultSchema,\n    SubaccountRoleCatalogSchema,\n    EffectiveSubaccountPermissionsSchema,\n    type CreateSubaccountResult,\n    type SubaccountChallenge,\n    type Subaccount,\n    type SubaccountMember,\n    type SubaccountInvite,\n    type SubaccountEvent,\n    type SubaccountMutationResult,\n    type SubaccountRoleCatalog,\n    type EffectiveSubaccountPermissions,\n} from \"./subaccounts.schemas.js\";\n\ninterface SubscribeSubaccountsInput extends BaseSubscribeInput<Subaccount> {\n    accountId: string;\n}\n\ninterface SubscribeApiKeysInput extends BaseSubscribeInput<ApiKey> {\n    accountId: string;\n}\n\n/**\n * Reads the public role catalog and creates, manages, shares, audits, and subscribes to subaccounts visible to the authenticated caller.\n */\nexport class SubaccountsService {\n    readonly policies: SubaccountPoliciesService;\n\n    #client: Client<typeof Proto.SubaccountService>;\n    #viewClient: Client<typeof Proto.SubaccountViewService>;\n    #publicRoleClient: Client<typeof Proto.SubaccountRoleService>;\n    #authRoleClient: Client<typeof Proto.SubaccountRoleService>;\n    #realtime: PolyesterRealtime;\n\n    constructor(\n        transports: AuthAndPublicApiTransports,\n        realtime: PolyesterRealtime,\n        resolver?: SubaccountResolver,\n    ) {\n        this.policies = new SubaccountPoliciesService(transports, realtime, resolver);\n        this.#client = createClient(Proto.SubaccountService, transports.authApi);\n        this.#viewClient = createClient(Proto.SubaccountViewService, transports.authApi);\n        this.#publicRoleClient = createClient(Proto.SubaccountRoleService, transports.publicApi);\n        this.#authRoleClient = createClient(Proto.SubaccountRoleService, transports.authApi);\n        this.#realtime = realtime;\n    }\n\n    /**\n     * Returns subaccounts owned by or shared with the caller plus totalCreated, including soft-deleted ones. Use `createChallenge` for the canonical next smart-account address and salt.\n     */\n    async list(options?: PolyesterRequestOptions): Promise<{\n        totalCreated: number;\n        subaccounts: v.InferOutput<typeof SubaccountSchema>[];\n    }> {\n        const res = await this.#client.listSubaccounts({}, toConnectCallOptions(options));\n        return {\n            totalCreated: res.totalCreated,\n            subaccounts: parse(v.array(SubaccountSchema), res.subaccounts),\n        };\n    }\n\n    /**\n     * Fetches an aggregated subaccount dashboard view with subaccount details, policy, API keys, balances, members, and outgoing invites; throws if the subaccount is missing.\n     */\n    async get(\n        input: v.InferInput<typeof SubaccountIdInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<\n        Subaccount & {\n            apiKeys: ApiKey[];\n            policy: SubaccountPolicy;\n            members: SubaccountMember[];\n            invites: SubaccountInvite[];\n        }\n    > {\n        const validatedInput = parse(SubaccountIdInputSchema, input);\n        const subaccountId = formatId(validatedInput.subaccountId);\n        const res = await this.#viewClient.getSubaccount(\n            {\n                subaccountId: validatedInput.subaccountId,\n                includeApiKeys: true,\n                includeBalances: true,\n                includeMembers: true,\n                includeInvites: true,\n                includePolicy: true,\n                invitesDirection: Proto.SubaccountInviteDirection.OUTGOING,\n            },\n            toConnectCallOptions(options),\n        );\n        if (!res.subaccount) throw new Error(`Subaccount not found: ${subaccountId}`);\n\n        return {\n            ...parse(SubaccountSchema, res.subaccount),\n            policy: res.policy\n                ? parse(SubaccountPolicySchema, res.policy)\n                : DEFAULT_SUBACCOUNT_POLICY,\n            apiKeys: parse(v.optional(v.array(ApiKeySchema), []), res.apiKeys),\n            members: parse(v.optional(v.array(SubaccountMemberSchema), []), res.members),\n            invites: v\n                .parse(v.optional(v.array(SubaccountInviteSchema), []), res.invites)\n                .filter((invite) => invite.subaccountId === subaccountId),\n        };\n    }\n\n    /**\n     * Requests the canonical next smart account and a short-lived EIP-191 authorization message\n     * bound to the authenticated root and the selected owner EOA. Sign the exact message through\n     * the returned smart account, then pass it to `create`. A new challenge replaces the previous one.\n     */\n    async createChallenge(\n        input: v.InferInput<typeof CreateSubaccountChallengeInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<SubaccountChallenge> {\n        const validatedInput = parse(CreateSubaccountChallengeInputSchema, input);\n        const res = await this.#client.createSubaccountChallenge(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountChallengeSchema, res);\n    }\n\n    /**\n     * Creates a new subaccount under the caller's root account using the smart-account address, message, and smart-account signature from `createChallenge`.\n     */\n    async create(\n        input: v.InferInput<typeof CreateSubaccountInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<CreateSubaccountResult> {\n        const validatedInput = parse(CreateSubaccountInputSchema, input);\n        const res = await this.#client.createSubaccount(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(CreateSubaccountResultSchema, res);\n    }\n\n    /**\n     * Updates mutable subaccount display/status fields such as label and active/disabled status.\n     */\n    async update(\n        input: v.InferInput<typeof UpdateSubaccountInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<Subaccount> {\n        const validatedInput = parse(UpdateSubaccountInputSchema, input);\n        const res = await this.#client.updateSubaccount(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        if (!res.subaccount) throw new Error(\"Failed to update subaccount\");\n        return parse(SubaccountSchema, res.subaccount);\n    }\n\n    /**\n     * Creates or refreshes a pending invitation granting a role on a subaccount to another root account.\n     */\n    async inviteMember(\n        input: v.InferInput<typeof InviteSubaccountMemberInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountInvite> {\n        const validatedInput = parse(InviteSubaccountMemberInputSchema, input);\n        const res = await this.#client.inviteSubaccountMember(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountInviteSchema, res.invite);\n    }\n\n    /**\n     * Removes delegated access for a subaccount member by grantee account ID.\n     */\n    async removeMember(\n        input: v.InferInput<typeof RemoveSubaccountMemberInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountMutationResult> {\n        const validatedInput = parse(RemoveSubaccountMemberInputSchema, input);\n        const res = await this.#client.removeSubaccountMember(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountMutationResultSchema, res);\n    }\n\n    /**\n     * Changes an existing delegated member's role without sending a new invitation.\n     */\n    async updateMemberRole(\n        input: v.InferInput<typeof UpdateSubaccountMemberRoleInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountMutationResult> {\n        const validatedInput = parse(UpdateSubaccountMemberRoleInputSchema, input);\n        const res = await this.#client.updateSubaccountMemberRole(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountMutationResultSchema, res);\n    }\n\n    /**\n     * Enables or disables the owner-controlled MFA requirement for delegated interactive member actions on a subaccount.\n     */\n    async setMemberMfaRequirement(\n        input: v.InferInput<typeof SetSubaccountMemberMfaRequirementInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountMutationResult> {\n        const validatedInput = parse(SetSubaccountMemberMfaRequirementInputSchema, input);\n        const res = await this.#client.setSubaccountMemberMFARequirement(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountMutationResultSchema, res);\n    }\n\n    /**\n     * Returns incoming, outgoing, or all subaccount invitations for the caller, newest first.\n     */\n    async listInvites(\n        input: v.InferInput<typeof ListSubaccountInvitesInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<SubaccountInvite[]> {\n        const validatedInput = parse(ListSubaccountInvitesInputSchema, input);\n        const res = await this.#client.listSubaccountInvites(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(v.array(SubaccountInviteSchema), res.invites);\n    }\n\n    /**\n     * Returns the public built-in role and permission catalog with display metadata and per-role permission sets.\n     */\n    async listRoles(options?: PolyesterRequestOptions): Promise<SubaccountRoleCatalog> {\n        const res = await this.#publicRoleClient.listSubaccountRoles(\n            {},\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountRoleCatalogSchema, res);\n    }\n\n    /**\n     * Returns the caller's current role, effective role-granted permissions, and attached policy ID for a subaccount.\n     */\n    async getEffectivePermissions(\n        input: v.InferInput<typeof SubaccountIdInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<EffectiveSubaccountPermissions> {\n        const validatedInput = parse(SubaccountIdInputSchema, input);\n        const res = await this.#authRoleClient.getEffectiveSubaccountPermissions(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(EffectiveSubaccountPermissionsSchema, res);\n    }\n\n    /**\n     * Returns the owner and delegated members for a subaccount, including role and MFA enrollment status.\n     */\n    async listMembers(\n        input: v.InferInput<typeof SubaccountIdInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<SubaccountMember[]> {\n        const validatedInput = parse(SubaccountIdInputSchema, input);\n        const res = await this.#client.listSubaccountMembers(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(v.array(SubaccountMemberSchema), res.members);\n    }\n\n    /**\n     * Accepts or rejects an incoming invite, or cancels an outgoing invite, returning the updated invitation.\n     */\n    async respondInvite(\n        input: v.InferInput<typeof RespondSubaccountInviteInputSchema>,\n        options?: PolyesterMutationOptions,\n    ): Promise<SubaccountInvite> {\n        const validatedInput = parse(RespondSubaccountInviteInputSchema, input);\n        const res = await this.#client.respondSubaccountInvite(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return parse(SubaccountInviteSchema, res.invite);\n    }\n\n    /**\n     * Returns paginated audit/activity events for a subaccount, newest first, with a non-negative integer limit from 0 through 200 and opaque cursor pagination.\n     */\n    async listEvents(\n        input: v.InferInput<typeof SubaccountActivityInputSchema>,\n        options?: PolyesterRequestOptions,\n    ): Promise<{ events: SubaccountEvent[]; nextPageToken: string }> {\n        const validatedInput = parse(SubaccountActivityInputSchema, input);\n        const res = await this.#viewClient.listSubaccountActivity(\n            validatedInput,\n            toConnectCallOptions(options),\n        );\n        return {\n            events: parse(v.optional(v.array(SubaccountActivityEventSchema), []), res.events),\n            nextPageToken: res.nextPageToken,\n        };\n    }\n\n    /**\n     * Subscribes to private subaccount updates for an account and emits normalized subaccount records.\n     */\n    subscribe(input: SubscribeSubaccountsInput) {\n        const channel = `private:auth:subaccounts:${input.accountId}:proto`;\n\n        return this.#realtime.connectProtoChannel({\n            channel,\n            schema: Proto.SubaccountSchema,\n            onPublication: (data) => {\n                const subaccount = parse(SubaccountSchema, data);\n                input.onEvent(subaccount);\n            },\n            onConnected: () => input.onOpen?.(),\n            onDisconnected: () => input.onClose?.(),\n            onError: input.onError,\n        });\n    }\n\n    /**\n     * Subscribes to private API key updates for an account through the subaccount realtime channel helper.\n     */\n    subscribeApiKeys(input: SubscribeApiKeysInput) {\n        const channel = `private:auth:api-keys:${input.accountId}:proto`;\n\n        return this.#realtime.connectProtoChannel({\n            channel,\n            schema: ProtoApiKeys.ApiKeySchema,\n            onPublication: (data) => {\n                const apiKey = parse(ApiKeySchema, data);\n                input.onEvent(apiKey);\n            },\n            onConnected: () => input.onOpen?.(),\n            onDisconnected: () => input.onClose?.(),\n            onError: input.onError,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;;;AAiEA,IAAa,qBAAb,MAAgC;CAC5B;CAEA;CACA;CACA;CACA;CACA;CAEA,YACI,YACA,UACA,UACF;EACE,KAAK,WAAW,IAAI,0BAA0B,YAAY,UAAU,QAAQ;EAC5E,KAAKA,UAAU,aAAaC,mBAAyB,WAAW,OAAO;EACvE,KAAKC,cAAc,aAAaC,uBAA6B,WAAW,OAAO;EAC/E,KAAKC,oBAAoB,aAAaC,uBAA6B,WAAW,SAAS;EACvF,KAAKC,kBAAkB,aAAaD,uBAA6B,WAAW,OAAO;EACnF,KAAKE,YAAY;CACrB;;;;CAKA,MAAM,KAAK,SAGR;EACC,MAAM,MAAM,MAAM,KAAKP,QAAQ,gBAAgB,CAAC,GAAG,qBAAqB,OAAO,CAAC;EAChF,OAAO;GACH,cAAc,IAAI;GAClB,aAAa,MAAM,EAAE,MAAMQ,kBAAgB,GAAG,IAAI,WAAW;EACjE;CACJ;;;;CAKA,MAAM,IACF,OACA,SAQF;EACE,MAAM,iBAAiB,MAAM,yBAAyB,KAAK;EAC3D,MAAM,eAAe,SAAS,eAAe,YAAY;EACzD,MAAM,MAAM,MAAM,KAAKN,YAAY,cAC/B;GACI,cAAc,eAAe;GAC7B,gBAAgB;GAChB,iBAAiB;GACjB,gBAAgB;GAChB,gBAAgB;GAChB,eAAe;GACf,kBAAA;EACJ,GACA,qBAAqB,OAAO,CAChC;EACA,IAAI,CAAC,IAAI,YAAY,MAAM,IAAI,MAAM,yBAAyB,cAAc;EAE5E,OAAO;GACH,GAAG,MAAMM,oBAAkB,IAAI,UAAU;GACzC,QAAQ,IAAI,SACN,MAAM,wBAAwB,IAAI,MAAM,IACxC;GACN,SAAS,MAAM,EAAE,SAAS,EAAE,MAAMC,cAAY,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO;GACjE,SAAS,MAAM,EAAE,SAAS,EAAE,MAAM,sBAAsB,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO;GAC3E,SAAS,EACJ,MAAM,EAAE,SAAS,EAAE,MAAM,sBAAsB,GAAG,CAAC,CAAC,GAAG,IAAI,OAAO,CAAC,CACnE,QAAQ,WAAW,OAAO,iBAAiB,YAAY;EAChE;CACJ;;;;;;CAOA,MAAM,gBACF,OACA,SAC4B;EAC5B,MAAM,iBAAiB,MAAM,sCAAsC,KAAK;EACxE,MAAM,MAAM,MAAM,KAAKT,QAAQ,0BAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,2BAA2B,GAAG;CAC/C;;;;CAKA,MAAM,OACF,OACA,SAC+B;EAC/B,MAAM,iBAAiB,MAAM,6BAA6B,KAAK;EAC/D,MAAM,MAAM,MAAM,KAAKA,QAAQ,iBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,8BAA8B,GAAG;CAClD;;;;CAKA,MAAM,OACF,OACA,SACmB;EACnB,MAAM,iBAAiB,MAAM,6BAA6B,KAAK;EAC/D,MAAM,MAAM,MAAM,KAAKA,QAAQ,iBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,IAAI,CAAC,IAAI,YAAY,MAAM,IAAI,MAAM,6BAA6B;EAClE,OAAO,MAAMQ,oBAAkB,IAAI,UAAU;CACjD;;;;CAKA,MAAM,aACF,OACA,SACyB;EACzB,MAAM,iBAAiB,MAAM,mCAAmC,KAAK;EACrE,MAAM,MAAM,MAAM,KAAKR,QAAQ,uBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,wBAAwB,IAAI,MAAM;CACnD;;;;CAKA,MAAM,aACF,OACA,SACiC;EACjC,MAAM,iBAAiB,MAAM,mCAAmC,KAAK;EACrE,MAAM,MAAM,MAAM,KAAKA,QAAQ,uBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,gCAAgC,GAAG;CACpD;;;;CAKA,MAAM,iBACF,OACA,SACiC;EACjC,MAAM,iBAAiB,MAAM,uCAAuC,KAAK;EACzE,MAAM,MAAM,MAAM,KAAKA,QAAQ,2BAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,gCAAgC,GAAG;CACpD;;;;CAKA,MAAM,wBACF,OACA,SACiC;EACjC,MAAM,iBAAiB,MAAM,8CAA8C,KAAK;EAChF,MAAM,MAAM,MAAM,KAAKA,QAAQ,kCAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,gCAAgC,GAAG;CACpD;;;;CAKA,MAAM,YACF,OACA,SAC2B;EAC3B,MAAM,iBAAiB,MAAM,kCAAkC,KAAK;EACpE,MAAM,MAAM,MAAM,KAAKA,QAAQ,sBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,EAAE,MAAM,sBAAsB,GAAG,IAAI,OAAO;CAC7D;;;;CAKA,MAAM,UAAU,SAAmE;EAC/E,MAAM,MAAM,MAAM,KAAKI,kBAAkB,oBACrC,CAAC,GACD,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,6BAA6B,GAAG;CACjD;;;;CAKA,MAAM,wBACF,OACA,SACuC;EACvC,MAAM,iBAAiB,MAAM,yBAAyB,KAAK;EAC3D,MAAM,MAAM,MAAM,KAAKE,gBAAgB,kCACnC,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,sCAAsC,GAAG;CAC1D;;;;CAKA,MAAM,YACF,OACA,SAC2B;EAC3B,MAAM,iBAAiB,MAAM,yBAAyB,KAAK;EAC3D,MAAM,MAAM,MAAM,KAAKN,QAAQ,sBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,EAAE,MAAM,sBAAsB,GAAG,IAAI,OAAO;CAC7D;;;;CAKA,MAAM,cACF,OACA,SACyB;EACzB,MAAM,iBAAiB,MAAM,oCAAoC,KAAK;EACtE,MAAM,MAAM,MAAM,KAAKA,QAAQ,wBAC3B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO,MAAM,wBAAwB,IAAI,MAAM;CACnD;;;;CAKA,MAAM,WACF,OACA,SAC6D;EAC7D,MAAM,iBAAiB,MAAM,+BAA+B,KAAK;EACjE,MAAM,MAAM,MAAM,KAAKE,YAAY,uBAC/B,gBACA,qBAAqB,OAAO,CAChC;EACA,OAAO;GACH,QAAQ,MAAM,EAAE,SAAS,EAAE,MAAM,6BAA6B,GAAG,CAAC,CAAC,GAAG,IAAI,MAAM;GAChF,eAAe,IAAI;EACvB;CACJ;;;;CAKA,UAAU,OAAkC;EACxC,MAAM,UAAU,4BAA4B,MAAM,UAAU;EAE5D,OAAO,KAAKK,UAAU,oBAAoB;GACtC;GACA,QAAQG;GACR,gBAAgB,SAAS;IACrB,MAAM,aAAa,MAAMF,oBAAkB,IAAI;IAC/C,MAAM,QAAQ,UAAU;GAC5B;GACA,mBAAmB,MAAM,SAAS;GAClC,sBAAsB,MAAM,UAAU;GACtC,SAAS,MAAM;EACnB,CAAC;CACL;;;;CAKA,iBAAiB,OAA8B;EAC3C,MAAM,UAAU,yBAAyB,MAAM,UAAU;EAEzD,OAAO,KAAKD,UAAU,oBAAoB;GACtC;GACA,QAAQI;GACR,gBAAgB,SAAS;IACrB,MAAM,SAAS,MAAMF,gBAAc,IAAI;IACvC,MAAM,QAAQ,MAAM;GACxB;GACA,mBAAmB,MAAM,SAAS;GAClC,sBAAsB,MAAM,UAAU;GACtC,SAAS,MAAM;EACnB,CAAC;CACL;AACJ"}

package/dist/services/subaccounts/subaccounts.schemas.d.ts

@@ -42,6 +42,25 @@ declare const EffectiveSubaccountPermissionsSchema: v.ObjectSchema<{
   readonly subaccountPolicyId: v.SchemaWithPipe<readonly [v.BigintSchema<undefined>, v.TransformAction<bigint, string>]>;
 }, undefined>;
 type EffectiveSubaccountPermissions = v.InferOutput<typeof EffectiveSubaccountPermissionsSchema>;
+declare const CreateSubaccountChallengeInputSchema: v.StrictObjectSchema<{
+  readonly ownerAddress: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.CheckAction<string, "Invalid wallet address.">]>;
+  readonly uri: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MaxLengthAction<string, 2048, undefined>, v.CheckAction<string, "Wallet challenge URI must be an HTTP(S) origin without a path, query, fragment, or user information.">]>;
+}, undefined>;
+type CreateSubaccountChallengeInput = v.InferInput<typeof CreateSubaccountChallengeInputSchema>;
+declare const SubaccountChallengeSchema: v.ObjectSchema<{
+  readonly message: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.MinLengthAction<string, 1, undefined>, v.CheckAction<string, "Wallet challenge message exceeds 4096 UTF-8 bytes.">]>;
+  readonly smartAccountAddress: v.SchemaWithPipe<readonly [v.StringSchema<undefined>, v.CheckAction<string, "Invalid wallet address.">]>;
+  readonly smartAccountSaltNonce: v.NumberSchema<undefined>;
+  readonly expiresAt: v.SchemaWithPipe<readonly [v.OptionalSchema<v.ObjectSchema<{
+    readonly seconds: v.BigintSchema<undefined>;
+    readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
+  }, undefined>, undefined>, v.TransformAction<{
+    seconds: bigint;
+    nanos: number;
+  } | undefined, number | undefined>]>;
+  readonly polyesterChainId: v.SchemaWithPipe<readonly [v.BigintSchema<undefined>, v.TransformAction<any, number>]>;
+}, undefined>;
+type SubaccountChallenge = v.InferOutput<typeof SubaccountChallengeSchema>;
 declare const CreateSubaccountInputSchema: v.StrictObjectSchema<{
   readonly label: v.OptionalSchema<v.StringSchema<undefined>, "">;
   readonly icon: v.OptionalSchema<v.StringSchema<undefined>, "">;
@@ -209,7 +228,7 @@ declare const SubaccountInviteSchema: v.SchemaWithPipe<readonly [v.ObjectSchema<
   readonly granteeAccountId: v.SchemaWithPipe<readonly [v.BigintSchema<undefined>, v.TransformAction<bigint, string>]>;
   readonly inviterAccountId: v.SchemaWithPipe<readonly [v.BigintSchema<undefined>, v.TransformAction<bigint, string>]>;
   readonly role: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.TransformAction<number, "unspecified" | "owner" | "admin" | "treasury" | "leveraged_trader" | "trader" | "viewer">]>;
-  readonly status: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.TransformAction<number, "unspecified" | "pending" | "cancelled" | "accepted" | "declined">]>;
+  readonly status: v.SchemaWithPipe<readonly [v.NumberSchema<undefined>, v.TransformAction<number, "unspecified" | "pending" | "accepted" | "declined" | "cancelled">]>;
   readonly createdAt: v.SchemaWithPipe<readonly [v.OptionalSchema<v.ObjectSchema<{
     readonly seconds: v.BigintSchema<undefined>;
     readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
@@ -236,7 +255,7 @@ declare const SubaccountInviteSchema: v.SchemaWithPipe<readonly [v.ObjectSchema<
   granteeAccountId: string;
   inviterAccountId: string;
   role: "unspecified" | "owner" | "admin" | "treasury" | "leveraged_trader" | "trader" | "viewer";
-  status: "unspecified" | "pending" | "cancelled" | "accepted" | "declined";
+  status: "unspecified" | "pending" | "accepted" | "declined" | "cancelled";
   createdAt?: number | undefined;
   respondedAt?: number | undefined;
   granteeUsername: string;
@@ -254,7 +273,7 @@ declare const SubaccountInviteSchema: v.SchemaWithPipe<readonly [v.ObjectSchema<
   granteeAccountId: string;
   inviterAccountId: string;
   role: "unspecified" | "owner" | "admin" | "treasury" | "leveraged_trader" | "trader" | "viewer";
-  status: "unspecified" | "pending" | "cancelled" | "accepted" | "declined";
+  status: "unspecified" | "pending" | "accepted" | "declined" | "cancelled";
   createdAt?: number | undefined;
   respondedAt?: number | undefined;
   granteeUsername: string;
@@ -286,5 +305,5 @@ declare const SubaccountActivityEventSchema: v.ObjectSchema<{
 }, undefined>;
 type SubaccountEvent = v.InferOutput<typeof SubaccountActivityEventSchema>;
 //#endregion
-export { CreateSubaccountInput, CreateSubaccountInputSchema, CreateSubaccountResult, CreateSubaccountResultSchema, EffectiveSubaccountPermissions, EffectiveSubaccountPermissionsSchema, InviteSubaccountMemberInput, InviteSubaccountMemberInputSchema, ListSubaccountInvitesInput, ListSubaccountInvitesInputSchema, RemoveSubaccountMemberInput, RemoveSubaccountMemberInputSchema, RespondSubaccountInviteInput, RespondSubaccountInviteInputSchema, SetSubaccountMemberMfaRequirementInput, SetSubaccountMemberMfaRequirementInputSchema, Subaccount, SubaccountActivityEventSchema, SubaccountActivityInput, SubaccountActivityInputSchema, SubaccountEvent, SubaccountIdInput, SubaccountIdInputSchema, SubaccountInvite, SubaccountInviteSchema, SubaccountInviteStatus, SubaccountMember, SubaccountMemberSchema, SubaccountMutationResult, SubaccountMutationResultSchema, SubaccountPermission, SubaccountPermissionDefinition, SubaccountPermissionDefinitionSchema, SubaccountRole, SubaccountRoleCatalog, SubaccountRoleCatalogSchema, SubaccountRoleDefinition, SubaccountRoleDefinitionSchema, SubaccountRoleSchema, SubaccountSchema, SubaccountStatus, UpdateSubaccountInput, UpdateSubaccountInputSchema, UpdateSubaccountMemberRoleInput, UpdateSubaccountMemberRoleInputSchema };
+export { CreateSubaccountChallengeInput, CreateSubaccountChallengeInputSchema, CreateSubaccountInput, CreateSubaccountInputSchema, CreateSubaccountResult, CreateSubaccountResultSchema, EffectiveSubaccountPermissions, EffectiveSubaccountPermissionsSchema, InviteSubaccountMemberInput, InviteSubaccountMemberInputSchema, ListSubaccountInvitesInput, ListSubaccountInvitesInputSchema, RemoveSubaccountMemberInput, RemoveSubaccountMemberInputSchema, RespondSubaccountInviteInput, RespondSubaccountInviteInputSchema, SetSubaccountMemberMfaRequirementInput, SetSubaccountMemberMfaRequirementInputSchema, Subaccount, SubaccountActivityEventSchema, SubaccountActivityInput, SubaccountActivityInputSchema, SubaccountChallenge, SubaccountChallengeSchema, SubaccountEvent, SubaccountIdInput, SubaccountIdInputSchema, SubaccountInvite, SubaccountInviteSchema, SubaccountInviteStatus, SubaccountMember, SubaccountMemberSchema, SubaccountMutationResult, SubaccountMutationResultSchema, SubaccountPermission, SubaccountPermissionDefinition, SubaccountPermissionDefinitionSchema, SubaccountRole, SubaccountRoleCatalog, SubaccountRoleCatalogSchema, SubaccountRoleDefinition, SubaccountRoleDefinitionSchema, SubaccountRoleSchema, SubaccountSchema, SubaccountStatus, UpdateSubaccountInput, UpdateSubaccountInputSchema, UpdateSubaccountMemberRoleInput, UpdateSubaccountMemberRoleInputSchema };
 //# sourceMappingURL=subaccounts.schemas.d.ts.map

package/dist/services/subaccounts/subaccounts.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"subaccounts.schemas.d.ts","names":[],"sources":["../../../src/services/subaccounts/subaccounts.schemas.ts"],"mappings":";;;cAyCa,sBAAoB,EAAA;KAErB,iBAAiB,EAAE,mBAAmB;cAI5C,iCAA+B,EAAA,yBAAA,EAAA,yBAAA,EAAA;KAEzB,uBAAuB,EAAE,mBAAmB;cAE3C,sCAAoC,EAAA;;;;;;KAOrC,iCAAiC,EAAE,mBACpC;cAGE,gCAA8B,EAAA;;;;;;;KAQ/B,2BAA2B,EAAE,mBAAmB;cAE/C,6BAA2B,EAAA;;;;;;;;;;;;;;;KAK5B,wBAAwB,EAAE,mBAAmB;cAE5C,sCAAoC,EAAA;;;;;KAMrC,iCAAiC,EAAE,mBACpC;cAGE,6BAA2B,EAAA;;;;;;;;KAS5B,wBAAwB,EAAE,kBAAkB;cAE3C,yBAAuB,EAAA;;;KAIxB,oBAAoB,EAAE,kBAAkB;cAEvC,8BAA4B,EAAA;;;;;;KAO7B,yBAAyB,EAAE,mBAAmB;cAE7C,gCAA8B,EAAA;KAE/B,2BAA2B,EAAE,mBAAmB;cAmB/C,6BAA2B,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4B5B,wBAAwB,EAAE,kBAAkB;cAE3C,mCAAiC,EAAA;;;;;KASlC,8BAA8B,EAAE,kBAAkB;cAEjD,mCAAiC,EAAA;;;;KAKlC,8BAA8B,EAAE,kBAAkB;cAEjD,uCAAqC,EAAA;;;;;KAEtC,kCAAkC,EAAE,kBACrC;cAGE,8CAA4C,EAAA;;;;KAK7C,yCAAyC,EAAE,kBAC5C;cAGE,kCAAgC,EAAA;;;KAOjC,6BAA6B,EAAE,kBAAkB;cAIvD,oBAAkB,EAAA;KAEZ,yBAAyB,EAAE,mBAAmB;cAI7C,oCAAkC,EAAA;;;;KAQnC,+BAA+B,EAAE,kBAAkB;cAEzD,6BAA2B,EAAA,yBAAA,EAAA,yBAAA,EAAA;KAErB,mBAAmB,EAAE,mBAAmB;cAEvC,kBAAgB,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAyBjB,aAAa,EAAE,mBAAmB;cAEjC,wBAAsB,EAAA;;;;;;;;KASvB,mBAAmB,EAAE,mBAAmB;cAEvC,wBAAsB,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAqCvB,mBAAmB,EAAE,mBAAmB;cAEvC,+BAA6B,EAAA;;;;;KAM9B,0BAA0B,EAAE,kBAAkB;cAE7C,+BAA6B,EAAA;;;;;;;;;;;;;;;;KAc9B,kBAAkB,EAAE,mBAAmB"}
+{"version":3,"file":"subaccounts.schemas.d.ts","names":[],"sources":["../../../src/services/subaccounts/subaccounts.schemas.ts"],"mappings":";;;cA0Ca,sBAAoB,EAAA;KAErB,iBAAiB,EAAE,mBAAmB;cAI5C,iCAA+B,EAAA,yBAAA,EAAA,yBAAA,EAAA;KAEzB,uBAAuB,EAAE,mBAAmB;cAE3C,sCAAoC,EAAA;;;;;;KAOrC,iCAAiC,EAAE,mBACpC;cAGE,gCAA8B,EAAA;;;;;;;KAQ/B,2BAA2B,EAAE,mBAAmB;cAE/C,6BAA2B,EAAA;;;;;;;;;;;;;;;KAK5B,wBAAwB,EAAE,mBAAmB;cAE5C,sCAAoC,EAAA;;;;;KAMrC,iCAAiC,EAAE,mBACpC;cAGE,sCAAoC,EAAA;;;;KAKrC,iCAAiC,EAAE,kBACpC;cAGE,2BAAyB,EAAA;;;;;;;;;;;;;KAQ1B,sBAAsB,EAAE,mBAAmB;cAE1C,6BAA2B,EAAA;;;;;;;;KAS5B,wBAAwB,EAAE,kBAAkB;cAE3C,yBAAuB,EAAA;;;KAIxB,oBAAoB,EAAE,kBAAkB;cAEvC,8BAA4B,EAAA;;;;;;KAO7B,yBAAyB,EAAE,mBAAmB;cAE7C,gCAA8B,EAAA;KAE/B,2BAA2B,EAAE,mBAAmB;cAmB/C,6BAA2B,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KA4B5B,wBAAwB,EAAE,kBAAkB;cAE3C,mCAAiC,EAAA;;;;;KASlC,8BAA8B,EAAE,kBAAkB;cAEjD,mCAAiC,EAAA;;;;KAKlC,8BAA8B,EAAE,kBAAkB;cAEjD,uCAAqC,EAAA;;;;;KAEtC,kCAAkC,EAAE,kBACrC;cAGE,8CAA4C,EAAA;;;;KAK7C,yCAAyC,EAAE,kBAC5C;cAGE,kCAAgC,EAAA;;;KAOjC,6BAA6B,EAAE,kBAAkB;cAIvD,oBAAkB,EAAA;KAEZ,yBAAyB,EAAE,mBAAmB;cAI7C,oCAAkC,EAAA;;;;KAQnC,+BAA+B,EAAE,kBAAkB;cAEzD,6BAA2B,EAAA,yBAAA,EAAA,yBAAA,EAAA;KAErB,mBAAmB,EAAE,mBAAmB;cAEvC,kBAAgB,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAyBjB,aAAa,EAAE,mBAAmB;cAEjC,wBAAsB,EAAA;;;;;;;;KASvB,mBAAmB,EAAE,mBAAmB;cAEvC,wBAAsB,EAAA,yBAAA,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;KAqCvB,mBAAmB,EAAE,mBAAmB;cAEvC,+BAA6B,EAAA;;;;;KAM9B,0BAA0B,EAAE,kBAAkB;cAE7C,+BAA6B,EAAA;;;;;;;;;;;;;;;;KAc9B,kBAAkB,EAAE,mBAAmB"}

package/dist/services/subaccounts/subaccounts.schemas.js

@@ -3,7 +3,7 @@ import { tsObjToMs, tsObjToNsString } from "../../utils/time.js";
 import { BigIntStringSchema, OptionalTimestampMsSchema, PublicIdSchema, TimestampSchema, idInputSchema, positiveBigintStringInputSchema } from "../../shared/schemas.js";
 import { PolicyActionCodec } from "../policies/shared.codecs.js";
 import { buildProtoPatch, defineProtoPatchFields } from "../../utils/proto-patch.js";
-import { WalletAddressSchema, WalletChallengeMessageSchema, WalletSignatureSchema } from "../auth/wallet-challenge.schemas.js";
+import { WalletAddressSchema, WalletChallengeMessageSchema, WalletChallengeUriSchema, WalletSignatureSchema } from "../auth/wallet-challenge.schemas.js";
 import { ActivityEntityKindCodec, ActivityEventActionCodec, ActivityEventSourceCodec, InviteActionCodec, InviteStatusCodec, SUBACCOUNT_INVITE_DIRECTION_VALUES, SUBACCOUNT_STATUS_VALUES, SubaccountInviteDirectionCodec, SubaccountPermissionCodec, SubaccountRoleCodec, SubaccountStatusCodec } from "./subaccounts.codecs.js";
 import * as v from "valibot";
 const SubaccountRoleSchema = v.picklist([
@@ -38,6 +38,17 @@ const EffectiveSubaccountPermissionsSchema = v.object({
 	permissions: v.optional(v.array(ProtoSubaccountPermissionSchema), []),
 	subaccountPolicyId: PublicIdSchema
 });
+const CreateSubaccountChallengeInputSchema = v.strictObject({
+	ownerAddress: WalletAddressSchema,
+	uri: WalletChallengeUriSchema
+});
+const SubaccountChallengeSchema = v.object({
+	message: WalletChallengeMessageSchema,
+	smartAccountAddress: WalletAddressSchema,
+	smartAccountSaltNonce: v.number(),
+	expiresAt: OptionalTimestampMsSchema,
+	polyesterChainId: v.pipe(v.bigint(), v.transform(Number))
+});
 const CreateSubaccountInputSchema = v.strictObject({
 	label: v.optional(v.string(), ""),
 	icon: v.optional(v.string(), ""),
@@ -187,6 +198,6 @@ const SubaccountActivityEventSchema = v.object({
 	payloadJson: v.pipe(v.string(), v.transform((v) => JSON.parse(v)))
 });
 //#endregion
-export { CreateSubaccountInputSchema, CreateSubaccountResultSchema, EffectiveSubaccountPermissionsSchema, InviteSubaccountMemberInputSchema, ListSubaccountInvitesInputSchema, RemoveSubaccountMemberInputSchema, RespondSubaccountInviteInputSchema, SetSubaccountMemberMfaRequirementInputSchema, SubaccountActivityEventSchema, SubaccountActivityInputSchema, SubaccountIdInputSchema, SubaccountInviteSchema, SubaccountMemberSchema, SubaccountMutationResultSchema, SubaccountPermissionDefinitionSchema, SubaccountRoleCatalogSchema, SubaccountRoleDefinitionSchema, SubaccountRoleSchema, SubaccountSchema, UpdateSubaccountInputSchema, UpdateSubaccountMemberRoleInputSchema };
+export { CreateSubaccountChallengeInputSchema, CreateSubaccountInputSchema, CreateSubaccountResultSchema, EffectiveSubaccountPermissionsSchema, InviteSubaccountMemberInputSchema, ListSubaccountInvitesInputSchema, RemoveSubaccountMemberInputSchema, RespondSubaccountInviteInputSchema, SetSubaccountMemberMfaRequirementInputSchema, SubaccountActivityEventSchema, SubaccountActivityInputSchema, SubaccountChallengeSchema, SubaccountIdInputSchema, SubaccountInviteSchema, SubaccountMemberSchema, SubaccountMutationResultSchema, SubaccountPermissionDefinitionSchema, SubaccountRoleCatalogSchema, SubaccountRoleDefinitionSchema, SubaccountRoleSchema, SubaccountSchema, UpdateSubaccountInputSchema, UpdateSubaccountMemberRoleInputSchema };
 
 //# sourceMappingURL=subaccounts.schemas.js.map

package/dist/services/subaccounts/subaccounts.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"subaccounts.schemas.js","names":[],"sources":["../../../src/services/subaccounts/subaccounts.schemas.ts"],"sourcesContent":["import {\n    WalletAddressSchema,\n    WalletChallengeMessageSchema,\n    WalletSignatureSchema,\n} from \"../auth/wallet-challenge.schemas.js\";\nimport * as v from \"valibot\";\nimport {\n    BigIntStringSchema,\n    OptionalTimestampMsSchema,\n    PublicIdSchema,\n    TimestampSchema,\n    idInputSchema,\n    positiveBigintStringInputSchema,\n} from \"../../shared/schemas.js\";\nimport { tsObjToMs, tsObjToNsString } from \"../../utils/time.js\";\nimport { enumLabel, enumLabelSchema } from \"../../shared/proto-enum-codec.js\";\nimport {\n    SubaccountRoleCodec,\n    SubaccountPermissionCodec,\n    InviteActionCodec,\n    InviteStatusCodec,\n    SubaccountInviteDirectionCodec,\n    SUBACCOUNT_INVITE_DIRECTION_VALUES,\n    SubaccountStatusCodec,\n    SUBACCOUNT_STATUS_VALUES,\n    ActivityEntityKindCodec,\n    ActivityEventActionCodec,\n    ActivityEventSourceCodec,\n} from \"./subaccounts.codecs.js\";\nimport { PolicyActionCodec } from \"../policies/shared.codecs.js\";\nimport { buildProtoPatch, defineProtoPatchFields } from \"../../utils/proto-patch.js\";\n\nconst SUBACCOUNT_ROLE_VALUES = [\n    \"owner\",\n    \"admin\",\n    \"treasury\",\n    \"leveraged_trader\",\n    \"trader\",\n    \"viewer\",\n] as const;\n\nexport const SubaccountRoleSchema = v.picklist(SUBACCOUNT_ROLE_VALUES);\n\nexport type SubaccountRole = v.InferOutput<typeof SubaccountRoleSchema>;\n\nconst ProtoSubaccountRoleSchema = enumLabelSchema(SubaccountRoleCodec.protoToOutput);\n\nconst ProtoSubaccountPermissionSchema = enumLabelSchema(SubaccountPermissionCodec.protoToOutput);\n\nexport type SubaccountPermission = v.InferOutput<typeof ProtoSubaccountPermissionSchema>;\n\nexport const SubaccountPermissionDefinitionSchema = v.object({\n    permission: ProtoSubaccountPermissionSchema,\n    displayName: v.optional(v.string(), \"\"),\n    description: v.optional(v.string(), \"\"),\n    policyAction: enumLabelSchema(PolicyActionCodec.protoToOutput),\n});\n\nexport type SubaccountPermissionDefinition = v.InferOutput<\n    typeof SubaccountPermissionDefinitionSchema\n>;\n\nexport const SubaccountRoleDefinitionSchema = v.object({\n    role: ProtoSubaccountRoleSchema,\n    displayName: v.optional(v.string(), \"\"),\n    description: v.optional(v.string(), \"\"),\n    assignable: v.optional(v.boolean(), false),\n    permissions: v.optional(v.array(ProtoSubaccountPermissionSchema), []),\n});\n\nexport type SubaccountRoleDefinition = v.InferOutput<typeof SubaccountRoleDefinitionSchema>;\n\nexport const SubaccountRoleCatalogSchema = v.object({\n    permissions: v.optional(v.array(SubaccountPermissionDefinitionSchema), []),\n    roles: v.optional(v.array(SubaccountRoleDefinitionSchema), []),\n});\n\nexport type SubaccountRoleCatalog = v.InferOutput<typeof SubaccountRoleCatalogSchema>;\n\nexport const EffectiveSubaccountPermissionsSchema = v.object({\n    role: ProtoSubaccountRoleSchema,\n    permissions: v.optional(v.array(ProtoSubaccountPermissionSchema), []),\n    subaccountPolicyId: PublicIdSchema,\n});\n\nexport type EffectiveSubaccountPermissions = v.InferOutput<\n    typeof EffectiveSubaccountPermissionsSchema\n>;\n\nexport const CreateSubaccountInputSchema = v.strictObject({\n    label: v.optional(v.string(), \"\"),\n    icon: v.optional(v.string(), \"\"),\n    color: v.optional(v.string(), \"\"),\n    smartAccountAddress: WalletAddressSchema,\n    message: WalletChallengeMessageSchema,\n    signature: WalletSignatureSchema,\n});\n\nexport type CreateSubaccountInput = v.InferInput<typeof CreateSubaccountInputSchema>;\n\nexport const SubaccountIdInputSchema = v.strictObject({\n    subaccountId: idInputSchema(\"subaccountId\"),\n});\n\nexport type SubaccountIdInput = v.InferInput<typeof SubaccountIdInputSchema>;\n\nexport const CreateSubaccountResultSchema = v.object({\n    subaccountId: PublicIdSchema,\n    totalCreated: v.number(),\n    smartAccountSaltNonce: v.number(),\n    revision: BigIntStringSchema,\n});\n\nexport type CreateSubaccountResult = v.InferOutput<typeof CreateSubaccountResultSchema>;\n\nexport const SubaccountMutationResultSchema = v.object({});\n\nexport type SubaccountMutationResult = v.InferOutput<typeof SubaccountMutationResultSchema>;\n\ntype SubaccountPatch = {\n    label?: string;\n    icon?: string;\n    color?: string;\n    status?: (typeof SUBACCOUNT_STATUS_VALUES)[number];\n};\n\nconst SUBACCOUNT_PATCH_FIELDS = defineProtoPatchFields<SubaccountPatch>()({\n    label: { path: \"label\", encode: (label) => ({ label }) },\n    icon: { path: \"icon\", encode: (icon) => ({ icon }) },\n    color: { path: \"color\", encode: (color) => ({ color }) },\n    status: {\n        path: \"status\",\n        encode: (status) => ({ status: SubaccountStatusCodec.inputToProto[status] }),\n    },\n});\n\nexport const UpdateSubaccountInputSchema = v.pipe(\n    v.strictObject({\n        subaccountId: idInputSchema(\"subaccountId\"),\n        expectedRevision: positiveBigintStringInputSchema(\"expectedRevision\"),\n        label: v.optional(v.string()),\n        icon: v.optional(v.string()),\n        color: v.optional(v.string()),\n        status: v.optional(v.picklist(SUBACCOUNT_STATUS_VALUES)),\n    }),\n    v.check(\n        ({ label, icon, color, status }) =>\n            label !== undefined ||\n            icon !== undefined ||\n            color !== undefined ||\n            status !== undefined,\n        \"At least one subaccount field must be provided\",\n    ),\n    v.transform(({ subaccountId, expectedRevision, ...input }) => {\n        const { patch: subaccount, updateMask } = buildProtoPatch(input, SUBACCOUNT_PATCH_FIELDS);\n        return {\n            subaccountId,\n            subaccount,\n            updateMask,\n            expectedRevision,\n        };\n    }),\n);\n\nexport type UpdateSubaccountInput = v.InferInput<typeof UpdateSubaccountInputSchema>;\n\nexport const InviteSubaccountMemberInputSchema = v.strictObject({\n    subaccountId: idInputSchema(\"subaccountId\"),\n    granteeAccountId: idInputSchema(\"granteeAccountId\"),\n    role: v.pipe(\n        SubaccountRoleSchema,\n        v.transform((role) => SubaccountRoleCodec.inputToProto[role]),\n    ),\n});\n\nexport type InviteSubaccountMemberInput = v.InferInput<typeof InviteSubaccountMemberInputSchema>;\n\nexport const RemoveSubaccountMemberInputSchema = v.strictObject({\n    subaccountId: idInputSchema(\"subaccountId\"),\n    granteeAccountId: idInputSchema(\"granteeAccountId\"),\n});\n\nexport type RemoveSubaccountMemberInput = v.InferInput<typeof RemoveSubaccountMemberInputSchema>;\n\nexport const UpdateSubaccountMemberRoleInputSchema = InviteSubaccountMemberInputSchema;\n\nexport type UpdateSubaccountMemberRoleInput = v.InferInput<\n    typeof UpdateSubaccountMemberRoleInputSchema\n>;\n\nexport const SetSubaccountMemberMfaRequirementInputSchema = v.strictObject({\n    subaccountId: idInputSchema(\"subaccountId\"),\n    requireMemberMfa: v.boolean(),\n});\n\nexport type SetSubaccountMemberMfaRequirementInput = v.InferInput<\n    typeof SetSubaccountMemberMfaRequirementInputSchema\n>;\n\nexport const ListSubaccountInvitesInputSchema = v.strictObject({\n    direction: v.pipe(\n        v.optional(v.picklist(SUBACCOUNT_INVITE_DIRECTION_VALUES), \"\"),\n        v.transform((direction) => SubaccountInviteDirectionCodec.inputToProto[direction]),\n    ),\n});\n\nexport type ListSubaccountInvitesInput = v.InferInput<typeof ListSubaccountInvitesInputSchema>;\n\nconst InviteActionSchema = v.picklist([\"accept\", \"decline\", \"cancel\"]);\n\nconst InviteStatusSchema = v.picklist([\"pending\", \"accepted\", \"declined\", \"cancelled\"]);\n\nexport type SubaccountInviteStatus = v.InferOutput<typeof InviteStatusSchema>;\n\nconst ProtoInviteStatusSchema = v.number();\n\nexport const RespondSubaccountInviteInputSchema = v.strictObject({\n    inviteId: idInputSchema(\"inviteId\"),\n    action: v.pipe(\n        InviteActionSchema,\n        v.transform((v) => InviteActionCodec.inputToProto[v]),\n    ),\n});\n\nexport type RespondSubaccountInviteInput = v.InferInput<typeof RespondSubaccountInviteInputSchema>;\n\nconst ProtoSubaccountStatusSchema = enumLabelSchema(SubaccountStatusCodec.protoToOutput);\n\nexport type SubaccountStatus = v.InferOutput<typeof ProtoSubaccountStatusSchema>;\n\nexport const SubaccountSchema = v.pipe(\n    v.object({\n        id: PublicIdSchema,\n        role: ProtoSubaccountRoleSchema,\n        label: v.optional(v.string(), \"\"),\n        icon: v.optional(v.string(), \"\"),\n        color: v.optional(v.string(), \"\"),\n        status: ProtoSubaccountStatusSchema,\n        smartAccountAddress: v.string(),\n        smartAccountSaltNonce: v.optional(v.number()),\n        ownerUsername: v.optional(v.string(), \"\"),\n        ownerAvatarUrl: v.optional(v.string(), \"\"),\n        ownerRootSmartAccountAddress: v.string(),\n        subaccountPolicyId: PublicIdSchema,\n        requireMemberMfa: v.optional(v.boolean(), false),\n        updatedAt: v.optional(TimestampSchema),\n        revision: BigIntStringSchema,\n    }),\n    v.transform(({ updatedAt, ...subaccount }) => ({\n        ...subaccount,\n        updatedAt: tsObjToMs(updatedAt),\n        updatedAtNs: tsObjToNsString(updatedAt),\n    })),\n);\n\nexport type Subaccount = v.InferOutput<typeof SubaccountSchema>;\n\nexport const SubaccountMemberSchema = v.object({\n    accountId: PublicIdSchema,\n    role: ProtoSubaccountRoleSchema,\n    username: v.optional(v.string(), \"\"),\n    smartAccountAddress: v.string(),\n    avatarUrl: v.optional(v.string(), \"\"),\n    mfaEnrolled: v.optional(v.boolean(), false),\n});\n\nexport type SubaccountMember = v.InferOutput<typeof SubaccountMemberSchema>;\n\nexport const SubaccountInviteSchema = v.pipe(\n    v.object({\n        id: PublicIdSchema,\n        subaccountId: PublicIdSchema,\n        granteeAccountId: PublicIdSchema,\n        inviterAccountId: PublicIdSchema,\n        role: ProtoSubaccountRoleSchema,\n        status: v.pipe(\n            ProtoInviteStatusSchema,\n            v.transform((v) => enumLabel(InviteStatusCodec.protoToOutput, v)),\n        ),\n        createdAt: OptionalTimestampMsSchema,\n        respondedAt: OptionalTimestampMsSchema,\n        granteeUsername: v.optional(v.string(), \"\"),\n        inviterUsername: v.optional(v.string(), \"\"),\n        subaccountLabel: v.optional(v.string(), \"\"),\n        inviterRootSmartAccountAddress: v.string(),\n        granteeRootSmartAccountAddress: v.string(),\n        requireMemberMfa: v.boolean(),\n    }),\n    v.transform(\n        ({\n            subaccountLabel,\n            subaccountId,\n            inviterRootSmartAccountAddress,\n            granteeRootSmartAccountAddress,\n            ...rest\n        }) => ({\n            ...rest,\n            subaccountId,\n            subaccountLabel,\n            inviterSmartAccountAddress: inviterRootSmartAccountAddress,\n            granteeSmartAccountAddress: granteeRootSmartAccountAddress,\n        }),\n    ),\n);\n\nexport type SubaccountInvite = v.InferOutput<typeof SubaccountInviteSchema>;\n\nexport const SubaccountActivityInputSchema = v.strictObject({\n    subaccountId: idInputSchema(\"subaccountId\"),\n    limit: v.optional(v.pipe(v.number(), v.integer(), v.minValue(0), v.maxValue(200)), 50),\n    pageToken: v.optional(v.pipe(v.string(), v.trim()), \"\"),\n});\n\nexport type SubaccountActivityInput = v.InferInput<typeof SubaccountActivityInputSchema>;\n\nexport const SubaccountActivityEventSchema = v.object({\n    createdAt: OptionalTimestampMsSchema,\n    entityKind: enumLabelSchema(ActivityEntityKindCodec.protoToOutput),\n    eventAction: enumLabelSchema(ActivityEventActionCodec.protoToOutput),\n    source: enumLabelSchema(ActivityEventSourceCodec.protoToOutput),\n    ip: v.optional(v.string()),\n    userAgent: v.optional(v.string()),\n    actorAccountId: PublicIdSchema,\n    payloadJson: v.pipe(\n        v.string(),\n        v.transform((v) => JSON.parse(v)),\n    ),\n});\n\nexport type SubaccountEvent = v.InferOutput<typeof SubaccountActivityEventSchema>;\n"],"mappings":";;;;;;;;AAyCA,MAAa,uBAAuB,EAAE,SAAS;CAR3C;CACA;CACA;CACA;CACA;CACA;AAG2C,CAAsB;AAIrE,MAAM,4BAA4B,gBAAgB,oBAAoB,aAAa;AAEnF,MAAM,kCAAkC,gBAAgB,0BAA0B,aAAa;AAI/F,MAAa,uCAAuC,EAAE,OAAO;CACzD,YAAY;CACZ,aAAa,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACtC,aAAa,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACtC,cAAc,gBAAgB,kBAAkB,aAAa;AACjE,CAAC;AAMD,MAAa,iCAAiC,EAAE,OAAO;CACnD,MAAM;CACN,aAAa,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACtC,aAAa,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACtC,YAAY,EAAE,SAAS,EAAE,QAAQ,GAAG,KAAK;CACzC,aAAa,EAAE,SAAS,EAAE,MAAM,+BAA+B,GAAG,CAAC,CAAC;AACxE,CAAC;AAID,MAAa,8BAA8B,EAAE,OAAO;CAChD,aAAa,EAAE,SAAS,EAAE,MAAM,oCAAoC,GAAG,CAAC,CAAC;CACzE,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,GAAG,CAAC,CAAC;AACjE,CAAC;AAID,MAAa,uCAAuC,EAAE,OAAO;CACzD,MAAM;CACN,aAAa,EAAE,SAAS,EAAE,MAAM,+BAA+B,GAAG,CAAC,CAAC;CACpE,oBAAoB;AACxB,CAAC;AAMD,MAAa,8BAA8B,EAAE,aAAa;CACtD,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAChC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC/B,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAChC,qBAAqB;CACrB,SAAS;CACT,WAAW;AACf,CAAC;AAID,MAAa,0BAA0B,EAAE,aAAa,EAClD,cAAc,cAAc,cAAc,EAC9C,CAAC;AAID,MAAa,+BAA+B,EAAE,OAAO;CACjD,cAAc;CACd,cAAc,EAAE,OAAO;CACvB,uBAAuB,EAAE,OAAO;CAChC,UAAU;AACd,CAAC;AAID,MAAa,iCAAiC,EAAE,OAAO,CAAC,CAAC;AAWzD,MAAM,0BAA0B,uBAAwC,CAAC,CAAC;CACtE,OAAO;EAAE,MAAM;EAAS,SAAS,WAAW,EAAE,MAAM;CAAG;CACvD,MAAM;EAAE,MAAM;EAAQ,SAAS,UAAU,EAAE,KAAK;CAAG;CACnD,OAAO;EAAE,MAAM;EAAS,SAAS,WAAW,EAAE,MAAM;CAAG;CACvD,QAAQ;EACJ,MAAM;EACN,SAAS,YAAY,EAAE,QAAQ,sBAAsB,aAAa,QAAQ;CAC9E;AACJ,CAAC;AAED,MAAa,8BAA8B,EAAE,KACzC,EAAE,aAAa;CACX,cAAc,cAAc,cAAc;CAC1C,kBAAkB,gCAAgC,kBAAkB;CACpE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;CAC5B,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC;CAC3B,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;CAC5B,QAAQ,EAAE,SAAS,EAAE,SAAS,wBAAwB,CAAC;AAC3D,CAAC,GACD,EAAE,OACG,EAAE,OAAO,MAAM,OAAO,aACnB,UAAU,KAAA,KACV,SAAS,KAAA,KACT,UAAU,KAAA,KACV,WAAW,KAAA,GACf,gDACJ,GACA,EAAE,WAAW,EAAE,cAAc,kBAAkB,GAAG,YAAY;CAC1D,MAAM,EAAE,OAAO,YAAY,eAAe,gBAAgB,OAAO,uBAAuB;CACxF,OAAO;EACH;EACA;EACA;EACA;CACJ;AACJ,CAAC,CACL;AAIA,MAAa,oCAAoC,EAAE,aAAa;CAC5D,cAAc,cAAc,cAAc;CAC1C,kBAAkB,cAAc,kBAAkB;CAClD,MAAM,EAAE,KACJ,sBACA,EAAE,WAAW,SAAS,oBAAoB,aAAa,KAAK,CAChE;AACJ,CAAC;AAID,MAAa,oCAAoC,EAAE,aAAa;CAC5D,cAAc,cAAc,cAAc;CAC1C,kBAAkB,cAAc,kBAAkB;AACtD,CAAC;AAID,MAAa,wCAAwC;AAMrD,MAAa,+CAA+C,EAAE,aAAa;CACvE,cAAc,cAAc,cAAc;CAC1C,kBAAkB,EAAE,QAAQ;AAChC,CAAC;AAMD,MAAa,mCAAmC,EAAE,aAAa,EAC3D,WAAW,EAAE,KACT,EAAE,SAAS,EAAE,SAAS,kCAAkC,GAAG,EAAE,GAC7D,EAAE,WAAW,cAAc,+BAA+B,aAAa,UAAU,CACrF,EACJ,CAAC;AAID,MAAM,qBAAqB,EAAE,SAAS;CAAC;CAAU;CAAW;AAAQ,CAAC;AAE1C,EAAE,SAAS;CAAC;CAAW;CAAY;CAAY;AAAW,CAAC;AAItF,MAAM,0BAA0B,EAAE,OAAO;AAEzC,MAAa,qCAAqC,EAAE,aAAa;CAC7D,UAAU,cAAc,UAAU;CAClC,QAAQ,EAAE,KACN,oBACA,EAAE,WAAW,MAAM,kBAAkB,aAAa,EAAE,CACxD;AACJ,CAAC;AAID,MAAM,8BAA8B,gBAAgB,sBAAsB,aAAa;AAIvF,MAAa,mBAAmB,EAAE,KAC9B,EAAE,OAAO;CACL,IAAI;CACJ,MAAM;CACN,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAChC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC/B,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAChC,QAAQ;CACR,qBAAqB,EAAE,OAAO;CAC9B,uBAAuB,EAAE,SAAS,EAAE,OAAO,CAAC;CAC5C,eAAe,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACxC,gBAAgB,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACzC,8BAA8B,EAAE,OAAO;CACvC,oBAAoB;CACpB,kBAAkB,EAAE,SAAS,EAAE,QAAQ,GAAG,KAAK;CAC/C,WAAW,EAAE,SAAS,eAAe;CACrC,UAAU;AACd,CAAC,GACD,EAAE,WAAW,EAAE,WAAW,GAAG,kBAAkB;CAC3C,GAAG;CACH,WAAW,UAAU,SAAS;CAC9B,aAAa,gBAAgB,SAAS;AAC1C,EAAE,CACN;AAIA,MAAa,yBAAyB,EAAE,OAAO;CAC3C,WAAW;CACX,MAAM;CACN,UAAU,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACnC,qBAAqB,EAAE,OAAO;CAC9B,WAAW,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACpC,aAAa,EAAE,SAAS,EAAE,QAAQ,GAAG,KAAK;AAC9C,CAAC;AAID,MAAa,yBAAyB,EAAE,KACpC,EAAE,OAAO;CACL,IAAI;CACJ,cAAc;CACd,kBAAkB;CAClB,kBAAkB;CAClB,MAAM;CACN,QAAQ,EAAE,KACN,yBACA,EAAE,WAAW,MAAM,UAAU,kBAAkB,eAAe,CAAC,CAAC,CACpE;CACA,WAAW;CACX,aAAa;CACb,iBAAiB,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC1C,iBAAiB,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC1C,iBAAiB,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC1C,gCAAgC,EAAE,OAAO;CACzC,gCAAgC,EAAE,OAAO;CACzC,kBAAkB,EAAE,QAAQ;AAChC,CAAC,GACD,EAAE,WACG,EACG,iBACA,cACA,gCACA,gCACA,GAAG,YACA;CACH,GAAG;CACH;CACA;CACA,4BAA4B;CAC5B,4BAA4B;AAChC,EACJ,CACJ;AAIA,MAAa,gCAAgC,EAAE,aAAa;CACxD,cAAc,cAAc,cAAc;CAC1C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,QAAQ,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,SAAS,GAAG,CAAC,GAAG,EAAE;CACrF,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE;AAC1D,CAAC;AAID,MAAa,gCAAgC,EAAE,OAAO;CAClD,WAAW;CACX,YAAY,gBAAgB,wBAAwB,aAAa;CACjE,aAAa,gBAAgB,yBAAyB,aAAa;CACnE,QAAQ,gBAAgB,yBAAyB,aAAa;CAC9D,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC;CACzB,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;CAChC,gBAAgB;CAChB,aAAa,EAAE,KACX,EAAE,OAAO,GACT,EAAE,WAAW,MAAM,KAAK,MAAM,CAAC,CAAC,CACpC;AACJ,CAAC"}
+{"version":3,"file":"subaccounts.schemas.js","names":[],"sources":["../../../src/services/subaccounts/subaccounts.schemas.ts"],"sourcesContent":["import {\n    WalletAddressSchema,\n    WalletChallengeMessageSchema,\n    WalletChallengeUriSchema,\n    WalletSignatureSchema,\n} from \"../auth/wallet-challenge.schemas.js\";\nimport * as v from \"valibot\";\nimport {\n    BigIntStringSchema,\n    OptionalTimestampMsSchema,\n    PublicIdSchema,\n    TimestampSchema,\n    idInputSchema,\n    positiveBigintStringInputSchema,\n} from \"../../shared/schemas.js\";\nimport { tsObjToMs, tsObjToNsString } from \"../../utils/time.js\";\nimport { enumLabel, enumLabelSchema } from \"../../shared/proto-enum-codec.js\";\nimport {\n    SubaccountRoleCodec,\n    SubaccountPermissionCodec,\n    InviteActionCodec,\n    InviteStatusCodec,\n    SubaccountInviteDirectionCodec,\n    SUBACCOUNT_INVITE_DIRECTION_VALUES,\n    SubaccountStatusCodec,\n    SUBACCOUNT_STATUS_VALUES,\n    ActivityEntityKindCodec,\n    ActivityEventActionCodec,\n    ActivityEventSourceCodec,\n} from \"./subaccounts.codecs.js\";\nimport { PolicyActionCodec } from \"../policies/shared.codecs.js\";\nimport { buildProtoPatch, defineProtoPatchFields } from \"../../utils/proto-patch.js\";\n\nconst SUBACCOUNT_ROLE_VALUES = [\n    \"owner\",\n    \"admin\",\n    \"treasury\",\n    \"leveraged_trader\",\n    \"trader\",\n    \"viewer\",\n] as const;\n\nexport const SubaccountRoleSchema = v.picklist(SUBACCOUNT_ROLE_VALUES);\n\nexport type SubaccountRole = v.InferOutput<typeof SubaccountRoleSchema>;\n\nconst ProtoSubaccountRoleSchema = enumLabelSchema(SubaccountRoleCodec.protoToOutput);\n\nconst ProtoSubaccountPermissionSchema = enumLabelSchema(SubaccountPermissionCodec.protoToOutput);\n\nexport type SubaccountPermission = v.InferOutput<typeof ProtoSubaccountPermissionSchema>;\n\nexport const SubaccountPermissionDefinitionSchema = v.object({\n    permission: ProtoSubaccountPermissionSchema,\n    displayName: v.optional(v.string(), \"\"),\n    description: v.optional(v.string(), \"\"),\n    policyAction: enumLabelSchema(PolicyActionCodec.protoToOutput),\n});\n\nexport type SubaccountPermissionDefinition = v.InferOutput<\n    typeof SubaccountPermissionDefinitionSchema\n>;\n\nexport const SubaccountRoleDefinitionSchema = v.object({\n    role: ProtoSubaccountRoleSchema,\n    displayName: v.optional(v.string(), \"\"),\n    description: v.optional(v.string(), \"\"),\n    assignable: v.optional(v.boolean(), false),\n    permissions: v.optional(v.array(ProtoSubaccountPermissionSchema), []),\n});\n\nexport type SubaccountRoleDefinition = v.InferOutput<typeof SubaccountRoleDefinitionSchema>;\n\nexport const SubaccountRoleCatalogSchema = v.object({\n    permissions: v.optional(v.array(SubaccountPermissionDefinitionSchema), []),\n    roles: v.optional(v.array(SubaccountRoleDefinitionSchema), []),\n});\n\nexport type SubaccountRoleCatalog = v.InferOutput<typeof SubaccountRoleCatalogSchema>;\n\nexport const EffectiveSubaccountPermissionsSchema = v.object({\n    role: ProtoSubaccountRoleSchema,\n    permissions: v.optional(v.array(ProtoSubaccountPermissionSchema), []),\n    subaccountPolicyId: PublicIdSchema,\n});\n\nexport type EffectiveSubaccountPermissions = v.InferOutput<\n    typeof EffectiveSubaccountPermissionsSchema\n>;\n\nexport const CreateSubaccountChallengeInputSchema = v.strictObject({\n    ownerAddress: WalletAddressSchema,\n    uri: WalletChallengeUriSchema,\n});\n\nexport type CreateSubaccountChallengeInput = v.InferInput<\n    typeof CreateSubaccountChallengeInputSchema\n>;\n\nexport const SubaccountChallengeSchema = v.object({\n    message: WalletChallengeMessageSchema,\n    smartAccountAddress: WalletAddressSchema,\n    smartAccountSaltNonce: v.number(),\n    expiresAt: OptionalTimestampMsSchema,\n    polyesterChainId: v.pipe(v.bigint(), v.transform(Number)),\n});\n\nexport type SubaccountChallenge = v.InferOutput<typeof SubaccountChallengeSchema>;\n\nexport const CreateSubaccountInputSchema = v.strictObject({\n    label: v.optional(v.string(), \"\"),\n    icon: v.optional(v.string(), \"\"),\n    color: v.optional(v.string(), \"\"),\n    smartAccountAddress: WalletAddressSchema,\n    message: WalletChallengeMessageSchema,\n    signature: WalletSignatureSchema,\n});\n\nexport type CreateSubaccountInput = v.InferInput<typeof CreateSubaccountInputSchema>;\n\nexport const SubaccountIdInputSchema = v.strictObject({\n    subaccountId: idInputSchema(\"subaccountId\"),\n});\n\nexport type SubaccountIdInput = v.InferInput<typeof SubaccountIdInputSchema>;\n\nexport const CreateSubaccountResultSchema = v.object({\n    subaccountId: PublicIdSchema,\n    totalCreated: v.number(),\n    smartAccountSaltNonce: v.number(),\n    revision: BigIntStringSchema,\n});\n\nexport type CreateSubaccountResult = v.InferOutput<typeof CreateSubaccountResultSchema>;\n\nexport const SubaccountMutationResultSchema = v.object({});\n\nexport type SubaccountMutationResult = v.InferOutput<typeof SubaccountMutationResultSchema>;\n\ntype SubaccountPatch = {\n    label?: string;\n    icon?: string;\n    color?: string;\n    status?: (typeof SUBACCOUNT_STATUS_VALUES)[number];\n};\n\nconst SUBACCOUNT_PATCH_FIELDS = defineProtoPatchFields<SubaccountPatch>()({\n    label: { path: \"label\", encode: (label) => ({ label }) },\n    icon: { path: \"icon\", encode: (icon) => ({ icon }) },\n    color: { path: \"color\", encode: (color) => ({ color }) },\n    status: {\n        path: \"status\",\n        encode: (status) => ({ status: SubaccountStatusCodec.inputToProto[status] }),\n    },\n});\n\nexport const UpdateSubaccountInputSchema = v.pipe(\n    v.strictObject({\n        subaccountId: idInputSchema(\"subaccountId\"),\n        expectedRevision: positiveBigintStringInputSchema(\"expectedRevision\"),\n        label: v.optional(v.string()),\n        icon: v.optional(v.string()),\n        color: v.optional(v.string()),\n        status: v.optional(v.picklist(SUBACCOUNT_STATUS_VALUES)),\n    }),\n    v.check(\n        ({ label, icon, color, status }) =>\n            label !== undefined ||\n            icon !== undefined ||\n            color !== undefined ||\n            status !== undefined,\n        \"At least one subaccount field must be provided\",\n    ),\n    v.transform(({ subaccountId, expectedRevision, ...input }) => {\n        const { patch: subaccount, updateMask } = buildProtoPatch(input, SUBACCOUNT_PATCH_FIELDS);\n        return {\n            subaccountId,\n            subaccount,\n            updateMask,\n            expectedRevision,\n        };\n    }),\n);\n\nexport type UpdateSubaccountInput = v.InferInput<typeof UpdateSubaccountInputSchema>;\n\nexport const InviteSubaccountMemberInputSchema = v.strictObject({\n    subaccountId: idInputSchema(\"subaccountId\"),\n    granteeAccountId: idInputSchema(\"granteeAccountId\"),\n    role: v.pipe(\n        SubaccountRoleSchema,\n        v.transform((role) => SubaccountRoleCodec.inputToProto[role]),\n    ),\n});\n\nexport type InviteSubaccountMemberInput = v.InferInput<typeof InviteSubaccountMemberInputSchema>;\n\nexport const RemoveSubaccountMemberInputSchema = v.strictObject({\n    subaccountId: idInputSchema(\"subaccountId\"),\n    granteeAccountId: idInputSchema(\"granteeAccountId\"),\n});\n\nexport type RemoveSubaccountMemberInput = v.InferInput<typeof RemoveSubaccountMemberInputSchema>;\n\nexport const UpdateSubaccountMemberRoleInputSchema = InviteSubaccountMemberInputSchema;\n\nexport type UpdateSubaccountMemberRoleInput = v.InferInput<\n    typeof UpdateSubaccountMemberRoleInputSchema\n>;\n\nexport const SetSubaccountMemberMfaRequirementInputSchema = v.strictObject({\n    subaccountId: idInputSchema(\"subaccountId\"),\n    requireMemberMfa: v.boolean(),\n});\n\nexport type SetSubaccountMemberMfaRequirementInput = v.InferInput<\n    typeof SetSubaccountMemberMfaRequirementInputSchema\n>;\n\nexport const ListSubaccountInvitesInputSchema = v.strictObject({\n    direction: v.pipe(\n        v.optional(v.picklist(SUBACCOUNT_INVITE_DIRECTION_VALUES), \"\"),\n        v.transform((direction) => SubaccountInviteDirectionCodec.inputToProto[direction]),\n    ),\n});\n\nexport type ListSubaccountInvitesInput = v.InferInput<typeof ListSubaccountInvitesInputSchema>;\n\nconst InviteActionSchema = v.picklist([\"accept\", \"decline\", \"cancel\"]);\n\nconst InviteStatusSchema = v.picklist([\"pending\", \"accepted\", \"declined\", \"cancelled\"]);\n\nexport type SubaccountInviteStatus = v.InferOutput<typeof InviteStatusSchema>;\n\nconst ProtoInviteStatusSchema = v.number();\n\nexport const RespondSubaccountInviteInputSchema = v.strictObject({\n    inviteId: idInputSchema(\"inviteId\"),\n    action: v.pipe(\n        InviteActionSchema,\n        v.transform((v) => InviteActionCodec.inputToProto[v]),\n    ),\n});\n\nexport type RespondSubaccountInviteInput = v.InferInput<typeof RespondSubaccountInviteInputSchema>;\n\nconst ProtoSubaccountStatusSchema = enumLabelSchema(SubaccountStatusCodec.protoToOutput);\n\nexport type SubaccountStatus = v.InferOutput<typeof ProtoSubaccountStatusSchema>;\n\nexport const SubaccountSchema = v.pipe(\n    v.object({\n        id: PublicIdSchema,\n        role: ProtoSubaccountRoleSchema,\n        label: v.optional(v.string(), \"\"),\n        icon: v.optional(v.string(), \"\"),\n        color: v.optional(v.string(), \"\"),\n        status: ProtoSubaccountStatusSchema,\n        smartAccountAddress: v.string(),\n        smartAccountSaltNonce: v.optional(v.number()),\n        ownerUsername: v.optional(v.string(), \"\"),\n        ownerAvatarUrl: v.optional(v.string(), \"\"),\n        ownerRootSmartAccountAddress: v.string(),\n        subaccountPolicyId: PublicIdSchema,\n        requireMemberMfa: v.optional(v.boolean(), false),\n        updatedAt: v.optional(TimestampSchema),\n        revision: BigIntStringSchema,\n    }),\n    v.transform(({ updatedAt, ...subaccount }) => ({\n        ...subaccount,\n        updatedAt: tsObjToMs(updatedAt),\n        updatedAtNs: tsObjToNsString(updatedAt),\n    })),\n);\n\nexport type Subaccount = v.InferOutput<typeof SubaccountSchema>;\n\nexport const SubaccountMemberSchema = v.object({\n    accountId: PublicIdSchema,\n    role: ProtoSubaccountRoleSchema,\n    username: v.optional(v.string(), \"\"),\n    smartAccountAddress: v.string(),\n    avatarUrl: v.optional(v.string(), \"\"),\n    mfaEnrolled: v.optional(v.boolean(), false),\n});\n\nexport type SubaccountMember = v.InferOutput<typeof SubaccountMemberSchema>;\n\nexport const SubaccountInviteSchema = v.pipe(\n    v.object({\n        id: PublicIdSchema,\n        subaccountId: PublicIdSchema,\n        granteeAccountId: PublicIdSchema,\n        inviterAccountId: PublicIdSchema,\n        role: ProtoSubaccountRoleSchema,\n        status: v.pipe(\n            ProtoInviteStatusSchema,\n            v.transform((v) => enumLabel(InviteStatusCodec.protoToOutput, v)),\n        ),\n        createdAt: OptionalTimestampMsSchema,\n        respondedAt: OptionalTimestampMsSchema,\n        granteeUsername: v.optional(v.string(), \"\"),\n        inviterUsername: v.optional(v.string(), \"\"),\n        subaccountLabel: v.optional(v.string(), \"\"),\n        inviterRootSmartAccountAddress: v.string(),\n        granteeRootSmartAccountAddress: v.string(),\n        requireMemberMfa: v.boolean(),\n    }),\n    v.transform(\n        ({\n            subaccountLabel,\n            subaccountId,\n            inviterRootSmartAccountAddress,\n            granteeRootSmartAccountAddress,\n            ...rest\n        }) => ({\n            ...rest,\n            subaccountId,\n            subaccountLabel,\n            inviterSmartAccountAddress: inviterRootSmartAccountAddress,\n            granteeSmartAccountAddress: granteeRootSmartAccountAddress,\n        }),\n    ),\n);\n\nexport type SubaccountInvite = v.InferOutput<typeof SubaccountInviteSchema>;\n\nexport const SubaccountActivityInputSchema = v.strictObject({\n    subaccountId: idInputSchema(\"subaccountId\"),\n    limit: v.optional(v.pipe(v.number(), v.integer(), v.minValue(0), v.maxValue(200)), 50),\n    pageToken: v.optional(v.pipe(v.string(), v.trim()), \"\"),\n});\n\nexport type SubaccountActivityInput = v.InferInput<typeof SubaccountActivityInputSchema>;\n\nexport const SubaccountActivityEventSchema = v.object({\n    createdAt: OptionalTimestampMsSchema,\n    entityKind: enumLabelSchema(ActivityEntityKindCodec.protoToOutput),\n    eventAction: enumLabelSchema(ActivityEventActionCodec.protoToOutput),\n    source: enumLabelSchema(ActivityEventSourceCodec.protoToOutput),\n    ip: v.optional(v.string()),\n    userAgent: v.optional(v.string()),\n    actorAccountId: PublicIdSchema,\n    payloadJson: v.pipe(\n        v.string(),\n        v.transform((v) => JSON.parse(v)),\n    ),\n});\n\nexport type SubaccountEvent = v.InferOutput<typeof SubaccountActivityEventSchema>;\n"],"mappings":";;;;;;;;AA0CA,MAAa,uBAAuB,EAAE,SAAS;CAR3C;CACA;CACA;CACA;CACA;CACA;AAG2C,CAAsB;AAIrE,MAAM,4BAA4B,gBAAgB,oBAAoB,aAAa;AAEnF,MAAM,kCAAkC,gBAAgB,0BAA0B,aAAa;AAI/F,MAAa,uCAAuC,EAAE,OAAO;CACzD,YAAY;CACZ,aAAa,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACtC,aAAa,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACtC,cAAc,gBAAgB,kBAAkB,aAAa;AACjE,CAAC;AAMD,MAAa,iCAAiC,EAAE,OAAO;CACnD,MAAM;CACN,aAAa,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACtC,aAAa,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACtC,YAAY,EAAE,SAAS,EAAE,QAAQ,GAAG,KAAK;CACzC,aAAa,EAAE,SAAS,EAAE,MAAM,+BAA+B,GAAG,CAAC,CAAC;AACxE,CAAC;AAID,MAAa,8BAA8B,EAAE,OAAO;CAChD,aAAa,EAAE,SAAS,EAAE,MAAM,oCAAoC,GAAG,CAAC,CAAC;CACzE,OAAO,EAAE,SAAS,EAAE,MAAM,8BAA8B,GAAG,CAAC,CAAC;AACjE,CAAC;AAID,MAAa,uCAAuC,EAAE,OAAO;CACzD,MAAM;CACN,aAAa,EAAE,SAAS,EAAE,MAAM,+BAA+B,GAAG,CAAC,CAAC;CACpE,oBAAoB;AACxB,CAAC;AAMD,MAAa,uCAAuC,EAAE,aAAa;CAC/D,cAAc;CACd,KAAK;AACT,CAAC;AAMD,MAAa,4BAA4B,EAAE,OAAO;CAC9C,SAAS;CACT,qBAAqB;CACrB,uBAAuB,EAAE,OAAO;CAChC,WAAW;CACX,kBAAkB,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,UAAU,MAAM,CAAC;AAC5D,CAAC;AAID,MAAa,8BAA8B,EAAE,aAAa;CACtD,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAChC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC/B,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAChC,qBAAqB;CACrB,SAAS;CACT,WAAW;AACf,CAAC;AAID,MAAa,0BAA0B,EAAE,aAAa,EAClD,cAAc,cAAc,cAAc,EAC9C,CAAC;AAID,MAAa,+BAA+B,EAAE,OAAO;CACjD,cAAc;CACd,cAAc,EAAE,OAAO;CACvB,uBAAuB,EAAE,OAAO;CAChC,UAAU;AACd,CAAC;AAID,MAAa,iCAAiC,EAAE,OAAO,CAAC,CAAC;AAWzD,MAAM,0BAA0B,uBAAwC,CAAC,CAAC;CACtE,OAAO;EAAE,MAAM;EAAS,SAAS,WAAW,EAAE,MAAM;CAAG;CACvD,MAAM;EAAE,MAAM;EAAQ,SAAS,UAAU,EAAE,KAAK;CAAG;CACnD,OAAO;EAAE,MAAM;EAAS,SAAS,WAAW,EAAE,MAAM;CAAG;CACvD,QAAQ;EACJ,MAAM;EACN,SAAS,YAAY,EAAE,QAAQ,sBAAsB,aAAa,QAAQ;CAC9E;AACJ,CAAC;AAED,MAAa,8BAA8B,EAAE,KACzC,EAAE,aAAa;CACX,cAAc,cAAc,cAAc;CAC1C,kBAAkB,gCAAgC,kBAAkB;CACpE,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;CAC5B,MAAM,EAAE,SAAS,EAAE,OAAO,CAAC;CAC3B,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;CAC5B,QAAQ,EAAE,SAAS,EAAE,SAAS,wBAAwB,CAAC;AAC3D,CAAC,GACD,EAAE,OACG,EAAE,OAAO,MAAM,OAAO,aACnB,UAAU,KAAA,KACV,SAAS,KAAA,KACT,UAAU,KAAA,KACV,WAAW,KAAA,GACf,gDACJ,GACA,EAAE,WAAW,EAAE,cAAc,kBAAkB,GAAG,YAAY;CAC1D,MAAM,EAAE,OAAO,YAAY,eAAe,gBAAgB,OAAO,uBAAuB;CACxF,OAAO;EACH;EACA;EACA;EACA;CACJ;AACJ,CAAC,CACL;AAIA,MAAa,oCAAoC,EAAE,aAAa;CAC5D,cAAc,cAAc,cAAc;CAC1C,kBAAkB,cAAc,kBAAkB;CAClD,MAAM,EAAE,KACJ,sBACA,EAAE,WAAW,SAAS,oBAAoB,aAAa,KAAK,CAChE;AACJ,CAAC;AAID,MAAa,oCAAoC,EAAE,aAAa;CAC5D,cAAc,cAAc,cAAc;CAC1C,kBAAkB,cAAc,kBAAkB;AACtD,CAAC;AAID,MAAa,wCAAwC;AAMrD,MAAa,+CAA+C,EAAE,aAAa;CACvE,cAAc,cAAc,cAAc;CAC1C,kBAAkB,EAAE,QAAQ;AAChC,CAAC;AAMD,MAAa,mCAAmC,EAAE,aAAa,EAC3D,WAAW,EAAE,KACT,EAAE,SAAS,EAAE,SAAS,kCAAkC,GAAG,EAAE,GAC7D,EAAE,WAAW,cAAc,+BAA+B,aAAa,UAAU,CACrF,EACJ,CAAC;AAID,MAAM,qBAAqB,EAAE,SAAS;CAAC;CAAU;CAAW;AAAQ,CAAC;AAE1C,EAAE,SAAS;CAAC;CAAW;CAAY;CAAY;AAAW,CAAC;AAItF,MAAM,0BAA0B,EAAE,OAAO;AAEzC,MAAa,qCAAqC,EAAE,aAAa;CAC7D,UAAU,cAAc,UAAU;CAClC,QAAQ,EAAE,KACN,oBACA,EAAE,WAAW,MAAM,kBAAkB,aAAa,EAAE,CACxD;AACJ,CAAC;AAID,MAAM,8BAA8B,gBAAgB,sBAAsB,aAAa;AAIvF,MAAa,mBAAmB,EAAE,KAC9B,EAAE,OAAO;CACL,IAAI;CACJ,MAAM;CACN,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAChC,MAAM,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC/B,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAChC,QAAQ;CACR,qBAAqB,EAAE,OAAO;CAC9B,uBAAuB,EAAE,SAAS,EAAE,OAAO,CAAC;CAC5C,eAAe,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACxC,gBAAgB,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACzC,8BAA8B,EAAE,OAAO;CACvC,oBAAoB;CACpB,kBAAkB,EAAE,SAAS,EAAE,QAAQ,GAAG,KAAK;CAC/C,WAAW,EAAE,SAAS,eAAe;CACrC,UAAU;AACd,CAAC,GACD,EAAE,WAAW,EAAE,WAAW,GAAG,kBAAkB;CAC3C,GAAG;CACH,WAAW,UAAU,SAAS;CAC9B,aAAa,gBAAgB,SAAS;AAC1C,EAAE,CACN;AAIA,MAAa,yBAAyB,EAAE,OAAO;CAC3C,WAAW;CACX,MAAM;CACN,UAAU,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACnC,qBAAqB,EAAE,OAAO;CAC9B,WAAW,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CACpC,aAAa,EAAE,SAAS,EAAE,QAAQ,GAAG,KAAK;AAC9C,CAAC;AAID,MAAa,yBAAyB,EAAE,KACpC,EAAE,OAAO;CACL,IAAI;CACJ,cAAc;CACd,kBAAkB;CAClB,kBAAkB;CAClB,MAAM;CACN,QAAQ,EAAE,KACN,yBACA,EAAE,WAAW,MAAM,UAAU,kBAAkB,eAAe,CAAC,CAAC,CACpE;CACA,WAAW;CACX,aAAa;CACb,iBAAiB,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC1C,iBAAiB,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC1C,iBAAiB,EAAE,SAAS,EAAE,OAAO,GAAG,EAAE;CAC1C,gCAAgC,EAAE,OAAO;CACzC,gCAAgC,EAAE,OAAO;CACzC,kBAAkB,EAAE,QAAQ;AAChC,CAAC,GACD,EAAE,WACG,EACG,iBACA,cACA,gCACA,gCACA,GAAG,YACA;CACH,GAAG;CACH;CACA;CACA,4BAA4B;CAC5B,4BAA4B;AAChC,EACJ,CACJ;AAIA,MAAa,gCAAgC,EAAE,aAAa;CACxD,cAAc,cAAc,cAAc;CAC1C,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,QAAQ,GAAG,EAAE,SAAS,CAAC,GAAG,EAAE,SAAS,GAAG,CAAC,GAAG,EAAE;CACrF,WAAW,EAAE,SAAS,EAAE,KAAK,EAAE,OAAO,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE;AAC1D,CAAC;AAID,MAAa,gCAAgC,EAAE,OAAO;CAClD,WAAW;CACX,YAAY,gBAAgB,wBAAwB,aAAa;CACjE,aAAa,gBAAgB,yBAAyB,aAAa;CACnE,QAAQ,gBAAgB,yBAAyB,aAAa;CAC9D,IAAI,EAAE,SAAS,EAAE,OAAO,CAAC;CACzB,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;CAChC,gBAAgB;CAChB,aAAa,EAAE,KACX,EAAE,OAAO,GACT,EAAE,WAAW,MAAM,KAAK,MAAM,CAAC,CAAC,CACpC;AACJ,CAAC"}

package/dist/services/subaccounts/subaccounts.types.d.ts

@@ -1,2 +1,2 @@
-import { CreateSubaccountInput, CreateSubaccountResult, EffectiveSubaccountPermissions, InviteSubaccountMemberInput, ListSubaccountInvitesInput, RemoveSubaccountMemberInput, RespondSubaccountInviteInput, SetSubaccountMemberMfaRequirementInput, Subaccount, SubaccountActivityInput, SubaccountEvent, SubaccountIdInput, SubaccountInvite, SubaccountInviteStatus, SubaccountMember, SubaccountPermission, SubaccountPermissionDefinition, SubaccountRole, SubaccountRoleCatalog, SubaccountRoleDefinition, SubaccountStatus, UpdateSubaccountInput, UpdateSubaccountMemberRoleInput } from "./subaccounts.schemas.js";
-export type { CreateSubaccountInput, CreateSubaccountResult, CreateSubaccountResult as CreateSubaccountServiceResult, EffectiveSubaccountPermissions, InviteSubaccountMemberInput, ListSubaccountInvitesInput, RemoveSubaccountMemberInput, RespondSubaccountInviteInput, SetSubaccountMemberMfaRequirementInput, Subaccount, SubaccountActivityInput, SubaccountEvent, SubaccountIdInput, SubaccountInvite, SubaccountInviteStatus, SubaccountMember, SubaccountPermission, SubaccountPermissionDefinition, SubaccountRole, SubaccountRoleCatalog, SubaccountRoleDefinition, SubaccountStatus, UpdateSubaccountInput, UpdateSubaccountMemberRoleInput };
+import { CreateSubaccountChallengeInput, CreateSubaccountInput, CreateSubaccountResult, EffectiveSubaccountPermissions, InviteSubaccountMemberInput, ListSubaccountInvitesInput, RemoveSubaccountMemberInput, RespondSubaccountInviteInput, SetSubaccountMemberMfaRequirementInput, Subaccount, SubaccountActivityInput, SubaccountChallenge, SubaccountEvent, SubaccountIdInput, SubaccountInvite, SubaccountInviteStatus, SubaccountMember, SubaccountPermission, SubaccountPermissionDefinition, SubaccountRole, SubaccountRoleCatalog, SubaccountRoleDefinition, SubaccountStatus, UpdateSubaccountInput, UpdateSubaccountMemberRoleInput } from "./subaccounts.schemas.js";
+export type { CreateSubaccountChallengeInput, CreateSubaccountInput, CreateSubaccountResult, CreateSubaccountResult as CreateSubaccountServiceResult, EffectiveSubaccountPermissions, InviteSubaccountMemberInput, ListSubaccountInvitesInput, RemoveSubaccountMemberInput, RespondSubaccountInviteInput, SetSubaccountMemberMfaRequirementInput, Subaccount, SubaccountActivityInput, SubaccountChallenge, SubaccountEvent, SubaccountIdInput, SubaccountInvite, SubaccountInviteStatus, SubaccountMember, SubaccountPermission, SubaccountPermissionDefinition, SubaccountRole, SubaccountRoleCatalog, SubaccountRoleDefinition, SubaccountStatus, UpdateSubaccountInput, UpdateSubaccountMemberRoleInput };

package/dist/shared/connect-error-mapping.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connect-error-mapping.d.ts","names":[],"sources":["../../src/shared/connect-error-mapping.ts"],"mappings":";;;;;;;iBA+HgB,6BAA6B,IAAI,eAAe;;;;;;iBAsJhD,iBAAiB;;;;;;iBA0CjB,iCAAiC"}
+{"version":3,"file":"connect-error-mapping.d.ts","names":[],"sources":["../../src/shared/connect-error-mapping.ts"],"mappings":";;;;;;;iBAmIgB,6BAA6B,IAAI,eAAe;;;;;;iBA6JhD,iBAAiB;;;;;;iBA0CjB,iCAAiC"}

package/dist/shared/connect-error-mapping.js

@@ -1,8 +1,8 @@
-import { AlreadyExistsError, AuthenticationError, InternalServerError, MfaEnrollmentRequiredError, MfaLastFactorRequiredError, MfaVerificationError, PermissionError, PolicyInUseError, PolicyLockedError, PolicyScopeMismatchError, PolyesterError, PreconditionFailedError, RateLimitError, ResourceNotFoundError, RevisionConflictError, ServiceUnavailableError, SessionElevationRequiredError, StaleQuoteError, StepUpRequiredError, TimeoutError, TransientError, ValidationError, isAbortError, normalizeErrorMessage } from "./errors.js";
+import { AlreadyExistsError, AuthenticationError, InternalServerError, MfaEnrollmentRequiredError, MfaLastFactorRequiredError, MfaVerificationError, PermissionError, PolicyInUseError, PolicyLockedError, PolicyScopeMismatchError, PolyesterError, PreconditionFailedError, RateLimitError, ResourceNotFoundError, RevisionConflictError, ServiceUnavailableError, SessionElevationRequiredError, StaleQuoteError, StepUpRequiredError, SubaccountChallengeInvalidError, TimeoutError, TransientError, ValidationError, isAbortError, normalizeErrorMessage } from "./errors.js";
 import { parseConnectErrorDetail } from "./error-detail.js";
 import { Code, ConnectError } from "@connectrpc/connect";
 //#region src/shared/connect-error-mapping.ts
-function hasTransientTransferError(detail) {
+function hasTransientServiceError(detail) {
 	if (detail?.service === "withdraw") return [
 		"SERVICE_UNAVAILABLE",
 		"SOURCE_SMART_ACCOUNT_UNAVAILABLE",
@@ -21,6 +21,7 @@ function hasTransientTransferError(detail) {
 		"CAPITAL_VIEW_UNAVAILABLE",
 		"ACCOUNT_SHARD_UNAVAILABLE"
 	].includes(detail.code);
+	if (detail?.service === "claims") return ["SERVICE_UNAVAILABLE", "CLAIM_TEMPORARILY_UNAVAILABLE"].includes(detail.code);
 	return false;
 }
 function safeRetryAfterMs(rateLimit) {
@@ -77,6 +78,7 @@ function connectErrorToPolyesterError(ce) {
 	const withFallback = (fallback) => message || fallback;
 	if (detail?.service === "auth" && detail.code === "AUTH_RESOURCE_NOT_FOUND") return new ResourceNotFoundError(withFallback("Resource not found."), options);
 	if (detail?.service === "auth" && detail.code === "AUTH_REVISION_CONFLICT") return new RevisionConflictError(withFallback("Resource changed since it was last read."), options);
+	if (detail?.service === "auth" && detail.code === "AUTH_SUBACCOUNT_CHALLENGE_INVALID") return new SubaccountChallengeInvalidError(withFallback("Subaccount challenge is expired, replaced, or invalid."), options);
 	if (detail?.service === "auth" && detail.code === "AUTH_POLICY_IN_USE") return new PolicyInUseError(withFallback("Policy is still in use."), options);
 	if (detail?.service === "auth" && detail.code === "AUTH_POLICY_LOCKED") return new PolicyLockedError(withFallback("Policy is locked."), options);
 	if (detail?.service === "auth" && detail.code === "AUTH_POLICY_SCOPE_MISMATCH") return new PolicyScopeMismatchError(withFallback("Policy does not belong to the target account scope."), options);
@@ -88,12 +90,12 @@ function connectErrorToPolyesterError(ce) {
 	if (mfaKind) return new MFA_ERROR_CLASSES[mfaKind](withFallback("Multi-factor authentication required."), options);
 	if (detail?.service === "orders" && detail.code === "STALE_QUOTE") return new StaleQuoteError(withFallback("The submitted market quote is stale."), options);
 	const rateLimit = detail?.service === "orders" ? detail.rateLimit : void 0;
-	if (rateLimit || (detail?.service === "orders" || detail?.service === "withdraw" || detail?.service === "internal_transfer") && detail.code === "RATE_LIMIT_EXCEEDED") return new RateLimitError(withFallback("Rate limit exceeded."), {
+	if (rateLimit || (detail?.service === "orders" || detail?.service === "withdraw" || detail?.service === "internal_transfer" || detail?.service === "claims") && detail.code === "RATE_LIMIT_EXCEEDED") return new RateLimitError(withFallback("Rate limit exceeded."), {
 		...options,
 		rateLimit,
 		retryAfterMs: safeRetryAfterMs(rateLimit) ?? parseRetryAfterMs(ce)
 	});
-	if (hasTransientTransferError(detail)) return new ServiceUnavailableError(withFallback("Service unavailable."), options);
+	if (hasTransientServiceError(detail)) return new ServiceUnavailableError(withFallback("Service unavailable."), options);
 	switch (ce.code) {
 		case Code.InvalidArgument:
 		case Code.OutOfRange: return new ValidationError(withFallback("Invalid request."), options);

package/dist/shared/connect-error-mapping.js.map

@@ -1 +1 @@
-{"version":3,"file":"connect-error-mapping.js","names":[],"sources":["../../src/shared/connect-error-mapping.ts"],"sourcesContent":["import { Code, ConnectError, type Interceptor, type Transport } from \"@connectrpc/connect\";\nimport { parseConnectErrorDetail, type PolyesterErrorDetail } from \"./error-detail.js\";\nimport {\n    AlreadyExistsError,\n    AuthenticationError,\n    InternalServerError,\n    isAbortError,\n    MfaEnrollmentRequiredError,\n    MfaLastFactorRequiredError,\n    MfaVerificationError,\n    type MfaVerificationFailureReason,\n    normalizeErrorMessage,\n    PermissionError,\n    PolicyInUseError,\n    PolicyLockedError,\n    PolicyScopeMismatchError,\n    PolyesterError,\n    type PolyesterErrorOptions,\n    PreconditionFailedError,\n    RateLimitError,\n    ResourceNotFoundError,\n    RevisionConflictError,\n    ServiceUnavailableError,\n    SessionElevationRequiredError,\n    StaleQuoteError,\n    StepUpRequiredError,\n    TimeoutError,\n    TransientError,\n    ValidationError,\n} from \"./errors.js\";\nimport type { RateLimitDetail } from \"./rate-limit.schemas.js\";\n\nfunction hasTransientTransferError(detail: PolyesterErrorDetail | undefined): boolean {\n    if (detail?.service === \"withdraw\") {\n        return [\n            \"SERVICE_UNAVAILABLE\",\n            \"SOURCE_SMART_ACCOUNT_UNAVAILABLE\",\n            \"CAPITAL_VIEW_UNAVAILABLE\",\n            \"CHAIN_METADATA_UNAVAILABLE\",\n            \"FEE_UNAVAILABLE\",\n            \"SUPPLY_UNAVAILABLE\",\n            \"STEP_UP_UNAVAILABLE\",\n            \"DESTINATION_VALIDATION_UNAVAILABLE\",\n            \"ACCOUNT_SHARD_UNAVAILABLE\",\n        ].includes(detail.code);\n    }\n    if (detail?.service === \"internal_transfer\") {\n        return [\n            \"SERVICE_UNAVAILABLE\",\n            \"SMART_ACCOUNT_UNAVAILABLE\",\n            \"STEP_UP_UNAVAILABLE\",\n            \"CAPITAL_VIEW_UNAVAILABLE\",\n            \"ACCOUNT_SHARD_UNAVAILABLE\",\n        ].includes(detail.code);\n    }\n    return false;\n}\n\nfunction safeRetryAfterMs(rateLimit: RateLimitDetail | undefined): number | undefined {\n    if (rateLimit?.retryAfterMs === undefined) return undefined;\n    const value = BigInt(rateLimit.retryAfterMs);\n    return value <= BigInt(Number.MAX_SAFE_INTEGER) ? Number(value) : undefined;\n}\n\nconst HTTP_WEEKDAY = \"(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun)\";\nconst HTTP_WEEKDAY_LONG = \"(?:Monday|Tuesday|Wednesday|Thursday|Friday|Saturday|Sunday)\";\nconst HTTP_MONTH = \"(?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)\";\nconst HTTP_DATE_RE = new RegExp(\n    `^(?:${HTTP_WEEKDAY}, \\\\d{2} ${HTTP_MONTH} \\\\d{4} \\\\d{2}:\\\\d{2}:\\\\d{2} GMT|${HTTP_WEEKDAY_LONG}, \\\\d{2}-${HTTP_MONTH}-\\\\d{2} \\\\d{2}:\\\\d{2}:\\\\d{2} GMT|${HTTP_WEEKDAY} ${HTTP_MONTH} {1,2}\\\\d{1,2} \\\\d{2}:\\\\d{2}:\\\\d{2} \\\\d{4})$`,\n    \"u\",\n);\n\n/**\n * Returns the error message without the leading \"[code] \" prefix that\n * `ConnectError` prepends, e.g. \"[invalid_argument] Insufficient funds.\"\n * becomes \"Insufficient funds.\".\n */\nexport function getNormalizedConnectMessage(err: unknown): string {\n    const ce = ConnectError.from(err);\n    const raw = ce.message ?? \"\";\n    return normalizeErrorMessage(raw);\n}\n\nexport type MfaErrorKind = \"session-elevation\" | \"enrollment\" | \"step-up\";\n\n/**\n * Classifies an error as one of the MFA flows the backend can demand.\n * Classification is based only on stable structured auth error details.\n */\nexport function detectMfaErrorKind(err: unknown): MfaErrorKind | null {\n    const mapped = toPolyesterError(err);\n    return mfaErrorKind(mapped instanceof PolyesterError ? mapped.detail : undefined);\n}\n\nfunction mfaErrorKind(detail: PolyesterErrorDetail | undefined): MfaErrorKind | null {\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_ELEVATION_REQUIRED\") {\n        return \"session-elevation\";\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_STEP_UP_REQUIRED\") return \"step-up\";\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_NOT_ENROLLED\") return \"enrollment\";\n    return null;\n}\n\nfunction parseRetryAfterMs(ce: ConnectError): number | undefined {\n    const value = ce.metadata.get(\"retry-after\");\n    if (!value) return undefined;\n    if (/^\\d+$/u.test(value)) {\n        const seconds = BigInt(value);\n        const maxSafeSeconds = BigInt(Math.floor(Number.MAX_SAFE_INTEGER / 1000));\n        return seconds <= maxSafeSeconds ? Number(seconds) * 1000 : undefined;\n    }\n    if (!HTTP_DATE_RE.test(value)) return undefined;\n    const date = Date.parse(value);\n    if (!Number.isNaN(date)) return Math.max(0, date - Date.now());\n    return undefined;\n}\n\nconst MFA_ERROR_CLASSES = {\n    \"session-elevation\": SessionElevationRequiredError,\n    enrollment: MfaEnrollmentRequiredError,\n    \"step-up\": StepUpRequiredError,\n} as const;\n\n/**\n * Maps a `ConnectError` from the Polyester backend onto the typed\n * {@link PolyesterError} tree. The original error is preserved as `cause`.\n */\nexport function connectErrorToPolyesterError(ce: ConnectError): PolyesterError {\n    const message = getNormalizedConnectMessage(ce);\n    const detail = parseConnectErrorDetail(ce);\n    const options: PolyesterErrorOptions = { cause: ce, detail };\n    const withFallback = (fallback: string) => message || fallback;\n\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_RESOURCE_NOT_FOUND\") {\n        return new ResourceNotFoundError(withFallback(\"Resource not found.\"), options);\n    }\n\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_REVISION_CONFLICT\") {\n        return new RevisionConflictError(\n            withFallback(\"Resource changed since it was last read.\"),\n            options,\n        );\n    }\n\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_POLICY_IN_USE\") {\n        return new PolicyInUseError(withFallback(\"Policy is still in use.\"), options);\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_POLICY_LOCKED\") {\n        return new PolicyLockedError(withFallback(\"Policy is locked.\"), options);\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_POLICY_SCOPE_MISMATCH\") {\n        return new PolicyScopeMismatchError(\n            withFallback(\"Policy does not belong to the target account scope.\"),\n            options,\n        );\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_LAST_FACTOR_REQUIRED\") {\n        return new MfaLastFactorRequiredError(\n            withFallback(\"At least one active MFA factor must remain enrolled.\"),\n            options,\n        );\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_INTERNAL_ERROR\") {\n        return new InternalServerError(withFallback(\"Internal server error.\"), options);\n    }\n\n    const mfaVerificationReason = getMfaVerificationFailureReason(detail);\n    if (mfaVerificationReason) {\n        return new MfaVerificationError(\n            withFallback(\"MFA verification failed.\"),\n            mfaVerificationReason,\n            options,\n        );\n    }\n\n    const mfaKind = mfaErrorKind(detail);\n    if (mfaKind) {\n        return new MFA_ERROR_CLASSES[mfaKind](\n            withFallback(\"Multi-factor authentication required.\"),\n            options,\n        );\n    }\n\n    if (detail?.service === \"orders\" && detail.code === \"STALE_QUOTE\") {\n        return new StaleQuoteError(withFallback(\"The submitted market quote is stale.\"), options);\n    }\n\n    const rateLimit = detail?.service === \"orders\" ? detail.rateLimit : undefined;\n    if (\n        rateLimit ||\n        ((detail?.service === \"orders\" ||\n            detail?.service === \"withdraw\" ||\n            detail?.service === \"internal_transfer\") &&\n            detail.code === \"RATE_LIMIT_EXCEEDED\")\n    ) {\n        return new RateLimitError(withFallback(\"Rate limit exceeded.\"), {\n            ...options,\n            rateLimit,\n            retryAfterMs: safeRetryAfterMs(rateLimit) ?? parseRetryAfterMs(ce),\n        });\n    }\n\n    if (hasTransientTransferError(detail)) {\n        return new ServiceUnavailableError(withFallback(\"Service unavailable.\"), options);\n    }\n\n    switch (ce.code) {\n        case Code.InvalidArgument:\n        case Code.OutOfRange:\n            return new ValidationError(withFallback(\"Invalid request.\"), options);\n        case Code.NotFound:\n            return new ResourceNotFoundError(withFallback(\"Resource not found.\"), options);\n        case Code.AlreadyExists:\n            return new AlreadyExistsError(withFallback(\"Resource already exists.\"), options);\n        case Code.PermissionDenied:\n            return new PermissionError(withFallback(\"Permission denied.\"), options);\n        case Code.Unauthenticated:\n            return new AuthenticationError(withFallback(\"Authentication required.\"), options);\n        case Code.FailedPrecondition:\n            return new PreconditionFailedError(withFallback(\"Precondition failed.\"), options);\n        case Code.ResourceExhausted:\n            return new RateLimitError(withFallback(\"Rate limit exceeded.\"), {\n                ...options,\n                retryAfterMs: parseRetryAfterMs(ce),\n            });\n        case Code.DeadlineExceeded:\n            return new TimeoutError(withFallback(\"Request timed out.\"), options);\n        case Code.Unavailable:\n            return new ServiceUnavailableError(withFallback(\"Service unavailable.\"), options);\n        case Code.Aborted:\n            return new TransientError(withFallback(\"Operation aborted by the backend.\"), options);\n        default:\n            // Gateways sometimes surface outages as Unknown with this stock phrase.\n            if (/service temporarily unavailable/i.test(message)) {\n                return new ServiceUnavailableError(withFallback(\"Service unavailable.\"), options);\n            }\n            return new InternalServerError(withFallback(\"Internal server error.\"), options);\n    }\n}\n\nfunction getMfaVerificationFailureReason(\n    detail: PolyesterErrorDetail | undefined,\n): MfaVerificationFailureReason | null {\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_CHALLENGE_INVALID\") {\n        return \"challenge-invalid\";\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_CHALLENGE_LOCKED\") {\n        return \"challenge-locked\";\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_OTP_INVALID\") return \"otp-invalid\";\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_RECOVERY_INVALID\") {\n        return \"recovery-code-invalid\";\n    }\n    if (\n        (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_PASSKEY_CREDENTIAL_INVALID\") ||\n        (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_PASSKEY_VERIFY_FAILED\")\n    ) {\n        return \"passkey-invalid\";\n    }\n\n    return null;\n}\n\nfunction findPolyesterErrorInCauseChain(err: unknown): PolyesterError | null {\n    let current: unknown = err;\n    for (let depth = 0; depth < 5 && current instanceof Error; depth++) {\n        current = current.cause;\n        if (current instanceof PolyesterError) return current;\n    }\n    return null;\n}\n\n/**\n * Converts any RPC-layer failure into its typed SDK error. Abort errors and\n * caller-cancelled requests pass through unchanged, as do errors that are\n * already typed (e.g. a `NetworkError` from the SDK fetch wrapper).\n */\nexport function toPolyesterError(err: unknown): unknown {\n    if (err instanceof PolyesterError) return err;\n    if (isAbortError(err)) return err;\n    if (err instanceof ConnectError) {\n        if (err.code === Code.Canceled) return err;\n        const wrapped = findPolyesterErrorInCauseChain(err);\n        if (wrapped) return wrapped;\n        return connectErrorToPolyesterError(err);\n    }\n    return err;\n}\n\nfunction callerAbortError(signal: AbortSignal): DOMException {\n    const reason: unknown = signal.reason;\n    return reason instanceof DOMException && reason.name === \"AbortError\"\n        ? reason\n        : new DOMException(\"Request canceled.\", \"AbortError\");\n}\n\nfunction toTransportError(err: unknown, signal?: AbortSignal): unknown {\n    if (signal?.aborted && err instanceof ConnectError && err.code === Code.Canceled) {\n        return callerAbortError(signal);\n    }\n    return toPolyesterError(err);\n}\n\nasync function* mapStreamErrors<T>(\n    source: AsyncIterable<T>,\n    signal?: AbortSignal,\n): AsyncIterable<T> {\n    try {\n        yield* source;\n    } catch (err) {\n        throw toTransportError(err, signal);\n    }\n}\n\n/**\n * Interceptor that converts every RPC failure (unary and streaming) into the\n * typed {@link PolyesterError} hierarchy. Installed outermost by\n * `createTransports`, so callers of SDK services always see typed errors.\n */\nexport function createErrorMappingInterceptor(): Interceptor {\n    return (next) => async (req) => {\n        try {\n            const res = await next(req);\n            if (res.stream) {\n                return { ...res, message: mapStreamErrors(res.message) };\n            }\n            return res;\n        } catch (err) {\n            throw toPolyesterError(err);\n        }\n    };\n}\n\n/**\n * Wraps a Connect transport so errors are translated after Connect's call\n * runner has applied its own error normalization.\n */\nexport function createErrorMappingTransport(transport: Transport): Transport {\n    return {\n        async unary(method, signal, timeoutMs, header, input, contextValues) {\n            if (signal?.aborted) throw callerAbortError(signal);\n            try {\n                return await transport.unary(\n                    method,\n                    signal,\n                    timeoutMs,\n                    header,\n                    input,\n                    contextValues,\n                );\n            } catch (error) {\n                throw toTransportError(error, signal);\n            }\n        },\n        async stream(method, signal, timeoutMs, header, input, contextValues) {\n            if (signal?.aborted) throw callerAbortError(signal);\n            try {\n                const response = await transport.stream(\n                    method,\n                    signal,\n                    timeoutMs,\n                    header,\n                    input,\n                    contextValues,\n                );\n                return { ...response, message: mapStreamErrors(response.message, signal) };\n            } catch (error) {\n                throw toTransportError(error, signal);\n            }\n        },\n    };\n}\n"],"mappings":";;;;AAgCA,SAAS,0BAA0B,QAAmD;CAClF,IAAI,QAAQ,YAAY,YACpB,OAAO;EACH;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACJ,CAAC,CAAC,SAAS,OAAO,IAAI;CAE1B,IAAI,QAAQ,YAAY,qBACpB,OAAO;EACH;EACA;EACA;EACA;EACA;CACJ,CAAC,CAAC,SAAS,OAAO,IAAI;CAE1B,OAAO;AACX;AAEA,SAAS,iBAAiB,WAA4D;CAClF,IAAI,WAAW,iBAAiB,KAAA,GAAW,OAAO,KAAA;CAClD,MAAM,QAAQ,OAAO,UAAU,YAAY;CAC3C,OAAO,SAAS,OAAO,OAAO,gBAAgB,IAAI,OAAO,KAAK,IAAI,KAAA;AACtE;AAEA,MAAM,eAAe;AACrB,MAAM,oBAAoB;AAC1B,MAAM,aAAa;AACnB,MAAM,eAAe,IAAI,OACrB,OAAO,aAAa,WAAW,WAAW,mCAAmC,kBAAkB,WAAW,WAAW,mCAAmC,aAAa,GAAG,WAAW,+CACnL,GACJ;;;;;;AAOA,SAAgB,4BAA4B,KAAsB;CAE9D,MAAM,MADK,aAAa,KAAK,GAChB,CAAC,CAAC,WAAW;CAC1B,OAAO,sBAAsB,GAAG;AACpC;AAaA,SAAS,aAAa,QAA+D;CACjF,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,+BAC9C,OAAO;CAEX,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,yBAAyB,OAAO;CAClF,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,yBAAyB,OAAO;CAClF,OAAO;AACX;AAEA,SAAS,kBAAkB,IAAsC;CAC7D,MAAM,QAAQ,GAAG,SAAS,IAAI,aAAa;CAC3C,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,IAAI,SAAS,KAAK,KAAK,GAAG;EACtB,MAAM,UAAU,OAAO,KAAK;EAE5B,OAAO,WADgB,OAAO,KAAK,MAAM,OAAO,mBAAmB,GAAI,CACxC,IAAI,OAAO,OAAO,IAAI,MAAO,KAAA;CAChE;CACA,IAAI,CAAC,aAAa,KAAK,KAAK,GAAG,OAAO,KAAA;CACtC,MAAM,OAAO,KAAK,MAAM,KAAK;CAC7B,IAAI,CAAC,OAAO,MAAM,IAAI,GAAG,OAAO,KAAK,IAAI,GAAG,OAAO,KAAK,IAAI,CAAC;AAEjE;AAEA,MAAM,oBAAoB;CACtB,qBAAqB;CACrB,YAAY;CACZ,WAAW;AACf;;;;;AAMA,SAAgB,6BAA6B,IAAkC;CAC3E,MAAM,UAAU,4BAA4B,EAAE;CAC9C,MAAM,SAAS,wBAAwB,EAAE;CACzC,MAAM,UAAiC;EAAE,OAAO;EAAI;CAAO;CAC3D,MAAM,gBAAgB,aAAqB,WAAW;CAEtD,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,2BAC9C,OAAO,IAAI,sBAAsB,aAAa,qBAAqB,GAAG,OAAO;CAGjF,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,0BAC9C,OAAO,IAAI,sBACP,aAAa,0CAA0C,GACvD,OACJ;CAGJ,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,sBAC9C,OAAO,IAAI,iBAAiB,aAAa,yBAAyB,GAAG,OAAO;CAEhF,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,sBAC9C,OAAO,IAAI,kBAAkB,aAAa,mBAAmB,GAAG,OAAO;CAE3E,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,8BAC9C,OAAO,IAAI,yBACP,aAAa,qDAAqD,GAClE,OACJ;CAEJ,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,iCAC9C,OAAO,IAAI,2BACP,aAAa,sDAAsD,GACnE,OACJ;CAEJ,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,uBAC9C,OAAO,IAAI,oBAAoB,aAAa,wBAAwB,GAAG,OAAO;CAGlF,MAAM,wBAAwB,gCAAgC,MAAM;CACpE,IAAI,uBACA,OAAO,IAAI,qBACP,aAAa,0BAA0B,GACvC,uBACA,OACJ;CAGJ,MAAM,UAAU,aAAa,MAAM;CACnC,IAAI,SACA,OAAO,IAAI,kBAAkB,SACzB,aAAa,uCAAuC,GACpD,OACJ;CAGJ,IAAI,QAAQ,YAAY,YAAY,OAAO,SAAS,eAChD,OAAO,IAAI,gBAAgB,aAAa,sCAAsC,GAAG,OAAO;CAG5F,MAAM,YAAY,QAAQ,YAAY,WAAW,OAAO,YAAY,KAAA;CACpE,IACI,cACE,QAAQ,YAAY,YAClB,QAAQ,YAAY,cACpB,QAAQ,YAAY,wBACpB,OAAO,SAAS,uBAEpB,OAAO,IAAI,eAAe,aAAa,sBAAsB,GAAG;EAC5D,GAAG;EACH;EACA,cAAc,iBAAiB,SAAS,KAAK,kBAAkB,EAAE;CACrE,CAAC;CAGL,IAAI,0BAA0B,MAAM,GAChC,OAAO,IAAI,wBAAwB,aAAa,sBAAsB,GAAG,OAAO;CAGpF,QAAQ,GAAG,MAAX;EACI,KAAK,KAAK;EACV,KAAK,KAAK,YACN,OAAO,IAAI,gBAAgB,aAAa,kBAAkB,GAAG,OAAO;EACxE,KAAK,KAAK,UACN,OAAO,IAAI,sBAAsB,aAAa,qBAAqB,GAAG,OAAO;EACjF,KAAK,KAAK,eACN,OAAO,IAAI,mBAAmB,aAAa,0BAA0B,GAAG,OAAO;EACnF,KAAK,KAAK,kBACN,OAAO,IAAI,gBAAgB,aAAa,oBAAoB,GAAG,OAAO;EAC1E,KAAK,KAAK,iBACN,OAAO,IAAI,oBAAoB,aAAa,0BAA0B,GAAG,OAAO;EACpF,KAAK,KAAK,oBACN,OAAO,IAAI,wBAAwB,aAAa,sBAAsB,GAAG,OAAO;EACpF,KAAK,KAAK,mBACN,OAAO,IAAI,eAAe,aAAa,sBAAsB,GAAG;GAC5D,GAAG;GACH,cAAc,kBAAkB,EAAE;EACtC,CAAC;EACL,KAAK,KAAK,kBACN,OAAO,IAAI,aAAa,aAAa,oBAAoB,GAAG,OAAO;EACvE,KAAK,KAAK,aACN,OAAO,IAAI,wBAAwB,aAAa,sBAAsB,GAAG,OAAO;EACpF,KAAK,KAAK,SACN,OAAO,IAAI,eAAe,aAAa,mCAAmC,GAAG,OAAO;EACxF;GAEI,IAAI,mCAAmC,KAAK,OAAO,GAC/C,OAAO,IAAI,wBAAwB,aAAa,sBAAsB,GAAG,OAAO;GAEpF,OAAO,IAAI,oBAAoB,aAAa,wBAAwB,GAAG,OAAO;CACtF;AACJ;AAEA,SAAS,gCACL,QACmC;CACnC,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,8BAC9C,OAAO;CAEX,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,6BAC9C,OAAO;CAEX,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,wBAAwB,OAAO;CACjF,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,6BAC9C,OAAO;CAEX,IACK,QAAQ,YAAY,UAAU,OAAO,SAAS,yCAC9C,QAAQ,YAAY,UAAU,OAAO,SAAS,kCAE/C,OAAO;CAGX,OAAO;AACX;AAEA,SAAS,+BAA+B,KAAqC;CACzE,IAAI,UAAmB;CACvB,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,mBAAmB,OAAO,SAAS;EAChE,UAAU,QAAQ;EAClB,IAAI,mBAAmB,gBAAgB,OAAO;CAClD;CACA,OAAO;AACX;;;;;;AAOA,SAAgB,iBAAiB,KAAuB;CACpD,IAAI,eAAe,gBAAgB,OAAO;CAC1C,IAAI,aAAa,GAAG,GAAG,OAAO;CAC9B,IAAI,eAAe,cAAc;EAC7B,IAAI,IAAI,SAAS,KAAK,UAAU,OAAO;EACvC,MAAM,UAAU,+BAA+B,GAAG;EAClD,IAAI,SAAS,OAAO;EACpB,OAAO,6BAA6B,GAAG;CAC3C;CACA,OAAO;AACX;AAEA,SAAS,iBAAiB,QAAmC;CACzD,MAAM,SAAkB,OAAO;CAC/B,OAAO,kBAAkB,gBAAgB,OAAO,SAAS,eACnD,SACA,IAAI,aAAa,qBAAqB,YAAY;AAC5D;AAEA,SAAS,iBAAiB,KAAc,QAA+B;CACnE,IAAI,QAAQ,WAAW,eAAe,gBAAgB,IAAI,SAAS,KAAK,UACpE,OAAO,iBAAiB,MAAM;CAElC,OAAO,iBAAiB,GAAG;AAC/B;AAEA,gBAAgB,gBACZ,QACA,QACgB;CAChB,IAAI;EACA,OAAO;CACX,SAAS,KAAK;EACV,MAAM,iBAAiB,KAAK,MAAM;CACtC;AACJ;;;;;;AAOA,SAAgB,gCAA6C;CACzD,QAAQ,SAAS,OAAO,QAAQ;EAC5B,IAAI;GACA,MAAM,MAAM,MAAM,KAAK,GAAG;GAC1B,IAAI,IAAI,QACJ,OAAO;IAAE,GAAG;IAAK,SAAS,gBAAgB,IAAI,OAAO;GAAE;GAE3D,OAAO;EACX,SAAS,KAAK;GACV,MAAM,iBAAiB,GAAG;EAC9B;CACJ;AACJ;;;;;AAMA,SAAgB,4BAA4B,WAAiC;CACzE,OAAO;EACH,MAAM,MAAM,QAAQ,QAAQ,WAAW,QAAQ,OAAO,eAAe;GACjE,IAAI,QAAQ,SAAS,MAAM,iBAAiB,MAAM;GAClD,IAAI;IACA,OAAO,MAAM,UAAU,MACnB,QACA,QACA,WACA,QACA,OACA,aACJ;GACJ,SAAS,OAAO;IACZ,MAAM,iBAAiB,OAAO,MAAM;GACxC;EACJ;EACA,MAAM,OAAO,QAAQ,QAAQ,WAAW,QAAQ,OAAO,eAAe;GAClE,IAAI,QAAQ,SAAS,MAAM,iBAAiB,MAAM;GAClD,IAAI;IACA,MAAM,WAAW,MAAM,UAAU,OAC7B,QACA,QACA,WACA,QACA,OACA,aACJ;IACA,OAAO;KAAE,GAAG;KAAU,SAAS,gBAAgB,SAAS,SAAS,MAAM;IAAE;GAC7E,SAAS,OAAO;IACZ,MAAM,iBAAiB,OAAO,MAAM;GACxC;EACJ;CACJ;AACJ"}
+{"version":3,"file":"connect-error-mapping.js","names":[],"sources":["../../src/shared/connect-error-mapping.ts"],"sourcesContent":["import { Code, ConnectError, type Interceptor, type Transport } from \"@connectrpc/connect\";\nimport { parseConnectErrorDetail, type PolyesterErrorDetail } from \"./error-detail.js\";\nimport {\n    AlreadyExistsError,\n    AuthenticationError,\n    InternalServerError,\n    isAbortError,\n    MfaEnrollmentRequiredError,\n    MfaLastFactorRequiredError,\n    MfaVerificationError,\n    type MfaVerificationFailureReason,\n    normalizeErrorMessage,\n    PermissionError,\n    PolicyInUseError,\n    PolicyLockedError,\n    PolicyScopeMismatchError,\n    PolyesterError,\n    type PolyesterErrorOptions,\n    PreconditionFailedError,\n    RateLimitError,\n    ResourceNotFoundError,\n    RevisionConflictError,\n    ServiceUnavailableError,\n    SessionElevationRequiredError,\n    StaleQuoteError,\n    SubaccountChallengeInvalidError,\n    StepUpRequiredError,\n    TimeoutError,\n    TransientError,\n    ValidationError,\n} from \"./errors.js\";\nimport type { RateLimitDetail } from \"./rate-limit.schemas.js\";\n\nfunction hasTransientServiceError(detail: PolyesterErrorDetail | undefined): boolean {\n    if (detail?.service === \"withdraw\") {\n        return [\n            \"SERVICE_UNAVAILABLE\",\n            \"SOURCE_SMART_ACCOUNT_UNAVAILABLE\",\n            \"CAPITAL_VIEW_UNAVAILABLE\",\n            \"CHAIN_METADATA_UNAVAILABLE\",\n            \"FEE_UNAVAILABLE\",\n            \"SUPPLY_UNAVAILABLE\",\n            \"STEP_UP_UNAVAILABLE\",\n            \"DESTINATION_VALIDATION_UNAVAILABLE\",\n            \"ACCOUNT_SHARD_UNAVAILABLE\",\n        ].includes(detail.code);\n    }\n    if (detail?.service === \"internal_transfer\") {\n        return [\n            \"SERVICE_UNAVAILABLE\",\n            \"SMART_ACCOUNT_UNAVAILABLE\",\n            \"STEP_UP_UNAVAILABLE\",\n            \"CAPITAL_VIEW_UNAVAILABLE\",\n            \"ACCOUNT_SHARD_UNAVAILABLE\",\n        ].includes(detail.code);\n    }\n    if (detail?.service === \"claims\") {\n        return [\"SERVICE_UNAVAILABLE\", \"CLAIM_TEMPORARILY_UNAVAILABLE\"].includes(detail.code);\n    }\n    return false;\n}\n\nfunction safeRetryAfterMs(rateLimit: RateLimitDetail | undefined): number | undefined {\n    if (rateLimit?.retryAfterMs === undefined) return undefined;\n    const value = BigInt(rateLimit.retryAfterMs);\n    return value <= BigInt(Number.MAX_SAFE_INTEGER) ? Number(value) : undefined;\n}\n\nconst HTTP_WEEKDAY = \"(?:Mon|Tue|Wed|Thu|Fri|Sat|Sun)\";\nconst HTTP_WEEKDAY_LONG = \"(?:Monday|Tuesday|Wednesday|Thursday|Friday|Saturday|Sunday)\";\nconst HTTP_MONTH = \"(?:Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec)\";\nconst HTTP_DATE_RE = new RegExp(\n    `^(?:${HTTP_WEEKDAY}, \\\\d{2} ${HTTP_MONTH} \\\\d{4} \\\\d{2}:\\\\d{2}:\\\\d{2} GMT|${HTTP_WEEKDAY_LONG}, \\\\d{2}-${HTTP_MONTH}-\\\\d{2} \\\\d{2}:\\\\d{2}:\\\\d{2} GMT|${HTTP_WEEKDAY} ${HTTP_MONTH} {1,2}\\\\d{1,2} \\\\d{2}:\\\\d{2}:\\\\d{2} \\\\d{4})$`,\n    \"u\",\n);\n\n/**\n * Returns the error message without the leading \"[code] \" prefix that\n * `ConnectError` prepends, e.g. \"[invalid_argument] Insufficient funds.\"\n * becomes \"Insufficient funds.\".\n */\nexport function getNormalizedConnectMessage(err: unknown): string {\n    const ce = ConnectError.from(err);\n    const raw = ce.message ?? \"\";\n    return normalizeErrorMessage(raw);\n}\n\nexport type MfaErrorKind = \"session-elevation\" | \"enrollment\" | \"step-up\";\n\n/**\n * Classifies an error as one of the MFA flows the backend can demand.\n * Classification is based only on stable structured auth error details.\n */\nexport function detectMfaErrorKind(err: unknown): MfaErrorKind | null {\n    const mapped = toPolyesterError(err);\n    return mfaErrorKind(mapped instanceof PolyesterError ? mapped.detail : undefined);\n}\n\nfunction mfaErrorKind(detail: PolyesterErrorDetail | undefined): MfaErrorKind | null {\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_ELEVATION_REQUIRED\") {\n        return \"session-elevation\";\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_STEP_UP_REQUIRED\") return \"step-up\";\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_NOT_ENROLLED\") return \"enrollment\";\n    return null;\n}\n\nfunction parseRetryAfterMs(ce: ConnectError): number | undefined {\n    const value = ce.metadata.get(\"retry-after\");\n    if (!value) return undefined;\n    if (/^\\d+$/u.test(value)) {\n        const seconds = BigInt(value);\n        const maxSafeSeconds = BigInt(Math.floor(Number.MAX_SAFE_INTEGER / 1000));\n        return seconds <= maxSafeSeconds ? Number(seconds) * 1000 : undefined;\n    }\n    if (!HTTP_DATE_RE.test(value)) return undefined;\n    const date = Date.parse(value);\n    if (!Number.isNaN(date)) return Math.max(0, date - Date.now());\n    return undefined;\n}\n\nconst MFA_ERROR_CLASSES = {\n    \"session-elevation\": SessionElevationRequiredError,\n    enrollment: MfaEnrollmentRequiredError,\n    \"step-up\": StepUpRequiredError,\n} as const;\n\n/**\n * Maps a `ConnectError` from the Polyester backend onto the typed\n * {@link PolyesterError} tree. The original error is preserved as `cause`.\n */\nexport function connectErrorToPolyesterError(ce: ConnectError): PolyesterError {\n    const message = getNormalizedConnectMessage(ce);\n    const detail = parseConnectErrorDetail(ce);\n    const options: PolyesterErrorOptions = { cause: ce, detail };\n    const withFallback = (fallback: string) => message || fallback;\n\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_RESOURCE_NOT_FOUND\") {\n        return new ResourceNotFoundError(withFallback(\"Resource not found.\"), options);\n    }\n\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_REVISION_CONFLICT\") {\n        return new RevisionConflictError(\n            withFallback(\"Resource changed since it was last read.\"),\n            options,\n        );\n    }\n\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_SUBACCOUNT_CHALLENGE_INVALID\") {\n        return new SubaccountChallengeInvalidError(\n            withFallback(\"Subaccount challenge is expired, replaced, or invalid.\"),\n            options,\n        );\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_POLICY_IN_USE\") {\n        return new PolicyInUseError(withFallback(\"Policy is still in use.\"), options);\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_POLICY_LOCKED\") {\n        return new PolicyLockedError(withFallback(\"Policy is locked.\"), options);\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_POLICY_SCOPE_MISMATCH\") {\n        return new PolicyScopeMismatchError(\n            withFallback(\"Policy does not belong to the target account scope.\"),\n            options,\n        );\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_LAST_FACTOR_REQUIRED\") {\n        return new MfaLastFactorRequiredError(\n            withFallback(\"At least one active MFA factor must remain enrolled.\"),\n            options,\n        );\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_INTERNAL_ERROR\") {\n        return new InternalServerError(withFallback(\"Internal server error.\"), options);\n    }\n\n    const mfaVerificationReason = getMfaVerificationFailureReason(detail);\n    if (mfaVerificationReason) {\n        return new MfaVerificationError(\n            withFallback(\"MFA verification failed.\"),\n            mfaVerificationReason,\n            options,\n        );\n    }\n\n    const mfaKind = mfaErrorKind(detail);\n    if (mfaKind) {\n        return new MFA_ERROR_CLASSES[mfaKind](\n            withFallback(\"Multi-factor authentication required.\"),\n            options,\n        );\n    }\n\n    if (detail?.service === \"orders\" && detail.code === \"STALE_QUOTE\") {\n        return new StaleQuoteError(withFallback(\"The submitted market quote is stale.\"), options);\n    }\n\n    const rateLimit = detail?.service === \"orders\" ? detail.rateLimit : undefined;\n    if (\n        rateLimit ||\n        ((detail?.service === \"orders\" ||\n            detail?.service === \"withdraw\" ||\n            detail?.service === \"internal_transfer\" ||\n            detail?.service === \"claims\") &&\n            detail.code === \"RATE_LIMIT_EXCEEDED\")\n    ) {\n        return new RateLimitError(withFallback(\"Rate limit exceeded.\"), {\n            ...options,\n            rateLimit,\n            retryAfterMs: safeRetryAfterMs(rateLimit) ?? parseRetryAfterMs(ce),\n        });\n    }\n\n    if (hasTransientServiceError(detail)) {\n        return new ServiceUnavailableError(withFallback(\"Service unavailable.\"), options);\n    }\n\n    switch (ce.code) {\n        case Code.InvalidArgument:\n        case Code.OutOfRange:\n            return new ValidationError(withFallback(\"Invalid request.\"), options);\n        case Code.NotFound:\n            return new ResourceNotFoundError(withFallback(\"Resource not found.\"), options);\n        case Code.AlreadyExists:\n            return new AlreadyExistsError(withFallback(\"Resource already exists.\"), options);\n        case Code.PermissionDenied:\n            return new PermissionError(withFallback(\"Permission denied.\"), options);\n        case Code.Unauthenticated:\n            return new AuthenticationError(withFallback(\"Authentication required.\"), options);\n        case Code.FailedPrecondition:\n            return new PreconditionFailedError(withFallback(\"Precondition failed.\"), options);\n        case Code.ResourceExhausted:\n            return new RateLimitError(withFallback(\"Rate limit exceeded.\"), {\n                ...options,\n                retryAfterMs: parseRetryAfterMs(ce),\n            });\n        case Code.DeadlineExceeded:\n            return new TimeoutError(withFallback(\"Request timed out.\"), options);\n        case Code.Unavailable:\n            return new ServiceUnavailableError(withFallback(\"Service unavailable.\"), options);\n        case Code.Aborted:\n            return new TransientError(withFallback(\"Operation aborted by the backend.\"), options);\n        default:\n            // Gateways sometimes surface outages as Unknown with this stock phrase.\n            if (/service temporarily unavailable/i.test(message)) {\n                return new ServiceUnavailableError(withFallback(\"Service unavailable.\"), options);\n            }\n            return new InternalServerError(withFallback(\"Internal server error.\"), options);\n    }\n}\n\nfunction getMfaVerificationFailureReason(\n    detail: PolyesterErrorDetail | undefined,\n): MfaVerificationFailureReason | null {\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_CHALLENGE_INVALID\") {\n        return \"challenge-invalid\";\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_CHALLENGE_LOCKED\") {\n        return \"challenge-locked\";\n    }\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_OTP_INVALID\") return \"otp-invalid\";\n    if (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_RECOVERY_INVALID\") {\n        return \"recovery-code-invalid\";\n    }\n    if (\n        (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_PASSKEY_CREDENTIAL_INVALID\") ||\n        (detail?.service === \"auth\" && detail.code === \"AUTH_MFA_PASSKEY_VERIFY_FAILED\")\n    ) {\n        return \"passkey-invalid\";\n    }\n\n    return null;\n}\n\nfunction findPolyesterErrorInCauseChain(err: unknown): PolyesterError | null {\n    let current: unknown = err;\n    for (let depth = 0; depth < 5 && current instanceof Error; depth++) {\n        current = current.cause;\n        if (current instanceof PolyesterError) return current;\n    }\n    return null;\n}\n\n/**\n * Converts any RPC-layer failure into its typed SDK error. Abort errors and\n * caller-cancelled requests pass through unchanged, as do errors that are\n * already typed (e.g. a `NetworkError` from the SDK fetch wrapper).\n */\nexport function toPolyesterError(err: unknown): unknown {\n    if (err instanceof PolyesterError) return err;\n    if (isAbortError(err)) return err;\n    if (err instanceof ConnectError) {\n        if (err.code === Code.Canceled) return err;\n        const wrapped = findPolyesterErrorInCauseChain(err);\n        if (wrapped) return wrapped;\n        return connectErrorToPolyesterError(err);\n    }\n    return err;\n}\n\nfunction callerAbortError(signal: AbortSignal): DOMException {\n    const reason: unknown = signal.reason;\n    return reason instanceof DOMException && reason.name === \"AbortError\"\n        ? reason\n        : new DOMException(\"Request canceled.\", \"AbortError\");\n}\n\nfunction toTransportError(err: unknown, signal?: AbortSignal): unknown {\n    if (signal?.aborted && err instanceof ConnectError && err.code === Code.Canceled) {\n        return callerAbortError(signal);\n    }\n    return toPolyesterError(err);\n}\n\nasync function* mapStreamErrors<T>(\n    source: AsyncIterable<T>,\n    signal?: AbortSignal,\n): AsyncIterable<T> {\n    try {\n        yield* source;\n    } catch (err) {\n        throw toTransportError(err, signal);\n    }\n}\n\n/**\n * Interceptor that converts every RPC failure (unary and streaming) into the\n * typed {@link PolyesterError} hierarchy. Installed outermost by\n * `createTransports`, so callers of SDK services always see typed errors.\n */\nexport function createErrorMappingInterceptor(): Interceptor {\n    return (next) => async (req) => {\n        try {\n            const res = await next(req);\n            if (res.stream) {\n                return { ...res, message: mapStreamErrors(res.message) };\n            }\n            return res;\n        } catch (err) {\n            throw toPolyesterError(err);\n        }\n    };\n}\n\n/**\n * Wraps a Connect transport so errors are translated after Connect's call\n * runner has applied its own error normalization.\n */\nexport function createErrorMappingTransport(transport: Transport): Transport {\n    return {\n        async unary(method, signal, timeoutMs, header, input, contextValues) {\n            if (signal?.aborted) throw callerAbortError(signal);\n            try {\n                return await transport.unary(\n                    method,\n                    signal,\n                    timeoutMs,\n                    header,\n                    input,\n                    contextValues,\n                );\n            } catch (error) {\n                throw toTransportError(error, signal);\n            }\n        },\n        async stream(method, signal, timeoutMs, header, input, contextValues) {\n            if (signal?.aborted) throw callerAbortError(signal);\n            try {\n                const response = await transport.stream(\n                    method,\n                    signal,\n                    timeoutMs,\n                    header,\n                    input,\n                    contextValues,\n                );\n                return { ...response, message: mapStreamErrors(response.message, signal) };\n            } catch (error) {\n                throw toTransportError(error, signal);\n            }\n        },\n    };\n}\n"],"mappings":";;;;AAiCA,SAAS,yBAAyB,QAAmD;CACjF,IAAI,QAAQ,YAAY,YACpB,OAAO;EACH;EACA;EACA;EACA;EACA;EACA;EACA;EACA;EACA;CACJ,CAAC,CAAC,SAAS,OAAO,IAAI;CAE1B,IAAI,QAAQ,YAAY,qBACpB,OAAO;EACH;EACA;EACA;EACA;EACA;CACJ,CAAC,CAAC,SAAS,OAAO,IAAI;CAE1B,IAAI,QAAQ,YAAY,UACpB,OAAO,CAAC,uBAAuB,+BAA+B,CAAC,CAAC,SAAS,OAAO,IAAI;CAExF,OAAO;AACX;AAEA,SAAS,iBAAiB,WAA4D;CAClF,IAAI,WAAW,iBAAiB,KAAA,GAAW,OAAO,KAAA;CAClD,MAAM,QAAQ,OAAO,UAAU,YAAY;CAC3C,OAAO,SAAS,OAAO,OAAO,gBAAgB,IAAI,OAAO,KAAK,IAAI,KAAA;AACtE;AAEA,MAAM,eAAe;AACrB,MAAM,oBAAoB;AAC1B,MAAM,aAAa;AACnB,MAAM,eAAe,IAAI,OACrB,OAAO,aAAa,WAAW,WAAW,mCAAmC,kBAAkB,WAAW,WAAW,mCAAmC,aAAa,GAAG,WAAW,+CACnL,GACJ;;;;;;AAOA,SAAgB,4BAA4B,KAAsB;CAE9D,MAAM,MADK,aAAa,KAAK,GAChB,CAAC,CAAC,WAAW;CAC1B,OAAO,sBAAsB,GAAG;AACpC;AAaA,SAAS,aAAa,QAA+D;CACjF,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,+BAC9C,OAAO;CAEX,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,yBAAyB,OAAO;CAClF,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,yBAAyB,OAAO;CAClF,OAAO;AACX;AAEA,SAAS,kBAAkB,IAAsC;CAC7D,MAAM,QAAQ,GAAG,SAAS,IAAI,aAAa;CAC3C,IAAI,CAAC,OAAO,OAAO,KAAA;CACnB,IAAI,SAAS,KAAK,KAAK,GAAG;EACtB,MAAM,UAAU,OAAO,KAAK;EAE5B,OAAO,WADgB,OAAO,KAAK,MAAM,OAAO,mBAAmB,GAAI,CACxC,IAAI,OAAO,OAAO,IAAI,MAAO,KAAA;CAChE;CACA,IAAI,CAAC,aAAa,KAAK,KAAK,GAAG,OAAO,KAAA;CACtC,MAAM,OAAO,KAAK,MAAM,KAAK;CAC7B,IAAI,CAAC,OAAO,MAAM,IAAI,GAAG,OAAO,KAAK,IAAI,GAAG,OAAO,KAAK,IAAI,CAAC;AAEjE;AAEA,MAAM,oBAAoB;CACtB,qBAAqB;CACrB,YAAY;CACZ,WAAW;AACf;;;;;AAMA,SAAgB,6BAA6B,IAAkC;CAC3E,MAAM,UAAU,4BAA4B,EAAE;CAC9C,MAAM,SAAS,wBAAwB,EAAE;CACzC,MAAM,UAAiC;EAAE,OAAO;EAAI;CAAO;CAC3D,MAAM,gBAAgB,aAAqB,WAAW;CAEtD,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,2BAC9C,OAAO,IAAI,sBAAsB,aAAa,qBAAqB,GAAG,OAAO;CAGjF,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,0BAC9C,OAAO,IAAI,sBACP,aAAa,0CAA0C,GACvD,OACJ;CAGJ,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,qCAC9C,OAAO,IAAI,gCACP,aAAa,wDAAwD,GACrE,OACJ;CAEJ,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,sBAC9C,OAAO,IAAI,iBAAiB,aAAa,yBAAyB,GAAG,OAAO;CAEhF,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,sBAC9C,OAAO,IAAI,kBAAkB,aAAa,mBAAmB,GAAG,OAAO;CAE3E,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,8BAC9C,OAAO,IAAI,yBACP,aAAa,qDAAqD,GAClE,OACJ;CAEJ,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,iCAC9C,OAAO,IAAI,2BACP,aAAa,sDAAsD,GACnE,OACJ;CAEJ,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,uBAC9C,OAAO,IAAI,oBAAoB,aAAa,wBAAwB,GAAG,OAAO;CAGlF,MAAM,wBAAwB,gCAAgC,MAAM;CACpE,IAAI,uBACA,OAAO,IAAI,qBACP,aAAa,0BAA0B,GACvC,uBACA,OACJ;CAGJ,MAAM,UAAU,aAAa,MAAM;CACnC,IAAI,SACA,OAAO,IAAI,kBAAkB,SACzB,aAAa,uCAAuC,GACpD,OACJ;CAGJ,IAAI,QAAQ,YAAY,YAAY,OAAO,SAAS,eAChD,OAAO,IAAI,gBAAgB,aAAa,sCAAsC,GAAG,OAAO;CAG5F,MAAM,YAAY,QAAQ,YAAY,WAAW,OAAO,YAAY,KAAA;CACpE,IACI,cACE,QAAQ,YAAY,YAClB,QAAQ,YAAY,cACpB,QAAQ,YAAY,uBACpB,QAAQ,YAAY,aACpB,OAAO,SAAS,uBAEpB,OAAO,IAAI,eAAe,aAAa,sBAAsB,GAAG;EAC5D,GAAG;EACH;EACA,cAAc,iBAAiB,SAAS,KAAK,kBAAkB,EAAE;CACrE,CAAC;CAGL,IAAI,yBAAyB,MAAM,GAC/B,OAAO,IAAI,wBAAwB,aAAa,sBAAsB,GAAG,OAAO;CAGpF,QAAQ,GAAG,MAAX;EACI,KAAK,KAAK;EACV,KAAK,KAAK,YACN,OAAO,IAAI,gBAAgB,aAAa,kBAAkB,GAAG,OAAO;EACxE,KAAK,KAAK,UACN,OAAO,IAAI,sBAAsB,aAAa,qBAAqB,GAAG,OAAO;EACjF,KAAK,KAAK,eACN,OAAO,IAAI,mBAAmB,aAAa,0BAA0B,GAAG,OAAO;EACnF,KAAK,KAAK,kBACN,OAAO,IAAI,gBAAgB,aAAa,oBAAoB,GAAG,OAAO;EAC1E,KAAK,KAAK,iBACN,OAAO,IAAI,oBAAoB,aAAa,0BAA0B,GAAG,OAAO;EACpF,KAAK,KAAK,oBACN,OAAO,IAAI,wBAAwB,aAAa,sBAAsB,GAAG,OAAO;EACpF,KAAK,KAAK,mBACN,OAAO,IAAI,eAAe,aAAa,sBAAsB,GAAG;GAC5D,GAAG;GACH,cAAc,kBAAkB,EAAE;EACtC,CAAC;EACL,KAAK,KAAK,kBACN,OAAO,IAAI,aAAa,aAAa,oBAAoB,GAAG,OAAO;EACvE,KAAK,KAAK,aACN,OAAO,IAAI,wBAAwB,aAAa,sBAAsB,GAAG,OAAO;EACpF,KAAK,KAAK,SACN,OAAO,IAAI,eAAe,aAAa,mCAAmC,GAAG,OAAO;EACxF;GAEI,IAAI,mCAAmC,KAAK,OAAO,GAC/C,OAAO,IAAI,wBAAwB,aAAa,sBAAsB,GAAG,OAAO;GAEpF,OAAO,IAAI,oBAAoB,aAAa,wBAAwB,GAAG,OAAO;CACtF;AACJ;AAEA,SAAS,gCACL,QACmC;CACnC,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,8BAC9C,OAAO;CAEX,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,6BAC9C,OAAO;CAEX,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,wBAAwB,OAAO;CACjF,IAAI,QAAQ,YAAY,UAAU,OAAO,SAAS,6BAC9C,OAAO;CAEX,IACK,QAAQ,YAAY,UAAU,OAAO,SAAS,yCAC9C,QAAQ,YAAY,UAAU,OAAO,SAAS,kCAE/C,OAAO;CAGX,OAAO;AACX;AAEA,SAAS,+BAA+B,KAAqC;CACzE,IAAI,UAAmB;CACvB,KAAK,IAAI,QAAQ,GAAG,QAAQ,KAAK,mBAAmB,OAAO,SAAS;EAChE,UAAU,QAAQ;EAClB,IAAI,mBAAmB,gBAAgB,OAAO;CAClD;CACA,OAAO;AACX;;;;;;AAOA,SAAgB,iBAAiB,KAAuB;CACpD,IAAI,eAAe,gBAAgB,OAAO;CAC1C,IAAI,aAAa,GAAG,GAAG,OAAO;CAC9B,IAAI,eAAe,cAAc;EAC7B,IAAI,IAAI,SAAS,KAAK,UAAU,OAAO;EACvC,MAAM,UAAU,+BAA+B,GAAG;EAClD,IAAI,SAAS,OAAO;EACpB,OAAO,6BAA6B,GAAG;CAC3C;CACA,OAAO;AACX;AAEA,SAAS,iBAAiB,QAAmC;CACzD,MAAM,SAAkB,OAAO;CAC/B,OAAO,kBAAkB,gBAAgB,OAAO,SAAS,eACnD,SACA,IAAI,aAAa,qBAAqB,YAAY;AAC5D;AAEA,SAAS,iBAAiB,KAAc,QAA+B;CACnE,IAAI,QAAQ,WAAW,eAAe,gBAAgB,IAAI,SAAS,KAAK,UACpE,OAAO,iBAAiB,MAAM;CAElC,OAAO,iBAAiB,GAAG;AAC/B;AAEA,gBAAgB,gBACZ,QACA,QACgB;CAChB,IAAI;EACA,OAAO;CACX,SAAS,KAAK;EACV,MAAM,iBAAiB,KAAK,MAAM;CACtC;AACJ;;;;;;AAOA,SAAgB,gCAA6C;CACzD,QAAQ,SAAS,OAAO,QAAQ;EAC5B,IAAI;GACA,MAAM,MAAM,MAAM,KAAK,GAAG;GAC1B,IAAI,IAAI,QACJ,OAAO;IAAE,GAAG;IAAK,SAAS,gBAAgB,IAAI,OAAO;GAAE;GAE3D,OAAO;EACX,SAAS,KAAK;GACV,MAAM,iBAAiB,GAAG;EAC9B;CACJ;AACJ;;;;;AAMA,SAAgB,4BAA4B,WAAiC;CACzE,OAAO;EACH,MAAM,MAAM,QAAQ,QAAQ,WAAW,QAAQ,OAAO,eAAe;GACjE,IAAI,QAAQ,SAAS,MAAM,iBAAiB,MAAM;GAClD,IAAI;IACA,OAAO,MAAM,UAAU,MACnB,QACA,QACA,WACA,QACA,OACA,aACJ;GACJ,SAAS,OAAO;IACZ,MAAM,iBAAiB,OAAO,MAAM;GACxC;EACJ;EACA,MAAM,OAAO,QAAQ,QAAQ,WAAW,QAAQ,OAAO,eAAe;GAClE,IAAI,QAAQ,SAAS,MAAM,iBAAiB,MAAM;GAClD,IAAI;IACA,MAAM,WAAW,MAAM,UAAU,OAC7B,QACA,QACA,WACA,QACA,OACA,aACJ;IACA,OAAO;KAAE,GAAG;KAAU,SAAS,gBAAgB,SAAS,SAAS,MAAM;IAAE;GAC7E,SAAS,OAAO;IACZ,MAAM,iBAAiB,OAAO,MAAM;GACxC;EACJ;CACJ;AACJ"}

package/dist/shared/error-detail.d.ts

@@ -1,9 +1,10 @@
 import { AuthErrorCode } from "../gen/auth/v1/auth_pb.js";
 import { ProfileErrorCode } from "../gen/auth/v1/profile_pb.js";
-import { ErrorCode } from "../gen/chain/withdraw/v1/withdraw_pb.js";
-import { ErrorCode as ErrorCode$1 } from "../gen/ledger/read/v1/ledger_read_pb.js";
-import { ErrorCode as ErrorCode$2 } from "../gen/marketoverview/v1/marketoverview_pb.js";
-import { ErrorCode as ErrorCode$3 } from "../gen/transfer/v1/internal_transfer_pb.js";
+import { ErrorCode } from "../gen/claims/v1/claims_pb.js";
+import { ErrorCode as ErrorCode$1 } from "../gen/chain/withdraw/v1/withdraw_pb.js";
+import { ErrorCode as ErrorCode$2 } from "../gen/ledger/read/v1/ledger_read_pb.js";
+import { ErrorCode as ErrorCode$3 } from "../gen/marketoverview/v1/marketoverview_pb.js";
+import { ErrorCode as ErrorCode$4 } from "../gen/transfer/v1/internal_transfer_pb.js";
 import { OrderErrorDetail } from "../services/orders/order-errors.schemas.js";
 import { ConnectError } from "@connectrpc/connect";
 //#region src/shared/error-detail.d.ts
@@ -21,16 +22,19 @@ type PolyesterErrorDetail = {
   service: "orders";
 } & OrderErrorDetail) | {
   service: "withdraw";
-  code: NamedCode<typeof ErrorCode>;
+  code: NamedCode<typeof ErrorCode$1>;
 } | {
   service: "internal_transfer";
-  code: NamedCode<typeof ErrorCode$3>;
+  code: NamedCode<typeof ErrorCode$4>;
 } | {
   service: "ledger";
-  code: NamedCode<typeof ErrorCode$1>;
+  code: NamedCode<typeof ErrorCode$2>;
 } | {
   service: "market_overview";
-  code: NamedCode<typeof ErrorCode$2>;
+  code: NamedCode<typeof ErrorCode$3>;
+} | {
+  service: "claims";
+  code: NamedCode<typeof ErrorCode>;
 };
 //#endregion
 export { PolyesterErrorDetail };

package/dist/shared/error-detail.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error-detail.d.ts","names":[],"sources":["../../src/shared/error-detail.ts"],"mappings":";;;;;;;;;KAiCK,UAAU,aAAa,gCAAgC;KAEhD;EACJ;EAAiB,MAAM,iBAAiB;EAAgB;;EAEtD;EACA,MAAM,iBAAiB;EACvB;EACA;;EAED;IAAsB;EACvB;EAAqB,MAAM,iBAAiB;;EAE1C;EACA,MAAM,iBAAiB;;EAEzB;EAAmB,MAAM,iBAAiB;;EAExC;EACA,MAAM,iBAAiB"}
+{"version":3,"file":"error-detail.d.ts","names":[],"sources":["../../src/shared/error-detail.ts"],"mappings":";;;;;;;;;;KAqCK,UAAU,aAAa,gCAAgC;KAEhD;EACJ;EAAiB,MAAM,iBAAiB;EAAgB;;EAEtD;EACA,MAAM,iBAAiB;EACvB;EACA;;EAED;IAAsB;EACvB;EAAqB,MAAM,iBAAiB;;EAE1C;EACA,MAAM,iBAAiB;;EAEzB;EAAmB,MAAM,iBAAiB;;EAExC;EACA,MAAM,iBAAiB;;EAEzB;EAAmB,MAAM,iBAAiB"}