@polyester/sdk 0.3.1 → 0.4.0

package/dist/services/auth/profile/profile.schemas.d.ts

@@ -1,58 +1,58 @@
-import * as v from "valibot";
+import { validation_d_exports } from "../../../shared/validation.js";
 //#region src/services/auth/profile/profile.schemas.d.ts
-declare const ProfileSchema: v.ObjectSchema<{
-  readonly username: v.StringSchema<undefined>;
-  readonly bio: v.StringSchema<undefined>;
-  readonly website: v.StringSchema<undefined>;
-  readonly twitter: v.StringSchema<undefined>;
-  readonly twitterVerified: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
-  readonly discord: v.StringSchema<undefined>;
-  readonly discordVerified: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
-  readonly avatarUrl: v.StringSchema<undefined>;
-  readonly createdAt: v.SchemaWithPipe<readonly [v.OptionalSchema<v.ObjectSchema<{
-    readonly seconds: v.BigintSchema<undefined>;
-    readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
-  }, undefined>, undefined>, v.TransformAction<{
+declare const ProfileSchema: validation_d_exports.ObjectSchema<{
+  readonly username: validation_d_exports.StringSchema<undefined>;
+  readonly bio: validation_d_exports.StringSchema<undefined>;
+  readonly website: validation_d_exports.StringSchema<undefined>;
+  readonly twitter: validation_d_exports.StringSchema<undefined>;
+  readonly twitterVerified: validation_d_exports.OptionalSchema<validation_d_exports.BooleanSchema<undefined>, false>;
+  readonly discord: validation_d_exports.StringSchema<undefined>;
+  readonly discordVerified: validation_d_exports.OptionalSchema<validation_d_exports.BooleanSchema<undefined>, false>;
+  readonly avatarUrl: validation_d_exports.StringSchema<undefined>;
+  readonly createdAt: validation_d_exports.SchemaWithPipe<readonly [validation_d_exports.OptionalSchema<validation_d_exports.ObjectSchema<{
+    readonly seconds: validation_d_exports.BigintSchema<undefined>;
+    readonly nanos: validation_d_exports.OptionalSchema<validation_d_exports.NumberSchema<undefined>, 0>;
+  }, undefined>, undefined>, validation_d_exports.TransformAction<{
     seconds: bigint;
     nanos: number;
   } | undefined, number | undefined>]>;
-  readonly nextUsernameChangeAt: v.SchemaWithPipe<readonly [v.OptionalSchema<v.ObjectSchema<{
-    readonly seconds: v.BigintSchema<undefined>;
-    readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
-  }, undefined>, undefined>, v.TransformAction<{
+  readonly nextUsernameChangeAt: validation_d_exports.SchemaWithPipe<readonly [validation_d_exports.OptionalSchema<validation_d_exports.ObjectSchema<{
+    readonly seconds: validation_d_exports.BigintSchema<undefined>;
+    readonly nanos: validation_d_exports.OptionalSchema<validation_d_exports.NumberSchema<undefined>, 0>;
+  }, undefined>, undefined>, validation_d_exports.TransformAction<{
     seconds: bigint;
     nanos: number;
   } | undefined, number | undefined>]>;
-  readonly vipTier: v.NumberSchema<undefined>;
-  readonly usernameUnlocked: v.OptionalSchema<v.BooleanSchema<undefined>, false>;
+  readonly vipTier: validation_d_exports.NumberSchema<undefined>;
+  readonly usernameUnlocked: validation_d_exports.OptionalSchema<validation_d_exports.BooleanSchema<undefined>, false>;
 }, undefined>;
-type Profile = v.InferOutput<typeof ProfileSchema>;
-declare const UpdateProfileInputSchema: v.ObjectSchema<{
-  readonly username: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
-  readonly bio: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
-  readonly website: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
-  readonly twitter: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
-  readonly avatarUrl: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
+type Profile = validation_d_exports.InferOutput<typeof ProfileSchema>;
+declare const UpdateProfileInputSchema: validation_d_exports.ObjectSchema<{
+  readonly username: validation_d_exports.OptionalSchema<validation_d_exports.StringSchema<undefined>, undefined>;
+  readonly bio: validation_d_exports.OptionalSchema<validation_d_exports.StringSchema<undefined>, undefined>;
+  readonly website: validation_d_exports.OptionalSchema<validation_d_exports.StringSchema<undefined>, undefined>;
+  readonly twitter: validation_d_exports.OptionalSchema<validation_d_exports.StringSchema<undefined>, undefined>;
+  readonly avatarUrl: validation_d_exports.OptionalSchema<validation_d_exports.StringSchema<undefined>, undefined>;
 }, undefined>;
-type UpdateProfileInput = v.InferInput<typeof UpdateProfileInputSchema>;
-declare const UsernameHistoryEntrySchema: v.ObjectSchema<{
-  readonly username: v.StringSchema<undefined>;
-  readonly setAt: v.SchemaWithPipe<readonly [v.OptionalSchema<v.ObjectSchema<{
-    readonly seconds: v.BigintSchema<undefined>;
-    readonly nanos: v.OptionalSchema<v.NumberSchema<undefined>, 0>;
-  }, undefined>, undefined>, v.TransformAction<{
+type UpdateProfileInput = validation_d_exports.InferInput<typeof UpdateProfileInputSchema>;
+declare const UsernameHistoryEntrySchema: validation_d_exports.ObjectSchema<{
+  readonly username: validation_d_exports.StringSchema<undefined>;
+  readonly setAt: validation_d_exports.SchemaWithPipe<readonly [validation_d_exports.OptionalSchema<validation_d_exports.ObjectSchema<{
+    readonly seconds: validation_d_exports.BigintSchema<undefined>;
+    readonly nanos: validation_d_exports.OptionalSchema<validation_d_exports.NumberSchema<undefined>, 0>;
+  }, undefined>, undefined>, validation_d_exports.TransformAction<{
     seconds: bigint;
     nanos: number;
   } | undefined, number | undefined>]>;
 }, undefined>;
-type UsernameHistoryEntry = v.InferOutput<typeof UsernameHistoryEntrySchema>;
-declare const AccountIdentitySchema: v.ObjectSchema<{
-  readonly accountId: v.SchemaWithPipe<readonly [v.BigintSchema<undefined>, v.TransformAction<bigint, string>]>;
-  readonly username: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
-  readonly avatarUrl: v.OptionalSchema<v.StringSchema<undefined>, undefined>;
-  readonly rootSmartAccountAddress: v.StringSchema<undefined>;
+type UsernameHistoryEntry = validation_d_exports.InferOutput<typeof UsernameHistoryEntrySchema>;
+declare const AccountIdentitySchema: validation_d_exports.ObjectSchema<{
+  readonly accountId: validation_d_exports.SchemaWithPipe<readonly [validation_d_exports.BigintSchema<undefined>, validation_d_exports.TransformAction<bigint, string>]>;
+  readonly username: validation_d_exports.OptionalSchema<validation_d_exports.StringSchema<undefined>, undefined>;
+  readonly avatarUrl: validation_d_exports.OptionalSchema<validation_d_exports.StringSchema<undefined>, undefined>;
+  readonly rootSmartAccountAddress: validation_d_exports.StringSchema<undefined>;
 }, undefined>;
-type AccountIdentity = v.InferOutput<typeof AccountIdentitySchema>;
+type AccountIdentity = validation_d_exports.InferOutput<typeof AccountIdentitySchema>;
 //#endregion
 export { AccountIdentity, AccountIdentitySchema, Profile, ProfileSchema, UpdateProfileInput, UpdateProfileInputSchema, UsernameHistoryEntry, UsernameHistoryEntrySchema };
 //# sourceMappingURL=profile.schemas.d.ts.map

package/dist/services/auth/profile/profile.schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profile.schemas.d.ts","names":[],"sources":["../../../../src/services/auth/profile/profile.schemas.ts"],"mappings":";;cAIa,eAAa,EAAA;;;;;;;;;;;;;;;;;;;;;;;;;;KAqBd,UAAU,EAAE,mBAAmB;cAG9B,0BAAwB,EAAA;;;;;;;KAOzB,qBAAqB,EAAE,kBAAkB;cAExC,4BAA0B,EAAA;;;;;;;;;;KAQ3B,uBAAuB,EAAE,mBAAmB;cAE3C,uBAAqB,EAAA;;;;;;KAOtB,kBAAkB,EAAE,mBAAmB"}
+{"version":3,"file":"profile.schemas.d.ts","names":[],"sources":["../../../../src/services/auth/profile/profile.schemas.ts"],"mappings":";;cAIa,eAAa,qBAAA;;;;;;;;;;;;;;;;;;;;;;;;;;KAqBd,UAAU,qBAAE,mBAAmB;cAG9B,0BAAwB,qBAAA;;;;;;;KAOzB,qBAAqB,qBAAE,kBAAkB;cAExC,4BAA0B,qBAAA;;;;;;;;;;KAQ3B,uBAAuB,qBAAE,mBAAmB;cAE3C,uBAAqB,qBAAA;;;;;;KAOtB,kBAAkB,qBAAE,mBAAmB"}

package/dist/services/auth/profile/profile.schemas.js

@@ -1,37 +1,37 @@
+import { validation_exports } from "../../../shared/validation.js";
 import { tsObjToMs } from "../../../utils/time.js";
 import { PublicIdSchema, TimestampSchema } from "../../../shared/schemas.js";
-import * as v from "valibot";
 //#region src/services/auth/profile/profile.schemas.ts
-const ProfileSchema = v.object({
-	username: v.string(),
-	bio: v.string(),
-	website: v.string(),
-	twitter: v.string(),
-	twitterVerified: v.optional(v.boolean(), false),
-	discord: v.string(),
-	discordVerified: v.optional(v.boolean(), false),
-	avatarUrl: v.string(),
-	createdAt: v.pipe(v.optional(TimestampSchema), v.transform((v) => v ? tsObjToMs(v) : void 0)),
-	nextUsernameChangeAt: v.pipe(v.optional(TimestampSchema), v.transform((v) => v ? tsObjToMs(v) : void 0)),
-	vipTier: v.number(),
-	usernameUnlocked: v.optional(v.boolean(), false)
+const ProfileSchema = validation_exports.object({
+	username: validation_exports.string(),
+	bio: validation_exports.string(),
+	website: validation_exports.string(),
+	twitter: validation_exports.string(),
+	twitterVerified: validation_exports.optional(validation_exports.boolean(), false),
+	discord: validation_exports.string(),
+	discordVerified: validation_exports.optional(validation_exports.boolean(), false),
+	avatarUrl: validation_exports.string(),
+	createdAt: validation_exports.pipe(validation_exports.optional(TimestampSchema), validation_exports.transform((v) => v ? tsObjToMs(v) : void 0)),
+	nextUsernameChangeAt: validation_exports.pipe(validation_exports.optional(TimestampSchema), validation_exports.transform((v) => v ? tsObjToMs(v) : void 0)),
+	vipTier: validation_exports.number(),
+	usernameUnlocked: validation_exports.optional(validation_exports.boolean(), false)
 });
-const UpdateProfileInputSchema = v.object({
-	username: v.optional(v.string()),
-	bio: v.optional(v.string()),
-	website: v.optional(v.string()),
-	twitter: v.optional(v.string()),
-	avatarUrl: v.optional(v.string())
+const UpdateProfileInputSchema = validation_exports.object({
+	username: validation_exports.optional(validation_exports.string()),
+	bio: validation_exports.optional(validation_exports.string()),
+	website: validation_exports.optional(validation_exports.string()),
+	twitter: validation_exports.optional(validation_exports.string()),
+	avatarUrl: validation_exports.optional(validation_exports.string())
 });
-const UsernameHistoryEntrySchema = v.object({
-	username: v.string(),
-	setAt: v.pipe(v.optional(TimestampSchema), v.transform((v) => v ? tsObjToMs(v) : void 0))
+const UsernameHistoryEntrySchema = validation_exports.object({
+	username: validation_exports.string(),
+	setAt: validation_exports.pipe(validation_exports.optional(TimestampSchema), validation_exports.transform((v) => v ? tsObjToMs(v) : void 0))
 });
-const AccountIdentitySchema = v.object({
+const AccountIdentitySchema = validation_exports.object({
 	accountId: PublicIdSchema,
-	username: v.optional(v.string()),
-	avatarUrl: v.optional(v.string()),
-	rootSmartAccountAddress: v.string()
+	username: validation_exports.optional(validation_exports.string()),
+	avatarUrl: validation_exports.optional(validation_exports.string()),
+	rootSmartAccountAddress: validation_exports.string()
 });
 //#endregion
 export { AccountIdentitySchema, ProfileSchema, UpdateProfileInputSchema, UsernameHistoryEntrySchema };

package/dist/services/auth/profile/profile.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"profile.schemas.js","names":[],"sources":["../../../../src/services/auth/profile/profile.schemas.ts"],"sourcesContent":["import * as v from \"valibot\";\nimport { PublicIdSchema, TimestampSchema } from \"../../../shared/schemas.js\";\nimport { tsObjToMs } from \"../../../utils/time.js\";\n\nexport const ProfileSchema = v.object({\n    username: v.string(),\n    bio: v.string(),\n    website: v.string(),\n    twitter: v.string(),\n    twitterVerified: v.optional(v.boolean(), false),\n    discord: v.string(),\n    discordVerified: v.optional(v.boolean(), false),\n    avatarUrl: v.string(),\n    createdAt: v.pipe(\n        v.optional(TimestampSchema),\n        v.transform((v) => (v ? tsObjToMs(v) : undefined)),\n    ),\n    nextUsernameChangeAt: v.pipe(\n        v.optional(TimestampSchema),\n        v.transform((v) => (v ? tsObjToMs(v) : undefined)),\n    ),\n    vipTier: v.number(),\n    usernameUnlocked: v.optional(v.boolean(), false),\n});\n\nexport type Profile = v.InferOutput<typeof ProfileSchema>;\n// Deliberately non-strict: update() accepts a round-tripped Profile\n// ({ ...profile, bio }) and strips its readonly fields instead of rejecting.\nexport const UpdateProfileInputSchema = v.object({\n    username: v.optional(v.string()),\n    bio: v.optional(v.string()),\n    website: v.optional(v.string()),\n    twitter: v.optional(v.string()),\n    avatarUrl: v.optional(v.string()),\n});\nexport type UpdateProfileInput = v.InferInput<typeof UpdateProfileInputSchema>;\n\nexport const UsernameHistoryEntrySchema = v.object({\n    username: v.string(),\n    setAt: v.pipe(\n        v.optional(TimestampSchema),\n        v.transform((v) => (v ? tsObjToMs(v) : undefined)),\n    ),\n});\n\nexport type UsernameHistoryEntry = v.InferOutput<typeof UsernameHistoryEntrySchema>;\n\nexport const AccountIdentitySchema = v.object({\n    accountId: PublicIdSchema,\n    username: v.optional(v.string()),\n    avatarUrl: v.optional(v.string()),\n    rootSmartAccountAddress: v.string(),\n});\n\nexport type AccountIdentity = v.InferOutput<typeof AccountIdentitySchema>;\n"],"mappings":";;;;AAIA,MAAa,gBAAgB,EAAE,OAAO;CAClC,UAAU,EAAE,OAAO;CACnB,KAAK,EAAE,OAAO;CACd,SAAS,EAAE,OAAO;CAClB,SAAS,EAAE,OAAO;CAClB,iBAAiB,EAAE,SAAS,EAAE,QAAQ,GAAG,KAAK;CAC9C,SAAS,EAAE,OAAO;CAClB,iBAAiB,EAAE,SAAS,EAAE,QAAQ,GAAG,KAAK;CAC9C,WAAW,EAAE,OAAO;CACpB,WAAW,EAAE,KACT,EAAE,SAAS,eAAe,GAC1B,EAAE,WAAW,MAAO,IAAI,UAAU,CAAC,IAAI,KAAA,CAAU,CACrD;CACA,sBAAsB,EAAE,KACpB,EAAE,SAAS,eAAe,GAC1B,EAAE,WAAW,MAAO,IAAI,UAAU,CAAC,IAAI,KAAA,CAAU,CACrD;CACA,SAAS,EAAE,OAAO;CAClB,kBAAkB,EAAE,SAAS,EAAE,QAAQ,GAAG,KAAK;AACnD,CAAC;AAKD,MAAa,2BAA2B,EAAE,OAAO;CAC7C,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;CAC/B,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC;CAC1B,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC;CAC9B,SAAS,EAAE,SAAS,EAAE,OAAO,CAAC;CAC9B,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;AACpC,CAAC;AAGD,MAAa,6BAA6B,EAAE,OAAO;CAC/C,UAAU,EAAE,OAAO;CACnB,OAAO,EAAE,KACL,EAAE,SAAS,eAAe,GAC1B,EAAE,WAAW,MAAO,IAAI,UAAU,CAAC,IAAI,KAAA,CAAU,CACrD;AACJ,CAAC;AAID,MAAa,wBAAwB,EAAE,OAAO;CAC1C,WAAW;CACX,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;CAC/B,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC;CAChC,yBAAyB,EAAE,OAAO;AACtC,CAAC"}
+{"version":3,"file":"profile.schemas.js","names":["v"],"sources":["../../../../src/services/auth/profile/profile.schemas.ts"],"sourcesContent":["import * as v from \"../../../shared/validation.js\";\nimport { PublicIdSchema, TimestampSchema } from \"../../../shared/schemas.js\";\nimport { tsObjToMs } from \"../../../utils/time.js\";\n\nexport const ProfileSchema = v.object({\n    username: v.string(),\n    bio: v.string(),\n    website: v.string(),\n    twitter: v.string(),\n    twitterVerified: v.optional(v.boolean(), false),\n    discord: v.string(),\n    discordVerified: v.optional(v.boolean(), false),\n    avatarUrl: v.string(),\n    createdAt: v.pipe(\n        v.optional(TimestampSchema),\n        v.transform((v) => (v ? tsObjToMs(v) : undefined)),\n    ),\n    nextUsernameChangeAt: v.pipe(\n        v.optional(TimestampSchema),\n        v.transform((v) => (v ? tsObjToMs(v) : undefined)),\n    ),\n    vipTier: v.number(),\n    usernameUnlocked: v.optional(v.boolean(), false),\n});\n\nexport type Profile = v.InferOutput<typeof ProfileSchema>;\n// Deliberately non-strict: update() accepts a round-tripped Profile\n// ({ ...profile, bio }) and strips its readonly fields instead of rejecting.\nexport const UpdateProfileInputSchema = v.object({\n    username: v.optional(v.string()),\n    bio: v.optional(v.string()),\n    website: v.optional(v.string()),\n    twitter: v.optional(v.string()),\n    avatarUrl: v.optional(v.string()),\n});\nexport type UpdateProfileInput = v.InferInput<typeof UpdateProfileInputSchema>;\n\nexport const UsernameHistoryEntrySchema = v.object({\n    username: v.string(),\n    setAt: v.pipe(\n        v.optional(TimestampSchema),\n        v.transform((v) => (v ? tsObjToMs(v) : undefined)),\n    ),\n});\n\nexport type UsernameHistoryEntry = v.InferOutput<typeof UsernameHistoryEntrySchema>;\n\nexport const AccountIdentitySchema = v.object({\n    accountId: PublicIdSchema,\n    username: v.optional(v.string()),\n    avatarUrl: v.optional(v.string()),\n    rootSmartAccountAddress: v.string(),\n});\n\nexport type AccountIdentity = v.InferOutput<typeof AccountIdentitySchema>;\n"],"mappings":";;;;AAIA,MAAa,gBAAgBA,mBAAE,OAAO;CAClC,UAAUA,mBAAE,OAAO;CACnB,KAAKA,mBAAE,OAAO;CACd,SAASA,mBAAE,OAAO;CAClB,SAASA,mBAAE,OAAO;CAClB,iBAAiBA,mBAAE,SAASA,mBAAE,QAAQ,GAAG,KAAK;CAC9C,SAASA,mBAAE,OAAO;CAClB,iBAAiBA,mBAAE,SAASA,mBAAE,QAAQ,GAAG,KAAK;CAC9C,WAAWA,mBAAE,OAAO;CACpB,WAAWA,mBAAE,KACTA,mBAAE,SAAS,eAAe,GAC1BA,mBAAE,WAAW,MAAO,IAAI,UAAU,CAAC,IAAI,KAAA,CAAU,CACrD;CACA,sBAAsBA,mBAAE,KACpBA,mBAAE,SAAS,eAAe,GAC1BA,mBAAE,WAAW,MAAO,IAAI,UAAU,CAAC,IAAI,KAAA,CAAU,CACrD;CACA,SAASA,mBAAE,OAAO;CAClB,kBAAkBA,mBAAE,SAASA,mBAAE,QAAQ,GAAG,KAAK;AACnD,CAAC;AAKD,MAAa,2BAA2BA,mBAAE,OAAO;CAC7C,UAAUA,mBAAE,SAASA,mBAAE,OAAO,CAAC;CAC/B,KAAKA,mBAAE,SAASA,mBAAE,OAAO,CAAC;CAC1B,SAASA,mBAAE,SAASA,mBAAE,OAAO,CAAC;CAC9B,SAASA,mBAAE,SAASA,mBAAE,OAAO,CAAC;CAC9B,WAAWA,mBAAE,SAASA,mBAAE,OAAO,CAAC;AACpC,CAAC;AAGD,MAAa,6BAA6BA,mBAAE,OAAO;CAC/C,UAAUA,mBAAE,OAAO;CACnB,OAAOA,mBAAE,KACLA,mBAAE,SAAS,eAAe,GAC1BA,mBAAE,WAAW,MAAO,IAAI,UAAU,CAAC,IAAI,KAAA,CAAU,CACrD;AACJ,CAAC;AAID,MAAa,wBAAwBA,mBAAE,OAAO;CAC1C,WAAW;CACX,UAAUA,mBAAE,SAASA,mBAAE,OAAO,CAAC;CAC/B,WAAWA,mBAAE,SAASA,mBAAE,OAAO,CAAC;CAChC,yBAAyBA,mBAAE,OAAO;AACtC,CAAC"}

package/dist/services/auth/session.d.ts

@@ -27,7 +27,7 @@ interface EnsureSessionParams {
 }
 declare function emptyServerSessionSnapshot(): ServerSessionSnapshot;
 /**
- * Parses a serialized session cookie into a display-only server snapshot.
+ * Parses bearer authentication and display-only session cookies into a server snapshot.
  */
 declare function parseServerSessionSnapshot(cookies: CookieGetter, environment: PolyesterEnvironment): ServerSessionSnapshot;
 /**

package/dist/services/auth/session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.d.ts","names":[],"sources":["../../../src/services/auth/session.ts"],"mappings":";;;;;UAyBiB;EACb;;UAGa;EACb;EACA,cAAc;EACd,UAAU;EACV,aAAa;EACb;EACA;EACA;EACA,gBAAgB;EAChB;;UAGa;EACb,UAAU;EACV,aAAa;EACb;EACA;EACA;EACA;;iBAoEY,8BAA8B;;;;iBAgB9B,2BACZ,SAAS,cACT,aAAa,uBACd;;;;cA2BU;;EAIG,cAAE;IAA4B;;EAK1C,OAAO;EAUP,yBAAyB,cAAc;EAYvC,YAAY,QAAQ,0BAA0B,cAAc;EAsB5D,cAAc,QAAQ,qBAAqB,UAAU,uBAAuB;EA8B5E,YAAY,yBAAyB,UAAU;EAO/C,iBACI,eAAe,KAAK,qCACpB,UAAU;EAoBd"}
+{"version":3,"file":"session.d.ts","names":[],"sources":["../../../src/services/auth/session.ts"],"mappings":";;;;;UAyBiB;EACb;;UAGa;EACb;EACA,cAAc;EACd,UAAU;EACV,aAAa;EACb;EACA;EACA;EACA,gBAAgB;EAChB;;UAGa;EACb,UAAU;EACV,aAAa;EACb;EACA;EACA;EACA;;iBAoEY,8BAA8B;;;;iBAgB9B,2BACZ,SAAS,cACT,aAAa,uBACd;;;;cA+BU;;EAIG,cAAE;IAA4B;;EAK1C,OAAO;EAUP,yBAAyB,cAAc;EAYvC,YAAY,QAAQ,0BAA0B,cAAc;EAsB5D,cAAc,QAAQ,qBAAqB,UAAU,uBAAuB;EA8B5E,YAAY,yBAAyB,UAAU;EAO/C,iBACI,eAAe,KAAK,qCACpB,UAAU;EAoBd"}

package/dist/services/auth/session.js

@@ -70,13 +70,17 @@ function emptyServerSessionSnapshot() {
 	};
 }
 /**
-* Parses a serialized session cookie into a display-only server snapshot.
+* Parses bearer authentication and display-only session cookies into a server snapshot.
 */
 function parseServerSessionSnapshot(cookies, environment) {
 	const sessionValue = getCookieValue(cookies, POLYESTER_SESSION_COOKIE_NAME);
 	const bearerToken = getCookieValue(cookies, "polyester_auth_token") ?? null;
 	const session = sessionValue ? SessionCodec.decode(sessionValue) : null;
-	if (!session || session.environmentFingerprint !== environment.fingerprint) return emptyServerSessionSnapshot();
+	if (!session) return {
+		...emptyServerSessionSnapshot(),
+		bearerToken
+	};
+	if (session.environmentFingerprint !== environment.fingerprint) return emptyServerSessionSnapshot();
 	return {
 		environmentFingerprint: session.environmentFingerprint,
 		hasDisplaySession: true,

package/dist/services/auth/session.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.js","names":["#lastRawValue","#lastDecoded","#environmentFingerprint","#session"],"sources":["../../../src/services/auth/session.ts"],"sourcesContent":["import {\n    setCookie,\n    deleteCookie,\n    getCookie,\n    getCookieValue,\n    shouldSecureCookies,\n    type CookieGetter,\n} from \"../../utils/cookies.js\";\nimport {\n    POLYESTER_AUTH_TOKEN_COOKIE_NAME,\n    POLYESTER_SESSION_COOKIE_NAME,\n    POLYESTER_LOGIN_COOKIE_MAX_AGE,\n} from \"./cookie-constants.js\";\nimport { SessionCodec } from \"./session-codec.js\";\nimport type { PolyesterEnvironment } from \"../../environment.js\";\nimport type { AuthTokenStorage, AuthTokenStorageSetOptions } from \"./token-storage.js\";\nimport type {\n    ActiveAccountInfo,\n    AuthLoginMethod,\n    ServerSessionSnapshot,\n    SessionData,\n} from \"./session.types.js\";\n\nexport type { ActiveAccountInfo, AuthLoginMethod, ServerSessionSnapshot, SessionData };\n\nexport interface SessionCookieOptions {\n    maxAgeSeconds?: number | null;\n}\n\nexport interface CommitLoginSessionParams {\n    accessToken: string;\n    tokenOptions: AuthTokenStorageSetOptions;\n    provider: SessionData[\"provider\"];\n    loginMethod: AuthLoginMethod | null;\n    primaryWallet: string;\n    smartAccount: string;\n    accountId: string;\n    activeAccount?: ActiveAccountInfo;\n    username?: string;\n}\n\nexport interface EnsureSessionParams {\n    provider: SessionData[\"provider\"];\n    loginMethod: AuthLoginMethod | null;\n    primaryWallet: string;\n    smartAccount: string;\n    accountId: string;\n    username?: string;\n}\n\nfunction resolveSessionCookieMaxAge(options?: SessionCookieOptions): number | undefined {\n    if (!options) return POLYESTER_LOGIN_COOKIE_MAX_AGE;\n    return options.maxAgeSeconds ?? undefined;\n}\n\n/**\n * Reads and writes the browser display-session cookie.\n */\nclass PolyesterSessionManager {\n    /**\n     * Replaces the current session state.\n     */\n    set(session: SessionData, options?: SessionCookieOptions): void {\n        setCookie({\n            name: POLYESTER_SESSION_COOKIE_NAME,\n            value: SessionCodec.encode(session),\n            options: {\n                path: \"/\",\n                maxAge: resolveSessionCookieMaxAge(options),\n                secure: shouldSecureCookies(),\n                sameSite: \"lax\",\n            },\n        });\n    }\n\n    // The session is re-read on every authenticated RPC; memoize the decode\n    // (JSON.parse + schema validation) on the raw cookie value.\n    #lastRawValue: string | null = null;\n    #lastDecoded: SessionData | null = null;\n\n    /**\n     * Returns the current session state, or null when no session is active.\n     */\n    get(): SessionData | null {\n        const value = getCookie(POLYESTER_SESSION_COOKIE_NAME);\n        if (!value) {\n            this.#lastRawValue = null;\n            this.#lastDecoded = null;\n            return null;\n        }\n        if (value === this.#lastRawValue) return this.#lastDecoded;\n\n        const session = SessionCodec.decode(value);\n        if (!session) {\n            this.clear();\n            this.#lastRawValue = null;\n            this.#lastDecoded = null;\n            return null;\n        }\n\n        this.#lastRawValue = value;\n        this.#lastDecoded = session;\n        return session;\n    }\n\n    /**\n     * Clears the current session state.\n     */\n    clear(): void {\n        deleteCookie(POLYESTER_SESSION_COOKIE_NAME);\n    }\n}\n\nexport const polyesterSession = new PolyesterSessionManager();\n\nexport function emptyServerSessionSnapshot(): ServerSessionSnapshot {\n    return {\n        environmentFingerprint: null,\n        hasDisplaySession: false,\n        provider: null,\n        loginMethod: null,\n        accountAddresses: null,\n        activeAccount: null,\n        bearerToken: null,\n        username: null,\n    };\n}\n\n/**\n * Parses a serialized session cookie into a display-only server snapshot.\n */\nexport function parseServerSessionSnapshot(\n    cookies: CookieGetter,\n    environment: PolyesterEnvironment,\n): ServerSessionSnapshot {\n    const sessionValue = getCookieValue(cookies, POLYESTER_SESSION_COOKIE_NAME);\n    const bearerToken = getCookieValue(cookies, POLYESTER_AUTH_TOKEN_COOKIE_NAME) ?? null;\n    const session = sessionValue ? SessionCodec.decode(sessionValue) : null;\n\n    if (!session || session.environmentFingerprint !== environment.fingerprint) {\n        return emptyServerSessionSnapshot();\n    }\n\n    return {\n        environmentFingerprint: session.environmentFingerprint,\n        hasDisplaySession: true,\n        provider: session.provider,\n        loginMethod: session.loginMethod,\n        accountAddresses: {\n            ownerAddress: session.primaryWallet,\n            accountAddress: session.smartAccount,\n        },\n        activeAccount: session.activeAccount ?? null,\n        bearerToken,\n        username: session.username ?? null,\n    };\n}\n\n/**\n * Owns environment-bound auth session transitions for browser clients.\n */\nexport class AuthSessionStore {\n    #environmentFingerprint: string;\n    #session: PolyesterSessionManager;\n\n    constructor({ environmentFingerprint }: { environmentFingerprint: string }) {\n        this.#environmentFingerprint = environmentFingerprint;\n        this.#session = polyesterSession;\n    }\n\n    get(): SessionData | null {\n        const session = this.#session.get();\n        if (!session) return null;\n        if (session.environmentFingerprint !== this.#environmentFingerprint) {\n            this.#session.clear();\n            return null;\n        }\n        return session;\n    }\n\n    getEnvironmentBoundToken(tokenStorage: AuthTokenStorage): string | null {\n        const token = tokenStorage.get();\n        if (!token) return null;\n\n        if (!this.get()) {\n            tokenStorage.clear();\n            return null;\n        }\n\n        return token;\n    }\n\n    commitLogin(params: CommitLoginSessionParams, tokenStorage: AuthTokenStorage): void {\n        tokenStorage.set(params.accessToken, params.tokenOptions);\n        this.#session.set(\n            {\n                environmentFingerprint: this.#environmentFingerprint,\n                provider: params.provider,\n                loginMethod: params.loginMethod,\n                primaryWallet: params.primaryWallet,\n                smartAccount: params.smartAccount,\n                activeAccount: {\n                    accountId: params.activeAccount?.accountId ?? params.accountId,\n                    isMain: params.activeAccount?.isMain ?? true,\n                    mainAccountId: params.accountId,\n                    smartAccountAddress: params.activeAccount?.smartAccountAddress,\n                    label: params.activeAccount?.label,\n                },\n                username: params.username,\n            },\n            { maxAgeSeconds: params.tokenOptions.maxAgeSeconds },\n        );\n    }\n\n    ensureSession(params: EnsureSessionParams, options?: SessionCookieOptions): SessionData {\n        const existingSession = this.get();\n        if (existingSession) {\n            const username = params.username || undefined;\n            if (username === undefined || username === existingSession.username) {\n                return existingSession;\n            }\n\n            const session = { ...existingSession, username };\n            this.#session.set(session, options);\n            return session;\n        }\n\n        const session: SessionData = {\n            environmentFingerprint: this.#environmentFingerprint,\n            provider: params.provider,\n            loginMethod: params.loginMethod,\n            primaryWallet: params.primaryWallet,\n            smartAccount: params.smartAccount,\n            activeAccount: {\n                accountId: params.accountId,\n                isMain: true,\n                mainAccountId: params.accountId,\n            },\n            username: params.username,\n        };\n        this.#session.set(session, options);\n        return session;\n    }\n\n    setUsername(username: string | null, options?: SessionCookieOptions): void {\n        const session = this.get();\n        if (!session) return;\n\n        this.#session.set({ ...session, username: username || undefined }, options);\n    }\n\n    setActiveAccount(\n        activeAccount: Omit<ActiveAccountInfo, \"mainAccountId\">,\n        options?: SessionCookieOptions,\n    ): void {\n        const session = this.get();\n        if (!session) return;\n\n        const mainAccountId = session.activeAccount?.mainAccountId ?? activeAccount.accountId;\n        const smartAccountAddress = activeAccount.isMain\n            ? session.smartAccount\n            : activeAccount.smartAccountAddress;\n        const label = activeAccount.isMain ? undefined : activeAccount.label;\n        this.#session.set(\n            {\n                ...session,\n                activeAccount: { ...activeAccount, mainAccountId, smartAccountAddress, label },\n                username: session.username,\n            },\n            options,\n        );\n    }\n\n    clear(): void {\n        this.#session.clear();\n    }\n}\n"],"mappings":";;;;AAkDA,SAAS,2BAA2B,SAAoD;CACpF,IAAI,CAAC,SAAS,OAAO;CACrB,OAAO,QAAQ,iBAAiB,KAAA;AACpC;;;;AAKA,IAAM,0BAAN,MAA8B;;;;CAI1B,IAAI,SAAsB,SAAsC;EAC5D,UAAU;GACN,MAAM;GACN,OAAO,aAAa,OAAO,OAAO;GAClC,SAAS;IACL,MAAM;IACN,QAAQ,2BAA2B,OAAO;IAC1C,QAAQ,oBAAoB;IAC5B,UAAU;GACd;EACJ,CAAC;CACL;CAIA,gBAA+B;CAC/B,eAAmC;;;;CAKnC,MAA0B;EACtB,MAAM,QAAQ,UAAU,6BAA6B;EACrD,IAAI,CAAC,OAAO;GACR,KAAKA,gBAAgB;GACrB,KAAKC,eAAe;GACpB,OAAO;EACX;EACA,IAAI,UAAU,KAAKD,eAAe,OAAO,KAAKC;EAE9C,MAAM,UAAU,aAAa,OAAO,KAAK;EACzC,IAAI,CAAC,SAAS;GACV,KAAK,MAAM;GACX,KAAKD,gBAAgB;GACrB,KAAKC,eAAe;GACpB,OAAO;EACX;EAEA,KAAKD,gBAAgB;EACrB,KAAKC,eAAe;EACpB,OAAO;CACX;;;;CAKA,QAAc;EACV,aAAa,6BAA6B;CAC9C;AACJ;AAEA,MAAa,mBAAmB,IAAI,wBAAwB;AAE5D,SAAgB,6BAAoD;CAChE,OAAO;EACH,wBAAwB;EACxB,mBAAmB;EACnB,UAAU;EACV,aAAa;EACb,kBAAkB;EAClB,eAAe;EACf,aAAa;EACb,UAAU;CACd;AACJ;;;;AAKA,SAAgB,2BACZ,SACA,aACqB;CACrB,MAAM,eAAe,eAAe,SAAS,6BAA6B;CAC1E,MAAM,cAAc,eAAe,SAAA,sBAAyC,KAAK;CACjF,MAAM,UAAU,eAAe,aAAa,OAAO,YAAY,IAAI;CAEnE,IAAI,CAAC,WAAW,QAAQ,2BAA2B,YAAY,aAC3D,OAAO,2BAA2B;CAGtC,OAAO;EACH,wBAAwB,QAAQ;EAChC,mBAAmB;EACnB,UAAU,QAAQ;EAClB,aAAa,QAAQ;EACrB,kBAAkB;GACd,cAAc,QAAQ;GACtB,gBAAgB,QAAQ;EAC5B;EACA,eAAe,QAAQ,iBAAiB;EACxC;EACA,UAAU,QAAQ,YAAY;CAClC;AACJ;;;;AAKA,IAAa,mBAAb,MAA8B;CAC1B;CACA;CAEA,YAAY,EAAE,0BAA8D;EACxE,KAAKC,0BAA0B;EAC/B,KAAKC,WAAW;CACpB;CAEA,MAA0B;EACtB,MAAM,UAAU,KAAKA,SAAS,IAAI;EAClC,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,QAAQ,2BAA2B,KAAKD,yBAAyB;GACjE,KAAKC,SAAS,MAAM;GACpB,OAAO;EACX;EACA,OAAO;CACX;CAEA,yBAAyB,cAA+C;EACpE,MAAM,QAAQ,aAAa,IAAI;EAC/B,IAAI,CAAC,OAAO,OAAO;EAEnB,IAAI,CAAC,KAAK,IAAI,GAAG;GACb,aAAa,MAAM;GACnB,OAAO;EACX;EAEA,OAAO;CACX;CAEA,YAAY,QAAkC,cAAsC;EAChF,aAAa,IAAI,OAAO,aAAa,OAAO,YAAY;EACxD,KAAKA,SAAS,IACV;GACI,wBAAwB,KAAKD;GAC7B,UAAU,OAAO;GACjB,aAAa,OAAO;GACpB,eAAe,OAAO;GACtB,cAAc,OAAO;GACrB,eAAe;IACX,WAAW,OAAO,eAAe,aAAa,OAAO;IACrD,QAAQ,OAAO,eAAe,UAAU;IACxC,eAAe,OAAO;IACtB,qBAAqB,OAAO,eAAe;IAC3C,OAAO,OAAO,eAAe;GACjC;GACA,UAAU,OAAO;EACrB,GACA,EAAE,eAAe,OAAO,aAAa,cAAc,CACvD;CACJ;CAEA,cAAc,QAA6B,SAA6C;EACpF,MAAM,kBAAkB,KAAK,IAAI;EACjC,IAAI,iBAAiB;GACjB,MAAM,WAAW,OAAO,YAAY,KAAA;GACpC,IAAI,aAAa,KAAA,KAAa,aAAa,gBAAgB,UACvD,OAAO;GAGX,MAAM,UAAU;IAAE,GAAG;IAAiB;GAAS;GAC/C,KAAKC,SAAS,IAAI,SAAS,OAAO;GAClC,OAAO;EACX;EAEA,MAAM,UAAuB;GACzB,wBAAwB,KAAKD;GAC7B,UAAU,OAAO;GACjB,aAAa,OAAO;GACpB,eAAe,OAAO;GACtB,cAAc,OAAO;GACrB,eAAe;IACX,WAAW,OAAO;IAClB,QAAQ;IACR,eAAe,OAAO;GAC1B;GACA,UAAU,OAAO;EACrB;EACA,KAAKC,SAAS,IAAI,SAAS,OAAO;EAClC,OAAO;CACX;CAEA,YAAY,UAAyB,SAAsC;EACvE,MAAM,UAAU,KAAK,IAAI;EACzB,IAAI,CAAC,SAAS;EAEd,KAAKA,SAAS,IAAI;GAAE,GAAG;GAAS,UAAU,YAAY,KAAA;EAAU,GAAG,OAAO;CAC9E;CAEA,iBACI,eACA,SACI;EACJ,MAAM,UAAU,KAAK,IAAI;EACzB,IAAI,CAAC,SAAS;EAEd,MAAM,gBAAgB,QAAQ,eAAe,iBAAiB,cAAc;EAC5E,MAAM,sBAAsB,cAAc,SACpC,QAAQ,eACR,cAAc;EACpB,MAAM,QAAQ,cAAc,SAAS,KAAA,IAAY,cAAc;EAC/D,KAAKA,SAAS,IACV;GACI,GAAG;GACH,eAAe;IAAE,GAAG;IAAe;IAAe;IAAqB;GAAM;GAC7E,UAAU,QAAQ;EACtB,GACA,OACJ;CACJ;CAEA,QAAc;EACV,KAAKA,SAAS,MAAM;CACxB;AACJ"}
+{"version":3,"file":"session.js","names":["#lastRawValue","#lastDecoded","#environmentFingerprint","#session"],"sources":["../../../src/services/auth/session.ts"],"sourcesContent":["import {\n    setCookie,\n    deleteCookie,\n    getCookie,\n    getCookieValue,\n    shouldSecureCookies,\n    type CookieGetter,\n} from \"../../utils/cookies.js\";\nimport {\n    POLYESTER_AUTH_TOKEN_COOKIE_NAME,\n    POLYESTER_SESSION_COOKIE_NAME,\n    POLYESTER_LOGIN_COOKIE_MAX_AGE,\n} from \"./cookie-constants.js\";\nimport { SessionCodec } from \"./session-codec.js\";\nimport type { PolyesterEnvironment } from \"../../environment.js\";\nimport type { AuthTokenStorage, AuthTokenStorageSetOptions } from \"./token-storage.js\";\nimport type {\n    ActiveAccountInfo,\n    AuthLoginMethod,\n    ServerSessionSnapshot,\n    SessionData,\n} from \"./session.types.js\";\n\nexport type { ActiveAccountInfo, AuthLoginMethod, ServerSessionSnapshot, SessionData };\n\nexport interface SessionCookieOptions {\n    maxAgeSeconds?: number | null;\n}\n\nexport interface CommitLoginSessionParams {\n    accessToken: string;\n    tokenOptions: AuthTokenStorageSetOptions;\n    provider: SessionData[\"provider\"];\n    loginMethod: AuthLoginMethod | null;\n    primaryWallet: string;\n    smartAccount: string;\n    accountId: string;\n    activeAccount?: ActiveAccountInfo;\n    username?: string;\n}\n\nexport interface EnsureSessionParams {\n    provider: SessionData[\"provider\"];\n    loginMethod: AuthLoginMethod | null;\n    primaryWallet: string;\n    smartAccount: string;\n    accountId: string;\n    username?: string;\n}\n\nfunction resolveSessionCookieMaxAge(options?: SessionCookieOptions): number | undefined {\n    if (!options) return POLYESTER_LOGIN_COOKIE_MAX_AGE;\n    return options.maxAgeSeconds ?? undefined;\n}\n\n/**\n * Reads and writes the browser display-session cookie.\n */\nclass PolyesterSessionManager {\n    /**\n     * Replaces the current session state.\n     */\n    set(session: SessionData, options?: SessionCookieOptions): void {\n        setCookie({\n            name: POLYESTER_SESSION_COOKIE_NAME,\n            value: SessionCodec.encode(session),\n            options: {\n                path: \"/\",\n                maxAge: resolveSessionCookieMaxAge(options),\n                secure: shouldSecureCookies(),\n                sameSite: \"lax\",\n            },\n        });\n    }\n\n    // The session is re-read on every authenticated RPC; memoize the decode\n    // (JSON.parse + schema validation) on the raw cookie value.\n    #lastRawValue: string | null = null;\n    #lastDecoded: SessionData | null = null;\n\n    /**\n     * Returns the current session state, or null when no session is active.\n     */\n    get(): SessionData | null {\n        const value = getCookie(POLYESTER_SESSION_COOKIE_NAME);\n        if (!value) {\n            this.#lastRawValue = null;\n            this.#lastDecoded = null;\n            return null;\n        }\n        if (value === this.#lastRawValue) return this.#lastDecoded;\n\n        const session = SessionCodec.decode(value);\n        if (!session) {\n            this.clear();\n            this.#lastRawValue = null;\n            this.#lastDecoded = null;\n            return null;\n        }\n\n        this.#lastRawValue = value;\n        this.#lastDecoded = session;\n        return session;\n    }\n\n    /**\n     * Clears the current session state.\n     */\n    clear(): void {\n        deleteCookie(POLYESTER_SESSION_COOKIE_NAME);\n    }\n}\n\nexport const polyesterSession = new PolyesterSessionManager();\n\nexport function emptyServerSessionSnapshot(): ServerSessionSnapshot {\n    return {\n        environmentFingerprint: null,\n        hasDisplaySession: false,\n        provider: null,\n        loginMethod: null,\n        accountAddresses: null,\n        activeAccount: null,\n        bearerToken: null,\n        username: null,\n    };\n}\n\n/**\n * Parses bearer authentication and display-only session cookies into a server snapshot.\n */\nexport function parseServerSessionSnapshot(\n    cookies: CookieGetter,\n    environment: PolyesterEnvironment,\n): ServerSessionSnapshot {\n    const sessionValue = getCookieValue(cookies, POLYESTER_SESSION_COOKIE_NAME);\n    const bearerToken = getCookieValue(cookies, POLYESTER_AUTH_TOKEN_COOKIE_NAME) ?? null;\n    const session = sessionValue ? SessionCodec.decode(sessionValue) : null;\n\n    if (!session) {\n        return { ...emptyServerSessionSnapshot(), bearerToken };\n    }\n\n    if (session.environmentFingerprint !== environment.fingerprint) {\n        return emptyServerSessionSnapshot();\n    }\n\n    return {\n        environmentFingerprint: session.environmentFingerprint,\n        hasDisplaySession: true,\n        provider: session.provider,\n        loginMethod: session.loginMethod,\n        accountAddresses: {\n            ownerAddress: session.primaryWallet,\n            accountAddress: session.smartAccount,\n        },\n        activeAccount: session.activeAccount ?? null,\n        bearerToken,\n        username: session.username ?? null,\n    };\n}\n\n/**\n * Owns environment-bound auth session transitions for browser clients.\n */\nexport class AuthSessionStore {\n    #environmentFingerprint: string;\n    #session: PolyesterSessionManager;\n\n    constructor({ environmentFingerprint }: { environmentFingerprint: string }) {\n        this.#environmentFingerprint = environmentFingerprint;\n        this.#session = polyesterSession;\n    }\n\n    get(): SessionData | null {\n        const session = this.#session.get();\n        if (!session) return null;\n        if (session.environmentFingerprint !== this.#environmentFingerprint) {\n            this.#session.clear();\n            return null;\n        }\n        return session;\n    }\n\n    getEnvironmentBoundToken(tokenStorage: AuthTokenStorage): string | null {\n        const token = tokenStorage.get();\n        if (!token) return null;\n\n        if (!this.get()) {\n            tokenStorage.clear();\n            return null;\n        }\n\n        return token;\n    }\n\n    commitLogin(params: CommitLoginSessionParams, tokenStorage: AuthTokenStorage): void {\n        tokenStorage.set(params.accessToken, params.tokenOptions);\n        this.#session.set(\n            {\n                environmentFingerprint: this.#environmentFingerprint,\n                provider: params.provider,\n                loginMethod: params.loginMethod,\n                primaryWallet: params.primaryWallet,\n                smartAccount: params.smartAccount,\n                activeAccount: {\n                    accountId: params.activeAccount?.accountId ?? params.accountId,\n                    isMain: params.activeAccount?.isMain ?? true,\n                    mainAccountId: params.accountId,\n                    smartAccountAddress: params.activeAccount?.smartAccountAddress,\n                    label: params.activeAccount?.label,\n                },\n                username: params.username,\n            },\n            { maxAgeSeconds: params.tokenOptions.maxAgeSeconds },\n        );\n    }\n\n    ensureSession(params: EnsureSessionParams, options?: SessionCookieOptions): SessionData {\n        const existingSession = this.get();\n        if (existingSession) {\n            const username = params.username || undefined;\n            if (username === undefined || username === existingSession.username) {\n                return existingSession;\n            }\n\n            const session = { ...existingSession, username };\n            this.#session.set(session, options);\n            return session;\n        }\n\n        const session: SessionData = {\n            environmentFingerprint: this.#environmentFingerprint,\n            provider: params.provider,\n            loginMethod: params.loginMethod,\n            primaryWallet: params.primaryWallet,\n            smartAccount: params.smartAccount,\n            activeAccount: {\n                accountId: params.accountId,\n                isMain: true,\n                mainAccountId: params.accountId,\n            },\n            username: params.username,\n        };\n        this.#session.set(session, options);\n        return session;\n    }\n\n    setUsername(username: string | null, options?: SessionCookieOptions): void {\n        const session = this.get();\n        if (!session) return;\n\n        this.#session.set({ ...session, username: username || undefined }, options);\n    }\n\n    setActiveAccount(\n        activeAccount: Omit<ActiveAccountInfo, \"mainAccountId\">,\n        options?: SessionCookieOptions,\n    ): void {\n        const session = this.get();\n        if (!session) return;\n\n        const mainAccountId = session.activeAccount?.mainAccountId ?? activeAccount.accountId;\n        const smartAccountAddress = activeAccount.isMain\n            ? session.smartAccount\n            : activeAccount.smartAccountAddress;\n        const label = activeAccount.isMain ? undefined : activeAccount.label;\n        this.#session.set(\n            {\n                ...session,\n                activeAccount: { ...activeAccount, mainAccountId, smartAccountAddress, label },\n                username: session.username,\n            },\n            options,\n        );\n    }\n\n    clear(): void {\n        this.#session.clear();\n    }\n}\n"],"mappings":";;;;AAkDA,SAAS,2BAA2B,SAAoD;CACpF,IAAI,CAAC,SAAS,OAAO;CACrB,OAAO,QAAQ,iBAAiB,KAAA;AACpC;;;;AAKA,IAAM,0BAAN,MAA8B;;;;CAI1B,IAAI,SAAsB,SAAsC;EAC5D,UAAU;GACN,MAAM;GACN,OAAO,aAAa,OAAO,OAAO;GAClC,SAAS;IACL,MAAM;IACN,QAAQ,2BAA2B,OAAO;IAC1C,QAAQ,oBAAoB;IAC5B,UAAU;GACd;EACJ,CAAC;CACL;CAIA,gBAA+B;CAC/B,eAAmC;;;;CAKnC,MAA0B;EACtB,MAAM,QAAQ,UAAU,6BAA6B;EACrD,IAAI,CAAC,OAAO;GACR,KAAKA,gBAAgB;GACrB,KAAKC,eAAe;GACpB,OAAO;EACX;EACA,IAAI,UAAU,KAAKD,eAAe,OAAO,KAAKC;EAE9C,MAAM,UAAU,aAAa,OAAO,KAAK;EACzC,IAAI,CAAC,SAAS;GACV,KAAK,MAAM;GACX,KAAKD,gBAAgB;GACrB,KAAKC,eAAe;GACpB,OAAO;EACX;EAEA,KAAKD,gBAAgB;EACrB,KAAKC,eAAe;EACpB,OAAO;CACX;;;;CAKA,QAAc;EACV,aAAa,6BAA6B;CAC9C;AACJ;AAEA,MAAa,mBAAmB,IAAI,wBAAwB;AAE5D,SAAgB,6BAAoD;CAChE,OAAO;EACH,wBAAwB;EACxB,mBAAmB;EACnB,UAAU;EACV,aAAa;EACb,kBAAkB;EAClB,eAAe;EACf,aAAa;EACb,UAAU;CACd;AACJ;;;;AAKA,SAAgB,2BACZ,SACA,aACqB;CACrB,MAAM,eAAe,eAAe,SAAS,6BAA6B;CAC1E,MAAM,cAAc,eAAe,SAAA,sBAAyC,KAAK;CACjF,MAAM,UAAU,eAAe,aAAa,OAAO,YAAY,IAAI;CAEnE,IAAI,CAAC,SACD,OAAO;EAAE,GAAG,2BAA2B;EAAG;CAAY;CAG1D,IAAI,QAAQ,2BAA2B,YAAY,aAC/C,OAAO,2BAA2B;CAGtC,OAAO;EACH,wBAAwB,QAAQ;EAChC,mBAAmB;EACnB,UAAU,QAAQ;EAClB,aAAa,QAAQ;EACrB,kBAAkB;GACd,cAAc,QAAQ;GACtB,gBAAgB,QAAQ;EAC5B;EACA,eAAe,QAAQ,iBAAiB;EACxC;EACA,UAAU,QAAQ,YAAY;CAClC;AACJ;;;;AAKA,IAAa,mBAAb,MAA8B;CAC1B;CACA;CAEA,YAAY,EAAE,0BAA8D;EACxE,KAAKC,0BAA0B;EAC/B,KAAKC,WAAW;CACpB;CAEA,MAA0B;EACtB,MAAM,UAAU,KAAKA,SAAS,IAAI;EAClC,IAAI,CAAC,SAAS,OAAO;EACrB,IAAI,QAAQ,2BAA2B,KAAKD,yBAAyB;GACjE,KAAKC,SAAS,MAAM;GACpB,OAAO;EACX;EACA,OAAO;CACX;CAEA,yBAAyB,cAA+C;EACpE,MAAM,QAAQ,aAAa,IAAI;EAC/B,IAAI,CAAC,OAAO,OAAO;EAEnB,IAAI,CAAC,KAAK,IAAI,GAAG;GACb,aAAa,MAAM;GACnB,OAAO;EACX;EAEA,OAAO;CACX;CAEA,YAAY,QAAkC,cAAsC;EAChF,aAAa,IAAI,OAAO,aAAa,OAAO,YAAY;EACxD,KAAKA,SAAS,IACV;GACI,wBAAwB,KAAKD;GAC7B,UAAU,OAAO;GACjB,aAAa,OAAO;GACpB,eAAe,OAAO;GACtB,cAAc,OAAO;GACrB,eAAe;IACX,WAAW,OAAO,eAAe,aAAa,OAAO;IACrD,QAAQ,OAAO,eAAe,UAAU;IACxC,eAAe,OAAO;IACtB,qBAAqB,OAAO,eAAe;IAC3C,OAAO,OAAO,eAAe;GACjC;GACA,UAAU,OAAO;EACrB,GACA,EAAE,eAAe,OAAO,aAAa,cAAc,CACvD;CACJ;CAEA,cAAc,QAA6B,SAA6C;EACpF,MAAM,kBAAkB,KAAK,IAAI;EACjC,IAAI,iBAAiB;GACjB,MAAM,WAAW,OAAO,YAAY,KAAA;GACpC,IAAI,aAAa,KAAA,KAAa,aAAa,gBAAgB,UACvD,OAAO;GAGX,MAAM,UAAU;IAAE,GAAG;IAAiB;GAAS;GAC/C,KAAKC,SAAS,IAAI,SAAS,OAAO;GAClC,OAAO;EACX;EAEA,MAAM,UAAuB;GACzB,wBAAwB,KAAKD;GAC7B,UAAU,OAAO;GACjB,aAAa,OAAO;GACpB,eAAe,OAAO;GACtB,cAAc,OAAO;GACrB,eAAe;IACX,WAAW,OAAO;IAClB,QAAQ;IACR,eAAe,OAAO;GAC1B;GACA,UAAU,OAAO;EACrB;EACA,KAAKC,SAAS,IAAI,SAAS,OAAO;EAClC,OAAO;CACX;CAEA,YAAY,UAAyB,SAAsC;EACvE,MAAM,UAAU,KAAK,IAAI;EACzB,IAAI,CAAC,SAAS;EAEd,KAAKA,SAAS,IAAI;GAAE,GAAG;GAAS,UAAU,YAAY,KAAA;EAAU,GAAG,OAAO;CAC9E;CAEA,iBACI,eACA,SACI;EACJ,MAAM,UAAU,KAAK,IAAI;EACzB,IAAI,CAAC,SAAS;EAEd,MAAM,gBAAgB,QAAQ,eAAe,iBAAiB,cAAc;EAC5E,MAAM,sBAAsB,cAAc,SACpC,QAAQ,eACR,cAAc;EACpB,MAAM,QAAQ,cAAc,SAAS,KAAA,IAAY,cAAc;EAC/D,KAAKA,SAAS,IACV;GACI,GAAG;GACH,eAAe;IAAE,GAAG;IAAe;IAAe;IAAqB;GAAM;GAC7E,UAAU,QAAQ;EACtB,GACA,OACJ;CACJ;CAEA,QAAc;EACV,KAAKA,SAAS,MAAM;CACxB;AACJ"}

package/dist/services/auth/session.schemas.js

@@ -1,6 +1,6 @@
-import * as v from "valibot";
+import { validation_exports } from "../../shared/validation.js";
 //#region src/services/auth/session.schemas.ts
-const AuthLoginMethodSchema = v.picklist([
+const AuthLoginMethodSchema = validation_exports.picklist([
 	"google",
 	"email",
 	"metamask",
@@ -8,31 +8,31 @@ const AuthLoginMethodSchema = v.picklist([
 	"phantom",
 	"walletconnect"
 ]);
-const ActiveAccountInfoSchema = v.object({
-	accountId: v.string(),
-	isMain: v.boolean(),
-	mainAccountId: v.string(),
-	smartAccountAddress: v.optional(v.string()),
-	label: v.optional(v.string())
+const ActiveAccountInfoSchema = validation_exports.object({
+	accountId: validation_exports.string(),
+	isMain: validation_exports.boolean(),
+	mainAccountId: validation_exports.string(),
+	smartAccountAddress: validation_exports.optional(validation_exports.string()),
+	label: validation_exports.optional(validation_exports.string())
 });
-const SessionDataSchema = v.object({
-	environmentFingerprint: v.string(),
-	provider: v.picklist([
+const SessionDataSchema = validation_exports.object({
+	environmentFingerprint: validation_exports.string(),
+	provider: validation_exports.picklist([
 		"metamask",
 		"turnkey",
 		"other"
 	]),
-	loginMethod: v.nullable(AuthLoginMethodSchema),
-	primaryWallet: v.string(),
-	smartAccount: v.string(),
-	activeAccount: v.optional(ActiveAccountInfoSchema),
-	username: v.optional(v.string())
+	loginMethod: validation_exports.nullable(AuthLoginMethodSchema),
+	primaryWallet: validation_exports.string(),
+	smartAccount: validation_exports.string(),
+	activeAccount: validation_exports.optional(ActiveAccountInfoSchema),
+	username: validation_exports.optional(validation_exports.string())
 });
 /**
 * Parses raw session data into the SDK session shape.
 */
 function parseSessionData(value) {
-	const parsed = v.safeParse(SessionDataSchema, value);
+	const parsed = validation_exports.safeParse(SessionDataSchema, value);
 	return parsed.success ? parsed.output : null;
 }
 //#endregion

package/dist/services/auth/session.schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"session.schemas.js","names":[],"sources":["../../../src/services/auth/session.schemas.ts"],"sourcesContent":["import * as v from \"valibot\";\nimport type { SessionData } from \"./session.types.js\";\n\nexport const AuthLoginMethodSchema = v.picklist([\n    \"google\",\n    \"email\",\n    \"metamask\",\n    \"rabby\",\n    \"phantom\",\n    \"walletconnect\",\n]);\n\nexport const ActiveAccountInfoSchema = v.object({\n    accountId: v.string(),\n    isMain: v.boolean(),\n    mainAccountId: v.string(),\n    smartAccountAddress: v.optional(v.string()),\n    label: v.optional(v.string()),\n});\n\nexport const SessionDataSchema = v.object({\n    environmentFingerprint: v.string(),\n    provider: v.picklist([\"metamask\", \"turnkey\", \"other\"]),\n    loginMethod: v.nullable(AuthLoginMethodSchema),\n    primaryWallet: v.string(),\n    smartAccount: v.string(),\n    activeAccount: v.optional(ActiveAccountInfoSchema),\n    username: v.optional(v.string()),\n});\n\n/**\n * Parses raw session data into the SDK session shape.\n */\nexport function parseSessionData(value: unknown): SessionData | null {\n    const parsed = v.safeParse(SessionDataSchema, value);\n    return parsed.success ? parsed.output : null;\n}\n"],"mappings":";;AAGA,MAAa,wBAAwB,EAAE,SAAS;CAC5C;CACA;CACA;CACA;CACA;CACA;AACJ,CAAC;AAED,MAAa,0BAA0B,EAAE,OAAO;CAC5C,WAAW,EAAE,OAAO;CACpB,QAAQ,EAAE,QAAQ;CAClB,eAAe,EAAE,OAAO;CACxB,qBAAqB,EAAE,SAAS,EAAE,OAAO,CAAC;CAC1C,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC;AAChC,CAAC;AAED,MAAa,oBAAoB,EAAE,OAAO;CACtC,wBAAwB,EAAE,OAAO;CACjC,UAAU,EAAE,SAAS;EAAC;EAAY;EAAW;CAAO,CAAC;CACrD,aAAa,EAAE,SAAS,qBAAqB;CAC7C,eAAe,EAAE,OAAO;CACxB,cAAc,EAAE,OAAO;CACvB,eAAe,EAAE,SAAS,uBAAuB;CACjD,UAAU,EAAE,SAAS,EAAE,OAAO,CAAC;AACnC,CAAC;;;;AAKD,SAAgB,iBAAiB,OAAoC;CACjE,MAAM,SAAS,EAAE,UAAU,mBAAmB,KAAK;CACnD,OAAO,OAAO,UAAU,OAAO,SAAS;AAC5C"}
+{"version":3,"file":"session.schemas.js","names":["v"],"sources":["../../../src/services/auth/session.schemas.ts"],"sourcesContent":["import * as v from \"../../shared/validation.js\";\nimport type { SessionData } from \"./session.types.js\";\n\nexport const AuthLoginMethodSchema = v.picklist([\n    \"google\",\n    \"email\",\n    \"metamask\",\n    \"rabby\",\n    \"phantom\",\n    \"walletconnect\",\n]);\n\nexport const ActiveAccountInfoSchema = v.object({\n    accountId: v.string(),\n    isMain: v.boolean(),\n    mainAccountId: v.string(),\n    smartAccountAddress: v.optional(v.string()),\n    label: v.optional(v.string()),\n});\n\nexport const SessionDataSchema = v.object({\n    environmentFingerprint: v.string(),\n    provider: v.picklist([\"metamask\", \"turnkey\", \"other\"]),\n    loginMethod: v.nullable(AuthLoginMethodSchema),\n    primaryWallet: v.string(),\n    smartAccount: v.string(),\n    activeAccount: v.optional(ActiveAccountInfoSchema),\n    username: v.optional(v.string()),\n});\n\n/**\n * Parses raw session data into the SDK session shape.\n */\nexport function parseSessionData(value: unknown): SessionData | null {\n    const parsed = v.safeParse(SessionDataSchema, value);\n    return parsed.success ? parsed.output : null;\n}\n"],"mappings":";;AAGA,MAAa,wBAAwBA,mBAAE,SAAS;CAC5C;CACA;CACA;CACA;CACA;CACA;AACJ,CAAC;AAED,MAAa,0BAA0BA,mBAAE,OAAO;CAC5C,WAAWA,mBAAE,OAAO;CACpB,QAAQA,mBAAE,QAAQ;CAClB,eAAeA,mBAAE,OAAO;CACxB,qBAAqBA,mBAAE,SAASA,mBAAE,OAAO,CAAC;CAC1C,OAAOA,mBAAE,SAASA,mBAAE,OAAO,CAAC;AAChC,CAAC;AAED,MAAa,oBAAoBA,mBAAE,OAAO;CACtC,wBAAwBA,mBAAE,OAAO;CACjC,UAAUA,mBAAE,SAAS;EAAC;EAAY;EAAW;CAAO,CAAC;CACrD,aAAaA,mBAAE,SAAS,qBAAqB;CAC7C,eAAeA,mBAAE,OAAO;CACxB,cAAcA,mBAAE,OAAO;CACvB,eAAeA,mBAAE,SAAS,uBAAuB;CACjD,UAAUA,mBAAE,SAASA,mBAAE,OAAO,CAAC;AACnC,CAAC;;;;AAKD,SAAgB,iBAAiB,OAAoC;CACjE,MAAM,SAASA,mBAAE,UAAU,mBAAmB,KAAK;CACnD,OAAO,OAAO,UAAU,OAAO,SAAS;AAC5C"}

package/dist/services/auth/session.types.d.ts

@@ -48,9 +48,10 @@ interface AuthHydrationData {
   ownerAddress?: HexAddress;
 }
 /**
- * Display-only session data parsed from client-readable cookies.
+ * Server-side cookie state for authentication and UI hydration.
  *
- * This data is unsigned and must not be used for authorization.
+ * Display-session fields are unsigned and must not be used for authorization.
+ * The bearer token is a credential, but only backend verification proves authentication.
  */
 interface ServerSessionSnapshot {
   environmentFingerprint: string | null;

package/dist/services/auth/session.types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session.types.d.ts","names":[],"sources":["../../../src/services/auth/session.types.ts"],"mappings":";;;;;;UAMiB;EACb;EACA;EACA;EACA;EACA;;KAGQ;;;;;UAYK;EACb;EACA;EACA,aAAa;EACb;EACA;EACA,gBAAgB;EAChB;;;;;;UAOa;EACb;EACA,gBAAgB;EAChB,cAAc;EACd;EACA,eAAe;;;;;;UAOF;EACb;EACA;EACA;EACA,sBAAsB;EACtB,eAAe;;;;;;;UAQF;EACb;EACA;EACA;EACA,aAAa;EACb;IAAoB;IAAsB;;EAC1C,eAAe;EACf;EACA"}
+{"version":3,"file":"session.types.d.ts","names":[],"sources":["../../../src/services/auth/session.types.ts"],"mappings":";;;;;;UAMiB;EACb;EACA;EACA;EACA;EACA;;KAGQ;;;;;UAYK;EACb;EACA;EACA,aAAa;EACb;EACA;EACA,gBAAgB;EAChB;;;;;;UAOa;EACb;EACA,gBAAgB;EAChB,cAAc;EACd;EACA,eAAe;;;;;;UAOF;EACb;EACA;EACA;EACA,sBAAsB;EACtB,eAAe;;;;;;;;UASF;EACb;EACA;EACA;EACA,aAAa;EACb;IAAoB;IAAsB;;EAC1C,eAAe;EACf;EACA"}

package/dist/services/balances/balances.d.ts

@@ -22,7 +22,7 @@ declare class BalancesService {
    */
   list(input?: AccountScopedInput, options?: PolyesterRequestOptions): Promise<LedgerBalance[]>;
   /**
-   * Returns columnar balance history for the resolved account scope over a selected range, optionally filtered by ledger asset and account buckets.
+   * Returns columnar balance history for the resolved account scope over a selected range, optionally filtered by a non-negative integer ledger asset ID and account buckets. Ledger 0 or omission includes all assets.
    */
   getBalanceHistory(input: BalanceHistoryInput, options?: PolyesterRequestOptions): Promise<BalanceHistoryResponse>;
   /**

package/dist/services/balances/balances.js

@@ -1,3 +1,4 @@
+import { parse, validation_exports } from "../../shared/validation.js";
 import { toConnectCallOptions } from "../../shared/request-options.js";
 import { resolveAccountScopedInput } from "../subaccount-resolver.js";
 import { accountScopeToSubaccountId } from "../../shared/account-scope.js";
@@ -6,7 +7,6 @@ import { publicationHandlerErrorContext } from "../../shared/subscription-errors
 import { createReadyGate } from "../../shared/decimal-surface.js";
 import { BalanceHistoryInputSchema, BalancesListInputSchema, EquityHistoryInputSchema, createBalanceHistoryResponseSchema, createEquityHistoryResponseSchema, createLedgerBalanceSchema } from "./balances.schemas.js";
 import { createClient } from "@connectrpc/connect";
-import * as v from "valibot";
 //#region src/services/balances/balances.ts
 /**
 * Reads and streams ledger balances plus balance and equity history for the authenticated account scope.
@@ -34,19 +34,19 @@ var BalancesService = class {
 	async list(input = {}, options) {
 		await this.#scales.ready();
 		const resolved = resolveAccountScopedInput(input, this.#resolver);
-		const validated = v.parse(BalancesListInputSchema, resolved);
+		const validated = parse(BalancesListInputSchema, resolved);
 		const res = await this.#client.getBalances({ subaccountId: accountScopeToSubaccountId(validated.account) }, toConnectCallOptions(options));
-		return v.parse(v.array(this.#ledgerBalanceSchema), res.balances);
+		return parse(validation_exports.array(this.#ledgerBalanceSchema), res.balances);
 	}
 	/**
-	* Returns columnar balance history for the resolved account scope over a selected range, optionally filtered by ledger asset and account buckets.
+	* Returns columnar balance history for the resolved account scope over a selected range, optionally filtered by a non-negative integer ledger asset ID and account buckets. Ledger 0 or omission includes all assets.
 	*/
 	async getBalanceHistory(input, options) {
 		await this.#scales.ready();
 		const resolved = resolveAccountScopedInput(input, this.#resolver);
-		const validated = v.parse(BalanceHistoryInputSchema, resolved);
+		const validated = parse(BalanceHistoryInputSchema, resolved);
 		const res = await this.#client.getBalanceHistory(validated, toConnectCallOptions(options));
-		return v.parse(this.#balanceHistoryResponseSchema, res);
+		return parse(this.#balanceHistoryResponseSchema, res);
 	}
 	/**
 	* Returns equity history series for the resolved account scope over a selected range, optionally grouped by account or asset and filtered by account buckets.
@@ -54,9 +54,9 @@ var BalancesService = class {
 	async getEquityHistory(input, options) {
 		await this.#scales.ready();
 		const resolved = resolveAccountScopedInput(input, this.#resolver);
-		const validated = v.parse(EquityHistoryInputSchema, resolved);
+		const validated = parse(EquityHistoryInputSchema, resolved);
 		const res = await this.#client.getEquityHistorySeries(validated, toConnectCallOptions(options));
-		return v.parse(this.#equityHistoryResponseSchema, res);
+		return parse(this.#equityHistoryResponseSchema, res);
 	}
 	/**
 	* Subscribes to private balance updates on private:ledger:balances:{accountId}:proto and emits every balance record as a decimal-string row. Records for assets unknown to the catalog route a CatalogLookupError to onError.
@@ -69,7 +69,7 @@ var BalancesService = class {
 			schema: AssetBalanceSchema,
 			onPublication: (data) => {
 				gate.run(() => {
-					const b = v.parse(this.#ledgerBalanceSchema, data);
+					const b = parse(this.#ledgerBalanceSchema, data);
 					input.onEvent(b);
 				});
 			},

package/dist/services/balances/balances.js.map

@@ -1 +1 @@
-{"version":3,"file":"balances.js","names":["#client","Proto.LedgerReadService","#realtime","#resolver","#scales","#ledgerBalanceSchema","#balanceHistoryResponseSchema","#equityHistoryResponseSchema","Proto.AssetBalanceSchema"],"sources":["../../../src/services/balances/balances.ts"],"sourcesContent":["import * as Proto from \"../../gen/ledger/read/v1/ledger_read_pb.js\";\nimport { createClient, type Client, type Transport } from \"@connectrpc/connect\";\nimport { publicationHandlerErrorContext } from \"../../shared/subscription-errors.js\";\nimport * as v from \"valibot\";\nimport type { PolyesterRealtime } from \"../../realtime/index.js\";\nimport { type SubaccountResolver, resolveAccountScopedInput } from \"../subaccount-resolver.js\";\nimport {\n    toConnectCallOptions,\n    type PolyesterRequestOptions,\n} from \"../../shared/request-options.js\";\nimport { accountScopeToSubaccountId, type AccountScopedInput } from \"../../shared/account-scope.js\";\nimport type { BaseSubscribeInput } from \"../../shared/types.js\";\nimport { createReadyGate, type SdkScales } from \"../../shared/decimal-surface.js\";\nimport {\n    BalanceHistoryInputSchema,\n    BalancesListInputSchema,\n    EquityHistoryInputSchema,\n    createBalanceHistoryResponseSchema,\n    createEquityHistoryResponseSchema,\n    createLedgerBalanceSchema,\n    type LedgerBalance,\n    type BalanceHistoryInput,\n    type BalanceHistoryResponse,\n    type EquityHistoryInput,\n    type EquityHistoryResponse,\n} from \"./balances.schemas.js\";\n\ninterface SubscribeBalancesInput extends BaseSubscribeInput<LedgerBalance> {\n    accountId: string;\n}\n\n/**\n * Reads and streams ledger balances plus balance and equity history for the authenticated account scope.\n */\nexport class BalancesService {\n    #client: Client<typeof Proto.LedgerReadService>;\n    #realtime: PolyesterRealtime;\n    #resolver?: SubaccountResolver;\n    #scales: SdkScales;\n    #ledgerBalanceSchema: ReturnType<typeof createLedgerBalanceSchema>;\n    #balanceHistoryResponseSchema: ReturnType<typeof createBalanceHistoryResponseSchema>;\n    #equityHistoryResponseSchema: ReturnType<typeof createEquityHistoryResponseSchema>;\n\n    constructor(\n        transport: Transport,\n        realtime: PolyesterRealtime,\n        resolver: SubaccountResolver | undefined,\n        scales: SdkScales,\n    ) {\n        this.#client = createClient(Proto.LedgerReadService, transport);\n        this.#realtime = realtime;\n        this.#resolver = resolver;\n        this.#scales = scales;\n        this.#ledgerBalanceSchema = createLedgerBalanceSchema();\n        this.#balanceHistoryResponseSchema = createBalanceHistoryResponseSchema();\n        this.#equityHistoryResponseSchema = createEquityHistoryResponseSchema(scales);\n    }\n\n    /**\n     * Returns current asset balances for the resolved root account or subaccount, including trading, funding, reserved, and available amounts as decimal strings.\n     */\n    async list(\n        input: AccountScopedInput = {},\n        options?: PolyesterRequestOptions,\n    ): Promise<LedgerBalance[]> {\n        await this.#scales.ready();\n        const resolved = resolveAccountScopedInput(input, this.#resolver);\n        const validated = v.parse(BalancesListInputSchema, resolved);\n        const res = await this.#client.getBalances(\n            {\n                subaccountId: accountScopeToSubaccountId(validated.account),\n            },\n            toConnectCallOptions(options),\n        );\n        return v.parse(v.array(this.#ledgerBalanceSchema), res.balances);\n    }\n\n    /**\n     * Returns columnar balance history for the resolved account scope over a selected range, optionally filtered by ledger asset and account buckets.\n     */\n    async getBalanceHistory(\n        input: BalanceHistoryInput,\n        options?: PolyesterRequestOptions,\n    ): Promise<BalanceHistoryResponse> {\n        await this.#scales.ready();\n        const resolved = resolveAccountScopedInput(input, this.#resolver);\n        const validated = v.parse(BalanceHistoryInputSchema, resolved);\n        const res = await this.#client.getBalanceHistory(validated, toConnectCallOptions(options));\n        return v.parse(this.#balanceHistoryResponseSchema, res);\n    }\n\n    /**\n     * Returns equity history series for the resolved account scope over a selected range, optionally grouped by account or asset and filtered by account buckets.\n     */\n    async getEquityHistory(\n        input: EquityHistoryInput,\n        options?: PolyesterRequestOptions,\n    ): Promise<EquityHistoryResponse> {\n        await this.#scales.ready();\n        const resolved = resolveAccountScopedInput(input, this.#resolver);\n        const validated = v.parse(EquityHistoryInputSchema, resolved);\n        const res = await this.#client.getEquityHistorySeries(\n            validated,\n            toConnectCallOptions(options),\n        );\n        return v.parse(this.#equityHistoryResponseSchema, res);\n    }\n\n    /**\n     * Subscribes to private balance updates on private:ledger:balances:{accountId}:proto and emits every balance record as a decimal-string row. Records for assets unknown to the catalog route a CatalogLookupError to onError.\n     */\n    subscribe(input: SubscribeBalancesInput): () => void {\n        const channel = `private:ledger:balances:${input.accountId}:proto`;\n        const gate = createReadyGate(\n            () => this.#scales.ready(),\n            (error) => input.onError?.(publicationHandlerErrorContext(channel, error)),\n        );\n        return this.#realtime.connectProtoChannel({\n            channel,\n            schema: Proto.AssetBalanceSchema,\n            onPublication: (data) => {\n                gate.run(() => {\n                    const b = v.parse(this.#ledgerBalanceSchema, data);\n                    input.onEvent(b);\n                });\n            },\n            onConnected: input.onOpen,\n            onDisconnected: input.onClose,\n            onError: input.onError,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAkCA,IAAa,kBAAb,MAA6B;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACI,WACA,UACA,UACA,QACF;EACE,KAAKA,UAAU,aAAaC,mBAAyB,SAAS;EAC9D,KAAKC,YAAY;EACjB,KAAKC,YAAY;EACjB,KAAKC,UAAU;EACf,KAAKC,uBAAuB,0BAA0B;EACtD,KAAKC,gCAAgC,mCAAmC;EACxE,KAAKC,+BAA+B,kCAAkC,MAAM;CAChF;;;;CAKA,MAAM,KACF,QAA4B,CAAC,GAC7B,SACwB;EACxB,MAAM,KAAKH,QAAQ,MAAM;EACzB,MAAM,WAAW,0BAA0B,OAAO,KAAKD,SAAS;EAChE,MAAM,YAAY,EAAE,MAAM,yBAAyB,QAAQ;EAC3D,MAAM,MAAM,MAAM,KAAKH,QAAQ,YAC3B,EACI,cAAc,2BAA2B,UAAU,OAAO,EAC9D,GACA,qBAAqB,OAAO,CAChC;EACA,OAAO,EAAE,MAAM,EAAE,MAAM,KAAKK,oBAAoB,GAAG,IAAI,QAAQ;CACnE;;;;CAKA,MAAM,kBACF,OACA,SAC+B;EAC/B,MAAM,KAAKD,QAAQ,MAAM;EACzB,MAAM,WAAW,0BAA0B,OAAO,KAAKD,SAAS;EAChE,MAAM,YAAY,EAAE,MAAM,2BAA2B,QAAQ;EAC7D,MAAM,MAAM,MAAM,KAAKH,QAAQ,kBAAkB,WAAW,qBAAqB,OAAO,CAAC;EACzF,OAAO,EAAE,MAAM,KAAKM,+BAA+B,GAAG;CAC1D;;;;CAKA,MAAM,iBACF,OACA,SAC8B;EAC9B,MAAM,KAAKF,QAAQ,MAAM;EACzB,MAAM,WAAW,0BAA0B,OAAO,KAAKD,SAAS;EAChE,MAAM,YAAY,EAAE,MAAM,0BAA0B,QAAQ;EAC5D,MAAM,MAAM,MAAM,KAAKH,QAAQ,uBAC3B,WACA,qBAAqB,OAAO,CAChC;EACA,OAAO,EAAE,MAAM,KAAKO,8BAA8B,GAAG;CACzD;;;;CAKA,UAAU,OAA2C;EACjD,MAAM,UAAU,2BAA2B,MAAM,UAAU;EAC3D,MAAM,OAAO,sBACH,KAAKH,QAAQ,MAAM,IACxB,UAAU,MAAM,UAAU,+BAA+B,SAAS,KAAK,CAAC,CAC7E;EACA,OAAO,KAAKF,UAAU,oBAAoB;GACtC;GACA,QAAQM;GACR,gBAAgB,SAAS;IACrB,KAAK,UAAU;KACX,MAAM,IAAI,EAAE,MAAM,KAAKH,sBAAsB,IAAI;KACjD,MAAM,QAAQ,CAAC;IACnB,CAAC;GACL;GACA,aAAa,MAAM;GACnB,gBAAgB,MAAM;GACtB,SAAS,MAAM;EACnB,CAAC;CACL;AACJ"}
+{"version":3,"file":"balances.js","names":["#client","Proto.LedgerReadService","#realtime","#resolver","#scales","#ledgerBalanceSchema","#balanceHistoryResponseSchema","#equityHistoryResponseSchema","v.parse","v","Proto.AssetBalanceSchema"],"sources":["../../../src/services/balances/balances.ts"],"sourcesContent":["import * as Proto from \"../../gen/ledger/read/v1/ledger_read_pb.js\";\nimport { createClient, type Client, type Transport } from \"@connectrpc/connect\";\nimport { publicationHandlerErrorContext } from \"../../shared/subscription-errors.js\";\nimport * as v from \"../../shared/validation.js\";\nimport type { PolyesterRealtime } from \"../../realtime/index.js\";\nimport { type SubaccountResolver, resolveAccountScopedInput } from \"../subaccount-resolver.js\";\nimport {\n    toConnectCallOptions,\n    type PolyesterRequestOptions,\n} from \"../../shared/request-options.js\";\nimport { accountScopeToSubaccountId, type AccountScopedInput } from \"../../shared/account-scope.js\";\nimport type { BaseSubscribeInput } from \"../../shared/types.js\";\nimport { createReadyGate, type SdkScales } from \"../../shared/decimal-surface.js\";\nimport {\n    BalanceHistoryInputSchema,\n    BalancesListInputSchema,\n    EquityHistoryInputSchema,\n    createBalanceHistoryResponseSchema,\n    createEquityHistoryResponseSchema,\n    createLedgerBalanceSchema,\n    type LedgerBalance,\n    type BalanceHistoryInput,\n    type BalanceHistoryResponse,\n    type EquityHistoryInput,\n    type EquityHistoryResponse,\n} from \"./balances.schemas.js\";\n\ninterface SubscribeBalancesInput extends BaseSubscribeInput<LedgerBalance> {\n    accountId: string;\n}\n\n/**\n * Reads and streams ledger balances plus balance and equity history for the authenticated account scope.\n */\nexport class BalancesService {\n    #client: Client<typeof Proto.LedgerReadService>;\n    #realtime: PolyesterRealtime;\n    #resolver?: SubaccountResolver;\n    #scales: SdkScales;\n    #ledgerBalanceSchema: ReturnType<typeof createLedgerBalanceSchema>;\n    #balanceHistoryResponseSchema: ReturnType<typeof createBalanceHistoryResponseSchema>;\n    #equityHistoryResponseSchema: ReturnType<typeof createEquityHistoryResponseSchema>;\n\n    constructor(\n        transport: Transport,\n        realtime: PolyesterRealtime,\n        resolver: SubaccountResolver | undefined,\n        scales: SdkScales,\n    ) {\n        this.#client = createClient(Proto.LedgerReadService, transport);\n        this.#realtime = realtime;\n        this.#resolver = resolver;\n        this.#scales = scales;\n        this.#ledgerBalanceSchema = createLedgerBalanceSchema();\n        this.#balanceHistoryResponseSchema = createBalanceHistoryResponseSchema();\n        this.#equityHistoryResponseSchema = createEquityHistoryResponseSchema(scales);\n    }\n\n    /**\n     * Returns current asset balances for the resolved root account or subaccount, including trading, funding, reserved, and available amounts as decimal strings.\n     */\n    async list(\n        input: AccountScopedInput = {},\n        options?: PolyesterRequestOptions,\n    ): Promise<LedgerBalance[]> {\n        await this.#scales.ready();\n        const resolved = resolveAccountScopedInput(input, this.#resolver);\n        const validated = v.parse(BalancesListInputSchema, resolved);\n        const res = await this.#client.getBalances(\n            {\n                subaccountId: accountScopeToSubaccountId(validated.account),\n            },\n            toConnectCallOptions(options),\n        );\n        return v.parse(v.array(this.#ledgerBalanceSchema), res.balances);\n    }\n\n    /**\n     * Returns columnar balance history for the resolved account scope over a selected range, optionally filtered by a non-negative integer ledger asset ID and account buckets. Ledger 0 or omission includes all assets.\n     */\n    async getBalanceHistory(\n        input: BalanceHistoryInput,\n        options?: PolyesterRequestOptions,\n    ): Promise<BalanceHistoryResponse> {\n        await this.#scales.ready();\n        const resolved = resolveAccountScopedInput(input, this.#resolver);\n        const validated = v.parse(BalanceHistoryInputSchema, resolved);\n        const res = await this.#client.getBalanceHistory(validated, toConnectCallOptions(options));\n        return v.parse(this.#balanceHistoryResponseSchema, res);\n    }\n\n    /**\n     * Returns equity history series for the resolved account scope over a selected range, optionally grouped by account or asset and filtered by account buckets.\n     */\n    async getEquityHistory(\n        input: EquityHistoryInput,\n        options?: PolyesterRequestOptions,\n    ): Promise<EquityHistoryResponse> {\n        await this.#scales.ready();\n        const resolved = resolveAccountScopedInput(input, this.#resolver);\n        const validated = v.parse(EquityHistoryInputSchema, resolved);\n        const res = await this.#client.getEquityHistorySeries(\n            validated,\n            toConnectCallOptions(options),\n        );\n        return v.parse(this.#equityHistoryResponseSchema, res);\n    }\n\n    /**\n     * Subscribes to private balance updates on private:ledger:balances:{accountId}:proto and emits every balance record as a decimal-string row. Records for assets unknown to the catalog route a CatalogLookupError to onError.\n     */\n    subscribe(input: SubscribeBalancesInput): () => void {\n        const channel = `private:ledger:balances:${input.accountId}:proto`;\n        const gate = createReadyGate(\n            () => this.#scales.ready(),\n            (error) => input.onError?.(publicationHandlerErrorContext(channel, error)),\n        );\n        return this.#realtime.connectProtoChannel({\n            channel,\n            schema: Proto.AssetBalanceSchema,\n            onPublication: (data) => {\n                gate.run(() => {\n                    const b = v.parse(this.#ledgerBalanceSchema, data);\n                    input.onEvent(b);\n                });\n            },\n            onConnected: input.onOpen,\n            onDisconnected: input.onClose,\n            onError: input.onError,\n        });\n    }\n}\n"],"mappings":";;;;;;;;;;;;;AAkCA,IAAa,kBAAb,MAA6B;CACzB;CACA;CACA;CACA;CACA;CACA;CACA;CAEA,YACI,WACA,UACA,UACA,QACF;EACE,KAAKA,UAAU,aAAaC,mBAAyB,SAAS;EAC9D,KAAKC,YAAY;EACjB,KAAKC,YAAY;EACjB,KAAKC,UAAU;EACf,KAAKC,uBAAuB,0BAA0B;EACtD,KAAKC,gCAAgC,mCAAmC;EACxE,KAAKC,+BAA+B,kCAAkC,MAAM;CAChF;;;;CAKA,MAAM,KACF,QAA4B,CAAC,GAC7B,SACwB;EACxB,MAAM,KAAKH,QAAQ,MAAM;EACzB,MAAM,WAAW,0BAA0B,OAAO,KAAKD,SAAS;EAChE,MAAM,YAAYK,MAAQ,yBAAyB,QAAQ;EAC3D,MAAM,MAAM,MAAM,KAAKR,QAAQ,YAC3B,EACI,cAAc,2BAA2B,UAAU,OAAO,EAC9D,GACA,qBAAqB,OAAO,CAChC;EACA,OAAOQ,MAAQC,mBAAE,MAAM,KAAKJ,oBAAoB,GAAG,IAAI,QAAQ;CACnE;;;;CAKA,MAAM,kBACF,OACA,SAC+B;EAC/B,MAAM,KAAKD,QAAQ,MAAM;EACzB,MAAM,WAAW,0BAA0B,OAAO,KAAKD,SAAS;EAChE,MAAM,YAAYK,MAAQ,2BAA2B,QAAQ;EAC7D,MAAM,MAAM,MAAM,KAAKR,QAAQ,kBAAkB,WAAW,qBAAqB,OAAO,CAAC;EACzF,OAAOQ,MAAQ,KAAKF,+BAA+B,GAAG;CAC1D;;;;CAKA,MAAM,iBACF,OACA,SAC8B;EAC9B,MAAM,KAAKF,QAAQ,MAAM;EACzB,MAAM,WAAW,0BAA0B,OAAO,KAAKD,SAAS;EAChE,MAAM,YAAYK,MAAQ,0BAA0B,QAAQ;EAC5D,MAAM,MAAM,MAAM,KAAKR,QAAQ,uBAC3B,WACA,qBAAqB,OAAO,CAChC;EACA,OAAOQ,MAAQ,KAAKD,8BAA8B,GAAG;CACzD;;;;CAKA,UAAU,OAA2C;EACjD,MAAM,UAAU,2BAA2B,MAAM,UAAU;EAC3D,MAAM,OAAO,sBACH,KAAKH,QAAQ,MAAM,IACxB,UAAU,MAAM,UAAU,+BAA+B,SAAS,KAAK,CAAC,CAC7E;EACA,OAAO,KAAKF,UAAU,oBAAoB;GACtC;GACA,QAAQQ;GACR,gBAAgB,SAAS;IACrB,KAAK,UAAU;KACX,MAAM,IAAIF,MAAQ,KAAKH,sBAAsB,IAAI;KACjD,MAAM,QAAQ,CAAC;IACnB,CAAC;GACL;GACA,aAAa,MAAM;GACnB,gBAAgB,MAAM;GACtB,SAAS,MAAM;EACnB,CAAC;CACL;AACJ"}